DLA UŻYTKOWNIKÓW

Zamknij

Library
My library

+ Add to library

Search
Search

Contact us
24/7 Tech support | Rules regarding submitting

Send a message

A query form

Call us

+7 (495) 789-45-86

Forum
Profile

PL

RU CN DE EN ES FR IT JP KZ UZ PL BY
Zamknij
Support services
Scanners
Dr.Web vxCube
Trial
VCI investigations
Virus library
Knowledge base

Technologies

Terminology

Training and education

Myths

News

Trojan.DownLoader11.48600

Added to the Dr.Web virus database: 2014-12-03

Virus description added:

Technical Information

Malicious functions:
Creates and executes the following:
  • '%WINDIR%\PAExec.exe' -service
  • '%TEMP%\RarSFX0\x86\paexec.exe' -noname -i -s "%TEMP%\RarSFX0\Display Driver Uninstaller.exe"
  • '%TEMP%\RarSFX0\Display Driver Uninstaller.exe'
Executes the following:
  • '<SYSTEM32>\sc.exe' interrogate PAExec
  • '<SYSTEM32>\sc.exe' delete PAExec
  • '<SYSTEM32>\sc.exe' stop PAExec
Modifies file system :
Creates the following files:
  • %TEMP%\RarSFX0\settings\Languages\Portuguese\label10.txt
  • %TEMP%\RarSFX0\settings\Languages\Portuguese\label1.txt
  • %TEMP%\RarSFX0\settings\Languages\Portuguese\label4.txt
  • %TEMP%\RarSFX0\settings\Languages\Portuguese\label11.txt
  • %TEMP%\RarSFX0\settings\Languages\Portuguese\checkbox6.txt
  • %TEMP%\RarSFX0\settings\Languages\Portuguese\checkbox3amd.txt
  • %TEMP%\RarSFX0\settings\Languages\Portuguese\checkbox3.txt
  • %TEMP%\RarSFX0\settings\Languages\Portuguese\checkbox5.txt
  • %TEMP%\RarSFX0\settings\Languages\Portuguese\checkbox4.txt
  • %TEMP%\RarSFX0\settings\Languages\Portuguese\tooltip3.txt
  • %TEMP%\RarSFX0\settings\Languages\Portuguese\tooltip2.txt
  • %TEMP%\RarSFX0\settings\Languages\Portuguese\updatetextmethod.txt
  • %TEMP%\RarSFX0\settings\Languages\Portuguese\tos.txt
  • %TEMP%\RarSFX0\settings\Languages\Portuguese\tooltip1.txt
  • %TEMP%\RarSFX0\settings\Languages\Portuguese\label7.txt
  • %TEMP%\RarSFX0\settings\Languages\Portuguese\label5.txt
  • %TEMP%\RarSFX0\settings\Languages\Portuguese\msgbox.txt
  • %TEMP%\RarSFX0\settings\Languages\Portuguese\label9.txt
  • %TEMP%\RarSFX0\settings\Languages\Portuguese\checkbox2.txt
  • %TEMP%\RarSFX0\settings\Languages\Polish\msgbox.txt
  • %TEMP%\RarSFX0\settings\Languages\Polish\label9.txt
  • %TEMP%\RarSFX0\settings\Languages\Polish\tooltip2.txt
  • %TEMP%\RarSFX0\settings\Languages\Polish\tooltip1.txt
  • %TEMP%\RarSFX0\settings\Languages\Polish\label7.txt
  • %TEMP%\RarSFX0\settings\Languages\Polish\label11.txt
  • %TEMP%\RarSFX0\settings\Languages\Polish\label10.txt
  • %TEMP%\RarSFX0\settings\Languages\Polish\label5.txt
  • %TEMP%\RarSFX0\settings\Languages\Polish\label4.txt
  • %TEMP%\RarSFX0\settings\Languages\Portuguese\button3.txt
  • %TEMP%\RarSFX0\settings\Languages\Portuguese\button2.txt
  • %TEMP%\RarSFX0\settings\Languages\Portuguese\checkbox1.txt
  • %TEMP%\RarSFX0\settings\Languages\Portuguese\button4.txt
  • %TEMP%\RarSFX0\settings\Languages\Portuguese\button1.txt
  • %TEMP%\RarSFX0\settings\Languages\Polish\tos.txt
  • %TEMP%\RarSFX0\settings\Languages\Polish\tooltip3.txt
  • %TEMP%\RarSFX0\settings\Languages\Portuguese\about.txt
  • %TEMP%\RarSFX0\settings\Languages\Polish\updatetextmethod.txt
  • %TEMP%\RarSFX0\settings\Languages\Russian\about.txt
  • %TEMP%\RarSFX0\settings\Languages\Serbian (Cyrilic)\button1.txt
  • %TEMP%\RarSFX0\settings\Languages\Serbian (Cyrilic)\about.txt
  • %TEMP%\RarSFX0\settings\Languages\Serbian (Cyrilic)\button3.txt
  • %TEMP%\RarSFX0\settings\Languages\Serbian (Cyrilic)\button2.txt
  • %TEMP%\RarSFX0\settings\Languages\Russian\updatetextmethod.txt
  • %TEMP%\RarSFX0\settings\Languages\Russian\tooltip2.txt
  • %TEMP%\RarSFX0\settings\Languages\Russian\tooltip1.txt
  • %TEMP%\RarSFX0\settings\Languages\Russian\tos.txt
  • %TEMP%\RarSFX0\settings\Languages\Russian\tooltip3.txt
  • %TEMP%\RarSFX0\settings\Languages\Serbian (Cyrilic)\checkbox5.txt
  • %TEMP%\RarSFX0\settings\Languages\Serbian (Cyrilic)\checkbox4.txt
  • %TEMP%\RarSFX0\settings\Languages\Serbian (Cyrilic)\label1.txt
  • %TEMP%\RarSFX0\settings\Languages\Serbian (Cyrilic)\checkbox6.txt
  • %TEMP%\RarSFX0\settings\Languages\Serbian (Cyrilic)\checkbox3amd.txt
  • %TEMP%\RarSFX0\settings\Languages\Serbian (Cyrilic)\checkbox1.txt
  • %TEMP%\RarSFX0\settings\Languages\Serbian (Cyrilic)\button4.txt
  • %TEMP%\RarSFX0\settings\Languages\Serbian (Cyrilic)\checkbox3.txt
  • %TEMP%\RarSFX0\settings\Languages\Serbian (Cyrilic)\checkbox2.txt
  • %TEMP%\RarSFX0\settings\Languages\Russian\msgbox.txt
  • %TEMP%\RarSFX0\settings\Languages\Russian\checkbox3.txt
  • %TEMP%\RarSFX0\settings\Languages\Russian\checkbox2.txt
  • %TEMP%\RarSFX0\settings\Languages\Russian\checkbox4.txt
  • %TEMP%\RarSFX0\settings\Languages\Russian\checkbox3amd.txt
  • %TEMP%\RarSFX0\settings\Languages\Russian\checkbox1.txt
  • %TEMP%\RarSFX0\settings\Languages\Russian\button2.txt
  • %TEMP%\RarSFX0\settings\Languages\Russian\button1.txt
  • %TEMP%\RarSFX0\settings\Languages\Russian\button4.txt
  • %TEMP%\RarSFX0\settings\Languages\Russian\button3.txt
  • %TEMP%\RarSFX0\settings\Languages\Russian\label5.txt
  • %TEMP%\RarSFX0\settings\Languages\Russian\label4.txt
  • %TEMP%\RarSFX0\settings\Languages\Russian\label9.txt
  • %TEMP%\RarSFX0\settings\Languages\Russian\label7.txt
  • %TEMP%\RarSFX0\settings\Languages\Russian\label11.txt
  • %TEMP%\RarSFX0\settings\Languages\Russian\checkbox6.txt
  • %TEMP%\RarSFX0\settings\Languages\Russian\checkbox5.txt
  • %TEMP%\RarSFX0\settings\Languages\Russian\label10.txt
  • %TEMP%\RarSFX0\settings\Languages\Russian\label1.txt
  • %TEMP%\RarSFX0\settings\Languages\Polish\label1.txt
  • %TEMP%\RarSFX0\settings\Languages\Japanese\label1.txt
  • %TEMP%\RarSFX0\settings\Languages\Japanese\checkbox6.txt
  • %TEMP%\RarSFX0\settings\Languages\Japanese\label11.txt
  • %TEMP%\RarSFX0\settings\Languages\Japanese\label10.txt
  • %TEMP%\RarSFX0\settings\Languages\Japanese\checkbox5.txt
  • %TEMP%\RarSFX0\settings\Languages\Japanese\checkbox3.txt
  • %TEMP%\RarSFX0\settings\Languages\Japanese\checkbox2.txt
  • %TEMP%\RarSFX0\settings\Languages\Japanese\checkbox4.txt
  • %TEMP%\RarSFX0\settings\Languages\Japanese\checkbox3amd.txt
  • %TEMP%\RarSFX0\settings\Languages\Japanese\tooltip2.txt
  • %TEMP%\RarSFX0\settings\Languages\Japanese\tooltip1.txt
  • %TEMP%\RarSFX0\settings\Languages\Japanese\tos.txt
  • %TEMP%\RarSFX0\settings\Languages\Japanese\tooltip3.txt
  • %TEMP%\RarSFX0\settings\Languages\Japanese\msgbox.txt
  • %TEMP%\RarSFX0\settings\Languages\Japanese\label5.txt
  • %TEMP%\RarSFX0\settings\Languages\Japanese\label4.txt
  • %TEMP%\RarSFX0\settings\Languages\Japanese\label9.txt
  • %TEMP%\RarSFX0\settings\Languages\Japanese\label7.txt
  • %TEMP%\RarSFX0\settings\Languages\Japanese\checkbox1.txt
  • %TEMP%\RarSFX0\settings\Languages\Italian\label9.txt
  • %TEMP%\RarSFX0\settings\Languages\Italian\label7.txt
  • %TEMP%\RarSFX0\settings\Languages\Italian\tooltip1.txt
  • %TEMP%\RarSFX0\settings\Languages\Italian\msgbox.txt
  • %TEMP%\RarSFX0\settings\Languages\Italian\label5.txt
  • %TEMP%\RarSFX0\settings\Languages\Italian\label10.txt
  • %TEMP%\RarSFX0\settings\Languages\Italian\label1.txt
  • %TEMP%\RarSFX0\settings\Languages\Italian\label4.txt
  • %TEMP%\RarSFX0\settings\Languages\Italian\label11.txt
  • %TEMP%\RarSFX0\settings\Languages\Japanese\button2.txt
  • %TEMP%\RarSFX0\settings\Languages\Japanese\button1.txt
  • %TEMP%\RarSFX0\settings\Languages\Japanese\button4.txt
  • %TEMP%\RarSFX0\settings\Languages\Japanese\button3.txt
  • %TEMP%\RarSFX0\settings\Languages\Japanese\about.txt
  • %TEMP%\RarSFX0\settings\Languages\Italian\tooltip3.txt
  • %TEMP%\RarSFX0\settings\Languages\Italian\tooltip2.txt
  • %TEMP%\RarSFX0\settings\Languages\Italian\updatetextmethod.txt
  • %TEMP%\RarSFX0\settings\Languages\Italian\tos.txt
  • %TEMP%\RarSFX0\settings\Languages\Japanese\updatetextmethod.txt
  • %TEMP%\RarSFX0\settings\Languages\Polish\about.txt
  • %TEMP%\RarSFX0\settings\Languages\Korean\updatetextmethod.txt
  • %TEMP%\RarSFX0\settings\Languages\Polish\button2.txt
  • %TEMP%\RarSFX0\settings\Languages\Polish\button1.txt
  • %TEMP%\RarSFX0\settings\Languages\Korean\tos.txt
  • %TEMP%\RarSFX0\settings\Languages\Korean\tooltip1.txt
  • %TEMP%\RarSFX0\settings\Languages\Korean\msgbox.txt
  • %TEMP%\RarSFX0\settings\Languages\Korean\tooltip3.txt
  • %TEMP%\RarSFX0\settings\Languages\Korean\tooltip2.txt
  • %TEMP%\RarSFX0\settings\Languages\Polish\checkbox4.txt
  • %TEMP%\RarSFX0\settings\Languages\Polish\checkbox3amd.txt
  • %TEMP%\RarSFX0\settings\Languages\Polish\checkbox6.txt
  • %TEMP%\RarSFX0\settings\Languages\Polish\checkbox5.txt
  • %TEMP%\RarSFX0\settings\Languages\Polish\checkbox3.txt
  • %TEMP%\RarSFX0\settings\Languages\Polish\button4.txt
  • %TEMP%\RarSFX0\settings\Languages\Polish\button3.txt
  • %TEMP%\RarSFX0\settings\Languages\Polish\checkbox2.txt
  • %TEMP%\RarSFX0\settings\Languages\Polish\checkbox1.txt
  • %TEMP%\RarSFX0\settings\Languages\Korean\label9.txt
  • %TEMP%\RarSFX0\settings\Languages\Korean\checkbox2.txt
  • %TEMP%\RarSFX0\settings\Languages\Korean\checkbox1.txt
  • %TEMP%\RarSFX0\settings\Languages\Korean\checkbox3amd.txt
  • %TEMP%\RarSFX0\settings\Languages\Korean\checkbox3.txt
  • %TEMP%\RarSFX0\settings\Languages\Korean\button4.txt
  • %TEMP%\RarSFX0\settings\Languages\Korean\button1.txt
  • %TEMP%\RarSFX0\settings\Languages\Korean\about.txt
  • %TEMP%\RarSFX0\settings\Languages\Korean\button3.txt
  • %TEMP%\RarSFX0\settings\Languages\Korean\button2.txt
  • %TEMP%\RarSFX0\settings\Languages\Korean\label4.txt
  • %TEMP%\RarSFX0\settings\Languages\Korean\label11.txt
  • %TEMP%\RarSFX0\settings\Languages\Korean\label7.txt
  • %TEMP%\RarSFX0\settings\Languages\Korean\label5.txt
  • %TEMP%\RarSFX0\settings\Languages\Korean\label10.txt
  • %TEMP%\RarSFX0\settings\Languages\Korean\checkbox5.txt
  • %TEMP%\RarSFX0\settings\Languages\Korean\checkbox4.txt
  • %TEMP%\RarSFX0\settings\Languages\Korean\label1.txt
  • %TEMP%\RarSFX0\settings\Languages\Korean\checkbox6.txt
  • %TEMP%\RarSFX0\settings\Languages\Swedish\label11.txt
  • %TEMP%\RarSFX0\settings\Languages\Swedish\label10.txt
  • %TEMP%\RarSFX0\settings\Languages\Swedish\label5.txt
  • %TEMP%\RarSFX0\settings\Languages\Swedish\label4.txt
  • %TEMP%\RarSFX0\settings\Languages\Swedish\label1.txt
  • %TEMP%\RarSFX0\settings\Languages\Swedish\checkbox4.txt
  • %TEMP%\RarSFX0\settings\Languages\Swedish\checkbox3amd.txt
  • %TEMP%\RarSFX0\settings\Languages\Swedish\checkbox6.txt
  • %TEMP%\RarSFX0\settings\Languages\Swedish\checkbox5.txt
  • %TEMP%\RarSFX0\settings\Languages\Swedish\tos.txt
  • %TEMP%\RarSFX0\settings\Languages\Swedish\tooltip3.txt
  • %TEMP%\RarSFX0\settings\Languages\Ukrainian\about.txt
  • %TEMP%\RarSFX0\settings\Languages\Swedish\updatetextmethod.txt
  • %TEMP%\RarSFX0\settings\Languages\Swedish\tooltip2.txt
  • %TEMP%\RarSFX0\settings\Languages\Swedish\label9.txt
  • %TEMP%\RarSFX0\settings\Languages\Swedish\label7.txt
  • %TEMP%\RarSFX0\settings\Languages\Swedish\tooltip1.txt
  • %TEMP%\RarSFX0\settings\Languages\Swedish\msgbox.txt
  • %TEMP%\RarSFX0\settings\Languages\Swedish\checkbox3.txt
  • %TEMP%\RarSFX0\settings\Languages\Spanish\tooltip1.txt
  • %TEMP%\RarSFX0\settings\Languages\Spanish\msgbox.txt
  • %TEMP%\RarSFX0\settings\Languages\Spanish\tooltip3.txt
  • %TEMP%\RarSFX0\settings\Languages\Spanish\tooltip2.txt
  • %TEMP%\RarSFX0\settings\Languages\Spanish\label9.txt
  • %TEMP%\RarSFX0\settings\Languages\Spanish\label4.txt
  • %TEMP%\RarSFX0\settings\Languages\Spanish\label11.txt
  • %TEMP%\RarSFX0\settings\Languages\Spanish\label7.txt
  • %TEMP%\RarSFX0\settings\Languages\Spanish\label5.txt
  • %TEMP%\RarSFX0\settings\Languages\Swedish\button4.txt
  • %TEMP%\RarSFX0\settings\Languages\Swedish\button3.txt
  • %TEMP%\RarSFX0\settings\Languages\Swedish\checkbox2.txt
  • %TEMP%\RarSFX0\settings\Languages\Swedish\checkbox1.txt
  • %TEMP%\RarSFX0\settings\Languages\Swedish\button2.txt
  • %TEMP%\RarSFX0\settings\Languages\Spanish\updatetextmethod.txt
  • %TEMP%\RarSFX0\settings\Languages\Spanish\tos.txt
  • %TEMP%\RarSFX0\settings\Languages\Swedish\button1.txt
  • %TEMP%\RarSFX0\settings\Languages\Swedish\about.txt
  • %TEMP%\RarSFX0\settings\Languages\Ukrainian\button1.txt
  • %TEMP%\RarSFX0\settings\NVIDIA\driverfiles.cfg
  • %TEMP%\RarSFX0\settings\NVIDIA\clsidleftover.cfg
  • %TEMP%\RarSFX0\settings\NVIDIA\packages.cfg
  • %TEMP%\RarSFX0\settings\NVIDIA\interface.cfg
  • %TEMP%\RarSFX0\settings\NVIDIA\classroot.cfg
  • %TEMP%\RarSFX0\settings\Languages\Ukrainian\tooltip3.txt
  • %TEMP%\RarSFX0\settings\Languages\Ukrainian\tooltip2.txt
  • %TEMP%\RarSFX0\settings\Languages\Ukrainian\updatetextmethod.txt
  • %TEMP%\RarSFX0\settings\Languages\Ukrainian\tos.txt
  • %WINDIR%\PAExec.exe
  • %TEMP%\RarSFX0\x86\paexec.exe
  • %TEMP%\RarSFX0\DDU Logs\2014 _8_22_16_53_5_DDULog.log
  • %TEMP%\RarSFX0\x86\ddudr.exe
  • %TEMP%\RarSFX0\settings\Readme.txt
  • %TEMP%\RarSFX0\settings\NVIDIA\services.cfg
  • %TEMP%\RarSFX0\settings\config.cfg
  • %TEMP%\RarSFX0\Display Driver Uninstaller.exe
  • %TEMP%\RarSFX0\settings\Languages\Ukrainian\tooltip1.txt
  • %TEMP%\RarSFX0\settings\Languages\Ukrainian\checkbox3amd.txt
  • %TEMP%\RarSFX0\settings\Languages\Ukrainian\checkbox3.txt
  • %TEMP%\RarSFX0\settings\Languages\Ukrainian\checkbox5.txt
  • %TEMP%\RarSFX0\settings\Languages\Ukrainian\checkbox4.txt
  • %TEMP%\RarSFX0\settings\Languages\Ukrainian\checkbox2.txt
  • %TEMP%\RarSFX0\settings\Languages\Ukrainian\button3.txt
  • %TEMP%\RarSFX0\settings\Languages\Ukrainian\button2.txt
  • %TEMP%\RarSFX0\settings\Languages\Ukrainian\checkbox1.txt
  • %TEMP%\RarSFX0\settings\Languages\Ukrainian\button4.txt
  • %TEMP%\RarSFX0\settings\Languages\Ukrainian\label7.txt
  • %TEMP%\RarSFX0\settings\Languages\Ukrainian\label5.txt
  • %TEMP%\RarSFX0\settings\Languages\Ukrainian\msgbox.txt
  • %TEMP%\RarSFX0\settings\Languages\Ukrainian\label9.txt
  • %TEMP%\RarSFX0\settings\Languages\Ukrainian\label4.txt
  • %TEMP%\RarSFX0\settings\Languages\Ukrainian\label1.txt
  • %TEMP%\RarSFX0\settings\Languages\Ukrainian\checkbox6.txt
  • %TEMP%\RarSFX0\settings\Languages\Ukrainian\label11.txt
  • %TEMP%\RarSFX0\settings\Languages\Ukrainian\label10.txt
  • %TEMP%\RarSFX0\settings\Languages\Spanish\label10.txt
  • %TEMP%\RarSFX0\settings\Languages\Serbian (Latin)\label10.txt
  • %TEMP%\RarSFX0\settings\Languages\Serbian (Latin)\label1.txt
  • %TEMP%\RarSFX0\settings\Languages\Serbian (Latin)\label4.txt
  • %TEMP%\RarSFX0\settings\Languages\Serbian (Latin)\label11.txt
  • %TEMP%\RarSFX0\settings\Languages\Serbian (Latin)\checkbox6.txt
  • %TEMP%\RarSFX0\settings\Languages\Serbian (Latin)\checkbox3amd.txt
  • %TEMP%\RarSFX0\settings\Languages\Serbian (Latin)\checkbox3.txt
  • %TEMP%\RarSFX0\settings\Languages\Serbian (Latin)\checkbox5.txt
  • %TEMP%\RarSFX0\settings\Languages\Serbian (Latin)\checkbox4.txt
  • %TEMP%\RarSFX0\settings\Languages\Serbian (Latin)\tooltip3.txt
  • %TEMP%\RarSFX0\settings\Languages\Serbian (Latin)\tooltip2.txt
  • %TEMP%\RarSFX0\settings\Languages\Serbian (Latin)\updatetextmethod.txt
  • %TEMP%\RarSFX0\settings\Languages\Serbian (Latin)\tos.txt
  • %TEMP%\RarSFX0\settings\Languages\Serbian (Latin)\tooltip1.txt
  • %TEMP%\RarSFX0\settings\Languages\Serbian (Latin)\label7.txt
  • %TEMP%\RarSFX0\settings\Languages\Serbian (Latin)\label5.txt
  • %TEMP%\RarSFX0\settings\Languages\Serbian (Latin)\msgbox.txt
  • %TEMP%\RarSFX0\settings\Languages\Serbian (Latin)\label9.txt
  • %TEMP%\RarSFX0\settings\Languages\Serbian (Latin)\checkbox2.txt
  • %TEMP%\RarSFX0\settings\Languages\Serbian (Cyrilic)\msgbox.txt
  • %TEMP%\RarSFX0\settings\Languages\Serbian (Cyrilic)\label9.txt
  • %TEMP%\RarSFX0\settings\Languages\Serbian (Cyrilic)\tooltip2.txt
  • %TEMP%\RarSFX0\settings\Languages\Serbian (Cyrilic)\tooltip1.txt
  • %TEMP%\RarSFX0\settings\Languages\Serbian (Cyrilic)\label7.txt
  • %TEMP%\RarSFX0\settings\Languages\Serbian (Cyrilic)\label11.txt
  • %TEMP%\RarSFX0\settings\Languages\Serbian (Cyrilic)\label10.txt
  • %TEMP%\RarSFX0\settings\Languages\Serbian (Cyrilic)\label5.txt
  • %TEMP%\RarSFX0\settings\Languages\Serbian (Cyrilic)\label4.txt
  • %TEMP%\RarSFX0\settings\Languages\Serbian (Latin)\button3.txt
  • %TEMP%\RarSFX0\settings\Languages\Serbian (Latin)\button2.txt
  • %TEMP%\RarSFX0\settings\Languages\Serbian (Latin)\checkbox1.txt
  • %TEMP%\RarSFX0\settings\Languages\Serbian (Latin)\button4.txt
  • %TEMP%\RarSFX0\settings\Languages\Serbian (Latin)\button1.txt
  • %TEMP%\RarSFX0\settings\Languages\Serbian (Cyrilic)\tos.txt
  • %TEMP%\RarSFX0\settings\Languages\Serbian (Cyrilic)\tooltip3.txt
  • %TEMP%\RarSFX0\settings\Languages\Serbian (Latin)\about.txt
  • %TEMP%\RarSFX0\settings\Languages\Serbian (Cyrilic)\updatetextmethod.txt
  • %TEMP%\RarSFX0\settings\Languages\Slovak\about.txt
  • %TEMP%\RarSFX0\settings\Languages\Spanish\button1.txt
  • %TEMP%\RarSFX0\settings\Languages\Spanish\about.txt
  • %TEMP%\RarSFX0\settings\Languages\Spanish\button3.txt
  • %TEMP%\RarSFX0\settings\Languages\Spanish\button2.txt
  • %TEMP%\RarSFX0\settings\Languages\Slovak\updatetextmethod.txt
  • %TEMP%\RarSFX0\settings\Languages\Slovak\tooltip2.txt
  • %TEMP%\RarSFX0\settings\Languages\Slovak\tooltip1.txt
  • %TEMP%\RarSFX0\settings\Languages\Slovak\tos.txt
  • %TEMP%\RarSFX0\settings\Languages\Slovak\tooltip3.txt
  • %TEMP%\RarSFX0\settings\Languages\Spanish\checkbox5.txt
  • %TEMP%\RarSFX0\settings\Languages\Spanish\checkbox4.txt
  • %TEMP%\RarSFX0\settings\Languages\Spanish\label1.txt
  • %TEMP%\RarSFX0\settings\Languages\Spanish\checkbox6.txt
  • %TEMP%\RarSFX0\settings\Languages\Spanish\checkbox3amd.txt
  • %TEMP%\RarSFX0\settings\Languages\Spanish\checkbox1.txt
  • %TEMP%\RarSFX0\settings\Languages\Spanish\button4.txt
  • %TEMP%\RarSFX0\settings\Languages\Spanish\checkbox3.txt
  • %TEMP%\RarSFX0\settings\Languages\Spanish\checkbox2.txt
  • %TEMP%\RarSFX0\settings\Languages\Slovak\msgbox.txt
  • %TEMP%\RarSFX0\settings\Languages\Slovak\checkbox3.txt
  • %TEMP%\RarSFX0\settings\Languages\Slovak\checkbox2.txt
  • %TEMP%\RarSFX0\settings\Languages\Slovak\checkbox4.txt
  • %TEMP%\RarSFX0\settings\Languages\Slovak\checkbox3amd.txt
  • %TEMP%\RarSFX0\settings\Languages\Slovak\checkbox1.txt
  • %TEMP%\RarSFX0\settings\Languages\Slovak\button2.txt
  • %TEMP%\RarSFX0\settings\Languages\Slovak\button1.txt
  • %TEMP%\RarSFX0\settings\Languages\Slovak\button4.txt
  • %TEMP%\RarSFX0\settings\Languages\Slovak\button3.txt
  • %TEMP%\RarSFX0\settings\Languages\Slovak\label5.txt
  • %TEMP%\RarSFX0\settings\Languages\Slovak\label4.txt
  • %TEMP%\RarSFX0\settings\Languages\Slovak\label9.txt
  • %TEMP%\RarSFX0\settings\Languages\Slovak\label7.txt
  • %TEMP%\RarSFX0\settings\Languages\Slovak\label11.txt
  • %TEMP%\RarSFX0\settings\Languages\Slovak\checkbox6.txt
  • %TEMP%\RarSFX0\settings\Languages\Slovak\checkbox5.txt
  • %TEMP%\RarSFX0\settings\Languages\Slovak\label10.txt
  • %TEMP%\RarSFX0\settings\Languages\Slovak\label1.txt
  • %TEMP%\RarSFX0\settings\Languages\Danish\checkbox6.txt
  • %TEMP%\RarSFX0\settings\Languages\Danish\checkbox5.txt
  • %TEMP%\RarSFX0\settings\Languages\Danish\label10.txt
  • %TEMP%\RarSFX0\settings\Languages\Danish\label1.txt
  • %TEMP%\RarSFX0\settings\Languages\Danish\checkbox4.txt
  • %TEMP%\RarSFX0\settings\Languages\Danish\checkbox2.txt
  • %TEMP%\RarSFX0\settings\Languages\Danish\checkbox1.txt
  • %TEMP%\RarSFX0\settings\Languages\Danish\checkbox3amd.txt
  • %TEMP%\RarSFX0\settings\Languages\Danish\checkbox3.txt
  • %TEMP%\RarSFX0\settings\Languages\Danish\tooltip1.txt
  • %TEMP%\RarSFX0\settings\Languages\Danish\msgbox.txt
  • %TEMP%\RarSFX0\settings\Languages\Danish\tooltip3.txt
  • %TEMP%\RarSFX0\settings\Languages\Danish\tooltip2.txt
  • %TEMP%\RarSFX0\settings\Languages\Danish\label9.txt
  • %TEMP%\RarSFX0\settings\Languages\Danish\label4.txt
  • %TEMP%\RarSFX0\settings\Languages\Danish\label11.txt
  • %TEMP%\RarSFX0\settings\Languages\Danish\label7.txt
  • %TEMP%\RarSFX0\settings\Languages\Danish\label5.txt
  • %TEMP%\RarSFX0\settings\Languages\Danish\button4.txt
  • %TEMP%\RarSFX0\settings\Languages\Czech\label7.txt
  • %TEMP%\RarSFX0\settings\Languages\Czech\label5.txt
  • %TEMP%\RarSFX0\settings\Languages\Czech\msgbox.txt
  • %TEMP%\RarSFX0\settings\Languages\Czech\label9.txt
  • %TEMP%\RarSFX0\settings\Languages\Czech\label4.txt
  • %TEMP%\RarSFX0\settings\Languages\Czech\label1.txt
  • %TEMP%\RarSFX0\settings\Languages\Czech\checkbox6.txt
  • %TEMP%\RarSFX0\settings\Languages\Czech\label11.txt
  • %TEMP%\RarSFX0\settings\Languages\Czech\label10.txt
  • %TEMP%\RarSFX0\settings\Languages\Danish\button1.txt
  • %TEMP%\RarSFX0\settings\Languages\Danish\about.txt
  • %TEMP%\RarSFX0\settings\Languages\Danish\button3.txt
  • %TEMP%\RarSFX0\settings\Languages\Danish\button2.txt
  • %TEMP%\RarSFX0\settings\Languages\Czech\updatetextmethod.txt
  • %TEMP%\RarSFX0\settings\Languages\Czech\tooltip2.txt
  • %TEMP%\RarSFX0\settings\Languages\Czech\tooltip1.txt
  • %TEMP%\RarSFX0\settings\Languages\Czech\tos.txt
  • %TEMP%\RarSFX0\settings\Languages\Czech\tooltip3.txt
  • %TEMP%\RarSFX0\settings\Languages\Danish\tos.txt
  • %TEMP%\RarSFX0\settings\Languages\Dutch\updatetextmethod.txt
  • %TEMP%\RarSFX0\settings\Languages\Dutch\tos.txt
  • %TEMP%\RarSFX0\settings\Languages\English\button1.txt
  • %TEMP%\RarSFX0\settings\Languages\English\about.txt
  • %TEMP%\RarSFX0\settings\Languages\Dutch\tooltip3.txt
  • %TEMP%\RarSFX0\settings\Languages\Dutch\msgbox.txt
  • %TEMP%\RarSFX0\settings\Languages\Dutch\label9.txt
  • %TEMP%\RarSFX0\settings\Languages\Dutch\tooltip2.txt
  • %TEMP%\RarSFX0\settings\Languages\Dutch\tooltip1.txt
  • %TEMP%\RarSFX0\settings\Languages\English\checkbox3amd.txt
  • %TEMP%\RarSFX0\settings\Languages\English\checkbox3.txt
  • %TEMP%\RarSFX0\settings\Languages\English\checkbox5.txt
  • %TEMP%\RarSFX0\settings\Languages\English\checkbox4.txt
  • %TEMP%\RarSFX0\settings\Languages\English\checkbox2.txt
  • %TEMP%\RarSFX0\settings\Languages\English\button3.txt
  • %TEMP%\RarSFX0\settings\Languages\English\button2.txt
  • %TEMP%\RarSFX0\settings\Languages\English\checkbox1.txt
  • %TEMP%\RarSFX0\settings\Languages\English\button4.txt
  • %TEMP%\RarSFX0\settings\Languages\Dutch\label7.txt
  • %TEMP%\RarSFX0\settings\Languages\Dutch\checkbox1.txt
  • %TEMP%\RarSFX0\settings\Languages\Dutch\button4.txt
  • %TEMP%\RarSFX0\settings\Languages\Dutch\checkbox3.txt
  • %TEMP%\RarSFX0\settings\Languages\Dutch\checkbox2.txt
  • %TEMP%\RarSFX0\settings\Languages\Dutch\button3.txt
  • %TEMP%\RarSFX0\settings\Languages\Dutch\about.txt
  • %TEMP%\RarSFX0\settings\Languages\Danish\updatetextmethod.txt
  • %TEMP%\RarSFX0\settings\Languages\Dutch\button2.txt
  • %TEMP%\RarSFX0\settings\Languages\Dutch\button1.txt
  • %TEMP%\RarSFX0\settings\Languages\Dutch\label11.txt
  • %TEMP%\RarSFX0\settings\Languages\Dutch\label10.txt
  • %TEMP%\RarSFX0\settings\Languages\Dutch\label5.txt
  • %TEMP%\RarSFX0\settings\Languages\Dutch\label4.txt
  • %TEMP%\RarSFX0\settings\Languages\Dutch\label1.txt
  • %TEMP%\RarSFX0\settings\Languages\Dutch\checkbox4.txt
  • %TEMP%\RarSFX0\settings\Languages\Dutch\checkbox3amd.txt
  • %TEMP%\RarSFX0\settings\Languages\Dutch\checkbox6.txt
  • %TEMP%\RarSFX0\settings\Languages\Dutch\checkbox5.txt
  • %TEMP%\RarSFX0\settings\Languages\Czech\checkbox5.txt
  • %TEMP%\RarSFX0\settings\Languages\Chinese (Simplified)\checkbox5.txt
  • %TEMP%\RarSFX0\settings\Languages\Chinese (Simplified)\checkbox4.txt
  • %TEMP%\RarSFX0\settings\Languages\Chinese (Simplified)\label1.txt
  • %TEMP%\RarSFX0\settings\Languages\Chinese (Simplified)\checkbox6.txt
  • %TEMP%\RarSFX0\settings\Languages\Chinese (Simplified)\checkbox3amd.txt
  • %TEMP%\RarSFX0\settings\Languages\Chinese (Simplified)\checkbox1.txt
  • %TEMP%\RarSFX0\settings\Languages\Chinese (Simplified)\button4.txt
  • %TEMP%\RarSFX0\settings\Languages\Chinese (Simplified)\checkbox3.txt
  • %TEMP%\RarSFX0\settings\Languages\Chinese (Simplified)\checkbox2.txt
  • %TEMP%\RarSFX0\settings\Languages\Chinese (Simplified)\msgbox.txt
  • %TEMP%\RarSFX0\settings\Languages\Chinese (Simplified)\label9.txt
  • %TEMP%\RarSFX0\settings\Languages\Chinese (Simplified)\tooltip2.txt
  • %TEMP%\RarSFX0\settings\Languages\Chinese (Simplified)\tooltip1.txt
  • %TEMP%\RarSFX0\settings\Languages\Chinese (Simplified)\label7.txt
  • %TEMP%\RarSFX0\settings\Languages\Chinese (Simplified)\label11.txt
  • %TEMP%\RarSFX0\settings\Languages\Chinese (Simplified)\label10.txt
  • %TEMP%\RarSFX0\settings\Languages\Chinese (Simplified)\label5.txt
  • %TEMP%\RarSFX0\settings\Languages\Chinese (Simplified)\label4.txt
  • %TEMP%\RarSFX0\settings\Languages\Chinese (Simplified)\button3.txt
  • %TEMP%\RarSFX0\settings\AMD\interface.cfg
  • %TEMP%\RarSFX0\settings\AMD\driverfiles.cfg
  • %TEMP%\RarSFX0\settings\AMD\services.cfg
  • %TEMP%\RarSFX0\settings\AMD\packages.cfg
  • %TEMP%\RarSFX0\settings\AMD\clsidleftover.cfg
  • %TEMP%\RarSFX0\Display Driver Uninstaller.exe.config
  • %TEMP%\RarSFX0\ReadMe.url
  • %TEMP%\RarSFX0\settings\AMD\classroot.cfg
  • %TEMP%\RarSFX0\Display Driver Uninstaller.pdb
  • %TEMP%\RarSFX0\settings\Languages\Chinese (Simplified)\about.txt
  • %TEMP%\RarSFX0\settings\INTEL\services.cfg
  • %TEMP%\RarSFX0\settings\Languages\Chinese (Simplified)\button2.txt
  • %TEMP%\RarSFX0\settings\Languages\Chinese (Simplified)\button1.txt
  • %TEMP%\RarSFX0\settings\INTEL\packages.cfg
  • %TEMP%\RarSFX0\settings\INTEL\clsidleftover.cfg
  • %TEMP%\RarSFX0\settings\INTEL\classroot.cfg
  • %TEMP%\RarSFX0\settings\INTEL\interface.cfg
  • %TEMP%\RarSFX0\settings\INTEL\driverfiles.cfg
  • %TEMP%\RarSFX0\settings\Languages\Chinese (Simplified)\tooltip3.txt
  • %TEMP%\RarSFX0\settings\Languages\Chinese (Traditional)\tos.txt
  • %TEMP%\RarSFX0\settings\Languages\Chinese (Traditional)\tooltip3.txt
  • %TEMP%\RarSFX0\settings\Languages\Czech\about.txt
  • %TEMP%\RarSFX0\settings\Languages\Chinese (Traditional)\updatetextmethod.txt
  • %TEMP%\RarSFX0\settings\Languages\Chinese (Traditional)\tooltip2.txt
  • %TEMP%\RarSFX0\settings\Languages\Chinese (Traditional)\label9.txt
  • %TEMP%\RarSFX0\settings\Languages\Chinese (Traditional)\label7.txt
  • %TEMP%\RarSFX0\settings\Languages\Chinese (Traditional)\tooltip1.txt
  • %TEMP%\RarSFX0\settings\Languages\Chinese (Traditional)\msgbox.txt
  • %TEMP%\RarSFX0\settings\Languages\Czech\checkbox3.txt
  • %TEMP%\RarSFX0\settings\Languages\Czech\checkbox2.txt
  • %TEMP%\RarSFX0\settings\Languages\Czech\checkbox4.txt
  • %TEMP%\RarSFX0\settings\Languages\Czech\checkbox3amd.txt
  • %TEMP%\RarSFX0\settings\Languages\Czech\checkbox1.txt
  • %TEMP%\RarSFX0\settings\Languages\Czech\button2.txt
  • %TEMP%\RarSFX0\settings\Languages\Czech\button1.txt
  • %TEMP%\RarSFX0\settings\Languages\Czech\button4.txt
  • %TEMP%\RarSFX0\settings\Languages\Czech\button3.txt
  • %TEMP%\RarSFX0\settings\Languages\Chinese (Traditional)\label5.txt
  • %TEMP%\RarSFX0\settings\Languages\Chinese (Traditional)\button4.txt
  • %TEMP%\RarSFX0\settings\Languages\Chinese (Traditional)\button3.txt
  • %TEMP%\RarSFX0\settings\Languages\Chinese (Traditional)\checkbox2.txt
  • %TEMP%\RarSFX0\settings\Languages\Chinese (Traditional)\checkbox1.txt
  • %TEMP%\RarSFX0\settings\Languages\Chinese (Traditional)\button2.txt
  • %TEMP%\RarSFX0\settings\Languages\Chinese (Simplified)\updatetextmethod.txt
  • %TEMP%\RarSFX0\settings\Languages\Chinese (Simplified)\tos.txt
  • %TEMP%\RarSFX0\settings\Languages\Chinese (Traditional)\button1.txt
  • %TEMP%\RarSFX0\settings\Languages\Chinese (Traditional)\about.txt
  • %TEMP%\RarSFX0\settings\Languages\Chinese (Traditional)\label10.txt
  • %TEMP%\RarSFX0\settings\Languages\Chinese (Traditional)\label1.txt
  • %TEMP%\RarSFX0\settings\Languages\Chinese (Traditional)\label4.txt
  • %TEMP%\RarSFX0\settings\Languages\Chinese (Traditional)\label11.txt
  • %TEMP%\RarSFX0\settings\Languages\Chinese (Traditional)\checkbox6.txt
  • %TEMP%\RarSFX0\settings\Languages\Chinese (Traditional)\checkbox3amd.txt
  • %TEMP%\RarSFX0\settings\Languages\Chinese (Traditional)\checkbox3.txt
  • %TEMP%\RarSFX0\settings\Languages\Chinese (Traditional)\checkbox5.txt
  • %TEMP%\RarSFX0\settings\Languages\Chinese (Traditional)\checkbox4.txt
  • %TEMP%\RarSFX0\settings\Languages\Hebrew\label1.txt
  • %TEMP%\RarSFX0\settings\Languages\Hebrew\checkbox6.txt
  • %TEMP%\RarSFX0\settings\Languages\Hebrew\label11.txt
  • %TEMP%\RarSFX0\settings\Languages\Hebrew\label10.txt
  • %TEMP%\RarSFX0\settings\Languages\Hebrew\checkbox5.txt
  • %TEMP%\RarSFX0\settings\Languages\Hebrew\checkbox3.txt
  • %TEMP%\RarSFX0\settings\Languages\Hebrew\checkbox2.txt
  • %TEMP%\RarSFX0\settings\Languages\Hebrew\checkbox4.txt
  • %TEMP%\RarSFX0\settings\Languages\Hebrew\checkbox3amd.txt
  • %TEMP%\RarSFX0\settings\Languages\Hebrew\tooltip2.txt
  • %TEMP%\RarSFX0\settings\Languages\Hebrew\tooltip1.txt
  • %TEMP%\RarSFX0\settings\Languages\Hebrew\tos.txt
  • %TEMP%\RarSFX0\settings\Languages\Hebrew\tooltip3.txt
  • %TEMP%\RarSFX0\settings\Languages\Hebrew\msgbox.txt
  • %TEMP%\RarSFX0\settings\Languages\Hebrew\label5.txt
  • %TEMP%\RarSFX0\settings\Languages\Hebrew\label4.txt
  • %TEMP%\RarSFX0\settings\Languages\Hebrew\label9.txt
  • %TEMP%\RarSFX0\settings\Languages\Hebrew\label7.txt
  • %TEMP%\RarSFX0\settings\Languages\Hebrew\checkbox1.txt
  • %TEMP%\RarSFX0\settings\Languages\Greek\label9.txt
  • %TEMP%\RarSFX0\settings\Languages\Greek\label7.txt
  • %TEMP%\RarSFX0\settings\Languages\Greek\tooltip1.txt
  • %TEMP%\RarSFX0\settings\Languages\Greek\msgbox.txt
  • %TEMP%\RarSFX0\settings\Languages\Greek\label5.txt
  • %TEMP%\RarSFX0\settings\Languages\Greek\label10.txt
  • %TEMP%\RarSFX0\settings\Languages\Greek\label1.txt
  • %TEMP%\RarSFX0\settings\Languages\Greek\label4.txt
  • %TEMP%\RarSFX0\settings\Languages\Greek\label11.txt
  • %TEMP%\RarSFX0\settings\Languages\Hebrew\button2.txt
  • %TEMP%\RarSFX0\settings\Languages\Hebrew\button1.txt
  • %TEMP%\RarSFX0\settings\Languages\Hebrew\button4.txt
  • %TEMP%\RarSFX0\settings\Languages\Hebrew\button3.txt
  • %TEMP%\RarSFX0\settings\Languages\Hebrew\about.txt
  • %TEMP%\RarSFX0\settings\Languages\Greek\tooltip3.txt
  • %TEMP%\RarSFX0\settings\Languages\Greek\tooltip2.txt
  • %TEMP%\RarSFX0\settings\Languages\Greek\updatetextmethod.txt
  • %TEMP%\RarSFX0\settings\Languages\Greek\tos.txt
  • %TEMP%\RarSFX0\settings\Languages\Hebrew\updatetextmethod.txt
  • %TEMP%\RarSFX0\settings\Languages\Italian\about.txt
  • %TEMP%\RarSFX0\settings\Languages\Hungarian\updatetextmethod.txt
  • %TEMP%\RarSFX0\settings\Languages\Italian\button2.txt
  • %TEMP%\RarSFX0\settings\Languages\Italian\button1.txt
  • %TEMP%\RarSFX0\settings\Languages\Hungarian\tos.txt
  • %TEMP%\RarSFX0\settings\Languages\Hungarian\tooltip1.txt
  • %TEMP%\RarSFX0\settings\Languages\Hungarian\msgbox.txt
  • %TEMP%\RarSFX0\settings\Languages\Hungarian\tooltip3.txt
  • %TEMP%\RarSFX0\settings\Languages\Hungarian\tooltip2.txt
  • %TEMP%\RarSFX0\settings\Languages\Italian\checkbox4.txt
  • %TEMP%\RarSFX0\settings\Languages\Italian\checkbox3amd.txt
  • %TEMP%\RarSFX0\settings\Languages\Italian\checkbox6.txt
  • %TEMP%\RarSFX0\settings\Languages\Italian\checkbox5.txt
  • %TEMP%\RarSFX0\settings\Languages\Italian\checkbox3.txt
  • %TEMP%\RarSFX0\settings\Languages\Italian\button4.txt
  • %TEMP%\RarSFX0\settings\Languages\Italian\button3.txt
  • %TEMP%\RarSFX0\settings\Languages\Italian\checkbox2.txt
  • %TEMP%\RarSFX0\settings\Languages\Italian\checkbox1.txt
  • %TEMP%\RarSFX0\settings\Languages\Hungarian\label9.txt
  • %TEMP%\RarSFX0\settings\Languages\Hungarian\checkbox2.txt
  • %TEMP%\RarSFX0\settings\Languages\Hungarian\checkbox1.txt
  • %TEMP%\RarSFX0\settings\Languages\Hungarian\checkbox3amd.txt
  • %TEMP%\RarSFX0\settings\Languages\Hungarian\checkbox3.txt
  • %TEMP%\RarSFX0\settings\Languages\Hungarian\button4.txt
  • %TEMP%\RarSFX0\settings\Languages\Hungarian\button1.txt
  • %TEMP%\RarSFX0\settings\Languages\Hungarian\about.txt
  • %TEMP%\RarSFX0\settings\Languages\Hungarian\button3.txt
  • %TEMP%\RarSFX0\settings\Languages\Hungarian\button2.txt
  • %TEMP%\RarSFX0\settings\Languages\Hungarian\label4.txt
  • %TEMP%\RarSFX0\settings\Languages\Hungarian\label11.txt
  • %TEMP%\RarSFX0\settings\Languages\Hungarian\label7.txt
  • %TEMP%\RarSFX0\settings\Languages\Hungarian\label5.txt
  • %TEMP%\RarSFX0\settings\Languages\Hungarian\label10.txt
  • %TEMP%\RarSFX0\settings\Languages\Hungarian\checkbox5.txt
  • %TEMP%\RarSFX0\settings\Languages\Hungarian\checkbox4.txt
  • %TEMP%\RarSFX0\settings\Languages\Hungarian\label1.txt
  • %TEMP%\RarSFX0\settings\Languages\Hungarian\checkbox6.txt
  • %TEMP%\RarSFX0\settings\Languages\Greek\checkbox6.txt
  • %TEMP%\RarSFX0\settings\Languages\French\checkbox6.txt
  • %TEMP%\RarSFX0\settings\Languages\French\checkbox5.txt
  • %TEMP%\RarSFX0\settings\Languages\French\label10.txt
  • %TEMP%\RarSFX0\settings\Languages\French\label1.txt
  • %TEMP%\RarSFX0\settings\Languages\French\checkbox4.txt
  • %TEMP%\RarSFX0\settings\Languages\French\checkbox2.txt
  • %TEMP%\RarSFX0\settings\Languages\French\checkbox1.txt
  • %TEMP%\RarSFX0\settings\Languages\French\checkbox3amd.txt
  • %TEMP%\RarSFX0\settings\Languages\French\checkbox3.txt
  • %TEMP%\RarSFX0\settings\Languages\French\tooltip1.txt
  • %TEMP%\RarSFX0\settings\Languages\French\msgbox.txt
  • %TEMP%\RarSFX0\settings\Languages\French\tooltip3.txt
  • %TEMP%\RarSFX0\settings\Languages\French\tooltip2.txt
  • %TEMP%\RarSFX0\settings\Languages\French\label9.txt
  • %TEMP%\RarSFX0\settings\Languages\French\label4.txt
  • %TEMP%\RarSFX0\settings\Languages\French\label11.txt
  • %TEMP%\RarSFX0\settings\Languages\French\label7.txt
  • %TEMP%\RarSFX0\settings\Languages\French\label5.txt
  • %TEMP%\RarSFX0\settings\Languages\French\button4.txt
  • %TEMP%\RarSFX0\settings\Languages\English\label7.txt
  • %TEMP%\RarSFX0\settings\Languages\English\label5.txt
  • %TEMP%\RarSFX0\settings\Languages\English\msgbox.txt
  • %TEMP%\RarSFX0\settings\Languages\English\label9.txt
  • %TEMP%\RarSFX0\settings\Languages\English\label4.txt
  • %TEMP%\RarSFX0\settings\Languages\English\label1.txt
  • %TEMP%\RarSFX0\settings\Languages\English\checkbox6.txt
  • %TEMP%\RarSFX0\settings\Languages\English\label11.txt
  • %TEMP%\RarSFX0\settings\Languages\English\label10.txt
  • %TEMP%\RarSFX0\settings\Languages\French\Button1.txt
  • %TEMP%\RarSFX0\settings\Languages\French\about.txt
  • %TEMP%\RarSFX0\settings\Languages\French\Button3.txt
  • %TEMP%\RarSFX0\settings\Languages\French\Button2.txt
  • %TEMP%\RarSFX0\settings\Languages\English\updatetextmethod.txt
  • %TEMP%\RarSFX0\settings\Languages\English\tooltip2.txt
  • %TEMP%\RarSFX0\settings\Languages\English\tooltip1.txt
  • %TEMP%\RarSFX0\settings\Languages\English\tos.txt
  • %TEMP%\RarSFX0\settings\Languages\English\tooltip3.txt
  • %TEMP%\RarSFX0\settings\Languages\French\tos.txt
  • %TEMP%\RarSFX0\settings\Languages\German\updatetextmethod.txt
  • %TEMP%\RarSFX0\settings\Languages\German\tos.txt
  • %TEMP%\RarSFX0\settings\Languages\Greek\button1.txt
  • %TEMP%\RarSFX0\settings\Languages\Greek\about.txt
  • %TEMP%\RarSFX0\settings\Languages\German\tooltip3.txt
  • %TEMP%\RarSFX0\settings\Languages\German\msgbox.txt
  • %TEMP%\RarSFX0\settings\Languages\German\label9.txt
  • %TEMP%\RarSFX0\settings\Languages\German\tooltip2.txt
  • %TEMP%\RarSFX0\settings\Languages\German\tooltip1.txt
  • %TEMP%\RarSFX0\settings\Languages\Greek\checkbox3amd.txt
  • %TEMP%\RarSFX0\settings\Languages\Greek\checkbox3.txt
  • %TEMP%\RarSFX0\settings\Languages\Greek\checkbox5.txt
  • %TEMP%\RarSFX0\settings\Languages\Greek\checkbox4.txt
  • %TEMP%\RarSFX0\settings\Languages\Greek\checkbox2.txt
  • %TEMP%\RarSFX0\settings\Languages\Greek\button3.txt
  • %TEMP%\RarSFX0\settings\Languages\Greek\button2.txt
  • %TEMP%\RarSFX0\settings\Languages\Greek\checkbox1.txt
  • %TEMP%\RarSFX0\settings\Languages\Greek\button4.txt
  • %TEMP%\RarSFX0\settings\Languages\German\label7.txt
  • %TEMP%\RarSFX0\settings\Languages\German\checkbox1.txt
  • %TEMP%\RarSFX0\settings\Languages\German\button4.txt
  • %TEMP%\RarSFX0\settings\Languages\German\checkbox3.txt
  • %TEMP%\RarSFX0\settings\Languages\German\checkbox2.txt
  • %TEMP%\RarSFX0\settings\Languages\German\button3.txt
  • %TEMP%\RarSFX0\settings\Languages\German\about.txt
  • %TEMP%\RarSFX0\settings\Languages\French\updatetextmethod.txt
  • %TEMP%\RarSFX0\settings\Languages\German\button2.txt
  • %TEMP%\RarSFX0\settings\Languages\German\button1.txt
  • %TEMP%\RarSFX0\settings\Languages\German\label11.txt
  • %TEMP%\RarSFX0\settings\Languages\German\label10.txt
  • %TEMP%\RarSFX0\settings\Languages\German\label5.txt
  • %TEMP%\RarSFX0\settings\Languages\German\label4.txt
  • %TEMP%\RarSFX0\settings\Languages\German\label1.txt
  • %TEMP%\RarSFX0\settings\Languages\German\checkbox4.txt
  • %TEMP%\RarSFX0\settings\Languages\German\checkbox3amd.txt
  • %TEMP%\RarSFX0\settings\Languages\German\checkbox6.txt
  • %TEMP%\RarSFX0\settings\Languages\German\checkbox5.txt
Deletes the following files:
  • %TEMP%\RarSFX0\Display Driver Uninstaller.exe
Network activity:
Connects to:
  • 'no##.ucoz.ru':80
  • 'localhost':1040
  • 'wp#d':80
TCP:
HTTP GET requests:
  • no##.ucoz.ru/
  • wp#d/wpad.dat
UDP:
  • DNS ASK no##.ucoz.ru
  • DNS ASK www.wa####dmobile.com
  • DNS ASK wp#d
  • DNS ASK ar####e.sunet.se
Miscellaneous:
Searches for the following windows:
  • ClassName: 'IEFrame' WindowName: ''
  • ClassName: 'MS_AutodialMonitor' WindowName: ''
  • ClassName: 'MS_WebcheckMonitor' WindowName: ''
  • ClassName: 'EDIT' WindowName: ''
  • ClassName: 'Shell_TrayWnd' WindowName: ''
  • ClassName: '' WindowName: ''

Curing recommendations

  1. If the operating system (OS) can be loaded (either normally or in safe mode), download Dr.Web Security Space and run a full scan of your computer and removable media you use. More about Dr.Web Security Space.
  2. If you cannot boot the OS, change the BIOS settings to boot your system from a CD or USB drive. Download the image of the emergency system repair disk Dr.Web® LiveDisk , mount it on a USB drive or burn it to a CD/DVD. After booting up with this media, run a full scan and cure all the detected threats.
Free trial

 

Download Dr.Web

Download by serial number

Use Dr.Web Anti-virus for macOS to run a full scan of your Mac.

Free trial

 

Download Dr.Web

Download by serial number

Download on App Store

After booting up, run a full scan of all disk partitions with Dr.Web Anti-virus for Linux.

Free trial

 

Download Dr.Web

Download by serial number

  1. If the mobile device is operating normally, download and install Dr.Web for Android. Run a full system scan and follow recommendations to neutralize the detected threats.
  2. If the mobile device has been locked by Android.Locker ransomware (the message on the screen tells you that you have broken some law or demands a set ransom amount; or you will see some other announcement that prevents you from using the handheld normally), do the following:
    • Load your smartphone or tablet in the safe mode (depending on the operating system version and specifications of the particular mobile device involved, this procedure can be performed in various ways; seek clarification from the user guide that was shipped with the device, or contact its manufacturer);
    • Once you have activated safe mode, install the Dr.Web for Android onto the infected handheld and run a full scan of the system; follow the steps recommended for neutralizing the threats that have been detected;
    • Switch off your device and turn it on as normal.

Find out more about Dr.Web for Android

Free trial

14 days

Download now
Get it on Google Play