Created Files

Created Folders

• %ApplicationData%LastSun Ltd
• %CommonPrograms%AV AntiSpyware

Registry Entries

• Key: HKEY_CURRENT_USER\Software\Cognac
• Value:
• Data:
• Key: HKEY_CURRENT_USER\Software\LastSun Ltd
• Value:
• Data:
• Key: HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\uninstall\AV AntiSpyware 1.8
• Value:
• Data:
• Key: HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Run
• Value: AV AntiSpyware
• Data: "C:\Documents and Settings\All Users\Application Data\LastSun Ltd\AV AntiSpyware\ava.exe" /autorun
• Key: HKEY_CURRENT_USER\Software\ColdWare
• Value:
• Data:
• Key: HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Run
• Value: Cognac
• Data: C:\Temp\9638.exe