Техническая информация
- [<HKLM>\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Winlogon] 'Shell' = 'explorer.exe <SYSTEM32>\userinit32.exe'
- '<SYSTEM32>\sxmm.dll' service disabled SharedAccess
- '<SYSTEM32>\sxmm.dll' service stop SharedAccess
- '<SYSTEM32>\userinit32.exe'
- '<SYSTEM32>\net1.exe' stop Messenger
- '<SYSTEM32>\net1.exe' stop TlntSvr
- '<SYSTEM32>\net1.exe' stop Themes
- '<SYSTEM32>\net.exe' stop Themes
- '<SYSTEM32>\net.exe' stop TlntSvr
- '<SYSTEM32>\net.exe' stop Messenger
- <SYSTEM32>\sxmm.dll
- <SYSTEM32>\userinit32.exe
- ClassName: '(null)' WindowName: '3.5 Floppy (A:)'
- ClassName: '(null)' WindowName: '3.5 Floppy (B:)'
- ClassName: 'Shell_TrayWnd' WindowName: '(null)'
- ClassName: 'BUTTON' WindowName: '(null)'