Technical Information
- [HKLM\System\CurrentControlSet\Services\WINIO] 'ImagePath' = '%WINDIR%\SysWOW64\hknms.sys'
- 'WINIO' %WINDIR%\SysWOW64\hknms.sys
- %WINDIR%\syswow64\winio.vxd
- %WINDIR%\syswow64\winio.dll
- %WINDIR%\syswow64\hknms.sys
- %WINDIR%\temp\udded3b.tmp
- %WINDIR%\syswow64\hknms.sys
- %WINDIR%\temp\udded3b.tmp
- %WINDIR%\syswow64\hknms.sys