Created Files

• %ApplicationData%\microsoft\internet explorer\quick launch\contravirus 2.0.lnk
• c:\temp\14737.exe
• %Temp%E9E6C0ED.TMP
• %Temp%CVRLanguage.ini
• %Desktop%ContraVirus .lnk

Created Folders

• %ApplicationData%\adprotect nospam
• %StartMenu%\programs\contravirus
• %ProgramFiles%\contravirus
• %ApplicationData%ContraVirus AntiSpam
• %Temp%awtmp
• %ProgramFiles%ContraVirus
• %StartMenu%Programs\ContraVirus
• %StartMenu%Program\ContraVirus

Registry Entries

• Key: HKEY_CLASSES_ROOT\appid\toolbarnotifier.exe
• Value:
• Data:
• Key: HKEY_CLASSES_ROOT\sctoolband.sctoolbandobj
• Value:
• Data:
• Key: HKEY_CLASSES_ROOT\sctoolband.sctoolbandobj.1
• Value:
• Data:
• Key: HKEY_CLASSES_ROOT\toolbarnotifier.notifier
• Value:
• Data:
• Key: HKEY_CLASSES_ROOT\toolbarnotifier.notifier.1
• Value:
• Data:
• Key: HKEY_CLASSES_ROOT\appid\{6b677f1f-f86c-4757-bf24-7d865ef20639}
• Value:
• Data:
• Key: HKEY_CLASSES_ROOT\appid\{7c11c36c-2ae0-4489-9b09-a6129139d52d}
• Value:
• Data:
• Key: HKEY_CLASSES_ROOT\clsid\{1be8c6a5-a75f-4e33-89c3-18cc58a0b952}
• Value:
• Data:
• Key: HKEY_CLASSES_ROOT\clsid\{61877300-54db-4746-ba42-03e03a2b269c}
• Value:
• Data:
• Key: HKEY_CLASSES_ROOT\clsid\{dbe5bee8-f032-11db-826a-c4bb56d89593}
• Value:
• Data:
• Key: HKEY_CLASSES_ROOT\clsid\{ea038ddd-0fe0-41f5-ba60-fc3660529e71}
• Value:
• Data:
• Key: HKEY_CLASSES_ROOT\interface\{61877300-54db-4746-ba42-03e03a2b269c}
• Value:
• Data:
• Key: HKEY_CLASSES_ROOT\interface\{63321a5c-d8fe-432c-8d2f-61c0fc264320}
• Value:
• Data:
• Key: HKEY_CLASSES_ROOT\typelib\{2c02e5fc-7fe3-4122-911f-829314fe9bbc}
• Value:
• Data:
• Key: HKEY_CLASSES_ROOT\typelib\{6b677f1f-f86c-4757-bf24-7d865ef20639}
• Value:
• Data:
• Key: HKEY_CLASSES_ROOT\clsid\{bfcbb188-18e3-1deb-59d5-bace1ce655a4}
• Value:
• Data:
• Key: HKEY_CURRENT_USER\software\microsoft\windows\currentversion\ext\stats\{dbe5bee8-f032-11db-826a-c4bb56d89593}
• Value:
• Data:
• Key: HKEY_CURRENT_USER\software\microsoft\windows\currentversion\shell\1das
• Value:
• Data:
• Key: HKEY_CURRENT_USER\software\microsoft\windows\currentversion\shell\dnl7
• Value:
• Data:
• Key: HKEY_CURRENT_USER\software\microsoft\windows\currentversion\shell extensions\adloader
• Value:
• Data:
• Key: HKEY_CURRENT_USER\software\microsoft\windows\currentversion\shell extensions\trace7
• Value:
• Data:
• Key: HKEY_LOCAL_MACHINE\software\contravirus
• Value: aid
• Data:
• Key: HKEY_LOCAL_MACHINE\software\contravirus
• Value: FirstRun
• Data:
• Key: HKEY_LOCAL_MACHINE\software\contravirus
• Value: installdate
• Data:
• Key: HKEY_LOCAL_MACHINE\software\contravirus
• Value: installid
• Data:
• Key: HKEY_LOCAL_MACHINE\software\contravirus
• Value: Language
• Data:
• Key: HKEY_LOCAL_MACHINE\software\contravirus
• Value: TipDay
• Data:
• Key: HKEY_LOCAL_MACHINE\software\contravirus
• Value: TipIndex
• Data:
• Key: HKEY_LOCAL_MACHINE\software\licenses
• Value: {008C81773CF6FB107}
• Data:
• Key: HKEY_LOCAL_MACHINE\software\licenses
• Value: {I08C81773CF6FB107}
• Data:
• Key: HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\run
• Value: ContraVirus
• Data:
• Key: HKEY_LOCAL_MACHINE\software\contravirus
• Value:
• Data:
• Key: HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\app paths\contravirus.exe
• Value:
• Data:
• Key: HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\uninstall\contravirus
• Value:
• Data:
• Key: HKEY_LOCAL_MACHINE\software\microsoft\internet explorer\toolbar
• Value: {EA038DDD-0FE0-41f5-BA60-FC3660529E71}
• Data:
• Key: HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\explorer\browser helper objects\{dbe5bee8-f032-11db-826a-c4bb56d89593}
• Value:
• Data:
• Key: HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\run
• Value: Windows Updater Servc
• Data:
• Key: HKEY_CLASSES_ROOT\appid\contraviruspro.exe
• Value:
• Data:
• Key: HKEY_CLASSES_ROOT\clsid\{5af53372-266a-11dc-874d-879e56d89593}
• Value:
• Data:
• Key: HKEY_CLASSES_ROOT\cvpro.server
• Value:
• Data:
• Key: HKEY_CLASSES_ROOT\cvpro.server.1
• Value:
• Data:
• Key: HKEY_CLASSES_ROOT\interface\{307c2e42-267a-11dc-aca0-7ccb56d89593}
• Value:
• Data:
• Key: HKEY_CLASSES_ROOT\typelib\{fe4054f8-266a-11dc-aea3-b9a056d89593}
• Value:
• Data:
• Key: HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\explorer\browser helper objects\{dbe5bee8-f032-11db-826a-c4bb56d89593}
• Value:
• Data:
• Key: HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\run
• Value: contravirus
• Data:
• Key: HKEY_CLASSES_ROOT\ad-protect.addin
• Value:
• Data:
• Key: HKEY_CLASSES_ROOT\ad-protect.addin.1
• Value:
• Data:
• Key: HKEY_CLASSES_ROOT\appid\{9da1990b-9bca-4c80-aefb-11a40fa849f9}
• Value:
• Data:
• Key: HKEY_CLASSES_ROOT\appid\{c628512d-a058-4bd4-b47b-b036f45fa02b}
• Value:
• Data:
• Key: HKEY_CLASSES_ROOT\clsid\{99a753c6-e429-46bd-989e-dd4a21cd059d}
• Value:
• Data:
• Key: HKEY_CLASSES_ROOT\clsid\{bbbd3e11-d201-46c9-8471-091d33159287}
• Value:
• Data:
• Key: HKEY_CLASSES_ROOT\clsid\{d2c1986a-fbec-4472-aabf-6d42f08dbc8e}
• Value:
• Data:
• Key: HKEY_CLASSES_ROOT\clsid\{e6b4ab50-f423-4ee6-9839-b35dcfcdfa49}
• Value:
• Data:
• Key: HKEY_CLASSES_ROOT\iecontrol.ieextension
• Value:
• Data:
• Key: HKEY_CLASSES_ROOT\iecontrol.ieextension.1
• Value:
• Data:
• Key: HKEY_CLASSES_ROOT\interface\{214345b8-bb69-498d-a168-29f58f15d806}
• Value:
• Data:
• Key: HKEY_CLASSES_ROOT\interface\{d2c1986a-fbec-4472-aabf-6d42f08dbc8e}
• Value:
• Data:
• Key: HKEY_CLASSES_ROOT\interface\{e6b4ab50-f423-4ee6-9839-b35dcfcdfa49}
• Value:
• Data:
• Key: HKEY_CLASSES_ROOT\interface\{f51bc478-d997-4c56-988d-79d9eeaad1ec}
• Value:
• Data:
• Key: HKEY_CLASSES_ROOT\interface\{fd4dcb8b-c33a-4e70-a351-6fab7e1071a4}
• Value:
• Data:
• Key: HKEY_CLASSES_ROOT\spamdet.spamdetector
• Value:
• Data:
• Key: HKEY_CLASSES_ROOT\spamdet.spamdetector.1
• Value:
• Data:
• Key: HKEY_CLASSES_ROOT\typelib\{283ed043-d403-4808-bf28-fcde29dcf1fb}
• Value:
• Data:
• Key: HKEY_CLASSES_ROOT\typelib\{32bd20fd-41fd-47fb-9bc9-28dcbd7d55d7}
• Value:
• Data:
• Key: HKEY_CURRENT_USER\software\microsoft\office\outlook\addins\ad-protect.addin.1
• Value:
• Data:
• Key: HKEY_CLASSES_ROOT\appid\spamdet.dll
• Value:
• Data:
• Key: HKEY_CLASSES_ROOT\clsid\{bfcbb188-18e3-1deb-59d5-bace1ce655a4}
• Value:
• Data:
• Key: HKEY_CLASSES_ROOT\appid\iecontrol.dll
• Value:
• Data:
• Key: HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\app paths\contravirus.exe
• Value: (default)
• Data:
• Key: HKEY_LOCAL_MACHINE\system\controlset003\services\acpi\errorc
• Value:
• Data: