Created Files

• %Desktop%Personal Protector.lnk
• %Windir%tempfile2.bat

Created Folders

• %ProgramFiles%Personal Protector
• %CommonPrograms%Personal Protector

Registry Entries

• Key: HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\Personal Protector
• Value:
• Data:
• Key: HKEY_LOCAL_MACHINE\SOFTWARE\Personal Protector
• Value:
• Data:
• Key: HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run
• Value: personalprotector
• Data: C:\Program Files\Personal Protector\personalprotector.exe
• Key: HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\RunOnce
• Value: suicide
• Data: C:\WINDOWS\tempfile2.bat
• Key: HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\PCHealth\PchSvc
• Value: DataCollection
• Data: 20091116172436.000000-000