Техническая информация
- [<HKLM>\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Winlogon] 'Shell' = 'explorer.exe %WINDIR%\Media\Installed\lsass.exe'
- %WINDIR%\Media\Installed\MSWINSCK.OCX
- %WINDIR%\Media\Installed\lsass.exe
- %WINDIR%\Media\Installed\MSWINSCK.OCX
- %WINDIR%\Media\Installed\lsass.exe