Created Files

• %Temp%~6.dll
• %Temp%~4.exe
• %System%critical_warning.html

Created Folders

• %ProgramFiles%Protector

Registry Entries

• Key: HKEY_LOCAL_MACHINE\SOFTWARE\Protector
• Value:
• Data:
• Key: HKEY_CLASSES_ROOT\CLSID\{5199201E-60B4-11DE-85CF-260556D89593}
• Value:
• Data:
• Key: HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\ControlPanel\NameSpace\{5199201E-60B4-11DE-85CF-260556D89593}
• Value:
• Data:
• Key: HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Desktop\NameSpace\{5199201E-60B4-11DE-85CF-260556D89593}
• Value:
• Data:
• Key: HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\MyComputer\NameSpace\{5199201E-60B4-11DE-85CF-260556D89593}
• Value:
• Data:
• Key: HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\NetworkNeighborhood\NameSpace\{5199201E-60B4-11DE-85CF-260556D89593}
• Value:
• Data:
• Key: HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\AntiSpyWare
• Value:
• Data:
• Key: HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\RunOnce
• Value: Protector
• Data: C:\Program Files\Protector\protector.exe -startup