Техническая информация
Для обеспечения автозапуска и распространения
Модифицирует следующие ключи реестра
- [<HKLM>\SOFTWARE\Wow6432Node\Microsoft\Windows\CurrentVersion\RunOnce] '{852adda4-4c78-4a38-b583-c0b360a329d6}' = '"%PROGRAMDATA%\Package Cache\{852adda4-4c78-4a38-b583-c0b360a329d6}\VC_redist....
Устанавливает следующие настройки сервисов
- [<HKLM>\System\CurrentControlSet\Services\QNAP_QAPI2] 'Start' = '00000002'
- [<HKLM>\System\CurrentControlSet\Services\QNAP_QAPI2] 'ImagePath' = '%ProgramFiles%\QNAP\QAPI2\QAPI2.exe'
Создает следующие сервисы
- 'QNAP_QAPI2' %ProgramFiles%\QNAP\QAPI2\QAPI2.exe
Изменения в файловой системе
Создает следующие файлы
- %TEMP%\nsy31eb.tmp\system.dll
- %WINDIR%\temp\{081bade0-0c5c-45e8-a9bd-67c303d64b04}\.ba\1045\thm.wxl
- %WINDIR%\temp\{081bade0-0c5c-45e8-a9bd-67c303d64b04}\.ba\1042\license.rtf
- %WINDIR%\temp\{081bade0-0c5c-45e8-a9bd-67c303d64b04}\.ba\1042\thm.wxl
- %WINDIR%\temp\{081bade0-0c5c-45e8-a9bd-67c303d64b04}\.ba\1041\license.rtf
- %WINDIR%\temp\{081bade0-0c5c-45e8-a9bd-67c303d64b04}\.ba\1041\thm.wxl
- %WINDIR%\temp\{081bade0-0c5c-45e8-a9bd-67c303d64b04}\.ba\1040\license.rtf
- %WINDIR%\temp\{081bade0-0c5c-45e8-a9bd-67c303d64b04}\.ba\1040\thm.wxl
- %WINDIR%\temp\{081bade0-0c5c-45e8-a9bd-67c303d64b04}\.ba\1036\license.rtf
- %WINDIR%\temp\{081bade0-0c5c-45e8-a9bd-67c303d64b04}\.ba\1036\thm.wxl
- %WINDIR%\temp\{081bade0-0c5c-45e8-a9bd-67c303d64b04}\.ba\1045\license.rtf
- %WINDIR%\temp\{081bade0-0c5c-45e8-a9bd-67c303d64b04}\.ba\1031\license.rtf
- %WINDIR%\temp\{081bade0-0c5c-45e8-a9bd-67c303d64b04}\.ba\1029\license.rtf
- %WINDIR%\temp\{081bade0-0c5c-45e8-a9bd-67c303d64b04}\.ba\1029\thm.wxl
- %WINDIR%\temp\{081bade0-0c5c-45e8-a9bd-67c303d64b04}\.ba\1028\license.rtf
- %WINDIR%\temp\{081bade0-0c5c-45e8-a9bd-67c303d64b04}\.ba\1028\thm.wxl
- %WINDIR%\temp\{081bade0-0c5c-45e8-a9bd-67c303d64b04}\.ba\license.rtf
- %WINDIR%\temp\{081bade0-0c5c-45e8-a9bd-67c303d64b04}\.ba\logo.png
- %WINDIR%\temp\{081bade0-0c5c-45e8-a9bd-67c303d64b04}\.ba\thm.wxl
- %WINDIR%\temp\{081bade0-0c5c-45e8-a9bd-67c303d64b04}\.ba\thm.xml
- %WINDIR%\temp\{081bade0-0c5c-45e8-a9bd-67c303d64b04}\.ba\wixstdba.dll
- %WINDIR%\temp\{081bade0-0c5c-45e8-a9bd-67c303d64b04}\.ba\1031\thm.wxl
- %WINDIR%\temp\{081bade0-0c5c-45e8-a9bd-67c303d64b04}\.ba\1046\thm.wxl
- %WINDIR%\temp\{081bade0-0c5c-45e8-a9bd-67c303d64b04}\.ba\1046\license.rtf
- %WINDIR%\temp\{081bade0-0c5c-45e8-a9bd-67c303d64b04}\.ba\1049\thm.wxl
- C:\7a17971f1cf9bda2a125b0\$dpx$.tmp\8d3877f1bc423d41be552974c3653f89.tmp
- C:\7a17971f1cf9bda2a125b0\$dpx$.tmp\cbb2aeed7622c8478ab56b1867381000.tmp
- C:\7a17971f1cf9bda2a125b0\$dpx$.tmp\207ee8962f79ee4686e838bc9a2970d1.tmp
- C:\7a17971f1cf9bda2a125b0\$dpx$.tmp\7207fd892ed2664d8fdcbb132ab8623e.tmp
- %WINDIR%\temp\{081bade0-0c5c-45e8-a9bd-67c303d64b04}\cab2c04ddc374bd96eb5c8eb8208f2c7c92
- %WINDIR%\temp\{081bade0-0c5c-45e8-a9bd-67c303d64b04}\cab5046a8ab272bf37297bb7928664c9503
- %WINDIR%\temp\{081bade0-0c5c-45e8-a9bd-67c303d64b04}\vcruntimeadditional_x64
- %WINDIR%\temp\{081bade0-0c5c-45e8-a9bd-67c303d64b04}\vcruntimeminimum_x64
- %WINDIR%\temp\{081bade0-0c5c-45e8-a9bd-67c303d64b04}\windows7_msu_x64
- %PROGRAMDATA%\package cache\{852adda4-4c78-4a38-b583-c0b360a329d6}\state.rsm
- %PROGRAMDATA%\package cache\{852adda4-4c78-4a38-b583-c0b360a329d6}\vc_redist.x64.exe
- %WINDIR%\temp\{081bade0-0c5c-45e8-a9bd-67c303d64b04}\.be\vc_redist.x64.exe
- %PROGRAMDATA%\qnap\vsshwprovider\install.vc_redist_x64.log
- %WINDIR%\temp\{081bade0-0c5c-45e8-a9bd-67c303d64b04}\.ba\bootstrapperapplicationdata.xml
- %WINDIR%\temp\{081bade0-0c5c-45e8-a9bd-67c303d64b04}\.ba\3082\license.rtf
- %WINDIR%\temp\{081bade0-0c5c-45e8-a9bd-67c303d64b04}\.ba\3082\thm.wxl
- %WINDIR%\temp\{081bade0-0c5c-45e8-a9bd-67c303d64b04}\.ba\2052\license.rtf
- %WINDIR%\temp\{081bade0-0c5c-45e8-a9bd-67c303d64b04}\.ba\2052\thm.wxl
- %WINDIR%\temp\{081bade0-0c5c-45e8-a9bd-67c303d64b04}\.ba\1055\license.rtf
- %WINDIR%\temp\{081bade0-0c5c-45e8-a9bd-67c303d64b04}\.ba\1055\thm.wxl
- %WINDIR%\temp\{081bade0-0c5c-45e8-a9bd-67c303d64b04}\.ba\1049\license.rtf
- %WINDIR%\temp\{9b29f83e-dd84-4302-a884-412efba9a201}\.cr\vc_redist.x64.exe
- %WINDIR%\softwaredistribution\scanfile\bd6c8892-98a2-4e37-a156-ed586f270df2\source.cab
- %TEMP%\qnap\vsshwprovider\vc_redist.x64.exe
- %ProgramFiles%\qnap\qapi2\vscutility.dll
- %TEMP%\qnap\qapi2\2.4.3.4\vimservice2010.dll
- %TEMP%\qnap\qapi2\2.4.3.4\vimservice2010.xmlserializers.dll
- %TEMP%\qnap\qapi2\2.4.3.4\vim25service2010.dll
- %TEMP%\qnap\qapi2\2.4.3.4\vim25service2010.xmlserializers.dll
- %TEMP%\qnap\qapi2\2.4.3.4\vscutility.dll
- %TEMP%\qnap\qapi2\2.4.3.4\vmware.vim.dll
- %TEMP%\qnap\qapi2\2.4.3.4\vmware.security.credentialstore.dll
- %TEMP%\qnap\qapi2\2.4.3.4\servercssnapagentdll.dll
- %TEMP%\qnap\qapi2\2.4.3.4\servercsnasdll.dll
- %TEMP%\qnap\qapi2\2.4.3.4\log4net.dll
- %TEMP%\qnap\qapi2\2.4.3.4\servercsdll.dll
- %TEMP%\qnap\qapi2\2.4.3.4\cookcomputing.xmlrpcv2.dll
- %TEMP%\qnap\qapi2\2.4.3.4\alphavss.x86.dll
- %TEMP%\qnap\qapi2\2.4.3.4\alphavss.x64.dll
- %TEMP%\qnap\qapi2\2.4.3.4\alphavss.common.dll
- %TEMP%\nsf3650.tmp\simplesc.dll
- %TEMP%\nsf3650.tmp\logex.dll
- %TEMP%\nsf3650.tmp\system.dll
- %TEMP%\qnap\vsshwprovider\qapi2.exe
- %TEMP%\nsy31eb.tmp\logex.dll
- %TEMP%\qnap\qapi2\2.4.3.4\qdll.dll
- %TEMP%\qnap\qapi2\2.4.3.4\qapputil.dll
- %TEMP%\qnap\qapi2\2.4.3.4\qapi2.exe
- %TEMP%\qnap\qapi2\2.4.3.4\log4net.config
- %ProgramFiles%\qnap\qapi2\vmware.vim.dll
- %ProgramFiles%\qnap\qapi2\vmware.security.credentialstore.dll
- %ProgramFiles%\qnap\qapi2\vimservice2010.xmlserializers.dll
- %ProgramFiles%\qnap\qapi2\vimservice2010.dll
- %ProgramFiles%\qnap\qapi2\vim25service2010.xmlserializers.dll
- %ProgramFiles%\qnap\qapi2\vim25service2010.dll
- %ProgramFiles%\qnap\qapi2\uninst.exe
- %ProgramFiles%\qnap\qapi2\servercssnapagentdll.dll
- %ProgramFiles%\qnap\qapi2\servercsnasdll.dll
- %ProgramFiles%\qnap\qapi2\servercsdll.dll
- %ProgramFiles%\qnap\qapi2\qdll.dll
- %ProgramFiles%\qnap\qapi2\qapputil.dll
- %ProgramFiles%\qnap\qapi2\qapi2.exe
- %ProgramFiles%\qnap\qapi2\log4net.dll
- %ProgramFiles%\qnap\qapi2\log4net.config
- %ProgramFiles%\qnap\qapi2\cookcomputing.xmlrpcv2.dll
- %ProgramFiles%\qnap\qapi2\alphavss.x86.dll
- %ProgramFiles%\qnap\qapi2\alphavss.x64.dll
- %ProgramFiles%\qnap\qapi2\alphavss.common.dll
- %TEMP%\qnap\qapi2\install.jar
- %TEMP%\qnap\qapi2\2.4.3.4\uninst.exe
- %TEMP%\nsy31eb.tmp\simplesc.dll
- %WINDIR%\softwaredistribution\scanfile\bd6c8892-98a2-4e37-a156-ed586f270df2\package.cab
Удаляет следующие файлы
- %TEMP%\qnap\qapi2\2.4.3.4\alphavss.common.dll
- %TEMP%\nsf3650.tmp\simplesc.dll
- %TEMP%\nsf3650.tmp\logex.dll
- %TEMP%\qnap\qapi2\install.jar
- %TEMP%\qnap\qapi2\2.4.3.4\vscutility.dll
- %TEMP%\qnap\qapi2\2.4.3.4\vmware.vim.dll
- %TEMP%\qnap\qapi2\2.4.3.4\vmware.security.credentialstore.dll
- %TEMP%\qnap\qapi2\2.4.3.4\vimservice2010.xmlserializers.dll
- %TEMP%\qnap\qapi2\2.4.3.4\vimservice2010.dll
- %TEMP%\qnap\qapi2\2.4.3.4\vim25service2010.xmlserializers.dll
- %TEMP%\qnap\qapi2\2.4.3.4\vim25service2010.dll
- %TEMP%\nsf3650.tmp\system.dll
- %TEMP%\qnap\qapi2\2.4.3.4\uninst.exe
- %TEMP%\qnap\qapi2\2.4.3.4\servercsnasdll.dll
- %TEMP%\qnap\qapi2\2.4.3.4\servercsdll.dll
- %TEMP%\qnap\qapi2\2.4.3.4\qdll.dll
- %TEMP%\qnap\qapi2\2.4.3.4\qapputil.dll
- %TEMP%\qnap\qapi2\2.4.3.4\qapi2.exe
- %TEMP%\qnap\qapi2\2.4.3.4\log4net.dll
- %TEMP%\qnap\qapi2\2.4.3.4\log4net.config
- %TEMP%\qnap\qapi2\2.4.3.4\cookcomputing.xmlrpcv2.dll
- %TEMP%\qnap\qapi2\2.4.3.4\alphavss.x86.dll
- %TEMP%\qnap\qapi2\2.4.3.4\alphavss.x64.dll
- %TEMP%\qnap\qapi2\2.4.3.4\servercssnapagentdll.dll
- %WINDIR%\softwaredistribution\scanfile\bd6c8892-98a2-4e37-a156-ed586f270df2\source.cab
Перемещает следующие файлы
- %WINDIR%\temp\{081bade0-0c5c-45e8-a9bd-67c303d64b04}\windows7_msu_x64 в %PROGRAMDATA%\package cache\.unverified\windows7_msu_x64
- %PROGRAMDATA%\package cache\.unverified\windows7_msu_x64 в %PROGRAMDATA%\package cache\54050a5f8ae7f0c56e553f0090146c17a1d2bf8d\packages\patch\x64\windows6.1-kb2999226-x64.msu
- %WINDIR%\temp\{081bade0-0c5c-45e8-a9bd-67c303d64b04}\vcruntimeminimum_x64 в %PROGRAMDATA%\package cache\.unverified\vcruntimeminimum_x64
- %PROGRAMDATA%\package cache\.unverified\vcruntimeminimum_x64 в %PROGRAMDATA%\package cache\{a94ec1b2-932b-49d7-8af2-4fbd29ff314b}v14.23.27820\packages\vcruntimeminimum_amd64\vc_runtimeminimum_x64.msi
- %WINDIR%\temp\{081bade0-0c5c-45e8-a9bd-67c303d64b04}\cab5046a8ab272bf37297bb7928664c9503 в %PROGRAMDATA%\package cache\.unverified\cab5046a8ab272bf37297bb7928664c9503
- %PROGRAMDATA%\package cache\.unverified\cab5046a8ab272bf37297bb7928664c9503 в %PROGRAMDATA%\package cache\{a94ec1b2-932b-49d7-8af2-4fbd29ff314b}v14.23.27820\packages\vcruntimeminimum_amd64\cab1.cab
- %WINDIR%\temp\{081bade0-0c5c-45e8-a9bd-67c303d64b04}\vcruntimeadditional_x64 в %PROGRAMDATA%\package cache\.unverified\vcruntimeadditional_x64
- %PROGRAMDATA%\package cache\.unverified\vcruntimeadditional_x64 в %PROGRAMDATA%\package cache\{9ca7111b-263d-45de-b898-61fad30b3237}v14.23.27820\packages\vcruntimeadditional_amd64\vc_runtimeadditional_x64.msi
- %WINDIR%\temp\{081bade0-0c5c-45e8-a9bd-67c303d64b04}\cab2c04ddc374bd96eb5c8eb8208f2c7c92 в %PROGRAMDATA%\package cache\.unverified\cab2c04ddc374bd96eb5c8eb8208f2c7c92
- %PROGRAMDATA%\package cache\.unverified\cab2c04ddc374bd96eb5c8eb8208f2c7c92 в %PROGRAMDATA%\package cache\{9ca7111b-263d-45de-b898-61fad30b3237}v14.23.27820\packages\vcruntimeadditional_amd64\cab1.cab
- C:\7a17971f1cf9bda2a125b0\$dpx$.tmp\7207fd892ed2664d8fdcbb132ab8623e.tmp в C:\7a17971f1cf9bda2a125b0\wsusscan.cab
- C:\7a17971f1cf9bda2a125b0\$dpx$.tmp\207ee8962f79ee4686e838bc9a2970d1.tmp в C:\7a17971f1cf9bda2a125b0\windows6.1-kb2999226-x64.cab
- C:\7a17971f1cf9bda2a125b0\$dpx$.tmp\cbb2aeed7622c8478ab56b1867381000.tmp в C:\7a17971f1cf9bda2a125b0\windows6.1-kb2999226-x64-pkgproperties.txt
- C:\7a17971f1cf9bda2a125b0\$dpx$.tmp\8d3877f1bc423d41be552974c3653f89.tmp в C:\7a17971f1cf9bda2a125b0\windows6.1-kb2999226-x64.xml
Другое
Создает и запускает на исполнение
- '%TEMP%\qnap\vsshwprovider\qapi2.exe' /S
- '%ProgramFiles%\qnap\qapi2\qapi2.exe'
- '%TEMP%\qnap\vsshwprovider\vc_redist.x64.exe' /install /quiet /norestart /log "%PROGRAMDATA%\QNAP\VssHwProvider\install.vc_redist_x64.log"
- '%WINDIR%\temp\{9b29f83e-dd84-4302-a884-412efba9a201}\.cr\vc_redist.x64.exe' -burn.clean.room="%TEMP%\QNAP\VssHwProvider\VC_redist.x64.exe" -burn.filehandle.attached=192 -burn.filehandle.self=200 /install /quiet /norestart /log "%PROGRAMDATA%\QNAP\VssHwProvider\install....
- '%WINDIR%\temp\{081bade0-0c5c-45e8-a9bd-67c303d64b04}\.be\vc_redist.x64.exe' -q -burn.elevated BurnPipe.{DDDDBFEC-C662-4BBB-8058-0569B01CF1E4} {DE6C049E-2339-4523-8A71-79A6E577AFB2} 2188
- '%WINDIR%\temp\{081bade0-0c5c-45e8-a9bd-67c303d64b04}\.be\vc_redist.x64.exe' -q -burn.elevated BurnPipe.{DDDDBFEC-C662-4BBB-8058-0569B01CF1E4} {DE6C049E-2339-4523-8A71-79A6E577AFB2} 2188' (со скрытым окном)
Запускает на исполнение
- '%ProgramFiles%\java\jre1.8.0_45\bin\javaw.exe' -Duser.language=en -Djava.util.logging.config.class=qnap.qapi.installer.LoggingConfig -jar "%TEMP%\QNAP\QAPI2\install.jar" "2.4.3.4"
- '<SYSTEM32>\sc.exe' query QNAP_QAPI2
- '<SYSTEM32>\sc.exe' query QSMIS_Provider
- '<SYSTEM32>\sc.exe' query QVSSHwProvider
- '<SYSTEM32>\reg.exe' query HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\RemoteAPI /v UninstallString /reg:64
- '<SYSTEM32>\reg.exe' query "HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\App Paths\QRemoteAPI.exe" /v /reg:64
- '<SYSTEM32>\sc.exe' query QRemoteAPI
- '<SYSTEM32>\sc.exe' create QNAP_QAPI2 displayname= "QNAP QAPI2" binpath= "%ProgramFiles%\QNAP\QAPI2\QAPI2.exe" start= auto
- '<SYSTEM32>\sc.exe' description QNAP_QAPI2 "QNAP Utility API"
- '<SYSTEM32>\sc.exe' start QNAP_QAPI2
- '<SYSTEM32>\reg.exe' add HKEY_LOCAL_MACHINE\SOFTWARE\QNAP\QAPI2 /v InstallPath /reg:64 /t REG_SZ /d "%ProgramFiles%\QNAP\QAPI2" /f
- '<SYSTEM32>\reg.exe' add HKEY_LOCAL_MACHINE\SOFTWARE\QNAP\QAPI2 /v Version /reg:64 /t REG_SZ /d 2.4.3.4 /f
- '<SYSTEM32>\wusa.exe' "%PROGRAMDATA%\Package Cache\54050A5F8AE7F0C56E553F0090146C17A1D2BF8D\packages\Patch\x64\Windows6.1-KB2999226-x64.msu" /quiet /norestart
