Technical Information
- [<HKCU>\Software\Microsoft\Windows\CurrentVersion\Run] '' = 'C:\Users\PC\AppData\Roaming\adobe.exe'
- [<HKLM>\Software\Wow6432Node\Microsoft\Active Setup\Installed Components\{87A3D357-14C2-14F9-7ECC-9B8731F7C}] 'StubPath' = '%TEMP%\activex.exe'
- %TEMP%\activex.exe
- '%WINDIR%\microsoft.net\framework\v2.0.50727\dw20.exe' -x -s 632