Technical Information
- [<HKCU>\Software\Microsoft\Windows\CurrentVersion\Run] 'Ms.word' = '%APPDATA%\WINWORD.EXE'
- <Full path to file>.doc
- %APPDATA%\WINWORD.EXE
- <Full path to file>.doc
- ClassName: 'WordPadClass' WindowName: ''
- '%ProgramFiles%\Windows NT\Accessories\wordpad.exe' "<Full path to file>.doc"