Technical Information
- [<HKLM>\SYSTEM\ControlSet001\Services\TTProtect] 'ImagePath' = '%TEMP%\yzambbtmbz.sys'
- %TEMP%\yzambbtmbz.sys
- %WINDIR%\TTProtect.ini
- <ANALYSETOOLS_DIR>\LoadLib\35<LOADLIB.EXE>
- <ANALYSETOOLS_DIR>\LoadLib\35<LOADLIB.EXE>
- %TEMP%\yzambbtmbz.sys
- %TEMP%\yzambbtmbz.sys
- ClassName: 'Shell_TrayWnd' WindowName: ''