Защити созданное

Другие наши ресурсы

  • free.drweb.kz — бесплатные утилиты, плагины, информеры
  • av-desk.com — интернет-сервис для поставщиков услуг Dr.Web AV-Desk
  • curenet.drweb.kz — сетевая лечащая утилита Dr.Web CureNet!
Закрыть

Библиотека
Моя библиотека

Чтобы добавить ресурс в библиотеку, войдите в аккаунт.

+ Добавить в библиотеку

Ресурсов: -

Последний: -

Моя библиотека

Поддержка
Круглосуточная поддержка | Правила обращения

Позвоните

Глобальная поддержка:
+7 (495) 789-45-86

ЧаВо | Форум

Ваши запросы

  • Все: -
  • Незакрытые: -
  • Последний: -

Позвоните

Глобальная поддержка:
+7 (495) 789-45-86

Свяжитесь с нами Незакрытые запросы: 

Профиль

Профиль

Trojan.Siggen10.36867

Добавлен в вирусную базу Dr.Web: 2020-10-12

Описание добавлено:

Technical Information

To ensure autorun and distribution
Sets the following service settings
  • [<HKLM>\System\CurrentControlSet\Services\EPPVAD2_simple] 'ImagePath' = 'system32\drivers\EMP_NSAU.sys'
  • [<HKLM>\System\CurrentControlSet\Services\EMP_MIRRNP] 'Start' = '00000001'
  • [<HKLM>\System\CurrentControlSet\Services\EMP_MIRRNP] 'ImagePath' = 'system32\DRIVERS\EMP_MirrNP.sys'
  • [<HKLM>\System\CurrentControlSet\Services\EMP_NSWLSV] 'Start' = '00000002'
  • [<HKLM>\System\CurrentControlSet\Services\EMP_NSWLSV] 'ImagePath' = '%ProgramFiles(x86)%\EPSON Projector\EasyMP Network Projection V2\EMP_NSWLSV.exe'
Creates the following services
  • 'EPPVAD2_simple' system32\drivers\EMP_NSAU.sys
  • 'EMP_MIRRNP' system32\DRIVERS\EMP_MirrNP.sys
  • 'EMP_NSWLSV' %ProgramFiles(x86)%\EPSON Projector\EasyMP Network Projection V2\EMP_NSWLSV.exe
Malicious functions
Executes the following
  • '%WINDIR%\syswow64\net.exe' stop EMP_NSWLSV
Modifies file system
Creates the following files
  • %TEMP%\rarsfx0\license\license.ar
  • %TEMP%\{66ccc263-3020-4233-a765-071f638ca991}\{4a515955-a3d4-4fe6-98c0-e7987ff3279a}\strib5e6.rra
  • %TEMP%\{66ccc263-3020-4233-a765-071f638ca991}\{4a515955-a3d4-4fe6-98c0-e7987ff3279a}\strib5f6.rra
  • %TEMP%\{66ccc263-3020-4233-a765-071f638ca991}\{4a515955-a3d4-4fe6-98c0-e7987ff3279a}\emp_b5f6.rra
  • %TEMP%\{66ccc263-3020-4233-a765-071f638ca991}\{4a515955-a3d4-4fe6-98c0-e7987ff3279a}\langb605.rra
  • %TEMP%\{66ccc263-3020-4233-a765-071f638ca991}\{4a515955-a3d4-4fe6-98c0-e7987ff3279a}\nsc_b615.rra
  • %TEMP%\{66ccc263-3020-4233-a765-071f638ca991}\{4a515955-a3d4-4fe6-98c0-e7987ff3279a}\strib615.rra
  • %TEMP%\{66ccc263-3020-4233-a765-071f638ca991}\{4a515955-a3d4-4fe6-98c0-e7987ff3279a}\fontb625.rra
  • %TEMP%\{66ccc263-3020-4233-a765-071f638ca991}\{4a515955-a3d4-4fe6-98c0-e7987ff3279a}\difxb625.rra
  • %TEMP%\{66ccc263-3020-4233-a765-071f638ca991}\coreb625.rra
  • %TEMP%\{66ccc263-3020-4233-a765-071f638ca991}\dotnb625.rra
  • %TEMP%\{66ccc263-3020-4233-a765-071f638ca991}\{4a515955-a3d4-4fe6-98c0-e7987ff3279a}\strib634.rra
  • %ProgramFiles(x86)%\installshield installation information\{4a515955-a3d4-4fe6-98c0-e7987ff3279a}\0x04bcc9.rra
  • %TEMP%\{66ccc263-3020-4233-a765-071f638ca991}\{4a515955-a3d4-4fe6-98c0-e7987ff3279a}\isrtb634.rra
  • %TEMP%\{66ccc263-3020-4233-a765-071f638ca991}\{4a515955-a3d4-4fe6-98c0-e7987ff3279a}\defab644.rra
  • %TEMP%\{66ccc263-3020-4233-a765-071f638ca991}\{4a515955-a3d4-4fe6-98c0-e7987ff3279a}\_isrb644.rra
  • %ProgramFiles(x86)%\installshield installation information\{4a515955-a3d4-4fe6-98c0-e7987ff3279a}\layobb33.rra
  • %ProgramFiles(x86)%\installshield installation information\{4a515955-a3d4-4fe6-98c0-e7987ff3279a}\databb33.rra
  • %ProgramFiles(x86)%\installshield installation information\{4a515955-a3d4-4fe6-98c0-e7987ff3279a}\setubc6b.rra
  • %ProgramFiles(x86)%\installshield installation information\{4a515955-a3d4-4fe6-98c0-e7987ff3279a}\issebc8b.rra
  • %ProgramFiles(x86)%\installshield installation information\{4a515955-a3d4-4fe6-98c0-e7987ff3279a}\0x04bc9a.rra
  • %ProgramFiles(x86)%\installshield installation information\{4a515955-a3d4-4fe6-98c0-e7987ff3279a}\0x04bcaa.rra
  • %ProgramFiles(x86)%\installshield installation information\{4a515955-a3d4-4fe6-98c0-e7987ff3279a}\0x04bcb9.rra
  • %TEMP%\{66ccc263-3020-4233-a765-071f638ca991}\{4a515955-a3d4-4fe6-98c0-e7987ff3279a}\strib5d7.rra
  • %TEMP%\{66ccc263-3020-4233-a765-071f638ca991}\isbeb634.rra
  • %TEMP%\{66ccc263-3020-4233-a765-071f638ca991}\{4a515955-a3d4-4fe6-98c0-e7987ff3279a}\oldib5d7.rra
  • %TEMP%\{66ccc263-3020-4233-a765-071f638ca991}\{4a515955-a3d4-4fe6-98c0-e7987ff3279a}\enc_b52b.rra
  • %TEMP%\{66ccc263-3020-4233-a765-071f638ca991}\{4a515955-a3d4-4fe6-98c0-e7987ff3279a}\diskb48f.rra
  • %TEMP%\{66ccc263-3020-4233-a765-071f638ca991}\{4a515955-a3d4-4fe6-98c0-e7987ff3279a}\emp_b48f.rra
  • %TEMP%\{66ccc263-3020-4233-a765-071f638ca991}\{4a515955-a3d4-4fe6-98c0-e7987ff3279a}\emp_b4ae.rra
  • %TEMP%\{66ccc263-3020-4233-a765-071f638ca991}\{4a515955-a3d4-4fe6-98c0-e7987ff3279a}\emp_b4be.rra
  • %TEMP%\{66ccc263-3020-4233-a765-071f638ca991}\{4a515955-a3d4-4fe6-98c0-e7987ff3279a}\emp_b4cd.rra
  • %TEMP%\{66ccc263-3020-4233-a765-071f638ca991}\{4a515955-a3d4-4fe6-98c0-e7987ff3279a}\emp_b4dd.rra
  • %TEMP%\{66ccc263-3020-4233-a765-071f638ca991}\{4a515955-a3d4-4fe6-98c0-e7987ff3279a}\enc_b4dd.rra
  • %TEMP%\{66ccc263-3020-4233-a765-071f638ca991}\{4a515955-a3d4-4fe6-98c0-e7987ff3279a}\enc_b4fc.rra
  • %TEMP%\{66ccc263-3020-4233-a765-071f638ca991}\{4a515955-a3d4-4fe6-98c0-e7987ff3279a}\enc_b50c.rra
  • %TEMP%\{66ccc263-3020-4233-a765-071f638ca991}\{4a515955-a3d4-4fe6-98c0-e7987ff3279a}\enc_b51b.rra
  • %TEMP%\{66ccc263-3020-4233-a765-071f638ca991}\{4a515955-a3d4-4fe6-98c0-e7987ff3279a}\enc_b53b.rra
  • %TEMP%\{66ccc263-3020-4233-a765-071f638ca991}\{4a515955-a3d4-4fe6-98c0-e7987ff3279a}\nsc_b5b7.rra
  • %TEMP%\{66ccc263-3020-4233-a765-071f638ca991}\{4a515955-a3d4-4fe6-98c0-e7987ff3279a}\enc_b54a.rra
  • %TEMP%\{66ccc263-3020-4233-a765-071f638ca991}\{4a515955-a3d4-4fe6-98c0-e7987ff3279a}\enc_b55a.rra
  • %TEMP%\{66ccc263-3020-4233-a765-071f638ca991}\{4a515955-a3d4-4fe6-98c0-e7987ff3279a}\enc_b569.rra
  • %TEMP%\{66ccc263-3020-4233-a765-071f638ca991}\{4a515955-a3d4-4fe6-98c0-e7987ff3279a}\ep_db579.rra
  • %TEMP%\{66ccc263-3020-4233-a765-071f638ca991}\{4a515955-a3d4-4fe6-98c0-e7987ff3279a}\ep_ib579.rra
  • %TEMP%\{66ccc263-3020-4233-a765-071f638ca991}\{4a515955-a3d4-4fe6-98c0-e7987ff3279a}\ep_ub579.rra
  • %TEMP%\{66ccc263-3020-4233-a765-071f638ca991}\{4a515955-a3d4-4fe6-98c0-e7987ff3279a}\langb589.rra
  • %TEMP%\{66ccc263-3020-4233-a765-071f638ca991}\{4a515955-a3d4-4fe6-98c0-e7987ff3279a}\langb598.rra
  • %TEMP%\{66ccc263-3020-4233-a765-071f638ca991}\{4a515955-a3d4-4fe6-98c0-e7987ff3279a}\nsc_b598.rra
  • %TEMP%\{66ccc263-3020-4233-a765-071f638ca991}\{4a515955-a3d4-4fe6-98c0-e7987ff3279a}\nsc_b5a8.rra
  • %TEMP%\{66ccc263-3020-4233-a765-071f638ca991}\{4a515955-a3d4-4fe6-98c0-e7987ff3279a}\nsc_b5c7.rra
  • %ProgramFiles(x86)%\installshield installation information\{4a515955-a3d4-4fe6-98c0-e7987ff3279a}\0x04bcd9.rra
  • %ProgramFiles(x86)%\installshield installation information\{4a515955-a3d4-4fe6-98c0-e7987ff3279a}\0x04bce8.rra
  • %ProgramFiles(x86)%\installshield installation information\{4a515955-a3d4-4fe6-98c0-e7987ff3279a}\0x08bce8.rra
  • %ProgramFiles(x86)%\epson projector\easymp network projection v2\x86\emp_bf29.rra
  • %ProgramFiles(x86)%\epson projector\easymp network projection v2\emp_bf39.rra
  • %ProgramFiles(x86)%\epson projector\easymp network projection v2\emp_bf49.rra
  • %ProgramFiles(x86)%\epson projector\easymp network projection v2\emp_bf4a.rra
  • %ProgramFiles(x86)%\epson projector\easymp network projection v2\emp_bf58.rra
  • %ProgramFiles(x86)%\epson projector\easymp network projection v2\emp_bf68.rra
  • %ProgramFiles(x86)%\epson projector\easymp network projection v2\enp_bf77.rra
  • %ProgramFiles(x86)%\epson projector\easymp network projection v2\langbf77.rra
  • %ProgramFiles(x86)%\epson projector\easymp network projection v2\nsc_bf77.rra
  • %ProgramFiles(x86)%\epson projector\easymp network projection v2\image\imagbf1a.rra
  • %ProgramFiles(x86)%\epson projector\easymp network projection v2\x64driver\emp_bf29.rra
  • %TEMP%\{481fe4c9-d881-2888-76f5-18026d4e3d7a}\setd059.tmp
  • <SYSTEM32>\catroot\{f750e6c3-38ee-11d1-85e5-00c04fc295ee}\oem2.cat
  • %WINDIR%\temp\udd1573.tmp
  • %TEMP%\{38db00d0-3695-4ce3-8c25-0f530f102068}\amd64\set3a90.tmp
  • %TEMP%\{38db00d0-3695-4ce3-8c25-0f530f102068}\amd64\set3b7b.tmp
  • %TEMP%\{38db00d0-3695-4ce3-8c25-0f530f102068}\set3ce2.tmp
  • %TEMP%\{38db00d0-3695-4ce3-8c25-0f530f102068}\set3dae.tmp
  • <SYSTEM32>\catroot\{f750e6c3-38ee-11d1-85e5-00c04fc295ee}\oem3.cat
  • %WINDIR%\temp\udd71f5.tmp
  • %ALLUSERSPROFILE%\microsoft\windows\start menu\programs\epson projector\easymp network projection\easymp network projection ver.2.86.lnk
  • %TEMP%\{481fe4c9-d881-2888-76f5-18026d4e3d7a}\setd144.tmp
  • %TEMP%\{481fe4c9-d881-2888-76f5-18026d4e3d7a}\setd21f.tmp
  • %ProgramFiles(x86)%\epson projector\easymp network projection v2\amd64\emp_bf1a.rra
  • %ProgramFiles(x86)%\epson projector\easymp network projection v2\zlibbf0a.rra
  • %ProgramFiles(x86)%\epson projector\easymp network projection v2\vsfbf0a.rra
  • %ProgramFiles(x86)%\installshield installation information\{4a515955-a3d4-4fe6-98c0-e7987ff3279a}\setubd17.rra
  • %ProgramFiles(x86)%\installshield installation information\{4a515955-a3d4-4fe6-98c0-e7987ff3279a}\setup.ini
  • %ProgramFiles(x86)%\epson projector\easymp network projection v2\eicbd17.rra
  • %ProgramFiles(x86)%\epson projector\easymp network projection v2\emp_bd27.rra
  • %ProgramFiles(x86)%\epson projector\easymp network projection v2\emp_bd55.rra
  • %ProgramFiles(x86)%\epson projector\easymp network projection v2\emp_bd65.rra
  • %ProgramFiles(x86)%\epson projector\easymp network projection v2\emp_bd75.rra
  • %ProgramFiles(x86)%\epson projector\easymp network projection v2\emp_bd84.rra
  • %ProgramFiles(x86)%\epson projector\easymp network projection v2\emp_bd94.rra
  • %ProgramFiles(x86)%\epson projector\easymp network projection v2\emp_bda3.rra
  • %ProgramFiles(x86)%\installshield installation information\{4a515955-a3d4-4fe6-98c0-e7987ff3279a}\setubd07.rra
  • %ProgramFiles(x86)%\epson projector\easymp network projection v2\emp_bdb3.rra
  • %ProgramFiles(x86)%\epson projector\easymp network projection v2\emp_bdf1.rra
  • %ProgramFiles(x86)%\epson projector\easymp network projection v2\emp_be30.rra
  • %ProgramFiles(x86)%\epson projector\easymp network projection v2\emp_be3f.rra
  • %ProgramFiles(x86)%\epson projector\easymp network projection v2\emp_be7e.rra
  • %ProgramFiles(x86)%\epson projector\easymp network projection v2\emp_be8d.rra
  • %ProgramFiles(x86)%\epson projector\easymp network projection v2\emp_bebc.rra
  • %ProgramFiles(x86)%\epson projector\easymp network projection v2\emp_becc.rra
  • %ProgramFiles(x86)%\epson projector\easymp network projection v2\emp_bedb.rra
  • %ProgramFiles(x86)%\epson projector\easymp network projection v2\ijl1bedb.rra
  • %ProgramFiles(x86)%\epson projector\easymp network projection v2\ippbeeb.rra
  • %ProgramFiles(x86)%\epson projector\easymp network projection v2\emp_bdc3.rra
  • %TEMP%\{66ccc263-3020-4233-a765-071f638ca991}\{4a515955-a3d4-4fe6-98c0-e7987ff3279a}\deleb48f.rra
  • %CommonProgramFiles(x86)%\epson projector\emp_9f4b.rra
  • %TEMP%\{66ccc263-3020-4233-a765-071f638ca991}\{4a515955-a3d4-4fe6-98c0-e7987ff3279a}\chkdb48f.rra
  • %TEMP%\{66ccc263-3020-4233-a765-071f638ca991}\{4a515955-a3d4-4fe6-98c0-e7987ff3279a}\setub470.rra
  • %TEMP%\rarsfx0\license\license.sl
  • %TEMP%\rarsfx0\license\license.sv
  • %TEMP%\rarsfx0\license\license.th
  • %TEMP%\rarsfx0\license\license.tr
  • %TEMP%\rarsfx0\license\license.uk
  • %TEMP%\rarsfx0\license\license.vi
  • %TEMP%\rarsfx0\license\license.zh
  • %TEMP%\rarsfx0\layout.bin
  • %TEMP%\rarsfx0\data1.cab
  • %TEMP%\rarsfx0\data2.cab
  • %TEMP%\rarsfx0\setup.exe
  • %TEMP%\rarsfx0\0x040c.ini
  • %TEMP%\rarsfx0\data1.hdr
  • %TEMP%\rarsfx0\0x0403.ini
  • %TEMP%\rarsfx0\0x0404.ini
  • %TEMP%\rarsfx0\0x0405.ini
  • %TEMP%\rarsfx0\0x0406.ini
  • %TEMP%\rarsfx0\0x0407.ini
  • %TEMP%\rarsfx0\0x0408.ini
  • %TEMP%\rarsfx0\0x0409.ini
  • %TEMP%\rarsfx0\0x040a.ini
  • %TEMP%\rarsfx0\0x040b.ini
  • %TEMP%\rarsfx0\license\license.sk
  • %TEMP%\rarsfx0\issetup.dll
  • %TEMP%\rarsfx0\license\license.sc
  • %TEMP%\rarsfx0\license\license.he
  • %TEMP%\rarsfx0\license\license.bg
  • %TEMP%\rarsfx0\license\license.ca
  • %TEMP%\rarsfx0\license\license.cs
  • %TEMP%\rarsfx0\license\license.da
  • %TEMP%\rarsfx0\license\license.de
  • %TEMP%\rarsfx0\license\license.el
  • %TEMP%\rarsfx0\license\license.en
  • %TEMP%\rarsfx0\license\license.es
  • %TEMP%\rarsfx0\license\license.fi
  • %TEMP%\rarsfx0\license\license.fr
  • %TEMP%\rarsfx0\license\license.hr
  • %TEMP%\rarsfx0\license\license.ro
  • %TEMP%\rarsfx0\license\license.hu
  • %TEMP%\rarsfx0\license\license.id
  • %TEMP%\rarsfx0\license\license.it
  • %TEMP%\rarsfx0\license\license.ja
  • %TEMP%\rarsfx0\license\license.ko
  • %TEMP%\rarsfx0\license\license.ms
  • %TEMP%\rarsfx0\license\license.nl
  • %TEMP%\rarsfx0\license\license.nn
  • %TEMP%\rarsfx0\license\license.pl
  • %TEMP%\rarsfx0\license\license.pt
  • %TEMP%\rarsfx0\license\license.ru
  • %TEMP%\rarsfx0\0x040e.ini
  • %TEMP%\rarsfx0\0x0410.ini
  • %TEMP%\rarsfx0\0x0411.ini
  • %TEMP%\{c0d8b945-9fef-47ce-b94d-2ddf6f32ab9e}\0x040a.ini
  • %TEMP%\{c0d8b945-9fef-47ce-b94d-2ddf6f32ab9e}\0x040b.ini
  • %TEMP%\{c0d8b945-9fef-47ce-b94d-2ddf6f32ab9e}\0x040c.ini
  • %TEMP%\{c0d8b945-9fef-47ce-b94d-2ddf6f32ab9e}\0x040e.ini
  • %TEMP%\{c0d8b945-9fef-47ce-b94d-2ddf6f32ab9e}\0x0410.ini
  • %TEMP%\{c0d8b945-9fef-47ce-b94d-2ddf6f32ab9e}\0x0411.ini
  • %TEMP%\{c0d8b945-9fef-47ce-b94d-2ddf6f32ab9e}\0x0412.ini
  • %TEMP%\{c0d8b945-9fef-47ce-b94d-2ddf6f32ab9e}\0x0413.ini
  • %TEMP%\{c0d8b945-9fef-47ce-b94d-2ddf6f32ab9e}\0x0414.ini
  • %TEMP%\{c0d8b945-9fef-47ce-b94d-2ddf6f32ab9e}\0x0408.ini
  • %TEMP%\{c0d8b945-9fef-47ce-b94d-2ddf6f32ab9e}\0x0409.ini
  • %TEMP%\{c0d8b945-9fef-47ce-b94d-2ddf6f32ab9e}\0x0415.ini
  • %TEMP%\{c0d8b945-9fef-47ce-b94d-2ddf6f32ab9e}\0x041a.ini
  • %TEMP%\{c0d8b945-9fef-47ce-b94d-2ddf6f32ab9e}\0x041b.ini
  • %TEMP%\{c0d8b945-9fef-47ce-b94d-2ddf6f32ab9e}\0x041d.ini
  • %TEMP%\{c0d8b945-9fef-47ce-b94d-2ddf6f32ab9e}\0x041e.ini
  • %TEMP%\{c0d8b945-9fef-47ce-b94d-2ddf6f32ab9e}\0x041f.ini
  • %TEMP%\{c0d8b945-9fef-47ce-b94d-2ddf6f32ab9e}\0x0421.ini
  • %TEMP%\{c0d8b945-9fef-47ce-b94d-2ddf6f32ab9e}\0x0424.ini
  • %TEMP%\{c0d8b945-9fef-47ce-b94d-2ddf6f32ab9e}\0x0804.ini
  • %TEMP%\b3b5.rra
  • %TEMP%\{c0d8b945-9fef-47ce-b94d-2ddf6f32ab9e}\0x0416.ini
  • %TEMP%\{c0d8b945-9fef-47ce-b94d-2ddf6f32ab9e}\0x0419.ini
  • %TEMP%\{c0d8b945-9fef-47ce-b94d-2ddf6f32ab9e}\0x0407.ini
  • %TEMP%\{c0d8b945-9fef-47ce-b94d-2ddf6f32ab9e}\0x0406.ini
  • %TEMP%\{c0d8b945-9fef-47ce-b94d-2ddf6f32ab9e}\0x0405.ini
  • %TEMP%\rarsfx0\0x0413.ini
  • %TEMP%\rarsfx0\0x0414.ini
  • %TEMP%\rarsfx0\0x0415.ini
  • %TEMP%\rarsfx0\0x0416.ini
  • %TEMP%\rarsfx0\0x0419.ini
  • %TEMP%\rarsfx0\0x041a.ini
  • %TEMP%\rarsfx0\0x041b.ini
  • %TEMP%\rarsfx0\0x041d.ini
  • %TEMP%\rarsfx0\0x041e.ini
  • %TEMP%\rarsfx0\0x041f.ini
  • %TEMP%\rarsfx0\0x0412.ini
  • %TEMP%\rarsfx0\0x0421.ini
  • %TEMP%\rarsfx0\0x0804.ini
  • %TEMP%\rarsfx0\instlang.ini
  • %TEMP%\rarsfx0\nscsettings.ini
  • %TEMP%\rarsfx0\setup.ini
  • %TEMP%\rarsfx0\setup.inx
  • %TEMP%\rarsfx0\setup.iss
  • %TEMP%\rarsfx0\setup.log
  • %TEMP%\{c0d8b945-9fef-47ce-b94d-2ddf6f32ab9e}\setup.ini
  • %TEMP%\{c0d8b945-9fef-47ce-b94d-2ddf6f32ab9e}\0x0403.ini
  • %TEMP%\{c0d8b945-9fef-47ce-b94d-2ddf6f32ab9e}\0x0404.ini
  • %TEMP%\rarsfx0\0x0424.ini
  • %TEMP%\{66ccc263-3020-4233-a765-071f638ca991}\{4a515955-a3d4-4fe6-98c0-e7987ff3279a}\liceb47f.rra
  • %ALLUSERSPROFILE%\microsoft\windows\start menu\programs\epson projector\easymp network projection\easymp network projection ver.2.86 troubleshooting.lnk
Sets the 'hidden' attribute to the following files
  • <SYSTEM32>\catroot\{f750e6c3-38ee-11d1-85e5-00c04fc295ee}\oem2.cat
  • <SYSTEM32>\catroot\{f750e6c3-38ee-11d1-85e5-00c04fc295ee}\oem3.cat
Deletes the following files
  • %TEMP%\rarsfx0\setup.log
  • %TEMP%\rarsfx0\0x0416.ini
  • %TEMP%\rarsfx0\0x0419.ini
  • %TEMP%\rarsfx0\0x041a.ini
  • %TEMP%\rarsfx0\0x041b.ini
  • %TEMP%\rarsfx0\0x041d.ini
  • %TEMP%\rarsfx0\0x041e.ini
  • %TEMP%\rarsfx0\0x0407.ini
  • %TEMP%\rarsfx0\0x041f.ini
  • %TEMP%\rarsfx0\0x0424.ini
  • %TEMP%\rarsfx0\0x0804.ini
  • %TEMP%\rarsfx0\data1.cab
  • %TEMP%\rarsfx0\data1.hdr
  • %TEMP%\rarsfx0\data2.cab
  • %TEMP%\rarsfx0\instlang.ini
  • %TEMP%\rarsfx0\0x0414.ini
  • %TEMP%\rarsfx0\0x0415.ini
  • %TEMP%\rarsfx0\0x0413.ini
  • %TEMP%\rarsfx0\0x0412.ini
  • %TEMP%\rarsfx0\0x0411.ini
  • %TEMP%\{c0d8b945-9fef-47ce-b94d-2ddf6f32ab9e}\0x0421.ini
  • %TEMP%\{c0d8b945-9fef-47ce-b94d-2ddf6f32ab9e}\0x0424.ini
  • %TEMP%\{c0d8b945-9fef-47ce-b94d-2ddf6f32ab9e}\0x0804.ini
  • %TEMP%\rarsfx0\0x0403.ini
  • %TEMP%\rarsfx0\0x0404.ini
  • %TEMP%\rarsfx0\0x0405.ini
  • %TEMP%\rarsfx0\issetup.dll
  • %TEMP%\rarsfx0\0x0421.ini
  • %TEMP%\rarsfx0\0x0406.ini
  • %TEMP%\rarsfx0\0x0409.ini
  • %TEMP%\rarsfx0\0x040a.ini
  • %TEMP%\rarsfx0\0x040b.ini
  • %TEMP%\rarsfx0\0x040c.ini
  • %TEMP%\rarsfx0\0x040e.ini
  • %TEMP%\rarsfx0\0x0410.ini
  • %TEMP%\{c0d8b945-9fef-47ce-b94d-2ddf6f32ab9e}\0x041f.ini
  • %TEMP%\rarsfx0\0x0408.ini
  • %TEMP%\rarsfx0\license\license.de
  • %TEMP%\rarsfx0\license\license.vi
  • %TEMP%\rarsfx0\setup.exe
  • %TEMP%\rarsfx0\license\license.ms
  • %TEMP%\rarsfx0\license\license.nl
  • %TEMP%\rarsfx0\license\license.nn
  • %TEMP%\rarsfx0\license\license.pl
  • %TEMP%\rarsfx0\license\license.pt
  • %TEMP%\rarsfx0\license\license.ro
  • %TEMP%\rarsfx0\layout.bin
  • %TEMP%\rarsfx0\license\license.ru
  • %TEMP%\rarsfx0\license\license.sk
  • %TEMP%\rarsfx0\license\license.sl
  • %TEMP%\rarsfx0\license\license.sv
  • %TEMP%\rarsfx0\license\license.th
  • %TEMP%\rarsfx0\license\license.tr
  • %TEMP%\rarsfx0\license\license.uk
  • %TEMP%\rarsfx0\license\license.ja
  • %TEMP%\rarsfx0\license\license.ko
  • %TEMP%\rarsfx0\license\license.it
  • %TEMP%\rarsfx0\license\license.id
  • %TEMP%\rarsfx0\license\license.hu
  • %TEMP%\rarsfx0\setup.inx
  • %TEMP%\rarsfx0\setup.iss
  • %TEMP%\rarsfx0\license\license.ar
  • %TEMP%\rarsfx0\license\license.bg
  • %TEMP%\rarsfx0\license\license.ca
  • %TEMP%\rarsfx0\license\license.cs
  • %TEMP%\rarsfx0\nscsettings.ini
  • %TEMP%\{c0d8b945-9fef-47ce-b94d-2ddf6f32ab9e}\0x041e.ini
  • %TEMP%\rarsfx0\license\license.da
  • %TEMP%\rarsfx0\license\license.en
  • %TEMP%\rarsfx0\license\license.es
  • %TEMP%\rarsfx0\license\license.fi
  • %TEMP%\rarsfx0\license\license.fr
  • %TEMP%\rarsfx0\license\license.he
  • %TEMP%\rarsfx0\license\license.hr
  • %TEMP%\rarsfx0\setup.ini
  • %TEMP%\rarsfx0\license\license.el
  • %TEMP%\rarsfx0\license\license.sc
  • %TEMP%\{c0d8b945-9fef-47ce-b94d-2ddf6f32ab9e}\0x041d.ini
  • %TEMP%\{c0d8b945-9fef-47ce-b94d-2ddf6f32ab9e}\0x0411.ini
  • %TEMP%\{66ccc263-3020-4233-a765-071f638ca991}\{4a515955-a3d4-4fe6-98c0-e7987ff3279a}\emp_id64.exe
  • %TEMP%\{66ccc263-3020-4233-a765-071f638ca991}\{4a515955-a3d4-4fe6-98c0-e7987ff3279a}\stringvi.txt
  • %TEMP%\{66ccc263-3020-4233-a765-071f638ca991}\{4a515955-a3d4-4fe6-98c0-e7987ff3279a}\stringbg.txt
  • %TEMP%\{66ccc263-3020-4233-a765-071f638ca991}\{4a515955-a3d4-4fe6-98c0-e7987ff3279a}\stringar.txt
  • %TEMP%\{66ccc263-3020-4233-a765-071f638ca991}\{4a515955-a3d4-4fe6-98c0-e7987ff3279a}\oldinstreg.dll
  • %TEMP%\{66ccc263-3020-4233-a765-071f638ca991}\{4a515955-a3d4-4fe6-98c0-e7987ff3279a}\nsc_tbsuk.chm
  • %WINDIR%\temp\udd71f5.tmp
  • %TEMP%\{66ccc263-3020-4233-a765-071f638ca991}\{4a515955-a3d4-4fe6-98c0-e7987ff3279a}\nsc_tbsro.chm
  • %TEMP%\{66ccc263-3020-4233-a765-071f638ca991}\{4a515955-a3d4-4fe6-98c0-e7987ff3279a}\nsc_tbsar.chm
  • %TEMP%\{66ccc263-3020-4233-a765-071f638ca991}\{4a515955-a3d4-4fe6-98c0-e7987ff3279a}\languageuk.ini
  • %TEMP%\{66ccc263-3020-4233-a765-071f638ca991}\{4a515955-a3d4-4fe6-98c0-e7987ff3279a}\languagear.ini
  • %TEMP%\{66ccc263-3020-4233-a765-071f638ca991}\{4a515955-a3d4-4fe6-98c0-e7987ff3279a}\ep_undrv.exe
  • %TEMP%\{66ccc263-3020-4233-a765-071f638ca991}\{4a515955-a3d4-4fe6-98c0-e7987ff3279a}\ep_indrv.dll
  • %TEMP%\{66ccc263-3020-4233-a765-071f638ca991}\{4a515955-a3d4-4fe6-98c0-e7987ff3279a}\ep_dtdir.dll
  • %TEMP%\{66ccc263-3020-4233-a765-071f638ca991}\{4a515955-a3d4-4fe6-98c0-e7987ff3279a}\nsc_tbs.chm
  • %TEMP%\{66ccc263-3020-4233-a765-071f638ca991}\{4a515955-a3d4-4fe6-98c0-e7987ff3279a}\language.ini
  • %TEMP%\{66ccc263-3020-4233-a765-071f638ca991}\{4a515955-a3d4-4fe6-98c0-e7987ff3279a}\stringen.txt
  • %TEMP%\{66ccc263-3020-4233-a765-071f638ca991}\{4a515955-a3d4-4fe6-98c0-e7987ff3279a}\fontdata.ini
  • %TEMP%\{66ccc263-3020-4233-a765-071f638ca991}\{4a515955-a3d4-4fe6-98c0-e7987ff3279a}\difxdata.ini
  • %TEMP%\{481fe4c9-d881-2888-76f5-18026d4e3d7a}\emp_nsau.inf
  • %TEMP%\{481fe4c9-d881-2888-76f5-18026d4e3d7a}\emp_nsau.sys
  • %WINDIR%\temp\udd1573.tmp
  • %TEMP%\{38db00d0-3695-4ce3-8c25-0f530f102068}\amd64\emp_mirrnp.dll
  • %TEMP%\{38db00d0-3695-4ce3-8c25-0f530f102068}\amd64\emp_mirrnp.sys
  • %TEMP%\{38db00d0-3695-4ce3-8c25-0f530f102068}\emp_mirrnp.cat
  • %TEMP%\{66ccc263-3020-4233-a765-071f638ca991}\{4a515955-a3d4-4fe6-98c0-e7987ff3279a}\enc_replace.dll
  • %TEMP%\{66ccc263-3020-4233-a765-071f638ca991}\{4a515955-a3d4-4fe6-98c0-e7987ff3279a}\nsc_tbshe.chm
  • %TEMP%\{38db00d0-3695-4ce3-8c25-0f530f102068}\emp_mirrnp.inf
  • %TEMP%\{66ccc263-3020-4233-a765-071f638ca991}\{4a515955-a3d4-4fe6-98c0-e7987ff3279a}\default.pal
  • %TEMP%\{66ccc263-3020-4233-a765-071f638ca991}\{4a515955-a3d4-4fe6-98c0-e7987ff3279a}\isrt.dll
  • %TEMP%\{66ccc263-3020-4233-a765-071f638ca991}\{4a515955-a3d4-4fe6-98c0-e7987ff3279a}\stringtable_0x0409.ips
  • %TEMP%\{66ccc263-3020-4233-a765-071f638ca991}\isbew64.exe
  • %TEMP%\{66ccc263-3020-4233-a765-071f638ca991}\dotnetinstaller.exe
  • %TEMP%\{66ccc263-3020-4233-a765-071f638ca991}\corecomp.ini
  • %TEMP%\{481fe4c9-d881-2888-76f5-18026d4e3d7a}\emp_nsau.cat
  • %TEMP%\{66ccc263-3020-4233-a765-071f638ca991}\{4a515955-a3d4-4fe6-98c0-e7987ff3279a}\_isres_0x0409.dll
  • %TEMP%\{66ccc263-3020-4233-a765-071f638ca991}\{4a515955-a3d4-4fe6-98c0-e7987ff3279a}\emp_inst.dll
  • %TEMP%\{c0d8b945-9fef-47ce-b94d-2ddf6f32ab9e}\0x041a.ini
  • %TEMP%\{66ccc263-3020-4233-a765-071f638ca991}\{4a515955-a3d4-4fe6-98c0-e7987ff3279a}\enc_customdlgro.dll
  • %TEMP%\{c0d8b945-9fef-47ce-b94d-2ddf6f32ab9e}\0x0408.ini
  • %TEMP%\{c0d8b945-9fef-47ce-b94d-2ddf6f32ab9e}\0x0409.ini
  • %TEMP%\{c0d8b945-9fef-47ce-b94d-2ddf6f32ab9e}\0x040a.ini
  • %TEMP%\{c0d8b945-9fef-47ce-b94d-2ddf6f32ab9e}\0x040b.ini
  • %TEMP%\{c0d8b945-9fef-47ce-b94d-2ddf6f32ab9e}\0x040c.ini
  • %TEMP%\{c0d8b945-9fef-47ce-b94d-2ddf6f32ab9e}\0x040e.ini
  • %TEMP%\{66ccc263-3020-4233-a765-071f638ca991}\{4a515955-a3d4-4fe6-98c0-e7987ff3279a}\enc_customdlgvi.dll
  • %TEMP%\{c0d8b945-9fef-47ce-b94d-2ddf6f32ab9e}\0x0410.ini
  • %TEMP%\{c0d8b945-9fef-47ce-b94d-2ddf6f32ab9e}\0x0412.ini
  • %TEMP%\{c0d8b945-9fef-47ce-b94d-2ddf6f32ab9e}\0x0413.ini
  • %TEMP%\{c0d8b945-9fef-47ce-b94d-2ddf6f32ab9e}\0x0414.ini
  • %TEMP%\{c0d8b945-9fef-47ce-b94d-2ddf6f32ab9e}\0x0415.ini
  • %TEMP%\{c0d8b945-9fef-47ce-b94d-2ddf6f32ab9e}\0x0416.ini
  • %TEMP%\{c0d8b945-9fef-47ce-b94d-2ddf6f32ab9e}\0x0419.ini
  • %TEMP%\{c0d8b945-9fef-47ce-b94d-2ddf6f32ab9e}\0x0406.ini
  • %TEMP%\{c0d8b945-9fef-47ce-b94d-2ddf6f32ab9e}\0x0407.ini
  • %TEMP%\{c0d8b945-9fef-47ce-b94d-2ddf6f32ab9e}\0x0405.ini
  • %TEMP%\{c0d8b945-9fef-47ce-b94d-2ddf6f32ab9e}\0x0404.ini
  • %TEMP%\{c0d8b945-9fef-47ce-b94d-2ddf6f32ab9e}\0x0403.ini
  • %TEMP%\{66ccc263-3020-4233-a765-071f638ca991}\{4a515955-a3d4-4fe6-98c0-e7987ff3279a}\enc_customdlghe.dll
  • %TEMP%\{66ccc263-3020-4233-a765-071f638ca991}\{4a515955-a3d4-4fe6-98c0-e7987ff3279a}\enc_customdlgbg.dll
  • %TEMP%\{66ccc263-3020-4233-a765-071f638ca991}\{4a515955-a3d4-4fe6-98c0-e7987ff3279a}\enc_customdlgar.dll
  • %TEMP%\{66ccc263-3020-4233-a765-071f638ca991}\{4a515955-a3d4-4fe6-98c0-e7987ff3279a}\enc_customdlg.dll
  • %TEMP%\{66ccc263-3020-4233-a765-071f638ca991}\{4a515955-a3d4-4fe6-98c0-e7987ff3279a}\emp_udrv64.exe
  • %TEMP%\{66ccc263-3020-4233-a765-071f638ca991}\{4a515955-a3d4-4fe6-98c0-e7987ff3279a}\emp_pfcp.exe
  • %TEMP%\{66ccc263-3020-4233-a765-071f638ca991}\{4a515955-a3d4-4fe6-98c0-e7987ff3279a}\enc_customdlguk.dll
  • %TEMP%\{c0d8b945-9fef-47ce-b94d-2ddf6f32ab9e}\0x041b.ini
  • %TEMP%\{66ccc263-3020-4233-a765-071f638ca991}\{4a515955-a3d4-4fe6-98c0-e7987ff3279a}\emp_nisl.exe
  • %TEMP%\{66ccc263-3020-4233-a765-071f638ca991}\{4a515955-a3d4-4fe6-98c0-e7987ff3279a}\disktool.dll
  • %TEMP%\{66ccc263-3020-4233-a765-071f638ca991}\{4a515955-a3d4-4fe6-98c0-e7987ff3279a}\deletedirectory.dll
  • %TEMP%\{66ccc263-3020-4233-a765-071f638ca991}\{4a515955-a3d4-4fe6-98c0-e7987ff3279a}\chkdualstartup.dll
  • %TEMP%\{66ccc263-3020-4233-a765-071f638ca991}\{4a515955-a3d4-4fe6-98c0-e7987ff3279a}\license.txt
  • %TEMP%\{66ccc263-3020-4233-a765-071f638ca991}\{4a515955-a3d4-4fe6-98c0-e7987ff3279a}\setup.inx
  • %TEMP%\{c0d8b945-9fef-47ce-b94d-2ddf6f32ab9e}\setup.ini
  • %TEMP%\{66ccc263-3020-4233-a765-071f638ca991}\{4a515955-a3d4-4fe6-98c0-e7987ff3279a}\enc_customdlgms.dll
  • %TEMP%\{66ccc263-3020-4233-a765-071f638ca991}\{4a515955-a3d4-4fe6-98c0-e7987ff3279a}\emp_id.dll
  • %TEMP%\rarsfx0\license\license.zh
Moves the following files
  • from %TEMP%\{66ccc263-3020-4233-a765-071f638ca991}\{4a515955-a3d4-4fe6-98c0-e7987ff3279a}\setub470.rra to %TEMP%\{66ccc263-3020-4233-a765-071f638ca991}\{4a515955-a3d4-4fe6-98c0-e7987ff3279a}\setup.inx
  • from %ProgramFiles(x86)%\epson projector\easymp network projection v2\emp_bd94.rra to %ProgramFiles(x86)%\epson projector\easymp network projection v2\emp_mirrnp.inf
  • from %ProgramFiles(x86)%\epson projector\easymp network projection v2\emp_bd94.rra to %ProgramFiles(x86)%\epson projector\easymp network projection v2\emp_mpfw7.dll
  • from %ProgramFiles(x86)%\epson projector\easymp network projection v2\emp_bda3.rra to %ProgramFiles(x86)%\epson projector\easymp network projection v2\emp_mpfwv.exe
  • from %ProgramFiles(x86)%\epson projector\easymp network projection v2\emp_bdb3.rra to %ProgramFiles(x86)%\epson projector\easymp network projection v2\emp_mpwl.dll
  • from %ProgramFiles(x86)%\epson projector\easymp network projection v2\emp_bdb3.rra to %ProgramFiles(x86)%\epson projector\easymp network projection v2\emp_mpwlv.dll
  • from %ProgramFiles(x86)%\epson projector\easymp network projection v2\emp_bdc3.rra to %ProgramFiles(x86)%\epson projector\easymp network projection v2\emp_nmang.dll
  • from %ProgramFiles(x86)%\epson projector\easymp network projection v2\emp_bdf1.rra to %ProgramFiles(x86)%\epson projector\easymp network projection v2\emp_npi.exe
  • from %ProgramFiles(x86)%\epson projector\easymp network projection v2\emp_be30.rra to %ProgramFiles(x86)%\epson projector\easymp network projection v2\emp_nsau.cat
  • from %ProgramFiles(x86)%\epson projector\easymp network projection v2\emp_be30.rra to %ProgramFiles(x86)%\epson projector\easymp network projection v2\emp_nsau.inf
  • from %ProgramFiles(x86)%\epson projector\easymp network projection v2\emp_be30.rra to %ProgramFiles(x86)%\epson projector\easymp network projection v2\emp_nsau.sys
  • from %ProgramFiles(x86)%\epson projector\easymp network projection v2\emp_be3f.rra to %ProgramFiles(x86)%\epson projector\easymp network projection v2\emp_nsc.exe
  • from %ProgramFiles(x86)%\epson projector\easymp network projection v2\emp_be7e.rra to %ProgramFiles(x86)%\epson projector\easymp network projection v2\emp_nscmp.exe
  • from %ProgramFiles(x86)%\epson projector\easymp network projection v2\emp_be7e.rra to %ProgramFiles(x86)%\epson projector\easymp network projection v2\emp_nswlsv.exe
  • from %ProgramFiles(x86)%\epson projector\easymp network projection v2\emp_be8d.rra to %ProgramFiles(x86)%\epson projector\easymp network projection v2\emp_pjcon.dll
  • from %ProgramFiles(x86)%\epson projector\easymp network projection v2\emp_bebc.rra to %ProgramFiles(x86)%\epson projector\easymp network projection v2\emp_udrv.exe
  • from %ProgramFiles(x86)%\epson projector\easymp network projection v2\emp_bebc.rra to %ProgramFiles(x86)%\epson projector\easymp network projection v2\emp_vdr.exe
  • from %ProgramFiles(x86)%\epson projector\easymp network projection v2\emp_becc.rra to %ProgramFiles(x86)%\epson projector\easymp network projection v2\emp_vdt.exe
  • from %ProgramFiles(x86)%\epson projector\easymp network projection v2\emp_bd94.rra to %ProgramFiles(x86)%\epson projector\easymp network projection v2\emp_mirrnp.cat
  • from %ProgramFiles(x86)%\epson projector\easymp network projection v2\emp_bedb.rra to %ProgramFiles(x86)%\epson projector\easymp network projection v2\emp_vdt.exe.manifest
  • from %ProgramFiles(x86)%\epson projector\easymp network projection v2\emp_bd84.rra to %ProgramFiles(x86)%\epson projector\easymp network projection v2\emp_inst.dll
  • from %ProgramFiles(x86)%\epson projector\easymp network projection v2\emp_bd75.rra to %ProgramFiles(x86)%\epson projector\easymp network projection v2\emp_id.dll
  • from %ProgramFiles(x86)%\installshield installation information\{4a515955-a3d4-4fe6-98c0-e7987ff3279a}\0x04bcc9.rra to %ProgramFiles(x86)%\installshield installation information\{4a515955-a3d4-4fe6-98c0-e7987ff3279a}\0x040e.ini
  • from %ProgramFiles(x86)%\installshield installation information\{4a515955-a3d4-4fe6-98c0-e7987ff3279a}\0x04bcd9.rra to %ProgramFiles(x86)%\installshield installation information\{4a515955-a3d4-4fe6-98c0-e7987ff3279a}\0x040b.ini
  • from %ProgramFiles(x86)%\installshield installation information\{4a515955-a3d4-4fe6-98c0-e7987ff3279a}\0x04bcd9.rra to %ProgramFiles(x86)%\installshield installation information\{4a515955-a3d4-4fe6-98c0-e7987ff3279a}\0x040c.ini
  • from %ProgramFiles(x86)%\installshield installation information\{4a515955-a3d4-4fe6-98c0-e7987ff3279a}\0x04bcd9.rra to %ProgramFiles(x86)%\installshield installation information\{4a515955-a3d4-4fe6-98c0-e7987ff3279a}\0x0415.ini
  • from %ProgramFiles(x86)%\installshield installation information\{4a515955-a3d4-4fe6-98c0-e7987ff3279a}\0x04bcd9.rra to %ProgramFiles(x86)%\installshield installation information\{4a515955-a3d4-4fe6-98c0-e7987ff3279a}\0x0416.ini
  • from %ProgramFiles(x86)%\installshield installation information\{4a515955-a3d4-4fe6-98c0-e7987ff3279a}\0x04bce8.rra to %ProgramFiles(x86)%\installshield installation information\{4a515955-a3d4-4fe6-98c0-e7987ff3279a}\0x0419.ini
  • from %ProgramFiles(x86)%\installshield installation information\{4a515955-a3d4-4fe6-98c0-e7987ff3279a}\0x04bce8.rra to %ProgramFiles(x86)%\installshield installation information\{4a515955-a3d4-4fe6-98c0-e7987ff3279a}\0x0409.ini
  • from %ProgramFiles(x86)%\installshield installation information\{4a515955-a3d4-4fe6-98c0-e7987ff3279a}\0x04bce8.rra to %ProgramFiles(x86)%\installshield installation information\{4a515955-a3d4-4fe6-98c0-e7987ff3279a}\0x0412.ini
  • from %ProgramFiles(x86)%\installshield installation information\{4a515955-a3d4-4fe6-98c0-e7987ff3279a}\0x08bce8.rra to %ProgramFiles(x86)%\installshield installation information\{4a515955-a3d4-4fe6-98c0-e7987ff3279a}\0x0804.ini
  • from %ProgramFiles(x86)%\installshield installation information\{4a515955-a3d4-4fe6-98c0-e7987ff3279a}\0x04bce8.rra to %ProgramFiles(x86)%\installshield installation information\{4a515955-a3d4-4fe6-98c0-e7987ff3279a}\0x0404.ini
  • from %ProgramFiles(x86)%\installshield installation information\{4a515955-a3d4-4fe6-98c0-e7987ff3279a}\0x04bce8.rra to %ProgramFiles(x86)%\installshield installation information\{4a515955-a3d4-4fe6-98c0-e7987ff3279a}\0x0411.ini
  • from %ProgramFiles(x86)%\installshield installation information\{4a515955-a3d4-4fe6-98c0-e7987ff3279a}\setubd07.rra to %ProgramFiles(x86)%\installshield installation information\{4a515955-a3d4-4fe6-98c0-e7987ff3279a}\setup.inx
  • from %ProgramFiles(x86)%\installshield installation information\{4a515955-a3d4-4fe6-98c0-e7987ff3279a}\setubd17.rra to %ProgramFiles(x86)%\installshield installation information\{4a515955-a3d4-4fe6-98c0-e7987ff3279a}\setup.ini
  • from %ProgramFiles(x86)%\epson projector\easymp network projection v2\eicbd17.rra to %ProgramFiles(x86)%\epson projector\easymp network projection v2\eic.dll
  • from %ProgramFiles(x86)%\epson projector\easymp network projection v2\emp_bd27.rra to %ProgramFiles(x86)%\epson projector\easymp network projection v2\emp_dpch.exe
  • from %ProgramFiles(x86)%\epson projector\easymp network projection v2\emp_bd55.rra to %ProgramFiles(x86)%\epson projector\easymp network projection v2\emp_engn.dll
  • from %ProgramFiles(x86)%\epson projector\easymp network projection v2\emp_bd65.rra to %ProgramFiles(x86)%\epson projector\easymp network projection v2\emp_fwset.dll
  • from %ProgramFiles(x86)%\epson projector\easymp network projection v2\emp_bd75.rra to %ProgramFiles(x86)%\epson projector\easymp network projection v2\emp_id64.exe
  • from %ProgramFiles(x86)%\epson projector\easymp network projection v2\emp_bf58.rra to %ProgramFiles(x86)%\epson projector\easymp network projection v2\emp_vd2.sys
  • from %CommonProgramFiles(x86)%\epson projector\emp_9f4b.rra to %CommonProgramFiles(x86)%\epson projector\emp_udrv.exe
  • from %ProgramFiles(x86)%\epson projector\easymp network projection v2\vsfbf0a.rra to %ProgramFiles(x86)%\epson projector\easymp network projection v2\vsf.dll
  • from %ProgramFiles(x86)%\epson projector\easymp network projection v2\emp_bf68.rra to %ProgramFiles(x86)%\epson projector\easymp network projection v2\emp_vd3.inf
  • from %ProgramFiles(x86)%\epson projector\easymp network projection v2\emp_bf68.rra to %ProgramFiles(x86)%\epson projector\easymp network projection v2\emp_vd3.sys
  • from %ProgramFiles(x86)%\epson projector\easymp network projection v2\emp_bf68.rra to %ProgramFiles(x86)%\epson projector\easymp network projection v2\emp_vd4.cat
  • from %ProgramFiles(x86)%\epson projector\easymp network projection v2\emp_bf39.rra to %ProgramFiles(x86)%\epson projector\easymp network projection v2\emp_vd4.dll
  • from %ProgramFiles(x86)%\epson projector\easymp network projection v2\emp_bf68.rra to %ProgramFiles(x86)%\epson projector\easymp network projection v2\emp_vd4.inf
  • from %ProgramFiles(x86)%\epson projector\easymp network projection v2\emp_bf49.rra to %ProgramFiles(x86)%\epson projector\easymp network projection v2\emp_vd4.sys
  • from %ProgramFiles(x86)%\epson projector\easymp network projection v2\enp_bf77.rra to %ProgramFiles(x86)%\epson projector\easymp network projection v2\enp_nswd.inf
  • from %ProgramFiles(x86)%\epson projector\easymp network projection v2\enp_bf77.rra to %ProgramFiles(x86)%\epson projector\easymp network projection v2\enp_nswd.sys
  • from %ProgramFiles(x86)%\epson projector\easymp network projection v2\langbf77.rra to %ProgramFiles(x86)%\epson projector\easymp network projection v2\language.ini
  • from %ProgramFiles(x86)%\epson projector\easymp network projection v2\nsc_bf77.rra to %ProgramFiles(x86)%\epson projector\easymp network projection v2\nsc_tbs.chm
  • from %TEMP%\{481fe4c9-d881-2888-76f5-18026d4e3d7a}\setd059.tmp to %TEMP%\{481fe4c9-d881-2888-76f5-18026d4e3d7a}\emp_nsau.cat
  • from %TEMP%\{481fe4c9-d881-2888-76f5-18026d4e3d7a}\setd144.tmp to %TEMP%\{481fe4c9-d881-2888-76f5-18026d4e3d7a}\emp_nsau.inf
  • from %TEMP%\{481fe4c9-d881-2888-76f5-18026d4e3d7a}\setd21f.tmp to %TEMP%\{481fe4c9-d881-2888-76f5-18026d4e3d7a}\emp_nsau.sys
  • from %TEMP%\{38db00d0-3695-4ce3-8c25-0f530f102068}\amd64\set3a90.tmp to %TEMP%\{38db00d0-3695-4ce3-8c25-0f530f102068}\amd64\emp_mirrnp.dll
  • from %TEMP%\{38db00d0-3695-4ce3-8c25-0f530f102068}\amd64\set3b7b.tmp to %TEMP%\{38db00d0-3695-4ce3-8c25-0f530f102068}\amd64\emp_mirrnp.sys
  • from %TEMP%\{38db00d0-3695-4ce3-8c25-0f530f102068}\set3ce2.tmp to %TEMP%\{38db00d0-3695-4ce3-8c25-0f530f102068}\emp_mirrnp.cat
  • from %TEMP%\{38db00d0-3695-4ce3-8c25-0f530f102068}\set3dae.tmp to %TEMP%\{38db00d0-3695-4ce3-8c25-0f530f102068}\emp_mirrnp.inf
  • from %ProgramFiles(x86)%\epson projector\easymp network projection v2\emp_bf58.rra to %ProgramFiles(x86)%\epson projector\easymp network projection v2\emp_vd3.dll
  • from %ProgramFiles(x86)%\installshield installation information\{4a515955-a3d4-4fe6-98c0-e7987ff3279a}\0x04bcc9.rra to %ProgramFiles(x86)%\installshield installation information\{4a515955-a3d4-4fe6-98c0-e7987ff3279a}\0x0414.ini
  • from %ProgramFiles(x86)%\epson projector\easymp network projection v2\emp_bf58.rra to %ProgramFiles(x86)%\epson projector\easymp network projection v2\emp_vd3.cat
  • from %ProgramFiles(x86)%\epson projector\easymp network projection v2\emp_bf58.rra to %ProgramFiles(x86)%\epson projector\easymp network projection v2\emp_vd2.inf
  • from %ProgramFiles(x86)%\epson projector\easymp network projection v2\zlibbf0a.rra to %ProgramFiles(x86)%\epson projector\easymp network projection v2\zlib.dll
  • from %ProgramFiles(x86)%\epson projector\easymp network projection v2\amd64\emp_bf1a.rra to %ProgramFiles(x86)%\epson projector\easymp network projection v2\amd64\emp_mirrnp.dll
  • from %ProgramFiles(x86)%\epson projector\easymp network projection v2\amd64\emp_bf1a.rra to %ProgramFiles(x86)%\epson projector\easymp network projection v2\amd64\emp_mirrnp.sys
  • from %ProgramFiles(x86)%\epson projector\easymp network projection v2\image\imagbf1a.rra to %ProgramFiles(x86)%\epson projector\easymp network projection v2\image\image.jpg
  • from %ProgramFiles(x86)%\epson projector\easymp network projection v2\x64driver\emp_bf29.rra to %ProgramFiles(x86)%\epson projector\easymp network projection v2\x64driver\emp_nsau.cat
  • from %ProgramFiles(x86)%\epson projector\easymp network projection v2\x64driver\emp_bf29.rra to %ProgramFiles(x86)%\epson projector\easymp network projection v2\x64driver\emp_nsau.inf
  • from %ProgramFiles(x86)%\epson projector\easymp network projection v2\x64driver\emp_bf29.rra to %ProgramFiles(x86)%\epson projector\easymp network projection v2\x64driver\emp_nsau.sys
  • from %ProgramFiles(x86)%\epson projector\easymp network projection v2\x86\emp_bf29.rra to %ProgramFiles(x86)%\epson projector\easymp network projection v2\x86\emp_mirrnp.dll
  • from %ProgramFiles(x86)%\epson projector\easymp network projection v2\x86\emp_bf29.rra to %ProgramFiles(x86)%\epson projector\easymp network projection v2\x86\emp_mirrnp.sys
  • from %ProgramFiles(x86)%\epson projector\easymp network projection v2\emp_bf39.rra to %ProgramFiles(x86)%\epson projector\easymp network projection v2\emp_map.inf
  • from %ProgramFiles(x86)%\epson projector\easymp network projection v2\emp_bf39.rra to %ProgramFiles(x86)%\epson projector\easymp network projection v2\emp_map.sys
  • from %ProgramFiles(x86)%\epson projector\easymp network projection v2\emp_bf39.rra to %ProgramFiles(x86)%\epson projector\easymp network projection v2\emp_vd1.cat
  • from %ProgramFiles(x86)%\epson projector\easymp network projection v2\emp_bf49.rra to %ProgramFiles(x86)%\epson projector\easymp network projection v2\emp_vd1.dll
  • from %ProgramFiles(x86)%\epson projector\easymp network projection v2\emp_bf49.rra to %ProgramFiles(x86)%\epson projector\easymp network projection v2\emp_vd1.inf
  • from %ProgramFiles(x86)%\epson projector\easymp network projection v2\emp_bf4a.rra to %ProgramFiles(x86)%\epson projector\easymp network projection v2\emp_vd1.sys
  • from %ProgramFiles(x86)%\epson projector\easymp network projection v2\emp_bf4a.rra to %ProgramFiles(x86)%\epson projector\easymp network projection v2\emp_vd2.cat
  • from %ProgramFiles(x86)%\epson projector\easymp network projection v2\emp_bf4a.rra to %ProgramFiles(x86)%\epson projector\easymp network projection v2\emp_vd2.dll
  • from %ProgramFiles(x86)%\epson projector\easymp network projection v2\ijl1bedb.rra to %ProgramFiles(x86)%\epson projector\easymp network projection v2\ijl11.dll
  • from %ProgramFiles(x86)%\epson projector\easymp network projection v2\ippbeeb.rra to %ProgramFiles(x86)%\epson projector\easymp network projection v2\ipp.dll
  • from %ProgramFiles(x86)%\installshield installation information\{4a515955-a3d4-4fe6-98c0-e7987ff3279a}\0x04bcc9.rra to %ProgramFiles(x86)%\installshield installation information\{4a515955-a3d4-4fe6-98c0-e7987ff3279a}\0x0407.ini
  • from %TEMP%\{66ccc263-3020-4233-a765-071f638ca991}\{4a515955-a3d4-4fe6-98c0-e7987ff3279a}\nsc_b5c7.rra to %TEMP%\{66ccc263-3020-4233-a765-071f638ca991}\{4a515955-a3d4-4fe6-98c0-e7987ff3279a}\nsc_tbsvi.chm
  • from %TEMP%\{66ccc263-3020-4233-a765-071f638ca991}\{4a515955-a3d4-4fe6-98c0-e7987ff3279a}\enc_b569.rra to %TEMP%\{66ccc263-3020-4233-a765-071f638ca991}\{4a515955-a3d4-4fe6-98c0-e7987ff3279a}\enc_replace.dll
  • from %TEMP%\{66ccc263-3020-4233-a765-071f638ca991}\{4a515955-a3d4-4fe6-98c0-e7987ff3279a}\ep_db579.rra to %TEMP%\{66ccc263-3020-4233-a765-071f638ca991}\{4a515955-a3d4-4fe6-98c0-e7987ff3279a}\ep_dtdir.dll
  • from %TEMP%\{66ccc263-3020-4233-a765-071f638ca991}\{4a515955-a3d4-4fe6-98c0-e7987ff3279a}\ep_ib579.rra to %TEMP%\{66ccc263-3020-4233-a765-071f638ca991}\{4a515955-a3d4-4fe6-98c0-e7987ff3279a}\ep_indrv.dll
  • from %TEMP%\{66ccc263-3020-4233-a765-071f638ca991}\{4a515955-a3d4-4fe6-98c0-e7987ff3279a}\ep_ib579.rra to %TEMP%\{66ccc263-3020-4233-a765-071f638ca991}\{4a515955-a3d4-4fe6-98c0-e7987ff3279a}\ep_indrv.exe
  • from %TEMP%\{66ccc263-3020-4233-a765-071f638ca991}\{4a515955-a3d4-4fe6-98c0-e7987ff3279a}\ep_ib579.rra to %TEMP%\{66ccc263-3020-4233-a765-071f638ca991}\{4a515955-a3d4-4fe6-98c0-e7987ff3279a}\ep_instwd.dll
  • from %TEMP%\{66ccc263-3020-4233-a765-071f638ca991}\{4a515955-a3d4-4fe6-98c0-e7987ff3279a}\ep_ub579.rra to %TEMP%\{66ccc263-3020-4233-a765-071f638ca991}\{4a515955-a3d4-4fe6-98c0-e7987ff3279a}\ep_undrv.exe
  • from %TEMP%\{66ccc263-3020-4233-a765-071f638ca991}\{4a515955-a3d4-4fe6-98c0-e7987ff3279a}\langb589.rra to %TEMP%\{66ccc263-3020-4233-a765-071f638ca991}\{4a515955-a3d4-4fe6-98c0-e7987ff3279a}\languagear.ini
  • from %TEMP%\{66ccc263-3020-4233-a765-071f638ca991}\{4a515955-a3d4-4fe6-98c0-e7987ff3279a}\langb589.rra to %TEMP%\{66ccc263-3020-4233-a765-071f638ca991}\{4a515955-a3d4-4fe6-98c0-e7987ff3279a}\languagebg.ini
  • from %TEMP%\{66ccc263-3020-4233-a765-071f638ca991}\{4a515955-a3d4-4fe6-98c0-e7987ff3279a}\langb589.rra to %TEMP%\{66ccc263-3020-4233-a765-071f638ca991}\{4a515955-a3d4-4fe6-98c0-e7987ff3279a}\languagehe.ini
  • from %TEMP%\{66ccc263-3020-4233-a765-071f638ca991}\{4a515955-a3d4-4fe6-98c0-e7987ff3279a}\langb589.rra to %TEMP%\{66ccc263-3020-4233-a765-071f638ca991}\{4a515955-a3d4-4fe6-98c0-e7987ff3279a}\languagems.ini
  • from %TEMP%\{66ccc263-3020-4233-a765-071f638ca991}\{4a515955-a3d4-4fe6-98c0-e7987ff3279a}\langb589.rra to %TEMP%\{66ccc263-3020-4233-a765-071f638ca991}\{4a515955-a3d4-4fe6-98c0-e7987ff3279a}\languagero.ini
  • from %TEMP%\{66ccc263-3020-4233-a765-071f638ca991}\{4a515955-a3d4-4fe6-98c0-e7987ff3279a}\langb598.rra to %TEMP%\{66ccc263-3020-4233-a765-071f638ca991}\{4a515955-a3d4-4fe6-98c0-e7987ff3279a}\languageuk.ini
  • from %TEMP%\{66ccc263-3020-4233-a765-071f638ca991}\{4a515955-a3d4-4fe6-98c0-e7987ff3279a}\langb598.rra to %TEMP%\{66ccc263-3020-4233-a765-071f638ca991}\{4a515955-a3d4-4fe6-98c0-e7987ff3279a}\languagevi.ini
  • from %TEMP%\{66ccc263-3020-4233-a765-071f638ca991}\{4a515955-a3d4-4fe6-98c0-e7987ff3279a}\nsc_b598.rra to %TEMP%\{66ccc263-3020-4233-a765-071f638ca991}\{4a515955-a3d4-4fe6-98c0-e7987ff3279a}\nsc_tbsar.chm
  • from %TEMP%\{66ccc263-3020-4233-a765-071f638ca991}\{4a515955-a3d4-4fe6-98c0-e7987ff3279a}\nsc_b598.rra to %TEMP%\{66ccc263-3020-4233-a765-071f638ca991}\{4a515955-a3d4-4fe6-98c0-e7987ff3279a}\nsc_tbsbg.chm
  • from %TEMP%\{66ccc263-3020-4233-a765-071f638ca991}\{4a515955-a3d4-4fe6-98c0-e7987ff3279a}\nsc_b5a8.rra to %TEMP%\{66ccc263-3020-4233-a765-071f638ca991}\{4a515955-a3d4-4fe6-98c0-e7987ff3279a}\nsc_tbshe.chm
  • from %TEMP%\{66ccc263-3020-4233-a765-071f638ca991}\{4a515955-a3d4-4fe6-98c0-e7987ff3279a}\nsc_b5a8.rra to %TEMP%\{66ccc263-3020-4233-a765-071f638ca991}\{4a515955-a3d4-4fe6-98c0-e7987ff3279a}\nsc_tbsms.chm
  • from %TEMP%\{66ccc263-3020-4233-a765-071f638ca991}\{4a515955-a3d4-4fe6-98c0-e7987ff3279a}\enc_b55a.rra to %TEMP%\{66ccc263-3020-4233-a765-071f638ca991}\{4a515955-a3d4-4fe6-98c0-e7987ff3279a}\enc_customdlgvi.dll
  • from %TEMP%\{66ccc263-3020-4233-a765-071f638ca991}\{4a515955-a3d4-4fe6-98c0-e7987ff3279a}\nsc_b5b7.rra to %TEMP%\{66ccc263-3020-4233-a765-071f638ca991}\{4a515955-a3d4-4fe6-98c0-e7987ff3279a}\nsc_tbsro.chm
  • from %TEMP%\{66ccc263-3020-4233-a765-071f638ca991}\{4a515955-a3d4-4fe6-98c0-e7987ff3279a}\enc_b54a.rra to %TEMP%\{66ccc263-3020-4233-a765-071f638ca991}\{4a515955-a3d4-4fe6-98c0-e7987ff3279a}\enc_customdlguk.dll
  • from %TEMP%\{66ccc263-3020-4233-a765-071f638ca991}\{4a515955-a3d4-4fe6-98c0-e7987ff3279a}\enc_b52b.rra to %TEMP%\{66ccc263-3020-4233-a765-071f638ca991}\{4a515955-a3d4-4fe6-98c0-e7987ff3279a}\enc_customdlgms.dll
  • from %TEMP%\{66ccc263-3020-4233-a765-071f638ca991}\{4a515955-a3d4-4fe6-98c0-e7987ff3279a}\liceb47f.rra to %TEMP%\{66ccc263-3020-4233-a765-071f638ca991}\{4a515955-a3d4-4fe6-98c0-e7987ff3279a}\license.txt
  • from %TEMP%\{66ccc263-3020-4233-a765-071f638ca991}\{4a515955-a3d4-4fe6-98c0-e7987ff3279a}\chkdb48f.rra to %TEMP%\{66ccc263-3020-4233-a765-071f638ca991}\{4a515955-a3d4-4fe6-98c0-e7987ff3279a}\chkdualstartup.dll
  • from %TEMP%\{66ccc263-3020-4233-a765-071f638ca991}\{4a515955-a3d4-4fe6-98c0-e7987ff3279a}\deleb48f.rra to %TEMP%\{66ccc263-3020-4233-a765-071f638ca991}\{4a515955-a3d4-4fe6-98c0-e7987ff3279a}\deletedirectory.dll
  • from %TEMP%\{66ccc263-3020-4233-a765-071f638ca991}\{4a515955-a3d4-4fe6-98c0-e7987ff3279a}\diskb48f.rra to %TEMP%\{66ccc263-3020-4233-a765-071f638ca991}\{4a515955-a3d4-4fe6-98c0-e7987ff3279a}\disktool.dll
  • from %TEMP%\{66ccc263-3020-4233-a765-071f638ca991}\{4a515955-a3d4-4fe6-98c0-e7987ff3279a}\emp_b48f.rra to %TEMP%\{66ccc263-3020-4233-a765-071f638ca991}\{4a515955-a3d4-4fe6-98c0-e7987ff3279a}\emp_id.dll
  • from %TEMP%\{66ccc263-3020-4233-a765-071f638ca991}\{4a515955-a3d4-4fe6-98c0-e7987ff3279a}\emp_b4ae.rra to %TEMP%\{66ccc263-3020-4233-a765-071f638ca991}\{4a515955-a3d4-4fe6-98c0-e7987ff3279a}\emp_inst.dll
  • from %TEMP%\{66ccc263-3020-4233-a765-071f638ca991}\{4a515955-a3d4-4fe6-98c0-e7987ff3279a}\emp_b4ae.rra to %TEMP%\{66ccc263-3020-4233-a765-071f638ca991}\{4a515955-a3d4-4fe6-98c0-e7987ff3279a}\emp_instfw.dll
  • from %TEMP%\{66ccc263-3020-4233-a765-071f638ca991}\{4a515955-a3d4-4fe6-98c0-e7987ff3279a}\emp_b4be.rra to %TEMP%\{66ccc263-3020-4233-a765-071f638ca991}\{4a515955-a3d4-4fe6-98c0-e7987ff3279a}\emp_nisl.exe
  • from %TEMP%\{66ccc263-3020-4233-a765-071f638ca991}\{4a515955-a3d4-4fe6-98c0-e7987ff3279a}\emp_b4be.rra to %TEMP%\{66ccc263-3020-4233-a765-071f638ca991}\{4a515955-a3d4-4fe6-98c0-e7987ff3279a}\emp_nsrs.dll
  • from %TEMP%\{66ccc263-3020-4233-a765-071f638ca991}\{4a515955-a3d4-4fe6-98c0-e7987ff3279a}\emp_b4cd.rra to %TEMP%\{66ccc263-3020-4233-a765-071f638ca991}\{4a515955-a3d4-4fe6-98c0-e7987ff3279a}\emp_pfcp.exe
  • from %TEMP%\{66ccc263-3020-4233-a765-071f638ca991}\{4a515955-a3d4-4fe6-98c0-e7987ff3279a}\emp_b4cd.rra to %TEMP%\{66ccc263-3020-4233-a765-071f638ca991}\{4a515955-a3d4-4fe6-98c0-e7987ff3279a}\emp_udrv.exe
  • from %TEMP%\{66ccc263-3020-4233-a765-071f638ca991}\{4a515955-a3d4-4fe6-98c0-e7987ff3279a}\emp_b4dd.rra to %TEMP%\{66ccc263-3020-4233-a765-071f638ca991}\{4a515955-a3d4-4fe6-98c0-e7987ff3279a}\emp_udrv64.exe
  • from %TEMP%\{66ccc263-3020-4233-a765-071f638ca991}\{4a515955-a3d4-4fe6-98c0-e7987ff3279a}\enc_b4dd.rra to %TEMP%\{66ccc263-3020-4233-a765-071f638ca991}\{4a515955-a3d4-4fe6-98c0-e7987ff3279a}\enc_customdlg.dll
  • from %TEMP%\{66ccc263-3020-4233-a765-071f638ca991}\{4a515955-a3d4-4fe6-98c0-e7987ff3279a}\enc_b4dd.rra to %TEMP%\{66ccc263-3020-4233-a765-071f638ca991}\{4a515955-a3d4-4fe6-98c0-e7987ff3279a}\enc_customdlg2.dll
  • from %TEMP%\{66ccc263-3020-4233-a765-071f638ca991}\{4a515955-a3d4-4fe6-98c0-e7987ff3279a}\enc_b4fc.rra to %TEMP%\{66ccc263-3020-4233-a765-071f638ca991}\{4a515955-a3d4-4fe6-98c0-e7987ff3279a}\enc_customdlgar.dll
  • from %TEMP%\{66ccc263-3020-4233-a765-071f638ca991}\{4a515955-a3d4-4fe6-98c0-e7987ff3279a}\enc_b50c.rra to %TEMP%\{66ccc263-3020-4233-a765-071f638ca991}\{4a515955-a3d4-4fe6-98c0-e7987ff3279a}\enc_customdlgbg.dll
  • from %TEMP%\{66ccc263-3020-4233-a765-071f638ca991}\{4a515955-a3d4-4fe6-98c0-e7987ff3279a}\enc_b51b.rra to %TEMP%\{66ccc263-3020-4233-a765-071f638ca991}\{4a515955-a3d4-4fe6-98c0-e7987ff3279a}\enc_customdlghe.dll
  • from %TEMP%\{66ccc263-3020-4233-a765-071f638ca991}\{4a515955-a3d4-4fe6-98c0-e7987ff3279a}\enc_b53b.rra to %TEMP%\{66ccc263-3020-4233-a765-071f638ca991}\{4a515955-a3d4-4fe6-98c0-e7987ff3279a}\enc_customdlgro.dll
  • from %TEMP%\{66ccc263-3020-4233-a765-071f638ca991}\{4a515955-a3d4-4fe6-98c0-e7987ff3279a}\isrtb634.rra to %TEMP%\{66ccc263-3020-4233-a765-071f638ca991}\{4a515955-a3d4-4fe6-98c0-e7987ff3279a}\isrt.dll
  • from %ProgramFiles(x86)%\installshield installation information\{4a515955-a3d4-4fe6-98c0-e7987ff3279a}\0x04bcc9.rra to %ProgramFiles(x86)%\installshield installation information\{4a515955-a3d4-4fe6-98c0-e7987ff3279a}\0x0406.ini
  • from %TEMP%\{66ccc263-3020-4233-a765-071f638ca991}\{4a515955-a3d4-4fe6-98c0-e7987ff3279a}\oldib5d7.rra to %TEMP%\{66ccc263-3020-4233-a765-071f638ca991}\{4a515955-a3d4-4fe6-98c0-e7987ff3279a}\oldinstreg.dll
  • from %ProgramFiles(x86)%\installshield installation information\{4a515955-a3d4-4fe6-98c0-e7987ff3279a}\layobb33.rra to %ProgramFiles(x86)%\installshield installation information\{4a515955-a3d4-4fe6-98c0-e7987ff3279a}\layout.bin
  • from %ProgramFiles(x86)%\installshield installation information\{4a515955-a3d4-4fe6-98c0-e7987ff3279a}\databb33.rra to %ProgramFiles(x86)%\installshield installation information\{4a515955-a3d4-4fe6-98c0-e7987ff3279a}\data1.hdr
  • from %ProgramFiles(x86)%\installshield installation information\{4a515955-a3d4-4fe6-98c0-e7987ff3279a}\databb33.rra to %ProgramFiles(x86)%\installshield installation information\{4a515955-a3d4-4fe6-98c0-e7987ff3279a}\data1.cab
  • from %ProgramFiles(x86)%\installshield installation information\{4a515955-a3d4-4fe6-98c0-e7987ff3279a}\setubc6b.rra to %ProgramFiles(x86)%\installshield installation information\{4a515955-a3d4-4fe6-98c0-e7987ff3279a}\setup.exe
  • from %ProgramFiles(x86)%\installshield installation information\{4a515955-a3d4-4fe6-98c0-e7987ff3279a}\issebc8b.rra to %ProgramFiles(x86)%\installshield installation information\{4a515955-a3d4-4fe6-98c0-e7987ff3279a}\issetup.dll
  • from %ProgramFiles(x86)%\installshield installation information\{4a515955-a3d4-4fe6-98c0-e7987ff3279a}\0x04bc9a.rra to %ProgramFiles(x86)%\installshield installation information\{4a515955-a3d4-4fe6-98c0-e7987ff3279a}\0x0410.ini
  • from %ProgramFiles(x86)%\installshield installation information\{4a515955-a3d4-4fe6-98c0-e7987ff3279a}\0x04bc9a.rra to %ProgramFiles(x86)%\installshield installation information\{4a515955-a3d4-4fe6-98c0-e7987ff3279a}\0x0421.ini
  • from %ProgramFiles(x86)%\installshield installation information\{4a515955-a3d4-4fe6-98c0-e7987ff3279a}\0x04bcaa.rra to %ProgramFiles(x86)%\installshield installation information\{4a515955-a3d4-4fe6-98c0-e7987ff3279a}\0x0413.ini
  • from %ProgramFiles(x86)%\installshield installation information\{4a515955-a3d4-4fe6-98c0-e7987ff3279a}\0x04bcaa.rra to %ProgramFiles(x86)%\installshield installation information\{4a515955-a3d4-4fe6-98c0-e7987ff3279a}\0x0403.ini
  • from %ProgramFiles(x86)%\installshield installation information\{4a515955-a3d4-4fe6-98c0-e7987ff3279a}\0x04bcaa.rra to %ProgramFiles(x86)%\installshield installation information\{4a515955-a3d4-4fe6-98c0-e7987ff3279a}\0x0408.ini
  • from %ProgramFiles(x86)%\installshield installation information\{4a515955-a3d4-4fe6-98c0-e7987ff3279a}\0x04bcaa.rra to %ProgramFiles(x86)%\installshield installation information\{4a515955-a3d4-4fe6-98c0-e7987ff3279a}\0x041a.ini
  • from %ProgramFiles(x86)%\installshield installation information\{4a515955-a3d4-4fe6-98c0-e7987ff3279a}\0x04bcaa.rra to %ProgramFiles(x86)%\installshield installation information\{4a515955-a3d4-4fe6-98c0-e7987ff3279a}\0x041d.ini
  • from %ProgramFiles(x86)%\installshield installation information\{4a515955-a3d4-4fe6-98c0-e7987ff3279a}\0x04bcb9.rra to %ProgramFiles(x86)%\installshield installation information\{4a515955-a3d4-4fe6-98c0-e7987ff3279a}\0x040a.ini
  • from %ProgramFiles(x86)%\installshield installation information\{4a515955-a3d4-4fe6-98c0-e7987ff3279a}\0x04bcb9.rra to %ProgramFiles(x86)%\installshield installation information\{4a515955-a3d4-4fe6-98c0-e7987ff3279a}\0x0424.ini
  • from %ProgramFiles(x86)%\installshield installation information\{4a515955-a3d4-4fe6-98c0-e7987ff3279a}\0x04bcb9.rra to %ProgramFiles(x86)%\installshield installation information\{4a515955-a3d4-4fe6-98c0-e7987ff3279a}\0x041b.ini
  • from %ProgramFiles(x86)%\installshield installation information\{4a515955-a3d4-4fe6-98c0-e7987ff3279a}\0x04bcb9.rra to %ProgramFiles(x86)%\installshield installation information\{4a515955-a3d4-4fe6-98c0-e7987ff3279a}\0x041e.ini
  • from %ProgramFiles(x86)%\installshield installation information\{4a515955-a3d4-4fe6-98c0-e7987ff3279a}\0x04bcb9.rra to %ProgramFiles(x86)%\installshield installation information\{4a515955-a3d4-4fe6-98c0-e7987ff3279a}\0x0405.ini
  • from %TEMP%\{66ccc263-3020-4233-a765-071f638ca991}\{4a515955-a3d4-4fe6-98c0-e7987ff3279a}\_isrb644.rra to %TEMP%\{66ccc263-3020-4233-a765-071f638ca991}\{4a515955-a3d4-4fe6-98c0-e7987ff3279a}\_isres_0x0409.dll
  • from %ProgramFiles(x86)%\installshield installation information\{4a515955-a3d4-4fe6-98c0-e7987ff3279a}\0x04bcc9.rra to %ProgramFiles(x86)%\installshield installation information\{4a515955-a3d4-4fe6-98c0-e7987ff3279a}\0x041f.ini
  • from %TEMP%\{66ccc263-3020-4233-a765-071f638ca991}\{4a515955-a3d4-4fe6-98c0-e7987ff3279a}\defab644.rra to %TEMP%\{66ccc263-3020-4233-a765-071f638ca991}\{4a515955-a3d4-4fe6-98c0-e7987ff3279a}\default.pal
  • from %TEMP%\{66ccc263-3020-4233-a765-071f638ca991}\{4a515955-a3d4-4fe6-98c0-e7987ff3279a}\strib634.rra to %TEMP%\{66ccc263-3020-4233-a765-071f638ca991}\{4a515955-a3d4-4fe6-98c0-e7987ff3279a}\stringtable_0x0409.ips
  • from %TEMP%\{66ccc263-3020-4233-a765-071f638ca991}\{4a515955-a3d4-4fe6-98c0-e7987ff3279a}\strib5d7.rra to %TEMP%\{66ccc263-3020-4233-a765-071f638ca991}\{4a515955-a3d4-4fe6-98c0-e7987ff3279a}\stringar.txt
  • from %TEMP%\{66ccc263-3020-4233-a765-071f638ca991}\{4a515955-a3d4-4fe6-98c0-e7987ff3279a}\strib5e6.rra to %TEMP%\{66ccc263-3020-4233-a765-071f638ca991}\{4a515955-a3d4-4fe6-98c0-e7987ff3279a}\stringbg.txt
  • from %TEMP%\{66ccc263-3020-4233-a765-071f638ca991}\{4a515955-a3d4-4fe6-98c0-e7987ff3279a}\strib5e6.rra to %TEMP%\{66ccc263-3020-4233-a765-071f638ca991}\{4a515955-a3d4-4fe6-98c0-e7987ff3279a}\stringhe.txt
  • from %TEMP%\{66ccc263-3020-4233-a765-071f638ca991}\{4a515955-a3d4-4fe6-98c0-e7987ff3279a}\strib5e6.rra to %TEMP%\{66ccc263-3020-4233-a765-071f638ca991}\{4a515955-a3d4-4fe6-98c0-e7987ff3279a}\stringms.txt
  • from %TEMP%\{66ccc263-3020-4233-a765-071f638ca991}\{4a515955-a3d4-4fe6-98c0-e7987ff3279a}\strib5e6.rra to %TEMP%\{66ccc263-3020-4233-a765-071f638ca991}\{4a515955-a3d4-4fe6-98c0-e7987ff3279a}\stringro.txt
  • from %TEMP%\{66ccc263-3020-4233-a765-071f638ca991}\{4a515955-a3d4-4fe6-98c0-e7987ff3279a}\strib5e6.rra to %TEMP%\{66ccc263-3020-4233-a765-071f638ca991}\{4a515955-a3d4-4fe6-98c0-e7987ff3279a}\stringuk.txt
  • from %TEMP%\{66ccc263-3020-4233-a765-071f638ca991}\{4a515955-a3d4-4fe6-98c0-e7987ff3279a}\strib5f6.rra to %TEMP%\{66ccc263-3020-4233-a765-071f638ca991}\{4a515955-a3d4-4fe6-98c0-e7987ff3279a}\stringvi.txt
  • from %TEMP%\{66ccc263-3020-4233-a765-071f638ca991}\{4a515955-a3d4-4fe6-98c0-e7987ff3279a}\emp_b5f6.rra to %TEMP%\{66ccc263-3020-4233-a765-071f638ca991}\{4a515955-a3d4-4fe6-98c0-e7987ff3279a}\emp_id64.exe
  • from %TEMP%\{66ccc263-3020-4233-a765-071f638ca991}\{4a515955-a3d4-4fe6-98c0-e7987ff3279a}\emp_b5f6.rra to %TEMP%\{66ccc263-3020-4233-a765-071f638ca991}\{4a515955-a3d4-4fe6-98c0-e7987ff3279a}\emp_mpfw7.dll
  • from %TEMP%\{66ccc263-3020-4233-a765-071f638ca991}\{4a515955-a3d4-4fe6-98c0-e7987ff3279a}\langb605.rra to %TEMP%\{66ccc263-3020-4233-a765-071f638ca991}\{4a515955-a3d4-4fe6-98c0-e7987ff3279a}\language.ini
  • from %TEMP%\{66ccc263-3020-4233-a765-071f638ca991}\{4a515955-a3d4-4fe6-98c0-e7987ff3279a}\nsc_b615.rra to %TEMP%\{66ccc263-3020-4233-a765-071f638ca991}\{4a515955-a3d4-4fe6-98c0-e7987ff3279a}\nsc_tbs.chm
  • from %TEMP%\{66ccc263-3020-4233-a765-071f638ca991}\{4a515955-a3d4-4fe6-98c0-e7987ff3279a}\strib615.rra to %TEMP%\{66ccc263-3020-4233-a765-071f638ca991}\{4a515955-a3d4-4fe6-98c0-e7987ff3279a}\stringen.txt
  • from %TEMP%\{66ccc263-3020-4233-a765-071f638ca991}\{4a515955-a3d4-4fe6-98c0-e7987ff3279a}\fontb625.rra to %TEMP%\{66ccc263-3020-4233-a765-071f638ca991}\{4a515955-a3d4-4fe6-98c0-e7987ff3279a}\fontdata.ini
  • from %TEMP%\{66ccc263-3020-4233-a765-071f638ca991}\{4a515955-a3d4-4fe6-98c0-e7987ff3279a}\difxb625.rra to %TEMP%\{66ccc263-3020-4233-a765-071f638ca991}\{4a515955-a3d4-4fe6-98c0-e7987ff3279a}\difxdata.ini
  • from %TEMP%\{66ccc263-3020-4233-a765-071f638ca991}\coreb625.rra to %TEMP%\{66ccc263-3020-4233-a765-071f638ca991}\corecomp.ini
  • from %TEMP%\{66ccc263-3020-4233-a765-071f638ca991}\dotnb625.rra to %TEMP%\{66ccc263-3020-4233-a765-071f638ca991}\dotnetinstaller.exe
  • from %TEMP%\{66ccc263-3020-4233-a765-071f638ca991}\isbeb634.rra to %TEMP%\{66ccc263-3020-4233-a765-071f638ca991}\isbew64.exe
  • from %TEMP%\{66ccc263-3020-4233-a765-071f638ca991}\{4a515955-a3d4-4fe6-98c0-e7987ff3279a}\nsc_b5c7.rra to %TEMP%\{66ccc263-3020-4233-a765-071f638ca991}\{4a515955-a3d4-4fe6-98c0-e7987ff3279a}\nsc_tbsuk.chm
  • from %TEMP%\b3b5.rra to %ProgramFiles(x86)%\installshield installation information\{4a515955-a3d4-4fe6-98c0-e7987ff3279a}\setup.ilg
Substitutes the following files
  • %TEMP%\{66ccc263-3020-4233-a765-071f638ca991}\{4a515955-a3d4-4fe6-98c0-e7987ff3279a}\emp_b4ae.rra
  • %ProgramFiles(x86)%\installshield installation information\{4a515955-a3d4-4fe6-98c0-e7987ff3279a}\0x04bce8.rra
  • %ProgramFiles(x86)%\epson projector\easymp network projection v2\emp_bd75.rra
  • %ProgramFiles(x86)%\epson projector\easymp network projection v2\emp_bd94.rra
  • %ProgramFiles(x86)%\epson projector\easymp network projection v2\emp_bdb3.rra
  • %ProgramFiles(x86)%\epson projector\easymp network projection v2\emp_be30.rra
  • %ProgramFiles(x86)%\epson projector\easymp network projection v2\emp_be7e.rra
  • %ProgramFiles(x86)%\epson projector\easymp network projection v2\amd64\emp_bf1a.rra
  • %ProgramFiles(x86)%\epson projector\easymp network projection v2\emp_bf68.rra
  • %ProgramFiles(x86)%\epson projector\easymp network projection v2\x64driver\emp_bf29.rra
  • %ProgramFiles(x86)%\epson projector\easymp network projection v2\x86\emp_bf29.rra
  • %ProgramFiles(x86)%\epson projector\easymp network projection v2\emp_bf39.rra
  • %ProgramFiles(x86)%\epson projector\easymp network projection v2\emp_bf49.rra
  • %ProgramFiles(x86)%\epson projector\easymp network projection v2\emp_bf4a.rra
  • %ProgramFiles(x86)%\epson projector\easymp network projection v2\emp_bf58.rra
  • %ProgramFiles(x86)%\installshield installation information\{4a515955-a3d4-4fe6-98c0-e7987ff3279a}\0x04bcd9.rra
  • %ProgramFiles(x86)%\epson projector\easymp network projection v2\emp_bebc.rra
  • %ProgramFiles(x86)%\installshield installation information\{4a515955-a3d4-4fe6-98c0-e7987ff3279a}\0x04bcc9.rra
  • %TEMP%\{66ccc263-3020-4233-a765-071f638ca991}\{4a515955-a3d4-4fe6-98c0-e7987ff3279a}\nsc_b598.rra
  • %TEMP%\{66ccc263-3020-4233-a765-071f638ca991}\{4a515955-a3d4-4fe6-98c0-e7987ff3279a}\emp_b4be.rra
  • %TEMP%\{66ccc263-3020-4233-a765-071f638ca991}\{4a515955-a3d4-4fe6-98c0-e7987ff3279a}\emp_b4cd.rra
  • %TEMP%\{66ccc263-3020-4233-a765-071f638ca991}\{4a515955-a3d4-4fe6-98c0-e7987ff3279a}\enc_b4dd.rra
  • %TEMP%\{66ccc263-3020-4233-a765-071f638ca991}\{4a515955-a3d4-4fe6-98c0-e7987ff3279a}\ep_ib579.rra
  • %TEMP%\{66ccc263-3020-4233-a765-071f638ca991}\{4a515955-a3d4-4fe6-98c0-e7987ff3279a}\langb589.rra
  • %TEMP%\{66ccc263-3020-4233-a765-071f638ca991}\{4a515955-a3d4-4fe6-98c0-e7987ff3279a}\langb598.rra
  • %TEMP%\{66ccc263-3020-4233-a765-071f638ca991}\{4a515955-a3d4-4fe6-98c0-e7987ff3279a}\nsc_b5a8.rra
  • %ProgramFiles(x86)%\installshield installation information\{4a515955-a3d4-4fe6-98c0-e7987ff3279a}\0x04bcaa.rra
  • %TEMP%\{66ccc263-3020-4233-a765-071f638ca991}\{4a515955-a3d4-4fe6-98c0-e7987ff3279a}\nsc_b5c7.rra
  • %TEMP%\{66ccc263-3020-4233-a765-071f638ca991}\{4a515955-a3d4-4fe6-98c0-e7987ff3279a}\strib5e6.rra
  • %TEMP%\{66ccc263-3020-4233-a765-071f638ca991}\{4a515955-a3d4-4fe6-98c0-e7987ff3279a}\emp_b5f6.rra
  • %TEMP%\rarsfx0\setup.log
  • %ProgramFiles(x86)%\installshield installation information\{4a515955-a3d4-4fe6-98c0-e7987ff3279a}\databb33.rra
  • %ProgramFiles(x86)%\installshield installation information\{4a515955-a3d4-4fe6-98c0-e7987ff3279a}\0x04bc9a.rra
  • %ProgramFiles(x86)%\installshield installation information\{4a515955-a3d4-4fe6-98c0-e7987ff3279a}\0x04bcb9.rra
  • %ProgramFiles(x86)%\epson projector\easymp network projection v2\enp_bf77.rra
Miscellaneous
Searches for the following windows
  • ClassName: 'EDIT' WindowName: ''
Creates and executes the following
  • '%TEMP%\rarsfx0\setup.exe' -ES /s
  • '%TEMP%\{66ccc263-3020-4233-a765-071f638ca991}\isbew64.exe' {EFB7539B-24F3-46B6-AF6E-3B021B51EFEF}:{2B16D67B-5138-4FCC-80D1-393D804C1A7D}
  • '%TEMP%\{66ccc263-3020-4233-a765-071f638ca991}\{4a515955-a3d4-4fe6-98c0-e7987ff3279a}\emp_pfcp.exe'
  • '%TEMP%\{66ccc263-3020-4233-a765-071f638ca991}\{4a515955-a3d4-4fe6-98c0-e7987ff3279a}\emp_pfcp.exe' ' (with hidden window)
  • '%ProgramFiles(x86)%\epson projector\easymp network projection v2\emp_nswlsv.exe' /service' (with hidden window)
  • '%WINDIR%\syswow64\net.exe' stop EMP_NSWLSV' (with hidden window)
  • '%WINDIR%\syswow64\net.exe' start EMP_NSWLSV' (with hidden window)
Executes the following
  • '%WINDIR%\syswow64\net1.exe' stop EMP_NSWLSV
  • '%WINDIR%\syswow64\net.exe' start EMP_NSWLSV
  • '%WINDIR%\syswow64\net1.exe' start EMP_NSWLSV

Рекомендации по лечению

  1. В случае если операционная система способна загрузиться (в штатном режиме или режиме защиты от сбоев), скачайте лечащую утилиту Dr.Web CureIt! и выполните с ее помощью полную проверку вашего компьютера, а также используемых вами переносных носителей информации.
  2. Если загрузка операционной системы невозможна, измените настройки BIOS вашего компьютера, чтобы обеспечить возможность загрузки ПК с компакт-диска или USB-накопителя. Скачайте образ аварийного диска восстановления системы Dr.Web® LiveDisk или утилиту записи Dr.Web® LiveDisk на USB-накопитель, подготовьте соответствующий носитель. Загрузив компьютер с использованием данного носителя, выполните его полную проверку и лечение обнаруженных угроз.
Скачать Dr.Web

По серийному номеру

Выполните полную проверку системы с использованием Антивируса Dr.Web Light для macOS. Данный продукт можно загрузить с официального сайта Apple App Store.

На загруженной ОС выполните полную проверку всех дисковых разделов с использованием продукта Антивирус Dr.Web для Linux.

Скачать Dr.Web

По серийному номеру

  1. Если мобильное устройство функционирует в штатном режиме, загрузите и установите на него бесплатный антивирусный продукт Dr.Web для Android Light. Выполните полную проверку системы и используйте рекомендации по нейтрализации обнаруженных угроз.
  2. Если мобильное устройство заблокировано троянцем-вымогателем семейства Android.Locker (на экране отображается обвинение в нарушении закона, требование выплаты определенной денежной суммы или иное сообщение, мешающее нормальной работе с устройством), выполните следующие действия:
    • загрузите свой смартфон или планшет в безопасном режиме (в зависимости от версии операционной системы и особенностей конкретного мобильного устройства эта процедура может быть выполнена различными способами; обратитесь за уточнением к инструкции, поставляемой вместе с приобретенным аппаратом, или напрямую к его производителю);
    • после активации безопасного режима установите на зараженное устройство бесплатный антивирусный продукт Dr.Web для Android Light и произведите полную проверку системы, выполнив рекомендации по нейтрализации обнаруженных угроз;
    • выключите устройство и включите его в обычном режиме.

Подробнее о Dr.Web для Android

Демо бесплатно на 14 дней

Выдаётся при установке