Created Files

• %Desktop%System Security.lnk
• %Desktop%System Security.lnk
• %Temp%izohore.bmp
• %Desktop%System Security..lnk
• %CommonDesktop%System Security..lnk

Created Folders

• %StartMenu%Programs\System Security
• %StartMenu%Program\System Security
• %StartMenu%Programs\System Security
• %ApplicationData%13645134
• %ApplicationData%13645734

Registry Entries

• Key: HKEY_LOCAL_MACHINE\SYSTEM\ControlSet003\Services\vmscsi\Type
• Value:
• Data:
• Key: HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run
• Value: SystemSecurity
• Data: "C:\Documents and Settings\%userprofile%\Desktop\SystemSecurity.exe"
• Key: HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run
• Value: 314277577
• Data: "C:\Documents and Settings\All Users\Application Data\120573386\314277577.exe"
• Key: HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run
• Value: 359F5809-00B8-4455-A73A-9EA62A51101B
• Data: "C:\Documents and Settings\All Users\Application Data\477274F.exe"
• Key: HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run
• Value: 359F5809-00B8-4455-A73A-9EA62A51101B
• Data: "C:\Documents and Settings\All Users\Application Data\3A76A1EF.exe"
• Key: HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run
• Value: 433591806
• Data: "C:\Documents and Settings\All Users\Application Data\1361987034\433591806.exe"
• Key: HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run
• Value: 1409743529
• Data: "C:\Documents and Settings\All Users\Application Data\1558838974\1409743529.exe"
• Key: HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run
• Value: 1146867637
• Data: "C:\Documents and Settings\All Users\Application Data\18507711\1146867637.exe"
• Key: HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run
• Value: 359F5809-00B8-4455-A73A-9EA62A51101B
• Data: "C:\Documents and Settings\All Users\Application Data\3BE74167.exe"
• Key: HKEY_LOCAL_MACHINE\SOFTWARE\11161974
• Value:
• Data:
• Key: HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run
• Value: 11161974
• Data: C:\Documents and Settings\All Users\Application Data\11161974\11161974.exe
• Key: HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run
• Value: 61181969
• Data: C:\Documents and Settings\All Users\Application Data\61181969\61181969.exe
• Key: HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run
• Value: 91171966
• Data: C:\Documents and Settings\All Users\Application Data\91171966\91171966.exe
• Key: HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\SystemSecurity2009
• Value:
• Data:
• Key: HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run
• Value: 13461474
• Data: C:\Documents and Settings\All Users\Application Data\13461474\13461474.exe
• Key: HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run
• Value: 13645134
• Data: C:\Documents and Settings\All Users\Application Data\13645134\13645134.exe
• Key: HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run
• Value: 13645734
• Data: C:\Documents and Settings\All Users\Application Data\13645734\13645734.exe