Trojan.MulDrop28.26575

Technical Information

To ensure autorun and distribution

Sets the following service settings

[HKLM\System\CurrentControlSet\Services\EMAIL Safe Storage 10.2.45] 'Start' = '00000002'
[HKLM\System\CurrentControlSet\Services\EMAIL Safe Storage 10.2.45] 'ImagePath' = '%ALLUSERSPROFILE%\EMAIL Safe Storage 10.2.45\EMAIL Safe Storage 10.2.45.exe'

Creates the following services

'EMAIL Safe Storage 10.2.45' %ALLUSERSPROFILE%\EMAIL Safe Storage 10.2.45\EMAIL Safe Storage 10.2.45.exe

Modifies file system

Creates the following files

%TEMP%\is-nfnkt.tmp\<File name>.tmp
%LOCALAPPDATA%\zexter video codec\is-u0q2p.tmp
%LOCALAPPDATA%\zexter video codec\is-naeqs.tmp
%LOCALAPPDATA%\zexter video codec\is-hjfju.tmp
%LOCALAPPDATA%\zexter video codec\is-0vq9q.tmp
%LOCALAPPDATA%\zexter video codec\is-0u0p7.tmp
%LOCALAPPDATA%\zexter video codec\is-jq02b.tmp
%LOCALAPPDATA%\zexter video codec\is-o56se.tmp
%LOCALAPPDATA%\zexter video codec\is-antpm.tmp
%LOCALAPPDATA%\zexter video codec\is-brkej.tmp
%LOCALAPPDATA%\zexter video codec\is-u3kj7.tmp
%LOCALAPPDATA%\zexter video codec\is-cvea0.tmp
%LOCALAPPDATA%\zexter video codec\is-hvqqk.tmp
%LOCALAPPDATA%\zexter video codec\is-qf64l.tmp
%LOCALAPPDATA%\zexter video codec\themes\gray_textured\is-dpf46.tmp
%LOCALAPPDATA%\zexter video codec\themes\gray_textured\is-q2pft.tmp
%LOCALAPPDATA%\zexter video codec\themes\gray_textured\is-ldjmp.tmp
%LOCALAPPDATA%\zexter video codec\themes\gray_textured\is-f2sf7.tmp
%LOCALAPPDATA%\zexter video codec\themes\gray_textured\is-r6cm5.tmp
%LOCALAPPDATA%\zexter video codec\themes\gray_textured\is-adeld.tmp
%LOCALAPPDATA%\zexter video codec\themes\gray_textured\is-nfksg.tmp
%LOCALAPPDATA%\zexter video codec\themes\gray_textured\is-s43ov.tmp
%LOCALAPPDATA%\zexter video codec\themes\gray_textured\is-o4tkn.tmp
%LOCALAPPDATA%\zexter video codec\themes\gray_textured\is-150ln.tmp
%LOCALAPPDATA%\zexter video codec\themes\gray_textured\is-c86tv.tmp
%LOCALAPPDATA%\zexter video codec\themes\gray_textured\is-ishul.tmp
%LOCALAPPDATA%\zexter video codec\themes\gray_textured\is-83gll.tmp
%LOCALAPPDATA%\zexter video codec\themes\gray_textured\is-35mdo.tmp
%LOCALAPPDATA%\zexter video codec\is-4mvap.tmp
%ALLUSERSPROFILE%\em102resa.dat
%LOCALAPPDATA%\zexter video codec\is-r7du2.tmp
%ALLUSERSPROFILE%\em102it45.dat
%ALLUSERSPROFILE%\email safe storage 10.2.45\email safe storage 10.2.45.exe
%LOCALAPPDATA%\zexter video codec\zextervideocodec32.exe
%LOCALAPPDATA%\zexter video codec\uninstall\unins000.dat
%LOCALAPPDATA%\zexter video codec\is-mcttl.tmp
%LOCALAPPDATA%\zexter video codec\is-l3s1u.tmp
%LOCALAPPDATA%\zexter video codec\is-3f4o8.tmp
%LOCALAPPDATA%\zexter video codec\is-j6pt5.tmp
%LOCALAPPDATA%\zexter video codec\is-e60dj.tmp
%LOCALAPPDATA%\zexter video codec\is-4av9n.tmp
%LOCALAPPDATA%\zexter video codec\is-bghf7.tmp
%LOCALAPPDATA%\zexter video codec\is-c56hi.tmp
%LOCALAPPDATA%\zexter video codec\themes\gray_textured\is-85903.tmp
%LOCALAPPDATA%\zexter video codec\is-61bbs.tmp
%LOCALAPPDATA%\zexter video codec\is-92h1k.tmp
%LOCALAPPDATA%\zexter video codec\is-i0e1r.tmp
%LOCALAPPDATA%\zexter video codec\is-pv7vn.tmp
%LOCALAPPDATA%\zexter video codec\is-13fjb.tmp
%LOCALAPPDATA%\zexter video codec\is-b75on.tmp
%LOCALAPPDATA%\zexter video codec\is-allm8.tmp
%LOCALAPPDATA%\zexter video codec\is-q4s4d.tmp
%LOCALAPPDATA%\zexter video codec\is-hvflm.tmp
%LOCALAPPDATA%\zexter video codec\is-rd7hq.tmp
%LOCALAPPDATA%\zexter video codec\is-3gjr2.tmp
%LOCALAPPDATA%\zexter video codec\is-m3496.tmp
%LOCALAPPDATA%\zexter video codec\is-s1t82.tmp
%LOCALAPPDATA%\zexter video codec\is-1idh9.tmp
%LOCALAPPDATA%\zexter video codec\is-3mi0h.tmp
%LOCALAPPDATA%\zexter video codec\themes\gray_textured\is-ia0he.tmp
%LOCALAPPDATA%\zexter video codec\themes\is-h5cp7.tmp
%LOCALAPPDATA%\zexter video codec\themes\is-2e021.tmp
%LOCALAPPDATA%\zexter video codec\themes\is-qhmat.tmp
%LOCALAPPDATA%\zexter video codec\themes\is-koh3b.tmp
%LOCALAPPDATA%\zexter video codec\themes\is-um9um.tmp
%LOCALAPPDATA%\zexter video codec\themes\is-m7so0.tmp
%LOCALAPPDATA%\zexter video codec\themes\is-ak1lg.tmp
%LOCALAPPDATA%\zexter video codec\themes\is-m7198.tmp
%LOCALAPPDATA%\zexter video codec\themes\is-a2ou2.tmp
%LOCALAPPDATA%\zexter video codec\themes\is-pedjm.tmp
%LOCALAPPDATA%\zexter video codec\themes\is-b66h8.tmp
%LOCALAPPDATA%\zexter video codec\sounds\is-pj190.tmp
%LOCALAPPDATA%\zexter video codec\sounds\is-g59c7.tmp
%LOCALAPPDATA%\zexter video codec\themes\is-ld6bq.tmp
%LOCALAPPDATA%\zexter video codec\sounds\is-u7f2a.tmp
%LOCALAPPDATA%\zexter video codec\lib\gtk-2.0\modules\is-ui61r.tmp
%LOCALAPPDATA%\zexter video codec\lib\gtk-2.0\modules\is-95nfc.tmp
%LOCALAPPDATA%\zexter video codec\lib\gtk-2.0\include\is-ap554.tmp
%LOCALAPPDATA%\zexter video codec\lib\gtk-2.0\2.10.0\engines\is-m0rh4.tmp
%LOCALAPPDATA%\zexter video codec\lib\gtk-2.0\2.10.0\engines\is-87t70.tmp
%LOCALAPPDATA%\zexter video codec\lib\gtk-2.0\2.10.0\engines\is-eqnhq.tmp
%LOCALAPPDATA%\zexter video codec\lib\gtk-2.0\2.10.0\engines\is-u25he.tmp
%LOCALAPPDATA%\zexter video codec\uninstall\is-qj0pq.tmp
%TEMP%\is-2a6vn.tmp\_isetup\_iscrypt.dll
%TEMP%\is-2a6vn.tmp\_isetup\_shfoldr.dll
%TEMP%\is-2a6vn.tmp\_isetup\_setup64.tmp
%TEMP%\is-2a6vn.tmp\_isetup\_regdll.tmp
%LOCALAPPDATA%\zexter video codec\share\man\man1\is-2rlqc.tmp
%LOCALAPPDATA%\zexter video codec\themes\is-vmmsg.tmp
%LOCALAPPDATA%\zexter video codec\themes\gray_textured\is-rqg97.tmp
%LOCALAPPDATA%\zexter video codec\themes\is-ovoog.tmp
%LOCALAPPDATA%\zexter video codec\themes\gray_textured\is-c41nq.tmp
%LOCALAPPDATA%\zexter video codec\themes\gray_textured\is-r5oh6.tmp
%LOCALAPPDATA%\zexter video codec\themes\gray_textured\is-f9emt.tmp
%LOCALAPPDATA%\zexter video codec\themes\gray_textured\is-a4c3m.tmp
%LOCALAPPDATA%\zexter video codec\themes\gray_textured\is-4pvk3.tmp
%LOCALAPPDATA%\zexter video codec\themes\gray_textured\is-fonre.tmp
%LOCALAPPDATA%\zexter video codec\themes\gray_textured\is-lnd7u.tmp
%LOCALAPPDATA%\zexter video codec\themes\gray_textured\is-giqta.tmp
%LOCALAPPDATA%\zexter video codec\themes\gray_textured\is-g0c07.tmp
%LOCALAPPDATA%\zexter video codec\themes\gray_textured\is-5cbif.tmp
%LOCALAPPDATA%\zexter video codec\themes\gray_textured\is-ev6hv.tmp
%LOCALAPPDATA%\zexter video codec\themes\gray_textured\is-pssia.tmp
%LOCALAPPDATA%\zexter video codec\themes\gray_textured\is-5u3hi.tmp
%LOCALAPPDATA%\zexter video codec\themes\gray_textured\is-djure.tmp
%LOCALAPPDATA%\zexter video codec\themes\is-h9pm5.tmp
%LOCALAPPDATA%\zexter video codec\themes\is-qls2u.tmp
%LOCALAPPDATA%\zexter video codec\themes\is-jcoou.tmp
%LOCALAPPDATA%\zexter video codec\themes\is-4c53q.tmp
%LOCALAPPDATA%\zexter video codec\themes\is-f279q.tmp
%LOCALAPPDATA%\zexter video codec\themes\is-sthjf.tmp
%LOCALAPPDATA%\zexter video codec\themes\is-mqt02.tmp
%LOCALAPPDATA%\zexter video codec\themes\is-chrmk.tmp
%LOCALAPPDATA%\zexter video codec\themes\is-uirm6.tmp
%LOCALAPPDATA%\zexter video codec\themes\is-qp4c5.tmp
%LOCALAPPDATA%\zexter video codec\themes\is-jobc0.tmp
%LOCALAPPDATA%\zexter video codec\themes\is-91c77.tmp
%LOCALAPPDATA%\zexter video codec\themes\is-tvqc0.tmp
%ALLUSERSPROFILE%\em102resb.dat

Moves the following files

from %LOCALAPPDATA%\zexter video codec\uninstall\is-qj0pq.tmp to %LOCALAPPDATA%\zexter video codec\uninstall\unins000.exe
from %LOCALAPPDATA%\zexter video codec\is-hjfju.tmp to %LOCALAPPDATA%\zexter video codec\libgiomm-2.4-1.dll
from %LOCALAPPDATA%\zexter video codec\is-0vq9q.tmp to %LOCALAPPDATA%\zexter video codec\libgio-2.0-0.dll
from %LOCALAPPDATA%\zexter video codec\is-0u0p7.tmp to %LOCALAPPDATA%\zexter video codec\libgdk_pixbuf-2.0-0.dll
from %LOCALAPPDATA%\zexter video codec\is-jq02b.tmp to %LOCALAPPDATA%\zexter video codec\libgdkmm-2.4-1.dll
from %LOCALAPPDATA%\zexter video codec\is-o56se.tmp to %LOCALAPPDATA%\zexter video codec\libgdk-win32-2.0-0.dll
from %LOCALAPPDATA%\zexter video codec\is-antpm.tmp to %LOCALAPPDATA%\zexter video codec\libgcc_s_dw2-1.dll
from %LOCALAPPDATA%\zexter video codec\is-brkej.tmp to %LOCALAPPDATA%\zexter video codec\libfreetype-6.dll
from %LOCALAPPDATA%\zexter video codec\is-u3kj7.tmp to %LOCALAPPDATA%\zexter video codec\libfontconfig-1.dll
from %LOCALAPPDATA%\zexter video codec\is-cvea0.tmp to %LOCALAPPDATA%\zexter video codec\libffi-6.dll
from %LOCALAPPDATA%\zexter video codec\is-hvqqk.tmp to %LOCALAPPDATA%\zexter video codec\libexpat-1.dll
from %LOCALAPPDATA%\zexter video codec\themes\gray_textured\is-dpf46.tmp to %LOCALAPPDATA%\zexter video codec\themes\gray_textured\trough2.png
from %LOCALAPPDATA%\zexter video codec\themes\gray_textured\is-35mdo.tmp to %LOCALAPPDATA%\zexter video codec\themes\gray_textured\trough2-h.png
from %LOCALAPPDATA%\zexter video codec\themes\gray_textured\is-q2pft.tmp to %LOCALAPPDATA%\zexter video codec\themes\gray_textured\slider-v.png
from %LOCALAPPDATA%\zexter video codec\themes\gray_textured\is-ldjmp.tmp to %LOCALAPPDATA%\zexter video codec\themes\gray_textured\slider-v-pre.png
from %LOCALAPPDATA%\zexter video codec\themes\gray_textured\is-f2sf7.tmp to %LOCALAPPDATA%\zexter video codec\themes\gray_textured\slider-v-ins.png
from %LOCALAPPDATA%\zexter video codec\themes\gray_textured\is-r6cm5.tmp to %LOCALAPPDATA%\zexter video codec\themes\gray_textured\slider-h.png
from %LOCALAPPDATA%\zexter video codec\themes\gray_textured\is-adeld.tmp to %LOCALAPPDATA%\zexter video codec\themes\gray_textured\slider-h-pre.png
from %LOCALAPPDATA%\zexter video codec\themes\gray_textured\is-nfksg.tmp to %LOCALAPPDATA%\zexter video codec\themes\gray_textured\slider-h-ins.png
from %LOCALAPPDATA%\zexter video codec\themes\gray_textured\is-s43ov.tmp to %LOCALAPPDATA%\zexter video codec\themes\gray_textured\rangeslider.png
from %LOCALAPPDATA%\zexter video codec\themes\gray_textured\is-o4tkn.tmp to %LOCALAPPDATA%\zexter video codec\themes\gray_textured\rangeslider-pre.png
from %LOCALAPPDATA%\zexter video codec\themes\gray_textured\is-150ln.tmp to %LOCALAPPDATA%\zexter video codec\themes\gray_textured\rangeslider-ins.png
from %LOCALAPPDATA%\zexter video codec\themes\gray_textured\is-c86tv.tmp to %LOCALAPPDATA%\zexter video codec\themes\gray_textured\pbtroughv.png
from %LOCALAPPDATA%\zexter video codec\themes\gray_textured\is-ishul.tmp to %LOCALAPPDATA%\zexter video codec\themes\gray_textured\pbtroughh.png
from %LOCALAPPDATA%\zexter video codec\themes\gray_textured\is-85903.tmp to %LOCALAPPDATA%\zexter video codec\themes\gray_textured\button-pressed.png
from %LOCALAPPDATA%\zexter video codec\themes\gray_textured\is-83gll.tmp to %LOCALAPPDATA%\zexter video codec\themes\gray_textured\null.png
from %LOCALAPPDATA%\zexter video codec\is-naeqs.tmp to %LOCALAPPDATA%\zexter video codec\libglib-2.0-0.dll
from %LOCALAPPDATA%\zexter video codec\is-u0q2p.tmp to %LOCALAPPDATA%\zexter video codec\libglibmm-2.4-1.dll
from %LOCALAPPDATA%\zexter video codec\is-3f4o8.tmp to %LOCALAPPDATA%\zexter video codec\libxml2-2.dll
from %LOCALAPPDATA%\zexter video codec\is-j6pt5.tmp to %LOCALAPPDATA%\zexter video codec\libwinpthread-1.dll
from %LOCALAPPDATA%\zexter video codec\is-e60dj.tmp to %LOCALAPPDATA%\zexter video codec\libtiff-5.dll
from %LOCALAPPDATA%\zexter video codec\is-4av9n.tmp to %LOCALAPPDATA%\zexter video codec\libstdc++-6.dll
from %LOCALAPPDATA%\zexter video codec\is-bghf7.tmp to %LOCALAPPDATA%\zexter video codec\libsigc-2.0-0.dll
from %LOCALAPPDATA%\zexter video codec\is-c56hi.tmp to %LOCALAPPDATA%\zexter video codec\librsvg-2-2.dll
from %LOCALAPPDATA%\zexter video codec\is-61bbs.tmp to %LOCALAPPDATA%\zexter video codec\libpng16-16.dll
from %LOCALAPPDATA%\zexter video codec\is-4mvap.tmp to %LOCALAPPDATA%\zexter video codec\libpixman-1-0.dll
from %LOCALAPPDATA%\zexter video codec\is-92h1k.tmp to %LOCALAPPDATA%\zexter video codec\libpcre-1.dll
from %LOCALAPPDATA%\zexter video codec\is-i0e1r.tmp to %LOCALAPPDATA%\zexter video codec\libpangowin32-1.0-0.dll
from %LOCALAPPDATA%\zexter video codec\is-pv7vn.tmp to %LOCALAPPDATA%\zexter video codec\libpangomm-1.4-1.dll
from %LOCALAPPDATA%\zexter video codec\is-b75on.tmp to %LOCALAPPDATA%\zexter video codec\libpangocairo-1.0-0.dll
from %LOCALAPPDATA%\zexter video codec\themes\gray_textured\is-djure.tmp to %LOCALAPPDATA%\zexter video codec\themes\gray_textured\arrow-down-ins.png
from %LOCALAPPDATA%\zexter video codec\is-allm8.tmp to %LOCALAPPDATA%\zexter video codec\libpango-1.0-0.dll
from %LOCALAPPDATA%\zexter video codec\is-q4s4d.tmp to %LOCALAPPDATA%\zexter video codec\liblzma-5.dll
from %LOCALAPPDATA%\zexter video codec\is-hvflm.tmp to %LOCALAPPDATA%\zexter video codec\liblcms2-2.dll
from %LOCALAPPDATA%\zexter video codec\is-rd7hq.tmp to %LOCALAPPDATA%\zexter video codec\libjpeg-8.dll
from %LOCALAPPDATA%\zexter video codec\is-3gjr2.tmp to %LOCALAPPDATA%\zexter video codec\libintl-8.dll
from %LOCALAPPDATA%\zexter video codec\is-m3496.tmp to %LOCALAPPDATA%\zexter video codec\libiconv-2.dll
from %LOCALAPPDATA%\zexter video codec\is-s1t82.tmp to %LOCALAPPDATA%\zexter video codec\libharfbuzz-0.dll
from %LOCALAPPDATA%\zexter video codec\is-r7du2.tmp to %LOCALAPPDATA%\zexter video codec\libgraphite2.dll
from %LOCALAPPDATA%\zexter video codec\is-3mi0h.tmp to %LOCALAPPDATA%\zexter video codec\libgomp-1.dll
from %LOCALAPPDATA%\zexter video codec\is-1idh9.tmp to %LOCALAPPDATA%\zexter video codec\libgobject-2.0-0.dll
from %LOCALAPPDATA%\zexter video codec\is-qf64l.tmp to %LOCALAPPDATA%\zexter video codec\libgmodule-2.0-0.dll
from %LOCALAPPDATA%\zexter video codec\themes\gray_textured\is-ia0he.tmp to %LOCALAPPDATA%\zexter video codec\themes\gray_textured\button-prelight.png
from %LOCALAPPDATA%\zexter video codec\themes\gray_textured\is-5u3hi.tmp to %LOCALAPPDATA%\zexter video codec\themes\gray_textured\button-normal.xcf
from %LOCALAPPDATA%\zexter video codec\themes\gray_textured\is-rqg97.tmp to %LOCALAPPDATA%\zexter video codec\themes\gray_textured\button-normal.png
from %LOCALAPPDATA%\zexter video codec\themes\is-ld6bq.tmp to %LOCALAPPDATA%\zexter video codec\themes\21-gray-red.iconset
from %LOCALAPPDATA%\zexter video codec\themes\is-2e021.tmp to %LOCALAPPDATA%\zexter video codec\themes\21-gray-red.gtkrc
from %LOCALAPPDATA%\zexter video codec\themes\is-qhmat.tmp to %LOCALAPPDATA%\zexter video codec\themes\21-gray-purple.iconset
from %LOCALAPPDATA%\zexter video codec\themes\is-koh3b.tmp to %LOCALAPPDATA%\zexter video codec\themes\21-gray-purple.gtkrc
from %LOCALAPPDATA%\zexter video codec\themes\is-um9um.tmp to %LOCALAPPDATA%\zexter video codec\themes\21-gray-orange.iconset
from %LOCALAPPDATA%\zexter video codec\themes\is-m7so0.tmp to %LOCALAPPDATA%\zexter video codec\themes\21-gray-orange.gtkrc
from %LOCALAPPDATA%\zexter video codec\themes\is-ak1lg.tmp to %LOCALAPPDATA%\zexter video codec\themes\21-gray-gray.iconset
from %LOCALAPPDATA%\zexter video codec\themes\is-m7198.tmp to %LOCALAPPDATA%\zexter video codec\themes\21-gray-gray.gtkrc
from %LOCALAPPDATA%\zexter video codec\themes\is-a2ou2.tmp to %LOCALAPPDATA%\zexter video codec\themes\17-gray-red.iconset
from %LOCALAPPDATA%\zexter video codec\themes\is-pedjm.tmp to %LOCALAPPDATA%\zexter video codec\themes\17-gray-red.gtkrc
from %LOCALAPPDATA%\zexter video codec\themes\is-b66h8.tmp to %LOCALAPPDATA%\zexter video codec\themes\09-gray-orange.iconset
from %LOCALAPPDATA%\zexter video codec\sounds\is-pj190.tmp to %LOCALAPPDATA%\zexter video codec\sounds\processcomplete.wav
from %LOCALAPPDATA%\zexter video codec\sounds\is-g59c7.tmp to %LOCALAPPDATA%\zexter video codec\sounds\empty.wav
from %LOCALAPPDATA%\zexter video codec\sounds\is-u7f2a.tmp to %LOCALAPPDATA%\zexter video codec\sounds\batchcomplete.wav
from %LOCALAPPDATA%\zexter video codec\share\man\man1\is-2rlqc.tmp to %LOCALAPPDATA%\zexter video codec\share\man\man1\rawtherapee.1
from %LOCALAPPDATA%\zexter video codec\lib\gtk-2.0\modules\is-ui61r.tmp to %LOCALAPPDATA%\zexter video codec\lib\gtk-2.0\modules\libgail.dll.a
from %LOCALAPPDATA%\zexter video codec\lib\gtk-2.0\modules\is-95nfc.tmp to %LOCALAPPDATA%\zexter video codec\lib\gtk-2.0\modules\libgail.dll
from %LOCALAPPDATA%\zexter video codec\lib\gtk-2.0\include\is-ap554.tmp to %LOCALAPPDATA%\zexter video codec\lib\gtk-2.0\include\gdkconfig.h
from %LOCALAPPDATA%\zexter video codec\lib\gtk-2.0\2.10.0\engines\is-m0rh4.tmp to %LOCALAPPDATA%\zexter video codec\lib\gtk-2.0\2.10.0\engines\libwimp.dll.a
from %LOCALAPPDATA%\zexter video codec\lib\gtk-2.0\2.10.0\engines\is-87t70.tmp to %LOCALAPPDATA%\zexter video codec\lib\gtk-2.0\2.10.0\engines\libwimp.dll
from %LOCALAPPDATA%\zexter video codec\lib\gtk-2.0\2.10.0\engines\is-eqnhq.tmp to %LOCALAPPDATA%\zexter video codec\lib\gtk-2.0\2.10.0\engines\libpixmap.dll.a
from %LOCALAPPDATA%\zexter video codec\lib\gtk-2.0\2.10.0\engines\is-u25he.tmp to %LOCALAPPDATA%\zexter video codec\lib\gtk-2.0\2.10.0\engines\libpixmap.dll
from %LOCALAPPDATA%\zexter video codec\themes\is-h5cp7.tmp to %LOCALAPPDATA%\zexter video codec\themes\25-gray-gray.iconset
from %LOCALAPPDATA%\zexter video codec\themes\is-ovoog.tmp to %LOCALAPPDATA%\zexter video codec\themes\25-gray-purple.gtkrc
from %LOCALAPPDATA%\zexter video codec\themes\is-tvqc0.tmp to %LOCALAPPDATA%\zexter video codec\themes\25-gray-gray.gtkrc
from %LOCALAPPDATA%\zexter video codec\themes\is-91c77.tmp to %LOCALAPPDATA%\zexter video codec\themes\25-gray-purple.iconset
from %LOCALAPPDATA%\zexter video codec\themes\gray_textured\is-c41nq.tmp to %LOCALAPPDATA%\zexter video codec\themes\gray_textured\button-insensitive.png
from %LOCALAPPDATA%\zexter video codec\themes\is-jobc0.tmp to %LOCALAPPDATA%\zexter video codec\themes\25-gray-red.gtkrc
from %LOCALAPPDATA%\zexter video codec\themes\gray_textured\is-r5oh6.tmp to %LOCALAPPDATA%\zexter video codec\themes\gray_textured\arrow-up.png
from %LOCALAPPDATA%\zexter video codec\themes\gray_textured\is-f9emt.tmp to %LOCALAPPDATA%\zexter video codec\themes\gray_textured\arrow-up-pre.png
from %LOCALAPPDATA%\zexter video codec\themes\gray_textured\is-a4c3m.tmp to %LOCALAPPDATA%\zexter video codec\themes\gray_textured\arrow-up-ins.png
from %LOCALAPPDATA%\zexter video codec\themes\gray_textured\is-4pvk3.tmp to %LOCALAPPDATA%\zexter video codec\themes\gray_textured\arrow-right.png
from %LOCALAPPDATA%\zexter video codec\themes\gray_textured\is-fonre.tmp to %LOCALAPPDATA%\zexter video codec\themes\gray_textured\arrow-right-pre.png
from %LOCALAPPDATA%\zexter video codec\themes\gray_textured\is-lnd7u.tmp to %LOCALAPPDATA%\zexter video codec\themes\gray_textured\arrow-right-ins.png
from %LOCALAPPDATA%\zexter video codec\themes\gray_textured\is-giqta.tmp to %LOCALAPPDATA%\zexter video codec\themes\gray_textured\arrow-left.png
from %LOCALAPPDATA%\zexter video codec\themes\gray_textured\is-g0c07.tmp to %LOCALAPPDATA%\zexter video codec\themes\gray_textured\arrow-left-pre.png
from %LOCALAPPDATA%\zexter video codec\themes\gray_textured\is-5cbif.tmp to %LOCALAPPDATA%\zexter video codec\themes\gray_textured\arrow-left-ins.png
from %LOCALAPPDATA%\zexter video codec\themes\gray_textured\is-ev6hv.tmp to %LOCALAPPDATA%\zexter video codec\themes\gray_textured\arrow-down.png
from %LOCALAPPDATA%\zexter video codec\is-13fjb.tmp to %LOCALAPPDATA%\zexter video codec\libpangoft2-1.0-0.dll
from %LOCALAPPDATA%\zexter video codec\is-l3s1u.tmp to %LOCALAPPDATA%\zexter video codec\zlib1.dll
from %LOCALAPPDATA%\zexter video codec\themes\is-vmmsg.tmp to %LOCALAPPDATA%\zexter video codec\themes\system.iconset
from %LOCALAPPDATA%\zexter video codec\themes\is-h9pm5.tmp to %LOCALAPPDATA%\zexter video codec\themes\slim
from %LOCALAPPDATA%\zexter video codec\themes\is-qls2u.tmp to %LOCALAPPDATA%\zexter video codec\themes\92-beige-darkcyan.iconset
from %LOCALAPPDATA%\zexter video codec\themes\is-jcoou.tmp to %LOCALAPPDATA%\zexter video codec\themes\92-beige-darkcyan.gtkrc
from %LOCALAPPDATA%\zexter video codec\themes\is-4c53q.tmp to %LOCALAPPDATA%\zexter video codec\themes\63-gray-cyan.iconset
from %LOCALAPPDATA%\zexter video codec\themes\is-f279q.tmp to %LOCALAPPDATA%\zexter video codec\themes\63-gray-cyan.gtkrc
from %LOCALAPPDATA%\zexter video codec\themes\is-sthjf.tmp to %LOCALAPPDATA%\zexter video codec\themes\37-gray-red.iconset
from %LOCALAPPDATA%\zexter video codec\themes\is-mqt02.tmp to %LOCALAPPDATA%\zexter video codec\themes\37-gray-red.gtkrc
from %LOCALAPPDATA%\zexter video codec\themes\is-chrmk.tmp to %LOCALAPPDATA%\zexter video codec\themes\37-gray-red-textured.iconset
from %LOCALAPPDATA%\zexter video codec\themes\is-uirm6.tmp to %LOCALAPPDATA%\zexter video codec\themes\37-gray-red-textured.gtkrc
from %LOCALAPPDATA%\zexter video codec\themes\is-qp4c5.tmp to %LOCALAPPDATA%\zexter video codec\themes\25-gray-red.iconset
from %LOCALAPPDATA%\zexter video codec\themes\gray_textured\is-pssia.tmp to %LOCALAPPDATA%\zexter video codec\themes\gray_textured\arrow-down-pre.png
from %LOCALAPPDATA%\zexter video codec\is-mcttl.tmp to %LOCALAPPDATA%\zexter video codec\zextervideocodec32.exe

Miscellaneous

Searches for the following windows

ClassName: 'Pa5f69_emBox1022_Pa5f69' WindowName: ''

Creates and executes the following

'%TEMP%\is-nfnkt.tmp\<File name>.tmp' /SL5="$5024E,7736914,54272,<Full path to file>"
'%LOCALAPPDATA%\zexter video codec\zextervideocodec32.exe' -i

Технологии

Термины

Обучение и просвещение

Мифы

Technical Information

Рекомендации по лечению

Демо бесплатно на 14 дней