Technical Information
- [<HKLM>\System\CurrentControlSet\Services\WFLASH] 'ImagePath' = '%WINDIR%\Temp\WFLASH.SYS'
- 'WFLASH' %WINDIR%\Temp\WFLASH.SYS
- %WINDIR%\temp\wflash.sys
- %WINDIR%\temp\udd619f.tmp
- %WINDIR%\temp\udd619f.tmp
- %WINDIR%\temp\wflash.sys
- '<SYSTEM32>\cmd.exe' /c del %WINDIR%\Temp\wflash.sys >NUL