Technical Information
- [<HKLM>\SOFTWARE\Wow6432Node\Microsoft\Windows\CurrentVersion\Run] '<File name>.exe' = '%ProgramFiles%'
- [<HKCU>\Software\FTPWare\COREFTP\Sites\]
- [<HKCU>\Software\Valve\Half-Life\Settings]
- [<HKCU>\Software\Microsoft\MSNMessenger]
- %ProgramFiles%<File name>.exe
- <Current directory>\workgroup