Техническая информация
Для обеспечения автозапуска и распространения:
Создает следующие сервисы:
- [<HKLM>\SYSTEM\ControlSet001\Services\SuperMounter] 'Start' = '00000001'
- [<HKLM>\SYSTEM\ControlSet001\Services\AFPAnsi] 'Start' = '00000000'
Вредоносные функции:
Создает и запускает на исполнение:
- '%TEMP%\is-5A97C.tmp\susetup.tmp' /SL5="$1010A,3613220,140800,%TEMP%\RarSFX0\susetup.exe" /VERYSILENT /SUPPRESSMSGBOXES /NORESTART /SP-
- '%PROGRAM_FILES%\SuperLogix\Super Utilities\INSTAFP.exe'
- '%TEMP%\RarSFX0\boomer.exe' boomer.cmd
- '%TEMP%\RarSFX0\susetup.exe' /VERYSILENT /SUPPRESSMSGBOXES /NORESTART /SP-
Запускает на исполнение:
- '%WINDIR%\regedit.exe' /s context.reg
- '%WINDIR%\regedit.exe' /s supermounter.reg
- '<SYSTEM32>\regsvr32.exe' context.dll /s
- '<SYSTEM32>\cmd.exe' /c boomer.cmd
- '<SYSTEM32>\regsvr32.exe' /s "<SYSTEM32>\context.dll"
Изменения в файловой системе:
Создает следующие файлы:
- %PROGRAM_FILES%\SuperLogix\Super Utilities\script\_TreeView\is-QG8JE.tmp
- %PROGRAM_FILES%\SuperLogix\Super Utilities\script\_TreeView\is-HHVFM.tmp
- %PROGRAM_FILES%\SuperLogix\Super Utilities\script\_TreeView\is-4RNV5.tmp
- %PROGRAM_FILES%\SuperLogix\Super Utilities\script\_TreeView\is-NR1IP.tmp
- %PROGRAM_FILES%\SuperLogix\Super Utilities\script\_TreeView\is-EPA3J.tmp
- %PROGRAM_FILES%\SuperLogix\Super Utilities\script\_TreeView\is-4MPMR.tmp
- %PROGRAM_FILES%\SuperLogix\Super Utilities\script\_TreeView\is-HSONP.tmp
- %PROGRAM_FILES%\SuperLogix\Super Utilities\is-TR2LP.tmp
- %PROGRAM_FILES%\SuperLogix\Super Utilities\is-6T943.tmp
- <SYSTEM32>\is-2V4GS.tmp
- %PROGRAM_FILES%\SuperLogix\Super Utilities\script\_TreeView\is-N64B2.tmp
- %PROGRAM_FILES%\SuperLogix\Super Utilities\is-AAD4Q.tmp
- <SYSTEM32>\is-1CB3P.tmp
- %PROGRAM_FILES%\SuperLogix\Super Utilities\script\_TreeView\is-87RTF.tmp
- %PROGRAM_FILES%\SuperLogix\Super Utilities\skins\winxpblue\is-L7K1E.tmp
- %PROGRAM_FILES%\SuperLogix\Super Utilities\skins\winxpblue\is-M4H72.tmp
- %PROGRAM_FILES%\SuperLogix\Super Utilities\skins\winxpblue\is-OERBE.tmp
- %PROGRAM_FILES%\SuperLogix\Super Utilities\skins\winxpblue\is-9RM2U.tmp
- %PROGRAM_FILES%\SuperLogix\Super Utilities\skins\winxpblue\is-E1D3S.tmp
- %PROGRAM_FILES%\SuperLogix\Super Utilities\skins\winxpblue\is-UN75O.tmp
- %PROGRAM_FILES%\SuperLogix\Super Utilities\skins\winxpblue\is-TJFAI.tmp
- %PROGRAM_FILES%\SuperLogix\Super Utilities\script\_TreeView\is-7SB3A.tmp
- %PROGRAM_FILES%\SuperLogix\Super Utilities\script\_TreeView\is-LJVR8.tmp
- %PROGRAM_FILES%\SuperLogix\Super Utilities\script\_TreeView\is-J6568.tmp
- %PROGRAM_FILES%\SuperLogix\Super Utilities\script\is-LH1KF.tmp
- %PROGRAM_FILES%\SuperLogix\Super Utilities\script\_TreeView\is-4RDD8.tmp
- %PROGRAM_FILES%\SuperLogix\Super Utilities\script\_TreeView\is-JF1DC.tmp
- <SYSTEM32>\is-D7TB4.tmp
- <DRIVERS>\is-MJH59.tmp
- %PROGRAM_FILES%\SuperLogix\Super Utilities\is-PITHQ.tmp
- %PROGRAM_FILES%\SuperLogix\Super Utilities\is-2SEMM.tmp
- %PROGRAM_FILES%\SuperLogix\Super Utilities\is-S639N.tmp
- <DRIVERS>\is-03TJ8.tmp
- <DRIVERS>\is-T9HM7.tmp
- %ALLUSERSPROFILE%\Start Menu\Programs\Super Utilities\Super Utilities Pro.lnk
- %HOMEPATH%\Desktop\Super Utilities.lnk
- %APPDATA%\Microsoft\Internet Explorer\Quick Launch\Super Utilities.lnk
- %PROGRAM_FILES%\SuperLogix\Super Utilities\unins000.dat
- %ALLUSERSPROFILE%\Start Menu\Programs\Super Utilities\Help.lnk
- %ALLUSERSPROFILE%\Start Menu\Programs\Super Utilities\SuperLogix Home.lnk
- %ALLUSERSPROFILE%\Start Menu\Programs\Super Utilities\Uninstall Super Utilities.lnk
- %PROGRAM_FILES%\SuperLogix\Super Utilities\is-DA9T2.tmp
- %PROGRAM_FILES%\SuperLogix\Super Utilities\is-KDEJ1.tmp
- %PROGRAM_FILES%\SuperLogix\Super Utilities\is-RMQ01.tmp
- %PROGRAM_FILES%\SuperLogix\Super Utilities\is-PKRD9.tmp
- <SYSTEM32>\is-4JGHK.tmp
- <SYSTEM32>\is-RNC28.tmp
- %PROGRAM_FILES%\SuperLogix\Super Utilities\is-AK76L.tmp
- <SYSTEM32>\is-7BKCT.tmp
- %PROGRAM_FILES%\SuperLogix\Super Utilities\is-A6UUA.tmp
- %PROGRAM_FILES%\SuperLogix\Super Utilities\is-KB0FA.tmp
- %PROGRAM_FILES%\SuperLogix\Super Utilities\is-6FRBI.tmp
- %PROGRAM_FILES%\SuperLogix\Super Utilities\is-75IT5.tmp
- <SYSTEM32>\is-69R9O.tmp
- <SYSTEM32>\is-1ESGV.tmp
- %PROGRAM_FILES%\SuperLogix\Super Utilities\skins\winxpblue\is-5T9OD.tmp
- %PROGRAM_FILES%\SuperLogix\Super Utilities\skins\Office2007\is-8RDMN.tmp
- %PROGRAM_FILES%\SuperLogix\Super Utilities\skins\Office2007\is-E4VU3.tmp
- %PROGRAM_FILES%\SuperLogix\Super Utilities\skins\Office2007\is-10ST5.tmp
- %PROGRAM_FILES%\SuperLogix\Super Utilities\skins\Office2007\is-4SUN9.tmp
- %PROGRAM_FILES%\SuperLogix\Super Utilities\skins\Office2007\is-HI1G1.tmp
- %PROGRAM_FILES%\SuperLogix\Super Utilities\skins\Office2007\is-LKB33.tmp
- %PROGRAM_FILES%\SuperLogix\Super Utilities\skins\Office2007\is-PAURM.tmp
- %PROGRAM_FILES%\SuperLogix\Super Utilities\skins\Office2007\is-66EQR.tmp
- %PROGRAM_FILES%\SuperLogix\Super Utilities\skins\Windows7\is-B0E3E.tmp
- %PROGRAM_FILES%\SuperLogix\Super Utilities\skins\Windows7\is-986BJ.tmp
- %PROGRAM_FILES%\SuperLogix\Super Utilities\skins\Office2007\is-T164K.tmp
- %PROGRAM_FILES%\SuperLogix\Super Utilities\skins\Office2007\is-JS62K.tmp
- %PROGRAM_FILES%\SuperLogix\Super Utilities\skins\Office2007\is-SNNEP.tmp
- %PROGRAM_FILES%\SuperLogix\Super Utilities\skins\Office2007\is-DQOHV.tmp
- %TEMP%\RarSFX0\usde.ru.url
- %TEMP%\is-5A97C.tmp\susetup.tmp
- %TEMP%\is-CT6OR.tmp\_isetup\_shfoldr.dll
- %TEMP%\RarSFX0\boomer.cmd
- %TEMP%\RarSFX0\boomer.exe
- %TEMP%\RarSFX0\susetup.exe
- %PROGRAM_FILES%\SuperLogix\Super Utilities\is-BLKBN.tmp
- %PROGRAM_FILES%\SuperLogix\Super Utilities\languages\is-E9ARD.tmp
- %PROGRAM_FILES%\SuperLogix\Super Utilities\skins\Office2007\is-6QN9M.tmp
- %PROGRAM_FILES%\SuperLogix\Super Utilities\skins\Office2007\is-DQLSB.tmp
- %PROGRAM_FILES%\SuperLogix\Super Utilities\is-CTMGB.tmp
- %PROGRAM_FILES%\SuperLogix\Super Utilities\is-0Q06M.tmp
- %PROGRAM_FILES%\SuperLogix\Super Utilities\languages\is-QIJIJ.tmp
- %PROGRAM_FILES%\SuperLogix\Super Utilities\skins\Windows7\is-CHJ6M.tmp
- %PROGRAM_FILES%\SuperLogix\Super Utilities\skins\Windows7\is-JTE21.tmp
- %PROGRAM_FILES%\SuperLogix\Super Utilities\skins\Windows7\is-9O3VH.tmp
- %PROGRAM_FILES%\SuperLogix\Super Utilities\skins\Windows7\is-RMSHD.tmp
- %PROGRAM_FILES%\SuperLogix\Super Utilities\skins\Windows7\is-62HV2.tmp
- %PROGRAM_FILES%\SuperLogix\Super Utilities\skins\Windows7\is-2T7JU.tmp
- %PROGRAM_FILES%\SuperLogix\Super Utilities\skins\Windows7\is-OL77I.tmp
- %PROGRAM_FILES%\SuperLogix\Super Utilities\skins\winxpblue\is-QLM1U.tmp
- %PROGRAM_FILES%\SuperLogix\Super Utilities\skins\winxpblue\is-OB245.tmp
- %PROGRAM_FILES%\SuperLogix\Super Utilities\skins\winxpblue\is-B4T6U.tmp
- %PROGRAM_FILES%\SuperLogix\Super Utilities\skins\winxpblue\is-OMR65.tmp
- %PROGRAM_FILES%\SuperLogix\Super Utilities\skins\winxpblue\is-P7N8T.tmp
- %PROGRAM_FILES%\SuperLogix\Super Utilities\skins\winxpblue\is-UMDH0.tmp
- %PROGRAM_FILES%\SuperLogix\Super Utilities\skins\winxpblue\is-2JLJL.tmp
- %PROGRAM_FILES%\SuperLogix\Super Utilities\skins\Windows7\is-UCTEH.tmp
- %PROGRAM_FILES%\SuperLogix\Super Utilities\skins\Windows7\is-6CKAJ.tmp
- %PROGRAM_FILES%\SuperLogix\Super Utilities\skins\Windows7\is-43N3T.tmp
- %PROGRAM_FILES%\SuperLogix\Super Utilities\skins\Windows7\is-QOF6M.tmp
- %PROGRAM_FILES%\SuperLogix\Super Utilities\skins\Windows7\is-37T9B.tmp
- %PROGRAM_FILES%\SuperLogix\Super Utilities\skins\Windows7\is-CV8US.tmp
- %PROGRAM_FILES%\SuperLogix\Super Utilities\skins\Windows7\is-SB9JP.tmp
- %PROGRAM_FILES%\SuperLogix\Super Utilities\skins\Windows7\is-8J29T.tmp
- %PROGRAM_FILES%\SuperLogix\Super Utilities\skins\Windows7\is-VK2GO.tmp
- %PROGRAM_FILES%\SuperLogix\Super Utilities\skins\Windows7\is-K7M1F.tmp
- %PROGRAM_FILES%\SuperLogix\Super Utilities\skins\Windows7\is-7SPK9.tmp
- %PROGRAM_FILES%\SuperLogix\Super Utilities\skins\Windows7\is-0JF49.tmp
- %PROGRAM_FILES%\SuperLogix\Super Utilities\skins\Windows7\is-IGPR9.tmp
- %PROGRAM_FILES%\SuperLogix\Super Utilities\skins\Windows7\is-V7CEL.tmp
Удаляет следующие файлы:
- %TEMP%\RarSFX0\boomer.exe
- %TEMP%\RarSFX0\boomer.cmd
- %TEMP%\RarSFX0\usde.ru.url
- %TEMP%\RarSFX0\susetup.exe
- %TEMP%\is-5A97C.tmp\susetup.tmp
- %PROGRAM_FILES%\SuperLogix\Super Utilities\supermounter.reg
- %PROGRAM_FILES%\SuperLogix\Super Utilities\context.reg
- %TEMP%\is-CT6OR.tmp\_isetup\_shfoldr.dll
- %PROGRAM_FILES%\SuperLogix\Super Utilities\INSTAFP.exe
Перемещает следующие файлы:
- %PROGRAM_FILES%\SuperLogix\Super Utilities\script\_TreeView\is-NR1IP.tmp в %PROGRAM_FILES%\SuperLogix\Super Utilities\script\_TreeView\ftv2link.gif
- %PROGRAM_FILES%\SuperLogix\Super Utilities\script\_TreeView\is-EPA3J.tmp в %PROGRAM_FILES%\SuperLogix\Super Utilities\script\_TreeView\ftv2mlastnode.gif
- %PROGRAM_FILES%\SuperLogix\Super Utilities\script\_TreeView\is-4MPMR.tmp в %PROGRAM_FILES%\SuperLogix\Super Utilities\script\_TreeView\ftv2mnode.gif
- %PROGRAM_FILES%\SuperLogix\Super Utilities\script\_TreeView\is-LJVR8.tmp в %PROGRAM_FILES%\SuperLogix\Super Utilities\script\_TreeView\ftv2folderclosed.gif
- %PROGRAM_FILES%\SuperLogix\Super Utilities\script\_TreeView\is-J6568.tmp в %PROGRAM_FILES%\SuperLogix\Super Utilities\script\_TreeView\ftv2folderopen.gif
- %PROGRAM_FILES%\SuperLogix\Super Utilities\script\_TreeView\is-87RTF.tmp в %PROGRAM_FILES%\SuperLogix\Super Utilities\script\_TreeView\ftv2lastnode.gif
- %PROGRAM_FILES%\SuperLogix\Super Utilities\script\_TreeView\is-HSONP.tmp в %PROGRAM_FILES%\SuperLogix\Super Utilities\script\_TreeView\ftv2vertline.gif
- %PROGRAM_FILES%\SuperLogix\Super Utilities\script\_TreeView\is-N64B2.tmp в %PROGRAM_FILES%\SuperLogix\Super Utilities\script\_TreeView\tree.js
- %PROGRAM_FILES%\SuperLogix\Super Utilities\is-AAD4Q.tmp в %PROGRAM_FILES%\SuperLogix\Super Utilities\help.chm
- %PROGRAM_FILES%\SuperLogix\Super Utilities\script\_TreeView\is-QG8JE.tmp в %PROGRAM_FILES%\SuperLogix\Super Utilities\script\_TreeView\ftv2node.gif
- %PROGRAM_FILES%\SuperLogix\Super Utilities\script\_TreeView\is-HHVFM.tmp в %PROGRAM_FILES%\SuperLogix\Super Utilities\script\_TreeView\ftv2plastnode.gif
- %PROGRAM_FILES%\SuperLogix\Super Utilities\script\_TreeView\is-4RNV5.tmp в %PROGRAM_FILES%\SuperLogix\Super Utilities\script\_TreeView\ftv2pnode.gif
- %PROGRAM_FILES%\SuperLogix\Super Utilities\skins\winxpblue\is-UN75O.tmp в %PROGRAM_FILES%\SuperLogix\Super Utilities\skins\winxpblue\pw.bmp
- %PROGRAM_FILES%\SuperLogix\Super Utilities\skins\winxpblue\is-L7K1E.tmp в %PROGRAM_FILES%\SuperLogix\Super Utilities\skins\winxpblue\skin.ini
- %PROGRAM_FILES%\SuperLogix\Super Utilities\skins\winxpblue\is-M4H72.tmp в %PROGRAM_FILES%\SuperLogix\Super Utilities\skins\winxpblue\tool.in1
- %PROGRAM_FILES%\SuperLogix\Super Utilities\skins\winxpblue\is-5T9OD.tmp в %PROGRAM_FILES%\SuperLogix\Super Utilities\skins\winxpblue\main.bmp
- %PROGRAM_FILES%\SuperLogix\Super Utilities\skins\winxpblue\is-9RM2U.tmp в %PROGRAM_FILES%\SuperLogix\Super Utilities\skins\winxpblue\mask.bmp
- %PROGRAM_FILES%\SuperLogix\Super Utilities\skins\winxpblue\is-E1D3S.tmp в %PROGRAM_FILES%\SuperLogix\Super Utilities\skins\winxpblue\menuitems.bmp
- %PROGRAM_FILES%\SuperLogix\Super Utilities\script\_TreeView\is-4RDD8.tmp в %PROGRAM_FILES%\SuperLogix\Super Utilities\script\_TreeView\ftiens4.js
- %PROGRAM_FILES%\SuperLogix\Super Utilities\script\_TreeView\is-JF1DC.tmp в %PROGRAM_FILES%\SuperLogix\Super Utilities\script\_TreeView\ftv2blank.gif
- %PROGRAM_FILES%\SuperLogix\Super Utilities\script\_TreeView\is-7SB3A.tmp в %PROGRAM_FILES%\SuperLogix\Super Utilities\script\_TreeView\ftv2doc.gif
- %PROGRAM_FILES%\SuperLogix\Super Utilities\skins\winxpblue\is-OERBE.tmp в %PROGRAM_FILES%\SuperLogix\Super Utilities\skins\winxpblue\toolwindow.bmp
- %PROGRAM_FILES%\SuperLogix\Super Utilities\skins\winxpblue\is-TJFAI.tmp в %PROGRAM_FILES%\SuperLogix\Super Utilities\skins\winxpblue\toolwindowmask.bmp
- %PROGRAM_FILES%\SuperLogix\Super Utilities\script\is-LH1KF.tmp в %PROGRAM_FILES%\SuperLogix\Super Utilities\script\left.htm
- <SYSTEM32>\is-1CB3P.tmp в <SYSTEM32>\context.dll
- %PROGRAM_FILES%\SuperLogix\Super Utilities\is-KB0FA.tmp в %PROGRAM_FILES%\SuperLogix\Super Utilities\zlportio32.sys
- %PROGRAM_FILES%\SuperLogix\Super Utilities\is-6FRBI.tmp в %PROGRAM_FILES%\SuperLogix\Super Utilities\sugui32.dll
- %PROGRAM_FILES%\SuperLogix\Super Utilities\is-DA9T2.tmp в %PROGRAM_FILES%\SuperLogix\Super Utilities\DriverPack.dat
- <SYSTEM32>\is-69R9O.tmp в <SYSTEM32>\SuperMenuHook.dll
- <SYSTEM32>\is-1ESGV.tmp в <SYSTEM32>\baksm.dat
- %PROGRAM_FILES%\SuperLogix\Super Utilities\is-A6UUA.tmp в %PROGRAM_FILES%\SuperLogix\Super Utilities\bho.mdb
- <DRIVERS>\is-MJH59.tmp в <DRIVERS>\supermounter.sys
- %PROGRAM_FILES%\SuperLogix\Super Utilities\is-PITHQ.tmp в %PROGRAM_FILES%\SuperLogix\Super Utilities\INSTAFP.exe
- %PROGRAM_FILES%\SuperLogix\Super Utilities\is-2SEMM.tmp в %PROGRAM_FILES%\SuperLogix\Super Utilities\UNINSAFP.exe
- %PROGRAM_FILES%\SuperLogix\Super Utilities\is-S639N.tmp в %PROGRAM_FILES%\SuperLogix\Super Utilities\Exelock.exe
- <DRIVERS>\is-03TJ8.tmp в <DRIVERS>\AFPAnsi.sys
- <DRIVERS>\is-T9HM7.tmp в <DRIVERS>\AFPUni.sys
- <SYSTEM32>\is-D7TB4.tmp в <SYSTEM32>\Shreder.dll
- <SYSTEM32>\is-4JGHK.tmp в <SYSTEM32>\smh.dat
- <SYSTEM32>\is-RNC28.tmp в <SYSTEM32>\SuperRes.dll
- %PROGRAM_FILES%\SuperLogix\Super Utilities\is-TR2LP.tmp в %PROGRAM_FILES%\SuperLogix\Super Utilities\context.reg
- %PROGRAM_FILES%\SuperLogix\Super Utilities\is-6T943.tmp в %PROGRAM_FILES%\SuperLogix\Super Utilities\supermounter.reg
- <SYSTEM32>\is-2V4GS.tmp в <SYSTEM32>\vb6sock.dll
- %PROGRAM_FILES%\SuperLogix\Super Utilities\is-PKRD9.tmp в %PROGRAM_FILES%\SuperLogix\Super Utilities\SuperUtil.exe
- <SYSTEM32>\is-7BKCT.tmp в <SYSTEM32>\vbsbak.dat
- %PROGRAM_FILES%\SuperLogix\Super Utilities\is-75IT5.tmp в %PROGRAM_FILES%\SuperLogix\Super Utilities\Encrypt.dll
- %PROGRAM_FILES%\SuperLogix\Super Utilities\is-AK76L.tmp в %PROGRAM_FILES%\SuperLogix\Super Utilities\Auto.exe
- %PROGRAM_FILES%\SuperLogix\Super Utilities\is-KDEJ1.tmp в %PROGRAM_FILES%\SuperLogix\Super Utilities\shell.bmp
- %PROGRAM_FILES%\SuperLogix\Super Utilities\is-RMQ01.tmp в %PROGRAM_FILES%\SuperLogix\Super Utilities\sukernel.dll
- %PROGRAM_FILES%\SuperLogix\Super Utilities\skins\Office2007\is-T164K.tmp в %PROGRAM_FILES%\SuperLogix\Super Utilities\skins\Office2007\skin.ini
- %PROGRAM_FILES%\SuperLogix\Super Utilities\skins\Office2007\is-JS62K.tmp в %PROGRAM_FILES%\SuperLogix\Super Utilities\skins\Office2007\tool.in1
- %PROGRAM_FILES%\SuperLogix\Super Utilities\skins\Office2007\is-SNNEP.tmp в %PROGRAM_FILES%\SuperLogix\Super Utilities\skins\Office2007\toolwindow.bmp
- %PROGRAM_FILES%\SuperLogix\Super Utilities\skins\Office2007\is-E4VU3.tmp в %PROGRAM_FILES%\SuperLogix\Super Utilities\skins\Office2007\menuitems.bmp
- %PROGRAM_FILES%\SuperLogix\Super Utilities\skins\Office2007\is-10ST5.tmp в %PROGRAM_FILES%\SuperLogix\Super Utilities\skins\Office2007\pw.bmp
- %PROGRAM_FILES%\SuperLogix\Super Utilities\skins\Office2007\is-PAURM.tmp в %PROGRAM_FILES%\SuperLogix\Super Utilities\skins\Office2007\pwmask.bmp
- %PROGRAM_FILES%\SuperLogix\Super Utilities\skins\Windows7\is-CHJ6M.tmp в %PROGRAM_FILES%\SuperLogix\Super Utilities\skins\Windows7\closelayermask.bmp
- %PROGRAM_FILES%\SuperLogix\Super Utilities\skins\Windows7\is-37T9B.tmp в %PROGRAM_FILES%\SuperLogix\Super Utilities\skins\Windows7\controls.bmp
- %PROGRAM_FILES%\SuperLogix\Super Utilities\skins\Windows7\is-CV8US.tmp в %PROGRAM_FILES%\SuperLogix\Super Utilities\skins\Windows7\hw.bmp
- %PROGRAM_FILES%\SuperLogix\Super Utilities\skins\Office2007\is-66EQR.tmp в %PROGRAM_FILES%\SuperLogix\Super Utilities\skins\Office2007\toolwindowactive.bmp
- %PROGRAM_FILES%\SuperLogix\Super Utilities\skins\Windows7\is-B0E3E.tmp в %PROGRAM_FILES%\SuperLogix\Super Utilities\skins\Windows7\active.bmp
- %PROGRAM_FILES%\SuperLogix\Super Utilities\skins\Windows7\is-986BJ.tmp в %PROGRAM_FILES%\SuperLogix\Super Utilities\skins\Windows7\closelayer.bmp
- %PROGRAM_FILES%\SuperLogix\Super Utilities\languages\is-QIJIJ.tmp в %PROGRAM_FILES%\SuperLogix\Super Utilities\languages\en.ini
- %PROGRAM_FILES%\SuperLogix\Super Utilities\languages\is-E9ARD.tmp в %PROGRAM_FILES%\SuperLogix\Super Utilities\languages\ru.ini
- %PROGRAM_FILES%\SuperLogix\Super Utilities\skins\Office2007\is-6QN9M.tmp в %PROGRAM_FILES%\SuperLogix\Super Utilities\skins\Office2007\active.bmp
- %PROGRAM_FILES%\SuperLogix\Super Utilities\is-BLKBN.tmp в %PROGRAM_FILES%\SuperLogix\Super Utilities\unins000.exe
- %PROGRAM_FILES%\SuperLogix\Super Utilities\is-CTMGB.tmp в %PROGRAM_FILES%\SuperLogix\Super Utilities\recommendtype.ini
- %PROGRAM_FILES%\SuperLogix\Super Utilities\is-0Q06M.tmp в %PROGRAM_FILES%\SuperLogix\Super Utilities\filetype.ini
- %PROGRAM_FILES%\SuperLogix\Super Utilities\skins\Office2007\is-HI1G1.tmp в %PROGRAM_FILES%\SuperLogix\Super Utilities\skins\Office2007\main.bmp
- %PROGRAM_FILES%\SuperLogix\Super Utilities\skins\Office2007\is-LKB33.tmp в %PROGRAM_FILES%\SuperLogix\Super Utilities\skins\Office2007\mask.bmp
- %PROGRAM_FILES%\SuperLogix\Super Utilities\skins\Office2007\is-8RDMN.tmp в %PROGRAM_FILES%\SuperLogix\Super Utilities\skins\Office2007\mdibg.bmp
- %PROGRAM_FILES%\SuperLogix\Super Utilities\skins\Office2007\is-DQLSB.tmp в %PROGRAM_FILES%\SuperLogix\Super Utilities\skins\Office2007\controls.bmp
- %PROGRAM_FILES%\SuperLogix\Super Utilities\skins\Office2007\is-DQOHV.tmp в %PROGRAM_FILES%\SuperLogix\Super Utilities\skins\Office2007\hintwindow.bmp
- %PROGRAM_FILES%\SuperLogix\Super Utilities\skins\Office2007\is-4SUN9.tmp в %PROGRAM_FILES%\SuperLogix\Super Utilities\skins\Office2007\hintwindowmask.bmp
- %PROGRAM_FILES%\SuperLogix\Super Utilities\skins\Windows7\is-SB9JP.tmp в %PROGRAM_FILES%\SuperLogix\Super Utilities\skins\Windows7\hwmask.bmp
- %PROGRAM_FILES%\SuperLogix\Super Utilities\skins\Windows7\is-9O3VH.tmp в %PROGRAM_FILES%\SuperLogix\Super Utilities\skins\Windows7\toolwindowactive.bmp
- %PROGRAM_FILES%\SuperLogix\Super Utilities\skins\Windows7\is-RMSHD.tmp в %PROGRAM_FILES%\SuperLogix\Super Utilities\skins\Windows7\toolwindowmask.bmp
- %PROGRAM_FILES%\SuperLogix\Super Utilities\skins\winxpblue\is-QLM1U.tmp в %PROGRAM_FILES%\SuperLogix\Super Utilities\skins\winxpblue\active.bmp
- %PROGRAM_FILES%\SuperLogix\Super Utilities\skins\Windows7\is-2T7JU.tmp в %PROGRAM_FILES%\SuperLogix\Super Utilities\skins\Windows7\sysmenulayermask.bmp
- %PROGRAM_FILES%\SuperLogix\Super Utilities\skins\Windows7\is-OL77I.tmp в %PROGRAM_FILES%\SuperLogix\Super Utilities\skins\Windows7\tool.in1
- %PROGRAM_FILES%\SuperLogix\Super Utilities\skins\Windows7\is-JTE21.tmp в %PROGRAM_FILES%\SuperLogix\Super Utilities\skins\Windows7\toolwindow.bmp
- %PROGRAM_FILES%\SuperLogix\Super Utilities\skins\winxpblue\is-OB245.tmp в %PROGRAM_FILES%\SuperLogix\Super Utilities\skins\winxpblue\dialogwindowmask.bmp
- %PROGRAM_FILES%\SuperLogix\Super Utilities\skins\winxpblue\is-B4T6U.tmp в %PROGRAM_FILES%\SuperLogix\Super Utilities\skins\winxpblue\grids.bmp
- %PROGRAM_FILES%\SuperLogix\Super Utilities\skins\winxpblue\is-OMR65.tmp в %PROGRAM_FILES%\SuperLogix\Super Utilities\skins\winxpblue\hw.bmp
- %PROGRAM_FILES%\SuperLogix\Super Utilities\skins\winxpblue\is-P7N8T.tmp в %PROGRAM_FILES%\SuperLogix\Super Utilities\skins\winxpblue\controls.bmp
- %PROGRAM_FILES%\SuperLogix\Super Utilities\skins\winxpblue\is-UMDH0.tmp в %PROGRAM_FILES%\SuperLogix\Super Utilities\skins\winxpblue\dialog.in1
- %PROGRAM_FILES%\SuperLogix\Super Utilities\skins\winxpblue\is-2JLJL.tmp в %PROGRAM_FILES%\SuperLogix\Super Utilities\skins\winxpblue\dialogwindow.bmp
- %PROGRAM_FILES%\SuperLogix\Super Utilities\skins\Windows7\is-8J29T.tmp в %PROGRAM_FILES%\SuperLogix\Super Utilities\skins\Windows7\maxlayer.bmp
- %PROGRAM_FILES%\SuperLogix\Super Utilities\skins\Windows7\is-0JF49.tmp в %PROGRAM_FILES%\SuperLogix\Super Utilities\skins\Windows7\maxlayermask.bmp
- %PROGRAM_FILES%\SuperLogix\Super Utilities\skins\Windows7\is-IGPR9.tmp в %PROGRAM_FILES%\SuperLogix\Super Utilities\skins\Windows7\mdibg.bmp
- %PROGRAM_FILES%\SuperLogix\Super Utilities\skins\Windows7\is-6CKAJ.tmp в %PROGRAM_FILES%\SuperLogix\Super Utilities\skins\Windows7\inactive.bmp
- %PROGRAM_FILES%\SuperLogix\Super Utilities\skins\Windows7\is-43N3T.tmp в %PROGRAM_FILES%\SuperLogix\Super Utilities\skins\Windows7\main.bmp
- %PROGRAM_FILES%\SuperLogix\Super Utilities\skins\Windows7\is-QOF6M.tmp в %PROGRAM_FILES%\SuperLogix\Super Utilities\skins\Windows7\mask.bmp
- %PROGRAM_FILES%\SuperLogix\Super Utilities\skins\Windows7\is-7SPK9.tmp в %PROGRAM_FILES%\SuperLogix\Super Utilities\skins\Windows7\pw.bmp
- %PROGRAM_FILES%\SuperLogix\Super Utilities\skins\Windows7\is-UCTEH.tmp в %PROGRAM_FILES%\SuperLogix\Super Utilities\skins\Windows7\skin.ini
- %PROGRAM_FILES%\SuperLogix\Super Utilities\skins\Windows7\is-62HV2.tmp в %PROGRAM_FILES%\SuperLogix\Super Utilities\skins\Windows7\sysmenulayer.bmp
- %PROGRAM_FILES%\SuperLogix\Super Utilities\skins\Windows7\is-V7CEL.tmp в %PROGRAM_FILES%\SuperLogix\Super Utilities\skins\Windows7\menuitems.bmp
- %PROGRAM_FILES%\SuperLogix\Super Utilities\skins\Windows7\is-VK2GO.tmp в %PROGRAM_FILES%\SuperLogix\Super Utilities\skins\Windows7\minlayer.bmp
- %PROGRAM_FILES%\SuperLogix\Super Utilities\skins\Windows7\is-K7M1F.tmp в %PROGRAM_FILES%\SuperLogix\Super Utilities\skins\Windows7\minlayermask.bmp
Другое:
Ищет следующие окна:
- ClassName: 'RegEdit_RegEdit' WindowName: '(null)'
- ClassName: 'Shell_TrayWnd' WindowName: '(null)'
- ClassName: 'EDIT' WindowName: '(null)'
