Техническая информация
Для обеспечения автозапуска и распространения
Создает следующие сервисы
- [<HKLM>\System\CurrentControlSet\Services\RSPCIESTOR] 'ImagePath' = 'system32\DRIVERS\RtsPStor.sys'
- [<HKLM>\System\CurrentControlSet\Services\IconMan_R] 'Start' = '00000002'
- [<HKLM>\System\CurrentControlSet\Services\IconMan_R] 'ImagePath' = '"%ProgramFiles%\Realtek\Realtek PCIE Card Reader\RIconMan.exe"'
Изменения в файловой системе
Создает следующие файлы
- %TEMP%\7zs43f04324\cardreader_realtek_6.1.7601.85_w7x86\apbin\displayicon.ico
- %ProgramFiles%\realtek\realtek pcie card reader\rtsp2fbe.rra
- %ProgramFiles%\realtek\realtek pcie card reader\revc2fbe.rra
- %ProgramFiles%\realtek\realtek pcie card reader\rscr2fb4.rra
- %ProgramFiles%\realtek\realtek pcie card reader\rico2f82.rra
- %ProgramFiles%\realtek\realtek pcie card reader\conf2f78.rra
- %ProgramFiles%\realtek\realtek pcie card reader\rtsp2fd2.rra
- %TEMP%\{37dc13b5-e49f-401d-9f4d-b0117fb5f5a1}\{c1594429-8296-4652-bf54-9dbe4932a44c}\_isr2e23.rra
- %TEMP%\{37dc13b5-e49f-401d-9f4d-b0117fb5f5a1}\{c1594429-8296-4652-bf54-9dbe4932a44c}\isrt2e19.rra
- %TEMP%\{37dc13b5-e49f-401d-9f4d-b0117fb5f5a1}\{c1594429-8296-4652-bf54-9dbe4932a44c}\stri2e0f.rra
- %TEMP%\{37dc13b5-e49f-401d-9f4d-b0117fb5f5a1}\{c1594429-8296-4652-bf54-9dbe4932a44c}\difx2e0f.rra
- %TEMP%\{37dc13b5-e49f-401d-9f4d-b0117fb5f5a1}\{c1594429-8296-4652-bf54-9dbe4932a44c}\font2e0f.rra
- %TEMP%\{37dc13b5-e49f-401d-9f4d-b0117fb5f5a1}\dotn2e05.rra
- %TEMP%\{37dc13b5-e49f-401d-9f4d-b0117fb5f5a1}\core2dfb.rra
- %TEMP%\{37dc13b5-e49f-401d-9f4d-b0117fb5f5a1}\{c1594429-8296-4652-bf54-9dbe4932a44c}\defa2e23.rra
- %TEMP%\7zs43f04324\cardreader_realtek_6.1.7601.85_w7x86\driverbin_32bit\rtspstoricon.dll
- %ProgramFiles%\realtek\realtek pcie card reader\rtsp314e.rra
- %WINDIR%\inf\oem0.inf
- <SYSTEM32>\catroot\{f750e6c3-38ee-11d1-85e5-00c04fc295ee}\oem0.cat
- %ProgramFiles%\installshield installation information\{c1594429-8296-4652-bf54-9dbe4932a44c}\setup.ini
- %ProgramFiles%\installshield installation information\{c1594429-8296-4652-bf54-9dbe4932a44c}\setu3415.rra
- %ProgramFiles%\installshield installation information\{c1594429-8296-4652-bf54-9dbe4932a44c}\setu33e3.rra
- %ProgramFiles%\installshield installation information\{c1594429-8296-4652-bf54-9dbe4932a44c}\isse33c5.rra
- %TEMP%\{37dc13b5-e49f-401d-9f4d-b0117fb5f5a1}\{c1594429-8296-4652-bf54-9dbe4932a44c}\lice2ddd.rra
- %ProgramFiles%\realtek\realtek pcie card reader\rtsp2fc8.rra
- %ProgramFiles%\installshield installation information\{c1594429-8296-4652-bf54-9dbe4932a44c}\data32d5.rra
- %ProgramFiles%\installshield installation information\{c1594429-8296-4652-bf54-9dbe4932a44c}\data32a3.rra
- %ProgramFiles%\installshield installation information\{c1594429-8296-4652-bf54-9dbe4932a44c}\layo3299.rra
- %ProgramFiles%\realtek\realtek pcie card reader\sdrt31b3.rra
- %ProgramFiles%\realtek\realtek pcie card reader\rmbc316c.rra
- %ProgramFiles%\realtek\realtek pcie card reader\disp3162.rra
- %ProgramFiles%\installshield installation information\{c1594429-8296-4652-bf54-9dbe4932a44c}\setu3393.rra
- <DRIVERS>\rtsp314e.rra
- %TEMP%\{37dc13b5-e49f-401d-9f4d-b0117fb5f5a1}\{c1594429-8296-4652-bf54-9dbe4932a44c}\setu2dc9.rra
- %TEMP%\2d3d.rra
- %TEMP%\{4683c27e-4e3c-44e3-b20a-c85d448c1c50}\setup.ini
- %TEMP%\7zs43f04324\cardreader_realtek_6.1.7601.85_w7x86\driverbin_32bit\rtspstormsi.inf
- %TEMP%\7zs43f04324\cardreader_realtek_6.1.7601.85_w7x86\apbin_32bit\config.ini
- %TEMP%\7zs43f04324\cardreader_realtek_6.1.7601.85_w7x86\apbin_64bit\config.ini
- %TEMP%\7zs43f04324\cardreader_realtek_6.1.7601.85_w7x86\data1.cab
- %TEMP%\7zs43f04324\cardreader_realtek_6.1.7601.85_w7x86\data1.hdr
- %TEMP%\7zs43f04324\cardreader_realtek_6.1.7601.85_w7x86\data2.cab
- %WINDIR%\inf\oem0.pnf
- %TEMP%\7zs43f04324\cardreader_realtek_6.1.7601.85_w7x86\driverbin_32bit\rtspstor.cat
- %TEMP%\7zs43f04324\cardreader_realtek_6.1.7601.85_w7x86\setup.iss
- %TEMP%\7zs43f04324\cardreader_realtek_6.1.7601.85_w7x86\driverbin_64bit\rtspstormsi.inf
- %TEMP%\7zs43f04324\cardreader_realtek_6.1.7601.85_w7x86\layout.bin
- %TEMP%\7zs43f04324\cardreader_realtek_6.1.7601.85_w7x86\readme.txt
- %TEMP%\7zs43f04324\cardreader_realtek_6.1.7601.85_w7x86\setup.ini
- %TEMP%\7zs43f04324\cardreader_realtek_6.1.7601.85_w7x86\setup.ini.bak
- %TEMP%\7zs43f04324\cardreader_realtek_6.1.7601.85_w7x86\driverbin_64bit\rtspstor.cat
- %ProgramFiles%\installshield installation information\{c1594429-8296-4652-bf54-9dbe4932a44c}\_set33a7.rra
- %TEMP%\7zs43f04324\cardreader_realtek_6.1.7601.85_w7x86\usetup.iss
- %TEMP%\7zs43f04324\cardreader_realtek_6.1.7601.85_w7x86\apbin_32bit\riconman.exe
- %TEMP%\7zs43f04324\cardreader_realtek_6.1.7601.85_w7x86\apbin\rmbchange.exe
- %TEMP%\{4683c27e-4e3c-44e3-b20a-c85d448c1c50}\_setup.dll
- %TEMP%\7zs43f04324\cardreader_realtek_6.1.7601.85_w7x86\_setup.dll
- %TEMP%\7zs43f04324\cardreader_realtek_6.1.7601.85_w7x86\setup.exe
- %TEMP%\7zs43f04324\cardreader_realtek_6.1.7601.85_w7x86\issetup.dll
- %TEMP%\7zs43f04324\cardreader_realtek_6.1.7601.85_w7x86\driverbin_64bit\rtspstoricon.dll
- %TEMP%\7zs43f04324\cardreader_realtek_6.1.7601.85_w7x86\apbin\sdrtcprm.dll
- %TEMP%\7zs43f04324\cardreader_realtek_6.1.7601.85_w7x86\driverbin_64bit\rtspstor.sys
- %TEMP%\7zs43f04324\cardreader_realtek_6.1.7601.85_w7x86\setup.inx
- %TEMP%\7zs43f04324\cardreader_realtek_6.1.7601.85_w7x86\driverbin_32bit\rtspstor.sys
- %TEMP%\7zs43f04324\cardreader_realtek_6.1.7601.85_w7x86\driverbin_32bit\revcon.exe
- %TEMP%\7zs43f04324\cardreader_realtek_6.1.7601.85_w7x86\apbin_64bit\rscrlib.dll
- %TEMP%\7zs43f04324\cardreader_realtek_6.1.7601.85_w7x86\apbin_64bit\riconman.exe
- %TEMP%\7zs43f04324\cardreader_realtek_6.1.7601.85_w7x86\apbin_32bit\rscrlib.dll
- %TEMP%\7zs43f04324\cardreader_realtek_6.1.7601.85_w7x86\driverbin_64bit\revcon.exe
- <SYSTEM32>\sda\sdrt4e87.rra
Присваивает атрибут 'скрытый' для следующих файлов
- <SYSTEM32>\catroot\{f750e6c3-38ee-11d1-85e5-00c04fc295ee}\oem0.cat
Перемещает следующие файлы
- %TEMP%\{37dc13b5-e49f-401d-9f4d-b0117fb5f5a1}\{c1594429-8296-4652-bf54-9dbe4932a44c}\setu2dc9.rra в %TEMP%\{37dc13b5-e49f-401d-9f4d-b0117fb5f5a1}\{c1594429-8296-4652-bf54-9dbe4932a44c}\setup.inx
- %ProgramFiles%\installshield installation information\{c1594429-8296-4652-bf54-9dbe4932a44c}\setu33e3.rra в %ProgramFiles%\installshield installation information\{c1594429-8296-4652-bf54-9dbe4932a44c}\setup.inx
- %ProgramFiles%\installshield installation information\{c1594429-8296-4652-bf54-9dbe4932a44c}\isse33c5.rra в %ProgramFiles%\installshield installation information\{c1594429-8296-4652-bf54-9dbe4932a44c}\issetup.dll
- %ProgramFiles%\installshield installation information\{c1594429-8296-4652-bf54-9dbe4932a44c}\_set33a7.rra в %ProgramFiles%\installshield installation information\{c1594429-8296-4652-bf54-9dbe4932a44c}\_setup.dll
- %ProgramFiles%\installshield installation information\{c1594429-8296-4652-bf54-9dbe4932a44c}\setu3393.rra в %ProgramFiles%\installshield installation information\{c1594429-8296-4652-bf54-9dbe4932a44c}\setup.exe
- %ProgramFiles%\installshield installation information\{c1594429-8296-4652-bf54-9dbe4932a44c}\data32d5.rra в %ProgramFiles%\installshield installation information\{c1594429-8296-4652-bf54-9dbe4932a44c}\data1.cab
- %ProgramFiles%\installshield installation information\{c1594429-8296-4652-bf54-9dbe4932a44c}\data32a3.rra в %ProgramFiles%\installshield installation information\{c1594429-8296-4652-bf54-9dbe4932a44c}\data1.hdr
- %ProgramFiles%\installshield installation information\{c1594429-8296-4652-bf54-9dbe4932a44c}\layo3299.rra в %ProgramFiles%\installshield installation information\{c1594429-8296-4652-bf54-9dbe4932a44c}\layout.bin
- %ProgramFiles%\realtek\realtek pcie card reader\sdrt31b3.rra в %ProgramFiles%\realtek\realtek pcie card reader\sdrtcprm.dll
- %ProgramFiles%\realtek\realtek pcie card reader\rmbc316c.rra в %ProgramFiles%\realtek\realtek pcie card reader\rmbchange.exe
- %ProgramFiles%\realtek\realtek pcie card reader\disp3162.rra в %ProgramFiles%\realtek\realtek pcie card reader\displayicon.ico
- <DRIVERS>\rtsp314e.rra в <DRIVERS>\rtspstor.sys
- %ProgramFiles%\realtek\realtek pcie card reader\rtsp314e.rra в %ProgramFiles%\realtek\realtek pcie card reader\rtspstormsi.inf
- %ProgramFiles%\realtek\realtek pcie card reader\rtsp2fd2.rra в %ProgramFiles%\realtek\realtek pcie card reader\rtspstoricon.dll
- %ProgramFiles%\installshield installation information\{c1594429-8296-4652-bf54-9dbe4932a44c}\setu3415.rra в %ProgramFiles%\installshield installation information\{c1594429-8296-4652-bf54-9dbe4932a44c}\setup.ini
- %ProgramFiles%\realtek\realtek pcie card reader\rtsp2fc8.rra в %ProgramFiles%\realtek\realtek pcie card reader\rtspstor.sys
- %ProgramFiles%\realtek\realtek pcie card reader\revc2fbe.rra в %ProgramFiles%\realtek\realtek pcie card reader\revcon.exe
- %ProgramFiles%\realtek\realtek pcie card reader\rscr2fb4.rra в %ProgramFiles%\realtek\realtek pcie card reader\rscrlib.dll
- %ProgramFiles%\realtek\realtek pcie card reader\rico2f82.rra в %ProgramFiles%\realtek\realtek pcie card reader\riconman.exe
- %ProgramFiles%\realtek\realtek pcie card reader\conf2f78.rra в %ProgramFiles%\realtek\realtek pcie card reader\config.ini
- %TEMP%\{37dc13b5-e49f-401d-9f4d-b0117fb5f5a1}\{c1594429-8296-4652-bf54-9dbe4932a44c}\_isr2e23.rra в %TEMP%\{37dc13b5-e49f-401d-9f4d-b0117fb5f5a1}\{c1594429-8296-4652-bf54-9dbe4932a44c}\_isres.dll
- %TEMP%\{37dc13b5-e49f-401d-9f4d-b0117fb5f5a1}\{c1594429-8296-4652-bf54-9dbe4932a44c}\defa2e23.rra в %TEMP%\{37dc13b5-e49f-401d-9f4d-b0117fb5f5a1}\{c1594429-8296-4652-bf54-9dbe4932a44c}\default.pal
- %TEMP%\{37dc13b5-e49f-401d-9f4d-b0117fb5f5a1}\{c1594429-8296-4652-bf54-9dbe4932a44c}\isrt2e19.rra в %TEMP%\{37dc13b5-e49f-401d-9f4d-b0117fb5f5a1}\{c1594429-8296-4652-bf54-9dbe4932a44c}\isrt.dll
- %TEMP%\{37dc13b5-e49f-401d-9f4d-b0117fb5f5a1}\{c1594429-8296-4652-bf54-9dbe4932a44c}\stri2e0f.rra в %TEMP%\{37dc13b5-e49f-401d-9f4d-b0117fb5f5a1}\{c1594429-8296-4652-bf54-9dbe4932a44c}\stringtable-0009-english.ips
- %TEMP%\{37dc13b5-e49f-401d-9f4d-b0117fb5f5a1}\{c1594429-8296-4652-bf54-9dbe4932a44c}\difx2e0f.rra в %TEMP%\{37dc13b5-e49f-401d-9f4d-b0117fb5f5a1}\{c1594429-8296-4652-bf54-9dbe4932a44c}\difxdata.ini
- %TEMP%\{37dc13b5-e49f-401d-9f4d-b0117fb5f5a1}\{c1594429-8296-4652-bf54-9dbe4932a44c}\font2e0f.rra в %TEMP%\{37dc13b5-e49f-401d-9f4d-b0117fb5f5a1}\{c1594429-8296-4652-bf54-9dbe4932a44c}\fontdata.ini
- %TEMP%\{37dc13b5-e49f-401d-9f4d-b0117fb5f5a1}\dotn2e05.rra в %TEMP%\{37dc13b5-e49f-401d-9f4d-b0117fb5f5a1}\dotnetinstaller.exe
- %TEMP%\{37dc13b5-e49f-401d-9f4d-b0117fb5f5a1}\core2dfb.rra в %TEMP%\{37dc13b5-e49f-401d-9f4d-b0117fb5f5a1}\corecomp.ini
- %TEMP%\{37dc13b5-e49f-401d-9f4d-b0117fb5f5a1}\{c1594429-8296-4652-bf54-9dbe4932a44c}\lice2ddd.rra в %TEMP%\{37dc13b5-e49f-401d-9f4d-b0117fb5f5a1}\{c1594429-8296-4652-bf54-9dbe4932a44c}\license.rtf
- %ProgramFiles%\realtek\realtek pcie card reader\rtsp2fbe.rra в %ProgramFiles%\realtek\realtek pcie card reader\rtspstor.cat
- <SYSTEM32>\sda\sdrt4e87.rra в <SYSTEM32>\sda\sdrtcprm.dll
Другое
Создает и запускает на исполнение
- '%TEMP%\7zs43f04324\cardreader_realtek_6.1.7601.85_w7x86\setup.exe'
- '%ProgramFiles%\realtek\realtek pcie card reader\revcon.exe' RS_update RtsPStorMSI.inf PCI\VEN_10EC&DEV_5208&CC_FF00
- '%ProgramFiles%\realtek\realtek pcie card reader\revcon.exe' RS_remove PCI\VEN_10EC&DEV_5288&CC_FF00
- '%ProgramFiles%\realtek\realtek pcie card reader\revcon.exe' RS_update RtsPStorMSI.inf PCI\VEN_10EC&DEV_5288&CC_FF00
- '%ProgramFiles%\realtek\realtek pcie card reader\revcon.exe' RS_remove PCI\VEN_10EC&DEV_5209&CC_FF00
- '%ProgramFiles%\realtek\realtek pcie card reader\revcon.exe' RS_update RtsPStorMSI.inf PCI\VEN_10EC&DEV_5209&CC_FF00
- '%ProgramFiles%\realtek\realtek pcie card reader\riconman.exe' /install
- '%ProgramFiles%\realtek\realtek pcie card reader\revcon.exe' RS_remove PCI\VEN_10EC&DEV_5208&CC_FF00
- '%ProgramFiles%\realtek\realtek pcie card reader\revcon.exe' RS_remove PCI\CC_080500
- '%ProgramFiles%\realtek\realtek pcie card reader\revcon.exe' RS_update %WINDIR%\Inf\sdbus.inf PCI\CC_080500
- '%ProgramFiles%\realtek\realtek pcie card reader\revcon.exe' rescan PCI\VEN_10ec*
- '%ProgramFiles%\realtek\realtek pcie card reader\riconman.exe'
- '%ProgramFiles%\realtek\realtek pcie card reader\revcon.exe' RS_dp_add RtsPStorMSI.inf
- '%ProgramFiles%\realtek\realtek pcie card reader\revcon.exe' rescan PCI\VEN_10ec*' (со скрытым окном)
- '%ProgramFiles%\realtek\realtek pcie card reader\revcon.exe' RS_dp_add RtsPStorMSI.inf' (со скрытым окном)
- '%ProgramFiles%\realtek\realtek pcie card reader\revcon.exe' RS_remove PCI\CC_080500' (со скрытым окном)
- '%ProgramFiles%\realtek\realtek pcie card reader\riconman.exe' /install' (со скрытым окном)
- '%ProgramFiles%\realtek\realtek pcie card reader\revcon.exe' RS_update %WINDIR%\Inf\sdbus.inf PCI\CC_080500' (со скрытым окном)
- '%ProgramFiles%\realtek\realtek pcie card reader\revcon.exe' RS_update RtsPStorMSI.inf PCI\VEN_10EC&DEV_5209&CC_FF00' (со скрытым окном)
- '%ProgramFiles%\realtek\realtek pcie card reader\revcon.exe' RS_remove PCI\VEN_10EC&DEV_5209&CC_FF00' (со скрытым окном)
- '%ProgramFiles%\realtek\realtek pcie card reader\revcon.exe' RS_update RtsPStorMSI.inf PCI\VEN_10EC&DEV_5288&CC_FF00' (со скрытым окном)
- '%ProgramFiles%\realtek\realtek pcie card reader\revcon.exe' RS_remove PCI\VEN_10EC&DEV_5208&CC_FF00' (со скрытым окном)
- '%ProgramFiles%\realtek\realtek pcie card reader\revcon.exe' RS_update RtsPStorMSI.inf PCI\VEN_10EC&DEV_5208&CC_FF00' (со скрытым окном)
- '%ProgramFiles%\realtek\realtek pcie card reader\revcon.exe' RS_remove PCI\VEN_10EC&DEV_5288&CC_FF00' (со скрытым окном)
