Trojan.MulDrop7.27358

Technical Information

To ensure autorun and distribution:

Modifies the following registry keys:

[<HKLM>\SOFTWARE\Classes\MSProgramGroup\Shell\Open\Command] '' = '<SYSTEM32>\grpconv.exe %1'
[<HKLM>\SOFTWARE\Microsoft\Windows\CurrentVersion\RunOnce] 'GrpConv' = 'grpconv -o'

Malicious functions:

Executes the following:

'<SYSTEM32>\grpconv.exe' -o
'<SYSTEM32>\runonce.exe' -r
'<SYSTEM32>\rundll32.exe' setupapi,InstallHinfSection DefaultInstall 132 %TEMP%\RarSFX0\AIOAero.inf

Modifies file system:

Creates the following files:

%WINDIR%\Cursors\Aero\SET37.tmp
%WINDIR%\Cursors\Aero\SET38.tmp
%WINDIR%\Cursors\Aero\SET36.tmp
%WINDIR%\Cursors\Aero\SET34.tmp
%WINDIR%\Cursors\Aero\SET35.tmp
%WINDIR%\Cursors\Aero\SET3C.tmp
%WINDIR%\Cursors\Aero\SET3D.tmp
%WINDIR%\Cursors\Aero\SET3B.tmp
%WINDIR%\Cursors\Aero\SET39.tmp
%WINDIR%\Cursors\Aero\SET3A.tmp
%WINDIR%\Cursors\Aero\SET2D.tmp
%WINDIR%\Cursors\Aero\SET2E.tmp
%WINDIR%\Cursors\Aero\SET2C.tmp
%WINDIR%\Cursors\Aero\SET2A.tmp
%WINDIR%\Cursors\Aero\SET2B.tmp
%WINDIR%\Cursors\Aero\SET32.tmp
%WINDIR%\Cursors\Aero\SET33.tmp
%WINDIR%\Cursors\Aero\SET31.tmp
%WINDIR%\Cursors\Aero\SET2F.tmp
%WINDIR%\Cursors\Aero\SET30.tmp
%WINDIR%\Cursors\Aero\SET4B.tmp
%WINDIR%\Cursors\Aero\SET4C.tmp
%WINDIR%\Cursors\Aero\SET4A.tmp
%WINDIR%\Cursors\Aero\SET48.tmp
%WINDIR%\Cursors\Aero\SET49.tmp
%WINDIR%\Cursors\Aero\SET50.tmp
%WINDIR%\Cursors\Aero\SET51.tmp
%WINDIR%\Cursors\Aero\SET4F.tmp
%WINDIR%\Cursors\Aero\SET4D.tmp
%WINDIR%\Cursors\Aero\SET4E.tmp
%WINDIR%\Cursors\Aero\SET41.tmp
%WINDIR%\Cursors\Aero\SET42.tmp
%WINDIR%\Cursors\Aero\SET40.tmp
%WINDIR%\Cursors\Aero\SET3E.tmp
%WINDIR%\Cursors\Aero\SET3F.tmp
%WINDIR%\Cursors\Aero\SET46.tmp
%WINDIR%\Cursors\Aero\SET47.tmp
%WINDIR%\Cursors\Aero\SET45.tmp
%WINDIR%\Cursors\Aero\SET43.tmp
%WINDIR%\Cursors\Aero\SET44.tmp
%WINDIR%\Cursors\Aero\SETF.tmp
%WINDIR%\Cursors\Aero\SET10.tmp
%WINDIR%\Cursors\Aero\SETE.tmp
%WINDIR%\Cursors\Aero\SETC.tmp
%WINDIR%\Cursors\Aero\SETD.tmp
%WINDIR%\Cursors\Aero\SET14.tmp
%WINDIR%\Cursors\Aero\SET15.tmp
%WINDIR%\Cursors\Aero\SET13.tmp
%WINDIR%\Cursors\Aero\SET11.tmp
%WINDIR%\Cursors\Aero\SET12.tmp
%WINDIR%\Cursors\Aero\SET5.tmp
%WINDIR%\Cursors\Aero\SET6.tmp
%WINDIR%\Cursors\Aero\SET4.tmp
%TEMP%\RarSFX0\Entries_AIO_Vista_Aero_Cursors.ini
%WINDIR%\Cursors\Aero\SET3.tmp
%WINDIR%\Cursors\Aero\SETA.tmp
%WINDIR%\Cursors\Aero\SETB.tmp
%WINDIR%\Cursors\Aero\SET9.tmp
%WINDIR%\Cursors\Aero\SET7.tmp
%WINDIR%\Cursors\Aero\SET8.tmp
%WINDIR%\Cursors\Aero\SET23.tmp
%WINDIR%\Cursors\Aero\SET24.tmp
%WINDIR%\Cursors\Aero\SET22.tmp
%WINDIR%\Cursors\Aero\SET20.tmp
%WINDIR%\Cursors\Aero\SET21.tmp
%WINDIR%\Cursors\Aero\SET28.tmp
%WINDIR%\Cursors\Aero\SET29.tmp
%WINDIR%\Cursors\Aero\SET27.tmp
%WINDIR%\Cursors\Aero\SET25.tmp
%WINDIR%\Cursors\Aero\SET26.tmp
%WINDIR%\Cursors\Aero\SET19.tmp
%WINDIR%\Cursors\Aero\SET1A.tmp
%WINDIR%\Cursors\Aero\SET18.tmp
%WINDIR%\Cursors\Aero\SET16.tmp
%WINDIR%\Cursors\Aero\SET17.tmp
%WINDIR%\Cursors\Aero\SET1E.tmp
%WINDIR%\Cursors\Aero\SET1F.tmp
%WINDIR%\Cursors\Aero\SET1D.tmp
%WINDIR%\Cursors\Aero\SET1B.tmp
%WINDIR%\Cursors\Aero\SET1C.tmp
%WINDIR%\Cursors\Aero\SET87.tmp
%WINDIR%\Cursors\Aero\SET88.tmp
%WINDIR%\Cursors\Aero\SET86.tmp
%WINDIR%\Cursors\Aero\SET84.tmp
%WINDIR%\Cursors\Aero\SET85.tmp
%WINDIR%\Cursors\Aero\SET8C.tmp
%WINDIR%\Cursors\Aero\SET8D.tmp
%WINDIR%\Cursors\Aero\SET8B.tmp
%WINDIR%\Cursors\Aero\SET89.tmp
%WINDIR%\Cursors\Aero\SET8A.tmp
%WINDIR%\Cursors\Aero\SET7D.tmp
%WINDIR%\Cursors\Aero\SET7E.tmp
%WINDIR%\Cursors\Aero\SET7C.tmp
%WINDIR%\Cursors\Aero\SET7A.tmp
%WINDIR%\Cursors\Aero\SET7B.tmp
%WINDIR%\Cursors\Aero\SET82.tmp
%WINDIR%\Cursors\Aero\SET83.tmp
%WINDIR%\Cursors\Aero\SET81.tmp
%WINDIR%\Cursors\Aero\SET7F.tmp
%WINDIR%\Cursors\Aero\SET80.tmp
%WINDIR%\Cursors\Aero\SET9B.tmp
%WINDIR%\Cursors\Aero\SET9C.tmp
%WINDIR%\Cursors\Aero\SET9A.tmp
%WINDIR%\Cursors\Aero\SET98.tmp
%WINDIR%\Cursors\Aero\SET99.tmp
%WINDIR%\Cursors\Aero\SETA0.tmp
%WINDIR%\Cursors\Aero\SETA1.tmp
%WINDIR%\Cursors\Aero\SET9F.tmp
%WINDIR%\Cursors\Aero\SET9D.tmp
%WINDIR%\Cursors\Aero\SET9E.tmp
%WINDIR%\Cursors\Aero\SET91.tmp
%WINDIR%\Cursors\Aero\SET92.tmp
%WINDIR%\Cursors\Aero\SET90.tmp
%WINDIR%\Cursors\Aero\SET8E.tmp
%WINDIR%\Cursors\Aero\SET8F.tmp
%WINDIR%\Cursors\Aero\SET96.tmp
%WINDIR%\Cursors\Aero\SET97.tmp
%WINDIR%\Cursors\Aero\SET95.tmp
%WINDIR%\Cursors\Aero\SET93.tmp
%WINDIR%\Cursors\Aero\SET94.tmp
%WINDIR%\Cursors\Aero\SET5F.tmp
%WINDIR%\Cursors\Aero\SET60.tmp
%WINDIR%\Cursors\Aero\SET5E.tmp
%WINDIR%\Cursors\Aero\SET5C.tmp
%WINDIR%\Cursors\Aero\SET5D.tmp
%WINDIR%\Cursors\Aero\SET64.tmp
%WINDIR%\Cursors\Aero\SET65.tmp
%WINDIR%\Cursors\Aero\SET63.tmp
%WINDIR%\Cursors\Aero\SET61.tmp
%WINDIR%\Cursors\Aero\SET62.tmp
%WINDIR%\Cursors\Aero\SET55.tmp
%WINDIR%\Cursors\Aero\SET56.tmp
%WINDIR%\Cursors\Aero\SET54.tmp
%WINDIR%\Cursors\Aero\SET52.tmp
%WINDIR%\Cursors\Aero\SET53.tmp
%WINDIR%\Cursors\Aero\SET5A.tmp
%WINDIR%\Cursors\Aero\SET5B.tmp
%WINDIR%\Cursors\Aero\SET59.tmp
%WINDIR%\Cursors\Aero\SET57.tmp
%WINDIR%\Cursors\Aero\SET58.tmp
%WINDIR%\Cursors\Aero\SET73.tmp
%WINDIR%\Cursors\Aero\SET74.tmp
%WINDIR%\Cursors\Aero\SET72.tmp
%WINDIR%\Cursors\Aero\SET70.tmp
%WINDIR%\Cursors\Aero\SET71.tmp
%WINDIR%\Cursors\Aero\SET78.tmp
%WINDIR%\Cursors\Aero\SET79.tmp
%WINDIR%\Cursors\Aero\SET77.tmp
%WINDIR%\Cursors\Aero\SET75.tmp
%WINDIR%\Cursors\Aero\SET76.tmp
%WINDIR%\Cursors\Aero\SET69.tmp
%WINDIR%\Cursors\Aero\SET6A.tmp
%WINDIR%\Cursors\Aero\SET68.tmp
%WINDIR%\Cursors\Aero\SET66.tmp
%WINDIR%\Cursors\Aero\SET67.tmp
%WINDIR%\Cursors\Aero\SET6E.tmp
%WINDIR%\Cursors\Aero\SET6F.tmp
%WINDIR%\Cursors\Aero\SET6D.tmp
%WINDIR%\Cursors\Aero\SET6B.tmp
%WINDIR%\Cursors\Aero\SET6C.tmp
%TEMP%\RarSFX0\i386\aero_move_xl.cur
%TEMP%\RarSFX0\i386\aero_nesw.cur
%TEMP%\RarSFX0\i386\aero_move_l.cur
%TEMP%\RarSFX0\i386\aero_move1.cur
%TEMP%\RarSFX0\i386\aero_move_b.cur
%TEMP%\RarSFX0\i386\aero_nesw_xl.cur
%TEMP%\RarSFX0\i386\aero_ns.cur
%TEMP%\RarSFX0\i386\aero_nesw_l.cur
%TEMP%\RarSFX0\i386\aero_nesw1.cur
%TEMP%\RarSFX0\i386\aero_nesw_b.cur
%TEMP%\RarSFX0\i386\aero_helpsel_xl.cur
%TEMP%\RarSFX0\i386\aero_link.cur
%TEMP%\RarSFX0\i386\aero_helpsel_l.cur
%TEMP%\RarSFX0\i386\aero_helpsel1.cur
%TEMP%\RarSFX0\i386\aero_helpsel_b.cur
%TEMP%\RarSFX0\i386\aero_link_xl.cur
%TEMP%\RarSFX0\i386\aero_move.cur
%TEMP%\RarSFX0\i386\aero_link_l.cur
%TEMP%\RarSFX0\i386\aero_link1.cur
%TEMP%\RarSFX0\i386\aero_link_b.cur
%TEMP%\RarSFX0\i386\aero_prec.cur
%TEMP%\RarSFX0\i386\aero_prec_l.cur
%TEMP%\RarSFX0\i386\aero_pen_xl.cur
%TEMP%\RarSFX0\i386\aero_pen_b.cur
%TEMP%\RarSFX0\i386\aero_pen_l.cur
%TEMP%\RarSFX0\i386\aero_select_xl.cur
%TEMP%\RarSFX0\i386\aero_text_b.cur
%TEMP%\RarSFX0\i386\aero_select_l.cur
%TEMP%\RarSFX0\i386\aero_prec_xl.cur
%TEMP%\RarSFX0\i386\aero_select.cur
%TEMP%\RarSFX0\i386\aero_ns_xl.cur
%TEMP%\RarSFX0\i386\aero_nwse.cur
%TEMP%\RarSFX0\i386\aero_ns_l.cur
%TEMP%\RarSFX0\i386\aero_ns1.cur
%TEMP%\RarSFX0\i386\aero_ns_b.cur
%TEMP%\RarSFX0\i386\aero_nwse_xl.cur
%TEMP%\RarSFX0\i386\aero_pen.cur
%TEMP%\RarSFX0\i386\aero_nwse_l.cur
%TEMP%\RarSFX0\i386\aero_nwse1.cur
%TEMP%\RarSFX0\i386\aero_nwse_b.cur
%TEMP%\RarSFX0\i386\AeroII Unavailable.cur
%TEMP%\RarSFX0\i386\AeroII Working In Backround.ani
%TEMP%\RarSFX0\i386\AeroII Text Select.cur
%TEMP%\RarSFX0\i386\AeroII Size Horz.cur
%TEMP%\RarSFX0\i386\AeroII Size Vert.cur
%TEMP%\RarSFX0\i386\aero_arrow_b.cur
%TEMP%\RarSFX0\i386\aero_arrow_l.cur
%TEMP%\RarSFX0\i386\aero_arrow1.cur
%TEMP%\RarSFX0\i386\aero_alt.cur
%TEMP%\RarSFX0\i386\aero_arrow.cur
%TEMP%\RarSFX0\i386\AeroII Hand.ani
%TEMP%\RarSFX0\i386\AeroII Handwriting.cur
%TEMP%\RarSFX0\i386\AeroII Cross.cur
%TEMP%\RarSFX0\i386\AeroII Alternate.cur
%TEMP%\RarSFX0\i386\AeroII Busy.ani
%TEMP%\RarSFX0\i386\AeroII Resize Left.cur
%TEMP%\RarSFX0\i386\AeroII Resize Right.cur
%TEMP%\RarSFX0\i386\AeroII Resize All.cur
%TEMP%\RarSFX0\i386\AeroII Help Select.cur
%TEMP%\RarSFX0\i386\AeroII Normal Select.cur
%TEMP%\RarSFX0\i386\aero_cross_b.cur
%TEMP%\RarSFX0\i386\aero_ew.cur
%TEMP%\RarSFX0\i386\aero_busy_xl.ani
%TEMP%\RarSFX0\i386\aero_busy_red.ani
%TEMP%\RarSFX0\i386\aero_busy_silver.ani
%TEMP%\RarSFX0\i386\aero_ew_xl.cur
%TEMP%\RarSFX0\i386\aero_helpsel.cur
%TEMP%\RarSFX0\i386\aero_ew_l.cur
%TEMP%\RarSFX0\i386\aero_ew1.cur
%TEMP%\RarSFX0\i386\aero_ew_b.cur
%TEMP%\RarSFX0\i386\aero_busy_b.ani
%TEMP%\RarSFX0\i386\aero_busy_black.ani
%TEMP%\RarSFX0\i386\aero_busy1.ani
%TEMP%\RarSFX0\i386\aero_arrow_xl.cur
%TEMP%\RarSFX0\i386\aero_busy.ani
%TEMP%\RarSFX0\i386\aero_busy_ngreen.ani
%TEMP%\RarSFX0\i386\aero_busy_pink.ani
%TEMP%\RarSFX0\i386\aero_busy_l.ani
%TEMP%\RarSFX0\i386\aero_busy_blue.ani
%TEMP%\RarSFX0\i386\aero_busy_dgreen.ani
%TEMP%\RarSFX0\i386\HSpin Tranparent Text.cur
%TEMP%\RarSFX0\i386\HSpin Transparent Press.cur
%TEMP%\RarSFX0\i386\HighSpin2 Work.ani
%TEMP%\RarSFX0\i386\HighSpin2 Work Purple.ani
%TEMP%\RarSFX0\i386\HighSpin2 Work Red.ani
%TEMP%\RarSFX0\i386\HSpin2 Tranparents Link.cur
%TEMP%\RarSFX0\i386\HSpin2 Tranparents Move.cur
%TEMP%\RarSFX0\i386\HSpin2 Tranparents Help.cur
%TEMP%\RarSFX0\i386\HSpin2 Tranparents Arrow.cur
%TEMP%\RarSFX0\i386\HSpin2 Tranparents EW.cur
%TEMP%\RarSFX0\i386\HighSpin2 SM2nd Red.ani
%TEMP%\RarSFX0\i386\HighSpin2 SM2nd.ani
%TEMP%\RarSFX0\i386\HighSpin2 SM2nd Purple.ani
%TEMP%\RarSFX0\i386\HighSpin2 SM2nd Orange.ani
%TEMP%\RarSFX0\i386\HighSpin2 SM2nd Pink.ani
%TEMP%\RarSFX0\i386\HighSpin2 Work Orange.ani
%TEMP%\RarSFX0\i386\HighSpin2 Work Pink.ani
%TEMP%\RarSFX0\i386\HighSpin2 Work Green.ani
%TEMP%\RarSFX0\i386\HighSpin2 Work Black.ani
%TEMP%\RarSFX0\i386\HighSpin2 Work Blue.ani
%TEMP%\RarSFX0\i386\TextSelect.cur
%TEMP%\RarSFX0\i386\text_ba.cur
%TEMP%\RarSFX0\i386\PrecisionSelect.cur
%TEMP%\RarSFX0\i386\nwse_ba.cur
%TEMP%\RarSFX0\i386\pen_ba.cur
%TEMP%\RarSFX0\i386\working_ba.ani
%TEMP%\RarSFX0\AIOAero.inf
%TEMP%\RarSFX0\i386\we_ba.cur
%TEMP%\RarSFX0\i386\unavail_ba.cur
%TEMP%\RarSFX0\i386\up_ba.cur
%TEMP%\RarSFX0\i386\HSpin2 Tranparents Pen.cur
%TEMP%\RarSFX0\i386\HSpin2 Tranparents Unavail.cur
%TEMP%\RarSFX0\i386\HSpin2 Tranparents NWSE.cur
%TEMP%\RarSFX0\i386\HSpin2 Tranparents NESW.cur
%TEMP%\RarSFX0\i386\HSpin2 Tranparents NS.cur
%TEMP%\RarSFX0\i386\nesw_ba.cur
%TEMP%\RarSFX0\i386\ns_ba.cur
%TEMP%\RarSFX0\i386\move_ba.cur
%TEMP%\RarSFX0\i386\HSpin2 Tranparents Up.cur
%TEMP%\RarSFX0\i386\link_ba.cur
%TEMP%\RarSFX0\i386\aero_working_black.ani
%TEMP%\RarSFX0\i386\aero_working_blue.ani
%TEMP%\RarSFX0\i386\aero_working_b.ani
%TEMP%\RarSFX0\i386\aero_working.ani
%TEMP%\RarSFX0\i386\aero_working1.ani
%TEMP%\RarSFX0\i386\aero_working_pink.ani
%TEMP%\RarSFX0\i386\aero_working_red.ani
%TEMP%\RarSFX0\i386\aero_working_ngreen.ani
%TEMP%\RarSFX0\i386\aero_working_dgreen.ani
%TEMP%\RarSFX0\i386\aero_working_l.ani
%TEMP%\RarSFX0\i386\aero_unavail_l.cur
%TEMP%\RarSFX0\i386\aero_unavail_xl.cur
%TEMP%\RarSFX0\i386\aero_unavail_b.cur
%TEMP%\RarSFX0\i386\aero_unavail.cur
%TEMP%\RarSFX0\i386\aero_unavail1.cur
%TEMP%\RarSFX0\i386\aero_up_l.cur
%TEMP%\RarSFX0\i386\aero_up_xl.cur
%TEMP%\RarSFX0\i386\aero_up_b.cur
%TEMP%\RarSFX0\i386\aero_up.cur
%TEMP%\RarSFX0\i386\aero_up1.cur
%TEMP%\RarSFX0\i386\HighSpin2 2nd Orange.ani
%TEMP%\RarSFX0\i386\HighSpin2 2nd Pink.ani
%TEMP%\RarSFX0\i386\HighSpin2 2nd Green.ani
%TEMP%\RarSFX0\i386\HighSpin2 2nd Black.ani
%TEMP%\RarSFX0\i386\HighSpin2 2nd Blue.ani
%TEMP%\RarSFX0\i386\HighSpin2 SM2nd Blue.ani
%TEMP%\RarSFX0\i386\HighSpin2 SM2nd Green.ani
%TEMP%\RarSFX0\i386\HighSpin2 2nd.ani
%TEMP%\RarSFX0\i386\HighSpin2 2nd Purple.ani
%TEMP%\RarSFX0\i386\HighSpin2 2nd Red.ani
%TEMP%\RarSFX0\i386\Black trans.ani
%TEMP%\RarSFX0\i386\busy_ba.ani
%TEMP%\RarSFX0\i386\arrow_ba.cur
%TEMP%\RarSFX0\i386\aero_working_silver.ani
%TEMP%\RarSFX0\i386\aero_working_xl.ani
%TEMP%\RarSFX0\i386\gold2nd.ani
%TEMP%\RarSFX0\i386\helpse_bal.cur
%TEMP%\RarSFX0\i386\gold2nd work.ani
%TEMP%\RarSFX0\i386\cross_ba.cur
%TEMP%\RarSFX0\i386\gold2nd trans.ani

Deletes the following files:

%TEMP%\RarSFX0\i386\aero_link1.cur
%TEMP%\RarSFX0\i386\aero_link_b.cur
%TEMP%\RarSFX0\i386\aero_helpsel_xl.cur
%TEMP%\RarSFX0\i386\aero_link.cur
%TEMP%\RarSFX0\i386\aero_move.cur
%TEMP%\RarSFX0\i386\aero_move1.cur
%TEMP%\RarSFX0\i386\aero_link_l.cur
%TEMP%\RarSFX0\i386\aero_link_xl.cur
%TEMP%\RarSFX0\i386\aero_helpsel_l.cur
%TEMP%\RarSFX0\i386\aero_ew_b.cur
%TEMP%\RarSFX0\i386\aero_ew_l.cur
%TEMP%\RarSFX0\i386\aero_ew.cur
%TEMP%\RarSFX0\i386\aero_ew1.cur
%TEMP%\RarSFX0\i386\aero_helpsel1.cur
%TEMP%\RarSFX0\i386\aero_helpsel_b.cur
%TEMP%\RarSFX0\i386\aero_ew_xl.cur
%TEMP%\RarSFX0\i386\aero_helpsel.cur
%TEMP%\RarSFX0\i386\aero_move_b.cur
%TEMP%\RarSFX0\i386\aero_ns_xl.cur
%TEMP%\RarSFX0\i386\aero_nwse.cur
%TEMP%\RarSFX0\i386\aero_ns_b.cur
%TEMP%\RarSFX0\i386\aero_ns_l.cur
%TEMP%\RarSFX0\i386\aero_nwse_l.cur
%TEMP%\RarSFX0\i386\aero_nwse_xl.cur
%TEMP%\RarSFX0\i386\aero_nwse1.cur
%TEMP%\RarSFX0\i386\aero_nwse_b.cur
%TEMP%\RarSFX0\i386\aero_ns1.cur
%TEMP%\RarSFX0\i386\aero_nesw.cur
%TEMP%\RarSFX0\i386\aero_nesw1.cur
%TEMP%\RarSFX0\i386\aero_move_l.cur
%TEMP%\RarSFX0\i386\aero_move_xl.cur
%TEMP%\RarSFX0\i386\aero_nesw_xl.cur
%TEMP%\RarSFX0\i386\aero_ns.cur
%TEMP%\RarSFX0\i386\aero_nesw_b.cur
%TEMP%\RarSFX0\i386\aero_nesw_l.cur
%TEMP%\RarSFX0\i386\aero_cross_b.cur
%TEMP%\RarSFX0\i386\AeroII Resize Right.cur
%TEMP%\RarSFX0\i386\AeroII Size Horz.cur
%TEMP%\RarSFX0\i386\AeroII Resize All.cur
%TEMP%\RarSFX0\i386\AeroII Resize Left.cur
%TEMP%\RarSFX0\i386\AeroII Unavailable.cur
%TEMP%\RarSFX0\i386\AeroII Working In Backround.ani
%TEMP%\RarSFX0\i386\AeroII Size Vert.cur
%TEMP%\RarSFX0\i386\AeroII Text Select.cur
%TEMP%\RarSFX0\i386\AeroII Normal Select.cur
%TEMP%\RarSFX0\i386\AeroII Alternate.cur
%TEMP%\RarSFX0\i386\AeroII Busy.ani
%TEMP%\RarSFX0\AIOAero.inf
%TEMP%\RarSFX0\Entries_AIO_Vista_Aero_Cursors.ini
%TEMP%\RarSFX0\i386\AeroII Handwriting.cur
%TEMP%\RarSFX0\i386\AeroII Help Select.cur
%TEMP%\RarSFX0\i386\AeroII Cross.cur
%TEMP%\RarSFX0\i386\AeroII Hand.ani
%TEMP%\RarSFX0\i386\aero_alt.cur
%TEMP%\RarSFX0\i386\aero_busy_l.ani
%TEMP%\RarSFX0\i386\aero_busy_ngreen.ani
%TEMP%\RarSFX0\i386\aero_busy_blue.ani
%TEMP%\RarSFX0\i386\aero_busy_dgreen.ani
%TEMP%\RarSFX0\i386\aero_busy_silver.ani
%TEMP%\RarSFX0\i386\aero_busy_xl.ani
%TEMP%\RarSFX0\i386\aero_busy_pink.ani
%TEMP%\RarSFX0\i386\aero_busy_red.ani
%TEMP%\RarSFX0\i386\aero_busy_black.ani
%TEMP%\RarSFX0\i386\aero_arrow_b.cur
%TEMP%\RarSFX0\i386\aero_arrow_l.cur
%TEMP%\RarSFX0\i386\aero_arrow.cur
%TEMP%\RarSFX0\i386\aero_arrow1.cur
%TEMP%\RarSFX0\i386\aero_busy1.ani
%TEMP%\RarSFX0\i386\aero_busy_b.ani
%TEMP%\RarSFX0\i386\aero_arrow_xl.cur
%TEMP%\RarSFX0\i386\aero_busy.ani

Moves the following files:

from %WINDIR%\Cursors\Aero\SET6D.tmp to %WINDIR%\Cursors\Aero\gold2nd trans.ani
from %WINDIR%\Cursors\Aero\SET6C.tmp to %WINDIR%\Cursors\Aero\cross_ba.cur
from %WINDIR%\Cursors\Aero\SET6F.tmp to %WINDIR%\Cursors\Aero\gold2nd.ani
from %WINDIR%\Cursors\Aero\SET6E.tmp to %WINDIR%\Cursors\Aero\gold2nd work.ani
from %WINDIR%\Cursors\Aero\SET6B.tmp to %WINDIR%\Cursors\Aero\busy_ba.ani
from %WINDIR%\Cursors\Aero\SET68.tmp to %WINDIR%\Cursors\Aero\AeroII Working In Backround.ani
from %WINDIR%\Cursors\Aero\SET67.tmp to %WINDIR%\Cursors\Aero\AeroII Unavailable.cur
from %WINDIR%\Cursors\Aero\SET6A.tmp to %WINDIR%\Cursors\Aero\Black trans.ani
from %WINDIR%\Cursors\Aero\SET69.tmp to %WINDIR%\Cursors\Aero\arrow_ba.cur
from %WINDIR%\Cursors\Aero\SET70.tmp to %WINDIR%\Cursors\Aero\helpse_bal.cur
from %WINDIR%\Cursors\Aero\SET77.tmp to %WINDIR%\Cursors\Aero\HighSpin2 2nd Red.ani
from %WINDIR%\Cursors\Aero\SET76.tmp to %WINDIR%\Cursors\Aero\HighSpin2 2nd Purple.ani
from %WINDIR%\Cursors\Aero\SET79.tmp to %WINDIR%\Cursors\Aero\HighSpin2 SM2nd Blue.ani
from %WINDIR%\Cursors\Aero\SET78.tmp to %WINDIR%\Cursors\Aero\HighSpin2 2nd.ani
from %WINDIR%\Cursors\Aero\SET75.tmp to %WINDIR%\Cursors\Aero\HighSpin2 2nd Pink.ani
from %WINDIR%\Cursors\Aero\SET72.tmp to %WINDIR%\Cursors\Aero\HighSpin2 2nd Blue.ani
from %WINDIR%\Cursors\Aero\SET71.tmp to %WINDIR%\Cursors\Aero\HighSpin2 2nd Black.ani
from %WINDIR%\Cursors\Aero\SET74.tmp to %WINDIR%\Cursors\Aero\HighSpin2 2nd Orange.ani
from %WINDIR%\Cursors\Aero\SET73.tmp to %WINDIR%\Cursors\Aero\HighSpin2 2nd Green.ani
from %WINDIR%\Cursors\Aero\SET66.tmp to %WINDIR%\Cursors\Aero\AeroII Text Select.cur
from %WINDIR%\Cursors\Aero\SET59.tmp to %WINDIR%\Cursors\Aero\aero_working_xl.ani
from %WINDIR%\Cursors\Aero\SET58.tmp to %WINDIR%\Cursors\Aero\aero_working_silver.ani
from %WINDIR%\Cursors\Aero\SET5B.tmp to %WINDIR%\Cursors\Aero\AeroII Busy.ani
from %WINDIR%\Cursors\Aero\SET5A.tmp to %WINDIR%\Cursors\Aero\AeroII Alternate.cur
from %WINDIR%\Cursors\Aero\SET57.tmp to %WINDIR%\Cursors\Aero\aero_working_red.ani
from %WINDIR%\Cursors\Aero\SET54.tmp to %WINDIR%\Cursors\Aero\aero_working_l.ani
from %WINDIR%\Cursors\Aero\SET53.tmp to %WINDIR%\Cursors\Aero\aero_working_dgreen.ani
from %WINDIR%\Cursors\Aero\SET56.tmp to %WINDIR%\Cursors\Aero\aero_working_pink.ani
from %WINDIR%\Cursors\Aero\SET55.tmp to %WINDIR%\Cursors\Aero\aero_working_ngreen.ani
from %WINDIR%\Cursors\Aero\SET5C.tmp to %WINDIR%\Cursors\Aero\AeroII Cross.cur
from %WINDIR%\Cursors\Aero\SET63.tmp to %WINDIR%\Cursors\Aero\AeroII Resize Right.cur
from %WINDIR%\Cursors\Aero\SET62.tmp to %WINDIR%\Cursors\Aero\AeroII Resize Left.cur
from %WINDIR%\Cursors\Aero\SET65.tmp to %WINDIR%\Cursors\Aero\AeroII Size Vert.cur
from %WINDIR%\Cursors\Aero\SET64.tmp to %WINDIR%\Cursors\Aero\AeroII Size Horz.cur
from %WINDIR%\Cursors\Aero\SET61.tmp to %WINDIR%\Cursors\Aero\AeroII Resize All.cur
from %WINDIR%\Cursors\Aero\SET5E.tmp to %WINDIR%\Cursors\Aero\AeroII Handwriting.cur
from %WINDIR%\Cursors\Aero\SET5D.tmp to %WINDIR%\Cursors\Aero\AeroII Hand.ani
from %WINDIR%\Cursors\Aero\SET60.tmp to %WINDIR%\Cursors\Aero\AeroII Normal Select.cur
from %WINDIR%\Cursors\Aero\SET5F.tmp to %WINDIR%\Cursors\Aero\AeroII Help Select.cur
from %WINDIR%\Cursors\Aero\SET7A.tmp to %WINDIR%\Cursors\Aero\HighSpin2 SM2nd Green.ani
from %WINDIR%\Cursors\Aero\SET95.tmp to %WINDIR%\Cursors\Aero\link_ba.cur
from %WINDIR%\Cursors\Aero\SET94.tmp to %WINDIR%\Cursors\Aero\HSpin Transparent Press.cur
from %WINDIR%\Cursors\Aero\SET97.tmp to %WINDIR%\Cursors\Aero\nesw_ba.cur
from %WINDIR%\Cursors\Aero\SET96.tmp to %WINDIR%\Cursors\Aero\move_ba.cur
from %WINDIR%\Cursors\Aero\SET93.tmp to %WINDIR%\Cursors\Aero\HSpin Tranparent Text.cur
from %WINDIR%\Cursors\Aero\SET90.tmp to %WINDIR%\Cursors\Aero\HSpin2 Tranparents Pen.cur
from %WINDIR%\Cursors\Aero\SET8F.tmp to %WINDIR%\Cursors\Aero\HSpin2 Tranparents NWSE.cur
from %WINDIR%\Cursors\Aero\SET92.tmp to %WINDIR%\Cursors\Aero\HSpin2 Tranparents Up.cur
from %WINDIR%\Cursors\Aero\SET91.tmp to %WINDIR%\Cursors\Aero\HSpin2 Tranparents Unavail.cur
from %WINDIR%\Cursors\Aero\SET98.tmp to %WINDIR%\Cursors\Aero\ns_ba.cur
from %WINDIR%\Cursors\Aero\SET9F.tmp to %WINDIR%\Cursors\Aero\up_ba.cur
from %WINDIR%\Cursors\Aero\SET9E.tmp to %WINDIR%\Cursors\Aero\unavail_ba.cur
from %WINDIR%\Cursors\Aero\SETA1.tmp to %WINDIR%\Cursors\Aero\working_ba.ani
from %WINDIR%\Cursors\Aero\SETA0.tmp to %WINDIR%\Cursors\Aero\we_ba.cur
from %WINDIR%\Cursors\Aero\SET9D.tmp to %WINDIR%\Cursors\Aero\TextSelect.cur
from %WINDIR%\Cursors\Aero\SET9A.tmp to %WINDIR%\Cursors\Aero\pen_ba.cur
from %WINDIR%\Cursors\Aero\SET99.tmp to %WINDIR%\Cursors\Aero\nwse_ba.cur
from %WINDIR%\Cursors\Aero\SET9C.tmp to %WINDIR%\Cursors\Aero\text_ba.cur
from %WINDIR%\Cursors\Aero\SET9B.tmp to %WINDIR%\Cursors\Aero\PrecisionSelect.cur
from %WINDIR%\Cursors\Aero\SET8E.tmp to %WINDIR%\Cursors\Aero\HSpin2 Tranparents NS.cur
from %WINDIR%\Cursors\Aero\SET81.tmp to %WINDIR%\Cursors\Aero\HighSpin2 Work Blue.ani
from %WINDIR%\Cursors\Aero\SET80.tmp to %WINDIR%\Cursors\Aero\HighSpin2 Work Black.ani
from %WINDIR%\Cursors\Aero\SET83.tmp to %WINDIR%\Cursors\Aero\HighSpin2 Work Orange.ani
from %WINDIR%\Cursors\Aero\SET82.tmp to %WINDIR%\Cursors\Aero\HighSpin2 Work Green.ani
from %WINDIR%\Cursors\Aero\SET7F.tmp to %WINDIR%\Cursors\Aero\HighSpin2 SM2nd.ani
from %WINDIR%\Cursors\Aero\SET7C.tmp to %WINDIR%\Cursors\Aero\HighSpin2 SM2nd Pink.ani
from %WINDIR%\Cursors\Aero\SET7B.tmp to %WINDIR%\Cursors\Aero\HighSpin2 SM2nd Orange.ani
from %WINDIR%\Cursors\Aero\SET7E.tmp to %WINDIR%\Cursors\Aero\HighSpin2 SM2nd Red.ani
from %WINDIR%\Cursors\Aero\SET7D.tmp to %WINDIR%\Cursors\Aero\HighSpin2 SM2nd Purple.ani
from %WINDIR%\Cursors\Aero\SET84.tmp to %WINDIR%\Cursors\Aero\HighSpin2 Work Pink.ani
from %WINDIR%\Cursors\Aero\SET8B.tmp to %WINDIR%\Cursors\Aero\HSpin2 Tranparents Link.cur
from %WINDIR%\Cursors\Aero\SET8A.tmp to %WINDIR%\Cursors\Aero\HSpin2 Tranparents Help.cur
from %WINDIR%\Cursors\Aero\SET8D.tmp to %WINDIR%\Cursors\Aero\HSpin2 Tranparents NESW.cur
from %WINDIR%\Cursors\Aero\SET8C.tmp to %WINDIR%\Cursors\Aero\HSpin2 Tranparents Move.cur
from %WINDIR%\Cursors\Aero\SET89.tmp to %WINDIR%\Cursors\Aero\HSpin2 Tranparents EW.cur
from %WINDIR%\Cursors\Aero\SET86.tmp to %WINDIR%\Cursors\Aero\HighSpin2 Work Red.ani
from %WINDIR%\Cursors\Aero\SET85.tmp to %WINDIR%\Cursors\Aero\HighSpin2 Work Purple.ani
from %WINDIR%\Cursors\Aero\SET88.tmp to %WINDIR%\Cursors\Aero\HSpin2 Tranparents Arrow.cur
from %WINDIR%\Cursors\Aero\SET87.tmp to %WINDIR%\Cursors\Aero\HighSpin2 Work.ani
from %WINDIR%\Cursors\Aero\SET52.tmp to %WINDIR%\Cursors\Aero\aero_working_blue.ani
from %WINDIR%\Cursors\Aero\SET1D.tmp to %WINDIR%\Cursors\Aero\aero_helpsel_b.cur
from %WINDIR%\Cursors\Aero\SET1C.tmp to %WINDIR%\Cursors\Aero\aero_helpsel.cur
from %WINDIR%\Cursors\Aero\SET1F.tmp to %WINDIR%\Cursors\Aero\aero_helpsel_xl.cur
from %WINDIR%\Cursors\Aero\SET1E.tmp to %WINDIR%\Cursors\Aero\aero_helpsel_l.cur
from %WINDIR%\Cursors\Aero\SET1B.tmp to %WINDIR%\Cursors\Aero\aero_helpsel1.cur
from %WINDIR%\Cursors\Aero\SET18.tmp to %WINDIR%\Cursors\Aero\aero_ew_b.cur
from %WINDIR%\Cursors\Aero\SET17.tmp to %WINDIR%\Cursors\Aero\aero_ew.cur
from %WINDIR%\Cursors\Aero\SET1A.tmp to %WINDIR%\Cursors\Aero\aero_ew_xl.cur
from %WINDIR%\Cursors\Aero\SET19.tmp to %WINDIR%\Cursors\Aero\aero_ew_l.cur
from %WINDIR%\Cursors\Aero\SET20.tmp to %WINDIR%\Cursors\Aero\aero_link1.cur
from %WINDIR%\Cursors\Aero\SET27.tmp to %WINDIR%\Cursors\Aero\aero_move_b.cur
from %WINDIR%\Cursors\Aero\SET26.tmp to %WINDIR%\Cursors\Aero\aero_move.cur
from %WINDIR%\Cursors\Aero\SET29.tmp to %WINDIR%\Cursors\Aero\aero_move_xl.cur
from %WINDIR%\Cursors\Aero\SET28.tmp to %WINDIR%\Cursors\Aero\aero_move_l.cur
from %WINDIR%\Cursors\Aero\SET25.tmp to %WINDIR%\Cursors\Aero\aero_move1.cur
from %WINDIR%\Cursors\Aero\SET22.tmp to %WINDIR%\Cursors\Aero\aero_link_b.cur
from %WINDIR%\Cursors\Aero\SET21.tmp to %WINDIR%\Cursors\Aero\aero_link.cur
from %WINDIR%\Cursors\Aero\SET24.tmp to %WINDIR%\Cursors\Aero\aero_link_xl.cur
from %WINDIR%\Cursors\Aero\SET23.tmp to %WINDIR%\Cursors\Aero\aero_link_l.cur
from %WINDIR%\Cursors\Aero\SET16.tmp to %WINDIR%\Cursors\Aero\aero_ew1.cur
from %WINDIR%\Cursors\Aero\SET9.tmp to %WINDIR%\Cursors\Aero\aero_busy1.ani
from %WINDIR%\Cursors\Aero\SET8.tmp to %WINDIR%\Cursors\Aero\aero_arrow_xl.cur
from %WINDIR%\Cursors\Aero\SETB.tmp to %WINDIR%\Cursors\Aero\aero_busy_b.ani
from %WINDIR%\Cursors\Aero\SETA.tmp to %WINDIR%\Cursors\Aero\aero_busy.ani
from %WINDIR%\Cursors\Aero\SET7.tmp to %WINDIR%\Cursors\Aero\aero_arrow_l.cur
from %WINDIR%\Cursors\Aero\SET4.tmp to %WINDIR%\Cursors\Aero\aero_arrow1.cur
from %WINDIR%\Cursors\Aero\SET3.tmp to %WINDIR%\Cursors\Aero\aero_alt.cur
from %WINDIR%\Cursors\Aero\SET6.tmp to %WINDIR%\Cursors\Aero\aero_arrow_b.cur
from %WINDIR%\Cursors\Aero\SET5.tmp to %WINDIR%\Cursors\Aero\aero_arrow.cur
from %WINDIR%\Cursors\Aero\SETC.tmp to %WINDIR%\Cursors\Aero\aero_busy_black.ani
from %WINDIR%\Cursors\Aero\SET13.tmp to %WINDIR%\Cursors\Aero\aero_busy_silver.ani
from %WINDIR%\Cursors\Aero\SET12.tmp to %WINDIR%\Cursors\Aero\aero_busy_red.ani
from %WINDIR%\Cursors\Aero\SET15.tmp to %WINDIR%\Cursors\Aero\aero_cross_b.cur
from %WINDIR%\Cursors\Aero\SET14.tmp to %WINDIR%\Cursors\Aero\aero_busy_xl.ani
from %WINDIR%\Cursors\Aero\SET11.tmp to %WINDIR%\Cursors\Aero\aero_busy_pink.ani
from %WINDIR%\Cursors\Aero\SETE.tmp to %WINDIR%\Cursors\Aero\aero_busy_dgreen.ani
from %WINDIR%\Cursors\Aero\SETD.tmp to %WINDIR%\Cursors\Aero\aero_busy_blue.ani
from %WINDIR%\Cursors\Aero\SET10.tmp to %WINDIR%\Cursors\Aero\aero_busy_ngreen.ani
from %WINDIR%\Cursors\Aero\SETF.tmp to %WINDIR%\Cursors\Aero\aero_busy_l.ani
from %WINDIR%\Cursors\Aero\SET2A.tmp to %WINDIR%\Cursors\Aero\aero_nesw1.cur
from %WINDIR%\Cursors\Aero\SET45.tmp to %WINDIR%\Cursors\Aero\aero_unavail.cur
from %WINDIR%\Cursors\Aero\SET44.tmp to %WINDIR%\Cursors\Aero\aero_unavail1.cur
from %WINDIR%\Cursors\Aero\SET47.tmp to %WINDIR%\Cursors\Aero\aero_unavail_l.cur
from %WINDIR%\Cursors\Aero\SET46.tmp to %WINDIR%\Cursors\Aero\aero_unavail_b.cur
from %WINDIR%\Cursors\Aero\SET43.tmp to %WINDIR%\Cursors\Aero\aero_text_b.cur
from %WINDIR%\Cursors\Aero\SET40.tmp to %WINDIR%\Cursors\Aero\aero_select.cur
from %WINDIR%\Cursors\Aero\SET3F.tmp to %WINDIR%\Cursors\Aero\aero_prec_xl.cur
from %WINDIR%\Cursors\Aero\SET42.tmp to %WINDIR%\Cursors\Aero\aero_select_xl.cur
from %WINDIR%\Cursors\Aero\SET41.tmp to %WINDIR%\Cursors\Aero\aero_select_l.cur
from %WINDIR%\Cursors\Aero\SET48.tmp to %WINDIR%\Cursors\Aero\aero_unavail_xl.cur
from %WINDIR%\Cursors\Aero\SET4F.tmp to %WINDIR%\Cursors\Aero\aero_working.ani
from %WINDIR%\Cursors\Aero\SET4E.tmp to %WINDIR%\Cursors\Aero\aero_working1.ani
from %WINDIR%\Cursors\Aero\SET51.tmp to %WINDIR%\Cursors\Aero\aero_working_black.ani
from %WINDIR%\Cursors\Aero\SET50.tmp to %WINDIR%\Cursors\Aero\aero_working_b.ani
from %WINDIR%\Cursors\Aero\SET4D.tmp to %WINDIR%\Cursors\Aero\aero_up_xl.cur
from %WINDIR%\Cursors\Aero\SET4A.tmp to %WINDIR%\Cursors\Aero\aero_up.cur
from %WINDIR%\Cursors\Aero\SET49.tmp to %WINDIR%\Cursors\Aero\aero_up1.cur
from %WINDIR%\Cursors\Aero\SET4C.tmp to %WINDIR%\Cursors\Aero\aero_up_l.cur
from %WINDIR%\Cursors\Aero\SET4B.tmp to %WINDIR%\Cursors\Aero\aero_up_b.cur
from %WINDIR%\Cursors\Aero\SET3E.tmp to %WINDIR%\Cursors\Aero\aero_prec_l.cur
from %WINDIR%\Cursors\Aero\SET31.tmp to %WINDIR%\Cursors\Aero\aero_ns_b.cur
from %WINDIR%\Cursors\Aero\SET30.tmp to %WINDIR%\Cursors\Aero\aero_ns.cur
from %WINDIR%\Cursors\Aero\SET33.tmp to %WINDIR%\Cursors\Aero\aero_ns_xl.cur
from %WINDIR%\Cursors\Aero\SET32.tmp to %WINDIR%\Cursors\Aero\aero_ns_l.cur
from %WINDIR%\Cursors\Aero\SET2F.tmp to %WINDIR%\Cursors\Aero\aero_ns1.cur
from %WINDIR%\Cursors\Aero\SET2C.tmp to %WINDIR%\Cursors\Aero\aero_nesw_b.cur
from %WINDIR%\Cursors\Aero\SET2B.tmp to %WINDIR%\Cursors\Aero\aero_nesw.cur
from %WINDIR%\Cursors\Aero\SET2E.tmp to %WINDIR%\Cursors\Aero\aero_nesw_xl.cur
from %WINDIR%\Cursors\Aero\SET2D.tmp to %WINDIR%\Cursors\Aero\aero_nesw_l.cur
from %WINDIR%\Cursors\Aero\SET34.tmp to %WINDIR%\Cursors\Aero\aero_nwse1.cur
from %WINDIR%\Cursors\Aero\SET3B.tmp to %WINDIR%\Cursors\Aero\aero_pen_l.cur
from %WINDIR%\Cursors\Aero\SET3A.tmp to %WINDIR%\Cursors\Aero\aero_pen_b.cur
from %WINDIR%\Cursors\Aero\SET3D.tmp to %WINDIR%\Cursors\Aero\aero_prec.cur
from %WINDIR%\Cursors\Aero\SET3C.tmp to %WINDIR%\Cursors\Aero\aero_pen_xl.cur
from %WINDIR%\Cursors\Aero\SET39.tmp to %WINDIR%\Cursors\Aero\aero_pen.cur
from %WINDIR%\Cursors\Aero\SET36.tmp to %WINDIR%\Cursors\Aero\aero_nwse_b.cur
from %WINDIR%\Cursors\Aero\SET35.tmp to %WINDIR%\Cursors\Aero\aero_nwse.cur
from %WINDIR%\Cursors\Aero\SET38.tmp to %WINDIR%\Cursors\Aero\aero_nwse_xl.cur
from %WINDIR%\Cursors\Aero\SET37.tmp to %WINDIR%\Cursors\Aero\aero_nwse_l.cur

Miscellaneous:

Searches for the following windows:

ClassName: 'Shell_TrayWnd' WindowName: ''
ClassName: 'EDIT' WindowName: ''

Tecnologías

Términos

Formación y educación

Mitos

Technical Information

Curing recommendations

Free trial