Trojan.KillFiles.11671

Техническая информация

Для обеспечения автозапуска и распространения:

Модифицирует следующие ключи реестра:

[<HKLM>\SOFTWARE\Classes\MSProgramGroup\Shell\Open\Command] '' = '<SYSTEM32>\grpconv.exe %1'
[<HKLM>\SOFTWARE\Microsoft\Windows\CurrentVersion\RunOnce] 'GrpConv' = 'grpconv -o'

Вредоносные функции:

Создает и запускает на исполнение:

'%TEMP%\RarSFX0\CUR3.EXE'
'%TEMP%\RarSFX0\CUR4.EXE'
'%TEMP%\RarSFX1\Cursors.exe'
'%TEMP%\RarSFX0\CUR1.EXE'
'%TEMP%\RarSFX1\www.exe'
'%TEMP%\RarSFX0\CUR2.EXE'

Запускает на исполнение:

'<SYSTEM32>\cmd.exe' /c ""%WINDIR%\Cursors\YingYang.cmd" "
'<SYSTEM32>\grpconv.exe' -o
'<SYSTEM32>\cmd.exe' /c ""%TEMP%\RarSFX1\wainakh.cmd" "
'%WINDIR%\regedit.exe' /S YingYang.reg
'%WINDIR%\regedit.exe' /S Cursors.reg
'<SYSTEM32>\cmd.exe' /c ""%TEMP%\RarSFX1\run.cmd" "
'<SYSTEM32>\runonce.exe' -r
'<SYSTEM32>\rundll32.exe' setupapi.dll,InstallHinfSection DefaultInstall 128 %TEMP%\IXP000.TMP\Setup.inf

Изменения в файловой системе:

Создает следующие файлы:

%WINDIR%\Cursors\aero2_arrow.cur
%WINDIR%\Cursors\aero2_beam.cur
%WINDIR%\Cursors\aero2_cross.cur
%WINDIR%\Cursors\aero2G_working.ani
%WINDIR%\Cursors\aero2O_busy.ani
%WINDIR%\Cursors\aero2O_working.ani
%WINDIR%\Cursors\aero2_help.cur
%WINDIR%\Cursors\aero2_pen.cur
%WINDIR%\Cursors\aero2_size1.cur
%WINDIR%\Cursors\aero2_size2.cur
%WINDIR%\Cursors\aero2_link.cur
%WINDIR%\Cursors\aero2_move.cur
%WINDIR%\Cursors\aero2_no.cur
%WINDIR%\Cursors\aero2G_busy.ani
%WINDIR%\Cursors\YingYang\YingYang_size3.cur
%WINDIR%\Cursors\YingYang\YingYang_size4.cur
%WINDIR%\Cursors\YingYang\YingYang_up.cur
%WINDIR%\Cursors\YingYang\YingYang_pen.cur
%WINDIR%\Cursors\YingYang\YingYang_size1.cur
%WINDIR%\Cursors\YingYang\YingYang_size2.cur
%WINDIR%\Cursors\YingYang\YingYang_working.ani
%TEMP%\RarSFX1\wainakh.cmd
%WINDIR%\Cursors\aero2F_busy.ani
%WINDIR%\Cursors\aero2F_working.ani
%WINDIR%\Cursors\YingYang.reg
%WINDIR%\Cursors\YingYang.cmd
%TEMP%\RarSFX1\Cursors.exe
%WINDIR%\Cursors\aero2_size3.cur
%WINDIR%\Cursors\aero_no_x.cur
%WINDIR%\Cursors\aero_no_xl.cur
%WINDIR%\Cursors\aero_pen_x.cur
%WINDIR%\Cursors\aero_link_xl.cur
%WINDIR%\Cursors\aero_move_x.cur
%WINDIR%\Cursors\aero_move_xl.cur
%WINDIR%\Cursors\aero_pen_xl.cur
%WINDIR%\Cursors\aero_size2_xl.cur
%WINDIR%\Cursors\aero_size3_x.cur
%WINDIR%\Cursors\aero_size3_xl.cur
%WINDIR%\Cursors\aero_size1_x.cur
%WINDIR%\Cursors\aero_size1_xl.cur
%WINDIR%\Cursors\aero_size2_x.cur
%WINDIR%\Cursors\aero_link_x.cur
%WINDIR%\Cursors\aero_arrow_xl.cur
%WINDIR%\Cursors\aero_beam_x.cur
%WINDIR%\Cursors\aero_beam_xl.cur
%WINDIR%\Cursors\aero2_size4.cur
%WINDIR%\Cursors\aero2_up.cur
%WINDIR%\Cursors\aero_arrow_x.cur
%WINDIR%\Cursors\aero_busy.ani
%WINDIR%\Cursors\aero_cross_xl.cur
%WINDIR%\Cursors\aero_help_x.cur
%WINDIR%\Cursors\aero_help_xl.cur
%WINDIR%\Cursors\aero_busy_x.ani
%WINDIR%\Cursors\aero_busy_xl.ani
%WINDIR%\Cursors\aero_cross_x.cur
%TEMP%\IXP000.TMP\Setup.inf
%TEMP%\IXP000.TMP\SizeAll_S.cur
%TEMP%\IXP000.TMP\SizeAll_W.cur
%TEMP%\IXP000.TMP\IBeam.cur
%TEMP%\IXP000.TMP\NO_S.cur
%TEMP%\IXP000.TMP\NO_W.cur
%TEMP%\IXP000.TMP\SizeNESW.cur
%TEMP%\IXP000.TMP\UpArrow.cur
%TEMP%\IXP000.TMP\Wait_S.ani
%TEMP%\IXP000.TMP\Wait_W.ani
%TEMP%\IXP000.TMP\SizeNS.cur
%TEMP%\IXP000.TMP\SizeNWSE.cur
%TEMP%\IXP000.TMP\SizeWE.cur
%TEMP%\IXP000.TMP\Help_W.cur
%WINDIR%\Cursors\Vista_size4.cur
%WINDIR%\Cursors\Vista_up.cur
%WINDIR%\Cursors\Vista_wait.ani
%WINDIR%\Cursors\Vista_size1.cur
%WINDIR%\Cursors\Vista_size2.cur
%WINDIR%\Cursors\Vista_size3.cur
%TEMP%\IXP000.TMP\AppStarting_S.ani
%TEMP%\IXP000.TMP\Hand.cur
%TEMP%\IXP000.TMP\Handwriting.cur
%TEMP%\IXP000.TMP\Help_S.cur
%TEMP%\IXP000.TMP\AppStarting_W.ani
%TEMP%\IXP000.TMP\Arrow.cur
%TEMP%\IXP000.TMP\Cross.cur
%WINDIR%\Cursors\VistaPlastic\SET3.tmp
%WINDIR%\Cursors\VistaPlastic\SET15.tmp
%WINDIR%\Cursors\VistaPlastic\SET16.tmp
%WINDIR%\Cursors\YingYang\YingYang_arrow.cur
%WINDIR%\Cursors\VistaPlastic\SET12.tmp
%WINDIR%\Cursors\VistaPlastic\SET13.tmp
%WINDIR%\Cursors\VistaPlastic\SET14.tmp
%WINDIR%\Cursors\YingYang\YingYang_beam.cur
%WINDIR%\Cursors\YingYang\YingYang_link.cur
%WINDIR%\Cursors\YingYang\YingYang_move.cur
%WINDIR%\Cursors\YingYang\YingYang_no.cur
%WINDIR%\Cursors\YingYang\YingYang_busy.ani
%WINDIR%\Cursors\YingYang\YingYang_cross.cur
%WINDIR%\Cursors\YingYang\YingYang_help.cur
%WINDIR%\Cursors\VistaPlastic\SET11.tmp
%WINDIR%\Cursors\VistaPlastic\SET7.tmp
%WINDIR%\Cursors\VistaPlastic\SET8.tmp
%WINDIR%\Cursors\VistaPlastic\SET9.tmp
%WINDIR%\Cursors\VistaPlastic\SET4.tmp
%WINDIR%\Cursors\VistaPlastic\SET5.tmp
%WINDIR%\Cursors\VistaPlastic\SET6.tmp
%WINDIR%\Cursors\VistaPlastic\SETA.tmp
%WINDIR%\Cursors\VistaPlastic\SETE.tmp
%WINDIR%\Cursors\VistaPlastic\SETF.tmp
%WINDIR%\Cursors\VistaPlastic\SET10.tmp
%WINDIR%\Cursors\VistaPlastic\SETB.tmp
%WINDIR%\Cursors\VistaPlastic\SETC.tmp
%WINDIR%\Cursors\VistaPlastic\SETD.tmp
%WINDIR%\Cursors\mac_no.cur
%WINDIR%\Cursors\mac_pen.cur
%WINDIR%\Cursors\mac_size1.cur
%WINDIR%\Cursors\mac_cross.cur
%WINDIR%\Cursors\mac_help.cur
%WINDIR%\Cursors\mac_move.cur
%WINDIR%\Cursors\mac_size2.cur
%WINDIR%\Cursors\mac_working.ani
%WINDIR%\Cursors\Mario Gant\Alternate Select.cur
%WINDIR%\Cursors\Mario Gant\Busy.ani
%WINDIR%\Cursors\mac_size3.cur
%WINDIR%\Cursors\mac_size4.cur
%WINDIR%\Cursors\mac_up.cur
%WINDIR%\Cursors\mac_busy.ani
%WINDIR%\Cursors\Grounation\Grounation_size_we.cur
%WINDIR%\Cursors\Grounation\Grounation_up.cur
%WINDIR%\Cursors\holidey_arrow.cur
%WINDIR%\Cursors\Grounation\Grounation_size_nesw.cur
%WINDIR%\Cursors\Grounation\Grounation_size_ns.cur
%WINDIR%\Cursors\Grounation\Grounation_size_nwse.cur
%WINDIR%\Cursors\holidey_busy.cur
%WINDIR%\Cursors\holidey_working.cur
%WINDIR%\Cursors\mac_arrow.cur
%WINDIR%\Cursors\mac_beam.cur
%WINDIR%\Cursors\holidey_help.cur
%WINDIR%\Cursors\holidey_no.cur
%WINDIR%\Cursors\holidey_pen.cur
%WINDIR%\Cursors\Mario Gant\Diagonal Resize 1.cur
%WINDIR%\Cursors\Silver Cursors\Help.cur
%WINDIR%\Cursors\Silver Cursors\IBeam.cur
%WINDIR%\Cursors\Silver Cursors\NO.cur
%WINDIR%\Cursors\Silver Cursors\Arrow.cur
%WINDIR%\Cursors\Silver Cursors\Cross.cur
%WINDIR%\Cursors\Silver Cursors\hand.cur
%WINDIR%\Cursors\Silver Cursors\pen.cur
%WINDIR%\Cursors\Silver Cursors\Size4.cur
%WINDIR%\Cursors\Silver Cursors\SizeAll.cur
%WINDIR%\Cursors\Silver Cursors\Wait.cur
%WINDIR%\Cursors\Silver Cursors\Size1.cur
%WINDIR%\Cursors\Silver Cursors\Size2.cur
%WINDIR%\Cursors\Silver Cursors\Size3.cur
%WINDIR%\Cursors\Silver Cursors\App.cur
%WINDIR%\Cursors\Mario Gant\Horizontal Resize.cur
%WINDIR%\Cursors\Mario Gant\Link Select.cur
%WINDIR%\Cursors\Mario Gant\Move.cur
%WINDIR%\Cursors\Mario Gant\Diagonal Resize 2.cur
%WINDIR%\Cursors\Mario Gant\Handwriting.cur
%WINDIR%\Cursors\Mario Gant\Help Select.cur
%WINDIR%\Cursors\Mario Gant\Normal Select.cur
%WINDIR%\Cursors\Mario Gant\Vertical Resize.cur
%WINDIR%\Cursors\Mario Gant\Working In Background.ani
%WINDIR%\Cursors\Silver Cursors\al.cur
%WINDIR%\Cursors\Mario Gant\Precision Select.cur
%WINDIR%\Cursors\Mario Gant\Text Select.cur
%WINDIR%\Cursors\Mario Gant\Unavailable.cur
%WINDIR%\Cursors\Beeline_size2.cur
%WINDIR%\Cursors\Beeline_size3.cur
%WINDIR%\Cursors\Beeline_size4.cur
%WINDIR%\Cursors\Beeline_no.cur
%WINDIR%\Cursors\Beeline_pen.cur
%WINDIR%\Cursors\Beeline_size1.cur
%WINDIR%\Cursors\Beeline_up.cur
%WINDIR%\Cursors\Green_arrow.cur
%WINDIR%\Cursors\Green_beam.cur
%WINDIR%\Cursors\Green_busy.cur
%WINDIR%\Cursors\Beeline_working.ani
%WINDIR%\Cursors\Black_working.ani
%WINDIR%\Cursors\Blue_working.ani
%WINDIR%\Cursors\Beeline_move.cur
%WINDIR%\Cursors\aero_up_xl.cur
%WINDIR%\Cursors\aero_working.ani
%WINDIR%\Cursors\aero_working_x.ani
%WINDIR%\Cursors\aero_size4_x.cur
%WINDIR%\Cursors\aero_size4_xl.cur
%WINDIR%\Cursors\aero_up_x.cur
%WINDIR%\Cursors\aero_working_xl.ani
%WINDIR%\Cursors\Beeline_cross.cur
%WINDIR%\Cursors\Beeline_help.cur
%WINDIR%\Cursors\Beeline_link.cur
%WINDIR%\Cursors\Beeline_arrow.cur
%WINDIR%\Cursors\Beeline_beam.cur
%WINDIR%\Cursors\Beeline_busy.ani
%WINDIR%\Cursors\Green_cross.cur
%WINDIR%\Cursors\Grounation\Grounation_hand_lefthanded.cur
%WINDIR%\Cursors\Grounation\Grounation_help.cur
%WINDIR%\Cursors\Grounation\Grounation_help_lefthanded.cur
%WINDIR%\Cursors\Grounation\Grounation_busy.ani
%WINDIR%\Cursors\Grounation\Grounation_cross.cur
%WINDIR%\Cursors\Grounation\Grounation_hand.cur
%WINDIR%\Cursors\Grounation\Grounation_move.cur
%WINDIR%\Cursors\Grounation\Grounation_no_lefthanded.cur
%WINDIR%\Cursors\Grounation\Grounation_pen.cur
%WINDIR%\Cursors\Grounation\Grounation_pen_lefthanded.cur
%WINDIR%\Cursors\Grounation\Grounation_no.cur
%WINDIR%\Cursors\Grounation\Grounation_normal.cur
%WINDIR%\Cursors\Grounation\Grounation_normal_lefthanded.cur
%WINDIR%\Cursors\Grounation\Grounation_beam.cur
%WINDIR%\Cursors\Green_no.cur
%WINDIR%\Cursors\Green_pen.cur
%WINDIR%\Cursors\Green_size1.cur
%WINDIR%\Cursors\Green_help.cur
%WINDIR%\Cursors\Green_link.cur
%WINDIR%\Cursors\Green_move.cur
%WINDIR%\Cursors\Green_size2.cur
%WINDIR%\Cursors\Green_working.cur
%WINDIR%\Cursors\Grounation\Grounation_appstart.ani
%WINDIR%\Cursors\Grounation\Grounation_appstart_lefthanded.ani
%WINDIR%\Cursors\Green_size3.cur
%WINDIR%\Cursors\Green_size4.cur
%WINDIR%\Cursors\Green_up.cur
%WINDIR%\Cursors\Blue_arrow.cur
%WINDIR%\Cursors\Blue_beam.cur
%WINDIR%\Cursors\Blue_busy.ani
%WINDIR%\Cursors\Black_size4.cur
%WINDIR%\Cursors\Black_up.cur
%WINDIR%\Cursors\Black_wait.ani
%WINDIR%\Cursors\Blue_cross.cur
%WINDIR%\Cursors\Blue_no.cur
%WINDIR%\Cursors\Blue_pen.cur
%WINDIR%\Cursors\Blue_size1.cur
%WINDIR%\Cursors\Blue_help.cur
%WINDIR%\Cursors\Blue_link.cur
%WINDIR%\Cursors\Blue_move.cur
%WINDIR%\Cursors\Black_size3.cur
%WINDIR%\Cursors\Black_beam.cur
%WINDIR%\Cursors\Black_busy.ani
%WINDIR%\Cursors\Black_cross.cur
%WINDIR%\Cursors\AeroLight_wait_red.ani
%WINDIR%\Cursors\AeroLight_wait_turquoise.ani
%WINDIR%\Cursors\Black_arrow.cur
%WINDIR%\Cursors\Black_help.cur
%WINDIR%\Cursors\Black_pen.cur
%WINDIR%\Cursors\Black_size1.cur
%WINDIR%\Cursors\Black_size2.cur
%WINDIR%\Cursors\Black_link.cur
%WINDIR%\Cursors\Black_move.cur
%WINDIR%\Cursors\Black_no.cur
%WINDIR%\Cursors\Blue_size2.cur
%WINDIR%\Cursors\Ghost_up.cur
%WINDIR%\Cursors\Ghost_wait.ani
%WINDIR%\Cursors\Grounation_arrow.cur
%WINDIR%\Cursors\Ghost_size2.ani
%WINDIR%\Cursors\Ghost_size3.ani
%WINDIR%\Cursors\Ghost_size4.ani
%WINDIR%\Cursors\Grounation_beam.cur
%WINDIR%\Cursors\Grounation_link.cur
%WINDIR%\Cursors\Grounation_move.cur
%WINDIR%\Cursors\Grounation_no.cur
%WINDIR%\Cursors\Grounation_busy.ani
%WINDIR%\Cursors\Grounation_cross.cur
%WINDIR%\Cursors\Grounation_help.cur
%WINDIR%\Cursors\Ghost_size1.ani
%WINDIR%\Cursors\Blue_wait.ani
%WINDIR%\Cursors\Ghost_arrow.cur
%WINDIR%\Cursors\Ghost_beam.ani
%WINDIR%\Cursors\Blue_size3.cur
%WINDIR%\Cursors\Blue_size4.cur
%WINDIR%\Cursors\Blue_up.cur
%WINDIR%\Cursors\Ghost_busy.ani
%WINDIR%\Cursors\Ghost_move.cur
%WINDIR%\Cursors\Ghost_no.ani
%WINDIR%\Cursors\Ghost_pen.cur
%WINDIR%\Cursors\Ghost_cross.ani
%WINDIR%\Cursors\Ghost_help.ani
%WINDIR%\Cursors\Ghost_link.ani
%WINDIR%\Cursors\Aero_cross.cur
%WINDIR%\Cursors\Aero_help.cur
%WINDIR%\Cursors\Aero_link.cur
%WINDIR%\Cursors\Aero_busy_purple.ani
%WINDIR%\Cursors\Aero_busy_red.ani
%WINDIR%\Cursors\Aero_busy_turquoise.ani
%WINDIR%\Cursors\Aero_move.cur
%WINDIR%\Cursors\Aero_size2.cur
%WINDIR%\Cursors\Aero_size3.cur
%WINDIR%\Cursors\Aero_size4.cur
%WINDIR%\Cursors\Aero_no.cur
%WINDIR%\Cursors\Aero_pen.cur
%WINDIR%\Cursors\Aero_size1.cur
%WINDIR%\Cursors\Aero_busy_pink.ani
%TEMP%\RarSFX0\CUR4.EXE
%TEMP%\RarSFX1\www.exe
%TEMP%\RarSFX1\Cursors.reg
%TEMP%\RarSFX0\CUR1.EXE
%TEMP%\RarSFX0\CUR2.EXE
%TEMP%\RarSFX0\CUR3.EXE
%TEMP%\RarSFX1\run.cmd
%WINDIR%\Cursors\Aero_busy_dark_blue.ani
%WINDIR%\Cursors\Aero_busy_green.ani
%WINDIR%\Cursors\Aero_busy_orange.ani
%WINDIR%\Cursors\Aero_arrow.cur
%WINDIR%\Cursors\Aero_beam.cur
%WINDIR%\Cursors\Aero_busy_blue.ani
%WINDIR%\Cursors\Aero_up.cur
%WINDIR%\Cursors\AeroLight_size2.cur
%WINDIR%\Cursors\AeroLight_size3.cur
%WINDIR%\Cursors\AeroLight_size4.cur
%WINDIR%\Cursors\AeroLight_no.cur
%WINDIR%\Cursors\AeroLight_pen.cur
%WINDIR%\Cursors\AeroLight_size1.cur
%WINDIR%\Cursors\AeroLight_up.cur
%WINDIR%\Cursors\AeroLight_wait_orange.ani
%WINDIR%\Cursors\AeroLight_wait_pink.ani
%WINDIR%\Cursors\AeroLight_wait_purple.ani
%WINDIR%\Cursors\AeroLight_wait_blue.ani
%WINDIR%\Cursors\AeroLight_wait_dark_blue.ani
%WINDIR%\Cursors\AeroLight_wait_green.ani
%WINDIR%\Cursors\AeroLight_move.cur
%WINDIR%\Cursors\Aero_wait_orange.ani
%WINDIR%\Cursors\Aero_wait_pink.ani
%WINDIR%\Cursors\Aero_wait_purple.ani
%WINDIR%\Cursors\Aero_wait_blue.ani
%WINDIR%\Cursors\Aero_wait_dark_blue.ani
%WINDIR%\Cursors\Aero_wait_green.ani
%WINDIR%\Cursors\Aero_wait_red.ani
%WINDIR%\Cursors\AeroLight_cross.cur
%WINDIR%\Cursors\AeroLight_help.cur
%WINDIR%\Cursors\AeroLight_link.cur
%WINDIR%\Cursors\Aero_wait_turquoise.ani
%WINDIR%\Cursors\AeroLight_arrow.cur
%WINDIR%\Cursors\AeroLight_beam.cur
%WINDIR%\Cursors\Mario_size1.cur
%WINDIR%\Cursors\Mario_size2.cur
%WINDIR%\Cursors\Mario_size3.cur
%WINDIR%\Cursors\Mario_move.cur
%WINDIR%\Cursors\Mario_no.cur
%WINDIR%\Cursors\Mario_pen.cur
%WINDIR%\Cursors\Mario_size4.cur
%WINDIR%\Cursors\Silver_beam.cur
%WINDIR%\Cursors\Silver_busy.cur
%WINDIR%\Cursors\Silver_cross.cur
%WINDIR%\Cursors\Mario_up.cur
%WINDIR%\Cursors\Mario_wait.ani
%WINDIR%\Cursors\Silver_arrow.cur
%WINDIR%\Cursors\Mario_link.cur
%WINDIR%\Cursors\Mac2_size2.ani
%WINDIR%\Cursors\Mac2_size3.ani
%WINDIR%\Cursors\Mac2_size4.ani
%WINDIR%\Cursors\Mac2_move.cur
%WINDIR%\Cursors\Mac2_no.ani
%WINDIR%\Cursors\Mac2_size1.ani
%WINDIR%\Cursors\Mac2_up.cur
%WINDIR%\Cursors\Mario_Busy.ani
%WINDIR%\Cursors\Mario_cross.cur
%WINDIR%\Cursors\Mario_help.cur
%WINDIR%\Cursors\Mac2_wait.ani
%WINDIR%\Cursors\Mario_arrow.cur
%WINDIR%\Cursors\Mario_beam.cur
%WINDIR%\Cursors\Silver_help.cur
%WINDIR%\Cursors\Vista_ani_size4.ani
%WINDIR%\Cursors\Vista_arrow.cur
%WINDIR%\Cursors\Vista_beam.cur
%WINDIR%\Cursors\Vista_ani_size1.ani
%WINDIR%\Cursors\Vista_ani_size2.ani
%WINDIR%\Cursors\Vista_ani_size3.ani
%WINDIR%\Cursors\Vista_busy.ani
%WINDIR%\Cursors\Vista_move.cur
%WINDIR%\Cursors\Vista_no.cur
%WINDIR%\Cursors\Vista_pen.cur
%WINDIR%\Cursors\Vista_cross.cur
%WINDIR%\Cursors\Vista_help.ani
%WINDIR%\Cursors\Vista_link.cur
%WINDIR%\Cursors\Vista_ani_no.ani
%WINDIR%\Cursors\Silver_pen.cur
%WINDIR%\Cursors\Silver_size1.cur
%WINDIR%\Cursors\Silver_size2.cur
%WINDIR%\Cursors\Silver_link.cur
%WINDIR%\Cursors\Silver_move.cur
%WINDIR%\Cursors\Silver_no.cur
%WINDIR%\Cursors\Silver_size3.cur
%WINDIR%\Cursors\Vista_ani_link_blue.ani
%WINDIR%\Cursors\Vista_ani_link_green.ani
%WINDIR%\Cursors\Vista_ani_move.ani
%WINDIR%\Cursors\Silver_size4.cur
%WINDIR%\Cursors\Silver_up.cur
%WINDIR%\Cursors\Silver_wait.cur
%WINDIR%\Cursors\Holidey_size3.cur
%WINDIR%\Cursors\Holidey_size4.cur
%WINDIR%\Cursors\Holidey_up.cur
%WINDIR%\Cursors\Holidey_no.ani
%WINDIR%\Cursors\Holidey_size1.cur
%WINDIR%\Cursors\Holidey_size2.cur
%WINDIR%\Cursors\Holidey_wait.ani
%WINDIR%\Cursors\I_cross.cur
%WINDIR%\Cursors\I_help.cur
%WINDIR%\Cursors\I_move.cur
%WINDIR%\Cursors\I_arrow.cur
%WINDIR%\Cursors\I_beam.cur
%WINDIR%\Cursors\I_busy.cur
%WINDIR%\Cursors\Holidey_move.cur
%WINDIR%\Cursors\Grounation_size3.cur
%WINDIR%\Cursors\Grounation_size4.cur
%WINDIR%\Cursors\Grounation_up.cur
%WINDIR%\Cursors\Grounation_pen.cur
%WINDIR%\Cursors\Grounation_size1.cur
%WINDIR%\Cursors\Grounation_size2.cur
%WINDIR%\Cursors\Grounation_wait.ani
%WINDIR%\Cursors\Holidey_cross.cur
%WINDIR%\Cursors\Holidey_help.ani
%WINDIR%\Cursors\Holidey_link.cur
%WINDIR%\Cursors\Holidey_arrow.ani
%WINDIR%\Cursors\Holidey_beam.cur
%WINDIR%\Cursors\Holidey_busy.ani
%WINDIR%\Cursors\I_no.cur
%WINDIR%\Cursors\Mac1_size2.cur
%WINDIR%\Cursors\Mac1_size3.cur
%WINDIR%\Cursors\Mac1_size4.cur
%WINDIR%\Cursors\Mac1_no.cur
%WINDIR%\Cursors\Mac1_pen.cur
%WINDIR%\Cursors\Mac1_size1.cur
%WINDIR%\Cursors\Mac1_up.cur
%WINDIR%\Cursors\Mac2_busy.ani
%WINDIR%\Cursors\Mac2_cross.cur
%WINDIR%\Cursors\Mac2_help.cur
%WINDIR%\Cursors\Mac1_wait.ani
%WINDIR%\Cursors\Mac2_arrow.cur
%WINDIR%\Cursors\Mac2_beam.cur
%WINDIR%\Cursors\Mac1_move.cur
%WINDIR%\Cursors\I_size3.cur
%WINDIR%\Cursors\I_size4.cur
%WINDIR%\Cursors\I_up.cur
%WINDIR%\Cursors\I_pen.cur
%WINDIR%\Cursors\I_size1.cur
%WINDIR%\Cursors\I_size2.cur
%WINDIR%\Cursors\I_wait.cur
%WINDIR%\Cursors\Mac1_busy.ani
%WINDIR%\Cursors\Mac1_cross.cur
%WINDIR%\Cursors\Mac1_help.cur
%WINDIR%\Cursors\Mac_link.cur
%WINDIR%\Cursors\Mac1_arrow.cur
%WINDIR%\Cursors\Mac1_beam.cur

Удаляет следующие файлы:

%WINDIR%\Cursors\wait_im.cur
%WINDIR%\Cursors\wait_il.cur
%WINDIR%\Cursors\wait_i.cur
%WINDIR%\Cursors\wait_r.cur
%WINDIR%\Cursors\wait_m.cur
%WINDIR%\Cursors\wait_l.cur
%WINDIR%\Cursors\up_rm.cur
%WINDIR%\Cursors\up_l.cur
%WINDIR%\Cursors\up_im.cur
%WINDIR%\Cursors\up_il.cur
%WINDIR%\Cursors\up_rl.cur
%WINDIR%\Cursors\up_r.cur
%WINDIR%\Cursors\up_m.cur
%WINDIR%\Cursors\wait_rl.cur
%WINDIR%\Cursors\dinosaur.ani
%WINDIR%\Cursors\dinosau2.ani
%WINDIR%\Cursors\counter.ani
%WINDIR%\Cursors\hand.ani
%WINDIR%\Cursors\fillitup.ani
%WINDIR%\Cursors\drum.ani
%WINDIR%\Cursors\coin.ani
%WINDIR%\Cursors\appstar3.ani
%WINDIR%\Cursors\appstar2.ani
%WINDIR%\Cursors\wait_rm.cur
%WINDIR%\Cursors\barber.ani
%WINDIR%\Cursors\banana.ani
%WINDIR%\Cursors\appstart.ani
%WINDIR%\Cursors\size2_rm.cur
%WINDIR%\Cursors\size2_rl.cur
%WINDIR%\Cursors\size2_r.cur
%WINDIR%\Cursors\size3_im.cur
%WINDIR%\Cursors\size3_il.cur
%WINDIR%\Cursors\size3_i.cur
%WINDIR%\Cursors\size2_m.cur
%WINDIR%\Cursors\size2_i.cur
%WINDIR%\Cursors\size1_rm.cur
%WINDIR%\Cursors\size1_rl.cur
%WINDIR%\Cursors\size2_l.cur
%WINDIR%\Cursors\size2_im.cur
%WINDIR%\Cursors\size2_il.cur
%WINDIR%\Cursors\size3_l.cur
%WINDIR%\Cursors\size4_r.cur
%WINDIR%\Cursors\size4_m.cur
%WINDIR%\Cursors\size4_l.cur
%WINDIR%\Cursors\up_i.cur
%WINDIR%\Cursors\size4_rm.cur
%WINDIR%\Cursors\size4_rl.cur
%WINDIR%\Cursors\size4_im.cur
%WINDIR%\Cursors\size3_rl.cur
%WINDIR%\Cursors\size3_r.cur
%WINDIR%\Cursors\size3_m.cur
%WINDIR%\Cursors\size4_il.cur
%WINDIR%\Cursors\size4_i.cur
%WINDIR%\Cursors\size3_rm.cur
%TEMP%\IXP000.TMP\NO_S.cur
%TEMP%\IXP000.TMP\NO_W.cur
%TEMP%\IXP000.TMP\Setup.inf
%TEMP%\IXP000.TMP\Help_S.cur
%TEMP%\IXP000.TMP\Help_W.cur
%TEMP%\IXP000.TMP\IBeam.cur
%TEMP%\IXP000.TMP\SizeAll_S.cur
%TEMP%\IXP000.TMP\SizeNWSE.cur
%TEMP%\IXP000.TMP\SizeWE.cur
%TEMP%\IXP000.TMP\UpArrow.cur
%TEMP%\IXP000.TMP\SizeAll_W.cur
%TEMP%\IXP000.TMP\SizeNESW.cur
%TEMP%\IXP000.TMP\SizeNS.cur
%TEMP%\IXP000.TMP\Handwriting.cur
%TEMP%\RarSFX0\CUR1.EXE
%TEMP%\RarSFX1\wainakh.cmd
%TEMP%\RarSFX1\Cursors.exe
%TEMP%\RarSFX0\CUR4.EXE
%TEMP%\RarSFX0\CUR3.EXE
%TEMP%\RarSFX0\CUR2.EXE
%WINDIR%\Cursors\YingYang.cmd
%TEMP%\IXP000.TMP\Arrow.cur
%TEMP%\IXP000.TMP\Cross.cur
%TEMP%\IXP000.TMP\Hand.cur
%WINDIR%\Cursors\YingYang.reg
%TEMP%\IXP000.TMP\AppStarting_S.ani
%TEMP%\IXP000.TMP\AppStarting_W.ani
%WINDIR%\Cursors\hourgla3.ani
%WINDIR%\Cursors\hourgla2.ani
%WINDIR%\Cursors\horse.ani
%WINDIR%\Cursors\piano.ani
%WINDIR%\Cursors\metronom.ani
%WINDIR%\Cursors\hourglas.ani
%WINDIR%\Cursors\handwe.ani
%WINDIR%\Cursors\handno.ani
%WINDIR%\Cursors\handnesw.ani
%WINDIR%\Cursors\handapst.ani
%WINDIR%\Cursors\handwait.ani
%WINDIR%\Cursors\handnwse.ani
%WINDIR%\Cursors\handns.ani
%WINDIR%\Cursors\rainbow.ani
%TEMP%\RarSFX1\run.cmd
%TEMP%\RarSFX1\Cursors.reg
%WINDIR%\Cursors\wagtail.ani
%TEMP%\IXP000.TMP\Wait_S.ani
%TEMP%\IXP000.TMP\Wait_W.ani
%TEMP%\RarSFX1\www.exe
%WINDIR%\Cursors\vanisher.ani
%WINDIR%\Cursors\sizens.ani
%WINDIR%\Cursors\sizenesw.ani
%WINDIR%\Cursors\raindrop.ani
%WINDIR%\Cursors\stopwtch.ani
%WINDIR%\Cursors\sizewe.ani
%WINDIR%\Cursors\sizenwse.ani
%WINDIR%\Cursors\busy_l.cur
%WINDIR%\Cursors\busy_im.cur
%WINDIR%\Cursors\busy_il.cur
%WINDIR%\Cursors\busy_rl.cur
%WINDIR%\Cursors\busy_r.cur
%WINDIR%\Cursors\busy_m.cur
%WINDIR%\Cursors\busy_i.cur
%WINDIR%\Cursors\beam_m.cur
%WINDIR%\Cursors\beam_l.cur
%WINDIR%\Cursors\beam_im.cur
%WINDIR%\Cursors\beam_rm.cur
%WINDIR%\Cursors\beam_rl.cur
%WINDIR%\Cursors\beam_r.cur
%WINDIR%\Cursors\busy_rm.cur
%WINDIR%\Cursors\harrow.cur
%WINDIR%\Cursors\cross_rm.cur
%WINDIR%\Cursors\cross_rl.cur
%WINDIR%\Cursors\help_il.cur
%WINDIR%\Cursors\help_i.cur
%WINDIR%\Cursors\hcross.cur
%WINDIR%\Cursors\cross_r.cur
%WINDIR%\Cursors\cross_il.cur
%WINDIR%\Cursors\cross_i.cur
%WINDIR%\Cursors\cross.cur
%WINDIR%\Cursors\cross_m.cur
%WINDIR%\Cursors\cross_l.cur
%WINDIR%\Cursors\cross_im.cur
%WINDIR%\Cursors\3dsnwse.cur
%WINDIR%\Cursors\3dsns.cur
%WINDIR%\Cursors\3dsmove.cur
%WINDIR%\Cursors\3dwnesw.cur
%WINDIR%\Cursors\3dwmove.cur
%WINDIR%\Cursors\3dwarro.cur
%WINDIR%\Cursors\3dgwe.cur
%WINDIR%\Cursors\3dgnesw.cur
%WINDIR%\Cursors\3dgmove.cur
%WINDIR%\Cursors\3dgarro.cur
%WINDIR%\Cursors\3dgnwse.cur
%WINDIR%\Cursors\3dgns.cur
%WINDIR%\Cursors\3dgno.cur
%WINDIR%\Cursors\3dwno.cur
%WINDIR%\Cursors\arrow_rl.cur
%WINDIR%\Cursors\arrow_r.cur
%WINDIR%\Cursors\arrow_m.cur
%WINDIR%\Cursors\beam_il.cur
%WINDIR%\Cursors\beam_i.cur
%WINDIR%\Cursors\arrow_rm.cur
%WINDIR%\Cursors\arrow_l.cur
%WINDIR%\Cursors\3dwwe.cur
%WINDIR%\Cursors\3dwnwse.cur
%WINDIR%\Cursors\3dwns.cur
%WINDIR%\Cursors\arrow_im.cur
%WINDIR%\Cursors\arrow_il.cur
%WINDIR%\Cursors\arrow_i.cur
%WINDIR%\Cursors\no_m.cur
%WINDIR%\Cursors\no_l.cur
%WINDIR%\Cursors\no_im.cur
%WINDIR%\Cursors\no_rm.cur
%WINDIR%\Cursors\no_rl.cur
%WINDIR%\Cursors\no_r.cur
%WINDIR%\Cursors\no_il.cur
%WINDIR%\Cursors\move_r.cur
%WINDIR%\Cursors\move_m.cur
%WINDIR%\Cursors\move_l.cur
%WINDIR%\Cursors\no_i.cur
%WINDIR%\Cursors\move_rm.cur
%WINDIR%\Cursors\move_rl.cur
%WINDIR%\Cursors\pen_i.cur
%WINDIR%\Cursors\size1_im.cur
%WINDIR%\Cursors\size1_il.cur
%WINDIR%\Cursors\size1_i.cur
%WINDIR%\Cursors\size1_r.cur
%WINDIR%\Cursors\size1_m.cur
%WINDIR%\Cursors\size1_l.cur
%WINDIR%\Cursors\pen_rm.cur
%WINDIR%\Cursors\pen_l.cur
%WINDIR%\Cursors\pen_im.cur
%WINDIR%\Cursors\pen_il.cur
%WINDIR%\Cursors\pen_rl.cur
%WINDIR%\Cursors\pen_r.cur
%WINDIR%\Cursors\pen_m.cur
%WINDIR%\Cursors\hnodrop.cur
%WINDIR%\Cursors\hnesw.cur
%WINDIR%\Cursors\hmove.cur
%WINDIR%\Cursors\hwe.cur
%WINDIR%\Cursors\hnwse.cur
%WINDIR%\Cursors\hns.cur
%WINDIR%\Cursors\hibeam.cur
%WINDIR%\Cursors\help_m.cur
%WINDIR%\Cursors\help_l.cur
%WINDIR%\Cursors\help_im.cur
%WINDIR%\Cursors\help_rm.cur
%WINDIR%\Cursors\help_rl.cur
%WINDIR%\Cursors\help_r.cur
%WINDIR%\Cursors\lappstrt.cur
%WINDIR%\Cursors\lwe.cur
%WINDIR%\Cursors\lwait.cur
%WINDIR%\Cursors\lnwse.cur
%WINDIR%\Cursors\move_im.cur
%WINDIR%\Cursors\move_il.cur
%WINDIR%\Cursors\move_i.cur
%WINDIR%\Cursors\lns.cur
%WINDIR%\Cursors\libeam.cur
%WINDIR%\Cursors\lcross.cur
%WINDIR%\Cursors\larrow.cur
%WINDIR%\Cursors\lnodrop.cur
%WINDIR%\Cursors\lnesw.cur
%WINDIR%\Cursors\lmove.cur

Перемещает следующие файлы:

%WINDIR%\Cursors\VistaPlastic\SET10.tmp в %WINDIR%\Cursors\VistaPlastic\SizeNESW.cur
%WINDIR%\Cursors\VistaPlastic\SET11.tmp в %WINDIR%\Cursors\VistaPlastic\SizeNS.cur
%WINDIR%\Cursors\VistaPlastic\SETF.tmp в %WINDIR%\Cursors\VistaPlastic\SizeAll_W.cur
%WINDIR%\Cursors\VistaPlastic\SETD.tmp в %WINDIR%\Cursors\VistaPlastic\NO_W.cur
%WINDIR%\Cursors\VistaPlastic\SETE.tmp в %WINDIR%\Cursors\VistaPlastic\SizeAll_S.cur
%WINDIR%\Cursors\VistaPlastic\SET15.tmp в %WINDIR%\Cursors\VistaPlastic\Wait_S.ani
%WINDIR%\Cursors\VistaPlastic\SET16.tmp в %WINDIR%\Cursors\VistaPlastic\Wait_W.ani
%WINDIR%\Cursors\VistaPlastic\SET14.tmp в %WINDIR%\Cursors\VistaPlastic\UpArrow.cur
%WINDIR%\Cursors\VistaPlastic\SET12.tmp в %WINDIR%\Cursors\VistaPlastic\SizeNWSE.cur
%WINDIR%\Cursors\VistaPlastic\SET13.tmp в %WINDIR%\Cursors\VistaPlastic\SizeWE.cur
%WINDIR%\Cursors\VistaPlastic\SET6.tmp в %WINDIR%\Cursors\VistaPlastic\Cross.cur
%WINDIR%\Cursors\VistaPlastic\SET7.tmp в %WINDIR%\Cursors\VistaPlastic\Hand.cur
%WINDIR%\Cursors\VistaPlastic\SET5.tmp в %WINDIR%\Cursors\VistaPlastic\Arrow.cur
%WINDIR%\Cursors\VistaPlastic\SET3.tmp в %WINDIR%\Cursors\VistaPlastic\AppStarting_S.ani
%WINDIR%\Cursors\VistaPlastic\SET4.tmp в %WINDIR%\Cursors\VistaPlastic\AppStarting_W.ani
%WINDIR%\Cursors\VistaPlastic\SETB.tmp в %WINDIR%\Cursors\VistaPlastic\IBeam.cur
%WINDIR%\Cursors\VistaPlastic\SETC.tmp в %WINDIR%\Cursors\VistaPlastic\NO_S.cur
%WINDIR%\Cursors\VistaPlastic\SETA.tmp в %WINDIR%\Cursors\VistaPlastic\Help_W.cur
%WINDIR%\Cursors\VistaPlastic\SET8.tmp в %WINDIR%\Cursors\VistaPlastic\Handwriting.cur
%WINDIR%\Cursors\VistaPlastic\SET9.tmp в %WINDIR%\Cursors\VistaPlastic\Help_S.cur

Другое:

Ищет следующие окна:

ClassName: 'RegEdit_RegEdit' WindowName: ''
ClassName: 'Shell_TrayWnd' WindowName: ''
ClassName: 'EDIT' WindowName: ''

Технологии

Термины

Обучение и просвещение

Мифы

Техническая информация

Рекомендации по лечению

Демо бесплатно на 14 дней