Техническая информация
- [<HKLM>\Software\Classes\SIS.inst\Shell\Open\command] '' = '"C:\Program Files (x86)/PortalsXpress\SISinst.exe" "%1"'
- [<HKCU>\SOFTWARE\Microsoft\Windows\CurrentVersion\Run] 'RapidFile' = '"%ProgramFiles(x86)%\PortalsXpress\RapidFile.exe" --startMinimized'
- %TEMP%\sisinst\sisinst.exe
- %ProgramFiles(x86)%\portalsxpress\skillsets\portalsxpress\messenger\skillsetmessenger.hlp
- %ProgramFiles(x86)%\portalsxpress\skillsets\portalsxpress\messenger\skillsetmessenger.dll
- %ProgramFiles(x86)%\portalsxpress\skillsets\portalsxpress\messenger\skillsetmessenger.dep
- %ProgramFiles(x86)%\portalsxpress\skillsets\portalsxpress\messenger\chord.wav
- %ProgramFiles(x86)%\portalsxpress\skillsets\portalsxpress\messenger\chimes.wav
- %ProgramFiles(x86)%\portalsxpress\wizgui.dll
- %ProgramFiles(x86)%\portalsxpress\twototwain.dll
- %ProgramFiles(x86)%\portalsxpress\taskdata.dll
- %ProgramFiles(x86)%\portalsxpress\rapidgui.dll
- %ProgramFiles(x86)%\portalsxpress\skillex.dll
- %ProgramFiles(x86)%\portalsxpress\richtext.dll
- %ProgramFiles(x86)%\portalsxpress\msgrgui.dll
- %ProgramFiles(x86)%\portalsxpress\digigui.dll
- %ProgramFiles(x86)%\portalsxpress\corpdata.dll
- %ProgramFiles(x86)%\portalsxpress\compdata.dll
- %ProgramFiles(x86)%\portalsxpress\womagui.dll
- %ProgramFiles(x86)%\portalsxpress\pemagui.dll
- %ProgramFiles(x86)%\portalsxpress\mrktdata.dll
- %ProgramFiles(x86)%\portalsxpress\scangui.dll
- %TEMP%\{0ca49c2c-4d61-3e87-b8ac-456668d9a47a}\set5d0e.tmp
- <SYSTEM32>\spool\drivers\x64\3\new\acpdfui450.dll
- %ALLUSERSPROFILE%\microsoft\windows\start menu\programs\rapidfile.lnk
- <SYSTEM32>\spool\drivers\x64\3\new\acpdf450.dll
- <SYSTEM32>\spool\drivers\x64\{727b5fec-6b51-48d1-87d0-0e9449e1e6ee}\set7b2b.tmp
- <SYSTEM32>\spool\drivers\x64\{727b5fec-6b51-48d1-87d0-0e9449e1e6ee}\set7a8e.tmp
- <SYSTEM32>\spool\drivers\x64\{727b5fec-6b51-48d1-87d0-0e9449e1e6ee}\set7a6d.tmp
- <SYSTEM32>\spool\drivers\x64\{727b5fec-6b51-48d1-87d0-0e9449e1e6ee}\set7a4d.tmp
- %TEMP%\{0ca49c2c-4d61-3e87-b8ac-456668d9a47a}\set6118.tmp
- %TEMP%\{0ca49c2c-4d61-3e87-b8ac-456668d9a47a}\set600e.tmp
- %TEMP%\{0ca49c2c-4d61-3e87-b8ac-456668d9a47a}\set5eb5.tmp
- %ProgramFiles(x86)%\portalsxpress\gfxtools.map
- %TEMP%\{0ca49c2c-4d61-3e87-b8ac-456668d9a47a}\set5dda.tmp
- %TEMP%\{0ca49c2c-4d61-3e87-b8ac-456668d9a47a}\set5c14.tmp
- <SYSTEM32>\spool\drivers\x64\3\acfpdf.txt
- <SYSTEM32>\cdintf450_64.dll
- <SYSTEM32>\set48a4.tmp
- %WINDIR%\syswow64\cdintf450.dll
- %WINDIR%\syswow64\set45f5.tmp
- %ProgramFiles(x86)%\portalsxpress\install.log
- %ProgramFiles(x86)%\portalsxpress\netsetupinstall.cfg
- %ProgramFiles(x86)%\portalsxpress\skillsets\portalsxpress\rapidfile\skillsetrapidfile.dep
- %ProgramFiles(x86)%\portalsxpress\skillsets\portalsxpress\rapidfile\skillsetrapidfile.dll
- %ProgramFiles(x86)%\portalsxpress\gfxtools.dll
- %ProgramFiles(x86)%\portalsxpress\app_uninstall.exe
- %ProgramFiles(x86)%\portalsxpress\dbtools.dll
- %ProgramFiles(x86)%\portalsxpress\xmllite.dll
- %ProgramFiles(x86)%\portalsxpress\xmllite64.dll
- %ProgramFiles(x86)%\portalsxpress\install.ini
- %ProgramFiles(x86)%\portalsxpress\install.exe
- %ProgramFiles(x86)%\portalsxpress\cdintf.dll
- %ProgramFiles(x86)%\portalsxpress\cdintf64.dll
- %ProgramFiles(x86)%\portalsxpress\atpdf450.cat
- %ProgramFiles(x86)%\portalsxpress\ikedata.dll
- %ProgramFiles(x86)%\portalsxpress\amyuni.inf
- %ProgramFiles(x86)%\portalsxpress\acfpdfui.dll
- %ProgramFiles(x86)%\portalsxpress\acfpdfuamd64.dll
- %ProgramFiles(x86)%\portalsxpress\acfpdfu.dll
- %ProgramFiles(x86)%\portalsxpress\acfpdf.txt
- %WINDIR%\axe.exe
- %ProgramFiles(x86)%\portalsxpress\rapidfile.sisinst
- %TEMP%\ffp_a01736
- %TEMP%\sisinst\autorun.inf
- %ProgramFiles(x86)%\portalsxpress\acfpdfuiamd64.dll
- %ProgramFiles(x86)%\portalsxpress\smartgui.dll
- %ProgramFiles(x86)%\portalsxpress\qaxcontainer.dll
- %ProgramFiles(x86)%\portalsxpress\clnt.dll
- %ProgramFiles(x86)%\portalsxpress\skillsets\portalsxpress\workflowmanager\personalassistants\collaboration\collaboration.dll
- %ProgramFiles(x86)%\portalsxpress\msgrdata.dll
- %ProgramFiles(x86)%\portalsxpress\xtools.dll
- %ProgramFiles(x86)%\portalsxpress\wintools.dll
- %ProgramFiles(x86)%\portalsxpress\webtools.dll
- %ProgramFiles(x86)%\portalsxpress\ssltools.dll
- %ProgramFiles(x86)%\portalsxpress\ssleay32.dll
- %ProgramFiles(x86)%\portalsxpress\srvr.dll
- %ProgramFiles(x86)%\portalsxpress\comagui.dll
- %ProgramFiles(x86)%\portalsxpress\smarts.dll
- %ProgramFiles(x86)%\portalsxpress\portalsxpressdb.exe
- %ProgramFiles(x86)%\portalsxpress\rapidfile.exe
- %ProgramFiles(x86)%\portalsxpress\qt-mt334.dll
- %ProgramFiles(x86)%\portalsxpress\qtctrls.dll
- %ProgramFiles(x86)%\portalsxpress\profdata.dll
- %ProgramFiles(x86)%\portalsxpress\rfnprep.exe
- %ProgramFiles(x86)%\portalsxpress\libeay32.dll
- %ProgramFiles(x86)%\portalsxpress\itools.dll
- %ProgramFiles(x86)%\portalsxpress\ikesdk.dll
- <SYSTEM32>\spool\drivers\x64\3\new\cdintf450_64.dll
- %TEMP%\ffp_a01736
- %WINDIR%\syswow64\set45f5.tmp
- %TEMP%\{0ca49c2c-4d61-3e87-b8ac-456668d9a47a}\acfpdf.txt
- %TEMP%\{0ca49c2c-4d61-3e87-b8ac-456668d9a47a}\acfpdfuamd64.dll
- %TEMP%\{0ca49c2c-4d61-3e87-b8ac-456668d9a47a}\acfpdfuiamd64.dll
- %TEMP%\{0ca49c2c-4d61-3e87-b8ac-456668d9a47a}\amyuni.inf
- %TEMP%\{0ca49c2c-4d61-3e87-b8ac-456668d9a47a}\atpdf450.cat
- %TEMP%\{0ca49c2c-4d61-3e87-b8ac-456668d9a47a}\cdintf64.dll
- <SYSTEM32>\spool\drivers\x64\{727b5fec-6b51-48d1-87d0-0e9449e1e6ee}\acfpdf.txt
- <SYSTEM32>\spool\drivers\x64\{727b5fec-6b51-48d1-87d0-0e9449e1e6ee}\acpdf450.dll
- <SYSTEM32>\spool\drivers\x64\{727b5fec-6b51-48d1-87d0-0e9449e1e6ee}\acpdfui450.dll
- <SYSTEM32>\spool\drivers\x64\{727b5fec-6b51-48d1-87d0-0e9449e1e6ee}\cdintf450_64.dll
- %TEMP%\sisinst\sisinst.exe в %ProgramFiles(x86)%\portalsxpress\sisinst.exe
- %TEMP%\sisinst\autorun.inf в %ProgramFiles(x86)%\portalsxpress\autorun.inf
- %TEMP%\{0ca49c2c-4d61-3e87-b8ac-456668d9a47a}\set5c14.tmp в %TEMP%\{0ca49c2c-4d61-3e87-b8ac-456668d9a47a}\amyuni.inf
- %TEMP%\{0ca49c2c-4d61-3e87-b8ac-456668d9a47a}\set5d0e.tmp в %TEMP%\{0ca49c2c-4d61-3e87-b8ac-456668d9a47a}\atpdf450.cat
- %TEMP%\{0ca49c2c-4d61-3e87-b8ac-456668d9a47a}\set5dda.tmp в %TEMP%\{0ca49c2c-4d61-3e87-b8ac-456668d9a47a}\acfpdfuiamd64.dll
- %TEMP%\{0ca49c2c-4d61-3e87-b8ac-456668d9a47a}\set5eb5.tmp в %TEMP%\{0ca49c2c-4d61-3e87-b8ac-456668d9a47a}\cdintf64.dll
- %TEMP%\{0ca49c2c-4d61-3e87-b8ac-456668d9a47a}\set600e.tmp в %TEMP%\{0ca49c2c-4d61-3e87-b8ac-456668d9a47a}\acfpdfuamd64.dll
- %TEMP%\{0ca49c2c-4d61-3e87-b8ac-456668d9a47a}\set6118.tmp в %TEMP%\{0ca49c2c-4d61-3e87-b8ac-456668d9a47a}\acfpdf.txt
- <SYSTEM32>\spool\drivers\x64\{727b5fec-6b51-48d1-87d0-0e9449e1e6ee}\set7a4d.tmp в <SYSTEM32>\spool\drivers\x64\{727b5fec-6b51-48d1-87d0-0e9449e1e6ee}\acpdf450.dll
- <SYSTEM32>\spool\drivers\x64\{727b5fec-6b51-48d1-87d0-0e9449e1e6ee}\set7a6d.tmp в <SYSTEM32>\spool\drivers\x64\{727b5fec-6b51-48d1-87d0-0e9449e1e6ee}\acpdfui450.dll
- <SYSTEM32>\spool\drivers\x64\{727b5fec-6b51-48d1-87d0-0e9449e1e6ee}\set7a8e.tmp в <SYSTEM32>\spool\drivers\x64\{727b5fec-6b51-48d1-87d0-0e9449e1e6ee}\cdintf450_64.dll
- <SYSTEM32>\spool\drivers\x64\{727b5fec-6b51-48d1-87d0-0e9449e1e6ee}\set7b2b.tmp в <SYSTEM32>\spool\drivers\x64\{727b5fec-6b51-48d1-87d0-0e9449e1e6ee}\acfpdf.txt
- <SYSTEM32>\spool\drivers\x64\3\new\acpdf450.dll в <SYSTEM32>\spool\drivers\x64\3\acpdf450.dll
- <SYSTEM32>\spool\drivers\x64\3\new\acpdfui450.dll в <SYSTEM32>\spool\drivers\x64\3\acpdfui450.dll
- <SYSTEM32>\spool\drivers\x64\3\new\cdintf450_64.dll в <SYSTEM32>\spool\drivers\x64\3\cdintf450_64.dll
- '%ProgramFiles(x86)%\portalsxpress\rfnprep.exe' Files (x86)/PortalsXpress\rfnprep.exe
- '%ProgramFiles(x86)%\portalsxpress\install.exe' /s /n "MarcSquared Inc." /c "07EFCDAB010001006BED6D0A6969E04B2F20E14F50FE18D5A138C64CB2D86665BD5C28E07D2B314F9DAE600A1CDC34B5271758E13207" "RapidFile PDF Printer"
- '%WINDIR%\syswow64\wscript.exe' /B /E:VBS "<SYSTEM32>\spool\DRIVERS\x64\3\ACFPDF.TXT" "RapidFile PDF Printer"
- '%WINDIR%\syswow64\cmd.exe' /c "regsvr32 /s "<SYSTEM32>\cdintf450_64.dll""' (со скрытым окном)
- '%WINDIR%\syswow64\cmd.exe' /c "regsvr32 /s "<SYSTEM32>\cdintf450_64.dll""
- '%WINDIR%\syswow64\regsvr32.exe' /s "<SYSTEM32>\cdintf450_64.dll"