Trojan.Siggen9.55970

Technical Information

To ensure autorun and distribution

Sets the following service settings

[<HKLM>\System\CurrentControlSet\Services\ZentimoService] 'Start' = '00000002'
[<HKLM>\System\CurrentControlSet\Services\ZentimoService] 'ImagePath' = '"%ProgramFiles(x86)%\Zentimo\ZentimoService.exe"'

Creates the following services

'ZentimoService' "%ProgramFiles(x86)%\Zentimo\ZentimoService.exe"
'ZentimoService' %ProgramFiles(x86)%\Zentimo\ZentimoService.exe

Malicious functions

Executes the following

'<SYSTEM32>\taskkill.exe' /F /IM Zentimo.exe

Modifies file system

Creates the following files

%TEMP%\cf3d.tmp\cf4e.bat
%ProgramFiles(x86)%\zentimo\skins\win10 dark\is-4evsd.tmp
%ProgramFiles(x86)%\zentimo\skins\win10 dark\is-1t287.tmp
%ProgramFiles(x86)%\zentimo\skins\win10 dark\is-5e5kj.tmp
%ProgramFiles(x86)%\zentimo\skins\win10 dark\is-5ik8k.tmp
%ProgramFiles(x86)%\zentimo\skins\win10 dark\is-6hps2.tmp
%ProgramFiles(x86)%\zentimo\skins\win10 dark\is-chc9h.tmp
%ProgramFiles(x86)%\zentimo\skins\win10 dark\is-mm0a2.tmp
%ProgramFiles(x86)%\zentimo\skins\win10 dark\is-fk3v1.tmp
%ProgramFiles(x86)%\zentimo\skins\win10 light\is-17s32.tmp
%ProgramFiles(x86)%\zentimo\skins\win10 light\is-mvpvf.tmp
%ProgramFiles(x86)%\zentimo\skins\win10 light\is-9hhmo.tmp
%ProgramFiles(x86)%\zentimo\skins\win10 light\is-2trpe.tmp
%ProgramFiles(x86)%\zentimo\skins\win10 light\is-mjne4.tmp
%ProgramFiles(x86)%\zentimo\skins\win8modernui\is-59npp.tmp
%ProgramFiles(x86)%\zentimo\skins\win8modernui\is-afg9c.tmp
%ProgramFiles(x86)%\zentimo\skins\win8modernui\is-f041k.tmp
%ProgramFiles(x86)%\zentimo\skins\win8modernui\is-28de0.tmp
%ProgramFiles(x86)%\zentimo\skins\win8modernui\is-m5gif.tmp
%ProgramFiles(x86)%\zentimo\skins\win8modernui\is-sttm0.tmp
%ProgramFiles(x86)%\zentimo\skins\win8modernui\is-1slu5.tmp
%ProgramFiles(x86)%\zentimo\skins\win8modernui\is-p4aa8.tmp
%ProgramFiles(x86)%\zentimo\skins\win8modernui\is-0mq4g.tmp
%ProgramFiles(x86)%\zentimo\skins\win8modernui\is-q41sk.tmp
%ProgramFiles(x86)%\zentimo\skins\win8modernui\is-4bbm9.tmp
%ProgramFiles(x86)%\zentimo\skins\win8modernui\is-bp6j9.tmp
%ProgramFiles(x86)%\zentimo\skins\win8modernui\is-qv2vh.tmp
%ProgramFiles(x86)%\zentimo\skins\win8modernui\is-trjek.tmp
%ProgramFiles(x86)%\zentimo\skins\win8modernui\is-jtm7g.tmp
%ProgramFiles(x86)%\zentimo\skins\win8modernui\is-jo35a.tmp
%ProgramFiles(x86)%\zentimo\skins\win8modernui\is-i3i4n.tmp
%ProgramFiles(x86)%\zentimo\skins\win8modernui\is-vn5c8.tmp
%ProgramFiles(x86)%\zentimo\skins\win8modernui\is-jvjr0.tmp
%ProgramFiles(x86)%\zentimo\skins\win10 dark\is-mbkgg.tmp
%ProgramFiles(x86)%\zentimo\skins\win10 dark\is-3kkri.tmp
%ProgramFiles(x86)%\zentimo\skins\win10 dark\is-cs4fq.tmp
%ProgramFiles(x86)%\zentimo\skins\classic\is-3a7il.tmp
%ProgramFiles(x86)%\zentimo\skins\classic\is-6s6hl.tmp
%ProgramFiles(x86)%\zentimo\skins\classic\is-fuo70.tmp
%ProgramFiles(x86)%\zentimo\skins\classic\is-6paku.tmp
%ProgramFiles(x86)%\zentimo\skins\classic\is-pehau.tmp
%ProgramFiles(x86)%\zentimo\skins\win10 dark\is-o2fa2.tmp
%ProgramFiles(x86)%\zentimo\skins\win10 dark\is-pgrs0.tmp
%ProgramFiles(x86)%\zentimo\skins\win10 dark\is-rck4v.tmp
%ProgramFiles(x86)%\zentimo\skins\win10 dark\is-6hku3.tmp
%ProgramFiles(x86)%\zentimo\skins\win10 dark\is-v25ot.tmp
%ProgramFiles(x86)%\zentimo\skins\win10 dark\is-rf2h9.tmp
%ProgramFiles(x86)%\zentimo\skins\win10 dark\is-hd56b.tmp
%ProgramFiles(x86)%\zentimo\skins\win10 dark\is-8qont.tmp
%ProgramFiles(x86)%\zentimo\skins\win10 dark\is-131ov.tmp
%ProgramFiles(x86)%\zentimo\skins\win10 dark\is-eirci.tmp
%ProgramFiles(x86)%\zentimo\skins\win10 dark\is-lo1lp.tmp
%ProgramFiles(x86)%\zentimo\skins\win10 dark\is-dg884.tmp
%ProgramFiles(x86)%\zentimo\skins\win10 dark\is-5aeks.tmp
%ProgramFiles(x86)%\zentimo\skins\win10 dark\is-duko8.tmp
%ProgramFiles(x86)%\zentimo\skins\win10 dark\is-jvioi.tmp
%ProgramFiles(x86)%\zentimo\skins\win10 dark\is-95g42.tmp
%ProgramFiles(x86)%\zentimo\skins\win10 dark\is-cr0o1.tmp
%ProgramFiles(x86)%\zentimo\skins\win10 dark\is-la9ns.tmp
%ProgramFiles(x86)%\zentimo\skins\win10 dark\is-csllt.tmp
%ProgramFiles(x86)%\zentimo\skins\win10 dark\is-f65um.tmp
%ProgramFiles(x86)%\zentimo\skins\win10 dark\is-kif06.tmp
%ProgramFiles(x86)%\zentimo\skins\win10 dark\is-7pvrm.tmp
%ProgramFiles(x86)%\zentimo\skins\win10 dark\is-2ri2e.tmp
%ProgramFiles(x86)%\zentimo\skins\win10 dark\is-hde42.tmp
%ProgramFiles(x86)%\zentimo\skins\win10 dark\is-t8lnk.tmp
%ProgramFiles(x86)%\zentimo\skins\win10 dark\is-nckp0.tmp
%ProgramFiles(x86)%\zentimo\skins\win10 dark\is-nu7ra.tmp
%ProgramFiles(x86)%\zentimo\languages\is-mljdp.tmp
%PROGRAMDATA%\zentimoservice\zentimoservice.log.txt
%ProgramFiles(x86)%\zentimo\skins\win8modernui\is-7rms4.tmp
%ProgramFiles(x86)%\zentimo\languages\is-3fijc.tmp
%ProgramFiles(x86)%\zentimo\languages\is-vuotg.tmp
%ProgramFiles(x86)%\zentimo\languages\is-e34bf.tmp
%ProgramFiles(x86)%\zentimo\languages\is-em0pi.tmp
%ProgramFiles(x86)%\zentimo\languages\is-2m799.tmp
%ProgramFiles(x86)%\zentimo\languages\is-hh965.tmp
%ProgramFiles(x86)%\zentimo\languages\is-5h1tp.tmp
%ProgramFiles(x86)%\zentimo\languages\is-4pho5.tmp
%ProgramFiles(x86)%\zentimo\languages\is-60dh6.tmp
%ProgramFiles(x86)%\zentimo\languages\is-qdvoj.tmp
%ProgramFiles(x86)%\zentimo\languages\is-ts7gu.tmp
%ProgramFiles(x86)%\zentimo\is-lilas.tmp
%ProgramFiles(x86)%\zentimo\is-nn5dp.tmp
%ProgramFiles(x86)%\zentimo\is-ssl2h.tmp
%ProgramFiles(x86)%\zentimo\is-4h79l.tmp
%ProgramFiles(x86)%\zentimo\is-6su9f.tmp
%ProgramFiles(x86)%\zentimo\is-rk4lq.tmp
%ProgramFiles(x86)%\zentimo\unins000.dat
%APPDATA%\microsoft\internet explorer\quick launch\zentimo.lnk
%HOMEPATH%\desktop\zentimo.lnk
%APPDATA%\microsoft\windows\start menu\programs\zentimo\uninstall zentimo.lnk
%APPDATA%\microsoft\windows\start menu\programs\zentimo\zentimo on the web.url
%APPDATA%\microsoft\windows\start menu\programs\zentimo\readme\what's new.lnk
%APPDATA%\microsoft\windows\start menu\programs\zentimo\readme\how to order.lnk
%APPDATA%\microsoft\windows\start menu\programs\zentimo\readme\readme.lnk
%APPDATA%\microsoft\windows\start menu\programs\zentimo\zentimo help.url
%APPDATA%\microsoft\windows\start menu\programs\zentimo\zentimo.lnk
%ProgramFiles(x86)%\zentimo\is-gnck2.tmp
%ProgramFiles(x86)%\zentimo\is-6kefn.tmp
%ProgramFiles(x86)%\zentimo\is-55g0n.tmp
%ProgramFiles(x86)%\zentimo\is-4cdlo.tmp
%ProgramFiles(x86)%\zentimo\skins\win8modernui\is-n6uuh.tmp
%ProgramFiles(x86)%\zentimo\skins\classic\is-jhvdg.tmp
%ProgramFiles(x86)%\zentimo\languages\is-5lj98.tmp
%ProgramFiles(x86)%\zentimo\languages\is-lakks.tmp
%ProgramFiles(x86)%\zentimo\skins\win8modernui\is-2qj68.tmp
%ProgramFiles(x86)%\zentimo\skins\win8modernui\is-f7085.tmp
%ProgramFiles(x86)%\zentimo\skins\win8modernui\is-bm6tv.tmp
%ProgramFiles(x86)%\zentimo\skins\win8modernui\is-8cb87.tmp
%ProgramFiles(x86)%\zentimo\skins\win8modernui\is-jindp.tmp
%ProgramFiles(x86)%\zentimo\skins\win8modernui\is-33d4p.tmp
%ProgramFiles(x86)%\zentimo\skins\win8modernui\is-edu01.tmp
%ProgramFiles(x86)%\zentimo\skins\win8modernui\is-c6fhh.tmp
%ProgramFiles(x86)%\zentimo\skins\win8modernui\is-l61na.tmp
%ProgramFiles(x86)%\zentimo\skins\win8modernui\is-ji8rf.tmp
%ProgramFiles(x86)%\zentimo\skins\win8modernui\is-a6hkf.tmp
%ProgramFiles(x86)%\zentimo\languages\is-2bv6p.tmp
%ProgramFiles(x86)%\zentimo\languages\is-94jcj.tmp
%ProgramFiles(x86)%\zentimo\languages\is-f5hsv.tmp
%ProgramFiles(x86)%\zentimo\languages\is-32if2.tmp
%ProgramFiles(x86)%\zentimo\languages\is-vl5ao.tmp
%ProgramFiles(x86)%\zentimo\languages\is-h2rre.tmp
%ProgramFiles(x86)%\zentimo\languages\is-bp3dr.tmp
%ProgramFiles(x86)%\zentimo\languages\is-cn3qb.tmp
%ProgramFiles(x86)%\zentimo\languages\is-7ai6f.tmp
%ProgramFiles(x86)%\zentimo\languages\is-255mb.tmp
%ProgramFiles(x86)%\zentimo\languages\is-1qf56.tmp
%ProgramFiles(x86)%\zentimo\languages\is-52lm0.tmp
%ProgramFiles(x86)%\zentimo\skins\win8modernui\is-a948s.tmp
%ProgramFiles(x86)%\zentimo\languages\is-ts9gk.tmp
%ProgramFiles(x86)%\zentimo\languages\is-ro1pl.tmp
%ProgramFiles(x86)%\zentimo\languages\is-vld7g.tmp
%ProgramFiles(x86)%\zentimo\languages\is-bt6lg.tmp
%ProgramFiles(x86)%\zentimo\languages\is-phik5.tmp
%ProgramFiles(x86)%\zentimo\languages\is-lri7h.tmp
%ProgramFiles(x86)%\zentimo\languages\is-n9de2.tmp
%ProgramFiles(x86)%\zentimo\languages\is-nbf0k.tmp
%ProgramFiles(x86)%\zentimo\languages\is-1f0rc.tmp
%ProgramFiles(x86)%\zentimo\skins\classic\is-agqgg.tmp
%ProgramFiles(x86)%\zentimo\skins\black contrast\is-1hmre.tmp
%ProgramFiles(x86)%\zentimo\deviceimages\is-co61i.tmp
%ProgramFiles(x86)%\zentimo\deviceimages\is-50cov.tmp
%ProgramFiles(x86)%\zentimo\deviceimages\is-80kr9.tmp
%ProgramFiles(x86)%\zentimo\deviceimages\is-fb592.tmp
%ProgramFiles(x86)%\zentimo\deviceimages\is-ro7p7.tmp
%ProgramFiles(x86)%\zentimo\deviceimages\is-g7e2b.tmp
%ProgramFiles(x86)%\zentimo\deviceimages\is-som95.tmp
%ProgramFiles(x86)%\zentimo\deviceimages\is-gaj9d.tmp
%ProgramFiles(x86)%\zentimo\deviceimages\is-gkg1v.tmp
%ProgramFiles(x86)%\zentimo\deviceimages\is-1n2h3.tmp
%ProgramFiles(x86)%\zentimo\deviceimages\is-vlk1v.tmp
%ProgramFiles(x86)%\zentimo\deviceimages\is-ejtgh.tmp
%ProgramFiles(x86)%\zentimo\deviceimages\is-79dsi.tmp
%ProgramFiles(x86)%\zentimo\deviceimages\is-0md90.tmp
%ProgramFiles(x86)%\zentimo\deviceimages\is-nmlog.tmp
%ProgramFiles(x86)%\zentimo\deviceimages\is-je1s5.tmp
%ProgramFiles(x86)%\zentimo\deviceimages\is-5fetn.tmp
%ProgramFiles(x86)%\zentimo\deviceimages\is-d9mek.tmp
%ProgramFiles(x86)%\zentimo\deviceimages\is-86qr1.tmp
%ProgramFiles(x86)%\zentimo\deviceimages\is-3fn45.tmp
%ProgramFiles(x86)%\zentimo\deviceimages\is-uhovl.tmp
%ProgramFiles(x86)%\zentimo\deviceimages\is-6tulp.tmp
%ProgramFiles(x86)%\zentimo\deviceimages\is-2av92.tmp
%ProgramFiles(x86)%\zentimo\deviceimages\is-qm3bv.tmp
%ProgramFiles(x86)%\zentimo\deviceimages\is-g0eap.tmp
%ProgramFiles(x86)%\zentimo\deviceimages\is-e2ddl.tmp
%ProgramFiles(x86)%\zentimo\deviceimages\is-m9dn8.tmp
%ProgramFiles(x86)%\zentimo\deviceimages\is-cg5e7.tmp
%ProgramFiles(x86)%\zentimo\deviceimages\is-f2ie2.tmp
%ProgramFiles(x86)%\zentimo\deviceimages\is-su0jf.tmp
%ProgramFiles(x86)%\zentimo\deviceimages\is-ocahq.tmp
%ProgramFiles(x86)%\zentimo\deviceimages\is-8dlmr.tmp
%ProgramFiles(x86)%\zentimo\deviceimages\is-8prln.tmp
%ProgramFiles(x86)%\zentimo\deviceimages\is-9cfpj.tmp
%ProgramFiles(x86)%\zentimo\deviceimages\is-8pml7.tmp
%TEMP%\cf3d.tmp\zentimosetuppro_2-3-3.exe
%TEMP%\cf3d.tmp\64.reg
%TEMP%\cf3d.tmp\x64\zentimo.exe
%TEMP%\is-r9kic.tmp\zentimosetuppro_2-3-3.tmp
%TEMP%\is-6ohm1.tmp\_isetup\_setup64.tmp
%ProgramFiles(x86)%\zentimo\is-3snkk.tmp
%ProgramFiles(x86)%\zentimo\deviceimages\is-cg6fq.tmp
%ProgramFiles(x86)%\zentimo\deviceimages\is-1ke31.tmp
%ProgramFiles(x86)%\zentimo\deviceimages\is-qber9.tmp
%ProgramFiles(x86)%\zentimo\deviceimages\is-o80ds.tmp
%ProgramFiles(x86)%\zentimo\deviceimages\is-k7591.tmp
%ProgramFiles(x86)%\zentimo\deviceimages\is-fr685.tmp
%ProgramFiles(x86)%\zentimo\deviceimages\is-snunu.tmp
%ProgramFiles(x86)%\zentimo\deviceimages\is-mv3c2.tmp
%ProgramFiles(x86)%\zentimo\deviceimages\is-u4lb1.tmp
%ProgramFiles(x86)%\zentimo\deviceimages\is-fbt93.tmp
%ProgramFiles(x86)%\zentimo\deviceimages\is-dkjfn.tmp
%ProgramFiles(x86)%\zentimo\deviceimages\is-4vmpl.tmp
%ProgramFiles(x86)%\zentimo\deviceimages\is-3hopd.tmp
%ProgramFiles(x86)%\zentimo\deviceimages\is-320rd.tmp
%ProgramFiles(x86)%\zentimo\deviceimages\is-oaf6e.tmp
%ProgramFiles(x86)%\zentimo\deviceimages\is-e5133.tmp
%ProgramFiles(x86)%\zentimo\deviceimages\is-g1t3s.tmp
%ProgramFiles(x86)%\zentimo\deviceimages\is-fmv5g.tmp
%ProgramFiles(x86)%\zentimo\deviceimages\is-bvvjm.tmp
%ProgramFiles(x86)%\zentimo\deviceimages\is-dt14a.tmp
%ProgramFiles(x86)%\zentimo\deviceimages\is-mcfma.tmp
%ProgramFiles(x86)%\zentimo\deviceimages\is-ac8ac.tmp
%ProgramFiles(x86)%\zentimo\deviceimages\is-vcjqk.tmp
%ProgramFiles(x86)%\zentimo\deviceimages\is-dibjh.tmp
%ProgramFiles(x86)%\zentimo\deviceimages\is-gej1v.tmp
%ProgramFiles(x86)%\zentimo\deviceimages\is-rjke7.tmp
%ProgramFiles(x86)%\zentimo\skins\black contrast\is-ka7v6.tmp
%ProgramFiles(x86)%\zentimo\skins\classic\is-81odg.tmp
%ProgramFiles(x86)%\zentimo\deviceimages\is-hmceu.tmp
%ProgramFiles(x86)%\zentimo\skins\black contrast\is-70lmm.tmp
%ProgramFiles(x86)%\zentimo\skins\black contrast\is-99ht5.tmp
%ProgramFiles(x86)%\zentimo\skins\black velvet\is-rigkl.tmp
%ProgramFiles(x86)%\zentimo\skins\black velvet\is-mdauf.tmp
%ProgramFiles(x86)%\zentimo\skins\black velvet\is-ilpko.tmp
%ProgramFiles(x86)%\zentimo\skins\black velvet\is-ip2ug.tmp
%ProgramFiles(x86)%\zentimo\skins\black velvet\is-f8oig.tmp
%ProgramFiles(x86)%\zentimo\skins\classic\is-7ug6k.tmp
%ProgramFiles(x86)%\zentimo\skins\classic\is-m87sh.tmp
%ProgramFiles(x86)%\zentimo\skins\classic\is-33e0d.tmp
%ProgramFiles(x86)%\zentimo\skins\classic\is-7u32t.tmp
%ProgramFiles(x86)%\zentimo\skins\classic\is-go4rl.tmp
%ProgramFiles(x86)%\zentimo\skins\classic\is-omfkp.tmp
%ProgramFiles(x86)%\zentimo\skins\classic\is-uvn4h.tmp
%ProgramFiles(x86)%\zentimo\skins\classic\is-uvsek.tmp
%ProgramFiles(x86)%\zentimo\skins\classic\is-gtu9b.tmp
%ProgramFiles(x86)%\zentimo\skins\classic\is-nmjo6.tmp
%ProgramFiles(x86)%\zentimo\skins\classic\is-putps.tmp
%ProgramFiles(x86)%\zentimo\skins\classic\is-509qp.tmp
%ProgramFiles(x86)%\zentimo\skins\classic\is-4gqt7.tmp
%ProgramFiles(x86)%\zentimo\skins\classic\is-ekdno.tmp
%ProgramFiles(x86)%\zentimo\skins\classic\is-v4vpa.tmp
%ProgramFiles(x86)%\zentimo\skins\classic\is-bo3c2.tmp
%ProgramFiles(x86)%\zentimo\skins\classic\is-0ashl.tmp
%ProgramFiles(x86)%\zentimo\skins\classic\is-802fm.tmp
%ProgramFiles(x86)%\zentimo\skins\classic\is-9d7v3.tmp
%ProgramFiles(x86)%\zentimo\skins\classic\is-lmcek.tmp
%ProgramFiles(x86)%\zentimo\skins\classic\is-ol0lj.tmp
%ProgramFiles(x86)%\zentimo\skins\classic\is-un6ve.tmp
%ProgramFiles(x86)%\zentimo\skins\classic\is-ihrie.tmp
%ProgramFiles(x86)%\zentimo\skins\classic\is-4f4gm.tmp
%ProgramFiles(x86)%\zentimo\deviceimages\is-hgd4t.tmp
%ProgramFiles(x86)%\zentimo\skins\classic\is-s0n8v.tmp
%ProgramFiles(x86)%\zentimo\skins\black contrast\is-2q3kl.tmp
%ProgramFiles(x86)%\zentimo\skins\black contrast\is-cvauh.tmp
%ProgramFiles(x86)%\zentimo\deviceimages\is-5c83a.tmp
%ProgramFiles(x86)%\zentimo\deviceimages\is-arlke.tmp
%ProgramFiles(x86)%\zentimo\deviceimages\is-o6i2d.tmp
%ProgramFiles(x86)%\zentimo\deviceimages\is-9i41d.tmp
%ProgramFiles(x86)%\zentimo\skins\black contrast\is-qmoqp.tmp
%ProgramFiles(x86)%\zentimo\skins\black contrast\is-hafgq.tmp
%ProgramFiles(x86)%\zentimo\skins\black contrast\is-0qij9.tmp
%ProgramFiles(x86)%\zentimo\skins\black contrast\is-gb24s.tmp
%ProgramFiles(x86)%\zentimo\skins\black contrast\is-1aon1.tmp
%ProgramFiles(x86)%\zentimo\skins\black contrast\is-edtl1.tmp
%ProgramFiles(x86)%\zentimo\skins\black contrast\is-k02ra.tmp
%ProgramFiles(x86)%\zentimo\skins\black contrast\is-4v3c1.tmp
%ProgramFiles(x86)%\zentimo\skins\black contrast\is-f8elp.tmp
%ProgramFiles(x86)%\zentimo\skins\black contrast\is-gsqlq.tmp
%ProgramFiles(x86)%\zentimo\skins\black contrast\is-mm028.tmp
%ProgramFiles(x86)%\zentimo\skins\black contrast\is-18htk.tmp
%ProgramFiles(x86)%\zentimo\skins\black contrast\is-2i5oq.tmp
%ProgramFiles(x86)%\zentimo\skins\black contrast\is-lfepq.tmp
%ProgramFiles(x86)%\zentimo\skins\black contrast\is-i58hn.tmp
%ProgramFiles(x86)%\zentimo\skins\black contrast\is-pv48v.tmp
%ProgramFiles(x86)%\zentimo\skins\black contrast\is-8de0l.tmp
%ProgramFiles(x86)%\zentimo\skins\black contrast\is-8g8pr.tmp
%ProgramFiles(x86)%\zentimo\skins\black contrast\is-9gev4.tmp
%ProgramFiles(x86)%\zentimo\deviceimages\is-ns3v5.tmp
%ProgramFiles(x86)%\zentimo\skins\black contrast\is-ahc6k.tmp
%ProgramFiles(x86)%\zentimo\skins\black contrast\is-pbnvo.tmp
%ProgramFiles(x86)%\zentimo\skins\black contrast\is-93p44.tmp
%ProgramFiles(x86)%\zentimo\skins\black contrast\is-9cr5r.tmp
%ProgramFiles(x86)%\zentimo\skins\black contrast\is-gnrke.tmp
%ProgramFiles(x86)%\zentimo\skins\black contrast\is-8oejq.tmp
%ProgramFiles(x86)%\zentimo\skins\black contrast\is-nslru.tmp
%ProgramFiles(x86)%\zentimo\skins\black contrast\is-b0afi.tmp
%ProgramFiles(x86)%\zentimo\zentimo.exe

Deletes the following files

%TEMP%\is-6ohm1.tmp\_isetup\_setup64.tmp
%TEMP%\is-r9kic.tmp\zentimosetuppro_2-3-3.tmp
%TEMP%\cf3d.tmp\zentimosetuppro_2-3-3.exe
%TEMP%\cf3d.tmp\64.reg
%TEMP%\cf3d.tmp\x64\zentimo.exe
%TEMP%\cf3d.tmp\cf4e.bat

Moves the following files

from %ProgramFiles(x86)%\zentimo\is-3snkk.tmp to %ProgramFiles(x86)%\zentimo\unins000.exe
from %ProgramFiles(x86)%\zentimo\skins\win10 dark\is-nu7ra.tmp to %ProgramFiles(x86)%\zentimo\skins\win10 dark\reg_key_active.png
from %ProgramFiles(x86)%\zentimo\skins\win10 dark\is-cs4fq.tmp to %ProgramFiles(x86)%\zentimo\skins\win10 dark\reg_key_passive.png
from %ProgramFiles(x86)%\zentimo\skins\win10 dark\is-3kkri.tmp to %ProgramFiles(x86)%\zentimo\skins\win10 dark\return_drive_active.png
from %ProgramFiles(x86)%\zentimo\skins\win10 dark\is-mbkgg.tmp to %ProgramFiles(x86)%\zentimo\skins\win10 dark\return_drive_passive.png
from %ProgramFiles(x86)%\zentimo\skins\win10 dark\is-4evsd.tmp to %ProgramFiles(x86)%\zentimo\skins\win10 dark\stop_all_active.png
from %ProgramFiles(x86)%\zentimo\skins\win10 dark\is-1t287.tmp to %ProgramFiles(x86)%\zentimo\skins\win10 dark\stop_all_interrupt_active.png
from %ProgramFiles(x86)%\zentimo\skins\win10 dark\is-5e5kj.tmp to %ProgramFiles(x86)%\zentimo\skins\win10 dark\stop_all_interrupt_passive.png
from %ProgramFiles(x86)%\zentimo\skins\win10 dark\is-5ik8k.tmp to %ProgramFiles(x86)%\zentimo\skins\win10 dark\stop_all_passive.png
from %ProgramFiles(x86)%\zentimo\skins\win10 dark\is-6hps2.tmp to %ProgramFiles(x86)%\zentimo\skins\win10 dark\update_hardware_active.png
from %ProgramFiles(x86)%\zentimo\skins\win10 dark\is-chc9h.tmp to %ProgramFiles(x86)%\zentimo\skins\win10 dark\update_hardware_active_dark.png
from %ProgramFiles(x86)%\zentimo\skins\win10 dark\is-mm0a2.tmp to %ProgramFiles(x86)%\zentimo\skins\win10 dark\update_hardware_passive.png
from %ProgramFiles(x86)%\zentimo\skins\win10 dark\is-fk3v1.tmp to %ProgramFiles(x86)%\zentimo\skins\win10 dark\warning_letter_sign.png
from %ProgramFiles(x86)%\zentimo\skins\win10 dark\is-duko8.tmp to %ProgramFiles(x86)%\zentimo\skins\win10 dark\quick_launch_active.png
from %ProgramFiles(x86)%\zentimo\skins\win10 dark\is-5aeks.tmp to %ProgramFiles(x86)%\zentimo\skins\win10 dark\quick_launch_passive.png
from %ProgramFiles(x86)%\zentimo\skins\win10 light\is-17s32.tmp to %ProgramFiles(x86)%\zentimo\skins\win10 light\colorscheme.ini
from %ProgramFiles(x86)%\zentimo\skins\win10 light\is-2trpe.tmp to %ProgramFiles(x86)%\zentimo\skins\win10 light\reg_key_active.png
from %ProgramFiles(x86)%\zentimo\skins\win10 light\is-mjne4.tmp to %ProgramFiles(x86)%\zentimo\skins\win10 light\reg_key_passive.png
from %ProgramFiles(x86)%\zentimo\skins\win8modernui\is-59npp.tmp to %ProgramFiles(x86)%\zentimo\skins\win8modernui\browse_drive_active.png
from %ProgramFiles(x86)%\zentimo\skins\win8modernui\is-afg9c.tmp to %ProgramFiles(x86)%\zentimo\skins\win8modernui\browse_drive_passive.png
from %ProgramFiles(x86)%\zentimo\skins\win8modernui\is-f041k.tmp to %ProgramFiles(x86)%\zentimo\skins\win8modernui\close_balloon_active.png
from %ProgramFiles(x86)%\zentimo\skins\win8modernui\is-28de0.tmp to %ProgramFiles(x86)%\zentimo\skins\win8modernui\close_balloon_passive.png
from %ProgramFiles(x86)%\zentimo\skins\win8modernui\is-vn5c8.tmp to %ProgramFiles(x86)%\zentimo\skins\win8modernui\close_hidden_device_list_active.png
from %ProgramFiles(x86)%\zentimo\skins\win8modernui\is-i3i4n.tmp to %ProgramFiles(x86)%\zentimo\skins\win8modernui\close_hidden_device_list_passive.png
from %ProgramFiles(x86)%\zentimo\skins\win8modernui\is-jo35a.tmp to %ProgramFiles(x86)%\zentimo\skins\win8modernui\close_info_active.png
from %ProgramFiles(x86)%\zentimo\skins\win8modernui\is-jtm7g.tmp to %ProgramFiles(x86)%\zentimo\skins\win8modernui\close_info_passive.png
from %ProgramFiles(x86)%\zentimo\skins\win8modernui\is-trjek.tmp to %ProgramFiles(x86)%\zentimo\skins\win8modernui\close_menu_active.png
from %ProgramFiles(x86)%\zentimo\skins\win8modernui\is-qv2vh.tmp to %ProgramFiles(x86)%\zentimo\skins\win8modernui\close_menu_passive.png
from %ProgramFiles(x86)%\zentimo\skins\win10 light\is-mvpvf.tmp to %ProgramFiles(x86)%\zentimo\skins\win10 light\options_active.png
from %ProgramFiles(x86)%\zentimo\skins\win10 light\is-9hhmo.tmp to %ProgramFiles(x86)%\zentimo\skins\win10 light\options_passive.png
from %ProgramFiles(x86)%\zentimo\skins\win10 dark\is-jvioi.tmp to %ProgramFiles(x86)%\zentimo\skins\win10 dark\options_passive_orig.png
from %ProgramFiles(x86)%\zentimo\skins\win10 dark\is-95g42.tmp to %ProgramFiles(x86)%\zentimo\skins\win10 dark\options_passive1.png
from %ProgramFiles(x86)%\zentimo\skins\win10 dark\is-cr0o1.tmp to %ProgramFiles(x86)%\zentimo\skins\win10 dark\options_passive.png
from %ProgramFiles(x86)%\zentimo\skins\classic\is-agqgg.tmp to %ProgramFiles(x86)%\zentimo\skins\classic\stop_all_active.png
from %ProgramFiles(x86)%\zentimo\skins\classic\is-jhvdg.tmp to %ProgramFiles(x86)%\zentimo\skins\classic\stop_all_interrupt_active.png
from %ProgramFiles(x86)%\zentimo\skins\classic\is-3a7il.tmp to %ProgramFiles(x86)%\zentimo\skins\classic\stop_all_interrupt_passive.png
from %ProgramFiles(x86)%\zentimo\skins\classic\is-6s6hl.tmp to %ProgramFiles(x86)%\zentimo\skins\classic\stop_all_passive.png
from %ProgramFiles(x86)%\zentimo\skins\classic\is-fuo70.tmp to %ProgramFiles(x86)%\zentimo\skins\classic\update_hardware_active.png
from %ProgramFiles(x86)%\zentimo\skins\classic\is-6paku.tmp to %ProgramFiles(x86)%\zentimo\skins\classic\update_hardware_passive.png
from %ProgramFiles(x86)%\zentimo\skins\classic\is-pehau.tmp to %ProgramFiles(x86)%\zentimo\skins\classic\warning_letter_sign.png
from %ProgramFiles(x86)%\zentimo\skins\win10 dark\is-o2fa2.tmp to %ProgramFiles(x86)%\zentimo\skins\win10 dark\browse_drive_active.png
from %ProgramFiles(x86)%\zentimo\skins\win10 dark\is-pgrs0.tmp to %ProgramFiles(x86)%\zentimo\skins\win10 dark\browse_drive_passive.png
from %ProgramFiles(x86)%\zentimo\skins\win10 dark\is-rck4v.tmp to %ProgramFiles(x86)%\zentimo\skins\win10 dark\close_balloon_active.png
from %ProgramFiles(x86)%\zentimo\skins\win10 dark\is-6hku3.tmp to %ProgramFiles(x86)%\zentimo\skins\win10 dark\close_balloon_passive.png
from %ProgramFiles(x86)%\zentimo\skins\win10 dark\is-v25ot.tmp to %ProgramFiles(x86)%\zentimo\skins\win10 dark\close_hidden_device_list_active.png
from %ProgramFiles(x86)%\zentimo\skins\win10 dark\is-rf2h9.tmp to %ProgramFiles(x86)%\zentimo\skins\win10 dark\close_hidden_device_list_passive.png
from %ProgramFiles(x86)%\zentimo\skins\classic\is-s0n8v.tmp to %ProgramFiles(x86)%\zentimo\skins\classic\return_drive_passive.png
from %ProgramFiles(x86)%\zentimo\skins\win10 dark\is-hd56b.tmp to %ProgramFiles(x86)%\zentimo\skins\win10 dark\close_info_active.png
from %ProgramFiles(x86)%\zentimo\skins\win10 dark\is-131ov.tmp to %ProgramFiles(x86)%\zentimo\skins\win10 dark\close_menu_active.png
from %ProgramFiles(x86)%\zentimo\skins\win10 dark\is-eirci.tmp to %ProgramFiles(x86)%\zentimo\skins\win10 dark\close_menu_passive.png
from %ProgramFiles(x86)%\zentimo\skins\win10 dark\is-lo1lp.tmp to %ProgramFiles(x86)%\zentimo\skins\win10 dark\colorscheme.ini
from %ProgramFiles(x86)%\zentimo\skins\win10 dark\is-dg884.tmp to %ProgramFiles(x86)%\zentimo\skins\win10 dark\drive.png
from %ProgramFiles(x86)%\zentimo\skins\win10 dark\is-nckp0.tmp to %ProgramFiles(x86)%\zentimo\skins\win10 dark\eject_drive_active.png
from %ProgramFiles(x86)%\zentimo\skins\win10 dark\is-t8lnk.tmp to %ProgramFiles(x86)%\zentimo\skins\win10 dark\eject_drive_passive.png
from %ProgramFiles(x86)%\zentimo\skins\win10 dark\is-hde42.tmp to %ProgramFiles(x86)%\zentimo\skins\win10 dark\fixed_letter_sign.png
from %ProgramFiles(x86)%\zentimo\skins\win10 dark\is-2ri2e.tmp to %ProgramFiles(x86)%\zentimo\skins\win10 dark\hot_key.png
from %ProgramFiles(x86)%\zentimo\skins\win10 dark\is-7pvrm.tmp to %ProgramFiles(x86)%\zentimo\skins\win10 dark\open_hidden_device_list_active.png
from %ProgramFiles(x86)%\zentimo\skins\win10 dark\is-kif06.tmp to %ProgramFiles(x86)%\zentimo\skins\win10 dark\open_hidden_device_list_passive.png
from %ProgramFiles(x86)%\zentimo\skins\win10 dark\is-csllt.tmp to %ProgramFiles(x86)%\zentimo\skins\win10 dark\options_active.png
from %ProgramFiles(x86)%\zentimo\skins\win10 dark\is-f65um.tmp to %ProgramFiles(x86)%\zentimo\skins\win10 dark\options_active_white.png
from %ProgramFiles(x86)%\zentimo\skins\win10 dark\is-la9ns.tmp to %ProgramFiles(x86)%\zentimo\skins\win10 dark\options_active_yell.png
from %ProgramFiles(x86)%\zentimo\skins\win10 dark\is-8qont.tmp to %ProgramFiles(x86)%\zentimo\skins\win10 dark\close_info_passive.png
from %ProgramFiles(x86)%\zentimo\skins\win8modernui\is-4bbm9.tmp to %ProgramFiles(x86)%\zentimo\skins\win8modernui\colorscheme.ini
from %ProgramFiles(x86)%\zentimo\skins\win8modernui\is-bp6j9.tmp to %ProgramFiles(x86)%\zentimo\skins\win8modernui\drive.png
from %ProgramFiles(x86)%\zentimo\skins\win8modernui\is-q41sk.tmp to %ProgramFiles(x86)%\zentimo\skins\win8modernui\eject_drive_active.png
from %ProgramFiles(x86)%\zentimo\skins\win8modernui\is-0mq4g.tmp to %ProgramFiles(x86)%\zentimo\skins\win8modernui\eject_drive_passive.png
from %ProgramFiles(x86)%\zentimo\languages\is-52lm0.tmp to %ProgramFiles(x86)%\zentimo\languages\german.lng
from %ProgramFiles(x86)%\zentimo\languages\is-1qf56.tmp to %ProgramFiles(x86)%\zentimo\languages\greek.lng
from %ProgramFiles(x86)%\zentimo\languages\is-255mb.tmp to %ProgramFiles(x86)%\zentimo\languages\hebrew.lng
from %ProgramFiles(x86)%\zentimo\languages\is-7ai6f.tmp to %ProgramFiles(x86)%\zentimo\languages\hungarian.lng
from %ProgramFiles(x86)%\zentimo\languages\is-cn3qb.tmp to %ProgramFiles(x86)%\zentimo\languages\indonesian.lng
from %ProgramFiles(x86)%\zentimo\languages\is-bp3dr.tmp to %ProgramFiles(x86)%\zentimo\languages\italian.lng
from %ProgramFiles(x86)%\zentimo\languages\is-nbf0k.tmp to %ProgramFiles(x86)%\zentimo\languages\korean.lng
from %ProgramFiles(x86)%\zentimo\languages\is-lakks.tmp to %ProgramFiles(x86)%\zentimo\languages\latvian.lng
from %ProgramFiles(x86)%\zentimo\languages\is-5lj98.tmp to %ProgramFiles(x86)%\zentimo\languages\lithuanian.lng
from %ProgramFiles(x86)%\zentimo\languages\is-1f0rc.tmp to %ProgramFiles(x86)%\zentimo\languages\macedonian.lng
from %ProgramFiles(x86)%\zentimo\languages\is-3fijc.tmp to %ProgramFiles(x86)%\zentimo\languages\polish.lng
from %ProgramFiles(x86)%\zentimo\languages\is-vuotg.tmp to %ProgramFiles(x86)%\zentimo\languages\portuguese-brazilian.lng
from %ProgramFiles(x86)%\zentimo\languages\is-e34bf.tmp to %ProgramFiles(x86)%\zentimo\languages\romanian.lng
from %ProgramFiles(x86)%\zentimo\languages\is-em0pi.tmp to %ProgramFiles(x86)%\zentimo\languages\russian.lng
from %ProgramFiles(x86)%\zentimo\languages\is-2m799.tmp to %ProgramFiles(x86)%\zentimo\languages\serbian-cyrillic.lng
from %ProgramFiles(x86)%\zentimo\languages\is-hh965.tmp to %ProgramFiles(x86)%\zentimo\languages\serbian-latin.lng
from %ProgramFiles(x86)%\zentimo\languages\is-5h1tp.tmp to %ProgramFiles(x86)%\zentimo\languages\slovenian.lng
from %ProgramFiles(x86)%\zentimo\languages\is-4pho5.tmp to %ProgramFiles(x86)%\zentimo\languages\spanish.lng
from %ProgramFiles(x86)%\zentimo\languages\is-60dh6.tmp to %ProgramFiles(x86)%\zentimo\languages\swedish.lng
from %ProgramFiles(x86)%\zentimo\languages\is-qdvoj.tmp to %ProgramFiles(x86)%\zentimo\languages\turkish.lng
from %ProgramFiles(x86)%\zentimo\languages\is-ts7gu.tmp to %ProgramFiles(x86)%\zentimo\languages\ukrainian.lng
from %ProgramFiles(x86)%\zentimo\is-lilas.tmp to %ProgramFiles(x86)%\zentimo\zentimoservice.exe
from %ProgramFiles(x86)%\zentimo\is-nn5dp.tmp to %ProgramFiles(x86)%\zentimo\usrfindhandle.sys
from %ProgramFiles(x86)%\zentimo\is-ssl2h.tmp to %ProgramFiles(x86)%\zentimo\zentimo.exe
from %ProgramFiles(x86)%\zentimo\is-4h79l.tmp to %ProgramFiles(x86)%\zentimo\usr.exe
from %ProgramFiles(x86)%\zentimo\is-6su9f.tmp to %ProgramFiles(x86)%\zentimo\installnotes.rtf
from %ProgramFiles(x86)%\zentimo\is-rk4lq.tmp to %ProgramFiles(x86)%\zentimo\history.txt
from %ProgramFiles(x86)%\zentimo\is-4cdlo.tmp to %ProgramFiles(x86)%\zentimo\license.txt
from %ProgramFiles(x86)%\zentimo\is-55g0n.tmp to %ProgramFiles(x86)%\zentimo\readme.txt
from %ProgramFiles(x86)%\zentimo\languages\is-ts9gk.tmp to %ProgramFiles(x86)%\zentimo\languages\galician.lng
from %ProgramFiles(x86)%\zentimo\languages\is-ro1pl.tmp to %ProgramFiles(x86)%\zentimo\languages\estonian.lng
from %ProgramFiles(x86)%\zentimo\languages\is-mljdp.tmp to %ProgramFiles(x86)%\zentimo\languages\french.lng
from %ProgramFiles(x86)%\zentimo\languages\is-vld7g.tmp to %ProgramFiles(x86)%\zentimo\languages\english-proof.lng
from %ProgramFiles(x86)%\zentimo\skins\win8modernui\is-p4aa8.tmp to %ProgramFiles(x86)%\zentimo\skins\win8modernui\fixed_letter_sign.png
from %ProgramFiles(x86)%\zentimo\skins\win8modernui\is-1slu5.tmp to %ProgramFiles(x86)%\zentimo\skins\win8modernui\hot_key.png
from %ProgramFiles(x86)%\zentimo\skins\win8modernui\is-sttm0.tmp to %ProgramFiles(x86)%\zentimo\skins\win8modernui\open_hidden_device_list_active.png
from %ProgramFiles(x86)%\zentimo\skins\win8modernui\is-m5gif.tmp to %ProgramFiles(x86)%\zentimo\skins\win8modernui\open_hidden_device_list_passive.png
from %ProgramFiles(x86)%\zentimo\skins\win8modernui\is-jvjr0.tmp to %ProgramFiles(x86)%\zentimo\skins\win8modernui\options_active.png
from %ProgramFiles(x86)%\zentimo\skins\win8modernui\is-a948s.tmp to %ProgramFiles(x86)%\zentimo\skins\win8modernui\options_passive.png
from %ProgramFiles(x86)%\zentimo\skins\win8modernui\is-n6uuh.tmp to %ProgramFiles(x86)%\zentimo\skins\win8modernui\quick_launch_active.png
from %ProgramFiles(x86)%\zentimo\skins\win8modernui\is-7rms4.tmp to %ProgramFiles(x86)%\zentimo\skins\win8modernui\quick_launch_passive.png
from %ProgramFiles(x86)%\zentimo\skins\win8modernui\is-2qj68.tmp to %ProgramFiles(x86)%\zentimo\skins\win8modernui\reg_key_active.png
from %ProgramFiles(x86)%\zentimo\skins\win8modernui\is-f7085.tmp to %ProgramFiles(x86)%\zentimo\skins\win8modernui\reg_key_passive.png
from %ProgramFiles(x86)%\zentimo\skins\win8modernui\is-bm6tv.tmp to %ProgramFiles(x86)%\zentimo\skins\win8modernui\return_drive_active.png
from %ProgramFiles(x86)%\zentimo\skins\win8modernui\is-8cb87.tmp to %ProgramFiles(x86)%\zentimo\skins\win8modernui\return_drive_passive.png
from %ProgramFiles(x86)%\zentimo\skins\win8modernui\is-jindp.tmp to %ProgramFiles(x86)%\zentimo\skins\win8modernui\stop_all_active.png
from %ProgramFiles(x86)%\zentimo\skins\win8modernui\is-33d4p.tmp to %ProgramFiles(x86)%\zentimo\skins\win8modernui\stop_all_interrupt_active.png
from %ProgramFiles(x86)%\zentimo\skins\win8modernui\is-edu01.tmp to %ProgramFiles(x86)%\zentimo\skins\win8modernui\stop_all_interrupt_passive.png
from %ProgramFiles(x86)%\zentimo\skins\win8modernui\is-c6fhh.tmp to %ProgramFiles(x86)%\zentimo\skins\win8modernui\stop_all_passive.png
from %ProgramFiles(x86)%\zentimo\skins\win8modernui\is-l61na.tmp to %ProgramFiles(x86)%\zentimo\skins\win8modernui\update_hardware_active.png
from %ProgramFiles(x86)%\zentimo\skins\win8modernui\is-ji8rf.tmp to %ProgramFiles(x86)%\zentimo\skins\win8modernui\update_hardware_passive.png
from %ProgramFiles(x86)%\zentimo\skins\win8modernui\is-a6hkf.tmp to %ProgramFiles(x86)%\zentimo\skins\win8modernui\warning_letter_sign.png
from %ProgramFiles(x86)%\zentimo\languages\is-2bv6p.tmp to %ProgramFiles(x86)%\zentimo\languages\arabic.lng
from %ProgramFiles(x86)%\zentimo\languages\is-94jcj.tmp to %ProgramFiles(x86)%\zentimo\languages\bulgarian.lng
from %ProgramFiles(x86)%\zentimo\languages\is-f5hsv.tmp to %ProgramFiles(x86)%\zentimo\languages\catalan.lng
from %ProgramFiles(x86)%\zentimo\languages\is-32if2.tmp to %ProgramFiles(x86)%\zentimo\languages\chinese-simplified.lng
from %ProgramFiles(x86)%\zentimo\languages\is-vl5ao.tmp to %ProgramFiles(x86)%\zentimo\languages\chinese-traditional.lng
from %ProgramFiles(x86)%\zentimo\languages\is-h2rre.tmp to %ProgramFiles(x86)%\zentimo\languages\croatian.lng
from %ProgramFiles(x86)%\zentimo\languages\is-n9de2.tmp to %ProgramFiles(x86)%\zentimo\languages\czech.lng
from %ProgramFiles(x86)%\zentimo\languages\is-lri7h.tmp to %ProgramFiles(x86)%\zentimo\languages\danish.lng
from %ProgramFiles(x86)%\zentimo\languages\is-phik5.tmp to %ProgramFiles(x86)%\zentimo\languages\dutch-belgium.lng
from %ProgramFiles(x86)%\zentimo\languages\is-bt6lg.tmp to %ProgramFiles(x86)%\zentimo\languages\dutch-netherlands.lng
from %ProgramFiles(x86)%\zentimo\is-6kefn.tmp to %ProgramFiles(x86)%\zentimo\restoresettings.bat
from %ProgramFiles(x86)%\zentimo\skins\classic\is-81odg.tmp to %ProgramFiles(x86)%\zentimo\skins\classic\return_drive_active.png
from %ProgramFiles(x86)%\zentimo\skins\classic\is-putps.tmp to %ProgramFiles(x86)%\zentimo\skins\classic\reg_key_passive.png
from %ProgramFiles(x86)%\zentimo\skins\classic\is-509qp.tmp to %ProgramFiles(x86)%\zentimo\skins\classic\reg_key_active.png
from %ProgramFiles(x86)%\zentimo\deviceimages\is-g7e2b.tmp to %ProgramFiles(x86)%\zentimo\deviceimages\hdd usb (white).ico
from %ProgramFiles(x86)%\zentimo\deviceimages\is-som95.tmp to %ProgramFiles(x86)%\zentimo\deviceimages\hdd usb.ico
from %ProgramFiles(x86)%\zentimo\deviceimages\is-gaj9d.tmp to %ProgramFiles(x86)%\zentimo\deviceimages\hdd.ico
from %ProgramFiles(x86)%\zentimo\deviceimages\is-gkg1v.tmp to %ProgramFiles(x86)%\zentimo\deviceimages\headphones.ico
from %ProgramFiles(x86)%\zentimo\deviceimages\is-1n2h3.tmp to %ProgramFiles(x86)%\zentimo\deviceimages\ipod.ico
from %ProgramFiles(x86)%\zentimo\deviceimages\is-vlk1v.tmp to %ProgramFiles(x86)%\zentimo\deviceimages\joypad.ico
from %ProgramFiles(x86)%\zentimo\deviceimages\is-ejtgh.tmp to %ProgramFiles(x86)%\zentimo\deviceimages\joystick.ico
from %ProgramFiles(x86)%\zentimo\deviceimages\is-79dsi.tmp to %ProgramFiles(x86)%\zentimo\deviceimages\keyboard (black).ico
from %ProgramFiles(x86)%\zentimo\deviceimages\is-0md90.tmp to %ProgramFiles(x86)%\zentimo\deviceimages\keyboard.ico
from %ProgramFiles(x86)%\zentimo\deviceimages\is-nmlog.tmp to %ProgramFiles(x86)%\zentimo\deviceimages\loudspeaker.ico
from %ProgramFiles(x86)%\zentimo\deviceimages\is-je1s5.tmp to %ProgramFiles(x86)%\zentimo\deviceimages\memory card cf.ico
from %ProgramFiles(x86)%\zentimo\deviceimages\is-5fetn.tmp to %ProgramFiles(x86)%\zentimo\deviceimages\memory card ms.ico
from %ProgramFiles(x86)%\zentimo\deviceimages\is-fb592.tmp to %ProgramFiles(x86)%\zentimo\deviceimages\hdd sata.ico
from %ProgramFiles(x86)%\zentimo\deviceimages\is-ro7p7.tmp to %ProgramFiles(x86)%\zentimo\deviceimages\hdd scsi.ico
from %ProgramFiles(x86)%\zentimo\deviceimages\is-ocahq.tmp to %ProgramFiles(x86)%\zentimo\deviceimages\memory card sd.ico
from %ProgramFiles(x86)%\zentimo\deviceimages\is-cg5e7.tmp to %ProgramFiles(x86)%\zentimo\deviceimages\mobile phone.ico
from %ProgramFiles(x86)%\zentimo\deviceimages\is-m9dn8.tmp to %ProgramFiles(x86)%\zentimo\deviceimages\modem.ico
from %ProgramFiles(x86)%\zentimo\deviceimages\is-e2ddl.tmp to %ProgramFiles(x86)%\zentimo\deviceimages\mouse.ico
from %ProgramFiles(x86)%\zentimo\deviceimages\is-qm3bv.tmp to %ProgramFiles(x86)%\zentimo\deviceimages\mp3 player.ico
from %ProgramFiles(x86)%\zentimo\deviceimages\is-g0eap.tmp to %ProgramFiles(x86)%\zentimo\deviceimages\pci-card.ico
from %ProgramFiles(x86)%\zentimo\deviceimages\is-2av92.tmp to %ProgramFiles(x86)%\zentimo\deviceimages\pda.ico
from %ProgramFiles(x86)%\zentimo\deviceimages\is-6tulp.tmp to %ProgramFiles(x86)%\zentimo\deviceimages\printer.ico
from %ProgramFiles(x86)%\zentimo\deviceimages\is-uhovl.tmp to %ProgramFiles(x86)%\zentimo\deviceimages\radio.ico
from %ProgramFiles(x86)%\zentimo\deviceimages\is-3fn45.tmp to %ProgramFiles(x86)%\zentimo\deviceimages\remotecontrol.ico
from %ProgramFiles(x86)%\zentimo\deviceimages\is-86qr1.tmp to %ProgramFiles(x86)%\zentimo\deviceimages\scanner.ico
from %ProgramFiles(x86)%\zentimo\deviceimages\is-d9mek.tmp to %ProgramFiles(x86)%\zentimo\deviceimages\scsi logo.ico
from %ProgramFiles(x86)%\zentimo\deviceimages\is-8dlmr.tmp to %ProgramFiles(x86)%\zentimo\deviceimages\smartcard.ico
from %ProgramFiles(x86)%\zentimo\deviceimages\is-su0jf.tmp to %ProgramFiles(x86)%\zentimo\deviceimages\memory card xd.ico
from %ProgramFiles(x86)%\zentimo\deviceimages\is-f2ie2.tmp to %ProgramFiles(x86)%\zentimo\deviceimages\microphone.ico
from %ProgramFiles(x86)%\zentimo\deviceimages\is-80kr9.tmp to %ProgramFiles(x86)%\zentimo\deviceimages\hdd firewire.ico
from %ProgramFiles(x86)%\zentimo\deviceimages\is-50cov.tmp to %ProgramFiles(x86)%\zentimo\deviceimages\hdd 2.ico
from %ProgramFiles(x86)%\zentimo\deviceimages\is-co61i.tmp to %ProgramFiles(x86)%\zentimo\deviceimages\hdd (yellow).ico
from %ProgramFiles(x86)%\zentimo\deviceimages\is-1ke31.tmp to %ProgramFiles(x86)%\zentimo\deviceimages\bluetooth.ico
from %ProgramFiles(x86)%\zentimo\deviceimages\is-qber9.tmp to %ProgramFiles(x86)%\zentimo\deviceimages\camera.ico
from %ProgramFiles(x86)%\zentimo\deviceimages\is-o80ds.tmp to %ProgramFiles(x86)%\zentimo\deviceimages\card reader (black).ico
from %ProgramFiles(x86)%\zentimo\deviceimages\is-k7591.tmp to %ProgramFiles(x86)%\zentimo\deviceimages\card reader (green).ico
from %ProgramFiles(x86)%\zentimo\deviceimages\is-fr685.tmp to %ProgramFiles(x86)%\zentimo\deviceimages\card reader (red).ico
from %ProgramFiles(x86)%\zentimo\deviceimages\is-snunu.tmp to %ProgramFiles(x86)%\zentimo\deviceimages\card reader.ico
from %ProgramFiles(x86)%\zentimo\deviceimages\is-mv3c2.tmp to %ProgramFiles(x86)%\zentimo\deviceimages\cd-dvd player.ico
from %ProgramFiles(x86)%\zentimo\deviceimages\is-u4lb1.tmp to %ProgramFiles(x86)%\zentimo\deviceimages\fingerprint.ico
from %ProgramFiles(x86)%\zentimo\deviceimages\is-fbt93.tmp to %ProgramFiles(x86)%\zentimo\deviceimages\flash drive (black).ico
from %ProgramFiles(x86)%\zentimo\deviceimages\is-dkjfn.tmp to %ProgramFiles(x86)%\zentimo\deviceimages\flash drive (gray).ico
from %ProgramFiles(x86)%\zentimo\deviceimages\is-gej1v.tmp to %ProgramFiles(x86)%\zentimo\deviceimages\flash drive (green).ico
from %ProgramFiles(x86)%\zentimo\deviceimages\is-dibjh.tmp to %ProgramFiles(x86)%\zentimo\deviceimages\flash drive (light).ico
from %ProgramFiles(x86)%\zentimo\deviceimages\is-vcjqk.tmp to %ProgramFiles(x86)%\zentimo\deviceimages\flash drive (orange).ico
from %ProgramFiles(x86)%\zentimo\deviceimages\is-cg6fq.tmp to %ProgramFiles(x86)%\zentimo\deviceimages\battery.ico
from %ProgramFiles(x86)%\zentimo\deviceimages\is-ac8ac.tmp to %ProgramFiles(x86)%\zentimo\deviceimages\flash drive (pink).ico
from %ProgramFiles(x86)%\zentimo\deviceimages\is-dt14a.tmp to %ProgramFiles(x86)%\zentimo\deviceimages\flash drive (wine).ico
from %ProgramFiles(x86)%\zentimo\deviceimages\is-fmv5g.tmp to %ProgramFiles(x86)%\zentimo\deviceimages\flash drive 2 (black).ico
from %ProgramFiles(x86)%\zentimo\deviceimages\is-bvvjm.tmp to %ProgramFiles(x86)%\zentimo\deviceimages\flash drive 2 (gray).ico
from %ProgramFiles(x86)%\zentimo\deviceimages\is-g1t3s.tmp to %ProgramFiles(x86)%\zentimo\deviceimages\flash drive 2 (green).ico
from %ProgramFiles(x86)%\zentimo\deviceimages\is-e5133.tmp to %ProgramFiles(x86)%\zentimo\deviceimages\flash drive 2 (light).ico
from %ProgramFiles(x86)%\zentimo\deviceimages\is-oaf6e.tmp to %ProgramFiles(x86)%\zentimo\deviceimages\flash drive 2 (pink).ico
from %ProgramFiles(x86)%\zentimo\deviceimages\is-320rd.tmp to %ProgramFiles(x86)%\zentimo\deviceimages\flash drive 2 (wine).ico
from %ProgramFiles(x86)%\zentimo\deviceimages\is-3hopd.tmp to %ProgramFiles(x86)%\zentimo\deviceimages\flash drive 2.ico
from %ProgramFiles(x86)%\zentimo\deviceimages\is-4vmpl.tmp to %ProgramFiles(x86)%\zentimo\deviceimages\flash drive.ico
from %ProgramFiles(x86)%\zentimo\deviceimages\is-rjke7.tmp to %ProgramFiles(x86)%\zentimo\deviceimages\graphics-tablet.ico
from %ProgramFiles(x86)%\zentimo\deviceimages\is-8pml7.tmp to %ProgramFiles(x86)%\zentimo\deviceimages\hdd (black).ico
from %ProgramFiles(x86)%\zentimo\deviceimages\is-9cfpj.tmp to %ProgramFiles(x86)%\zentimo\deviceimages\hdd (blue).ico
from %ProgramFiles(x86)%\zentimo\deviceimages\is-8prln.tmp to %ProgramFiles(x86)%\zentimo\deviceimages\hdd (red).ico
from %ProgramFiles(x86)%\zentimo\deviceimages\is-mcfma.tmp to %ProgramFiles(x86)%\zentimo\deviceimages\flash drive (white).ico
from %ProgramFiles(x86)%\zentimo\deviceimages\is-ns3v5.tmp to %ProgramFiles(x86)%\zentimo\deviceimages\tv-tuner.ico
from %ProgramFiles(x86)%\zentimo\deviceimages\is-hgd4t.tmp to %ProgramFiles(x86)%\zentimo\deviceimages\ups.ico
from %ProgramFiles(x86)%\zentimo\deviceimages\is-hmceu.tmp to %ProgramFiles(x86)%\zentimo\deviceimages\usb device.ico
from %ProgramFiles(x86)%\zentimo\deviceimages\is-5c83a.tmp to %ProgramFiles(x86)%\zentimo\deviceimages\usb logo.ico
from %ProgramFiles(x86)%\zentimo\skins\black contrast\is-1hmre.tmp to %ProgramFiles(x86)%\zentimo\skins\black contrast\update_hardware_active.png
from %ProgramFiles(x86)%\zentimo\skins\black contrast\is-70lmm.tmp to %ProgramFiles(x86)%\zentimo\skins\black contrast\update_hardware_passive.png
from %ProgramFiles(x86)%\zentimo\skins\black contrast\is-99ht5.tmp to %ProgramFiles(x86)%\zentimo\skins\black contrast\warning_letter_sign.png
from %ProgramFiles(x86)%\zentimo\skins\black velvet\is-rigkl.tmp to %ProgramFiles(x86)%\zentimo\skins\black velvet\colorscheme.ini
from %ProgramFiles(x86)%\zentimo\skins\black velvet\is-mdauf.tmp to %ProgramFiles(x86)%\zentimo\skins\black velvet\stop_all_active.png
from %ProgramFiles(x86)%\zentimo\skins\black velvet\is-ilpko.tmp to %ProgramFiles(x86)%\zentimo\skins\black velvet\stop_all_passive.png
from %ProgramFiles(x86)%\zentimo\skins\black velvet\is-ip2ug.tmp to %ProgramFiles(x86)%\zentimo\skins\black velvet\update_hardware_active.png
from %ProgramFiles(x86)%\zentimo\skins\black velvet\is-f8oig.tmp to %ProgramFiles(x86)%\zentimo\skins\black velvet\update_hardware_passive.png
from %ProgramFiles(x86)%\zentimo\skins\classic\is-7ug6k.tmp to %ProgramFiles(x86)%\zentimo\skins\classic\browse_drive_active.png
from %ProgramFiles(x86)%\zentimo\skins\classic\is-m87sh.tmp to %ProgramFiles(x86)%\zentimo\skins\classic\browse_drive_passive.png
from %ProgramFiles(x86)%\zentimo\skins\classic\is-33e0d.tmp to %ProgramFiles(x86)%\zentimo\skins\classic\close_balloon_active.png
from %ProgramFiles(x86)%\zentimo\skins\classic\is-7u32t.tmp to %ProgramFiles(x86)%\zentimo\skins\classic\close_balloon_passive.png
from %ProgramFiles(x86)%\zentimo\skins\classic\is-go4rl.tmp to %ProgramFiles(x86)%\zentimo\skins\classic\close_hidden_device_list_active.png
from %ProgramFiles(x86)%\zentimo\skins\classic\is-omfkp.tmp to %ProgramFiles(x86)%\zentimo\skins\classic\close_hidden_device_list_passive.png
from %ProgramFiles(x86)%\zentimo\skins\classic\is-uvn4h.tmp to %ProgramFiles(x86)%\zentimo\skins\classic\close_info_active.png
from %ProgramFiles(x86)%\zentimo\skins\classic\is-uvsek.tmp to %ProgramFiles(x86)%\zentimo\skins\classic\close_info_passive.png
from %ProgramFiles(x86)%\zentimo\skins\classic\is-gtu9b.tmp to %ProgramFiles(x86)%\zentimo\skins\classic\close_menu_active.png
from %ProgramFiles(x86)%\zentimo\skins\classic\is-nmjo6.tmp to %ProgramFiles(x86)%\zentimo\skins\classic\close_menu_passive.png
from %ProgramFiles(x86)%\zentimo\skins\classic\is-4f4gm.tmp to %ProgramFiles(x86)%\zentimo\skins\classic\colorscheme.ini
from %ProgramFiles(x86)%\zentimo\skins\classic\is-ihrie.tmp to %ProgramFiles(x86)%\zentimo\skins\classic\drive.png
from %ProgramFiles(x86)%\zentimo\skins\classic\is-un6ve.tmp to %ProgramFiles(x86)%\zentimo\skins\classic\eject_drive_active.png
from %ProgramFiles(x86)%\zentimo\skins\classic\is-ol0lj.tmp to %ProgramFiles(x86)%\zentimo\skins\classic\eject_drive_passive.png
from %ProgramFiles(x86)%\zentimo\skins\classic\is-lmcek.tmp to %ProgramFiles(x86)%\zentimo\skins\classic\fixed_letter_sign.png
from %ProgramFiles(x86)%\zentimo\skins\classic\is-9d7v3.tmp to %ProgramFiles(x86)%\zentimo\skins\classic\hot_key.png
from %ProgramFiles(x86)%\zentimo\skins\classic\is-0ashl.tmp to %ProgramFiles(x86)%\zentimo\skins\classic\open_hidden_device_list_active.png
from %ProgramFiles(x86)%\zentimo\skins\classic\is-802fm.tmp to %ProgramFiles(x86)%\zentimo\skins\classic\open_hidden_device_list_passive.png
from %ProgramFiles(x86)%\zentimo\skins\classic\is-bo3c2.tmp to %ProgramFiles(x86)%\zentimo\skins\classic\options_active.png
from %ProgramFiles(x86)%\zentimo\skins\classic\is-v4vpa.tmp to %ProgramFiles(x86)%\zentimo\skins\classic\options_passive.png
from %ProgramFiles(x86)%\zentimo\skins\classic\is-ekdno.tmp to %ProgramFiles(x86)%\zentimo\skins\classic\quick_launch_active.png
from %ProgramFiles(x86)%\zentimo\skins\black contrast\is-2q3kl.tmp to %ProgramFiles(x86)%\zentimo\skins\black contrast\stop_all_passive.png
from %ProgramFiles(x86)%\zentimo\skins\black contrast\is-b0afi.tmp to %ProgramFiles(x86)%\zentimo\skins\black contrast\stop_all_interrupt_active.png
from %ProgramFiles(x86)%\zentimo\skins\black contrast\is-cvauh.tmp to %ProgramFiles(x86)%\zentimo\skins\black contrast\stop_all_interrupt_passive.png
from %ProgramFiles(x86)%\zentimo\skins\black contrast\is-lfepq.tmp to %ProgramFiles(x86)%\zentimo\skins\black contrast\stop_all_active.png
from %ProgramFiles(x86)%\zentimo\deviceimages\is-arlke.tmp to %ProgramFiles(x86)%\zentimo\deviceimages\usb wireless.ico
from %ProgramFiles(x86)%\zentimo\deviceimages\is-o6i2d.tmp to %ProgramFiles(x86)%\zentimo\deviceimages\webcam.ico
from %ProgramFiles(x86)%\zentimo\deviceimages\is-9i41d.tmp to %ProgramFiles(x86)%\zentimo\deviceimages\wi-fi logo.ico
from %ProgramFiles(x86)%\zentimo\skins\black contrast\is-qmoqp.tmp to %ProgramFiles(x86)%\zentimo\skins\black contrast\browse_drive_active.png
from %ProgramFiles(x86)%\zentimo\skins\black contrast\is-hafgq.tmp to %ProgramFiles(x86)%\zentimo\skins\black contrast\browse_drive_passive.png
from %ProgramFiles(x86)%\zentimo\skins\black contrast\is-0qij9.tmp to %ProgramFiles(x86)%\zentimo\skins\black contrast\close_balloon_active.png
from %ProgramFiles(x86)%\zentimo\skins\black contrast\is-gb24s.tmp to %ProgramFiles(x86)%\zentimo\skins\black contrast\close_balloon_passive.png
from %ProgramFiles(x86)%\zentimo\skins\black contrast\is-1aon1.tmp to %ProgramFiles(x86)%\zentimo\skins\black contrast\close_hidden_device_list_active.png
from %ProgramFiles(x86)%\zentimo\skins\black contrast\is-edtl1.tmp to %ProgramFiles(x86)%\zentimo\skins\black contrast\close_hidden_device_list_passive.png
from %ProgramFiles(x86)%\zentimo\skins\black contrast\is-k02ra.tmp to %ProgramFiles(x86)%\zentimo\skins\black contrast\close_info_active.png
from %ProgramFiles(x86)%\zentimo\skins\black contrast\is-4v3c1.tmp to %ProgramFiles(x86)%\zentimo\skins\black contrast\close_info_passive.png
from %ProgramFiles(x86)%\zentimo\skins\black contrast\is-f8elp.tmp to %ProgramFiles(x86)%\zentimo\skins\black contrast\close_menu_active.png
from %ProgramFiles(x86)%\zentimo\skins\black contrast\is-gsqlq.tmp to %ProgramFiles(x86)%\zentimo\skins\black contrast\close_menu_passive.png
from %ProgramFiles(x86)%\zentimo\skins\black contrast\is-mm028.tmp to %ProgramFiles(x86)%\zentimo\skins\black contrast\colorscheme.ini
from %ProgramFiles(x86)%\zentimo\skins\black contrast\is-18htk.tmp to %ProgramFiles(x86)%\zentimo\skins\black contrast\drive.png
from %ProgramFiles(x86)%\zentimo\skins\black contrast\is-2i5oq.tmp to %ProgramFiles(x86)%\zentimo\skins\black contrast\eject_drive_active.png
from %ProgramFiles(x86)%\zentimo\skins\black contrast\is-nslru.tmp to %ProgramFiles(x86)%\zentimo\skins\black contrast\eject_drive_passive.png
from %ProgramFiles(x86)%\zentimo\skins\black contrast\is-8oejq.tmp to %ProgramFiles(x86)%\zentimo\skins\black contrast\fixed_letter_sign.png
from %ProgramFiles(x86)%\zentimo\skins\black contrast\is-gnrke.tmp to %ProgramFiles(x86)%\zentimo\skins\black contrast\hot_key.png
from %ProgramFiles(x86)%\zentimo\skins\black contrast\is-9cr5r.tmp to %ProgramFiles(x86)%\zentimo\skins\black contrast\open_hidden_device_list_active.png
from %ProgramFiles(x86)%\zentimo\skins\black contrast\is-93p44.tmp to %ProgramFiles(x86)%\zentimo\skins\black contrast\open_hidden_device_list_passive.png
from %ProgramFiles(x86)%\zentimo\skins\black contrast\is-pbnvo.tmp to %ProgramFiles(x86)%\zentimo\skins\black contrast\options_active.png
from %ProgramFiles(x86)%\zentimo\skins\black contrast\is-ka7v6.tmp to %ProgramFiles(x86)%\zentimo\skins\black contrast\options_passive.png
from %ProgramFiles(x86)%\zentimo\skins\black contrast\is-ahc6k.tmp to %ProgramFiles(x86)%\zentimo\skins\black contrast\quick_launch_active.png
from %ProgramFiles(x86)%\zentimo\skins\black contrast\is-9gev4.tmp to %ProgramFiles(x86)%\zentimo\skins\black contrast\quick_launch_passive.png
from %ProgramFiles(x86)%\zentimo\skins\black contrast\is-8g8pr.tmp to %ProgramFiles(x86)%\zentimo\skins\black contrast\reg_key_active.png
from %ProgramFiles(x86)%\zentimo\skins\black contrast\is-8de0l.tmp to %ProgramFiles(x86)%\zentimo\skins\black contrast\reg_key_passive.png
from %ProgramFiles(x86)%\zentimo\skins\black contrast\is-pv48v.tmp to %ProgramFiles(x86)%\zentimo\skins\black contrast\return_drive_active.png
from %ProgramFiles(x86)%\zentimo\skins\black contrast\is-i58hn.tmp to %ProgramFiles(x86)%\zentimo\skins\black contrast\return_drive_passive.png
from %ProgramFiles(x86)%\zentimo\skins\classic\is-4gqt7.tmp to %ProgramFiles(x86)%\zentimo\skins\classic\quick_launch_passive.png
from %ProgramFiles(x86)%\zentimo\is-gnck2.tmp to %ProgramFiles(x86)%\zentimo\savesettings.bat

Miscellaneous

Searches for the following windows

ClassName: '' WindowName: ''
ClassName: 'RegEdit_RegEdit' WindowName: ''

Creates and executes the following

'%TEMP%\cf3d.tmp\zentimosetuppro_2-3-3.exe' /VERYSILENT /SUPPRESSMSGBOXES /NORESTART /SP-
'%TEMP%\is-r9kic.tmp\zentimosetuppro_2-3-3.tmp' /SL5="$E015C,3676638,143360,%TEMP%\CF3D.tmp\zentimosetuppro_2-3-3.exe" /VERYSILENT /SUPPRESSMSGBOXES /NORESTART /SP-
'%ProgramFiles(x86)%\zentimo\zentimoservice.exe' /install /silent
'%ProgramFiles(x86)%\zentimo\zentimoservice.exe'
'<SYSTEM32>\cmd.exe' /c "%TEMP%\CF3D.tmp\CF4E.bat <Full path to file>"' (with hidden window)
'%ProgramFiles(x86)%\zentimo\zentimoservice.exe' /install /silent' (with hidden window)

Executes the following

'<SYSTEM32>\cmd.exe' /c "%TEMP%\CF3D.tmp\CF4E.bat <Full path to file>"
'<SYSTEM32>\xcopy.exe' /y /e "X64" "%ProgramFiles(x86)%\Zentimo"
'%WINDIR%\regedit.exe' /S 64.reg

Technologies

Terminology

Training and education

Myths

Technical Information

Curing recommendations

Free trial