Created Files

• %Desktop%Eco AntiVirus..lnk

Created Folders

• %ApplicationData%eca
• %ProgramFiles%Eco AntiVirus

Registry Entries

• Key: HKEY_CLASSES_ROOT\AppID\{29256442-2C14-48CA-B756-3EE0F8BDC774}
• Value:
• Data:
• Key: HKEY_CURRENT_USER\Software\ECO
• Value:
• Data:
• Key: HKEY_CLASSES_ROOT\AppID\WStech.DLL
• Value:
• Data:
• Key: HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run
• Value: mxcll
• Data: C:\Documents and Settings\All Users\Application Data\eca\vec.exe
• Key: HKEY_LOCAL_MACHINE\SOFTWARE\Eco
• Value:
• Data:
• Key: HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{A5DBD8CB-DF8A-4992-A655-B155216F6AFB}
• Value:
• Data:
• Key: HKEY_CLASSES_ROOT\WStech.WStechB
• Value:
• Data:
• Key: HKEY_CLASSES_ROOT\CLSID\{A5DBD8CB-DF8A-4992-A655-B155216F6AFB}
• Value:
• Data:
• Key: HKEY_CLASSES_ROOT\WStech.WStechB.1
• Value:
• Data: