Technical Information
- [HKLM\System\CurrentControlSet\Services\kl] 'Start' = '00000002'
- [HKLM\System\CurrentControlSet\Services\kl] 'ImagePath' = 'C:\users\public\kl.sys'
- 'kl' C:\users\public\kl.sys
- C:\users\public\kl.sys
- C:\users\public\rsndispot.sys
- %WINDIR%\temp\udde955.tmp
- %WINDIR%\temp\udde955.tmp