Техническая информация
- [<HKLM>\SYSTEM\ControlSet001\Services\CfgClt] 'Start' = '00000002'
- [<HKLM>\SYSTEM\ControlSet001\Services\SharedAccess\Parameters\FirewallPolicy\StandardProfile\AuthorizedApplications\List] '<SYSTEM32>\CfgClt.exe' = '<SYSTEM32>\CfgClt.exe:*:Enabled:CfgClt'
- <SYSTEM32>\CfgClt.exe StartService
- <SYSTEM32>\CfgClt.exe.tmp
- %WINDIR%\bootstat.dat