Created Files

• %Temp%logs.wp
• c:\Temp\logs.wp
• %Desktop%WinPerformance.lnk
• %CommonPrograms%WinPerformance
• %CommonPrograms%WinPerformance.lnk
• %CommonStartMenu%Programs\Win_Performance.lnk
• %Desktop%Win_Performance.lnk
• %Temp%c:\Temp\JET917.tmp
• c:\Temp\JET917.tmp
• %Desktop%Win_Performance..lnk
• %CommonStartMenu%Programs\Win_Performance.

Created Folders

• %ProgramFiles%WinPerformance
• %ProgramFiles%Win_Performance
• %Windir%PerfInfo

Registry Entries

• Key: HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\uninstall\win_performance
• Value:
• Data:
• Key: HKEY_LOCAL_MACHINE\software\odbc\brazos volatile counter
• Value:
• Data:
• Key: HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\run
• Value: checkwinperf
• Data:
• Key: HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\uninstall\winperformance
• Value:
• Data:
• Key: HKEY_LOCAL_MACHINE\software\winperformance
• Value:
• Data:
• Key: HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\run
• Value: winperformance
• Data:
• Key: HKEY_LOCAL_MACHINE\software\odbc\temporary (volatile) jet dsn for process 0xa4 thread 0x4c8 dbc 0xba3f34 jet
• Value:
• Data:
• Key: HKEY_LOCAL_MACHINE\software\win_performance
• Value:
• Data:
• Key: HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\run
• Value: win_performance
• Data: