Техническая информация
- [<HKLM>\SOFTWARE\Microsoft\Windows\CurrentVersion\Run] 'csrss' = '<SYSTEM32>\dll\csrss.exe'
- '<SYSTEM32>\cacls.exe' %PROGRAM_FILES%\Accessories\*.* /G Everyone:f
- '<SYSTEM32>\cacls.exe' %PROGRAM_FILES%\Accessories /G Everyone:f
- '<SYSTEM32>\cacls.exe' %PROGRAM_FILES%\Accessories\Common\*.* /G Everyone:f
- '<SYSTEM32>\cacls.exe' %PROGRAM_FILES%\Accessories\Common /G Everyone:f
- '<SYSTEM32>\cacls.exe' %PROGRAM_FILES%\Access~1\Common\*.* /G Everyone:f
- '<SYSTEM32>\cacls.exe' %PROGRAM_FILES%\Access~1 /G Everyone:f
- '<SYSTEM32>\cacls.exe' %WINDIR%\DLL /G Everyone:f
- '<SYSTEM32>\cacls.exe' %PROGRAM_FILES%\Access~1\Common /G Everyone:f
- '<SYSTEM32>\cacls.exe' %PROGRAM_FILES%\Access~1\*.* /G Everyone:f
- ClassName: 'MS_WINHELP' WindowName: '(null)'