Technical Information
- [HKCU\Software\Microsoft\Windows\CurrentVersion\Run] 'MyEomp' = 'D:\Program Files\MyEomp\MyEomp.exe'
- <Current directory>\_deleteme.bat
- '%WINDIR%\syswow64\cmd.exe' /c <Current directory>\_DeleteMe.bat' (with hidden window)
- '%WINDIR%\syswow64\cmd.exe' /c <Current directory>\_DeleteMe.bat