Technical Information
- [<HKLM>\SYSTEM\ControlSet001\Services\USBSafelyRemoveService] 'Start' = '00000002'
- [<HKLM>\SYSTEM\ControlSet001\Services\USBSafelyRemoveService] 'ImagePath' = '"%ProgramFiles%\USB Safely Remove\USBSRService.exe"'
- %TEMP%\7ZipSfx.000\USB.Safely.Remove-6.0.9.1263.exe
- %ProgramFiles%\USB Safely Remove\Skins\Black Velvet\eject_drive_passive.png
- %ProgramFiles%\USB Safely Remove\Skins\Black Velvet\fixed_letter_sign.png
- %ProgramFiles%\USB Safely Remove\Skins\Black Velvet\hot_key.png
- %ProgramFiles%\USB Safely Remove\Skins\Black Velvet\open_hidden_device_list_active.png
- %ProgramFiles%\USB Safely Remove\Skins\Black Velvet\open_hidden_device_list_passive.png
- %ProgramFiles%\USB Safely Remove\Skins\Black Velvet\options_active.png
- %ProgramFiles%\USB Safely Remove\Skins\Black Velvet\options_passive.png
- %ProgramFiles%\USB Safely Remove\Skins\Black Velvet\quick_launch_active.png
- %ProgramFiles%\USB Safely Remove\Skins\Black Velvet\quick_launch_passive.png
- %ProgramFiles%\USB Safely Remove\Skins\Black Velvet\reg_key_active.png
- %ProgramFiles%\USB Safely Remove\Skins\Black Velvet\reg_key_passive.png
- %ProgramFiles%\USB Safely Remove\Skins\Black Velvet\return_drive_active.png
- %ProgramFiles%\USB Safely Remove\Skins\Black Velvet\close_menu_passive.png
- %ProgramFiles%\USB Safely Remove\Skins\Black Velvet\return_drive_passive.png
- %ProgramFiles%\USB Safely Remove\Skins\Black Velvet\stop_all_interrupt_active.png
- %ProgramFiles%\USB Safely Remove\Skins\Black Velvet\stop_all_interrupt_passive.png
- %ProgramFiles%\USB Safely Remove\Skins\Black Velvet\stop_all_passive.png
- %ProgramFiles%\USB Safely Remove\Skins\Black Velvet\update_hardware_active.png
- %ProgramFiles%\USB Safely Remove\Skins\Black Velvet\update_hardware_passive.png
- %ProgramFiles%\USB Safely Remove\Skins\Black Velvet\warning_letter_sign.png
- %ProgramFiles%\USB Safely Remove\Skins\Classic\browse_drive_active.png
- %ProgramFiles%\USB Safely Remove\Skins\Classic\browse_drive_passive.png
- %ProgramFiles%\USB Safely Remove\Skins\Classic\close_balloon_active.png
- %ProgramFiles%\USB Safely Remove\Skins\Classic\close_balloon_passive.png
- %ProgramFiles%\USB Safely Remove\Skins\Classic\close_hidden_device_list_active.png
- %ProgramFiles%\USB Safely Remove\Skins\Classic\close_hidden_device_list_passive.png
- %ProgramFiles%\USB Safely Remove\Skins\Black Velvet\drive.png
- %ProgramFiles%\USB Safely Remove\Skins\Black Velvet\eject_drive_active.png
- %ProgramFiles%\USB Safely Remove\Skins\Black Velvet\colorscheme.ini
- %ProgramFiles%\USB Safely Remove\Skins\Black Velvet\close_menu_active.png
- %ProgramFiles%\USB Safely Remove\Skins\Classic\close_info_passive.png
- %ProgramFiles%\USB Safely Remove\Skins\Black Contrast\hot_key.png
- %ProgramFiles%\USB Safely Remove\Skins\Black Contrast\open_hidden_device_list_active.png
- %ProgramFiles%\USB Safely Remove\Skins\Black Contrast\open_hidden_device_list_passive.png
- %ProgramFiles%\USB Safely Remove\Skins\Black Contrast\options_active.png
- %ProgramFiles%\USB Safely Remove\Skins\Black Contrast\options_passive.png
- %ProgramFiles%\USB Safely Remove\Skins\Black Contrast\quick_launch_active.png
- %ProgramFiles%\USB Safely Remove\Skins\Black Contrast\quick_launch_passive.png
- %ProgramFiles%\USB Safely Remove\Skins\Black Contrast\reg_key_active.png
- %ProgramFiles%\USB Safely Remove\Skins\Black Contrast\reg_key_passive.png
- %ProgramFiles%\USB Safely Remove\Skins\Black Contrast\return_drive_active.png
- %ProgramFiles%\USB Safely Remove\Skins\Black Contrast\return_drive_passive.png
- %ProgramFiles%\USB Safely Remove\Skins\Classic\close_info_active.png
- %ProgramFiles%\USB Safely Remove\Skins\Black Contrast\eject_drive_passive.png
- %ProgramFiles%\USB Safely Remove\Skins\Black Velvet\stop_all_active.png
- %ProgramFiles%\USB Safely Remove\Skins\Black Contrast\stop_all_active.png
- %ProgramFiles%\USB Safely Remove\Skins\Black Contrast\update_hardware_active.png
- %ProgramFiles%\USB Safely Remove\Skins\Black Contrast\update_hardware_passive.png
- %ProgramFiles%\USB Safely Remove\Skins\Black Contrast\warning_letter_sign.png
- %ProgramFiles%\USB Safely Remove\Skins\Black Velvet\browse_drive_active.png
- %ProgramFiles%\USB Safely Remove\Skins\Black Velvet\browse_drive_passive.png
- %ProgramFiles%\USB Safely Remove\Skins\Black Velvet\close_balloon_active.png
- %ProgramFiles%\USB Safely Remove\Skins\Black Velvet\close_balloon_passive.png
- %ProgramFiles%\USB Safely Remove\Skins\Black Velvet\close_hidden_device_list_active.png
- %ProgramFiles%\USB Safely Remove\Skins\Black Velvet\close_hidden_device_list_passive.png
- %ProgramFiles%\USB Safely Remove\Skins\Black Velvet\close_info_active.png
- %ProgramFiles%\USB Safely Remove\Skins\Black Velvet\close_info_passive.png
- %ProgramFiles%\USB Safely Remove\Skins\Black Contrast\stop_all_interrupt_active.png
- %ProgramFiles%\USB Safely Remove\Skins\Black Contrast\stop_all_interrupt_passive.png
- %ProgramFiles%\USB Safely Remove\Skins\Black Contrast\stop_all_passive.png
- %ProgramFiles%\USB Safely Remove\DeviceImages\iPod.ico
- %ProgramFiles%\USB Safely Remove\Skins\Classic\close_menu_active.png
- %ProgramFiles%\USB Safely Remove\Skins\Win8ModernUI\close_menu_passive.png
- %ProgramFiles%\USB Safely Remove\Skins\Win8ModernUI\colorscheme.ini
- %ProgramFiles%\USB Safely Remove\Skins\Win8ModernUI\drive.png
- %ProgramFiles%\USB Safely Remove\Skins\Win8ModernUI\eject_drive_active.png
- %ProgramFiles%\USB Safely Remove\Skins\Win8ModernUI\eject_drive_passive.png
- %ProgramFiles%\USB Safely Remove\Skins\Win8ModernUI\fixed_letter_sign.png
- %ProgramFiles%\USB Safely Remove\Skins\Win8ModernUI\hot_key.png
- %ProgramFiles%\USB Safely Remove\Skins\Win8ModernUI\open_hidden_device_list_active.png
- %ProgramFiles%\USB Safely Remove\Skins\Win8ModernUI\open_hidden_device_list_passive.png
- %ProgramFiles%\USB Safely Remove\Skins\Win8ModernUI\options_active.png
- %ProgramFiles%\USB Safely Remove\Skins\Win8ModernUI\options_passive.png
- %ProgramFiles%\USB Safely Remove\Skins\Win8ModernUI\quick_launch_active.png
- %ProgramFiles%\USB Safely Remove\Skins\Win8ModernUI\quick_launch_passive.png
- %ProgramFiles%\USB Safely Remove\Skins\Win8ModernUI\close_menu_active.png
- %ProgramFiles%\USB Safely Remove\Skins\Black Contrast\eject_drive_active.png
- %ProgramFiles%\USB Safely Remove\Skins\Win8ModernUI\close_info_passive.png
- %ProgramFiles%\USB Safely Remove\Skins\Win8ModernUI\return_drive_passive.png
- %ProgramFiles%\USB Safely Remove\Skins\Win8ModernUI\stop_all_active.png
- %ProgramFiles%\USB Safely Remove\Skins\Win8ModernUI\stop_all_interrupt_active.png
- %ProgramFiles%\USB Safely Remove\Skins\Win8ModernUI\stop_all_interrupt_passive.png
- %ProgramFiles%\USB Safely Remove\Skins\Win8ModernUI\stop_all_passive.png
- %ProgramFiles%\USB Safely Remove\Skins\Win8ModernUI\update_hardware_active.png
- %ProgramFiles%\USB Safely Remove\Skins\Win8ModernUI\update_hardware_passive.png
- %ProgramFiles%\USB Safely Remove\Skins\Win8ModernUI\warning_letter_sign.png
- %APPDATA%\USBSRService\USBSRService.log.txt
- C:\Documents and Settings\LocalService\Application Data\USBSRService\USBSRService.log.txt
- %ProgramFiles%\USB Safely Remove\Удалить USB Safely Remove.exe
- %HOMEPATH%\Desktop\USB Safely Remove.lnk
- %ProgramFiles%\USB Safely Remove\Skins\Win8ModernUI\reg_key_passive.png
- %ProgramFiles%\USB Safely Remove\Skins\Win8ModernUI\reg_key_active.png
- %ProgramFiles%\USB Safely Remove\Skins\Black Contrast\fixed_letter_sign.png
- %ProgramFiles%\USB Safely Remove\Skins\Win8ModernUI\close_hidden_device_list_passive.png
- %ProgramFiles%\USB Safely Remove\Skins\Classic\return_drive_passive.png
- %ProgramFiles%\USB Safely Remove\Skins\Classic\drive.png
- %ProgramFiles%\USB Safely Remove\Skins\Classic\eject_drive_active.png
- %ProgramFiles%\USB Safely Remove\Skins\Classic\eject_drive_passive.png
- %ProgramFiles%\USB Safely Remove\Skins\Classic\fixed_letter_sign.png
- %ProgramFiles%\USB Safely Remove\Skins\Classic\hot_key.png
- %ProgramFiles%\USB Safely Remove\Skins\Classic\open_hidden_device_list_active.png
- %ProgramFiles%\USB Safely Remove\Skins\Classic\open_hidden_device_list_passive.png
- %ProgramFiles%\USB Safely Remove\Skins\Classic\options_active.png
- %ProgramFiles%\USB Safely Remove\Skins\Classic\options_passive.png
- %ProgramFiles%\USB Safely Remove\Skins\Classic\quick_launch_active.png
- %ProgramFiles%\USB Safely Remove\Skins\Classic\quick_launch_passive.png
- %ProgramFiles%\USB Safely Remove\Skins\Classic\reg_key_active.png
- %ProgramFiles%\USB Safely Remove\Skins\Win8ModernUI\close_info_active.png
- %ProgramFiles%\USB Safely Remove\Skins\Classic\close_menu_passive.png
- %ProgramFiles%\USB Safely Remove\Skins\Classic\colorscheme.ini
- %ProgramFiles%\USB Safely Remove\Skins\Classic\stop_all_active.png
- %ProgramFiles%\USB Safely Remove\Skins\Classic\stop_all_interrupt_active.png
- %ProgramFiles%\USB Safely Remove\Skins\Classic\stop_all_interrupt_passive.png
- %ProgramFiles%\USB Safely Remove\Skins\Classic\stop_all_passive.png
- %ProgramFiles%\USB Safely Remove\Skins\Classic\update_hardware_active.png
- %ProgramFiles%\USB Safely Remove\Skins\Classic\update_hardware_passive.png
- %ProgramFiles%\USB Safely Remove\Skins\Classic\warning_letter_sign.png
- %ProgramFiles%\USB Safely Remove\Skins\Win8ModernUI\browse_drive_active.png
- %ProgramFiles%\USB Safely Remove\Skins\Win8ModernUI\browse_drive_passive.png
- %ProgramFiles%\USB Safely Remove\Skins\Win8ModernUI\close_balloon_active.png
- %ProgramFiles%\USB Safely Remove\Skins\Win8ModernUI\close_balloon_passive.png
- %ProgramFiles%\USB Safely Remove\Skins\Win8ModernUI\close_hidden_device_list_active.png
- %ProgramFiles%\USB Safely Remove\Skins\Classic\return_drive_active.png
- %ProgramFiles%\USB Safely Remove\Skins\Classic\reg_key_passive.png
- %ProgramFiles%\USB Safely Remove\Skins\Black Contrast\drive.png
- %ProgramFiles%\USB Safely Remove\Skins\Black Contrast\colorscheme.ini
- %ProgramFiles%\USB Safely Remove\Skins\Black Contrast\close_menu_passive.png
- %ProgramFiles%\USB Safely Remove\DeviceImages\Flash drive 2 (wine).ico
- %ProgramFiles%\USB Safely Remove\DeviceImages\Flash drive 2.ico
- %ProgramFiles%\USB Safely Remove\DeviceImages\Flash drive.ico
- %ProgramFiles%\USB Safely Remove\DeviceImages\Graphics-tablet.ico
- %ProgramFiles%\USB Safely Remove\DeviceImages\HDD (black).ico
- %ProgramFiles%\USB Safely Remove\DeviceImages\HDD (blue).ico
- %ProgramFiles%\USB Safely Remove\DeviceImages\HDD (red).ico
- %ProgramFiles%\USB Safely Remove\DeviceImages\HDD (yellow).ico
- %ProgramFiles%\USB Safely Remove\DeviceImages\HDD 2.ico
- %ProgramFiles%\USB Safely Remove\DeviceImages\HDD Firewire.ico
- %ProgramFiles%\USB Safely Remove\DeviceImages\HDD SATA.ico
- %ProgramFiles%\USB Safely Remove\DeviceImages\Flash drive 2 (green).ico
- %ProgramFiles%\USB Safely Remove\DeviceImages\CD-DVD player.ico
- %ProgramFiles%\USB Safely Remove\DeviceImages\Flash drive 2 (pink).ico
- %ProgramFiles%\USB Safely Remove\DeviceImages\HDD SCSI.ico
- %ProgramFiles%\USB Safely Remove\DeviceImages\Headphones.ico
- %ProgramFiles%\USB Safely Remove\DeviceImages\Joypad.ico
- %ProgramFiles%\USB Safely Remove\DeviceImages\Joystick.ico
- %ProgramFiles%\USB Safely Remove\DeviceImages\Keyboard.ico
- %ProgramFiles%\USB Safely Remove\DeviceImages\Loudspeaker.ico
- %ProgramFiles%\USB Safely Remove\DeviceImages\MP3 player.ico
- %ProgramFiles%\USB Safely Remove\DeviceImages\Memory card CF.ico
- %ProgramFiles%\USB Safely Remove\DeviceImages\Memory card MS.ico
- %ProgramFiles%\USB Safely Remove\DeviceImages\Memory card SD.ico
- %ProgramFiles%\USB Safely Remove\DeviceImages\Memory card XD.ico
- %ProgramFiles%\USB Safely Remove\DeviceImages\Microphone.ico
- %ProgramFiles%\USB Safely Remove\DeviceImages\HDD USB (white).ico
- %ProgramFiles%\USB Safely Remove\DeviceImages\HDD USB.ico
- %ProgramFiles%\USB Safely Remove\DeviceImages\HDD.ico
- %HOMEPATH%\Start Menu\Programs\USB Safely Remove\USB Safely Remove.lnk
- %ProgramFiles%\USB Safely Remove\DeviceImages\Mobile phone.ico
- %ProgramFiles%\USB Safely Remove\DeviceImages\Flash drive (wine).ico
- %TEMP%\nsx3.tmp\rus-r.bmp
- %TEMP%\nsx3.tmp\eng-r.bmp
- %TEMP%\nsx3.tmp\ukr-r.bmp
- %TEMP%\nsx3.tmp\System.dll
- %ProgramFiles%\USB Safely Remove\History.txt
- %ProgramFiles%\USB Safely Remove\RestoreSettings.bat
- %ProgramFiles%\USB Safely Remove\SaveSettings.bat
- %ProgramFiles%\USB Safely Remove\USBSRService.exe
- %ProgramFiles%\USB Safely Remove\USBSafelyRemove.exe
- %ProgramFiles%\USB Safely Remove\USRFindHandle.sys
- %ProgramFiles%\USB Safely Remove\usr.exe
- %ProgramFiles%\USB Safely Remove\DeviceImages\Battery.ico
- %ProgramFiles%\USB Safely Remove\DeviceImages\Flash drive 2 (black).ico
- %ProgramFiles%\USB Safely Remove\DeviceImages\Flash drive 2 (gray).ico
- %ProgramFiles%\USB Safely Remove\DeviceImages\Bluetooth.ico
- %ProgramFiles%\USB Safely Remove\DeviceImages\Card reader (black).ico
- %ProgramFiles%\USB Safely Remove\DeviceImages\Card reader (green).ico
- %ProgramFiles%\USB Safely Remove\DeviceImages\Card reader (red).ico
- %ProgramFiles%\USB Safely Remove\DeviceImages\Card reader.ico
- %ProgramFiles%\USB Safely Remove\DeviceImages\Fingerprint.ico
- %ProgramFiles%\USB Safely Remove\DeviceImages\Flash drive (black).ico
- %ProgramFiles%\USB Safely Remove\DeviceImages\Flash drive (gray).ico
- %ProgramFiles%\USB Safely Remove\DeviceImages\Flash drive (green).ico
- %ProgramFiles%\USB Safely Remove\DeviceImages\Flash drive (light).ico
- %ProgramFiles%\USB Safely Remove\DeviceImages\Flash drive (orange).ico
- %ProgramFiles%\USB Safely Remove\DeviceImages\Flash drive (pink).ico
- %ProgramFiles%\USB Safely Remove\DeviceImages\Flash drive (white).ico
- %TEMP%\nsc2.tmp
- %ProgramFiles%\USB Safely Remove\DeviceImages\Camera.ico
- %ProgramFiles%\USB Safely Remove\Skins\Win8ModernUI\return_drive_active.png
- %ProgramFiles%\USB Safely Remove\DeviceImages\Modem.ico
- %ProgramFiles%\USB Safely Remove\DeviceImages\PDA.ico
- %ProgramFiles%\USB Safely Remove\Languages\Indonesian.lng
- %ProgramFiles%\USB Safely Remove\Languages\Italian.lng
- %ProgramFiles%\USB Safely Remove\Languages\Korean.lng
- %ProgramFiles%\USB Safely Remove\Languages\Latvian.lng
- %ProgramFiles%\USB Safely Remove\Languages\Lithuanian.lng
- %ProgramFiles%\USB Safely Remove\Languages\Macedonian.lng
- %ProgramFiles%\USB Safely Remove\Languages\Polish.lng
- %ProgramFiles%\USB Safely Remove\Languages\Portuguese-Brazilian.lng
- %ProgramFiles%\USB Safely Remove\Languages\Romanian.lng
- %ProgramFiles%\USB Safely Remove\Languages\Russian.lng
- %ProgramFiles%\USB Safely Remove\Languages\Serbian-Cyrillic.lng
- %ProgramFiles%\USB Safely Remove\Languages\Serbian-Latin.lng
- %ProgramFiles%\USB Safely Remove\DeviceImages\Mouse.ico
- %ProgramFiles%\USB Safely Remove\Languages\Hungarian.lng
- %ProgramFiles%\USB Safely Remove\Languages\Hebrew.lng
- %ProgramFiles%\USB Safely Remove\Languages\Turkish.lng
- %ProgramFiles%\USB Safely Remove\Languages\Ukrainian.lng
- %ProgramFiles%\USB Safely Remove\Languages\Vietnamese.lng
- %ProgramFiles%\USB Safely Remove\Skins\Black Contrast\browse_drive_active.png
- %ProgramFiles%\USB Safely Remove\Skins\Black Contrast\browse_drive_passive.png
- %ProgramFiles%\USB Safely Remove\Skins\Black Contrast\close_balloon_active.png
- %ProgramFiles%\USB Safely Remove\Skins\Black Contrast\close_balloon_passive.png
- %ProgramFiles%\USB Safely Remove\Skins\Black Contrast\close_hidden_device_list_active.png
- %ProgramFiles%\USB Safely Remove\Skins\Black Contrast\close_hidden_device_list_passive.png
- %ProgramFiles%\USB Safely Remove\Skins\Black Contrast\close_info_active.png
- %ProgramFiles%\USB Safely Remove\Skins\Black Contrast\close_info_passive.png
- %ProgramFiles%\USB Safely Remove\Skins\Black Contrast\close_menu_active.png
- %ProgramFiles%\USB Safely Remove\Languages\Slovenian.lng
- %ProgramFiles%\USB Safely Remove\Languages\Swedish.lng
- %ProgramFiles%\USB Safely Remove\DeviceImages\PCI-card.ico
- %ProgramFiles%\USB Safely Remove\Languages\Spanish.lng
- %ProgramFiles%\USB Safely Remove\DeviceImages\Flash drive 2 (light).ico
- %ProgramFiles%\USB Safely Remove\DeviceImages\Printer.ico
- %ProgramFiles%\USB Safely Remove\DeviceImages\Radio.ico
- %ProgramFiles%\USB Safely Remove\DeviceImages\RemoteControl.ico
- %ProgramFiles%\USB Safely Remove\DeviceImages\SCSI logo.ico
- %ProgramFiles%\USB Safely Remove\DeviceImages\Scanner.ico
- %ProgramFiles%\USB Safely Remove\DeviceImages\Smartcard.ico
- %ProgramFiles%\USB Safely Remove\DeviceImages\TV-tuner.ico
- %ProgramFiles%\USB Safely Remove\DeviceImages\UPS.ico
- %ProgramFiles%\USB Safely Remove\DeviceImages\USB device.ico
- %ProgramFiles%\USB Safely Remove\DeviceImages\USB logo.ico
- %ProgramFiles%\USB Safely Remove\DeviceImages\USB wireless.ico
- %ProgramFiles%\USB Safely Remove\DeviceImages\Webcam.ico
- %ProgramFiles%\USB Safely Remove\Languages\Galician.lng
- %ProgramFiles%\USB Safely Remove\Languages\Greek.lng
- %ProgramFiles%\USB Safely Remove\Languages\German.lng
- %ProgramFiles%\USB Safely Remove\Languages\Bulgarian.lng
- %ProgramFiles%\USB Safely Remove\Languages\Catalan.lng
- %ProgramFiles%\USB Safely Remove\Languages\Chinese-Simplified.lng
- %ProgramFiles%\USB Safely Remove\Languages\Chinese-Traditional.lng
- %ProgramFiles%\USB Safely Remove\Languages\Croatian.lng
- %ProgramFiles%\USB Safely Remove\Languages\Czech.lng
- %ProgramFiles%\USB Safely Remove\Languages\Danish.lng
- %ProgramFiles%\USB Safely Remove\Languages\Dutch-Belgium.lng
- %ProgramFiles%\USB Safely Remove\Languages\Dutch-Netherlands.lng
- %ProgramFiles%\USB Safely Remove\Languages\English-proof.lng
- %ProgramFiles%\USB Safely Remove\Languages\Estonian.lng
- %ProgramFiles%\USB Safely Remove\Languages\French.lng
- %ProgramFiles%\USB Safely Remove\DeviceImages\Wi-Fi logo.ico
- %ProgramFiles%\USB Safely Remove\Languages\Arabic.lng
- %HOMEPATH%\Start Menu\Programs\USB Safely Remove\Удалить USB Safely Remove.lnk
- %TEMP%\nsx3.tmp\eng-r.bmp
- %TEMP%\nsx3.tmp\rus-r.bmp
- %TEMP%\nsx3.tmp\System.dll
- %TEMP%\nsx3.tmp\ukr-r.bmp
- %TEMP%\7ZipSfx.000\USB.Safely.Remove-6.0.9.1263.exe
- '%TEMP%\7ZipSfx.000\USB.Safely.Remove-6.0.9.1263.exe' /S /E
- '%ProgramFiles%\USB Safely Remove\USBSRService.exe' /install /silent
- '%ProgramFiles%\USB Safely Remove\USBSRService.exe'