Technical Information
- [<HKLM>\System\CurrentControlSet\Services\"KAP"] 'Start' = '00000002'
- [<HKLM>\System\CurrentControlSet\Services\"KAP"] 'ImagePath' = '%ProgramFiles%\Windows Media Player\wmpsli.dll'
- '"KAP"' %ProgramFiles%\Windows Media Player\wmpsli.dll
- %CommonProgramFiles%\microsoft shared\msinfo\iefiles.ini
- %ProgramFiles%\windows media player\wmpsli.dll
- C:\uinstall.bat
- %CommonProgramFiles%\microsoft shared\msinfo\iefiles.ini
- %ProgramFiles%\windows media player\wmpsli.dll
- 'ha###.3322.org':802
- DNS ASK ha###.3322.org
- '%CommonProgramFiles%\microsoft shared\msinfo\iefiles.ini'
- '%ProgramFiles%\windows media player\wmpsli.dll'
- '%WINDIR%\syswow64\cmd.exe' /c c:\Uinstall.bat' (with hidden window)
- '%WINDIR%\syswow64\cmd.exe' /c c:\Uinstall.bat