Техническая информация
- [<HKLM>\SOFTWARE\Microsoft\Active Setup\Installed Components\{F146C9B1-VMVQ-A9RC-NUFL-D0BA00B4E999}] 'StubPath' = '%WINDIR%\ntuser.exe'
- [<HKLM>\SOFTWARE\Microsoft\Active Setup\Installed Components\{Y479C6D0-OTRW-U5GH-S1EE-E0AC10B4E666}] 'StubPath' = '%WINDIR%\ntuser.exe'
- [<HKLM>\SOFTWARE\Microsoft\Windows\CurrentVersion\Run] 'ntuser' = '%WINDIR%\ntuser.exe'
- %WINDIR%\ntuser.exe
- %WINDIR%\ntuser.dll