Library
My library

+ Add to library

Contact us
24/7 Tech support | Rules regarding submitting

Send a message

Your tickets

Profile

Trojan.MulDrop8.60381

Added to the Dr.Web virus database: 2018-11-28

Virus description added:

Technical Information

To ensure autorun and distribution:
Modifies the following registry keys:
  • [<HKLM>\SOFTWARE\Classes\WinRAR\shell\open\command] '' = '"%ProgramFiles%\WinRAR\WinRAR.exe" "%1"'
  • [<HKLM>\SOFTWARE\Classes\WinRAR.ZIP\shell\open\command] '' = '"%ProgramFiles%\WinRAR\WinRAR.exe" "%1"'
  • [<HKLM>\SOFTWARE\Classes\WinRAR.REV\shell\open\command] '' = '"%ProgramFiles%\WinRAR\WinRAR.exe" "%1"'
Modifies file system:
Creates the following files:
  • %TEMP%\aut1.tmp
  • %APPDATA%\WinRAR\Themes\WinRAR_Classic_48x36\Toolbar\Wizard.bmp
  • %APPDATA%\WinRAR\Themes\Windows8an\Toolbar\VirusScan.bmp
  • %APPDATA%\WinRAR\Themes\WinRAR_Vista_Mx_48x48\ToolBar\VirusScan.bmp
  • %APPDATA%\WinRAR\Themes\WinRAR_for_Vista_48x\Toolbar\VirusScan.bmp
  • %APPDATA%\WinRAR\Themes\Medieval_48x48\Toolbar\VirusScan.bmp
  • %APPDATA%\WinRAR\Themes\WinRAR_Crystal_Clear_48x48\Toolbar\VirusScan.bmp
  • %APPDATA%\WinRAR\Themes\WinRAR_JOM2-48x48\Toolbar\VirusScan.bmp
  • %APPDATA%\WinRAR\Themes\MaRado_48x48\Toolbar\VirusScan.bmp
  • %APPDATA%\WinRAR\Themes\WinRAR_Orbital_48x48\Toolbar\VirusScan.bmp
  • %APPDATA%\WinRAR\Themes\WinRAR_Smile_d_48x48\Toolbar\VirusScan.bmp
  • %APPDATA%\WinRAR\Themes\WinRAR_OS_X_48x48\Toolbar\VirusScan.bmp
  • %APPDATA%\WinRAR\Themes\WinRAR_Classic_48x36\Toolbar\VirusScan.bmp
  • %APPDATA%\WinRAR\Themes\WinRAR_Vista_Mx_48x48\ToolBar\View.bmp
  • %APPDATA%\WinRAR\Themes\WinRAR_OS_X_48x48\Toolbar\Wizard.bmp
  • %APPDATA%\WinRAR\Themes\WinRAR_for_Vista_48x\Toolbar\View.bmp
  • %APPDATA%\WinRAR\Themes\Medieval_48x48\Toolbar\View.bmp
  • %APPDATA%\WinRAR\Themes\WinRAR_Crystal_Clear_48x48\Toolbar\View.bmp
  • %APPDATA%\WinRAR\Themes\MaRado_48x48\Toolbar\View.bmp
  • %APPDATA%\WinRAR\Themes\WinRAR_JOM2-48x48\Toolbar\View.bmp
  • %APPDATA%\WinRAR\Themes\WinRAR_Orbital_48x48\Toolbar\View.bmp
  • %APPDATA%\WinRAR\Themes\WinRAR_Smile_d_48x48\Toolbar\View.bmp
  • %APPDATA%\WinRAR\Themes\WinRAR_OS_X_48x48\Toolbar\View.bmp
  • %APPDATA%\WinRAR\Themes\WinRAR_Classic_48x36\Toolbar\View.bmp
  • %APPDATA%\WinRAR\Themes\Windows8an\Toolbar\Test.bmp
  • %APPDATA%\WinRAR\Themes\WinRAR_Vista_Mx_48x48\ToolBar\Test.bmp
  • %APPDATA%\WinRAR\Themes\Windows8an\Toolbar\View.bmp
  • %APPDATA%\WinRAR\Themes\WinRAR_OS_X_48x48\SortUp.bmp
  • %APPDATA%\WinRAR\Themes\WinRAR_Orbital_48x48\Toolbar\Wizard.bmp
  • %APPDATA%\WinRAR\Themes\WinRAR_for_Vista_48x\DiskOff.ico
  • %APPDATA%\WinRAR\Themes\Medieval_48x48\DiskOff.ico
  • %APPDATA%\WinRAR\Themes\WinRAR_Crystal_Clear_48x48\DiskOff.ico
  • %APPDATA%\WinRAR\Themes\WinRAR_JOM2-48x48\DiskOff.ico
  • %APPDATA%\WinRAR\Themes\MaRado_48x48\DiskOff.ico
  • %APPDATA%\WinRAR\Themes\WinRAR_Orbital_48x48\DiskOff.ico
  • %APPDATA%\WinRAR\Themes\WinRAR_Smile_d_48x48\DiskOff.ico
  • %APPDATA%\WinRAR\Themes\WinRAR_OS_X_48x48\DiskOff.ico
  • %APPDATA%\WinRAR\Themes\WinRAR_Classic_48x36\DiskOff.ico
  • %APPDATA%\WinRAR\Themes\Windows8an\WizardLogo.bmp
  • %APPDATA%\WinRAR\Themes\WinRAR_Vista_Mx_48x48\WizardLogo.bmp
  • %APPDATA%\WinRAR\Themes\WinRAR_for_Vista_48x\WizardLogo.bmp
  • %APPDATA%\WinRAR\Themes\WinRAR_for_Vista_48x\Toolbar\Test.bmp
  • %APPDATA%\WinRAR\Themes\WinRAR_Smile_d_48x48\Toolbar\Wizard.bmp
  • %APPDATA%\WinRAR\Themes\WinRAR_JOM2-48x48\WizardLogo.bmp
  • %APPDATA%\WinRAR\Themes\MaRado_48x48\WizardLogo.bmp
  • %APPDATA%\WinRAR\Themes\WinRAR_Orbital_48x48\WizardLogo.bmp
  • %APPDATA%\WinRAR\Themes\WinRAR_Smile_d_48x48\WizardLogo.bmp
  • %APPDATA%\WinRAR\Themes\WinRAR_OS_X_48x48\WizardLogo.bmp
  • %APPDATA%\WinRAR\Themes\WinRAR_Classic_48x36\WizardLogo.bmp
  • %APPDATA%\WinRAR\Themes\Windows8an\Toolbar\Wizard.bmp
  • %APPDATA%\WinRAR\Themes\WinRAR_Vista_Mx_48x48\ToolBar\Wizard.bmp
  • %APPDATA%\WinRAR\Themes\WinRAR_for_Vista_48x\Toolbar\Wizard.bmp
  • %APPDATA%\WinRAR\Themes\Medieval_48x48\Toolbar\Wizard.bmp
  • %APPDATA%\WinRAR\Themes\WinRAR_Crystal_Clear_48x48\Toolbar\Wizard.bmp
  • %APPDATA%\WinRAR\Themes\WinRAR_JOM2-48x48\Toolbar\Wizard.bmp
  • %APPDATA%\WinRAR\Themes\WinRAR_Crystal_Clear_48x48\WizardLogo.bmp
  • %APPDATA%\WinRAR\Themes\MaRado_48x48\Toolbar\Wizard.bmp
  • %APPDATA%\WinRAR\Themes\Medieval_48x48\Toolbar\Test.bmp
  • %APPDATA%\WinRAR\Themes\WinRAR_Crystal_Clear_48x48\Toolbar\Test.bmp
  • %APPDATA%\WinRAR\Themes\WinRAR_JOM2-48x48\Toolbar\Test.bmp
  • %APPDATA%\WinRAR\Themes\WinRAR_OS_X_48x48\Toolbar\SFX.bmp
  • %APPDATA%\WinRAR\Themes\MaRado_48x48\SFXLogo.bmp
  • %APPDATA%\WinRAR\Themes\WinRAR_Orbital_48x48\SFXLogo.bmp
  • %APPDATA%\WinRAR\Themes\WinRAR_Smile_d_48x48\SFXLogo.bmp
  • %APPDATA%\WinRAR\Themes\WinRAR_Classic_48x36\SFXLogo.bmp
  • %APPDATA%\WinRAR\Themes\Windows8an\Toolbar\SFX.bmp
  • %APPDATA%\WinRAR\Themes\WinRAR_Vista_Mx_48x48\ToolBar\SFX.bmp
  • %APPDATA%\WinRAR\Themes\WinRAR_for_Vista_48x\Toolbar\SFX.bmp
  • %APPDATA%\WinRAR\Themes\Medieval_48x48\Toolbar\SFX.bmp
  • %APPDATA%\WinRAR\Themes\WinRAR_Crystal_Clear_48x48\Toolbar\SFX.bmp
  • %APPDATA%\WinRAR\Themes\WinRAR_JOM2-48x48\Toolbar\SFX.bmp
  • %APPDATA%\WinRAR\Themes\MaRado_48x48\Toolbar\SFX.bmp
  • %APPDATA%\WinRAR\Themes\WinRAR_Vista_Mx_48x48\DiskOff.ico
  • %APPDATA%\WinRAR\Themes\WinRAR_Crystal_Clear_48x48\SFXLogo.bmp
  • %APPDATA%\WinRAR\Themes\WinRAR_Smile_d_48x48\Toolbar\SFX.bmp
  • %APPDATA%\WinRAR\Themes\WinRAR_Classic_48x36\Toolbar\SFX.bmp
  • %APPDATA%\WinRAR\Themes\WinRAR_JOM2-48x48\SetUp.bmp
  • %APPDATA%\WinRAR\Themes\Windows8an\Toolbar\Report.bmp
  • %APPDATA%\WinRAR\Themes\WinRAR_Vista_Mx_48x48\ToolBar\Report.bmp
  • %APPDATA%\WinRAR\Themes\WinRAR_Classic_48x36\Toolbar\Report.bmp
  • %APPDATA%\WinRAR\Themes\WinRAR_for_Vista_48x\Toolbar\Report.bmp
  • %APPDATA%\WinRAR\Themes\Medieval_48x48\Toolbar\Report.bmp
  • %APPDATA%\WinRAR\Themes\WinRAR_Crystal_Clear_48x48\Toolbar\Report.bmp
  • %APPDATA%\WinRAR\Themes\WinRAR_JOM2-48x48\Toolbar\Report.bmp
  • %APPDATA%\WinRAR\Themes\MaRado_48x48\Toolbar\Report.bmp
  • %APPDATA%\WinRAR\Themes\WinRAR_Orbital_48x48\Toolbar\Report.bmp
  • %APPDATA%\WinRAR\Themes\WinRAR_Orbital_48x48\Toolbar\SFX.bmp
  • %APPDATA%\WinRAR\Themes\Medieval_48x48\WizardLogo.bmp
  • %APPDATA%\WinRAR\Themes\Medieval_48x48\SFXLogo.bmp
  • %APPDATA%\WinRAR\Themes\Windows8an\SFXLogo.bmp
  • %APPDATA%\WinRAR\Themes\WinRAR_for_Vista_48x\SFXLogo.bmp
  • %APPDATA%\WinRAR\Themes\MaRado_48x48\Toolbar\Test.bmp
  • %APPDATA%\WinRAR\Themes\WinRAR_Orbital_48x48\Toolbar\Test.bmp
  • %APPDATA%\WinRAR\Themes\WinRAR_Smile_d_48x48\Toolbar\Test.bmp
  • %APPDATA%\WinRAR\Themes\WinRAR_OS_X_48x48\Toolbar\Test.bmp
  • %APPDATA%\WinRAR\Themes\WinRAR_Classic_48x36\Toolbar\Test.bmp
  • %APPDATA%\WinRAR\Themes\Windows8an\SortUp.bmp
  • %APPDATA%\WinRAR\Themes\WinRAR_Vista_Mx_48x48\SortUp.bmp
  • %APPDATA%\WinRAR\Themes\WinRAR_for_Vista_48x\SortUp.bmp
  • %APPDATA%\WinRAR\Themes\Medieval_48x48\SortUp.bmp
  • %APPDATA%\WinRAR\Themes\WinRAR_Crystal_Clear_48x48\SortUp.bmp
  • %APPDATA%\WinRAR\Themes\WinRAR_JOM2-48x48\SortUp.bmp
  • %APPDATA%\WinRAR\Themes\WinRAR_Vista_Mx_48x48\SFXLogo.bmp
  • %APPDATA%\WinRAR\Themes\MaRado_48x48\SortUp.bmp
  • %APPDATA%\WinRAR\Themes\WinRAR_JOM2-48x48\SfxLogo.bmp
  • %APPDATA%\WinRAR\Themes\WinRAR_Smile_d_48x48\SortUp.bmp
  • %APPDATA%\WinRAR\Themes\Windows8an\SortDown.bmp
  • %APPDATA%\WinRAR\Themes\WinRAR_Vista_Mx_48x48\SortDown.bmp
  • %APPDATA%\WinRAR\Themes\WinRAR_for_Vista_48x\SortDown.bmp
  • %APPDATA%\WinRAR\Themes\Medieval_48x48\SortDown.bmp
  • %APPDATA%\WinRAR\Themes\WinRAR_Crystal_Clear_48x48\SortDown.bmp
  • %APPDATA%\WinRAR\Themes\WinRAR_JOM2-48x48\SortDown.bmp
  • %APPDATA%\WinRAR\Themes\MaRado_48x48\SortDown.bmp
  • %APPDATA%\WinRAR\Themes\WinRAR_Orbital_48x48\SortDown.bmp
  • %APPDATA%\WinRAR\Themes\WinRAR_OS_X_48x48\SortDown.bmp
  • %APPDATA%\WinRAR\Themes\WinRAR_Smile_d_48x48\SortDown.bmp
  • %APPDATA%\WinRAR\Themes\WinRAR_Orbital_48x48\SortUp.bmp
  • %APPDATA%\WinRAR\Themes\Windows8an\DiskOff.ico
  • %APPDATA%\WinRAR\Themes\WinRAR_OS_X_48x48\DiskOn.ico
  • %APPDATA%\WinRAR\Themes\WinRAR_Smile_d_48x48\DiskOn.ico
  • %APPDATA%\WinRAR\Themes\WinRAR_Crystal_Clear_48x48\SFX1.ico
  • %APPDATA%\WinRAR\Themes\WinRAR_Smile_d_48x48\SFX1.ico
  • %APPDATA%\WinRAR\Themes\Windows8an\SFX.ico
  • %APPDATA%\WinRAR\Themes\WinRAR_Vista_Mx_48x48\SFX.ico
  • %APPDATA%\WinRAR\Themes\WinRAR_for_Vista_48x\SFX.ico
  • %APPDATA%\WinRAR\Themes\Medieval_48x48\SFX.ico
  • %APPDATA%\WinRAR\Themes\WinRAR_Crystal_Clear_48x48\SFX.ico
  • %APPDATA%\WinRAR\Themes\WinRAR_JOM2-48x48\SFX.ico
  • %APPDATA%\WinRAR\Themes\MaRado_48x48\sfx.ico
  • %APPDATA%\WinRAR\Themes\WinRAR_Orbital_48x48\SFX.ico
  • %APPDATA%\WinRAR\Themes\WinRAR_OS_X_48x48\SFX.ico
  • %APPDATA%\WinRAR\Themes\WinRAR_Smile_d_48x48\sfx.ico
  • %APPDATA%\WinRAR\Themes\WinRAR_OS_X_48x48\Tray.ico
  • %APPDATA%\WinRAR\Themes\WinRAR_Classic_48x36\SFX.ico
  • %APPDATA%\WinRAR\Themes\WinRAR_Vista_Mx_48x48\Setup.ico
  • %APPDATA%\WinRAR\Themes\WinRAR_for_Vista_48x\Setup.ico
  • %APPDATA%\WinRAR\Themes\Medieval_48x48\Setup.ico
  • %APPDATA%\WinRAR\Themes\WinRAR_Crystal_Clear_48x48\Setup.ico
  • %APPDATA%\WinRAR\Themes\MaRado_48x48\Setup.ico
  • %APPDATA%\WinRAR\Themes\WinRAR_Orbital_48x48\Setup.ico
  • %APPDATA%\WinRAR\Themes\WinRAR_Smile_d_48x48\Setup.ico
  • %APPDATA%\WinRAR\Themes\WinRAR_OS_X_48x48\Setup.ico
  • %APPDATA%\WinRAR\Themes\WinRAR_Classic_48x36\Setup.ico
  • %APPDATA%\WinRAR\Themes\Windows8an\REV.ico
  • %APPDATA%\WinRAR\Themes\WinRAR_Vista_Mx_48x48\REV.ico
  • %APPDATA%\WinRAR\Themes\WinRAR_for_Vista_48x\REV.ico
  • %APPDATA%\WinRAR\Themes\Windows8an\Setup.ico
  • %APPDATA%\WinRAR\Themes\WinRAR_for_Vista_48x\winrar_theme_description.txt
  • %APPDATA%\WinRAR\Themes\WinRAR_Smile_d_48x48\Toolbar\Report.bmp
  • %APPDATA%\WinRAR\Themes\MaRado_48x48\Tray.ico
  • %APPDATA%\WinRAR\Themes\WinRAR_Classic_48x36\DragCopy.cur
  • %APPDATA%\WinRAR\Themes\WinRAR_Vista_Mx_48x48\DragCopy.cur
  • %APPDATA%\WinRAR\Themes\Medieval_48x48\DragCopy.cur
  • %APPDATA%\WinRAR\Themes\WinRAR_JOM2-48x48\DragCopy.cur
  • %APPDATA%\WinRAR\Themes\WinRAR_Smile_d_48x48\DragCopy.cur
  • %APPDATA%\WinRAR\Themes\WinRAR_OS_X_48x48\DragCopy.cur
  • %APPDATA%\WinRAR\Themes\WinRAR_Orbital_48x48\DragCopy.cur
  • %APPDATA%\WinRAR\Themes\WinRAR_for_Vista_48x\DragCopy.cur
  • %APPDATA%\WinRAR\Themes\WinRAR_Crystal_Clear_48x48\DragCopy.cur
  • %APPDATA%\WinRAR\Themes\MaRado_48x48\DragCopy.cur
  • %APPDATA%\WinRAR\Themes\WinRAR_Classic_48x36\winrar_theme_description.txt
  • %APPDATA%\WinRAR\Themes\Windows8an\winrar_theme_description.txt
  • %APPDATA%\WinRAR\Themes\Medieval_48x48\REV.ico
  • %APPDATA%\WinRAR\Themes\WinRAR_Vista_Mx_48x48\WinRAR_Theme_Description.txt
  • %APPDATA%\WinRAR\Themes\Medieval_48x48\WinRAR_theme_description.txt
  • %APPDATA%\WinRAR\Themes\WinRAR_Crystal_Clear_48x48\winrar_theme_description.txt
  • %APPDATA%\WinRAR\Themes\WinRAR_JOM2-48x48\winrar_theme_description.txt
  • %APPDATA%\WinRAR\Themes\MaRado_48x48\winrar_theme_description.txt
  • %APPDATA%\WinRAR\Themes\WinRAR_Orbital_48x48\winrar_theme_description.txt
  • %APPDATA%\WinRAR\Themes\WinRAR_OS_X_48x48\winrar_theme_description.txt
  • %APPDATA%\WinRAR\Themes\WinRAR_Smile_d_48x48\winrar_theme_description.txt
  • %APPDATA%\WinRAR\Themes\WinRAR_Vista_Mx_48x48\Zip.ico
  • %APPDATA%\WinRAR\Themes\Windows8an\Tray.ico
  • %APPDATA%\WinRAR\Themes\WinRAR_for_Vista_48x\Tray.ico
  • %APPDATA%\WinRAR\Themes\WinRAR_Crystal_Clear_48x48\Tray.ico
  • %APPDATA%\WinRAR\Themes\WinRAR_JOM2-48x48\Tray.ico
  • %APPDATA%\WinRAR\Themes\WinRAR_Smile_d_48x48\Tray.ico
  • %APPDATA%\WinRAR\Themes\WinRAR_OS_X_48x48\RAR.ico
  • %APPDATA%\WinRAR\Themes\WinRAR_Crystal_Clear_48x48\REV.ico
  • %APPDATA%\WinRAR\Themes\WinRAR_Vista_Mx_48x48\PassWordOff.ico
  • %APPDATA%\WinRAR\Themes\WinRAR_Crystal_Clear_48x48\PasswordOff.ico
  • %APPDATA%\WinRAR\Themes\MaRado_48x48\PasswordOff.ico
  • %APPDATA%\WinRAR\Themes\WinRAR_JOM2-48x48\PasswordOff.ico
  • %APPDATA%\WinRAR\Themes\WinRAR_Orbital_48x48\PasswordOff.ico
  • %APPDATA%\WinRAR\Themes\WinRAR_Smile_d_48x48\PasswordOff.ico
  • %APPDATA%\WinRAR\Themes\WinRAR_OS_X_48x48\PasswordOff.ico
  • %APPDATA%\WinRAR\Themes\WinRAR_Classic_48x36\PasswordOff.ico
  • %APPDATA%\WinRAR\Themes\Windows8an\File.ico
  • %APPDATA%\WinRAR\Themes\WinRAR_Vista_Mx_48x48\File.ico
  • %APPDATA%\WinRAR\Themes\WinRAR_for_Vista_48x\File.ico
  • %APPDATA%\WinRAR\Themes\Medieval_48x48\File.ico
  • %APPDATA%\WinRAR\Themes\WinRAR_Crystal_Clear_48x48\File.ico
  • %APPDATA%\WinRAR\Themes\Medieval_48x48\PasswordOff.ico
  • %APPDATA%\WinRAR\Themes\MaRado_48x48\File.ico
  • %APPDATA%\WinRAR\Themes\WinRAR_Orbital_48x48\File.ico
  • %APPDATA%\WinRAR\Themes\WinRAR_Smile_d_48x48\File.ico
  • %APPDATA%\WinRAR\Themes\WinRAR_OS_X_48x48\File.ico
  • %APPDATA%\WinRAR\Themes\WinRAR_Classic_48x36\DiskOn.ico
  • %APPDATA%\WinRAR\Themes\Windows8an\DiskOn.ico
  • %APPDATA%\WinRAR\Themes\WinRAR_Vista_Mx_48x48\DiskOn.ico
  • %APPDATA%\WinRAR\Themes\WinRAR_for_Vista_48x\DiskOn.ico
  • %APPDATA%\WinRAR\Themes\Medieval_48x48\DiskOn.ico
  • %APPDATA%\WinRAR\Themes\WinRAR_Crystal_Clear_48x48\DiskOn.ico
  • %APPDATA%\WinRAR\Themes\WinRAR_JOM2-48x48\DiskOn.ico
  • %APPDATA%\WinRAR\Themes\MaRado_48x48\DiskOn.ico
  • %APPDATA%\WinRAR\Themes\WinRAR_Orbital_48x48\DiskOn.ico
  • %APPDATA%\WinRAR\Themes\WinRAR_JOM2-48x48\File.ico
  • %APPDATA%\WinRAR\Themes\WinRAR_Vista_Mx_48x48\DragMove.cur
  • %APPDATA%\WinRAR\Themes\MaRado_48x48\REV.ico
  • %APPDATA%\WinRAR\Themes\Windows8an\PasswordOff.ico
  • %APPDATA%\WinRAR\Themes\WinRAR_Orbital_48x48\REV.ico
  • %APPDATA%\WinRAR\Themes\WinRAR_Smile_d_48x48\REV.ico
  • %APPDATA%\WinRAR\Themes\WinRAR_OS_X_48x48\REV.ico
  • %APPDATA%\WinRAR\Themes\WinRAR_Classic_48x36\REV.ico
  • %APPDATA%\WinRAR\Themes\Windows8an\RAR.ico
  • %APPDATA%\WinRAR\Themes\WinRAR_Vista_Mx_48x48\RAR.ico
  • %APPDATA%\WinRAR\Themes\WinRAR_for_Vista_48x\RAR.ico
  • %APPDATA%\WinRAR\Themes\Medieval_48x48\RAR.ico
  • %APPDATA%\WinRAR\Themes\WinRAR_Crystal_Clear_48x48\RAR.ico
  • %APPDATA%\WinRAR\Themes\MaRado_48x48\RAR.ico
  • %APPDATA%\WinRAR\Themes\WinRAR_JOM2-48x48\RAR.ico
  • %APPDATA%\WinRAR\Themes\WinRAR_Orbital_48x48\RAR.ICO
  • %APPDATA%\WinRAR\Themes\WinRAR_JOM2-48x48\REV.ico
  • %APPDATA%\WinRAR\Themes\WinRAR_Smile_d_48x48\RAR.ico
  • %APPDATA%\WinRAR\Themes\WinRAR_Classic_48x36\RAR.ico
  • %APPDATA%\WinRAR\Themes\Windows8an\PasswordOn.ico
  • %APPDATA%\WinRAR\Themes\WinRAR_Vista_Mx_48x48\PassWordOn.ico
  • %APPDATA%\WinRAR\Themes\WinRAR_for_Vista_48x\PasswordOn.ico
  • %APPDATA%\WinRAR\Themes\Medieval_48x48\PasswordOn.ico
  • %APPDATA%\WinRAR\Themes\WinRAR_Crystal_Clear_48x48\PasswordOn.ico
  • %APPDATA%\WinRAR\Themes\MaRado_48x48\PasswordOn.ico
  • %APPDATA%\WinRAR\Themes\WinRAR_JOM2-48x48\PasswordOn.ico
  • %APPDATA%\WinRAR\Themes\WinRAR_Orbital_48x48\PasswordOn.ico
  • %APPDATA%\WinRAR\Themes\WinRAR_OS_X_48x48\PasswordOn.ico
  • %APPDATA%\WinRAR\Themes\WinRAR_Smile_d_48x48\PasswordOn.ico
  • %APPDATA%\WinRAR\Themes\WinRAR_Classic_48x36\PasswordOn.ico
  • %APPDATA%\WinRAR\Themes\WinRAR_for_Vista_48x\PasswordOff.ico
  • %APPDATA%\WinRAR\Themes\WinRAR_Orbital_48x48\Tray.ico
  • %APPDATA%\WinRAR\Themes\WinRAR_OS_X_48x48\Toolbar\Report.bmp
  • %APPDATA%\WinRAR\Themes\WinRAR_Orbital_48x48\Toolbar\Protect.bmp
  • %APPDATA%\WinRAR\Themes\WinRAR_Smile_d_48x48\Toolbar\Convert.bmp
  • %APPDATA%\WinRAR\Themes\WinRAR_OS_X_48x48\Toolbar\Convert.bmp
  • %APPDATA%\WinRAR\Themes\WinRAR_Classic_48x36\Toolbar\Convert.bmp
  • %APPDATA%\WinRAR\Themes\Windows8an\Toolbar\Comment.bmp
  • %APPDATA%\WinRAR\Themes\WinRAR_Vista_Mx_48x48\ToolBar\Comment.bmp
  • %APPDATA%\WinRAR\Themes\WinRAR_for_Vista_48x\Toolbar\Comment.bmp
  • %APPDATA%\WinRAR\Themes\Medieval_48x48\Toolbar\Comment.bmp
  • %APPDATA%\WinRAR\Themes\WinRAR_Crystal_Clear_48x48\Toolbar\Comment.bmp
  • %APPDATA%\WinRAR\Themes\WinRAR_JOM2-48x48\Toolbar\Comment.bmp
  • %APPDATA%\WinRAR\Themes\MaRado_48x48\Toolbar\Comment.bmp
  • %APPDATA%\WinRAR\Themes\WinRAR_Orbital_48x48\Toolbar\Comment.bmp
  • %APPDATA%\WinRAR\Themes\WinRAR_Smile_d_48x48\Toolbar\Comment.bmp
  • %APPDATA%\WinRAR\Themes\WinRAR_Classic_48x36\Toolbar\Comment.bmp
  • %APPDATA%\WinRAR\Themes\MaRado_48x48\Toolbar\Convert.bmp
  • %APPDATA%\WinRAR\Themes\WinRAR_for_Vista_48x\Toolbar\Benchmrk.bmp
  • %APPDATA%\WinRAR\Themes\Windows8an\Toolbar\Benchmark.bmp
  • %APPDATA%\WinRAR\Themes\WinRAR_Classic_48x36\Toolbar\Benchmark.bmp
  • %APPDATA%\WinRAR\Themes\WinRAR_Vista_Mx_48x48\ToolBar\BenchMark.bmp
  • %APPDATA%\WinRAR\Themes\Medieval_48x48\Toolbar\Benchmark.bmp
  • %APPDATA%\WinRAR\Themes\WinRAR_Crystal_Clear_48x48\Toolbar\Benchmark.bmp
  • %APPDATA%\WinRAR\Themes\WinRAR_JOM2-48x48\Toolbar\Benchmark.bmp
  • %APPDATA%\WinRAR\Themes\MaRado_48x48\Toolbar\Benchmark.bmp
  • %APPDATA%\WinRAR\Themes\WinRAR_Orbital_48x48\Toolbar\Benchmark.bmp
  • %APPDATA%\WinRAR\Themes\WinRAR_Smile_d_48x48\Toolbar\Benchmark.bmp
  • %APPDATA%\WinRAR\Themes\WinRAR_OS_X_48x48\Toolbar\Benchmark.bmp
  • %APPDATA%\WinRAR\Themes\WinRAR_OS_X_48x48\Toolbar\Comment.bmp
  • %APPDATA%\WinRAR\Themes\MaRado_48x48\AboutLogo.bmp
  • %APPDATA%\WinRAR\Themes\WinRAR_JOM2-48x48\Toolbar\Convert.bmp
  • %APPDATA%\WinRAR\Themes\Windows8an\Estimate.bmp
  • %APPDATA%\WinRAR\Themes\WinRAR_Vista_Mx_48x48\Estimate.bmp
  • %APPDATA%\WinRAR\Themes\WinRAR_for_Vista_48x\Estimate.bmp
  • %APPDATA%\WinRAR\Themes\Medieval_48x48\Estimate.bmp
  • %APPDATA%\WinRAR\Themes\WinRAR_Crystal_Clear_48x48\Estimate.bmp
  • %APPDATA%\WinRAR\Themes\WinRAR_JOM2-48x48\Estimate.bmp
  • %APPDATA%\WinRAR\Themes\WinRAR_Orbital_48x48\Estimate.bmp
  • %APPDATA%\WinRAR\Themes\WinRAR_Smile_d_48x48\Estimate.bmp
  • %APPDATA%\WinRAR\Themes\WinRAR_OS_X_48x48\Estimate.bmp
  • %APPDATA%\WinRAR\Themes\MaRado_48x48\Estimate.bmp
  • %APPDATA%\WinRAR\Themes\WinRAR_Classic_48x36\Estimate.bmp
  • %APPDATA%\WinRAR\Themes\Windows8an\Toolbar\Delete.bmp
  • %APPDATA%\WinRAR\Themes\Windows8an\Toolbar\Add.bmp
  • %APPDATA%\WinRAR\Themes\WinRAR_Orbital_48x48\Toolbar\Convert.bmp
  • %APPDATA%\WinRAR\Themes\Medieval_48x48\Toolbar\Delete.bmp
  • %APPDATA%\WinRAR\Themes\WinRAR_Crystal_Clear_48x48\Toolbar\Delete.bmp
  • %APPDATA%\WinRAR\Themes\WinRAR_JOM2-48x48\Toolbar\Delete.bmp
  • %APPDATA%\WinRAR\Themes\MaRado_48x48\Toolbar\Delete.bmp
  • %APPDATA%\WinRAR\Themes\WinRAR_Orbital_48x48\Toolbar\Delete.bmp
  • %APPDATA%\WinRAR\Themes\WinRAR_Smile_d_48x48\Toolbar\Delete.bmp
  • %APPDATA%\WinRAR\Themes\WinRAR_OS_X_48x48\Toolbar\Delete.bmp
  • %APPDATA%\WinRAR\Themes\WinRAR_Classic_48x36\Toolbar\Delete.bmp
  • %APPDATA%\WinRAR\Themes\Windows8an\Toolbar\Convert.bmp
  • %APPDATA%\WinRAR\Themes\WinRAR_Vista_Mx_48x48\ToolBar\Convert.bmp
  • %APPDATA%\WinRAR\Themes\WinRAR_for_Vista_48x\Toolbar\Convert.bmp
  • %APPDATA%\WinRAR\Themes\Medieval_48x48\Toolbar\Convert.bmp
  • %APPDATA%\WinRAR\Themes\WinRAR_for_Vista_48x\Toolbar\Delete.bmp
  • %APPDATA%\WinRAR\Themes\WinRAR_Crystal_Clear_48x48\Toolbar\Convert.bmp
  • %APPDATA%\WinRAR\Themes\WinRAR_Vista_Mx_48x48\ToolBar\Add.bmp
  • %APPDATA%\WinRAR\Themes\WinRAR_for_Vista_48x\Toolbar\Add.bmp
  • %APPDATA%\WinRAR\Themes\Medieval_48x48\Toolbar\Add.bmp
  • %ProgramFiles%\WinRAR\Uninstall.lst
  • %ProgramFiles%\WinRAR\uninstall.lng
  • %ProgramFiles%\WinRAR\rarext.lng
  • %ProgramFiles%\WinRAR\rar.lng
  • %ProgramFiles%\WinRAR\WinRAR.chm
  • %ProgramFiles%\WinRAR\UNACEV2.DLL
  • %ProgramFiles%\WinRAR\RarExt64.dll
  • %ProgramFiles%\WinRAR\RarExt.dll
  • %ProgramFiles%\WinRAR\7zxa.dll
  • %ProgramFiles%\WinRAR\WinRAR.exe
  • %ProgramFiles%\WinRAR\UnRAR.exe
  • %ProgramFiles%\WinRAR\Uninstall.exe
  • %APPDATA%\WinRAR\Themes\WinRAR_Classic_48x36\Toolbar\Exit.bmp
  • %ProgramFiles%\WinRAR\Default.SFX
  • %ProgramFiles%\WinRAR\RarFiles.lst
  • %ProgramFiles%\WinRAR\Order.htm
  • %ProgramFiles%\WinRAR\WhatsNew.txt
  • %ProgramFiles%\WinRAR\Rar.txt
  • %ProgramFiles%\WinRAR\License.txt
  • %ProgramFiles%\WinRAR\ReadMe.txt
  • %ProgramFiles%\WinRAR\Descript.ion
  • %TEMP%\Themes.exe
  • %TEMP%\aut3.tmp
  • %TEMP%\x86.exe
  • %TEMP%\aut2.tmp
  • %TEMP%\x64.exe
  • %ProgramFiles%\WinRAR\Rar.exe
  • %APPDATA%\WinRAR\Themes\WinRAR_Vista_Mx_48x48\ToolBar\Delete.bmp
  • %ProgramFiles%\WinRAR\WinCon.SFX
  • %ProgramFiles%\WinRAR\rarnew.dat
  • %ProgramFiles%\WinRAR\Zip.SFX
  • %APPDATA%\WinRAR\Themes\WinRAR_Crystal_Clear_48x48\Toolbar\Add.bmp
  • %APPDATA%\WinRAR\Themes\WinRAR_JOM2-48x48\Toolbar\Add.bmp
  • %APPDATA%\WinRAR\Themes\MaRado_48x48\Toolbar\Add.bmp
  • %APPDATA%\WinRAR\Themes\WinRAR_Orbital_48x48\Toolbar\Add.bmp
  • %APPDATA%\WinRAR\Themes\WinRAR_Smile_d_48x48\Toolbar\Add.bmp
  • %APPDATA%\WinRAR\Themes\WinRAR_OS_X_48x48\Toolbar\Add.bmp
  • %APPDATA%\WinRAR\Themes\WinRAR_Classic_48x36\Toolbar\Add.bmp
  • %APPDATA%\WinRAR\Themes\Windows8an\AboutLogo.bmp
  • %APPDATA%\WinRAR\Themes\WinRAR_Vista_Mx_48x48\AboutLogo.bmp
  • %APPDATA%\WinRAR\Themes\WinRAR_for_Vista_48x\AboutLogo.bmp
  • %APPDATA%\WinRAR\Themes\Medieval_48x48\AboutLogo.bmp
  • %ProgramFiles%\WinRAR\rarreg.key
  • %APPDATA%\WinRAR\Themes\WinRAR_Crystal_Clear_48x48\AboutLogo.bmp
  • %ProgramFiles%\WinRAR\winrar.lng
  • %APPDATA%\WinRAR\Themes\WinRAR_Orbital_48x48\AboutLogo.bmp
  • %APPDATA%\WinRAR\Themes\WinRAR_OS_X_48x48\AboutLogo.bmp
  • %APPDATA%\WinRAR\Themes\WinRAR_Smile_d_48x48\AboutLogo.bmp
  • %APPDATA%\WinRAR\Themes\WinRAR_Classic_48x36\AboutLogo.bmp
  • %ALLUSERSPROFILE%\Start Menu\Programs\WinRAR\Konsol RAR kılavuzu.lnk
  • %ALLUSERSPROFILE%\Start Menu\Programs\WinRAR\WinRAR yardımı.lnk
  • %ALLUSERSPROFILE%\Start Menu\Programs\WinRAR\WinRAR.lnk
  • %HOMEPATH%\Start Menu\Programs\WinRAR\Konsol RAR kılavuzu.lnk
  • %HOMEPATH%\Start Menu\Programs\WinRAR\WinRAR yardımı.lnk
  • %HOMEPATH%\Start Menu\Programs\WinRAR\WinRAR.lnk
  • %ProgramFiles%\WinRAR\zipnew.dat
  • %APPDATA%\WinRAR\Themes\WinRAR_JOM2-48x48\AboutLogo.bmp
  • %APPDATA%\WinRAR\Themes\WinRAR_OS_X_48x48\Toolbar\Exit.bmp
  • %APPDATA%\WinRAR\Themes\WinRAR_Smile_d_48x48\Toolbar\Exit.bmp
  • %APPDATA%\WinRAR\Themes\WinRAR_Orbital_48x48\Toolbar\Exit.bmp
  • %APPDATA%\WinRAR\Themes\WinRAR_Classic_48x36\Toolbar\Protect.bmp
  • %APPDATA%\WinRAR\Themes\Windows8an\Toolbar\Print.bmp
  • %APPDATA%\WinRAR\Themes\WinRAR_Vista_Mx_48x48\ToolBar\Print.bmp
  • %APPDATA%\WinRAR\Themes\WinRAR_for_Vista_48x\Toolbar\Print.bmp
  • %APPDATA%\WinRAR\Themes\Medieval_48x48\Toolbar\Print.bmp
  • %APPDATA%\WinRAR\Themes\WinRAR_Crystal_Clear_48x48\Toolbar\Print.bmp
  • %APPDATA%\WinRAR\Themes\WinRAR_JOM2-48x48\Toolbar\Print.bmp
  • %APPDATA%\WinRAR\Themes\MaRado_48x48\Toolbar\Print.bmp
  • %APPDATA%\WinRAR\Themes\WinRAR_Orbital_48x48\Toolbar\Print.bmp
  • %APPDATA%\WinRAR\Themes\WinRAR_Smile_d_48x48\Toolbar\Print.bmp
  • %APPDATA%\WinRAR\Themes\WinRAR_OS_X_48x48\Toolbar\Print.bmp
  • %APPDATA%\WinRAR\Themes\WinRAR_Classic_48x36\Toolbar\Print.bmp
  • %APPDATA%\WinRAR\Themes\WinRAR_Smile_d_48x48\Toolbar\Protect.bmp
  • %APPDATA%\WinRAR\Themes\Windows8an\Toolbar\Lock.bmp
  • %APPDATA%\WinRAR\Themes\WinRAR_for_Vista_48x\Toolbar\Lock.bmp
  • %APPDATA%\WinRAR\Themes\Medieval_48x48\Toolbar\Lock.bmp
  • %APPDATA%\WinRAR\Themes\WinRAR_Crystal_Clear_48x48\Toolbar\Lock.bmp
  • %APPDATA%\WinRAR\Themes\WinRAR_JOM2-48x48\Toolbar\Lock.bmp
  • %APPDATA%\WinRAR\Themes\MaRado_48x48\Toolbar\Lock.bmp
  • %APPDATA%\WinRAR\Themes\WinRAR_Orbital_48x48\Toolbar\Lock.bmp
  • %APPDATA%\WinRAR\Themes\WinRAR_Smile_d_48x48\Toolbar\Lock.bmp
  • %APPDATA%\WinRAR\Themes\WinRAR_OS_X_48x48\Toolbar\Lock.bmp
  • %APPDATA%\WinRAR\Themes\WinRAR_Classic_48x36\Toolbar\Lock.bmp
  • %APPDATA%\WinRAR\Themes\Windows8an\Toolbar\Info.bmp
  • %APPDATA%\WinRAR\Themes\WinRAR_Vista_Mx_48x48\ToolBar\Info.bmp
  • %APPDATA%\WinRAR\Themes\WinRAR_for_Vista_48x\Toolbar\Info.bmp
  • %APPDATA%\WinRAR\Themes\WinRAR_Vista_Mx_48x48\ToolBar\Lock.bmp
  • %APPDATA%\WinRAR\Themes\WinRAR_Crystal_Clear_48x48\RarSmall.bmp
  • %APPDATA%\WinRAR\Themes\Windows8an\Toolbar\Repair.bmp
  • %APPDATA%\WinRAR\Themes\MaRado_48x48\Toolbar\Protect.bmp
  • %APPDATA%\WinRAR\Themes\WinRAR_for_Vista_48x\Toolbar\Repair.bmp
  • %APPDATA%\WinRAR\Themes\Medieval_48x48\Toolbar\Repair.bmp
  • %APPDATA%\WinRAR\Themes\WinRAR_Crystal_Clear_48x48\Toolbar\Repair.bmp
  • %APPDATA%\WinRAR\Themes\WinRAR_JOM2-48x48\Toolbar\Repair.bmp
  • %APPDATA%\WinRAR\Themes\MaRado_48x48\Toolbar\Repair.bmp
  • %APPDATA%\WinRAR\Themes\WinRAR_Orbital_48x48\Toolbar\Repair.bmp
  • %APPDATA%\WinRAR\Themes\WinRAR_Smile_d_48x48\Toolbar\Repair.bmp
  • %APPDATA%\WinRAR\Themes\WinRAR_OS_X_48x48\Toolbar\Repair.bmp
  • %APPDATA%\WinRAR\Themes\WinRAR_Classic_48x36\Toolbar\Repair.bmp
  • %APPDATA%\WinRAR\Themes\Windows8an\RARsmall.bmp
  • %APPDATA%\WinRAR\Themes\WinRAR_Vista_Mx_48x48\RarSmall.bmp
  • %APPDATA%\WinRAR\Themes\WinRAR_for_Vista_48x\RarSmall.bmp
  • %APPDATA%\WinRAR\Themes\Medieval_48x48\Toolbar\Info.bmp
  • %APPDATA%\WinRAR\Themes\Medieval_48x48\RARSmall.bmp
  • %APPDATA%\WinRAR\Themes\WinRAR_JOM2-48x48\RarSmall.bmp
  • %APPDATA%\WinRAR\Themes\MaRado_48x48\RarSmall.bmp
  • %APPDATA%\WinRAR\Themes\WinRAR_Orbital_48x48\RarSmall.bmp
  • %APPDATA%\WinRAR\Themes\WinRAR_Smile_d_48x48\RarSmall.bmp
  • %APPDATA%\WinRAR\Themes\WinRAR_OS_X_48x48\RarSmall.bmp
  • %APPDATA%\WinRAR\Themes\WinRAR_Classic_48x36\RARSmall.bmp
  • %APPDATA%\WinRAR\Themes\Windows8an\Toolbar\Protect.bmp
  • %APPDATA%\WinRAR\Themes\WinRAR_Vista_Mx_48x48\ToolBar\Protect.bmp
  • %APPDATA%\WinRAR\Themes\WinRAR_for_Vista_48x\Toolbar\Protect.bmp
  • %APPDATA%\WinRAR\Themes\Medieval_48x48\Toolbar\Protect.bmp
  • %APPDATA%\WinRAR\Themes\WinRAR_Crystal_Clear_48x48\Toolbar\Protect.bmp
  • %APPDATA%\WinRAR\Themes\WinRAR_JOM2-48x48\Toolbar\Protect.bmp
  • %APPDATA%\WinRAR\Themes\WinRAR_OS_X_48x48\Toolbar\Protect.bmp
  • %APPDATA%\WinRAR\Themes\WinRAR_Orbital_48x48\FolderUp.bmp
  • %APPDATA%\WinRAR\Themes\WinRAR_Crystal_Clear_48x48\Toolbar\Info.bmp
  • %APPDATA%\WinRAR\Themes\Windows8an\Toolbar\ExtractTo.bmp
  • %APPDATA%\WinRAR\Themes\Medieval_48x48\Toolbar\ExtractTo.bmp
  • %APPDATA%\WinRAR\Themes\WinRAR_Crystal_Clear_48x48\Toolbar\ExtractTo.bmp
  • %APPDATA%\WinRAR\Themes\MaRado_48x48\Toolbar\ExtractTo.bmp
  • %APPDATA%\WinRAR\Themes\WinRAR_JOM2-48x48\Toolbar\ExtractTo.bmp
  • %APPDATA%\WinRAR\Themes\WinRAR_Orbital_48x48\Toolbar\ExtractTo.bmp
  • %APPDATA%\WinRAR\Themes\WinRAR_Smile_d_48x48\Toolbar\ExtractTo.bmp
  • %APPDATA%\WinRAR\Themes\WinRAR_OS_X_48x48\Toolbar\ExtractTo.bmp
  • %APPDATA%\WinRAR\Themes\WinRAR_Classic_48x36\Toolbar\ExtractTo.bmp
  • %APPDATA%\WinRAR\Themes\Windows8an\Toolbar\Extract.bmp
  • %APPDATA%\WinRAR\Themes\WinRAR_Vista_Mx_48x48\ToolBar\Extract.bmp
  • %APPDATA%\WinRAR\Themes\WinRAR_for_Vista_48x\Toolbar\Extract.bmp
  • %APPDATA%\WinRAR\Themes\Medieval_48x48\Toolbar\Extract.bmp
  • %APPDATA%\WinRAR\Themes\WinRAR_for_Vista_48x\Toolbar\ExtractTo.bmp
  • %APPDATA%\WinRAR\Themes\WinRAR_Crystal_Clear_48x48\Toolbar\Extract.bmp
  • %APPDATA%\WinRAR\Themes\MaRado_48x48\Toolbar\Extract.bmp
  • %APPDATA%\WinRAR\Themes\WinRAR_Orbital_48x48\Toolbar\Extract.bmp
  • %APPDATA%\WinRAR\Themes\WinRAR_Smile_d_48x48\Toolbar\Extract.bmp
  • %APPDATA%\WinRAR\Themes\WinRAR_OS_X_48x48\Toolbar\Extract.bmp
  • %APPDATA%\WinRAR\Themes\WinRAR_Classic_48x36\Toolbar\Extract.bmp
  • %APPDATA%\WinRAR\Themes\Windows8an\Toolbar\Exit.bmp
  • %APPDATA%\WinRAR\Themes\WinRAR_Vista_Mx_48x48\ToolBar\Exit.bmp
  • %APPDATA%\WinRAR\Themes\WinRAR_for_Vista_48x\Toolbar\Exit.bmp
  • %APPDATA%\WinRAR\Themes\Medieval_48x48\Toolbar\Exit.bmp
  • %APPDATA%\WinRAR\Themes\WinRAR_Crystal_Clear_48x48\Toolbar\Exit.bmp
  • %APPDATA%\WinRAR\Themes\WinRAR_JOM2-48x48\Toolbar\Exit.bmp
  • %APPDATA%\WinRAR\Themes\MaRado_48x48\Toolbar\Exit.bmp
  • %APPDATA%\WinRAR\Themes\WinRAR_JOM2-48x48\Toolbar\Extract.bmp
  • %APPDATA%\WinRAR\Themes\WinRAR_Vista_Mx_48x48\ToolBar\Repair.bmp
  • %APPDATA%\WinRAR\Themes\MaRado_48x48\Toolbar\Info.bmp
  • %APPDATA%\WinRAR\Themes\WinRAR_Classic_48x36\Toolbar\Find.bmp
  • %APPDATA%\WinRAR\Themes\WinRAR_Orbital_48x48\Toolbar\Info.bmp
  • %APPDATA%\WinRAR\Themes\WinRAR_Smile_d_48x48\Toolbar\Info.bmp
  • %APPDATA%\WinRAR\Themes\WinRAR_OS_X_48x48\Toolbar\Info.bmp
  • %APPDATA%\WinRAR\Themes\WinRAR_Classic_48x36\Toolbar\Info.bmp
  • %APPDATA%\WinRAR\Themes\MaRado_48x48\FolderUp1.bmp
  • %APPDATA%\WinRAR\Themes\WinRAR_Classic_48x36\FolderUp.bmp
  • %APPDATA%\WinRAR\Themes\Windows8an\FolderUp.bmp
  • %APPDATA%\WinRAR\Themes\WinRAR_Vista_Mx_48x48\FolderUp.bmp
  • %APPDATA%\WinRAR\Themes\WinRAR_for_Vista_48x\FolderUp.bmp
  • %APPDATA%\WinRAR\Themes\Medieval_48x48\FolderUp.bmp
  • %APPDATA%\WinRAR\Themes\WinRAR_Crystal_Clear_48x48\FolderUp.bmp
  • %APPDATA%\WinRAR\Themes\WinRAR_JOM2-48x48\FolderUp.bmp
  • %APPDATA%\WinRAR\Themes\WinRAR_JOM2-48x48\Toolbar\Info.bmp
  • %APPDATA%\WinRAR\Themes\MaRado_48x48\FolderUp.bmp
  • %APPDATA%\WinRAR\Themes\WinRAR_Smile_d_48x48\FolderUp.bmp
  • %APPDATA%\WinRAR\Themes\WinRAR_OS_X_48x48\FolderUp.bmp
  • %APPDATA%\WinRAR\Themes\Windows8an\Toolbar\Find.bmp
  • %APPDATA%\WinRAR\Themes\WinRAR_Vista_Mx_48x48\ToolBar\Find.bmp
  • %APPDATA%\WinRAR\Themes\WinRAR_for_Vista_48x\Toolbar\Find.bmp
  • %APPDATA%\WinRAR\Themes\Medieval_48x48\Toolbar\Find.bmp
  • %APPDATA%\WinRAR\Themes\WinRAR_Crystal_Clear_48x48\Toolbar\Find.bmp
  • %APPDATA%\WinRAR\Themes\WinRAR_JOM2-48x48\Toolbar\Find.bmp
  • %APPDATA%\WinRAR\Themes\MaRado_48x48\Toolbar\Find.bmp
  • %APPDATA%\WinRAR\Themes\WinRAR_Orbital_48x48\Toolbar\Find.bmp
  • %APPDATA%\WinRAR\Themes\WinRAR_Smile_d_48x48\Toolbar\Find.bmp
  • %APPDATA%\WinRAR\Themes\WinRAR_OS_X_48x48\Toolbar\Find.bmp
  • %APPDATA%\WinRAR\Themes\WinRAR_Vista_Mx_48x48\ToolBar\ExtractTo.bmp
  • %APPDATA%\WinRAR\Themes\WinRAR_Vista_Mx_48x48\DragNo.cur
Sets the 'hidden' attribute to the following files:
  • %APPDATA%\WinRAR\Themes\WinRAR_OS_X_48x48\winrar_theme_description.txt
  • %APPDATA%\WinRAR\Themes\WinRAR_Vista_Mx_48x48\WinRAR_Theme_Description.txt
Deletes the following files:
  • %TEMP%\aut1.tmp
  • %TEMP%\aut2.tmp
  • %TEMP%\aut3.tmp
  • %TEMP%\x64.exe
  • %TEMP%\x86.exe
  • %TEMP%\Themes.exe
Miscellaneous:
Searches for the following windows:
  • ClassName: 'EDIT' WindowName: ''
Creates and executes the following:
  • '%TEMP%\x86.exe' /S
  • '%ProgramFiles%\WinRAR\Uninstall.exe' /setup
  • '%TEMP%\Themes.exe'

Curing recommendations

  1. If the operating system (OS) can be loaded (either normally or in safe mode), download Dr.Web Security Space and run a full scan of your computer and removable media you use. More about Dr.Web Security Space.
  2. If you cannot boot the OS, change the BIOS settings to boot your system from a CD or USB drive. Download the image of the emergency system repair disk Dr.Web® LiveDisk , mount it on a USB drive or burn it to a CD/DVD. After booting up with this media, run a full scan and cure all the detected threats.
Download Dr.Web

Download by serial number

Use Dr.Web Anti-virus for macOS to run a full scan of your Mac.

After booting up, run a full scan of all disk partitions with Dr.Web Anti-virus for Linux.

Download Dr.Web

Download by serial number

  1. If the mobile device is operating normally, download and install Dr.Web for Android. Run a full system scan and follow recommendations to neutralize the detected threats.
  2. If the mobile device has been locked by Android.Locker ransomware (the message on the screen tells you that you have broken some law or demands a set ransom amount; or you will see some other announcement that prevents you from using the handheld normally), do the following:
    • Load your smartphone or tablet in the safe mode (depending on the operating system version and specifications of the particular mobile device involved, this procedure can be performed in various ways; seek clarification from the user guide that was shipped with the device, or contact its manufacturer);
    • Once you have activated safe mode, install the Dr.Web for Android onto the infected handheld and run a full scan of the system; follow the steps recommended for neutralizing the threats that have been detected;
    • Switch off your device and turn it on as normal.

Find out more about Dr.Web for Android