Техническая информация
- [<HKLM>\SYSTEM\ControlSet001\Control\Lsa] 'Notification Packages' = 'scecli\nwimsvc'
- '<SYSTEM32>\rundll32.exe' winimcnt.dll ?AppStart@@YAHXZ
- <SYSTEM32>\wimsvc.dll
- <SYSTEM32>\winimcnt.dll
- <SYSTEM32>\winimse.dll
- <SYSTEM32>\winimstor.dll
- <SYSTEM32>\msgkk.dll
- <SYSTEM32>\wimlog.dll