Created Files

• %Temp%\aglanguage.ini
• %StartMenu%\antiviralgolden
• %ApplicationData%\microsoft\internet explorer\quick launch\antiviralgolden
• %Desktop%\antiviralgolden.lnk
• %Desktop%\antivirusgolden 4.1.lnk
• %ApplicationData%Microsoft\Internet Explorer\Quick Launch\AntiSpyGolden
• %Desktop%AntiSpyGolden.lnk
• %StartMenu%AntiSpyGolden

Created Folders

• %ProgramFiles%\antiviralgolden
• %StartupPrograms%\antiviralgolden
• %ProgramFiles%\avg\antivirusgolden 4.1
• %ProgramFiles%AntiSpyGolden 4.9
• %StartMenu%Programs\AntiSpyGolden
• %StartMenu%Program\AntiSpyGolden
• %ProgramFiles%AntiSpyGolden

Registry Entries

• Key: HKEY_CLASSES_ROOT\appid\{70f17c8c-1744-41b6-9d07-575db448dcc5}
• Value:
• Data:
• Key: HKEY_CLASSES_ROOT\appid\cerberus.exe
• Value:
• Data:
• Key: HKEY_CLASSES_ROOT\cerberus.enginelistener
• Value:
• Data:
• Key: HKEY_CLASSES_ROOT\cerberus.scanner
• Value:
• Data:
• Key: HKEY_CLASSES_ROOT\cerberus.scanner.1
• Value:
• Data:
• Key: HKEY_CLASSES_ROOT\cerberus.threatcollection
• Value:
• Data:
• Key: HKEY_CLASSES_ROOT\cerberus.threatcollection.1
• Value:
• Data:
• Key: HKEY_CLASSES_ROOT\clsid\{020b1227-417d-4682-9ac3-61f43cb5b6b1}
• Value:
• Data:
• Key: HKEY_CLASSES_ROOT\clsid\{125494b2-acad-414c-98b9-452f3ef7703a}
• Value:
• Data:
• Key: HKEY_CLASSES_ROOT\clsid\{20a3d913-30ef-4e69-b3f7-93b3f1fb9d5c}
• Value:
• Data:
• Key: HKEY_CLASSES_ROOT\clsid\{3d00a39c-655b-428b-aeb2-2fba03dcc49c}
• Value:
• Data:
• Key: HKEY_CLASSES_ROOT\clsid\{408f660a-9465-44a3-b557-8709dfd992bc}
• Value:
• Data:
• Key: HKEY_CLASSES_ROOT\clsid\{5f6bbd8a-18cf-4d55-8b4c-c9b4c9328dfe}
• Value:
• Data:
• Key: HKEY_CLASSES_ROOT\clsid\{8c56b6ce-c53f-44c4-9bdc-a9bc1711d05a}
• Value:
• Data:
• Key: HKEY_CLASSES_ROOT\clsid\{8ee6bf73-b370-4d13-9126-eb0071178f2e}
• Value:
• Data:
• Key: HKEY_CLASSES_ROOT\clsid\{97f56e12-c706-4aeb-9ffb-133c05ee5d38}
• Value:
• Data:
• Key: HKEY_CLASSES_ROOT\clsid\{9bb7e700-4e48-476d-b75c-6f47606be988}
• Value:
• Data:
• Key: HKEY_CLASSES_ROOT\clsid\{c5f09443-d204-108c-cdff-3724d7d881ff}
• Value:
• Data:
• Key: HKEY_CLASSES_ROOT\clsid\{cbcaca58-1aee-4600-8cf0-e8b30bff1535}
• Value:
• Data:
• Key: HKEY_CLASSES_ROOT\clsid\{d6d64cdf-0363-4261-b723-29a3af365e1d}
• Value:
• Data:
• Key: HKEY_CLASSES_ROOT\engine.backup.1
• Value:
• Data:
• Key: HKEY_CLASSES_ROOT\engine.ignorelist
• Value:
• Data:
• Key: HKEY_CLASSES_ROOT\engine.ignorelist.1
• Value:
• Data:
• Key: HKEY_CLASSES_ROOT\engine.log.1
• Value:
• Data:
• Key: HKEY_CLASSES_ROOT\engine.logrecord
• Value:
• Data:
• Key: HKEY_CLASSES_ROOT\engine.logrecord.1
• Value:
• Data:
• Key: HKEY_CLASSES_ROOT\engine.paths
• Value:
• Data:
• Key: HKEY_CLASSES_ROOT\engine.paths.1
• Value:
• Data:
• Key: HKEY_CLASSES_ROOT\engine.quarantine
• Value:
• Data:
• Key: HKEY_CLASSES_ROOT\engine.quarantine.1
• Value:
• Data:
• Key: HKEY_CLASSES_ROOT\engine.runas
• Value:
• Data:
• Key: HKEY_CLASSES_ROOT\engine.runas.1
• Value:
• Data:
• Key: HKEY_CLASSES_ROOT\engine.searchitem
• Value:
• Data:
• Key: HKEY_CLASSES_ROOT\engine.searchitem.1
• Value:
• Data:
• Key: HKEY_CLASSES_ROOT\engine.threat
• Value:
• Data:
• Key: HKEY_CLASSES_ROOT\engine.threat.1
• Value:
• Data:
• Key: HKEY_CLASSES_ROOT\interface\{27ed4ac2-b6d8-4079-9831-017a100b391e}
• Value:
• Data:
• Key: HKEY_CLASSES_ROOT\interface\{3f6d6c35-fb73-45e6-9473-bb4cc25ce019}
• Value:
• Data:
• Key: HKEY_CLASSES_ROOT\interface\{715d709b-2b10-42fa-a069-297d25d93601}
• Value:
• Data:
• Key: HKEY_CLASSES_ROOT\interface\{872c1b1e-3cf0-4d3a-95e5-a0c662d2854c}
• Value:
• Data:
• Key: HKEY_CLASSES_ROOT\interface\{886b1d08-b404-40f0-aa18-4e416682a2e9}
• Value:
• Data:
• Key: HKEY_CLASSES_ROOT\interface\{8b5f65cf-0b0a-4291-8da2-86d7f7b0a6db}
• Value:
• Data:
• Key: HKEY_CLASSES_ROOT\interface\{925b0211-a1c1-4712-8fca-5f5b8101736d}
• Value:
• Data:
• Key: HKEY_CLASSES_ROOT\interface\{b01e37c4-5497-4d58-9ffd-d5653b8dc866}
• Value:
• Data:
• Key: HKEY_CLASSES_ROOT\interface\{ccaa201c-c48d-48a8-a1e8-846562cbf1c1}
• Value:
• Data:
• Key: HKEY_CLASSES_ROOT\interface\{d483521b-d5cc-43ff-a45a-9be4a8e6606e}
• Value:
• Data:
• Key: HKEY_CLASSES_ROOT\interface\{ed2aff47-b7be-4273-a203-c796e87f72d2}
• Value:
• Data:
• Key: HKEY_CLASSES_ROOT\interface\{f0fa7ed9-5a0a-4374-b63e-bebafd52192e}
• Value:
• Data:
• Key: HKEY_CLASSES_ROOT\interface\{f5dee77c-87eb-4e00-bbf9-8cbf3bdea7af}
• Value:
• Data:
• Key: HKEY_CLASSES_ROOT\interface\{fb5ddab7-6aa5-4e97-9541-5a75addf4aba}
• Value:
• Data:
• Key: HKEY_CLASSES_ROOT\interface\{fddf521b-0ebe-4d15-838c-73e2d851161b}
• Value:
• Data:
• Key: HKEY_CLASSES_ROOT\interface\{ff609434-eb47-481b-ba0e-1d2b467629a5}
• Value:
• Data:
• Key: HKEY_CLASSES_ROOT\typelib\{60f94d7d-563e-4942-b5ec-2de9c135c139}
• Value:
• Data:
• Key: HKEY_CLASSES_ROOT\engine.backup
• Value:
• Data:
• Key: HKEY_CLASSES_ROOT\engine.log
• Value:
• Data:
• Key: HKEY_LOCAL_MACHINE\software\antiviralgolden
• Value:
• Data:
• Key: HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\app paths\antiviralgolden.exe
• Value:
• Data:
• Key: HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\uninstall\antiviralgolden
• Value:
• Data:
• Key: HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\run
• Value: AntiviralGolden
• Data:
• Key: HKEY_LOCAL_MACHINE\software\antivirusgolden 4.1
• Value:
• Data:
• Key: HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\app paths\antivirusgold 4.1.exe
• Value:
• Data:
• Key: HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\uninstall\antivirusgolden 4.1
• Value:
• Data:
• Key: HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\run
• Value: antivirusgolden 4.1
• Data:
• Key: HKEY_CLASSES_ROOT\cerberus.enginelistener.1
• Value:
• Data:
• Key: HKEY_CLASSES_ROOT\clsid\{2f5e2da4-b0d9-1715-429d-5b5dce6535af}
• Value:
• Data:
• Key: HKEY_LOCAL_MACHINE\software\antispygolden 4.9
• Value:
• Data:
• Key: HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\app paths\antispygolden 4.9.exe
• Value:
• Data:
• Key: HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\uninstall\antispygolden 4.9
• Value:
• Data:
• Key: HKEY_LOCAL_MACHINE\software\licenses
• Value: {0397bd5622dc11da1}
• Data:
• Key: HKEY_LOCAL_MACHINE\software\licenses
• Value: {i397bd5622dc11da1}
• Data:
• Key: HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\run
• Value: antispygolden 4.9
• Data:
• Key: HKEY_LOCAL_MACHINE\software\antispygolden 5.0
• Value:
• Data:
• Key: HKEY_LOCAL_MACHINE\software\antispygolden 5.1
• Value:
• Data:
• Key: HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\app paths\antispygolden 5.1.exe
• Value:
• Data:
• Key: HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\uninstall\antispygolden 5.1
• Value:
• Data:
• Key: HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\run
• Value: antispygolden 5.1
• Data:
• Key: HKEY_LOCAL_MACHINE\software\antispygolden 5.2
• Value:
• Data:
• Key: HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\app paths\antispygolden 5.2.exe
• Value:
• Data:
• Key: HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\uninstall\antispygolden 5.2
• Value:
• Data:
• Key: HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\run
• Value: antispygolden 5.2
• Data: