ALIASES:

Adware:Win32/MokeAd (Microsoft); [0001d714.EXE]:Generic PWS.y (McAfee); Trojan Horse (Symantec); Trojan-Spy.Win32.Delf.djw (Kaspersky); BehavesLike.Win32.Malware.ahc (mx-v) (Sunbelt); Trojan horse PSW.Banker4.AKCF (AVG)

 PLATFORM:

Windows 2000, Windows XP, Windows Server 2003

 OVERALL RISK RATING:
 DAMAGE POTENTIAL:
 DISTRIBUTION POTENTIAL:
 REPORTED INFECTION:

  • Threat Type: Trojan

  • Destructiveness: No

  • Encrypted:

  • In the wild: Yes

  OVERVIEW

This Trojan arrives on a system as a file dropped by other malware or as a file downloaded unknowingly by users when visiting malicious sites.

It deletes itself after execution.

  TECHNICAL DETAILS

File Size: 323,072 bytes
File Type: EXE
Memory Resident: Yes
Initial Samples Received Date: 25 Apr 2013

Arrival Details

This Trojan arrives on a system as a file dropped by other malware or as a file downloaded unknowingly by users when visiting malicious sites.

Autostart Technique

This Trojan registers as a system service to ensure its automatic execution at every system startup by adding the following registry keys:

HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\
Services\XFQDNZCFR\Parameters

Other System Modifications

This Trojan deletes the following files:

  • %Windows%\DelSelf.bat

(Note: %Windows% is the Windows folder, which is usually C:\Windows.)

It adds the following registry keys:

HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\
Windows NT\CurrentVersion\SvcHost\
EYYFZFTGD

HKEY_LOCAL_MACHINE\SOFTWARE\Adobe\
Common\Sign

It adds the following registry entries:

HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\
Windows NT\CurrentVersion\SvcHost
EYYFZFTGD = "XFQDNZCFR"

HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\
Windows NT\CurrentVersion\SvcHost\
EYYFZFTGD
CoInitializeSecurityParam = "1"

HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\
Services\XFQDNZCFR
Description = "ΪÓû§ÌṩʹÓÃÖ÷Ìâ¹ÜÀíµÄ¾­Ñé¡£"

HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\
Services\XFQDNZCFR\Parameters
ServiceDll = "%Windows%\jtCoyHRblJID0.DLL"

HKEY_LOCAL_MACHINE\SOFTWARE\Adobe\
Common\Sign
CED = "FE56EC464E4CB180CAB986DF75"

HKEY_LOCAL_MACHINE\SOFTWARE\Adobe\
Common\Sign
CED = "68FF56EF14769FB29C97A8BD8B"

HKEY_LOCAL_MACHINE\SOFTWARE\Adobe\
Common\Sign
CED = "65F0491A62A0E57BD54D1253E7"

HKEY_LOCAL_MACHINE\SOFTWARE\Adobe\
Common\Sign
CED = "11243A0B7397FC4C067DC283D0"

HKEY_LOCAL_MACHINE\SOFTWARE\Adobe\
Common\Sign
CED = "471E340D7191FA4EF86AF54FE5"

HKEY_LOCAL_MACHINE\SOFTWARE\Adobe\
Common\Sign
CED = "E272C899FD1C61F05BC897AEBA"

HKEY_LOCAL_MACHINE\SOFTWARE\Adobe\
Common\Sign
CED = "2530065FA7EB11202A19263F14"

HKEY_LOCAL_MACHINE\SOFTWARE\Adobe\
Common\Sign
CED = "B285DD779FE3293812015EE77E"

HKEY_LOCAL_MACHINE\SOFTWARE\Adobe\
Common\Sign
CED = "7EC960F11A789DACA69DA2A3B7"

HKEY_LOCAL_MACHINE\SOFTWARE\Adobe\
Common\Sign
CED = "FD49E1739BFF0554FE74CB9AAF"

HKEY_LOCAL_MACHINE\SOFTWARE\Adobe\
Common\Sign
CED = "6EF950E12A68ADBC968DD293A1"

HKEY_LOCAL_MACHINE\SOFTWARE\Adobe\
Common\Sign
CED = "F64EE47E868489D873E07EC793"

HKEY_LOCAL_MACHINE\SOFTWARE\Adobe\
Common\Sign
CED = "30075FF015759EB39D96A9BC89"

HKEY_LOCAL_MACHINE\SOFTWARE\Adobe\
Common\Sign
CED = "F84CE27C80828BDE69DA64E170"

HKEY_LOCAL_MACHINE\SOFTWARE\Adobe\
Common\Sign
CED = "3C0B233C40424B1E281B242135"

HKEY_LOCAL_MACHINE\SOFTWARE\Adobe\
Common\Sign
CED = "55E079CA3357BC8DC7BC83C297"

HKEY_LOCAL_MACHINE\SOFTWARE\Adobe\
Common\Sign
CED = "D064FA54B8DA20311B0857EE45"

HKEY_LOCAL_MACHINE\SOFTWARE\Adobe\
Common\Sign
CED = "40172F0004060F222C27380D59"

HKEY_LOCAL_MACHINE\SOFTWARE\Adobe\
Common\Sign
CED = "BF96AC858989F2460073CC99AE"

HKEY_LOCAL_MACHINE\SOFTWARE\Adobe\
Common\Sign
CED = "74C39BB4D839421731223D085E"

HKEY_LOCAL_MACHINE\SOFTWARE\Adobe\
Common\Sign
CED = "5CEB42137B9FE474DE54EB79CD"

HKEY_LOCAL_MACHINE\SOFTWARE\Adobe\
Common\Sign
CED = "21340A5BA3E72D3C160D521320"

HKEY_LOCAL_MACHINE\SOFTWARE\Adobe\
Common\Sign
CED = "0154EA44484AB386C0B38CD968"

HKEY_LOCAL_MACHINE\SOFTWARE\Adobe\
Common\Sign
CED = "80D76EC7CF325BEE59CA95D065"

HKEY_LOCAL_MACHINE\SOFTWARE\Adobe\
Common\Sign
CED = "A2B58DA6EE1378C983F04E172C"

HKEY_LOCAL_MACHINE\SOFTWARE\Adobe\
Common\Sign
CED = "9CAB83DC2161AABF89FA440157"

HKEY_LOCAL_MACHINE\SOFTWARE\Adobe\
Common\Sign
CED = "3B0A203155B5DE72DC56E97BCF"

HKEY_LOCAL_MACHINE\SOFTWARE\Adobe\
Common\Sign
CED = "89DC75CE375BA0B19B88D76DFA"

HKEY_LOCAL_MACHINE\SOFTWARE\Adobe\
Common\Sign
CED = "8CDB72C3CBCF35044EC59AABB9"

HKEY_LOCAL_MACHINE\SOFTWARE\Adobe\
Common\Sign
CED = "A0B78FA0E4256EC38D86D96BFF"

HKEY_LOCAL_MACHINE\SOFTWARE\Adobe\
Common\Sign
CED = "5FF64FE02565AE83CD451A2B38"

HKEY_LOCAL_MACHINE\SOFTWARE\Adobe\
Common\Sign
CED = "99AC82D3385AA3B69083DC68FE"

HKEY_LOCAL_MACHINE\SOFTWARE\Adobe\
Common\Sign
CED = "DC68FE50B4D63C0D473C034216"

HKEY_LOCAL_MACHINE\SOFTWARE\Adobe\
Common\Sign
CED = "F440162F57BBC091BBA8B78EDB"

HKEY_LOCAL_MACHINE\SOFTWARE\Adobe\
Common\Sign
CED = "E272C899FD1C61F05BC897AE84"

HKEY_LOCAL_MACHINE\SOFTWARE\Adobe\
Common\Sign
CED = "3E0921325AB8DD73DD55EA7ACE"

HKEY_LOCAL_MACHINE\SOFTWARE\Adobe\
Common\Sign
CED = "D66EC49DE12065F45FD46AFB49"

HKEY_LOCAL_MACHINE\SOFTWARE\Adobe\
Common\Sign
CED = "B087DF7195F51F321C17283D0B"

HKEY_LOCAL_MACHINE\SOFTWARE\Adobe\
Common\Sign
CED = "D262F84AB2D03A0F392A353004"

HKEY_LOCAL_MACHINE\SOFTWARE\Adobe\
Common\Sign
CED = "70C79FB0D4355EF35ED569FC4B"

HKEY_LOCAL_MACHINE\SOFTWARE\Adobe\
Common\Sign
CED = "D165FD57BFC3C899B3A0BF86D2"

HKEY_LOCAL_MACHINE\SOFTWARE\Adobe\
Common\Sign
CED = "85D069FA03070C5DF76BF470C5"

HKEY_LOCAL_MACHINE\SOFTWARE\Adobe\
Common\Sign
CED = "0B5AF0424A484D1C362D323301"

HKEY_LOCAL_MACHINE\SOFTWARE\Adobe\
Common\Sign
CED = "5BEA431C60A2EB7DD74B1451E5"

HKEY_LOCAL_MACHINE\SOFTWARE\Adobe\
Common\Sign
CED = "172E045DA1E12B3E087BC481D6"

HKEY_LOCAL_MACHINE\SOFTWARE\Adobe\
Common\Sign
CED = "53E27BD43959A2B79182DD67FD"

HKEY_LOCAL_MACHINE\SOFTWARE\Adobe\
Common\Sign
CED = "330258E9127095A4AEA5BA8BDF"

HKEY_LOCAL_MACHINE\SOFTWARE\Adobe\
Common\Sign
CED = "380F27385CBEC79AB4AFB0B582"

HKEY_LOCAL_MACHINE\SOFTWARE\Adobe\
Common\Sign
CED = "1520360F779BE070DA48172E3A"

HKEY_LOCAL_MACHINE\SOFTWARE\Adobe\
Common\Sign
CED = "6EF950E12A68ADBC968DD293A0"

HKEY_LOCAL_MACHINE\SOFTWARE\Adobe\
Common\Sign
CED = "23320859BDDD273A140F501523"

HKEY_LOCAL_MACHINE\SOFTWARE\Adobe\
Common\Sign
CED = "C89FB7888C8EF7490370CF96A2"

HKEY_LOCAL_MACHINE\SOFTWARE\Adobe\
Common\Sign
CED = "0255ED474FB3D868E250EF75C2"

HKEY_LOCAL_MACHINE\SOFTWARE\Adobe\
Common\Sign
CED = "380F27385CBEC79AB4AFB0B583"

HKEY_LOCAL_MACHINE\SOFTWARE\Adobe\
Common\Sign
CED = "F1451D365EBCC190BAA9B68FDB"

HKEY_LOCAL_MACHINE\SOFTWARE\Adobe\
Common\Sign
CED = "86D168F902000554FE74CB9AAF"

HKEY_LOCAL_MACHINE\SOFTWARE\Adobe\
Common\Sign
CED = "E77FD769ADED172A241F202533"

HKEY_LOCAL_MACHINE\SOFTWARE\Adobe\
Common\Sign
CED = "EB7BD36D91F11B2E180B541125"

HKEY_LOCAL_MACHINE\SOFTWARE\Adobe\
Common\Sign
CED = "78CF66FF04060F222C27380D5A"

HKEY_LOCAL_MACHINE\SOFTWARE\Adobe\
Common\Sign
CED = "D460F6484C4EB78AC4BF80C593"

HKEY_LOCAL_MACHINE\SOFTWARE\Adobe\
Common\Sign
CED = "7ACD64FD06040958F260FF4511"

HKEY_LOCAL_MACHINE\SOFTWARE\Adobe\
Common\Sign
CED = "34035BF4197982D772E17DC89D"

HKEY_LOCAL_MACHINE\SOFTWARE\Adobe\
Common\Sign
CED = "4510263F474BB081CB47182D3B"

HKEY_LOCAL_MACHINE\SOFTWARE\Adobe\
Common\Sign
CED = "C79EB48DF11075C48E85DA6AFE"

HKEY_LOCAL_MACHINE\SOFTWARE\Adobe\
Common\Sign
CED = "52E57CD53E5CA1B09A89D66EFB"

HKEY_LOCAL_MACHINE\SOFTWARE\Adobe\
Common\Sign
CED = "3E0921325AB8DD73DD55EA7AC8"

HKEY_LOCAL_MACHINE\SOFTWARE\Adobe\
Common\Sign
CED = "E67ED46E96F41E331D16293C08"

HKEY_LOCAL_MACHINE\SOFTWARE\Adobe\
Common\Sign
CED = "A0B78FA0E4256EC38D86D96BF8"

HKEY_LOCAL_MACHINE\SOFTWARE\Adobe\
Common\Sign
CED = "84D36AFB00020B5EE85AE57FD5"

HKEY_LOCAL_MACHINE\SOFTWARE\Adobe\
Common\Sign
CED = "67FE57E82D6D96ABA59EA1A4B0"

HKEY_LOCAL_MACHINE\SOFTWARE\Adobe\
Common\Sign
CED = "E97DD56F97FB0150FA68F74D1A"

HKEY_LOCAL_MACHINE\SOFTWARE\Adobe\
Common\Sign
CED = "0E59F1434B4FB485CF431C293F"

HKEY_LOCAL_MACHINE\SOFTWARE\Adobe\
Common\Sign
CED = "A8BF97A8EC2D56EB66DD61E472"

HKEY_LOCAL_MACHINE\SOFTWARE\Adobe\
Common\Sign
CED = "96A1B98AF2177CCD78EB73F241"

HKEY_LOCAL_MACHINE\SOFTWARE\Adobe\
Common\Sign
CED = "11243A0B7397FC4C067DC283D7"

HKEY_LOCAL_MACHINE\SOFTWARE\Adobe\
Common\Sign
CED = "12253D167E9CE177D1411E273C"

HKEY_LOCAL_MACHINE\SOFTWARE\Adobe\
Common\Sign
CED = "D96DC59EE62B50E16CE777CE65"

HKEY_LOCAL_MACHINE\SOFTWARE\Adobe\
Common\Sign
CED = "283F17286CAED769E35FE064F0"

HKEY_LOCAL_MACHINE\SOFTWARE\Adobe\
Common\Sign
CED = "B88FA7B8DC3D461B352E313402"

HKEY_LOCAL_MACHINE\SOFTWARE\Adobe\
Common\Sign
CED = "F74FE7799DFD075AF46EF173C7"

HKEY_LOCAL_MACHINE\SOFTWARE\Adobe\
Common\Sign
CED = "CE66FC56BEDC263B150E511421"

HKEY_LOCAL_MACHINE\SOFTWARE\Adobe\
Common\Sign
CED = "59EC451E66A4E97FC9BA85C096"

HKEY_LOCAL_MACHINE\SOFTWARE\Adobe\
Common\Sign
CED = "EB7BD36D91F11B2E180B541127"

HKEY_LOCAL_MACHINE\SOFTWARE\Adobe\
Common\Sign
CED = "90A7BF90F4157ED37EF5491C28"

HKEY_LOCAL_MACHINE\SOFTWARE\Adobe\
Common\Sign
CED = "50E77ED73C5EA7BA948FD095A2"

HKEY_LOCAL_MACHINE\SOFTWARE\Adobe\
Common\Sign
CED = "7ACD64FD06040958F260FF4513"

HKEY_LOCAL_MACHINE\SOFTWARE\Adobe\
Common\Sign
CED = "C295AD868E8CF1470172CD98AC"

HKEY_LOCAL_MACHINE\SOFTWARE\Adobe\
Common\Sign
CED = "7BCA63FC01010A5FE959E67ECB"

HKEY_LOCAL_MACHINE\SOFTWARE\Adobe\
Common\Sign
CED = "4D182E070F7398A9A390AFB68C"

HKEY_LOCAL_MACHINE\SOFTWARE\Adobe\
Common\Sign
CED = "FD49E1739BFF0554FE74CB9AAE"

HKEY_LOCAL_MACHINE\SOFTWARE\Adobe\
Common\Sign
CED = "40172F0004060F222C27380D5A"

HKEY_LOCAL_MACHINE\SOFTWARE\Adobe\
Common\Sign
CED = "F541192A52B0D56BE55DE262F0"

HKEY_LOCAL_MACHINE\SOFTWARE\Adobe\
Common\Sign
CED = "CE66FC56BEDC263B150E511420"

HKEY_LOCAL_MACHINE\SOFTWARE\Adobe\
Common\Sign
CED = "1D283E177F8388D974EF4F1623"

HKEY_LOCAL_MACHINE\SOFTWARE\Adobe\
Common\Sign
CED = "55E079CA3357BC8DC7BC83C290"

HKEY_LOCAL_MACHINE\SOFTWARE\Adobe\
Common\Sign
CED = "AEB991A2EA2F54E560D36BFA4F"

HKEY_LOCAL_MACHINE\SOFTWARE\Adobe\
Common\Sign
CED = "FE56EC464E4CB180CAB986DF76"

HKEY_LOCAL_MACHINE\SOFTWARE\Adobe\
Common\Sign
CED = "4510263F474BB081CB47182D39"

HKEY_LOCAL_MACHINE\SOFTWARE\Adobe\
Common\Sign
CED = "60F74EE72C6E97AAA49FA0A5B2"

HKEY_LOCAL_MACHINE\SOFTWARE\Adobe\
Common\Sign
CED = "CD98AE878FF3192822112E370D"

HKEY_LOCAL_MACHINE\SOFTWARE\Adobe\
Common\Sign
CED = "E77FD769ADED172A241F202531"

HKEY_LOCAL_MACHINE\SOFTWARE\Adobe\
Common\Sign
CED = "76C199AAD2375CED58CB94D167"

HKEY_LOCAL_MACHINE\SOFTWARE\Adobe\
Common\Sign
CED = "2D380E276F93F8480271CE97AD"

HKEY_LOCAL_MACHINE\SOFTWARE\Adobe\
Common\Sign
CED = "EE461C3559B9C297B1A2BD88DC"

HKEY_LOCAL_MACHINE\SOFTWARE\Adobe\
Common\Sign
CED = "471E340D7191FA4EF86AF54FE4"

HKEY_LOCAL_MACHINE\SOFTWARE\Adobe\
Common\Sign
CED = "8DD871C2CAC8320741320D58EE"

HKEY_LOCAL_MACHINE\SOFTWARE\Adobe\
Common\Sign
CED = "BE89A1B2DA3F44153F340B5AEE"

HKEY_LOCAL_MACHINE\SOFTWARE\Adobe\
Common\Sign
CED = "42152D060E0C71C08AF9450055"

HKEY_LOCAL_MACHINE\SOFTWARE\Adobe\
Common\Sign
CED = "D66EC49DE12065F45FD46AFB4A"

HKEY_LOCAL_MACHINE\SOFTWARE\Adobe\
Common\Sign
CED = "EA7AD062AAE8122721122D380C"

HKEY_LOCAL_MACHINE\SOFTWARE\Adobe\
Common\Sign
CED = "4E1931020A080D5CF66CF371C7"

HKEY_LOCAL_MACHINE\SOFTWARE\Adobe\
Common\Sign
CED = "CC9BB38CF0117ACF7AE975F046"

HKEY_LOCAL_MACHINE\SOFTWARE\Adobe\
Common\Sign
CED = "57EE47187C9EE779D34F1055E3"

HKEY_LOCAL_MACHINE\SOFTWARE\Adobe\
Common\Sign
CED = "E175CD67AFD3390842310E57E3"

HKEY_LOCAL_MACHINE\SOFTWARE\Adobe\
Common\Sign
CED = "1F360C2569A9D266E052ED77CC"

HKEY_LOCAL_MACHINE\SOFTWARE\Adobe\
Common\Sign
CED = "14233B14789AE375DF53EC78CE"

HKEY_LOCAL_MACHINE\SOFTWARE\Adobe\
Common\Sign
CED = "5BEA431C60A2EB7DD74B1451E6"

HKEY_LOCAL_MACHINE\SOFTWARE\Adobe\
Common\Sign
CED = "2A3D152E56B4D96FD949162F05"

HKEY_LOCAL_MACHINE\SOFTWARE\Adobe\
Common\Sign
CED = "E571C99AE2276CFD483B044116"

HKEY_LOCAL_MACHINE\SOFTWARE\Adobe\
Common\Sign
CED = "A9BC92A3EB2E57EA65DE60E57C"

HKEY_LOCAL_MACHINE\SOFTWARE\Adobe\
Common\Sign
CED = "F440162F57BBC091BBA8B78EDA"

HKEY_LOCAL_MACHINE\SOFTWARE\Adobe\
Common\Sign
CED = "DF77CF61A5E52F024CC798ADBA"

HKEY_LOCAL_MACHINE\SOFTWARE\Adobe\
Common\Sign
CED = "70C79FB0D4355EF35ED569FC49"

HKEY_LOCAL_MACHINE\SOFTWARE\Adobe\
Common\Sign
CED = "D561F94BB3D73D0C463D024310"

HKEY_LOCAL_MACHINE\SOFTWARE\Adobe\
Common\Sign
CED = "93A2B8898D8DF64A047FC085D3"

HKEY_LOCAL_MACHINE\SOFTWARE\Adobe\
Common\Sign
CED = "FE56EC464E4CB180CAB986DF74"

HKEY_LOCAL_MACHINE\SOFTWARE\Adobe\
Common\Sign
CED = "4C1B330C7092FB4D077CC382D7"

HKEY_LOCAL_MACHINE\SOFTWARE\Adobe\
Common\Sign
CED = "FF57EF4145454EE36EE579CC9A"

HKEY_LOCAL_MACHINE\SOFTWARE\Adobe\
Common\Sign
CED = "0550E6789CFE0455FF73CC99AD"

HKEY_LOCAL_MACHINE\SOFTWARE\Adobe\
Common\Sign
CED = "0550E6789CFE0455FF73CC99AE"

HKEY_LOCAL_MACHINE\SOFTWARE\Adobe\
Common\Sign
CED = "9BAA80D13A58BD8CC6BD82C391"

HKEY_LOCAL_MACHINE\SOFTWARE\Adobe\
Common\Sign
CED = "E470C69FE72A53E661D26CF94E"

HKEY_LOCAL_MACHINE\SOFTWARE\Adobe\
Common\Sign
CED = "2E3911226AA8ED430D0659EC7A"

HKEY_LOCAL_MACHINE\SOFTWARE\Adobe\
Common\Sign
CED = "FD49E1739BFF0554FE74CB9AA8"

HKEY_LOCAL_MACHINE\SOFTWARE\Adobe\
Common\Sign
CED = "FB4BE37D81818ADF6AD965E075"

HKEY_LOCAL_MACHINE\SOFTWARE\Adobe\
Common\Sign
CED = "31045AEB10729BAE988BD491A6"

HKEY_LOCAL_MACHINE\SOFTWARE\Adobe\
Common\Sign
CED = "8ED970C1C5C5CE62EC66F94B19"

HKEY_LOCAL_MACHINE\SOFTWARE\Adobe\
Common\Sign
CED = "5EE940117595FE52FC76C99CA8"

HKEY_LOCAL_MACHINE\SOFTWARE\Adobe\
Common\Sign
CED = "99AC82D3385AA3B69083DC68FD"

HKEY_LOCAL_MACHINE\SOFTWARE\Adobe\
Common\Sign
CED = "D76FC798FC1D66FB56CD92D362"

HKEY_LOCAL_MACHINE\SOFTWARE\Adobe\
Common\Sign
CED = "DD69C192FA1F64F550C39CA9BD"

HKEY_LOCAL_MACHINE\SOFTWARE\Adobe\
Common\Sign
CED = "57EE47187C9EE779D34F1055E2"

HKEY_LOCAL_MACHINE\SOFTWARE\Adobe\
Common\Sign
CED = "97AE84DD2664A9B89281DE66FC"

HKEY_LOCAL_MACHINE\SOFTWARE\Adobe\
Common\Sign
CED = "31045AEB10729BAE988BD491A5"

HKEY_LOCAL_MACHINE\SOFTWARE\Adobe\
Common\Sign
CED = "DB6BC39CE0216AFF4A39065FF4"

HKEY_LOCAL_MACHINE\SOFTWARE\Adobe\
Common\Sign
CED = "7DC861F21B7F84D570E37BCA9E"

HKEY_LOCAL_MACHINE\SOFTWARE\Adobe\
Common\Sign
CED = "3E0921325AB8DD73DD55EA7ACF"

HKEY_LOCAL_MACHINE\SOFTWARE\Adobe\
Common\Sign
CED = "ABBA90A1E52469F853C09FA6BC"

HKEY_LOCAL_MACHINE\SOFTWARE\Adobe\
Common\Sign
CED = "42152D060E0C71C08AF9450054"

HKEY_LOCAL_MACHINE\SOFTWARE\Adobe\
Common\Sign
CED = "0352E87A828085D47FF44A1B28"

HKEY_LOCAL_MACHINE\SOFTWARE\Adobe\
Common\Sign
CED = "6EF950E12A68ADBC968DD293A7"

HKEY_LOCAL_MACHINE\SOFTWARE\Adobe\
Common\Sign
CED = "ADB88EA7EF127BCE79EA74F147"

HKEY_LOCAL_MACHINE\SOFTWARE\Adobe\
Common\Sign
CED = "95A0B68FF71A63F651C29DA8BE"

HKEY_LOCAL_MACHINE\SOFTWARE\Adobe\
Common\Sign
CED = "34035BF4197982D772E17DC89C"

HKEY_LOCAL_MACHINE\SOFTWARE\Adobe\
Common\Sign
CED = "F64EE47E868489D873E07EC79C"

HKEY_LOCAL_MACHINE\SOFTWARE\Adobe\
Common\Sign
CED = "C79EB48DF11075C48E85DA6AF8"

HKEY_LOCAL_MACHINE\SOFTWARE\Adobe\
Common\Sign
CED = "A1B48ADB2062ABBE88FB430256"

HKEY_LOCAL_MACHINE\SOFTWARE\Adobe\
Common\Sign
CED = "9FB68CA5E9286DFC57CC93D260"

HKEY_LOCAL_MACHINE\SOFTWARE\Adobe\
Common\Sign
CED = "BE89A1B2DA3F44153F340B5AE8"

HKEY_LOCAL_MACHINE\SOFTWARE\Adobe\
Common\Sign
CED = "F0441A2B53B7DC6CE65CE361F7"

HKEY_LOCAL_MACHINE\SOFTWARE\Adobe\
Common\Sign
CED = "77CE67F81D7D86DB76ED71F441"

HKEY_LOCAL_MACHINE\SOFTWARE\Adobe\
Common\Sign
CED = "EE461C3559B9C297B1A2BD88DD"

HKEY_LOCAL_MACHINE\SOFTWARE\Adobe\
Common\Sign
CED = "77CE67F81D7D86DB76ED71F443"

HKEY_LOCAL_MACHINE\SOFTWARE\Adobe\
Common\Sign
CED = "3F162C05090972C781F24C192E"

HKEY_LOCAL_MACHINE\SOFTWARE\Adobe\
Common\Sign
CED = "A0B78FA0E4256EC38D86D96BF9"

HKEY_LOCAL_MACHINE\SOFTWARE\Adobe\
Common\Sign
CED = "BB8AA0B1D53459E863D06EF74D"

HKEY_LOCAL_MACHINE\SOFTWARE\Adobe\
Common\Sign
CED = "63F24BE4296992A7A192ADB88E"

HKEY_LOCAL_MACHINE\SOFTWARE\Adobe\
Common\Sign
CED = "0057EF4145454EE36EE579CC98"

HKEY_LOCAL_MACHINE\SOFTWARE\Adobe\
Common\Sign
CED = "C295AD868E8CF1470172CD98AD"

HKEY_LOCAL_MACHINE\SOFTWARE\Adobe\
Common\Sign
CED = "0651E97B83878CDD68DB63E271"

HKEY_LOCAL_MACHINE\SOFTWARE\Adobe\
Common\Sign
CED = "94A3BB94F81962F752C19EA7B3"

HKEY_LOCAL_MACHINE\SOFTWARE\Adobe\
Common\Sign
CED = "4E1931020A080D5CF66CF371C6"

HKEY_LOCAL_MACHINE\SOFTWARE\Adobe\
Common\Sign
CED = "72C59DB6DE2368F954CF6FF64D"

HKEY_LOCAL_MACHINE\SOFTWARE\Adobe\
Common\Sign
CED = "F3431B3458BAC396B0A3BC89DD"

HKEY_LOCAL_MACHINE\SOFTWARE\Adobe\
Common\Sign
CED = "D363FB55B9D9233610035CE97F"

HKEY_LOCAL_MACHINE\SOFTWARE\Adobe\
Common\Sign
CED = "F94DE57F878BF0400A79C69FB5"

HKEY_LOCAL_MACHINE\SOFTWARE\Adobe\
Common\Sign
CED = "0F263C157999E276D0421D283C"

HKEY_LOCAL_MACHINE\SOFTWARE\Adobe\
Common\Sign
CED = "491C32030B0F74C58F84DB69FF"

HKEY_LOCAL_MACHINE\SOFTWARE\Adobe\
Common\Sign
CED = "E571C99AE2276CFD483B044115"

HKEY_LOCAL_MACHINE\SOFTWARE\Adobe\
Common\Sign
CED = "2C3B132C50B2DB6DE75BE460F5"

HKEY_LOCAL_MACHINE\SOFTWARE\Adobe\
Common\Sign
CED = "CF67FF51B5D53F123C37085DEB"

HKEY_LOCAL_MACHINE\SOFTWARE\Adobe\
Common\Sign
CED = "24330B2468AAD365EF63FC481C"

HKEY_LOCAL_MACHINE\SOFTWARE\Adobe\
Common\Sign
CED = "95A0B68FF71A63F651C29DA8BD"

HKEY_LOCAL_MACHINE\SOFTWARE\Adobe\
Common\Sign
CED = "12253D167E9CE177D1411E273D"

HKEY_LOCAL_MACHINE\SOFTWARE\Adobe\
Common\Sign
CED = "D262F84AB2D03A0F392A353006"

HKEY_LOCAL_MACHINE\SOFTWARE\Adobe\
Common\Sign
CED = "A2B58DA6EE1378C983F04E1723"

HKEY_LOCAL_MACHINE\SOFTWARE\Adobe\
Common\Sign
CED = "1621390A7290F54B057EC184D1"

HKEY_LOCAL_MACHINE\SOFTWARE\Adobe\
Common\Sign
CED = "B98CA2B3DB3E471A342F303503"

HKEY_LOCAL_MACHINE\SOFTWARE\Adobe\
Common\Sign
CED = "172E045DA1E12B3E087BC481D5"

HKEY_LOCAL_MACHINE\SOFTWARE\Adobe\
Common\Sign
CED = "80D76EC7CF325BEE59CA95D067"

HKEY_LOCAL_MACHINE\SOFTWARE\Adobe\
Common\Sign
CED = "F94DE57F878BF0400A79C69FAB"

HKEY_LOCAL_MACHINE\SOFTWARE\Adobe\
Common\Sign
CED = "3A0D253E4644491832213E075C"

HKEY_LOCAL_MACHINE\SOFTWARE\Adobe\
Common\Sign
CED = "FA4AE0729AF80257F161FE461C"

HKEY_LOCAL_MACHINE\SOFTWARE\Adobe\
Common\Sign
CED = "0E59F1434B4FB485CF431C293D"

HKEY_LOCAL_MACHINE\SOFTWARE\Adobe\
Common\Sign
CED = "82D56CC5C9C9330640330C59ED"

HKEY_LOCAL_MACHINE\SOFTWARE\Adobe\
Common\Sign
CED = "E67ED46E96F41E331D16293C09"

HKEY_LOCAL_MACHINE\SOFTWARE\Adobe\
Common\Sign
CED = "3C0B233C40424B1E281B242137"

HKEY_LOCAL_MACHINE\SOFTWARE\Adobe\
Common\Sign
CED = "69FC55EE177B80D17CF7471E2A"

HKEY_LOCAL_MACHINE\SOFTWARE\Adobe\
Common\Sign
CED = "C194AABBC3C7CC9DB7ACB3B287"

HKEY_LOCAL_MACHINE\SOFTWARE\Adobe\
Common\Sign
CED = "F1451D365EBCC190BAA9B68FA5"

HKEY_LOCAL_MACHINE\SOFTWARE\Adobe\
Common\Sign
CED = "075EF44EB6D43E133D36095CE8"

HKEY_LOCAL_MACHINE\SOFTWARE\Adobe\
Common\Sign
CED = "88DF76CF3456BF92BCB788DD74"

HKEY_LOCAL_MACHINE\SOFTWARE\Adobe\
Common\Sign
CED = "58EF461F67ABD060EA58E77DC9"

HKEY_LOCAL_MACHINE\SOFTWARE\Adobe\
Common\Sign
CED = "273E142D51B1DA6ED84A1550E5"

HKEY_LOCAL_MACHINE\SOFTWARE\Adobe\
Common\Sign
CED = "62F54CE52E6C91A0AA99A6BF95"

HKEY_LOCAL_MACHINE\SOFTWARE\Adobe\
Common\Sign
CED = "132238090D0D76CB85FE400551"

HKEY_LOCAL_MACHINE\SOFTWARE\Adobe\
Common\Sign
CED = "4B1A300105050E232D26390C59"

HKEY_LOCAL_MACHINE\SOFTWARE\Adobe\
Common\Sign
CED = "7BCA63FC01010A5FE959E67ED4"

HKEY_LOCAL_MACHINE\SOFTWARE\Adobe\
Common\Sign
CED = "2B3A102165A5EE420C0758ED7A"

HKEY_LOCAL_MACHINE\SOFTWARE\Adobe\
Common\Sign
CED = "A9BC92A3EB2E57EA65DE60E573"

HKEY_LOCAL_MACHINE\SOFTWARE\Adobe\
Common\Sign
CED = "9FB68CA5E9286DFC57CC93D261"

HKEY_LOCAL_MACHINE\SOFTWARE\Adobe\
Common\Sign
CED = "B78EA4BDC1C1CA9FA99AA5A0B4"

HKEY_LOCAL_MACHINE\SOFTWARE\Adobe\
Common\Sign
CED = "92A5BD96FE030859F36FF074C1"

HKEY_LOCAL_MACHINE\SOFTWARE\Adobe\
Common\Sign
CED = "1520360F779BE070DA48172E04"

HKEY_LOCAL_MACHINE\SOFTWARE\Adobe\
Common\Sign
CED = "51E47DD63F43481933203F0652"

HKEY_LOCAL_MACHINE\SOFTWARE\Adobe\
Common\Sign
CED = "6BFA53EC11719AAF998AD56FC4"

HKEY_LOCAL_MACHINE\SOFTWARE\Adobe\
Common\Sign
CED = "192C0253BBDF25341E152A3B09"

HKEY_LOCAL_MACHINE\SOFTWARE\Adobe\
Common\Sign
CED = "75C096AFD73A431630233C095E"

HKEY_LOCAL_MACHINE\SOFTWARE\Adobe\
Common\Sign
CED = "DD69C192FA1F64F550C39CA9BF"

HKEY_LOCAL_MACHINE\SOFTWARE\Adobe\
Common\Sign
CED = "EC78CE60A4E62C3D170C531226"

HKEY_LOCAL_MACHINE\SOFTWARE\Adobe\
Common\Sign
CED = "91A4BA8BF3167FD27DF6481D2A"

HKEY_LOCAL_MACHINE\SOFTWARE\Adobe\
Common\Sign
CED = "A5B086DF2466AF82CC46192C3A"

HKEY_LOCAL_MACHINE\SOFTWARE\Adobe\
Common\Sign
CED = "8DD871C2CAC8320741320D58EC"

HKEY_LOCAL_MACHINE\SOFTWARE\Adobe\
Common\Sign
CED = "74C39BB4D839421731223D085D"

HKEY_LOCAL_MACHINE\SOFTWARE\Adobe\
Common\Sign
CED = "1A2D055EA6E42E034DC699ACBA"

HKEY_LOCAL_MACHINE\SOFTWARE\Adobe\
Common\Sign
CED = "4C1B330C7092FB4D077CC382D6"

HKEY_LOCAL_MACHINE\SOFTWARE\Adobe\
Common\Sign
CED = "D86CC293FB1E67FA55CE91D462"

HKEY_LOCAL_MACHINE\SOFTWARE\Adobe\
Common\Sign
CED = "A1B48ADB2062ABBE88FB430250"

HKEY_LOCAL_MACHINE\SOFTWARE\Adobe\
Common\Sign
CED = "88DF76CF3456BF92BCB788DD6B"

HKEY_LOCAL_MACHINE\SOFTWARE\Adobe\
Common\Sign
CED = "C493AB84888AF3450F045BEA7F"

HKEY_LOCAL_MACHINE\SOFTWARE\Adobe\
Common\Sign
CED = "9AAD85DE276B90A1AB98A7BE8B"

HKEY_LOCAL_MACHINE\SOFTWARE\Adobe\
Common\Sign
CED = "D262F84AB2D03A0F392A353005"

HKEY_LOCAL_MACHINE\SOFTWARE\Adobe\
Common\Sign
CED = "7FD66FC0C4C6CF61EB67F84C1A"

HKEY_LOCAL_MACHINE\SOFTWARE\Adobe\
Common\Sign
CED = "B580D668ACEE14252F243B0A5E"

HKEY_LOCAL_MACHINE\SOFTWARE\Adobe\
Common\Sign
CED = "F440162F57BBC091BBA8B78EA4"

HKEY_LOCAL_MACHINE\SOFTWARE\Adobe\
Common\Sign
CED = "E373CB65A9E9132620132C390D"

HKEY_LOCAL_MACHINE\SOFTWARE\Adobe\
Common\Sign
CED = "E373CB65A9E9132620132C390F"

HKEY_LOCAL_MACHINE\SOFTWARE\Adobe\
Common\Sign
CED = "99AC82D3385AA3B69083DC68FC"

HKEY_LOCAL_MACHINE\SOFTWARE\Adobe\
Common\Sign
CED = "132238090D0D76CB85FE400552"

HKEY_LOCAL_MACHINE\SOFTWARE\Adobe\
Common\Sign
CED = "F24218296DADD66AE45EE163F1"

HKEY_LOCAL_MACHINE\SOFTWARE\Adobe\
Common\Sign
CED = "CA9DB58EF61B60F15CD767FE54"

HKEY_LOCAL_MACHINE\SOFTWARE\Adobe\
Common\Sign
CED = "BB8AA0B1D53459E863D06EF74E"

HKEY_LOCAL_MACHINE\SOFTWARE\Adobe\
Common\Sign
CED = "DB6BC39CE0216AFF4A39065FEB"

HKEY_LOCAL_MACHINE\SOFTWARE\Adobe\
Common\Sign
CED = "67FE57E82D6D96ABA59EA1A4B1"

HKEY_LOCAL_MACHINE\SOFTWARE\Adobe\
Common\Sign
CED = "53E27BD43959A2B79182DD67F3"

HKEY_LOCAL_MACHINE\SOFTWARE\Adobe\
Common\Sign
CED = "9CAB83DC2161AABF89FA440156"

HKEY_LOCAL_MACHINE\SOFTWARE\Adobe\
Common\Sign
CED = "085FF7494D4DB68BC5BE81C492"

HKEY_LOCAL_MACHINE\SOFTWARE\Adobe\
Common\Sign
CED = "A5B086DF2466AF82CC46192C38"

HKEY_LOCAL_MACHINE\SOFTWARE\Adobe\
Common\Sign
CED = "67FE57E82D6D96ABA59EA1A4B2"

HKEY_LOCAL_MACHINE\SOFTWARE\Adobe\
Common\Sign
CED = "CB9AB08185858EA3ADA6B98CD8"

HKEY_LOCAL_MACHINE\SOFTWARE\Adobe\
Common\Sign
CED = "63F24BE4296992A7A192ADB88D"

HKEY_LOCAL_MACHINE\SOFTWARE\Adobe\
Common\Sign
CED = "CA9DB58EF61B60F15CD767FE55"

HKEY_LOCAL_MACHINE\SOFTWARE\Adobe\
Common\Sign
CED = "0154EA44484AB386C0B38CD96F"

HKEY_LOCAL_MACHINE\SOFTWARE\Adobe\
Common\Sign
CED = "A9BC92A3EB2E57EA65DE60E572"

HKEY_LOCAL_MACHINE\SOFTWARE\Adobe\
Common\Sign
CED = "BC8BA3BCC0C2CB9EA89BA4A1B6"

HKEY_LOCAL_MACHINE\SOFTWARE\Adobe\
Common\Sign
CED = "A4B38BA4E82952E762D16DF84F"

HKEY_LOCAL_MACHINE\SOFTWARE\Adobe\
Common\Sign
CED = "9DA8BE97FF020B5EE85AE57FCB"

HKEY_LOCAL_MACHINE\SOFTWARE\Adobe\
Common\Sign
CED = "5AED441D61A1EA7EC8BB84C196"

HKEY_LOCAL_MACHINE\SOFTWARE\Adobe\
Common\Sign
CED = "11243A0B7397FC4C067DC283D1"

HKEY_LOCAL_MACHINE\SOFTWARE\Adobe\
Common\Sign
CED = "9AAD85DE276B90A1AB98A7BE8A"

HKEY_LOCAL_MACHINE\SOFTWARE\Adobe\
Common\Sign
CED = "0C5BF34DB1D13B0E382B343106"

HKEY_LOCAL_MACHINE\SOFTWARE\Adobe\
Common\Sign
CED = "30075FF015759EB39D96A9BC88"

HKEY_LOCAL_MACHINE\SOFTWARE\Adobe\
Common\Sign
CED = "C99CB2838B8FF4440E055AEB79"

HKEY_LOCAL_MACHINE\SOFTWARE\Adobe\
Common\Sign
CED = "C194AABBC3C7CC9DB7ACB3B280"

HKEY_LOCAL_MACHINE\SOFTWARE\Adobe\
Common\Sign
CED = "23320859BDDD273A140F501521"

HKEY_LOCAL_MACHINE\SOFTWARE\Adobe\
Common\Sign
CED = "A8BF97A8EC2D56EB66DD61E473"

HKEY_LOCAL_MACHINE\SOFTWARE\Adobe\
Common\Sign
CED = "2E3911226AA8ED430D0659EC79"

HKEY_LOCAL_MACHINE\SOFTWARE\Adobe\
Common\Sign
CED = "0C5BF34DB1D13B0E382B343107"

HKEY_LOCAL_MACHINE\SOFTWARE\Adobe\
Common\Sign
CED = "90A7BF90F4157ED37EF5491C29"

HKEY_LOCAL_MACHINE\SOFTWARE\Adobe\
Common\Sign
CED = "6DF851E22B6F94A5AFA4BB8ADF"

HKEY_LOCAL_MACHINE\SOFTWARE\Adobe\
Common\Sign
CED = "095CF24CB0D2380943300F56E2"

HKEY_LOCAL_MACHINE\SOFTWARE\Adobe\
Common\Sign
CED = "5EE940117595FE52FC76C99CA9"

HKEY_LOCAL_MACHINE\SOFTWARE\Adobe\
Common\Sign
CED = "E97DD56F97FB0150FA68F74D1B"

HKEY_LOCAL_MACHINE\SOFTWARE\Adobe\
Common\Sign
CED = "2D380E276F93F8480271CE97A3"

HKEY_LOCAL_MACHINE\SOFTWARE\Adobe\
Common\Sign
CED = "68FF56EF14769FB29C97A8BD89"

HKEY_LOCAL_MACHINE\SOFTWARE\Adobe\
Common\Sign
CED = "64F34A1B63A7EC7CD64C1352E7"

HKEY_LOCAL_MACHINE\SOFTWARE\Adobe\
Common\Sign
CED = "7CCB62F3187A83D671E27CC99F"

HKEY_LOCAL_MACHINE\SOFTWARE\Adobe\
Common\Sign
CED = "ACBB93ACD0315AEF5AC996AFBB"

HKEY_LOCAL_MACHINE\SOFTWARE\Adobe\
Common\Sign
CED = "9DA8BE97FF020B5EE85AE57FD4"

HKEY_LOCAL_MACHINE\SOFTWARE\Adobe\
Common\Sign
CED = "C590A6BFC7CB31004A39065FF5"

HKEY_LOCAL_MACHINE\SOFTWARE\Adobe\
Common\Sign
CED = "57EE47187C9EE779D34F1055E1"

HKEY_LOCAL_MACHINE\SOFTWARE\Adobe\
Common\Sign
CED = "A1B48ADB2062ABBE88FB430257"

HKEY_LOCAL_MACHINE\SOFTWARE\Adobe\
Common\Sign
CED = "82D56CC5C9C9330640330C59EF"

HKEY_LOCAL_MACHINE\SOFTWARE\Adobe\
Common\Sign
CED = "7FD66FC0C4C6CF61EB67F84C18"

HKEY_LOCAL_MACHINE\SOFTWARE\Adobe\
Common\Sign
CED = "4611293A424045143E350A5BE9"

HKEY_LOCAL_MACHINE\SOFTWARE\Adobe\
Common\Sign
CED = "CF67FF51B5D53F123C37085DE9"

HKEY_LOCAL_MACHINE\SOFTWARE\Adobe\
Common\Sign
CED = "2F065CF51E7C81D07BE876CF65"

HKEY_LOCAL_MACHINE\SOFTWARE\Adobe\
Common\Sign
CED = "69FC55EE177B80D17CF7471E2B"

HKEY_LOCAL_MACHINE\SOFTWARE\Adobe\
Common\Sign
CED = "481F37080C0E77CA84FF5FE67D"

HKEY_LOCAL_MACHINE\SOFTWARE\Adobe\
Common\Sign
CED = "C194AABBC3C7CC9DB7ACB3B286"

HKEY_LOCAL_MACHINE\SOFTWARE\Adobe\
Common\Sign
CED = "50E77ED73C5EA7BA948FD095A3"

HKEY_LOCAL_MACHINE\SOFTWARE\Adobe\
Common\Sign
CED = "B78EA4BDC1C1CA9FA99AA5A0B6"

HKEY_LOCAL_MACHINE\SOFTWARE\Adobe\
Common\Sign
CED = "9FB68CA5E9286DFC57CC93D267"

HKEY_LOCAL_MACHINE\SOFTWARE\Adobe\
Common\Sign
CED = "EA7AD062AAE8122721122D380D"

HKEY_LOCAL_MACHINE\SOFTWARE\Adobe\
Common\Sign
CED = "24330B2468AAD365EF63FC481E"

HKEY_LOCAL_MACHINE\SOFTWARE\Adobe\
Common\Sign
CED = "C493AB84888AF3450F045BEA78"

HKEY_LOCAL_MACHINE\SOFTWARE\Adobe\
Common\Sign
CED = "5AED441D61A1EA7EC8BB84C197"

HKEY_LOCAL_MACHINE\SOFTWARE\Adobe\
Common\Sign
CED = "64F34A1B63A7EC7CD64C1352E6"

HKEY_LOCAL_MACHINE\SOFTWARE\Adobe\
Common\Sign
CED = "C590A6BFC7CB31004A39065FF4"

HKEY_LOCAL_MACHINE\SOFTWARE\Adobe\
Common\Sign
CED = "2E3911226AA8ED430D0659EC7B"

HKEY_LOCAL_MACHINE\SOFTWARE\Adobe\
Common\Sign
CED = "CA9DB58EF61B60F15CD767FE4B"

HKEY_LOCAL_MACHINE\SOFTWARE\Adobe\
Common\Sign
CED = "32055DF61F63A8B99380DF65F3"

HKEY_LOCAL_MACHINE\SOFTWARE\Adobe\
Common\Sign
CED = "D561F94BB3D73D0C463D024317"

HKEY_LOCAL_MACHINE\SOFTWARE\Adobe\
Common\Sign
CED = "FF57EF4145454EE36EE579CC98"

HKEY_LOCAL_MACHINE\SOFTWARE\Adobe\
Common\Sign
CED = "B184DA7498FA0051FB77C89DAA"

HKEY_LOCAL_MACHINE\SOFTWARE\Adobe\
Common\Sign
CED = "FB4BE37D81818ADF6AD965E077"

HKEY_LOCAL_MACHINE\SOFTWARE\Adobe\
Common\Sign
CED = "ADB88EA7EF127BCE79EA74F146"

HKEY_LOCAL_MACHINE\SOFTWARE\Adobe\
Common\Sign
CED = "192C0253BBDF25341E152A3B08"

HKEY_LOCAL_MACHINE\SOFTWARE\Adobe\
Common\Sign
CED = "360159EA13779CADA79CA3A2B0"

HKEY_LOCAL_MACHINE\SOFTWARE\Adobe\
Common\Sign
CED = "0D58EE4044464FE26DE678CD64"

HKEY_LOCAL_MACHINE\SOFTWARE\Adobe\
Common\Sign
CED = "7ACD64FD06040958F260FF4512"

HKEY_LOCAL_MACHINE\SOFTWARE\Adobe\
Common\Sign
CED = "50E77ED73C5EA7BA948FD095A1"

HKEY_LOCAL_MACHINE\SOFTWARE\Adobe\
Common\Sign
CED = "14233B14789AE375DF53EC78CD"

HKEY_LOCAL_MACHINE\SOFTWARE\Adobe\
Common\Sign
CED = "CE66FC56BEDC263B150E511422"

HKEY_LOCAL_MACHINE\SOFTWARE\Adobe\
Common\Sign
CED = "EC78CE60A4E62C3D170C531227"

HKEY_LOCAL_MACHINE\SOFTWARE\Adobe\
Common\Sign
CED = "8ADD74CD3654B988C2B18ED76E"

HKEY_LOCAL_MACHINE\SOFTWARE\Adobe\
Common\Sign
CED = "B88FA7B8DC3D461B352E313400"

HKEY_LOCAL_MACHINE\SOFTWARE\Adobe\
Common\Sign
CED = "7DC861F21B7F84D570E37BCA9F"

HKEY_LOCAL_MACHINE\SOFTWARE\Adobe\
Common\Sign
CED = "B184DA7498FA0051FB77C89DAB"

HKEY_LOCAL_MACHINE\SOFTWARE\Adobe\
Common\Sign
CED = "72C59DB6DE2368F954CF6FF643"

HKEY_LOCAL_MACHINE\SOFTWARE\Adobe\
Common\Sign
CED = "2631095AA2E02A3F097AC580D6"

HKEY_LOCAL_MACHINE\SOFTWARE\Adobe\
Common\Sign
CED = "2631095AA2E02A3F097AC580D5"

HKEY_LOCAL_MACHINE\SOFTWARE\Adobe\
Common\Sign
CED = "E87CD26C90F2182923102F3602"

HKEY_LOCAL_MACHINE\SOFTWARE\Adobe\
Common\Sign
CED = "4510263F474BB081CB47182D3A"

HKEY_LOCAL_MACHINE\SOFTWARE\Adobe\
Common\Sign
CED = "22350D266EACD167E151EE76CC"

HKEY_LOCAL_MACHINE\SOFTWARE\Adobe\
Common\Sign
CED = "390C22335BBFC495BFB48BDA6F"

HKEY_LOCAL_MACHINE\SOFTWARE\Adobe\
Common\Sign
CED = "AEB991A2EA2F54E560D36BFA48"

HKEY_LOCAL_MACHINE\SOFTWARE\Adobe\
Common\Sign
CED = "1F360C2569A9D266E052ED77CD"

HKEY_LOCAL_MACHINE\SOFTWARE\Adobe\
Common\Sign
CED = "60F74EE72C6E97AAA49FA0A5B1"

HKEY_LOCAL_MACHINE\SOFTWARE\Adobe\
Common\Sign
CED = "BD88DE7094F61C2D271C232236"

HKEY_LOCAL_MACHINE\SOFTWARE\Adobe\
Common\Sign
CED = "6BFA53EC11719AAF998AD56FC5"

HKEY_LOCAL_MACHINE\SOFTWARE\Adobe\
Common\Sign
CED = "65F0491A62A0E57BD54D1253E1"

HKEY_LOCAL_MACHINE\SOFTWARE\Adobe\
Common\Sign
CED = "6FC69CB5D9385DEC67DC62E371"

HKEY_LOCAL_MACHINE\SOFTWARE\Adobe\
Common\Sign
CED = "1B2A0051B5D53F123C37085DEB"

HKEY_LOCAL_MACHINE\SOFTWARE\Adobe\
Common\Sign
CED = "9AAD85DE276B90A1AB98A7BE94"

HKEY_LOCAL_MACHINE\SOFTWARE\Adobe\
Common\Sign
CED = "6FC69CB5D9385DEC67DC62E370"

HKEY_LOCAL_MACHINE\SOFTWARE\Adobe\
Common\Sign
CED = "AABD95AED63B40113B28370E24"

HKEY_LOCAL_MACHINE\SOFTWARE\Adobe\
Common\Sign
CED = "6BFA53EC11719AAF998AD56FFB"

HKEY_LOCAL_MACHINE\SOFTWARE\Adobe\
Common\Sign
CED = "CB9AB08185858EA3ADA6B98CDA"

HKEY_LOCAL_MACHINE\SOFTWARE\Adobe\
Common\Sign
CED = "D66EC49DE12065F45FD46AFB48"

HKEY_LOCAL_MACHINE\SOFTWARE\Adobe\
Common\Sign
CED = "21340A5BA3E72D3C160D521321"

HKEY_LOCAL_MACHINE\SOFTWARE\Adobe\
Common\Sign
CED = "54E37ACB3052BB8EB8ABB4B185"

HKEY_LOCAL_MACHINE\SOFTWARE\Adobe\
Common\Sign
CED = "62F54CE52E6C91A0AA99A6BF94"

HKEY_LOCAL_MACHINE\SOFTWARE\Adobe\
Common\Sign
CED = "1D283E177F8388D974EF4F162C"

HKEY_LOCAL_MACHINE\SOFTWARE\Adobe\
Common\Sign
CED = "2F065CF51E7C81D07BE876CF64"

HKEY_LOCAL_MACHINE\SOFTWARE\Adobe\
Common\Sign
CED = "F1451D365EBCC190BAA9B68FA4"

HKEY_LOCAL_MACHINE\SOFTWARE\Adobe\
Common\Sign
CED = "BC8BA3BCC0C2CB9EA89BA4A1B5"

HKEY_LOCAL_MACHINE\SOFTWARE\Adobe\
Common\Sign
CED = "A7BE94ADD13055E46FE47ACB98"

HKEY_LOCAL_MACHINE\SOFTWARE\Adobe\
Common\Sign
CED = "ED79D163ABEF15242E253A0B59"

HKEY_LOCAL_MACHINE\SOFTWARE\Adobe\
Common\Sign
CED = "8FA6BC95F9187DCC86FD410452"

HKEY_LOCAL_MACHINE\SOFTWARE\Adobe\
Common\Sign
CED = "79CC65FE070B70C18BF8461F2B"

HKEY_LOCAL_MACHINE\SOFTWARE\Adobe\
Common\Sign
CED = "FF57EF4145454EE36EE579CC99"

HKEY_LOCAL_MACHINE\SOFTWARE\Adobe\
Common\Sign
CED = "D064FA54B8DA20311B0857EE44"

HKEY_LOCAL_MACHINE\SOFTWARE\Adobe\
Common\Sign
CED = "44132B04080A73C680F34B1A2E"

HKEY_LOCAL_MACHINE\SOFTWARE\Adobe\
Common\Sign
CED = "CD98AE878FF3192822112E370C"

HKEY_LOCAL_MACHINE\SOFTWARE\Adobe\
Common\Sign
CED = "51E47DD63F43481933203F065C"

HKEY_LOCAL_MACHINE\SOFTWARE\Adobe\
Common\Sign
CED = "59EC451E66A4E97FC9BA85C094"

HKEY_LOCAL_MACHINE\SOFTWARE\Adobe\
Common\Sign
CED = "10273F107496FF51FB77C89DAA"

HKEY_LOCAL_MACHINE\SOFTWARE\Adobe\
Common\Sign
CED = "44132B04080A73C680F34B1A28"

HKEY_LOCAL_MACHINE\SOFTWARE\Adobe\
Common\Sign
CED = "83D26BC4C8CA30014B38075EEB"

HKEY_LOCAL_MACHINE\SOFTWARE\Adobe\
Common\Sign
CED = "76C199AAD2375CED58CB94D160"

Dropping Routine

This Trojan drops the following files:

  • %Windows%\jtCoyHRblJID0.DLL
  • %Windows%\DelSelf.bat
  • %System%\wbem\fontsys.sys
  • %System%\dad32533.dll
  • %System%\qq365up.dll

(Note: %Windows% is the Windows folder, which is usually C:\Windows.. %System% is the Windows system folder, which is usually C:\Windows\System32.)

Other Details

This Trojan deletes itself after execution.

This report is generated via an automated analysis system.

  SOLUTION

Minimum Scan Engine: 9.300

Step 1

Before doing any scans, Windows XP, Windows Vista, and Windows 7 users must disable System Restore to allow full scanning of their computers.

Step 2

Restart in Safe Mode

[ Learn More ]

Step 3

Delete this registry key

[ Learn More ]

Important: Editing the Windows Registry incorrectly can lead to irreversible system malfunction. Please do this step only if you know how or you can ask assistance from your system administrator. Else, check this Microsoft article first before modifying your computer's registry.

  • In HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\XFQDNZCFR
    • Parameters
  • In HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\SvcHost
    • EYYFZFTGD
  • In HKEY_LOCAL_MACHINE\SOFTWARE\Adobe\Common
    • Sign

Step 4

Delete this registry value

[ Learn More ]

Important: Editing the Windows Registry incorrectly can lead to irreversible system malfunction. Please do this step only if you know how or you can ask assistance from your system administrator. Else, check this Microsoft article first before modifying your computer's registry.

  • In HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\SvcHost
    • EYYFZFTGD = "XFQDNZCFR"
  • In HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\SvcHost\EYYFZFTGD
    • CoInitializeSecurityParam = "1"
  • In HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Services\XFQDNZCFR
    • Description = "ΪÓû§ÌṩʹÓÃÖ÷Ìâ¹ÜÀíµÄ¾­Ñé¡£"
  • In HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Services\XFQDNZCFR\Parameters
    • ServiceDll = "%Windows%\jtCoyHRblJID0.DLL"
  • In HKEY_LOCAL_MACHINE\SOFTWARE\Adobe\Common\Sign
    • CED = "FE56EC464E4CB180CAB986DF75"
  • In HKEY_LOCAL_MACHINE\SOFTWARE\Adobe\Common\Sign
    • CED = "68FF56EF14769FB29C97A8BD8B"
  • In HKEY_LOCAL_MACHINE\SOFTWARE\Adobe\Common\Sign
    • CED = "65F0491A62A0E57BD54D1253E7"
  • In HKEY_LOCAL_MACHINE\SOFTWARE\Adobe\Common\Sign
    • CED = "11243A0B7397FC4C067DC283D0"
  • In HKEY_LOCAL_MACHINE\SOFTWARE\Adobe\Common\Sign
    • CED = "471E340D7191FA4EF86AF54FE5"
  • In HKEY_LOCAL_MACHINE\SOFTWARE\Adobe\Common\Sign
    • CED = "E272C899FD1C61F05BC897AEBA"
  • In HKEY_LOCAL_MACHINE\SOFTWARE\Adobe\Common\Sign
    • CED = "2530065FA7EB11202A19263F14"
  • In HKEY_LOCAL_MACHINE\SOFTWARE\Adobe\Common\Sign
    • CED = "B285DD779FE3293812015EE77E"
  • In HKEY_LOCAL_MACHINE\SOFTWARE\Adobe\Common\Sign
    • CED = "7EC960F11A789DACA69DA2A3B7"
  • In HKEY_LOCAL_MACHINE\SOFTWARE\Adobe\Common\Sign
    • CED = "FD49E1739BFF0554FE74CB9AAF"
  • In HKEY_LOCAL_MACHINE\SOFTWARE\Adobe\Common\Sign
    • CED = "6EF950E12A68ADBC968DD293A1"
  • In HKEY_LOCAL_MACHINE\SOFTWARE\Adobe\Common\Sign
    • CED = "F64EE47E868489D873E07EC793"
  • In HKEY_LOCAL_MACHINE\SOFTWARE\Adobe\Common\Sign
    • CED = "30075FF015759EB39D96A9BC89"
  • In HKEY_LOCAL_MACHINE\SOFTWARE\Adobe\Common\Sign
    • CED = "F84CE27C80828BDE69DA64E170"
  • In HKEY_LOCAL_MACHINE\SOFTWARE\Adobe\Common\Sign
    • CED = "3C0B233C40424B1E281B242135"
  • In HKEY_LOCAL_MACHINE\SOFTWARE\Adobe\Common\Sign
    • CED = "55E079CA3357BC8DC7BC83C297"
  • In HKEY_LOCAL_MACHINE\SOFTWARE\Adobe\Common\Sign
    • CED = "D064FA54B8DA20311B0857EE45"
  • In HKEY_LOCAL_MACHINE\SOFTWARE\Adobe\Common\Sign
    • CED = "40172F0004060F222C27380D59"
  • In HKEY_LOCAL_MACHINE\SOFTWARE\Adobe\Common\Sign
    • CED = "BF96AC858989F2460073CC99AE"
  • In HKEY_LOCAL_MACHINE\SOFTWARE\Adobe\Common\Sign
    • CED = "74C39BB4D839421731223D085E"
  • In HKEY_LOCAL_MACHINE\SOFTWARE\Adobe\Common\Sign
    • CED = "5CEB42137B9FE474DE54EB79CD"
  • In HKEY_LOCAL_MACHINE\SOFTWARE\Adobe\Common\Sign
    • CED = "21340A5BA3E72D3C160D521320"
  • In HKEY_LOCAL_MACHINE\SOFTWARE\Adobe\Common\Sign
    • CED = "0154EA44484AB386C0B38CD968"
  • In HKEY_LOCAL_MACHINE\SOFTWARE\Adobe\Common\Sign
    • CED = "80D76EC7CF325BEE59CA95D065"
  • In HKEY_LOCAL_MACHINE\SOFTWARE\Adobe\Common\Sign
    • CED = "A2B58DA6EE1378C983F04E172C"
  • In HKEY_LOCAL_MACHINE\SOFTWARE\Adobe\Common\Sign
    • CED = "9CAB83DC2161AABF89FA440157"
  • In HKEY_LOCAL_MACHINE\SOFTWARE\Adobe\Common\Sign
    • CED = "3B0A203155B5DE72DC56E97BCF"
  • In HKEY_LOCAL_MACHINE\SOFTWARE\Adobe\Common\Sign
    • CED = "89DC75CE375BA0B19B88D76DFA"
  • In HKEY_LOCAL_MACHINE\SOFTWARE\Adobe\Common\Sign
    • CED = "8CDB72C3CBCF35044EC59AABB9"
  • In HKEY_LOCAL_MACHINE\SOFTWARE\Adobe\Common\Sign
    • CED = "A0B78FA0E4256EC38D86D96BFF"
  • In HKEY_LOCAL_MACHINE\SOFTWARE\Adobe\Common\Sign
    • CED = "5FF64FE02565AE83CD451A2B38"
  • In HKEY_LOCAL_MACHINE\SOFTWARE\Adobe\Common\Sign
    • CED = "99AC82D3385AA3B69083DC68FE"
  • In HKEY_LOCAL_MACHINE\SOFTWARE\Adobe\Common\Sign
    • CED = "DC68FE50B4D63C0D473C034216"
  • In HKEY_LOCAL_MACHINE\SOFTWARE\Adobe\Common\Sign
    • CED = "F440162F57BBC091BBA8B78EDB"
  • In HKEY_LOCAL_MACHINE\SOFTWARE\Adobe\Common\Sign
    • CED = "E272C899FD1C61F05BC897AE84"
  • In HKEY_LOCAL_MACHINE\SOFTWARE\Adobe\Common\Sign
    • CED = "3E0921325AB8DD73DD55EA7ACE"
  • In HKEY_LOCAL_MACHINE\SOFTWARE\Adobe\Common\Sign
    • CED = "D66EC49DE12065F45FD46AFB49"
  • In HKEY_LOCAL_MACHINE\SOFTWARE\Adobe\Common\Sign
    • CED = "B087DF7195F51F321C17283D0B"
  • In HKEY_LOCAL_MACHINE\SOFTWARE\Adobe\Common\Sign
    • CED = "D262F84AB2D03A0F392A353004"
  • In HKEY_LOCAL_MACHINE\SOFTWARE\Adobe\Common\Sign
    • CED = "70C79FB0D4355EF35ED569FC4B"
  • In HKEY_LOCAL_MACHINE\SOFTWARE\Adobe\Common\Sign
    • CED = "D165FD57BFC3C899B3A0BF86D2"
  • In HKEY_LOCAL_MACHINE\SOFTWARE\Adobe\Common\Sign
    • CED = "85D069FA03070C5DF76BF470C5"
  • In HKEY_LOCAL_MACHINE\SOFTWARE\Adobe\Common\Sign
    • CED = "0B5AF0424A484D1C362D323301"
  • In HKEY_LOCAL_MACHINE\SOFTWARE\Adobe\Common\Sign
    • CED = "5BEA431C60A2EB7DD74B1451E5"
  • In HKEY_LOCAL_MACHINE\SOFTWARE\Adobe\Common\Sign
    • CED = "172E045DA1E12B3E087BC481D6"
  • In HKEY_LOCAL_MACHINE\SOFTWARE\Adobe\Common\Sign
    • CED = "53E27BD43959A2B79182DD67FD"
  • In HKEY_LOCAL_MACHINE\SOFTWARE\Adobe\Common\Sign
    • CED = "330258E9127095A4AEA5BA8BDF"
  • In HKEY_LOCAL_MACHINE\SOFTWARE\Adobe\Common\Sign
    • CED = "380F27385CBEC79AB4AFB0B582"
  • In HKEY_LOCAL_MACHINE\SOFTWARE\Adobe\Common\Sign
    • CED = "1520360F779BE070DA48172E3A"
  • In HKEY_LOCAL_MACHINE\SOFTWARE\Adobe\Common\Sign
    • CED = "6EF950E12A68ADBC968DD293A0"
  • In HKEY_LOCAL_MACHINE\SOFTWARE\Adobe\Common\Sign
    • CED = "23320859BDDD273A140F501523"
  • In HKEY_LOCAL_MACHINE\SOFTWARE\Adobe\Common\Sign
    • CED = "C89FB7888C8EF7490370CF96A2"
  • In HKEY_LOCAL_MACHINE\SOFTWARE\Adobe\Common\Sign
    • CED = "0255ED474FB3D868E250EF75C2"
  • In HKEY_LOCAL_MACHINE\SOFTWARE\Adobe\Common\Sign
    • CED = "380F27385CBEC79AB4AFB0B583"
  • In HKEY_LOCAL_MACHINE\SOFTWARE\Adobe\Common\Sign
    • CED = "F1451D365EBCC190BAA9B68FDB"
  • In HKEY_LOCAL_MACHINE\SOFTWARE\Adobe\Common\Sign
    • CED = "86D168F902000554FE74CB9AAF"
  • In HKEY_LOCAL_MACHINE\SOFTWARE\Adobe\Common\Sign
    • CED = "E77FD769ADED172A241F202533"
  • In HKEY_LOCAL_MACHINE\SOFTWARE\Adobe\Common\Sign
    • CED = "EB7BD36D91F11B2E180B541125"
  • In HKEY_LOCAL_MACHINE\SOFTWARE\Adobe\Common\Sign
    • CED = "78CF66FF04060F222C27380D5A"
  • In HKEY_LOCAL_MACHINE\SOFTWARE\Adobe\Common\Sign
    • CED = "D460F6484C4EB78AC4BF80C593"
  • In HKEY_LOCAL_MACHINE\SOFTWARE\Adobe\Common\Sign
    • CED = "7ACD64FD06040958F260FF4511"
  • In HKEY_LOCAL_MACHINE\SOFTWARE\Adobe\Common\Sign
    • CED = "34035BF4197982D772E17DC89D"
  • In HKEY_LOCAL_MACHINE\SOFTWARE\Adobe\Common\Sign
    • CED = "4510263F474BB081CB47182D3B"
  • In HKEY_LOCAL_MACHINE\SOFTWARE\Adobe\Common\Sign
    • CED = "C79EB48DF11075C48E85DA6AFE"
  • In HKEY_LOCAL_MACHINE\SOFTWARE\Adobe\Common\Sign
    • CED = "52E57CD53E5CA1B09A89D66EFB"
  • In HKEY_LOCAL_MACHINE\SOFTWARE\Adobe\Common\Sign
    • CED = "3E0921325AB8DD73DD55EA7AC8"
  • In HKEY_LOCAL_MACHINE\SOFTWARE\Adobe\Common\Sign
    • CED = "E67ED46E96F41E331D16293C08"
  • In HKEY_LOCAL_MACHINE\SOFTWARE\Adobe\Common\Sign
    • CED = "A0B78FA0E4256EC38D86D96BF8"
  • In HKEY_LOCAL_MACHINE\SOFTWARE\Adobe\Common\Sign
    • CED = "84D36AFB00020B5EE85AE57FD5"
  • In HKEY_LOCAL_MACHINE\SOFTWARE\Adobe\Common\Sign
    • CED = "67FE57E82D6D96ABA59EA1A4B0"
  • In HKEY_LOCAL_MACHINE\SOFTWARE\Adobe\Common\Sign
    • CED = "E97DD56F97FB0150FA68F74D1A"
  • In HKEY_LOCAL_MACHINE\SOFTWARE\Adobe\Common\Sign
    • CED = "0E59F1434B4FB485CF431C293F"
  • In HKEY_LOCAL_MACHINE\SOFTWARE\Adobe\Common\Sign
    • CED = "A8BF97A8EC2D56EB66DD61E472"
  • In HKEY_LOCAL_MACHINE\SOFTWARE\Adobe\Common\Sign
    • CED = "96A1B98AF2177CCD78EB73F241"
  • In HKEY_LOCAL_MACHINE\SOFTWARE\Adobe\Common\Sign
    • CED = "11243A0B7397FC4C067DC283D7"
  • In HKEY_LOCAL_MACHINE\SOFTWARE\Adobe\Common\Sign
    • CED = "12253D167E9CE177D1411E273C"
  • In HKEY_LOCAL_MACHINE\SOFTWARE\Adobe\Common\Sign
    • CED = "D96DC59EE62B50E16CE777CE65"
  • In HKEY_LOCAL_MACHINE\SOFTWARE\Adobe\Common\Sign
    • CED = "283F17286CAED769E35FE064F0"
  • In HKEY_LOCAL_MACHINE\SOFTWARE\Adobe\Common\Sign
    • CED = "B88FA7B8DC3D461B352E313402"
  • In HKEY_LOCAL_MACHINE\SOFTWARE\Adobe\Common\Sign
    • CED = "F74FE7799DFD075AF46EF173C7"
  • In HKEY_LOCAL_MACHINE\SOFTWARE\Adobe\Common\Sign
    • CED = "CE66FC56BEDC263B150E511421"
  • In HKEY_LOCAL_MACHINE\SOFTWARE\Adobe\Common\Sign
    • CED = "59EC451E66A4E97FC9BA85C096"
  • In HKEY_LOCAL_MACHINE\SOFTWARE\Adobe\Common\Sign
    • CED = "EB7BD36D91F11B2E180B541127"
  • In HKEY_LOCAL_MACHINE\SOFTWARE\Adobe\Common\Sign
    • CED = "90A7BF90F4157ED37EF5491C28"
  • In HKEY_LOCAL_MACHINE\SOFTWARE\Adobe\Common\Sign
    • CED = "50E77ED73C5EA7BA948FD095A2"
  • In HKEY_LOCAL_MACHINE\SOFTWARE\Adobe\Common\Sign
    • CED = "7ACD64FD06040958F260FF4513"
  • In HKEY_LOCAL_MACHINE\SOFTWARE\Adobe\Common\Sign
    • CED = "C295AD868E8CF1470172CD98AC"
  • In HKEY_LOCAL_MACHINE\SOFTWARE\Adobe\Common\Sign
    • CED = "7BCA63FC01010A5FE959E67ECB"
  • In HKEY_LOCAL_MACHINE\SOFTWARE\Adobe\Common\Sign
    • CED = "4D182E070F7398A9A390AFB68C"
  • In HKEY_LOCAL_MACHINE\SOFTWARE\Adobe\Common\Sign
    • CED = "FD49E1739BFF0554FE74CB9AAE"
  • In HKEY_LOCAL_MACHINE\SOFTWARE\Adobe\Common\Sign
    • CED = "40172F0004060F222C27380D5A"
  • In HKEY_LOCAL_MACHINE\SOFTWARE\Adobe\Common\Sign
    • CED = "F541192A52B0D56BE55DE262F0"
  • In HKEY_LOCAL_MACHINE\SOFTWARE\Adobe\Common\Sign
    • CED = "CE66FC56BEDC263B150E511420"
  • In HKEY_LOCAL_MACHINE\SOFTWARE\Adobe\Common\Sign
    • CED = "1D283E177F8388D974EF4F1623"
  • In HKEY_LOCAL_MACHINE\SOFTWARE\Adobe\Common\Sign
    • CED = "55E079CA3357BC8DC7BC83C290"
  • In HKEY_LOCAL_MACHINE\SOFTWARE\Adobe\Common\Sign
    • CED = "AEB991A2EA2F54E560D36BFA4F"
  • In HKEY_LOCAL_MACHINE\SOFTWARE\Adobe\Common\Sign
    • CED = "FE56EC464E4CB180CAB986DF76"
  • In HKEY_LOCAL_MACHINE\SOFTWARE\Adobe\Common\Sign
    • CED = "4510263F474BB081CB47182D39"
  • In HKEY_LOCAL_MACHINE\SOFTWARE\Adobe\Common\Sign
    • CED = "60F74EE72C6E97AAA49FA0A5B2"
  • In HKEY_LOCAL_MACHINE\SOFTWARE\Adobe\Common\Sign
    • CED = "CD98AE878FF3192822112E370D"
  • In HKEY_LOCAL_MACHINE\SOFTWARE\Adobe\Common\Sign
    • CED = "E77FD769ADED172A241F202531"
  • In HKEY_LOCAL_MACHINE\SOFTWARE\Adobe\Common\Sign
    • CED = "76C199AAD2375CED58CB94D167"
  • In HKEY_LOCAL_MACHINE\SOFTWARE\Adobe\Common\Sign
    • CED = "2D380E276F93F8480271CE97AD"
  • In HKEY_LOCAL_MACHINE\SOFTWARE\Adobe\Common\Sign
    • CED = "EE461C3559B9C297B1A2BD88DC"
  • In HKEY_LOCAL_MACHINE\SOFTWARE\Adobe\Common\Sign
    • CED = "471E340D7191FA4EF86AF54FE4"
  • In HKEY_LOCAL_MACHINE\SOFTWARE\Adobe\Common\Sign
    • CED = "8DD871C2CAC8320741320D58EE"
  • In HKEY_LOCAL_MACHINE\SOFTWARE\Adobe\Common\Sign
    • CED = "BE89A1B2DA3F44153F340B5AEE"
  • In HKEY_LOCAL_MACHINE\SOFTWARE\Adobe\Common\Sign
    • CED = "42152D060E0C71C08AF9450055"
  • In HKEY_LOCAL_MACHINE\SOFTWARE\Adobe\Common\Sign
    • CED = "D66EC49DE12065F45FD46AFB4A"
  • In HKEY_LOCAL_MACHINE\SOFTWARE\Adobe\Common\Sign
    • CED = "EA7AD062AAE8122721122D380C"
  • In HKEY_LOCAL_MACHINE\SOFTWARE\Adobe\Common\Sign
    • CED = "4E1931020A080D5CF66CF371C7"
  • In HKEY_LOCAL_MACHINE\SOFTWARE\Adobe\Common\Sign
    • CED = "CC9BB38CF0117ACF7AE975F046"
  • In HKEY_LOCAL_MACHINE\SOFTWARE\Adobe\Common\Sign
    • CED = "57EE47187C9EE779D34F1055E3"
  • In HKEY_LOCAL_MACHINE\SOFTWARE\Adobe\Common\Sign
    • CED = "E175CD67AFD3390842310E57E3"
  • In HKEY_LOCAL_MACHINE\SOFTWARE\Adobe\Common\Sign
    • CED = "1F360C2569A9D266E052ED77CC"
  • In HKEY_LOCAL_MACHINE\SOFTWARE\Adobe\Common\Sign
    • CED = "14233B14789AE375DF53EC78CE"
  • In HKEY_LOCAL_MACHINE\SOFTWARE\Adobe\Common\Sign
    • CED = "5BEA431C60A2EB7DD74B1451E6"
  • In HKEY_LOCAL_MACHINE\SOFTWARE\Adobe\Common\Sign
    • CED = "2A3D152E56B4D96FD949162F05"
  • In HKEY_LOCAL_MACHINE\SOFTWARE\Adobe\Common\Sign
    • CED = "E571C99AE2276CFD483B044116"
  • In HKEY_LOCAL_MACHINE\SOFTWARE\Adobe\Common\Sign
    • CED = "A9BC92A3EB2E57EA65DE60E57C"
  • In HKEY_LOCAL_MACHINE\SOFTWARE\Adobe\Common\Sign
    • CED = "F440162F57BBC091BBA8B78EDA"
  • In HKEY_LOCAL_MACHINE\SOFTWARE\Adobe\Common\Sign
    • CED = "DF77CF61A5E52F024CC798ADBA"
  • In HKEY_LOCAL_MACHINE\SOFTWARE\Adobe\Common\Sign
    • CED = "70C79FB0D4355EF35ED569FC49"
  • In HKEY_LOCAL_MACHINE\SOFTWARE\Adobe\Common\Sign
    • CED = "D561F94BB3D73D0C463D024310"
  • In HKEY_LOCAL_MACHINE\SOFTWARE\Adobe\Common\Sign
    • CED = "93A2B8898D8DF64A047FC085D3"
  • In HKEY_LOCAL_MACHINE\SOFTWARE\Adobe\Common\Sign
    • CED = "FE56EC464E4CB180CAB986DF74"
  • In HKEY_LOCAL_MACHINE\SOFTWARE\Adobe\Common\Sign
    • CED = "4C1B330C7092FB4D077CC382D7"
  • In HKEY_LOCAL_MACHINE\SOFTWARE\Adobe\Common\Sign
    • CED = "FF57EF4145454EE36EE579CC9A"
  • In HKEY_LOCAL_MACHINE\SOFTWARE\Adobe\Common\Sign
    • CED = "0550E6789CFE0455FF73CC99AD"
  • In HKEY_LOCAL_MACHINE\SOFTWARE\Adobe\Common\Sign
    • CED = "0550E6789CFE0455FF73CC99AE"
  • In HKEY_LOCAL_MACHINE\SOFTWARE\Adobe\Common\Sign
    • CED = "9BAA80D13A58BD8CC6BD82C391"
  • In HKEY_LOCAL_MACHINE\SOFTWARE\Adobe\Common\Sign
    • CED = "E470C69FE72A53E661D26CF94E"
  • In HKEY_LOCAL_MACHINE\SOFTWARE\Adobe\Common\Sign
    • CED = "2E3911226AA8ED430D0659EC7A"
  • In HKEY_LOCAL_MACHINE\SOFTWARE\Adobe\Common\Sign
    • CED = "FD49E1739BFF0554FE74CB9AA8"
  • In HKEY_LOCAL_MACHINE\SOFTWARE\Adobe\Common\Sign
    • CED = "FB4BE37D81818ADF6AD965E075"
  • In HKEY_LOCAL_MACHINE\SOFTWARE\Adobe\Common\Sign
    • CED = "31045AEB10729BAE988BD491A6"
  • In HKEY_LOCAL_MACHINE\SOFTWARE\Adobe\Common\Sign
    • CED = "8ED970C1C5C5CE62EC66F94B19"
  • In HKEY_LOCAL_MACHINE\SOFTWARE\Adobe\Common\Sign
    • CED = "5EE940117595FE52FC76C99CA8"
  • In HKEY_LOCAL_MACHINE\SOFTWARE\Adobe\Common\Sign
    • CED = "99AC82D3385AA3B69083DC68FD"
  • In HKEY_LOCAL_MACHINE\SOFTWARE\Adobe\Common\Sign
    • CED = "D76FC798FC1D66FB56CD92D362"
  • In HKEY_LOCAL_MACHINE\SOFTWARE\Adobe\Common\Sign
    • CED = "DD69C192FA1F64F550C39CA9BD"
  • In HKEY_LOCAL_MACHINE\SOFTWARE\Adobe\Common\Sign
    • CED = "57EE47187C9EE779D34F1055E2"
  • In HKEY_LOCAL_MACHINE\SOFTWARE\Adobe\Common\Sign
    • CED = "97AE84DD2664A9B89281DE66FC"
  • In HKEY_LOCAL_MACHINE\SOFTWARE\Adobe\Common\Sign
    • CED = "31045AEB10729BAE988BD491A5"
  • In HKEY_LOCAL_MACHINE\SOFTWARE\Adobe\Common\Sign
    • CED = "DB6BC39CE0216AFF4A39065FF4"
  • In HKEY_LOCAL_MACHINE\SOFTWARE\Adobe\Common\Sign
    • CED = "7DC861F21B7F84D570E37BCA9E"
  • In HKEY_LOCAL_MACHINE\SOFTWARE\Adobe\Common\Sign
    • CED = "3E0921325AB8DD73DD55EA7ACF"
  • In HKEY_LOCAL_MACHINE\SOFTWARE\Adobe\Common\Sign
    • CED = "ABBA90A1E52469F853C09FA6BC"
  • In HKEY_LOCAL_MACHINE\SOFTWARE\Adobe\Common\Sign
    • CED = "42152D060E0C71C08AF9450054"
  • In HKEY_LOCAL_MACHINE\SOFTWARE\Adobe\Common\Sign
    • CED = "0352E87A828085D47FF44A1B28"
  • In HKEY_LOCAL_MACHINE\SOFTWARE\Adobe\Common\Sign
    • CED = "6EF950E12A68ADBC968DD293A7"
  • In HKEY_LOCAL_MACHINE\SOFTWARE\Adobe\Common\Sign
    • CED = "ADB88EA7EF127BCE79EA74F147"
  • In HKEY_LOCAL_MACHINE\SOFTWARE\Adobe\Common\Sign
    • CED = "95A0B68FF71A63F651C29DA8BE"
  • In HKEY_LOCAL_MACHINE\SOFTWARE\Adobe\Common\Sign
    • CED = "34035BF4197982D772E17DC89C"
  • In HKEY_LOCAL_MACHINE\SOFTWARE\Adobe\Common\Sign
    • CED = "F64EE47E868489D873E07EC79C"
  • In HKEY_LOCAL_MACHINE\SOFTWARE\Adobe\Common\Sign
    • CED = "C79EB48DF11075C48E85DA6AF8"
  • In HKEY_LOCAL_MACHINE\SOFTWARE\Adobe\Common\Sign
    • CED = "A1B48ADB2062ABBE88FB430256"
  • In HKEY_LOCAL_MACHINE\SOFTWARE\Adobe\Common\Sign
    • CED = "9FB68CA5E9286DFC57CC93D260"
  • In HKEY_LOCAL_MACHINE\SOFTWARE\Adobe\Common\Sign
    • CED = "BE89A1B2DA3F44153F340B5AE8"
  • In HKEY_LOCAL_MACHINE\SOFTWARE\Adobe\Common\Sign
    • CED = "F0441A2B53B7DC6CE65CE361F7"
  • In HKEY_LOCAL_MACHINE\SOFTWARE\Adobe\Common\Sign
    • CED = "77CE67F81D7D86DB76ED71F441"
  • In HKEY_LOCAL_MACHINE\SOFTWARE\Adobe\Common\Sign
    • CED = "EE461C3559B9C297B1A2BD88DD"
  • In HKEY_LOCAL_MACHINE\SOFTWARE\Adobe\Common\Sign
    • CED = "77CE67F81D7D86DB76ED71F443"
  • In HKEY_LOCAL_MACHINE\SOFTWARE\Adobe\Common\Sign
    • CED = "3F162C05090972C781F24C192E"
  • In HKEY_LOCAL_MACHINE\SOFTWARE\Adobe\Common\Sign
    • CED = "A0B78FA0E4256EC38D86D96BF9"
  • In HKEY_LOCAL_MACHINE\SOFTWARE\Adobe\Common\Sign
    • CED = "BB8AA0B1D53459E863D06EF74D"
  • In HKEY_LOCAL_MACHINE\SOFTWARE\Adobe\Common\Sign
    • CED = "63F24BE4296992A7A192ADB88E"
  • In HKEY_LOCAL_MACHINE\SOFTWARE\Adobe\Common\Sign
    • CED = "0057EF4145454EE36EE579CC98"
  • In HKEY_LOCAL_MACHINE\SOFTWARE\Adobe\Common\Sign
    • CED = "C295AD868E8CF1470172CD98AD"
  • In HKEY_LOCAL_MACHINE\SOFTWARE\Adobe\Common\Sign
    • CED = "0651E97B83878CDD68DB63E271"
  • In HKEY_LOCAL_MACHINE\SOFTWARE\Adobe\Common\Sign
    • CED = "94A3BB94F81962F752C19EA7B3"
  • In HKEY_LOCAL_MACHINE\SOFTWARE\Adobe\Common\Sign
    • CED = "4E1931020A080D5CF66CF371C6"
  • In HKEY_LOCAL_MACHINE\SOFTWARE\Adobe\Common\Sign
    • CED = "72C59DB6DE2368F954CF6FF64D"
  • In HKEY_LOCAL_MACHINE\SOFTWARE\Adobe\Common\Sign
    • CED = "F3431B3458BAC396B0A3BC89DD"
  • In HKEY_LOCAL_MACHINE\SOFTWARE\Adobe\Common\Sign
    • CED = "D363FB55B9D9233610035CE97F"
  • In HKEY_LOCAL_MACHINE\SOFTWARE\Adobe\Common\Sign
    • CED = "F94DE57F878BF0400A79C69FB5"
  • In HKEY_LOCAL_MACHINE\SOFTWARE\Adobe\Common\Sign
    • CED = "0F263C157999E276D0421D283C"
  • In HKEY_LOCAL_MACHINE\SOFTWARE\Adobe\Common\Sign
    • CED = "491C32030B0F74C58F84DB69FF"
  • In HKEY_LOCAL_MACHINE\SOFTWARE\Adobe\Common\Sign
    • CED = "E571C99AE2276CFD483B044115"
  • In HKEY_LOCAL_MACHINE\SOFTWARE\Adobe\Common\Sign
    • CED = "2C3B132C50B2DB6DE75BE460F5"
  • In HKEY_LOCAL_MACHINE\SOFTWARE\Adobe\Common\Sign
    • CED = "CF67FF51B5D53F123C37085DEB"
  • In HKEY_LOCAL_MACHINE\SOFTWARE\Adobe\Common\Sign
    • CED = "24330B2468AAD365EF63FC481C"
  • In HKEY_LOCAL_MACHINE\SOFTWARE\Adobe\Common\Sign
    • CED = "95A0B68FF71A63F651C29DA8BD"
  • In HKEY_LOCAL_MACHINE\SOFTWARE\Adobe\Common\Sign
    • CED = "12253D167E9CE177D1411E273D"
  • In HKEY_LOCAL_MACHINE\SOFTWARE\Adobe\Common\Sign
    • CED = "D262F84AB2D03A0F392A353006"
  • In HKEY_LOCAL_MACHINE\SOFTWARE\Adobe\Common\Sign
    • CED = "A2B58DA6EE1378C983F04E1723"
  • In HKEY_LOCAL_MACHINE\SOFTWARE\Adobe\Common\Sign
    • CED = "1621390A7290F54B057EC184D1"
  • In HKEY_LOCAL_MACHINE\SOFTWARE\Adobe\Common\Sign
    • CED = "B98CA2B3DB3E471A342F303503"
  • In HKEY_LOCAL_MACHINE\SOFTWARE\Adobe\Common\Sign
    • CED = "172E045DA1E12B3E087BC481D5"
  • In HKEY_LOCAL_MACHINE\SOFTWARE\Adobe\Common\Sign
    • CED = "80D76EC7CF325BEE59CA95D067"
  • In HKEY_LOCAL_MACHINE\SOFTWARE\Adobe\Common\Sign
    • CED = "F94DE57F878BF0400A79C69FAB"
  • In HKEY_LOCAL_MACHINE\SOFTWARE\Adobe\Common\Sign
    • CED = "3A0D253E4644491832213E075C"
  • In HKEY_LOCAL_MACHINE\SOFTWARE\Adobe\Common\Sign
    • CED = "FA4AE0729AF80257F161FE461C"
  • In HKEY_LOCAL_MACHINE\SOFTWARE\Adobe\Common\Sign
    • CED = "0E59F1434B4FB485CF431C293D"
  • In HKEY_LOCAL_MACHINE\SOFTWARE\Adobe\Common\Sign
    • CED = "82D56CC5C9C9330640330C59ED"
  • In HKEY_LOCAL_MACHINE\SOFTWARE\Adobe\Common\Sign
    • CED = "E67ED46E96F41E331D16293C09"
  • In HKEY_LOCAL_MACHINE\SOFTWARE\Adobe\Common\Sign
    • CED = "3C0B233C40424B1E281B242137"
  • In HKEY_LOCAL_MACHINE\SOFTWARE\Adobe\Common\Sign
    • CED = "69FC55EE177B80D17CF7471E2A"
  • In HKEY_LOCAL_MACHINE\SOFTWARE\Adobe\Common\Sign
    • CED = "C194AABBC3C7CC9DB7ACB3B287"
  • In HKEY_LOCAL_MACHINE\SOFTWARE\Adobe\Common\Sign
    • CED = "F1451D365EBCC190BAA9B68FA5"
  • In HKEY_LOCAL_MACHINE\SOFTWARE\Adobe\Common\Sign
    • CED = "075EF44EB6D43E133D36095CE8"
  • In HKEY_LOCAL_MACHINE\SOFTWARE\Adobe\Common\Sign
    • CED = "88DF76CF3456BF92BCB788DD74"
  • In HKEY_LOCAL_MACHINE\SOFTWARE\Adobe\Common\Sign
    • CED = "58EF461F67ABD060EA58E77DC9"
  • In HKEY_LOCAL_MACHINE\SOFTWARE\Adobe\Common\Sign
    • CED = "273E142D51B1DA6ED84A1550E5"
  • In HKEY_LOCAL_MACHINE\SOFTWARE\Adobe\Common\Sign
    • CED = "62F54CE52E6C91A0AA99A6BF95"
  • In HKEY_LOCAL_MACHINE\SOFTWARE\Adobe\Common\Sign
    • CED = "132238090D0D76CB85FE400551"
  • In HKEY_LOCAL_MACHINE\SOFTWARE\Adobe\Common\Sign
    • CED = "4B1A300105050E232D26390C59"
  • In HKEY_LOCAL_MACHINE\SOFTWARE\Adobe\Common\Sign
    • CED = "7BCA63FC01010A5FE959E67ED4"
  • In HKEY_LOCAL_MACHINE\SOFTWARE\Adobe\Common\Sign
    • CED = "2B3A102165A5EE420C0758ED7A"
  • In HKEY_LOCAL_MACHINE\SOFTWARE\Adobe\Common\Sign
    • CED = "A9BC92A3EB2E57EA65DE60E573"
  • In HKEY_LOCAL_MACHINE\SOFTWARE\Adobe\Common\Sign
    • CED = "9FB68CA5E9286DFC57CC93D261"
  • In HKEY_LOCAL_MACHINE\SOFTWARE\Adobe\Common\Sign
    • CED = "B78EA4BDC1C1CA9FA99AA5A0B4"
  • In HKEY_LOCAL_MACHINE\SOFTWARE\Adobe\Common\Sign
    • CED = "92A5BD96FE030859F36FF074C1"
  • In HKEY_LOCAL_MACHINE\SOFTWARE\Adobe\Common\Sign
    • CED = "1520360F779BE070DA48172E04"
  • In HKEY_LOCAL_MACHINE\SOFTWARE\Adobe\Common\Sign
    • CED = "51E47DD63F43481933203F0652"
  • In HKEY_LOCAL_MACHINE\SOFTWARE\Adobe\Common\Sign
    • CED = "6BFA53EC11719AAF998AD56FC4"
  • In HKEY_LOCAL_MACHINE\SOFTWARE\Adobe\Common\Sign
    • CED = "192C0253BBDF25341E152A3B09"
  • In HKEY_LOCAL_MACHINE\SOFTWARE\Adobe\Common\Sign
    • CED = "75C096AFD73A431630233C095E"
  • In HKEY_LOCAL_MACHINE\SOFTWARE\Adobe\Common\Sign
    • CED = "DD69C192FA1F64F550C39CA9BF"
  • In HKEY_LOCAL_MACHINE\SOFTWARE\Adobe\Common\Sign
    • CED = "EC78CE60A4E62C3D170C531226"
  • In HKEY_LOCAL_MACHINE\SOFTWARE\Adobe\Common\Sign
    • CED = "91A4BA8BF3167FD27DF6481D2A"
  • In HKEY_LOCAL_MACHINE\SOFTWARE\Adobe\Common\Sign
    • CED = "A5B086DF2466AF82CC46192C3A"
  • In HKEY_LOCAL_MACHINE\SOFTWARE\Adobe\Common\Sign
    • CED = "8DD871C2CAC8320741320D58EC"
  • In HKEY_LOCAL_MACHINE\SOFTWARE\Adobe\Common\Sign
    • CED = "74C39BB4D839421731223D085D"
  • In HKEY_LOCAL_MACHINE\SOFTWARE\Adobe\Common\Sign
    • CED = "1A2D055EA6E42E034DC699ACBA"
  • In HKEY_LOCAL_MACHINE\SOFTWARE\Adobe\Common\Sign
    • CED = "4C1B330C7092FB4D077CC382D6"
  • In HKEY_LOCAL_MACHINE\SOFTWARE\Adobe\Common\Sign
    • CED = "D86CC293FB1E67FA55CE91D462"
  • In HKEY_LOCAL_MACHINE\SOFTWARE\Adobe\Common\Sign
    • CED = "A1B48ADB2062ABBE88FB430250"
  • In HKEY_LOCAL_MACHINE\SOFTWARE\Adobe\Common\Sign
    • CED = "88DF76CF3456BF92BCB788DD6B"
  • In HKEY_LOCAL_MACHINE\SOFTWARE\Adobe\Common\Sign
    • CED = "C493AB84888AF3450F045BEA7F"
  • In HKEY_LOCAL_MACHINE\SOFTWARE\Adobe\Common\Sign
    • CED = "9AAD85DE276B90A1AB98A7BE8B"
  • In HKEY_LOCAL_MACHINE\SOFTWARE\Adobe\Common\Sign
    • CED = "D262F84AB2D03A0F392A353005"
  • In HKEY_LOCAL_MACHINE\SOFTWARE\Adobe\Common\Sign
    • CED = "7FD66FC0C4C6CF61EB67F84C1A"
  • In HKEY_LOCAL_MACHINE\SOFTWARE\Adobe\Common\Sign
    • CED = "B580D668ACEE14252F243B0A5E"
  • In HKEY_LOCAL_MACHINE\SOFTWARE\Adobe\Common\Sign
    • CED = "F440162F57BBC091BBA8B78EA4"
  • In HKEY_LOCAL_MACHINE\SOFTWARE\Adobe\Common\Sign
    • CED = "E373CB65A9E9132620132C390D"
  • In HKEY_LOCAL_MACHINE\SOFTWARE\Adobe\Common\Sign
    • CED = "E373CB65A9E9132620132C390F"
  • In HKEY_LOCAL_MACHINE\SOFTWARE\Adobe\Common\Sign
    • CED = "99AC82D3385AA3B69083DC68FC"
  • In HKEY_LOCAL_MACHINE\SOFTWARE\Adobe\Common\Sign
    • CED = "132238090D0D76CB85FE400552"
  • In HKEY_LOCAL_MACHINE\SOFTWARE\Adobe\Common\Sign
    • CED = "F24218296DADD66AE45EE163F1"
  • In HKEY_LOCAL_MACHINE\SOFTWARE\Adobe\Common\Sign
    • CED = "CA9DB58EF61B60F15CD767FE54"
  • In HKEY_LOCAL_MACHINE\SOFTWARE\Adobe\Common\Sign
    • CED = "BB8AA0B1D53459E863D06EF74E"
  • In HKEY_LOCAL_MACHINE\SOFTWARE\Adobe\Common\Sign
    • CED = "DB6BC39CE0216AFF4A39065FEB"
  • In HKEY_LOCAL_MACHINE\SOFTWARE\Adobe\Common\Sign
    • CED = "67FE57E82D6D96ABA59EA1A4B1"
  • In HKEY_LOCAL_MACHINE\SOFTWARE\Adobe\Common\Sign
    • CED = "53E27BD43959A2B79182DD67F3"
  • In HKEY_LOCAL_MACHINE\SOFTWARE\Adobe\Common\Sign
    • CED = "9CAB83DC2161AABF89FA440156"
  • In HKEY_LOCAL_MACHINE\SOFTWARE\Adobe\Common\Sign
    • CED = "085FF7494D4DB68BC5BE81C492"
  • In HKEY_LOCAL_MACHINE\SOFTWARE\Adobe\Common\Sign
    • CED = "A5B086DF2466AF82CC46192C38"
  • In HKEY_LOCAL_MACHINE\SOFTWARE\Adobe\Common\Sign
    • CED = "67FE57E82D6D96ABA59EA1A4B2"
  • In HKEY_LOCAL_MACHINE\SOFTWARE\Adobe\Common\Sign
    • CED = "CB9AB08185858EA3ADA6B98CD8"
  • In HKEY_LOCAL_MACHINE\SOFTWARE\Adobe\Common\Sign
    • CED = "63F24BE4296992A7A192ADB88D"
  • In HKEY_LOCAL_MACHINE\SOFTWARE\Adobe\Common\Sign
    • CED = "CA9DB58EF61B60F15CD767FE55"
  • In HKEY_LOCAL_MACHINE\SOFTWARE\Adobe\Common\Sign
    • CED = "0154EA44484AB386C0B38CD96F"
  • In HKEY_LOCAL_MACHINE\SOFTWARE\Adobe\Common\Sign
    • CED = "A9BC92A3EB2E57EA65DE60E572"
  • In HKEY_LOCAL_MACHINE\SOFTWARE\Adobe\Common\Sign
    • CED = "BC8BA3BCC0C2CB9EA89BA4A1B6"
  • In HKEY_LOCAL_MACHINE\SOFTWARE\Adobe\Common\Sign
    • CED = "A4B38BA4E82952E762D16DF84F"
  • In HKEY_LOCAL_MACHINE\SOFTWARE\Adobe\Common\Sign
    • CED = "9DA8BE97FF020B5EE85AE57FCB"
  • In HKEY_LOCAL_MACHINE\SOFTWARE\Adobe\Common\Sign
    • CED = "5AED441D61A1EA7EC8BB84C196"
  • In HKEY_LOCAL_MACHINE\SOFTWARE\Adobe\Common\Sign
    • CED = "11243A0B7397FC4C067DC283D1"
  • In HKEY_LOCAL_MACHINE\SOFTWARE\Adobe\Common\Sign
    • CED = "9AAD85DE276B90A1AB98A7BE8A"
  • In HKEY_LOCAL_MACHINE\SOFTWARE\Adobe\Common\Sign
    • CED = "0C5BF34DB1D13B0E382B343106"
  • In HKEY_LOCAL_MACHINE\SOFTWARE\Adobe\Common\Sign
    • CED = "30075FF015759EB39D96A9BC88"
  • In HKEY_LOCAL_MACHINE\SOFTWARE\Adobe\Common\Sign
    • CED = "C99CB2838B8FF4440E055AEB79"
  • In HKEY_LOCAL_MACHINE\SOFTWARE\Adobe\Common\Sign
    • CED = "C194AABBC3C7CC9DB7ACB3B280"
  • In HKEY_LOCAL_MACHINE\SOFTWARE\Adobe\Common\Sign
    • CED = "23320859BDDD273A140F501521"
  • In HKEY_LOCAL_MACHINE\SOFTWARE\Adobe\Common\Sign
    • CED = "A8BF97A8EC2D56EB66DD61E473"
  • In HKEY_LOCAL_MACHINE\SOFTWARE\Adobe\Common\Sign
    • CED = "2E3911226AA8ED430D0659EC79"
  • In HKEY_LOCAL_MACHINE\SOFTWARE\Adobe\Common\Sign
    • CED = "0C5BF34DB1D13B0E382B343107"
  • In HKEY_LOCAL_MACHINE\SOFTWARE\Adobe\Common\Sign
    • CED = "90A7BF90F4157ED37EF5491C29"
  • In HKEY_LOCAL_MACHINE\SOFTWARE\Adobe\Common\Sign
    • CED = "6DF851E22B6F94A5AFA4BB8ADF"
  • In HKEY_LOCAL_MACHINE\SOFTWARE\Adobe\Common\Sign
    • CED = "095CF24CB0D2380943300F56E2"
  • In HKEY_LOCAL_MACHINE\SOFTWARE\Adobe\Common\Sign
    • CED = "5EE940117595FE52FC76C99CA9"
  • In HKEY_LOCAL_MACHINE\SOFTWARE\Adobe\Common\Sign
    • CED = "E97DD56F97FB0150FA68F74D1B"
  • In HKEY_LOCAL_MACHINE\SOFTWARE\Adobe\Common\Sign
    • CED = "2D380E276F93F8480271CE97A3"
  • In HKEY_LOCAL_MACHINE\SOFTWARE\Adobe\Common\Sign
    • CED = "68FF56EF14769FB29C97A8BD89"
  • In HKEY_LOCAL_MACHINE\SOFTWARE\Adobe\Common\Sign
    • CED = "64F34A1B63A7EC7CD64C1352E7"
  • In HKEY_LOCAL_MACHINE\SOFTWARE\Adobe\Common\Sign
    • CED = "7CCB62F3187A83D671E27CC99F"
  • In HKEY_LOCAL_MACHINE\SOFTWARE\Adobe\Common\Sign
    • CED = "ACBB93ACD0315AEF5AC996AFBB"
  • In HKEY_LOCAL_MACHINE\SOFTWARE\Adobe\Common\Sign
    • CED = "9DA8BE97FF020B5EE85AE57FD4"
  • In HKEY_LOCAL_MACHINE\SOFTWARE\Adobe\Common\Sign
    • CED = "C590A6BFC7CB31004A39065FF5"
  • In HKEY_LOCAL_MACHINE\SOFTWARE\Adobe\Common\Sign
    • CED = "57EE47187C9EE779D34F1055E1"
  • In HKEY_LOCAL_MACHINE\SOFTWARE\Adobe\Common\Sign
    • CED = "A1B48ADB2062ABBE88FB430257"
  • In HKEY_LOCAL_MACHINE\SOFTWARE\Adobe\Common\Sign
    • CED = "82D56CC5C9C9330640330C59EF"
  • In HKEY_LOCAL_MACHINE\SOFTWARE\Adobe\Common\Sign
    • CED = "7FD66FC0C4C6CF61EB67F84C18"
  • In HKEY_LOCAL_MACHINE\SOFTWARE\Adobe\Common\Sign
    • CED = "4611293A424045143E350A5BE9"
  • In HKEY_LOCAL_MACHINE\SOFTWARE\Adobe\Common\Sign
    • CED = "CF67FF51B5D53F123C37085DE9"
  • In HKEY_LOCAL_MACHINE\SOFTWARE\Adobe\Common\Sign
    • CED = "2F065CF51E7C81D07BE876CF65"
  • In HKEY_LOCAL_MACHINE\SOFTWARE\Adobe\Common\Sign
    • CED = "69FC55EE177B80D17CF7471E2B"
  • In HKEY_LOCAL_MACHINE\SOFTWARE\Adobe\Common\Sign
    • CED = "481F37080C0E77CA84FF5FE67D"
  • In HKEY_LOCAL_MACHINE\SOFTWARE\Adobe\Common\Sign
    • CED = "C194AABBC3C7CC9DB7ACB3B286"
  • In HKEY_LOCAL_MACHINE\SOFTWARE\Adobe\Common\Sign
    • CED = "50E77ED73C5EA7BA948FD095A3"
  • In HKEY_LOCAL_MACHINE\SOFTWARE\Adobe\Common\Sign
    • CED = "B78EA4BDC1C1CA9FA99AA5A0B6"
  • In HKEY_LOCAL_MACHINE\SOFTWARE\Adobe\Common\Sign
    • CED = "9FB68CA5E9286DFC57CC93D267"
  • In HKEY_LOCAL_MACHINE\SOFTWARE\Adobe\Common\Sign
    • CED = "EA7AD062AAE8122721122D380D"
  • In HKEY_LOCAL_MACHINE\SOFTWARE\Adobe\Common\Sign
    • CED = "24330B2468AAD365EF63FC481E"
  • In HKEY_LOCAL_MACHINE\SOFTWARE\Adobe\Common\Sign
    • CED = "C493AB84888AF3450F045BEA78"
  • In HKEY_LOCAL_MACHINE\SOFTWARE\Adobe\Common\Sign
    • CED = "5AED441D61A1EA7EC8BB84C197"
  • In HKEY_LOCAL_MACHINE\SOFTWARE\Adobe\Common\Sign
    • CED = "64F34A1B63A7EC7CD64C1352E6"
  • In HKEY_LOCAL_MACHINE\SOFTWARE\Adobe\Common\Sign
    • CED = "C590A6BFC7CB31004A39065FF4"
  • In HKEY_LOCAL_MACHINE\SOFTWARE\Adobe\Common\Sign
    • CED = "2E3911226AA8ED430D0659EC7B"
  • In HKEY_LOCAL_MACHINE\SOFTWARE\Adobe\Common\Sign
    • CED = "CA9DB58EF61B60F15CD767FE4B"
  • In HKEY_LOCAL_MACHINE\SOFTWARE\Adobe\Common\Sign
    • CED = "32055DF61F63A8B99380DF65F3"
  • In HKEY_LOCAL_MACHINE\SOFTWARE\Adobe\Common\Sign
    • CED = "D561F94BB3D73D0C463D024317"
  • In HKEY_LOCAL_MACHINE\SOFTWARE\Adobe\Common\Sign
    • CED = "FF57EF4145454EE36EE579CC98"
  • In HKEY_LOCAL_MACHINE\SOFTWARE\Adobe\Common\Sign
    • CED = "B184DA7498FA0051FB77C89DAA"
  • In HKEY_LOCAL_MACHINE\SOFTWARE\Adobe\Common\Sign
    • CED = "FB4BE37D81818ADF6AD965E077"
  • In HKEY_LOCAL_MACHINE\SOFTWARE\Adobe\Common\Sign
    • CED = "ADB88EA7EF127BCE79EA74F146"
  • In HKEY_LOCAL_MACHINE\SOFTWARE\Adobe\Common\Sign
    • CED = "192C0253BBDF25341E152A3B08"
  • In HKEY_LOCAL_MACHINE\SOFTWARE\Adobe\Common\Sign
    • CED = "360159EA13779CADA79CA3A2B0"
  • In HKEY_LOCAL_MACHINE\SOFTWARE\Adobe\Common\Sign
    • CED = "0D58EE4044464FE26DE678CD64"
  • In HKEY_LOCAL_MACHINE\SOFTWARE\Adobe\Common\Sign
    • CED = "7ACD64FD06040958F260FF4512"
  • In HKEY_LOCAL_MACHINE\SOFTWARE\Adobe\Common\Sign
    • CED = "50E77ED73C5EA7BA948FD095A1"
  • In HKEY_LOCAL_MACHINE\SOFTWARE\Adobe\Common\Sign
    • CED = "14233B14789AE375DF53EC78CD"
  • In HKEY_LOCAL_MACHINE\SOFTWARE\Adobe\Common\Sign
    • CED = "CE66FC56BEDC263B150E511422"
  • In HKEY_LOCAL_MACHINE\SOFTWARE\Adobe\Common\Sign
    • CED = "EC78CE60A4E62C3D170C531227"
  • In HKEY_LOCAL_MACHINE\SOFTWARE\Adobe\Common\Sign
    • CED = "8ADD74CD3654B988C2B18ED76E"
  • In HKEY_LOCAL_MACHINE\SOFTWARE\Adobe\Common\Sign
    • CED = "B88FA7B8DC3D461B352E313400"
  • In HKEY_LOCAL_MACHINE\SOFTWARE\Adobe\Common\Sign
    • CED = "7DC861F21B7F84D570E37BCA9F"
  • In HKEY_LOCAL_MACHINE\SOFTWARE\Adobe\Common\Sign
    • CED = "B184DA7498FA0051FB77C89DAB"
  • In HKEY_LOCAL_MACHINE\SOFTWARE\Adobe\Common\Sign
    • CED = "72C59DB6DE2368F954CF6FF643"
  • In HKEY_LOCAL_MACHINE\SOFTWARE\Adobe\Common\Sign
    • CED = "2631095AA2E02A3F097AC580D6"
  • In HKEY_LOCAL_MACHINE\SOFTWARE\Adobe\Common\Sign
    • CED = "2631095AA2E02A3F097AC580D5"
  • In HKEY_LOCAL_MACHINE\SOFTWARE\Adobe\Common\Sign
    • CED = "E87CD26C90F2182923102F3602"
  • In HKEY_LOCAL_MACHINE\SOFTWARE\Adobe\Common\Sign
    • CED = "4510263F474BB081CB47182D3A"
  • In HKEY_LOCAL_MACHINE\SOFTWARE\Adobe\Common\Sign
    • CED = "22350D266EACD167E151EE76CC"
  • In HKEY_LOCAL_MACHINE\SOFTWARE\Adobe\Common\Sign
    • CED = "390C22335BBFC495BFB48BDA6F"
  • In HKEY_LOCAL_MACHINE\SOFTWARE\Adobe\Common\Sign
    • CED = "AEB991A2EA2F54E560D36BFA48"
  • In HKEY_LOCAL_MACHINE\SOFTWARE\Adobe\Common\Sign
    • CED = "1F360C2569A9D266E052ED77CD"
  • In HKEY_LOCAL_MACHINE\SOFTWARE\Adobe\Common\Sign
    • CED = "60F74EE72C6E97AAA49FA0A5B1"
  • In HKEY_LOCAL_MACHINE\SOFTWARE\Adobe\Common\Sign
    • CED = "BD88DE7094F61C2D271C232236"
  • In HKEY_LOCAL_MACHINE\SOFTWARE\Adobe\Common\Sign
    • CED = "6BFA53EC11719AAF998AD56FC5"
  • In HKEY_LOCAL_MACHINE\SOFTWARE\Adobe\Common\Sign
    • CED = "65F0491A62A0E57BD54D1253E1"
  • In HKEY_LOCAL_MACHINE\SOFTWARE\Adobe\Common\Sign
    • CED = "6FC69CB5D9385DEC67DC62E371"
  • In HKEY_LOCAL_MACHINE\SOFTWARE\Adobe\Common\Sign
    • CED = "1B2A0051B5D53F123C37085DEB"
  • In HKEY_LOCAL_MACHINE\SOFTWARE\Adobe\Common\Sign
    • CED = "9AAD85DE276B90A1AB98A7BE94"
  • In HKEY_LOCAL_MACHINE\SOFTWARE\Adobe\Common\Sign
    • CED = "6FC69CB5D9385DEC67DC62E370"
  • In HKEY_LOCAL_MACHINE\SOFTWARE\Adobe\Common\Sign
    • CED = "AABD95AED63B40113B28370E24"
  • In HKEY_LOCAL_MACHINE\SOFTWARE\Adobe\Common\Sign
    • CED = "6BFA53EC11719AAF998AD56FFB"
  • In HKEY_LOCAL_MACHINE\SOFTWARE\Adobe\Common\Sign
    • CED = "CB9AB08185858EA3ADA6B98CDA"
  • In HKEY_LOCAL_MACHINE\SOFTWARE\Adobe\Common\Sign
    • CED = "D66EC49DE12065F45FD46AFB48"
  • In HKEY_LOCAL_MACHINE\SOFTWARE\Adobe\Common\Sign
    • CED = "21340A5BA3E72D3C160D521321"
  • In HKEY_LOCAL_MACHINE\SOFTWARE\Adobe\Common\Sign
    • CED = "54E37ACB3052BB8EB8ABB4B185"
  • In HKEY_LOCAL_MACHINE\SOFTWARE\Adobe\Common\Sign
    • CED = "62F54CE52E6C91A0AA99A6BF94"
  • In HKEY_LOCAL_MACHINE\SOFTWARE\Adobe\Common\Sign
    • CED = "1D283E177F8388D974EF4F162C"
  • In HKEY_LOCAL_MACHINE\SOFTWARE\Adobe\Common\Sign
    • CED = "2F065CF51E7C81D07BE876CF64"
  • In HKEY_LOCAL_MACHINE\SOFTWARE\Adobe\Common\Sign
    • CED = "F1451D365EBCC190BAA9B68FA4"
  • In HKEY_LOCAL_MACHINE\SOFTWARE\Adobe\Common\Sign
    • CED = "BC8BA3BCC0C2CB9EA89BA4A1B5"
  • In HKEY_LOCAL_MACHINE\SOFTWARE\Adobe\Common\Sign
    • CED = "A7BE94ADD13055E46FE47ACB98"
  • In HKEY_LOCAL_MACHINE\SOFTWARE\Adobe\Common\Sign
    • CED = "ED79D163ABEF15242E253A0B59"
  • In HKEY_LOCAL_MACHINE\SOFTWARE\Adobe\Common\Sign
    • CED = "8FA6BC95F9187DCC86FD410452"
  • In HKEY_LOCAL_MACHINE\SOFTWARE\Adobe\Common\Sign
    • CED = "79CC65FE070B70C18BF8461F2B"
  • In HKEY_LOCAL_MACHINE\SOFTWARE\Adobe\Common\Sign
    • CED = "FF57EF4145454EE36EE579CC99"
  • In HKEY_LOCAL_MACHINE\SOFTWARE\Adobe\Common\Sign
    • CED = "D064FA54B8DA20311B0857EE44"
  • In HKEY_LOCAL_MACHINE\SOFTWARE\Adobe\Common\Sign
    • CED = "44132B04080A73C680F34B1A2E"
  • In HKEY_LOCAL_MACHINE\SOFTWARE\Adobe\Common\Sign
    • CED = "CD98AE878FF3192822112E370C"
  • In HKEY_LOCAL_MACHINE\SOFTWARE\Adobe\Common\Sign
    • CED = "51E47DD63F43481933203F065C"
  • In HKEY_LOCAL_MACHINE\SOFTWARE\Adobe\Common\Sign
    • CED = "59EC451E66A4E97FC9BA85C094"
  • In HKEY_LOCAL_MACHINE\SOFTWARE\Adobe\Common\Sign
    • CED = "10273F107496FF51FB77C89DAA"
  • In HKEY_LOCAL_MACHINE\SOFTWARE\Adobe\Common\Sign
    • CED = "44132B04080A73C680F34B1A28"
  • In HKEY_LOCAL_MACHINE\SOFTWARE\Adobe\Common\Sign
    • CED = "83D26BC4C8CA30014B38075EEB"
  • In HKEY_LOCAL_MACHINE\SOFTWARE\Adobe\Common\Sign
    • CED = "76C199AAD2375CED58CB94D160"

Step 5

Search and delete these components

[ Learn More ]
There may be some components that are hidden. Please make sure you check the Search Hidden Files and Folders checkbox in the "More advanced options" option to include all hidden files and folders in the search result.
  • %Windows%\jtCoyHRblJID0.DLL
  • %Windows%\DelSelf.bat
  • %System%\wbem\fontsys.sys
  • %System%\dad32533.dll
  • %System%\qq365up.dll

Step 6

Restart in normal mode and scan your computer with your Trend Micro product for files detected as TROJ_DELF.JFP. If the detected files have already been cleaned, deleted, or quarantined by your Trend Micro product, no further step is required. You may opt to simply delete the quarantined files. Please check this Knowledge Base page for more information.

Step 7

Restore this file from backup only Microsoft-related files will be restored. If this malware/grayware also deleted files related to programs that are not from Microsoft, please reinstall those programs on you computer again.

  • %Windows%\DelSelf.bat


Did this description help? Tell us how we did.