EvidenceEraser

EvidenceEraser

Found: 
2008-02-25
Known system changes: 

Created Files

  • %ApplicationData%Microsoft\Internet Explorer\Quick Launch\EvidenceEraser*.lnk
  • %ProgramFiles%Microsoft\Internet Explorer\Quick Launch\EvidenceEraser.lnk
  • %Desktop%EvidenceEraser.lnk
  • %Desktop%EvidenceEraserPro.lnk

Created Folders

  • %StartMenu%Programs\EvidenceEraser
  • %ApplicationData%EvidenceEraser
  • %ProgramFiles%EvidenceEraser
  • %CommonStartMenu%EvidenceEraser
  • %CommonStartMenu%Programs\EvidenceEraser
  • %ProgramFiles%EvidenceEraserPro
  • %CommonPrograms%EvidenceEraserPro

Registry Entries

  • Key: HKEY_CURRENT_USER\software\evidenceeraser
  • Value:
  • Data:
  • Key: HKEY_CLASSES_ROOT\*\shellex\contextmenuhandlers\privacyshellext
  • Value:
  • Data:
  • Key: HKEY_CLASSES_ROOT\allfilesystemobjects\shellex\contextmenuhandlers\privacyshellext
  • Value:
  • Data:
  • Key: HKEY_CLASSES_ROOT\AppID\{D9A9DE7F-A259-4BC1-A348-87BC1053C4E8}
  • Value:
  • Data:
  • Key: HKEY_CLASSES_ROOT\appid\privacyshell.dll
  • Value:
  • Data:
  • Key: HKEY_CLASSES_ROOT\CLSID\{6D642CFA-40F8-4AE0-9144-538BC1D725E4}
  • Value:
  • Data:
  • Key: HKEY_CLASSES_ROOT\directory\shellex\contextmenuhandlers\privacyshellext
  • Value:
  • Data:
  • Key: HKEY_LOCAL_MACHINE\software\evidenceeraser
  • Value:
  • Data:
  • Key: HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\uninstall\evidenceeraser_is1
  • Value:
  • Data:
  • Key: HKEY_CURRENT_USER\software\microsoft\windows\currentversion\run
  • Value: evidenceeraser
  • Data:
  • Key: HKEY_CURRENT_USER\software\microsoft\windows\currentversion\explorer\menuorder\start menu\programs\evidenceeraser
  • Value: order
  • Data:
  • Key: HKEY_CURRENT_USER\Software\EvidenceEraserPro
  • Value:
  • Data:
  • Key: HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\EEP_is1
  • Value:
  • Data:
  • Key: HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\FixPOFactivate_is1
  • Value:
  • Data:
  • Key: HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Run
  • Value: EvidenceEraserPro
  • Data: C:\Program Files\EvidenceEraserPro\eep.exe