Technical Information
To ensure autorun and distribution
Creates or modifies the following files
- <SYSTEM32>\tasks\auslogics\driver updater\start setup driver updater оn user logon
Modifies file system
Creates the following files
- %HOMEPATH%\desktop\auslogics driver updater setup.lnk
- %ProgramFiles(x86)%\auslogics\driver updater\is-3t612.tmp
- %ProgramFiles(x86)%\auslogics\driver updater\is-qj9fk.tmp
- %ProgramFiles(x86)%\auslogics\driver updater\is-16240.tmp
- %ProgramFiles(x86)%\auslogics\driver updater\is-cdn1a.tmp
- %ProgramFiles(x86)%\auslogics\driver updater\is-lmc5q.tmp
- %ProgramFiles(x86)%\auslogics\driver updater\is-3o7up.tmp
- %ProgramFiles(x86)%\auslogics\driver updater\is-7svvk.tmp
- %ProgramFiles(x86)%\auslogics\driver updater\is-8kjci.tmp
- %ProgramFiles(x86)%\auslogics\driver updater\is-vk5je.tmp
- %ProgramFiles(x86)%\auslogics\driver updater\is-r5oiu.tmp
- %ProgramFiles(x86)%\auslogics\driver updater\is-mhsve.tmp
- %ProgramFiles(x86)%\auslogics\driver updater\is-9ej36.tmp
- %ProgramFiles(x86)%\auslogics\driver updater\is-qqftq.tmp
- %ProgramFiles(x86)%\auslogics\driver updater\is-m6nmc.tmp
- %ProgramFiles(x86)%\auslogics\driver updater\is-sqmoo.tmp
- %ProgramFiles(x86)%\auslogics\driver updater\is-kogks.tmp
- %ProgramFiles(x86)%\auslogics\driver updater\is-m7tjl.tmp
- %ProgramFiles(x86)%\auslogics\driver updater\is-63nba.tmp
- %ProgramFiles(x86)%\auslogics\driver updater\is-guov8.tmp
- %ProgramFiles(x86)%\auslogics\driver updater\is-8le65.tmp
- %ALLUSERSPROFILE%\auslogics\driver updater\1.x\$$$origin bound certs168083797
- %ALLUSERSPROFILE%\auslogics\driver updater\1.x\$$$cookies168083672
- %ALLUSERSPROFILE%\auslogics\driver updater\1.x\$$$databases.db168083407
- %ALLUSERSPROFILE%\auslogics\driver updater\1.x\$$$origin bound certs168083407
- %ALLUSERSPROFILE%\auslogics\driver updater\1.x\$$$origin bound certs168083392
- %ALLUSERSPROFILE%\auslogics\driver updater\1.x\$$$cookies168083376
- %ProgramFiles(x86)%\auslogics\driver updater\unins000.dat
- %ProgramFiles(x86)%\auslogics\driver updater\unins000.msg
- %HOMEPATH%\desktop\auslogics driver updater.lnk
- %ALLUSERSPROFILE%\microsoft\windows\start menu\programs\auslogics\driver updater\uninstall auslogics driver updater.lnk
- %ALLUSERSPROFILE%\microsoft\windows\start menu\programs\auslogics\driver updater\auslogics driver updater on the web.url
- %ALLUSERSPROFILE%\microsoft\windows\start menu\programs\auslogics\driver updater\auslogics driver updater.lnk
- %ProgramFiles(x86)%\auslogics\driver updater\is-l12e9.tmp
- %ProgramFiles(x86)%\auslogics\driver updater\is-3q69q.tmp
- %ProgramFiles(x86)%\auslogics\driver updater\is-qrobc.tmp
- %ProgramFiles(x86)%\auslogics\driver updater\is-f0r8b.tmp
- %ProgramFiles(x86)%\auslogics\driver updater\is-av1ov.tmp
- %ProgramFiles(x86)%\auslogics\driver updater\is-4tbbh.tmp
- %ALLUSERSPROFILE%\auslogics\driver updater\1.x\$$$origin bound certs168083828
- %ProgramFiles(x86)%\auslogics\driver updater\is-mjbna.tmp
- %ProgramFiles(x86)%\auslogics\driver updater\setup\is-93egl.tmp
- %TEMP%\is-1881d.tmp\eula.rtf
- %TEMP%\is-1881d.tmp\vclimg250.bpl
- %TEMP%\is-1881d.tmp\vcl250.bpl
- %TEMP%\is-1881d.tmp\rtl250.bpl
- %TEMP%\is-1881d.tmp\axcomponentsvcl.bpl
- %TEMP%\is-1881d.tmp\axcomponentsrtl.bpl
- %TEMP%\is-1881d.tmp\localizer.dll
- %TEMP%\is-1881d.tmp\main.ini
- %TEMP%\is-1881d.tmp\commonforms.site.dll
- %TEMP%\is-1881d.tmp\browserhelper.dll
- %TEMP%\is-1881d.tmp\cfahelper.dll
- %TEMP%\is-1881d.tmp\setupcustom.dll
- %TEMP%\is-1881d.tmp\driverupdater.exe
- %TEMP%\is-1881d.tmp\_isetup\_setup64.tmp
- %TEMP%\is-j4td9.tmp\{23bb1b18-3537-48f7-bef7-42bc65dbf993}_driver-updater_setup.tmp
- %TEMP%\{23bb1b18-3537-48f7-bef7-42bc65dbf993}_driver-updater_setup.exe
- %TEMP%\is-1881d.tmp\sqlite3.dll
- %TEMP%\is-1881d.tmp\enu.lng
- %TEMP%\is-1881d.tmp\deu.lng
- %TEMP%\is-1881d.tmp\esp.lng
- %ProgramFiles(x86)%\auslogics\driver updater\lang\is-204o3.tmp
- %ProgramFiles(x86)%\auslogics\driver updater\lang\is-6sn81.tmp
- %ProgramFiles(x86)%\auslogics\driver updater\lang\is-lrbgl.tmp
- %ProgramFiles(x86)%\auslogics\driver updater\lang\is-vgu2r.tmp
- %ProgramFiles(x86)%\auslogics\driver updater\lang\is-ahnin.tmp
- %ProgramFiles(x86)%\auslogics\driver updater\lang\is-9pauo.tmp
- %ProgramFiles(x86)%\auslogics\driver updater\lang\is-aejtq.tmp
- %ProgramFiles(x86)%\auslogics\driver updater\lang\is-3ljrm.tmp
- %ProgramFiles(x86)%\auslogics\driver updater\is-mjvum.tmp
- %ProgramFiles(x86)%\auslogics\driver updater\is-12nlo.tmp
- %TEMP%\is-1881d.tmp\googleanalyticshelper.dll
- %ALLUSERSPROFILE%\auslogics\driver updater\1.x\logs\checkserialnumber.log
- %TEMP%\is-1881d.tmp\ptb.lng
- %TEMP%\is-1881d.tmp\rus.lng
- %TEMP%\is-1881d.tmp\jpn.lng
- %TEMP%\is-1881d.tmp\ita.lng
- %TEMP%\is-1881d.tmp\fra.lng
- %ProgramFiles(x86)%\auslogics\driver updater\data\is-sv6kn.tmp
- %ALLUSERSPROFILE%\auslogics\driver updater\1.x\$$$databases.db168083844
Deletes the following files
- %TEMP%\is-1881d.tmp\main.ini
- %ALLUSERSPROFILE%\auslogics\driver updater\1.x\$$$cookies168083376
- %ALLUSERSPROFILE%\auslogics\driver updater\1.x\$$$origin bound certs168083392
- %ALLUSERSPROFILE%\auslogics\driver updater\1.x\$$$origin bound certs168083407
- %ALLUSERSPROFILE%\auslogics\driver updater\1.x\$$$databases.db168083407
- %ALLUSERSPROFILE%\auslogics\driver updater\1.x\$$$cookies168083672
- %ALLUSERSPROFILE%\auslogics\driver updater\1.x\$$$origin bound certs168083797
- %ALLUSERSPROFILE%\auslogics\driver updater\1.x\$$$origin bound certs168083828
- %ALLUSERSPROFILE%\auslogics\driver updater\1.x\$$$databases.db168083844
Moves the following files
- from %ProgramFiles(x86)%\auslogics\driver updater\is-12nlo.tmp to %ProgramFiles(x86)%\auslogics\driver updater\unins000.exe
- from %ProgramFiles(x86)%\auslogics\driver updater\is-m7tjl.tmp to %ProgramFiles(x86)%\auslogics\driver updater\debughelper.dll
- from %ProgramFiles(x86)%\auslogics\driver updater\is-vk5je.tmp to %ProgramFiles(x86)%\auslogics\driver updater\senddebuglog.exe
- from %ProgramFiles(x86)%\auslogics\driver updater\is-7svvk.tmp to %ProgramFiles(x86)%\auslogics\driver updater\commonforms.site.dll
- from %ProgramFiles(x86)%\auslogics\driver updater\is-3o7up.tmp to %ProgramFiles(x86)%\auslogics\driver updater\commonforms.routine.dll
- from %ProgramFiles(x86)%\auslogics\driver updater\is-lmc5q.tmp to %ProgramFiles(x86)%\auslogics\driver updater\taskschedulerhelper.dll
- from %ProgramFiles(x86)%\auslogics\driver updater\is-cdn1a.tmp to %ProgramFiles(x86)%\auslogics\driver updater\volumeshelper.dll
- from %ProgramFiles(x86)%\auslogics\driver updater\is-16240.tmp to %ProgramFiles(x86)%\auslogics\driver updater\rescuecenterhelper.dll
- from %ProgramFiles(x86)%\auslogics\driver updater\is-3t612.tmp to %ProgramFiles(x86)%\auslogics\driver updater\browserhelper.dll
- from %ProgramFiles(x86)%\auslogics\driver updater\is-3q69q.tmp to %ProgramFiles(x86)%\auslogics\driver updater\driverupdater.exe
- from %ProgramFiles(x86)%\auslogics\driver updater\is-8kjci.tmp to %ProgramFiles(x86)%\auslogics\driver updater\athelper.dll
- from %ProgramFiles(x86)%\auslogics\driver updater\is-63nba.tmp to %ProgramFiles(x86)%\auslogics\driver updater\servicemanagerhelper.dll
- from %ProgramFiles(x86)%\auslogics\driver updater\is-guov8.tmp to %ProgramFiles(x86)%\auslogics\driver updater\systeminformationhelper.dll
- from %ProgramFiles(x86)%\auslogics\driver updater\is-8le65.tmp to %ProgramFiles(x86)%\auslogics\driver updater\dpinst32.exe
- from %ProgramFiles(x86)%\auslogics\driver updater\is-av1ov.tmp to %ProgramFiles(x86)%\auslogics\driver updater\dpinst64.exe
- from %ProgramFiles(x86)%\auslogics\driver updater\is-f0r8b.tmp to %ProgramFiles(x86)%\auslogics\driver updater\driverhiveengine.dll
- from %ProgramFiles(x86)%\auslogics\driver updater\is-qrobc.tmp to %ProgramFiles(x86)%\auslogics\driver updater\driverupdaterhelper.dll
- from %ProgramFiles(x86)%\auslogics\driver updater\is-r5oiu.tmp to %ProgramFiles(x86)%\auslogics\driver updater\localizer.dll
- from %ProgramFiles(x86)%\auslogics\driver updater\is-qj9fk.tmp to %ProgramFiles(x86)%\auslogics\driver updater\actioncenterhelper.dll
- from %ProgramFiles(x86)%\auslogics\driver updater\is-mhsve.tmp to %ProgramFiles(x86)%\auslogics\driver updater\cfahelper.dll
- from %ProgramFiles(x86)%\auslogics\driver updater\lang\is-6sn81.tmp to %ProgramFiles(x86)%\auslogics\driver updater\lang\rus.lng
- from %ProgramFiles(x86)%\auslogics\driver updater\is-mjvum.tmp to %ProgramFiles(x86)%\auslogics\driver updater\eula.rtf
- from %ProgramFiles(x86)%\auslogics\driver updater\lang\is-3ljrm.tmp to %ProgramFiles(x86)%\auslogics\driver updater\lang\enu.lng
- from %ProgramFiles(x86)%\auslogics\driver updater\lang\is-aejtq.tmp to %ProgramFiles(x86)%\auslogics\driver updater\lang\deu.lng
- from %ProgramFiles(x86)%\auslogics\driver updater\lang\is-9pauo.tmp to %ProgramFiles(x86)%\auslogics\driver updater\lang\esp.lng
- from %ProgramFiles(x86)%\auslogics\driver updater\lang\is-ahnin.tmp to %ProgramFiles(x86)%\auslogics\driver updater\lang\fra.lng
- from %ProgramFiles(x86)%\auslogics\driver updater\lang\is-vgu2r.tmp to %ProgramFiles(x86)%\auslogics\driver updater\lang\ita.lng
- from %ProgramFiles(x86)%\auslogics\driver updater\lang\is-lrbgl.tmp to %ProgramFiles(x86)%\auslogics\driver updater\lang\jpn.lng
- from %ProgramFiles(x86)%\auslogics\driver updater\lang\is-204o3.tmp to %ProgramFiles(x86)%\auslogics\driver updater\lang\ptb.lng
- from %ProgramFiles(x86)%\auslogics\driver updater\is-qqftq.tmp to %ProgramFiles(x86)%\auslogics\driver updater\googleanalyticshelper.dll
- from %ProgramFiles(x86)%\auslogics\driver updater\setup\is-93egl.tmp to %ProgramFiles(x86)%\auslogics\driver updater\setup\setupcustom.dll
- from %ProgramFiles(x86)%\auslogics\driver updater\data\is-sv6kn.tmp to %ProgramFiles(x86)%\auslogics\driver updater\data\main.ini
- from %ProgramFiles(x86)%\auslogics\driver updater\is-mjbna.tmp to %ProgramFiles(x86)%\auslogics\driver updater\rtl250.bpl
- from %ProgramFiles(x86)%\auslogics\driver updater\is-4tbbh.tmp to %ProgramFiles(x86)%\auslogics\driver updater\vcl250.bpl
- from %ProgramFiles(x86)%\auslogics\driver updater\is-kogks.tmp to %ProgramFiles(x86)%\auslogics\driver updater\vclimg250.bpl
- from %ProgramFiles(x86)%\auslogics\driver updater\is-sqmoo.tmp to %ProgramFiles(x86)%\auslogics\driver updater\axcomponentsrtl.bpl
- from %ProgramFiles(x86)%\auslogics\driver updater\is-m6nmc.tmp to %ProgramFiles(x86)%\auslogics\driver updater\axcomponentsvcl.bpl
- from %ProgramFiles(x86)%\auslogics\driver updater\is-9ej36.tmp to %ProgramFiles(x86)%\auslogics\driver updater\sqlite3.dll
- from %ProgramFiles(x86)%\auslogics\driver updater\is-l12e9.tmp to %ProgramFiles(x86)%\auslogics\driver updater\uninstall_icon.ico
Modifies the following files
Network activity
Connects to
- 'do#####ds.auslogics.com':80
- 'go#####analytics.com':80
- 'au###gics.com':443
TCP
HTTP POST requests
- http://www.go#####analytics.com/collect
Other
- 'au###gics.com':443
UDP
- DNS ASK do#####ds.auslogics.com
- DNS ASK go#####analytics.com
- DNS ASK au###gics.com
Miscellaneous
Creates and executes the following
- '%TEMP%\{23bb1b18-3537-48f7-bef7-42bc65dbf993}_driver-updater_setup.exe' /verysilent /FromStubInstall:"721458,49550" /RunApplication
- '%TEMP%\is-j4td9.tmp\{23bb1b18-3537-48f7-bef7-42bc65dbf993}_driver-updater_setup.tmp' /SL5="$E020A,12792058,146944,%TEMP%\{23BB1B18-3537-48F7-BEF7-42BC65DBF993}_driver-updater_setup.exe" /verysilent /FromStubInstall:"721458,49550" /RunApplication
- '%ProgramFiles(x86)%\auslogics\driver updater\driverupdater.exe' /install /setautostart
- '%TEMP%\{23bb1b18-3537-48f7-bef7-42bc65dbf993}_driver-updater_setup.exe' /verysilent /FromStubInstall:"721458,49550" /RunApplication' (with hidden window)
- '%ProgramFiles(x86)%\auslogics\driver updater\driverupdater.exe' /install /setautostart' (with hidden window)