Technical Information
- [<HKLM>\SYSTEM\ControlSet001\Services\Roll32] 'ImagePath' = '%WINDIR%\twain_64\twain64.sys'
- [<HKLM>\SYSTEM\ControlSet001\Services\Roll32] 'Start' = '00000001'
- C:\System Volume Information\_restore{E7F0F64C-F7E5-4319-8757-E9A20C1C4E14}\RP15\rp.log
- C:\System Volume Information\_restore{E7F0F64C-F7E5-4319-8757-E9A20C1C4E14}\RP15\RestorePointSize
- C:\System Volume Information\_restore{E7F0F64C-F7E5-4319-8757-E9A20C1C4E14}\fifo.log
- %WINDIR%\twain_64\twain64.sys
- %WINDIR%\twain_64\waitwain64.ds