Техническая информация
- [<HKLM>\SOFTWARE\Microsoft\Windows\CurrentVersion\Run] 'SkypePM' = '<Текущая директория>\Simple-injector.exe'
- <SYSTEM32>\taskkill.exe /f /im services.exe
- <SYSTEM32>\taskkill.exe /f /im dwm.exe
- <SYSTEM32>\svchost.exe -k LocalService
- <SYSTEM32>\svchost.exe -k rpcss
- <SYSTEM32>\taskkill.exe /f /im explorer.exe
- <SYSTEM32>\taskkill.exe /f /im javaw.exe
- <SYSTEM32>\taskkill.exe /f /im csrss.exe
- <SYSTEM32>\taskkill.exe /f /im svchost.exe
- <SYSTEM32>\svchost.exe
- ClassName: '' WindowName: ''
- ClassName: 'Shell_TrayWnd' WindowName: ''