Technical Information
- [<HKLM>\SYSTEM\ControlSet001\Services\lirsgt] 'Start' = '00000002'
- [<HKLM>\SYSTEM\ControlSet001\Services\lirsgt] 'ImagePath' = 'system32\DRIVERS\lirsgt.sys'
- [<HKLM>\SYSTEM\ControlSet001\Services\atksgt] 'Start' = '00000002'
- [<HKLM>\SYSTEM\ControlSet001\Services\atksgt] 'ImagePath' = 'system32\DRIVERS\atksgt.sys'
- <DRIVERS>\lirsgt.sys
- <DRIVERS>\atksgt.sys