Техническая информация
- [<HKLM>\SYSTEM\ControlSet001\Services\{79007602-0CDB-4405-9DBF-1257BB3226ED}] 'ImagePath' = '%WINDIR%\win32k.sys:1'
- [<HKLM>\SYSTEM\ControlSet001\Services\{79007602-0CDB-4405-9DBF-1257BB3226EE}] 'ImagePath' = '%WINDIR%\win32k.sys:2'
- [<HKLM>\SYSTEM\ControlSet001\Services\{79007602-0CDB-4405-9DBF-1257BB3226EE}] 'ImagePath' = '%WINDIR%\win32k.sys:2 '
- [<HKLM>\SYSTEM\ControlSet001\Services\{79007602-0CDB-4405-9DBF-1257BB3226ED}] 'ImagePath' = '%WINDIR%\win32k.sys:1 '
- <SYSTEM32>\eventlog.dll
- <SYSTEM32>\eventlog.dll
- <SYSTEM32>\winlogon.exe
- <SYSTEM32>\smss.exe
- %ALLUSERSPROFILE%\Documents\Thumbs.db
- %WINDIR%\win32k.sys:2
- %WINDIR%\win32k.sys:1
- <SYSTEM32>\config\SysEvent.Evt
- <SYSTEM32>\eventlog.dll в <SYSTEM32>\logevent.dll