* PUP.SAntivirus
- key
hklm\software\classes\*\shellex\contextmenuhandlers\santivirusshellextension.filecontextmenuext
hklm\system\currentcontrolset\services\santivirusic
hklm\system\currentcontrolset\services\santiviruskd
hklm\system\currentcontrolset\services\santivirussvc
hklm\software\santivirus
hklm\software\segoption
hklm\software\santivirusproduct
hklm\software\microsoft\windows\santivirus
hklm\software\microsoft\windows\currentversion\uninstall\santivirus
hklm\software\classes\systemfileassociations\*\shellex\contextmenuhandlers\santivirusshellextension.filecontextmenuext
hklm\software\microsoft\tracing\santivirusclient_rasapi32
hklm\software\microsoft\tracing\santivirusclient_rasmancs
hklm\software\microsoft\tracing\santivirusservice_rasapi32
hklm\software\microsoft\tracing\santivirusservice_rasmancs
hklm\software\classes\clsid\{7784be7f-a15c-4a41-acf5-4cc020154952}

- files
c:\program files\santivirus\santivirusic.exe
c:\program files\santivirus\santiviruskd.sys
c:\program files\santivirus\santivirusservice.exe
c:\programdata\microsoft\windows\start menu\programs\santivirus\santivirus product.lnk
c:\users\{username}\appdata\roaming\santivirusclient\santivirusclientconfig.xml
c:\program files\santivirus\santivirusshell64_v102119.dll
c:\program files\santivirus\santivirusshell86_v102119.dll

- Folders

c:\program files\santivirus
c:\programdata\santivirus

c:\users\{username}\appdata\roaming\santivirusclient
c:\programdata\microsoft\windows\start menu\programs\santivirus