TROJ_FAKEAV.LJQ

This Trojan arrives on a system as a file dropped by other malware or as a file downloaded unknowingly by users when visiting malicious sites.

It deletes itself after execution.

Arrival Details

This Trojan arrives on a system as a file dropped by other malware or as a file downloaded unknowingly by users when visiting malicious sites.

Other System Modifications

This Trojan modifies the following file(s):

• %Application Data%\GDIPFONTCACHEV1.DAT

(Note: %Application Data% is the current user's Application Data folder, which is usually C:\Documents and Settings\{user name}\Application Data on Windows 2000, XP, and Server 2003, or C:\Users\{user name}\AppData\Roaming on Windows Vista and 7.)

It adds the following registry keys:

HKEY_CURRENT_USER\.exe

HKEY_CURRENT_USER\.exe\DefaultIcon

HKEY_CURRENT_USER\.exe\shell

HKEY_CURRENT_USER\.exe\shell\
open

HKEY_CURRENT_USER\.exe\shell\
open\command

HKEY_CURRENT_USER\.exe\shell\
runas

HKEY_CURRENT_USER\.exe\shell\
runas\command

HKEY_CURRENT_USER\Gx

HKEY_CURRENT_USER\Gx\DefaultIcon

HKEY_CURRENT_USER\Gx\shell

HKEY_CURRENT_USER\Gx\shell\
open

HKEY_CURRENT_USER\Gx\shell\
open\command

HKEY_CURRENT_USER\Gx\shell\
runas

HKEY_CURRENT_USER\Gx\shell\
runas\command

HKEY_CURRENT_USER\T13

HKEY_CURRENT_USER\T13\DefaultIcon

HKEY_CURRENT_USER\T13\shell

HKEY_CURRENT_USER\T13\shell\
open

HKEY_CURRENT_USER\T13\shell\
open\command

HKEY_CURRENT_USER\T13\shell\
runas

HKEY_CURRENT_USER\T13\shell\
runas\command

HKEY_CURRENT_USER\wh

HKEY_CURRENT_USER\wh\DefaultIcon

HKEY_CURRENT_USER\wh\shell

HKEY_CURRENT_USER\wh\shell\
open

HKEY_CURRENT_USER\wh\shell\
open\command

HKEY_CURRENT_USER\wh\shell\
runas

HKEY_CURRENT_USER\wh\shell\
runas\command

HKEY_CURRENT_USER\25W

HKEY_CURRENT_USER\25W\DefaultIcon

HKEY_CURRENT_USER\25W\shell

HKEY_CURRENT_USER\25W\shell\
open

HKEY_CURRENT_USER\25W\shell\
open\command

HKEY_CURRENT_USER\25W\shell\
runas

HKEY_CURRENT_USER\25W\shell\
runas\command

HKEY_CURRENT_USER\4O1

HKEY_CURRENT_USER\4O1\DefaultIcon

HKEY_CURRENT_USER\4O1\shell

HKEY_CURRENT_USER\4O1\shell\
open

HKEY_CURRENT_USER\4O1\shell\
open\command

HKEY_CURRENT_USER\4O1\shell\
runas

HKEY_CURRENT_USER\4O1\shell\
runas\command

HKEY_CURRENT_USER\V8D

HKEY_CURRENT_USER\V8D\DefaultIcon

HKEY_CURRENT_USER\V8D\shell

HKEY_CURRENT_USER\V8D\shell\
open

HKEY_CURRENT_USER\V8D\shell\
open\command

HKEY_CURRENT_USER\V8D\shell\
runas

HKEY_CURRENT_USER\V8D\shell\
runas\command

HKEY_CURRENT_USER\7Ha

HKEY_CURRENT_USER\7Ha\DefaultIcon

HKEY_CURRENT_USER\7Ha\shell

HKEY_CURRENT_USER\7Ha\shell\
open

HKEY_CURRENT_USER\7Ha\shell\
open\command

HKEY_CURRENT_USER\7Ha\shell\
runas

HKEY_CURRENT_USER\7Ha\shell\
runas\command

HKEY_CURRENT_USER\hcJ

HKEY_CURRENT_USER\hcJ\DefaultIcon

HKEY_CURRENT_USER\hcJ\shell

HKEY_CURRENT_USER\hcJ\shell\
open

HKEY_CURRENT_USER\hcJ\shell\
open\command

HKEY_CURRENT_USER\hcJ\shell\
runas

HKEY_CURRENT_USER\hcJ\shell\
runas\command

HKEY_CURRENT_USER\6C

HKEY_CURRENT_USER\6C\DefaultIcon

HKEY_CURRENT_USER\6C\shell

HKEY_CURRENT_USER\6C\shell\
open

HKEY_CURRENT_USER\6C\shell\
open\command

HKEY_CURRENT_USER\6C\shell\
runas

HKEY_CURRENT_USER\6C\shell\
runas\command

HKEY_CURRENT_USER\Es

HKEY_CURRENT_USER\Es\DefaultIcon

HKEY_CURRENT_USER\Es\shell

HKEY_CURRENT_USER\Es\shell\
open

HKEY_CURRENT_USER\Es\shell\
open\command

HKEY_CURRENT_USER\Es\shell\
runas

HKEY_CURRENT_USER\Es\shell\
runas\command

HKEY_CURRENT_USER\y7

HKEY_CURRENT_USER\y7\DefaultIcon

HKEY_CURRENT_USER\y7\shell

HKEY_CURRENT_USER\y7\shell\
open

HKEY_CURRENT_USER\y7\shell\
open\command

HKEY_CURRENT_USER\y7\shell\
runas

HKEY_CURRENT_USER\y7\shell\
runas\command

HKEY_CURRENT_USER\N80

HKEY_CURRENT_USER\N80\DefaultIcon

HKEY_CURRENT_USER\N80\shell

HKEY_CURRENT_USER\N80\shell\
open

HKEY_CURRENT_USER\N80\shell\
open\command

HKEY_CURRENT_USER\N80\shell\
runas

HKEY_CURRENT_USER\N80\shell\
runas\command

HKEY_CURRENT_USER\M5

HKEY_CURRENT_USER\M5\DefaultIcon

HKEY_CURRENT_USER\M5\shell

HKEY_CURRENT_USER\M5\shell\
open

HKEY_CURRENT_USER\M5\shell\
open\command

HKEY_CURRENT_USER\M5\shell\
runas

HKEY_CURRENT_USER\M5\shell\
runas\command

HKEY_CURRENT_USER\S84

HKEY_CURRENT_USER\S84\DefaultIcon

HKEY_CURRENT_USER\S84\shell

HKEY_CURRENT_USER\S84\shell\
open

HKEY_CURRENT_USER\S84\shell\
open\command

HKEY_CURRENT_USER\S84\shell\
runas

HKEY_CURRENT_USER\S84\shell\
runas\command

HKEY_CURRENT_USER\fLM

HKEY_CURRENT_USER\fLM\DefaultIcon

HKEY_CURRENT_USER\fLM\shell

HKEY_CURRENT_USER\fLM\shell\
open

HKEY_CURRENT_USER\fLM\shell\
open\command

HKEY_CURRENT_USER\fLM\shell\
runas

HKEY_CURRENT_USER\fLM\shell\
runas\command

HKEY_CURRENT_USER\Xw

HKEY_CURRENT_USER\Xw\DefaultIcon

HKEY_CURRENT_USER\Xw\shell

HKEY_CURRENT_USER\Xw\shell\
open

HKEY_CURRENT_USER\Xw\shell\
open\command

HKEY_CURRENT_USER\Xw\shell\
runas

HKEY_CURRENT_USER\Xw\shell\
runas\command

HKEY_CURRENT_USER\o67

HKEY_CURRENT_USER\o67\DefaultIcon

HKEY_CURRENT_USER\o67\shell

HKEY_CURRENT_USER\o67\shell\
open

HKEY_CURRENT_USER\o67\shell\
open\command

HKEY_CURRENT_USER\o67\shell\
runas

HKEY_CURRENT_USER\o67\shell\
runas\command

HKEY_CURRENT_USER\7VA

HKEY_CURRENT_USER\7VA\DefaultIcon

HKEY_CURRENT_USER\7VA\shell

HKEY_CURRENT_USER\7VA\shell\
open

HKEY_CURRENT_USER\7VA\shell\
open\command

HKEY_CURRENT_USER\7VA\shell\
runas

HKEY_CURRENT_USER\7VA\shell\
runas\command

HKEY_CURRENT_USER\48

HKEY_CURRENT_USER\48\DefaultIcon

HKEY_CURRENT_USER\48\shell

HKEY_CURRENT_USER\48\shell\
open

HKEY_CURRENT_USER\48\shell\
open\command

HKEY_CURRENT_USER\48\shell\
runas

HKEY_CURRENT_USER\48\shell\
runas\command

HKEY_CURRENT_USER\08

HKEY_CURRENT_USER\08\DefaultIcon

HKEY_CURRENT_USER\08\shell

HKEY_CURRENT_USER\08\shell\
open

HKEY_CURRENT_USER\08\shell\
open\command

HKEY_CURRENT_USER\08\shell\
runas

HKEY_CURRENT_USER\08\shell\
runas\command

HKEY_CURRENT_USER\286

HKEY_CURRENT_USER\286\DefaultIcon

HKEY_CURRENT_USER\286\shell

HKEY_CURRENT_USER\286\shell\
open

HKEY_CURRENT_USER\286\shell\
open\command

HKEY_CURRENT_USER\286\shell\
runas

HKEY_CURRENT_USER\286\shell\
runas\command

HKEY_CURRENT_USER\bWj

HKEY_CURRENT_USER\bWj\DefaultIcon

HKEY_CURRENT_USER\bWj\shell

HKEY_CURRENT_USER\bWj\shell\
open

HKEY_CURRENT_USER\bWj\shell\
open\command

HKEY_CURRENT_USER\bWj\shell\
runas

HKEY_CURRENT_USER\bWj\shell\
runas\command

HKEY_CURRENT_USER\lY1

HKEY_CURRENT_USER\lY1\DefaultIcon

HKEY_CURRENT_USER\lY1\shell

HKEY_CURRENT_USER\lY1\shell\
open

HKEY_CURRENT_USER\lY1\shell\
open\command

HKEY_CURRENT_USER\lY1\shell\
runas

HKEY_CURRENT_USER\lY1\shell\
runas\command

HKEY_CURRENT_USER\7V4

HKEY_CURRENT_USER\7V4\DefaultIcon

HKEY_CURRENT_USER\7V4\shell

HKEY_CURRENT_USER\7V4\shell\
open

HKEY_CURRENT_USER\7V4\shell\
open\command

HKEY_CURRENT_USER\7V4\shell\
runas

HKEY_CURRENT_USER\7V4\shell\
runas\command

HKEY_CURRENT_USER\0EY

HKEY_CURRENT_USER\0EY\DefaultIcon

HKEY_CURRENT_USER\0EY\shell

HKEY_CURRENT_USER\0EY\shell\
open

HKEY_CURRENT_USER\0EY\shell\
open\command

HKEY_CURRENT_USER\0EY\shell\
runas

HKEY_CURRENT_USER\0EY\shell\
runas\command

HKEY_CURRENT_USER\2S

HKEY_CURRENT_USER\2S\DefaultIcon

HKEY_CURRENT_USER\2S\shell

HKEY_CURRENT_USER\2S\shell\
open

HKEY_CURRENT_USER\2S\shell\
open\command

HKEY_CURRENT_USER\2S\shell\
runas

HKEY_CURRENT_USER\2S\shell\
runas\command

HKEY_CURRENT_USER\NP3

HKEY_CURRENT_USER\NP3\DefaultIcon

HKEY_CURRENT_USER\NP3\shell

HKEY_CURRENT_USER\NP3\shell\
open

HKEY_CURRENT_USER\NP3\shell\
open\command

HKEY_CURRENT_USER\NP3\shell\
runas

HKEY_CURRENT_USER\NP3\shell\
runas\command

HKEY_CURRENT_USER\gK

HKEY_CURRENT_USER\gK\DefaultIcon

HKEY_CURRENT_USER\gK\shell

HKEY_CURRENT_USER\gK\shell\
open

HKEY_CURRENT_USER\gK\shell\
open\command

HKEY_CURRENT_USER\gK\shell\
runas

HKEY_CURRENT_USER\gK\shell\
runas\command

HKEY_CURRENT_USER\0a1

HKEY_CURRENT_USER\0a1\DefaultIcon

HKEY_CURRENT_USER\0a1\shell

HKEY_CURRENT_USER\0a1\shell\
open

HKEY_CURRENT_USER\0a1\shell\
open\command

HKEY_CURRENT_USER\0a1\shell\
runas

HKEY_CURRENT_USER\0a1\shell\
runas\command

HKEY_CURRENT_USER\op8

HKEY_CURRENT_USER\op8\DefaultIcon

HKEY_CURRENT_USER\op8\shell

HKEY_CURRENT_USER\op8\shell\
open

HKEY_CURRENT_USER\op8\shell\
open\command

HKEY_CURRENT_USER\op8\shell\
runas

HKEY_CURRENT_USER\op8\shell\
runas\command

HKEY_CURRENT_USER\1J2

HKEY_CURRENT_USER\1J2\DefaultIcon

HKEY_CURRENT_USER\1J2\shell

HKEY_CURRENT_USER\1J2\shell\
open

HKEY_CURRENT_USER\1J2\shell\
open\command

HKEY_CURRENT_USER\1J2\shell\
runas

HKEY_CURRENT_USER\1J2\shell\
runas\command

HKEY_CURRENT_USER\nU

HKEY_CURRENT_USER\nU\DefaultIcon

HKEY_CURRENT_USER\nU\shell

HKEY_CURRENT_USER\nU\shell\
open

HKEY_CURRENT_USER\nU\shell\
open\command

HKEY_CURRENT_USER\nU\shell\
runas

HKEY_CURRENT_USER\nU\shell\
runas\command

HKEY_CURRENT_USER\ae

HKEY_CURRENT_USER\ae\DefaultIcon

HKEY_CURRENT_USER\ae\shell

HKEY_CURRENT_USER\ae\shell\
open

HKEY_CURRENT_USER\ae\shell\
open\command

HKEY_CURRENT_USER\ae\shell\
runas

HKEY_CURRENT_USER\ae\shell\
runas\command

HKEY_CURRENT_USER\gO

HKEY_CURRENT_USER\gO\DefaultIcon

HKEY_CURRENT_USER\gO\shell

HKEY_CURRENT_USER\gO\shell\
open

HKEY_CURRENT_USER\gO\shell\
open\command

HKEY_CURRENT_USER\gO\shell\
runas

HKEY_CURRENT_USER\gO\shell\
runas\command

HKEY_CURRENT_USER\7I

HKEY_CURRENT_USER\7I\DefaultIcon

HKEY_CURRENT_USER\7I\shell

HKEY_CURRENT_USER\7I\shell\
open

HKEY_CURRENT_USER\7I\shell\
open\command

HKEY_CURRENT_USER\7I\shell\
runas

HKEY_CURRENT_USER\7I\shell\
runas\command

HKEY_CURRENT_USER\fn8

HKEY_CURRENT_USER\fn8\DefaultIcon

HKEY_CURRENT_USER\fn8\shell

HKEY_CURRENT_USER\fn8\shell\
open

HKEY_CURRENT_USER\fn8\shell\
open\command

HKEY_CURRENT_USER\fn8\shell\
runas

HKEY_CURRENT_USER\fn8\shell\
runas\command

HKEY_CURRENT_USER\NY5

HKEY_CURRENT_USER\NY5\DefaultIcon

HKEY_CURRENT_USER\NY5\shell

HKEY_CURRENT_USER\NY5\shell\
open

HKEY_CURRENT_USER\NY5\shell\
open\command

HKEY_CURRENT_USER\NY5\shell\
runas

HKEY_CURRENT_USER\NY5\shell\
runas\command

HKEY_CURRENT_USER\4l

HKEY_CURRENT_USER\4l\DefaultIcon

HKEY_CURRENT_USER\4l\shell

HKEY_CURRENT_USER\4l\shell\
open

HKEY_CURRENT_USER\4l\shell\
open\command

HKEY_CURRENT_USER\4l\shell\
runas

HKEY_CURRENT_USER\4l\shell\
runas\command

HKEY_CURRENT_USER\mqs

HKEY_CURRENT_USER\mqs\DefaultIcon

HKEY_CURRENT_USER\mqs\shell

HKEY_CURRENT_USER\mqs\shell\
open

HKEY_CURRENT_USER\mqs\shell\
open\command

HKEY_CURRENT_USER\mqs\shell\
runas

HKEY_CURRENT_USER\mqs\shell\
runas\command

HKEY_CURRENT_USER\Yd

HKEY_CURRENT_USER\Yd\DefaultIcon

HKEY_CURRENT_USER\Yd\shell

HKEY_CURRENT_USER\Yd\shell\
open

HKEY_CURRENT_USER\Yd\shell\
open\command

HKEY_CURRENT_USER\Yd\shell\
runas

HKEY_CURRENT_USER\Yd\shell\
runas\command

HKEY_CURRENT_USER\0d

HKEY_CURRENT_USER\0d\DefaultIcon

HKEY_CURRENT_USER\0d\shell

HKEY_CURRENT_USER\0d\shell\
open

HKEY_CURRENT_USER\0d\shell\
open\command

HKEY_CURRENT_USER\0d\shell\
runas

HKEY_CURRENT_USER\0d\shell\
runas\command

HKEY_CURRENT_USER\Ry

HKEY_CURRENT_USER\Ry\DefaultIcon

HKEY_CURRENT_USER\Ry\shell

HKEY_CURRENT_USER\Ry\shell\
open

HKEY_CURRENT_USER\Ry\shell\
open\command

HKEY_CURRENT_USER\Ry\shell\
runas

HKEY_CURRENT_USER\Ry\shell\
runas\command

HKEY_CURRENT_USER\pn4

HKEY_CURRENT_USER\pn4\DefaultIcon

HKEY_CURRENT_USER\pn4\shell

HKEY_CURRENT_USER\pn4\shell\
open

HKEY_CURRENT_USER\pn4\shell\
open\command

HKEY_CURRENT_USER\pn4\shell\
runas

HKEY_CURRENT_USER\pn4\shell\
runas\command

HKEY_CURRENT_USER\E1x

HKEY_CURRENT_USER\E1x\DefaultIcon

HKEY_CURRENT_USER\E1x\shell

HKEY_CURRENT_USER\E1x\shell\
open

HKEY_CURRENT_USER\E1x\shell\
open\command

HKEY_CURRENT_USER\E1x\shell\
runas

HKEY_CURRENT_USER\E1x\shell\
runas\command

HKEY_CURRENT_USER\q8

HKEY_CURRENT_USER\q8\DefaultIcon

HKEY_CURRENT_USER\q8\shell

HKEY_CURRENT_USER\q8\shell\
open

HKEY_CURRENT_USER\q8\shell\
open\command

HKEY_CURRENT_USER\q8\shell\
runas

HKEY_CURRENT_USER\q8\shell\
runas\command

HKEY_CURRENT_USER\7Kd

HKEY_CURRENT_USER\7Kd\DefaultIcon

HKEY_CURRENT_USER\7Kd\shell

HKEY_CURRENT_USER\7Kd\shell\
open

HKEY_CURRENT_USER\7Kd\shell\
open\command

HKEY_CURRENT_USER\7Kd\shell\
runas

HKEY_CURRENT_USER\7Kd\shell\
runas\command

HKEY_CURRENT_USER\rlY

HKEY_CURRENT_USER\rlY\DefaultIcon

HKEY_CURRENT_USER\rlY\shell

HKEY_CURRENT_USER\rlY\shell\
open

HKEY_CURRENT_USER\rlY\shell\
open\command

HKEY_CURRENT_USER\rlY\shell\
runas

HKEY_CURRENT_USER\rlY\shell\
runas\command

HKEY_CURRENT_USER\80a

HKEY_CURRENT_USER\80a\DefaultIcon

HKEY_CURRENT_USER\80a\shell

HKEY_CURRENT_USER\80a\shell\
open

HKEY_CURRENT_USER\80a\shell\
open\command

HKEY_CURRENT_USER\80a\shell\
runas

HKEY_CURRENT_USER\80a\shell\
runas\command

HKEY_CURRENT_USER\A6

HKEY_CURRENT_USER\A6\DefaultIcon

HKEY_CURRENT_USER\A6\shell

HKEY_CURRENT_USER\A6\shell\
open

HKEY_CURRENT_USER\A6\shell\
open\command

HKEY_CURRENT_USER\A6\shell\
runas

HKEY_CURRENT_USER\A6\shell\
runas\command

HKEY_CURRENT_USER\7u

HKEY_CURRENT_USER\7u\DefaultIcon

HKEY_CURRENT_USER\7u\shell

HKEY_CURRENT_USER\7u\shell\
open

HKEY_CURRENT_USER\7u\shell\
open\command

HKEY_CURRENT_USER\7u\shell\
runas

HKEY_CURRENT_USER\7u\shell\
runas\command

HKEY_CURRENT_USER\ND

HKEY_CURRENT_USER\ND\DefaultIcon

HKEY_CURRENT_USER\ND\shell

HKEY_CURRENT_USER\ND\shell\
open

HKEY_CURRENT_USER\ND\shell\
open\command

HKEY_CURRENT_USER\ND\shell\
runas

HKEY_CURRENT_USER\ND\shell\
runas\command

HKEY_CURRENT_USER\63

HKEY_CURRENT_USER\63\DefaultIcon

HKEY_CURRENT_USER\63\shell

HKEY_CURRENT_USER\63\shell\
open

HKEY_CURRENT_USER\63\shell\
open\command

HKEY_CURRENT_USER\63\shell\
runas

HKEY_CURRENT_USER\63\shell\
runas\command

HKEY_CURRENT_USER\40

HKEY_CURRENT_USER\40\DefaultIcon

HKEY_CURRENT_USER\40\shell

HKEY_CURRENT_USER\40\shell\
open

HKEY_CURRENT_USER\40\shell\
open\command

HKEY_CURRENT_USER\40\shell\
runas

HKEY_CURRENT_USER\40\shell\
runas\command

HKEY_CURRENT_USER\by

HKEY_CURRENT_USER\by\DefaultIcon

HKEY_CURRENT_USER\by\shell

HKEY_CURRENT_USER\by\shell\
open

HKEY_CURRENT_USER\by\shell\
open\command

HKEY_CURRENT_USER\by\shell\
runas

HKEY_CURRENT_USER\by\shell\
runas\command

HKEY_CURRENT_USER\sQ

HKEY_CURRENT_USER\sQ\DefaultIcon

HKEY_CURRENT_USER\sQ\shell

HKEY_CURRENT_USER\sQ\shell\
open

HKEY_CURRENT_USER\sQ\shell\
open\command

HKEY_CURRENT_USER\sQ\shell\
runas

HKEY_CURRENT_USER\sQ\shell\
runas\command

HKEY_CURRENT_USER\1I

HKEY_CURRENT_USER\1I\DefaultIcon

HKEY_CURRENT_USER\1I\shell

HKEY_CURRENT_USER\1I\shell\
open

HKEY_CURRENT_USER\1I\shell\
open\command

HKEY_CURRENT_USER\1I\shell\
runas

HKEY_CURRENT_USER\1I\shell\
runas\command

HKEY_CURRENT_USER\nbn

HKEY_CURRENT_USER\nbn\DefaultIcon

HKEY_CURRENT_USER\nbn\shell

HKEY_CURRENT_USER\nbn\shell\
open

HKEY_CURRENT_USER\nbn\shell\
open\command

HKEY_CURRENT_USER\nbn\shell\
runas

HKEY_CURRENT_USER\nbn\shell\
runas\command

HKEY_CURRENT_USER\4H

HKEY_CURRENT_USER\4H\DefaultIcon

HKEY_CURRENT_USER\4H\shell

HKEY_CURRENT_USER\4H\shell\
open

HKEY_CURRENT_USER\4H\shell\
open\command

HKEY_CURRENT_USER\4H\shell\
runas

HKEY_CURRENT_USER\4H\shell\
runas\command

HKEY_CURRENT_USER\BK

HKEY_CURRENT_USER\BK\DefaultIcon

HKEY_CURRENT_USER\BK\shell

HKEY_CURRENT_USER\BK\shell\
open

HKEY_CURRENT_USER\BK\shell\
open\command

HKEY_CURRENT_USER\BK\shell\
runas

HKEY_CURRENT_USER\BK\shell\
runas\command

HKEY_CURRENT_USER\bf6

HKEY_CURRENT_USER\bf6\DefaultIcon

HKEY_CURRENT_USER\bf6\shell

HKEY_CURRENT_USER\bf6\shell\
open

HKEY_CURRENT_USER\bf6\shell\
open\command

HKEY_CURRENT_USER\bf6\shell\
runas

HKEY_CURRENT_USER\bf6\shell\
runas\command

HKEY_CURRENT_USER\gB7

HKEY_CURRENT_USER\gB7\DefaultIcon

HKEY_CURRENT_USER\gB7\shell

HKEY_CURRENT_USER\gB7\shell\
open

HKEY_CURRENT_USER\gB7\shell\
open\command

HKEY_CURRENT_USER\gB7\shell\
runas

HKEY_CURRENT_USER\gB7\shell\
runas\command

HKEY_CURRENT_USER\QC

HKEY_CURRENT_USER\QC\DefaultIcon

HKEY_CURRENT_USER\QC\shell

HKEY_CURRENT_USER\QC\shell\
open

HKEY_CURRENT_USER\QC\shell\
open\command

HKEY_CURRENT_USER\QC\shell\
runas

HKEY_CURRENT_USER\QC\shell\
runas\command

HKEY_CURRENT_USER\M1

HKEY_CURRENT_USER\M1\DefaultIcon

HKEY_CURRENT_USER\M1\shell

HKEY_CURRENT_USER\M1\shell\
open

HKEY_CURRENT_USER\M1\shell\
open\command

HKEY_CURRENT_USER\M1\shell\
runas

HKEY_CURRENT_USER\M1\shell\
runas\command

HKEY_CURRENT_USER\pg

HKEY_CURRENT_USER\pg\DefaultIcon

HKEY_CURRENT_USER\pg\shell

HKEY_CURRENT_USER\pg\shell\
open

HKEY_CURRENT_USER\pg\shell\
open\command

HKEY_CURRENT_USER\pg\shell\
runas

HKEY_CURRENT_USER\pg\shell\
runas\command

HKEY_CURRENT_USER\6u

HKEY_CURRENT_USER\6u\DefaultIcon

HKEY_CURRENT_USER\6u\shell

HKEY_CURRENT_USER\6u\shell\
open

HKEY_CURRENT_USER\6u\shell\
open\command

HKEY_CURRENT_USER\6u\shell\
runas

HKEY_CURRENT_USER\6u\shell\
runas\command

HKEY_CURRENT_USER\iI6

HKEY_CURRENT_USER\iI6\DefaultIcon

HKEY_CURRENT_USER\iI6\shell

HKEY_CURRENT_USER\iI6\shell\
open

HKEY_CURRENT_USER\iI6\shell\
open\command

HKEY_CURRENT_USER\iI6\shell\
runas

HKEY_CURRENT_USER\iI6\shell\
runas\command

HKEY_CURRENT_USER\4o

HKEY_CURRENT_USER\4o\DefaultIcon

HKEY_CURRENT_USER\4o\shell

HKEY_CURRENT_USER\4o\shell\
open

HKEY_CURRENT_USER\4o\shell\
open\command

HKEY_CURRENT_USER\4o\shell\
runas

HKEY_CURRENT_USER\4o\shell\
runas\command

HKEY_CURRENT_USER\Edd

HKEY_CURRENT_USER\Edd\DefaultIcon

HKEY_CURRENT_USER\Edd\shell

HKEY_CURRENT_USER\Edd\shell\
open

HKEY_CURRENT_USER\Edd\shell\
open\command

HKEY_CURRENT_USER\Edd\shell\
runas

HKEY_CURRENT_USER\Edd\shell\
runas\command

HKEY_CURRENT_USER\WMt

HKEY_CURRENT_USER\WMt\DefaultIcon

HKEY_CURRENT_USER\WMt\shell

HKEY_CURRENT_USER\WMt\shell\
open

HKEY_CURRENT_USER\WMt\shell\
open\command

HKEY_CURRENT_USER\WMt\shell\
runas

HKEY_CURRENT_USER\WMt\shell\
runas\command

HKEY_CURRENT_USER\23b

HKEY_CURRENT_USER\23b\DefaultIcon

HKEY_CURRENT_USER\23b\shell

HKEY_CURRENT_USER\23b\shell\
open

HKEY_CURRENT_USER\23b\shell\
open\command

HKEY_CURRENT_USER\23b\shell\
runas

HKEY_CURRENT_USER\23b\shell\
runas\command

HKEY_CURRENT_USER\y8P

HKEY_CURRENT_USER\y8P\DefaultIcon

HKEY_CURRENT_USER\y8P\shell

HKEY_CURRENT_USER\y8P\shell\
open

HKEY_CURRENT_USER\y8P\shell\
open\command

HKEY_CURRENT_USER\y8P\shell\
runas

HKEY_CURRENT_USER\y8P\shell\
runas\command

HKEY_CURRENT_USER\aL

HKEY_CURRENT_USER\aL\DefaultIcon

HKEY_CURRENT_USER\aL\shell

HKEY_CURRENT_USER\aL\shell\
open

HKEY_CURRENT_USER\aL\shell\
open\command

HKEY_CURRENT_USER\aL\shell\
runas

HKEY_CURRENT_USER\aL\shell\
runas\command

HKEY_CURRENT_USER\3b

HKEY_CURRENT_USER\3b\DefaultIcon

HKEY_CURRENT_USER\3b\shell

HKEY_CURRENT_USER\3b\shell\
open

HKEY_CURRENT_USER\3b\shell\
open\command

HKEY_CURRENT_USER\3b\shell\
runas

HKEY_CURRENT_USER\3b\shell\
runas\command

HKEY_CURRENT_USER\CW

HKEY_CURRENT_USER\CW\DefaultIcon

HKEY_CURRENT_USER\CW\shell

HKEY_CURRENT_USER\CW\shell\
open

HKEY_CURRENT_USER\CW\shell\
open\command

HKEY_CURRENT_USER\CW\shell\
runas

HKEY_CURRENT_USER\CW\shell\
runas\command

HKEY_CURRENT_USER\27

HKEY_CURRENT_USER\27\DefaultIcon

HKEY_CURRENT_USER\27\shell

HKEY_CURRENT_USER\27\shell\
open

HKEY_CURRENT_USER\27\shell\
open\command

HKEY_CURRENT_USER\27\shell\
runas

HKEY_CURRENT_USER\27\shell\
runas\command

HKEY_CURRENT_USER\5F

HKEY_CURRENT_USER\5F\DefaultIcon

HKEY_CURRENT_USER\5F\shell

HKEY_CURRENT_USER\5F\shell\
open

HKEY_CURRENT_USER\5F\shell\
open\command

HKEY_CURRENT_USER\5F\shell\
runas

HKEY_CURRENT_USER\5F\shell\
runas\command

HKEY_CURRENT_USER\I5

HKEY_CURRENT_USER\I5\DefaultIcon

HKEY_CURRENT_USER\I5\shell

HKEY_CURRENT_USER\I5\shell\
open

HKEY_CURRENT_USER\I5\shell\
open\command

HKEY_CURRENT_USER\I5\shell\
runas

HKEY_CURRENT_USER\I5\shell\
runas\command

HKEY_CURRENT_USER\FTe

HKEY_CURRENT_USER\FTe\DefaultIcon

HKEY_CURRENT_USER\FTe\shell

HKEY_CURRENT_USER\FTe\shell\
open

HKEY_CURRENT_USER\FTe\shell\
open\command

HKEY_CURRENT_USER\FTe\shell\
runas

HKEY_CURRENT_USER\FTe\shell\
runas\command

HKEY_CURRENT_USER\i4

HKEY_CURRENT_USER\i4\DefaultIcon

HKEY_CURRENT_USER\i4\shell

HKEY_CURRENT_USER\i4\shell\
open

HKEY_CURRENT_USER\i4\shell\
open\command

HKEY_CURRENT_USER\i4\shell\
runas

HKEY_CURRENT_USER\i4\shell\
runas\command

HKEY_CURRENT_USER\8P

HKEY_CURRENT_USER\8P\DefaultIcon

HKEY_CURRENT_USER\8P\shell

HKEY_CURRENT_USER\8P\shell\
open

HKEY_CURRENT_USER\8P\shell\
open\command

HKEY_CURRENT_USER\8P\shell\
runas

HKEY_CURRENT_USER\8P\shell\
runas\command

HKEY_CURRENT_USER\RoB

HKEY_CURRENT_USER\RoB\DefaultIcon

HKEY_CURRENT_USER\RoB\shell

HKEY_CURRENT_USER\RoB\shell\
open

HKEY_CURRENT_USER\RoB\shell\
open\command

HKEY_CURRENT_USER\RoB\shell\
runas

HKEY_CURRENT_USER\RoB\shell\
runas\command

HKEY_CURRENT_USER\n8

HKEY_CURRENT_USER\n8\DefaultIcon

HKEY_CURRENT_USER\n8\shell

HKEY_CURRENT_USER\n8\shell\
open

HKEY_CURRENT_USER\n8\shell\
open\command

HKEY_CURRENT_USER\n8\shell\
runas

HKEY_CURRENT_USER\n8\shell\
runas\command

HKEY_CURRENT_USER\14

HKEY_CURRENT_USER\14\DefaultIcon

HKEY_CURRENT_USER\14\shell

HKEY_CURRENT_USER\14\shell\
open

HKEY_CURRENT_USER\14\shell\
open\command

HKEY_CURRENT_USER\14\shell\
runas

HKEY_CURRENT_USER\14\shell\
runas\command

HKEY_CURRENT_USER\06o

HKEY_CURRENT_USER\06o\DefaultIcon

HKEY_CURRENT_USER\06o\shell

HKEY_CURRENT_USER\06o\shell\
open

HKEY_CURRENT_USER\06o\shell\
open\command

HKEY_CURRENT_USER\06o\shell\
runas

HKEY_CURRENT_USER\06o\shell\
runas\command

HKEY_CURRENT_USER\yK1

HKEY_CURRENT_USER\yK1\DefaultIcon

HKEY_CURRENT_USER\yK1\shell

HKEY_CURRENT_USER\yK1\shell\
open

HKEY_CURRENT_USER\yK1\shell\
open\command

HKEY_CURRENT_USER\yK1\shell\
runas

HKEY_CURRENT_USER\yK1\shell\
runas\command

HKEY_CURRENT_USER\4V0

HKEY_CURRENT_USER\4V0\DefaultIcon

HKEY_CURRENT_USER\4V0\shell

HKEY_CURRENT_USER\4V0\shell\
open

HKEY_CURRENT_USER\4V0\shell\
open\command

HKEY_CURRENT_USER\4V0\shell\
runas

HKEY_CURRENT_USER\4V0\shell\
runas\command

HKEY_CURRENT_USER\RM

HKEY_CURRENT_USER\RM\DefaultIcon

HKEY_CURRENT_USER\RM\shell

HKEY_CURRENT_USER\RM\shell\
open

HKEY_CURRENT_USER\RM\shell\
open\command

HKEY_CURRENT_USER\RM\shell\
runas

HKEY_CURRENT_USER\RM\shell\
runas\command

HKEY_CURRENT_USER\lg

HKEY_CURRENT_USER\lg\DefaultIcon

HKEY_CURRENT_USER\lg\shell

HKEY_CURRENT_USER\lg\shell\
open

HKEY_CURRENT_USER\lg\shell\
open\command

HKEY_CURRENT_USER\lg\shell\
runas

HKEY_CURRENT_USER\lg\shell\
runas\command

HKEY_CURRENT_USER\Ec

HKEY_CURRENT_USER\Ec\DefaultIcon

HKEY_CURRENT_USER\Ec\shell

HKEY_CURRENT_USER\Ec\shell\
open

HKEY_CURRENT_USER\Ec\shell\
open\command

HKEY_CURRENT_USER\Ec\shell\
runas

HKEY_CURRENT_USER\Ec\shell\
runas\command

HKEY_CURRENT_USER\71

HKEY_CURRENT_USER\71\DefaultIcon

HKEY_CURRENT_USER\71\shell

HKEY_CURRENT_USER\71\shell\
open

HKEY_CURRENT_USER\71\shell\
open\command

HKEY_CURRENT_USER\71\shell\
runas

HKEY_CURRENT_USER\71\shell\
runas\command

HKEY_CURRENT_USER\7P

HKEY_CURRENT_USER\7P\DefaultIcon

HKEY_CURRENT_USER\7P\shell

HKEY_CURRENT_USER\7P\shell\
open

HKEY_CURRENT_USER\7P\shell\
open\command

HKEY_CURRENT_USER\7P\shell\
runas

HKEY_CURRENT_USER\7P\shell\
runas\command

HKEY_CURRENT_USER\3DP

HKEY_CURRENT_USER\3DP\DefaultIcon

HKEY_CURRENT_USER\3DP\shell

HKEY_CURRENT_USER\3DP\shell\
open

HKEY_CURRENT_USER\3DP\shell\
open\command

HKEY_CURRENT_USER\3DP\shell\
runas

HKEY_CURRENT_USER\3DP\shell\
runas\command

HKEY_CURRENT_USER\E2

HKEY_CURRENT_USER\E2\DefaultIcon

HKEY_CURRENT_USER\E2\shell

HKEY_CURRENT_USER\E2\shell\
open

HKEY_CURRENT_USER\E2\shell\
open\command

HKEY_CURRENT_USER\E2\shell\
runas

HKEY_CURRENT_USER\E2\shell\
runas\command

HKEY_CURRENT_USER\86

HKEY_CURRENT_USER\86\DefaultIcon

HKEY_CURRENT_USER\86\shell

HKEY_CURRENT_USER\86\shell\
open

HKEY_CURRENT_USER\86\shell\
open\command

HKEY_CURRENT_USER\86\shell\
runas

HKEY_CURRENT_USER\86\shell\
runas\command

HKEY_CURRENT_USER\t01

HKEY_CURRENT_USER\t01\DefaultIcon

HKEY_CURRENT_USER\t01\shell

HKEY_CURRENT_USER\t01\shell\
open

HKEY_CURRENT_USER\t01\shell\
open\command

HKEY_CURRENT_USER\t01\shell\
runas

HKEY_CURRENT_USER\t01\shell\
runas\command

HKEY_CURRENT_USER\my

HKEY_CURRENT_USER\my\DefaultIcon

HKEY_CURRENT_USER\my\shell

HKEY_CURRENT_USER\my\shell\
open

HKEY_CURRENT_USER\my\shell\
open\command

HKEY_CURRENT_USER\my\shell\
runas

HKEY_CURRENT_USER\my\shell\
runas\command

HKEY_CURRENT_USER\5G

HKEY_CURRENT_USER\5G\DefaultIcon

HKEY_CURRENT_USER\5G\shell

HKEY_CURRENT_USER\5G\shell\
open

HKEY_CURRENT_USER\5G\shell\
open\command

HKEY_CURRENT_USER\5G\shell\
runas

HKEY_CURRENT_USER\5G\shell\
runas\command

HKEY_CURRENT_USER\hol

HKEY_CURRENT_USER\hol\DefaultIcon

HKEY_CURRENT_USER\hol\shell

HKEY_CURRENT_USER\hol\shell\
open

HKEY_CURRENT_USER\hol\shell\
open\command

HKEY_CURRENT_USER\hol\shell\
runas

HKEY_CURRENT_USER\hol\shell\
runas\command

HKEY_CURRENT_USER\8H

HKEY_CURRENT_USER\8H\DefaultIcon

HKEY_CURRENT_USER\8H\shell

HKEY_CURRENT_USER\8H\shell\
open

HKEY_CURRENT_USER\8H\shell\
open\command

HKEY_CURRENT_USER\8H\shell\
runas

HKEY_CURRENT_USER\8H\shell\
runas\command

HKEY_CURRENT_USER\iB

HKEY_CURRENT_USER\iB\DefaultIcon

HKEY_CURRENT_USER\iB\shell

HKEY_CURRENT_USER\iB\shell\
open

HKEY_CURRENT_USER\iB\shell\
open\command

HKEY_CURRENT_USER\iB\shell\
runas

HKEY_CURRENT_USER\iB\shell\
runas\command

HKEY_CURRENT_USER\56

HKEY_CURRENT_USER\56\DefaultIcon

HKEY_CURRENT_USER\56\shell

HKEY_CURRENT_USER\56\shell\
open

HKEY_CURRENT_USER\56\shell\
open\command

HKEY_CURRENT_USER\56\shell\
runas

HKEY_CURRENT_USER\56\shell\
runas\command

HKEY_CURRENT_USER\r31

HKEY_CURRENT_USER\r31\DefaultIcon

HKEY_CURRENT_USER\r31\shell

HKEY_CURRENT_USER\r31\shell\
open

HKEY_CURRENT_USER\r31\shell\
open\command

HKEY_CURRENT_USER\r31\shell\
runas

HKEY_CURRENT_USER\r31\shell\
runas\command

HKEY_CURRENT_USER\ti

HKEY_CURRENT_USER\ti\DefaultIcon

HKEY_CURRENT_USER\ti\shell

HKEY_CURRENT_USER\ti\shell\
open

HKEY_CURRENT_USER\ti\shell\
open\command

HKEY_CURRENT_USER\ti\shell\
runas

HKEY_CURRENT_USER\ti\shell\
runas\command

HKEY_CURRENT_USER\UW

HKEY_CURRENT_USER\UW\DefaultIcon

HKEY_CURRENT_USER\UW\shell

HKEY_CURRENT_USER\UW\shell\
open

HKEY_CURRENT_USER\UW\shell\
open\command

HKEY_CURRENT_USER\UW\shell\
runas

HKEY_CURRENT_USER\UW\shell\
runas\command

HKEY_CURRENT_USER\8jV

HKEY_CURRENT_USER\8jV\DefaultIcon

HKEY_CURRENT_USER\8jV\shell

HKEY_CURRENT_USER\8jV\shell\
open

HKEY_CURRENT_USER\8jV\shell\
open\command

HKEY_CURRENT_USER\8jV\shell\
runas

HKEY_CURRENT_USER\8jV\shell\
runas\command

HKEY_CURRENT_USER\s25

HKEY_CURRENT_USER\s25\DefaultIcon

HKEY_CURRENT_USER\s25\shell

HKEY_CURRENT_USER\s25\shell\
open

HKEY_CURRENT_USER\s25\shell\
open\command

HKEY_CURRENT_USER\s25\shell\
runas

HKEY_CURRENT_USER\s25\shell\
runas\command

HKEY_CURRENT_USER\03v

HKEY_CURRENT_USER\03v\DefaultIcon

HKEY_CURRENT_USER\03v\shell

HKEY_CURRENT_USER\03v\shell\
open

HKEY_CURRENT_USER\03v\shell\
open\command

HKEY_CURRENT_USER\03v\shell\
runas

HKEY_CURRENT_USER\03v\shell\
runas\command

HKEY_CURRENT_USER\7yk

HKEY_CURRENT_USER\7yk\DefaultIcon

HKEY_CURRENT_USER\7yk\shell

HKEY_CURRENT_USER\7yk\shell\
open

HKEY_CURRENT_USER\7yk\shell\
open\command

HKEY_CURRENT_USER\7yk\shell\
runas

HKEY_CURRENT_USER\7yk\shell\
runas\command

HKEY_CURRENT_USER\qu

HKEY_CURRENT_USER\qu\DefaultIcon

HKEY_CURRENT_USER\qu\shell

HKEY_CURRENT_USER\qu\shell\
open

HKEY_CURRENT_USER\qu\shell\
open\command

HKEY_CURRENT_USER\qu\shell\
runas

HKEY_CURRENT_USER\qu\shell\
runas\command

HKEY_CURRENT_USER\6y

HKEY_CURRENT_USER\6y\DefaultIcon

HKEY_CURRENT_USER\6y\shell

HKEY_CURRENT_USER\6y\shell\
open

HKEY_CURRENT_USER\6y\shell\
open\command

HKEY_CURRENT_USER\6y\shell\
runas

HKEY_CURRENT_USER\6y\shell\
runas\command

HKEY_CURRENT_USER\bkk

HKEY_CURRENT_USER\bkk\DefaultIcon

HKEY_CURRENT_USER\bkk\shell

HKEY_CURRENT_USER\bkk\shell\
open

HKEY_CURRENT_USER\bkk\shell\
open\command

HKEY_CURRENT_USER\bkk\shell\
runas

HKEY_CURRENT_USER\bkk\shell\
runas\command

HKEY_CURRENT_USER\6L

HKEY_CURRENT_USER\6L\DefaultIcon

HKEY_CURRENT_USER\6L\shell

HKEY_CURRENT_USER\6L\shell\
open

HKEY_CURRENT_USER\6L\shell\
open\command

HKEY_CURRENT_USER\6L\shell\
runas

HKEY_CURRENT_USER\6L\shell\
runas\command

HKEY_CURRENT_USER\uP

HKEY_CURRENT_USER\uP\DefaultIcon

HKEY_CURRENT_USER\uP\shell

HKEY_CURRENT_USER\uP\shell\
open

HKEY_CURRENT_USER\uP\shell\
open\command

HKEY_CURRENT_USER\uP\shell\
runas

HKEY_CURRENT_USER\uP\shell\
runas\command

HKEY_CURRENT_USER\ImH

HKEY_CURRENT_USER\ImH\DefaultIcon

HKEY_CURRENT_USER\ImH\shell

HKEY_CURRENT_USER\ImH\shell\
open

HKEY_CURRENT_USER\ImH\shell\
open\command

HKEY_CURRENT_USER\ImH\shell\
runas

HKEY_CURRENT_USER\ImH\shell\
runas\command

HKEY_CURRENT_USER\J7

HKEY_CURRENT_USER\J7\DefaultIcon

HKEY_CURRENT_USER\J7\shell

HKEY_CURRENT_USER\J7\shell\
open

HKEY_CURRENT_USER\J7\shell\
open\command

HKEY_CURRENT_USER\J7\shell\
runas

HKEY_CURRENT_USER\J7\shell\
runas\command

HKEY_CURRENT_USER\xc

HKEY_CURRENT_USER\xc\DefaultIcon

HKEY_CURRENT_USER\xc\shell

HKEY_CURRENT_USER\xc\shell\
open

HKEY_CURRENT_USER\xc\shell\
open\command

HKEY_CURRENT_USER\xc\shell\
runas

HKEY_CURRENT_USER\xc\shell\
runas\command

HKEY_CURRENT_USER\CN

HKEY_CURRENT_USER\CN\DefaultIcon

HKEY_CURRENT_USER\CN\shell

HKEY_CURRENT_USER\CN\shell\
open

HKEY_CURRENT_USER\CN\shell\
open\command

HKEY_CURRENT_USER\CN\shell\
runas

HKEY_CURRENT_USER\CN\shell\
runas\command

HKEY_CURRENT_USER\8I

HKEY_CURRENT_USER\8I\DefaultIcon

HKEY_CURRENT_USER\8I\shell

HKEY_CURRENT_USER\8I\shell\
open

HKEY_CURRENT_USER\8I\shell\
open\command

HKEY_CURRENT_USER\8I\shell\
runas

HKEY_CURRENT_USER\8I\shell\
runas\command

HKEY_CURRENT_USER\Rc

HKEY_CURRENT_USER\Rc\DefaultIcon

HKEY_CURRENT_USER\Rc\shell

HKEY_CURRENT_USER\Rc\shell\
open

HKEY_CURRENT_USER\Rc\shell\
open\command

HKEY_CURRENT_USER\Rc\shell\
runas

HKEY_CURRENT_USER\Rc\shell\
runas\command

HKEY_CURRENT_USER\32A

HKEY_CURRENT_USER\32A\DefaultIcon

HKEY_CURRENT_USER\32A\shell

HKEY_CURRENT_USER\32A\shell\
open

HKEY_CURRENT_USER\32A\shell\
open\command

HKEY_CURRENT_USER\32A\shell\
runas

HKEY_CURRENT_USER\32A\shell\
runas\command

HKEY_CURRENT_USER\0K

HKEY_CURRENT_USER\0K\DefaultIcon

HKEY_CURRENT_USER\0K\shell

HKEY_CURRENT_USER\0K\shell\
open

HKEY_CURRENT_USER\0K\shell\
open\command

HKEY_CURRENT_USER\0K\shell\
runas

HKEY_CURRENT_USER\0K\shell\
runas\command

HKEY_CURRENT_USER\y0G

HKEY_CURRENT_USER\y0G\DefaultIcon

HKEY_CURRENT_USER\y0G\shell

HKEY_CURRENT_USER\y0G\shell\
open

HKEY_CURRENT_USER\y0G\shell\
open\command

HKEY_CURRENT_USER\y0G\shell\
runas

HKEY_CURRENT_USER\y0G\shell\
runas\command

HKEY_CURRENT_USER\S7

HKEY_CURRENT_USER\S7\DefaultIcon

HKEY_CURRENT_USER\S7\shell

HKEY_CURRENT_USER\S7\shell\
open

HKEY_CURRENT_USER\S7\shell\
open\command

HKEY_CURRENT_USER\S7\shell\
runas

HKEY_CURRENT_USER\S7\shell\
runas\command

HKEY_CURRENT_USER\5L6

HKEY_CURRENT_USER\5L6\DefaultIcon

HKEY_CURRENT_USER\5L6\shell

HKEY_CURRENT_USER\5L6\shell\
open

HKEY_CURRENT_USER\5L6\shell\
open\command

HKEY_CURRENT_USER\5L6\shell\
runas

HKEY_CURRENT_USER\5L6\shell\
runas\command

HKEY_CURRENT_USER\7D

HKEY_CURRENT_USER\7D\DefaultIcon

HKEY_CURRENT_USER\7D\shell

HKEY_CURRENT_USER\7D\shell\
open

HKEY_CURRENT_USER\7D\shell\
open\command

HKEY_CURRENT_USER\7D\shell\
runas

HKEY_CURRENT_USER\7D\shell\
runas\command

HKEY_CURRENT_USER\1W

HKEY_CURRENT_USER\1W\DefaultIcon

HKEY_CURRENT_USER\1W\shell

HKEY_CURRENT_USER\1W\shell\
open

HKEY_CURRENT_USER\1W\shell\
open\command

HKEY_CURRENT_USER\1W\shell\
runas

HKEY_CURRENT_USER\1W\shell\
runas\command

HKEY_CURRENT_USER\iX2

HKEY_CURRENT_USER\iX2\DefaultIcon

HKEY_CURRENT_USER\iX2\shell

HKEY_CURRENT_USER\iX2\shell\
open

HKEY_CURRENT_USER\iX2\shell\
open\command

HKEY_CURRENT_USER\iX2\shell\
runas

HKEY_CURRENT_USER\iX2\shell\
runas\command

HKEY_CURRENT_USER\lH3

HKEY_CURRENT_USER\lH3\DefaultIcon

HKEY_CURRENT_USER\lH3\shell

HKEY_CURRENT_USER\lH3\shell\
open

HKEY_CURRENT_USER\lH3\shell\
open\command

HKEY_CURRENT_USER\lH3\shell\
runas

HKEY_CURRENT_USER\lH3\shell\
runas\command

HKEY_CURRENT_USER\6v

HKEY_CURRENT_USER\6v\DefaultIcon

HKEY_CURRENT_USER\6v\shell

HKEY_CURRENT_USER\6v\shell\
open

HKEY_CURRENT_USER\6v\shell\
open\command

HKEY_CURRENT_USER\6v\shell\
runas

HKEY_CURRENT_USER\6v\shell\
runas\command

HKEY_CURRENT_USER\gF7

HKEY_CURRENT_USER\gF7\DefaultIcon

HKEY_CURRENT_USER\gF7\shell

HKEY_CURRENT_USER\gF7\shell\
open

HKEY_CURRENT_USER\gF7\shell\
open\command

HKEY_CURRENT_USER\gF7\shell\
runas

HKEY_CURRENT_USER\gF7\shell\
runas\command

HKEY_CURRENT_USER\T3

HKEY_CURRENT_USER\T3\DefaultIcon

HKEY_CURRENT_USER\T3\shell

HKEY_CURRENT_USER\T3\shell\
open

HKEY_CURRENT_USER\T3\shell\
open\command

HKEY_CURRENT_USER\T3\shell\
runas

HKEY_CURRENT_USER\T3\shell\
runas\command

HKEY_CURRENT_USER\PK

HKEY_CURRENT_USER\PK\DefaultIcon

HKEY_CURRENT_USER\PK\shell

HKEY_CURRENT_USER\PK\shell\
open

HKEY_CURRENT_USER\PK\shell\
open\command

HKEY_CURRENT_USER\PK\shell\
runas

HKEY_CURRENT_USER\PK\shell\
runas\command

HKEY_CURRENT_USER\h1

HKEY_CURRENT_USER\h1\DefaultIcon

HKEY_CURRENT_USER\h1\shell

HKEY_CURRENT_USER\h1\shell\
open

HKEY_CURRENT_USER\h1\shell\
open\command

HKEY_CURRENT_USER\h1\shell\
runas

HKEY_CURRENT_USER\h1\shell\
runas\command

HKEY_CURRENT_USER\DA

HKEY_CURRENT_USER\DA\DefaultIcon

HKEY_CURRENT_USER\DA\shell

HKEY_CURRENT_USER\DA\shell\
open

HKEY_CURRENT_USER\DA\shell\
open\command

HKEY_CURRENT_USER\DA\shell\
runas

HKEY_CURRENT_USER\DA\shell\
runas\command

HKEY_CURRENT_USER\sW

HKEY_CURRENT_USER\sW\DefaultIcon

HKEY_CURRENT_USER\sW\shell

HKEY_CURRENT_USER\sW\shell\
open

HKEY_CURRENT_USER\sW\shell\
open\command

HKEY_CURRENT_USER\sW\shell\
runas

HKEY_CURRENT_USER\sW\shell\
runas\command

HKEY_CURRENT_USER\R6

HKEY_CURRENT_USER\R6\DefaultIcon

HKEY_CURRENT_USER\R6\shell

HKEY_CURRENT_USER\R6\shell\
open

HKEY_CURRENT_USER\R6\shell\
open\command

HKEY_CURRENT_USER\R6\shell\
runas

HKEY_CURRENT_USER\R6\shell\
runas\command

HKEY_CURRENT_USER\51Q

HKEY_CURRENT_USER\51Q\DefaultIcon

HKEY_CURRENT_USER\51Q\shell

HKEY_CURRENT_USER\51Q\shell\
open

HKEY_CURRENT_USER\51Q\shell\
open\command

HKEY_CURRENT_USER\51Q\shell\
runas

HKEY_CURRENT_USER\51Q\shell\
runas\command

HKEY_CURRENT_USER\1j8

HKEY_CURRENT_USER\1j8\DefaultIcon

HKEY_CURRENT_USER\1j8\shell

HKEY_CURRENT_USER\1j8\shell\
open

HKEY_CURRENT_USER\1j8\shell\
open\command

HKEY_CURRENT_USER\1j8\shell\
runas

HKEY_CURRENT_USER\1j8\shell\
runas\command

HKEY_CURRENT_USER\8Ot

HKEY_CURRENT_USER\8Ot\DefaultIcon

HKEY_CURRENT_USER\8Ot\shell

HKEY_CURRENT_USER\8Ot\shell\
open

HKEY_CURRENT_USER\8Ot\shell\
open\command

HKEY_CURRENT_USER\8Ot\shell\
runas

HKEY_CURRENT_USER\8Ot\shell\
runas\command

HKEY_CURRENT_USER\X4

HKEY_CURRENT_USER\X4\DefaultIcon

HKEY_CURRENT_USER\X4\shell

HKEY_CURRENT_USER\X4\shell\
open

HKEY_CURRENT_USER\X4\shell\
open\command

HKEY_CURRENT_USER\X4\shell\
runas

HKEY_CURRENT_USER\X4\shell\
runas\command

HKEY_CURRENT_USER\TO

HKEY_CURRENT_USER\TO\DefaultIcon

HKEY_CURRENT_USER\TO\shell

HKEY_CURRENT_USER\TO\shell\
open

HKEY_CURRENT_USER\TO\shell\
open\command

HKEY_CURRENT_USER\TO\shell\
runas

HKEY_CURRENT_USER\TO\shell\
runas\command

HKEY_CURRENT_USER\873

HKEY_CURRENT_USER\873\DefaultIcon

HKEY_CURRENT_USER\873\shell

HKEY_CURRENT_USER\873\shell\
open

HKEY_CURRENT_USER\873\shell\
open\command

HKEY_CURRENT_USER\873\shell\
runas

HKEY_CURRENT_USER\873\shell\
runas\command

HKEY_CURRENT_USER\MVr

HKEY_CURRENT_USER\MVr\DefaultIcon

HKEY_CURRENT_USER\MVr\shell

HKEY_CURRENT_USER\MVr\shell\
open

HKEY_CURRENT_USER\MVr\shell\
open\command

HKEY_CURRENT_USER\MVr\shell\
runas

HKEY_CURRENT_USER\MVr\shell\
runas\command

HKEY_CURRENT_USER\qP

HKEY_CURRENT_USER\qP\DefaultIcon

HKEY_CURRENT_USER\qP\shell

HKEY_CURRENT_USER\qP\shell\
open

HKEY_CURRENT_USER\qP\shell\
open\command

HKEY_CURRENT_USER\qP\shell\
runas

HKEY_CURRENT_USER\qP\shell\
runas\command

HKEY_CURRENT_USER\E2O

HKEY_CURRENT_USER\E2O\DefaultIcon

HKEY_CURRENT_USER\E2O\shell

HKEY_CURRENT_USER\E2O\shell\
open

HKEY_CURRENT_USER\E2O\shell\
open\command

HKEY_CURRENT_USER\E2O\shell\
runas

HKEY_CURRENT_USER\E2O\shell\
runas\command

HKEY_CURRENT_USER\KYp

HKEY_CURRENT_USER\KYp\DefaultIcon

HKEY_CURRENT_USER\KYp\shell

HKEY_CURRENT_USER\KYp\shell\
open

HKEY_CURRENT_USER\KYp\shell\
open\command

HKEY_CURRENT_USER\KYp\shell\
runas

HKEY_CURRENT_USER\KYp\shell\
runas\command

HKEY_CURRENT_USER\4g

HKEY_CURRENT_USER\4g\DefaultIcon

HKEY_CURRENT_USER\4g\shell

HKEY_CURRENT_USER\4g\shell\
open

HKEY_CURRENT_USER\4g\shell\
open\command

HKEY_CURRENT_USER\4g\shell\
runas

HKEY_CURRENT_USER\4g\shell\
runas\command

HKEY_CURRENT_USER\oSk

HKEY_CURRENT_USER\oSk\DefaultIcon

HKEY_CURRENT_USER\oSk\shell

HKEY_CURRENT_USER\oSk\shell\
open

HKEY_CURRENT_USER\oSk\shell\
open\command

HKEY_CURRENT_USER\oSk\shell\
runas

HKEY_CURRENT_USER\oSk\shell\
runas\command

HKEY_CURRENT_USER\kL

HKEY_CURRENT_USER\kL\DefaultIcon

HKEY_CURRENT_USER\kL\shell

HKEY_CURRENT_USER\kL\shell\
open

HKEY_CURRENT_USER\kL\shell\
open\command

HKEY_CURRENT_USER\kL\shell\
runas

HKEY_CURRENT_USER\kL\shell\
runas\command

HKEY_CURRENT_USER\7A

HKEY_CURRENT_USER\7A\DefaultIcon

HKEY_CURRENT_USER\7A\shell

HKEY_CURRENT_USER\7A\shell\
open

HKEY_CURRENT_USER\7A\shell\
open\command

HKEY_CURRENT_USER\7A\shell\
runas

HKEY_CURRENT_USER\7A\shell\
runas\command

HKEY_CURRENT_USER\J2

HKEY_CURRENT_USER\J2\DefaultIcon

HKEY_CURRENT_USER\J2\shell

HKEY_CURRENT_USER\J2\shell\
open

HKEY_CURRENT_USER\J2\shell\
open\command

HKEY_CURRENT_USER\J2\shell\
runas

HKEY_CURRENT_USER\J2\shell\
runas\command

HKEY_CURRENT_USER\Wiw

HKEY_CURRENT_USER\Wiw\DefaultIcon

HKEY_CURRENT_USER\Wiw\shell

HKEY_CURRENT_USER\Wiw\shell\
open

HKEY_CURRENT_USER\Wiw\shell\
open\command

HKEY_CURRENT_USER\Wiw\shell\
runas

HKEY_CURRENT_USER\Wiw\shell\
runas\command

HKEY_CURRENT_USER\4X5

HKEY_CURRENT_USER\4X5\DefaultIcon

HKEY_CURRENT_USER\4X5\shell

HKEY_CURRENT_USER\4X5\shell\
open

HKEY_CURRENT_USER\4X5\shell\
open\command

HKEY_CURRENT_USER\4X5\shell\
runas

HKEY_CURRENT_USER\4X5\shell\
runas\command

HKEY_CURRENT_USER\0n3

HKEY_CURRENT_USER\0n3\DefaultIcon

HKEY_CURRENT_USER\0n3\shell

HKEY_CURRENT_USER\0n3\shell\
open

HKEY_CURRENT_USER\0n3\shell\
open\command

HKEY_CURRENT_USER\0n3\shell\
runas

HKEY_CURRENT_USER\0n3\shell\
runas\command

HKEY_CURRENT_USER\5R

HKEY_CURRENT_USER\5R\DefaultIcon

HKEY_CURRENT_USER\5R\shell

HKEY_CURRENT_USER\5R\shell\
open

HKEY_CURRENT_USER\5R\shell\
open\command

HKEY_CURRENT_USER\5R\shell\
runas

HKEY_CURRENT_USER\5R\shell\
runas\command

HKEY_CURRENT_USER\2U8

HKEY_CURRENT_USER\2U8\DefaultIcon

HKEY_CURRENT_USER\2U8\shell

HKEY_CURRENT_USER\2U8\shell\
open

HKEY_CURRENT_USER\2U8\shell\
open\command

HKEY_CURRENT_USER\2U8\shell\
runas

HKEY_CURRENT_USER\2U8\shell\
runas\command

HKEY_CURRENT_USER\3G

HKEY_CURRENT_USER\3G\DefaultIcon

HKEY_CURRENT_USER\3G\shell

HKEY_CURRENT_USER\3G\shell\
open

HKEY_CURRENT_USER\3G\shell\
open\command

HKEY_CURRENT_USER\3G\shell\
runas

HKEY_CURRENT_USER\3G\shell\
runas\command

HKEY_CURRENT_USER\ji

HKEY_CURRENT_USER\ji\DefaultIcon

HKEY_CURRENT_USER\ji\shell

HKEY_CURRENT_USER\ji\shell\
open

HKEY_CURRENT_USER\ji\shell\
open\command

HKEY_CURRENT_USER\ji\shell\
runas

HKEY_CURRENT_USER\ji\shell\
runas\command

HKEY_CURRENT_USER\H46

HKEY_CURRENT_USER\H46\DefaultIcon

HKEY_CURRENT_USER\H46\shell

HKEY_CURRENT_USER\H46\shell\
open

HKEY_CURRENT_USER\H46\shell\
open\command

HKEY_CURRENT_USER\H46\shell\
runas

HKEY_CURRENT_USER\H46\shell\
runas\command

HKEY_CURRENT_USER\aJd

HKEY_CURRENT_USER\aJd\DefaultIcon

HKEY_CURRENT_USER\aJd\shell

HKEY_CURRENT_USER\aJd\shell\
open

HKEY_CURRENT_USER\aJd\shell\
open\command

HKEY_CURRENT_USER\aJd\shell\
runas

HKEY_CURRENT_USER\aJd\shell\
runas\command

HKEY_CURRENT_USER\31

HKEY_CURRENT_USER\31\DefaultIcon

HKEY_CURRENT_USER\31\shell

HKEY_CURRENT_USER\31\shell\
open

HKEY_CURRENT_USER\31\shell\
open\command

HKEY_CURRENT_USER\31\shell\
runas

HKEY_CURRENT_USER\31\shell\
runas\command

HKEY_CURRENT_USER\dLM

HKEY_CURRENT_USER\dLM\DefaultIcon

HKEY_CURRENT_USER\dLM\shell

HKEY_CURRENT_USER\dLM\shell\
open

HKEY_CURRENT_USER\dLM\shell\
open\command

HKEY_CURRENT_USER\dLM\shell\
runas

HKEY_CURRENT_USER\dLM\shell\
runas\command

HKEY_CURRENT_USER\8vh

HKEY_CURRENT_USER\8vh\DefaultIcon

HKEY_CURRENT_USER\8vh\shell

HKEY_CURRENT_USER\8vh\shell\
open

HKEY_CURRENT_USER\8vh\shell\
open\command

HKEY_CURRENT_USER\8vh\shell\
runas

HKEY_CURRENT_USER\8vh\shell\
runas\command

HKEY_CURRENT_USER\ga

HKEY_CURRENT_USER\ga\DefaultIcon

HKEY_CURRENT_USER\ga\shell

HKEY_CURRENT_USER\ga\shell\
open

HKEY_CURRENT_USER\ga\shell\
open\command

HKEY_CURRENT_USER\ga\shell\
runas

HKEY_CURRENT_USER\ga\shell\
runas\command

HKEY_CURRENT_USER\TD

HKEY_CURRENT_USER\TD\DefaultIcon

HKEY_CURRENT_USER\TD\shell

HKEY_CURRENT_USER\TD\shell\
open

HKEY_CURRENT_USER\TD\shell\
open\command

HKEY_CURRENT_USER\TD\shell\
runas

HKEY_CURRENT_USER\TD\shell\
runas\command

HKEY_CURRENT_USER\AS

HKEY_CURRENT_USER\AS\DefaultIcon

HKEY_CURRENT_USER\AS\shell

HKEY_CURRENT_USER\AS\shell\
open

HKEY_CURRENT_USER\AS\shell\
open\command

HKEY_CURRENT_USER\AS\shell\
runas

HKEY_CURRENT_USER\AS\shell\
runas\command

HKEY_CURRENT_USER\cvl

HKEY_CURRENT_USER\cvl\DefaultIcon

HKEY_CURRENT_USER\cvl\shell

HKEY_CURRENT_USER\cvl\shell\
open

HKEY_CURRENT_USER\cvl\shell\
open\command

HKEY_CURRENT_USER\cvl\shell\
runas

HKEY_CURRENT_USER\cvl\shell\
runas\command

HKEY_CURRENT_USER\F2

HKEY_CURRENT_USER\F2\DefaultIcon

HKEY_CURRENT_USER\F2\shell

HKEY_CURRENT_USER\F2\shell\
open

HKEY_CURRENT_USER\F2\shell\
open\command

HKEY_CURRENT_USER\F2\shell\
runas

HKEY_CURRENT_USER\F2\shell\
runas\command

HKEY_CURRENT_USER\MM7

HKEY_CURRENT_USER\MM7\DefaultIcon

HKEY_CURRENT_USER\MM7\shell

HKEY_CURRENT_USER\MM7\shell\
open

HKEY_CURRENT_USER\MM7\shell\
open\command

HKEY_CURRENT_USER\MM7\shell\
runas

HKEY_CURRENT_USER\MM7\shell\
runas\command

HKEY_CURRENT_USER\eb

HKEY_CURRENT_USER\eb\DefaultIcon

HKEY_CURRENT_USER\eb\shell

HKEY_CURRENT_USER\eb\shell\
open

HKEY_CURRENT_USER\eb\shell\
open\command

HKEY_CURRENT_USER\eb\shell\
runas

HKEY_CURRENT_USER\eb\shell\
runas\command

HKEY_CURRENT_USER\LXr

HKEY_CURRENT_USER\LXr\DefaultIcon

HKEY_CURRENT_USER\LXr\shell

HKEY_CURRENT_USER\LXr\shell\
open

HKEY_CURRENT_USER\LXr\shell\
open\command

HKEY_CURRENT_USER\LXr\shell\
runas

HKEY_CURRENT_USER\LXr\shell\
runas\command

HKEY_CURRENT_USER\rp

HKEY_CURRENT_USER\rp\DefaultIcon

HKEY_CURRENT_USER\rp\shell

HKEY_CURRENT_USER\rp\shell\
open

HKEY_CURRENT_USER\rp\shell\
open\command

HKEY_CURRENT_USER\rp\shell\
runas

HKEY_CURRENT_USER\rp\shell\
runas\command

HKEY_CURRENT_USER\iXP

HKEY_CURRENT_USER\iXP\DefaultIcon

HKEY_CURRENT_USER\iXP\shell

HKEY_CURRENT_USER\iXP\shell\
open

HKEY_CURRENT_USER\iXP\shell\
open\command

HKEY_CURRENT_USER\iXP\shell\
runas

HKEY_CURRENT_USER\iXP\shell\
runas\command

HKEY_CURRENT_USER\rcN

HKEY_CURRENT_USER\rcN\DefaultIcon

HKEY_CURRENT_USER\rcN\shell

HKEY_CURRENT_USER\rcN\shell\
open

HKEY_CURRENT_USER\rcN\shell\
open\command

HKEY_CURRENT_USER\rcN\shell\
runas

HKEY_CURRENT_USER\rcN\shell\
runas\command

HKEY_CURRENT_USER\61

HKEY_CURRENT_USER\61\DefaultIcon

HKEY_CURRENT_USER\61\shell

HKEY_CURRENT_USER\61\shell\
open

HKEY_CURRENT_USER\61\shell\
open\command

HKEY_CURRENT_USER\61\shell\
runas

HKEY_CURRENT_USER\61\shell\
runas\command

HKEY_CURRENT_USER\ne

HKEY_CURRENT_USER\ne\DefaultIcon

HKEY_CURRENT_USER\ne\shell

HKEY_CURRENT_USER\ne\shell\
open

HKEY_CURRENT_USER\ne\shell\
open\command

HKEY_CURRENT_USER\ne\shell\
runas

HKEY_CURRENT_USER\ne\shell\
runas\command

HKEY_CURRENT_USER\P8V

HKEY_CURRENT_USER\P8V\DefaultIcon

HKEY_CURRENT_USER\P8V\shell

HKEY_CURRENT_USER\P8V\shell\
open

HKEY_CURRENT_USER\P8V\shell\
open\command

HKEY_CURRENT_USER\P8V\shell\
runas

HKEY_CURRENT_USER\P8V\shell\
runas\command

HKEY_CURRENT_USER\1Un

HKEY_CURRENT_USER\1Un\DefaultIcon

HKEY_CURRENT_USER\1Un\shell

HKEY_CURRENT_USER\1Un\shell\
open

HKEY_CURRENT_USER\1Un\shell\
open\command

HKEY_CURRENT_USER\1Un\shell\
runas

HKEY_CURRENT_USER\1Un\shell\
runas\command

HKEY_CURRENT_USER\lM

HKEY_CURRENT_USER\lM\DefaultIcon

HKEY_CURRENT_USER\lM\shell

HKEY_CURRENT_USER\lM\shell\
open

HKEY_CURRENT_USER\lM\shell\
open\command

HKEY_CURRENT_USER\lM\shell\
runas

HKEY_CURRENT_USER\lM\shell\
runas\command

HKEY_CURRENT_USER\6d

HKEY_CURRENT_USER\6d\DefaultIcon

HKEY_CURRENT_USER\6d\shell

HKEY_CURRENT_USER\6d\shell\
open

HKEY_CURRENT_USER\6d\shell\
open\command

HKEY_CURRENT_USER\6d\shell\
runas

HKEY_CURRENT_USER\6d\shell\
runas\command

HKEY_CURRENT_USER\8cx

HKEY_CURRENT_USER\8cx\DefaultIcon

HKEY_CURRENT_USER\8cx\shell

HKEY_CURRENT_USER\8cx\shell\
open

HKEY_CURRENT_USER\8cx\shell\
open\command

HKEY_CURRENT_USER\8cx\shell\
runas

HKEY_CURRENT_USER\8cx\shell\
runas\command

HKEY_CURRENT_USER\mD4

HKEY_CURRENT_USER\mD4\DefaultIcon

HKEY_CURRENT_USER\mD4\shell

HKEY_CURRENT_USER\mD4\shell\
open

HKEY_CURRENT_USER\mD4\shell\
open\command

HKEY_CURRENT_USER\mD4\shell\
runas

HKEY_CURRENT_USER\mD4\shell\
runas\command

HKEY_CURRENT_USER\FB2

HKEY_CURRENT_USER\FB2\DefaultIcon

HKEY_CURRENT_USER\FB2\shell

HKEY_CURRENT_USER\FB2\shell\
open

HKEY_CURRENT_USER\FB2\shell\
open\command

HKEY_CURRENT_USER\FB2\shell\
runas

HKEY_CURRENT_USER\FB2\shell\
runas\command

HKEY_CURRENT_USER\D3t

HKEY_CURRENT_USER\D3t\DefaultIcon

HKEY_CURRENT_USER\D3t\shell

HKEY_CURRENT_USER\D3t\shell\
open

HKEY_CURRENT_USER\D3t\shell\
open\command

HKEY_CURRENT_USER\D3t\shell\
runas

HKEY_CURRENT_USER\D3t\shell\
runas\command

HKEY_CURRENT_USER\Qe

HKEY_CURRENT_USER\Qe\DefaultIcon

HKEY_CURRENT_USER\Qe\shell

HKEY_CURRENT_USER\Qe\shell\
open

HKEY_CURRENT_USER\Qe\shell\
open\command

HKEY_CURRENT_USER\Qe\shell\
runas

HKEY_CURRENT_USER\Qe\shell\
runas\command

HKEY_CURRENT_USER\72

HKEY_CURRENT_USER\72\DefaultIcon

HKEY_CURRENT_USER\72\shell

HKEY_CURRENT_USER\72\shell\
open

HKEY_CURRENT_USER\72\shell\
open\command

HKEY_CURRENT_USER\72\shell\
runas

HKEY_CURRENT_USER\72\shell\
runas\command

HKEY_CURRENT_USER\N0q

HKEY_CURRENT_USER\N0q\DefaultIcon

HKEY_CURRENT_USER\N0q\shell

HKEY_CURRENT_USER\N0q\shell\
open

HKEY_CURRENT_USER\N0q\shell\
open\command

HKEY_CURRENT_USER\N0q\shell\
runas

HKEY_CURRENT_USER\N0q\shell\
runas\command

HKEY_CURRENT_USER\WG

HKEY_CURRENT_USER\WG\DefaultIcon

HKEY_CURRENT_USER\WG\shell

HKEY_CURRENT_USER\WG\shell\
open

HKEY_CURRENT_USER\WG\shell\
open\command

HKEY_CURRENT_USER\WG\shell\
runas

HKEY_CURRENT_USER\WG\shell\
runas\command

HKEY_CURRENT_USER\32J

HKEY_CURRENT_USER\32J\DefaultIcon

HKEY_CURRENT_USER\32J\shell

HKEY_CURRENT_USER\32J\shell\
open

HKEY_CURRENT_USER\32J\shell\
open\command

HKEY_CURRENT_USER\32J\shell\
runas

HKEY_CURRENT_USER\32J\shell\
runas\command

HKEY_CURRENT_USER\d1

HKEY_CURRENT_USER\d1\DefaultIcon

HKEY_CURRENT_USER\d1\shell

HKEY_CURRENT_USER\d1\shell\
open

HKEY_CURRENT_USER\d1\shell\
open\command

HKEY_CURRENT_USER\d1\shell\
runas

HKEY_CURRENT_USER\d1\shell\
runas\command

HKEY_CURRENT_USER\7P1

HKEY_CURRENT_USER\7P1\DefaultIcon

HKEY_CURRENT_USER\7P1\shell

HKEY_CURRENT_USER\7P1\shell\
open

HKEY_CURRENT_USER\7P1\shell\
open\command

HKEY_CURRENT_USER\7P1\shell\
runas

HKEY_CURRENT_USER\7P1\shell\
runas\command

HKEY_CURRENT_USER\p3

HKEY_CURRENT_USER\p3\DefaultIcon

HKEY_CURRENT_USER\p3\shell

HKEY_CURRENT_USER\p3\shell\
open

HKEY_CURRENT_USER\p3\shell\
open\command

HKEY_CURRENT_USER\p3\shell\
runas

HKEY_CURRENT_USER\p3\shell\
runas\command

HKEY_CURRENT_USER\31e

HKEY_CURRENT_USER\31e\DefaultIcon

HKEY_CURRENT_USER\31e\shell

HKEY_CURRENT_USER\31e\shell\
open

HKEY_CURRENT_USER\31e\shell\
open\command

HKEY_CURRENT_USER\31e\shell\
runas

HKEY_CURRENT_USER\31e\shell\
runas\command

HKEY_CURRENT_USER\ks

HKEY_CURRENT_USER\ks\DefaultIcon

HKEY_CURRENT_USER\ks\shell

HKEY_CURRENT_USER\ks\shell\
open

HKEY_CURRENT_USER\ks\shell\
open\command

HKEY_CURRENT_USER\ks\shell\
runas

HKEY_CURRENT_USER\ks\shell\
runas\command

HKEY_CURRENT_USER\XPW

HKEY_CURRENT_USER\XPW\DefaultIcon

HKEY_CURRENT_USER\XPW\shell

HKEY_CURRENT_USER\XPW\shell\
open

HKEY_CURRENT_USER\XPW\shell\
open\command

HKEY_CURRENT_USER\XPW\shell\
runas

HKEY_CURRENT_USER\XPW\shell\
runas\command

HKEY_CURRENT_USER\21

HKEY_CURRENT_USER\21\DefaultIcon

HKEY_CURRENT_USER\21\shell

HKEY_CURRENT_USER\21\shell\
open

HKEY_CURRENT_USER\21\shell\
open\command

HKEY_CURRENT_USER\21\shell\
runas

HKEY_CURRENT_USER\21\shell\
runas\command

HKEY_CURRENT_USER\3M

HKEY_CURRENT_USER\3M\DefaultIcon

HKEY_CURRENT_USER\3M\shell

HKEY_CURRENT_USER\3M\shell\
open

HKEY_CURRENT_USER\3M\shell\
open\command

HKEY_CURRENT_USER\3M\shell\
runas

HKEY_CURRENT_USER\3M\shell\
runas\command

HKEY_CURRENT_USER\wTo

HKEY_CURRENT_USER\wTo\DefaultIcon

HKEY_CURRENT_USER\wTo\shell

HKEY_CURRENT_USER\wTo\shell\
open

HKEY_CURRENT_USER\wTo\shell\
open\command

HKEY_CURRENT_USER\wTo\shell\
runas

HKEY_CURRENT_USER\wTo\shell\
runas\command

HKEY_CURRENT_USER\5V

HKEY_CURRENT_USER\5V\DefaultIcon

HKEY_CURRENT_USER\5V\shell

HKEY_CURRENT_USER\5V\shell\
open

HKEY_CURRENT_USER\5V\shell\
open\command

HKEY_CURRENT_USER\5V\shell\
runas

HKEY_CURRENT_USER\5V\shell\
runas\command

HKEY_CURRENT_USER\ath

HKEY_CURRENT_USER\ath\DefaultIcon

HKEY_CURRENT_USER\ath\shell

HKEY_CURRENT_USER\ath\shell\
open

HKEY_CURRENT_USER\ath\shell\
open\command

HKEY_CURRENT_USER\ath\shell\
runas

HKEY_CURRENT_USER\ath\shell\
runas\command

HKEY_CURRENT_USER\47g

HKEY_CURRENT_USER\47g\DefaultIcon

HKEY_CURRENT_USER\47g\shell

HKEY_CURRENT_USER\47g\shell\
open

HKEY_CURRENT_USER\47g\shell\
open\command

HKEY_CURRENT_USER\47g\shell\
runas

HKEY_CURRENT_USER\47g\shell\
runas\command

HKEY_CURRENT_USER\O4

HKEY_CURRENT_USER\O4\DefaultIcon

HKEY_CURRENT_USER\O4\shell

HKEY_CURRENT_USER\O4\shell\
open

HKEY_CURRENT_USER\O4\shell\
open\command

HKEY_CURRENT_USER\O4\shell\
runas

HKEY_CURRENT_USER\O4\shell\
runas\command

HKEY_CURRENT_USER\8l

HKEY_CURRENT_USER\8l\DefaultIcon

HKEY_CURRENT_USER\8l\shell

HKEY_CURRENT_USER\8l\shell\
open

HKEY_CURRENT_USER\8l\shell\
open\command

HKEY_CURRENT_USER\8l\shell\
runas

HKEY_CURRENT_USER\8l\shell\
runas\command

HKEY_CURRENT_USER\K7

HKEY_CURRENT_USER\K7\DefaultIcon

HKEY_CURRENT_USER\K7\shell

HKEY_CURRENT_USER\K7\shell\
open

HKEY_CURRENT_USER\K7\shell\
open\command

HKEY_CURRENT_USER\K7\shell\
runas

HKEY_CURRENT_USER\K7\shell\
runas\command

HKEY_CURRENT_USER\gR

HKEY_CURRENT_USER\gR\DefaultIcon

HKEY_CURRENT_USER\gR\shell

HKEY_CURRENT_USER\gR\shell\
open

HKEY_CURRENT_USER\gR\shell\
open\command

HKEY_CURRENT_USER\gR\shell\
runas

HKEY_CURRENT_USER\gR\shell\
runas\command

HKEY_CURRENT_USER\m3p

HKEY_CURRENT_USER\m3p\DefaultIcon

HKEY_CURRENT_USER\m3p\shell

HKEY_CURRENT_USER\m3p\shell\
open

HKEY_CURRENT_USER\m3p\shell\
open\command

HKEY_CURRENT_USER\m3p\shell\
runas

HKEY_CURRENT_USER\m3p\shell\
runas\command

HKEY_CURRENT_USER\12

HKEY_CURRENT_USER\12\DefaultIcon

HKEY_CURRENT_USER\12\shell

HKEY_CURRENT_USER\12\shell\
open

HKEY_CURRENT_USER\12\shell\
open\command

HKEY_CURRENT_USER\12\shell\
runas

HKEY_CURRENT_USER\12\shell\
runas\command

HKEY_CURRENT_USER\iY

HKEY_CURRENT_USER\iY\DefaultIcon

HKEY_CURRENT_USER\iY\shell

HKEY_CURRENT_USER\iY\shell\
open

HKEY_CURRENT_USER\iY\shell\
open\command

HKEY_CURRENT_USER\iY\shell\
runas

HKEY_CURRENT_USER\iY\shell\
runas\command

HKEY_CURRENT_USER\uO

HKEY_CURRENT_USER\uO\DefaultIcon

HKEY_CURRENT_USER\uO\shell

HKEY_CURRENT_USER\uO\shell\
open

HKEY_CURRENT_USER\uO\shell\
open\command

HKEY_CURRENT_USER\uO\shell\
runas

HKEY_CURRENT_USER\uO\shell\
runas\command

HKEY_CURRENT_USER\ssR

HKEY_CURRENT_USER\ssR\DefaultIcon

HKEY_CURRENT_USER\ssR\shell

HKEY_CURRENT_USER\ssR\shell\
open

HKEY_CURRENT_USER\ssR\shell\
open\command

HKEY_CURRENT_USER\ssR\shell\
runas

HKEY_CURRENT_USER\ssR\shell\
runas\command

HKEY_CURRENT_USER\b71

HKEY_CURRENT_USER\b71\DefaultIcon

HKEY_CURRENT_USER\b71\shell

HKEY_CURRENT_USER\b71\shell\
open

HKEY_CURRENT_USER\b71\shell\
open\command

HKEY_CURRENT_USER\b71\shell\
runas

HKEY_CURRENT_USER\b71\shell\
runas\command

HKEY_CURRENT_USER\N5F

HKEY_CURRENT_USER\N5F\DefaultIcon

HKEY_CURRENT_USER\N5F\shell

HKEY_CURRENT_USER\N5F\shell\
open

HKEY_CURRENT_USER\N5F\shell\
open\command

HKEY_CURRENT_USER\N5F\shell\
runas

HKEY_CURRENT_USER\N5F\shell\
runas\command

HKEY_CURRENT_USER\c1Q

HKEY_CURRENT_USER\c1Q\DefaultIcon

HKEY_CURRENT_USER\c1Q\shell

HKEY_CURRENT_USER\c1Q\shell\
open

HKEY_CURRENT_USER\c1Q\shell\
open\command

HKEY_CURRENT_USER\c1Q\shell\
runas

HKEY_CURRENT_USER\c1Q\shell\
runas\command

HKEY_CURRENT_USER\E4

HKEY_CURRENT_USER\E4\DefaultIcon

HKEY_CURRENT_USER\E4\shell

HKEY_CURRENT_USER\E4\shell\
open

HKEY_CURRENT_USER\E4\shell\
open\command

HKEY_CURRENT_USER\E4\shell\
runas

HKEY_CURRENT_USER\E4\shell\
runas\command

HKEY_CURRENT_USER\0O1

HKEY_CURRENT_USER\0O1\DefaultIcon

HKEY_CURRENT_USER\0O1\shell

HKEY_CURRENT_USER\0O1\shell\
open

HKEY_CURRENT_USER\0O1\shell\
open\command

HKEY_CURRENT_USER\0O1\shell\
runas

HKEY_CURRENT_USER\0O1\shell\
runas\command

HKEY_CURRENT_USER\358

HKEY_CURRENT_USER\358\DefaultIcon

HKEY_CURRENT_USER\358\shell

HKEY_CURRENT_USER\358\shell\
open

HKEY_CURRENT_USER\358\shell\
open\command

HKEY_CURRENT_USER\358\shell\
runas

HKEY_CURRENT_USER\358\shell\
runas\command

HKEY_CURRENT_USER\GUb

HKEY_CURRENT_USER\GUb\DefaultIcon

HKEY_CURRENT_USER\GUb\shell

HKEY_CURRENT_USER\GUb\shell\
open

HKEY_CURRENT_USER\GUb\shell\
open\command

HKEY_CURRENT_USER\GUb\shell\
runas

HKEY_CURRENT_USER\GUb\shell\
runas\command

HKEY_CURRENT_USER\MMA

HKEY_CURRENT_USER\MMA\DefaultIcon

HKEY_CURRENT_USER\MMA\shell

HKEY_CURRENT_USER\MMA\shell\
open

HKEY_CURRENT_USER\MMA\shell\
open\command

HKEY_CURRENT_USER\MMA\shell\
runas

HKEY_CURRENT_USER\MMA\shell\
runas\command

HKEY_CURRENT_USER\70

HKEY_CURRENT_USER\70\DefaultIcon

HKEY_CURRENT_USER\70\shell

HKEY_CURRENT_USER\70\shell\
open

HKEY_CURRENT_USER\70\shell\
open\command

HKEY_CURRENT_USER\70\shell\
runas

HKEY_CURRENT_USER\70\shell\
runas\command

HKEY_CURRENT_USER\cB8

HKEY_CURRENT_USER\cB8\DefaultIcon

HKEY_CURRENT_USER\cB8\shell

HKEY_CURRENT_USER\cB8\shell\
open

HKEY_CURRENT_USER\cB8\shell\
open\command

HKEY_CURRENT_USER\cB8\shell\
runas

HKEY_CURRENT_USER\cB8\shell\
runas\command

HKEY_CURRENT_USER\5aO

HKEY_CURRENT_USER\5aO\DefaultIcon

HKEY_CURRENT_USER\5aO\shell

HKEY_CURRENT_USER\5aO\shell\
open

HKEY_CURRENT_USER\5aO\shell\
open\command

HKEY_CURRENT_USER\5aO\shell\
runas

HKEY_CURRENT_USER\5aO\shell\
runas\command

HKEY_CURRENT_USER\yO

HKEY_CURRENT_USER\yO\DefaultIcon

HKEY_CURRENT_USER\yO\shell

HKEY_CURRENT_USER\yO\shell\
open

HKEY_CURRENT_USER\yO\shell\
open\command

HKEY_CURRENT_USER\yO\shell\
runas

HKEY_CURRENT_USER\yO\shell\
runas\command

HKEY_CURRENT_USER\iQf

HKEY_CURRENT_USER\iQf\DefaultIcon

HKEY_CURRENT_USER\iQf\shell

HKEY_CURRENT_USER\iQf\shell\
open

HKEY_CURRENT_USER\iQf\shell\
open\command

HKEY_CURRENT_USER\iQf\shell\
runas

HKEY_CURRENT_USER\iQf\shell\
runas\command

HKEY_CURRENT_USER\6DL

HKEY_CURRENT_USER\6DL\DefaultIcon

HKEY_CURRENT_USER\6DL\shell

HKEY_CURRENT_USER\6DL\shell\
open

HKEY_CURRENT_USER\6DL\shell\
open\command

HKEY_CURRENT_USER\6DL\shell\
runas

HKEY_CURRENT_USER\6DL\shell\
runas\command

HKEY_CURRENT_USER\432

HKEY_CURRENT_USER\432\DefaultIcon

HKEY_CURRENT_USER\432\shell

HKEY_CURRENT_USER\432\shell\
open

HKEY_CURRENT_USER\432\shell\
open\command

HKEY_CURRENT_USER\432\shell\
runas

HKEY_CURRENT_USER\432\shell\
runas\command

HKEY_CURRENT_USER\q3

HKEY_CURRENT_USER\q3\DefaultIcon

HKEY_CURRENT_USER\q3\shell

HKEY_CURRENT_USER\q3\shell\
open

HKEY_CURRENT_USER\q3\shell\
open\command

HKEY_CURRENT_USER\q3\shell\
runas

HKEY_CURRENT_USER\q3\shell\
runas\command

HKEY_CURRENT_USER\Ce

HKEY_CURRENT_USER\Ce\DefaultIcon

HKEY_CURRENT_USER\Ce\shell

HKEY_CURRENT_USER\Ce\shell\
open

HKEY_CURRENT_USER\Ce\shell\
open\command

HKEY_CURRENT_USER\Ce\shell\
runas

HKEY_CURRENT_USER\Ce\shell\
runas\command

HKEY_CURRENT_USER\t0V

HKEY_CURRENT_USER\t0V\DefaultIcon

HKEY_CURRENT_USER\t0V\shell

HKEY_CURRENT_USER\t0V\shell\
open

HKEY_CURRENT_USER\t0V\shell\
open\command

HKEY_CURRENT_USER\t0V\shell\
runas

HKEY_CURRENT_USER\t0V\shell\
runas\command

HKEY_CURRENT_USER\m1j

HKEY_CURRENT_USER\m1j\DefaultIcon

HKEY_CURRENT_USER\m1j\shell

HKEY_CURRENT_USER\m1j\shell\
open

HKEY_CURRENT_USER\m1j\shell\
open\command

HKEY_CURRENT_USER\m1j\shell\
runas

HKEY_CURRENT_USER\m1j\shell\
runas\command

HKEY_CURRENT_USER\2db

HKEY_CURRENT_USER\2db\DefaultIcon

HKEY_CURRENT_USER\2db\shell

HKEY_CURRENT_USER\2db\shell\
open

HKEY_CURRENT_USER\2db\shell\
open\command

HKEY_CURRENT_USER\2db\shell\
runas

HKEY_CURRENT_USER\2db\shell\
runas\command

HKEY_CURRENT_USER\cO

HKEY_CURRENT_USER\cO\DefaultIcon

HKEY_CURRENT_USER\cO\shell

HKEY_CURRENT_USER\cO\shell\
open

HKEY_CURRENT_USER\cO\shell\
open\command

HKEY_CURRENT_USER\cO\shell\
runas

HKEY_CURRENT_USER\cO\shell\
runas\command

HKEY_CURRENT_USER\6pp

HKEY_CURRENT_USER\6pp\DefaultIcon

HKEY_CURRENT_USER\6pp\shell

HKEY_CURRENT_USER\6pp\shell\
open

HKEY_CURRENT_USER\6pp\shell\
open\command

HKEY_CURRENT_USER\6pp\shell\
runas

HKEY_CURRENT_USER\6pp\shell\
runas\command

HKEY_CURRENT_USER\Pd8

HKEY_CURRENT_USER\Pd8\DefaultIcon

HKEY_CURRENT_USER\Pd8\shell

HKEY_CURRENT_USER\Pd8\shell\
open

HKEY_CURRENT_USER\Pd8\shell\
open\command

HKEY_CURRENT_USER\Pd8\shell\
runas

HKEY_CURRENT_USER\Pd8\shell\
runas\command

HKEY_CURRENT_USER\bn

HKEY_CURRENT_USER\bn\DefaultIcon

HKEY_CURRENT_USER\bn\shell

HKEY_CURRENT_USER\bn\shell\
open

HKEY_CURRENT_USER\bn\shell\
open\command

HKEY_CURRENT_USER\bn\shell\
runas

HKEY_CURRENT_USER\bn\shell\
runas\command

HKEY_CURRENT_USER\xB

HKEY_CURRENT_USER\xB\DefaultIcon

HKEY_CURRENT_USER\xB\shell

HKEY_CURRENT_USER\xB\shell\
open

HKEY_CURRENT_USER\xB\shell\
open\command

HKEY_CURRENT_USER\xB\shell\
runas

HKEY_CURRENT_USER\xB\shell\
runas\command

HKEY_CURRENT_USER\nv

HKEY_CURRENT_USER\nv\DefaultIcon

HKEY_CURRENT_USER\nv\shell

HKEY_CURRENT_USER\nv\shell\
open

HKEY_CURRENT_USER\nv\shell\
open\command

HKEY_CURRENT_USER\nv\shell\
runas

HKEY_CURRENT_USER\nv\shell\
runas\command

HKEY_CURRENT_USER\N04

HKEY_CURRENT_USER\N04\DefaultIcon

HKEY_CURRENT_USER\N04\shell

HKEY_CURRENT_USER\N04\shell\
open

HKEY_CURRENT_USER\N04\shell\
open\command

HKEY_CURRENT_USER\N04\shell\
runas

HKEY_CURRENT_USER\N04\shell\
runas\command

HKEY_CURRENT_USER\2iG

HKEY_CURRENT_USER\2iG\DefaultIcon

HKEY_CURRENT_USER\2iG\shell

HKEY_CURRENT_USER\2iG\shell\
open

HKEY_CURRENT_USER\2iG\shell\
open\command

HKEY_CURRENT_USER\2iG\shell\
runas

HKEY_CURRENT_USER\2iG\shell\
runas\command

HKEY_CURRENT_USER\nMe

HKEY_CURRENT_USER\nMe\DefaultIcon

HKEY_CURRENT_USER\nMe\shell

HKEY_CURRENT_USER\nMe\shell\
open

HKEY_CURRENT_USER\nMe\shell\
open\command

HKEY_CURRENT_USER\nMe\shell\
runas

HKEY_CURRENT_USER\nMe\shell\
runas\command

HKEY_CURRENT_USER\02

HKEY_CURRENT_USER\02\DefaultIcon

HKEY_CURRENT_USER\02\shell

HKEY_CURRENT_USER\02\shell\
open

HKEY_CURRENT_USER\02\shell\
open\command

HKEY_CURRENT_USER\02\shell\
runas

HKEY_CURRENT_USER\02\shell\
runas\command

HKEY_CURRENT_USER\2WU

HKEY_CURRENT_USER\2WU\DefaultIcon

HKEY_CURRENT_USER\2WU\shell

HKEY_CURRENT_USER\2WU\shell\
open

HKEY_CURRENT_USER\2WU\shell\
open\command

HKEY_CURRENT_USER\2WU\shell\
runas

HKEY_CURRENT_USER\2WU\shell\
runas\command

HKEY_CURRENT_USER\8x

HKEY_CURRENT_USER\8x\DefaultIcon

HKEY_CURRENT_USER\8x\shell

HKEY_CURRENT_USER\8x\shell\
open

HKEY_CURRENT_USER\8x\shell\
open\command

HKEY_CURRENT_USER\8x\shell\
runas

HKEY_CURRENT_USER\8x\shell\
runas\command

HKEY_CURRENT_USER\1O

HKEY_CURRENT_USER\1O\DefaultIcon

HKEY_CURRENT_USER\1O\shell

HKEY_CURRENT_USER\1O\shell\
open

HKEY_CURRENT_USER\1O\shell\
open\command

HKEY_CURRENT_USER\1O\shell\
runas

HKEY_CURRENT_USER\1O\shell\
runas\command

HKEY_CURRENT_USER\nEI

HKEY_CURRENT_USER\nEI\DefaultIcon

HKEY_CURRENT_USER\nEI\shell

HKEY_CURRENT_USER\nEI\shell\
open

HKEY_CURRENT_USER\nEI\shell\
open\command

HKEY_CURRENT_USER\nEI\shell\
runas

HKEY_CURRENT_USER\nEI\shell\
runas\command

HKEY_CURRENT_USER\egp

HKEY_CURRENT_USER\egp\DefaultIcon

HKEY_CURRENT_USER\egp\shell

HKEY_CURRENT_USER\egp\shell\
open

HKEY_CURRENT_USER\egp\shell\
open\command

HKEY_CURRENT_USER\egp\shell\
runas

HKEY_CURRENT_USER\egp\shell\
runas\command

HKEY_CURRENT_USER\g4

HKEY_CURRENT_USER\g4\DefaultIcon

HKEY_CURRENT_USER\g4\shell

HKEY_CURRENT_USER\g4\shell\
open

HKEY_CURRENT_USER\g4\shell\
open\command

HKEY_CURRENT_USER\g4\shell\
runas

HKEY_CURRENT_USER\g4\shell\
runas\command

HKEY_CURRENT_USER\Hr

HKEY_CURRENT_USER\Hr\DefaultIcon

HKEY_CURRENT_USER\Hr\shell

HKEY_CURRENT_USER\Hr\shell\
open

HKEY_CURRENT_USER\Hr\shell\
open\command

HKEY_CURRENT_USER\Hr\shell\
runas

HKEY_CURRENT_USER\Hr\shell\
runas\command

HKEY_CURRENT_USER\01

HKEY_CURRENT_USER\01\DefaultIcon

HKEY_CURRENT_USER\01\shell

HKEY_CURRENT_USER\01\shell\
open

HKEY_CURRENT_USER\01\shell\
open\command

HKEY_CURRENT_USER\01\shell\
runas

HKEY_CURRENT_USER\01\shell\
runas\command

HKEY_CURRENT_USER\W5

HKEY_CURRENT_USER\W5\DefaultIcon

HKEY_CURRENT_USER\W5\shell

HKEY_CURRENT_USER\W5\shell\
open

HKEY_CURRENT_USER\W5\shell\
open\command

HKEY_CURRENT_USER\W5\shell\
runas

HKEY_CURRENT_USER\W5\shell\
runas\command

HKEY_CURRENT_USER\3d

HKEY_CURRENT_USER\3d\DefaultIcon

HKEY_CURRENT_USER\3d\shell

HKEY_CURRENT_USER\3d\shell\
open

HKEY_CURRENT_USER\3d\shell\
open\command

HKEY_CURRENT_USER\3d\shell\
runas

HKEY_CURRENT_USER\3d\shell\
runas\command

HKEY_CURRENT_USER\i2M

HKEY_CURRENT_USER\i2M\DefaultIcon

HKEY_CURRENT_USER\i2M\shell

HKEY_CURRENT_USER\i2M\shell\
open

HKEY_CURRENT_USER\i2M\shell\
open\command

HKEY_CURRENT_USER\i2M\shell\
runas

HKEY_CURRENT_USER\i2M\shell\
runas\command

HKEY_CURRENT_USER\K03

HKEY_CURRENT_USER\K03\DefaultIcon

HKEY_CURRENT_USER\K03\shell

HKEY_CURRENT_USER\K03\shell\
open

HKEY_CURRENT_USER\K03\shell\
open\command

HKEY_CURRENT_USER\K03\shell\
runas

HKEY_CURRENT_USER\K03\shell\
runas\command

HKEY_CURRENT_USER\fI

HKEY_CURRENT_USER\fI\DefaultIcon

HKEY_CURRENT_USER\fI\shell

HKEY_CURRENT_USER\fI\shell\
open

HKEY_CURRENT_USER\fI\shell\
open\command

HKEY_CURRENT_USER\fI\shell\
runas

HKEY_CURRENT_USER\fI\shell\
runas\command

HKEY_CURRENT_USER\n4

HKEY_CURRENT_USER\n4\DefaultIcon

HKEY_CURRENT_USER\n4\shell

HKEY_CURRENT_USER\n4\shell\
open

HKEY_CURRENT_USER\n4\shell\
open\command

HKEY_CURRENT_USER\n4\shell\
runas

HKEY_CURRENT_USER\n4\shell\
runas\command

HKEY_CURRENT_USER\x2g

HKEY_CURRENT_USER\x2g\DefaultIcon

HKEY_CURRENT_USER\x2g\shell

HKEY_CURRENT_USER\x2g\shell\
open

HKEY_CURRENT_USER\x2g\shell\
open\command

HKEY_CURRENT_USER\x2g\shell\
runas

HKEY_CURRENT_USER\x2g\shell\
runas\command

HKEY_CURRENT_USER\ed

HKEY_CURRENT_USER\ed\DefaultIcon

HKEY_CURRENT_USER\ed\shell

HKEY_CURRENT_USER\ed\shell\
open

HKEY_CURRENT_USER\ed\shell\
open\command

HKEY_CURRENT_USER\ed\shell\
runas

HKEY_CURRENT_USER\ed\shell\
runas\command

HKEY_CURRENT_USER\VjW

HKEY_CURRENT_USER\VjW\DefaultIcon

HKEY_CURRENT_USER\VjW\shell

HKEY_CURRENT_USER\VjW\shell\
open

HKEY_CURRENT_USER\VjW\shell\
open\command

HKEY_CURRENT_USER\VjW\shell\
runas

HKEY_CURRENT_USER\VjW\shell\
runas\command

HKEY_CURRENT_USER\ux

HKEY_CURRENT_USER\ux\DefaultIcon

HKEY_CURRENT_USER\ux\shell

HKEY_CURRENT_USER\ux\shell\
open

HKEY_CURRENT_USER\ux\shell\
open\command

HKEY_CURRENT_USER\ux\shell\
runas

HKEY_CURRENT_USER\ux\shell\
runas\command

HKEY_CURRENT_USER\Yw7

HKEY_CURRENT_USER\Yw7\DefaultIcon

HKEY_CURRENT_USER\Yw7\shell

HKEY_CURRENT_USER\Yw7\shell\
open

HKEY_CURRENT_USER\Yw7\shell\
open\command

HKEY_CURRENT_USER\Yw7\shell\
runas

HKEY_CURRENT_USER\Yw7\shell\
runas\command

HKEY_CURRENT_USER\8NT

HKEY_CURRENT_USER\8NT\DefaultIcon

HKEY_CURRENT_USER\8NT\shell

HKEY_CURRENT_USER\8NT\shell\
open

HKEY_CURRENT_USER\8NT\shell\
open\command

HKEY_CURRENT_USER\8NT\shell\
runas

HKEY_CURRENT_USER\8NT\shell\
runas\command

HKEY_CURRENT_USER\7Sx

HKEY_CURRENT_USER\7Sx\DefaultIcon

HKEY_CURRENT_USER\7Sx\shell

HKEY_CURRENT_USER\7Sx\shell\
open

HKEY_CURRENT_USER\7Sx\shell\
open\command

HKEY_CURRENT_USER\7Sx\shell\
runas

HKEY_CURRENT_USER\7Sx\shell\
runas\command

HKEY_CURRENT_USER\gI

HKEY_CURRENT_USER\gI\DefaultIcon

HKEY_CURRENT_USER\gI\shell

HKEY_CURRENT_USER\gI\shell\
open

HKEY_CURRENT_USER\gI\shell\
open\command

HKEY_CURRENT_USER\gI\shell\
runas

HKEY_CURRENT_USER\gI\shell\
runas\command

HKEY_CURRENT_USER\8DI

HKEY_CURRENT_USER\8DI\DefaultIcon

HKEY_CURRENT_USER\8DI\shell

HKEY_CURRENT_USER\8DI\shell\
open

HKEY_CURRENT_USER\8DI\shell\
open\command

HKEY_CURRENT_USER\8DI\shell\
runas

HKEY_CURRENT_USER\8DI\shell\
runas\command

HKEY_CURRENT_USER\5aM

HKEY_CURRENT_USER\5aM\DefaultIcon

HKEY_CURRENT_USER\5aM\shell

HKEY_CURRENT_USER\5aM\shell\
open

HKEY_CURRENT_USER\5aM\shell\
open\command

HKEY_CURRENT_USER\5aM\shell\
runas

HKEY_CURRENT_USER\5aM\shell\
runas\command

HKEY_CURRENT_USER\sd

HKEY_CURRENT_USER\sd\DefaultIcon

HKEY_CURRENT_USER\sd\shell

HKEY_CURRENT_USER\sd\shell\
open

HKEY_CURRENT_USER\sd\shell\
open\command

HKEY_CURRENT_USER\sd\shell\
runas

HKEY_CURRENT_USER\sd\shell\
runas\command

HKEY_CURRENT_USER\8ic

HKEY_CURRENT_USER\8ic\DefaultIcon

HKEY_CURRENT_USER\8ic\shell

HKEY_CURRENT_USER\8ic\shell\
open

HKEY_CURRENT_USER\8ic\shell\
open\command

HKEY_CURRENT_USER\8ic\shell\
runas

HKEY_CURRENT_USER\8ic\shell\
runas\command

HKEY_CURRENT_USER\5II

HKEY_CURRENT_USER\5II\DefaultIcon

HKEY_CURRENT_USER\5II\shell

HKEY_CURRENT_USER\5II\shell\
open

HKEY_CURRENT_USER\5II\shell\
open\command

HKEY_CURRENT_USER\5II\shell\
runas

HKEY_CURRENT_USER\5II\shell\
runas\command

HKEY_CURRENT_USER\Ss

HKEY_CURRENT_USER\Ss\DefaultIcon

HKEY_CURRENT_USER\Ss\shell

HKEY_CURRENT_USER\Ss\shell\
open

HKEY_CURRENT_USER\Ss\shell\
open\command

HKEY_CURRENT_USER\Ss\shell\
runas

HKEY_CURRENT_USER\Ss\shell\
runas\command

HKEY_CURRENT_USER\h33

HKEY_CURRENT_USER\h33\DefaultIcon

HKEY_CURRENT_USER\h33\shell

HKEY_CURRENT_USER\h33\shell\
open

HKEY_CURRENT_USER\h33\shell\
open\command

HKEY_CURRENT_USER\h33\shell\
runas

HKEY_CURRENT_USER\h33\shell\
runas\command

HKEY_CURRENT_USER\qg0

HKEY_CURRENT_USER\qg0\DefaultIcon

HKEY_CURRENT_USER\qg0\shell

HKEY_CURRENT_USER\qg0\shell\
open

HKEY_CURRENT_USER\qg0\shell\
open\command

HKEY_CURRENT_USER\qg0\shell\
runas

HKEY_CURRENT_USER\qg0\shell\
runas\command

HKEY_CURRENT_USER\HE

HKEY_CURRENT_USER\HE\DefaultIcon

HKEY_CURRENT_USER\HE\shell

HKEY_CURRENT_USER\HE\shell\
open

HKEY_CURRENT_USER\HE\shell\
open\command

HKEY_CURRENT_USER\HE\shell\
runas

HKEY_CURRENT_USER\HE\shell\
runas\command

HKEY_CURRENT_USER\oYV

HKEY_CURRENT_USER\oYV\DefaultIcon

HKEY_CURRENT_USER\oYV\shell

HKEY_CURRENT_USER\oYV\shell\
open

HKEY_CURRENT_USER\oYV\shell\
open\command

HKEY_CURRENT_USER\oYV\shell\
runas

HKEY_CURRENT_USER\oYV\shell\
runas\command

HKEY_CURRENT_USER\N5

HKEY_CURRENT_USER\N5\DefaultIcon

HKEY_CURRENT_USER\N5\shell

HKEY_CURRENT_USER\N5\shell\
open

HKEY_CURRENT_USER\N5\shell\
open\command

HKEY_CURRENT_USER\N5\shell\
runas

HKEY_CURRENT_USER\N5\shell\
runas\command

HKEY_CURRENT_USER\si

HKEY_CURRENT_USER\si\DefaultIcon

HKEY_CURRENT_USER\si\shell

HKEY_CURRENT_USER\si\shell\
open

HKEY_CURRENT_USER\si\shell\
open\command

HKEY_CURRENT_USER\si\shell\
runas

HKEY_CURRENT_USER\si\shell\
runas\command

HKEY_CURRENT_USER\CGj

HKEY_CURRENT_USER\CGj\DefaultIcon

HKEY_CURRENT_USER\CGj\shell

HKEY_CURRENT_USER\CGj\shell\
open

HKEY_CURRENT_USER\CGj\shell\
open\command

HKEY_CURRENT_USER\CGj\shell\
runas

HKEY_CURRENT_USER\CGj\shell\
runas\command

HKEY_CURRENT_USER\O7W

HKEY_CURRENT_USER\O7W\DefaultIcon

HKEY_CURRENT_USER\O7W\shell

HKEY_CURRENT_USER\O7W\shell\
open

HKEY_CURRENT_USER\O7W\shell\
open\command

HKEY_CURRENT_USER\O7W\shell\
runas

HKEY_CURRENT_USER\O7W\shell\
runas\command

It adds the following registry entries:

HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\
Services\SharedAccess\Parameters\
FirewallPolicy\StandardProfile
EnableFirewall = "0"

HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\
Services\SharedAccess\Parameters\
FirewallPolicy\StandardProfile
DoNotAllowExceptions = "0"

HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\
Services\SharedAccess\Parameters\
FirewallPolicy\StandardProfile
DisableNotifications = "1"

HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\
Services\SharedAccess\Parameters\
FirewallPolicy\DomainProfile
EnableFirewall = "0"

HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\
Services\SharedAccess\Parameters\
FirewallPolicy\DomainProfile
DoNotAllowExceptions = "0"

HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\
Services\SharedAccess\Parameters\
FirewallPolicy\DomainProfile
DisableNotifications = "1"

HKEY_CURRENT_USER\.exe
Content Type = "application/x-msdownload"

HKEY_CURRENT_USER\.exe\shell\
open\command
IsolatedCommand = "%1 %*"

HKEY_CURRENT_USER\.exe\shell\
runas\command
IsolatedCommand = "%1 %*"

HKEY_CURRENT_USER\Gx
Content Type = "application/x-msdownload"

HKEY_CURRENT_USER\Gx\shell\
open\command
IsolatedCommand = "%1 %*"

HKEY_CURRENT_USER\Gx\shell\
runas\command
IsolatedCommand = "%1 %*"

HKEY_CURRENT_USER\Software\Microsoft\
Windows
Local = "ab19919"

HKEY_CURRENT_USER\T13
Content Type = "application/x-msdownload"

HKEY_CURRENT_USER\T13\shell\
open\command
IsolatedCommand = "%1 %*"

HKEY_CURRENT_USER\T13\shell\
runas\command
IsolatedCommand = "%1 %*"

HKEY_CURRENT_USER\wh
Content Type = "application/x-msdownload"

HKEY_CURRENT_USER\wh\shell\
open\command
IsolatedCommand = "%1 %*"

HKEY_CURRENT_USER\wh\shell\
runas\command
IsolatedCommand = "%1 %*"

HKEY_CURRENT_USER\25W
Content Type = "application/x-msdownload"

HKEY_CURRENT_USER\25W\shell\
open\command
IsolatedCommand = "%1 %*"

HKEY_CURRENT_USER\25W\shell\
runas\command
IsolatedCommand = "%1 %*"

HKEY_CURRENT_USER\4O1
Content Type = "application/x-msdownload"

HKEY_CURRENT_USER\4O1\shell\
open\command
IsolatedCommand = "%1 %*"

HKEY_CURRENT_USER\4O1\shell\
runas\command
IsolatedCommand = "%1 %*"

HKEY_CURRENT_USER\V8D
Content Type = "application/x-msdownload"

HKEY_CURRENT_USER\V8D\shell\
open\command
IsolatedCommand = "%1 %*"

HKEY_CURRENT_USER\V8D\shell\
runas\command
IsolatedCommand = "%1 %*"

HKEY_CURRENT_USER\7Ha
Content Type = "application/x-msdownload"

HKEY_CURRENT_USER\7Ha\shell\
open\command
IsolatedCommand = "%1 %*"

HKEY_CURRENT_USER\7Ha\shell\
runas\command
IsolatedCommand = "%1 %*"

HKEY_CURRENT_USER\hcJ
Content Type = "application/x-msdownload"

HKEY_CURRENT_USER\hcJ\shell\
open\command
IsolatedCommand = "%1 %*"

HKEY_CURRENT_USER\hcJ\shell\
runas\command
IsolatedCommand = "%1 %*"

HKEY_CURRENT_USER\6C
Content Type = "application/x-msdownload"

HKEY_CURRENT_USER\6C\shell\
open\command
IsolatedCommand = "%1 %*"

HKEY_CURRENT_USER\6C\shell\
runas\command
IsolatedCommand = "%1 %*"

HKEY_CURRENT_USER\Es
Content Type = "application/x-msdownload"

HKEY_CURRENT_USER\Es\shell\
open\command
IsolatedCommand = "%1 %*"

HKEY_CURRENT_USER\Es\shell\
runas\command
IsolatedCommand = "%1 %*"

HKEY_CURRENT_USER\y7
Content Type = "application/x-msdownload"

HKEY_CURRENT_USER\y7\shell\
open\command
IsolatedCommand = "%1 %*"

HKEY_CURRENT_USER\y7\shell\
runas\command
IsolatedCommand = "%1 %*"

HKEY_CURRENT_USER\N80
Content Type = "application/x-msdownload"

HKEY_CURRENT_USER\N80\shell\
open\command
IsolatedCommand = "%1 %*"

HKEY_CURRENT_USER\N80\shell\
runas\command
IsolatedCommand = "%1 %*"

HKEY_CURRENT_USER\M5
Content Type = "application/x-msdownload"

HKEY_CURRENT_USER\M5\shell\
open\command
IsolatedCommand = "%1 %*"

HKEY_CURRENT_USER\M5\shell\
runas\command
IsolatedCommand = "%1 %*"

HKEY_CURRENT_USER\S84
Content Type = "application/x-msdownload"

HKEY_CURRENT_USER\S84\shell\
open\command
IsolatedCommand = "%1 %*"

HKEY_CURRENT_USER\S84\shell\
runas\command
IsolatedCommand = "%1 %*"

HKEY_CURRENT_USER\fLM
Content Type = "application/x-msdownload"

HKEY_CURRENT_USER\fLM\shell\
open\command
IsolatedCommand = "%1 %*"

HKEY_CURRENT_USER\fLM\shell\
runas\command
IsolatedCommand = "%1 %*"

HKEY_CURRENT_USER\Xw
Content Type = "application/x-msdownload"

HKEY_CURRENT_USER\Xw\shell\
open\command
IsolatedCommand = "%1 %*"

HKEY_CURRENT_USER\Xw\shell\
runas\command
IsolatedCommand = "%1 %*"

HKEY_CURRENT_USER\o67
Content Type = "application/x-msdownload"

HKEY_CURRENT_USER\o67\shell\
open\command
IsolatedCommand = "%1 %*"

HKEY_CURRENT_USER\o67\shell\
runas\command
IsolatedCommand = "%1 %*"

HKEY_CURRENT_USER\7VA
Content Type = "application/x-msdownload"

HKEY_CURRENT_USER\7VA\shell\
open\command
IsolatedCommand = "%1 %*"

HKEY_CURRENT_USER\7VA\shell\
runas\command
IsolatedCommand = "%1 %*"

HKEY_CURRENT_USER\48
Content Type = "application/x-msdownload"

HKEY_CURRENT_USER\48\shell\
open\command
IsolatedCommand = "%1 %*"

HKEY_CURRENT_USER\48\shell\
runas\command
IsolatedCommand = "%1 %*"

HKEY_CURRENT_USER\08
Content Type = "application/x-msdownload"

HKEY_CURRENT_USER\08\shell\
open\command
IsolatedCommand = "%1 %*"

HKEY_CURRENT_USER\08\shell\
runas\command
IsolatedCommand = "%1 %*"

HKEY_CURRENT_USER\286
Content Type = "application/x-msdownload"

HKEY_CURRENT_USER\286\shell\
open\command
IsolatedCommand = "%1 %*"

HKEY_CURRENT_USER\286\shell\
runas\command
IsolatedCommand = "%1 %*"

HKEY_CURRENT_USER\bWj
Content Type = "application/x-msdownload"

HKEY_CURRENT_USER\bWj\shell\
open\command
IsolatedCommand = "%1 %*"

HKEY_CURRENT_USER\bWj\shell\
runas\command
IsolatedCommand = "%1 %*"

HKEY_CURRENT_USER\lY1
Content Type = "application/x-msdownload"

HKEY_CURRENT_USER\lY1\shell\
open\command
IsolatedCommand = "%1 %*"

HKEY_CURRENT_USER\lY1\shell\
runas\command
IsolatedCommand = "%1 %*"

HKEY_CURRENT_USER\7V4
Content Type = "application/x-msdownload"

HKEY_CURRENT_USER\7V4\shell\
open\command
IsolatedCommand = "%1 %*"

HKEY_CURRENT_USER\7V4\shell\
runas\command
IsolatedCommand = "%1 %*"

HKEY_CURRENT_USER\0EY
Content Type = "application/x-msdownload"

HKEY_CURRENT_USER\0EY\shell\
open\command
IsolatedCommand = "%1 %*"

HKEY_CURRENT_USER\0EY\shell\
runas\command
IsolatedCommand = "%1 %*"

HKEY_CURRENT_USER\2S
Content Type = "application/x-msdownload"

HKEY_CURRENT_USER\2S\shell\
open\command
IsolatedCommand = "%1 %*"

HKEY_CURRENT_USER\2S\shell\
runas\command
IsolatedCommand = "%1 %*"

HKEY_CURRENT_USER\NP3
Content Type = "application/x-msdownload"

HKEY_CURRENT_USER\NP3\shell\
open\command
IsolatedCommand = "%1 %*"

HKEY_CURRENT_USER\NP3\shell\
runas\command
IsolatedCommand = "%1 %*"

HKEY_CURRENT_USER\gK
Content Type = "application/x-msdownload"

HKEY_CURRENT_USER\gK\shell\
open\command
IsolatedCommand = "%1 %*"

HKEY_CURRENT_USER\gK\shell\
runas\command
IsolatedCommand = "%1 %*"

HKEY_CURRENT_USER\0a1
Content Type = "application/x-msdownload"

HKEY_CURRENT_USER\0a1\shell\
open\command
IsolatedCommand = "%1 %*"

HKEY_CURRENT_USER\0a1\shell\
runas\command
IsolatedCommand = "%1 %*"

HKEY_CURRENT_USER\op8
Content Type = "application/x-msdownload"

HKEY_CURRENT_USER\op8\shell\
open\command
IsolatedCommand = "%1 %*"

HKEY_CURRENT_USER\op8\shell\
runas\command
IsolatedCommand = "%1 %*"

HKEY_CURRENT_USER\1J2
Content Type = "application/x-msdownload"

HKEY_CURRENT_USER\1J2\shell\
open\command
IsolatedCommand = "%1 %*"

HKEY_CURRENT_USER\1J2\shell\
runas\command
IsolatedCommand = "%1 %*"

HKEY_CURRENT_USER\nU
Content Type = "application/x-msdownload"

HKEY_CURRENT_USER\nU\shell\
open\command
IsolatedCommand = "%1 %*"

HKEY_CURRENT_USER\nU\shell\
runas\command
IsolatedCommand = "%1 %*"

HKEY_CURRENT_USER\ae
Content Type = "application/x-msdownload"

HKEY_CURRENT_USER\ae\shell\
open\command
IsolatedCommand = "%1 %*"

HKEY_CURRENT_USER\ae\shell\
runas\command
IsolatedCommand = "%1 %*"

HKEY_CURRENT_USER\gO
Content Type = "application/x-msdownload"

HKEY_CURRENT_USER\gO\shell\
open\command
IsolatedCommand = "%1 %*"

HKEY_CURRENT_USER\gO\shell\
runas\command
IsolatedCommand = "%1 %*"

HKEY_CURRENT_USER\7I
Content Type = "application/x-msdownload"

HKEY_CURRENT_USER\7I\shell\
open\command
IsolatedCommand = "%1 %*"

HKEY_CURRENT_USER\7I\shell\
runas\command
IsolatedCommand = "%1 %*"

HKEY_CURRENT_USER\fn8
Content Type = "application/x-msdownload"

HKEY_CURRENT_USER\fn8\shell\
open\command
IsolatedCommand = "%1 %*"

HKEY_CURRENT_USER\fn8\shell\
runas\command
IsolatedCommand = "%1 %*"

HKEY_CURRENT_USER\NY5
Content Type = "application/x-msdownload"

HKEY_CURRENT_USER\NY5\shell\
open\command
IsolatedCommand = "%1 %*"

HKEY_CURRENT_USER\NY5\shell\
runas\command
IsolatedCommand = "%1 %*"

HKEY_CURRENT_USER\4l
Content Type = "application/x-msdownload"

HKEY_CURRENT_USER\4l\shell\
open\command
IsolatedCommand = "%1 %*"

HKEY_CURRENT_USER\4l\shell\
runas\command
IsolatedCommand = "%1 %*"

HKEY_CURRENT_USER\mqs
Content Type = "application/x-msdownload"

HKEY_CURRENT_USER\mqs\shell\
open\command
IsolatedCommand = "%1 %*"

HKEY_CURRENT_USER\mqs\shell\
runas\command
IsolatedCommand = "%1 %*"

HKEY_CURRENT_USER\Yd
Content Type = "application/x-msdownload"

HKEY_CURRENT_USER\Yd\shell\
open\command
IsolatedCommand = "%1 %*"

HKEY_CURRENT_USER\Yd\shell\
runas\command
IsolatedCommand = "%1 %*"

HKEY_CURRENT_USER\0d
Content Type = "application/x-msdownload"

HKEY_CURRENT_USER\0d\shell\
open\command
IsolatedCommand = "%1 %*"

HKEY_CURRENT_USER\0d\shell\
runas\command
IsolatedCommand = "%1 %*"

HKEY_CURRENT_USER\Ry
Content Type = "application/x-msdownload"

HKEY_CURRENT_USER\Ry\shell\
open\command
IsolatedCommand = "%1 %*"

HKEY_CURRENT_USER\Ry\shell\
runas\command
IsolatedCommand = "%1 %*"

HKEY_CURRENT_USER\pn4
Content Type = "application/x-msdownload"

HKEY_CURRENT_USER\pn4\shell\
open\command
IsolatedCommand = "%1 %*"

HKEY_CURRENT_USER\pn4\shell\
runas\command
IsolatedCommand = "%1 %*"

HKEY_CURRENT_USER\E1x
Content Type = "application/x-msdownload"

HKEY_CURRENT_USER\E1x\shell\
open\command
IsolatedCommand = "%1 %*"

HKEY_CURRENT_USER\E1x\shell\
runas\command
IsolatedCommand = "%1 %*"

HKEY_CURRENT_USER\q8
Content Type = "application/x-msdownload"

HKEY_CURRENT_USER\q8\shell\
open\command
IsolatedCommand = "%1 %*"

HKEY_CURRENT_USER\q8\shell\
runas\command
IsolatedCommand = "%1 %*"

HKEY_CURRENT_USER\7Kd
Content Type = "application/x-msdownload"

HKEY_CURRENT_USER\7Kd\shell\
open\command
IsolatedCommand = "%1 %*"

HKEY_CURRENT_USER\7Kd\shell\
runas\command
IsolatedCommand = "%1 %*"

HKEY_CURRENT_USER\rlY
Content Type = "application/x-msdownload"

HKEY_CURRENT_USER\rlY\shell\
open\command
IsolatedCommand = "%1 %*"

HKEY_CURRENT_USER\rlY\shell\
runas\command
IsolatedCommand = "%1 %*"

HKEY_CURRENT_USER\80a
Content Type = "application/x-msdownload"

HKEY_CURRENT_USER\80a\shell\
open\command
IsolatedCommand = "%1 %*"

HKEY_CURRENT_USER\80a\shell\
runas\command
IsolatedCommand = "%1 %*"

HKEY_CURRENT_USER\A6
Content Type = "application/x-msdownload"

HKEY_CURRENT_USER\A6\shell\
open\command
IsolatedCommand = "%1 %*"

HKEY_CURRENT_USER\A6\shell\
runas\command
IsolatedCommand = "%1 %*"

HKEY_CURRENT_USER\7u
Content Type = "application/x-msdownload"

HKEY_CURRENT_USER\7u\shell\
open\command
IsolatedCommand = "%1 %*"

HKEY_CURRENT_USER\7u\shell\
runas\command
IsolatedCommand = "%1 %*"

HKEY_CURRENT_USER\ND
Content Type = "application/x-msdownload"

HKEY_CURRENT_USER\ND\shell\
open\command
IsolatedCommand = "%1 %*"

HKEY_CURRENT_USER\ND\shell\
runas\command
IsolatedCommand = "%1 %*"

HKEY_CURRENT_USER\63
Content Type = "application/x-msdownload"

HKEY_CURRENT_USER\63\shell\
open\command
IsolatedCommand = "%1 %*"

HKEY_CURRENT_USER\63\shell\
runas\command
IsolatedCommand = "%1 %*"

HKEY_CURRENT_USER\40
Content Type = "application/x-msdownload"

HKEY_CURRENT_USER\40\shell\
open\command
IsolatedCommand = "%1 %*"

HKEY_CURRENT_USER\40\shell\
runas\command
IsolatedCommand = "%1 %*"

HKEY_CURRENT_USER\by
Content Type = "application/x-msdownload"

HKEY_CURRENT_USER\by\shell\
open\command
IsolatedCommand = "%1 %*"

HKEY_CURRENT_USER\by\shell\
runas\command
IsolatedCommand = "%1 %*"

HKEY_CURRENT_USER\sQ
Content Type = "application/x-msdownload"

HKEY_CURRENT_USER\sQ\shell\
open\command
IsolatedCommand = "%1 %*"

HKEY_CURRENT_USER\sQ\shell\
runas\command
IsolatedCommand = "%1 %*"

HKEY_CURRENT_USER\1I
Content Type = "application/x-msdownload"

HKEY_CURRENT_USER\1I\shell\
open\command
IsolatedCommand = "%1 %*"

HKEY_CURRENT_USER\1I\shell\
runas\command
IsolatedCommand = "%1 %*"

HKEY_CURRENT_USER\nbn
Content Type = "application/x-msdownload"

HKEY_CURRENT_USER\nbn\shell\
open\command
IsolatedCommand = "%1 %*"

HKEY_CURRENT_USER\nbn\shell\
runas\command
IsolatedCommand = "%1 %*"

HKEY_CURRENT_USER\4H
Content Type = "application/x-msdownload"

HKEY_CURRENT_USER\4H\shell\
open\command
IsolatedCommand = "%1 %*"

HKEY_CURRENT_USER\4H\shell\
runas\command
IsolatedCommand = "%1 %*"

HKEY_CURRENT_USER\BK
Content Type = "application/x-msdownload"

HKEY_CURRENT_USER\BK\shell\
open\command
IsolatedCommand = "%1 %*"

HKEY_CURRENT_USER\BK\shell\
runas\command
IsolatedCommand = "%1 %*"

HKEY_CURRENT_USER\bf6
Content Type = "application/x-msdownload"

HKEY_CURRENT_USER\bf6\shell\
open\command
IsolatedCommand = "%1 %*"

HKEY_CURRENT_USER\bf6\shell\
runas\command
IsolatedCommand = "%1 %*"

HKEY_CURRENT_USER\gB7
Content Type = "application/x-msdownload"

HKEY_CURRENT_USER\gB7\shell\
open\command
IsolatedCommand = "%1 %*"

HKEY_CURRENT_USER\gB7\shell\
runas\command
IsolatedCommand = "%1 %*"

HKEY_CURRENT_USER\QC
Content Type = "application/x-msdownload"

HKEY_CURRENT_USER\QC\shell\
open\command
IsolatedCommand = "%1 %*"

HKEY_CURRENT_USER\QC\shell\
runas\command
IsolatedCommand = "%1 %*"

HKEY_CURRENT_USER\M1
Content Type = "application/x-msdownload"

HKEY_CURRENT_USER\M1\shell\
open\command
IsolatedCommand = "%1 %*"

HKEY_CURRENT_USER\M1\shell\
runas\command
IsolatedCommand = "%1 %*"

HKEY_CURRENT_USER\pg
Content Type = "application/x-msdownload"

HKEY_CURRENT_USER\pg\shell\
open\command
IsolatedCommand = "%1 %*"

HKEY_CURRENT_USER\pg\shell\
runas\command
IsolatedCommand = "%1 %*"

HKEY_CURRENT_USER\6u
Content Type = "application/x-msdownload"

HKEY_CURRENT_USER\6u\shell\
open\command
IsolatedCommand = "%1 %*"

HKEY_CURRENT_USER\6u\shell\
runas\command
IsolatedCommand = "%1 %*"

HKEY_CURRENT_USER\iI6
Content Type = "application/x-msdownload"

HKEY_CURRENT_USER\iI6\shell\
open\command
IsolatedCommand = "%1 %*"

HKEY_CURRENT_USER\iI6\shell\
runas\command
IsolatedCommand = "%1 %*"

HKEY_CURRENT_USER\4o
Content Type = "application/x-msdownload"

HKEY_CURRENT_USER\4o\shell\
open\command
IsolatedCommand = "%1 %*"

HKEY_CURRENT_USER\4o\shell\
runas\command
IsolatedCommand = "%1 %*"

HKEY_CURRENT_USER\Edd
Content Type = "application/x-msdownload"

HKEY_CURRENT_USER\Edd\shell\
open\command
IsolatedCommand = "%1 %*"

HKEY_CURRENT_USER\Edd\shell\
runas\command
IsolatedCommand = "%1 %*"

HKEY_CURRENT_USER\WMt
Content Type = "application/x-msdownload"

HKEY_CURRENT_USER\WMt\shell\
open\command
IsolatedCommand = "%1 %*"

HKEY_CURRENT_USER\WMt\shell\
runas\command
IsolatedCommand = "%1 %*"

HKEY_CURRENT_USER\23b
Content Type = "application/x-msdownload"

HKEY_CURRENT_USER\23b\shell\
open\command
IsolatedCommand = "%1 %*"

HKEY_CURRENT_USER\23b\shell\
runas\command
IsolatedCommand = "%1 %*"

HKEY_CURRENT_USER\y8P
Content Type = "application/x-msdownload"

HKEY_CURRENT_USER\y8P\shell\
open\command
IsolatedCommand = "%1 %*"

HKEY_CURRENT_USER\y8P\shell\
runas\command
IsolatedCommand = "%1 %*"

HKEY_CURRENT_USER\aL
Content Type = "application/x-msdownload"

HKEY_CURRENT_USER\aL\shell\
open\command
IsolatedCommand = "%1 %*"

HKEY_CURRENT_USER\aL\shell\
runas\command
IsolatedCommand = "%1 %*"

HKEY_CURRENT_USER\3b
Content Type = "application/x-msdownload"

HKEY_CURRENT_USER\3b\shell\
open\command
IsolatedCommand = "%1 %*"

HKEY_CURRENT_USER\3b\shell\
runas\command
IsolatedCommand = "%1 %*"

HKEY_CURRENT_USER\CW
Content Type = "application/x-msdownload"

HKEY_CURRENT_USER\CW\shell\
open\command
IsolatedCommand = "%1 %*"

HKEY_CURRENT_USER\CW\shell\
runas\command
IsolatedCommand = "%1 %*"

HKEY_CURRENT_USER\27
Content Type = "application/x-msdownload"

HKEY_CURRENT_USER\27\shell\
open\command
IsolatedCommand = "%1 %*"

HKEY_CURRENT_USER\27\shell\
runas\command
IsolatedCommand = "%1 %*"

HKEY_CURRENT_USER\5F
Content Type = "application/x-msdownload"

HKEY_CURRENT_USER\5F\shell\
open\command
IsolatedCommand = "%1 %*"

HKEY_CURRENT_USER\5F\shell\
runas\command
IsolatedCommand = "%1 %*"

HKEY_CURRENT_USER\I5
Content Type = "application/x-msdownload"

HKEY_CURRENT_USER\I5\shell\
open\command
IsolatedCommand = "%1 %*"

HKEY_CURRENT_USER\I5\shell\
runas\command
IsolatedCommand = "%1 %*"

HKEY_CURRENT_USER\FTe
Content Type = "application/x-msdownload"

HKEY_CURRENT_USER\FTe\shell\
open\command
IsolatedCommand = "%1 %*"

HKEY_CURRENT_USER\FTe\shell\
runas\command
IsolatedCommand = "%1 %*"

HKEY_CURRENT_USER\i4
Content Type = "application/x-msdownload"

HKEY_CURRENT_USER\i4\shell\
open\command
IsolatedCommand = "%1 %*"

HKEY_CURRENT_USER\i4\shell\
runas\command
IsolatedCommand = "%1 %*"

HKEY_CURRENT_USER\8P
Content Type = "application/x-msdownload"

HKEY_CURRENT_USER\8P\shell\
open\command
IsolatedCommand = "%1 %*"

HKEY_CURRENT_USER\8P\shell\
runas\command
IsolatedCommand = "%1 %*"

HKEY_CURRENT_USER\RoB
Content Type = "application/x-msdownload"

HKEY_CURRENT_USER\RoB\shell\
open\command
IsolatedCommand = "%1 %*"

HKEY_CURRENT_USER\RoB\shell\
runas\command
IsolatedCommand = "%1 %*"

HKEY_CURRENT_USER\n8
Content Type = "application/x-msdownload"

HKEY_CURRENT_USER\n8\shell\
open\command
IsolatedCommand = "%1 %*"

HKEY_CURRENT_USER\n8\shell\
runas\command
IsolatedCommand = "%1 %*"

HKEY_CURRENT_USER\14
Content Type = "application/x-msdownload"

HKEY_CURRENT_USER\14\shell\
open\command
IsolatedCommand = "%1 %*"

HKEY_CURRENT_USER\14\shell\
runas\command
IsolatedCommand = "%1 %*"

HKEY_CURRENT_USER\06o
Content Type = "application/x-msdownload"

HKEY_CURRENT_USER\06o\shell\
open\command
IsolatedCommand = "%1 %*"

HKEY_CURRENT_USER\06o\shell\
runas\command
IsolatedCommand = "%1 %*"

HKEY_CURRENT_USER\yK1
Content Type = "application/x-msdownload"

HKEY_CURRENT_USER\yK1\shell\
open\command
IsolatedCommand = "%1 %*"

HKEY_CURRENT_USER\yK1\shell\
runas\command
IsolatedCommand = "%1 %*"

HKEY_CURRENT_USER\4V0
Content Type = "application/x-msdownload"

HKEY_CURRENT_USER\4V0\shell\
open\command
IsolatedCommand = "%1 %*"

HKEY_CURRENT_USER\4V0\shell\
runas\command
IsolatedCommand = "%1 %*"

HKEY_CURRENT_USER\RM
Content Type = "application/x-msdownload"

HKEY_CURRENT_USER\RM\shell\
open\command
IsolatedCommand = "%1 %*"

HKEY_CURRENT_USER\RM\shell\
runas\command
IsolatedCommand = "%1 %*"

HKEY_CURRENT_USER\lg
Content Type = "application/x-msdownload"

HKEY_CURRENT_USER\lg\shell\
open\command
IsolatedCommand = "%1 %*"

HKEY_CURRENT_USER\lg\shell\
runas\command
IsolatedCommand = "%1 %*"

HKEY_CURRENT_USER\Ec
Content Type = "application/x-msdownload"

HKEY_CURRENT_USER\Ec\shell\
open\command
IsolatedCommand = "%1 %*"

HKEY_CURRENT_USER\Ec\shell\
runas\command
IsolatedCommand = "%1 %*"

HKEY_CURRENT_USER\71
Content Type = "application/x-msdownload"

HKEY_CURRENT_USER\71\shell\
open\command
IsolatedCommand = "%1 %*"

HKEY_CURRENT_USER\71\shell\
runas\command
IsolatedCommand = "%1 %*"

HKEY_CURRENT_USER\7P
Content Type = "application/x-msdownload"

HKEY_CURRENT_USER\7P\shell\
open\command
IsolatedCommand = "%1 %*"

HKEY_CURRENT_USER\7P\shell\
runas\command
IsolatedCommand = "%1 %*"

HKEY_CURRENT_USER\3DP
Content Type = "application/x-msdownload"

HKEY_CURRENT_USER\3DP\shell\
open\command
IsolatedCommand = "%1 %*"

HKEY_CURRENT_USER\3DP\shell\
runas\command
IsolatedCommand = "%1 %*"

HKEY_CURRENT_USER\E2
Content Type = "application/x-msdownload"

HKEY_CURRENT_USER\E2\shell\
open\command
IsolatedCommand = "%1 %*"

HKEY_CURRENT_USER\E2\shell\
runas\command
IsolatedCommand = "%1 %*"

HKEY_CURRENT_USER\86
Content Type = "application/x-msdownload"

HKEY_CURRENT_USER\86\shell\
open\command
IsolatedCommand = "%1 %*"

HKEY_CURRENT_USER\86\shell\
runas\command
IsolatedCommand = "%1 %*"

HKEY_CURRENT_USER\t01
Content Type = "application/x-msdownload"

HKEY_CURRENT_USER\t01\shell\
open\command
IsolatedCommand = "%1 %*"

HKEY_CURRENT_USER\t01\shell\
runas\command
IsolatedCommand = "%1 %*"

HKEY_CURRENT_USER\my
Content Type = "application/x-msdownload"

HKEY_CURRENT_USER\my\shell\
open\command
IsolatedCommand = "%1 %*"

HKEY_CURRENT_USER\my\shell\
runas\command
IsolatedCommand = "%1 %*"

HKEY_CURRENT_USER\5G
Content Type = "application/x-msdownload"

HKEY_CURRENT_USER\5G\shell\
open\command
IsolatedCommand = "%1 %*"

HKEY_CURRENT_USER\5G\shell\
runas\command
IsolatedCommand = "%1 %*"

HKEY_CURRENT_USER\hol
Content Type = "application/x-msdownload"

HKEY_CURRENT_USER\hol\shell\
open\command
IsolatedCommand = "%1 %*"

HKEY_CURRENT_USER\hol\shell\
runas\command
IsolatedCommand = "%1 %*"

HKEY_CURRENT_USER\8H
Content Type = "application/x-msdownload"

HKEY_CURRENT_USER\8H\shell\
open\command
IsolatedCommand = "%1 %*"

HKEY_CURRENT_USER\8H\shell\
runas\command
IsolatedCommand = "%1 %*"

HKEY_CURRENT_USER\iB
Content Type = "application/x-msdownload"

HKEY_CURRENT_USER\iB\shell\
open\command
IsolatedCommand = "%1 %*"

HKEY_CURRENT_USER\iB\shell\
runas\command
IsolatedCommand = "%1 %*"

HKEY_CURRENT_USER\56
Content Type = "application/x-msdownload"

HKEY_CURRENT_USER\56\shell\
open\command
IsolatedCommand = "%1 %*"

HKEY_CURRENT_USER\56\shell\
runas\command
IsolatedCommand = "%1 %*"

HKEY_CURRENT_USER\r31
Content Type = "application/x-msdownload"

HKEY_CURRENT_USER\r31\shell\
open\command
IsolatedCommand = "%1 %*"

HKEY_CURRENT_USER\r31\shell\
runas\command
IsolatedCommand = "%1 %*"

HKEY_CURRENT_USER\ti
Content Type = "application/x-msdownload"

HKEY_CURRENT_USER\ti\shell\
open\command
IsolatedCommand = "%1 %*"

HKEY_CURRENT_USER\ti\shell\
runas\command
IsolatedCommand = "%1 %*"

HKEY_CURRENT_USER\UW
Content Type = "application/x-msdownload"

HKEY_CURRENT_USER\UW\shell\
open\command
IsolatedCommand = "%1 %*"

HKEY_CURRENT_USER\UW\shell\
runas\command
IsolatedCommand = "%1 %*"

HKEY_CURRENT_USER\8jV
Content Type = "application/x-msdownload"

HKEY_CURRENT_USER\8jV\shell\
open\command
IsolatedCommand = "%1 %*"

HKEY_CURRENT_USER\8jV\shell\
runas\command
IsolatedCommand = "%1 %*"

HKEY_CURRENT_USER\s25
Content Type = "application/x-msdownload"

HKEY_CURRENT_USER\s25\shell\
open\command
IsolatedCommand = "%1 %*"

HKEY_CURRENT_USER\s25\shell\
runas\command
IsolatedCommand = "%1 %*"

HKEY_CURRENT_USER\03v
Content Type = "application/x-msdownload"

HKEY_CURRENT_USER\03v\shell\
open\command
IsolatedCommand = "%1 %*"

HKEY_CURRENT_USER\03v\shell\
runas\command
IsolatedCommand = "%1 %*"

HKEY_CURRENT_USER\7yk
Content Type = "application/x-msdownload"

HKEY_CURRENT_USER\7yk\shell\
open\command
IsolatedCommand = "%1 %*"

HKEY_CURRENT_USER\7yk\shell\
runas\command
IsolatedCommand = "%1 %*"

HKEY_CURRENT_USER\qu
Content Type = "application/x-msdownload"

HKEY_CURRENT_USER\qu\shell\
open\command
IsolatedCommand = "%1 %*"

HKEY_CURRENT_USER\qu\shell\
runas\command
IsolatedCommand = "%1 %*"

HKEY_CURRENT_USER\6y
Content Type = "application/x-msdownload"

HKEY_CURRENT_USER\6y\shell\
open\command
IsolatedCommand = "%1 %*"

HKEY_CURRENT_USER\6y\shell\
runas\command
IsolatedCommand = "%1 %*"

HKEY_CURRENT_USER\bkk
Content Type = "application/x-msdownload"

HKEY_CURRENT_USER\bkk\shell\
open\command
IsolatedCommand = "%1 %*"

HKEY_CURRENT_USER\bkk\shell\
runas\command
IsolatedCommand = "%1 %*"

HKEY_CURRENT_USER\6L
Content Type = "application/x-msdownload"

HKEY_CURRENT_USER\6L\shell\
open\command
IsolatedCommand = "%1 %*"

HKEY_CURRENT_USER\6L\shell\
runas\command
IsolatedCommand = "%1 %*"

HKEY_CURRENT_USER\uP
Content Type = "application/x-msdownload"

HKEY_CURRENT_USER\uP\shell\
open\command
IsolatedCommand = "%1 %*"

HKEY_CURRENT_USER\uP\shell\
runas\command
IsolatedCommand = "%1 %*"

HKEY_CURRENT_USER\ImH
Content Type = "application/x-msdownload"

HKEY_CURRENT_USER\ImH\shell\
open\command
IsolatedCommand = "%1 %*"

HKEY_CURRENT_USER\ImH\shell\
runas\command
IsolatedCommand = "%1 %*"

HKEY_CURRENT_USER\J7
Content Type = "application/x-msdownload"

HKEY_CURRENT_USER\J7\shell\
open\command
IsolatedCommand = "%1 %*"

HKEY_CURRENT_USER\J7\shell\
runas\command
IsolatedCommand = "%1 %*"

HKEY_CURRENT_USER\xc
Content Type = "application/x-msdownload"

HKEY_CURRENT_USER\xc\shell\
open\command
IsolatedCommand = "%1 %*"

HKEY_CURRENT_USER\xc\shell\
runas\command
IsolatedCommand = "%1 %*"

HKEY_CURRENT_USER\CN
Content Type = "application/x-msdownload"

HKEY_CURRENT_USER\CN\shell\
open\command
IsolatedCommand = "%1 %*"

HKEY_CURRENT_USER\CN\shell\
runas\command
IsolatedCommand = "%1 %*"

HKEY_CURRENT_USER\8I
Content Type = "application/x-msdownload"

HKEY_CURRENT_USER\8I\shell\
open\command
IsolatedCommand = "%1 %*"

HKEY_CURRENT_USER\8I\shell\
runas\command
IsolatedCommand = "%1 %*"

HKEY_CURRENT_USER\Rc
Content Type = "application/x-msdownload"

HKEY_CURRENT_USER\Rc\shell\
open\command
IsolatedCommand = "%1 %*"

HKEY_CURRENT_USER\Rc\shell\
runas\command
IsolatedCommand = "%1 %*"

HKEY_CURRENT_USER\32A
Content Type = "application/x-msdownload"

HKEY_CURRENT_USER\32A\shell\
open\command
IsolatedCommand = "%1 %*"

HKEY_CURRENT_USER\32A\shell\
runas\command
IsolatedCommand = "%1 %*"

HKEY_CURRENT_USER\0K
Content Type = "application/x-msdownload"

HKEY_CURRENT_USER\0K\shell\
open\command
IsolatedCommand = "%1 %*"

HKEY_CURRENT_USER\0K\shell\
runas\command
IsolatedCommand = "%1 %*"

HKEY_CURRENT_USER\y0G
Content Type = "application/x-msdownload"

HKEY_CURRENT_USER\y0G\shell\
open\command
IsolatedCommand = "%1 %*"

HKEY_CURRENT_USER\y0G\shell\
runas\command
IsolatedCommand = "%1 %*"

HKEY_CURRENT_USER\S7
Content Type = "application/x-msdownload"

HKEY_CURRENT_USER\S7\shell\
open\command
IsolatedCommand = "%1 %*"

HKEY_CURRENT_USER\S7\shell\
runas\command
IsolatedCommand = "%1 %*"

HKEY_CURRENT_USER\5L6
Content Type = "application/x-msdownload"

HKEY_CURRENT_USER\5L6\shell\
open\command
IsolatedCommand = "%1 %*"

HKEY_CURRENT_USER\5L6\shell\
runas\command
IsolatedCommand = "%1 %*"

HKEY_CURRENT_USER\7D
Content Type = "application/x-msdownload"

HKEY_CURRENT_USER\7D\shell\
open\command
IsolatedCommand = "%1 %*"

HKEY_CURRENT_USER\7D\shell\
runas\command
IsolatedCommand = "%1 %*"

HKEY_CURRENT_USER\1W
Content Type = "application/x-msdownload"

HKEY_CURRENT_USER\1W\shell\
open\command
IsolatedCommand = "%1 %*"

HKEY_CURRENT_USER\1W\shell\
runas\command
IsolatedCommand = "%1 %*"

HKEY_CURRENT_USER\iX2
Content Type = "application/x-msdownload"

HKEY_CURRENT_USER\iX2\shell\
open\command
IsolatedCommand = "%1 %*"

HKEY_CURRENT_USER\iX2\shell\
runas\command
IsolatedCommand = "%1 %*"

HKEY_CURRENT_USER\lH3
Content Type = "application/x-msdownload"

HKEY_CURRENT_USER\lH3\shell\
open\command
IsolatedCommand = "%1 %*"

HKEY_CURRENT_USER\lH3\shell\
runas\command
IsolatedCommand = "%1 %*"

HKEY_CURRENT_USER\6v
Content Type = "application/x-msdownload"

HKEY_CURRENT_USER\6v\shell\
open\command
IsolatedCommand = "%1 %*"

HKEY_CURRENT_USER\6v\shell\
runas\command
IsolatedCommand = "%1 %*"

HKEY_CURRENT_USER\gF7
Content Type = "application/x-msdownload"

HKEY_CURRENT_USER\gF7\shell\
open\command
IsolatedCommand = "%1 %*"

HKEY_CURRENT_USER\gF7\shell\
runas\command
IsolatedCommand = "%1 %*"

HKEY_CURRENT_USER\T3
Content Type = "application/x-msdownload"

HKEY_CURRENT_USER\T3\shell\
open\command
IsolatedCommand = "%1 %*"

HKEY_CURRENT_USER\T3\shell\
runas\command
IsolatedCommand = "%1 %*"

HKEY_CURRENT_USER\PK
Content Type = "application/x-msdownload"

HKEY_CURRENT_USER\PK\shell\
open\command
IsolatedCommand = "%1 %*"

HKEY_CURRENT_USER\PK\shell\
runas\command
IsolatedCommand = "%1 %*"

HKEY_CURRENT_USER\h1
Content Type = "application/x-msdownload"

HKEY_CURRENT_USER\h1\shell\
open\command
IsolatedCommand = "%1 %*"

HKEY_CURRENT_USER\h1\shell\
runas\command
IsolatedCommand = "%1 %*"

HKEY_CURRENT_USER\DA
Content Type = "application/x-msdownload"

HKEY_CURRENT_USER\DA\shell\
open\command
IsolatedCommand = "%1 %*"

HKEY_CURRENT_USER\DA\shell\
runas\command
IsolatedCommand = "%1 %*"

HKEY_CURRENT_USER\sW
Content Type = "application/x-msdownload"

HKEY_CURRENT_USER\sW\shell\
open\command
IsolatedCommand = "%1 %*"

HKEY_CURRENT_USER\sW\shell\
runas\command
IsolatedCommand = "%1 %*"

HKEY_CURRENT_USER\R6
Content Type = "application/x-msdownload"

HKEY_CURRENT_USER\R6\shell\
open\command
IsolatedCommand = "%1 %*"

HKEY_CURRENT_USER\R6\shell\
runas\command
IsolatedCommand = "%1 %*"

HKEY_CURRENT_USER\51Q
Content Type = "application/x-msdownload"

HKEY_CURRENT_USER\51Q\shell\
open\command
IsolatedCommand = "%1 %*"

HKEY_CURRENT_USER\51Q\shell\
runas\command
IsolatedCommand = "%1 %*"

HKEY_CURRENT_USER\1j8
Content Type = "application/x-msdownload"

HKEY_CURRENT_USER\1j8\shell\
open\command
IsolatedCommand = "%1 %*"

HKEY_CURRENT_USER\1j8\shell\
runas\command
IsolatedCommand = "%1 %*"

HKEY_CURRENT_USER\8Ot
Content Type = "application/x-msdownload"

HKEY_CURRENT_USER\8Ot\shell\
open\command
IsolatedCommand = "%1 %*"

HKEY_CURRENT_USER\8Ot\shell\
runas\command
IsolatedCommand = "%1 %*"

HKEY_CURRENT_USER\X4
Content Type = "application/x-msdownload"

HKEY_CURRENT_USER\X4\shell\
open\command
IsolatedCommand = "%1 %*"

HKEY_CURRENT_USER\X4\shell\
runas\command
IsolatedCommand = "%1 %*"

HKEY_CURRENT_USER\TO
Content Type = "application/x-msdownload"

HKEY_CURRENT_USER\TO\shell\
open\command
IsolatedCommand = "%1 %*"

HKEY_CURRENT_USER\TO\shell\
runas\command
IsolatedCommand = "%1 %*"

HKEY_CURRENT_USER\873
Content Type = "application/x-msdownload"

HKEY_CURRENT_USER\873\shell\
open\command
IsolatedCommand = "%1 %*"

HKEY_CURRENT_USER\873\shell\
runas\command
IsolatedCommand = "%1 %*"

HKEY_CURRENT_USER\MVr
Content Type = "application/x-msdownload"

HKEY_CURRENT_USER\MVr\shell\
open\command
IsolatedCommand = "%1 %*"

HKEY_CURRENT_USER\MVr\shell\
runas\command
IsolatedCommand = "%1 %*"

HKEY_CURRENT_USER\qP
Content Type = "application/x-msdownload"

HKEY_CURRENT_USER\qP\shell\
open\command
IsolatedCommand = "%1 %*"

HKEY_CURRENT_USER\qP\shell\
runas\command
IsolatedCommand = "%1 %*"

HKEY_CURRENT_USER\E2O
Content Type = "application/x-msdownload"

HKEY_CURRENT_USER\E2O\shell\
open\command
IsolatedCommand = "%1 %*"

HKEY_CURRENT_USER\E2O\shell\
runas\command
IsolatedCommand = "%1 %*"

HKEY_CURRENT_USER\KYp
Content Type = "application/x-msdownload"

HKEY_CURRENT_USER\KYp\shell\
open\command
IsolatedCommand = "%1 %*"

HKEY_CURRENT_USER\KYp\shell\
runas\command
IsolatedCommand = "%1 %*"

HKEY_CURRENT_USER\4g
Content Type = "application/x-msdownload"

HKEY_CURRENT_USER\4g\shell\
open\command
IsolatedCommand = "%1 %*"

HKEY_CURRENT_USER\4g\shell\
runas\command
IsolatedCommand = "%1 %*"

HKEY_CURRENT_USER\oSk
Content Type = "application/x-msdownload"

HKEY_CURRENT_USER\oSk\shell\
open\command
IsolatedCommand = "%1 %*"

HKEY_CURRENT_USER\oSk\shell\
runas\command
IsolatedCommand = "%1 %*"

HKEY_CURRENT_USER\kL
Content Type = "application/x-msdownload"

HKEY_CURRENT_USER\kL\shell\
open\command
IsolatedCommand = "%1 %*"

HKEY_CURRENT_USER\kL\shell\
runas\command
IsolatedCommand = "%1 %*"

HKEY_CURRENT_USER\7A
Content Type = "application/x-msdownload"

HKEY_CURRENT_USER\7A\shell\
open\command
IsolatedCommand = "%1 %*"

HKEY_CURRENT_USER\7A\shell\
runas\command
IsolatedCommand = "%1 %*"

HKEY_CURRENT_USER\J2
Content Type = "application/x-msdownload"

HKEY_CURRENT_USER\J2\shell\
open\command
IsolatedCommand = "%1 %*"

HKEY_CURRENT_USER\J2\shell\
runas\command
IsolatedCommand = "%1 %*"

HKEY_CURRENT_USER\Wiw
Content Type = "application/x-msdownload"

HKEY_CURRENT_USER\Wiw\shell\
open\command
IsolatedCommand = "%1 %*"

HKEY_CURRENT_USER\Wiw\shell\
runas\command
IsolatedCommand = "%1 %*"

HKEY_CURRENT_USER\4X5
Content Type = "application/x-msdownload"

HKEY_CURRENT_USER\4X5\shell\
open\command
IsolatedCommand = "%1 %*"

HKEY_CURRENT_USER\4X5\shell\
runas\command
IsolatedCommand = "%1 %*"

HKEY_CURRENT_USER\0n3
Content Type = "application/x-msdownload"

HKEY_CURRENT_USER\0n3\shell\
open\command
IsolatedCommand = "%1 %*"

HKEY_CURRENT_USER\0n3\shell\
runas\command
IsolatedCommand = "%1 %*"

HKEY_CURRENT_USER\5R
Content Type = "application/x-msdownload"

HKEY_CURRENT_USER\5R\shell\
open\command
IsolatedCommand = "%1 %*"

HKEY_CURRENT_USER\5R\shell\
runas\command
IsolatedCommand = "%1 %*"

HKEY_CURRENT_USER\2U8
Content Type = "application/x-msdownload"

HKEY_CURRENT_USER\2U8\shell\
open\command
IsolatedCommand = "%1 %*"

HKEY_CURRENT_USER\2U8\shell\
runas\command
IsolatedCommand = "%1 %*"

HKEY_CURRENT_USER\3G
Content Type = "application/x-msdownload"

HKEY_CURRENT_USER\3G\shell\
open\command
IsolatedCommand = "%1 %*"

HKEY_CURRENT_USER\3G\shell\
runas\command
IsolatedCommand = "%1 %*"

HKEY_CURRENT_USER\ji
Content Type = "application/x-msdownload"

HKEY_CURRENT_USER\ji\shell\
open\command
IsolatedCommand = "%1 %*"

HKEY_CURRENT_USER\ji\shell\
runas\command
IsolatedCommand = "%1 %*"

HKEY_CURRENT_USER\H46
Content Type = "application/x-msdownload"

HKEY_CURRENT_USER\H46\shell\
open\command
IsolatedCommand = "%1 %*"

HKEY_CURRENT_USER\H46\shell\
runas\command
IsolatedCommand = "%1 %*"

HKEY_CURRENT_USER\aJd
Content Type = "application/x-msdownload"

HKEY_CURRENT_USER\aJd\shell\
open\command
IsolatedCommand = "%1 %*"

HKEY_CURRENT_USER\aJd\shell\
runas\command
IsolatedCommand = "%1 %*"

HKEY_CURRENT_USER\31
Content Type = "application/x-msdownload"

HKEY_CURRENT_USER\31\shell\
open\command
IsolatedCommand = "%1 %*"

HKEY_CURRENT_USER\31\shell\
runas\command
IsolatedCommand = "%1 %*"

HKEY_CURRENT_USER\dLM
Content Type = "application/x-msdownload"

HKEY_CURRENT_USER\dLM\shell\
open\command
IsolatedCommand = "%1 %*"

HKEY_CURRENT_USER\dLM\shell\
runas\command
IsolatedCommand = "%1 %*"

HKEY_CURRENT_USER\8vh
Content Type = "application/x-msdownload"

HKEY_CURRENT_USER\8vh\shell\
open\command
IsolatedCommand = "%1 %*"

HKEY_CURRENT_USER\8vh\shell\
runas\command
IsolatedCommand = "%1 %*"

HKEY_CURRENT_USER\ga
Content Type = "application/x-msdownload"

HKEY_CURRENT_USER\ga\shell\
open\command
IsolatedCommand = "%1 %*"

HKEY_CURRENT_USER\ga\shell\
runas\command
IsolatedCommand = "%1 %*"

HKEY_CURRENT_USER\TD
Content Type = "application/x-msdownload"

HKEY_CURRENT_USER\TD\shell\
open\command
IsolatedCommand = "%1 %*"

HKEY_CURRENT_USER\TD\shell\
runas\command
IsolatedCommand = "%1 %*"

HKEY_CURRENT_USER\AS
Content Type = "application/x-msdownload"

HKEY_CURRENT_USER\AS\shell\
open\command
IsolatedCommand = "%1 %*"

HKEY_CURRENT_USER\AS\shell\
runas\command
IsolatedCommand = "%1 %*"

HKEY_CURRENT_USER\cvl
Content Type = "application/x-msdownload"

HKEY_CURRENT_USER\cvl\shell\
open\command
IsolatedCommand = "%1 %*"

HKEY_CURRENT_USER\cvl\shell\
runas\command
IsolatedCommand = "%1 %*"

HKEY_CURRENT_USER\F2
Content Type = "application/x-msdownload"

HKEY_CURRENT_USER\F2\shell\
open\command
IsolatedCommand = "%1 %*"

HKEY_CURRENT_USER\F2\shell\
runas\command
IsolatedCommand = "%1 %*"

HKEY_CURRENT_USER\MM7
Content Type = "application/x-msdownload"

HKEY_CURRENT_USER\MM7\shell\
open\command
IsolatedCommand = "%1 %*"

HKEY_CURRENT_USER\MM7\shell\
runas\command
IsolatedCommand = "%1 %*"

HKEY_CURRENT_USER\eb
Content Type = "application/x-msdownload"

HKEY_CURRENT_USER\eb\shell\
open\command
IsolatedCommand = "%1 %*"

HKEY_CURRENT_USER\eb\shell\
runas\command
IsolatedCommand = "%1 %*"

HKEY_CURRENT_USER\LXr
Content Type = "application/x-msdownload"

HKEY_CURRENT_USER\LXr\shell\
open\command
IsolatedCommand = "%1 %*"

HKEY_CURRENT_USER\LXr\shell\
runas\command
IsolatedCommand = "%1 %*"

HKEY_CURRENT_USER\rp
Content Type = "application/x-msdownload"

HKEY_CURRENT_USER\rp\shell\
open\command
IsolatedCommand = "%1 %*"

HKEY_CURRENT_USER\rp\shell\
runas\command
IsolatedCommand = "%1 %*"

HKEY_CURRENT_USER\iXP
Content Type = "application/x-msdownload"

HKEY_CURRENT_USER\iXP\shell\
open\command
IsolatedCommand = "%1 %*"

HKEY_CURRENT_USER\iXP\shell\
runas\command
IsolatedCommand = "%1 %*"

HKEY_CURRENT_USER\rcN
Content Type = "application/x-msdownload"

HKEY_CURRENT_USER\rcN\shell\
open\command
IsolatedCommand = "%1 %*"

HKEY_CURRENT_USER\rcN\shell\
runas\command
IsolatedCommand = "%1 %*"

HKEY_CURRENT_USER\61
Content Type = "application/x-msdownload"

HKEY_CURRENT_USER\61\shell\
open\command
IsolatedCommand = "%1 %*"

HKEY_CURRENT_USER\61\shell\
runas\command
IsolatedCommand = "%1 %*"

HKEY_CURRENT_USER\ne
Content Type = "application/x-msdownload"

HKEY_CURRENT_USER\ne\shell\
open\command
IsolatedCommand = "%1 %*"

HKEY_CURRENT_USER\ne\shell\
runas\command
IsolatedCommand = "%1 %*"

HKEY_CURRENT_USER\P8V
Content Type = "application/x-msdownload"

HKEY_CURRENT_USER\P8V\shell\
open\command
IsolatedCommand = "%1 %*"

HKEY_CURRENT_USER\P8V\shell\
runas\command
IsolatedCommand = "%1 %*"

HKEY_CURRENT_USER\1Un
Content Type = "application/x-msdownload"

HKEY_CURRENT_USER\1Un\shell\
open\command
IsolatedCommand = "%1 %*"

HKEY_CURRENT_USER\1Un\shell\
runas\command
IsolatedCommand = "%1 %*"

HKEY_CURRENT_USER\lM
Content Type = "application/x-msdownload"

HKEY_CURRENT_USER\lM\shell\
open\command
IsolatedCommand = "%1 %*"

HKEY_CURRENT_USER\lM\shell\
runas\command
IsolatedCommand = "%1 %*"

HKEY_CURRENT_USER\6d
Content Type = "application/x-msdownload"

HKEY_CURRENT_USER\6d\shell\
open\command
IsolatedCommand = "%1 %*"

HKEY_CURRENT_USER\6d\shell\
runas\command
IsolatedCommand = "%1 %*"

HKEY_CURRENT_USER\8cx
Content Type = "application/x-msdownload"

HKEY_CURRENT_USER\8cx\shell\
open\command
IsolatedCommand = "%1 %*"

HKEY_CURRENT_USER\8cx\shell\
runas\command
IsolatedCommand = "%1 %*"

HKEY_CURRENT_USER\mD4
Content Type = "application/x-msdownload"

HKEY_CURRENT_USER\mD4\shell\
open\command
IsolatedCommand = "%1 %*"

HKEY_CURRENT_USER\mD4\shell\
runas\command
IsolatedCommand = "%1 %*"

HKEY_CURRENT_USER\FB2
Content Type = "application/x-msdownload"

HKEY_CURRENT_USER\FB2\shell\
open\command
IsolatedCommand = "%1 %*"

HKEY_CURRENT_USER\FB2\shell\
runas\command
IsolatedCommand = "%1 %*"

HKEY_CURRENT_USER\D3t
Content Type = "application/x-msdownload"

HKEY_CURRENT_USER\D3t\shell\
open\command
IsolatedCommand = "%1 %*"

HKEY_CURRENT_USER\D3t\shell\
runas\command
IsolatedCommand = "%1 %*"

HKEY_CURRENT_USER\Qe
Content Type = "application/x-msdownload"

HKEY_CURRENT_USER\Qe\shell\
open\command
IsolatedCommand = "%1 %*"

HKEY_CURRENT_USER\Qe\shell\
runas\command
IsolatedCommand = "%1 %*"

HKEY_CURRENT_USER\72
Content Type = "application/x-msdownload"

HKEY_CURRENT_USER\72\shell\
open\command
IsolatedCommand = "%1 %*"

HKEY_CURRENT_USER\72\shell\
runas\command
IsolatedCommand = "%1 %*"

HKEY_CURRENT_USER\N0q
Content Type = "application/x-msdownload"

HKEY_CURRENT_USER\N0q\shell\
open\command
IsolatedCommand = "%1 %*"

HKEY_CURRENT_USER\N0q\shell\
runas\command
IsolatedCommand = "%1 %*"

HKEY_CURRENT_USER\WG
Content Type = "application/x-msdownload"

HKEY_CURRENT_USER\WG\shell\
open\command
IsolatedCommand = "%1 %*"

HKEY_CURRENT_USER\WG\shell\
runas\command
IsolatedCommand = "%1 %*"

HKEY_CURRENT_USER\32J
Content Type = "application/x-msdownload"

HKEY_CURRENT_USER\32J\shell\
open\command
IsolatedCommand = "%1 %*"

HKEY_CURRENT_USER\32J\shell\
runas\command
IsolatedCommand = "%1 %*"

HKEY_CURRENT_USER\d1
Content Type = "application/x-msdownload"

HKEY_CURRENT_USER\d1\shell\
open\command
IsolatedCommand = "%1 %*"

HKEY_CURRENT_USER\d1\shell\
runas\command
IsolatedCommand = "%1 %*"

HKEY_CURRENT_USER\7P1
Content Type = "application/x-msdownload"

HKEY_CURRENT_USER\7P1\shell\
open\command
IsolatedCommand = "%1 %*"

HKEY_CURRENT_USER\7P1\shell\
runas\command
IsolatedCommand = "%1 %*"

HKEY_CURRENT_USER\p3
Content Type = "application/x-msdownload"

HKEY_CURRENT_USER\p3\shell\
open\command
IsolatedCommand = "%1 %*"

HKEY_CURRENT_USER\p3\shell\
runas\command
IsolatedCommand = "%1 %*"

HKEY_CURRENT_USER\31e
Content Type = "application/x-msdownload"

HKEY_CURRENT_USER\31e\shell\
open\command
IsolatedCommand = "%1 %*"

HKEY_CURRENT_USER\31e\shell\
runas\command
IsolatedCommand = "%1 %*"

HKEY_CURRENT_USER\ks
Content Type = "application/x-msdownload"

HKEY_CURRENT_USER\ks\shell\
open\command
IsolatedCommand = "%1 %*"

HKEY_CURRENT_USER\ks\shell\
runas\command
IsolatedCommand = "%1 %*"

HKEY_CURRENT_USER\XPW
Content Type = "application/x-msdownload"

HKEY_CURRENT_USER\XPW\shell\
open\command
IsolatedCommand = "%1 %*"

HKEY_CURRENT_USER\XPW\shell\
runas\command
IsolatedCommand = "%1 %*"

HKEY_CURRENT_USER\21
Content Type = "application/x-msdownload"

HKEY_CURRENT_USER\21\shell\
open\command
IsolatedCommand = "%1 %*"

HKEY_CURRENT_USER\21\shell\
runas\command
IsolatedCommand = "%1 %*"

HKEY_CURRENT_USER\3M
Content Type = "application/x-msdownload"

HKEY_CURRENT_USER\3M\shell\
open\command
IsolatedCommand = "%1 %*"

HKEY_CURRENT_USER\3M\shell\
runas\command
IsolatedCommand = "%1 %*"

HKEY_CURRENT_USER\wTo
Content Type = "application/x-msdownload"

HKEY_CURRENT_USER\wTo\shell\
open\command
IsolatedCommand = "%1 %*"

HKEY_CURRENT_USER\wTo\shell\
runas\command
IsolatedCommand = "%1 %*"

HKEY_CURRENT_USER\5V
Content Type = "application/x-msdownload"

HKEY_CURRENT_USER\5V\shell\
open\command
IsolatedCommand = "%1 %*"

HKEY_CURRENT_USER\5V\shell\
runas\command
IsolatedCommand = "%1 %*"

HKEY_CURRENT_USER\ath
Content Type = "application/x-msdownload"

HKEY_CURRENT_USER\ath\shell\
open\command
IsolatedCommand = "%1 %*"

HKEY_CURRENT_USER\ath\shell\
runas\command
IsolatedCommand = "%1 %*"

HKEY_CURRENT_USER\47g
Content Type = "application/x-msdownload"

HKEY_CURRENT_USER\47g\shell\
open\command
IsolatedCommand = "%1 %*"

HKEY_CURRENT_USER\47g\shell\
runas\command
IsolatedCommand = "%1 %*"

HKEY_CURRENT_USER\O4
Content Type = "application/x-msdownload"

HKEY_CURRENT_USER\O4\shell\
open\command
IsolatedCommand = "%1 %*"

HKEY_CURRENT_USER\O4\shell\
runas\command
IsolatedCommand = "%1 %*"

HKEY_CURRENT_USER\8l
Content Type = "application/x-msdownload"

HKEY_CURRENT_USER\8l\shell\
open\command
IsolatedCommand = "%1 %*"

HKEY_CURRENT_USER\8l\shell\
runas\command
IsolatedCommand = "%1 %*"

HKEY_CURRENT_USER\K7
Content Type = "application/x-msdownload"

HKEY_CURRENT_USER\K7\shell\
open\command
IsolatedCommand = "%1 %*"

HKEY_CURRENT_USER\K7\shell\
runas\command
IsolatedCommand = "%1 %*"

HKEY_CURRENT_USER\gR
Content Type = "application/x-msdownload"

HKEY_CURRENT_USER\gR\shell\
open\command
IsolatedCommand = "%1 %*"

HKEY_CURRENT_USER\gR\shell\
runas\command
IsolatedCommand = "%1 %*"

HKEY_CURRENT_USER\m3p
Content Type = "application/x-msdownload"

HKEY_CURRENT_USER\m3p\shell\
open\command
IsolatedCommand = "%1 %*"

HKEY_CURRENT_USER\m3p\shell\
runas\command
IsolatedCommand = "%1 %*"

HKEY_CURRENT_USER\12
Content Type = "application/x-msdownload"

HKEY_CURRENT_USER\12\shell\
open\command
IsolatedCommand = "%1 %*"

HKEY_CURRENT_USER\12\shell\
runas\command
IsolatedCommand = "%1 %*"

HKEY_CURRENT_USER\iY
Content Type = "application/x-msdownload"

HKEY_CURRENT_USER\iY\shell\
open\command
IsolatedCommand = "%1 %*"

HKEY_CURRENT_USER\iY\shell\
runas\command
IsolatedCommand = "%1 %*"

HKEY_CURRENT_USER\uO
Content Type = "application/x-msdownload"

HKEY_CURRENT_USER\uO\shell\
open\command
IsolatedCommand = "%1 %*"

HKEY_CURRENT_USER\uO\shell\
runas\command
IsolatedCommand = "%1 %*"

HKEY_CURRENT_USER\ssR
Content Type = "application/x-msdownload"

HKEY_CURRENT_USER\ssR\shell\
open\command
IsolatedCommand = "%1 %*"

HKEY_CURRENT_USER\ssR\shell\
runas\command
IsolatedCommand = "%1 %*"

HKEY_CURRENT_USER\b71
Content Type = "application/x-msdownload"

HKEY_CURRENT_USER\b71\shell\
open\command
IsolatedCommand = "%1 %*"

HKEY_CURRENT_USER\b71\shell\
runas\command
IsolatedCommand = "%1 %*"

HKEY_CURRENT_USER\N5F
Content Type = "application/x-msdownload"

HKEY_CURRENT_USER\N5F\shell\
open\command
IsolatedCommand = "%1 %*"

HKEY_CURRENT_USER\N5F\shell\
runas\command
IsolatedCommand = "%1 %*"

HKEY_CURRENT_USER\c1Q
Content Type = "application/x-msdownload"

HKEY_CURRENT_USER\c1Q\shell\
open\command
IsolatedCommand = "%1 %*"

HKEY_CURRENT_USER\c1Q\shell\
runas\command
IsolatedCommand = "%1 %*"

HKEY_CURRENT_USER\E4
Content Type = "application/x-msdownload"

HKEY_CURRENT_USER\E4\shell\
open\command
IsolatedCommand = "%1 %*"

HKEY_CURRENT_USER\E4\shell\
runas\command
IsolatedCommand = "%1 %*"

HKEY_CURRENT_USER\0O1
Content Type = "application/x-msdownload"

HKEY_CURRENT_USER\0O1\shell\
open\command
IsolatedCommand = "%1 %*"

HKEY_CURRENT_USER\0O1\shell\
runas\command
IsolatedCommand = "%1 %*"

HKEY_CURRENT_USER\358
Content Type = "application/x-msdownload"

HKEY_CURRENT_USER\358\shell\
open\command
IsolatedCommand = "%1 %*"

HKEY_CURRENT_USER\358\shell\
runas\command
IsolatedCommand = "%1 %*"

HKEY_CURRENT_USER\GUb
Content Type = "application/x-msdownload"

HKEY_CURRENT_USER\GUb\shell\
open\command
IsolatedCommand = "%1 %*"

HKEY_CURRENT_USER\GUb\shell\
runas\command
IsolatedCommand = "%1 %*"

HKEY_CURRENT_USER\MMA
Content Type = "application/x-msdownload"

HKEY_CURRENT_USER\MMA\shell\
open\command
IsolatedCommand = "%1 %*"

HKEY_CURRENT_USER\MMA\shell\
runas\command
IsolatedCommand = "%1 %*"

HKEY_CURRENT_USER\70
Content Type = "application/x-msdownload"

HKEY_CURRENT_USER\70\shell\
open\command
IsolatedCommand = "%1 %*"

HKEY_CURRENT_USER\70\shell\
runas\command
IsolatedCommand = "%1 %*"

HKEY_CURRENT_USER\cB8
Content Type = "application/x-msdownload"

HKEY_CURRENT_USER\cB8\shell\
open\command
IsolatedCommand = "%1 %*"

HKEY_CURRENT_USER\cB8\shell\
runas\command
IsolatedCommand = "%1 %*"

HKEY_CURRENT_USER\5aO
Content Type = "application/x-msdownload"

HKEY_CURRENT_USER\5aO\shell\
open\command
IsolatedCommand = "%1 %*"

HKEY_CURRENT_USER\5aO\shell\
runas\command
IsolatedCommand = "%1 %*"

HKEY_CURRENT_USER\yO
Content Type = "application/x-msdownload"

HKEY_CURRENT_USER\yO\shell\
open\command
IsolatedCommand = "%1 %*"

HKEY_CURRENT_USER\yO\shell\
runas\command
IsolatedCommand = "%1 %*"

HKEY_CURRENT_USER\iQf
Content Type = "application/x-msdownload"

HKEY_CURRENT_USER\iQf\shell\
open\command
IsolatedCommand = "%1 %*"

HKEY_CURRENT_USER\iQf\shell\
runas\command
IsolatedCommand = "%1 %*"

HKEY_CURRENT_USER\6DL
Content Type = "application/x-msdownload"

HKEY_CURRENT_USER\6DL\shell\
open\command
IsolatedCommand = "%1 %*"

HKEY_CURRENT_USER\6DL\shell\
runas\command
IsolatedCommand = "%1 %*"

HKEY_CURRENT_USER\432
Content Type = "application/x-msdownload"

HKEY_CURRENT_USER\432\shell\
open\command
IsolatedCommand = "%1 %*"

HKEY_CURRENT_USER\432\shell\
runas\command
IsolatedCommand = "%1 %*"

HKEY_CURRENT_USER\q3
Content Type = "application/x-msdownload"

HKEY_CURRENT_USER\q3\shell\
open\command
IsolatedCommand = "%1 %*"

HKEY_CURRENT_USER\q3\shell\
runas\command
IsolatedCommand = "%1 %*"

HKEY_CURRENT_USER\Ce
Content Type = "application/x-msdownload"

HKEY_CURRENT_USER\Ce\shell\
open\command
IsolatedCommand = "%1 %*"

HKEY_CURRENT_USER\Ce\shell\
runas\command
IsolatedCommand = "%1 %*"

HKEY_CURRENT_USER\t0V
Content Type = "application/x-msdownload"

HKEY_CURRENT_USER\t0V\shell\
open\command
IsolatedCommand = "%1 %*"

HKEY_CURRENT_USER\t0V\shell\
runas\command
IsolatedCommand = "%1 %*"

HKEY_CURRENT_USER\m1j
Content Type = "application/x-msdownload"

HKEY_CURRENT_USER\m1j\shell\
open\command
IsolatedCommand = "%1 %*"

HKEY_CURRENT_USER\m1j\shell\
runas\command
IsolatedCommand = "%1 %*"

HKEY_CURRENT_USER\2db
Content Type = "application/x-msdownload"

HKEY_CURRENT_USER\2db\shell\
open\command
IsolatedCommand = "%1 %*"

HKEY_CURRENT_USER\2db\shell\
runas\command
IsolatedCommand = "%1 %*"

HKEY_CURRENT_USER\cO
Content Type = "application/x-msdownload"

HKEY_CURRENT_USER\cO\shell\
open\command
IsolatedCommand = "%1 %*"

HKEY_CURRENT_USER\cO\shell\
runas\command
IsolatedCommand = "%1 %*"

HKEY_CURRENT_USER\6pp
Content Type = "application/x-msdownload"

HKEY_CURRENT_USER\6pp\shell\
open\command
IsolatedCommand = "%1 %*"

HKEY_CURRENT_USER\6pp\shell\
runas\command
IsolatedCommand = "%1 %*"

HKEY_CURRENT_USER\Pd8
Content Type = "application/x-msdownload"

HKEY_CURRENT_USER\Pd8\shell\
open\command
IsolatedCommand = "%1 %*"

HKEY_CURRENT_USER\Pd8\shell\
runas\command
IsolatedCommand = "%1 %*"

HKEY_CURRENT_USER\bn
Content Type = "application/x-msdownload"

HKEY_CURRENT_USER\bn\shell\
open\command
IsolatedCommand = "%1 %*"

HKEY_CURRENT_USER\bn\shell\
runas\command
IsolatedCommand = "%1 %*"

HKEY_CURRENT_USER\xB
Content Type = "application/x-msdownload"

HKEY_CURRENT_USER\xB\shell\
open\command
IsolatedCommand = "%1 %*"

HKEY_CURRENT_USER\xB\shell\
runas\command
IsolatedCommand = "%1 %*"

HKEY_CURRENT_USER\nv
Content Type = "application/x-msdownload"

HKEY_CURRENT_USER\nv\shell\
open\command
IsolatedCommand = "%1 %*"

HKEY_CURRENT_USER\nv\shell\
runas\command
IsolatedCommand = "%1 %*"

HKEY_CURRENT_USER\N04
Content Type = "application/x-msdownload"

HKEY_CURRENT_USER\N04\shell\
open\command
IsolatedCommand = "%1 %*"

HKEY_CURRENT_USER\N04\shell\
runas\command
IsolatedCommand = "%1 %*"

HKEY_CURRENT_USER\2iG
Content Type = "application/x-msdownload"

HKEY_CURRENT_USER\2iG\shell\
open\command
IsolatedCommand = "%1 %*"

HKEY_CURRENT_USER\2iG\shell\
runas\command
IsolatedCommand = "%1 %*"

HKEY_CURRENT_USER\nMe
Content Type = "application/x-msdownload"

HKEY_CURRENT_USER\nMe\shell\
open\command
IsolatedCommand = "%1 %*"

HKEY_CURRENT_USER\nMe\shell\
runas\command
IsolatedCommand = "%1 %*"

HKEY_CURRENT_USER\02
Content Type = "application/x-msdownload"

HKEY_CURRENT_USER\02\shell\
open\command
IsolatedCommand = "%1 %*"

HKEY_CURRENT_USER\02\shell\
runas\command
IsolatedCommand = "%1 %*"

HKEY_CURRENT_USER\2WU
Content Type = "application/x-msdownload"

HKEY_CURRENT_USER\2WU\shell\
open\command
IsolatedCommand = "%1 %*"

HKEY_CURRENT_USER\2WU\shell\
runas\command
IsolatedCommand = "%1 %*"

HKEY_CURRENT_USER\8x
Content Type = "application/x-msdownload"

HKEY_CURRENT_USER\8x\shell\
open\command
IsolatedCommand = "%1 %*"

HKEY_CURRENT_USER\8x\shell\
runas\command
IsolatedCommand = "%1 %*"

HKEY_CURRENT_USER\1O
Content Type = "application/x-msdownload"

HKEY_CURRENT_USER\1O\shell\
open\command
IsolatedCommand = "%1 %*"

HKEY_CURRENT_USER\1O\shell\
runas\command
IsolatedCommand = "%1 %*"

HKEY_CURRENT_USER\nEI
Content Type = "application/x-msdownload"

HKEY_CURRENT_USER\nEI\shell\
open\command
IsolatedCommand = "%1 %*"

HKEY_CURRENT_USER\nEI\shell\
runas\command
IsolatedCommand = "%1 %*"

HKEY_CURRENT_USER\egp
Content Type = "application/x-msdownload"

HKEY_CURRENT_USER\egp\shell\
open\command
IsolatedCommand = "%1 %*"

HKEY_CURRENT_USER\egp\shell\
runas\command
IsolatedCommand = "%1 %*"

HKEY_CURRENT_USER\g4
Content Type = "application/x-msdownload"

HKEY_CURRENT_USER\g4\shell\
open\command
IsolatedCommand = "%1 %*"

HKEY_CURRENT_USER\g4\shell\
runas\command
IsolatedCommand = "%1 %*"

HKEY_CURRENT_USER\Hr
Content Type = "application/x-msdownload"

HKEY_CURRENT_USER\Hr\shell\
open\command
IsolatedCommand = "%1 %*"

HKEY_CURRENT_USER\Hr\shell\
runas\command
IsolatedCommand = "%1 %*"

HKEY_CURRENT_USER\01
Content Type = "application/x-msdownload"

HKEY_CURRENT_USER\01\shell\
open\command
IsolatedCommand = "%1 %*"

HKEY_CURRENT_USER\01\shell\
runas\command
IsolatedCommand = "%1 %*"

HKEY_CURRENT_USER\W5
Content Type = "application/x-msdownload"

HKEY_CURRENT_USER\W5\shell\
open\command
IsolatedCommand = "%1 %*"

HKEY_CURRENT_USER\W5\shell\
runas\command
IsolatedCommand = "%1 %*"

HKEY_CURRENT_USER\3d
Content Type = "application/x-msdownload"

HKEY_CURRENT_USER\3d\shell\
open\command
IsolatedCommand = "%1 %*"

HKEY_CURRENT_USER\3d\shell\
runas\command
IsolatedCommand = "%1 %*"

HKEY_CURRENT_USER\i2M
Content Type = "application/x-msdownload"

HKEY_CURRENT_USER\i2M\shell\
open\command
IsolatedCommand = "%1 %*"

HKEY_CURRENT_USER\i2M\shell\
runas\command
IsolatedCommand = "%1 %*"

HKEY_CURRENT_USER\K03
Content Type = "application/x-msdownload"

HKEY_CURRENT_USER\K03\shell\
open\command
IsolatedCommand = "%1 %*"

HKEY_CURRENT_USER\K03\shell\
runas\command
IsolatedCommand = "%1 %*"

HKEY_CURRENT_USER\fI
Content Type = "application/x-msdownload"

HKEY_CURRENT_USER\fI\shell\
open\command
IsolatedCommand = "%1 %*"

HKEY_CURRENT_USER\fI\shell\
runas\command
IsolatedCommand = "%1 %*"

HKEY_CURRENT_USER\n4
Content Type = "application/x-msdownload"

HKEY_CURRENT_USER\n4\shell\
open\command
IsolatedCommand = "%1 %*"

HKEY_CURRENT_USER\n4\shell\
runas\command
IsolatedCommand = "%1 %*"

HKEY_CURRENT_USER\x2g
Content Type = "application/x-msdownload"

HKEY_CURRENT_USER\x2g\shell\
open\command
IsolatedCommand = "%1 %*"

HKEY_CURRENT_USER\x2g\shell\
runas\command
IsolatedCommand = "%1 %*"

HKEY_CURRENT_USER\ed
Content Type = "application/x-msdownload"

HKEY_CURRENT_USER\ed\shell\
open\command
IsolatedCommand = "%1 %*"

HKEY_CURRENT_USER\ed\shell\
runas\command
IsolatedCommand = "%1 %*"

HKEY_CURRENT_USER\VjW
Content Type = "application/x-msdownload"

HKEY_CURRENT_USER\VjW\shell\
open\command
IsolatedCommand = "%1 %*"

HKEY_CURRENT_USER\VjW\shell\
runas\command
IsolatedCommand = "%1 %*"

HKEY_CURRENT_USER\ux
Content Type = "application/x-msdownload"

HKEY_CURRENT_USER\ux\shell\
open\command
IsolatedCommand = "%1 %*"

HKEY_CURRENT_USER\ux\shell\
runas\command
IsolatedCommand = "%1 %*"

HKEY_CURRENT_USER\Yw7
Content Type = "application/x-msdownload"

HKEY_CURRENT_USER\Yw7\shell\
open\command
IsolatedCommand = "%1 %*"

HKEY_CURRENT_USER\Yw7\shell\
runas\command
IsolatedCommand = "%1 %*"

HKEY_CURRENT_USER\8NT
Content Type = "application/x-msdownload"

HKEY_CURRENT_USER\8NT\shell\
open\command
IsolatedCommand = "%1 %*"

HKEY_CURRENT_USER\8NT\shell\
runas\command
IsolatedCommand = "%1 %*"

HKEY_CURRENT_USER\7Sx
Content Type = "application/x-msdownload"

HKEY_CURRENT_USER\7Sx\shell\
open\command
IsolatedCommand = "%1 %*"

HKEY_CURRENT_USER\7Sx\shell\
runas\command
IsolatedCommand = "%1 %*"

HKEY_CURRENT_USER\gI
Content Type = "application/x-msdownload"

HKEY_CURRENT_USER\gI\shell\
open\command
IsolatedCommand = "%1 %*"

HKEY_CURRENT_USER\gI\shell\
runas\command
IsolatedCommand = "%1 %*"

HKEY_CURRENT_USER\8DI
Content Type = "application/x-msdownload"

HKEY_CURRENT_USER\8DI\shell\
open\command
IsolatedCommand = "%1 %*"

HKEY_CURRENT_USER\8DI\shell\
runas\command
IsolatedCommand = "%1 %*"

HKEY_CURRENT_USER\5aM
Content Type = "application/x-msdownload"

HKEY_CURRENT_USER\5aM\shell\
open\command
IsolatedCommand = "%1 %*"

HKEY_CURRENT_USER\5aM\shell\
runas\command
IsolatedCommand = "%1 %*"

HKEY_CURRENT_USER\sd
Content Type = "application/x-msdownload"

HKEY_CURRENT_USER\sd\shell\
open\command
IsolatedCommand = "%1 %*"

HKEY_CURRENT_USER\sd\shell\
runas\command
IsolatedCommand = "%1 %*"

HKEY_CURRENT_USER\8ic
Content Type = "application/x-msdownload"

HKEY_CURRENT_USER\8ic\shell\
open\command
IsolatedCommand = "%1 %*"

HKEY_CURRENT_USER\8ic\shell\
runas\command
IsolatedCommand = "%1 %*"

HKEY_CURRENT_USER\5II
Content Type = "application/x-msdownload"

HKEY_CURRENT_USER\5II\shell\
open\command
IsolatedCommand = "%1 %*"

HKEY_CURRENT_USER\5II\shell\
runas\command
IsolatedCommand = "%1 %*"

HKEY_CURRENT_USER\Ss
Content Type = "application/x-msdownload"

HKEY_CURRENT_USER\Ss\shell\
open\command
IsolatedCommand = "%1 %*"

HKEY_CURRENT_USER\Ss\shell\
runas\command
IsolatedCommand = "%1 %*"

HKEY_CURRENT_USER\h33
Content Type = "application/x-msdownload"

HKEY_CURRENT_USER\h33\shell\
open\command
IsolatedCommand = "%1 %*"

HKEY_CURRENT_USER\h33\shell\
runas\command
IsolatedCommand = "%1 %*"

HKEY_CURRENT_USER\qg0
Content Type = "application/x-msdownload"

HKEY_CURRENT_USER\qg0\shell\
open\command
IsolatedCommand = "%1 %*"

HKEY_CURRENT_USER\qg0\shell\
runas\command
IsolatedCommand = "%1 %*"

HKEY_CURRENT_USER\HE
Content Type = "application/x-msdownload"

HKEY_CURRENT_USER\HE\shell\
open\command
IsolatedCommand = "%1 %*"

HKEY_CURRENT_USER\HE\shell\
runas\command
IsolatedCommand = "%1 %*"

HKEY_CURRENT_USER\oYV
Content Type = "application/x-msdownload"

HKEY_CURRENT_USER\oYV\shell\
open\command
IsolatedCommand = "%1 %*"

HKEY_CURRENT_USER\oYV\shell\
runas\command
IsolatedCommand = "%1 %*"

HKEY_CURRENT_USER\N5
Content Type = "application/x-msdownload"

HKEY_CURRENT_USER\N5\shell\
open\command
IsolatedCommand = "%1 %*"

HKEY_CURRENT_USER\N5\shell\
runas\command
IsolatedCommand = "%1 %*"

HKEY_CURRENT_USER\si
Content Type = "application/x-msdownload"

HKEY_CURRENT_USER\si\shell\
open\command
IsolatedCommand = "%1 %*"

HKEY_CURRENT_USER\si\shell\
runas\command
IsolatedCommand = "%1 %*"

HKEY_CURRENT_USER\CGj
Content Type = "application/x-msdownload"

HKEY_CURRENT_USER\CGj\shell\
open\command
IsolatedCommand = "%1 %*"

HKEY_CURRENT_USER\CGj\shell\
runas\command
IsolatedCommand = "%1 %*"

HKEY_CURRENT_USER\O7W
Content Type = "application/x-msdownload"

HKEY_CURRENT_USER\O7W\shell\
open\command
IsolatedCommand = "%1 %*"

HKEY_CURRENT_USER\O7W\shell\
runas\command
IsolatedCommand = "%1 %*"

It modifies the following registry entries:

HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\
Services\SharedAccess
Start = "4"

(Note: The default value data of the said registry entry is 2.)

HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\
Security Center
AntiVirusDisableNotify = "1"

HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\
Security Center
AntiVirusOverride = "1"

HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\
Security Center
FirewallDisableNotify = "1"

HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\
Security Center
FirewallOverride = "1"

HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\
Security Center
UpdatesDisableNotify = "1"

HKEY_CURRENT_USER\Software\Microsoft\
GDIPlus
FontCachePath = "%Application Data%"

(Note: The default value data of the said registry entry is %User Profile%\Local Settings\Application Data.)

Dropping Routine

This Trojan drops the following files:

• %Application Data%\fpe.exe

(Note: %Application Data% is the current user's Application Data folder, which is usually C:\Documents and Settings\{user name}\Application Data on Windows 2000, XP, and Server 2003, or C:\Users\{user name}\AppData\Roaming on Windows Vista and 7.)

Other Details

This Trojan deletes itself after execution.

This report is generated via an automated analysis system.