Files
%Desktop%\Antivir*

Folders
%ProgramFiles%\AV
%CommonProgramFiles%\Uninstall\AV
%CommonStartMenu%\AV

RegistryEntries
Key: HKEY_CURRENT_CONFIG\Software\EVAACD
Key: HKEY_CLASSES_ROOT\CLSID\{35A5B43B-CB8A-49CA-A9F4-D3B308D2E3CC}
Key: HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{35A5B43B-CB8A-49CA-A9F4-D3B308D2E3CC}
Key: HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Run
Value: AV
Key: HKEY_CURRENT_USER\Software\FNULL584
Key: HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\{6A23338A-C725-48D0-BA96-B12FDD22DD39}_is1