RDN/Generic.bfr!gn!23​921F18CCF2

This page shows details and results of our analysis on the malware RDN/Generic.bfr!gn!23921F18CCF2

Overview

This is a Trojan detection. Unlike viruses, Trojans do not self-replicate. They are spread manually, often under the premise that they are beneficial or wanted. The most common installation methods involve system or security exploitation, and unsuspecting users manually executing unknown programs. Distribution channels include e-mail, malicious or hacked Web pages, Internet Relay Chat (IRC), peer-to-peer networks, etc.


Minimum DAT

7394 (2014-03-31)

Updated DAT

7394 (2014-03-31)

Minimum Engine

5600.1067

File Length

332464

Description Added

2014-03-31

Description Modified

2014-03-31

Malware Proliferation

Characteristics

This is a Trojan

File PropertiesProperty Values
McAfee DetectionRDN/Generic.bfr!gn
Length332464 bytes
MD523921f18ccf2920be14f1feda9c8dfbc
SHA115cab2b33541823003d88e7db4f52b9180a58a90


Other Common Detection Aliases

Company NamesDetection Names
aviraADWARE/InstallRex.Gen7
KasperskyTrojan.Win32.AntiFW.b
Dr.WebTrojan.WebPick.29
EsetWin32/InstalleRex.P application
vba32Downloader.Adload

Other brands and names may be claimed as the property of others.


ActivitiesRisk Levels
Attempts to connect to a high risk domain that may pose a security risk.High
Attempts to download an executable file from the web.Medium
Attempts to connect to a medium risk domain that may pose a minor security risk.Medium
Enumerates many system files and directories.Low
Enumerates process listLow
Attempts to send data or commands via HTTPLow
Process attempts to call itself recursivelyLow
Adds or modifies Internet Explorer cookiesLow


McAfee ScansScan Detections
McAfee BetaRDN/Generic.bfr!gn
McAfee SupportedRDN/Generic.bfr!gn



System Changes

Some path values have been replaced with environment variables as the exact location may vary with different configurations.
e.g.
%WINDIR% = \WINDOWS (Windows 9x/ME/XP/Vista/7), \WINNT (Windows NT/2000)
%PROGRAMFILES% = \Program Files


The following files were analyzed:

15CAB2B33541823003D88E7DB4F52B9180A58A90

The following files have been added to the system:

  • %ALLUSERSPROFILE%\Application Data\InstallMate\{6CBFB4EA-EC65-40E2-A209-A447B75C961C}\_Setup.dll
  • %WINDIR%\Tasks\SW.Booster-S-5458797678.job
  • %TEMP%\{6CBFB4EA-EC65-40E2-A209-A447B75C961C}\general_logo.jpg
  • %ALLUSERSPROFILE%\Application Data\InstallMate\{6CBFB4EA-EC65-40E2-A209-A447B75C961C}\Setup.dat
  • %TEMP%\{6CBFB4EA-EC65-40E2-A209-A447B75C961C}\general_logo.bmp
  • %ALLUSERSPROFILE%\Application Data\InstallMate\{6CBFB4EA-EC65-40E2-A209-A447B75C961C}\20121115162344.log
  • %TEMP%\15CAB2B33541823003D88E7DB4F52B9180A58A90.log
  • %ALLUSERSPROFILE%\Application Data\InstallMate\{6CBFB4EA-EC65-40E2-A209-A447B75C961C}\Custom.dll
  • %PROGRAMFILES%\Ss-Supporter\Assistant.dll
  • %ALLUSERSPROFILE%\Application Data\InstallMate\{6CBFB4EA-EC65-40E2-A209-A447B75C961C}\Setup.exe
  • %ALLUSERSPROFILE%\Application Data\Puresafe\SW.Booster\SW.Booster.exe
  • %TEMP%\{6CBFB4EA-EC65-40E2-A209-A447B75C961C}\v_grey.jpg
  • %TEMP%\{6CBFB4EA-EC65-40E2-A209-A447B75C961C}\x64\regsvr32.exe
  • %TEMP%\~DF4E27.tmp
  • %TEMP%\{6CBFB4EA-EC65-40E2-A209-A447B75C961C}\x86\regsvr32.exe
  • %ALLUSERSPROFILE%\Application Data\InstallMate\{6CBFB4EA-EC65-40E2-A209-A447B75C961C}\TsuDll.dll
  • %ALLUSERSPROFILE%\Application Data\InstallMate\{6CBFB4EA-EC65-40E2-A209-A447B75C961C}\Readme.txt
  • %ALLUSERSPROFILE%\Application Data\puresafe\SW.Booster\5458797678.ini
  • %PROGRAMFILES%\Ss-Supporter\AssistantSvc.dll
  • %ALLUSERSPROFILE%\Application Data\InstallMate\{6CBFB4EA-EC65-40E2-A209-A447B75C961C}\Setup.ico

The following files have been changed:

  • %TEMP%orary Internet Files\Content.IE5\index.dat

The following files have been deleted:

  • %TEMP%\{6CBFB4EA-EC65-40E2-A209-A447B75C961C}\addons\111000451
  • %ALLUSERSPROFILE%\Application Data\InstallMate\693F8B8C\cfg

The following files were temporarily written to disk then later removed:

  • %TEMP%\down.1388.4_1.ini.part
  • %TEMP%\down.1388.5.ini.part
  • %ALLUSERSPROFILE%\Application Data\InstallMate\693F8B8C\cfg\2.ini
  • %TEMP%\693F8B8C.dat
  • %TEMP%\down.1388.4_1_2.ini.part
  • %TEMP%\down.1388.4_2.ini.part
  • %TEMP%\down.1388.4_2_1.ini.part
  • %ALLUSERSPROFILE%\Application Data\InstallMate\693F8B8C\cfg\5.ini
  • %TEMP%\tf00294823.dll
  • %TEMP%\Tsu5C75F4F3.dll
  • %ALLUSERSPROFILE%\Application Data\InstallMate\693F8B8C\cfg\4_2.ini
  • %USERPROFILE%\Local Settings\Application Data\Temp\UHGPBE.tmp
  • %TEMP%\{6CBFB4EA-EC65-40E2-A209-A447B75C961C}\Readme.txt
  • %TEMP%\down.1388.3.ini.part
  • %TEMP%\down.1388.general_logo.jpg.part
  • %TEMP%\{6CBFB4EA-EC65-40E2-A209-A447B75C961C}\addons\11[private subnet]E.tmp
  • %TEMP%\{6CBFB4EA-EC65-40E2-A209-A447B75C961C}\Addons\extfs_setup.exe
  • %TEMP%\down.1388.ext_setup.exe.part
  • %ALLUSERSPROFILE%\Application Data\InstallMate\693F8B8C\cfg\4.ini
  • %TEMP%\down.1388.helper_setup.exe.part
  • %TEMP%\{6CBFB4EA-EC65-40E2-A209-A447B75C961C}\Addons\assistant_v3.exe
  • %TEMP%\{6CBFB4EA-EC65-40E2-A209-A447B75C961C}\Setup.exe
  • %TEMP%\down.1388.extfs_setup.exe.part
  • %TEMP%\down.1388.4.ini.part
  • %TEMP%\{6CBFB4EA-EC65-40E2-A209-A447B75C961C}\Setup.ico
  • %TEMP%\{6CBFB4EA-EC65-40E2-A209-A447B75C961C}\addons\111000451\XDN4F.tmp
  • %TEMP%\{6CBFB4EA-EC65-40E2-A209-A447B75C961C}\Custom.dll
  • %TEMP%\down.1388.v_grey.jpg.part
  • %TEMP%\{6CBFB4EA-EC65-40E2-A209-A447B75C961C}\addons\111000451.ini
  • %ALLUSERSPROFILE%\Application Data\InstallMate\693F8B8C\cfg\4_1_2.ini
  • %TEMP%\down.1388.1.ini.part
  • %TEMP%\down.1388.assistant_v3.exe.part
  • %TEMP%\_tinB059.bat
  • %TEMP%\{6CBFB4EA-EC65-40E2-A209-A447B75C961C}\Addons\ext_setup.exe
  • %TEMP%\down.1388.general_logo.bmp.part
  • %TEMP%\{6CBFB4EA-EC65-40E2-A209-A447B75C961C}\_Setup.dll
  • %ALLUSERSPROFILE%\Application Data\InstallMate\693F8B8C\cfg\1.ini
  • %ALLUSERSPROFILE%\Application Data\InstallMate\693F8B8C\cfg\4_2_1.ini
  • %ALLUSERSPROFILE%\Application Data\InstallMate\693F8B8C\cfg\4_1.ini
  • %ALLUSERSPROFILE%\Application Data\InstallMate\693F8B8C\cfg\3.ini
  • %TEMP%\down.1388.2.ini.part
  • %TEMP%\{6CBFB4EA-EC65-40E2-A209-A447B75C961C}\Addons\helper_setup.exe

The following registry elements have been created:

  • HKEY_CURRENT_USER\SOFTWARE\APPDATALOW\
  • HKEY_CURRENT_USER\SOFTWARE\APPDATALOW\{5F189DF5-2D05-472B-9091-84D9848AE48B}\
  • HKEY_CURRENT_USER\SOFTWARE\APPDATALOW\{5F189DF5-2D05-472B-9091-84D9848AE48B}\_F122CA63\
  • HKEY_CURRENT_USER\SOFTWARE\APPDATALOW\{5F189DF5-2D05-472B-9091-84D9848AE48B}\_F122CA63\00000000\
  • HKEY_CURRENT_USER\SOFTWARE\APPDATALOW\{5F189DF5-2D05-472B-9091-84D9848AE48B}\_F122CA63\EAE10F9D\
  • HKEY_LOCAL_MACHINE\SOFTWARE\{3A7D3E19-1B79-4E4E-BD96-5467DA2C4EF0}\
  • HKEY_LOCAL_MACHINE\SOFTWARE\{5F189DF5-2D05-472B-9091-84D9848AE48B}\
  • HKEY_LOCAL_MACHINE\SOFTWARE\{5F189DF5-2D05-472B-9091-84D9848AE48B}\_F122CA63\
  • HKEY_LOCAL_MACHINE\SOFTWARE\{5F189DF5-2D05-472B-9091-84D9848AE48B}\_F122CA63\00000000\
  • HKEY_LOCAL_MACHINE\SOFTWARE\{5F189DF5-2D05-472B-9091-84D9848AE48B}\_F122CA63\EAE10F9D\
  • HKEY_LOCAL_MACHINE\SOFTWARE\{77D46E27-0E41-4478-87A6-AABE6FBCF252}\
  • HKEY_LOCAL_MACHINE\SOFTWARE\CLASSES\INTERFACE\{19DF2320-6A8A-4942-AC4C-C449949DFC27}\
  • HKEY_LOCAL_MACHINE\SOFTWARE\CLASSES\INTERFACE\{19DF2320-6A8A-4942-AC4C-C449949DFC27}\PROXYSTUBCLSID\
  • HKEY_LOCAL_MACHINE\SOFTWARE\CLASSES\INTERFACE\{19DF2320-6A8A-4942-AC4C-C449949DFC27}\PROXYSTUBCLSID32\
  • HKEY_LOCAL_MACHINE\SOFTWARE\CLASSES\INTERFACE\{19DF2320-6A8A-4942-AC4C-C449949DFC27}\TYPELIB\
  • HKEY_LOCAL_MACHINE\SOFTWARE\CLASSES\INTERFACE\{3B3F3AAD-FB97-49FF-BFEE-D22869AC4325}\
  • HKEY_LOCAL_MACHINE\SOFTWARE\CLASSES\INTERFACE\{3B3F3AAD-FB97-49FF-BFEE-D22869AC4325}\PROXYSTUBCLSID\
  • HKEY_LOCAL_MACHINE\SOFTWARE\CLASSES\INTERFACE\{3B3F3AAD-FB97-49FF-BFEE-D22869AC4325}\PROXYSTUBCLSID32\
  • HKEY_LOCAL_MACHINE\SOFTWARE\CLASSES\INTERFACE\{3B3F3AAD-FB97-49FF-BFEE-D22869AC4325}\TYPELIB\
  • HKEY_LOCAL_MACHINE\SOFTWARE\CLASSES\INTERFACE\{5B113BE7-98FF-4DA7-8441-D3AAE3836AE4}\
  • HKEY_LOCAL_MACHINE\SOFTWARE\CLASSES\INTERFACE\{5B113BE7-98FF-4DA7-8441-D3AAE3836AE4}\PROXYSTUBCLSID\
  • HKEY_LOCAL_MACHINE\SOFTWARE\CLASSES\INTERFACE\{5B113BE7-98FF-4DA7-8441-D3AAE3836AE4}\PROXYSTUBCLSID32\
  • HKEY_LOCAL_MACHINE\SOFTWARE\CLASSES\INTERFACE\{5B113BE7-98FF-4DA7-8441-D3AAE3836AE4}\TYPELIB\
  • HKEY_LOCAL_MACHINE\SOFTWARE\CLASSES\INTERFACE\{662CA6E1-37D8-4C12-8586-3AC64DF96187}\
  • HKEY_LOCAL_MACHINE\SOFTWARE\CLASSES\INTERFACE\{662CA6E1-37D8-4C12-8586-3AC64DF96187}\PROXYSTUBCLSID\
  • HKEY_LOCAL_MACHINE\SOFTWARE\CLASSES\INTERFACE\{662CA6E1-37D8-4C12-8586-3AC64DF96187}\PROXYSTUBCLSID32\
  • HKEY_LOCAL_MACHINE\SOFTWARE\CLASSES\INTERFACE\{662CA6E1-37D8-4C12-8586-3AC64DF96187}\TYPELIB\
  • HKEY_LOCAL_MACHINE\SOFTWARE\CLASSES\INTERFACE\{8A2DAA70-D6C9-4BAA-B9CA-DE8A9F49CA12}\
  • HKEY_LOCAL_MACHINE\SOFTWARE\CLASSES\INTERFACE\{8A2DAA70-D6C9-4BAA-B9CA-DE8A9F49CA12}\PROXYSTUBCLSID\
  • HKEY_LOCAL_MACHINE\SOFTWARE\CLASSES\INTERFACE\{8A2DAA70-D6C9-4BAA-B9CA-DE8A9F49CA12}\PROXYSTUBCLSID32\
  • HKEY_LOCAL_MACHINE\SOFTWARE\CLASSES\INTERFACE\{8A2DAA70-D6C9-4BAA-B9CA-DE8A9F49CA12}\TYPELIB\
  • HKEY_LOCAL_MACHINE\SOFTWARE\CLASSES\TYPELIB\{AC329328-7EC4-4C34-B672-0A2B90CB9B00}\
  • HKEY_LOCAL_MACHINE\SOFTWARE\CLASSES\TYPELIB\{AC329328-7EC4-4C34-B672-0A2B90CB9B00}\1.0\
  • HKEY_LOCAL_MACHINE\SOFTWARE\CLASSES\TYPELIB\{AC329328-7EC4-4C34-B672-0A2B90CB9B00}\1.0\0\
  • HKEY_LOCAL_MACHINE\SOFTWARE\CLASSES\TYPELIB\{AC329328-7EC4-4C34-B672-0A2B90CB9B00}\1.0\0\WIN32\
  • HKEY_LOCAL_MACHINE\SOFTWARE\CLASSES\TYPELIB\{AC329328-7EC4-4C34-B672-0A2B90CB9B00}\1.0\FLAGS\
  • HKEY_LOCAL_MACHINE\SOFTWARE\CLASSES\TYPELIB\{AC329328-7EC4-4C34-B672-0A2B90CB9B00}\1.0\HELPDIR\
  • HKEY_LOCAL_MACHINE\SOFTWARE\HELPER_SETUP\
  • HKEY_LOCAL_MACHINE\SOFTWARE\HELPER_SETUP\111000451\
  • HKEY_LOCAL_MACHINE\SOFTWARE\HELPER_SETUP\111000451\NP6YU5+TNZZH0OQIKE1/GD3HJMQT/\
  • HKEY_LOCAL_MACHINE\SOFTWARE\MICROSOFT\WINDOWS\CURRENTVERSION\UNINSTALL\{5F189DF5-2D05-472B-9091-84D9848AE48B}{F122CA63}\
  • HKEY_LOCAL_MACHINE\SOFTWARE\MICROSOFT\WINDOWS\CURRENTVERSION\UNINSTALL\9453B5D4-E05C-4C23-99DA-FFE3BB396F00\
  • HKEY_LOCAL_MACHINE\SOFTWARE\MICROSOFT\WINDOWS\CURRENTVERSION\UNINSTALL\9453B5D4-E05C-4C23-99DA-FFE3BB396F00\STATES\
  • HKEY_LOCAL_MACHINE\SOFTWARE\MICROSOFT\WINDOWS\CURRENTVERSION\UNINSTALL\S-5458797678\
  • HKEY_LOCAL_MACHINE\SOFTWARE\SW.BOOSTER\
  • HKEY_LOCAL_MACHINE\SOFTWARE\SW.BOOSTER\5458797678\
  • HKEY_LOCAL_MACHINE\SOFTWARE\SW.BOOSTER\5458797678\NP6YU5+TNZZH0OQIKE1/GD3HJMQT/\
  • HKEY_USERS\.DEFAULT\SOFTWARE\APPDATALOW\
  • HKEY_USERS\.DEFAULT\SOFTWARE\APPDATALOW\{5F189DF5-2D05-472B-9091-84D9848AE48B}\
  • HKEY_USERS\.DEFAULT\SOFTWARE\APPDATALOW\{5F189DF5-2D05-472B-9091-84D9848AE48B}\_F122CA63\
  • HKEY_USERS\.DEFAULT\SOFTWARE\APPDATALOW\{5F189DF5-2D05-472B-9091-84D9848AE48B}\_F122CA63\00000000\
  • HKEY_USERS\.DEFAULT\SOFTWARE\APPDATALOW\{5F189DF5-2D05-472B-9091-84D9848AE48B}\_F122CA63\EAE10F9D\

The following registry elements have been changed:

  • HKEY_CURRENT_USER\SOFTWARE\APPDATALOW\{5F189DF5-2D05-472B-9091-84D9848AE48B}\_F122CA63\DATA.0 = uyL46DzhyK/woOQIKE1ri4IWU6UyM5UxJXiLB5lagKjeCCjQ4ZVxqzDaNWmvW
  • HKEY_CURRENT_USER\SOFTWARE\APPDATALOW\{5F189DF5-2D05-472B-9091-84D9848AE48B}\_F122CA63\DATA.1 = mnL46Wqn6PVn1rpnik5SYACFt/dnryzhG2zlbgch3COcGjGYvyIrDTHmSCfoR0Q6JLTtd6fDiJERMOrWU/4HtDt73TG/GjeNR5Gi
  • HKEY_CURRENT_USER\SOFTWARE\APPDATALOW\{5F189DF5-2D05-472B-9091-84D9848AE48B}\_F122CA63\DATE = 1353025471
  • HKEY_CURRENT_USER\SOFTWARE\APPDATALOW\{5F189DF5-2D05-472B-9091-84D9848AE48B}\_F122CA63\IIID = 1
  • HKEY_CURRENT_USER\SOFTWARE\APPDATALOW\{5F189DF5-2D05-472B-9091-84D9848AE48B}\_F122CA63\LRTS = 0
  • HKEY_CURRENT_USER\SOFTWARE\APPDATALOW\{5F189DF5-2D05-472B-9091-84D9848AE48B}\_F122CA63\MODE = 4026531840
  • HKEY_CURRENT_USER\SOFTWARE\APPDATALOW\{5F189DF5-2D05-472B-9091-84D9848AE48B}\_F122CA63\USR.0 = t3gPJqomjlhabcdefA
  • HKEY_CURRENT_USER\SOFTWARE\APPDATALOW\{5F189DF5-2D05-472B-9091-84D9848AE48B}\_F122CA63\USR.1 = B3+ACGcdefABCDWYSU
  • HKEY_CURRENT_USER\SOFTWARE\APPDATALOW\{5F189DF5-2D05-472B-9091-84D9848AE48B}\_F122CA63\UUID = 2efb90de-322e2ab9-74630177
  • HKEY_CURRENT_USER\SOFTWARE\APPDATALOW\{5F189DF5-2D05-472B-9091-84D9848AE48B}\_F122CA63\00000000\370856C7 = p01e07x0qx1A06h0n01+06l0nU1Z06t0mU1g0640nl0S06h0nl1A06E0 p01e07x0qx1D06I0mU1O0640n01Y06t0ml1N06b0qx1S02I0ox1S06q0nU0% p01e07x0qx1N06t0nl1h06O0jx1P06Y0mU1g0640nl0S06h0nl1A06E0 p01T07m0nl1Y06E0qx1h06x0qx1O0640mU1g0640nl0S06h0nl1A06E0
  • HKEY_CURRENT_USER\SOFTWARE\APPDATALOW\{5F189DF5-2D05-472B-9091-84D9848AE48B}\_F122CA63\00000000\3EFEB33E = p01e07x0qx1A06h0n01+06l0nU1Z06t0mU1g0640nl0S06h0nl1A06E0 p01e07x0qx1D06I0mU1O0640n01Y06t0ml1N06b0qx1S02I0ox1S06q0nU0% p01e07x0qx1N06t0nl1h06O0jx1P06Y0mU1g0640nl0S06h0nl1A06E0 p01T07m0nl1Y06E0qx1h06x0qx1O0640mU1g0640nl0S06h0nl1A06E0
  • HKEY_CURRENT_USER\SOFTWARE\APPDATALOW\{5F189DF5-2D05-472B-9091-84D9848AE48B}\_F122CA63\00000000\493C7345 = 0
  • HKEY_CURRENT_USER\SOFTWARE\APPDATALOW\{5F189DF5-2D05-472B-9091-84D9848AE48B}\_F122CA63\EAE10F9D\060DF2CD = G/Ay/YP/FPAt/X6/clAj/Xl/alAy/XP/blAs/XD/ax/j/Xt/axAv/X6////%
  • HKEY_CURRENT_USER\SOFTWARE\APPDATALOW\{5F189DF5-2D05-472B-9091-84D9848AE48B}\_F122CA63\EAE10F9D\0C230BCB = ///%
  • HKEY_CURRENT_USER\SOFTWARE\APPDATALOW\{5F189DF5-2D05-472B-9091-84D9848AE48B}\_F122CA63\EAE10F9D\0DC3EE96 = /P////%%
  • HKEY_CURRENT_USER\SOFTWARE\APPDATALOW\{5F189DF5-2D05-472B-9091-84D9848AE48B}\_F122CA63\EAE10F9D\0E93C3F3 = ///%
  • HKEY_CURRENT_USER\SOFTWARE\APPDATALOW\{5F189DF5-2D05-472B-9091-84D9848AE48B}\_F122CA63\EAE10F9D\1520C6F1 = V/////%%
  • HKEY_CURRENT_USER\SOFTWARE\APPDATALOW\{5F189DF5-2D05-472B-9091-84D9848AE48B}\_F122CA63\EAE10F9D\1C311243 = GxAy/YV/c/At/XD/c/Ay/XF/cPAj/YV/FlAy/X2/UxAp/X2/GxAk////
  • HKEY_CURRENT_USER\SOFTWARE\APPDATALOW\{5F189DF5-2D05-472B-9091-84D9848AE48B}\_F122CA63\EAE10F9D\27DDCF6F = ///%
  • HKEY_CURRENT_USER\SOFTWARE\APPDATALOW\{5F189DF5-2D05-472B-9091-84D9848AE48B}\_F122CA63\EAE10F9D\2D71D5AB = V/////%%
  • HKEY_CURRENT_USER\SOFTWARE\APPDATALOW\{5F189DF5-2D05-472B-9091-84D9848AE48B}\_F122CA63\EAE10F9D\340D3099 = /P////%%
  • HKEY_CURRENT_USER\SOFTWARE\APPDATALOW\{5F189DF5-2D05-472B-9091-84D9848AE48B}\_F122CA63\EAE10F9D\37B7A6D8 = UlAr/XJ/c//k////
  • HKEY_CURRENT_USER\SOFTWARE\APPDATALOW\{5F189DF5-2D05-472B-9091-84D9848AE48B}\_F122CA63\EAE10F9D\38583BC3 = N//e/Ct/Vx/l/C/////%
  • HKEY_CURRENT_USER\SOFTWARE\APPDATALOW\{5F189DF5-2D05-472B-9091-84D9848AE48B}\_F122CA63\EAE10F9D\3C09C42B = ///%
  • HKEY_CURRENT_USER\SOFTWARE\APPDATALOW\{5F189DF5-2D05-472B-9091-84D9848AE48B}\_F122CA63\EAE10F9D\414BC593 = ///%
  • HKEY_CURRENT_USER\SOFTWARE\APPDATALOW\{5F189DF5-2D05-472B-9091-84D9848AE48B}\_F122CA63\EAE10F9D\51D2F2EA = QlAI/Bh/JlA+/Y//b/Ak/YZ/c/Au/YZ/Z//e/B2/N//l////
  • HKEY_CURRENT_USER\SOFTWARE\APPDATALOW\{5F189DF5-2D05-472B-9091-84D9848AE48B}\_F122CA63\EAE10F9D\587B5709 = V/////%%
  • HKEY_CURRENT_USER\SOFTWARE\APPDATALOW\{5F189DF5-2D05-472B-9091-84D9848AE48B}\_F122CA63\EAE10F9D\6185D035 = VP/h/CP/V//l////
  • HKEY_CURRENT_USER\SOFTWARE\APPDATALOW\{5F189DF5-2D05-472B-9091-84D9848AE48B}\_F122CA63\EAE10F9D\65114B36 = Vl/l////
  • HKEY_CURRENT_USER\SOFTWARE\APPDATALOW\{5F189DF5-2D05-472B-9091-84D9848AE48B}\_F122CA63\EAE10F9D\72758A5D = ///%
  • HKEY_CURRENT_USER\SOFTWARE\APPDATALOW\{5F189DF5-2D05-472B-9091-84D9848AE48B}\_F122CA63\EAE10F9D\7367429F = ///%
  • HKEY_CURRENT_USER\SOFTWARE\APPDATALOW\{5F189DF5-2D05-472B-9091-84D9848AE48B}\_F122CA63\EAE10F9D\7F69FA1F = ///%
  • HKEY_CURRENT_USER\SOFTWARE\APPDATALOW\{5F189DF5-2D05-472B-9091-84D9848AE48B}\_F122CA63\EAE10F9D\8B9E4CBC = V/////%%
  • HKEY_CURRENT_USER\SOFTWARE\APPDATALOW\{5F189DF5-2D05-472B-9091-84D9848AE48B}\_F122CA63\EAE10F9D\A0743ACC = N/////%%
  • HKEY_CURRENT_USER\SOFTWARE\APPDATALOW\{5F189DF5-2D05-472B-9091-84D9848AE48B}\_F122CA63\EAE10F9D\A1DCFF5B = V/////%%
  • HKEY_CURRENT_USER\SOFTWARE\APPDATALOW\{5F189DF5-2D05-472B-9091-84D9848AE48B}\_F122CA63\EAE10F9D\A2E3B941 = ///%
  • HKEY_CURRENT_USER\SOFTWARE\APPDATALOW\{5F189DF5-2D05-472B-9091-84D9848AE48B}\_F122CA63\EAE10F9D\BBF88800 = ///%
  • HKEY_CURRENT_USER\SOFTWARE\APPDATALOW\{5F189DF5-2D05-472B-9091-84D9848AE48B}\_F122CA63\EAE10F9D\C24899A6 = MP/f/CF/Mx/l/C/////%
  • HKEY_CURRENT_USER\SOFTWARE\APPDATALOW\{5F189DF5-2D05-472B-9091-84D9848AE48B}\_F122CA63\EAE10F9D\C5705860 = Vx////%%
  • HKEY_CURRENT_USER\SOFTWARE\APPDATALOW\{5F189DF5-2D05-472B-9091-84D9848AE48B}\_F122CA63\EAE10F9D\C6C5DD44 = V/////%%
  • HKEY_CURRENT_USER\SOFTWARE\APPDATALOW\{5F189DF5-2D05-472B-9091-84D9848AE48B}\_F122CA63\EAE10F9D\C99A5F5C = ///%
  • HKEY_CURRENT_USER\SOFTWARE\APPDATALOW\{5F189DF5-2D05-472B-9091-84D9848AE48B}\_F122CA63\EAE10F9D\D1ABCDB6 = ///%
  • HKEY_CURRENT_USER\SOFTWARE\APPDATALOW\{5F189DF5-2D05-472B-9091-84D9848AE48B}\_F122CA63\EAE10F9D\D94388D2 = GxAy/YV/c/At/XD/c/Ay/XF/cPAj/YV/FlAy/X2/UxAp/X2/GxAk////
  • HKEY_CURRENT_USER\SOFTWARE\APPDATALOW\{5F189DF5-2D05-472B-9091-84D9848AE48B}\_F122CA63\EAE10F9D\DBAF3CE3 = /P////%%
  • HKEY_CURRENT_USER\SOFTWARE\APPDATALOW\{5F189DF5-2D05-472B-9091-84D9848AE48B}\_F122CA63\EAE10F9D\E46C271E = ///%
  • HKEY_CURRENT_USER\SOFTWARE\APPDATALOW\{5F189DF5-2D05-472B-9091-84D9848AE48B}\_F122CA63\EAE10F9D\E8F9DCC7 = UlAr/XJ/c//k////
  • HKEY_CURRENT_USER\SOFTWARE\APPDATALOW\{5F189DF5-2D05-472B-9091-84D9848AE48B}\_F122CA63\EAE10F9D\F0BF0BDE = ///%
  • HKEY_CURRENT_USER\SOFTWARE\APPDATALOW\{5F189DF5-2D05-472B-9091-84D9848AE48B}\_F122CA63\EAE10F9D\F1F24E29 = Vl/l/C/////%
  • HKEY_CURRENT_USER\SOFTWARE\APPDATALOW\{5F189DF5-2D05-472B-9091-84D9848AE48B}\_F122CA63\EAE10F9D\F2C53C49 = UlAr/XJ/c//k////
  • HKEY_CURRENT_USER\SOFTWARE\APPDATALOW\{5F189DF5-2D05-472B-9091-84D9848AE48B}\_F122CA63\EAE10F9D\FE94CE1E = V/////%%
  • HKEY_LOCAL_MACHINE\SOFTWARE\{3A7D3E19-1B79-4E4E-BD96-5467DA2C4EF0}\N = 1
  • HKEY_LOCAL_MACHINE\SOFTWARE\{5F189DF5-2D05-472B-9091-84D9848AE48B}\_F122CA63\DATA.0 = uyL46DzhyK/woOQIKE1ri4IWU6UyM5UxJXiLB5lagKjeCCjQ4ZVxqzDaNWmvW
  • HKEY_LOCAL_MACHINE\SOFTWARE\{5F189DF5-2D05-472B-9091-84D9848AE48B}\_F122CA63\DATA.1 = mnL46Wqn6PVn1rpnik5SYACFt/dnryzhG2zlbgch3COcGjGYvyIrDTHmSCfoR0Q6JLTtd6fDiJERMOrWU/4HtDt73TG/GjeNR5Gi
  • HKEY_LOCAL_MACHINE\SOFTWARE\{5F189DF5-2D05-472B-9091-84D9848AE48B}\_F122CA63\DATE = 1353025471
  • HKEY_LOCAL_MACHINE\SOFTWARE\{5F189DF5-2D05-472B-9091-84D9848AE48B}\_F122CA63\DLPATH = c:\progra~1\ss-sup~1\assist~1.dll
  • HKEY_LOCAL_MACHINE\SOFTWARE\{5F189DF5-2D05-472B-9091-84D9848AE48B}\_F122CA63\IIID = 1
  • HKEY_LOCAL_MACHINE\SOFTWARE\{5F189DF5-2D05-472B-9091-84D9848AE48B}\_F122CA63\INSTALL_DIR = %PROGRAMFILES%\\Ss-Supporter
  • HKEY_LOCAL_MACHINE\SOFTWARE\{5F189DF5-2D05-472B-9091-84D9848AE48B}\_F122CA63\LRTS = 0
  • HKEY_LOCAL_MACHINE\SOFTWARE\{5F189DF5-2D05-472B-9091-84D9848AE48B}\_F122CA63\MODE = 4026531840
  • HKEY_LOCAL_MACHINE\SOFTWARE\{5F189DF5-2D05-472B-9091-84D9848AE48B}\_F122CA63\STATE = 0
  • HKEY_LOCAL_MACHINE\SOFTWARE\{5F189DF5-2D05-472B-9091-84D9848AE48B}\_F122CA63\SVI = 0
  • HKEY_LOCAL_MACHINE\SOFTWARE\{5F189DF5-2D05-472B-9091-84D9848AE48B}\_F122CA63\SVN = GS-Supporter
  • HKEY_LOCAL_MACHINE\SOFTWARE\{5F189DF5-2D05-472B-9091-84D9848AE48B}\_F122CA63\SVPATH = c:\progra~1\ss-sup~1\AssistantSvc.dll
  • HKEY_LOCAL_MACHINE\SOFTWARE\{5F189DF5-2D05-472B-9091-84D9848AE48B}\_F122CA63\SVT = 1353025472
  • HKEY_LOCAL_MACHINE\SOFTWARE\{5F189DF5-2D05-472B-9091-84D9848AE48B}\_F122CA63\SVX
  • HKEY_LOCAL_MACHINE\SOFTWARE\{5F189DF5-2D05-472B-9091-84D9848AE48B}\_F122CA63\USR.0 = t3gPJqomjlhabcdefA
  • HKEY_LOCAL_MACHINE\SOFTWARE\{5F189DF5-2D05-472B-9091-84D9848AE48B}\_F122CA63\USR.1 = B3+ACGcdefABCDWYSU
  • HKEY_LOCAL_MACHINE\SOFTWARE\{5F189DF5-2D05-472B-9091-84D9848AE48B}\_F122CA63\UUID = 2efb90de-322e2ab9-74630177
  • HKEY_LOCAL_MACHINE\SOFTWARE\{5F189DF5-2D05-472B-9091-84D9848AE48B}\_F122CA63\VERSION = 22021985
  • HKEY_LOCAL_MACHINE\SOFTWARE\{5F189DF5-2D05-472B-9091-84D9848AE48B}\_F122CA63\00000000\370856C7 = p01e07x0qx1A06h0n01+06l0nU1Z06t0mU1g0640nl0S06h0nl1A06E0 p01e07x0qx1D06I0mU1O0640n01Y06t0ml1N06b0qx1S02I0ox1S06q0nU0% p01e07x0qx1N06t0nl1h06O0jx1P06Y0mU1g0640nl0S06h0nl1A06E0 p01T07m0nl1Y06E0qx1h06x0qx1O0640mU1g0640nl0S06h0nl1A06E0
  • HKEY_LOCAL_MACHINE\SOFTWARE\{5F189DF5-2D05-472B-9091-84D9848AE48B}\_F122CA63\00000000\3EFEB33E = p01e07x0qx1A06h0n01+06l0nU1Z06t0mU1g0640nl0S06h0nl1A06E0 p01e07x0qx1D06I0mU1O0640n01Y06t0ml1N06b0qx1S02I0ox1S06q0nU0% p01e07x0qx1N06t0nl1h06O0jx1P06Y0mU1g0640nl0S06h0nl1A06E0 p01T07m0nl1Y06E0qx1h06x0qx1O0640mU1g0640nl0S06h0nl1A06E0
  • HKEY_LOCAL_MACHINE\SOFTWARE\{5F189DF5-2D05-472B-9091-84D9848AE48B}\_F122CA63\00000000\493C7345 = 0
  • HKEY_LOCAL_MACHINE\SOFTWARE\{5F189DF5-2D05-472B-9091-84D9848AE48B}\_F122CA63\EAE10F9D\060DF2CD = G/Ay/YP/FPAt/X6/clAj/Xl/alAy/XP/blAs/XD/ax/j/Xt/axAv/X6////%
  • HKEY_LOCAL_MACHINE\SOFTWARE\{5F189DF5-2D05-472B-9091-84D9848AE48B}\_F122CA63\EAE10F9D\0C230BCB = ///%
  • HKEY_LOCAL_MACHINE\SOFTWARE\{5F189DF5-2D05-472B-9091-84D9848AE48B}\_F122CA63\EAE10F9D\0DC3EE96 = /P////%%
  • HKEY_LOCAL_MACHINE\SOFTWARE\{5F189DF5-2D05-472B-9091-84D9848AE48B}\_F122CA63\EAE10F9D\0E93C3F3 = ///%
  • HKEY_LOCAL_MACHINE\SOFTWARE\{5F189DF5-2D05-472B-9091-84D9848AE48B}\_F122CA63\EAE10F9D\1520C6F1 = V/////%%
  • HKEY_LOCAL_MACHINE\SOFTWARE\{5F189DF5-2D05-472B-9091-84D9848AE48B}\_F122CA63\EAE10F9D\1C311243 = GxAy/YV/c/At/XD/c/Ay/XF/cPAj/YV/FlAy/X2/UxAp/X2/GxAk////
  • HKEY_LOCAL_MACHINE\SOFTWARE\{5F189DF5-2D05-472B-9091-84D9848AE48B}\_F122CA63\EAE10F9D\27DDCF6F = ///%
  • HKEY_LOCAL_MACHINE\SOFTWARE\{5F189DF5-2D05-472B-9091-84D9848AE48B}\_F122CA63\EAE10F9D\2D71D5AB = V/////%%
  • HKEY_LOCAL_MACHINE\SOFTWARE\{5F189DF5-2D05-472B-9091-84D9848AE48B}\_F122CA63\EAE10F9D\340D3099 = /P////%%
  • HKEY_LOCAL_MACHINE\SOFTWARE\{5F189DF5-2D05-472B-9091-84D9848AE48B}\_F122CA63\EAE10F9D\37B7A6D8 = UlAr/XJ/c//k////
  • HKEY_LOCAL_MACHINE\SOFTWARE\{5F189DF5-2D05-472B-9091-84D9848AE48B}\_F122CA63\EAE10F9D\38583BC3 = N//e/Ct/Vx/l/C/////%
  • HKEY_LOCAL_MACHINE\SOFTWARE\{5F189DF5-2D05-472B-9091-84D9848AE48B}\_F122CA63\EAE10F9D\3C09C42B = ///%
  • HKEY_LOCAL_MACHINE\SOFTWARE\{5F189DF5-2D05-472B-9091-84D9848AE48B}\_F122CA63\EAE10F9D\414BC593 = ///%
  • HKEY_LOCAL_MACHINE\SOFTWARE\{5F189DF5-2D05-472B-9091-84D9848AE48B}\_F122CA63\EAE10F9D\51D2F2EA = QlAI/Bh/JlA+/Y//b/Ak/YZ/c/Au/YZ/Z//e/B2/N//l////
  • HKEY_LOCAL_MACHINE\SOFTWARE\{5F189DF5-2D05-472B-9091-84D9848AE48B}\_F122CA63\EAE10F9D\587B5709 = V/////%%
  • HKEY_LOCAL_MACHINE\SOFTWARE\{5F189DF5-2D05-472B-9091-84D9848AE48B}\_F122CA63\EAE10F9D\6185D035 = VP/h/CP/V//l////
  • HKEY_LOCAL_MACHINE\SOFTWARE\{5F189DF5-2D05-472B-9091-84D9848AE48B}\_F122CA63\EAE10F9D\65114B36 = Vl/l////
  • HKEY_LOCAL_MACHINE\SOFTWARE\{5F189DF5-2D05-472B-9091-84D9848AE48B}\_F122CA63\EAE10F9D\72758A5D = ///%
  • HKEY_LOCAL_MACHINE\SOFTWARE\{5F189DF5-2D05-472B-9091-84D9848AE48B}\_F122CA63\EAE10F9D\7367429F = ///%
  • HKEY_LOCAL_MACHINE\SOFTWARE\{5F189DF5-2D05-472B-9091-84D9848AE48B}\_F122CA63\EAE10F9D\7F69FA1F = ///%
  • HKEY_LOCAL_MACHINE\SOFTWARE\{5F189DF5-2D05-472B-9091-84D9848AE48B}\_F122CA63\EAE10F9D\8B9E4CBC = V/////%%
  • HKEY_LOCAL_MACHINE\SOFTWARE\{5F189DF5-2D05-472B-9091-84D9848AE48B}\_F122CA63\EAE10F9D\A0743ACC = N/////%%
  • HKEY_LOCAL_MACHINE\SOFTWARE\{5F189DF5-2D05-472B-9091-84D9848AE48B}\_F122CA63\EAE10F9D\A1DCFF5B = V/////%%
  • HKEY_LOCAL_MACHINE\SOFTWARE\{5F189DF5-2D05-472B-9091-84D9848AE48B}\_F122CA63\EAE10F9D\A2E3B941 = ///%
  • HKEY_LOCAL_MACHINE\SOFTWARE\{5F189DF5-2D05-472B-9091-84D9848AE48B}\_F122CA63\EAE10F9D\BBF88800 = ///%
  • HKEY_LOCAL_MACHINE\SOFTWARE\{5F189DF5-2D05-472B-9091-84D9848AE48B}\_F122CA63\EAE10F9D\C24899A6 = MP/f/CF/Mx/l/C/////%
  • HKEY_LOCAL_MACHINE\SOFTWARE\{5F189DF5-2D05-472B-9091-84D9848AE48B}\_F122CA63\EAE10F9D\C5705860 = Vx////%%
  • HKEY_LOCAL_MACHINE\SOFTWARE\{5F189DF5-2D05-472B-9091-84D9848AE48B}\_F122CA63\EAE10F9D\C6C5DD44 = V/////%%
  • HKEY_LOCAL_MACHINE\SOFTWARE\{5F189DF5-2D05-472B-9091-84D9848AE48B}\_F122CA63\EAE10F9D\C99A5F5C = ///%
  • HKEY_LOCAL_MACHINE\SOFTWARE\{5F189DF5-2D05-472B-9091-84D9848AE48B}\_F122CA63\EAE10F9D\D1ABCDB6 = ///%
  • HKEY_LOCAL_MACHINE\SOFTWARE\{5F189DF5-2D05-472B-9091-84D9848AE48B}\_F122CA63\EAE10F9D\D94388D2 = GxAy/YV/c/At/XD/c/Ay/XF/cPAj/YV/FlAy/X2/UxAp/X2/GxAk////
  • HKEY_LOCAL_MACHINE\SOFTWARE\{5F189DF5-2D05-472B-9091-84D9848AE48B}\_F122CA63\EAE10F9D\E46C271E = ///%
  • HKEY_LOCAL_MACHINE\SOFTWARE\{5F189DF5-2D05-472B-9091-84D9848AE48B}\_F122CA63\EAE10F9D\E8F9DCC7 = UlAr/XJ/c//k////
  • HKEY_LOCAL_MACHINE\SOFTWARE\{5F189DF5-2D05-472B-9091-84D9848AE48B}\_F122CA63\EAE10F9D\F0BF0BDE = ///%
  • HKEY_LOCAL_MACHINE\SOFTWARE\{5F189DF5-2D05-472B-9091-84D9848AE48B}\_F122CA63\EAE10F9D\F1F24E29 = Vl/l/C/////%
  • HKEY_LOCAL_MACHINE\SOFTWARE\{5F189DF5-2D05-472B-9091-84D9848AE48B}\_F122CA63\EAE10F9D\F2C53C49 = UlAr/XJ/c//k////
  • HKEY_LOCAL_MACHINE\SOFTWARE\{5F189DF5-2D05-472B-9091-84D9848AE48B}\_F122CA63\EAE10F9D\FE94CE1E = V/////%%
  • HKEY_LOCAL_MACHINE\SOFTWARE\{77D46E27-0E41-4478-87A6-AABE6FBCF252}\F122CA63 = %PROGRAMFILES%\Ss-Supporter\Assistant.dll
  • HKEY_LOCAL_MACHINE\SOFTWARE\{77D46E27-0E41-4478-87A6-AABE6FBCF252}\N = 1
  • HKEY_LOCAL_MACHINE\SOFTWARE\CLASSES\INTERFACE\{19DF2320-6A8A-4942-AC4C-C449949DFC27}\TYPELIB\VERSION = 1.0
  • HKEY_LOCAL_MACHINE\SOFTWARE\CLASSES\INTERFACE\{3B3F3AAD-FB97-49FF-BFEE-D22869AC4325}\TYPELIB\VERSION = 1.0
  • HKEY_LOCAL_MACHINE\SOFTWARE\CLASSES\INTERFACE\{5B113BE7-98FF-4DA7-8441-D3AAE3836AE4}\TYPELIB\VERSION = 1.0
  • HKEY_LOCAL_MACHINE\SOFTWARE\CLASSES\INTERFACE\{662CA6E1-37D8-4C12-8586-3AC64DF96187}\TYPELIB\VERSION = 1.0
  • HKEY_LOCAL_MACHINE\SOFTWARE\CLASSES\INTERFACE\{8A2DAA70-D6C9-4BAA-B9CA-DE8A9F49CA12}\TYPELIB\VERSION = 1.0
  • HKEY_LOCAL_MACHINE\SOFTWARE\HELPER_SETUP\111000451\NP6YU5+TNZZH0OQIKE1/GD3HJMQT/\NP6YU5+II0LV89/XZTPMAWCAW6XIF/XIOWOPLYXREC = NP6yu5+z7vLgNfABCDER9
  • HKEY_LOCAL_MACHINE\SOFTWARE\HELPER_SETUP\111000451\NP6YU5+TNZZH0OQIKE1/GD3HJMQT/\NP6YU5+IMD09G789/XRRUO/JOXMOD5P8S7Z6 = NP6yu5+owmZMztvqom44
  • HKEY_LOCAL_MACHINE\SOFTWARE\HELPER_SETUP\111000451\NP6YU5+TNZZH0OQIKE1/GD3HJMQT/\NP6YU5+IQFGHLQOMJLSRVHFNHJ3OZIGYJWY44WGZ8T = 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
  • HKEY_LOCAL_MACHINE\SOFTWARE\HELPER_SETUP\111000451\NP6YU5+TNZZH0OQIKE1/GD3HJMQT/\NP6YU5+JJE/MNBCDWYVA42SCZUV9SCLFRQVZXT8SBARO = NP6yu5+kehdfwjlhabCRzRJxvVHpLyK4
  • HKEY_LOCAL_MACHINE\SOFTWARE\HELPER_SETUP\111000451\NP6YU5+TNZZH0OQIKE1/GD3HJMQT/\NP6YU5+JNTHSFABCDWTWKUM/W1APBTS1+VQW3XAFAC = NP6yu5+yZZqyR/XZTVj+W5qQHhXWff
  • HKEY_LOCAL_MACHINE\SOFTWARE\HELPER_SETUP\111000451\NP6YU5+TNZZH0OQIKE1/GD3HJMQT/\NP6YU5+JO7CKSRJLFHDITGO4 = NP6yu5+ookVA701234YHM8
  • HKEY_LOCAL_MACHINE\SOFTWARE\HELPER_SETUP\111000451\NP6YU5+TNZZH0OQIKE1/GD3HJMQT/\NP6YU5+JXU9X/ZTVQOWWAVZZG1EDHHJPA = NP6yu5+oS+lN1rpnik98wFUb6gH6ukMa
  • HKEY_LOCAL_MACHINE\SOFTWARE\HELPER_SETUP\111000451\NP6YU5+TNZZH0OQIKE1/GD3HJMQT/\NP6YU5+JYYWQBURPNIZRRB5FIXXL0NH4RV = NP6yu5+kehdfwjlhabCRzRJxvVHpLyK4
  • HKEY_LOCAL_MACHINE\SOFTWARE\HELPER_SETUP\111000451\NP6YU5+TNZZH0OQIKE1/GD3HJMQT/\NP6YU5+KMSXEBMOQIKHE69M1QE674UDEX = NP6yu5+z7vLgNfABCDER9
  • HKEY_LOCAL_MACHINE\SOFTWARE\HELPER_SETUP\111000451\NP6YU5+TNZZH0OQIKE1/GD3HJMQT/\NP6YU5+KQ14RLHABCDIJFSYG16YZYLSH = NP6yu5+onYjezjlhabCCoH9x84QyV93L8ndOX8yRKJDI
  • HKEY_LOCAL_MACHINE\SOFTWARE\HELPER_SETUP\111000451\NP6YU5+TNZZH0OQIKE1/GD3HJMQT/\NP6YU5+KZHWZUJLFHW5FR3FSOZPPISE/F = NP6yu5+vjUfiRvqomjSFEoI4Sg+WbVcAr+hCHoW4ERlJ5HbEyNOUCDZliMsEik2tMkYhveOFdXqOAtwRifLNUGMB8MUDdLKRmp3xTLJkujmbt8D0V/Nnwj0Z2KnwosS8foYgUd0Qzo36Yfd6kiXNGcu+ngiYLUXVtHYeOAWRB2nxjvMRou9dEoDBULUUna8G5OEkE2QosZETD55nebbfWGozdFhTG4/EKEAKP/KcwszxltdUXS65ok4zZ6+dREeLM/EBNFEjLvvtqVfLBQ0PJtc7bXyMM4WggukWqnMjSdcZI0tyatYHDl/VdmzupdaBFaQuOwXAHlfB6RQ51HNX9jvTTBSwVvQu+TGRD/FxreYiW/eQzExUYSsCdCLTayXF5yKTAQpGpVETkccgBHzplmuWfT3VytfbasRj92IZfpJgmgRT2NJV/SgjyrRbv5m0HtjdfcGRZFLwpbBar4QCrZKyq2ASVLd0MvcubNX4EoeJ2AwRhwgkNzDqS8ihLhdM
  • HKEY_LOCAL_MACHINE\SOFTWARE\HELPER_SETUP\111000451\NP6YU5+TNZZH0OQIKE1/GD3HJMQT/\NP6YU5+M493B1JLFHWFSLP0CQ = NP6yu5+kzkcLP12345ZfrEA8xwYzo
  • HKEY_LOCAL_MACHINE\SOFTWARE\HELPER_SETUP\111000451\NP6YU5+TNZZH0OQIKE1/GD3HJMQT/\NP6YU5+MA7A/0RJLFH3OCQCND9QOS7C7LJLXGMTX4Y5FN0ND = NP6yu5+xztvqomjlha
  • HKEY_LOCAL_MACHINE\SOFTWARE\HELPER_SETUP\111000451\NP6YU5+TNZZH0OQIKE1/GD3HJMQT/\NP6YU5+ME6UTVNPRJL13JFL4PKQ3+KZKKBGDUDHPPPQUV = NP6yu5+owmZMztvqom44
  • HKEY_LOCAL_MACHINE\SOFTWARE\HELPER_SETUP\111000451\NP6YU5+TNZZH0OQIKE1/GD3HJMQT/\NP6YU5+MGMVNPNIKG0UES4WE2P15TB9Y = NP6yu5+v6gF5uEG+xzl4m+M2fglZ50YCPtaveVpiBc8QO
  • HKEY_LOCAL_MACHINE\SOFTWARE\HELPER_SETUP\111000451\NP6YU5+TNZZH0OQIKE1/GD3HJMQT/\NP6YU5+MGOOXRIKG01VRAVP7V/5B68FYY = NP6yu5+yZZqyR/XZTVj+W5qQHhXWff
  • HKEY_LOCAL_MACHINE\SOFTWARE\HELPER_SETUP\111000451\NP6YU5+TNZZH0OQIKE1/GD3HJMQT/\NP6YU5+MPPWLQDWYSUOJ8V7LBA0+8W0MSMWN4CLWM7 = NP6yu5+oS+lN1rpnik98wFUb6gH6ukMa
  • HKEY_LOCAL_MACHINE\SOFTWARE\HELPER_SETUP\111000451\NP6YU5+TNZZH0OQIKE1/GD3HJMQT/\NP6YU5+O/JAUURPNIKZZC72IOD641QVSKWTQJSU5ZR = NP6yu5+qLuUwVjlhabO6AQHW7zHo0s5/qmFaUd2glq14uyOitxSUb87SZXnwz
  • HKEY_LOCAL_MACHINE\SOFTWARE\HELPER_SETUP\111000451\NP6YU5+TNZZH0OQIKE1/GD3HJMQT/\NP6YU5+OBHHU6789/XU3LMQKQBU9V0O8L1+PWHGQ7A = NP6yu5+ire7AFHwysu7daGH/1I+8/fYQTHvbDbfbFpsZR9hg1ZLTwQJfCgwjG
  • HKEY_LOCAL_MACHINE\SOFTWARE\HELPER_SETUP\111000451\NP6YU5+TNZZH0OQIKE1/GD3HJMQT/\NP6YU5+OFUVMDBCDEFHBBXRMLUGJ9AYGJ = NP6yu5+yZKZjefABCDz76N9UmHe0p0kgH5NGRfwxzCZGcCt9/G/oGfA6jw
  • HKEY_LOCAL_MACHINE\SOFTWARE\HELPER_SETUP\111000451\NP6YU5+TNZZH0OQIKE1/GD3HJMQT/\NP6YU5+ORN6UTIKEG+DIGPNG1YSOBLAVHVZRTKS5X3JZ0JUS = NP6yu5+o4IdosRJLFHmfwN6K
  • HKEY_LOCAL_MACHINE\SOFTWARE\HELPER_SETUP\111000451\NP6YU5+TNZZH0OQIKE1/GD3HJMQT/\NP6YU5+OW1RR56789/UE1SBYVUF4KVUIX = NP6yu5+nWUogkwysur1U
  • HKEY_LOCAL_MACHINE\SOFTWARE\HELPER_SETUP\111000451\NP6YU5+TNZZH0OQIKE1/GD3HJMQT/\NP6YU5+OXTCWROQIKEBFOQMXOVQ3PYCV = NP6yu5+zbMgbIcdefAUN
  • HKEY_LOCAL_MACHINE\SOFTWARE\HELPER_SETUP\111000451\NP6YU5+TNZZH0OQIKE1/GD3HJMQT/\NP6YU5+PNRKTFBCDEFEJL8Z1TLNENCPBPB = NP6yu5+kzkcLP12345ZfrEA8xwYzo
  • HKEY_LOCAL_MACHINE\SOFTWARE\HELPER_SETUP\111000451\NP6YU5+TNZZH0OQIKE1/GD3HJMQT/\NP6YU5+Q2CPRX789/XUEIE5ILGMR36HI9ZR5HNZS2A = NP6yu5+nWUogkwysur1U
  • HKEY_LOCAL_MACHINE\SOFTWARE\HELPER_SETUP\111000451\NP6YU5+TNZZH0OQIKE1/GD3HJMQT/\NP6YU5+Q83XDCABCDEK18VAC0H9NVFERZY89QZIQZ = NP6yu5+xvTqlqdefABK+80Gq2mWBC1o0+
  • HKEY_LOCAL_MACHINE\SOFTWARE\HELPER_SETUP\111000451\NP6YU5+TNZZH0OQIKE1/GD3HJMQT/\NP6YU5+QAAIJRPNIKGVSUOLAZ3MK8U+RGKBXPY = NP6yu5+ms6Kogvqomje5FgkwM
  • HKEY_LOCAL_MACHINE\SOFTWARE\HELPER_SETUP\111000451\NP6YU5+TNZZH0OQIKE1/GD3HJMQT/\NP6YU5+QCEJ2JRPNIKTXYRB/HJK8PV2I7 = NP6yu5+ire7AFHwysu7daGH/1I+8/fYQTHvbDbfbFpsZR9hg1ZLTwQJfCgwjG
  • HKEY_LOCAL_MACHINE\SOFTWARE\HELPER_SETUP\111000451\NP6YU5+TNZZH0OQIKE1/GD3HJMQT/\NP6YU5+QMAGWAVQOMJYKE3RG3RAIWGTRR6LY542B = NP6yu5+z9yRW0urpni4jMXqI+bzDEz/yblArLamdETr8b
  • HKEY_LOCAL_MACHINE\SOFTWARE\HELPER_SETUP\111000451\NP6YU5+TNZZH0OQIKE1/GD3HJMQT/\NP6YU5+QNT+FXZTVQODFBTS/GCPHJVOOIO2SDNPTKI = NP6yu5+yZKZjefABCDz76N9UmHe0p0kgH5NGRfwxzCZGcCt9/G/oGfA6jw
  • HKEY_LOCAL_MACHINE\SOFTWARE\HELPER_SETUP\111000451\NP6YU5+TNZZH0OQIKE1/GD3HJMQT/\NP6YU5+QWDMHUJLHABRI95GDX9WB+KT8H = NP6yu5+qLuUwVjlhabO6AQHW7zHo0s5/qmFaUd2glq14uyOitxSUb87SZXnwz
  • HKEY_LOCAL_MACHINE\SOFTWARE\HELPER_SETUP\111000451\NP6YU5+TNZZH0OQIKE1/GD3HJMQT/\NP6YU5+R+8G2H34567HEDRCOML+7+U93C = NP6yu5+sbPoveIKEG+mVVY368YxdBY2ezBg5ie7rQueP
  • HKEY_LOCAL_MACHINE\SOFTWARE\HELPER_SETUP\111000451\NP6YU5+TNZZH0OQIKE1/GD3HJMQT/\NP6YU5+RHMWDNZTVNPKO4ASBG6QZ = NP6yu5+xztvqomjlha
  • HKEY_LOCAL_MACHINE\SOFTWARE\HELPER_SETUP\111000451\NP6YU5+TNZZH0OQIKE1/GD3HJMQT/\NP6YU5+RK2YDOCDWYSO+SSZJB0LFNMK7UMZJ4F = NP6yu5+o4IdosRJLFHmfwN6K
  • HKEY_LOCAL_MACHINE\SOFTWARE\HELPER_SETUP\111000451\NP6YU5+TNZZH0OQIKE1/GD3HJMQT/\NP6YU5+ROHR67HABCDI6OQITBZYLEDLKV = NP6yu5+ookVA701234YHM8
  • HKEY_LOCAL_MACHINE\SOFTWARE\HELPER_SETUP\111000451\NP6YU5+TNZZH0OQIKE1/GD3HJMQT/\NP6YU5+S/N9Q2LFHWY5GE3VWAFDDYM0XGIXL/SOCFUPBEC2IZ = NP6yu5+xKYF+812345Z1
  • HKEY_LOCAL_MACHINE\SOFTWARE\HELPER_SETUP\111000451\NP6YU5+TNZZH0OQIKE1/GD3HJMQT/\NP6YU5+S2TBXEEFABCXJ0DAXR+/FSJDEDZSSHR+HV = NP6yu5+onYjezjlhabCCoH9x84QyV93L8ndOX8yRKJDI
  • HKEY_LOCAL_MACHINE\SOFTWARE\HELPER_SETUP\111000451\NP6YU5+TNZZH0OQIKE1/GD3HJMQT/\NP6YU5+SFYNDEBCDEF+TMD = NP6yu5+zbMgbIcdefAUN
  • HKEY_LOCAL_MACHINE\SOFTWARE\HELPER_SETUP\111000451\NP6YU5+TNZZH0OQIKE1/GD3HJMQT/\NP6YU5+SH9+Y+XZTVQ/XYWHII+JTIOMPD = NP6yu5+myP8RD+xztvB6Vg6g9vU8nT+sKzDn9UlUWnHRH6wgu19+oTuDnxdvzvV++
  • HKEY_LOCAL_MACHINE\SOFTWARE\HELPER_SETUP\111000451\NP6YU5+TNZZH0OQIKE1/GD3HJMQT/\NP6YU5+SLH3LFHWYSUAITYUVQ23GP9ARM6PZNS = NP6yu5+zcH+7FHwysu037
  • HKEY_LOCAL_MACHINE\SOFTWARE\HELPER_SETUP\111000451\NP6YU5+TNZZH0OQIKE1/GD3HJMQT/\NP6YU5+T3BD56789/XU4TF4QCFDCBTHM9BO81OA/UPCL = NP6yu5+jnxjzOdefABNqu
  • HKEY_LOCAL_MACHINE\SOFTWARE\HELPER_SETUP\111000451\NP6YU5+TNZZH0OQIKE1/GD3HJMQT/\NP6YU5+T4SMY89/XZTO241UBCL1FGCDQGO = NP6yu5+jnxjzOdefABNqu
  • HKEY_LOCAL_MACHINE\SOFTWARE\HELPER_SETUP\111000451\NP6YU5+TNZZH0OQIKE1/GD3HJMQT/\NP6YU5+T5W/EBHABCDLG7/SFSAATXRVG = NP6yu5+xvTqlqdefABK+80Gq2mWBC1o0+
  • HKEY_LOCAL_MACHINE\SOFTWARE\HELPER_SETUP\111000451\NP6YU5+TNZZH0OQIKE1/GD3HJMQT/\NP6YU5+TJP3SBQOMJLSVJFGKDPGOFAASAQ8LES0XEI = NP6yu5+vDHtq+ikg01CbIM
  • HKEY_LOCAL_MACHINE\SOFTWARE\HELPER_SETUP\111000451\NP6YU5+TNZZH0OQIKE1/GD3HJMQT/\NP6YU5+U2C5SLHABCDKYXGD2X5DTP+ = NP6yu5+z9yRW0urpni4jMXqI+bzDEz/yblArLamdETr8b
  • HKEY_LOCAL_MACHINE\SOFTWARE\HELPER_SETUP\111000451\NP6YU5+TNZZH0OQIKE1/GD3HJMQT/\NP6YU5+U4W7I3FHWYSFPPWVEC640VGJ7VUI5FRVR = NP6yu5+xKYF+812345Z1
  • HKEY_LOCAL_MACHINE\SOFTWARE\HELPER_SETUP\111000451\NP6YU5+TNZZH0OQIKE1/GD3HJMQT/\NP6YU5+UGNMTBCDWYSQB6JM/JZXAHMJS4BB/QRIN+8 = NP6yu5+sbPoveIKEG+mVVY368YxdBY2ezBg5ie7rQueP
  • HKEY_LOCAL_MACHINE\SOFTWARE\HELPER_SETUP\111000451\NP6YU5+TNZZH0OQIKE1/GD3HJMQT/\NP6YU5+UOKDXOMJLHAVN/BTY0USNL9TLBQ2MOH9Y = NP6yu5+nWUogkwysur1U
  • HKEY_LOCAL_MACHINE\SOFTWARE\HELPER_SETUP\111000451\NP6YU5+TNZZH0OQIKE1/GD3HJMQT/\NP6YU5+UPBRS456789YYTFDDRZVA0PJHL5GUN4CRRU6I0+/B = NP6yu5+ms6Kogvqomje5FgkwM
  • HKEY_LOCAL_MACHINE\SOFTWARE\HELPER_SETUP\111000451\NP6YU5+TNZZH0OQIKE1/GD3HJMQT/\NP6YU5+VBNHYCDWYSUOIK7BPU/LITLOXXB/Y/8ZSGUEDPVDRC = NP6yu5+ouLGsR/XZTVHZg6
  • HKEY_LOCAL_MACHINE\SOFTWARE\HELPER_SETUP\111000451\NP6YU5+TNZZH0OQIKE1/GD3HJMQT/\NP6YU5+VGPJJAFABCDTSHMZVQSFT7E4SI = NP6yu5+vDHtq+ikg01CbIM
  • HKEY_LOCAL_MACHINE\SOFTWARE\HELPER_SETUP\111000451\NP6YU5+TNZZH0OQIKE1/GD3HJMQT/\NP6YU5+X5UJZA6789/S8544JFOJCJZHKISZVI = NP6yu5+xztvqomjlha
  • HKEY_LOCAL_MACHINE\SOFTWARE\HELPER_SETUP\111000451\NP6YU5+TNZZH0OQIKE1/GD3HJMQT/\NP6YU5+XEGQYZTVNPRHAP40RL5NZK9RVF+FIGEUX = NP6yu5+ouLGsR/XZTVHZg6
  • HKEY_LOCAL_MACHINE\SOFTWARE\HELPER_SETUP\111000451\NP6YU5+TNZZH0OQIKE1/GD3HJMQT/\NP6YU5+XGCT2OQOMJLV2GRNCOLMWN7NYN = NP6yu5+tQ3dtOHwysu7dAPo9rWzs6Cz73val5GwlYqnEmAXyKRiEzz+0sbZtS5
  • HKEY_LOCAL_MACHINE\SOFTWARE\HELPER_SETUP\111000451\NP6YU5+TNZZH0OQIKE1/GD3HJMQT/\NP6YU5+XH2UW4HWYSU7SSR8OWZX2XW2HDD4DJXQBX = NP6yu5+v6gF5uEG+xzl4m+M2fglZ50YCPtaveVpiBc8QO
  • HKEY_LOCAL_MACHINE\SOFTWARE\HELPER_SETUP\111000451\NP6YU5+TNZZH0OQIKE1/GD3HJMQT/\NP6YU5+XYXZUR+XZTV8XRDD4DOLW/+0ELRMM = NP6yu5+v1ZY47G+xzt0F1+NH8M0Es+MF
  • HKEY_LOCAL_MACHINE\SOFTWARE\HELPER_SETUP\111000451\NP6YU5+TNZZH0OQIKE1/GD3HJMQT/\NP6YU5+Y9R/XAZTVQOWETD7YHX7KCFYZD24SLA = NP6yu5+xztvqomjlha
  • HKEY_LOCAL_MACHINE\SOFTWARE\HELPER_SETUP\111000451\NP6YU5+TNZZH0OQIKE1/GD3HJMQT/\NP6YU5+YEFHRM+XZTVBTQYBYRHCKZLQDEDD77YDA71 = NP6yu5+myP8RD+xztvB6Vg6g9vU8nT+sKzDn9UlUWnHRH6wgu19+oTuDnxdvzvV++
  • HKEY_LOCAL_MACHINE\SOFTWARE\HELPER_SETUP\111000451\NP6YU5+TNZZH0OQIKE1/GD3HJMQT/\NP6YU5+ZUPS3JLHABCQDMNISCD6AO3ADXMTQ1WIAX6 = NP6yu5+tQ3dtOHwysu7dAPo9rWzs6Cz73val5GwlYqnEmAXyKRiEzz+0sbZtS5
  • HKEY_LOCAL_MACHINE\SOFTWARE\MICROSOFT\WINDOWS NT\CURRENTVERSION\WINDOWS\APPINIT_DLLS = c:\progra~1\ss-sup~1\assist~1.dll
  • HKEY_LOCAL_MACHINE\SOFTWARE\MICROSOFT\WINDOWS NT\CURRENTVERSION\WINDOWS\LOADAPPINIT_DLLS = 1
  • HKEY_LOCAL_MACHINE\SOFTWARE\MICROSOFT\WINDOWS\CURRENTVERSION\UNINSTALL\{5F189DF5-2D05-472B-9091-84D9848AE48B}{F122CA63}\CATEGORYNAME
  • HKEY_LOCAL_MACHINE\SOFTWARE\MICROSOFT\WINDOWS\CURRENTVERSION\UNINSTALL\{5F189DF5-2D05-472B-9091-84D9848AE48B}{F122CA63}\DISPLAYNAME = GS-Supporter 1.80
  • HKEY_LOCAL_MACHINE\SOFTWARE\MICROSOFT\WINDOWS\CURRENTVERSION\UNINSTALL\{5F189DF5-2D05-472B-9091-84D9848AE48B}{F122CA63}\INSTALLDATE = 20111115
  • HKEY_LOCAL_MACHINE\SOFTWARE\MICROSOFT\WINDOWS\CURRENTVERSION\UNINSTALL\{5F189DF5-2D05-472B-9091-84D9848AE48B}{F122CA63}\NOMODIFY = 1
  • HKEY_LOCAL_MACHINE\SOFTWARE\MICROSOFT\WINDOWS\CURRENTVERSION\UNINSTALL\{5F189DF5-2D05-472B-9091-84D9848AE48B}{F122CA63}\NOREPAIR = 1
  • HKEY_LOCAL_MACHINE\SOFTWARE\MICROSOFT\WINDOWS\CURRENTVERSION\UNINSTALL\{5F189DF5-2D05-472B-9091-84D9848AE48B}{F122CA63}\PUBLISHER = Certified Publisher
  • HKEY_LOCAL_MACHINE\SOFTWARE\MICROSOFT\WINDOWS\CURRENTVERSION\UNINSTALL\{5F189DF5-2D05-472B-9091-84D9848AE48B}{F122CA63}\QUIETUNINSTALLSTRING = "%WINDIR%\SYSTEM32\RUNDLL32.EXE" "C:\PROGRA~1\SS-SUP~1\ASSIST~1.DLL",_uninstall /un /uq
  • HKEY_LOCAL_MACHINE\SOFTWARE\MICROSOFT\WINDOWS\CURRENTVERSION\UNINSTALL\{5F189DF5-2D05-472B-9091-84D9848AE48B}{F122CA63}\UNINSTALLSTRING = "%WINDIR%\SYSTEM32\RUNDLL32.EXE" "C:\PROGRA~1\SS-SUP~1\ASSIST~1.DLL",_uninstall /un
  • HKEY_LOCAL_MACHINE\SOFTWARE\MICROSOFT\WINDOWS\CURRENTVERSION\UNINSTALL\9453B5D4-E05C-4C23-99DA-FFE3BB396F00\ESTIMATEDSIZE = 0
  • HKEY_LOCAL_MACHINE\SOFTWARE\MICROSOFT\WINDOWS\CURRENTVERSION\UNINSTALL\9453B5D4-E05C-4C23-99DA-FFE3BB396F00\LANGUAGE = 1033
  • HKEY_LOCAL_MACHINE\SOFTWARE\MICROSOFT\WINDOWS\CURRENTVERSION\UNINSTALL\9453B5D4-E05C-4C23-99DA-FFE3BB396F00\QUIETUNINSTALLSTRING = C:\DOCUME~1\ALLUSE~1\APPLIC~1\INSTAL~1\{6CBFB~1\Setup.exe /remove /q
  • HKEY_LOCAL_MACHINE\SOFTWARE\MICROSOFT\WINDOWS\CURRENTVERSION\UNINSTALL\9453B5D4-E05C-4C23-99DA-FFE3BB396F00\TIZPATH = %TEMP%\15CAB2B33541823003D88E7DB4F52B9180A58A90
  • HKEY_LOCAL_MACHINE\SOFTWARE\MICROSOFT\WINDOWS\CURRENTVERSION\UNINSTALL\9453B5D4-E05C-4C23-99DA-FFE3BB396F00\TSAWARE = 1
  • HKEY_LOCAL_MACHINE\SOFTWARE\MICROSOFT\WINDOWS\CURRENTVERSION\UNINSTALL\9453B5D4-E05C-4C23-99DA-FFE3BB396F00\UNINSTALLSTRING = C:\DOCUME~1\ALLUSE~1\APPLIC~1\INSTAL~1\{6CBFB~1\Setup.exe /remove /q0
  • HKEY_LOCAL_MACHINE\SOFTWARE\MICROSOFT\WINDOWS\CURRENTVERSION\UNINSTALL\9453B5D4-E05C-4C23-99DA-FFE3BB396F00\VERSION = 16777216
  • HKEY_LOCAL_MACHINE\SOFTWARE\MICROSOFT\WINDOWS\CURRENTVERSION\UNINSTALL\9453B5D4-E05C-4C23-99DA-FFE3BB396F00\VERSIONMAJOR = 1
  • HKEY_LOCAL_MACHINE\SOFTWARE\MICROSOFT\WINDOWS\CURRENTVERSION\UNINSTALL\9453B5D4-E05C-4C23-99DA-FFE3BB396F00\VERSIONMINOR = 0
  • HKEY_LOCAL_MACHINE\SOFTWARE\MICROSOFT\WINDOWS\CURRENTVERSION\UNINSTALL\S-5458797678\_IN = 20121116
  • HKEY_LOCAL_MACHINE\SOFTWARE\MICROSOFT\WINDOWS\CURRENTVERSION\UNINSTALL\S-5458797678\CATEGORYNAME = Apps
  • HKEY_LOCAL_MACHINE\SOFTWARE\MICROSOFT\WINDOWS\CURRENTVERSION\UNINSTALL\S-5458797678\DISPLAYICON = %WINDIR%\SYSTEM32\msiexec.exe
  • HKEY_LOCAL_MACHINE\SOFTWARE\MICROSOFT\WINDOWS\CURRENTVERSION\UNINSTALL\S-5458797678\DISPLAYNAME = SW.Booster
  • HKEY_LOCAL_MACHINE\SOFTWARE\MICROSOFT\WINDOWS\CURRENTVERSION\UNINSTALL\S-5458797678\DISPLAYVERSION = 1.3.0.1026
  • HKEY_LOCAL_MACHINE\SOFTWARE\MICROSOFT\WINDOWS\CURRENTVERSION\UNINSTALL\S-5458797678\INSTALLDATE = 20111115
  • HKEY_LOCAL_MACHINE\SOFTWARE\MICROSOFT\WINDOWS\CURRENTVERSION\UNINSTALL\S-5458797678\NOMODIFY = 1
  • HKEY_LOCAL_MACHINE\SOFTWARE\MICROSOFT\WINDOWS\CURRENTVERSION\UNINSTALL\S-5458797678\NOREPAIR = 1
  • HKEY_LOCAL_MACHINE\SOFTWARE\MICROSOFT\WINDOWS\CURRENTVERSION\UNINSTALL\S-5458797678\PUBLISHER = PremiumSoft
  • HKEY_LOCAL_MACHINE\SOFTWARE\MICROSOFT\WINDOWS\CURRENTVERSION\UNINSTALL\S-5458797678\SILENTUNINSTALL = "%ALLUSERSPROFILE%\application data\puresafe\sw.booster\sw.booster.exe" /uninstall
  • HKEY_LOCAL_MACHINE\SOFTWARE\MICROSOFT\WINDOWS\CURRENTVERSION\UNINSTALL\S-5458797678\UNINSTALLSTRING = "%ALLUSERSPROFILE%\application data\puresafe\sw.booster\sw.booster.exe" /uninstall
  • HKEY_LOCAL_MACHINE\SOFTWARE\MICROSOFT\WINDOWS\CURRENTVERSION\UNINSTALL\S-5458797678\URLINFOABOUT
  • HKEY_LOCAL_MACHINE\SOFTWARE\MICROSOFT\WINDOWS\CURRENTVERSION\UNINSTALL\S-5458797678\URLUPDATEINFO
  • HKEY_LOCAL_MACHINE\SOFTWARE\SW.BOOSTER\5458797678\NP6YU5+TNZZH0OQIKE1/GD3HJMQT/\NP6YU5+II0LV89/XZTPMAWCAW6XIF/XIOWOPLYXREC = NP6yu5+z7vLgNfABCDER9
  • HKEY_LOCAL_MACHINE\SOFTWARE\SW.BOOSTER\5458797678\NP6YU5+TNZZH0OQIKE1/GD3HJMQT/\NP6YU5+IMD09G789/XRRUO/JOXMOD5P8S7Z6 = NP6yu5+owmZMztvqom44
  • HKEY_LOCAL_MACHINE\SOFTWARE\SW.BOOSTER\5458797678\NP6YU5+TNZZH0OQIKE1/GD3HJMQT/\NP6YU5+IQFGHLQOMJLSRVHFNHJ3OZIGYJWY44WGZ8T = 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
  • HKEY_LOCAL_MACHINE\SOFTWARE\SW.BOOSTER\5458797678\NP6YU5+TNZZH0OQIKE1/GD3HJMQT/\NP6YU5+JJE/MNBCDWYVA42SCZUV9SCLFRQVZXT8SBARO = NP6yu5+kehdfwjlhabCRzRJxvVHpLyK4
  • HKEY_LOCAL_MACHINE\SOFTWARE\SW.BOOSTER\5458797678\NP6YU5+TNZZH0OQIKE1/GD3HJMQT/\NP6YU5+JNTHSFABCDWTWKUM/W1APBTS1+VQW3XAFAC = NP6yu5+yZZqyR/XZTVj+W5qQHhXWff
  • HKEY_LOCAL_MACHINE\SOFTWARE\SW.BOOSTER\5458797678\NP6YU5+TNZZH0OQIKE1/GD3HJMQT/\NP6YU5+JO7CKSRJLFHDITGO4 = NP6yu5+ookVA701234YHM8
  • HKEY_LOCAL_MACHINE\SOFTWARE\SW.BOOSTER\5458797678\NP6YU5+TNZZH0OQIKE1/GD3HJMQT/\NP6YU5+JXU9X/ZTVQOWWAVZZG1EDHHJPA = NP6yu5+oS+lN1rpnik98wFUb6gH6ukMa
  • HKEY_LOCAL_MACHINE\SOFTWARE\SW.BOOSTER\5458797678\NP6YU5+TNZZH0OQIKE1/GD3HJMQT/\NP6YU5+JYYWQBURPNIZRRB5FIXXL0NH4RV = NP6yu5+kehdfwjlhabCRzRJxvVHpLyK4
  • HKEY_LOCAL_MACHINE\SOFTWARE\SW.BOOSTER\5458797678\NP6YU5+TNZZH0OQIKE1/GD3HJMQT/\NP6YU5+KMSXEBMOQIKHE69M1QE674UDEX = NP6yu5+z7vLgNfABCDER9
  • HKEY_LOCAL_MACHINE\SOFTWARE\SW.BOOSTER\5458797678\NP6YU5+TNZZH0OQIKE1/GD3HJMQT/\NP6YU5+KQ14RLHABCDIJFSYG16YZYLSH = NP6yu5+onYjezjlhabCCoH9x84QyV93L8ndOX8yRKJDI
  • HKEY_LOCAL_MACHINE\SOFTWARE\SW.BOOSTER\5458797678\NP6YU5+TNZZH0OQIKE1/GD3HJMQT/\NP6YU5+KZHWZUJLFHW5FR3FSOZPPISE/F = NP6yu5+vjUfiRvqomjSFEoI4Sg+WbVcAr+hCHoW4ERlJ5HbEyNOUCDZliMsEik2tMkYhveOFdXqOAtwRifLNUGMB8MUDdLKRmp3xTLJkujmbt8D0V/Nnwj0Z2KnwosS8foYgUd0Qzo36Yfd6kiXNGcu+ngiYLUXVtHYeOAWRB2nxjvMRou9dEoDBULUUna8G5OEkE2QosZETD55nebbfWGozdFhTG4/EKEAKP/KcwszxltdUXS65ok4zZ6+dREeLM/EBNFEjLvvtqVfLBQ0PJtc7bXyMM4WggukWqnMjSdcZI0tyatYHDl/VdmzupdaBFaQuOwXAHlfB6RQ51HNX9jvTTBSwVvQu+TGRD/FxreYiW/eQzExUYSsCdCLTayXF5yKTAQpGpVETkccgBHzplmuWfT3VytfbasRj92IZfpJgmgRT2NJV/SgjyrRbv5m0HtjdfcGRZFLwpbBar4QCrZKyq2ASVLd0MvcubNX4EoeJ2AwRhwgkNzDqS8ihLhdM
  • HKEY_LOCAL_MACHINE\SOFTWARE\SW.BOOSTER\5458797678\NP6YU5+TNZZH0OQIKE1/GD3HJMQT/\NP6YU5+M493B1JLFHWFSLP0CQ = NP6yu5+kzkcLP12345ZfrEA8xwYzo
  • HKEY_LOCAL_MACHINE\SOFTWARE\SW.BOOSTER\5458797678\NP6YU5+TNZZH0OQIKE1/GD3HJMQT/\NP6YU5+MA7A/0RJLFH3OCQCND9QOS7C7LJLXGMTX4Y5FN0ND = NP6yu5+xztvqomjlha
  • HKEY_LOCAL_MACHINE\SOFTWARE\SW.BOOSTER\5458797678\NP6YU5+TNZZH0OQIKE1/GD3HJMQT/\NP6YU5+ME6UTVNPRJL13JFL4PKQ3+KZKKBGDUDHPPPQUV = NP6yu5+owmZMztvqom44
  • HKEY_LOCAL_MACHINE\SOFTWARE\SW.BOOSTER\5458797678\NP6YU5+TNZZH0OQIKE1/GD3HJMQT/\NP6YU5+MGMVNPNIKG0UES4WE2P15TB9Y = NP6yu5+v6gF5uEG+xzl4m+M2fglZ50YCPtaveVpiBc8QO
  • HKEY_LOCAL_MACHINE\SOFTWARE\SW.BOOSTER\5458797678\NP6YU5+TNZZH0OQIKE1/GD3HJMQT/\NP6YU5+MGOOXRIKG01VRAVP7V/5B68FYY = NP6yu5+yZZqyR/XZTVj+W5qQHhXWff
  • HKEY_LOCAL_MACHINE\SOFTWARE\SW.BOOSTER\5458797678\NP6YU5+TNZZH0OQIKE1/GD3HJMQT/\NP6YU5+MPPWLQDWYSUOJ8V7LBA0+8W0MSMWN4CLWM7 = NP6yu5+oS+lN1rpnik98wFUb6gH6ukMa
  • HKEY_LOCAL_MACHINE\SOFTWARE\SW.BOOSTER\5458797678\NP6YU5+TNZZH0OQIKE1/GD3HJMQT/\NP6YU5+O/JAUURPNIKZZC72IOD641QVSKWTQJSU5ZR = NP6yu5+qLuUwVjlhabO6AQHW7zHo0s5/qmFaUd2glq14uyOitxSUb87SZXnwz
  • HKEY_LOCAL_MACHINE\SOFTWARE\SW.BOOSTER\5458797678\NP6YU5+TNZZH0OQIKE1/GD3HJMQT/\NP6YU5+OBHHU6789/XU3LMQKQBU9V0O8L1+PWHGQ7A = NP6yu5+ire7AFHwysu7daGH/1I+8/fYQTHvbDbfbFpsZR9hg1ZLTwQJfCgwjG
  • HKEY_LOCAL_MACHINE\SOFTWARE\SW.BOOSTER\5458797678\NP6YU5+TNZZH0OQIKE1/GD3HJMQT/\NP6YU5+OFUVMDBCDEFHBBXRMLUGJ9AYGJ = NP6yu5+yZKZjefABCDz76N9UmHe0p0kgH5NGRfwxzCZGcCt9/G/oGfA6jw
  • HKEY_LOCAL_MACHINE\SOFTWARE\SW.BOOSTER\5458797678\NP6YU5+TNZZH0OQIKE1/GD3HJMQT/\NP6YU5+ORN6UTIKEG+DIGPNG1YSOBLAVHVZRTKS5X3JZ0JUS = NP6yu5+o4IdosRJLFHmfwN6K
  • HKEY_LOCAL_MACHINE\SOFTWARE\SW.BOOSTER\5458797678\NP6YU5+TNZZH0OQIKE1/GD3HJMQT/\NP6YU5+OW1RR56789/UE1SBYVUF4KVUIX = NP6yu5+nWUogkwysur1U
  • HKEY_LOCAL_MACHINE\SOFTWARE\SW.BOOSTER\5458797678\NP6YU5+TNZZH0OQIKE1/GD3HJMQT/\NP6YU5+OXTCWROQIKEBFOQMXOVQ3PYCV = NP6yu5+zbMgbIcdefAUN
  • HKEY_LOCAL_MACHINE\SOFTWARE\SW.BOOSTER\5458797678\NP6YU5+TNZZH0OQIKE1/GD3HJMQT/\NP6YU5+PNRKTFBCDEFEJL8Z1TLNENCPBPB = NP6yu5+kzkcLP12345ZfrEA8xwYzo
  • HKEY_LOCAL_MACHINE\SOFTWARE\SW.BOOSTER\5458797678\NP6YU5+TNZZH0OQIKE1/GD3HJMQT/\NP6YU5+Q2CPRX789/XUEIE5ILGMR36HI9ZR5HNZS2A = NP6yu5+nWUogkwysur1U
  • HKEY_LOCAL_MACHINE\SOFTWARE\SW.BOOSTER\5458797678\NP6YU5+TNZZH0OQIKE1/GD3HJMQT/\NP6YU5+Q83XDCABCDEK18VAC0H9NVFERZY89QZIQZ = NP6yu5+xvTqlqdefABK+80Gq2mWBC1o0+
  • HKEY_LOCAL_MACHINE\SOFTWARE\SW.BOOSTER\5458797678\NP6YU5+TNZZH0OQIKE1/GD3HJMQT/\NP6YU5+QAAIJRPNIKGVSUOLAZ3MK8U+RGKBXPY = NP6yu5+ms6Kogvqomje5FgkwM
  • HKEY_LOCAL_MACHINE\SOFTWARE\SW.BOOSTER\5458797678\NP6YU5+TNZZH0OQIKE1/GD3HJMQT/\NP6YU5+QCEJ2JRPNIKTXYRB/HJK8PV2I7 = NP6yu5+ire7AFHwysu7daGH/1I+8/fYQTHvbDbfbFpsZR9hg1ZLTwQJfCgwjG
  • HKEY_LOCAL_MACHINE\SOFTWARE\SW.BOOSTER\5458797678\NP6YU5+TNZZH0OQIKE1/GD3HJMQT/\NP6YU5+QMAGWAVQOMJYKE3RG3RAIWGTRR6LY542B = NP6yu5+z9yRW0urpni4jMXqI+bzDEz/yblArLamdETr8b
  • HKEY_LOCAL_MACHINE\SOFTWARE\SW.BOOSTER\5458797678\NP6YU5+TNZZH0OQIKE1/GD3HJMQT/\NP6YU5+QNT+FXZTVQODFBTS/GCPHJVOOIO2SDNPTKI = NP6yu5+yZKZjefABCDz76N9UmHe0p0kgH5NGRfwxzCZGcCt9/G/oGfA6jw
  • HKEY_LOCAL_MACHINE\SOFTWARE\SW.BOOSTER\5458797678\NP6YU5+TNZZH0OQIKE1/GD3HJMQT/\NP6YU5+QWDMHUJLHABRI95GDX9WB+KT8H = NP6yu5+qLuUwVjlhabO6AQHW7zHo0s5/qmFaUd2glq14uyOitxSUb87SZXnwz
  • HKEY_LOCAL_MACHINE\SOFTWARE\SW.BOOSTER\5458797678\NP6YU5+TNZZH0OQIKE1/GD3HJMQT/\NP6YU5+R+8G2H34567HEDRCOML+7+U93C = NP6yu5+sbPoveIKEG+mVVY368YxdBY2ezBg5ie7rQueP
  • HKEY_LOCAL_MACHINE\SOFTWARE\SW.BOOSTER\5458797678\NP6YU5+TNZZH0OQIKE1/GD3HJMQT/\NP6YU5+RK2YDOCDWYSO+SSZJB0LFNMK7UMZJ4F = NP6yu5+o4IdosRJLFHmfwN6K
  • HKEY_LOCAL_MACHINE\SOFTWARE\SW.BOOSTER\5458797678\NP6YU5+TNZZH0OQIKE1/GD3HJMQT/\NP6YU5+ROHR67HABCDI6OQITBZYLEDLKV = NP6yu5+ookVA701234YHM8
  • HKEY_LOCAL_MACHINE\SOFTWARE\SW.BOOSTER\5458797678\NP6YU5+TNZZH0OQIKE1/GD3HJMQT/\NP6YU5+S/N9Q2LFHWY5GE3VWAFDDYM0XGIXL/SOCFUPBEC2IZ = NP6yu5+xKYF+812345Z1
  • HKEY_LOCAL_MACHINE\SOFTWARE\SW.BOOSTER\5458797678\NP6YU5+TNZZH0OQIKE1/GD3HJMQT/\NP6YU5+S2TBXEEFABCXJ0DAXR+/FSJDEDZSSHR+HV = NP6yu5+onYjezjlhabCCoH9x84QyV93L8ndOX8yRKJDI
  • HKEY_LOCAL_MACHINE\SOFTWARE\SW.BOOSTER\5458797678\NP6YU5+TNZZH0OQIKE1/GD3HJMQT/\NP6YU5+SFYNDEBCDEF+TMD = NP6yu5+zbMgbIcdefAUN
  • HKEY_LOCAL_MACHINE\SOFTWARE\SW.BOOSTER\5458797678\NP6YU5+TNZZH0OQIKE1/GD3HJMQT/\NP6YU5+SH9+Y+XZTVQ/XYWHII+JTIOMPD = NP6yu5+myP8RD+xztvB6Vg6g9vU8nT+sKzDn9UlUWnHRH6wgu19+oTuDnxdvzvV++
  • HKEY_LOCAL_MACHINE\SOFTWARE\SW.BOOSTER\5458797678\NP6YU5+TNZZH0OQIKE1/GD3HJMQT/\NP6YU5+T+P+YMHABCDJFHSAEPXR5O1J1C+DKL8GWF2QPTQLD = NP6yu5+tZ2RYysurpn3X2Z9kwP0eJFFRjxUZ
  • HKEY_LOCAL_MACHINE\SOFTWARE\SW.BOOSTER\5458797678\NP6YU5+TNZZH0OQIKE1/GD3HJMQT/\NP6YU5+T3BD56789/XU4TF4QCFDCBTHM9BO81OA/UPCL = NP6yu5+jnxjzOdefABNqu
  • HKEY_LOCAL_MACHINE\SOFTWARE\SW.BOOSTER\5458797678\NP6YU5+TNZZH0OQIKE1/GD3HJMQT/\NP6YU5+T4SMY89/XZTO241UBCL1FGCDQGO = NP6yu5+jnxjzOdefABNqu
  • HKEY_LOCAL_MACHINE\SOFTWARE\SW.BOOSTER\5458797678\NP6YU5+TNZZH0OQIKE1/GD3HJMQT/\NP6YU5+T5W/EBHABCDLG7/SFSAATXRVG = NP6yu5+xvTqlqdefABK+80Gq2mWBC1o0+
  • HKEY_LOCAL_MACHINE\SOFTWARE\SW.BOOSTER\5458797678\NP6YU5+TNZZH0OQIKE1/GD3HJMQT/\NP6YU5+TJP3SBQOMJLSVJFGKDPGOFAASAQ8LES0XEI = NP6yu5+vDHtq+ikg01CbIM
  • HKEY_LOCAL_MACHINE\SOFTWARE\SW.BOOSTER\5458797678\NP6YU5+TNZZH0OQIKE1/GD3HJMQT/\NP6YU5+U2C5SLHABCDKYXGD2X5DTP+ = NP6yu5+z9yRW0urpni4jMXqI+bzDEz/yblArLamdETr8b
  • HKEY_LOCAL_MACHINE\SOFTWARE\SW.BOOSTER\5458797678\NP6YU5+TNZZH0OQIKE1/GD3HJMQT/\NP6YU5+U4W7I3FHWYSFPPWVEC640VGJ7VUI5FRVR = NP6yu5+xKYF+812345Z1
  • HKEY_LOCAL_MACHINE\SOFTWARE\SW.BOOSTER\5458797678\NP6YU5+TNZZH0OQIKE1/GD3HJMQT/\NP6YU5+UGNMTBCDWYSQB6JM/JZXAHMJS4BB/QRIN+8 = NP6yu5+sbPoveIKEG+mVVY368YxdBY2ezBg5ie7rQueP
  • HKEY_LOCAL_MACHINE\SOFTWARE\SW.BOOSTER\5458797678\NP6YU5+TNZZH0OQIKE1/GD3HJMQT/\NP6YU5+UPBRS456789YYTFDDRZVA0PJHL5GUN4CRRU6I0+/B = NP6yu5+ms6Kogvqomje5FgkwM
  • HKEY_LOCAL_MACHINE\SOFTWARE\SW.BOOSTER\5458797678\NP6YU5+TNZZH0OQIKE1/GD3HJMQT/\NP6YU5+VBNHYCDWYSUOIK7BPU/LITLOXXB/Y/8ZSGUEDPVDRC = NP6yu5+ouLGsR/XZTVHZg6
  • HKEY_LOCAL_MACHINE\SOFTWARE\SW.BOOSTER\5458797678\NP6YU5+TNZZH0OQIKE1/GD3HJMQT/\NP6YU5+VGPJJAFABCDTSHMZVQSFT7E4SI = NP6yu5+vDHtq+ikg01CbIM
  • HKEY_LOCAL_MACHINE\SOFTWARE\SW.BOOSTER\5458797678\NP6YU5+TNZZH0OQIKE1/GD3HJMQT/\NP6YU5+XEGQYZTVNPRHAP40RL5NZK9RVF+FIGEUX = NP6yu5+ouLGsR/XZTVHZg6
  • HKEY_LOCAL_MACHINE\SOFTWARE\SW.BOOSTER\5458797678\NP6YU5+TNZZH0OQIKE1/GD3HJMQT/\NP6YU5+XGCT2OQOMJLV2GRNCOLMWN7NYN = NP6yu5+tQ3dtOHwysu7dAPo9rWzs6Cz73val5GwlYqnEmAXyKRiEzz+0sbZtS5
  • HKEY_LOCAL_MACHINE\SOFTWARE\SW.BOOSTER\5458797678\NP6YU5+TNZZH0OQIKE1/GD3HJMQT/\NP6YU5+XH2UW4HWYSU7SSR8OWZX2XW2HDD4DJXQBX = NP6yu5+v6gF5uEG+xzl4m+M2fglZ50YCPtaveVpiBc8QO
  • HKEY_LOCAL_MACHINE\SOFTWARE\SW.BOOSTER\5458797678\NP6YU5+TNZZH0OQIKE1/GD3HJMQT/\NP6YU5+XYXZUR+XZTV8XRDD4DOLW/+0ELRMM = NP6yu5+p/RcQikg012CPtvY0JqomLb
  • HKEY_LOCAL_MACHINE\SOFTWARE\SW.BOOSTER\5458797678\NP6YU5+TNZZH0OQIKE1/GD3HJMQT/\NP6YU5+Y9R/XAZTVQOWETD7YHX7KCFYZD24SLA = NP6yu5+xztvqomjlha
  • HKEY_LOCAL_MACHINE\SOFTWARE\SW.BOOSTER\5458797678\NP6YU5+TNZZH0OQIKE1/GD3HJMQT/\NP6YU5+YEFHRM+XZTVBTQYBYRHCKZLQDEDD77YDA71 = NP6yu5+myP8RD+xztvB6Vg6g9vU8nT+sKzDn9UlUWnHRH6wgu19+oTuDnxdvzvV++
  • HKEY_LOCAL_MACHINE\SOFTWARE\SW.BOOSTER\5458797678\NP6YU5+TNZZH0OQIKE1/GD3HJMQT/\NP6YU5+ZUPS3JLHABCQDMNISCD6AO3ADXMTQ1WIAX6 = NP6yu5+tQ3dtOHwysu7dAPo9rWzs6Cz73val5GwlYqnEmAXyKRiEzz+0sbZtS5
  • HKEY_LOCAL_MACHINE\SYSTEM\ControlSet\CONTROL\SESSION MANAGER\PENDINGFILERENAMEOPERATIONS = \??\%TEMP%\{6CBFB4EA-EC65-40E2-A209-A447B75C961C}
  • HKEY_USERS\.DEFAULT\SOFTWARE\APPDATALOW\{5F189DF5-2D05-472B-9091-84D9848AE48B}\_F122CA63\IIID = 1
  • HKEY_USERS\.DEFAULT\SOFTWARE\APPDATALOW\{5F189DF5-2D05-472B-9091-84D9848AE48B}\_F122CA63\00000000\370856C7 = p01e07x0qx1A06h0n01+06l0nU1Z06t0mU1g0640nl0S06h0nl1A06E0 p01e07x0qx1D06I0mU1O0640n01Y06t0ml1N06b0qx1S02I0ox1S06q0nU0% p01e07x0qx1N06t0nl1h06O0jx1P06Y0mU1g0640nl0S06h0nl1A06E0 p01T07m0nl1Y06E0qx1h06x0qx1O0640mU1g0640nl0S06h0nl1A06E0
  • HKEY_USERS\.DEFAULT\SOFTWARE\APPDATALOW\{5F189DF5-2D05-472B-9091-84D9848AE48B}\_F122CA63\00000000\3EFEB33E = p01e07x0qx1A06h0n01+06l0nU1Z06t0mU1g0640nl0S06h0nl1A06E0 p01e07x0qx1D06I0mU1O0640n01Y06t0ml1N06b0qx1S02I0ox1S06q0nU0% p01e07x0qx1N06t0nl1h06O0jx1P06Y0mU1g0640nl0S06h0nl1A06E0 p01T07m0nl1Y06E0qx1h06x0qx1O0640mU1g0640nl0S06h0nl1A06E0
  • HKEY_USERS\.DEFAULT\SOFTWARE\APPDATALOW\{5F189DF5-2D05-472B-9091-84D9848AE48B}\_F122CA63\00000000\493C7345 = 0
  • HKEY_USERS\.DEFAULT\SOFTWARE\APPDATALOW\{5F189DF5-2D05-472B-9091-84D9848AE48B}\_F122CA63\EAE10F9D\060DF2CD = G/Ay/YP/FPAt/X6/clAj/Xl/alAy/XP/blAs/XD/ax/j/Xt/axAv/X6////%
  • HKEY_USERS\.DEFAULT\SOFTWARE\APPDATALOW\{5F189DF5-2D05-472B-9091-84D9848AE48B}\_F122CA63\EAE10F9D\0C230BCB = ///%
  • HKEY_USERS\.DEFAULT\SOFTWARE\APPDATALOW\{5F189DF5-2D05-472B-9091-84D9848AE48B}\_F122CA63\EAE10F9D\0DC3EE96 = /P////%%
  • HKEY_USERS\.DEFAULT\SOFTWARE\APPDATALOW\{5F189DF5-2D05-472B-9091-84D9848AE48B}\_F122CA63\EAE10F9D\0E93C3F3 = ///%
  • HKEY_USERS\.DEFAULT\SOFTWARE\APPDATALOW\{5F189DF5-2D05-472B-9091-84D9848AE48B}\_F122CA63\EAE10F9D\1520C6F1 = V/////%%
  • HKEY_USERS\.DEFAULT\SOFTWARE\APPDATALOW\{5F189DF5-2D05-472B-9091-84D9848AE48B}\_F122CA63\EAE10F9D\1C311243 = GxAy/YV/c/At/XD/c/Ay/XF/cPAj/YV/FlAy/X2/UxAp/X2/GxAk////
  • HKEY_USERS\.DEFAULT\SOFTWARE\APPDATALOW\{5F189DF5-2D05-472B-9091-84D9848AE48B}\_F122CA63\EAE10F9D\27DDCF6F = ///%
  • HKEY_USERS\.DEFAULT\SOFTWARE\APPDATALOW\{5F189DF5-2D05-472B-9091-84D9848AE48B}\_F122CA63\EAE10F9D\2D71D5AB = V/////%%
  • HKEY_USERS\.DEFAULT\SOFTWARE\APPDATALOW\{5F189DF5-2D05-472B-9091-84D9848AE48B}\_F122CA63\EAE10F9D\340D3099 = /P////%%
  • HKEY_USERS\.DEFAULT\SOFTWARE\APPDATALOW\{5F189DF5-2D05-472B-9091-84D9848AE48B}\_F122CA63\EAE10F9D\37B7A6D8 = UlAr/XJ/c//k////
  • HKEY_USERS\.DEFAULT\SOFTWARE\APPDATALOW\{5F189DF5-2D05-472B-9091-84D9848AE48B}\_F122CA63\EAE10F9D\38583BC3 = N//e/Ct/Vx/l/C/////%
  • HKEY_USERS\.DEFAULT\SOFTWARE\APPDATALOW\{5F189DF5-2D05-472B-9091-84D9848AE48B}\_F122CA63\EAE10F9D\3C09C42B = ///%
  • HKEY_USERS\.DEFAULT\SOFTWARE\APPDATALOW\{5F189DF5-2D05-472B-9091-84D9848AE48B}\_F122CA63\EAE10F9D\414BC593 = ///%
  • HKEY_USERS\.DEFAULT\SOFTWARE\APPDATALOW\{5F189DF5-2D05-472B-9091-84D9848AE48B}\_F122CA63\EAE10F9D\51D2F2EA = QlAI/Bh/JlA+/Y//b/Ak/YZ/c/Au/YZ/Z//e/B2/N//l////
  • HKEY_USERS\.DEFAULT\SOFTWARE\APPDATALOW\{5F189DF5-2D05-472B-9091-84D9848AE48B}\_F122CA63\EAE10F9D\587B5709 = V/////%%
  • HKEY_USERS\.DEFAULT\SOFTWARE\APPDATALOW\{5F189DF5-2D05-472B-9091-84D9848AE48B}\_F122CA63\EAE10F9D\6185D035 = VP/h/CP/V//l////
  • HKEY_USERS\.DEFAULT\SOFTWARE\APPDATALOW\{5F189DF5-2D05-472B-9091-84D9848AE48B}\_F122CA63\EAE10F9D\65114B36 = Vl/l////
  • HKEY_USERS\.DEFAULT\SOFTWARE\APPDATALOW\{5F189DF5-2D05-472B-9091-84D9848AE48B}\_F122CA63\EAE10F9D\72758A5D = ///%
  • HKEY_USERS\.DEFAULT\SOFTWARE\APPDATALOW\{5F189DF5-2D05-472B-9091-84D9848AE48B}\_F122CA63\EAE10F9D\7367429F = ///%
  • HKEY_USERS\.DEFAULT\SOFTWARE\APPDATALOW\{5F189DF5-2D05-472B-9091-84D9848AE48B}\_F122CA63\EAE10F9D\7F69FA1F = ///%
  • HKEY_USERS\.DEFAULT\SOFTWARE\APPDATALOW\{5F189DF5-2D05-472B-9091-84D9848AE48B}\_F122CA63\EAE10F9D\8B9E4CBC = V/////%%
  • HKEY_USERS\.DEFAULT\SOFTWARE\APPDATALOW\{5F189DF5-2D05-472B-9091-84D9848AE48B}\_F122CA63\EAE10F9D\A0743ACC = N/////%%
  • HKEY_USERS\.DEFAULT\SOFTWARE\APPDATALOW\{5F189DF5-2D05-472B-9091-84D9848AE48B}\_F122CA63\EAE10F9D\A1DCFF5B = V/////%%
  • HKEY_USERS\.DEFAULT\SOFTWARE\APPDATALOW\{5F189DF5-2D05-472B-9091-84D9848AE48B}\_F122CA63\EAE10F9D\A2E3B941 = ///%
  • HKEY_USERS\.DEFAULT\SOFTWARE\APPDATALOW\{5F189DF5-2D05-472B-9091-84D9848AE48B}\_F122CA63\EAE10F9D\BBF88800 = ///%
  • HKEY_USERS\.DEFAULT\

    Symptoms

    This symptoms of this detection are the files, registry, and network communication referenced in the characteristics section.

    Method of Infection

    Trojans do not self-replicate. They are spread manually, often under the premise that the executable is something beneficial. Distribution channels include IRC, peer-to-peer networks, newsgroup postings, e-mail, etc.

    Removal

    Please use the following instructions for all supported versions of Windows:


    1. Disable Windows System Restore. For instructions, please refer to: http://www.mcafee.com/us/downloads/free-tools/disabling-system-restore.aspx

    2. Update your McAfee Anti-Virus product to the latest version (when possible), and ensure the latest DAT and Engine and any applicable EXTRA.DATs are installed.

    3. Run a full system scan. (On-Demand Scan)

    4. Reboot, as soon as it is convenient, to ensure all malicious components are removed.

    Variants