Техническая информация
- [<HKLM>\SYSTEM\ControlSet001\Services\NtLmSsp] 'Start' = '00000002'
- [<HKLM>\SYSTEM\ControlSet001\Services\lanmanserver] 'Start' = '00000002'
- [<HKLM>\SYSTEM\ControlSet001\Services\LmHosts] 'Start' = '00000002'
- [<HKLM>\SYSTEM\ControlSet001\Services\RpcLocator] 'Start' = '00000002'
- '<SYSTEM32>\sc.exe' config lanmanserver start= auto
- '<SYSTEM32>\wbem\wmiadap.exe' /R /T
- '<SYSTEM32>\sc.exe' config SharedAccess start= disabled
- '<SYSTEM32>\sc.exe' config NtlmSsp start= auto
- '<SYSTEM32>\mode.com' con: cols=55 lines=5
- '<SYSTEM32>\sc.exe' config LmHosts start= auto
- '<SYSTEM32>\sc.exe' config RpcLocator start= auto
- %TEMP%\bt6753.bat
- %TEMP%\bt6753.bat
- <SYSTEM32>\PerfStringBackup.TMP
- <SYSTEM32>\wbem\Performance\WmiApRpl.ini