Техническая информация
- [<HKLM>\SYSTEM\ControlSet001\Services\.rasl2tp] 'ImagePath' = '\*'
- <SYSTEM32>\winlogon.exe
- <SYSTEM32>\smss.exe
- C:\System Volume Information\_restore{E7F0F64C-F7E5-4319-8757-E9A20C1C4E14}\fifo.log
- C:\System Volume Information\_restore{E7F0F64C-F7E5-4319-8757-E9A20C1C4E14}\RP15\rp.log
- C:\System Volume Information\_restore{E7F0F64C-F7E5-4319-8757-E9A20C1C4E14}\RP15\RestorePointSize
- \GLOBAL??\ACPI#PNP0303#2&da1a3ff&0\{1B372133-BFFA-4dba-9CCF-5474BED6A9F6}
- \GLOBAL??\ACPI#PNP0303#2&da1a3ff&0
- <SYSTEM32>\config\alehhooo
- \GLOBAL??\ACPI#PNP0303#2&da1a3ff&0\L\alehhooo