Техническая информация
- [<HKLM>\SYSTEM\ControlSet001\Services\Poweyciv] 'Start' = '00000002'
- %PROGRAM_FILES%\Windows NT\LKiks.exe
- %PROGRAM_FILES%\l8.exe
- %TEMP%\57813673.tmp
- %PROGRAM_FILES%\l8.exe
- %PROGRAM_FILES%\Windows NT\LKiks.exe
- %PROGRAM_FILES%\l8.exe
- %TEMP%\57813673.tmp в %PROGRAM_FILES%\Windows NT\LKiks.exe
- '31###.rhelper.com':4007
- DNS ASK 31###.rhelper.com
- ClassName: '' WindowName: '????????????'
- ClassName: '' WindowName: '???????? ????'
- ClassName: '' WindowName: '????????????????'
- ClassName: 'EDIT' WindowName: ''
- ClassName: 'Shell_TrayWnd' WindowName: ''