Техническая информация
- [<HKLM>\SYSTEM\ControlSet002\Services\WindowsClientServerRunTimeSubsystem] 'Start' = '00000002'
- [<HKLM>\SYSTEM\ControlSet002\Services\WindowsClientServerRunTimeSubsystem] 'ImagePath' = '%SystemRoot%\system32\svchost.exe -k Wcsrss'
- [<HKLM>\SYSTEM\ControlSet001\Services\WindowsClientServerRunTimeSubsystem] 'Start' = '00000002'
- <SYSTEM32>\svchost.exe -k Wcsrss
- <SYSTEM32>\netsh.exe
- ClassName: 'PROCMON_WINDOW_CLASS' WindowName: ''
- ClassName: 'OLLYDBG' WindowName: ''
- %WINDIR%\csrss.dll
- %TEMP%\1320973780.htm
- %TEMP%\1320973780.swf
- %TEMP%\1320973780.swf
- %TEMP%\1320973780.htm
- ClassName: 'MS_AutodialMonitor' WindowName: ''
- ClassName: 'MS_WebcheckMonitor' WindowName: ''
- ClassName: 'Shell_TrayWnd' WindowName: ''
- ClassName: 'WinDbgFrameClass' WindowName: ''
- ClassName: 'PROCEXPL' WindowName: ''
- ClassName: '' WindowName: ''