Trojan. RegistryTool

 

 

* Registry path

 

HKEY_LOCAL_MACHINE\SOFTWARE\RegistryTool

HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Installer\Products\FF8BF459FCF72F6468F9B1161D129240

HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\2E7B0CF59A49DD112A4A1A8A558D5939
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\35D7BD4CC711CDF49BC040E53CB1ABE4
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\8B19E3879A49DD11C92A689A558D5939
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\A0C4A6279A49DD117843D69A558D5939
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\A92F05DEDE72B4043A3A7C1C0BDDE8B7
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\EC5D4AC69A49DD11BA9E059A558D5939

HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Products\FF8BF459FCF72F6468F9B1161D129240

HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\{954FB8FF-7FCF-46F2-869F-1B61D1212904}

 

* File path

 

C\ProgramData\Microsoft\Windows\Start Menu\Programs\RegistryTool\Uninstall RegistryTool.lnk
C\Program Files\Downloaded Installers\{954FB8FF-7FCF-46F2-869F-1B61D1212904}\setup.msi
C\Users\Public\Desktop\RegistryTool.lnk
C\ProgramData\Microsoft\Windows\Start Menu\Programs\RegistryTool\RegistryTool.lnk
C\Program Files\RegistryTool\RegistryTool.exe
C\ProgramData\Microsoft\Windows\Start Menu\Programs\RegistryTool\RegistryTool on the Web.lnk
C\ProgramData\Microsoft\Windows\Start Menu\Programs\RegistryTool\RegistryTool Help.lnk
C\Program Files\Downloaded Installers\{954FB8FF-7FCF-46F2-869F-1B61D1212904}
C\ProgramData\Microsoft\Windows\Start Menu\Programs\RegistryTool
C\Program Files\RegistryTool
C\Program Files\Downloaded Installers