Trojan.HSM
*file
C:\Users\{USERNAME}\Desktop\Hidetools Spy Monitor.lnk
C:\Users\{USERNAME}\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Hidetools Spy Monitor\Uninstall Hidetools Spy Monitor.lnk
C:\Users\{USERNAME}\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Hidetools Spy Monitor\Hidetools Spy Monitor.lnk
C:\Users\{USERNAME}\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Hidetools Spy Monitor\Hidetools Spy Monitor on the Web.lnk
C:\Users\{USERNAME}\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Hidetools Spy Monitor\Hidetools Spy Monitor Help.lnk
C:\Prorogram Files\HSM\wmisp.exe
C:\Prorogram Files\HSM\uninst.exe
C:\Prorogram Files\HSM\Spy Monitor Help.chm
C:\Prorogram Files\HSM\setalc.exe
C:\Prorogram Files\HSM\ijl15.dll
*reg_key
HKCU\Software\Hidetools
HKLM\SOFTWARE\Hidetools
*reg_val
HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Run | wmisp