d_Folder]\taskse.exe
[Installed_Folder]\u.wnry
[Installed_Folder]\wcry.exe
</code></pre>
</div>
<h4 id="与wana-decrypt0r--wanacrypt0r相关联的注册表项">与Wana Decrypt0r / WanaCrypt0r相关联的注册表项：</h4>
<div class="highlighter-rouge"><pre class="highlight"><code>HKCU\Software\Microsoft\Windows\CurrentVersion\Run\[random]	"[Installed_Folder]\tasksche.exe"
HKCU\Software\WanaCrypt0r\
HKCU\Software\WanaCrypt0r\wd	[Installed_Folder]
HKCU\Control Panel\Desktop\Wallpaper	"[Installed_Folder]\De