Техническая информация
Для обеспечения автозапуска и распространения:
Создает следующие сервисы:
- [<HKLM>\SYSTEM\ControlSet001\Services\huawei_enumerator] 'ImagePath' = 'system32\DRIVERS\ew_jubusenum.sys'
- [<HKLM>\SYSTEM\ControlSet001\Services\Wdf01000] 'ImagePath' = 'System32\Drivers\wdf01000.sys'
- [<HKLM>\SYSTEM\ControlSet001\Services\SENS] 'Start' = '00000002'
Изменения в файловой системе:
Создает следующие файлы:
- %WINDIR%\inf\oem16.PNF
- %WINDIR%\inf\oem16.inf
- <SYSTEM32>\CatRoot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\oem16.CAT
- <DRIVERS>\ew_hwusbdev.sys
- <DRIVERS>\ewusbnet.sys
- <DRIVERS>\ewusbmdm.sys
- <DRIVERS>\ew_usbenumfilter.sys
- %WINDIR%\inf\oem14.inf
- <SYSTEM32>\CatRoot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\oem14.CAT
- %WINDIR%\inf\oem13.PNF
- %WINDIR%\inf\oem14.PNF
- %WINDIR%\inf\oem15.PNF
- %WINDIR%\inf\oem15.inf
- <SYSTEM32>\CatRoot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\oem15.CAT
- <DRIVERS>\ew_jubusenum.sys
- %WINDIR%\LastGood\TMP1E.tmp
- <DRIVERS>\WdfCoInstaller01007.dll
- <SYSTEM32>\WdfCoInstaller01007.dll
- %WINDIR%\Temp\OLD1F.tmp
- %WINDIR%\Temp\OLD22.tmp
- %WINDIR%\LastGood\TMP21.tmp
- <DRIVERS>\SET20.tmp
- <DRIVERS>\ew_juextctrl.sys
- <DRIVERS>\ew_jucdcecm.sys
- <DRIVERS>\ew_jucdcacm.sys
- <DRIVERS>\ewdcsc.sys
- <DRIVERS>\usbccid.sys
- <DRIVERS>\ew_hwupgrade.sys
- <DRIVERS>\mod7700.sys
- <SYSTEM32>\CatRoot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\oem7.CAT
- %WINDIR%\inf\oem6.PNF
- %WINDIR%\inf\oem6.inf
- %WINDIR%\inf\oem7.inf
- %WINDIR%\inf\oem8.inf
- <SYSTEM32>\CatRoot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\oem8.CAT
- %WINDIR%\inf\oem7.PNF
- %WINDIR%\inf\oem4.PNF
- %WINDIR%\inf\oem4.inf
- <SYSTEM32>\CatRoot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\oem4.CAT
- <SYSTEM32>\CatRoot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\oem5.CAT
- <SYSTEM32>\CatRoot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\oem6.CAT
- %WINDIR%\inf\oem5.PNF
- %WINDIR%\inf\oem5.inf
- %WINDIR%\inf\oem8.PNF
- <SYSTEM32>\CatRoot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\oem12.CAT
- %WINDIR%\inf\oem11.PNF
- %WINDIR%\inf\oem11.inf
- %WINDIR%\inf\oem12.inf
- %WINDIR%\inf\oem13.inf
- <SYSTEM32>\CatRoot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\oem13.CAT
- %WINDIR%\inf\oem12.PNF
- %WINDIR%\inf\oem9.PNF
- %WINDIR%\inf\oem9.inf
- <SYSTEM32>\CatRoot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\oem9.CAT
- <SYSTEM32>\CatRoot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\oem10.CAT
- <SYSTEM32>\CatRoot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\oem11.CAT
- %WINDIR%\inf\oem10.PNF
- %WINDIR%\inf\oem10.inf
- C:\System Volume Information\_restore{E7F0F64C-F7E5-4319-8757-E9A20C1C4E14}\RP16\snapshot\_REGISTRY_USER_.DEFAULT
- C:\System Volume Information\_restore{E7F0F64C-F7E5-4319-8757-E9A20C1C4E14}\RP16\snapshot\_REGISTRY_USER_USRCLASS_S-1-5-21-2052111302-484763869-725345543-1003
- C:\System Volume Information\_restore{E7F0F64C-F7E5-4319-8757-E9A20C1C4E14}\RP16\snapshot\_REGISTRY_USER_NTUSER_S-1-5-21-2052111302-484763869-725345543-1003
- C:\System Volume Information\_restore{E7F0F64C-F7E5-4319-8757-E9A20C1C4E14}\RP16\snapshot\_REGISTRY_MACHINE_SECURITY
- C:\System Volume Information\_restore{E7F0F64C-F7E5-4319-8757-E9A20C1C4E14}\RP16\snapshot\_REGISTRY_MACHINE_SAM
- C:\System Volume Information\_restore{E7F0F64C-F7E5-4319-8757-E9A20C1C4E14}\RP16\snapshot\_REGISTRY_MACHINE_SYSTEM
- C:\System Volume Information\_restore{E7F0F64C-F7E5-4319-8757-E9A20C1C4E14}\RP16\snapshot\_REGISTRY_MACHINE_SOFTWARE
- C:\System Volume Information\_restore{E7F0F64C-F7E5-4319-8757-E9A20C1C4E14}\RP16\snapshot\_REGISTRY_USER_NTUSER_S-1-5-18
- %WINDIR%\$NtUninstallWdf01007$\spuninst\spuninst.exe
- %WINDIR%\$NtUninstallWdf01007$\spuninst\updspapi.dll
- C:\System Volume Information\_restore{E7F0F64C-F7E5-4319-8757-E9A20C1C4E14}\RP16\snapshot\_REGISTRY_USER_NTUSER_S-1-5-19
- C:\System Volume Information\_restore{E7F0F64C-F7E5-4319-8757-E9A20C1C4E14}\RP16\snapshot\_REGISTRY_USER_USRCLASS_S-1-5-20
- C:\System Volume Information\_restore{E7F0F64C-F7E5-4319-8757-E9A20C1C4E14}\RP16\snapshot\_REGISTRY_USER_NTUSER_S-1-5-20
- C:\System Volume Information\_restore{E7F0F64C-F7E5-4319-8757-E9A20C1C4E14}\RP16\snapshot\_REGISTRY_USER_USRCLASS_S-1-5-19
- C:\System Volume Information\_restore{E7F0F64C-F7E5-4319-8757-E9A20C1C4E14}\RP16\snapshot\ComDb.Dat
- C:\System Volume Information\_restore{E7F0F64C-F7E5-4319-8757-E9A20C1C4E14}\RP16\snapshot\Repository\FS\OBJECTS.DATA
- C:\System Volume Information\_restore{E7F0F64C-F7E5-4319-8757-E9A20C1C4E14}\RP16\snapshot\Repository\FS\MAPPING2.MAP
- C:\System Volume Information\_restore{E7F0F64C-F7E5-4319-8757-E9A20C1C4E14}\RP16\snapshot\Repository\FS\MAPPING1.MAP
- <SYSTEM32>\CatRoot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\Wdf01007.cat
- <DRIVERS>\SET27.tmp
- <DRIVERS>\SET26.tmp
- C:\System Volume Information\_restore{E7F0F64C-F7E5-4319-8757-E9A20C1C4E14}\RP16\snapshot\Repository\FS\OBJECTS.MAP
- C:\System Volume Information\_restore{E7F0F64C-F7E5-4319-8757-E9A20C1C4E14}\RP16\snapshot\Repository\$WinMgmt.CFG
- <SYSTEM32>\spmsgXP_2k3.dll
- C:\System Volume Information\_restore{E7F0F64C-F7E5-4319-8757-E9A20C1C4E14}\RP16\snapshot\domain.txt
- C:\System Volume Information\_restore{E7F0F64C-F7E5-4319-8757-E9A20C1C4E14}\RP16\snapshot\Repository\FS\INDEX.BTR
- %WINDIR%\Wdf01007.cat
- C:\System Volume Information\_restore{E7F0F64C-F7E5-4319-8757-E9A20C1C4E14}\RP16\snapshot\Repository\FS\MAPPING.VER
- C:\System Volume Information\_restore{E7F0F64C-F7E5-4319-8757-E9A20C1C4E14}\RP16\snapshot\Repository\FS\INDEX.MAP
- C:\643d6946e5571ff5fad45cee7e\spuninst.exe
- C:\643d6946e5571ff5fad45cee7e\spmsgxp_2k3.dll
- C:\643d6946e5571ff5fad45cee7e\spmsg2k.dll
- C:\643d6946e5571ff5fad45cee7e\spupdsvc.exe
- C:\643d6946e5571ff5fad45cee7e\update\wdf01007.cat
- C:\643d6946e5571ff5fad45cee7e\wdfldr.sys
- C:\643d6946e5571ff5fad45cee7e\wdf01000.sys
- %WINDIR%\Temp\WdfTemp\Wdf01000.inf
- %WINDIR%\Temp\WdfTemp\WDF.cab
- <SYSTEM32>\SET23.tmp
- %WINDIR%\Temp\WdfTemp\Wdf.cat
- C:\643d6946e5571ff5fad45cee7e\spmsg.dll
- %WINDIR%\Temp\WdfTemp\Microsoft Kernel-Mode Driver Framework Install-v1.7-Vista.msu
- %WINDIR%\Temp\WdfTemp\Microsoft Kernel-Mode Driver Framework Install-v1.7-Win2k-WinXP-Win2k3.exe
- C:\643d6946e5571ff5fad45cee7e\update\kmdfcustom.dll
- <SYSTEM32>\CatRoot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\oem17.CAT
- %WINDIR%\Wdf01007Inst.log
- C:\643d6946e5571ff5fad45cee7e\$shtdwn$.req
- %WINDIR%\inf\oem17.inf
- %WINDIR%\$NtUninstallWdf01007$\spuninst\spuninst.inf
- %WINDIR%\$NtUninstallWdf01007$\spuninst\spuninst.txt
- %WINDIR%\inf\oem17.PNF
- C:\643d6946e5571ff5fad45cee7e\update\update_srv2k3.inf
- C:\643d6946e5571ff5fad45cee7e\update\update.exe
- C:\643d6946e5571ff5fad45cee7e\update\updspapi.dll
- C:\643d6946e5571ff5fad45cee7e\update\update_win2k.inf
- C:\643d6946e5571ff5fad45cee7e\update\update.ver
- C:\643d6946e5571ff5fad45cee7e\update\updatebr.inf
- C:\643d6946e5571ff5fad45cee7e\update\update_winxp.inf
- %WINDIR%\inf\oem3.PNF
- %ALLUSERSPROFILE%\Application Data\DataCardService\Driver\Driver\x86\ewnet.inf
- %ALLUSERSPROFILE%\Application Data\DataCardService\Driver\Driver\x86\ewmdm2k.inf
- %ALLUSERSPROFILE%\Application Data\DataCardService\Driver\Driver\x86\ewmdm2k.cat
- %ALLUSERSPROFILE%\Application Data\DataCardService\Driver\Driver\x86\ewser2k.cat
- %ALLUSERSPROFILE%\Application Data\DataCardService\Driver\Driver\x86\ewsmartcard.inf
- %ALLUSERSPROFILE%\Application Data\DataCardService\Driver\Driver\x86\ewsmartcard.cat
- %ALLUSERSPROFILE%\Application Data\DataCardService\Driver\Driver\x86\ewser2k.inf
- %ALLUSERSPROFILE%\Application Data\DataCardService\Driver\Driver\x86\ew_usbenumfilter.cat
- %ALLUSERSPROFILE%\Application Data\DataCardService\Driver\Driver\x86\ew_juwwanecm.sys
- %ALLUSERSPROFILE%\Application Data\DataCardService\Driver\Driver\x86\ew_juwwanecm.inf
- %ALLUSERSPROFILE%\Application Data\DataCardService\Driver\Driver\x86\ew_usbenumfilter.sys
- %ALLUSERSPROFILE%\Application Data\DataCardService\Driver\Driver\x86\ewdcsc.sys
- %ALLUSERSPROFILE%\Application Data\DataCardService\Driver\Driver\x86\ewdcsc.inf
- %ALLUSERSPROFILE%\Application Data\DataCardService\Driver\Driver\x86\ewdcsc.cat
- %ALLUSERSPROFILE%\Application Data\DataCardService\Driver\Driver\x86\ewusbmdm.sys
- %ALLUSERSPROFILE%\Application Data\DataCardService\Driver\Driver\x86\mod7700.inf
- %ALLUSERSPROFILE%\Application Data\DataCardService\Driver\Driver\x86\mod7700.cat
- %ALLUSERSPROFILE%\Application Data\DataCardService\Driver\Driver\x86\hwgpssensor.inf
- %ALLUSERSPROFILE%\Application Data\DataCardService\Driver\Driver\x86\mod7700.sys
- %ALLUSERSPROFILE%\Application Data\DataCardService\Driver\Driver\x86\usbccid.sys
- %ALLUSERSPROFILE%\Application Data\DataCardService\Driver\Driver\x86\usbccid.inf
- %ALLUSERSPROFILE%\Application Data\DataCardService\Driver\Driver\x86\usbccid.cat
- %ALLUSERSPROFILE%\Application Data\DataCardService\Driver\Driver\x86\ewusbwwan.cat
- %ALLUSERSPROFILE%\Application Data\DataCardService\Driver\Driver\x86\ewusbnet.sys
- %ALLUSERSPROFILE%\Application Data\DataCardService\Driver\Driver\x86\ewusbnet.cat
- %ALLUSERSPROFILE%\Application Data\DataCardService\Driver\Driver\x86\ewusbwwan.inf
- %ALLUSERSPROFILE%\Application Data\DataCardService\Driver\Driver\x86\hwgpssensor.dll
- %ALLUSERSPROFILE%\Application Data\DataCardService\Driver\Driver\x86\hwgpssensor.cat
- %ALLUSERSPROFILE%\Application Data\DataCardService\Driver\Driver\x86\ewusbwwan.sys
- %ALLUSERSPROFILE%\Application Data\DataCardService\Driver\Driver\x86\ew_hwupgrade.inf
- %ALLUSERSPROFILE%\Application Data\DataCardService\Driver\Driver\x86\ew_hwupgrade.cat
- %ALLUSERSPROFILE%\Application Data\DataCardService\Driver\Driver\x86\ew_busfilter.inf
- %ALLUSERSPROFILE%\Application Data\DataCardService\Driver\Driver\x86\ew_hwupgrade.sys
- %ALLUSERSPROFILE%\Application Data\DataCardService\Driver\Driver\x86\ew_hwusbdev.sys
- %ALLUSERSPROFILE%\Application Data\DataCardService\Driver\Driver\x86\ew_hwusbdev.inf
- %ALLUSERSPROFILE%\Application Data\DataCardService\Driver\Driver\x86\ew_hwusbdev.cat
- %ALLUSERSPROFILE%\Application Data\DataCardService\Driver\LocateDevice.dll
- %ALLUSERSPROFILE%\Application Data\DataCardService\Driver\DriverUninstall.exe
- %ALLUSERSPROFILE%\Application Data\DataCardService\Driver\DriverSetup.exe
- %ALLUSERSPROFILE%\Application Data\DataCardService\Driver\devsetup32.exe
- %ALLUSERSPROFILE%\Application Data\DataCardService\Driver\Driver\x86\WdfCoInstaller01007.dll
- %ALLUSERSPROFILE%\Application Data\DataCardService\Driver\release notes.txt
- %ALLUSERSPROFILE%\Application Data\DataCardService\Driver\devsetup64.exe
- %ALLUSERSPROFILE%\Application Data\DataCardService\Driver\Driver\x86\ew_jubusenum.cat
- %ALLUSERSPROFILE%\Application Data\DataCardService\Driver\Driver\x86\ew_jucdcmdm.inf
- %ALLUSERSPROFILE%\Application Data\DataCardService\Driver\Driver\x86\ew_jucdcmdm.cat
- %ALLUSERSPROFILE%\Application Data\DataCardService\Driver\Driver\x86\ew_jucdcecm.sys
- %ALLUSERSPROFILE%\Application Data\DataCardService\Driver\Driver\x86\ew_juextctrl.cat
- %ALLUSERSPROFILE%\Application Data\DataCardService\Driver\Driver\x86\ew_juwwanecm.cat
- %ALLUSERSPROFILE%\Application Data\DataCardService\Driver\Driver\x86\ew_juextctrl.sys
- %ALLUSERSPROFILE%\Application Data\DataCardService\Driver\Driver\x86\ew_juextctrl.inf
- %ALLUSERSPROFILE%\Application Data\DataCardService\Driver\Driver\x86\ew_jucdcacm.cat
- %ALLUSERSPROFILE%\Application Data\DataCardService\Driver\Driver\x86\ew_jubusenum.sys
- %ALLUSERSPROFILE%\Application Data\DataCardService\Driver\Driver\x86\ew_jubusenum.inf
- %ALLUSERSPROFILE%\Application Data\DataCardService\Driver\Driver\x86\ew_jucdcacm.inf
- %ALLUSERSPROFILE%\Application Data\DataCardService\Driver\Driver\x86\ew_jucdcecm.inf
- %ALLUSERSPROFILE%\Application Data\DataCardService\Driver\Driver\x86\ew_jucdcecm.cat
- %ALLUSERSPROFILE%\Application Data\DataCardService\Driver\Driver\x86\ew_jucdcacm.sys
- %ALLUSERSPROFILE%\Application Data\DataCardService\Driver\Driver\x64\ewusbnet.cat
- %ALLUSERSPROFILE%\Application Data\DataCardService\Driver\Driver\x64\ewusbmdm.sys
- %ALLUSERSPROFILE%\Application Data\DataCardService\Driver\Driver\x64\ewsmartcard.inf
- %ALLUSERSPROFILE%\Application Data\DataCardService\Driver\Driver\x64\ewusbnet.sys
- %ALLUSERSPROFILE%\Application Data\DataCardService\Driver\Driver\x64\ewusbwwan.sys
- %ALLUSERSPROFILE%\Application Data\DataCardService\Driver\Driver\x64\ewusbwwan.inf
- %ALLUSERSPROFILE%\Application Data\DataCardService\Driver\Driver\x64\ewusbwwan.cat
- %ALLUSERSPROFILE%\Application Data\DataCardService\Driver\Driver\x64\ewmdm2k.inf
- %ALLUSERSPROFILE%\Application Data\DataCardService\Driver\Driver\x64\ewmdm2k.cat
- %ALLUSERSPROFILE%\Application Data\DataCardService\Driver\Driver\x64\ewdcsc.sys
- %ALLUSERSPROFILE%\Application Data\DataCardService\Driver\Driver\x64\ewnet.inf
- %ALLUSERSPROFILE%\Application Data\DataCardService\Driver\Driver\x64\ewsmartcard.cat
- %ALLUSERSPROFILE%\Application Data\DataCardService\Driver\Driver\x64\ewser2k.inf
- %ALLUSERSPROFILE%\Application Data\DataCardService\Driver\Driver\x64\ewser2k.cat
- %ALLUSERSPROFILE%\Application Data\DataCardService\Driver\Driver\x64\hwgpssensor.cat
- %ALLUSERSPROFILE%\Application Data\DataCardService\HWDeviceService64.exe
- %ALLUSERSPROFILE%\Application Data\DataCardService\HWDeviceService.exe
- %ALLUSERSPROFILE%\Application Data\DataCardService\DCService.exe
- %ALLUSERSPROFILE%\Application Data\DataCardService\SysConfig.dat
- %WINDIR%\inf\oem3.inf
- <SYSTEM32>\CatRoot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\oem3.CAT
- %ALLUSERSPROFILE%\Application Data\DataCardService\Driver\Install.log
- %ALLUSERSPROFILE%\Application Data\DataCardService\Driver\Driver\x64\mod7700.cat
- %ALLUSERSPROFILE%\Application Data\DataCardService\Driver\Driver\x64\hwgpssensor.inf
- %ALLUSERSPROFILE%\Application Data\DataCardService\Driver\Driver\x64\hwgpssensor.dll
- %ALLUSERSPROFILE%\Application Data\DataCardService\Driver\Driver\x64\mod7700.inf
- %ALLUSERSPROFILE%\Application Data\DataCardService\DCSHelper.exe
- %ALLUSERSPROFILE%\Application Data\DataCardService\Driver\Driver\x64\usbccid.inf
- %ALLUSERSPROFILE%\Application Data\DataCardService\Driver\Driver\x64\mod7700.sys
- %ALLUSERSPROFILE%\Application Data\DataCardService\Driver\Driver\x64\ew_jubusenum.inf
- %ALLUSERSPROFILE%\Application Data\DataCardService\Driver\Driver\x64\ew_jubusenum.cat
- %ALLUSERSPROFILE%\Application Data\DataCardService\Driver\Driver\x64\ew_hwusbdev.sys
- %ALLUSERSPROFILE%\Application Data\DataCardService\Driver\Driver\x64\ew_jubusenum.sys
- %ALLUSERSPROFILE%\Application Data\DataCardService\Driver\Driver\x64\ew_jucdcacm.sys
- %ALLUSERSPROFILE%\Application Data\DataCardService\Driver\Driver\x64\ew_jucdcacm.inf
- %ALLUSERSPROFILE%\Application Data\DataCardService\Driver\Driver\x64\ew_jucdcacm.cat
- %ALLUSERSPROFILE%\Application Data\DataCardService\Driver\Driver\x64\ew_hwupgrade.cat
- %ALLUSERSPROFILE%\Application Data\DataCardService\Driver\Driver\x64\ew_busfilter.inf
- %ALLUSERSPROFILE%\Application Data\DataCardService\Driver\Driver\x64\WdfCoInstaller01007.dll
- %ALLUSERSPROFILE%\Application Data\DataCardService\Driver\Driver\x64\ew_hwupgrade.inf
- %ALLUSERSPROFILE%\Application Data\DataCardService\Driver\Driver\x64\ew_hwusbdev.inf
- %ALLUSERSPROFILE%\Application Data\DataCardService\Driver\Driver\x64\ew_hwusbdev.cat
- %ALLUSERSPROFILE%\Application Data\DataCardService\Driver\Driver\x64\ew_hwupgrade.sys
- %ALLUSERSPROFILE%\Application Data\DataCardService\Driver\Driver\x64\ew_jucdcecm.cat
- %ALLUSERSPROFILE%\Application Data\DataCardService\Driver\Driver\x64\ew_juwwanecm.sys
- %ALLUSERSPROFILE%\Application Data\DataCardService\Driver\Driver\x64\ew_juwwanecm.inf
- %ALLUSERSPROFILE%\Application Data\DataCardService\Driver\Driver\x64\ew_juwwanecm.cat
- %ALLUSERSPROFILE%\Application Data\DataCardService\Driver\Driver\x64\ew_usbenumfilter.cat
- %ALLUSERSPROFILE%\Application Data\DataCardService\Driver\Driver\x64\ewdcsc.inf
- %ALLUSERSPROFILE%\Application Data\DataCardService\Driver\Driver\x64\ewdcsc.cat
- %ALLUSERSPROFILE%\Application Data\DataCardService\Driver\Driver\x64\ew_usbenumfilter.sys
- %ALLUSERSPROFILE%\Application Data\DataCardService\Driver\Driver\x64\ew_jucdcmdm.cat
- %ALLUSERSPROFILE%\Application Data\DataCardService\Driver\Driver\x64\ew_jucdcecm.sys
- %ALLUSERSPROFILE%\Application Data\DataCardService\Driver\Driver\x64\ew_jucdcecm.inf
- %ALLUSERSPROFILE%\Application Data\DataCardService\Driver\Driver\x64\ew_jucdcmdm.inf
- %ALLUSERSPROFILE%\Application Data\DataCardService\Driver\Driver\x64\ew_juextctrl.sys
- %ALLUSERSPROFILE%\Application Data\DataCardService\Driver\Driver\x64\ew_juextctrl.inf
- %ALLUSERSPROFILE%\Application Data\DataCardService\Driver\Driver\x64\ew_juextctrl.cat
Присваивает атрибут 'скрытый' для следующих файлов:
- <SYSTEM32>\CatRoot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\oem13.CAT
- <SYSTEM32>\CatRoot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\oem14.CAT
- <SYSTEM32>\CatRoot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\oem11.CAT
- <SYSTEM32>\CatRoot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\oem12.CAT
- <SYSTEM32>\CatRoot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\oem17.CAT
- <SYSTEM32>\CatRoot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\Wdf01007.cat
- <SYSTEM32>\CatRoot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\oem15.CAT
- <SYSTEM32>\CatRoot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\oem16.CAT
- <SYSTEM32>\CatRoot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\oem5.CAT
- <SYSTEM32>\CatRoot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\oem6.CAT
- <SYSTEM32>\CatRoot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\oem3.CAT
- <SYSTEM32>\CatRoot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\oem4.CAT
- <SYSTEM32>\CatRoot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\oem9.CAT
- <SYSTEM32>\CatRoot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\oem10.CAT
- <SYSTEM32>\CatRoot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\oem7.CAT
- <SYSTEM32>\CatRoot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\oem8.CAT
Удаляет следующие файлы:
- C:\643d6946e5571ff5fad45cee7e\wdf01000.sys
- C:\643d6946e5571ff5fad45cee7e\spupdsvc.exe
- C:\643d6946e5571ff5fad45cee7e\spuninst.exe
- C:\643d6946e5571ff5fad45cee7e\wdfldr.sys
- C:\643d6946e5571ff5fad45cee7e\update\updspapi.dll
- C:\643d6946e5571ff5fad45cee7e\update\kmdfcustom.dll
- C:\643d6946e5571ff5fad45cee7e\update\wdf01007.cat
- C:\643d6946e5571ff5fad45cee7e\spmsgxp_2k3.dll
- %WINDIR%\Temp\WdfTemp\WDF.cab
- %WINDIR%\Temp\WdfTemp\Wdf.cat
- %WINDIR%\Temp\WdfTemp\Wdf01000.inf
- %WINDIR%\Temp\WdfTemp\Microsoft Kernel-Mode Driver Framework Install-v1.7-Win2k-WinXP-Win2k3.exe
- C:\643d6946e5571ff5fad45cee7e\spmsg2k.dll
- C:\643d6946e5571ff5fad45cee7e\spmsg.dll
- %WINDIR%\Temp\WdfTemp\Microsoft Kernel-Mode Driver Framework Install-v1.7-Vista.msu
- %WINDIR%\_000002_.tmp.dll
- %WINDIR%\imsins.BAK
- %WINDIR%\inf\oem17.inf
- %WINDIR%\Temp\OLD1F.tmp
- <DRIVERS>\ew_jubusenum.sys
- <SYSTEM32>\WdfCoInstaller01007.dll
- %WINDIR%\Temp\OLD22.tmp
- %WINDIR%\inf\oem17.PNF
- C:\643d6946e5571ff5fad45cee7e\update\update_win2k.inf
- C:\643d6946e5571ff5fad45cee7e\update\update_srv2k3.inf
- C:\643d6946e5571ff5fad45cee7e\update\update.exe
- C:\643d6946e5571ff5fad45cee7e\update\update_winxp.inf
- <SYSTEM32>\CatRoot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\oem17.CAT
- C:\643d6946e5571ff5fad45cee7e\update\update.ver
- C:\643d6946e5571ff5fad45cee7e\update\updatebr.inf
Перемещает следующие файлы:
- <DRIVERS>\SET26.tmp в <DRIVERS>\wdfldr.sys
- <DRIVERS>\SET27.tmp в <DRIVERS>\wdf01000.sys
- %WINDIR%\Wdf01007.cat в %WINDIR%\_000002_.tmp.dll
- %WINDIR%\LastGood\TMP1E.tmp в %WINDIR%\LastGood\system32\DRIVERS\ew_jubusenum.sys
- %WINDIR%\LastGood\TMP21.tmp в %WINDIR%\LastGood\system32\wdfcoinstaller01007.dll
Подменяет следующие файлы:
- <SYSTEM32>\WdfCoInstaller01007.dll
- <DRIVERS>\ew_jubusenum.sys
Другое:
Ищет следующие окна:
- ClassName: 'STUFF-BOOT' WindowName: ''
- ClassName: '' WindowName: ''
Создает и запускает на исполнение:
- '%WINDIR%\Temp\WdfTemp\Microsoft Kernel-Mode Driver Framework Install-v1.7-Win2k-WinXP-Win2k3.exe' Kernel-Mode Driver Framework Install-v1.7-Win2k-WinXP-Win2k3.exe /quiet /o /ER
- 'C:\643d6946e5571ff5fad45cee7e\update\update.exe' /quiet /o /ER
- '%ALLUSERSPROFILE%\Application Data\DataCardService\Driver\DriverSetup.exe'
- '%ALLUSERSPROFILE%\Application Data\DataCardService\Driver\devsetup32.exe' /install /debug
Запускает на исполнение:
- '<SYSTEM32>\runonce.exe' -r
