Техническая информация
Для обеспечения автозапуска и распространения
Модифицирует следующие ключи реестра
- [HKLM\Software\Wow6432Node\Microsoft\Windows\CurrentVersion\RunOnce] 'InnoSetupRegFile.0000000001' = '"%WINDIR%\is-0OOQA.exe" /REG /REGSVRMODE'
Изменения в файловой системе
Создает следующие файлы
- %TEMP%\rarsfx0\filemenutools-setup.exe
- %ProgramFiles%\lopesoft\filemenu tools\lang\is-du64m.tmp
- %ProgramFiles%\lopesoft\filemenu tools\lang\is-bhb36.tmp
- %ProgramFiles%\lopesoft\filemenu tools\lang\is-bkhpo.tmp
- %ProgramFiles%\lopesoft\filemenu tools\lang\is-cv3ag.tmp
- %ProgramFiles%\lopesoft\filemenu tools\lang\is-42c9t.tmp
- %ProgramFiles%\lopesoft\filemenu tools\lang\is-1mqcr.tmp
- %ProgramFiles%\lopesoft\filemenu tools\lang\is-9sc53.tmp
- %ProgramFiles%\lopesoft\filemenu tools\lang\is-aem6v.tmp
- %ProgramFiles%\lopesoft\filemenu tools\lang\is-md4nd.tmp
- %ProgramFiles%\lopesoft\filemenu tools\crashsender\is-aokt2.tmp
- %ProgramFiles%\lopesoft\filemenu tools\lang\is-r947c.tmp
- %ProgramFiles%\lopesoft\filemenu tools\lang\is-g9nk1.tmp
- %ProgramFiles%\lopesoft\filemenu tools\lang\is-v76bd.tmp
- %ProgramFiles%\lopesoft\filemenu tools\lang\is-bqkko.tmp
- %ProgramFiles%\lopesoft\filemenu tools\lang\is-nvmsl.tmp
- %ProgramFiles%\lopesoft\filemenu tools\lang\is-7dmst.tmp
- %ProgramFiles%\lopesoft\filemenu tools\lang\is-pkc86.tmp
- %ProgramFiles%\lopesoft\filemenu tools\lang\is-4tcpg.tmp
- %ProgramFiles%\lopesoft\filemenu tools\lang\is-ikptd.tmp
- %ProgramFiles%\lopesoft\filemenu tools\lang\is-2mi0r.tmp
- %ProgramFiles%\lopesoft\filemenu tools\lang\is-epdku.tmp
- %ProgramFiles%\lopesoft\filemenu tools\lang\is-5lluj.tmp
- %ProgramFiles%\lopesoft\filemenu tools\crashsender\is-uijio.tmp
- %TEMP%\etilqs_otwy0rh5fixv9oy
- %TEMP%\etilqs_9vvywenfghx6ss5
- %TEMP%\etilqs_vgukionbwo6ibkh
- %TEMP%\etilqs_o7b2gqhayn23yoj
- %TEMP%\etilqs_jsaucll336xmjzn
- %TEMP%\etilqs_natvs4ahimxt8ab
- %TEMP%\etilqs_zfcaxhwu2rs5yqr
- %TEMP%\etilqs_lrfzhxcctcqcfvg
- %ALLUSERSPROFILE%\lopesoft\filemenu tools\license.dat
- %ProgramFiles%\lopesoft\filemenu tools\filemenutools.exe
- %ProgramFiles%\lopesoft\filemenu tools\filemenutools.dll
- %ProgramFiles%\lopesoft\filemenu tools\filemenutools64.exe
- %ProgramFiles%\lopesoft\filemenu tools\filemenutools64.dll
- %ProgramFiles%\lopesoft\filemenu tools\unins000.dat
- %ProgramFiles%\lopesoft\filemenu tools\unins000.msg
- %WINDIR%\is-0ooqa.lst
- %WINDIR%\is-0ooqa.msg
- %WINDIR%\is-0ooqa.exe
- %ALLUSERSPROFILE%\microsoft\windows\start menu\programs\filemenu tools\filemenu tools help.url
- %ALLUSERSPROFILE%\microsoft\windows\start menu\programs\filemenu tools\configure filemenu tools.lnk
- C:\users\public\desktop\configure filemenu tools.lnk
- %ProgramFiles%\lopesoft\filemenu tools\lang\is-n47jv.tmp
- %ProgramFiles%\lopesoft\filemenu tools\lang\is-q8hja.tmp
- %ProgramFiles%\lopesoft\filemenu tools\lang\is-89b4f.tmp
- %ProgramFiles%\lopesoft\filemenu tools\lang\is-ae3lq.tmp
- %ProgramFiles%\lopesoft\filemenu tools\lang\is-c6fj4.tmp
- %ProgramFiles%\lopesoft\filemenu tools\is-pdcgl.tmp
- %ProgramFiles%\lopesoft\filemenu tools\lang\is-ruljf.tmp
- %ProgramFiles%\lopesoft\filemenu tools\is-4vct8.tmp
- %ProgramFiles%\lopesoft\filemenu tools\is-gfc4s.tmp
- %ProgramFiles%\lopesoft\filemenu tools\is-29tpe.tmp
- %ProgramFiles%\lopesoft\filemenu tools\is-m04i0.tmp
- %ProgramFiles%\lopesoft\filemenu tools\is-uhqn5.tmp
- %ProgramFiles%\lopesoft\filemenu tools\is-mov51.tmp
- %ProgramFiles%\lopesoft\filemenu tools\is-h1mof.tmp
- %ProgramFiles%\lopesoft\filemenu tools\is-j99ud.tmp
- %ProgramFiles%\lopesoft\filemenu tools\is-haceo.tmp
- %ProgramFiles%\lopesoft\filemenu tools\lang\is-he6vu.tmp
- %ProgramFiles%\lopesoft\filemenu tools\is-drjm7.tmp
- %TEMP%\is-lic0v.tmp\_isetup\_setup64.tmp
- %TEMP%\is-r28p8.tmp\filemenutools-setup.tmp
- %TEMP%\rarsfx0\getintoway.url
- %TEMP%\rarsfx0\32or64.cmd
- %TEMP%\rarsfx0\patch.7z
- %TEMP%\rarsfx0\64.exe
- %TEMP%\rarsfx0\32.exe
- %TEMP%\rarsfx0\license.exe
- %TEMP%\etilqs_33krer6nw8yef06
- %ProgramFiles%\lopesoft\filemenu tools\crashsender\is-a3ddf.tmp
- %ProgramFiles%\lopesoft\filemenu tools\lang\is-d2srm.tmp
- %ProgramFiles%\lopesoft\filemenu tools\lang\is-4udc2.tmp
- %ProgramFiles%\lopesoft\filemenu tools\lang\is-6b1fr.tmp
- %ProgramFiles%\lopesoft\filemenu tools\lang\is-ujhp1.tmp
- %ProgramFiles%\lopesoft\filemenu tools\lang\is-nb6as.tmp
- %ProgramFiles%\lopesoft\filemenu tools\lang\is-j5aa3.tmp
- %ProgramFiles%\lopesoft\filemenu tools\lang\is-0ioqv.tmp
- %ProgramFiles%\lopesoft\filemenu tools\lang\is-1eu5j.tmp
- %ProgramFiles%\lopesoft\filemenu tools\lang\is-s20lv.tmp
- %ProgramFiles%\lopesoft\filemenu tools\lang\is-ugj2g.tmp
- %ProgramFiles%\lopesoft\filemenu tools\lang\is-v5jjl.tmp
- %ProgramFiles%\lopesoft\filemenu tools\lang\is-r6cbu.tmp
- %ProgramFiles%\lopesoft\filemenu tools\lang\is-d9i32.tmp
- %ProgramFiles%\lopesoft\filemenu tools\lang\is-m4kba.tmp
- %ProgramFiles%\lopesoft\filemenu tools\lang\is-t4sce.tmp
- %ProgramFiles%\lopesoft\filemenu tools\lang\is-o1q2a.tmp
- %ProgramFiles%\lopesoft\filemenu tools\lang\is-khi3a.tmp
- %ProgramFiles%\lopesoft\filemenu tools\lang\is-lvnkp.tmp
- %ProgramFiles%\lopesoft\filemenu tools\lang\is-ie08h.tmp
- %ProgramFiles%\lopesoft\filemenu tools\lang\is-76l2t.tmp
- %ProgramFiles%\lopesoft\filemenu tools\lang\is-fi1s1.tmp
- %ProgramFiles%\lopesoft\filemenu tools\lang\is-vdrj4.tmp
- %ProgramFiles%\lopesoft\filemenu tools\lang\is-ummv6.tmp
- %ProgramFiles%\lopesoft\filemenu tools\lang\is-gcm6f.tmp
- %TEMP%\etilqs_951edf66gyhibbx
Удаляет следующие файлы
- %TEMP%\is-lic0v.tmp\_isetup\_setup64.tmp
- %TEMP%\is-r28p8.tmp\filemenutools-setup.tmp
Перемещает следующие файлы
- %ProgramFiles%\lopesoft\filemenu tools\is-drjm7.tmp в %ProgramFiles%\lopesoft\filemenu tools\unins000.exe
- %ProgramFiles%\lopesoft\filemenu tools\lang\is-nb6as.tmp в %ProgramFiles%\lopesoft\filemenu tools\lang\japanese_exe.lng
- %ProgramFiles%\lopesoft\filemenu tools\lang\is-ujhp1.tmp в %ProgramFiles%\lopesoft\filemenu tools\lang\korean_dll.lng
- %ProgramFiles%\lopesoft\filemenu tools\lang\is-c6fj4.tmp в %ProgramFiles%\lopesoft\filemenu tools\lang\korean_exe.lng
- %ProgramFiles%\lopesoft\filemenu tools\lang\is-ae3lq.tmp в %ProgramFiles%\lopesoft\filemenu tools\lang\polish_dll.lng
- %ProgramFiles%\lopesoft\filemenu tools\lang\is-89b4f.tmp в %ProgramFiles%\lopesoft\filemenu tools\lang\polish_exe.lng
- %ProgramFiles%\lopesoft\filemenu tools\lang\is-n47jv.tmp в %ProgramFiles%\lopesoft\filemenu tools\lang\portuguese-br_dll.lng
- %ProgramFiles%\lopesoft\filemenu tools\lang\is-2mi0r.tmp в %ProgramFiles%\lopesoft\filemenu tools\lang\portuguese-br_exe.lng
- %ProgramFiles%\lopesoft\filemenu tools\lang\is-ikptd.tmp в %ProgramFiles%\lopesoft\filemenu tools\lang\romanian_dll.lng
- %ProgramFiles%\lopesoft\filemenu tools\lang\is-4tcpg.tmp в %ProgramFiles%\lopesoft\filemenu tools\lang\romanian_exe.lng
- %ProgramFiles%\lopesoft\filemenu tools\lang\is-pkc86.tmp в %ProgramFiles%\lopesoft\filemenu tools\lang\russian_dll.lng
- %ProgramFiles%\lopesoft\filemenu tools\lang\is-7dmst.tmp в %ProgramFiles%\lopesoft\filemenu tools\lang\russian_exe.lng
- %ProgramFiles%\lopesoft\filemenu tools\lang\is-nvmsl.tmp в %ProgramFiles%\lopesoft\filemenu tools\lang\slovak_dll.lng
- %ProgramFiles%\lopesoft\filemenu tools\lang\is-bqkko.tmp в %ProgramFiles%\lopesoft\filemenu tools\lang\slovak_exe.lng
- %ProgramFiles%\lopesoft\filemenu tools\lang\is-gcm6f.tmp в %ProgramFiles%\lopesoft\filemenu tools\lang\czech_exe.lng
- %ProgramFiles%\lopesoft\filemenu tools\lang\is-v76bd.tmp в %ProgramFiles%\lopesoft\filemenu tools\lang\slovenian_dll.lng
- %ProgramFiles%\lopesoft\filemenu tools\lang\is-q8hja.tmp в %ProgramFiles%\lopesoft\filemenu tools\lang\spanish_dll.lng
- %ProgramFiles%\lopesoft\filemenu tools\lang\is-epdku.tmp в %ProgramFiles%\lopesoft\filemenu tools\lang\spanish_exe.lng
- %ProgramFiles%\lopesoft\filemenu tools\lang\is-md4nd.tmp в %ProgramFiles%\lopesoft\filemenu tools\lang\swedish_dll.lng
- %ProgramFiles%\lopesoft\filemenu tools\lang\is-aem6v.tmp в %ProgramFiles%\lopesoft\filemenu tools\lang\swedish_exe.lng
- %ProgramFiles%\lopesoft\filemenu tools\lang\is-9sc53.tmp в %ProgramFiles%\lopesoft\filemenu tools\lang\turkish_dll.lng
- %ProgramFiles%\lopesoft\filemenu tools\lang\is-1mqcr.tmp в %ProgramFiles%\lopesoft\filemenu tools\lang\turkish_exe.lng
- %ProgramFiles%\lopesoft\filemenu tools\lang\is-42c9t.tmp в %ProgramFiles%\lopesoft\filemenu tools\lang\ukrainian_dll.lng
- %ProgramFiles%\lopesoft\filemenu tools\lang\is-cv3ag.tmp в %ProgramFiles%\lopesoft\filemenu tools\lang\ukrainian_exe.lng
- %ProgramFiles%\lopesoft\filemenu tools\lang\is-bkhpo.tmp в %ProgramFiles%\lopesoft\filemenu tools\lang\valencian_dll.lng
- %ProgramFiles%\lopesoft\filemenu tools\lang\is-bhb36.tmp в %ProgramFiles%\lopesoft\filemenu tools\lang\valencian_exe.lng
- %ProgramFiles%\lopesoft\filemenu tools\lang\is-du64m.tmp в %ProgramFiles%\lopesoft\filemenu tools\lang\vietnamese_dll.lng
- %ProgramFiles%\lopesoft\filemenu tools\lang\is-r947c.tmp в %ProgramFiles%\lopesoft\filemenu tools\lang\vietnamese_exe.lng
- %ProgramFiles%\lopesoft\filemenu tools\crashsender\is-aokt2.tmp в %ProgramFiles%\lopesoft\filemenu tools\crashsender\crashrpt_lang.ini
- %ProgramFiles%\lopesoft\filemenu tools\lang\is-0ioqv.tmp в %ProgramFiles%\lopesoft\filemenu tools\lang\italian_exe.lng
- %ProgramFiles%\lopesoft\filemenu tools\lang\is-j5aa3.tmp в %ProgramFiles%\lopesoft\filemenu tools\lang\japanese_dll.lng
- %ProgramFiles%\lopesoft\filemenu tools\lang\is-1eu5j.tmp в %ProgramFiles%\lopesoft\filemenu tools\lang\italian_dll.lng
- %ProgramFiles%\lopesoft\filemenu tools\lang\is-s20lv.tmp в %ProgramFiles%\lopesoft\filemenu tools\lang\hungarian_exe.lng
- %ProgramFiles%\lopesoft\filemenu tools\lang\is-ugj2g.tmp в %ProgramFiles%\lopesoft\filemenu tools\lang\hungarian_dll.lng
- %ProgramFiles%\lopesoft\filemenu tools\is-pdcgl.tmp в %ProgramFiles%\lopesoft\filemenu tools\filemenutools.exe
- %ProgramFiles%\lopesoft\filemenu tools\is-j99ud.tmp в %ProgramFiles%\lopesoft\filemenu tools\filemenutools64.dll
- %ProgramFiles%\lopesoft\filemenu tools\is-h1mof.tmp в %ProgramFiles%\lopesoft\filemenu tools\filemenutools64.exe
- %ProgramFiles%\lopesoft\filemenu tools\is-mov51.tmp в %ProgramFiles%\lopesoft\filemenu tools\cmdfmt.exe
- %ProgramFiles%\lopesoft\filemenu tools\is-uhqn5.tmp в %ProgramFiles%\lopesoft\filemenu tools\cmdfmt64.exe
- %ProgramFiles%\lopesoft\filemenu tools\is-m04i0.tmp в %ProgramFiles%\lopesoft\filemenu tools\register.exe
- %ProgramFiles%\lopesoft\filemenu tools\is-29tpe.tmp в %ProgramFiles%\lopesoft\filemenu tools\filemenutoolsapppkg.exe
- %ProgramFiles%\lopesoft\filemenu tools\is-gfc4s.tmp в %ProgramFiles%\lopesoft\filemenu tools\filemenutoolsapppkg.exe.config
- %ProgramFiles%\lopesoft\filemenu tools\is-4vct8.tmp в %ProgramFiles%\lopesoft\filemenu tools\filemenutools.msix
- %ProgramFiles%\lopesoft\filemenu tools\lang\is-ruljf.tmp в %ProgramFiles%\lopesoft\filemenu tools\lang\chinese(simplified)_dll.lng
- %ProgramFiles%\lopesoft\filemenu tools\lang\is-6b1fr.tmp в %ProgramFiles%\lopesoft\filemenu tools\lang\chinese(simplified)_exe.lng
- %ProgramFiles%\lopesoft\filemenu tools\lang\is-he6vu.tmp в %ProgramFiles%\lopesoft\filemenu tools\lang\chinese_traditional_dll.lng
- %ProgramFiles%\lopesoft\filemenu tools\lang\is-d2srm.tmp в %ProgramFiles%\lopesoft\filemenu tools\lang\chinese_traditional_exe.lng
- %ProgramFiles%\lopesoft\filemenu tools\crashsender\is-uijio.tmp в %ProgramFiles%\lopesoft\filemenu tools\crashsender\crashsender1403.exe
- %ProgramFiles%\lopesoft\filemenu tools\lang\is-g9nk1.tmp в %ProgramFiles%\lopesoft\filemenu tools\lang\slovenian_exe.lng
- %ProgramFiles%\lopesoft\filemenu tools\lang\is-5lluj.tmp в %ProgramFiles%\lopesoft\filemenu tools\lang\czech_dll.lng
- %ProgramFiles%\lopesoft\filemenu tools\lang\is-ummv6.tmp в %ProgramFiles%\lopesoft\filemenu tools\lang\danish_exe.lng
- %ProgramFiles%\lopesoft\filemenu tools\lang\is-vdrj4.tmp в %ProgramFiles%\lopesoft\filemenu tools\lang\dutch (nl)_dll.lng
- %ProgramFiles%\lopesoft\filemenu tools\lang\is-fi1s1.tmp в %ProgramFiles%\lopesoft\filemenu tools\lang\dutch (nl)_exe.lng
- %ProgramFiles%\lopesoft\filemenu tools\lang\is-76l2t.tmp в %ProgramFiles%\lopesoft\filemenu tools\lang\dutch_dll.lng
- %ProgramFiles%\lopesoft\filemenu tools\lang\is-ie08h.tmp в %ProgramFiles%\lopesoft\filemenu tools\lang\dutch_exe.lng
- %ProgramFiles%\lopesoft\filemenu tools\lang\is-lvnkp.tmp в %ProgramFiles%\lopesoft\filemenu tools\lang\english_dll.lng
- %ProgramFiles%\lopesoft\filemenu tools\lang\is-khi3a.tmp в %ProgramFiles%\lopesoft\filemenu tools\lang\english_exe.lng
- %ProgramFiles%\lopesoft\filemenu tools\lang\is-o1q2a.tmp в %ProgramFiles%\lopesoft\filemenu tools\lang\finnish_dll.lng
- %ProgramFiles%\lopesoft\filemenu tools\lang\is-t4sce.tmp в %ProgramFiles%\lopesoft\filemenu tools\lang\finnish_exe.lng
- %ProgramFiles%\lopesoft\filemenu tools\lang\is-m4kba.tmp в %ProgramFiles%\lopesoft\filemenu tools\lang\french_dll.lng
- %ProgramFiles%\lopesoft\filemenu tools\lang\is-d9i32.tmp в %ProgramFiles%\lopesoft\filemenu tools\lang\french_exe.lng
- %ProgramFiles%\lopesoft\filemenu tools\lang\is-r6cbu.tmp в %ProgramFiles%\lopesoft\filemenu tools\lang\german_dll.lng
- %ProgramFiles%\lopesoft\filemenu tools\lang\is-v5jjl.tmp в %ProgramFiles%\lopesoft\filemenu tools\lang\german_exe.lng
- %ProgramFiles%\lopesoft\filemenu tools\is-haceo.tmp в %ProgramFiles%\lopesoft\filemenu tools\filemenutools.dll
- %ProgramFiles%\lopesoft\filemenu tools\lang\is-4udc2.tmp в %ProgramFiles%\lopesoft\filemenu tools\lang\danish_dll.lng
- %ProgramFiles%\lopesoft\filemenu tools\crashsender\is-a3ddf.tmp в %ProgramFiles%\lopesoft\filemenu tools\crashsender\crashsender1403_x64.exe
Сетевая активность
Подключается к
- 'google.com':80
- 'se####.yahoo.com':80
- 'du###uckgo.com':443
- 'bing.com':80
- 'am##on.com':80
- 'au######te.geo.opera.com':80
- 'se####.yahoo.com':443
- 'am##on.com':443
- 'au######te.geo.opera.com':443
- 'en.###ipedia.org':80
- 'en.###ipedia.org':443
- 'si#####ck2.opera.com':80
- 're###.opera.com':80
- 'si#####ck2.opera.com':443
TCP
Запросы HTTP GET
- http://www.google.com/favicon.ico
- http://se####.yahoo.com/favicon.ico
- http://www.bing.com/s/a/bing_p.ico
- http://www.am##on.com/favicon.ico
- http://au######te.geo.opera.com/geolocation/
- http://en.###ipedia.org/favicon.ico
- http://si#####ck2.opera.com/?ho###################################################
- http://re###.opera.com/www.opera.com/firstrun/
Другие
- 'du###uckgo.com':443
- 'se####.yahoo.com':443
- 'am##on.com':443
- 'au######te.geo.opera.com':443
- 'en.###ipedia.org':443
- 'si#####ck2.opera.com':443
UDP
- DNS ASK google.com
- DNS ASK se####.yahoo.com
- DNS ASK du###uckgo.com
- DNS ASK am##on.com
- DNS ASK bing.com
- DNS ASK bi##.#ikimedia.org
- DNS ASK au######te.geo.opera.com
- DNS ASK en.###ipedia.org
- DNS ASK si#####ck2.opera.com
- DNS ASK re###.opera.com
Другое
Ищет следующие окна
- ClassName: 'EDIT' WindowName: ''
- ClassName: 'Opera_MessageWindow' WindowName: '%APPDATA%\Opera Software\Opera Stable'
Создает и запускает на исполнение
- '%TEMP%\rarsfx0\filemenutools-setup.exe' /silent /norestart
- '%TEMP%\is-r28p8.tmp\filemenutools-setup.tmp' /SL5="$1025A,10901132,801792,%TEMP%\RarSFX0\FileMenuTools-setup.exe" /silent /norestart
- '%TEMP%\is-lic0v.tmp\_isetup\_setup64.tmp' 105 0x228
- '%ProgramFiles%\lopesoft\filemenu tools\register.exe' /s
- '%TEMP%\rarsfx0\64.exe'
- '%TEMP%\rarsfx0\license.exe'
Запускает на исполнение
- '%WINDIR%\syswow64\regsvr32.exe' /s "%ProgramFiles%\LopeSoft\FileMenu Tools\FileMenuTools.dll"
- '%ProgramFiles(x86)%\opera\29.0.1795.47\opera.exe' --type=utility --channel="288.15.472886191\1249745224" --lang=en-US --enable-proprietary-media-types-playback --ignored=" --type=renderer " /prefetch:-645351001
- '%ProgramFiles(x86)%\opera\29.0.1795.47\opera.exe' --type=utility --channel="288.12.736614421\138913400" --lang=en-US --enable-proprietary-media-types-playback --ignored=" --type=renderer " /prefetch:-645351001
- '%ProgramFiles(x86)%\opera\29.0.1795.47\opera.exe' --type=utility --channel="288.11.1931392593\1761049268" --lang=en-US --enable-proprietary-media-types-playback --ignored=" --type=renderer " /prefetch:-645351001
- '%ProgramFiles(x86)%\opera\29.0.1795.47\opera.exe' --type=utility --channel="288.10.1362663139\686783774" --lang=en-US --enable-proprietary-media-types-playback --ignored=" --type=renderer " /prefetch:-645351001
- '%ProgramFiles(x86)%\opera\29.0.1795.47\opera.exe' --type=utility --channel="288.9.2046463173\1478629496" --lang=en-US --enable-proprietary-media-types-playback --ignored=" --type=renderer " /prefetch:-645351001
- '%ProgramFiles(x86)%\opera\29.0.1795.47\opera.exe' --type=utility --channel="288.8.531814374\1516124560" --lang=en-US --enable-proprietary-media-types-playback --ignored=" --type=renderer " /prefetch:-645351001
- '%ProgramFiles(x86)%\opera\29.0.1795.47\opera.exe' --type=utility --channel="288.7.428977153\1951444515" --lang=en-US --enable-proprietary-media-types-playback --ignored=" --type=renderer " /prefetch:-645351001
- '%ProgramFiles(x86)%\opera\29.0.1795.47\opera_crashreporter.exe' --type=utility --channel="288.4.1212476855\1763992509" --lang=en-US --no-sandbox --enable-proprietary-media-types-playback /prefetch:-645351001 /crash-reporter-parent-id=964
- '%ProgramFiles(x86)%\opera\29.0.1795.47\opera.exe' --type=utility --channel="288.6.1484982457\1177285966" --lang=en-US --enable-proprietary-media-types-playback --ignored=" --type=renderer " /prefetch:-645351001
- '%ProgramFiles(x86)%\opera\29.0.1795.47\opera.exe' --type=utility --channel="288.16.36780404\353974346" --lang=en-US --enable-proprietary-media-types-playback --ignored=" --type=renderer " /prefetch:-645351001
- '%ProgramFiles(x86)%\opera\29.0.1795.47\opera.exe' --type=utility --channel="288.5.185930905\1097014547" --lang=en-US --enable-proprietary-media-types-playback --ignored=" --type=renderer " /prefetch:-645351001
- '%ProgramFiles(x86)%\opera\29.0.1795.47\opera.exe' --type=renderer --alt-high-dpi-setting=96 --disable-direct-npapi-requests --enable-deferred-image-decoding --lang=en-US --enable-proprietary-media-types-playback --extension-process --enable-we...
- '%ProgramFiles(x86)%\opera\29.0.1795.47\opera.exe' --type=renderer --alt-high-dpi-setting=96 --disable-direct-npapi-requests --enable-deferred-image-decoding --lang=en-US --enable-proprietary-media-types-playback --disable-client-side-phishing-...
- '%ProgramFiles(x86)%\opera\29.0.1795.47\opera.exe' --type=gpu-process --channel="288.0.477689904\576730416" --enable-proprietary-media-types-playback --supports-dual-gpus=false --gpu-driver-bug-workarounds=1,19,42 --gpu-vendor-id=0x0000 --gpu-d...
- '%ProgramFiles(x86)%\opera\29.0.1795.47\opera_crashreporter.exe' -noautoupdate --ran-launcher -- https://getintoway.com/ /crash-reporter-parent-id=288
- '%ProgramFiles(x86)%\opera\29.0.1795.47\opera.exe' -noautoupdate --ran-launcher -- https://getintoway.com/
- '%ProgramFiles(x86)%\opera\launcher.exe' -noautoupdate -- "https://getintoway.com/"
- '%WINDIR%\syswow64\cmd.exe' /c ""%TEMP%\RarSFX0\32or64.cmd" "
- '<SYSTEM32>\regsvr32.exe' /s "%ProgramFiles%\LopeSoft\FileMenu Tools\FileMenuTools64.dll"
- '%WINDIR%\syswow64\regsvr32.exe' /s "%ProgramFiles%\LopeSoft\FileMenu Tools\FileMenuTools64.dll"
- '%ProgramFiles(x86)%\opera\29.0.1795.47\opera.exe' --type=utility --channel="288.4.1212476855\1763992509" --lang=en-US --no-sandbox --enable-proprietary-media-types-playback /prefetch:-645351001
- '%ProgramFiles(x86)%\opera\29.0.1795.47\opera.exe' --type=utility --channel="288.17.212844122\1336841480" --lang=en-US --enable-proprietary-media-types-playback --ignored=" --type=renderer " /prefetch:-645351001
