RDN/Generic.bfr!gn!24​6A1659797A

This page shows details and results of our analysis on the malware RDN/Generic.bfr!gn!246A1659797A

Overview

This is a Trojan detection. Unlike viruses, Trojans do not self-replicate. They are spread manually, often under the premise that they are beneficial or wanted. The most common installation methods involve system or security exploitation, and unsuspecting users manually executing unknown programs. Distribution channels include e-mail, malicious or hacked Web pages, Internet Relay Chat (IRC), peer-to-peer networks, etc.


Minimum Engine

5600.1067

File Length

332496

Description Added

2014-03-31

Description Modified

2014-03-31

Malware Proliferation

Characteristics

This is a Trojan

File PropertiesProperty Values
McAfee DetectionRDN/Generic.bfr!gn
Length332496 bytes
MD5246a1659797a2f2273bdc230e597ef55
SHA19fb44c4eea09bc553d2bb53c2dec86c5be2c230a


Other Common Detection Aliases

Company NamesDetection Names
aviraADWARE/InstallRex.Gen7
KasperskyTrojan.Win32.AntiFW.b
Dr.WebTrojan.WebPick.29
EsetWin32/InstalleRex.P application
vba32Downloader.Adload

Other brands and names may be claimed as the property of others.


ActivitiesRisk Levels
Attempts to connect to a high risk domain that may pose a security risk.High
Attempts to download an executable file from the web.Medium
Attempts to connect to a medium risk domain that may pose a minor security risk.Medium
Enumerates many system files and directories.Low
Enumerates process listLow
Attempts to send data or commands via HTTPLow
Process attempts to call itself recursivelyLow
Adds or modifies Internet Explorer cookiesLow


McAfee ScansScan Detections
McAfee BetaRDN/Generic.bfr!gn
McAfee SupportedRDN/Generic.bfr!gn



System Changes

Some path values have been replaced with environment variables as the exact location may vary with different configurations.
e.g.
%WINDIR% = \WINDOWS (Windows 9x/ME/XP/Vista/7), \WINNT (Windows NT/2000)
%PROGRAMFILES% = \Program Files


The following files were analyzed:

9FB44C4EEA09BC553D2BB53C2DEC86C5BE2C230A

The following files have been added to the system:

  • %ALLUSERSPROFILE%\Application Data\InstallMate\{36981ECA-0D30-483C-AAD7-4512ED7B3C3C}\Readme.txt
  • %TEMP%\{36981ECA-0D30-483C-AAD7-4512ED7B3C3C}\Addons\ext_setup.exe
  • %TEMP%\{36981ECA-0D30-483C-AAD7-4512ED7B3C3C}\_Setup.dll
  • %WINDIR%\Tasks\SW.Booster-S-5458797678.job
  • %ALLUSERSPROFILE%\Application Data\InstallMate\{36981ECA-0D30-483C-AAD7-4512ED7B3C3C}\Setup.ico
  • %ALLUSERSPROFILE%\Application Data\InstallMate\{36981ECA-0D30-483C-AAD7-4512ED7B3C3C}\TsuDll.dll
  • %TEMP%\~DF627D.tmp
  • %ALLUSERSPROFILE%\Application Data\Puresafe\SW.Booster\SW.Booster.exe
  • %TEMP%\{36981ECA-0D30-483C-AAD7-4512ED7B3C3C}\addons\5611118981.ini
  • %TEMP%\TsuFB80F09F.dll
  • %PROGRAMFILES%\Ss-Supporter\Assistant.dll
  • %TEMP%\{36981ECA-0D30-483C-AAD7-4512ED7B3C3C}\Setup.ico
  • %TEMP%\{36981ECA-0D30-483C-AAD7-4512ED7B3C3C}\Setup.exe
  • %TEMP%\{36981ECA-0D30-483C-AAD7-4512ED7B3C3C}\Addons\extfs_setup.exe
  • %TEMP%\{36981ECA-0D30-483C-AAD7-4512ED7B3C3C}\general_logo.bmp
  • %TEMP%\{36981ECA-0D30-483C-AAD7-4512ED7B3C3C}\x64\regsvr32.exe
  • %ALLUSERSPROFILE%\Application Data\InstallMate\{36981ECA-0D30-483C-AAD7-4512ED7B3C3C}\_Setup.dll
  • %ALLUSERSPROFILE%\Application Data\InstallMate\{36981ECA-0D30-483C-AAD7-4512ED7B3C3C}\Custom.dll
  • %TEMP%\{36981ECA-0D30-483C-AAD7-4512ED7B3C3C}\x86\regsvr32.exe
  • %TEMP%\_tinB059.bat
  • %TEMP%\{36981ECA-0D30-483C-AAD7-4512ED7B3C3C}\Addons\assistant_v3.exe
  • %ALLUSERSPROFILE%\Application Data\puresafe\SW.Booster\5458797678.ini
  • %TEMP%\{36981ECA-0D30-483C-AAD7-4512ED7B3C3C}\Readme.txt
  • %TEMP%\{36981ECA-0D30-483C-AAD7-4512ED7B3C3C}\v_grey.jpg
  • %TEMP%\{36981ECA-0D30-483C-AAD7-4512ED7B3C3C}\general_logo.jpg
  • %TEMP%\{36981ECA-0D30-483C-AAD7-4512ED7B3C3C}\Addons\helper_setup.exe
  • %TEMP%\{36981ECA-0D30-483C-AAD7-4512ED7B3C3C}\Custom.dll
  • %TEMP%\9FB44C4EEA09BC553D2BB53C2DEC86C5BE2C230A.log
  • %PROGRAMFILES%\Ss-Supporter\AssistantSvc.dll
  • %ALLUSERSPROFILE%\Application Data\InstallMate\{36981ECA-0D30-483C-AAD7-4512ED7B3C3C}\Setup.exe

The following files have been changed:

  • %TEMP%orary Internet Files\Content.IE5\index.dat

The following files have been deleted:

  • %ALLUSERSPROFILE%\Application Data\InstallMate\BDD0719B\cfg

The following files were temporarily written to disk then later removed:

  • %TEMP%\down.376.assistant_v3.exe.part
  • %ALLUSERSPROFILE%\Application Data\InstallMate\BDD0719B\cfg\3.ini
  • %TEMP%\down.376.1.ini.part
  • %TEMP%\down.376.4.ini.part
  • %ALLUSERSPROFILE%\Application Data\InstallMate\BDD0719B\cfg\5.ini
  • %USERPROFILE%\Local Settings\Application Data\Temp\OTCGWY.tmp
  • %TEMP%\down.376.general_logo.jpg.part
  • %TEMP%\tf00294823.dll
  • %TEMP%\down.376.4_1_2.ini.part
  • %TEMP%\BDD0719B.dat
  • %ALLUSERSPROFILE%\Application Data\InstallMate\BDD0719B\cfg\4.ini
  • %TEMP%\down.376.ext_setup.exe.part
  • %TEMP%\down.376.3.ini.part
  • %TEMP%\{36981ECA-0D30-483C-AAD7-4512ED7B3C3C}\addons\5611118981\54.tmp
  • %TEMP%\down.376.v_grey.jpg.part
  • %TEMP%\down.376.2.ini.part
  • %ALLUSERSPROFILE%\Application Data\InstallMate\BDD0719B\cfg\1.ini
  • %TEMP%\down.376.extfs_setup.exe.part
  • %TEMP%\down.376.4_2_1.ini.part
  • %TEMP%\down.376.helper_setup.exe.part
  • %TEMP%\down.376.4_2.ini.part
  • %ALLUSERSPROFILE%\Application Data\InstallMate\BDD0719B\cfg\4_1_2.ini
  • %TEMP%\down.376.4_1.ini.part
  • %TEMP%\down.376.general_logo.bmp.part
  • %ALLUSERSPROFILE%\Application Data\InstallMate\BDD0719B\cfg\4_1.ini
  • %ALLUSERSPROFILE%\Application Data\InstallMate\BDD0719B\cfg\2.ini
  • %TEMP%\{36981ECA-0D30-483C-AAD7-4512ED7B3C3C}\addons\5611118981\XDN55.tmp
  • %TEMP%\down.376.5.ini.part
  • %ALLUSERSPROFILE%\Application Data\InstallMate\BDD0719B\cfg\4_2.ini
  • %ALLUSERSPROFILE%\Application Data\InstallMate\BDD0719B\cfg\4_2_1.ini

The following registry elements have been created:

  • HKEY_CURRENT_USER\SOFTWARE\APPDATALOW\
  • HKEY_CURRENT_USER\SOFTWARE\APPDATALOW\{5F189DF5-2D05-472B-9091-84D9848AE48B}\
  • HKEY_CURRENT_USER\SOFTWARE\APPDATALOW\{5F189DF5-2D05-472B-9091-84D9848AE48B}\_F122CA63\
  • HKEY_CURRENT_USER\SOFTWARE\APPDATALOW\{5F189DF5-2D05-472B-9091-84D9848AE48B}\_F122CA63\00000000\
  • HKEY_CURRENT_USER\SOFTWARE\APPDATALOW\{5F189DF5-2D05-472B-9091-84D9848AE48B}\_F122CA63\EAE10F9D\
  • HKEY_LOCAL_MACHINE\SOFTWARE\{3A7D3E19-1B79-4E4E-BD96-5467DA2C4EF0}\
  • HKEY_LOCAL_MACHINE\SOFTWARE\{5F189DF5-2D05-472B-9091-84D9848AE48B}\
  • HKEY_LOCAL_MACHINE\SOFTWARE\{5F189DF5-2D05-472B-9091-84D9848AE48B}\_F122CA63\
  • HKEY_LOCAL_MACHINE\SOFTWARE\{5F189DF5-2D05-472B-9091-84D9848AE48B}\_F122CA63\00000000\
  • HKEY_LOCAL_MACHINE\SOFTWARE\{5F189DF5-2D05-472B-9091-84D9848AE48B}\_F122CA63\EAE10F9D\
  • HKEY_LOCAL_MACHINE\SOFTWARE\{77D46E27-0E41-4478-87A6-AABE6FBCF252}\
  • HKEY_LOCAL_MACHINE\SOFTWARE\CLASSES\INTERFACE\{19DF2320-6A8A-4942-AC4C-C449949DFC27}\
  • HKEY_LOCAL_MACHINE\SOFTWARE\CLASSES\INTERFACE\{19DF2320-6A8A-4942-AC4C-C449949DFC27}\PROXYSTUBCLSID\
  • HKEY_LOCAL_MACHINE\SOFTWARE\CLASSES\INTERFACE\{19DF2320-6A8A-4942-AC4C-C449949DFC27}\PROXYSTUBCLSID32\
  • HKEY_LOCAL_MACHINE\SOFTWARE\CLASSES\INTERFACE\{19DF2320-6A8A-4942-AC4C-C449949DFC27}\TYPELIB\
  • HKEY_LOCAL_MACHINE\SOFTWARE\CLASSES\INTERFACE\{3B3F3AAD-FB97-49FF-BFEE-D22869AC4325}\
  • HKEY_LOCAL_MACHINE\SOFTWARE\CLASSES\INTERFACE\{3B3F3AAD-FB97-49FF-BFEE-D22869AC4325}\PROXYSTUBCLSID\
  • HKEY_LOCAL_MACHINE\SOFTWARE\CLASSES\INTERFACE\{3B3F3AAD-FB97-49FF-BFEE-D22869AC4325}\PROXYSTUBCLSID32\
  • HKEY_LOCAL_MACHINE\SOFTWARE\CLASSES\INTERFACE\{3B3F3AAD-FB97-49FF-BFEE-D22869AC4325}\TYPELIB\
  • HKEY_LOCAL_MACHINE\SOFTWARE\CLASSES\INTERFACE\{5B113BE7-98FF-4DA7-8441-D3AAE3836AE4}\
  • HKEY_LOCAL_MACHINE\SOFTWARE\CLASSES\INTERFACE\{5B113BE7-98FF-4DA7-8441-D3AAE3836AE4}\PROXYSTUBCLSID\
  • HKEY_LOCAL_MACHINE\SOFTWARE\CLASSES\INTERFACE\{5B113BE7-98FF-4DA7-8441-D3AAE3836AE4}\PROXYSTUBCLSID32\
  • HKEY_LOCAL_MACHINE\SOFTWARE\CLASSES\INTERFACE\{5B113BE7-98FF-4DA7-8441-D3AAE3836AE4}\TYPELIB\
  • HKEY_LOCAL_MACHINE\SOFTWARE\CLASSES\INTERFACE\{662CA6E1-37D8-4C12-8586-3AC64DF96187}\
  • HKEY_LOCAL_MACHINE\SOFTWARE\CLASSES\INTERFACE\{662CA6E1-37D8-4C12-8586-3AC64DF96187}\PROXYSTUBCLSID\
  • HKEY_LOCAL_MACHINE\SOFTWARE\CLASSES\INTERFACE\{662CA6E1-37D8-4C12-8586-3AC64DF96187}\PROXYSTUBCLSID32\
  • HKEY_LOCAL_MACHINE\SOFTWARE\CLASSES\INTERFACE\{662CA6E1-37D8-4C12-8586-3AC64DF96187}\TYPELIB\
  • HKEY_LOCAL_MACHINE\SOFTWARE\CLASSES\INTERFACE\{8A2DAA70-D6C9-4BAA-B9CA-DE8A9F49CA12}\
  • HKEY_LOCAL_MACHINE\SOFTWARE\CLASSES\INTERFACE\{8A2DAA70-D6C9-4BAA-B9CA-DE8A9F49CA12}\PROXYSTUBCLSID\
  • HKEY_LOCAL_MACHINE\SOFTWARE\CLASSES\INTERFACE\{8A2DAA70-D6C9-4BAA-B9CA-DE8A9F49CA12}\PROXYSTUBCLSID32\
  • HKEY_LOCAL_MACHINE\SOFTWARE\CLASSES\INTERFACE\{8A2DAA70-D6C9-4BAA-B9CA-DE8A9F49CA12}\TYPELIB\
  • HKEY_LOCAL_MACHINE\SOFTWARE\CLASSES\TYPELIB\{AC329328-7EC4-4C34-B672-0A2B90CB9B00}\
  • HKEY_LOCAL_MACHINE\SOFTWARE\CLASSES\TYPELIB\{AC329328-7EC4-4C34-B672-0A2B90CB9B00}\1.0\
  • HKEY_LOCAL_MACHINE\SOFTWARE\CLASSES\TYPELIB\{AC329328-7EC4-4C34-B672-0A2B90CB9B00}\1.0\0\
  • HKEY_LOCAL_MACHINE\SOFTWARE\CLASSES\TYPELIB\{AC329328-7EC4-4C34-B672-0A2B90CB9B00}\1.0\0\WIN32\
  • HKEY_LOCAL_MACHINE\SOFTWARE\CLASSES\TYPELIB\{AC329328-7EC4-4C34-B672-0A2B90CB9B00}\1.0\FLAGS\
  • HKEY_LOCAL_MACHINE\SOFTWARE\CLASSES\TYPELIB\{AC329328-7EC4-4C34-B672-0A2B90CB9B00}\1.0\HELPDIR\
  • HKEY_LOCAL_MACHINE\SOFTWARE\HELPER_SETUP\
  • HKEY_LOCAL_MACHINE\SOFTWARE\HELPER_SETUP\5611118981\
  • HKEY_LOCAL_MACHINE\SOFTWARE\HELPER_SETUP\5611118981\NP6YU5+TNZZH0OQIKE1/GD3HJMQT/\
  • HKEY_LOCAL_MACHINE\SOFTWARE\MICROSOFT\WINDOWS\CURRENTVERSION\UNINSTALL\{5F189DF5-2D05-472B-9091-84D9848AE48B}{F122CA63}\
  • HKEY_LOCAL_MACHINE\SOFTWARE\MICROSOFT\WINDOWS\CURRENTVERSION\UNINSTALL\CC89683E-FD16-4A89-A51C-D5551E63B090\
  • HKEY_LOCAL_MACHINE\SOFTWARE\MICROSOFT\WINDOWS\CURRENTVERSION\UNINSTALL\CC89683E-FD16-4A89-A51C-D5551E63B090\STATES\
  • HKEY_LOCAL_MACHINE\SOFTWARE\MICROSOFT\WINDOWS\CURRENTVERSION\UNINSTALL\S-5458797678\
  • HKEY_LOCAL_MACHINE\SOFTWARE\SW.BOOSTER\
  • HKEY_LOCAL_MACHINE\SOFTWARE\SW.BOOSTER\5458797678\
  • HKEY_LOCAL_MACHINE\SOFTWARE\SW.BOOSTER\5458797678\NP6YU5+TNZZH0OQIKE1/GD3HJMQT/\
  • HKEY_USERS\.DEFAULT\SOFTWARE\APPDATALOW\
  • HKEY_USERS\.DEFAULT\SOFTWARE\APPDATALOW\{5F189DF5-2D05-472B-9091-84D9848AE48B}\
  • HKEY_USERS\.DEFAULT\SOFTWARE\APPDATALOW\{5F189DF5-2D05-472B-9091-84D9848AE48B}\_F122CA63\
  • HKEY_USERS\.DEFAULT\SOFTWARE\APPDATALOW\{5F189DF5-2D05-472B-9091-84D9848AE48B}\_F122CA63\00000000\
  • HKEY_USERS\.DEFAULT\SOFTWARE\APPDATALOW\{5F189DF5-2D05-472B-9091-84D9848AE48B}\_F122CA63\EAE10F9D\

The following registry elements have been changed:

  • HKEY_CURRENT_USER\SOFTWARE\APPDATALOW\{5F189DF5-2D05-472B-9091-84D9848AE48B}\_F122CA63\DATA.0 = HxWojBVwadSoPIKEG+3w/oBl3nrOVPQDf2cNeappju9OVHbXl0yCpQnVYZsBu
  • HKEY_CURRENT_USER\SOFTWARE\APPDATALOW\{5F189DF5-2D05-472B-9091-84D9848AE48B}\_F122CA63\DATA.1 = DifxtFaeMpk0ikg0129/4ghGM8hrXeJ7PfMaRMbihEWtfsNr9mrIJMzLIk0qsKPKtMwYKShX9IfWnE7CuEBgQL8EheC2KfukNa
  • HKEY_CURRENT_USER\SOFTWARE\APPDATALOW\{5F189DF5-2D05-472B-9091-84D9848AE48B}\_F122CA63\DATE = 1352967676
  • HKEY_CURRENT_USER\SOFTWARE\APPDATALOW\{5F189DF5-2D05-472B-9091-84D9848AE48B}\_F122CA63\IIID = 1
  • HKEY_CURRENT_USER\SOFTWARE\APPDATALOW\{5F189DF5-2D05-472B-9091-84D9848AE48B}\_F122CA63\LRTS = 0
  • HKEY_CURRENT_USER\SOFTWARE\APPDATALOW\{5F189DF5-2D05-472B-9091-84D9848AE48B}\_F122CA63\MODE = 4026531840
  • HKEY_CURRENT_USER\SOFTWARE\APPDATALOW\{5F189DF5-2D05-472B-9091-84D9848AE48B}\_F122CA63\USR.0 = cwVg1xYSUMOQIKEG+x
  • HKEY_CURRENT_USER\SOFTWARE\APPDATALOW\{5F189DF5-2D05-472B-9091-84D9848AE48B}\_F122CA63\USR.1 = fpnTNMWYSUMOQIKEG+
  • HKEY_CURRENT_USER\SOFTWARE\APPDATALOW\{5F189DF5-2D05-472B-9091-84D9848AE48B}\_F122CA63\UUID = 2efb90de-57db2ab9-74630177
  • HKEY_CURRENT_USER\SOFTWARE\APPDATALOW\{5F189DF5-2D05-472B-9091-84D9848AE48B}\_F122CA63\00000000\370856C7 = p01e07x0qx1A06h0n01+06l0nU1Z06t0mU1g0640nl0S06h0nl1A06E0 p01e07x0qx1D06I0mU1O0640n01Y06t0ml1N06b0qx1S02I0ox1S06q0nU0% p01e07x0qx1N06t0nl1h06O0jx1P06Y0mU1g0640nl0S06h0nl1A06E0 p01T07m0nl1Y06E0qx1h06x0qx1O0640mU1g0640nl0S06h0nl1A06E0
  • HKEY_CURRENT_USER\SOFTWARE\APPDATALOW\{5F189DF5-2D05-472B-9091-84D9848AE48B}\_F122CA63\00000000\3EFEB33E = p01e07x0qx1A06h0n01+06l0nU1Z06t0mU1g0640nl0S06h0nl1A06E0 p01e07x0qx1D06I0mU1O0640n01Y06t0ml1N06b0qx1S02I0ox1S06q0nU0% p01e07x0qx1N06t0nl1h06O0jx1P06Y0mU1g0640nl0S06h0nl1A06E0 p01T07m0nl1Y06E0qx1h06x0qx1O0640mU1g0640nl0S06h0nl1A06E0
  • HKEY_CURRENT_USER\SOFTWARE\APPDATALOW\{5F189DF5-2D05-472B-9091-84D9848AE48B}\_F122CA63\00000000\493C7345 = 0
  • HKEY_CURRENT_USER\SOFTWARE\APPDATALOW\{5F189DF5-2D05-472B-9091-84D9848AE48B}\_F122CA63\EAE10F9D\060DF2CD = G/Ay/YP/FPAt/X6/clAj/Xl/alAy/XP/blAs/XD/ax/j/Xt/axAv/X6////%
  • HKEY_CURRENT_USER\SOFTWARE\APPDATALOW\{5F189DF5-2D05-472B-9091-84D9848AE48B}\_F122CA63\EAE10F9D\0C230BCB = ///%
  • HKEY_CURRENT_USER\SOFTWARE\APPDATALOW\{5F189DF5-2D05-472B-9091-84D9848AE48B}\_F122CA63\EAE10F9D\0DC3EE96 = /P////%%
  • HKEY_CURRENT_USER\SOFTWARE\APPDATALOW\{5F189DF5-2D05-472B-9091-84D9848AE48B}\_F122CA63\EAE10F9D\0E93C3F3 = ///%
  • HKEY_CURRENT_USER\SOFTWARE\APPDATALOW\{5F189DF5-2D05-472B-9091-84D9848AE48B}\_F122CA63\EAE10F9D\1520C6F1 = V/////%%
  • HKEY_CURRENT_USER\SOFTWARE\APPDATALOW\{5F189DF5-2D05-472B-9091-84D9848AE48B}\_F122CA63\EAE10F9D\1C311243 = GxAy/YV/c/At/XD/c/Ay/XF/cPAj/YV/FlAy/X2/UxAp/X2/GxAk////
  • HKEY_CURRENT_USER\SOFTWARE\APPDATALOW\{5F189DF5-2D05-472B-9091-84D9848AE48B}\_F122CA63\EAE10F9D\27DDCF6F = ///%
  • HKEY_CURRENT_USER\SOFTWARE\APPDATALOW\{5F189DF5-2D05-472B-9091-84D9848AE48B}\_F122CA63\EAE10F9D\2D71D5AB = V/////%%
  • HKEY_CURRENT_USER\SOFTWARE\APPDATALOW\{5F189DF5-2D05-472B-9091-84D9848AE48B}\_F122CA63\EAE10F9D\340D3099 = /P////%%
  • HKEY_CURRENT_USER\SOFTWARE\APPDATALOW\{5F189DF5-2D05-472B-9091-84D9848AE48B}\_F122CA63\EAE10F9D\37B7A6D8 = UlAr/XJ/c//k////
  • HKEY_CURRENT_USER\SOFTWARE\APPDATALOW\{5F189DF5-2D05-472B-9091-84D9848AE48B}\_F122CA63\EAE10F9D\38583BC3 = N//e/Ct/Vx/l/C/////%
  • HKEY_CURRENT_USER\SOFTWARE\APPDATALOW\{5F189DF5-2D05-472B-9091-84D9848AE48B}\_F122CA63\EAE10F9D\3C09C42B = ///%
  • HKEY_CURRENT_USER\SOFTWARE\APPDATALOW\{5F189DF5-2D05-472B-9091-84D9848AE48B}\_F122CA63\EAE10F9D\414BC593 = ///%
  • HKEY_CURRENT_USER\SOFTWARE\APPDATALOW\{5F189DF5-2D05-472B-9091-84D9848AE48B}\_F122CA63\EAE10F9D\51D2F2EA = QlAI/Bh/JlA+/Y//b/Ak/YZ/c/Au/YZ/Z//e/B2/N//l////
  • HKEY_CURRENT_USER\SOFTWARE\APPDATALOW\{5F189DF5-2D05-472B-9091-84D9848AE48B}\_F122CA63\EAE10F9D\587B5709 = V/////%%
  • HKEY_CURRENT_USER\SOFTWARE\APPDATALOW\{5F189DF5-2D05-472B-9091-84D9848AE48B}\_F122CA63\EAE10F9D\6185D035 = VP/h/CP/V//l////
  • HKEY_CURRENT_USER\SOFTWARE\APPDATALOW\{5F189DF5-2D05-472B-9091-84D9848AE48B}\_F122CA63\EAE10F9D\65114B36 = Vl/l////
  • HKEY_CURRENT_USER\SOFTWARE\APPDATALOW\{5F189DF5-2D05-472B-9091-84D9848AE48B}\_F122CA63\EAE10F9D\72758A5D = ///%
  • HKEY_CURRENT_USER\SOFTWARE\APPDATALOW\{5F189DF5-2D05-472B-9091-84D9848AE48B}\_F122CA63\EAE10F9D\7367429F = ///%
  • HKEY_CURRENT_USER\SOFTWARE\APPDATALOW\{5F189DF5-2D05-472B-9091-84D9848AE48B}\_F122CA63\EAE10F9D\7F69FA1F = ///%
  • HKEY_CURRENT_USER\SOFTWARE\APPDATALOW\{5F189DF5-2D05-472B-9091-84D9848AE48B}\_F122CA63\EAE10F9D\8B9E4CBC = V/////%%
  • HKEY_CURRENT_USER\SOFTWARE\APPDATALOW\{5F189DF5-2D05-472B-9091-84D9848AE48B}\_F122CA63\EAE10F9D\A0743ACC = N/////%%
  • HKEY_CURRENT_USER\SOFTWARE\APPDATALOW\{5F189DF5-2D05-472B-9091-84D9848AE48B}\_F122CA63\EAE10F9D\A1DCFF5B = V/////%%
  • HKEY_CURRENT_USER\SOFTWARE\APPDATALOW\{5F189DF5-2D05-472B-9091-84D9848AE48B}\_F122CA63\EAE10F9D\A2E3B941 = ///%
  • HKEY_CURRENT_USER\SOFTWARE\APPDATALOW\{5F189DF5-2D05-472B-9091-84D9848AE48B}\_F122CA63\EAE10F9D\BBF88800 = ///%
  • HKEY_CURRENT_USER\SOFTWARE\APPDATALOW\{5F189DF5-2D05-472B-9091-84D9848AE48B}\_F122CA63\EAE10F9D\C24899A6 = MP/f/CF/Mx/l/C/////%
  • HKEY_CURRENT_USER\SOFTWARE\APPDATALOW\{5F189DF5-2D05-472B-9091-84D9848AE48B}\_F122CA63\EAE10F9D\C5705860 = Vx////%%
  • HKEY_CURRENT_USER\SOFTWARE\APPDATALOW\{5F189DF5-2D05-472B-9091-84D9848AE48B}\_F122CA63\EAE10F9D\C6C5DD44 = V/////%%
  • HKEY_CURRENT_USER\SOFTWARE\APPDATALOW\{5F189DF5-2D05-472B-9091-84D9848AE48B}\_F122CA63\EAE10F9D\C99A5F5C = ///%
  • HKEY_CURRENT_USER\SOFTWARE\APPDATALOW\{5F189DF5-2D05-472B-9091-84D9848AE48B}\_F122CA63\EAE10F9D\D1ABCDB6 = ///%
  • HKEY_CURRENT_USER\SOFTWARE\APPDATALOW\{5F189DF5-2D05-472B-9091-84D9848AE48B}\_F122CA63\EAE10F9D\D94388D2 = GxAy/YV/c/At/XD/c/Ay/XF/cPAj/YV/FlAy/X2/UxAp/X2/GxAk////
  • HKEY_CURRENT_USER\SOFTWARE\APPDATALOW\{5F189DF5-2D05-472B-9091-84D9848AE48B}\_F122CA63\EAE10F9D\DBAF3CE3 = /P////%%
  • HKEY_CURRENT_USER\SOFTWARE\APPDATALOW\{5F189DF5-2D05-472B-9091-84D9848AE48B}\_F122CA63\EAE10F9D\E46C271E = ///%
  • HKEY_CURRENT_USER\SOFTWARE\APPDATALOW\{5F189DF5-2D05-472B-9091-84D9848AE48B}\_F122CA63\EAE10F9D\E8F9DCC7 = UlAr/XJ/c//k////
  • HKEY_CURRENT_USER\SOFTWARE\APPDATALOW\{5F189DF5-2D05-472B-9091-84D9848AE48B}\_F122CA63\EAE10F9D\F0BF0BDE = ///%
  • HKEY_CURRENT_USER\SOFTWARE\APPDATALOW\{5F189DF5-2D05-472B-9091-84D9848AE48B}\_F122CA63\EAE10F9D\F1F24E29 = Vl/l/C/////%
  • HKEY_CURRENT_USER\SOFTWARE\APPDATALOW\{5F189DF5-2D05-472B-9091-84D9848AE48B}\_F122CA63\EAE10F9D\F2C53C49 = UlAr/XJ/c//k////
  • HKEY_CURRENT_USER\SOFTWARE\APPDATALOW\{5F189DF5-2D05-472B-9091-84D9848AE48B}\_F122CA63\EAE10F9D\FE94CE1E = V/////%%
  • HKEY_LOCAL_MACHINE\SOFTWARE\{3A7D3E19-1B79-4E4E-BD96-5467DA2C4EF0}\N = 1
  • HKEY_LOCAL_MACHINE\SOFTWARE\{5F189DF5-2D05-472B-9091-84D9848AE48B}\_F122CA63\DATA.0 = HxWojBVwadSoPIKEG+3w/oBl3nrOVPQDf2cNeappju9OVHbXl0yCpQnVYZsBu
  • HKEY_LOCAL_MACHINE\SOFTWARE\{5F189DF5-2D05-472B-9091-84D9848AE48B}\_F122CA63\DATA.1 = DifxtFaeMpk0ikg0129/4ghGM8hrXeJ7PfMaRMbihEWtfsNr9mrIJMzLIk0qsKPKtMwYKShX9IfWnE7CuEBgQL8EheC2KfukNa
  • HKEY_LOCAL_MACHINE\SOFTWARE\{5F189DF5-2D05-472B-9091-84D9848AE48B}\_F122CA63\DATE = 1352967676
  • HKEY_LOCAL_MACHINE\SOFTWARE\{5F189DF5-2D05-472B-9091-84D9848AE48B}\_F122CA63\DLPATH = c:\progra~1\ss-sup~1\assist~1.dll
  • HKEY_LOCAL_MACHINE\SOFTWARE\{5F189DF5-2D05-472B-9091-84D9848AE48B}\_F122CA63\IIID = 1
  • HKEY_LOCAL_MACHINE\SOFTWARE\{5F189DF5-2D05-472B-9091-84D9848AE48B}\_F122CA63\INSTALL_DIR = %PROGRAMFILES%\\Ss-Supporter
  • HKEY_LOCAL_MACHINE\SOFTWARE\{5F189DF5-2D05-472B-9091-84D9848AE48B}\_F122CA63\LRTS = 0
  • HKEY_LOCAL_MACHINE\SOFTWARE\{5F189DF5-2D05-472B-9091-84D9848AE48B}\_F122CA63\MODE = 4026531840
  • HKEY_LOCAL_MACHINE\SOFTWARE\{5F189DF5-2D05-472B-9091-84D9848AE48B}\_F122CA63\STATE = 0
  • HKEY_LOCAL_MACHINE\SOFTWARE\{5F189DF5-2D05-472B-9091-84D9848AE48B}\_F122CA63\SVI = 0
  • HKEY_LOCAL_MACHINE\SOFTWARE\{5F189DF5-2D05-472B-9091-84D9848AE48B}\_F122CA63\SVN = GS-Supporter
  • HKEY_LOCAL_MACHINE\SOFTWARE\{5F189DF5-2D05-472B-9091-84D9848AE48B}\_F122CA63\SVPATH = c:\progra~1\ss-sup~1\AssistantSvc.dll
  • HKEY_LOCAL_MACHINE\SOFTWARE\{5F189DF5-2D05-472B-9091-84D9848AE48B}\_F122CA63\SVT = 1352967676
  • HKEY_LOCAL_MACHINE\SOFTWARE\{5F189DF5-2D05-472B-9091-84D9848AE48B}\_F122CA63\SVX
  • HKEY_LOCAL_MACHINE\SOFTWARE\{5F189DF5-2D05-472B-9091-84D9848AE48B}\_F122CA63\USR.0 = cwVg1xYSUMOQIKEG+x
  • HKEY_LOCAL_MACHINE\SOFTWARE\{5F189DF5-2D05-472B-9091-84D9848AE48B}\_F122CA63\USR.1 = fpnTNMWYSUMOQIKEG+
  • HKEY_LOCAL_MACHINE\SOFTWARE\{5F189DF5-2D05-472B-9091-84D9848AE48B}\_F122CA63\UUID = 2efb90de-57db2ab9-74630177
  • HKEY_LOCAL_MACHINE\SOFTWARE\{5F189DF5-2D05-472B-9091-84D9848AE48B}\_F122CA63\VERSION = 22021985
  • HKEY_LOCAL_MACHINE\SOFTWARE\{5F189DF5-2D05-472B-9091-84D9848AE48B}\_F122CA63\00000000\370856C7 = p01e07x0qx1A06h0n01+06l0nU1Z06t0mU1g0640nl0S06h0nl1A06E0 p01e07x0qx1D06I0mU1O0640n01Y06t0ml1N06b0qx1S02I0ox1S06q0nU0% p01e07x0qx1N06t0nl1h06O0jx1P06Y0mU1g0640nl0S06h0nl1A06E0 p01T07m0nl1Y06E0qx1h06x0qx1O0640mU1g0640nl0S06h0nl1A06E0
  • HKEY_LOCAL_MACHINE\SOFTWARE\{5F189DF5-2D05-472B-9091-84D9848AE48B}\_F122CA63\00000000\3EFEB33E = p01e07x0qx1A06h0n01+06l0nU1Z06t0mU1g0640nl0S06h0nl1A06E0 p01e07x0qx1D06I0mU1O0640n01Y06t0ml1N06b0qx1S02I0ox1S06q0nU0% p01e07x0qx1N06t0nl1h06O0jx1P06Y0mU1g0640nl0S06h0nl1A06E0 p01T07m0nl1Y06E0qx1h06x0qx1O0640mU1g0640nl0S06h0nl1A06E0
  • HKEY_LOCAL_MACHINE\SOFTWARE\{5F189DF5-2D05-472B-9091-84D9848AE48B}\_F122CA63\00000000\493C7345 = 0
  • HKEY_LOCAL_MACHINE\SOFTWARE\{5F189DF5-2D05-472B-9091-84D9848AE48B}\_F122CA63\EAE10F9D\060DF2CD = G/Ay/YP/FPAt/X6/clAj/Xl/alAy/XP/blAs/XD/ax/j/Xt/axAv/X6////%
  • HKEY_LOCAL_MACHINE\SOFTWARE\{5F189DF5-2D05-472B-9091-84D9848AE48B}\_F122CA63\EAE10F9D\0C230BCB = ///%
  • HKEY_LOCAL_MACHINE\SOFTWARE\{5F189DF5-2D05-472B-9091-84D9848AE48B}\_F122CA63\EAE10F9D\0DC3EE96 = /P////%%
  • HKEY_LOCAL_MACHINE\SOFTWARE\{5F189DF5-2D05-472B-9091-84D9848AE48B}\_F122CA63\EAE10F9D\0E93C3F3 = ///%
  • HKEY_LOCAL_MACHINE\SOFTWARE\{5F189DF5-2D05-472B-9091-84D9848AE48B}\_F122CA63\EAE10F9D\1520C6F1 = V/////%%
  • HKEY_LOCAL_MACHINE\SOFTWARE\{5F189DF5-2D05-472B-9091-84D9848AE48B}\_F122CA63\EAE10F9D\1C311243 = GxAy/YV/c/At/XD/c/Ay/XF/cPAj/YV/FlAy/X2/UxAp/X2/GxAk////
  • HKEY_LOCAL_MACHINE\SOFTWARE\{5F189DF5-2D05-472B-9091-84D9848AE48B}\_F122CA63\EAE10F9D\27DDCF6F = ///%
  • HKEY_LOCAL_MACHINE\SOFTWARE\{5F189DF5-2D05-472B-9091-84D9848AE48B}\_F122CA63\EAE10F9D\2D71D5AB = V/////%%
  • HKEY_LOCAL_MACHINE\SOFTWARE\{5F189DF5-2D05-472B-9091-84D9848AE48B}\_F122CA63\EAE10F9D\340D3099 = /P////%%
  • HKEY_LOCAL_MACHINE\SOFTWARE\{5F189DF5-2D05-472B-9091-84D9848AE48B}\_F122CA63\EAE10F9D\37B7A6D8 = UlAr/XJ/c//k////
  • HKEY_LOCAL_MACHINE\SOFTWARE\{5F189DF5-2D05-472B-9091-84D9848AE48B}\_F122CA63\EAE10F9D\38583BC3 = N//e/Ct/Vx/l/C/////%
  • HKEY_LOCAL_MACHINE\SOFTWARE\{5F189DF5-2D05-472B-9091-84D9848AE48B}\_F122CA63\EAE10F9D\3C09C42B = ///%
  • HKEY_LOCAL_MACHINE\SOFTWARE\{5F189DF5-2D05-472B-9091-84D9848AE48B}\_F122CA63\EAE10F9D\414BC593 = ///%
  • HKEY_LOCAL_MACHINE\SOFTWARE\{5F189DF5-2D05-472B-9091-84D9848AE48B}\_F122CA63\EAE10F9D\51D2F2EA = QlAI/Bh/JlA+/Y//b/Ak/YZ/c/Au/YZ/Z//e/B2/N//l////
  • HKEY_LOCAL_MACHINE\SOFTWARE\{5F189DF5-2D05-472B-9091-84D9848AE48B}\_F122CA63\EAE10F9D\587B5709 = V/////%%
  • HKEY_LOCAL_MACHINE\SOFTWARE\{5F189DF5-2D05-472B-9091-84D9848AE48B}\_F122CA63\EAE10F9D\6185D035 = VP/h/CP/V//l////
  • HKEY_LOCAL_MACHINE\SOFTWARE\{5F189DF5-2D05-472B-9091-84D9848AE48B}\_F122CA63\EAE10F9D\65114B36 = Vl/l////
  • HKEY_LOCAL_MACHINE\SOFTWARE\{5F189DF5-2D05-472B-9091-84D9848AE48B}\_F122CA63\EAE10F9D\72758A5D = ///%
  • HKEY_LOCAL_MACHINE\SOFTWARE\{5F189DF5-2D05-472B-9091-84D9848AE48B}\_F122CA63\EAE10F9D\7367429F = ///%
  • HKEY_LOCAL_MACHINE\SOFTWARE\{5F189DF5-2D05-472B-9091-84D9848AE48B}\_F122CA63\EAE10F9D\7F69FA1F = ///%
  • HKEY_LOCAL_MACHINE\SOFTWARE\{5F189DF5-2D05-472B-9091-84D9848AE48B}\_F122CA63\EAE10F9D\8B9E4CBC = V/////%%
  • HKEY_LOCAL_MACHINE\SOFTWARE\{5F189DF5-2D05-472B-9091-84D9848AE48B}\_F122CA63\EAE10F9D\A0743ACC = N/////%%
  • HKEY_LOCAL_MACHINE\SOFTWARE\{5F189DF5-2D05-472B-9091-84D9848AE48B}\_F122CA63\EAE10F9D\A1DCFF5B = V/////%%
  • HKEY_LOCAL_MACHINE\SOFTWARE\{5F189DF5-2D05-472B-9091-84D9848AE48B}\_F122CA63\EAE10F9D\A2E3B941 = ///%
  • HKEY_LOCAL_MACHINE\SOFTWARE\{5F189DF5-2D05-472B-9091-84D9848AE48B}\_F122CA63\EAE10F9D\BBF88800 = ///%
  • HKEY_LOCAL_MACHINE\SOFTWARE\{5F189DF5-2D05-472B-9091-84D9848AE48B}\_F122CA63\EAE10F9D\C24899A6 = MP/f/CF/Mx/l/C/////%
  • HKEY_LOCAL_MACHINE\SOFTWARE\{5F189DF5-2D05-472B-9091-84D9848AE48B}\_F122CA63\EAE10F9D\C5705860 = Vx////%%
  • HKEY_LOCAL_MACHINE\SOFTWARE\{5F189DF5-2D05-472B-9091-84D9848AE48B}\_F122CA63\EAE10F9D\C6C5DD44 = V/////%%
  • HKEY_LOCAL_MACHINE\SOFTWARE\{5F189DF5-2D05-472B-9091-84D9848AE48B}\_F122CA63\EAE10F9D\C99A5F5C = ///%
  • HKEY_LOCAL_MACHINE\SOFTWARE\{5F189DF5-2D05-472B-9091-84D9848AE48B}\_F122CA63\EAE10F9D\D1ABCDB6 = ///%
  • HKEY_LOCAL_MACHINE\SOFTWARE\{5F189DF5-2D05-472B-9091-84D9848AE48B}\_F122CA63\EAE10F9D\D94388D2 = GxAy/YV/c/At/XD/c/Ay/XF/cPAj/YV/FlAy/X2/UxAp/X2/GxAk////
  • HKEY_LOCAL_MACHINE\SOFTWARE\{5F189DF5-2D05-472B-9091-84D9848AE48B}\_F122CA63\EAE10F9D\E46C271E = ///%
  • HKEY_LOCAL_MACHINE\SOFTWARE\{5F189DF5-2D05-472B-9091-84D9848AE48B}\_F122CA63\EAE10F9D\E8F9DCC7 = UlAr/XJ/c//k////
  • HKEY_LOCAL_MACHINE\SOFTWARE\{5F189DF5-2D05-472B-9091-84D9848AE48B}\_F122CA63\EAE10F9D\F0BF0BDE = ///%
  • HKEY_LOCAL_MACHINE\SOFTWARE\{5F189DF5-2D05-472B-9091-84D9848AE48B}\_F122CA63\EAE10F9D\F1F24E29 = Vl/l/C/////%
  • HKEY_LOCAL_MACHINE\SOFTWARE\{5F189DF5-2D05-472B-9091-84D9848AE48B}\_F122CA63\EAE10F9D\F2C53C49 = UlAr/XJ/c//k////
  • HKEY_LOCAL_MACHINE\SOFTWARE\{5F189DF5-2D05-472B-9091-84D9848AE48B}\_F122CA63\EAE10F9D\FE94CE1E = V/////%%
  • HKEY_LOCAL_MACHINE\SOFTWARE\{77D46E27-0E41-4478-87A6-AABE6FBCF252}\F122CA63 = %PROGRAMFILES%\Ss-Supporter\Assistant.dll
  • HKEY_LOCAL_MACHINE\SOFTWARE\{77D46E27-0E41-4478-87A6-AABE6FBCF252}\N = 1
  • HKEY_LOCAL_MACHINE\SOFTWARE\CLASSES\INTERFACE\{19DF2320-6A8A-4942-AC4C-C449949DFC27}\TYPELIB\VERSION = 1.0
  • HKEY_LOCAL_MACHINE\SOFTWARE\CLASSES\INTERFACE\{3B3F3AAD-FB97-49FF-BFEE-D22869AC4325}\TYPELIB\VERSION = 1.0
  • HKEY_LOCAL_MACHINE\SOFTWARE\CLASSES\INTERFACE\{5B113BE7-98FF-4DA7-8441-D3AAE3836AE4}\TYPELIB\VERSION = 1.0
  • HKEY_LOCAL_MACHINE\SOFTWARE\CLASSES\INTERFACE\{662CA6E1-37D8-4C12-8586-3AC64DF96187}\TYPELIB\VERSION = 1.0
  • HKEY_LOCAL_MACHINE\SOFTWARE\CLASSES\INTERFACE\{8A2DAA70-D6C9-4BAA-B9CA-DE8A9F49CA12}\TYPELIB\VERSION = 1.0
  • HKEY_LOCAL_MACHINE\SOFTWARE\HELPER_SETUP\5611118981\NP6YU5+TNZZH0OQIKE1/GD3HJMQT/\NP6YU5+II0LV89/XZTPMAWCAW6XIF/XIOWOPLYXREC = NP6yu5+z7vLgNfABCDER9
  • HKEY_LOCAL_MACHINE\SOFTWARE\HELPER_SETUP\5611118981\NP6YU5+TNZZH0OQIKE1/GD3HJMQT/\NP6YU5+IMD09G789/XRRUO/JOXMOD5P8S7Z6 = NP6yu5+owmZMztvqom44
  • HKEY_LOCAL_MACHINE\SOFTWARE\HELPER_SETUP\5611118981\NP6YU5+TNZZH0OQIKE1/GD3HJMQT/\NP6YU5+IQFGHLQOMJLSRVHFNHJ3OZIGYJWY44WGZ8T = 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
  • HKEY_LOCAL_MACHINE\SOFTWARE\HELPER_SETUP\5611118981\NP6YU5+TNZZH0OQIKE1/GD3HJMQT/\NP6YU5+JJE/MNBCDWYVA42SCZUV9SCLFRQVZXT8SBARO = NP6yu5+kehdfwjlhabCRzRJxvVHpLyK4
  • HKEY_LOCAL_MACHINE\SOFTWARE\HELPER_SETUP\5611118981\NP6YU5+TNZZH0OQIKE1/GD3HJMQT/\NP6YU5+JNTHSFABCDWTWKUM/W1APBTS1+VQW3XAFAC = NP6yu5+yZZqyR/XZTVj+W5qQHhXWff
  • HKEY_LOCAL_MACHINE\SOFTWARE\HELPER_SETUP\5611118981\NP6YU5+TNZZH0OQIKE1/GD3HJMQT/\NP6YU5+JO7CKSRJLFHDITGO4 = NP6yu5+ookVA701234YHM8
  • HKEY_LOCAL_MACHINE\SOFTWARE\HELPER_SETUP\5611118981\NP6YU5+TNZZH0OQIKE1/GD3HJMQT/\NP6YU5+JXU9X/ZTVQOWWAVZZG1EDHHJPA = NP6yu5+oS+lN1rpnik98wFUb6gH6ukMa
  • HKEY_LOCAL_MACHINE\SOFTWARE\HELPER_SETUP\5611118981\NP6YU5+TNZZH0OQIKE1/GD3HJMQT/\NP6YU5+JYYWQBURPNIZRRB5FIXXL0NH4RV = NP6yu5+kehdfwjlhabCRzRJxvVHpLyK4
  • HKEY_LOCAL_MACHINE\SOFTWARE\HELPER_SETUP\5611118981\NP6YU5+TNZZH0OQIKE1/GD3HJMQT/\NP6YU5+KMSXEBMOQIKHE69M1QE674UDEX = NP6yu5+z7vLgNfABCDER9
  • HKEY_LOCAL_MACHINE\SOFTWARE\HELPER_SETUP\5611118981\NP6YU5+TNZZH0OQIKE1/GD3HJMQT/\NP6YU5+KQ14RLHABCDIJFSYG16YZYLSH = NP6yu5+ns1Eg0urpni4gAEYTki3DC4KvvLHzuLqQW8Ye6
  • HKEY_LOCAL_MACHINE\SOFTWARE\HELPER_SETUP\5611118981\NP6YU5+TNZZH0OQIKE1/GD3HJMQT/\NP6YU5+KZHWZUJLFHW5FR3FSOZPPISE/F = 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
  • HKEY_LOCAL_MACHINE\SOFTWARE\HELPER_SETUP\5611118981\NP6YU5+TNZZH0OQIKE1/GD3HJMQT/\NP6YU5+M493B1JLFHWFSLP0CQ = NP6yu5+kzkcLP12345ZfrEA8xwYzo
  • HKEY_LOCAL_MACHINE\SOFTWARE\HELPER_SETUP\5611118981\NP6YU5+TNZZH0OQIKE1/GD3HJMQT/\NP6YU5+MA7A/0RJLFH3OCQCND9QOS7C7LJLXGMTX4Y5FN0ND = NP6yu5+xztvqomjlha
  • HKEY_LOCAL_MACHINE\SOFTWARE\HELPER_SETUP\5611118981\NP6YU5+TNZZH0OQIKE1/GD3HJMQT/\NP6YU5+ME6UTVNPRJL13JFL4PKQ3+KZKKBGDUDHPPPQUV = NP6yu5+owmZMztvqom44
  • HKEY_LOCAL_MACHINE\SOFTWARE\HELPER_SETUP\5611118981\NP6YU5+TNZZH0OQIKE1/GD3HJMQT/\NP6YU5+MGMVNPNIKG0UES4WE2P15TB9Y = NP6yu5+zbMgbIcdefAUN
  • HKEY_LOCAL_MACHINE\SOFTWARE\HELPER_SETUP\5611118981\NP6YU5+TNZZH0OQIKE1/GD3HJMQT/\NP6YU5+MGOOXRIKG01VRAVP7V/5B68FYY = NP6yu5+yZZqyR/XZTVj+W5qQHhXWff
  • HKEY_LOCAL_MACHINE\SOFTWARE\HELPER_SETUP\5611118981\NP6YU5+TNZZH0OQIKE1/GD3HJMQT/\NP6YU5+MPPWLQDWYSUOJ8V7LBA0+8W0MSMWN4CLWM7 = NP6yu5+oS+lN1rpnik98wFUb6gH6ukMa
  • HKEY_LOCAL_MACHINE\SOFTWARE\HELPER_SETUP\5611118981\NP6YU5+TNZZH0OQIKE1/GD3HJMQT/\NP6YU5+O/JAUURPNIKZZC72IOD641QVSKWTQJSU5ZR = NP6yu5+qLuUwVjlhabO6AQHW7zHo0s5/qmFaUd2glq14uyOitxSUb87SZXnwz
  • HKEY_LOCAL_MACHINE\SOFTWARE\HELPER_SETUP\5611118981\NP6YU5+TNZZH0OQIKE1/GD3HJMQT/\NP6YU5+OBHHU6789/XU3LMQKQBU9V0O8L1+PWHGQ7A = NP6yu5+ire7AFHwysu7daGH/1I+8/fYQTHvbDbfbFpsZR9hg1ZLTwQJfCgwjG
  • HKEY_LOCAL_MACHINE\SOFTWARE\HELPER_SETUP\5611118981\NP6YU5+TNZZH0OQIKE1/GD3HJMQT/\NP6YU5+OFUVMDBCDEFHBBXRMLUGJ9AYGJ = NP6yu5+yZKZjefABCDz76N9UmHe0p0kgH5NGRfwxzCZGcCt9/G/oGfA6jw
  • HKEY_LOCAL_MACHINE\SOFTWARE\HELPER_SETUP\5611118981\NP6YU5+TNZZH0OQIKE1/GD3HJMQT/\NP6YU5+ORN6UTIKEG+DIGPNG1YSOBLAVHVZRTKS5X3JZ0JUS = NP6yu5+o4IdosRJLFHmfwN6K
  • HKEY_LOCAL_MACHINE\SOFTWARE\HELPER_SETUP\5611118981\NP6YU5+TNZZH0OQIKE1/GD3HJMQT/\NP6YU5+OW1RR56789/UE1SBYVUF4KVUIX = NP6yu5+nWUogkwysur1U
  • HKEY_LOCAL_MACHINE\SOFTWARE\HELPER_SETUP\5611118981\NP6YU5+TNZZH0OQIKE1/GD3HJMQT/\NP6YU5+OXTCWROQIKEBFOQMXOVQ3PYCV = NP6yu5+zbMgbIcdefAUN
  • HKEY_LOCAL_MACHINE\SOFTWARE\HELPER_SETUP\5611118981\NP6YU5+TNZZH0OQIKE1/GD3HJMQT/\NP6YU5+PNRKTFBCDEFEJL8Z1TLNENCPBPB = NP6yu5+kzkcLP12345ZfrEA8xwYzo
  • HKEY_LOCAL_MACHINE\SOFTWARE\HELPER_SETUP\5611118981\NP6YU5+TNZZH0OQIKE1/GD3HJMQT/\NP6YU5+Q2CPRX789/XUEIE5ILGMR36HI9ZR5HNZS2A = NP6yu5+nWUogkwysur1U
  • HKEY_LOCAL_MACHINE\SOFTWARE\HELPER_SETUP\5611118981\NP6YU5+TNZZH0OQIKE1/GD3HJMQT/\NP6YU5+Q83XDCABCDEK18VAC0H9NVFERZY89QZIQZ = NP6yu5+xvTqlqdefABK+80Gq2mWBC1o0+
  • HKEY_LOCAL_MACHINE\SOFTWARE\HELPER_SETUP\5611118981\NP6YU5+TNZZH0OQIKE1/GD3HJMQT/\NP6YU5+QAAIJRPNIKGVSUOLAZ3MK8U+RGKBXPY = NP6yu5+ms6Kogvqomje5FgkwM
  • HKEY_LOCAL_MACHINE\SOFTWARE\HELPER_SETUP\5611118981\NP6YU5+TNZZH0OQIKE1/GD3HJMQT/\NP6YU5+QCEJ2JRPNIKTXYRB/HJK8PV2I7 = NP6yu5+ire7AFHwysu7daGH/1I+8/fYQTHvbDbfbFpsZR9hg1ZLTwQJfCgwjG
  • HKEY_LOCAL_MACHINE\SOFTWARE\HELPER_SETUP\5611118981\NP6YU5+TNZZH0OQIKE1/GD3HJMQT/\NP6YU5+QMAGWAVQOMJYKE3RG3RAIWGTRR6LY542B = NP6yu5+khVFJGTVNPRuPIJFr9n3+6RelOb5eGSEBDemA
  • HKEY_LOCAL_MACHINE\SOFTWARE\HELPER_SETUP\5611118981\NP6YU5+TNZZH0OQIKE1/GD3HJMQT/\NP6YU5+QNT+FXZTVQODFBTS/GCPHJVOOIO2SDNPTKI = NP6yu5+yZKZjefABCDz76N9UmHe0p0kgH5NGRfwxzCZGcCt9/G/oGfA6jw
  • HKEY_LOCAL_MACHINE\SOFTWARE\HELPER_SETUP\5611118981\NP6YU5+TNZZH0OQIKE1/GD3HJMQT/\NP6YU5+QWDMHUJLHABRI95GDX9WB+KT8H = NP6yu5+qLuUwVjlhabO6AQHW7zHo0s5/qmFaUd2glq14uyOitxSUb87SZXnwz
  • HKEY_LOCAL_MACHINE\SOFTWARE\HELPER_SETUP\5611118981\NP6YU5+TNZZH0OQIKE1/GD3HJMQT/\NP6YU5+R+8G2H34567HEDRCOML+7+U93C = NP6yu5+qTfOFR/XZTV+PvTYNS9KwBi65M9cgi/v1hpHH
  • HKEY_LOCAL_MACHINE\SOFTWARE\HELPER_SETUP\5611118981\NP6YU5+TNZZH0OQIKE1/GD3HJMQT/\NP6YU5+RHMWDNZTVNPKO4ASBG6QZ = NP6yu5+xztvqomjlha
  • HKEY_LOCAL_MACHINE\SOFTWARE\HELPER_SETUP\5611118981\NP6YU5+TNZZH0OQIKE1/GD3HJMQT/\NP6YU5+RK2YDOCDWYSO+SSZJB0LFNMK7UMZJ4F = NP6yu5+o4IdosRJLFHmfwN6K
  • HKEY_LOCAL_MACHINE\SOFTWARE\HELPER_SETUP\5611118981\NP6YU5+TNZZH0OQIKE1/GD3HJMQT/\NP6YU5+ROHR67HABCDI6OQITBZYLEDLKV = NP6yu5+ookVA701234YHM8
  • HKEY_LOCAL_MACHINE\SOFTWARE\HELPER_SETUP\5611118981\NP6YU5+TNZZH0OQIKE1/GD3HJMQT/\NP6YU5+S/N9Q2LFHWY5GE3VWAFDDYM0XGIXL/SOCFUPBEC2IZ = NP6yu5+xKYF+812345Z1
  • HKEY_LOCAL_MACHINE\SOFTWARE\HELPER_SETUP\5611118981\NP6YU5+TNZZH0OQIKE1/GD3HJMQT/\NP6YU5+S2TBXEEFABCXJ0DAXR+/FSJDEDZSSHR+HV = NP6yu5+ns1Eg0urpni4gAEYTki3DC4KvvLHzuLqQW8Ye6
  • HKEY_LOCAL_MACHINE\SOFTWARE\HELPER_SETUP\5611118981\NP6YU5+TNZZH0OQIKE1/GD3HJMQT/\NP6YU5+SFYNDEBCDEF+TMD = NP6yu5+zbMgbIcdefAUN
  • HKEY_LOCAL_MACHINE\SOFTWARE\HELPER_SETUP\5611118981\NP6YU5+TNZZH0OQIKE1/GD3HJMQT/\NP6YU5+SH9+Y+XZTVQ/XYWHII+JTIOMPD = NP6yu5+myP8RD+xztvB6Vg6g9vU8nT+sKzDn9UlUWnHRH6wgu19+oTuDnxdvzvV++
  • HKEY_LOCAL_MACHINE\SOFTWARE\HELPER_SETUP\5611118981\NP6YU5+TNZZH0OQIKE1/GD3HJMQT/\NP6YU5+SLH3LFHWYSUAITYUVQ23GP9ARM6PZNS = NP6yu5+zcH+7FHwysu037
  • HKEY_LOCAL_MACHINE\SOFTWARE\HELPER_SETUP\5611118981\NP6YU5+TNZZH0OQIKE1/GD3HJMQT/\NP6YU5+T3BD56789/XU4TF4QCFDCBTHM9BO81OA/UPCL = NP6yu5+jnxjzOdefABNqu
  • HKEY_LOCAL_MACHINE\SOFTWARE\HELPER_SETUP\5611118981\NP6YU5+TNZZH0OQIKE1/GD3HJMQT/\NP6YU5+T4SMY89/XZTO241UBCL1FGCDQGO = NP6yu5+jnxjzOdefABNqu
  • HKEY_LOCAL_MACHINE\SOFTWARE\HELPER_SETUP\5611118981\NP6YU5+TNZZH0OQIKE1/GD3HJMQT/\NP6YU5+T5W/EBHABCDLG7/SFSAATXRVG = NP6yu5+xvTqlqdefABK+80Gq2mWBC1o0+
  • HKEY_LOCAL_MACHINE\SOFTWARE\HELPER_SETUP\5611118981\NP6YU5+TNZZH0OQIKE1/GD3HJMQT/\NP6YU5+TJP3SBQOMJLSVJFGKDPGOFAASAQ8LES0XEI = NP6yu5+vDHtq+ikg01CbIM
  • HKEY_LOCAL_MACHINE\SOFTWARE\HELPER_SETUP\5611118981\NP6YU5+TNZZH0OQIKE1/GD3HJMQT/\NP6YU5+U2C5SLHABCDKYXGD2X5DTP+ = NP6yu5+khVFJGTVNPRuPIJFr9n3+6RelOb5eGSEBDemA
  • HKEY_LOCAL_MACHINE\SOFTWARE\HELPER_SETUP\5611118981\NP6YU5+TNZZH0OQIKE1/GD3HJMQT/\NP6YU5+U4W7I3FHWYSFPPWVEC640VGJ7VUI5FRVR = NP6yu5+xKYF+812345Z1
  • HKEY_LOCAL_MACHINE\SOFTWARE\HELPER_SETUP\5611118981\NP6YU5+TNZZH0OQIKE1/GD3HJMQT/\NP6YU5+UGNMTBCDWYSQB6JM/JZXAHMJS4BB/QRIN+8 = NP6yu5+qTfOFR/XZTV+PvTYNS9KwBi65M9cgi/v1hpHH
  • HKEY_LOCAL_MACHINE\SOFTWARE\HELPER_SETUP\5611118981\NP6YU5+TNZZH0OQIKE1/GD3HJMQT/\NP6YU5+UOKDXOMJLHAVN/BTY0USNL9TLBQ2MOH9Y = NP6yu5+nWUogkwysur1U
  • HKEY_LOCAL_MACHINE\SOFTWARE\HELPER_SETUP\5611118981\NP6YU5+TNZZH0OQIKE1/GD3HJMQT/\NP6YU5+UPBRS456789YYTFDDRZVA0PJHL5GUN4CRRU6I0+/B = NP6yu5+ms6Kogvqomje5FgkwM
  • HKEY_LOCAL_MACHINE\SOFTWARE\HELPER_SETUP\5611118981\NP6YU5+TNZZH0OQIKE1/GD3HJMQT/\NP6YU5+VBNHYCDWYSUOIK7BPU/LITLOXXB/Y/8ZSGUEDPVDRC = NP6yu5+ouLGsR/XZTVHZg6
  • HKEY_LOCAL_MACHINE\SOFTWARE\HELPER_SETUP\5611118981\NP6YU5+TNZZH0OQIKE1/GD3HJMQT/\NP6YU5+VGPJJAFABCDTSHMZVQSFT7E4SI = NP6yu5+vDHtq+ikg01CbIM
  • HKEY_LOCAL_MACHINE\SOFTWARE\HELPER_SETUP\5611118981\NP6YU5+TNZZH0OQIKE1/GD3HJMQT/\NP6YU5+X5UJZA6789/S8544JFOJCJZHKISZVI = NP6yu5+xztvqomjlha
  • HKEY_LOCAL_MACHINE\SOFTWARE\HELPER_SETUP\5611118981\NP6YU5+TNZZH0OQIKE1/GD3HJMQT/\NP6YU5+XEGQYZTVNPRHAP40RL5NZK9RVF+FIGEUX = NP6yu5+ouLGsR/XZTVHZg6
  • HKEY_LOCAL_MACHINE\SOFTWARE\HELPER_SETUP\5611118981\NP6YU5+TNZZH0OQIKE1/GD3HJMQT/\NP6YU5+XGCT2OQOMJLV2GRNCOLMWN7NYN = NP6yu5+tQ3dtOHwysu7dAPo9rWzs6Cz73val5GwlYqnEmAXyKRiEzz+0sbZtS5
  • HKEY_LOCAL_MACHINE\SOFTWARE\HELPER_SETUP\5611118981\NP6YU5+TNZZH0OQIKE1/GD3HJMQT/\NP6YU5+XH2UW4HWYSU7SSR8OWZX2XW2HDD4DJXQBX = NP6yu5+zbMgbIcdefAUN
  • HKEY_LOCAL_MACHINE\SOFTWARE\HELPER_SETUP\5611118981\NP6YU5+TNZZH0OQIKE1/GD3HJMQT/\NP6YU5+XYXZUR+XZTV8XRDD4DOLW/+0ELRMM = NP6yu5+v1ZY47G+xzt0F1+NH8M0Es+MF
  • HKEY_LOCAL_MACHINE\SOFTWARE\HELPER_SETUP\5611118981\NP6YU5+TNZZH0OQIKE1/GD3HJMQT/\NP6YU5+Y9R/XAZTVQOWETD7YHX7KCFYZD24SLA = NP6yu5+xztvqomjlha
  • HKEY_LOCAL_MACHINE\SOFTWARE\HELPER_SETUP\5611118981\NP6YU5+TNZZH0OQIKE1/GD3HJMQT/\NP6YU5+YEFHRM+XZTVBTQYBYRHCKZLQDEDD77YDA71 = NP6yu5+myP8RD+xztvB6Vg6g9vU8nT+sKzDn9UlUWnHRH6wgu19+oTuDnxdvzvV++
  • HKEY_LOCAL_MACHINE\SOFTWARE\HELPER_SETUP\5611118981\NP6YU5+TNZZH0OQIKE1/GD3HJMQT/\NP6YU5+ZUPS3JLHABCQDMNISCD6AO3ADXMTQ1WIAX6 = NP6yu5+tQ3dtOHwysu7dAPo9rWzs6Cz73val5GwlYqnEmAXyKRiEzz+0sbZtS5
  • HKEY_LOCAL_MACHINE\SOFTWARE\MICROSOFT\WINDOWS NT\CURRENTVERSION\WINDOWS\APPINIT_DLLS = c:\progra~1\ss-sup~1\assist~1.dll
  • HKEY_LOCAL_MACHINE\SOFTWARE\MICROSOFT\WINDOWS NT\CURRENTVERSION\WINDOWS\LOADAPPINIT_DLLS = 1
  • HKEY_LOCAL_MACHINE\SOFTWARE\MICROSOFT\WINDOWS\CURRENTVERSION\UNINSTALL\{5F189DF5-2D05-472B-9091-84D9848AE48B}{F122CA63}\CATEGORYNAME
  • HKEY_LOCAL_MACHINE\SOFTWARE\MICROSOFT\WINDOWS\CURRENTVERSION\UNINSTALL\{5F189DF5-2D05-472B-9091-84D9848AE48B}{F122CA63}\DISPLAYNAME = GS-Supporter 1.80
  • HKEY_LOCAL_MACHINE\SOFTWARE\MICROSOFT\WINDOWS\CURRENTVERSION\UNINSTALL\{5F189DF5-2D05-472B-9091-84D9848AE48B}{F122CA63}\INSTALLDATE = 20111115
  • HKEY_LOCAL_MACHINE\SOFTWARE\MICROSOFT\WINDOWS\CURRENTVERSION\UNINSTALL\{5F189DF5-2D05-472B-9091-84D9848AE48B}{F122CA63}\NOMODIFY = 1
  • HKEY_LOCAL_MACHINE\SOFTWARE\MICROSOFT\WINDOWS\CURRENTVERSION\UNINSTALL\{5F189DF5-2D05-472B-9091-84D9848AE48B}{F122CA63}\NOREPAIR = 1
  • HKEY_LOCAL_MACHINE\SOFTWARE\MICROSOFT\WINDOWS\CURRENTVERSION\UNINSTALL\{5F189DF5-2D05-472B-9091-84D9848AE48B}{F122CA63}\PUBLISHER = Certified Publisher
  • HKEY_LOCAL_MACHINE\SOFTWARE\MICROSOFT\WINDOWS\CURRENTVERSION\UNINSTALL\{5F189DF5-2D05-472B-9091-84D9848AE48B}{F122CA63}\QUIETUNINSTALLSTRING = "%WINDIR%\SYSTEM32\RUNDLL32.EXE" "C:\PROGRA~1\SS-SUP~1\ASSIST~1.DLL",_uninstall /un /uq
  • HKEY_LOCAL_MACHINE\SOFTWARE\MICROSOFT\WINDOWS\CURRENTVERSION\UNINSTALL\{5F189DF5-2D05-472B-9091-84D9848AE48B}{F122CA63}\UNINSTALLSTRING = "%WINDIR%\SYSTEM32\RUNDLL32.EXE" "C:\PROGRA~1\SS-SUP~1\ASSIST~1.DLL",_uninstall /un
  • HKEY_LOCAL_MACHINE\SOFTWARE\MICROSOFT\WINDOWS\CURRENTVERSION\UNINSTALL\CC89683E-FD16-4A89-A51C-D5551E63B090\ESTIMATEDSIZE = 0
  • HKEY_LOCAL_MACHINE\SOFTWARE\MICROSOFT\WINDOWS\CURRENTVERSION\UNINSTALL\CC89683E-FD16-4A89-A51C-D5551E63B090\LANGUAGE = 1033
  • HKEY_LOCAL_MACHINE\SOFTWARE\MICROSOFT\WINDOWS\CURRENTVERSION\UNINSTALL\CC89683E-FD16-4A89-A51C-D5551E63B090\QUIETUNINSTALLSTRING = C:\DOCUME~1\ALLUSE~1\APPLIC~1\INSTAL~1\{36981~1\Setup.exe /remove /q
  • HKEY_LOCAL_MACHINE\SOFTWARE\MICROSOFT\WINDOWS\CURRENTVERSION\UNINSTALL\CC89683E-FD16-4A89-A51C-D5551E63B090\TIZPATH = %TEMP%\9FB44C4EEA09BC553D2BB53C2DEC86C5BE2C230A
  • HKEY_LOCAL_MACHINE\SOFTWARE\MICROSOFT\WINDOWS\CURRENTVERSION\UNINSTALL\CC89683E-FD16-4A89-A51C-D5551E63B090\TSAWARE = 1
  • HKEY_LOCAL_MACHINE\SOFTWARE\MICROSOFT\WINDOWS\CURRENTVERSION\UNINSTALL\CC89683E-FD16-4A89-A51C-D5551E63B090\UNINSTALLSTRING = C:\DOCUME~1\ALLUSE~1\APPLIC~1\INSTAL~1\{36981~1\Setup.exe /remove /q0
  • HKEY_LOCAL_MACHINE\SOFTWARE\MICROSOFT\WINDOWS\CURRENTVERSION\UNINSTALL\CC89683E-FD16-4A89-A51C-D5551E63B090\VERSION = 16777216
  • HKEY_LOCAL_MACHINE\SOFTWARE\MICROSOFT\WINDOWS\CURRENTVERSION\UNINSTALL\CC89683E-FD16-4A89-A51C-D5551E63B090\VERSIONMAJOR = 1
  • HKEY_LOCAL_MACHINE\SOFTWARE\MICROSOFT\WINDOWS\CURRENTVERSION\UNINSTALL\CC89683E-FD16-4A89-A51C-D5551E63B090\VERSIONMINOR = 0
  • HKEY_LOCAL_MACHINE\SOFTWARE\MICROSOFT\WINDOWS\CURRENTVERSION\UNINSTALL\S-5458797678\_IN = 20121115
  • HKEY_LOCAL_MACHINE\SOFTWARE\MICROSOFT\WINDOWS\CURRENTVERSION\UNINSTALL\S-5458797678\CATEGORYNAME = Apps
  • HKEY_LOCAL_MACHINE\SOFTWARE\MICROSOFT\WINDOWS\CURRENTVERSION\UNINSTALL\S-5458797678\DISPLAYICON = %WINDIR%\SYSTEM32\msiexec.exe
  • HKEY_LOCAL_MACHINE\SOFTWARE\MICROSOFT\WINDOWS\CURRENTVERSION\UNINSTALL\S-5458797678\DISPLAYNAME = SW.Booster
  • HKEY_LOCAL_MACHINE\SOFTWARE\MICROSOFT\WINDOWS\CURRENTVERSION\UNINSTALL\S-5458797678\DISPLAYVERSION = 4.0.0.1034
  • HKEY_LOCAL_MACHINE\SOFTWARE\MICROSOFT\WINDOWS\CURRENTVERSION\UNINSTALL\S-5458797678\INSTALLDATE = 20111115
  • HKEY_LOCAL_MACHINE\SOFTWARE\MICROSOFT\WINDOWS\CURRENTVERSION\UNINSTALL\S-5458797678\NOMODIFY = 1
  • HKEY_LOCAL_MACHINE\SOFTWARE\MICROSOFT\WINDOWS\CURRENTVERSION\UNINSTALL\S-5458797678\NOREPAIR = 1
  • HKEY_LOCAL_MACHINE\SOFTWARE\MICROSOFT\WINDOWS\CURRENTVERSION\UNINSTALL\S-5458797678\PUBLISHER = PremiumSoft
  • HKEY_LOCAL_MACHINE\SOFTWARE\MICROSOFT\WINDOWS\CURRENTVERSION\UNINSTALL\S-5458797678\SILENTUNINSTALL = "%ALLUSERSPROFILE%\application data\puresafe\sw.booster\sw.booster.exe" /uninstall
  • HKEY_LOCAL_MACHINE\SOFTWARE\MICROSOFT\WINDOWS\CURRENTVERSION\UNINSTALL\S-5458797678\UNINSTALLSTRING = "%ALLUSERSPROFILE%\application data\puresafe\sw.booster\sw.booster.exe" /uninstall
  • HKEY_LOCAL_MACHINE\SOFTWARE\MICROSOFT\WINDOWS\CURRENTVERSION\UNINSTALL\S-5458797678\URLINFOABOUT
  • HKEY_LOCAL_MACHINE\SOFTWARE\MICROSOFT\WINDOWS\CURRENTVERSION\UNINSTALL\S-5458797678\URLUPDATEINFO
  • HKEY_LOCAL_MACHINE\SOFTWARE\SW.BOOSTER\5458797678\NP6YU5+TNZZH0OQIKE1/GD3HJMQT/\NP6YU5+II0LV89/XZTPMAWCAW6XIF/XIOWOPLYXREC = NP6yu5+z7vLgNfABCDER9
  • HKEY_LOCAL_MACHINE\SOFTWARE\SW.BOOSTER\5458797678\NP6YU5+TNZZH0OQIKE1/GD3HJMQT/\NP6YU5+IMD09G789/XRRUO/JOXMOD5P8S7Z6 = NP6yu5+owmZMztvqom44
  • HKEY_LOCAL_MACHINE\SOFTWARE\SW.BOOSTER\5458797678\NP6YU5+TNZZH0OQIKE1/GD3HJMQT/\NP6YU5+IQFGHLQOMJLSRVHFNHJ3OZIGYJWY44WGZ8T = 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
  • HKEY_LOCAL_MACHINE\SOFTWARE\SW.BOOSTER\5458797678\NP6YU5+TNZZH0OQIKE1/GD3HJMQT/\NP6YU5+JJE/MNBCDWYVA42SCZUV9SCLFRQVZXT8SBARO = NP6yu5+kehdfwjlhabCRzRJxvVHpLyK4
  • HKEY_LOCAL_MACHINE\SOFTWARE\SW.BOOSTER\5458797678\NP6YU5+TNZZH0OQIKE1/GD3HJMQT/\NP6YU5+JNTHSFABCDWTWKUM/W1APBTS1+VQW3XAFAC = NP6yu5+yZZqyR/XZTVj+W5qQHhXWff
  • HKEY_LOCAL_MACHINE\SOFTWARE\SW.BOOSTER\5458797678\NP6YU5+TNZZH0OQIKE1/GD3HJMQT/\NP6YU5+JO7CKSRJLFHDITGO4 = NP6yu5+ookVA701234YHM8
  • HKEY_LOCAL_MACHINE\SOFTWARE\SW.BOOSTER\5458797678\NP6YU5+TNZZH0OQIKE1/GD3HJMQT/\NP6YU5+JXU9X/ZTVQOWWAVZZG1EDHHJPA = NP6yu5+oS+lN1rpnik98wFUb6gH6ukMa
  • HKEY_LOCAL_MACHINE\SOFTWARE\SW.BOOSTER\5458797678\NP6YU5+TNZZH0OQIKE1/GD3HJMQT/\NP6YU5+JYYWQBURPNIZRRB5FIXXL0NH4RV = NP6yu5+kehdfwjlhabCRzRJxvVHpLyK4
  • HKEY_LOCAL_MACHINE\SOFTWARE\SW.BOOSTER\5458797678\NP6YU5+TNZZH0OQIKE1/GD3HJMQT/\NP6YU5+KMSXEBMOQIKHE69M1QE674UDEX = NP6yu5+z7vLgNfABCDER9
  • HKEY_LOCAL_MACHINE\SOFTWARE\SW.BOOSTER\5458797678\NP6YU5+TNZZH0OQIKE1/GD3HJMQT/\NP6YU5+KQ14RLHABCDIJFSYG16YZYLSH = NP6yu5+ns1Eg0urpni4gAEYTki3DC4KvvLHzuLqQW8Ye6
  • HKEY_LOCAL_MACHINE\SOFTWARE\SW.BOOSTER\5458797678\NP6YU5+TNZZH0OQIKE1/GD3HJMQT/\NP6YU5+KZHWZUJLFHW5FR3FSOZPPISE/F = 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
  • HKEY_LOCAL_MACHINE\SOFTWARE\SW.BOOSTER\5458797678\NP6YU5+TNZZH0OQIKE1/GD3HJMQT/\NP6YU5+M493B1JLFHWFSLP0CQ = NP6yu5+kzkcLP12345ZfrEA8xwYzo
  • HKEY_LOCAL_MACHINE\SOFTWARE\SW.BOOSTER\5458797678\NP6YU5+TNZZH0OQIKE1/GD3HJMQT/\NP6YU5+MA7A/0RJLFH3OCQCND9QOS7C7LJLXGMTX4Y5FN0ND = NP6yu5+xztvqomjlha
  • HKEY_LOCAL_MACHINE\SOFTWARE\SW.BOOSTER\5458797678\NP6YU5+TNZZH0OQIKE1/GD3HJMQT/\NP6YU5+ME6UTVNPRJL13JFL4PKQ3+KZKKBGDUDHPPPQUV = NP6yu5+owmZMztvqom44
  • HKEY_LOCAL_MACHINE\SOFTWARE\SW.BOOSTER\5458797678\NP6YU5+TNZZH0OQIKE1/GD3HJMQT/\NP6YU5+MGMVNPNIKG0UES4WE2P15TB9Y = NP6yu5+zbMgbIcdefAUN
  • HKEY_LOCAL_MACHINE\SOFTWARE\SW.BOOSTER\5458797678\NP6YU5+TNZZH0OQIKE1/GD3HJMQT/\NP6YU5+MGOOXRIKG01VRAVP7V/5B68FYY = NP6yu5+yZZqyR/XZTVj+W5qQHhXWff
  • HKEY_LOCAL_MACHINE\SOFTWARE\SW.BOOSTER\5458797678\NP6YU5+TNZZH0OQIKE1/GD3HJMQT/\NP6YU5+MPPWLQDWYSUOJ8V7LBA0+8W0MSMWN4CLWM7 = NP6yu5+oS+lN1rpnik98wFUb6gH6ukMa
  • HKEY_LOCAL_MACHINE\SOFTWARE\SW.BOOSTER\5458797678\NP6YU5+TNZZH0OQIKE1/GD3HJMQT/\NP6YU5+O/JAUURPNIKZZC72IOD641QVSKWTQJSU5ZR = NP6yu5+qLuUwVjlhabO6AQHW7zHo0s5/qmFaUd2glq14uyOitxSUb87SZXnwz
  • HKEY_LOCAL_MACHINE\SOFTWARE\SW.BOOSTER\5458797678\NP6YU5+TNZZH0OQIKE1/GD3HJMQT/\NP6YU5+OBHHU6789/XU3LMQKQBU9V0O8L1+PWHGQ7A = NP6yu5+ire7AFHwysu7daGH/1I+8/fYQTHvbDbfbFpsZR9hg1ZLTwQJfCgwjG
  • HKEY_LOCAL_MACHINE\SOFTWARE\SW.BOOSTER\5458797678\NP6YU5+TNZZH0OQIKE1/GD3HJMQT/\NP6YU5+OFUVMDBCDEFHBBXRMLUGJ9AYGJ = NP6yu5+yZKZjefABCDz76N9UmHe0p0kgH5NGRfwxzCZGcCt9/G/oGfA6jw
  • HKEY_LOCAL_MACHINE\SOFTWARE\SW.BOOSTER\5458797678\NP6YU5+TNZZH0OQIKE1/GD3HJMQT/\NP6YU5+ORN6UTIKEG+DIGPNG1YSOBLAVHVZRTKS5X3JZ0JUS = NP6yu5+o4IdosRJLFHmfwN6K
  • HKEY_LOCAL_MACHINE\SOFTWARE\SW.BOOSTER\5458797678\NP6YU5+TNZZH0OQIKE1/GD3HJMQT/\NP6YU5+OW1RR56789/UE1SBYVUF4KVUIX = NP6yu5+nWUogkwysur1U
  • HKEY_LOCAL_MACHINE\SOFTWARE\SW.BOOSTER\5458797678\NP6YU5+TNZZH0OQIKE1/GD3HJMQT/\NP6YU5+OXTCWROQIKEBFOQMXOVQ3PYCV = NP6yu5+zbMgbIcdefAUN
  • HKEY_LOCAL_MACHINE\SOFTWARE\SW.BOOSTER\5458797678\NP6YU5+TNZZH0OQIKE1/GD3HJMQT/\NP6YU5+PNRKTFBCDEFEJL8Z1TLNENCPBPB = NP6yu5+kzkcLP12345ZfrEA8xwYzo
  • HKEY_LOCAL_MACHINE\SOFTWARE\SW.BOOSTER\5458797678\NP6YU5+TNZZH0OQIKE1/GD3HJMQT/\NP6YU5+Q2CPRX789/XUEIE5ILGMR36HI9ZR5HNZS2A = NP6yu5+nWUogkwysur1U
  • HKEY_LOCAL_MACHINE\SOFTWARE\SW.BOOSTER\5458797678\NP6YU5+TNZZH0OQIKE1/GD3HJMQT/\NP6YU5+Q83XDCABCDEK18VAC0H9NVFERZY89QZIQZ = NP6yu5+xvTqlqdefABK+80Gq2mWBC1o0+
  • HKEY_LOCAL_MACHINE\SOFTWARE\SW.BOOSTER\5458797678\NP6YU5+TNZZH0OQIKE1/GD3HJMQT/\NP6YU5+QAAIJRPNIKGVSUOLAZ3MK8U+RGKBXPY = NP6yu5+ms6Kogvqomje5FgkwM
  • HKEY_LOCAL_MACHINE\SOFTWARE\SW.BOOSTER\5458797678\NP6YU5+TNZZH0OQIKE1/GD3HJMQT/\NP6YU5+QCEJ2JRPNIKTXYRB/HJK8PV2I7 = NP6yu5+ire7AFHwysu7daGH/1I+8/fYQTHvbDbfbFpsZR9hg1ZLTwQJfCgwjG
  • HKEY_LOCAL_MACHINE\SOFTWARE\SW.BOOSTER\5458797678\NP6YU5+TNZZH0OQIKE1/GD3HJMQT/\NP6YU5+QMAGWAVQOMJYKE3RG3RAIWGTRR6LY542B = NP6yu5+khVFJGTVNPRuPIJFr9n3+6RelOb5eGSEBDemA
  • HKEY_LOCAL_MACHINE\SOFTWARE\SW.BOOSTER\5458797678\NP6YU5+TNZZH0OQIKE1/GD3HJMQT/\NP6YU5+QNT+FXZTVQODFBTS/GCPHJVOOIO2SDNPTKI = NP6yu5+yZKZjefABCDz76N9UmHe0p0kgH5NGRfwxzCZGcCt9/G/oGfA6jw
  • HKEY_LOCAL_MACHINE\SOFTWARE\SW.BOOSTER\5458797678\NP6YU5+TNZZH0OQIKE1/GD3HJMQT/\NP6YU5+QWDMHUJLHABRI95GDX9WB+KT8H = NP6yu5+qLuUwVjlhabO6AQHW7zHo0s5/qmFaUd2glq14uyOitxSUb87SZXnwz
  • HKEY_LOCAL_MACHINE\SOFTWARE\SW.BOOSTER\5458797678\NP6YU5+TNZZH0OQIKE1/GD3HJMQT/\NP6YU5+R+8G2H34567HEDRCOML+7+U93C = NP6yu5+qTfOFR/XZTV+PvTYNS9KwBi65M9cgi/v1hpHH
  • HKEY_LOCAL_MACHINE\SOFTWARE\SW.BOOSTER\5458797678\NP6YU5+TNZZH0OQIKE1/GD3HJMQT/\NP6YU5+RK2YDOCDWYSO+SSZJB0LFNMK7UMZJ4F = NP6yu5+o4IdosRJLFHmfwN6K
  • HKEY_LOCAL_MACHINE\SOFTWARE\SW.BOOSTER\5458797678\NP6YU5+TNZZH0OQIKE1/GD3HJMQT/\NP6YU5+ROHR67HABCDI6OQITBZYLEDLKV = NP6yu5+ookVA701234YHM8
  • HKEY_LOCAL_MACHINE\SOFTWARE\SW.BOOSTER\5458797678\NP6YU5+TNZZH0OQIKE1/GD3HJMQT/\NP6YU5+S/N9Q2LFHWY5GE3VWAFDDYM0XGIXL/SOCFUPBEC2IZ = NP6yu5+xKYF+812345Z1
  • HKEY_LOCAL_MACHINE\SOFTWARE\SW.BOOSTER\5458797678\NP6YU5+TNZZH0OQIKE1/GD3HJMQT/\NP6YU5+S2TBXEEFABCXJ0DAXR+/FSJDEDZSSHR+HV = NP6yu5+ns1Eg0urpni4gAEYTki3DC4KvvLHzuLqQW8Ye6
  • HKEY_LOCAL_MACHINE\SOFTWARE\SW.BOOSTER\5458797678\NP6YU5+TNZZH0OQIKE1/GD3HJMQT/\NP6YU5+SFYNDEBCDEF+TMD = NP6yu5+zbMgbIcdefAUN
  • HKEY_LOCAL_MACHINE\SOFTWARE\SW.BOOSTER\5458797678\NP6YU5+TNZZH0OQIKE1/GD3HJMQT/\NP6YU5+SH9+Y+XZTVQ/XYWHII+JTIOMPD = NP6yu5+myP8RD+xztvB6Vg6g9vU8nT+sKzDn9UlUWnHRH6wgu19+oTuDnxdvzvV++
  • HKEY_LOCAL_MACHINE\SOFTWARE\SW.BOOSTER\5458797678\NP6YU5+TNZZH0OQIKE1/GD3HJMQT/\NP6YU5+T+P+YMHABCDJFHSAEPXR5O1J1C+DKL8GWF2QPTQLD = NP6yu5+oLdibefABCDQ2/TYrIyvnFzq2FTFF
  • HKEY_LOCAL_MACHINE\SOFTWARE\SW.BOOSTER\5458797678\NP6YU5+TNZZH0OQIKE1/GD3HJMQT/\NP6YU5+T3BD56789/XU4TF4QCFDCBTHM9BO81OA/UPCL = NP6yu5+jnxjzOdefABNqu
  • HKEY_LOCAL_MACHINE\SOFTWARE\SW.BOOSTER\5458797678\NP6YU5+TNZZH0OQIKE1/GD3HJMQT/\NP6YU5+T4SMY89/XZTO241UBCL1FGCDQGO = NP6yu5+jnxjzOdefABNqu
  • HKEY_LOCAL_MACHINE\SOFTWARE\SW.BOOSTER\5458797678\NP6YU5+TNZZH0OQIKE1/GD3HJMQT/\NP6YU5+T5W/EBHABCDLG7/SFSAATXRVG = NP6yu5+xvTqlqdefABK+80Gq2mWBC1o0+
  • HKEY_LOCAL_MACHINE\SOFTWARE\SW.BOOSTER\5458797678\NP6YU5+TNZZH0OQIKE1/GD3HJMQT/\NP6YU5+TJP3SBQOMJLSVJFGKDPGOFAASAQ8LES0XEI = NP6yu5+vDHtq+ikg01CbIM
  • HKEY_LOCAL_MACHINE\SOFTWARE\SW.BOOSTER\5458797678\NP6YU5+TNZZH0OQIKE1/GD3HJMQT/\NP6YU5+U2C5SLHABCDKYXGD2X5DTP+ = NP6yu5+khVFJGTVNPRuPIJFr9n3+6RelOb5eGSEBDemA
  • HKEY_LOCAL_MACHINE\SOFTWARE\SW.BOOSTER\5458797678\NP6YU5+TNZZH0OQIKE1/GD3HJMQT/\NP6YU5+U4W7I3FHWYSFPPWVEC640VGJ7VUI5FRVR = NP6yu5+xKYF+812345Z1
  • HKEY_LOCAL_MACHINE\SOFTWARE\SW.BOOSTER\5458797678\NP6YU5+TNZZH0OQIKE1/GD3HJMQT/\NP6YU5+UGNMTBCDWYSQB6JM/JZXAHMJS4BB/QRIN+8 = NP6yu5+qTfOFR/XZTV+PvTYNS9KwBi65M9cgi/v1hpHH
  • HKEY_LOCAL_MACHINE\SOFTWARE\SW.BOOSTER\5458797678\NP6YU5+TNZZH0OQIKE1/GD3HJMQT/\NP6YU5+UPBRS456789YYTFDDRZVA0PJHL5GUN4CRRU6I0+/B = NP6yu5+ms6Kogvqomje5FgkwM
  • HKEY_LOCAL_MACHINE\SOFTWARE\SW.BOOSTER\5458797678\NP6YU5+TNZZH0OQIKE1/GD3HJMQT/\NP6YU5+VBNHYCDWYSUOIK7BPU/LITLOXXB/Y/8ZSGUEDPVDRC = NP6yu5+ouLGsR/XZTVHZg6
  • HKEY_LOCAL_MACHINE\SOFTWARE\SW.BOOSTER\5458797678\NP6YU5+TNZZH0OQIKE1/GD3HJMQT/\NP6YU5+VGPJJAFABCDTSHMZVQSFT7E4SI = NP6yu5+vDHtq+ikg01CbIM
  • HKEY_LOCAL_MACHINE\SOFTWARE\SW.BOOSTER\5458797678\NP6YU5+TNZZH0OQIKE1/GD3HJMQT/\NP6YU5+XEGQYZTVNPRHAP40RL5NZK9RVF+FIGEUX = NP6yu5+ouLGsR/XZTVHZg6
  • HKEY_LOCAL_MACHINE\SOFTWARE\SW.BOOSTER\5458797678\NP6YU5+TNZZH0OQIKE1/GD3HJMQT/\NP6YU5+XGCT2OQOMJLV2GRNCOLMWN7NYN = NP6yu5+tQ3dtOHwysu7dAPo9rWzs6Cz73val5GwlYqnEmAXyKRiEzz+0sbZtS5
  • HKEY_LOCAL_MACHINE\SOFTWARE\SW.BOOSTER\5458797678\NP6YU5+TNZZH0OQIKE1/GD3HJMQT/\NP6YU5+XH2UW4HWYSU7SSR8OWZX2XW2HDD4DJXQBX = NP6yu5+zbMgbIcdefAUN
  • HKEY_LOCAL_MACHINE\SOFTWARE\SW.BOOSTER\5458797678\NP6YU5+TNZZH0OQIKE1/GD3HJMQT/\NP6YU5+XYXZUR+XZTV8XRDD4DOLW/+0ELRMM = NP6yu5+p/RcQikg012CPtvY0JqomLb
  • HKEY_LOCAL_MACHINE\SOFTWARE\SW.BOOSTER\5458797678\NP6YU5+TNZZH0OQIKE1/GD3HJMQT/\NP6YU5+Y9R/XAZTVQOWETD7YHX7KCFYZD24SLA = NP6yu5+xztvqomjlha
  • HKEY_LOCAL_MACHINE\SOFTWARE\SW.BOOSTER\5458797678\NP6YU5+TNZZH0OQIKE1/GD3HJMQT/\NP6YU5+YEFHRM+XZTVBTQYBYRHCKZLQDEDD77YDA71 = NP6yu5+myP8RD+xztvB6Vg6g9vU8nT+sKzDn9UlUWnHRH6wgu19+oTuDnxdvzvV++
  • HKEY_LOCAL_MACHINE\SOFTWARE\SW.BOOSTER\5458797678\NP6YU5+TNZZH0OQIKE1/GD3HJMQT/\NP6YU5+ZUPS3JLHABCQDMNISCD6AO3ADXMTQ1WIAX6 = NP6yu5+tQ3dtOHwysu7dAPo9rWzs6Cz73val5GwlYqnEmAXyKRiEzz+0sbZtS5
  • HKEY_USERS\.DEFAULT\SOFTWARE\APPDATALOW\{5F189DF5-2D05-472B-9091-84D9848AE48B}\_F122CA63\IIID = 1
  • HKEY_USERS\.DEFAULT\SOFTWARE\APPDATALOW\{5F189DF5-2D05-472B-9091-84D9848AE48B}\_F122CA63\00000000\370856C7 = p01e07x0qx1A06h0n01+06l0nU1Z06t0mU1g0640nl0S06h0nl1A06E0 p01e07x0qx1D06I0mU1O0640n01Y06t0ml1N06b0qx1S02I0ox1S06q0nU0% p01e07x0qx1N06t0nl1h06O0jx1P06Y0mU1g0640nl0S06h0nl1A06E0 p01T07m0nl1Y06E0qx1h06x0qx1O0640mU1g0640nl0S06h0nl1A06E0
  • HKEY_USERS\.DEFAULT\SOFTWARE\APPDATALOW\{5F189DF5-2D05-472B-9091-84D9848AE48B}\_F122CA63\00000000\3EFEB33E = p01e07x0qx1A06h0n01+06l0nU1Z06t0mU1g0640nl0S06h0nl1A06E0 p01e07x0qx1D06I0mU1O0640n01Y06t0ml1N06b0qx1S02I0ox1S06q0nU0% p01e07x0qx1N06t0nl1h06O0jx1P06Y0mU1g0640nl0S06h0nl1A06E0 p01T07m0nl1Y06E0qx1h06x0qx1O0640mU1g0640nl0S06h0nl1A06E0
  • HKEY_USERS\.DEFAULT\SOFTWARE\APPDATALOW\{5F189DF5-2D05-472B-9091-84D9848AE48B}\_F122CA63\00000000\493C7345 = 0
  • HKEY_USERS\.DEFAULT\SOFTWARE\APPDATALOW\{5F189DF5-2D05-472B-9091-84D9848AE48B}\_F122CA63\EAE10F9D\060DF2CD = G/Ay/YP/FPAt/X6/clAj/Xl/alAy/XP/blAs/XD/ax/j/Xt/axAv/X6////%
  • HKEY_USERS\.DEFAULT\SOFTWARE\APPDATALOW\{5F189DF5-2D05-472B-9091-84D9848AE48B}\_F122CA63\EAE10F9D\0C230BCB = ///%
  • HKEY_USERS\.DEFAULT\SOFTWARE\APPDATALOW\{5F189DF5-2D05-472B-9091-84D9848AE48B}\_F122CA63\EAE10F9D\0DC3EE96 = /P////%%
  • HKEY_USERS\.DEFAULT\SOFTWARE\APPDATALOW\{5F189DF5-2D05-472B-9091-84D9848AE48B}\_F122CA63\EAE10F9D\0E93C3F3 = ///%
  • HKEY_USERS\.DEFAULT\SOFTWARE\APPDATALOW\{5F189DF5-2D05-472B-9091-84D9848AE48B}\_F122CA63\EAE10F9D\1520C6F1 = V/////%%
  • HKEY_USERS\.DEFAULT\SOFTWARE\APPDATALOW\{5F189DF5-2D05-472B-9091-84D9848AE48B}\_F122CA63\EAE10F9D\1C311243 = GxAy/YV/c/At/XD/c/Ay/XF/cPAj/YV/FlAy/X2/UxAp/X2/GxAk////
  • HKEY_USERS\.DEFAULT\SOFTWARE\APPDATALOW\{5F189DF5-2D05-472B-9091-84D9848AE48B}\_F122CA63\EAE10F9D\27DDCF6F = ///%
  • HKEY_USERS\.DEFAULT\SOFTWARE\APPDATALOW\{5F189DF5-2D05-472B-9091-84D9848AE48B}\_F122CA63\EAE10F9D\2D71D5AB = V/////%%
  • HKEY_USERS\.DEFAULT\SOFTWARE\APPDATALOW\{5F189DF5-2D05-472B-9091-84D9848AE48B}\_F122CA63\EAE10F9D\340D3099 = /P////%%
  • HKEY_USERS\.DEFAULT\SOFTWARE\APPDATALOW\{5F189DF5-2D05-472B-9091-84D9848AE48B}\_F122CA63\EAE10F9D\37B7A6D8 = UlAr/XJ/c//k////
  • HKEY_USERS\.DEFAULT\SOFTWARE\APPDATALOW\{5F189DF5-2D05-472B-9091-84D9848AE48B}\_F122CA63\EAE10F9D\38583BC3 = N//e/Ct/Vx/l/C/////%
  • HKEY_USERS\.DEFAULT\SOFTWARE\APPDATALOW\{5F189DF5-2D05-472B-9091-84D9848AE48B}\_F122CA63\EAE10F9D\3C09C42B = ///%
  • HKEY_USERS\.DEFAULT\SOFTWARE\APPDATALOW\{5F189DF5-2D05-472B-9091-84D9848AE48B}\_F122CA63\EAE10F9D\414BC593 = ///%
  • HKEY_USERS\.DEFAULT\SOFTWARE\APPDATALOW\{5F189DF5-2D05-472B-9091-84D9848AE48B}\_F122CA63\EAE10F9D\51D2F2EA = QlAI/Bh/JlA+/Y//b/Ak/YZ/c/Au/YZ/Z//e/B2/N//l////
  • HKEY_USERS\.DEFAULT\SOFTWARE\APPDATALOW\{5F189DF5-2D05-472B-9091-84D9848AE48B}\_F122CA63\EAE10F9D\587B5709 = V/////%%
  • HKEY_USERS\.DEFAULT\SOFTWARE\APPDATALOW\{5F189DF5-2D05-472B-9091-84D9848AE48B}\_F122CA63\EAE10F9D\6185D035 = VP/h/CP/V//l////
  • HKEY_USERS\.DEFAULT\SOFTWARE\APPDATALOW\{5F189DF5-2D05-472B-9091-84D9848AE48B}\_F122CA63\EAE10F9D\65114B36 = Vl/l////
  • HKEY_USERS\.DEFAULT\SOFTWARE\APPDATALOW\{5F189DF5-2D05-472B-9091-84D9848AE48B}\_F122CA63\EAE10F9D\72758A5D = ///%
  • HKEY_USERS\.DEFAULT\SOFTWARE\APPDATALOW\{5F189DF5-2D05-472B-9091-84D9848AE48B}\_F122CA63\EAE10F9D\7367429F = ///%
  • HKEY_USERS\.DEFAULT\SOFTWARE\APPDATALOW\{5F189DF5-2D05-472B-9091-84D9848AE48B}\_F122CA63\EAE10F9D\7F69FA1F = ///%
  • HKEY_USERS\.DEFAULT\SOFTWARE\APPDATALOW\{5F189DF5-2D05-472B-9091-84D9848AE48B}\_F122CA63\EAE10F9D\8B9E4CBC = V/////%%
  • HKEY_USERS\.DEFAULT\SOFTWARE\APPDATALOW\{5F189DF5-2D05-472B-9091-84D9848AE48B}\_F122CA63\EAE10F9D\A0743ACC = N/////%%
  • HKEY_USERS\.DEFAULT\SOFTWARE\APPDATALOW\{5F189DF5-2D05-472B-9091-84D9848AE48B}\_F122CA63\EAE10F9D\A1DCFF5B = V/////%%
  • HKEY_USERS\.DEFAULT\SOFTWARE\APPDATALOW\{5F189DF5-2D05-472B-9091-84D9848AE48B}\_F122CA63\EAE10F9D\A2E3B941 = ///%
  • HKEY_USERS\.DEFAULT\SOFTWARE\APPDATALOW\{5F189DF5-2D05-472B-9091-84D9848AE48B}\_F122CA63\EAE10F9D\BBF88800 = ///%
  • HKEY_USERS\.DEFAULT\SOFTWARE\APPDATALOW\{5F189DF5-2D05-472B-9091-84D9848AE48B}\_F122CA63\EAE10F9D\C24899A6 = MP/f/CF/Mx/l/C/////%
  • HKEY_USERS\.DEFAULT\SOFTWARE\APPDATALOW\{5F189DF5-2D05-472B-9091-84D9848AE48B}\_F122CA63\EAE10F9D\C5705860 = Vx////%%
  • HKEY_USERS\.DEFAULT\SOFTWARE\APPDATALOW\{5F189DF5-2D05-472B-9091-84D9848AE48B}\_F122CA63\EAE10F9D\C6C5DD44 = V/////%%
  • HKEY_USERS\.DEFAULT\SOFTWARE\APPDATALOW\{5F189DF5-2D05-472B-9091-84D9848AE48B}\_F122CA63\EAE10F9D\C99A5F5C = ///%
  • HKEY_USERS\.DEFA

    Symptoms

    This symptoms of this detection are the files, registry, and network communication referenced in the characteristics section.

    Method of Infection

    Trojans do not self-replicate. They are spread manually, often under the premise that the executable is something beneficial. Distribution channels include IRC, peer-to-peer networks, newsgroup postings, e-mail, etc.

    Removal

    Please use the following instructions for all supported versions of Windows:


    1. Disable Windows System Restore. For instructions, please refer to: http://www.mcafee.com/us/downloads/free-tools/disabling-system-restore.aspx

    2. Update your McAfee Anti-Virus product to the latest version (when possible), and ensure the latest DAT and Engine and any applicable EXTRA.DATs are installed.

    3. Run a full system scan. (On-Demand Scan)

    4. Reboot, as soon as it is convenient, to ensure all malicious components are removed.

    Variants