Призраки в мире программ: 0x80004015 -- NT Service out-of-body experience

  • Article

?????? ? ????? New Age ????? ????? ????????? ?? ??? ?????????? out-of-body-experience, ????? ???????????? ?????, ?????????? ??????????? ??????, ??????? ?? ?????? ??????? ? ??? ????? ??????. ??????? ? ?????????, ??? ??? ?? ????????????? ???????????? ???????, ? ??????????? ????? ???? ?????????!

????, ???????? ?? NT service, ? ? ??? - COM ??????. ???????????, ????? ?? ??????? ??? ????? ??????? ??????? CoRegisterClassObject - ??? ?? ????????? ???????, ??? ????????? class factory ??? ???????? ??????????? ??????? ???????. ????? ?? ????? ?????? ?????????? ? ??? ?? ?????????????? ???? ?????? ? CoRegisterClassObject ?????????? ?????? 0x80080005, ??????? ???????? ??? ???????? ??? ?????????? COM ??????? ?? ????????? ? ??????? ???????? ????????. ??, ?????????, ??? ??? ????? ?? ?????????? ???????????? ?????? - ??? ???????????????? RunAs ????????? ??? AppId ?????? ???????, ? ?? ????? ?? ??????!!!

? ?????? ?????? ???????????. ???? ????????????? ????????? ? ??????? ??? ??????? shutdown event, ????? ????, ??? ??????? ????? ??? ? ????????? ?????? ? ??? ????. ???????????, ??? ????? ??????? ????????? ??????? ?? ?????? ?????, ??? ???????? SYSTEM ??? ?????????????, ? ?? ????????? ? ????????? ????, ????? ??????? ???????????????? ?????????, ?????? ? ???????? ???????? ??? ????????????? ??? ???????????? ? ???? ??. ???????? ? ???, ??? ???????????? CoRegisterClassObject ? ?????? ID ?? ????????? ???? ????? "????????????????" ????????, ??? ? ?????????? ? ??? ???????? ????.

??, ? ???? ???????: ???? ??? ??? ????? ?????????? ?????? ? ????? ????? shut down, ?? ??? ?????? ????? ?????? ????????????... ???? ? ????-??? ???????, ? ???? ????? ???? ???????!!!