Техническая информация
Для обеспечения автозапуска и распространения
Модифицирует следующие ключи реестра
- [<HKCU>\Software\Microsoft\Windows\CurrentVersion\Run] 'DAEMON Tools Pro Agent' = '"%ProgramFiles%\DAEMON Tools Pro\DTAgent.exe" -autorun'
Изменения в файловой системе
Создает следующие файлы
- %TEMP%\$inst\2.tmp
- %ProgramFiles%\daemon tools pro\extractor.exe
- %ProgramFiles%\daemon tools pro\dtimgeditor.exe
- %ProgramFiles%\daemon tools pro\sptdintf.dll
- %ProgramFiles%\daemon tools pro\discsoftbusservicepro.exe
- %ProgramFiles%\daemon tools pro\imgengine.dll
- %ProgramFiles%\daemon tools pro\dthelper.exe
- %ProgramFiles%\daemon tools pro\vdrivelib.dll
- %ProgramFiles%\daemon tools pro\sptdinst-x64.exe
- %ProgramFiles%\daemon tools pro\engine.dll
- %ProgramFiles%\daemon tools pro\profiles.ini
- %ProgramFiles%\daemon tools pro\dtpro.exe
- %ProgramFiles%\daemon tools pro\dtagent.exe
- %PROGRAMDATA%\daemon tools pro\dtpro.dat
- %TEMP%\nsw2270.tmp\setuphlp.dll
- %TEMP%\nsw2270.tmp\daemonwizard.bmp
- %TEMP%\nsw2270.tmp\license.bmp
- %TEMP%\nsw2270.tmp\setuphelper.exe
- %ProgramFiles%\daemon tools pro\dtcommonres.dll
- %TEMP%\nsw2270.tmp\lang\srl.dll
- %ProgramFiles%\daemon tools pro\plugins\grabbers\gendisc.dll
- %ProgramFiles%\daemon tools pro\lang\esn.dll
- %ProgramFiles%\daemon tools pro\lang\enu.dll
- %ProgramFiles%\daemon tools pro\lang\deu.dll
- %ProgramFiles%\daemon tools pro\lang\csy.dll
- %ProgramFiles%\daemon tools pro\lang\cht.dll
- %ProgramFiles%\daemon tools pro\lang\chs.dll
- %ProgramFiles%\daemon tools pro\lang\bih.dll
- %ProgramFiles%\daemon tools pro\lang\bgr.dll
- %TEMP%\nsw2270.tmp\dtsetuphelper.exe
- %ProgramFiles%\daemon tools pro\dtshellhlp.exe
- %ProgramFiles%\daemon tools pro\dtshl64.dll
- %ProgramFiles%\daemon tools pro\dtshl32.dll
- %ProgramFiles%\daemon tools pro\installgadget.exe
- %ProgramFiles%\daemon tools pro\dtpro.gadget
- %ProgramFiles%\daemon tools pro\dtgadget64.dll
- %ProgramFiles%\daemon tools pro\plugins\grabbers\tages.dll
- %ProgramFiles%\daemon tools pro\plugins\grabbers\gensub.dll
- %ProgramFiles%\daemon tools pro\plugins\grabbers\gendpm.dll
- %ProgramFiles%\daemon tools pro\dtshl.propdesc
- %ProgramFiles%\daemon tools pro\plugins\grabbers\safedisc.dll
- %TEMP%\nsw2270.tmp\sptdintf.dll
- %TEMP%\nsw2270.tmp\license.rtf
- %TEMP%\nsw2270.tmp\regpagetrialinfo.ini
- %TEMP%\nsweebd.tmp
- %TEMP%\nsw2270.tmp\lang\deu.dll
- %TEMP%\nsw2270.tmp\lang\csy.dll
- %TEMP%\nsw2270.tmp\lang\cht.dll
- %TEMP%\nsw2270.tmp\lang\chs.dll
- %TEMP%\nsw2270.tmp\lang\bih.dll
- %TEMP%\nsw2270.tmp\lang\bgr.dll
- %TEMP%\nsg2211.tmp
- %ProgramFiles%\daemon tools pro\lang\fin.dll
- %TEMP%\nsw2270.tmp\lang\esn.dll
- %CommonProgramFiles(x86)%\ins.bat
- %TEMP%\$inst\0003.tmp
- %TEMP%\$inst\0002.tmp
- %TEMP%\$inst\0001.tmp
- %CommonProgramFiles(x86)%\setup.exe
- %CommonProgramFiles(x86)%\set.reg
- %CommonProgramFiles(x86)%\cert.cer
- %TEMP%\$inst\temp_0.tmp
- %TEMP%\daemon\packeg.exe
- %ProgramFiles%\daemon tools pro\uninst.exe
- %TEMP%\nsw2270.tmp\lang\fin.dll
- %TEMP%\nsw2270.tmp\lang\hun.dll
- %TEMP%\nsw2270.tmp\lang\fra.dll
- %TEMP%\nsw2270.tmp\regpageemail.ini
- %TEMP%\nsw2270.tmp\regpagepaidinfo.ini
- %TEMP%\nsw2270.tmp\regpagetypelite.ini
- %TEMP%\nsw2270.tmp\regpagetype.ini
- %TEMP%\nsw2270.tmp\reinstpage.ini
- %TEMP%\nsw2270.tmp\system.dll
- %TEMP%\nsw2270.tmp\lang\ukr.dll
- %TEMP%\nsw2270.tmp\lang\heb.dll
- %TEMP%\nsw2270.tmp\lang\trk.dll
- %TEMP%\nsw2270.tmp\lang\enu.dll
- %TEMP%\nsw2270.tmp\lang\rus.dll
- %TEMP%\nsw2270.tmp\lang\ptb.dll
- %TEMP%\nsw2270.tmp\lang\plk.dll
- %TEMP%\nsw2270.tmp\lang\jpn.dll
- %TEMP%\nsw2270.tmp\lang\ita.dll
- %TEMP%\nsw2270.tmp\lang\ind.dll
- %TEMP%\nsw2270.tmp\lang\hye.dll
- %TEMP%\nsw2270.tmp\lang\sve.dll
- %ProgramFiles%\daemon tools pro\lang\fra.dll
Удаляет следующие файлы
- %TEMP%\$inst\temp_0.tmp
- %TEMP%\$inst\0001.tmp
- %TEMP%\$inst\0002.tmp
- %TEMP%\$inst\0003.tmp
Другое
Создает и запускает на исполнение
- '%CommonProgramFiles(x86)%\setup.exe' /S
- '%TEMP%\daemon\packeg.exe' /S
- '%WINDIR%\syswow64\cmd.exe' /c ""%CommonProgramFiles(x86)%\ins.bat" "' (со скрытым окном)
Запускает на исполнение
- '%WINDIR%\syswow64\cmd.exe' /c ""%CommonProgramFiles(x86)%\ins.bat" "
- '%WINDIR%\syswow64\certutil.exe' -addstore "TrustedPublisher" cert.cer
