ADW_LINKOREE
Adware.Maltrec.TS!g23 (Symantec); Adware.Linkury (fs) (Sunbelt)
Windows
Threat Type: Adware
Destructiveness: No
Encrypted:
In the wild: Yes
OVERVIEW
This adware arrives on a system as a file dropped by other malware or as a file downloaded unknowingly by users when visiting malicious sites.
TECHNICAL DETAILS
9,414,936 bytes
EXE
No
29 Nov 2014
Arrival Details
This adware arrives on a system as a file dropped by other malware or as a file downloaded unknowingly by users when visiting malicious sites.
Installation
This adware creates the following folders:
- %User Profile%\CryptnetUrlCache\MetaData
- %User Profile%\Microsoft\CryptnetUrlCache
- %User Profile%\CryptnetUrlCache\Content
- %User Temp%\Smartbar
- %System Root%\MSI244a1.tmp
- %System Root%\Config.Msi
- %Application Data%\Smartbar
- %Application Data%\Smartbar\Common
- %Application Data%\Smartbar\Common\icons
- %Application Data%\Smartbar\Common\iconsWide
- %Windows%\Installer\MSI24.tmp-
- %System Root%\Documents and Settings\Wilbert
- %User Profile%\Microsoft\CLR Security Config
- %User Profile%\CLR Security Config\v2.0.50727.42
- %Windows%\Installer\MSI77.tmp-
(Note: %User Profile% is the current user's profile folder, which is usually C:\Documents and Settings\{user name} on Windows 2000, XP, and Server 2003, or C:\Users\{user name} on Windows Vista and 7.. %User Temp% is the user's temporary folder, where it usually is C:\Documents and Settings\{user name}\Local Settings\Temp on Windows 2000, Windows Server 2003, and Windows XP (32- and 64-bit); C:\Users\{user name}\AppData\Local\Temp on Windows Vista (32- and 64-bit), Windows 7 (32- and 64-bit), Windows 8 (32- and 64-bit), Windows 8.1 (32- and 64-bit), Windows Server 2008, and Windows Server 2012.. %System Root% is the Windows root folder, where it usually is C:\ on all Windows operating system versions.. %Application Data% is the Application Data folder, where it usually is C:\Documents and Settings\{user name}\Application Data on Windows 2000, Windows Server 2003, and Windows XP (32- and 64-bit); C:\Users\{user name}\AppData\Roaming on Windows Vista (32- and 64-bit), Windows 7 (32- and 64-bit), Windows 8 (32- and 64-bit), Windows 8.1 (32- and 64-bit), Windows Server 2008, and Windows Server 2012.. %Windows% is the Windows folder, where it usually is C:\Windows on all Windows operating system versions.)
Other System Modifications
This adware deletes the following files:
- %User Temp%\rovic-61.pdb
- %Windows%\Installer\MSI24.tmp
- %Windows%\Installer\MSI77.tmp
- %System Root%\Config.Msi\MSIA7.tmp
- %User Temp%\ual4en1_.pdb
- %User Temp%\yfobqe29.pdb
- %Windows%\Installer\MSI24.tmp-\CustomAction.config
- %Windows%\Installer\MSI24.tmp-\Interop.NetFwTypeLib.dll
- %Windows%\Installer\MSI24.tmp-\Interop.SHDocVw.dll
- %Windows%\Installer\MSI24.tmp-\MACTrackBarLib.dll
- %Windows%\Installer\MSI24.tmp-\Microsoft.Deployment.WindowsInstaller.dll
- %Windows%\Installer\MSI24.tmp-\Microsoft.Practices.EnterpriseLibrary.Common.dll
- %Windows%\Installer\MSI24.tmp-\Microsoft.Practices.EnterpriseLibrary.ExceptionHandling.dll
- %Windows%\Installer\MSI24.tmp-\Microsoft.Practices.EnterpriseLibrary.ExceptionHandling.Logging.dll
- %Windows%\Installer\MSI24.tmp-\Microsoft.Practices.EnterpriseLibrary.Logging.dll
- %Windows%\Installer\MSI24.tmp-\Microsoft.Practices.ObjectBuilder.dll
- %Windows%\Installer\MSI24.tmp-\Newtonsoft.Json.dll
- %Windows%\Installer\MSI24.tmp-\RegAsm.exe
- %Windows%\Installer\MSI24.tmp-\siem.dll
- %Windows%\Installer\MSI24.tmp-\sipb.dll
- %Windows%\Installer\MSI24.tmp-\sismlp.dll
- %Windows%\Installer\MSI24.tmp-\Smartbar.GUI.Controls.dll
- %Windows%\Installer\MSI24.tmp-\Smartbar.GUI.Docking.dll
- %Windows%\Installer\MSI24.tmp-\Smartbar.Infrastructure.BusinessEntities.dll
- %Windows%\Installer\MSI24.tmp-\Smartbar.Infrastructure.Utilities.dll
- %Windows%\Installer\MSI24.tmp-\Smartbar.Installer.CustomActions.dll
- %Windows%\Installer\MSI24.tmp-\Smartbar.Personalization.Common.dll
- %Windows%\Installer\MSI24.tmp-\Smartbar.Resources.HistoryAndStatsWrapper.dll
- %Windows%\Installer\MSI24.tmp-\Smartbar.Resources.HistoryAndStatsWrapper.XmlSerializers.dll
- %Windows%\Installer\MSI24.tmp-\Smartbar.Resources.LanguageSettings.dll
- %Windows%\Installer\MSI24.tmp-\Smartbar.Resources.LanguageSettings.resources.dll
- %Windows%\Installer\MSI24.tmp-\Smartbar.Resources.SocialNetsSharer.dll
- %Windows%\Installer\MSI24.tmp-\Smartbar.Resources.SocialNetsSharer.XmlSerializers.dll
- %Windows%\Installer\MSI24.tmp-\Smartbar.Resources.Translations.dll
- %Windows%\Installer\MSI24.tmp-\spbe.dll
- %Windows%\Installer\MSI24.tmp-\spbl.dll
- %Windows%\Installer\MSI24.tmp-\sppsm.dll
- %Windows%\Installer\MSI24.tmp-\spsm.dll
- %Windows%\Installer\MSI24.tmp-\spusm.dll
- %Windows%\Installer\MSI24.tmp-\srbhu.dll
- %Windows%\Installer\MSI24.tmp-\srbs.dll
- %Windows%\Installer\MSI24.tmp-\srns.dll
- %Windows%\Installer\MSI24.tmp-\srpdm.dll
- %Windows%\Installer\MSI24.tmp-\srprl.dll
- %Windows%\Installer\MSI24.tmp-\srpu.dll
- %Windows%\Installer\MSI24.tmp-\srsbs.dll
- %Windows%\Installer\MSI24.tmp-\srsl.dll
- %Windows%\Installer\MSI24.tmp-\srus.dll
- %Windows%\Installer\MSI24.tmp-\srut.dll
- %Windows%\Installer\MSI77.tmp-\CustomAction.config
- %Windows%\Installer\MSI77.tmp-\Interop.NetFwTypeLib.dll
- %Windows%\Installer\MSI77.tmp-\Interop.SHDocVw.dll
- %Windows%\Installer\MSI77.tmp-\MACTrackBarLib.dll
- %Windows%\Installer\MSI77.tmp-\Microsoft.Deployment.WindowsInstaller.dll
- %Windows%\Installer\MSI77.tmp-\Microsoft.Practices.EnterpriseLibrary.Common.dll
- %Windows%\Installer\MSI77.tmp-\Microsoft.Practices.EnterpriseLibrary.ExceptionHandling.dll
- %Windows%\Installer\MSI77.tmp-\Microsoft.Practices.EnterpriseLibrary.ExceptionHandling.Logging.dll
- %Windows%\Installer\MSI77.tmp-\Microsoft.Practices.EnterpriseLibrary.Logging.dll
- %Windows%\Installer\MSI77.tmp-\Microsoft.Practices.ObjectBuilder.dll
- %Windows%\Installer\MSI77.tmp-\Newtonsoft.Json.dll
- %Windows%\Installer\MSI77.tmp-\RegAsm.exe
- %Windows%\Installer\MSI77.tmp-\siem.dll
- %Windows%\Installer\MSI77.tmp-\sipb.dll
- %Windows%\Installer\MSI77.tmp-\sismlp.dll
- %Windows%\Installer\MSI77.tmp-\Smartbar.GUI.Controls.dll
- %Windows%\Installer\MSI77.tmp-\Smartbar.GUI.Docking.dll
- %Windows%\Installer\MSI77.tmp-\Smartbar.Infrastructure.BusinessEntities.dll
- %Windows%\Installer\MSI77.tmp-\Smartbar.Infrastructure.Utilities.dll
- %Windows%\Installer\MSI77.tmp-\Smartbar.Installer.CustomActions.dll
- %Windows%\Installer\MSI77.tmp-\Smartbar.Personalization.Common.dll
- %Windows%\Installer\MSI77.tmp-\Smartbar.Resources.HistoryAndStatsWrapper.dll
- %Windows%\Installer\MSI77.tmp-\Smartbar.Resources.HistoryAndStatsWrapper.XmlSerializers.dll
- %Windows%\Installer\MSI77.tmp-\Smartbar.Resources.LanguageSettings.dll
- %Windows%\Installer\MSI77.tmp-\Smartbar.Resources.LanguageSettings.resources.dll
- %Windows%\Installer\MSI77.tmp-\Smartbar.Resources.SocialNetsSharer.dll
- %Windows%\Installer\MSI77.tmp-\Smartbar.Resources.SocialNetsSharer.XmlSerializers.dll
- %Windows%\Installer\MSI77.tmp-\Smartbar.Resources.Translations.dll
- %Windows%\Installer\MSI77.tmp-\spbe.dll
- %Windows%\Installer\MSI77.tmp-\spbl.dll
- %Windows%\Installer\MSI77.tmp-\sppsm.dll
- %Windows%\Installer\MSI77.tmp-\spsm.dll
- %Windows%\Installer\MSI77.tmp-\spusm.dll
- %Windows%\Installer\MSI77.tmp-\srbhu.dll
- %Windows%\Installer\MSI77.tmp-\srbs.dll
- %Windows%\Installer\MSI77.tmp-\srns.dll
- %Windows%\Installer\MSI77.tmp-\srpdm.dll
- %Windows%\Installer\MSI77.tmp-\srprl.dll
- %Windows%\Installer\MSI77.tmp-\srpu.dll
- %Windows%\Installer\MSI77.tmp-\srsbs.dll
- %Windows%\Installer\MSI77.tmp-\srsl.dll
- %Windows%\Installer\MSI77.tmp-\srus.dll
- %Windows%\Installer\MSI77.tmp-\srut.dll
(Note: %User Temp% is the user's temporary folder, where it usually is C:\Documents and Settings\{user name}\Local Settings\Temp on Windows 2000, Windows Server 2003, and Windows XP (32- and 64-bit); C:\Users\{user name}\AppData\Local\Temp on Windows Vista (32- and 64-bit), Windows 7 (32- and 64-bit), Windows 8 (32- and 64-bit), Windows 8.1 (32- and 64-bit), Windows Server 2008, and Windows Server 2012.. %Windows% is the Windows folder, where it usually is C:\Windows on all Windows operating system versions.. %System Root% is the Windows root folder, where it usually is C:\ on all Windows operating system versions.)
It deletes the following folders:
- %User Profile%\My Documents\My Pictures
- %Start Menu%\Programs\Administrative Tools
- %Application Data%\Smartbar\Application\Configs
- %Application Data%\Smartbar\Application
(Note: %User Profile% is the current user's profile folder, which is usually C:\Documents and Settings\{user name} on Windows 2000, XP, and Server 2003, or C:\Users\{user name} on Windows Vista and 7.. %Start Menu% is the Start Menu folder, where it usually is C:\Documents and Settings\{user name}\Start Menu on Windows 2000, Windows Server 2003, and Windows XP (32- and 64-bit); C:\Users\{user name}\AppData\Roaming\Microsoft\Windows\Start Menu on Windows Vista (32- and 64-bit), Windows 7 (32- and 64-bit), Windows 8 (32- and 64-bit), Windows 8.1 (32- and 64-bit), Windows Server 2008, and Windows Server 2012.. %Application Data% is the Application Data folder, where it usually is C:\Documents and Settings\{user name}\Application Data on Windows 2000, Windows Server 2003, and Windows XP (32- and 64-bit); C:\Users\{user name}\AppData\Roaming on Windows Vista (32- and 64-bit), Windows 7 (32- and 64-bit), Windows 8 (32- and 64-bit), Windows 8.1 (32- and 64-bit), Windows Server 2008, and Windows Server 2012.)
It adds the following registry keys:
hkey_local_machine\software\microsoft\
esent\process\{malware file name}
hkey_local_machine\software\microsoft\
esent\process\{malware file name}\
debug
HKEY_LOCAL_MACHINE\Software\Microsoft\
Windows\CurrentVersion\Installer\
InProgress
HKEY_LOCAL_MACHINE\Software\Microsoft\
Windows\CurrentVersion\Installer\
Rollback\Scripts
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\
Windows\CurrentVersion\Installer\
UserData\S-1-5-21-1645522239-1292428093-682003330-1003\Components\
216A7206F164D5243BE66288984CD4AC
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\
Windows\CurrentVersion\Installer\
UserData\S-1-5-21-1645522239-1292428093-682003330-1003\Components\
3152E1F19977892449DC968802CE8964
HKEY_LOCAL_MACHINE\Software\Microsoft\
Windows\CurrentVersion\Installer\
UserData\S-1-5-18\Components\
3152E1F19977892449DC968802CE8964
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\
Windows\CurrentVersion\Installer\
UserData\S-1-5-21-1645522239-1292428093-682003330-1003\Components\
272DC7B48E479E54DAA0FE4489E6092F
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\
Windows\CurrentVersion\Installer\
UserData\S-1-5-21-1645522239-1292428093-682003330-1003\Components\
D80C1A41B9116A14D9F9ABA4F127B468
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\
Windows\CurrentVersion\Installer\
UserData\S-1-5-21-1645522239-1292428093-682003330-1003\Components\
C3B675CC98F2B464B802D5E2C6BF6895
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\
Windows\CurrentVersion\Installer\
UserData\S-1-5-21-1645522239-1292428093-682003330-1003\Components\
9DDEC1131A9FA2348B0A0AEB73D68A82
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\
Windows\CurrentVersion\Installer\
UserData\S-1-5-21-1645522239-1292428093-682003330-1003\Components\
9DDEC1131A9FA2348B0A0AEB73D68A18
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\
Windows\CurrentVersion\Installer\
UserData\S-1-5-21-1645522239-1292428093-682003330-1003\Components\
C4FE6082BC8553B4B91EC0FE408D71DA
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\
Windows\CurrentVersion\Installer\
UserData\S-1-5-21-1645522239-1292428093-682003330-1003\Components\
93D6CC2FC9612424E87EB7375E2FC46C
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\
Windows\CurrentVersion\Installer\
UserData\S-1-5-21-1645522239-1292428093-682003330-1003\Components\
0B61AA2BED003754EB929BEF1B2E8A42
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\
Windows\CurrentVersion\Installer\
UserData\S-1-5-21-1645522239-1292428093-682003330-1003\Components\
2E35213FD461DD045869F4E01B62B2BE
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\
Windows\CurrentVersion\Installer\
UserData\S-1-5-21-1645522239-1292428093-682003330-1003\Components\
BBB8D37874E1A0946834CDB33A9FC4CD
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\
Windows\CurrentVersion\Installer\
UserData\S-1-5-21-1645522239-1292428093-682003330-1003\Components\
BBB8D37874E1A0946834CDB34A9FC4CD
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\
Windows\CurrentVersion\Installer\
UserData\S-1-5-21-1645522239-1292428093-682003330-1003\Components\
40623894481B5D040B0F8C26B6D7A878
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\
Windows\CurrentVersion\Installer\
UserData\S-1-5-21-1645522239-1292428093-682003330-1003\Components\
0B51AA2BED003754EB928BEF1B2E8A42
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\
Windows\CurrentVersion\Installer\
UserData\S-1-5-21-1645522239-1292428093-682003330-1003\Components\
55D0E21DCD38B8E40BA0517C0D9CCCE0
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\
Windows\CurrentVersion\Installer\
UserData\S-1-5-21-1645522239-1292428093-682003330-1003\Components\
A9AB3AEAE939E984293B9178134BD540
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\
Windows\CurrentVersion\Installer\
UserData\S-1-5-21-1645522239-1292428093-682003330-1003\Components\
A143CF598A8430D4BB0E71700E8C09C5
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\
Windows\CurrentVersion\Installer\
UserData\S-1-5-21-1645522239-1292428093-682003330-1003\Components\
D40B7F324393F624DACA80C397004DA1
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\
Windows\CurrentVersion\Installer\
UserData\S-1-5-21-1645522239-1292428093-682003330-1003\Components\
DF0B7F324F93FE24DBCA80C397004DF2
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\
Windows\CurrentVersion\Installer\
UserData\S-1-5-21-1645522239-1292428093-682003330-1003\Components\
4CD231EF64D076744824027B43D7B1AD
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\
Windows\CurrentVersion\Installer\
UserData\S-1-5-21-1645522239-1292428093-682003330-1003\Components\
649A52D257CA5DB4EAAE8BA9EB23E467
HKEY_LOCAL_MACHINE\Software\Microsoft\
Windows\CurrentVersion\Installer\
UserData\S-1-5-18\Components\
649A52D257CA5DB4EAAE8BA9EB23E467
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\
Windows\CurrentVersion\Installer\
UserData\S-1-5-21-1645522239-1292428093-682003330-1003\Components\
33592FD0CF5A7AA4A8F106EB69B9A0D7
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\
Windows\CurrentVersion\Installer\
UserData\S-1-5-21-1645522239-1292428093-682003330-1003\Components\
E5ADE64D843807D4997A4AFC96B78EF1
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\
Windows\CurrentVersion\Installer\
UserData\S-1-5-21-1645522239-1292428093-682003330-1003\Components\
0B6A7206F164D5243BE662E09C4CD4AC
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\
Windows\CurrentVersion\Installer\
UserData\S-1-5-21-1645522239-1292428093-682003330-1003\Components\
016A7206F164D5243BE662E09C4CD4AC
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\
Windows\CurrentVersion\Installer\
UserData\S-1-5-21-1645522239-1292428093-682003330-1003\Components\
116A7206F164D5243BE662E09C4CD4AC
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\
Windows\CurrentVersion\Installer\
UserData\S-1-5-21-1645522239-1292428093-682003330-1003\Components\
216A7206F164D5243BE662E09C4CD4AC
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\
Windows\CurrentVersion\Installer\
UserData\S-1-5-21-1645522239-1292428093-682003330-1003\Components\
E5ADE64D843807D4997A4AFC96B78EF2
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\
Windows\CurrentVersion\Installer\
UserData\S-1-5-21-1645522239-1292428093-682003330-1003\Components\
E5ADE64D843807D4997A4AFC96B78EF3
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\
Windows\CurrentVersion\Installer\
UserData\S-1-5-21-1645522239-1292428093-682003330-1003\Components\
E5ADE64D843807D4997A4AFC96B78EF4
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\
Windows\CurrentVersion\Installer\
UserData\S-1-5-21-1645522239-1292428093-682003330-1003\Components\
E5ADE64D843807D4997A4AFC96B78EF5
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\
Windows\CurrentVersion\Installer\
UserData\S-1-5-21-1645522239-1292428093-682003330-1003\Components\
016A7206F164D5243BE66200904CD4AC
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\
Windows\CurrentVersion\Installer\
UserData\S-1-5-21-1645522239-1292428093-682003330-1003\Components\
43F238B8E12237E46A4AFF0CB31E2ECC
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\
Windows\CurrentVersion\Installer\
UserData\S-1-5-21-1645522239-1292428093-682003330-1003\Components\
BBB8D37874E1A0946834CDB33A9FC4C5
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\
Windows\CurrentVersion\Installer\
UserData\S-1-5-21-1645522239-1292428093-682003330-1003\Components\
32123894481B5D040B0F8C26B6D7A878
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\
Windows\CurrentVersion\Installer\
UserData\S-1-5-21-1645522239-1292428093-682003330-1003\Components\
0B51A54BED003754EB928BEF1B2E8A42
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\
Windows\CurrentVersion\Installer\
UserData\S-1-5-21-1645522239-1292428093-682003330-1003\Components\
E13864C95DCE91247A4435FFDA762754
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\
Windows\CurrentVersion\Installer\
UserData\S-1-5-21-1645522239-1292428093-682003330-1003\Components\
9DDEC1131A9FA2348B0A0AEB73868888
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\
Windows\CurrentVersion\Installer\
UserData\S-1-5-21-1645522239-1292428093-682003330-1003\Components\
9DDEC1131A9FA2348B0A0AEB73D6BA21
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\
Windows\CurrentVersion\Installer\
UserData\S-1-5-21-1645522239-1292428093-682003330-1003\Components\
A805D820868346044B5BDD92EB6CA6C3
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\
Windows\CurrentVersion\Installer\
UserData\S-1-5-21-1645522239-1292428093-682003330-1003\Components\
9DDEC1131A9FA2348B0A0AEB88D68A82
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\
Windows\CurrentVersion\Installer\
UserData\S-1-5-21-1645522239-1292428093-682003330-1003\Components\
9DDEC1131A9FA2348B0A0AEB73D61A81
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\
Windows\CurrentVersion\Installer\
UserData\S-1-5-21-1645522239-1292428093-682003330-1003\Components\
D0386F2D6FEAFBC45BFCAFE158BF5064
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\
Windows\CurrentVersion\Installer\
UserData\S-1-5-21-1645522239-1292428093-682003330-1003\Components\
CA86D8ADF7525524299E35592473F71A
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\
Windows\CurrentVersion\Installer\
UserData\S-1-5-21-1645522239-1292428093-682003330-1003\Components\
CA86D8ADF7525524299E35592473F72A
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\
Windows\CurrentVersion\Installer\
UserData\S-1-5-21-1645522239-1292428093-682003330-1003\Components\
CA86D8ADF7525524299E35592473F73A
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\
Windows\CurrentVersion\Installer\
UserData\S-1-5-21-1645522239-1292428093-682003330-1003\Components\
E2647758E1ED7134F8C4259CC51A2AA8
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\
Windows\CurrentVersion\Installer\
UserData\S-1-5-21-1645522239-1292428093-682003330-1003\Components\
0B394BFA95E9CAE4FBB27DB664DCBD0E
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\
Windows\CurrentVersion\Installer\
UserData\S-1-5-21-1645522239-1292428093-682003330-1003\Components\
9DDEC1131A9FA2348B0A81EB88D68A81
HKEY_CURRENT_USER\Software\SmartbarLog
HKEY_CURRENT_USER\SOFTWARE\SmartbarBackup
It adds the following registry entries:
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\
Windows\CurrentVersion\Installer\
Rollback\Scripts
%System Root%\Config.Msi\244a3.rbs = "457b1e8"
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\
Windows\CurrentVersion\Installer\
UserData\S-1-5-21-1645522239-1292428093-682003330-1003\Components\
216A7206F164D5243BE66288984CD4AC
705E65FCE69A37947BBF4E5924EA8557 = "01:\Software\Smartbar\version"
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\
Windows\CurrentVersion\Installer\
UserData\S-1-5-21-1645522239-1292428093-682003330-1003\Components\
3152E1F19977892449DC968802CE8964
705E65FCE69A37947BBF4E5924EA8557 = "{random characters}"
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\
Windows\CurrentVersion\Installer\
UserData\S-1-5-18\Components\
3152E1F19977892449DC968802CE8964
00000000000000000000000000000000 = "{random characters}"
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\
Windows\CurrentVersion\Installer\
UserData\S-1-5-21-1645522239-1292428093-682003330-1003\Components\
272DC7B48E479E54DAA0FE4489E6092F
705E65FCE69A37947BBF4E5924EA8557 = "{random characters}"
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\
Windows\CurrentVersion\Installer\
UserData\S-1-5-21-1645522239-1292428093-682003330-1003\Components\
D80C1A41B9116A14D9F9ABA4F127B468
705E65FCE69A37947BBF4E5924EA8557 = "{random characters}"
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\
Windows\CurrentVersion\Installer\
UserData\S-1-5-21-1645522239-1292428093-682003330-1003\Components\
C3B675CC98F2B464B802D5E2C6BF6895
705E65FCE69A37947BBF4E5924EA8557 = "{random characters}"
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\
Windows\CurrentVersion\Installer\
UserData\S-1-5-21-1645522239-1292428093-682003330-1003\Components\
9DDEC1131A9FA2348B0A0AEB73D68A82
705E65FCE69A37947BBF4E5924EA8557 = "01:\Software\Smartbar\version"
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\
Windows\CurrentVersion\Installer\
UserData\S-1-5-21-1645522239-1292428093-682003330-1003\Components\
9DDEC1131A9FA2348B0A0AEB73D68A18
705E65FCE69A37947BBF4E5924EA8557 = "01:\Software\Smartbar\version"
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\
Windows\CurrentVersion\Installer\
UserData\S-1-5-21-1645522239-1292428093-682003330-1003\Components\
C4FE6082BC8553B4B91EC0FE408D71DA
705E65FCE69A37947BBF4E5924EA8557 = "01:\Software\Smartbar\version"
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\
Windows\CurrentVersion\Installer\
UserData\S-1-5-21-1645522239-1292428093-682003330-1003\Components\
93D6CC2FC9612424E87EB7375E2FC46C
705E65FCE69A37947BBF4E5924EA8557 = "01:\Software\Smartbar\version"
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\
Windows\CurrentVersion\Installer\
UserData\S-1-5-21-1645522239-1292428093-682003330-1003\Components\
0B61AA2BED003754EB929BEF1B2E8A42
705E65FCE69A37947BBF4E5924EA8557 = "01:\Software\Smartbar\version"
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\
Windows\CurrentVersion\Installer\
UserData\S-1-5-21-1645522239-1292428093-682003330-1003\Components\
2E35213FD461DD045869F4E01B62B2BE
705E65FCE69A37947BBF4E5924EA8557 = "01:\Software\Smartbar\version"
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\
Windows\CurrentVersion\Installer\
UserData\S-1-5-21-1645522239-1292428093-682003330-1003\Components\
BBB8D37874E1A0946834CDB33A9FC4CD
705E65FCE69A37947BBF4E5924EA8557 = "01:\Software\Smartbar\version"
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\
Windows\CurrentVersion\Installer\
UserData\S-1-5-21-1645522239-1292428093-682003330-1003\Components\
BBB8D37874E1A0946834CDB34A9FC4CD
705E65FCE69A37947BBF4E5924EA8557 = "01:\Software\Smartbar\version"
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\
Windows\CurrentVersion\Installer\
UserData\S-1-5-21-1645522239-1292428093-682003330-1003\Components\
40623894481B5D040B0F8C26B6D7A878
705E65FCE69A37947BBF4E5924EA8557 = "01:\Software\Smartbar\version"
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\
Windows\CurrentVersion\Installer\
UserData\S-1-5-21-1645522239-1292428093-682003330-1003\Components\
0B51AA2BED003754EB928BEF1B2E8A42
705E65FCE69A37947BBF4E5924EA8557 = "01:\Software\Smartbar\version"
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\
Windows\CurrentVersion\Installer\
UserData\S-1-5-21-1645522239-1292428093-682003330-1003\Components\
55D0E21DCD38B8E40BA0517C0D9CCCE0
705E65FCE69A37947BBF4E5924EA8557 = "01:\Software\Smartbar\version"
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\
Windows\CurrentVersion\Installer\
UserData\S-1-5-21-1645522239-1292428093-682003330-1003\Components\
A9AB3AEAE939E984293B9178134BD540
705E65FCE69A37947BBF4E5924EA8557 = "01:\Software\Smartbar\version"
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\
Windows\CurrentVersion\Installer\
UserData\S-1-5-21-1645522239-1292428093-682003330-1003\Components\
A143CF598A8430D4BB0E71700E8C09C5
705E65FCE69A37947BBF4E5924EA8557 = "01:\Software\Smartbar\version"
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\
Windows\CurrentVersion\Installer\
UserData\S-1-5-21-1645522239-1292428093-682003330-1003\Components\
D40B7F324393F624DACA80C397004DA1
705E65FCE69A37947BBF4E5924EA8557 = "01:\Software\Smartbar\version"
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\
Windows\CurrentVersion\Installer\
UserData\S-1-5-21-1645522239-1292428093-682003330-1003\Components\
DF0B7F324F93FE24DBCA80C397004DF2
705E65FCE69A37947BBF4E5924EA8557 = "01:\Software\Smartbar\version"
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\
Windows\CurrentVersion\Installer\
UserData\S-1-5-21-1645522239-1292428093-682003330-1003\Components\
4CD231EF64D076744824027B43D7B1AD
705E65FCE69A37947BBF4E5924EA8557 = "01:\Software\Smartbar\version"
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\
Windows\CurrentVersion\Installer\
UserData\S-1-5-21-1645522239-1292428093-682003330-1003\Components\
649A52D257CA5DB4EAAE8BA9EB23E467
705E65FCE69A37947BBF4E5924EA8557 = "01:\Software\Smartbar\version"
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\
Windows\CurrentVersion\Installer\
UserData\S-1-5-18\Components\
649A52D257CA5DB4EAAE8BA9EB23E467
00000000000000000000000000000000 = "01:\Software\Smartbar\version"
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\
Windows\CurrentVersion\Installer\
UserData\S-1-5-21-1645522239-1292428093-682003330-1003\Components\
33592FD0CF5A7AA4A8F106EB69B9A0D7
705E65FCE69A37947BBF4E5924EA8557 = "01:\Software\Smartbar\version"
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\
Windows\CurrentVersion\Installer\
UserData\S-1-5-21-1645522239-1292428093-682003330-1003\Components\
E5ADE64D843807D4997A4AFC96B78EF1
705E65FCE69A37947BBF4E5924EA8557 = "01:\Software\Smartbar\version"
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\
Windows\CurrentVersion\Installer\
UserData\S-1-5-21-1645522239-1292428093-682003330-1003\Components\
0B6A7206F164D5243BE662E09C4CD4AC
705E65FCE69A37947BBF4E5924EA8557 = "01:\Software\Smartbar\version"
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\
Windows\CurrentVersion\Installer\
UserData\S-1-5-21-1645522239-1292428093-682003330-1003\Components\
016A7206F164D5243BE662E09C4CD4AC
705E65FCE69A37947BBF4E5924EA8557 = "01:\Software\Smartbar\version"
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\
Windows\CurrentVersion\Installer\
UserData\S-1-5-21-1645522239-1292428093-682003330-1003\Components\
116A7206F164D5243BE662E09C4CD4AC
705E65FCE69A37947BBF4E5924EA8557 = "01:\Software\Smartbar\version"
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\
Windows\CurrentVersion\Installer\
UserData\S-1-5-21-1645522239-1292428093-682003330-1003\Components\
216A7206F164D5243BE662E09C4CD4AC
705E65FCE69A37947BBF4E5924EA8557 = "01:\Software\Smartbar\version"
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\
Windows\CurrentVersion\Installer\
UserData\S-1-5-21-1645522239-1292428093-682003330-1003\Components\
E5ADE64D843807D4997A4AFC96B78EF2
705E65FCE69A37947BBF4E5924EA8557 = "01:\Software\Smartbar\version"
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\
Windows\CurrentVersion\Installer\
UserData\S-1-5-21-1645522239-1292428093-682003330-1003\Components\
E5ADE64D843807D4997A4AFC96B78EF3
705E65FCE69A37947BBF4E5924EA8557 = "01:\Software\Smartbar\version"
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\
Windows\CurrentVersion\Installer\
UserData\S-1-5-21-1645522239-1292428093-682003330-1003\Components\
E5ADE64D843807D4997A4AFC96B78EF4
705E65FCE69A37947BBF4E5924EA8557 = "01:\Software\Smartbar\version"
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\
Windows\CurrentVersion\Installer\
UserData\S-1-5-21-1645522239-1292428093-682003330-1003\Components\
E5ADE64D843807D4997A4AFC96B78EF5
705E65FCE69A37947BBF4E5924EA8557 = "01:\Software\Smartbar\version"
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\
Windows\CurrentVersion\Installer\
UserData\S-1-5-21-1645522239-1292428093-682003330-1003\Components\
016A7206F164D5243BE66200904CD4AC
705E65FCE69A37947BBF4E5924EA8557 = "01:\Software\Smartbar\version"
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\
Windows\CurrentVersion\Installer\
UserData\S-1-5-21-1645522239-1292428093-682003330-1003\Components\
43F238B8E12237E46A4AFF0CB31E2ECC
705E65FCE69A37947BBF4E5924EA8557 = "01:\Software\Smartbar\version"
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\
Windows\CurrentVersion\Installer\
UserData\S-1-5-21-1645522239-1292428093-682003330-1003\Components\
BBB8D37874E1A0946834CDB33A9FC4C5
705E65FCE69A37947BBF4E5924EA8557 = "01:\Software\Smartbar\version"
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\
Windows\CurrentVersion\Installer\
UserData\S-1-5-21-1645522239-1292428093-682003330-1003\Components\
32123894481B5D040B0F8C26B6D7A878
705E65FCE69A37947BBF4E5924EA8557 = "01:\Software\Smartbar\version"
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\
Windows\CurrentVersion\Installer\
UserData\S-1-5-21-1645522239-1292428093-682003330-1003\Components\
0B51A54BED003754EB928BEF1B2E8A42
705E65FCE69A37947BBF4E5924EA8557 = "01:\Software\Smartbar\version"
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\
Windows\CurrentVersion\Installer\
UserData\S-1-5-21-1645522239-1292428093-682003330-1003\Components\
E13864C95DCE91247A4435FFDA762754
705E65FCE69A37947BBF4E5924EA8557 = "01:\Software\Smartbar\version"
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\
Windows\CurrentVersion\Installer\
UserData\S-1-5-21-1645522239-1292428093-682003330-1003\Components\
9DDEC1131A9FA2348B0A0AEB73868888
705E65FCE69A37947BBF4E5924EA8557 = "01:\Software\Smartbar\version"
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\
Windows\CurrentVersion\Installer\
UserData\S-1-5-21-1645522239-1292428093-682003330-1003\Components\
9DDEC1131A9FA2348B0A0AEB73D6BA21
705E65FCE69A37947BBF4E5924EA8557 = "01:\Software\Smartbar\version"
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\
Windows\CurrentVersion\Installer\
UserData\S-1-5-21-1645522239-1292428093-682003330-1003\Components\
A805D820868346044B5BDD92EB6CA6C3
705E65FCE69A37947BBF4E5924EA8557 = "01:\Software\Smartbar\version"
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\
Windows\CurrentVersion\Installer\
UserData\S-1-5-21-1645522239-1292428093-682003330-1003\Components\
9DDEC1131A9FA2348B0A0AEB88D68A82
705E65FCE69A37947BBF4E5924EA8557 = "01:\Software\Smartbar\version"
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\
Windows\CurrentVersion\Installer\
UserData\S-1-5-21-1645522239-1292428093-682003330-1003\Components\
9DDEC1131A9FA2348B0A0AEB73D61A81
705E65FCE69A37947BBF4E5924EA8557 = "01:\Software\Smartbar\version"
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\
Windows\CurrentVersion\Installer\
UserData\S-1-5-21-1645522239-1292428093-682003330-1003\Components\
D0386F2D6FEAFBC45BFCAFE158BF5064
705E65FCE69A37947BBF4E5924EA8557 = "01:\Software\Smartbar\version"
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\
Windows\CurrentVersion\Installer\
UserData\S-1-5-21-1645522239-1292428093-682003330-1003\Components\
CA86D8ADF7525524299E35592473F71A
705E65FCE69A37947BBF4E5924EA8557 = "01:\Software\Smartbar\version"
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\
Windows\CurrentVersion\Installer\
UserData\S-1-5-21-1645522239-1292428093-682003330-1003\Components\
CA86D8ADF7525524299E35592473F72A
705E65FCE69A37947BBF4E5924EA8557 = "01:\Software\Smartbar\version"
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\
Windows\CurrentVersion\Installer\
UserData\S-1-5-21-1645522239-1292428093-682003330-1003\Components\
CA86D8ADF7525524299E35592473F73A
705E65FCE69A37947BBF4E5924EA8557 = "01:\Software\Smartbar\version"
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\
Windows\CurrentVersion\Installer\
UserData\S-1-5-21-1645522239-1292428093-682003330-1003\Components\
E2647758E1ED7134F8C4259CC51A2AA8
705E65FCE69A37947BBF4E5924EA8557 = "01:\Software\Smartbar\version"
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\
Windows\CurrentVersion\Installer\
UserData\S-1-5-21-1645522239-1292428093-682003330-1003\Components\
0B394BFA95E9CAE4FBB27DB664DCBD0E
705E65FCE69A37947BBF4E5924EA8557 = "01:\Software\Smartbar\version"
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\
Windows\CurrentVersion\Installer\
UserData\S-1-5-21-1645522239-1292428093-682003330-1003\Components\
9DDEC1131A9FA2348B0A81EB88D68A81
705E65FCE69A37947BBF4E5924EA8557 = "01:\Software\Smartbar\version"
HKEY_CURRENT_USER\Software\SmartbarLog
Installation-Status = "NewBegin"
HKEY_CURRENT_USER\Software\SmartbarBackup
InstallationArgs = "{random characters}"
It modifies the following registry entries:
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\
SystemCertificates\AuthRoot\Certificates\
4EFCED9C6BDD0C985CA3C7D253063C5BE6FC620C
Blob = "{random values}"
(Note: The default value data of the said registry entry is {random values}.)
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\
SystemCertificates\AuthRoot\Certificates\
4EF2E6670AC9B5091FE06BE0E5483EAAD6BA32D9
Blob = "{random values}"
(Note: The default value data of the said registry entry is {random values}.)
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\
SystemCertificates\AuthRoot\Certificates\
4C95A9902ABE0777CED18D6ACCC3372D2748381E
Blob = "{random values}"
(Note: The default value data of the said registry entry is {random values}.)
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\
SystemCertificates\AuthRoot\Certificates\
4BA7B9DDD68788E12FF852E1A024204BF286A8F6
Blob = "{random values}"
(Note: The default value data of the said registry entry is {random values}.)
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\
SystemCertificates\AuthRoot\Certificates\
4B421F7515F6AE8A6ECEF97F6982A400A4D9224E
Blob = "{random values}"
(Note: The default value data of the said registry entry is {random values}.)
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\
SystemCertificates\AuthRoot\Certificates\
47AFB915CDA26D82467B97FA42914468726138DD
Blob = "{random values}"
(Note: The default value data of the said registry entry is {random values}.)
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\
SystemCertificates\AuthRoot\Certificates\
4463C531D7CCC1006794612BB656D3BF8257846F
Blob = "{random values}"
(Note: The default value data of the said registry entry is {random values}.)
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\
SystemCertificates\AuthRoot\Certificates\
43F9B110D5BAFD48225231B0D0082B372FEF9A54
Blob = "{random values}"
(Note: The default value data of the said registry entry is {random values}.)
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\
SystemCertificates\AuthRoot\Certificates\
43DDB1FFF3B49B73831407F6BC8B975023D07C50
Blob = "{random values}"
(Note: The default value data of the said registry entry is {random values}.)
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\
SystemCertificates\AuthRoot\Certificates\
40E78C1D523D1CD9954FAC1A1AB3BD3CBAA15BFC
Blob = "{random values}"
(Note: The default value data of the said registry entry is {random values}.)
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\
SystemCertificates\AuthRoot\Certificates\
4072BA31FEC351438480F62E6CB95508461EAB2F
Blob = "{random values}"
(Note: The default value data of the said registry entry is {random values}.)
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\
SystemCertificates\AuthRoot\Certificates\
3F85F2BB4A62B0B58BE1614ABB0D4631B4BEF8BA
Blob = "{random values}"
(Note: The default value data of the said registry entry is {random values}.)
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\
SystemCertificates\AuthRoot\Certificates\
394FF6850B06BE52E51856CC10E180E882B385CC
Blob = "{random values}"
(Note: The default value data of the said registry entry is {random values}.)
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\
SystemCertificates\AuthRoot\Certificates\
36863563FD5128C7BEA6F005CFE9B43668086CCE
Blob = "{random values}"
(Note: The default value data of the said registry entry is {random values}.)
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\
SystemCertificates\AuthRoot\Certificates\
317A2AD07F2B335EF5A1C34E4B57E8B7D8F1FCA6
Blob = "{random values}"
(Note: The default value data of the said registry entry is {random values}.)
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\
SystemCertificates\AuthRoot\Certificates\
2F173F7DE99667AFA57AF80AA2D1B12FAC830338
Blob = "{random values}"
(Note: The default value data of the said registry entry is {random values}.)
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\
SystemCertificates\AuthRoot\Certificates\
284F55C41A1A7A3F8328D4C262FB376ED6096F24
Blob = "{random values}"
(Note: The default value data of the said registry entry is {random values}.)
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\
SystemCertificates\AuthRoot\Certificates\
273EE12457FDC4F90C55E82B56167F62F532E547
Blob = "{random values}"
(Note: The default value data of the said registry entry is {random values}.)
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\
SystemCertificates\AuthRoot\Certificates\
24BA6D6C8A5B5837A48DB5FAE919EA675C94D217
Blob = "{random values}"
(Note: The default value data of the said registry entry is {random values}.)
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\
SystemCertificates\AuthRoot\Certificates\
24A40A1F573643A67F0A4B0749F6A22BF28ABB6B
Blob = "{random values}"
(Note: The default value data of the said registry entry is {random values}.)
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\
SystemCertificates\AuthRoot\Certificates\
23E594945195F2414803B4D564D2A3A3F5D88B8C
Blob = "{random values}"
(Note: The default value data of the said registry entry is {random values}.)
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\
SystemCertificates\AuthRoot\Certificates\
216B2A29E62A00CE820146D8244141B92511B279
Blob = "{random values}"
(Note: The default value data of the said registry entry is {random values}.)
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\
SystemCertificates\AuthRoot\Certificates\
209900B63D955728140CD13622D8C687A4EB0085
Blob = "{random values}"
(Note: The default value data of the said registry entry is {random values}.)
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\
SystemCertificates\AuthRoot\Certificates\
1F55E8839BAC30728BE7108EDE7B0BB0D3298224
Blob = "{random values}"
(Note: The default value data of the said registry entry is {random values}.)
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\
SystemCertificates\AuthRoot\Certificates\
1331F48A5DA8E01DAACA1BB0C17044ACFEF755BB
Blob = "{random values}"
(Note: The default value data of the said registry entry is {random values}.)
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\
SystemCertificates\AuthRoot\Certificates\
0B77BEBBCB7AA24705DECC0FBD6A02FC7ABD9B52
Blob = "{random values}"
(Note: The default value data of the said registry entry is {random values}.)
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\
SystemCertificates\AuthRoot\Certificates\
049811056AFE9FD0F5BE01685AACE6A5D1C4454C
Blob = "{random values}"
(Note: The default value data of the said registry entry is {random values}.)
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\
SystemCertificates\AuthRoot\Certificates\
0483ED3399AC3608058722EDBC5E4600E3BEF9D7
Blob = "{random values}"
(Note: The default value data of the said registry entry is {random values}.)
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\
SystemCertificates\AuthRoot\Certificates\
00EA522C8A9C06AA3ECCE0B4FA6CDC21D92E8099
Blob = "{random values}"
(Note: The default value data of the said registry entry is {random values}.)
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\
SystemCertificates\AuthRoot\Certificates\
0048F8D37B153F6EA2798C323EF4F318A5624A9E
Blob = "{random values}"
(Note: The default value data of the said registry entry is {random values}.)
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\
SystemCertificates\AuthRoot\Certificates\
4EB6D578499B1CCF5F581EAD56BE3D9B6744A5E5
Blob = "{random values}"
(Note: The default value data of the said registry entry is {random values}.)
HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\
Services\Eventlog\Application\
ESENT
EventMessageFile = "%System%\ESENT.dll"
(Note: The default value data of the said registry entry is {random values}.)
HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\
Services\Eventlog\Application\
ESENT
CategoryMessageFile = "%System%\ESENT.dll"
(Note: The default value data of the said registry entry is {random values}.)
HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\
Services\Eventlog\Application\
ESENT
CategoryCount = "1"
(Note: The default value data of the said registry entry is 10.)
HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\
Services\Eventlog\Application\
ESENT
TypesSupported = "7"
(Note: The default value data of the said registry entry is 7.)
HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\
Control\Session Manager\Environment
PATH = "%System%;%Windows%;%System%\Wbem;%Application Data%\Smartbar\Application"
(Note: The default value data of the said registry entry is {random values}.)
Dropping Routine
This adware drops the following files:
- %User Profile%\MetaData\2BF68F4714092295550497DD56F57004
- %User Profile%\Content\2BF68F4714092295550497DD56F57004
- %User Profile%\MetaData\94308059B57B3142E455B38A6EB92015
- %User Profile%\Content\94308059B57B3142E455B38A6EB92015
- %User Temp%\Cab8.tmp
- %User Temp%\TarA.tmp
- %User Profile%\MetaData\8DFDF057024880D7A081AFBF6D26B92F
- %User Profile%\Content\8DFDF057024880D7A081AFBF6D26B92F
- %User Profile%\MetaData\62B5AF9BE9ADC1085C3C56EC07A82BF6
- %User Profile%\Content\62B5AF9BE9ADC1085C3C56EC07A82BF6
- %User Temp%\rovic-61.tmp
- %User Temp%\rovic-61.0.cs
- %User Temp%\rovic-61.dll
- %User Temp%\rovic-61.cmdline
- %User Temp%\rovic-61.out
- %User Temp%\rovic-61.err
- %User Temp%\Smartbar\LinkuryInstaller.msi
- %User Temp%\CSC18.tmp
- %User Temp%\RES1B.tmp
- %Windows%\Installer\244a0.msi
- %Windows%\Installer\244a2.ipi
- %Windows%\Installer\MSI75.tmp
- %System Root%\Config.Msi\244a3.rbs
- %Application Data%\Smartbar\Common\icons\00659FA4-2CAD-45fc-A8A0-DB7862840BA9.png
- %Application Data%\Smartbar\Common\iconsWide\00659FA4-2CAD-45fc-A8A0-DB7862840BA9.png
- %Application Data%\Smartbar\Common\icons\00659FA4-2CAD-45fc-A8A0-DB7862840BA9hover.png
- %Application Data%\Smartbar\Common\iconsWide\00659FA4-2CAD-45fc-A8A0-DB7862840BA9hover.png
- %Application Data%\Smartbar\Common\icons\00659FA4-2CAD-45fc-A8A0-DB7862840BA9press.png
- %Application Data%\Smartbar\Common\iconsWide\00659FA4-2CAD-45fc-A8A0-DB7862840BA9press.png
- %Application Data%\Smartbar\Common\iconsWide\07a9a58b-c653-4285-a870-1fa70cb6c00c.ico
- %Application Data%\Smartbar\Common\icons\07a9a58b-c653-4285-a870-1fa70cb6c00c.png
- %Application Data%\Smartbar\Common\iconsWide\07a9a58b-c653-4285-a870-1fa70cb6c00c.png
- %Application Data%\Smartbar\Common\icons\07a9a58b-c653-4285-a870-1fa70cb6c00chover.png
- %Application Data%\Smartbar\Common\iconsWide\07a9a58b-c653-4285-a870-1fa70cb6c00chover.png
- %Application Data%\Smartbar\Common\icons\07a9a58b-c653-4285-a870-1fa70cb6c00cPress.png
- %Application Data%\Smartbar\Common\iconsWide\07a9a58b-c653-4285-a870-1fa70cb6c00cpress.png
- %Application Data%\Smartbar\Common\icons\0A2DE7DB-ADE9-44FC-BC66-CF5604F9BF7A.png
- %Application Data%\Smartbar\Common\iconsWide\0A2DE7DB-ADE9-44FC-BC66-CF5604F9BF7A.png
- %Application Data%\Smartbar\Common\icons\0A2DE7DB-ADE9-44FC-BC66-CF5604F9BF7Ahover.png
- %Application Data%\Smartbar\Common\iconsWide\0A2DE7DB-ADE9-44FC-BC66-CF5604F9BF7Ahover.png
- %Application Data%\Smartbar\Common\icons\0A2DE7DB-ADE9-44FC-BC66-CF5604F9BF7Apress.png
- %Application Data%\Smartbar\Common\iconsWide\0A2DE7DB-ADE9-44FC-BC66-CF5604F9BF7Apress.png
- %Application Data%\Smartbar\Common\iconsWide\0AE6BC52-0A54-4F53-9848-1FC2D4CE3D3D.png
- %Application Data%\Smartbar\Common\iconsWide\0AE6BC52-0A54-4F53-9848-1FC2D4CE3D3DHover.png
- %Application Data%\Smartbar\Common\iconsWide\0AE6BC52-0A54-4F53-9848-1FC2D4CE3D3DPress.png
- %Application Data%\Smartbar\Common\iconsWide\0DB19630-EB33-4B18-8357-78FC2687C788.png
- %Application Data%\Smartbar\Common\iconsWide\0DB19630-EB33-4B18-8357-78FC2687C788hover.png
- %Application Data%\Smartbar\Common\iconsWide\0DB19630-EB33-4B18-8357-78FC2687C788press.png
- %Application Data%\Smartbar\Common\icons\0E29BC94-7C9B-4A23-B682-81D0D1A806E1.png
- %Application Data%\Smartbar\Common\iconsWide\0E29BC94-7C9B-4A23-B682-81D0D1A806E1.png
- %Application Data%\Smartbar\Common\icons\0E29BC94-7C9B-4A23-B682-81D0D1A806E1hover.png
- %Application Data%\Smartbar\Common\iconsWide\0E29BC94-7C9B-4A23-B682-81D0D1A806E1hover.png
- %Application Data%\Smartbar\Common\icons\0E29BC94-7C9B-4A23-B682-81D0D1A806E1press.png
- %Application Data%\Smartbar\Common\iconsWide\0E29BC94-7C9B-4A23-B682-81D0D1A806E1press.png
- %Application Data%\Smartbar\Common\icons\0FA6F971-16AA-4921-A39F-543C9839CABE.png
- %Application Data%\Smartbar\Common\iconsWide\0FA6F971-16AA-4921-A39F-543C9839CABE.png
- %Application Data%\Smartbar\Common\icons\0FA6F971-16AA-4921-A39F-543C9839CABEhover.png
- %Application Data%\Smartbar\Common\iconsWide\0FA6F971-16AA-4921-A39F-543C9839CABEhover.png
- %Application Data%\Smartbar\Common\icons\0FA6F971-16AA-4921-A39F-543C9839CABEpress.png
- %Application Data%\Smartbar\Common\iconsWide\0FA6F971-16AA-4921-A39F-543C9839CABEpress.png
- %Application Data%\Smartbar\Common\icons\101FF2F5-9F51-405F-ACBB-D4A5F3601679.png
- %Application Data%\Smartbar\Common\iconsWide\101FF2F5-9F51-405F-ACBB-D4A5F3601679.png
- %Application Data%\Smartbar\Common\icons\101FF2F5-9F51-405F-ACBB-D4A5F3601679hover.png
- %Application Data%\Smartbar\Common\iconsWide\101FF2F5-9F51-405F-ACBB-D4A5F3601679hover.png
- %Application Data%\Smartbar\Common\icons\101FF2F5-9F51-405F-ACBB-D4A5F3601679press.png
- %Application Data%\Smartbar\Common\iconsWide\101FF2F5-9F51-405F-ACBB-D4A5F3601679press.png
- %Application Data%\Smartbar\Common\iconsWide\139D15A7-C5E1-4C5E-ABF2-484DBE081313.png
- %Application Data%\Smartbar\Common\iconsWide\139D15A7-C5E1-4C5E-ABF2-484DBE081313hover.png
- %Application Data%\Smartbar\Common\iconsWide\139D15A7-C5E1-4C5E-ABF2-484DBE081313press.png
- %Application Data%\Smartbar\Common\iconsWide\139D15A7-C5E1-4C5E-ABF2-484DBE08E613.png
- %Application Data%\Smartbar\Common\iconsWide\139D15A7-C5E1-4C5E-ABF2-484DBE08E613hover.png
- %Application Data%\Smartbar\Common\iconsWide\139D15A7-C5E1-4C5E-ABF2-484DBE08E613press.png
- %Application Data%\Smartbar\Common\iconsWide\139D15A7-C5E1-4C5E-ABF2-484DBE131313.png
- %Application Data%\Smartbar\Common\iconsWide\139D15A7-C5E1-4C5E-ABF2-484DBE131313hover.png
- %Application Data%\Smartbar\Common\iconsWide\139D15A7-C5E1-4C5E-ABF2-484DBE131313press.png
- %Application Data%\Smartbar\Common\icons\1A039A19-BD34-4760-8DE0-E9A8E8AA8827.png
- %Application Data%\Smartbar\Common\iconsWide\1A039A19-BD34-4760-8DE0-E9A8E8AA8827.png
- %Application Data%\Smartbar\Common\icons\1A039A19-BD34-4760-8DE0-E9A8E8AA8827Ehover.png
- %Application Data%\Smartbar\Common\iconsWide\1A039A19-BD34-4760-8DE0-E9A8E8AA8827hover.png
- %Application Data%\Smartbar\Common\icons\1A039A19-BD34-4760-8DE0-E9A8E8AA8827press.png
- %Application Data%\Smartbar\Common\iconsWide\1A039A19-BD34-4760-8DE0-E9A8E8AA8827press.png
- %Application Data%\Smartbar\Common\icons\1A19CD12-F9A2-44A6-8F44-F3A95E0081A0.png
- %Application Data%\Smartbar\Common\iconsWide\1A19CD12-F9A2-44A6-8F44-F3A95E0081A0.png
- %Application Data%\Smartbar\Common\icons\1A19CD12-F9A2-44A6-8F44-F3A95E0081A0hover.png
- %Application Data%\Smartbar\Common\iconsWide\1A19CD12-F9A2-44A6-8F44-F3A95E0081A0hover.png
- %Application Data%\Smartbar\Common\icons\1A19CD12-F9A2-44A6-8F44-F3A95E0081A0press.png
- %Application Data%\Smartbar\Common\iconsWide\1A19CD12-F9A2-44A6-8F44-F3A95E0081A0press.png
- %Application Data%\Smartbar\Common\icons\1FFDDB6E-8EB3-4CE0-9C2B-44910A3C5975.png
- %Application Data%\Smartbar\Common\iconsWide\1FFDDB6E-8EB3-4CE0-9C2B-44910A3C5975.png
- %Application Data%\Smartbar\Common\icons\1FFDDB6E-8EB3-4CE0-9C2B-44910A3C5975hover.png
- %Application Data%\Smartbar\Common\iconsWide\1FFDDB6E-8EB3-4CE0-9C2B-44910A3C5975hover.png
- %Application Data%\Smartbar\Common\icons\1FFDDB6E-8EB3-4CE0-9C2B-44910A3C5975press.png
- %Application Data%\Smartbar\Common\iconsWide\1FFDDB6E-8EB3-4CE0-9C2B-44910A3C5975press.png
- %Application Data%\Smartbar\Common\iconsWide\2141A104-423C-43EF-A27A-CA0DADB7B9BC.png
- %Application Data%\Smartbar\Common\iconsWide\2141A104-423C-43EF-A27A-CA0DADB7B9BChover.png
- %Application Data%\Smartbar\Common\iconsWide\2141A104-423C-43EF-A27A-CA0DADB7B9BCpress.png
- %Application Data%\Smartbar\Common\icons\225323D0-97BB-46E4-85E1-15EA27174BF4.png
- %Application Data%\Smartbar\Common\iconsWide\225323D0-97BB-46E4-85E1-15EA27174BF4.png
- %Application Data%\Smartbar\Common\icons\225323D0-97BB-46E4-85E1-15EA27174BF4hover.png
- %Application Data%\Smartbar\Common\iconsWide\225323D0-97BB-46E4-85E1-15EA27174BF4hover.png
- %Application Data%\Smartbar\Common\icons\225323D0-97BB-46E4-85E1-15EA27174BF4press.png
- %Application Data%\Smartbar\Common\iconsWide\225323D0-97BB-46E4-85E1-15EA27174BF4press.png
- %Application Data%\Smartbar\Common\icons\23E3FEB8-E6FF-4475-811A-805773D02D08.png
- %Application Data%\Smartbar\Common\iconsWide\23E3FEB8-E6FF-4475-811A-805773D02D08.png
- %Application Data%\Smartbar\Common\icons\23E3FEB8-E6FF-4475-811A-805773D02D08hover.png
- %Application Data%\Smartbar\Common\iconsWide\23E3FEB8-E6FF-4475-811A-805773D02D08hover.png
- %Application Data%\Smartbar\Common\icons\23E3FEB8-E6FF-4475-811A-805773D02D08press.png
- %Application Data%\Smartbar\Common\iconsWide\23E3FEB8-E6FF-4475-811A-805773D02D08press.png
- %Application Data%\Smartbar\Common\icons\26E2804B-65B5-47E1-A457-DAA75A2B1370.png
- %Application Data%\Smartbar\Common\iconsWide\26E2804B-65B5-47E1-A457-DAA75A2B1370.png
- %Application Data%\Smartbar\Common\icons\26E2804B-65B5-47E1-A457-DAA75A2B1370hover.png
- %Application Data%\Smartbar\Common\iconsWide\26E2804B-65B5-47E1-A457-DAA75A2B1370hover.png
- %Application Data%\Smartbar\Common\icons\26E2804B-65B5-47E1-A457-DAA75A2B1370press.png
- %Application Data%\Smartbar\Common\iconsWide\26E2804B-65B5-47E1-A457-DAA75A2B1370press.png
- %Application Data%\Smartbar\Common\iconsWide\28E2C7BC-F857-44D5-A42F-7DD66FAB5EE6.png
- %Application Data%\Smartbar\Common\iconsWide\28E2C7BC-F857-44D5-A42F-7DD66FAB5EE6hover.png
- %Application Data%\Smartbar\Common\iconsWide\28E2C7BC-F857-44D5-A42F-7DD66FAB5EE6press.png
- %Application Data%\Smartbar\Common\icons\2C37338C-837B-4846-B50B-E32D70C6A0F5.png
- %Application Data%\Smartbar\Common\iconsWide\2C37338C-837B-4846-B50B-E32D70C6A0F5.png
- %Application Data%\Smartbar\Common\icons\2C37338C-837B-4846-B50B-E32D70C6A0F5hover.png
- %Application Data%\Smartbar\Common\iconsWide\2C37338C-837B-4846-B50B-E32D70C6A0F5hover.png
- %Application Data%\Smartbar\Common\icons\2C37338C-837B-4846-B50B-E32D70C6A0F5press.png
- %Application Data%\Smartbar\Common\iconsWide\2C37338C-837B-4846-B50B-E32D70C6A0F5press.png
- %Application Data%\Smartbar\Common\icons\30657846-199A-4D0D-984D-BE588084F1F6.png
- %Application Data%\Smartbar\Common\iconsWide\30657846-199A-4D0D-984D-BE588084F1F6.png
- %Application Data%\Smartbar\Common\icons\30657846-199A-4D0D-984D-BE588084F1F6hover.png
- %Application Data%\Smartbar\Common\iconsWide\30657846-199A-4D0D-984D-BE588084F1F6hover.png
- %Application Data%\Smartbar\Common\icons\30657846-199A-4D0D-984D-BE588084F1F6press.png
- %Application Data%\Smartbar\Common\iconsWide\30657846-199A-4D0D-984D-BE588084F1F6press.png
- %Application Data%\Smartbar\Common\iconsWide\30DEBC8A-1CC6-4480-B3E5-C55E214043A8.png
- %Application Data%\Smartbar\Common\iconsWide\30DEBC8A-1CC6-4480-B3E5-C55E214043A8Hover.png
- %Application Data%\Smartbar\Common\iconsWide\30DEBC8A-1CC6-4480-B3E5-C55E214043A8Press.png
- %Application Data%\Smartbar\Common\icons\30DFF8F0-BA79-4360-A3EA-51B6D006133C.png
- %Application Data%\Smartbar\Common\iconsWide\30DFF8F0-BA79-4360-A3EA-51B6D006133C.png
- %Application Data%\Smartbar\Common\icons\30DFF8F0-BA79-4360-A3EA-51B6D006133CHover.png
- %Application Data%\Smartbar\Common\iconsWide\30DFF8F0-BA79-4360-A3EA-51B6D006133CHover.png
- %Application Data%\Smartbar\Common\icons\30DFF8F0-BA79-4360-A3EA-51B6D006133CPress.png
- %Application Data%\Smartbar\Common\iconsWide\30DFF8F0-BA79-4360-A3EA-51B6D006133CPress.png
- %Application Data%\Smartbar\Common\icons\328F7722-52E8-46A6-9197-B2F27C5142C7.png
- %Application Data%\Smartbar\Common\iconsWide\328F7722-52E8-46A6-9197-B2F27C5142C7.png
- %Application Data%\Smartbar\Common\icons\328F7722-52E8-46A6-9197-B2F27C5142C7hover.png
- %Application Data%\Smartbar\Common\iconsWide\328F7722-52E8-46A6-9197-B2F27C5142C7hover.png
- %Application Data%\Smartbar\Common\icons\328F7722-52E8-46A6-9197-B2F27C5142C7press.png
- %Application Data%\Smartbar\Common\iconsWide\328F7722-52E8-46A6-9197-B2F27C5142C7press.png
- %Application Data%\Smartbar\Common\icons\372FF78B-6E4B-4B38-8E3F-797B4680FB98.png
- %Application Data%\Smartbar\Common\iconsWide\372FF78B-6E4B-4B38-8E3F-797B4680FB98.png
- %Application Data%\Smartbar\Common\icons\372FF78B-6E4B-4B38-8E3F-797B4680FB98hover.png
- %Application Data%\Smartbar\Common\iconsWide\372FF78B-6E4B-4B38-8E3F-797B4680FB98hover.png
- %Application Data%\Smartbar\Common\icons\372FF78B-6E4B-4B38-8E3F-797B4680FB98press.png
- %Application Data%\Smartbar\Common\iconsWide\372FF78B-6E4B-4B38-8E3F-797B4680FB98press.png
- %Application Data%\Smartbar\Common\icons\39028511-3F15-4442-9188-DDC86BE1BBD0.png
- %Application Data%\Smartbar\Common\iconsWide\39028511-3F15-4442-9188-DDC86BE1BBD0.png
- %Application Data%\Smartbar\Common\icons\39028511-3F15-4442-9188-DDC86BE1BBD0hover.png
- %Application Data%\Smartbar\Common\iconsWide\39028511-3F15-4442-9188-DDC86BE1BBD0hover.png
- %Application Data%\Smartbar\Common\icons\39028511-3F15-4442-9188-DDC86BE1BBD0press.png
- %Application Data%\Smartbar\Common\iconsWide\39028511-3F15-4442-9188-DDC86BE1BBD0press.png
- %Application Data%\Smartbar\Common\icons\39079B96-6DD1-42DE-89E6-76F79C8BB4E4.png
- %Application Data%\Smartbar\Common\iconsWide\39079B96-6DD1-42DE-89E6-76F79C8BB4E4.png
- %Application Data%\Smartbar\Common\icons\39079B96-6DD1-42DE-89E6-76F79C8BB4E4Hover.png
- %Application Data%\Smartbar\Common\iconsWide\39079B96-6DD1-42DE-89E6-76F79C8BB4E4Hover.png
- %Application Data%\Smartbar\Common\icons\39079B96-6DD1-42DE-89E6-76F79C8BB4E4Press.png
- %Application Data%\Smartbar\Common\iconsWide\39079B96-6DD1-42DE-89E6-76F79C8BB4E4Press.png
- %Application Data%\Smartbar\Common\icons\3C610B86-19DE-4757-B46A-871C9C27FF0A.png
- %Application Data%\Smartbar\Common\iconsWide\3C610B86-19DE-4757-B46A-871C9C27FF0A.png
- %Application Data%\Smartbar\Common\icons\3C610B86-19DE-4757-B46A-871C9C27FF0AHover.png
- %Application Data%\Smartbar\Common\iconsWide\3C610B86-19DE-4757-B46A-871C9C27FF0AHover.png
- %Application Data%\Smartbar\Common\icons\3C610B86-19DE-4757-B46A-871C9C27FF0APress.png
- %Application Data%\Smartbar\Common\iconsWide\3C610B86-19DE-4757-B46A-871C9C27FF0APress.png
- %Application Data%\Smartbar\Common\iconsWide\3f9ac55c-6db5-4c01-9d34-a92da2347be6.ico
- %Application Data%\Smartbar\Common\icons\3f9ac55c-6db5-4c01-9d34-a92da2347be6.png
- %Application Data%\Smartbar\Common\iconsWide\3f9ac55c-6db5-4c01-9d34-a92da2347be6.png
- %Application Data%\Smartbar\Common\icons\3f9ac55c-6db5-4c01-9d34-a92da2347be6hover.png
- %Application Data%\Smartbar\Common\iconsWide\3f9ac55c-6db5-4c01-9d34-a92da2347be6hover.png
- %Application Data%\Smartbar\Common\icons\3f9ac55c-6db5-4c01-9d34-a92da2347be6press.png
- %Application Data%\Smartbar\Common\iconsWide\3f9ac55c-6db5-4c01-9d34-a92da2347be6press.png
- %Application Data%\Smartbar\Common\icons\412D5531-A3E1-40BB-B0C3-71E3C45A4E13.png
- %Application Data%\Smartbar\Common\iconsWide\412D5531-A3E1-40BB-B0C3-71E3C45A4E13.png
- %Application Data%\Smartbar\Common\icons\412D5531-A3E1-40BB-B0C3-71E3C45A4E13hover.png
- %Application Data%\Smartbar\Common\iconsWide\412D5531-A3E1-40BB-B0C3-71E3C45A4E13hover.png
- %Application Data%\Smartbar\Common\icons\412D5531-A3E1-40BB-B0C3-71E3C45A4E13press.png
- %Application Data%\Smartbar\Common\iconsWide\412D5531-A3E1-40BB-B0C3-71E3C45A4E13press.png
- %Application Data%\Smartbar\Common\iconsWide\48A9C19C-5A4C-4652-A6E7-1C17AEE45675.png
- %Application Data%\Smartbar\Common\iconsWide\48A9C19C-5A4C-4652-A6E7-1C17AEE45675Hover.png
- %Application Data%\Smartbar\Common\iconsWide\48A9C19C-5A4C-4652-A6E7-1C17AEE45675Press.png
- %Application Data%\Smartbar\Common\iconsWide\4a110a71-0e7e-4552-af6e-3ef88b2d6511.ico
- %Application Data%\Smartbar\Common\icons\4a110a71-0e7e-4552-af6e-3ef88b2d6511.png
- %Application Data%\Smartbar\Common\iconsWide\4a110a71-0e7e-4552-af6e-3ef88b2d6511.png
- %Application Data%\Smartbar\Common\icons\4a110a71-0e7e-4552-af6e-3ef88b2d6511Hover.png
- %Application Data%\Smartbar\Common\iconsWide\4a110a71-0e7e-4552-af6e-3ef88b2d6511Hover.png
- %Application Data%\Smartbar\Common\icons\4a110a71-0e7e-4552-af6e-3ef88b2d6511Press.png
- %Application Data%\Smartbar\Common\iconsWide\4a110a71-0e7e-4552-af6e-3ef88b2d6511Press.png
- %Application Data%\Smartbar\Common\iconsWide\511B6809-2468-4A36-A6FC-FC24F05499BE.png
- %Application Data%\Smartbar\Common\iconsWide\511B6809-2468-4A36-A6FC-FC24F05499BEHover.png
- %Application Data%\Smartbar\Common\iconsWide\511B6809-2468-4A36-A6FC-FC24F05499BEPress.png
- %Application Data%\Smartbar\Common\iconsWide\5252af60-ef03-41a8-babe-415dba235478.ico
- %Application Data%\Smartbar\Common\icons\5252af60-ef03-41a8-babe-415dba235478.png
- %Application Data%\Smartbar\Common\iconsWide\5252af60-ef03-41a8-babe-415dba235478.png
- %Application Data%\Smartbar\Common\icons\5252af60-ef03-41a8-babe-415dba235478Hover.png
- %Application Data%\Smartbar\Common\iconsWide\5252af60-ef03-41a8-babe-415dba235478Hover.png
- %Application Data%\Smartbar\Common\icons\5252af60-ef03-41a8-babe-415dba235478Press.png
- %Application Data%\Smartbar\Common\iconsWide\5252af60-ef03-41a8-babe-415dba235478Press.png
- %Application Data%\Smartbar\Common\iconsWide\536b9063-fc09-4e82-8769-73c77317aae6.ico
- %Application Data%\Smartbar\Common\icons\536b9063-fc09-4e82-8769-73c77317aae6.png
- %Application Data%\Smartbar\Common\iconsWide\536b9063-fc09-4e82-8769-73c77317aae6.png
- %Application Data%\Smartbar\Common\icons\536b9063-fc09-4e82-8769-73c77317aae6hover.png
- %Application Data%\Smartbar\Common\iconsWide\536b9063-fc09-4e82-8769-73c77317aae6hover.png
- %Application Data%\Smartbar\Common\icons\536b9063-fc09-4e82-8769-73c77317aae6press.png
- %Application Data%\Smartbar\Common\iconsWide\536b9063-fc09-4e82-8769-73c77317aae6press.png
- %Application Data%\Smartbar\Common\iconsWide\5558C4C6-18C1-4AF3-8F8D-0E2CF70D19C8.png
- %Application Data%\Smartbar\Common\icons\5558C4C6-18C1-4AF3-8F8D-0E2CF70D19C8.png
- %Application Data%\Smartbar\Common\iconsWide\5558C4C6-18C1-4AF3-8F8D-0E2CF70D19C8hover.png
- %Application Data%\Smartbar\Common\icons\5558C4C6-18C1-4AF3-8F8D-0E2CF70D19C8hover.png
- %Application Data%\Smartbar\Common\icons\5558C4C6-18C1-4AF3-8F8D-0E2CF70D19C8press.png
- %Application Data%\Smartbar\Common\iconsWide\5558C4C6-18C1-4AF3-8F8D-0E2CF70D19C8press.png
- %Application Data%\Smartbar\Common\icons\56591C8E-DA35-4A97-AC9B-5055E0F7089E.png
- %Application Data%\Smartbar\Common\iconsWide\56591C8E-DA35-4A97-AC9B-5055E0F7089E.png
- %Application Data%\Smartbar\Common\icons\56591C8E-DA35-4A97-AC9B-5055E0F7089Ehover.png
- %Application Data%\Smartbar\Common\iconsWide\56591C8E-DA35-4A97-AC9B-5055E0F7089Ehover.png
- %Application Data%\Smartbar\Common\icons\56591C8E-DA35-4A97-AC9B-5055E0F7089Epress.png
- %Application Data%\Smartbar\Common\iconsWide\56591C8E-DA35-4A97-AC9B-5055E0F7089Epress.png
- %Application Data%\Smartbar\Common\icons\56B19DA1-B4C5-4FCF-87D0-44E8B2C1002A.png
- %Application Data%\Smartbar\Common\iconsWide\56B19DA1-B4C5-4FCF-87D0-44E8B2C1002A.png
- %Application Data%\Smartbar\Common\icons\56B19DA1-B4C5-4FCF-87D0-44E8B2C1002Ahover.png
- %Application Data%\Smartbar\Common\iconsWide\56B19DA1-B4C5-4FCF-87D0-44E8B2C1002Ahover.png
- %Application Data%\Smartbar\Common\icons\56B19DA1-B4C5-4FCF-87D0-44E8B2C1002Apress.png
- %Application Data%\Smartbar\Common\iconsWide\56B19DA1-B4C5-4FCF-87D0-44E8B2C1002Apress.png
- %Application Data%\Smartbar\Common\icons\5D0A6D97-85F2-47E9-8F04-04A747B25A0E.png
- %Application Data%\Smartbar\Common\iconsWide\5D0A6D97-85F2-47E9-8F04-04A747B25A0E.png
- %Application Data%\Smartbar\Common\icons\5D0A6D97-85F2-47E9-8F04-04A747B25A0Ehover.png
- %Application Data%\Smartbar\Common\iconsWide\5D0A6D97-85F2-47E9-8F04-04A747B25A0Ehover.png
- %Application Data%\Smartbar\Common\icons\5D0A6D97-85F2-47E9-8F04-04A747B25A0Epress.png
- %Application Data%\Smartbar\Common\iconsWide\5D0A6D97-85F2-47E9-8F04-04A747B25A0Epress.png
- %Application Data%\Smartbar\Common\iconsWide\5F1B269B-7C66-474F-A473-BE7FA51BE5B2.png
- %Application Data%\Smartbar\Common\iconsWide\5F1B269B-7C66-474F-A473-BE7FA51BE5B2hover.png
- %Application Data%\Smartbar\Common\iconsWide\5F1B269B-7C66-474F-A473-BE7FA51BE5B2press.png
- %Application Data%\Smartbar\Common\icons\5F488FA5-C35B-44A9-A0E4-2C7B41035780.png
- %Application Data%\Smartbar\Common\iconsWide\5F488FA5-C35B-44A9-A0E4-2C7B41035780.png
- %Application Data%\Smartbar\Common\icons\5F488FA5-C35B-44A9-A0E4-2C7B41035780hover.png
- %Application Data%\Smartbar\Common\iconsWide\5F488FA5-C35B-44A9-A0E4-2C7B41035780hover.png
- %Application Data%\Smartbar\Common\icons\5F488FA5-C35B-44A9-A0E4-2C7B41035780press.png
- %Application Data%\Smartbar\Common\iconsWide\5F488FA5-C35B-44A9-A0E4-2C7B41035780press.png
- %Application Data%\Smartbar\Common\icons\65B1A402-FC79-410D-AE1C-AF92E206AC1D.png
- %Application Data%\Smartbar\Common\iconsWide\65B1A402-FC79-410D-AE1C-AF92E206AC1D.png
- %Application Data%\Smartbar\Common\icons\65B1A402-FC79-410D-AE1C-AF92E206AC1Dhover.png
- %Application Data%\Smartbar\Common\iconsWide\65B1A402-FC79-410D-AE1C-AF92E206AC1Dhover.png
- %Application Data%\Smartbar\Common\icons\65B1A402-FC79-410D-AE1C-AF92E206AC1Dpress.png
- %Application Data%\Smartbar\Common\iconsWide\65B1A402-FC79-410D-AE1C-AF92E206AC1Dpress.png
- %Application Data%\Smartbar\Common\icons\69C7DFE3-CDAE-4A22-B753-93ABF8BAE7EC.png
- %Application Data%\Smartbar\Common\iconsWide\69C7DFE3-CDAE-4A22-B753-93ABF8BAE7EC.png
- %Application Data%\Smartbar\Common\icons\69C7DFE3-CDAE-4A22-B753-93ABF8BAE7EChover.png
- %Application Data%\Smartbar\Common\iconsWide\69C7DFE3-CDAE-4A22-B753-93ABF8BAE7EChover.png
- %Application Data%\Smartbar\Common\icons\69C7DFE3-CDAE-4A22-B753-93ABF8BAE7ECpress.png
- %Application Data%\Smartbar\Common\iconsWide\69C7DFE3-CDAE-4A22-B753-93ABF8BAE7ECpress.png
- %Application Data%\Smartbar\Common\iconsWide\708d8b1e-6545-474a-9f07-d854acf8ad43.ico
- %Application Data%\Smartbar\Common\icons\708d8b1e-6545-474a-9f07-d854acf8ad43.png
- %Application Data%\Smartbar\Common\iconsWide\708d8b1e-6545-474a-9f07-d854acf8ad43.png
- %Application Data%\Smartbar\Common\icons\708d8b1e-6545-474a-9f07-d854acf8ad43hover.png
- %Application Data%\Smartbar\Common\iconsWide\708d8b1e-6545-474a-9f07-d854acf8ad43hover.png
- %Application Data%\Smartbar\Common\icons\708d8b1e-6545-474a-9f07-d854acf8ad43press.png
- %Application Data%\Smartbar\Common\iconsWide\708d8b1e-6545-474a-9f07-d854acf8ad43press.png
- %Application Data%\Smartbar\Common\icons\70F16DCA-C71C-4ECB-994C-D180F2BBF736.png
- %Application Data%\Smartbar\Common\iconsWide\70F16DCA-C71C-4ECB-994C-D180F2BBF736.png
- %Application Data%\Smartbar\Common\icons\70F16DCA-C71C-4ECB-994C-D180F2BBF736Hover.png
- %Application Data%\Smartbar\Common\iconsWide\70F16DCA-C71C-4ECB-994C-D180F2BBF736Hover.png
- %Application Data%\Smartbar\Common\icons\70F16DCA-C71C-4ECB-994C-D180F2BBF736Press.png
- %Application Data%\Smartbar\Common\iconsWide\70F16DCA-C71C-4ECB-994C-D180F2BBF736Press.png
- %Application Data%\Smartbar\Common\icons\72CDFC8C-6F2D-4df8-9811-18C4D682C406.png
- %Application Data%\Smartbar\Common\iconsWide\72CDFC8C-6F2D-4df8-9811-18C4D682C406.png
- %Application Data%\Smartbar\Common\icons\72CDFC8C-6F2D-4df8-9811-18C4D682C406hover.png
- %Application Data%\Smartbar\Common\iconsWide\72CDFC8C-6F2D-4df8-9811-18C4D682C406hover.png
- %Application Data%\Smartbar\Common\icons\72CDFC8C-6F2D-4df8-9811-18C4D682C406press.png
- %Application Data%\Smartbar\Common\iconsWide\72CDFC8C-6F2D-4df8-9811-18C4D682C406press.png
- %Application Data%\Smartbar\Common\icons\7CF3BACC-BF1C-4860-BB4E-F1A8440250FE.png
- %Application Data%\Smartbar\Common\iconsWide\7CF3BACC-BF1C-4860-BB4E-F1A8440250FE.png
- %Application Data%\Smartbar\Common\icons\7CF3BACC-BF1C-4860-BB4E-F1A8440250FEhover.png
- %Application Data%\Smartbar\Common\iconsWide\7CF3BACC-BF1C-4860-BB4E-F1A8440250FEhover.png
- %Application Data%\Smartbar\Common\icons\7CF3BACC-BF1C-4860-BB4E-F1A8440250FEpress.png
- %Application Data%\Smartbar\Common\iconsWide\7CF3BACC-BF1C-4860-BB4E-F1A8440250FEpress.png
- %Application Data%\Smartbar\Common\iconsWide\7fe83ae9-caef-41f0-aa99-d114c0ce3941.ico
- %Application Data%\Smartbar\Common\icons\7fe83ae9-caef-41f0-aa99-d114c0ce3941.png
- %Application Data%\Smartbar\Common\iconsWide\7fe83ae9-caef-41f0-aa99-d114c0ce3941.png
- %Application Data%\Smartbar\Common\icons\7fe83ae9-caef-41f0-aa99-d114c0ce3941hover.png
- %Application Data%\Smartbar\Common\iconsWide\7fe83ae9-caef-41f0-aa99-d114c0ce3941hover.png
- %Application Data%\Smartbar\Common\icons\7fe83ae9-caef-41f0-aa99-d114c0ce3941press.png
- %Application Data%\Smartbar\Common\iconsWide\7fe83ae9-caef-41f0-aa99-d114c0ce3941press.png
- %Application Data%\Smartbar\Common\iconsWide\8217d395-9ebe-4ebb-807c-38cc911a307f.ico
- %Application Data%\Smartbar\Common\icons\8217d395-9ebe-4ebb-807c-38cc911a307f.png
- %Application Data%\Smartbar\Common\iconsWide\8217d395-9ebe-4ebb-807c-38cc911a307f.png
- %Application Data%\Smartbar\Common\icons\8217d395-9ebe-4ebb-807c-38cc911a307fHover.png
- %Application Data%\Smartbar\Common\iconsWide\8217d395-9ebe-4ebb-807c-38cc911a307fHover.png
- %Application Data%\Smartbar\Common\icons\8217d395-9ebe-4ebb-807c-38cc911a307fPress.png
- %Application Data%\Smartbar\Common\iconsWide\8217d395-9ebe-4ebb-807c-38cc911a307fPress.png
- %Application Data%\Smartbar\Common\icons\83B4B6FE-910D-412E-BED4-E3AFA6E5CA61.png
- %Application Data%\Smartbar\Common\iconsWide\83B4B6FE-910D-412E-BED4-E3AFA6E5CA61.png
- %Application Data%\Smartbar\Common\icons\83B4B6FE-910D-412E-BED4-E3AFA6E5CA61hover.png
- %Application Data%\Smartbar\Common\iconsWide\83B4B6FE-910D-412E-BED4-E3AFA6E5CA61hover.png
- %Application Data%\Smartbar\Common\icons\83B4B6FE-910D-412E-BED4-E3AFA6E5CA61press.png
- %Application Data%\Smartbar\Common\iconsWide\83B4B6FE-910D-412E-BED4-E3AFA6E5CA61press.png
- %Application Data%\Smartbar\Common\icons\85CF6427-8441-427A-859A-7A3C72288481.png
- %Application Data%\Smartbar\Common\iconsWide\85CF6427-8441-427A-859A-7A3C72288481.png
- %Application Data%\Smartbar\Common\icons\85CF6427-8441-427A-859A-7A3C72288481hover.png
- %Application Data%\Smartbar\Common\iconsWide\85CF6427-8441-427A-859A-7A3C72288481hover.png
- %Application Data%\Smartbar\Common\icons\85CF6427-8441-427A-859A-7A3C72288481press.png
- %Application Data%\Smartbar\Common\iconsWide\85CF6427-8441-427A-859A-7A3C72288481press.png
- %Application Data%\Smartbar\Common\icons\87442BEF-FD31-405C-A807-650CB7CC8886.png
- %Application Data%\Smartbar\Common\iconsWide\87442BEF-FD31-405C-A807-650CB7CC8886.png
- %Application Data%\Smartbar\Common\icons\87442BEF-FD31-405C-A807-650CB7CC8886hover.png
- %Application Data%\Smartbar\Common\iconsWide\87442BEF-FD31-405C-A807-650CB7CC8886hover.png
- %Application Data%\Smartbar\Common\icons\87442BEF-FD31-405C-A807-650CB7CC8886press.png
- %Application Data%\Smartbar\Common\iconsWide\87442BEF-FD31-405C-A807-650CB7CC8886press.png
- %Application Data%\Smartbar\Common\iconsWide\89582936-094c-4880-b87a-2af16fc31313.png
- %Application Data%\Smartbar\Common\iconsWide\89582936-094c-4880-b87a-2af16fc31313Hover.png
- %Application Data%\Smartbar\Common\iconsWide\89582936-094c-4880-b87a-2af16fc31313Press.png
- %Application Data%\Smartbar\Common\icons\89582936-094C-4880-B87A-2AF16FC33B2C.png
- %Application Data%\Smartbar\Common\iconsWide\89582936-094C-4880-B87A-2AF16FC33B2C.png
- %Application Data%\Smartbar\Common\icons\89582936-094C-4880-B87A-2AF16FC33B2Chover.png
- %Application Data%\Smartbar\Common\iconsWide\89582936-094C-4880-B87A-2AF16FC33B2Chover.png
- %Application Data%\Smartbar\Common\icons\89582936-094C-4880-B87A-2AF16FC33B2Cpress.png
- %Application Data%\Smartbar\Common\iconsWide\89582936-094C-4880-B87A-2AF16FC33B2Cpress.png
- %Application Data%\Smartbar\Common\icons\8b3608b1-c2d5-4ad3-a382-33601228c6d3.png
- %Application Data%\Smartbar\Common\iconsWide\8b3608b1-c2d5-4ad3-a382-33601228c6d3.png
- %Application Data%\Smartbar\Common\icons\8b3608b1-c2d5-4ad3-a382-33601228c6d3hover.png
- %Application Data%\Smartbar\Common\iconsWide\8b3608b1-c2d5-4ad3-a382-33601228c6d3hover.png
- %Application Data%\Smartbar\Common\icons\8b3608b1-c2d5-4ad3-a382-33601228c6d3press.png
- %Application Data%\Smartbar\Common\iconsWide\8b3608b1-c2d5-4ad3-a382-33601228c6d3press.png
- %Application Data%\Smartbar\Common\iconsWide\8D338D8F-3189-41AB-BCFF-2958D48AAA6A.png
- %Application Data%\Smartbar\Common\iconsWide\8D338D8F-3189-41AB-BCFF-2958D48AAA6AHover.png
- %Application Data%\Smartbar\Common\iconsWide\8D338D8F-3189-41AB-BCFF-2958D48AAA6APress.png
- %Application Data%\Smartbar\Common\icons\8F4131CE-D4F0-4F08-9102-78C397F3748C.png
- %Application Data%\Smartbar\Common\iconsWide\8F4131CE-D4F0-4F08-9102-78C397F3748C.png
- %Application Data%\Smartbar\Common\icons\8F4131CE-D4F0-4F08-9102-78C397F3748CHover.png
- %Application Data%\Smartbar\Common\iconsWide\8F4131CE-D4F0-4F08-9102-78C397F3748CHover.png
- %Application Data%\Smartbar\Common\icons\8F4131CE-D4F0-4F08-9102-78C397F3748CPress.png
- %Application Data%\Smartbar\Common\iconsWide\8F4131CE-D4F0-4F08-9102-78C397F3748CPress.png
- %Application Data%\Smartbar\Common\iconsWide\90165d32-a3ef-438c-8625-be9b538b6eba.ico
- %Application Data%\Smartbar\Common\icons\90165d32-a3ef-438c-8625-be9b538b6eba.png
- %Application Data%\Smartbar\Common\iconsWide\90165d32-a3ef-438c-8625-be9b538b6eba.png
- %Application Data%\Smartbar\Common\icons\90165d32-a3ef-438c-8625-be9b538b6ebaHover.png
- %Application Data%\Smartbar\Common\iconsWide\90165d32-a3ef-438c-8625-be9b538b6ebaHover.png
- %Application Data%\Smartbar\Common\icons\90165d32-a3ef-438c-8625-be9b538b6ebaPress.png
- %Application Data%\Smartbar\Common\iconsWide\90165d32-a3ef-438c-8625-be9b538b6ebaPress.png
- %Application Data%\Smartbar\Common\icons\925D8F0E-E5EA-45F9-A657-0C14B68C4A61.png
- %Application Data%\Smartbar\Common\iconsWide\925D8F0E-E5EA-45F9-A657-0C14B68C4A61.png
- %Application Data%\Smartbar\Common\icons\925D8F0E-E5EA-45F9-A657-0C14B68C4A61hover.png
- %Application Data%\Smartbar\Common\iconsWide\925D8F0E-E5EA-45F9-A657-0C14B68C4A61hover.png
- %User Temp%\ual4en1_.tmp
- %User Temp%\ual4en1_.0.cs
- %User Temp%\ual4en1_.dll
- %User Temp%\ual4en1_.cmdline
- %User Temp%\ual4en1_.out
- %User Temp%\ual4en1_.err
- %User Profile%\MetaData\A44F4E7CB3133FF765C39A53AD8FCFDD
- %User Profile%\Content\A44F4E7CB3133FF765C39A53AD8FCFDD
- %User Temp%\yfobqe29.tmp
- %User Temp%\yfobqe29.0.cs
- %User Temp%\yfobqe29.dll
- %User Temp%\yfobqe29.cmdline
- %User Temp%\yfobqe29.out
- %User Temp%\yfobqe29.err
- %Windows%\Microsoft.NET\Framework\v2.0.50727\config\security.config.cch.new
- %User Profile%\v2.0.50727.42\security.config.cch.new
- %Windows%\Microsoft.NET\Framework\v2.0.50727\config\enterprisesec.config.cch.new
- %User Temp%\CSC58.tmp
- %User Temp%\RES5B.tmp
- %User Temp%\CSC67.tmp
- %User Temp%\RES6A.tmp
(Note: %User Profile% is the current user's profile folder, which is usually C:\Documents and Settings\{user name} on Windows 2000, XP, and Server 2003, or C:\Users\{user name} on Windows Vista and 7.. %User Temp% is the user's temporary folder, where it usually is C:\Documents and Settings\{user name}\Local Settings\Temp on Windows 2000, Windows Server 2003, and Windows XP (32- and 64-bit); C:\Users\{user name}\AppData\Local\Temp on Windows Vista (32- and 64-bit), Windows 7 (32- and 64-bit), Windows 8 (32- and 64-bit), Windows 8.1 (32- and 64-bit), Windows Server 2008, and Windows Server 2012.. %Windows% is the Windows folder, where it usually is C:\Windows on all Windows operating system versions.. %System Root% is the Windows root folder, where it usually is C:\ on all Windows operating system versions.. %Application Data% is the Application Data folder, where it usually is C:\Documents and Settings\{user name}\Application Data on Windows 2000, Windows Server 2003, and Windows XP (32- and 64-bit); C:\Users\{user name}\AppData\Roaming on Windows Vista (32- and 64-bit), Windows 7 (32- and 64-bit), Windows 8 (32- and 64-bit), Windows 8.1 (32- and 64-bit), Windows Server 2008, and Windows Server 2012.)
Other Details
This adware connects to the following possibly malicious URL:
- {BLOCKED}97.232
- {BLOCKED}165.163
- {BLOCKED}32.169
- {BLOCKED}33.124
- {BLOCKED}29.204
This report is generated via an automated analysis system.
SOLUTION
9.700
Step 1
Before doing any scans, Windows XP, Windows Vista, and Windows 7 users must disable System Restore to allow full scanning of their computers.
Step 2
Delete this registry key
Important: Editing the Windows Registry incorrectly can lead to irreversible system malfunction. Please do this step only if you know how or you can ask assistance from your system administrator. Else, check this Microsoft article first before modifying your computer's registry.
- In hkey_local_machine\software\microsoft\esent\process
- {malware file name}
- In hkey_local_machine\software\microsoft\esent\process\{malware file name}
- debug
- In HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Installer
- InProgress
- In HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Installer\Rollback
- Scripts
- In HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-21-1645522239-1292428093-682003330-1003\Components
- 216A7206F164D5243BE66288984CD4AC
- In HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-21-1645522239-1292428093-682003330-1003\Components
- 3152E1F19977892449DC968802CE8964
- In HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components
- 3152E1F19977892449DC968802CE8964
- In HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-21-1645522239-1292428093-682003330-1003\Components
- 272DC7B48E479E54DAA0FE4489E6092F
- In HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-21-1645522239-1292428093-682003330-1003\Components
- D80C1A41B9116A14D9F9ABA4F127B468
- In HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-21-1645522239-1292428093-682003330-1003\Components
- C3B675CC98F2B464B802D5E2C6BF6895
- In HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-21-1645522239-1292428093-682003330-1003\Components
- 9DDEC1131A9FA2348B0A0AEB73D68A82
- In HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-21-1645522239-1292428093-682003330-1003\Components
- 9DDEC1131A9FA2348B0A0AEB73D68A18
- In HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-21-1645522239-1292428093-682003330-1003\Components
- C4FE6082BC8553B4B91EC0FE408D71DA
- In HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-21-1645522239-1292428093-682003330-1003\Components
- 93D6CC2FC9612424E87EB7375E2FC46C
- In HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-21-1645522239-1292428093-682003330-1003\Components
- 0B61AA2BED003754EB929BEF1B2E8A42
- In HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-21-1645522239-1292428093-682003330-1003\Components
- 2E35213FD461DD045869F4E01B62B2BE
- In HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-21-1645522239-1292428093-682003330-1003\Components
- BBB8D37874E1A0946834CDB33A9FC4CD
- In HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-21-1645522239-1292428093-682003330-1003\Components
- BBB8D37874E1A0946834CDB34A9FC4CD
- In HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-21-1645522239-1292428093-682003330-1003\Components
- 40623894481B5D040B0F8C26B6D7A878
- In HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-21-1645522239-1292428093-682003330-1003\Components
- 0B51AA2BED003754EB928BEF1B2E8A42
- In HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-21-1645522239-1292428093-682003330-1003\Components
- 55D0E21DCD38B8E40BA0517C0D9CCCE0
- In HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-21-1645522239-1292428093-682003330-1003\Components
- A9AB3AEAE939E984293B9178134BD540
- In HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-21-1645522239-1292428093-682003330-1003\Components
- A143CF598A8430D4BB0E71700E8C09C5
- In HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-21-1645522239-1292428093-682003330-1003\Components
- D40B7F324393F624DACA80C397004DA1
- In HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-21-1645522239-1292428093-682003330-1003\Components
- DF0B7F324F93FE24DBCA80C397004DF2
- In HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-21-1645522239-1292428093-682003330-1003\Components
- 4CD231EF64D076744824027B43D7B1AD
- In HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-21-1645522239-1292428093-682003330-1003\Components
- 649A52D257CA5DB4EAAE8BA9EB23E467
- In HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components
- 649A52D257CA5DB4EAAE8BA9EB23E467
- In HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-21-1645522239-1292428093-682003330-1003\Components
- 33592FD0CF5A7AA4A8F106EB69B9A0D7
- In HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-21-1645522239-1292428093-682003330-1003\Components
- E5ADE64D843807D4997A4AFC96B78EF1
- In HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-21-1645522239-1292428093-682003330-1003\Components
- 0B6A7206F164D5243BE662E09C4CD4AC
- In HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-21-1645522239-1292428093-682003330-1003\Components
- 016A7206F164D5243BE662E09C4CD4AC
- In HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-21-1645522239-1292428093-682003330-1003\Components
- 116A7206F164D5243BE662E09C4CD4AC
- In HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-21-1645522239-1292428093-682003330-1003\Components
- 216A7206F164D5243BE662E09C4CD4AC
- In HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-21-1645522239-1292428093-682003330-1003\Components
- E5ADE64D843807D4997A4AFC96B78EF2
- In HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-21-1645522239-1292428093-682003330-1003\Components
- E5ADE64D843807D4997A4AFC96B78EF3
- In HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-21-1645522239-1292428093-682003330-1003\Components
- E5ADE64D843807D4997A4AFC96B78EF4
- In HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-21-1645522239-1292428093-682003330-1003\Components
- E5ADE64D843807D4997A4AFC96B78EF5
- In HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-21-1645522239-1292428093-682003330-1003\Components
- 016A7206F164D5243BE66200904CD4AC
- In HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-21-1645522239-1292428093-682003330-1003\Components
- 43F238B8E12237E46A4AFF0CB31E2ECC
- In HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-21-1645522239-1292428093-682003330-1003\Components
- BBB8D37874E1A0946834CDB33A9FC4C5
- In HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-21-1645522239-1292428093-682003330-1003\Components
- 32123894481B5D040B0F8C26B6D7A878
- In HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-21-1645522239-1292428093-682003330-1003\Components
- 0B51A54BED003754EB928BEF1B2E8A42
- In HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-21-1645522239-1292428093-682003330-1003\Components
- E13864C95DCE91247A4435FFDA762754
- In HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-21-1645522239-1292428093-682003330-1003\Components
- 9DDEC1131A9FA2348B0A0AEB73868888
- In HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-21-1645522239-1292428093-682003330-1003\Components
- 9DDEC1131A9FA2348B0A0AEB73D6BA21
- In HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-21-1645522239-1292428093-682003330-1003\Components
- A805D820868346044B5BDD92EB6CA6C3
- In HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-21-1645522239-1292428093-682003330-1003\Components
- 9DDEC1131A9FA2348B0A0AEB88D68A82
- In HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-21-1645522239-1292428093-682003330-1003\Components
- 9DDEC1131A9FA2348B0A0AEB73D61A81
- In HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-21-1645522239-1292428093-682003330-1003\Components
- D0386F2D6FEAFBC45BFCAFE158BF5064
- In HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-21-1645522239-1292428093-682003330-1003\Components
- CA86D8ADF7525524299E35592473F71A
- In HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-21-1645522239-1292428093-682003330-1003\Components
- CA86D8ADF7525524299E35592473F72A
- In HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-21-1645522239-1292428093-682003330-1003\Components
- CA86D8ADF7525524299E35592473F73A
- In HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-21-1645522239-1292428093-682003330-1003\Components
- E2647758E1ED7134F8C4259CC51A2AA8
- In HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-21-1645522239-1292428093-682003330-1003\Components
- 0B394BFA95E9CAE4FBB27DB664DCBD0E
- In HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-21-1645522239-1292428093-682003330-1003\Components
- 9DDEC1131A9FA2348B0A81EB88D68A81
- In HKEY_CURRENT_USER\Software
- SmartbarLog
- In HKEY_CURRENT_USER\SOFTWARE
- SmartbarBackup
Step 3
Delete this registry value
Important: Editing the Windows Registry incorrectly can lead to irreversible system malfunction. Please do this step only if you know how or you can ask assistance from your system administrator. Else, check this Microsoft article first before modifying your computer's registry.
- In HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\Rollback\Scripts
- %System Root%\Config.Msi\244a3.rbs = "457b1e8"
- In HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-21-1645522239-1292428093-682003330-1003\Components\216A7206F164D5243BE66288984CD4AC
- 705E65FCE69A37947BBF4E5924EA8557 = "01:\Software\Smartbar\version"
- In HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-21-1645522239-1292428093-682003330-1003\Components\3152E1F19977892449DC968802CE8964
- 705E65FCE69A37947BBF4E5924EA8557 = "{random characters}"
- In HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\3152E1F19977892449DC968802CE8964
- 00000000000000000000000000000000 = "{random characters}"
- In HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-21-1645522239-1292428093-682003330-1003\Components\272DC7B48E479E54DAA0FE4489E6092F
- 705E65FCE69A37947BBF4E5924EA8557 = "{random characters}"
- In HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-21-1645522239-1292428093-682003330-1003\Components\D80C1A41B9116A14D9F9ABA4F127B468
- 705E65FCE69A37947BBF4E5924EA8557 = "{random characters}"
- In HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-21-1645522239-1292428093-682003330-1003\Components\C3B675CC98F2B464B802D5E2C6BF6895
- 705E65FCE69A37947BBF4E5924EA8557 = "{random characters}"
- In HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-21-1645522239-1292428093-682003330-1003\Components\9DDEC1131A9FA2348B0A0AEB73D68A82
- 705E65FCE69A37947BBF4E5924EA8557 = "01:\Software\Smartbar\version"
- In HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-21-1645522239-1292428093-682003330-1003\Components\9DDEC1131A9FA2348B0A0AEB73D68A18
- 705E65FCE69A37947BBF4E5924EA8557 = "01:\Software\Smartbar\version"
- In HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-21-1645522239-1292428093-682003330-1003\Components\C4FE6082BC8553B4B91EC0FE408D71DA
- 705E65FCE69A37947BBF4E5924EA8557 = "01:\Software\Smartbar\version"
- In HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-21-1645522239-1292428093-682003330-1003\Components\93D6CC2FC9612424E87EB7375E2FC46C
- 705E65FCE69A37947BBF4E5924EA8557 = "01:\Software\Smartbar\version"
- In HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-21-1645522239-1292428093-682003330-1003\Components\0B61AA2BED003754EB929BEF1B2E8A42
- 705E65FCE69A37947BBF4E5924EA8557 = "01:\Software\Smartbar\version"
- In HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-21-1645522239-1292428093-682003330-1003\Components\2E35213FD461DD045869F4E01B62B2BE
- 705E65FCE69A37947BBF4E5924EA8557 = "01:\Software\Smartbar\version"
- In HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-21-1645522239-1292428093-682003330-1003\Components\BBB8D37874E1A0946834CDB33A9FC4CD
- 705E65FCE69A37947BBF4E5924EA8557 = "01:\Software\Smartbar\version"
- In HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-21-1645522239-1292428093-682003330-1003\Components\BBB8D37874E1A0946834CDB34A9FC4CD
- 705E65FCE69A37947BBF4E5924EA8557 = "01:\Software\Smartbar\version"
- In HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-21-1645522239-1292428093-682003330-1003\Components\40623894481B5D040B0F8C26B6D7A878
- 705E65FCE69A37947BBF4E5924EA8557 = "01:\Software\Smartbar\version"
- In HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-21-1645522239-1292428093-682003330-1003\Components\0B51AA2BED003754EB928BEF1B2E8A42
- 705E65FCE69A37947BBF4E5924EA8557 = "01:\Software\Smartbar\version"
- In HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-21-1645522239-1292428093-682003330-1003\Components\55D0E21DCD38B8E40BA0517C0D9CCCE0
- 705E65FCE69A37947BBF4E5924EA8557 = "01:\Software\Smartbar\version"
- In HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-21-1645522239-1292428093-682003330-1003\Components\A9AB3AEAE939E984293B9178134BD540
- 705E65FCE69A37947BBF4E5924EA8557 = "01:\Software\Smartbar\version"
- In HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-21-1645522239-1292428093-682003330-1003\Components\A143CF598A8430D4BB0E71700E8C09C5
- 705E65FCE69A37947BBF4E5924EA8557 = "01:\Software\Smartbar\version"
- In HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-21-1645522239-1292428093-682003330-1003\Components\D40B7F324393F624DACA80C397004DA1
- 705E65FCE69A37947BBF4E5924EA8557 = "01:\Software\Smartbar\version"
- In HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-21-1645522239-1292428093-682003330-1003\Components\DF0B7F324F93FE24DBCA80C397004DF2
- 705E65FCE69A37947BBF4E5924EA8557 = "01:\Software\Smartbar\version"
- In HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-21-1645522239-1292428093-682003330-1003\Components\4CD231EF64D076744824027B43D7B1AD
- 705E65FCE69A37947BBF4E5924EA8557 = "01:\Software\Smartbar\version"
- In HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-21-1645522239-1292428093-682003330-1003\Components\649A52D257CA5DB4EAAE8BA9EB23E467
- 705E65FCE69A37947BBF4E5924EA8557 = "01:\Software\Smartbar\version"
- In HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\649A52D257CA5DB4EAAE8BA9EB23E467
- 00000000000000000000000000000000 = "01:\Software\Smartbar\version"
- In HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-21-1645522239-1292428093-682003330-1003\Components\33592FD0CF5A7AA4A8F106EB69B9A0D7
- 705E65FCE69A37947BBF4E5924EA8557 = "01:\Software\Smartbar\version"
- In HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-21-1645522239-1292428093-682003330-1003\Components\E5ADE64D843807D4997A4AFC96B78EF1
- 705E65FCE69A37947BBF4E5924EA8557 = "01:\Software\Smartbar\version"
- In HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-21-1645522239-1292428093-682003330-1003\Components\0B6A7206F164D5243BE662E09C4CD4AC
- 705E65FCE69A37947BBF4E5924EA8557 = "01:\Software\Smartbar\version"
- In HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-21-1645522239-1292428093-682003330-1003\Components\016A7206F164D5243BE662E09C4CD4AC
- 705E65FCE69A37947BBF4E5924EA8557 = "01:\Software\Smartbar\version"
- In HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-21-1645522239-1292428093-682003330-1003\Components\116A7206F164D5243BE662E09C4CD4AC
- 705E65FCE69A37947BBF4E5924EA8557 = "01:\Software\Smartbar\version"
- In HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-21-1645522239-1292428093-682003330-1003\Components\216A7206F164D5243BE662E09C4CD4AC
- 705E65FCE69A37947BBF4E5924EA8557 = "01:\Software\Smartbar\version"
- In HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-21-1645522239-1292428093-682003330-1003\Components\E5ADE64D843807D4997A4AFC96B78EF2
- 705E65FCE69A37947BBF4E5924EA8557 = "01:\Software\Smartbar\version"
- In HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-21-1645522239-1292428093-682003330-1003\Components\E5ADE64D843807D4997A4AFC96B78EF3
- 705E65FCE69A37947BBF4E5924EA8557 = "01:\Software\Smartbar\version"
- In HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-21-1645522239-1292428093-682003330-1003\Components\E5ADE64D843807D4997A4AFC96B78EF4
- 705E65FCE69A37947BBF4E5924EA8557 = "01:\Software\Smartbar\version"
- In HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-21-1645522239-1292428093-682003330-1003\Components\E5ADE64D843807D4997A4AFC96B78EF5
- 705E65FCE69A37947BBF4E5924EA8557 = "01:\Software\Smartbar\version"
- In HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-21-1645522239-1292428093-682003330-1003\Components\016A7206F164D5243BE66200904CD4AC
- 705E65FCE69A37947BBF4E5924EA8557 = "01:\Software\Smartbar\version"
- In HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-21-1645522239-1292428093-682003330-1003\Components\43F238B8E12237E46A4AFF0CB31E2ECC
- 705E65FCE69A37947BBF4E5924EA8557 = "01:\Software\Smartbar\version"
- In HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-21-1645522239-1292428093-682003330-1003\Components\BBB8D37874E1A0946834CDB33A9FC4C5
- 705E65FCE69A37947BBF4E5924EA8557 = "01:\Software\Smartbar\version"
- In HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-21-1645522239-1292428093-682003330-1003\Components\32123894481B5D040B0F8C26B6D7A878
- 705E65FCE69A37947BBF4E5924EA8557 = "01:\Software\Smartbar\version"
- In HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-21-1645522239-1292428093-682003330-1003\Components\0B51A54BED003754EB928BEF1B2E8A42
- 705E65FCE69A37947BBF4E5924EA8557 = "01:\Software\Smartbar\version"
- In HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-21-1645522239-1292428093-682003330-1003\Components\E13864C95DCE91247A4435FFDA762754
- 705E65FCE69A37947BBF4E5924EA8557 = "01:\Software\Smartbar\version"
- In HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-21-1645522239-1292428093-682003330-1003\Components\9DDEC1131A9FA2348B0A0AEB73868888
- 705E65FCE69A37947BBF4E5924EA8557 = "01:\Software\Smartbar\version"
- In HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-21-1645522239-1292428093-682003330-1003\Components\9DDEC1131A9FA2348B0A0AEB73D6BA21
- 705E65FCE69A37947BBF4E5924EA8557 = "01:\Software\Smartbar\version"
- In HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-21-1645522239-1292428093-682003330-1003\Components\A805D820868346044B5BDD92EB6CA6C3
- 705E65FCE69A37947BBF4E5924EA8557 = "01:\Software\Smartbar\version"
- In HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-21-1645522239-1292428093-682003330-1003\Components\9DDEC1131A9FA2348B0A0AEB88D68A82
- 705E65FCE69A37947BBF4E5924EA8557 = "01:\Software\Smartbar\version"
- In HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-21-1645522239-1292428093-682003330-1003\Components\9DDEC1131A9FA2348B0A0AEB73D61A81
- 705E65FCE69A37947BBF4E5924EA8557 = "01:\Software\Smartbar\version"
- In HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-21-1645522239-1292428093-682003330-1003\Components\D0386F2D6FEAFBC45BFCAFE158BF5064
- 705E65FCE69A37947BBF4E5924EA8557 = "01:\Software\Smartbar\version"
- In HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-21-1645522239-1292428093-682003330-1003\Components\CA86D8ADF7525524299E35592473F71A
- 705E65FCE69A37947BBF4E5924EA8557 = "01:\Software\Smartbar\version"
- In HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-21-1645522239-1292428093-682003330-1003\Components\CA86D8ADF7525524299E35592473F72A
- 705E65FCE69A37947BBF4E5924EA8557 = "01:\Software\Smartbar\version"
- In HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-21-1645522239-1292428093-682003330-1003\Components\CA86D8ADF7525524299E35592473F73A
- 705E65FCE69A37947BBF4E5924EA8557 = "01:\Software\Smartbar\version"
- In HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-21-1645522239-1292428093-682003330-1003\Components\E2647758E1ED7134F8C4259CC51A2AA8
- 705E65FCE69A37947BBF4E5924EA8557 = "01:\Software\Smartbar\version"
- In HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-21-1645522239-1292428093-682003330-1003\Components\0B394BFA95E9CAE4FBB27DB664DCBD0E
- 705E65FCE69A37947BBF4E5924EA8557 = "01:\Software\Smartbar\version"
- In HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-21-1645522239-1292428093-682003330-1003\Components\9DDEC1131A9FA2348B0A81EB88D68A81
- 705E65FCE69A37947BBF4E5924EA8557 = "01:\Software\Smartbar\version"
- In HKEY_CURRENT_USER\Software\SmartbarLog
- Installation-Status = "NewBegin"
- In HKEY_CURRENT_USER\Software\SmartbarBackup
- InstallationArgs = "{random characters}"
Step 4
Restore these modified registry values
Important:Editing the Windows Registry incorrectly can lead to irreversible system malfunction. Please do this only if you know how to or you can seek your system administrator's help. You may also check out this Microsoft article first before modifying your computer's registry.
- In HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\SystemCertificates\AuthRoot\Certificates\4EFCED9C6BDD0C985CA3C7D253063C5BE6FC620C
- From: Blob = "{random values}"
To: Blob = ""{random values}""
- From: Blob = "{random values}"
- In HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\SystemCertificates\AuthRoot\Certificates\4EF2E6670AC9B5091FE06BE0E5483EAAD6BA32D9
- From: Blob = "{random values}"
To: Blob = ""{random values}""
- From: Blob = "{random values}"
- In HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\SystemCertificates\AuthRoot\Certificates\4C95A9902ABE0777CED18D6ACCC3372D2748381E
- From: Blob = "{random values}"
To: Blob = ""{random values}""
- From: Blob = "{random values}"
- In HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\SystemCertificates\AuthRoot\Certificates\4BA7B9DDD68788E12FF852E1A024204BF286A8F6
- From: Blob = "{random values}"
To: Blob = ""{random values}""
- From: Blob = "{random values}"
- In HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\SystemCertificates\AuthRoot\Certificates\4B421F7515F6AE8A6ECEF97F6982A400A4D9224E
- From: Blob = "{random values}"
To: Blob = ""{random values}""
- From: Blob = "{random values}"
- In HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\SystemCertificates\AuthRoot\Certificates\47AFB915CDA26D82467B97FA42914468726138DD
- From: Blob = "{random values}"
To: Blob = ""{random values}""
- From: Blob = "{random values}"
- In HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\SystemCertificates\AuthRoot\Certificates\4463C531D7CCC1006794612BB656D3BF8257846F
- From: Blob = "{random values}"
To: Blob = ""{random values}""
- From: Blob = "{random values}"
- In HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\SystemCertificates\AuthRoot\Certificates\43F9B110D5BAFD48225231B0D0082B372FEF9A54
- From: Blob = "{random values}"
To: Blob = ""{random values}""
- From: Blob = "{random values}"
- In HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\SystemCertificates\AuthRoot\Certificates\43DDB1FFF3B49B73831407F6BC8B975023D07C50
- From: Blob = "{random values}"
To: Blob = ""{random values}""
- From: Blob = "{random values}"
- In HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\SystemCertificates\AuthRoot\Certificates\40E78C1D523D1CD9954FAC1A1AB3BD3CBAA15BFC
- From: Blob = "{random values}"
To: Blob = ""{random values}""
- From: Blob = "{random values}"
- In HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\SystemCertificates\AuthRoot\Certificates\4072BA31FEC351438480F62E6CB95508461EAB2F
- From: Blob = "{random values}"
To: Blob = ""{random values}""
- From: Blob = "{random values}"
- In HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\SystemCertificates\AuthRoot\Certificates\3F85F2BB4A62B0B58BE1614ABB0D4631B4BEF8BA
- From: Blob = "{random values}"
To: Blob = ""{random values}""
- From: Blob = "{random values}"
- In HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\SystemCertificates\AuthRoot\Certificates\394FF6850B06BE52E51856CC10E180E882B385CC
- From: Blob = "{random values}"
To: Blob = ""{random values}""
- From: Blob = "{random values}"
- In HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\SystemCertificates\AuthRoot\Certificates\36863563FD5128C7BEA6F005CFE9B43668086CCE
- From: Blob = "{random values}"
To: Blob = ""{random values}""
- From: Blob = "{random values}"
- In HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\SystemCertificates\AuthRoot\Certificates\317A2AD07F2B335EF5A1C34E4B57E8B7D8F1FCA6
- From: Blob = "{random values}"
To: Blob = ""{random values}""
- From: Blob = "{random values}"
- In HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\SystemCertificates\AuthRoot\Certificates\2F173F7DE99667AFA57AF80AA2D1B12FAC830338
- From: Blob = "{random values}"
To: Blob = ""{random values}""
- From: Blob = "{random values}"
- In HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\SystemCertificates\AuthRoot\Certificates\284F55C41A1A7A3F8328D4C262FB376ED6096F24
- From: Blob = "{random values}"
To: Blob = ""{random values}""
- From: Blob = "{random values}"
- In HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\SystemCertificates\AuthRoot\Certificates\273EE12457FDC4F90C55E82B56167F62F532E547
- From: Blob = "{random values}"
To: Blob = ""{random values}""
- From: Blob = "{random values}"
- In HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\SystemCertificates\AuthRoot\Certificates\24BA6D6C8A5B5837A48DB5FAE919EA675C94D217
- From: Blob = "{random values}"
To: Blob = ""{random values}""
- From: Blob = "{random values}"
- In HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\SystemCertificates\AuthRoot\Certificates\24A40A1F573643A67F0A4B0749F6A22BF28ABB6B
- From: Blob = "{random values}"
To: Blob = ""{random values}""
- From: Blob = "{random values}"
- In HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\SystemCertificates\AuthRoot\Certificates\23E594945195F2414803B4D564D2A3A3F5D88B8C
- From: Blob = "{random values}"
To: Blob = ""{random values}""
- From: Blob = "{random values}"
- In HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\SystemCertificates\AuthRoot\Certificates\216B2A29E62A00CE820146D8244141B92511B279
- From: Blob = "{random values}"
To: Blob = ""{random values}""
- From: Blob = "{random values}"
- In HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\SystemCertificates\AuthRoot\Certificates\209900B63D955728140CD13622D8C687A4EB0085
- From: Blob = "{random values}"
To: Blob = ""{random values}""
- From: Blob = "{random values}"
- In HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\SystemCertificates\AuthRoot\Certificates\1F55E8839BAC30728BE7108EDE7B0BB0D3298224
- From: Blob = "{random values}"
To: Blob = ""{random values}""
- From: Blob = "{random values}"
- In HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\SystemCertificates\AuthRoot\Certificates\1331F48A5DA8E01DAACA1BB0C17044ACFEF755BB
- From: Blob = "{random values}"
To: Blob = ""{random values}""
- From: Blob = "{random values}"
- In HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\SystemCertificates\AuthRoot\Certificates\0B77BEBBCB7AA24705DECC0FBD6A02FC7ABD9B52
- From: Blob = "{random values}"
To: Blob = ""{random values}""
- From: Blob = "{random values}"
- In HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\SystemCertificates\AuthRoot\Certificates\049811056AFE9FD0F5BE01685AACE6A5D1C4454C
- From: Blob = "{random values}"
To: Blob = ""{random values}""
- From: Blob = "{random values}"
- In HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\SystemCertificates\AuthRoot\Certificates\0483ED3399AC3608058722EDBC5E4600E3BEF9D7
- From: Blob = "{random values}"
To: Blob = ""{random values}""
- From: Blob = "{random values}"
- In HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\SystemCertificates\AuthRoot\Certificates\00EA522C8A9C06AA3ECCE0B4FA6CDC21D92E8099
- From: Blob = "{random values}"
To: Blob = ""{random values}""
- From: Blob = "{random values}"
- In HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\SystemCertificates\AuthRoot\Certificates\0048F8D37B153F6EA2798C323EF4F318A5624A9E
- From: Blob = "{random values}"
To: Blob = ""{random values}""
- From: Blob = "{random values}"
- In HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\SystemCertificates\AuthRoot\Certificates\4EB6D578499B1CCF5F581EAD56BE3D9B6744A5E5
- From: Blob = "{random values}"
To: Blob = ""{random values}""
- From: Blob = "{random values}"
- In HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Services\Eventlog\Application\ESENT
- From: EventMessageFile = "%System%\ESENT.dll"
To: EventMessageFile = ""{random values}""
- From: EventMessageFile = "%System%\ESENT.dll"
- In HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Services\Eventlog\Application\ESENT
- From: CategoryMessageFile = "%System%\ESENT.dll"
To: CategoryMessageFile = ""{random values}""
- From: CategoryMessageFile = "%System%\ESENT.dll"
- In HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Services\Eventlog\Application\ESENT
- From: CategoryCount = "1"
To: CategoryCount = ""10""
- From: CategoryCount = "1"
- In HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Services\Eventlog\Application\ESENT
- From: TypesSupported = "7"
To: TypesSupported = ""7""
- From: TypesSupported = "7"
- In HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Control\Session Manager\Environment
- From: PATH = "%System%;%Windows%;%System%\Wbem;%Application Data%\Smartbar\Application"
To: PATH = ""{random values}""
- From: PATH = "%System%;%Windows%;%System%\Wbem;%Application Data%\Smartbar\Application"
Step 5
Search and delete these components
- %User Profile%\MetaData\2BF68F4714092295550497DD56F57004
- %User Profile%\Content\2BF68F4714092295550497DD56F57004
- %User Profile%\MetaData\94308059B57B3142E455B38A6EB92015
- %User Profile%\Content\94308059B57B3142E455B38A6EB92015
- %User Temp%\Cab8.tmp
- %User Temp%\TarA.tmp
- %User Profile%\MetaData\8DFDF057024880D7A081AFBF6D26B92F
- %User Profile%\Content\8DFDF057024880D7A081AFBF6D26B92F
- %User Profile%\MetaData\62B5AF9BE9ADC1085C3C56EC07A82BF6
- %User Profile%\Content\62B5AF9BE9ADC1085C3C56EC07A82BF6
- %User Temp%\rovic-61.tmp
- %User Temp%\rovic-61.0.cs
- %User Temp%\rovic-61.dll
- %User Temp%\rovic-61.cmdline
- %User Temp%\rovic-61.out
- %User Temp%\rovic-61.err
- %User Temp%\Smartbar\LinkuryInstaller.msi
- %User Temp%\CSC18.tmp
- %User Temp%\RES1B.tmp
- %Windows%\Installer\244a0.msi
- %Windows%\Installer\244a2.ipi
- %Windows%\Installer\MSI75.tmp
- %System Root%\Config.Msi\244a3.rbs
- %Application Data%\Smartbar\Common\icons\00659FA4-2CAD-45fc-A8A0-DB7862840BA9.png
- %Application Data%\Smartbar\Common\iconsWide\00659FA4-2CAD-45fc-A8A0-DB7862840BA9.png
- %Application Data%\Smartbar\Common\icons\00659FA4-2CAD-45fc-A8A0-DB7862840BA9hover.png
- %Application Data%\Smartbar\Common\iconsWide\00659FA4-2CAD-45fc-A8A0-DB7862840BA9hover.png
- %Application Data%\Smartbar\Common\icons\00659FA4-2CAD-45fc-A8A0-DB7862840BA9press.png
- %Application Data%\Smartbar\Common\iconsWide\00659FA4-2CAD-45fc-A8A0-DB7862840BA9press.png
- %Application Data%\Smartbar\Common\iconsWide\07a9a58b-c653-4285-a870-1fa70cb6c00c.ico
- %Application Data%\Smartbar\Common\icons\07a9a58b-c653-4285-a870-1fa70cb6c00c.png
- %Application Data%\Smartbar\Common\iconsWide\07a9a58b-c653-4285-a870-1fa70cb6c00c.png
- %Application Data%\Smartbar\Common\icons\07a9a58b-c653-4285-a870-1fa70cb6c00chover.png
- %Application Data%\Smartbar\Common\iconsWide\07a9a58b-c653-4285-a870-1fa70cb6c00chover.png
- %Application Data%\Smartbar\Common\icons\07a9a58b-c653-4285-a870-1fa70cb6c00cPress.png
- %Application Data%\Smartbar\Common\iconsWide\07a9a58b-c653-4285-a870-1fa70cb6c00cpress.png
- %Application Data%\Smartbar\Common\icons\0A2DE7DB-ADE9-44FC-BC66-CF5604F9BF7A.png
- %Application Data%\Smartbar\Common\iconsWide\0A2DE7DB-ADE9-44FC-BC66-CF5604F9BF7A.png
- %Application Data%\Smartbar\Common\icons\0A2DE7DB-ADE9-44FC-BC66-CF5604F9BF7Ahover.png
- %Application Data%\Smartbar\Common\iconsWide\0A2DE7DB-ADE9-44FC-BC66-CF5604F9BF7Ahover.png
- %Application Data%\Smartbar\Common\icons\0A2DE7DB-ADE9-44FC-BC66-CF5604F9BF7Apress.png
- %Application Data%\Smartbar\Common\iconsWide\0A2DE7DB-ADE9-44FC-BC66-CF5604F9BF7Apress.png
- %Application Data%\Smartbar\Common\iconsWide\0AE6BC52-0A54-4F53-9848-1FC2D4CE3D3D.png
- %Application Data%\Smartbar\Common\iconsWide\0AE6BC52-0A54-4F53-9848-1FC2D4CE3D3DHover.png
- %Application Data%\Smartbar\Common\iconsWide\0AE6BC52-0A54-4F53-9848-1FC2D4CE3D3DPress.png
- %Application Data%\Smartbar\Common\iconsWide\0DB19630-EB33-4B18-8357-78FC2687C788.png
- %Application Data%\Smartbar\Common\iconsWide\0DB19630-EB33-4B18-8357-78FC2687C788hover.png
- %Application Data%\Smartbar\Common\iconsWide\0DB19630-EB33-4B18-8357-78FC2687C788press.png
- %Application Data%\Smartbar\Common\icons\0E29BC94-7C9B-4A23-B682-81D0D1A806E1.png
- %Application Data%\Smartbar\Common\iconsWide\0E29BC94-7C9B-4A23-B682-81D0D1A806E1.png
- %Application Data%\Smartbar\Common\icons\0E29BC94-7C9B-4A23-B682-81D0D1A806E1hover.png
- %Application Data%\Smartbar\Common\iconsWide\0E29BC94-7C9B-4A23-B682-81D0D1A806E1hover.png
- %Application Data%\Smartbar\Common\icons\0E29BC94-7C9B-4A23-B682-81D0D1A806E1press.png
- %Application Data%\Smartbar\Common\iconsWide\0E29BC94-7C9B-4A23-B682-81D0D1A806E1press.png
- %Application Data%\Smartbar\Common\icons\0FA6F971-16AA-4921-A39F-543C9839CABE.png
- %Application Data%\Smartbar\Common\iconsWide\0FA6F971-16AA-4921-A39F-543C9839CABE.png
- %Application Data%\Smartbar\Common\icons\0FA6F971-16AA-4921-A39F-543C9839CABEhover.png
- %Application Data%\Smartbar\Common\iconsWide\0FA6F971-16AA-4921-A39F-543C9839CABEhover.png
- %Application Data%\Smartbar\Common\icons\0FA6F971-16AA-4921-A39F-543C9839CABEpress.png
- %Application Data%\Smartbar\Common\iconsWide\0FA6F971-16AA-4921-A39F-543C9839CABEpress.png
- %Application Data%\Smartbar\Common\icons\101FF2F5-9F51-405F-ACBB-D4A5F3601679.png
- %Application Data%\Smartbar\Common\iconsWide\101FF2F5-9F51-405F-ACBB-D4A5F3601679.png
- %Application Data%\Smartbar\Common\icons\101FF2F5-9F51-405F-ACBB-D4A5F3601679hover.png
- %Application Data%\Smartbar\Common\iconsWide\101FF2F5-9F51-405F-ACBB-D4A5F3601679hover.png
- %Application Data%\Smartbar\Common\icons\101FF2F5-9F51-405F-ACBB-D4A5F3601679press.png
- %Application Data%\Smartbar\Common\iconsWide\101FF2F5-9F51-405F-ACBB-D4A5F3601679press.png
- %Application Data%\Smartbar\Common\iconsWide\139D15A7-C5E1-4C5E-ABF2-484DBE081313.png
- %Application Data%\Smartbar\Common\iconsWide\139D15A7-C5E1-4C5E-ABF2-484DBE081313hover.png
- %Application Data%\Smartbar\Common\iconsWide\139D15A7-C5E1-4C5E-ABF2-484DBE081313press.png
- %Application Data%\Smartbar\Common\iconsWide\139D15A7-C5E1-4C5E-ABF2-484DBE08E613.png
- %Application Data%\Smartbar\Common\iconsWide\139D15A7-C5E1-4C5E-ABF2-484DBE08E613hover.png
- %Application Data%\Smartbar\Common\iconsWide\139D15A7-C5E1-4C5E-ABF2-484DBE08E613press.png
- %Application Data%\Smartbar\Common\iconsWide\139D15A7-C5E1-4C5E-ABF2-484DBE131313.png
- %Application Data%\Smartbar\Common\iconsWide\139D15A7-C5E1-4C5E-ABF2-484DBE131313hover.png
- %Application Data%\Smartbar\Common\iconsWide\139D15A7-C5E1-4C5E-ABF2-484DBE131313press.png
- %Application Data%\Smartbar\Common\icons\1A039A19-BD34-4760-8DE0-E9A8E8AA8827.png
- %Application Data%\Smartbar\Common\iconsWide\1A039A19-BD34-4760-8DE0-E9A8E8AA8827.png
- %Application Data%\Smartbar\Common\icons\1A039A19-BD34-4760-8DE0-E9A8E8AA8827Ehover.png
- %Application Data%\Smartbar\Common\iconsWide\1A039A19-BD34-4760-8DE0-E9A8E8AA8827hover.png
- %Application Data%\Smartbar\Common\icons\1A039A19-BD34-4760-8DE0-E9A8E8AA8827press.png
- %Application Data%\Smartbar\Common\iconsWide\1A039A19-BD34-4760-8DE0-E9A8E8AA8827press.png
- %Application Data%\Smartbar\Common\icons\1A19CD12-F9A2-44A6-8F44-F3A95E0081A0.png
- %Application Data%\Smartbar\Common\iconsWide\1A19CD12-F9A2-44A6-8F44-F3A95E0081A0.png
- %Application Data%\Smartbar\Common\icons\1A19CD12-F9A2-44A6-8F44-F3A95E0081A0hover.png
- %Application Data%\Smartbar\Common\iconsWide\1A19CD12-F9A2-44A6-8F44-F3A95E0081A0hover.png
- %Application Data%\Smartbar\Common\icons\1A19CD12-F9A2-44A6-8F44-F3A95E0081A0press.png
- %Application Data%\Smartbar\Common\iconsWide\1A19CD12-F9A2-44A6-8F44-F3A95E0081A0press.png
- %Application Data%\Smartbar\Common\icons\1FFDDB6E-8EB3-4CE0-9C2B-44910A3C5975.png
- %Application Data%\Smartbar\Common\iconsWide\1FFDDB6E-8EB3-4CE0-9C2B-44910A3C5975.png
- %Application Data%\Smartbar\Common\icons\1FFDDB6E-8EB3-4CE0-9C2B-44910A3C5975hover.png
- %Application Data%\Smartbar\Common\iconsWide\1FFDDB6E-8EB3-4CE0-9C2B-44910A3C5975hover.png
- %Application Data%\Smartbar\Common\icons\1FFDDB6E-8EB3-4CE0-9C2B-44910A3C5975press.png
- %Application Data%\Smartbar\Common\iconsWide\1FFDDB6E-8EB3-4CE0-9C2B-44910A3C5975press.png
- %Application Data%\Smartbar\Common\iconsWide\2141A104-423C-43EF-A27A-CA0DADB7B9BC.png
- %Application Data%\Smartbar\Common\iconsWide\2141A104-423C-43EF-A27A-CA0DADB7B9BChover.png
- %Application Data%\Smartbar\Common\iconsWide\2141A104-423C-43EF-A27A-CA0DADB7B9BCpress.png
- %Application Data%\Smartbar\Common\icons\225323D0-97BB-46E4-85E1-15EA27174BF4.png
- %Application Data%\Smartbar\Common\iconsWide\225323D0-97BB-46E4-85E1-15EA27174BF4.png
- %Application Data%\Smartbar\Common\icons\225323D0-97BB-46E4-85E1-15EA27174BF4hover.png
- %Application Data%\Smartbar\Common\iconsWide\225323D0-97BB-46E4-85E1-15EA27174BF4hover.png
- %Application Data%\Smartbar\Common\icons\225323D0-97BB-46E4-85E1-15EA27174BF4press.png
- %Application Data%\Smartbar\Common\iconsWide\225323D0-97BB-46E4-85E1-15EA27174BF4press.png
- %Application Data%\Smartbar\Common\icons\23E3FEB8-E6FF-4475-811A-805773D02D08.png
- %Application Data%\Smartbar\Common\iconsWide\23E3FEB8-E6FF-4475-811A-805773D02D08.png
- %Application Data%\Smartbar\Common\icons\23E3FEB8-E6FF-4475-811A-805773D02D08hover.png
- %Application Data%\Smartbar\Common\iconsWide\23E3FEB8-E6FF-4475-811A-805773D02D08hover.png
- %Application Data%\Smartbar\Common\icons\23E3FEB8-E6FF-4475-811A-805773D02D08press.png
- %Application Data%\Smartbar\Common\iconsWide\23E3FEB8-E6FF-4475-811A-805773D02D08press.png
- %Application Data%\Smartbar\Common\icons\26E2804B-65B5-47E1-A457-DAA75A2B1370.png
- %Application Data%\Smartbar\Common\iconsWide\26E2804B-65B5-47E1-A457-DAA75A2B1370.png
- %Application Data%\Smartbar\Common\icons\26E2804B-65B5-47E1-A457-DAA75A2B1370hover.png
- %Application Data%\Smartbar\Common\iconsWide\26E2804B-65B5-47E1-A457-DAA75A2B1370hover.png
- %Application Data%\Smartbar\Common\icons\26E2804B-65B5-47E1-A457-DAA75A2B1370press.png
- %Application Data%\Smartbar\Common\iconsWide\26E2804B-65B5-47E1-A457-DAA75A2B1370press.png
- %Application Data%\Smartbar\Common\iconsWide\28E2C7BC-F857-44D5-A42F-7DD66FAB5EE6.png
- %Application Data%\Smartbar\Common\iconsWide\28E2C7BC-F857-44D5-A42F-7DD66FAB5EE6hover.png
- %Application Data%\Smartbar\Common\iconsWide\28E2C7BC-F857-44D5-A42F-7DD66FAB5EE6press.png
- %Application Data%\Smartbar\Common\icons\2C37338C-837B-4846-B50B-E32D70C6A0F5.png
- %Application Data%\Smartbar\Common\iconsWide\2C37338C-837B-4846-B50B-E32D70C6A0F5.png
- %Application Data%\Smartbar\Common\icons\2C37338C-837B-4846-B50B-E32D70C6A0F5hover.png
- %Application Data%\Smartbar\Common\iconsWide\2C37338C-837B-4846-B50B-E32D70C6A0F5hover.png
- %Application Data%\Smartbar\Common\icons\2C37338C-837B-4846-B50B-E32D70C6A0F5press.png
- %Application Data%\Smartbar\Common\iconsWide\2C37338C-837B-4846-B50B-E32D70C6A0F5press.png
- %Application Data%\Smartbar\Common\icons\30657846-199A-4D0D-984D-BE588084F1F6.png
- %Application Data%\Smartbar\Common\iconsWide\30657846-199A-4D0D-984D-BE588084F1F6.png
- %Application Data%\Smartbar\Common\icons\30657846-199A-4D0D-984D-BE588084F1F6hover.png
- %Application Data%\Smartbar\Common\iconsWide\30657846-199A-4D0D-984D-BE588084F1F6hover.png
- %Application Data%\Smartbar\Common\icons\30657846-199A-4D0D-984D-BE588084F1F6press.png
- %Application Data%\Smartbar\Common\iconsWide\30657846-199A-4D0D-984D-BE588084F1F6press.png
- %Application Data%\Smartbar\Common\iconsWide\30DEBC8A-1CC6-4480-B3E5-C55E214043A8.png
- %Application Data%\Smartbar\Common\iconsWide\30DEBC8A-1CC6-4480-B3E5-C55E214043A8Hover.png
- %Application Data%\Smartbar\Common\iconsWide\30DEBC8A-1CC6-4480-B3E5-C55E214043A8Press.png
- %Application Data%\Smartbar\Common\icons\30DFF8F0-BA79-4360-A3EA-51B6D006133C.png
- %Application Data%\Smartbar\Common\iconsWide\30DFF8F0-BA79-4360-A3EA-51B6D006133C.png
- %Application Data%\Smartbar\Common\icons\30DFF8F0-BA79-4360-A3EA-51B6D006133CHover.png
- %Application Data%\Smartbar\Common\iconsWide\30DFF8F0-BA79-4360-A3EA-51B6D006133CHover.png
- %Application Data%\Smartbar\Common\icons\30DFF8F0-BA79-4360-A3EA-51B6D006133CPress.png
- %Application Data%\Smartbar\Common\iconsWide\30DFF8F0-BA79-4360-A3EA-51B6D006133CPress.png
- %Application Data%\Smartbar\Common\icons\328F7722-52E8-46A6-9197-B2F27C5142C7.png
- %Application Data%\Smartbar\Common\iconsWide\328F7722-52E8-46A6-9197-B2F27C5142C7.png
- %Application Data%\Smartbar\Common\icons\328F7722-52E8-46A6-9197-B2F27C5142C7hover.png
- %Application Data%\Smartbar\Common\iconsWide\328F7722-52E8-46A6-9197-B2F27C5142C7hover.png
- %Application Data%\Smartbar\Common\icons\328F7722-52E8-46A6-9197-B2F27C5142C7press.png
- %Application Data%\Smartbar\Common\iconsWide\328F7722-52E8-46A6-9197-B2F27C5142C7press.png
- %Application Data%\Smartbar\Common\icons\372FF78B-6E4B-4B38-8E3F-797B4680FB98.png
- %Application Data%\Smartbar\Common\iconsWide\372FF78B-6E4B-4B38-8E3F-797B4680FB98.png
- %Application Data%\Smartbar\Common\icons\372FF78B-6E4B-4B38-8E3F-797B4680FB98hover.png
- %Application Data%\Smartbar\Common\iconsWide\372FF78B-6E4B-4B38-8E3F-797B4680FB98hover.png
- %Application Data%\Smartbar\Common\icons\372FF78B-6E4B-4B38-8E3F-797B4680FB98press.png
- %Application Data%\Smartbar\Common\iconsWide\372FF78B-6E4B-4B38-8E3F-797B4680FB98press.png
- %Application Data%\Smartbar\Common\icons\39028511-3F15-4442-9188-DDC86BE1BBD0.png
- %Application Data%\Smartbar\Common\iconsWide\39028511-3F15-4442-9188-DDC86BE1BBD0.png
- %Application Data%\Smartbar\Common\icons\39028511-3F15-4442-9188-DDC86BE1BBD0hover.png
- %Application Data%\Smartbar\Common\iconsWide\39028511-3F15-4442-9188-DDC86BE1BBD0hover.png
- %Application Data%\Smartbar\Common\icons\39028511-3F15-4442-9188-DDC86BE1BBD0press.png
- %Application Data%\Smartbar\Common\iconsWide\39028511-3F15-4442-9188-DDC86BE1BBD0press.png
- %Application Data%\Smartbar\Common\icons\39079B96-6DD1-42DE-89E6-76F79C8BB4E4.png
- %Application Data%\Smartbar\Common\iconsWide\39079B96-6DD1-42DE-89E6-76F79C8BB4E4.png
- %Application Data%\Smartbar\Common\icons\39079B96-6DD1-42DE-89E6-76F79C8BB4E4Hover.png
- %Application Data%\Smartbar\Common\iconsWide\39079B96-6DD1-42DE-89E6-76F79C8BB4E4Hover.png
- %Application Data%\Smartbar\Common\icons\39079B96-6DD1-42DE-89E6-76F79C8BB4E4Press.png
- %Application Data%\Smartbar\Common\iconsWide\39079B96-6DD1-42DE-89E6-76F79C8BB4E4Press.png
- %Application Data%\Smartbar\Common\icons\3C610B86-19DE-4757-B46A-871C9C27FF0A.png
- %Application Data%\Smartbar\Common\iconsWide\3C610B86-19DE-4757-B46A-871C9C27FF0A.png
- %Application Data%\Smartbar\Common\icons\3C610B86-19DE-4757-B46A-871C9C27FF0AHover.png
- %Application Data%\Smartbar\Common\iconsWide\3C610B86-19DE-4757-B46A-871C9C27FF0AHover.png
- %Application Data%\Smartbar\Common\icons\3C610B86-19DE-4757-B46A-871C9C27FF0APress.png
- %Application Data%\Smartbar\Common\iconsWide\3C610B86-19DE-4757-B46A-871C9C27FF0APress.png
- %Application Data%\Smartbar\Common\iconsWide\3f9ac55c-6db5-4c01-9d34-a92da2347be6.ico
- %Application Data%\Smartbar\Common\icons\3f9ac55c-6db5-4c01-9d34-a92da2347be6.png
- %Application Data%\Smartbar\Common\iconsWide\3f9ac55c-6db5-4c01-9d34-a92da2347be6.png
- %Application Data%\Smartbar\Common\icons\3f9ac55c-6db5-4c01-9d34-a92da2347be6hover.png
- %Application Data%\Smartbar\Common\iconsWide\3f9ac55c-6db5-4c01-9d34-a92da2347be6hover.png
- %Application Data%\Smartbar\Common\icons\3f9ac55c-6db5-4c01-9d34-a92da2347be6press.png
- %Application Data%\Smartbar\Common\iconsWide\3f9ac55c-6db5-4c01-9d34-a92da2347be6press.png
- %Application Data%\Smartbar\Common\icons\412D5531-A3E1-40BB-B0C3-71E3C45A4E13.png
- %Application Data%\Smartbar\Common\iconsWide\412D5531-A3E1-40BB-B0C3-71E3C45A4E13.png
- %Application Data%\Smartbar\Common\icons\412D5531-A3E1-40BB-B0C3-71E3C45A4E13hover.png
- %Application Data%\Smartbar\Common\iconsWide\412D5531-A3E1-40BB-B0C3-71E3C45A4E13hover.png
- %Application Data%\Smartbar\Common\icons\412D5531-A3E1-40BB-B0C3-71E3C45A4E13press.png
- %Application Data%\Smartbar\Common\iconsWide\412D5531-A3E1-40BB-B0C3-71E3C45A4E13press.png
- %Application Data%\Smartbar\Common\iconsWide\48A9C19C-5A4C-4652-A6E7-1C17AEE45675.png
- %Application Data%\Smartbar\Common\iconsWide\48A9C19C-5A4C-4652-A6E7-1C17AEE45675Hover.png
- %Application Data%\Smartbar\Common\iconsWide\48A9C19C-5A4C-4652-A6E7-1C17AEE45675Press.png
- %Application Data%\Smartbar\Common\iconsWide\4a110a71-0e7e-4552-af6e-3ef88b2d6511.ico
- %Application Data%\Smartbar\Common\icons\4a110a71-0e7e-4552-af6e-3ef88b2d6511.png
- %Application Data%\Smartbar\Common\iconsWide\4a110a71-0e7e-4552-af6e-3ef88b2d6511.png
- %Application Data%\Smartbar\Common\icons\4a110a71-0e7e-4552-af6e-3ef88b2d6511Hover.png
- %Application Data%\Smartbar\Common\iconsWide\4a110a71-0e7e-4552-af6e-3ef88b2d6511Hover.png
- %Application Data%\Smartbar\Common\icons\4a110a71-0e7e-4552-af6e-3ef88b2d6511Press.png
- %Application Data%\Smartbar\Common\iconsWide\4a110a71-0e7e-4552-af6e-3ef88b2d6511Press.png
- %Application Data%\Smartbar\Common\iconsWide\511B6809-2468-4A36-A6FC-FC24F05499BE.png
- %Application Data%\Smartbar\Common\iconsWide\511B6809-2468-4A36-A6FC-FC24F05499BEHover.png
- %Application Data%\Smartbar\Common\iconsWide\511B6809-2468-4A36-A6FC-FC24F05499BEPress.png
- %Application Data%\Smartbar\Common\iconsWide\5252af60-ef03-41a8-babe-415dba235478.ico
- %Application Data%\Smartbar\Common\icons\5252af60-ef03-41a8-babe-415dba235478.png
- %Application Data%\Smartbar\Common\iconsWide\5252af60-ef03-41a8-babe-415dba235478.png
- %Application Data%\Smartbar\Common\icons\5252af60-ef03-41a8-babe-415dba235478Hover.png
- %Application Data%\Smartbar\Common\iconsWide\5252af60-ef03-41a8-babe-415dba235478Hover.png
- %Application Data%\Smartbar\Common\icons\5252af60-ef03-41a8-babe-415dba235478Press.png
- %Application Data%\Smartbar\Common\iconsWide\5252af60-ef03-41a8-babe-415dba235478Press.png
- %Application Data%\Smartbar\Common\iconsWide\536b9063-fc09-4e82-8769-73c77317aae6.ico
- %Application Data%\Smartbar\Common\icons\536b9063-fc09-4e82-8769-73c77317aae6.png
- %Application Data%\Smartbar\Common\iconsWide\536b9063-fc09-4e82-8769-73c77317aae6.png
- %Application Data%\Smartbar\Common\icons\536b9063-fc09-4e82-8769-73c77317aae6hover.png
- %Application Data%\Smartbar\Common\iconsWide\536b9063-fc09-4e82-8769-73c77317aae6hover.png
- %Application Data%\Smartbar\Common\icons\536b9063-fc09-4e82-8769-73c77317aae6press.png
- %Application Data%\Smartbar\Common\iconsWide\536b9063-fc09-4e82-8769-73c77317aae6press.png
- %Application Data%\Smartbar\Common\iconsWide\5558C4C6-18C1-4AF3-8F8D-0E2CF70D19C8.png
- %Application Data%\Smartbar\Common\icons\5558C4C6-18C1-4AF3-8F8D-0E2CF70D19C8.png
- %Application Data%\Smartbar\Common\iconsWide\5558C4C6-18C1-4AF3-8F8D-0E2CF70D19C8hover.png
- %Application Data%\Smartbar\Common\icons\5558C4C6-18C1-4AF3-8F8D-0E2CF70D19C8hover.png
- %Application Data%\Smartbar\Common\icons\5558C4C6-18C1-4AF3-8F8D-0E2CF70D19C8press.png
- %Application Data%\Smartbar\Common\iconsWide\5558C4C6-18C1-4AF3-8F8D-0E2CF70D19C8press.png
- %Application Data%\Smartbar\Common\icons\56591C8E-DA35-4A97-AC9B-5055E0F7089E.png
- %Application Data%\Smartbar\Common\iconsWide\56591C8E-DA35-4A97-AC9B-5055E0F7089E.png
- %Application Data%\Smartbar\Common\icons\56591C8E-DA35-4A97-AC9B-5055E0F7089Ehover.png
- %Application Data%\Smartbar\Common\iconsWide\56591C8E-DA35-4A97-AC9B-5055E0F7089Ehover.png
- %Application Data%\Smartbar\Common\icons\56591C8E-DA35-4A97-AC9B-5055E0F7089Epress.png
- %Application Data%\Smartbar\Common\iconsWide\56591C8E-DA35-4A97-AC9B-5055E0F7089Epress.png
- %Application Data%\Smartbar\Common\icons\56B19DA1-B4C5-4FCF-87D0-44E8B2C1002A.png
- %Application Data%\Smartbar\Common\iconsWide\56B19DA1-B4C5-4FCF-87D0-44E8B2C1002A.png
- %Application Data%\Smartbar\Common\icons\56B19DA1-B4C5-4FCF-87D0-44E8B2C1002Ahover.png
- %Application Data%\Smartbar\Common\iconsWide\56B19DA1-B4C5-4FCF-87D0-44E8B2C1002Ahover.png
- %Application Data%\Smartbar\Common\icons\56B19DA1-B4C5-4FCF-87D0-44E8B2C1002Apress.png
- %Application Data%\Smartbar\Common\iconsWide\56B19DA1-B4C5-4FCF-87D0-44E8B2C1002Apress.png
- %Application Data%\Smartbar\Common\icons\5D0A6D97-85F2-47E9-8F04-04A747B25A0E.png
- %Application Data%\Smartbar\Common\iconsWide\5D0A6D97-85F2-47E9-8F04-04A747B25A0E.png
- %Application Data%\Smartbar\Common\icons\5D0A6D97-85F2-47E9-8F04-04A747B25A0Ehover.png
- %Application Data%\Smartbar\Common\iconsWide\5D0A6D97-85F2-47E9-8F04-04A747B25A0Ehover.png
- %Application Data%\Smartbar\Common\icons\5D0A6D97-85F2-47E9-8F04-04A747B25A0Epress.png
- %Application Data%\Smartbar\Common\iconsWide\5D0A6D97-85F2-47E9-8F04-04A747B25A0Epress.png
- %Application Data%\Smartbar\Common\iconsWide\5F1B269B-7C66-474F-A473-BE7FA51BE5B2.png
- %Application Data%\Smartbar\Common\iconsWide\5F1B269B-7C66-474F-A473-BE7FA51BE5B2hover.png
- %Application Data%\Smartbar\Common\iconsWide\5F1B269B-7C66-474F-A473-BE7FA51BE5B2press.png
- %Application Data%\Smartbar\Common\icons\5F488FA5-C35B-44A9-A0E4-2C7B41035780.png
- %Application Data%\Smartbar\Common\iconsWide\5F488FA5-C35B-44A9-A0E4-2C7B41035780.png
- %Application Data%\Smartbar\Common\icons\5F488FA5-C35B-44A9-A0E4-2C7B41035780hover.png
- %Application Data%\Smartbar\Common\iconsWide\5F488FA5-C35B-44A9-A0E4-2C7B41035780hover.png
- %Application Data%\Smartbar\Common\icons\5F488FA5-C35B-44A9-A0E4-2C7B41035780press.png
- %Application Data%\Smartbar\Common\iconsWide\5F488FA5-C35B-44A9-A0E4-2C7B41035780press.png
- %Application Data%\Smartbar\Common\icons\65B1A402-FC79-410D-AE1C-AF92E206AC1D.png
- %Application Data%\Smartbar\Common\iconsWide\65B1A402-FC79-410D-AE1C-AF92E206AC1D.png
- %Application Data%\Smartbar\Common\icons\65B1A402-FC79-410D-AE1C-AF92E206AC1Dhover.png
- %Application Data%\Smartbar\Common\iconsWide\65B1A402-FC79-410D-AE1C-AF92E206AC1Dhover.png
- %Application Data%\Smartbar\Common\icons\65B1A402-FC79-410D-AE1C-AF92E206AC1Dpress.png
- %Application Data%\Smartbar\Common\iconsWide\65B1A402-FC79-410D-AE1C-AF92E206AC1Dpress.png
- %Application Data%\Smartbar\Common\icons\69C7DFE3-CDAE-4A22-B753-93ABF8BAE7EC.png
- %Application Data%\Smartbar\Common\iconsWide\69C7DFE3-CDAE-4A22-B753-93ABF8BAE7EC.png
- %Application Data%\Smartbar\Common\icons\69C7DFE3-CDAE-4A22-B753-93ABF8BAE7EChover.png
- %Application Data%\Smartbar\Common\iconsWide\69C7DFE3-CDAE-4A22-B753-93ABF8BAE7EChover.png
- %Application Data%\Smartbar\Common\icons\69C7DFE3-CDAE-4A22-B753-93ABF8BAE7ECpress.png
- %Application Data%\Smartbar\Common\iconsWide\69C7DFE3-CDAE-4A22-B753-93ABF8BAE7ECpress.png
- %Application Data%\Smartbar\Common\iconsWide\708d8b1e-6545-474a-9f07-d854acf8ad43.ico
- %Application Data%\Smartbar\Common\icons\708d8b1e-6545-474a-9f07-d854acf8ad43.png
- %Application Data%\Smartbar\Common\iconsWide\708d8b1e-6545-474a-9f07-d854acf8ad43.png
- %Application Data%\Smartbar\Common\icons\708d8b1e-6545-474a-9f07-d854acf8ad43hover.png
- %Application Data%\Smartbar\Common\iconsWide\708d8b1e-6545-474a-9f07-d854acf8ad43hover.png
- %Application Data%\Smartbar\Common\icons\708d8b1e-6545-474a-9f07-d854acf8ad43press.png
- %Application Data%\Smartbar\Common\iconsWide\708d8b1e-6545-474a-9f07-d854acf8ad43press.png
- %Application Data%\Smartbar\Common\icons\70F16DCA-C71C-4ECB-994C-D180F2BBF736.png
- %Application Data%\Smartbar\Common\iconsWide\70F16DCA-C71C-4ECB-994C-D180F2BBF736.png
- %Application Data%\Smartbar\Common\icons\70F16DCA-C71C-4ECB-994C-D180F2BBF736Hover.png
- %Application Data%\Smartbar\Common\iconsWide\70F16DCA-C71C-4ECB-994C-D180F2BBF736Hover.png
- %Application Data%\Smartbar\Common\icons\70F16DCA-C71C-4ECB-994C-D180F2BBF736Press.png
- %Application Data%\Smartbar\Common\iconsWide\70F16DCA-C71C-4ECB-994C-D180F2BBF736Press.png
- %Application Data%\Smartbar\Common\icons\72CDFC8C-6F2D-4df8-9811-18C4D682C406.png
- %Application Data%\Smartbar\Common\iconsWide\72CDFC8C-6F2D-4df8-9811-18C4D682C406.png
- %Application Data%\Smartbar\Common\icons\72CDFC8C-6F2D-4df8-9811-18C4D682C406hover.png
- %Application Data%\Smartbar\Common\iconsWide\72CDFC8C-6F2D-4df8-9811-18C4D682C406hover.png
- %Application Data%\Smartbar\Common\icons\72CDFC8C-6F2D-4df8-9811-18C4D682C406press.png
- %Application Data%\Smartbar\Common\iconsWide\72CDFC8C-6F2D-4df8-9811-18C4D682C406press.png
- %Application Data%\Smartbar\Common\icons\7CF3BACC-BF1C-4860-BB4E-F1A8440250FE.png
- %Application Data%\Smartbar\Common\iconsWide\7CF3BACC-BF1C-4860-BB4E-F1A8440250FE.png
- %Application Data%\Smartbar\Common\icons\7CF3BACC-BF1C-4860-BB4E-F1A8440250FEhover.png
- %Application Data%\Smartbar\Common\iconsWide\7CF3BACC-BF1C-4860-BB4E-F1A8440250FEhover.png
- %Application Data%\Smartbar\Common\icons\7CF3BACC-BF1C-4860-BB4E-F1A8440250FEpress.png
- %Application Data%\Smartbar\Common\iconsWide\7CF3BACC-BF1C-4860-BB4E-F1A8440250FEpress.png
- %Application Data%\Smartbar\Common\iconsWide\7fe83ae9-caef-41f0-aa99-d114c0ce3941.ico
- %Application Data%\Smartbar\Common\icons\7fe83ae9-caef-41f0-aa99-d114c0ce3941.png
- %Application Data%\Smartbar\Common\iconsWide\7fe83ae9-caef-41f0-aa99-d114c0ce3941.png
- %Application Data%\Smartbar\Common\icons\7fe83ae9-caef-41f0-aa99-d114c0ce3941hover.png
- %Application Data%\Smartbar\Common\iconsWide\7fe83ae9-caef-41f0-aa99-d114c0ce3941hover.png
- %Application Data%\Smartbar\Common\icons\7fe83ae9-caef-41f0-aa99-d114c0ce3941press.png
- %Application Data%\Smartbar\Common\iconsWide\7fe83ae9-caef-41f0-aa99-d114c0ce3941press.png
- %Application Data%\Smartbar\Common\iconsWide\8217d395-9ebe-4ebb-807c-38cc911a307f.ico
- %Application Data%\Smartbar\Common\icons\8217d395-9ebe-4ebb-807c-38cc911a307f.png
- %Application Data%\Smartbar\Common\iconsWide\8217d395-9ebe-4ebb-807c-38cc911a307f.png
- %Application Data%\Smartbar\Common\icons\8217d395-9ebe-4ebb-807c-38cc911a307fHover.png
- %Application Data%\Smartbar\Common\iconsWide\8217d395-9ebe-4ebb-807c-38cc911a307fHover.png
- %Application Data%\Smartbar\Common\icons\8217d395-9ebe-4ebb-807c-38cc911a307fPress.png
- %Application Data%\Smartbar\Common\iconsWide\8217d395-9ebe-4ebb-807c-38cc911a307fPress.png
- %Application Data%\Smartbar\Common\icons\83B4B6FE-910D-412E-BED4-E3AFA6E5CA61.png
- %Application Data%\Smartbar\Common\iconsWide\83B4B6FE-910D-412E-BED4-E3AFA6E5CA61.png
- %Application Data%\Smartbar\Common\icons\83B4B6FE-910D-412E-BED4-E3AFA6E5CA61hover.png
- %Application Data%\Smartbar\Common\iconsWide\83B4B6FE-910D-412E-BED4-E3AFA6E5CA61hover.png
- %Application Data%\Smartbar\Common\icons\83B4B6FE-910D-412E-BED4-E3AFA6E5CA61press.png
- %Application Data%\Smartbar\Common\iconsWide\83B4B6FE-910D-412E-BED4-E3AFA6E5CA61press.png
- %Application Data%\Smartbar\Common\icons\85CF6427-8441-427A-859A-7A3C72288481.png
- %Application Data%\Smartbar\Common\iconsWide\85CF6427-8441-427A-859A-7A3C72288481.png
- %Application Data%\Smartbar\Common\icons\85CF6427-8441-427A-859A-7A3C72288481hover.png
- %Application Data%\Smartbar\Common\iconsWide\85CF6427-8441-427A-859A-7A3C72288481hover.png
- %Application Data%\Smartbar\Common\icons\85CF6427-8441-427A-859A-7A3C72288481press.png
- %Application Data%\Smartbar\Common\iconsWide\85CF6427-8441-427A-859A-7A3C72288481press.png
- %Application Data%\Smartbar\Common\icons\87442BEF-FD31-405C-A807-650CB7CC8886.png
- %Application Data%\Smartbar\Common\iconsWide\87442BEF-FD31-405C-A807-650CB7CC8886.png
- %Application Data%\Smartbar\Common\icons\87442BEF-FD31-405C-A807-650CB7CC8886hover.png
- %Application Data%\Smartbar\Common\iconsWide\87442BEF-FD31-405C-A807-650CB7CC8886hover.png
- %Application Data%\Smartbar\Common\icons\87442BEF-FD31-405C-A807-650CB7CC8886press.png
- %Application Data%\Smartbar\Common\iconsWide\87442BEF-FD31-405C-A807-650CB7CC8886press.png
- %Application Data%\Smartbar\Common\iconsWide\89582936-094c-4880-b87a-2af16fc31313.png
- %Application Data%\Smartbar\Common\iconsWide\89582936-094c-4880-b87a-2af16fc31313Hover.png
- %Application Data%\Smartbar\Common\iconsWide\89582936-094c-4880-b87a-2af16fc31313Press.png
- %Application Data%\Smartbar\Common\icons\89582936-094C-4880-B87A-2AF16FC33B2C.png
- %Application Data%\Smartbar\Common\iconsWide\89582936-094C-4880-B87A-2AF16FC33B2C.png
- %Application Data%\Smartbar\Common\icons\89582936-094C-4880-B87A-2AF16FC33B2Chover.png
- %Application Data%\Smartbar\Common\iconsWide\89582936-094C-4880-B87A-2AF16FC33B2Chover.png
- %Application Data%\Smartbar\Common\icons\89582936-094C-4880-B87A-2AF16FC33B2Cpress.png
- %Application Data%\Smartbar\Common\iconsWide\89582936-094C-4880-B87A-2AF16FC33B2Cpress.png
- %Application Data%\Smartbar\Common\icons\8b3608b1-c2d5-4ad3-a382-33601228c6d3.png
- %Application Data%\Smartbar\Common\iconsWide\8b3608b1-c2d5-4ad3-a382-33601228c6d3.png
- %Application Data%\Smartbar\Common\icons\8b3608b1-c2d5-4ad3-a382-33601228c6d3hover.png
- %Application Data%\Smartbar\Common\iconsWide\8b3608b1-c2d5-4ad3-a382-33601228c6d3hover.png
- %Application Data%\Smartbar\Common\icons\8b3608b1-c2d5-4ad3-a382-33601228c6d3press.png
- %Application Data%\Smartbar\Common\iconsWide\8b3608b1-c2d5-4ad3-a382-33601228c6d3press.png
- %Application Data%\Smartbar\Common\iconsWide\8D338D8F-3189-41AB-BCFF-2958D48AAA6A.png
- %Application Data%\Smartbar\Common\iconsWide\8D338D8F-3189-41AB-BCFF-2958D48AAA6AHover.png
- %Application Data%\Smartbar\Common\iconsWide\8D338D8F-3189-41AB-BCFF-2958D48AAA6APress.png
- %Application Data%\Smartbar\Common\icons\8F4131CE-D4F0-4F08-9102-78C397F3748C.png
- %Application Data%\Smartbar\Common\iconsWide\8F4131CE-D4F0-4F08-9102-78C397F3748C.png
- %Application Data%\Smartbar\Common\icons\8F4131CE-D4F0-4F08-9102-78C397F3748CHover.png
- %Application Data%\Smartbar\Common\iconsWide\8F4131CE-D4F0-4F08-9102-78C397F3748CHover.png
- %Application Data%\Smartbar\Common\icons\8F4131CE-D4F0-4F08-9102-78C397F3748CPress.png
- %Application Data%\Smartbar\Common\iconsWide\8F4131CE-D4F0-4F08-9102-78C397F3748CPress.png
- %Application Data%\Smartbar\Common\iconsWide\90165d32-a3ef-438c-8625-be9b538b6eba.ico
- %Application Data%\Smartbar\Common\icons\90165d32-a3ef-438c-8625-be9b538b6eba.png
- %Application Data%\Smartbar\Common\iconsWide\90165d32-a3ef-438c-8625-be9b538b6eba.png
- %Application Data%\Smartbar\Common\icons\90165d32-a3ef-438c-8625-be9b538b6ebaHover.png
- %Application Data%\Smartbar\Common\iconsWide\90165d32-a3ef-438c-8625-be9b538b6ebaHover.png
- %Application Data%\Smartbar\Common\icons\90165d32-a3ef-438c-8625-be9b538b6ebaPress.png
- %Application Data%\Smartbar\Common\iconsWide\90165d32-a3ef-438c-8625-be9b538b6ebaPress.png
- %Application Data%\Smartbar\Common\icons\925D8F0E-E5EA-45F9-A657-0C14B68C4A61.png
- %Application Data%\Smartbar\Common\iconsWide\925D8F0E-E5EA-45F9-A657-0C14B68C4A61.png
- %Application Data%\Smartbar\Common\icons\925D8F0E-E5EA-45F9-A657-0C14B68C4A61hover.png
- %Application Data%\Smartbar\Common\iconsWide\925D8F0E-E5EA-45F9-A657-0C14B68C4A61hover.png
- %User Temp%\ual4en1_.tmp
- %User Temp%\ual4en1_.0.cs
- %User Temp%\ual4en1_.dll
- %User Temp%\ual4en1_.cmdline
- %User Temp%\ual4en1_.out
- %User Temp%\ual4en1_.err
- %User Profile%\MetaData\A44F4E7CB3133FF765C39A53AD8FCFDD
- %User Profile%\Content\A44F4E7CB3133FF765C39A53AD8FCFDD
- %User Temp%\yfobqe29.tmp
- %User Temp%\yfobqe29.0.cs
- %User Temp%\yfobqe29.dll
- %User Temp%\yfobqe29.cmdline
- %User Temp%\yfobqe29.out
- %User Temp%\yfobqe29.err
- %Windows%\Microsoft.NET\Framework\v2.0.50727\config\security.config.cch.new
- %User Profile%\v2.0.50727.42\security.config.cch.new
- %Windows%\Microsoft.NET\Framework\v2.0.50727\config\enterprisesec.config.cch.new
- %User Temp%\CSC58.tmp
- %User Temp%\RES5B.tmp
- %User Temp%\CSC67.tmp
- %User Temp%\RES6A.tmp
Step 6
Search and delete these folders
- %User Profile%\CryptnetUrlCache\MetaData
- %User Profile%\Microsoft\CryptnetUrlCache
- %User Profile%\CryptnetUrlCache\Content
- %User Temp%\Smartbar
- %System Root%\MSI244a1.tmp
- %System Root%\Config.Msi
- %Application Data%\Smartbar
- %Application Data%\Smartbar\Common
- %Application Data%\Smartbar\Common\icons
- %Application Data%\Smartbar\Common\iconsWide
- %Windows%\Installer\MSI24.tmp-
- %System Root%\Documents and Settings\Wilbert
- %User Profile%\Microsoft\CLR Security Config
- %User Profile%\CLR Security Config\v2.0.50727.42
- %Windows%\Installer\MSI77.tmp-
Step 7
Scan your computer with your Trend Micro product to delete files detected as ADW_LINKOREE. If the detected files have already been cleaned, deleted, or quarantined by your Trend Micro product, no further step is required. You may opt to simply delete the quarantined files. Please check this Knowledge Base page for more information.
Step 8
Restore this file from backup only Microsoft-related files will be restored. If this malware/grayware also deleted files related to programs that are not from Microsoft, please reinstall those programs on you computer again.
- %User Temp%\rovic-61.pdb
- %Windows%\Installer\MSI24.tmp
- %Windows%\Installer\MSI77.tmp
- %System Root%\Config.Msi\MSIA7.tmp
- %User Temp%\ual4en1_.pdb
- %User Temp%\yfobqe29.pdb
- %Windows%\Installer\MSI24.tmp-\CustomAction.config
- %Windows%\Installer\MSI24.tmp-\Interop.NetFwTypeLib.dll
- %Windows%\Installer\MSI24.tmp-\Interop.SHDocVw.dll
- %Windows%\Installer\MSI24.tmp-\MACTrackBarLib.dll
- %Windows%\Installer\MSI24.tmp-\Microsoft.Deployment.WindowsInstaller.dll
- %Windows%\Installer\MSI24.tmp-\Microsoft.Practices.EnterpriseLibrary.Common.dll
- %Windows%\Installer\MSI24.tmp-\Microsoft.Practices.EnterpriseLibrary.ExceptionHandling.dll
- %Windows%\Installer\MSI24.tmp-\Microsoft.Practices.EnterpriseLibrary.ExceptionHandling.Logging.dll
- %Windows%\Installer\MSI24.tmp-\Microsoft.Practices.EnterpriseLibrary.Logging.dll
- %Windows%\Installer\MSI24.tmp-\Microsoft.Practices.ObjectBuilder.dll
- %Windows%\Installer\MSI24.tmp-\Newtonsoft.Json.dll
- %Windows%\Installer\MSI24.tmp-\RegAsm.exe
- %Windows%\Installer\MSI24.tmp-\siem.dll
- %Windows%\Installer\MSI24.tmp-\sipb.dll
- %Windows%\Installer\MSI24.tmp-\sismlp.dll
- %Windows%\Installer\MSI24.tmp-\Smartbar.GUI.Controls.dll
- %Windows%\Installer\MSI24.tmp-\Smartbar.GUI.Docking.dll
- %Windows%\Installer\MSI24.tmp-\Smartbar.Infrastructure.BusinessEntities.dll
- %Windows%\Installer\MSI24.tmp-\Smartbar.Infrastructure.Utilities.dll
- %Windows%\Installer\MSI24.tmp-\Smartbar.Installer.CustomActions.dll
- %Windows%\Installer\MSI24.tmp-\Smartbar.Personalization.Common.dll
- %Windows%\Installer\MSI24.tmp-\Smartbar.Resources.HistoryAndStatsWrapper.dll
- %Windows%\Installer\MSI24.tmp-\Smartbar.Resources.HistoryAndStatsWrapper.XmlSerializers.dll
- %Windows%\Installer\MSI24.tmp-\Smartbar.Resources.LanguageSettings.dll
- %Windows%\Installer\MSI24.tmp-\Smartbar.Resources.LanguageSettings.resources.dll
- %Windows%\Installer\MSI24.tmp-\Smartbar.Resources.SocialNetsSharer.dll
- %Windows%\Installer\MSI24.tmp-\Smartbar.Resources.SocialNetsSharer.XmlSerializers.dll
- %Windows%\Installer\MSI24.tmp-\Smartbar.Resources.Translations.dll
- %Windows%\Installer\MSI24.tmp-\spbe.dll
- %Windows%\Installer\MSI24.tmp-\spbl.dll
- %Windows%\Installer\MSI24.tmp-\sppsm.dll
- %Windows%\Installer\MSI24.tmp-\spsm.dll
- %Windows%\Installer\MSI24.tmp-\spusm.dll
- %Windows%\Installer\MSI24.tmp-\srbhu.dll
- %Windows%\Installer\MSI24.tmp-\srbs.dll
- %Windows%\Installer\MSI24.tmp-\srns.dll
- %Windows%\Installer\MSI24.tmp-\srpdm.dll
- %Windows%\Installer\MSI24.tmp-\srprl.dll
- %Windows%\Installer\MSI24.tmp-\srpu.dll
- %Windows%\Installer\MSI24.tmp-\srsbs.dll
- %Windows%\Installer\MSI24.tmp-\srsl.dll
- %Windows%\Installer\MSI24.tmp-\srus.dll
- %Windows%\Installer\MSI24.tmp-\srut.dll
- %Windows%\Installer\MSI77.tmp-\CustomAction.config
- %Windows%\Installer\MSI77.tmp-\Interop.NetFwTypeLib.dll
- %Windows%\Installer\MSI77.tmp-\Interop.SHDocVw.dll
- %Windows%\Installer\MSI77.tmp-\MACTrackBarLib.dll
- %Windows%\Installer\MSI77.tmp-\Microsoft.Deployment.WindowsInstaller.dll
- %Windows%\Installer\MSI77.tmp-\Microsoft.Practices.EnterpriseLibrary.Common.dll
- %Windows%\Installer\MSI77.tmp-\Microsoft.Practices.EnterpriseLibrary.ExceptionHandling.dll
- %Windows%\Installer\MSI77.tmp-\Microsoft.Practices.EnterpriseLibrary.ExceptionHandling.Logging.dll
- %Windows%\Installer\MSI77.tmp-\Microsoft.Practices.EnterpriseLibrary.Logging.dll
- %Windows%\Installer\MSI77.tmp-\Microsoft.Practices.ObjectBuilder.dll
- %Windows%\Installer\MSI77.tmp-\Newtonsoft.Json.dll
- %Windows%\Installer\MSI77.tmp-\RegAsm.exe
- %Windows%\Installer\MSI77.tmp-\siem.dll
- %Windows%\Installer\MSI77.tmp-\sipb.dll
- %Windows%\Installer\MSI77.tmp-\sismlp.dll
- %Windows%\Installer\MSI77.tmp-\Smartbar.GUI.Controls.dll
- %Windows%\Installer\MSI77.tmp-\Smartbar.GUI.Docking.dll
- %Windows%\Installer\MSI77.tmp-\Smartbar.Infrastructure.BusinessEntities.dll
- %Windows%\Installer\MSI77.tmp-\Smartbar.Infrastructure.Utilities.dll
- %Windows%\Installer\MSI77.tmp-\Smartbar.Installer.CustomActions.dll
- %Windows%\Installer\MSI77.tmp-\Smartbar.Personalization.Common.dll
- %Windows%\Installer\MSI77.tmp-\Smartbar.Resources.HistoryAndStatsWrapper.dll
- %Windows%\Installer\MSI77.tmp-\Smartbar.Resources.HistoryAndStatsWrapper.XmlSerializers.dll
- %Windows%\Installer\MSI77.tmp-\Smartbar.Resources.LanguageSettings.dll
- %Windows%\Installer\MSI77.tmp-\Smartbar.Resources.LanguageSettings.resources.dll
- %Windows%\Installer\MSI77.tmp-\Smartbar.Resources.SocialNetsSharer.dll
- %Windows%\Installer\MSI77.tmp-\Smartbar.Resources.SocialNetsSharer.XmlSerializers.dll
- %Windows%\Installer\MSI77.tmp-\Smartbar.Resources.Translations.dll
- %Windows%\Installer\MSI77.tmp-\spbe.dll
- %Windows%\Installer\MSI77.tmp-\spbl.dll
- %Windows%\Installer\MSI77.tmp-\sppsm.dll
- %Windows%\Installer\MSI77.tmp-\spsm.dll
- %Windows%\Installer\MSI77.tmp-\spusm.dll
- %Windows%\Installer\MSI77.tmp-\srbhu.dll
- %Windows%\Installer\MSI77.tmp-\srbs.dll
- %Windows%\Installer\MSI77.tmp-\srns.dll
- %Windows%\Installer\MSI77.tmp-\srpdm.dll
- %Windows%\Installer\MSI77.tmp-\srprl.dll
- %Windows%\Installer\MSI77.tmp-\srpu.dll
- %Windows%\Installer\MSI77.tmp-\srsbs.dll
- %Windows%\Installer\MSI77.tmp-\srsl.dll
- %Windows%\Installer\MSI77.tmp-\srus.dll
- %Windows%\Installer\MSI77.tmp-\srut.dll
Did this description help? Tell us how we did.