Technical Information
- %APPDATA%\microsoft\windows\start menu\programs\startup\svchost.url
- %APPDATA%\svchost.exe
- D:\read_it.txt
- D:\$recycle.bin\s-1-5-21-1238866942-1249195528-555854008-1000\read_it.txt
- D:\install.log
- D:\$recycle.bin\s-1-5-21-1238866942-1249195528-555854008-1000\desktop.ini
- '%APPDATA%\svchost.exe'