Trojan.ImageCropResize

Trojan.ImageCropResize
 

*file
C:\Users{USERNAME}Desktop\ImageCropResize.lnk
C:\Users\{USERNAME}\AppData\Roaming\ImageCropResize\ImageEd\ImageEd.exe
C:\Users\{USERNAME}\AppData\Roaming\ImageCropResize\uninstaller.exe
C:\Users\{USERNAME}\AppData\Roaming\ImageCropResize\ImageCropResize.exe
 

*reg_key
HKCU\Software\Microsoft\Windows\CurrentVersion\Uninstall\ImageCropResize
HKCU\Software\ImageEd

*reg_val
HKCU\Software\Microsoft\Windows\CurrentVersion\Run | ImageEd