Technical Information
- [<HKCU>\SOFTWARE\Microsoft\Windows\CurrentVersion\Run] 'Host Process for Windows Services' = '%APPDATA%\svhost.exe'
- [<HKCU>\SOFTWARE\Microsoft\Windows\CurrentVersion\Run] 'Client Server Runtime Process' = '%WINDIR%\cssrs.exe'
- %APPDATA%\svhost.exe
- %WINDIR%\cssrs.exe
- %APPDATA%\svhost.exe
- %WINDIR%\cssrs.exe
- '%APPDATA%\svhost.exe'
- '%WINDIR%\cssrs.exe'