Техническая информация
Для обеспечения автозапуска и распространения
Устанавливает следующие настройки сервисов
- [HKLM\SYSTEM\CurrentControlSet\Services\lpser] 'Start' = '00000002'
- [HKLM\SYSTEM\CurrentControlSet\Services\lpser] 'ImagePath' = '%CommonProgramFiles%\SpeedEngines\SpeedEngines.dll'
- [HKLM\SYSTEM\CurrentControlSet\services\lpser] 'ImagePath' = '<SYSTEM32>\svchost.exe -k SFordationServer'
- [HKLM\SYSTEM\CurrentControlSet\services\lpser\Parameters] 'ServiceDll' = '%CommonProgramFiles%\SpeedEngines\SpeedEngines.dll'
Создает следующие сервисы
- 'lpser' %CommonProgramFiles%\SpeedEngines\SpeedEngines.dll
Изменения в файловой системе
Создает следующие файлы
- %TEMP%\setup\7z.dll
- %TEMP%\setup\7z.exe
- %TEMP%\setup\app.ico
- %TEMP%\setup\clean.exe
- %TEMP%\setup\comm.dll
- %TEMP%\setup\commonengine.dll
- %TEMP%\setup\config.xml
- %TEMP%\setup\coreengine.dll
- %TEMP%\setup\detoured.dll
- %TEMP%\setup\devicenotify.dll
- %TEMP%\setup\diyflash_all.qm
- %TEMP%\setup\images\install_logo.png
- %TEMP%\setup\images\logo.png
- %TEMP%\setup\images\projection_1.png
- %TEMP%\setup\images\projection_2.png
- %TEMP%\setup\images\projection_3.png
- %TEMP%\setup\images\projection_4.png
- %TEMP%\setup\images\projection_5.png
- %TEMP%\setup\interop.msscriptcontrol.dll
- %TEMP%\setup\languostatistics
- %TEMP%\setup\license.html
- %TEMP%\setup\loadericon.ico
- %TEMP%\setup\msvcp100.dll
- %TEMP%\setup\msvcr100.dll
- %TEMP%\setup\msvct100.dll
- %TEMP%\setup\newtonsoft.json.dll
- %TEMP%\setup\plugins\accessible\qtaccessiblecompatwidgets4.dll
- %TEMP%\setup\plugins\accessible\qtaccessiblewidgets4.dll
- %TEMP%\setup\plugins\bearer\qgenericbearer4.dll
- %TEMP%\setup\plugins\bearer\qnativewifibearer4.dll
- %TEMP%\setup\plugins\codecs\qcncodecs4.dll
- %TEMP%\setup\plugins\codecs\qjpcodecs4.dll
- %TEMP%\setup\plugins\codecs\qkrcodecs4.dll
- %TEMP%\setup\plugins\codecs\qtwcodecs4.dll
- %TEMP%\setup\plugins\designer\arthurplugin.dll
- %TEMP%\setup\plugins\designer\containerextension.dll
- %TEMP%\setup\plugins\designer\containerextensiond.dll
- %TEMP%\setup\plugins\designer\customwidgetplugin.dll
- %TEMP%\setup\plugins\designer\phononwidgets.dll
- %TEMP%\setup\plugins\designer\qaxwidget.dll
- %TEMP%\setup\plugins\designer\qdeclarativeview.dll
- %TEMP%\setup\plugins\designer\qt3supportwidgets.dll
- %TEMP%\setup\plugins\designer\qwebview.dll
- %TEMP%\setup\plugins\designer\taskmenuextension.dll
- %TEMP%\setup\plugins\designer\taskmenuextensiond.dll
- %TEMP%\setup\plugins\designer\worldtimeclockplugin.dll
- %TEMP%\setup\plugins\graphicssystems\qglgraphicssystem4.dll
- %TEMP%\setup\plugins\graphicssystems\qtracegraphicssystem4.dll
- %TEMP%\setup\plugins\iconengines\qsvgicon4.dll
- %TEMP%\setup\plugins\imageformats\qgif4.dll
- %TEMP%\setup\plugins\imageformats\qico4.dll
- %TEMP%\setup\plugins\imageformats\qjpeg4.dll
- %TEMP%\setup\plugins\imageformats\qmng4.dll
- %TEMP%\setup\plugins\imageformats\qsvg4.dll
- %TEMP%\setup\plugins\imageformats\qtga4.dll
- %TEMP%\setup\plugins\imageformats\qtiff4.dll
- %TEMP%\setup\plugins\phonon_backend\phonon_ds94.dll
- %TEMP%\setup\plugins\qmltooling\qmldbg_inspector4.dll
- %TEMP%\setup\plugins\qmltooling\qmldbg_tcp4.dll
- %TEMP%\setup\plugins\sqldrivers\qsqlite4.dll
- %TEMP%\setup\qsetup.exe
- %TEMP%\setup\qtcore4.dll
- %TEMP%\setup\qtgui4.dll
- %TEMP%\setup\qtnetwork4.dll
- %TEMP%\setup\qtscript4.dll
- %TEMP%\setup\qtsql4.dll
- %TEMP%\setup\qtxml4.dll
- %TEMP%\setup\qt_zh_cn.qm
- %TEMP%\setup\setup.qm
- %TEMP%\setup\smtpemail.dll
- %TEMP%\setup\speedengines.dll
- %TEMP%\setup\update.exe
- %TEMP%\setup\xianshuabao.exe
- %TEMP%\setup\xsbao.ico
- %TEMP%\setup\xsbcsdown.exe
- %TEMP%\setup\xsbsplash.exe
- %TEMP%\setup\zlib1.dll
- %TEMP%\setup\_misc.7z
- %TEMP%\setup\channel.cfg
- %CommonProgramFiles%\speedengines\speedengines.dll
Другое
Создает и запускает на исполнение
- '%TEMP%\setup\qsetup.exe'
Запускает на исполнение
- '%WINDIR%\syswow64\svchost.exe' -k SFordationServer -s lpser
