Technical Information
- [<HKLM>\SYSTEM\ControlSet001\Services\lirsgt] 'Start' = '00000002'
- [<HKLM>\SYSTEM\ControlSet001\Services\lirsgt] 'ImagePath' = 'system32\DRIVERS\lirsgt.sys'
- [<HKLM>\SYSTEM\ControlSet001\Services\atksgt] 'Start' = '00000002'
- [<HKLM>\SYSTEM\ControlSet001\Services\atksgt] 'ImagePath' = 'system32\DRIVERS\atksgt.sys'
- <Current directory>\TagesSetup.exe
- <DRIVERS>\lirsgt.sys
- <DRIVERS>\atksgt.sys
- <Current directory>\TagesSetup.exe
- '<Current directory>\TagesSetup.exe' 1