Created Files

• %ApplicationData%Microsoft\Internet Explorer\Quick Launch\EvidenceEraser*.lnk
• %ProgramFiles%Microsoft\Internet Explorer\Quick Launch\EvidenceEraser.lnk
• %Desktop%EvidenceEraser.lnk
• %Desktop%EvidenceEraserPro.lnk

Created Folders

• %StartMenu%Programs\EvidenceEraser
• %ApplicationData%EvidenceEraser
• %ProgramFiles%EvidenceEraser
• %CommonStartMenu%EvidenceEraser
• %CommonStartMenu%Programs\EvidenceEraser
• %ProgramFiles%EvidenceEraserPro
• %CommonPrograms%EvidenceEraserPro

Registry Entries

• Key: HKEY_CURRENT_USER\software\evidenceeraser
• Value:
• Data:
• Key: HKEY_CLASSES_ROOT\*\shellex\contextmenuhandlers\privacyshellext
• Value:
• Data:
• Key: HKEY_CLASSES_ROOT\allfilesystemobjects\shellex\contextmenuhandlers\privacyshellext
• Value:
• Data:
• Key: HKEY_CLASSES_ROOT\AppID\{D9A9DE7F-A259-4BC1-A348-87BC1053C4E8}
• Value:
• Data:
• Key: HKEY_CLASSES_ROOT\appid\privacyshell.dll
• Value:
• Data:
• Key: HKEY_CLASSES_ROOT\CLSID\{6D642CFA-40F8-4AE0-9144-538BC1D725E4}
• Value:
• Data:
• Key: HKEY_CLASSES_ROOT\directory\shellex\contextmenuhandlers\privacyshellext
• Value:
• Data:
• Key: HKEY_LOCAL_MACHINE\software\evidenceeraser
• Value:
• Data:
• Key: HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\uninstall\evidenceeraser_is1
• Value:
• Data:
• Key: HKEY_CURRENT_USER\software\microsoft\windows\currentversion\run
• Value: evidenceeraser
• Data:
• Key: HKEY_CURRENT_USER\software\microsoft\windows\currentversion\explorer\menuorder\start menu\programs\evidenceeraser
• Value: order
• Data:
• Key: HKEY_CURRENT_USER\Software\EvidenceEraserPro
• Value:
• Data:
• Key: HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\EEP_is1
• Value:
• Data:
• Key: HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\FixPOFactivate_is1
• Value:
• Data:
• Key: HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Run
• Value: EvidenceEraserPro
• Data: C:\Program Files\EvidenceEraserPro\eep.exe