Trojan.MulDrop15.61258

Техническая информация

Изменения в файловой системе

Создает следующие файлы

%TEMP%\7zs4566e422\0x0402.ini
%ProgramFiles(x86)%\realtek\realtek card reader\con32cf.tmp
%ProgramFiles(x86)%\realtek\realtek card reader\rmb32df.tmp
%ProgramFiles(x86)%\realtek\realtek card reader\set32f0.tmp
%ProgramFiles(x86)%\realtek\realtek card reader\rsc3301.tmp
%ProgramFiles(x86)%\realtek\realtek card reader\rts3478.tmp
%TEMP%\{e404f239-d02b-4e37-aae2-875e006e127b}\{5bc2b5ab-80de-4e83-b8cf-426902051d0a}\isr18e6.tmp
%ProgramFiles(x86)%\realtek\realtek card reader\rts3489.tmp
%TEMP%\{e404f239-d02b-4e37-aae2-875e006e127b}\{5bc2b5ab-80de-4e83-b8cf-426902051d0a}\_is1907.tmp
<DRIVERS>\rts34b9.tmp
%ProgramFiles(x86)%\realtek\realtek card reader\rev34db.tmp
%ProgramFiles(x86)%\realtek\realtek card reader\rev34eb.tmp
%ProgramFiles(x86)%\installshield installation information\{5bc2b5ab-80de-4e83-b8cf-426902051d0a}\pkg350b.tmp
%ProgramFiles(x86)%\installshield installation information\{5bc2b5ab-80de-4e83-b8cf-426902051d0a}\lay3673.tmp
%ProgramFiles(x86)%\installshield installation information\{5bc2b5ab-80de-4e83-b8cf-426902051d0a}\dat3674.tmp
%ProgramFiles(x86)%\realtek\realtek card reader\rts34a9.tmp
%ProgramFiles(x86)%\installshield installation information\{5bc2b5ab-80de-4e83-b8cf-426902051d0a}\dat3685.tmp
%ProgramFiles(x86)%\realtek\realtek card reader\dis34ca.tmp
%TEMP%\{e404f239-d02b-4e37-aae2-875e006e127b}\{5bc2b5ab-80de-4e83-b8cf-426902051d0a}\def18f6.tmp
%TEMP%\{e404f239-d02b-4e37-aae2-875e006e127b}\{5bc2b5ab-80de-4e83-b8cf-426902051d0a}\str18d5.tmp
%TEMP%\{e404f239-d02b-4e37-aae2-875e006e127b}\isb18c5.tmp
%TEMP%\{800efdc0-3fce-4abf-8a2c-a5da3fdd5a7a}\0x041e.ini
%TEMP%\{800efdc0-3fce-4abf-8a2c-a5da3fdd5a7a}\0x041f.ini
%TEMP%\{800efdc0-3fce-4abf-8a2c-a5da3fdd5a7a}\0x0421.ini
%TEMP%\{800efdc0-3fce-4abf-8a2c-a5da3fdd5a7a}\0x0424.ini
%TEMP%\{800efdc0-3fce-4abf-8a2c-a5da3fdd5a7a}\0x042d.ini
%TEMP%\{800efdc0-3fce-4abf-8a2c-a5da3fdd5a7a}\0x0804.ini
%TEMP%\{800efdc0-3fce-4abf-8a2c-a5da3fdd5a7a}\0x041b.ini
%TEMP%\{800efdc0-3fce-4abf-8a2c-a5da3fdd5a7a}\0x0816.ini
%TEMP%\{800efdc0-3fce-4abf-8a2c-a5da3fdd5a7a}\0x0c1a.ini
%TEMP%\1850.tmp
%TEMP%\{e404f239-d02b-4e37-aae2-875e006e127b}\{5bc2b5ab-80de-4e83-b8cf-426902051d0a}\set1890.tmp
%TEMP%\{e404f239-d02b-4e37-aae2-875e006e127b}\{5bc2b5ab-80de-4e83-b8cf-426902051d0a}\pkg18a0.tmp
%TEMP%\{e404f239-d02b-4e37-aae2-875e006e127b}\{5bc2b5ab-80de-4e83-b8cf-426902051d0a}\fon18b1.tmp
%TEMP%\{e404f239-d02b-4e37-aae2-875e006e127b}\{5bc2b5ab-80de-4e83-b8cf-426902051d0a}\dif18b2.tmp
%TEMP%\{e404f239-d02b-4e37-aae2-875e006e127b}\cor18b3.tmp
%TEMP%\{800efdc0-3fce-4abf-8a2c-a5da3fdd5a7a}\0x0c0c.ini
%TEMP%\{e404f239-d02b-4e37-aae2-875e006e127b}\dot18c4.tmp
%TEMP%\{800efdc0-3fce-4abf-8a2c-a5da3fdd5a7a}\0x041a.ini
%TEMP%\{800efdc0-3fce-4abf-8a2c-a5da3fdd5a7a}\0x041d.ini
%ProgramFiles(x86)%\installshield installation information\{5bc2b5ab-80de-4e83-b8cf-426902051d0a}\set378f.tmp
%ProgramFiles(x86)%\installshield installation information\{5bc2b5ab-80de-4e83-b8cf-426902051d0a}\0x03800.tmp
%ProgramFiles(x86)%\installshield installation information\{5bc2b5ab-80de-4e83-b8cf-426902051d0a}\0x0394d.tmp
%ProgramFiles(x86)%\installshield installation information\{5bc2b5ab-80de-4e83-b8cf-426902051d0a}\0x0394e.tmp
%ProgramFiles(x86)%\installshield installation information\{5bc2b5ab-80de-4e83-b8cf-426902051d0a}\0x0395f.tmp
%ProgramFiles(x86)%\installshield installation information\{5bc2b5ab-80de-4e83-b8cf-426902051d0a}\0x0396f.tmp
%ProgramFiles(x86)%\installshield installation information\{5bc2b5ab-80de-4e83-b8cf-426902051d0a}\0x03970.tmp
%ProgramFiles(x86)%\installshield installation information\{5bc2b5ab-80de-4e83-b8cf-426902051d0a}\0x03981.tmp
%ProgramFiles(x86)%\installshield installation information\{5bc2b5ab-80de-4e83-b8cf-426902051d0a}\0x0392c.tmp
%ProgramFiles(x86)%\installshield installation information\{5bc2b5ab-80de-4e83-b8cf-426902051d0a}\0x0394c.tmp
%ProgramFiles(x86)%\installshield installation information\{5bc2b5ab-80de-4e83-b8cf-426902051d0a}\0x039a1.tmp
%ProgramFiles(x86)%\installshield installation information\{5bc2b5ab-80de-4e83-b8cf-426902051d0a}\0x039c3.tmp
%ProgramFiles(x86)%\installshield installation information\{5bc2b5ab-80de-4e83-b8cf-426902051d0a}\set39d4.tmp
%ProgramFiles(x86)%\installshield installation information\{5bc2b5ab-80de-4e83-b8cf-426902051d0a}\set3a13.tmp
%ProgramFiles(x86)%\installshield installation information\{5bc2b5ab-80de-4e83-b8cf-426902051d0a}\setup.ini
%TEMP%\{07f21301-a9b0-70fa-0a91-41343583ee5c}\set4dd1.tmp
%TEMP%\{07f21301-a9b0-70fa-0a91-41343583ee5c}\set4efb.tmp
%ProgramFiles(x86)%\installshield installation information\{5bc2b5ab-80de-4e83-b8cf-426902051d0a}\0x039b2.tmp
%ProgramFiles(x86)%\installshield installation information\{5bc2b5ab-80de-4e83-b8cf-426902051d0a}\0x039c2.tmp
%ProgramFiles(x86)%\installshield installation information\{5bc2b5ab-80de-4e83-b8cf-426902051d0a}\0x0392b.tmp
%ProgramFiles(x86)%\installshield installation information\{5bc2b5ab-80de-4e83-b8cf-426902051d0a}\0x0390a.tmp
%TEMP%\7zs4566e422\utility\revcon64.exe
%ProgramFiles(x86)%\installshield installation information\{5bc2b5ab-80de-4e83-b8cf-426902051d0a}\0x03801.tmp
%ProgramFiles(x86)%\installshield installation information\{5bc2b5ab-80de-4e83-b8cf-426902051d0a}\0x03821.tmp
%ProgramFiles(x86)%\installshield installation information\{5bc2b5ab-80de-4e83-b8cf-426902051d0a}\0x03822.tmp
%ProgramFiles(x86)%\installshield installation information\{5bc2b5ab-80de-4e83-b8cf-426902051d0a}\0x03823.tmp
%ProgramFiles(x86)%\installshield installation information\{5bc2b5ab-80de-4e83-b8cf-426902051d0a}\0x03834.tmp
%ProgramFiles(x86)%\installshield installation information\{5bc2b5ab-80de-4e83-b8cf-426902051d0a}\0x03835.tmp
%ProgramFiles(x86)%\installshield installation information\{5bc2b5ab-80de-4e83-b8cf-426902051d0a}\0x03846.tmp
%ProgramFiles(x86)%\installshield installation information\{5bc2b5ab-80de-4e83-b8cf-426902051d0a}\0x038b4.tmp
%ProgramFiles(x86)%\installshield installation information\{5bc2b5ab-80de-4e83-b8cf-426902051d0a}\0x038b5.tmp
%ProgramFiles(x86)%\installshield installation information\{5bc2b5ab-80de-4e83-b8cf-426902051d0a}\0x038c5.tmp
%ProgramFiles(x86)%\installshield installation information\{5bc2b5ab-80de-4e83-b8cf-426902051d0a}\0x038e6.tmp
%ProgramFiles(x86)%\installshield installation information\{5bc2b5ab-80de-4e83-b8cf-426902051d0a}\0x038e7.tmp
%ProgramFiles(x86)%\installshield installation information\{5bc2b5ab-80de-4e83-b8cf-426902051d0a}\0x038e8.tmp
%ProgramFiles(x86)%\installshield installation information\{5bc2b5ab-80de-4e83-b8cf-426902051d0a}\0x03908.tmp
%ProgramFiles(x86)%\installshield installation information\{5bc2b5ab-80de-4e83-b8cf-426902051d0a}\0x03909.tmp
%ProgramFiles(x86)%\installshield installation information\{5bc2b5ab-80de-4e83-b8cf-426902051d0a}\iss37bf.tmp
%ProgramFiles(x86)%\installshield installation information\{5bc2b5ab-80de-4e83-b8cf-426902051d0a}\0x037f0.tmp
%ProgramFiles(x86)%\installshield installation information\{5bc2b5ab-80de-4e83-b8cf-426902051d0a}\0x037df.tmp
%TEMP%\{800efdc0-3fce-4abf-8a2c-a5da3fdd5a7a}\0x0419.ini
%TEMP%\{800efdc0-3fce-4abf-8a2c-a5da3fdd5a7a}\0x0418.ini
%TEMP%\{800efdc0-3fce-4abf-8a2c-a5da3fdd5a7a}\0x0416.ini
%TEMP%\7zs4566e422\0x041e.ini
%TEMP%\7zs4566e422\0x041f.ini
%TEMP%\7zs4566e422\0x0421.ini
%TEMP%\7zs4566e422\0x0424.ini
%TEMP%\7zs4566e422\0x042d.ini
%TEMP%\7zs4566e422\0x041a.ini
%TEMP%\7zs4566e422\0x0804.ini
%TEMP%\7zs4566e422\0x041d.ini
%TEMP%\7zs4566e422\0x0c0c.ini
%TEMP%\7zs4566e422\apbin\config.ini
%TEMP%\7zs4566e422\data1.cab
%TEMP%\7zs4566e422\data1.hdr
%TEMP%\7zs4566e422\data2.cab
%TEMP%\7zs4566e422\drvbin32\rtsuer.inf
%TEMP%\7zs4566e422\0x0816.ini
%TEMP%\7zs4566e422\0x0419.ini
%TEMP%\7zs4566e422\0x0c1a.ini
%TEMP%\7zs4566e422\0x0418.ini
%TEMP%\7zs4566e422\0x0416.ini
%TEMP%\7zs4566e422\0x0403.ini
%TEMP%\7zs4566e422\0x0405.ini
%TEMP%\7zs4566e422\0x0406.ini
%TEMP%\7zs4566e422\0x0407.ini
%TEMP%\7zs4566e422\0x0408.ini
%TEMP%\7zs4566e422\0x0409.ini
%TEMP%\7zs4566e422\0x040a.ini
%TEMP%\7zs4566e422\0x040b.ini
%TEMP%\7zs4566e422\0x0404.ini
%TEMP%\7zs4566e422\0x040c.ini
%TEMP%\7zs4566e422\0x0410.ini
%TEMP%\7zs4566e422\0x0411.ini
%TEMP%\7zs4566e422\0x0412.ini
%TEMP%\7zs4566e422\0x0413.ini
%TEMP%\7zs4566e422\0x0414.ini
%TEMP%\7zs4566e422\0x0415.ini
%TEMP%\7zs4566e422\drvbin32\rtsuer32.cat
%TEMP%\7zs4566e422\0x040e.ini
%TEMP%\7zs4566e422\drvbin64\rtsuer.inf
%TEMP%\7zs4566e422\0x041b.ini
%TEMP%\7zs4566e422\drvbin64\rtsuer64.cat
%TEMP%\{800efdc0-3fce-4abf-8a2c-a5da3fdd5a7a}\0x0403.ini
%TEMP%\{800efdc0-3fce-4abf-8a2c-a5da3fdd5a7a}\0x0405.ini
%TEMP%\{800efdc0-3fce-4abf-8a2c-a5da3fdd5a7a}\0x0406.ini
%TEMP%\{800efdc0-3fce-4abf-8a2c-a5da3fdd5a7a}\0x0407.ini
%TEMP%\{800efdc0-3fce-4abf-8a2c-a5da3fdd5a7a}\0x0408.ini
%TEMP%\{800efdc0-3fce-4abf-8a2c-a5da3fdd5a7a}\0x0409.ini
%TEMP%\{800efdc0-3fce-4abf-8a2c-a5da3fdd5a7a}\0x040a.ini
%TEMP%\{800efdc0-3fce-4abf-8a2c-a5da3fdd5a7a}\0x040b.ini
%TEMP%\{800efdc0-3fce-4abf-8a2c-a5da3fdd5a7a}\0x040c.ini
%TEMP%\{800efdc0-3fce-4abf-8a2c-a5da3fdd5a7a}\0x040e.ini
%TEMP%\{800efdc0-3fce-4abf-8a2c-a5da3fdd5a7a}\0x0410.ini
%TEMP%\{800efdc0-3fce-4abf-8a2c-a5da3fdd5a7a}\0x0411.ini
%TEMP%\{800efdc0-3fce-4abf-8a2c-a5da3fdd5a7a}\0x0412.ini
%TEMP%\{800efdc0-3fce-4abf-8a2c-a5da3fdd5a7a}\0x0413.ini
%TEMP%\{800efdc0-3fce-4abf-8a2c-a5da3fdd5a7a}\0x0414.ini
%TEMP%\{800efdc0-3fce-4abf-8a2c-a5da3fdd5a7a}\0x0415.ini
%TEMP%\{800efdc0-3fce-4abf-8a2c-a5da3fdd5a7a}\0x0402.ini
%TEMP%\7zs4566e422\layout.bin
%TEMP%\{800efdc0-3fce-4abf-8a2c-a5da3fdd5a7a}\0x0404.ini
%ProgramFiles(x86)%\installshield installation information\{5bc2b5ab-80de-4e83-b8cf-426902051d0a}\0x0392a.tmp
%TEMP%\{07f21301-a9b0-70fa-0a91-41343583ee5c}\set5024.tmp
%TEMP%\7zs4566e422\utility\revcon32.exe
%TEMP%\7zs4566e422\readme.txt
%TEMP%\7zs4566e422\setup.ini
%TEMP%\7zs4566e422\setup.inx
%TEMP%\7zs4566e422\setup.iss
%TEMP%\7zs4566e422\silentinstall.bat
%TEMP%\7zs4566e422\u2setup.iss
%TEMP%\7zs4566e422\u3setup.iss
%TEMP%\7zs4566e422\pkgconf.ini
%TEMP%\7zs4566e422\utility\display.ico
%TEMP%\7zs4566e422\apbin\setehcikey.exe
%TEMP%\7zs4566e422\drvbin32\rscricon.dll
%TEMP%\7zs4566e422\drvbin32\rtsuer.sys
%TEMP%\7zs4566e422\drvbin64\rscricon.dll
%TEMP%\7zs4566e422\drvbin64\rtsuer.sys
%TEMP%\7zs4566e422\issetup.dll
%TEMP%\7zs4566e422\setup.exe
%TEMP%\7zs4566e422\apbin\rmb.exe
%TEMP%\{800efdc0-3fce-4abf-8a2c-a5da3fdd5a7a}\setup.ini
%TEMP%\{07f21301-a9b0-70fa-0a91-41343583ee5c}\set517c.tmp

Перемещает следующие файлы

%TEMP%\{e404f239-d02b-4e37-aae2-875e006e127b}\{5bc2b5ab-80de-4e83-b8cf-426902051d0a}\set1890.tmp в %TEMP%\{e404f239-d02b-4e37-aae2-875e006e127b}\{5bc2b5ab-80de-4e83-b8cf-426902051d0a}\setup.inx
%ProgramFiles(x86)%\installshield installation information\{5bc2b5ab-80de-4e83-b8cf-426902051d0a}\0x03834.tmp в %ProgramFiles(x86)%\installshield installation information\{5bc2b5ab-80de-4e83-b8cf-426902051d0a}\0x0413.ini
%ProgramFiles(x86)%\installshield installation information\{5bc2b5ab-80de-4e83-b8cf-426902051d0a}\0x03835.tmp в %ProgramFiles(x86)%\installshield installation information\{5bc2b5ab-80de-4e83-b8cf-426902051d0a}\0x0409.ini
%ProgramFiles(x86)%\installshield installation information\{5bc2b5ab-80de-4e83-b8cf-426902051d0a}\0x03846.tmp в %ProgramFiles(x86)%\installshield installation information\{5bc2b5ab-80de-4e83-b8cf-426902051d0a}\0x040b.ini
%ProgramFiles(x86)%\installshield installation information\{5bc2b5ab-80de-4e83-b8cf-426902051d0a}\0x038b4.tmp в %ProgramFiles(x86)%\installshield installation information\{5bc2b5ab-80de-4e83-b8cf-426902051d0a}\0x0c0c.ini
%ProgramFiles(x86)%\installshield installation information\{5bc2b5ab-80de-4e83-b8cf-426902051d0a}\0x038b5.tmp в %ProgramFiles(x86)%\installshield installation information\{5bc2b5ab-80de-4e83-b8cf-426902051d0a}\0x040c.ini
%ProgramFiles(x86)%\installshield installation information\{5bc2b5ab-80de-4e83-b8cf-426902051d0a}\0x038c5.tmp в %ProgramFiles(x86)%\installshield installation information\{5bc2b5ab-80de-4e83-b8cf-426902051d0a}\0x0407.ini
%ProgramFiles(x86)%\installshield installation information\{5bc2b5ab-80de-4e83-b8cf-426902051d0a}\0x038e6.tmp в %ProgramFiles(x86)%\installshield installation information\{5bc2b5ab-80de-4e83-b8cf-426902051d0a}\0x0408.ini
%ProgramFiles(x86)%\installshield installation information\{5bc2b5ab-80de-4e83-b8cf-426902051d0a}\0x038e7.tmp в %ProgramFiles(x86)%\installshield installation information\{5bc2b5ab-80de-4e83-b8cf-426902051d0a}\0x040e.ini
%ProgramFiles(x86)%\installshield installation information\{5bc2b5ab-80de-4e83-b8cf-426902051d0a}\0x038e8.tmp в %ProgramFiles(x86)%\installshield installation information\{5bc2b5ab-80de-4e83-b8cf-426902051d0a}\0x0421.ini
%ProgramFiles(x86)%\installshield installation information\{5bc2b5ab-80de-4e83-b8cf-426902051d0a}\0x03908.tmp в %ProgramFiles(x86)%\installshield installation information\{5bc2b5ab-80de-4e83-b8cf-426902051d0a}\0x0410.ini
%ProgramFiles(x86)%\installshield installation information\{5bc2b5ab-80de-4e83-b8cf-426902051d0a}\0x03909.tmp в %ProgramFiles(x86)%\installshield installation information\{5bc2b5ab-80de-4e83-b8cf-426902051d0a}\0x0411.ini
%ProgramFiles(x86)%\installshield installation information\{5bc2b5ab-80de-4e83-b8cf-426902051d0a}\0x0390a.tmp в %ProgramFiles(x86)%\installshield installation information\{5bc2b5ab-80de-4e83-b8cf-426902051d0a}\0x0412.ini
%ProgramFiles(x86)%\installshield installation information\{5bc2b5ab-80de-4e83-b8cf-426902051d0a}\0x0392a.tmp в %ProgramFiles(x86)%\installshield installation information\{5bc2b5ab-80de-4e83-b8cf-426902051d0a}\0x0414.ini
%ProgramFiles(x86)%\installshield installation information\{5bc2b5ab-80de-4e83-b8cf-426902051d0a}\0x0392b.tmp в %ProgramFiles(x86)%\installshield installation information\{5bc2b5ab-80de-4e83-b8cf-426902051d0a}\0x0415.ini
%ProgramFiles(x86)%\installshield installation information\{5bc2b5ab-80de-4e83-b8cf-426902051d0a}\0x0394c.tmp в %ProgramFiles(x86)%\installshield installation information\{5bc2b5ab-80de-4e83-b8cf-426902051d0a}\0x0816.ini
%TEMP%\{07f21301-a9b0-70fa-0a91-41343583ee5c}\set5024.tmp в %TEMP%\{07f21301-a9b0-70fa-0a91-41343583ee5c}\rtsuer64.cat
%ProgramFiles(x86)%\installshield installation information\{5bc2b5ab-80de-4e83-b8cf-426902051d0a}\0x0394d.tmp в %ProgramFiles(x86)%\installshield installation information\{5bc2b5ab-80de-4e83-b8cf-426902051d0a}\0x0418.ini
%ProgramFiles(x86)%\installshield installation information\{5bc2b5ab-80de-4e83-b8cf-426902051d0a}\0x0394e.tmp в %ProgramFiles(x86)%\installshield installation information\{5bc2b5ab-80de-4e83-b8cf-426902051d0a}\0x0419.ini
%ProgramFiles(x86)%\installshield installation information\{5bc2b5ab-80de-4e83-b8cf-426902051d0a}\0x0395f.tmp в %ProgramFiles(x86)%\installshield installation information\{5bc2b5ab-80de-4e83-b8cf-426902051d0a}\0x0c1a.ini
%ProgramFiles(x86)%\installshield installation information\{5bc2b5ab-80de-4e83-b8cf-426902051d0a}\0x0396f.tmp в %ProgramFiles(x86)%\installshield installation information\{5bc2b5ab-80de-4e83-b8cf-426902051d0a}\0x041b.ini
%ProgramFiles(x86)%\installshield installation information\{5bc2b5ab-80de-4e83-b8cf-426902051d0a}\0x03970.tmp в %ProgramFiles(x86)%\installshield installation information\{5bc2b5ab-80de-4e83-b8cf-426902051d0a}\0x0424.ini
%ProgramFiles(x86)%\installshield installation information\{5bc2b5ab-80de-4e83-b8cf-426902051d0a}\0x03981.tmp в %ProgramFiles(x86)%\installshield installation information\{5bc2b5ab-80de-4e83-b8cf-426902051d0a}\0x040a.ini
%ProgramFiles(x86)%\installshield installation information\{5bc2b5ab-80de-4e83-b8cf-426902051d0a}\0x039a1.tmp в %ProgramFiles(x86)%\installshield installation information\{5bc2b5ab-80de-4e83-b8cf-426902051d0a}\0x041d.ini
%ProgramFiles(x86)%\installshield installation information\{5bc2b5ab-80de-4e83-b8cf-426902051d0a}\0x039b2.tmp в %ProgramFiles(x86)%\installshield installation information\{5bc2b5ab-80de-4e83-b8cf-426902051d0a}\0x041e.ini
%ProgramFiles(x86)%\installshield installation information\{5bc2b5ab-80de-4e83-b8cf-426902051d0a}\0x039c2.tmp в %ProgramFiles(x86)%\installshield installation information\{5bc2b5ab-80de-4e83-b8cf-426902051d0a}\0x041f.ini
%ProgramFiles(x86)%\installshield installation information\{5bc2b5ab-80de-4e83-b8cf-426902051d0a}\0x039c3.tmp в %ProgramFiles(x86)%\installshield installation information\{5bc2b5ab-80de-4e83-b8cf-426902051d0a}\0x042d.ini
%ProgramFiles(x86)%\installshield installation information\{5bc2b5ab-80de-4e83-b8cf-426902051d0a}\set39d4.tmp в %ProgramFiles(x86)%\installshield installation information\{5bc2b5ab-80de-4e83-b8cf-426902051d0a}\setup.inx
%ProgramFiles(x86)%\installshield installation information\{5bc2b5ab-80de-4e83-b8cf-426902051d0a}\set3a13.tmp в %ProgramFiles(x86)%\installshield installation information\{5bc2b5ab-80de-4e83-b8cf-426902051d0a}\setup.ini
%TEMP%\{07f21301-a9b0-70fa-0a91-41343583ee5c}\set4dd1.tmp в %TEMP%\{07f21301-a9b0-70fa-0a91-41343583ee5c}\rtsuer.inf
%TEMP%\{07f21301-a9b0-70fa-0a91-41343583ee5c}\set4efb.tmp в %TEMP%\{07f21301-a9b0-70fa-0a91-41343583ee5c}\rtsuer.sys
%ProgramFiles(x86)%\installshield installation information\{5bc2b5ab-80de-4e83-b8cf-426902051d0a}\0x03823.tmp в %ProgramFiles(x86)%\installshield installation information\{5bc2b5ab-80de-4e83-b8cf-426902051d0a}\0x0406.ini
%ProgramFiles(x86)%\installshield installation information\{5bc2b5ab-80de-4e83-b8cf-426902051d0a}\0x0392c.tmp в %ProgramFiles(x86)%\installshield installation information\{5bc2b5ab-80de-4e83-b8cf-426902051d0a}\0x0416.ini
%ProgramFiles(x86)%\installshield installation information\{5bc2b5ab-80de-4e83-b8cf-426902051d0a}\0x03822.tmp в %ProgramFiles(x86)%\installshield installation information\{5bc2b5ab-80de-4e83-b8cf-426902051d0a}\0x0405.ini
%ProgramFiles(x86)%\realtek\realtek card reader\rts3478.tmp в %ProgramFiles(x86)%\realtek\realtek card reader\rtsuer.inf
%TEMP%\{e404f239-d02b-4e37-aae2-875e006e127b}\{5bc2b5ab-80de-4e83-b8cf-426902051d0a}\pkg18a0.tmp в %TEMP%\{e404f239-d02b-4e37-aae2-875e006e127b}\{5bc2b5ab-80de-4e83-b8cf-426902051d0a}\pkgutility.dll
%TEMP%\{e404f239-d02b-4e37-aae2-875e006e127b}\{5bc2b5ab-80de-4e83-b8cf-426902051d0a}\fon18b1.tmp в %TEMP%\{e404f239-d02b-4e37-aae2-875e006e127b}\{5bc2b5ab-80de-4e83-b8cf-426902051d0a}\fontdata.ini
%TEMP%\{e404f239-d02b-4e37-aae2-875e006e127b}\{5bc2b5ab-80de-4e83-b8cf-426902051d0a}\dif18b2.tmp в %TEMP%\{e404f239-d02b-4e37-aae2-875e006e127b}\{5bc2b5ab-80de-4e83-b8cf-426902051d0a}\difxdata.ini
%TEMP%\{e404f239-d02b-4e37-aae2-875e006e127b}\cor18b3.tmp в %TEMP%\{e404f239-d02b-4e37-aae2-875e006e127b}\corecomp.ini
%TEMP%\{e404f239-d02b-4e37-aae2-875e006e127b}\dot18c4.tmp в %TEMP%\{e404f239-d02b-4e37-aae2-875e006e127b}\dotnetinstaller.exe
%TEMP%\{e404f239-d02b-4e37-aae2-875e006e127b}\isb18c5.tmp в %TEMP%\{e404f239-d02b-4e37-aae2-875e006e127b}\isbew64.exe
%TEMP%\{e404f239-d02b-4e37-aae2-875e006e127b}\{5bc2b5ab-80de-4e83-b8cf-426902051d0a}\str18d5.tmp в %TEMP%\{e404f239-d02b-4e37-aae2-875e006e127b}\{5bc2b5ab-80de-4e83-b8cf-426902051d0a}\stringtable_0x0409.ips
%TEMP%\{e404f239-d02b-4e37-aae2-875e006e127b}\{5bc2b5ab-80de-4e83-b8cf-426902051d0a}\isr18e6.tmp в %TEMP%\{e404f239-d02b-4e37-aae2-875e006e127b}\{5bc2b5ab-80de-4e83-b8cf-426902051d0a}\isrt.dll
%TEMP%\{e404f239-d02b-4e37-aae2-875e006e127b}\{5bc2b5ab-80de-4e83-b8cf-426902051d0a}\def18f6.tmp в %TEMP%\{e404f239-d02b-4e37-aae2-875e006e127b}\{5bc2b5ab-80de-4e83-b8cf-426902051d0a}\default.pal
%TEMP%\{e404f239-d02b-4e37-aae2-875e006e127b}\{5bc2b5ab-80de-4e83-b8cf-426902051d0a}\_is1907.tmp в %TEMP%\{e404f239-d02b-4e37-aae2-875e006e127b}\{5bc2b5ab-80de-4e83-b8cf-426902051d0a}\_isres_0x0409.dll
%ProgramFiles(x86)%\realtek\realtek card reader\con32cf.tmp в %ProgramFiles(x86)%\realtek\realtek card reader\config.ini
%ProgramFiles(x86)%\realtek\realtek card reader\rmb32df.tmp в %ProgramFiles(x86)%\realtek\realtek card reader\rmb.exe
%ProgramFiles(x86)%\realtek\realtek card reader\set32f0.tmp в %ProgramFiles(x86)%\realtek\realtek card reader\setehcikey.exe
%ProgramFiles(x86)%\realtek\realtek card reader\rsc3301.tmp в %ProgramFiles(x86)%\realtek\realtek card reader\rscricon.dll
%ProgramFiles(x86)%\realtek\realtek card reader\rts3489.tmp в %ProgramFiles(x86)%\realtek\realtek card reader\rtsuer.sys
%ProgramFiles(x86)%\installshield installation information\{5bc2b5ab-80de-4e83-b8cf-426902051d0a}\0x03801.tmp в %ProgramFiles(x86)%\installshield installation information\{5bc2b5ab-80de-4e83-b8cf-426902051d0a}\0x0404.ini
%ProgramFiles(x86)%\realtek\realtek card reader\rts34a9.tmp в %ProgramFiles(x86)%\realtek\realtek card reader\rtsuer64.cat
<DRIVERS>\rts34b9.tmp в <DRIVERS>\rtsuer.sys
%ProgramFiles(x86)%\realtek\realtek card reader\dis34ca.tmp в %ProgramFiles(x86)%\realtek\realtek card reader\display.ico
%ProgramFiles(x86)%\realtek\realtek card reader\rev34db.tmp в %ProgramFiles(x86)%\realtek\realtek card reader\revcon32.exe
%ProgramFiles(x86)%\realtek\realtek card reader\rev34eb.tmp в %ProgramFiles(x86)%\realtek\realtek card reader\revcon64.exe
%ProgramFiles(x86)%\installshield installation information\{5bc2b5ab-80de-4e83-b8cf-426902051d0a}\pkg350b.tmp в %ProgramFiles(x86)%\installshield installation information\{5bc2b5ab-80de-4e83-b8cf-426902051d0a}\pkgconf.ini
%ProgramFiles(x86)%\installshield installation information\{5bc2b5ab-80de-4e83-b8cf-426902051d0a}\lay3673.tmp в %ProgramFiles(x86)%\installshield installation information\{5bc2b5ab-80de-4e83-b8cf-426902051d0a}\layout.bin
%ProgramFiles(x86)%\installshield installation information\{5bc2b5ab-80de-4e83-b8cf-426902051d0a}\dat3674.tmp в %ProgramFiles(x86)%\installshield installation information\{5bc2b5ab-80de-4e83-b8cf-426902051d0a}\data1.hdr
%ProgramFiles(x86)%\installshield installation information\{5bc2b5ab-80de-4e83-b8cf-426902051d0a}\dat3685.tmp в %ProgramFiles(x86)%\installshield installation information\{5bc2b5ab-80de-4e83-b8cf-426902051d0a}\data1.cab
%ProgramFiles(x86)%\installshield installation information\{5bc2b5ab-80de-4e83-b8cf-426902051d0a}\set378f.tmp в %ProgramFiles(x86)%\installshield installation information\{5bc2b5ab-80de-4e83-b8cf-426902051d0a}\setup.exe
%ProgramFiles(x86)%\installshield installation information\{5bc2b5ab-80de-4e83-b8cf-426902051d0a}\iss37bf.tmp в %ProgramFiles(x86)%\installshield installation information\{5bc2b5ab-80de-4e83-b8cf-426902051d0a}\issetup.dll
%ProgramFiles(x86)%\installshield installation information\{5bc2b5ab-80de-4e83-b8cf-426902051d0a}\0x037df.tmp в %ProgramFiles(x86)%\installshield installation information\{5bc2b5ab-80de-4e83-b8cf-426902051d0a}\0x0402.ini
%ProgramFiles(x86)%\installshield installation information\{5bc2b5ab-80de-4e83-b8cf-426902051d0a}\0x037f0.tmp в %ProgramFiles(x86)%\installshield installation information\{5bc2b5ab-80de-4e83-b8cf-426902051d0a}\0x0403.ini
%ProgramFiles(x86)%\installshield installation information\{5bc2b5ab-80de-4e83-b8cf-426902051d0a}\0x03800.tmp в %ProgramFiles(x86)%\installshield installation information\{5bc2b5ab-80de-4e83-b8cf-426902051d0a}\0x0804.ini
%ProgramFiles(x86)%\installshield installation information\{5bc2b5ab-80de-4e83-b8cf-426902051d0a}\0x03821.tmp в %ProgramFiles(x86)%\installshield installation information\{5bc2b5ab-80de-4e83-b8cf-426902051d0a}\0x041a.ini
%TEMP%\{07f21301-a9b0-70fa-0a91-41343583ee5c}\set517c.tmp в %TEMP%\{07f21301-a9b0-70fa-0a91-41343583ee5c}\rscricon.dll

Другое

Создает и запускает на исполнение

'%TEMP%\7zs4566e422\setup.exe'
'%TEMP%\{e404f239-d02b-4e37-aae2-875e006e127b}\isbew64.exe' {EFB7539B-24F3-46B6-AF6E-3B021B51EFEF}:{468BA47A-E01E-4143-831B-4D01F071C9AB}
'%TEMP%\{e404f239-d02b-4e37-aae2-875e006e127b}\isbew64.exe' {EFB7539B-24F3-46B6-AF6E-3B021B51EFEF}:{6BD11C5C-610B-4ABF-B92F-8AC8A16158E3}
'%TEMP%\{e404f239-d02b-4e37-aae2-875e006e127b}\isbew64.exe' {EFB7539B-24F3-46B6-AF6E-3B021B51EFEF}:{C980E988-F491-4231-BA1A-44A4809C2D59}
'%TEMP%\{e404f239-d02b-4e37-aae2-875e006e127b}\isbew64.exe' {EFB7539B-24F3-46B6-AF6E-3B021B51EFEF}:{DAACC6CB-8A94-4C8E-8D4A-AE205FE94915}
'%TEMP%\{e404f239-d02b-4e37-aae2-875e006e127b}\isbew64.exe' {EFB7539B-24F3-46B6-AF6E-3B021B51EFEF}:{6ED8F3B7-4EC3-48D5-A5B0-2B2F0CE81465}
'%TEMP%\{e404f239-d02b-4e37-aae2-875e006e127b}\isbew64.exe' {EFB7539B-24F3-46B6-AF6E-3B021B51EFEF}:{6FD4F97D-DFF3-42B8-B715-3433F8B84807}
'%ProgramFiles(x86)%\realtek\realtek card reader\revcon64.exe' dp_add RtsUer.inf
'%WINDIR%\syswow64\rundll32.exe' "%TEMP%\{E404F239-D02B-4E37-AAE2-875E006E127B}\{5BC2B5AB-80DE-4E83-B8CF-426902051D0A}\PkgUtility.dll" GetOSVersion' (со скрытым окном)
'%ProgramFiles(x86)%\realtek\realtek card reader\revcon64.exe' dp_add RtsUer.inf' (со скрытым окном)

Запускает на исполнение

'%WINDIR%\syswow64\rundll32.exe' "%TEMP%\{E404F239-D02B-4E37-AAE2-875E006E127B}\{5BC2B5AB-80DE-4E83-B8CF-426902051D0A}\PkgUtility.dll" GetOSVersion
'<SYSTEM32>\rundll32.exe' <SYSTEM32>\pnpui.dll,InstallSecurityPromptRunDllW 10 Global\{32549e30-c6ed-7420-d5f8-2d5c957ed452} Global\{3280326c-80bd-04c4-90be-4b1749007508} <DRIVERSTORE>\Temp\{4a3c2292-30e0-65ea-9318-ca69...

Технологии

Термины

Обучение и просвещение

Мифы

Техническая информация

Рекомендации по лечению

Демо бесплатно на 14 дней