Техническая информация
- [<HKLM>\SOFTWARE\Microsoft\Windows\CurrentVersion\Run] 'AhnUpadate' = '"C:\ProgramData\AhnLab\AhnSvc.exe" /run'
- 'C:\ProgramData\AhnLab\AhnSvc.exe' /run
- C:\ProgramData\AhnLab\AhnSvc.exe
- C:\ProgramData\AhnLab\AhnSvc.exe в C:\ProgramData\AhnLab\AhnSvc.exe_
- DNS ASK www.ki##10scom
- DNS ASK dn#.##ftncsi.com
- DNS ASK www.ic##ay.net
- ClassName: 'Shell_TrayWnd' WindowName: ''