Техническая информация
Вредоносные функции:
Создает и запускает на исполнение:
- %TEMP%\RarSFX0\Binaries\ChromeInstaller.exe
Запускает на исполнение:
- <SYSTEM32>\taskkill.exe /f /im chrome.exe
Завершает или пытается завершить
следующие пользовательские процессы:
- chrome.exe
Изменения в файловой системе:
Создает следующие файлы:
- %TEMP%\RarSFX0\Binaries\Binaries\scripts\minibar\content\images\emoji\F09F8EB6.png
- %TEMP%\RarSFX0\Binaries\Binaries\scripts\minibar\content\images\emoji\F09F8EB8.png
- %TEMP%\RarSFX0\Binaries\Binaries\scripts\minibar\content\images\emoji\F09F8E89.png
- %TEMP%\RarSFX0\Binaries\Binaries\scripts\minibar\content\images\emoji\F09F8EB1.png
- %TEMP%\RarSFX0\Binaries\Binaries\scripts\minibar\content\images\emoji\F09F908D.png
- %TEMP%\RarSFX0\Binaries\Binaries\scripts\minibar\content\images\emoji\F09F90AE.png
- %TEMP%\RarSFX0\Binaries\Binaries\scripts\minibar\content\images\emoji\F09F90AF.png
- %TEMP%\RarSFX0\Binaries\Binaries\scripts\minibar\content\images\emoji\F09F90A7.png
- %TEMP%\RarSFX0\Binaries\Binaries\scripts\minibar\content\images\emoji\F09F90AC.png
- %TEMP%\RarSFX0\Binaries\Binaries\scripts\minibar\content\images\Expand-26x24.png
- %TEMP%\RarSFX0\Binaries\Binaries\scripts\minibar\content\images\emoji\F09F8C99.png
- %TEMP%\RarSFX0\Binaries\Binaries\scripts\minibar\content\images\emoji\E29ABD.png
- %TEMP%\RarSFX0\Binaries\Binaries\scripts\minibar\content\images\emoji\E29BB5.png
- %TEMP%\RarSFX0\Binaries\Binaries\scripts\minibar\content\images\emoji\F09F8C9F.png
- %TEMP%\RarSFX0\Binaries\Binaries\scripts\minibar\content\images\emoji\F09F8DBB.png
- %TEMP%\RarSFX0\Binaries\Binaries\scripts\minibar\content\images\emoji\F09F8E81.png
- %TEMP%\RarSFX0\Binaries\Binaries\scripts\minibar\content\images\emoji\F09F8CB9.png
- %TEMP%\RarSFX0\Binaries\Binaries\scripts\minibar\content\images\emoji\F09F8D80.png
- %TEMP%\RarSFX0\Binaries\Binaries\scripts\minibar\content\images\emoji\F09F9284.png
- %TEMP%\RarSFX0\Binaries\Binaries\scripts\minibar\content\images\emoji\F09F928B.png
- %TEMP%\RarSFX0\Binaries\Binaries\scripts\minibar\content\images\emoji\F09F91BD.png
- %TEMP%\RarSFX0\Binaries\Binaries\scripts\minibar\content\images\emoji\F09F9280.png
- %TEMP%\RarSFX0\Binaries\Binaries\scripts\minibar\content\images\emoji\F09F928D.png
- %TEMP%\RarSFX0\Binaries\Binaries\scripts\minibar\content\images\emoji\F09F9294.png
- %TEMP%\RarSFX0\Binaries\Binaries\scripts\minibar\content\images\emoji\F09F9297.png
- %TEMP%\RarSFX0\Binaries\Binaries\scripts\minibar\content\images\emoji\F09F928F.png
- %TEMP%\RarSFX0\Binaries\Binaries\scripts\minibar\content\images\emoji\F09F9293.png
- %TEMP%\RarSFX0\Binaries\Binaries\scripts\minibar\content\images\emoji\F09F90B4.png
- %TEMP%\RarSFX0\Binaries\Binaries\scripts\minibar\content\images\emoji\F09F90B6.png
- %TEMP%\RarSFX0\Binaries\Binaries\scripts\minibar\content\images\emoji\F09F90B0.png
- %TEMP%\RarSFX0\Binaries\Binaries\scripts\minibar\content\images\emoji\F09F90B1.png
- %TEMP%\RarSFX0\Binaries\Binaries\scripts\minibar\content\images\emoji\F09F90B7.png
- %TEMP%\RarSFX0\Binaries\Binaries\scripts\minibar\content\images\emoji\F09F918D.png
- %TEMP%\RarSFX0\Binaries\Binaries\scripts\minibar\content\images\emoji\F09F918E.png
- %TEMP%\RarSFX0\Binaries\Binaries\scripts\minibar\content\images\emoji\F09F90B9.png
- %TEMP%\RarSFX0\Binaries\Binaries\scripts\minibar\content\images\emoji\F09F918C.png
- %TEMP%\RarSFX0\Binaries\ChromeInstaller.exe
- %TEMP%\RarSFX0\Binaries\PremadeExtKey.data
- %TEMP%\RarSFX0\Binaries\Binaries\scripts\minibar\adapters\yelp.js
- %TEMP%\RarSFX0\Binaries\Binaries\scripts\minibar\adapters\youtube.js
- %TEMP%\RarSFX0\Binaries\Binaries\manifest.json
- %TEMP%\RarSFX0\Binaries\empty.localstorage
- %TEMP%\RarSFX0\Binaries\Binaries\scripts\minibar\content\fx2\off\blink.gif
- %TEMP%\RarSFX0\Binaries\Binaries\_locales\en\messages.json
- %TEMP%\RarSFX0\Binaries\Binaries\_locales\fr\messages.json
- %TEMP%\RarSFX0\Binaries\Binaries\scripts\minibar\adapters\de\wer-kennt-wen.js
- %TEMP%\RarSFX0\Binaries\Binaries\scripts\minibar\adapters\wordpress.js
- %TEMP%\RarSFX0\Binaries\Binaries\scripts\minibar\adapters\weather.js
- %TEMP%\RarSFX0\Binaries\Binaries\scripts\minibar\adapters\web.js
- %TEMP%\RarSFX0\Binaries\Binaries\scripts\minibar\adapters\wp-admin.js
- %TEMP%\RarSFX0\Binaries\Binaries\scripts\minibar\adapters\yammer.js
- %TEMP%\RarSFX0\Binaries\Binaries\scripts\minibar\adapters\yellowpages.js
- %TEMP%\RarSFX0\Binaries\Binaries\scripts\minibar\adapters\xvideos.js
- %TEMP%\RarSFX0\Binaries\Binaries\scripts\minibar\adapters\yahoo.js
- %TEMP%\RarSFX0\Binaries\Binaries\scripts\minibar\content\images\arrow.png
- %TEMP%\RarSFX0\Binaries\Binaries\scripts\minibar\content\images\ArrowExpandBar.png
- %TEMP%\RarSFX0\Binaries\Binaries\scripts\minibar\content\fx2\off\wave.gif
- %TEMP%\RarSFX0\Binaries\Binaries\scripts\minibar\content\fx2\on\wave.gif
- %TEMP%\RarSFX0\Binaries\Binaries\scripts\minibar\content\images\BkgExpandBar.png
- %TEMP%\RarSFX0\Binaries\Binaries\scripts\minibar\content\images\default_icon.png
- %TEMP%\RarSFX0\Binaries\Binaries\scripts\minibar\content\images\default_icon_states.png
- %TEMP%\RarSFX0\Binaries\Binaries\scripts\minibar\content\images\btnPinterest.png
- %TEMP%\RarSFX0\Binaries\Binaries\scripts\minibar\content\images\close.png
- %TEMP%\RarSFX0\Binaries\Binaries\scripts\minibar\content\fx2\on\flip.gif
- %TEMP%\RarSFX0\Binaries\Binaries\scripts\minibar\content\fx2\off\led.gif
- %TEMP%\RarSFX0\Binaries\Binaries\scripts\minibar\content\fx2\on\blink.gif
- %TEMP%\RarSFX0\Binaries\Binaries\scripts\minibar\content\fx2\off\flip.gif
- %TEMP%\RarSFX0\Binaries\Binaries\scripts\minibar\content\fx2\on\led.gif
- %TEMP%\RarSFX0\Binaries\Binaries\scripts\minibar\content\fx2\off\typed.gif
- %TEMP%\RarSFX0\Binaries\Binaries\scripts\minibar\content\fx2\on\typed.gif
- %TEMP%\RarSFX0\Binaries\Binaries\scripts\minibar\content\fx2\off\rainbow.gif
- %TEMP%\RarSFX0\Binaries\Binaries\scripts\minibar\content\fx2\on\rainbow.gif
- %TEMP%\RarSFX0\Binaries\Binaries\scripts\minibar\content\images\emoji\F09F9299.png
- %TEMP%\RarSFX0\Binaries\Binaries\scripts\minibar\content\fx2\led_background.png
- %TEMP%\RarSFX0\Binaries\Binaries\scripts\minibar\content\images\LeftExpandBar.png
- %TEMP%\RarSFX0\Binaries\Binaries\scripts\minibar\content\images\iminentbutton_bg.png
- %TEMP%\RarSFX0\Binaries\Binaries\scripts\minibar\content\images\InviteFriends.png
- %TEMP%\RarSFX0\Binaries\Binaries\scripts\minibar\content\images\leftTooltip.png
- %TEMP%\RarSFX0\Binaries\Binaries\images\logo128.png
- %TEMP%\RarSFX0\Binaries\Binaries\images\logo16.png
- %TEMP%\RarSFX0\Binaries\Binaries\scripts\minibar\content\images\Line.png
- %TEMP%\RarSFX0\Binaries\Binaries\scripts\minibar\content\images\Line2.png
- %TEMP%\RarSFX0\Binaries\Binaries\images\icon_19.png
- %TEMP%\RarSFX0\Binaries\Binaries\scripts\minibar\content\images\imbwin_bg.png
- %TEMP%\RarSFX0\Binaries\Binaries\scripts\minibar\content\images\help.png
- %TEMP%\RarSFX0\Binaries\Binaries\scripts\minibar\content\images\home.png
- %TEMP%\RarSFX0\Binaries\Binaries\scripts\minibar\content\images\imbwin_hf.png
- %TEMP%\RarSFX0\Binaries\Binaries\scripts\minibar\content\images\imbwin1_409daae67f73f4fb84c27d6d70463f2b.png
- %TEMP%\RarSFX0\Binaries\Binaries\scripts\minibar\content\images\iminentbutton.png
- %TEMP%\RarSFX0\Binaries\Binaries\scripts\minibar\content\images\imbwin_vf.png
- %TEMP%\RarSFX0\Binaries\Binaries\scripts\minibar\content\images\imbwin1.png
- %TEMP%\RarSFX0\Binaries\Binaries\scripts\minibar\content\images\TellAFriendBackground.png
- %TEMP%\RarSFX0\Binaries\Binaries\scripts\minibar\content\images\toolbar_bg.png
- %TEMP%\RarSFX0\Binaries\Binaries\scripts\minibar\content\images\separator.png
- %TEMP%\RarSFX0\Binaries\Binaries\scripts\minibar\content\images\social_games.png
- %TEMP%\RarSFX0\Binaries\Binaries\scripts\minibar\content\images\toolbarbutton_bg.png
- %TEMP%\RarSFX0\Binaries\Binaries\scripts\minibar\content\images\ui-check-box.png
- %TEMP%\RarSFX0\Binaries\Binaries\scripts\minibar\content\images\mailfooter.jpg
- %TEMP%\RarSFX0\Binaries\Binaries\scripts\minibar\content\images\tooltipArrow.png
- %TEMP%\RarSFX0\Binaries\Binaries\scripts\minibar\content\images\ui-check-box-checked.png
- %TEMP%\RarSFX0\Binaries\Binaries\scripts\minibar\content\images\new.png
- %TEMP%\RarSFX0\Binaries\Binaries\scripts\minibar\content\images\notification.png
- %TEMP%\RarSFX0\Binaries\Binaries\images\logo48.png
- %TEMP%\RarSFX0\Binaries\Binaries\scripts\minibar\content\images\Minibar_buttons.png
- %TEMP%\RarSFX0\Binaries\Binaries\scripts\minibar\content\images\ql_popup3.png
- %TEMP%\RarSFX0\Binaries\Binaries\scripts\minibar\content\images\s10.png
- %TEMP%\RarSFX0\Binaries\Binaries\scripts\minibar\content\images\search.png
- %TEMP%\RarSFX0\Binaries\Binaries\scripts\minibar\content\images\RightExpandBar.png
- %TEMP%\RarSFX0\Binaries\Binaries\scripts\minibar\content\images\rightTooltip.png
- %TEMP%\RarSFX0\Binaries\Binaries\scripts\minibar\content\images\emoji\F09F9889.png
- %TEMP%\RarSFX0\Binaries\Binaries\scripts\minibar\content\images\emoji\F09F988A.png
- %TEMP%\RarSFX0\Binaries\Binaries\scripts\minibar\content\images\emoji\F09F9882.png
- %TEMP%\RarSFX0\Binaries\Binaries\scripts\minibar\content\images\emoji\F09F9884.png
- %TEMP%\RarSFX0\Binaries\Binaries\scripts\minibar\content\images\emoji\F09F988C.png
- %TEMP%\RarSFX0\Binaries\Binaries\scripts\minibar\content\images\emoji\F09F9893.png
- %TEMP%\RarSFX0\Binaries\Binaries\scripts\minibar\content\images\emoji\F09F9894.png
- %TEMP%\RarSFX0\Binaries\Binaries\scripts\minibar\content\images\emoji\F09F988D.png
- %TEMP%\RarSFX0\Binaries\Binaries\scripts\minibar\content\images\emoji\F09F9892.png
- %TEMP%\RarSFX0\Binaries\Binaries\scripts\minibar\content\images\emoji\F09F929D.png
- %TEMP%\RarSFX0\Binaries\Binaries\scripts\minibar\content\images\emoji\F09F92A4.png
- %TEMP%\RarSFX0\Binaries\Binaries\scripts\minibar\content\images\emoji\F09F929B.png
- %TEMP%\RarSFX0\Binaries\Binaries\scripts\minibar\content\images\emoji\F09F929C.png
- %TEMP%\RarSFX0\Binaries\Binaries\scripts\minibar\content\images\emoji\F09F92A9.png
- %TEMP%\RarSFX0\Binaries\Binaries\scripts\minibar\content\images\emoji\F09F94A5.png
- %TEMP%\RarSFX0\Binaries\Binaries\scripts\minibar\content\images\emoji\F09F9881.png
- %TEMP%\RarSFX0\Binaries\Binaries\scripts\minibar\content\images\emoji\F09F92AA.png
- %TEMP%\RarSFX0\Binaries\Binaries\scripts\minibar\content\images\emoji\F09F93B1.png
- %TEMP%\RarSFX0\Binaries\Binaries\scripts\minibar\content\images\FB_Share_Tiny.png
- %TEMP%\RarSFX0\Binaries\Binaries\scripts\minibar\content\images\fbcoverimage.png
- %TEMP%\RarSFX0\Binaries\Binaries\scripts\minibar\content\images\emoji\F09F9ABD.png
- %TEMP%\RarSFX0\Binaries\Binaries\scripts\minibar\content\images\FB_Share.png
- %TEMP%\RarSFX0\Binaries\Binaries\scripts\minibar\content\images\fbimagenotheater.png
- %TEMP%\RarSFX0\Binaries\Binaries\scripts\minibar\content\images\googleimagesbutton.png
- %TEMP%\RarSFX0\Binaries\Binaries\scripts\minibar\content\images\googleimagesbuttonNEW.png
- %TEMP%\RarSFX0\Binaries\Binaries\scripts\minibar\content\images\fbimageview.png
- %TEMP%\RarSFX0\Binaries\Binaries\scripts\minibar\content\images\gifts.png
- %TEMP%\RarSFX0\Binaries\Binaries\scripts\minibar\content\images\emoji\F09F989A.png
- %TEMP%\RarSFX0\Binaries\Binaries\scripts\minibar\content\images\emoji\F09F989C.png
- %TEMP%\RarSFX0\Binaries\Binaries\scripts\minibar\content\images\emoji\F09F9896.png
- %TEMP%\RarSFX0\Binaries\Binaries\scripts\minibar\content\images\emoji\F09F9898.png
- %TEMP%\RarSFX0\Binaries\Binaries\scripts\minibar\content\images\emoji\F09F98A1.png
- %TEMP%\RarSFX0\Binaries\Binaries\scripts\minibar\content\images\emoji\F09F98B3.png
- %TEMP%\RarSFX0\Binaries\Binaries\scripts\minibar\content\images\emoji\F09F9A97.png
- %TEMP%\RarSFX0\Binaries\Binaries\scripts\minibar\content\images\emoji\F09F98AD.png
- %TEMP%\RarSFX0\Binaries\Binaries\scripts\minibar\content\images\emoji\F09F98B2.png
- %TEMP%\RarSFX0\Binaries\Binaries\scripts\minibar\adapters\walmart.js
- %TEMP%\RarSFX0\Binaries\Binaries\scripts\minibar\adapters\ask.js
- %TEMP%\RarSFX0\Binaries\Binaries\scripts\minibar\adapters\autoscout.js
- %TEMP%\RarSFX0\Binaries\Binaries\scripts\minibar\adapters\antronio.js
- %TEMP%\RarSFX0\Binaries\Binaries\scripts\minibar\adapters\Webmail\aol.js
- %TEMP%\RarSFX0\Binaries\Binaries\scripts\minibar\adapters\avmagazine.js
- %TEMP%\RarSFX0\Binaries\Binaries\scripts\lib\base64.js
- %TEMP%\RarSFX0\Binaries\Binaries\scripts\minibar\adapters\basecamphq.js
- %TEMP%\RarSFX0\Binaries\Binaries\scripts\background.js
- %TEMP%\RarSFX0\Binaries\Binaries\scripts\minibar\adapters\banners-test.js
- %TEMP%\RarSFX0\Binaries\Binaries\scripts\minibar\adapters\yahoo.css
- %TEMP%\RarSFX0\Binaries\Binaries\scripts\minibar\adapters\youtube.css
- %TEMP%\RarSFX0\Binaries\Binaries\scripts\minibar\adapters\twitter.css
- %TEMP%\RarSFX0\Binaries\Binaries\scripts\minibar\adapters\de\wer-kennt-wen.css
- %TEMP%\RarSFX0\Binaries\Binaries\scripts\minibar\config.xml
- %TEMP%\RarSFX0\Binaries\Binaries\scripts\minibar\advertising\adsmanagement.js
- %TEMP%\RarSFX0\Binaries\Binaries\scripts\minibar\adapters\amazon.js
- %TEMP%\RarSFX0\Binaries\Update.xml
- %TEMP%\RarSFX0\Binaries\Binaries\scripts\minibar\adapters\01net.js
- %TEMP%\RarSFX0\Binaries\Binaries\scripts\minibar\adapters\ebayit.js
- %TEMP%\RarSFX0\Binaries\Binaries\scripts\minibar\adapters\ehow.js
- %TEMP%\RarSFX0\Binaries\Binaries\scripts\minibar\adapters\drivingitalia.js
- %TEMP%\RarSFX0\Binaries\Binaries\scripts\minibar\adapters\ebay.js
- %TEMP%\RarSFX0\Binaries\Binaries\scripts\minibar\adapters\everyeye.js
- %TEMP%\RarSFX0\Binaries\Binaries\scripts\minibar\adapters\forum.js
- %TEMP%\RarSFX0\Binaries\Binaries\scripts\minibar\adapters\forumVB.js
- %TEMP%\RarSFX0\Binaries\Binaries\scripts\minibar\adapters\facebook.js
- %TEMP%\RarSFX0\Binaries\Binaries\scripts\minibar\adapters\flickr.js
- %TEMP%\RarSFX0\Binaries\Binaries\scripts\minibar\adapters\bomnegocio.js
- %TEMP%\RarSFX0\Binaries\Binaries\scripts\minibar\adapters\ciao.js
- %TEMP%\RarSFX0\Binaries\Binaries\scripts\minibar\adapters\blog.js
- %TEMP%\RarSFX0\Binaries\Binaries\scripts\minibar\adapters\blogger.js
- %TEMP%\RarSFX0\Binaries\Binaries\scripts\minibar\adapters\conduit.js
- %TEMP%\RarSFX0\Binaries\Binaries\scripts\minibar\adapters\dailymotion.js
- %TEMP%\RarSFX0\Binaries\Binaries\scripts\minibar\adapters\diretta.js
- %TEMP%\RarSFX0\Binaries\Binaries\scripts\contentScript.js
- %TEMP%\RarSFX0\Binaries\Binaries\scripts\minibar\adapters\craigslist.js
- %TEMP%\RarSFX0\Binaries\Binaries\scripts\minibar\games\gameiframe3.html
- %TEMP%\RarSFX0\Binaries\Binaries\scripts\minibar\games\gameiframe4.html
- %TEMP%\RarSFX0\Binaries\Binaries\scripts\minibar\games\gameiframe1.html
- %TEMP%\RarSFX0\Binaries\Binaries\scripts\minibar\games\gameiframe2.html
- %TEMP%\RarSFX0\Binaries\Binaries\scripts\minibar\games\games.html
- %TEMP%\RarSFX0\Binaries\Binaries\scripts\minibar\adapters\facebook.css
- %TEMP%\RarSFX0\Binaries\Binaries\scripts\minibar\games\games.css
- %TEMP%\RarSFX0\Binaries\Binaries\scripts\minibar\adapters\Webmail\aol.css
- %TEMP%\RarSFX0\Binaries\Binaries\scripts\minibar\adapters\dailymotion.css
- %TEMP%\RarSFX0\Binaries\Binaries\scripts\minibar\menu_page\1036.html
- %TEMP%\RarSFX0\Binaries\Binaries\scripts\minibar\menu_page\1040.html
- %TEMP%\RarSFX0\Binaries\Binaries\scripts\minibar\menu_page\1031.html
- %TEMP%\RarSFX0\Binaries\Binaries\scripts\minibar\menu_page\1033.html
- %TEMP%\RarSFX0\Binaries\Binaries\scripts\minibar\menu_page\1048.html
- %TEMP%\RarSFX0\Binaries\Binaries\scripts\minibar\menu_page\3082.html
- %TEMP%\RarSFX0\Binaries\Binaries\scripts\minibar\advertising\AdFrame.html
- %TEMP%\RarSFX0\Binaries\Binaries\scripts\minibar\menu_page\1055.html
- %TEMP%\RarSFX0\Binaries\Binaries\scripts\minibar\menu_page\2070.html
- %TEMP%\RarSFX0\Binaries\Binaries\scripts\minibar\adapters\de\schueler.css
- %TEMP%\RarSFX0\Binaries\Binaries\scripts\minibar\menu_page\ShareMenu.css
- %TEMP%\RarSFX0\Binaries\Binaries\scripts\minibar\adapters\nexopia.css
- %TEMP%\RarSFX0\Binaries\Binaries\scripts\minibar\adapters\orkut.css
- %TEMP%\RarSFX0\Binaries\Binaries\scripts\minibar\adapters\de\stayfriends.css
- %TEMP%\RarSFX0\Binaries\Binaries\scripts\minibar\adapters\taringa.css
- %TEMP%\RarSFX0\Binaries\Binaries\scripts\minibar\template.css
- %TEMP%\RarSFX0\Binaries\Binaries\scripts\minibar\adapters\de\studivz.css
- %TEMP%\RarSFX0\Binaries\Binaries\scripts\minibar\adapters\t-online.css
- %TEMP%\RarSFX0\Binaries\Binaries\scripts\minibar\adapters\hi5.css
- %TEMP%\RarSFX0\Binaries\Binaries\scripts\minibar\adapters\Webmail\hotmail.css
- %TEMP%\RarSFX0\Binaries\Binaries\scripts\minibar\adapters\Webmail\gmail.css
- %TEMP%\RarSFX0\Binaries\Binaries\scripts\minibar\adapters\google-map.css
- %TEMP%\RarSFX0\Binaries\Binaries\scripts\minibar\adapters\imdb.css
- %TEMP%\RarSFX0\Binaries\Binaries\scripts\minibar\menu.css
- %TEMP%\RarSFX0\Binaries\Binaries\scripts\minibar\adapters\myspace.css
- %TEMP%\RarSFX0\Binaries\Binaries\scripts\minibar\adapters\de\lokalisten.css
- %TEMP%\RarSFX0\Binaries\Binaries\scripts\minibar\adapters\meebo.css
- %TEMP%\RarSFX0\Binaries\Binaries\scripts\minibar\adapters\foxsports.js
- %TEMP%\RarSFX0\Binaries\Binaries\scripts\minibar\advertising\rmx.js
- %TEMP%\RarSFX0\Binaries\Binaries\scripts\minibar\adapters\roblox.js
- %TEMP%\RarSFX0\Binaries\Binaries\scripts\minibar\adapters\poptropica.js
- %TEMP%\RarSFX0\Binaries\Binaries\scripts\minibar\adapters\prodigy_msn.js
- %TEMP%\RarSFX0\Binaries\Binaries\scripts\minibar\adapters\schueler.js
- %TEMP%\RarSFX0\Binaries\Binaries\scripts\minibar\adapters\shopping.js
- %TEMP%\RarSFX0\Binaries\Binaries\scripts\minibar\adapters\skype.js
- %TEMP%\RarSFX0\Binaries\Binaries\scripts\minibar\adapters\de\schueler.js
- %TEMP%\RarSFX0\Binaries\Binaries\scripts\minibar\adapters\segundamano.js
- %TEMP%\RarSFX0\Binaries\Binaries\scripts\minibar\adapters\Webmail\orange.js
- %TEMP%\RarSFX0\Binaries\Binaries\scripts\minibar\adapters\orkut.js
- %TEMP%\RarSFX0\Binaries\Binaries\scripts\minibar\adapters\nirvam.js
- %TEMP%\RarSFX0\Binaries\Binaries\scripts\minibar\adapters\ohmydollz.js
- %TEMP%\RarSFX0\Binaries\Binaries\scripts\minibar\adapters\Webmail\outlook.js
- %TEMP%\RarSFX0\Binaries\Binaries\scripts\minibar\adapters\pinterest.js
- %TEMP%\RarSFX0\Binaries\Binaries\scripts\minibar\adapters\pof.js
- %TEMP%\RarSFX0\Binaries\Binaries\scripts\minibar\adapters\pagesjaunes.js
- %TEMP%\RarSFX0\Binaries\Binaries\scripts\minibar\adapters\photobucket.js
- %TEMP%\RarSFX0\Binaries\Binaries\scripts\minibar\adapters\tripadvisor.js
- %TEMP%\RarSFX0\Binaries\Binaries\scripts\minibar\adapters\twitter.js
- %TEMP%\RarSFX0\Binaries\Binaries\scripts\minibar\adapters\tibiabr.js
- %TEMP%\RarSFX0\Binaries\Binaries\scripts\minibar\adapters\tiscali.js
- %TEMP%\RarSFX0\Binaries\Binaries\scripts\minibar\adapters\ultrasurf.js
- %TEMP%\RarSFX0\Binaries\Binaries\scripts\minibar\adapters\virgilio.js
- %TEMP%\RarSFX0\Binaries\Binaries\scripts\minibar\adapters\voila.js
- %TEMP%\RarSFX0\Binaries\Binaries\scripts\minibar\adapters\uol.js
- %TEMP%\RarSFX0\Binaries\Binaries\scripts\minibar\adapters\v9.js
- %TEMP%\RarSFX0\Binaries\Binaries\scripts\minibar\adapters\de\stayfriends.js
- %TEMP%\RarSFX0\Binaries\Binaries\scripts\minibar\adapters\de\studivz.js
- %TEMP%\RarSFX0\Binaries\Binaries\scripts\minibar\adapters\skyrock.js
- %TEMP%\RarSFX0\Binaries\Binaries\scripts\SOAP.js
- %TEMP%\RarSFX0\Binaries\Binaries\scripts\minibar\adapters\subito.js
- %TEMP%\RarSFX0\Binaries\Binaries\scripts\minibar\adapters\taringa.js
- %TEMP%\RarSFX0\Binaries\Binaries\scripts\minibar\adapters\terra.js
- %TEMP%\RarSFX0\Binaries\Binaries\scripts\minibar\adapters\t-online.js
- %TEMP%\RarSFX0\Binaries\Binaries\scripts\minibar\adapters\tagged.js
- %TEMP%\RarSFX0\Binaries\Binaries\scripts\minibar\adapters\hi5.js
- %TEMP%\RarSFX0\Binaries\Binaries\scripts\minibar\adapters\Webmail\hotmail.js
- %TEMP%\RarSFX0\Binaries\Binaries\scripts\minibar\adapters\gumtree.js
- %TEMP%\RarSFX0\Binaries\Binaries\scripts\minibar\adapters\hardware.js
- %TEMP%\RarSFX0\Binaries\Binaries\scripts\minibar\adapters\ilmeteo.js
- %TEMP%\RarSFX0\Binaries\Binaries\scripts\minibar\adapters\indeed.js
- %TEMP%\RarSFX0\Binaries\Binaries\scripts\minibar\adapters\infos_du_net.js
- %TEMP%\RarSFX0\Binaries\Binaries\scripts\minibar\adapters\imdb.js
- %TEMP%\RarSFX0\Binaries\Binaries\scripts\minibar\adapters\inbox.js
- %TEMP%\RarSFX0\Binaries\Binaries\scripts\minibar\adapters\funutilities.js
- %TEMP%\RarSFX0\Binaries\Binaries\scripts\minibar\adapters\gamekult.js
- %TEMP%\RarSFX0\Binaries\Binaries\scripts\minibar\adapters\france_hardware.js
- %TEMP%\RarSFX0\Binaries\Binaries\scripts\minibar\adapters\friv.js
- %TEMP%\RarSFX0\Binaries\Binaries\scripts\minibar\adapters\gamesvillage.js
- %TEMP%\RarSFX0\Binaries\Binaries\scripts\minibar\adapters\google-map.js
- %TEMP%\RarSFX0\Binaries\Binaries\scripts\minibar\adapters\guiadohardware.js
- %TEMP%\RarSFX0\Binaries\Binaries\scripts\minibar\adapters\globo.js
- %TEMP%\RarSFX0\Binaries\Binaries\scripts\minibar\adapters\Webmail\gmail.js
- %TEMP%\RarSFX0\Binaries\Binaries\scripts\minibar\adapters\milanuncios.js
- %TEMP%\RarSFX0\Binaries\Binaries\scripts\minibar\minibar.min.js
- %TEMP%\RarSFX0\Binaries\Binaries\scripts\minibar\adapters\meebo.js
- %TEMP%\RarSFX0\Binaries\Binaries\scripts\minibar\adapters\meteonetwork.js
- %TEMP%\RarSFX0\Binaries\Binaries\scripts\minibar\adapters\movie2k.js
- %TEMP%\RarSFX0\Binaries\Binaries\scripts\minibar\adapters\netlog.js
- %TEMP%\RarSFX0\Binaries\Binaries\scripts\minibar\adapters\nexopia.js
- %TEMP%\RarSFX0\Binaries\Binaries\scripts\minibar\adapters\mundoanuncio.js
- %TEMP%\RarSFX0\Binaries\Binaries\scripts\minibar\adapters\myspace.js
- %TEMP%\RarSFX0\Binaries\Binaries\scripts\minibar\adapters\leboncoin.js
- %TEMP%\RarSFX0\Binaries\Binaries\scripts\minibar\adapters\libero.js
- %TEMP%\RarSFX0\Binaries\Binaries\scripts\minibar\adapters\jappy.js
- %TEMP%\RarSFX0\Binaries\Binaries\scripts\lib\jquery.min.js
- %TEMP%\RarSFX0\Binaries\Binaries\scripts\minibar\adapters\linkedin.js
- %TEMP%\RarSFX0\Binaries\Binaries\scripts\minibar\adapters\macitynet.js
- %TEMP%\RarSFX0\Binaries\Binaries\scripts\minibar\adapters\marca.js
- %TEMP%\RarSFX0\Binaries\Binaries\scripts\minibar\adapters\lokalisten.js
- %TEMP%\RarSFX0\Binaries\Binaries\scripts\minibar\adapters\de\lokalisten.js
Удаляет следующие файлы:
- %TEMP%\RarSFX0\Binaries\Binaries\scripts\minibar\adapters\gumtree.js
- %TEMP%\RarSFX0\Binaries\Binaries\scripts\minibar\adapters\hardware.js
- %TEMP%\RarSFX0\Binaries\Binaries\scripts\minibar\adapters\google-map.js
- %TEMP%\RarSFX0\Binaries\Binaries\scripts\minibar\adapters\guiadohardware.js
- %TEMP%\RarSFX0\Binaries\Binaries\scripts\minibar\adapters\hi5.css
- %TEMP%\RarSFX0\Binaries\Binaries\scripts\minibar\adapters\imdb.css
- %TEMP%\RarSFX0\Binaries\Binaries\scripts\minibar\adapters\imdb.js
- %TEMP%\RarSFX0\Binaries\Binaries\scripts\minibar\adapters\hi5.js
- %TEMP%\RarSFX0\Binaries\Binaries\scripts\minibar\adapters\ilmeteo.js
- %TEMP%\RarSFX0\Binaries\Binaries\scripts\minibar\adapters\france_hardware.js
- %TEMP%\RarSFX0\Binaries\Binaries\scripts\minibar\adapters\friv.js
- %TEMP%\RarSFX0\Binaries\Binaries\scripts\minibar\adapters\forumVB.js
- %TEMP%\RarSFX0\Binaries\Binaries\scripts\minibar\adapters\foxsports.js
- %TEMP%\RarSFX0\Binaries\Binaries\scripts\minibar\adapters\funutilities.js
- %TEMP%\RarSFX0\Binaries\Binaries\scripts\minibar\adapters\globo.js
- %TEMP%\RarSFX0\Binaries\Binaries\scripts\minibar\adapters\google-map.css
- %TEMP%\RarSFX0\Binaries\Binaries\scripts\minibar\adapters\gamekult.js
- %TEMP%\RarSFX0\Binaries\Binaries\scripts\minibar\adapters\gamesvillage.js
- %TEMP%\RarSFX0\Binaries\Binaries\scripts\minibar\adapters\meebo.js
- %TEMP%\RarSFX0\Binaries\Binaries\scripts\minibar\adapters\meteonetwork.js
- %TEMP%\RarSFX0\Binaries\Binaries\scripts\minibar\adapters\marca.js
- %TEMP%\RarSFX0\Binaries\Binaries\scripts\minibar\adapters\meebo.css
- %TEMP%\RarSFX0\Binaries\Binaries\scripts\minibar\adapters\milanuncios.js
- %TEMP%\RarSFX0\Binaries\Binaries\scripts\minibar\adapters\myspace.css
- %TEMP%\RarSFX0\Binaries\Binaries\scripts\minibar\adapters\myspace.js
- %TEMP%\RarSFX0\Binaries\Binaries\scripts\minibar\adapters\movie2k.js
- %TEMP%\RarSFX0\Binaries\Binaries\scripts\minibar\adapters\mundoanuncio.js
- %TEMP%\RarSFX0\Binaries\Binaries\scripts\minibar\adapters\infos_du_net.js
- %TEMP%\RarSFX0\Binaries\Binaries\scripts\minibar\adapters\jappy.js
- %TEMP%\RarSFX0\Binaries\Binaries\scripts\minibar\adapters\inbox.js
- %TEMP%\RarSFX0\Binaries\Binaries\scripts\minibar\adapters\indeed.js
- %TEMP%\RarSFX0\Binaries\Binaries\scripts\minibar\adapters\leboncoin.js
- %TEMP%\RarSFX0\Binaries\Binaries\scripts\minibar\adapters\lokalisten.js
- %TEMP%\RarSFX0\Binaries\Binaries\scripts\minibar\adapters\macitynet.js
- %TEMP%\RarSFX0\Binaries\Binaries\scripts\minibar\adapters\libero.js
- %TEMP%\RarSFX0\Binaries\Binaries\scripts\minibar\adapters\linkedin.js
- %TEMP%\RarSFX0\Binaries\Binaries\scripts\minibar\adapters\amazon.js
- %TEMP%\RarSFX0\Binaries\Binaries\scripts\minibar\adapters\antronio.js
- %TEMP%\RarSFX0\Binaries\Binaries\scripts\minibar\advertising\rmx.js
- %TEMP%\RarSFX0\Binaries\Binaries\scripts\minibar\adapters\01net.js
- %TEMP%\RarSFX0\Binaries\Binaries\scripts\minibar\adapters\ask.js
- %TEMP%\RarSFX0\Binaries\Binaries\scripts\minibar\adapters\banners-test.js
- %TEMP%\RarSFX0\Binaries\Binaries\scripts\minibar\adapters\basecamphq.js
- %TEMP%\RarSFX0\Binaries\Binaries\scripts\minibar\adapters\autoscout.js
- %TEMP%\RarSFX0\Binaries\Binaries\scripts\minibar\adapters\avmagazine.js
- %TEMP%\RarSFX0\Binaries\Binaries\scripts\minibar\content\fx2\off\flip.gif
- %TEMP%\RarSFX0\Binaries\Binaries\scripts\minibar\content\fx2\off\led.gif
- %TEMP%\RarSFX0\Binaries\Binaries\scripts\minibar\content\fx2\on\wave.gif
- %TEMP%\RarSFX0\Binaries\Binaries\scripts\minibar\content\fx2\off\blink.gif
- %TEMP%\RarSFX0\Binaries\Binaries\scripts\minibar\content\fx2\off\rainbow.gif
- %TEMP%\RarSFX0\Binaries\Binaries\scripts\minibar\advertising\AdFrame.html
- %TEMP%\RarSFX0\Binaries\Binaries\scripts\minibar\advertising\adsmanagement.js
- %TEMP%\RarSFX0\Binaries\Binaries\scripts\minibar\content\fx2\off\typed.gif
- %TEMP%\RarSFX0\Binaries\Binaries\scripts\minibar\content\fx2\off\wave.gif
- %TEMP%\RarSFX0\Binaries\Binaries\scripts\minibar\adapters\ebayit.js
- %TEMP%\RarSFX0\Binaries\Binaries\scripts\minibar\adapters\ehow.js
- %TEMP%\RarSFX0\Binaries\Binaries\scripts\minibar\adapters\drivingitalia.js
- %TEMP%\RarSFX0\Binaries\Binaries\scripts\minibar\adapters\ebay.js
- %TEMP%\RarSFX0\Binaries\Binaries\scripts\minibar\adapters\everyeye.js
- %TEMP%\RarSFX0\Binaries\Binaries\scripts\minibar\adapters\flickr.js
- %TEMP%\RarSFX0\Binaries\Binaries\scripts\minibar\adapters\forum.js
- %TEMP%\RarSFX0\Binaries\Binaries\scripts\minibar\adapters\facebook.css
- %TEMP%\RarSFX0\Binaries\Binaries\scripts\minibar\adapters\facebook.js
- %TEMP%\RarSFX0\Binaries\Binaries\scripts\minibar\adapters\bomnegocio.js
- %TEMP%\RarSFX0\Binaries\Binaries\scripts\minibar\adapters\ciao.js
- %TEMP%\RarSFX0\Binaries\Binaries\scripts\minibar\adapters\blog.js
- %TEMP%\RarSFX0\Binaries\Binaries\scripts\minibar\adapters\blogger.js
- %TEMP%\RarSFX0\Binaries\Binaries\scripts\minibar\adapters\conduit.js
- %TEMP%\RarSFX0\Binaries\Binaries\scripts\minibar\adapters\dailymotion.js
- %TEMP%\RarSFX0\Binaries\Binaries\scripts\minibar\adapters\diretta.js
- %TEMP%\RarSFX0\Binaries\Binaries\scripts\minibar\adapters\craigslist.js
- %TEMP%\RarSFX0\Binaries\Binaries\scripts\minibar\adapters\dailymotion.css
- %TEMP%\RarSFX0\Binaries\Binaries\scripts\minibar\adapters\netlog.js
- %TEMP%\RarSFX0\Binaries\Binaries\scripts\minibar\adapters\youtube.js
- %TEMP%\RarSFX0\Binaries\Binaries\scripts\minibar\adapters\Webmail\aol.css
- %TEMP%\RarSFX0\Binaries\Binaries\scripts\minibar\adapters\yelp.js
- %TEMP%\RarSFX0\Binaries\Binaries\scripts\minibar\adapters\youtube.css
- %TEMP%\RarSFX0\Binaries\Binaries\scripts\minibar\adapters\Webmail\aol.js
- %TEMP%\RarSFX0\Binaries\Binaries\scripts\minibar\adapters\Webmail\hotmail.css
- %TEMP%\RarSFX0\Binaries\Binaries\scripts\minibar\adapters\Webmail\hotmail.js
- %TEMP%\RarSFX0\Binaries\Binaries\scripts\minibar\adapters\Webmail\gmail.css
- %TEMP%\RarSFX0\Binaries\Binaries\scripts\minibar\adapters\Webmail\gmail.js
- %TEMP%\RarSFX0\Binaries\Binaries\scripts\minibar\adapters\wordpress.js
- %TEMP%\RarSFX0\Binaries\Binaries\scripts\minibar\adapters\wp-admin.js
- %TEMP%\RarSFX0\Binaries\Binaries\scripts\minibar\adapters\weather.js
- %TEMP%\RarSFX0\Binaries\Binaries\scripts\minibar\adapters\web.js
- %TEMP%\RarSFX0\Binaries\Binaries\scripts\minibar\adapters\xvideos.js
- %TEMP%\RarSFX0\Binaries\Binaries\scripts\minibar\adapters\yammer.js
- %TEMP%\RarSFX0\Binaries\Binaries\scripts\minibar\adapters\yellowpages.js
- %TEMP%\RarSFX0\Binaries\Binaries\scripts\minibar\adapters\yahoo.css
- %TEMP%\RarSFX0\Binaries\Binaries\scripts\minibar\adapters\yahoo.js
- %TEMP%\RarSFX0\Binaries\Binaries\scripts\minibar\adapters\de\wer-kennt-wen.js
- %TEMP%\RarSFX0\Binaries\Binaries\scripts\lib\base64.js
- %TEMP%\RarSFX0\Binaries\Binaries\scripts\minibar\adapters\de\studivz.js
- %TEMP%\RarSFX0\Binaries\Binaries\scripts\minibar\adapters\de\wer-kennt-wen.css
- %TEMP%\RarSFX0\Binaries\Binaries\scripts\lib\jquery.min.js
- %TEMP%\RarSFX0\Binaries\Binaries\images\logo16.png
- %TEMP%\RarSFX0\Binaries\Binaries\images\logo48.png
- %TEMP%\RarSFX0\Binaries\Binaries\images\icon_19.png
- %TEMP%\RarSFX0\Binaries\Binaries\images\logo128.png
- %TEMP%\RarSFX0\Binaries\Binaries\scripts\minibar\adapters\de\lokalisten.css
- %TEMP%\RarSFX0\Binaries\Binaries\scripts\minibar\adapters\de\lokalisten.js
- %TEMP%\RarSFX0\Binaries\Binaries\scripts\minibar\adapters\Webmail\orange.js
- %TEMP%\RarSFX0\Binaries\Binaries\scripts\minibar\adapters\Webmail\outlook.js
- %TEMP%\RarSFX0\Binaries\Binaries\scripts\minibar\adapters\de\schueler.css
- %TEMP%\RarSFX0\Binaries\Binaries\scripts\minibar\adapters\de\stayfriends.js
- %TEMP%\RarSFX0\Binaries\Binaries\scripts\minibar\adapters\de\studivz.css
- %TEMP%\RarSFX0\Binaries\Binaries\scripts\minibar\adapters\de\schueler.js
- %TEMP%\RarSFX0\Binaries\Binaries\scripts\minibar\adapters\de\stayfriends.css
- %TEMP%\RarSFX0\Binaries\Binaries\scripts\minibar\adapters\prodigy_msn.js
- %TEMP%\RarSFX0\Binaries\Binaries\scripts\minibar\adapters\roblox.js
- %TEMP%\RarSFX0\Binaries\Binaries\scripts\minibar\adapters\pof.js
- %TEMP%\RarSFX0\Binaries\Binaries\scripts\minibar\adapters\poptropica.js
- %TEMP%\RarSFX0\Binaries\Binaries\scripts\minibar\adapters\schueler.js
- %TEMP%\RarSFX0\Binaries\Binaries\scripts\minibar\adapters\skype.js
- %TEMP%\RarSFX0\Binaries\Binaries\scripts\minibar\adapters\skyrock.js
- %TEMP%\RarSFX0\Binaries\Binaries\scripts\minibar\adapters\segundamano.js
- %TEMP%\RarSFX0\Binaries\Binaries\scripts\minibar\adapters\shopping.js
- %TEMP%\RarSFX0\Binaries\Binaries\scripts\minibar\adapters\nirvam.js
- %TEMP%\RarSFX0\Binaries\Binaries\scripts\minibar\adapters\ohmydollz.js
- %TEMP%\RarSFX0\Binaries\Binaries\scripts\minibar\adapters\nexopia.css
- %TEMP%\RarSFX0\Binaries\Binaries\scripts\minibar\adapters\nexopia.js
- %TEMP%\RarSFX0\Binaries\Binaries\scripts\minibar\adapters\orkut.css
- %TEMP%\RarSFX0\Binaries\Binaries\scripts\minibar\adapters\photobucket.js
- %TEMP%\RarSFX0\Binaries\Binaries\scripts\minibar\adapters\pinterest.js
- %TEMP%\RarSFX0\Binaries\Binaries\scripts\minibar\adapters\orkut.js
- %TEMP%\RarSFX0\Binaries\Binaries\scripts\minibar\adapters\pagesjaunes.js
- %TEMP%\RarSFX0\Binaries\Binaries\scripts\minibar\adapters\twitter.js
- %TEMP%\RarSFX0\Binaries\Binaries\scripts\minibar\adapters\ultrasurf.js
- %TEMP%\RarSFX0\Binaries\Binaries\scripts\minibar\adapters\tripadvisor.js
- %TEMP%\RarSFX0\Binaries\Binaries\scripts\minibar\adapters\twitter.css
- %TEMP%\RarSFX0\Binaries\Binaries\scripts\minibar\adapters\uol.js
- %TEMP%\RarSFX0\Binaries\Binaries\scripts\minibar\adapters\voila.js
- %TEMP%\RarSFX0\Binaries\Binaries\scripts\minibar\adapters\walmart.js
- %TEMP%\RarSFX0\Binaries\Binaries\scripts\minibar\adapters\v9.js
- %TEMP%\RarSFX0\Binaries\Binaries\scripts\minibar\adapters\virgilio.js
- %TEMP%\RarSFX0\Binaries\Binaries\scripts\minibar\adapters\t-online.js
- %TEMP%\RarSFX0\Binaries\Binaries\scripts\minibar\adapters\tagged.js
- %TEMP%\RarSFX0\Binaries\Binaries\scripts\minibar\adapters\subito.js
- %TEMP%\RarSFX0\Binaries\Binaries\scripts\minibar\adapters\t-online.css
- %TEMP%\RarSFX0\Binaries\Binaries\scripts\minibar\adapters\taringa.css
- %TEMP%\RarSFX0\Binaries\Binaries\scripts\minibar\adapters\tibiabr.js
- %TEMP%\RarSFX0\Binaries\Binaries\scripts\minibar\adapters\tiscali.js
- %TEMP%\RarSFX0\Binaries\Binaries\scripts\minibar\adapters\taringa.js
- %TEMP%\RarSFX0\Binaries\Binaries\scripts\minibar\adapters\terra.js
- %TEMP%\RarSFX0\Binaries\Binaries\scripts\minibar\content\fx2\on\typed.gif
- %TEMP%\RarSFX0\Binaries\Binaries\scripts\minibar\content\images\imbwin1.png
- %TEMP%\RarSFX0\Binaries\Binaries\scripts\minibar\content\images\imbwin1_409daae67f73f4fb84c27d6d70463f2b.png
- %TEMP%\RarSFX0\Binaries\Binaries\scripts\minibar\content\images\help.png
- %TEMP%\RarSFX0\Binaries\Binaries\scripts\minibar\content\images\home.png
- %TEMP%\RarSFX0\Binaries\Binaries\scripts\minibar\content\images\imbwin_bg.png
- %TEMP%\RarSFX0\Binaries\Binaries\scripts\minibar\content\images\iminentbutton.png
- %TEMP%\RarSFX0\Binaries\Binaries\scripts\minibar\content\images\iminentbutton_bg.png
- %TEMP%\RarSFX0\Binaries\Binaries\scripts\minibar\content\images\imbwin_hf.png
- %TEMP%\RarSFX0\Binaries\Binaries\scripts\minibar\content\images\imbwin_vf.png
- %TEMP%\RarSFX0\Binaries\Binaries\scripts\minibar\content\images\fbimagenotheater.png
- %TEMP%\RarSFX0\Binaries\Binaries\scripts\minibar\content\images\fbimageview.png
- %TEMP%\RarSFX0\Binaries\Binaries\scripts\minibar\content\images\Expand-26x24.png
- %TEMP%\RarSFX0\Binaries\Binaries\scripts\minibar\content\images\fbcoverimage.png
- %TEMP%\RarSFX0\Binaries\Binaries\scripts\minibar\content\images\FB_Share.png
- %TEMP%\RarSFX0\Binaries\Binaries\scripts\minibar\content\images\googleimagesbutton.png
- %TEMP%\RarSFX0\Binaries\Binaries\scripts\minibar\content\images\googleimagesbuttonNEW.png
- %TEMP%\RarSFX0\Binaries\Binaries\scripts\minibar\content\images\FB_Share_Tiny.png
- %TEMP%\RarSFX0\Binaries\Binaries\scripts\minibar\content\images\gifts.png
- %TEMP%\RarSFX0\Binaries\Binaries\scripts\minibar\content\images\rightTooltip.png
- %TEMP%\RarSFX0\Binaries\Binaries\scripts\minibar\content\images\s10.png
- %TEMP%\RarSFX0\Binaries\Binaries\scripts\minibar\content\images\ql_popup3.png
- %TEMP%\RarSFX0\Binaries\Binaries\scripts\minibar\content\images\RightExpandBar.png
- %TEMP%\RarSFX0\Binaries\Binaries\scripts\minibar\content\images\search.png
- %TEMP%\RarSFX0\Binaries\Binaries\scripts\minibar\content\images\TellAFriendBackground.png
- %TEMP%\RarSFX0\Binaries\Binaries\scripts\minibar\content\images\toolbarbutton_bg.png
- %TEMP%\RarSFX0\Binaries\Binaries\scripts\minibar\content\images\separator.png
- %TEMP%\RarSFX0\Binaries\Binaries\scripts\minibar\content\images\social_games.png
- %TEMP%\RarSFX0\Binaries\Binaries\scripts\minibar\content\images\leftTooltip.png
- %TEMP%\RarSFX0\Binaries\Binaries\scripts\minibar\content\images\Line.png
- %TEMP%\RarSFX0\Binaries\Binaries\scripts\minibar\content\images\InviteFriends.png
- %TEMP%\RarSFX0\Binaries\Binaries\scripts\minibar\content\images\LeftExpandBar.png
- %TEMP%\RarSFX0\Binaries\Binaries\scripts\minibar\content\images\Line2.png
- %TEMP%\RarSFX0\Binaries\Binaries\scripts\minibar\content\images\new.png
- %TEMP%\RarSFX0\Binaries\Binaries\scripts\minibar\content\images\notification.png
- %TEMP%\RarSFX0\Binaries\Binaries\scripts\minibar\content\images\mailfooter.jpg
- %TEMP%\RarSFX0\Binaries\Binaries\scripts\minibar\content\images\Minibar_buttons.png
- %TEMP%\RarSFX0\Binaries\Binaries\scripts\minibar\menu.css
- %TEMP%\RarSFX0\Binaries\Binaries\scripts\minibar\minibar.min.js
- %TEMP%\RarSFX0\Binaries\Binaries\scripts\SOAP.js
- %TEMP%\RarSFX0\Binaries\Binaries\scripts\minibar\config.xml
- %TEMP%\RarSFX0\Binaries\Binaries\scripts\minibar\template.css
- %TEMP%\RarSFX0\Binaries\Binaries\scripts\minibar\menu_page\1036.html
- %TEMP%\RarSFX0\Binaries\Binaries\scripts\minibar\menu_page\1040.html
- %TEMP%\RarSFX0\Binaries\Binaries\scripts\minibar\menu_page\1031.html
- %TEMP%\RarSFX0\Binaries\Binaries\scripts\minibar\menu_page\1033.html
- %TEMP%\RarSFX0\Binaries\PremadeExtKey.data
- %TEMP%\RarSFX0\Binaries\Update.xml
- %TEMP%\RarSFX0\Binaries\ChromeInstaller.exe
- %TEMP%\RarSFX0\Binaries\empty.localstorage
- %TEMP%\RarSFX0\Binaries\Binaries\manifest.json
- %TEMP%\RarSFX0\Binaries\Binaries\scripts\background.js
- %TEMP%\RarSFX0\Binaries\Binaries\scripts\contentScript.js
- %TEMP%\RarSFX0\Binaries\Binaries\_locales\fr\messages.json
- %TEMP%\RarSFX0\Binaries\Binaries\_locales\en\messages.json
- %TEMP%\RarSFX0\Binaries\Binaries\scripts\minibar\content\images\arrow.png
- %TEMP%\RarSFX0\Binaries\Binaries\scripts\minibar\content\images\ArrowExpandBar.png
- %TEMP%\RarSFX0\Binaries\Binaries\scripts\minibar\games\games.css
- %TEMP%\RarSFX0\Binaries\Binaries\scripts\minibar\games\games.html
- %TEMP%\RarSFX0\Binaries\Binaries\scripts\minibar\content\images\BkgExpandBar.png
- %TEMP%\RarSFX0\Binaries\Binaries\scripts\minibar\content\images\default_icon.png
- %TEMP%\RarSFX0\Binaries\Binaries\scripts\minibar\content\images\default_icon_states.png
- %TEMP%\RarSFX0\Binaries\Binaries\scripts\minibar\content\images\btnPinterest.png
- %TEMP%\RarSFX0\Binaries\Binaries\scripts\minibar\content\images\close.png
- %TEMP%\RarSFX0\Binaries\Binaries\scripts\minibar\menu_page\2070.html
- %TEMP%\RarSFX0\Binaries\Binaries\scripts\minibar\menu_page\3082.html
- %TEMP%\RarSFX0\Binaries\Binaries\scripts\minibar\menu_page\1048.html
- %TEMP%\RarSFX0\Binaries\Binaries\scripts\minibar\menu_page\1055.html
- %TEMP%\RarSFX0\Binaries\Binaries\scripts\minibar\menu_page\ShareMenu.css
- %TEMP%\RarSFX0\Binaries\Binaries\scripts\minibar\games\gameiframe3.html
- %TEMP%\RarSFX0\Binaries\Binaries\scripts\minibar\games\gameiframe4.html
- %TEMP%\RarSFX0\Binaries\Binaries\scripts\minibar\games\gameiframe1.html
- %TEMP%\RarSFX0\Binaries\Binaries\scripts\minibar\games\gameiframe2.html
- %TEMP%\RarSFX0\Binaries\Binaries\scripts\minibar\content\images\toolbar_bg.png
- %TEMP%\RarSFX0\Binaries\Binaries\scripts\minibar\content\images\emoji\F09F9881.png
- %TEMP%\RarSFX0\Binaries\Binaries\scripts\minibar\content\images\emoji\F09F9882.png
- %TEMP%\RarSFX0\Binaries\Binaries\scripts\minibar\content\images\emoji\F09F93B1.png
- %TEMP%\RarSFX0\Binaries\Binaries\scripts\minibar\content\images\emoji\F09F94A5.png
- %TEMP%\RarSFX0\Binaries\Binaries\scripts\minibar\content\images\emoji\F09F9884.png
- %TEMP%\RarSFX0\Binaries\Binaries\scripts\minibar\content\images\emoji\F09F988C.png
- %TEMP%\RarSFX0\Binaries\Binaries\scripts\minibar\content\images\emoji\F09F988D.png
- %TEMP%\RarSFX0\Binaries\Binaries\scripts\minibar\content\images\emoji\F09F9889.png
- %TEMP%\RarSFX0\Binaries\Binaries\scripts\minibar\content\images\emoji\F09F988A.png
- %TEMP%\RarSFX0\Binaries\Binaries\scripts\minibar\content\images\emoji\F09F9299.png
- %TEMP%\RarSFX0\Binaries\Binaries\scripts\minibar\content\images\emoji\F09F929B.png
- %TEMP%\RarSFX0\Binaries\Binaries\scripts\minibar\content\images\emoji\F09F9294.png
- %TEMP%\RarSFX0\Binaries\Binaries\scripts\minibar\content\images\emoji\F09F9297.png
- %TEMP%\RarSFX0\Binaries\Binaries\scripts\minibar\content\images\emoji\F09F929C.png
- %TEMP%\RarSFX0\Binaries\Binaries\scripts\minibar\content\images\emoji\F09F92A9.png
- %TEMP%\RarSFX0\Binaries\Binaries\scripts\minibar\content\images\emoji\F09F92AA.png
- %TEMP%\RarSFX0\Binaries\Binaries\scripts\minibar\content\images\emoji\F09F929D.png
- %TEMP%\RarSFX0\Binaries\Binaries\scripts\minibar\content\images\emoji\F09F92A4.png
- %TEMP%\RarSFX0\Binaries\Binaries\scripts\minibar\content\images\emoji\F09F9A97.png
- %TEMP%\RarSFX0\Binaries\Binaries\scripts\minibar\content\images\emoji\F09F9ABD.png
- %TEMP%\RarSFX0\Binaries\Binaries\scripts\minibar\content\images\emoji\F09F98B2.png
- %TEMP%\RarSFX0\Binaries\Binaries\scripts\minibar\content\images\emoji\F09F98B3.png
- %TEMP%\RarSFX0\Binaries\Binaries\scripts\minibar\content\fx2\led_background.png
- %TEMP%\RarSFX0\Binaries\Binaries\scripts\minibar\content\fx2\on\led.gif
- %TEMP%\RarSFX0\Binaries\Binaries\scripts\minibar\content\fx2\on\rainbow.gif
- %TEMP%\RarSFX0\Binaries\Binaries\scripts\minibar\content\fx2\on\blink.gif
- %TEMP%\RarSFX0\Binaries\Binaries\scripts\minibar\content\fx2\on\flip.gif
- %TEMP%\RarSFX0\Binaries\Binaries\scripts\minibar\content\images\emoji\F09F9894.png
- %TEMP%\RarSFX0\Binaries\Binaries\scripts\minibar\content\images\emoji\F09F9896.png
- %TEMP%\RarSFX0\Binaries\Binaries\scripts\minibar\content\images\emoji\F09F9892.png
- %TEMP%\RarSFX0\Binaries\Binaries\scripts\minibar\content\images\emoji\F09F9893.png
- %TEMP%\RarSFX0\Binaries\Binaries\scripts\minibar\content\images\emoji\F09F9898.png
- %TEMP%\RarSFX0\Binaries\Binaries\scripts\minibar\content\images\emoji\F09F98A1.png
- %TEMP%\RarSFX0\Binaries\Binaries\scripts\minibar\content\images\emoji\F09F98AD.png
- %TEMP%\RarSFX0\Binaries\Binaries\scripts\minibar\content\images\emoji\F09F989A.png
- %TEMP%\RarSFX0\Binaries\Binaries\scripts\minibar\content\images\emoji\F09F989C.png
- %TEMP%\RarSFX0\Binaries\Binaries\scripts\minibar\content\images\emoji\F09F8E89.png
- %TEMP%\RarSFX0\Binaries\Binaries\scripts\minibar\content\images\emoji\F09F8EB1.png
- %TEMP%\RarSFX0\Binaries\Binaries\scripts\minibar\content\images\emoji\F09F8DBB.png
- %TEMP%\RarSFX0\Binaries\Binaries\scripts\minibar\content\images\emoji\F09F8E81.png
- %TEMP%\RarSFX0\Binaries\Binaries\scripts\minibar\content\images\emoji\F09F8EB6.png
- %TEMP%\RarSFX0\Binaries\Binaries\scripts\minibar\content\images\emoji\F09F90A7.png
- %TEMP%\RarSFX0\Binaries\Binaries\scripts\minibar\content\images\emoji\F09F90AC.png
- %TEMP%\RarSFX0\Binaries\Binaries\scripts\minibar\content\images\emoji\F09F8EB8.png
- %TEMP%\RarSFX0\Binaries\Binaries\scripts\minibar\content\images\emoji\F09F908D.png
- %TEMP%\RarSFX0\Binaries\Binaries\scripts\minibar\content\images\ui-check-box.png
- %TEMP%\RarSFX0\Binaries\Binaries\scripts\minibar\content\images\emoji\E29ABD.png
- %TEMP%\RarSFX0\Binaries\Binaries\scripts\minibar\content\images\tooltipArrow.png
- %TEMP%\RarSFX0\Binaries\Binaries\scripts\minibar\content\images\ui-check-box-checked.png
- %TEMP%\RarSFX0\Binaries\Binaries\scripts\minibar\content\images\emoji\E29BB5.png
- %TEMP%\RarSFX0\Binaries\Binaries\scripts\minibar\content\images\emoji\F09F8CB9.png
- %TEMP%\RarSFX0\Binaries\Binaries\scripts\minibar\content\images\emoji\F09F8D80.png
- %TEMP%\RarSFX0\Binaries\Binaries\scripts\minibar\content\images\emoji\F09F8C99.png
- %TEMP%\RarSFX0\Binaries\Binaries\scripts\minibar\content\images\emoji\F09F8C9F.png
- %TEMP%\RarSFX0\Binaries\Binaries\scripts\minibar\content\images\emoji\F09F91BD.png
- %TEMP%\RarSFX0\Binaries\Binaries\scripts\minibar\content\images\emoji\F09F9280.png
- %TEMP%\RarSFX0\Binaries\Binaries\scripts\minibar\content\images\emoji\F09F918D.png
- %TEMP%\RarSFX0\Binaries\Binaries\scripts\minibar\content\images\emoji\F09F918E.png
- %TEMP%\RarSFX0\Binaries\Binaries\scripts\minibar\content\images\emoji\F09F9284.png
- %TEMP%\RarSFX0\Binaries\Binaries\scripts\minibar\content\images\emoji\F09F928F.png
- %TEMP%\RarSFX0\Binaries\Binaries\scripts\minibar\content\images\emoji\F09F9293.png
- %TEMP%\RarSFX0\Binaries\Binaries\scripts\minibar\content\images\emoji\F09F928B.png
- %TEMP%\RarSFX0\Binaries\Binaries\scripts\minibar\content\images\emoji\F09F928D.png
- %TEMP%\RarSFX0\Binaries\Binaries\scripts\minibar\content\images\emoji\F09F90B0.png
- %TEMP%\RarSFX0\Binaries\Binaries\scripts\minibar\content\images\emoji\F09F90B1.png
- %TEMP%\RarSFX0\Binaries\Binaries\scripts\minibar\content\images\emoji\F09F90AE.png
- %TEMP%\RarSFX0\Binaries\Binaries\scripts\minibar\content\images\emoji\F09F90AF.png
- %TEMP%\RarSFX0\Binaries\Binaries\scripts\minibar\content\images\emoji\F09F90B4.png
- %TEMP%\RarSFX0\Binaries\Binaries\scripts\minibar\content\images\emoji\F09F90B9.png
- %TEMP%\RarSFX0\Binaries\Binaries\scripts\minibar\content\images\emoji\F09F918C.png
- %TEMP%\RarSFX0\Binaries\Binaries\scripts\minibar\content\images\emoji\F09F90B6.png
- %TEMP%\RarSFX0\Binaries\Binaries\scripts\minibar\content\images\emoji\F09F90B7.png
Другое:
Ищет следующие окна:
- ClassName: '' WindowName: ''
- ClassName: 'Shell_TrayWnd' WindowName: ''
- ClassName: 'EDIT' WindowName: ''
