Technical Information
To ensure autorun and distribution:
Creates or modifies the following files:
- %WINDIR%\Tasks\ParetoLogic Registration3.job
Modifies file system:
Creates the following files:
- %TEMP%\nsl2.tmp
- %ProgramFiles%\ParetoLogic\DriverCure\Images\blue\blue_close2.png
- %ProgramFiles%\ParetoLogic\DriverCure\Images\blue\blue_max1.png
- %ProgramFiles%\ParetoLogic\DriverCure\Images\blue\blue_max2.png
- %ProgramFiles%\ParetoLogic\DriverCure\Images\blue\blue_min1.png
- %ProgramFiles%\ParetoLogic\DriverCure\Images\blue\blue_min2.png
- %ProgramFiles%\ParetoLogic\DriverCure\Images\blue\data_logo.png
- %ProgramFiles%\ParetoLogic\DriverCure\Images\blue\homepage_logo.png
- %ProgramFiles%\ParetoLogic\DriverCure\Images\animation\anim0019.png
- %ProgramFiles%\ParetoLogic\DriverCure\Images\blue\blue_close1.png
- %ProgramFiles%\ParetoLogic\DriverCure\Images\blue\nav_active.png
- %ProgramFiles%\ParetoLogic\DriverCure\UUS3\Images\close.png
- %ProgramFiles%\ParetoLogic\DriverCure\UUS3\Images\close_md.png
- %ProgramFiles%\ParetoLogic\DriverCure\UUS3\Images\close_mo.png
- %ProgramFiles%\ParetoLogic\DriverCure\UUS3\Images\close_pu.png
- %ProgramFiles%\ParetoLogic\DriverCure\UUS3\Images\close_pu_md.png
- %ProgramFiles%\ParetoLogic\DriverCure\UUS3\Images\close_pu_mo.png
- %ProgramFiles%\ParetoLogic\DriverCure\UUS3\Images\min.png
- %ProgramFiles%\ParetoLogic\DriverCure\Images\blue\nav_normal.png
- %ProgramFiles%\ParetoLogic\DriverCure\UUS3\Images\Logo.png
- %ProgramFiles%\ParetoLogic\DriverCure\Images\animation\anim0018.png
- %ProgramFiles%\ParetoLogic\DriverCure\Images\animation\anim0017.png
- %ProgramFiles%\ParetoLogic\DriverCure\Images\animation\anim0016.png
- %ProgramFiles%\ParetoLogic\DriverCure\Images\warning.png
- %ProgramFiles%\ParetoLogic\DriverCure\Images\warning_big.jpg
- %ProgramFiles%\ParetoLogic\DriverCure\Images\warning_big.png
- %ProgramFiles%\ParetoLogic\DriverCure\Images\animation\anim0001.png
- %ProgramFiles%\ParetoLogic\DriverCure\Images\animation\anim0002.png
- %ProgramFiles%\ParetoLogic\DriverCure\Images\animation\anim0003.png
- %ProgramFiles%\ParetoLogic\DriverCure\Images\animation\anim0004.png
- %ProgramFiles%\ParetoLogic\DriverCure\Images\animation\anim0005.png
- %ProgramFiles%\ParetoLogic\DriverCure\Images\usb.png
- %ProgramFiles%\ParetoLogic\DriverCure\Images\animation\anim0006.png
- %ProgramFiles%\ParetoLogic\DriverCure\Images\animation\anim0008.png
- %ProgramFiles%\ParetoLogic\DriverCure\Images\animation\anim0009.png
- %ProgramFiles%\ParetoLogic\DriverCure\Images\animation\anim0010.png
- %ProgramFiles%\ParetoLogic\DriverCure\Images\animation\anim0011.png
- %ProgramFiles%\ParetoLogic\DriverCure\Images\animation\anim0012.png
- %ProgramFiles%\ParetoLogic\DriverCure\Images\animation\anim0013.png
- %ProgramFiles%\ParetoLogic\DriverCure\Images\animation\anim0014.png
- %ProgramFiles%\ParetoLogic\DriverCure\Images\animation\anim0015.png
- %ProgramFiles%\ParetoLogic\DriverCure\Images\animation\anim0007.png
- %ProgramFiles%\ParetoLogic\DriverCure\UUS3\Images\min_md.png
- %ProgramFiles%\ParetoLogic\DriverCure\UUS3\Images\topbar_gradient.png
- %ProgramFiles%\ParetoLogic\DriverCure\uninstall.exe
- %ProgramFiles%\ParetoLogic\DriverCure\HTML\0_days.htm
- %CommonProgramFiles%\ParetoLogic\UUS3\Images\Logo.png
- %CommonProgramFiles%\ParetoLogic\UUS3\Images\close.png
- %CommonProgramFiles%\ParetoLogic\UUS3\Images\close_md.png
- %CommonProgramFiles%\ParetoLogic\UUS3\Images\close_mo.png
- %CommonProgramFiles%\ParetoLogic\UUS3\Images\close_pu.png
- %CommonProgramFiles%\ParetoLogic\UUS3\Images\close_pu_md.png
- %CommonProgramFiles%\ParetoLogic\UUS3\Images\close_pu_mo.png
- %CommonProgramFiles%\ParetoLogic\UUS3\ParetoLogicUpdate.chm
- %CommonProgramFiles%\ParetoLogic\UUS3\UUS3.dll
- %CommonProgramFiles%\ParetoLogic\UUS3\Images\min.png
- %CommonProgramFiles%\ParetoLogic\UUS3\Images\topbar_gradient.png
- %ALLUSERSPROFILE%\Application Data\ParetoLogic\UUS3\Master.xml
- %ALLUSERSPROFILE%\Application Data\ParetoLogic\UUS3\Patch.xml
- %ALLUSERSPROFILE%\Application Data\ParetoLogic\UUS3\Update.xml
- %ALLUSERSPROFILE%\Application Data\ParetoLogic\UUS3\DriverCure\Master.xml
- %ALLUSERSPROFILE%\Application Data\ParetoLogic\UUS3\DriverCure\Patch.xml
- %ALLUSERSPROFILE%\Application Data\ParetoLogic\UUS3\DriverCure\Update.xml
- %CommonProgramFiles%\ParetoLogic\UUS3\Images\min_md.png
- %CommonProgramFiles%\ParetoLogic\UUS3\Images\min_mo.png
- %CommonProgramFiles%\ParetoLogic\UUS3\Pareto_Update3.exe
- %CommonProgramFiles%\ParetoLogic\UUS3\LiteUnzip.dll
- %ALLUSERSPROFILE%\Start Menu\Programs\ParetoLogic\DriverCure\Uninstall.lnk
- %ProgramFiles%\ParetoLogic\DriverCure\HTML\1_days.htm
- %ProgramFiles%\ParetoLogic\DriverCure\HTML\2_days.htm
- %ProgramFiles%\ParetoLogic\DriverCure\HTML\30_days.htm
- %ProgramFiles%\ParetoLogic\DriverCure\HTML\5_days.htm
- %ProgramFiles%\ParetoLogic\DriverCure\HTML\blue_duo.jpg
- %ProgramFiles%\ParetoLogic\DriverCure\HTML\container_content_bkimg.gif
- %ProgramFiles%\ParetoLogic\DriverCure\HTML\container_content_leftimg.gif
- %ProgramFiles%\ParetoLogic\DriverCure\HTML\container_content_rightimg.gif
- %ProgramFiles%\ParetoLogic\DriverCure\HTML\15_days.htm
- %ProgramFiles%\ParetoLogic\DriverCure\HTML\green_duo.jpg
- %ProgramFiles%\ParetoLogic\DriverCure\HTML\orange_duo.jpg
- %ProgramFiles%\ParetoLogic\DriverCure\HTML\package_titlebar_bkimg.jpg
- %ProgramFiles%\ParetoLogic\DriverCure\HTML\special_offer.jpg
- %ProgramFiles%\ParetoLogic\DriverCure\HTML\tp.css
- %ProgramFiles%\ParetoLogic\DriverCure\HTML\trialpay.htm
- %ALLUSERSPROFILE%\Application Data\DriverCure\dc_db.db
- %ALLUSERSPROFILE%\Desktop\ParetoLogic DriverCure.lnk
- %ALLUSERSPROFILE%\Start Menu\Programs\ParetoLogic\DriverCure\ParetoLogic DriverCure.lnk
- %ProgramFiles%\ParetoLogic\DriverCure\HTML\main.css
- %ProgramFiles%\ParetoLogic\DriverCure\Images\uptodate.png
- %ProgramFiles%\ParetoLogic\DriverCure\UUS3\Images\min_mo.png
- %ProgramFiles%\ParetoLogic\DriverCure\Images\toplogo.png
- %ProgramFiles%\ParetoLogic\DriverCure\Images\cpu.png
- %ProgramFiles%\ParetoLogic\DriverCure\Images\Collapse Up.png
- %ProgramFiles%\ParetoLogic\DriverCure\Images\Logo.png
- %ProgramFiles%\ParetoLogic\DriverCure\Images\Nav-Ignore.png
- %ProgramFiles%\ParetoLogic\DriverCure\Images\Nav-Schedule.png
- %ProgramFiles%\ParetoLogic\DriverCure\Images\Nav-history.png
- %ProgramFiles%\ParetoLogic\DriverCure\Images\Registration_small.png
- %ProgramFiles%\ParetoLogic\DriverCure\Images\Save.png
- %ProgramFiles%\ParetoLogic\DriverCure\Images\ClearButtonOver.png
- %ProgramFiles%\ParetoLogic\DriverCure\Images\Collapse Down.png
- %ProgramFiles%\ParetoLogic\DriverCure\Images\StartScanButton.png
- %ProgramFiles%\ParetoLogic\DriverCure\Images\althomepage.png
- %ProgramFiles%\ParetoLogic\DriverCure\Images\banner_stretch.png
- %ProgramFiles%\ParetoLogic\DriverCure\Images\bg.png
- %ProgramFiles%\ParetoLogic\DriverCure\Images\bullet_list.png
- %ProgramFiles%\ParetoLogic\DriverCure\Images\cd.png
- %ProgramFiles%\ParetoLogic\DriverCure\Images\check.png
- %ProgramFiles%\ParetoLogic\DriverCure\Images\close-b.png
- %ProgramFiles%\ParetoLogic\DriverCure\Images\StartScanButtonDown.png
- %ProgramFiles%\ParetoLogic\DriverCure\Images\StartScanButtonMouseOver.png
- %ProgramFiles%\ParetoLogic\DriverCure\Images\ClearButtonDown.png
- %ProgramFiles%\ParetoLogic\DriverCure\Images\ClearButton.png
- %ProgramFiles%\ParetoLogic\DriverCure\HTML\images\tile_titlebarfloat.jpg
- %TEMP%\nsw3.tmp\UserInfo.dll
- %TEMP%\nsw3.tmp\splash.bmp
- %TEMP%\nsw3.tmp\AdvSplash.dll
- %ProgramFiles%\ParetoLogic\DriverCure\DriverCure.exe
- %ProgramFiles%\ParetoLogic\DriverCure\settings.xml
- %ProgramFiles%\ParetoLogic\DriverCure\UNS.xml
- %ProgramFiles%\ParetoLogic\DriverCure\7ZipDLL.dll
- %ProgramFiles%\ParetoLogic\DriverCure\Install Driver Win32.exe
- %TEMP%\nsw3.tmp\System.dll
- %ProgramFiles%\ParetoLogic\DriverCure\Install Driver Win64.exe
- %ProgramFiles%\ParetoLogic\DriverCure\HTML\images\10x10tile.gif
- %ProgramFiles%\ParetoLogic\DriverCure\HTML\images\Thumbs.db
- %ProgramFiles%\ParetoLogic\DriverCure\HTML\images\contentwrapper.gif
- %ProgramFiles%\ParetoLogic\DriverCure\HTML\images\footerbarfill.gif
- %ProgramFiles%\ParetoLogic\DriverCure\HTML\images\info_bubble.jpg
- %ProgramFiles%\ParetoLogic\DriverCure\HTML\images\tile_footerbarbase.jpg
- %ProgramFiles%\ParetoLogic\DriverCure\HTML\images\tile_titlebarbase.jpg
- %ProgramFiles%\ParetoLogic\DriverCure\HTML\images\tile_titlebarend.jpg
- %ProgramFiles%\ParetoLogic\DriverCure\HTML\images\10x10.gif
- %ProgramFiles%\ParetoLogic\DriverCure\Images\close.png
- %ProgramFiles%\ParetoLogic\DriverCure\Images\data_logo.png
- %ProgramFiles%\ParetoLogic\DriverCure\Images\softwareupdate.png
- %ProgramFiles%\ParetoLogic\DriverCure\Images\delete.png
- %ProgramFiles%\ParetoLogic\DriverCure\Images\mouse_key.png
- %ProgramFiles%\ParetoLogic\DriverCure\Images\nav-about.png
- %ProgramFiles%\ParetoLogic\DriverCure\Images\nav-scan.png
- %ProgramFiles%\ParetoLogic\DriverCure\Images\next.png
- %ProgramFiles%\ParetoLogic\DriverCure\Images\nextover.png
- %ProgramFiles%\ParetoLogic\DriverCure\Images\other.png
- %ProgramFiles%\ParetoLogic\DriverCure\Images\outdated.png
- %ProgramFiles%\ParetoLogic\DriverCure\Images\min-g.png
- %ProgramFiles%\ParetoLogic\DriverCure\Images\min.png
- %ProgramFiles%\ParetoLogic\DriverCure\Images\power.png
- %ProgramFiles%\ParetoLogic\DriverCure\Images\register.png
- %ProgramFiles%\ParetoLogic\DriverCure\Images\register_over.png
- %ProgramFiles%\ParetoLogic\DriverCure\Images\save_over.png
- %ProgramFiles%\ParetoLogic\DriverCure\Images\scan_check.png
- %ProgramFiles%\ParetoLogic\DriverCure\Images\scan_list.png
- %ProgramFiles%\ParetoLogic\DriverCure\Images\software.png
- %ProgramFiles%\ParetoLogic\DriverCure\Images\softwarenoupdate.png
- %ProgramFiles%\ParetoLogic\DriverCure\Images\poweredby.png
- %ProgramFiles%\ParetoLogic\DriverCure\Images\printer.png
- %ProgramFiles%\ParetoLogic\DriverCure\Images\min-b.png
- %ProgramFiles%\ParetoLogic\DriverCure\Images\max.png
- %ProgramFiles%\ParetoLogic\DriverCure\Images\max-g.png
- %ProgramFiles%\ParetoLogic\DriverCure\Images\display.png
- %ProgramFiles%\ParetoLogic\DriverCure\Images\drivernoupdate.png
- %ProgramFiles%\ParetoLogic\DriverCure\Images\driverupdate.png
- %ProgramFiles%\ParetoLogic\DriverCure\Images\email_logo.png
- %ProgramFiles%\ParetoLogic\DriverCure\Images\floppy.png
- %ProgramFiles%\ParetoLogic\DriverCure\Images\homepage.png
- %ProgramFiles%\ParetoLogic\DriverCure\Images\homepage_logo.png
- %ProgramFiles%\ParetoLogic\DriverCure\Images\image1.png
- %ProgramFiles%\ParetoLogic\DriverCure\Images\disk.png
- %ProgramFiles%\ParetoLogic\DriverCure\Images\image2.png
- %ProgramFiles%\ParetoLogic\DriverCure\Images\image4.png
- %ProgramFiles%\ParetoLogic\DriverCure\Images\image5.png
- %ProgramFiles%\ParetoLogic\DriverCure\Images\image6.png
- %ProgramFiles%\ParetoLogic\DriverCure\Images\image7.png
- %ProgramFiles%\ParetoLogic\DriverCure\Images\image8.png
- %ProgramFiles%\ParetoLogic\DriverCure\Images\info.jpg
- %ProgramFiles%\ParetoLogic\DriverCure\Images\info.png
- %ProgramFiles%\ParetoLogic\DriverCure\Images\max-b.png
- %ProgramFiles%\ParetoLogic\DriverCure\Images\image3.png
- %ProgramFiles%\ParetoLogic\DriverCure\Images\system.png
- %APPDATA%\DriverCure\LogFile.txt
Deletes the following files:
- %TEMP%\nsw3.tmp\AdvSplash.dll
- %TEMP%\nsw3.tmp\splash.bmp
- %TEMP%\nsw3.tmp\System.dll
- %TEMP%\nsw3.tmp\UserInfo.dll
Miscellaneous:
Creates and executes the following:
- '%ProgramFiles%\ParetoLogic\DriverCure\DriverCure.exe'
Executes the following:
- '<SYSTEM32>\msiexec.exe' /x{087EAAD8-F0A8-45CB-8E38-889EAC9D7364} /quiet
- '<SYSTEM32>\msiexec.exe' /V
- '<SYSTEM32>\msiexec.exe' /x{1E0D8F69-A6AB-4934-9B2D-159D9F97BA4A} /quiet
