Technical Information
- [<HKLM>\SYSTEM\ControlSet001\Services\FtDevDsk] 'ImagePath' = '%TEMP%\<File name>\bin\FtDevDsk.sys'
- %TEMP%\<File name>\bin\ftAgtUi.exe
- %TEMP%\<File name>\bin\ftDevDsk.sys
- %TEMP%\<File name>\bin\ftDevFlt.sys
- %TEMP%\<File name>\bin\DsmXmlObj.dll
- %TEMP%\<File name>\bin\detoured.dll
- %TEMP%\<File name>\bin\FtOflLdr.dll
- %TEMP%\<File name>\bin\FtOflCtl.dll
- %TEMP%\<File name>\bin\Wow64Ldr.exe
- %TEMP%\<File name>\bin\DrmVDisk.zip
- %TEMP%\<File name>\bin\FtOflScr.dll
- %TEMP%\<File name>\bin\FtMonitor.exe
- %TEMP%\<File name>\DrmVDisk.tmp
- '%TEMP%\<File name>\bin\ftAgtUi.exe' <Full path to file>
- '%TEMP%\<File name>\bin\FtMonitor.exe'