Technical Information
- [<HKLM>\SOFTWARE\Microsoft\Windows\CurrentVersion\Run] 'Malware Cleaner' = '<Full path to file> /startup'
- [<HKLM>\SOFTWARE\Microsoft\Windows\CurrentVersion\Run] 'Malware Cleaner' = '%ProgramFiles%\Wonj\0168376.exe /startup'
- Windows Security Center
- %ProgramFiles%\Wonj\0168376.exe
- %HOMEPATH%\Desktop\Malware Cleaner.lnk
- %HOMEPATH%\Start Menu\Malware Cleaner\Malware Cleaner.lnk
- %HOMEPATH%\Start Menu\Malware Cleaner\Uninstall.lnk
- ClassName: 'msctls_updown32' WindowName: ''