Техническая информация
Изменения в файловой системе
Создает следующие файлы
- %TEMP%\7zipsfx.000\data1.cab
- %ProgramFiles(x86)%\realtek\realtek card reader\rmb5f8d.rra
- %ProgramFiles(x86)%\realtek\realtek card reader\conf5f8d.rra
- %ProgramFiles(x86)%\realtek\realtek card reader\rscr5f7d.rra
- %ProgramFiles(x86)%\realtek\realtek card reader\rico5f3f.rra
- <DRIVERS>\rtsp5f2f.rra
- %ProgramFiles(x86)%\realtek\realtek card reader\rtsp5e16.rra
- %ProgramFiles(x86)%\realtek\realtek card reader\rtsp5e07.rra
- %ProgramFiles(x86)%\realtek\realtek card reader\sdrt5f9c.rra
- %ProgramFiles(x86)%\realtek\realtek card reader\rtsp5df7.rra
- %TEMP%\{78a24820-8ae8-4478-9d26-b605d5b60aa1}\{5bc2b5ab-80de-4e83-b8cf-426902051d0a}\defa59b3.rra
- %TEMP%\{78a24820-8ae8-4478-9d26-b605d5b60aa1}\{5bc2b5ab-80de-4e83-b8cf-426902051d0a}\isrt59b3.rra
- %TEMP%\{78a24820-8ae8-4478-9d26-b605d5b60aa1}\{5bc2b5ab-80de-4e83-b8cf-426902051d0a}\stri59a4.rra
- %TEMP%\{78a24820-8ae8-4478-9d26-b605d5b60aa1}\isbe59a4.rra
- %TEMP%\{78a24820-8ae8-4478-9d26-b605d5b60aa1}\{5bc2b5ab-80de-4e83-b8cf-426902051d0a}\vasd5994.rra
- %TEMP%\{78a24820-8ae8-4478-9d26-b605d5b60aa1}\{5bc2b5ab-80de-4e83-b8cf-426902051d0a}\difx5994.rra
- %TEMP%\{78a24820-8ae8-4478-9d26-b605d5b60aa1}\{5bc2b5ab-80de-4e83-b8cf-426902051d0a}\font5994.rra
- %TEMP%\{78a24820-8ae8-4478-9d26-b605d5b60aa1}\{5bc2b5ab-80de-4e83-b8cf-426902051d0a}\_isr59b3.rra
- %ProgramFiles(x86)%\realtek\realtek card reader\sete5fac.rra
- %ProgramFiles(x86)%\realtek\realtek card reader\disp5fac.rra
- %ProgramFiles(x86)%\realtek\realtek card reader\revc5fbc.rra
- %WINDIR%\syswow64\sda\sdrta4e6.rra
- <SYSTEM32>\catroot\{f750e6c3-38ee-11d1-85e5-00c04fc295ee}\oem2.cat
- %TEMP%\{06d0e763-0337-2d9a-0b2c-0c1444453601}\set6d46.tmp
- %TEMP%\{06d0e763-0337-2d9a-0b2c-0c1444453601}\set6c5b.tmp
- %TEMP%\{06d0e763-0337-2d9a-0b2c-0c1444453601}\set6b8f.tmp
- %TEMP%\{06d0e763-0337-2d9a-0b2c-0c1444453601}\set6aa4.tmp
- %ProgramFiles(x86)%\installshield installation information\{5bc2b5ab-80de-4e83-b8cf-426902051d0a}\setup.ini
- %ProgramFiles(x86)%\installshield installation information\{5bc2b5ab-80de-4e83-b8cf-426902051d0a}\setu61ed.rra
- %ProgramFiles(x86)%\installshield installation information\{5bc2b5ab-80de-4e83-b8cf-426902051d0a}\setu61de.rra
- %ProgramFiles(x86)%\installshield installation information\{5bc2b5ab-80de-4e83-b8cf-426902051d0a}\isse61ce.rra
- %ProgramFiles(x86)%\installshield installation information\{5bc2b5ab-80de-4e83-b8cf-426902051d0a}\_set61be.rra
- %ProgramFiles(x86)%\installshield installation information\{5bc2b5ab-80de-4e83-b8cf-426902051d0a}\setu61af.rra
- %ProgramFiles(x86)%\installshield installation information\{5bc2b5ab-80de-4e83-b8cf-426902051d0a}\data6151.rra
- %ProgramFiles(x86)%\installshield installation information\{5bc2b5ab-80de-4e83-b8cf-426902051d0a}\data6142.rra
- %ProgramFiles(x86)%\installshield installation information\{5bc2b5ab-80de-4e83-b8cf-426902051d0a}\layo6142.rra
- %ProgramFiles(x86)%\installshield installation information\{5bc2b5ab-80de-4e83-b8cf-426902051d0a}\pkgc5fcb.rra
- %ProgramFiles(x86)%\installshield installation information\{5bc2b5ab-80de-4e83-b8cf-426902051d0a}\uset5fcb.rra
- %TEMP%\{78a24820-8ae8-4478-9d26-b605d5b60aa1}\dotn5994.rra
- %ProgramFiles(x86)%\realtek\realtek card reader\rmb.log
- %TEMP%\{78a24820-8ae8-4478-9d26-b605d5b60aa1}\core5994.rra
- %TEMP%\58f8.rra
- %TEMP%\7zipsfx.000\u2setup.iss
- %TEMP%\7zipsfx.000\setup.iss
- %TEMP%\7zipsfx.000\setup.isn
- %TEMP%\7zipsfx.000\setup.inx
- %TEMP%\7zipsfx.000\drvbin64\rtsper.inf
- %TEMP%\7zipsfx.000\drvbin32\rtsper.inf
- %TEMP%\7zipsfx.000\data1.hdr
- %TEMP%\7zipsfx.000\u3setup.iss
- %TEMP%\7zipsfx.000\drvbin64\rtsper64.cat
- %TEMP%\7zipsfx.000\setup.ini
- %TEMP%\7zipsfx.000\pkgconf.ini
- %TEMP%\7zipsfx.000\apbin\config.ini
- %TEMP%\7zipsfx.000\readme.txt
- %TEMP%\7zipsfx.000\layout.bin
- %TEMP%\7zipsfx.000\utility\display.ico
- %TEMP%\7zipsfx.000\data2.cab
- %TEMP%\7zipsfx.000\drvbin32\rtsper32.cat
- %TEMP%\7zipsfx.000\usetup.iss
- %TEMP%\7zipsfx.000\utility\revcon32.exe
- %TEMP%\7zipsfx.000\utility\revcon64.exe
- %TEMP%\{a2bc647a-2b33-4979-80e5-4e7f12f20928}\setup.ini
- %TEMP%\{a2bc647a-2b33-4979-80e5-4e7f12f20928}\_setup.dll
- %TEMP%\7zipsfx.000\drvbin64\rtsper.sys
- %TEMP%\7zipsfx.000\drvbin32\rtsper.sys
- %TEMP%\7zipsfx.000\_setup.dll
- %TEMP%\7zipsfx.000\drvbin32\sdrtcprm.dll
- %TEMP%\7zipsfx.000\apbin\sdrtcprm.dll
- %TEMP%\7zipsfx.000\drvbin64\rtspericon.dll
- %TEMP%\7zipsfx.000\drvbin32\rtspericon.dll
- %TEMP%\7zipsfx.000\apbin64\rscrlib.dll
- %TEMP%\7zipsfx.000\apbin32\rscrlib.dll
- %TEMP%\7zipsfx.000\issetup.dll
- %TEMP%\7zipsfx.000\setup.exe
- %TEMP%\7zipsfx.000\apbin\setehcikey.exe
- %TEMP%\7zipsfx.000\apbin\rmb.exe
- %TEMP%\7zipsfx.000\apbin64\riconman.exe
- %TEMP%\7zipsfx.000\apbin32\riconman.exe
- %TEMP%\{78a24820-8ae8-4478-9d26-b605d5b60aa1}\{5bc2b5ab-80de-4e83-b8cf-426902051d0a}\setu5984.rra
- %ProgramFiles(x86)%\realtek\realtek card reader\config.ini
Присваивает атрибут 'скрытый' для следующих файлов
- <SYSTEM32>\catroot\{f750e6c3-38ee-11d1-85e5-00c04fc295ee}\oem2.cat
Удаляет следующие файлы
- %TEMP%\{06d0e763-0337-2d9a-0b2c-0c1444453601}\rtsper.inf
- %TEMP%\{06d0e763-0337-2d9a-0b2c-0c1444453601}\rtsper.sys
- %TEMP%\{06d0e763-0337-2d9a-0b2c-0c1444453601}\rtsper64.cat
- %TEMP%\{06d0e763-0337-2d9a-0b2c-0c1444453601}\rtspericon.dll
Перемещает следующие файлы
- %TEMP%\{78a24820-8ae8-4478-9d26-b605d5b60aa1}\{5bc2b5ab-80de-4e83-b8cf-426902051d0a}\setu5984.rra в %TEMP%\{78a24820-8ae8-4478-9d26-b605d5b60aa1}\{5bc2b5ab-80de-4e83-b8cf-426902051d0a}\setup.inx
- %ProgramFiles(x86)%\realtek\realtek card reader\revc5fbc.rra в %ProgramFiles(x86)%\realtek\realtek card reader\revcon32.exe
- %ProgramFiles(x86)%\realtek\realtek card reader\revc5fbc.rra в %ProgramFiles(x86)%\realtek\realtek card reader\revcon64.exe
- %ProgramFiles(x86)%\installshield installation information\{5bc2b5ab-80de-4e83-b8cf-426902051d0a}\uset5fcb.rra в %ProgramFiles(x86)%\installshield installation information\{5bc2b5ab-80de-4e83-b8cf-426902051d0a}\usetup.iss
- %ProgramFiles(x86)%\installshield installation information\{5bc2b5ab-80de-4e83-b8cf-426902051d0a}\pkgc5fcb.rra в %ProgramFiles(x86)%\installshield installation information\{5bc2b5ab-80de-4e83-b8cf-426902051d0a}\pkgconf.ini
- %ProgramFiles(x86)%\installshield installation information\{5bc2b5ab-80de-4e83-b8cf-426902051d0a}\layo6142.rra в %ProgramFiles(x86)%\installshield installation information\{5bc2b5ab-80de-4e83-b8cf-426902051d0a}\layout.bin
- %ProgramFiles(x86)%\installshield installation information\{5bc2b5ab-80de-4e83-b8cf-426902051d0a}\data6142.rra в %ProgramFiles(x86)%\installshield installation information\{5bc2b5ab-80de-4e83-b8cf-426902051d0a}\data1.hdr
- %ProgramFiles(x86)%\realtek\realtek card reader\sete5fac.rra в %ProgramFiles(x86)%\realtek\realtek card reader\setehcikey.exe
- %ProgramFiles(x86)%\realtek\realtek card reader\disp5fac.rra в %ProgramFiles(x86)%\realtek\realtek card reader\display.ico
- %ProgramFiles(x86)%\installshield installation information\{5bc2b5ab-80de-4e83-b8cf-426902051d0a}\data6151.rra в %ProgramFiles(x86)%\installshield installation information\{5bc2b5ab-80de-4e83-b8cf-426902051d0a}\data1.cab
- %ProgramFiles(x86)%\installshield installation information\{5bc2b5ab-80de-4e83-b8cf-426902051d0a}\isse61ce.rra в %ProgramFiles(x86)%\installshield installation information\{5bc2b5ab-80de-4e83-b8cf-426902051d0a}\issetup.dll
- %ProgramFiles(x86)%\installshield installation information\{5bc2b5ab-80de-4e83-b8cf-426902051d0a}\setu61de.rra в %ProgramFiles(x86)%\installshield installation information\{5bc2b5ab-80de-4e83-b8cf-426902051d0a}\setup.inx
- %ProgramFiles(x86)%\installshield installation information\{5bc2b5ab-80de-4e83-b8cf-426902051d0a}\setu61ed.rra в %ProgramFiles(x86)%\installshield installation information\{5bc2b5ab-80de-4e83-b8cf-426902051d0a}\setup.ini
- %TEMP%\{06d0e763-0337-2d9a-0b2c-0c1444453601}\set6aa4.tmp в %TEMP%\{06d0e763-0337-2d9a-0b2c-0c1444453601}\rtsper.inf
- %TEMP%\{06d0e763-0337-2d9a-0b2c-0c1444453601}\set6b8f.tmp в %TEMP%\{06d0e763-0337-2d9a-0b2c-0c1444453601}\rtsper.sys
- %TEMP%\{06d0e763-0337-2d9a-0b2c-0c1444453601}\set6c5b.tmp в %TEMP%\{06d0e763-0337-2d9a-0b2c-0c1444453601}\rtsper64.cat
- %ProgramFiles(x86)%\installshield installation information\{5bc2b5ab-80de-4e83-b8cf-426902051d0a}\setu61af.rra в %ProgramFiles(x86)%\installshield installation information\{5bc2b5ab-80de-4e83-b8cf-426902051d0a}\setup.exe
- %ProgramFiles(x86)%\installshield installation information\{5bc2b5ab-80de-4e83-b8cf-426902051d0a}\_set61be.rra в %ProgramFiles(x86)%\installshield installation information\{5bc2b5ab-80de-4e83-b8cf-426902051d0a}\_setup.dll
- %ProgramFiles(x86)%\realtek\realtek card reader\sdrt5f9c.rra в %ProgramFiles(x86)%\realtek\realtek card reader\sdrtcprm.dll
- %ProgramFiles(x86)%\realtek\realtek card reader\rmb5f8d.rra в %ProgramFiles(x86)%\realtek\realtek card reader\rmb.exe
- %ProgramFiles(x86)%\realtek\realtek card reader\conf5f8d.rra в %ProgramFiles(x86)%\realtek\realtek card reader\config.ini
- %TEMP%\{78a24820-8ae8-4478-9d26-b605d5b60aa1}\dotn5994.rra в %TEMP%\{78a24820-8ae8-4478-9d26-b605d5b60aa1}\dotnetinstaller.exe
- %TEMP%\{78a24820-8ae8-4478-9d26-b605d5b60aa1}\{5bc2b5ab-80de-4e83-b8cf-426902051d0a}\font5994.rra в %TEMP%\{78a24820-8ae8-4478-9d26-b605d5b60aa1}\{5bc2b5ab-80de-4e83-b8cf-426902051d0a}\fontdata.ini
- %TEMP%\{78a24820-8ae8-4478-9d26-b605d5b60aa1}\{5bc2b5ab-80de-4e83-b8cf-426902051d0a}\difx5994.rra в %TEMP%\{78a24820-8ae8-4478-9d26-b605d5b60aa1}\{5bc2b5ab-80de-4e83-b8cf-426902051d0a}\difxdata.ini
- %TEMP%\{78a24820-8ae8-4478-9d26-b605d5b60aa1}\{5bc2b5ab-80de-4e83-b8cf-426902051d0a}\vasd5994.rra в %TEMP%\{78a24820-8ae8-4478-9d26-b605d5b60aa1}\{5bc2b5ab-80de-4e83-b8cf-426902051d0a}\vasdata.ini
- %TEMP%\{78a24820-8ae8-4478-9d26-b605d5b60aa1}\isbe59a4.rra в %TEMP%\{78a24820-8ae8-4478-9d26-b605d5b60aa1}\isbew64.exe
- %TEMP%\{78a24820-8ae8-4478-9d26-b605d5b60aa1}\{5bc2b5ab-80de-4e83-b8cf-426902051d0a}\stri59a4.rra в %TEMP%\{78a24820-8ae8-4478-9d26-b605d5b60aa1}\{5bc2b5ab-80de-4e83-b8cf-426902051d0a}\stringtable-0009-english.ips
- %TEMP%\{78a24820-8ae8-4478-9d26-b605d5b60aa1}\{5bc2b5ab-80de-4e83-b8cf-426902051d0a}\isrt59b3.rra в %TEMP%\{78a24820-8ae8-4478-9d26-b605d5b60aa1}\{5bc2b5ab-80de-4e83-b8cf-426902051d0a}\isrt.dll
- %TEMP%\{78a24820-8ae8-4478-9d26-b605d5b60aa1}\core5994.rra в %TEMP%\{78a24820-8ae8-4478-9d26-b605d5b60aa1}\corecomp.ini
- %TEMP%\{78a24820-8ae8-4478-9d26-b605d5b60aa1}\{5bc2b5ab-80de-4e83-b8cf-426902051d0a}\defa59b3.rra в %TEMP%\{78a24820-8ae8-4478-9d26-b605d5b60aa1}\{5bc2b5ab-80de-4e83-b8cf-426902051d0a}\default.pal
- %ProgramFiles(x86)%\realtek\realtek card reader\rtsp5df7.rra в %ProgramFiles(x86)%\realtek\realtek card reader\rtsper.inf
- %ProgramFiles(x86)%\realtek\realtek card reader\rtsp5e07.rra в %ProgramFiles(x86)%\realtek\realtek card reader\rtsper.sys
- %ProgramFiles(x86)%\realtek\realtek card reader\rtsp5e07.rra в %ProgramFiles(x86)%\realtek\realtek card reader\rtsper64.cat
- %ProgramFiles(x86)%\realtek\realtek card reader\rtsp5e16.rra в %ProgramFiles(x86)%\realtek\realtek card reader\rtspericon.dll
- <DRIVERS>\rtsp5f2f.rra в <DRIVERS>\rtsper.sys
- %ProgramFiles(x86)%\realtek\realtek card reader\rico5f3f.rra в %ProgramFiles(x86)%\realtek\realtek card reader\riconman.exe
- %ProgramFiles(x86)%\realtek\realtek card reader\rscr5f7d.rra в %ProgramFiles(x86)%\realtek\realtek card reader\rscrlib.dll
- %TEMP%\{78a24820-8ae8-4478-9d26-b605d5b60aa1}\{5bc2b5ab-80de-4e83-b8cf-426902051d0a}\_isr59b3.rra в %TEMP%\{78a24820-8ae8-4478-9d26-b605d5b60aa1}\{5bc2b5ab-80de-4e83-b8cf-426902051d0a}\_isres.dll
- %TEMP%\{06d0e763-0337-2d9a-0b2c-0c1444453601}\set6d46.tmp в %TEMP%\{06d0e763-0337-2d9a-0b2c-0c1444453601}\rtspericon.dll
- %WINDIR%\syswow64\sda\sdrta4e6.rra в %WINDIR%\syswow64\sda\sdrtcprm.dll
Подменяет следующие файлы
- %ProgramFiles(x86)%\realtek\realtek card reader\rtsp5e07.rra
- %ProgramFiles(x86)%\realtek\realtek card reader\revc5fbc.rra
Другое
Создает и запускает на исполнение
- '%TEMP%\7zipsfx.000\setup.exe'
- '%TEMP%\{78a24820-8ae8-4478-9d26-b605d5b60aa1}\isbew64.exe' {EFB7539B-24F3-46B6-AF6E-3B021B51EFEF}:{2FE800DD-2669-4FF3-88BC-49E694BBDCB0}
- '%ProgramFiles(x86)%\realtek\realtek card reader\rmb.exe' /install
- '%ProgramFiles(x86)%\realtek\realtek card reader\revcon64.exe' RS_dp_add RtsPer.inf' (со скрытым окном)
- '%ProgramFiles(x86)%\realtek\realtek card reader\revcon64.exe' RS_update RtsPer.inf PCI\VEN_10EC&DEV_5227&CC_FF00' (со скрытым окном)
- '%ProgramFiles(x86)%\realtek\realtek card reader\revcon64.exe' RS_remove PCI\VEN_10EC&DEV_5227&CC_FF00' (со скрытым окном)
- '%ProgramFiles(x86)%\realtek\realtek card reader\revcon64.exe' RS_update RtsPer.inf PCI\VEN_10EC&DEV_5249&CC_FF00' (со скрытым окном)
- '%ProgramFiles(x86)%\realtek\realtek card reader\revcon64.exe' RS_remove PCI\VEN_10EC&DEV_5249&CC_FF00' (со скрытым окном)
- '%ProgramFiles(x86)%\realtek\realtek card reader\revcon64.exe' RS_update RtsPer.inf PCI\VEN_10EC&DEV_5287&CC_FF00' (со скрытым окном)
- '%ProgramFiles(x86)%\realtek\realtek card reader\revcon64.exe' RS_remove PCI\VEN_10EC&DEV_5287&CC_FF00' (со скрытым окном)
- '%ProgramFiles(x86)%\realtek\realtek card reader\rmb.exe' /install' (со скрытым окном)
