Техническая информация
- [HKLM\System\CurrentControlSet\Services\fastuserswitchingcompatibility] 'Start' = '00000002'
- [HKLM\System\CurrentControlSet\Services\fastuserswitchingcompatibility] 'ImagePath' = '<SYSTEM32>\svchost.exe -k netsvcs'
- [HKLM\SYSTEM\CurrentControlSet\Services\fastuserswitchingcompatibility\Parameters] 'ServiceDll' = '<SYSTEM32>\ntfastuserswitchingcompatibility.dll'
- 'fastuserswitchingcompatibility' <SYSTEM32>\svchost.exe -k netsvcs
- %TEMP%\1124938_re.tmp
- %TEMP%\1124938_re.tmp в %WINDIR%\syswow64\ntfastuserswitchingcompatibility.dll