Technical Information
- [<HKCU>\Software\Microsoft\Windows NT\CurrentVersion\Winlogon] 'shell' = 'explorer.exe,%APPDATA%\data.dat'
- %WINDIR%\syswow64\svchost.exe
- %HOMEPATH%\desktop\issi2013_template_for_posters.docx
- %HOMEPATH%\desktop\dashborder_96.bmp
- %HOMEPATH%\desktop\000814251_video_01.avi
- %APPDATA%\data.dat
- '%WINDIR%\syswow64\svchost.exe'