Technical Information
- [<HKLM>\SYSTEM\ControlSet001\Services\haspflt] 'Start' = '00000002'
- [<HKLM>\SYSTEM\ControlSet001\Services\haspflt] 'ImagePath' = '<DRIVERS>\haspflt.sys'
- '%TEMP%\RarSFX0\Drv\DevCtrl.exe' -instDriver <DRIVERS>\haspflt.sys haspflt
- '%TEMP%\RarSFX0\Drv\DevCtrl.exe' -auto haspflt
- '%TEMP%\RarSFX0\Drv\DevCtrl.exe' -start haspflt
- '%TEMP%\RarSFX0\Drv\DevCtrl.exe' -remove haspflt
- '<SYSTEM32>\cmd.exe' /c ""%TEMP%\RarSFX0\Install.bat" "
- '%WINDIR%\regedit.exe' -s IndorCAD.reg
- '%TEMP%\RarSFX0\Drv\DevCtrl.exe' -stop haspflt
- %TEMP%\RarSFX0\IndorCAD.reg
- <DRIVERS>\haspflt.sys
- %TEMP%\RarSFX0\Drv\haspflt.sys
- %TEMP%\RarSFX0\Install.bat
- %TEMP%\RarSFX0\Drv\DevCtrl.exe
- ClassName: 'RegEdit_RegEdit' WindowName: ''
- ClassName: 'Shell_TrayWnd' WindowName: ''
- ClassName: 'EDIT' WindowName: ''