Trojan.KillFiles.10075

Техническая информация

Вредоносные функции:

Для затруднения выявления своего присутствия в системе

блокирует отображение:

расширений файлов

блокирует:

Компонент восстановления системы (SR)
Cредство проверки системных файлов (SFC)

Запускает на исполнение:

%WINDIR%\regedit.exe /s configteclado.reg
%WINDIR%\regedit.exe /s PDConfig.reg
%WINDIR%\regedit.exe /s eula.reg
<SYSTEM32>\attrib.exe +S +H C:\boot.ini
%WINDIR%\regedit.exe /s grupos.reg
%WINDIR%\regedit.exe /s visual.reg
<SYSTEM32>\regsvr32.exe /u shmedia.dll /s
<SYSTEM32>\diskperf.exe -N
%WINDIR%\regedit.exe /s "<LS_APPDATA>\data.ui"
<SYSTEM32>\sfc.exe /CANCEL
<SYSTEM32>\regsvr32.exe /u msctf.dll /s
<SYSTEM32>\regsvr32.exe /u msimtf.dll /s

Изменяет следующие настройки проводника Windows (Windows Explorer):

[<HKCU>\Software\Microsoft\Windows\CurrentVersion\Policies\Explorer] 'NoStartMenuMFUprogramsList' = '00000001'
[<HKCU>\Software\Microsoft\Windows\CurrentVersion\Policies\Explorer] 'StartMenuLogoff' = '00000001'
[<HKCU>\Software\Microsoft\Windows\CurrentVersion\Policies\Explorer] 'NoRecentDocsMenu' = '00000001'
[<HKCU>\Software\Microsoft\Windows\CurrentVersion\Policies\Explorer] 'NoActiveDesktop' = ''
[<HKCU>\Software\Microsoft\Windows\CurrentVersion\Policies\Explorer] 'NoSMHelp' = ''

Принудительно разрешает автозапуск со съемных носителей.

Изменения в файловой системе:

Создает следующие файлы:

%TEMP%\RGI2.tmp
%TEMP%\2911.cmd
<LS_APPDATA>\data.ui

Присваивает атрибут 'скрытый' для следующих файлов:

%TEMP%\2911.cmd

Удаляет следующие файлы:

<SYSTEM32>\oobe\actsetup\activerr.htm
<SYSTEM32>\oobe\actsetup\activsvc.htm
<SYSTEM32>\oobe\actsetup\actdone.htm
<SYSTEM32>\oobe\actsetup\activ.htm
<SYSTEM32>\oobe\actsetup\actlan.htm
<SYSTEM32>\oobe\actsetup\apolicy.htm
<SYSTEM32>\oobe\actsetup\aprvcyms.htm
<SYSTEM32>\oobe\actsetup\adeskerr.htm
<SYSTEM32>\oobe\actsetup\adrdyreg.htm
%WINDIR%\pchealth\helpctr\Vendors\CN=Microsoft Corporation,L=Redmond,S=Washington,C=US\Remote Assistance\Escalation\Email\ShieldsUpMsg.htm
%WINDIR%\pchealth\helpctr\Vendors\CN=Microsoft Corporation,L=Redmond,S=Washington,C=US\Remote Assistance\Escalation\Unsolicited\UnSolicitedRCUI.htm
%WINDIR%\pchealth\helpctr\Vendors\CN=Microsoft Corporation,L=Redmond,S=Washington,C=US\Remote Assistance\Escalation\Email\rcscreen8.htm
%WINDIR%\pchealth\helpctr\Vendors\CN=Microsoft Corporation,L=Redmond,S=Washington,C=US\Remote Assistance\Escalation\Email\rcscreen9.htm
<SYSTEM32>\oobe\actshell.htm
<SYSTEM32>\oobe\updshell.htm
<SYSTEM32>\oobe\actsetup\actconn.htm
<SYSTEM32>\oobe\dtsgnup.htm
<SYSTEM32>\oobe\msobshel.htm
<SYSTEM32>\oobe\actsetup\areg1.htm
<SYSTEM32>\oobe\html\dslmain\dslmain.htm
<SYSTEM32>\oobe\html\dslmain\dsl_a.htm
<SYSTEM32>\oobe\error\pulse.htm
<SYSTEM32>\oobe\error\toobusy.htm
<SYSTEM32>\oobe\html\dslmain\dsl_b.htm
<SYSTEM32>\oobe\html\isptype\isptype.htm
<SYSTEM32>\oobe\html\mouse\mouse.htm
<SYSTEM32>\oobe\html\iconnect\icntlast.htm
<SYSTEM32>\oobe\html\iconnect\iconnect.htm
<SYSTEM32>\oobe\actsetup\ausrinfo.htm
<SYSTEM32>\oobe\error\cnncterr.htm
<SYSTEM32>\oobe\actsetup\aregdial.htm
<SYSTEM32>\oobe\actsetup\aregdone.htm
<SYSTEM32>\oobe\error\dialtone.htm
<SYSTEM32>\oobe\error\noanswer.htm
<SYSTEM32>\oobe\error\pberr.htm
<SYSTEM32>\oobe\error\hndshake.htm
<SYSTEM32>\oobe\error\isp2busy.htm
%WINDIR%\pchealth\helpctr\System\UpdateCtr\Learn.htm
%WINDIR%\pchealth\helpctr\System\UpdateCtr\LearnInternet.htm
%WINDIR%\pchealth\helpctr\System\sysinfo\sysSoftwareInfo.htm
%WINDIR%\pchealth\helpctr\System\UpdateCtr\AboutWU.htm
%WINDIR%\pchealth\helpctr\System\UpdateCtr\learnWU.htm
%WINDIR%\pchealth\helpctr\Vendors\CN=Microsoft Corporation,L=Redmond,S=Washington,C=US\OfflineDC.htm
%WINDIR%\pchealth\helpctr\Vendors\CN=Microsoft Corporation,L=Redmond,S=Washington,C=US\OfflineOptions.htm
%WINDIR%\pchealth\helpctr\System\UpdateCtr\updatecenter.htm
%WINDIR%\pchealth\helpctr\Vendors\CN=Microsoft Corporation,L=Redmond,S=Washington,C=US\Connection.htm
%WINDIR%\pchealth\helpctr\System\sysinfo\sysEvtLogInfo.htm
%WINDIR%\pchealth\helpctr\System\sysinfo\sysHealthInfo.htm
%WINDIR%\pchealth\helpctr\System\sysinfo\sysConfigLaunch.htm
%WINDIR%\pchealth\helpctr\System\sysinfo\sysDiskTS.htm
%WINDIR%\pchealth\helpctr\System\sysinfo\sysInfoLaunch.htm
%WINDIR%\pchealth\helpctr\System\sysinfo\sysRemoteInfo.htm
%WINDIR%\pchealth\helpctr\System\sysinfo\sysServicesInfo.htm
%WINDIR%\pchealth\helpctr\System\sysinfo\sysinfomain.htm
%WINDIR%\pchealth\helpctr\System\sysinfo\sysinfosum.htm
%WINDIR%\pchealth\helpctr\Vendors\CN=Microsoft Corporation,L=Redmond,S=Washington,C=US\pss_getting_worldwide_help.htm
%WINDIR%\pchealth\helpctr\Vendors\CN=Microsoft Corporation,L=Redmond,S=Washington,C=US\Remote Assistance\Escalation\Email\rcDetails.htm
%WINDIR%\pchealth\helpctr\Vendors\CN=Microsoft Corporation,L=Redmond,S=Washington,C=US\Remote Assistance\Escalation\Email\rcInviteStatus.htm
%WINDIR%\pchealth\helpctr\Vendors\CN=Microsoft Corporation,L=Redmond,S=Washington,C=US\Remote Assistance\Escalation\Common\rcscreen3.htm
%WINDIR%\pchealth\helpctr\Vendors\CN=Microsoft Corporation,L=Redmond,S=Washington,C=US\Remote Assistance\Escalation\Email\escalationhelp.htm
%WINDIR%\pchealth\helpctr\Vendors\CN=Microsoft Corporation,L=Redmond,S=Washington,C=US\Remote Assistance\Escalation\Email\rcscreen4.htm
%WINDIR%\pchealth\helpctr\Vendors\CN=Microsoft Corporation,L=Redmond,S=Washington,C=US\Remote Assistance\Escalation\Email\rcscreen6_head.htm
%WINDIR%\pchealth\helpctr\Vendors\CN=Microsoft Corporation,L=Redmond,S=Washington,C=US\Remote Assistance\Escalation\Email\rcscreen7.htm
%WINDIR%\pchealth\helpctr\Vendors\CN=Microsoft Corporation,L=Redmond,S=Washington,C=US\Remote Assistance\Escalation\Email\rcscreen5.htm
%WINDIR%\pchealth\helpctr\Vendors\CN=Microsoft Corporation,L=Redmond,S=Washington,C=US\Remote Assistance\Escalation\Email\rcscreen6.htm
%WINDIR%\pchealth\helpctr\Vendors\CN=Microsoft Corporation,L=Redmond,S=Washington,C=US\Remote Assistance\Common\ConnIssue.htm
%WINDIR%\pchealth\helpctr\Vendors\CN=Microsoft Corporation,L=Redmond,S=Washington,C=US\Remote Assistance\Common\LearnInternet.htm
%WINDIR%\pchealth\helpctr\Vendors\CN=Microsoft Corporation,L=Redmond,S=Washington,C=US\Remote Assistance\confirm.htm
%WINDIR%\pchealth\helpctr\Vendors\CN=Microsoft Corporation,L=Redmond,S=Washington,C=US\Remote Assistance\rcstatus.htm
%WINDIR%\pchealth\helpctr\Vendors\CN=Microsoft Corporation,L=Redmond,S=Washington,C=US\Remote Assistance\Common\RAHelp.htm
%WINDIR%\pchealth\helpctr\Vendors\CN=Microsoft Corporation,L=Redmond,S=Washington,C=US\Remote Assistance\Escalation\Common\rcscreen1.htm
%WINDIR%\pchealth\helpctr\Vendors\CN=Microsoft Corporation,L=Redmond,S=Washington,C=US\Remote Assistance\Escalation\Common\rcscreen2.htm
%WINDIR%\pchealth\helpctr\Vendors\CN=Microsoft Corporation,L=Redmond,S=Washington,C=US\Remote Assistance\Common\RCMoreInfo.htm
%WINDIR%\pchealth\helpctr\Vendors\CN=Microsoft Corporation,L=Redmond,S=Washington,C=US\Remote Assistance\Escalation\Common\rcConnection.htm
<SYSTEM32>\oobe\setup\ident1.htm
<SYSTEM32>\oobe\setup\ident2.htm
<SYSTEM32>\oobe\setup\iconn.htm
<SYSTEM32>\oobe\setup\ics.htm
<SYSTEM32>\oobe\setup\isp.htm
<SYSTEM32>\oobe\setup\jndom_a.htm
<SYSTEM32>\oobe\setup\keybd.htm
<SYSTEM32>\oobe\setup\ispwait.htm
<SYSTEM32>\oobe\setup\jndomain.htm
<SYSTEM32>\oobe\setup\drdyisp.htm
<SYSTEM32>\oobe\setup\drdymig.htm
<SYSTEM32>\oobe\setup\compname.htm
<SYSTEM32>\oobe\setup\dialup.htm
<SYSTEM32>\oobe\setup\drdyoem.htm
<SYSTEM32>\oobe\setup\fini.htm
<SYSTEM32>\oobe\setup\hnwprmpt.htm
<SYSTEM32>\oobe\setup\drdyref.htm
<SYSTEM32>\oobe\setup\dtiwait.htm
<SYSTEM32>\oobe\setup\keybdcmt.htm
<SYSTEM32>\oobe\setup\reg3.htm
<SYSTEM32>\oobe\setup\regdial.htm
<SYSTEM32>\oobe\setup\refdial.htm
<SYSTEM32>\oobe\setup\reg1.htm
<SYSTEM32>\oobe\setup\security.htm
<SYSTEM32>\oobe\setup\welcome.htm
%WINDIR%\Web\tip.htm
<SYSTEM32>\oobe\setup\timezone.htm
<SYSTEM32>\oobe\setup\username.htm
<SYSTEM32>\oobe\setup\migpage.htm
<SYSTEM32>\oobe\setup\neweula.htm
<SYSTEM32>\oobe\setup\migdial.htm
<SYSTEM32>\oobe\setup\miglist.htm
<SYSTEM32>\oobe\setup\neweula2.htm
<SYSTEM32>\oobe\setup\prodkey.htm
<SYSTEM32>\oobe\setup\prvcyms.htm
<SYSTEM32>\oobe\setup\oempriv.htm
<SYSTEM32>\oobe\setup\Oobedisc.htm
<SYSTEM32>\oobe\html\sconnect\scntlast.htm
<SYSTEM32>\oobe\html\sconnect\sconnect.htm
<SYSTEM32>\oobe\html\mouse\mouse_j.htm
<SYSTEM32>\oobe\html\mouse\mouse_k.htm
<SYSTEM32>\oobe\icserror\icsdc.htm
<SYSTEM32>\oobe\isperror\isphdshk.htm
<SYSTEM32>\oobe\isperror\ispins.htm
<SYSTEM32>\oobe\isperror\ispcnerr.htm
<SYSTEM32>\oobe\isperror\ispdtone.htm
<SYSTEM32>\oobe\html\mouse\mouse_c.htm
<SYSTEM32>\oobe\html\mouse\mouse_d.htm
<SYSTEM32>\oobe\html\mouse\mouse_a.htm
<SYSTEM32>\oobe\html\mouse\mouse_b.htm
<SYSTEM32>\oobe\html\mouse\mouse_e.htm
<SYSTEM32>\oobe\html\mouse\mouse_h.htm
<SYSTEM32>\oobe\html\mouse\mouse_i.htm
<SYSTEM32>\oobe\html\mouse\mouse_f.htm
<SYSTEM32>\oobe\html\mouse\mouse_g.htm
<SYSTEM32>\oobe\isperror\ispnoanw.htm
<SYSTEM32>\oobe\setup\acterror.htm
<SYSTEM32>\oobe\setup\activate.htm
<SYSTEM32>\oobe\regerror\rpulse.htm
<SYSTEM32>\oobe\regerror\rtoobusy.htm
<SYSTEM32>\oobe\setup\act_plcy.htm
<SYSTEM32>\oobe\setup\badeula.htm
<SYSTEM32>\oobe\setup\badpkey.htm
<SYSTEM32>\oobe\setup\autoupdt.htm
<SYSTEM32>\oobe\setup\au_plcy.htm
<SYSTEM32>\oobe\isperror\ispsbusy.htm
<SYSTEM32>\oobe\regerror\rcnterr.htm
<SYSTEM32>\oobe\isperror\isppberr.htm
<SYSTEM32>\oobe\isperror\ispphbsy.htm
<SYSTEM32>\oobe\regerror\rdtone.htm
<SYSTEM32>\oobe\regerror\rnomdm.htm
<SYSTEM32>\oobe\regerror\rpberr.htm
<SYSTEM32>\oobe\regerror\rhndshk.htm
<SYSTEM32>\oobe\regerror\rnoansw.htm
%WINDIR%\Help\Tours\htmlTour\start_control.htm
%WINDIR%\Help\Tours\htmlTour\start_desktop.htm
%WINDIR%\Help\Tours\htmlTour\safe_faster.htm
%WINDIR%\Help\Tours\htmlTour\safe_fr.htm
%WINDIR%\Help\Tours\htmlTour\start_ending.htm
%WINDIR%\Help\Tours\htmlTour\start_icons.htm
%WINDIR%\Help\Tours\htmlTour\start_menu.htm
%WINDIR%\Help\Tours\htmlTour\start_files.htm
%WINDIR%\Help\Tours\htmlTour\start_fr.htm
%WINDIR%\Help\Tours\htmlTour\connected_multiple.htm
%WINDIR%\Help\Tours\htmlTour\connected_networks.htm
%WINDIR%\Help\Tours\htmlTour\connected_data.htm
%WINDIR%\Help\Tours\htmlTour\connected_fr.htm
%WINDIR%\Help\Tours\htmlTour\connected_wizard.htm
%WINDIR%\Help\Tours\htmlTour\safe_better.htm
%WINDIR%\Help\Tours\htmlTour\safe_easier.htm
%WINDIR%\Help\Tours\htmlTour\default.htm
%WINDIR%\Help\Tours\htmlTour\footer.htm
%WINDIR%\Help\Tours\htmlTour\start_taskbar.htm
%WINDIR%\pchealth\helpctr\System\Headlines.htm
%WINDIR%\pchealth\helpctr\System\HomePage__DESKTOP.htm
%WINDIR%\Microsoft.NET\Framework\v4.0.30319\SetupCache\Client\DHtmlHeader.html
%WINDIR%\Microsoft.NET\Framework\v4.0.30319\SetupCache\Extended\DHtmlHeader.html
%WINDIR%\pchealth\helpctr\System\HomePage__SERVER.htm
%WINDIR%\pchealth\helpctr\System\blurbs\ftshelp.htm
%WINDIR%\pchealth\helpctr\System\blurbs\History.htm
%WINDIR%\pchealth\helpctr\System\blurbs\about_support.htm
%WINDIR%\pchealth\helpctr\System\blurbs\Favorites.htm
%WINDIR%\Help\Tours\htmlTour\unlock_fr.htm
%WINDIR%\Help\Tours\htmlTour\unlock_optimized.htm
%WINDIR%\Help\Tours\htmlTour\start_windows.htm
%WINDIR%\Help\Tours\htmlTour\unlock_built.htm
%WINDIR%\Help\Tours\htmlTour\unlock_playing.htm
%WINDIR%\Microsoft.NET\Framework\v1.1.4322\1033\repairRedist.htm
%WINDIR%\Microsoft.NET\Framework\v1.1.4322\ASP.NETClientFiles\SmartNav.htm
%WINDIR%\Help\Tours\WindowsMediaPlayer\Audio\snd.htm
%WINDIR%\Help\Tours\WindowsMediaPlayer\Cnt\contents.htm
%WINDIR%\Help\Tours\mmTour\segment5.txt
%WINDIR%\Installer\$PatchCache$\Managed\26DDC2EC4210AC63483DF9D4FCC5B59D\CacheSize.txt
%WINDIR%\Help\Tours\mmTour\segment3.txt
%WINDIR%\Help\Tours\mmTour\segment4.txt
%WINDIR%\Microsoft.NET\Framework\v1.1.4322\1033\SetupENU1.txt
%WINDIR%\Microsoft.NET\Framework\v3.0\Microsoft .NET Framework 3.0 x86\Logs\dd_dotnetfx3install.txt
%WINDIR%\Microsoft.NET\Framework\v3.0\Microsoft .NET Framework 3.0 x86\Logs\VSMsiLog22FD.txt
%WINDIR%\Microsoft.NET\Framework\v1.1.4322\1033\SetupENU2.txt
%WINDIR%\Microsoft.NET\Framework\v3.0\Microsoft .NET Framework 3.0 x86\Logs\dd_dotnetfx3error.txt
%WINDIR%\setuplog.txt
%WINDIR%\$NtUninstallKB942288-v3$\spuninst\spuninst.txt
%TEMP%\RGI2.tmp
%WINDIR%\OEWABLog.txt
%WINDIR%\$NtUninstallWIC$\spuninst\spuninst.txt
%WINDIR%\Help\Tours\mmTour\segment1.txt
%WINDIR%\Help\Tours\mmTour\segment2.txt
%WINDIR%\Help\Tours\mmTour\intro.txt
%WINDIR%\Help\Tours\mmTour\nav.txt
%WINDIR%\Microsoft.NET\Framework\v3.5\Microsoft .NET Framework 3.5 SP1\Logs\dd_dotnetfx35error.txt
%WINDIR%\Help\ixqlang.htm
%WINDIR%\Help\migwiz.htm
%WINDIR%\Help\ciadmin.htm
%WINDIR%\Help\ciquery.htm
%WINDIR%\Help\migwiz2.htm
%WINDIR%\Help\Tours\htmlTour\best_robust.htm
%WINDIR%\Help\Tours\htmlTour\best_secure.htm
%WINDIR%\Help\Tours\htmlTour\best_fr.htm
%WINDIR%\Help\Tours\htmlTour\best_road.htm
<SYSTEM32>\CatRoot2\dberr.txt
<SYSTEM32>\config\systemprofile\Application Data\Microsoft\Internet Explorer\brndlog.txt
%WINDIR%\Microsoft.NET\Framework\v3.5\Microsoft .NET Framework 3.5 SP1\Logs\dd_dotnetfx35install.txt
<SYSTEM32>\eula.txt
<DRIVERS>\gmreadme.txt
<SYSTEM32>\config\software.sav
<SYSTEM32>\config\system.sav
<SYSTEM32>\Restore\MachineGuid.txt
<SYSTEM32>\config\default.sav
%WINDIR%\pchealth\helpctr\System\Remote Assistance\Common\ConnIssue.htm
%WINDIR%\pchealth\helpctr\System\Remote Assistance\Common\LearnInternet.htm
%WINDIR%\pchealth\helpctr\System\Remote Assistance\RAStartPage.htm
%WINDIR%\pchealth\helpctr\System\Remote Assistance\rcBuddy.htm
%WINDIR%\pchealth\helpctr\System\Remote Assistance\Common\RAHelp.htm
%WINDIR%\pchealth\helpctr\System\Remote Assistance\Interaction\Client\RAChatClient.htm
%WINDIR%\pchealth\helpctr\System\Remote Assistance\Interaction\Client\RAClient.htm
%WINDIR%\pchealth\helpctr\System\Remote Assistance\Common\RCMoreInfo.htm
%WINDIR%\pchealth\helpctr\System\Remote Assistance\Interaction\Client\DividerBar.htm
%WINDIR%\pchealth\helpctr\System\panels\subpanels\History.htm
%WINDIR%\pchealth\helpctr\System\panels\subpanels\Index.htm
%WINDIR%\pchealth\helpctr\System\panels\subpanels\Channels.htm
%WINDIR%\pchealth\helpctr\System\panels\subpanels\Favorites.htm
%WINDIR%\pchealth\helpctr\System\panels\subpanels\Options.htm
%WINDIR%\pchealth\helpctr\System\rc\rcRequest.htm
%WINDIR%\pchealth\helpctr\System\Remote Assistance\helpeeaccept.htm
%WINDIR%\pchealth\helpctr\System\panels\subpanels\Search.htm
%WINDIR%\pchealth\helpctr\System\panels\subpanels\Subsite.htm
%WINDIR%\pchealth\helpctr\System\Remote Assistance\Interaction\Client\RAStatusBar.htm
%WINDIR%\pchealth\helpctr\System\Remote Assistance\Interaction\Server\RAServer.htm
%WINDIR%\pchealth\helpctr\System\Remote Assistance\Interaction\Server\RAServerToolBar.htm
%WINDIR%\pchealth\helpctr\System\Remote Assistance\Interaction\Server\DividerBar2.htm
%WINDIR%\pchealth\helpctr\System\Remote Assistance\Interaction\Server\RAChatServer.htm
%WINDIR%\pchealth\helpctr\System\Remote Assistance\Interaction\Server\SettingServer.htm
%WINDIR%\pchealth\helpctr\System\sysinfo\RSoP.htm
%WINDIR%\pchealth\helpctr\System\sysinfo\sysComponentInfo.htm
%WINDIR%\pchealth\helpctr\System\Remote Assistance\Interaction\Server\TakeControlMsgs.htm
%WINDIR%\pchealth\helpctr\System\sysinfo\msinfo.htm
%WINDIR%\pchealth\helpctr\System\Remote Assistance\Interaction\Client\rctoolScreen1.htm
%WINDIR%\pchealth\helpctr\System\Remote Assistance\Interaction\Client\setting.htm
%WINDIR%\pchealth\helpctr\System\Remote Assistance\Interaction\Client\RAToolBar.htm
%WINDIR%\pchealth\helpctr\System\Remote Assistance\Interaction\Client\rcscreen6_head.htm
%WINDIR%\pchealth\helpctr\System\Remote Assistance\Interaction\Common\ErrorMsgs.htm
%WINDIR%\pchealth\helpctr\System\Remote Assistance\Interaction\Common\VOIPMsgs.htm
%WINDIR%\pchealth\helpctr\System\Remote Assistance\Interaction\Server\DividerBar1.htm
%WINDIR%\pchealth\helpctr\System\Remote Assistance\Interaction\Common\RCFileXfer.htm
%WINDIR%\pchealth\helpctr\System\Remote Assistance\Interaction\Common\voicefirewallmsg.htm
%WINDIR%\pchealth\helpctr\System\CompatCtr\LearnCompat.htm
%WINDIR%\pchealth\helpctr\System\DFS\privacy.htm
%WINDIR%\pchealth\helpctr\System\CompatCtr\CompatMode.htm
%WINDIR%\pchealth\helpctr\System\CompatCtr\CompatOffline.htm
%WINDIR%\pchealth\helpctr\System\DFS\uplddrvinfo.htm
%WINDIR%\pchealth\helpctr\System\ErrMsg\ErrorMessagesOffline.htm
%WINDIR%\pchealth\helpctr\System\errors\badurl.htm
%WINDIR%\pchealth\helpctr\System\DFS\xmldialog.htm
%WINDIR%\pchealth\helpctr\System\DVDUpgrd\dvdupgrd.htm
%WINDIR%\pchealth\helpctr\System\blurbs\keywordhelp.htm
%WINDIR%\pchealth\helpctr\System\blurbs\options.htm
%WINDIR%\pchealth\helpctr\System\blurbs\Index.htm
%WINDIR%\pchealth\helpctr\System\blurbs\isupport.htm
%WINDIR%\pchealth\helpctr\System\blurbs\searchblurb.htm
%WINDIR%\pchealth\helpctr\System\blurbs\windows_newsgroups.htm
%WINDIR%\pchealth\helpctr\System\CompatCtr\AboutCompat.htm
%WINDIR%\pchealth\helpctr\System\blurbs\searchtips.htm
%WINDIR%\pchealth\helpctr\System\blurbs\tools.htm
%WINDIR%\pchealth\helpctr\System\errors\connection.htm
%WINDIR%\pchealth\helpctr\System\panels\HHWrapper.htm
%WINDIR%\pchealth\helpctr\System\panels\MiniNavBar.htm
%WINDIR%\pchealth\helpctr\System\panels\Context.htm
%WINDIR%\pchealth\helpctr\System\panels\firstpage.htm
%WINDIR%\pchealth\helpctr\System\panels\NavBar.htm
%WINDIR%\pchealth\helpctr\System\panels\ShareHelp.htm
%WINDIR%\pchealth\helpctr\System\panels\Topics.htm
%WINDIR%\pchealth\helpctr\System\panels\Options.htm
%WINDIR%\pchealth\helpctr\System\panels\RemoteHelp.htm
%WINDIR%\pchealth\helpctr\System\errors\offline.htm
%WINDIR%\pchealth\helpctr\System\errors\redirect.htm
%WINDIR%\pchealth\helpctr\System\errors\indexfirstlevel.htm
%WINDIR%\pchealth\helpctr\System\errors\notfound.htm
%WINDIR%\pchealth\helpctr\System\errors\unreachable.htm
%WINDIR%\pchealth\helpctr\System\panels\AdvSearch.htm
%WINDIR%\pchealth\helpctr\System\panels\blank.htm
%WINDIR%\pchealth\helpctr\System\NetDiag\dglogs.htm
%WINDIR%\pchealth\helpctr\System\NetDiag\dglogshelp.htm

Другое:

Ищет следующие окна:

ClassName: 'CicLoaderWndClass' WindowName: ''
ClassName: 'Indicator' WindowName: ''
ClassName: 'RegEdit_RegEdit' WindowName: ''

Технологии

Термины

Обучение и просвещение

Мифы

Техническая информация

Рекомендации по лечению

Демо бесплатно на 14 дней