Техническая информация
- [<HKLM>\SOFTWARE\Microsoft\Windows\CurrentVersion\Run] 'csrss' = '<SYSTEM32>\dll\csrss.exe'
- <SYSTEM32>\cacls.exe %PROGRAM_FILES%\Accessories\*.* /G Everyone:f
- <SYSTEM32>\cacls.exe %PROGRAM_FILES%\Accessories /G Everyone:f
- <SYSTEM32>\cacls.exe %PROGRAM_FILES%\Accessories\Common /G Everyone:f
- <SYSTEM32>\regsvr32.exe <SYSTEM32>\MSWINSCK.OCX
- <SYSTEM32>\cacls.exe %PROGRAM_FILES%\Accessories\Common\*.* /G Everyone:f
- <SYSTEM32>\cacls.exe "%PROGRAM_FILES%\Access~1" /G Everyone:f
- <SYSTEM32>\cacls.exe %WINDIR%\DLL /G Everyone:f
- <SYSTEM32>\cacls.exe "%PROGRAM_FILES%\Access~1\*.*" /G Everyone:f
- <SYSTEM32>\cacls.exe "%PROGRAM_FILES%\Access~1\Common\*.*" /G Everyone:f
- <SYSTEM32>\cacls.exe "%PROGRAM_FILES%\Access~1\Common" /G Everyone:f
- ClassName: 'MS_WINHELP' WindowName: ''
- ClassName: 'Shell_TrayWnd' WindowName: ''