Техническая информация
- [<HKLM>\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Winlogon\Notify\smcss] 'Startup' = 'WLEvtStartup'
- [<HKLM>\SOFTWARE\Microsoft\Windows\CurrentVersion\Run] 'smcss' = '<SYSTEM32>\smcss.exe'
- [<HKLM>\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Winlogon\Notify\smcss] 'DllName' = 'smcss.dll'
- [<HKLM>\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Winlogon\Notify\smcss] 'Logon' = 'WLEvtLogon'
- <SYSTEM32>\smcss.exe
- <SYSTEM32>\smcss.exe
- <SYSTEM32>\smcss.exe
- ClassName: 'Shell_TrayWnd' WindowName: ''