Created Files

Created Folders

• %ProgramFiles%exav

Registry Entries

• Key: HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Policies\Explorer
• Value: NoFind
• Data: 01, 00, 00, 00
• Key: HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Policies\Explorer
• Value: NoRun
• Data: 01, 00, 00, 00
• Key: HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Policies\Explorer
• Value: NoSetFolders
• Data: 01, 00, 00, 00
• Key: HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Policies\Explorer
• Value: NoViewOnDrive
• Data: FF, FF, FF, 03
• Key: HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Policies\System
• Value: DisableRegistryTools
• Data: 01, 00, 00, 00
• Key: HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Policies\System
• Value: DisableTaskMgr
• Data: 01, 00, 00, 00
• Key: HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run
• Value: av
• Data: C:\Program Files\exav\expressav.exe