Техническая информация
Изменения в файловой системе
Создает следующие файлы
- %TEMP%\7zscea5d4cf\apbin\config.ini
- <DRIVERS>\rtspe2b6.rra
- %ProgramFiles(x86)%\realtek\realtek card reader\rtspe2b6.rra
- %ProgramFiles(x86)%\realtek\realtek card reader\rtspe2a6.rra
- %ProgramFiles(x86)%\realtek\realtek card reader\rtspe296.rra
- %ProgramFiles(x86)%\realtek\realtek card reader\rscre13f.rra
- %ProgramFiles(x86)%\realtek\realtek card reader\setee13f.rra
- %ProgramFiles(x86)%\realtek\realtek card reader\sdrte12f.rra
- %ProgramFiles(x86)%\realtek\realtek card reader\rmbe110.rra
- %ProgramFiles(x86)%\realtek\realtek card reader\confe110.rra
- %TEMP%\{bfef399f-9e98-4957-8769-d49382a8e561}\{5bc2b5ab-80de-4e83-b8cf-426902051d0a}\_isrdb43.rra
- %TEMP%\{bfef399f-9e98-4957-8769-d49382a8e561}\{5bc2b5ab-80de-4e83-b8cf-426902051d0a}\defadb43.rra
- %TEMP%\{bfef399f-9e98-4957-8769-d49382a8e561}\{5bc2b5ab-80de-4e83-b8cf-426902051d0a}\isrtdb43.rra
- %TEMP%\{bfef399f-9e98-4957-8769-d49382a8e561}\{5bc2b5ab-80de-4e83-b8cf-426902051d0a}\stridb34.rra
- %TEMP%\{bfef399f-9e98-4957-8769-d49382a8e561}\isbedb24.rra
- %TEMP%\{bfef399f-9e98-4957-8769-d49382a8e561}\{5bc2b5ab-80de-4e83-b8cf-426902051d0a}\vasddb24.rra
- %ProgramFiles(x86)%\realtek\realtek card reader\dispe2c5.rra
- %ProgramFiles(x86)%\realtek\realtek card reader\revce2d5.rra
- %ProgramFiles(x86)%\realtek\realtek card reader\revce2e5.rra
- %ProgramFiles(x86)%\installshield installation information\{5bc2b5ab-80de-4e83-b8cf-426902051d0a}\usete304.rra
- %WINDIR%\syswow64\sda\sdrt2906.rra
- <SYSTEM32>\catroot\{f750e6c3-38ee-11d1-85e5-00c04fc295ee}\oem2.cat
- %TEMP%\{6ee34c35-0be8-3880-9f55-410711f09b43}\setfc5b.tmp
- %TEMP%\{6ee34c35-0be8-3880-9f55-410711f09b43}\setfb02.tmp
- %TEMP%\{6ee34c35-0be8-3880-9f55-410711f09b43}\setf890.tmp
- %TEMP%\{6ee34c35-0be8-3880-9f55-410711f09b43}\setf776.tmp
- %ProgramFiles(x86)%\installshield installation information\{5bc2b5ab-80de-4e83-b8cf-426902051d0a}\setup.ini
- %ProgramFiles(x86)%\installshield installation information\{5bc2b5ab-80de-4e83-b8cf-426902051d0a}\setue7e6.rra
- %ProgramFiles(x86)%\installshield installation information\{5bc2b5ab-80de-4e83-b8cf-426902051d0a}\setue805.rra
- %ProgramFiles(x86)%\installshield installation information\{5bc2b5ab-80de-4e83-b8cf-426902051d0a}\issee7c7.rra
- %ProgramFiles(x86)%\installshield installation information\{5bc2b5ab-80de-4e83-b8cf-426902051d0a}\_sete7a7.rra
- %ProgramFiles(x86)%\installshield installation information\{5bc2b5ab-80de-4e83-b8cf-426902051d0a}\setue798.rra
- %ProgramFiles(x86)%\installshield installation information\{5bc2b5ab-80de-4e83-b8cf-426902051d0a}\datae72a.rra
- %ProgramFiles(x86)%\installshield installation information\{5bc2b5ab-80de-4e83-b8cf-426902051d0a}\datae71b.rra
- %ProgramFiles(x86)%\installshield installation information\{5bc2b5ab-80de-4e83-b8cf-426902051d0a}\layoe71b.rra
- %ProgramFiles(x86)%\installshield installation information\{5bc2b5ab-80de-4e83-b8cf-426902051d0a}\pkgce323.rra
- %ProgramFiles(x86)%\realtek\realtek card reader\rmb.log
- %TEMP%\{bfef399f-9e98-4957-8769-d49382a8e561}\{5bc2b5ab-80de-4e83-b8cf-426902051d0a}\difxdb24.rra
- %TEMP%\{bfef399f-9e98-4957-8769-d49382a8e561}\{5bc2b5ab-80de-4e83-b8cf-426902051d0a}\fontdb24.rra
- %TEMP%\{bfef399f-9e98-4957-8769-d49382a8e561}\dotndb05.rra
- %TEMP%\7zscea5d4cf\u3setup.iss
- %TEMP%\7zscea5d4cf\u2setup.iss
- %TEMP%\7zscea5d4cf\setup.iss
- %TEMP%\7zscea5d4cf\setup.isn
- %TEMP%\7zscea5d4cf\setup.inx
- %TEMP%\7zscea5d4cf\setup.ini
- %TEMP%\7zscea5d4cf\pkgconf.ini
- %TEMP%\7zscea5d4cf\layout.bin
- %TEMP%\7zscea5d4cf\drvbin64\rtsp2stormsi.inf
- %TEMP%\7zscea5d4cf\drvbin64\rtsp2stor64.cat
- %TEMP%\7zscea5d4cf\drvbin32\rtsp2stormsi.inf
- %TEMP%\7zscea5d4cf\drvbin32\rtsp2stor32.cat
- %TEMP%\7zscea5d4cf\data2.cab
- %TEMP%\7zscea5d4cf\data1.hdr
- %TEMP%\7zscea5d4cf\data1.cab
- %TEMP%\7zscea5d4cf\usetup.iss
- %TEMP%\7zscea5d4cf\utility\display.ico
- %TEMP%\7zscea5d4cf\apbin\rmb.exe
- %TEMP%\7zscea5d4cf\apbin\sdrtcprm.dll
- %TEMP%\{bfef399f-9e98-4957-8769-d49382a8e561}\{5bc2b5ab-80de-4e83-b8cf-426902051d0a}\hidedae6.rra
- %TEMP%\{bfef399f-9e98-4957-8769-d49382a8e561}\{5bc2b5ab-80de-4e83-b8cf-426902051d0a}\setudad6.rra
- %TEMP%\d96f.rra
- %TEMP%\{b40be13c-0343-452c-b13b-2943623bb186}\setup.ini
- %TEMP%\{b40be13c-0343-452c-b13b-2943623bb186}\_setup.dll
- %TEMP%\7zscea5d4cf\_setup.dll
- %TEMP%\7zscea5d4cf\utility\revcon64.exe
- %TEMP%\7zscea5d4cf\setup.exe
- %TEMP%\7zscea5d4cf\utility\revcon32.exe
- %TEMP%\7zscea5d4cf\issetup.dll
- %TEMP%\7zscea5d4cf\drvbin64\rtsp2stor.sys
- %TEMP%\7zscea5d4cf\drvbin64\rscricon.dll
- %TEMP%\7zscea5d4cf\drvbin32\sdrtcprm.dll
- %TEMP%\7zscea5d4cf\drvbin32\rtsp2stor.sys
- %TEMP%\7zscea5d4cf\drvbin32\rscricon.dll
- %TEMP%\7zscea5d4cf\apbin\setehcikey.exe
- %TEMP%\{bfef399f-9e98-4957-8769-d49382a8e561}\coredb05.rra
- %ProgramFiles(x86)%\realtek\realtek card reader\config.ini
Присваивает атрибут 'скрытый' для следующих файлов
- <SYSTEM32>\catroot\{f750e6c3-38ee-11d1-85e5-00c04fc295ee}\oem2.cat
Удаляет следующие файлы
- %TEMP%\{6ee34c35-0be8-3880-9f55-410711f09b43}\rscricon.dll
- %TEMP%\{6ee34c35-0be8-3880-9f55-410711f09b43}\rtsp2stor.sys
- %TEMP%\{6ee34c35-0be8-3880-9f55-410711f09b43}\rtsp2stor64.cat
- %TEMP%\{6ee34c35-0be8-3880-9f55-410711f09b43}\rtsp2stormsi.inf
Перемещает следующие файлы
- %TEMP%\{bfef399f-9e98-4957-8769-d49382a8e561}\{5bc2b5ab-80de-4e83-b8cf-426902051d0a}\setudad6.rra в %TEMP%\{bfef399f-9e98-4957-8769-d49382a8e561}\{5bc2b5ab-80de-4e83-b8cf-426902051d0a}\setup.inx
- %ProgramFiles(x86)%\realtek\realtek card reader\dispe2c5.rra в %ProgramFiles(x86)%\realtek\realtek card reader\display.ico
- %ProgramFiles(x86)%\realtek\realtek card reader\revce2d5.rra в %ProgramFiles(x86)%\realtek\realtek card reader\revcon32.exe
- %ProgramFiles(x86)%\realtek\realtek card reader\revce2e5.rra в %ProgramFiles(x86)%\realtek\realtek card reader\revcon64.exe
- %ProgramFiles(x86)%\installshield installation information\{5bc2b5ab-80de-4e83-b8cf-426902051d0a}\usete304.rra в %ProgramFiles(x86)%\installshield installation information\{5bc2b5ab-80de-4e83-b8cf-426902051d0a}\usetup.iss
- %ProgramFiles(x86)%\installshield installation information\{5bc2b5ab-80de-4e83-b8cf-426902051d0a}\pkgce323.rra в %ProgramFiles(x86)%\installshield installation information\{5bc2b5ab-80de-4e83-b8cf-426902051d0a}\pkgconf.ini
- %ProgramFiles(x86)%\installshield installation information\{5bc2b5ab-80de-4e83-b8cf-426902051d0a}\layoe71b.rra в %ProgramFiles(x86)%\installshield installation information\{5bc2b5ab-80de-4e83-b8cf-426902051d0a}\layout.bin
- %ProgramFiles(x86)%\installshield installation information\{5bc2b5ab-80de-4e83-b8cf-426902051d0a}\datae71b.rra в %ProgramFiles(x86)%\installshield installation information\{5bc2b5ab-80de-4e83-b8cf-426902051d0a}\data1.hdr
- %ProgramFiles(x86)%\installshield installation information\{5bc2b5ab-80de-4e83-b8cf-426902051d0a}\setue798.rra в %ProgramFiles(x86)%\installshield installation information\{5bc2b5ab-80de-4e83-b8cf-426902051d0a}\setup.exe
- %TEMP%\{6ee34c35-0be8-3880-9f55-410711f09b43}\setfc5b.tmp в %TEMP%\{6ee34c35-0be8-3880-9f55-410711f09b43}\rtsp2stor64.cat
- %ProgramFiles(x86)%\installshield installation information\{5bc2b5ab-80de-4e83-b8cf-426902051d0a}\_sete7a7.rra в %ProgramFiles(x86)%\installshield installation information\{5bc2b5ab-80de-4e83-b8cf-426902051d0a}\_setup.dll
- %ProgramFiles(x86)%\installshield installation information\{5bc2b5ab-80de-4e83-b8cf-426902051d0a}\issee7c7.rra в %ProgramFiles(x86)%\installshield installation information\{5bc2b5ab-80de-4e83-b8cf-426902051d0a}\issetup.dll
- %ProgramFiles(x86)%\installshield installation information\{5bc2b5ab-80de-4e83-b8cf-426902051d0a}\setue7e6.rra в %ProgramFiles(x86)%\installshield installation information\{5bc2b5ab-80de-4e83-b8cf-426902051d0a}\setup.inx
- %ProgramFiles(x86)%\installshield installation information\{5bc2b5ab-80de-4e83-b8cf-426902051d0a}\setue805.rra в %ProgramFiles(x86)%\installshield installation information\{5bc2b5ab-80de-4e83-b8cf-426902051d0a}\setup.ini
- %TEMP%\{6ee34c35-0be8-3880-9f55-410711f09b43}\setf776.tmp в %TEMP%\{6ee34c35-0be8-3880-9f55-410711f09b43}\rtsp2stormsi.inf
- %TEMP%\{6ee34c35-0be8-3880-9f55-410711f09b43}\setf890.tmp в %TEMP%\{6ee34c35-0be8-3880-9f55-410711f09b43}\rscricon.dll
- %TEMP%\{6ee34c35-0be8-3880-9f55-410711f09b43}\setfb02.tmp в %TEMP%\{6ee34c35-0be8-3880-9f55-410711f09b43}\rtsp2stor.sys
- <DRIVERS>\rtspe2b6.rra в <DRIVERS>\rtsp2stor.sys
- %ProgramFiles(x86)%\installshield installation information\{5bc2b5ab-80de-4e83-b8cf-426902051d0a}\datae72a.rra в %ProgramFiles(x86)%\installshield installation information\{5bc2b5ab-80de-4e83-b8cf-426902051d0a}\data1.cab
- %ProgramFiles(x86)%\realtek\realtek card reader\rtspe2b6.rra в %ProgramFiles(x86)%\realtek\realtek card reader\rtsp2stormsi.inf
- %TEMP%\{bfef399f-9e98-4957-8769-d49382a8e561}\{5bc2b5ab-80de-4e83-b8cf-426902051d0a}\stridb34.rra в %TEMP%\{bfef399f-9e98-4957-8769-d49382a8e561}\{5bc2b5ab-80de-4e83-b8cf-426902051d0a}\stringtable-0009-english.ips
- %TEMP%\{bfef399f-9e98-4957-8769-d49382a8e561}\{5bc2b5ab-80de-4e83-b8cf-426902051d0a}\hidedae6.rra в %TEMP%\{bfef399f-9e98-4957-8769-d49382a8e561}\{5bc2b5ab-80de-4e83-b8cf-426902051d0a}\hidesetupwizard.dll
- %TEMP%\{bfef399f-9e98-4957-8769-d49382a8e561}\coredb05.rra в %TEMP%\{bfef399f-9e98-4957-8769-d49382a8e561}\corecomp.ini
- %TEMP%\{bfef399f-9e98-4957-8769-d49382a8e561}\dotndb05.rra в %TEMP%\{bfef399f-9e98-4957-8769-d49382a8e561}\dotnetinstaller.exe
- %TEMP%\{bfef399f-9e98-4957-8769-d49382a8e561}\{5bc2b5ab-80de-4e83-b8cf-426902051d0a}\fontdb24.rra в %TEMP%\{bfef399f-9e98-4957-8769-d49382a8e561}\{5bc2b5ab-80de-4e83-b8cf-426902051d0a}\fontdata.ini
- %TEMP%\{bfef399f-9e98-4957-8769-d49382a8e561}\{5bc2b5ab-80de-4e83-b8cf-426902051d0a}\difxdb24.rra в %TEMP%\{bfef399f-9e98-4957-8769-d49382a8e561}\{5bc2b5ab-80de-4e83-b8cf-426902051d0a}\difxdata.ini
- %TEMP%\{bfef399f-9e98-4957-8769-d49382a8e561}\{5bc2b5ab-80de-4e83-b8cf-426902051d0a}\vasddb24.rra в %TEMP%\{bfef399f-9e98-4957-8769-d49382a8e561}\{5bc2b5ab-80de-4e83-b8cf-426902051d0a}\vasdata.ini
- %TEMP%\{bfef399f-9e98-4957-8769-d49382a8e561}\isbedb24.rra в %TEMP%\{bfef399f-9e98-4957-8769-d49382a8e561}\isbew64.exe
- %TEMP%\{bfef399f-9e98-4957-8769-d49382a8e561}\{5bc2b5ab-80de-4e83-b8cf-426902051d0a}\isrtdb43.rra в %TEMP%\{bfef399f-9e98-4957-8769-d49382a8e561}\{5bc2b5ab-80de-4e83-b8cf-426902051d0a}\isrt.dll
- %ProgramFiles(x86)%\realtek\realtek card reader\rtspe296.rra в %ProgramFiles(x86)%\realtek\realtek card reader\rtsp2stor.sys
- %TEMP%\{bfef399f-9e98-4957-8769-d49382a8e561}\{5bc2b5ab-80de-4e83-b8cf-426902051d0a}\defadb43.rra в %TEMP%\{bfef399f-9e98-4957-8769-d49382a8e561}\{5bc2b5ab-80de-4e83-b8cf-426902051d0a}\default.pal
- %TEMP%\{bfef399f-9e98-4957-8769-d49382a8e561}\{5bc2b5ab-80de-4e83-b8cf-426902051d0a}\_isrdb43.rra в %TEMP%\{bfef399f-9e98-4957-8769-d49382a8e561}\{5bc2b5ab-80de-4e83-b8cf-426902051d0a}\_isres.dll
- %ProgramFiles(x86)%\realtek\realtek card reader\confe110.rra в %ProgramFiles(x86)%\realtek\realtek card reader\config.ini
- %ProgramFiles(x86)%\realtek\realtek card reader\rmbe110.rra в %ProgramFiles(x86)%\realtek\realtek card reader\rmb.exe
- %ProgramFiles(x86)%\realtek\realtek card reader\sdrte12f.rra в %ProgramFiles(x86)%\realtek\realtek card reader\sdrtcprm.dll
- %ProgramFiles(x86)%\realtek\realtek card reader\setee13f.rra в %ProgramFiles(x86)%\realtek\realtek card reader\setehcikey.exe
- %ProgramFiles(x86)%\realtek\realtek card reader\rscre13f.rra в %ProgramFiles(x86)%\realtek\realtek card reader\rscricon.dll
- %ProgramFiles(x86)%\realtek\realtek card reader\rtspe2a6.rra в %ProgramFiles(x86)%\realtek\realtek card reader\rtsp2stor64.cat
- %WINDIR%\syswow64\sda\sdrt2906.rra в %WINDIR%\syswow64\sda\sdrtcprm.dll
Другое
Создает и запускает на исполнение
- '%TEMP%\7zscea5d4cf\setup.exe'
- '%TEMP%\{bfef399f-9e98-4957-8769-d49382a8e561}\isbew64.exe' {EFB7539B-24F3-46B6-AF6E-3B021B51EFEF}:{94D049C4-27B0-4CE1-9061-BD582873A742}
- '%ProgramFiles(x86)%\realtek\realtek card reader\revcon64.exe' RS_dp_add RtsP2StorMSI.inf
- '%ProgramFiles(x86)%\realtek\realtek card reader\revcon64.exe' RS_update RtsP2StorMSI.inf PCI\VEN_10EC&DEV_5229&CC_FF00
- '%ProgramFiles(x86)%\realtek\realtek card reader\revcon64.exe' RS_remove PCI\VEN_10EC&DEV_5229&CC_FF00
- '%ProgramFiles(x86)%\realtek\realtek card reader\rmb.exe' /install
- '%ProgramFiles(x86)%\realtek\realtek card reader\revcon64.exe' RS_dp_add RtsP2StorMSI.inf' (со скрытым окном)
- '%ProgramFiles(x86)%\realtek\realtek card reader\revcon64.exe' RS_update RtsP2StorMSI.inf PCI\VEN_10EC&DEV_5229&CC_FF00' (со скрытым окном)
- '%ProgramFiles(x86)%\realtek\realtek card reader\revcon64.exe' RS_remove PCI\VEN_10EC&DEV_5229&CC_FF00' (со скрытым окном)
- '%ProgramFiles(x86)%\realtek\realtek card reader\rmb.exe' /install' (со скрытым окном)
