Technical Information
- [<HKLM>\SOFTWARE\Microsoft\Windows\CurrentVersion\Run] 'ScanRegistry' = '<SYSTEM32>\SCANREGW.EXE /autorun'
- <SYSTEM32>\ISUnstA.DLL
- <SYSTEM32>\SCANREGW.EXE
- <Current directory>\ISUnstA.DLL
- <Current directory>\ISUnstA.DLL
- ClassName: 'Progman' WindowName: ''
- ClassName: 'Windows 32-bit Vxd Message Server' WindowName: ''