Created Files

• %Windir%\Tasks\AntiMalware Scan.job
• %Desktop%AntiMalware.lnk
• %ApplicationData%Microsoft\Internet Explorer\Quick Launch\AntiMalware.lnk
• %Desktop%AntiMalware Support.lnk

Created Folders

• %CommonStartMenu%Programs\AntiMalware
• %ApplicationData%AntiMalware
• %ProgramFiles%AntiMalware
• %CommonPrograms%AntiMalware

Registry Entries

• Key: HKEY_CLASSES_ROOT\CLSID\{5E2121EE-0300-11D4-8D3B-444553540000}
• Value:
• Data:
• Key: HKEY_CURRENT_USER\Software\AntiMalware
• Value:
• Data:
• Key: HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\AntiMalware_is1
• Value:
• Data:
• Key: HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Run
• Value: AntiMalware
• Data: C:\Program Files\AntiMalware\AntiMalware.exe -boot
• Key: HKEY_LOCAL_MACHINE\SOFTWARE\Active Security
• Value:
• Data:
• Key: HKEY_LOCAL_MACHINE\SOFTWARE\AntiMalware
• Value:
• Data:
• Key: HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\AntiMalware
• Value:
• Data:
• Key: HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Run
• Value: AntiMalware
• Data: "C:\Program Files\AntiMalware\antimalware.exe" -noscan
• Key: HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Shell Extensions\Approved
• Value: {5E2121EE-0300-11D4-8D3B-444553540000}
• Data: AntiMalware extension