Files
%ApplicationData%\Microsoft\Internet Explorer\Quick Launch\Security Master AV.lnk
%StartMenu%\Security Master AV.lnk
%StartMenu%\Programs\Security Master AV.lnk
%Desktop%\Security Master AV.lnk

Folders
%ApplicationData%\Security Master AV

RegistryEntries
Key: HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Run
Value: Security Master AV
Data: "C:\Documents and Settings\All Users\Application Data\90d03a6\SM90d0.exe" /s /d
Key: HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Image File Execution Options\<MANY>
Key: HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Services\SharedAccess\Parameters\FirewallPolicy\StandardProfile\AuthorizedApplications\List
Value: C:\Documents and Settings\All Users\Application Data\90d03a6\SM90d0.exe
Data: C:\Documents and Settings\All Users\Application Data\90d03a6\SM90d0.exe:*:Enabled:Security Master AV
Key: HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\StandardProfile\AuthorizedApplications\List
Value: C:\Documents and Settings\All Users\Application Data\90d03a6\SM90d0.exe
Data: C:\Documents and Settings\All Users\Application Data\90d03a6\SM90d0.exe:*:Enabled:Security Master AV