Техническая информация
- [<HKLM>\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Winlogon\Notify\wminotify] 'Startup' = 'EventStartup'
- [<HKLM>\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Winlogon\Notify\wminotify] 'DllName' = 'wminotify.dll'
- '%WINDIR%\regedit.exe' -s %WINDIR%\addins\On.reg
- %WINDIR%\addins\On.reg
- <SYSTEM32>\wminotify.dll
- %WINDIR%\addins\On.reg
- ClassName: 'RegEdit_RegEdit' WindowName: '(null)'