Техническая информация
- [<HKLM>\SYSTEM\ControlSet001\Services\TermService] 'Start' = '00000002'
- [<HKLM>\SYSTEM\ControlSet001\Services\SVCM] 'Start' = '00000002'
- [<HKLM>\SYSTEM\ControlSet001\Services\SVCW] 'Start' = '00000002'
- '<SYSTEM32>\sc.exe' description SVCM "If this service is disabled, any services that explicitly depend on it will fail to start."
- '<SYSTEM32>\sc.exe' description SVCW "If this service is disabled, the web server and its dependencies will fail to start."
- '<SYSTEM32>\sc.exe' config TermService start= auto
- '<SYSTEM32>\sc.exe' config TermService depend= RPCSS/SVCM
- '<SYSTEM32>\net.exe' STOP SVCM
- '<SYSTEM32>\net.exe' STOP TerminalService
- '<SYSTEM32>\net1.exe' STOP SVCM
- '<SYSTEM32>\net1.exe' STOP TerminalService
- %TEMP%\aut3.tmp
- %TEMP%\aut4.tmp
- %TEMP%\aut1.tmp
- %TEMP%\aut2.tmp
- %TEMP%\aut3.tmp
- %TEMP%\aut4.tmp
- %TEMP%\aut1.tmp
- %TEMP%\aut2.tmp
- ClassName: 'Shell_TrayWnd' WindowName: '(null)'