Files

%ApplicationData%\[randomname]\[randomname].exe

Folders

RegistryEntries
Key: HKEY_CURRENT_USER\Software\avsoft
Key: HKEY_CURRENT_USER\Software\avsuite
Key: HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Run
Value: [randomname]
Data: C:\Documents and Settings\VPCTest\Local Settings\Application Data\[randomname]\[randomname].exe