Files

%ProgramFiles%\def group\PC Defender\Antispyware.exe

%common desktop%\PC Defender.lnk

Folders
%ProgramFiles%\def group

%Common Startmenu%\Programs\PC Defender

RegistryEntries
Key: HKEY_CURRENT_USER\Software\Def Group

Key: HKEY_LOCAL_MACHINE\Software\Microsoft\Windows NT\Currentversion\Winlogon

Value: "Userinit"

Data: "C:\Windows\system32\userinit.exe,"C:\Program Files\Def Group\PC Defender\Antispyware.exe""