Adware.Express
* Registry path
hkey_local_machine\software\microsoft\windows nt\currentversion\schedule\taskcache\tasks\{4a10afcc-fb83-40df-b0db-8c4f4ed7ddec}
hkey_local_machine\software\microsoft\windows nt\currentversion\schedule\taskcache\tree\express_host
* Files path
c\windows\system32\tasks\express_host
|
|