Created Files

• %Desktop%\expertantivirus.lnk
• %ApplicationData%Microsoft\Internet Explorer\Quick Launch\ExpertAntivirus
• %StartMenu%ExpertAntivirus
• %Desktop%ExpertAntivirus.lnk
• %Temp%64E5AF8C.TMP
• %Temp%eav1B.tmp
• %Temp%eav1C.tmp

Created Folders

• %ProgramFiles%\expertantivirus
• %StartMenu%\programs\expertantivirus
• %StartMenu%\program/expertantivirus
• %ProgramFiles%ExpertAntivirus

Registry Entries

• Key: HKEY_CLASSES_ROOT\ad-protect.server
• Value:
• Data:
• Key: HKEY_CLASSES_ROOT\ad-protect.server.1
• Value:
• Data:
• Key: HKEY_CLASSES_ROOT\clsid\{d7abe914-b8cf-4602-9145-6bdaaeda21aa}
• Value:
• Data:
• Key: HKEY_CLASSES_ROOT\interface\{f82fd7d4-2ec8-40b3-a141-de051c98dce9}
• Value:
• Data:
• Key: HKEY_CLASSES_ROOT\spamdet.spamdetector
• Value:
• Data:
• Key: HKEY_CLASSES_ROOT\spamdet.spamdetector.1
• Value:
• Data:
• Key: HKEY_CLASSES_ROOT\typelib\{dfcda823-80c5-4f55-b328-7efd4afbd9a0}
• Value:
• Data:
• Key: HKEY_CLASSES_ROOT\appid\{9da1990b-9bca-4c80-aefb-11a40fa849f9}
• Value:
• Data:
• Key: HKEY_CLASSES_ROOT\appid\{c628512d-a058-4bd4-b47b-b036f45fa02b}
• Value:
• Data:
• Key: HKEY_CLASSES_ROOT\appid\ad-protect.exe
• Value:
• Data:
• Key: HKEY_CLASSES_ROOT\appid\spamdet.dll
• Value:
• Data:
• Key: HKEY_CLASSES_ROOT\clsid\{16dd131d-c09f-4f83-a1e7-a2cf506ea27c}
• Value:
• Data:
• Key: HKEY_CLASSES_ROOT\clsid\{69ebf0db-f6b5-4479-8352-aa632f522d34}
• Value:
• Data:
• Key: HKEY_CLASSES_ROOT\clsid\{7c1530bd-16b0-41a9-b428-17ee8cbd3e06}
• Value:
• Data:
• Key: HKEY_CLASSES_ROOT\expertantivirus.addin
• Value:
• Data:
• Key: HKEY_CLASSES_ROOT\expertantivirus.addin.1
• Value:
• Data:
• Key: HKEY_CLASSES_ROOT\interface\{214345b8-bb69-498d-a168-29f58f15d806}
• Value:
• Data:
• Key: HKEY_CLASSES_ROOT\interface\{3e67e9dc-7294-44c3-bc99-ea6e29e74076}
• Value:
• Data:
• Key: HKEY_CLASSES_ROOT\interface\{7c1530bd-16b0-41a9-b428-17ee8cbd3e06}
• Value:
• Data:
• Key: HKEY_CLASSES_ROOT\interface\{d59b2dd5-0609-4bdc-ab47-a9a28abc482a}
• Value:
• Data:
• Key: HKEY_CLASSES_ROOT\typelib\{b60f5afa-edd2-417d-a438-57f3ebd9e639}
• Value:
• Data:
• Key: HKEY_LOCAL_MACHINE\software\expertantivirus
• Value:
• Data:
• Key: HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\app paths\expertantivirus.exe
• Value:
• Data:
• Key: HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\uninstall\expertantivirus
• Value:
• Data:
• Key: HKEY_CURRENT_USER\software\microsoft\office\outlook\addins\expertantivirus.addin.1
• Value:
• Data:
• Key: HKEY_CURRENT_USER\software\microsoft\windows\currentversion\shell\1das\adloader
• Value:
• Data:
• Key: HKEY_CURRENT_USER\software\microsoft\windows\currentversion\shell\dnl7\tracer
• Value:
• Data:
• Key: HKEY_CURRENT_USER\software\microsoft\windows\currentversion\shell extensions\adloader
• Value:
• Data:
• Key: HKEY_CURRENT_USER\software\microsoft\windows\currentversion\shell extensions\trace7
• Value:
• Data:
• Key: HKEY_CLASSES_ROOT\clsid\{9ec61371-c3b9-fcc1-ee6f-2e4e8d12dffc}
• Value:
• Data:
• Key: HKEY_LOCAL_MACHINE\software\licenses
• Value: {087aeefc8d00eae5b}
• Data:
• Key: HKEY_LOCAL_MACHINE\software\licenses
• Value: {i87aeefc8d00eae5b}
• Data:
• Key: HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\run
• Value: expertantivirus
• Data:
• Key: HKEY_CLASSES_ROOT\clsid\{8a65d464-3374-4d4d-857a-4c63931ec9f3}
• Value:
• Data:
• Key: HKEY_CLASSES_ROOT\htbt.thtbt
• Value:
• Data:
• Key: HKEY_CLASSES_ROOT\interface\{13a25730-ee66-434d-9d19-29c7796f8072}
• Value:
• Data:
• Key: HKEY_CLASSES_ROOT\typelib\{282e8ae5-a8e3-412d-b40c-f5080832ffe0}
• Value:
• Data:
• Key: HKEY_CURRENT_USER\software\microsoft\windows\currentversion\shell\1das
• Value:
• Data:
• Key: HKEY_CURRENT_USER\software\microsoft\windows\currentversion\shell\dnl7
• Value:
• Data: