Technical Information
- [<HKCU>\Software\Microsoft\Windows\CurrentVersion\Run] 'Microsoft Internet Explorer' = '<Current directory>\Microsoft Internet Explorer.lnk'
- <SYSTEM32>\notepad.exe
- <Current directory>\iexplore.vbs
- <Current directory>\microsoft internet explorer.lnk
- <Current directory>\microsoft internet explorer.lnk
- '<SYSTEM32>\notepad.exe' ' (with hidden window)
- '<SYSTEM32>\notepad.exe'