Technical Information
- '<SYSTEM32>\svchost.exe' -k netsvcs
- %WINDIR%\Explorer.EXE
- %APPDATA%\Roaming\avdrn.dat
- %TEMP%\~TM15258.TMP
- %APPDATA%\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\siszyd32.exe
- %TEMP%\~TMB96F.tmp
- %TEMP%\~TMBB25.tmp
- %TEMP%\~TMBBC2.tmp
- %APPDATA%\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\siszyd32.exe
- %TEMP%\~TMBBC2.tmp
- %TEMP%\~TM15258.TMP
- %TEMP%\~TMB96F.tmp
- %TEMP%\~TMBB25.tmp