CryptDrive

CryptDrive

Found: 
2007-09-14
Known system changes: 

Created Files

  • %System%driver\drvprt.sys
  • %System%driver\FIBL.sys
  • %Desktop%CryptDrive.lnk

Created Folders

  • %ProgramFiles%CryptDrive
  • %CommonPrograms%CryptDrive
  • %ApplicationData%CryptDrive
  • %UserProfile%Documents and Settings\My Crypted Drives

Registry Entries

  • Key: HKEY_LOCAL_MACHINE\SOFTWARE\5110000C29AB08B8
  • Value:
  • Data:
  • Key: HKEY_CURRENT_USER\software\cryptdrive
  • Value:
  • Data:
  • Key: HKEY_CURRENT_USER\software\microsoft\windows\currentversion\ext\stats\{46008301-af55-4788-9834-28b182cd6daa}
  • Value:
  • Data:
  • Key: HKEY_CLASSES_ROOT\*\shellex\contextmenuhandlers\cryptdrive
  • Value:
  • Data:
  • Key: HKEY_CLASSES_ROOT\*\shellex\contextmenuhandlers\cryptdrive2
  • Value:
  • Data:
  • Key: HKEY_CLASSES_ROOT\.cde
  • Value:
  • Data:
  • Key: HKEY_CLASSES_ROOT\.dck
  • Value:
  • Data:
  • Key: HKEY_CLASSES_ROOT\appid\{a31fd134-41e3-4edc-8562-4ec2174b7760}
  • Value:
  • Data:
  • Key: HKEY_CLASSES_ROOT\appid\blockengine.exe
  • Value:
  • Data:
  • Key: HKEY_CLASSES_ROOT\blockengine.fileblockengine
  • Value:
  • Data:
  • Key: HKEY_CLASSES_ROOT\blockengine.fileblockengine.1
  • Value:
  • Data:
  • Key: HKEY_CLASSES_ROOT\cdtoolbar.shellband
  • Value:
  • Data:
  • Key: HKEY_CLASSES_ROOT\cdtoolbar.shellband.1
  • Value:
  • Data:
  • Key: HKEY_CLASSES_ROOT\clsid\{1b3ec7f9-57e1-4984-9ccd-b43b8eabfcd0}
  • Value:
  • Data:
  • Key: HKEY_CLASSES_ROOT\CLSID\{28D2C24E-7F71-4B2C-86D8-5EC1AD73AFD6}
  • Value:
  • Data:
  • Key: HKEY_CLASSES_ROOT\clsid\{3a4b423c-db81-45ec-b02c-962ca14eb2b1}
  • Value:
  • Data:
  • Key: HKEY_CLASSES_ROOT\clsid\{46008301-af55-4788-9834-28b182cd6daa}
  • Value:
  • Data:
  • Key: HKEY_CLASSES_ROOT\CLSID\{6B488E78-3548-4CBC-8828-781EFB6C771B}
  • Value:
  • Data:
  • Key: HKEY_CLASSES_ROOT\clsid\{72b018b1-1c89-4ec8-bae3-7eefb38825f9}
  • Value:
  • Data:
  • Key: HKEY_CLASSES_ROOT\clsid\{b201fc48-33f7-4709-a519-2a8226f488be}
  • Value:
  • Data:
  • Key: HKEY_CLASSES_ROOT\clsid\{da9f5f72-18ac-43e8-9ff6-a4a7463f581c}
  • Value:
  • Data:
  • Key: HKEY_CLASSES_ROOT\cryptdrive.encrypted
  • Value:
  • Data:
  • Key: HKEY_CLASSES_ROOT\cryptdrive.storage
  • Value:
  • Data:
  • Key: HKEY_CLASSES_ROOT\cryptdrive.storage key
  • Value:
  • Data:
  • Key: HKEY_CLASSES_ROOT\directory\shellex\contextmenuhandlers\cryptdrive
  • Value:
  • Data:
  • Key: HKEY_CLASSES_ROOT\Interface\{1D27F0F6-418C-4645-BB9B-F1D75EB4E7EF}
  • Value:
  • Data:
  • Key: HKEY_CLASSES_ROOT\interface\{23913e4d-fcc3-4f2d-a027-8766dd561d66}
  • Value:
  • Data:
  • Key: HKEY_CLASSES_ROOT\Interface\{3213BE8D-02EB-4DDF-B7F8-9501463E63D6}
  • Value:
  • Data:
  • Key: HKEY_CLASSES_ROOT\Interface\{6CD0567F-493A-4AC8-8542-00427917BFFF}
  • Value:
  • Data:
  • Key: HKEY_CLASSES_ROOT\interface\{9ae6710d-b16a-4aee-b96c-c93439cbd814}
  • Value:
  • Data:
  • Key: HKEY_CLASSES_ROOT\interface\{b92b5a9f-39ed-4fd0-8d10-28b95d022a11}
  • Value:
  • Data:
  • Key: HKEY_CLASSES_ROOT\Interface\{C721E836-3E81-43F4-971F-4A6E324E2561}
  • Value:
  • Data:
  • Key: HKEY_CLASSES_ROOT\Interface\{E7FB27A8-A84C-4EA5-95DF-732092DDC018}
  • Value:
  • Data:
  • Key: HKEY_CLASSES_ROOT\safefileoperations.encryptfile
  • Value:
  • Data:
  • Key: HKEY_CLASSES_ROOT\safefileoperations.encryptfile.1
  • Value:
  • Data:
  • Key: HKEY_CLASSES_ROOT\safefileoperations.securedelete
  • Value:
  • Data:
  • Key: HKEY_CLASSES_ROOT\safefileoperations.securedelete.1
  • Value:
  • Data:
  • Key: HKEY_CLASSES_ROOT\sdshellext.clearrecycleext
  • Value:
  • Data:
  • Key: HKEY_CLASSES_ROOT\sdshellext.clearrecycleext.1
  • Value:
  • Data:
  • Key: HKEY_CLASSES_ROOT\sdshellext.encryptfileext
  • Value:
  • Data:
  • Key: HKEY_CLASSES_ROOT\sdshellext.encryptfileext.1
  • Value:
  • Data:
  • Key: HKEY_CLASSES_ROOT\sdshellext.securedeleteext
  • Value:
  • Data:
  • Key: HKEY_CLASSES_ROOT\sdshellext.securedeleteext.1
  • Value:
  • Data:
  • Key: HKEY_CLASSES_ROOT\TypeLib\{0CCB715F-EA4E-4AFA-AA31-9B3EFC5FC803}
  • Value:
  • Data:
  • Key: HKEY_CLASSES_ROOT\TypeLib\{19D73FC5-BA35-458E-B68D-0E79816F78BD}
  • Value:
  • Data:
  • Key: HKEY_CLASSES_ROOT\typelib\{a31fd134-41e3-4edc-8562-4ec2174b7760}
  • Value:
  • Data:
  • Key: HKEY_CLASSES_ROOT\typelib\{d42d40e8-16cb-4d71-80d1-a0fd7303a35c}
  • Value:
  • Data:
  • Key: HKEY_CLASSES_ROOT\wsc.productcheckerucd
  • Value:
  • Data:
  • Key: HKEY_LOCAL_MACHINE\software\cryptdrive
  • Value:
  • Data:
  • Key: HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\uninstall\ucd_is1
  • Value:
  • Data:
  • Key: HKEY_LOCAL_MACHINE\system\controlset001\enum\root\legacy_drvprt
  • Value:
  • Data:
  • Key: HKEY_LOCAL_MACHINE\system\controlset001\enum\root\legacy_fibl
  • Value:
  • Data:
  • Key: HKEY_LOCAL_MACHINE\system\controlset001\services\drvprt
  • Value:
  • Data:
  • Key: HKEY_LOCAL_MACHINE\system\controlset001\services\fibl
  • Value:
  • Data:
  • Key: HKEY_LOCAL_MACHINE\system\currentcontrolset\enum\root\legacy_drvprt
  • Value:
  • Data:
  • Key: HKEY_LOCAL_MACHINE\system\currentcontrolset\enum\root\legacy_fibl
  • Value:
  • Data:
  • Key: HKEY_LOCAL_MACHINE\system\currentcontrolset\services\drvprt
  • Value:
  • Data:
  • Key: HKEY_LOCAL_MACHINE\system\currentcontrolset\services\fibl
  • Value:
  • Data:
  • Key: HKEY_CURRENT_USER\software\microsoft\internet explorer\toolbar\shellbrowser
  • Value: {46008301-af55-4788-9834-28b182cd6daa}
  • Data:
  • Key: HKEY_LOCAL_MACHINE\software\microsoft\internet explorer\toolbar
  • Value: {46008301-af55-4788-9834-28b182cd6daa}
  • Data:
  • Key: HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\run
  • Value: cryptdrive
  • Data:
  • Key: HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\run
  • Value: ucdcw
  • Data:
  • Key: HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\shell extensions\approved
  • Value: {b201fc48-33f7-4709-a519-2a8226f488be}
  • Data:
  • Key: HKEY_CLASSES_ROOT\.dcr
  • Value:
  • Data:
  • Key: HKEY_CLASSES_ROOT\CLSID\{092C7410-3EBD-4EF8-9D84-AD54D179E4C8}
  • Value:
  • Data:
  • Key: HKEY_CLASSES_ROOT\WSC.ProductCheckerCD
  • Value:
  • Data:
  • Key: HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\CD_is1
  • Value:
  • Data:
  • Key: HKEY_CURRENT_USER\Software\Microsoft\Internet Explorer\Toolbar\ShellBrowser
  • Value: {46008301-AF55-4788-9834-28B182CD6DAA}
  • Data: 01, 83, 00, 46, 55, AF, 88, 47, 98, 34, 28, B1, 82, CD, 6D, AA