Files
%Desktop%\Check Disk.lnk

%temp%\875248.exe

%temp%\BiTmVyykWJ.dll

%temp%\jSaAxEAXyd.exe


Folders
%StartMenu%\Programs\Check Disk

RegistryEntries
Key: HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Run
Value: 875248
Data: C:\Temp\875248.exe
Key: HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Run
Value: jSaAxEAXyd.exe
Data: C:\Temp\jSaAxEAXyd.exe