SystemProtector

SystemProtector

Found: 
2009-04-01
Known system changes: 

Created Files

  • %Desktop%System Protector.lnk
  • %ApplicationData%install.exe
  • %ApplicationData%lsascs.exe
  • %ApplicationData%shellex.dll
  • %System%spyprotector.cpl

Created Folders

  • %ApplicationData%SpyProtector
  • %CommonPrograms%SpyProtector

Registry Entries

  • Key: HKEY_CLASSES_ROOT\CLSID\{107A1D63-2EAA-4694-8ABA-EC209C630D83}
  • Value:
  • Data:
  • Key: HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\App Paths\lsascs.exe
  • Value:
  • Data:
  • Key: HKEY_CLASSES_ROOT\*\shellex\ContextMenuHandlers\System Protector
  • Value:
  • Data:
  • Key: HKEY_CLASSES_ROOT\Directory\shellex\ContextMenuHandlers\System Protector
  • Value:
  • Data:
  • Key: HKEY_CLASSES_ROOT\Drive\shellex\ContextMenuHandlers\System Protector
  • Value:
  • Data:
  • Key: HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run
  • Value: Rpunecofezipahal
  • Data: rundll32.exe "C:\WINDOWS\Ldexafomohuxewo.dll",e
  • Key: HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run
  • Value: System Protector
  • Data: C:\Documents and Settings\%userprofile%\Application Data\lsascs.exe