ObiwanRei
Member
- Joined
- May 28, 2015
- Messages
- 21
- Thread Author
- #1
I have that file name in the Document Folder, i wonder how was it created. here is the contents of that file..
what is this?
Windows Registry Editor Version 5.00
[HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Explorer\FileExts\.]
[HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Explorer\FileExts\.\OpenWithList]
[HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Explorer\FileExts\.ac3]
[HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Explorer\FileExts\.ac3\OpenWithProgids]
"VLC.ac3"=hex(0):
[HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Explorer\FileExts\.lfl]
[HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Explorer\FileExts\.lfl\OpenWithList]
[HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Explorer\FileExts\.m4p]
[HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Explorer\FileExts\.m4p\OpenWithProgids]
"VLC.m4p"=hex(0):
[HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Explorer\FileExts\.tmp]
[HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Explorer\FileExts\.tmp\OpenWithList]
[HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Explorer\FileExts\.vir]
[HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Explorer\FileExts\.vir\OpenWithList]
[HKEY_CLASSES_ROOT\AllFileSystemObjects\shell\pokki]
@="Add to Start menu"
[HKEY_CLASSES_ROOT\AllFileSystemObjects\shell\pokki\command]
@=hex(2):22,00,25,00,4c,00,4f,00,43,00,41,00,4c,00,41,00,50,00,50,00,44,00,41,\
00,54,00,41,00,25,00,5c,00,50,00,6f,00,6b,00,6b,00,69,00,5c,00,45,00,6e,00,\
67,00,69,00,6e,00,65,00,5c,00,48,00,6f,00,73,00,74,00,41,00,70,00,70,00,53,\
00,65,00,72,00,76,00,69,00,63,00,65,00,2e,00,65,00,78,00,65,00,22,00,20,00,\
2f,00,41,00,44,00,44,00,46,00,41,00,56,00,4f,00,52,00,49,00,54,00,45,00,22,\
00,25,00,31,00,22,00,00,00
[HKEY_CLASSES_ROOT\Directory\shell\pokki]
@="Add to Start menu"
[HKEY_CLASSES_ROOT\Directory\shell\pokki\command]
@=hex(2):22,00,25,00,4c,00,4f,00,43,00,41,00,4c,00,41,00,50,00,50,00,44,00,41,\
00,54,00,41,00,25,00,5c,00,50,00,6f,00,6b,00,6b,00,69,00,5c,00,45,00,6e,00,\
67,00,69,00,6e,00,65,00,5c,00,48,00,6f,00,73,00,74,00,41,00,70,00,70,00,53,\
00,65,00,72,00,76,00,69,00,63,00,65,00,2e,00,65,00,78,00,65,00,22,00,20,00,\
2f,00,41,00,44,00,44,00,46,00,41,00,56,00,4f,00,52,00,49,00,54,00,45,00,22,\
00,25,00,31,00,22,00,00,00
[HKEY_CLASSES_ROOT\Drive\shell\pokki]
@="Add to Start menu"
[HKEY_CLASSES_ROOT\Drive\shell\pokki\command]
@=hex(2):22,00,25,00,4c,00,4f,00,43,00,41,00,4c,00,41,00,50,00,50,00,44,00,41,\
00,54,00,41,00,25,00,5c,00,50,00,6f,00,6b,00,6b,00,69,00,5c,00,45,00,6e,00,\
67,00,69,00,6e,00,65,00,5c,00,48,00,6f,00,73,00,74,00,41,00,70,00,70,00,53,\
00,65,00,72,00,76,00,69,00,63,00,65,00,2e,00,65,00,78,00,65,00,22,00,20,00,\
2f,00,41,00,44,00,44,00,46,00,41,00,56,00,4f,00,52,00,49,00,54,00,45,00,22,\
00,25,00,31,00,22,00,00,00
[HKEY_CLASSES_ROOT\lnkfile\shell\pokki]
@="Add to Start menu"
[HKEY_CLASSES_ROOT\lnkfile\shell\pokki\command]
@=hex(2):22,00,25,00,4c,00,4f,00,43,00,41,00,4c,00,41,00,50,00,50,00,44,00,41,\
00,54,00,41,00,25,00,5c,00,50,00,6f,00,6b,00,6b,00,69,00,5c,00,45,00,6e,00,\
67,00,69,00,6e,00,65,00,5c,00,48,00,6f,00,73,00,74,00,41,00,70,00,70,00,53,\
00,65,00,72,00,76,00,69,00,63,00,65,00,2e,00,65,00,78,00,65,00,22,00,20,00,\
2f,00,41,00,44,00,44,00,46,00,41,00,56,00,4f,00,52,00,49,00,54,00,45,00,22,\
00,25,00,31,00,22,00,00,00
[HKEY_CLASSES_ROOT\pokki\shell\open]
[HKEY_CLASSES_ROOT\pokki\shell\open\command]
@=hex(2):22,00,25,00,4c,00,4f,00,43,00,41,00,4c,00,41,00,50,00,50,00,44,00,41,\
00,54,00,41,00,25,00,5c,00,50,00,6f,00,6b,00,6b,00,69,00,5c,00,45,00,6e,00,\
67,00,69,00,6e,00,65,00,5c,00,48,00,6f,00,73,00,74,00,41,00,70,00,70,00,53,\
00,65,00,72,00,76,00,69,00,63,00,65,00,2e,00,65,00,78,00,65,00,22,00,20,00,\
25,00,31,00,00,00
[HKEY_CURRENT_USER\Software\Microsoft\Windows NT\CurrentVersion\AppCompatFlags\Compatibility Assistant\Store]
"C:\\Users\\Water\\Downloads\\googlechromestandaloneenterprise64 (1).msi"=hex:53,\
41,43,50,01,00,00,00,00,00,00,00,07,00,00,00,28,00,00,00,00,f4,00,00,83,96,\
01,00,01,00,00,00,00,00,00,00,00,00,01,05,00,10,00,00,b3,95,e7,cf,04,9f,ce,\
01,00,00,00,00,00,00,00,00,02,00,00,00,28,00,00,00,00,00,00,00,00,00,00,00,\
00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,6c,65,01,00,00,00,00,00,01,\
00,00,00,01,00,00,00
[HKEY_CURRENT_USER\Software\Microsoft\Windows NT\CurrentVersion\AppCompatFlags\Compatibility Assistant\Store]
"C:\\Users\\Water\\AppData\\Local\\Temp\\octDC7C.tmp.exe"=hex:53,41,43,50,01,\
00,00,00,00,00,00,00,07,00,00,00,28,00,00,00,60,de,6a,06,68,73,6b,06,01,00,\
00,00,00,00,00,00,00,00,03,06,00,21,00,00,97,5f,d8,91,c9,9e,ce,01,00,00,00,\
00,00,00,00,00,02,00,00,00,28,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,\
00,00,00,00,00,00,00,00,00,00,00,00,8a,78,35,00,00,00,00,00,01,00,00,00,01,\
00,00,00
[HKEY_CURRENT_USER\Software\Microsoft\Windows NT\CurrentVersion\AppCompatFlags\Compatibility Assistant\Store]
"C:\\Users\\Water\\AppData\\Local\\Pokki\\Engine\\HostAppService.exe"=hex:53,\
41,43,50,01,00,00,00,00,00,00,00,07,00,00,00,28,00,00,00,48,cf,77,00,c9,bd,\
78,00,01,00,00,00,00,00,00,00,00,00,03,06,00,21,00,00,97,5f,d8,91,c9,9e,ce,\
01,00,00,00,00,00,00,00,00,02,00,00,00,28,00,00,00,00,00,00,00,00,00,00,00,\
00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,a3,11,00,00,00,00,00,00,03,\
00,00,00,03,00,00,00
[HKEY_CURRENT_USER\Software\Microsoft\Windows NT\CurrentVersion\AppCompatFlags\Compatibility Assistant\Store]
"C:\\Users\\Water\\Downloads\\pcspeedup_12826a72d8244ac78b8dfd53c7a0c96b_.exe"=hex:53,\
41,43,50,01,00,00,00,00,00,00,00,07,00,00,00,28,00,00,00,00,bb,69,00,af,3e,\
6a,00,01,00,00,00,00,00,00,00,00,00,01,06,00,01,00,00,97,5f,d8,91,c9,9e,ce,\
01,00,00,00,00,00,00,00,00,02,00,00,00,28,00,00,00,00,00,00,00,00,00,00,00,\
00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,50,bc,09,00,00,00,00,00,01,\
00,00,00,01,00,00,00
[HKEY_CURRENT_USER\Software\Microsoft\Windows NT\CurrentVersion\AppCompatFlags\Compatibility Assistant\Store]
"C:\\Program Files\\VideoLAN\\VLC\\vlc.exe"=hex:53,41,43,50,01,00,00,00,00,\
00,00,00,07,00,00,00,28,00,00,00,13,0a,02,00,d0,a7,02,00,01,00,00,00,00,00,\
00,00,00,00,03,06,63,22,00,00,b3,95,e7,cf,04,9f,ce,01,00,00,00,00,00,00,00,\
00,02,00,00,00,28,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,\
00,00,00,00,00,00,00,00,a2,48,00,00,00,00,00,00,03,00,00,00,03,00,00,00
[HKEY_CURRENT_USER\Software\Microsoft\Windows NT\CurrentVersion\AppCompatFlags\Compatibility Assistant\Store]
"C:\\Users\\Water\\Downloads\\msert (1).exe"=hex:53,41,43,50,01,00,00,00,00,\
00,00,00,07,00,00,00,28,00,00,00,f8,20,67,09,62,51,67,09,01,00,00,00,00,00,\
00,00,00,00,01,06,00,01,00,00,b3,95,e7,cf,04,9f,ce,01,00,00,00,00,00,00,00,\
00,05,00,00,00,10,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,\
02,00,00,00,28,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,\
00,00,00,00,00,00,00,9b,5e,00,00,00,00,00,00,01,00,00,00,01,00,00,00
[HKEY_CURRENT_USER\Software\Microsoft\Windows NT\CurrentVersion\AppCompatFlags\Compatibility Assistant\Store]
"C:\\Users\\Water\\Downloads\\FoxitReader715.0425_prom_enu_Setup.exe"=hex:53,\
41,43,50,01,00,00,00,00,00,00,00,07,00,00,00,28,00,00,00,c8,c4,31,02,94,9c,\
32,02,01,00,00,00,00,00,00,00,00,00,03,06,00,21,00,00,97,5f,d8,91,c9,9e,ce,\
01,00,00,00,00,00,00,00,00,02,00,00,00,28,00,00,00,00,00,00,00,00,00,00,00,\
00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,f4,1f,05,00,00,00,00,00,06,\
00,00,00,06,00,00,00
[HKEY_CURRENT_USER\Software\Microsoft\Windows NT\CurrentVersion\AppCompatFlags\Compatibility Assistant\Store]
"C:\\Program Files (x86)\\Intel Education Software\\Foxit Reader part of Intel Education\\Foxit Reader.exe"=hex:53,\
41,43,50,01,00,00,00,00,00,00,00,07,00,00,00,28,00,00,00,40,88,61,00,cd,66,\
62,00,01,00,00,00,00,00,00,00,00,00,02,06,71,00,00,00,97,5f,d8,91,c9,9e,ce,\
01,00,00,00,00,00,00,00,00,02,00,00,00,28,00,00,00,00,00,00,00,00,00,00,00,\
00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,e8,10,00,00,00,00,00,00,01,\
00,00,00,01,00,00,00
[HKEY_CURRENT_USER\Software\Microsoft\Windows NT\CurrentVersion\AppCompatFlags\Compatibility Assistant\Store]
"C:\\Users\\Water\\Downloads\\flashplayer17_ga_install.exe"=hex:53,41,43,50,\
01,00,00,00,00,00,00,00,07,00,00,00,28,00,00,00,c0,28,11,00,30,99,11,00,01,\
00,00,00,00,00,00,00,00,00,01,06,00,01,00,00,97,5f,d8,91,c9,9e,ce,01,00,00,\
00,00,00,00,00,00
[HKEY_CURRENT_USER\Software\Microsoft\Windows NT\CurrentVersion\AppCompatFlags\Compatibility Assistant\Store]
"C:\\Users\\Water\\Downloads\\PerfectUninstaller_Setup.exe"=hex:53,41,43,50,\
01,00,00,00,00,00,00,00,07,00,00,00,28,00,00,00,88,89,2a,00,1c,d2,2a,00,01,\
00,00,00,00,00,00,00,00,00,03,06,41,22,00,00,97,5f,d8,91,c9,9e,ce,01,00,00,\
00,00,00,00,00,00,02,00,00,00,28,00,00,00,00,00,00,00,00,00,00,00,00,00,00,\
00,00,00,00,00,00,00,00,00,00,00,00,00,e8,ea,01,00,00,00,00,00,01,00,00,00,\
01,00,00,00
[HKEY_CURRENT_USER\Software\Microsoft\Windows NT\CurrentVersion\AppCompatFlags\Compatibility Assistant\Store]
"C:\\Program Files (x86)\\McAfee Security Scan\\3.0.285\\mcuicnt.exe"=hex:53,\
41,43,50,01,00,00,00,00,00,00,00,07,00,00,00,28,00,00,00,78,49,07,00,92,c1,\
07,00,01,00,00,00,00,00,00,00,00,00,01,06,71,22,00,00,97,5f,d8,91,c9,9e,ce,\
01,00,00,00,00,00,00,00,00,02,00,00,00,28,00,00,00,00,00,00,00,00,00,00,00,\
00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,51,04,01,00,00,00,00,00,01,\
00,00,00,01,00,00,00
[HKEY_CURRENT_USER\Software\Mine]
@=hex(0):
[HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]
"Pokki"=hex(2):22,00,25,00,4c,00,4f,00,43,00,41,00,4c,00,41,00,50,00,50,00,44,\
00,41,00,54,00,41,00,25,00,5c,00,50,00,6f,00,6b,00,6b,00,69,00,5c,00,45,00,\
6e,00,67,00,69,00,6e,00,65,00,5c,00,48,00,6f,00,73,00,74,00,41,00,70,00,70,\
00,53,00,65,00,72,00,76,00,69,00,63,00,65,00,55,00,70,00,64,00,61,00,74,00,\
65,00,72,00,2e,00,65,00,78,00,65,00,22,00,20,00,2f,00,4c,00,4f,00,47,00,4f,\
00,4e,00,00,00
[HKEY_CURRENT_USER\Software\Classes\Local Settings\Software\Microsoft\Windows\Shell\MuiCache]
"C:\\Users\\Water\\AppData\\Local\\Pokki\\Engine\\HostAppService.exe.FriendlyAppName"="Host App Service"
[HKEY_CURRENT_USER\Software\Classes\Local Settings\Software\Microsoft\Windows\Shell\MuiCache]
"C:\\Users\\Water\\AppData\\Local\\Pokki\\Engine\\HostAppService.exe.ApplicationCompany"="Pokki"
[HKEY_CURRENT_USER\Software\Classes\Local Settings\Software\Microsoft\Windows\Shell\MuiCache]
"C:\\Users\\Water\\Downloads\\adwcleaner_4.201 (1).exe.FriendlyAppName"="Aut2Exe"
[HKEY_CURRENT_USER\Software\Classes\Local Settings\Software\Microsoft\Windows\Shell\MuiCache]
"C:\\Program Files\\VideoLAN\\VLC\\vlc.exe.FriendlyAppName"="VLC media player"
[HKEY_CURRENT_USER\Software\Classes\Local Settings\Software\Microsoft\Windows\Shell\MuiCache]
"C:\\Program Files\\VideoLAN\\VLC\\vlc.exe.ApplicationCompany"="VideoLAN"
[HKEY_CURRENT_USER\Software\Classes\Local Settings\Software\Microsoft\Windows\Shell\MuiCache]
"C:\\Program Files (x86)\\Intel Education Software\\Foxit Reader part of Intel Education\\Foxit Reader.exe.FriendlyAppName"="Foxit Reader part of Intel(R)Education"
[HKEY_CURRENT_USER\Software\Classes\Local Settings\Software\Microsoft\Windows\Shell\MuiCache]
"C:\\Program Files (x86)\\Intel Education Software\\Foxit Reader part of Intel Education\\Foxit Reader.exe.ApplicationCompany"="Foxit Corporation"
[HKEY_CURRENT_USER\Software\Classes\Local Settings\Software\Microsoft\Windows\Shell\MuiCache]
"C:\\Users\\Water\\Downloads\\adwcleaner_4.203.exe.FriendlyAppName"="Aut2Exe"
what is this?
Windows Registry Editor Version 5.00
[HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Explorer\FileExts\.]
[HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Explorer\FileExts\.\OpenWithList]
[HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Explorer\FileExts\.ac3]
[HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Explorer\FileExts\.ac3\OpenWithProgids]
"VLC.ac3"=hex(0):
[HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Explorer\FileExts\.lfl]
[HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Explorer\FileExts\.lfl\OpenWithList]
[HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Explorer\FileExts\.m4p]
[HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Explorer\FileExts\.m4p\OpenWithProgids]
"VLC.m4p"=hex(0):
[HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Explorer\FileExts\.tmp]
[HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Explorer\FileExts\.tmp\OpenWithList]
[HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Explorer\FileExts\.vir]
[HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Explorer\FileExts\.vir\OpenWithList]
[HKEY_CLASSES_ROOT\AllFileSystemObjects\shell\pokki]
@="Add to Start menu"
[HKEY_CLASSES_ROOT\AllFileSystemObjects\shell\pokki\command]
@=hex(2):22,00,25,00,4c,00,4f,00,43,00,41,00,4c,00,41,00,50,00,50,00,44,00,41,\
00,54,00,41,00,25,00,5c,00,50,00,6f,00,6b,00,6b,00,69,00,5c,00,45,00,6e,00,\
67,00,69,00,6e,00,65,00,5c,00,48,00,6f,00,73,00,74,00,41,00,70,00,70,00,53,\
00,65,00,72,00,76,00,69,00,63,00,65,00,2e,00,65,00,78,00,65,00,22,00,20,00,\
2f,00,41,00,44,00,44,00,46,00,41,00,56,00,4f,00,52,00,49,00,54,00,45,00,22,\
00,25,00,31,00,22,00,00,00
[HKEY_CLASSES_ROOT\Directory\shell\pokki]
@="Add to Start menu"
[HKEY_CLASSES_ROOT\Directory\shell\pokki\command]
@=hex(2):22,00,25,00,4c,00,4f,00,43,00,41,00,4c,00,41,00,50,00,50,00,44,00,41,\
00,54,00,41,00,25,00,5c,00,50,00,6f,00,6b,00,6b,00,69,00,5c,00,45,00,6e,00,\
67,00,69,00,6e,00,65,00,5c,00,48,00,6f,00,73,00,74,00,41,00,70,00,70,00,53,\
00,65,00,72,00,76,00,69,00,63,00,65,00,2e,00,65,00,78,00,65,00,22,00,20,00,\
2f,00,41,00,44,00,44,00,46,00,41,00,56,00,4f,00,52,00,49,00,54,00,45,00,22,\
00,25,00,31,00,22,00,00,00
[HKEY_CLASSES_ROOT\Drive\shell\pokki]
@="Add to Start menu"
[HKEY_CLASSES_ROOT\Drive\shell\pokki\command]
@=hex(2):22,00,25,00,4c,00,4f,00,43,00,41,00,4c,00,41,00,50,00,50,00,44,00,41,\
00,54,00,41,00,25,00,5c,00,50,00,6f,00,6b,00,6b,00,69,00,5c,00,45,00,6e,00,\
67,00,69,00,6e,00,65,00,5c,00,48,00,6f,00,73,00,74,00,41,00,70,00,70,00,53,\
00,65,00,72,00,76,00,69,00,63,00,65,00,2e,00,65,00,78,00,65,00,22,00,20,00,\
2f,00,41,00,44,00,44,00,46,00,41,00,56,00,4f,00,52,00,49,00,54,00,45,00,22,\
00,25,00,31,00,22,00,00,00
[HKEY_CLASSES_ROOT\lnkfile\shell\pokki]
@="Add to Start menu"
[HKEY_CLASSES_ROOT\lnkfile\shell\pokki\command]
@=hex(2):22,00,25,00,4c,00,4f,00,43,00,41,00,4c,00,41,00,50,00,50,00,44,00,41,\
00,54,00,41,00,25,00,5c,00,50,00,6f,00,6b,00,6b,00,69,00,5c,00,45,00,6e,00,\
67,00,69,00,6e,00,65,00,5c,00,48,00,6f,00,73,00,74,00,41,00,70,00,70,00,53,\
00,65,00,72,00,76,00,69,00,63,00,65,00,2e,00,65,00,78,00,65,00,22,00,20,00,\
2f,00,41,00,44,00,44,00,46,00,41,00,56,00,4f,00,52,00,49,00,54,00,45,00,22,\
00,25,00,31,00,22,00,00,00
[HKEY_CLASSES_ROOT\pokki\shell\open]
[HKEY_CLASSES_ROOT\pokki\shell\open\command]
@=hex(2):22,00,25,00,4c,00,4f,00,43,00,41,00,4c,00,41,00,50,00,50,00,44,00,41,\
00,54,00,41,00,25,00,5c,00,50,00,6f,00,6b,00,6b,00,69,00,5c,00,45,00,6e,00,\
67,00,69,00,6e,00,65,00,5c,00,48,00,6f,00,73,00,74,00,41,00,70,00,70,00,53,\
00,65,00,72,00,76,00,69,00,63,00,65,00,2e,00,65,00,78,00,65,00,22,00,20,00,\
25,00,31,00,00,00
[HKEY_CURRENT_USER\Software\Microsoft\Windows NT\CurrentVersion\AppCompatFlags\Compatibility Assistant\Store]
"C:\\Users\\Water\\Downloads\\googlechromestandaloneenterprise64 (1).msi"=hex:53,\
41,43,50,01,00,00,00,00,00,00,00,07,00,00,00,28,00,00,00,00,f4,00,00,83,96,\
01,00,01,00,00,00,00,00,00,00,00,00,01,05,00,10,00,00,b3,95,e7,cf,04,9f,ce,\
01,00,00,00,00,00,00,00,00,02,00,00,00,28,00,00,00,00,00,00,00,00,00,00,00,\
00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,6c,65,01,00,00,00,00,00,01,\
00,00,00,01,00,00,00
[HKEY_CURRENT_USER\Software\Microsoft\Windows NT\CurrentVersion\AppCompatFlags\Compatibility Assistant\Store]
"C:\\Users\\Water\\AppData\\Local\\Temp\\octDC7C.tmp.exe"=hex:53,41,43,50,01,\
00,00,00,00,00,00,00,07,00,00,00,28,00,00,00,60,de,6a,06,68,73,6b,06,01,00,\
00,00,00,00,00,00,00,00,03,06,00,21,00,00,97,5f,d8,91,c9,9e,ce,01,00,00,00,\
00,00,00,00,00,02,00,00,00,28,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,\
00,00,00,00,00,00,00,00,00,00,00,00,8a,78,35,00,00,00,00,00,01,00,00,00,01,\
00,00,00
[HKEY_CURRENT_USER\Software\Microsoft\Windows NT\CurrentVersion\AppCompatFlags\Compatibility Assistant\Store]
"C:\\Users\\Water\\AppData\\Local\\Pokki\\Engine\\HostAppService.exe"=hex:53,\
41,43,50,01,00,00,00,00,00,00,00,07,00,00,00,28,00,00,00,48,cf,77,00,c9,bd,\
78,00,01,00,00,00,00,00,00,00,00,00,03,06,00,21,00,00,97,5f,d8,91,c9,9e,ce,\
01,00,00,00,00,00,00,00,00,02,00,00,00,28,00,00,00,00,00,00,00,00,00,00,00,\
00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,a3,11,00,00,00,00,00,00,03,\
00,00,00,03,00,00,00
[HKEY_CURRENT_USER\Software\Microsoft\Windows NT\CurrentVersion\AppCompatFlags\Compatibility Assistant\Store]
"C:\\Users\\Water\\Downloads\\pcspeedup_12826a72d8244ac78b8dfd53c7a0c96b_.exe"=hex:53,\
41,43,50,01,00,00,00,00,00,00,00,07,00,00,00,28,00,00,00,00,bb,69,00,af,3e,\
6a,00,01,00,00,00,00,00,00,00,00,00,01,06,00,01,00,00,97,5f,d8,91,c9,9e,ce,\
01,00,00,00,00,00,00,00,00,02,00,00,00,28,00,00,00,00,00,00,00,00,00,00,00,\
00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,50,bc,09,00,00,00,00,00,01,\
00,00,00,01,00,00,00
[HKEY_CURRENT_USER\Software\Microsoft\Windows NT\CurrentVersion\AppCompatFlags\Compatibility Assistant\Store]
"C:\\Program Files\\VideoLAN\\VLC\\vlc.exe"=hex:53,41,43,50,01,00,00,00,00,\
00,00,00,07,00,00,00,28,00,00,00,13,0a,02,00,d0,a7,02,00,01,00,00,00,00,00,\
00,00,00,00,03,06,63,22,00,00,b3,95,e7,cf,04,9f,ce,01,00,00,00,00,00,00,00,\
00,02,00,00,00,28,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,\
00,00,00,00,00,00,00,00,a2,48,00,00,00,00,00,00,03,00,00,00,03,00,00,00
[HKEY_CURRENT_USER\Software\Microsoft\Windows NT\CurrentVersion\AppCompatFlags\Compatibility Assistant\Store]
"C:\\Users\\Water\\Downloads\\msert (1).exe"=hex:53,41,43,50,01,00,00,00,00,\
00,00,00,07,00,00,00,28,00,00,00,f8,20,67,09,62,51,67,09,01,00,00,00,00,00,\
00,00,00,00,01,06,00,01,00,00,b3,95,e7,cf,04,9f,ce,01,00,00,00,00,00,00,00,\
00,05,00,00,00,10,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,\
02,00,00,00,28,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,\
00,00,00,00,00,00,00,9b,5e,00,00,00,00,00,00,01,00,00,00,01,00,00,00
[HKEY_CURRENT_USER\Software\Microsoft\Windows NT\CurrentVersion\AppCompatFlags\Compatibility Assistant\Store]
"C:\\Users\\Water\\Downloads\\FoxitReader715.0425_prom_enu_Setup.exe"=hex:53,\
41,43,50,01,00,00,00,00,00,00,00,07,00,00,00,28,00,00,00,c8,c4,31,02,94,9c,\
32,02,01,00,00,00,00,00,00,00,00,00,03,06,00,21,00,00,97,5f,d8,91,c9,9e,ce,\
01,00,00,00,00,00,00,00,00,02,00,00,00,28,00,00,00,00,00,00,00,00,00,00,00,\
00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,f4,1f,05,00,00,00,00,00,06,\
00,00,00,06,00,00,00
[HKEY_CURRENT_USER\Software\Microsoft\Windows NT\CurrentVersion\AppCompatFlags\Compatibility Assistant\Store]
"C:\\Program Files (x86)\\Intel Education Software\\Foxit Reader part of Intel Education\\Foxit Reader.exe"=hex:53,\
41,43,50,01,00,00,00,00,00,00,00,07,00,00,00,28,00,00,00,40,88,61,00,cd,66,\
62,00,01,00,00,00,00,00,00,00,00,00,02,06,71,00,00,00,97,5f,d8,91,c9,9e,ce,\
01,00,00,00,00,00,00,00,00,02,00,00,00,28,00,00,00,00,00,00,00,00,00,00,00,\
00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,e8,10,00,00,00,00,00,00,01,\
00,00,00,01,00,00,00
[HKEY_CURRENT_USER\Software\Microsoft\Windows NT\CurrentVersion\AppCompatFlags\Compatibility Assistant\Store]
"C:\\Users\\Water\\Downloads\\flashplayer17_ga_install.exe"=hex:53,41,43,50,\
01,00,00,00,00,00,00,00,07,00,00,00,28,00,00,00,c0,28,11,00,30,99,11,00,01,\
00,00,00,00,00,00,00,00,00,01,06,00,01,00,00,97,5f,d8,91,c9,9e,ce,01,00,00,\
00,00,00,00,00,00
[HKEY_CURRENT_USER\Software\Microsoft\Windows NT\CurrentVersion\AppCompatFlags\Compatibility Assistant\Store]
"C:\\Users\\Water\\Downloads\\PerfectUninstaller_Setup.exe"=hex:53,41,43,50,\
01,00,00,00,00,00,00,00,07,00,00,00,28,00,00,00,88,89,2a,00,1c,d2,2a,00,01,\
00,00,00,00,00,00,00,00,00,03,06,41,22,00,00,97,5f,d8,91,c9,9e,ce,01,00,00,\
00,00,00,00,00,00,02,00,00,00,28,00,00,00,00,00,00,00,00,00,00,00,00,00,00,\
00,00,00,00,00,00,00,00,00,00,00,00,00,e8,ea,01,00,00,00,00,00,01,00,00,00,\
01,00,00,00
[HKEY_CURRENT_USER\Software\Microsoft\Windows NT\CurrentVersion\AppCompatFlags\Compatibility Assistant\Store]
"C:\\Program Files (x86)\\McAfee Security Scan\\3.0.285\\mcuicnt.exe"=hex:53,\
41,43,50,01,00,00,00,00,00,00,00,07,00,00,00,28,00,00,00,78,49,07,00,92,c1,\
07,00,01,00,00,00,00,00,00,00,00,00,01,06,71,22,00,00,97,5f,d8,91,c9,9e,ce,\
01,00,00,00,00,00,00,00,00,02,00,00,00,28,00,00,00,00,00,00,00,00,00,00,00,\
00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,51,04,01,00,00,00,00,00,01,\
00,00,00,01,00,00,00
[HKEY_CURRENT_USER\Software\Mine]
@=hex(0):
[HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]
"Pokki"=hex(2):22,00,25,00,4c,00,4f,00,43,00,41,00,4c,00,41,00,50,00,50,00,44,\
00,41,00,54,00,41,00,25,00,5c,00,50,00,6f,00,6b,00,6b,00,69,00,5c,00,45,00,\
6e,00,67,00,69,00,6e,00,65,00,5c,00,48,00,6f,00,73,00,74,00,41,00,70,00,70,\
00,53,00,65,00,72,00,76,00,69,00,63,00,65,00,55,00,70,00,64,00,61,00,74,00,\
65,00,72,00,2e,00,65,00,78,00,65,00,22,00,20,00,2f,00,4c,00,4f,00,47,00,4f,\
00,4e,00,00,00
[HKEY_CURRENT_USER\Software\Classes\Local Settings\Software\Microsoft\Windows\Shell\MuiCache]
"C:\\Users\\Water\\AppData\\Local\\Pokki\\Engine\\HostAppService.exe.FriendlyAppName"="Host App Service"
[HKEY_CURRENT_USER\Software\Classes\Local Settings\Software\Microsoft\Windows\Shell\MuiCache]
"C:\\Users\\Water\\AppData\\Local\\Pokki\\Engine\\HostAppService.exe.ApplicationCompany"="Pokki"
[HKEY_CURRENT_USER\Software\Classes\Local Settings\Software\Microsoft\Windows\Shell\MuiCache]
"C:\\Users\\Water\\Downloads\\adwcleaner_4.201 (1).exe.FriendlyAppName"="Aut2Exe"
[HKEY_CURRENT_USER\Software\Classes\Local Settings\Software\Microsoft\Windows\Shell\MuiCache]
"C:\\Program Files\\VideoLAN\\VLC\\vlc.exe.FriendlyAppName"="VLC media player"
[HKEY_CURRENT_USER\Software\Classes\Local Settings\Software\Microsoft\Windows\Shell\MuiCache]
"C:\\Program Files\\VideoLAN\\VLC\\vlc.exe.ApplicationCompany"="VideoLAN"
[HKEY_CURRENT_USER\Software\Classes\Local Settings\Software\Microsoft\Windows\Shell\MuiCache]
"C:\\Program Files (x86)\\Intel Education Software\\Foxit Reader part of Intel Education\\Foxit Reader.exe.FriendlyAppName"="Foxit Reader part of Intel(R)Education"
[HKEY_CURRENT_USER\Software\Classes\Local Settings\Software\Microsoft\Windows\Shell\MuiCache]
"C:\\Program Files (x86)\\Intel Education Software\\Foxit Reader part of Intel Education\\Foxit Reader.exe.ApplicationCompany"="Foxit Corporation"
[HKEY_CURRENT_USER\Software\Classes\Local Settings\Software\Microsoft\Windows\Shell\MuiCache]
"C:\\Users\\Water\\Downloads\\adwcleaner_4.203.exe.FriendlyAppName"="Aut2Exe"