Technical Information
- [<HKCU>\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Windows] 'load' = '%HOMEPATH%\APPLIC~1\Adobe\Plugins\ACRORD~1.EXE'
- %HOMEPATH%\local settings\application data\microsoft\windows\usrdpa.dat
- %HOMEPATH%\application data\adobe\plugins\acrord32info.exe
- '%HOMEPATH%\application data\adobe\plugins\acrord32info.exe'
- '%HOMEPATH%\application data\adobe\plugins\acrord32info.exe' ' (with hidden window)
- '%WINDIR%\syswow64\cmd.exe' /c del <Full path to file> > nul' (with hidden window)
- '%ProgramFiles(x86)%\internet explorer\iexplore.exe'
- '%WINDIR%\syswow64\cmd.exe' /c del <Full path to file> > nul