Technical Information
- [<HKCU>\Software\Microsoft\Windows\CurrentVersion\Run] 'Favourapp' = '%APPDATA%\Favourapp\Favourapp.exe'
- [<HKCU>\Software\RimArts\B2\Settings]
- [<HKCU>\SOFTWARE\Martin Prikryl\WinSCP 2\Sessions]
- [<HKCU>\Software\FTPWare\COREFTP\Sites]
- %APPDATA%\thunderbird\profiles.ini
- %TEMP%\dw.log
- %TEMP%\151e54.dmp
- %APPDATA%\favourapp\favourapp.exe
- %APPDATA%\favourapp\favourapp.exe
- '%CommonProgramFiles%\Microsoft Shared\DW\DW20.EXE' -x -s 452