TROJ_JORIK.SMIF


 ALIASES:

TrojanDownloader:Win32/Renos.PT (Microsoft); Downloader-CEW.au (McAfee); Trojan.FakeAV!gen63 (Symantec); Trojan.Win32.Jorik.Skor.bni (Kaspersky); VirTool.Win32.Obfuscator.hg!b1 (v) (Sunbelt)

 PLATFORM:

Windows 2000, Windows XP, Windows Server 2003

 OVERALL RISK RATING:
 DAMAGE POTENTIAL:
 DISTRIBUTION POTENTIAL:
 REPORTED INFECTION:

  • Threat Type: Trojan

  • Destructiveness: No

  • Encrypted:

  • In the wild: Yes

  OVERVIEW

This Trojan arrives on a system as a file dropped by other malware or as a file downloaded unknowingly by users when visiting malicious sites.

  TECHNICAL DETAILS

File Size:

241,152 bytes

File Type:

EXE

Memory Resident:

Yes

Initial Samples Received Date:

05 Nov 2011

Arrival Details

This Trojan arrives on a system as a file dropped by other malware or as a file downloaded unknowingly by users when visiting malicious sites.

Installation

This Trojan drops the following copies of itself into the affected system:

  • {malware path and file name}.exe

Autostart Technique

This Trojan adds the following registry entries to enable its automatic execution at every system startup:

HKEY_CURRENT_USER\Software\Microsoft\
Windows\CurrentVersion\Run
8DDYX0ZBPZ = "{malware path and file name}.exe"

Other System Modifications

This Trojan adds the following registry keys:

HKEY_CURRENT_USER\Software\8DDYX0ZBPZ

HKEY_CURRENT_USER\Software\Microsoft\
Windows\CurrentVersion\Internet Settings\
Zones\_CHAR(0x03)_

HKEY_CURRENT_USER\Software\Microsoft\
MediaPlayer\Health\{EC1858D8-C346-4B29-A522-167A8F628B97}

It adds the following registry entries:

HKEY_CURRENT_USER\Software\8DDYX0ZBPZ
VtuH = "xC7aKZ+O6wyPlq1krRM4sG7m2LFGsYtHjHOagBf10Uk/n4gL8s8xs9LeD5KQVh3/j+XFa0mnvQ=="

HKEY_CURRENT_USER\Software\8DDYX0ZBPZ
VtuS = "7SDUIc7NyUn+3scc1kYSu3q03Ypcrrs91Uiwuz65qx9Nk5xk/cwysdaVeIiwR0SEi7WoDWq93ivkK298QjAhKyFXr6IFUaa1ckpl+CtKYrPXcsqayrFNxHEr+lJFj1KolIwiUDTQg25XinoX3slUXmrIkTzgIpdtHiHpU/MsOCmfU9i5+pXDu9UR7p420oCQL2ZlZuz7+v9Ij4/uVb22OrOI16VL4YzYmTMo758Gv1LTb4fFLiaNtaUpnz2lSjaQC2kYIR/DuAGYGSt88tSeQKuNw8JSGAgl9ZBFcFQy7GtMx1xW4hX37noQgplvxinKuhQg5wwnHs5bp0kesdcUozPi1ZgRJQY1cetrUAB9TtV2MkeVDyhGxd970+rIfDNV2MoHT3yuIf3cTu+azvkmMlU0CoA1cM4EXPDhRLk="

HKEY_CURRENT_USER\Software\8DDYX0ZBPZ
VpiH = "1cc9758"

HKEY_CURRENT_USER\Software\8DDYX0ZBPZ
VpiB = "6d7d89"

HKEY_CURRENT_USER\Software\8DDYX0ZBPZ
Vpi0 = "1"

HKEY_CURRENT_USER\Software\8DDYX0ZBPZ
VtuS = "7SDUIc7NyUn+3scc1kYSu3q03Ypcrrs91Uiwuz65qx9Nk5xk/cwysdaVeIiwR0SEi7WoDWq93ivkK298QjAhKyFXr6IFUaa1ckpl+CtKYrPXcsqayrFNxHEr+lJFj1KolIwiUDTQg25XinoX3slUXmrIkTzgIpdtHiHpU/MsOCmfU9i5+pXDu9UR7p420oCQL2ZlZuz7+v9Ij4/uVb22OrOI16VL4YzYmTMo758Gv1LTb4fFLiaNtaUpnz2lSjaQC2kYIR/DuAGYGSt88tSeQKuNw8JSGAgl9ZBFcFQy7GtMx1xW4hX37noQgplvxinKuhQg5wwnHs5bp0kesdcUozPi1ZgRJQY1cetrUAB9TtV2MkeVDyhGxd975erIfDNV2MoHT3yuIf3cTu+azvkmMlU0CoA1cM4EXPDhRLk="

HKEY_CURRENT_USER\Software\8DDYX0ZBPZ
Vpi0 = "2"

HKEY_CURRENT_USER\Software\8DDYX0ZBPZ
VtuS = "7SDUIc7NyUn+3scc1kYSu3q03Ypcrrs91Uiwuz65qx9Nk5xk/cwysdaVeIiwR0SEi7WoDWq93ivkK298QjAhKyFXr6IFUaa1ckpl+CtKYrPXcsqayrFNxHEr+lJFj1KolIwiUDTQg25XinoX3slUXmrIkTzgIpdtHiHpU/MsOCmfU9i5+pXDu9UR7p420oCQL2ZlZuz7+v9Ij4/uVb22OrOI16VL4YzYmTMo758Gv1LTb4fFLiaNtaUpnz2lSjaQC2kYIR/DuAGYGSt88tSeQKuNw8JSGAgl9ZBFcFQy7GtMx1xW4hX37noQgplvxinKuhQg5wwnHs5bp0kesdcUozPi1ZgRJQY1cetrUAB9TtV2MkeVDyhGxd97murIfDNV2MoHT3yuIf3cTu+azvkmMlU0CoA1cM4EXPDhRLk="

HKEY_CURRENT_USER\Software\8DDYX0ZBPZ
Vpi0 = "3"

HKEY_CURRENT_USER\Software\8DDYX0ZBPZ
VtuS = "7SDUIc7NyUn+3scc1kYSu3q03Ypcrrs91Uiwuz65qx9Nk5xk/cwysdaVeIiwR0SEi7WoDWq93ivkK298QjAhKyFXr6IFUaa1ckpl+CtKYrPXcsqayrFNxHEr+lJFj1KolIwiUDTQg25XinoX3slUXmrIkTzgIpdtHiHpU/MsOCmfU9i5+pXDu9UR7p420oCQL2ZlZuz7+v9Ij4/uVb22OrOI16VL4YzYmTMo758Gv1LTb4fFLiaNtaUpnz2lSjaQC2kYIR/DuAGYGSt88tSeQKuNw8JSGAgl9ZBFcFQy7GtMx1xW4hX37noQgplvxinKuhQg5wwnHs5bp0kesdcUozPi1ZgRJQY1cetrUAB9TtV2MkeVDyhGxd97w+rIfDNV2MoHT3yuIf3cTu+azvkmMlU0CoA1cM4EXPDhRLk="

HKEY_CURRENT_USER\Software\8DDYX0ZBPZ
Vpi0 = "4"

HKEY_CURRENT_USER\Software\8DDYX0ZBPZ
VtuS = "7SDUIc7NyUn+3scc1kYSu3q03Ypcrrs91Uiwuz65qx9Nk5xk/cwysdaVeIiwR0SEi7WoDWq93ivkK298QjAhKyFXr6IFUaa1ckpl+CtKYrPXcsqayrFNxHEr+lJFj1KolIwiUDTQg25XinoX3slUXmrIkTzgIpdtHiHpU/MsOCmfU9i5+pXDu9UR7p420oCQL2ZlZuz7+v9Ij4/uVb22OrOI16VL4YzYmTMo758Gv1LTb4fFLiaNtaUpnz2lSjaQC2kYIR/DuAGYGSt88tSeQKuNw8JSGAgl9ZBFcFQy7GtMx1xW4hX37noQgplvxinKuhQg5wwnHs5bp0kesdcUozPi1ZgRJQY1cetrUAB9TtV2MkeVDyhGxd940+rIfDNV2MoHT3yuIf3cTu+azvkmMlU0CoA1cM4EXPDhRLk="

HKEY_CURRENT_USER\Software\8DDYX0ZBPZ
Vpi0 = "5"

HKEY_CURRENT_USER\Software\8DDYX0ZBPZ
VtuS = "7SDUIc7NyUn+3scc1kYSu3q03Ypcrrs91Uiwuz65qx9Nk5xk/cwysdaVeIiwR0SEi7WoDWq93ivkK298QjAhKyFXr6IFUaa1ckpl+CtKYrPXcsqayrFNxHEr+lJFj1KolIwiUDTQg25XinoX3slUXmrIkTzgIpdtHiHpU/MsOCmfU9i5+pXDu9UR7p420oCQL2ZlZuz7+v9Ij4/uVb22OrOI16VL4YzYmTMo758Gv1LTb4fFLiaNtaUpnz2lSjaQC2kYIR/DuAGYGSt88tSeQKuNw8JSGAgl9ZBFcFQy7GtMx1xW4hX37noQgplvxinKuhQg5wwnHs5bp0kesdcUozPi1ZgRJQY1cetrUAB9TtV2MkeVDyhGxd945erIfDNV2MoHT3yuIf3cTu+azvkmMlU0CoA1cM4EXPDhRLk="

HKEY_CURRENT_USER\Software\8DDYX0ZBPZ
Vpi0 = "6"

HKEY_CURRENT_USER\Software\8DDYX0ZBPZ
VtuS = "7SDUIc7NyUn+3scc1kYSu3q03Ypcrrs91Uiwuz65qx9Nk5xk/cwysdaVeIiwR0SEi7WoDWq93ivkK298QjAhKyFXr6IFUaa1ckpl+CtKYrPXcsqayrFNxHEr+lJFj1KolIwiUDTQg25XinoX3slUXmrIkTzgIpdtHiHpU/MsOCmfU9i5+pXDu9UR7p420oCQL2ZlZuz7+v9Ij4/uVb22OrOI16VL4YzYmTMo758Gv1LTb4fFLiaNtaUpnz2lSjaQC2kYIR/DuAGYGSt88tSeQKuNw8JSGAgl9ZBFcFQy7GtMx1xW4hX37noQgplvxinKuhQg5wwnHs5bp0kesdcUozPi1ZgRJQY1cetrUAB9TtV2MkeVDyhGxd94murIfDNV2MoHT3yuIf3cTu+azvkmMlU0CoA1cM4EXPDhRLk="

HKEY_CURRENT_USER\Software\8DDYX0ZBPZ
Vpi0 = "7"

HKEY_CURRENT_USER\Software\8DDYX0ZBPZ
VtuS = "7SDUIc7NyUn+3scc1kYSu3q03Ypcrrs91Uiwuz65qx9Nk5xk/cwysdaVeIiwR0SEi7WoDWq93ivkK298QjAhKyFXr6IFUaa1ckpl+CtKYrPXcsqayrFNxHEr+lJFj1KolIwiUDTQg25XinoX3slUXmrIkTzgIpdtHiHpU/MsOCmfU9i5+pXDu9UR7p420oCQL2ZlZuz7+v9Ij4/uVb22OrOI16VL4YzYmTMo758Gv1LTb4fFLiaNtaUpnz2lSjaQC2kYIR/DuAGYGSt88tSeQKuNw8JSGAgl9ZBFcFQy7GtMx1xW4hX37noQgplvxinKuhQg5wwnHs5bp0kesdcUozPi1ZgRJQY1cetrUAB9TtV2MkeVDyhGxd94w+rIfDNV2MoHT3yuIf3cTu+azvkmMlU0CoA1cM4EXPDhRLk="

HKEY_CURRENT_USER\Software\8DDYX0ZBPZ
Vpi0 = "8"

HKEY_CURRENT_USER\Software\8DDYX0ZBPZ
VtuS = "7SDUIc7NyUn+3scc1kYSu3q03Ypcrrs91Uiwuz65qx9Nk5xk/cwysdaVeIiwR0SEi7WoDWq93ivkK298QjAhKyFXr6IFUaa1ckpl+CtKYrPXcsqayrFNxHEr+lJFj1KolIwiUDTQg25XinoX3slUXmrIkTzgIpdtHiHpU/MsOCmfU9i5+pXDu9UR7p420oCQL2ZlZuz7+v9Ij4/uVb22OrOI16VL4YzYmTMo758Gv1LTb4fFLiaNtaUpnz2lSjaQC2kYIR/DuAGYGSt88tSeQKuNw8JSGAgl9ZBFcFQy7GtMx1xW4hX37noQgplvxinKuhQg5wwnHs5bp0kesdcUozPi1ZgRJQY1cetrUAB9TtV2MkeVDyhGxd990+rIfDNV2MoHT3yuIf3cTu+azvkmMlU0CoA1cM4EXPDhRLk="

HKEY_CURRENT_USER\Software\8DDYX0ZBPZ
Vpi0 = "9"

HKEY_CURRENT_USER\Software\8DDYX0ZBPZ
VtuS = "7SDUIc7NyUn+3scc1kYSu3q03Ypcrrs91Uiwuz65qx9Nk5xk/cwysdaVeIiwR0SEi7WoDWq93ivkK298QjAhKyFXr6IFUaa1ckpl+CtKYrPXcsqayrFNxHEr+lJFj1KolIwiUDTQg25XinoX3slUXmrIkTzgIpdtHiHpU/MsOCmfU9i5+pXDu9UR7p420oCQL2ZlZuz7+v9Ij4/uVb22OrOI16VL4YzYmTMo758Gv1LTb4fFLiaNtaUpnz2lSjaQC2kYIR/DuAGYGSt88tSeQKuNw8JSGAgl9ZBFcFQy7GtMx1xW4hX37noQgplvxinKuhQg5wwnHs5bp0kesdcUozPi1ZgRJQY1cetrUAB9TtV2MkeVDyhGxd995erIfDNV2MoHT3yuIf3cTu+azvkmMlU0CoA1cM4EXPDhRLk="

HKEY_CURRENT_USER\Software\8DDYX0ZBPZ
Vpi0 = "a"

HKEY_CURRENT_USER\Software\8DDYX0ZBPZ
VtuS = "7SDUIc7NyUn+3scc1kYSu3q03Ypcrrs91Uiwuz65qx9Nk5xk/cwysdaVeIiwR0SEi7WoDWq93ivkK298QjAhKyFXr6IFUaa1ckpl+CtKYrPXcsqayrFNxHEr+lJFj1KolIwiUDTQg25XinoX3slUXmrIkTzgIpdtHiHpU/MsOCmfU9i5+pXDu9UR7p420oCQL2ZlZuz7+v9Ij4/uVb22OrOI16VL4YzYmTMo758Gv1LTb4fFLiaNtaUpnz2lSjaQC2kYIR/DuAGYGSt88tSeQKuNw8JSGAgl9ZBFcFQy7GtMx1xW4hX37noQgplvxinKuhQg5wwnHs5bp0kesdcUozPi1ZgRJQY1cetrUAB9TtV2MkeVDyhGxd97+uHxcyB8ycc6cmCqF/XNUsWSzfkhGBU0LKIob94+afHCTbk="

HKEY_CURRENT_USER\Software\8DDYX0ZBPZ
Vpi0 = "b"

HKEY_CURRENT_USER\Software\8DDYX0ZBPZ
VtuS = "7SDUIc7NyUn+3scc1kYSu3q03Ypcrrs91Uiwuz65qx9Nk5xk/cwysdaVeIiwR0SEi7WoDWq93ivkK298QjAhKyFXr6IFUaa1ckpl+CtKYrPXcsqayrFNxHEr+lJFj1KolIwiUDTQg25XinoX3slUXmrIkTzgIpdtHiHpU/MsOCmfU9i5+pXDu9UR7p420oCQL2ZlZuz7+v9Ij4/uVb22OrOI16VL4YzYmTMo758Gv1LTb4fFLiaNtaUpnz2lSjaQC2kYIR/DuAGYGSt88tSeQKuNw8JSGAgl9ZBFcFQy7GtMx1xW4hX37noQgplvxinKuhQg5wwnHs5bp0kesdcUozPi1ZgRJQY1cetrUAB9TtV2MkeVDyhGxd97+uXxcyB8ycc6cmCqF/XNUsWSzfkhGBU0LKIob94+afHCTbk="

HKEY_CURRENT_USER\Software\8DDYX0ZBPZ
Vpi0 = "c"

HKEY_CURRENT_USER\Software\8DDYX0ZBPZ
VtuS = "7SDUIc7NyUn+3scc1kYSu3q03Ypcrrs91Uiwuz65qx9Nk5xk/cwysdaVeIiwR0SEi7WoDWq93ivkK298QjAhKyFXr6IFUaa1ckpl+CtKYrPXcsqayrFNxHEr+lJFj1KolIwiUDTQg25XinoX3slUXmrIkTzgIpdtHiHpU/MsOCmfU9i5+pXDu9UR7p420oCQL2ZlZuz7+v9Ij4/uVb22OrOI16VL4YzYmTMo758Gv1LTb4fFLiaNtaUpnz2lSjaQC2kYIR/DuAGYGSt88tSeQKuNw8JSGAgl9ZBFcFQy7GtMx1xW4hX37noQgplvxinKuhQg5wwnHs5bp0kesdcUozPi1ZgRJQY1cetrUAB9TtV2MkeVDyhGxd97+vnxcyB8ycc6cmCqF/XNUsWSzfkhGBU0LKIob94+afHCTbk="

HKEY_CURRENT_USER\Software\8DDYX0ZBPZ
Vpi0 = "d"

HKEY_CURRENT_USER\Software\8DDYX0ZBPZ
VtuS = "7SDUIc7NyUn+3scc1kYSu3q03Ypcrrs91Uiwuz65qx9Nk5xk/cwysdaVeIiwR0SEi7WoDWq93ivkK298QjAhKyFXr6IFUaa1ckpl+CtKYrPXcsqayrFNxHEr+lJFj1KolIwiUDTQg25XinoX3slUXmrIkTzgIpdtHiHpU/MsOCmfU9i5+pXDu9UR7p420oCQL2ZlZuz7+v9Ij4/uVb22OrOI16VL4YzYmTMo758Gv1LTb4fFLiaNtaUpnz2lSjaQC2kYIR/DuAGYGSt88tSeQKuNw8JSGAgl9ZBFcFQy7GtMx1xW4hX37noQgplvxinKuhQg5wwnHs5bp0kesdcUozPi1ZgRJQY1cetrUAB9TtV2MkeVDyhGxd97+v3xcyB8ycc6cmCqF/XNUsWSzfkhGBU0LKIob94+afHCTbk="

HKEY_CURRENT_USER\Software\8DDYX0ZBPZ
Vpi0 = "e"

HKEY_CURRENT_USER\Software\8DDYX0ZBPZ
VtuS = "7SDUIc7NyUn+3scc1kYSu3q03Ypcrrs91Uiwuz65qx9Nk5xk/cwysdaVeIiwR0SEi7WoDWq93ivkK298QjAhKyFXr6IFUaa1ckpl+CtKYrPXcsqayrFNxHEr+lJFj1KolIwiUDTQg25XinoX3slUXmrIkTzgIpdtHiHpU/MsOCmfU9i5+pXDu9UR7p420oCQL2ZlZuz7+v9Ij4/uVb22OrOI16VL4YzYmTMo758Gv1LTb4fFLiaNtaUpnz2lSjaQC2kYIR/DuAGYGSt88tSeQKuNw8JSGAgl9ZBFcFQy7GtMx1xW4hX37noQgplvxinKuhQg5wwnHs5bp0kesdcUozPi1ZgRJQY1cetrUAB9TtV2MkeVDyhGxd97+qTxcyB8ycc6cmCqF/XNUsWSzfkhGBU0LKIob94+afHCTbk="

HKEY_CURRENT_USER\Software\8DDYX0ZBPZ
Vpi0 = "f"

HKEY_CURRENT_USER\Software\8DDYX0ZBPZ
VtuS = "7SDUIc7NyUn+3scc1kYSu3q03Ypcrrs91Uiwuz65qx9Nk5xk/cwysdaVeIiwR0SEi7WoDWq93ivkK298QjAhKyFXr6IFUaa1ckpl+CtKYrPXcsqayrFNxHEr+lJFj1KolIwiUDTQg25XinoX3slUXmrIkTzgIpdtHiHpU/MsOCmfU9i5+pXDu9UR7p420oCQL2ZlZuz7+v9Ij4/uVb22OrOI16VL4YzYmTMo758Gv1LTb4fFLiaNtaUpnz2lSjaQC2kYIR/DuAGYGSt88tSeQKuNw8JSGAgl9ZBFcFQy7GtMx1xW4hX37noQgplvxinKuhQg5wwnHs5bp0kesdcUozPi1ZgRJQY1cetrUAB9TtV2MkeVDyhGxd97+rzxcyB8ycc6cmCqF/XNUsWSzfkhGBU0LKIob94+afHCTbk="

HKEY_CURRENT_USER\Software\8DDYX0ZBPZ
VtuS = "7SDUIc7NyUn+3scc1kYSu3q03Ypcrrs91Uiwuz65qx9Nk5xk/cwysdaVeIiwR0SEi7WoDWq93ivkK298QjAhKyFXr6IFUaa1ckpl+CtKYrPXcsqayrFNxHEr+lJFj1KolIwiUDTQg25XinoX3slUXmrIkTzgIpdtHiHpU/MsOCmfU9i5+pXDu9UR7p420oCQL2ZlZuz7+v9Ij4/uVb22OrOI16VL4YzYmTMo758Gv1LTb4fFLiaNtaUpnz2lSjaQC2kYIR/DuAGYGSt88tSeQKuNw8JSGAgl9ZBFcFQy7GtMx1xW4hX37noQgplvxinKuhQg5wwnHs5bp0kesdcUozPi1ZgRJQY1cetrUAB9TtV2MkeVDyhGxd97+unxcyB8ycc6cmCqF/XNUsWSzfkhGBU0LKIob94+afHCTbk="

HKEY_CURRENT_USER\Software\8DDYX0ZBPZ
Vpi0 = "11"

HKEY_CURRENT_USER\Software\8DDYX0ZBPZ
VtuS = "7SDUIc7NyUn+3scc1kYSu3q03Ypcrrs91Uiwuz65qx9Nk5xk/cwysdaVeIiwR0SEi7WoDWq93ivkK298QjAhKyFXr6IFUaa1ckpl+CtKYrPXcsqayrFNxHEr+lJFj1KolIwiUDTQg25XinoX3slUXmrIkTzgIpdtHiHpU/MsOCmfU9i5+pXDu9UR7p420oCQL2ZlZuz7+v9Ij4/uVb22OrOI16VL4YzYmTMo758Gv1LTb4fFLiaNtaUpnz2lSjaQC2kYIR/DuAGYGSt88tSeQKuNw8JSGAgl9ZBFcFQy7GtMx1xW4hX37noQgplvxinKuhQg5wwnHs5bp0kesdcUozPi1ZgRJQY1cetrUAB9TtV2MkeVDyhGxd97+qDxcyB8ycc6cmCqF/XNUsWSzfkhGBU0LKIob94+afHCTbk="

HKEY_CURRENT_USER\Software\8DDYX0ZBPZ
Vpi0 = "12"

HKEY_CURRENT_USER\Software\8DDYX0ZBPZ
VtuS = "7SDUIc7NyUn+3scc1kYSu3q03Ypcrrs91Uiwuz65qx9Nk5xk/cwysdaVeIiwR0SEi7WoDWq93ivkK298QjAhKyFXr6IFUaa1ckpl+CtKYrPXcsqayrFNxHEr+lJFj1KolIwiUDTQg25XinoX3slUXmrIkTzgIpdtHiHpU/MsOCmfU9i5+pXDu9UR7p420oCQL2ZlZuz7+v9Ij4/uVb22OrOI16VL4YzYmTMo758Gv1LTb4fFLiaNtaUpnz2lSjaQC2kYIR/DuAGYGSt88tSeQKuNw8JSGAgl9ZBFcFQy7GtMx1xW4hX37noQgplvxinKuhQg5wwnHs5bp0kesdcUozPi1ZgRJQY1cetrUAB9TtV2MkeVDyhGxd97+t/xcyB8ycc6cmCqF/XNUsWSzfkhGBU0LKIob94+afHCTbk="

HKEY_CURRENT_USER\Software\8DDYX0ZBPZ
Vpi0 = "13"

HKEY_CURRENT_USER\Software\8DDYX0ZBPZ
VtuS = "7SDUIc7NyUn+3scc1kYSu3q03Ypcrrs91Uiwuz65qx9Nk5xk/cwysdaVeIiwR0SEi7WoDWq93ivkK298QjAhKyFXr6IFUaa1ckpl+CtKYrPXcsqayrFNxHEr+lJFj1KolIwiUDTQg25XinoX3slUXmrIkTzgIpdtHiHpU/MsOCmfU9i5+pXDu9UR7p420oCQL2ZlZuz7+v9Ij4/uVb22OrOI16VL4YzYmTMo758Gv1LTb4fFLiaNtaUpnz2lSjaQC2kYIR/DuAGYGSt88tSeQKuNw8JSGAgl9ZBFcFQy7GtMx1xW4hX37noQgplvxinKuhQg5wwnHs5bp0kesdcUozPi1ZgRJQY1cetrUAB9TtV2MkeVDyhGxd97+sPxcyB8ycc6cmCqF/XNUsWSzfkhGBU0LKIob94+afHCTbk="

HKEY_CURRENT_USER\Software\8DDYX0ZBPZ
Vpi0 = "14"

HKEY_CURRENT_USER\Software\8DDYX0ZBPZ
VtuS = "7SDUIc7NyUn+3scc1kYSu3q03Ypcrrs91Uiwuz65qx9Nk5xk/cwysdaVeIiwR0SEi7WoDWq93ivkK298QjAhKyFXr6IFUaa1ckpl+CtKYrPXcsqayrFNxHEr+lJFj1KolIwiUDTQg25XinoX3slUXmrIkTzgIpdtHiHpU/MsOCmfU9i5+pXDu9UR7p420oCQL2ZlZuz7+v9Ij4/uVb22OrOI16VL4YzYmTMo758Gv1LTb4fFLiaNtaUpnz2lSjaQC2kYIR/DuAGYGSt88tSeQKuNw8JSGAgl9ZBFcFQy7GtMx1xW4hX37noQgplvxinKuhQg5wwnHs5bp0kesdcUozPi1ZgRJQY1cetrUAB9TtV2MkeVDyhGxd97nuHxcyB8ycc6cmCqF/XNUsWSzfkhGBU0LKIob94+afHCTbk="

HKEY_CURRENT_USER\Software\8DDYX0ZBPZ
Vpi0 = "15"

HKEY_CURRENT_USER\Software\8DDYX0ZBPZ
VtuS = "7SDUIc7NyUn+3scc1kYSu3q03Ypcrrs91Uiwuz65qx9Nk5xk/cwysdaVeIiwR0SEi7WoDWq93ivkK298QjAhKyFXr6IFUaa1ckpl+CtKYrPXcsqayrFNxHEr+lJFj1KolIwiUDTQg25XinoX3slUXmrIkTzgIpdtHiHpU/MsOCmfU9i5+pXDu9UR7p420oCQL2ZlZuz7+v9Ij4/uVb22OrOI16VL4YzYmTMo758Gv1LTb4fFLiaNtaUpnz2lSjaQC2kYIR/DuAGYGSt88tSeQKuNw8JSGAgl9ZBFcFQy7GtMx1xW4hX37noQgplvxinKuhQg5wwnHs5bp0kesdcUozPi1ZgRJQY1cetrUAB9TtV2MkeVDyhGxd97nuXxcyB8ycc6cmCqF/XNUsWSzfkhGBU0LKIob94+afHCTbk="

HKEY_CURRENT_USER\Software\8DDYX0ZBPZ
Vpi0 = "16"

HKEY_CURRENT_USER\Software\8DDYX0ZBPZ
VtuS = "7SDUIc7NyUn+3scc1kYSu3q03Ypcrrs91Uiwuz65qx9Nk5xk/cwysdaVeIiwR0SEi7WoDWq93ivkK298QjAhKyFXr6IFUaa1ckpl+CtKYrPXcsqayrFNxHEr+lJFj1KolIwiUDTQg25XinoX3slUXmrIkTzgIpdtHiHpU/MsOCmfU9i5+pXDu9UR7p420oCQL2ZlZuz7+v9Ij4/uVb22OrOI16VL4YzYmTMo758Gv1LTb4fFLiaNtaUpnz2lSjaQC2kYIR/DuAGYGSt88tSeQKuNw8JSGAgl9ZBFcFQy7GtMx1xW4hX37noQgplvxinKuhQg5wwnHs5bp0kesdcUozPi1ZgRJQY1cetrUAB9TtV2MkeVDyhGxd97nvnxcyB8ycc6cmCqF/XNUsWSzfkhGBU0LKIob94+afHCTbk="

HKEY_CURRENT_USER\Software\8DDYX0ZBPZ
Vpi0 = "17"

HKEY_CURRENT_USER\Software\8DDYX0ZBPZ
VtuS = "7SDUIc7NyUn+3scc1kYSu3q03Ypcrrs91Uiwuz65qx9Nk5xk/cwysdaVeIiwR0SEi7WoDWq93ivkK298QjAhKyFXr6IFUaa1ckpl+CtKYrPXcsqayrFNxHEr+lJFj1KolIwiUDTQg25XinoX3slUXmrIkTzgIpdtHiHpU/MsOCmfU9i5+pXDu9UR7p420oCQL2ZlZuz7+v9Ij4/uVb22OrOI16VL4YzYmTMo758Gv1LTb4fFLiaNtaUpnz2lSjaQC2kYIR/DuAGYGSt88tSeQKuNw8JSGAgl9ZBFcFQy7GtMx1xW4hX37noQgplvxinKuhQg5wwnHs5bp0kesdcUozPi1ZgRJQY1cetrUAB9TtV2MkeVDyhGxd97nv3xcyB8ycc6cmCqF/XNUsWSzfkhGBU0LKIob94+afHCTbk="

HKEY_CURRENT_USER\Software\8DDYX0ZBPZ
Vpi0 = "18"

HKEY_CURRENT_USER\Software\8DDYX0ZBPZ
VtuS = "7SDUIc7NyUn+3scc1kYSu3q03Ypcrrs91Uiwuz65qx9Nk5xk/cwysdaVeIiwR0SEi7WoDWq93ivkK298QjAhKyFXr6IFUaa1ckpl+CtKYrPXcsqayrFNxHEr+lJFj1KolIwiUDTQg25XinoX3slUXmrIkTzgIpdtHiHpU/MsOCmfU9i5+pXDu9UR7p420oCQL2ZlZuz7+v9Ij4/uVb22OrOI16VL4YzYmTMo758Gv1LTb4fFLiaNtaUpnz2lSjaQC2kYIR/DuAGYGSt88tSeQKuNw8JSGAgl9ZBFcFQy7GtMx1xW4hX37noQgplvxinKuhQg5wwnHs5bp0kesdcUozPi1ZgRJQY1cetrUAB9TtV2MkeVDyhGxd97nqTxcyB8ycc6cmCqF/XNUsWSzfkhGBU0LKIob94+afHCTbk="

HKEY_CURRENT_USER\Software\8DDYX0ZBPZ
Vpi0 = "19"

HKEY_CURRENT_USER\Software\8DDYX0ZBPZ
VtuS = "7SDUIc7NyUn+3scc1kYSu3q03Ypcrrs91Uiwuz65qx9Nk5xk/cwysdaVeIiwR0SEi7WoDWq93ivkK298QjAhKyFXr6IFUaa1ckpl+CtKYrPXcsqayrFNxHEr+lJFj1KolIwiUDTQg25XinoX3slUXmrIkTzgIpdtHiHpU/MsOCmfU9i5+pXDu9UR7p420oCQL2ZlZuz7+v9Ij4/uVb22OrOI16VL4YzYmTMo758Gv1LTb4fFLiaNtaUpnz2lSjaQC2kYIR/DuAGYGSt88tSeQKuNw8JSGAgl9ZBFcFQy7GtMx1xW4hX37noQgplvxinKuhQg5wwnHs5bp0kesdcUozPi1ZgRJQY1cetrUAB9TtV2MkeVDyhGxd97nrzxcyB8ycc6cmCqF/XNUsWSzfkhGBU0LKIob94+afHCTbk="

HKEY_CURRENT_USER\Software\8DDYX0ZBPZ
Vpi0 = "1a"

HKEY_CURRENT_USER\Software\8DDYX0ZBPZ
VtuS = "7SDUIc7NyUn+3scc1kYSu3q03Ypcrrs91Uiwuz65qx9Nk5xk/cwysdaVeIiwR0SEi7WoDWq93ivkK298QjAhKyFXr6IFUaa1ckpl+CtKYrPXcsqayrFNxHEr+lJFj1KolIwiUDTQg25XinoX3slUXmrIkTzgIpdtHiHpU/MsOCmfU9i5+pXDu9UR7p420oCQL2ZlZuz7+v9Ij4/uVb22OrOI16VL4YzYmTMo758Gv1LTb4fFLiaNtaUpnz2lSjaQC2kYIR/DuAGYGSt88tSeQKuNw8JSGAgl9ZBFcFQy7GtMx1xW4hX37noQgplvxinKuhQg5wwnHs5bp0kesdcUozPi1ZgRJQY1cetrUAB9TtV2MkeVDyhGxd97nunxcyB8ycc6cmCqF/XNUsWSzfkhGBU0LKIob94+afHCTbk="

HKEY_CURRENT_USER\Software\8DDYX0ZBPZ
Vpi0 = "1b"

HKEY_CURRENT_USER\Software\8DDYX0ZBPZ
VtuS = "7SDUIc7NyUn+3scc1kYSu3q03Ypcrrs91Uiwuz65qx9Nk5xk/cwysdaVeIiwR0SEi7WoDWq93ivkK298QjAhKyFXr6IFUaa1ckpl+CtKYrPXcsqayrFNxHEr+lJFj1KolIwiUDTQg25XinoX3slUXmrIkTzgIpdtHiHpU/MsOCmfU9i5+pXDu9UR7p420oCQL2ZlZuz7+v9Ij4/uVb22OrOI16VL4YzYmTMo758Gv1LTb4fFLiaNtaUpnz2lSjaQC2kYIR/DuAGYGSt88tSeQKuNw8JSGAgl9ZBFcFQy7GtMx1xW4hX37noQgplvxinKuhQg5wwnHs5bp0kesdcUozPi1ZgRJQY1cetrUAB9TtV2MkeVDyhGxd97nqDxcyB8ycc6cmCqF/XNUsWSzfkhGBU0LKIob94+afHCTbk="

HKEY_CURRENT_USER\Software\8DDYX0ZBPZ
Vpi0 = "1c"

HKEY_CURRENT_USER\Software\8DDYX0ZBPZ
VtuS = "7SDUIc7NyUn+3scc1kYSu3q03Ypcrrs91Uiwuz65qx9Nk5xk/cwysdaVeIiwR0SEi7WoDWq93ivkK298QjAhKyFXr6IFUaa1ckpl+CtKYrPXcsqayrFNxHEr+lJFj1KolIwiUDTQg25XinoX3slUXmrIkTzgIpdtHiHpU/MsOCmfU9i5+pXDu9UR7p420oCQL2ZlZuz7+v9Ij4/uVb22OrOI16VL4YzYmTMo758Gv1LTb4fFLiaNtaUpnz2lSjaQC2kYIR/DuAGYGSt88tSeQKuNw8JSGAgl9ZBFcFQy7GtMx1xW4hX37noQgplvxinKuhQg5wwnHs5bp0kesdcUozPi1ZgRJQY1cetrUAB9TtV2MkeVDyhGxd97nt/xcyB8ycc6cmCqF/XNUsWSzfkhGBU0LKIob94+afHCTbk="

HKEY_CURRENT_USER\Software\8DDYX0ZBPZ
Vpi0 = "1d"

HKEY_CURRENT_USER\Software\8DDYX0ZBPZ
VtuS = "7SDUIc7NyUn+3scc1kYSu3q03Ypcrrs91Uiwuz65qx9Nk5xk/cwysdaVeIiwR0SEi7WoDWq93ivkK298QjAhKyFXr6IFUaa1ckpl+CtKYrPXcsqayrFNxHEr+lJFj1KolIwiUDTQg25XinoX3slUXmrIkTzgIpdtHiHpU/MsOCmfU9i5+pXDu9UR7p420oCQL2ZlZuz7+v9Ij4/uVb22OrOI16VL4YzYmTMo758Gv1LTb4fFLiaNtaUpnz2lSjaQC2kYIR/DuAGYGSt88tSeQKuNw8JSGAgl9ZBFcFQy7GtMx1xW4hX37noQgplvxinKuhQg5wwnHs5bp0kesdcUozPi1ZgRJQY1cetrUAB9TtV2MkeVDyhGxd97nsPxcyB8ycc6cmCqF/XNUsWSzfkhGBU0LKIob94+afHCTbk="

HKEY_CURRENT_USER\Software\8DDYX0ZBPZ
Vpi0 = "1e"

HKEY_CURRENT_USER\Software\8DDYX0ZBPZ
VtuS = "7SDUIc7NyUn+3scc1kYSu3q03Ypcrrs91Uiwuz65qx9Nk5xk/cwysdaVeIiwR0SEi7WoDWq93ivkK298QjAhKyFXr6IFUaa1ckpl+CtKYrPXcsqayrFNxHEr+lJFj1KolIwiUDTQg25XinoX3slUXmrIkTzgIpdtHiHpU/MsOCmfU9i5+pXDu9UR7p420oCQL2ZlZuz7+v9Ij4/uVb22OrOI16VL4YzYmTMo758Gv1LTb4fFLiaNtaUpnz2lSjaQC2kYIR/DuAGYGSt88tSeQKuNw8JSGAgl9ZBFcFQy7GtMx1xW4hX37noQgplvxinKuhQg5wwnHs5bp0kesdcUozPi1ZgRJQY1cetrUAB9TtV2MkeVDyhGxd97wOHxcyB8ycc6cmCqF/XNUsWSzfkhGBU0LKIob94+afHCTbk="

HKEY_CURRENT_USER\Software\8DDYX0ZBPZ
Vpi0 = "1f"

HKEY_CURRENT_USER\Software\8DDYX0ZBPZ
VtuS = "7SDUIc7NyUn+3scc1kYSu3q03Ypcrrs91Uiwuz65qx9Nk5xk/cwysdaVeIiwR0SEi7WoDWq93ivkK298QjAhKyFXr6IFUaa1ckpl+CtKYrPXcsqayrFNxHEr+lJFj1KolIwiUDTQg25XinoX3slUXmrIkTzgIpdtHiHpU/MsOCmfU9i5+pXDu9UR7p420oCQL2ZlZuz7+v9Ij4/uVb22OrOI16VL4YzYmTMo758Gv1LTb4fFLiaNtaUpnz2lSjaQC2kYIR/DuAGYGSt88tSeQKuNw8JSGAgl9ZBFcFQy7GtMx1xW4hX37noQgplvxinKuhQg5wwnHs5bp0kesdcUozPi1ZgRJQY1cetrUAB9TtV2MkeVDyhGxd97wOXxcyB8ycc6cmCqF/XNUsWSzfkhGBU0LKIob94+afHCTbk="

HKEY_CURRENT_USER\Software\8DDYX0ZBPZ
VtuS = "7SDUIc7NyUn+3scc1kYSu3q03Ypcrrs91Uiwuz65qx9Nk5xk/cwysdaVeIiwR0SEi7WoDWq93ivkK298QjAhKyFXr6IFUaa1ckpl+CtKYrPXcsqayrFNxHEr+lJFj1KolIwiUDTQg25XinoX3slUXmrIkTzgIpdtHiHpU/MsOCmfU9i5+pXDu9UR7p420oCQL2ZlZuz7+v9Ij4/uVb22OrOI16VL4YzYmTMo758Gv1LTb4fFLiaNtaUpnz2lSjaQC2kYIR/DuAGYGSt88tSeQKuNw8JSGAgl9ZBFcFQy7GtMx1xW4hX37noQgplvxinKuhQg5wwnHs5bp0kesdcUozPi1ZgRJQY1cetrUAB9TtV2MkeVDyhGxd97wPnxcyB8ycc6cmCqF/XNUsWSzfkhGBU0LKIob94+afHCTbk="

HKEY_CURRENT_USER\Software\8DDYX0ZBPZ
Vpi0 = "21"

HKEY_CURRENT_USER\Software\8DDYX0ZBPZ
VtuS = "7SDUIc7NyUn+3scc1kYSu3q03Ypcrrs91Uiwuz65qx9Nk5xk/cwysdaVeIiwR0SEi7WoDWq93ivkK298QjAhKyFXr6IFUaa1ckpl+CtKYrPXcsqayrFNxHEr+lJFj1KolIwiUDTQg25XinoX3slUXmrIkTzgIpdtHiHpU/MsOCmfU9i5+pXDu9UR7p420oCQL2ZlZuz7+v9Ij4/uVb22OrOI16VL4YzYmTMo758Gv1LTb4fFLiaNtaUpnz2lSjaQC2kYIR/DuAGYGSt88tSeQKuNw8JSGAgl9ZBFcFQy7GtMx1xW4hX37noQgplvxinKuhQg5wwnHs5bp0kesdcUozPi1ZgRJQY1cetrUAB9TtV2MkeVDyhGxd97wP3xcyB8ycc6cmCqF/XNUsWSzfkhGBU0LKIob94+afHCTbk="

HKEY_CURRENT_USER\Software\8DDYX0ZBPZ
Vpi0 = "22"

HKEY_CURRENT_USER\Software\8DDYX0ZBPZ
VtuS = "7SDUIc7NyUn+3scc1kYSu3q03Ypcrrs91Uiwuz65qx9Nk5xk/cwysdaVeIiwR0SEi7WoDWq93ivkK298QjAhKyFXr6IFUaa1ckpl+CtKYrPXcsqayrFNxHEr+lJFj1KolIwiUDTQg25XinoX3slUXmrIkTzgIpdtHiHpU/MsOCmfU9i5+pXDu9UR7p420oCQL2ZlZuz7+v9Ij4/uVb22OrOI16VL4YzYmTMo758Gv1LTb4fFLiaNtaUpnz2lSjaQC2kYIR/DuAGYGSt88tSeQKuNw8JSGAgl9ZBFcFQy7GtMx1xW4hX37noQgplvxinKuhQg5wwnHs5bp0kesdcUozPi1ZgRJQY1cetrUAB9TtV2MkeVDyhGxd97wKTxcyB8ycc6cmCqF/XNUsWSzfkhGBU0LKIob94+afHCTbk="

HKEY_CURRENT_USER\Software\8DDYX0ZBPZ
Vpi0 = "23"

HKEY_CURRENT_USER\Software\8DDYX0ZBPZ
VtuS = "7SDUIc7NyUn+3scc1kYSu3q03Ypcrrs91Uiwuz65qx9Nk5xk/cwysdaVeIiwR0SEi7WoDWq93ivkK298QjAhKyFXr6IFUaa1ckpl+CtKYrPXcsqayrFNxHEr+lJFj1KolIwiUDTQg25XinoX3slUXmrIkTzgIpdtHiHpU/MsOCmfU9i5+pXDu9UR7p420oCQL2ZlZuz7+v9Ij4/uVb22OrOI16VL4YzYmTMo758Gv1LTb4fFLiaNtaUpnz2lSjaQC2kYIR/DuAGYGSt88tSeQKuNw8JSGAgl9ZBFcFQy7GtMx1xW4hX37noQgplvxinKuhQg5wwnHs5bp0kesdcUozPi1ZgRJQY1cetrUAB9TtV2MkeVDyhGxd97wLzxcyB8ycc6cmCqF/XNUsWSzfkhGBU0LKIob94+afHCTbk="

HKEY_CURRENT_USER\Software\8DDYX0ZBPZ
Vpi0 = "24"

HKEY_CURRENT_USER\Software\8DDYX0ZBPZ
VtuS = "7SDUIc7NyUn+3scc1kYSu3q03Ypcrrs91Uiwuz65qx9Nk5xk/cwysdaVeIiwR0SEi7WoDWq93ivkK298QjAhKyFXr6IFUaa1ckpl+CtKYrPXcsqayrFNxHEr+lJFj1KolIwiUDTQg25XinoX3slUXmrIkTzgIpdtHiHpU/MsOCmfU9i5+pXDu9UR7p420oCQL2ZlZuz7+v9Ij4/uVb22OrOI16VL4YzYmTMo758Gv1LTb4fFLiaNtaUpnz2lSjaQC2kYIR/DuAGYGSt88tSeQKuNw8JSGAgl9ZBFcFQy7GtMx1xW4hX37noQgplvxinKuhQg5wwnHs5bp0kesdcUozPi1ZgRJQY1cetrUAB9TtV2MkeVDyhGxd97wOnxcyB8ycc6cmCqF/XNUsWSzfkhGBU0LKIob94+afHCTbk="

HKEY_CURRENT_USER\Software\8DDYX0ZBPZ
Vpi0 = "25"

HKEY_CURRENT_USER\Software\8DDYX0ZBPZ
VtuS = "7SDUIc7NyUn+3scc1kYSu3q03Ypcrrs91Uiwuz65qx9Nk5xk/cwysdaVeIiwR0SEi7WoDWq93ivkK298QjAhKyFXr6IFUaa1ckpl+CtKYrPXcsqayrFNxHEr+lJFj1KolIwiUDTQg25XinoX3slUXmrIkTzgIpdtHiHpU/MsOCmfU9i5+pXDu9UR7p420oCQL2ZlZuz7+v9Ij4/uVb22OrOI16VL4YzYmTMo758Gv1LTb4fFLiaNtaUpnz2lSjaQC2kYIR/DuAGYGSt88tSeQKuNw8JSGAgl9ZBFcFQy7GtMx1xW4hX37noQgplvxinKuhQg5wwnHs5bp0kesdcUozPi1ZgRJQY1cetrUAB9TtV2MkeVDyhGxd97wKDxcyB8ycc6cmCqF/XNUsWSzfkhGBU0LKIob94+afHCTbk="

HKEY_CURRENT_USER\Software\8DDYX0ZBPZ
Vpi0 = "26"

HKEY_CURRENT_USER\Software\8DDYX0ZBPZ
VtuS = "7SDUIc7NyUn+3scc1kYSu3q03Ypcrrs91Uiwuz65qx9Nk5xk/cwysdaVeIiwR0SEi7WoDWq93ivkK298QjAhKyFXr6IFUaa1ckpl+CtKYrPXcsqayrFNxHEr+lJFj1KolIwiUDTQg25XinoX3slUXmrIkTzgIpdtHiHpU/MsOCmfU9i5+pXDu9UR7p420oCQL2ZlZuz7+v9Ij4/uVb22OrOI16VL4YzYmTMo758Gv1LTb4fFLiaNtaUpnz2lSjaQC2kYIR/DuAGYGSt88tSeQKuNw8JSGAgl9ZBFcFQy7GtMx1xW4hX37noQgplvxinKuhQg5wwnHs5bp0kesdcUozPi1ZgRJQY1cetrUAB9TtV2MkeVDyhGxd97wN/xcyB8ycc6cmCqF/XNUsWSzfkhGBU0LKIob94+afHCTbk="

HKEY_CURRENT_USER\Software\8DDYX0ZBPZ
Vpi0 = "27"

HKEY_CURRENT_USER\Software\8DDYX0ZBPZ
VtuS = "7SDUIc7NyUn+3scc1kYSu3q03Ypcrrs91Uiwuz65qx9Nk5xk/cwysdaVeIiwR0SEi7WoDWq93ivkK298QjAhKyFXr6IFUaa1ckpl+CtKYrPXcsqayrFNxHEr+lJFj1KolIwiUDTQg25XinoX3slUXmrIkTzgIpdtHiHpU/MsOCmfU9i5+pXDu9UR7p420oCQL2ZlZuz7+v9Ij4/uVb22OrOI16VL4YzYmTMo758Gv1LTb4fFLiaNtaUpnz2lSjaQC2kYIR/DuAGYGSt88tSeQKuNw8JSGAgl9ZBFcFQy7GtMx1xW4hX37noQgplvxinKuhQg5wwnHs5bp0kesdcUozPi1ZgRJQY1cetrUAB9TtV2MkeVDyhGxd97wMPxcyB8ycc6cmCqF/XNUsWSzfkhGBU0LKIob94+afHCTbk="

HKEY_CURRENT_USER\Software\8DDYX0ZBPZ
Vpi0 = "28"

HKEY_CURRENT_USER\Software\8DDYX0ZBPZ
VtuS = "7SDUIc7NyUn+3scc1kYSu3q03Ypcrrs91Uiwuz65qx9Nk5xk/cwysdaVeIiwR0SEi7WoDWq93ivkK298QjAhKyFXr6IFUaa1ckpl+CtKYrPXcsqayrFNxHEr+lJFj1KolIwiUDTQg25XinoX3slUXmrIkTzgIpdtHiHpU/MsOCmfU9i5+pXDu9UR7p420oCQL2ZlZuz7+v9Ij4/uVb22OrOI16VL4YzYmTMo758Gv1LTb4fFLiaNtaUpnz2lSjaQC2kYIR/DuAGYGSt88tSeQKuNw8JSGAgl9ZBFcFQy7GtMx1xW4hX37noQgplvxinKuhQg5wwnHs5bp0kesdcUozPi1ZgRJQY1cetrUAB9TtV2MkeVDyhGxd940OHxcyB8ycc6cmCqF/XNUsWSzfkhGBU0LKIob94+afHCTbk="

HKEY_CURRENT_USER\Software\8DDYX0ZBPZ
Vpi0 = "29"

HKEY_CURRENT_USER\Software\8DDYX0ZBPZ
VtuS = "7SDUIc7NyUn+3scc1kYSu3q03Ypcrrs91Uiwuz65qx9Nk5xk/cwysdaVeIiwR0SEi7WoDWq93ivkK298QjAhKyFXr6IFUaa1ckpl+CtKYrPXcsqayrFNxHEr+lJFj1KolIwiUDTQg25XinoX3slUXmrIkTzgIpdtHiHpU/MsOCmfU9i5+pXDu9UR7p420oCQL2ZlZuz7+v9Ij4/uVb22OrOI16VL4YzYmTMo758Gv1LTb4fFLiaNtaUpnz2lSjaQC2kYIR/DuAGYGSt88tSeQKuNw8JSGAgl9ZBFcFQy7GtMx1xW4hX37noQgplvxinKuhQg5wwnHs5bp0kesdcUozPi1ZgRJQY1cetrUAB9TtV2MkeVDyhGxd940OXxcyB8ycc6cmCqF/XNUsWSzfkhGBU0LKIob94+afHCTbk="

HKEY_CURRENT_USER\Software\8DDYX0ZBPZ
Vpi0 = "2a"

HKEY_CURRENT_USER\Software\8DDYX0ZBPZ
VtuS = "7SDUIc7NyUn+3scc1kYSu3q03Ypcrrs91Uiwuz65qx9Nk5xk/cwysdaVeIiwR0SEi7WoDWq93ivkK298QjAhKyFXr6IFUaa1ckpl+CtKYrPXcsqayrFNxHEr+lJFj1KolIwiUDTQg25XinoX3slUXmrIkTzgIpdtHiHpU/MsOCmfU9i5+pXDu9UR7p420oCQL2ZlZuz7+v9Ij4/uVb22OrOI16VL4YzYmTMo758Gv1LTb4fFLiaNtaUpnz2lSjaQC2kYIR/DuAGYGSt88tSeQKuNw8JSGAgl9ZBFcFQy7GtMx1xW4hX37noQgplvxinKuhQg5wwnHs5bp0kesdcUozPi1ZgRJQY1cetrUAB9TtV2MkeVDyhGxd940PnxcyB8ycc6cmCqF/XNUsWSzfkhGBU0LKIob94+afHCTbk="

HKEY_CURRENT_USER\Software\8DDYX0ZBPZ
Vpi0 = "2b"

HKEY_CURRENT_USER\Software\8DDYX0ZBPZ
VtuS = "7SDUIc7NyUn+3scc1kYSu3q03Ypcrrs91Uiwuz65qx9Nk5xk/cwysdaVeIiwR0SEi7WoDWq93ivkK298QjAhKyFXr6IFUaa1ckpl+CtKYrPXcsqayrFNxHEr+lJFj1KolIwiUDTQg25XinoX3slUXmrIkTzgIpdtHiHpU/MsOCmfU9i5+pXDu9UR7p420oCQL2ZlZuz7+v9Ij4/uVb22OrOI16VL4YzYmTMo758Gv1LTb4fFLiaNtaUpnz2lSjaQC2kYIR/DuAGYGSt88tSeQKuNw8JSGAgl9ZBFcFQy7GtMx1xW4hX37noQgplvxinKuhQg5wwnHs5bp0kesdcUozPi1ZgRJQY1cetrUAB9TtV2MkeVDyhGxd940P3xcyB8ycc6cmCqF/XNUsWSzfkhGBU0LKIob94+afHCTbk="

HKEY_CURRENT_USER\Software\8DDYX0ZBPZ
Vpi0 = "2c"

HKEY_CURRENT_USER\Software\8DDYX0ZBPZ
VtuS = "7SDUIc7NyUn+3scc1kYSu3q03Ypcrrs91Uiwuz65qx9Nk5xk/cwysdaVeIiwR0SEi7WoDWq93ivkK298QjAhKyFXr6IFUaa1ckpl+CtKYrPXcsqayrFNxHEr+lJFj1KolIwiUDTQg25XinoX3slUXmrIkTzgIpdtHiHpU/MsOCmfU9i5+pXDu9UR7p420oCQL2ZlZuz7+v9Ij4/uVb22OrOI16VL4YzYmTMo758Gv1LTb4fFLiaNtaUpnz2lSjaQC2kYIR/DuAGYGSt88tSeQKuNw8JSGAgl9ZBFcFQy7GtMx1xW4hX37noQgplvxinKuhQg5wwnHs5bp0kesdcUozPi1ZgRJQY1cetrUAB9TtV2MkeVDyhGxd940KTxcyB8ycc6cmCqF/XNUsWSzfkhGBU0LKIob94+afHCTbk="

HKEY_CURRENT_USER\Software\8DDYX0ZBPZ
Vpi0 = "2d"

HKEY_CURRENT_USER\Software\8DDYX0ZBPZ
VtuS = "7SDUIc7NyUn+3scc1kYSu3q03Ypcrrs91Uiwuz65qx9Nk5xk/cwysdaVeIiwR0SEi7WoDWq93ivkK298QjAhKyFXr6IFUaa1ckpl+CtKYrPXcsqayrFNxHEr+lJFj1KolIwiUDTQg25XinoX3slUXmrIkTzgIpdtHiHpU/MsOCmfU9i5+pXDu9UR7p420oCQL2ZlZuz7+v9Ij4/uVb22OrOI16VL4YzYmTMo758Gv1LTb4fFLiaNtaUpnz2lSjaQC2kYIR/DuAGYGSt88tSeQKuNw8JSGAgl9ZBFcFQy7GtMx1xW4hX37noQgplvxinKuhQg5wwnHs5bp0kesdcUozPi1ZgRJQY1cetrUAB9TtV2MkeVDyhGxd940LzxcyB8ycc6cmCqF/XNUsWSzfkhGBU0LKIob94+afHCTbk="

HKEY_CURRENT_USER\Software\8DDYX0ZBPZ
Vpi0 = "2e"

HKEY_CURRENT_USER\Software\8DDYX0ZBPZ
VtuS = "7SDUIc7NyUn+3scc1kYSu3q03Ypcrrs91Uiwuz65qx9Nk5xk/cwysdaVeIiwR0SEi7WoDWq93ivkK298QjAhKyFXr6IFUaa1ckpl+CtKYrPXcsqayrFNxHEr+lJFj1KolIwiUDTQg25XinoX3slUXmrIkTzgIpdtHiHpU/MsOCmfU9i5+pXDu9UR7p420oCQL2ZlZuz7+v9Ij4/uVb22OrOI16VL4YzYmTMo758Gv1LTb4fFLiaNtaUpnz2lSjaQC2kYIR/DuAGYGSt88tSeQKuNw8JSGAgl9ZBFcFQy7GtMx1xW4hX37noQgplvxinKuhQg5wwnHs5bp0kesdcUozPi1ZgRJQY1cetrUAB9TtV2MkeVDyhGxd940OnxcyB8ycc6cmCqF/XNUsWSzfkhGBU0LKIob94+afHCTbk="

HKEY_CURRENT_USER\Software\8DDYX0ZBPZ
Vpi0 = "2f"

HKEY_CURRENT_USER\Software\8DDYX0ZBPZ
VtuS = "7SDUIc7NyUn+3scc1kYSu3q03Ypcrrs91Uiwuz65qx9Nk5xk/cwysdaVeIiwR0SEi7WoDWq93ivkK298QjAhKyFXr6IFUaa1ckpl+CtKYrPXcsqayrFNxHEr+lJFj1KolIwiUDTQg25XinoX3slUXmrIkTzgIpdtHiHpU/MsOCmfU9i5+pXDu9UR7p420oCQL2ZlZuz7+v9Ij4/uVb22OrOI16VL4YzYmTMo758Gv1LTb4fFLiaNtaUpnz2lSjaQC2kYIR/DuAGYGSt88tSeQKuNw8JSGAgl9ZBFcFQy7GtMx1xW4hX37noQgplvxinKuhQg5wwnHs5bp0kesdcUozPi1ZgRJQY1cetrUAB9TtV2MkeVDyhGxd940KDxcyB8ycc6cmCqF/XNUsWSzfkhGBU0LKIob94+afHCTbk="

HKEY_CURRENT_USER\Software\8DDYX0ZBPZ
VtuS = "7SDUIc7NyUn+3scc1kYSu3q03Ypcrrs91Uiwuz65qx9Nk5xk/cwysdaVeIiwR0SEi7WoDWq93ivkK298QjAhKyFXr6IFUaa1ckpl+CtKYrPXcsqayrFNxHEr+lJFj1KolIwiUDTQg25XinoX3slUXmrIkTzgIpdtHiHpU/MsOCmfU9i5+pXDu9UR7p420oCQL2ZlZuz7+v9Ij4/uVb22OrOI16VL4YzYmTMo758Gv1LTb4fFLiaNtaUpnz2lSjaQC2kYIR/DuAGYGSt88tSeQKuNw8JSGAgl9ZBFcFQy7GtMx1xW4hX37noQgplvxinKuhQg5wwnHs5bp0kesdcUozPi1ZgRJQY1cetrUAB9TtV2MkeVDyhGxd940N/xcyB8ycc6cmCqF/XNUsWSzfkhGBU0LKIob94+afHCTbk="

HKEY_CURRENT_USER\Software\8DDYX0ZBPZ
Vpi0 = "31"

HKEY_CURRENT_USER\Software\8DDYX0ZBPZ
VtuS = "7SDUIc7NyUn+3scc1kYSu3q03Ypcrrs91Uiwuz65qx9Nk5xk/cwysdaVeIiwR0SEi7WoDWq93ivkK298QjAhKyFXr6IFUaa1ckpl+CtKYrPXcsqayrFNxHEr+lJFj1KolIwiUDTQg25XinoX3slUXmrIkTzgIpdtHiHpU/MsOCmfU9i5+pXDu9UR7p420oCQL2ZlZuz7+v9Ij4/uVb22OrOI16VL4YzYmTMo758Gv1LTb4fFLiaNtaUpnz2lSjaQC2kYIR/DuAGYGSt88tSeQKuNw8JSGAgl9ZBFcFQy7GtMx1xW4hX37noQgplvxinKuhQg5wwnHs5bp0kesdcUozPi1ZgRJQY1cetrUAB9TtV2MkeVDyhGxd940MPxcyB8ycc6cmCqF/XNUsWSzfkhGBU0LKIob94+afHCTbk="

HKEY_CURRENT_USER\Software\8DDYX0ZBPZ
Vpi0 = "32"

HKEY_CURRENT_USER\Software\8DDYX0ZBPZ
VtuS = "7SDUIc7NyUn+3scc1kYSu3q03Ypcrrs91Uiwuz65qx9Nk5xk/cwysdaVeIiwR0SEi7WoDWq93ivkK298QjAhKyFXr6IFUaa1ckpl+CtKYrPXcsqayrFNxHEr+lJFj1KolIwiUDTQg25XinoX3slUXmrIkTzgIpdtHiHpU/MsOCmfU9i5+pXDu9UR7p420oCQL2ZlZuz7+v9Ij4/uVb22OrOI16VL4YzYmTMo758Gv1LTb4fFLiaNtaUpnz2lSjaQC2kYIR/DuAGYGSt88tSeQKuNw8JSGAgl9ZBFcFQy7GtMx1xW4hX37noQgplvxinKuhQg5wwnHs5bp0kesdcUozPi1ZgRJQY1cetrUAB9TtV2MkeVDyhGxd94+uHxcyB8ycc6cmCqF/XNUsWSzfkhGBU0LKIob94+afHCTbk="

HKEY_CURRENT_USER\Software\8DDYX0ZBPZ
Vpi0 = "33"

HKEY_CURRENT_USER\Software\8DDYX0ZBPZ
VtuS = "7SDUIc7NyUn+3scc1kYSu3q03Ypcrrs91Uiwuz65qx9Nk5xk/cwysdaVeIiwR0SEi7WoDWq93ivkK298QjAhKyFXr6IFUaa1ckpl+CtKYrPXcsqayrFNxHEr+lJFj1KolIwiUDTQg25XinoX3slUXmrIkTzgIpdtHiHpU/MsOCmfU9i5+pXDu9UR7p420oCQL2ZlZuz7+v9Ij4/uVb22OrOI16VL4YzYmTMo758Gv1LTb4fFLiaNtaUpnz2lSjaQC2kYIR/DuAGYGSt88tSeQKuNw8JSGAgl9ZBFcFQy7GtMx1xW4hX37noQgplvxinKuhQg5wwnHs5bp0kesdcUozPi1ZgRJQY1cetrUAB9TtV2MkeVDyhGxd94+uXxcyB8ycc6cmCqF/XNUsWSzfkhGBU0LKIob94+afHCTbk="

HKEY_CURRENT_USER\Software\8DDYX0ZBPZ
Vpi0 = "34"

HKEY_CURRENT_USER\Software\8DDYX0ZBPZ
VtuS = "7SDUIc7NyUn+3scc1kYSu3q03Ypcrrs91Uiwuz65qx9Nk5xk/cwysdaVeIiwR0SEi7WoDWq93ivkK298QjAhKyFXr6IFUaa1ckpl+CtKYrPXcsqayrFNxHEr+lJFj1KolIwiUDTQg25XinoX3slUXmrIkTzgIpdtHiHpU/MsOCmfU9i5+pXDu9UR7p420oCQL2ZlZuz7+v9Ij4/uVb22OrOI16VL4YzYmTMo758Gv1LTb4fFLiaNtaUpnz2lSjaQC2kYIR/DuAGYGSt88tSeQKuNw8JSGAgl9ZBFcFQy7GtMx1xW4hX37noQgplvxinKuhQg5wwnHs5bp0kesdcUozPi1ZgRJQY1cetrUAB9TtV2MkeVDyhGxd94+vnxcyB8ycc6cmCqF/XNUsWSzfkhGBU0LKIob94+afHCTbk="

HKEY_CURRENT_USER\Software\8DDYX0ZBPZ
Vpi0 = "35"

HKEY_CURRENT_USER\Software\8DDYX0ZBPZ
VtuS = "7SDUIc7NyUn+3scc1kYSu3q03Ypcrrs91Uiwuz65qx9Nk5xk/cwysdaVeIiwR0SEi7WoDWq93ivkK298QjAhKyFXr6IFUaa1ckpl+CtKYrPXcsqayrFNxHEr+lJFj1KolIwiUDTQg25XinoX3slUXmrIkTzgIpdtHiHpU/MsOCmfU9i5+pXDu9UR7p420oCQL2ZlZuz7+v9Ij4/uVb22OrOI16VL4YzYmTMo758Gv1LTb4fFLiaNtaUpnz2lSjaQC2kYIR/DuAGYGSt88tSeQKuNw8JSGAgl9ZBFcFQy7GtMx1xW4hX37noQgplvxinKuhQg5wwnHs5bp0kesdcUozPi1ZgRJQY1cetrUAB9TtV2MkeVDyhGxd94+v3xcyB8ycc6cmCqF/XNUsWSzfkhGBU0LKIob94+afHCTbk="

HKEY_CURRENT_USER\Software\8DDYX0ZBPZ
Vpi0 = "36"

HKEY_CURRENT_USER\Software\8DDYX0ZBPZ
VtuS = "7SDUIc7NyUn+3scc1kYSu3q03Ypcrrs91Uiwuz65qx9Nk5xk/cwysdaVeIiwR0SEi7WoDWq93ivkK298QjAhKyFXr6IFUaa1ckpl+CtKYrPXcsqayrFNxHEr+lJFj1KolIwiUDTQg25XinoX3slUXmrIkTzgIpdtHiHpU/MsOCmfU9i5+pXDu9UR7p420oCQL2ZlZuz7+v9Ij4/uVb22OrOI16VL4YzYmTMo758Gv1LTb4fFLiaNtaUpnz2lSjaQC2kYIR/DuAGYGSt88tSeQKuNw8JSGAgl9ZBFcFQy7GtMx1xW4hX37noQgplvxinKuhQg5wwnHs5bp0kesdcUozPi1ZgRJQY1cetrUAB9TtV2MkeVDyhGxd94+qTxcyB8ycc6cmCqF/XNUsWSzfkhGBU0LKIob94+afHCTbk="

HKEY_CURRENT_USER\Software\8DDYX0ZBPZ
Vpi0 = "37"

HKEY_CURRENT_USER\Software\8DDYX0ZBPZ
VtuS = "7SDUIc7NyUn+3scc1kYSu3q03Ypcrrs91Uiwuz65qx9Nk5xk/cwysdaVeIiwR0SEi7WoDWq93ivkK298QjAhKyFXr6IFUaa1ckpl+CtKYrPXcsqayrFNxHEr+lJFj1KolIwiUDTQg25XinoX3slUXmrIkTzgIpdtHiHpU/MsOCmfU9i5+pXDu9UR7p420oCQL2ZlZuz7+v9Ij4/uVb22OrOI16VL4YzYmTMo758Gv1LTb4fFLiaNtaUpnz2lSjaQC2kYIR/DuAGYGSt88tSeQKuNw8JSGAgl9ZBFcFQy7GtMx1xW4hX37noQgplvxinKuhQg5wwnHs5bp0kesdcUozPi1ZgRJQY1cetrUAB9TtV2MkeVDyhGxd94+rzxcyB8ycc6cmCqF/XNUsWSzfkhGBU0LKIob94+afHCTbk="

HKEY_CURRENT_USER\Software\8DDYX0ZBPZ
Vpi0 = "38"

Dropping Routine

This Trojan drops the following files:

  • %Windows%\Tasks\{22116563-108C-42c0-A7CE-60161B75E508}.job

(Note: %Windows% is the Windows folder, which is usually C:\Windows or C:\WINNT.)

Other Details

This Trojan connects to the following possibly malicious URL:

  • http://{BLOCKED}spot.com/borders.php

This report is generated via an automated analysis system.

  SOLUTION

Minimum Scan Engine:

9.200

Step 1

For Windows XP and Windows Server 2003 users, before doing any scans, please make sure you disable System Restore to allow full scanning of your computer.

Step 2

Restart in Safe Mode

[ Learn More ]

Step 3

Delete this registry key

[ Learn More ]

Important: Editing the Windows Registry incorrectly can lead to irreversible system malfunction. Please do this step only if you know how or you can ask assistance from your system administrator. Else, check this Microsoft article first before modifying your computer's registry.

  • In HKEY_CURRENT_USER\Software
    • 8DDYX0ZBPZ
  • In HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Internet Settings\Zones
    • _CHAR(0x03)_
  • In HKEY_CURRENT_USER\Software\Microsoft\MediaPlayer\Health
    • {EC1858D8-C346-4B29-A522-167A8F628B97}

Step 4

Delete this registry value

[ Learn More ]

Important: Editing the Windows Registry incorrectly can lead to irreversible system malfunction. Please do this step only if you know how or you can ask assistance from your system administrator. Else, check this Microsoft article first before modifying your computer's registry.

  • In HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Run
    • 8DDYX0ZBPZ = "{malware path and file name}.exe"
  • In HKEY_CURRENT_USER\Software\8DDYX0ZBPZ
    • VtuH="xC7aKZ+O6wyPlq1krRM4sG7m2LFGsYtHjHOagBf10Uk/n4gL8s8xs9LeD5KQVh3/j+XFa0mnvQ=="
  • In HKEY_CURRENT_USER\Software\8DDYX0ZBPZ
    • VtuS = "7SDUIc7NyUn+3scc1kYSu3q03Ypcrrs91Uiwuz65qx9Nk5xk/cwysdaVeIiwR0SEi7WoDWq93ivkK298QjAhKyFXr6IFUaa1ckpl+CtKYrPXcsqayrFNxHEr+lJFj1KolIwiUDTQg25XinoX3slUXmrIkTzgIpdtHiHpU/MsOCmfU9i5+pXDu9UR7p420oCQL2ZlZuz7+v9Ij4/uVb22OrOI16VL4YzYmTMo758Gv1LTb4fFLiaNtaUpnz2lSjaQC2kYIR/DuAGYGSt88tSeQKuNw8JSGAgl9ZBFcFQy7GtMx1xW4hX37noQgplvxinKuhQg5wwnHs5bp0kesdcUozPi1ZgRJQY1cetrUAB9TtV2MkeVDyhGxd970+rIfDNV2MoHT3yuIf3cTu+azvkmMlU0CoA1cM4EXPDhRLk="
  • In HKEY_CURRENT_USER\Software\8DDYX0ZBPZ
    • VpiH = "1cc9758"
  • In HKEY_CURRENT_USER\Software\8DDYX0ZBPZ
    • VpiB = "6d7d89"
  • In HKEY_CURRENT_USER\Software\8DDYX0ZBPZ
    • Vpi0 = "1"
  • In HKEY_CURRENT_USER\Software\8DDYX0ZBPZ
    • VtuS = "7SDUIc7NyUn+3scc1kYSu3q03Ypcrrs91Uiwuz65qx9Nk5xk/cwysdaVeIiwR0SEi7WoDWq93ivkK298QjAhKyFXr6IFUaa1ckpl+CtKYrPXcsqayrFNxHEr+lJFj1KolIwiUDTQg25XinoX3slUXmrIkTzgIpdtHiHpU/MsOCmfU9i5+pXDu9UR7p420oCQL2ZlZuz7+v9Ij4/uVb22OrOI16VL4YzYmTMo758Gv1LTb4fFLiaNtaUpnz2lSjaQC2kYIR/DuAGYGSt88tSeQKuNw8JSGAgl9ZBFcFQy7GtMx1xW4hX37noQgplvxinKuhQg5wwnHs5bp0kesdcUozPi1ZgRJQY1cetrUAB9TtV2MkeVDyhGxd975erIfDNV2MoHT3yuIf3cTu+azvkmMlU0CoA1cM4EXPDhRLk="
  • In HKEY_CURRENT_USER\Software\8DDYX0ZBPZ
    • Vpi0 = "2"
  • In HKEY_CURRENT_USER\Software\8DDYX0ZBPZ
    • VtuS = "7SDUIc7NyUn+3scc1kYSu3q03Ypcrrs91Uiwuz65qx9Nk5xk/cwysdaVeIiwR0SEi7WoDWq93ivkK298QjAhKyFXr6IFUaa1ckpl+CtKYrPXcsqayrFNxHEr+lJFj1KolIwiUDTQg25XinoX3slUXmrIkTzgIpdtHiHpU/MsOCmfU9i5+pXDu9UR7p420oCQL2ZlZuz7+v9Ij4/uVb22OrOI16VL4YzYmTMo758Gv1LTb4fFLiaNtaUpnz2lSjaQC2kYIR/DuAGYGSt88tSeQKuNw8JSGAgl9ZBFcFQy7GtMx1xW4hX37noQgplvxinKuhQg5wwnHs5bp0kesdcUozPi1ZgRJQY1cetrUAB9TtV2MkeVDyhGxd97murIfDNV2MoHT3yuIf3cTu+azvkmMlU0CoA1cM4EXPDhRLk="
  • In HKEY_CURRENT_USER\Software\8DDYX0ZBPZ
    • Vpi0 = "3"
  • In HKEY_CURRENT_USER\Software\8DDYX0ZBPZ
    • VtuS = "7SDUIc7NyUn+3scc1kYSu3q03Ypcrrs91Uiwuz65qx9Nk5xk/cwysdaVeIiwR0SEi7WoDWq93ivkK298QjAhKyFXr6IFUaa1ckpl+CtKYrPXcsqayrFNxHEr+lJFj1KolIwiUDTQg25XinoX3slUXmrIkTzgIpdtHiHpU/MsOCmfU9i5+pXDu9UR7p420oCQL2ZlZuz7+v9Ij4/uVb22OrOI16VL4YzYmTMo758Gv1LTb4fFLiaNtaUpnz2lSjaQC2kYIR/DuAGYGSt88tSeQKuNw8JSGAgl9ZBFcFQy7GtMx1xW4hX37noQgplvxinKuhQg5wwnHs5bp0kesdcUozPi1ZgRJQY1cetrUAB9TtV2MkeVDyhGxd97w+rIfDNV2MoHT3yuIf3cTu+azvkmMlU0CoA1cM4EXPDhRLk="
  • In HKEY_CURRENT_USER\Software\8DDYX0ZBPZ
    • Vpi0 = "4"
  • In HKEY_CURRENT_USER\Software\8DDYX0ZBPZ
    • VtuS = "7SDUIc7NyUn+3scc1kYSu3q03Ypcrrs91Uiwuz65qx9Nk5xk/cwysdaVeIiwR0SEi7WoDWq93ivkK298QjAhKyFXr6IFUaa1ckpl+CtKYrPXcsqayrFNxHEr+lJFj1KolIwiUDTQg25XinoX3slUXmrIkTzgIpdtHiHpU/MsOCmfU9i5+pXDu9UR7p420oCQL2ZlZuz7+v9Ij4/uVb22OrOI16VL4YzYmTMo758Gv1LTb4fFLiaNtaUpnz2lSjaQC2kYIR/DuAGYGSt88tSeQKuNw8JSGAgl9ZBFcFQy7GtMx1xW4hX37noQgplvxinKuhQg5wwnHs5bp0kesdcUozPi1ZgRJQY1cetrUAB9TtV2MkeVDyhGxd940+rIfDNV2MoHT3yuIf3cTu+azvkmMlU0CoA1cM4EXPDhRLk="
  • In HKEY_CURRENT_USER\Software\8DDYX0ZBPZ
    • Vpi0 = "5"
  • In HKEY_CURRENT_USER\Software\8DDYX0ZBPZ
    • VtuS = "7SDUIc7NyUn+3scc1kYSu3q03Ypcrrs91Uiwuz65qx9Nk5xk/cwysdaVeIiwR0SEi7WoDWq93ivkK298QjAhKyFXr6IFUaa1ckpl+CtKYrPXcsqayrFNxHEr+lJFj1KolIwiUDTQg25XinoX3slUXmrIkTzgIpdtHiHpU/MsOCmfU9i5+pXDu9UR7p420oCQL2ZlZuz7+v9Ij4/uVb22OrOI16VL4YzYmTMo758Gv1LTb4fFLiaNtaUpnz2lSjaQC2kYIR/DuAGYGSt88tSeQKuNw8JSGAgl9ZBFcFQy7GtMx1xW4hX37noQgplvxinKuhQg5wwnHs5bp0kesdcUozPi1ZgRJQY1cetrUAB9TtV2MkeVDyhGxd945erIfDNV2MoHT3yuIf3cTu+azvkmMlU0CoA1cM4EXPDhRLk="
  • In HKEY_CURRENT_USER\Software\8DDYX0ZBPZ
    • Vpi0 = "6"
  • In HKEY_CURRENT_USER\Software\8DDYX0ZBPZ
    • VtuS = "7SDUIc7NyUn+3scc1kYSu3q03Ypcrrs91Uiwuz65qx9Nk5xk/cwysdaVeIiwR0SEi7WoDWq93ivkK298QjAhKyFXr6IFUaa1ckpl+CtKYrPXcsqayrFNxHEr+lJFj1KolIwiUDTQg25XinoX3slUXmrIkTzgIpdtHiHpU/MsOCmfU9i5+pXDu9UR7p420oCQL2ZlZuz7+v9Ij4/uVb22OrOI16VL4YzYmTMo758Gv1LTb4fFLiaNtaUpnz2lSjaQC2kYIR/DuAGYGSt88tSeQKuNw8JSGAgl9ZBFcFQy7GtMx1xW4hX37noQgplvxinKuhQg5wwnHs5bp0kesdcUozPi1ZgRJQY1cetrUAB9TtV2MkeVDyhGxd94murIfDNV2MoHT3yuIf3cTu+azvkmMlU0CoA1cM4EXPDhRLk="
  • In HKEY_CURRENT_USER\Software\8DDYX0ZBPZ
    • Vpi0 = "7"
  • In HKEY_CURRENT_USER\Software\8DDYX0ZBPZ
    • VtuS = "7SDUIc7NyUn+3scc1kYSu3q03Ypcrrs91Uiwuz65qx9Nk5xk/cwysdaVeIiwR0SEi7WoDWq93ivkK298QjAhKyFXr6IFUaa1ckpl+CtKYrPXcsqayrFNxHEr+lJFj1KolIwiUDTQg25XinoX3slUXmrIkTzgIpdtHiHpU/MsOCmfU9i5+pXDu9UR7p420oCQL2ZlZuz7+v9Ij4/uVb22OrOI16VL4YzYmTMo758Gv1LTb4fFLiaNtaUpnz2lSjaQC2kYIR/DuAGYGSt88tSeQKuNw8JSGAgl9ZBFcFQy7GtMx1xW4hX37noQgplvxinKuhQg5wwnHs5bp0kesdcUozPi1ZgRJQY1cetrUAB9TtV2MkeVDyhGxd94w+rIfDNV2MoHT3yuIf3cTu+azvkmMlU0CoA1cM4EXPDhRLk="
  • In HKEY_CURRENT_USER\Software\8DDYX0ZBPZ
    • Vpi0 = "8"
  • In HKEY_CURRENT_USER\Software\8DDYX0ZBPZ
    • VtuS = "7SDUIc7NyUn+3scc1kYSu3q03Ypcrrs91Uiwuz65qx9Nk5xk/cwysdaVeIiwR0SEi7WoDWq93ivkK298QjAhKyFXr6IFUaa1ckpl+CtKYrPXcsqayrFNxHEr+lJFj1KolIwiUDTQg25XinoX3slUXmrIkTzgIpdtHiHpU/MsOCmfU9i5+pXDu9UR7p420oCQL2ZlZuz7+v9Ij4/uVb22OrOI16VL4YzYmTMo758Gv1LTb4fFLiaNtaUpnz2lSjaQC2kYIR/DuAGYGSt88tSeQKuNw8JSGAgl9ZBFcFQy7GtMx1xW4hX37noQgplvxinKuhQg5wwnHs5bp0kesdcUozPi1ZgRJQY1cetrUAB9TtV2MkeVDyhGxd990+rIfDNV2MoHT3yuIf3cTu+azvkmMlU0CoA1cM4EXPDhRLk="
  • In HKEY_CURRENT_USER\Software\8DDYX0ZBPZ
    • Vpi0 = "9"
  • In HKEY_CURRENT_USER\Software\8DDYX0ZBPZ
    • VtuS = "7SDUIc7NyUn+3scc1kYSu3q03Ypcrrs91Uiwuz65qx9Nk5xk/cwysdaVeIiwR0SEi7WoDWq93ivkK298QjAhKyFXr6IFUaa1ckpl+CtKYrPXcsqayrFNxHEr+lJFj1KolIwiUDTQg25XinoX3slUXmrIkTzgIpdtHiHpU/MsOCmfU9i5+pXDu9UR7p420oCQL2ZlZuz7+v9Ij4/uVb22OrOI16VL4YzYmTMo758Gv1LTb4fFLiaNtaUpnz2lSjaQC2kYIR/DuAGYGSt88tSeQKuNw8JSGAgl9ZBFcFQy7GtMx1xW4hX37noQgplvxinKuhQg5wwnHs5bp0kesdcUozPi1ZgRJQY1cetrUAB9TtV2MkeVDyhGxd995erIfDNV2MoHT3yuIf3cTu+azvkmMlU0CoA1cM4EXPDhRLk="
  • In HKEY_CURRENT_USER\Software\8DDYX0ZBPZ
    • Vpi0 = "a"
  • In HKEY_CURRENT_USER\Software\8DDYX0ZBPZ
    • VtuS = "7SDUIc7NyUn+3scc1kYSu3q03Ypcrrs91Uiwuz65qx9Nk5xk/cwysdaVeIiwR0SEi7WoDWq93ivkK298QjAhKyFXr6IFUaa1ckpl+CtKYrPXcsqayrFNxHEr+lJFj1KolIwiUDTQg25XinoX3slUXmrIkTzgIpdtHiHpU/MsOCmfU9i5+pXDu9UR7p420oCQL2ZlZuz7+v9Ij4/uVb22OrOI16VL4YzYmTMo758Gv1LTb4fFLiaNtaUpnz2lSjaQC2kYIR/DuAGYGSt88tSeQKuNw8JSGAgl9ZBFcFQy7GtMx1xW4hX37noQgplvxinKuhQg5wwnHs5bp0kesdcUozPi1ZgRJQY1cetrUAB9TtV2MkeVDyhGxd97+uHxcyB8ycc6cmCqF/XNUsWSzfkhGBU0LKIob94+afHCTbk="
  • In HKEY_CURRENT_USER\Software\8DDYX0ZBPZ
    • Vpi0 = "b"
  • In HKEY_CURRENT_USER\Software\8DDYX0ZBPZ
    • VtuS = "7SDUIc7NyUn+3scc1kYSu3q03Ypcrrs91Uiwuz65qx9Nk5xk/cwysdaVeIiwR0SEi7WoDWq93ivkK298QjAhKyFXr6IFUaa1ckpl+CtKYrPXcsqayrFNxHEr+lJFj1KolIwiUDTQg25XinoX3slUXmrIkTzgIpdtHiHpU/MsOCmfU9i5+pXDu9UR7p420oCQL2ZlZuz7+v9Ij4/uVb22OrOI16VL4YzYmTMo758Gv1LTb4fFLiaNtaUpnz2lSjaQC2kYIR/DuAGYGSt88tSeQKuNw8JSGAgl9ZBFcFQy7GtMx1xW4hX37noQgplvxinKuhQg5wwnHs5bp0kesdcUozPi1ZgRJQY1cetrUAB9TtV2MkeVDyhGxd97+uXxcyB8ycc6cmCqF/XNUsWSzfkhGBU0LKIob94+afHCTbk="
  • In HKEY_CURRENT_USER\Software\8DDYX0ZBPZ
    • Vpi0 = "c"
  • In HKEY_CURRENT_USER\Software\8DDYX0ZBPZ
    • VtuS = "7SDUIc7NyUn+3scc1kYSu3q03Ypcrrs91Uiwuz65qx9Nk5xk/cwysdaVeIiwR0SEi7WoDWq93ivkK298QjAhKyFXr6IFUaa1ckpl+CtKYrPXcsqayrFNxHEr+lJFj1KolIwiUDTQg25XinoX3slUXmrIkTzgIpdtHiHpU/MsOCmfU9i5+pXDu9UR7p420oCQL2ZlZuz7+v9Ij4/uVb22OrOI16VL4YzYmTMo758Gv1LTb4fFLiaNtaUpnz2lSjaQC2kYIR/DuAGYGSt88tSeQKuNw8JSGAgl9ZBFcFQy7GtMx1xW4hX37noQgplvxinKuhQg5wwnHs5bp0kesdcUozPi1ZgRJQY1cetrUAB9TtV2MkeVDyhGxd97+vnxcyB8ycc6cmCqF/XNUsWSzfkhGBU0LKIob94+afHCTbk="
  • In HKEY_CURRENT_USER\Software\8DDYX0ZBPZ
    • Vpi0 = "d"
  • In HKEY_CURRENT_USER\Software\8DDYX0ZBPZ
    • VtuS = "7SDUIc7NyUn+3scc1kYSu3q03Ypcrrs91Uiwuz65qx9Nk5xk/cwysdaVeIiwR0SEi7WoDWq93ivkK298QjAhKyFXr6IFUaa1ckpl+CtKYrPXcsqayrFNxHEr+lJFj1KolIwiUDTQg25XinoX3slUXmrIkTzgIpdtHiHpU/MsOCmfU9i5+pXDu9UR7p420oCQL2ZlZuz7+v9Ij4/uVb22OrOI16VL4YzYmTMo758Gv1LTb4fFLiaNtaUpnz2lSjaQC2kYIR/DuAGYGSt88tSeQKuNw8JSGAgl9ZBFcFQy7GtMx1xW4hX37noQgplvxinKuhQg5wwnHs5bp0kesdcUozPi1ZgRJQY1cetrUAB9TtV2MkeVDyhGxd97+v3xcyB8ycc6cmCqF/XNUsWSzfkhGBU0LKIob94+afHCTbk="
  • In HKEY_CURRENT_USER\Software\8DDYX0ZBPZ
    • Vpi0 = "e"
  • In HKEY_CURRENT_USER\Software\8DDYX0ZBPZ
    • VtuS = "7SDUIc7NyUn+3scc1kYSu3q03Ypcrrs91Uiwuz65qx9Nk5xk/cwysdaVeIiwR0SEi7WoDWq93ivkK298QjAhKyFXr6IFUaa1ckpl+CtKYrPXcsqayrFNxHEr+lJFj1KolIwiUDTQg25XinoX3slUXmrIkTzgIpdtHiHpU/MsOCmfU9i5+pXDu9UR7p420oCQL2ZlZuz7+v9Ij4/uVb22OrOI16VL4YzYmTMo758Gv1LTb4fFLiaNtaUpnz2lSjaQC2kYIR/DuAGYGSt88tSeQKuNw8JSGAgl9ZBFcFQy7GtMx1xW4hX37noQgplvxinKuhQg5wwnHs5bp0kesdcUozPi1ZgRJQY1cetrUAB9TtV2MkeVDyhGxd97+qTxcyB8ycc6cmCqF/XNUsWSzfkhGBU0LKIob94+afHCTbk="
  • In HKEY_CURRENT_USER\Software\8DDYX0ZBPZ
    • Vpi0 = "f"
  • In HKEY_CURRENT_USER\Software\8DDYX0ZBPZ
    • VtuS = "7SDUIc7NyUn+3scc1kYSu3q03Ypcrrs91Uiwuz65qx9Nk5xk/cwysdaVeIiwR0SEi7WoDWq93ivkK298QjAhKyFXr6IFUaa1ckpl+CtKYrPXcsqayrFNxHEr+lJFj1KolIwiUDTQg25XinoX3slUXmrIkTzgIpdtHiHpU/MsOCmfU9i5+pXDu9UR7p420oCQL2ZlZuz7+v9Ij4/uVb22OrOI16VL4YzYmTMo758Gv1LTb4fFLiaNtaUpnz2lSjaQC2kYIR/DuAGYGSt88tSeQKuNw8JSGAgl9ZBFcFQy7GtMx1xW4hX37noQgplvxinKuhQg5wwnHs5bp0kesdcUozPi1ZgRJQY1cetrUAB9TtV2MkeVDyhGxd97+rzxcyB8ycc6cmCqF/XNUsWSzfkhGBU0LKIob94+afHCTbk="
  • In HKEY_CURRENT_USER\Software\8DDYX0ZBPZ
    • VtuS = "7SDUIc7NyUn+3scc1kYSu3q03Ypcrrs91Uiwuz65qx9Nk5xk/cwysdaVeIiwR0SEi7WoDWq93ivkK298QjAhKyFXr6IFUaa1ckpl+CtKYrPXcsqayrFNxHEr+lJFj1KolIwiUDTQg25XinoX3slUXmrIkTzgIpdtHiHpU/MsOCmfU9i5+pXDu9UR7p420oCQL2ZlZuz7+v9Ij4/uVb22OrOI16VL4YzYmTMo758Gv1LTb4fFLiaNtaUpnz2lSjaQC2kYIR/DuAGYGSt88tSeQKuNw8JSGAgl9ZBFcFQy7GtMx1xW4hX37noQgplvxinKuhQg5wwnHs5bp0kesdcUozPi1ZgRJQY1cetrUAB9TtV2MkeVDyhGxd97+unxcyB8ycc6cmCqF/XNUsWSzfkhGBU0LKIob94+afHCTbk="
  • In HKEY_CURRENT_USER\Software\8DDYX0ZBPZ
    • Vpi0 = "11"
  • In HKEY_CURRENT_USER\Software\8DDYX0ZBPZ
    • VtuS = "7SDUIc7NyUn+3scc1kYSu3q03Ypcrrs91Uiwuz65qx9Nk5xk/cwysdaVeIiwR0SEi7WoDWq93ivkK298QjAhKyFXr6IFUaa1ckpl+CtKYrPXcsqayrFNxHEr+lJFj1KolIwiUDTQg25XinoX3slUXmrIkTzgIpdtHiHpU/MsOCmfU9i5+pXDu9UR7p420oCQL2ZlZuz7+v9Ij4/uVb22OrOI16VL4YzYmTMo758Gv1LTb4fFLiaNtaUpnz2lSjaQC2kYIR/DuAGYGSt88tSeQKuNw8JSGAgl9ZBFcFQy7GtMx1xW4hX37noQgplvxinKuhQg5wwnHs5bp0kesdcUozPi1ZgRJQY1cetrUAB9TtV2MkeVDyhGxd97+qDxcyB8ycc6cmCqF/XNUsWSzfkhGBU0LKIob94+afHCTbk="
  • In HKEY_CURRENT_USER\Software\8DDYX0ZBPZ
    • Vpi0 = "12"
  • In HKEY_CURRENT_USER\Software\8DDYX0ZBPZ
    • VtuS = "7SDUIc7NyUn+3scc1kYSu3q03Ypcrrs91Uiwuz65qx9Nk5xk/cwysdaVeIiwR0SEi7WoDWq93ivkK298QjAhKyFXr6IFUaa1ckpl+CtKYrPXcsqayrFNxHEr+lJFj1KolIwiUDTQg25XinoX3slUXmrIkTzgIpdtHiHpU/MsOCmfU9i5+pXDu9UR7p420oCQL2ZlZuz7+v9Ij4/uVb22OrOI16VL4YzYmTMo758Gv1LTb4fFLiaNtaUpnz2lSjaQC2kYIR/DuAGYGSt88tSeQKuNw8JSGAgl9ZBFcFQy7GtMx1xW4hX37noQgplvxinKuhQg5wwnHs5bp0kesdcUozPi1ZgRJQY1cetrUAB9TtV2MkeVDyhGxd97+t/xcyB8ycc6cmCqF/XNUsWSzfkhGBU0LKIob94+afHCTbk="
  • In HKEY_CURRENT_USER\Software\8DDYX0ZBPZ
    • Vpi0 = "13"
  • In HKEY_CURRENT_USER\Software\8DDYX0ZBPZ
    • VtuS = "7SDUIc7NyUn+3scc1kYSu3q03Ypcrrs91Uiwuz65qx9Nk5xk/cwysdaVeIiwR0SEi7WoDWq93ivkK298QjAhKyFXr6IFUaa1ckpl+CtKYrPXcsqayrFNxHEr+lJFj1KolIwiUDTQg25XinoX3slUXmrIkTzgIpdtHiHpU/MsOCmfU9i5+pXDu9UR7p420oCQL2ZlZuz7+v9Ij4/uVb22OrOI16VL4YzYmTMo758Gv1LTb4fFLiaNtaUpnz2lSjaQC2kYIR/DuAGYGSt88tSeQKuNw8JSGAgl9ZBFcFQy7GtMx1xW4hX37noQgplvxinKuhQg5wwnHs5bp0kesdcUozPi1ZgRJQY1cetrUAB9TtV2MkeVDyhGxd97+sPxcyB8ycc6cmCqF/XNUsWSzfkhGBU0LKIob94+afHCTbk="
  • In HKEY_CURRENT_USER\Software\8DDYX0ZBPZ
    • Vpi0 = "14"
  • In HKEY_CURRENT_USER\Software\8DDYX0ZBPZ
    • VtuS = "7SDUIc7NyUn+3scc1kYSu3q03Ypcrrs91Uiwuz65qx9Nk5xk/cwysdaVeIiwR0SEi7WoDWq93ivkK298QjAhKyFXr6IFUaa1ckpl+CtKYrPXcsqayrFNxHEr+lJFj1KolIwiUDTQg25XinoX3slUXmrIkTzgIpdtHiHpU/MsOCmfU9i5+pXDu9UR7p420oCQL2ZlZuz7+v9Ij4/uVb22OrOI16VL4YzYmTMo758Gv1LTb4fFLiaNtaUpnz2lSjaQC2kYIR/DuAGYGSt88tSeQKuNw8JSGAgl9ZBFcFQy7GtMx1xW4hX37noQgplvxinKuhQg5wwnHs5bp0kesdcUozPi1ZgRJQY1cetrUAB9TtV2MkeVDyhGxd97nuHxcyB8ycc6cmCqF/XNUsWSzfkhGBU0LKIob94+afHCTbk="
  • In HKEY_CURRENT_USER\Software\8DDYX0ZBPZ
    • Vpi0 = "15"
  • In HKEY_CURRENT_USER\Software\8DDYX0ZBPZ
    • VtuS = "7SDUIc7NyUn+3scc1kYSu3q03Ypcrrs91Uiwuz65qx9Nk5xk/cwysdaVeIiwR0SEi7WoDWq93ivkK298QjAhKyFXr6IFUaa1ckpl+CtKYrPXcsqayrFNxHEr+lJFj1KolIwiUDTQg25XinoX3slUXmrIkTzgIpdtHiHpU/MsOCmfU9i5+pXDu9UR7p420oCQL2ZlZuz7+v9Ij4/uVb22OrOI16VL4YzYmTMo758Gv1LTb4fFLiaNtaUpnz2lSjaQC2kYIR/DuAGYGSt88tSeQKuNw8JSGAgl9ZBFcFQy7GtMx1xW4hX37noQgplvxinKuhQg5wwnHs5bp0kesdcUozPi1ZgRJQY1cetrUAB9TtV2MkeVDyhGxd97nuXxcyB8ycc6cmCqF/XNUsWSzfkhGBU0LKIob94+afHCTbk="
  • In HKEY_CURRENT_USER\Software\8DDYX0ZBPZ
    • Vpi0 = "16"
  • In HKEY_CURRENT_USER\Software\8DDYX0ZBPZ
    • VtuS = "7SDUIc7NyUn+3scc1kYSu3q03Ypcrrs91Uiwuz65qx9Nk5xk/cwysdaVeIiwR0SEi7WoDWq93ivkK298QjAhKyFXr6IFUaa1ckpl+CtKYrPXcsqayrFNxHEr+lJFj1KolIwiUDTQg25XinoX3slUXmrIkTzgIpdtHiHpU/MsOCmfU9i5+pXDu9UR7p420oCQL2ZlZuz7+v9Ij4/uVb22OrOI16VL4YzYmTMo758Gv1LTb4fFLiaNtaUpnz2lSjaQC2kYIR/DuAGYGSt88tSeQKuNw8JSGAgl9ZBFcFQy7GtMx1xW4hX37noQgplvxinKuhQg5wwnHs5bp0kesdcUozPi1ZgRJQY1cetrUAB9TtV2MkeVDyhGxd97nvnxcyB8ycc6cmCqF/XNUsWSzfkhGBU0LKIob94+afHCTbk="
  • In HKEY_CURRENT_USER\Software\8DDYX0ZBPZ
    • Vpi0 = "17"
  • In HKEY_CURRENT_USER\Software\8DDYX0ZBPZ
    • VtuS = "7SDUIc7NyUn+3scc1kYSu3q03Ypcrrs91Uiwuz65qx9Nk5xk/cwysdaVeIiwR0SEi7WoDWq93ivkK298QjAhKyFXr6IFUaa1ckpl+CtKYrPXcsqayrFNxHEr+lJFj1KolIwiUDTQg25XinoX3slUXmrIkTzgIpdtHiHpU/MsOCmfU9i5+pXDu9UR7p420oCQL2ZlZuz7+v9Ij4/uVb22OrOI16VL4YzYmTMo758Gv1LTb4fFLiaNtaUpnz2lSjaQC2kYIR/DuAGYGSt88tSeQKuNw8JSGAgl9ZBFcFQy7GtMx1xW4hX37noQgplvxinKuhQg5wwnHs5bp0kesdcUozPi1ZgRJQY1cetrUAB9TtV2MkeVDyhGxd97nv3xcyB8ycc6cmCqF/XNUsWSzfkhGBU0LKIob94+afHCTbk="
  • In HKEY_CURRENT_USER\Software\8DDYX0ZBPZ
    • Vpi0 = "18"
  • In HKEY_CURRENT_USER\Software\8DDYX0ZBPZ
    • VtuS = "7SDUIc7NyUn+3scc1kYSu3q03Ypcrrs91Uiwuz65qx9Nk5xk/cwysdaVeIiwR0SEi7WoDWq93ivkK298QjAhKyFXr6IFUaa1ckpl+CtKYrPXcsqayrFNxHEr+lJFj1KolIwiUDTQg25XinoX3slUXmrIkTzgIpdtHiHpU/MsOCmfU9i5+pXDu9UR7p420oCQL2ZlZuz7+v9Ij4/uVb22OrOI16VL4YzYmTMo758Gv1LTb4fFLiaNtaUpnz2lSjaQC2kYIR/DuAGYGSt88tSeQKuNw8JSGAgl9ZBFcFQy7GtMx1xW4hX37noQgplvxinKuhQg5wwnHs5bp0kesdcUozPi1ZgRJQY1cetrUAB9TtV2MkeVDyhGxd97nqTxcyB8ycc6cmCqF/XNUsWSzfkhGBU0LKIob94+afHCTbk="
  • In HKEY_CURRENT_USER\Software\8DDYX0ZBPZ
    • Vpi0 = "19"
  • In HKEY_CURRENT_USER\Software\8DDYX0ZBPZ
    • VtuS = "7SDUIc7NyUn+3scc1kYSu3q03Ypcrrs91Uiwuz65qx9Nk5xk/cwysdaVeIiwR0SEi7WoDWq93ivkK298QjAhKyFXr6IFUaa1ckpl+CtKYrPXcsqayrFNxHEr+lJFj1KolIwiUDTQg25XinoX3slUXmrIkTzgIpdtHiHpU/MsOCmfU9i5+pXDu9UR7p420oCQL2ZlZuz7+v9Ij4/uVb22OrOI16VL4YzYmTMo758Gv1LTb4fFLiaNtaUpnz2lSjaQC2kYIR/DuAGYGSt88tSeQKuNw8JSGAgl9ZBFcFQy7GtMx1xW4hX37noQgplvxinKuhQg5wwnHs5bp0kesdcUozPi1ZgRJQY1cetrUAB9TtV2MkeVDyhGxd97nrzxcyB8ycc6cmCqF/XNUsWSzfkhGBU0LKIob94+afHCTbk="
  • In HKEY_CURRENT_USER\Software\8DDYX0ZBPZ
    • Vpi0 = "1a"
  • In HKEY_CURRENT_USER\Software\8DDYX0ZBPZ
    • VtuS = "7SDUIc7NyUn+3scc1kYSu3q03Ypcrrs91Uiwuz65qx9Nk5xk/cwysdaVeIiwR0SEi7WoDWq93ivkK298QjAhKyFXr6IFUaa1ckpl+CtKYrPXcsqayrFNxHEr+lJFj1KolIwiUDTQg25XinoX3slUXmrIkTzgIpdtHiHpU/MsOCmfU9i5+pXDu9UR7p420oCQL2ZlZuz7+v9Ij4/uVb22OrOI16VL4YzYmTMo758Gv1LTb4fFLiaNtaUpnz2lSjaQC2kYIR/DuAGYGSt88tSeQKuNw8JSGAgl9ZBFcFQy7GtMx1xW4hX37noQgplvxinKuhQg5wwnHs5bp0kesdcUozPi1ZgRJQY1cetrUAB9TtV2MkeVDyhGxd97nunxcyB8ycc6cmCqF/XNUsWSzfkhGBU0LKIob94+afHCTbk="
  • In HKEY_CURRENT_USER\Software\8DDYX0ZBPZ
    • Vpi0 = "1b"
  • In HKEY_CURRENT_USER\Software\8DDYX0ZBPZ
    • VtuS = "7SDUIc7NyUn+3scc1kYSu3q03Ypcrrs91Uiwuz65qx9Nk5xk/cwysdaVeIiwR0SEi7WoDWq93ivkK298QjAhKyFXr6IFUaa1ckpl+CtKYrPXcsqayrFNxHEr+lJFj1KolIwiUDTQg25XinoX3slUXmrIkTzgIpdtHiHpU/MsOCmfU9i5+pXDu9UR7p420oCQL2ZlZuz7+v9Ij4/uVb22OrOI16VL4YzYmTMo758Gv1LTb4fFLiaNtaUpnz2lSjaQC2kYIR/DuAGYGSt88tSeQKuNw8JSGAgl9ZBFcFQy7GtMx1xW4hX37noQgplvxinKuhQg5wwnHs5bp0kesdcUozPi1ZgRJQY1cetrUAB9TtV2MkeVDyhGxd97nqDxcyB8ycc6cmCqF/XNUsWSzfkhGBU0LKIob94+afHCTbk="
  • In HKEY_CURRENT_USER\Software\8DDYX0ZBPZ
    • Vpi0 = "1c"
  • In HKEY_CURRENT_USER\Software\8DDYX0ZBPZ
    • VtuS = "7SDUIc7NyUn+3scc1kYSu3q03Ypcrrs91Uiwuz65qx9Nk5xk/cwysdaVeIiwR0SEi7WoDWq93ivkK298QjAhKyFXr6IFUaa1ckpl+CtKYrPXcsqayrFNxHEr+lJFj1KolIwiUDTQg25XinoX3slUXmrIkTzgIpdtHiHpU/MsOCmfU9i5+pXDu9UR7p420oCQL2ZlZuz7+v9Ij4/uVb22OrOI16VL4YzYmTMo758Gv1LTb4fFLiaNtaUpnz2lSjaQC2kYIR/DuAGYGSt88tSeQKuNw8JSGAgl9ZBFcFQy7GtMx1xW4hX37noQgplvxinKuhQg5wwnHs5bp0kesdcUozPi1ZgRJQY1cetrUAB9TtV2MkeVDyhGxd97nt/xcyB8ycc6cmCqF/XNUsWSzfkhGBU0LKIob94+afHCTbk="
  • In HKEY_CURRENT_USER\Software\8DDYX0ZBPZ
    • Vpi0 = "1d"
  • In HKEY_CURRENT_USER\Software\8DDYX0ZBPZ
    • VtuS = "7SDUIc7NyUn+3scc1kYSu3q03Ypcrrs91Uiwuz65qx9Nk5xk/cwysdaVeIiwR0SEi7WoDWq93ivkK298QjAhKyFXr6IFUaa1ckpl+CtKYrPXcsqayrFNxHEr+lJFj1KolIwiUDTQg25XinoX3slUXmrIkTzgIpdtHiHpU/MsOCmfU9i5+pXDu9UR7p420oCQL2ZlZuz7+v9Ij4/uVb22OrOI16VL4YzYmTMo758Gv1LTb4fFLiaNtaUpnz2lSjaQC2kYIR/DuAGYGSt88tSeQKuNw8JSGAgl9ZBFcFQy7GtMx1xW4hX37noQgplvxinKuhQg5wwnHs5bp0kesdcUozPi1ZgRJQY1cetrUAB9TtV2MkeVDyhGxd97nsPxcyB8ycc6cmCqF/XNUsWSzfkhGBU0LKIob94+afHCTbk="
  • In HKEY_CURRENT_USER\Software\8DDYX0ZBPZ
    • Vpi0 = "1e"
  • In HKEY_CURRENT_USER\Software\8DDYX0ZBPZ
    • VtuS = "7SDUIc7NyUn+3scc1kYSu3q03Ypcrrs91Uiwuz65qx9Nk5xk/cwysdaVeIiwR0SEi7WoDWq93ivkK298QjAhKyFXr6IFUaa1ckpl+CtKYrPXcsqayrFNxHEr+lJFj1KolIwiUDTQg25XinoX3slUXmrIkTzgIpdtHiHpU/MsOCmfU9i5+pXDu9UR7p420oCQL2ZlZuz7+v9Ij4/uVb22OrOI16VL4YzYmTMo758Gv1LTb4fFLiaNtaUpnz2lSjaQC2kYIR/DuAGYGSt88tSeQKuNw8JSGAgl9ZBFcFQy7GtMx1xW4hX37noQgplvxinKuhQg5wwnHs5bp0kesdcUozPi1ZgRJQY1cetrUAB9TtV2MkeVDyhGxd97wOHxcyB8ycc6cmCqF/XNUsWSzfkhGBU0LKIob94+afHCTbk="
  • In HKEY_CURRENT_USER\Software\8DDYX0ZBPZ
    • Vpi0 = "1f"
  • In HKEY_CURRENT_USER\Software\8DDYX0ZBPZ
    • VtuS = "7SDUIc7NyUn+3scc1kYSu3q03Ypcrrs91Uiwuz65qx9Nk5xk/cwysdaVeIiwR0SEi7WoDWq93ivkK298QjAhKyFXr6IFUaa1ckpl+CtKYrPXcsqayrFNxHEr+lJFj1KolIwiUDTQg25XinoX3slUXmrIkTzgIpdtHiHpU/MsOCmfU9i5+pXDu9UR7p420oCQL2ZlZuz7+v9Ij4/uVb22OrOI16VL4YzYmTMo758Gv1LTb4fFLiaNtaUpnz2lSjaQC2kYIR/DuAGYGSt88tSeQKuNw8JSGAgl9ZBFcFQy7GtMx1xW4hX37noQgplvxinKuhQg5wwnHs5bp0kesdcUozPi1ZgRJQY1cetrUAB9TtV2MkeVDyhGxd97wOXxcyB8ycc6cmCqF/XNUsWSzfkhGBU0LKIob94+afHCTbk="
  • In HKEY_CURRENT_USER\Software\8DDYX0ZBPZ
    • VtuS = "7SDUIc7NyUn+3scc1kYSu3q03Ypcrrs91Uiwuz65qx9Nk5xk/cwysdaVeIiwR0SEi7WoDWq93ivkK298QjAhKyFXr6IFUaa1ckpl+CtKYrPXcsqayrFNxHEr+lJFj1KolIwiUDTQg25XinoX3slUXmrIkTzgIpdtHiHpU/MsOCmfU9i5+pXDu9UR7p420oCQL2ZlZuz7+v9Ij4/uVb22OrOI16VL4YzYmTMo758Gv1LTb4fFLiaNtaUpnz2lSjaQC2kYIR/DuAGYGSt88tSeQKuNw8JSGAgl9ZBFcFQy7GtMx1xW4hX37noQgplvxinKuhQg5wwnHs5bp0kesdcUozPi1ZgRJQY1cetrUAB9TtV2MkeVDyhGxd97wPnxcyB8ycc6cmCqF/XNUsWSzfkhGBU0LKIob94+afHCTbk="
  • In HKEY_CURRENT_USER\Software\8DDYX0ZBPZ
    • Vpi0 = "21"
  • In HKEY_CURRENT_USER\Software\8DDYX0ZBPZ
    • VtuS = "7SDUIc7NyUn+3scc1kYSu3q03Ypcrrs91Uiwuz65qx9Nk5xk/cwysdaVeIiwR0SEi7WoDWq93ivkK298QjAhKyFXr6IFUaa1ckpl+CtKYrPXcsqayrFNxHEr+lJFj1KolIwiUDTQg25XinoX3slUXmrIkTzgIpdtHiHpU/MsOCmfU9i5+pXDu9UR7p420oCQL2ZlZuz7+v9Ij4/uVb22OrOI16VL4YzYmTMo758Gv1LTb4fFLiaNtaUpnz2lSjaQC2kYIR/DuAGYGSt88tSeQKuNw8JSGAgl9ZBFcFQy7GtMx1xW4hX37noQgplvxinKuhQg5wwnHs5bp0kesdcUozPi1ZgRJQY1cetrUAB9TtV2MkeVDyhGxd97wP3xcyB8ycc6cmCqF/XNUsWSzfkhGBU0LKIob94+afHCTbk="
  • In HKEY_CURRENT_USER\Software\8DDYX0ZBPZ
    • Vpi0 = "22"
  • In HKEY_CURRENT_USER\Software\8DDYX0ZBPZ
    • VtuS = "7SDUIc7NyUn+3scc1kYSu3q03Ypcrrs91Uiwuz65qx9Nk5xk/cwysdaVeIiwR0SEi7WoDWq93ivkK298QjAhKyFXr6IFUaa1ckpl+CtKYrPXcsqayrFNxHEr+lJFj1KolIwiUDTQg25XinoX3slUXmrIkTzgIpdtHiHpU/MsOCmfU9i5+pXDu9UR7p420oCQL2ZlZuz7+v9Ij4/uVb22OrOI16VL4YzYmTMo758Gv1LTb4fFLiaNtaUpnz2lSjaQC2kYIR/DuAGYGSt88tSeQKuNw8JSGAgl9ZBFcFQy7GtMx1xW4hX37noQgplvxinKuhQg5wwnHs5bp0kesdcUozPi1ZgRJQY1cetrUAB9TtV2MkeVDyhGxd97wKTxcyB8ycc6cmCqF/XNUsWSzfkhGBU0LKIob94+afHCTbk="
  • In HKEY_CURRENT_USER\Software\8DDYX0ZBPZ
    • Vpi0 = "23
  • In HKEY_CURRENT_USER\Software\8DDYX0ZBPZ
    • VtuS = "7SDUIc7NyUn+3scc1kYSu3q03Ypcrrs91Uiwuz65qx9Nk5xk/cwysdaVeIiwR0SEi7WoDWq93ivkK298QjAhKyFXr6IFUaa1ckpl+CtKYrPXcsqayrFNxHEr+lJFj1KolIwiUDTQg25XinoX3slUXmrIkTzgIpdtHiHpU/MsOCmfU9i5+pXDu9UR7p420oCQL2ZlZuz7+v9Ij4/uVb22OrOI16VL4YzYmTMo758Gv1LTb4fFLiaNtaUpnz2lSjaQC2kYIR/DuAGYGSt88tSeQKuNw8JSGAgl9ZBFcFQy7GtMx1xW4hX37noQgplvxinKuhQg5wwnHs5bp0kesdcUozPi1ZgRJQY1cetrUAB9TtV2MkeVDyhGxd97wLzxcyB8ycc6cmCqF/XNUsWSzfkhGBU0LKIob94+afHCTbk="
  • In HKEY_CURRENT_USER\Software\8DDYX0ZBPZ
    • Vpi0 = "24"
  • In HKEY_CURRENT_USER\Software\8DDYX0ZBPZ
    • VtuS = "7SDUIc7NyUn+3scc1kYSu3q03Ypcrrs91Uiwuz65qx9Nk5xk/cwysdaVeIiwR0SEi7WoDWq93ivkK298QjAhKyFXr6IFUaa1ckpl+CtKYrPXcsqayrFNxHEr+lJFj1KolIwiUDTQg25XinoX3slUXmrIkTzgIpdtHiHpU/MsOCmfU9i5+pXDu9UR7p420oCQL2ZlZuz7+v9Ij4/uVb22OrOI16VL4YzYmTMo758Gv1LTb4fFLiaNtaUpnz2lSjaQC2kYIR/DuAGYGSt88tSeQKuNw8JSGAgl9ZBFcFQy7GtMx1xW4hX37noQgplvxinKuhQg5wwnHs5bp0kesdcUozPi1ZgRJQY1cetrUAB9TtV2MkeVDyhGxd97wOnxcyB8ycc6cmCqF/XNUsWSzfkhGBU0LKIob94+afHCTbk="
  • In HKEY_CURRENT_USER\Software\8DDYX0ZBPZ
    • Vpi0 = "25"
  • In HKEY_CURRENT_USER\Software\8DDYX0ZBPZ
    • VtuS = "7SDUIc7NyUn+3scc1kYSu3q03Ypcrrs91Uiwuz65qx9Nk5xk/cwysdaVeIiwR0SEi7WoDWq93ivkK298QjAhKyFXr6IFUaa1ckpl+CtKYrPXcsqayrFNxHEr+lJFj1KolIwiUDTQg25XinoX3slUXmrIkTzgIpdtHiHpU/MsOCmfU9i5+pXDu9UR7p420oCQL2ZlZuz7+v9Ij4/uVb22OrOI16VL4YzYmTMo758Gv1LTb4fFLiaNtaUpnz2lSjaQC2kYIR/DuAGYGSt88tSeQKuNw8JSGAgl9ZBFcFQy7GtMx1xW4hX37noQgplvxinKuhQg5wwnHs5bp0kesdcUozPi1ZgRJQY1cetrUAB9TtV2MkeVDyhGxd97wKDxcyB8ycc6cmCqF/XNUsWSzfkhGBU0LKIob94+afHCTbk="
  • In HKEY_CURRENT_USER\Software\8DDYX0ZBPZ
    • Vpi0 = "26"
  • In HKEY_CURRENT_USER\Software\8DDYX0ZBPZ
    • VtuS = "7SDUIc7NyUn+3scc1kYSu3q03Ypcrrs91Uiwuz65qx9Nk5xk/cwysdaVeIiwR0SEi7WoDWq93ivkK298QjAhKyFXr6IFUaa1ckpl+CtKYrPXcsqayrFNxHEr+lJFj1KolIwiUDTQg25XinoX3slUXmrIkTzgIpdtHiHpU/MsOCmfU9i5+pXDu9UR7p420oCQL2ZlZuz7+v9Ij4/uVb22OrOI16VL4YzYmTMo758Gv1LTb4fFLiaNtaUpnz2lSjaQC2kYIR/DuAGYGSt88tSeQKuNw8JSGAgl9ZBFcFQy7GtMx1xW4hX37noQgplvxinKuhQg5wwnHs5bp0kesdcUozPi1ZgRJQY1cetrUAB9TtV2MkeVDyhGxd97wN/xcyB8ycc6cmCqF/XNUsWSzfkhGBU0LKIob94+afHCTbk="
  • In HKEY_CURRENT_USER\Software\8DDYX0ZBPZ
    • Vpi0 = "27"
  • In HKEY_CURRENT_USER\Software\8DDYX0ZBPZ
    • VtuS = "7SDUIc7NyUn+3scc1kYSu3q03Ypcrrs91Uiwuz65qx9Nk5xk/cwysdaVeIiwR0SEi7WoDWq93ivkK298QjAhKyFXr6IFUaa1ckpl+CtKYrPXcsqayrFNxHEr+lJFj1KolIwiUDTQg25XinoX3slUXmrIkTzgIpdtHiHpU/MsOCmfU9i5+pXDu9UR7p420oCQL2ZlZuz7+v9Ij4/uVb22OrOI16VL4YzYmTMo758Gv1LTb4fFLiaNtaUpnz2lSjaQC2kYIR/DuAGYGSt88tSeQKuNw8JSGAgl9ZBFcFQy7GtMx1xW4hX37noQgplvxinKuhQg5wwnHs5bp0kesdcUozPi1ZgRJQY1cetrUAB9TtV2MkeVDyhGxd97wMPxcyB8ycc6cmCqF/XNUsWSzfkhGBU0LKIob94+afHCTbk="
  • In HKEY_CURRENT_USER\Software\8DDYX0ZBPZ
    • Vpi0 = "28"
  • In HKEY_CURRENT_USER\Software\8DDYX0ZBPZ
    • VtuS = "7SDUIc7NyUn+3scc1kYSu3q03Ypcrrs91Uiwuz65qx9Nk5xk/cwysdaVeIiwR0SEi7WoDWq93ivkK298QjAhKyFXr6IFUaa1ckpl+CtKYrPXcsqayrFNxHEr+lJFj1KolIwiUDTQg25XinoX3slUXmrIkTzgIpdtHiHpU/MsOCmfU9i5+pXDu9UR7p420oCQL2ZlZuz7+v9Ij4/uVb22OrOI16VL4YzYmTMo758Gv1LTb4fFLiaNtaUpnz2lSjaQC2kYIR/DuAGYGSt88tSeQKuNw8JSGAgl9ZBFcFQy7GtMx1xW4hX37noQgplvxinKuhQg5wwnHs5bp0kesdcUozPi1ZgRJQY1cetrUAB9TtV2MkeVDyhGxd940OHxcyB8ycc6cmCqF/XNUsWSzfkhGBU0LKIob94+afHCTbk="
  • In HKEY_CURRENT_USER\Software\8DDYX0ZBPZ
    • Vpi0 = "29"
  • In HKEY_CURRENT_USER\Software\8DDYX0ZBPZ
    • VtuS = "7SDUIc7NyUn+3scc1kYSu3q03Ypcrrs91Uiwuz65qx9Nk5xk/cwysdaVeIiwR0SEi7WoDWq93ivkK298QjAhKyFXr6IFUaa1ckpl+CtKYrPXcsqayrFNxHEr+lJFj1KolIwiUDTQg25XinoX3slUXmrIkTzgIpdtHiHpU/MsOCmfU9i5+pXDu9UR7p420oCQL2ZlZuz7+v9Ij4/uVb22OrOI16VL4YzYmTMo758Gv1LTb4fFLiaNtaUpnz2lSjaQC2kYIR/DuAGYGSt88tSeQKuNw8JSGAgl9ZBFcFQy7GtMx1xW4hX37noQgplvxinKuhQg5wwnHs5bp0kesdcUozPi1ZgRJQY1cetrUAB9TtV2MkeVDyhGxd940OXxcyB8ycc6cmCqF/XNUsWSzfkhGBU0LKIob94+afHCTbk="
  • In HKEY_CURRENT_USER\Software\8DDYX0ZBPZ
    • Vpi0 = "2a"
  • In HKEY_CURRENT_USER\Software\8DDYX0ZBPZ
    • VtuS = "7SDUIc7NyUn+3scc1kYSu3q03Ypcrrs91Uiwuz65qx9Nk5xk/cwysdaVeIiwR0SEi7WoDWq93ivkK298QjAhKyFXr6IFUaa1ckpl+CtKYrPXcsqayrFNxHEr+lJFj1KolIwiUDTQg25XinoX3slUXmrIkTzgIpdtHiHpU/MsOCmfU9i5+pXDu9UR7p420oCQL2ZlZuz7+v9Ij4/uVb22OrOI16VL4YzYmTMo758Gv1LTb4fFLiaNtaUpnz2lSjaQC2kYIR/DuAGYGSt88tSeQKuNw8JSGAgl9ZBFcFQy7GtMx1xW4hX37noQgplvxinKuhQg5wwnHs5bp0kesdcUozPi1ZgRJQY1cetrUAB9TtV2MkeVDyhGxd940PnxcyB8ycc6cmCqF/XNUsWSzfkhGBU0LKIob94+afHCTbk="
  • In HKEY_CURRENT_USER\Software\8DDYX0ZBPZ
    • Vpi0 = "2b"
  • In HKEY_CURRENT_USER\Software\8DDYX0ZBPZ
    • VtuS = "7SDUIc7NyUn+3scc1kYSu3q03Ypcrrs91Uiwuz65qx9Nk5xk/cwysdaVeIiwR0SEi7WoDWq93ivkK298QjAhKyFXr6IFUaa1ckpl+CtKYrPXcsqayrFNxHEr+lJFj1KolIwiUDTQg25XinoX3slUXmrIkTzgIpdtHiHpU/MsOCmfU9i5+pXDu9UR7p420oCQL2ZlZuz7+v9Ij4/uVb22OrOI16VL4YzYmTMo758Gv1LTb4fFLiaNtaUpnz2lSjaQC2kYIR/DuAGYGSt88tSeQKuNw8JSGAgl9ZBFcFQy7GtMx1xW4hX37noQgplvxinKuhQg5wwnHs5bp0kesdcUozPi1ZgRJQY1cetrUAB9TtV2MkeVDyhGxd940P3xcyB8ycc6cmCqF/XNUsWSzfkhGBU0LKIob94+afHCTbk="
  • In HKEY_CURRENT_USER\Software\8DDYX0ZBPZ
    • Vpi0 = "2c"
  • In HKEY_CURRENT_USER\Software\8DDYX0ZBPZ
    • VtuS = "7SDUIc7NyUn+3scc1kYSu3q03Ypcrrs91Uiwuz65qx9Nk5xk/cwysdaVeIiwR0SEi7WoDWq93ivkK298QjAhKyFXr6IFUaa1ckpl+CtKYrPXcsqayrFNxHEr+lJFj1KolIwiUDTQg25XinoX3slUXmrIkTzgIpdtHiHpU/MsOCmfU9i5+pXDu9UR7p420oCQL2ZlZuz7+v9Ij4/uVb22OrOI16VL4YzYmTMo758Gv1LTb4fFLiaNtaUpnz2lSjaQC2kYIR/DuAGYGSt88tSeQKuNw8JSGAgl9ZBFcFQy7GtMx1xW4hX37noQgplvxinKuhQg5wwnHs5bp0kesdcUozPi1ZgRJQY1cetrUAB9TtV2MkeVDyhGxd940KTxcyB8ycc6cmCqF/XNUsWSzfkhGBU0LKIob94+afHCTbk="
  • In HKEY_CURRENT_USER\Software\8DDYX0ZBPZ
    • Vpi0 = "2d"
  • In HKEY_CURRENT_USER\Software\8DDYX0ZBPZ
    • VtuS = "7SDUIc7NyUn+3scc1kYSu3q03Ypcrrs91Uiwuz65qx9Nk5xk/cwysdaVeIiwR0SEi7WoDWq93ivkK298QjAhKyFXr6IFUaa1ckpl+CtKYrPXcsqayrFNxHEr+lJFj1KolIwiUDTQg25XinoX3slUXmrIkTzgIpdtHiHpU/MsOCmfU9i5+pXDu9UR7p420oCQL2ZlZuz7+v9Ij4/uVb22OrOI16VL4YzYmTMo758Gv1LTb4fFLiaNtaUpnz2lSjaQC2kYIR/DuAGYGSt88tSeQKuNw8JSGAgl9ZBFcFQy7GtMx1xW4hX37noQgplvxinKuhQg5wwnHs5bp0kesdcUozPi1ZgRJQY1cetrUAB9TtV2MkeVDyhGxd940LzxcyB8ycc6cmCqF/XNUsWSzfkhGBU0LKIob94+afHCTbk="
  • In HKEY_CURRENT_USER\Software\8DDYX0ZBPZ
    • Vpi0 = "2e"
  • In HKEY_CURRENT_USER\Software\8DDYX0ZBPZ
    • VtuS = "7SDUIc7NyUn+3scc1kYSu3q03Ypcrrs91Uiwuz65qx9Nk5xk/cwysdaVeIiwR0SEi7WoDWq93ivkK298QjAhKyFXr6IFUaa1ckpl+CtKYrPXcsqayrFNxHEr+lJFj1KolIwiUDTQg25XinoX3slUXmrIkTzgIpdtHiHpU/MsOCmfU9i5+pXDu9UR7p420oCQL2ZlZuz7+v9Ij4/uVb22OrOI16VL4YzYmTMo758Gv1LTb4fFLiaNtaUpnz2lSjaQC2kYIR/DuAGYGSt88tSeQKuNw8JSGAgl9ZBFcFQy7GtMx1xW4hX37noQgplvxinKuhQg5wwnHs5bp0kesdcUozPi1ZgRJQY1cetrUAB9TtV2MkeVDyhGxd940OnxcyB8ycc6cmCqF/XNUsWSzfkhGBU0LKIob94+afHCTbk="
  • In HKEY_CURRENT_USER\Software\8DDYX0ZBPZ
    • Vpi0 = "2f"
  • In HKEY_CURRENT_USER\Software\8DDYX0ZBPZ
    • VtuS = "7SDUIc7NyUn+3scc1kYSu3q03Ypcrrs91Uiwuz65qx9Nk5xk/cwysdaVeIiwR0SEi7WoDWq93ivkK298QjAhKyFXr6IFUaa1ckpl+CtKYrPXcsqayrFNxHEr+lJFj1KolIwiUDTQg25XinoX3slUXmrIkTzgIpdtHiHpU/MsOCmfU9i5+pXDu9UR7p420oCQL2ZlZuz7+v9Ij4/uVb22OrOI16VL4YzYmTMo758Gv1LTb4fFLiaNtaUpnz2lSjaQC2kYIR/DuAGYGSt88tSeQKuNw8JSGAgl9ZBFcFQy7GtMx1xW4hX37noQgplvxinKuhQg5wwnHs5bp0kesdcUozPi1ZgRJQY1cetrUAB9TtV2MkeVDyhGxd940KDxcyB8ycc6cmCqF/XNUsWSzfkhGBU0LKIob94+afHCTbk="
  • In HKEY_CURRENT_USER\Software\8DDYX0ZBPZ
    • VtuS = "7SDUIc7NyUn+3scc1kYSu3q03Ypcrrs91Uiwuz65qx9Nk5xk/cwysdaVeIiwR0SEi7WoDWq93ivkK298QjAhKyFXr6IFUaa1ckpl+CtKYrPXcsqayrFNxHEr+lJFj1KolIwiUDTQg25XinoX3slUXmrIkTzgIpdtHiHpU/MsOCmfU9i5+pXDu9UR7p420oCQL2ZlZuz7+v9Ij4/uVb22OrOI16VL4YzYmTMo758Gv1LTb4fFLiaNtaUpnz2lSjaQC2kYIR/DuAGYGSt88tSeQKuNw8JSGAgl9ZBFcFQy7GtMx1xW4hX37noQgplvxinKuhQg5wwnHs5bp0kesdcUozPi1ZgRJQY1cetrUAB9TtV2MkeVDyhGxd940N/xcyB8ycc6cmCqF/XNUsWSzfkhGBU0LKIob94+afHCTbk="
  • In HKEY_CURRENT_USER\Software\8DDYX0ZBPZ
    • Vpi0 = "31"
  • In HKEY_CURRENT_USER\Software\8DDYX0ZBPZ
    • VtuS = "7SDUIc7NyUn+3scc1kYSu3q03Ypcrrs91Uiwuz65qx9Nk5xk/cwysdaVeIiwR0SEi7WoDWq93ivkK298QjAhKyFXr6IFUaa1ckpl+CtKYrPXcsqayrFNxHEr+lJFj1KolIwiUDTQg25XinoX3slUXmrIkTzgIpdtHiHpU/MsOCmfU9i5+pXDu9UR7p420oCQL2ZlZuz7+v9Ij4/uVb22OrOI16VL4YzYmTMo758Gv1LTb4fFLiaNtaUpnz2lSjaQC2kYIR/DuAGYGSt88tSeQKuNw8JSGAgl9ZBFcFQy7GtMx1xW4hX37noQgplvxinKuhQg5wwnHs5bp0kesdcUozPi1ZgRJQY1cetrUAB9TtV2MkeVDyhGxd940MPxcyB8ycc6cmCqF/XNUsWSzfkhGBU0LKIob94+afHCTbk="
  • In HKEY_CURRENT_USER\Software\8DDYX0ZBPZ
    • Vpi0 = "32"
  • In HKEY_CURRENT_USER\Software\8DDYX0ZBPZ
    • VtuS = "7SDUIc7NyUn+3scc1kYSu3q03Ypcrrs91Uiwuz65qx9Nk5xk/cwysdaVeIiwR0SEi7WoDWq93ivkK298QjAhKyFXr6IFUaa1ckpl+CtKYrPXcsqayrFNxHEr+lJFj1KolIwiUDTQg25XinoX3slUXmrIkTzgIpdtHiHpU/MsOCmfU9i5+pXDu9UR7p420oCQL2ZlZuz7+v9Ij4/uVb22OrOI16VL4YzYmTMo758Gv1LTb4fFLiaNtaUpnz2lSjaQC2kYIR/DuAGYGSt88tSeQKuNw8JSGAgl9ZBFcFQy7GtMx1xW4hX37noQgplvxinKuhQg5wwnHs5bp0kesdcUozPi1ZgRJQY1cetrUAB9TtV2MkeVDyhGxd94+uHxcyB8ycc6cmCqF/XNUsWSzfkhGBU0LKIob94+afHCTbk="
  • In HKEY_CURRENT_USER\Software\8DDYX0ZBPZ
    • Vpi0 = "33"
  • In HKEY_CURRENT_USER\Software\8DDYX0ZBPZ
    • VtuS = "7SDUIc7NyUn+3scc1kYSu3q03Ypcrrs91Uiwuz65qx9Nk5xk/cwysdaVeIiwR0SEi7WoDWq93ivkK298QjAhKyFXr6IFUaa1ckpl+CtKYrPXcsqayrFNxHEr+lJFj1KolIwiUDTQg25XinoX3slUXmrIkTzgIpdtHiHpU/MsOCmfU9i5+pXDu9UR7p420oCQL2ZlZuz7+v9Ij4/uVb22OrOI16VL4YzYmTMo758Gv1LTb4fFLiaNtaUpnz2lSjaQC2kYIR/DuAGYGSt88tSeQKuNw8JSGAgl9ZBFcFQy7GtMx1xW4hX37noQgplvxinKuhQg5wwnHs5bp0kesdcUozPi1ZgRJQY1cetrUAB9TtV2MkeVDyhGxd94+uXxcyB8ycc6cmCqF/XNUsWSzfkhGBU0LKIob94+afHCTbk="
  • In HKEY_CURRENT_USER\Software\8DDYX0ZBPZ
    • Vpi0 = "34"
  • In HKEY_CURRENT_USER\Software\8DDYX0ZBPZ
    • VtuS = "7SDUIc7NyUn+3scc1kYSu3q03Ypcrrs91Uiwuz65qx9Nk5xk/cwysdaVeIiwR0SEi7WoDWq93ivkK298QjAhKyFXr6IFUaa1ckpl+CtKYrPXcsqayrFNxHEr+lJFj1KolIwiUDTQg25XinoX3slUXmrIkTzgIpdtHiHpU/MsOCmfU9i5+pXDu9UR7p420oCQL2ZlZuz7+v9Ij4/uVb22OrOI16VL4YzYmTMo758Gv1LTb4fFLiaNtaUpnz2lSjaQC2kYIR/DuAGYGSt88tSeQKuNw8JSGAgl9ZBFcFQy7GtMx1xW4hX37noQgplvxinKuhQg5wwnHs5bp0kesdcUozPi1ZgRJQY1cetrUAB9TtV2MkeVDyhGxd94+vnxcyB8ycc6cmCqF/XNUsWSzfkhGBU0LKIob94+afHCTbk="
  • In HKEY_CURRENT_USER\Software\8DDYX0ZBPZ
    • Vpi0 = "35"
  • In HKEY_CURRENT_USER\Software\8DDYX0ZBPZ
    • VtuS = "7SDUIc7NyUn+3scc1kYSu3q03Ypcrrs91Uiwuz65qx9Nk5xk/cwysdaVeIiwR0SEi7WoDWq93ivkK298QjAhKyFXr6IFUaa1ckpl+CtKYrPXcsqayrFNxHEr+lJFj1KolIwiUDTQg25XinoX3slUXmrIkTzgIpdtHiHpU/MsOCmfU9i5+pXDu9UR7p420oCQL2ZlZuz7+v9Ij4/uVb22OrOI16VL4YzYmTMo758Gv1LTb4fFLiaNtaUpnz2lSjaQC2kYIR/DuAGYGSt88tSeQKuNw8JSGAgl9ZBFcFQy7GtMx1xW4hX37noQgplvxinKuhQg5wwnHs5bp0kesdcUozPi1ZgRJQY1cetrUAB9TtV2MkeVDyhGxd94+v3xcyB8ycc6cmCqF/XNUsWSzfkhGBU0LKIob94+afHCTbk="
  • In HKEY_CURRENT_USER\Software\8DDYX0ZBPZ
    • Vpi0 = "36"
  • In HKEY_CURRENT_USER\Software\8DDYX0ZBPZ
    • VtuS = "7SDUIc7NyUn+3scc1kYSu3q03Ypcrrs91Uiwuz65qx9Nk5xk/cwysdaVeIiwR0SEi7WoDWq93ivkK298QjAhKyFXr6IFUaa1ckpl+CtKYrPXcsqayrFNxHEr+lJFj1KolIwiUDTQg25XinoX3slUXmrIkTzgIpdtHiHpU/MsOCmfU9i5+pXDu9UR7p420oCQL2ZlZuz7+v9Ij4/uVb22OrOI16VL4YzYmTMo758Gv1LTb4fFLiaNtaUpnz2lSjaQC2kYIR/DuAGYGSt88tSeQKuNw8JSGAgl9ZBFcFQy7GtMx1xW4hX37noQgplvxinKuhQg5wwnHs5bp0kesdcUozPi1ZgRJQY1cetrUAB9TtV2MkeVDyhGxd94+qTxcyB8ycc6cmCqF/XNUsWSzfkhGBU0LKIob94+afHCTbk="
  • In HKEY_CURRENT_USER\Software\8DDYX0ZBPZ
    • Vpi0 = "37"
  • In HKEY_CURRENT_USER\Software\8DDYX0ZBPZ
    • VtuS = "7SDUIc7NyUn+3scc1kYSu3q03Ypcrrs91Uiwuz65qx9Nk5xk/cwysdaVeIiwR0SEi7WoDWq93ivkK298QjAhKyFXr6IFUaa1ckpl+CtKYrPXcsqayrFNxHEr+lJFj1KolIwiUDTQg25XinoX3slUXmrIkTzgIpdtHiHpU/MsOCmfU9i5+pXDu9UR7p420oCQL2ZlZuz7+v9Ij4/uVb22OrOI16VL4YzYmTMo758Gv1LTb4fFLiaNtaUpnz2lSjaQC2kYIR/DuAGYGSt88tSeQKuNw8JSGAgl9ZBFcFQy7GtMx1xW4hX37noQgplvxinKuhQg5wwnHs5bp0kesdcUozPi1ZgRJQY1cetrUAB9TtV2MkeVDyhGxd94+rzxcyB8ycc6cmCqF/XNUsWSzfkhGBU0LKIob94+afHCTbk="
  • In HKEY_CURRENT_USER\Software\8DDYX0ZBPZ
    • Vpi0 = "38"

Step 5

Search and delete this file

[ Learn More ]
There may be some component files that are hidden. Please make sure you check the Search Hidden Files and Folders checkbox in the More advanced options option to include all hidden files and folders in the search result.
  • %Windows%\Tasks\{22116563-108C-42c0-A7CE-60161B75E508}.job

Step 6

Restart in normal mode and scan your computer with your Trend Micro product for files detected as TROJ_JORIK.SMIF. If the detected files have already been cleaned, deleted, or quarantined by your Trend Micro product, no further step is required. You may opt to simply delete the quarantined files. Please check this Knowledge Base page for more information.


Did this description help? Tell us how we did.