Trojan.Siggen10.52182

Техническая информация

Изменения в файловой системе

Создает следующие файлы

%TEMP%\7zs8eaded50\cardreader_realtek_10.0.10586.31225_w10x64\0x0402.ini
%ProgramFiles(x86)%\realtek\realtek card reader\conb0f3.tmp
%ProgramFiles(x86)%\realtek\realtek card reader\rmbb104.tmp
%ProgramFiles(x86)%\realtek\realtek card reader\sdrb124.tmp
%ProgramFiles(x86)%\realtek\realtek card reader\setb125.tmp
%ProgramFiles(x86)%\realtek\realtek card reader\rscb135.tmp
%ProgramFiles(x86)%\realtek\realtek card reader\rtcb2ad.tmp
%ProgramFiles(x86)%\realtek\realtek card reader\rtsb2bd.tmp
%ProgramFiles(x86)%\realtek\realtek card reader\rtsb32c.tmp
%ProgramFiles(x86)%\installshield installation information\{5bc2b5ab-80de-4e83-b8cf-426902051d0a}\setb8d3.tmp
%ProgramFiles(x86)%\realtek\realtek card reader\rtsb33c.tmp
<DRIVERS>\rtsb37d.tmp
%ProgramFiles(x86)%\realtek\realtek card reader\disb3bc.tmp
%ProgramFiles(x86)%\realtek\realtek card reader\revb3dc.tmp
%ProgramFiles(x86)%\realtek\realtek card reader\revb3ed.tmp
%ProgramFiles(x86)%\installshield installation information\{5bc2b5ab-80de-4e83-b8cf-426902051d0a}\useb41d.tmp
%ProgramFiles(x86)%\installshield installation information\{5bc2b5ab-80de-4e83-b8cf-426902051d0a}\pkgb41e.tmp
%ProgramFiles(x86)%\installshield installation information\{5bc2b5ab-80de-4e83-b8cf-426902051d0a}\layb74a.tmp
%ProgramFiles(x86)%\installshield installation information\{5bc2b5ab-80de-4e83-b8cf-426902051d0a}\datb75a.tmp
%TEMP%\{682c34fe-48fe-451d-972a-cf8c860abfd3}\{5bc2b5ab-80de-4e83-b8cf-426902051d0a}\def9862.tmp
%TEMP%\{682c34fe-48fe-451d-972a-cf8c860abfd3}\{5bc2b5ab-80de-4e83-b8cf-426902051d0a}\_is9873.tmp
%ProgramFiles(x86)%\realtek\realtek card reader\sdrb36c.tmp
%ProgramFiles(x86)%\installshield installation information\{5bc2b5ab-80de-4e83-b8cf-426902051d0a}\datb76b.tmp
%TEMP%\{682c34fe-48fe-451d-972a-cf8c860abfd3}\isb9811.tmp
%TEMP%\{22da6474-2e89-477a-9c03-78f4457c1145}\0x041d.ini
%TEMP%\{22da6474-2e89-477a-9c03-78f4457c1145}\0x041e.ini
%TEMP%\{22da6474-2e89-477a-9c03-78f4457c1145}\0x041f.ini
%TEMP%\{22da6474-2e89-477a-9c03-78f4457c1145}\0x0421.ini
%TEMP%\{22da6474-2e89-477a-9c03-78f4457c1145}\0x0424.ini
%TEMP%\{22da6474-2e89-477a-9c03-78f4457c1145}\0x042d.ini
%TEMP%\{22da6474-2e89-477a-9c03-78f4457c1145}\0x0804.ini
%TEMP%\{22da6474-2e89-477a-9c03-78f4457c1145}\0x0816.ini
%TEMP%\{22da6474-2e89-477a-9c03-78f4457c1145}\0x0c0c.ini
%TEMP%\{22da6474-2e89-477a-9c03-78f4457c1145}\0x0c1a.ini
%TEMP%\9730.tmp
%TEMP%\{682c34fe-48fe-451d-972a-cf8c860abfd3}\{5bc2b5ab-80de-4e83-b8cf-426902051d0a}\set97cd.tmp
%TEMP%\{682c34fe-48fe-451d-972a-cf8c860abfd3}\{5bc2b5ab-80de-4e83-b8cf-426902051d0a}\pkg97ce.tmp
%TEMP%\{682c34fe-48fe-451d-972a-cf8c860abfd3}\{5bc2b5ab-80de-4e83-b8cf-426902051d0a}\fon97ee.tmp
%TEMP%\{682c34fe-48fe-451d-972a-cf8c860abfd3}\{5bc2b5ab-80de-4e83-b8cf-426902051d0a}\dif97ef.tmp
%TEMP%\{682c34fe-48fe-451d-972a-cf8c860abfd3}\cor97ff.tmp
%TEMP%\{682c34fe-48fe-451d-972a-cf8c860abfd3}\dot9810.tmp
%TEMP%\{682c34fe-48fe-451d-972a-cf8c860abfd3}\{5bc2b5ab-80de-4e83-b8cf-426902051d0a}\str9822.tmp
%TEMP%\{22da6474-2e89-477a-9c03-78f4457c1145}\0x041a.ini
%TEMP%\{682c34fe-48fe-451d-972a-cf8c860abfd3}\{5bc2b5ab-80de-4e83-b8cf-426902051d0a}\isr9842.tmp
%TEMP%\7zs8eaded50\cardreader_realtek_10.0.10586.31225_w10x64\apbin\rmb.exe
%ProgramFiles(x86)%\installshield installation information\{5bc2b5ab-80de-4e83-b8cf-426902051d0a}\issb903.tmp
%ProgramFiles(x86)%\installshield installation information\{5bc2b5ab-80de-4e83-b8cf-426902051d0a}\0x0baa3.tmp
%ProgramFiles(x86)%\installshield installation information\{5bc2b5ab-80de-4e83-b8cf-426902051d0a}\0x0bab4.tmp
%ProgramFiles(x86)%\installshield installation information\{5bc2b5ab-80de-4e83-b8cf-426902051d0a}\0x0bac5.tmp
%ProgramFiles(x86)%\installshield installation information\{5bc2b5ab-80de-4e83-b8cf-426902051d0a}\0x0bac6.tmp
%ProgramFiles(x86)%\installshield installation information\{5bc2b5ab-80de-4e83-b8cf-426902051d0a}\0x0bad6.tmp
%ProgramFiles(x86)%\installshield installation information\{5bc2b5ab-80de-4e83-b8cf-426902051d0a}\0x0bae7.tmp
%ProgramFiles(x86)%\installshield installation information\{5bc2b5ab-80de-4e83-b8cf-426902051d0a}\0x0baf8.tmp
%ProgramFiles(x86)%\installshield installation information\{5bc2b5ab-80de-4e83-b8cf-426902051d0a}\setbb37.tmp
%ProgramFiles(x86)%\installshield installation information\{5bc2b5ab-80de-4e83-b8cf-426902051d0a}\setbb57.tmp
%ProgramFiles(x86)%\installshield installation information\{5bc2b5ab-80de-4e83-b8cf-426902051d0a}\0x0b932.tmp
%ProgramFiles(x86)%\installshield installation information\{5bc2b5ab-80de-4e83-b8cf-426902051d0a}\setup.ini
%TEMP%\{71d8df33-a9b4-0b69-bea1-062f5050712f}\setd559.tmp
%TEMP%\{71d8df33-a9b4-0b69-bea1-062f5050712f}\setd682.tmp
%TEMP%\{71d8df33-a9b4-0b69-bea1-062f5050712f}\setd7ac.tmp
%TEMP%\{71d8df33-a9b4-0b69-bea1-062f5050712f}\setda3c.tmp
%TEMP%\{71d8df33-a9b4-0b69-bea1-062f5050712f}\setdb46.tmp
<SYSTEM32>\catroot\{f750e6c3-38ee-11d1-85e5-00c04fc295ee}\oem2.cat
%WINDIR%\syswow64\sda\sdr39e.tmp
%ProgramFiles(x86)%\installshield installation information\{5bc2b5ab-80de-4e83-b8cf-426902051d0a}\0x0baa2.tmp
%ProgramFiles(x86)%\installshield installation information\{5bc2b5ab-80de-4e83-b8cf-426902051d0a}\0x0ba91.tmp
%ProgramFiles(x86)%\installshield installation information\{5bc2b5ab-80de-4e83-b8cf-426902051d0a}\0x0bab3.tmp
%ProgramFiles(x86)%\installshield installation information\{5bc2b5ab-80de-4e83-b8cf-426902051d0a}\0x0ba71.tmp
%ProgramFiles(x86)%\installshield installation information\{5bc2b5ab-80de-4e83-b8cf-426902051d0a}\0x0ba70.tmp
%ProgramFiles(x86)%\installshield installation information\{5bc2b5ab-80de-4e83-b8cf-426902051d0a}\0x0b933.tmp
%ProgramFiles(x86)%\installshield installation information\{5bc2b5ab-80de-4e83-b8cf-426902051d0a}\0x0b945.tmp
%ProgramFiles(x86)%\installshield installation information\{5bc2b5ab-80de-4e83-b8cf-426902051d0a}\0x0b956.tmp
%ProgramFiles(x86)%\installshield installation information\{5bc2b5ab-80de-4e83-b8cf-426902051d0a}\0x0b957.tmp
%ProgramFiles(x86)%\installshield installation information\{5bc2b5ab-80de-4e83-b8cf-426902051d0a}\0x0b967.tmp
%ProgramFiles(x86)%\installshield installation information\{5bc2b5ab-80de-4e83-b8cf-426902051d0a}\0x0b968.tmp
%ProgramFiles(x86)%\installshield installation information\{5bc2b5ab-80de-4e83-b8cf-426902051d0a}\0x0b9c7.tmp
%ProgramFiles(x86)%\installshield installation information\{5bc2b5ab-80de-4e83-b8cf-426902051d0a}\0x0b9d7.tmp
%TEMP%\{22da6474-2e89-477a-9c03-78f4457c1145}\0x0419.ini
%ProgramFiles(x86)%\installshield installation information\{5bc2b5ab-80de-4e83-b8cf-426902051d0a}\0x0b9d8.tmp
%TEMP%\{22da6474-2e89-477a-9c03-78f4457c1145}\0x041b.ini
%ProgramFiles(x86)%\installshield installation information\{5bc2b5ab-80de-4e83-b8cf-426902051d0a}\0x0b9ea.tmp
%ProgramFiles(x86)%\installshield installation information\{5bc2b5ab-80de-4e83-b8cf-426902051d0a}\0x0ba0b.tmp
%ProgramFiles(x86)%\installshield installation information\{5bc2b5ab-80de-4e83-b8cf-426902051d0a}\0x0ba0c.tmp
%ProgramFiles(x86)%\installshield installation information\{5bc2b5ab-80de-4e83-b8cf-426902051d0a}\0x0ba0d.tmp
%ProgramFiles(x86)%\installshield installation information\{5bc2b5ab-80de-4e83-b8cf-426902051d0a}\0x0ba1e.tmp
%ProgramFiles(x86)%\installshield installation information\{5bc2b5ab-80de-4e83-b8cf-426902051d0a}\0x0ba1f.tmp
%ProgramFiles(x86)%\installshield installation information\{5bc2b5ab-80de-4e83-b8cf-426902051d0a}\0x0ba2f.tmp
%ProgramFiles(x86)%\installshield installation information\{5bc2b5ab-80de-4e83-b8cf-426902051d0a}\0x0ba5f.tmp
%ProgramFiles(x86)%\installshield installation information\{5bc2b5ab-80de-4e83-b8cf-426902051d0a}\0x0b9e9.tmp
%ProgramFiles(x86)%\installshield installation information\{5bc2b5ab-80de-4e83-b8cf-426902051d0a}\0x0b944.tmp
%ProgramFiles(x86)%\installshield installation information\{5bc2b5ab-80de-4e83-b8cf-426902051d0a}\0x0b9fb.tmp
%TEMP%\{22da6474-2e89-477a-9c03-78f4457c1145}\0x0418.ini
%TEMP%\{22da6474-2e89-477a-9c03-78f4457c1145}\0x0416.ini
%TEMP%\{22da6474-2e89-477a-9c03-78f4457c1145}\0x0415.ini
%TEMP%\7zs8eaded50\cardreader_realtek_10.0.10586.31225_w10x64\0x0424.ini
%TEMP%\7zs8eaded50\cardreader_realtek_10.0.10586.31225_w10x64\0x042d.ini
%TEMP%\7zs8eaded50\cardreader_realtek_10.0.10586.31225_w10x64\0x0804.ini
%TEMP%\7zs8eaded50\cardreader_realtek_10.0.10586.31225_w10x64\0x0816.ini
%TEMP%\7zs8eaded50\cardreader_realtek_10.0.10586.31225_w10x64\0x0c0c.ini
%TEMP%\7zs8eaded50\cardreader_realtek_10.0.10586.31225_w10x64\0x0c1a.ini
%TEMP%\7zs8eaded50\cardreader_realtek_10.0.10586.31225_w10x64\acip_deploy.ini
%TEMP%\7zs8eaded50\cardreader_realtek_10.0.10586.31225_w10x64\apbin\config.ini
%TEMP%\7zs8eaded50\cardreader_realtek_10.0.10586.31225_w10x64\data1.cab
%TEMP%\7zs8eaded50\cardreader_realtek_10.0.10586.31225_w10x64\data1.hdr
%TEMP%\7zs8eaded50\cardreader_realtek_10.0.10586.31225_w10x64\data2.cab
%TEMP%\7zs8eaded50\cardreader_realtek_10.0.10586.31225_w10x64\detail.txt
%TEMP%\7zs8eaded50\cardreader_realtek_10.0.10586.31225_w10x64\drvbin32\rtsuer32.cat
%TEMP%\7zs8eaded50\cardreader_realtek_10.0.10586.31225_w10x64\drvbin32\rtsuersdo.inf
%TEMP%\7zs8eaded50\cardreader_realtek_10.0.10586.31225_w10x64\drvbin64\rtsuer64.cat
%TEMP%\7zs8eaded50\cardreader_realtek_10.0.10586.31225_w10x64\drvbin64\rtsuersdo.inf
%TEMP%\7zs8eaded50\cardreader_realtek_10.0.10586.31225_w10x64\layout.bin
%TEMP%\7zs8eaded50\cardreader_realtek_10.0.10586.31225_w10x64\0x041e.ini
%TEMP%\7zs8eaded50\cardreader_realtek_10.0.10586.31225_w10x64\0x041b.ini
%TEMP%\7zs8eaded50\cardreader_realtek_10.0.10586.31225_w10x64\0x0421.ini
%TEMP%\7zs8eaded50\cardreader_realtek_10.0.10586.31225_w10x64\0x041d.ini
%TEMP%\7zs8eaded50\cardreader_realtek_10.0.10586.31225_w10x64\0x041a.ini
%TEMP%\7zs8eaded50\cardreader_realtek_10.0.10586.31225_w10x64\0x040e.ini
%TEMP%\7zs8eaded50\cardreader_realtek_10.0.10586.31225_w10x64\0x0404.ini
%TEMP%\7zs8eaded50\cardreader_realtek_10.0.10586.31225_w10x64\0x0405.ini
%TEMP%\7zs8eaded50\cardreader_realtek_10.0.10586.31225_w10x64\0x0406.ini
%TEMP%\7zs8eaded50\cardreader_realtek_10.0.10586.31225_w10x64\0x0407.ini
%TEMP%\7zs8eaded50\cardreader_realtek_10.0.10586.31225_w10x64\0x0408.ini
%TEMP%\7zs8eaded50\cardreader_realtek_10.0.10586.31225_w10x64\0x0409.ini
%TEMP%\7zs8eaded50\cardreader_realtek_10.0.10586.31225_w10x64\0x040a.ini
%TEMP%\7zs8eaded50\cardreader_realtek_10.0.10586.31225_w10x64\0x040b.ini
%TEMP%\7zs8eaded50\cardreader_realtek_10.0.10586.31225_w10x64\pkgconf.ini
%ProgramFiles(x86)%\realtek\realtek card reader\rmb.log
%TEMP%\7zs8eaded50\cardreader_realtek_10.0.10586.31225_w10x64\0x040c.ini
%TEMP%\7zs8eaded50\cardreader_realtek_10.0.10586.31225_w10x64\0x0411.ini
%TEMP%\7zs8eaded50\cardreader_realtek_10.0.10586.31225_w10x64\0x0412.ini
%TEMP%\7zs8eaded50\cardreader_realtek_10.0.10586.31225_w10x64\0x0413.ini
%TEMP%\7zs8eaded50\cardreader_realtek_10.0.10586.31225_w10x64\0x0414.ini
%TEMP%\7zs8eaded50\cardreader_realtek_10.0.10586.31225_w10x64\0x0415.ini
%TEMP%\7zs8eaded50\cardreader_realtek_10.0.10586.31225_w10x64\0x0416.ini
%TEMP%\7zs8eaded50\cardreader_realtek_10.0.10586.31225_w10x64\0x0418.ini
%TEMP%\7zs8eaded50\cardreader_realtek_10.0.10586.31225_w10x64\0x0419.ini
%TEMP%\7zs8eaded50\cardreader_realtek_10.0.10586.31225_w10x64\0x0403.ini
%TEMP%\7zs8eaded50\cardreader_realtek_10.0.10586.31225_w10x64\0x0410.ini
%TEMP%\{71d8df33-a9b4-0b69-bea1-062f5050712f}\setd420.tmp
%TEMP%\7zs8eaded50\cardreader_realtek_10.0.10586.31225_w10x64\prepackage.xml
%TEMP%\7zs8eaded50\cardreader_realtek_10.0.10586.31225_w10x64\setup.inx
%TEMP%\{22da6474-2e89-477a-9c03-78f4457c1145}\0x0402.ini
%TEMP%\{22da6474-2e89-477a-9c03-78f4457c1145}\0x0403.ini
%TEMP%\{22da6474-2e89-477a-9c03-78f4457c1145}\0x0404.ini
%TEMP%\{22da6474-2e89-477a-9c03-78f4457c1145}\0x0405.ini
%TEMP%\{22da6474-2e89-477a-9c03-78f4457c1145}\0x0406.ini
%TEMP%\{22da6474-2e89-477a-9c03-78f4457c1145}\0x0407.ini
%TEMP%\{22da6474-2e89-477a-9c03-78f4457c1145}\0x0408.ini
%TEMP%\7zs8eaded50\cardreader_realtek_10.0.10586.31225_w10x64\0x041f.ini
%TEMP%\{22da6474-2e89-477a-9c03-78f4457c1145}\0x0409.ini
%TEMP%\{22da6474-2e89-477a-9c03-78f4457c1145}\0x040b.ini
%TEMP%\{22da6474-2e89-477a-9c03-78f4457c1145}\0x040c.ini
%TEMP%\{22da6474-2e89-477a-9c03-78f4457c1145}\0x040e.ini
%TEMP%\{22da6474-2e89-477a-9c03-78f4457c1145}\0x0410.ini
%TEMP%\{22da6474-2e89-477a-9c03-78f4457c1145}\0x0411.ini
%TEMP%\{22da6474-2e89-477a-9c03-78f4457c1145}\0x0412.ini
%TEMP%\{22da6474-2e89-477a-9c03-78f4457c1145}\0x0413.ini
%TEMP%\{22da6474-2e89-477a-9c03-78f4457c1145}\0x0414.ini
%TEMP%\7zs8eaded50\cardreader_realtek_10.0.10586.31225_w10x64\utility\revcon32.exe
%TEMP%\{22da6474-2e89-477a-9c03-78f4457c1145}\0x040a.ini
%TEMP%\{22da6474-2e89-477a-9c03-78f4457c1145}\setup.ini
%TEMP%\7zs8eaded50\cardreader_realtek_10.0.10586.31225_w10x64\utility\revcon64.exe
%TEMP%\7zs8eaded50\cardreader_realtek_10.0.10586.31225_w10x64\setup.exe
%TEMP%\7zs8eaded50\cardreader_realtek_10.0.10586.31225_w10x64\issetup.dll
%TEMP%\7zs8eaded50\cardreader_realtek_10.0.10586.31225_w10x64\setup.isn
%TEMP%\7zs8eaded50\cardreader_realtek_10.0.10586.31225_w10x64\setup.iss
%TEMP%\7zs8eaded50\cardreader_realtek_10.0.10586.31225_w10x64\silentinstall.bat
%TEMP%\7zs8eaded50\cardreader_realtek_10.0.10586.31225_w10x64\success.tag
%TEMP%\7zs8eaded50\cardreader_realtek_10.0.10586.31225_w10x64\u2setup.iss
%TEMP%\7zs8eaded50\cardreader_realtek_10.0.10586.31225_w10x64\u3setup.iss
%TEMP%\7zs8eaded50\cardreader_realtek_10.0.10586.31225_w10x64\usetup.iss
%TEMP%\7zs8eaded50\cardreader_realtek_10.0.10586.31225_w10x64\readme.txt
%TEMP%\7zs8eaded50\cardreader_realtek_10.0.10586.31225_w10x64\utility\display.ico
%TEMP%\7zs8eaded50\cardreader_realtek_10.0.10586.31225_w10x64\setup.cmd
%TEMP%\7zs8eaded50\cardreader_realtek_10.0.10586.31225_w10x64\apbin\sdrtcprm.dll
%TEMP%\7zs8eaded50\cardreader_realtek_10.0.10586.31225_w10x64\drvbin32\rscricon.dll
%TEMP%\7zs8eaded50\cardreader_realtek_10.0.10586.31225_w10x64\drvbin32\rtcrx.dll
%TEMP%\7zs8eaded50\cardreader_realtek_10.0.10586.31225_w10x64\drvbin32\rtsuer.sys
%TEMP%\7zs8eaded50\cardreader_realtek_10.0.10586.31225_w10x64\drvbin32\sdrtcprm.dll
%TEMP%\7zs8eaded50\cardreader_realtek_10.0.10586.31225_w10x64\drvbin64\rscricon.dll
%TEMP%\7zs8eaded50\cardreader_realtek_10.0.10586.31225_w10x64\drvbin64\rtcrx64.dll
%TEMP%\7zs8eaded50\cardreader_realtek_10.0.10586.31225_w10x64\drvbin64\rtsuer.sys
%TEMP%\7zs8eaded50\cardreader_realtek_10.0.10586.31225_w10x64\setup.ini
%TEMP%\7zs8eaded50\cardreader_realtek_10.0.10586.31225_w10x64\drvbin64\sdrtcprm.dll
%TEMP%\7zs8eaded50\cardreader_realtek_10.0.10586.31225_w10x64\apbin\setehcikey.exe
%ProgramFiles(x86)%\realtek\realtek card reader\config.ini

Присваивает атрибут 'скрытый' для следующих файлов

<SYSTEM32>\catroot\{f750e6c3-38ee-11d1-85e5-00c04fc295ee}\oem2.cat

Удаляет следующие файлы

%ProgramFiles(x86)%\realtek\realtek card reader\sdrtcprm.dll
%TEMP%\{71d8df33-a9b4-0b69-bea1-062f5050712f}\rscricon.dll
%TEMP%\{71d8df33-a9b4-0b69-bea1-062f5050712f}\rtcrx64.dll
%TEMP%\{71d8df33-a9b4-0b69-bea1-062f5050712f}\rtsuer.sys
%TEMP%\{71d8df33-a9b4-0b69-bea1-062f5050712f}\rtsuer64.cat
%TEMP%\{71d8df33-a9b4-0b69-bea1-062f5050712f}\rtsuersdo.inf
%TEMP%\{71d8df33-a9b4-0b69-bea1-062f5050712f}\sdrtcprm.dll

Перемещает следующие файлы

%TEMP%\{682c34fe-48fe-451d-972a-cf8c860abfd3}\{5bc2b5ab-80de-4e83-b8cf-426902051d0a}\set97cd.tmp в %TEMP%\{682c34fe-48fe-451d-972a-cf8c860abfd3}\{5bc2b5ab-80de-4e83-b8cf-426902051d0a}\setup.inx
%ProgramFiles(x86)%\installshield installation information\{5bc2b5ab-80de-4e83-b8cf-426902051d0a}\0x0ba5f.tmp в %ProgramFiles(x86)%\installshield installation information\{5bc2b5ab-80de-4e83-b8cf-426902051d0a}\0x0415.ini
%ProgramFiles(x86)%\installshield installation information\{5bc2b5ab-80de-4e83-b8cf-426902051d0a}\0x0ba2f.tmp в %ProgramFiles(x86)%\installshield installation information\{5bc2b5ab-80de-4e83-b8cf-426902051d0a}\0x0414.ini
%ProgramFiles(x86)%\installshield installation information\{5bc2b5ab-80de-4e83-b8cf-426902051d0a}\0x0ba1f.tmp в %ProgramFiles(x86)%\installshield installation information\{5bc2b5ab-80de-4e83-b8cf-426902051d0a}\0x0412.ini
%ProgramFiles(x86)%\installshield installation information\{5bc2b5ab-80de-4e83-b8cf-426902051d0a}\0x0ba1e.tmp в %ProgramFiles(x86)%\installshield installation information\{5bc2b5ab-80de-4e83-b8cf-426902051d0a}\0x0411.ini
%ProgramFiles(x86)%\installshield installation information\{5bc2b5ab-80de-4e83-b8cf-426902051d0a}\0x0ba0d.tmp в %ProgramFiles(x86)%\installshield installation information\{5bc2b5ab-80de-4e83-b8cf-426902051d0a}\0x0410.ini
%ProgramFiles(x86)%\installshield installation information\{5bc2b5ab-80de-4e83-b8cf-426902051d0a}\0x0ba0c.tmp в %ProgramFiles(x86)%\installshield installation information\{5bc2b5ab-80de-4e83-b8cf-426902051d0a}\0x0421.ini
%ProgramFiles(x86)%\installshield installation information\{5bc2b5ab-80de-4e83-b8cf-426902051d0a}\0x0ba70.tmp в %ProgramFiles(x86)%\installshield installation information\{5bc2b5ab-80de-4e83-b8cf-426902051d0a}\0x0416.ini
%ProgramFiles(x86)%\installshield installation information\{5bc2b5ab-80de-4e83-b8cf-426902051d0a}\0x0ba0b.tmp в %ProgramFiles(x86)%\installshield installation information\{5bc2b5ab-80de-4e83-b8cf-426902051d0a}\0x040e.ini
%ProgramFiles(x86)%\installshield installation information\{5bc2b5ab-80de-4e83-b8cf-426902051d0a}\0x0b9ea.tmp в %ProgramFiles(x86)%\installshield installation information\{5bc2b5ab-80de-4e83-b8cf-426902051d0a}\0x0407.ini
%ProgramFiles(x86)%\installshield installation information\{5bc2b5ab-80de-4e83-b8cf-426902051d0a}\0x0b9e9.tmp в %ProgramFiles(x86)%\installshield installation information\{5bc2b5ab-80de-4e83-b8cf-426902051d0a}\0x040c.ini
%ProgramFiles(x86)%\installshield installation information\{5bc2b5ab-80de-4e83-b8cf-426902051d0a}\0x0b9d8.tmp в %ProgramFiles(x86)%\installshield installation information\{5bc2b5ab-80de-4e83-b8cf-426902051d0a}\0x0c0c.ini
%ProgramFiles(x86)%\installshield installation information\{5bc2b5ab-80de-4e83-b8cf-426902051d0a}\0x0b9d7.tmp в %ProgramFiles(x86)%\installshield installation information\{5bc2b5ab-80de-4e83-b8cf-426902051d0a}\0x040b.ini
%ProgramFiles(x86)%\installshield installation information\{5bc2b5ab-80de-4e83-b8cf-426902051d0a}\0x0b9c7.tmp в %ProgramFiles(x86)%\installshield installation information\{5bc2b5ab-80de-4e83-b8cf-426902051d0a}\0x0409.ini
%ProgramFiles(x86)%\installshield installation information\{5bc2b5ab-80de-4e83-b8cf-426902051d0a}\0x0b968.tmp в %ProgramFiles(x86)%\installshield installation information\{5bc2b5ab-80de-4e83-b8cf-426902051d0a}\0x0413.ini
%ProgramFiles(x86)%\installshield installation information\{5bc2b5ab-80de-4e83-b8cf-426902051d0a}\0x0b9fb.tmp в %ProgramFiles(x86)%\installshield installation information\{5bc2b5ab-80de-4e83-b8cf-426902051d0a}\0x0408.ini
%ProgramFiles(x86)%\installshield installation information\{5bc2b5ab-80de-4e83-b8cf-426902051d0a}\0x0ba71.tmp в %ProgramFiles(x86)%\installshield installation information\{5bc2b5ab-80de-4e83-b8cf-426902051d0a}\0x0816.ini
%ProgramFiles(x86)%\installshield installation information\{5bc2b5ab-80de-4e83-b8cf-426902051d0a}\0x0ba91.tmp в %ProgramFiles(x86)%\installshield installation information\{5bc2b5ab-80de-4e83-b8cf-426902051d0a}\0x0418.ini
%ProgramFiles(x86)%\installshield installation information\{5bc2b5ab-80de-4e83-b8cf-426902051d0a}\0x0baa2.tmp в %ProgramFiles(x86)%\installshield installation information\{5bc2b5ab-80de-4e83-b8cf-426902051d0a}\0x0419.ini
%TEMP%\{71d8df33-a9b4-0b69-bea1-062f5050712f}\setda3c.tmp в %TEMP%\{71d8df33-a9b4-0b69-bea1-062f5050712f}\sdrtcprm.dll
%TEMP%\{71d8df33-a9b4-0b69-bea1-062f5050712f}\setd7ac.tmp в %TEMP%\{71d8df33-a9b4-0b69-bea1-062f5050712f}\rscricon.dll
%TEMP%\{71d8df33-a9b4-0b69-bea1-062f5050712f}\setd682.tmp в %TEMP%\{71d8df33-a9b4-0b69-bea1-062f5050712f}\rtsuer64.cat
%TEMP%\{71d8df33-a9b4-0b69-bea1-062f5050712f}\setd559.tmp в %TEMP%\{71d8df33-a9b4-0b69-bea1-062f5050712f}\rtsuer.sys
%TEMP%\{71d8df33-a9b4-0b69-bea1-062f5050712f}\setd420.tmp в %TEMP%\{71d8df33-a9b4-0b69-bea1-062f5050712f}\rtcrx64.dll
%ProgramFiles(x86)%\installshield installation information\{5bc2b5ab-80de-4e83-b8cf-426902051d0a}\setbb57.tmp в %ProgramFiles(x86)%\installshield installation information\{5bc2b5ab-80de-4e83-b8cf-426902051d0a}\setup.ini
%ProgramFiles(x86)%\installshield installation information\{5bc2b5ab-80de-4e83-b8cf-426902051d0a}\setbb37.tmp в %ProgramFiles(x86)%\installshield installation information\{5bc2b5ab-80de-4e83-b8cf-426902051d0a}\setup.inx
%ProgramFiles(x86)%\installshield installation information\{5bc2b5ab-80de-4e83-b8cf-426902051d0a}\0x0baf8.tmp в %ProgramFiles(x86)%\installshield installation information\{5bc2b5ab-80de-4e83-b8cf-426902051d0a}\0x042d.ini
%ProgramFiles(x86)%\installshield installation information\{5bc2b5ab-80de-4e83-b8cf-426902051d0a}\0x0bae7.tmp в %ProgramFiles(x86)%\installshield installation information\{5bc2b5ab-80de-4e83-b8cf-426902051d0a}\0x041f.ini
%ProgramFiles(x86)%\installshield installation information\{5bc2b5ab-80de-4e83-b8cf-426902051d0a}\0x0bad6.tmp в %ProgramFiles(x86)%\installshield installation information\{5bc2b5ab-80de-4e83-b8cf-426902051d0a}\0x041e.ini
%ProgramFiles(x86)%\installshield installation information\{5bc2b5ab-80de-4e83-b8cf-426902051d0a}\0x0bac6.tmp в %ProgramFiles(x86)%\installshield installation information\{5bc2b5ab-80de-4e83-b8cf-426902051d0a}\0x041d.ini
%ProgramFiles(x86)%\installshield installation information\{5bc2b5ab-80de-4e83-b8cf-426902051d0a}\0x0bac5.tmp в %ProgramFiles(x86)%\installshield installation information\{5bc2b5ab-80de-4e83-b8cf-426902051d0a}\0x040a.ini
%ProgramFiles(x86)%\installshield installation information\{5bc2b5ab-80de-4e83-b8cf-426902051d0a}\0x0bab4.tmp в %ProgramFiles(x86)%\installshield installation information\{5bc2b5ab-80de-4e83-b8cf-426902051d0a}\0x0424.ini
%ProgramFiles(x86)%\installshield installation information\{5bc2b5ab-80de-4e83-b8cf-426902051d0a}\0x0bab3.tmp в %ProgramFiles(x86)%\installshield installation information\{5bc2b5ab-80de-4e83-b8cf-426902051d0a}\0x041b.ini
%ProgramFiles(x86)%\installshield installation information\{5bc2b5ab-80de-4e83-b8cf-426902051d0a}\0x0baa3.tmp в %ProgramFiles(x86)%\installshield installation information\{5bc2b5ab-80de-4e83-b8cf-426902051d0a}\0x0c1a.ini
%ProgramFiles(x86)%\installshield installation information\{5bc2b5ab-80de-4e83-b8cf-426902051d0a}\0x0b967.tmp в %ProgramFiles(x86)%\installshield installation information\{5bc2b5ab-80de-4e83-b8cf-426902051d0a}\0x0406.ini
%TEMP%\{71d8df33-a9b4-0b69-bea1-062f5050712f}\setdb46.tmp в %TEMP%\{71d8df33-a9b4-0b69-bea1-062f5050712f}\rtsuersdo.inf
%ProgramFiles(x86)%\installshield installation information\{5bc2b5ab-80de-4e83-b8cf-426902051d0a}\0x0b957.tmp в %ProgramFiles(x86)%\installshield installation information\{5bc2b5ab-80de-4e83-b8cf-426902051d0a}\0x0405.ini
%ProgramFiles(x86)%\installshield installation information\{5bc2b5ab-80de-4e83-b8cf-426902051d0a}\0x0b945.tmp в %ProgramFiles(x86)%\installshield installation information\{5bc2b5ab-80de-4e83-b8cf-426902051d0a}\0x0404.ini
%ProgramFiles(x86)%\realtek\realtek card reader\setb125.tmp в %ProgramFiles(x86)%\realtek\realtek card reader\setehcikey.exe
%ProgramFiles(x86)%\realtek\realtek card reader\sdrb124.tmp в %ProgramFiles(x86)%\realtek\realtek card reader\sdrtcprm.dll
%ProgramFiles(x86)%\realtek\realtek card reader\rmbb104.tmp в %ProgramFiles(x86)%\realtek\realtek card reader\rmb.exe
%ProgramFiles(x86)%\realtek\realtek card reader\conb0f3.tmp в %ProgramFiles(x86)%\realtek\realtek card reader\config.ini
%TEMP%\{682c34fe-48fe-451d-972a-cf8c860abfd3}\{5bc2b5ab-80de-4e83-b8cf-426902051d0a}\_is9873.tmp в %TEMP%\{682c34fe-48fe-451d-972a-cf8c860abfd3}\{5bc2b5ab-80de-4e83-b8cf-426902051d0a}\_isres_0x0409.dll
%TEMP%\{682c34fe-48fe-451d-972a-cf8c860abfd3}\{5bc2b5ab-80de-4e83-b8cf-426902051d0a}\def9862.tmp в %TEMP%\{682c34fe-48fe-451d-972a-cf8c860abfd3}\{5bc2b5ab-80de-4e83-b8cf-426902051d0a}\default.pal
%ProgramFiles(x86)%\realtek\realtek card reader\rscb135.tmp в %ProgramFiles(x86)%\realtek\realtek card reader\rscricon.dll
%TEMP%\{682c34fe-48fe-451d-972a-cf8c860abfd3}\{5bc2b5ab-80de-4e83-b8cf-426902051d0a}\isr9842.tmp в %TEMP%\{682c34fe-48fe-451d-972a-cf8c860abfd3}\{5bc2b5ab-80de-4e83-b8cf-426902051d0a}\isrt.dll
%TEMP%\{682c34fe-48fe-451d-972a-cf8c860abfd3}\isb9811.tmp в %TEMP%\{682c34fe-48fe-451d-972a-cf8c860abfd3}\isbew64.exe
%TEMP%\{682c34fe-48fe-451d-972a-cf8c860abfd3}\dot9810.tmp в %TEMP%\{682c34fe-48fe-451d-972a-cf8c860abfd3}\dotnetinstaller.exe
%TEMP%\{682c34fe-48fe-451d-972a-cf8c860abfd3}\cor97ff.tmp в %TEMP%\{682c34fe-48fe-451d-972a-cf8c860abfd3}\corecomp.ini
%TEMP%\{682c34fe-48fe-451d-972a-cf8c860abfd3}\{5bc2b5ab-80de-4e83-b8cf-426902051d0a}\dif97ef.tmp в %TEMP%\{682c34fe-48fe-451d-972a-cf8c860abfd3}\{5bc2b5ab-80de-4e83-b8cf-426902051d0a}\difxdata.ini
%TEMP%\{682c34fe-48fe-451d-972a-cf8c860abfd3}\{5bc2b5ab-80de-4e83-b8cf-426902051d0a}\fon97ee.tmp в %TEMP%\{682c34fe-48fe-451d-972a-cf8c860abfd3}\{5bc2b5ab-80de-4e83-b8cf-426902051d0a}\fontdata.ini
%TEMP%\{682c34fe-48fe-451d-972a-cf8c860abfd3}\{5bc2b5ab-80de-4e83-b8cf-426902051d0a}\pkg97ce.tmp в %TEMP%\{682c34fe-48fe-451d-972a-cf8c860abfd3}\{5bc2b5ab-80de-4e83-b8cf-426902051d0a}\pkgutility.dll
%TEMP%\{682c34fe-48fe-451d-972a-cf8c860abfd3}\{5bc2b5ab-80de-4e83-b8cf-426902051d0a}\str9822.tmp в %TEMP%\{682c34fe-48fe-451d-972a-cf8c860abfd3}\{5bc2b5ab-80de-4e83-b8cf-426902051d0a}\stringtable_0x0409.ips
%ProgramFiles(x86)%\realtek\realtek card reader\rtcb2ad.tmp в %ProgramFiles(x86)%\realtek\realtek card reader\rtcrx64.dll
%ProgramFiles(x86)%\realtek\realtek card reader\rtsb2bd.tmp в %ProgramFiles(x86)%\realtek\realtek card reader\rtsuer.sys
%ProgramFiles(x86)%\realtek\realtek card reader\rtsb32c.tmp в %ProgramFiles(x86)%\realtek\realtek card reader\rtsuer64.cat
%ProgramFiles(x86)%\installshield installation information\{5bc2b5ab-80de-4e83-b8cf-426902051d0a}\0x0b944.tmp в %ProgramFiles(x86)%\installshield installation information\{5bc2b5ab-80de-4e83-b8cf-426902051d0a}\0x0804.ini
%ProgramFiles(x86)%\installshield installation information\{5bc2b5ab-80de-4e83-b8cf-426902051d0a}\0x0b933.tmp в %ProgramFiles(x86)%\installshield installation information\{5bc2b5ab-80de-4e83-b8cf-426902051d0a}\0x0403.ini
%ProgramFiles(x86)%\installshield installation information\{5bc2b5ab-80de-4e83-b8cf-426902051d0a}\0x0b932.tmp в %ProgramFiles(x86)%\installshield installation information\{5bc2b5ab-80de-4e83-b8cf-426902051d0a}\0x0402.ini
%ProgramFiles(x86)%\installshield installation information\{5bc2b5ab-80de-4e83-b8cf-426902051d0a}\issb903.tmp в %ProgramFiles(x86)%\installshield installation information\{5bc2b5ab-80de-4e83-b8cf-426902051d0a}\issetup.dll
%ProgramFiles(x86)%\installshield installation information\{5bc2b5ab-80de-4e83-b8cf-426902051d0a}\setb8d3.tmp в %ProgramFiles(x86)%\installshield installation information\{5bc2b5ab-80de-4e83-b8cf-426902051d0a}\setup.exe
%ProgramFiles(x86)%\installshield installation information\{5bc2b5ab-80de-4e83-b8cf-426902051d0a}\datb76b.tmp в %ProgramFiles(x86)%\installshield installation information\{5bc2b5ab-80de-4e83-b8cf-426902051d0a}\data1.cab
%ProgramFiles(x86)%\installshield installation information\{5bc2b5ab-80de-4e83-b8cf-426902051d0a}\datb75a.tmp в %ProgramFiles(x86)%\installshield installation information\{5bc2b5ab-80de-4e83-b8cf-426902051d0a}\data1.hdr
%ProgramFiles(x86)%\installshield installation information\{5bc2b5ab-80de-4e83-b8cf-426902051d0a}\layb74a.tmp в %ProgramFiles(x86)%\installshield installation information\{5bc2b5ab-80de-4e83-b8cf-426902051d0a}\layout.bin
%ProgramFiles(x86)%\installshield installation information\{5bc2b5ab-80de-4e83-b8cf-426902051d0a}\pkgb41e.tmp в %ProgramFiles(x86)%\installshield installation information\{5bc2b5ab-80de-4e83-b8cf-426902051d0a}\pkgconf.ini
%ProgramFiles(x86)%\installshield installation information\{5bc2b5ab-80de-4e83-b8cf-426902051d0a}\useb41d.tmp в %ProgramFiles(x86)%\installshield installation information\{5bc2b5ab-80de-4e83-b8cf-426902051d0a}\usetup.iss
%ProgramFiles(x86)%\realtek\realtek card reader\revb3ed.tmp в %ProgramFiles(x86)%\realtek\realtek card reader\revcon64.exe
%ProgramFiles(x86)%\realtek\realtek card reader\revb3dc.tmp в %ProgramFiles(x86)%\realtek\realtek card reader\revcon32.exe
%ProgramFiles(x86)%\realtek\realtek card reader\disb3bc.tmp в %ProgramFiles(x86)%\realtek\realtek card reader\display.ico
<DRIVERS>\rtsb37d.tmp в <DRIVERS>\rtsuer.sys
%ProgramFiles(x86)%\realtek\realtek card reader\rtsb33c.tmp в %ProgramFiles(x86)%\realtek\realtek card reader\rtsuersdo.inf
%ProgramFiles(x86)%\installshield installation information\{5bc2b5ab-80de-4e83-b8cf-426902051d0a}\0x0b956.tmp в %ProgramFiles(x86)%\installshield installation information\{5bc2b5ab-80de-4e83-b8cf-426902051d0a}\0x041a.ini
%WINDIR%\syswow64\sda\sdr39e.tmp в %WINDIR%\syswow64\sda\sdrtcprm.dll

Подменяет следующие файлы

%ProgramFiles(x86)%\realtek\realtek card reader\sdrtcprm.dll

Другое

Создает и запускает на исполнение

'%TEMP%\7zs8eaded50\cardreader_realtek_10.0.10586.31225_w10x64\setup.exe'
'%TEMP%\{682c34fe-48fe-451d-972a-cf8c860abfd3}\isbew64.exe' {EFB7539B-24F3-46B6-AF6E-3B021B51EFEF}:{B9BA8F03-B61D-4C4F-8FFC-AE9DD6AA68B7}
'%TEMP%\{682c34fe-48fe-451d-972a-cf8c860abfd3}\isbew64.exe' {EFB7539B-24F3-46B6-AF6E-3B021B51EFEF}:{0C3E14A0-6E33-4FF7-B022-03D580FD276F}
'%TEMP%\{682c34fe-48fe-451d-972a-cf8c860abfd3}\isbew64.exe' {EFB7539B-24F3-46B6-AF6E-3B021B51EFEF}:{54C025C5-8E48-49E4-B4C9-7E3B00E830E8}
'%TEMP%\{682c34fe-48fe-451d-972a-cf8c860abfd3}\isbew64.exe' {EFB7539B-24F3-46B6-AF6E-3B021B51EFEF}:{B46422EC-388C-4B67-87A9-69EF61A9E9F7}
'%TEMP%\{682c34fe-48fe-451d-972a-cf8c860abfd3}\isbew64.exe' {EFB7539B-24F3-46B6-AF6E-3B021B51EFEF}:{4270A652-1960-4DD5-88E0-CBE81D288BAC}
'%TEMP%\{682c34fe-48fe-451d-972a-cf8c860abfd3}\isbew64.exe' {EFB7539B-24F3-46B6-AF6E-3B021B51EFEF}:{0678C07C-8F98-485C-9992-4B69B8E5D296}
'%ProgramFiles(x86)%\realtek\realtek card reader\revcon64.exe' dp_add RtsUerSDO.inf
'%ProgramFiles(x86)%\realtek\realtek card reader\rmb.exe' /install
'%WINDIR%\syswow64\rundll32.exe' "%TEMP%\{682C34FE-48FE-451D-972A-CF8C860ABFD3}\{5BC2B5AB-80DE-4E83-B8CF-426902051D0A}\PkgUtility.dll" GetOSVersion' (со скрытым окном)
'%ProgramFiles(x86)%\realtek\realtek card reader\revcon64.exe' dp_add RtsUerSDO.inf' (со скрытым окном)
'%ProgramFiles(x86)%\realtek\realtek card reader\rmb.exe' /install' (со скрытым окном)

Запускает на исполнение

'%WINDIR%\syswow64\rundll32.exe' "%TEMP%\{682C34FE-48FE-451D-972A-CF8C860ABFD3}\{5BC2B5AB-80DE-4E83-B8CF-426902051D0A}\PkgUtility.dll" GetOSVersion

Технологии

Термины

Обучение и просвещение

Мифы

Техническая информация

Рекомендации по лечению

Демо бесплатно на 14 дней