Created Files

• %Desktop%WinXDefender.lnk

Created Folders

• %ProgramFiles%WinXDefender
• %CommonPrograms%WinXDefender

Registry Entries

• Key: HKEY_CURRENT_USER\software\microsoft\windows\currentversion\run
• Value: winxdefender
• Data:
• Key: HKEY_CURRENT_USER\software\winxdefender
• Value:
• Data:
• Key: HKEY_CLASSES_ROOT\clsid\{42d6555c-7b97-4531-92f6-a8fca188fc2b}
• Value:
• Data:
• Key: HKEY_CLASSES_ROOT\clsid\{6aad1ee3-2ae8-4c0f-b7de-735a42ec8df9}
• Value:
• Data:
• Key: HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\shellserviceobjectdelayload
• Value: zip
• Data: