Техническая информация
- %HOMEPATH%\Start Menu\Programs\Startup\logoff.lnk
- '%APPDATA%\Microsoft\Windows\dllcache\logoff.exe'
- '<SYSTEM32>\svchost.exe' -k netsvcs
- %APPDATA%\Microsoft\Windows\dllcache\RCX2.tmp
- %TEMP%\tmp1.tmp
- %APPDATA%\Microsoft\Windows\dllcache\RCX3.tmp
- C:\Documents and Settings\Default User\Start Menu\Programs\Startup\logoff.lnk
- %TEMP%\tmp4.tmp
- %APPDATA%\Microsoft\Protect\CREDHIST
- C:\System Volume Information\EFS0.LOG
- %APPDATA%\Microsoft\Crypto\RSA\S-1-5-21-2052111302-484763869-725345543-1003\dabbc2a767b57a1f873e88344beb18c4_23ef5514-3059-436f-a4a7-4cefaab20eb1
- %APPDATA%\Microsoft\Windows\dllcache\logoff.exe
- %APPDATA%\Microsoft\SystemCertificates\My\Certificates\46BD63AF62833E880A2FA078B7D4C4B2651BEB6A
- %TEMP%\tmp1.tmp
- %TEMP%\tmp4.tmp
- C:\System Volume Information\EFS0.LOG
- %APPDATA%\Microsoft\Windows\dllcache\logoff.exe
- %APPDATA%\Microsoft\Windows\dllcache\RCX3.tmp в %APPDATA%\Microsoft\Windows\dllcache\logoff.exe
- %APPDATA%\Microsoft\Windows\dllcache\RCX2.tmp в %APPDATA%\Microsoft\Windows\dllcache\logoff.exe
- ClassName: 'NotifyIconOverflowWindow' WindowName: ''
- ClassName: 'TrayNotifyWnd' WindowName: ''
- ClassName: 'Shell_TrayWnd' WindowName: ''