|
|
本帖最后由 wuliyen 于 2026-9-17 17:38 编辑
初步静态分析了下,这个软件应该是通过远程方式连接的,精简版远程是完全禁用的,请尝试修改下面注册表的内容后重启再试试(自行AI注册表内容具体含义)
- Windows Registry Editor Version 5.00
- [HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Control\Terminal Server]
- "fDenyTSConnections"=dword:00000001
- [HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Control\Remote Assistance]
- "fAllowToGetHelp"=dword:00000000
- [HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Services\SessionEnv]
- "Start"=dword:00000004
- [HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Services\UmRdpService]
- "Start"=dword:00000004
- [HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows NT\Terminal Services]
- "fAllowToGetHelp"=dword:00000000
- "fAllowUnsolicited"=dword:00000000
复制代码 |
|