Created Files

• %Desktop%Security Tool.lnk
• %StartMenu%Programs\Security Tool

Created Folders

• %CommonPrograms%SecurityTool
• %ApplicationData%[randomnamedfolder]

Registry Entries

• Key: HKEY_CURRENT_USER\Software\Security Tool
• Data: C:\Documents and Settings\%userprofile%\Application Data\[randomnumber]\[randomnumber].bat
• Key: HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run
• Value: [randomnumber]
• Data: C:\DOCUME~1\ALLUSE~1\APPLIC~1\[randomnumber]\[randomnumber].exe