Technical Information
- [<HKLM>\System\CurrentControlSet\Services\com1097] 'Start' = '00000002'
- [<HKLM>\System\CurrentControlSet\Services\com1097] 'ImagePath' = '<Full path to file>'
- 'com1097' <Full path to file>
- %TEMP%\_unins_sc_mxz.bat
- '%WINDIR%\syswow64\cmd.exe' /c ""%TEMP%\_unins_sc_mxz.bat" "' (with hidden window)
- '%WINDIR%\syswow64\werfault.exe' -u -p 900 -s 264' (with hidden window)
- '%WINDIR%\syswow64\cmd.exe' /c ""%TEMP%\_unins_sc_mxz.bat" "