Trojan.Siggen22.57944

Техническая информация

Для обеспечения автозапуска и распространения

Модифицирует следующие ключи реестра

[HKLM\Software\Classes\Applications\RegCloneCD.exe\shell\open\command] '' = '"%ProgramFiles(x86)%\SlySoft\CloneCD\RegCloneCD.exe" "%1"'
[HKLM\Software\Classes\SlySoft.CloneCD.1\shell\open\command] '' = '"%ProgramFiles(x86)%\SlySoft\CloneCD\RegCloneCD.exe" "%1"'
[HKLM\Software\Wow6432Node\Microsoft\Windows\CurrentVersion\Run] 'CloneCDTray' = '"%ProgramFiles(x86)%\SlySoft\CloneCD\CloneCDTray.exe" /s'

Устанавливает следующие настройки сервисов

[HKLM\System\CurrentControlSet\Services\ElbyCDIO] 'Start' = '00000001'
[HKLM\System\CurrentControlSet\Services\ElbyCDIO] 'ImagePath' = 'System32\Drivers\ElbyCDIO.sys'
[HKLM\System\CurrentControlSet\Services\ElbyCDFL] 'ImagePath' = 'System32\Drivers\ElbyCDFL.sys'

Создает следующие сервисы

'ElbyCDIO' System32\Drivers\ElbyCDIO.sys

Изменения в файловой системе

Создает следующие файлы

%TEMP%\rarsfx0\cleanup.bat
%ProgramFiles(x86)%\slysoft\clonecd\manual\pl\index.html
%ProgramFiles(x86)%\slysoft\clonecd\manual\pl\images\write_settings.gif
%ProgramFiles(x86)%\slysoft\clonecd\manual\pl\images\write.gif
%ProgramFiles(x86)%\slysoft\clonecd\manual\pl\images\tray_menu.gif
%ProgramFiles(x86)%\slysoft\clonecd\manual\pl\images\tray_icon.gif
%ProgramFiles(x86)%\slysoft\clonecd\manual\pl\images\settings.gif
%ProgramFiles(x86)%\slysoft\clonecd\manual\pl\images\read_settings.gif
%ProgramFiles(x86)%\slysoft\clonecd\manual\pl\images\read.gif
%ProgramFiles(x86)%\slysoft\clonecd\manual\pl\images\profiles.gif
%ProgramFiles(x86)%\slysoft\clonecd\manual\pl\images\main.gif
%ProgramFiles(x86)%\slysoft\clonecd\manual\pl\images\log_book.gif
%ProgramFiles(x86)%\slysoft\clonecd\manual\pl\images\error_skip.gif
%ProgramFiles(x86)%\slysoft\clonecd\manual\pl\images\erase.gif
%ProgramFiles(x86)%\slysoft\clonecd\manual\pl\images\device_write_settings.gif
%ProgramFiles(x86)%\slysoft\clonecd\manual\pl\images\device_read_settings.gif
%ProgramFiles(x86)%\slysoft\clonecd\manual\pl\images\device_error_skip.gif
%ProgramFiles(x86)%\slysoft\clonecd\manual\pl\images\copy.gif
%ProgramFiles(x86)%\slysoft\clonecd\manual\pl\help.html
%ProgramFiles(x86)%\slysoft\clonecd\manual\pl\images\audio_read_settings.gif
%ProgramFiles(x86)%\slysoft\clonecd\manual\pl\log.html
%ProgramFiles(x86)%\slysoft\clonecd\manual\pl\main.html
%ProgramFiles(x86)%\slysoft\clonecd\texts\ccdtrayca.lng
%ProgramFiles(x86)%\slysoft\clonecd\texts\ccdtraybr.lng
%ProgramFiles(x86)%\slysoft\clonecd\texts\ccdtraybig5.lng
%ProgramFiles(x86)%\slysoft\clonecd\texts\ccdtraybg.lng
%ProgramFiles(x86)%\slysoft\clonecd\texts\ccdtrayar.lng
%ProgramFiles(x86)%\slysoft\clonecd\sounds\wait.wav
%ProgramFiles(x86)%\slysoft\clonecd\sounds\success.wav
%ProgramFiles(x86)%\slysoft\clonecd\sounds\error.wav
%ProgramFiles(x86)%\slysoft\clonecd\profiles\multimedia audio cd.ccp
%ProgramFiles(x86)%\slysoft\clonecd\texts\ccdtrayde.lng
%ProgramFiles(x86)%\slysoft\clonecd\profiles\game cd.ccp
%ProgramFiles(x86)%\slysoft\clonecd\profiles\dvd.ccp
%ProgramFiles(x86)%\slysoft\clonecd\profiles\data cd.ccp
%ProgramFiles(x86)%\slysoft\clonecd\profiles\audio cd.ccp
%ProgramFiles(x86)%\slysoft\clonecd\manual\sly.css
%ProgramFiles(x86)%\slysoft\clonecd\manual\pl\tray.html
%ProgramFiles(x86)%\slysoft\clonecd\manual\pl\settings.html
%ProgramFiles(x86)%\slysoft\clonecd\manual\pl\profiles.html
%ProgramFiles(x86)%\slysoft\clonecd\profiles\protected pc game.ccp
%ProgramFiles(x86)%\slysoft\clonecd\texts\ccdtraycz.lng
%ProgramFiles(x86)%\slysoft\clonecd\manual\jp\tray.html
%ProgramFiles(x86)%\slysoft\clonecd\manual\pl\command.html
%ProgramFiles(x86)%\slysoft\clonecd\manual\jp\help.html
%ProgramFiles(x86)%\slysoft\clonecd\manual\jp\device.html
%ProgramFiles(x86)%\slysoft\clonecd\manual\jp\command.html
%ProgramFiles(x86)%\slysoft\clonecd\manual\it\tray.html
%ProgramFiles(x86)%\slysoft\clonecd\manual\it\settings.html
%ProgramFiles(x86)%\slysoft\clonecd\manual\it\profiles.html
%ProgramFiles(x86)%\slysoft\clonecd\manual\it\main.html
%ProgramFiles(x86)%\slysoft\clonecd\manual\it\log.html
%ProgramFiles(x86)%\slysoft\clonecd\manual\it\index.html
%ProgramFiles(x86)%\slysoft\clonecd\manual\it\images\write_settings.gif
%ProgramFiles(x86)%\slysoft\clonecd\manual\it\images\write.gif
%ProgramFiles(x86)%\slysoft\clonecd\manual\it\images\tray_menu.gif
%ProgramFiles(x86)%\slysoft\clonecd\manual\it\images\tray_icon.gif
%ProgramFiles(x86)%\slysoft\clonecd\manual\it\images\settings.gif
%ProgramFiles(x86)%\slysoft\clonecd\manual\it\images\read_settings.gif
%ProgramFiles(x86)%\slysoft\clonecd\manual\it\images\read.gif
%ProgramFiles(x86)%\slysoft\clonecd\manual\jp\images\audio_read_settings.gif
%ProgramFiles(x86)%\slysoft\clonecd\manual\pl\device.html
%ProgramFiles(x86)%\slysoft\clonecd\manual\jp\images\device_error_skip.gif
%ProgramFiles(x86)%\slysoft\clonecd\manual\jp\images\device_read_settings.gif
%ProgramFiles(x86)%\slysoft\clonecd\manual\jp\images\device_write_settings.gif
%ProgramFiles(x86)%\slysoft\clonecd\manual\jp\profiles.html
%ProgramFiles(x86)%\slysoft\clonecd\manual\jp\main.html
%ProgramFiles(x86)%\slysoft\clonecd\manual\jp\log.html
%ProgramFiles(x86)%\slysoft\clonecd\manual\jp\index.html
%ProgramFiles(x86)%\slysoft\clonecd\manual\jp\images\write_settings.gif
%ProgramFiles(x86)%\slysoft\clonecd\manual\jp\images\write.gif
%ProgramFiles(x86)%\slysoft\clonecd\manual\jp\images\tray_menu.gif
%ProgramFiles(x86)%\slysoft\clonecd\manual\jp\images\tray_icon.gif
%ProgramFiles(x86)%\slysoft\clonecd\manual\jp\images\settings.gif
%ProgramFiles(x86)%\slysoft\clonecd\manual\jp\images\read_settings.gif
%ProgramFiles(x86)%\slysoft\clonecd\manual\jp\images\read.gif
%ProgramFiles(x86)%\slysoft\clonecd\manual\jp\images\profiles.gif
%ProgramFiles(x86)%\slysoft\clonecd\manual\jp\images\main.gif
%ProgramFiles(x86)%\slysoft\clonecd\manual\jp\images\log_book.gif
%ProgramFiles(x86)%\slysoft\clonecd\manual\jp\images\error_skip.gif
%ProgramFiles(x86)%\slysoft\clonecd\manual\jp\images\erase.gif
%ProgramFiles(x86)%\slysoft\clonecd\manual\jp\settings.html
%ProgramFiles(x86)%\slysoft\clonecd\manual\es\images\read.gif
%ProgramFiles(x86)%\slysoft\clonecd\texts\ccdtraydk.lng
%ProgramFiles(x86)%\slysoft\clonecd\texts\clonecdse.lng
%ProgramFiles(x86)%\slysoft\clonecd\texts\clonecdfr.lng
%ProgramFiles(x86)%\slysoft\clonecd\texts\clonecdru.lng
%ProgramFiles(x86)%\slysoft\clonecd\texts\clonecdpt.lng
%ProgramFiles(x86)%\slysoft\clonecd\texts\clonecdps.lng
%ProgramFiles(x86)%\slysoft\clonecd\texts\clonecdpl.lng
%ProgramFiles(x86)%\slysoft\clonecd\texts\clonecdno.lng
%ProgramFiles(x86)%\slysoft\clonecd\texts\clonecdnl.lng
%ProgramFiles(x86)%\slysoft\clonecd\texts\clonecdmy.lng
%ProgramFiles(x86)%\slysoft\clonecd\texts\clonecdmk.lng
%ProgramFiles(x86)%\slysoft\clonecd\texts\clonecdlt.lng
%ProgramFiles(x86)%\slysoft\clonecd\texts\clonecdkr.lng
%ProgramFiles(x86)%\slysoft\clonecd\texts\clonecdjp.lng
%ProgramFiles(x86)%\slysoft\clonecd\texts\clonecdit.lng
%ProgramFiles(x86)%\slysoft\clonecd\texts\clonecdhu.lng
%ProgramFiles(x86)%\slysoft\clonecd\texts\clonecdhr.lng
%ProgramFiles(x86)%\slysoft\clonecd\texts\clonecdhe.lng
%ProgramFiles(x86)%\slysoft\clonecd\texts\clonecdgb.lng
%ProgramFiles(x86)%\slysoft\clonecd\texts\clonecdsl.lng
%ProgramFiles(x86)%\slysoft\clonecd\texts\clonecdsk.lng
%ProgramFiles(x86)%\slysoft\clonecd\texts\clonecdth.lng
%ProgramFiles(x86)%\slysoft\clonecd\texts\clonecdfi.lng
%ALLUSERSPROFILE%\start menu\programs\clonecd\clonecd tray.lnk
%ALLUSERSPROFILE%\start menu\programs\clonecd\clonecd revision history.lnk
%ALLUSERSPROFILE%\start menu\programs\clonecd\clonecd help.lnk
%WINDIR%\temp\udd5cc0.tmp
C:\users\public\desktop\clonecd.lnk
%ALLUSERSPROFILE%\microsoft\windows\start menu\programs\slysoft\clonecd\clonecd revision history.lnk
%ALLUSERSPROFILE%\microsoft\windows\start menu\programs\slysoft\clonecd\register clonecd.lnk
%ALLUSERSPROFILE%\microsoft\windows\start menu\programs\slysoft\clonecd\clonecd help.lnk
%ALLUSERSPROFILE%\microsoft\windows\start menu\programs\slysoft\clonecd\clonecd.lnk
%ProgramFiles(x86)%\slysoft\clonecd\texts\ccdtrayel.lng
%WINDIR%\temp\udd580e.tmp
<DRIVERS>\elbycdfl.sys
<DRIVERS>\elbycdio.sys
%WINDIR%\syswow64\drivers\elbycdfl.sys
%WINDIR%\syswow64\elbycdio.dll
%ProgramFiles(x86)%\slysoft\clonecd\texts\clonecdtr.lng
%ProgramFiles(x86)%\slysoft\clonecd\texts\clonecdsv.lng
%ALLUSERSPROFILE%\start menu\programs\clonecd\clonecd.lnk
%ProgramFiles(x86)%\slysoft\clonecd\texts\clonecdfa.lng
%ProgramFiles(x86)%\slysoft\clonecd\texts\clonecdet.lng
%ProgramFiles(x86)%\slysoft\clonecd\texts\ccdtrayno.lng
%ProgramFiles(x86)%\slysoft\clonecd\texts\ccdtraymy.lng
%ProgramFiles(x86)%\slysoft\clonecd\texts\ccdtraymk.lng
%ProgramFiles(x86)%\slysoft\clonecd\texts\ccdtraylt.lng
%ProgramFiles(x86)%\slysoft\clonecd\texts\ccdtraykr.lng
%ProgramFiles(x86)%\slysoft\clonecd\texts\ccdtrayjp.lng
%ProgramFiles(x86)%\slysoft\clonecd\texts\ccdtrayit.lng
%ProgramFiles(x86)%\slysoft\clonecd\texts\ccdtrayhu.lng
%ProgramFiles(x86)%\slysoft\clonecd\texts\ccdtrayhe.lng
%ProgramFiles(x86)%\slysoft\clonecd\texts\ccdtraygb.lng
%ProgramFiles(x86)%\slysoft\clonecd\texts\ccdtrayfr.lng
%ProgramFiles(x86)%\slysoft\clonecd\texts\ccdtrayfi.lng
%ProgramFiles(x86)%\slysoft\clonecd\texts\ccdtrayfa.lng
%ProgramFiles(x86)%\slysoft\clonecd\texts\ccdtrayet.lng
%ProgramFiles(x86)%\slysoft\clonecd\texts\ccdtrayes.lng
%ProgramFiles(x86)%\slysoft\clonecd\texts\ccdtrayen.lng
%ProgramFiles(x86)%\slysoft\clonecd\texts\ccdtraypl.lng
%ProgramFiles(x86)%\slysoft\clonecd\texts\ccdtrayps.lng
%ProgramFiles(x86)%\slysoft\clonecd\texts\ccdtraypt.lng
%ProgramFiles(x86)%\slysoft\clonecd\texts\ccdtraynl.lng
%ProgramFiles(x86)%\slysoft\clonecd\texts\ccdtrayru.lng
%ProgramFiles(x86)%\slysoft\clonecd\texts\clonecden.lng
%ProgramFiles(x86)%\slysoft\clonecd\texts\clonecdes.lng
%ProgramFiles(x86)%\slysoft\clonecd\texts\clonecdel.lng
%ProgramFiles(x86)%\slysoft\clonecd\texts\clonecddk.lng
%ProgramFiles(x86)%\slysoft\clonecd\texts\clonecdde.lng
%ProgramFiles(x86)%\slysoft\clonecd\texts\clonecdcz.lng
%ProgramFiles(x86)%\slysoft\clonecd\texts\clonecdcoreres.h
%ProgramFiles(x86)%\slysoft\clonecd\texts\clonecdca.lng
%ProgramFiles(x86)%\slysoft\clonecd\manual\it\images\profiles.gif
%ProgramFiles(x86)%\slysoft\clonecd\manual\jp\images\copy.gif
%ProgramFiles(x86)%\slysoft\clonecd\texts\clonecdbr.lng
%ProgramFiles(x86)%\slysoft\clonecd\texts\clonecdar.lng
%ProgramFiles(x86)%\slysoft\clonecd\texts\ccdtraytr.lng
%ProgramFiles(x86)%\slysoft\clonecd\texts\ccdtraysv.lng
%ProgramFiles(x86)%\slysoft\clonecd\texts\ccdtraystrings.h
%ProgramFiles(x86)%\slysoft\clonecd\texts\ccdtraysl.lng
%ProgramFiles(x86)%\slysoft\clonecd\texts\ccdtraysk.lng
%ProgramFiles(x86)%\slysoft\clonecd\texts\ccdtrayse.lng
%ProgramFiles(x86)%\slysoft\clonecd\texts\clonecdbig5.lng
%ProgramFiles(x86)%\slysoft\clonecd\texts\clonecdbg.lng
%ProgramFiles(x86)%\slysoft\clonecd\manual\it\images\main.gif
%ProgramFiles(x86)%\slysoft\clonecd\manual\it\images\log_book.gif
%ProgramFiles(x86)%\slysoft\clonecd\manual\it\images\error_skip.gif
%ProgramFiles(x86)%\slysoft\clonecd\graphics\readertowriter.bmp
%ProgramFiles(x86)%\slysoft\clonecd\manual\de\images\error_skip.gif
%ProgramFiles(x86)%\slysoft\clonecd\manual\de\images\erase.gif
%ProgramFiles(x86)%\slysoft\clonecd\manual\de\images\device_write_settings.gif
%ProgramFiles(x86)%\slysoft\clonecd\manual\de\images\device_read_settings.gif
%ProgramFiles(x86)%\slysoft\clonecd\manual\de\images\device_error_skip.gif
%ProgramFiles(x86)%\slysoft\clonecd\manual\de\images\copy.gif
%ProgramFiles(x86)%\slysoft\clonecd\manual\de\images\audio_read_settings.gif
%ProgramFiles(x86)%\slysoft\clonecd\manual\de\help.html
%ProgramFiles(x86)%\slysoft\clonecd\manual\de\device.html
%ProgramFiles(x86)%\slysoft\clonecd\manual\de\command.html
%ProgramFiles(x86)%\slysoft\clonecd\graphics\write.ini
%ProgramFiles(x86)%\slysoft\clonecd\graphics\write.avi
%ProgramFiles(x86)%\slysoft\clonecd\graphics\stop.bmp
%ProgramFiles(x86)%\slysoft\clonecd\graphics\skin.ini
%ProgramFiles(x86)%\slysoft\clonecd\graphics\selected.ico
%ProgramFiles(x86)%\slysoft\clonecd\graphics\search.avi
%ProgramFiles(x86)%\slysoft\clonecd\graphics\read.ini
%ProgramFiles(x86)%\slysoft\clonecd\manual\de\images\main.gif
%ProgramFiles(x86)%\slysoft\clonecd\manual\de\images\profiles.gif
%ProgramFiles(x86)%\slysoft\clonecd\manual\de\images\read.gif
%ProgramFiles(x86)%\slysoft\clonecd\manual\de\images\read_settings.gif
%ProgramFiles(x86)%\slysoft\clonecd\manual\en\images\copy.gif
%ProgramFiles(x86)%\slysoft\clonecd\manual\en\images\audio_read_settings.gif
%ProgramFiles(x86)%\slysoft\clonecd\manual\en\help.html
%ProgramFiles(x86)%\slysoft\clonecd\manual\en\device.html
%ProgramFiles(x86)%\slysoft\clonecd\manual\en\command.html
%ProgramFiles(x86)%\slysoft\clonecd\manual\de\tray.html
%ProgramFiles(x86)%\slysoft\clonecd\manual\de\settings.html
%ProgramFiles(x86)%\slysoft\clonecd\manual\de\profiles.html
%ProgramFiles(x86)%\slysoft\clonecd\manual\de\main.html
%ProgramFiles(x86)%\slysoft\clonecd\manual\de\log.html
%ProgramFiles(x86)%\slysoft\clonecd\manual\de\index.html
%ProgramFiles(x86)%\slysoft\clonecd\manual\de\images\write_settings.gif
%ProgramFiles(x86)%\slysoft\clonecd\manual\de\images\write.gif
%ProgramFiles(x86)%\slysoft\clonecd\manual\de\images\tray_menu.gif
%ProgramFiles(x86)%\slysoft\clonecd\manual\de\images\tray_icon.gif
%ProgramFiles(x86)%\slysoft\clonecd\manual\de\images\settings.gif
%ProgramFiles(x86)%\slysoft\clonecd\manual\en\images\device_error_skip.gif
%ProgramFiles(x86)%\slysoft\clonecd\graphics\readertofile.bmp
%ProgramFiles(x86)%\slysoft\clonecd\graphics\read.avi
%ProgramFiles(x86)%\slysoft\clonecd\graphics\download.avi
%ProgramFiles(x86)%\slysoft\clonecd\elbyecc.dll
%ProgramFiles(x86)%\slysoft\clonecd\clonecdtray.exe
%ProgramFiles(x86)%\slysoft\clonecd\clonecd.exe
%ProgramFiles(x86)%\slysoft\clonecd\changes.txt
%ProgramFiles(x86)%\slysoft\clonecd\ccddriver.dll
%ALLUSERSPROFILE%\microsoft\windows\start menu\programs\slysoft\clonecd\uninstall.lnk
%ProgramFiles(x86)%\slysoft\clonecd\ccd-uninst.ini
%ProgramFiles(x86)%\slysoft\clonecd\ccd-uninst.exe
%ProgramFiles(x86)%\slysoft\clonecd\installhelp.dll
%TEMP%\nst49cc.tmp\installhelp.dll
%TEMP%\rarsfx0\reg.reg
%TEMP%\rarsfx0\icon.ico
%TEMP%\rarsfx0\crack\key.clonecd
%TEMP%\rarsfx0\winborgxp-app-installer.au3
%TEMP%\rarsfx0\winborgxp-app-installer.exe
%TEMP%\rarsfx0\setupclonecd5313.exe
%ProgramFiles(x86)%\slysoft\clonecd\regclonecd.exe
%ProgramFiles(x86)%\slysoft\clonecd\writedvd.dll
%ProgramFiles(x86)%\slysoft\clonecd\helplauncher.exe
%ProgramFiles(x86)%\slysoft\clonecd\graphics\audiocd.bmp
%ProgramFiles(x86)%\slysoft\clonecd\graphics\multimediacd.bmp
%ProgramFiles(x86)%\slysoft\clonecd\graphics\bigcddrive.bmp
%ProgramFiles(x86)%\slysoft\clonecd\graphics\insertwrite.avi
%ProgramFiles(x86)%\slysoft\clonecd\graphics\insertread.avi
%ProgramFiles(x86)%\slysoft\clonecd\graphics\gamecd.bmp
%ProgramFiles(x86)%\slysoft\clonecd\graphics\filetowriter.bmp
%ProgramFiles(x86)%\slysoft\clonecd\graphics\erase.ini
%ProgramFiles(x86)%\slysoft\clonecd\graphics\erase.bmp
%ProgramFiles(x86)%\slysoft\clonecd\graphics\erase.avi
%ALLUSERSPROFILE%\start menu\programs\clonecd\register clonecd.lnk
%ProgramFiles(x86)%\slysoft\clonecd\manual\en\images\device_read_settings.gif
%ProgramFiles(x86)%\slysoft\clonecd\graphics\deselected.ico
%ProgramFiles(x86)%\slysoft\clonecd\graphics\datacd.bmp
%ProgramFiles(x86)%\slysoft\clonecd\graphics\customcd.bmp
%ProgramFiles(x86)%\slysoft\clonecd\graphics\copy.ini
%ProgramFiles(x86)%\slysoft\clonecd\graphics\copy.avi
%ProgramFiles(x86)%\slysoft\clonecd\graphics\cdrdrive.bmp
%ProgramFiles(x86)%\slysoft\clonecd\graphics\cddrive.bmp
%ProgramFiles(x86)%\slysoft\clonecd\graphics\bigcdrdrive.bmp
%ProgramFiles(x86)%\slysoft\clonecd\graphics\emulationcd.bmp
%ALLUSERSPROFILE%\microsoft\windows\start menu\programs\slysoft\clonecd\clonecd tray.lnk
%ProgramFiles(x86)%\slysoft\clonecd\manual\en\images\device_write_settings.gif
%ProgramFiles(x86)%\slysoft\clonecd\manual\es\device.html
%ProgramFiles(x86)%\slysoft\clonecd\manual\fr\command.html
%ProgramFiles(x86)%\slysoft\clonecd\manual\fr\images\write.gif
%ProgramFiles(x86)%\slysoft\clonecd\manual\fr\images\tray_menu.gif
%ProgramFiles(x86)%\slysoft\clonecd\manual\fr\images\tray_icon.gif
%ProgramFiles(x86)%\slysoft\clonecd\manual\fr\images\settings.gif
%ProgramFiles(x86)%\slysoft\clonecd\manual\fr\images\read_settings.gif
%ProgramFiles(x86)%\slysoft\clonecd\manual\fr\images\read.gif
%ProgramFiles(x86)%\slysoft\clonecd\manual\fr\images\profiles.gif
%ProgramFiles(x86)%\slysoft\clonecd\manual\fr\images\main.gif
%ProgramFiles(x86)%\slysoft\clonecd\manual\fr\images\log_book.gif
%ProgramFiles(x86)%\slysoft\clonecd\manual\fr\images\error_skip.gif
%ProgramFiles(x86)%\slysoft\clonecd\manual\fr\images\erase.gif
%ProgramFiles(x86)%\slysoft\clonecd\manual\fr\images\device_write_settings.gif
%ProgramFiles(x86)%\slysoft\clonecd\manual\fr\images\device_read_settings.gif
%ProgramFiles(x86)%\slysoft\clonecd\manual\fr\images\device_error_skip.gif
%ProgramFiles(x86)%\slysoft\clonecd\manual\fr\images\copy.gif
%ProgramFiles(x86)%\slysoft\clonecd\manual\fr\images\audio_read_settings.gif
%ProgramFiles(x86)%\slysoft\clonecd\manual\fr\images\write_settings.gif
%ProgramFiles(x86)%\slysoft\clonecd\manual\fr\help.html
%ProgramFiles(x86)%\slysoft\clonecd\manual\fr\log.html
%ProgramFiles(x86)%\slysoft\clonecd\manual\fr\main.html
%ProgramFiles(x86)%\slysoft\clonecd\manual\it\command.html
%ProgramFiles(x86)%\slysoft\clonecd\manual\it\images\erase.gif
%ProgramFiles(x86)%\slysoft\clonecd\manual\it\images\device_write_settings.gif
%ProgramFiles(x86)%\slysoft\clonecd\manual\it\images\device_read_settings.gif
%ProgramFiles(x86)%\slysoft\clonecd\manual\it\images\device_error_skip.gif
%ProgramFiles(x86)%\slysoft\clonecd\manual\it\images\copy.gif
%ProgramFiles(x86)%\slysoft\clonecd\manual\it\images\audio_read_settings.gif
%ProgramFiles(x86)%\slysoft\clonecd\manual\it\help.html
%ProgramFiles(x86)%\slysoft\clonecd\manual\it\device.html
%ProgramFiles(x86)%\slysoft\clonecd\manual\images\sly_medium.gif
%ProgramFiles(x86)%\slysoft\clonecd\manual\de\images\log_book.gif
%ProgramFiles(x86)%\slysoft\clonecd\manual\images\pixel.gif
%ProgramFiles(x86)%\slysoft\clonecd\manual\images\left_light.gif
%ProgramFiles(x86)%\slysoft\clonecd\manual\images\clone_cd_large.gif
%ProgramFiles(x86)%\slysoft\clonecd\manual\fr\tray.html
%ProgramFiles(x86)%\slysoft\clonecd\manual\fr\settings.html
%ProgramFiles(x86)%\slysoft\clonecd\manual\fr\profiles.html
%ProgramFiles(x86)%\slysoft\clonecd\manual\fr\index.html
%ProgramFiles(x86)%\slysoft\clonecd\manual\fr\device.html
%ProgramFiles(x86)%\slysoft\clonecd\manual\es\tray.html
%ProgramFiles(x86)%\slysoft\clonecd\manual\es\settings.html
%ProgramFiles(x86)%\slysoft\clonecd\manual\es\help.html
%ProgramFiles(x86)%\slysoft\clonecd\manual\en\tray.html
%ProgramFiles(x86)%\slysoft\clonecd\manual\en\settings.html
%ProgramFiles(x86)%\slysoft\clonecd\manual\en\profiles.html
%ProgramFiles(x86)%\slysoft\clonecd\manual\en\main.html
%ProgramFiles(x86)%\slysoft\clonecd\manual\en\log.html
%ProgramFiles(x86)%\slysoft\clonecd\manual\en\index.html
%ProgramFiles(x86)%\slysoft\clonecd\manual\en\images\write_settings.gif
%ProgramFiles(x86)%\slysoft\clonecd\manual\en\images\write.gif
%ProgramFiles(x86)%\slysoft\clonecd\manual\en\images\tray_menu.gif
%ProgramFiles(x86)%\slysoft\clonecd\manual\en\images\tray_icon.gif
%ProgramFiles(x86)%\slysoft\clonecd\manual\en\images\settings.gif
%ProgramFiles(x86)%\slysoft\clonecd\manual\en\images\read_settings.gif
%ProgramFiles(x86)%\slysoft\clonecd\manual\en\images\read.gif
%ProgramFiles(x86)%\slysoft\clonecd\manual\en\images\profiles.gif
%ProgramFiles(x86)%\slysoft\clonecd\manual\en\images\main.gif
%ProgramFiles(x86)%\slysoft\clonecd\manual\en\images\log_book.gif
%ProgramFiles(x86)%\slysoft\clonecd\manual\es\command.html
%ProgramFiles(x86)%\slysoft\clonecd\manual\es\images\audio_read_settings.gif
%ProgramFiles(x86)%\slysoft\clonecd\manual\es\main.html
%ProgramFiles(x86)%\slysoft\clonecd\manual\es\images\device_error_skip.gif
%ProgramFiles(x86)%\slysoft\clonecd\manual\es\profiles.html
%ProgramFiles(x86)%\slysoft\clonecd\manual\es\images\copy.gif
%ProgramFiles(x86)%\slysoft\clonecd\manual\es\log.html
%ProgramFiles(x86)%\slysoft\clonecd\manual\es\index.html
%ProgramFiles(x86)%\slysoft\clonecd\manual\es\images\write_settings.gif
%ProgramFiles(x86)%\slysoft\clonecd\manual\es\images\write.gif
%ProgramFiles(x86)%\slysoft\clonecd\manual\es\images\tray_menu.gif
%ProgramFiles(x86)%\slysoft\clonecd\manual\es\images\tray_icon.gif
%ProgramFiles(x86)%\slysoft\clonecd\manual\en\images\error_skip.gif
%ProgramFiles(x86)%\slysoft\clonecd\manual\es\images\settings.gif
%ProgramFiles(x86)%\slysoft\clonecd\manual\es\images\read_settings.gif
%ProgramFiles(x86)%\slysoft\clonecd\manual\es\images\profiles.gif
%ProgramFiles(x86)%\slysoft\clonecd\manual\es\images\main.gif
%ProgramFiles(x86)%\slysoft\clonecd\manual\es\images\log_book.gif
%ProgramFiles(x86)%\slysoft\clonecd\manual\es\images\error_skip.gif
%ProgramFiles(x86)%\slysoft\clonecd\manual\es\images\erase.gif
%ProgramFiles(x86)%\slysoft\clonecd\manual\es\images\device_write_settings.gif
%ProgramFiles(x86)%\slysoft\clonecd\manual\es\images\device_read_settings.gif
%ProgramFiles(x86)%\slysoft\clonecd\manual\en\images\erase.gif
%ALLUSERSPROFILE%\start menu\programs\clonecd\uninstall.lnk

Присваивает атрибут 'скрытый' для следующих файлов

%ProgramFiles(x86)%\slysoft\clonecd\ccd-uninst.ini

Удаляет следующие файлы

%WINDIR%\temp\udd580e.tmp
%TEMP%\nst49cc.tmp\installhelp.dll
%WINDIR%\temp\udd5cc0.tmp

Перемещает следующие файлы

%TEMP%\rarsfx0\crack\key.clonecd в %ProgramFiles(x86)%\slysoft\clonecd\key.clonecd
%ALLUSERSPROFILE%\start menu\programs\clonecd\clonecd.lnk в %ALLUSERSPROFILE%\start menu\programs\clonecd\clonecd 5.3.1.3.lnk

Другое

Ищет следующие окна

ClassName: 'EDIT' WindowName: ''
ClassName: 'MainWClass' WindowName: 'ElbyTrayWindow'
ClassName: 'RegEdit_RegEdit' WindowName: ''

Создает и запускает на исполнение

'%TEMP%\rarsfx0\winborgxp-app-installer.exe'
'%TEMP%\rarsfx0\setupclonecd5313.exe' /S
'%ProgramFiles(x86)%\slysoft\clonecd\clonecdtray.exe' /s

Запускает на исполнение

'%WINDIR%\syswow64\regedit.exe' /S reg.reg
'%WINDIR%\syswow64\cmd.exe' /c ""%TEMP%\RarSFX0\cleanup.bat" "
'%WINDIR%\syswow64\xcopy.exe' "%ALLUSERSPROFILE%\Start Menu\Programs\SlySoft\CloneCD" "%ALLUSERSPROFILE%\Start Menu\Programs\CloneCD" /Y

Технологии

Термины

Обучение и просвещение

Мифы

Техническая информация

Рекомендации по лечению

Демо бесплатно на 14 дней