Created Files

• %Desktop%Coreguard 2009.lnk
• %Desktop%Coreguard Antivirus..lnk

Created Folders

• %ProgramFiles%Coreguard Antivirus 2009
• %CommonPrograms%Coreguard Antivirus 2009

Registry Entries

• Key: HKEY_CURRENT_USER\Software\CoreGuard
• Value:
• Data:
• Key: HKEY_CLASSES_ROOT\CLSID\{5E2121EE-0300-11D4-8D3B-444553540000}
• Value:
• Data:
• Key: HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\Coreguard Antivirus 2009
• Value:
• Data:
• Key: HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Run
• Value: Coreguard Antivirus 2009
• Data: C:\Program Files\Coreguard Antivirus 2009\Coreguard 2009.exe
• Key: HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Shell Extensions\Approved
• Value: {5E2121EE-0300-11D4-8D3B-444553540000}
• Data: CoreGuard Antivirus 2009 extension