[Trojan] ImageCropResize
* path
C\Users\Ad\Desktop\ImageCropResize.lnk
C\Users\Ad\AppData\Roaming\ImageCropResize\ImageEd\ImageEd.exe
C\Users\Ad\AppData\Roaming\ImageCropResize\uninstaller.exe
C\Users\Ad\AppData\Roaming\ImageCropResize\ImageCropResize.exe
dir_C\Users\Ad\AppData\Roaming\ImageCropResize\ImageEd
dir_C\Users\Ad\AppData\Roaming\ImageCropResize
* registry path
HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Uninstall\ImageCropResize
HKEY_CURRENT_USER\Software\ImageEd
HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Run | ImageEd
|
|