マイライブラリ
マイライブラリ

+ マイライブラリに追加

電話

お問い合わせ履歴

電話(英語)

+7 (495) 789-45-86

Profile

Trojan.MulDrop6.58244

Added to the Dr.Web virus database: 2016-09-29

Virus description added:

Technical Information

To ensure autorun and distribution:
Modifies the following registry keys:
  • [<HKLM>\SOFTWARE\Classes\WinRAR.REV\shell\open\command] '' = '"%ProgramFiles%\WinRAR\WinRAR.exe" "%1"'
  • [<HKLM>\SOFTWARE\Classes\WinRAR.ZIP\shell\open\command] '' = '"%ProgramFiles%\WinRAR\WinRAR.exe" "%1"'
  • [<HKLM>\SOFTWARE\Classes\WinRAR\shell\open\command] '' = '"%ProgramFiles%\WinRAR\WinRAR.exe" "%1"'
Malicious functions:
Executes the following:
  • '<SYSTEM32>\xcopy.exe' "%TEMP%\RarSFX0\WinRAR5PREFS\Themes\*.*" "%APPDATA%\WinRAR\Themes" /s /i /y
  • '%ProgramFiles%\WinRAR\Uninstall.exe' /setup /S
  • '%TEMP%\nsv3.tmp\ns4.tmp' xcopy "%TEMP%\RarSFX0\WinRAR5PREFS\Themes\*.*" "%APPDATA%\WinRAR\Themes" /s /i /y
  • '<SYSTEM32>\cmd.exe' /c ""%TEMP%\RarSFX0\silentinstall.cmd" "
  • '%TEMP%\RarSFX0\WinRAR.v5.00.exe' /S /IR
Modifies file system:
Creates the following files:
  • %APPDATA%\WinRAR\Themes\Metro\Setup.ico
  • %APPDATA%\WinRAR\Themes\Metro\REV.ico
  • %APPDATA%\WinRAR\Themes\Metro\SFX.ico
  • %APPDATA%\WinRAR\Themes\Metro\SortDown.bmp
  • %APPDATA%\WinRAR\Themes\Metro\sfxlogo.bmp
  • %APPDATA%\WinRAR\Themes\Metro\RarSmall.bmp
  • %APPDATA%\WinRAR\Themes\Metro\folderup.bmp
  • %APPDATA%\WinRAR\Themes\Metro\File.ico
  • %APPDATA%\WinRAR\Themes\Metro\PasswordOff.ico
  • %APPDATA%\WinRAR\Themes\Metro\RAR.ico
  • %APPDATA%\WinRAR\Themes\Metro\PasswordOn.ico
  • %APPDATA%\WinRAR\Themes\Metro\ToolBar\delete.bmp
  • %APPDATA%\WinRAR\Themes\Metro\ToolBar\convert.bmp
  • %APPDATA%\WinRAR\Themes\Metro\ToolBar\exit.bmp
  • %APPDATA%\WinRAR\Themes\Metro\ToolBar\extractto.bmp
  • %APPDATA%\WinRAR\Themes\Metro\ToolBar\extract.bmp
  • %APPDATA%\WinRAR\Themes\Metro\ToolBar\comment.bmp
  • %APPDATA%\WinRAR\Themes\Metro\WinRAR_Theme_Description.txt
  • %APPDATA%\WinRAR\Themes\Metro\SortUp.bmp
  • %APPDATA%\WinRAR\Themes\Metro\wizardlogo.bmp
  • %APPDATA%\WinRAR\Themes\Metro\ToolBar\benchmark.bmp
  • %APPDATA%\WinRAR\Themes\Metro\ToolBar\add.bmp
  • %APPDATA%\WinRAR\Themes\AS-Kristal-64.theme\Toolbar\Report.bmp
  • %APPDATA%\WinRAR\Themes\AS-Kristal-64.theme\Toolbar\Repair.bmp
  • %APPDATA%\WinRAR\Themes\AS-Kristal-64.theme\Toolbar\SFX.bmp
  • %APPDATA%\WinRAR\Themes\AS-Kristal-64.theme\Toolbar\View.bmp
  • %APPDATA%\WinRAR\Themes\AS-Kristal-64.theme\Toolbar\Test.bmp
  • %APPDATA%\WinRAR\Themes\AS-Kristal-64.theme\Toolbar\Protect.bmp
  • %APPDATA%\WinRAR\Themes\AS-Kristal-64.theme\Toolbar\Find.bmp
  • %APPDATA%\WinRAR\Themes\AS-Kristal-64.theme\Toolbar\ExtractTo.bmp
  • %APPDATA%\WinRAR\Themes\AS-Kristal-64.theme\Toolbar\Info.bmp
  • %APPDATA%\WinRAR\Themes\AS-Kristal-64.theme\Toolbar\Print.bmp
  • %APPDATA%\WinRAR\Themes\AS-Kristal-64.theme\Toolbar\Lock.bmp
  • %APPDATA%\WinRAR\Themes\Metro\dragcopy.cur
  • %APPDATA%\WinRAR\Themes\Metro\DiskOn.ico
  • %APPDATA%\WinRAR\Themes\Metro\dragmove.cur
  • %APPDATA%\WinRAR\Themes\Metro\estimate.bmp
  • %APPDATA%\WinRAR\Themes\Metro\Dragno.cur
  • %APPDATA%\WinRAR\Themes\Metro\DiskOff.ico
  • %APPDATA%\WinRAR\Themes\AS-Kristal-64.theme\Toolbar\Wizard copy.bmp
  • %APPDATA%\WinRAR\Themes\AS-Kristal-64.theme\Toolbar\VirusScan.bmp
  • %APPDATA%\WinRAR\Themes\AS-Kristal-64.theme\Toolbar\Wizard.bmp
  • %APPDATA%\WinRAR\Themes\Metro\comment.bmp
  • %APPDATA%\WinRAR\Themes\Metro\aboutlogo.bmp
  • %APPDATA%\WinRAR\Themes\RARaddin_64x64\Toolbar\Benchmark.bmp
  • %APPDATA%\WinRAR\Themes\RARaddin_64x64\Toolbar\Add.bmp
  • %APPDATA%\WinRAR\Themes\RARaddin_64x64\Toolbar\Comment.bmp
  • %APPDATA%\WinRAR\Themes\RARaddin_64x64\Toolbar\Delete.bmp
  • %APPDATA%\WinRAR\Themes\RARaddin_64x64\Toolbar\Convert.bmp
  • %APPDATA%\WinRAR\Themes\RARaddin_64x64\WizardLogo.bmp
  • %APPDATA%\WinRAR\Themes\RARaddin_64x64\SFXLogo.bmp
  • %APPDATA%\WinRAR\Themes\RARaddin_64x64\SFX.ico
  • %APPDATA%\WinRAR\Themes\RARaddin_64x64\SortDown.bmp
  • %APPDATA%\WinRAR\Themes\RARaddin_64x64\winrar_theme_description.txt
  • %APPDATA%\WinRAR\Themes\RARaddin_64x64\SortUp.bmp
  • %APPDATA%\WinRAR\Themes\RARaddin_64x64\Toolbar\Protect.bmp
  • %APPDATA%\WinRAR\Themes\RARaddin_64x64\Toolbar\Print.bmp
  • %APPDATA%\WinRAR\Themes\RARaddin_64x64\Toolbar\Repair.bmp
  • %APPDATA%\WinRAR\Themes\RARaddin_64x64\Toolbar\SFX.bmp
  • %APPDATA%\WinRAR\Themes\RARaddin_64x64\Toolbar\Report.bmp
  • %APPDATA%\WinRAR\Themes\RARaddin_64x64\Toolbar\Lock.bmp
  • %APPDATA%\WinRAR\Themes\RARaddin_64x64\Toolbar\Extract.bmp
  • %APPDATA%\WinRAR\Themes\RARaddin_64x64\Toolbar\Exit.bmp
  • %APPDATA%\WinRAR\Themes\RARaddin_64x64\Toolbar\ExtractTo.bmp
  • %APPDATA%\WinRAR\Themes\RARaddin_64x64\Toolbar\Info.bmp
  • %APPDATA%\WinRAR\Themes\RARaddin_64x64\Toolbar\Find.bmp
  • %APPDATA%\WinRAR\Themes\Metro\ToolBar\sfx.bmp
  • %APPDATA%\WinRAR\Themes\Metro\ToolBar\report.bmp
  • %APPDATA%\WinRAR\Themes\Metro\ToolBar\test.bmp
  • %APPDATA%\WinRAR\Themes\Metro\ToolBar\virusscan.bmp
  • %APPDATA%\WinRAR\Themes\Metro\ToolBar\view.bmp
  • %APPDATA%\WinRAR\Themes\Metro\ToolBar\repair.bmp
  • %APPDATA%\WinRAR\Themes\Metro\ToolBar\info.bmp
  • %APPDATA%\WinRAR\Themes\Metro\ToolBar\find.bmp
  • %APPDATA%\WinRAR\Themes\Metro\ToolBar\lock.bmp
  • %APPDATA%\WinRAR\Themes\Metro\ToolBar\protect.bmp
  • %APPDATA%\WinRAR\Themes\Metro\ToolBar\print.bmp
  • %APPDATA%\WinRAR\Themes\RARaddin_64x64\PasswordOn.ico
  • %APPDATA%\WinRAR\Themes\RARaddin_64x64\PasswordOff.ico
  • %APPDATA%\WinRAR\Themes\RARaddin_64x64\RAR.ico
  • %APPDATA%\WinRAR\Themes\RARaddin_64x64\Setup.ico
  • %APPDATA%\WinRAR\Themes\RARaddin_64x64\RarSmall.bmp
  • %APPDATA%\WinRAR\Themes\RARaddin_64x64\FolderUp.bmp
  • %APPDATA%\WinRAR\Themes\RARaddin_64x64\AboutLogo.bmp
  • %APPDATA%\WinRAR\Themes\Metro\ToolBar\wizard.bmp
  • %APPDATA%\WinRAR\Themes\RARaddin_64x64\DiskOff.ico
  • %APPDATA%\WinRAR\Themes\RARaddin_64x64\Estimate.bmp
  • %APPDATA%\WinRAR\Themes\RARaddin_64x64\DiskOn.ico
  • %APPDATA%\WinRAR\Themes\Aero II 96\RarSmall.bmp
  • %APPDATA%\WinRAR\Themes\Aero II 96\RAR.ico
  • %APPDATA%\WinRAR\Themes\Aero II 96\REV.ico
  • %APPDATA%\WinRAR\Themes\Aero II 96\SFX.ico
  • %APPDATA%\WinRAR\Themes\Aero II 96\Setup.ico
  • %APPDATA%\WinRAR\Themes\Aero II 96\PasswordOn.ico
  • %APPDATA%\WinRAR\Themes\Aero II 96\Estimate.bmp
  • %APPDATA%\WinRAR\Themes\Aero II 96\DiskOn.ico
  • %APPDATA%\WinRAR\Themes\Aero II 96\File.ico
  • %APPDATA%\WinRAR\Themes\Aero II 96\PassWordOff.ico
  • %APPDATA%\WinRAR\Themes\Aero II 96\FolderUp.bmp
  • %APPDATA%\WinRAR\Themes\Aero II 96\Toolbar\Comment.bmp
  • %APPDATA%\WinRAR\Themes\Aero II 96\Toolbar\Benchmark.bmp
  • %APPDATA%\WinRAR\Themes\Aero II 96\Toolbar\Convert.bmp
  • %APPDATA%\WinRAR\Themes\Aero II 96\Toolbar\Exit.bmp
  • %APPDATA%\WinRAR\Themes\Aero II 96\Toolbar\Delete.bmp
  • %APPDATA%\WinRAR\Themes\Aero II 96\Toolbar\Add.bmp
  • %APPDATA%\WinRAR\Themes\Aero II 96\SortDown.bmp
  • %APPDATA%\WinRAR\Themes\Aero II 96\SFXLogo.bmp
  • %APPDATA%\WinRAR\Themes\Aero II 96\SortUp.bmp
  • %APPDATA%\WinRAR\Themes\Aero II 96\WizardLogo.bmp
  • %APPDATA%\WinRAR\Themes\Aero II 96\Winrar_Theme_Description.txt
  • %ProgramFiles%\WinRAR\Formats\ace.fmt
  • %ProgramFiles%\WinRAR\Formats\UNACEV2.DLL
  • %ProgramFiles%\WinRAR\Formats\arj.fmt
  • %ProgramFiles%\WinRAR\Formats\cab.fmt
  • %ProgramFiles%\WinRAR\Formats\bz2.fmt
  • %ProgramFiles%\WinRAR\Formats\7zxa.dll
  • %ProgramFiles%\WinRAR\Zip.SFX
  • %ProgramFiles%\WinRAR\WinRAR.exe
  • %ProgramFiles%\WinRAR\ZipEn.SFX
  • %ProgramFiles%\WinRAR\Formats\7z.fmt
  • %ProgramFiles%\WinRAR\rarreg.key
  • %TEMP%\nsv3.tmp\nsExec.dll
  • %ProgramFiles%\WinRAR\Formats\z.fmt
  • %TEMP%\nsv3.tmp\ns4.tmp
  • %APPDATA%\WinRAR\Themes\Aero II 96\DiskOff.ico
  • %APPDATA%\WinRAR\Themes\Aero II 96\AboutLogo.bmp
  • %ProgramFiles%\WinRAR\Formats\xz.fmt
  • %ProgramFiles%\WinRAR\Formats\iso.fmt
  • %ProgramFiles%\WinRAR\Formats\gz.fmt
  • %ProgramFiles%\WinRAR\Formats\lzh.fmt
  • %ProgramFiles%\WinRAR\Formats\uue.fmt
  • %ProgramFiles%\WinRAR\Formats\tar.fmt
  • %APPDATA%\WinRAR\Themes\AS-Kristal-64.theme\Setup.ico
  • %APPDATA%\WinRAR\Themes\AS-Kristal-64.theme\REV.ico
  • %APPDATA%\WinRAR\Themes\AS-Kristal-64.theme\SFX.ico
  • %APPDATA%\WinRAR\Themes\AS-Kristal-64.theme\SortDown.bmp
  • %APPDATA%\WinRAR\Themes\AS-Kristal-64.theme\SFXLogo.bmp
  • %APPDATA%\WinRAR\Themes\AS-Kristal-64.theme\RARSmall.ico
  • %APPDATA%\WinRAR\Themes\AS-Kristal-64.theme\PasswordOff.ico
  • %APPDATA%\WinRAR\Themes\AS-Kristal-64.theme\FolderUp.bmp
  • %APPDATA%\WinRAR\Themes\AS-Kristal-64.theme\PasswordOn.ico
  • %APPDATA%\WinRAR\Themes\AS-Kristal-64.theme\RARSmall.bmp
  • %APPDATA%\WinRAR\Themes\AS-Kristal-64.theme\RAR.ico
  • %APPDATA%\WinRAR\Themes\AS-Kristal-64.theme\Toolbar\Convert.bmp
  • %APPDATA%\WinRAR\Themes\AS-Kristal-64.theme\Toolbar\Comment.bmp
  • %APPDATA%\WinRAR\Themes\AS-Kristal-64.theme\Toolbar\Delete.bmp
  • %APPDATA%\WinRAR\Themes\AS-Kristal-64.theme\Toolbar\Extract.bmp
  • %APPDATA%\WinRAR\Themes\AS-Kristal-64.theme\Toolbar\Exit.bmp
  • %APPDATA%\WinRAR\Themes\AS-Kristal-64.theme\Toolbar\Benchmark.bmp
  • %APPDATA%\WinRAR\Themes\AS-Kristal-64.theme\WinRAR_theme_description.txt
  • %APPDATA%\WinRAR\Themes\AS-Kristal-64.theme\SortUp.bmp
  • %APPDATA%\WinRAR\Themes\AS-Kristal-64.theme\Wizard.bmp
  • %APPDATA%\WinRAR\Themes\AS-Kristal-64.theme\Toolbar\Add.bmp
  • %APPDATA%\WinRAR\Themes\AS-Kristal-64.theme\WizardLogo.bmp
  • %APPDATA%\WinRAR\Themes\Aero II 96\Toolbar\Repair.bmp
  • %APPDATA%\WinRAR\Themes\Aero II 96\Toolbar\Protect.bmp
  • %APPDATA%\WinRAR\Themes\Aero II 96\Toolbar\Report.bmp
  • %APPDATA%\WinRAR\Themes\Aero II 96\Toolbar\Test.bmp
  • %APPDATA%\WinRAR\Themes\Aero II 96\Toolbar\SFX.bmp
  • %APPDATA%\WinRAR\Themes\Aero II 96\Toolbar\Print.bmp
  • %APPDATA%\WinRAR\Themes\Aero II 96\Toolbar\ExtractTo.bmp
  • %APPDATA%\WinRAR\Themes\Aero II 96\Toolbar\Extract.bmp
  • %APPDATA%\WinRAR\Themes\Aero II 96\Toolbar\Find.bmp
  • %APPDATA%\WinRAR\Themes\Aero II 96\Toolbar\Lock.bmp
  • %APPDATA%\WinRAR\Themes\Aero II 96\Toolbar\Info.bmp
  • %APPDATA%\WinRAR\Themes\AS-Kristal-64.theme\DragMove.cur
  • %APPDATA%\WinRAR\Themes\AS-Kristal-64.theme\DragCopy.cur
  • %APPDATA%\WinRAR\Themes\AS-Kristal-64.theme\DragNo.cur
  • %APPDATA%\WinRAR\Themes\AS-Kristal-64.theme\File.ico
  • %APPDATA%\WinRAR\Themes\AS-Kristal-64.theme\Estimate.bmp
  • %APPDATA%\WinRAR\Themes\AS-Kristal-64.theme\DiskOn.ico
  • %APPDATA%\WinRAR\Themes\Aero II 96\Toolbar\VirusScan.bmp
  • %APPDATA%\WinRAR\Themes\Aero II 96\Toolbar\View.bmp
  • %APPDATA%\WinRAR\Themes\Aero II 96\Toolbar\Wizard.bmp
  • %APPDATA%\WinRAR\Themes\AS-Kristal-64.theme\DiskOff.ico
  • %APPDATA%\WinRAR\Themes\AS-Kristal-64.theme\AboutLogo.bmp
  • %APPDATA%\WinRAR\Themes\RARaddin_64x64\Toolbar\Test.bmp
  • %APPDATA%\WinRAR\Themes\Vista_WinRAR_48x48_1.1\Toolbar\Protect.bmp
  • %APPDATA%\WinRAR\Themes\Vista_WinRAR_48x48_1.1\Toolbar\Print.bmp
  • %APPDATA%\WinRAR\Themes\Vista_WinRAR_48x48_1.1\Toolbar\Repair.bmp
  • %APPDATA%\WinRAR\Themes\Vista_WinRAR_48x48_1.1\Toolbar\SFX.bmp
  • %APPDATA%\WinRAR\Themes\Vista_WinRAR_48x48_1.1\Toolbar\Report.bmp
  • %APPDATA%\WinRAR\Themes\Vista_WinRAR_48x48_1.1\Toolbar\Lock.bmp
  • %APPDATA%\WinRAR\Themes\Vista_WinRAR_48x48_1.1\Toolbar\Extract.bmp
  • %APPDATA%\WinRAR\Themes\Vista_WinRAR_48x48_1.1\Toolbar\Exit.bmp
  • %APPDATA%\WinRAR\Themes\Vista_WinRAR_48x48_1.1\Toolbar\ExtractTo.bmp
  • %APPDATA%\WinRAR\Themes\Vista_WinRAR_48x48_1.1\Toolbar\Info.bmp
  • %APPDATA%\WinRAR\Themes\Vista_WinRAR_48x48_1.1\Toolbar\Find.bmp
  • %APPDATA%\WinRAR\Themes\windows-7\DragCopy.cur
  • %APPDATA%\WinRAR\Themes\windows-7\DiskOn.ico
  • %APPDATA%\WinRAR\Themes\windows-7\DragMove.cur
  • %APPDATA%\WinRAR\Themes\windows-7\Estimate.bmp
  • %APPDATA%\WinRAR\Themes\windows-7\DragNo.cur
  • %APPDATA%\WinRAR\Themes\windows-7\DiskOff.ico
  • %APPDATA%\WinRAR\Themes\Vista_WinRAR_48x48_1.1\Toolbar\View.bmp
  • %APPDATA%\WinRAR\Themes\Vista_WinRAR_48x48_1.1\Toolbar\Test.bmp
  • %APPDATA%\WinRAR\Themes\Vista_WinRAR_48x48_1.1\Toolbar\VirusScan.bmp
  • %APPDATA%\WinRAR\Themes\windows-7\AboutLogo.bmp
  • %APPDATA%\WinRAR\Themes\Vista_WinRAR_48x48_1.1\Toolbar\Wizard.bmp
  • %APPDATA%\WinRAR\Themes\Vista_WinRAR_48x48_1.1\RAR.ico
  • %APPDATA%\WinRAR\Themes\Vista_WinRAR_48x48_1.1\PasswordOn.ico
  • %APPDATA%\WinRAR\Themes\Vista_WinRAR_48x48_1.1\RARSmall.bmp
  • %APPDATA%\WinRAR\Themes\Vista_WinRAR_48x48_1.1\Setup.ico
  • %APPDATA%\WinRAR\Themes\Vista_WinRAR_48x48_1.1\REV.ico
  • %APPDATA%\WinRAR\Themes\Vista_WinRAR_48x48_1.1\PasswordOff.ico
  • %APPDATA%\WinRAR\Themes\Vista_WinRAR_48x48_1.1\DragNo.cur
  • %APPDATA%\WinRAR\Themes\Vista_WinRAR_48x48_1.1\DragCopy.cur
  • %APPDATA%\WinRAR\Themes\Vista_WinRAR_48x48_1.1\Estimate.bmp
  • %APPDATA%\WinRAR\Themes\Vista_WinRAR_48x48_1.1\FolderUp.bmp
  • %APPDATA%\WinRAR\Themes\Vista_WinRAR_48x48_1.1\File.ico
  • %APPDATA%\WinRAR\Themes\Vista_WinRAR_48x48_1.1\Toolbar\Benchmark.bmp
  • %APPDATA%\WinRAR\Themes\Vista_WinRAR_48x48_1.1\Toolbar\Add.bmp
  • %APPDATA%\WinRAR\Themes\Vista_WinRAR_48x48_1.1\Toolbar\Comment.bmp
  • %APPDATA%\WinRAR\Themes\Vista_WinRAR_48x48_1.1\Toolbar\Delete.bmp
  • %APPDATA%\WinRAR\Themes\Vista_WinRAR_48x48_1.1\Toolbar\Convert.bmp
  • %APPDATA%\WinRAR\Themes\Vista_WinRAR_48x48_1.1\WizardLogo.bmp
  • %APPDATA%\WinRAR\Themes\Vista_WinRAR_48x48_1.1\SFXLogo.bmp
  • %APPDATA%\WinRAR\Themes\Vista_WinRAR_48x48_1.1\SFX.ico
  • %APPDATA%\WinRAR\Themes\Vista_WinRAR_48x48_1.1\SortDown.bmp
  • %APPDATA%\WinRAR\Themes\Vista_WinRAR_48x48_1.1\winrar_theme_description.txt
  • %APPDATA%\WinRAR\Themes\Vista_WinRAR_48x48_1.1\SortUp.bmp
  • %APPDATA%\WinRAR\Themes\windows-7\ToolBar\SFX.bmp
  • %APPDATA%\WinRAR\Themes\windows-7\ToolBar\Report.bmp
  • %APPDATA%\WinRAR\Themes\windows-7\ToolBar\Test.bmp
  • %APPDATA%\WinRAR\Themes\windows-7\ToolBar\VirusScan.bmp
  • %APPDATA%\WinRAR\Themes\windows-7\ToolBar\View.bmp
  • %APPDATA%\WinRAR\Themes\windows-7\ToolBar\Repair.bmp
  • %APPDATA%\WinRAR\Themes\windows-7\ToolBar\Info.bmp
  • %APPDATA%\WinRAR\Themes\windows-7\ToolBar\Find.bmp
  • %APPDATA%\WinRAR\Themes\windows-7\ToolBar\Lock.bmp
  • %APPDATA%\WinRAR\Themes\windows-7\ToolBar\Protect.bmp
  • %APPDATA%\WinRAR\Themes\windows-7\ToolBar\Print.bmp
  • %ALLUSERSPROFILE%\Start Menu\Programs\WinRAR\WinRAR.lnk
  • %HOMEPATH%\Start Menu\Programs\WinRAR\Новости в последней версии.lnk
  • %ALLUSERSPROFILE%\Start Menu\Programs\WinRAR\Справка WinRAR.lnk
  • %ALLUSERSPROFILE%\Start Menu\Programs\WinRAR\Новости в последней версии.lnk
  • %ALLUSERSPROFILE%\Start Menu\Programs\WinRAR\Руководство по консольной версии RAR.lnk
  • %HOMEPATH%\Start Menu\Programs\WinRAR\Руководство по консольной версии RAR.lnk
  • %ProgramFiles%\WinRAR\rarnew.dat
  • %APPDATA%\WinRAR\Themes\windows-7\ToolBar\Wizard.bmp
  • %ProgramFiles%\WinRAR\zipnew.dat
  • %HOMEPATH%\Start Menu\Programs\WinRAR\Справка WinRAR.lnk
  • %HOMEPATH%\Start Menu\Programs\WinRAR\WinRAR.lnk
  • %APPDATA%\WinRAR\Themes\windows-7\Setup.ico
  • %APPDATA%\WinRAR\Themes\windows-7\REV.ico
  • %APPDATA%\WinRAR\Themes\windows-7\SFX.ico
  • %APPDATA%\WinRAR\Themes\windows-7\SortDown.bmp
  • %APPDATA%\WinRAR\Themes\windows-7\SFXLogo.bmp
  • %APPDATA%\WinRAR\Themes\windows-7\RarSmall.bmp
  • %APPDATA%\WinRAR\Themes\windows-7\FolderUp.bmp
  • %APPDATA%\WinRAR\Themes\windows-7\File.ico
  • %APPDATA%\WinRAR\Themes\windows-7\PasswordOff.ico
  • %APPDATA%\WinRAR\Themes\windows-7\RAR.ico
  • %APPDATA%\WinRAR\Themes\windows-7\PasswordOn.ico
  • %APPDATA%\WinRAR\Themes\windows-7\ToolBar\Delete.bmp
  • %APPDATA%\WinRAR\Themes\windows-7\ToolBar\Convert.bmp
  • %APPDATA%\WinRAR\Themes\windows-7\ToolBar\Exit.bmp
  • %APPDATA%\WinRAR\Themes\windows-7\ToolBar\ExtractTo.bmp
  • %APPDATA%\WinRAR\Themes\windows-7\ToolBar\Extract.bmp
  • %APPDATA%\WinRAR\Themes\windows-7\ToolBar\Comment.bmp
  • %APPDATA%\WinRAR\Themes\windows-7\WinRAR_Theme_Description.txt
  • %APPDATA%\WinRAR\Themes\windows-7\SortUp.bmp
  • %APPDATA%\WinRAR\Themes\windows-7\WizardLogo.bmp
  • %APPDATA%\WinRAR\Themes\windows-7\ToolBar\BenchMark.bmp
  • %APPDATA%\WinRAR\Themes\windows-7\ToolBar\Add.bmp
  • %APPDATA%\WinRAR\Themes\Vista_Ultimate_128x128\Toolbar\Exit.bmp
  • %APPDATA%\WinRAR\Themes\Vista_Ultimate_128x128\Toolbar\Delete.bmp
  • %APPDATA%\WinRAR\Themes\Vista_Ultimate_128x128\Toolbar\Extract.bmp
  • %APPDATA%\WinRAR\Themes\Vista_Ultimate_128x128\Toolbar\Find.bmp
  • %APPDATA%\WinRAR\Themes\Vista_Ultimate_128x128\Toolbar\ExtractTo.bmp
  • %APPDATA%\WinRAR\Themes\Vista_Ultimate_128x128\Toolbar\Convert.bmp
  • %APPDATA%\WinRAR\Themes\Vista_Ultimate_128x128\WizardLogo.bmp
  • %APPDATA%\WinRAR\Themes\Vista_Ultimate_128x128\WinRAR_theme_description.txt
  • %APPDATA%\WinRAR\Themes\Vista_Ultimate_128x128\Toolbar\Add.bmp
  • %APPDATA%\WinRAR\Themes\Vista_Ultimate_128x128\Toolbar\Comment.bmp
  • %APPDATA%\WinRAR\Themes\Vista_Ultimate_128x128\Toolbar\Benchmark.bmp
  • %APPDATA%\WinRAR\Themes\Vista_Ultimate_128x128\Toolbar\Test.bmp
  • %APPDATA%\WinRAR\Themes\Vista_Ultimate_128x128\Toolbar\SFX.bmp
  • %APPDATA%\WinRAR\Themes\Vista_Ultimate_128x128\Toolbar\View.bmp
  • %APPDATA%\WinRAR\Themes\Vista_Ultimate_128x128\Toolbar\Wizard.bmp
  • %APPDATA%\WinRAR\Themes\Vista_Ultimate_128x128\Toolbar\VirusScan.bmp
  • %APPDATA%\WinRAR\Themes\Vista_Ultimate_128x128\Toolbar\Report.bmp
  • %APPDATA%\WinRAR\Themes\Vista_Ultimate_128x128\Toolbar\Lock.bmp
  • %APPDATA%\WinRAR\Themes\Vista_Ultimate_128x128\Toolbar\Info.bmp
  • %APPDATA%\WinRAR\Themes\Vista_Ultimate_128x128\Toolbar\Print.bmp
  • %APPDATA%\WinRAR\Themes\Vista_Ultimate_128x128\Toolbar\Repair.bmp
  • %APPDATA%\WinRAR\Themes\Vista_Ultimate_128x128\Toolbar\Protect.bmp
  • %APPDATA%\WinRAR\Themes\Vista_Ultimate_128x128\DragMove.cur
  • %APPDATA%\WinRAR\Themes\Vista_Ultimate_128x128\DragCopy.cur
  • %APPDATA%\WinRAR\Themes\Vista_Ultimate_128x128\DragNo.cur
  • %APPDATA%\WinRAR\Themes\Vista_Ultimate_128x128\File.ico
  • %APPDATA%\WinRAR\Themes\Vista_Ultimate_128x128\Estimate.bmp
  • %APPDATA%\WinRAR\Themes\Vista_Ultimate_128x128\DiskOn.ico
  • %APPDATA%\WinRAR\Themes\RARaddin_64x64\Toolbar\VirusScan.bmp
  • %APPDATA%\WinRAR\Themes\RARaddin_64x64\Toolbar\View.bmp
  • %APPDATA%\WinRAR\Themes\RARaddin_64x64\Toolbar\Wizard.bmp
  • %APPDATA%\WinRAR\Themes\Vista_Ultimate_128x128\DiskOff.ico
  • %APPDATA%\WinRAR\Themes\Vista_Ultimate_128x128\AboutLogo.bmp
  • %APPDATA%\WinRAR\Themes\Vista_Ultimate_128x128\SFX.ico
  • %APPDATA%\WinRAR\Themes\Vista_Ultimate_128x128\Setup.ico
  • %APPDATA%\WinRAR\Themes\Vista_Ultimate_128x128\SFXLogo.bmp
  • %APPDATA%\WinRAR\Themes\Vista_Ultimate_128x128\SortUp.bmp
  • %APPDATA%\WinRAR\Themes\Vista_Ultimate_128x128\SortDown.bmp
  • %APPDATA%\WinRAR\Themes\Vista_Ultimate_128x128\REV.ico
  • %APPDATA%\WinRAR\Themes\Vista_Ultimate_128x128\PasswordOff.ico
  • %APPDATA%\WinRAR\Themes\Vista_Ultimate_128x128\FolderUp.bmp
  • %APPDATA%\WinRAR\Themes\Vista_Ultimate_128x128\PasswordOn.ico
  • %APPDATA%\WinRAR\Themes\Vista_Ultimate_128x128\RARSmall.bmp
  • %APPDATA%\WinRAR\Themes\Vista_Ultimate_128x128\RAR.ico
  • %APPDATA%\WinRAR\Themes\Vista_Ultimate_64x64\Toolbar\Find.bmp
  • %APPDATA%\WinRAR\Themes\Vista_Ultimate_64x64\Toolbar\ExtractTo.bmp
  • %APPDATA%\WinRAR\Themes\Vista_Ultimate_64x64\Toolbar\Info.bmp
  • %APPDATA%\WinRAR\Themes\Vista_Ultimate_64x64\Toolbar\Print.bmp
  • %APPDATA%\WinRAR\Themes\Vista_Ultimate_64x64\Toolbar\Lock.bmp
  • %APPDATA%\WinRAR\Themes\Vista_Ultimate_64x64\Toolbar\Extract.bmp
  • %APPDATA%\WinRAR\Themes\Vista_Ultimate_64x64\Toolbar\Comment.bmp
  • %APPDATA%\WinRAR\Themes\Vista_Ultimate_64x64\Toolbar\Benchmark.bmp
  • %APPDATA%\WinRAR\Themes\Vista_Ultimate_64x64\Toolbar\Convert.bmp
  • %APPDATA%\WinRAR\Themes\Vista_Ultimate_64x64\Toolbar\Exit.bmp
  • %APPDATA%\WinRAR\Themes\Vista_Ultimate_64x64\Toolbar\Delete.bmp
  • %APPDATA%\WinRAR\Themes\Vista_Ultimate_64x64\Toolbar\Wizard.bmp
  • %APPDATA%\WinRAR\Themes\Vista_Ultimate_64x64\Toolbar\VirusScan.bmp
  • %APPDATA%\WinRAR\Themes\Vista_WinRAR_48x48_1.1\AboutLogo.bmp
  • %APPDATA%\WinRAR\Themes\Vista_WinRAR_48x48_1.1\DiskOn.ico
  • %APPDATA%\WinRAR\Themes\Vista_WinRAR_48x48_1.1\DiskOff.ico
  • %APPDATA%\WinRAR\Themes\Vista_Ultimate_64x64\Toolbar\View.bmp
  • %APPDATA%\WinRAR\Themes\Vista_Ultimate_64x64\Toolbar\Repair.bmp
  • %APPDATA%\WinRAR\Themes\Vista_Ultimate_64x64\Toolbar\Protect.bmp
  • %APPDATA%\WinRAR\Themes\Vista_Ultimate_64x64\Toolbar\Report.bmp
  • %APPDATA%\WinRAR\Themes\Vista_Ultimate_64x64\Toolbar\Test.bmp
  • %APPDATA%\WinRAR\Themes\Vista_Ultimate_64x64\Toolbar\SFX.bmp
  • %APPDATA%\WinRAR\Themes\Vista_Ultimate_64x64\File.ico
  • %APPDATA%\WinRAR\Themes\Vista_Ultimate_64x64\Estimate.bmp
  • %APPDATA%\WinRAR\Themes\Vista_Ultimate_64x64\FolderUp.bmp
  • %APPDATA%\WinRAR\Themes\Vista_Ultimate_64x64\PasswordOn.ico
  • %APPDATA%\WinRAR\Themes\Vista_Ultimate_64x64\PasswordOff.ico
  • %APPDATA%\WinRAR\Themes\Vista_Ultimate_64x64\DragNo.cur
  • %APPDATA%\WinRAR\Themes\Vista_Ultimate_64x64\DiskOff.ico
  • %APPDATA%\WinRAR\Themes\Vista_Ultimate_64x64\AboutLogo.bmp
  • %APPDATA%\WinRAR\Themes\Vista_Ultimate_64x64\DiskOn.ico
  • %APPDATA%\WinRAR\Themes\Vista_Ultimate_64x64\DragMove.cur
  • %APPDATA%\WinRAR\Themes\Vista_Ultimate_64x64\DragCopy.cur
  • %APPDATA%\WinRAR\Themes\Vista_Ultimate_64x64\SortUp.bmp
  • %APPDATA%\WinRAR\Themes\Vista_Ultimate_64x64\SortDown.bmp
  • %APPDATA%\WinRAR\Themes\Vista_Ultimate_64x64\WinRAR_theme_description.txt
  • %APPDATA%\WinRAR\Themes\Vista_Ultimate_64x64\Toolbar\Add.bmp
  • %APPDATA%\WinRAR\Themes\Vista_Ultimate_64x64\WizardLogo.bmp
  • %APPDATA%\WinRAR\Themes\Vista_Ultimate_64x64\SFXLogo.bmp
  • %APPDATA%\WinRAR\Themes\Vista_Ultimate_64x64\RARSmall.bmp
  • %APPDATA%\WinRAR\Themes\Vista_Ultimate_64x64\RAR.ico
  • %APPDATA%\WinRAR\Themes\Vista_Ultimate_64x64\REV.ico
  • %APPDATA%\WinRAR\Themes\Vista_Ultimate_64x64\SFX.ico
  • %APPDATA%\WinRAR\Themes\Vista_Ultimate_64x64\Setup.ico
  • %ProgramFiles%\WinRAR\WinRAR.chm
  • %TEMP%\RarSFX0\WinRAR5PREFS\Themes\windows-7\ToolBar\Info.bmp
  • %TEMP%\RarSFX0\WinRAR5PREFS\Themes\windows-7\ToolBar\Find.bmp
  • %TEMP%\RarSFX0\WinRAR5PREFS\Themes\windows-7\ToolBar\Lock.bmp
  • %TEMP%\RarSFX0\WinRAR5PREFS\Themes\windows-7\ToolBar\Protect.bmp
  • %TEMP%\RarSFX0\WinRAR5PREFS\Themes\windows-7\ToolBar\Print.bmp
  • %TEMP%\RarSFX0\WinRAR5PREFS\Themes\windows-7\ToolBar\ExtractTo.bmp
  • %TEMP%\RarSFX0\WinRAR5PREFS\Themes\windows-7\ToolBar\Convert.bmp
  • %TEMP%\RarSFX0\WinRAR5PREFS\Themes\windows-7\ToolBar\Comment.bmp
  • %TEMP%\RarSFX0\WinRAR5PREFS\Themes\windows-7\ToolBar\Delete.bmp
  • %TEMP%\RarSFX0\WinRAR5PREFS\Themes\windows-7\ToolBar\Extract.bmp
  • %TEMP%\RarSFX0\WinRAR5PREFS\Themes\windows-7\ToolBar\Exit.bmp
  • %TEMP%\RarSFX0\WinRAR5PREFS\Themes\windows-7\WinRAR_Theme_Description.txt
  • %TEMP%\RarSFX0\WinRAR5PREFS\Themes\windows-7\ToolBar\Wizard.bmp
  • %TEMP%\RarSFX0\WinRAR5PREFS\Themes\windows-7\WizardLogo.bmp
  • %TEMP%\RarSFX0\WinRAR5PREFS\Themes\Vista_WinRAR_48x48_1.1\DiskOff.ico
  • %TEMP%\RarSFX0\WinRAR5PREFS\Themes\Vista_WinRAR_48x48_1.1\AboutLogo.bmp
  • %TEMP%\RarSFX0\WinRAR5PREFS\Themes\windows-7\ToolBar\VirusScan.bmp
  • %TEMP%\RarSFX0\WinRAR5PREFS\Themes\windows-7\ToolBar\Report.bmp
  • %TEMP%\RarSFX0\WinRAR5PREFS\Themes\windows-7\ToolBar\Repair.bmp
  • %TEMP%\RarSFX0\WinRAR5PREFS\Themes\windows-7\ToolBar\SFX.bmp
  • %TEMP%\RarSFX0\WinRAR5PREFS\Themes\windows-7\ToolBar\View.bmp
  • %TEMP%\RarSFX0\WinRAR5PREFS\Themes\windows-7\ToolBar\Test.bmp
  • %TEMP%\RarSFX0\WinRAR5PREFS\Themes\windows-7\Estimate.bmp
  • %TEMP%\RarSFX0\WinRAR5PREFS\Themes\windows-7\DragNo.cur
  • %TEMP%\RarSFX0\WinRAR5PREFS\Themes\windows-7\File.ico
  • %TEMP%\RarSFX0\WinRAR5PREFS\Themes\windows-7\PasswordOff.ico
  • %TEMP%\RarSFX0\WinRAR5PREFS\Themes\windows-7\FolderUp.bmp
  • %TEMP%\RarSFX0\WinRAR5PREFS\Themes\windows-7\DragMove.cur
  • %TEMP%\RarSFX0\WinRAR5PREFS\Themes\windows-7\AboutLogo.bmp
  • %TEMP%\RarSFX0\WinRAR5PREFS\Themes\Metro\wizardlogo.bmp
  • %TEMP%\RarSFX0\WinRAR5PREFS\Themes\windows-7\DiskOff.ico
  • %TEMP%\RarSFX0\WinRAR5PREFS\Themes\windows-7\DragCopy.cur
  • %TEMP%\RarSFX0\WinRAR5PREFS\Themes\windows-7\DiskOn.ico
  • %TEMP%\RarSFX0\WinRAR5PREFS\Themes\windows-7\SortDown.bmp
  • %TEMP%\RarSFX0\WinRAR5PREFS\Themes\windows-7\SFXLogo.bmp
  • %TEMP%\RarSFX0\WinRAR5PREFS\Themes\windows-7\SortUp.bmp
  • %TEMP%\RarSFX0\WinRAR5PREFS\Themes\windows-7\ToolBar\BenchMark.bmp
  • %TEMP%\RarSFX0\WinRAR5PREFS\Themes\windows-7\ToolBar\Add.bmp
  • %TEMP%\RarSFX0\WinRAR5PREFS\Themes\windows-7\SFX.ico
  • %TEMP%\RarSFX0\WinRAR5PREFS\Themes\windows-7\RAR.ico
  • %TEMP%\RarSFX0\WinRAR5PREFS\Themes\windows-7\PasswordOn.ico
  • %TEMP%\RarSFX0\WinRAR5PREFS\Themes\windows-7\RarSmall.bmp
  • %TEMP%\RarSFX0\WinRAR5PREFS\Themes\windows-7\Setup.ico
  • %TEMP%\RarSFX0\WinRAR5PREFS\Themes\windows-7\REV.ico
  • %TEMP%\RarSFX0\WinRAR5PREFS\Themes\Vista_WinRAR_48x48_1.1\Toolbar\Repair.bmp
  • %TEMP%\RarSFX0\WinRAR5PREFS\Themes\Vista_WinRAR_48x48_1.1\Toolbar\Protect.bmp
  • %TEMP%\RarSFX0\WinRAR5PREFS\Themes\Vista_WinRAR_48x48_1.1\Toolbar\Report.bmp
  • %TEMP%\RarSFX0\WinRAR5PREFS\Themes\Vista_WinRAR_48x48_1.1\Toolbar\Test.bmp
  • %TEMP%\RarSFX0\WinRAR5PREFS\Themes\Vista_WinRAR_48x48_1.1\Toolbar\SFX.bmp
  • %TEMP%\RarSFX0\WinRAR5PREFS\Themes\Vista_WinRAR_48x48_1.1\Toolbar\Print.bmp
  • %TEMP%\RarSFX0\WinRAR5PREFS\Themes\Vista_WinRAR_48x48_1.1\Toolbar\ExtractTo.bmp
  • %TEMP%\RarSFX0\WinRAR5PREFS\Themes\Vista_WinRAR_48x48_1.1\Toolbar\Extract.bmp
  • %TEMP%\RarSFX0\WinRAR5PREFS\Themes\Vista_WinRAR_48x48_1.1\Toolbar\Find.bmp
  • %TEMP%\RarSFX0\WinRAR5PREFS\Themes\Vista_WinRAR_48x48_1.1\Toolbar\Lock.bmp
  • %TEMP%\RarSFX0\WinRAR5PREFS\Themes\Vista_WinRAR_48x48_1.1\Toolbar\Info.bmp
  • %TEMP%\RarSFX0\WinRAR5PREFS\Themes\AS-Kristal-64.theme\DiskOn.ico
  • %TEMP%\RarSFX0\WinRAR5PREFS\Themes\AS-Kristal-64.theme\DiskOff.ico
  • %TEMP%\RarSFX0\WinRAR5PREFS\Themes\AS-Kristal-64.theme\DragCopy.cur
  • %TEMP%\RarSFX0\WinRAR5PREFS\Themes\AS-Kristal-64.theme\DragNo.cur
  • %TEMP%\RarSFX0\WinRAR5PREFS\Themes\AS-Kristal-64.theme\DragMove.cur
  • %TEMP%\RarSFX0\WinRAR5PREFS\Themes\AS-Kristal-64.theme\AboutLogo.bmp
  • %TEMP%\RarSFX0\WinRAR5PREFS\Themes\Vista_WinRAR_48x48_1.1\Toolbar\VirusScan.bmp
  • %TEMP%\RarSFX0\WinRAR5PREFS\Themes\Vista_WinRAR_48x48_1.1\Toolbar\View.bmp
  • %TEMP%\RarSFX0\WinRAR5PREFS\Themes\Vista_WinRAR_48x48_1.1\Toolbar\Wizard.bmp
  • %TEMP%\RarSFX0\WinRAR5PREFS\Themes\Vista_WinRAR_48x48_1.1\WizardLogo.bmp
  • %TEMP%\RarSFX0\WinRAR5PREFS\Themes\Vista_WinRAR_48x48_1.1\winrar_theme_description.txt
  • %TEMP%\RarSFX0\WinRAR5PREFS\Themes\Vista_WinRAR_48x48_1.1\PasswordOn.ico
  • %TEMP%\RarSFX0\WinRAR5PREFS\Themes\Vista_WinRAR_48x48_1.1\PasswordOff.ico
  • %TEMP%\RarSFX0\WinRAR5PREFS\Themes\Vista_WinRAR_48x48_1.1\RAR.ico
  • %TEMP%\RarSFX0\WinRAR5PREFS\Themes\Vista_WinRAR_48x48_1.1\REV.ico
  • %TEMP%\RarSFX0\WinRAR5PREFS\Themes\Vista_WinRAR_48x48_1.1\RARSmall.bmp
  • %TEMP%\RarSFX0\WinRAR5PREFS\Themes\Vista_WinRAR_48x48_1.1\FolderUp.bmp
  • %TEMP%\RarSFX0\WinRAR5PREFS\Themes\Vista_WinRAR_48x48_1.1\DragCopy.cur
  • %TEMP%\RarSFX0\WinRAR5PREFS\Themes\Vista_WinRAR_48x48_1.1\DiskOn.ico
  • %TEMP%\RarSFX0\WinRAR5PREFS\Themes\Vista_WinRAR_48x48_1.1\DragNo.cur
  • %TEMP%\RarSFX0\WinRAR5PREFS\Themes\Vista_WinRAR_48x48_1.1\File.ico
  • %TEMP%\RarSFX0\WinRAR5PREFS\Themes\Vista_WinRAR_48x48_1.1\Estimate.bmp
  • %TEMP%\RarSFX0\WinRAR5PREFS\Themes\Vista_WinRAR_48x48_1.1\Toolbar\Comment.bmp
  • %TEMP%\RarSFX0\WinRAR5PREFS\Themes\Vista_WinRAR_48x48_1.1\Toolbar\Benchmark.bmp
  • %TEMP%\RarSFX0\WinRAR5PREFS\Themes\Vista_WinRAR_48x48_1.1\Toolbar\Convert.bmp
  • %TEMP%\RarSFX0\WinRAR5PREFS\Themes\Vista_WinRAR_48x48_1.1\Toolbar\Exit.bmp
  • %TEMP%\RarSFX0\WinRAR5PREFS\Themes\Vista_WinRAR_48x48_1.1\Toolbar\Delete.bmp
  • %TEMP%\RarSFX0\WinRAR5PREFS\Themes\Vista_WinRAR_48x48_1.1\Toolbar\Add.bmp
  • %TEMP%\RarSFX0\WinRAR5PREFS\Themes\Vista_WinRAR_48x48_1.1\SFX.ico
  • %TEMP%\RarSFX0\WinRAR5PREFS\Themes\Vista_WinRAR_48x48_1.1\Setup.ico
  • %TEMP%\RarSFX0\WinRAR5PREFS\Themes\Vista_WinRAR_48x48_1.1\SFXLogo.bmp
  • %TEMP%\RarSFX0\WinRAR5PREFS\Themes\Vista_WinRAR_48x48_1.1\SortUp.bmp
  • %TEMP%\RarSFX0\WinRAR5PREFS\Themes\Vista_WinRAR_48x48_1.1\SortDown.bmp
  • %TEMP%\RarSFX0\WinRAR5PREFS\Themes\Aero II 96\Toolbar\ExtractTo.bmp
  • %TEMP%\RarSFX0\WinRAR5PREFS\Themes\Aero II 96\Toolbar\Extract.bmp
  • %TEMP%\RarSFX0\WinRAR5PREFS\Themes\Aero II 96\Toolbar\Find.bmp
  • %TEMP%\RarSFX0\WinRAR5PREFS\Themes\Aero II 96\Toolbar\Lock.bmp
  • %TEMP%\RarSFX0\WinRAR5PREFS\Themes\Aero II 96\Toolbar\Info.bmp
  • %TEMP%\RarSFX0\WinRAR5PREFS\Themes\Aero II 96\Toolbar\Exit.bmp
  • %TEMP%\RarSFX0\WinRAR5PREFS\Themes\Aero II 96\Toolbar\Benchmark.bmp
  • %TEMP%\RarSFX0\WinRAR5PREFS\Themes\Aero II 96\Toolbar\Add.bmp
  • %TEMP%\RarSFX0\WinRAR5PREFS\Themes\Aero II 96\Toolbar\Comment.bmp
  • %TEMP%\RarSFX0\WinRAR5PREFS\Themes\Aero II 96\Toolbar\Delete.bmp
  • %TEMP%\RarSFX0\WinRAR5PREFS\Themes\Aero II 96\Toolbar\Convert.bmp
  • %TEMP%\RarSFX0\WinRAR5PREFS\Themes\Aero II 96\Toolbar\View.bmp
  • %TEMP%\RarSFX0\WinRAR5PREFS\Themes\Aero II 96\Toolbar\Thumbs.db
  • %TEMP%\RarSFX0\WinRAR5PREFS\Themes\Aero II 96\Toolbar\VirusScan.bmp
  • %TEMP%\RarSFX0\WinRAR5PREFS\Themes\Aero II 96\Winrar_Theme_Description.txt
  • %TEMP%\RarSFX0\WinRAR5PREFS\Themes\Aero II 96\Toolbar\Wizard.bmp
  • %TEMP%\RarSFX0\WinRAR5PREFS\Themes\Aero II 96\Toolbar\Test.bmp
  • %TEMP%\RarSFX0\WinRAR5PREFS\Themes\Aero II 96\Toolbar\Protect.bmp
  • %TEMP%\RarSFX0\WinRAR5PREFS\Themes\Aero II 96\Toolbar\Print.bmp
  • %TEMP%\RarSFX0\WinRAR5PREFS\Themes\Aero II 96\Toolbar\Repair.bmp
  • %TEMP%\RarSFX0\WinRAR5PREFS\Themes\Aero II 96\Toolbar\SFX.bmp
  • %TEMP%\RarSFX0\WinRAR5PREFS\Themes\Aero II 96\Toolbar\Report.bmp
  • %TEMP%\RarSFX0\WinRAR5PREFS\Themes\Aero II 96\DiskOn.ico
  • %TEMP%\RarSFX0\WinRAR5PREFS\Themes\Aero II 96\DiskOff.ico
  • %TEMP%\RarSFX0\WinRAR5PREFS\Themes\Aero II 96\Estimate.bmp
  • %TEMP%\RarSFX0\WinRAR5PREFS\Themes\Aero II 96\FolderUp.bmp
  • %TEMP%\RarSFX0\WinRAR5PREFS\Themes\Aero II 96\File.ico
  • %TEMP%\RarSFX0\WinRAR5PREFS\Themes\Aero II 96\AboutLogo.bmp
  • %TEMP%\RarSFX0\silentinstall.cmd
  • %TEMP%\RarSFX0\programfiles.exe
  • %TEMP%\RarSFX0\WinRAR.v5.00.exe
  • %TEMP%\RarSFX0\WinRAR5PREFS\Settings.reg
  • %TEMP%\RarSFX0\WinRAR5PREFS\RarReg.key
  • %TEMP%\RarSFX0\WinRAR5PREFS\Themes\Aero II 96\SFXLogo.bmp
  • %TEMP%\RarSFX0\WinRAR5PREFS\Themes\Aero II 96\SFX.ico
  • %TEMP%\RarSFX0\WinRAR5PREFS\Themes\Aero II 96\SortDown.bmp
  • %TEMP%\RarSFX0\WinRAR5PREFS\Themes\Aero II 96\Thumbs.db
  • %TEMP%\RarSFX0\WinRAR5PREFS\Themes\Aero II 96\SortUp.bmp
  • %TEMP%\RarSFX0\WinRAR5PREFS\Themes\Aero II 96\Setup.ico
  • %TEMP%\RarSFX0\WinRAR5PREFS\Themes\Aero II 96\PasswordOn.ico
  • %TEMP%\RarSFX0\WinRAR5PREFS\Themes\Aero II 96\PassWordOff.ico
  • %TEMP%\RarSFX0\WinRAR5PREFS\Themes\Aero II 96\RAR.ico
  • %TEMP%\RarSFX0\WinRAR5PREFS\Themes\Aero II 96\REV.ico
  • %TEMP%\RarSFX0\WinRAR5PREFS\Themes\Aero II 96\RarSmall.bmp
  • %TEMP%\RarSFX0\WinRAR5PREFS\Themes\Metro\ToolBar\extractto.bmp
  • %TEMP%\RarSFX0\WinRAR5PREFS\Themes\Metro\ToolBar\extract.bmp
  • %TEMP%\RarSFX0\WinRAR5PREFS\Themes\Metro\ToolBar\find.bmp
  • %TEMP%\RarSFX0\WinRAR5PREFS\Themes\Metro\ToolBar\lock.bmp
  • %TEMP%\RarSFX0\WinRAR5PREFS\Themes\Metro\ToolBar\info.bmp
  • %TEMP%\RarSFX0\WinRAR5PREFS\Themes\Metro\ToolBar\exit.bmp
  • %TEMP%\RarSFX0\WinRAR5PREFS\Themes\Metro\ToolBar\benchmark.bmp
  • %TEMP%\RarSFX0\WinRAR5PREFS\Themes\Metro\ToolBar\add.bmp
  • %TEMP%\RarSFX0\WinRAR5PREFS\Themes\Metro\ToolBar\comment.bmp
  • %TEMP%\RarSFX0\WinRAR5PREFS\Themes\Metro\ToolBar\delete.bmp
  • %TEMP%\RarSFX0\WinRAR5PREFS\Themes\Metro\ToolBar\convert.bmp
  • %TEMP%\RarSFX0\WinRAR5PREFS\Themes\Metro\ToolBar\view.bmp
  • %TEMP%\RarSFX0\WinRAR5PREFS\Themes\Metro\ToolBar\Thumbs.db
  • %TEMP%\RarSFX0\WinRAR5PREFS\Themes\Metro\ToolBar\virusscan.bmp
  • %TEMP%\RarSFX0\WinRAR5PREFS\Themes\Metro\WinRAR_Theme_Description.txt
  • %TEMP%\RarSFX0\WinRAR5PREFS\Themes\Metro\ToolBar\wizard.bmp
  • %TEMP%\RarSFX0\WinRAR5PREFS\Themes\Metro\ToolBar\test.bmp
  • %TEMP%\RarSFX0\WinRAR5PREFS\Themes\Metro\ToolBar\protect.bmp
  • %TEMP%\RarSFX0\WinRAR5PREFS\Themes\Metro\ToolBar\print.bmp
  • %TEMP%\RarSFX0\WinRAR5PREFS\Themes\Metro\ToolBar\repair.bmp
  • %TEMP%\RarSFX0\WinRAR5PREFS\Themes\Metro\ToolBar\sfx.bmp
  • %TEMP%\RarSFX0\WinRAR5PREFS\Themes\Metro\ToolBar\report.bmp
  • %TEMP%\RarSFX0\WinRAR5PREFS\Themes\Metro\Dragno.cur
  • %TEMP%\RarSFX0\WinRAR5PREFS\Themes\Metro\dragmove.cur
  • %TEMP%\RarSFX0\WinRAR5PREFS\Themes\Metro\estimate.bmp
  • %TEMP%\RarSFX0\WinRAR5PREFS\Themes\Metro\folderup.bmp
  • %TEMP%\RarSFX0\WinRAR5PREFS\Themes\Metro\File.ico
  • %TEMP%\RarSFX0\WinRAR5PREFS\Themes\Metro\dragcopy.cur
  • %TEMP%\RarSFX0\WinRAR5PREFS\Themes\Metro\aboutlogo.bmp
  • %TEMP%\RarSFX0\WinRAR5PREFS\Themes\Aero II 96\WizardLogo.bmp
  • %TEMP%\RarSFX0\WinRAR5PREFS\Themes\Metro\comment.bmp
  • %TEMP%\RarSFX0\WinRAR5PREFS\Themes\Metro\DiskOn.ico
  • %TEMP%\RarSFX0\WinRAR5PREFS\Themes\Metro\DiskOff.ico
  • %TEMP%\RarSFX0\WinRAR5PREFS\Themes\Metro\sfxlogo.bmp
  • %TEMP%\RarSFX0\WinRAR5PREFS\Themes\Metro\SFX.ico
  • %TEMP%\RarSFX0\WinRAR5PREFS\Themes\Metro\SortDown.bmp
  • %TEMP%\RarSFX0\WinRAR5PREFS\Themes\Metro\Thumbs.db
  • %TEMP%\RarSFX0\WinRAR5PREFS\Themes\Metro\SortUp.bmp
  • %TEMP%\RarSFX0\WinRAR5PREFS\Themes\Metro\Setup.ico
  • %TEMP%\RarSFX0\WinRAR5PREFS\Themes\Metro\PasswordOn.ico
  • %TEMP%\RarSFX0\WinRAR5PREFS\Themes\Metro\PasswordOff.ico
  • %TEMP%\RarSFX0\WinRAR5PREFS\Themes\Metro\RAR.ico
  • %TEMP%\RarSFX0\WinRAR5PREFS\Themes\Metro\REV.ico
  • %TEMP%\RarSFX0\WinRAR5PREFS\Themes\Metro\RarSmall.bmp
  • %TEMP%\RarSFX0\WinRAR5PREFS\Themes\AS-Kristal-64.theme\Estimate.bmp
  • %TEMP%\RarSFX0\WinRAR5PREFS\Themes\Vista_Ultimate_128x128\DragCopy.cur
  • %TEMP%\RarSFX0\WinRAR5PREFS\Themes\Vista_Ultimate_128x128\DiskOn.ico
  • %TEMP%\RarSFX0\WinRAR5PREFS\Themes\Vista_Ultimate_128x128\DragMove.cur
  • %TEMP%\RarSFX0\WinRAR5PREFS\Themes\Vista_Ultimate_128x128\Estimate.bmp
  • %TEMP%\RarSFX0\WinRAR5PREFS\Themes\Vista_Ultimate_128x128\DragNo.cur
  • %TEMP%\RarSFX0\WinRAR5PREFS\Themes\Vista_Ultimate_128x128\DiskOff.ico
  • %TEMP%\RarSFX0\WinRAR5PREFS\Themes\Vista_Ultimate_64x64\Toolbar\Wizard.bmp
  • %TEMP%\RarSFX0\WinRAR5PREFS\Themes\Vista_Ultimate_64x64\Toolbar\VirusScan.bmp
  • %TEMP%\RarSFX0\WinRAR5PREFS\Themes\Vista_Ultimate_64x64\WinRAR_theme_description.txt
  • %TEMP%\RarSFX0\WinRAR5PREFS\Themes\Vista_Ultimate_128x128\AboutLogo.bmp
  • %TEMP%\RarSFX0\WinRAR5PREFS\Themes\Vista_Ultimate_64x64\WizardLogo.bmp
  • %TEMP%\RarSFX0\WinRAR5PREFS\Themes\Vista_Ultimate_128x128\Setup.ico
  • %TEMP%\RarSFX0\WinRAR5PREFS\Themes\Vista_Ultimate_128x128\REV.ico
  • %TEMP%\RarSFX0\WinRAR5PREFS\Themes\Vista_Ultimate_128x128\SFX.ico
  • %TEMP%\RarSFX0\WinRAR5PREFS\Themes\Vista_Ultimate_128x128\SortDown.bmp
  • %TEMP%\RarSFX0\WinRAR5PREFS\Themes\Vista_Ultimate_128x128\SFXLogo.bmp
  • %TEMP%\RarSFX0\WinRAR5PREFS\Themes\Vista_Ultimate_128x128\RARSmall.bmp
  • %TEMP%\RarSFX0\WinRAR5PREFS\Themes\Vista_Ultimate_128x128\FolderUp.bmp
  • %TEMP%\RarSFX0\WinRAR5PREFS\Themes\Vista_Ultimate_128x128\File.ico
  • %TEMP%\RarSFX0\WinRAR5PREFS\Themes\Vista_Ultimate_128x128\PasswordOff.ico
  • %TEMP%\RarSFX0\WinRAR5PREFS\Themes\Vista_Ultimate_128x128\RAR.ico
  • %TEMP%\RarSFX0\WinRAR5PREFS\Themes\Vista_Ultimate_128x128\PasswordOn.ico
  • %TEMP%\RarSFX0\WinRAR5PREFS\Themes\Vista_Ultimate_64x64\Toolbar\Convert.bmp
  • %TEMP%\RarSFX0\WinRAR5PREFS\Themes\Vista_Ultimate_64x64\Toolbar\Comment.bmp
  • %TEMP%\RarSFX0\WinRAR5PREFS\Themes\Vista_Ultimate_64x64\Toolbar\Delete.bmp
  • %TEMP%\RarSFX0\WinRAR5PREFS\Themes\Vista_Ultimate_64x64\Toolbar\Extract.bmp
  • %TEMP%\RarSFX0\WinRAR5PREFS\Themes\Vista_Ultimate_64x64\Toolbar\Exit.bmp
  • %TEMP%\RarSFX0\WinRAR5PREFS\Themes\Vista_Ultimate_64x64\Toolbar\Benchmark.bmp
  • %TEMP%\RarSFX0\WinRAR5PREFS\Themes\Vista_Ultimate_64x64\SFXLogo.bmp
  • %TEMP%\RarSFX0\WinRAR5PREFS\Themes\Vista_Ultimate_64x64\SFX.ico
  • %TEMP%\RarSFX0\WinRAR5PREFS\Themes\Vista_Ultimate_64x64\SortDown.bmp
  • %TEMP%\RarSFX0\WinRAR5PREFS\Themes\Vista_Ultimate_64x64\Toolbar\Add.bmp
  • %TEMP%\RarSFX0\WinRAR5PREFS\Themes\Vista_Ultimate_64x64\SortUp.bmp
  • %TEMP%\RarSFX0\WinRAR5PREFS\Themes\Vista_Ultimate_64x64\Toolbar\Report.bmp
  • %TEMP%\RarSFX0\WinRAR5PREFS\Themes\Vista_Ultimate_64x64\Toolbar\Repair.bmp
  • %TEMP%\RarSFX0\WinRAR5PREFS\Themes\Vista_Ultimate_64x64\Toolbar\SFX.bmp
  • %TEMP%\RarSFX0\WinRAR5PREFS\Themes\Vista_Ultimate_64x64\Toolbar\View.bmp
  • %TEMP%\RarSFX0\WinRAR5PREFS\Themes\Vista_Ultimate_64x64\Toolbar\Test.bmp
  • %TEMP%\RarSFX0\WinRAR5PREFS\Themes\Vista_Ultimate_64x64\Toolbar\Protect.bmp
  • %TEMP%\RarSFX0\WinRAR5PREFS\Themes\Vista_Ultimate_64x64\Toolbar\Find.bmp
  • %TEMP%\RarSFX0\WinRAR5PREFS\Themes\Vista_Ultimate_64x64\Toolbar\ExtractTo.bmp
  • %TEMP%\RarSFX0\WinRAR5PREFS\Themes\Vista_Ultimate_64x64\Toolbar\Info.bmp
  • %TEMP%\RarSFX0\WinRAR5PREFS\Themes\Vista_Ultimate_64x64\Toolbar\Print.bmp
  • %TEMP%\RarSFX0\WinRAR5PREFS\Themes\Vista_Ultimate_64x64\Toolbar\Lock.bmp
  • %ProgramFiles%\WinRAR\Order.htm
  • %ProgramFiles%\WinRAR\License.txt
  • %ProgramFiles%\WinRAR\Rar.exe
  • %ProgramFiles%\WinRAR\RarExt.dll
  • %ProgramFiles%\WinRAR\Rar.txt
  • %ProgramFiles%\WinRAR\Descript.ion
  • %TEMP%\nsq2.tmp
  • %TEMP%\RarSFX0\WinRAR5PREFS\Themes\Vista_Ultimate_128x128\WizardLogo.bmp
  • %TEMP%\nsv3.tmp\System.dll
  • %ProgramFiles%\WinRAR\DefaultEn.SFX
  • %ProgramFiles%\WinRAR\Default.SFX
  • %ProgramFiles%\WinRAR\Uninstall.lst
  • %ProgramFiles%\WinRAR\Uninstall.exe
  • %ProgramFiles%\WinRAR\WhatsNew.txt
  • %ProgramFiles%\WinRAR\WinConEn.SFX
  • %ProgramFiles%\WinRAR\WinCon.SFX
  • %ProgramFiles%\WinRAR\UnRAR.exe
  • %ProgramFiles%\WinRAR\RarFiles.lst
  • %ProgramFiles%\WinRAR\RarExt64.dll
  • %ProgramFiles%\WinRAR\RarLng.dll
  • %ProgramFiles%\WinRAR\ReadMe.txt
  • %ProgramFiles%\WinRAR\ReadMe.rus.txt
  • %TEMP%\RarSFX0\WinRAR5PREFS\Themes\Vista_Ultimate_128x128\Toolbar\Extract.bmp
  • %TEMP%\RarSFX0\WinRAR5PREFS\Themes\Vista_Ultimate_128x128\Toolbar\Exit.bmp
  • %TEMP%\RarSFX0\WinRAR5PREFS\Themes\Vista_Ultimate_128x128\Toolbar\ExtractTo.bmp
  • %TEMP%\RarSFX0\WinRAR5PREFS\Themes\Vista_Ultimate_128x128\Toolbar\Info.bmp
  • %TEMP%\RarSFX0\WinRAR5PREFS\Themes\Vista_Ultimate_128x128\Toolbar\Find.bmp
  • %TEMP%\RarSFX0\WinRAR5PREFS\Themes\Vista_Ultimate_128x128\Toolbar\Delete.bmp
  • %TEMP%\RarSFX0\WinRAR5PREFS\Themes\Vista_Ultimate_128x128\Toolbar\Add.bmp
  • %TEMP%\RarSFX0\WinRAR5PREFS\Themes\Vista_Ultimate_128x128\SortUp.bmp
  • %TEMP%\RarSFX0\WinRAR5PREFS\Themes\Vista_Ultimate_128x128\Toolbar\Benchmark.bmp
  • %TEMP%\RarSFX0\WinRAR5PREFS\Themes\Vista_Ultimate_128x128\Toolbar\Convert.bmp
  • %TEMP%\RarSFX0\WinRAR5PREFS\Themes\Vista_Ultimate_128x128\Toolbar\Comment.bmp
  • %TEMP%\RarSFX0\WinRAR5PREFS\Themes\Vista_Ultimate_128x128\Toolbar\View.bmp
  • %TEMP%\RarSFX0\WinRAR5PREFS\Themes\Vista_Ultimate_128x128\Toolbar\Test.bmp
  • %TEMP%\RarSFX0\WinRAR5PREFS\Themes\Vista_Ultimate_128x128\Toolbar\VirusScan.bmp
  • %TEMP%\RarSFX0\WinRAR5PREFS\Themes\Vista_Ultimate_128x128\WinRAR_theme_description.txt
  • %TEMP%\RarSFX0\WinRAR5PREFS\Themes\Vista_Ultimate_128x128\Toolbar\Wizard.bmp
  • %TEMP%\RarSFX0\WinRAR5PREFS\Themes\Vista_Ultimate_128x128\Toolbar\SFX.bmp
  • %TEMP%\RarSFX0\WinRAR5PREFS\Themes\Vista_Ultimate_128x128\Toolbar\Print.bmp
  • %TEMP%\RarSFX0\WinRAR5PREFS\Themes\Vista_Ultimate_128x128\Toolbar\Lock.bmp
  • %TEMP%\RarSFX0\WinRAR5PREFS\Themes\Vista_Ultimate_128x128\Toolbar\Protect.bmp
  • %TEMP%\RarSFX0\WinRAR5PREFS\Themes\Vista_Ultimate_128x128\Toolbar\Report.bmp
  • %TEMP%\RarSFX0\WinRAR5PREFS\Themes\Vista_Ultimate_128x128\Toolbar\Repair.bmp
  • %TEMP%\RarSFX0\WinRAR5PREFS\Themes\AS-Kristal-64.theme\Toolbar\Test.bmp
  • %TEMP%\RarSFX0\WinRAR5PREFS\Themes\AS-Kristal-64.theme\Toolbar\SFX.bmp
  • %TEMP%\RarSFX0\WinRAR5PREFS\Themes\AS-Kristal-64.theme\Toolbar\View.bmp
  • %TEMP%\RarSFX0\WinRAR5PREFS\Themes\AS-Kristal-64.theme\Toolbar\Wizard copy.bmp
  • %TEMP%\RarSFX0\WinRAR5PREFS\Themes\AS-Kristal-64.theme\Toolbar\VirusScan.bmp
  • %TEMP%\RarSFX0\WinRAR5PREFS\Themes\AS-Kristal-64.theme\Toolbar\Report.bmp
  • %TEMP%\RarSFX0\WinRAR5PREFS\Themes\AS-Kristal-64.theme\Toolbar\Lock.bmp
  • %TEMP%\RarSFX0\WinRAR5PREFS\Themes\AS-Kristal-64.theme\Toolbar\Info.bmp
  • %TEMP%\RarSFX0\WinRAR5PREFS\Themes\AS-Kristal-64.theme\Toolbar\Print.bmp
  • %TEMP%\RarSFX0\WinRAR5PREFS\Themes\AS-Kristal-64.theme\Toolbar\Repair.bmp
  • %TEMP%\RarSFX0\WinRAR5PREFS\Themes\AS-Kristal-64.theme\Toolbar\Protect.bmp
  • %TEMP%\RarSFX0\WinRAR5PREFS\Themes\RARaddin_64x64\Estimate.bmp
  • %TEMP%\RarSFX0\WinRAR5PREFS\Themes\RARaddin_64x64\DiskOn.ico
  • %TEMP%\RarSFX0\WinRAR5PREFS\Themes\RARaddin_64x64\FolderUp.bmp
  • %TEMP%\RarSFX0\WinRAR5PREFS\Themes\RARaddin_64x64\PasswordOn.ico
  • %TEMP%\RarSFX0\WinRAR5PREFS\Themes\RARaddin_64x64\PasswordOff.ico
  • %TEMP%\RarSFX0\WinRAR5PREFS\Themes\RARaddin_64x64\DiskOff.ico
  • %TEMP%\RarSFX0\WinRAR5PREFS\Themes\AS-Kristal-64.theme\WinRAR_theme_description.txt
  • %TEMP%\RarSFX0\WinRAR5PREFS\Themes\AS-Kristal-64.theme\Toolbar\Wizard.bmp
  • %TEMP%\RarSFX0\WinRAR5PREFS\Themes\AS-Kristal-64.theme\Wizard.bmp
  • %TEMP%\RarSFX0\WinRAR5PREFS\Themes\RARaddin_64x64\AboutLogo.bmp
  • %TEMP%\RarSFX0\WinRAR5PREFS\Themes\AS-Kristal-64.theme\WizardLogo.bmp
  • %TEMP%\RarSFX0\WinRAR5PREFS\Themes\AS-Kristal-64.theme\REV.ico
  • %TEMP%\RarSFX0\WinRAR5PREFS\Themes\AS-Kristal-64.theme\RARSmall.ico
  • %TEMP%\RarSFX0\WinRAR5PREFS\Themes\AS-Kristal-64.theme\Setup.ico
  • %TEMP%\RarSFX0\WinRAR5PREFS\Themes\AS-Kristal-64.theme\SFXLogo.bmp
  • %TEMP%\RarSFX0\WinRAR5PREFS\Themes\AS-Kristal-64.theme\SFX.ico
  • %TEMP%\RarSFX0\WinRAR5PREFS\Themes\AS-Kristal-64.theme\RARSmall.bmp
  • %TEMP%\RarSFX0\WinRAR5PREFS\Themes\AS-Kristal-64.theme\FolderUp.bmp
  • %TEMP%\RarSFX0\WinRAR5PREFS\Themes\AS-Kristal-64.theme\File.ico
  • %TEMP%\RarSFX0\WinRAR5PREFS\Themes\AS-Kristal-64.theme\PasswordOff.ico
  • %TEMP%\RarSFX0\WinRAR5PREFS\Themes\AS-Kristal-64.theme\RAR.ico
  • %TEMP%\RarSFX0\WinRAR5PREFS\Themes\AS-Kristal-64.theme\PasswordOn.ico
  • %TEMP%\RarSFX0\WinRAR5PREFS\Themes\AS-Kristal-64.theme\Toolbar\Exit.bmp
  • %TEMP%\RarSFX0\WinRAR5PREFS\Themes\AS-Kristal-64.theme\Toolbar\Delete.bmp
  • %TEMP%\RarSFX0\WinRAR5PREFS\Themes\AS-Kristal-64.theme\Toolbar\Extract.bmp
  • %TEMP%\RarSFX0\WinRAR5PREFS\Themes\AS-Kristal-64.theme\Toolbar\Find.bmp
  • %TEMP%\RarSFX0\WinRAR5PREFS\Themes\AS-Kristal-64.theme\Toolbar\ExtractTo.bmp
  • %TEMP%\RarSFX0\WinRAR5PREFS\Themes\AS-Kristal-64.theme\Toolbar\Convert.bmp
  • %TEMP%\RarSFX0\WinRAR5PREFS\Themes\AS-Kristal-64.theme\SortUp.bmp
  • %TEMP%\RarSFX0\WinRAR5PREFS\Themes\AS-Kristal-64.theme\SortDown.bmp
  • %TEMP%\RarSFX0\WinRAR5PREFS\Themes\AS-Kristal-64.theme\Toolbar\Add.bmp
  • %TEMP%\RarSFX0\WinRAR5PREFS\Themes\AS-Kristal-64.theme\Toolbar\Comment.bmp
  • %TEMP%\RarSFX0\WinRAR5PREFS\Themes\AS-Kristal-64.theme\Toolbar\Benchmark.bmp
  • %TEMP%\RarSFX0\WinRAR5PREFS\Themes\Vista_Ultimate_64x64\AboutLogo.bmp
  • %TEMP%\RarSFX0\WinRAR5PREFS\Themes\RARaddin_64x64\WizardLogo.bmp
  • %TEMP%\RarSFX0\WinRAR5PREFS\Themes\Vista_Ultimate_64x64\DiskOff.ico
  • %TEMP%\RarSFX0\WinRAR5PREFS\Themes\Vista_Ultimate_64x64\DragCopy.cur
  • %TEMP%\RarSFX0\WinRAR5PREFS\Themes\Vista_Ultimate_64x64\DiskOn.ico
  • %TEMP%\RarSFX0\WinRAR5PREFS\Themes\RARaddin_64x64\winrar_theme_description.txt
  • %TEMP%\RarSFX0\WinRAR5PREFS\Themes\RARaddin_64x64\Toolbar\Test.bmp
  • %TEMP%\RarSFX0\WinRAR5PREFS\Themes\RARaddin_64x64\Toolbar\SFX.bmp
  • %TEMP%\RarSFX0\WinRAR5PREFS\Themes\RARaddin_64x64\Toolbar\View.bmp
  • %TEMP%\RarSFX0\WinRAR5PREFS\Themes\RARaddin_64x64\Toolbar\Wizard.bmp
  • %TEMP%\RarSFX0\WinRAR5PREFS\Themes\RARaddin_64x64\Toolbar\VirusScan.bmp
  • %TEMP%\RarSFX0\WinRAR5PREFS\Themes\Vista_Ultimate_64x64\RAR.ico
  • %TEMP%\RarSFX0\WinRAR5PREFS\Themes\Vista_Ultimate_64x64\PasswordOn.ico
  • %TEMP%\RarSFX0\WinRAR5PREFS\Themes\Vista_Ultimate_64x64\RARSmall.bmp
  • %TEMP%\RarSFX0\WinRAR5PREFS\Themes\Vista_Ultimate_64x64\Setup.ico
  • %TEMP%\RarSFX0\WinRAR5PREFS\Themes\Vista_Ultimate_64x64\REV.ico
  • %TEMP%\RarSFX0\WinRAR5PREFS\Themes\Vista_Ultimate_64x64\PasswordOff.ico
  • %TEMP%\RarSFX0\WinRAR5PREFS\Themes\Vista_Ultimate_64x64\DragNo.cur
  • %TEMP%\RarSFX0\WinRAR5PREFS\Themes\Vista_Ultimate_64x64\DragMove.cur
  • %TEMP%\RarSFX0\WinRAR5PREFS\Themes\Vista_Ultimate_64x64\Estimate.bmp
  • %TEMP%\RarSFX0\WinRAR5PREFS\Themes\Vista_Ultimate_64x64\FolderUp.bmp
  • %TEMP%\RarSFX0\WinRAR5PREFS\Themes\Vista_Ultimate_64x64\File.ico
  • %TEMP%\RarSFX0\WinRAR5PREFS\Themes\RARaddin_64x64\Toolbar\Add.bmp
  • %TEMP%\RarSFX0\WinRAR5PREFS\Themes\RARaddin_64x64\SortUp.bmp
  • %TEMP%\RarSFX0\WinRAR5PREFS\Themes\RARaddin_64x64\Toolbar\Benchmark.bmp
  • %TEMP%\RarSFX0\WinRAR5PREFS\Themes\RARaddin_64x64\Toolbar\Convert.bmp
  • %TEMP%\RarSFX0\WinRAR5PREFS\Themes\RARaddin_64x64\Toolbar\Comment.bmp
  • %TEMP%\RarSFX0\WinRAR5PREFS\Themes\RARaddin_64x64\SortDown.bmp
  • %TEMP%\RarSFX0\WinRAR5PREFS\Themes\RARaddin_64x64\RarSmall.bmp
  • %TEMP%\RarSFX0\WinRAR5PREFS\Themes\RARaddin_64x64\RAR.ico
  • %TEMP%\RarSFX0\WinRAR5PREFS\Themes\RARaddin_64x64\Setup.ico
  • %TEMP%\RarSFX0\WinRAR5PREFS\Themes\RARaddin_64x64\SFXLogo.bmp
  • %TEMP%\RarSFX0\WinRAR5PREFS\Themes\RARaddin_64x64\SFX.ico
  • %TEMP%\RarSFX0\WinRAR5PREFS\Themes\RARaddin_64x64\Toolbar\Print.bmp
  • %TEMP%\RarSFX0\WinRAR5PREFS\Themes\RARaddin_64x64\Toolbar\Lock.bmp
  • %TEMP%\RarSFX0\WinRAR5PREFS\Themes\RARaddin_64x64\Toolbar\Protect.bmp
  • %TEMP%\RarSFX0\WinRAR5PREFS\Themes\RARaddin_64x64\Toolbar\Report.bmp
  • %TEMP%\RarSFX0\WinRAR5PREFS\Themes\RARaddin_64x64\Toolbar\Repair.bmp
  • %TEMP%\RarSFX0\WinRAR5PREFS\Themes\RARaddin_64x64\Toolbar\Info.bmp
  • %TEMP%\RarSFX0\WinRAR5PREFS\Themes\RARaddin_64x64\Toolbar\Exit.bmp
  • %TEMP%\RarSFX0\WinRAR5PREFS\Themes\RARaddin_64x64\Toolbar\Delete.bmp
  • %TEMP%\RarSFX0\WinRAR5PREFS\Themes\RARaddin_64x64\Toolbar\Extract.bmp
  • %TEMP%\RarSFX0\WinRAR5PREFS\Themes\RARaddin_64x64\Toolbar\Find.bmp
  • %TEMP%\RarSFX0\WinRAR5PREFS\Themes\RARaddin_64x64\Toolbar\ExtractTo.bmp
Sets the 'hidden' attribute to the following files:
  • %TEMP%\RarSFX0\WinRAR5PREFS\Themes\Metro\Thumbs.db
  • %TEMP%\RarSFX0\WinRAR5PREFS\Themes\Metro\ToolBar\Thumbs.db
  • %TEMP%\RarSFX0\WinRAR5PREFS\Themes\Aero II 96\Thumbs.db
  • %TEMP%\RarSFX0\WinRAR5PREFS\Themes\Aero II 96\Toolbar\Thumbs.db
Deletes the following files:
  • %TEMP%\nsv3.tmp\ns4.tmp
Miscellaneous:
Searches for the following windows:
  • ClassName: 'Shell_TrayWnd' WindowName: ''
  • ClassName: 'EDIT' WindowName: ''

Curing recommendations

  1. If the operating system (OS) can be loaded (either normally or in safe mode), download Dr.Web Security Space and run a full scan of your computer and removable media you use. More about Dr.Web Security Space.
  2. If you cannot boot the OS, change the BIOS settings to boot your system from a CD or USB drive. Download the image of the emergency system repair disk Dr.Web® LiveDisk , mount it on a USB drive or burn it to a CD/DVD. After booting up with this media, run a full scan and cure all the detected threats.
Download Dr.Web

Download by serial number

Use Dr.Web Anti-virus for macOS to run a full scan of your Mac.

After booting up, run a full scan of all disk partitions with Dr.Web Anti-virus for Linux.

Download Dr.Web

Download by serial number

  1. If the mobile device is operating normally, download and install Dr.Web for Android. Run a full system scan and follow recommendations to neutralize the detected threats.
  2. If the mobile device has been locked by Android.Locker ransomware (the message on the screen tells you that you have broken some law or demands a set ransom amount; or you will see some other announcement that prevents you from using the handheld normally), do the following:
    • Load your smartphone or tablet in the safe mode (depending on the operating system version and specifications of the particular mobile device involved, this procedure can be performed in various ways; seek clarification from the user guide that was shipped with the device, or contact its manufacturer);
    • Once you have activated safe mode, install the Dr.Web for Android onto the infected handheld and run a full scan of the system; follow the steps recommended for neutralizing the threats that have been detected;
    • Switch off your device and turn it on as normal.

Find out more about Dr.Web for Android