Technical Information
- [<HKLM>\System\CurrentControlSet\Services\dcrypt] 'Start' = '00000000'
- [<HKLM>\System\CurrentControlSet\Services\dcrypt] 'ImagePath' = 'system32\drivers\dcrypt.sys'
- <Current directory>\inst32.exe
- <Current directory>\dcrypt.sys
- <Current directory>\igfxen.exe
- <Current directory>\dcapi.dll
- <DRIVERS>\dcrypt.sys
- <Current directory>\inst32.exe
- <Current directory>\dcrypt.sys
- '<Current directory>\inst32.exe'
- '<Current directory>\inst32.exe' ' (with hidden window)