Windows Installer检测:关键字的完整列表是什么? [英] Windows Installer Detection: What's the full list of keywords?

问题描述

在Microsoft有关UAC的网站上，并在一些现有的答案和文章中(例如此)，提到Windows安装程序检测会检查程序集是否存在用于检测应用程序是否为安装程序的某些关键字:

On Microsoft's website about UAC and in several existing answers and articles (like this one) it is mentioned that the Installer Detection of Windows checks the assembly for certain keywords for detecting if the application is an installer or not:

在创建32位进程之前，请检查以下属性以确定它是否是安装程序:

Before a 32 bit process is created, the following attributes are checked to determine whether it is an installer:

• 文件名包含诸如"install"， 设置" 更新"等

但是，我找不到这些关键字的完整列表.仅安装" 设置" 更新"甚至在微软的网站上也提到过.那么什么是"cetera"?

However, I could not find a full list of those keywords. Only "install," "setup," "update," etc. is mentioned even on Microsoft's website. So what are the "cetera"?

推荐答案

可能最接近关键字完整列表"的地方是在%windir%\AppPatch\sysmain.sdb读取填充数据库本身. (以及同一文件夹中的其他.sdb文件).

Probably the closest you'll find to a "full list of keywords" is to read the shim database itself at %windir%\AppPatch\sysmain.sdb. (And possibly other .sdb files in the same folder).

sdb2xml 实用程序似乎可以很好地解析它.我的Windows 7 x64系统上sysmain.sdb的XML输出可以找到这里.

The sdb2xml utility seems to do a good job of parsing it. The XML output from the sysmain.sdb on my Windows 7 x64 system can be found here.

一个有用的起点是在文件中搜索字符串" GenericInstaller ".您会找到与文件名匹配的<exe>配置文件("*instal*"，"*setup*"，"trustedinstaller.exe"等)，校验和，文件版本信息字符串("InstallShield*"，""等)和其他各种属性.有时甚至可以识别其他文件的存在，例如"EULA.rtf".

A useful starting point would be to search the file for the string "GenericInstaller". You'll find <exe> profiles matching against filenames ("*instal*", "*setup*", "trustedinstaller.exe", etc.), checksums, file version information strings ("InstallShield*", "RTPatch Executable", etc.) and other various attributes. It sometimes even recognises the presence of other files such as "EULA.rtf".

要提取用于安装程序检测的文件名模式的完整列表并不容易，因为安装程序似乎有许多不同的分类("GenericInstaller"，"SpecificInstaller"，"MozillaFirefoxSetup"等).但是，我敢肯定，到目前为止阅读过的任何人都可以通过深入研究XML来找到所需的信息.

To extract a full list of filename patterns used for installer detection is a bit nontrivial since there seems to be a number of different classifications for installers ("GenericInstaller", "SpecificInstaller", "MozillaFirefoxSetup", etc.). But I'm sure anyone who's read this far will be able to find the information they need by digging around in the XML.

这篇关于Windows Installer检测:关键字的完整列表是什么?的文章就介绍到这了，希望我们推荐的答案对大家有所帮助，也希望大家多多支持IT屋！