J
j.y.kim
I used this script for Blaster Patch
and Test it But didn't work...
device downloaded dup file and registry for movefile was been
setted(HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\Session
Manager\PendingFileRenameOperations)
that was ok~! and my test device started reboot..
but !!!!
ole32.dll, rpcrt4.dll and rpcss.dll was not changed!!
check my script plz..
HTTPGET,0,,192.168.16.1,,Dua/test/test_ole32.dll,1,c:\Backup\dua\ole32.dll,1
HTTPGET,0,,192.168.16.1,,Dua/test/test_rpcrt4.dll,1,
c:\Backup\dua\rpcrt4.dll,1
HTTPGET,0,,192.168.16.1,,Dua/test/test_rpcss.dll,1,c:\Backup\dua\rpcss.dll,1
// Move files on the next reboot
MOVEFILE,0,1,c:\Backup\dua\ole32.dll,1,c:\Windows\System32\ole32.dll,DAMOVEF
ILE_DELAY_UNTIL_REBOOT
MOVEFILE,0,1,c:\Backup\dua\rpcrt4.dll,1,c:\Windows\System32\rpcrt4.dll,DAMOV
EFILE_DELAY_UNTIL_REBOOT
MOVEFILE,0,1,c:\Backup\dua\rpcss.dll,1,c:\Windows\System32\rpcss.dll,DAMOVEF
ILE_DELAY_UNTIL_REBOOT
// Copy files on the next reboot
//COPYFILE,0,1,c:\Backup\dua\ole32.dll,1,c:\Windows\System32\ole32.dll,0
//COPYFILE,0,1,c:\Backup\dua\rpcrt4.dll,1,c:\Windows\System32\rpcrt4.dll,0
//COPYFILE,0,1,c:\Backup\dua\rpcss.dll,1,c:\Windows\System32\rpcss.dll,0
//Modify the poll location so the device does not execute this script again
REGSETVALUE,0,HKEY_LOCAL_MACHINE,,SYSTEM\ControlSet001\Services\DUAgent\Para
meters\Config\Sessions\0000,,CmdFile,2,DUA/test/test1.dup
//Set Reg Values
//HKLM\SOFTWARE\Microsoft\Windows
nt\CurrentVersion\Hotfix\KB823980\Installed (REG_DWORD) = 1
REGSETVALUE,0,HKEY_LOCAL_MACHINE,,SOFTWARE\Microsoft\Windows
nt\CurrentVersion\Hotfix\KB823980,,Installed,4,1
//HKLM\SOFTWARE\Microsoft\Windows nt\CurrentVersion\Hotfix\KB823980\Comments
(REG_SZ) = "WindowsXP Hotfix - KB823980"
REGSETVALUE,0,HKEY_LOCAL_MACHINE,,SOFTWARE\Microsoft\Windows
nt\CurrentVersion\Hotfix\KB823980,,Comments,DAREG_SZ,WindowsXp Hotfix -
KB823980
//HKLM\SOFTWARE\Microsoft\Windows nt\CurrentVersion\Hotfix\KB823980\Backup
Dir (REG_SZ) = empty
REGSETVALUE,0,HKEY_LOCAL_MACHINE,,SOFTWARE\Microsoft\Windows
nt\CurrentVersion\Hotfix\KB823980,,Backup Dir,DAREG_SZ,,
//HKLM\SOFTWARE\Microsoft\Windows
NT\CurrentVersion\Hotfix\KB823980\FixDescription (REG_SZ) = "Windows XP
Hotfix - KB823980"
REGSETVALUE,0,HKEY_LOCAL_MACHINE,,SOFTWARE\Microsoft\Windows
nt\CurrentVersion\Hotfix\KB823980,,FixDescription,DAREG_SZ,WindowsXp
Hotfix - KB823980
//HKLM\SOFTWARE\Microsoft\Windows
nt\CurrentVersion\Hotfix\KB823980\Installed By (REG_SZ) = empty
REGSETVALUE,0,HKEY_LOCAL_MACHINE,,SOFTWARE\Microsoft\Windows
nt\CurrentVersion\Hotfix\KB823980,,Installed By,DAREG_SZ,,
//HKLM\SOFTWARE\Microsoft\Windows
nt\CurrentVersion\Hotfix\KB823980\Installed On (REG_SZ) = empty
REGSETVALUE,0,HKEY_LOCAL_MACHINE,,SOFTWARE\Microsoft\Windows
nt\CurrentVersion\Hotfix\KB823980,,Installed On,DAREG_SZ,,
//HKLM\SOFTWARE\Microsoft\Windows
NT\CurrentVersion\Hotfix\KB823980\ServicePack (REG_DWORD) = 2
REGSETVALUE,0,HKEY_LOCAL_MACHINE,,SOFTWARE\Microsoft\Windows
nt\CurrentVersion\Hotfix\KB823980,,ServicePack,4,2
//HKLM\SOFTWARE\Microsoft\Windows nt\CurrentVersion\Hotfix\KB823980\Valid
(REG_DWORD) = 1
REGSETVALUE,0,HKEY_LOCAL_MACHINE,,SOFTWARE\Microsoft\Windows
nt\CurrentVersion\Hotfix\KB823980,,Valid,4,1
//HKLM\SOFTWARE\Microsoft\Windows
NT\CurrentVersion\Hotfix\KB823980\File1\Flags (REG_SZ) = empty
REGSETVALUE,0,HKEY_LOCAL_MACHINE,,SOFTWARE\Microsoft\Windows
nt\CurrentVersion\Hotfix\KB823980\File1,,Flags,DAREG_SZ,,
//HKLM\SOFTWARE\Microsoft\Windows nt\CurrentVersion\Hotfix\KB823980\File
1\New File (REG_SZ) = empty
REGSETVALUE,0,HKEY_LOCAL_MACHINE,,SOFTWARE\Microsoft\Windows
nt\CurrentVersion\Hotfix\KB823980\File1,,New File,DAREG_SZ,,
//HKLM\SOFTWARE\Microsoft\Windows nt\CurrentVersion\Hotfix\KB823980\File
1\New Link Date (REG_SZ) = empty
REGSETVALUE,0,HKEY_LOCAL_MACHINE,,SOFTWARE\Microsoft\Windows
nt\CurrentVersion\Hotfix\KB823980\File1,,New Link Date,DAREG_SZ,,
//HKLM\SOFTWARE\Microsoft\Windows nt\CurrentVersion\Hotfix\KB823980\File
1\Old Link Date (REG_SZ) = empty
REGSETVALUE,0,HKEY_LOCAL_MACHINE,,SOFTWARE\Microsoft\Windows
nt\CurrentVersion\Hotfix\KB823980\File1,,Old Link Date,DAREG_SZ,,
//Reboot the device: this should be commented out if a reboot is not desired
REBOOT,0,2
and Test it But didn't work...
device downloaded dup file and registry for movefile was been
setted(HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\Session
Manager\PendingFileRenameOperations)
that was ok~! and my test device started reboot..
but !!!!
ole32.dll, rpcrt4.dll and rpcss.dll was not changed!!
check my script plz..
HTTPGET,0,,192.168.16.1,,Dua/test/test_ole32.dll,1,c:\Backup\dua\ole32.dll,1
HTTPGET,0,,192.168.16.1,,Dua/test/test_rpcrt4.dll,1,
c:\Backup\dua\rpcrt4.dll,1
HTTPGET,0,,192.168.16.1,,Dua/test/test_rpcss.dll,1,c:\Backup\dua\rpcss.dll,1
// Move files on the next reboot
MOVEFILE,0,1,c:\Backup\dua\ole32.dll,1,c:\Windows\System32\ole32.dll,DAMOVEF
ILE_DELAY_UNTIL_REBOOT
MOVEFILE,0,1,c:\Backup\dua\rpcrt4.dll,1,c:\Windows\System32\rpcrt4.dll,DAMOV
EFILE_DELAY_UNTIL_REBOOT
MOVEFILE,0,1,c:\Backup\dua\rpcss.dll,1,c:\Windows\System32\rpcss.dll,DAMOVEF
ILE_DELAY_UNTIL_REBOOT
// Copy files on the next reboot
//COPYFILE,0,1,c:\Backup\dua\ole32.dll,1,c:\Windows\System32\ole32.dll,0
//COPYFILE,0,1,c:\Backup\dua\rpcrt4.dll,1,c:\Windows\System32\rpcrt4.dll,0
//COPYFILE,0,1,c:\Backup\dua\rpcss.dll,1,c:\Windows\System32\rpcss.dll,0
//Modify the poll location so the device does not execute this script again
REGSETVALUE,0,HKEY_LOCAL_MACHINE,,SYSTEM\ControlSet001\Services\DUAgent\Para
meters\Config\Sessions\0000,,CmdFile,2,DUA/test/test1.dup
//Set Reg Values
//HKLM\SOFTWARE\Microsoft\Windows
nt\CurrentVersion\Hotfix\KB823980\Installed (REG_DWORD) = 1
REGSETVALUE,0,HKEY_LOCAL_MACHINE,,SOFTWARE\Microsoft\Windows
nt\CurrentVersion\Hotfix\KB823980,,Installed,4,1
//HKLM\SOFTWARE\Microsoft\Windows nt\CurrentVersion\Hotfix\KB823980\Comments
(REG_SZ) = "WindowsXP Hotfix - KB823980"
REGSETVALUE,0,HKEY_LOCAL_MACHINE,,SOFTWARE\Microsoft\Windows
nt\CurrentVersion\Hotfix\KB823980,,Comments,DAREG_SZ,WindowsXp Hotfix -
KB823980
//HKLM\SOFTWARE\Microsoft\Windows nt\CurrentVersion\Hotfix\KB823980\Backup
Dir (REG_SZ) = empty
REGSETVALUE,0,HKEY_LOCAL_MACHINE,,SOFTWARE\Microsoft\Windows
nt\CurrentVersion\Hotfix\KB823980,,Backup Dir,DAREG_SZ,,
//HKLM\SOFTWARE\Microsoft\Windows
NT\CurrentVersion\Hotfix\KB823980\FixDescription (REG_SZ) = "Windows XP
Hotfix - KB823980"
REGSETVALUE,0,HKEY_LOCAL_MACHINE,,SOFTWARE\Microsoft\Windows
nt\CurrentVersion\Hotfix\KB823980,,FixDescription,DAREG_SZ,WindowsXp
Hotfix - KB823980
//HKLM\SOFTWARE\Microsoft\Windows
nt\CurrentVersion\Hotfix\KB823980\Installed By (REG_SZ) = empty
REGSETVALUE,0,HKEY_LOCAL_MACHINE,,SOFTWARE\Microsoft\Windows
nt\CurrentVersion\Hotfix\KB823980,,Installed By,DAREG_SZ,,
//HKLM\SOFTWARE\Microsoft\Windows
nt\CurrentVersion\Hotfix\KB823980\Installed On (REG_SZ) = empty
REGSETVALUE,0,HKEY_LOCAL_MACHINE,,SOFTWARE\Microsoft\Windows
nt\CurrentVersion\Hotfix\KB823980,,Installed On,DAREG_SZ,,
//HKLM\SOFTWARE\Microsoft\Windows
NT\CurrentVersion\Hotfix\KB823980\ServicePack (REG_DWORD) = 2
REGSETVALUE,0,HKEY_LOCAL_MACHINE,,SOFTWARE\Microsoft\Windows
nt\CurrentVersion\Hotfix\KB823980,,ServicePack,4,2
//HKLM\SOFTWARE\Microsoft\Windows nt\CurrentVersion\Hotfix\KB823980\Valid
(REG_DWORD) = 1
REGSETVALUE,0,HKEY_LOCAL_MACHINE,,SOFTWARE\Microsoft\Windows
nt\CurrentVersion\Hotfix\KB823980,,Valid,4,1
//HKLM\SOFTWARE\Microsoft\Windows
NT\CurrentVersion\Hotfix\KB823980\File1\Flags (REG_SZ) = empty
REGSETVALUE,0,HKEY_LOCAL_MACHINE,,SOFTWARE\Microsoft\Windows
nt\CurrentVersion\Hotfix\KB823980\File1,,Flags,DAREG_SZ,,
//HKLM\SOFTWARE\Microsoft\Windows nt\CurrentVersion\Hotfix\KB823980\File
1\New File (REG_SZ) = empty
REGSETVALUE,0,HKEY_LOCAL_MACHINE,,SOFTWARE\Microsoft\Windows
nt\CurrentVersion\Hotfix\KB823980\File1,,New File,DAREG_SZ,,
//HKLM\SOFTWARE\Microsoft\Windows nt\CurrentVersion\Hotfix\KB823980\File
1\New Link Date (REG_SZ) = empty
REGSETVALUE,0,HKEY_LOCAL_MACHINE,,SOFTWARE\Microsoft\Windows
nt\CurrentVersion\Hotfix\KB823980\File1,,New Link Date,DAREG_SZ,,
//HKLM\SOFTWARE\Microsoft\Windows nt\CurrentVersion\Hotfix\KB823980\File
1\Old Link Date (REG_SZ) = empty
REGSETVALUE,0,HKEY_LOCAL_MACHINE,,SOFTWARE\Microsoft\Windows
nt\CurrentVersion\Hotfix\KB823980\File1,,Old Link Date,DAREG_SZ,,
//Reboot the device: this should be commented out if a reboot is not desired
REBOOT,0,2