When Trojan.Hider.i is executed, it performs the following activities:
It creates the below file which is copy of itself
%system%\isass.exe
For autoexecution it create the below registry entry
"ImagePath" = "%System%\isass.exe "
HKLM\System\CurrentControlSet\Services\CSNetManagerXp
"UncheckedValue" = "1" HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Advanced\Folder\HideFileExt "HideFileExt"="1"
HKCU\Software\Microsoft\Windows\CurrentVersion\Explorer\Advanced
The file isass.exe is registered as a new system driver service named "CSNetManagerXp", with a display name of "CSNetManagerXp" and a startup type of automatic, so that it is started automatically during system startup.
"works" as in "(road)works" is "travaux" (masc.) "works" as in "she works" (the verb) is "travaille".
Early Works for Me If It Works for You was created in 1998.
It works!
Early Works for Me If It Works for You II was created in 2009.
Works, as in "he works," would be "trabaja."
works?
how a DS worKS
It works for me!
what exactly works!?
your mom works. your mom works.
she works at a bank.
bad works