Trojan.PWS.Banker1.25571

Technical Information

To ensure autorun and distribution

Modifies the following registry keys

[HKCU\Software\Microsoft\Windows\CurrentVersion\Run] 'rwyNCMc' = '%WINDIR%\SysWOW64\rwyNCMc.exe'

Modifies file system

Creates the following files

%TEMP%\is-7ifc9.tmp\<File name>.tmp
%WINDIR%\syswow64\rwyskins\Г§ГЇ\1\is-1mkeg.tmp
%WINDIR%\syswow64\rwyskins\Г§ГЇ\1\is-g2k9l.tmp
%WINDIR%\syswow64\rwyskins\Г§ГЇ\1\is-slqlh.tmp
%WINDIR%\syswow64\rwyskins\Г§ГЇ\1\is-tivev.tmp
%WINDIR%\syswow64\rwyskins\Г§ГЇ\1\is-ef22t.tmp
%WINDIR%\syswow64\rwyskins\Г§ГЇ\1\is-q61b5.tmp
%WINDIR%\syswow64\rwyskins\Г§ГЇ\1\is-l0q78.tmp
%WINDIR%\syswow64\rwyskins\Г§ГЇ\1\is-5mpkn.tmp
%WINDIR%\syswow64\rwyskins\Г§ГЇ\1\is-rogdf.tmp
%WINDIR%\syswow64\rwyskins\Г§ГЇ\1\is-0jp7f.tmp
%WINDIR%\syswow64\rwyskins\Г§ГЇ\1\is-g8omd.tmp
%WINDIR%\syswow64\rwyskins\Г§ГЇ\1\is-gupdc.tmp
%WINDIR%\syswow64\rwyskins\Г§ГЇ\1\is-j06qd.tmp
%WINDIR%\syswow64\rwyskins\Г§ГЇ\1\is-imldr.tmp
%WINDIR%\syswow64\rwyskins\Г§ГЇ\1\is-a84k6.tmp
%WINDIR%\syswow64\rwyskins\Г§ГЇ\1\is-g1p5a.tmp
%WINDIR%\syswow64\rwyskins\Г§ГЇ\1\is-hpfpv.tmp
%WINDIR%\syswow64\rwyskins\Г§ГЇ\1\is-63g1i.tmp
%WINDIR%\syswow64\rwyskins\Г§ГЇ\1\is-6tsvu.tmp
%WINDIR%\syswow64\rwyskins\Г§ГЇ\1\is-eph6l.tmp
%WINDIR%\syswow64\rwyskins\Г§ГЇ\1\is-59r0e.tmp
%WINDIR%\syswow64\rwyskins\Г§ГЇ\1\is-pl0kn.tmp
%WINDIR%\syswow64\rwyskins\Г§ГЇ\1\is-afqjm.tmp
%WINDIR%\syswow64\rwyskins\Г§ГЇ\1\is-54v7o.tmp
%WINDIR%\syswow64\rwyskins\Г§ГЇ\6\is-vs9u3.tmp
%WINDIR%\syswow64\rwyskins\Г§ГЇ\5\is-4rckf.tmp
%WINDIR%\syswow64\rwyskins\Г§ГЇ\5\is-i35f0.tmp
%WINDIR%\syswow64\rwyskins\Г§ГЇ\5\is-8idm5.tmp
%WINDIR%\syswow64\rwyskins\Г§ГЇ\5\is-kiece.tmp
%WINDIR%\syswow64\rwyskins\Г§ГЇ\5\is-37f9i.tmp
%WINDIR%\syswow64\rwyskins\Г§ГЇ\4\is-k9mvq.tmp
%WINDIR%\syswow64\rwyskins\Г§ГЇ\4\is-pjpmu.tmp
%WINDIR%\syswow64\rwyskins\Г§ГЇ\4\is-ecmaq.tmp
%WINDIR%\syswow64\rwyskins\Г§ГЇ\4\is-qdkhq.tmp
%WINDIR%\syswow64\rwyskins\Г§ГЇ\1\is-n1tpr.tmp
%WINDIR%\syswow64\rwyskins\Г§ГЇ\1\is-h6t7u.tmp
%WINDIR%\syswow64\rwyskins\Г§ГЇ\4\is-b2fjd.tmp
%WINDIR%\syswow64\rwyskins\Г§ГЇ\3\is-hftih.tmp
%WINDIR%\syswow64\rwyskins\Г§ГЇ\3\is-q9ank.tmp
%WINDIR%\syswow64\rwyskins\Г§ГЇ\3\is-3jmpm.tmp
%WINDIR%\syswow64\rwyskins\Г§ГЇ\3\is-6fa4i.tmp
%WINDIR%\syswow64\rwyskins\Г§ГЇ\3\is-0pv4v.tmp
%WINDIR%\syswow64\rwyskins\Г§ГЇ\3\is-lp1b3.tmp
%WINDIR%\syswow64\rwyskins\Г§ГЇ\2\is-7vru6.tmp
%WINDIR%\syswow64\rwyskins\Г§ГЇ\2\is-1aa0e.tmp
%WINDIR%\syswow64\rwyskins\Г§ГЇ\1\is-avbmb.tmp
%WINDIR%\syswow64\rwyskins\Г§ГЇ\4\is-opkr1.tmp
%WINDIR%\syswow64\rwyskins\Г§ГЇ\1\is-1l17v.tmp
%WINDIR%\syswow64\rwyskins\Г§ГЇ\1\is-cmim6.tmp
%WINDIR%\syswow64\rwyskins\Г§ГЇ\is-2tv62.tmp
%WINDIR%\syswow64\rwyskins\Г§ГЇ\6\is-m8gej.tmp
%WINDIR%\syswow64\rwyskins\Г¤В¬ГЁГЇ\4\is-uh4vj.tmp
%WINDIR%\syswow64\rwyskins\Г¤В¬ГЁГЇ\5\is-kc3i8.tmp
%WINDIR%\syswow64\rwyskins\Г¤В¬ГЁГЇ\5\is-jimf0.tmp
%WINDIR%\syswow64\rwyskins\Г¤В¬ГЁГЇ\5\is-jquoq.tmp
%WINDIR%\syswow64\rwyskins\Г¤В¬ГЁГЇ\5\is-0v9ve.tmp
%WINDIR%\syswow64\rwyskins\Г¤В¬ГЁГЇ\4\is-q9dq0.tmp
%WINDIR%\syswow64\rwyskins\Г¤В¬ГЁГЇ\4\is-984ao.tmp
%WINDIR%\syswow64\rwyskins\Г¤В¬ГЁГЇ\4\is-f3biv.tmp
%WINDIR%\syswow64\rwyskins\Г¤В¬ГЁГЇ\4\is-c74a2.tmp
%WINDIR%\syswow64\rwyskins\Г¤В¬ГЁГЇ\4\is-rc8f4.tmp
%WINDIR%\syswow64\rwyskins\Г¤В¬ГЁГЇ\5\is-hku7o.tmp
%WINDIR%\syswow64\rwyskins\Г¤В¬ГЁГЇ\6\is-kv9de.tmp
%WINDIR%\syswow64\rwyskins\Г§ГЇ\6\is-4u3lf.tmp
%WINDIR%\syswow64\rwyskins\Г¤В¬ГЁГЇ\3\is-arvhs.tmp
%WINDIR%\syswow64\rwyskins\Г¤В¬ГЁГЇ\3\is-pg60o.tmp
%WINDIR%\syswow64\rwyskins\Г¤В¬ГЁГЇ\3\is-n4kgi.tmp
%WINDIR%\syswow64\rwyskins\Г¤В¬ГЁГЇ\3\is-0c6h6.tmp
%WINDIR%\syswow64\rwyskins\Г¤В¬ГЁГЇ\3\is-n0s6i.tmp
%WINDIR%\syswow64\rwyskins\Г¤В¬ГЁГЇ\2\is-4a7lf.tmp
%WINDIR%\syswow64\rwyskins\Г¤В¬ГЁГЇ\2\is-3a3cg.tmp
%WINDIR%\syswow64\rwyskins\Г¤В¬ГЁГЇ\1\is-02lc5.tmp
%WINDIR%\syswow64\rwyskins\Г¤В¬ГЁГЇ\1\is-856lb.tmp
%WINDIR%\syswow64\rwyskins\Г¤В¬ГЁГЇ\3\is-3ph8s.tmp
%WINDIR%\syswow64\rwyskins\Г§ГЇ\4\is-4seh9.tmp
%WINDIR%\syswow64\rwyskins\Г¤В¬ГЁГЇ\6\is-uc6d3.tmp
%WINDIR%\syswow64\rwyskins\Г¤В¬ГЁГЇ\6\images\is-tiq07.tmp
%WINDIR%\syswow64\rwyskins\Г¤В¬ГЁГЇ\6\images\is-jh99i.tmp
%WINDIR%\syswow64\rwyskins\Г¤В¬ГЁГЇ\7\is-2eip7.tmp
%WINDIR%\syswow64\rwyskins\Г¤В¬ГЁГЇ\7\is-fispn.tmp
%WINDIR%\syswow64\rwyskins\Г¤В¬ГЁГЇ\7\is-6ns72.tmp
%WINDIR%\syswow64\rwyskins\Г¤В¬ГЁГЇ\7\is-m86p6.tmp
%WINDIR%\syswow64\rwyskins\Г¤В¬ГЁГЇ\7\is-iv0f8.tmp
%WINDIR%\syswow64\rwyskins\Г¤В¬ГЁГЇ\7\is-2impt.tmp
%WINDIR%\syswow64\rwyskins\Г¤В¬ГЁГЇ\6\images\is-85t3m.tmp
%WINDIR%\syswow64\rwyskins\Г¤В¬ГЁГЇ\6\images\is-4iqim.tmp
%WINDIR%\syswow64\rwyskins\Г¤В¬ГЁГЇ\6\images\is-of72i.tmp
%WINDIR%\syswow64\rwyskins\Г¤В¬ГЁГЇ\7\is-ra81v.tmp
%WINDIR%\syswow64\rwyskins\Г¤В¬ГЁГЇ\6\is-5lorl.tmp
%WINDIR%\syswow64\rwyskins\Г¤В¬ГЁГЇ\6\is-pb4lp.tmp
%WINDIR%\syswow64\rwyskins\Г¤В¬ГЁГЇ\6\images\is-67c1c.tmp
%WINDIR%\syswow64\rwyskins\Г¤В¬ГЁГЇ\6\images\is-u00hu.tmp
%WINDIR%\syswow64\rwyskins\Г¤В¬ГЁГЇ\6\images\is-euq4t.tmp
%WINDIR%\syswow64\rwyskins\Г¤В¬ГЁГЇ\6\images\is-l4ato.tmp
%WINDIR%\syswow64\rwyskins\Г¤В¬ГЁГЇ\6\images\is-4k0tv.tmp
%WINDIR%\syswow64\rwyskins\Г¤В¬ГЁГЇ\6\images\is-vpug8.tmp
%WINDIR%\syswow64\rwyskins\Г¤В¬ГЁГЇ\6\images\is-0hltv.tmp
%WINDIR%\syswow64\rwyskins\Г¤В¬ГЁГЇ\6\images\is-udtpo.tmp
%WINDIR%\syswow64\rwyskins\Г¤В¬ГЁГЇ\6\is-salei.tmp
%WINDIR%\syswow64\rwyskins\Г¤В¬ГЁГЇ\6\images\is-u96lq.tmp
%WINDIR%\syswow64\rwyskins\В¶В¬\3\is-q36um.tmp
%WINDIR%\syswow64\rwyskins\Г§ГЇ\6\is-pfl1c.tmp
%WINDIR%\syswow64\rwyskins\ГЇГ¤\6\is-rq4g9.tmp
%WINDIR%\syswow64\rwyskins\ГЇГ¤\6\is-5nggq.tmp
%WINDIR%\syswow64\rwyskins\ГЇГ¤\6\is-m77s6.tmp
%WINDIR%\syswow64\rwyskins\ГЇГ¤\5\is-vgmqa.tmp
%WINDIR%\syswow64\rwyskins\ГЇГ¤\5\is-rag0p.tmp
%WINDIR%\syswow64\rwyskins\ГЇГ¤\5\is-0r8hh.tmp
%WINDIR%\syswow64\rwyskins\ГЇГ¤\5\is-f9ndn.tmp
%WINDIR%\syswow64\rwyskins\ГЇГ¤\5\is-l9e00.tmp
%WINDIR%\syswow64\rwyskins\ГЇГ¤\4\is-4id4t.tmp
%WINDIR%\syswow64\rwyskins\ГЇГ¤\4\is-iqoch.tmp
%WINDIR%\syswow64\rwyskins\ГЇГ¤\6\is-pts6p.tmp
%WINDIR%\syswow64\rwyskins\ГЇГ¤\4\is-8gjkh.tmp
%WINDIR%\syswow64\rwyskins\ГЇГ¤\4\is-jeg0u.tmp
%WINDIR%\syswow64\rwyskins\ГЇГ¤\4\is-v5f95.tmp
%WINDIR%\syswow64\rwyskins\ГЇГ¤\4\is-50tur.tmp
%WINDIR%\syswow64\rwyskins\ГЇГ¤\3\is-ofgb1.tmp
%WINDIR%\syswow64\rwyskins\ГЇГ¤\3\is-7urt4.tmp
%WINDIR%\syswow64\rwyskins\ГЇГ¤\3\is-6qp2j.tmp
%WINDIR%\syswow64\rwyskins\ГЇГ¤\3\is-h23uu.tmp
%WINDIR%\syswow64\rwyskins\ГЇГ¤\3\is-ue1mr.tmp
%WINDIR%\syswow64\rwyskins\ГЇГ¤\3\is-fp55m.tmp
%WINDIR%\syswow64\rwyskins\ГЇГ¤\2\is-50o83.tmp
%WINDIR%\syswow64\rwyskins\ГЇГ¤\4\is-33ed5.tmp
%WINDIR%\syswow64\rwyskins\ГЇГ¤\2\is-42hb1.tmp
%WINDIR%\syswow64\rwyskins\Г¤В¬ГЁГЇ\1\is-r0mp1.tmp
%WINDIR%\syswow64\rwyskins\ГЇГ¤\1\is-2mg1s.tmp
%WINDIR%\syswow64\is-1sqfr.tmp
%WINDIR%\syswow64\is-4tg21.tmp
%WINDIR%\syswow64\is-af3jn.tmp
%WINDIR%\syswow64\rwyskins\ГЇГ¤\7\is-q8ung.tmp
%WINDIR%\syswow64\rwyskins\ГЇГ¤\7\is-om3bg.tmp
%WINDIR%\syswow64\rwyskins\ГЇГ¤\7\is-n7a6i.tmp
%WINDIR%\syswow64\rwyskins\ГЇГ¤\7\is-ogp7k.tmp
%WINDIR%\syswow64\rwyskins\ГЇГ¤\7\is-cvgig.tmp
%WINDIR%\syswow64\rwyskins\ГЇГ¤\7\is-q5q8n.tmp
%WINDIR%\syswow64\rwyskins\ГЇГ¤\7\is-0np1q.tmp
%WINDIR%\syswow64\rwyskins\ГЇГ¤\6\images\is-pu3n6.tmp
%WINDIR%\syswow64\rwyskins\ГЇГ¤\6\is-02tll.tmp
%WINDIR%\syswow64\rwyskins\ГЇГ¤\6\images\is-ec3pm.tmp
%WINDIR%\syswow64\rwyskins\ГЇГ¤\6\images\is-dqlh0.tmp
%WINDIR%\syswow64\rwyskins\ГЇГ¤\6\images\is-jcr64.tmp
%WINDIR%\syswow64\rwyskins\ГЇГ¤\6\images\is-6jag6.tmp
%WINDIR%\syswow64\rwyskins\ГЇГ¤\6\images\is-g7ikl.tmp
%WINDIR%\syswow64\rwyskins\ГЇГ¤\6\images\is-1485d.tmp
%WINDIR%\syswow64\rwyskins\ГЇГ¤\6\images\is-jhhd6.tmp
%WINDIR%\syswow64\rwyskins\ГЇГ¤\6\images\is-suu5d.tmp
%WINDIR%\syswow64\rwyskins\ГЇГ¤\6\images\is-l2pjt.tmp
%WINDIR%\syswow64\rwyskins\ГЇГ¤\6\images\is-pdj48.tmp
%WINDIR%\syswow64\rwyskins\ГЇГ¤\6\images\is-vr80a.tmp
%WINDIR%\syswow64\rwyskins\ГЇГ¤\6\images\is-cf3j5.tmp
%WINDIR%\syswow64\rwyskins\Г¤В¬ГЁГЇ\4\is-i3c24.tmp
%WINDIR%\syswow64\rwyskins\ГЇГ¤\1\is-tfvsu.tmp
%WINDIR%\syswow64\rwyskins\ГЇГ¤\1\is-9ff4r.tmp
%WINDIR%\syswow64\rwyskins\Г§ГЇ\7\is-1uml0.tmp
%WINDIR%\syswow64\rwyskins\Г§ГЇ\7\is-pa6id.tmp
%WINDIR%\syswow64\rwyskins\Г§ГЇ\7\is-iv2rb.tmp
%WINDIR%\syswow64\rwyskins\Г§ГЇ\7\is-hrh1j.tmp
%WINDIR%\syswow64\rwyskins\Г§ГЇ\7\is-he0pf.tmp
%WINDIR%\syswow64\rwyskins\Г§ГЇ\7\is-kct7t.tmp
%WINDIR%\syswow64\rwyskins\Г§ГЇ\7\is-7ufbe.tmp
%WINDIR%\syswow64\rwyskins\Г§ГЇ\6\images\is-a5enq.tmp
%WINDIR%\syswow64\rwyskins\Г§ГЇ\6\images\is-rddeh.tmp
%WINDIR%\syswow64\rwyskins\ГЇГ¤\1\is-2ge9m.tmp
%WINDIR%\syswow64\rwyskins\Г§ГЇ\6\images\is-lj13t.tmp
%WINDIR%\syswow64\rwyskins\Г§ГЇ\6\images\is-4jg95.tmp
%WINDIR%\syswow64\rwyskins\Г§ГЇ\6\images\is-3kbvd.tmp
%WINDIR%\syswow64\rwyskins\Г§ГЇ\6\images\is-gid8m.tmp
%WINDIR%\syswow64\rwyskins\Г§ГЇ\6\images\is-sut00.tmp
%WINDIR%\syswow64\rwyskins\Г§ГЇ\6\images\is-vqjht.tmp
%WINDIR%\syswow64\rwyskins\Г§ГЇ\6\images\is-coqbb.tmp
%WINDIR%\syswow64\rwyskins\Г§ГЇ\6\images\is-0cisf.tmp
%WINDIR%\syswow64\rwyskins\Г§ГЇ\6\images\is-augiv.tmp
%WINDIR%\syswow64\rwyskins\Г§ГЇ\6\images\is-431ia.tmp
%WINDIR%\syswow64\rwyskins\Г§ГЇ\6\images\is-lmv5k.tmp
%WINDIR%\syswow64\rwyskins\Г§ГЇ\6\images\is-oq3j8.tmp
%WINDIR%\syswow64\rwyskins\ГЇГ¤\1\is-83jas.tmp
%WINDIR%\syswow64\rwyskins\Г§ГЇ\6\is-mgb9h.tmp
%WINDIR%\syswow64\rwyskins\ГЇГ¤\is-qd2e8.tmp
%WINDIR%\syswow64\rwyskins\ГЇГ¤\1\is-6d1td.tmp
%WINDIR%\syswow64\rwyskins\ГЇГ¤\1\is-mrihb.tmp
%WINDIR%\syswow64\rwyskins\ГЇГ¤\1\is-g930v.tmp
%WINDIR%\syswow64\rwyskins\ГЇГ¤\1\is-r4dob.tmp
%WINDIR%\syswow64\rwyskins\ГЇГ¤\1\is-6vjk9.tmp
%WINDIR%\syswow64\rwyskins\ГЇГ¤\1\is-5sjuh.tmp
%WINDIR%\syswow64\rwyskins\ГЇГ¤\1\is-dm807.tmp
%WINDIR%\syswow64\rwyskins\ГЇГ¤\1\is-5345j.tmp
%WINDIR%\syswow64\rwyskins\ГЇГ¤\1\is-liohu.tmp
%WINDIR%\syswow64\rwyskins\ГЇГ¤\1\is-ajsml.tmp
%WINDIR%\syswow64\rwyskins\ГЇГ¤\1\is-qjk9s.tmp
%WINDIR%\syswow64\rwyskins\ГЇГ¤\1\is-ig656.tmp
%WINDIR%\syswow64\rwyskins\ГЇГ¤\1\is-u28sj.tmp
%WINDIR%\syswow64\rwyskins\ГЇГ¤\1\is-phsqv.tmp
%WINDIR%\syswow64\rwyskins\ГЇГ¤\1\is-og0f3.tmp
%WINDIR%\syswow64\rwyskins\ГЇГ¤\1\is-1n76j.tmp
%WINDIR%\syswow64\rwyskins\ГЇГ¤\1\is-96kuh.tmp
%WINDIR%\syswow64\rwyskins\ГЇГ¤\1\is-olm0p.tmp
%WINDIR%\syswow64\rwyskins\ГЇГ¤\1\is-62139.tmp
%WINDIR%\syswow64\rwyskins\ГЇГ¤\1\is-5upkq.tmp
%WINDIR%\syswow64\rwyskins\ГЇГ¤\1\is-ffn5v.tmp
%WINDIR%\syswow64\rwyskins\ГЇГ¤\1\is-7i5h8.tmp
%WINDIR%\syswow64\rwyskins\ГЇГ¤\1\is-p543u.tmp
%WINDIR%\syswow64\rwyskins\ГЇГ¤\1\is-1vl9i.tmp
%WINDIR%\syswow64\rwyskins\Г¤В¬ГЁГЇ\1\is-orj87.tmp
%WINDIR%\syswow64\rwyskins\Г¤В¬ГЁГЇ\1\is-egkn3.tmp
%WINDIR%\syswow64\rwyskins\Г¤В¬ГЁГЇ\1\is-rf8ah.tmp
%WINDIR%\syswow64\rwyskins\ВґВє\3\is-4k01n.tmp
%WINDIR%\syswow64\rwyskins\ВґВє\4\is-756r5.tmp
%WINDIR%\syswow64\rwyskins\ВґВє\4\is-qs9hp.tmp
%WINDIR%\syswow64\rwyskins\ВґВє\4\is-m44vv.tmp
%WINDIR%\syswow64\rwyskins\ВґВє\4\is-99og8.tmp
%WINDIR%\syswow64\rwyskins\ВґВє\4\is-o56ic.tmp
%WINDIR%\syswow64\rwyskins\ВґВє\4\is-tgmjr.tmp
%WINDIR%\syswow64\rwyskins\ВґВє\3\is-cvs4v.tmp
%WINDIR%\syswow64\rwyskins\ВґВє\3\is-dbtd2.tmp
%WINDIR%\syswow64\rwyskins\ВґВє\3\is-4tukn.tmp
%WINDIR%\syswow64\rwyskins\ВґВє\1\is-rtkq6.tmp
%WINDIR%\syswow64\rwyskins\ВґВє\5\is-jfrhf.tmp
%WINDIR%\syswow64\rwyskins\ВґВє\1\is-qb7ep.tmp
%WINDIR%\syswow64\rwyskins\ВґВє\2\is-kokuf.tmp
%WINDIR%\syswow64\rwyskins\ВґВє\2\is-cjbql.tmp
%WINDIR%\syswow64\rwyskins\ВґВє\1\is-etlvh.tmp
%WINDIR%\syswow64\rwyskins\ВґВє\1\is-kbv6p.tmp
%WINDIR%\syswow64\rwyskins\ВґВє\1\is-flqfs.tmp
%WINDIR%\syswow64\rwyskins\ВґВє\1\is-im8hu.tmp
%WINDIR%\syswow64\rwyskins\ВґВє\1\is-egj5j.tmp
%WINDIR%\syswow64\rwyskins\ВґВє\1\is-fonq6.tmp
%WINDIR%\syswow64\rwyskins\ВґВє\1\is-jddd5.tmp
%WINDIR%\syswow64\rwyskins\ВґВє\3\is-sjluq.tmp
%WINDIR%\syswow64\rwyskins\ВґВє\3\is-jj42o.tmp
%WINDIR%\syswow64\rwyskins\ВґВє\5\is-9s1ga.tmp
%WINDIR%\syswow64\rwyskins\ВґВє\6\images\is-o6r4l.tmp
%WINDIR%\syswow64\rwyskins\ВґВє\6\images\is-1bk6p.tmp
%WINDIR%\syswow64\rwyskins\ВґВє\7\is-qa2db.tmp
%WINDIR%\syswow64\rwyskins\ВґВє\6\images\is-4lugb.tmp
%WINDIR%\syswow64\rwyskins\ВґВє\6\images\is-fn03p.tmp
%WINDIR%\syswow64\rwyskins\ВґВє\6\images\is-bf6vt.tmp
%WINDIR%\syswow64\rwyskins\ВґВє\6\images\is-4tv40.tmp
%WINDIR%\syswow64\rwyskins\ВґВє\6\images\is-evidf.tmp
%WINDIR%\syswow64\rwyskins\ВґВє\6\images\is-cjm9d.tmp
%WINDIR%\syswow64\rwyskins\ВґВє\6\images\is-o2gb8.tmp
%WINDIR%\syswow64\rwyskins\ВґВє\6\images\is-58nnl.tmp
%WINDIR%\syswow64\rwyskins\ВґВє\7\is-kjpll.tmp
%WINDIR%\syswow64\rwyskins\ВґВє\5\is-t52mq.tmp
%WINDIR%\syswow64\rwyskins\ВґВє\5\is-231kg.tmp
%WINDIR%\syswow64\rwyskins\ВґВє\6\images\is-p54ij.tmp
%WINDIR%\syswow64\rwyskins\ВґВє\6\images\is-h6dhj.tmp
%WINDIR%\syswow64\rwyskins\ВґВє\6\images\is-5mrpr.tmp
%WINDIR%\syswow64\rwyskins\ВґВє\6\is-ctg64.tmp
%WINDIR%\syswow64\rwyskins\ВґВє\6\is-49831.tmp
%WINDIR%\syswow64\rwyskins\ВґВє\6\is-543n2.tmp
%WINDIR%\syswow64\rwyskins\ВґВє\6\is-nu4h4.tmp
%WINDIR%\syswow64\rwyskins\ВґВє\6\is-pkro6.tmp
%WINDIR%\syswow64\rwyskins\ВґВє\5\is-ri0r8.tmp
%WINDIR%\syswow64\rwyskins\ВґВє\6\images\is-m5nat.tmp
%WINDIR%\syswow64\is-4sjk3.tmp
%WINDIR%\syswow64\rwyskins\ВґВє\7\is-dt8jh.tmp
%WINDIR%\syswow64\rwyskins\ВґВє\1\is-fnqui.tmp
%WINDIR%\syswow64\is-j5238.tmp
%WINDIR%\syswow64\is-ud19f.tmp
%WINDIR%\syswow64\is-8micf.tmp
%WINDIR%\syswow64\is-g13ka.tmp
%WINDIR%\syswow64\is-1jmah.tmp
%WINDIR%\syswow64\is-usc51.tmp
%WINDIR%\syswow64\is-o635p.tmp
%WINDIR%\syswow64\is-h3rqp.tmp
%WINDIR%\syswow64\is-e7ih7.tmp
%WINDIR%\syswow64\is-qtriv.tmp
%WINDIR%\syswow64\rwyskins\ВґВє\1\is-n4a29.tmp
%WINDIR%\syswow64\rwyskins\is-goqpj.tmp
%WINDIR%\syswow64\is-iv6l4.tmp
%WINDIR%\syswow64\is-1d23h.tmp
%WINDIR%\syswow64\is-dtb9s.tmp
%WINDIR%\syswow64\is-1ql80.tmp
%WINDIR%\syswow64\is-dfgrf.tmp
%TEMP%\is-1rnb0.tmp\innocallback.dll
%TEMP%\is-1rnb0.tmp\rwysetup.dll
%TEMP%\is-1rnb0.tmp\_isetup\_shfoldr.dll
%TEMP%\is-1rnb0.tmp\_isetup\_setup64.tmp
%TEMP%\is-1rnb0.tmp\_isetup\_regdll.tmp
%WINDIR%\syswow64\is-soap5.tmp
%WINDIR%\syswow64\rwyskins\ВґВє\1\is-3gn35.tmp
%WINDIR%\syswow64\rwyskins\ВґВє\is-pnmtv.tmp
%WINDIR%\syswow64\rwyskins\ВґВє\1\is-ebgoe.tmp
%WINDIR%\syswow64\rwyskins\ВґВє\1\is-dubk2.tmp
%WINDIR%\syswow64\rwyskins\ВґВє\1\is-79mcf.tmp
%WINDIR%\syswow64\rwyskins\ВґВє\1\is-2a9ag.tmp
%WINDIR%\syswow64\rwyskins\ВґВє\1\is-u9lsc.tmp
%WINDIR%\syswow64\rwyskins\ВґВє\1\is-ig1gc.tmp
%WINDIR%\syswow64\rwyskins\ВґВє\1\is-qopq8.tmp
%WINDIR%\syswow64\rwyskins\ВґВє\1\is-b5fhs.tmp
%WINDIR%\syswow64\rwyskins\ВґВє\1\is-4bqpk.tmp
%WINDIR%\syswow64\rwyskins\ВґВє\1\is-juiir.tmp
%WINDIR%\syswow64\rwyskins\ВґВє\1\is-ab6rb.tmp
%WINDIR%\syswow64\rwyskins\ВґВє\1\is-4533o.tmp
%WINDIR%\syswow64\rwyskins\ВґВє\1\is-ubvjf.tmp
%WINDIR%\syswow64\rwyskins\is-s1dfp.tmp
%WINDIR%\syswow64\rwyskins\ВґВє\1\is-evt70.tmp
%WINDIR%\syswow64\rwyskins\ВґВє\1\is-8fhdk.tmp
%WINDIR%\syswow64\rwyskins\ВґВє\1\is-6186p.tmp
%WINDIR%\syswow64\rwyskins\ВґВє\1\is-065ul.tmp
%WINDIR%\syswow64\rwyskins\ВґВє\1\is-io18g.tmp
%WINDIR%\syswow64\rwyskins\ВґВє\1\is-r1h2g.tmp
%WINDIR%\syswow64\rwyskins\ВґВє\1\is-ja7t5.tmp
%WINDIR%\syswow64\rwyskins\ВґВє\1\is-4lssh.tmp
%WINDIR%\syswow64\rwyskins\ВґВє\1\is-bhlv2.tmp
%WINDIR%\syswow64\rwyskins\ВґВє\1\is-fa1vb.tmp
%WINDIR%\syswow64\rwyskins\ГЇГ¤\6\images\is-d1l9m.tmp
%WINDIR%\syswow64\rwyskins\ВґВє\7\is-c50e5.tmp
%WINDIR%\syswow64\rwyskins\ВґВє\7\is-6dqse.tmp
%WINDIR%\syswow64\rwyskins\В¶В¬\7\is-kj48k.tmp
%WINDIR%\syswow64\rwyskins\В¶В¬\7\is-sqc3c.tmp
%WINDIR%\syswow64\rwyskins\В¶В¬\7\is-gapup.tmp
%WINDIR%\syswow64\rwyskins\В¶В¬\7\is-9lgpa.tmp
%WINDIR%\syswow64\rwyskins\В¶В¬\7\is-q7rjf.tmp
%WINDIR%\syswow64\rwyskins\В¶В¬\6\images\is-vifav.tmp
%WINDIR%\syswow64\rwyskins\В¶В¬\6\images\is-mq203.tmp
%WINDIR%\syswow64\rwyskins\В¶В¬\6\images\is-744gj.tmp
%WINDIR%\syswow64\rwyskins\В¶В¬\6\images\is-bdemb.tmp
%WINDIR%\syswow64\rwyskins\В¶В¬\6\images\is-5c0dn.tmp
%WINDIR%\syswow64\rwyskins\ВґВє\7\is-8j1df.tmp
%WINDIR%\syswow64\rwyskins\В¶В¬\6\images\is-58ia2.tmp
%WINDIR%\syswow64\rwyskins\В¶В¬\6\images\is-e4fbe.tmp
%WINDIR%\syswow64\rwyskins\В¶В¬\6\images\is-vnkgu.tmp
%WINDIR%\syswow64\rwyskins\В¶В¬\6\images\is-pqdgt.tmp
%WINDIR%\syswow64\rwyskins\В¶В¬\6\images\is-3mcob.tmp
%WINDIR%\syswow64\rwyskins\В¶В¬\6\images\is-djhh3.tmp
%WINDIR%\syswow64\rwyskins\В¶В¬\6\images\is-p9kds.tmp
%WINDIR%\syswow64\rwyskins\В¶В¬\6\images\is-v0dcs.tmp
%WINDIR%\syswow64\rwyskins\В¶В¬\6\is-g0tbb.tmp
%WINDIR%\syswow64\rwyskins\В¶В¬\6\is-put9f.tmp
%WINDIR%\syswow64\rwyskins\В¶В¬\6\is-jo6ho.tmp
%WINDIR%\syswow64\rwyskins\В¶В¬\6\images\is-0ckj6.tmp
%WINDIR%\syswow64\rwyskins\В¶В¬\6\is-au4q8.tmp
%WINDIR%\syswow64\rwyskins\В¶В¬\6\is-2ulbd.tmp
%WINDIR%\syswow64\rwyskins\Г¤В¬ГЁГЇ\1\is-me6vi.tmp
%WINDIR%\syswow64\rwyskins\В¶В¬\7\is-imcls.tmp
%WINDIR%\syswow64\rwyskins\Г¤В¬ГЁГЇ\1\is-og6ql.tmp
%WINDIR%\syswow64\rwyskins\Г¤В¬ГЁГЇ\1\is-sicpu.tmp
%WINDIR%\syswow64\rwyskins\Г¤В¬ГЁГЇ\1\is-a9b38.tmp
%WINDIR%\syswow64\rwyskins\Г¤В¬ГЁГЇ\1\is-a4dmc.tmp
%WINDIR%\syswow64\rwyskins\Г¤В¬ГЁГЇ\1\is-p4btk.tmp
%WINDIR%\syswow64\rwyskins\Г¤В¬ГЁГЇ\1\is-imoru.tmp
%WINDIR%\syswow64\rwyskins\Г¤В¬ГЁГЇ\1\is-2bolr.tmp
%WINDIR%\syswow64\rwyskins\Г¤В¬ГЁГЇ\1\is-l58d3.tmp
%WINDIR%\syswow64\rwyskins\Г¤В¬ГЁГЇ\1\is-hgkp6.tmp
%WINDIR%\syswow64\rwyskins\Г¤В¬ГЁГЇ\is-vlb5p.tmp
%WINDIR%\syswow64\rwyskins\Г¤В¬ГЁГЇ\1\is-vuice.tmp
%WINDIR%\syswow64\rwyskins\В¶В¬\7\is-proa4.tmp
%WINDIR%\syswow64\rwyskins\Г¤В¬ГЁГЇ\1\is-vu4oi.tmp
%WINDIR%\syswow64\rwyskins\Г¤В¬ГЁГЇ\1\is-2sodn.tmp
%WINDIR%\syswow64\rwyskins\Г¤В¬ГЁГЇ\1\is-8pm7d.tmp
%WINDIR%\syswow64\rwyskins\Г¤В¬ГЁГЇ\1\is-0ba06.tmp
%WINDIR%\syswow64\rwyskins\Г¤В¬ГЁГЇ\1\is-6udr0.tmp
%WINDIR%\syswow64\rwyskins\Г¤В¬ГЁГЇ\1\is-2i060.tmp
%WINDIR%\syswow64\rwyskins\Г¤В¬ГЁГЇ\1\is-830ks.tmp
%WINDIR%\syswow64\rwyskins\Г¤В¬ГЁГЇ\1\is-pjvp3.tmp
%WINDIR%\syswow64\rwyskins\Г¤В¬ГЁГЇ\1\is-7jajp.tmp
%WINDIR%\syswow64\rwyskins\Г¤В¬ГЁГЇ\1\is-ds185.tmp
%WINDIR%\syswow64\rwyskins\ВґВє\7\is-ovvd8.tmp
%WINDIR%\syswow64\rwyskins\Г¤В¬ГЁГЇ\1\is-mih6u.tmp
%WINDIR%\syswow64\rwyskins\ВґВє\4\is-5r1r5.tmp
%WINDIR%\syswow64\rwyskins\В¶В¬\1\is-gtu68.tmp
%WINDIR%\syswow64\rwyskins\В¶В¬\1\is-20994.tmp
%WINDIR%\syswow64\rwyskins\В¶В¬\1\is-4tstb.tmp
%WINDIR%\syswow64\rwyskins\В¶В¬\1\is-ggfgr.tmp
%WINDIR%\syswow64\rwyskins\В¶В¬\1\is-imi0p.tmp
%WINDIR%\syswow64\rwyskins\В¶В¬\1\is-fce3q.tmp
%WINDIR%\syswow64\rwyskins\В¶В¬\1\is-969if.tmp
%WINDIR%\syswow64\rwyskins\В¶В¬\1\is-etf8r.tmp
%WINDIR%\syswow64\rwyskins\В¶В¬\1\is-0eb0j.tmp
%WINDIR%\syswow64\rwyskins\В¶В¬\1\is-k8qlv.tmp
%WINDIR%\syswow64\rwyskins\В¶В¬\5\is-0p1p9.tmp
%WINDIR%\syswow64\rwyskins\В¶В¬\1\is-6s8fg.tmp
%WINDIR%\syswow64\rwyskins\В¶В¬\1\is-fgijt.tmp
%WINDIR%\syswow64\rwyskins\В¶В¬\1\is-27f8r.tmp
%WINDIR%\syswow64\rwyskins\В¶В¬\1\is-g04sm.tmp
%WINDIR%\syswow64\rwyskins\В¶В¬\1\is-bav8t.tmp
%WINDIR%\syswow64\rwyskins\В¶В¬\1\is-meud0.tmp
%WINDIR%\syswow64\rwyskins\В¶В¬\1\is-lu1pl.tmp
%WINDIR%\syswow64\rwyskins\В¶В¬\1\is-1br68.tmp
%WINDIR%\syswow64\rwyskins\В¶В¬\1\is-fbdrd.tmp
%WINDIR%\syswow64\rwyskins\В¶В¬\1\is-16223.tmp
%WINDIR%\syswow64\rwyskins\В¶В¬\is-cd7pm.tmp
%WINDIR%\syswow64\rwyskins\В¶В¬\1\is-eaoif.tmp
%WINDIR%\syswow64\rwyskins\В¶В¬\5\is-110qt.tmp
%WINDIR%\syswow64\rwyskins\В¶В¬\5\is-h6otr.tmp
%WINDIR%\syswow64\rwyskins\В¶В¬\1\is-hs06n.tmp
%WINDIR%\syswow64\rwyskins\В¶В¬\1\is-7a6br.tmp
%WINDIR%\syswow64\rwyskins\В¶В¬\5\is-q4sbq.tmp
%WINDIR%\syswow64\rwyskins\В¶В¬\5\is-4k2fi.tmp
%WINDIR%\syswow64\rwyskins\В¶В¬\4\is-3eb7c.tmp
%WINDIR%\syswow64\rwyskins\В¶В¬\4\is-d0fe6.tmp
%WINDIR%\syswow64\rwyskins\В¶В¬\4\is-70cjq.tmp
%WINDIR%\syswow64\rwyskins\В¶В¬\4\is-qsilp.tmp
%WINDIR%\syswow64\rwyskins\В¶В¬\4\is-3ionk.tmp
%WINDIR%\syswow64\rwyskins\В¶В¬\4\is-suo18.tmp
%WINDIR%\syswow64\rwyskins\В¶В¬\4\is-qvcuk.tmp
%WINDIR%\syswow64\rwyskins\В¶В¬\1\is-9rngj.tmp
%WINDIR%\syswow64\rwyskins\В¶В¬\3\is-d4tvo.tmp
%WINDIR%\syswow64\rwyskins\В¶В¬\1\is-cl234.tmp
%WINDIR%\syswow64\rwyskins\В¶В¬\3\is-r0arg.tmp
%WINDIR%\syswow64\rwyskins\В¶В¬\3\is-hpv3n.tmp
%WINDIR%\syswow64\rwyskins\В¶В¬\3\is-riol7.tmp
%WINDIR%\syswow64\rwyskins\В¶В¬\2\is-plamo.tmp
%WINDIR%\syswow64\rwyskins\В¶В¬\2\is-glkdn.tmp
%WINDIR%\syswow64\rwyskins\В¶В¬\1\is-5ogrv.tmp
%WINDIR%\syswow64\rwyskins\В¶В¬\1\is-v25p2.tmp
%WINDIR%\syswow64\rwyskins\В¶В¬\1\is-p0mtn.tmp
%WINDIR%\syswow64\rwyskins\В¶В¬\1\is-neicg.tmp
%WINDIR%\syswow64\rwyskins\В¶В¬\3\is-sl2bq.tmp
%WINDIR%\syswow64\is-6ii5m.tmp

Moves the following files

from %WINDIR%\syswow64\is-dfgrf.tmp to %WINDIR%\syswow64\wwm.dll
from %WINDIR%\syswow64\rwyskins\Г§ГЇ\1\is-54v7o.tmp to %WINDIR%\syswow64\rwyskins\Г§ГЇ\1\imglefttitle.png
from %WINDIR%\syswow64\rwyskins\Г§ГЇ\1\is-gupdc.tmp to %WINDIR%\syswow64\rwyskins\Г§ГЇ\1\btnsale_n.png
from %WINDIR%\syswow64\rwyskins\Г§ГЇ\1\is-h6t7u.tmp to %WINDIR%\syswow64\rwyskins\Г§ГЇ\1\btnsale_h.png
from %WINDIR%\syswow64\rwyskins\Г§ГЇ\1\is-1mkeg.tmp to %WINDIR%\syswow64\rwyskins\Г§ГЇ\1\btnsale_d.png
from %WINDIR%\syswow64\rwyskins\Г§ГЇ\1\is-g2k9l.tmp to %WINDIR%\syswow64\rwyskins\Г§ГЇ\1\btnmodifypsw_n.png
from %WINDIR%\syswow64\rwyskins\Г§ГЇ\1\is-slqlh.tmp to %WINDIR%\syswow64\rwyskins\Г§ГЇ\1\btnmodifypsw_h.png
from %WINDIR%\syswow64\rwyskins\Г§ГЇ\1\is-tivev.tmp to %WINDIR%\syswow64\rwyskins\Г§ГЇ\1\btnmodifypsw_d.png
from %WINDIR%\syswow64\rwyskins\Г§ГЇ\1\is-ef22t.tmp to %WINDIR%\syswow64\rwyskins\Г§ГЇ\1\btnmin_n.png
from %WINDIR%\syswow64\rwyskins\Г§ГЇ\1\is-q61b5.tmp to %WINDIR%\syswow64\rwyskins\Г§ГЇ\1\btnmin_h.png
from %WINDIR%\syswow64\rwyskins\Г§ГЇ\1\is-l0q78.tmp to %WINDIR%\syswow64\rwyskins\Г§ГЇ\1\btnmin_d.png
from %WINDIR%\syswow64\rwyskins\Г§ГЇ\1\is-5mpkn.tmp to %WINDIR%\syswow64\rwyskins\Г§ГЇ\1\btnlock_n.png
from %WINDIR%\syswow64\rwyskins\Г§ГЇ\1\is-rogdf.tmp to %WINDIR%\syswow64\rwyskins\Г§ГЇ\1\btnlock_h.png
from %WINDIR%\syswow64\rwyskins\Г§ГЇ\1\is-0jp7f.tmp to %WINDIR%\syswow64\rwyskins\Г§ГЇ\1\btnlock_d.png
from %WINDIR%\syswow64\rwyskins\Г§ГЇ\1\is-pl0kn.tmp to %WINDIR%\syswow64\rwyskins\Г§ГЇ\1\btnclose_n.png
from %WINDIR%\syswow64\rwyskins\Г§ГЇ\1\is-g8omd.tmp to %WINDIR%\syswow64\rwyskins\Г§ГЇ\1\btnclose_h.png
from %WINDIR%\syswow64\rwyskins\Г§ГЇ\1\is-j06qd.tmp to %WINDIR%\syswow64\rwyskins\Г§ГЇ\1\btnclose_d.png
from %WINDIR%\syswow64\rwyskins\Г§ГЇ\1\is-imldr.tmp to %WINDIR%\syswow64\rwyskins\Г§ГЇ\1\btncheckout_n.png
from %WINDIR%\syswow64\rwyskins\Г§ГЇ\1\is-a84k6.tmp to %WINDIR%\syswow64\rwyskins\Г§ГЇ\1\btncheckout_h.png
from %WINDIR%\syswow64\rwyskins\Г§ГЇ\1\is-g1p5a.tmp to %WINDIR%\syswow64\rwyskins\Г§ГЇ\1\btncheckout_d.png
from %WINDIR%\syswow64\rwyskins\Г§ГЇ\1\is-hpfpv.tmp to %WINDIR%\syswow64\rwyskins\Г§ГЇ\1\btnchange_n.png
from %WINDIR%\syswow64\rwyskins\Г§ГЇ\1\is-63g1i.tmp to %WINDIR%\syswow64\rwyskins\Г§ГЇ\1\btnchange_h.png
from %WINDIR%\syswow64\rwyskins\Г§ГЇ\1\is-1l17v.tmp to %WINDIR%\syswow64\rwyskins\Г§ГЇ\1\imgrightpic.png
from %WINDIR%\syswow64\rwyskins\Г§ГЇ\1\is-avbmb.tmp to %WINDIR%\syswow64\rwyskins\Г§ГЇ\1\imgtitle.png
from %WINDIR%\syswow64\rwyskins\Г§ГЇ\2\is-1aa0e.tmp to %WINDIR%\syswow64\rwyskins\Г§ГЇ\2\image1.png
from %WINDIR%\syswow64\rwyskins\Г§ГЇ\2\is-7vru6.tmp to %WINDIR%\syswow64\rwyskins\Г§ГЇ\2\lgjabout.png
from %WINDIR%\syswow64\rwyskins\Г§ГЇ\1\is-eph6l.tmp to %WINDIR%\syswow64\rwyskins\Г§ГЇ\1\btnchage_d.png
from %WINDIR%\syswow64\rwyskins\Г§ГЇ\6\is-m8gej.tmp to %WINDIR%\syswow64\rwyskins\Г§ГЇ\6\esc_03.png
from %WINDIR%\syswow64\rwyskins\Г§ГЇ\6\is-4u3lf.tmp to %WINDIR%\syswow64\rwyskins\Г§ГЇ\6\escn_04.png
from %WINDIR%\syswow64\rwyskins\Г§ГЇ\6\is-vs9u3.tmp to %WINDIR%\syswow64\rwyskins\Г§ГЇ\6\escn_03.png
from %WINDIR%\syswow64\rwyskins\Г§ГЇ\5\is-4rckf.tmp to %WINDIR%\syswow64\rwyskins\Г§ГЇ\5\imgright.png
from %WINDIR%\syswow64\rwyskins\Г§ГЇ\5\is-i35f0.tmp to %WINDIR%\syswow64\rwyskins\Г§ГЇ\5\imgmisc.png
from %WINDIR%\syswow64\rwyskins\Г§ГЇ\5\is-8idm5.tmp to %WINDIR%\syswow64\rwyskins\Г§ГЇ\5\imgleft.png
from %WINDIR%\syswow64\rwyskins\Г§ГЇ\5\is-kiece.tmp to %WINDIR%\syswow64\rwyskins\Г§ГЇ\5\imgback.png
from %WINDIR%\syswow64\rwyskins\Г§ГЇ\5\is-37f9i.tmp to %WINDIR%\syswow64\rwyskins\Г§ГЇ\5\img2.png
from %WINDIR%\syswow64\rwyskins\Г§ГЇ\4\is-k9mvq.tmp to %WINDIR%\syswow64\rwyskins\Г§ГЇ\4\imgright.png
from %WINDIR%\syswow64\rwyskins\Г§ГЇ\1\is-6tsvu.tmp to %WINDIR%\syswow64\rwyskins\Г§ГЇ\1\btnchange_d.png
from %WINDIR%\syswow64\rwyskins\Г§ГЇ\4\is-pjpmu.tmp to %WINDIR%\syswow64\rwyskins\Г§ГЇ\4\imgleft.png
from %WINDIR%\syswow64\rwyskins\Г§ГЇ\6\is-pfl1c.tmp to %WINDIR%\syswow64\rwyskins\Г§ГЇ\6\esc_04.png
from %WINDIR%\syswow64\rwyskins\Г§ГЇ\4\is-4seh9.tmp to %WINDIR%\syswow64\rwyskins\Г§ГЇ\4\btnclose_h.png
from %WINDIR%\syswow64\rwyskins\Г§ГЇ\4\is-opkr1.tmp to %WINDIR%\syswow64\rwyskins\Г§ГЇ\4\btnclose_d.png
from %WINDIR%\syswow64\rwyskins\Г§ГЇ\4\is-b2fjd.tmp to %WINDIR%\syswow64\rwyskins\Г§ГЇ\4\.png
from %WINDIR%\syswow64\rwyskins\Г§ГЇ\3\is-hftih.tmp to %WINDIR%\syswow64\rwyskins\Г§ГЇ\3\imgmisc.png
from %WINDIR%\syswow64\rwyskins\Г§ГЇ\3\is-q9ank.tmp to %WINDIR%\syswow64\rwyskins\Г§ГЇ\3\imglinked.png
from %WINDIR%\syswow64\rwyskins\Г§ГЇ\3\is-3jmpm.tmp to %WINDIR%\syswow64\rwyskins\Г§ГЇ\3\img3.png
from %WINDIR%\syswow64\rwyskins\Г§ГЇ\3\is-6fa4i.tmp to %WINDIR%\syswow64\rwyskins\Г§ГЇ\3\img2.png
from %WINDIR%\syswow64\rwyskins\Г§ГЇ\3\is-0pv4v.tmp to %WINDIR%\syswow64\rwyskins\Г§ГЇ\3\img1_cj.png
from %WINDIR%\syswow64\rwyskins\Г§ГЇ\3\is-lp1b3.tmp to %WINDIR%\syswow64\rwyskins\Г§ГЇ\3\img1.png
from %WINDIR%\syswow64\rwyskins\Г§ГЇ\4\is-ecmaq.tmp to %WINDIR%\syswow64\rwyskins\Г§ГЇ\4\imgcenter.png
from %WINDIR%\syswow64\rwyskins\Г¤В¬ГЁГЇ\2\is-3a3cg.tmp to %WINDIR%\syswow64\rwyskins\Г¤В¬ГЁГЇ\2\image1.png
from %WINDIR%\syswow64\rwyskins\Г§ГЇ\4\is-qdkhq.tmp to %WINDIR%\syswow64\rwyskins\Г§ГЇ\4\btnclose_n.png
from %WINDIR%\syswow64\rwyskins\Г¤В¬ГЁГЇ\6\images\is-of72i.tmp to %WINDIR%\syswow64\rwyskins\Г¤В¬ГЁГЇ\6\images\logd2_08.png
from %WINDIR%\syswow64\rwyskins\Г¤В¬ГЁГЇ\6\is-5lorl.tmp to %WINDIR%\syswow64\rwyskins\Г¤В¬ГЁГЇ\6\esc_03.png
from %WINDIR%\syswow64\rwyskins\Г¤В¬ГЁГЇ\6\is-uc6d3.tmp to %WINDIR%\syswow64\rwyskins\Г¤В¬ГЁГЇ\6\escn_04.png
from %WINDIR%\syswow64\rwyskins\Г¤В¬ГЁГЇ\6\is-kv9de.tmp to %WINDIR%\syswow64\rwyskins\Г¤В¬ГЁГЇ\6\escn_03.png
from %WINDIR%\syswow64\rwyskins\Г¤В¬ГЁГЇ\5\is-hku7o.tmp to %WINDIR%\syswow64\rwyskins\Г¤В¬ГЁГЇ\5\imgright.png
from %WINDIR%\syswow64\rwyskins\Г¤В¬ГЁГЇ\5\is-kc3i8.tmp to %WINDIR%\syswow64\rwyskins\Г¤В¬ГЁГЇ\5\imgmisc.png
from %WINDIR%\syswow64\rwyskins\Г¤В¬ГЁГЇ\5\is-jimf0.tmp to %WINDIR%\syswow64\rwyskins\Г¤В¬ГЁГЇ\5\imgleft.png
from %WINDIR%\syswow64\rwyskins\Г¤В¬ГЁГЇ\5\is-jquoq.tmp to %WINDIR%\syswow64\rwyskins\Г¤В¬ГЁГЇ\5\imgback.png
from %WINDIR%\syswow64\rwyskins\Г¤В¬ГЁГЇ\5\is-0v9ve.tmp to %WINDIR%\syswow64\rwyskins\Г¤В¬ГЁГЇ\5\img2.png
from %WINDIR%\syswow64\rwyskins\Г¤В¬ГЁГЇ\4\is-q9dq0.tmp to %WINDIR%\syswow64\rwyskins\Г¤В¬ГЁГЇ\4\imgright.png
from %WINDIR%\syswow64\rwyskins\Г¤В¬ГЁГЇ\4\is-984ao.tmp to %WINDIR%\syswow64\rwyskins\Г¤В¬ГЁГЇ\4\imgleft.png
from %WINDIR%\syswow64\rwyskins\Г¤В¬ГЁГЇ\4\is-f3biv.tmp to %WINDIR%\syswow64\rwyskins\Г¤В¬ГЁГЇ\4\imgcenter.png
from %WINDIR%\syswow64\rwyskins\Г¤В¬ГЁГЇ\4\is-c74a2.tmp to %WINDIR%\syswow64\rwyskins\Г¤В¬ГЁГЇ\4\btnclose_n.png
from %WINDIR%\syswow64\rwyskins\Г¤В¬ГЁГЇ\4\is-rc8f4.tmp to %WINDIR%\syswow64\rwyskins\Г¤В¬ГЁГЇ\4\btnclose_h.png
from %WINDIR%\syswow64\rwyskins\Г¤В¬ГЁГЇ\4\is-uh4vj.tmp to %WINDIR%\syswow64\rwyskins\Г¤В¬ГЁГЇ\4\btnclose_d.png
from %WINDIR%\syswow64\rwyskins\Г¤В¬ГЁГЇ\4\is-i3c24.tmp to %WINDIR%\syswow64\rwyskins\Г¤В¬ГЁГЇ\4\.png
from %WINDIR%\syswow64\rwyskins\Г¤В¬ГЁГЇ\3\is-3ph8s.tmp to %WINDIR%\syswow64\rwyskins\Г¤В¬ГЁГЇ\3\imgmisc.png
from %WINDIR%\syswow64\rwyskins\Г¤В¬ГЁГЇ\3\is-arvhs.tmp to %WINDIR%\syswow64\rwyskins\Г¤В¬ГЁГЇ\3\imglinked.png
from %WINDIR%\syswow64\rwyskins\Г¤В¬ГЁГЇ\3\is-pg60o.tmp to %WINDIR%\syswow64\rwyskins\Г¤В¬ГЁГЇ\3\img3.png
from %WINDIR%\syswow64\rwyskins\Г¤В¬ГЁГЇ\3\is-n4kgi.tmp to %WINDIR%\syswow64\rwyskins\Г¤В¬ГЁГЇ\3\img2.png
from %WINDIR%\syswow64\rwyskins\Г¤В¬ГЁГЇ\3\is-0c6h6.tmp to %WINDIR%\syswow64\rwyskins\Г¤В¬ГЁГЇ\3\img1_cj.png
from %WINDIR%\syswow64\rwyskins\Г¤В¬ГЁГЇ\3\is-n0s6i.tmp to %WINDIR%\syswow64\rwyskins\Г¤В¬ГЁГЇ\3\img1.png
from %WINDIR%\syswow64\rwyskins\Г¤В¬ГЁГЇ\6\is-pb4lp.tmp to %WINDIR%\syswow64\rwyskins\Г¤В¬ГЁГЇ\6\esc_04.png
from %WINDIR%\syswow64\rwyskins\Г¤В¬ГЁГЇ\6\is-salei.tmp to %WINDIR%\syswow64\rwyskins\Г¤В¬ГЁГЇ\6\logo.png
from %WINDIR%\syswow64\rwyskins\Г¤В¬ГЁГЇ\6\images\is-udtpo.tmp to %WINDIR%\syswow64\rwyskins\Г¤В¬ГЁГЇ\6\images\hover_03.png
from %WINDIR%\syswow64\rwyskins\Г¤В¬ГЁГЇ\6\images\is-0hltv.tmp to %WINDIR%\syswow64\rwyskins\Г¤В¬ГЁГЇ\6\images\hover_04.png
from %WINDIR%\syswow64\rwyskins\Г§ГЇ\1\is-n1tpr.tmp to %WINDIR%\syswow64\rwyskins\Г§ГЇ\1\btncall_h.png
from %WINDIR%\syswow64\rwyskins\Г§ГЇ\1\is-afqjm.tmp to %WINDIR%\syswow64\rwyskins\Г§ГЇ\1\.png
from %WINDIR%\syswow64\rwyskins\Г§ГЇ\is-2tv62.tmp to %WINDIR%\syswow64\rwyskins\Г§ГЇ\lgjskin.ini
from %WINDIR%\syswow64\rwyskins\Г¤В¬ГЁГЇ\7\is-ra81v.tmp to %WINDIR%\syswow64\rwyskins\Г¤В¬ГЁГЇ\7\path2.png
from %WINDIR%\syswow64\rwyskins\Г¤В¬ГЁГЇ\7\is-2eip7.tmp to %WINDIR%\syswow64\rwyskins\Г¤В¬ГЁГЇ\7\btnsale_d.png
from %WINDIR%\syswow64\rwyskins\Г¤В¬ГЁГЇ\7\is-fispn.tmp to %WINDIR%\syswow64\rwyskins\Г¤В¬ГЁГЇ\7\btnmodifypsw_d.png
from %WINDIR%\syswow64\rwyskins\Г¤В¬ГЁГЇ\7\is-6ns72.tmp to %WINDIR%\syswow64\rwyskins\Г¤В¬ГЁГЇ\7\btnlock_d.png
from %WINDIR%\syswow64\rwyskins\Г¤В¬ГЁГЇ\7\is-m86p6.tmp to %WINDIR%\syswow64\rwyskins\Г¤В¬ГЁГЇ\7\btncheckout_d.png
from %WINDIR%\syswow64\rwyskins\Г¤В¬ГЁГЇ\7\is-iv0f8.tmp to %WINDIR%\syswow64\rwyskins\Г¤В¬ГЁГЇ\7\btnchage_d.png
from %WINDIR%\syswow64\rwyskins\Г¤В¬ГЁГЇ\7\is-2impt.tmp to %WINDIR%\syswow64\rwyskins\Г¤В¬ГЁГЇ\7\btncall_d.png
from %WINDIR%\syswow64\rwyskins\Г§ГЇ\1\is-59r0e.tmp to %WINDIR%\syswow64\rwyskins\Г§ГЇ\1\btncall_n.png
from %WINDIR%\syswow64\rwyskins\Г¤В¬ГЁГЇ\6\images\is-85t3m.tmp to %WINDIR%\syswow64\rwyskins\Г¤В¬ГЁГЇ\6\images\Г¶Г·Г¬Гў1_05.jpg
from %WINDIR%\syswow64\rwyskins\Г§ГЇ\1\is-cmim6.tmp to %WINDIR%\syswow64\rwyskins\Г§ГЇ\1\btncall_d.png
from %WINDIR%\syswow64\rwyskins\Г¤В¬ГЁГЇ\6\images\is-jh99i.tmp to %WINDIR%\syswow64\rwyskins\Г¤В¬ГЁГЇ\6\images\logd2_07.png
from %WINDIR%\syswow64\rwyskins\Г¤В¬ГЁГЇ\6\images\is-tiq07.tmp to %WINDIR%\syswow64\rwyskins\Г¤В¬ГЁГЇ\6\images\logd2_06.png
from %WINDIR%\syswow64\rwyskins\Г¤В¬ГЁГЇ\6\images\is-u96lq.tmp to %WINDIR%\syswow64\rwyskins\Г¤В¬ГЁГЇ\6\images\logd2_05.png
from %WINDIR%\syswow64\rwyskins\Г¤В¬ГЁГЇ\6\images\is-67c1c.tmp to %WINDIR%\syswow64\rwyskins\Г¤В¬ГЁГЇ\6\images\logd2_04.png
from %WINDIR%\syswow64\rwyskins\Г¤В¬ГЁГЇ\6\images\is-u00hu.tmp to %WINDIR%\syswow64\rwyskins\Г¤В¬ГЁГЇ\6\images\logd2_03.png
from %WINDIR%\syswow64\rwyskins\Г¤В¬ГЁГЇ\6\images\is-euq4t.tmp to %WINDIR%\syswow64\rwyskins\Г¤В¬ГЁГЇ\6\images\hover_08.png
from %WINDIR%\syswow64\rwyskins\Г¤В¬ГЁГЇ\6\images\is-l4ato.tmp to %WINDIR%\syswow64\rwyskins\Г¤В¬ГЁГЇ\6\images\hover_07.png
from %WINDIR%\syswow64\rwyskins\Г¤В¬ГЁГЇ\6\images\is-4k0tv.tmp to %WINDIR%\syswow64\rwyskins\Г¤В¬ГЁГЇ\6\images\hover_06.png
from %WINDIR%\syswow64\rwyskins\Г¤В¬ГЁГЇ\6\images\is-vpug8.tmp to %WINDIR%\syswow64\rwyskins\Г¤В¬ГЁГЇ\6\images\hover_05.png
from %WINDIR%\syswow64\rwyskins\Г¤В¬ГЁГЇ\6\images\is-4iqim.tmp to %WINDIR%\syswow64\rwyskins\Г¤В¬ГЁГЇ\6\images\Г¶Г·Г¬Гў1_03.jpg
from %WINDIR%\syswow64\rwyskins\Г¤В¬ГЁГЇ\2\is-4a7lf.tmp to %WINDIR%\syswow64\rwyskins\Г¤В¬ГЁГЇ\2\lgjabout.png
from %WINDIR%\syswow64\rwyskins\Г§ГЇ\6\is-mgb9h.tmp to %WINDIR%\syswow64\rwyskins\Г§ГЇ\6\logo.png
from %WINDIR%\syswow64\rwyskins\ГЇГ¤\1\is-ig656.tmp to %WINDIR%\syswow64\rwyskins\ГЇГ¤\1\btncall_d.png
from %WINDIR%\syswow64\rwyskins\ГЇГ¤\6\is-rq4g9.tmp to %WINDIR%\syswow64\rwyskins\ГЇГ¤\6\esc_03.png
from %WINDIR%\syswow64\rwyskins\ГЇГ¤\6\is-5nggq.tmp to %WINDIR%\syswow64\rwyskins\ГЇГ¤\6\escn_04.png
from %WINDIR%\syswow64\rwyskins\ГЇГ¤\6\is-m77s6.tmp to %WINDIR%\syswow64\rwyskins\ГЇГ¤\6\escn_03.png
from %WINDIR%\syswow64\rwyskins\ГЇГ¤\5\is-vgmqa.tmp to %WINDIR%\syswow64\rwyskins\ГЇГ¤\5\imgright.png
from %WINDIR%\syswow64\rwyskins\ГЇГ¤\5\is-rag0p.tmp to %WINDIR%\syswow64\rwyskins\ГЇГ¤\5\imgmisc.png
from %WINDIR%\syswow64\rwyskins\ГЇГ¤\5\is-0r8hh.tmp to %WINDIR%\syswow64\rwyskins\ГЇГ¤\5\imgleft.png
from %WINDIR%\syswow64\rwyskins\ГЇГ¤\5\is-f9ndn.tmp to %WINDIR%\syswow64\rwyskins\ГЇГ¤\5\imgback.png
from %WINDIR%\syswow64\rwyskins\ГЇГ¤\5\is-l9e00.tmp to %WINDIR%\syswow64\rwyskins\ГЇГ¤\5\img2.png
from %WINDIR%\syswow64\rwyskins\ГЇГ¤\4\is-4id4t.tmp to %WINDIR%\syswow64\rwyskins\ГЇГ¤\4\imgright.png
from %WINDIR%\syswow64\rwyskins\ГЇГ¤\4\is-iqoch.tmp to %WINDIR%\syswow64\rwyskins\ГЇГ¤\4\imgleft.png
from %WINDIR%\syswow64\rwyskins\ГЇГ¤\4\is-33ed5.tmp to %WINDIR%\syswow64\rwyskins\ГЇГ¤\4\btnclose_n.png
from %WINDIR%\syswow64\rwyskins\ГЇГ¤\6\is-02tll.tmp to %WINDIR%\syswow64\rwyskins\ГЇГ¤\6\logo.png
from %WINDIR%\syswow64\rwyskins\ГЇГ¤\4\is-jeg0u.tmp to %WINDIR%\syswow64\rwyskins\ГЇГ¤\4\btnclose_h.png
from %WINDIR%\syswow64\rwyskins\ГЇГ¤\4\is-v5f95.tmp to %WINDIR%\syswow64\rwyskins\ГЇГ¤\4\btnclose_d.png
from %WINDIR%\syswow64\rwyskins\ГЇГ¤\4\is-50tur.tmp to %WINDIR%\syswow64\rwyskins\ГЇГ¤\4\.png
from %WINDIR%\syswow64\rwyskins\ГЇГ¤\3\is-ofgb1.tmp to %WINDIR%\syswow64\rwyskins\ГЇГ¤\3\imgmisc.png
from %WINDIR%\syswow64\rwyskins\ГЇГ¤\3\is-7urt4.tmp to %WINDIR%\syswow64\rwyskins\ГЇГ¤\3\imglinked.png
from %WINDIR%\syswow64\rwyskins\ГЇГ¤\3\is-6qp2j.tmp to %WINDIR%\syswow64\rwyskins\ГЇГ¤\3\img3.png
from %WINDIR%\syswow64\rwyskins\ГЇГ¤\3\is-h23uu.tmp to %WINDIR%\syswow64\rwyskins\ГЇГ¤\3\img2.png
from %WINDIR%\syswow64\rwyskins\ГЇГ¤\3\is-ue1mr.tmp to %WINDIR%\syswow64\rwyskins\ГЇГ¤\3\img1_cj.png
from %WINDIR%\syswow64\rwyskins\ГЇГ¤\3\is-fp55m.tmp to %WINDIR%\syswow64\rwyskins\ГЇГ¤\3\img1.png
from %WINDIR%\syswow64\rwyskins\ГЇГ¤\4\is-8gjkh.tmp to %WINDIR%\syswow64\rwyskins\ГЇГ¤\4\imgcenter.png
from %WINDIR%\syswow64\rwyskins\В¶В¬\4\is-suo18.tmp to %WINDIR%\syswow64\rwyskins\В¶В¬\4\btnclose_d.png
from %WINDIR%\syswow64\rwyskins\ГЇГ¤\6\images\is-pu3n6.tmp to %WINDIR%\syswow64\rwyskins\ГЇГ¤\6\images\hover_03.png
from %WINDIR%\syswow64\is-1sqfr.tmp to %WINDIR%\syswow64\rwyskinmsgbox.dll
from %WINDIR%\syswow64\is-4tg21.tmp to %WINDIR%\syswow64\rwyremoteclt.dll
from %WINDIR%\syswow64\is-af3jn.tmp to %WINDIR%\syswow64\rwyremotesrv.dll
from %WINDIR%\syswow64\rwyskins\ГЇГ¤\7\is-q8ung.tmp to %WINDIR%\syswow64\rwyskins\ГЇГ¤\7\path2.png
from %WINDIR%\syswow64\rwyskins\ГЇГ¤\7\is-om3bg.tmp to %WINDIR%\syswow64\rwyskins\ГЇГ¤\7\btnsale_d.png
from %WINDIR%\syswow64\rwyskins\ГЇГ¤\7\is-n7a6i.tmp to %WINDIR%\syswow64\rwyskins\ГЇГ¤\7\btnmodifypsw_d.png
from %WINDIR%\syswow64\rwyskins\ГЇГ¤\7\is-ogp7k.tmp to %WINDIR%\syswow64\rwyskins\ГЇГ¤\7\btnlock_d.png
from %WINDIR%\syswow64\rwyskins\ГЇГ¤\7\is-cvgig.tmp to %WINDIR%\syswow64\rwyskins\ГЇГ¤\7\btncheckout_d.png
from %WINDIR%\syswow64\rwyskins\ГЇГ¤\7\is-q5q8n.tmp to %WINDIR%\syswow64\rwyskins\ГЇГ¤\7\btnchage_d.png
from %WINDIR%\syswow64\rwyskins\ГЇГ¤\7\is-0np1q.tmp to %WINDIR%\syswow64\rwyskins\ГЇГ¤\7\btncall_d.png
from %WINDIR%\syswow64\rwyskins\ГЇГ¤\2\is-50o83.tmp to %WINDIR%\syswow64\rwyskins\ГЇГ¤\2\lgjabout.png
from %WINDIR%\syswow64\rwyskins\ГЇГ¤\6\is-pts6p.tmp to %WINDIR%\syswow64\rwyskins\ГЇГ¤\6\esc_04.png
from %WINDIR%\syswow64\rwyskins\ГЇГ¤\6\images\is-ec3pm.tmp to %WINDIR%\syswow64\rwyskins\ГЇГ¤\6\images\logd2_08.png
from %WINDIR%\syswow64\rwyskins\ГЇГ¤\6\images\is-dqlh0.tmp to %WINDIR%\syswow64\rwyskins\ГЇГ¤\6\images\logd2_07.png
from %WINDIR%\syswow64\rwyskins\ГЇГ¤\6\images\is-jcr64.tmp to %WINDIR%\syswow64\rwyskins\ГЇГ¤\6\images\logd2_06.png
from %WINDIR%\syswow64\rwyskins\ГЇГ¤\6\images\is-6jag6.tmp to %WINDIR%\syswow64\rwyskins\ГЇГ¤\6\images\logd2_05.png
from %WINDIR%\syswow64\rwyskins\ГЇГ¤\6\images\is-g7ikl.tmp to %WINDIR%\syswow64\rwyskins\ГЇГ¤\6\images\logd2_04.png
from %WINDIR%\syswow64\rwyskins\ГЇГ¤\6\images\is-1485d.tmp to %WINDIR%\syswow64\rwyskins\ГЇГ¤\6\images\logd2_03.png
from %WINDIR%\syswow64\rwyskins\ГЇГ¤\6\images\is-jhhd6.tmp to %WINDIR%\syswow64\rwyskins\ГЇГ¤\6\images\hover_08.png
from %WINDIR%\syswow64\rwyskins\ГЇГ¤\6\images\is-suu5d.tmp to %WINDIR%\syswow64\rwyskins\ГЇГ¤\6\images\hover_07.png
from %WINDIR%\syswow64\rwyskins\ГЇГ¤\6\images\is-l2pjt.tmp to %WINDIR%\syswow64\rwyskins\ГЇГ¤\6\images\hover_06.png
from %WINDIR%\syswow64\rwyskins\ГЇГ¤\6\images\is-pdj48.tmp to %WINDIR%\syswow64\rwyskins\ГЇГ¤\6\images\hover_05.png
from %WINDIR%\syswow64\rwyskins\ГЇГ¤\6\images\is-vr80a.tmp to %WINDIR%\syswow64\rwyskins\ГЇГ¤\6\images\Г¶Г·Г¬Гў1_03.jpg
from %WINDIR%\syswow64\rwyskins\ГЇГ¤\6\images\is-cf3j5.tmp to %WINDIR%\syswow64\rwyskins\ГЇГ¤\6\images\hover_04.png
from %WINDIR%\syswow64\rwyskins\Г§ГЇ\6\images\is-431ia.tmp to %WINDIR%\syswow64\rwyskins\Г§ГЇ\6\images\hover_04.png
from %WINDIR%\syswow64\rwyskins\Г§ГЇ\6\images\is-lmv5k.tmp to %WINDIR%\syswow64\rwyskins\Г§ГЇ\6\images\hover_03.png
from %WINDIR%\syswow64\rwyskins\ГЇГ¤\1\is-83jas.tmp to %WINDIR%\syswow64\rwyskins\ГЇГ¤\1\imgrightpic.png
from %WINDIR%\syswow64\rwyskins\ГЇГ¤\1\is-qjk9s.tmp to %WINDIR%\syswow64\rwyskins\ГЇГ¤\1\btncall_h.png
from %WINDIR%\syswow64\rwyskins\ГЇГ¤\is-qd2e8.tmp to %WINDIR%\syswow64\rwyskins\ГЇГ¤\lgjskin.ini
from %WINDIR%\syswow64\rwyskins\Г§ГЇ\7\is-1uml0.tmp to %WINDIR%\syswow64\rwyskins\Г§ГЇ\7\path2.png
from %WINDIR%\syswow64\rwyskins\Г§ГЇ\7\is-pa6id.tmp to %WINDIR%\syswow64\rwyskins\Г§ГЇ\7\btnsale_d.png
from %WINDIR%\syswow64\rwyskins\Г§ГЇ\7\is-iv2rb.tmp to %WINDIR%\syswow64\rwyskins\Г§ГЇ\7\btnmodifypsw_d.png
from %WINDIR%\syswow64\rwyskins\Г§ГЇ\7\is-hrh1j.tmp to %WINDIR%\syswow64\rwyskins\Г§ГЇ\7\btnlock_d.png
from %WINDIR%\syswow64\rwyskins\Г§ГЇ\7\is-he0pf.tmp to %WINDIR%\syswow64\rwyskins\Г§ГЇ\7\btncheckout_d.png
from %WINDIR%\syswow64\rwyskins\Г§ГЇ\7\is-kct7t.tmp to %WINDIR%\syswow64\rwyskins\Г§ГЇ\7\btnchage_d.png
from %WINDIR%\syswow64\rwyskins\Г§ГЇ\7\is-7ufbe.tmp to %WINDIR%\syswow64\rwyskins\Г§ГЇ\7\btncall_d.png
from %WINDIR%\syswow64\rwyskins\Г§ГЇ\6\images\is-a5enq.tmp to %WINDIR%\syswow64\rwyskins\Г§ГЇ\6\images\Г¶Г·Г¬Гў1_05.jpg
from %WINDIR%\syswow64\rwyskins\Г§ГЇ\6\images\is-rddeh.tmp to %WINDIR%\syswow64\rwyskins\Г§ГЇ\6\images\Г¶Г·Г¬Гў1_03.jpg
from %WINDIR%\syswow64\rwyskins\Г§ГЇ\6\images\is-lj13t.tmp to %WINDIR%\syswow64\rwyskins\Г§ГЇ\6\images\logd2_08.png
from %WINDIR%\syswow64\rwyskins\Г§ГЇ\6\images\is-oq3j8.tmp to %WINDIR%\syswow64\rwyskins\Г§ГЇ\6\images\logd2_07.png
from %WINDIR%\syswow64\rwyskins\Г§ГЇ\6\images\is-4jg95.tmp to %WINDIR%\syswow64\rwyskins\Г§ГЇ\6\images\logd2_06.png
from %WINDIR%\syswow64\rwyskins\Г§ГЇ\6\images\is-3kbvd.tmp to %WINDIR%\syswow64\rwyskins\Г§ГЇ\6\images\logd2_05.png
from %WINDIR%\syswow64\rwyskins\Г§ГЇ\6\images\is-gid8m.tmp to %WINDIR%\syswow64\rwyskins\Г§ГЇ\6\images\logd2_04.png
from %WINDIR%\syswow64\rwyskins\Г§ГЇ\6\images\is-sut00.tmp to %WINDIR%\syswow64\rwyskins\Г§ГЇ\6\images\logd2_03.png
from %WINDIR%\syswow64\rwyskins\Г§ГЇ\6\images\is-vqjht.tmp to %WINDIR%\syswow64\rwyskins\Г§ГЇ\6\images\hover_08.png
from %WINDIR%\syswow64\rwyskins\Г§ГЇ\6\images\is-coqbb.tmp to %WINDIR%\syswow64\rwyskins\Г§ГЇ\6\images\hover_07.png
from %WINDIR%\syswow64\rwyskins\Г§ГЇ\6\images\is-0cisf.tmp to %WINDIR%\syswow64\rwyskins\Г§ГЇ\6\images\hover_06.png
from %WINDIR%\syswow64\rwyskins\Г§ГЇ\6\images\is-augiv.tmp to %WINDIR%\syswow64\rwyskins\Г§ГЇ\6\images\hover_05.png
from %WINDIR%\syswow64\rwyskins\ГЇГ¤\1\is-1vl9i.tmp to %WINDIR%\syswow64\rwyskins\ГЇГ¤\1\btncall_n.png
from %WINDIR%\syswow64\rwyskins\ГЇГ¤\1\is-7i5h8.tmp to %WINDIR%\syswow64\rwyskins\ГЇГ¤\1\btnchage_d.png
from %WINDIR%\syswow64\rwyskins\ГЇГ¤\1\is-tfvsu.tmp to %WINDIR%\syswow64\rwyskins\ГЇГ¤\1\imglefttitle.png
from %WINDIR%\syswow64\rwyskins\ГЇГ¤\1\is-9ff4r.tmp to %WINDIR%\syswow64\rwyskins\ГЇГ¤\1\btnlock_h.png
from %WINDIR%\syswow64\rwyskins\ГЇГ¤\1\is-ajsml.tmp to %WINDIR%\syswow64\rwyskins\ГЇГ¤\1\btnlock_n.png
from %WINDIR%\syswow64\rwyskins\ГЇГ¤\1\is-6d1td.tmp to %WINDIR%\syswow64\rwyskins\ГЇГ¤\1\btnsale_n.png
from %WINDIR%\syswow64\rwyskins\ГЇГ¤\1\is-mrihb.tmp to %WINDIR%\syswow64\rwyskins\ГЇГ¤\1\btnsale_h.png
from %WINDIR%\syswow64\rwyskins\ГЇГ¤\1\is-g930v.tmp to %WINDIR%\syswow64\rwyskins\ГЇГ¤\1\btnsale_d.png
from %WINDIR%\syswow64\rwyskins\ГЇГ¤\1\is-r4dob.tmp to %WINDIR%\syswow64\rwyskins\ГЇГ¤\1\btnmodifypsw_n.png
from %WINDIR%\syswow64\rwyskins\ГЇГ¤\1\is-6vjk9.tmp to %WINDIR%\syswow64\rwyskins\ГЇГ¤\1\btnmodifypsw_h.png
from %WINDIR%\syswow64\rwyskins\ГЇГ¤\1\is-5sjuh.tmp to %WINDIR%\syswow64\rwyskins\ГЇГ¤\1\btnmodifypsw_d.png
from %WINDIR%\syswow64\rwyskins\ГЇГ¤\1\is-dm807.tmp to %WINDIR%\syswow64\rwyskins\ГЇГ¤\1\btnmin_n.png
from %WINDIR%\syswow64\rwyskins\ГЇГ¤\1\is-5345j.tmp to %WINDIR%\syswow64\rwyskins\ГЇГ¤\1\btnmin_h.png
from %WINDIR%\syswow64\rwyskins\ГЇГ¤\1\is-liohu.tmp to %WINDIR%\syswow64\rwyskins\ГЇГ¤\1\btnmin_d.png
from %WINDIR%\syswow64\rwyskins\ГЇГ¤\2\is-42hb1.tmp to %WINDIR%\syswow64\rwyskins\ГЇГ¤\2\image1.png
from %WINDIR%\syswow64\rwyskins\ГЇГ¤\1\is-2mg1s.tmp to %WINDIR%\syswow64\rwyskins\ГЇГ¤\1\imgtitle.png
from %WINDIR%\syswow64\rwyskins\ГЇГ¤\1\is-2ge9m.tmp to %WINDIR%\syswow64\rwyskins\ГЇГ¤\1\.png
from %WINDIR%\syswow64\rwyskins\ГЇГ¤\1\is-u28sj.tmp to %WINDIR%\syswow64\rwyskins\ГЇГ¤\1\btnclose_n.png
from %WINDIR%\syswow64\rwyskins\ГЇГ¤\1\is-phsqv.tmp to %WINDIR%\syswow64\rwyskins\ГЇГ¤\1\btnclose_h.png
from %WINDIR%\syswow64\rwyskins\ГЇГ¤\1\is-og0f3.tmp to %WINDIR%\syswow64\rwyskins\ГЇГ¤\1\btnclose_d.png
from %WINDIR%\syswow64\rwyskins\ГЇГ¤\1\is-1n76j.tmp to %WINDIR%\syswow64\rwyskins\ГЇГ¤\1\btncheckout_n.png
from %WINDIR%\syswow64\rwyskins\ГЇГ¤\1\is-96kuh.tmp to %WINDIR%\syswow64\rwyskins\ГЇГ¤\1\btncheckout_h.png
from %WINDIR%\syswow64\rwyskins\ГЇГ¤\1\is-olm0p.tmp to %WINDIR%\syswow64\rwyskins\ГЇГ¤\1\btncheckout_d.png
from %WINDIR%\syswow64\rwyskins\ГЇГ¤\1\is-62139.tmp to %WINDIR%\syswow64\rwyskins\ГЇГ¤\1\btnchange_n.png
from %WINDIR%\syswow64\rwyskins\ГЇГ¤\1\is-5upkq.tmp to %WINDIR%\syswow64\rwyskins\ГЇГ¤\1\btnchange_h.png
from %WINDIR%\syswow64\rwyskins\ГЇГ¤\1\is-ffn5v.tmp to %WINDIR%\syswow64\rwyskins\ГЇГ¤\1\btnchange_d.png
from %WINDIR%\syswow64\rwyskins\ГЇГ¤\1\is-p543u.tmp to %WINDIR%\syswow64\rwyskins\ГЇГ¤\1\btnlock_d.png
from %WINDIR%\syswow64\rwyskins\Г¤В¬ГЁГЇ\1\is-02lc5.tmp to %WINDIR%\syswow64\rwyskins\Г¤В¬ГЁГЇ\1\imgtitle.png
from %WINDIR%\syswow64\rwyskins\Г¤В¬ГЁГЇ\1\is-856lb.tmp to %WINDIR%\syswow64\rwyskins\Г¤В¬ГЁГЇ\1\imgrightpic.png
from %WINDIR%\syswow64\rwyskins\Г¤В¬ГЁГЇ\1\is-r0mp1.tmp to %WINDIR%\syswow64\rwyskins\Г¤В¬ГЁГЇ\1\imglefttitle.png
from %WINDIR%\syswow64\rwyskins\ВґВє\5\is-t52mq.tmp to %WINDIR%\syswow64\rwyskins\ВґВє\5\imgleft.png
from %WINDIR%\syswow64\rwyskins\ВґВє\5\is-9s1ga.tmp to %WINDIR%\syswow64\rwyskins\ВґВє\5\imgback.png
from %WINDIR%\syswow64\rwyskins\ВґВє\5\is-jfrhf.tmp to %WINDIR%\syswow64\rwyskins\ВґВє\5\img2.png
from %WINDIR%\syswow64\rwyskins\ВґВє\4\is-5r1r5.tmp to %WINDIR%\syswow64\rwyskins\ВґВє\4\imgright.png
from %WINDIR%\syswow64\rwyskins\ВґВє\4\is-756r5.tmp to %WINDIR%\syswow64\rwyskins\ВґВє\4\imgleft.png
from %WINDIR%\syswow64\rwyskins\ВґВє\4\is-qs9hp.tmp to %WINDIR%\syswow64\rwyskins\ВґВє\4\imgcenter.png
from %WINDIR%\syswow64\rwyskins\ВґВє\4\is-m44vv.tmp to %WINDIR%\syswow64\rwyskins\ВґВє\4\btnclose_n.png
from %WINDIR%\syswow64\rwyskins\ВґВє\4\is-99og8.tmp to %WINDIR%\syswow64\rwyskins\ВґВє\4\btnclose_h.png
from %WINDIR%\syswow64\rwyskins\ВґВє\4\is-o56ic.tmp to %WINDIR%\syswow64\rwyskins\ВґВє\4\btnclose_d.png
from %WINDIR%\syswow64\rwyskins\ВґВє\4\is-tgmjr.tmp to %WINDIR%\syswow64\rwyskins\ВґВє\4\.png
from %WINDIR%\syswow64\rwyskins\ВґВє\3\is-cvs4v.tmp to %WINDIR%\syswow64\rwyskins\ВґВє\3\imgmisc.png
from %WINDIR%\syswow64\rwyskins\ВґВє\3\is-dbtd2.tmp to %WINDIR%\syswow64\rwyskins\ВґВє\3\imglinked.png
from %WINDIR%\syswow64\rwyskins\ВґВє\3\is-4tukn.tmp to %WINDIR%\syswow64\rwyskins\ВґВє\3\img3.png
from %WINDIR%\syswow64\rwyskins\ВґВє\3\is-4k01n.tmp to %WINDIR%\syswow64\rwyskins\ВґВє\3\img2.png
from %WINDIR%\syswow64\rwyskins\ВґВє\3\is-jj42o.tmp to %WINDIR%\syswow64\rwyskins\ВґВє\3\img1_cj.png
from %WINDIR%\syswow64\rwyskins\ВґВє\3\is-sjluq.tmp to %WINDIR%\syswow64\rwyskins\ВґВє\3\img1.png
from %WINDIR%\syswow64\rwyskins\ВґВє\2\is-kokuf.tmp to %WINDIR%\syswow64\rwyskins\ВґВє\2\lgjabout.png
from %WINDIR%\syswow64\rwyskins\ВґВє\2\is-cjbql.tmp to %WINDIR%\syswow64\rwyskins\ВґВє\2\image1.png
from %WINDIR%\syswow64\rwyskins\ВґВє\1\is-etlvh.tmp to %WINDIR%\syswow64\rwyskins\ВґВє\1\imgtitle.png
from %WINDIR%\syswow64\rwyskins\ВґВє\1\is-kbv6p.tmp to %WINDIR%\syswow64\rwyskins\ВґВє\1\imgrightpic.png
from %WINDIR%\syswow64\rwyskins\ВґВє\5\is-ri0r8.tmp to %WINDIR%\syswow64\rwyskins\ВґВє\5\imgright.png
from %WINDIR%\syswow64\rwyskins\ВґВє\6\is-pkro6.tmp to %WINDIR%\syswow64\rwyskins\ВґВє\6\escn_03.png
from %WINDIR%\syswow64\rwyskins\ВґВє\6\is-nu4h4.tmp to %WINDIR%\syswow64\rwyskins\ВґВє\6\escn_04.png
from %WINDIR%\syswow64\rwyskins\ВґВє\6\is-543n2.tmp to %WINDIR%\syswow64\rwyskins\ВґВє\6\esc_03.png
from %WINDIR%\syswow64\rwyskins\ВґВє\7\is-ovvd8.tmp to %WINDIR%\syswow64\rwyskins\ВґВє\7\btnsale_d.png
from %WINDIR%\syswow64\rwyskins\ВґВє\7\is-8j1df.tmp to %WINDIR%\syswow64\rwyskins\ВґВє\7\btnmodifypsw_d.png
from %WINDIR%\syswow64\rwyskins\ВґВє\7\is-c50e5.tmp to %WINDIR%\syswow64\rwyskins\ВґВє\7\btnlock_d.png
from %WINDIR%\syswow64\rwyskins\ВґВє\7\is-dt8jh.tmp to %WINDIR%\syswow64\rwyskins\ВґВє\7\btncheckout_d.png
from %WINDIR%\syswow64\rwyskins\ВґВє\7\is-kjpll.tmp to %WINDIR%\syswow64\rwyskins\ВґВє\7\btnchage_d.png
from %WINDIR%\syswow64\rwyskins\ВґВє\7\is-qa2db.tmp to %WINDIR%\syswow64\rwyskins\ВґВє\7\btncall_d.png
from %WINDIR%\syswow64\rwyskins\ВґВє\6\images\is-4lugb.tmp to %WINDIR%\syswow64\rwyskins\ВґВє\6\images\Г¶Г·Г¬Гў1_05.jpg
from %WINDIR%\syswow64\rwyskins\ВґВє\6\images\is-fn03p.tmp to %WINDIR%\syswow64\rwyskins\ВґВє\6\images\Г¶Г·Г¬Гў1_03.jpg
from %WINDIR%\syswow64\rwyskins\ВґВє\6\images\is-bf6vt.tmp to %WINDIR%\syswow64\rwyskins\ВґВє\6\images\logd2_08.png
from %WINDIR%\syswow64\rwyskins\ВґВє\6\images\is-4tv40.tmp to %WINDIR%\syswow64\rwyskins\ВґВє\6\images\logd2_07.png
from %WINDIR%\syswow64\rwyskins\ВґВє\1\is-flqfs.tmp to %WINDIR%\syswow64\rwyskins\ВґВє\1\imglefttitle.png
from %WINDIR%\syswow64\rwyskins\ВґВє\7\is-6dqse.tmp to %WINDIR%\syswow64\rwyskins\ВґВє\7\path2.png
from %WINDIR%\syswow64\rwyskins\ВґВє\6\images\is-o2gb8.tmp to %WINDIR%\syswow64\rwyskins\ВґВє\6\images\logd2_04.png
from %WINDIR%\syswow64\rwyskins\ВґВє\6\images\is-58nnl.tmp to %WINDIR%\syswow64\rwyskins\ВґВє\6\images\logd2_03.png
from %WINDIR%\syswow64\rwyskins\ВґВє\6\images\is-1bk6p.tmp to %WINDIR%\syswow64\rwyskins\ВґВє\6\images\hover_08.png
from %WINDIR%\syswow64\rwyskins\ВґВє\6\images\is-o6r4l.tmp to %WINDIR%\syswow64\rwyskins\ВґВє\6\images\hover_07.png
from %WINDIR%\syswow64\rwyskins\ВґВє\6\images\is-m5nat.tmp to %WINDIR%\syswow64\rwyskins\ВґВє\6\images\hover_06.png
from %WINDIR%\syswow64\rwyskins\ВґВє\6\images\is-p54ij.tmp to %WINDIR%\syswow64\rwyskins\ВґВє\6\images\hover_05.png
from %WINDIR%\syswow64\rwyskins\ВґВє\6\images\is-h6dhj.tmp to %WINDIR%\syswow64\rwyskins\ВґВє\6\images\hover_04.png
from %WINDIR%\syswow64\rwyskins\ВґВє\6\images\is-5mrpr.tmp to %WINDIR%\syswow64\rwyskins\ВґВє\6\images\hover_03.png
from %WINDIR%\syswow64\rwyskins\ВґВє\6\is-ctg64.tmp to %WINDIR%\syswow64\rwyskins\ВґВє\6\logo.png
from %WINDIR%\syswow64\rwyskins\ВґВє\6\is-49831.tmp to %WINDIR%\syswow64\rwyskins\ВґВє\6\esc_04.png
from %WINDIR%\syswow64\rwyskins\ВґВє\6\images\is-cjm9d.tmp to %WINDIR%\syswow64\rwyskins\ВґВє\6\images\logd2_05.png
from %WINDIR%\syswow64\rwyskins\ВґВє\1\is-im8hu.tmp to %WINDIR%\syswow64\rwyskins\ВґВє\1\btnsale_n.png
from %WINDIR%\syswow64\rwyskins\ВґВє\6\images\is-evidf.tmp to %WINDIR%\syswow64\rwyskins\ВґВє\6\images\logd2_06.png
from %WINDIR%\syswow64\rwyskins\ВґВє\1\is-fonq6.tmp to %WINDIR%\syswow64\rwyskins\ВґВє\1\btnsale_f.png
from %WINDIR%\syswow64\rwyskins\ВґВє\1\is-b5fhs.tmp to %WINDIR%\syswow64\rwyskins\ВґВє\1\btnlock_f.png
from %WINDIR%\syswow64\rwyskins\ВґВє\1\is-4533o.tmp to %WINDIR%\syswow64\rwyskins\ВґВє\1\btncall_d.png
from %WINDIR%\syswow64\rwyskins\ВґВє\1\is-dubk2.tmp to %WINDIR%\syswow64\rwyskins\ВґВє\1\.png
from %WINDIR%\syswow64\rwyskins\ВґВє\is-pnmtv.tmp to %WINDIR%\syswow64\rwyskins\ВґВє\lgjskin.ini
from %WINDIR%\syswow64\rwyskins\is-goqpj.tmp to %WINDIR%\syswow64\rwyskins\skins.ini
from %WINDIR%\syswow64\rwyskins\is-s1dfp.tmp to %WINDIR%\syswow64\rwyskins\img1.png
from %WINDIR%\syswow64\is-ud19f.tmp to %WINDIR%\syswow64\rwyncmc.exe
from %WINDIR%\syswow64\is-8micf.tmp to %WINDIR%\syswow64\signatureverify.dll
from %WINDIR%\syswow64\is-g13ka.tmp to %WINDIR%\syswow64\carddll.dll
from %WINDIR%\syswow64\is-1jmah.tmp to %WINDIR%\syswow64\filepackcom.dll
from %WINDIR%\syswow64\is-usc51.tmp to %WINDIR%\syswow64\sign.ap
from %WINDIR%\syswow64\is-o635p.tmp to %WINDIR%\syswow64\rzxfp.dll
from %WINDIR%\syswow64\is-h3rqp.tmp to %WINDIR%\syswow64\lgjmisc.png
from %WINDIR%\syswow64\is-e7ih7.tmp to %WINDIR%\syswow64\upsup.png
from %WINDIR%\syswow64\is-qtriv.tmp to %WINDIR%\syswow64\sup.png
from %WINDIR%\syswow64\is-soap5.tmp to %WINDIR%\syswow64\rwylibupdate.dll
from %WINDIR%\syswow64\is-j5238.tmp to %WINDIR%\syswow64\timer2012.dll
from %WINDIR%\syswow64\is-iv6l4.tmp to %WINDIR%\syswow64\ptimagerw.dll
from %WINDIR%\syswow64\is-1d23h.tmp to %WINDIR%\syswow64\ptqrencode.dll
from %WINDIR%\syswow64\is-dtb9s.tmp to %WINDIR%\syswow64\rwylib.dll
from %WINDIR%\syswow64\is-1ql80.tmp to %WINDIR%\syswow64\billdll.dll
from %WINDIR%\syswow64\rwyskins\ВґВє\1\is-bhlv2.tmp to %WINDIR%\syswow64\rwyskins\ВґВє\1\btncall_h.png
from %WINDIR%\syswow64\rwyskins\ВґВє\1\is-4lssh.tmp to %WINDIR%\syswow64\rwyskins\ВґВє\1\btncall_n.png
from %WINDIR%\syswow64\rwyskins\ВґВє\1\is-ja7t5.tmp to %WINDIR%\syswow64\rwyskins\ВґВє\1\btnchage_d.png
from %WINDIR%\syswow64\rwyskins\ВґВє\1\is-r1h2g.tmp to %WINDIR%\syswow64\rwyskins\ВґВє\1\btnchange_d.png
from %WINDIR%\syswow64\rwyskins\ВґВє\1\is-jddd5.tmp to %WINDIR%\syswow64\rwyskins\ВґВє\1\btnsale_d.png
from %WINDIR%\syswow64\rwyskins\ВґВє\1\is-qb7ep.tmp to %WINDIR%\syswow64\rwyskins\ВґВє\1\btnmodifypsw_n.png
from %WINDIR%\syswow64\rwyskins\ВґВє\1\is-3gn35.tmp to %WINDIR%\syswow64\rwyskins\ВґВє\1\btnmodifypsw_h.png
from %WINDIR%\syswow64\rwyskins\ВґВє\1\is-n4a29.tmp to %WINDIR%\syswow64\rwyskins\ВґВє\1\btnmodifypsw_f.png
from %WINDIR%\syswow64\rwyskins\ВґВє\1\is-fnqui.tmp to %WINDIR%\syswow64\rwyskins\ВґВє\1\btnmodifypsw_d.png
from %WINDIR%\syswow64\rwyskins\ВґВє\1\is-79mcf.tmp to %WINDIR%\syswow64\rwyskins\ВґВє\1\btnmin_n.png
from %WINDIR%\syswow64\rwyskins\ВґВє\1\is-2a9ag.tmp to %WINDIR%\syswow64\rwyskins\ВґВє\1\btnmin_h.png
from %WINDIR%\syswow64\rwyskins\ВґВє\1\is-u9lsc.tmp to %WINDIR%\syswow64\rwyskins\ВґВє\1\btnmin_d.png
from %WINDIR%\syswow64\rwyskins\ВґВє\1\is-ig1gc.tmp to %WINDIR%\syswow64\rwyskins\ВґВє\1\btnlock_n.png
from %WINDIR%\syswow64\rwyskins\ВґВє\1\is-qopq8.tmp to %WINDIR%\syswow64\rwyskins\ВґВє\1\btnlock_h.png
from %WINDIR%\syswow64\rwyskins\ВґВє\1\is-egj5j.tmp to %WINDIR%\syswow64\rwyskins\ВґВє\1\btnsale_h.png
from %WINDIR%\syswow64\rwyskins\В¶В¬\is-cd7pm.tmp to %WINDIR%\syswow64\rwyskins\В¶В¬\lgjskin.ini
from %WINDIR%\syswow64\rwyskins\ВґВє\1\is-juiir.tmp to %WINDIR%\syswow64\rwyskins\ВґВє\1\btnclose_n.png
from %WINDIR%\syswow64\rwyskins\ВґВє\1\is-ab6rb.tmp to %WINDIR%\syswow64\rwyskins\ВґВє\1\btnclose_h.png
from %WINDIR%\syswow64\rwyskins\ВґВє\1\is-ubvjf.tmp to %WINDIR%\syswow64\rwyskins\ВґВє\1\btnclose_d.png
from %WINDIR%\syswow64\rwyskins\ВґВє\1\is-fa1vb.tmp to %WINDIR%\syswow64\rwyskins\ВґВє\1\btncheckout_n.png
from %WINDIR%\syswow64\rwyskins\ВґВє\1\is-rtkq6.tmp to %WINDIR%\syswow64\rwyskins\ВґВє\1\btncheckout_h.png
from %WINDIR%\syswow64\rwyskins\ВґВє\1\is-evt70.tmp to %WINDIR%\syswow64\rwyskins\ВґВє\1\btncheckout_f.png
from %WINDIR%\syswow64\rwyskins\ВґВє\1\is-8fhdk.tmp to %WINDIR%\syswow64\rwyskins\ВґВє\1\btncheckout_d.png
from %WINDIR%\syswow64\rwyskins\ВґВє\1\is-6186p.tmp to %WINDIR%\syswow64\rwyskins\ВґВє\1\btnchange_n.png
from %WINDIR%\syswow64\rwyskins\ВґВє\1\is-065ul.tmp to %WINDIR%\syswow64\rwyskins\ВґВє\1\btnchange_h.png
from %WINDIR%\syswow64\rwyskins\ВґВє\1\is-io18g.tmp to %WINDIR%\syswow64\rwyskins\ВґВє\1\btnchange_f.png
from %WINDIR%\syswow64\rwyskins\ВґВє\1\is-4bqpk.tmp to %WINDIR%\syswow64\rwyskins\ВґВє\1\btnlock_d.png
from %WINDIR%\syswow64\rwyskins\ВґВє\1\is-ebgoe.tmp to %WINDIR%\syswow64\rwyskins\ВґВє\1\btncall_f.png
from %WINDIR%\syswow64\rwyskins\ВґВє\5\is-231kg.tmp to %WINDIR%\syswow64\rwyskins\ВґВє\5\imgmisc.png
from %WINDIR%\syswow64\rwyskins\В¶В¬\1\is-16223.tmp to %WINDIR%\syswow64\rwyskins\В¶В¬\1\.png
from %WINDIR%\syswow64\rwyskins\В¶В¬\7\is-imcls.tmp to %WINDIR%\syswow64\rwyskins\В¶В¬\7\path2.png
from %WINDIR%\syswow64\rwyskins\Г¤В¬ГЁГЇ\1\is-me6vi.tmp to %WINDIR%\syswow64\rwyskins\Г¤В¬ГЁГЇ\1\.png
from %WINDIR%\syswow64\rwyskins\В¶В¬\7\is-proa4.tmp to %WINDIR%\syswow64\rwyskins\В¶В¬\7\btnsale_d.png
from %WINDIR%\syswow64\rwyskins\В¶В¬\7\is-kj48k.tmp to %WINDIR%\syswow64\rwyskins\В¶В¬\7\btnmodifypsw_d.png
from %WINDIR%\syswow64\rwyskins\В¶В¬\7\is-sqc3c.tmp to %WINDIR%\syswow64\rwyskins\В¶В¬\7\btnlock_d.png
from %WINDIR%\syswow64\rwyskins\В¶В¬\7\is-gapup.tmp to %WINDIR%\syswow64\rwyskins\В¶В¬\7\btncheckout_d.png
from %WINDIR%\syswow64\rwyskins\В¶В¬\7\is-9lgpa.tmp to %WINDIR%\syswow64\rwyskins\В¶В¬\7\btnchage_d.png
from %WINDIR%\syswow64\rwyskins\В¶В¬\7\is-q7rjf.tmp to %WINDIR%\syswow64\rwyskins\В¶В¬\7\btncall_d.png
from %WINDIR%\syswow64\rwyskins\В¶В¬\6\images\is-vifav.tmp to %WINDIR%\syswow64\rwyskins\В¶В¬\6\images\Г¶Г·Г¬Гў1_05.jpg
from %WINDIR%\syswow64\rwyskins\В¶В¬\6\images\is-mq203.tmp to %WINDIR%\syswow64\rwyskins\В¶В¬\6\images\Г¶Г·Г¬Гў1_03.jpg
from %WINDIR%\syswow64\rwyskins\В¶В¬\6\images\is-744gj.tmp to %WINDIR%\syswow64\rwyskins\В¶В¬\6\images\logd2_08.png
from %WINDIR%\syswow64\rwyskins\В¶В¬\6\images\is-bdemb.tmp to %WINDIR%\syswow64\rwyskins\В¶В¬\6\images\logd2_07.png
from %WINDIR%\syswow64\rwyskins\В¶В¬\6\images\is-5c0dn.tmp to %WINDIR%\syswow64\rwyskins\В¶В¬\6\images\logd2_06.png
from %WINDIR%\syswow64\rwyskins\В¶В¬\6\images\is-58ia2.tmp to %WINDIR%\syswow64\rwyskins\В¶В¬\6\images\logd2_05.png
from %WINDIR%\syswow64\rwyskins\В¶В¬\6\images\is-0ckj6.tmp to %WINDIR%\syswow64\rwyskins\В¶В¬\6\images\logd2_04.png
from %WINDIR%\syswow64\rwyskins\В¶В¬\6\images\is-e4fbe.tmp to %WINDIR%\syswow64\rwyskins\В¶В¬\6\images\logd2_03.png
from %WINDIR%\syswow64\rwyskins\В¶В¬\6\images\is-vnkgu.tmp to %WINDIR%\syswow64\rwyskins\В¶В¬\6\images\hover_08.png
from %WINDIR%\syswow64\rwyskins\В¶В¬\6\images\is-pqdgt.tmp to %WINDIR%\syswow64\rwyskins\В¶В¬\6\images\hover_07.png
from %WINDIR%\syswow64\rwyskins\В¶В¬\6\images\is-3mcob.tmp to %WINDIR%\syswow64\rwyskins\В¶В¬\6\images\hover_06.png
from %WINDIR%\syswow64\rwyskins\В¶В¬\6\images\is-djhh3.tmp to %WINDIR%\syswow64\rwyskins\В¶В¬\6\images\hover_05.png
from %WINDIR%\syswow64\rwyskins\В¶В¬\6\images\is-p9kds.tmp to %WINDIR%\syswow64\rwyskins\В¶В¬\6\images\hover_04.png
from %WINDIR%\syswow64\rwyskins\В¶В¬\6\images\is-v0dcs.tmp to %WINDIR%\syswow64\rwyskins\В¶В¬\6\images\hover_03.png
from %WINDIR%\syswow64\rwyskins\Г¤В¬ГЁГЇ\1\is-7jajp.tmp to %WINDIR%\syswow64\rwyskins\Г¤В¬ГЁГЇ\1\btncall_d.png
from %WINDIR%\syswow64\rwyskins\Г¤В¬ГЁГЇ\1\is-pjvp3.tmp to %WINDIR%\syswow64\rwyskins\Г¤В¬ГЁГЇ\1\btncall_h.png
from %WINDIR%\syswow64\rwyskins\Г¤В¬ГЁГЇ\1\is-orj87.tmp to %WINDIR%\syswow64\rwyskins\Г¤В¬ГЁГЇ\1\btnsale_n.png
from %WINDIR%\syswow64\rwyskins\Г¤В¬ГЁГЇ\1\is-hgkp6.tmp to %WINDIR%\syswow64\rwyskins\Г¤В¬ГЁГЇ\1\btnlock_d.png
from %WINDIR%\syswow64\rwyskins\Г¤В¬ГЁГЇ\1\is-l58d3.tmp to %WINDIR%\syswow64\rwyskins\Г¤В¬ГЁГЇ\1\btnlock_h.png
from %WINDIR%\syswow64\rwyskins\Г¤В¬ГЁГЇ\1\is-egkn3.tmp to %WINDIR%\syswow64\rwyskins\Г¤В¬ГЁГЇ\1\btnsale_h.png
from %WINDIR%\syswow64\rwyskins\Г¤В¬ГЁГЇ\1\is-rf8ah.tmp to %WINDIR%\syswow64\rwyskins\Г¤В¬ГЁГЇ\1\btnsale_d.png
from %WINDIR%\syswow64\rwyskins\Г¤В¬ГЁГЇ\1\is-og6ql.tmp to %WINDIR%\syswow64\rwyskins\Г¤В¬ГЁГЇ\1\btnmodifypsw_n.png
from %WINDIR%\syswow64\rwyskins\Г¤В¬ГЁГЇ\1\is-sicpu.tmp to %WINDIR%\syswow64\rwyskins\Г¤В¬ГЁГЇ\1\btnmodifypsw_h.png
from %WINDIR%\syswow64\rwyskins\Г¤В¬ГЁГЇ\1\is-a9b38.tmp to %WINDIR%\syswow64\rwyskins\Г¤В¬ГЁГЇ\1\btnmodifypsw_d.png
from %WINDIR%\syswow64\rwyskins\Г¤В¬ГЁГЇ\1\is-a4dmc.tmp to %WINDIR%\syswow64\rwyskins\Г¤В¬ГЁГЇ\1\btnmin_n.png
from %WINDIR%\syswow64\rwyskins\Г¤В¬ГЁГЇ\1\is-p4btk.tmp to %WINDIR%\syswow64\rwyskins\Г¤В¬ГЁГЇ\1\btnmin_h.png
from %WINDIR%\syswow64\rwyskins\Г¤В¬ГЁГЇ\1\is-imoru.tmp to %WINDIR%\syswow64\rwyskins\Г¤В¬ГЁГЇ\1\btnmin_d.png
from %WINDIR%\syswow64\rwyskins\Г¤В¬ГЁГЇ\1\is-2bolr.tmp to %WINDIR%\syswow64\rwyskins\Г¤В¬ГЁГЇ\1\btnlock_n.png
from %WINDIR%\syswow64\rwyskins\Г¤В¬ГЁГЇ\is-vlb5p.tmp to %WINDIR%\syswow64\rwyskins\Г¤В¬ГЁГЇ\lgjskin.ini
from %WINDIR%\syswow64\rwyskins\В¶В¬\6\is-g0tbb.tmp to %WINDIR%\syswow64\rwyskins\В¶В¬\6\logo.png
from %WINDIR%\syswow64\rwyskins\В¶В¬\6\is-jo6ho.tmp to %WINDIR%\syswow64\rwyskins\В¶В¬\6\esc_03.png
from %WINDIR%\syswow64\rwyskins\Г¤В¬ГЁГЇ\1\is-ds185.tmp to %WINDIR%\syswow64\rwyskins\Г¤В¬ГЁГЇ\1\btnclose_h.png
from %WINDIR%\syswow64\rwyskins\Г¤В¬ГЁГЇ\1\is-mih6u.tmp to %WINDIR%\syswow64\rwyskins\Г¤В¬ГЁГЇ\1\btnclose_d.png
from %WINDIR%\syswow64\rwyskins\Г¤В¬ГЁГЇ\1\is-vu4oi.tmp to %WINDIR%\syswow64\rwyskins\Г¤В¬ГЁГЇ\1\btncheckout_n.png
from %WINDIR%\syswow64\rwyskins\Г¤В¬ГЁГЇ\1\is-2sodn.tmp to %WINDIR%\syswow64\rwyskins\Г¤В¬ГЁГЇ\1\btncheckout_h.png
from %WINDIR%\syswow64\rwyskins\Г¤В¬ГЁГЇ\1\is-8pm7d.tmp to %WINDIR%\syswow64\rwyskins\Г¤В¬ГЁГЇ\1\btncheckout_d.png
from %WINDIR%\syswow64\rwyskins\Г¤В¬ГЁГЇ\1\is-0ba06.tmp to %WINDIR%\syswow64\rwyskins\Г¤В¬ГЁГЇ\1\btnchange_n.png
from %WINDIR%\syswow64\rwyskins\Г¤В¬ГЁГЇ\1\is-6udr0.tmp to %WINDIR%\syswow64\rwyskins\Г¤В¬ГЁГЇ\1\btnchange_h.png
from %WINDIR%\syswow64\rwyskins\Г¤В¬ГЁГЇ\1\is-2i060.tmp to %WINDIR%\syswow64\rwyskins\Г¤В¬ГЁГЇ\1\btnchage_d.png
from %WINDIR%\syswow64\rwyskins\Г¤В¬ГЁГЇ\1\is-830ks.tmp to %WINDIR%\syswow64\rwyskins\Г¤В¬ГЁГЇ\1\btncall_n.png
from %WINDIR%\syswow64\rwyskins\Г¤В¬ГЁГЇ\1\is-vuice.tmp to %WINDIR%\syswow64\rwyskins\Г¤В¬ГЁГЇ\1\btnclose_n.png
from %WINDIR%\syswow64\rwyskins\В¶В¬\6\is-put9f.tmp to %WINDIR%\syswow64\rwyskins\В¶В¬\6\esc_04.png
from %WINDIR%\syswow64\rwyskins\В¶В¬\6\is-au4q8.tmp to %WINDIR%\syswow64\rwyskins\В¶В¬\6\escn_04.png
from %WINDIR%\syswow64\rwyskins\В¶В¬\1\is-fbdrd.tmp to %WINDIR%\syswow64\rwyskins\В¶В¬\1\btncall_d.png
from %WINDIR%\syswow64\rwyskins\В¶В¬\1\is-0eb0j.tmp to %WINDIR%\syswow64\rwyskins\В¶В¬\1\btnclose_h.png
from %WINDIR%\syswow64\rwyskins\В¶В¬\1\is-7a6br.tmp to %WINDIR%\syswow64\rwyskins\В¶В¬\1\btnmodifypsw_n.png
from %WINDIR%\syswow64\rwyskins\В¶В¬\1\is-cl234.tmp to %WINDIR%\syswow64\rwyskins\В¶В¬\1\btnmodifypsw_h.png
from %WINDIR%\syswow64\rwyskins\В¶В¬\1\is-gtu68.tmp to %WINDIR%\syswow64\rwyskins\В¶В¬\1\btnmodifypsw_d.png
from %WINDIR%\syswow64\rwyskins\В¶В¬\1\is-20994.tmp to %WINDIR%\syswow64\rwyskins\В¶В¬\1\btnmin_n.png
from %WINDIR%\syswow64\rwyskins\В¶В¬\1\is-4tstb.tmp to %WINDIR%\syswow64\rwyskins\В¶В¬\1\btnmin_h.png
from %WINDIR%\syswow64\rwyskins\В¶В¬\1\is-ggfgr.tmp to %WINDIR%\syswow64\rwyskins\В¶В¬\1\btnmin_d.png
from %WINDIR%\syswow64\rwyskins\В¶В¬\1\is-imi0p.tmp to %WINDIR%\syswow64\rwyskins\В¶В¬\1\btnlock_n.png
from %WINDIR%\syswow64\rwyskins\В¶В¬\1\is-fce3q.tmp to %WINDIR%\syswow64\rwyskins\В¶В¬\1\btnlock_h.png
from %WINDIR%\syswow64\rwyskins\В¶В¬\1\is-969if.tmp to %WINDIR%\syswow64\rwyskins\В¶В¬\1\btnlock_d.png
from %WINDIR%\syswow64\is-4sjk3.tmp to %WINDIR%\syswow64\rzxidinfoopt.dll
from %WINDIR%\syswow64\rwyskins\В¶В¬\1\is-hs06n.tmp to %WINDIR%\syswow64\rwyskins\В¶В¬\1\btnsale_h.png
from %WINDIR%\syswow64\rwyskins\В¶В¬\1\is-k8qlv.tmp to %WINDIR%\syswow64\rwyskins\В¶В¬\1\btnclose_d.png
from %WINDIR%\syswow64\rwyskins\В¶В¬\1\is-6s8fg.tmp to %WINDIR%\syswow64\rwyskins\В¶В¬\1\btncheckout_n.png
from %WINDIR%\syswow64\rwyskins\В¶В¬\1\is-eaoif.tmp to %WINDIR%\syswow64\rwyskins\В¶В¬\1\btncheckout_h.png
from %WINDIR%\syswow64\rwyskins\В¶В¬\1\is-fgijt.tmp to %WINDIR%\syswow64\rwyskins\В¶В¬\1\btncheckout_d.png
from %WINDIR%\syswow64\rwyskins\В¶В¬\1\is-27f8r.tmp to %WINDIR%\syswow64\rwyskins\В¶В¬\1\btnchange_n.png
from %WINDIR%\syswow64\rwyskins\В¶В¬\1\is-g04sm.tmp to %WINDIR%\syswow64\rwyskins\В¶В¬\1\btnchange_h.png
from %WINDIR%\syswow64\rwyskins\В¶В¬\1\is-bav8t.tmp to %WINDIR%\syswow64\rwyskins\В¶В¬\1\btnchange_d.png
from %WINDIR%\syswow64\rwyskins\В¶В¬\1\is-meud0.tmp to %WINDIR%\syswow64\rwyskins\В¶В¬\1\btnchage_d.png
from %WINDIR%\syswow64\rwyskins\В¶В¬\1\is-lu1pl.tmp to %WINDIR%\syswow64\rwyskins\В¶В¬\1\btncall_n.png
from %WINDIR%\syswow64\rwyskins\В¶В¬\1\is-1br68.tmp to %WINDIR%\syswow64\rwyskins\В¶В¬\1\btncall_h.png
from %WINDIR%\syswow64\rwyskins\В¶В¬\1\is-etf8r.tmp to %WINDIR%\syswow64\rwyskins\В¶В¬\1\btnclose_n.png
from %WINDIR%\syswow64\rwyskins\ГЇГ¤\6\images\is-d1l9m.tmp to %WINDIR%\syswow64\rwyskins\ГЇГ¤\6\images\Г¶Г·Г¬Гў1_05.jpg
from %WINDIR%\syswow64\rwyskins\В¶В¬\1\is-neicg.tmp to %WINDIR%\syswow64\rwyskins\В¶В¬\1\btnsale_n.png
from %WINDIR%\syswow64\rwyskins\В¶В¬\1\is-5ogrv.tmp to %WINDIR%\syswow64\rwyskins\В¶В¬\1\imgtitle.png
from %WINDIR%\syswow64\rwyskins\В¶В¬\1\is-p0mtn.tmp to %WINDIR%\syswow64\rwyskins\В¶В¬\1\imglefttitle.png
from %WINDIR%\syswow64\rwyskins\В¶В¬\6\is-2ulbd.tmp to %WINDIR%\syswow64\rwyskins\В¶В¬\6\escn_03.png
from %WINDIR%\syswow64\rwyskins\В¶В¬\5\is-110qt.tmp to %WINDIR%\syswow64\rwyskins\В¶В¬\5\imgright.png
from %WINDIR%\syswow64\rwyskins\В¶В¬\5\is-h6otr.tmp to %WINDIR%\syswow64\rwyskins\В¶В¬\5\imgmisc.png
from %WINDIR%\syswow64\rwyskins\В¶В¬\5\is-0p1p9.tmp to %WINDIR%\syswow64\rwyskins\В¶В¬\5\imgleft.png
from %WINDIR%\syswow64\rwyskins\В¶В¬\5\is-q4sbq.tmp to %WINDIR%\syswow64\rwyskins\В¶В¬\5\imgback.png
from %WINDIR%\syswow64\rwyskins\В¶В¬\5\is-4k2fi.tmp to %WINDIR%\syswow64\rwyskins\В¶В¬\5\img2.png
from %WINDIR%\syswow64\rwyskins\В¶В¬\4\is-3eb7c.tmp to %WINDIR%\syswow64\rwyskins\В¶В¬\4\imgright.png
from %WINDIR%\syswow64\rwyskins\В¶В¬\4\is-d0fe6.tmp to %WINDIR%\syswow64\rwyskins\В¶В¬\4\imgleft.png
from %WINDIR%\syswow64\rwyskins\В¶В¬\4\is-70cjq.tmp to %WINDIR%\syswow64\rwyskins\В¶В¬\4\imgcenter.png
from %WINDIR%\syswow64\rwyskins\В¶В¬\1\is-v25p2.tmp to %WINDIR%\syswow64\rwyskins\В¶В¬\1\imgrightpic.png
from %WINDIR%\syswow64\rwyskins\В¶В¬\4\is-qsilp.tmp to %WINDIR%\syswow64\rwyskins\В¶В¬\4\btnclose_n.png
from %WINDIR%\syswow64\rwyskins\В¶В¬\1\is-9rngj.tmp to %WINDIR%\syswow64\rwyskins\В¶В¬\1\btnsale_d.png
from %WINDIR%\syswow64\rwyskins\В¶В¬\4\is-qvcuk.tmp to %WINDIR%\syswow64\rwyskins\В¶В¬\4\.png
from %WINDIR%\syswow64\rwyskins\В¶В¬\3\is-d4tvo.tmp to %WINDIR%\syswow64\rwyskins\В¶В¬\3\imgmisc.png
from %WINDIR%\syswow64\rwyskins\В¶В¬\3\is-sl2bq.tmp to %WINDIR%\syswow64\rwyskins\В¶В¬\3\imglinked.png
from %WINDIR%\syswow64\rwyskins\В¶В¬\3\is-q36um.tmp to %WINDIR%\syswow64\rwyskins\В¶В¬\3\img3.png
from %WINDIR%\syswow64\rwyskins\В¶В¬\3\is-r0arg.tmp to %WINDIR%\syswow64\rwyskins\В¶В¬\3\img2.png
from %WINDIR%\syswow64\rwyskins\В¶В¬\3\is-hpv3n.tmp to %WINDIR%\syswow64\rwyskins\В¶В¬\3\img1_cj.png
from %WINDIR%\syswow64\rwyskins\В¶В¬\3\is-riol7.tmp to %WINDIR%\syswow64\rwyskins\В¶В¬\3\img1.png
from %WINDIR%\syswow64\rwyskins\В¶В¬\2\is-plamo.tmp to %WINDIR%\syswow64\rwyskins\В¶В¬\2\lgjabout.png
from %WINDIR%\syswow64\rwyskins\В¶В¬\2\is-glkdn.tmp to %WINDIR%\syswow64\rwyskins\В¶В¬\2\image1.png
from %WINDIR%\syswow64\rwyskins\В¶В¬\4\is-3ionk.tmp to %WINDIR%\syswow64\rwyskins\В¶В¬\4\btnclose_h.png
from %WINDIR%\syswow64\is-6ii5m.tmp to %WINDIR%\syswow64\rwystart.exe

Miscellaneous

Searches for the following windows

ClassName: '' WindowName: 'rzxcmg'
ClassName: 'TfrmClientMain' WindowName: 'frmClientMain9843urjaesad;lj33234'
ClassName: '' WindowName: 'frmClientMain9843urjaesad;lj33234'

Creates and executes the following

'%TEMP%\is-7ifc9.tmp\<File name>.tmp' /SL5="$5024C,10368123,52224,<Full path to file>"
'%WINDIR%\syswow64\rwystart.exe'
'%WINDIR%\syswow64\rwyncmc.exe'

Executes the following

'%WINDIR%\syswow64\rwystart.exe' ' (with hidden window)

Технологии

Термины

Обучение и просвещение

Мифы

Technical Information

Рекомендации по лечению

Демо бесплатно на 14 дней