Техническая информация
- [<HKLM>\SYSTEM\ControlSet001\Services\WinLogonServer] 'ImagePath' = '<LS_APPDATA>\WinLogonServer\<Имя файла>.exe'
- [<HKLM>\SYSTEM\ControlSet001\Services\WinLogonServer] 'Start' = '00000002'
- C:\Documents and Settings\LocalService\Local Settings\Application Data\WinLogonServer\winlogondb.s3db-journal
- C:\Documents and Settings\LocalService\Local Settings\Application Data\WinLogonServer\ssleay32.dll
- C:\test.txt
- C:\Documents and Settings\LocalService\Local Settings\Application Data\WinLogonServer\winlogondb.s3db
- C:\Documents and Settings\LocalService\Local Settings\Application Data\WinLogonServer\sqlite.dll
- <LS_APPDATA>\WinLogonServer\<Имя файла>.exe
- C:\Documents and Settings\LocalService\Local Settings\Application Data\WinLogonServer\libeay32.dll
- C:\Documents and Settings\LocalService\Local Settings\Application Data\WinLogonServer\sqlite3.dll
- C:\Documents and Settings\LocalService\Local Settings\Application Data\WinLogonServer\winlogondb.s3db-journal
- C:\Documents and Settings\LocalService\Local Settings\Application Data\WinLogonServer\winlogondb.s3db-journal
- '<LS_APPDATA>\WinLogonServer\<Имя файла>.exe'