Win32.Sality.4 (BitDefender), Virus:Win32/Sality.gen!Q (Microsoft), Trojan-Ransom.Win32.Blocker.dnor (Kaspersky), Win32.Sality.4 (B) (Emsisoft), W32/Sality.gen.z (McAfee), W32.Sality.AF (Symantec), Virus.Win32.Sality (Ikarus), Win32.Sality.4 (FSecure), Win32/Sality (AVG), Win32:FileInfector-A [Heur] (Avast), PE_SALITY.RS (TrendMicro), Virus.Win32.Sality.FD, Virus.Win32.Sality.2.FD, VirusSality.YR, GenericAutorunWorm.YR, GenericInjector.YR (Lavasoft MAS)Behaviour: Ransom, Trojan, Worm, Virus, WormAutorun
The description has been automatically generated by Lavasoft Malware Analysis System and it may contain incomplete or inaccurate information.
Summary
MD5: 2bf666b08516aab499950a93f6459a34
SHA1: 370cfbfdd6c780c12f5a35126ffd4ca1c7db95e7
SHA256: 78bffc931918edd69fd393988143c098b614d6a5034b03e11411e036d86e52c5
SSDeep: 6144:9WVO0Iq/VdMTihUKWwSY83Q/ZTZL1NopeOUCxVhH:H0IqddMTkEY8mZRNoEOTVhH
Size: 468792 bytes
File type: EXE
Platform: WIN32
Entropy: Not Packed
PEID: UPolyXv05_v6
Company: Rapiddown
Created at: 2009-07-31 23:56:53
Analyzed on: WindowsXP SP3 32-bit
Summary: Virus. A program that recursively replicates a possibly evolved copy of itself.
Dynamic Analysis
Payload
| Behaviour | Description |
|---|---|
| WormAutorun | A worm can spread via removable drives. It writes its executable and creates "autorun.inf" scripts on all removable drives. The autorun script will execute the Virus's file once a user opens a drive's folder in Windows Explorer. |
Process activity
The Virus creates the following process(es):No processes have been created.The Virus injects its code into the following process(es):
%original file name%.exe:1912
File activity
The process %original file name%.exe:1912 makes changes in the file system.
The Virus creates and/or writes to the following file(s):
%Documents and Settings%\%current user%\Local Settings\Temp\winaibj.exe (849 bytes)
%Documents and Settings%\%current user%\Local Settings\Temp\mqktj.exe (15019 bytes)
%WinDir%\system.ini (70 bytes)
%Documents and Settings%\%current user%\Local Settings\Temp\wlysjm.exe (1 bytes)
%Program Files%\Adobe\Reader 9.0\Reader\Reader_sl.exe (432 bytes)
%Documents and Settings%\%current user%\Local Settings\Temp\jusched.log (409 bytes)
%Documents and Settings%\%current user%\Local Settings\Temp\winvhnjwl.exe (849 bytes)
C:\xeeb.pif (111 bytes)
C:\autorun.inf (315 bytes)
%Program Files%\Common Files\Java\Java Update\jusched.exe (952 bytes)
%System%\drivers\pumlh.sys (5 bytes)
%Documents and Settings%\%current user%\Local Settings\Temp\au-descriptor-1.7.0_51-b13.xml (8 bytes)
The Virus deletes the following file(s):
%Documents and Settings%\%current user%\Local Settings\Temp\winaibj.exe (0 bytes)
%Documents and Settings%\%current user%\Local Settings\Temp\mqktj.exe (0 bytes)
%Documents and Settings%\%current user%\Local Settings\Temp\wlysjm.exe (0 bytes)
%Documents and Settings%\%current user%\Local Settings\Temp\winvhnjwl.exe (0 bytes)
%WinDir%\7465d (0 bytes)
%System%\drivers\pumlh.sys (0 bytes)
Registry activity
The process %original file name%.exe:1912 makes changes in the system registry.
The Virus creates and/or sets the following values in system registry:
[HKCU\Software\Stvncyfrlda]
"m2_866" = "3818190814"
"m1_617" = "1587980299"
"m1_839" = "2230134090"
"m1_887" = "1152020221"
"m3_787" = "4186170942"
"m4_529" = "3140763709"
[HKLM\SOFTWARE\Microsoft\Security Center]
"AntiVirusOverride" = "1"
[HKCU\Software\Stvncyfrlda]
"m3_703" = "155227770"
"m4_528" = "1405472976"
"m2_864" = "347608792"
"m2_865" = "2082891257"
"m2_862" = "1171989740"
"m2_863" = "2907289762"
"m2_552" = "102786754"
"m2_553" = "1838065749"
"m2_550" = "927167862"
"m2_551" = "2662451350"
"m2_556" = "2748979343"
"m2_557" = "189294175"
"m2_554" = "3573362422"
"m2_555" = "1013681989"
"m2_558" = "1924580068"
"m2_559" = "3659881238"
"m2_790" = "785105702"
"m2_791" = "2520406356"
"m2_792" = "4255689598"
"m2_793" = "1696020773"
"m2_794" = "3431302982"
"m4_446" = "845553638"
"m4_537" = "4138187685"
"m2_797" = "47249635"
"m2_798" = "1782533196"
"m2_799" = "3517829271"
"m4_523" = "1318953903"
"m4_522" = "3878630466"
"m3_722" = "3027577667"
"m2_807" = "220288438"
"m3_723" = "501734142"
"m1_267" = "3568840465"
"m1_266" = "39618812"
"m1_265" = "2900679899"
"m1_264" = "4073677266"
"m1_263" = "1301923493"
"m1_262" = "1396506593"
"m1_261" = "1815799452"
"m1_260" = "4228395974"
"m2_869" = "434121459"
"m3_447" = "2564285818"
"m1_269" = "1381221072"
"m1_268" = "2786685871"
"m4_0" = "0"
"m4_1" = "1735290733"
"m4_2" = "3470581466"
"m4_3" = "910904903"
"m4_4" = "2646195636"
"m4_5" = "86519073"
"m4_6" = "1821809806"
"m4_7" = "3557100539"
"m4_8" = "997423976"
"m1_312" = "1987883150"
"m1_311" = "2557767539"
"m1_310" = "3813198400"
"m1_317" = "4045420871"
"m1_316" = "3545396473"
"m1_315" = "1575228837"
"m1_314" = "2117813768"
"m2_426" = "499479046"
"m2_427" = "2234763801"
"m2_424" = "1323865768"
"m2_425" = "3059148111"
"m2_422" = "2148251938"
"m2_423" = "3883534571"
"m2_420" = "2972636399"
"m2_421" = "412953011"
"m2_867" = "1258505836"
"m4_802" = "133763962"
"m3_442" = "2511276059"
"m1_925" = "305871279"
"m2_428" = "3970062643"
"m2_429" = "1410378772"
"m4_800" = "958149792"
"m1_886" = "1299325071"
"m4_801" = "2693440525"
"m2_910" = "2861567765"
"m4_445" = "3405230201"
"m4_610" = "1965392314"
"m1_892" = "1052022147"
"m2_802" = "133759060"
"m4_442" = "2494325298"
"m3_261" = "1922363400"
"m3_260" = "220872861"
"m3_263" = "1131877074"
"m3_262" = "3657786279"
"m4_129" = "514205165"
"m4_128" = "3073881728"
"m3_267" = "3777846406"
"m3_266" = "2042408299"
"m4_125" = "2162976825"
"m4_124" = "427686092"
"m4_127" = "1338590995"
"m4_126" = "3898267558"
"m4_121" = "3811748485"
"m4_120" = "2076457752"
"m4_123" = "2987362655"
"m4_122" = "1252071922"
"m3_467" = "2943756798"
"m3_466" = "1174781507"
"m3_465" = "3734703828"
"m3_464" = "2032836537"
"m3_463" = "297331722"
"m3_462" = "2823715999"
"m3_461" = "1088277856"
"m3_460" = "3681770997"
"m4_803" = "1869054695"
"m1_889" = "1685878493"
"m4_443" = "4229616031"
"m4_534" = "3227282782"
"m3_469" = "2085701784"
"m3_468" = "350280045"
"m4_29" = "3078791001"
"m4_28" = "1343500268"
"m4_23" = "1256981195"
"m4_22" = "3816657758"
"m4_21" = "2081367025"
"m4_20" = "346076292"
"m4_27" = "3903176831"
"m4_26" = "2167886098"
"m4_25" = "432595365"
"m4_24" = "2992271928"
"m4_440" = "3318711128"
"m4_615" = "2051911387"
"m4_842" = "825916546"
"m1_24" = "1780627533"
"m1_25" = "1184900309"
"m1_26" = "3999009296"
"m1_27" = "2177821472"
"m1_20" = "4031759678"
"m1_21" = "1325000833"
"m1_22" = "2380345391"
"m1_23" = "1742257408"
"m1_28" = "1023086801"
"m1_29" = "2190950883"
"m3_199" = "1742469010"
"m3_198" = "4268311655"
"m4_305" = "982696157"
"m4_304" = "3542372720"
"m4_307" = "158310327"
"m4_306" = "2717986890"
"m4_301" = "2631467817"
"m4_300" = "896177084"
"m4_303" = "1807081987"
"m4_302" = "71791254"
"m3_683" = "4070583782"
"m3_682" = "2369237579"
"m3_681" = "633668316"
"m3_680" = "3159659425"
"m4_309" = "3628891793"
"m4_308" = "1893601060"
"m4_659" = "1095292311"
"m4_658" = "3654968874"
"m4_495" = "4270420931"
"m4_494" = "2535130198"
"m4_497" = "3446035101"
"m4_496" = "1710744368"
[HKLM\SOFTWARE\Microsoft\Security Center]
"FirewallOverride" = "1"
[HKCU\Software\Stvncyfrlda]
"m4_490" = "4183901858"
"m4_493" = "799839465"
"m4_492" = "3359516028"
"m3_513" = "1162748740"
"m3_512" = "3722293289"
"m3_511" = "1953693882"
"m3_510" = "251826447"
"m4_499" = "2621649271"
"m4_498" = "886358538"
"m3_515" = "304693870"
"m3_514" = "2864239347"
"m4_789" = "3344788209"
"m4_788" = "1609497476"
"m2_934" = "1558877942"
"m4_781" = "2347364233"
"m4_780" = "612073500"
"m4_783" = "1522978403"
"m4_782" = "4082654966"
"m4_785" = "698592573"
"m1_698" = "692787841"
"m4_787" = "4169174039"
"m4_786" = "2433883306"
"m2_884" = "693689940"
"m2_885" = "2428968981"
"m2_886" = "4164271200"
"m1_699" = "253284291"
"m2_880" = "2342459886"
"m2_881" = "4077743610"
"m2_882" = "1518061366"
"m2_883" = "3253355204"
"m2_888" = "3339885359"
"m2_889" = "780198756"
"m2_935" = "3294161575"
"m1_774" = "4273780961"
"m1_903" = "675696714"
"m4_279" = "3109777355"
"m4_278" = "1374486622"
"m2_954" = "1904946622"
"m1_901" = "2946606205"
"m2_952" = "2729331240"
"m2_953" = "169662767"
"m2_950" = "3553709065"
"m2_951" = "994048745"
"m4_271" = "2112353379"
"m4_270" = "377062646"
"m4_273" = "1287967549"
"m4_272" = "3847644112"
"m4_275" = "463581719"
"m4_274" = "3023258282"
"m4_277" = "3934163185"
"m4_276" = "2198872452"
"m3_3" = "927474798"
"m3_2" = "3487544563"
"m3_1" = "1718420804"
"m3_0" = "17001001"
"m3_7" = "3573965266"
"m3_6" = "1838544551"
"m3_5" = "69945096"
"m3_4" = "2629490589"
"m2_314" = "3715414390"
"m2_315" = "1155728066"
"m3_9" = "2749530364"
"m3_8" = "980422977"
"m2_310" = "1069216803"
"m2_311" = "2804500435"
"m2_312" = "244832657"
"m2_313" = "1980114961"
"m1_694" = "2838160145"
[HKCU\Software\Stvncyfrlda\168128873]
"1735290733" = "87"
[HKCU\Software\Stvncyfrlda]
"m1_695" = "2749396782"
"m2_937" = "2469776511"
"m1_461" = "2668841266"
"m1_460" = "4271016808"
"m1_463" = "849072532"
"m1_462" = "294085867"
"m1_465" = "3681512503"
"m1_464" = "1675896800"
"m1_467" = "4181279180"
"m1_466" = "3240551092"
"m1_469" = "525126639"
"m1_468" = "3121877061"
"m4_722" = "3044426090"
"m1_867" = "905131121"
"m1_5" = "668211280"
"m1_4" = "1315267741"
"m1_7" = "2019123885"
"m1_6" = "3595646455"
"m1_1" = "3477782551"
"m1_0" = "332287070"
"m3_68" = "2018964189"
"m3_69" = "3787940424"
"m3_66" = "2877018163"
"m3_67" = "283394990"
"m3_64" = "3667439977"
"m3_65" = "1107894404"
"m3_62" = "230528591"
"m3_63" = "1965949434"
"m3_60" = "1021409189"
"m3_61" = "2756962000"
"m2_220" = "3806845230"
"m2_221" = "1247162352"
"m2_222" = "2982457424"
"m2_223" = "422778519"
"m2_224" = "2158060560"
"m2_225" = "3893360195"
"m2_226" = "1333677002"
"m2_227" = "3068980531"
"m2_228" = "509290009"
"m2_229" = "2244578355"
"m3_854" = "191160247"
"m3_855" = "1893027618"
"m3_852" = "982105325"
"m4_776" = "2260845160"
"m3_850" = "1840160195"
"m2_496" = "1710749376"
"m3_812" = "323618709"
"m3_605" = "1862155952"
"m2_495" = "4270413321"
"m4_855" = "1909859595"
"m4_679" = "1441368603"
"m2_494" = "2535136402"
"m4_678" = "4001045166"
"m1_797" = "19394195"
"m1_796" = "2975620802"
"m1_795" = "1935946027"
"m1_794" = "453941167"
"m2_29" = "3078785585"
"m2_28" = "1343503400"
"m1_791" = "4216887998"
"m4_720" = "3868811920"
"m2_25" = "432601989"
"m2_24" = "2992268307"
"m2_27" = "3903183237"
"m2_26" = "2167894292"
"m2_21" = "2081374151"
"m2_20" = "346073508"
"m2_23" = "1256987761"
"m2_22" = "3816655465"
"m3_604" = "160272133"
"m4_854" = "174568862"
"m4_674" = "1354849530"
"m2_932" = "2383264752"
"m2_795" = "871638573"
"m1_649" = "2823596700"
"m1_648" = "4260061629"
"m2_169" = "1206359848"
"m2_168" = "3766028007"
"m4_727" = "3130945163"
"m3_884" = "677097037"
"m2_163" = "3679513501"
"m2_162" = "1944228560"
"m2_161" = "208928972"
"m2_160" = "2768601578"
"m2_167" = "2030742137"
"m2_166" = "295458520"
"m2_165" = "2855126890"
"m2_164" = "1119843571"
"m4_857" = "1085473765"
"m2_933" = "4118546001"
"m4_745" = "6439989"
"m1_884" = "946651775"
"m3_438" = "4159819351"
"m4_726" = "1395654430"
"m3_439" = "1600289218"
"m4_856" = "3645150328"
"m2_769" = "2998707899"
"m2_768" = "1263424300"
"m2_765" = "352507974"
"m2_764" = "2912195730"
"m2_767" = "3823093965"
"m2_766" = "2087812702"
"m2_761" = "2001284048"
"m2_760" = "265999558"
"m2_763" = "1176896235"
"m2_762" = "3736581914"
"m4_675" = "3090140263"
"m4_851" = "3558631255"
[HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Internet Settings\Cache\Paths\path2]
"CacheLimit" = "65452"
[HKCU\Software\Stvncyfrlda]
"m4_874" = "520645154"
"m4_850" = "1823340522"
"m3_436" = "689352589"
"m4_873" = "3080321717"
"m3_437" = "2391236408"
"m2_871" = "3904703327"
"m2_545" = "840642374"
"m2_544" = "3400324744"
"m2_547" = "16254587"
"m2_546" = "2575937840"
"m2_541" = "2489409731"
"m2_540" = "754126966"
"m2_543" = "1665025847"
"m2_542" = "4224712376"
"m4_853" = "2734245425"
"m2_549" = "3486838107"
"m2_548" = "1751552598"
"m2_783" = "1522979033"
"m2_782" = "4082650282"
"m2_781" = "2347367261"
"m2_780" = "612081474"
"m2_787" = "4169182483"
"m2_786" = "2433877084"
"m2_785" = "698596969"
"m2_784" = "3258262420"
"m4_872" = "1345030984"
"m2_789" = "3344793432"
"m2_788" = "1609491931"
"m1_961" = "179885470"
"m4_852" = "998954692"
"m1_258" = "2086536033"
"m1_259" = "4009896185"
"m1_252" = "2518997636"
"m1_253" = "4268800504"
"m1_250" = "1179479737"
"m1_251" = "1162439521"
"m1_256" = "4197533189"
"m1_257" = "1995389001"
"m1_254" = "526381722"
"m1_255" = "607552964"
"m1_962" = "1582810823"
"m2_949" = "1818434469"
"m1_932" = "2281175201"
"m1_328" = "3128111123"
"m1_329" = "1664370910"
"m1_326" = "3217602932"
"m1_327" = "694036464"
"m1_324" = "2160653903"
"m1_325" = "118504671"
"m1_322" = "4008340686"
"m1_323" = "4202584633"
"m1_320" = "658323453"
"m1_321" = "1794400281"
"m2_439" = "1583417736"
"m2_438" = "4143102402"
"m2_431" = "585990880"
"m2_430" = "3145675274"
"m2_433" = "4056572762"
"m2_432" = "2321290800"
"m2_435" = "3232188451"
"m2_434" = "1496903830"
"m2_437" = "2407804043"
"m2_436" = "672521537"
"m2_931" = "647967795"
"m3_934" = "1575611783"
"m1_964" = "3705110823"
"m1_319" = "1321946733"
"m3_214" = "2001882935"
"m3_215" = "3703373474"
"m3_216" = "1143826897"
"m3_217" = "2912885068"
"m3_210" = "3650358595"
"m3_211" = "1090960638"
"m3_212" = "2792828013"
"m3_213" = "266461080"
"m1_869" = "1499783902"
"m1_965" = "3940219278"
"m3_218" = "352946427"
"m3_219" = "2054830102"
"m1_868" = "1544514542"
"m3_328" = "2222827905"
"m3_329" = "3991820604"
"m3_458" = "177222443"
"m3_459" = "1912775238"
"m1_604" = "3202558131"
"m3_320" = "1258824297"
"m3_321" = "2960842116"
"m3_322" = "434851123"
"m3_323" = "2169896110"
"m3_324" = "3871764445"
"m3_325" = "1311776584"
"m3_326" = "3080883943"
"m3_327" = "521354770"
"m4_38" = "1516538414"
"m4_39" = "3251829147"
"m1_606" = "2665809266"
"m4_9" = "2732714709"
"m4_30" = "519114438"
"m4_31" = "2254405171"
"m4_32" = "3989695904"
"m4_33" = "1430019341"
"m4_34" = "3165310074"
"m4_35" = "605633511"
"m4_36" = "2340924244"
"m4_37" = "4076214977"
"m4_598" = "2616739998"
"m1_866" = "3349631748"
"m4_530" = "581087146"
"m1_603" = "1624194305"
"m4_599" = "57063435"
"m1_861" = "2170163500"
"m1_602" = "1309900548"
"m2_837" = "739399419"
"m1_860" = "1429643331"
"m1_11" = "932921493"
"m1_10" = "806529790"
"m1_13" = "2142871617"
"m1_12" = "66592674"
"m1_15" = "284657016"
"m1_14" = "1815398603"
"m1_17" = "2165006408"
"m1_16" = "2649498986"
"m1_19" = "3095829159"
"m1_18" = "1568523415"
"m1_862" = "1866527415"
"m2_830" = "1477269057"
"m4_668" = "3828007020"
"m4_669" = "1268330457"
"m2_833" = "2388165282"
"m3_740" = "4198071613"
[HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Internet Settings\Cache\Paths\path3]
"CacheLimit" = "65452"
[HKCU\Software\Stvncyfrlda]
"m4_662" = "2006197214"
"m4_663" = "3741487947"
"m4_660" = "2830583044"
"m4_661" = "270906481"
"m4_666" = "357425554"
"m4_667" = "2092716287"
"m4_664" = "1181811384"
"m4_665" = "2917102117"
"m4_468" = "367244100"
"m4_469" = "2102534833"
"m3_528" = "1388755705"
"m3_529" = "3124177428"
"m4_460" = "3664787420"
"m4_461" = "1105110857"
"m4_462" = "2840401590"
"m4_463" = "280725027"
"m4_464" = "2016015760"
"m4_465" = "3751306493"
"m4_466" = "1191629930"
"m4_467" = "2926920663"
"m1_670" = "353279987"
"m4_593" = "2530220925"
"m4_921" = "474930981"
"m1_671" = "3908270053"
"m2_839" = "4209980613"
"m1_672" = "2782954643"
"m2_838" = "2474682109"
"m2_897" = "1777627353"
"m2_896" = "42329368"
"m2_895" = "2602015488"
"m1_673" = "35563059"
"m2_893" = "3426399513"
"m4_596" = "3441125828"
"m2_891" = "4250780983"
"m4_607" = "1054487411"
"m1_674" = "3018553668"
"m4_597" = "881449265"
"m3_789" = "3328049368"
"m2_899" = "953248167"
"m1_675" = "3331760348"
"m4_608" = "2789778144"
"m2_943" = "4291586027"
"m4_920" = "3034607544"
"m1_676" = "2813754479"
"m4_609" = "230101581"
"m1_677" = "373618536"
"m3_140" = "2439480757"
"m3_141" = "4140840224"
"m3_142" = "1581425759"
"m3_143" = "3350419402"
"m4_208" = "163219600"
"m4_209" = "1898510333"
"m3_146" = "4260947459"
"m3_147" = "1701482942"
"m4_204" = "1811991260"
"m4_205" = "3547281993"
"m4_206" = "987605430"
"m4_207" = "2722896163"
"m4_200" = "3460762920"
"m4_201" = "901086357"
"m4_202" = "2636377090"
"m4_203" = "76700527"
"m4_680" = "3176659336"
"m4_681" = "616982773"
"m4_682" = "2352273506"
"m4_683" = "4087564239"
"m4_684" = "1527887676"
"m3_155" = "2665356502"
"m2_309" = "3628886005"
"m2_308" = "1893604144"
"m2_307" = "158304991"
"m2_306" = "2717984769"
"m2_305" = "982702996"
"m2_304" = "3542371886"
"m2_303" = "1807088825"
"m2_302" = "71788789"
"m2_301" = "2631473482"
"m2_300" = "896172512"
"m3_654" = "1025753695"
"m3_655" = "2727116234"
"m3_159" = "1016356506"
"m4_922" = "2210221714"
"m1_414" = "251547964"
"m1_415" = "1276114024"
"m1_416" = "378324466"
"m3_158" = "3609964399"
"m1_410" = "1032656908"
"m1_411" = "1659643682"
"m1_412" = "2894660168"
"m1_413" = "2483460534"
"m3_650" = "2674229483"
"m1_418" = "143101836"
"m1_419" = "3391844373"
"m3_651" = "81145862"
"m4_510" = "235010854"
"m4_511" = "1970301587"
"m3_19" = "2888904510"
"m3_18" = "1153482627"
"m4_514" = "2881206490"
"m4_515" = "321529927"
"m4_516" = "2056820660"
"m4_517" = "3792111393"
"m3_13" = "1100530336"
"m3_12" = "3626914613"
"m3_11" = "1891476358"
"m3_10" = "190001259"
"m3_17" = "3746958356"
"m3_16" = "2011536633"
"m3_15" = "243002698"
"m3_14" = "2835971551"
"m2_233" = "595817873"
"m2_232" = "3155485810"
"m2_231" = "1420202597"
"m2_230" = "3979870771"
"m2_237" = "3242016465"
"m2_236" = "1506714894"
"m2_235" = "4066405573"
"m2_234" = "2331113892"
"m2_239" = "2417630250"
"m2_238" = "682331583"
"m2_942" = "2556305184"
"m1_769" = "3014691080"
"m1_893" = "372724752"
"m1_864" = "3325722259"
"m4_731" = "1482173503"
"m2_38" = "1516542925"
"m2_39" = "3251823609"
"m2_32" = "3989699805"
"m2_33" = "1430014295"
"m2_30" = "519121676"
"m2_31" = "2254397577"
"m2_36" = "2340926051"
"m2_37" = "4076210569"
"m2_34" = "3165314339"
"m2_35" = "605628901"
"m1_528" = "74971814"
"m1_529" = "903172452"
"m3_843" = "2578153926"
"m3_842" = "809047723"
"m3_845" = "1720099040"
"m3_844" = "18100597"
"m3_847" = "929153930"
"m4_732" = "3217464236"
"m1_520" = "4154138663"
"m1_521" = "137572530"
"m1_522" = "2636657287"
"m1_523" = "4161992551"
"m1_524" = "2060168393"
"m1_525" = "361954527"
"m1_526" = "3261006233"
"m1_527" = "3994372710"
"m1_638" = "279560732"
"m1_639" = "3463047225"
"m2_158" = "3593000369"
"m2_159" = "1033317462"
"m2_156" = "122420644"
"m2_157" = "1857699956"
"m2_154" = "946804838"
"m2_155" = "2682089291"
"m2_152" = "1771191244"
"m2_153" = "3506473501"
"m2_150" = "2595576346"
"m2_151" = "35891981"
"m1_895" = "495272550"
"m4_733" = "657787673"
"m4_913" = "3772474301"
"m4_843" = "2561207279"
"m2_947" = "2642814106"
"m1_896" = "3135355095"
"m4_734" = "2393078406"
"m1_740" = "2530536608"
"m1_741" = "1607519627"
"m1_742" = "2956753970"
"m1_743" = "1361611040"
"m3_556" = "2732157589"
"m1_745" = "3801797505"
"m1_746" = "1919229859"
"m1_747" = "1078718068"
"m1_748" = "135852914"
"m1_749" = "2353289862"
"m4_735" = "4128369139"
"m4_841" = "3385593109"
"m3_741" = "1672211624"
"m3_929" = "1455501476"
[HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Internet Settings\Cache\Paths\path2]
"CachePath" = "%Documents and Settings%\%current user%\Local Settings\Temporary Internet Files\Content.IE5\Cache2"
[HKCU\Software\Stvncyfrlda]
"m2_755" = "179473419"
"m4_757" = "3650059601"
"m4_866" = "3818188474"
"m1_863" = "1234563790"
"m2_860" = "1996376679"
"m2_834" = "4123464892"
"m2_751" = "1828254321"
"m2_753" = "1003858679"
"m2_861" = "3731675277"
"m3_445" = "3421821520"
"m3_786" = "2417063555"
"m2_759" = "2825670533"
"m3_349" = "9342384"
"m1_249" = "1632476826"
"m1_248" = "3783502882"
"m1_245" = "1546564064"
"m1_244" = "2362664120"
"m1_247" = "2056012112"
"m1_246" = "2441241206"
"m1_241" = "2367659053"
"m1_240" = "152225923"
"m1_243" = "3497782574"
"m1_242" = "4248314711"
"m4_744" = "2566116552"
"m3_269" = "2919792544"
"m2_448" = "21163668"
"m2_449" = "1756461834"
"m3_268" = "1184877621"
"m2_444" = "1669944301"
"m2_445" = "3405226425"
"m2_446" = "845546450"
"m2_447" = "2580846343"
"m2_440" = "3318715752"
"m2_441" = "759032699"
"m2_442" = "2494329790"
"m2_443" = "4229614036"
"m4_503" = "972877611"
"m1_813" = "330371298"
"m4_862" = "1171992838"
"m4_502" = "3532554174"
"m1_658" = "418590612"
"m1_814" = "2207568865"
"m4_501" = "1797263441"
"m1_815" = "1661486444"
"m1_331" = "2927604118"
"m1_330" = "2807393852"
"m1_333" = "2621746035"
"m1_332" = "1376809703"
"m1_335" = "3298511222"
"m1_334" = "1382378635"
"m1_337" = "790065589"
"m1_336" = "3973372484"
"m1_339" = "3627056876"
"m1_338" = "1714252453"
"m1_817" = "514583713"
"m4_506" = "1883782514"
"m1_883" = "1106398782"
"m4_863" = "2907283571"
"m4_505" = "148491781"
"m1_882" = "3354840019"
"m4_504" = "2708168344"
"m1_881" = "3007853478"
"m2_957" = "2815856729"
"m3_207" = "2739893002"
"m3_206" = "1004454815"
"m3_205" = "3530313824"
"m3_204" = "1828954357"
"m3_203" = "93401414"
"m3_202" = "2619377195"
"m3_201" = "884348604"
"m3_200" = "3477366529"
"m3_728" = "588232657"
"m4_509" = "2794687417"
"m3_209" = "1881906644"
"m3_208" = "146399929"
"m3_339" = "4131317630"
"m3_338" = "2395764675"
"m3_449" = "1773274116"
"m3_448" = "4297961"
"m3_333" = "2342886112"
"m3_332" = "574352245"
"m3_331" = "3133766598"
"m3_330" = "1431881899"
"m3_337" = "694404180"
"m3_336" = "3253818681"
"m3_335" = "1484825994"
"m3_334" = "4078307871"
"m4_402" = "1802172714"
"m4_403" = "3537463447"
"m4_932" = "2383259860"
"m4_400" = "2626558544"
"m4_401" = "66881981"
"m4_406" = "153401054"
"m2_955" = "3640243393"
"m4_407" = "1888691787"
"m4_404" = "977786884"
"m4_933" = "4118550593"
"m4_405" = "2713077617"
"m2_868" = "2993804416"
"m3_531" = "2333242686"
"m3_530" = "597804419"
"m3_533" = "1508808664"
"m3_532" = "4034716845"
"m3_535" = "650753762"
"m3_534" = "3244230519"
"m3_537" = "4154773900"
"m3_536" = "2386175505"
"m3_539" = "3297243222"
"m3_538" = "1595228475"
"m4_677" = "2265754433"
"m4_676" = "530463700"
"m4_671" = "443944627"
"m4_670" = "3003621190"
"m4_673" = "3914526093"
"m4_672" = "2179235360"
"m4_479" = "2275572979"
"m4_478" = "540282246"
"m4_930" = "3207645690"
"m4_473" = "453763173"
"m4_472" = "3013439736"
"m4_471" = "1278149003"
"m4_470" = "3837825566"
"m4_477" = "3099958809"
"m4_476" = "1364668076"
"m4_475" = "3924344639"
"m4_474" = "2189053906"
"m4_915" = "2948088471"
"m3_837" = "756098376"
"m2_902" = "1864142633"
"m3_746" = "1725159819"
"m4_931" = "647969127"
"m3_747" = "3460057382"
"m4_606" = "3614163974"
"m3_407" = "1905282146"
"m2_928" = "4032034175"
"m3_745" = "23146012"
"m3_742" = "3407192007"
"m4_819" = "3863902647"
"m3_291" = "2475410126"
"m3_153" = "3489919500"
"m3_152" = "1754350225"
"m3_151" = "52482914"
"m3_150" = "2612405239"
"m3_157" = "1874411504"
"m3_156" = "105417797"
"m4_219" = "2071548479"
"m3_154" = "963407291"
"m4_217" = "2895934309"
"m4_216" = "1160643576"
"m4_215" = "3720320139"
"m4_214" = "1985029406"
"m4_213" = "249738673"
"m4_212" = "2809415236"
"m4_211" = "1074124503"
"m4_210" = "3633801066"
"m4_693" = "4260602385"
"m4_692" = "2525311652"
"m4_691" = "790020919"
"m4_690" = "3349697482"
"m4_697" = "2611830725"
"m4_696" = "876539992"
"m4_695" = "3436216555"
"m4_694" = "1700925822"
"m2_966" = "1253600801"
"m4_699" = "1787444895"
"m4_698" = "52154162"
"m4_937" = "2469778933"
"m4_563" = "2011106487"
"m3_409" = "1047752460"
"m2_796" = "2606916184"
"m1_407" = "3607697710"
"m1_406" = "2577970773"
"m1_405" = "2179178506"
"m1_404" = "696325236"
"m1_403" = "3874790114"
"m1_402" = "749929037"
"m1_401" = "2943014153"
"m1_400" = "2579756322"
"m1_409" = "3575015007"
"m1_408" = "2358787257"
"m2_332" = "590910104"
"m2_333" = "2326192643"
"m2_330" = "1415298029"
"m2_331" = "3150578379"
"m2_336" = "3237095081"
"m2_337" = "677428448"
"m2_334" = "4061493810"
"m2_335" = "1501817449"
"m2_848" = "2647722498"
"m2_849" = "88059319"
"m2_338" = "2412711852"
"m2_339" = "4148010611"
"m4_859" = "261087935"
"m4_858" = "2820764498"
"m2_206" = "987607342"
"m2_207" = "2722890182"
"m2_204" = "1811993528"
"m2_205" = "3547278564"
"m2_202" = "2636379334"
"m2_203" = "76696310"
"m2_200" = "3460765999"
"m2_201" = "901082939"
"m1_660" = "2639432750"
"m4_935" = "3294164763"
"m2_208" = "163224286"
"m2_209" = "1898505798"
"m1_937" = "4262361671"
"m3_197" = "2532889800"
"m3_196" = "831399261"
[HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings]
"MigrateProxy" = "1"
[HKCU\Software\Stvncyfrlda]
"m2_853" = "2734246103"
"m1_667" = "3230704438"
"m3_195" = "3357379118"
"m3_834" = "4106513203"
"m3_835" = "1547049646"
"m1_539" = "2390028329"
"m3_194" = "1622350515"
"m3_830" = "1494100303"
"m3_831" = "3195590906"
"m3_832" = "669599849"
"m3_833" = "2405170052"
"m1_533" = "2347127363"
"m3_193" = "4215368452"
"m1_531" = "2419988650"
"m1_530" = "1098058267"
"m1_537" = "3531993627"
"m1_536" = "528966277"
"m1_535" = "3355858365"
"m3_192" = "2479946729"
"m3_948" = "100136333"
"m2_475" = "3924335349"
"m3_191" = "711346298"
"m1_629" = "3010956172"
"m2_474" = "2189056870"
"m1_627" = "4063543877"
"m1_626" = "1896977209"
"m1_625" = "4273566422"
"m3_190" = "3270891727"
"m1_623" = "1491078648"
"m1_622" = "821279341"
"m1_621" = "3748076597"
"m1_620" = "3407986130"
"m2_740" = "4214882662"
"m1_870" = "2854520604"
"m2_851" = "3558635343"
"m1_665" = "2426875295"
[HKLM\SOFTWARE\JavaSoft\Java Update\Policy]
"LastUDCheckTime" = "Mon, 27 Jan 2014 22:46:53 GMT"
[HKCU\Software\Stvncyfrlda]
"m3_836" = "3315643869"
"m2_141" = "4157817267"
"m2_140" = "2422536737"
"m2_143" = "3333432491"
"m2_142" = "1598150492"
"m2_145" = "2509048080"
"m2_144" = "773764237"
"m2_147" = "1684661953"
"m2_146" = "4244346310"
"m2_149" = "860275004"
"m2_148" = "3419962374"
"m1_753" = "368654068"
"m4_657" = "1919678141"
"m1_751" = "322448563"
"m1_750" = "310303008"
"m1_664" = "3672764675"
"m1_756" = "4103315759"
"m1_755" = "3324353469"
"m4_656" = "184387408"
"m2_479" = "2275569586"
"m1_759" = "2319586575"
"m1_758" = "3237743770"
"m4_655" = "2744063971"
"m2_478" = "540285330"
"m3_935" = "3311115570"
"m4_654" = "1008773238"
"m2_958" = "256174835"
"m1_532" = "3358136045"
"m4_653" = "3568449801"
"m4_652" = "1833159068"
"m2_857" = "1085478556"
"m4_651" = "97868335"
"m1_936" = "1131080532"
"m3_838" = "2458113255"
"m4_650" = "2657544898"
"m3_839" = "4226565138"
"m2_670" = "3003615790"
"m1_534" = "1198293883"
"m2_856" = "3645148172"
"m3_949" = "1835033912"
"m3_687" = "2422108074"
"m3_686" = "686685247"
"m3_858" = "2837584251"
"m3_685" = "3280161920"
"m3_643" = "3412243694"
"m3_684" = "1511185685"
"m2_846" = "3472105695"
"m2_855" = "1909865299"
"m1_628" = "3772215318"
"m3_519" = "2984284114"
"m3_940" = "3363982869"
"m3_518" = "1215700135"
"m2_964" = "2077983752"
"m3_941" = "837613952"
"m4_491" = "1624225295"
"m2_854" = "174559316"
"m3_942" = "2573035839"
"m1_182" = "2626696711"
"m1_183" = "669325774"
"m1_180" = "3312259090"
"m1_181" = "3446116959"
"m1_186" = "493980046"
"m1_187" = "2995115206"
"m1_184" = "2103765734"
"m1_185" = "2899195036"
"m3_944" = "1715047385"
"m1_188" = "2443649111"
"m1_189" = "4268982770"
"m3_759" = "2842637826"
"m3_946" = "924101347"
"m2_459" = "1929502686"
"m2_458" = "194203441"
"m2_457" = "2753884204"
"m2_456" = "1018585406"
"m2_455" = "3578272983"
"m2_454" = "1842974246"
"m2_453" = "107690147"
"m2_452" = "2667358547"
"m2_451" = "932077180"
"m2_450" = "3491745546"
"m3_517" = "3808718088"
"m3_758" = "1107199639"
"m3_516" = "2073820573"
"m1_344" = "457222981"
"m1_345" = "4101505175"
"m1_346" = "4004148196"
"m1_347" = "1751446253"
"m1_340" = "320386682"
"m1_341" = "1369391864"
"m1_342" = "3173035986"
"m1_343" = "1243709621"
"m1_348" = "934314307"
"m1_349" = "2085249014"
"m1_296" = "4007209921"
"m1_297" = "1502564302"
"m1_294" = "2058621044"
"m1_295" = "3905963306"
"m1_292" = "352398673"
"m1_293" = "2691612538"
"m1_290" = "269793889"
"m1_291" = "4130915420"
"m3_232" = "3172438241"
"m3_233" = "578813980"
"m3_230" = "3963318727"
"m3_231" = "1436934514"
"m3_236" = "1489883733"
"m3_237" = "3225308608"
"m1_298" = "165057624"
"m1_299" = "617682725"
"m3_308" = "1910334733"
"m3_309" = "3645838520"
"m3_306" = "2734840419"
"m3_307" = "141358494"
"m3_304" = "3525786457"
"m3_305" = "999402228"
"m3_302" = "88348863"
"m3_303" = "1790347306"
"m3_300" = "879360405"
"m3_301" = "2648336640"
"m4_12" = "3643619612"
"m4_13" = "1083943049"
"m4_10" = "173038146"
"m4_11" = "1908328879"
"m4_16" = "1994847952"
"m4_17" = "3730138685"
"m4_14" = "2819233782"
"m4_15" = "259557219"
"m4_18" = "1170462122"
"m4_19" = "2905752855"
"m4_447" = "2580844371"
"m4_784" = "3258269136"
"m3_544" = "3417288073"
"m3_545" = "857234724"
"m3_546" = "2559233107"
"m3_547" = "33259470"
"m3_540" = "770728901"
"m3_541" = "2506232688"
"m3_542" = "4207706863"
"m3_543" = "1648177690"
"m3_548" = "1768288125"
"m3_549" = "3470237416"
"m3_782" = "4066063583"
"m3_783" = "1539679306"
"m3_780" = "628681269"
"m3_781" = "2330625440"
"m4_198" = "4285148750"
"m4_199" = "1725472187"
"m4_448" = "21167808"
"m4_449" = "1756458541"
"m4_194" = "1638953114"
"m4_195" = "3374243847"
"m4_196" = "814567284"
"m4_197" = "2549858017"
"m4_190" = "3287724774"
"m4_191" = "728048211"
"m4_192" = "2463338944"
"m4_193" = "4198629677"
"m3_496" = "1693747481"
"m3_497" = "3429185716"
"m3_494" = "2518183551"
"m3_495" = "4287240682"
"m3_492" = "3376238421"
"m3_493" = "783285952"
"m3_490" = "4167183499"
"m3_491" = "1640815654"
"m3_498" = "903325731"
"m3_499" = "2638240606"
"m2_967" = "2988897209"
"m4_222" = "2982453382"
"m4_223" = "422776819"
"m1_79" = "1632855576"
"m1_78" = "1245250952"
"m4_226" = "1333681722"
"m4_227" = "3068972455"
"m4_224" = "2158067552"
"m4_225" = "3893358285"
"m1_73" = "1833883758"
"m1_72" = "1267736086"
"m1_71" = "731589998"
"m1_70" = "995887349"
"m1_77" = "3519963402"
"m1_76" = "4223080007"
"m1_75" = "773507648"
"m1_74" = "4059875632"
"m3_166" = "278866567"
"m3_167" = "2013911602"
"m3_164" = "1136397309"
"m3_165" = "2871966568"
"m3_162" = "1927407827"
"m3_163" = "3662911566"
"m3_160" = "2751909385"
"m3_161" = "225933732"
"m2_927" = "2296735773"
"m2_926" = "561457548"
"m2_925" = "3121122872"
"m2_924" = "1385838955"
"m2_923" = "3945508706"
"m2_922" = "2210225671"
"m3_168" = "3782899105"
"m3_169" = "1189405916"
"m3_641" = "4203189700"
[HKCU\Software\Microsoft\Windows\CurrentVersion\Explorer\Advanced]
"Hidden" = "2"
[HKCU\Software\Stvncyfrlda]
"m2_904" = "1039756950"
"m2_965" = "3813285290"
"m4_806" = "2779959598"
"m4_444" = "1669939468"
"m1_438" = "3087943074"
"m1_439" = "1223934047"
"m1_894" = "1439394025"
"m1_432" = "153740083"
"m1_433" = "2833730630"
"m1_430" = "2076153248"
"m1_431" = "1909640654"
"m1_436" = "4013210610"
"m1_437" = "717310061"
"m1_434" = "1465957797"
"m1_435" = "2142676804"
"m3_35" = "622481870"
"m3_34" = "3182011987"
"m3_37" = "4092948712"
"m3_36" = "2323956093"
"m3_31" = "2270958618"
"m3_30" = "535979247"
"m3_33" = "1413429028"
"m3_32" = "3972958089"
"m4_807" = "220283035"
"m2_858" = "2820761037"
"m3_39" = "3234960306"
"m3_38" = "1533534215"
"m4_538" = "1578511122"
"m4_539" = "3313801855"
"m2_219" = "2071545750"
"m2_218" = "336261976"
"m1_752" = "2800430091"
"m2_211" = "1074120507"
"m2_210" = "3633804244"
"m2_213" = "249737061"
"m2_212" = "2809421480"
"m2_215" = "3720317226"
"m2_214" = "1985035727"
"m2_217" = "2895929889"
"m2_216" = "1160652338"
"m4_804" = "3604345428"
"m1_757" = "2114868771"
"m3_636" = "4150245605"
"m3_637" = "1556621328"
"m1_933" = "2675644155"
"m1_754" = "872170417"
"m3_634" = "645700059"
"m3_827" = "549625654"
"m3_826" = "3142643611"
"m3_825" = "1407614060"
"m3_635" = "2414676342"
"m3_823" = "2232114498"
"m3_822" = "496676311"
"m1_508" = "1073863711"
"m1_509" = "915991479"
"m1_506" = "1285815815"
"m1_507" = "3476909265"
"m1_504" = "186217810"
"m1_505" = "2397947584"
"m1_502" = "1269044645"
"m1_503" = "3146557410"
"m1_500" = "2520384921"
"m1_501" = "4274081688"
"m1_960" = "1296046740"
"m3_959" = "2008023930"
"m3_958" = "239571919"
"m3_630" = "2294635543"
"m3_953" = "186623724"
"m3_952" = "2746038129"
"m3_951" = "977045442"
"m3_631" = "4030189442"
"m3_957" = "2799034448"
"m3_956" = "1097560357"
"m3_955" = "3657089462"
"m3_954" = "1887983131"
"m2_817" = "393317993"
"m2_816" = "2953001392"
"m1_872" = "3711719297"
"m4_761" = "2001287941"
"m2_907" = "1950670134"
"m2_852" = "998952164"
"m2_134" = "600723256"
"m2_135" = "2336019371"
"m2_136" = "4071303131"
"m2_137" = "1511634111"
"m2_130" = "2249491306"
"m2_131" = "3984789867"
"m2_132" = "1425108956"
"m2_133" = "3160405150"
"m1_618" = "1404660892"
"m1_619" = "537731654"
"m2_138" = "3246915637"
"m2_139" = "687250003"
"m1_766" = "2384753306"
"m1_767" = "3114113314"
"m1_764" = "2878451006"
"m3_716" = "1239207669"
"m1_762" = "3973602049"
"m1_763" = "1344415418"
"m1_760" = "1689108991"
"m1_761" = "738169604"
"m3_711" = "1119100306"
[HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Internet Settings\Cache\Paths\path4]
"CacheLimit" = "65452"
[HKCU\Software\Stvncyfrlda]
"m3_710" = "3712639591"
"m2_842" = "825912211"
"m3_713" = "328678588"
"m2_318" = "2066643637"
"m3_712" = "2854653185"
"m2_319" = "3801926026"
"m4_879" = "607164227"
"m4_878" = "3166840790"
"m2_843" = "2561212013"
"m2_688" = "4174078199"
"m2_689" = "1614411245"
"m4_876" = "3991226620"
"m2_682" = "2352267305"
"m2_683" = "4087566775"
"m2_680" = "3176655492"
"m2_681" = "616982255"
"m2_686" = "703497009"
"m2_316" = "2891027281"
"m2_684" = "1527883071"
"m2_685" = "3263183351"
"m2_317" = "331344504"
[HKLM\System\CurrentControlSet\Hardware Profiles\0001\Software\Microsoft\windows\CurrentVersion\Internet Settings]
"ProxyEnable" = "0"
[HKCU\Software\Stvncyfrlda]
"m2_598" = "2616745746"
"m2_599" = "57060073"
"m2_596" = "3441129588"
"m2_597" = "881443052"
"m2_594" = "4265513500"
"m2_595" = "1705829258"
"m2_592" = "794933903"
"m2_593" = "2530216842"
"m2_590" = "1619320703"
"m2_591" = "3354600990"
"m4_871" = "3904707547"
"m1_955" = "3586718915"
"m1_874" = "4127229017"
"m4_870" = "2169416814"
"m3_729" = "2289575756"
"m2_845" = "1736825609"
"m1_873" = "3443919322"
"m2_906" = "215380488"
"m1_195" = "1921851870"
"m1_194" = "1322973216"
"m1_197" = "2032663519"
"m1_196" = "2270543560"
"m1_191" = "3877658117"
"m1_190" = "3059478707"
"m1_193" = "730555038"
"m1_192" = "3373297075"
"m2_468" = "367242145"
"m2_469" = "2102538401"
"m1_199" = "3831983580"
"m1_198" = "3706498303"
"m3_829" = "4053645776"
"m2_660" = "2830586152"
"m2_661" = "270902928"
"m2_662" = "2006202180"
"m2_663" = "3741486973"
"m2_664" = "1181817820"
"m2_665" = "2917101097"
"m2_666" = "357431974"
"m2_667" = "2092714883"
"m2_668" = "3828014898"
"m2_669" = "1268332434"
"m2_847" = "912437736"
"m4_877" = "1431550057"
"m1_357" = "2873542511"
"m1_356" = "746174506"
"m1_355" = "2168217597"
"m1_354" = "1366038433"
"m1_353" = "1033296368"
"m1_352" = "164625189"
"m1_351" = "3828718108"
"m1_350" = "1080008376"
"m1_359" = "4224228626"
"m1_358" = "2936446884"
"m1_647" = "3774016308"
"m1_289" = "1425405622"
"m1_288" = "3888092706"
"m3_229" = "2227881640"
"m3_228" = "525883197"
"m1_281" = "2517883409"
"m1_280" = "3375544173"
"m3_227" = "3085936526"
"m3_226" = "1316828179"
"m1_285" = "3544083735"
"m1_284" = "234341718"
"m3_223" = "405824986"
"m3_222" = "2965883567"
"m1_380" = "4283823831"
"m3_520" = "424755009"
"m1_381" = "3465995075"
[HKCU\Software\JavaSoft\Java Update\Policy]
"VersionXmlURL" = "http://javadl-esd.sun.com/update/1.7.0/au-descriptor-1.7.0_51-b13.xml"
[HKCU\Software\Stvncyfrlda]
"m4_924" = "1385835884"
"m1_382" = "927119049"
"m1_383" = "2317136648"
"m1_384" = "2132691899"
"m2_921" = "474924445"
"m1_385" = "1899902608"
"m1_386" = "935699488"
"m1_387" = "1115496856"
"m3_311" = "2787784514"
"m3_310" = "1052346327"
"m3_313" = "1996838508"
"m3_312" = "261400305"
"m3_315" = "1172336950"
"m3_314" = "3698835867"
"m3_317" = "314348496"
"m3_316" = "2907889829"
"m3_319" = "3818894074"
"m3_318" = "2049770319"
"m2_850" = "1823335117"
"m4_451" = "932072711"
"m2_255" = "117500443"
"m4_453" = "107686881"
"m4_452" = "2667363444"
"m4_455" = "3578268347"
"m4_454" = "1842977614"
"m4_457" = "2753882517"
"m2_254" = "2677185494"
"m4_459" = "1929496687"
"m4_458" = "194205954"
"m3_559" = "3676710186"
"m3_558" = "1941288383"
"m3_795" = "855076182"
"m3_794" = "3448173115"
"m3_797" = "64195696"
"m3_796" = "2590055621"
"m3_791" = "2537104354"
"m3_790" = "801681527"
"m4_189" = "1552434041"
"m4_188" = "4112110604"
"m4_187" = "2376819871"
"m4_186" = "641529138"
"m4_185" = "3201205701"
"m4_184" = "1465914968"
"m4_183" = "4025591531"
"m4_182" = "2290300798"
"m4_181" = "555010065"
"m4_180" = "3114686628"
"m3_489" = "2431761692"
"m3_401" = "50324372"
"m1_3" = "2035562256"
"m3_400" = "2643292281"
"m3_481" = "1467757028"
"m3_480" = "3994256969"
"m3_483" = "610226318"
"m1_2" = "3693772204"
"m3_485" = "4114248616"
"m3_403" = "3554280126"
"m3_487" = "3256259186"
"m3_486" = "1520755399"
"m3_402" = "1785303811"
"m3_405" = "2696228184"
"m3_404" = "994357805"
"m1_68" = "3041682415"
"m1_69" = "1785863686"
"m4_237" = "3242010601"
"m4_236" = "1506719868"
"m4_231" = "1420200795"
"m4_230" = "3979877358"
"m4_233" = "595814965"
"m4_232" = "3155491528"
"m1_60" = "2507635706"
"m2_259" = "2763694704"
"m1_62" = "3446994907"
"m1_63" = "3355575436"
"m1_64" = "3748565745"
"m1_65" = "686126480"
"m1_66" = "1178319215"
"m1_67" = "113474652"
"m3_179" = "1395950366"
"m3_178" = "3955889123"
"m3_408" = "3640852369"
"m3_171" = "398919654"
"m3_170" = "2924909643"
"m3_173" = "3835831936"
"m3_172" = "2133964565"
"m3_175" = "3044884906"
"m3_174" = "1275909695"
"m3_177" = "2186829940"
"m3_176" = "451932377"
"m4_835" = "1563783303"
"m3_856" = "3628596817"
"m3_566" = "2938712279"
"m3_908" = "3668991157"
"m3_567" = "345743426"
"m2_920" = "3034598002"
"m1_948" = "725580591"
"m2_836" = "3299068829"
"m1_949" = "1482368831"
"m3_857" = "1102080460"
"m1_429" = "1651281045"
"m1_428" = "3992588627"
"m3_769" = "3015695428"
"m1_425" = "2854984443"
"m1_424" = "1556352481"
"m1_427" = "740274585"
"m1_426" = "1950268075"
"m1_421" = "3657624562"
"m1_420" = "4110329509"
"m1_423" = "695803247"
"m1_422" = "1284497436"
"m3_22" = "3799972215"
"m3_23" = "1273981154"
"m3_20" = "363060909"
"m3_21" = "2097957336"
"m3_26" = "2150906683"
"m3_27" = "3920013910"
"m3_24" = "3008960529"
"m3_25" = "415992716"
"m4_521" = "2143339733"
"m4_520" = "408049000"
"m3_28" = "1360479685"
"m3_29" = "3061970288"
"m4_525" = "494568073"
"m4_524" = "3054244636"
"m4_527" = "3965149539"
"m4_526" = "2229858806"
"m2_268" = "1201453222"
"m2_269" = "2936737293"
"m2_264" = "2850222982"
"m2_265" = "290541038"
"m2_266" = "2025840468"
"m2_267" = "3761123186"
"m2_260" = "204027360"
"m2_261" = "1939312390"
"m2_262" = "3674610857"
"m2_263" = "1114925627"
"m3_760" = "249143729"
"m4_875" = "2255935887"
"m3_851" = "3575582078"
"m1_511" = "994039589"
"m1_510" = "2211884154"
"m1_513" = "2187474491"
"m1_512" = "273727017"
"m1_515" = "2435658050"
"m1_514" = "3970005429"
"m1_517" = "2151730079"
"m1_516" = "2808278938"
"m1_519" = "1028167240"
"m1_518" = "3798136914"
"m3_818" = "2145607779"
"m3_819" = "3880588190"
"m2_493" = "799848444"
"m3_813" = "2025109248"
"m3_810" = "1114629323"
"m3_811" = "2883163238"
"m3_816" = "2969583961"
"m3_817" = "376631540"
"m3_814" = "3760531135"
"m3_815" = "1234687530"
"m3_966" = "1270554471"
"m3_967" = "3005582994"
"m3_964" = "2061040733"
"m3_965" = "3796463560"
"m3_962" = "2919095731"
"m3_963" = "359550254"
"m3_960" = "3743593193"
"m3_961" = "1150493188"
"m2_492" = "3359520952"
"m3_853" = "2751081496"
"m2_818" = "2128613954"
"m4_830" = "1477264230"
"m2_127" = "1338596807"
"m2_126" = "3898263800"
"m2_125" = "2162982495"
"m2_124" = "427680017"
"m2_123" = "2987365081"
"m2_122" = "1252066193"
"m2_121" = "3811753193"
"m2_120" = "2076451071"
"m4_925" = "3121126617"
"m1_609" = "1658662192"
"m1_608" = "1603782089"
"m2_129" = "514208132"
"m2_128" = "3073877443"
"m1_779" = "1246035156"
"m1_778" = "978144358"
"m4_837" = "739397473"
"m1_771" = "3547752244"
"m1_770" = "3607489124"
"m1_773" = "2068689492"
"m1_772" = "2374842062"
"m1_775" = "2295190343"
"m4_441" = "759034565"
"m1_777" = "4224840030"
"m1_776" = "1475368705"
"m2_490" = "4183905748"
"m1_793" = "1970409497"
"m1_792" = "2215841870"
"m4_836" = "3299074036"
"m1_790" = "3917267426"
"m2_497" = "3446032729"
"m2_939" = "1645389403"
"m2_699" = "1787440119"
"m2_698" = "52156606"
"m2_695" = "3436220751"
"m2_694" = "1700922730"
"m2_697" = "2611826431"
"m2_696" = "876537936"
"m2_691" = "790024916"
"m2_690" = "3349693869"
"m2_693" = "4260607232"
"m2_692" = "2525308055"
[HKLM\SOFTWARE\Microsoft\Security Center\Svc]
"UacDisableNotify" = "1"
[HKCU\Software\Stvncyfrlda]
"m1_799" = "2369860672"
"m1_798" = "2112199916"
"m4_834" = "4123459866"
"m1_885" = "232027754"
"m2_581" = "3181572341"
"m2_580" = "1446275950"
"m2_583" = "2357188785"
"m2_582" = "621887639"
"m2_585" = "1532803047"
"m2_584" = "4092472266"
"m2_587" = "708406011"
"m2_586" = "3268089403"
"m2_589" = "4178988545"
"m2_588" = "2443705211"
"m1_168" = "3593961792"
"m1_169" = "1937476846"
"m2_477" = "3099954035"
"m2_476" = "1364671050"
"m2_471" = "1278154745"
"m2_470" = "3837821279"
"m2_473" = "453768789"
"m2_472" = "3013436818"
"m1_160" = "53775625"
"m1_161" = "3081626161"
"m1_162" = "3299602094"
"m1_163" = "3844153328"
"m1_164" = "2373581449"
"m1_165" = "793549451"
"m1_166" = "2281272260"
"m1_167" = "1013543989"
"m2_673" = "3914527977"
"m2_672" = "2179229916"
"m2_671" = "443947802"
"m3_666" = "340691899"
"m2_677" = "2265759433"
"m2_676" = "530460040"
"m2_675" = "3090142395"
"m2_674" = "1354846174"
"m3_661" = "287759960"
"m2_679" = "1441373662"
"m2_678" = "4001040082"
"m3_660" = "2847158061"
"m3_752" = "3580115481"
"m3_663" = "3724671330"
"m3_662" = "1989626359"
"m1_368" = "783742211"
"m1_369" = "2712319855"
"m1_362" = "1352919412"
"m1_363" = "76645337"
"m1_360" = "3247282273"
"m1_361" = "1488962449"
"m1_366" = "70013098"
"m1_367" = "586773757"
"m1_364" = "2449445779"
"m1_365" = "4001525016"
"m2_909" = "1126270639"
"m3_689" = "1631227508"
"m3_668" = "3844713029"
"m3_950" = "3536983127"
"m3_688" = "4190641881"
"m1_641" = "729983781"
"m3_743" = "814092146"
"m1_640" = "334752250"
"m1_643" = "301305716"
"m1_642" = "1248727052"
"m1_645" = "835711007"
"m1_644" = "2671979078"
"m3_364" = "268764373"
"m3_365" = "2037888064"
"m3_366" = "3739232255"
"m3_367" = "1179834218"
"m3_360" = "1917836129"
"m3_361" = "3686288028"
"m3_362" = "1126889995"
"m3_363" = "2828309926"
"m1_388" = "324622235"
"m1_389" = "1263766428"
"m1_646" = "910047157"
"m3_368" = "2948810393"
"m3_369" = "388888116"
"m4_424" = "1323863176"
"m4_425" = "3059153909"
"m4_426" = "499477346"
"m4_427" = "2234768079"
"m4_420" = "2972634836"
"m4_421" = "412958273"
"m4_422" = "2148249006"
[HKCU\Software\Microsoft\Windows\CurrentVersion\Explorer\Shell Folders]
"History" = "%Documents and Settings%\%current user%\Local Settings\History"
[HKCU\Software\Stvncyfrlda]
"m3_562" = "292812643"
"m4_323" = "2153158279"
"m3_560" = "1083233369"
"m3_561" = "2818656244"
"m4_428" = "3970058812"
"m4_429" = "1410382249"
"m3_564" = "3729659405"
"m3_565" = "1203274168"
"m3_768" = "1246571817"
[HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Internet Settings\Cache\Paths]
"Paths" = "4"
[HKCU\Software\Stvncyfrlda]
"m2_938" = "4205072758"
"m4_736" = "1568692576"
"m3_755" = "196211806"
"m3_761" = "1984581932"
"m3_762" = "3753164891"
"m4_737" = "3303983309"
"m3_764" = "2895635301"
"m3_765" = "335647376"
"m3_766" = "2104623631"
"m3_767" = "3806117306"
"m2_959" = "1991472864"
"m1_935" = "1959534414"
"m4_423" = "3883539739"
"m1_55" = "2901277556"
"m1_54" = "1311076268"
"m1_57" = "381977595"
"m1_56" = "2991547286"
"m1_51" = "364369122"
"m1_50" = "3057511480"
"m1_53" = "3372239403"
"m1_52" = "489302866"
"m1_59" = "3641444460"
"m1_58" = "3138808591"
"m4_738" = "744306746"
"m4_739" = "2479597479"
"m3_108" = "2744413141"
"m3_109" = "184949568"
"m3_104" = "98446945"
"m3_105" = "1833490844"
"m3_106" = "3535358219"
"m3_107" = "975960230"
"m3_100" = "1713433789"
"m3_101" = "3482491944"
"m3_102" = "922947399"
"m3_103" = "2624438002"
"m3_580" = "1463228637"
"m3_581" = "3164702792"
"m3_582" = "605174759"
"m3_583" = "2373757714"
"m3_584" = "4075641473"
"m3_585" = "1516227132"
"m3_586" = "3284690347"
"m3_587" = "725226694"
"m3_588" = "2426700917"
"m3_589" = "4162140128"
"m2_811" = "2866471195"
"m3_610" = "1948707731"
"m3_611" = "3717241614"
"m3_612" = "1157696189"
"m3_613" = "2859711016"
"m4_558" = "1924587414"
"m4_559" = "3659878147"
"m3_616" = "3770643553"
"m3_617" = "1210705820"
"m4_554" = "3573359074"
"m4_555" = "1013682511"
"m4_556" = "2748973244"
"m4_557" = "189296681"
"m4_550" = "927163438"
"m4_551" = "2662454171"
"m4_552" = "102777608"
"m4_553" = "1838068341"
"m4_950" = "3553721982"
"m1_821" = "551699427"
"m4_952" = "2729336152"
"m4_953" = "169659589"
"m4_954" = "1904950322"
"m4_955" = "3640241055"
"m2_279" = "3109781375"
"m2_278" = "1374491079"
"m2_277" = "3934160928"
"m2_276" = "2198877300"
"m2_275" = "463577195"
"m2_274" = "3023263629"
"m2_273" = "1287964097"
"m2_272" = "3847648039"
"m2_271" = "2112351375"
"m2_270" = "377065834"
"m3_421" = "429806696"
"m1_824" = "481374134"
"m1_564" = "1590194977"
"m1_565" = "2066248992"
"m1_566" = "1133384099"
"m1_567" = "1561584802"
"m1_560" = "702856555"
"m1_561" = "3771017318"
"m1_562" = "3255846719"
"m1_563" = "4271915529"
"m1_826" = "1416738936"
"m1_568" = "3345760029"
"m1_569" = "3673683967"
"m3_809" = "3674043740"
"m3_808" = "1972165153"
"m3_805" = "1061620712"
"m3_804" = "3621165181"
"m3_807" = "203565746"
"m3_806" = "2763111175"
"m3_801" = "2710162980"
"m3_800" = "941579913"
"m3_803" = "1852106958"
"m3_802" = "117078355"
"m3_238" = "698940799"
"m2_118" = "2900838681"
"m3_239" = "2434362602"
"m2_112" = "1079027829"
"m2_113" = "2814327913"
"m2_110" = "1903425624"
"m2_111" = "3638714017"
"m2_116" = "3725224920"
"m2_117" = "1165556672"
"m2_114" = "254642436"
"m2_115" = "1989940045"
"m1_708" = "1879124425"
"m1_709" = "1045206244"
"m1_704" = "133574269"
"m1_705" = "1570505449"
"m1_706" = "970258768"
"m1_707" = "3175905981"
"m1_700" = "3895641725"
"m1_701" = "384902695"
"m1_702" = "4072932951"
"m1_703" = "3210907624"
"m1_865" = "971348073"
"m2_879" = "607162278"
"m2_878" = "3166843274"
"m4_927" = "2296740787"
"m1_914" = "2866513"
"m4_926" = "561450054"
"m3_234" = "2347938699"
"m3_614" = "333206855"
"m3_235" = "4083360550"
"m3_615" = "2068759794"
"m3_864" = "364602825"
"m4_888" = "3339878936"
"m4_889" = "780202373"
"m3_618" = "2979763979"
"m3_619" = "419694246"
"m2_873" = "3080315105"
"m2_872" = "1345034285"
"m2_875" = "2255931089"
"m2_874" = "520646815"
"m3_947" = "2625985054"
"m2_877" = "1431547076"
"m2_876" = "3991229087"
"m2_488" = "713325660"
"m2_489" = "2448611971"
"m1_179" = "3838060642"
"m1_178" = "2698784402"
"m4_818" = "2128611914"
"m1_173" = "353506323"
"m1_172" = "14453873"
"m1_171" = "1049731512"
"m1_170" = "3344260883"
"m1_177" = "3219125406"
"m1_176" = "4022721835"
"m1_175" = "455869399"
"m1_174" = "2270094201"
"m2_646" = "11351066"
"m2_647" = "1746636349"
"m2_644" = "835736800"
"m2_645" = "2571019470"
"m2_642" = "1660123304"
"m2_643" = "3395403901"
"m2_640" = "2484505540"
"m2_641" = "4219791754"
"m1_9" = "3368031209"
"m2_648" = "3481932982"
"m2_649" = "922251090"
"m4_956" = "1080564492"
"m4_218" = "336257746"
"m4_957" = "2815855225"
"m4_958" = "256178662"
"m1_379" = "2580546604"
"m1_378" = "2917391240"
"m4_810" = "1131187938"
"m1_375" = "3085509474"
"m1_8" = "3649803068"
"m1_377" = "2027467509"
"m1_376" = "3228817259"
"m1_371" = "736764312"
"m1_370" = "1858573233"
"m1_373" = "1775381670"
"m1_372" = "2533102347"
"m4_812" = "306802108"
"m2_823" = "2215128817"
"m4_817" = "393321181"
"m3_699" = "1804162230"
"m4_566" = "2922011390"
"m3_943" = "4274985130"
"m4_951" = "994045419"
"m3_377" = "1352760748"
"m3_376" = "3945841201"
"m3_375" = "2210812546"
"m3_374" = "441819927"
"m3_373" = "3001758712"
"m3_372" = "1299873869"
"m3_371" = "3825733854"
"m3_370" = "2090754467"
"m1_399" = "142241881"
"m1_398" = "584708098"
"m3_379" = "561880182"
"m3_378" = "3088313563"
"m4_437" = "2407806225"
"m4_436" = "672515492"
[HKCU\Software\Microsoft\Windows\CurrentVersion\Explorer\Shell Folders]
"Cookies" = "%Documents and Settings%\%current user%\Cookies"
[HKCU\Software\Stvncyfrlda]
"m4_434" = "1496901322"
"m4_433" = "4056577885"
"m4_432" = "2321287152"
"m4_431" = "585996419"
"m4_430" = "3145672982"
"m3_575" = "1343172602"
"m3_574" = "3902717007"
"m3_577" = "518672004"
"m3_576" = "3111772009"
"m3_571" = "2991710774"
"m3_570" = "1256682139"
"m4_439" = "1583420395"
"m4_438" = "4143096958"
"m4_959" = "1991469395"
"m3_779" = "3155065478"
"m3_778" = "1419627371"
"m3_773" = "1366629896"
"m3_772" = "3893063325"
"m3_771" = "2157641582"
"m3_770" = "455626739"
"m3_777" = "4013120508"
"m3_776" = "2277681217"
"m3_775" = "508573906"
"m3_774" = "3068627367"
"m3_945" = "3484040052"
"m2_898" = "3512911951"
"m1_966" = "1474685200"
"m1_689" = "3211862284"
"m1_688" = "2933570101"
[HKLM\SOFTWARE\Microsoft\Cryptography\RNG]
"Seed" = "CE 08 9A 73 5F FA 8F 1A DB 23 FE 05 25 54 09 1B"
[HKCU\Software\Stvncyfrlda]
"m1_43" = "464748342"
"m1_40" = "3113118145"
"m1_41" = "3357288137"
"m1_46" = "2684095276"
"m1_47" = "3139056726"
"m1_44" = "1760477672"
"m1_45" = "2053934926"
"m1_48" = "3870156993"
"m1_49" = "2013986012"
"m1_917" = "1018728048"
"m4_729" = "2306559333"
"m4_728" = "571268600"
"m3_119" = "357998978"
"m3_118" = "2917414423"
"m3_117" = "1148946168"
"m3_116" = "3741914957"
"m3_115" = "2006935518"
"m3_114" = "237958307"
"m3_113" = "2797356340"
"m3_112" = "1096013209"
"m3_111" = "3655416426"
"m3_110" = "1886423807"
"m3_593" = "2547216724"
"m3_592" = "778225209"
"m3_591" = "3337639562"
"m3_590" = "1636280095"
"m3_597" = "898282264"
"m3_596" = "3424125933"
"m3_595" = "1689227390"
"m3_594" = "4282245315"
"m1_681" = "1529900014"
"m2_95" = "1643855883"
"m3_598" = "2600149687"
"m1_680" = "3375989726"
[HKCU\Software\Microsoft\Windows\CurrentVersion\Explorer\Shell Folders]
"AppData" = "%Documents and Settings%\%current user%\Application Data"
[HKCU\Software\Stvncyfrlda]
"m1_682" = "1147728083"
"m4_891" = "4250783839"
"m4_890" = "2515493106"
"m4_893" = "3426398009"
"m4_892" = "1691107276"
"m4_895" = "2602012179"
"m4_894" = "866721446"
"m4_897" = "1777626349"
"m4_896" = "42335616"
"m4_899" = "953240519"
"m4_898" = "3512917082"
"m1_918" = "3271728347"
"m3_603" = "2686656406"
"m3_602" = "951151739"
"m3_601" = "3544251596"
"m3_600" = "1809206609"
"m3_607" = "1071208794"
"m3_606" = "3597184559"
"m4_549" = "3486840001"
"m4_548" = "1751549268"
"m4_547" = "16258535"
"m4_546" = "2575935098"
"m4_545" = "840644365"
"m4_544" = "3400320928"
"m4_543" = "1665030195"
"m4_542" = "4224706758"
"m4_541" = "2489416025"
"m4_540" = "754125292"
"m4_943" = "4291588739"
"m4_767" = "3823097747"
"m4_941" = "821007273"
"m4_940" = "3380683836"
"m4_947" = "2642817079"
"m4_946" = "907526346"
"m4_945" = "3467202909"
"m4_766" = "2087807014"
"m4_949" = "1818431249"
"m4_948" = "83140516"
"m4_765" = "352516281"
"m4_764" = "2912192844"
"m4_763" = "1176902111"
"m4_762" = "3736578674"
"m1_576" = "1952132229"
"m1_575" = "4258336538"
"m1_574" = "3964412929"
"m1_573" = "465242051"
"m1_572" = "3390735811"
"m1_571" = "4040625782"
"m1_570" = "1076055555"
"m3_692" = "2542164109"
"m4_760" = "265997208"
"m1_579" = "1533492282"
"m1_578" = "2890091434"
"m2_242" = "3328525022"
"m2_243" = "768858782"
"m2_89" = "4117013970"
"m2_241" = "1593243561"
"m2_246" = "1679755092"
"m2_247" = "3415053339"
"m2_244" = "2504140128"
"m2_245" = "4239440200"
"m2_83" = "2295215610"
"m2_82" = "559915342"
"m2_248" = "855368217"
"m2_249" = "2590667781"
"m2_87" = "646446017"
"m2_86" = "3206118332"
"m2_85" = "1470819537"
"m2_84" = "4030503936"
"m4_769" = "2998711917"
"m4_768" = "1263421184"
"m2_903" = "3599440943"
"m3_694" = "1684110167"
"m3_904" = "1023021761"
"m3_905" = "2758050428"
"m3_906" = "232078827"
"m3_907" = "1967631622"
"m2_109" = "168128294"
"m2_108" = "2727812764"
"m3_902" = "1847586855"
"m3_903" = "3616039762"
"m2_105" = "1816897249"
"m2_104" = "81613299"
"m2_107" = "992513003"
"m2_106" = "3552196866"
"m2_101" = "3465667176"
"m2_100" = "1730386831"
"m2_103" = "2641283681"
"m2_102" = "906000302"
"m3_695" = "3453217474"
"m3_784" = "3275118585"
"m1_719" = "1310872921"
"m1_718" = "3934025956"
"m1_717" = "2562910758"
"m1_716" = "2293978543"
"m1_715" = "3308307411"
"m1_714" = "3995827569"
"m1_713" = "1125668382"
"m1_712" = "722354674"
"m1_711" = "1176261909"
"m1_710" = "3668044659"
"m3_423" = "3866720050"
"m3_422" = "2164836231"
"m3_393" = "3381290108"
"m3_420" = "2955781373"
"m2_956" = "1080561136"
"m3_427" = "2217783526"
"m3_426" = "482738507"
"m3_425" = "3075838428"
"m2_936" = "734490740"
"m3_424" = "1340860065"
"m3_697" = "2595108332"
"m2_8" = "997420737"
"m2_9" = "2732720072"
"m2_2" = "3470576430"
"m2_3" = "910908852"
"m2_0" = "1473"
"m2_1" = "1735290977"
"m2_6" = "1821804072"
"m2_7" = "3557104831"
"m2_4" = "2646189536"
"m2_5" = "86520385"
"m2_912" = "2037180048"
"m4_777" = "3996135893"
"m4_721" = "1309135357"
"m1_959" = "3979055924"
"m2_499" = "2621647164"
"m2_498" = "886364265"
"m1_148" = "1755978072"
"m1_149" = "12637002"
"m1_146" = "3474087683"
"m1_147" = "323564618"
"m1_144" = "684550526"
"m1_145" = "3196706819"
"m1_142" = "1404683299"
"m1_143" = "3429550520"
"m1_140" = "3624909652"
"m1_141" = "525556092"
"m2_659" = "1095290868"
"m2_658" = "3654974926"
"m1_158" = "2391491468"
"m2_651" = "97862112"
"m2_650" = "2657550250"
"m2_653" = "3568446393"
"m2_652" = "1833160875"
"m2_655" = "2744061595"
"m2_654" = "1008775438"
"m2_657" = "1919676289"
"m2_656" = "184390982"
"m1_927" = "3078721541"
[HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Internet Settings\Cache\Paths]
"Directory" = "%Documents and Settings%\%current user%\Local Settings\Temporary Internet Files\Content.IE5"
[HKCU\Software\Stvncyfrlda]
"m1_913" = "510472596"
"m4_749" = "2652635625"
"m2_913" = "3772480009"
"m3_665" = "2900105228"
"m2_840" = "1650295142"
"m2_119" = "341171006"
"m4_748" = "917344892"
"m3_664" = "1198680209"
"m4_220" = "3806839212"
"m1_818" = "845638212"
"m1_819" = "1552791410"
"m3_348" = "2602308101"
"m4_221" = "1247162649"
[HKCU\Software\Stvncyfrlda\168128873]
"910904903" = "0"
[HKCU\Software\Stvncyfrlda]
"m3_342" = "747352503"
"m3_343" = "2515804450"
"m3_340" = "1604884205"
"m3_341" = "3340305944"
"m3_346" = "3393319803"
"m3_347" = "867328662"
"m3_344" = "4251373649"
"m3_345" = "1658274764"
"m4_158" = "3592996166"
"m4_159" = "1033319603"
"m4_408" = "3623982520"
"m4_409" = "1064305957"
"m1_928" = "3130572698"
"m1_929" = "4140107490"
"m3_667" = "2109684438"
"m4_150" = "2595572190"
"m4_151" = "35895627"
"m4_152" = "1771186360"
"m4_153" = "3506477093"
"m4_154" = "946800530"
"m4_155" = "2682091263"
"m4_156" = "122414700"
"m4_157" = "1857705433"
"m2_724" = "2220045859"
"m3_298" = "1737416395"
"m3_299" = "3439283814"
"m3_748" = "934213717"
"m3_749" = "2669636544"
"m3_294" = "3385892103"
"m3_295" = "826346674"
"m3_296" = "2528361505"
"m3_297" = "4263259996"
"m3_290" = "706302803"
"m4_228" = "509295892"
"m3_292" = "4176769661"
"m3_293" = "1617358312"
"m1_663" = "1373730946"
"m4_229" = "2244586625"
"m1_662" = "1919807072"
"m1_661" = "2310596811"
"m2_832" = "652886012"
"m4_398" = "3450944374"
"m4_399" = "891267811"
"m4_392" = "1629134568"
"m4_393" = "3364425301"
"m4_390" = "2453520398"
"m4_391" = "4188811131"
"m4_396" = "4275330204"
"m4_397" = "1715653641"
"m4_394" = "804748738"
"m4_395" = "2540039471"
"m3_122" = "1268937691"
"m3_123" = "3003966326"
"m3_120" = "2059882801"
"m3_121" = "3794911404"
"m3_126" = "3914972559"
"m3_127" = "1321872698"
"m3_124" = "410948325"
"m3_125" = "2179924496"
"m3_128" = "3056917673"
"m3_129" = "530927556"
"m4_718" = "398230454"
"m4_719" = "2133521187"
"m4_716" = "1222616284"
"m4_717" = "2957907017"
"m4_714" = "2047002114"
"m4_715" = "3782292847"
"m4_712" = "2871387944"
"m4_713" = "311711381"
"m4_710" = "3695773774"
"m4_711" = "1136097211"
"m1_99" = "605284720"
"m1_98" = "1474330376"
"m2_841" = "3385595291"
"m2_929" = "1472349881"
"m1_91" = "2434615498"
"m1_90" = "2498324888"
"m1_93" = "3290587557"
"m1_92" = "1023373213"
"m1_95" = "433782795"
"m1_94" = "2656899250"
"m1_97" = "644007188"
"m1_96" = "331368367"
"m4_613" = "2876297217"
"m4_612" = "1141006484"
"m4_611" = "3700683047"
"m4_572" = "448853900"
"m4_573" = "2184144633"
"m4_570" = "1273239730"
"m4_571" = "3008530463"
"m4_576" = "3095049536"
"m4_577" = "535372973"
"m4_574" = "3919435366"
"m4_575" = "1359758803"
"m4_617" = "1227525557"
"m4_578" = "2270663706"
"m4_579" = "4005954439"
"m4_616" = "3787202120"
"m4_370" = "2107444106"
"m4_371" = "3842734839"
"m4_372" = "1283058276"
"m4_373" = "3018349009"
"m4_374" = "458672446"
"m4_375" = "2193963179"
"m4_376" = "3929253912"
"m4_377" = "1369577349"
"m4_378" = "3104868082"
"m4_379" = "545191519"
"m2_815" = "1217701402"
"m4_614" = "316620654"
"m2_813" = "2042088101"
"m2_812" = "306804737"
"m3_638" = "3292191631"
"m3_639" = "766200634"
"m1_957" = "2961697616"
[HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Internet Settings\Cache\Paths\path4]
"CachePath" = "%Documents and Settings%\%current user%\Local Settings\Temporary Internet Files\Content.IE5\Cache4"
[HKCU\Software\Stvncyfrlda]
"m3_93" = "2451378352"
"m3_92" = "716398853"
"m3_91" = "3309498774"
"m3_90" = "1573930619"
"m3_97" = "836457060"
"m3_96" = "3362431689"
"m3_95" = "1626878810"
"m3_94" = "4220485679"
"m3_99" = "4273372430"
"m3_98" = "2571488659"
"m1_548" = "1192511759"
"m1_549" = "1555642494"
"m1_542" = "1077685069"
"m1_543" = "4259911004"
"m1_540" = "1502497829"
"m1_541" = "314848226"
"m1_546" = "1109176779"
"m1_547" = "2611276897"
"m1_544" = "3586042111"
"m1_545" = "3608466097"
"m2_98" = "2554773124"
"m2_99" = "4290055553"
"m2_257" = "3588082098"
"m2_256" = "1852797972"
"m2_251" = "1766270024"
"m2_250" = "30984013"
"m2_253" = "941885326"
"m2_252" = "3501569576"
"m2_90" = "1557345250"
"m2_91" = "3292630357"
"m2_92" = "732962130"
"m2_93" = "2468245265"
"m2_94" = "4203541297"
"m2_258" = "1028411822"
"m2_96" = "3379157172"
"m2_97" = "819470473"
"m1_498" = "1718983214"
"m1_499" = "2316434690"
"m1_494" = "2942949923"
"m1_495" = "3913453220"
"m1_496" = "1318165094"
"m1_497" = "2173466863"
"m1_490" = "2771935184"
"m1_491" = "1505606410"
"m1_492" = "3129142284"
"m1_493" = "3860232909"
"m3_265" = "273825276"
"m3_917" = "2140556120"
"m3_916" = "371578925"
"m3_915" = "2931501246"
"m3_914" = "1229633795"
"m3_913" = "3789031828"
"m3_912" = "2020580985"
"m3_911" = "285077194"
"m3_910" = "2878570335"
"m3_919" = "1282501218"
"m3_918" = "3875601143"
"m3_264" = "2833351233"
[HKCU\Software\Stvncyfrlda\168128873]
"-1648771660" = "30"
[HKLM\SOFTWARE\Microsoft\Security Center\Svc]
"UpdatesDisableNotify" = "1"
[HKCU\Software\Stvncyfrlda]
"m2_746" = "1741727268"
"m1_922" = "867545481"
"m1_722" = "3195034065"
"m1_723" = "1221105001"
"m1_720" = "3906833893"
"m1_721" = "459244582"
"m1_726" = "2841343848"
"m1_727" = "1213261013"
"m1_724" = "3410839679"
"m1_725" = "791626949"
"m1_728" = "2528318600"
"m1_729" = "2609582111"
"m2_742" = "3390497021"
"m2_718" = "398244756"
"m2_719" = "2133518399"
"m2_710" = "3695775814"
"m2_711" = "1136097711"
"m2_712" = "2871392189"
"m2_713" = "311707417"
"m2_714" = "2047005874"
"m2_715" = "3782289115"
"m2_716" = "1222621760"
"m2_717" = "2957902113"
"m2_901" = "128859550"
[HKLM\SOFTWARE\JavaSoft\Java Update\Policy]
"VersionXmlChecksum" = "d21df13593dfe33a0e60cee8b268f5501fadb8f6"
[HKCU\Software\Stvncyfrlda]
"m1_803" = "1689896529"
"m2_628" = "3135849968"
"m2_629" = "576181112"
"m1_888" = "2014847559"
"m1_802" = "3356057383"
"m2_624" = "489654565"
"m2_625" = "2224951488"
"m2_626" = "3960239420"
"m2_627" = "1400569788"
"m2_620" = "2138426480"
"m2_621" = "3873725541"
"m2_622" = "1314038921"
"m2_623" = "3049337399"
"m2_325" = "1328768423"
"m1_800" = "249885136"
"m2_324" = "3888451904"
"m4_416" = "326439200"
"m2_327" = "504384624"
"m1_806" = "2217152607"
"m1_151" = "3131022354"
"m1_150" = "3629157984"
"m1_153" = "2055490362"
"m1_152" = "3674326989"
"m1_155" = "2639919072"
"m1_154" = "4150713838"
"m1_157" = "3972897115"
"m1_156" = "2340465106"
"m1_159" = "1438820987"
"m2_321" = "2977539407"
"m1_804" = "2954824507"
"m2_320" = "1242257146"
"m2_326" = "3064067546"
"m2_323" = "2153153534"
"m3_750" = "76094335"
"m2_322" = "417870397"
"m3_753" = "987157940"
"m2_530" = "581089689"
"m2_531" = "2316384989"
"m2_532" = "4051671848"
"m2_533" = "1491985441"
"m2_534" = "3227284757"
"m2_535" = "667600552"
"m2_536" = "2402901165"
"m2_537" = "4138182865"
"m2_538" = "1578514124"
"m2_539" = "3313795636"
"m2_859" = "261092492"
"m3_754" = "2722579747"
"m1_939" = "3129187517"
"m2_329" = "3974965370"
"m1_938" = "818379615"
"m2_328" = "2239682492"
"m4_415" = "2886115763"
"m3_763" = "1193636854"
"m4_414" = "1150825030"
"m4_417" = "2061729933"
"m4_833" = "2388169133"
"m4_413" = "3710501593"
"m2_844" = "1525768"
"m2_948" = "83134392"
"m4_832" = "652878400"
"m4_411" = "239920127"
"m4_831" = "3212554963"
"m4_410" = "2799596690"
"m1_809" = "1828634821"
"m1_808" = "132270918"
"m3_359" = "182266866"
"m3_358" = "2775365703"
"m3_355" = "1864887822"
"m3_354" = "129334931"
"m3_357" = "1006766376"
"m3_356" = "3566311869"
"m3_351" = "3513363546"
"m3_350" = "1778335023"
"m3_353" = "2655309668"
"m3_352" = "920281033"
"m3_751" = "1845201642"
"m4_412" = "1975210860"
"m4_149" = "860281457"
"m4_148" = "3419958020"
"m4_419" = "1237344103"
"m4_418" = "3797020666"
"m3_757" = "3633059704"
"m3_756" = "1931634637"
"m4_143" = "3333438947"
"m4_142" = "1598148214"
"m4_141" = "4157824777"
"m4_140" = "2422534044"
"m4_147" = "1684667287"
"m4_146" = "4244343850"
"m4_145" = "2509053117"
"m4_144" = "773762384"
"m3_289" = "3265830948"
"m3_288" = "1564356745"
"m3_287" = "4123885850"
"m3_286" = "2355302895"
"m3_285" = "619800176"
"m3_284" = "3212900037"
"m3_283" = "1444300630"
"m3_282" = "4003845179"
"m3_281" = "2302354572"
"m3_280" = "566932753"
"m4_389" = "718229665"
"m4_388" = "3277906228"
"m4_385" = "2367001325"
"m4_384" = "631710592"
"m4_387" = "1542615495"
"m4_386" = "4102292058"
"m4_381" = "4015772985"
"m4_380" = "2280482252"
"m4_383" = "3191387155"
"m4_382" = "1456096422"
"m3_135" = "2319427666"
"m3_134" = "583874855"
"m3_137" = "1528482684"
"m3_136" = "4087897025"
"m4_89" = "4117019877"
"m3_130" = "2266496883"
"m3_133" = "3176958344"
"m3_132" = "1441930781"
"m4_85" = "1470824241"
"m4_84" = "4030500804"
"m4_87" = "646438411"
"m4_86" = "3206114974"
"m4_81" = "3119595901"
"m4_80" = "1384305168"
"m4_83" = "2295210071"
"m4_82" = "559919338"
"m3_406" = "136830199"
"m3_798" = "1799110639"
"m1_86" = "360834704"
"m1_87" = "1077516733"
"m1_84" = "1959310682"
"m1_85" = "3267860076"
"m1_82" = "1973666743"
"m1_83" = "3783814892"
"m1_80" = "717730910"
"m1_81" = "3369158690"
"m1_88" = "434225974"
"m1_89" = "4065163606"
"m1_666" = "700854875"
"m2_394" = "804744566"
"m2_395" = "2540043219"
"m2_396" = "4275326656"
"m2_397" = "1715658445"
"m2_390" = "2453525482"
"m2_391" = "4188807581"
"m2_392" = "1629130584"
"m2_393" = "3364427025"
"m2_828" = "2301651904"
"m2_829" = "4036936048"
"m2_398" = "3450940800"
"m2_399" = "891273200"
"m4_363" = "2845310863"
"m4_362" = "1110020130"
"m4_361" = "3669696693"
"m4_360" = "1934405960"
"m4_367" = "1196539203"
"m4_366" = "3756215766"
"m4_365" = "2020925033"
"m4_364" = "285634300"
"m3_621" = "3890684224"
"m3_620" = "2121707989"
"m4_369" = "372153373"
"m4_368" = "2931829936"
"m3_625" = "2241684276"
"m3_624" = "472707993"
"m3_627" = "1383697886"
"m3_626" = "3977188003"
"m4_535" = "667606219"
"m4_961" = "1167083565"
"m4_960" = "3726760128"
"m4_963" = "342697735"
"m4_962" = "2902374298"
"m4_965" = "3813279201"
"m4_964" = "2077988468"
"m4_967" = "2988893371"
"m4_966" = "1253602638"
"m3_80" = "1401010233"
"m3_81" = "3102878548"
"m3_82" = "542956227"
"m3_83" = "2311932542"
"m3_84" = "4047496685"
"m3_85" = "1453954328"
"m3_86" = "3189376183"
"m3_87" = "663008290"
"m3_88" = "2364876625"
"m3_89" = "4100445900"
"m4_532" = "4051668612"
"m1_559" = "2402191708"
"m1_558" = "114600409"
"m1_555" = "3896641019"
"m1_554" = "86055063"
"m1_557" = "3712390549"
"m1_556" = "2604446841"
"m1_551" = "3415920928"
"m1_550" = "1642139745"
"m1_553" = "2914859804"
"m1_552" = "1246662070"
"m3_859" = "244091030"
"m4_533" = "1491992049"
"m1_489" = "336744521"
"m1_488" = "2807469057"
"m1_487" = "1418079861"
"m1_486" = "3449255925"
"m1_485" = "4171340953"
"m1_484" = "3599358383"
"m1_483" = "3021261780"
"m1_482" = "3089220453"
"m1_481" = "4069178089"
"m1_480" = "2355385360"
"m2_49" = "3424864768"
"m2_48" = "1689579800"
"m2_47" = "4249248106"
"m2_46" = "2513965363"
"m2_45" = "778666197"
"m2_44" = "3338352396"
"m2_43" = "1603055081"
"m2_42" = "4162740137"
"m2_41" = "2427438776"
"m2_40" = "692155909"
"m2_915" = "2948093683"
"m2_480" = "4010867692"
"m3_928" = "4048584969"
"m3_824" = "3933588721"
"m2_481" = "1451185225"
"m3_922" = "2193499323"
"m3_923" = "3928545238"
"m3_920" = "3051554193"
"m4_531" = "2316377879"
"m3_926" = "544499311"
"m2_482" = "3186481230"
"m3_924" = "1402554181"
"m3_925" = "3138123504"
"m4_701" = "963059065"
"m2_483" = "626796495"
"m3_821" = "3022533304"
"m4_700" = "3522735628"
"m2_484" = "2362094872"
"m3_820" = "1287619341"
"m4_703" = "138673235"
"m2_485" = "4097376405"
"m4_702" = "2698349798"
"m2_486" = "1537708454"
"m3_131" = "3967839982"
"m2_487" = "3272993623"
"m4_88" = "2381729144"
"m4_707" = "2784868871"
"m4_706" = "1049578138"
"m1_735" = "1551177856"
"m4_709" = "1960483041"
"m1_737" = "444860860"
"m1_736" = "95353878"
"m1_731" = "2290315856"
"m1_730" = "2594465384"
"m1_733" = "1644531411"
"m4_708" = "225192308"
"m3_446" = "862287311"
"m3_828" = "2285047461"
"m1_739" = "853701842"
"m1_738" = "226804573"
"m3_892" = "1708086757"
"m2_709" = "1960476793"
"m2_708" = "225195716"
"m3_893" = "3443115280"
"m2_703" = "138666729"
"m3_139" = "703982086"
"m2_701" = "963054673"
"m2_700" = "3522737207"
"m2_707" = "2784863955"
"m2_706" = "1049582339"
"m2_705" = "3609251641"
"m3_138" = "3230366443"
"m1_801" = "1974924730"
"m1_963" = "1291746514"
"m3_898" = "3496064627"
"m3_899" = "970072558"
"m2_835" = "1563781263"
[HKCU\Software\Stvncyfrlda\168128873]
"-824385830" = "0"
[HKCU\Software\Stvncyfrlda]
"m3_526" = "2246810591"
"m2_639" = "749221924"
"m3_527" = "3981708106"
"m2_637" = "1573610047"
"m2_636" = "4133274614"
"m2_635" = "2397980309"
"m2_634" = "662692238"
"m2_633" = "3222377111"
"m3_524" = "3071244597"
"m2_631" = "4046765615"
"m2_630" = "2311465804"
"m3_525" = "477751456"
"m1_807" = "1881082661"
"m3_522" = "3861667435"
"m3_523" = "1335806342"
"m1_124" = "2775811248"
"m1_125" = "3152638302"
"m1_126" = "532698490"
"m1_127" = "3264223909"
"m1_120" = "2380258597"
"m1_121" = "1165797534"
"m1_122" = "1129863968"
"m1_123" = "2360800006"
"m3_521" = "2126753532"
"m1_128" = "1013773394"
"m1_129" = "885946455"
"m1_238" = "2444676588"
"m1_239" = "1859916920"
[HKLM\System\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\StandardProfile]
"DoNotAllowExceptions" = "0"
[HKCU\Software\Stvncyfrlda]
"m1_230" = "3411147359"
"m1_231" = "996921696"
"m1_232" = "517601654"
"m1_233" = "622534795"
"m1_234" = "2515633176"
"m1_235" = "3321238971"
"m1_236" = "2083554759"
"m1_237" = "2472655799"
"m2_523" = "1318958610"
"m2_522" = "3878632026"
"m2_521" = "2143345712"
"m2_520" = "408044016"
"m2_527" = "3965153684"
"m2_526" = "2229850377"
"m2_525" = "494571733"
"m2_524" = "3054242631"
"m2_529" = "3140768987"
"m2_528" = "1405470252"
"m1_805" = "1457945495"
"m4_620" = "2138430460"
"m2_806" = "2779956233"
[HKLM\SOFTWARE\JavaSoft\Java Update\Policy]
"Method" = "jau-m"
[HKCU\Software\Stvncyfrlda]
"m3_785" = "681625364"
"m4_887" = "1604588203"
"m4_779" = "3171750063"
"m1_838" = "3439126388"
"m1_374" = "3616661315"
"m1_836" = "1982431822"
"m1_837" = "855685390"
"m1_834" = "2836903621"
"m1_835" = "953507829"
"m1_832" = "3999193895"
"m1_833" = "4230990530"
"m1_830" = "3088625474"
"m1_831" = "437616482"
"m3_724" = "2236631661"
"m3_725" = "3938641304"
"m3_726" = "1378653495"
"m3_727" = "3147629730"
"m3_720" = "3885631673"
"m3_721" = "1325710292"
"m4_178" = "3939072458"
"m4_179" = "1379395895"
"m4_176" = "468490992"
"m4_177" = "2203781725"
"m4_174" = "1292876822"
"m4_175" = "3028167555"
"m4_172" = "2117262652"
"m4_173" = "3852553385"
"m4_170" = "2941648482"
"m4_171" = "381971919"
"m2_894" = "866714580"
"m2_892" = "1691102102"
"m1_309" = "4024742447"
"m2_890" = "2515497583"
"m1_902" = "2953122624"
"m3_788" = "1592627629"
"m1_900" = "473160986"
"m1_879" = "1891853092"
"m1_906" = "2535780632"
"m1_907" = "3001121908"
"m1_904" = "3013954390"
"m1_905" = "2732490862"
"m1_908" = "929773397"
"m3_579" = "4022692270"
"m3_744" = "2582691553"
"m4_774" = "3085230990"
"m1_612" = "4007860930"
"m4_98" = "2554767290"
"m4_99" = "4290058023"
"m4_770" = "439035354"
"m3_440" = "3301763441"
"m4_772" = "3909616820"
"m1_613" = "2849212253"
"m4_92" = "732957484"
"m4_93" = "2468248217"
"m4_90" = "1557343314"
"m4_91" = "3292634047"
"m4_96" = "3379153120"
"m4_97" = "819476557"
"m4_94" = "4203538950"
"m4_95" = "1643862387"
"m3_386" = "4119292019"
"m3_387" = "1525750766"
"m3_384" = "614746537"
"m3_385" = "2350315716"
"m3_382" = "1472802447"
"m3_383" = "3208371770"
"m3_380" = "2263748581"
"m3_381" = "3998793488"
"m3_430" = "3128705855"
"m3_431" = "602862250"
"m3_432" = "2338287065"
"m3_433" = "4039712116"
"m3_434" = "1480297699"
"m3_435" = "3248765982"
"m3_388" = "3261303581"
"m3_389" = "734804616"
"m4_565" = "1186720657"
"m1_871" = "669594869"
"m1_614" = "1743376081"
"m4_621" = "3873721193"
"m4_564" = "3746397220"
"m1_876" = "4285148339"
"m1_615" = "1883725736"
"m4_567" = "362334827"
"m1_877" = "3809516498"
"m4_284" = "3196296428"
"m4_285" = "636619865"
"m4_286" = "2371910598"
"m4_287" = "4107201331"
"m4_280" = "550100792"
"m4_281" = "2285391525"
"m4_282" = "4020682258"
"m4_283" = "1461005695"
"m4_561" = "2835492317"
"m1_875" = "1275598640"
"m4_288" = "1547524768"
"m4_289" = "3282815501"
"m4_560" = "1100201584"
"m2_387" = "1542611651"
"m2_386" = "4102297274"
"m2_385" = "2366996626"
"m2_384" = "631715373"
"m2_383" = "3191382499"
"m2_382" = "1456103364"
"m2_381" = "4015769165"
"m2_380" = "2280487344"
"m4_590" = "1619316022"
"m4_591" = "3354606755"
"m4_592" = "794930192"
"m4_562" = "275815754"
"m4_594" = "4265511658"
"m4_595" = "1705835095"
"m2_389" = "718226446"
"m2_388" = "3277911065"
"m4_356" = "3583177620"
"m4_357" = "1023501057"
"m4_354" = "112596154"
"m4_355" = "1847886887"
"m4_352" = "936981984"
"m4_353" = "2672272717"
"m4_350" = "1761367814"
"m4_351" = "3496658547"
"m4_600" = "1792354168"
"m4_601" = "3527644901"
"m4_602" = "967968338"
"m4_603" = "2703259071"
"m4_604" = "143582508"
"m4_605" = "1878873241"
"m4_358" = "2758791790"
"m4_359" = "199115227"
"m4_918" = "3858993374"
"m4_919" = "1299316811"
"m4_914" = "1212797738"
"m4_569" = "3832916293"
"m4_916" = "388411908"
"m4_917" = "2123702641"
"m4_910" = "2861569398"
"m4_911" = "301892835"
"m4_912" = "2037183568"
"m4_568" = "2097625560"
"m1_765" = "3526742987"
"m3_629" = "592751864"
"m2_908" = "3685953286"
"m3_628" = "3152690509"
"m4_500" = "61972708"
"m3_144" = "790480761"
"m4_644" = "835735092"
"m3_145" = "2492364436"
"m4_820" = "1304226084"
"m4_821" = "3039516817"
"m4_822" = "479840254"
"m4_823" = "2215130987"
"m4_824" = "3950421720"
"m4_825" = "1390745157"
"m4_826" = "3126035890"
"m4_827" = "566359327"
"m4_828" = "2301650060"
"m4_829" = "4036940793"
[HKCU\Software\Microsoft\Windows\CurrentVersion\Explorer\Shell Folders]
"Cache" = "%Documents and Settings%\%current user%\Local Settings\Temporary Internet Files"
[HKCU\Software\Stvncyfrlda]
"m4_507" = "3619073247"
"m3_148" = "3403350317"
"m2_58" = "1862606856"
"m2_59" = "3597907218"
"m3_149" = "843427928"
"m2_54" = "3511392209"
"m2_55" = "951706259"
"m2_56" = "2686995440"
"m2_57" = "127326956"
"m2_50" = "865195385"
"m2_51" = "2600479787"
"m2_52" = "40810701"
"m2_53" = "1776091336"
"m3_622" = "1330761983"
"m2_945" = "3467202535"
"m2_831" = "3212551016"
"m2_944" = "1731915908"
"m3_939" = "1662115558"
"m3_938" = "4222037835"
"m2_820" = "1304230776"
"m4_646" = "11349262"
"m3_937" = "2453061596"
"m3_936" = "717491361"
"m3_931" = "664556366"
"m3_930" = "3191055315"
"m3_933" = "4101993064"
"m3_932" = "2400109309"
"m1_586" = "1395646027"
"m1_587" = "3039400880"
"m1_584" = "2597316116"
"m1_585" = "2160443869"
"m1_582" = "2591242869"
"m1_583" = "1849289544"
"m1_580" = "1103117127"
"m1_581" = "3143869660"
"m1_588" = "2267794402"
"m1_589" = "1125937525"
"m4_647" = "1746639995"
"m4_685" = "3263178409"
"m4_686" = "703501846"
"m4_687" = "2438792579"
"m4_688" = "4174083312"
"m4_689" = "1614406749"
"m2_738" = "744300869"
"m2_739" = "2479600295"
"m2_736" = "1568689025"
"m2_737" = "3303988714"
"m2_734" = "2393071874"
"m2_735" = "4128371687"
"m2_732" = "3217460875"
"m2_733" = "657795649"
"m2_730" = "4041845185"
"m2_731" = "1482177107"
"m1_810" = "3413891518"
"m1_811" = "469075711"
"m1_951" = "206381488"
"m2_602" = "967974869"
"m2_603" = "2703253656"
"m2_600" = "1792360084"
"m2_601" = "3527640002"
"m2_606" = "3614170494"
"m2_607" = "1054484235"
"m2_604" = "143585478"
"m2_605" = "1878868581"
"m2_608" = "2789783170"
"m2_609" = "230099927"
"m2_826" = "3126040742"
"m4_934" = "1558874030"
"m1_812" = "3224656000"
"m2_941" = "821003918"
"m4_508" = "1059396684"
"m1_915" = "3701034178"
"m2_905" = "2775055864"
"m1_137" = "1465371139"
"m1_136" = "1540098131"
"m1_135" = "3302099793"
"m1_134" = "1355697781"
"m1_133" = "3569017818"
"m1_132" = "806380797"
"m1_131" = "171373947"
"m1_130" = "957102427"
"m1_139" = "3211233511"
"m1_138" = "4104569212"
"m1_229" = "901144579"
"m1_228" = "3285519782"
"m1_223" = "4033535814"
"m1_222" = "1985270491"
"m1_221" = "1202748583"
"m1_220" = "2768124306"
"m1_227" = "764726972"
"m1_226" = "2609367680"
"m1_225" = "2276299376"
"m1_224" = "2893647580"
"m2_516" = "2056816864"
"m2_517" = "3792114470"
"m2_514" = "2881203446"
"m1_417" = "3272164825"
"m2_512" = "3705587839"
"m2_513" = "1145921301"
"m2_510" = "235006674"
"m2_511" = "1970305263"
"m1_768" = "2574117039"
"m2_518" = "1232429489"
"m2_519" = "2967730853"
"m1_393" = "3666990121"
"m1_318" = "281648860"
"m1_392" = "1763501445"
"m1_391" = "915702906"
"m2_687" = "2438795751"
"m1_390" = "1617537461"
"m1_397" = "2980689337"
"m1_916" = "4044855670"
"m1_396" = "1805363240"
[HKLM\SOFTWARE\Microsoft\Security Center]
"UacDisableNotify" = "1"
[HKCU\Software\Stvncyfrlda]
"m1_820" = "3079481719"
"m1_823" = "1218694660"
"m1_822" = "1889996874"
"m1_825" = "2734156834"
"m1_395" = "350418772"
"m1_827" = "2455380140"
"m2_614" = "316612656"
"m1_829" = "2353664908"
"m1_828" = "1797689000"
"m1_394" = "3994178224"
"m1_816" = "1210789301"
"m4_775" = "525554427"
"m1_911" = "455035229"
"m3_737" = "3320685284"
"m3_736" = "1552102217"
"m3_735" = "4145185754"
"m3_734" = "2409631919"
"m3_733" = "641098032"
"m3_732" = "3200643461"
"m3_731" = "1499153942"
"m3_730" = "4058699515"
"m1_934" = "792625333"
"m4_512" = "3705592320"
"m3_739" = "2462633358"
"m3_738" = "761156115"
"m4_513" = "1145915757"
"m2_940" = "3380688106"
"m4_846" = "3472112182"
"m1_910" = "29203626"
"m4_847" = "912435619"
"m1_890" = "171223943"
"m4_649" = "922254165"
"m4_844" = "1530716"
"m1_891" = "181546544"
"m4_845" = "1736821449"
"m4_435" = "3232192055"
"m4_161" = "208933773"
"m4_160" = "2768610336"
"m4_163" = "3679515239"
"m4_162" = "1944224506"
"m4_165" = "2855129409"
"m4_164" = "1119838676"
"m4_167" = "2030743579"
"m4_166" = "295452846"
"m4_169" = "1206357749"
"m4_168" = "3766034312"
"m1_919" = "1881824036"
"m4_848" = "2647726352"
"m3_578" = "2253717043"
"m4_67" = "300362119"
"m4_66" = "2860038682"
"m4_65" = "1124747949"
"m4_64" = "3684424512"
"m4_63" = "1949133779"
"m4_62" = "213843046"
"m4_61" = "2773519609"
"m4_60" = "1038228876"
"m1_897" = "1744316966"
"m4_69" = "3770943585"
"m4_68" = "2035652852"
"m3_399" = "874299594"
"m3_398" = "3434238303"
"m3_429" = "1427362688"
"m3_428" = "3986759701"
"m1_912" = "1086374404"
"m1_950" = "3383062537"
"m3_391" = "4172236114"
"m3_390" = "2470357543"
"m1_313" = "3584533901"
"m3_392" = "1612313793"
"m3_395" = "2523301638"
"m3_394" = "787748843"
"m3_397" = "1732355616"
"m3_396" = "4292294325"
"m1_931" = "3968155554"
"m4_771" = "2174326087"
"m1_954" = "2763275449"
"m4_297" = "4280239477"
"m4_296" = "2544948744"
"m4_295" = "809658011"
"m4_294" = "3369334574"
"m4_293" = "1634043841"
"m4_292" = "4193720404"
"m4_291" = "2458429671"
"m4_290" = "723138938"
"m2_491" = "1624221783"
"m1_624" = "930049804"
"m3_572" = "465804709"
"m2_918" = "3858989434"
"m4_299" = "3455853647"
"m4_298" = "1720562914"
"m1_930" = "969030052"
"m4_589" = "4178992585"
"m4_588" = "2443701852"
"m1_953" = "2696388981"
"m4_583" = "2357182779"
"m4_582" = "621892046"
"m4_581" = "3181568609"
"m4_580" = "1446277876"
"m4_587" = "708411119"
"m4_586" = "3268087682"
"m4_585" = "1532796949"
"m4_584" = "4092473512"
"m4_349" = "26077081"
"m4_348" = "2585753644"
"m4_619" = "403139727"
"m4_618" = "2962816290"
"m3_649" = "939200892"
"m3_648" = "3465109953"
"m4_341" = "3323620401"
"m4_340" = "1588329668"
"m4_343" = "2499234571"
"m4_342" = "763943838"
"m4_345" = "1674848741"
"m4_344" = "4234525304"
"m4_347" = "850462911"
"m4_346" = "3410139474"
[HKCU\Software\Stvncyfrlda\168128873]
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
[HKCU\Software\Stvncyfrlda]
"m4_773" = "1349940257"
"m4_909" = "1126278665"
"m4_908" = "3685955228"
"m4_907" = "1950664495"
"m4_906" = "215373762"
"m4_905" = "2775050325"
"m4_904" = "1039759592"
"m4_903" = "3599436155"
"m4_902" = "1864145422"
"m4_901" = "128854689"
"m4_900" = "2688531252"
"m3_647" = "1763243602"
"m2_822" = "479842543"
"m3_646" = "28198695"
"m2_288" = "1547534186"
"m2_289" = "3282817431"
"m2_286" = "2371906689"
"m2_287" = "4107205888"
"m2_284" = "3196290271"
"m2_285" = "636622373"
"m2_282" = "4020676100"
"m2_283" = "1460994185"
"m2_280" = "550093814"
"m2_281" = "2285394818"
"m2_350" = "1761363685"
"m2_351" = "3496664995"
"m2_352" = "936976871"
"m2_353" = "2672279549"
"m2_354" = "112594586"
"m2_355" = "1847895073"
"m2_356" = "3583174635"
"m2_357" = "1023505082"
"m2_358" = "2758787090"
"m2_359" = "199119550"
"m4_839" = "4209978939"
"m4_838" = "2474688206"
"m2_69" = "3770945878"
"m2_68" = "2035646998"
"m3_645" = "2554189704"
"m2_61" = "2773521527"
"m2_60" = "1038223172"
"m2_63" = "1949135653"
"m2_62" = "213837243"
"m2_65" = "1124750105"
"m2_64" = "3684419464"
"m2_67" = "300364565"
"m2_66" = "2860032469"
"m3_644" = "819143709"
"m2_821" = "3039513525"
"m1_599" = "3848958591"
"m1_598" = "3474206696"
"m3_890" = "2498497243"
"m3_891" = "4234066550"
"m3_896" = "59152297"
"m3_897" = "1761019588"
"m3_894" = "850031759"
"m3_895" = "2585060410"
"m1_591" = "3556496088"
"m1_590" = "20034400"
"m1_593" = "4153752012"
"m1_592" = "3262325113"
"m1_595" = "4270299039"
"m1_594" = "568436823"
"m1_597" = "1979349376"
"m1_596" = "1125493627"
"m4_778" = "1436459330"
"m1_37" = "4180141181"
"m1_36" = "2487037057"
"m1_35" = "2990770989"
"m1_34" = "4038526148"
"m4_704" = "1873963968"
"m1_33" = "2611336866"
"m1_32" = "2960026474"
"m2_462" = "2840397658"
"m1_31" = "3397020034"
"m2_463" = "280731240"
"m1_30" = "731999741"
"m2_460" = "3664781754"
"m2_461" = "1105114718"
"m2_824" = "3950426210"
"m2_466" = "1191638538"
"m2_467" = "2926927603"
"m3_841" = "3369035580"
"m2_464" = "2016012710"
"m4_536" = "2402896952"
"m3_840" = "1667168129"
"m3_640" = "2501245609"
"m2_465" = "3751311943"
"m2_721" = "1309132265"
"m2_720" = "3868819038"
"m2_723" = "484749024"
"m2_722" = "3044430510"
"m2_725" = "3955333447"
"m4_518" = "1232434830"
"m2_727" = "3130949197"
"m2_726" = "1395649820"
"m2_729" = "2306560224"
"m2_728" = "571260988"
"m2_615" = "2051913226"
"m1_42" = "2007643583"
"m2_617" = "1227526927"
"m2_616" = "3787196052"
"m2_611" = "3700680067"
"m2_610" = "1965398048"
"m2_613" = "2876297055"
"m2_612" = "1141011292"
"m3_846" = "3489091615"
"m2_619" = "403140942"
"m2_618" = "2962811928"
[HKCU\Software\Stvncyfrlda\168128873]
"1821809806" = "0200687474703A2F2F7061647275702E636F6D2E64732F736F62616B61312E67696600687474703A2F2F34362E3130352E3130332E3231392F736F62616B61766F6C6F732E676966"
[HKCU\Software\Stvncyfrlda]
"m3_849" = "71098964"
"m4_519" = "2967725563"
"m3_848" = "2631037753"
"m4_640" = "2484506752"
"m4_641" = "4219797485"
"m3_921" = "491631884"
"m4_642" = "1660120922"
"m2_825" = "1390752655"
"m2_870" = "2169418554"
"m4_643" = "3395411655"
"m3_927" = "2313556378"
"m1_108" = "3112538567"
"m1_109" = "3627201848"
"m3_691" = "773171486"
"m1_102" = "2154089748"
"m1_103" = "3551993185"
"m1_100" = "2302420729"
"m1_101" = "1256079194"
"m1_106" = "865529363"
"m1_107" = "2898871110"
"m1_104" = "2862474775"
"m1_105" = "549067715"
"m3_693" = "4243638328"
"m1_218" = "463974531"
"m1_219" = "3087252877"
"m1_216" = "599620789"
"m1_217" = "3354206027"
"m1_214" = "1011658608"
"m1_215" = "2002295866"
"m1_212" = "1405834125"
"m1_213" = "552067821"
"m1_210" = "3681298983"
"m1_211" = "1182627514"
"m2_509" = "2794692595"
"m2_508" = "1059393040"
"m2_501" = "1797260662"
"m2_500" = "61980254"
"m2_503" = "972880659"
"m2_502" = "3532548686"
"m2_505" = "148494850"
"m2_504" = "2708161598"
"m2_507" = "3619075143"
"m2_506" = "1883776785"
"m3_508" = "1042708069"
[HKLM\SOFTWARE\Microsoft\Security Center\Svc]
"FirewallOverride" = "1"
[HKCU\Software\Stvncyfrlda]
"m3_509" = "2811290000"
"m3_599" = "40227362"
"m1_634" = "2733176376"
"m1_538" = "705892192"
"m1_635" = "3346583390"
"m4_886" = "4164264766"
"m1_636" = "2592227255"
"m1_854" = "3682203978"
"m1_855" = "3802343438"
"m1_856" = "4186024733"
"m1_637" = "3149540124"
"m1_850" = "2427029585"
"m1_851" = "965375995"
"m1_852" = "2729721312"
"m1_853" = "1117757452"
"m1_630" = "2241014157"
"m1_858" = "3166335966"
"m1_859" = "2436303115"
"m1_631" = "2164708324"
"m4_723" = "484749527"
"m1_632" = "184174447"
"m1_633" = "2766460492"
"m3_502" = "3549238679"
"m3_258" = "1011818995"
"m3_259" = "2780418414"
"m3_708" = "208618333"
"m3_503" = "956269826"
"m2_887" = "1604585991"
"m3_250" = "14400091"
"m3_251" = "1749308918"
"m3_252" = "3518416229"
"m3_253" = "958887056"
"m3_254" = "2660361231"
"m3_255" = "100898746"
"m3_256" = "1869350697"
"m3_257" = "3571365444"
"m2_911" = "301897511"
"m4_725" = "3955330993"
"m4_840" = "1650302376"
"m1_926" = "792617618"
"m4_724" = "2220040260"
"m2_827" = "566354669"
"m4_758" = "1090383038"
"m4_114" = "254647946"
"m4_115" = "1989938679"
"m4_116" = "3725229412"
"m4_117" = "1165552849"
"m4_110" = "1903419606"
"m4_111" = "3638710339"
"m4_112" = "1079033776"
"m4_113" = "2814324509"
"m4_118" = "2900843582"
"m4_119" = "341167019"
"m4_74" = "3857462658"
"m4_75" = "1297786095"
"m4_76" = "3033076828"
"m4_77" = "473400265"
"m4_70" = "1211267022"
"m4_71" = "2946557755"
"m4_72" = "386881192"
"m4_73" = "2122171925"
"m4_752" = "3563540528"
"m4_753" = "1003863965"
"m4_750" = "92959062"
"m4_751" = "1828249795"
"m4_78" = "2208690998"
"m4_79" = "3943981731"
"m4_754" = "2739154698"
"m4_755" = "179478135"
"m1_920" = "770325991"
"m3_418" = "3813836243"
"m3_419" = "1220752718"
"m3_416" = "309754633"
"m3_417" = "2078337700"
"m3_414" = "1167808623"
"m3_415" = "2902838170"
"m3_412" = "1958230341"
"m3_413" = "3693783280"
"m3_410" = "2816286395"
"m3_411" = "256870870"
"m3_658" = "3638103043"
"m1_921" = "2629945175"
"m4_705" = "3609254701"
"m3_672" = "2162627593"
"m3_673" = "3897657252"
"m3_670" = "2986669423"
"m3_671" = "460678298"
"m3_676" = "513626621"
"m3_677" = "2249179496"
"m3_674" = "1371682515"
"m3_675" = "3106711118"
"m3_678" = "4017647751"
"m3_659" = "1078706110"
[HKLM\SOFTWARE\Microsoft\Security Center]
"UpdatesDisableNotify" = "1"
[HKCU\Software\Stvncyfrlda]
"m4_338" = "2412715498"
"m4_339" = "4148006231"
"m4_628" = "3135854436"
"m4_629" = "576177873"
"m4_334" = "4061487158"
"m4_335" = "1501810595"
"m4_336" = "3237101328"
"m4_337" = "677424765"
"m4_330" = "1415291522"
"m4_331" = "3150582255"
"m4_332" = "590905692"
"m4_333" = "2326196425"
"m1_923" = "607931461"
"m1_857" = "430808365"
"m2_291" = "2458435135"
"m2_290" = "723134878"
"m2_293" = "1634046648"
"m2_292" = "4193717168"
"m2_295" = "809661183"
"m2_294" = "3369332467"
"m2_297" = "4280245487"
"m2_296" = "2544946984"
"m2_299" = "3455860114"
"m2_298" = "1720559558"
"m3_873" = "3063582876"
"m4_240" = "4152915504"
"m4_241" = "1593238941"
"m4_242" = "3328529674"
"m4_243" = "768853111"
"m4_244" = "2504143844"
"m4_245" = "4239434577"
"m4_246" = "1679758014"
"m4_247" = "3415048747"
"m4_248" = "855372184"
"m4_249" = "2590662917"
"m4_938" = "4205069666"
"m4_939" = "1645393103"
"m2_343" = "2499236497"
"m2_342" = "763940387"
"m2_341" = "3323622994"
"m2_340" = "1588322784"
"m2_347" = "850473117"
"m2_346" = "3410133858"
"m2_345" = "1674851269"
"m2_344" = "4234519020"
[HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Internet Settings\Cache\Paths\path1]
"CacheLimit" = "65452"
[HKCU\Software\Stvncyfrlda]
"m2_349" = "26080261"
"m2_348" = "2585749941"
"m4_808" = "1955573768"
"m4_809" = "3690864501"
"m2_76" = "3033075634"
"m2_77" = "473405089"
"m2_74" = "3857457462"
"m2_75" = "1297792119"
"m2_72" = "386876836"
"m2_73" = "2122177245"
"m2_70" = "1211291902"
"m2_71" = "2946560020"
"m1_909" = "1531267372"
"m2_78" = "2208689920"
"m2_79" = "3943988249"
"m3_57" = "110470508"
"m3_56" = "2703963633"
"m3_55" = "968530498"
"m3_54" = "3494439639"
"m3_53" = "1759411128"
"m3_52" = "57526285"
"m3_51" = "2583910558"
"m3_50" = "848472419"
"m1_692" = "3510444313"
"m1_693" = "4271625791"
"m1_690" = "473497745"
"m1_691" = "2526536841"
"m1_696" = "601205730"
"m1_697" = "4035680181"
"m3_59" = "3614491702"
"m3_58" = "1845908635"
"m1_458" = "1479258806"
"m1_459" = "4224393241"
"m1_450" = "4053653889"
"m1_451" = "3223780793"
"m1_452" = "291918274"
"m1_453" = "1900557630"
"m1_454" = "1801348385"
"m1_455" = "2666173961"
"m1_456" = "3591060737"
"m1_457" = "2315774238"
"m3_885" = "2445564408"
"m3_656" = "201256313"
"m3_887" = "1588033666"
"m3_886" = "4181117207"
"m3_881" = "4061010996"
"m3_880" = "2325507225"
"m3_883" = "3236511454"
"m3_882" = "1534627747"
"m2_919" = "1299321227"
"m3_889" = "797154220"
"m3_888" = "3323062321"
"m3_225" = "3909911780"
"m1_956" = "3569604157"
"m3_224" = "2174883145"
"m1_744" = "2288867604"
"m1_283" = "213335233"
"m3_657" = "1936235668"
"m2_963" = "342700175"
"m1_282" = "1604874412"
"m1_880" = "2396234346"
"m2_962" = "2902371573"
"m3_221" = "1263885104"
"m2_961" = "1167086064"
"m3_220" = "3823414149"
"m2_960" = "3726769418"
"m1_287" = "3202976381"
"m2_702" = "2698354578"
"m2_808" = "1955570260"
"m2_946" = "907534228"
"m1_286" = "3104321910"
"m2_809" = "3690859141"
"m2_192" = "2463337440"
"m2_193" = "4198634018"
"m2_190" = "3287721538"
"m2_191" = "728054138"
"m2_196" = "814570376"
"m2_197" = "2549852307"
"m2_194" = "1638949550"
"m2_195" = "3374250725"
"m1_678" = "1804697048"
"m1_679" = "3392292005"
"m2_198" = "4285139844"
"m2_199" = "1725467846"
"m2_804" = "3604341709"
"m3_709" = "1977217736"
"m2_805" = "1044674005"
"m1_958" = "2251267791"
"m2_704" = "1873968200"
"m3_609" = "213153892"
"m3_608" = "2806761673"
[HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Internet Settings\Cache\Paths\path1]
"CachePath" = "%Documents and Settings%\%current user%\Local Settings\Temporary Internet Files\Content.IE5\Cache1"
[HKCU\Software\Stvncyfrlda]
"m2_800" = "958148509"
"m3_632" = "1503690545"
"m2_801" = "2693447063"
"m2_754" = "2739156950"
"m3_702" = "2715215567"
"m2_756" = "1914773136"
"m2_757" = "3650055717"
"m2_750" = "92955650"
[HKLM\SOFTWARE\JavaSoft\Java Update\Policy]
"LastUpdateBeginTime" = "Mon, 27 Jan 2014 22:46:35 GMT"
[HKCU\Software\Stvncyfrlda]
"m2_752" = "3563538714"
"m3_573" = "2200702160"
"m3_652" = "1816175541"
"m2_803" = "1869060032"
"m2_758" = "1090374004"
"m3_700" = "3506160677"
"m3_701" = "946108240"
"m4_942" = "2556298006"
"m3_706" = "1066148019"
"m3_707" = "2768162862"
"m3_704" = "1857094121"
"m3_653" = "3585168160"
"m3_705" = "3592663300"
"m4_944" = "1731912176"
[HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Shell Folders]
"Common AppData" = "%Documents and Settings%\All Users\Application Data"
[HKCU\Software\Stvncyfrlda]
"m4_864" = "347607008"
"m1_119" = "1659721904"
"m1_118" = "3954079619"
"m4_865" = "2082897741"
"m1_115" = "2860953785"
"m1_114" = "3116486599"
"m1_117" = "3411843327"
"m1_116" = "1907190711"
"m1_111" = "2786104620"
"m1_110" = "80787809"
"m1_113" = "2644338339"
"m1_112" = "2047112065"
"m4_867" = "1258511911"
"m4_860" = "1996378668"
"m4_861" = "3731669401"
"m2_578" = "2270672302"
"m2_579" = "4005957875"
"m4_885" = "2428974033"
"m2_574" = "3919430465"
"m2_575" = "1359765529"
"m2_576" = "3095044903"
"m2_577" = "535379401"
"m2_570" = "1273237194"
"m2_571" = "3008533055"
"m2_572" = "448848336"
"m2_573" = "2184147693"
"m3_909" = "1109576736"
"m1_734" = "1003967912"
"m1_201" = "76530938"
"m1_200" = "476187997"
"m1_203" = "1277103155"
"m1_202" = "3846089295"
"m1_205" = "1915874832"
"m1_204" = "2267382626"
"m1_207" = "2501809926"
"m1_206" = "942507247"
"m1_209" = "3798946707"
"m1_208" = "2699160041"
"m3_633" = "3239243436"
"m1_846" = "769313113"
"m1_845" = "4043058698"
"m1_844" = "2052464672"
"m1_843" = "929975605"
"m1_842" = "2519463412"
"m1_841" = "1465684516"
"m1_840" = "3981234786"
"m1_849" = "488568368"
"m1_848" = "796948766"
"m2_400" = "2626555652"
"m2_401" = "66886319"
"m2_402" = "1802169936"
"m2_403" = "3537469092"
"m2_404" = "977783478"
"m2_405" = "2713080649"
"m2_406" = "153397074"
"m2_407" = "1888698236"
"m2_408" = "3623980160"
"m2_409" = "1064309187"
"m3_249" = "2607352620"
"m3_248" = "871930801"
"m3_719" = "2116655370"
"m3_718" = "381675935"
"m3_243" = "751873630"
"m3_242" = "3345366819"
"m3_241" = "1609928628"
"m3_240" = "4136311833"
"m3_247" = "3398363138"
"m3_246" = "1696364695"
"m3_245" = "4256418168"
"m3_244" = "2487310797"
"m4_880" = "2342454960"
"m4_936" = "734488200"
"m1_577" = "1713167460"
"m1_947" = "2165012058"
"m4_881" = "4077745693"
"m4_107" = "992514703"
"m4_106" = "3552191266"
"m4_105" = "1816900533"
"m4_104" = "81609800"
"m4_103" = "2641286363"
"m4_102" = "905995630"
"m4_101" = "3465672193"
"m4_100" = "1730381460"
"m4_109" = "168128873"
"m4_108" = "2727805436"
"m4_41" = "2427443317"
"m4_40" = "692152584"
"m4_43" = "1603057487"
"m4_42" = "4162734050"
"m4_45" = "778671657"
"m4_44" = "3338348220"
"m4_47" = "4249253123"
"m4_46" = "2513962390"
"m4_49" = "3424867293"
"m4_48" = "1689576560"
"m4_747" = "3477021455"
"m4_746" = "1741730722"
"m4_741" = "1655211649"
"m4_740" = "4214888212"
"m4_743" = "830825819"
"m4_742" = "3390502382"
"m3_444" = "1653222181"
"m1_952" = "349263081"
[HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings]
"GlobalUserOffline" = "0"
[HKCU\Software\Stvncyfrlda]
"m1_732" = "728624611"
"m4_631" = "4046759339"
"m4_630" = "2311468606"
"m4_633" = "3222373509"
"m4_632" = "1487082776"
"m4_635" = "2397987679"
"m4_634" = "662696946"
"m4_637" = "1573601849"
"m4_636" = "4133278412"
"m4_639" = "749216019"
"m4_638" = "3308892582"
"m3_669" = "1251624432"
"m2_240" = "4152910274"
"m2_88" = "2381732130"
"m4_329" = "3974968085"
"m4_328" = "2239677352"
"m4_327" = "504386619"
"m4_326" = "3064063182"
"m4_325" = "1328772449"
"m4_324" = "3888449012"
[HKLM\SOFTWARE\Microsoft\Security Center\Svc]
"FirewallDisableNotify" = "1"
[HKCU\Software\Stvncyfrlda]
"m4_322" = "417867546"
"m4_321" = "2977544109"
"m4_320" = "1242253376"
"m3_557" = "172694016"
"m3_568" = "2080658417"
"m4_450" = "3491749274"
"m3_642" = "1676674419"
"m1_967" = "1199302846"
"m3_555" = "1030290278"
"m1_476" = "2363485858"
"m3_554" = "3590212555"
"m3_441" = "742299884"
"m2_81" = "3119602509"
"m3_552" = "119744801"
"m2_80" = "1384302271"
"m3_551" = "2679290290"
"m4_456" = "1018591784"
"m4_253" = "941891257"
"m4_252" = "3501567820"
"m4_251" = "1766277087"
"m4_250" = "30986354"
"m4_257" = "3588086893"
"m4_256" = "1852796160"
"m4_255" = "117505427"
"m4_254" = "2677181990"
"m4_259" = "2763701063"
"m4_258" = "1028410330"
"m4_929" = "1472354957"
"m4_928" = "4032031520"
"m1_605" = "699771335"
"m2_376" = "3929258682"
"m2_377" = "1369575090"
"m2_374" = "458675086"
"m2_375" = "2193960851"
"m2_372" = "1283059837"
"m2_373" = "3018345981"
"m2_370" = "2107448095"
"m2_371" = "3842728135"
"m4_811" = "2866478671"
"m4_756" = "1914768868"
"m4_813" = "2042092841"
"m2_638" = "3308891336"
"m4_815" = "1217707011"
"m4_814" = "3777383574"
"m2_378" = "3104873335"
"m2_379" = "545188939"
"m3_868" = "3010635709"
"m3_443" = "4246322102"
"m4_730" = "4041850066"
"m3_44" = "3354938517"
"m3_45" = "795540480"
"m3_46" = "2497408959"
"m3_47" = "4232388394"
"m3_40" = "675414817"
"m3_41" = "2444014172"
"m3_42" = "4179439051"
"m3_43" = "1586486630"
"m1_685" = "2211283571"
"m1_684" = "1123148175"
"m1_687" = "3003091506"
"m1_686" = "2062379688"
"m3_48" = "1706528345"
"m3_49" = "3441441268"
"m1_683" = "3890033792"
"m2_632" = "1487078862"
"m1_449" = "3556931884"
"m1_448" = "1493897915"
"m1_443" = "3969573861"
"m1_442" = "3955635971"
"m1_441" = "2363031734"
"m1_440" = "3824349928"
"m1_447" = "2173667734"
"m1_446" = "2457027465"
"m1_445" = "2410670870"
"m1_444" = "2126308474"
"m3_878" = "3183562239"
"m3_879" = "624164202"
"m3_793" = "1679049356"
"m3_870" = "2152580679"
"m3_871" = "3921572338"
"m3_872" = "1361633633"
"m3_792" = "4239119121"
"m3_874" = "504037387"
"m3_875" = "2272637862"
"m3_876" = "3974505173"
"m3_877" = "1414582848"
"m4_884" = "693683300"
"m3_569" = "3849765740"
"m2_819" = "3863899473"
"m3_799" = "3501109018"
"m3_623" = "3032629354"
"m1_601" = "1490769812"
"m2_185" = "3201210121"
"m2_184" = "1465912912"
"m2_187" = "2376825066"
"m2_186" = "641527564"
"m2_181" = "555012717"
"m2_180" = "3114683074"
"m2_183" = "4025582369"
"m2_182" = "2290298531"
"m1_669" = "572810599"
"m1_668" = "1690213379"
"m2_189" = "1552438801"
"m2_188" = "4112108692"
"m1_943" = "2195182128"
"m1_607" = "2385157312"
"m1_600" = "4246530246"
"m3_715" = "3765591878"
"m1_847" = "697721046"
"m1_946" = "981072763"
"m1_924" = "423224233"
"m2_747" = "3477026793"
"m3_698" = "35169563"
"m2_745" = "6445711"
"m2_744" = "2566113353"
"m2_743" = "830828616"
"m3_714" = "2063707179"
"m2_741" = "1655216821"
"m3_563" = "1994155678"
"m2_930" = "3207648932"
"m2_749" = "2652639974"
"m2_748" = "917341700"
"m3_482" = "3169755411"
"m1_785" = "1093082467"
"m3_484" = "2378809405"
"m3_717" = "2974645856"
[HKLM\SOFTWARE\Microsoft\Security Center]
"FirewallDisableNotify" = "1"
[HKCU\Software\Stvncyfrlda]
"m1_944" = "168565405"
"m4_626" = "3960240266"
[HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Internet Settings\Cache\Paths\path3]
"CachePath" = "%Documents and Settings%\%current user%\Local Settings\Temporary Internet Files\Content.IE5\Cache3"
[HKCU\Software\Stvncyfrlda]
"m3_457" = "2770830268"
"m2_814" = "3777385775"
"m1_945" = "894551785"
"m4_627" = "1400563703"
"m2_569" = "3832920650"
"m2_568" = "2097621172"
"m2_567" = "362339353"
"m2_566" = "2922004547"
"m2_565" = "1186725741"
"m2_564" = "3746392396"
"m2_563" = "2011110894"
"m2_562" = "275811902"
"m2_561" = "2835495162"
"m2_560" = "1100194896"
"m1_942" = "3208117851"
"m4_624" = "489658800"
"m1_274" = "2224204304"
"m1_275" = "3279414603"
"m1_276" = "1332843993"
"m1_277" = "2077329487"
"m1_270" = "876675757"
"m1_271" = "727372090"
"m1_272" = "547227782"
"m1_273" = "2556319336"
"m3_900" = "2705117469"
"m1_278" = "2337643267"
"m1_279" = "3789834898"
"m3_901" = "112017544"
"m1_308" = "2101168876"
"m4_235" = "4066396431"
"m1_878" = "4003101881"
"m4_625" = "2224949533"
"m4_234" = "2331105698"
"m1_300" = "479246821"
"m1_301" = "1651965552"
"m1_302" = "3907725275"
"m1_303" = "3852597176"
"m1_304" = "1572931116"
"m1_305" = "547677795"
"m1_306" = "1542220784"
"m1_307" = "687697643"
"m2_413" = "3710506325"
"m2_412" = "1975206082"
"m2_411" = "239926075"
"m2_410" = "2799591739"
"m2_417" = "2061736462"
"m2_416" = "326437668"
"m2_415" = "2886120871"
"m2_414" = "1150818188"
[HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings\Connections]
"SavedLegacySettings" = "3C 00 00 00 1B 00 00 00 01 00 00 00 00 00 00 00"
[HKCU\Software\Stvncyfrlda]
"m2_916" = "388403963"
"m2_419" = "1237337967"
"m2_418" = "3797022556"
"m1_940" = "2375660424"
"m2_917" = "2123707639"
"m2_914" = "1212795826"
"m3_278" = "1357802103"
"m3_279" = "3092776418"
"m3_276" = "2182302637"
"m3_277" = "3950901976"
"m3_274" = "3039832195"
"m3_275" = "446879806"
"m3_272" = "3830778361"
"m3_273" = "1304934676"
"m3_270" = "393932511"
"m3_271" = "2095357514"
"m4_816" = "2952997744"
"m2_810" = "1131192187"
"m1_61" = "3867597733"
"m2_515" = "321521733"
"m1_941" = "1182794131"
"m4_882" = "1518069130"
"m1_656" = "2786127903"
"m3_679" = "1424678962"
"m1_657" = "3794126813"
"m4_239" = "2417624771"
"m4_645" = "2571025825"
"m4_238" = "682334038"
"m4_138" = "3246919874"
"m4_139" = "687243311"
"m4_132" = "1425110068"
"m4_133" = "3160400801"
"m4_130" = "2249495898"
"m4_131" = "3984786631"
"m4_136" = "4071305704"
"m4_137" = "1511629141"
"m4_134" = "600724238"
"m4_135" = "2336014971"
"m3_474" = "2205754875"
"m3_475" = "3907769622"
"m3_476" = "1347699845"
"m3_477" = "3116823600"
"m3_470" = "3854825527"
"m3_471" = "1294756770"
"m3_472" = "2996706001"
"m3_473" = "436767308"
"m1_898" = "3872647172"
"m1_899" = "2539814169"
"m1_651" = "389172382"
"m3_478" = "557279151"
"m3_479" = "2258704090"
"m4_58" = "1862614706"
"m4_59" = "3597905439"
"m4_56" = "2687000536"
"m4_57" = "127323973"
"m4_54" = "3511386366"
"m4_55" = "951709803"
"m4_52" = "40804900"
"m4_53" = "1776095633"
"m4_50" = "865190730"
"m4_51" = "2600481463"
"m4_759" = "2825673771"
"m3_452" = "2684343901"
"m3_184" = "1449360497"
"m3_185" = "3217944556"
"m3_186" = "658480923"
"m3_187" = "2359824054"
"m3_180" = "3097834125"
"m3_181" = "538419768"
"m3_182" = "2306891095"
"m3_183" = "4008889538"
"m1_659" = "1986403238"
"m3_188" = "4095393317"
"m3_189" = "1569401168"
"m1_39" = "2843678166"
"m1_38" = "731301776"
"m4_312" = "244829400"
"m4_313" = "1980120133"
"m4_310" = "1069215230"
"m4_311" = "2804505963"
"m4_316" = "2891025036"
"m4_317" = "331348473"
"m4_314" = "3715410866"
"m4_315" = "1155734303"
"m3_690" = "3333110243"
"m4_622" = "1314044630"
"m4_318" = "2066639206"
"m4_319" = "3801929939"
"m4_648" = "3481930728"
"m3_453" = "124273096"
"m3_696" = "893229681"
"m4_623" = "3049335363"
"m4_482" = "3186477882"
"m4_483" = "626801319"
"m4_480" = "4010863712"
"m4_481" = "1451187149"
"m4_486" = "1537706222"
"m4_487" = "3272996955"
"m4_484" = "2362092052"
"m4_485" = "4097382785"
"m3_500" = "45271757"
"m3_501" = "1780710008"
"m4_488" = "713320392"
"m4_489" = "2448611125"
"m3_504" = "2691183793"
"m3_505" = "165323820"
"m3_506" = "1900762971"
"m3_507" = "3602237174"
"m4_796" = "2606921452"
"m4_797" = "47244889"
"m4_794" = "3431307282"
"m4_795" = "871630719"
"m4_792" = "4255693112"
"m4_793" = "1696016549"
"m4_790" = "785111646"
"m4_791" = "2520402379"
"m3_450" = "3508320179"
"m4_798" = "1782535622"
"m4_799" = "3517826355"
"m4_883" = "3253359863"
"m3_451" = "915220270"
"m4_266" = "2025834306"
"m4_267" = "3761125039"
"m4_264" = "2850220136"
"m4_265" = "290543573"
"m4_262" = "3674605966"
"m4_263" = "1114929403"
"m4_260" = "204024500"
"m4_261" = "1939315233"
"m4_849" = "88049789"
"m4_268" = "1201448476"
"m4_269" = "2936739209"
"m2_369" = "372150121"
"m2_368" = "2931833650"
"m4_868" = "2993802644"
"m4_869" = "434126081"
"m3_456" = "1035276289"
"m2_361" = "3669701007"
"m2_360" = "1934397770"
"m2_363" = "2845304611"
"m2_362" = "1110016658"
"m2_365" = "2020920493"
"m2_364" = "285638460"
"m2_367" = "1196535005"
"m2_366" = "3756219052"
"m2_10" = "173034199"
"m2_11" = "1908333992"
"m2_12" = "3643613377"
"m2_13" = "1083948580"
"m2_14" = "2819230971"
"m2_15" = "259559886"
"m2_16" = "1994844948"
"m2_17" = "3730144083"
"m2_18" = "1170459845"
"m2_19" = "2905756326"
"m3_71" = "2929954066"
"m3_70" = "1227955687"
"m3_73" = "2139008060"
"m3_72" = "369900673"
"m3_75" = "1280954054"
"m3_74" = "3840892843"
"m3_77" = "490007008"
"m3_76" = "3049946741"
"m3_79" = "3927378058"
"m3_78" = "2191956255"
"m1_478" = "2081458415"
"m1_479" = "1084099772"
[HKLM\SOFTWARE\Microsoft\Security Center\Svc]
"AntiVirusOverride" = "1"
[HKCU\Software\Stvncyfrlda]
"m1_477" = "2240112805"
"m1_474" = "3611781116"
"m1_475" = "3971486437"
"m1_472" = "3293855143"
"m1_473" = "1498738016"
"m1_470" = "3534482248"
"m1_471" = "1225565651"
"m3_869" = "417552168"
"m3_454" = "1826287975"
"m3_863" = "2890582618"
"m3_862" = "1155029807"
"m3_861" = "3748637616"
"m3_860" = "2013083653"
"m3_867" = "1241527310"
"m3_866" = "3801580691"
"m3_865" = "2099582308"
"m3_553" = "1821235292"
[HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\system]
"EnableLUA" = "0"
[HKCU\Software\Stvncyfrlda]
"m1_784" = "230975141"
"m3_455" = "3561709714"
"m1_786" = "4015816475"
"m1_787" = "601369900"
"m1_780" = "3440183658"
"m1_781" = "4228860159"
"m1_782" = "651297433"
"m1_783" = "3693085778"
"m1_610" = "917608449"
"m1_788" = "1175164748"
"m1_789" = "3758749908"
"m4_805" = "1044668865"
"m2_178" = "3939067562"
"m2_179" = "1379401343"
"m1_654" = "3970757826"
"m1_655" = "1944081758"
"m1_652" = "3018455893"
"m1_653" = "3768523959"
"m1_650" = "2247367582"
"m1_611" = "2535725213"
"m2_170" = "2941641484"
"m2_171" = "381974835"
"m2_172" = "2117255980"
"m2_173" = "3852554910"
"m2_174" = "1292873476"
"m2_175" = "3028159455"
"m2_176" = "468484260"
"m2_177" = "2203785988"
"m4_923" = "3945512447"
"m3_488" = "730271201"
"m1_616" = "614617349"
"m3_550" = "910167559"
"m2_900" = "2688525183"
"m2_778" = "1436463606"
"m2_779" = "3171746043"
[HKCU\Software\Stvncyfrlda\168128873]
"86519073" = "73"
[HKCU\Software\Stvncyfrlda]
"m2_772" = "3909623039"
"m2_773" = "1349936029"
"m2_770" = "439039044"
"m2_771" = "2174323539"
"m2_776" = "2260850188"
"m2_777" = "3996132411"
"m2_774" = "3085234766"
"m2_775" = "525551505"
A firewall is disabled:
[HKLM\System\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\StandardProfile]
"EnableFirewall" = "0"
The Virus modifies IE settings for security zones to map all web-nodes that bypassing proxy to the Intranet Zone:
[HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings\ZoneMap]
"ProxyBypass" = "1"
Antivirus notifications are disabled:
[HKLM\SOFTWARE\Microsoft\Security Center]
"AntiVirusDisableNotify" = "1"
Proxy settings are disabled:
[HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings]
"ProxyEnable" = "0"
Firewall notifications are disabled:
[HKLM\System\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\StandardProfile]
"DisableNotifications" = "1"
Adds a rule to the firewall Windows which allows any network activity:
[HKLM\System\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\StandardProfile\AuthorizedApplications\List\c:]
"%original file name%.exe" = "c:\%original file name%.exe:*:Enabled:ipsec"
The Virus modifies IE settings for security zones to map all local web-nodes with no dots which do not refer to any zone to the Intranet Zone:
[HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings\ZoneMap]
"UNCAsIntranet" = "1"
The Virus modifies IE settings for security zones to map all urls to the Intranet Zone:
"IntranetName" = "1"
Antivirus notifications are disabled:
[HKLM\SOFTWARE\Microsoft\Security Center\Svc]
"AntiVirusDisableNotify" = "1"
The Virus deletes the following registry key(s):
[HKLM\System\CurrentControlSet\Control\SafeBoot\Network\LanmanWorkstation]
[HKLM\System\CurrentControlSet\Control\SafeBoot\Minimal\{4D36E97D-E325-11CE-BFC1-08002BE10318}]
[HKLM\System\CurrentControlSet\Control\SafeBoot\Minimal\sermouse.sys]
[HKLM\System\CurrentControlSet\Control\SafeBoot\Network\termservice]
[HKLM\System\CurrentControlSet\Control\SafeBoot\Minimal\Netlogon]
[HKLM\System\CurrentControlSet\Control\SafeBoot\Network\TDI]
[HKLM\System\CurrentControlSet\Control\SafeBoot\Network\rdpcdd.sys]
[HKLM\System\CurrentControlSet\Control\SafeBoot\Network\Browser]
[HKLM\System\CurrentControlSet\Control\SafeBoot\Minimal\SCSI Class]
[HKLM\System\CurrentControlSet\Control\SafeBoot\Network\sermouse.sys]
[HKLM\System\CurrentControlSet\Control\SafeBoot\Network\Boot Bus Extender]
[HKLM\System\CurrentControlSet\Control\SafeBoot\Network\NetBT]
[HKLM\System\CurrentControlSet\Control\SafeBoot\Network\sr.sys]
[HKLM\System\CurrentControlSet\Control\SafeBoot\Network\{36FC9E60-C465-11CF-8056-444553540000}]
[HKLM\System\CurrentControlSet\Control\SafeBoot\Network\WinMgmt]
[HKLM\System\CurrentControlSet\Control\SafeBoot\Minimal\File system]
[HKLM\System\CurrentControlSet\Control\SafeBoot\Minimal\DcomLaunch]
[HKLM\System\CurrentControlSet\Control\SafeBoot\Minimal\dmserver]
[HKLM\System\CurrentControlSet\Control\SafeBoot\Network\{745A17A0-74D3-11D0-B6FE-00A0C90F57DA}]
[HKLM\System\CurrentControlSet\Control\SafeBoot\Network\EventLog]
[HKLM\System\CurrentControlSet\Control\SafeBoot\Network\Messenger]
[HKLM\System\CurrentControlSet\Control\SafeBoot\Network\{4D36E980-E325-11CE-BFC1-08002BE10318}]
[HKLM\System\CurrentControlSet\Control\SafeBoot\Network\Ndisuio]
[HKLM\System\CurrentControlSet\Control\SafeBoot\Minimal\Boot Bus Extender]
[HKLM\System\CurrentControlSet\Control\SafeBoot\Minimal\CryptSvc]
[HKLM\System\CurrentControlSet\Control\SafeBoot\Network\SharedAccess]
[HKLM\System\CurrentControlSet\Control\SafeBoot\Network\NetBIOSGroup]
[HKLM\System\CurrentControlSet\Control\SafeBoot\Minimal\{4D36E96F-E325-11CE-BFC1-08002BE10318}]
[HKLM\System\CurrentControlSet\Control\SafeBoot\Network\RpcSs]
[HKLM\System\CurrentControlSet\Control\SafeBoot\Network\ipnat.sys]
[HKLM\System\CurrentControlSet\Control\SafeBoot\Network\SCSI Class]
[HKLM\System\CurrentControlSet\Control\SafeBoot\Minimal\vgasave.sys]
[HKLM\System\CurrentControlSet\Control\SafeBoot\Minimal\{4D36E967-E325-11CE-BFC1-08002BE10318}]
[HKLM\System\CurrentControlSet\Control\SafeBoot\Minimal\Filter]
[HKLM\System\CurrentControlSet\Control\SafeBoot\Network\{4D36E972-E325-11CE-BFC1-08002BE10318}]
[HKLM\System\CurrentControlSet\Control\SafeBoot\Minimal\PlugPlay]
[HKLM\System\CurrentControlSet\Control\SafeBoot\Network\rdpdd.sys]
[HKLM\System\CurrentControlSet\Control\SafeBoot\Network\Tcpip]
[HKLM\System\CurrentControlSet\Control\SafeBoot\Network\{4D36E97D-E325-11CE-BFC1-08002BE10318}]
[HKLM\System\CurrentControlSet\Control\SafeBoot\Network\NDIS Wrapper]
[HKLM\System\CurrentControlSet\Control\SafeBoot\Network\Boot file system]
[HKLM\System\CurrentControlSet\Control\SafeBoot\Minimal\PNP Filter]
[HKLM\System\CurrentControlSet\Control\SafeBoot\Network\NetDDEGroup]
[HKLM\System\CurrentControlSet\Control\SafeBoot\Network\CryptSvc]
[HKLM\System\CurrentControlSet\Control\SafeBoot\Network\Primary disk]
[HKLM\System\CurrentControlSet\Control\SafeBoot\Network\Netlogon]
[HKLM\System\CurrentControlSet\Control\SafeBoot\Network\vga.sys]
[HKLM\System\CurrentControlSet\Control\SafeBoot\Network\{4D36E967-E325-11CE-BFC1-08002BE10318}]
[HKLM\System\CurrentControlSet\Control\SafeBoot\Network\HelpSvc]
[HKLM\System\CurrentControlSet\Control\SafeBoot\Minimal\Primary disk]
[HKLM\System\CurrentControlSet\Control\SafeBoot\Minimal\vga.sys]
[HKLM\System\CurrentControlSet\Control\SafeBoot\Network\WZCSVC]
[HKLM\System\CurrentControlSet\Control\SafeBoot\Network\System Bus Extender]
[HKLM\System\CurrentControlSet\Control\SafeBoot\Network\dmserver]
[HKLM\System\CurrentControlSet\Control\SafeBoot\Minimal\{4D36E977-E325-11CE-BFC1-08002BE10318}]
[HKLM\System\CurrentControlSet\Control\SafeBoot\Minimal\System Bus Extender]
[HKLM\System\CurrentControlSet\Control\SafeBoot\Network\vgasave.sys]
[HKLM\System\CurrentControlSet\Control\SafeBoot\Network\{71A27CDD-812A-11D0-BEC7-08002BE2092F}]
[HKLM\System\CurrentControlSet\Control\SafeBoot\Network\NetMan]
[HKLM\System\CurrentControlSet\Control\SafeBoot\Minimal\Base]
[HKLM\System\CurrentControlSet\Control\SafeBoot\Network\File system]
[HKLM\System\CurrentControlSet\Control\SafeBoot\Network\dmadmin]
[HKLM\System\CurrentControlSet\Control\SafeBoot\Network\AppMgmt]
[HKLM\System\CurrentControlSet\Control\SafeBoot\Network\tdtcp.sys]
[HKLM\System\CurrentControlSet\Control\SafeBoot\Network\PCI Configuration]
[HKLM\System\CurrentControlSet\Control\SafeBoot\Network\LanmanServer]
[HKLM\System\CurrentControlSet\Control\SafeBoot\Minimal\HelpSvc]
[HKLM\System\CurrentControlSet\Control\SafeBoot\Network\ip6fw.sys]
[HKLM\System\CurrentControlSet\Control\SafeBoot\Network\{4D36E96A-E325-11CE-BFC1-08002BE10318}]
[HKLM\System\CurrentControlSet\Control\SafeBoot\Network\AFD]
[HKLM\System\CurrentControlSet\Control\SafeBoot\Network\Streams Drivers]
[HKLM\System\CurrentControlSet\Control\SafeBoot\Network\DcomLaunch]
[HKLM\System\CurrentControlSet\Control\SafeBoot\Network\dmboot.sys]
[HKLM\System\CurrentControlSet\Control\SafeBoot\Network\Base]
[HKLM\System\CurrentControlSet\Control\SafeBoot\Network\DnsCache]
[HKLM\System\CurrentControlSet\Control\SafeBoot\Minimal\{4D36E96A-E325-11CE-BFC1-08002BE10318}]
[HKLM\System\CurrentControlSet\Control\SafeBoot\Network\NtLmSsp]
[HKLM\System\CurrentControlSet\Control\SafeBoot\Network\{4D36E965-E325-11CE-BFC1-08002BE10318}]
[HKLM\System\CurrentControlSet\Control\SafeBoot\Minimal\WinMgmt]
[HKLM\System\CurrentControlSet\Control\SafeBoot\Minimal\dmload.sys]
[HKLM\System\CurrentControlSet\Control\SafeBoot\Network\{4D36E977-E325-11CE-BFC1-08002BE10318}]
[HKLM\System\CurrentControlSet\Control\SafeBoot\Minimal\dmboot.sys]
[HKLM\System\CurrentControlSet\Control\SafeBoot\Network\rdsessmgr]
[HKLM\System\CurrentControlSet\Control\SafeBoot\Network\{4D36E975-E325-11CE-BFC1-08002BE10318}]
[HKLM\System\CurrentControlSet\Control\SafeBoot\Network\PlugPlay]
[HKLM\System\CurrentControlSet\Control\SafeBoot\Minimal\dmadmin]
[HKLM\System\CurrentControlSet\Control\SafeBoot\Network\tdpipe.sys]
[HKLM\System\CurrentControlSet\Control\SafeBoot\Network\NDIS]
[HKLM\System\CurrentControlSet\Control\SafeBoot\Network\{4D36E97B-E325-11CE-BFC1-08002BE10318}]
[HKLM\System\CurrentControlSet\Control\SafeBoot\Network\Dhcp]
[HKLM\System\CurrentControlSet\Control\SafeBoot\Network\dmload.sys]
[HKLM\System\CurrentControlSet\Control\SafeBoot\Network\{4D36E96B-E325-11CE-BFC1-08002BE10318}]
[HKLM\System\CurrentControlSet\Control\SafeBoot\Network\{4D36E974-E325-11CE-BFC1-08002BE10318}]
[HKLM\System\CurrentControlSet\Control\SafeBoot\Minimal\SRService]
[HKLM\System\CurrentControlSet\Control\SafeBoot\Network\nm.sys]
[HKLM\System\CurrentControlSet\Control\SafeBoot\Network\PNP_TDI]
[HKLM\System\CurrentControlSet\Control\SafeBoot\Minimal\{4D36E980-E325-11CE-BFC1-08002BE10318}]
[HKLM\System\CurrentControlSet\Control\SafeBoot\Minimal\{745A17A0-74D3-11D0-B6FE-00A0C90F57DA}]
[HKLM\System\CurrentControlSet\Control\SafeBoot\Minimal\Boot file system]
[HKLM\System\CurrentControlSet\Control\SafeBoot\Network\dmio.sys]
[HKLM\System\CurrentControlSet\Control\SafeBoot\Minimal\AppMgmt]
[HKLM\System\CurrentControlSet\Control\SafeBoot\Minimal\PCI Configuration]
[HKLM\System\CurrentControlSet\Control\SafeBoot\Network\NetworkProvider]
[HKLM\System\CurrentControlSet\Control\SafeBoot\Minimal\RpcSs]
[HKLM\System\CurrentControlSet\Control\SafeBoot\Network\nm]
[HKLM\System\CurrentControlSet\Control\SafeBoot\Minimal\{4D36E969-E325-11CE-BFC1-08002BE10318}]
[HKLM\System\CurrentControlSet\Control\SafeBoot\Network\PNP Filter]
[HKLM\System\CurrentControlSet\Control\SafeBoot\Minimal\EventLog]
[HKLM\System\CurrentControlSet\Control\SafeBoot\Network\Network]
[HKLM\System\CurrentControlSet\Control\SafeBoot\Minimal\{36FC9E60-C465-11CF-8056-444553540000}]
[HKLM\System\CurrentControlSet\Control\SafeBoot\Minimal\sr.sys]
[HKLM\System\CurrentControlSet\Control\SafeBoot\Network\LmHosts]
[HKLM\System\CurrentControlSet\Control\SafeBoot\Network\{4D36E96F-E325-11CE-BFC1-08002BE10318}]
[HKLM\System\CurrentControlSet\Control\SafeBoot\Network\Filter]
[HKLM\System\CurrentControlSet\Control\SafeBoot\Network\SRService]
[HKLM\System\CurrentControlSet\Control\SafeBoot\Minimal]
[HKLM\System\CurrentControlSet\Control\SafeBoot\Minimal\{4D36E97B-E325-11CE-BFC1-08002BE10318}]
[HKLM\System\CurrentControlSet\Control\SafeBoot\Network]
[HKLM\System\CurrentControlSet\Control\SafeBoot\Minimal\{4D36E96B-E325-11CE-BFC1-08002BE10318}]
[HKLM\System\CurrentControlSet\Control\SafeBoot\Network\{4D36E973-E325-11CE-BFC1-08002BE10318}]
[HKLM\System\CurrentControlSet\Control\SafeBoot\Network\NetBIOS]
[HKLM\System\CurrentControlSet\Control\SafeBoot\Minimal\dmio.sys]
[HKLM\System\CurrentControlSet\Control\SafeBoot\Minimal\{4D36E965-E325-11CE-BFC1-08002BE10318}]
[HKLM\System\CurrentControlSet\Control\SafeBoot\Minimal\{71A27CDD-812A-11D0-BEC7-08002BE2092F}]
[HKLM\System\CurrentControlSet\Control\SafeBoot\Network\{4D36E969-E325-11CE-BFC1-08002BE10318}]
[HKLM\System\CurrentControlSet\Control\SafeBoot\Network\rdpwd.sys]
The Virus deletes the following value(s) in system registry:
[HKLM\SOFTWARE\JavaSoft\Java Update\Policy]
"VersionXmlChecksum"
"MoreInfoTxt"
"LocalFileName"
[HKLM\System\CurrentControlSet\Control\SafeBoot]
"AlternateShell"
[HKLM\SOFTWARE\JavaSoft\Java Update\Policy]
"LastUDCheckTime"
"UpdateMoreInfoUrl"
"NumTries"
"PreDownld"
"BalloonTip"
"DlgCaption"
[HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings]
"ProxyOverride"
"ProxyServer"
[HKLM\SOFTWARE\JavaSoft\Java Update\Policy]
"TransferJobID"
[HKCU\Software\JavaSoft\Java Update\Policy]
"VersionXmlURL"
[HKLM\SOFTWARE\JavaSoft\Java Update\Policy]
"InstallOptions"
"UrlInfo"
[HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings]
"AutoConfigURL"
[HKLM\SOFTWARE\JavaSoft\Java Update\Policy]
"PreDownldStatus"
"UpdateTitle1"
"BalloonTitle"
"UpdateDescription"
"UpdateTitle2"
Network activity (URLs)
| URL | IP |
|---|---|
| hxxp://a1799.d.akamai.net/update/1.6.0/map-1.6.0.xml | |
| hxxp://a1799.d.akamai.net/update/1.7.0/au-descriptor-1.7.0_51-b13.xml | |
| javadl-esd.sun.com | 23.0.165.10 |
HOSTS file anomalies
No changes have been detected.
Rootkit activity
No anomalies have been detected.
Propagation
A worm can spread via removable drives. It writes its executable and creates "autorun.inf" scripts on all removable drives. The autorun script will execute the Virus's file once a user opens a drive's folder in Windows Explorer.
Removals
Remove it with Ad-Aware
- Click (here) to download and install Ad-Aware Free Antivirus.
- Update the definition files.
- Run a full scan of your computer.
Manual removal*
- Terminate malicious process(es) (How to End a Process With the Task Manager):No processes have been created.
- Delete the original Virus file.
- Delete or disinfect the following files created/modified by the Virus:
%Documents and Settings%\%current user%\Local Settings\Temp\winaibj.exe (849 bytes)
%Documents and Settings%\%current user%\Local Settings\Temp\mqktj.exe (15019 bytes)
%WinDir%\system.ini (70 bytes)
%Documents and Settings%\%current user%\Local Settings\Temp\wlysjm.exe (1 bytes)
%Program Files%\Adobe\Reader 9.0\Reader\Reader_sl.exe (432 bytes)
%Documents and Settings%\%current user%\Local Settings\Temp\jusched.log (409 bytes)
%Documents and Settings%\%current user%\Local Settings\Temp\winvhnjwl.exe (849 bytes)
C:\xeeb.pif (111 bytes)
C:\autorun.inf (315 bytes)
%Program Files%\Common Files\Java\Java Update\jusched.exe (952 bytes)
%System%\drivers\pumlh.sys (5 bytes)
%Documents and Settings%\%current user%\Local Settings\Temp\au-descriptor-1.7.0_51-b13.xml (8 bytes) - Clean the Temporary Internet Files folder, which may contain infected files (How to clean Temporary Internet Files folder).
- Find and delete all copies of the worm's file together with "autorun.inf" scripts on removable drives.
- Reboot the computer.