Created Files

• %Desktop%SaveArmor.lnk

Created Folders

• %ProgramFiles%SaveArmor
• %CommonPrograms%SaveArmor

Registry Entries

• Key: HKEY_CURRENT_USER\software\SaveArmor
• Value:
• Data:
• Key: HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\SaveArmor
• Value:
• Data:
• Key: HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Services\SaveArmorSvc
• Value:
• Data:
• Key: HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SaveArmorSvc
• Value:
• Data:
• Key: HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Run
• Value: 0mlark3g.exe
• Data: C:\WINDOWS\system32\0mlark3g.exe
• Key: HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Run
• Value: SaveArmor
• Data: C:\Program Files\SaveArmor Software\SaveArmor\SaveArmor.exe -min