Created Files

• %System%driver\drvprt.sys
• %System%driver\FIBL.sys
• %Desktop%CryptDrive.lnk

Created Folders

• %ProgramFiles%CryptDrive
• %CommonPrograms%CryptDrive
• %ApplicationData%CryptDrive
• %UserProfile%Documents and Settings\My Crypted Drives

Registry Entries

• Key: HKEY_LOCAL_MACHINE\SOFTWARE\5110000C29AB08B8
• Value:
• Data:
• Key: HKEY_CURRENT_USER\software\cryptdrive
• Value:
• Data:
• Key: HKEY_CURRENT_USER\software\microsoft\windows\currentversion\ext\stats\{46008301-af55-4788-9834-28b182cd6daa}
• Value:
• Data:
• Key: HKEY_CLASSES_ROOT\*\shellex\contextmenuhandlers\cryptdrive
• Value:
• Data:
• Key: HKEY_CLASSES_ROOT\*\shellex\contextmenuhandlers\cryptdrive2
• Value:
• Data:
• Key: HKEY_CLASSES_ROOT\.cde
• Value:
• Data:
• Key: HKEY_CLASSES_ROOT\.dck
• Value:
• Data:
• Key: HKEY_CLASSES_ROOT\appid\{a31fd134-41e3-4edc-8562-4ec2174b7760}
• Value:
• Data:
• Key: HKEY_CLASSES_ROOT\appid\blockengine.exe
• Value:
• Data:
• Key: HKEY_CLASSES_ROOT\blockengine.fileblockengine
• Value:
• Data:
• Key: HKEY_CLASSES_ROOT\blockengine.fileblockengine.1
• Value:
• Data:
• Key: HKEY_CLASSES_ROOT\cdtoolbar.shellband
• Value:
• Data:
• Key: HKEY_CLASSES_ROOT\cdtoolbar.shellband.1
• Value:
• Data:
• Key: HKEY_CLASSES_ROOT\clsid\{1b3ec7f9-57e1-4984-9ccd-b43b8eabfcd0}
• Value:
• Data:
• Key: HKEY_CLASSES_ROOT\CLSID\{28D2C24E-7F71-4B2C-86D8-5EC1AD73AFD6}
• Value:
• Data:
• Key: HKEY_CLASSES_ROOT\clsid\{3a4b423c-db81-45ec-b02c-962ca14eb2b1}
• Value:
• Data:
• Key: HKEY_CLASSES_ROOT\clsid\{46008301-af55-4788-9834-28b182cd6daa}
• Value:
• Data:
• Key: HKEY_CLASSES_ROOT\CLSID\{6B488E78-3548-4CBC-8828-781EFB6C771B}
• Value:
• Data:
• Key: HKEY_CLASSES_ROOT\clsid\{72b018b1-1c89-4ec8-bae3-7eefb38825f9}
• Value:
• Data:
• Key: HKEY_CLASSES_ROOT\clsid\{b201fc48-33f7-4709-a519-2a8226f488be}
• Value:
• Data:
• Key: HKEY_CLASSES_ROOT\clsid\{da9f5f72-18ac-43e8-9ff6-a4a7463f581c}
• Value:
• Data:
• Key: HKEY_CLASSES_ROOT\cryptdrive.encrypted
• Value:
• Data:
• Key: HKEY_CLASSES_ROOT\cryptdrive.storage
• Value:
• Data:
• Key: HKEY_CLASSES_ROOT\cryptdrive.storage key
• Value:
• Data:
• Key: HKEY_CLASSES_ROOT\directory\shellex\contextmenuhandlers\cryptdrive
• Value:
• Data:
• Key: HKEY_CLASSES_ROOT\Interface\{1D27F0F6-418C-4645-BB9B-F1D75EB4E7EF}
• Value:
• Data:
• Key: HKEY_CLASSES_ROOT\interface\{23913e4d-fcc3-4f2d-a027-8766dd561d66}
• Value:
• Data:
• Key: HKEY_CLASSES_ROOT\Interface\{3213BE8D-02EB-4DDF-B7F8-9501463E63D6}
• Value:
• Data:
• Key: HKEY_CLASSES_ROOT\Interface\{6CD0567F-493A-4AC8-8542-00427917BFFF}
• Value:
• Data:
• Key: HKEY_CLASSES_ROOT\interface\{9ae6710d-b16a-4aee-b96c-c93439cbd814}
• Value:
• Data:
• Key: HKEY_CLASSES_ROOT\interface\{b92b5a9f-39ed-4fd0-8d10-28b95d022a11}
• Value:
• Data:
• Key: HKEY_CLASSES_ROOT\Interface\{C721E836-3E81-43F4-971F-4A6E324E2561}
• Value:
• Data:
• Key: HKEY_CLASSES_ROOT\Interface\{E7FB27A8-A84C-4EA5-95DF-732092DDC018}
• Value:
• Data:
• Key: HKEY_CLASSES_ROOT\safefileoperations.encryptfile
• Value:
• Data:
• Key: HKEY_CLASSES_ROOT\safefileoperations.encryptfile.1
• Value:
• Data:
• Key: HKEY_CLASSES_ROOT\safefileoperations.securedelete
• Value:
• Data:
• Key: HKEY_CLASSES_ROOT\safefileoperations.securedelete.1
• Value:
• Data:
• Key: HKEY_CLASSES_ROOT\sdshellext.clearrecycleext
• Value:
• Data:
• Key: HKEY_CLASSES_ROOT\sdshellext.clearrecycleext.1
• Value:
• Data:
• Key: HKEY_CLASSES_ROOT\sdshellext.encryptfileext
• Value:
• Data:
• Key: HKEY_CLASSES_ROOT\sdshellext.encryptfileext.1
• Value:
• Data:
• Key: HKEY_CLASSES_ROOT\sdshellext.securedeleteext
• Value:
• Data:
• Key: HKEY_CLASSES_ROOT\sdshellext.securedeleteext.1
• Value:
• Data:
• Key: HKEY_CLASSES_ROOT\TypeLib\{0CCB715F-EA4E-4AFA-AA31-9B3EFC5FC803}
• Value:
• Data:
• Key: HKEY_CLASSES_ROOT\TypeLib\{19D73FC5-BA35-458E-B68D-0E79816F78BD}
• Value:
• Data:
• Key: HKEY_CLASSES_ROOT\typelib\{a31fd134-41e3-4edc-8562-4ec2174b7760}
• Value:
• Data:
• Key: HKEY_CLASSES_ROOT\typelib\{d42d40e8-16cb-4d71-80d1-a0fd7303a35c}
• Value:
• Data:
• Key: HKEY_CLASSES_ROOT\wsc.productcheckerucd
• Value:
• Data:
• Key: HKEY_LOCAL_MACHINE\software\cryptdrive
• Value:
• Data:
• Key: HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\uninstall\ucd_is1
• Value:
• Data:
• Key: HKEY_LOCAL_MACHINE\system\controlset001\enum\root\legacy_drvprt
• Value:
• Data:
• Key: HKEY_LOCAL_MACHINE\system\controlset001\enum\root\legacy_fibl
• Value:
• Data:
• Key: HKEY_LOCAL_MACHINE\system\controlset001\services\drvprt
• Value:
• Data:
• Key: HKEY_LOCAL_MACHINE\system\controlset001\services\fibl
• Value:
• Data:
• Key: HKEY_LOCAL_MACHINE\system\currentcontrolset\enum\root\legacy_drvprt
• Value:
• Data:
• Key: HKEY_LOCAL_MACHINE\system\currentcontrolset\enum\root\legacy_fibl
• Value:
• Data:
• Key: HKEY_LOCAL_MACHINE\system\currentcontrolset\services\drvprt
• Value:
• Data:
• Key: HKEY_LOCAL_MACHINE\system\currentcontrolset\services\fibl
• Value:
• Data:
• Key: HKEY_CURRENT_USER\software\microsoft\internet explorer\toolbar\shellbrowser
• Value: {46008301-af55-4788-9834-28b182cd6daa}
• Data:
• Key: HKEY_LOCAL_MACHINE\software\microsoft\internet explorer\toolbar
• Value: {46008301-af55-4788-9834-28b182cd6daa}
• Data:
• Key: HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\run
• Value: cryptdrive
• Data:
• Key: HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\run
• Value: ucdcw
• Data:
• Key: HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\shell extensions\approved
• Value: {b201fc48-33f7-4709-a519-2a8226f488be}
• Data:
• Key: HKEY_CLASSES_ROOT\.dcr
• Value:
• Data:
• Key: HKEY_CLASSES_ROOT\CLSID\{092C7410-3EBD-4EF8-9D84-AD54D179E4C8}
• Value:
• Data:
• Key: HKEY_CLASSES_ROOT\WSC.ProductCheckerCD
• Value:
• Data:
• Key: HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\CD_is1
• Value:
• Data:
• Key: HKEY_CURRENT_USER\Software\Microsoft\Internet Explorer\Toolbar\ShellBrowser
• Value: {46008301-AF55-4788-9834-28B182CD6DAA}
• Data: 01, 83, 00, 46, 55, AF, 88, 47, 98, 34, 28, B1, 82, CD, 6D, AA