Technical Information
- [<HKCU>\Software\Microsoft\Windows\CurrentVersion\Policies\Explorer\Run] 'AreaVisual' = '<Full path to file>'
- [<HKLM>\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer\Run] 'DeviceFolder' = '<Full path to file>'
- [<HKLM>\SOFTWARE\Microsoft\Windows\CurrentVersion\Run] 'Docs Wizard' = '<Full path to file>'
- [<HKCU>\Software\Microsoft\Windows NT\CurrentVersion\Windows] 'Load' = '<Full path to file>'
- [<HKCU>\Software\Microsoft\Windows\CurrentVersion\Run] 'Shell Visual' = '<Full path to file>'
- <Current directory>\gemafo\a4ba292b.fit
- <Current directory>\gemafo\1de4f19b.fit
- <Current directory>\gemafo\a4ba292b.fit
- <Current directory>\gemafo\1de4f19b.fit
- '19#.#0.197.82':443