Technical Information
- [<HKLM>\SOFTWARE\Microsoft\Windows\CurrentVersion\Run] 'F' = '%WINDIR%\systen\a.exe'
- '<Current directory>\autorun.exe'
- %WINDIR%\systen\i\33.ico
- %WINDIR%\systen\i\34.ico
- %WINDIR%\systen\i\31.ico
- %WINDIR%\systen\i\32.ico
- %WINDIR%\systen\i\37.ico
- %WINDIR%\systen\i\38.ico
- %WINDIR%\systen\i\35.ico
- %WINDIR%\systen\i\36.ico
- %WINDIR%\systen\i\30.ico
- %WINDIR%\systen\i\24.ico
- %WINDIR%\systen\i\25.ico
- %WINDIR%\systen\i\22.ico
- %WINDIR%\systen\i\23.ico
- %WINDIR%\systen\i\28.ico
- %WINDIR%\systen\i\29.ico
- %WINDIR%\systen\i\26.ico
- %WINDIR%\systen\i\27.ico
- %WINDIR%\systen\i\50.ico
- %WINDIR%\systen\i\51.ico
- %WINDIR%\systen\i\48.ico
- %WINDIR%\systen\i\49.ico
- %WINDIR%\systen\i\54.ico
- %WINDIR%\systen\i\55.ico
- %WINDIR%\systen\i\52.ico
- %WINDIR%\systen\i\53.ico
- %WINDIR%\systen\i\47.ico
- %WINDIR%\systen\i\41.ico
- %WINDIR%\systen\i\42.ico
- %WINDIR%\systen\i\39.ico
- %WINDIR%\systen\i\40.ico
- %WINDIR%\systen\i\45.ico
- %WINDIR%\systen\i\46.ico
- %WINDIR%\systen\i\43.ico
- %WINDIR%\systen\i\44.ico
- %WINDIR%\systen\i\21.ico
- %WINDIR%\systen\i.exe
- %WINDIR%\systen\w.bmp
- %WINDIR%\systen\g.exe
- %WINDIR%\systen\e.ico
- %WINDIR%\systen\i\2.ico
- %WINDIR%\systen\i\3.ico
- %WINDIR%\systen\autorun.inf
- %WINDIR%\systen\i\1.ico
- %WINDIR%\systen\a.exe
- <Current directory>\AutoPlay\Plugins\F.lnk
- <Current directory>\AutoPlay\Scripts\F.lnk
- <Current directory>\AutoPlay\Icons\F.lnk
- <Current directory>\AutoPlay\Images\F.lnk
- <Current directory>\Data\i\F.lnk
- <Current directory>\Data\Thumbs.db
- <Current directory>\AutoPlay\Videos\F.lnk
- <Current directory>\Data\F.lnk
- %WINDIR%\systen\i\15.ico
- %WINDIR%\systen\i\16.ico
- %WINDIR%\systen\i\13.ico
- %WINDIR%\systen\i\14.ico
- %WINDIR%\systen\i\19.ico
- %WINDIR%\systen\i\20.ico
- %WINDIR%\systen\i\17.ico
- %WINDIR%\systen\i\18.ico
- %WINDIR%\systen\i\12.ico
- %WINDIR%\systen\i\6.ico
- %WINDIR%\systen\i\7.ico
- %WINDIR%\systen\i\4.ico
- %WINDIR%\systen\i\5.ico
- %WINDIR%\systen\i\10.ico
- %WINDIR%\systen\i\11.ico
- %WINDIR%\systen\i\8.ico
- %WINDIR%\systen\i\9.ico
- %WINDIR%\systen\i\102.ico
- %WINDIR%\systen\i\103.ico
- %WINDIR%\systen\i\100.ico
- %WINDIR%\systen\i\101.ico
- %WINDIR%\systen\i\106.ico
- %WINDIR%\systen\i\107.ico
- %WINDIR%\systen\i\104.ico
- %WINDIR%\systen\i\105.ico
- %WINDIR%\systen\i\99.ico
- %WINDIR%\systen\i\93.ico
- %WINDIR%\systen\i\94.ico
- %WINDIR%\systen\i\91.ico
- %WINDIR%\systen\i\92.ico
- %WINDIR%\systen\i\97.ico
- %WINDIR%\systen\i\98.ico
- %WINDIR%\systen\i\95.ico
- %WINDIR%\systen\i\96.ico
- %WINDIR%\systen\i\119.ico
- %WINDIR%\systen\i\120.ico
- %WINDIR%\systen\i\117.ico
- %WINDIR%\systen\i\118.ico
- %WINDIR%\systen\s
- %WINDIR%\grapnix\s
- %WINDIR%\systen\i\121.ico
- %WINDIR%\systen\i\122.ico
- %WINDIR%\systen\i\116.ico
- %WINDIR%\systen\i\110.ico
- %WINDIR%\systen\i\111.ico
- %WINDIR%\systen\i\108.ico
- %WINDIR%\systen\i\109.ico
- %WINDIR%\systen\i\114.ico
- %WINDIR%\systen\i\115.ico
- %WINDIR%\systen\i\112.ico
- %WINDIR%\systen\i\113.ico
- %WINDIR%\systen\i\90.ico
- %WINDIR%\systen\i\67.ico
- %WINDIR%\systen\i\68.ico
- %WINDIR%\systen\i\65.ico
- %WINDIR%\systen\i\66.ico
- %WINDIR%\systen\i\71.ico
- %WINDIR%\systen\i\72.ico
- %WINDIR%\systen\i\69.ico
- %WINDIR%\systen\i\70.ico
- %WINDIR%\systen\i\64.ico
- %WINDIR%\systen\i\58.ico
- %WINDIR%\systen\i\59.ico
- %WINDIR%\systen\i\56.ico
- %WINDIR%\systen\i\57.ico
- %WINDIR%\systen\i\62.ico
- %WINDIR%\systen\i\63.ico
- %WINDIR%\systen\i\60.ico
- %WINDIR%\systen\i\61.ico
- %WINDIR%\systen\i\84.ico
- %WINDIR%\systen\i\85.ico
- %WINDIR%\systen\i\82.ico
- %WINDIR%\systen\i\83.ico
- %WINDIR%\systen\i\88.ico
- %WINDIR%\systen\i\89.ico
- %WINDIR%\systen\i\86.ico
- %WINDIR%\systen\i\87.ico
- %WINDIR%\systen\i\81.ico
- %WINDIR%\systen\i\75.ico
- %WINDIR%\systen\i\76.ico
- %WINDIR%\systen\i\73.ico
- %WINDIR%\systen\i\74.ico
- %WINDIR%\systen\i\79.ico
- %WINDIR%\systen\i\80.ico
- %WINDIR%\systen\i\77.ico
- %WINDIR%\systen\i\78.ico
- <Current directory>\AutoPlay\Flash\F.lnk
- <Current directory>\Data\i\23.ico
- <Current directory>\Data\i\24.ico
- <Current directory>\Data\i\21.ico
- <Current directory>\Data\i\22.ico
- <Current directory>\Data\i\27.ico
- <Current directory>\Data\i\28.ico
- <Current directory>\Data\i\25.ico
- <Current directory>\Data\i\26.ico
- <Current directory>\Data\i\20.ico
- <Current directory>\Data\i\15.ico
- <Current directory>\Data\i\16.ico
- <Current directory>\Data\i\13.ico
- <Current directory>\Data\i\14.ico
- <Current directory>\Data\i\19.ico
- <Current directory>\Data\i\2.ico
- <Current directory>\Data\i\17.ico
- <Current directory>\Data\i\18.ico
- <Current directory>\Data\i\39.ico
- <Current directory>\Data\i\4.ico
- <Current directory>\Data\i\37.ico
- <Current directory>\Data\i\38.ico
- <Current directory>\Data\i\42.ico
- <Current directory>\Data\i\43.ico
- <Current directory>\Data\i\40.ico
- <Current directory>\Data\i\41.ico
- <Current directory>\Data\i\36.ico
- <Current directory>\Data\i\30.ico
- <Current directory>\Data\i\31.ico
- <Current directory>\Data\i\29.ico
- <Current directory>\Data\i\3.ico
- <Current directory>\Data\i\34.ico
- <Current directory>\Data\i\35.ico
- <Current directory>\Data\i\32.ico
- <Current directory>\Data\i\33.ico
- <Current directory>\Data\i\122.ico
- <Current directory>\Data\i\101.ico
- <Current directory>\Data\i\102.ico
- <Current directory>\Data\i\10.ico
- <Current directory>\Data\i\100.ico
- <Current directory>\Data\i\105.ico
- <Current directory>\Data\i\106.ico
- <Current directory>\Data\i\103.ico
- <Current directory>\Data\i\104.ico
- <Current directory>\Data\i\1.ico
- <Current directory>\AutoPlay\autorun.cdd
- <Current directory>\AutoPlay\Images\black.png
- <Current directory>\AutoPlay\Audio\Click1.ogg
- <Current directory>\AutoPlay\Audio\High1.ogg
- <Current directory>\Data\e.ico
- <Current directory>\Data\g.exe
- <Current directory>\Data\a.exe
- <Current directory>\Data\autorun.inf
- <Current directory>\Data\i\117.ico
- <Current directory>\Data\i\118.ico
- <Current directory>\Data\i\115.ico
- <Current directory>\Data\i\116.ico
- <Current directory>\Data\i\120.ico
- <Current directory>\Data\i\121.ico
- <Current directory>\Data\i\119.ico
- <Current directory>\Data\i\12.ico
- <Current directory>\Data\i\114.ico
- <Current directory>\Data\i\109.ico
- <Current directory>\Data\i\11.ico
- <Current directory>\Data\i\107.ico
- <Current directory>\Data\i\108.ico
- <Current directory>\Data\i\112.ico
- <Current directory>\Data\i\113.ico
- <Current directory>\Data\i\110.ico
- <Current directory>\Data\i\111.ico
- <Current directory>\Data\i\86.ico
- <Current directory>\Data\i\87.ico
- <Current directory>\Data\i\84.ico
- <Current directory>\Data\i\85.ico
- <Current directory>\Data\i\9.ico
- <Current directory>\Data\i\90.ico
- <Current directory>\Data\i\88.ico
- <Current directory>\Data\i\89.ico
- <Current directory>\Data\i\83.ico
- <Current directory>\Data\i\78.ico
- <Current directory>\Data\i\79.ico
- <Current directory>\Data\i\76.ico
- <Current directory>\Data\i\77.ico
- <Current directory>\Data\i\81.ico
- <Current directory>\Data\i\82.ico
- <Current directory>\Data\i\8.ico
- <Current directory>\Data\i\80.ico
- <Current directory>\Data\w.bmp
- <Current directory>\autorun.exe
- <Current directory>\Data\i\Thumbs.db
- <Current directory>\Data\i.exe
- <Current directory>\AutoPlay\Docs\F.lnk
- <Current directory>\AutoPlay\F.lnk
- <Current directory>\AutoPlay\Audio\F.lnk
- <Current directory>\AutoPlay\Buttons\F.lnk
- <Current directory>\Data\i\99.ico
- <Current directory>\Data\i\93.ico
- <Current directory>\Data\i\94.ico
- <Current directory>\Data\i\91.ico
- <Current directory>\Data\i\92.ico
- <Current directory>\Data\i\97.ico
- <Current directory>\Data\i\98.ico
- <Current directory>\Data\i\95.ico
- <Current directory>\Data\i\96.ico
- <Current directory>\Data\i\75.ico
- <Current directory>\Data\i\54.ico
- <Current directory>\Data\i\55.ico
- <Current directory>\Data\i\52.ico
- <Current directory>\Data\i\53.ico
- <Current directory>\Data\i\58.ico
- <Current directory>\Data\i\59.ico
- <Current directory>\Data\i\56.ico
- <Current directory>\Data\i\57.ico
- <Current directory>\Data\i\51.ico
- <Current directory>\Data\i\46.ico
- <Current directory>\Data\i\47.ico
- <Current directory>\Data\i\44.ico
- <Current directory>\Data\i\45.ico
- <Current directory>\Data\i\5.ico
- <Current directory>\Data\i\50.ico
- <Current directory>\Data\i\48.ico
- <Current directory>\Data\i\49.ico
- <Current directory>\Data\i\7.ico
- <Current directory>\Data\i\70.ico
- <Current directory>\Data\i\68.ico
- <Current directory>\Data\i\69.ico
- <Current directory>\Data\i\73.ico
- <Current directory>\Data\i\74.ico
- <Current directory>\Data\i\71.ico
- <Current directory>\Data\i\72.ico
- <Current directory>\Data\i\67.ico
- <Current directory>\Data\i\61.ico
- <Current directory>\Data\i\62.ico
- <Current directory>\Data\i\6.ico
- <Current directory>\Data\i\60.ico
- <Current directory>\Data\i\65.ico
- <Current directory>\Data\i\66.ico
- <Current directory>\Data\i\63.ico
- <Current directory>\Data\i\64.ico
- %WINDIR%\systen\g.exe
- %WINDIR%\systen\a.exe
- %WINDIR%\systen\e.ico
- %WINDIR%\systen\i.exe
- %WINDIR%\systen\autorun.inf
- <Current directory>\autorun.exe
- <Current directory>\Data\i\Thumbs.db
- %WINDIR%\systen\w.bmp
- <Current directory>\Data\Thumbs.db
- ClassName: 'MS_WINHELP' WindowName: '(null)'
- ClassName: 'Shell_TrayWnd' WindowName: '(null)'
- ClassName: 'EDIT' WindowName: '(null)'