Техническая информация
- [<HKLM>\SYSTEM\ControlSet001\Control\SecurityProviders] 'SecurityProviders' = 'credssp.dll, OgcifpevRabw.dll'
- '<SYSTEM32>\wlrmdr.exe' -1 -f 2 -t You are about to be logged off -m The update is installed. Restart required. -a 3
- '<SYSTEM32>\LogonUI.exe' /flags:0x0
- <SYSTEM32>\OgcifpevRabw.dll
- ClassName: 'Shell_TrayWnd' WindowName: '(null)'