Created Files

• %Windir%k.txt
• %Desktop%WinDefender 2009.lnk
• %StartMenu%Programs\WinDefender 2009
• %StartMenu%Program\WinDefender 2009
• %Desktop%WinDefender 2009.lnk
• %StartMenu%\Programs\WinDefender 2009.lnk
• %Desktop%WinDefender 2009..lnk

Created Folders

• %ProgramFiles%WinDefender
• %ProgramFiles%WinDefender

Registry Entries

• Key: HKEY_CURRENT_USER\software\windefender2009
• Value:
• Data:
• Key: HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\uninstall\windefender 2009
• Value:
• Data:
• Key: HKEY_CURRENT_USER\software\microsoft\windows\currentversion\run
• Value: windefender2009
• Data:
• Key: HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Run
• Value: WinDefender2009
• Data: C:\Program Files\WinDefender\wdscan.exe