Trojan.MulDrop9.49077

Техническая информация

Изменения в файловой системе

Создает следующие файлы

%TEMP%\7zs0feb3e84\cardreader_realtek_10.0.14393.21294_w10x64\0x0402.ini
%TEMP%\{f71c1a28-0828-4663-acbc-665ffd407081}\{5bc2b5ab-80de-4e83-b8cf-426902051d0a}\str8.tmp
%TEMP%\{f71c1a28-0828-4663-acbc-665ffd407081}\{5bc2b5ab-80de-4e83-b8cf-426902051d0a}\isr9.tmp
%TEMP%\{f71c1a28-0828-4663-acbc-665ffd407081}\{5bc2b5ab-80de-4e83-b8cf-426902051d0a}\defa.tmp
%TEMP%\{f71c1a28-0828-4663-acbc-665ffd407081}\{5bc2b5ab-80de-4e83-b8cf-426902051d0a}\_isb.tmp
%ProgramFiles%\realtek\realtek card reader\conc.tmp
%ProgramFiles%\realtek\realtek card reader\rmbd.tmp
%ProgramFiles%\realtek\realtek card reader\sdre.tmp
%TEMP%\{f71c1a28-0828-4663-acbc-665ffd407081}\cor6.tmp
%TEMP%\{f71c1a28-0828-4663-acbc-665ffd407081}\dot7.tmp
%ProgramFiles%\realtek\realtek card reader\setf.tmp
%ProgramFiles%\realtek\realtek card reader\rtc12.tmp
%ProgramFiles%\realtek\realtek card reader\rts13.tmp
%ProgramFiles%\realtek\realtek card reader\rts14.tmp
%ProgramFiles%\realtek\realtek card reader\rts15.tmp
%ProgramFiles%\realtek\realtek card reader\sdr16.tmp
<DRIVERS>\rts17.tmp
%ProgramFiles%\realtek\realtek card reader\dis18.tmp
%ProgramFiles%\realtek\realtek card reader\rsc10.tmp
%ProgramFiles%\realtek\realtek card reader\rtc11.tmp
%TEMP%\{f71c1a28-0828-4663-acbc-665ffd407081}\{5bc2b5ab-80de-4e83-b8cf-426902051d0a}\dif5.tmp
%TEMP%\{f71c1a28-0828-4663-acbc-665ffd407081}\{5bc2b5ab-80de-4e83-b8cf-426902051d0a}\fon4.tmp
%TEMP%\{f71c1a28-0828-4663-acbc-665ffd407081}\{5bc2b5ab-80de-4e83-b8cf-426902051d0a}\pkg3.tmp
%TEMP%\{d95e50d7-a9f2-47da-bd9e-471098af0fdb}\0x0415.ini
%TEMP%\{d95e50d7-a9f2-47da-bd9e-471098af0fdb}\0x0416.ini
%TEMP%\{d95e50d7-a9f2-47da-bd9e-471098af0fdb}\0x0418.ini
%TEMP%\{d95e50d7-a9f2-47da-bd9e-471098af0fdb}\0x0419.ini
%TEMP%\{d95e50d7-a9f2-47da-bd9e-471098af0fdb}\0x041a.ini
%TEMP%\{d95e50d7-a9f2-47da-bd9e-471098af0fdb}\0x041b.ini
%TEMP%\{d95e50d7-a9f2-47da-bd9e-471098af0fdb}\0x041d.ini
%TEMP%\{d95e50d7-a9f2-47da-bd9e-471098af0fdb}\0x041e.ini
%TEMP%\{d95e50d7-a9f2-47da-bd9e-471098af0fdb}\0x0414.ini
%TEMP%\{d95e50d7-a9f2-47da-bd9e-471098af0fdb}\0x041f.ini
%TEMP%\{d95e50d7-a9f2-47da-bd9e-471098af0fdb}\0x0424.ini
%TEMP%\{d95e50d7-a9f2-47da-bd9e-471098af0fdb}\0x042d.ini
%TEMP%\{d95e50d7-a9f2-47da-bd9e-471098af0fdb}\0x0804.ini
%TEMP%\{d95e50d7-a9f2-47da-bd9e-471098af0fdb}\0x0816.ini
%TEMP%\{d95e50d7-a9f2-47da-bd9e-471098af0fdb}\0x0c0c.ini
%TEMP%\{d95e50d7-a9f2-47da-bd9e-471098af0fdb}\0x0c1a.ini
%TEMP%\1.tmp
%TEMP%\{f71c1a28-0828-4663-acbc-665ffd407081}\{5bc2b5ab-80de-4e83-b8cf-426902051d0a}\set2.tmp
%TEMP%\{d95e50d7-a9f2-47da-bd9e-471098af0fdb}\0x0421.ini
%ProgramFiles%\realtek\realtek card reader\rev19.tmp
%ProgramFiles%\realtek\realtek card reader\rev1a.tmp
%ProgramFiles%\installshield installation information\{5bc2b5ab-80de-4e83-b8cf-426902051d0a}\use1b.tmp
%ProgramFiles%\installshield installation information\{5bc2b5ab-80de-4e83-b8cf-426902051d0a}\pkg1c.tmp
%ProgramFiles%\installshield installation information\{5bc2b5ab-80de-4e83-b8cf-426902051d0a}\0x034.tmp
%ProgramFiles%\installshield installation information\{5bc2b5ab-80de-4e83-b8cf-426902051d0a}\0x035.tmp
%ProgramFiles%\installshield installation information\{5bc2b5ab-80de-4e83-b8cf-426902051d0a}\0x036.tmp
%ProgramFiles%\installshield installation information\{5bc2b5ab-80de-4e83-b8cf-426902051d0a}\0x037.tmp
%ProgramFiles%\installshield installation information\{5bc2b5ab-80de-4e83-b8cf-426902051d0a}\0x038.tmp
%ProgramFiles%\installshield installation information\{5bc2b5ab-80de-4e83-b8cf-426902051d0a}\0x039.tmp
%ProgramFiles%\installshield installation information\{5bc2b5ab-80de-4e83-b8cf-426902051d0a}\0x03a.tmp
%ProgramFiles%\installshield installation information\{5bc2b5ab-80de-4e83-b8cf-426902051d0a}\0x03b.tmp
%ProgramFiles%\installshield installation information\{5bc2b5ab-80de-4e83-b8cf-426902051d0a}\0x03c.tmp
%ProgramFiles%\installshield installation information\{5bc2b5ab-80de-4e83-b8cf-426902051d0a}\0x03d.tmp
%ProgramFiles%\installshield installation information\{5bc2b5ab-80de-4e83-b8cf-426902051d0a}\0x03e.tmp
%ProgramFiles%\installshield installation information\{5bc2b5ab-80de-4e83-b8cf-426902051d0a}\0x03f.tmp
%ProgramFiles%\installshield installation information\{5bc2b5ab-80de-4e83-b8cf-426902051d0a}\0x040.tmp
%ProgramFiles%\installshield installation information\{5bc2b5ab-80de-4e83-b8cf-426902051d0a}\0x041.tmp
%ProgramFiles%\installshield installation information\{5bc2b5ab-80de-4e83-b8cf-426902051d0a}\0x042.tmp
%ProgramFiles%\installshield installation information\{5bc2b5ab-80de-4e83-b8cf-426902051d0a}\set43.tmp
%ProgramFiles%\installshield installation information\{5bc2b5ab-80de-4e83-b8cf-426902051d0a}\set44.tmp
%ProgramFiles%\installshield installation information\{5bc2b5ab-80de-4e83-b8cf-426902051d0a}\setup.ini
%WINDIR%\inf\oem0.inf
%ProgramFiles%\installshield installation information\{5bc2b5ab-80de-4e83-b8cf-426902051d0a}\0x033.tmp
%ProgramFiles%\installshield installation information\{5bc2b5ab-80de-4e83-b8cf-426902051d0a}\0x031.tmp
%ProgramFiles%\installshield installation information\{5bc2b5ab-80de-4e83-b8cf-426902051d0a}\0x032.tmp
%ProgramFiles%\installshield installation information\{5bc2b5ab-80de-4e83-b8cf-426902051d0a}\0x030.tmp
%ProgramFiles%\installshield installation information\{5bc2b5ab-80de-4e83-b8cf-426902051d0a}\lay1d.tmp
%ProgramFiles%\installshield installation information\{5bc2b5ab-80de-4e83-b8cf-426902051d0a}\dat1e.tmp
%ProgramFiles%\installshield installation information\{5bc2b5ab-80de-4e83-b8cf-426902051d0a}\dat1f.tmp
%ProgramFiles%\installshield installation information\{5bc2b5ab-80de-4e83-b8cf-426902051d0a}\set20.tmp
%ProgramFiles%\installshield installation information\{5bc2b5ab-80de-4e83-b8cf-426902051d0a}\iss21.tmp
%ProgramFiles%\installshield installation information\{5bc2b5ab-80de-4e83-b8cf-426902051d0a}\0x022.tmp
%ProgramFiles%\installshield installation information\{5bc2b5ab-80de-4e83-b8cf-426902051d0a}\0x023.tmp
%ProgramFiles%\installshield installation information\{5bc2b5ab-80de-4e83-b8cf-426902051d0a}\0x024.tmp
%ProgramFiles%\installshield installation information\{5bc2b5ab-80de-4e83-b8cf-426902051d0a}\0x025.tmp
%ProgramFiles%\installshield installation information\{5bc2b5ab-80de-4e83-b8cf-426902051d0a}\0x026.tmp
%ProgramFiles%\installshield installation information\{5bc2b5ab-80de-4e83-b8cf-426902051d0a}\0x027.tmp
%ProgramFiles%\installshield installation information\{5bc2b5ab-80de-4e83-b8cf-426902051d0a}\0x028.tmp
%ProgramFiles%\installshield installation information\{5bc2b5ab-80de-4e83-b8cf-426902051d0a}\0x029.tmp
%ProgramFiles%\installshield installation information\{5bc2b5ab-80de-4e83-b8cf-426902051d0a}\0x02a.tmp
%ProgramFiles%\installshield installation information\{5bc2b5ab-80de-4e83-b8cf-426902051d0a}\0x02b.tmp
%ProgramFiles%\installshield installation information\{5bc2b5ab-80de-4e83-b8cf-426902051d0a}\0x02c.tmp
%ProgramFiles%\installshield installation information\{5bc2b5ab-80de-4e83-b8cf-426902051d0a}\0x02d.tmp
%ProgramFiles%\installshield installation information\{5bc2b5ab-80de-4e83-b8cf-426902051d0a}\0x02e.tmp
%ProgramFiles%\installshield installation information\{5bc2b5ab-80de-4e83-b8cf-426902051d0a}\0x02f.tmp
%WINDIR%\inf\oem0.pnf
%TEMP%\{d95e50d7-a9f2-47da-bd9e-471098af0fdb}\0x0413.ini
%TEMP%\{d95e50d7-a9f2-47da-bd9e-471098af0fdb}\0x0412.ini
%TEMP%\{d95e50d7-a9f2-47da-bd9e-471098af0fdb}\0x0411.ini
%TEMP%\7zs0feb3e84\cardreader_realtek_10.0.14393.21294_w10x64\0x041f.ini
%TEMP%\7zs0feb3e84\cardreader_realtek_10.0.14393.21294_w10x64\0x0421.ini
%TEMP%\7zs0feb3e84\cardreader_realtek_10.0.14393.21294_w10x64\0x0424.ini
%TEMP%\7zs0feb3e84\cardreader_realtek_10.0.14393.21294_w10x64\0x042d.ini
%TEMP%\7zs0feb3e84\cardreader_realtek_10.0.14393.21294_w10x64\0x0804.ini
%TEMP%\7zs0feb3e84\cardreader_realtek_10.0.14393.21294_w10x64\0x0816.ini
%TEMP%\7zs0feb3e84\cardreader_realtek_10.0.14393.21294_w10x64\0x0c0c.ini
%TEMP%\7zs0feb3e84\cardreader_realtek_10.0.14393.21294_w10x64\0x041d.ini
%TEMP%\7zs0feb3e84\cardreader_realtek_10.0.14393.21294_w10x64\0x041e.ini
%TEMP%\7zs0feb3e84\cardreader_realtek_10.0.14393.21294_w10x64\0x0c1a.ini
%TEMP%\7zs0feb3e84\cardreader_realtek_10.0.14393.21294_w10x64\data1.cab
%TEMP%\7zs0feb3e84\cardreader_realtek_10.0.14393.21294_w10x64\data1.hdr
%TEMP%\7zs0feb3e84\cardreader_realtek_10.0.14393.21294_w10x64\data2.cab
%TEMP%\7zs0feb3e84\cardreader_realtek_10.0.14393.21294_w10x64\detail.txt
%TEMP%\7zs0feb3e84\cardreader_realtek_10.0.14393.21294_w10x64\drvbin32\rtsper32.cat
%TEMP%\7zs0feb3e84\cardreader_realtek_10.0.14393.21294_w10x64\drvbin32\rtsperx.inf
%TEMP%\7zs0feb3e84\cardreader_realtek_10.0.14393.21294_w10x64\drvbin64\rtsper64.cat
%TEMP%\7zs0feb3e84\cardreader_realtek_10.0.14393.21294_w10x64\acip_deploy.ini
%TEMP%\7zs0feb3e84\cardreader_realtek_10.0.14393.21294_w10x64\apbin\config.ini
%TEMP%\7zs0feb3e84\cardreader_realtek_10.0.14393.21294_w10x64\0x041b.ini
%TEMP%\7zs0feb3e84\cardreader_realtek_10.0.14393.21294_w10x64\0x041a.ini
%TEMP%\7zs0feb3e84\cardreader_realtek_10.0.14393.21294_w10x64\0x0419.ini
%TEMP%\7zs0feb3e84\cardreader_realtek_10.0.14393.21294_w10x64\0x0404.ini
%TEMP%\7zs0feb3e84\cardreader_realtek_10.0.14393.21294_w10x64\0x0405.ini
%TEMP%\7zs0feb3e84\cardreader_realtek_10.0.14393.21294_w10x64\0x0406.ini
%TEMP%\7zs0feb3e84\cardreader_realtek_10.0.14393.21294_w10x64\0x0407.ini
%TEMP%\7zs0feb3e84\cardreader_realtek_10.0.14393.21294_w10x64\0x0408.ini
%TEMP%\7zs0feb3e84\cardreader_realtek_10.0.14393.21294_w10x64\0x0409.ini
%TEMP%\7zs0feb3e84\cardreader_realtek_10.0.14393.21294_w10x64\0x040a.ini
%TEMP%\7zs0feb3e84\cardreader_realtek_10.0.14393.21294_w10x64\0x040b.ini
%TEMP%\7zs0feb3e84\cardreader_realtek_10.0.14393.21294_w10x64\0x0403.ini
%TEMP%\7zs0feb3e84\cardreader_realtek_10.0.14393.21294_w10x64\0x040c.ini
%TEMP%\7zs0feb3e84\cardreader_realtek_10.0.14393.21294_w10x64\0x0410.ini
%TEMP%\7zs0feb3e84\cardreader_realtek_10.0.14393.21294_w10x64\0x0411.ini
%TEMP%\7zs0feb3e84\cardreader_realtek_10.0.14393.21294_w10x64\0x0412.ini
%TEMP%\7zs0feb3e84\cardreader_realtek_10.0.14393.21294_w10x64\0x0413.ini
%TEMP%\7zs0feb3e84\cardreader_realtek_10.0.14393.21294_w10x64\0x0414.ini
%TEMP%\7zs0feb3e84\cardreader_realtek_10.0.14393.21294_w10x64\0x0415.ini
%TEMP%\7zs0feb3e84\cardreader_realtek_10.0.14393.21294_w10x64\0x0416.ini
%TEMP%\7zs0feb3e84\cardreader_realtek_10.0.14393.21294_w10x64\0x0418.ini
%TEMP%\7zs0feb3e84\cardreader_realtek_10.0.14393.21294_w10x64\0x040e.ini
%TEMP%\7zs0feb3e84\cardreader_realtek_10.0.14393.21294_w10x64\drvbin64\rtsperx.inf
%TEMP%\7zs0feb3e84\cardreader_realtek_10.0.14393.21294_w10x64\layout.bin
%TEMP%\7zs0feb3e84\cardreader_realtek_10.0.14393.21294_w10x64\pkgconf.ini
%TEMP%\7zs0feb3e84\cardreader_realtek_10.0.14393.21294_w10x64\prepackage.xml
%TEMP%\7zs0feb3e84\cardreader_realtek_10.0.14393.21294_w10x64\drvbin64\rtsper.sys
%TEMP%\7zs0feb3e84\cardreader_realtek_10.0.14393.21294_w10x64\drvbin64\sdrtcprm.dll
%TEMP%\7zs0feb3e84\cardreader_realtek_10.0.14393.21294_w10x64\issetup.dll
%TEMP%\7zs0feb3e84\cardreader_realtek_10.0.14393.21294_w10x64\setup.exe
%TEMP%\7zs0feb3e84\cardreader_realtek_10.0.14393.21294_w10x64\utility\revcon32.exe
%TEMP%\7zs0feb3e84\cardreader_realtek_10.0.14393.21294_w10x64\utility\revcon64.exe
%TEMP%\{d95e50d7-a9f2-47da-bd9e-471098af0fdb}\setup.ini
%TEMP%\{d95e50d7-a9f2-47da-bd9e-471098af0fdb}\0x0402.ini
%TEMP%\{d95e50d7-a9f2-47da-bd9e-471098af0fdb}\0x0403.ini
%TEMP%\{d95e50d7-a9f2-47da-bd9e-471098af0fdb}\0x0404.ini
%TEMP%\{d95e50d7-a9f2-47da-bd9e-471098af0fdb}\0x0405.ini
%TEMP%\{d95e50d7-a9f2-47da-bd9e-471098af0fdb}\0x0406.ini
%TEMP%\{d95e50d7-a9f2-47da-bd9e-471098af0fdb}\0x0407.ini
%TEMP%\{d95e50d7-a9f2-47da-bd9e-471098af0fdb}\0x0408.ini
%TEMP%\{d95e50d7-a9f2-47da-bd9e-471098af0fdb}\0x0409.ini
%TEMP%\{d95e50d7-a9f2-47da-bd9e-471098af0fdb}\0x040a.ini
%TEMP%\{d95e50d7-a9f2-47da-bd9e-471098af0fdb}\0x040b.ini
%TEMP%\{d95e50d7-a9f2-47da-bd9e-471098af0fdb}\0x040c.ini
%TEMP%\{d95e50d7-a9f2-47da-bd9e-471098af0fdb}\0x040e.ini
%TEMP%\7zs0feb3e84\cardreader_realtek_10.0.14393.21294_w10x64\drvbin64\rtcrx64.dll
%TEMP%\7zs0feb3e84\cardreader_realtek_10.0.14393.21294_w10x64\drvbin64\rscricon.dll
%TEMP%\7zs0feb3e84\cardreader_realtek_10.0.14393.21294_w10x64\drvbin64\rtcru64.exe
%TEMP%\7zs0feb3e84\cardreader_realtek_10.0.14393.21294_w10x64\drvbin32\sdrtcprm.dll
%TEMP%\7zs0feb3e84\cardreader_realtek_10.0.14393.21294_w10x64\readme.txt
%TEMP%\7zs0feb3e84\cardreader_realtek_10.0.14393.21294_w10x64\setup.cmd
%TEMP%\7zs0feb3e84\cardreader_realtek_10.0.14393.21294_w10x64\setup.ini
%TEMP%\7zs0feb3e84\cardreader_realtek_10.0.14393.21294_w10x64\setup.inx
%TEMP%\7zs0feb3e84\cardreader_realtek_10.0.14393.21294_w10x64\setup.isn
%TEMP%\7zs0feb3e84\cardreader_realtek_10.0.14393.21294_w10x64\setup.iss
%TEMP%\7zs0feb3e84\cardreader_realtek_10.0.14393.21294_w10x64\silentinstall.bat
%TEMP%\7zs0feb3e84\cardreader_realtek_10.0.14393.21294_w10x64\success.tag
%TEMP%\7zs0feb3e84\cardreader_realtek_10.0.14393.21294_w10x64\u2setup.iss
%TEMP%\7zs0feb3e84\cardreader_realtek_10.0.14393.21294_w10x64\u3setup.iss
%TEMP%\7zs0feb3e84\cardreader_realtek_10.0.14393.21294_w10x64\usetup.iss
%TEMP%\7zs0feb3e84\cardreader_realtek_10.0.14393.21294_w10x64\utility\display.ico
%TEMP%\7zs0feb3e84\cardreader_realtek_10.0.14393.21294_w10x64\apbin\rmb.exe
%TEMP%\7zs0feb3e84\cardreader_realtek_10.0.14393.21294_w10x64\apbin\sdrtcprm.dll
%TEMP%\7zs0feb3e84\cardreader_realtek_10.0.14393.21294_w10x64\apbin\setehcikey.exe
%TEMP%\7zs0feb3e84\cardreader_realtek_10.0.14393.21294_w10x64\drvbin32\rscricon.dll
%TEMP%\7zs0feb3e84\cardreader_realtek_10.0.14393.21294_w10x64\drvbin32\rtcru32.exe
%TEMP%\7zs0feb3e84\cardreader_realtek_10.0.14393.21294_w10x64\drvbin32\rtcrx.dll
%TEMP%\7zs0feb3e84\cardreader_realtek_10.0.14393.21294_w10x64\drvbin32\rtsper.sys
%TEMP%\{d95e50d7-a9f2-47da-bd9e-471098af0fdb}\0x0410.ini
<SYSTEM32>\sda\sdr47.tmp

Удаляет следующие файлы

%ProgramFiles%\realtek\realtek card reader\sdrtcprm.dll

Перемещает следующие файлы

%TEMP%\{f71c1a28-0828-4663-acbc-665ffd407081}\{5bc2b5ab-80de-4e83-b8cf-426902051d0a}\set2.tmp в %TEMP%\{f71c1a28-0828-4663-acbc-665ffd407081}\{5bc2b5ab-80de-4e83-b8cf-426902051d0a}\setup.inx
%ProgramFiles%\installshield installation information\{5bc2b5ab-80de-4e83-b8cf-426902051d0a}\0x026.tmp в %ProgramFiles%\installshield installation information\{5bc2b5ab-80de-4e83-b8cf-426902051d0a}\0x041a.ini
%ProgramFiles%\installshield installation information\{5bc2b5ab-80de-4e83-b8cf-426902051d0a}\0x027.tmp в %ProgramFiles%\installshield installation information\{5bc2b5ab-80de-4e83-b8cf-426902051d0a}\0x0405.ini
%ProgramFiles%\installshield installation information\{5bc2b5ab-80de-4e83-b8cf-426902051d0a}\0x028.tmp в %ProgramFiles%\installshield installation information\{5bc2b5ab-80de-4e83-b8cf-426902051d0a}\0x0406.ini
%ProgramFiles%\installshield installation information\{5bc2b5ab-80de-4e83-b8cf-426902051d0a}\0x029.tmp в %ProgramFiles%\installshield installation information\{5bc2b5ab-80de-4e83-b8cf-426902051d0a}\0x0413.ini
%ProgramFiles%\installshield installation information\{5bc2b5ab-80de-4e83-b8cf-426902051d0a}\0x02a.tmp в %ProgramFiles%\installshield installation information\{5bc2b5ab-80de-4e83-b8cf-426902051d0a}\0x0409.ini
%ProgramFiles%\installshield installation information\{5bc2b5ab-80de-4e83-b8cf-426902051d0a}\0x02b.tmp в %ProgramFiles%\installshield installation information\{5bc2b5ab-80de-4e83-b8cf-426902051d0a}\0x040b.ini
%ProgramFiles%\installshield installation information\{5bc2b5ab-80de-4e83-b8cf-426902051d0a}\0x02c.tmp в %ProgramFiles%\installshield installation information\{5bc2b5ab-80de-4e83-b8cf-426902051d0a}\0x0c0c.ini
%ProgramFiles%\installshield installation information\{5bc2b5ab-80de-4e83-b8cf-426902051d0a}\0x02d.tmp в %ProgramFiles%\installshield installation information\{5bc2b5ab-80de-4e83-b8cf-426902051d0a}\0x040c.ini
%ProgramFiles%\installshield installation information\{5bc2b5ab-80de-4e83-b8cf-426902051d0a}\0x02e.tmp в %ProgramFiles%\installshield installation information\{5bc2b5ab-80de-4e83-b8cf-426902051d0a}\0x0407.ini
%ProgramFiles%\installshield installation information\{5bc2b5ab-80de-4e83-b8cf-426902051d0a}\0x02f.tmp в %ProgramFiles%\installshield installation information\{5bc2b5ab-80de-4e83-b8cf-426902051d0a}\0x0408.ini
%ProgramFiles%\installshield installation information\{5bc2b5ab-80de-4e83-b8cf-426902051d0a}\0x030.tmp в %ProgramFiles%\installshield installation information\{5bc2b5ab-80de-4e83-b8cf-426902051d0a}\0x040e.ini
%ProgramFiles%\installshield installation information\{5bc2b5ab-80de-4e83-b8cf-426902051d0a}\0x031.tmp в %ProgramFiles%\installshield installation information\{5bc2b5ab-80de-4e83-b8cf-426902051d0a}\0x0421.ini
%ProgramFiles%\installshield installation information\{5bc2b5ab-80de-4e83-b8cf-426902051d0a}\0x032.tmp в %ProgramFiles%\installshield installation information\{5bc2b5ab-80de-4e83-b8cf-426902051d0a}\0x0410.ini
%ProgramFiles%\installshield installation information\{5bc2b5ab-80de-4e83-b8cf-426902051d0a}\0x033.tmp в %ProgramFiles%\installshield installation information\{5bc2b5ab-80de-4e83-b8cf-426902051d0a}\0x0411.ini
%ProgramFiles%\installshield installation information\{5bc2b5ab-80de-4e83-b8cf-426902051d0a}\0x035.tmp в %ProgramFiles%\installshield installation information\{5bc2b5ab-80de-4e83-b8cf-426902051d0a}\0x0414.ini
%ProgramFiles%\installshield installation information\{5bc2b5ab-80de-4e83-b8cf-426902051d0a}\set44.tmp в %ProgramFiles%\installshield installation information\{5bc2b5ab-80de-4e83-b8cf-426902051d0a}\setup.ini
%ProgramFiles%\installshield installation information\{5bc2b5ab-80de-4e83-b8cf-426902051d0a}\0x036.tmp в %ProgramFiles%\installshield installation information\{5bc2b5ab-80de-4e83-b8cf-426902051d0a}\0x0415.ini
%ProgramFiles%\installshield installation information\{5bc2b5ab-80de-4e83-b8cf-426902051d0a}\0x037.tmp в %ProgramFiles%\installshield installation information\{5bc2b5ab-80de-4e83-b8cf-426902051d0a}\0x0416.ini
%ProgramFiles%\installshield installation information\{5bc2b5ab-80de-4e83-b8cf-426902051d0a}\0x038.tmp в %ProgramFiles%\installshield installation information\{5bc2b5ab-80de-4e83-b8cf-426902051d0a}\0x0816.ini
%ProgramFiles%\installshield installation information\{5bc2b5ab-80de-4e83-b8cf-426902051d0a}\0x039.tmp в %ProgramFiles%\installshield installation information\{5bc2b5ab-80de-4e83-b8cf-426902051d0a}\0x0418.ini
%ProgramFiles%\installshield installation information\{5bc2b5ab-80de-4e83-b8cf-426902051d0a}\0x03a.tmp в %ProgramFiles%\installshield installation information\{5bc2b5ab-80de-4e83-b8cf-426902051d0a}\0x0419.ini
%ProgramFiles%\installshield installation information\{5bc2b5ab-80de-4e83-b8cf-426902051d0a}\0x03b.tmp в %ProgramFiles%\installshield installation information\{5bc2b5ab-80de-4e83-b8cf-426902051d0a}\0x0c1a.ini
%ProgramFiles%\installshield installation information\{5bc2b5ab-80de-4e83-b8cf-426902051d0a}\0x03c.tmp в %ProgramFiles%\installshield installation information\{5bc2b5ab-80de-4e83-b8cf-426902051d0a}\0x041b.ini
%ProgramFiles%\installshield installation information\{5bc2b5ab-80de-4e83-b8cf-426902051d0a}\0x03d.tmp в %ProgramFiles%\installshield installation information\{5bc2b5ab-80de-4e83-b8cf-426902051d0a}\0x0424.ini
%ProgramFiles%\installshield installation information\{5bc2b5ab-80de-4e83-b8cf-426902051d0a}\0x03e.tmp в %ProgramFiles%\installshield installation information\{5bc2b5ab-80de-4e83-b8cf-426902051d0a}\0x040a.ini
%ProgramFiles%\installshield installation information\{5bc2b5ab-80de-4e83-b8cf-426902051d0a}\0x03f.tmp в %ProgramFiles%\installshield installation information\{5bc2b5ab-80de-4e83-b8cf-426902051d0a}\0x041d.ini
%ProgramFiles%\installshield installation information\{5bc2b5ab-80de-4e83-b8cf-426902051d0a}\0x040.tmp в %ProgramFiles%\installshield installation information\{5bc2b5ab-80de-4e83-b8cf-426902051d0a}\0x041e.ini
%ProgramFiles%\installshield installation information\{5bc2b5ab-80de-4e83-b8cf-426902051d0a}\0x041.tmp в %ProgramFiles%\installshield installation information\{5bc2b5ab-80de-4e83-b8cf-426902051d0a}\0x041f.ini
%ProgramFiles%\installshield installation information\{5bc2b5ab-80de-4e83-b8cf-426902051d0a}\0x042.tmp в %ProgramFiles%\installshield installation information\{5bc2b5ab-80de-4e83-b8cf-426902051d0a}\0x042d.ini
%ProgramFiles%\installshield installation information\{5bc2b5ab-80de-4e83-b8cf-426902051d0a}\set43.tmp в %ProgramFiles%\installshield installation information\{5bc2b5ab-80de-4e83-b8cf-426902051d0a}\setup.inx
%ProgramFiles%\installshield installation information\{5bc2b5ab-80de-4e83-b8cf-426902051d0a}\0x025.tmp в %ProgramFiles%\installshield installation information\{5bc2b5ab-80de-4e83-b8cf-426902051d0a}\0x0404.ini
%ProgramFiles%\installshield installation information\{5bc2b5ab-80de-4e83-b8cf-426902051d0a}\0x034.tmp в %ProgramFiles%\installshield installation information\{5bc2b5ab-80de-4e83-b8cf-426902051d0a}\0x0412.ini
%ProgramFiles%\installshield installation information\{5bc2b5ab-80de-4e83-b8cf-426902051d0a}\0x024.tmp в %ProgramFiles%\installshield installation information\{5bc2b5ab-80de-4e83-b8cf-426902051d0a}\0x0804.ini
%ProgramFiles%\realtek\realtek card reader\rtc11.tmp в %ProgramFiles%\realtek\realtek card reader\rtcru32.exe
%TEMP%\{f71c1a28-0828-4663-acbc-665ffd407081}\{5bc2b5ab-80de-4e83-b8cf-426902051d0a}\pkg3.tmp в %TEMP%\{f71c1a28-0828-4663-acbc-665ffd407081}\{5bc2b5ab-80de-4e83-b8cf-426902051d0a}\pkgutility.dll
%TEMP%\{f71c1a28-0828-4663-acbc-665ffd407081}\{5bc2b5ab-80de-4e83-b8cf-426902051d0a}\fon4.tmp в %TEMP%\{f71c1a28-0828-4663-acbc-665ffd407081}\{5bc2b5ab-80de-4e83-b8cf-426902051d0a}\fontdata.ini
%TEMP%\{f71c1a28-0828-4663-acbc-665ffd407081}\{5bc2b5ab-80de-4e83-b8cf-426902051d0a}\dif5.tmp в %TEMP%\{f71c1a28-0828-4663-acbc-665ffd407081}\{5bc2b5ab-80de-4e83-b8cf-426902051d0a}\difxdata.ini
%TEMP%\{f71c1a28-0828-4663-acbc-665ffd407081}\cor6.tmp в %TEMP%\{f71c1a28-0828-4663-acbc-665ffd407081}\corecomp.ini
%TEMP%\{f71c1a28-0828-4663-acbc-665ffd407081}\dot7.tmp в %TEMP%\{f71c1a28-0828-4663-acbc-665ffd407081}\dotnetinstaller.exe
%TEMP%\{f71c1a28-0828-4663-acbc-665ffd407081}\{5bc2b5ab-80de-4e83-b8cf-426902051d0a}\str8.tmp в %TEMP%\{f71c1a28-0828-4663-acbc-665ffd407081}\{5bc2b5ab-80de-4e83-b8cf-426902051d0a}\stringtable_0x0409.ips
%TEMP%\{f71c1a28-0828-4663-acbc-665ffd407081}\{5bc2b5ab-80de-4e83-b8cf-426902051d0a}\isr9.tmp в %TEMP%\{f71c1a28-0828-4663-acbc-665ffd407081}\{5bc2b5ab-80de-4e83-b8cf-426902051d0a}\isrt.dll
%TEMP%\{f71c1a28-0828-4663-acbc-665ffd407081}\{5bc2b5ab-80de-4e83-b8cf-426902051d0a}\defa.tmp в %TEMP%\{f71c1a28-0828-4663-acbc-665ffd407081}\{5bc2b5ab-80de-4e83-b8cf-426902051d0a}\default.pal
%TEMP%\{f71c1a28-0828-4663-acbc-665ffd407081}\{5bc2b5ab-80de-4e83-b8cf-426902051d0a}\_isb.tmp в %TEMP%\{f71c1a28-0828-4663-acbc-665ffd407081}\{5bc2b5ab-80de-4e83-b8cf-426902051d0a}\_isres_0x0409.dll
%ProgramFiles%\realtek\realtek card reader\conc.tmp в %ProgramFiles%\realtek\realtek card reader\config.ini
%ProgramFiles%\realtek\realtek card reader\rmbd.tmp в %ProgramFiles%\realtek\realtek card reader\rmb.exe
%ProgramFiles%\realtek\realtek card reader\sdre.tmp в %ProgramFiles%\realtek\realtek card reader\sdrtcprm.dll
%ProgramFiles%\realtek\realtek card reader\setf.tmp в %ProgramFiles%\realtek\realtek card reader\setehcikey.exe
%ProgramFiles%\realtek\realtek card reader\rsc10.tmp в %ProgramFiles%\realtek\realtek card reader\rscricon.dll
%ProgramFiles%\realtek\realtek card reader\rtc12.tmp в %ProgramFiles%\realtek\realtek card reader\rtcrx.dll
%ProgramFiles%\installshield installation information\{5bc2b5ab-80de-4e83-b8cf-426902051d0a}\0x022.tmp в %ProgramFiles%\installshield installation information\{5bc2b5ab-80de-4e83-b8cf-426902051d0a}\0x0402.ini
%ProgramFiles%\realtek\realtek card reader\rts13.tmp в %ProgramFiles%\realtek\realtek card reader\rtsper.sys
%ProgramFiles%\realtek\realtek card reader\rts14.tmp в %ProgramFiles%\realtek\realtek card reader\rtsper32.cat
%ProgramFiles%\realtek\realtek card reader\rts15.tmp в %ProgramFiles%\realtek\realtek card reader\rtsperx.inf
<DRIVERS>\rts17.tmp в <DRIVERS>\rtsper.sys
%ProgramFiles%\realtek\realtek card reader\dis18.tmp в %ProgramFiles%\realtek\realtek card reader\display.ico
%ProgramFiles%\realtek\realtek card reader\rev19.tmp в %ProgramFiles%\realtek\realtek card reader\revcon32.exe
%ProgramFiles%\realtek\realtek card reader\rev1a.tmp в %ProgramFiles%\realtek\realtek card reader\revcon64.exe
%ProgramFiles%\installshield installation information\{5bc2b5ab-80de-4e83-b8cf-426902051d0a}\use1b.tmp в %ProgramFiles%\installshield installation information\{5bc2b5ab-80de-4e83-b8cf-426902051d0a}\usetup.iss
%ProgramFiles%\installshield installation information\{5bc2b5ab-80de-4e83-b8cf-426902051d0a}\pkg1c.tmp в %ProgramFiles%\installshield installation information\{5bc2b5ab-80de-4e83-b8cf-426902051d0a}\pkgconf.ini
%ProgramFiles%\installshield installation information\{5bc2b5ab-80de-4e83-b8cf-426902051d0a}\lay1d.tmp в %ProgramFiles%\installshield installation information\{5bc2b5ab-80de-4e83-b8cf-426902051d0a}\layout.bin
%ProgramFiles%\installshield installation information\{5bc2b5ab-80de-4e83-b8cf-426902051d0a}\dat1e.tmp в %ProgramFiles%\installshield installation information\{5bc2b5ab-80de-4e83-b8cf-426902051d0a}\data1.hdr
%ProgramFiles%\installshield installation information\{5bc2b5ab-80de-4e83-b8cf-426902051d0a}\dat1f.tmp в %ProgramFiles%\installshield installation information\{5bc2b5ab-80de-4e83-b8cf-426902051d0a}\data1.cab
%ProgramFiles%\installshield installation information\{5bc2b5ab-80de-4e83-b8cf-426902051d0a}\set20.tmp в %ProgramFiles%\installshield installation information\{5bc2b5ab-80de-4e83-b8cf-426902051d0a}\setup.exe
%ProgramFiles%\installshield installation information\{5bc2b5ab-80de-4e83-b8cf-426902051d0a}\iss21.tmp в %ProgramFiles%\installshield installation information\{5bc2b5ab-80de-4e83-b8cf-426902051d0a}\issetup.dll
%ProgramFiles%\installshield installation information\{5bc2b5ab-80de-4e83-b8cf-426902051d0a}\0x023.tmp в %ProgramFiles%\installshield installation information\{5bc2b5ab-80de-4e83-b8cf-426902051d0a}\0x0403.ini
<SYSTEM32>\sda\sdr47.tmp в <SYSTEM32>\sda\sdrtcprm.dll

Подменяет следующие файлы

%ProgramFiles%\realtek\realtek card reader\sdrtcprm.dll

Другое

Создает и запускает на исполнение

'%TEMP%\7zs0feb3e84\cardreader_realtek_10.0.14393.21294_w10x64\setup.exe'
'%ProgramFiles%\realtek\realtek card reader\revcon32.exe' RS_remove PCI\VEN_10EC&DEV_5250
'%ProgramFiles%\realtek\realtek card reader\revcon32.exe' RS_remove PCI\VEN_10EC&DEV_522A&CC_FF00
'%ProgramFiles%\realtek\realtek card reader\revcon32.exe' RS_update RtsPerX.inf PCI\VEN_10EC&DEV_5250
'%ProgramFiles%\realtek\realtek card reader\revcon32.exe' RS_remove PCI\VEN_10EC&DEV_525A&CC_FF00
'%ProgramFiles%\realtek\realtek card reader\revcon32.exe' RS_remove PCI\VEN_10EC&DEV_5287&CC_FF00
'%ProgramFiles%\realtek\realtek card reader\revcon32.exe' RS_update RtsPerX.inf PCI\VEN_10EC&DEV_5287&CC_FF00
'%ProgramFiles%\realtek\realtek card reader\revcon32.exe' RS_update RtsPerX.inf PCI\VEN_10EC&DEV_522A&CC_FF00
'%ProgramFiles%\realtek\realtek card reader\revcon32.exe' RS_update RtsPerX.inf PCI\VEN_10EC&DEV_524A&CC_FF00
'%ProgramFiles%\realtek\realtek card reader\revcon32.exe' RS_remove PCI\VEN_10EC&DEV_524A&CC_FF00
'%ProgramFiles%\realtek\realtek card reader\revcon32.exe' RS_remove PCI\VEN_10EC&DEV_5227&CC_FF00
'%ProgramFiles%\realtek\realtek card reader\revcon32.exe' RS_update RtsPerX.inf PCI\VEN_10EC&DEV_5227&CC_FF00
'%ProgramFiles%\realtek\realtek card reader\revcon32.exe' RS_update RtsPerX.inf PCI\VEN_10EC&DEV_525A&CC_FF00
'%ProgramFiles%\realtek\realtek card reader\revcon32.exe' dp_add RtsPerX.inf
'%ProgramFiles%\realtek\realtek card reader\revcon32.exe' RS_update RtsPerX.inf PCI\VEN_10EC&DEV_5249&CC_FF00
'%ProgramFiles%\realtek\realtek card reader\revcon32.exe' RS_remove PCI\VEN_10EC&DEV_5249&CC_FF00
'%ProgramFiles%\realtek\realtek card reader\revcon32.exe' RS_remove PCI\VEN_10EC&DEV_5250' (со скрытым окном)
'%ProgramFiles%\realtek\realtek card reader\revcon32.exe' RS_update RtsPerX.inf PCI\VEN_10EC&DEV_524A&CC_FF00' (со скрытым окном)
'%ProgramFiles%\realtek\realtek card reader\revcon32.exe' RS_update RtsPerX.inf PCI\VEN_10EC&DEV_522A&CC_FF00' (со скрытым окном)
'%ProgramFiles%\realtek\realtek card reader\revcon32.exe' RS_remove PCI\VEN_10EC&DEV_522A&CC_FF00' (со скрытым окном)
'%ProgramFiles%\realtek\realtek card reader\revcon32.exe' RS_remove PCI\VEN_10EC&DEV_524A&CC_FF00' (со скрытым окном)
'%ProgramFiles%\realtek\realtek card reader\revcon32.exe' RS_remove PCI\VEN_10EC&DEV_5287&CC_FF00' (со скрытым окном)
'%ProgramFiles%\realtek\realtek card reader\revcon32.exe' RS_update RtsPerX.inf PCI\VEN_10EC&DEV_525A&CC_FF00' (со скрытым окном)
'%ProgramFiles%\realtek\realtek card reader\revcon32.exe' RS_update RtsPerX.inf PCI\VEN_10EC&DEV_5249&CC_FF00' (со скрытым окном)
'%ProgramFiles%\realtek\realtek card reader\revcon32.exe' RS_remove PCI\VEN_10EC&DEV_5249&CC_FF00' (со скрытым окном)
'%ProgramFiles%\realtek\realtek card reader\revcon32.exe' RS_remove PCI\VEN_10EC&DEV_5227&CC_FF00' (со скрытым окном)
'%ProgramFiles%\realtek\realtek card reader\revcon32.exe' RS_update RtsPerX.inf PCI\VEN_10EC&DEV_5227&CC_FF00' (со скрытым окном)
'%ProgramFiles%\realtek\realtek card reader\revcon32.exe' dp_add RtsPerX.inf' (со скрытым окном)
'<SYSTEM32>\rundll32.exe' "%TEMP%\{F71C1A28-0828-4663-ACBC-665FFD407081}\{5BC2B5AB-80DE-4E83-B8CF-426902051D0A}\PkgUtility.dll" GetOSVersion' (со скрытым окном)
'%ProgramFiles%\realtek\realtek card reader\revcon32.exe' RS_update RtsPerX.inf PCI\VEN_10EC&DEV_5250' (со скрытым окном)
'%ProgramFiles%\realtek\realtek card reader\revcon32.exe' RS_update RtsPerX.inf PCI\VEN_10EC&DEV_5287&CC_FF00' (со скрытым окном)
'%ProgramFiles%\realtek\realtek card reader\revcon32.exe' RS_remove PCI\VEN_10EC&DEV_525A&CC_FF00' (со скрытым окном)

Запускает на исполнение

'<SYSTEM32>\rundll32.exe' "%TEMP%\{F71C1A28-0828-4663-ACBC-665FFD407081}\{5BC2B5AB-80DE-4E83-B8CF-426902051D0A}\PkgUtility.dll" GetOSVersion

Технологии

Термины

Обучение и просвещение

Мифы

Техническая информация

Рекомендации по лечению

Демо бесплатно на 14 дней