TROJ_FAKEAV.MNH

This Trojan arrives on a system as a file dropped by other malware or as a file downloaded unknowingly by users when visiting malicious sites.

It deletes itself after execution.

Arrival Details

This Trojan arrives on a system as a file dropped by other malware or as a file downloaded unknowingly by users when visiting malicious sites.

Other System Modifications

This Trojan modifies the following file(s):

• %Application Data%\GDIPFONTCACHEV1.DAT

(Note: %Application Data% is the current user's Application Data folder, which is usually C:\Documents and Settings\{user name}\Application Data on Windows 2000, XP, and Server 2003, or C:\Users\{user name}\AppData\Roaming on Windows Vista and 7.)

It adds the following registry keys:

HKEY_CURRENT_USER\.exe

HKEY_CURRENT_USER\.exe\DefaultIcon

HKEY_CURRENT_USER\.exe\shell

HKEY_CURRENT_USER\.exe\shell\
open

HKEY_CURRENT_USER\.exe\shell\
open\command

HKEY_CURRENT_USER\.exe\shell\
runas

HKEY_CURRENT_USER\.exe\shell\
runas\command

HKEY_CURRENT_USER\Q34

HKEY_CURRENT_USER\Q34\DefaultIcon

HKEY_CURRENT_USER\Q34\shell

HKEY_CURRENT_USER\Q34\shell\
open

HKEY_CURRENT_USER\Q34\shell\
open\command

HKEY_CURRENT_USER\Q34\shell\
runas

HKEY_CURRENT_USER\Q34\shell\
runas\command

HKEY_CURRENT_USER\aY

HKEY_CURRENT_USER\aY\DefaultIcon

HKEY_CURRENT_USER\aY\shell

HKEY_CURRENT_USER\aY\shell\
open

HKEY_CURRENT_USER\aY\shell\
open\command

HKEY_CURRENT_USER\aY\shell\
runas

HKEY_CURRENT_USER\aY\shell\
runas\command

HKEY_CURRENT_USER\y6g

HKEY_CURRENT_USER\y6g\DefaultIcon

HKEY_CURRENT_USER\y6g\shell

HKEY_CURRENT_USER\y6g\shell\
open

HKEY_CURRENT_USER\y6g\shell\
open\command

HKEY_CURRENT_USER\y6g\shell\
runas

HKEY_CURRENT_USER\y6g\shell\
runas\command

HKEY_CURRENT_USER\3l

HKEY_CURRENT_USER\3l\DefaultIcon

HKEY_CURRENT_USER\3l\shell

HKEY_CURRENT_USER\3l\shell\
open

HKEY_CURRENT_USER\3l\shell\
open\command

HKEY_CURRENT_USER\3l\shell\
runas

HKEY_CURRENT_USER\3l\shell\
runas\command

HKEY_CURRENT_USER\XE

HKEY_CURRENT_USER\XE\DefaultIcon

HKEY_CURRENT_USER\XE\shell

HKEY_CURRENT_USER\XE\shell\
open

HKEY_CURRENT_USER\XE\shell\
open\command

HKEY_CURRENT_USER\XE\shell\
runas

HKEY_CURRENT_USER\XE\shell\
runas\command

HKEY_CURRENT_USER\0cL

HKEY_CURRENT_USER\0cL\DefaultIcon

HKEY_CURRENT_USER\0cL\shell

HKEY_CURRENT_USER\0cL\shell\
open

HKEY_CURRENT_USER\0cL\shell\
open\command

HKEY_CURRENT_USER\0cL\shell\
runas

HKEY_CURRENT_USER\0cL\shell\
runas\command

HKEY_CURRENT_USER\dcQ

HKEY_CURRENT_USER\dcQ\DefaultIcon

HKEY_CURRENT_USER\dcQ\shell

HKEY_CURRENT_USER\dcQ\shell\
open

HKEY_CURRENT_USER\dcQ\shell\
open\command

HKEY_CURRENT_USER\dcQ\shell\
runas

HKEY_CURRENT_USER\dcQ\shell\
runas\command

HKEY_CURRENT_USER\5AO

HKEY_CURRENT_USER\5AO\DefaultIcon

HKEY_CURRENT_USER\5AO\shell

HKEY_CURRENT_USER\5AO\shell\
open

HKEY_CURRENT_USER\5AO\shell\
open\command

HKEY_CURRENT_USER\5AO\shell\
runas

HKEY_CURRENT_USER\5AO\shell\
runas\command

HKEY_CURRENT_USER\2E

HKEY_CURRENT_USER\2E\DefaultIcon

HKEY_CURRENT_USER\2E\shell

HKEY_CURRENT_USER\2E\shell\
open

HKEY_CURRENT_USER\2E\shell\
open\command

HKEY_CURRENT_USER\2E\shell\
runas

HKEY_CURRENT_USER\2E\shell\
runas\command

HKEY_CURRENT_USER\Da

HKEY_CURRENT_USER\Da\DefaultIcon

HKEY_CURRENT_USER\Da\shell

HKEY_CURRENT_USER\Da\shell\
open

HKEY_CURRENT_USER\Da\shell\
open\command

HKEY_CURRENT_USER\Da\shell\
runas

HKEY_CURRENT_USER\Da\shell\
runas\command

HKEY_CURRENT_USER\dG

HKEY_CURRENT_USER\dG\DefaultIcon

HKEY_CURRENT_USER\dG\shell

HKEY_CURRENT_USER\dG\shell\
open

HKEY_CURRENT_USER\dG\shell\
open\command

HKEY_CURRENT_USER\dG\shell\
runas

HKEY_CURRENT_USER\dG\shell\
runas\command

HKEY_CURRENT_USER\yc

HKEY_CURRENT_USER\yc\DefaultIcon

HKEY_CURRENT_USER\yc\shell

HKEY_CURRENT_USER\yc\shell\
open

HKEY_CURRENT_USER\yc\shell\
open\command

HKEY_CURRENT_USER\yc\shell\
runas

HKEY_CURRENT_USER\yc\shell\
runas\command

HKEY_CURRENT_USER\er

HKEY_CURRENT_USER\er\DefaultIcon

HKEY_CURRENT_USER\er\shell

HKEY_CURRENT_USER\er\shell\
open

HKEY_CURRENT_USER\er\shell\
open\command

HKEY_CURRENT_USER\er\shell\
runas

HKEY_CURRENT_USER\er\shell\
runas\command

HKEY_CURRENT_USER\a7

HKEY_CURRENT_USER\a7\DefaultIcon

HKEY_CURRENT_USER\a7\shell

HKEY_CURRENT_USER\a7\shell\
open

HKEY_CURRENT_USER\a7\shell\
open\command

HKEY_CURRENT_USER\a7\shell\
runas

HKEY_CURRENT_USER\a7\shell\
runas\command

HKEY_CURRENT_USER\4Jy

HKEY_CURRENT_USER\4Jy\DefaultIcon

HKEY_CURRENT_USER\4Jy\shell

HKEY_CURRENT_USER\4Jy\shell\
open

HKEY_CURRENT_USER\4Jy\shell\
open\command

HKEY_CURRENT_USER\4Jy\shell\
runas

HKEY_CURRENT_USER\4Jy\shell\
runas\command

HKEY_CURRENT_USER\85

HKEY_CURRENT_USER\85\DefaultIcon

HKEY_CURRENT_USER\85\shell

HKEY_CURRENT_USER\85\shell\
open

HKEY_CURRENT_USER\85\shell\
open\command

HKEY_CURRENT_USER\85\shell\
runas

HKEY_CURRENT_USER\85\shell\
runas\command

HKEY_CURRENT_USER\o0v

HKEY_CURRENT_USER\o0v\DefaultIcon

HKEY_CURRENT_USER\o0v\shell

HKEY_CURRENT_USER\o0v\shell\
open

HKEY_CURRENT_USER\o0v\shell\
open\command

HKEY_CURRENT_USER\o0v\shell\
runas

HKEY_CURRENT_USER\o0v\shell\
runas\command

HKEY_CURRENT_USER\d3

HKEY_CURRENT_USER\d3\DefaultIcon

HKEY_CURRENT_USER\d3\shell

HKEY_CURRENT_USER\d3\shell\
open

HKEY_CURRENT_USER\d3\shell\
open\command

HKEY_CURRENT_USER\d3\shell\
runas

HKEY_CURRENT_USER\d3\shell\
runas\command

HKEY_CURRENT_USER\lMD

HKEY_CURRENT_USER\lMD\DefaultIcon

HKEY_CURRENT_USER\lMD\shell

HKEY_CURRENT_USER\lMD\shell\
open

HKEY_CURRENT_USER\lMD\shell\
open\command

HKEY_CURRENT_USER\lMD\shell\
runas

HKEY_CURRENT_USER\lMD\shell\
runas\command

HKEY_CURRENT_USER\04V

HKEY_CURRENT_USER\04V\DefaultIcon

HKEY_CURRENT_USER\04V\shell

HKEY_CURRENT_USER\04V\shell\
open

HKEY_CURRENT_USER\04V\shell\
open\command

HKEY_CURRENT_USER\04V\shell\
runas

HKEY_CURRENT_USER\04V\shell\
runas\command

HKEY_CURRENT_USER\y5

HKEY_CURRENT_USER\y5\DefaultIcon

HKEY_CURRENT_USER\y5\shell

HKEY_CURRENT_USER\y5\shell\
open

HKEY_CURRENT_USER\y5\shell\
open\command

HKEY_CURRENT_USER\y5\shell\
runas

HKEY_CURRENT_USER\y5\shell\
runas\command

HKEY_CURRENT_USER\8B5

HKEY_CURRENT_USER\8B5\DefaultIcon

HKEY_CURRENT_USER\8B5\shell

HKEY_CURRENT_USER\8B5\shell\
open

HKEY_CURRENT_USER\8B5\shell\
open\command

HKEY_CURRENT_USER\8B5\shell\
runas

HKEY_CURRENT_USER\8B5\shell\
runas\command

HKEY_CURRENT_USER\27j

HKEY_CURRENT_USER\27j\DefaultIcon

HKEY_CURRENT_USER\27j\shell

HKEY_CURRENT_USER\27j\shell\
open

HKEY_CURRENT_USER\27j\shell\
open\command

HKEY_CURRENT_USER\27j\shell\
runas

HKEY_CURRENT_USER\27j\shell\
runas\command

HKEY_CURRENT_USER\d03

HKEY_CURRENT_USER\d03\DefaultIcon

HKEY_CURRENT_USER\d03\shell

HKEY_CURRENT_USER\d03\shell\
open

HKEY_CURRENT_USER\d03\shell\
open\command

HKEY_CURRENT_USER\d03\shell\
runas

HKEY_CURRENT_USER\d03\shell\
runas\command

HKEY_CURRENT_USER\yT

HKEY_CURRENT_USER\yT\DefaultIcon

HKEY_CURRENT_USER\yT\shell

HKEY_CURRENT_USER\yT\shell\
open

HKEY_CURRENT_USER\yT\shell\
open\command

HKEY_CURRENT_USER\yT\shell\
runas

HKEY_CURRENT_USER\yT\shell\
runas\command

HKEY_CURRENT_USER\UYD

HKEY_CURRENT_USER\UYD\DefaultIcon

HKEY_CURRENT_USER\UYD\shell

HKEY_CURRENT_USER\UYD\shell\
open

HKEY_CURRENT_USER\UYD\shell\
open\command

HKEY_CURRENT_USER\UYD\shell\
runas

HKEY_CURRENT_USER\UYD\shell\
runas\command

HKEY_CURRENT_USER\WY0

HKEY_CURRENT_USER\WY0\DefaultIcon

HKEY_CURRENT_USER\WY0\shell

HKEY_CURRENT_USER\WY0\shell\
open

HKEY_CURRENT_USER\WY0\shell\
open\command

HKEY_CURRENT_USER\WY0\shell\
runas

HKEY_CURRENT_USER\WY0\shell\
runas\command

HKEY_CURRENT_USER\l7c

HKEY_CURRENT_USER\l7c\DefaultIcon

HKEY_CURRENT_USER\l7c\shell

HKEY_CURRENT_USER\l7c\shell\
open

HKEY_CURRENT_USER\l7c\shell\
open\command

HKEY_CURRENT_USER\l7c\shell\
runas

HKEY_CURRENT_USER\l7c\shell\
runas\command

HKEY_CURRENT_USER\l2

HKEY_CURRENT_USER\l2\DefaultIcon

HKEY_CURRENT_USER\l2\shell

HKEY_CURRENT_USER\l2\shell\
open

HKEY_CURRENT_USER\l2\shell\
open\command

HKEY_CURRENT_USER\l2\shell\
runas

HKEY_CURRENT_USER\l2\shell\
runas\command

HKEY_CURRENT_USER\d0

HKEY_CURRENT_USER\d0\DefaultIcon

HKEY_CURRENT_USER\d0\shell

HKEY_CURRENT_USER\d0\shell\
open

HKEY_CURRENT_USER\d0\shell\
open\command

HKEY_CURRENT_USER\d0\shell\
runas

HKEY_CURRENT_USER\d0\shell\
runas\command

HKEY_CURRENT_USER\FcJ

HKEY_CURRENT_USER\FcJ\DefaultIcon

HKEY_CURRENT_USER\FcJ\shell

HKEY_CURRENT_USER\FcJ\shell\
open

HKEY_CURRENT_USER\FcJ\shell\
open\command

HKEY_CURRENT_USER\FcJ\shell\
runas

HKEY_CURRENT_USER\FcJ\shell\
runas\command

HKEY_CURRENT_USER\ira

HKEY_CURRENT_USER\ira\DefaultIcon

HKEY_CURRENT_USER\ira\shell

HKEY_CURRENT_USER\ira\shell\
open

HKEY_CURRENT_USER\ira\shell\
open\command

HKEY_CURRENT_USER\ira\shell\
runas

HKEY_CURRENT_USER\ira\shell\
runas\command

HKEY_CURRENT_USER\B3

HKEY_CURRENT_USER\B3\DefaultIcon

HKEY_CURRENT_USER\B3\shell

HKEY_CURRENT_USER\B3\shell\
open

HKEY_CURRENT_USER\B3\shell\
open\command

HKEY_CURRENT_USER\B3\shell\
runas

HKEY_CURRENT_USER\B3\shell\
runas\command

HKEY_CURRENT_USER\3E

HKEY_CURRENT_USER\3E\DefaultIcon

HKEY_CURRENT_USER\3E\shell

HKEY_CURRENT_USER\3E\shell\
open

HKEY_CURRENT_USER\3E\shell\
open\command

HKEY_CURRENT_USER\3E\shell\
runas

HKEY_CURRENT_USER\3E\shell\
runas\command

HKEY_CURRENT_USER\q0F

HKEY_CURRENT_USER\q0F\DefaultIcon

HKEY_CURRENT_USER\q0F\shell

HKEY_CURRENT_USER\q0F\shell\
open

HKEY_CURRENT_USER\q0F\shell\
open\command

HKEY_CURRENT_USER\q0F\shell\
runas

HKEY_CURRENT_USER\q0F\shell\
runas\command

HKEY_CURRENT_USER\7C

HKEY_CURRENT_USER\7C\DefaultIcon

HKEY_CURRENT_USER\7C\shell

HKEY_CURRENT_USER\7C\shell\
open

HKEY_CURRENT_USER\7C\shell\
open\command

HKEY_CURRENT_USER\7C\shell\
runas

HKEY_CURRENT_USER\7C\shell\
runas\command

HKEY_CURRENT_USER\QL2

HKEY_CURRENT_USER\QL2\DefaultIcon

HKEY_CURRENT_USER\QL2\shell

HKEY_CURRENT_USER\QL2\shell\
open

HKEY_CURRENT_USER\QL2\shell\
open\command

HKEY_CURRENT_USER\QL2\shell\
runas

HKEY_CURRENT_USER\QL2\shell\
runas\command

HKEY_CURRENT_USER\f5t

HKEY_CURRENT_USER\f5t\DefaultIcon

HKEY_CURRENT_USER\f5t\shell

HKEY_CURRENT_USER\f5t\shell\
open

HKEY_CURRENT_USER\f5t\shell\
open\command

HKEY_CURRENT_USER\f5t\shell\
runas

HKEY_CURRENT_USER\f5t\shell\
runas\command

HKEY_CURRENT_USER\cmp

HKEY_CURRENT_USER\cmp\DefaultIcon

HKEY_CURRENT_USER\cmp\shell

HKEY_CURRENT_USER\cmp\shell\
open

HKEY_CURRENT_USER\cmp\shell\
open\command

HKEY_CURRENT_USER\cmp\shell\
runas

HKEY_CURRENT_USER\cmp\shell\
runas\command

HKEY_CURRENT_USER\bg

HKEY_CURRENT_USER\bg\DefaultIcon

HKEY_CURRENT_USER\bg\shell

HKEY_CURRENT_USER\bg\shell\
open

HKEY_CURRENT_USER\bg\shell\
open\command

HKEY_CURRENT_USER\bg\shell\
runas

HKEY_CURRENT_USER\bg\shell\
runas\command

HKEY_CURRENT_USER\Q0

HKEY_CURRENT_USER\Q0\DefaultIcon

HKEY_CURRENT_USER\Q0\shell

HKEY_CURRENT_USER\Q0\shell\
open

HKEY_CURRENT_USER\Q0\shell\
open\command

HKEY_CURRENT_USER\Q0\shell\
runas

HKEY_CURRENT_USER\Q0\shell\
runas\command

HKEY_CURRENT_USER\rx0

HKEY_CURRENT_USER\rx0\DefaultIcon

HKEY_CURRENT_USER\rx0\shell

HKEY_CURRENT_USER\rx0\shell\
open

HKEY_CURRENT_USER\rx0\shell\
open\command

HKEY_CURRENT_USER\rx0\shell\
runas

HKEY_CURRENT_USER\rx0\shell\
runas\command

HKEY_CURRENT_USER\u60

HKEY_CURRENT_USER\u60\DefaultIcon

HKEY_CURRENT_USER\u60\shell

HKEY_CURRENT_USER\u60\shell\
open

HKEY_CURRENT_USER\u60\shell\
open\command

HKEY_CURRENT_USER\u60\shell\
runas

HKEY_CURRENT_USER\u60\shell\
runas\command

HKEY_CURRENT_USER\767

HKEY_CURRENT_USER\767\DefaultIcon

HKEY_CURRENT_USER\767\shell

HKEY_CURRENT_USER\767\shell\
open

HKEY_CURRENT_USER\767\shell\
open\command

HKEY_CURRENT_USER\767\shell\
runas

HKEY_CURRENT_USER\767\shell\
runas\command

HKEY_CURRENT_USER\8Ya

HKEY_CURRENT_USER\8Ya\DefaultIcon

HKEY_CURRENT_USER\8Ya\shell

HKEY_CURRENT_USER\8Ya\shell\
open

HKEY_CURRENT_USER\8Ya\shell\
open\command

HKEY_CURRENT_USER\8Ya\shell\
runas

HKEY_CURRENT_USER\8Ya\shell\
runas\command

HKEY_CURRENT_USER\VN

HKEY_CURRENT_USER\VN\DefaultIcon

HKEY_CURRENT_USER\VN\shell

HKEY_CURRENT_USER\VN\shell\
open

HKEY_CURRENT_USER\VN\shell\
open\command

HKEY_CURRENT_USER\VN\shell\
runas

HKEY_CURRENT_USER\VN\shell\
runas\command

HKEY_CURRENT_USER\63

HKEY_CURRENT_USER\63\DefaultIcon

HKEY_CURRENT_USER\63\shell

HKEY_CURRENT_USER\63\shell\
open

HKEY_CURRENT_USER\63\shell\
open\command

HKEY_CURRENT_USER\63\shell\
runas

HKEY_CURRENT_USER\63\shell\
runas\command

HKEY_CURRENT_USER\2Gc

HKEY_CURRENT_USER\2Gc\DefaultIcon

HKEY_CURRENT_USER\2Gc\shell

HKEY_CURRENT_USER\2Gc\shell\
open

HKEY_CURRENT_USER\2Gc\shell\
open\command

HKEY_CURRENT_USER\2Gc\shell\
runas

HKEY_CURRENT_USER\2Gc\shell\
runas\command

HKEY_CURRENT_USER\7HQ

HKEY_CURRENT_USER\7HQ\DefaultIcon

HKEY_CURRENT_USER\7HQ\shell

HKEY_CURRENT_USER\7HQ\shell\
open

HKEY_CURRENT_USER\7HQ\shell\
open\command

HKEY_CURRENT_USER\7HQ\shell\
runas

HKEY_CURRENT_USER\7HQ\shell\
runas\command

HKEY_CURRENT_USER\gB3

HKEY_CURRENT_USER\gB3\DefaultIcon

HKEY_CURRENT_USER\gB3\shell

HKEY_CURRENT_USER\gB3\shell\
open

HKEY_CURRENT_USER\gB3\shell\
open\command

HKEY_CURRENT_USER\gB3\shell\
runas

HKEY_CURRENT_USER\gB3\shell\
runas\command

HKEY_CURRENT_USER\45

HKEY_CURRENT_USER\45\DefaultIcon

HKEY_CURRENT_USER\45\shell

HKEY_CURRENT_USER\45\shell\
open

HKEY_CURRENT_USER\45\shell\
open\command

HKEY_CURRENT_USER\45\shell\
runas

HKEY_CURRENT_USER\45\shell\
runas\command

HKEY_CURRENT_USER\dM1

HKEY_CURRENT_USER\dM1\DefaultIcon

HKEY_CURRENT_USER\dM1\shell

HKEY_CURRENT_USER\dM1\shell\
open

HKEY_CURRENT_USER\dM1\shell\
open\command

HKEY_CURRENT_USER\dM1\shell\
runas

HKEY_CURRENT_USER\dM1\shell\
runas\command

HKEY_CURRENT_USER\31

HKEY_CURRENT_USER\31\DefaultIcon

HKEY_CURRENT_USER\31\shell

HKEY_CURRENT_USER\31\shell\
open

HKEY_CURRENT_USER\31\shell\
open\command

HKEY_CURRENT_USER\31\shell\
runas

HKEY_CURRENT_USER\31\shell\
runas\command

HKEY_CURRENT_USER\VSA

HKEY_CURRENT_USER\VSA\DefaultIcon

HKEY_CURRENT_USER\VSA\shell

HKEY_CURRENT_USER\VSA\shell\
open

HKEY_CURRENT_USER\VSA\shell\
open\command

HKEY_CURRENT_USER\VSA\shell\
runas

HKEY_CURRENT_USER\VSA\shell\
runas\command

HKEY_CURRENT_USER\nm

HKEY_CURRENT_USER\nm\DefaultIcon

HKEY_CURRENT_USER\nm\shell

HKEY_CURRENT_USER\nm\shell\
open

HKEY_CURRENT_USER\nm\shell\
open\command

HKEY_CURRENT_USER\nm\shell\
runas

HKEY_CURRENT_USER\nm\shell\
runas\command

HKEY_CURRENT_USER\j3T

HKEY_CURRENT_USER\j3T\DefaultIcon

HKEY_CURRENT_USER\j3T\shell

HKEY_CURRENT_USER\j3T\shell\
open

HKEY_CURRENT_USER\j3T\shell\
open\command

HKEY_CURRENT_USER\j3T\shell\
runas

HKEY_CURRENT_USER\j3T\shell\
runas\command

HKEY_CURRENT_USER\t7D

HKEY_CURRENT_USER\t7D\DefaultIcon

HKEY_CURRENT_USER\t7D\shell

HKEY_CURRENT_USER\t7D\shell\
open

HKEY_CURRENT_USER\t7D\shell\
open\command

HKEY_CURRENT_USER\t7D\shell\
runas

HKEY_CURRENT_USER\t7D\shell\
runas\command

HKEY_CURRENT_USER\nd

HKEY_CURRENT_USER\nd\DefaultIcon

HKEY_CURRENT_USER\nd\shell

HKEY_CURRENT_USER\nd\shell\
open

HKEY_CURRENT_USER\nd\shell\
open\command

HKEY_CURRENT_USER\nd\shell\
runas

HKEY_CURRENT_USER\nd\shell\
runas\command

HKEY_CURRENT_USER\UD8

HKEY_CURRENT_USER\UD8\DefaultIcon

HKEY_CURRENT_USER\UD8\shell

HKEY_CURRENT_USER\UD8\shell\
open

HKEY_CURRENT_USER\UD8\shell\
open\command

HKEY_CURRENT_USER\UD8\shell\
runas

HKEY_CURRENT_USER\UD8\shell\
runas\command

HKEY_CURRENT_USER\R61

HKEY_CURRENT_USER\R61\DefaultIcon

HKEY_CURRENT_USER\R61\shell

HKEY_CURRENT_USER\R61\shell\
open

HKEY_CURRENT_USER\R61\shell\
open\command

HKEY_CURRENT_USER\R61\shell\
runas

HKEY_CURRENT_USER\R61\shell\
runas\command

HKEY_CURRENT_USER\7kW

HKEY_CURRENT_USER\7kW\DefaultIcon

HKEY_CURRENT_USER\7kW\shell

HKEY_CURRENT_USER\7kW\shell\
open

HKEY_CURRENT_USER\7kW\shell\
open\command

HKEY_CURRENT_USER\7kW\shell\
runas

HKEY_CURRENT_USER\7kW\shell\
runas\command

HKEY_CURRENT_USER\r71

HKEY_CURRENT_USER\r71\DefaultIcon

HKEY_CURRENT_USER\r71\shell

HKEY_CURRENT_USER\r71\shell\
open

HKEY_CURRENT_USER\r71\shell\
open\command

HKEY_CURRENT_USER\r71\shell\
runas

HKEY_CURRENT_USER\r71\shell\
runas\command

HKEY_CURRENT_USER\t0f

HKEY_CURRENT_USER\t0f\DefaultIcon

HKEY_CURRENT_USER\t0f\shell

HKEY_CURRENT_USER\t0f\shell\
open

HKEY_CURRENT_USER\t0f\shell\
open\command

HKEY_CURRENT_USER\t0f\shell\
runas

HKEY_CURRENT_USER\t0f\shell\
runas\command

HKEY_CURRENT_USER\6hq

HKEY_CURRENT_USER\6hq\DefaultIcon

HKEY_CURRENT_USER\6hq\shell

HKEY_CURRENT_USER\6hq\shell\
open

HKEY_CURRENT_USER\6hq\shell\
open\command

HKEY_CURRENT_USER\6hq\shell\
runas

HKEY_CURRENT_USER\6hq\shell\
runas\command

HKEY_CURRENT_USER\Cd0

HKEY_CURRENT_USER\Cd0\DefaultIcon

HKEY_CURRENT_USER\Cd0\shell

HKEY_CURRENT_USER\Cd0\shell\
open

HKEY_CURRENT_USER\Cd0\shell\
open\command

HKEY_CURRENT_USER\Cd0\shell\
runas

HKEY_CURRENT_USER\Cd0\shell\
runas\command

HKEY_CURRENT_USER\6MB

HKEY_CURRENT_USER\6MB\DefaultIcon

HKEY_CURRENT_USER\6MB\shell

HKEY_CURRENT_USER\6MB\shell\
open

HKEY_CURRENT_USER\6MB\shell\
open\command

HKEY_CURRENT_USER\6MB\shell\
runas

HKEY_CURRENT_USER\6MB\shell\
runas\command

HKEY_CURRENT_USER\WB

HKEY_CURRENT_USER\WB\DefaultIcon

HKEY_CURRENT_USER\WB\shell

HKEY_CURRENT_USER\WB\shell\
open

HKEY_CURRENT_USER\WB\shell\
open\command

HKEY_CURRENT_USER\WB\shell\
runas

HKEY_CURRENT_USER\WB\shell\
runas\command

HKEY_CURRENT_USER\k7h

HKEY_CURRENT_USER\k7h\DefaultIcon

HKEY_CURRENT_USER\k7h\shell

HKEY_CURRENT_USER\k7h\shell\
open

HKEY_CURRENT_USER\k7h\shell\
open\command

HKEY_CURRENT_USER\k7h\shell\
runas

HKEY_CURRENT_USER\k7h\shell\
runas\command

HKEY_CURRENT_USER\x2

HKEY_CURRENT_USER\x2\DefaultIcon

HKEY_CURRENT_USER\x2\shell

HKEY_CURRENT_USER\x2\shell\
open

HKEY_CURRENT_USER\x2\shell\
open\command

HKEY_CURRENT_USER\x2\shell\
runas

HKEY_CURRENT_USER\x2\shell\
runas\command

HKEY_CURRENT_USER\ET5

HKEY_CURRENT_USER\ET5\DefaultIcon

HKEY_CURRENT_USER\ET5\shell

HKEY_CURRENT_USER\ET5\shell\
open

HKEY_CURRENT_USER\ET5\shell\
open\command

HKEY_CURRENT_USER\ET5\shell\
runas

HKEY_CURRENT_USER\ET5\shell\
runas\command

HKEY_CURRENT_USER\3Wc

HKEY_CURRENT_USER\3Wc\DefaultIcon

HKEY_CURRENT_USER\3Wc\shell

HKEY_CURRENT_USER\3Wc\shell\
open

HKEY_CURRENT_USER\3Wc\shell\
open\command

HKEY_CURRENT_USER\3Wc\shell\
runas

HKEY_CURRENT_USER\3Wc\shell\
runas\command

HKEY_CURRENT_USER\J20

HKEY_CURRENT_USER\J20\DefaultIcon

HKEY_CURRENT_USER\J20\shell

HKEY_CURRENT_USER\J20\shell\
open

HKEY_CURRENT_USER\J20\shell\
open\command

HKEY_CURRENT_USER\J20\shell\
runas

HKEY_CURRENT_USER\J20\shell\
runas\command

HKEY_CURRENT_USER\bWu

HKEY_CURRENT_USER\bWu\DefaultIcon

HKEY_CURRENT_USER\bWu\shell

HKEY_CURRENT_USER\bWu\shell\
open

HKEY_CURRENT_USER\bWu\shell\
open\command

HKEY_CURRENT_USER\bWu\shell\
runas

HKEY_CURRENT_USER\bWu\shell\
runas\command

HKEY_CURRENT_USER\D1

HKEY_CURRENT_USER\D1\DefaultIcon

HKEY_CURRENT_USER\D1\shell

HKEY_CURRENT_USER\D1\shell\
open

HKEY_CURRENT_USER\D1\shell\
open\command

HKEY_CURRENT_USER\D1\shell\
runas

HKEY_CURRENT_USER\D1\shell\
runas\command

HKEY_CURRENT_USER\N6T

HKEY_CURRENT_USER\N6T\DefaultIcon

HKEY_CURRENT_USER\N6T\shell

HKEY_CURRENT_USER\N6T\shell\
open

HKEY_CURRENT_USER\N6T\shell\
open\command

HKEY_CURRENT_USER\N6T\shell\
runas

HKEY_CURRENT_USER\N6T\shell\
runas\command

HKEY_CURRENT_USER\YwU

HKEY_CURRENT_USER\YwU\DefaultIcon

HKEY_CURRENT_USER\YwU\shell

HKEY_CURRENT_USER\YwU\shell\
open

HKEY_CURRENT_USER\YwU\shell\
open\command

HKEY_CURRENT_USER\YwU\shell\
runas

HKEY_CURRENT_USER\YwU\shell\
runas\command

HKEY_CURRENT_USER\qT3

HKEY_CURRENT_USER\qT3\DefaultIcon

HKEY_CURRENT_USER\qT3\shell

HKEY_CURRENT_USER\qT3\shell\
open

HKEY_CURRENT_USER\qT3\shell\
open\command

HKEY_CURRENT_USER\qT3\shell\
runas

HKEY_CURRENT_USER\qT3\shell\
runas\command

HKEY_CURRENT_USER\4q

HKEY_CURRENT_USER\4q\DefaultIcon

HKEY_CURRENT_USER\4q\shell

HKEY_CURRENT_USER\4q\shell\
open

HKEY_CURRENT_USER\4q\shell\
open\command

HKEY_CURRENT_USER\4q\shell\
runas

HKEY_CURRENT_USER\4q\shell\
runas\command

HKEY_CURRENT_USER\Ke4

HKEY_CURRENT_USER\Ke4\DefaultIcon

HKEY_CURRENT_USER\Ke4\shell

HKEY_CURRENT_USER\Ke4\shell\
open

HKEY_CURRENT_USER\Ke4\shell\
open\command

HKEY_CURRENT_USER\Ke4\shell\
runas

HKEY_CURRENT_USER\Ke4\shell\
runas\command

HKEY_CURRENT_USER\Is

HKEY_CURRENT_USER\Is\DefaultIcon

HKEY_CURRENT_USER\Is\shell

HKEY_CURRENT_USER\Is\shell\
open

HKEY_CURRENT_USER\Is\shell\
open\command

HKEY_CURRENT_USER\Is\shell\
runas

HKEY_CURRENT_USER\Is\shell\
runas\command

HKEY_CURRENT_USER\3HE

HKEY_CURRENT_USER\3HE\DefaultIcon

HKEY_CURRENT_USER\3HE\shell

HKEY_CURRENT_USER\3HE\shell\
open

HKEY_CURRENT_USER\3HE\shell\
open\command

HKEY_CURRENT_USER\3HE\shell\
runas

HKEY_CURRENT_USER\3HE\shell\
runas\command

HKEY_CURRENT_USER\43

HKEY_CURRENT_USER\43\DefaultIcon

HKEY_CURRENT_USER\43\shell

HKEY_CURRENT_USER\43\shell\
open

HKEY_CURRENT_USER\43\shell\
open\command

HKEY_CURRENT_USER\43\shell\
runas

HKEY_CURRENT_USER\43\shell\
runas\command

HKEY_CURRENT_USER\FT

HKEY_CURRENT_USER\FT\DefaultIcon

HKEY_CURRENT_USER\FT\shell

HKEY_CURRENT_USER\FT\shell\
open

HKEY_CURRENT_USER\FT\shell\
open\command

HKEY_CURRENT_USER\FT\shell\
runas

HKEY_CURRENT_USER\FT\shell\
runas\command

HKEY_CURRENT_USER\6j4

HKEY_CURRENT_USER\6j4\DefaultIcon

HKEY_CURRENT_USER\6j4\shell

HKEY_CURRENT_USER\6j4\shell\
open

HKEY_CURRENT_USER\6j4\shell\
open\command

HKEY_CURRENT_USER\6j4\shell\
runas

HKEY_CURRENT_USER\6j4\shell\
runas\command

HKEY_CURRENT_USER\675

HKEY_CURRENT_USER\675\DefaultIcon

HKEY_CURRENT_USER\675\shell

HKEY_CURRENT_USER\675\shell\
open

HKEY_CURRENT_USER\675\shell\
open\command

HKEY_CURRENT_USER\675\shell\
runas

HKEY_CURRENT_USER\675\shell\
runas\command

HKEY_CURRENT_USER\i0

HKEY_CURRENT_USER\i0\DefaultIcon

HKEY_CURRENT_USER\i0\shell

HKEY_CURRENT_USER\i0\shell\
open

HKEY_CURRENT_USER\i0\shell\
open\command

HKEY_CURRENT_USER\i0\shell\
runas

HKEY_CURRENT_USER\i0\shell\
runas\command

HKEY_CURRENT_USER\uD

HKEY_CURRENT_USER\uD\DefaultIcon

HKEY_CURRENT_USER\uD\shell

HKEY_CURRENT_USER\uD\shell\
open

HKEY_CURRENT_USER\uD\shell\
open\command

HKEY_CURRENT_USER\uD\shell\
runas

HKEY_CURRENT_USER\uD\shell\
runas\command

HKEY_CURRENT_USER\an

HKEY_CURRENT_USER\an\DefaultIcon

HKEY_CURRENT_USER\an\shell

HKEY_CURRENT_USER\an\shell\
open

HKEY_CURRENT_USER\an\shell\
open\command

HKEY_CURRENT_USER\an\shell\
runas

HKEY_CURRENT_USER\an\shell\
runas\command

HKEY_CURRENT_USER\3p

HKEY_CURRENT_USER\3p\DefaultIcon

HKEY_CURRENT_USER\3p\shell

HKEY_CURRENT_USER\3p\shell\
open

HKEY_CURRENT_USER\3p\shell\
open\command

HKEY_CURRENT_USER\3p\shell\
runas

HKEY_CURRENT_USER\3p\shell\
runas\command

HKEY_CURRENT_USER\4Y

HKEY_CURRENT_USER\4Y\DefaultIcon

HKEY_CURRENT_USER\4Y\shell

HKEY_CURRENT_USER\4Y\shell\
open

HKEY_CURRENT_USER\4Y\shell\
open\command

HKEY_CURRENT_USER\4Y\shell\
runas

HKEY_CURRENT_USER\4Y\shell\
runas\command

HKEY_CURRENT_USER\rE

HKEY_CURRENT_USER\rE\DefaultIcon

HKEY_CURRENT_USER\rE\shell

HKEY_CURRENT_USER\rE\shell\
open

HKEY_CURRENT_USER\rE\shell\
open\command

HKEY_CURRENT_USER\rE\shell\
runas

HKEY_CURRENT_USER\rE\shell\
runas\command

HKEY_CURRENT_USER\Hv

HKEY_CURRENT_USER\Hv\DefaultIcon

HKEY_CURRENT_USER\Hv\shell

HKEY_CURRENT_USER\Hv\shell\
open

HKEY_CURRENT_USER\Hv\shell\
open\command

HKEY_CURRENT_USER\Hv\shell\
runas

HKEY_CURRENT_USER\Hv\shell\
runas\command

HKEY_CURRENT_USER\77

HKEY_CURRENT_USER\77\DefaultIcon

HKEY_CURRENT_USER\77\shell

HKEY_CURRENT_USER\77\shell\
open

HKEY_CURRENT_USER\77\shell\
open\command

HKEY_CURRENT_USER\77\shell\
runas

HKEY_CURRENT_USER\77\shell\
runas\command

HKEY_CURRENT_USER\fY

HKEY_CURRENT_USER\fY\DefaultIcon

HKEY_CURRENT_USER\fY\shell

HKEY_CURRENT_USER\fY\shell\
open

HKEY_CURRENT_USER\fY\shell\
open\command

HKEY_CURRENT_USER\fY\shell\
runas

HKEY_CURRENT_USER\fY\shell\
runas\command

HKEY_CURRENT_USER\514

HKEY_CURRENT_USER\514\DefaultIcon

HKEY_CURRENT_USER\514\shell

HKEY_CURRENT_USER\514\shell\
open

HKEY_CURRENT_USER\514\shell\
open\command

HKEY_CURRENT_USER\514\shell\
runas

HKEY_CURRENT_USER\514\shell\
runas\command

HKEY_CURRENT_USER\aK

HKEY_CURRENT_USER\aK\DefaultIcon

HKEY_CURRENT_USER\aK\shell

HKEY_CURRENT_USER\aK\shell\
open

HKEY_CURRENT_USER\aK\shell\
open\command

HKEY_CURRENT_USER\aK\shell\
runas

HKEY_CURRENT_USER\aK\shell\
runas\command

HKEY_CURRENT_USER\rS8

HKEY_CURRENT_USER\rS8\DefaultIcon

HKEY_CURRENT_USER\rS8\shell

HKEY_CURRENT_USER\rS8\shell\
open

HKEY_CURRENT_USER\rS8\shell\
open\command

HKEY_CURRENT_USER\rS8\shell\
runas

HKEY_CURRENT_USER\rS8\shell\
runas\command

HKEY_CURRENT_USER\gRx

HKEY_CURRENT_USER\gRx\DefaultIcon

HKEY_CURRENT_USER\gRx\shell

HKEY_CURRENT_USER\gRx\shell\
open

HKEY_CURRENT_USER\gRx\shell\
open\command

HKEY_CURRENT_USER\gRx\shell\
runas

HKEY_CURRENT_USER\gRx\shell\
runas\command

HKEY_CURRENT_USER\u0

HKEY_CURRENT_USER\u0\DefaultIcon

HKEY_CURRENT_USER\u0\shell

HKEY_CURRENT_USER\u0\shell\
open

HKEY_CURRENT_USER\u0\shell\
open\command

HKEY_CURRENT_USER\u0\shell\
runas

HKEY_CURRENT_USER\u0\shell\
runas\command

HKEY_CURRENT_USER\g4

HKEY_CURRENT_USER\g4\DefaultIcon

HKEY_CURRENT_USER\g4\shell

HKEY_CURRENT_USER\g4\shell\
open

HKEY_CURRENT_USER\g4\shell\
open\command

HKEY_CURRENT_USER\g4\shell\
runas

HKEY_CURRENT_USER\g4\shell\
runas\command

HKEY_CURRENT_USER\73

HKEY_CURRENT_USER\73\DefaultIcon

HKEY_CURRENT_USER\73\shell

HKEY_CURRENT_USER\73\shell\
open

HKEY_CURRENT_USER\73\shell\
open\command

HKEY_CURRENT_USER\73\shell\
runas

HKEY_CURRENT_USER\73\shell\
runas\command

HKEY_CURRENT_USER\8Ha

HKEY_CURRENT_USER\8Ha\DefaultIcon

HKEY_CURRENT_USER\8Ha\shell

HKEY_CURRENT_USER\8Ha\shell\
open

HKEY_CURRENT_USER\8Ha\shell\
open\command

HKEY_CURRENT_USER\8Ha\shell\
runas

HKEY_CURRENT_USER\8Ha\shell\
runas\command

HKEY_CURRENT_USER\X3C

HKEY_CURRENT_USER\X3C\DefaultIcon

HKEY_CURRENT_USER\X3C\shell

HKEY_CURRENT_USER\X3C\shell\
open

HKEY_CURRENT_USER\X3C\shell\
open\command

HKEY_CURRENT_USER\X3C\shell\
runas

HKEY_CURRENT_USER\X3C\shell\
runas\command

HKEY_CURRENT_USER\Bbh

HKEY_CURRENT_USER\Bbh\DefaultIcon

HKEY_CURRENT_USER\Bbh\shell

HKEY_CURRENT_USER\Bbh\shell\
open

HKEY_CURRENT_USER\Bbh\shell\
open\command

HKEY_CURRENT_USER\Bbh\shell\
runas

HKEY_CURRENT_USER\Bbh\shell\
runas\command

HKEY_CURRENT_USER\o7

HKEY_CURRENT_USER\o7\DefaultIcon

HKEY_CURRENT_USER\o7\shell

HKEY_CURRENT_USER\o7\shell\
open

HKEY_CURRENT_USER\o7\shell\
open\command

HKEY_CURRENT_USER\o7\shell\
runas

HKEY_CURRENT_USER\o7\shell\
runas\command

HKEY_CURRENT_USER\061

HKEY_CURRENT_USER\061\DefaultIcon

HKEY_CURRENT_USER\061\shell

HKEY_CURRENT_USER\061\shell\
open

HKEY_CURRENT_USER\061\shell\
open\command

HKEY_CURRENT_USER\061\shell\
runas

HKEY_CURRENT_USER\061\shell\
runas\command

HKEY_CURRENT_USER\tR

HKEY_CURRENT_USER\tR\DefaultIcon

HKEY_CURRENT_USER\tR\shell

HKEY_CURRENT_USER\tR\shell\
open

HKEY_CURRENT_USER\tR\shell\
open\command

HKEY_CURRENT_USER\tR\shell\
runas

HKEY_CURRENT_USER\tR\shell\
runas\command

HKEY_CURRENT_USER\6u

HKEY_CURRENT_USER\6u\DefaultIcon

HKEY_CURRENT_USER\6u\shell

HKEY_CURRENT_USER\6u\shell\
open

HKEY_CURRENT_USER\6u\shell\
open\command

HKEY_CURRENT_USER\6u\shell\
runas

HKEY_CURRENT_USER\6u\shell\
runas\command

HKEY_CURRENT_USER\KB3

HKEY_CURRENT_USER\KB3\DefaultIcon

HKEY_CURRENT_USER\KB3\shell

HKEY_CURRENT_USER\KB3\shell\
open

HKEY_CURRENT_USER\KB3\shell\
open\command

HKEY_CURRENT_USER\KB3\shell\
runas

HKEY_CURRENT_USER\KB3\shell\
runas\command

HKEY_CURRENT_USER\oQ

HKEY_CURRENT_USER\oQ\DefaultIcon

HKEY_CURRENT_USER\oQ\shell

HKEY_CURRENT_USER\oQ\shell\
open

HKEY_CURRENT_USER\oQ\shell\
open\command

HKEY_CURRENT_USER\oQ\shell\
runas

HKEY_CURRENT_USER\oQ\shell\
runas\command

HKEY_CURRENT_USER\0t

HKEY_CURRENT_USER\0t\DefaultIcon

HKEY_CURRENT_USER\0t\shell

HKEY_CURRENT_USER\0t\shell\
open

HKEY_CURRENT_USER\0t\shell\
open\command

HKEY_CURRENT_USER\0t\shell\
runas

HKEY_CURRENT_USER\0t\shell\
runas\command

HKEY_CURRENT_USER\7N

HKEY_CURRENT_USER\7N\DefaultIcon

HKEY_CURRENT_USER\7N\shell

HKEY_CURRENT_USER\7N\shell\
open

HKEY_CURRENT_USER\7N\shell\
open\command

HKEY_CURRENT_USER\7N\shell\
runas

HKEY_CURRENT_USER\7N\shell\
runas\command

HKEY_CURRENT_USER\7C6

HKEY_CURRENT_USER\7C6\DefaultIcon

HKEY_CURRENT_USER\7C6\shell

HKEY_CURRENT_USER\7C6\shell\
open

HKEY_CURRENT_USER\7C6\shell\
open\command

HKEY_CURRENT_USER\7C6\shell\
runas

HKEY_CURRENT_USER\7C6\shell\
runas\command

HKEY_CURRENT_USER\0Pv

HKEY_CURRENT_USER\0Pv\DefaultIcon

HKEY_CURRENT_USER\0Pv\shell

HKEY_CURRENT_USER\0Pv\shell\
open

HKEY_CURRENT_USER\0Pv\shell\
open\command

HKEY_CURRENT_USER\0Pv\shell\
runas

HKEY_CURRENT_USER\0Pv\shell\
runas\command

HKEY_CURRENT_USER\3B

HKEY_CURRENT_USER\3B\DefaultIcon

HKEY_CURRENT_USER\3B\shell

HKEY_CURRENT_USER\3B\shell\
open

HKEY_CURRENT_USER\3B\shell\
open\command

HKEY_CURRENT_USER\3B\shell\
runas

HKEY_CURRENT_USER\3B\shell\
runas\command

HKEY_CURRENT_USER\b8

HKEY_CURRENT_USER\b8\DefaultIcon

HKEY_CURRENT_USER\b8\shell

HKEY_CURRENT_USER\b8\shell\
open

HKEY_CURRENT_USER\b8\shell\
open\command

HKEY_CURRENT_USER\b8\shell\
runas

HKEY_CURRENT_USER\b8\shell\
runas\command

HKEY_CURRENT_USER\FA

HKEY_CURRENT_USER\FA\DefaultIcon

HKEY_CURRENT_USER\FA\shell

HKEY_CURRENT_USER\FA\shell\
open

HKEY_CURRENT_USER\FA\shell\
open\command

HKEY_CURRENT_USER\FA\shell\
runas

HKEY_CURRENT_USER\FA\shell\
runas\command

HKEY_CURRENT_USER\4Ws

HKEY_CURRENT_USER\4Ws\DefaultIcon

HKEY_CURRENT_USER\4Ws\shell

HKEY_CURRENT_USER\4Ws\shell\
open

HKEY_CURRENT_USER\4Ws\shell\
open\command

HKEY_CURRENT_USER\4Ws\shell\
runas

HKEY_CURRENT_USER\4Ws\shell\
runas\command

HKEY_CURRENT_USER\3x

HKEY_CURRENT_USER\3x\DefaultIcon

HKEY_CURRENT_USER\3x\shell

HKEY_CURRENT_USER\3x\shell\
open

HKEY_CURRENT_USER\3x\shell\
open\command

HKEY_CURRENT_USER\3x\shell\
runas

HKEY_CURRENT_USER\3x\shell\
runas\command

HKEY_CURRENT_USER\0p

HKEY_CURRENT_USER\0p\DefaultIcon

HKEY_CURRENT_USER\0p\shell

HKEY_CURRENT_USER\0p\shell\
open

HKEY_CURRENT_USER\0p\shell\
open\command

HKEY_CURRENT_USER\0p\shell\
runas

HKEY_CURRENT_USER\0p\shell\
runas\command

HKEY_CURRENT_USER\VO2

HKEY_CURRENT_USER\VO2\DefaultIcon

HKEY_CURRENT_USER\VO2\shell

HKEY_CURRENT_USER\VO2\shell\
open

HKEY_CURRENT_USER\VO2\shell\
open\command

HKEY_CURRENT_USER\VO2\shell\
runas

HKEY_CURRENT_USER\VO2\shell\
runas\command

HKEY_CURRENT_USER\A5h

HKEY_CURRENT_USER\A5h\DefaultIcon

HKEY_CURRENT_USER\A5h\shell

HKEY_CURRENT_USER\A5h\shell\
open

HKEY_CURRENT_USER\A5h\shell\
open\command

HKEY_CURRENT_USER\A5h\shell\
runas

HKEY_CURRENT_USER\A5h\shell\
runas\command

HKEY_CURRENT_USER\ED

HKEY_CURRENT_USER\ED\DefaultIcon

HKEY_CURRENT_USER\ED\shell

HKEY_CURRENT_USER\ED\shell\
open

HKEY_CURRENT_USER\ED\shell\
open\command

HKEY_CURRENT_USER\ED\shell\
runas

HKEY_CURRENT_USER\ED\shell\
runas\command

HKEY_CURRENT_USER\1k

HKEY_CURRENT_USER\1k\DefaultIcon

HKEY_CURRENT_USER\1k\shell

HKEY_CURRENT_USER\1k\shell\
open

HKEY_CURRENT_USER\1k\shell\
open\command

HKEY_CURRENT_USER\1k\shell\
runas

HKEY_CURRENT_USER\1k\shell\
runas\command

HKEY_CURRENT_USER\FR

HKEY_CURRENT_USER\FR\DefaultIcon

HKEY_CURRENT_USER\FR\shell

HKEY_CURRENT_USER\FR\shell\
open

HKEY_CURRENT_USER\FR\shell\
open\command

HKEY_CURRENT_USER\FR\shell\
runas

HKEY_CURRENT_USER\FR\shell\
runas\command

HKEY_CURRENT_USER\pX

HKEY_CURRENT_USER\pX\DefaultIcon

HKEY_CURRENT_USER\pX\shell

HKEY_CURRENT_USER\pX\shell\
open

HKEY_CURRENT_USER\pX\shell\
open\command

HKEY_CURRENT_USER\pX\shell\
runas

HKEY_CURRENT_USER\pX\shell\
runas\command

HKEY_CURRENT_USER\2K

HKEY_CURRENT_USER\2K\DefaultIcon

HKEY_CURRENT_USER\2K\shell

HKEY_CURRENT_USER\2K\shell\
open

HKEY_CURRENT_USER\2K\shell\
open\command

HKEY_CURRENT_USER\2K\shell\
runas

HKEY_CURRENT_USER\2K\shell\
runas\command

HKEY_CURRENT_USER\4Ww

HKEY_CURRENT_USER\4Ww\DefaultIcon

HKEY_CURRENT_USER\4Ww\shell

HKEY_CURRENT_USER\4Ww\shell\
open

HKEY_CURRENT_USER\4Ww\shell\
open\command

HKEY_CURRENT_USER\4Ww\shell\
runas

HKEY_CURRENT_USER\4Ww\shell\
runas\command

HKEY_CURRENT_USER\RU

HKEY_CURRENT_USER\RU\DefaultIcon

HKEY_CURRENT_USER\RU\shell

HKEY_CURRENT_USER\RU\shell\
open

HKEY_CURRENT_USER\RU\shell\
open\command

HKEY_CURRENT_USER\RU\shell\
runas

HKEY_CURRENT_USER\RU\shell\
runas\command

HKEY_CURRENT_USER\txr

HKEY_CURRENT_USER\txr\DefaultIcon

HKEY_CURRENT_USER\txr\shell

HKEY_CURRENT_USER\txr\shell\
open

HKEY_CURRENT_USER\txr\shell\
open\command

HKEY_CURRENT_USER\txr\shell\
runas

HKEY_CURRENT_USER\txr\shell\
runas\command

HKEY_CURRENT_USER\pLB

HKEY_CURRENT_USER\pLB\DefaultIcon

HKEY_CURRENT_USER\pLB\shell

HKEY_CURRENT_USER\pLB\shell\
open

HKEY_CURRENT_USER\pLB\shell\
open\command

HKEY_CURRENT_USER\pLB\shell\
runas

HKEY_CURRENT_USER\pLB\shell\
runas\command

HKEY_CURRENT_USER\Wl

HKEY_CURRENT_USER\Wl\DefaultIcon

HKEY_CURRENT_USER\Wl\shell

HKEY_CURRENT_USER\Wl\shell\
open

HKEY_CURRENT_USER\Wl\shell\
open\command

HKEY_CURRENT_USER\Wl\shell\
runas

HKEY_CURRENT_USER\Wl\shell\
runas\command

HKEY_CURRENT_USER\CW

HKEY_CURRENT_USER\CW\DefaultIcon

HKEY_CURRENT_USER\CW\shell

HKEY_CURRENT_USER\CW\shell\
open

HKEY_CURRENT_USER\CW\shell\
open\command

HKEY_CURRENT_USER\CW\shell\
runas

HKEY_CURRENT_USER\CW\shell\
runas\command

HKEY_CURRENT_USER\nfY

HKEY_CURRENT_USER\nfY\DefaultIcon

HKEY_CURRENT_USER\nfY\shell

HKEY_CURRENT_USER\nfY\shell\
open

HKEY_CURRENT_USER\nfY\shell\
open\command

HKEY_CURRENT_USER\nfY\shell\
runas

HKEY_CURRENT_USER\nfY\shell\
runas\command

HKEY_CURRENT_USER\5G

HKEY_CURRENT_USER\5G\DefaultIcon

HKEY_CURRENT_USER\5G\shell

HKEY_CURRENT_USER\5G\shell\
open

HKEY_CURRENT_USER\5G\shell\
open\command

HKEY_CURRENT_USER\5G\shell\
runas

HKEY_CURRENT_USER\5G\shell\
runas\command

HKEY_CURRENT_USER\NB

HKEY_CURRENT_USER\NB\DefaultIcon

HKEY_CURRENT_USER\NB\shell

HKEY_CURRENT_USER\NB\shell\
open

HKEY_CURRENT_USER\NB\shell\
open\command

HKEY_CURRENT_USER\NB\shell\
runas

HKEY_CURRENT_USER\NB\shell\
runas\command

HKEY_CURRENT_USER\5F

HKEY_CURRENT_USER\5F\DefaultIcon

HKEY_CURRENT_USER\5F\shell

HKEY_CURRENT_USER\5F\shell\
open

HKEY_CURRENT_USER\5F\shell\
open\command

HKEY_CURRENT_USER\5F\shell\
runas

HKEY_CURRENT_USER\5F\shell\
runas\command

HKEY_CURRENT_USER\Nj

HKEY_CURRENT_USER\Nj\DefaultIcon

HKEY_CURRENT_USER\Nj\shell

HKEY_CURRENT_USER\Nj\shell\
open

HKEY_CURRENT_USER\Nj\shell\
open\command

HKEY_CURRENT_USER\Nj\shell\
runas

HKEY_CURRENT_USER\Nj\shell\
runas\command

HKEY_CURRENT_USER\ViR

HKEY_CURRENT_USER\ViR\DefaultIcon

HKEY_CURRENT_USER\ViR\shell

HKEY_CURRENT_USER\ViR\shell\
open

HKEY_CURRENT_USER\ViR\shell\
open\command

HKEY_CURRENT_USER\ViR\shell\
runas

HKEY_CURRENT_USER\ViR\shell\
runas\command

HKEY_CURRENT_USER\pG

HKEY_CURRENT_USER\pG\DefaultIcon

HKEY_CURRENT_USER\pG\shell

HKEY_CURRENT_USER\pG\shell\
open

HKEY_CURRENT_USER\pG\shell\
open\command

HKEY_CURRENT_USER\pG\shell\
runas

HKEY_CURRENT_USER\pG\shell\
runas\command

HKEY_CURRENT_USER\kS

HKEY_CURRENT_USER\kS\DefaultIcon

HKEY_CURRENT_USER\kS\shell

HKEY_CURRENT_USER\kS\shell\
open

HKEY_CURRENT_USER\kS\shell\
open\command

HKEY_CURRENT_USER\kS\shell\
runas

HKEY_CURRENT_USER\kS\shell\
runas\command

HKEY_CURRENT_USER\OiT

HKEY_CURRENT_USER\OiT\DefaultIcon

HKEY_CURRENT_USER\OiT\shell

HKEY_CURRENT_USER\OiT\shell\
open

HKEY_CURRENT_USER\OiT\shell\
open\command

HKEY_CURRENT_USER\OiT\shell\
runas

HKEY_CURRENT_USER\OiT\shell\
runas\command

HKEY_CURRENT_USER\Qy

HKEY_CURRENT_USER\Qy\DefaultIcon

HKEY_CURRENT_USER\Qy\shell

HKEY_CURRENT_USER\Qy\shell\
open

HKEY_CURRENT_USER\Qy\shell\
open\command

HKEY_CURRENT_USER\Qy\shell\
runas

HKEY_CURRENT_USER\Qy\shell\
runas\command

HKEY_CURRENT_USER\E8G

HKEY_CURRENT_USER\E8G\DefaultIcon

HKEY_CURRENT_USER\E8G\shell

HKEY_CURRENT_USER\E8G\shell\
open

HKEY_CURRENT_USER\E8G\shell\
open\command

HKEY_CURRENT_USER\E8G\shell\
runas

HKEY_CURRENT_USER\E8G\shell\
runas\command

HKEY_CURRENT_USER\78

HKEY_CURRENT_USER\78\DefaultIcon

HKEY_CURRENT_USER\78\shell

HKEY_CURRENT_USER\78\shell\
open

HKEY_CURRENT_USER\78\shell\
open\command

HKEY_CURRENT_USER\78\shell\
runas

HKEY_CURRENT_USER\78\shell\
runas\command

HKEY_CURRENT_USER\3W

HKEY_CURRENT_USER\3W\DefaultIcon

HKEY_CURRENT_USER\3W\shell

HKEY_CURRENT_USER\3W\shell\
open

HKEY_CURRENT_USER\3W\shell\
open\command

HKEY_CURRENT_USER\3W\shell\
runas

HKEY_CURRENT_USER\3W\shell\
runas\command

HKEY_CURRENT_USER\L6M

HKEY_CURRENT_USER\L6M\DefaultIcon

HKEY_CURRENT_USER\L6M\shell

HKEY_CURRENT_USER\L6M\shell\
open

HKEY_CURRENT_USER\L6M\shell\
open\command

HKEY_CURRENT_USER\L6M\shell\
runas

HKEY_CURRENT_USER\L6M\shell\
runas\command

HKEY_CURRENT_USER\Il7

HKEY_CURRENT_USER\Il7\DefaultIcon

HKEY_CURRENT_USER\Il7\shell

HKEY_CURRENT_USER\Il7\shell\
open

HKEY_CURRENT_USER\Il7\shell\
open\command

HKEY_CURRENT_USER\Il7\shell\
runas

HKEY_CURRENT_USER\Il7\shell\
runas\command

HKEY_CURRENT_USER\HHS

HKEY_CURRENT_USER\HHS\DefaultIcon

HKEY_CURRENT_USER\HHS\shell

HKEY_CURRENT_USER\HHS\shell\
open

HKEY_CURRENT_USER\HHS\shell\
open\command

HKEY_CURRENT_USER\HHS\shell\
runas

HKEY_CURRENT_USER\HHS\shell\
runas\command

HKEY_CURRENT_USER\14e

HKEY_CURRENT_USER\14e\DefaultIcon

HKEY_CURRENT_USER\14e\shell

HKEY_CURRENT_USER\14e\shell\
open

HKEY_CURRENT_USER\14e\shell\
open\command

HKEY_CURRENT_USER\14e\shell\
runas

HKEY_CURRENT_USER\14e\shell\
runas\command

HKEY_CURRENT_USER\Yv6

HKEY_CURRENT_USER\Yv6\DefaultIcon

HKEY_CURRENT_USER\Yv6\shell

HKEY_CURRENT_USER\Yv6\shell\
open

HKEY_CURRENT_USER\Yv6\shell\
open\command

HKEY_CURRENT_USER\Yv6\shell\
runas

HKEY_CURRENT_USER\Yv6\shell\
runas\command

HKEY_CURRENT_USER\33

HKEY_CURRENT_USER\33\DefaultIcon

HKEY_CURRENT_USER\33\shell

HKEY_CURRENT_USER\33\shell\
open

HKEY_CURRENT_USER\33\shell\
open\command

HKEY_CURRENT_USER\33\shell\
runas

HKEY_CURRENT_USER\33\shell\
runas\command

HKEY_CURRENT_USER\5w

HKEY_CURRENT_USER\5w\DefaultIcon

HKEY_CURRENT_USER\5w\shell

HKEY_CURRENT_USER\5w\shell\
open

HKEY_CURRENT_USER\5w\shell\
open\command

HKEY_CURRENT_USER\5w\shell\
runas

HKEY_CURRENT_USER\5w\shell\
runas\command

HKEY_CURRENT_USER\oA

HKEY_CURRENT_USER\oA\DefaultIcon

HKEY_CURRENT_USER\oA\shell

HKEY_CURRENT_USER\oA\shell\
open

HKEY_CURRENT_USER\oA\shell\
open\command

HKEY_CURRENT_USER\oA\shell\
runas

HKEY_CURRENT_USER\oA\shell\
runas\command

HKEY_CURRENT_USER\S7F

HKEY_CURRENT_USER\S7F\DefaultIcon

HKEY_CURRENT_USER\S7F\shell

HKEY_CURRENT_USER\S7F\shell\
open

HKEY_CURRENT_USER\S7F\shell\
open\command

HKEY_CURRENT_USER\S7F\shell\
runas

HKEY_CURRENT_USER\S7F\shell\
runas\command

HKEY_CURRENT_USER\Yk4

HKEY_CURRENT_USER\Yk4\DefaultIcon

HKEY_CURRENT_USER\Yk4\shell

HKEY_CURRENT_USER\Yk4\shell\
open

HKEY_CURRENT_USER\Yk4\shell\
open\command

HKEY_CURRENT_USER\Yk4\shell\
runas

HKEY_CURRENT_USER\Yk4\shell\
runas\command

HKEY_CURRENT_USER\w3

HKEY_CURRENT_USER\w3\DefaultIcon

HKEY_CURRENT_USER\w3\shell

HKEY_CURRENT_USER\w3\shell\
open

HKEY_CURRENT_USER\w3\shell\
open\command

HKEY_CURRENT_USER\w3\shell\
runas

HKEY_CURRENT_USER\w3\shell\
runas\command

HKEY_CURRENT_USER\dv

HKEY_CURRENT_USER\dv\DefaultIcon

HKEY_CURRENT_USER\dv\shell

HKEY_CURRENT_USER\dv\shell\
open

HKEY_CURRENT_USER\dv\shell\
open\command

HKEY_CURRENT_USER\dv\shell\
runas

HKEY_CURRENT_USER\dv\shell\
runas\command

HKEY_CURRENT_USER\51

HKEY_CURRENT_USER\51\DefaultIcon

HKEY_CURRENT_USER\51\shell

HKEY_CURRENT_USER\51\shell\
open

HKEY_CURRENT_USER\51\shell\
open\command

HKEY_CURRENT_USER\51\shell\
runas

HKEY_CURRENT_USER\51\shell\
runas\command

HKEY_CURRENT_USER\R8F

HKEY_CURRENT_USER\R8F\DefaultIcon

HKEY_CURRENT_USER\R8F\shell

HKEY_CURRENT_USER\R8F\shell\
open

HKEY_CURRENT_USER\R8F\shell\
open\command

HKEY_CURRENT_USER\R8F\shell\
runas

HKEY_CURRENT_USER\R8F\shell\
runas\command

HKEY_CURRENT_USER\13

HKEY_CURRENT_USER\13\DefaultIcon

HKEY_CURRENT_USER\13\shell

HKEY_CURRENT_USER\13\shell\
open

HKEY_CURRENT_USER\13\shell\
open\command

HKEY_CURRENT_USER\13\shell\
runas

HKEY_CURRENT_USER\13\shell\
runas\command

HKEY_CURRENT_USER\w5S

HKEY_CURRENT_USER\w5S\DefaultIcon

HKEY_CURRENT_USER\w5S\shell

HKEY_CURRENT_USER\w5S\shell\
open

HKEY_CURRENT_USER\w5S\shell\
open\command

HKEY_CURRENT_USER\w5S\shell\
runas

HKEY_CURRENT_USER\w5S\shell\
runas\command

HKEY_CURRENT_USER\gDc

HKEY_CURRENT_USER\gDc\DefaultIcon

HKEY_CURRENT_USER\gDc\shell

HKEY_CURRENT_USER\gDc\shell\
open

HKEY_CURRENT_USER\gDc\shell\
open\command

HKEY_CURRENT_USER\gDc\shell\
runas

HKEY_CURRENT_USER\gDc\shell\
runas\command

HKEY_CURRENT_USER\kUV

HKEY_CURRENT_USER\kUV\DefaultIcon

HKEY_CURRENT_USER\kUV\shell

HKEY_CURRENT_USER\kUV\shell\
open

HKEY_CURRENT_USER\kUV\shell\
open\command

HKEY_CURRENT_USER\kUV\shell\
runas

HKEY_CURRENT_USER\kUV\shell\
runas\command

HKEY_CURRENT_USER\Po

HKEY_CURRENT_USER\Po\DefaultIcon

HKEY_CURRENT_USER\Po\shell

HKEY_CURRENT_USER\Po\shell\
open

HKEY_CURRENT_USER\Po\shell\
open\command

HKEY_CURRENT_USER\Po\shell\
runas

HKEY_CURRENT_USER\Po\shell\
runas\command

HKEY_CURRENT_USER\7Bs

HKEY_CURRENT_USER\7Bs\DefaultIcon

HKEY_CURRENT_USER\7Bs\shell

HKEY_CURRENT_USER\7Bs\shell\
open

HKEY_CURRENT_USER\7Bs\shell\
open\command

HKEY_CURRENT_USER\7Bs\shell\
runas

HKEY_CURRENT_USER\7Bs\shell\
runas\command

HKEY_CURRENT_USER\GM

HKEY_CURRENT_USER\GM\DefaultIcon

HKEY_CURRENT_USER\GM\shell

HKEY_CURRENT_USER\GM\shell\
open

HKEY_CURRENT_USER\GM\shell\
open\command

HKEY_CURRENT_USER\GM\shell\
runas

HKEY_CURRENT_USER\GM\shell\
runas\command

HKEY_CURRENT_USER\msu

HKEY_CURRENT_USER\msu\DefaultIcon

HKEY_CURRENT_USER\msu\shell

HKEY_CURRENT_USER\msu\shell\
open

HKEY_CURRENT_USER\msu\shell\
open\command

HKEY_CURRENT_USER\msu\shell\
runas

HKEY_CURRENT_USER\msu\shell\
runas\command

HKEY_CURRENT_USER\GOL

HKEY_CURRENT_USER\GOL\DefaultIcon

HKEY_CURRENT_USER\GOL\shell

HKEY_CURRENT_USER\GOL\shell\
open

HKEY_CURRENT_USER\GOL\shell\
open\command

HKEY_CURRENT_USER\GOL\shell\
runas

HKEY_CURRENT_USER\GOL\shell\
runas\command

HKEY_CURRENT_USER\fD3

HKEY_CURRENT_USER\fD3\DefaultIcon

HKEY_CURRENT_USER\fD3\shell

HKEY_CURRENT_USER\fD3\shell\
open

HKEY_CURRENT_USER\fD3\shell\
open\command

HKEY_CURRENT_USER\fD3\shell\
runas

HKEY_CURRENT_USER\fD3\shell\
runas\command

HKEY_CURRENT_USER\qcl

HKEY_CURRENT_USER\qcl\DefaultIcon

HKEY_CURRENT_USER\qcl\shell

HKEY_CURRENT_USER\qcl\shell\
open

HKEY_CURRENT_USER\qcl\shell\
open\command

HKEY_CURRENT_USER\qcl\shell\
runas

HKEY_CURRENT_USER\qcl\shell\
runas\command

HKEY_CURRENT_USER\3j

HKEY_CURRENT_USER\3j\DefaultIcon

HKEY_CURRENT_USER\3j\shell

HKEY_CURRENT_USER\3j\shell\
open

HKEY_CURRENT_USER\3j\shell\
open\command

HKEY_CURRENT_USER\3j\shell\
runas

HKEY_CURRENT_USER\3j\shell\
runas\command

HKEY_CURRENT_USER\6Ja

HKEY_CURRENT_USER\6Ja\DefaultIcon

HKEY_CURRENT_USER\6Ja\shell

HKEY_CURRENT_USER\6Ja\shell\
open

HKEY_CURRENT_USER\6Ja\shell\
open\command

HKEY_CURRENT_USER\6Ja\shell\
runas

HKEY_CURRENT_USER\6Ja\shell\
runas\command

HKEY_CURRENT_USER\307

HKEY_CURRENT_USER\307\DefaultIcon

HKEY_CURRENT_USER\307\shell

HKEY_CURRENT_USER\307\shell\
open

HKEY_CURRENT_USER\307\shell\
open\command

HKEY_CURRENT_USER\307\shell\
runas

HKEY_CURRENT_USER\307\shell\
runas\command

HKEY_CURRENT_USER\0Q

HKEY_CURRENT_USER\0Q\DefaultIcon

HKEY_CURRENT_USER\0Q\shell

HKEY_CURRENT_USER\0Q\shell\
open

HKEY_CURRENT_USER\0Q\shell\
open\command

HKEY_CURRENT_USER\0Q\shell\
runas

HKEY_CURRENT_USER\0Q\shell\
runas\command

HKEY_CURRENT_USER\BVm

HKEY_CURRENT_USER\BVm\DefaultIcon

HKEY_CURRENT_USER\BVm\shell

HKEY_CURRENT_USER\BVm\shell\
open

HKEY_CURRENT_USER\BVm\shell\
open\command

HKEY_CURRENT_USER\BVm\shell\
runas

HKEY_CURRENT_USER\BVm\shell\
runas\command

HKEY_CURRENT_USER\Fd

HKEY_CURRENT_USER\Fd\DefaultIcon

HKEY_CURRENT_USER\Fd\shell

HKEY_CURRENT_USER\Fd\shell\
open

HKEY_CURRENT_USER\Fd\shell\
open\command

HKEY_CURRENT_USER\Fd\shell\
runas

HKEY_CURRENT_USER\Fd\shell\
runas\command

HKEY_CURRENT_USER\e7

HKEY_CURRENT_USER\e7\DefaultIcon

HKEY_CURRENT_USER\e7\shell

HKEY_CURRENT_USER\e7\shell\
open

HKEY_CURRENT_USER\e7\shell\
open\command

HKEY_CURRENT_USER\e7\shell\
runas

HKEY_CURRENT_USER\e7\shell\
runas\command

HKEY_CURRENT_USER\C3

HKEY_CURRENT_USER\C3\DefaultIcon

HKEY_CURRENT_USER\C3\shell

HKEY_CURRENT_USER\C3\shell\
open

HKEY_CURRENT_USER\C3\shell\
open\command

HKEY_CURRENT_USER\C3\shell\
runas

HKEY_CURRENT_USER\C3\shell\
runas\command

HKEY_CURRENT_USER\V3A

HKEY_CURRENT_USER\V3A\DefaultIcon

HKEY_CURRENT_USER\V3A\shell

HKEY_CURRENT_USER\V3A\shell\
open

HKEY_CURRENT_USER\V3A\shell\
open\command

HKEY_CURRENT_USER\V3A\shell\
runas

HKEY_CURRENT_USER\V3A\shell\
runas\command

HKEY_CURRENT_USER\C6

HKEY_CURRENT_USER\C6\DefaultIcon

HKEY_CURRENT_USER\C6\shell

HKEY_CURRENT_USER\C6\shell\
open

HKEY_CURRENT_USER\C6\shell\
open\command

HKEY_CURRENT_USER\C6\shell\
runas

HKEY_CURRENT_USER\C6\shell\
runas\command

HKEY_CURRENT_USER\QP

HKEY_CURRENT_USER\QP\DefaultIcon

HKEY_CURRENT_USER\QP\shell

HKEY_CURRENT_USER\QP\shell\
open

HKEY_CURRENT_USER\QP\shell\
open\command

HKEY_CURRENT_USER\QP\shell\
runas

HKEY_CURRENT_USER\QP\shell\
runas\command

HKEY_CURRENT_USER\25

HKEY_CURRENT_USER\25\DefaultIcon

HKEY_CURRENT_USER\25\shell

HKEY_CURRENT_USER\25\shell\
open

HKEY_CURRENT_USER\25\shell\
open\command

HKEY_CURRENT_USER\25\shell\
runas

HKEY_CURRENT_USER\25\shell\
runas\command

HKEY_CURRENT_USER\5l

HKEY_CURRENT_USER\5l\DefaultIcon

HKEY_CURRENT_USER\5l\shell

HKEY_CURRENT_USER\5l\shell\
open

HKEY_CURRENT_USER\5l\shell\
open\command

HKEY_CURRENT_USER\5l\shell\
runas

HKEY_CURRENT_USER\5l\shell\
runas\command

HKEY_CURRENT_USER\5C8

HKEY_CURRENT_USER\5C8\DefaultIcon

HKEY_CURRENT_USER\5C8\shell

HKEY_CURRENT_USER\5C8\shell\
open

HKEY_CURRENT_USER\5C8\shell\
open\command

HKEY_CURRENT_USER\5C8\shell\
runas

HKEY_CURRENT_USER\5C8\shell\
runas\command

HKEY_CURRENT_USER\6p

HKEY_CURRENT_USER\6p\DefaultIcon

HKEY_CURRENT_USER\6p\shell

HKEY_CURRENT_USER\6p\shell\
open

HKEY_CURRENT_USER\6p\shell\
open\command

HKEY_CURRENT_USER\6p\shell\
runas

HKEY_CURRENT_USER\6p\shell\
runas\command

HKEY_CURRENT_USER\oon

HKEY_CURRENT_USER\oon\DefaultIcon

HKEY_CURRENT_USER\oon\shell

HKEY_CURRENT_USER\oon\shell\
open

HKEY_CURRENT_USER\oon\shell\
open\command

HKEY_CURRENT_USER\oon\shell\
runas

HKEY_CURRENT_USER\oon\shell\
runas\command

HKEY_CURRENT_USER\pf

HKEY_CURRENT_USER\pf\DefaultIcon

HKEY_CURRENT_USER\pf\shell

HKEY_CURRENT_USER\pf\shell\
open

HKEY_CURRENT_USER\pf\shell\
open\command

HKEY_CURRENT_USER\pf\shell\
runas

HKEY_CURRENT_USER\pf\shell\
runas\command

HKEY_CURRENT_USER\Q27

HKEY_CURRENT_USER\Q27\DefaultIcon

HKEY_CURRENT_USER\Q27\shell

HKEY_CURRENT_USER\Q27\shell\
open

HKEY_CURRENT_USER\Q27\shell\
open\command

HKEY_CURRENT_USER\Q27\shell\
runas

HKEY_CURRENT_USER\Q27\shell\
runas\command

HKEY_CURRENT_USER\625

HKEY_CURRENT_USER\625\DefaultIcon

HKEY_CURRENT_USER\625\shell

HKEY_CURRENT_USER\625\shell\
open

HKEY_CURRENT_USER\625\shell\
open\command

HKEY_CURRENT_USER\625\shell\
runas

HKEY_CURRENT_USER\625\shell\
runas\command

HKEY_CURRENT_USER\303

HKEY_CURRENT_USER\303\DefaultIcon

HKEY_CURRENT_USER\303\shell

HKEY_CURRENT_USER\303\shell\
open

HKEY_CURRENT_USER\303\shell\
open\command

HKEY_CURRENT_USER\303\shell\
runas

HKEY_CURRENT_USER\303\shell\
runas\command

HKEY_CURRENT_USER\rFe

HKEY_CURRENT_USER\rFe\DefaultIcon

HKEY_CURRENT_USER\rFe\shell

HKEY_CURRENT_USER\rFe\shell\
open

HKEY_CURRENT_USER\rFe\shell\
open\command

HKEY_CURRENT_USER\rFe\shell\
runas

HKEY_CURRENT_USER\rFe\shell\
runas\command

HKEY_CURRENT_USER\Wt

HKEY_CURRENT_USER\Wt\DefaultIcon

HKEY_CURRENT_USER\Wt\shell

HKEY_CURRENT_USER\Wt\shell\
open

HKEY_CURRENT_USER\Wt\shell\
open\command

HKEY_CURRENT_USER\Wt\shell\
runas

HKEY_CURRENT_USER\Wt\shell\
runas\command

HKEY_CURRENT_USER\6gF

HKEY_CURRENT_USER\6gF\DefaultIcon

HKEY_CURRENT_USER\6gF\shell

HKEY_CURRENT_USER\6gF\shell\
open

HKEY_CURRENT_USER\6gF\shell\
open\command

HKEY_CURRENT_USER\6gF\shell\
runas

HKEY_CURRENT_USER\6gF\shell\
runas\command

HKEY_CURRENT_USER\NbI

HKEY_CURRENT_USER\NbI\DefaultIcon

HKEY_CURRENT_USER\NbI\shell

HKEY_CURRENT_USER\NbI\shell\
open

HKEY_CURRENT_USER\NbI\shell\
open\command

HKEY_CURRENT_USER\NbI\shell\
runas

HKEY_CURRENT_USER\NbI\shell\
runas\command

HKEY_CURRENT_USER\58

HKEY_CURRENT_USER\58\DefaultIcon

HKEY_CURRENT_USER\58\shell

HKEY_CURRENT_USER\58\shell\
open

HKEY_CURRENT_USER\58\shell\
open\command

HKEY_CURRENT_USER\58\shell\
runas

HKEY_CURRENT_USER\58\shell\
runas\command

HKEY_CURRENT_USER\wLy

HKEY_CURRENT_USER\wLy\DefaultIcon

HKEY_CURRENT_USER\wLy\shell

HKEY_CURRENT_USER\wLy\shell\
open

HKEY_CURRENT_USER\wLy\shell\
open\command

HKEY_CURRENT_USER\wLy\shell\
runas

HKEY_CURRENT_USER\wLy\shell\
runas\command

HKEY_CURRENT_USER\ff

HKEY_CURRENT_USER\ff\DefaultIcon

HKEY_CURRENT_USER\ff\shell

HKEY_CURRENT_USER\ff\shell\
open

HKEY_CURRENT_USER\ff\shell\
open\command

HKEY_CURRENT_USER\ff\shell\
runas

HKEY_CURRENT_USER\ff\shell\
runas\command

HKEY_CURRENT_USER\no0

HKEY_CURRENT_USER\no0\DefaultIcon

HKEY_CURRENT_USER\no0\shell

HKEY_CURRENT_USER\no0\shell\
open

HKEY_CURRENT_USER\no0\shell\
open\command

HKEY_CURRENT_USER\no0\shell\
runas

HKEY_CURRENT_USER\no0\shell\
runas\command

HKEY_CURRENT_USER\cL

HKEY_CURRENT_USER\cL\DefaultIcon

HKEY_CURRENT_USER\cL\shell

HKEY_CURRENT_USER\cL\shell\
open

HKEY_CURRENT_USER\cL\shell\
open\command

HKEY_CURRENT_USER\cL\shell\
runas

HKEY_CURRENT_USER\cL\shell\
runas\command

HKEY_CURRENT_USER\Gc

HKEY_CURRENT_USER\Gc\DefaultIcon

HKEY_CURRENT_USER\Gc\shell

HKEY_CURRENT_USER\Gc\shell\
open

HKEY_CURRENT_USER\Gc\shell\
open\command

HKEY_CURRENT_USER\Gc\shell\
runas

HKEY_CURRENT_USER\Gc\shell\
runas\command

HKEY_CURRENT_USER\pK

HKEY_CURRENT_USER\pK\DefaultIcon

HKEY_CURRENT_USER\pK\shell

HKEY_CURRENT_USER\pK\shell\
open

HKEY_CURRENT_USER\pK\shell\
open\command

HKEY_CURRENT_USER\pK\shell\
runas

HKEY_CURRENT_USER\pK\shell\
runas\command

HKEY_CURRENT_USER\tW7

HKEY_CURRENT_USER\tW7\DefaultIcon

HKEY_CURRENT_USER\tW7\shell

HKEY_CURRENT_USER\tW7\shell\
open

HKEY_CURRENT_USER\tW7\shell\
open\command

HKEY_CURRENT_USER\tW7\shell\
runas

HKEY_CURRENT_USER\tW7\shell\
runas\command

HKEY_CURRENT_USER\Jnr

HKEY_CURRENT_USER\Jnr\DefaultIcon

HKEY_CURRENT_USER\Jnr\shell

HKEY_CURRENT_USER\Jnr\shell\
open

HKEY_CURRENT_USER\Jnr\shell\
open\command

HKEY_CURRENT_USER\Jnr\shell\
runas

HKEY_CURRENT_USER\Jnr\shell\
runas\command

HKEY_CURRENT_USER\l7

HKEY_CURRENT_USER\l7\DefaultIcon

HKEY_CURRENT_USER\l7\shell

HKEY_CURRENT_USER\l7\shell\
open

HKEY_CURRENT_USER\l7\shell\
open\command

HKEY_CURRENT_USER\l7\shell\
runas

HKEY_CURRENT_USER\l7\shell\
runas\command

HKEY_CURRENT_USER\Q5

HKEY_CURRENT_USER\Q5\DefaultIcon

HKEY_CURRENT_USER\Q5\shell

HKEY_CURRENT_USER\Q5\shell\
open

HKEY_CURRENT_USER\Q5\shell\
open\command

HKEY_CURRENT_USER\Q5\shell\
runas

HKEY_CURRENT_USER\Q5\shell\
runas\command

HKEY_CURRENT_USER\UF

HKEY_CURRENT_USER\UF\DefaultIcon

HKEY_CURRENT_USER\UF\shell

HKEY_CURRENT_USER\UF\shell\
open

HKEY_CURRENT_USER\UF\shell\
open\command

HKEY_CURRENT_USER\UF\shell\
runas

HKEY_CURRENT_USER\UF\shell\
runas\command

HKEY_CURRENT_USER\4ur

HKEY_CURRENT_USER\4ur\DefaultIcon

HKEY_CURRENT_USER\4ur\shell

HKEY_CURRENT_USER\4ur\shell\
open

HKEY_CURRENT_USER\4ur\shell\
open\command

HKEY_CURRENT_USER\4ur\shell\
runas

HKEY_CURRENT_USER\4ur\shell\
runas\command

HKEY_CURRENT_USER\hu

HKEY_CURRENT_USER\hu\DefaultIcon

HKEY_CURRENT_USER\hu\shell

HKEY_CURRENT_USER\hu\shell\
open

HKEY_CURRENT_USER\hu\shell\
open\command

HKEY_CURRENT_USER\hu\shell\
runas

HKEY_CURRENT_USER\hu\shell\
runas\command

HKEY_CURRENT_USER\Lk

HKEY_CURRENT_USER\Lk\DefaultIcon

HKEY_CURRENT_USER\Lk\shell

HKEY_CURRENT_USER\Lk\shell\
open

HKEY_CURRENT_USER\Lk\shell\
open\command

HKEY_CURRENT_USER\Lk\shell\
runas

HKEY_CURRENT_USER\Lk\shell\
runas\command

HKEY_CURRENT_USER\w2

HKEY_CURRENT_USER\w2\DefaultIcon

HKEY_CURRENT_USER\w2\shell

HKEY_CURRENT_USER\w2\shell\
open

HKEY_CURRENT_USER\w2\shell\
open\command

HKEY_CURRENT_USER\w2\shell\
runas

HKEY_CURRENT_USER\w2\shell\
runas\command

HKEY_CURRENT_USER\LLp

HKEY_CURRENT_USER\LLp\DefaultIcon

HKEY_CURRENT_USER\LLp\shell

HKEY_CURRENT_USER\LLp\shell\
open

HKEY_CURRENT_USER\LLp\shell\
open\command

HKEY_CURRENT_USER\LLp\shell\
runas

HKEY_CURRENT_USER\LLp\shell\
runas\command

HKEY_CURRENT_USER\nRt

HKEY_CURRENT_USER\nRt\DefaultIcon

HKEY_CURRENT_USER\nRt\shell

HKEY_CURRENT_USER\nRt\shell\
open

HKEY_CURRENT_USER\nRt\shell\
open\command

HKEY_CURRENT_USER\nRt\shell\
runas

HKEY_CURRENT_USER\nRt\shell\
runas\command

HKEY_CURRENT_USER\7J5

HKEY_CURRENT_USER\7J5\DefaultIcon

HKEY_CURRENT_USER\7J5\shell

HKEY_CURRENT_USER\7J5\shell\
open

HKEY_CURRENT_USER\7J5\shell\
open\command

HKEY_CURRENT_USER\7J5\shell\
runas

HKEY_CURRENT_USER\7J5\shell\
runas\command

HKEY_CURRENT_USER\RGd

HKEY_CURRENT_USER\RGd\DefaultIcon

HKEY_CURRENT_USER\RGd\shell

HKEY_CURRENT_USER\RGd\shell\
open

HKEY_CURRENT_USER\RGd\shell\
open\command

HKEY_CURRENT_USER\RGd\shell\
runas

HKEY_CURRENT_USER\RGd\shell\
runas\command

HKEY_CURRENT_USER\350

HKEY_CURRENT_USER\350\DefaultIcon

HKEY_CURRENT_USER\350\shell

HKEY_CURRENT_USER\350\shell\
open

HKEY_CURRENT_USER\350\shell\
open\command

HKEY_CURRENT_USER\350\shell\
runas

HKEY_CURRENT_USER\350\shell\
runas\command

HKEY_CURRENT_USER\Ys

HKEY_CURRENT_USER\Ys\DefaultIcon

HKEY_CURRENT_USER\Ys\shell

HKEY_CURRENT_USER\Ys\shell\
open

HKEY_CURRENT_USER\Ys\shell\
open\command

HKEY_CURRENT_USER\Ys\shell\
runas

HKEY_CURRENT_USER\Ys\shell\
runas\command

HKEY_CURRENT_USER\Etm

HKEY_CURRENT_USER\Etm\DefaultIcon

HKEY_CURRENT_USER\Etm\shell

HKEY_CURRENT_USER\Etm\shell\
open

HKEY_CURRENT_USER\Etm\shell\
open\command

HKEY_CURRENT_USER\Etm\shell\
runas

HKEY_CURRENT_USER\Etm\shell\
runas\command

HKEY_CURRENT_USER\p7a

HKEY_CURRENT_USER\p7a\DefaultIcon

HKEY_CURRENT_USER\p7a\shell

HKEY_CURRENT_USER\p7a\shell\
open

HKEY_CURRENT_USER\p7a\shell\
open\command

HKEY_CURRENT_USER\p7a\shell\
runas

HKEY_CURRENT_USER\p7a\shell\
runas\command

HKEY_CURRENT_USER\eul

HKEY_CURRENT_USER\eul\DefaultIcon

HKEY_CURRENT_USER\eul\shell

HKEY_CURRENT_USER\eul\shell\
open

HKEY_CURRENT_USER\eul\shell\
open\command

HKEY_CURRENT_USER\eul\shell\
runas

HKEY_CURRENT_USER\eul\shell\
runas\command

HKEY_CURRENT_USER\TP

HKEY_CURRENT_USER\TP\DefaultIcon

HKEY_CURRENT_USER\TP\shell

HKEY_CURRENT_USER\TP\shell\
open

HKEY_CURRENT_USER\TP\shell\
open\command

HKEY_CURRENT_USER\TP\shell\
runas

HKEY_CURRENT_USER\TP\shell\
runas\command

HKEY_CURRENT_USER\waL

HKEY_CURRENT_USER\waL\DefaultIcon

HKEY_CURRENT_USER\waL\shell

HKEY_CURRENT_USER\waL\shell\
open

HKEY_CURRENT_USER\waL\shell\
open\command

HKEY_CURRENT_USER\waL\shell\
runas

HKEY_CURRENT_USER\waL\shell\
runas\command

HKEY_CURRENT_USER\vXx

HKEY_CURRENT_USER\vXx\DefaultIcon

HKEY_CURRENT_USER\vXx\shell

HKEY_CURRENT_USER\vXx\shell\
open

HKEY_CURRENT_USER\vXx\shell\
open\command

HKEY_CURRENT_USER\vXx\shell\
runas

HKEY_CURRENT_USER\vXx\shell\
runas\command

HKEY_CURRENT_USER\Kue

HKEY_CURRENT_USER\Kue\DefaultIcon

HKEY_CURRENT_USER\Kue\shell

HKEY_CURRENT_USER\Kue\shell\
open

HKEY_CURRENT_USER\Kue\shell\
open\command

HKEY_CURRENT_USER\Kue\shell\
runas

HKEY_CURRENT_USER\Kue\shell\
runas\command

HKEY_CURRENT_USER\0n

HKEY_CURRENT_USER\0n\DefaultIcon

HKEY_CURRENT_USER\0n\shell

HKEY_CURRENT_USER\0n\shell\
open

HKEY_CURRENT_USER\0n\shell\
open\command

HKEY_CURRENT_USER\0n\shell\
runas

HKEY_CURRENT_USER\0n\shell\
runas\command

HKEY_CURRENT_USER\Dx

HKEY_CURRENT_USER\Dx\DefaultIcon

HKEY_CURRENT_USER\Dx\shell

HKEY_CURRENT_USER\Dx\shell\
open

HKEY_CURRENT_USER\Dx\shell\
open\command

HKEY_CURRENT_USER\Dx\shell\
runas

HKEY_CURRENT_USER\Dx\shell\
runas\command

HKEY_CURRENT_USER\16D

HKEY_CURRENT_USER\16D\DefaultIcon

HKEY_CURRENT_USER\16D\shell

HKEY_CURRENT_USER\16D\shell\
open

HKEY_CURRENT_USER\16D\shell\
open\command

HKEY_CURRENT_USER\16D\shell\
runas

HKEY_CURRENT_USER\16D\shell\
runas\command

HKEY_CURRENT_USER\O26

HKEY_CURRENT_USER\O26\DefaultIcon

HKEY_CURRENT_USER\O26\shell

HKEY_CURRENT_USER\O26\shell\
open

HKEY_CURRENT_USER\O26\shell\
open\command

HKEY_CURRENT_USER\O26\shell\
runas

HKEY_CURRENT_USER\O26\shell\
runas\command

HKEY_CURRENT_USER\D7d

HKEY_CURRENT_USER\D7d\DefaultIcon

HKEY_CURRENT_USER\D7d\shell

HKEY_CURRENT_USER\D7d\shell\
open

HKEY_CURRENT_USER\D7d\shell\
open\command

HKEY_CURRENT_USER\D7d\shell\
runas

HKEY_CURRENT_USER\D7d\shell\
runas\command

HKEY_CURRENT_USER\dL

HKEY_CURRENT_USER\dL\DefaultIcon

HKEY_CURRENT_USER\dL\shell

HKEY_CURRENT_USER\dL\shell\
open

HKEY_CURRENT_USER\dL\shell\
open\command

HKEY_CURRENT_USER\dL\shell\
runas

HKEY_CURRENT_USER\dL\shell\
runas\command

HKEY_CURRENT_USER\f5N

HKEY_CURRENT_USER\f5N\DefaultIcon

HKEY_CURRENT_USER\f5N\shell

HKEY_CURRENT_USER\f5N\shell\
open

HKEY_CURRENT_USER\f5N\shell\
open\command

HKEY_CURRENT_USER\f5N\shell\
runas

HKEY_CURRENT_USER\f5N\shell\
runas\command

HKEY_CURRENT_USER\60

HKEY_CURRENT_USER\60\DefaultIcon

HKEY_CURRENT_USER\60\shell

HKEY_CURRENT_USER\60\shell\
open

HKEY_CURRENT_USER\60\shell\
open\command

HKEY_CURRENT_USER\60\shell\
runas

HKEY_CURRENT_USER\60\shell\
runas\command

HKEY_CURRENT_USER\5vk

HKEY_CURRENT_USER\5vk\DefaultIcon

HKEY_CURRENT_USER\5vk\shell

HKEY_CURRENT_USER\5vk\shell\
open

HKEY_CURRENT_USER\5vk\shell\
open\command

HKEY_CURRENT_USER\5vk\shell\
runas

HKEY_CURRENT_USER\5vk\shell\
runas\command

HKEY_CURRENT_USER\J6U

HKEY_CURRENT_USER\J6U\DefaultIcon

HKEY_CURRENT_USER\J6U\shell

HKEY_CURRENT_USER\J6U\shell\
open

HKEY_CURRENT_USER\J6U\shell\
open\command

HKEY_CURRENT_USER\J6U\shell\
runas

HKEY_CURRENT_USER\J6U\shell\
runas\command

HKEY_CURRENT_USER\53q

HKEY_CURRENT_USER\53q\DefaultIcon

HKEY_CURRENT_USER\53q\shell

HKEY_CURRENT_USER\53q\shell\
open

HKEY_CURRENT_USER\53q\shell\
open\command

HKEY_CURRENT_USER\53q\shell\
runas

HKEY_CURRENT_USER\53q\shell\
runas\command

HKEY_CURRENT_USER\H3E

HKEY_CURRENT_USER\H3E\DefaultIcon

HKEY_CURRENT_USER\H3E\shell

HKEY_CURRENT_USER\H3E\shell\
open

HKEY_CURRENT_USER\H3E\shell\
open\command

HKEY_CURRENT_USER\H3E\shell\
runas

HKEY_CURRENT_USER\H3E\shell\
runas\command

HKEY_CURRENT_USER\326

HKEY_CURRENT_USER\326\DefaultIcon

HKEY_CURRENT_USER\326\shell

HKEY_CURRENT_USER\326\shell\
open

HKEY_CURRENT_USER\326\shell\
open\command

HKEY_CURRENT_USER\326\shell\
runas

HKEY_CURRENT_USER\326\shell\
runas\command

HKEY_CURRENT_USER\sr7

HKEY_CURRENT_USER\sr7\DefaultIcon

HKEY_CURRENT_USER\sr7\shell

HKEY_CURRENT_USER\sr7\shell\
open

HKEY_CURRENT_USER\sr7\shell\
open\command

HKEY_CURRENT_USER\sr7\shell\
runas

HKEY_CURRENT_USER\sr7\shell\
runas\command

HKEY_CURRENT_USER\8V

HKEY_CURRENT_USER\8V\DefaultIcon

HKEY_CURRENT_USER\8V\shell

HKEY_CURRENT_USER\8V\shell\
open

HKEY_CURRENT_USER\8V\shell\
open\command

HKEY_CURRENT_USER\8V\shell\
runas

HKEY_CURRENT_USER\8V\shell\
runas\command

HKEY_CURRENT_USER\ceY

HKEY_CURRENT_USER\ceY\DefaultIcon

HKEY_CURRENT_USER\ceY\shell

HKEY_CURRENT_USER\ceY\shell\
open

HKEY_CURRENT_USER\ceY\shell\
open\command

HKEY_CURRENT_USER\ceY\shell\
runas

HKEY_CURRENT_USER\ceY\shell\
runas\command

HKEY_CURRENT_USER\145

HKEY_CURRENT_USER\145\DefaultIcon

HKEY_CURRENT_USER\145\shell

HKEY_CURRENT_USER\145\shell\
open

HKEY_CURRENT_USER\145\shell\
open\command

HKEY_CURRENT_USER\145\shell\
runas

HKEY_CURRENT_USER\145\shell\
runas\command

HKEY_CURRENT_USER\8y3

HKEY_CURRENT_USER\8y3\DefaultIcon

HKEY_CURRENT_USER\8y3\shell

HKEY_CURRENT_USER\8y3\shell\
open

HKEY_CURRENT_USER\8y3\shell\
open\command

HKEY_CURRENT_USER\8y3\shell\
runas

HKEY_CURRENT_USER\8y3\shell\
runas\command

HKEY_CURRENT_USER\f00

HKEY_CURRENT_USER\f00\DefaultIcon

HKEY_CURRENT_USER\f00\shell

HKEY_CURRENT_USER\f00\shell\
open

HKEY_CURRENT_USER\f00\shell\
open\command

HKEY_CURRENT_USER\f00\shell\
runas

HKEY_CURRENT_USER\f00\shell\
runas\command

HKEY_CURRENT_USER\60I

HKEY_CURRENT_USER\60I\DefaultIcon

HKEY_CURRENT_USER\60I\shell

HKEY_CURRENT_USER\60I\shell\
open

HKEY_CURRENT_USER\60I\shell\
open\command

HKEY_CURRENT_USER\60I\shell\
runas

HKEY_CURRENT_USER\60I\shell\
runas\command

HKEY_CURRENT_USER\fjS

HKEY_CURRENT_USER\fjS\DefaultIcon

HKEY_CURRENT_USER\fjS\shell

HKEY_CURRENT_USER\fjS\shell\
open

HKEY_CURRENT_USER\fjS\shell\
open\command

HKEY_CURRENT_USER\fjS\shell\
runas

HKEY_CURRENT_USER\fjS\shell\
runas\command

HKEY_CURRENT_USER\X6

HKEY_CURRENT_USER\X6\DefaultIcon

HKEY_CURRENT_USER\X6\shell

HKEY_CURRENT_USER\X6\shell\
open

HKEY_CURRENT_USER\X6\shell\
open\command

HKEY_CURRENT_USER\X6\shell\
runas

HKEY_CURRENT_USER\X6\shell\
runas\command

HKEY_CURRENT_USER\Hc3

HKEY_CURRENT_USER\Hc3\DefaultIcon

HKEY_CURRENT_USER\Hc3\shell

HKEY_CURRENT_USER\Hc3\shell\
open

HKEY_CURRENT_USER\Hc3\shell\
open\command

HKEY_CURRENT_USER\Hc3\shell\
runas

HKEY_CURRENT_USER\Hc3\shell\
runas\command

HKEY_CURRENT_USER\Ux

HKEY_CURRENT_USER\Ux\DefaultIcon

HKEY_CURRENT_USER\Ux\shell

HKEY_CURRENT_USER\Ux\shell\
open

HKEY_CURRENT_USER\Ux\shell\
open\command

HKEY_CURRENT_USER\Ux\shell\
runas

HKEY_CURRENT_USER\Ux\shell\
runas\command

HKEY_CURRENT_USER\IG

HKEY_CURRENT_USER\IG\DefaultIcon

HKEY_CURRENT_USER\IG\shell

HKEY_CURRENT_USER\IG\shell\
open

HKEY_CURRENT_USER\IG\shell\
open\command

HKEY_CURRENT_USER\IG\shell\
runas

HKEY_CURRENT_USER\IG\shell\
runas\command

HKEY_CURRENT_USER\Y1

HKEY_CURRENT_USER\Y1\DefaultIcon

HKEY_CURRENT_USER\Y1\shell

HKEY_CURRENT_USER\Y1\shell\
open

HKEY_CURRENT_USER\Y1\shell\
open\command

HKEY_CURRENT_USER\Y1\shell\
runas

HKEY_CURRENT_USER\Y1\shell\
runas\command

HKEY_CURRENT_USER\7t

HKEY_CURRENT_USER\7t\DefaultIcon

HKEY_CURRENT_USER\7t\shell

HKEY_CURRENT_USER\7t\shell\
open

HKEY_CURRENT_USER\7t\shell\
open\command

HKEY_CURRENT_USER\7t\shell\
runas

HKEY_CURRENT_USER\7t\shell\
runas\command

HKEY_CURRENT_USER\6i

HKEY_CURRENT_USER\6i\DefaultIcon

HKEY_CURRENT_USER\6i\shell

HKEY_CURRENT_USER\6i\shell\
open

HKEY_CURRENT_USER\6i\shell\
open\command

HKEY_CURRENT_USER\6i\shell\
runas

HKEY_CURRENT_USER\6i\shell\
runas\command

HKEY_CURRENT_USER\56

HKEY_CURRENT_USER\56\DefaultIcon

HKEY_CURRENT_USER\56\shell

HKEY_CURRENT_USER\56\shell\
open

HKEY_CURRENT_USER\56\shell\
open\command

HKEY_CURRENT_USER\56\shell\
runas

HKEY_CURRENT_USER\56\shell\
runas\command

HKEY_CURRENT_USER\66

HKEY_CURRENT_USER\66\DefaultIcon

HKEY_CURRENT_USER\66\shell

HKEY_CURRENT_USER\66\shell\
open

HKEY_CURRENT_USER\66\shell\
open\command

HKEY_CURRENT_USER\66\shell\
runas

HKEY_CURRENT_USER\66\shell\
runas\command

HKEY_CURRENT_USER\tL

HKEY_CURRENT_USER\tL\DefaultIcon

HKEY_CURRENT_USER\tL\shell

HKEY_CURRENT_USER\tL\shell\
open

HKEY_CURRENT_USER\tL\shell\
open\command

HKEY_CURRENT_USER\tL\shell\
runas

HKEY_CURRENT_USER\tL\shell\
runas\command

HKEY_CURRENT_USER\fYB

HKEY_CURRENT_USER\fYB\DefaultIcon

HKEY_CURRENT_USER\fYB\shell

HKEY_CURRENT_USER\fYB\shell\
open

HKEY_CURRENT_USER\fYB\shell\
open\command

HKEY_CURRENT_USER\fYB\shell\
runas

HKEY_CURRENT_USER\fYB\shell\
runas\command

HKEY_CURRENT_USER\0g1

HKEY_CURRENT_USER\0g1\DefaultIcon

HKEY_CURRENT_USER\0g1\shell

HKEY_CURRENT_USER\0g1\shell\
open

HKEY_CURRENT_USER\0g1\shell\
open\command

HKEY_CURRENT_USER\0g1\shell\
runas

HKEY_CURRENT_USER\0g1\shell\
runas\command

HKEY_CURRENT_USER\ekF

HKEY_CURRENT_USER\ekF\DefaultIcon

HKEY_CURRENT_USER\ekF\shell

HKEY_CURRENT_USER\ekF\shell\
open

HKEY_CURRENT_USER\ekF\shell\
open\command

HKEY_CURRENT_USER\ekF\shell\
runas

HKEY_CURRENT_USER\ekF\shell\
runas\command

HKEY_CURRENT_USER\gdK

HKEY_CURRENT_USER\gdK\DefaultIcon

HKEY_CURRENT_USER\gdK\shell

HKEY_CURRENT_USER\gdK\shell\
open

HKEY_CURRENT_USER\gdK\shell\
open\command

HKEY_CURRENT_USER\gdK\shell\
runas

HKEY_CURRENT_USER\gdK\shell\
runas\command

HKEY_CURRENT_USER\gGO

HKEY_CURRENT_USER\gGO\DefaultIcon

HKEY_CURRENT_USER\gGO\shell

HKEY_CURRENT_USER\gGO\shell\
open

HKEY_CURRENT_USER\gGO\shell\
open\command

HKEY_CURRENT_USER\gGO\shell\
runas

HKEY_CURRENT_USER\gGO\shell\
runas\command

HKEY_CURRENT_USER\1h

HKEY_CURRENT_USER\1h\DefaultIcon

HKEY_CURRENT_USER\1h\shell

HKEY_CURRENT_USER\1h\shell\
open

HKEY_CURRENT_USER\1h\shell\
open\command

HKEY_CURRENT_USER\1h\shell\
runas

HKEY_CURRENT_USER\1h\shell\
runas\command

HKEY_CURRENT_USER\T8i

HKEY_CURRENT_USER\T8i\DefaultIcon

HKEY_CURRENT_USER\T8i\shell

HKEY_CURRENT_USER\T8i\shell\
open

HKEY_CURRENT_USER\T8i\shell\
open\command

HKEY_CURRENT_USER\T8i\shell\
runas

HKEY_CURRENT_USER\T8i\shell\
runas\command

HKEY_CURRENT_USER\3f

HKEY_CURRENT_USER\3f\DefaultIcon

HKEY_CURRENT_USER\3f\shell

HKEY_CURRENT_USER\3f\shell\
open

HKEY_CURRENT_USER\3f\shell\
open\command

HKEY_CURRENT_USER\3f\shell\
runas

HKEY_CURRENT_USER\3f\shell\
runas\command

HKEY_CURRENT_USER\vY6

HKEY_CURRENT_USER\vY6\DefaultIcon

HKEY_CURRENT_USER\vY6\shell

HKEY_CURRENT_USER\vY6\shell\
open

HKEY_CURRENT_USER\vY6\shell\
open\command

HKEY_CURRENT_USER\vY6\shell\
runas

HKEY_CURRENT_USER\vY6\shell\
runas\command

HKEY_CURRENT_USER\Ur5

HKEY_CURRENT_USER\Ur5\DefaultIcon

HKEY_CURRENT_USER\Ur5\shell

HKEY_CURRENT_USER\Ur5\shell\
open

HKEY_CURRENT_USER\Ur5\shell\
open\command

HKEY_CURRENT_USER\Ur5\shell\
runas

HKEY_CURRENT_USER\Ur5\shell\
runas\command

HKEY_CURRENT_USER\eN6

HKEY_CURRENT_USER\eN6\DefaultIcon

HKEY_CURRENT_USER\eN6\shell

HKEY_CURRENT_USER\eN6\shell\
open

HKEY_CURRENT_USER\eN6\shell\
open\command

HKEY_CURRENT_USER\eN6\shell\
runas

HKEY_CURRENT_USER\eN6\shell\
runas\command

HKEY_CURRENT_USER\031

HKEY_CURRENT_USER\031\DefaultIcon

HKEY_CURRENT_USER\031\shell

HKEY_CURRENT_USER\031\shell\
open

HKEY_CURRENT_USER\031\shell\
open\command

HKEY_CURRENT_USER\031\shell\
runas

HKEY_CURRENT_USER\031\shell\
runas\command

HKEY_CURRENT_USER\MKS

HKEY_CURRENT_USER\MKS\DefaultIcon

HKEY_CURRENT_USER\MKS\shell

HKEY_CURRENT_USER\MKS\shell\
open

HKEY_CURRENT_USER\MKS\shell\
open\command

HKEY_CURRENT_USER\MKS\shell\
runas

HKEY_CURRENT_USER\MKS\shell\
runas\command

HKEY_CURRENT_USER\6IB

HKEY_CURRENT_USER\6IB\DefaultIcon

HKEY_CURRENT_USER\6IB\shell

HKEY_CURRENT_USER\6IB\shell\
open

HKEY_CURRENT_USER\6IB\shell\
open\command

HKEY_CURRENT_USER\6IB\shell\
runas

HKEY_CURRENT_USER\6IB\shell\
runas\command

HKEY_CURRENT_USER\00S

HKEY_CURRENT_USER\00S\DefaultIcon

HKEY_CURRENT_USER\00S\shell

HKEY_CURRENT_USER\00S\shell\
open

HKEY_CURRENT_USER\00S\shell\
open\command

HKEY_CURRENT_USER\00S\shell\
runas

HKEY_CURRENT_USER\00S\shell\
runas\command

HKEY_CURRENT_USER\Bvr

HKEY_CURRENT_USER\Bvr\DefaultIcon

HKEY_CURRENT_USER\Bvr\shell

HKEY_CURRENT_USER\Bvr\shell\
open

HKEY_CURRENT_USER\Bvr\shell\
open\command

HKEY_CURRENT_USER\Bvr\shell\
runas

HKEY_CURRENT_USER\Bvr\shell\
runas\command

HKEY_CURRENT_USER\Ln

HKEY_CURRENT_USER\Ln\DefaultIcon

HKEY_CURRENT_USER\Ln\shell

HKEY_CURRENT_USER\Ln\shell\
open

HKEY_CURRENT_USER\Ln\shell\
open\command

HKEY_CURRENT_USER\Ln\shell\
runas

HKEY_CURRENT_USER\Ln\shell\
runas\command

HKEY_CURRENT_USER\4i

HKEY_CURRENT_USER\4i\DefaultIcon

HKEY_CURRENT_USER\4i\shell

HKEY_CURRENT_USER\4i\shell\
open

HKEY_CURRENT_USER\4i\shell\
open\command

HKEY_CURRENT_USER\4i\shell\
runas

HKEY_CURRENT_USER\4i\shell\
runas\command

HKEY_CURRENT_USER\y1w

HKEY_CURRENT_USER\y1w\DefaultIcon

HKEY_CURRENT_USER\y1w\shell

HKEY_CURRENT_USER\y1w\shell\
open

HKEY_CURRENT_USER\y1w\shell\
open\command

HKEY_CURRENT_USER\y1w\shell\
runas

HKEY_CURRENT_USER\y1w\shell\
runas\command

HKEY_CURRENT_USER\75s

HKEY_CURRENT_USER\75s\DefaultIcon

HKEY_CURRENT_USER\75s\shell

HKEY_CURRENT_USER\75s\shell\
open

HKEY_CURRENT_USER\75s\shell\
open\command

HKEY_CURRENT_USER\75s\shell\
runas

HKEY_CURRENT_USER\75s\shell\
runas\command

HKEY_CURRENT_USER\O3

HKEY_CURRENT_USER\O3\DefaultIcon

HKEY_CURRENT_USER\O3\shell

HKEY_CURRENT_USER\O3\shell\
open

HKEY_CURRENT_USER\O3\shell\
open\command

HKEY_CURRENT_USER\O3\shell\
runas

HKEY_CURRENT_USER\O3\shell\
runas\command

HKEY_CURRENT_USER\33w

HKEY_CURRENT_USER\33w\DefaultIcon

HKEY_CURRENT_USER\33w\shell

HKEY_CURRENT_USER\33w\shell\
open

HKEY_CURRENT_USER\33w\shell\
open\command

HKEY_CURRENT_USER\33w\shell\
runas

HKEY_CURRENT_USER\33w\shell\
runas\command

HKEY_CURRENT_USER\6j

HKEY_CURRENT_USER\6j\DefaultIcon

HKEY_CURRENT_USER\6j\shell

HKEY_CURRENT_USER\6j\shell\
open

HKEY_CURRENT_USER\6j\shell\
open\command

HKEY_CURRENT_USER\6j\shell\
runas

HKEY_CURRENT_USER\6j\shell\
runas\command

HKEY_CURRENT_USER\iU

HKEY_CURRENT_USER\iU\DefaultIcon

HKEY_CURRENT_USER\iU\shell

HKEY_CURRENT_USER\iU\shell\
open

HKEY_CURRENT_USER\iU\shell\
open\command

HKEY_CURRENT_USER\iU\shell\
runas

HKEY_CURRENT_USER\iU\shell\
runas\command

HKEY_CURRENT_USER\4U

HKEY_CURRENT_USER\4U\DefaultIcon

HKEY_CURRENT_USER\4U\shell

HKEY_CURRENT_USER\4U\shell\
open

HKEY_CURRENT_USER\4U\shell\
open\command

HKEY_CURRENT_USER\4U\shell\
runas

HKEY_CURRENT_USER\4U\shell\
runas\command

HKEY_CURRENT_USER\dQY

HKEY_CURRENT_USER\dQY\DefaultIcon

HKEY_CURRENT_USER\dQY\shell

HKEY_CURRENT_USER\dQY\shell\
open

HKEY_CURRENT_USER\dQY\shell\
open\command

HKEY_CURRENT_USER\dQY\shell\
runas

HKEY_CURRENT_USER\dQY\shell\
runas\command

HKEY_CURRENT_USER\5IG

HKEY_CURRENT_USER\5IG\DefaultIcon

HKEY_CURRENT_USER\5IG\shell

HKEY_CURRENT_USER\5IG\shell\
open

HKEY_CURRENT_USER\5IG\shell\
open\command

HKEY_CURRENT_USER\5IG\shell\
runas

HKEY_CURRENT_USER\5IG\shell\
runas\command

HKEY_CURRENT_USER\wrp

HKEY_CURRENT_USER\wrp\DefaultIcon

HKEY_CURRENT_USER\wrp\shell

HKEY_CURRENT_USER\wrp\shell\
open

HKEY_CURRENT_USER\wrp\shell\
open\command

HKEY_CURRENT_USER\wrp\shell\
runas

HKEY_CURRENT_USER\wrp\shell\
runas\command

HKEY_CURRENT_USER\bC

HKEY_CURRENT_USER\bC\DefaultIcon

HKEY_CURRENT_USER\bC\shell

HKEY_CURRENT_USER\bC\shell\
open

HKEY_CURRENT_USER\bC\shell\
open\command

HKEY_CURRENT_USER\bC\shell\
runas

HKEY_CURRENT_USER\bC\shell\
runas\command

HKEY_CURRENT_USER\D7

HKEY_CURRENT_USER\D7\DefaultIcon

HKEY_CURRENT_USER\D7\shell

HKEY_CURRENT_USER\D7\shell\
open

HKEY_CURRENT_USER\D7\shell\
open\command

HKEY_CURRENT_USER\D7\shell\
runas

HKEY_CURRENT_USER\D7\shell\
runas\command

HKEY_CURRENT_USER\37

HKEY_CURRENT_USER\37\DefaultIcon

HKEY_CURRENT_USER\37\shell

HKEY_CURRENT_USER\37\shell\
open

HKEY_CURRENT_USER\37\shell\
open\command

HKEY_CURRENT_USER\37\shell\
runas

HKEY_CURRENT_USER\37\shell\
runas\command

HKEY_CURRENT_USER\1Pn

HKEY_CURRENT_USER\1Pn\DefaultIcon

HKEY_CURRENT_USER\1Pn\shell

HKEY_CURRENT_USER\1Pn\shell\
open

HKEY_CURRENT_USER\1Pn\shell\
open\command

HKEY_CURRENT_USER\1Pn\shell\
runas

HKEY_CURRENT_USER\1Pn\shell\
runas\command

HKEY_CURRENT_USER\J4x

HKEY_CURRENT_USER\J4x\DefaultIcon

HKEY_CURRENT_USER\J4x\shell

HKEY_CURRENT_USER\J4x\shell\
open

HKEY_CURRENT_USER\J4x\shell\
open\command

HKEY_CURRENT_USER\J4x\shell\
runas

HKEY_CURRENT_USER\J4x\shell\
runas\command

HKEY_CURRENT_USER\fm2

HKEY_CURRENT_USER\fm2\DefaultIcon

HKEY_CURRENT_USER\fm2\shell

HKEY_CURRENT_USER\fm2\shell\
open

HKEY_CURRENT_USER\fm2\shell\
open\command

HKEY_CURRENT_USER\fm2\shell\
runas

HKEY_CURRENT_USER\fm2\shell\
runas\command

HKEY_CURRENT_USER\3Vy

HKEY_CURRENT_USER\3Vy\DefaultIcon

HKEY_CURRENT_USER\3Vy\shell

HKEY_CURRENT_USER\3Vy\shell\
open

HKEY_CURRENT_USER\3Vy\shell\
open\command

HKEY_CURRENT_USER\3Vy\shell\
runas

HKEY_CURRENT_USER\3Vy\shell\
runas\command

HKEY_CURRENT_USER\6Bd

HKEY_CURRENT_USER\6Bd\DefaultIcon

HKEY_CURRENT_USER\6Bd\shell

HKEY_CURRENT_USER\6Bd\shell\
open

HKEY_CURRENT_USER\6Bd\shell\
open\command

HKEY_CURRENT_USER\6Bd\shell\
runas

HKEY_CURRENT_USER\6Bd\shell\
runas\command

HKEY_CURRENT_USER\pu

HKEY_CURRENT_USER\pu\DefaultIcon

HKEY_CURRENT_USER\pu\shell

HKEY_CURRENT_USER\pu\shell\
open

HKEY_CURRENT_USER\pu\shell\
open\command

HKEY_CURRENT_USER\pu\shell\
runas

HKEY_CURRENT_USER\pu\shell\
runas\command

HKEY_CURRENT_USER\6O

HKEY_CURRENT_USER\6O\DefaultIcon

HKEY_CURRENT_USER\6O\shell

HKEY_CURRENT_USER\6O\shell\
open

HKEY_CURRENT_USER\6O\shell\
open\command

HKEY_CURRENT_USER\6O\shell\
runas

HKEY_CURRENT_USER\6O\shell\
runas\command

HKEY_CURRENT_USER\1q

HKEY_CURRENT_USER\1q\DefaultIcon

HKEY_CURRENT_USER\1q\shell

HKEY_CURRENT_USER\1q\shell\
open

HKEY_CURRENT_USER\1q\shell\
open\command

HKEY_CURRENT_USER\1q\shell\
runas

HKEY_CURRENT_USER\1q\shell\
runas\command

HKEY_CURRENT_USER\o85

HKEY_CURRENT_USER\o85\DefaultIcon

HKEY_CURRENT_USER\o85\shell

HKEY_CURRENT_USER\o85\shell\
open

HKEY_CURRENT_USER\o85\shell\
open\command

HKEY_CURRENT_USER\o85\shell\
runas

HKEY_CURRENT_USER\o85\shell\
runas\command

HKEY_CURRENT_USER\P41

HKEY_CURRENT_USER\P41\DefaultIcon

HKEY_CURRENT_USER\P41\shell

HKEY_CURRENT_USER\P41\shell\
open

HKEY_CURRENT_USER\P41\shell\
open\command

HKEY_CURRENT_USER\P41\shell\
runas

HKEY_CURRENT_USER\P41\shell\
runas\command

HKEY_CURRENT_USER\ioS

HKEY_CURRENT_USER\ioS\DefaultIcon

HKEY_CURRENT_USER\ioS\shell

HKEY_CURRENT_USER\ioS\shell\
open

HKEY_CURRENT_USER\ioS\shell\
open\command

HKEY_CURRENT_USER\ioS\shell\
runas

HKEY_CURRENT_USER\ioS\shell\
runas\command

HKEY_CURRENT_USER\EB

HKEY_CURRENT_USER\EB\DefaultIcon

HKEY_CURRENT_USER\EB\shell

HKEY_CURRENT_USER\EB\shell\
open

HKEY_CURRENT_USER\EB\shell\
open\command

HKEY_CURRENT_USER\EB\shell\
runas

HKEY_CURRENT_USER\EB\shell\
runas\command

HKEY_CURRENT_USER\852

HKEY_CURRENT_USER\852\DefaultIcon

HKEY_CURRENT_USER\852\shell

HKEY_CURRENT_USER\852\shell\
open

HKEY_CURRENT_USER\852\shell\
open\command

HKEY_CURRENT_USER\852\shell\
runas

HKEY_CURRENT_USER\852\shell\
runas\command

HKEY_CURRENT_USER\IP1

HKEY_CURRENT_USER\IP1\DefaultIcon

HKEY_CURRENT_USER\IP1\shell

HKEY_CURRENT_USER\IP1\shell\
open

HKEY_CURRENT_USER\IP1\shell\
open\command

HKEY_CURRENT_USER\IP1\shell\
runas

HKEY_CURRENT_USER\IP1\shell\
runas\command

HKEY_CURRENT_USER\4b8

HKEY_CURRENT_USER\4b8\DefaultIcon

HKEY_CURRENT_USER\4b8\shell

HKEY_CURRENT_USER\4b8\shell\
open

HKEY_CURRENT_USER\4b8\shell\
open\command

HKEY_CURRENT_USER\4b8\shell\
runas

HKEY_CURRENT_USER\4b8\shell\
runas\command

HKEY_CURRENT_USER\0hI

HKEY_CURRENT_USER\0hI\DefaultIcon

HKEY_CURRENT_USER\0hI\shell

HKEY_CURRENT_USER\0hI\shell\
open

HKEY_CURRENT_USER\0hI\shell\
open\command

HKEY_CURRENT_USER\0hI\shell\
runas

HKEY_CURRENT_USER\0hI\shell\
runas\command

HKEY_CURRENT_USER\51M

HKEY_CURRENT_USER\51M\DefaultIcon

HKEY_CURRENT_USER\51M\shell

HKEY_CURRENT_USER\51M\shell\
open

HKEY_CURRENT_USER\51M\shell\
open\command

HKEY_CURRENT_USER\51M\shell\
runas

HKEY_CURRENT_USER\51M\shell\
runas\command

HKEY_CURRENT_USER\pDS

HKEY_CURRENT_USER\pDS\DefaultIcon

HKEY_CURRENT_USER\pDS\shell

HKEY_CURRENT_USER\pDS\shell\
open

HKEY_CURRENT_USER\pDS\shell\
open\command

HKEY_CURRENT_USER\pDS\shell\
runas

HKEY_CURRENT_USER\pDS\shell\
runas\command

HKEY_CURRENT_USER\K8N

HKEY_CURRENT_USER\K8N\DefaultIcon

HKEY_CURRENT_USER\K8N\shell

HKEY_CURRENT_USER\K8N\shell\
open

HKEY_CURRENT_USER\K8N\shell\
open\command

HKEY_CURRENT_USER\K8N\shell\
runas

HKEY_CURRENT_USER\K8N\shell\
runas\command

HKEY_CURRENT_USER\gpP

HKEY_CURRENT_USER\gpP\DefaultIcon

HKEY_CURRENT_USER\gpP\shell

HKEY_CURRENT_USER\gpP\shell\
open

HKEY_CURRENT_USER\gpP\shell\
open\command

HKEY_CURRENT_USER\gpP\shell\
runas

HKEY_CURRENT_USER\gpP\shell\
runas\command

HKEY_CURRENT_USER\Ot

HKEY_CURRENT_USER\Ot\DefaultIcon

HKEY_CURRENT_USER\Ot\shell

HKEY_CURRENT_USER\Ot\shell\
open

HKEY_CURRENT_USER\Ot\shell\
open\command

HKEY_CURRENT_USER\Ot\shell\
runas

HKEY_CURRENT_USER\Ot\shell\
runas\command

HKEY_CURRENT_USER\wEy

HKEY_CURRENT_USER\wEy\DefaultIcon

HKEY_CURRENT_USER\wEy\shell

HKEY_CURRENT_USER\wEy\shell\
open

HKEY_CURRENT_USER\wEy\shell\
open\command

HKEY_CURRENT_USER\wEy\shell\
runas

HKEY_CURRENT_USER\wEy\shell\
runas\command

HKEY_CURRENT_USER\4P

HKEY_CURRENT_USER\4P\DefaultIcon

HKEY_CURRENT_USER\4P\shell

HKEY_CURRENT_USER\4P\shell\
open

HKEY_CURRENT_USER\4P\shell\
open\command

HKEY_CURRENT_USER\4P\shell\
runas

HKEY_CURRENT_USER\4P\shell\
runas\command

HKEY_CURRENT_USER\ad1

HKEY_CURRENT_USER\ad1\DefaultIcon

HKEY_CURRENT_USER\ad1\shell

HKEY_CURRENT_USER\ad1\shell\
open

HKEY_CURRENT_USER\ad1\shell\
open\command

HKEY_CURRENT_USER\ad1\shell\
runas

HKEY_CURRENT_USER\ad1\shell\
runas\command

HKEY_CURRENT_USER\Ls

HKEY_CURRENT_USER\Ls\DefaultIcon

HKEY_CURRENT_USER\Ls\shell

HKEY_CURRENT_USER\Ls\shell\
open

HKEY_CURRENT_USER\Ls\shell\
open\command

HKEY_CURRENT_USER\Ls\shell\
runas

HKEY_CURRENT_USER\Ls\shell\
runas\command

HKEY_CURRENT_USER\gE6

HKEY_CURRENT_USER\gE6\DefaultIcon

HKEY_CURRENT_USER\gE6\shell

HKEY_CURRENT_USER\gE6\shell\
open

HKEY_CURRENT_USER\gE6\shell\
open\command

HKEY_CURRENT_USER\gE6\shell\
runas

HKEY_CURRENT_USER\gE6\shell\
runas\command

HKEY_CURRENT_USER\1U

HKEY_CURRENT_USER\1U\DefaultIcon

HKEY_CURRENT_USER\1U\shell

HKEY_CURRENT_USER\1U\shell\
open

HKEY_CURRENT_USER\1U\shell\
open\command

HKEY_CURRENT_USER\1U\shell\
runas

HKEY_CURRENT_USER\1U\shell\
runas\command

HKEY_CURRENT_USER\Ik0

HKEY_CURRENT_USER\Ik0\DefaultIcon

HKEY_CURRENT_USER\Ik0\shell

HKEY_CURRENT_USER\Ik0\shell\
open

HKEY_CURRENT_USER\Ik0\shell\
open\command

HKEY_CURRENT_USER\Ik0\shell\
runas

HKEY_CURRENT_USER\Ik0\shell\
runas\command

HKEY_CURRENT_USER\JX

HKEY_CURRENT_USER\JX\DefaultIcon

HKEY_CURRENT_USER\JX\shell

HKEY_CURRENT_USER\JX\shell\
open

HKEY_CURRENT_USER\JX\shell\
open\command

HKEY_CURRENT_USER\JX\shell\
runas

HKEY_CURRENT_USER\JX\shell\
runas\command

HKEY_CURRENT_USER\f5p

HKEY_CURRENT_USER\f5p\DefaultIcon

HKEY_CURRENT_USER\f5p\shell

HKEY_CURRENT_USER\f5p\shell\
open

HKEY_CURRENT_USER\f5p\shell\
open\command

HKEY_CURRENT_USER\f5p\shell\
runas

HKEY_CURRENT_USER\f5p\shell\
runas\command

HKEY_CURRENT_USER\Ib

HKEY_CURRENT_USER\Ib\DefaultIcon

HKEY_CURRENT_USER\Ib\shell

HKEY_CURRENT_USER\Ib\shell\
open

HKEY_CURRENT_USER\Ib\shell\
open\command

HKEY_CURRENT_USER\Ib\shell\
runas

HKEY_CURRENT_USER\Ib\shell\
runas\command

HKEY_CURRENT_USER\635

HKEY_CURRENT_USER\635\DefaultIcon

HKEY_CURRENT_USER\635\shell

HKEY_CURRENT_USER\635\shell\
open

HKEY_CURRENT_USER\635\shell\
open\command

HKEY_CURRENT_USER\635\shell\
runas

HKEY_CURRENT_USER\635\shell\
runas\command

HKEY_CURRENT_USER\135

HKEY_CURRENT_USER\135\DefaultIcon

HKEY_CURRENT_USER\135\shell

HKEY_CURRENT_USER\135\shell\
open

HKEY_CURRENT_USER\135\shell\
open\command

HKEY_CURRENT_USER\135\shell\
runas

HKEY_CURRENT_USER\135\shell\
runas\command

HKEY_CURRENT_USER\HH

HKEY_CURRENT_USER\HH\DefaultIcon

HKEY_CURRENT_USER\HH\shell

HKEY_CURRENT_USER\HH\shell\
open

HKEY_CURRENT_USER\HH\shell\
open\command

HKEY_CURRENT_USER\HH\shell\
runas

HKEY_CURRENT_USER\HH\shell\
runas\command

HKEY_CURRENT_USER\1Vu

HKEY_CURRENT_USER\1Vu\DefaultIcon

HKEY_CURRENT_USER\1Vu\shell

HKEY_CURRENT_USER\1Vu\shell\
open

HKEY_CURRENT_USER\1Vu\shell\
open\command

HKEY_CURRENT_USER\1Vu\shell\
runas

HKEY_CURRENT_USER\1Vu\shell\
runas\command

HKEY_CURRENT_USER\3MB

HKEY_CURRENT_USER\3MB\DefaultIcon

HKEY_CURRENT_USER\3MB\shell

HKEY_CURRENT_USER\3MB\shell\
open

HKEY_CURRENT_USER\3MB\shell\
open\command

HKEY_CURRENT_USER\3MB\shell\
runas

HKEY_CURRENT_USER\3MB\shell\
runas\command

HKEY_CURRENT_USER\8Q

HKEY_CURRENT_USER\8Q\DefaultIcon

HKEY_CURRENT_USER\8Q\shell

HKEY_CURRENT_USER\8Q\shell\
open

HKEY_CURRENT_USER\8Q\shell\
open\command

HKEY_CURRENT_USER\8Q\shell\
runas

HKEY_CURRENT_USER\8Q\shell\
runas\command

HKEY_CURRENT_USER\805

HKEY_CURRENT_USER\805\DefaultIcon

HKEY_CURRENT_USER\805\shell

HKEY_CURRENT_USER\805\shell\
open

HKEY_CURRENT_USER\805\shell\
open\command

HKEY_CURRENT_USER\805\shell\
runas

HKEY_CURRENT_USER\805\shell\
runas\command

HKEY_CURRENT_USER\E6

HKEY_CURRENT_USER\E6\DefaultIcon

HKEY_CURRENT_USER\E6\shell

HKEY_CURRENT_USER\E6\shell\
open

HKEY_CURRENT_USER\E6\shell\
open\command

HKEY_CURRENT_USER\E6\shell\
runas

HKEY_CURRENT_USER\E6\shell\
runas\command

HKEY_CURRENT_USER\5gU

HKEY_CURRENT_USER\5gU\DefaultIcon

HKEY_CURRENT_USER\5gU\shell

HKEY_CURRENT_USER\5gU\shell\
open

HKEY_CURRENT_USER\5gU\shell\
open\command

HKEY_CURRENT_USER\5gU\shell\
runas

HKEY_CURRENT_USER\5gU\shell\
runas\command

HKEY_CURRENT_USER\17r

HKEY_CURRENT_USER\17r\DefaultIcon

HKEY_CURRENT_USER\17r\shell

HKEY_CURRENT_USER\17r\shell\
open

HKEY_CURRENT_USER\17r\shell\
open\command

HKEY_CURRENT_USER\17r\shell\
runas

HKEY_CURRENT_USER\17r\shell\
runas\command

HKEY_CURRENT_USER\e75

HKEY_CURRENT_USER\e75\DefaultIcon

HKEY_CURRENT_USER\e75\shell

HKEY_CURRENT_USER\e75\shell\
open

HKEY_CURRENT_USER\e75\shell\
open\command

HKEY_CURRENT_USER\e75\shell\
runas

HKEY_CURRENT_USER\e75\shell\
runas\command

HKEY_CURRENT_USER\4jW

HKEY_CURRENT_USER\4jW\DefaultIcon

HKEY_CURRENT_USER\4jW\shell

HKEY_CURRENT_USER\4jW\shell\
open

HKEY_CURRENT_USER\4jW\shell\
open\command

HKEY_CURRENT_USER\4jW\shell\
runas

HKEY_CURRENT_USER\4jW\shell\
runas\command

HKEY_CURRENT_USER\24

HKEY_CURRENT_USER\24\DefaultIcon

HKEY_CURRENT_USER\24\shell

HKEY_CURRENT_USER\24\shell\
open

HKEY_CURRENT_USER\24\shell\
open\command

HKEY_CURRENT_USER\24\shell\
runas

HKEY_CURRENT_USER\24\shell\
runas\command

HKEY_CURRENT_USER\6A

HKEY_CURRENT_USER\6A\DefaultIcon

HKEY_CURRENT_USER\6A\shell

HKEY_CURRENT_USER\6A\shell\
open

HKEY_CURRENT_USER\6A\shell\
open\command

HKEY_CURRENT_USER\6A\shell\
runas

HKEY_CURRENT_USER\6A\shell\
runas\command

HKEY_CURRENT_USER\8O6

HKEY_CURRENT_USER\8O6\DefaultIcon

HKEY_CURRENT_USER\8O6\shell

HKEY_CURRENT_USER\8O6\shell\
open

HKEY_CURRENT_USER\8O6\shell\
open\command

HKEY_CURRENT_USER\8O6\shell\
runas

HKEY_CURRENT_USER\8O6\shell\
runas\command

HKEY_CURRENT_USER\1o

HKEY_CURRENT_USER\1o\DefaultIcon

HKEY_CURRENT_USER\1o\shell

HKEY_CURRENT_USER\1o\shell\
open

HKEY_CURRENT_USER\1o\shell\
open\command

HKEY_CURRENT_USER\1o\shell\
runas

HKEY_CURRENT_USER\1o\shell\
runas\command

HKEY_CURRENT_USER\nh7

HKEY_CURRENT_USER\nh7\DefaultIcon

HKEY_CURRENT_USER\nh7\shell

HKEY_CURRENT_USER\nh7\shell\
open

HKEY_CURRENT_USER\nh7\shell\
open\command

HKEY_CURRENT_USER\nh7\shell\
runas

HKEY_CURRENT_USER\nh7\shell\
runas\command

HKEY_CURRENT_USER\0Y1

HKEY_CURRENT_USER\0Y1\DefaultIcon

HKEY_CURRENT_USER\0Y1\shell

HKEY_CURRENT_USER\0Y1\shell\
open

HKEY_CURRENT_USER\0Y1\shell\
open\command

HKEY_CURRENT_USER\0Y1\shell\
runas

HKEY_CURRENT_USER\0Y1\shell\
runas\command

HKEY_CURRENT_USER\V1r

HKEY_CURRENT_USER\V1r\DefaultIcon

HKEY_CURRENT_USER\V1r\shell

HKEY_CURRENT_USER\V1r\shell\
open

HKEY_CURRENT_USER\V1r\shell\
open\command

HKEY_CURRENT_USER\V1r\shell\
runas

HKEY_CURRENT_USER\V1r\shell\
runas\command

HKEY_CURRENT_USER\2MX

HKEY_CURRENT_USER\2MX\DefaultIcon

HKEY_CURRENT_USER\2MX\shell

HKEY_CURRENT_USER\2MX\shell\
open

HKEY_CURRENT_USER\2MX\shell\
open\command

HKEY_CURRENT_USER\2MX\shell\
runas

HKEY_CURRENT_USER\2MX\shell\
runas\command

HKEY_CURRENT_USER\urx

HKEY_CURRENT_USER\urx\DefaultIcon

HKEY_CURRENT_USER\urx\shell

HKEY_CURRENT_USER\urx\shell\
open

HKEY_CURRENT_USER\urx\shell\
open\command

HKEY_CURRENT_USER\urx\shell\
runas

HKEY_CURRENT_USER\urx\shell\
runas\command

HKEY_CURRENT_USER\3e7

HKEY_CURRENT_USER\3e7\DefaultIcon

HKEY_CURRENT_USER\3e7\shell

HKEY_CURRENT_USER\3e7\shell\
open

HKEY_CURRENT_USER\3e7\shell\
open\command

HKEY_CURRENT_USER\3e7\shell\
runas

HKEY_CURRENT_USER\3e7\shell\
runas\command

HKEY_CURRENT_USER\43v

HKEY_CURRENT_USER\43v\DefaultIcon

HKEY_CURRENT_USER\43v\shell

HKEY_CURRENT_USER\43v\shell\
open

HKEY_CURRENT_USER\43v\shell\
open\command

HKEY_CURRENT_USER\43v\shell\
runas

HKEY_CURRENT_USER\43v\shell\
runas\command

HKEY_CURRENT_USER\0le

HKEY_CURRENT_USER\0le\DefaultIcon

HKEY_CURRENT_USER\0le\shell

HKEY_CURRENT_USER\0le\shell\
open

HKEY_CURRENT_USER\0le\shell\
open\command

HKEY_CURRENT_USER\0le\shell\
runas

HKEY_CURRENT_USER\0le\shell\
runas\command

HKEY_CURRENT_USER\nQL

HKEY_CURRENT_USER\nQL\DefaultIcon

HKEY_CURRENT_USER\nQL\shell

HKEY_CURRENT_USER\nQL\shell\
open

HKEY_CURRENT_USER\nQL\shell\
open\command

HKEY_CURRENT_USER\nQL\shell\
runas

HKEY_CURRENT_USER\nQL\shell\
runas\command

HKEY_CURRENT_USER\t6

HKEY_CURRENT_USER\t6\DefaultIcon

HKEY_CURRENT_USER\t6\shell

HKEY_CURRENT_USER\t6\shell\
open

HKEY_CURRENT_USER\t6\shell\
open\command

HKEY_CURRENT_USER\t6\shell\
runas

HKEY_CURRENT_USER\t6\shell\
runas\command

HKEY_CURRENT_USER\7hj

HKEY_CURRENT_USER\7hj\DefaultIcon

HKEY_CURRENT_USER\7hj\shell

HKEY_CURRENT_USER\7hj\shell\
open

HKEY_CURRENT_USER\7hj\shell\
open\command

HKEY_CURRENT_USER\7hj\shell\
runas

HKEY_CURRENT_USER\7hj\shell\
runas\command

HKEY_CURRENT_USER\Kq

HKEY_CURRENT_USER\Kq\DefaultIcon

HKEY_CURRENT_USER\Kq\shell

HKEY_CURRENT_USER\Kq\shell\
open

HKEY_CURRENT_USER\Kq\shell\
open\command

HKEY_CURRENT_USER\Kq\shell\
runas

HKEY_CURRENT_USER\Kq\shell\
runas\command

HKEY_CURRENT_USER\46

HKEY_CURRENT_USER\46\DefaultIcon

HKEY_CURRENT_USER\46\shell

HKEY_CURRENT_USER\46\shell\
open

HKEY_CURRENT_USER\46\shell\
open\command

HKEY_CURRENT_USER\46\shell\
runas

HKEY_CURRENT_USER\46\shell\
runas\command

HKEY_CURRENT_USER\sg4

HKEY_CURRENT_USER\sg4\DefaultIcon

HKEY_CURRENT_USER\sg4\shell

HKEY_CURRENT_USER\sg4\shell\
open

HKEY_CURRENT_USER\sg4\shell\
open\command

HKEY_CURRENT_USER\sg4\shell\
runas

HKEY_CURRENT_USER\sg4\shell\
runas\command

It adds the following registry entries:

HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\
Services\SharedAccess\Parameters\
FirewallPolicy\StandardProfile
EnableFirewall = "0"

HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\
Services\SharedAccess\Parameters\
FirewallPolicy\StandardProfile
DoNotAllowExceptions = "0"

HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\
Services\SharedAccess\Parameters\
FirewallPolicy\StandardProfile
DisableNotifications = "1"

HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\
Services\SharedAccess\Parameters\
FirewallPolicy\DomainProfile
EnableFirewall = "0"

HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\
Services\SharedAccess\Parameters\
FirewallPolicy\DomainProfile
DoNotAllowExceptions = "0"

HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\
Services\SharedAccess\Parameters\
FirewallPolicy\DomainProfile
DisableNotifications = "1"

HKEY_CURRENT_USER\.exe
Content Type = "application/x-msdownload"

HKEY_CURRENT_USER\.exe\shell\
open\command
IsolatedCommand = "%1 %*"

HKEY_CURRENT_USER\.exe\shell\
runas\command
IsolatedCommand = "%1 %*"

HKEY_CURRENT_USER\Q34
Content Type = "application/x-msdownload"

HKEY_CURRENT_USER\Q34\shell\
open\command
IsolatedCommand = "%1 %*"

HKEY_CURRENT_USER\Q34\shell\
runas\command
IsolatedCommand = "%1 %*"

HKEY_CURRENT_USER\Software\Microsoft\
Windows
Local = "ab19919"

HKEY_CURRENT_USER\aY
Content Type = "application/x-msdownload"

HKEY_CURRENT_USER\aY\shell\
open\command
IsolatedCommand = "%1 %*"

HKEY_CURRENT_USER\aY\shell\
runas\command
IsolatedCommand = "%1 %*"

HKEY_CURRENT_USER\y6g
Content Type = "application/x-msdownload"

HKEY_CURRENT_USER\y6g\shell\
open\command
IsolatedCommand = "%1 %*"

HKEY_CURRENT_USER\y6g\shell\
runas\command
IsolatedCommand = "%1 %*"

HKEY_CURRENT_USER\3l
Content Type = "application/x-msdownload"

HKEY_CURRENT_USER\3l\shell\
open\command
IsolatedCommand = "%1 %*"

HKEY_CURRENT_USER\3l\shell\
runas\command
IsolatedCommand = "%1 %*"

HKEY_CURRENT_USER\XE
Content Type = "application/x-msdownload"

HKEY_CURRENT_USER\XE\shell\
open\command
IsolatedCommand = "%1 %*"

HKEY_CURRENT_USER\XE\shell\
runas\command
IsolatedCommand = "%1 %*"

HKEY_CURRENT_USER\0cL
Content Type = "application/x-msdownload"

HKEY_CURRENT_USER\0cL\shell\
open\command
IsolatedCommand = "%1 %*"

HKEY_CURRENT_USER\0cL\shell\
runas\command
IsolatedCommand = "%1 %*"

HKEY_CURRENT_USER\dcQ
Content Type = "application/x-msdownload"

HKEY_CURRENT_USER\dcQ\shell\
open\command
IsolatedCommand = "%1 %*"

HKEY_CURRENT_USER\dcQ\shell\
runas\command
IsolatedCommand = "%1 %*"

HKEY_CURRENT_USER\5AO
Content Type = "application/x-msdownload"

HKEY_CURRENT_USER\5AO\shell\
open\command
IsolatedCommand = "%1 %*"

HKEY_CURRENT_USER\5AO\shell\
runas\command
IsolatedCommand = "%1 %*"

HKEY_CURRENT_USER\2E
Content Type = "application/x-msdownload"

HKEY_CURRENT_USER\2E\shell\
open\command
IsolatedCommand = "%1 %*"

HKEY_CURRENT_USER\2E\shell\
runas\command
IsolatedCommand = "%1 %*"

HKEY_CURRENT_USER\Da
Content Type = "application/x-msdownload"

HKEY_CURRENT_USER\Da\shell\
open\command
IsolatedCommand = "%1 %*"

HKEY_CURRENT_USER\Da\shell\
runas\command
IsolatedCommand = "%1 %*"

HKEY_CURRENT_USER\dG
Content Type = "application/x-msdownload"

HKEY_CURRENT_USER\dG\shell\
open\command
IsolatedCommand = "%1 %*"

HKEY_CURRENT_USER\dG\shell\
runas\command
IsolatedCommand = "%1 %*"

HKEY_CURRENT_USER\yc
Content Type = "application/x-msdownload"

HKEY_CURRENT_USER\yc\shell\
open\command
IsolatedCommand = "%1 %*"

HKEY_CURRENT_USER\yc\shell\
runas\command
IsolatedCommand = "%1 %*"

HKEY_CURRENT_USER\er
Content Type = "application/x-msdownload"

HKEY_CURRENT_USER\er\shell\
open\command
IsolatedCommand = "%1 %*"

HKEY_CURRENT_USER\er\shell\
runas\command
IsolatedCommand = "%1 %*"

HKEY_CURRENT_USER\a7
Content Type = "application/x-msdownload"

HKEY_CURRENT_USER\a7\shell\
open\command
IsolatedCommand = "%1 %*"

HKEY_CURRENT_USER\a7\shell\
runas\command
IsolatedCommand = "%1 %*"

HKEY_CURRENT_USER\4Jy
Content Type = "application/x-msdownload"

HKEY_CURRENT_USER\4Jy\shell\
open\command
IsolatedCommand = "%1 %*"

HKEY_CURRENT_USER\4Jy\shell\
runas\command
IsolatedCommand = "%1 %*"

HKEY_CURRENT_USER\85
Content Type = "application/x-msdownload"

HKEY_CURRENT_USER\85\shell\
open\command
IsolatedCommand = "%1 %*"

HKEY_CURRENT_USER\85\shell\
runas\command
IsolatedCommand = "%1 %*"

HKEY_CURRENT_USER\o0v
Content Type = "application/x-msdownload"

HKEY_CURRENT_USER\o0v\shell\
open\command
IsolatedCommand = "%1 %*"

HKEY_CURRENT_USER\o0v\shell\
runas\command
IsolatedCommand = "%1 %*"

HKEY_CURRENT_USER\d3
Content Type = "application/x-msdownload"

HKEY_CURRENT_USER\d3\shell\
open\command
IsolatedCommand = "%1 %*"

HKEY_CURRENT_USER\d3\shell\
runas\command
IsolatedCommand = "%1 %*"

HKEY_CURRENT_USER\lMD
Content Type = "application/x-msdownload"

HKEY_CURRENT_USER\lMD\shell\
open\command
IsolatedCommand = "%1 %*"

HKEY_CURRENT_USER\lMD\shell\
runas\command
IsolatedCommand = "%1 %*"

HKEY_CURRENT_USER\04V
Content Type = "application/x-msdownload"

HKEY_CURRENT_USER\04V\shell\
open\command
IsolatedCommand = "%1 %*"

HKEY_CURRENT_USER\04V\shell\
runas\command
IsolatedCommand = "%1 %*"

HKEY_CURRENT_USER\y5
Content Type = "application/x-msdownload"

HKEY_CURRENT_USER\y5\shell\
open\command
IsolatedCommand = "%1 %*"

HKEY_CURRENT_USER\y5\shell\
runas\command
IsolatedCommand = "%1 %*"

HKEY_CURRENT_USER\8B5
Content Type = "application/x-msdownload"

HKEY_CURRENT_USER\8B5\shell\
open\command
IsolatedCommand = "%1 %*"

HKEY_CURRENT_USER\8B5\shell\
runas\command
IsolatedCommand = "%1 %*"

HKEY_CURRENT_USER\27j
Content Type = "application/x-msdownload"

HKEY_CURRENT_USER\27j\shell\
open\command
IsolatedCommand = "%1 %*"

HKEY_CURRENT_USER\27j\shell\
runas\command
IsolatedCommand = "%1 %*"

HKEY_CURRENT_USER\d03
Content Type = "application/x-msdownload"

HKEY_CURRENT_USER\d03\shell\
open\command
IsolatedCommand = "%1 %*"

HKEY_CURRENT_USER\d03\shell\
runas\command
IsolatedCommand = "%1 %*"

HKEY_CURRENT_USER\yT
Content Type = "application/x-msdownload"

HKEY_CURRENT_USER\yT\shell\
open\command
IsolatedCommand = "%1 %*"

HKEY_CURRENT_USER\yT\shell\
runas\command
IsolatedCommand = "%1 %*"

HKEY_CURRENT_USER\UYD
Content Type = "application/x-msdownload"

HKEY_CURRENT_USER\UYD\shell\
open\command
IsolatedCommand = "%1 %*"

HKEY_CURRENT_USER\UYD\shell\
runas\command
IsolatedCommand = "%1 %*"

HKEY_CURRENT_USER\WY0
Content Type = "application/x-msdownload"

HKEY_CURRENT_USER\WY0\shell\
open\command
IsolatedCommand = "%1 %*"

HKEY_CURRENT_USER\WY0\shell\
runas\command
IsolatedCommand = "%1 %*"

HKEY_CURRENT_USER\l7c
Content Type = "application/x-msdownload"

HKEY_CURRENT_USER\l7c\shell\
open\command
IsolatedCommand = "%1 %*"

HKEY_CURRENT_USER\l7c\shell\
runas\command
IsolatedCommand = "%1 %*"

HKEY_CURRENT_USER\l2
Content Type = "application/x-msdownload"

HKEY_CURRENT_USER\l2\shell\
open\command
IsolatedCommand = "%1 %*"

HKEY_CURRENT_USER\l2\shell\
runas\command
IsolatedCommand = "%1 %*"

HKEY_CURRENT_USER\d0
Content Type = "application/x-msdownload"

HKEY_CURRENT_USER\d0\shell\
open\command
IsolatedCommand = "%1 %*"

HKEY_CURRENT_USER\d0\shell\
runas\command
IsolatedCommand = "%1 %*"

HKEY_CURRENT_USER\FcJ
Content Type = "application/x-msdownload"

HKEY_CURRENT_USER\FcJ\shell\
open\command
IsolatedCommand = "%1 %*"

HKEY_CURRENT_USER\FcJ\shell\
runas\command
IsolatedCommand = "%1 %*"

HKEY_CURRENT_USER\ira
Content Type = "application/x-msdownload"

HKEY_CURRENT_USER\ira\shell\
open\command
IsolatedCommand = "%1 %*"

HKEY_CURRENT_USER\ira\shell\
runas\command
IsolatedCommand = "%1 %*"

HKEY_CURRENT_USER\B3
Content Type = "application/x-msdownload"

HKEY_CURRENT_USER\B3\shell\
open\command
IsolatedCommand = "%1 %*"

HKEY_CURRENT_USER\B3\shell\
runas\command
IsolatedCommand = "%1 %*"

HKEY_CURRENT_USER\3E
Content Type = "application/x-msdownload"

HKEY_CURRENT_USER\3E\shell\
open\command
IsolatedCommand = "%1 %*"

HKEY_CURRENT_USER\3E\shell\
runas\command
IsolatedCommand = "%1 %*"

HKEY_CURRENT_USER\q0F
Content Type = "application/x-msdownload"

HKEY_CURRENT_USER\q0F\shell\
open\command
IsolatedCommand = "%1 %*"

HKEY_CURRENT_USER\q0F\shell\
runas\command
IsolatedCommand = "%1 %*"

HKEY_CURRENT_USER\7C
Content Type = "application/x-msdownload"

HKEY_CURRENT_USER\7C\shell\
open\command
IsolatedCommand = "%1 %*"

HKEY_CURRENT_USER\7C\shell\
runas\command
IsolatedCommand = "%1 %*"

HKEY_CURRENT_USER\QL2
Content Type = "application/x-msdownload"

HKEY_CURRENT_USER\QL2\shell\
open\command
IsolatedCommand = "%1 %*"

HKEY_CURRENT_USER\QL2\shell\
runas\command
IsolatedCommand = "%1 %*"

HKEY_CURRENT_USER\f5t
Content Type = "application/x-msdownload"

HKEY_CURRENT_USER\f5t\shell\
open\command
IsolatedCommand = "%1 %*"

HKEY_CURRENT_USER\f5t\shell\
runas\command
IsolatedCommand = "%1 %*"

HKEY_CURRENT_USER\cmp
Content Type = "application/x-msdownload"

HKEY_CURRENT_USER\cmp\shell\
open\command
IsolatedCommand = "%1 %*"

HKEY_CURRENT_USER\cmp\shell\
runas\command
IsolatedCommand = "%1 %*"

HKEY_CURRENT_USER\bg
Content Type = "application/x-msdownload"

HKEY_CURRENT_USER\bg\shell\
open\command
IsolatedCommand = "%1 %*"

HKEY_CURRENT_USER\bg\shell\
runas\command
IsolatedCommand = "%1 %*"

HKEY_CURRENT_USER\Q0
Content Type = "application/x-msdownload"

HKEY_CURRENT_USER\Q0\shell\
open\command
IsolatedCommand = "%1 %*"

HKEY_CURRENT_USER\Q0\shell\
runas\command
IsolatedCommand = "%1 %*"

HKEY_CURRENT_USER\rx0
Content Type = "application/x-msdownload"

HKEY_CURRENT_USER\rx0\shell\
open\command
IsolatedCommand = "%1 %*"

HKEY_CURRENT_USER\rx0\shell\
runas\command
IsolatedCommand = "%1 %*"

HKEY_CURRENT_USER\u60
Content Type = "application/x-msdownload"

HKEY_CURRENT_USER\u60\shell\
open\command
IsolatedCommand = "%1 %*"

HKEY_CURRENT_USER\u60\shell\
runas\command
IsolatedCommand = "%1 %*"

HKEY_CURRENT_USER\767
Content Type = "application/x-msdownload"

HKEY_CURRENT_USER\767\shell\
open\command
IsolatedCommand = "%1 %*"

HKEY_CURRENT_USER\767\shell\
runas\command
IsolatedCommand = "%1 %*"

HKEY_CURRENT_USER\8Ya
Content Type = "application/x-msdownload"

HKEY_CURRENT_USER\8Ya\shell\
open\command
IsolatedCommand = "%1 %*"

HKEY_CURRENT_USER\8Ya\shell\
runas\command
IsolatedCommand = "%1 %*"

HKEY_CURRENT_USER\VN
Content Type = "application/x-msdownload"

HKEY_CURRENT_USER\VN\shell\
open\command
IsolatedCommand = "%1 %*"

HKEY_CURRENT_USER\VN\shell\
runas\command
IsolatedCommand = "%1 %*"

HKEY_CURRENT_USER\63
Content Type = "application/x-msdownload"

HKEY_CURRENT_USER\63\shell\
open\command
IsolatedCommand = "%1 %*"

HKEY_CURRENT_USER\63\shell\
runas\command
IsolatedCommand = "%1 %*"

HKEY_CURRENT_USER\2Gc
Content Type = "application/x-msdownload"

HKEY_CURRENT_USER\2Gc\shell\
open\command
IsolatedCommand = "%1 %*"

HKEY_CURRENT_USER\2Gc\shell\
runas\command
IsolatedCommand = "%1 %*"

HKEY_CURRENT_USER\7HQ
Content Type = "application/x-msdownload"

HKEY_CURRENT_USER\7HQ\shell\
open\command
IsolatedCommand = "%1 %*"

HKEY_CURRENT_USER\7HQ\shell\
runas\command
IsolatedCommand = "%1 %*"

HKEY_CURRENT_USER\gB3
Content Type = "application/x-msdownload"

HKEY_CURRENT_USER\gB3\shell\
open\command
IsolatedCommand = "%1 %*"

HKEY_CURRENT_USER\gB3\shell\
runas\command
IsolatedCommand = "%1 %*"

HKEY_CURRENT_USER\45
Content Type = "application/x-msdownload"

HKEY_CURRENT_USER\45\shell\
open\command
IsolatedCommand = "%1 %*"

HKEY_CURRENT_USER\45\shell\
runas\command
IsolatedCommand = "%1 %*"

HKEY_CURRENT_USER\dM1
Content Type = "application/x-msdownload"

HKEY_CURRENT_USER\dM1\shell\
open\command
IsolatedCommand = "%1 %*"

HKEY_CURRENT_USER\dM1\shell\
runas\command
IsolatedCommand = "%1 %*"

HKEY_CURRENT_USER\31
Content Type = "application/x-msdownload"

HKEY_CURRENT_USER\31\shell\
open\command
IsolatedCommand = "%1 %*"

HKEY_CURRENT_USER\31\shell\
runas\command
IsolatedCommand = "%1 %*"

HKEY_CURRENT_USER\VSA
Content Type = "application/x-msdownload"

HKEY_CURRENT_USER\VSA\shell\
open\command
IsolatedCommand = "%1 %*"

HKEY_CURRENT_USER\VSA\shell\
runas\command
IsolatedCommand = "%1 %*"

HKEY_CURRENT_USER\nm
Content Type = "application/x-msdownload"

HKEY_CURRENT_USER\nm\shell\
open\command
IsolatedCommand = "%1 %*"

HKEY_CURRENT_USER\nm\shell\
runas\command
IsolatedCommand = "%1 %*"

HKEY_CURRENT_USER\j3T
Content Type = "application/x-msdownload"

HKEY_CURRENT_USER\j3T\shell\
open\command
IsolatedCommand = "%1 %*"

HKEY_CURRENT_USER\j3T\shell\
runas\command
IsolatedCommand = "%1 %*"

HKEY_CURRENT_USER\t7D
Content Type = "application/x-msdownload"

HKEY_CURRENT_USER\t7D\shell\
open\command
IsolatedCommand = "%1 %*"

HKEY_CURRENT_USER\t7D\shell\
runas\command
IsolatedCommand = "%1 %*"

HKEY_CURRENT_USER\nd
Content Type = "application/x-msdownload"

HKEY_CURRENT_USER\nd\shell\
open\command
IsolatedCommand = "%1 %*"

HKEY_CURRENT_USER\nd\shell\
runas\command
IsolatedCommand = "%1 %*"

HKEY_CURRENT_USER\UD8
Content Type = "application/x-msdownload"

HKEY_CURRENT_USER\UD8\shell\
open\command
IsolatedCommand = "%1 %*"

HKEY_CURRENT_USER\UD8\shell\
runas\command
IsolatedCommand = "%1 %*"

HKEY_CURRENT_USER\R61
Content Type = "application/x-msdownload"

HKEY_CURRENT_USER\R61\shell\
open\command
IsolatedCommand = "%1 %*"

HKEY_CURRENT_USER\R61\shell\
runas\command
IsolatedCommand = "%1 %*"

HKEY_CURRENT_USER\7kW
Content Type = "application/x-msdownload"

HKEY_CURRENT_USER\7kW\shell\
open\command
IsolatedCommand = "%1 %*"

HKEY_CURRENT_USER\7kW\shell\
runas\command
IsolatedCommand = "%1 %*"

HKEY_CURRENT_USER\r71
Content Type = "application/x-msdownload"

HKEY_CURRENT_USER\r71\shell\
open\command
IsolatedCommand = "%1 %*"

HKEY_CURRENT_USER\r71\shell\
runas\command
IsolatedCommand = "%1 %*"

HKEY_CURRENT_USER\t0f
Content Type = "application/x-msdownload"

HKEY_CURRENT_USER\t0f\shell\
open\command
IsolatedCommand = "%1 %*"

HKEY_CURRENT_USER\t0f\shell\
runas\command
IsolatedCommand = "%1 %*"

HKEY_CURRENT_USER\6hq
Content Type = "application/x-msdownload"

HKEY_CURRENT_USER\6hq\shell\
open\command
IsolatedCommand = "%1 %*"

HKEY_CURRENT_USER\6hq\shell\
runas\command
IsolatedCommand = "%1 %*"

HKEY_CURRENT_USER\Cd0
Content Type = "application/x-msdownload"

HKEY_CURRENT_USER\Cd0\shell\
open\command
IsolatedCommand = "%1 %*"

HKEY_CURRENT_USER\Cd0\shell\
runas\command
IsolatedCommand = "%1 %*"

HKEY_CURRENT_USER\6MB
Content Type = "application/x-msdownload"

HKEY_CURRENT_USER\6MB\shell\
open\command
IsolatedCommand = "%1 %*"

HKEY_CURRENT_USER\6MB\shell\
runas\command
IsolatedCommand = "%1 %*"

HKEY_CURRENT_USER\WB
Content Type = "application/x-msdownload"

HKEY_CURRENT_USER\WB\shell\
open\command
IsolatedCommand = "%1 %*"

HKEY_CURRENT_USER\WB\shell\
runas\command
IsolatedCommand = "%1 %*"

HKEY_CURRENT_USER\k7h
Content Type = "application/x-msdownload"

HKEY_CURRENT_USER\k7h\shell\
open\command
IsolatedCommand = "%1 %*"

HKEY_CURRENT_USER\k7h\shell\
runas\command
IsolatedCommand = "%1 %*"

HKEY_CURRENT_USER\x2
Content Type = "application/x-msdownload"

HKEY_CURRENT_USER\x2\shell\
open\command
IsolatedCommand = "%1 %*"

HKEY_CURRENT_USER\x2\shell\
runas\command
IsolatedCommand = "%1 %*"

HKEY_CURRENT_USER\ET5
Content Type = "application/x-msdownload"

HKEY_CURRENT_USER\ET5\shell\
open\command
IsolatedCommand = "%1 %*"

HKEY_CURRENT_USER\ET5\shell\
runas\command
IsolatedCommand = "%1 %*"

HKEY_CURRENT_USER\3Wc
Content Type = "application/x-msdownload"

HKEY_CURRENT_USER\3Wc\shell\
open\command
IsolatedCommand = "%1 %*"

HKEY_CURRENT_USER\3Wc\shell\
runas\command
IsolatedCommand = "%1 %*"

HKEY_CURRENT_USER\J20
Content Type = "application/x-msdownload"

HKEY_CURRENT_USER\J20\shell\
open\command
IsolatedCommand = "%1 %*"

HKEY_CURRENT_USER\J20\shell\
runas\command
IsolatedCommand = "%1 %*"

HKEY_CURRENT_USER\bWu
Content Type = "application/x-msdownload"

HKEY_CURRENT_USER\bWu\shell\
open\command
IsolatedCommand = "%1 %*"

HKEY_CURRENT_USER\bWu\shell\
runas\command
IsolatedCommand = "%1 %*"

HKEY_CURRENT_USER\D1
Content Type = "application/x-msdownload"

HKEY_CURRENT_USER\D1\shell\
open\command
IsolatedCommand = "%1 %*"

HKEY_CURRENT_USER\D1\shell\
runas\command
IsolatedCommand = "%1 %*"

HKEY_CURRENT_USER\N6T
Content Type = "application/x-msdownload"

HKEY_CURRENT_USER\N6T\shell\
open\command
IsolatedCommand = "%1 %*"

HKEY_CURRENT_USER\N6T\shell\
runas\command
IsolatedCommand = "%1 %*"

HKEY_CURRENT_USER\YwU
Content Type = "application/x-msdownload"

HKEY_CURRENT_USER\YwU\shell\
open\command
IsolatedCommand = "%1 %*"

HKEY_CURRENT_USER\YwU\shell\
runas\command
IsolatedCommand = "%1 %*"

HKEY_CURRENT_USER\qT3
Content Type = "application/x-msdownload"

HKEY_CURRENT_USER\qT3\shell\
open\command
IsolatedCommand = "%1 %*"

HKEY_CURRENT_USER\qT3\shell\
runas\command
IsolatedCommand = "%1 %*"

HKEY_CURRENT_USER\4q
Content Type = "application/x-msdownload"

HKEY_CURRENT_USER\4q\shell\
open\command
IsolatedCommand = "%1 %*"

HKEY_CURRENT_USER\4q\shell\
runas\command
IsolatedCommand = "%1 %*"

HKEY_CURRENT_USER\Ke4
Content Type = "application/x-msdownload"

HKEY_CURRENT_USER\Ke4\shell\
open\command
IsolatedCommand = "%1 %*"

HKEY_CURRENT_USER\Ke4\shell\
runas\command
IsolatedCommand = "%1 %*"

HKEY_CURRENT_USER\Is
Content Type = "application/x-msdownload"

HKEY_CURRENT_USER\Is\shell\
open\command
IsolatedCommand = "%1 %*"

HKEY_CURRENT_USER\Is\shell\
runas\command
IsolatedCommand = "%1 %*"

HKEY_CURRENT_USER\3HE
Content Type = "application/x-msdownload"

HKEY_CURRENT_USER\3HE\shell\
open\command
IsolatedCommand = "%1 %*"

HKEY_CURRENT_USER\3HE\shell\
runas\command
IsolatedCommand = "%1 %*"

HKEY_CURRENT_USER\43
Content Type = "application/x-msdownload"

HKEY_CURRENT_USER\43\shell\
open\command
IsolatedCommand = "%1 %*"

HKEY_CURRENT_USER\43\shell\
runas\command
IsolatedCommand = "%1 %*"

HKEY_CURRENT_USER\FT
Content Type = "application/x-msdownload"

HKEY_CURRENT_USER\FT\shell\
open\command
IsolatedCommand = "%1 %*"

HKEY_CURRENT_USER\FT\shell\
runas\command
IsolatedCommand = "%1 %*"

HKEY_CURRENT_USER\6j4
Content Type = "application/x-msdownload"

HKEY_CURRENT_USER\6j4\shell\
open\command
IsolatedCommand = "%1 %*"

HKEY_CURRENT_USER\6j4\shell\
runas\command
IsolatedCommand = "%1 %*"

HKEY_CURRENT_USER\675
Content Type = "application/x-msdownload"

HKEY_CURRENT_USER\675\shell\
open\command
IsolatedCommand = "%1 %*"

HKEY_CURRENT_USER\675\shell\
runas\command
IsolatedCommand = "%1 %*"

HKEY_CURRENT_USER\i0
Content Type = "application/x-msdownload"

HKEY_CURRENT_USER\i0\shell\
open\command
IsolatedCommand = "%1 %*"

HKEY_CURRENT_USER\i0\shell\
runas\command
IsolatedCommand = "%1 %*"

HKEY_CURRENT_USER\uD
Content Type = "application/x-msdownload"

HKEY_CURRENT_USER\uD\shell\
open\command
IsolatedCommand = "%1 %*"

HKEY_CURRENT_USER\uD\shell\
runas\command
IsolatedCommand = "%1 %*"

HKEY_CURRENT_USER\an
Content Type = "application/x-msdownload"

HKEY_CURRENT_USER\an\shell\
open\command
IsolatedCommand = "%1 %*"

HKEY_CURRENT_USER\an\shell\
runas\command
IsolatedCommand = "%1 %*"

HKEY_CURRENT_USER\3p
Content Type = "application/x-msdownload"

HKEY_CURRENT_USER\3p\shell\
open\command
IsolatedCommand = "%1 %*"

HKEY_CURRENT_USER\3p\shell\
runas\command
IsolatedCommand = "%1 %*"

HKEY_CURRENT_USER\4Y
Content Type = "application/x-msdownload"

HKEY_CURRENT_USER\4Y\shell\
open\command
IsolatedCommand = "%1 %*"

HKEY_CURRENT_USER\4Y\shell\
runas\command
IsolatedCommand = "%1 %*"

HKEY_CURRENT_USER\rE
Content Type = "application/x-msdownload"

HKEY_CURRENT_USER\rE\shell\
open\command
IsolatedCommand = "%1 %*"

HKEY_CURRENT_USER\rE\shell\
runas\command
IsolatedCommand = "%1 %*"

HKEY_CURRENT_USER\Hv
Content Type = "application/x-msdownload"

HKEY_CURRENT_USER\Hv\shell\
open\command
IsolatedCommand = "%1 %*"

HKEY_CURRENT_USER\Hv\shell\
runas\command
IsolatedCommand = "%1 %*"

HKEY_CURRENT_USER\77
Content Type = "application/x-msdownload"

HKEY_CURRENT_USER\77\shell\
open\command
IsolatedCommand = "%1 %*"

HKEY_CURRENT_USER\77\shell\
runas\command
IsolatedCommand = "%1 %*"

HKEY_CURRENT_USER\fY
Content Type = "application/x-msdownload"

HKEY_CURRENT_USER\fY\shell\
open\command
IsolatedCommand = "%1 %*"

HKEY_CURRENT_USER\fY\shell\
runas\command
IsolatedCommand = "%1 %*"

HKEY_CURRENT_USER\514
Content Type = "application/x-msdownload"

HKEY_CURRENT_USER\514\shell\
open\command
IsolatedCommand = "%1 %*"

HKEY_CURRENT_USER\514\shell\
runas\command
IsolatedCommand = "%1 %*"

HKEY_CURRENT_USER\aK
Content Type = "application/x-msdownload"

HKEY_CURRENT_USER\aK\shell\
open\command
IsolatedCommand = "%1 %*"

HKEY_CURRENT_USER\aK\shell\
runas\command
IsolatedCommand = "%1 %*"

HKEY_CURRENT_USER\rS8
Content Type = "application/x-msdownload"

HKEY_CURRENT_USER\rS8\shell\
open\command
IsolatedCommand = "%1 %*"

HKEY_CURRENT_USER\rS8\shell\
runas\command
IsolatedCommand = "%1 %*"

HKEY_CURRENT_USER\gRx
Content Type = "application/x-msdownload"

HKEY_CURRENT_USER\gRx\shell\
open\command
IsolatedCommand = "%1 %*"

HKEY_CURRENT_USER\gRx\shell\
runas\command
IsolatedCommand = "%1 %*"

HKEY_CURRENT_USER\u0
Content Type = "application/x-msdownload"

HKEY_CURRENT_USER\u0\shell\
open\command
IsolatedCommand = "%1 %*"

HKEY_CURRENT_USER\u0\shell\
runas\command
IsolatedCommand = "%1 %*"

HKEY_CURRENT_USER\g4
Content Type = "application/x-msdownload"

HKEY_CURRENT_USER\g4\shell\
open\command
IsolatedCommand = "%1 %*"

HKEY_CURRENT_USER\g4\shell\
runas\command
IsolatedCommand = "%1 %*"

HKEY_CURRENT_USER\73
Content Type = "application/x-msdownload"

HKEY_CURRENT_USER\73\shell\
open\command
IsolatedCommand = "%1 %*"

HKEY_CURRENT_USER\73\shell\
runas\command
IsolatedCommand = "%1 %*"

HKEY_CURRENT_USER\8Ha
Content Type = "application/x-msdownload"

HKEY_CURRENT_USER\8Ha\shell\
open\command
IsolatedCommand = "%1 %*"

HKEY_CURRENT_USER\8Ha\shell\
runas\command
IsolatedCommand = "%1 %*"

HKEY_CURRENT_USER\X3C
Content Type = "application/x-msdownload"

HKEY_CURRENT_USER\X3C\shell\
open\command
IsolatedCommand = "%1 %*"

HKEY_CURRENT_USER\X3C\shell\
runas\command
IsolatedCommand = "%1 %*"

HKEY_CURRENT_USER\Bbh
Content Type = "application/x-msdownload"

HKEY_CURRENT_USER\Bbh\shell\
open\command
IsolatedCommand = "%1 %*"

HKEY_CURRENT_USER\Bbh\shell\
runas\command
IsolatedCommand = "%1 %*"

HKEY_CURRENT_USER\o7
Content Type = "application/x-msdownload"

HKEY_CURRENT_USER\o7\shell\
open\command
IsolatedCommand = "%1 %*"

HKEY_CURRENT_USER\o7\shell\
runas\command
IsolatedCommand = "%1 %*"

HKEY_CURRENT_USER\061
Content Type = "application/x-msdownload"

HKEY_CURRENT_USER\061\shell\
open\command
IsolatedCommand = "%1 %*"

HKEY_CURRENT_USER\061\shell\
runas\command
IsolatedCommand = "%1 %*"

HKEY_CURRENT_USER\tR
Content Type = "application/x-msdownload"

HKEY_CURRENT_USER\tR\shell\
open\command
IsolatedCommand = "%1 %*"

HKEY_CURRENT_USER\tR\shell\
runas\command
IsolatedCommand = "%1 %*"

HKEY_CURRENT_USER\6u
Content Type = "application/x-msdownload"

HKEY_CURRENT_USER\6u\shell\
open\command
IsolatedCommand = "%1 %*"

HKEY_CURRENT_USER\6u\shell\
runas\command
IsolatedCommand = "%1 %*"

HKEY_CURRENT_USER\KB3
Content Type = "application/x-msdownload"

HKEY_CURRENT_USER\KB3\shell\
open\command
IsolatedCommand = "%1 %*"

HKEY_CURRENT_USER\KB3\shell\
runas\command
IsolatedCommand = "%1 %*"

HKEY_CURRENT_USER\oQ
Content Type = "application/x-msdownload"

HKEY_CURRENT_USER\oQ\shell\
open\command
IsolatedCommand = "%1 %*"

HKEY_CURRENT_USER\oQ\shell\
runas\command
IsolatedCommand = "%1 %*"

HKEY_CURRENT_USER\0t
Content Type = "application/x-msdownload"

HKEY_CURRENT_USER\0t\shell\
open\command
IsolatedCommand = "%1 %*"

HKEY_CURRENT_USER\0t\shell\
runas\command
IsolatedCommand = "%1 %*"

HKEY_CURRENT_USER\7N
Content Type = "application/x-msdownload"

HKEY_CURRENT_USER\7N\shell\
open\command
IsolatedCommand = "%1 %*"

HKEY_CURRENT_USER\7N\shell\
runas\command
IsolatedCommand = "%1 %*"

HKEY_CURRENT_USER\7C6
Content Type = "application/x-msdownload"

HKEY_CURRENT_USER\7C6\shell\
open\command
IsolatedCommand = "%1 %*"

HKEY_CURRENT_USER\7C6\shell\
runas\command
IsolatedCommand = "%1 %*"

HKEY_CURRENT_USER\0Pv
Content Type = "application/x-msdownload"

HKEY_CURRENT_USER\0Pv\shell\
open\command
IsolatedCommand = "%1 %*"

HKEY_CURRENT_USER\0Pv\shell\
runas\command
IsolatedCommand = "%1 %*"

HKEY_CURRENT_USER\3B
Content Type = "application/x-msdownload"

HKEY_CURRENT_USER\3B\shell\
open\command
IsolatedCommand = "%1 %*"

HKEY_CURRENT_USER\3B\shell\
runas\command
IsolatedCommand = "%1 %*"

HKEY_CURRENT_USER\b8
Content Type = "application/x-msdownload"

HKEY_CURRENT_USER\b8\shell\
open\command
IsolatedCommand = "%1 %*"

HKEY_CURRENT_USER\b8\shell\
runas\command
IsolatedCommand = "%1 %*"

HKEY_CURRENT_USER\FA
Content Type = "application/x-msdownload"

HKEY_CURRENT_USER\FA\shell\
open\command
IsolatedCommand = "%1 %*"

HKEY_CURRENT_USER\FA\shell\
runas\command
IsolatedCommand = "%1 %*"

HKEY_CURRENT_USER\4Ws
Content Type = "application/x-msdownload"

HKEY_CURRENT_USER\4Ws\shell\
open\command
IsolatedCommand = "%1 %*"

HKEY_CURRENT_USER\4Ws\shell\
runas\command
IsolatedCommand = "%1 %*"

HKEY_CURRENT_USER\3x
Content Type = "application/x-msdownload"

HKEY_CURRENT_USER\3x\shell\
open\command
IsolatedCommand = "%1 %*"

HKEY_CURRENT_USER\3x\shell\
runas\command
IsolatedCommand = "%1 %*"

HKEY_CURRENT_USER\0p
Content Type = "application/x-msdownload"

HKEY_CURRENT_USER\0p\shell\
open\command
IsolatedCommand = "%1 %*"

HKEY_CURRENT_USER\0p\shell\
runas\command
IsolatedCommand = "%1 %*"

HKEY_CURRENT_USER\VO2
Content Type = "application/x-msdownload"

HKEY_CURRENT_USER\VO2\shell\
open\command
IsolatedCommand = "%1 %*"

HKEY_CURRENT_USER\VO2\shell\
runas\command
IsolatedCommand = "%1 %*"

HKEY_CURRENT_USER\A5h
Content Type = "application/x-msdownload"

HKEY_CURRENT_USER\A5h\shell\
open\command
IsolatedCommand = "%1 %*"

HKEY_CURRENT_USER\A5h\shell\
runas\command
IsolatedCommand = "%1 %*"

HKEY_CURRENT_USER\ED
Content Type = "application/x-msdownload"

HKEY_CURRENT_USER\ED\shell\
open\command
IsolatedCommand = "%1 %*"

HKEY_CURRENT_USER\ED\shell\
runas\command
IsolatedCommand = "%1 %*"

HKEY_CURRENT_USER\1k
Content Type = "application/x-msdownload"

HKEY_CURRENT_USER\1k\shell\
open\command
IsolatedCommand = "%1 %*"

HKEY_CURRENT_USER\1k\shell\
runas\command
IsolatedCommand = "%1 %*"

HKEY_CURRENT_USER\FR
Content Type = "application/x-msdownload"

HKEY_CURRENT_USER\FR\shell\
open\command
IsolatedCommand = "%1 %*"

HKEY_CURRENT_USER\FR\shell\
runas\command
IsolatedCommand = "%1 %*"

HKEY_CURRENT_USER\pX
Content Type = "application/x-msdownload"

HKEY_CURRENT_USER\pX\shell\
open\command
IsolatedCommand = "%1 %*"

HKEY_CURRENT_USER\pX\shell\
runas\command
IsolatedCommand = "%1 %*"

HKEY_CURRENT_USER\2K
Content Type = "application/x-msdownload"

HKEY_CURRENT_USER\2K\shell\
open\command
IsolatedCommand = "%1 %*"

HKEY_CURRENT_USER\2K\shell\
runas\command
IsolatedCommand = "%1 %*"

HKEY_CURRENT_USER\4Ww
Content Type = "application/x-msdownload"

HKEY_CURRENT_USER\4Ww\shell\
open\command
IsolatedCommand = "%1 %*"

HKEY_CURRENT_USER\4Ww\shell\
runas\command
IsolatedCommand = "%1 %*"

HKEY_CURRENT_USER\RU
Content Type = "application/x-msdownload"

HKEY_CURRENT_USER\RU\shell\
open\command
IsolatedCommand = "%1 %*"

HKEY_CURRENT_USER\RU\shell\
runas\command
IsolatedCommand = "%1 %*"

HKEY_CURRENT_USER\txr
Content Type = "application/x-msdownload"

HKEY_CURRENT_USER\txr\shell\
open\command
IsolatedCommand = "%1 %*"

HKEY_CURRENT_USER\txr\shell\
runas\command
IsolatedCommand = "%1 %*"

HKEY_CURRENT_USER\pLB
Content Type = "application/x-msdownload"

HKEY_CURRENT_USER\pLB\shell\
open\command
IsolatedCommand = "%1 %*"

HKEY_CURRENT_USER\pLB\shell\
runas\command
IsolatedCommand = "%1 %*"

HKEY_CURRENT_USER\Wl
Content Type = "application/x-msdownload"

HKEY_CURRENT_USER\Wl\shell\
open\command
IsolatedCommand = "%1 %*"

HKEY_CURRENT_USER\Wl\shell\
runas\command
IsolatedCommand = "%1 %*"

HKEY_CURRENT_USER\CW
Content Type = "application/x-msdownload"

HKEY_CURRENT_USER\CW\shell\
open\command
IsolatedCommand = "%1 %*"

HKEY_CURRENT_USER\CW\shell\
runas\command
IsolatedCommand = "%1 %*"

HKEY_CURRENT_USER\nfY
Content Type = "application/x-msdownload"

HKEY_CURRENT_USER\nfY\shell\
open\command
IsolatedCommand = "%1 %*"

HKEY_CURRENT_USER\nfY\shell\
runas\command
IsolatedCommand = "%1 %*"

HKEY_CURRENT_USER\5G
Content Type = "application/x-msdownload"

HKEY_CURRENT_USER\5G\shell\
open\command
IsolatedCommand = "%1 %*"

HKEY_CURRENT_USER\5G\shell\
runas\command
IsolatedCommand = "%1 %*"

HKEY_CURRENT_USER\NB
Content Type = "application/x-msdownload"

HKEY_CURRENT_USER\NB\shell\
open\command
IsolatedCommand = "%1 %*"

HKEY_CURRENT_USER\NB\shell\
runas\command
IsolatedCommand = "%1 %*"

HKEY_CURRENT_USER\5F
Content Type = "application/x-msdownload"

HKEY_CURRENT_USER\5F\shell\
open\command
IsolatedCommand = "%1 %*"

HKEY_CURRENT_USER\5F\shell\
runas\command
IsolatedCommand = "%1 %*"

HKEY_CURRENT_USER\Nj
Content Type = "application/x-msdownload"

HKEY_CURRENT_USER\Nj\shell\
open\command
IsolatedCommand = "%1 %*"

HKEY_CURRENT_USER\Nj\shell\
runas\command
IsolatedCommand = "%1 %*"

HKEY_CURRENT_USER\ViR
Content Type = "application/x-msdownload"

HKEY_CURRENT_USER\ViR\shell\
open\command
IsolatedCommand = "%1 %*"

HKEY_CURRENT_USER\ViR\shell\
runas\command
IsolatedCommand = "%1 %*"

HKEY_CURRENT_USER\pG
Content Type = "application/x-msdownload"

HKEY_CURRENT_USER\pG\shell\
open\command
IsolatedCommand = "%1 %*"

HKEY_CURRENT_USER\pG\shell\
runas\command
IsolatedCommand = "%1 %*"

HKEY_CURRENT_USER\kS
Content Type = "application/x-msdownload"

HKEY_CURRENT_USER\kS\shell\
open\command
IsolatedCommand = "%1 %*"

HKEY_CURRENT_USER\kS\shell\
runas\command
IsolatedCommand = "%1 %*"

HKEY_CURRENT_USER\OiT
Content Type = "application/x-msdownload"

HKEY_CURRENT_USER\OiT\shell\
open\command
IsolatedCommand = "%1 %*"

HKEY_CURRENT_USER\OiT\shell\
runas\command
IsolatedCommand = "%1 %*"

HKEY_CURRENT_USER\Qy
Content Type = "application/x-msdownload"

HKEY_CURRENT_USER\Qy\shell\
open\command
IsolatedCommand = "%1 %*"

HKEY_CURRENT_USER\Qy\shell\
runas\command
IsolatedCommand = "%1 %*"

HKEY_CURRENT_USER\E8G
Content Type = "application/x-msdownload"

HKEY_CURRENT_USER\E8G\shell\
open\command
IsolatedCommand = "%1 %*"

HKEY_CURRENT_USER\E8G\shell\
runas\command
IsolatedCommand = "%1 %*"

HKEY_CURRENT_USER\78
Content Type = "application/x-msdownload"

HKEY_CURRENT_USER\78\shell\
open\command
IsolatedCommand = "%1 %*"

HKEY_CURRENT_USER\78\shell\
runas\command
IsolatedCommand = "%1 %*"

HKEY_CURRENT_USER\3W
Content Type = "application/x-msdownload"

HKEY_CURRENT_USER\3W\shell\
open\command
IsolatedCommand = "%1 %*"

HKEY_CURRENT_USER\3W\shell\
runas\command
IsolatedCommand = "%1 %*"

HKEY_CURRENT_USER\L6M
Content Type = "application/x-msdownload"

HKEY_CURRENT_USER\L6M\shell\
open\command
IsolatedCommand = "%1 %*"

HKEY_CURRENT_USER\L6M\shell\
runas\command
IsolatedCommand = "%1 %*"

HKEY_CURRENT_USER\Il7
Content Type = "application/x-msdownload"

HKEY_CURRENT_USER\Il7\shell\
open\command
IsolatedCommand = "%1 %*"

HKEY_CURRENT_USER\Il7\shell\
runas\command
IsolatedCommand = "%1 %*"

HKEY_CURRENT_USER\HHS
Content Type = "application/x-msdownload"

HKEY_CURRENT_USER\HHS\shell\
open\command
IsolatedCommand = "%1 %*"

HKEY_CURRENT_USER\HHS\shell\
runas\command
IsolatedCommand = "%1 %*"

HKEY_CURRENT_USER\14e
Content Type = "application/x-msdownload"

HKEY_CURRENT_USER\14e\shell\
open\command
IsolatedCommand = "%1 %*"

HKEY_CURRENT_USER\14e\shell\
runas\command
IsolatedCommand = "%1 %*"

HKEY_CURRENT_USER\Yv6
Content Type = "application/x-msdownload"

HKEY_CURRENT_USER\Yv6\shell\
open\command
IsolatedCommand = "%1 %*"

HKEY_CURRENT_USER\Yv6\shell\
runas\command
IsolatedCommand = "%1 %*"

HKEY_CURRENT_USER\33
Content Type = "application/x-msdownload"

HKEY_CURRENT_USER\33\shell\
open\command
IsolatedCommand = "%1 %*"

HKEY_CURRENT_USER\33\shell\
runas\command
IsolatedCommand = "%1 %*"

HKEY_CURRENT_USER\5w
Content Type = "application/x-msdownload"

HKEY_CURRENT_USER\5w\shell\
open\command
IsolatedCommand = "%1 %*"

HKEY_CURRENT_USER\5w\shell\
runas\command
IsolatedCommand = "%1 %*"

HKEY_CURRENT_USER\oA
Content Type = "application/x-msdownload"

HKEY_CURRENT_USER\oA\shell\
open\command
IsolatedCommand = "%1 %*"

HKEY_CURRENT_USER\oA\shell\
runas\command
IsolatedCommand = "%1 %*"

HKEY_CURRENT_USER\S7F
Content Type = "application/x-msdownload"

HKEY_CURRENT_USER\S7F\shell\
open\command
IsolatedCommand = "%1 %*"

HKEY_CURRENT_USER\S7F\shell\
runas\command
IsolatedCommand = "%1 %*"

HKEY_CURRENT_USER\Yk4
Content Type = "application/x-msdownload"

HKEY_CURRENT_USER\Yk4\shell\
open\command
IsolatedCommand = "%1 %*"

HKEY_CURRENT_USER\Yk4\shell\
runas\command
IsolatedCommand = "%1 %*"

HKEY_CURRENT_USER\w3
Content Type = "application/x-msdownload"

HKEY_CURRENT_USER\w3\shell\
open\command
IsolatedCommand = "%1 %*"

HKEY_CURRENT_USER\w3\shell\
runas\command
IsolatedCommand = "%1 %*"

HKEY_CURRENT_USER\dv
Content Type = "application/x-msdownload"

HKEY_CURRENT_USER\dv\shell\
open\command
IsolatedCommand = "%1 %*"

HKEY_CURRENT_USER\dv\shell\
runas\command
IsolatedCommand = "%1 %*"

HKEY_CURRENT_USER\51
Content Type = "application/x-msdownload"

HKEY_CURRENT_USER\51\shell\
open\command
IsolatedCommand = "%1 %*"

HKEY_CURRENT_USER\51\shell\
runas\command
IsolatedCommand = "%1 %*"

HKEY_CURRENT_USER\R8F
Content Type = "application/x-msdownload"

HKEY_CURRENT_USER\R8F\shell\
open\command
IsolatedCommand = "%1 %*"

HKEY_CURRENT_USER\R8F\shell\
runas\command
IsolatedCommand = "%1 %*"

HKEY_CURRENT_USER\13
Content Type = "application/x-msdownload"

HKEY_CURRENT_USER\13\shell\
open\command
IsolatedCommand = "%1 %*"

HKEY_CURRENT_USER\13\shell\
runas\command
IsolatedCommand = "%1 %*"

HKEY_CURRENT_USER\w5S
Content Type = "application/x-msdownload"

HKEY_CURRENT_USER\w5S\shell\
open\command
IsolatedCommand = "%1 %*"

HKEY_CURRENT_USER\w5S\shell\
runas\command
IsolatedCommand = "%1 %*"

HKEY_CURRENT_USER\gDc
Content Type = "application/x-msdownload"

HKEY_CURRENT_USER\gDc\shell\
open\command
IsolatedCommand = "%1 %*"

HKEY_CURRENT_USER\gDc\shell\
runas\command
IsolatedCommand = "%1 %*"

HKEY_CURRENT_USER\kUV
Content Type = "application/x-msdownload"

HKEY_CURRENT_USER\kUV\shell\
open\command
IsolatedCommand = "%1 %*"

HKEY_CURRENT_USER\kUV\shell\
runas\command
IsolatedCommand = "%1 %*"

HKEY_CURRENT_USER\Po
Content Type = "application/x-msdownload"

HKEY_CURRENT_USER\Po\shell\
open\command
IsolatedCommand = "%1 %*"

HKEY_CURRENT_USER\Po\shell\
runas\command
IsolatedCommand = "%1 %*"

HKEY_CURRENT_USER\7Bs
Content Type = "application/x-msdownload"

HKEY_CURRENT_USER\7Bs\shell\
open\command
IsolatedCommand = "%1 %*"

HKEY_CURRENT_USER\7Bs\shell\
runas\command
IsolatedCommand = "%1 %*"

HKEY_CURRENT_USER\GM
Content Type = "application/x-msdownload"

HKEY_CURRENT_USER\GM\shell\
open\command
IsolatedCommand = "%1 %*"

HKEY_CURRENT_USER\GM\shell\
runas\command
IsolatedCommand = "%1 %*"

HKEY_CURRENT_USER\msu
Content Type = "application/x-msdownload"

HKEY_CURRENT_USER\msu\shell\
open\command
IsolatedCommand = "%1 %*"

HKEY_CURRENT_USER\msu\shell\
runas\command
IsolatedCommand = "%1 %*"

HKEY_CURRENT_USER\GOL
Content Type = "application/x-msdownload"

HKEY_CURRENT_USER\GOL\shell\
open\command
IsolatedCommand = "%1 %*"

HKEY_CURRENT_USER\GOL\shell\
runas\command
IsolatedCommand = "%1 %*"

HKEY_CURRENT_USER\fD3
Content Type = "application/x-msdownload"

HKEY_CURRENT_USER\fD3\shell\
open\command
IsolatedCommand = "%1 %*"

HKEY_CURRENT_USER\fD3\shell\
runas\command
IsolatedCommand = "%1 %*"

HKEY_CURRENT_USER\qcl
Content Type = "application/x-msdownload"

HKEY_CURRENT_USER\qcl\shell\
open\command
IsolatedCommand = "%1 %*"

HKEY_CURRENT_USER\qcl\shell\
runas\command
IsolatedCommand = "%1 %*"

HKEY_CURRENT_USER\3j
Content Type = "application/x-msdownload"

HKEY_CURRENT_USER\3j\shell\
open\command
IsolatedCommand = "%1 %*"

HKEY_CURRENT_USER\3j\shell\
runas\command
IsolatedCommand = "%1 %*"

HKEY_CURRENT_USER\6Ja
Content Type = "application/x-msdownload"

HKEY_CURRENT_USER\6Ja\shell\
open\command
IsolatedCommand = "%1 %*"

HKEY_CURRENT_USER\6Ja\shell\
runas\command
IsolatedCommand = "%1 %*"

HKEY_CURRENT_USER\307
Content Type = "application/x-msdownload"

HKEY_CURRENT_USER\307\shell\
open\command
IsolatedCommand = "%1 %*"

HKEY_CURRENT_USER\307\shell\
runas\command
IsolatedCommand = "%1 %*"

HKEY_CURRENT_USER\0Q
Content Type = "application/x-msdownload"

HKEY_CURRENT_USER\0Q\shell\
open\command
IsolatedCommand = "%1 %*"

HKEY_CURRENT_USER\0Q\shell\
runas\command
IsolatedCommand = "%1 %*"

HKEY_CURRENT_USER\BVm
Content Type = "application/x-msdownload"

HKEY_CURRENT_USER\BVm\shell\
open\command
IsolatedCommand = "%1 %*"

HKEY_CURRENT_USER\BVm\shell\
runas\command
IsolatedCommand = "%1 %*"

HKEY_CURRENT_USER\Fd
Content Type = "application/x-msdownload"

HKEY_CURRENT_USER\Fd\shell\
open\command
IsolatedCommand = "%1 %*"

HKEY_CURRENT_USER\Fd\shell\
runas\command
IsolatedCommand = "%1 %*"

HKEY_CURRENT_USER\e7
Content Type = "application/x-msdownload"

HKEY_CURRENT_USER\e7\shell\
open\command
IsolatedCommand = "%1 %*"

HKEY_CURRENT_USER\e7\shell\
runas\command
IsolatedCommand = "%1 %*"

HKEY_CURRENT_USER\C3
Content Type = "application/x-msdownload"

HKEY_CURRENT_USER\C3\shell\
open\command
IsolatedCommand = "%1 %*"

HKEY_CURRENT_USER\C3\shell\
runas\command
IsolatedCommand = "%1 %*"

HKEY_CURRENT_USER\V3A
Content Type = "application/x-msdownload"

HKEY_CURRENT_USER\V3A\shell\
open\command
IsolatedCommand = "%1 %*"

HKEY_CURRENT_USER\V3A\shell\
runas\command
IsolatedCommand = "%1 %*"

HKEY_CURRENT_USER\C6
Content Type = "application/x-msdownload"

HKEY_CURRENT_USER\C6\shell\
open\command
IsolatedCommand = "%1 %*"

HKEY_CURRENT_USER\C6\shell\
runas\command
IsolatedCommand = "%1 %*"

HKEY_CURRENT_USER\QP
Content Type = "application/x-msdownload"

HKEY_CURRENT_USER\QP\shell\
open\command
IsolatedCommand = "%1 %*"

HKEY_CURRENT_USER\QP\shell\
runas\command
IsolatedCommand = "%1 %*"

HKEY_CURRENT_USER\25
Content Type = "application/x-msdownload"

HKEY_CURRENT_USER\25\shell\
open\command
IsolatedCommand = "%1 %*"

HKEY_CURRENT_USER\25\shell\
runas\command
IsolatedCommand = "%1 %*"

HKEY_CURRENT_USER\5l
Content Type = "application/x-msdownload"

HKEY_CURRENT_USER\5l\shell\
open\command
IsolatedCommand = "%1 %*"

HKEY_CURRENT_USER\5l\shell\
runas\command
IsolatedCommand = "%1 %*"

HKEY_CURRENT_USER\5C8
Content Type = "application/x-msdownload"

HKEY_CURRENT_USER\5C8\shell\
open\command
IsolatedCommand = "%1 %*"

HKEY_CURRENT_USER\5C8\shell\
runas\command
IsolatedCommand = "%1 %*"

HKEY_CURRENT_USER\6p
Content Type = "application/x-msdownload"

HKEY_CURRENT_USER\6p\shell\
open\command
IsolatedCommand = "%1 %*"

HKEY_CURRENT_USER\6p\shell\
runas\command
IsolatedCommand = "%1 %*"

HKEY_CURRENT_USER\oon
Content Type = "application/x-msdownload"

HKEY_CURRENT_USER\oon\shell\
open\command
IsolatedCommand = "%1 %*"

HKEY_CURRENT_USER\oon\shell\
runas\command
IsolatedCommand = "%1 %*"

HKEY_CURRENT_USER\pf
Content Type = "application/x-msdownload"

HKEY_CURRENT_USER\pf\shell\
open\command
IsolatedCommand = "%1 %*"

HKEY_CURRENT_USER\pf\shell\
runas\command
IsolatedCommand = "%1 %*"

HKEY_CURRENT_USER\Q27
Content Type = "application/x-msdownload"

HKEY_CURRENT_USER\Q27\shell\
open\command
IsolatedCommand = "%1 %*"

HKEY_CURRENT_USER\Q27\shell\
runas\command
IsolatedCommand = "%1 %*"

HKEY_CURRENT_USER\625
Content Type = "application/x-msdownload"

HKEY_CURRENT_USER\625\shell\
open\command
IsolatedCommand = "%1 %*"

HKEY_CURRENT_USER\625\shell\
runas\command
IsolatedCommand = "%1 %*"

HKEY_CURRENT_USER\303
Content Type = "application/x-msdownload"

HKEY_CURRENT_USER\303\shell\
open\command
IsolatedCommand = "%1 %*"

HKEY_CURRENT_USER\303\shell\
runas\command
IsolatedCommand = "%1 %*"

HKEY_CURRENT_USER\rFe
Content Type = "application/x-msdownload"

HKEY_CURRENT_USER\rFe\shell\
open\command
IsolatedCommand = "%1 %*"

HKEY_CURRENT_USER\rFe\shell\
runas\command
IsolatedCommand = "%1 %*"

HKEY_CURRENT_USER\Wt
Content Type = "application/x-msdownload"

HKEY_CURRENT_USER\Wt\shell\
open\command
IsolatedCommand = "%1 %*"

HKEY_CURRENT_USER\Wt\shell\
runas\command
IsolatedCommand = "%1 %*"

HKEY_CURRENT_USER\6gF
Content Type = "application/x-msdownload"

HKEY_CURRENT_USER\6gF\shell\
open\command
IsolatedCommand = "%1 %*"

HKEY_CURRENT_USER\6gF\shell\
runas\command
IsolatedCommand = "%1 %*"

HKEY_CURRENT_USER\NbI
Content Type = "application/x-msdownload"

HKEY_CURRENT_USER\NbI\shell\
open\command
IsolatedCommand = "%1 %*"

HKEY_CURRENT_USER\NbI\shell\
runas\command
IsolatedCommand = "%1 %*"

HKEY_CURRENT_USER\58
Content Type = "application/x-msdownload"

HKEY_CURRENT_USER\58\shell\
open\command
IsolatedCommand = "%1 %*"

HKEY_CURRENT_USER\58\shell\
runas\command
IsolatedCommand = "%1 %*"

HKEY_CURRENT_USER\wLy
Content Type = "application/x-msdownload"

HKEY_CURRENT_USER\wLy\shell\
open\command
IsolatedCommand = "%1 %*"

HKEY_CURRENT_USER\wLy\shell\
runas\command
IsolatedCommand = "%1 %*"

HKEY_CURRENT_USER\ff
Content Type = "application/x-msdownload"

HKEY_CURRENT_USER\ff\shell\
open\command
IsolatedCommand = "%1 %*"

HKEY_CURRENT_USER\ff\shell\
runas\command
IsolatedCommand = "%1 %*"

HKEY_CURRENT_USER\no0
Content Type = "application/x-msdownload"

HKEY_CURRENT_USER\no0\shell\
open\command
IsolatedCommand = "%1 %*"

HKEY_CURRENT_USER\no0\shell\
runas\command
IsolatedCommand = "%1 %*"

HKEY_CURRENT_USER\cL
Content Type = "application/x-msdownload"

HKEY_CURRENT_USER\cL\shell\
open\command
IsolatedCommand = "%1 %*"

HKEY_CURRENT_USER\cL\shell\
runas\command
IsolatedCommand = "%1 %*"

HKEY_CURRENT_USER\Gc
Content Type = "application/x-msdownload"

HKEY_CURRENT_USER\Gc\shell\
open\command
IsolatedCommand = "%1 %*"

HKEY_CURRENT_USER\Gc\shell\
runas\command
IsolatedCommand = "%1 %*"

HKEY_CURRENT_USER\pK
Content Type = "application/x-msdownload"

HKEY_CURRENT_USER\pK\shell\
open\command
IsolatedCommand = "%1 %*"

HKEY_CURRENT_USER\pK\shell\
runas\command
IsolatedCommand = "%1 %*"

HKEY_CURRENT_USER\tW7
Content Type = "application/x-msdownload"

HKEY_CURRENT_USER\tW7\shell\
open\command
IsolatedCommand = "%1 %*"

HKEY_CURRENT_USER\tW7\shell\
runas\command
IsolatedCommand = "%1 %*"

HKEY_CURRENT_USER\Jnr
Content Type = "application/x-msdownload"

HKEY_CURRENT_USER\Jnr\shell\
open\command
IsolatedCommand = "%1 %*"

HKEY_CURRENT_USER\Jnr\shell\
runas\command
IsolatedCommand = "%1 %*"

HKEY_CURRENT_USER\l7
Content Type = "application/x-msdownload"

HKEY_CURRENT_USER\l7\shell\
open\command
IsolatedCommand = "%1 %*"

HKEY_CURRENT_USER\l7\shell\
runas\command
IsolatedCommand = "%1 %*"

HKEY_CURRENT_USER\Q5
Content Type = "application/x-msdownload"

HKEY_CURRENT_USER\Q5\shell\
open\command
IsolatedCommand = "%1 %*"

HKEY_CURRENT_USER\Q5\shell\
runas\command
IsolatedCommand = "%1 %*"

HKEY_CURRENT_USER\UF
Content Type = "application/x-msdownload"

HKEY_CURRENT_USER\UF\shell\
open\command
IsolatedCommand = "%1 %*"

HKEY_CURRENT_USER\UF\shell\
runas\command
IsolatedCommand = "%1 %*"

HKEY_CURRENT_USER\4ur
Content Type = "application/x-msdownload"

HKEY_CURRENT_USER\4ur\shell\
open\command
IsolatedCommand = "%1 %*"

HKEY_CURRENT_USER\4ur\shell\
runas\command
IsolatedCommand = "%1 %*"

HKEY_CURRENT_USER\hu
Content Type = "application/x-msdownload"

HKEY_CURRENT_USER\hu\shell\
open\command
IsolatedCommand = "%1 %*"

HKEY_CURRENT_USER\hu\shell\
runas\command
IsolatedCommand = "%1 %*"

HKEY_CURRENT_USER\Lk
Content Type = "application/x-msdownload"

HKEY_CURRENT_USER\Lk\shell\
open\command
IsolatedCommand = "%1 %*"

HKEY_CURRENT_USER\Lk\shell\
runas\command
IsolatedCommand = "%1 %*"

HKEY_CURRENT_USER\w2
Content Type = "application/x-msdownload"

HKEY_CURRENT_USER\w2\shell\
open\command
IsolatedCommand = "%1 %*"

HKEY_CURRENT_USER\w2\shell\
runas\command
IsolatedCommand = "%1 %*"

HKEY_CURRENT_USER\LLp
Content Type = "application/x-msdownload"

HKEY_CURRENT_USER\LLp\shell\
open\command
IsolatedCommand = "%1 %*"

HKEY_CURRENT_USER\LLp\shell\
runas\command
IsolatedCommand = "%1 %*"

HKEY_CURRENT_USER\nRt
Content Type = "application/x-msdownload"

HKEY_CURRENT_USER\nRt\shell\
open\command
IsolatedCommand = "%1 %*"

HKEY_CURRENT_USER\nRt\shell\
runas\command
IsolatedCommand = "%1 %*"

HKEY_CURRENT_USER\7J5
Content Type = "application/x-msdownload"

HKEY_CURRENT_USER\7J5\shell\
open\command
IsolatedCommand = "%1 %*"

HKEY_CURRENT_USER\7J5\shell\
runas\command
IsolatedCommand = "%1 %*"

HKEY_CURRENT_USER\RGd
Content Type = "application/x-msdownload"

HKEY_CURRENT_USER\RGd\shell\
open\command
IsolatedCommand = "%1 %*"

HKEY_CURRENT_USER\RGd\shell\
runas\command
IsolatedCommand = "%1 %*"

HKEY_CURRENT_USER\350
Content Type = "application/x-msdownload"

HKEY_CURRENT_USER\350\shell\
open\command
IsolatedCommand = "%1 %*"

HKEY_CURRENT_USER\350\shell\
runas\command
IsolatedCommand = "%1 %*"

HKEY_CURRENT_USER\Ys
Content Type = "application/x-msdownload"

HKEY_CURRENT_USER\Ys\shell\
open\command
IsolatedCommand = "%1 %*"

HKEY_CURRENT_USER\Ys\shell\
runas\command
IsolatedCommand = "%1 %*"

HKEY_CURRENT_USER\Etm
Content Type = "application/x-msdownload"

HKEY_CURRENT_USER\Etm\shell\
open\command
IsolatedCommand = "%1 %*"

HKEY_CURRENT_USER\Etm\shell\
runas\command
IsolatedCommand = "%1 %*"

HKEY_CURRENT_USER\p7a
Content Type = "application/x-msdownload"

HKEY_CURRENT_USER\p7a\shell\
open\command
IsolatedCommand = "%1 %*"

HKEY_CURRENT_USER\p7a\shell\
runas\command
IsolatedCommand = "%1 %*"

HKEY_CURRENT_USER\eul
Content Type = "application/x-msdownload"

HKEY_CURRENT_USER\eul\shell\
open\command
IsolatedCommand = "%1 %*"

HKEY_CURRENT_USER\eul\shell\
runas\command
IsolatedCommand = "%1 %*"

HKEY_CURRENT_USER\TP
Content Type = "application/x-msdownload"

HKEY_CURRENT_USER\TP\shell\
open\command
IsolatedCommand = "%1 %*"

HKEY_CURRENT_USER\TP\shell\
runas\command
IsolatedCommand = "%1 %*"

HKEY_CURRENT_USER\waL
Content Type = "application/x-msdownload"

HKEY_CURRENT_USER\waL\shell\
open\command
IsolatedCommand = "%1 %*"

HKEY_CURRENT_USER\waL\shell\
runas\command
IsolatedCommand = "%1 %*"

HKEY_CURRENT_USER\vXx
Content Type = "application/x-msdownload"

HKEY_CURRENT_USER\vXx\shell\
open\command
IsolatedCommand = "%1 %*"

HKEY_CURRENT_USER\vXx\shell\
runas\command
IsolatedCommand = "%1 %*"

HKEY_CURRENT_USER\Kue
Content Type = "application/x-msdownload"

HKEY_CURRENT_USER\Kue\shell\
open\command
IsolatedCommand = "%1 %*"

HKEY_CURRENT_USER\Kue\shell\
runas\command
IsolatedCommand = "%1 %*"

HKEY_CURRENT_USER\0n
Content Type = "application/x-msdownload"

HKEY_CURRENT_USER\0n\shell\
open\command
IsolatedCommand = "%1 %*"

HKEY_CURRENT_USER\0n\shell\
runas\command
IsolatedCommand = "%1 %*"

HKEY_CURRENT_USER\Dx
Content Type = "application/x-msdownload"

HKEY_CURRENT_USER\Dx\shell\
open\command
IsolatedCommand = "%1 %*"

HKEY_CURRENT_USER\Dx\shell\
runas\command
IsolatedCommand = "%1 %*"

HKEY_CURRENT_USER\16D
Content Type = "application/x-msdownload"

HKEY_CURRENT_USER\16D\shell\
open\command
IsolatedCommand = "%1 %*"

HKEY_CURRENT_USER\16D\shell\
runas\command
IsolatedCommand = "%1 %*"

HKEY_CURRENT_USER\O26
Content Type = "application/x-msdownload"

HKEY_CURRENT_USER\O26\shell\
open\command
IsolatedCommand = "%1 %*"

HKEY_CURRENT_USER\O26\shell\
runas\command
IsolatedCommand = "%1 %*"

HKEY_CURRENT_USER\D7d
Content Type = "application/x-msdownload"

HKEY_CURRENT_USER\D7d\shell\
open\command
IsolatedCommand = "%1 %*"

HKEY_CURRENT_USER\D7d\shell\
runas\command
IsolatedCommand = "%1 %*"

HKEY_CURRENT_USER\dL
Content Type = "application/x-msdownload"

HKEY_CURRENT_USER\dL\shell\
open\command
IsolatedCommand = "%1 %*"

HKEY_CURRENT_USER\dL\shell\
runas\command
IsolatedCommand = "%1 %*"

HKEY_CURRENT_USER\f5N
Content Type = "application/x-msdownload"

HKEY_CURRENT_USER\f5N\shell\
open\command
IsolatedCommand = "%1 %*"

HKEY_CURRENT_USER\f5N\shell\
runas\command
IsolatedCommand = "%1 %*"

HKEY_CURRENT_USER\60
Content Type = "application/x-msdownload"

HKEY_CURRENT_USER\60\shell\
open\command
IsolatedCommand = "%1 %*"

HKEY_CURRENT_USER\60\shell\
runas\command
IsolatedCommand = "%1 %*"

HKEY_CURRENT_USER\5vk
Content Type = "application/x-msdownload"

HKEY_CURRENT_USER\5vk\shell\
open\command
IsolatedCommand = "%1 %*"

HKEY_CURRENT_USER\5vk\shell\
runas\command
IsolatedCommand = "%1 %*"

HKEY_CURRENT_USER\J6U
Content Type = "application/x-msdownload"

HKEY_CURRENT_USER\J6U\shell\
open\command
IsolatedCommand = "%1 %*"

HKEY_CURRENT_USER\J6U\shell\
runas\command
IsolatedCommand = "%1 %*"

HKEY_CURRENT_USER\53q
Content Type = "application/x-msdownload"

HKEY_CURRENT_USER\53q\shell\
open\command
IsolatedCommand = "%1 %*"

HKEY_CURRENT_USER\53q\shell\
runas\command
IsolatedCommand = "%1 %*"

HKEY_CURRENT_USER\H3E
Content Type = "application/x-msdownload"

HKEY_CURRENT_USER\H3E\shell\
open\command
IsolatedCommand = "%1 %*"

HKEY_CURRENT_USER\H3E\shell\
runas\command
IsolatedCommand = "%1 %*"

HKEY_CURRENT_USER\326
Content Type = "application/x-msdownload"

HKEY_CURRENT_USER\326\shell\
open\command
IsolatedCommand = "%1 %*"

HKEY_CURRENT_USER\326\shell\
runas\command
IsolatedCommand = "%1 %*"

HKEY_CURRENT_USER\sr7
Content Type = "application/x-msdownload"

HKEY_CURRENT_USER\sr7\shell\
open\command
IsolatedCommand = "%1 %*"

HKEY_CURRENT_USER\sr7\shell\
runas\command
IsolatedCommand = "%1 %*"

HKEY_CURRENT_USER\8V
Content Type = "application/x-msdownload"

HKEY_CURRENT_USER\8V\shell\
open\command
IsolatedCommand = "%1 %*"

HKEY_CURRENT_USER\8V\shell\
runas\command
IsolatedCommand = "%1 %*"

HKEY_CURRENT_USER\ceY
Content Type = "application/x-msdownload"

HKEY_CURRENT_USER\ceY\shell\
open\command
IsolatedCommand = "%1 %*"

HKEY_CURRENT_USER\ceY\shell\
runas\command
IsolatedCommand = "%1 %*"

HKEY_CURRENT_USER\145
Content Type = "application/x-msdownload"

HKEY_CURRENT_USER\145\shell\
open\command
IsolatedCommand = "%1 %*"

HKEY_CURRENT_USER\145\shell\
runas\command
IsolatedCommand = "%1 %*"

HKEY_CURRENT_USER\8y3
Content Type = "application/x-msdownload"

HKEY_CURRENT_USER\8y3\shell\
open\command
IsolatedCommand = "%1 %*"

HKEY_CURRENT_USER\8y3\shell\
runas\command
IsolatedCommand = "%1 %*"

HKEY_CURRENT_USER\f00
Content Type = "application/x-msdownload"

HKEY_CURRENT_USER\f00\shell\
open\command
IsolatedCommand = "%1 %*"

HKEY_CURRENT_USER\f00\shell\
runas\command
IsolatedCommand = "%1 %*"

HKEY_CURRENT_USER\60I
Content Type = "application/x-msdownload"

HKEY_CURRENT_USER\60I\shell\
open\command
IsolatedCommand = "%1 %*"

HKEY_CURRENT_USER\60I\shell\
runas\command
IsolatedCommand = "%1 %*"

HKEY_CURRENT_USER\fjS
Content Type = "application/x-msdownload"

HKEY_CURRENT_USER\fjS\shell\
open\command
IsolatedCommand = "%1 %*"

HKEY_CURRENT_USER\fjS\shell\
runas\command
IsolatedCommand = "%1 %*"

HKEY_CURRENT_USER\X6
Content Type = "application/x-msdownload"

HKEY_CURRENT_USER\X6\shell\
open\command
IsolatedCommand = "%1 %*"

HKEY_CURRENT_USER\X6\shell\
runas\command
IsolatedCommand = "%1 %*"

HKEY_CURRENT_USER\Hc3
Content Type = "application/x-msdownload"

HKEY_CURRENT_USER\Hc3\shell\
open\command
IsolatedCommand = "%1 %*"

HKEY_CURRENT_USER\Hc3\shell\
runas\command
IsolatedCommand = "%1 %*"

HKEY_CURRENT_USER\Ux
Content Type = "application/x-msdownload"

HKEY_CURRENT_USER\Ux\shell\
open\command
IsolatedCommand = "%1 %*"

HKEY_CURRENT_USER\Ux\shell\
runas\command
IsolatedCommand = "%1 %*"

HKEY_CURRENT_USER\IG
Content Type = "application/x-msdownload"

HKEY_CURRENT_USER\IG\shell\
open\command
IsolatedCommand = "%1 %*"

HKEY_CURRENT_USER\IG\shell\
runas\command
IsolatedCommand = "%1 %*"

HKEY_CURRENT_USER\Y1
Content Type = "application/x-msdownload"

HKEY_CURRENT_USER\Y1\shell\
open\command
IsolatedCommand = "%1 %*"

HKEY_CURRENT_USER\Y1\shell\
runas\command
IsolatedCommand = "%1 %*"

HKEY_CURRENT_USER\7t
Content Type = "application/x-msdownload"

HKEY_CURRENT_USER\7t\shell\
open\command
IsolatedCommand = "%1 %*"

HKEY_CURRENT_USER\7t\shell\
runas\command
IsolatedCommand = "%1 %*"

HKEY_CURRENT_USER\6i
Content Type = "application/x-msdownload"

HKEY_CURRENT_USER\6i\shell\
open\command
IsolatedCommand = "%1 %*"

HKEY_CURRENT_USER\6i\shell\
runas\command
IsolatedCommand = "%1 %*"

HKEY_CURRENT_USER\56
Content Type = "application/x-msdownload"

HKEY_CURRENT_USER\56\shell\
open\command
IsolatedCommand = "%1 %*"

HKEY_CURRENT_USER\56\shell\
runas\command
IsolatedCommand = "%1 %*"

HKEY_CURRENT_USER\66
Content Type = "application/x-msdownload"

HKEY_CURRENT_USER\66\shell\
open\command
IsolatedCommand = "%1 %*"

HKEY_CURRENT_USER\66\shell\
runas\command
IsolatedCommand = "%1 %*"

HKEY_CURRENT_USER\tL
Content Type = "application/x-msdownload"

HKEY_CURRENT_USER\tL\shell\
open\command
IsolatedCommand = "%1 %*"

HKEY_CURRENT_USER\tL\shell\
runas\command
IsolatedCommand = "%1 %*"

HKEY_CURRENT_USER\fYB
Content Type = "application/x-msdownload"

HKEY_CURRENT_USER\fYB\shell\
open\command
IsolatedCommand = "%1 %*"

HKEY_CURRENT_USER\fYB\shell\
runas\command
IsolatedCommand = "%1 %*"

HKEY_CURRENT_USER\0g1
Content Type = "application/x-msdownload"

HKEY_CURRENT_USER\0g1\shell\
open\command
IsolatedCommand = "%1 %*"

HKEY_CURRENT_USER\0g1\shell\
runas\command
IsolatedCommand = "%1 %*"

HKEY_CURRENT_USER\ekF
Content Type = "application/x-msdownload"

HKEY_CURRENT_USER\ekF\shell\
open\command
IsolatedCommand = "%1 %*"

HKEY_CURRENT_USER\ekF\shell\
runas\command
IsolatedCommand = "%1 %*"

HKEY_CURRENT_USER\gdK
Content Type = "application/x-msdownload"

HKEY_CURRENT_USER\gdK\shell\
open\command
IsolatedCommand = "%1 %*"

HKEY_CURRENT_USER\gdK\shell\
runas\command
IsolatedCommand = "%1 %*"

HKEY_CURRENT_USER\gGO
Content Type = "application/x-msdownload"

HKEY_CURRENT_USER\gGO\shell\
open\command
IsolatedCommand = "%1 %*"

HKEY_CURRENT_USER\gGO\shell\
runas\command
IsolatedCommand = "%1 %*"

HKEY_CURRENT_USER\1h
Content Type = "application/x-msdownload"

HKEY_CURRENT_USER\1h\shell\
open\command
IsolatedCommand = "%1 %*"

HKEY_CURRENT_USER\1h\shell\
runas\command
IsolatedCommand = "%1 %*"

HKEY_CURRENT_USER\T8i
Content Type = "application/x-msdownload"

HKEY_CURRENT_USER\T8i\shell\
open\command
IsolatedCommand = "%1 %*"

HKEY_CURRENT_USER\T8i\shell\
runas\command
IsolatedCommand = "%1 %*"

HKEY_CURRENT_USER\3f
Content Type = "application/x-msdownload"

HKEY_CURRENT_USER\3f\shell\
open\command
IsolatedCommand = "%1 %*"

HKEY_CURRENT_USER\3f\shell\
runas\command
IsolatedCommand = "%1 %*"

HKEY_CURRENT_USER\vY6
Content Type = "application/x-msdownload"

HKEY_CURRENT_USER\vY6\shell\
open\command
IsolatedCommand = "%1 %*"

HKEY_CURRENT_USER\vY6\shell\
runas\command
IsolatedCommand = "%1 %*"

HKEY_CURRENT_USER\Ur5
Content Type = "application/x-msdownload"

HKEY_CURRENT_USER\Ur5\shell\
open\command
IsolatedCommand = "%1 %*"

HKEY_CURRENT_USER\Ur5\shell\
runas\command
IsolatedCommand = "%1 %*"

HKEY_CURRENT_USER\eN6
Content Type = "application/x-msdownload"

HKEY_CURRENT_USER\eN6\shell\
open\command
IsolatedCommand = "%1 %*"

HKEY_CURRENT_USER\eN6\shell\
runas\command
IsolatedCommand = "%1 %*"

HKEY_CURRENT_USER\031
Content Type = "application/x-msdownload"

HKEY_CURRENT_USER\031\shell\
open\command
IsolatedCommand = "%1 %*"

HKEY_CURRENT_USER\031\shell\
runas\command
IsolatedCommand = "%1 %*"

HKEY_CURRENT_USER\MKS
Content Type = "application/x-msdownload"

HKEY_CURRENT_USER\MKS\shell\
open\command
IsolatedCommand = "%1 %*"

HKEY_CURRENT_USER\MKS\shell\
runas\command
IsolatedCommand = "%1 %*"

HKEY_CURRENT_USER\6IB
Content Type = "application/x-msdownload"

HKEY_CURRENT_USER\6IB\shell\
open\command
IsolatedCommand = "%1 %*"

HKEY_CURRENT_USER\6IB\shell\
runas\command
IsolatedCommand = "%1 %*"

HKEY_CURRENT_USER\00S
Content Type = "application/x-msdownload"

HKEY_CURRENT_USER\00S\shell\
open\command
IsolatedCommand = "%1 %*"

HKEY_CURRENT_USER\00S\shell\
runas\command
IsolatedCommand = "%1 %*"

HKEY_CURRENT_USER\Bvr
Content Type = "application/x-msdownload"

HKEY_CURRENT_USER\Bvr\shell\
open\command
IsolatedCommand = "%1 %*"

HKEY_CURRENT_USER\Bvr\shell\
runas\command
IsolatedCommand = "%1 %*"

HKEY_CURRENT_USER\Ln
Content Type = "application/x-msdownload"

HKEY_CURRENT_USER\Ln\shell\
open\command
IsolatedCommand = "%1 %*"

HKEY_CURRENT_USER\Ln\shell\
runas\command
IsolatedCommand = "%1 %*"

HKEY_CURRENT_USER\4i
Content Type = "application/x-msdownload"

HKEY_CURRENT_USER\4i\shell\
open\command
IsolatedCommand = "%1 %*"

HKEY_CURRENT_USER\4i\shell\
runas\command
IsolatedCommand = "%1 %*"

HKEY_CURRENT_USER\y1w
Content Type = "application/x-msdownload"

HKEY_CURRENT_USER\y1w\shell\
open\command
IsolatedCommand = "%1 %*"

HKEY_CURRENT_USER\y1w\shell\
runas\command
IsolatedCommand = "%1 %*"

HKEY_CURRENT_USER\75s
Content Type = "application/x-msdownload"

HKEY_CURRENT_USER\75s\shell\
open\command
IsolatedCommand = "%1 %*"

HKEY_CURRENT_USER\75s\shell\
runas\command
IsolatedCommand = "%1 %*"

HKEY_CURRENT_USER\O3
Content Type = "application/x-msdownload"

HKEY_CURRENT_USER\O3\shell\
open\command
IsolatedCommand = "%1 %*"

HKEY_CURRENT_USER\O3\shell\
runas\command
IsolatedCommand = "%1 %*"

HKEY_CURRENT_USER\33w
Content Type = "application/x-msdownload"

HKEY_CURRENT_USER\33w\shell\
open\command
IsolatedCommand = "%1 %*"

HKEY_CURRENT_USER\33w\shell\
runas\command
IsolatedCommand = "%1 %*"

HKEY_CURRENT_USER\6j
Content Type = "application/x-msdownload"

HKEY_CURRENT_USER\6j\shell\
open\command
IsolatedCommand = "%1 %*"

HKEY_CURRENT_USER\6j\shell\
runas\command
IsolatedCommand = "%1 %*"

HKEY_CURRENT_USER\iU
Content Type = "application/x-msdownload"

HKEY_CURRENT_USER\iU\shell\
open\command
IsolatedCommand = "%1 %*"

HKEY_CURRENT_USER\iU\shell\
runas\command
IsolatedCommand = "%1 %*"

HKEY_CURRENT_USER\4U
Content Type = "application/x-msdownload"

HKEY_CURRENT_USER\4U\shell\
open\command
IsolatedCommand = "%1 %*"

HKEY_CURRENT_USER\4U\shell\
runas\command
IsolatedCommand = "%1 %*"

HKEY_CURRENT_USER\dQY
Content Type = "application/x-msdownload"

HKEY_CURRENT_USER\dQY\shell\
open\command
IsolatedCommand = "%1 %*"

HKEY_CURRENT_USER\dQY\shell\
runas\command
IsolatedCommand = "%1 %*"

HKEY_CURRENT_USER\5IG
Content Type = "application/x-msdownload"

HKEY_CURRENT_USER\5IG\shell\
open\command
IsolatedCommand = "%1 %*"

HKEY_CURRENT_USER\5IG\shell\
runas\command
IsolatedCommand = "%1 %*"

HKEY_CURRENT_USER\wrp
Content Type = "application/x-msdownload"

HKEY_CURRENT_USER\wrp\shell\
open\command
IsolatedCommand = "%1 %*"

HKEY_CURRENT_USER\wrp\shell\
runas\command
IsolatedCommand = "%1 %*"

HKEY_CURRENT_USER\bC
Content Type = "application/x-msdownload"

HKEY_CURRENT_USER\bC\shell\
open\command
IsolatedCommand = "%1 %*"

HKEY_CURRENT_USER\bC\shell\
runas\command
IsolatedCommand = "%1 %*"

HKEY_CURRENT_USER\D7
Content Type = "application/x-msdownload"

HKEY_CURRENT_USER\D7\shell\
open\command
IsolatedCommand = "%1 %*"

HKEY_CURRENT_USER\D7\shell\
runas\command
IsolatedCommand = "%1 %*"

HKEY_CURRENT_USER\37
Content Type = "application/x-msdownload"

HKEY_CURRENT_USER\37\shell\
open\command
IsolatedCommand = "%1 %*"

HKEY_CURRENT_USER\37\shell\
runas\command
IsolatedCommand = "%1 %*"

HKEY_CURRENT_USER\1Pn
Content Type = "application/x-msdownload"

HKEY_CURRENT_USER\1Pn\shell\
open\command
IsolatedCommand = "%1 %*"

HKEY_CURRENT_USER\1Pn\shell\
runas\command
IsolatedCommand = "%1 %*"

HKEY_CURRENT_USER\J4x
Content Type = "application/x-msdownload"

HKEY_CURRENT_USER\J4x\shell\
open\command
IsolatedCommand = "%1 %*"

HKEY_CURRENT_USER\J4x\shell\
runas\command
IsolatedCommand = "%1 %*"

HKEY_CURRENT_USER\fm2
Content Type = "application/x-msdownload"

HKEY_CURRENT_USER\fm2\shell\
open\command
IsolatedCommand = "%1 %*"

HKEY_CURRENT_USER\fm2\shell\
runas\command
IsolatedCommand = "%1 %*"

HKEY_CURRENT_USER\3Vy
Content Type = "application/x-msdownload"

HKEY_CURRENT_USER\3Vy\shell\
open\command
IsolatedCommand = "%1 %*"

HKEY_CURRENT_USER\3Vy\shell\
runas\command
IsolatedCommand = "%1 %*"

HKEY_CURRENT_USER\6Bd
Content Type = "application/x-msdownload"

HKEY_CURRENT_USER\6Bd\shell\
open\command
IsolatedCommand = "%1 %*"

HKEY_CURRENT_USER\6Bd\shell\
runas\command
IsolatedCommand = "%1 %*"

HKEY_CURRENT_USER\pu
Content Type = "application/x-msdownload"

HKEY_CURRENT_USER\pu\shell\
open\command
IsolatedCommand = "%1 %*"

HKEY_CURRENT_USER\pu\shell\
runas\command
IsolatedCommand = "%1 %*"

HKEY_CURRENT_USER\6O
Content Type = "application/x-msdownload"

HKEY_CURRENT_USER\6O\shell\
open\command
IsolatedCommand = "%1 %*"

HKEY_CURRENT_USER\6O\shell\
runas\command
IsolatedCommand = "%1 %*"

HKEY_CURRENT_USER\1q
Content Type = "application/x-msdownload"

HKEY_CURRENT_USER\1q\shell\
open\command
IsolatedCommand = "%1 %*"

HKEY_CURRENT_USER\1q\shell\
runas\command
IsolatedCommand = "%1 %*"

HKEY_CURRENT_USER\o85
Content Type = "application/x-msdownload"

HKEY_CURRENT_USER\o85\shell\
open\command
IsolatedCommand = "%1 %*"

HKEY_CURRENT_USER\o85\shell\
runas\command
IsolatedCommand = "%1 %*"

HKEY_CURRENT_USER\P41
Content Type = "application/x-msdownload"

HKEY_CURRENT_USER\P41\shell\
open\command
IsolatedCommand = "%1 %*"

HKEY_CURRENT_USER\P41\shell\
runas\command
IsolatedCommand = "%1 %*"

HKEY_CURRENT_USER\ioS
Content Type = "application/x-msdownload"

HKEY_CURRENT_USER\ioS\shell\
open\command
IsolatedCommand = "%1 %*"

HKEY_CURRENT_USER\ioS\shell\
runas\command
IsolatedCommand = "%1 %*"

HKEY_CURRENT_USER\EB
Content Type = "application/x-msdownload"

HKEY_CURRENT_USER\EB\shell\
open\command
IsolatedCommand = "%1 %*"

HKEY_CURRENT_USER\EB\shell\
runas\command
IsolatedCommand = "%1 %*"

HKEY_CURRENT_USER\852
Content Type = "application/x-msdownload"

HKEY_CURRENT_USER\852\shell\
open\command
IsolatedCommand = "%1 %*"

HKEY_CURRENT_USER\852\shell\
runas\command
IsolatedCommand = "%1 %*"

HKEY_CURRENT_USER\IP1
Content Type = "application/x-msdownload"

HKEY_CURRENT_USER\IP1\shell\
open\command
IsolatedCommand = "%1 %*"

HKEY_CURRENT_USER\IP1\shell\
runas\command
IsolatedCommand = "%1 %*"

HKEY_CURRENT_USER\4b8
Content Type = "application/x-msdownload"

HKEY_CURRENT_USER\4b8\shell\
open\command
IsolatedCommand = "%1 %*"

HKEY_CURRENT_USER\4b8\shell\
runas\command
IsolatedCommand = "%1 %*"

HKEY_CURRENT_USER\0hI
Content Type = "application/x-msdownload"

HKEY_CURRENT_USER\0hI\shell\
open\command
IsolatedCommand = "%1 %*"

HKEY_CURRENT_USER\0hI\shell\
runas\command
IsolatedCommand = "%1 %*"

HKEY_CURRENT_USER\51M
Content Type = "application/x-msdownload"

HKEY_CURRENT_USER\51M\shell\
open\command
IsolatedCommand = "%1 %*"

HKEY_CURRENT_USER\51M\shell\
runas\command
IsolatedCommand = "%1 %*"

HKEY_CURRENT_USER\pDS
Content Type = "application/x-msdownload"

HKEY_CURRENT_USER\pDS\shell\
open\command
IsolatedCommand = "%1 %*"

HKEY_CURRENT_USER\pDS\shell\
runas\command
IsolatedCommand = "%1 %*"

HKEY_CURRENT_USER\K8N
Content Type = "application/x-msdownload"

HKEY_CURRENT_USER\K8N\shell\
open\command
IsolatedCommand = "%1 %*"

HKEY_CURRENT_USER\K8N\shell\
runas\command
IsolatedCommand = "%1 %*"

HKEY_CURRENT_USER\gpP
Content Type = "application/x-msdownload"

HKEY_CURRENT_USER\gpP\shell\
open\command
IsolatedCommand = "%1 %*"

HKEY_CURRENT_USER\gpP\shell\
runas\command
IsolatedCommand = "%1 %*"

HKEY_CURRENT_USER\Ot
Content Type = "application/x-msdownload"

HKEY_CURRENT_USER\Ot\shell\
open\command
IsolatedCommand = "%1 %*"

HKEY_CURRENT_USER\Ot\shell\
runas\command
IsolatedCommand = "%1 %*"

HKEY_CURRENT_USER\wEy
Content Type = "application/x-msdownload"

HKEY_CURRENT_USER\wEy\shell\
open\command
IsolatedCommand = "%1 %*"

HKEY_CURRENT_USER\wEy\shell\
runas\command
IsolatedCommand = "%1 %*"

HKEY_CURRENT_USER\4P
Content Type = "application/x-msdownload"

HKEY_CURRENT_USER\4P\shell\
open\command
IsolatedCommand = "%1 %*"

HKEY_CURRENT_USER\4P\shell\
runas\command
IsolatedCommand = "%1 %*"

HKEY_CURRENT_USER\ad1
Content Type = "application/x-msdownload"

HKEY_CURRENT_USER\ad1\shell\
open\command
IsolatedCommand = "%1 %*"

HKEY_CURRENT_USER\ad1\shell\
runas\command
IsolatedCommand = "%1 %*"

HKEY_CURRENT_USER\Ls
Content Type = "application/x-msdownload"

HKEY_CURRENT_USER\Ls\shell\
open\command
IsolatedCommand = "%1 %*"

HKEY_CURRENT_USER\Ls\shell\
runas\command
IsolatedCommand = "%1 %*"

HKEY_CURRENT_USER\gE6
Content Type = "application/x-msdownload"

HKEY_CURRENT_USER\gE6\shell\
open\command
IsolatedCommand = "%1 %*"

HKEY_CURRENT_USER\gE6\shell\
runas\command
IsolatedCommand = "%1 %*"

HKEY_CURRENT_USER\1U
Content Type = "application/x-msdownload"

HKEY_CURRENT_USER\1U\shell\
open\command
IsolatedCommand = "%1 %*"

HKEY_CURRENT_USER\1U\shell\
runas\command
IsolatedCommand = "%1 %*"

HKEY_CURRENT_USER\Ik0
Content Type = "application/x-msdownload"

HKEY_CURRENT_USER\Ik0\shell\
open\command
IsolatedCommand = "%1 %*"

HKEY_CURRENT_USER\Ik0\shell\
runas\command
IsolatedCommand = "%1 %*"

HKEY_CURRENT_USER\JX
Content Type = "application/x-msdownload"

HKEY_CURRENT_USER\JX\shell\
open\command
IsolatedCommand = "%1 %*"

HKEY_CURRENT_USER\JX\shell\
runas\command
IsolatedCommand = "%1 %*"

HKEY_CURRENT_USER\f5p
Content Type = "application/x-msdownload"

HKEY_CURRENT_USER\f5p\shell\
open\command
IsolatedCommand = "%1 %*"

HKEY_CURRENT_USER\f5p\shell\
runas\command
IsolatedCommand = "%1 %*"

HKEY_CURRENT_USER\Ib
Content Type = "application/x-msdownload"

HKEY_CURRENT_USER\Ib\shell\
open\command
IsolatedCommand = "%1 %*"

HKEY_CURRENT_USER\Ib\shell\
runas\command
IsolatedCommand = "%1 %*"

HKEY_CURRENT_USER\635
Content Type = "application/x-msdownload"

HKEY_CURRENT_USER\635\shell\
open\command
IsolatedCommand = "%1 %*"

HKEY_CURRENT_USER\635\shell\
runas\command
IsolatedCommand = "%1 %*"

HKEY_CURRENT_USER\135
Content Type = "application/x-msdownload"

HKEY_CURRENT_USER\135\shell\
open\command
IsolatedCommand = "%1 %*"

HKEY_CURRENT_USER\135\shell\
runas\command
IsolatedCommand = "%1 %*"

HKEY_CURRENT_USER\HH
Content Type = "application/x-msdownload"

HKEY_CURRENT_USER\HH\shell\
open\command
IsolatedCommand = "%1 %*"

HKEY_CURRENT_USER\HH\shell\
runas\command
IsolatedCommand = "%1 %*"

HKEY_CURRENT_USER\1Vu
Content Type = "application/x-msdownload"

HKEY_CURRENT_USER\1Vu\shell\
open\command
IsolatedCommand = "%1 %*"

HKEY_CURRENT_USER\1Vu\shell\
runas\command
IsolatedCommand = "%1 %*"

HKEY_CURRENT_USER\3MB
Content Type = "application/x-msdownload"

HKEY_CURRENT_USER\3MB\shell\
open\command
IsolatedCommand = "%1 %*"

HKEY_CURRENT_USER\3MB\shell\
runas\command
IsolatedCommand = "%1 %*"

HKEY_CURRENT_USER\8Q
Content Type = "application/x-msdownload"

HKEY_CURRENT_USER\8Q\shell\
open\command
IsolatedCommand = "%1 %*"

HKEY_CURRENT_USER\8Q\shell\
runas\command
IsolatedCommand = "%1 %*"

HKEY_CURRENT_USER\805
Content Type = "application/x-msdownload"

HKEY_CURRENT_USER\805\shell\
open\command
IsolatedCommand = "%1 %*"

HKEY_CURRENT_USER\805\shell\
runas\command
IsolatedCommand = "%1 %*"

HKEY_CURRENT_USER\E6
Content Type = "application/x-msdownload"

HKEY_CURRENT_USER\E6\shell\
open\command
IsolatedCommand = "%1 %*"

HKEY_CURRENT_USER\E6\shell\
runas\command
IsolatedCommand = "%1 %*"

HKEY_CURRENT_USER\5gU
Content Type = "application/x-msdownload"

HKEY_CURRENT_USER\5gU\shell\
open\command
IsolatedCommand = "%1 %*"

HKEY_CURRENT_USER\5gU\shell\
runas\command
IsolatedCommand = "%1 %*"

HKEY_CURRENT_USER\17r
Content Type = "application/x-msdownload"

HKEY_CURRENT_USER\17r\shell\
open\command
IsolatedCommand = "%1 %*"

HKEY_CURRENT_USER\17r\shell\
runas\command
IsolatedCommand = "%1 %*"

HKEY_CURRENT_USER\e75
Content Type = "application/x-msdownload"

HKEY_CURRENT_USER\e75\shell\
open\command
IsolatedCommand = "%1 %*"

HKEY_CURRENT_USER\e75\shell\
runas\command
IsolatedCommand = "%1 %*"

HKEY_CURRENT_USER\4jW
Content Type = "application/x-msdownload"

HKEY_CURRENT_USER\4jW\shell\
open\command
IsolatedCommand = "%1 %*"

HKEY_CURRENT_USER\4jW\shell\
runas\command
IsolatedCommand = "%1 %*"

HKEY_CURRENT_USER\24
Content Type = "application/x-msdownload"

HKEY_CURRENT_USER\24\shell\
open\command
IsolatedCommand = "%1 %*"

HKEY_CURRENT_USER\24\shell\
runas\command
IsolatedCommand = "%1 %*"

HKEY_CURRENT_USER\6A
Content Type = "application/x-msdownload"

HKEY_CURRENT_USER\6A\shell\
open\command
IsolatedCommand = "%1 %*"

HKEY_CURRENT_USER\6A\shell\
runas\command
IsolatedCommand = "%1 %*"

HKEY_CURRENT_USER\8O6
Content Type = "application/x-msdownload"

HKEY_CURRENT_USER\8O6\shell\
open\command
IsolatedCommand = "%1 %*"

HKEY_CURRENT_USER\8O6\shell\
runas\command
IsolatedCommand = "%1 %*"

HKEY_CURRENT_USER\1o
Content Type = "application/x-msdownload"

HKEY_CURRENT_USER\1o\shell\
open\command
IsolatedCommand = "%1 %*"

HKEY_CURRENT_USER\1o\shell\
runas\command
IsolatedCommand = "%1 %*"

HKEY_CURRENT_USER\nh7
Content Type = "application/x-msdownload"

HKEY_CURRENT_USER\nh7\shell\
open\command
IsolatedCommand = "%1 %*"

HKEY_CURRENT_USER\nh7\shell\
runas\command
IsolatedCommand = "%1 %*"

HKEY_CURRENT_USER\0Y1
Content Type = "application/x-msdownload"

HKEY_CURRENT_USER\0Y1\shell\
open\command
IsolatedCommand = "%1 %*"

HKEY_CURRENT_USER\0Y1\shell\
runas\command
IsolatedCommand = "%1 %*"

HKEY_CURRENT_USER\V1r
Content Type = "application/x-msdownload"

HKEY_CURRENT_USER\V1r\shell\
open\command
IsolatedCommand = "%1 %*"

HKEY_CURRENT_USER\V1r\shell\
runas\command
IsolatedCommand = "%1 %*"

HKEY_CURRENT_USER\2MX
Content Type = "application/x-msdownload"

HKEY_CURRENT_USER\2MX\shell\
open\command
IsolatedCommand = "%1 %*"

HKEY_CURRENT_USER\2MX\shell\
runas\command
IsolatedCommand = "%1 %*"

HKEY_CURRENT_USER\urx
Content Type = "application/x-msdownload"

HKEY_CURRENT_USER\urx\shell\
open\command
IsolatedCommand = "%1 %*"

HKEY_CURRENT_USER\urx\shell\
runas\command
IsolatedCommand = "%1 %*"

HKEY_CURRENT_USER\3e7
Content Type = "application/x-msdownload"

HKEY_CURRENT_USER\3e7\shell\
open\command
IsolatedCommand = "%1 %*"

HKEY_CURRENT_USER\3e7\shell\
runas\command
IsolatedCommand = "%1 %*"

HKEY_CURRENT_USER\43v
Content Type = "application/x-msdownload"

HKEY_CURRENT_USER\43v\shell\
open\command
IsolatedCommand = "%1 %*"

HKEY_CURRENT_USER\43v\shell\
runas\command
IsolatedCommand = "%1 %*"

HKEY_CURRENT_USER\0le
Content Type = "application/x-msdownload"

HKEY_CURRENT_USER\0le\shell\
open\command
IsolatedCommand = "%1 %*"

HKEY_CURRENT_USER\0le\shell\
runas\command
IsolatedCommand = "%1 %*"

HKEY_CURRENT_USER\nQL
Content Type = "application/x-msdownload"

HKEY_CURRENT_USER\nQL\shell\
open\command
IsolatedCommand = "%1 %*"

HKEY_CURRENT_USER\nQL\shell\
runas\command
IsolatedCommand = "%1 %*"

HKEY_CURRENT_USER\t6
Content Type = "application/x-msdownload"

HKEY_CURRENT_USER\t6\shell\
open\command
IsolatedCommand = "%1 %*"

HKEY_CURRENT_USER\t6\shell\
runas\command
IsolatedCommand = "%1 %*"

HKEY_CURRENT_USER\7hj
Content Type = "application/x-msdownload"

HKEY_CURRENT_USER\7hj\shell\
open\command
IsolatedCommand = "%1 %*"

HKEY_CURRENT_USER\7hj\shell\
runas\command
IsolatedCommand = "%1 %*"

HKEY_CURRENT_USER\Kq
Content Type = "application/x-msdownload"

HKEY_CURRENT_USER\Kq\shell\
open\command
IsolatedCommand = "%1 %*"

HKEY_CURRENT_USER\Kq\shell\
runas\command
IsolatedCommand = "%1 %*"

HKEY_CURRENT_USER\46
Content Type = "application/x-msdownload"

HKEY_CURRENT_USER\46\shell\
open\command
IsolatedCommand = "%1 %*"

HKEY_CURRENT_USER\46\shell\
runas\command
IsolatedCommand = "%1 %*"

HKEY_CURRENT_USER\sg4
Content Type = "application/x-msdownload"

HKEY_CURRENT_USER\sg4\shell\
open\command
IsolatedCommand = "%1 %*"

HKEY_CURRENT_USER\sg4\shell\
runas\command
IsolatedCommand = "%1 %*"

It modifies the following registry entries:

HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\
Services\SharedAccess
Start = "4"

(Note: The default value data of the said registry entry is 2.)

HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\
Security Center
AntiVirusDisableNotify = "1"

HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\
Security Center
AntiVirusOverride = "1"

HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\
Security Center
FirewallDisableNotify = "1"

HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\
Security Center
FirewallOverride = "1"

HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\
Security Center
UpdatesDisableNotify = "1"

HKEY_CURRENT_USER\Software\Microsoft\
GDIPlus
FontCachePath = "%Application Data%"

(Note: The default value data of the said registry entry is %User Profile%\Local Settings\Application Data.)

Dropping Routine

This Trojan drops the following files:

• %Application Data%\xby.exe

(Note: %Application Data% is the current user's Application Data folder, which is usually C:\Documents and Settings\{user name}\Application Data on Windows 2000, XP, and Server 2003, or C:\Users\{user name}\AppData\Roaming on Windows Vista and 7.)

Other Details

This Trojan deletes itself after execution.

This report is generated via an automated analysis system.