Trojan.ImageCropResize
*file
C:\Users{USERNAME}Desktop\ImageCropResize.lnk
C:\Users\{USERNAME}\AppData\Roaming\ImageCropResize\ImageEd\ImageEd.exe
C:\Users\{USERNAME}\AppData\Roaming\ImageCropResize\uninstaller.exe
C:\Users\{USERNAME}\AppData\Roaming\ImageCropResize\ImageCropResize.exe
*reg_key
HKCU\Software\Microsoft\Windows\CurrentVersion\Uninstall\ImageCropResize
HKCU\Software\ImageEd
*reg_val
HKCU\Software\Microsoft\Windows\CurrentVersion\Run | ImageEd
