Техническая информация
- [<HKLM>\SYSTEM\CurrentControlSet\Control\Session Manager] 'BootExecute' = 'autocheck autochk *'
- [<HKLM>\SYSTEM\CurrentControlSet\Services\Rpcnet] 'ImagePath' = '%WINDIR%\SysWOW64\rpcnetp.exe'
- [<HKLM>\SYSTEM\CurrentControlSet\Services\Rpcnet] 'Start' = '00000002'