Trojan.Siggen11.2105

Техническая информация

Изменения в файловой системе

Создает следующие файлы

%TEMP%\7zscd8d2070\0x0402.ini
%TEMP%\{bf9de540-7c66-4804-b1ad-3ea469320f96}\{5bc2b5ab-80de-4e83-b8cf-426902051d0a}\_is6d4e.tmp
%ProgramFiles(x86)%\realtek\realtek card reader\con8542.tmp
%ProgramFiles(x86)%\realtek\realtek card reader\rmb8543.tmp
%ProgramFiles(x86)%\realtek\realtek card reader\set8553.tmp
%ProgramFiles(x86)%\realtek\realtek card reader\rsc8564.tmp
%ProgramFiles(x86)%\realtek\realtek card reader\rts866e.tmp
%ProgramFiles(x86)%\realtek\realtek card reader\rts867f.tmp
%ProgramFiles(x86)%\realtek\realtek card reader\rts869f.tmp
<DRIVERS>\rts86af.tmp
%ProgramFiles(x86)%\realtek\realtek card reader\dis86d0.tmp
%ProgramFiles(x86)%\realtek\realtek card reader\rev86d1.tmp
%ProgramFiles(x86)%\realtek\realtek card reader\rev86e1.tmp
%ProgramFiles(x86)%\installshield installation information\{5bc2b5ab-80de-4e83-b8cf-426902051d0a}\use86f2.tmp
%ProgramFiles(x86)%\installshield installation information\{5bc2b5ab-80de-4e83-b8cf-426902051d0a}\pkg8702.tmp
%ProgramFiles(x86)%\installshield installation information\{5bc2b5ab-80de-4e83-b8cf-426902051d0a}\lay87ed.tmp
%ProgramFiles(x86)%\installshield installation information\{5bc2b5ab-80de-4e83-b8cf-426902051d0a}\dat87fe.tmp
%ProgramFiles(x86)%\installshield installation information\{5bc2b5ab-80de-4e83-b8cf-426902051d0a}\dat87ff.tmp
%TEMP%\{bf9de540-7c66-4804-b1ad-3ea469320f96}\{5bc2b5ab-80de-4e83-b8cf-426902051d0a}\def6d3d.tmp
%ProgramFiles(x86)%\installshield installation information\{5bc2b5ab-80de-4e83-b8cf-426902051d0a}\set8919.tmp
%TEMP%\{bf9de540-7c66-4804-b1ad-3ea469320f96}\{5bc2b5ab-80de-4e83-b8cf-426902051d0a}\isr6d1d.tmp
%TEMP%\{bf9de540-7c66-4804-b1ad-3ea469320f96}\isb6d0b.tmp
%TEMP%\{f91c160c-9048-4a8e-9efd-e93872b33b59}\0x041d.ini
%TEMP%\{f91c160c-9048-4a8e-9efd-e93872b33b59}\0x041e.ini
%TEMP%\{f91c160c-9048-4a8e-9efd-e93872b33b59}\0x041f.ini
%TEMP%\{f91c160c-9048-4a8e-9efd-e93872b33b59}\0x0421.ini
%TEMP%\{f91c160c-9048-4a8e-9efd-e93872b33b59}\0x0424.ini
%TEMP%\{f91c160c-9048-4a8e-9efd-e93872b33b59}\0x042d.ini
%TEMP%\{f91c160c-9048-4a8e-9efd-e93872b33b59}\0x0804.ini
%TEMP%\{f91c160c-9048-4a8e-9efd-e93872b33b59}\0x0816.ini
%TEMP%\{f91c160c-9048-4a8e-9efd-e93872b33b59}\0x0c0c.ini
%TEMP%\{f91c160c-9048-4a8e-9efd-e93872b33b59}\0x0c1a.ini
%TEMP%\6ca7.tmp
%TEMP%\{bf9de540-7c66-4804-b1ad-3ea469320f96}\{5bc2b5ab-80de-4e83-b8cf-426902051d0a}\set6cd7.tmp
%TEMP%\{bf9de540-7c66-4804-b1ad-3ea469320f96}\{5bc2b5ab-80de-4e83-b8cf-426902051d0a}\pkg6ce7.tmp
%TEMP%\{bf9de540-7c66-4804-b1ad-3ea469320f96}\{5bc2b5ab-80de-4e83-b8cf-426902051d0a}\fon6cf8.tmp
%TEMP%\{bf9de540-7c66-4804-b1ad-3ea469320f96}\{5bc2b5ab-80de-4e83-b8cf-426902051d0a}\dif6cf9.tmp
%TEMP%\{bf9de540-7c66-4804-b1ad-3ea469320f96}\cor6d09.tmp
%TEMP%\{bf9de540-7c66-4804-b1ad-3ea469320f96}\dot6d0a.tmp
%TEMP%\{bf9de540-7c66-4804-b1ad-3ea469320f96}\{5bc2b5ab-80de-4e83-b8cf-426902051d0a}\str6d1c.tmp
%ProgramFiles(x86)%\installshield installation information\{5bc2b5ab-80de-4e83-b8cf-426902051d0a}\iss8949.tmp
%ProgramFiles(x86)%\installshield installation information\{5bc2b5ab-80de-4e83-b8cf-426902051d0a}\0x08959.tmp
%ProgramFiles(x86)%\installshield installation information\{5bc2b5ab-80de-4e83-b8cf-426902051d0a}\0x0896a.tmp
%ProgramFiles(x86)%\installshield installation information\{5bc2b5ab-80de-4e83-b8cf-426902051d0a}\0x089ff.tmp
%ProgramFiles(x86)%\installshield installation information\{5bc2b5ab-80de-4e83-b8cf-426902051d0a}\0x08a00.tmp
%ProgramFiles(x86)%\installshield installation information\{5bc2b5ab-80de-4e83-b8cf-426902051d0a}\0x08a01.tmp
%ProgramFiles(x86)%\installshield installation information\{5bc2b5ab-80de-4e83-b8cf-426902051d0a}\0x08a11.tmp
%ProgramFiles(x86)%\installshield installation information\{5bc2b5ab-80de-4e83-b8cf-426902051d0a}\0x08a12.tmp
%ProgramFiles(x86)%\installshield installation information\{5bc2b5ab-80de-4e83-b8cf-426902051d0a}\0x08a23.tmp
%ProgramFiles(x86)%\installshield installation information\{5bc2b5ab-80de-4e83-b8cf-426902051d0a}\0x08a24.tmp
%ProgramFiles(x86)%\realtek\realtek card reader\rmb.log
%ProgramFiles(x86)%\installshield installation information\{5bc2b5ab-80de-4e83-b8cf-426902051d0a}\0x08a34.tmp
%ProgramFiles(x86)%\installshield installation information\{5bc2b5ab-80de-4e83-b8cf-426902051d0a}\set8a46.tmp
%ProgramFiles(x86)%\installshield installation information\{5bc2b5ab-80de-4e83-b8cf-426902051d0a}\setup.ini
%TEMP%\{2d5dc0a3-e3c5-2956-a30c-875ec77b5053}\set96c2.tmp
%TEMP%\{2d5dc0a3-e3c5-2956-a30c-875ec77b5053}\set978e.tmp
%TEMP%\{2d5dc0a3-e3c5-2956-a30c-875ec77b5053}\set9879.tmp
%TEMP%\{2d5dc0a3-e3c5-2956-a30c-875ec77b5053}\set9945.tmp
<SYSTEM32>\catroot\{f750e6c3-38ee-11d1-85e5-00c04fc295ee}\oem2.cat
%ProgramFiles(x86)%\installshield installation information\{5bc2b5ab-80de-4e83-b8cf-426902051d0a}\0x089ed.tmp
%ProgramFiles(x86)%\installshield installation information\{5bc2b5ab-80de-4e83-b8cf-426902051d0a}\0x089fe.tmp
%ProgramFiles(x86)%\installshield installation information\{5bc2b5ab-80de-4e83-b8cf-426902051d0a}\0x089ec.tmp
%ProgramFiles(x86)%\installshield installation information\{5bc2b5ab-80de-4e83-b8cf-426902051d0a}\0x089eb.tmp
%ProgramFiles(x86)%\installshield installation information\{5bc2b5ab-80de-4e83-b8cf-426902051d0a}\0x089da.tmp
%ProgramFiles(x86)%\installshield installation information\{5bc2b5ab-80de-4e83-b8cf-426902051d0a}\0x0896c.tmp
%ProgramFiles(x86)%\installshield installation information\{5bc2b5ab-80de-4e83-b8cf-426902051d0a}\0x0897c.tmp
%ProgramFiles(x86)%\installshield installation information\{5bc2b5ab-80de-4e83-b8cf-426902051d0a}\0x0897d.tmp
%ProgramFiles(x86)%\installshield installation information\{5bc2b5ab-80de-4e83-b8cf-426902051d0a}\0x0897e.tmp
%ProgramFiles(x86)%\installshield installation information\{5bc2b5ab-80de-4e83-b8cf-426902051d0a}\0x0897f.tmp
%ProgramFiles(x86)%\installshield installation information\{5bc2b5ab-80de-4e83-b8cf-426902051d0a}\0x08990.tmp
%ProgramFiles(x86)%\installshield installation information\{5bc2b5ab-80de-4e83-b8cf-426902051d0a}\0x08991.tmp
%TEMP%\{f91c160c-9048-4a8e-9efd-e93872b33b59}\0x041b.ini
%ProgramFiles(x86)%\installshield installation information\{5bc2b5ab-80de-4e83-b8cf-426902051d0a}\0x089a3.tmp
%ProgramFiles(x86)%\installshield installation information\{5bc2b5ab-80de-4e83-b8cf-426902051d0a}\0x08992.tmp
%ProgramFiles(x86)%\installshield installation information\{5bc2b5ab-80de-4e83-b8cf-426902051d0a}\0x089b4.tmp
%ProgramFiles(x86)%\installshield installation information\{5bc2b5ab-80de-4e83-b8cf-426902051d0a}\0x089b5.tmp
%ProgramFiles(x86)%\installshield installation information\{5bc2b5ab-80de-4e83-b8cf-426902051d0a}\0x089c6.tmp
%ProgramFiles(x86)%\installshield installation information\{5bc2b5ab-80de-4e83-b8cf-426902051d0a}\0x089c7.tmp
%ProgramFiles(x86)%\installshield installation information\{5bc2b5ab-80de-4e83-b8cf-426902051d0a}\0x089c8.tmp
%ProgramFiles(x86)%\installshield installation information\{5bc2b5ab-80de-4e83-b8cf-426902051d0a}\0x089d8.tmp
%ProgramFiles(x86)%\installshield installation information\{5bc2b5ab-80de-4e83-b8cf-426902051d0a}\0x089d9.tmp
%ProgramFiles(x86)%\installshield installation information\{5bc2b5ab-80de-4e83-b8cf-426902051d0a}\0x0896b.tmp
%ProgramFiles(x86)%\installshield installation information\{5bc2b5ab-80de-4e83-b8cf-426902051d0a}\0x089a4.tmp
%ProgramFiles(x86)%\installshield installation information\{5bc2b5ab-80de-4e83-b8cf-426902051d0a}\set8a35.tmp
%TEMP%\{f91c160c-9048-4a8e-9efd-e93872b33b59}\0x041a.ini
%TEMP%\{f91c160c-9048-4a8e-9efd-e93872b33b59}\0x040e.ini
%TEMP%\7zscd8d2070\0x041b.ini
%TEMP%\7zscd8d2070\0x041d.ini
%TEMP%\7zscd8d2070\0x041e.ini
%TEMP%\7zscd8d2070\0x041f.ini
%TEMP%\7zscd8d2070\0x0421.ini
%TEMP%\7zscd8d2070\0x0424.ini
%TEMP%\7zscd8d2070\0x042d.ini
%TEMP%\7zscd8d2070\0x0804.ini
%TEMP%\7zscd8d2070\0x0816.ini
%TEMP%\7zscd8d2070\0x0c0c.ini
%TEMP%\7zscd8d2070\0x0c1a.ini
%TEMP%\7zscd8d2070\apbin\config.ini
%TEMP%\7zscd8d2070\data1.cab
%TEMP%\7zscd8d2070\data1.hdr
%TEMP%\7zscd8d2070\data2.cab
%TEMP%\7zscd8d2070\drvbin32\rtsper.inf
%TEMP%\7zscd8d2070\drvbin32\rtsper32.cat
%TEMP%\7zscd8d2070\0x041a.ini
%TEMP%\7zscd8d2070\drvbin64\rtsper.inf
%TEMP%\7zscd8d2070\0x0419.ini
%TEMP%\7zscd8d2070\0x0416.ini
%TEMP%\7zscd8d2070\0x0403.ini
%TEMP%\7zscd8d2070\0x0404.ini
%TEMP%\7zscd8d2070\0x0405.ini
%TEMP%\7zscd8d2070\0x0406.ini
%TEMP%\7zscd8d2070\0x0407.ini
%TEMP%\7zscd8d2070\0x0408.ini
%TEMP%\7zscd8d2070\0x0409.ini
%TEMP%\7zscd8d2070\0x040a.ini
%TEMP%\7zscd8d2070\0x040b.ini
%TEMP%\7zscd8d2070\0x040c.ini
%TEMP%\7zscd8d2070\0x040e.ini
%TEMP%\7zscd8d2070\0x0410.ini
%TEMP%\7zscd8d2070\0x0411.ini
%TEMP%\7zscd8d2070\0x0412.ini
%TEMP%\7zscd8d2070\0x0413.ini
%TEMP%\7zscd8d2070\0x0414.ini
%TEMP%\7zscd8d2070\0x0415.ini
%TEMP%\7zscd8d2070\0x0418.ini
%TEMP%\7zscd8d2070\drvbin64\rtsper64.cat
%TEMP%\7zscd8d2070\layout.bin
%TEMP%\7zscd8d2070\pkgconf.ini
%TEMP%\{f91c160c-9048-4a8e-9efd-e93872b33b59}\0x0405.ini
%TEMP%\{f91c160c-9048-4a8e-9efd-e93872b33b59}\0x0406.ini
%TEMP%\{f91c160c-9048-4a8e-9efd-e93872b33b59}\0x0407.ini
%TEMP%\{f91c160c-9048-4a8e-9efd-e93872b33b59}\0x0408.ini
%TEMP%\{f91c160c-9048-4a8e-9efd-e93872b33b59}\0x0409.ini
%TEMP%\{f91c160c-9048-4a8e-9efd-e93872b33b59}\0x040a.ini
%TEMP%\{f91c160c-9048-4a8e-9efd-e93872b33b59}\0x040b.ini
%TEMP%\{f91c160c-9048-4a8e-9efd-e93872b33b59}\0x0418.ini
%TEMP%\{f91c160c-9048-4a8e-9efd-e93872b33b59}\0x040c.ini
%TEMP%\{f91c160c-9048-4a8e-9efd-e93872b33b59}\0x0410.ini
%TEMP%\{f91c160c-9048-4a8e-9efd-e93872b33b59}\0x0411.ini
%TEMP%\{f91c160c-9048-4a8e-9efd-e93872b33b59}\0x0412.ini
%TEMP%\{f91c160c-9048-4a8e-9efd-e93872b33b59}\0x0413.ini
%TEMP%\{f91c160c-9048-4a8e-9efd-e93872b33b59}\0x0414.ini
%TEMP%\{f91c160c-9048-4a8e-9efd-e93872b33b59}\0x0415.ini
%TEMP%\{f91c160c-9048-4a8e-9efd-e93872b33b59}\0x0416.ini
%TEMP%\{f91c160c-9048-4a8e-9efd-e93872b33b59}\0x0403.ini
%TEMP%\{f91c160c-9048-4a8e-9efd-e93872b33b59}\0x0404.ini
%TEMP%\{f91c160c-9048-4a8e-9efd-e93872b33b59}\0x0402.ini
%TEMP%\{f91c160c-9048-4a8e-9efd-e93872b33b59}\setup.ini
%TEMP%\7zscd8d2070\utility\revcon64.exe
%TEMP%\7zscd8d2070\setup.ini
%TEMP%\7zscd8d2070\setup.inx
%TEMP%\7zscd8d2070\setup.iss
%TEMP%\7zscd8d2070\silentinstall.bat
%TEMP%\7zscd8d2070\u2setup.iss
%TEMP%\7zscd8d2070\u3setup.iss
%TEMP%\7zscd8d2070\usetup.iss
%TEMP%\{f91c160c-9048-4a8e-9efd-e93872b33b59}\0x0419.ini
%TEMP%\7zscd8d2070\apbin\rmb.exe
%TEMP%\7zscd8d2070\utility\display.ico
%TEMP%\7zscd8d2070\drvbin32\rscricon.dll
%TEMP%\7zscd8d2070\drvbin32\rtsper.sys
%TEMP%\7zscd8d2070\drvbin64\rscricon.dll
%TEMP%\7zscd8d2070\drvbin64\rtsper.sys
%TEMP%\7zscd8d2070\issetup.dll
%TEMP%\7zscd8d2070\setup.exe
%TEMP%\7zscd8d2070\utility\revcon32.exe
%TEMP%\7zscd8d2070\readme.txt
%TEMP%\7zscd8d2070\apbin\setehcikey.exe
%ProgramFiles(x86)%\realtek\realtek card reader\config.ini

Присваивает атрибут 'скрытый' для следующих файлов

<SYSTEM32>\catroot\{f750e6c3-38ee-11d1-85e5-00c04fc295ee}\oem2.cat

Удаляет следующие файлы

%TEMP%\{2d5dc0a3-e3c5-2956-a30c-875ec77b5053}\rscricon.dll
%TEMP%\{2d5dc0a3-e3c5-2956-a30c-875ec77b5053}\rtsper.inf
%TEMP%\{2d5dc0a3-e3c5-2956-a30c-875ec77b5053}\rtsper.sys
%TEMP%\{2d5dc0a3-e3c5-2956-a30c-875ec77b5053}\rtsper64.cat

Перемещает следующие файлы

%TEMP%\{bf9de540-7c66-4804-b1ad-3ea469320f96}\{5bc2b5ab-80de-4e83-b8cf-426902051d0a}\set6cd7.tmp в %TEMP%\{bf9de540-7c66-4804-b1ad-3ea469320f96}\{5bc2b5ab-80de-4e83-b8cf-426902051d0a}\setup.inx
%ProgramFiles(x86)%\installshield installation information\{5bc2b5ab-80de-4e83-b8cf-426902051d0a}\0x08990.tmp в %ProgramFiles(x86)%\installshield installation information\{5bc2b5ab-80de-4e83-b8cf-426902051d0a}\0x0409.ini
%ProgramFiles(x86)%\installshield installation information\{5bc2b5ab-80de-4e83-b8cf-426902051d0a}\0x08991.tmp в %ProgramFiles(x86)%\installshield installation information\{5bc2b5ab-80de-4e83-b8cf-426902051d0a}\0x040b.ini
%ProgramFiles(x86)%\installshield installation information\{5bc2b5ab-80de-4e83-b8cf-426902051d0a}\0x08992.tmp в %ProgramFiles(x86)%\installshield installation information\{5bc2b5ab-80de-4e83-b8cf-426902051d0a}\0x0c0c.ini
%ProgramFiles(x86)%\installshield installation information\{5bc2b5ab-80de-4e83-b8cf-426902051d0a}\0x089a3.tmp в %ProgramFiles(x86)%\installshield installation information\{5bc2b5ab-80de-4e83-b8cf-426902051d0a}\0x040c.ini
%ProgramFiles(x86)%\installshield installation information\{5bc2b5ab-80de-4e83-b8cf-426902051d0a}\0x089a4.tmp в %ProgramFiles(x86)%\installshield installation information\{5bc2b5ab-80de-4e83-b8cf-426902051d0a}\0x0407.ini
%ProgramFiles(x86)%\installshield installation information\{5bc2b5ab-80de-4e83-b8cf-426902051d0a}\0x089b4.tmp в %ProgramFiles(x86)%\installshield installation information\{5bc2b5ab-80de-4e83-b8cf-426902051d0a}\0x0408.ini
%ProgramFiles(x86)%\installshield installation information\{5bc2b5ab-80de-4e83-b8cf-426902051d0a}\0x089b5.tmp в %ProgramFiles(x86)%\installshield installation information\{5bc2b5ab-80de-4e83-b8cf-426902051d0a}\0x040e.ini
%ProgramFiles(x86)%\installshield installation information\{5bc2b5ab-80de-4e83-b8cf-426902051d0a}\0x089c6.tmp в %ProgramFiles(x86)%\installshield installation information\{5bc2b5ab-80de-4e83-b8cf-426902051d0a}\0x0421.ini
%ProgramFiles(x86)%\installshield installation information\{5bc2b5ab-80de-4e83-b8cf-426902051d0a}\0x089c7.tmp в %ProgramFiles(x86)%\installshield installation information\{5bc2b5ab-80de-4e83-b8cf-426902051d0a}\0x0410.ini
%ProgramFiles(x86)%\installshield installation information\{5bc2b5ab-80de-4e83-b8cf-426902051d0a}\0x089c8.tmp в %ProgramFiles(x86)%\installshield installation information\{5bc2b5ab-80de-4e83-b8cf-426902051d0a}\0x0411.ini
%ProgramFiles(x86)%\installshield installation information\{5bc2b5ab-80de-4e83-b8cf-426902051d0a}\0x089d8.tmp в %ProgramFiles(x86)%\installshield installation information\{5bc2b5ab-80de-4e83-b8cf-426902051d0a}\0x0412.ini
%ProgramFiles(x86)%\installshield installation information\{5bc2b5ab-80de-4e83-b8cf-426902051d0a}\0x089d9.tmp в %ProgramFiles(x86)%\installshield installation information\{5bc2b5ab-80de-4e83-b8cf-426902051d0a}\0x0414.ini
%ProgramFiles(x86)%\installshield installation information\{5bc2b5ab-80de-4e83-b8cf-426902051d0a}\0x089da.tmp в %ProgramFiles(x86)%\installshield installation information\{5bc2b5ab-80de-4e83-b8cf-426902051d0a}\0x0415.ini
%ProgramFiles(x86)%\installshield installation information\{5bc2b5ab-80de-4e83-b8cf-426902051d0a}\0x0897e.tmp в %ProgramFiles(x86)%\installshield installation information\{5bc2b5ab-80de-4e83-b8cf-426902051d0a}\0x0406.ini
%ProgramFiles(x86)%\installshield installation information\{5bc2b5ab-80de-4e83-b8cf-426902051d0a}\0x0897f.tmp в %ProgramFiles(x86)%\installshield installation information\{5bc2b5ab-80de-4e83-b8cf-426902051d0a}\0x0413.ini
%ProgramFiles(x86)%\installshield installation information\{5bc2b5ab-80de-4e83-b8cf-426902051d0a}\0x089eb.tmp в %ProgramFiles(x86)%\installshield installation information\{5bc2b5ab-80de-4e83-b8cf-426902051d0a}\0x0416.ini
%ProgramFiles(x86)%\installshield installation information\{5bc2b5ab-80de-4e83-b8cf-426902051d0a}\0x089ec.tmp в %ProgramFiles(x86)%\installshield installation information\{5bc2b5ab-80de-4e83-b8cf-426902051d0a}\0x0816.ini
%TEMP%\{2d5dc0a3-e3c5-2956-a30c-875ec77b5053}\set978e.tmp в %TEMP%\{2d5dc0a3-e3c5-2956-a30c-875ec77b5053}\rtsper.sys
%TEMP%\{2d5dc0a3-e3c5-2956-a30c-875ec77b5053}\set96c2.tmp в %TEMP%\{2d5dc0a3-e3c5-2956-a30c-875ec77b5053}\rtsper.inf
%ProgramFiles(x86)%\installshield installation information\{5bc2b5ab-80de-4e83-b8cf-426902051d0a}\set8a46.tmp в %ProgramFiles(x86)%\installshield installation information\{5bc2b5ab-80de-4e83-b8cf-426902051d0a}\setup.ini
%ProgramFiles(x86)%\installshield installation information\{5bc2b5ab-80de-4e83-b8cf-426902051d0a}\set8a35.tmp в %ProgramFiles(x86)%\installshield installation information\{5bc2b5ab-80de-4e83-b8cf-426902051d0a}\setup.inx
%ProgramFiles(x86)%\installshield installation information\{5bc2b5ab-80de-4e83-b8cf-426902051d0a}\0x08a34.tmp в %ProgramFiles(x86)%\installshield installation information\{5bc2b5ab-80de-4e83-b8cf-426902051d0a}\0x042d.ini
%ProgramFiles(x86)%\installshield installation information\{5bc2b5ab-80de-4e83-b8cf-426902051d0a}\lay87ed.tmp в %ProgramFiles(x86)%\installshield installation information\{5bc2b5ab-80de-4e83-b8cf-426902051d0a}\layout.bin
%ProgramFiles(x86)%\installshield installation information\{5bc2b5ab-80de-4e83-b8cf-426902051d0a}\0x08a24.tmp в %ProgramFiles(x86)%\installshield installation information\{5bc2b5ab-80de-4e83-b8cf-426902051d0a}\0x041f.ini
%ProgramFiles(x86)%\installshield installation information\{5bc2b5ab-80de-4e83-b8cf-426902051d0a}\0x08a12.tmp в %ProgramFiles(x86)%\installshield installation information\{5bc2b5ab-80de-4e83-b8cf-426902051d0a}\0x041d.ini
%ProgramFiles(x86)%\installshield installation information\{5bc2b5ab-80de-4e83-b8cf-426902051d0a}\0x08a11.tmp в %ProgramFiles(x86)%\installshield installation information\{5bc2b5ab-80de-4e83-b8cf-426902051d0a}\0x040a.ini
%ProgramFiles(x86)%\installshield installation information\{5bc2b5ab-80de-4e83-b8cf-426902051d0a}\0x08a01.tmp в %ProgramFiles(x86)%\installshield installation information\{5bc2b5ab-80de-4e83-b8cf-426902051d0a}\0x0424.ini
%ProgramFiles(x86)%\installshield installation information\{5bc2b5ab-80de-4e83-b8cf-426902051d0a}\0x08a00.tmp в %ProgramFiles(x86)%\installshield installation information\{5bc2b5ab-80de-4e83-b8cf-426902051d0a}\0x041b.ini
%ProgramFiles(x86)%\installshield installation information\{5bc2b5ab-80de-4e83-b8cf-426902051d0a}\0x089ff.tmp в %ProgramFiles(x86)%\installshield installation information\{5bc2b5ab-80de-4e83-b8cf-426902051d0a}\0x0c1a.ini
%ProgramFiles(x86)%\installshield installation information\{5bc2b5ab-80de-4e83-b8cf-426902051d0a}\0x089fe.tmp в %ProgramFiles(x86)%\installshield installation information\{5bc2b5ab-80de-4e83-b8cf-426902051d0a}\0x0419.ini
%ProgramFiles(x86)%\installshield installation information\{5bc2b5ab-80de-4e83-b8cf-426902051d0a}\0x089ed.tmp в %ProgramFiles(x86)%\installshield installation information\{5bc2b5ab-80de-4e83-b8cf-426902051d0a}\0x0418.ini
%ProgramFiles(x86)%\installshield installation information\{5bc2b5ab-80de-4e83-b8cf-426902051d0a}\0x0897d.tmp в %ProgramFiles(x86)%\installshield installation information\{5bc2b5ab-80de-4e83-b8cf-426902051d0a}\0x0405.ini
%ProgramFiles(x86)%\installshield installation information\{5bc2b5ab-80de-4e83-b8cf-426902051d0a}\0x0897c.tmp в %ProgramFiles(x86)%\installshield installation information\{5bc2b5ab-80de-4e83-b8cf-426902051d0a}\0x041a.ini
%ProgramFiles(x86)%\installshield installation information\{5bc2b5ab-80de-4e83-b8cf-426902051d0a}\0x0896c.tmp в %ProgramFiles(x86)%\installshield installation information\{5bc2b5ab-80de-4e83-b8cf-426902051d0a}\0x0404.ini
%TEMP%\{bf9de540-7c66-4804-b1ad-3ea469320f96}\{5bc2b5ab-80de-4e83-b8cf-426902051d0a}\fon6cf8.tmp в %TEMP%\{bf9de540-7c66-4804-b1ad-3ea469320f96}\{5bc2b5ab-80de-4e83-b8cf-426902051d0a}\fontdata.ini
%TEMP%\{bf9de540-7c66-4804-b1ad-3ea469320f96}\{5bc2b5ab-80de-4e83-b8cf-426902051d0a}\dif6cf9.tmp в %TEMP%\{bf9de540-7c66-4804-b1ad-3ea469320f96}\{5bc2b5ab-80de-4e83-b8cf-426902051d0a}\difxdata.ini
%TEMP%\{bf9de540-7c66-4804-b1ad-3ea469320f96}\cor6d09.tmp в %TEMP%\{bf9de540-7c66-4804-b1ad-3ea469320f96}\corecomp.ini
%TEMP%\{bf9de540-7c66-4804-b1ad-3ea469320f96}\dot6d0a.tmp в %TEMP%\{bf9de540-7c66-4804-b1ad-3ea469320f96}\dotnetinstaller.exe
%TEMP%\{bf9de540-7c66-4804-b1ad-3ea469320f96}\isb6d0b.tmp в %TEMP%\{bf9de540-7c66-4804-b1ad-3ea469320f96}\isbew64.exe
%TEMP%\{bf9de540-7c66-4804-b1ad-3ea469320f96}\{5bc2b5ab-80de-4e83-b8cf-426902051d0a}\str6d1c.tmp в %TEMP%\{bf9de540-7c66-4804-b1ad-3ea469320f96}\{5bc2b5ab-80de-4e83-b8cf-426902051d0a}\stringtable_0x0409.ips
%TEMP%\{bf9de540-7c66-4804-b1ad-3ea469320f96}\{5bc2b5ab-80de-4e83-b8cf-426902051d0a}\isr6d1d.tmp в %TEMP%\{bf9de540-7c66-4804-b1ad-3ea469320f96}\{5bc2b5ab-80de-4e83-b8cf-426902051d0a}\isrt.dll
%TEMP%\{bf9de540-7c66-4804-b1ad-3ea469320f96}\{5bc2b5ab-80de-4e83-b8cf-426902051d0a}\def6d3d.tmp в %TEMP%\{bf9de540-7c66-4804-b1ad-3ea469320f96}\{5bc2b5ab-80de-4e83-b8cf-426902051d0a}\default.pal
%TEMP%\{bf9de540-7c66-4804-b1ad-3ea469320f96}\{5bc2b5ab-80de-4e83-b8cf-426902051d0a}\_is6d4e.tmp в %TEMP%\{bf9de540-7c66-4804-b1ad-3ea469320f96}\{5bc2b5ab-80de-4e83-b8cf-426902051d0a}\_isres_0x0409.dll
%ProgramFiles(x86)%\realtek\realtek card reader\con8542.tmp в %ProgramFiles(x86)%\realtek\realtek card reader\config.ini
%ProgramFiles(x86)%\realtek\realtek card reader\rmb8543.tmp в %ProgramFiles(x86)%\realtek\realtek card reader\rmb.exe
%ProgramFiles(x86)%\realtek\realtek card reader\set8553.tmp в %ProgramFiles(x86)%\realtek\realtek card reader\setehcikey.exe
%ProgramFiles(x86)%\realtek\realtek card reader\rsc8564.tmp в %ProgramFiles(x86)%\realtek\realtek card reader\rscricon.dll
%ProgramFiles(x86)%\realtek\realtek card reader\rts866e.tmp в %ProgramFiles(x86)%\realtek\realtek card reader\rtsper.inf
%TEMP%\{bf9de540-7c66-4804-b1ad-3ea469320f96}\{5bc2b5ab-80de-4e83-b8cf-426902051d0a}\pkg6ce7.tmp в %TEMP%\{bf9de540-7c66-4804-b1ad-3ea469320f96}\{5bc2b5ab-80de-4e83-b8cf-426902051d0a}\pkgutility.dll
%ProgramFiles(x86)%\realtek\realtek card reader\rts867f.tmp в %ProgramFiles(x86)%\realtek\realtek card reader\rtsper.sys
%ProgramFiles(x86)%\installshield installation information\{5bc2b5ab-80de-4e83-b8cf-426902051d0a}\0x0896b.tmp в %ProgramFiles(x86)%\installshield installation information\{5bc2b5ab-80de-4e83-b8cf-426902051d0a}\0x0804.ini
%ProgramFiles(x86)%\realtek\realtek card reader\rts869f.tmp в %ProgramFiles(x86)%\realtek\realtek card reader\rtsper64.cat
<DRIVERS>\rts86af.tmp в <DRIVERS>\rtsper.sys
%ProgramFiles(x86)%\realtek\realtek card reader\dis86d0.tmp в %ProgramFiles(x86)%\realtek\realtek card reader\display.ico
%ProgramFiles(x86)%\realtek\realtek card reader\rev86d1.tmp в %ProgramFiles(x86)%\realtek\realtek card reader\revcon32.exe
%ProgramFiles(x86)%\realtek\realtek card reader\rev86e1.tmp в %ProgramFiles(x86)%\realtek\realtek card reader\revcon64.exe
%ProgramFiles(x86)%\installshield installation information\{5bc2b5ab-80de-4e83-b8cf-426902051d0a}\use86f2.tmp в %ProgramFiles(x86)%\installshield installation information\{5bc2b5ab-80de-4e83-b8cf-426902051d0a}\usetup.iss
%ProgramFiles(x86)%\installshield installation information\{5bc2b5ab-80de-4e83-b8cf-426902051d0a}\0x08a23.tmp в %ProgramFiles(x86)%\installshield installation information\{5bc2b5ab-80de-4e83-b8cf-426902051d0a}\0x041e.ini
%ProgramFiles(x86)%\installshield installation information\{5bc2b5ab-80de-4e83-b8cf-426902051d0a}\pkg8702.tmp в %ProgramFiles(x86)%\installshield installation information\{5bc2b5ab-80de-4e83-b8cf-426902051d0a}\pkgconf.ini
%TEMP%\{2d5dc0a3-e3c5-2956-a30c-875ec77b5053}\set9879.tmp в %TEMP%\{2d5dc0a3-e3c5-2956-a30c-875ec77b5053}\rtsper64.cat
%ProgramFiles(x86)%\installshield installation information\{5bc2b5ab-80de-4e83-b8cf-426902051d0a}\dat87ff.tmp в %ProgramFiles(x86)%\installshield installation information\{5bc2b5ab-80de-4e83-b8cf-426902051d0a}\data1.cab
%ProgramFiles(x86)%\installshield installation information\{5bc2b5ab-80de-4e83-b8cf-426902051d0a}\set8919.tmp в %ProgramFiles(x86)%\installshield installation information\{5bc2b5ab-80de-4e83-b8cf-426902051d0a}\setup.exe
%ProgramFiles(x86)%\installshield installation information\{5bc2b5ab-80de-4e83-b8cf-426902051d0a}\iss8949.tmp в %ProgramFiles(x86)%\installshield installation information\{5bc2b5ab-80de-4e83-b8cf-426902051d0a}\issetup.dll
%ProgramFiles(x86)%\installshield installation information\{5bc2b5ab-80de-4e83-b8cf-426902051d0a}\0x08959.tmp в %ProgramFiles(x86)%\installshield installation information\{5bc2b5ab-80de-4e83-b8cf-426902051d0a}\0x0402.ini
%ProgramFiles(x86)%\installshield installation information\{5bc2b5ab-80de-4e83-b8cf-426902051d0a}\0x0896a.tmp в %ProgramFiles(x86)%\installshield installation information\{5bc2b5ab-80de-4e83-b8cf-426902051d0a}\0x0403.ini
%ProgramFiles(x86)%\installshield installation information\{5bc2b5ab-80de-4e83-b8cf-426902051d0a}\dat87fe.tmp в %ProgramFiles(x86)%\installshield installation information\{5bc2b5ab-80de-4e83-b8cf-426902051d0a}\data1.hdr
%TEMP%\{2d5dc0a3-e3c5-2956-a30c-875ec77b5053}\set9945.tmp в %TEMP%\{2d5dc0a3-e3c5-2956-a30c-875ec77b5053}\rscricon.dll

Другое

Создает и запускает на исполнение

'%TEMP%\7zscd8d2070\setup.exe'
'%ProgramFiles(x86)%\realtek\realtek card reader\rmb.exe' /install
'%ProgramFiles(x86)%\realtek\realtek card reader\revcon64.exe' RS_update RtsPer.inf PCI\VEN_10EC&DEV_5249&CC_FF00
'%ProgramFiles(x86)%\realtek\realtek card reader\revcon64.exe' RS_remove PCI\VEN_10EC&DEV_5249&CC_FF00
'%ProgramFiles(x86)%\realtek\realtek card reader\revcon64.exe' RS_update RtsPer.inf PCI\VEN_10EC&DEV_5287&CC_FF00
'%ProgramFiles(x86)%\realtek\realtek card reader\revcon64.exe' RS_update RtsPer.inf PCI\VEN_10EC&DEV_5250
'%ProgramFiles(x86)%\realtek\realtek card reader\revcon64.exe' RS_remove PCI\VEN_10EC&DEV_5287&CC_FF00
'%ProgramFiles(x86)%\realtek\realtek card reader\revcon64.exe' RS_update RtsPer.inf PCI\VEN_10EC&DEV_524A&CC_FF00
'%ProgramFiles(x86)%\realtek\realtek card reader\revcon64.exe' RS_remove PCI\VEN_10EC&DEV_5250
'%ProgramFiles(x86)%\realtek\realtek card reader\revcon64.exe' RS_remove PCI\VEN_10EC&DEV_5227&CC_FF00
'%ProgramFiles(x86)%\realtek\realtek card reader\revcon64.exe' RS_update RtsPer.inf PCI\VEN_10EC&DEV_522A&CC_FF00
'%ProgramFiles(x86)%\realtek\realtek card reader\revcon64.exe' RS_remove PCI\VEN_10EC&DEV_524A&CC_FF00
'%ProgramFiles(x86)%\realtek\realtek card reader\revcon64.exe' RS_update RtsPer.inf PCI\VEN_10EC&DEV_525A&CC_FF00
'%TEMP%\{bf9de540-7c66-4804-b1ad-3ea469320f96}\isbew64.exe' {EFB7539B-24F3-46B6-AF6E-3B021B51EFEF}:{C31419A0-3899-467A-9C02-20AB3575556A}
'%ProgramFiles(x86)%\realtek\realtek card reader\revcon64.exe' RS_remove PCI\VEN_10EC&DEV_522A&CC_FF00
'%TEMP%\{bf9de540-7c66-4804-b1ad-3ea469320f96}\isbew64.exe' {EFB7539B-24F3-46B6-AF6E-3B021B51EFEF}:{E7557CF5-F71D-4157-9430-EB268F905FFA}
'%TEMP%\{bf9de540-7c66-4804-b1ad-3ea469320f96}\isbew64.exe' {EFB7539B-24F3-46B6-AF6E-3B021B51EFEF}:{1D98FA91-7FEC-44A1-8A18-6049D2D02C4F}
'%TEMP%\{bf9de540-7c66-4804-b1ad-3ea469320f96}\isbew64.exe' {EFB7539B-24F3-46B6-AF6E-3B021B51EFEF}:{E033CB8B-28B9-444F-B623-26471CEF2491}
'%TEMP%\{bf9de540-7c66-4804-b1ad-3ea469320f96}\isbew64.exe' {EFB7539B-24F3-46B6-AF6E-3B021B51EFEF}:{5A0D8DD9-D8D8-4DA4-B8E9-42F75D120A98}
'%ProgramFiles(x86)%\realtek\realtek card reader\revcon64.exe' dp_add RtsPer.inf
'%ProgramFiles(x86)%\realtek\realtek card reader\revcon64.exe' RS_remove PCI\VEN_10EC&DEV_525A&CC_FF00
'%ProgramFiles(x86)%\realtek\realtek card reader\revcon64.exe' RS_update RtsPer.inf PCI\VEN_10EC&DEV_5227&CC_FF00
'%TEMP%\{bf9de540-7c66-4804-b1ad-3ea469320f96}\isbew64.exe' {EFB7539B-24F3-46B6-AF6E-3B021B51EFEF}:{B55AB4A4-CE93-4F47-AFE5-7FEA23A6E268}
'%ProgramFiles(x86)%\realtek\realtek card reader\revcon64.exe' RS_update RtsPer.inf PCI\VEN_10EC&DEV_522A&CC_FF00' (со скрытым окном)
'%ProgramFiles(x86)%\realtek\realtek card reader\revcon64.exe' RS_update RtsPer.inf PCI\VEN_10EC&DEV_5287&CC_FF00' (со скрытым окном)
'%ProgramFiles(x86)%\realtek\realtek card reader\revcon64.exe' RS_remove PCI\VEN_10EC&DEV_524A&CC_FF00' (со скрытым окном)
'%ProgramFiles(x86)%\realtek\realtek card reader\revcon64.exe' RS_remove PCI\VEN_10EC&DEV_525A&CC_FF00' (со скрытым окном)
'%ProgramFiles(x86)%\realtek\realtek card reader\revcon64.exe' RS_remove PCI\VEN_10EC&DEV_522A&CC_FF00' (со скрытым окном)
'%ProgramFiles(x86)%\realtek\realtek card reader\revcon64.exe' RS_update RtsPer.inf PCI\VEN_10EC&DEV_525A&CC_FF00' (со скрытым окном)
'%ProgramFiles(x86)%\realtek\realtek card reader\revcon64.exe' RS_remove PCI\VEN_10EC&DEV_5250' (со скрытым окном)
'%ProgramFiles(x86)%\realtek\realtek card reader\revcon64.exe' dp_add RtsPer.inf' (со скрытым окном)
'%ProgramFiles(x86)%\realtek\realtek card reader\revcon64.exe' RS_remove PCI\VEN_10EC&DEV_5287&CC_FF00' (со скрытым окном)
'%ProgramFiles(x86)%\realtek\realtek card reader\revcon64.exe' RS_update RtsPer.inf PCI\VEN_10EC&DEV_5249&CC_FF00' (со скрытым окном)
'%ProgramFiles(x86)%\realtek\realtek card reader\revcon64.exe' RS_remove PCI\VEN_10EC&DEV_5227&CC_FF00' (со скрытым окном)
'%ProgramFiles(x86)%\realtek\realtek card reader\revcon64.exe' RS_update RtsPer.inf PCI\VEN_10EC&DEV_5227&CC_FF00' (со скрытым окном)
'%ProgramFiles(x86)%\realtek\realtek card reader\revcon64.exe' RS_remove PCI\VEN_10EC&DEV_5249&CC_FF00' (со скрытым окном)
'%WINDIR%\syswow64\rundll32.exe' "%TEMP%\{BF9DE540-7C66-4804-B1AD-3EA469320F96}\{5BC2B5AB-80DE-4E83-B8CF-426902051D0A}\PkgUtility.dll" GetOSVersion' (со скрытым окном)
'%ProgramFiles(x86)%\realtek\realtek card reader\revcon64.exe' RS_update RtsPer.inf PCI\VEN_10EC&DEV_5250' (со скрытым окном)
'%ProgramFiles(x86)%\realtek\realtek card reader\revcon64.exe' RS_update RtsPer.inf PCI\VEN_10EC&DEV_524A&CC_FF00' (со скрытым окном)
'%ProgramFiles(x86)%\realtek\realtek card reader\rmb.exe' /install' (со скрытым окном)

Запускает на исполнение

'%WINDIR%\syswow64\rundll32.exe' "%TEMP%\{BF9DE540-7C66-4804-B1AD-3EA469320F96}\{5BC2B5AB-80DE-4E83-B8CF-426902051D0A}\PkgUtility.dll" GetOSVersion

Технологии

Термины

Обучение и просвещение

Мифы

Техническая информация

Рекомендации по лечению

Демо бесплатно на 14 дней