Created Files

• %ApplicationData%\microsoft\internet explorer\quick launch\spyfalcon *.lnk
• %Desktop%\spyfalcon.lnk
• %Temp%\507b8750.tmp
• %Temp%\sflanguage.ini
• %StartMenu%\spyfalcon *.lnk

Created Folders

• %Temp%\awtmp
• %ProgramFiles%\spyfalcon
• %StartupPrograms%\spyfalcon

Registry Entries

• Key: HKEY_CLASSES_ROOT\spyfalcon.popupblockerconnector
• Value:
• Data:
• Key: HKEY_CLASSES_ROOT\spyfalcon.popupblockerconnector.1
• Value:
• Data:
• Key: HKEY_CLASSES_ROOT\clsid\{330a77c2-c15a-43b5-055c-b4e35eaed279}
• Value:
• Data:
• Key: HKEY_CLASSES_ROOT\interface\{001501e7-c970-4cb1-9740-e055bf3ddfd6}
• Value:
• Data:
• Key: HKEY_CLASSES_ROOT\interface\{0fbbbc44-296d-4a2f-af45-be1ee387f569}
• Value:
• Data:
• Key: HKEY_CLASSES_ROOT\interface\{163469fd-6009-48e2-ad8c-47bb2e0d88be}
• Value:
• Data:
• Key: HKEY_CLASSES_ROOT\interface\{1694e5c6-9e1f-4c3b-b79a-828c2fc40003}
• Value:
• Data:
• Key: HKEY_CLASSES_ROOT\interface\{200bd3a6-a02b-4bac-a364-a9d8017e3c4e}
• Value:
• Data:
• Key: HKEY_CLASSES_ROOT\interface\{20c59f9f-33cb-4b1b-afb6-b710db845709}
• Value:
• Data:
• Key: HKEY_CLASSES_ROOT\interface\{23d80835-4a3a-4572-9f5f-3f24a7a28ae5}
• Value:
• Data:
• Key: HKEY_CLASSES_ROOT\interface\{255cdda3-576b-44c9-b944-46eac18d5d6f}
• Value:
• Data:
• Key: HKEY_CLASSES_ROOT\interface\{3261f690-1ca4-4839-928b-f4f898b74eb7}
• Value:
• Data:
• Key: HKEY_CLASSES_ROOT\interface\{37b9988b-1997-41f4-a832-dae42cc3f7c2}
• Value:
• Data:
• Key: HKEY_CLASSES_ROOT\interface\{5b861fb8-903c-4996-b1d3-e9a86ed4bbcf}
• Value:
• Data:
• Key: HKEY_CLASSES_ROOT\interface\{6876543e-da55-4f90-9cd2-5ed380d9516c}
• Value:
• Data:
• Key: HKEY_CLASSES_ROOT\interface\{701e8c3a-7910-4ccd-a9f8-7b9a5f5b3947}
• Value:
• Data:
• Key: HKEY_CLASSES_ROOT\interface\{850300d6-d53b-4720-9372-6d31b85537e1}
• Value:
• Data:
• Key: HKEY_CLASSES_ROOT\interface\{8c803228-bd61-4744-8b79-949e3f512ddc}
• Value:
• Data:
• Key: HKEY_CLASSES_ROOT\interface\{b7c685f0-1804-4382-a8ef-17d33df97069}
• Value:
• Data:
• Key: HKEY_CLASSES_ROOT\typelib\{244b730e-d899-4e38-9428-03d1143242e0}
• Value:
• Data:
• Key: HKEY_CLASSES_ROOT\interface\{0cbd1cba-e034-4287-9b49-5f2912e1d33b}
• Value:
• Data:
• Key: HKEY_CLASSES_ROOT\interface\{18575620-e41d-4204-bf6f-964069d80f45}
• Value:
• Data:
• Key: HKEY_CLASSES_ROOT\interface\{4b860be9-5b96-4443-9714-6acd89989d1e}
• Value:
• Data:
• Key: HKEY_CLASSES_ROOT\interface\{597892ca-a878-4a04-978f-dba8dc2bb2fb}
• Value:
• Data:
• Key: HKEY_CLASSES_ROOT\interface\{673a88d4-c0e0-40d2-9b93-ae39d9a1675f}
• Value:
• Data:
• Key: HKEY_CLASSES_ROOT\interface\{7cc220da-d962-4935-ad3a-21f7ca4962e3}
• Value:
• Data:
• Key: HKEY_CLASSES_ROOT\interface\{9dd57f95-da3a-4eda-9475-27ccf366a4fd}
• Value:
• Data:
• Key: HKEY_CLASSES_ROOT\interface\{b4d9c59b-a091-4d79-90cc-dd92f3bacf63}
• Value:
• Data:
• Key: HKEY_CLASSES_ROOT\interface\{b8f90f00-cf78-4431-a13f-58b979f7ee20}
• Value:
• Data:
• Key: HKEY_CLASSES_ROOT\interface\{cdeb1fd8-0917-40a2-b915-8fb9d7fdd75c}
• Value:
• Data:
• Key: HKEY_CLASSES_ROOT\interface\{cf277f5a-347e-40c2-baf0-4f09d0607041}
• Value:
• Data:
• Key: HKEY_CLASSES_ROOT\interface\{d5de421a-4aa5-4fe3-aa43-7d2a87d6267f}
• Value:
• Data:
• Key: HKEY_CLASSES_ROOT\interface\{dd2d402a-de41-47a6-aac9-0d756776203e}
• Value:
• Data:
• Key: HKEY_CLASSES_ROOT\interface\{e2f430fd-3062-4808-b23f-4b322bfed93f}
• Value:
• Data:
• Key: HKEY_CLASSES_ROOT\interface\{e9b91e0c-305a-4dd2-9987-b3b0c254c6de}
• Value:
• Data:
• Key: HKEY_CLASSES_ROOT\interface\{efd28371-a165-4873-a158-421d208ffe5a}
• Value:
• Data:
• Key: HKEY_CLASSES_ROOT\typelib\{b4e17829-dacb-4320-9abf-dcb382221fc2}
• Value:
• Data:
• Key: HKEY_CLASSES_ROOT\clsid\{008e3200-28eb-463b-9b58-75c23d80911a}
• Value:
• Data:
• Key: HKEY_CLASSES_ROOT\interface\{5796859d-53c4-46c1-ad6f-2a3c4d4306eb}
• Value:
• Data:
• Key: HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\run
• Value: SpyFalcon
• Data:
• Key: HKEY_LOCAL_MACHINE\software\licenses
• Value: {0484BBA8980BF0CFD}
• Data:
• Key: HKEY_LOCAL_MACHINE\software\licenses
• Value: {I484BBA8980BF0CFD}
• Data:
• Key: HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\app paths\spyfalcon.exe
• Value:
• Data:
• Key: HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\uninstall\spyfalcon
• Value:
• Data:
• Key: HKEY_LOCAL_MACHINE\software\spyfalcon
• Value:
• Data:
• Key: HKEY_LOCAL_MACHINE\software\licenses
• Value: {K7C0DB872A3F777C0}
• Data:
• Key: HKEY_LOCAL_MACHINE\software\licenses
• Value: {R7C0DB872A3F777C0}
• Data: