PUA_WFPDISABLE.GA
W32/Wfpdisable.A (F-Prot); Riskware/WFPDisabler (Fortinet); not-a-virus:RiskTool.Win32.WFPDisabler.a (Kaspersky); WFPDisable (McAfee)
Windows
Tipo di minaccia informatica:
Potentially Unwanted Application
Distruttivo?:
No
Crittografato?:
In the wild::
Sì
Panoramica e descrizione
Dettagli tecnici
Instalación
Infiltra los archivos siguientes:
- %Desktop%\Welcome to FlyakiteOSX.lnk
- %Desktop%\Tiger System Preferences v2.lnk
- %All Users Profile%\Start Menu\Programs\FlyakiteOSX\Software\Tiger System Preferences.lnk
- %All Users Profile%\Start Menu\Programs\FlyakiteOSX\Software\UberIcon.lnk
- %All Users Profile%\Start Menu\Programs\FlyakiteOSX\Software\WinRoll.lnk
- %All Users Profile%\Start Menu\Programs\FlyakiteOSX\Software\Y'z Shadow.lnk
- %All Users Profile%\Start Menu\Programs\FlyakiteOSX\Software\iColorFolder.lnk
- %All Users Profile%\Start Menu\Programs\FlyakiteOSX\Tools\Advanced\Force System File Update.lnk
- %All Users Profile%\Start Menu\Programs\FlyakiteOSX\Tools\Current User Settings.lnk
- %All Users Profile%\Start Menu\Programs\FlyakiteOSX\Tools\Rebuild Icon Cache.lnk
- %All Users Profile%\Start Menu\Programs\FlyakiteOSX\Tools\System Files Updater.lnk
- %All Users Profile%\Start Menu\Programs\FlyakiteOSX\Uninstall.lnk
- %All Users Profile%\Start Menu\Programs\FlyakiteOSX\Website.lnk
- %All Users Profile%\Start Menu\Programs\FlyakiteOSX\Welcome to FlyakiteOSX.lnk
- %Start Menu%\Programs\Tiger System Preferences v2\CPUZ.lnk
- %Start Menu%\Programs\Tiger System Preferences v2\Customize Tutorial.lnk
- %Start Menu%\Programs\Tiger System Preferences v2\Tiger System Preferences v2.lnk
- %Start Menu%\Programs\Tiger System Preferences v2\TweakGDS.lnk
- %Start Menu%\Programs\Tiger System Preferences v2\Uninstall Tiger System Preferences v2.lnk
- %Start Menu%\Programs\iColorFolder\Download additional skins.lnk
- %Start Menu%\Programs\iColorFolder\Skin Selector.lnk
- %Start Menu%\Programs\iColorFolder\Uninstall iColorFolder.lnk
- %User Temp%\{random characters}.tmp\TSPv2.exe
- %User Temp%\{random characters}.tmp\Batch Restore Script.exe
- %User Temp%\{random characters}.tmp\ExecCmd.dll
- %User Temp%\{random characters}.tmp\Extra Options.ini
- %User Temp%\{random characters}.tmp\InstallOptions.dll
- %User Temp%\{random characters}.tmp\Logo.bmp
- %User Temp%\{random characters}.tmp\MainPage.ini
- %User Temp%\{random characters}.tmp\Splash.gif
- %User Temp%\{random characters}.tmp\System.dll
- %User Temp%\{random characters}.tmp\iColorFolder.exe
- %User Temp%\{random characters}.tmp\ioSpecial.ini
- %User Temp%\{random characters}.tmp\modern-header.bmp
- %User Temp%\{random characters}.tmp\modern-wizard.bmp
- %User Temp%\{random characters}.tmp\newadvsplash.dll
- %User Temp%\{random characters}.tmp\nsProcess.dll
- %Program Files%\UberIcon\Changelog.html
- %Program Files%\UberIcon\Data\About\._About.png
- %Program Files%\UberIcon\Data\About\About.ini
- %Program Files%\UberIcon\Data\About\About.png
- %Program Files%\UberIcon\Languages\Instructions.html
- %Program Files%\UberIcon\Languages\Language IDs.URL
- %Program Files%\UberIcon\Languages\LanguageID Finder.exe
- %Program Files%\UberIcon\Languages\{numbers}.ini
- %Program Files%\UberIcon\License-Full.html
- %Program Files%\UberIcon\License.html
- %Program Files%\UberIcon\License_files\deed.gif
- %Program Files%\UberIcon\License_files\deed_{numbers}.gif
- %Program Files%\UberIcon\License_files\deeds.css
- %Program Files%\UberIcon\License_files\logo_code.gif
- %Program Files%\UberIcon\License_files\logo_deed.gif
- %Program Files%\UberIcon\License_files\popup.gif
- %Program Files%\UberIcon\Plugins\iBounce\Source\iBounce.cpp
- %Program Files%\UberIcon\Plugins\iBounce\Source\iBounce.ncb
- %Program Files%\UberIcon\Plugins\iBounce\Source\iBounce.sln
- %Program Files%\UberIcon\Plugins\iBounce\Source\iBounce.suo
- %Program Files%\UberIcon\Plugins\iBounce\Source\iBounce.vcproj
- %Program Files%\UberIcon\Plugins\iBounce\Source\stdafx.cpp
- %Program Files%\UberIcon\Plugins\iBounce\Source\stdafx.h
- %Program Files%\UberIcon\Plugins\iBounce\fx.dll
- %Program Files%\UberIcon\Plugins\iZoom\Source\iZoom.cpp
- %Program Files%\UberIcon\Plugins\iZoom\Source\iZoom.ncb
- %Program Files%\UberIcon\Plugins\iZoom\Source\iZoom.sln
- %Program Files%\UberIcon\Plugins\iZoom\Source\iZoom.suo
- %Program Files%\UberIcon\Plugins\iZoom\Source\iZoom.vcproj
- %Program Files%\UberIcon\Plugins\iZoom\Source\stdafx.cpp
- %Program Files%\UberIcon\Plugins\iZoom\Source\stdafx.h
- %Program Files%\UberIcon\Plugins\iZoom\fx.dll
- %Program Files%\UberIcon\UberAPI\UberAPI.h
- %Program Files%\UberIcon\UberAPI\exports.def
- %Program Files%\UberIcon\UberIcon Manager.exe
- %Program Files%\UberIcon\UberIcon.dll
- %Program Files%\WinRoll\readme.html
- %Program Files%\WinRoll\winroll.dll
- %Program Files%\WinRoll\winroll.exe
- %Program Files%\WinRoll\winroll.png
- %Program Files%\YzShadow\Languages\English.lang
- %Program Files%\YzShadow\Languages\Japanese.lang
- %Program Files%\YzShadow\Readme_en.txt
- %Program Files%\YzShadow\Readme_jp.txt
- %Program Files%\YzShadow\YzShadow.dll
- %Program Files%\YzShadow\YzShadow.exe
- %Program Files%\YzShadow\YzShadow.ini
- %Program Files%\iColorFolder\CMExt.dll
- %Program Files%\iColorFolder\doc\Changelog.txt
- %Program Files%\iColorFolder\doc\How to build the sources.txt
- %Program Files%\iColorFolder\doc\How to create a Skin.txt
- %Program Files%\iColorFolder\doc\License.txt
- %Program Files%\iColorFolder\doc\ReadMe_en.txt
- %Program Files%\iColorFolder\doc\ReadMe_fr.txt
- %Program Files%\iColorFolder\iColorFolder.dll
- %Program Files%\iColorFolder\iColorFolder.exe
- %Program Files%\iColorFolder\skins\Mac OS X\iColorFolder.dll
- %Program Files%\iColorFolder\skins\Mac OS X\preview.png
- %Program Files%\iColorFolder\skins\WindowsXP\iColorFolder.dll
- %Program Files%\iColorFolder\skins\WindowsXP\preview.png
- %Program Files%\iColorFolder\uninstall.exe
- %Windows%\Alt+Q Hotkey.exe
- %Windows%\Cursors\OSX\OS X Alternate.cur
- %Windows%\Cursors\OSX\OS X Beam.cur
- %Windows%\Cursors\OSX\OS X Busy.ani
- %Windows%\Cursors\OSX\OS X Cross.cur
- %Windows%\Cursors\OSX\OS X Cursor.cur
- %Windows%\Cursors\OSX\OS X Hand.cur
- %Windows%\Cursors\OSX\OS X Help.cur
- %Windows%\Cursors\OSX\OS X Pen.cur
- %Windows%\Cursors\OSX\OS X Resize All.cur
- %Windows%\Cursors\OSX\OS X Resize Left.cur
- %Windows%\Cursors\OSX\OS X Resize Right.cur
- %Windows%\Cursors\OSX\OS X Size Horz.cur
- %Windows%\Cursors\OSX\OS X Size Vert.cur
- %Windows%\Cursors\OSX\OS X Unavailable.cur
- %Windows%\Cursors\OSX\OS X Working.ani
- %Windows%\FlyakiteOSX\FileTypeIcons\BMP.ico
- %Windows%\FlyakiteOSX\FileTypeIcons\GIF.ico
- %Windows%\FlyakiteOSX\FileTypeIcons\JPEG.ico
- %Windows%\FlyakiteOSX\FileTypeIcons\PNG.ico
- %Windows%\FlyakiteOSX\FileTypeIcons\PSD.ico
- %Windows%\FlyakiteOSX\FileTypeIcons\TIFF.ico
- %Windows%\FlyakiteOSX\Install.ico
- %Windows%\FlyakiteOSX\Lucida Grande Bold.ttf
- %Windows%\FlyakiteOSX\Lucida Grande.ttf
- %Windows%\FlyakiteOSX\NewFiles\acctres.dll
- %Windows%\FlyakiteOSX\NewFiles\accwiz.exe
- %Windows%\FlyakiteOSX\NewFiles\ahui.exe
- %Windows%\FlyakiteOSX\NewFiles\asctrls.ocx
- %Windows%\FlyakiteOSX\NewFiles\batmeter.dll
- %Windows%\FlyakiteOSX\NewFiles\batt.dll
- %Windows%\FlyakiteOSX\NewFiles\browseui.dll
- %Windows%\FlyakiteOSX\NewFiles\cagicon.exe
- %Windows%\FlyakiteOSX\NewFiles\calc.exe
- %Windows%\FlyakiteOSX\NewFiles\cards.dll
- %Windows%\FlyakiteOSX\NewFiles\certmgr.dll
- %Windows%\FlyakiteOSX\NewFiles\charmap.exe
- %Windows%\FlyakiteOSX\NewFiles\ciadmin.dll
- %Windows%\FlyakiteOSX\NewFiles\cleanmgr.exe
- %Windows%\FlyakiteOSX\NewFiles\cmd.exe
- %Windows%\FlyakiteOSX\NewFiles\cmdial32.dll
- %Windows%\FlyakiteOSX\NewFiles\cmmon32.exe
- %Windows%\FlyakiteOSX\NewFiles\comctl32.dll
- %Windows%\FlyakiteOSX\NewFiles\comres.dll
- %Windows%\FlyakiteOSX\NewFiles\console.dll
- %Windows%\FlyakiteOSX\NewFiles\credui.dll
- %Windows%\FlyakiteOSX\NewFiles\cscui.dll
- %Windows%\FlyakiteOSX\NewFiles\deskadp.dll
- %Windows%\FlyakiteOSX\NewFiles\deskmon.dll
- %Windows%\FlyakiteOSX\NewFiles\devmgr.dll
- %Windows%\FlyakiteOSX\NewFiles\dfrgres.dll
- %Windows%\FlyakiteOSX\NewFiles\dmdlgs.dll
- %Windows%\FlyakiteOSX\NewFiles\dpvoice.dll
- %Windows%\FlyakiteOSX\NewFiles\dpvsetup.exe
- %Windows%\FlyakiteOSX\NewFiles\drwtsn32.exe
- %Windows%\FlyakiteOSX\NewFiles\dsquery.dll
- %Windows%\FlyakiteOSX\NewFiles\dvdplay.exe
- %Windows%\FlyakiteOSX\NewFiles\dxdiag.exe
- %Windows%\FlyakiteOSX\NewFiles\els.dll
- %Windows%\FlyakiteOSX\NewFiles\eventvwr.exe
- %Windows%\FlyakiteOSX\NewFiles\excel.exe
- %Windows%\FlyakiteOSX\NewFiles\explorer.exe
- %Windows%\FlyakiteOSX\NewFiles\filemgmt.dll
- %Windows%\FlyakiteOSX\NewFiles\fldrclnr.dll
- %Windows%\FlyakiteOSX\NewFiles\fontext.dll
- %Windows%\FlyakiteOSX\NewFiles\gcdef.dll
- %Windows%\FlyakiteOSX\NewFiles\gpedit.dll
- %Windows%\FlyakiteOSX\NewFiles\helpctr.exe
- %Windows%\FlyakiteOSX\NewFiles\hhctrl.ocx
- %Windows%\FlyakiteOSX\NewFiles\hnetwiz.dll
- %Windows%\FlyakiteOSX\NewFiles\hotplug.dll
- %Windows%\FlyakiteOSX\NewFiles\hticons.dll
- %Windows%\FlyakiteOSX\NewFiles\hypertrm.exe
- %Windows%\FlyakiteOSX\NewFiles\icmui.dll
- %Windows%\FlyakiteOSX\NewFiles\icwdial.dll
- %Windows%\FlyakiteOSX\NewFiles\ieaksie.dll
- %Windows%\FlyakiteOSX\NewFiles\iexplore.exe
- %Windows%\FlyakiteOSX\NewFiles\inetcplc.dll
- %Windows%\FlyakiteOSX\NewFiles\infopath.exe
- %Windows%\FlyakiteOSX\NewFiles\joticon.exe
- %Windows%\FlyakiteOSX\NewFiles\keymgr.dll
- %Windows%\FlyakiteOSX\NewFiles\logon.scr
- %Windows%\FlyakiteOSX\NewFiles\logonui.exe
- %Windows%\FlyakiteOSX\NewFiles\magnify.exe
- %Windows%\FlyakiteOSX\NewFiles\main.cpl
- %Windows%\FlyakiteOSX\NewFiles\mdminst.dll
- %Windows%\FlyakiteOSX\NewFiles\migpwd.exe
- %Windows%\FlyakiteOSX\NewFiles\migwiz.exe
- %Windows%\FlyakiteOSX\NewFiles\misc.exe
- %Windows%\FlyakiteOSX\NewFiles\mmc.exe
- %Windows%\FlyakiteOSX\NewFiles\mmsys.cpl
- %Windows%\FlyakiteOSX\NewFiles\mobsync.dll
- %Windows%\FlyakiteOSX\NewFiles\mobsync.exe
- %Windows%\FlyakiteOSX\NewFiles\modemui.dll
- %Windows%\FlyakiteOSX\NewFiles\moricons.dll
- %Windows%\FlyakiteOSX\NewFiles\moviemk.exe
- %Windows%\FlyakiteOSX\NewFiles\mqutil.dll
- %Windows%\FlyakiteOSX\NewFiles\msaccess.exe
- %Windows%\FlyakiteOSX\NewFiles\msconfig.exe
- %Windows%\FlyakiteOSX\NewFiles\mscorier.dll
- %Windows%\FlyakiteOSX\NewFiles\msdxm.ocx
- %Windows%\FlyakiteOSX\NewFiles\msgina.dll
- %Windows%\FlyakiteOSX\NewFiles\mshearts.exe
- %Windows%\FlyakiteOSX\NewFiles\mshtml.dll
- %Windows%\FlyakiteOSX\NewFiles\msident.dll
- %Windows%\FlyakiteOSX\NewFiles\msieftp.dll
- %Windows%\FlyakiteOSX\NewFiles\msiexec.exe
- %Windows%\FlyakiteOSX\NewFiles\msimn.exe
- %Windows%\FlyakiteOSX\NewFiles\msinfo32.exe
- %Windows%\FlyakiteOSX\NewFiles\msmsgs.exe
- %Windows%\FlyakiteOSX\NewFiles\msoeres.dll
- %Windows%\FlyakiteOSX\NewFiles\mspaint.exe
- %Windows%\FlyakiteOSX\NewFiles\mspicons.exe
- %Windows%\FlyakiteOSX\NewFiles\mspub.exe
- %Windows%\FlyakiteOSX\NewFiles\mstask.dll
- %Windows%\FlyakiteOSX\NewFiles\mstsc.exe
- %Windows%\FlyakiteOSX\NewFiles\mycomput.dll
- %Windows%\FlyakiteOSX\NewFiles\mydocs.dll
- %Windows%\FlyakiteOSX\NewFiles\narrator.exe
- %Windows%\FlyakiteOSX\NewFiles\ncpa.cpl
- %Windows%\FlyakiteOSX\NewFiles\netid.dll
- %Windows%\FlyakiteOSX\NewFiles\netplwiz.dll
- %Windows%\FlyakiteOSX\NewFiles\netsetup.exe
- %Windows%\FlyakiteOSX\NewFiles\netshell.dll
- %Windows%\FlyakiteOSX\NewFiles\newdev.dll
- %Windows%\FlyakiteOSX\NewFiles\notepad.exe
- %Windows%\FlyakiteOSX\NewFiles\ntbackup.exe
- %Windows%\FlyakiteOSX\NewFiles\ntkrnlpa.exe
- %Windows%\FlyakiteOSX\NewFiles\ntmsmgr.dll
- %Windows%\FlyakiteOSX\NewFiles\ntoskrnl.exe
- %Windows%\FlyakiteOSX\NewFiles\ntshrui.dll
- %Windows%\FlyakiteOSX\NewFiles\nusrmgr.cpl
- %Windows%\FlyakiteOSX\NewFiles\occache.dll
- %Windows%\FlyakiteOSX\NewFiles\odbcad32.exe
- %Windows%\FlyakiteOSX\NewFiles\odbccp32.cpl
- %Windows%\FlyakiteOSX\NewFiles\odbcint.dll
- %Windows%\FlyakiteOSX\NewFiles\ois.exe
- %Windows%\FlyakiteOSX\NewFiles\oisicon.exe
- %Windows%\FlyakiteOSX\NewFiles\ole32.dll
- %Windows%\FlyakiteOSX\NewFiles\onenote.exe
- %Windows%\FlyakiteOSX\NewFiles\onenotem.exe
- %Windows%\FlyakiteOSX\NewFiles\osk.exe
- %Windows%\FlyakiteOSX\NewFiles\osuninst.exe
- %Windows%\FlyakiteOSX\NewFiles\outicon.exe
- %Windows%\FlyakiteOSX\NewFiles\outlook.exe
- %Windows%\FlyakiteOSX\NewFiles\packager.exe
- %Windows%\FlyakiteOSX\NewFiles\perfmon.exe
- %Windows%\FlyakiteOSX\NewFiles\photowiz.dll
- %Windows%\FlyakiteOSX\NewFiles\powercfg.cpl
- %Windows%\FlyakiteOSX\NewFiles\powerpnt.exe
- %Windows%\FlyakiteOSX\NewFiles\pptico.exe
- %Windows%\FlyakiteOSX\NewFiles\printui.dll
- %Windows%\FlyakiteOSX\NewFiles\rarext.dll
- %Windows%\FlyakiteOSX\NewFiles\rasdlg.dll
- %Windows%\FlyakiteOSX\NewFiles\rcimlby.exe
- %Windows%\FlyakiteOSX\NewFiles\regedit.exe
- %Windows%\FlyakiteOSX\NewFiles\regwizc.dll
- %Windows%\FlyakiteOSX\NewFiles\remotepg.dll
- %Windows%\FlyakiteOSX\NewFiles\rstrui.exe
- %Windows%\FlyakiteOSX\NewFiles\rtcshare.exe
- %Windows%\FlyakiteOSX\NewFiles\sapi.cpl
- %Windows%\FlyakiteOSX\NewFiles\sdhcinst.dll
- %Windows%\FlyakiteOSX\NewFiles\sendmail.dll
- %Windows%\FlyakiteOSX\NewFiles\setupapi.dll
- %Windows%\FlyakiteOSX\NewFiles\shdoclc.dll
- %Windows%\FlyakiteOSX\NewFiles\shdocvw.dll
- %Windows%\FlyakiteOSX\NewFiles\shell32.dll
- %Windows%\FlyakiteOSX\NewFiles\shimgvw.dll
- %Windows%\FlyakiteOSX\NewFiles\shrpubw.exe
- %Windows%\FlyakiteOSX\NewFiles\sigverif.exe
- %Windows%\FlyakiteOSX\NewFiles\sndrec32.exe
- %Windows%\FlyakiteOSX\NewFiles\sndvol32.exe
- %Windows%\FlyakiteOSX\NewFiles\sol.exe
- %Windows%\FlyakiteOSX\NewFiles\spider.exe
- %Windows%\FlyakiteOSX\NewFiles\srchui.dll
- %Windows%\FlyakiteOSX\NewFiles\srrstr.dll
- %Windows%\FlyakiteOSX\NewFiles\sti_ci.dll
- %Windows%\FlyakiteOSX\NewFiles\stimon.exe
- %Windows%\FlyakiteOSX\NewFiles\stobject.dll
- %Windows%\FlyakiteOSX\NewFiles\storprop.dll
- %Windows%\FlyakiteOSX\NewFiles\syncapp.exe
- %Windows%\FlyakiteOSX\NewFiles\syncui.dll
- %Windows%\FlyakiteOSX\NewFiles\sysdm.cpl
- %Windows%\FlyakiteOSX\NewFiles\syskey.exe
- %Windows%\FlyakiteOSX\NewFiles\sysmon.ocx
- %Windows%\FlyakiteOSX\NewFiles\sysocmgr.exe
- %Windows%\FlyakiteOSX\NewFiles\syssetup.dll
- %Windows%\FlyakiteOSX\NewFiles\tapiui.dll
- %Windows%\FlyakiteOSX\NewFiles\taskmgr.exe
- %Windows%\FlyakiteOSX\NewFiles\telephon.cpl
- %Windows%\FlyakiteOSX\NewFiles\telnet.exe
- %Windows%\FlyakiteOSX\NewFiles\themeui.dll
- %Windows%\FlyakiteOSX\NewFiles\timedate.cpl
- %Windows%\FlyakiteOSX\NewFiles\tourstart.exe
- %Windows%\FlyakiteOSX\NewFiles\upnpui.dll
- %Windows%\FlyakiteOSX\NewFiles\url.dll
- %Windows%\FlyakiteOSX\NewFiles\urlmon.dll
- %Windows%\FlyakiteOSX\NewFiles\user32.dll
- %Windows%\FlyakiteOSX\NewFiles\utilman.exe
- %Windows%\FlyakiteOSX\NewFiles\verifier.exe
- %Windows%\FlyakiteOSX\NewFiles\wab.exe
- %Windows%\FlyakiteOSX\NewFiles\wab32.dll
- %Windows%\FlyakiteOSX\NewFiles\wab32res.dll
- %Windows%\FlyakiteOSX\NewFiles\wabfind.dll
- %Windows%\FlyakiteOSX\NewFiles\wabimp.dll
- %Windows%\FlyakiteOSX\NewFiles\wabmig.exe
- %Windows%\FlyakiteOSX\NewFiles\webcheck.dll
- %Windows%\FlyakiteOSX\NewFiles\wiaacmgr.exe
- %Windows%\FlyakiteOSX\NewFiles\wiadefui.dll
- %Windows%\FlyakiteOSX\NewFiles\wiashext.dll
- %Windows%\FlyakiteOSX\NewFiles\winbrand.dll
- %Windows%\FlyakiteOSX\NewFiles\winchat.exe
- %Windows%\FlyakiteOSX\NewFiles\winhlp32.exe
- %Windows%\FlyakiteOSX\NewFiles\wininet.dll
- %Windows%\FlyakiteOSX\NewFiles\winmine.exe
- %Windows%\FlyakiteOSX\NewFiles\winrar.exe
- %Windows%\FlyakiteOSX\NewFiles\winsrv.dll
- %Windows%\FlyakiteOSX\NewFiles\winword.exe
- %Windows%\FlyakiteOSX\NewFiles\wmplayer.exe
- %Windows%\FlyakiteOSX\NewFiles\wordicon.exe
- %Windows%\FlyakiteOSX\NewFiles\wordpad.exe
- %Windows%\FlyakiteOSX\NewFiles\wpabaln.exe
- %Windows%\FlyakiteOSX\NewFiles\write.exe
- %Windows%\FlyakiteOSX\NewFiles\wscript.exe
- %Windows%\FlyakiteOSX\NewFiles\wscui.cpl
- %Windows%\FlyakiteOSX\NewFiles\wsecedit.dll
- %Windows%\FlyakiteOSX\NewFiles\wuauclt.exe
- %Windows%\FlyakiteOSX\NewFiles\wuaucpl.cpl
- %Windows%\FlyakiteOSX\NewFiles\wupdmgr.exe
- %Windows%\FlyakiteOSX\NewFiles\xlicons.exe
- %Windows%\FlyakiteOSX\NewFiles\xpsp2res.dll
- %Windows%\FlyakiteOSX\NewFiles\zipfldr.dll
- %Windows%\FlyakiteOSX\Tools\Current User Settings.exe
- %Windows%\FlyakiteOSX\Tools\Force System File Update.exe
- %Windows%\FlyakiteOSX\Tools\Move Taskbar to Bottom.exe
- %Windows%\FlyakiteOSX\Tools\Move Taskbar to Top.exe
- %Windows%\FlyakiteOSX\Tools\MoveEx.exe
- %Windows%\FlyakiteOSX\Tools\RebIC.exe
- %Windows%\FlyakiteOSX\Tools\ReplacePalette.xsc
- %Windows%\FlyakiteOSX\Tools\ResHacker.ini
- %Windows%\FlyakiteOSX\Tools\System Files Updater.exe
- %Windows%\FlyakiteOSX\Tools\Universal UXTheme Patcher v1.4.exe
- %Windows%\FlyakiteOSX\Tools\XVI32.exe
- %Windows%\FlyakiteOSX\Tools\XVI32.ini
- %Windows%\FlyakiteOSX\Tools\bootcfg.exe
- %Windows%\FlyakiteOSX\Tools\gsar.exe
- %Windows%\FlyakiteOSX\Tools\reshacker.exe
- %Windows%\FlyakiteOSX\Tools\wfpdisable.exe
- %Windows%\FlyakiteOSX\Tray.ico
- %Windows%\FlyakiteOSX\Uninstall.exe
- %Windows%\FlyakiteOSX\Website.lnk
- %Windows%\Resources\Sounds\Iceman\Alarm.wav
- %Windows%\Resources\Sounds\Iceman\Close.wav
- %Windows%\Resources\Sounds\Iceman\Error.wav
- %Windows%\Resources\Sounds\Iceman\Funk.wav
- %Windows%\Resources\Sounds\Iceman\Grab.wav
- %Windows%\Resources\Sounds\Iceman\Hardware Connected.wav
- %Windows%\Resources\Sounds\Iceman\Hardware Disconnected.wav
- %Windows%\Resources\Sounds\Iceman\Maximize.wav
- %Windows%\Resources\Sounds\Iceman\Menu Command.wav
- %Windows%\Resources\Sounds\Iceman\Menu Popup.wav
- %Windows%\Resources\Sounds\Iceman\Minimize.wav
- %Windows%\Resources\Sounds\Iceman\New Messages.wav
- %Windows%\Resources\Sounds\Iceman\No New Messages.wav
- %Windows%\Resources\Sounds\Iceman\Open.wav
- %Windows%\Resources\Sounds\Iceman\Ping.wav
- %Windows%\Resources\Sounds\Iceman\Print Complete.wav
- %Windows%\Resources\Sounds\Iceman\Purr.wav
- %Windows%\Resources\Sounds\Iceman\System Log In.wav
- %Windows%\Resources\Sounds\Iceman\System Log Off.wav
- %Windows%\Resources\Sounds\Iceman\Trash Drop Item.wav
- %Windows%\Resources\Sounds\Iceman\Trash Empty.wav
- %Windows%\Resources\Sounds\Iceman\Undo(Max).wav
- %Windows%\Resources\Sounds\Iceman\Undo(Min).wav
- %Windows%\Resources\Themes\Tiger\Readme.txt
- %Windows%\Resources\Themes\Tiger\Shell\AppleG\shellstyle.dll
- %Windows%\Resources\Themes\Tiger\Shell\NormalColor\shellstyle.dll
- %Windows%\Resources\Themes\Tiger\Shell\WindowB\shellstyle.dll
- %Windows%\Resources\Themes\Tiger\Shell\WindowG\shellstyle.dll
- %Windows%\Resources\Themes\Tiger\StudioTwentyEight.url
- %Windows%\Resources\Themes\Tiger\Tiger Compact.msstyles
- %Windows%\Resources\Themes\Tiger\Tiger.msstyles
- %Windows%\RestoreFlyakiteOSX.txt
- %Windows%\Web\Wallpaper\Aqua Blue.bmp
- %Windows%\pchealth\helpctr\System\images\16x16\arrow_blue_normal_shadow.bmp
- %Windows%\pchealth\helpctr\System\images\16x16\arrow_green_normal_shadow.bmp
- %Windows%\pchealth\helpctr\System\images\16x16\compat.bmp
- %Windows%\pchealth\helpctr\System\images\16x16\errmsg.bmp
- %Windows%\pchealth\helpctr\System\images\16x16\support.bmp
- %Windows%\pchealth\helpctr\System\images\16x16\tools.bmp
- %Windows%\pchealth\helpctr\System\images\16x16\update.bmp
- %Windows%\pchealth\helpctr\System\images\16x16\warning.gif
- %Windows%\pchealth\helpctr\System\images\24x24\arrow_green_mousedown.bmp
- %Windows%\pchealth\helpctr\System\images\24x24\arrow_green_mouseover.bmp
- %Windows%\pchealth\helpctr\System\images\24x24\arrow_green_normal.bmp
- %Windows%\pchealth\helpctr\System\images\32x32\logo.bmp
- %Windows%\pchealth\helpctr\System\images\48x48\desktop_icon_generic.bmp
- %Windows%\pchealth\helpctr\System\images\48x48\desktop_icon_{numbers}.bmp
- %Windows%\pchealth\helpctr\System\images\Centers\blue_arrow.gif
- %Windows%\pchealth\helpctr\System\images\error.gif
- %Windows%\pchealth\helpctr\System\images\feedback.gif
- %Windows%\pchealth\helpctr\System\images\info.gif
- %Windows%\pchealth\helpctr\System\images\warning.gif
- %System%\Flurry.scr
- %System%\dllcache\acctres.dll
- %System%\dllcache\accwiz.exe
- %System%\dllcache\ahui.exe
- %System%\dllcache\asctrls.ocx
- %System%\dllcache\batmeter.dll
- %System%\dllcache\batt.dll
- %System%\dllcache\browseui.dll
- %System%\dllcache\calc.exe
- %System%\dllcache\cards.dll
- %System%\dllcache\certmgr.dll
- %System%\dllcache\charmap.exe
- %System%\dllcache\ciadmin.dll
- %System%\dllcache\cleanmgr.exe
- %System%\dllcache\cmd.exe
- %System%\dllcache\cmdial32.dll
- %System%\dllcache\cmmon32.exe
- %System%\dllcache\comctl32.dll
- %System%\dllcache\comres.dll
- %System%\dllcache\console.dll
- %System%\dllcache\credui.dll
- %System%\dllcache\cscui.dll
- %System%\dllcache\deskadp.dll
- %System%\dllcache\deskmon.dll
- %System%\dllcache\devmgr.dll
- %System%\dllcache\dfrgres.dll
- %System%\dllcache\dmdlgs.dll
- %System%\dllcache\dpvoice.dll
- %System%\dllcache\dpvsetup.exe
- %System%\dllcache\drwtsn32.exe
- %System%\dllcache\dsquery.dll
- %System%\dllcache\dxdiag.exe
- %System%\dllcache\els.dll
- %System%\dllcache\eventvwr.exe
- %System%\dllcache\explorer.exe
- %System%\dllcache\filemgmt.dll
- %System%\dllcache\fldrclnr.dll
- %System%\dllcache\fontext.dll
- %System%\dllcache\gcdef.dll
- %System%\dllcache\gpedit.dll
- %System%\dllcache\helpctr.exe
- %System%\dllcache\hhctrl.ocx
- %System%\dllcache\hnetwiz.dll
- %System%\dllcache\hotplug.dll
- %System%\dllcache\icmui.dll
- %System%\dllcache\icwdial.dll
- %System%\dllcache\ieaksie.dll
- %System%\dllcache\iexplore.exe
- %System%\dllcache\inetcplc.dll
- %System%\dllcache\keymgr.dll
- %System%\dllcache\logon.scr
- %System%\dllcache\logonui.exe
- %System%\dllcache\magnify.exe
- %System%\dllcache\main.cpl
- %System%\dllcache\mdminst.dll
- %System%\dllcache\migwiz.exe
- %System%\dllcache\mmc.exe
- %System%\dllcache\mmsys.cpl
- %System%\dllcache\mobsync.dll
- %System%\dllcache\mobsync.exe
- %System%\dllcache\modemui.dll
- %System%\dllcache\moricons.dll
- %System%\dllcache\moviemk.exe
- %System%\dllcache\mqutil.dll
- %System%\dllcache\msconfig.exe
- %System%\dllcache\msdxm.ocx
- %System%\dllcache\msgina.dll
- %System%\dllcache\mshearts.exe
- %System%\dllcache\mshtml.dll
- %System%\dllcache\msident.dll
- %System%\dllcache\msieftp.dll
- %System%\dllcache\msiexec.exe
- %System%\dllcache\msimn.exe
- %System%\dllcache\msinfo32.exe
- %System%\dllcache\msoeres.dll
- %System%\dllcache\mspaint.exe
- %System%\dllcache\mstask.dll
- %System%\dllcache\mycomput.dll
- %System%\dllcache\mydocs.dll
- %System%\dllcache\narrator.exe
- %System%\dllcache\ncpa.cpl
- %System%\dllcache\netid.dll
- %System%\dllcache\netplwiz.dll
- %System%\dllcache\netsetup.exe
- %System%\dllcache\netshell.dll
- %System%\dllcache\newdev.dll
- %System%\dllcache\notepad.exe
- %System%\dllcache\ntbackup.exe
- %System%\dllcache\ntmsmgr.dll
- %System%\dllcache\ntshrui.dll
- %System%\dllcache\nusrmgr.cpl
- %System%\dllcache\occache.dll
- %System%\dllcache\odbcad32.exe
- %System%\dllcache\odbccp32.cpl
- %System%\dllcache\odbcint.dll
- %System%\dllcache\ole32.dll
- %System%\dllcache\osk.exe
- %System%\dllcache\osuninst.exe
- %System%\dllcache\packager.exe
- %System%\dllcache\perfmon.exe
- %System%\dllcache\photowiz.dll
- %System%\dllcache\powercfg.cpl
- %System%\dllcache\printui.dll
- %System%\dllcache\rasdlg.dll
- %System%\dllcache\rcimlby.exe
- %System%\dllcache\regedit.exe
- %System%\dllcache\regwizc.dll
- %System%\dllcache\remotepg.dll
- %System%\dllcache\rstrui.exe
- %System%\dllcache\rtcshare.exe
- %System%\dllcache\sapi.cpl
- %System%\dllcache\sendmail.dll
- %System%\dllcache\setupapi.dll
- %System%\dllcache\shdoclc.dll
- %System%\dllcache\shdocvw.dll
- %System%\dllcache\shimgvw.dll
- %System%\dllcache\shrpubw.exe
- %System%\dllcache\sigverif.exe
- %System%\dllcache\sndrec32.exe
- %System%\dllcache\sndvol32.exe
- %System%\dllcache\sol.exe
- %System%\dllcache\spider.exe
- %System%\dllcache\srchui.dll
- %System%\dllcache\srrstr.dll
- %System%\dllcache\sti_ci.dll
- %System%\dllcache\stimon.exe
- %System%\dllcache\stobject.dll
- %System%\dllcache\syncapp.exe
- %System%\dllcache\syncui.dll
- %System%\dllcache\sysdm.cpl
- %System%\dllcache\syskey.exe
- %System%\dllcache\sysmon.ocx
- %System%\dllcache\sysocmgr.exe
- %System%\dllcache\syssetup.dll
- %System%\dllcache\tapiui.dll
- %System%\dllcache\taskmgr.exe
- %System%\dllcache\telephon.cpl
- %System%\dllcache\telnet.exe
- %System%\dllcache\themeui.dll
- %System%\dllcache\timedate.cpl
- %System%\dllcache\upnpui.dll
- %System%\dllcache\url.dll
- %System%\dllcache\urlmon.dll
- %System%\dllcache\user32.dll
- %System%\dllcache\utilman.exe
- %System%\dllcache\verifier.exe
- %System%\dllcache\wab.exe
- %System%\dllcache\wab32.dll
- %System%\dllcache\wab32res.dll
- %System%\dllcache\wabfind.dll
- %System%\dllcache\wabimp.dll
- %System%\dllcache\wabmig.exe
- %System%\dllcache\webcheck.dll
- %System%\dllcache\wiaacmgr.exe
- %System%\dllcache\wiadefui.dll
- %System%\dllcache\wiashext.dll
- %System%\dllcache\winbrand.dll
- %System%\dllcache\winchat.exe
- %System%\dllcache\winhlp32.exe
- %System%\dllcache\wininet.dll
- %System%\dllcache\winmine.exe
- %System%\dllcache\winsrv.dll
- %System%\dllcache\wmplayer.exe
- %System%\dllcache\wordpad.exe
- %System%\dllcache\wpabaln.exe
- %System%\dllcache\write.exe
- %System%\dllcache\wscript.exe
- %System%\dllcache\wscui.cpl
- %System%\dllcache\wsecedit.dll
- %System%\dllcache\wuauclt.exe
- %System%\dllcache\wuaucpl.cpl
- %System%\dllcache\wupdmgr.exe
- %System%\dllcache\xpsp2res.dll
- %System%\dllcache\zipfldr.dll
- %System%\ntkrnlpa.exe.FlyakiteOSX
- %System%\ntoskrnl.exe.FlyakiteOSX
- %System%\uxtheme.backup
- %System%\uxtheme.new
(Nota: %Desktop% es la carpeta Escritorio del usuario activo, que en el caso de Windows 98 y ME suele estar en C:\Windows\Profiles\{nombre de usuario}\Escritorio, en el caso de Windows NT en C:\WINNT\Profiles\{nombre de usuario}\Escritorio y en el caso de Windows 2000, XP y Server 2003 en C:\Documents and Settings\{nombre de usuario}\Escritorio).
. %Start Menu% es la carpeta Menú Inicio del usuario activo, que en el caso de Windows 98 y ME suele estar ubicada en C:\Windows\Profiles\{nombre de usuario}\Menú Inicio, en el caso de Windows NT en C:\WINNT\Profiles\{nombre de usuario}\Menú Inicio y en el caso de Windows 2000, XP y Server 2003 en C:\Documents and Settings\{nombre de usuario}\Menú Inicio).. %User Temp% es la carpeta Temp del usuario activo, que en el caso de Windows 2000, XP y Server 2003 suele estar en C:\Documents and Settings\{nombre de usuario}\Local Settings\Temp).. %Program Files% es la carpeta Archivos de programa predeterminada, que suele estar en C:\Archivos de programa).. %Windows% es la carpeta de Windows, que suele estar en C:\Windows o C:\WINNT).. %System% es la carpeta del sistema de Windows, que en el caso de Windows 98 y ME suele estar en C:\Windows\System, en el caso de Windows NT y 2000 en C:\WINNT\System32 y en el caso de Windows XP y Server 2003 en C:\Windows\System32).)Crea las carpetas siguientes:
- %All Users Profile%\Start Menu\Programs\FlyakiteOSX
- %Program Files%\Tiger System Preferences v2
- %Program Files%\UberIcon
- %Program Files%\WinRoll
- %Program Files%\YzShadow
- %Program Files%\iColorFolder
- %Start Menu%\Programs\Tiger System Preferences v2
- %Start Menu%\Programs\iColorFolder
- %System%\dllcache
- %User Temp%\{random characters}.tmp
- %Windows%\Cursors\OSX
- %Windows%\FlyakiteOSX
- %Windows%\FlyakiteOSX\Backup
- %Windows%\FlyakiteOSX\FileTypeIcons
- %Windows%\FlyakiteOSX\Logs
- %Windows%\FlyakiteOSX\NewFiles
- %Windows%\FlyakiteOSX\Resources
- %Windows%\FlyakiteOSX\TempFiles
- %Windows%\FlyakiteOSX\Tools
(Nota: %Program Files% es la carpeta Archivos de programa predeterminada, que suele estar en C:\Archivos de programa).
. %Start Menu% es la carpeta Menú Inicio del usuario activo, que en el caso de Windows 98 y ME suele estar ubicada en C:\Windows\Profiles\{nombre de usuario}\Menú Inicio, en el caso de Windows NT en C:\WINNT\Profiles\{nombre de usuario}\Menú Inicio y en el caso de Windows 2000, XP y Server 2003 en C:\Documents and Settings\{nombre de usuario}\Menú Inicio).. %System% es la carpeta del sistema de Windows, que en el caso de Windows 98 y ME suele estar en C:\Windows\System, en el caso de Windows NT y 2000 en C:\WINNT\System32 y en el caso de Windows XP y Server 2003 en C:\Windows\System32).. %User Temp% es la carpeta Temp del usuario activo, que en el caso de Windows 2000, XP y Server 2003 suele estar en C:\Documents and Settings\{nombre de usuario}\Local Settings\Temp).. %Windows% es la carpeta de Windows, que suele estar en C:\Windows o C:\WINNT).)Técnica de inicio automático
Crea las siguientes entradas de registro para activar la ejecución automática del componente infiltrado cada vez que arranque el sistema:
HKEY_CURRENT_USER\Software\Microsoft\
Windows\CurrentVersion\Run
Alt+Q Hotkey Tool = "%Windows%\Alt+Q Hotkey.exe" = HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Run
ObjectDock = ""
HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Run = RK Launcher = "%Program Files%\RK Launcher\RKLauncher.exe"
HKEY_CURRENT_USER\Software\Microsoft\
Windows\CurrentVersion\Run
UberIcon = ""%Program Files%\UberIcon\UberIcon Manager.exe"" = HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Run
WinRoll = "%Program Files%\WinRoll\winroll.exe"
HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Run = Yz Shadow = "%Program Files%\YzShadow\YzShadow.exe"
Otras modificaciones del sistema
Agrega las siguientes entradas de registro como parte de la rutina de instalación:
HKEY_CURRENT_USER\Control Panel\Cursors
HKEY_CURRENT_USER\Control Panel\Cursors\
Schemes
HKEY_CURRENT_USER\Software\UberIcon-v1.0.0
HKEY_LOCAL_MACHINE\SOFTWARE\FlyakiteOSX\
Tweaks
HKEY_LOCAL_MACHINE\SOFTWARE\FlyakiteOSX
HKEY_LOCAL_MACHINE\SOFTWARE\FlyakiteOSX\
Extras
HKEY_LOCAL_MACHINE\SOFTWARE\FlyakiteOSX\
FILES
HKEY_LOCAL_MACHINE\SOFTWARE\FlyakiteOSX\
Skins
HKEY_LOCAL_MACHINE\SOFTWARE\FlyakiteOSX\
Software
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\
Windows\CurrentVersion\Uninstall\
FlyakiteOSX
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\
Windows\CurrentVersion\Uninstall\
Tiger System Preferences v2
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\
Windows\CurrentVersion\Uninstall\
iColorFolder"
HKEY_LOCAL_MACHINE\SOFTWARE\Revenger inc.
HKEY_LOCAL_MACHINE\SOFTWARE\iColorFolder
Agrega las siguientes entradas de registro:
HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\
Control\Session Manager
AllowProtectedRenames = "1"
HKEY_CURRENT_USER\Control Panel\Cursors
= "OS X"
HKEY_CURRENT_USER\Control Panel\Desktop
Wallpaper = "%Windows%\Web\Wallpaper\Aqua Blue.bmp"
HKEY_LOCAL_MACHINE\SOFTWARE\FlyakiteOSX
GUID = "{GUID}"
HKEY_LOCAL_MACHINE\SOFTWARE\FlyakiteOSX
MaxIconSize = "{numbers}"
HKEY_LOCAL_MACHINE\SOFTWARE\FlyakiteOSX\
Extras
Cursors = "yes"
HKEY_LOCAL_MACHINE\SOFTWARE\FlyakiteOSX\
Extras
DefaultScreenSaver = "yes"
HKEY_LOCAL_MACHINE\SOFTWARE\FlyakiteOSX\
Extras
FlurryScreenSaver = "yes"
HKEY_LOCAL_MACHINE\SOFTWARE\FlyakiteOSX\
Extras
HelpandSupport = "yes"
HKEY_LOCAL_MACHINE\SOFTWARE\FlyakiteOSX\
Extras
LogonScreen = "yes"
HKEY_LOCAL_MACHINE\SOFTWARE\FlyakiteOSX\
Extras
Sounds = "yes"
HKEY_LOCAL_MACHINE\SOFTWARE\FlyakiteOSX\
Extras
UserAccountPictures = "yes"
HKEY_LOCAL_MACHINE\SOFTWARE\FlyakiteOSX\
Extras
Wallpaper = "yes"
HKEY_LOCAL_MACHINE\SOFTWARE\FlyakiteOSX\
FILES
{files listed in %Windows%\FlyakiteOSX\NewFiles folder} = "{numbers}"
HKEY_LOCAL_MACHINE\SOFTWARE\FlyakiteOSX\
Skins
MSStyle = "yes"
HKEY_LOCAL_MACHINE\SOFTWARE\FlyakiteOSX\
Software
Alt+Q = "yes"
HKEY_LOCAL_MACHINE\SOFTWARE\FlyakiteOSX\
Software
ObjectDock = "yes"
HKEY_LOCAL_MACHINE\SOFTWARE\FlyakiteOSX\
Software
RKLauncher = "yes"
HKEY_LOCAL_MACHINE\SOFTWARE\FlyakiteOSX\
Software
TigerSystemPreferences = "yes"
HKEY_LOCAL_MACHINE\SOFTWARE\FlyakiteOSX\
Software
UberIcon = "yes"
HKEY_LOCAL_MACHINE\SOFTWARE\FlyakiteOSX\
Software
WinRoll = "yes"
HKEY_LOCAL_MACHINE\SOFTWARE\FlyakiteOSX\
Software
YzShadow = "yes"
HKEY_LOCAL_MACHINE\SOFTWARE\FlyakiteOSX\
Software
iColorFolder = "yes"
HKEY_LOCAL_MACHINE\SOFTWARE\FlyakiteOSX\
Tweaks
CommandConsole = "yes"
HKEY_LOCAL_MACHINE\SOFTWARE\FlyakiteOSX\
Tweaks
MoveTaskbar = "yes"
HKEY_LOCAL_MACHINE\SOFTWARE\FlyakiteOSX\
Tweaks
ThrobberIE = "yes"
HKEY_LOCAL_MACHINE\SOFTWARE\FlyakiteOSX\
Tweaks
ThrobberShell = "yes"
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\
Windows\CurrentVersion\Uninstall\
FlyakiteOSX
DisplayIcon = "%Windows%\FlyakiteOSX\Install.ico"
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\
Windows\CurrentVersion\Uninstall\
FlyakiteOSX
DisplayName = "FlyakiteOSX"
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\
Windows\CurrentVersion\Uninstall\
FlyakiteOSX
DisplayVersion = "v3.5"
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\
Windows\CurrentVersion\Uninstall\
FlyakiteOSX
Publisher = "Portrait of a Kite, Inc."
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\
Windows\CurrentVersion\Uninstall\
FlyakiteOSX
URLInfoAbout = "http://osx.portraitofakite.com"
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\
Windows\CurrentVersion\Uninstall\
FlyakiteOSX
UninstallString = "%Windows%\FlyakiteOSX\Uninstall.exe"
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\
Windows\CurrentVersion\Uninstall\
Tiger System Preferences v2
DisplayName = "Tiger System Preferences v2"
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\
Windows\CurrentVersion\Uninstall\
Tiger System Preferences v2
UninstallString = "%Program Files%\Tiger System Preferences v2\Uninstal.exe"
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\
Windows\CurrentVersion\Uninstall\
iColorFolder
DisplayName = "iColorFolder"
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\
Windows\CurrentVersion\Uninstall\
iColorFolder
UninstallString = "%Program Files%\iColorFolder\uninstall.exe"
HKEY_LOCAL_MACHINE\SOFTWARE\FlyakiteOSX\
Extras
BootScreen = "yes"
HKEY_CURRENT_USER\Control Panel\Cursors\
Schemes
OS X = "%Windows%\Cursors\OSX\OS X Cursor.cur,%Windows%\Cursors\OSX\OS X Help.cur,%Windows%\Cursors\OSX\OS X Working.ani,%Windows%\Cursors\OSX\OS X Busy.ani,%Windows%\Cursors\OSX\OS X Cross.cur,%Windows%\Cursors\OSX\OS X Beam.cur,%Windows%\Cursors\OSX\OS X Pen.cur,%Windows%\Cursors\OSX\OS X Unavailable.cur,%Windows%\Cursors\OSX\OS X Size Horz.cur,%Windows%\Cursors\OSX\OS X Size Vert.cur,%Windows%\Cursors\OSX\OS X Resize Right.cur,%Windows%\Cursors\OSX\OS X Resize Left.cur,%Windows%\Cursors\OSX\OS X Resize All.cur,%Windows%\Cursors\OSX\OS X Alternate.cur,%Windows%\Cursors\OSX\OS X Hand.cur"c
HKEY_LOCAL_MACHINE\SOFTWARE\iColorFolder
= "%Program Files%\iColorFolder"
Soluzioni
Step 1
Los usuarios de Windows ME y XP, antes de llevar a cabo cualquier exploración, deben comprobar que tienen desactivada la opción Restaurar sistema para permitir la exploración completa del equipo.
Step 3
Reiniciar en modo seguro
Step 4
Eliminar esta clave del Registro
Importante: si modifica el Registro de Windows incorrectamente, podría hacer que el sistema funcione mal de manera irreversible. Lleve a cabo este paso solo si sabe cómo hacerlo o si puede contar con ayuda de su administrador del sistema. De lo contrario, lea este artículo de Microsoft antes de modificar el Registro del equipo.
- In HKEY_CURRENT_USER\Control Panel\Cursors
- Schemes
- Schemes
- In HKEY_CURRENT_USER\Software
- UberIcon-v1.0.0
- UberIcon-v1.0.0
- In HKEY_LOCAL_MACHINE\SOFTWARE
- \Revenger inc.
- \Revenger inc.
- In HKEY_LOCAL_MACHINE\SOFTWARE
- iColorFolder
- iColorFolder
- In HKEY_LOCAL_MACHINE\SOFTWARE
- FlyakiteOSX
- FlyakiteOSX
- In HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall
- FlyakiteOSX
- FlyakiteOSX
- In HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall
- Tiger System Preferences v2
- Tiger System Preferences v2
- In HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall
- iColorFolder"
- iColorFolder"
Step 5
Eliminar este valor del Registro
Importante: si modifica el Registro de Windows incorrectamente, podría hacer que el sistema funcione mal de manera irreversible. Lleve a cabo este paso solo si sabe cómo hacerlo o si puede contar con ayuda de su administrador del sistema. De lo contrario, lea este artículo de Microsoft antes de modificar el Registro del equipo.
- In HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\Session Manager
- AllowProtectedRenames = "1"
- AllowProtectedRenames = "1"
- In HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Run
- Alt+Q Hotkey Tool = "%Windows%\Alt+Q Hotkey.exe"
- Alt+Q Hotkey Tool = "%Windows%\Alt+Q Hotkey.exe"
- In HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Run
- ObjectDock = ""
- ObjectDock = ""
- In HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Run
- RK Launcher = "%Program Files%\RK Launcher\RKLauncher.exe"
- RK Launcher = "%Program Files%\RK Launcher\RKLauncher.exe"
- In HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Run
- UberIcon = ""%Program Files%\UberIcon\UberIcon Manager.exe""
- UberIcon = ""%Program Files%\UberIcon\UberIcon Manager.exe""
- In HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Run
- WinRoll = "%Program Files%\WinRoll\winroll.exe"
- WinRoll = "%Program Files%\WinRoll\winroll.exe"
- In HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Run
- Yz Shadow = "%Program Files%\YzShadow\YzShadow.exe"
- Yz Shadow = "%Program Files%\YzShadow\YzShadow.exe"
Step 6
Buscar y eliminar estas carpetas
- %All Users Profile%\Start Menu\Programs\FlyakiteOSX
- %Program Files%\Tiger System Preferences v2
- %Program Files%\UberIcon
- %Program Files%\WinRoll
- %Program Files%\YzShadow
- %Program Files%\iColorFolder
- %Start Menu%\Programs\Tiger System Preferences v2
- %Start Menu%\Programs\iColorFolder
- %User Temp%\{random characters}.tmp
- %Windows%\Cursors\OSX
- %Windows%\FlyakiteOSX
Step 7
Buscar y eliminar este archivo
- %Desktop%\Welcome to FlyakiteOSX.lnk
- %Desktop%\Tiger System Preferences v2.lnk
- %Windows%\Alt+Q Hotkey.exe
- %Windows%\RestoreFlyakiteOSX.txt
- %System%\Flurry.scr
- %System%\ntkrnlpa.exe.FlyakiteOSX
- %System%\ntoskrnl.exe.FlyakiteOSX
- %System%\uxtheme.backup
- %System%\uxtheme.new
Step 8
Reinicie en modo normal y explore el equipo con su producto de Trend Micro para buscar los archivos identificados como PUA_WFPDISABLE.GA En caso de que el producto de Trend Micro ya haya limpiado, eliminado o puesto en cuarentena los archivos detectados, no serán necesarios más pasos. Puede optar simplemente por eliminar los archivos en cuarentena. Consulte esta página de Base de conocimientos para obtener más información.
Step 10
Restablecer las propiedades del escritorio
Sondaggio