Created Files

• %Desktop%MalwareCrush.lnk
• %Desktop%MalwareCrush..lnk
• %StartMenu%MalwareCrush.
• %ApplicationData%Microsoft\Internet Explorer\Quick Launch\MalwareCrush 3.7.

Created Folders

• %ProgramFiles%MalwareCrush
• %CommonStartMenu%MalwareCrush
• %StartMenu%Programs\MalwareCrush

Registry Entries

• Key: HKEY_CLASSES_ROOT\gln.glnbho
• Value:
• Data:
• Key: HKEY_CLASSES_ROOT\gln.glnbho.1
• Value:
• Data:
• Key: HKEY_LOCAL_MACHINE\software\microsoft\windows nt\currentversion\winlogon\notify\feecccfdb
• Value:
• Data:
• Key: HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\run
• Value: winupdate engine
• Data:
• Key: HKEY_CLASSES_ROOT\interface\{28621188-61c7-4829-a54b-3b73d055e982}
• Value:
• Data:
• Key: HKEY_CLASSES_ROOT\interface\{3544568d-d586-4746-84b9-84c7706ad597}
• Value:
• Data:
• Key: HKEY_CLASSES_ROOT\interface\{4f2a5211-53b6-4c07-9a6d-959bf989528f}
• Value:
• Data:
• Key: HKEY_CLASSES_ROOT\interface\{535841d3-f4e1-4d3a-b506-cbc7f4e14913}
• Value:
• Data:
• Key: HKEY_CLASSES_ROOT\interface\{58035c9e-9a00-42fe-8f38-b380704f8eba}
• Value:
• Data:
• Key: HKEY_CLASSES_ROOT\interface\{5c6d3658-833b-4e33-8bf4-77c4173770cf}
• Value:
• Data:
• Key: HKEY_CLASSES_ROOT\interface\{6d1595ce-b92a-47c5-9cc3-ae11e5a9aafa}
• Value:
• Data:
• Key: HKEY_CLASSES_ROOT\interface\{83481be4-117a-4bb4-87b1-2b14528b64a7}
• Value:
• Data:
• Key: HKEY_CLASSES_ROOT\interface\{878bf64d-da3b-417c-a957-19662d5331c3}
• Value:
• Data:
• Key: HKEY_CLASSES_ROOT\interface\{8a5b98b5-6cc9-49d4-967c-bb6aaa04e7e4}
• Value:
• Data:
• Key: HKEY_CLASSES_ROOT\interface\{8c55cf0f-fd4a-4b03-9365-906b0bfa86cc}
• Value:
• Data:
• Key: HKEY_CLASSES_ROOT\interface\{b216377d-994c-4555-b44f-35f64d586833}
• Value:
• Data:
• Key: HKEY_CLASSES_ROOT\interface\{c2105722-4ecc-48e8-866a-bf166ca967c4}
• Value:
• Data:
• Key: HKEY_CLASSES_ROOT\interface\{c4585709-b01d-4ee5-9274-3e34ea56e4b8}
• Value:
• Data:
• Key: HKEY_CLASSES_ROOT\interface\{cccc68a6-7114-423a-b9a5-7110eb925edd}
• Value:
• Data:
• Key: HKEY_CLASSES_ROOT\interface\{e04407f5-f6b9-495d-a767-4d860e42dbe2}
• Value:
• Data:
• Key: HKEY_CLASSES_ROOT\typelib\{5a4c66fb-4b04-478c-b855-fca385797db7}
• Value:
• Data:
• Key: HKEY_LOCAL_MACHINE\software\malwarecrush
• Value:
• Data:
• Key: HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\app paths\malwarecrush.exe
• Value:
• Data:
• Key: HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\uninstall\malwarecrush
• Value:
• Data:
• Key: HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\run
• Value: malwarecrush
• Data:
• Key: HKEY_CLASSES_ROOT\clsid\{e4d71e45-94e1-a19a-a939-b7d2a756f719}
• Value:
• Data:
• Key: HKEY_LOCAL_MACHINE\software\microsoft\windows nt\currentversion\winlogon\notify\eaebaecdfbfdee
• Value:
• Data:
• Key: HKEY_LOCAL_MACHINE\system\controlset001\services\cdaudio
• Value:
• Data:
• Key: HKEY_LOCAL_MACHINE\system\currentcontrolset\services\cdaudio
• Value:
• Data: