Техническая информация
- '<SYSTEM32>\msiexec.exe' /i "%TEMP%\RarSFX0\vc_runtimeAdditional_x86.msi"
- '<SYSTEM32>\msiexec.exe' /V
- '<SYSTEM32>\msiexec.exe' /i "%TEMP%\RarSFX0\vc_runtimeMinimum_x86.msi"
- C:\System Volume Information\_restore{E7F0F64C-F7E5-4319-8757-E9A20C1C4E14}\RP17\snapshot\_REGISTRY_USER_.DEFAULT
- C:\System Volume Information\_restore{E7F0F64C-F7E5-4319-8757-E9A20C1C4E14}\RP17\snapshot\_REGISTRY_MACHINE_SECURITY
- C:\System Volume Information\_restore{E7F0F64C-F7E5-4319-8757-E9A20C1C4E14}\RP17\snapshot\_REGISTRY_MACHINE_SOFTWARE
- C:\System Volume Information\_restore{E7F0F64C-F7E5-4319-8757-E9A20C1C4E14}\RP17\snapshot\_REGISTRY_USER_USRCLASS_S-1-5-20
- C:\System Volume Information\_restore{E7F0F64C-F7E5-4319-8757-E9A20C1C4E14}\RP17\snapshot\_REGISTRY_USER_NTUSER_S-1-5-21-2052111302-484763869-725345543-1003
- C:\System Volume Information\_restore{E7F0F64C-F7E5-4319-8757-E9A20C1C4E14}\RP17\snapshot\_REGISTRY_USER_USRCLASS_S-1-5-21-2052111302-484763869-725345543-1003
- C:\System Volume Information\_restore{E7F0F64C-F7E5-4319-8757-E9A20C1C4E14}\RP17\snapshot\domain.txt
- C:\System Volume Information\_restore{E7F0F64C-F7E5-4319-8757-E9A20C1C4E14}\RP16\drivetable.txt
- C:\System Volume Information\_restore{E7F0F64C-F7E5-4319-8757-E9A20C1C4E14}\RP17\snapshot\Repository\$WinMgmt.CFG
- C:\System Volume Information\_restore{E7F0F64C-F7E5-4319-8757-E9A20C1C4E14}\RP17\snapshot\_REGISTRY_MACHINE_SYSTEM
- C:\System Volume Information\_restore{E7F0F64C-F7E5-4319-8757-E9A20C1C4E14}\RP17\snapshot\_REGISTRY_MACHINE_SAM
- C:\System Volume Information\_restore{E7F0F64C-F7E5-4319-8757-E9A20C1C4E14}\RP17\snapshot\ComDb.Dat
- C:\System Volume Information\_restore{E7F0F64C-F7E5-4319-8757-E9A20C1C4E14}\RP17\snapshot\_REGISTRY_USER_NTUSER_S-1-5-20
- <SYSTEM32>\msvcp110.dll
- <SYSTEM32>\msvcr110.dll
- %TEMP%\MSI3aa99.LOG
- C:\System Volume Information\_restore{E7F0F64C-F7E5-4319-8757-E9A20C1C4E14}\RP16\RestorePointSize
- C:\Config.Msi\31c75.rbs
- <SYSTEM32>\atl110.dll
- C:\System Volume Information\_restore{E7F0F64C-F7E5-4319-8757-E9A20C1C4E14}\RP17\snapshot\_REGISTRY_USER_NTUSER_S-1-5-18
- C:\System Volume Information\_restore{E7F0F64C-F7E5-4319-8757-E9A20C1C4E14}\RP17\snapshot\_REGISTRY_USER_NTUSER_S-1-5-19
- C:\System Volume Information\_restore{E7F0F64C-F7E5-4319-8757-E9A20C1C4E14}\RP17\snapshot\_REGISTRY_USER_USRCLASS_S-1-5-19
- %TEMP%\3aa9a.msi
- %WINDIR%\Installer\31c77.msi
- C:\System Volume Information\_restore{E7F0F64C-F7E5-4319-8757-E9A20C1C4E14}\RP17\rp.log
- C:\System Volume Information\_restore{E7F0F64C-F7E5-4319-8757-E9A20C1C4E14}\RP17\snapshot\Repository\FS\INDEX.BTR
- <SYSTEM32>\mfc110fra.dll
- <SYSTEM32>\mfc110ita.dll
- <SYSTEM32>\mfc110jpn.dll
- <SYSTEM32>\mfc110deu.dll
- <SYSTEM32>\mfc110enu.dll
- <SYSTEM32>\mfc110esn.dll
- <SYSTEM32>\mfcm110.dll
- <SYSTEM32>\mfcm110u.dll
- <SYSTEM32>\vcomp110.dll
- <SYSTEM32>\mfc110kor.dll
- <SYSTEM32>\mfc110rus.dll
- <SYSTEM32>\mfc110u.dll
- <SYSTEM32>\mfc110cht.dll
- C:\System Volume Information\_restore{E7F0F64C-F7E5-4319-8757-E9A20C1C4E14}\RP17\snapshot\Repository\FS\MAPPING2.MAP
- C:\System Volume Information\_restore{E7F0F64C-F7E5-4319-8757-E9A20C1C4E14}\RP17\snapshot\Repository\FS\OBJECTS.DATA
- %WINDIR%\Installer\MSI4.tmp
- C:\System Volume Information\_restore{E7F0F64C-F7E5-4319-8757-E9A20C1C4E14}\RP17\snapshot\Repository\FS\INDEX.MAP
- C:\System Volume Information\_restore{E7F0F64C-F7E5-4319-8757-E9A20C1C4E14}\RP17\snapshot\Repository\FS\MAPPING.VER
- C:\System Volume Information\_restore{E7F0F64C-F7E5-4319-8757-E9A20C1C4E14}\RP17\snapshot\Repository\FS\MAPPING1.MAP
- C:\Config.Msi\31c7a.rbs
- <SYSTEM32>\mfc110.dll
- <SYSTEM32>\mfc110chs.dll
- C:\System Volume Information\_restore{E7F0F64C-F7E5-4319-8757-E9A20C1C4E14}\RP17\snapshot\Repository\FS\OBJECTS.MAP
- C:\System Volume Information\_restore{E7F0F64C-F7E5-4319-8757-E9A20C1C4E14}\RP17\RestorePointSize
- C:\System Volume Information\_restore{E7F0F64C-F7E5-4319-8757-E9A20C1C4E14}\fifo.log
- C:\System Volume Information\_restore{E7F0F64C-F7E5-4319-8757-E9A20C1C4E14}\RP16\snapshot\Repository\FS\OBJECTS.MAP
- %TEMP%\RarSFX0\Win\System\msvcr110.dll
- %TEMP%\RarSFX0\Win\System\vcamp110.dll
- %TEMP%\RarSFX0\Win\System\vccorlib110.dll
- %TEMP%\RarSFX0\Win\System\mfcm110.dll
- %TEMP%\RarSFX0\Win\System\mfcm110u.dll
- %TEMP%\RarSFX0\Win\System\msvcp110.dll
- %TEMP%\MSI30b4c.LOG
- %TEMP%\30b4d.msi
- %WINDIR%\Installer\31c72.msi
- %TEMP%\RarSFX0\Win\System\vcomp110.dll
- %TEMP%\RarSFX0\vc_runtimeAdditional_x86.msi
- %TEMP%\RarSFX0\vc_runtimeMinimum_x86.msi
- %TEMP%\RarSFX0\Win\System\mfc110u.dll
- %TEMP%\RarSFX0\Win\System\mfc110cht.dll
- %TEMP%\RarSFX0\Win\System\mfc110deu.dll
- %TEMP%\RarSFX0\Win\System\mfc110enu.dll
- %TEMP%\RarSFX0\Win\System\atl110.dll
- %TEMP%\RarSFX0\Win\System\mfc110.dll
- %TEMP%\RarSFX0\Win\System\mfc110chs.dll
- %TEMP%\RarSFX0\Win\System\mfc110jpn.dll
- %TEMP%\RarSFX0\Win\System\mfc110kor.dll
- %TEMP%\RarSFX0\Win\System\mfc110rus.dll
- %TEMP%\RarSFX0\Win\System\mfc110esn.dll
- %TEMP%\RarSFX0\Win\System\mfc110fra.dll
- %TEMP%\RarSFX0\Win\System\mfc110ita.dll
- C:\System Volume Information\_restore{E7F0F64C-F7E5-4319-8757-E9A20C1C4E14}\RP16\rp.log
- C:\System Volume Information\_restore{E7F0F64C-F7E5-4319-8757-E9A20C1C4E14}\RP16\snapshot\Repository\$WinMgmt.CFG
- C:\System Volume Information\_restore{E7F0F64C-F7E5-4319-8757-E9A20C1C4E14}\RP16\snapshot\Repository\FS\INDEX.BTR
- C:\System Volume Information\_restore{E7F0F64C-F7E5-4319-8757-E9A20C1C4E14}\RP16\snapshot\domain.txt
- C:\System Volume Information\_restore{E7F0F64C-F7E5-4319-8757-E9A20C1C4E14}\drivetable.txt
- C:\System Volume Information\_restore{E7F0F64C-F7E5-4319-8757-E9A20C1C4E14}\RP15\drivetable.txt
- C:\System Volume Information\_restore{E7F0F64C-F7E5-4319-8757-E9A20C1C4E14}\RP16\snapshot\Repository\FS\MAPPING2.MAP
- C:\System Volume Information\_restore{E7F0F64C-F7E5-4319-8757-E9A20C1C4E14}\RP16\snapshot\Repository\FS\OBJECTS.DATA
- %WINDIR%\Installer\MSI1.tmp
- C:\System Volume Information\_restore{E7F0F64C-F7E5-4319-8757-E9A20C1C4E14}\RP16\snapshot\Repository\FS\INDEX.MAP
- C:\System Volume Information\_restore{E7F0F64C-F7E5-4319-8757-E9A20C1C4E14}\RP16\snapshot\Repository\FS\MAPPING.VER
- C:\System Volume Information\_restore{E7F0F64C-F7E5-4319-8757-E9A20C1C4E14}\RP16\snapshot\Repository\FS\MAPPING1.MAP
- C:\System Volume Information\_restore{E7F0F64C-F7E5-4319-8757-E9A20C1C4E14}\RP16\snapshot\ComDb.Dat
- C:\System Volume Information\_restore{E7F0F64C-F7E5-4319-8757-E9A20C1C4E14}\RP16\snapshot\_REGISTRY_USER_NTUSER_S-1-5-20
- C:\System Volume Information\_restore{E7F0F64C-F7E5-4319-8757-E9A20C1C4E14}\RP16\snapshot\_REGISTRY_USER_USRCLASS_S-1-5-20
- C:\System Volume Information\_restore{E7F0F64C-F7E5-4319-8757-E9A20C1C4E14}\RP16\snapshot\_REGISTRY_USER_NTUSER_S-1-5-21-2052111302-484763869-725345543-1003
- C:\System Volume Information\_restore{E7F0F64C-F7E5-4319-8757-E9A20C1C4E14}\RP16\snapshot\_REGISTRY_USER_NTUSER_S-1-5-18
- C:\System Volume Information\_restore{E7F0F64C-F7E5-4319-8757-E9A20C1C4E14}\RP16\snapshot\_REGISTRY_USER_NTUSER_S-1-5-19
- C:\System Volume Information\_restore{E7F0F64C-F7E5-4319-8757-E9A20C1C4E14}\RP16\snapshot\_REGISTRY_USER_USRCLASS_S-1-5-19
- C:\System Volume Information\_restore{E7F0F64C-F7E5-4319-8757-E9A20C1C4E14}\RP16\snapshot\_REGISTRY_MACHINE_SOFTWARE
- C:\System Volume Information\_restore{E7F0F64C-F7E5-4319-8757-E9A20C1C4E14}\RP16\snapshot\_REGISTRY_MACHINE_SYSTEM
- C:\System Volume Information\_restore{E7F0F64C-F7E5-4319-8757-E9A20C1C4E14}\RP16\snapshot\_REGISTRY_MACHINE_SAM
- C:\System Volume Information\_restore{E7F0F64C-F7E5-4319-8757-E9A20C1C4E14}\RP16\snapshot\_REGISTRY_USER_USRCLASS_S-1-5-21-2052111302-484763869-725345543-1003
- C:\System Volume Information\_restore{E7F0F64C-F7E5-4319-8757-E9A20C1C4E14}\RP16\snapshot\_REGISTRY_USER_.DEFAULT
- C:\System Volume Information\_restore{E7F0F64C-F7E5-4319-8757-E9A20C1C4E14}\RP16\snapshot\_REGISTRY_MACHINE_SECURITY
- %TEMP%\RarSFX0\Win\System\mfc110jpn.dll
- %TEMP%\RarSFX0\Win\System\mfc110ita.dll
- %TEMP%\RarSFX0\Win\System\mfc110rus.dll
- %TEMP%\RarSFX0\Win\System\mfc110kor.dll
- %TEMP%\RarSFX0\Win\System\mfc110enu.dll
- %TEMP%\RarSFX0\Win\System\mfc110deu.dll
- %TEMP%\RarSFX0\Win\System\mfc110fra.dll
- %TEMP%\RarSFX0\Win\System\mfc110esn.dll
- %TEMP%\RarSFX0\Win\System\vcamp110.dll
- %TEMP%\RarSFX0\Win\System\msvcr110.dll
- %TEMP%\RarSFX0\Win\System\vcomp110.dll
- %TEMP%\RarSFX0\Win\System\vccorlib110.dll
- %TEMP%\RarSFX0\Win\System\mfcm110.dll
- %TEMP%\RarSFX0\Win\System\mfc110u.dll
- %TEMP%\RarSFX0\Win\System\msvcp110.dll
- %TEMP%\RarSFX0\Win\System\mfcm110u.dll
- %WINDIR%\Installer\MSI4.tmp
- %TEMP%\30b4d.msi
- %WINDIR%\Installer\31c77.msi
- C:\Config.Msi\31c7a.rbs
- C:\Config.Msi\31c75.rbs
- %WINDIR%\Installer\MSI1.tmp
- %WINDIR%\Installer\31c74.ipi
- %WINDIR%\Installer\31c72.msi
- %TEMP%\RarSFX0\Win\System\mfc110.dll
- %TEMP%\RarSFX0\Win\System\atl110.dll
- %TEMP%\RarSFX0\Win\System\mfc110cht.dll
- %TEMP%\RarSFX0\Win\System\mfc110chs.dll
- %TEMP%\3aa9a.msi
- %WINDIR%\Installer\31c79.ipi
- %TEMP%\RarSFX0\vc_runtimeMinimum_x86.msi
- %TEMP%\RarSFX0\vc_runtimeAdditional_x86.msi
- ClassName: 'Shell_TrayWnd' WindowName: '(null)'
- ClassName: 'EDIT' WindowName: '(null)'