Trojan.Generic.12220278_b14471f648
Trojan.Generic.12220278 (AdAware), WormAutoItGen.YR (Lavasoft MAS)
Behaviour: Trojan, Worm
The description has been automatically generated by Lavasoft Malware Analysis System and it may contain incomplete or inaccurate information.
| Requires JavaScript enabled! |
|---|
MD5: b14471f648f9710fa322c62ad8dc17f4
SHA1: e850562b06d759cdddb7418098acf2143b5d0e13
SHA256: 11419a15bd4011009e1b233baf96a89432a9c1d1b4553b965960480675b91cea
SSDeep: 393216:vONMtYgPi2RC3XozVkYrJ2NG1CTSOTXd8zXGLfYthwC3:ZYzbeVF2NG1lCdMsfYHF
Size: 13568965 bytes
File type: EXE
Platform: WIN32
Entropy: Packed
PEID: MicrosoftVisualC, MicrosoftVisualCv50v60MFC, MicrosoftVisualC50, Armadillov171, UPolyXv05_v6
Company: no certificate found
Created at: 2012-12-31 02:38:32
Analyzed on: WindowsXP SP3 32-bit
Summary:
Trojan. A program that appears to do one thing but actually does another (a.k.a. Trojan Horse).
Payload
No specific payload has been found.
Process activity
The Trojan creates the following process(es):
ASO3.exe:340
CheckUpdate.exe:516
schtasks.exe:1128
schtasks.exe:1364
regedit.exe:264
%original file name%.exe:228
The Trojan injects its code into the following process(es):
ASO3portable.exe:644
Mutexes
The following mutexes were created/opened:
ZonesLockedCacheCounterMutex
ZonesCacheCounterMutex
ZonesCounterMutex
ShimCacheMutex
File activity
The process ASO3.exe:340 makes changes in the file system.
The Trojan creates and/or writes to the following file(s):
%Documents and Settings%\%current user%\Local Settings\Temporary Internet Files\Content.IE5\GDE3MT21\desktop.ini (67 bytes)
%Documents and Settings%\%current user%\Local Settings\Temporary Internet Files\Content.IE5\desktop.ini (67 bytes)
%Documents and Settings%\%current user%\Local Settings\History\History.IE5\desktop.ini (159 bytes)
%Documents and Settings%\%current user%\Local Settings\Temporary Internet Files\Content.IE5\CRMNWZYD\desktop.ini (67 bytes)
%Documents and Settings%\%current user%\Local Settings\Temporary Internet Files\Content.IE5\GLSHOFWZ\desktop.ini (67 bytes)
%Documents and Settings%\%current user%\Local Settings\Temporary Internet Files\Content.IE5\6RMRY1S9\desktop.ini (67 bytes)
The process CheckUpdate.exe:516 makes changes in the file system.
The Trojan creates and/or writes to the following file(s):
%Documents and Settings%\%current user%\Application Data\Systweak\ASO3\Checking for Updates\AppUpdates\LatestVersion.htm (832 bytes)
The process %original file name%.exe:228 makes changes in the file system.
The Trojan creates and/or writes to the following file(s):
%Program Files%\Common Files\Advanced System Optimizer\App\SecureDelete.exe (10347 bytes)
%Program Files%\Common Files\Advanced System Optimizer\App\DefragReport\Report_header_leftText.jpg (14 bytes)
%Program Files%\Common Files\Advanced System Optimizer\App\DiskOptimizer.exe (848 bytes)
%Program Files%\Common Files\Advanced System Optimizer\App\Xceed.FileSystem.dll (584 bytes)
%Program Files%\Common Files\Advanced System Optimizer\App\Microsoft.VC90.ATL.manifest (353 bytes)
%Program Files%\Common Files\Advanced System Optimizer\App\clamunpack\clamscan.exe (15 bytes)
%Program Files%\Common Files\Advanced System Optimizer\App\info.ico (1 bytes)
%Program Files%\Common Files\Advanced System Optimizer\App\RegClean.exe (11276 bytes)
%Program Files%\Common Files\Advanced System Optimizer\App\BackupManager.exe (18844 bytes)
%Program Files%\Common Files\Advanced System Optimizer\App\SystemProtector.XmlSerializers.dll (45 bytes)
%Program Files%\Common Files\Advanced System Optimizer\App\MFC90ENU.dll (754 bytes)
%Program Files%\Common Files\Advanced System Optimizer\App\DiskExplorer.exe (9732 bytes)
%Program Files%\Common Files\Advanced System Optimizer\App\sqlite3.dll (6101 bytes)
%Program Files%\Common Files\Advanced System Optimizer\App\ASOHelper.dll (8600 bytes)
%Program Files%\Common Files\Advanced System Optimizer\App\GOHelper.exe (37 bytes)
%Program Files%\Common Files\Advanced System Optimizer\App\eng\driveropt.ini (70 bytes)
%Program Files%\Common Files\Advanced System Optimizer\App\Xceed.Zip.dll (1430 bytes)
%Program Files%\Common Files\Advanced System Optimizer\App\updater\extract\copying.txt (26 bytes)
%Program Files%\Common Files\Advanced System Optimizer\App\HookDll64.dll (395 bytes)
%Program Files%\Common Files\Advanced System Optimizer\App\VolumeControl64.exe (515 bytes)
%Program Files%\Common Files\Advanced System Optimizer\App\eng\regclean.ini (82 bytes)
%Program Files%\Common Files\Advanced System Optimizer\App\RegistryOptimizer.exe (3599 bytes)
%Program Files%\Common Files\Advanced System Optimizer\App\eng\sysfilebackres.ini (23 bytes)
%Program Files%\Common Files\Advanced System Optimizer\App\eng\regopt.ini (12 bytes)
%Program Files%\Common Files\Advanced System Optimizer\App\updater\extract\7z.exe (267 bytes)
%Program Files%\Common Files\Advanced System Optimizer\App\updater\vista\DriverRestore.manifest (682 bytes)
%Program Files%\Common Files\Advanced System Optimizer\App\updater\amd64Helper\DriverUpdateHelper64.manifest (689 bytes)
%Program Files%\Common Files\Advanced System Optimizer\App\DefragReport\Report_header_top_middle.jpg (7 bytes)
%Program Files%\Common Files\Advanced System Optimizer\App\updater\win7i386\DriverRestore.exe (84 bytes)
%Program Files%\Common Files\Advanced System Optimizer\App\eng\startupman.ini (10 bytes)
%Program Files%\Common Files\Advanced System Optimizer\Portable1.reg (11 bytes)
%Program Files%\Common Files\Advanced System Optimizer\App\ScanDll.dll (64 bytes)
%Program Files%\Common Files\Advanced System Optimizer\App\updater\amd64\DriverRestore.exe (1635 bytes)
%Program Files%\Common Files\Advanced System Optimizer\App\website.ico (1 bytes)
%Program Files%\Common Files\Advanced System Optimizer\App\eng\secencrypt.ini (26 bytes)
%Program Files%\Common Files\Advanced System Optimizer\App\eng\aso.ini (135 bytes)
%Program Files%\Common Files\Advanced System Optimizer\App\PTBWin7.exe (20 bytes)
%Program Files%\Common Files\Advanced System Optimizer\App\AsInvoker.exe (64 bytes)
%Program Files%\Common Files\Advanced System Optimizer\App\aspcomm.dll (2741 bytes)
%Program Files%\Common Files\Advanced System Optimizer\App\DefragReport\right_border.jpg (11 bytes)
%Program Files%\Common Files\Advanced System Optimizer\App\DefragReport\footer_middle.jpg (7 bytes)
%Program Files%\Common Files\Advanced System Optimizer\App\updater\extract\readme.txt (1 bytes)
%Program Files%\Common Files\Advanced System Optimizer\App\asodemo.exe (6577 bytes)
%Program Files%\Common Files\Advanced System Optimizer\Delete1.reg (11 bytes)
%Program Files%\Common Files\Advanced System Optimizer\App\HookDll.dll (56 bytes)
%Program Files%\Common Files\Advanced System Optimizer\App\Microsoft.VC90.MFCLOC.manifest (670 bytes)
%Program Files%\Common Files\Advanced System Optimizer\App\RequireAdministrator.exe (1846 bytes)
%Program Files%\Common Files\Advanced System Optimizer\App\BeforeUninstall.exe (13907 bytes)
%Program Files%\Common Files\Advanced System Optimizer\App\eng\undelete.ini (28 bytes)
%Program Files%\Common Files\Advanced System Optimizer\App\DriverUpdater.exe (8022 bytes)
%Program Files%\Common Files\Advanced System Optimizer\App\updater\win7amd64\DriverRestore.manifest (682 bytes)
%Program Files%\Common Files\Advanced System Optimizer\App\aso3sys.dll (6771 bytes)
%Program Files%\Common Files\Advanced System Optimizer\Delete.reg (5 bytes)
%Program Files%\Common Files\Advanced System Optimizer\App\eng\securedelete.ini (39 bytes)
%Program Files%\Common Files\Advanced System Optimizer\App\SevenZipSharp.dll (1223 bytes)
%Program Files%\Common Files\Advanced System Optimizer\App\clamunpack\readme.txt (535 bytes)
%Program Files%\Common Files\Advanced System Optimizer\App\ASEng.dll (1678 bytes)
%Program Files%\Common Files\Advanced System Optimizer\App\eng\diskdoc.ini (32 bytes)
%Program Files%\Common Files\Advanced System Optimizer\App\atl90.dll (1395 bytes)
%Program Files%\Common Files\Advanced System Optimizer\App\Advanced System Optimizer Help.url (432 bytes)
%Program Files%\Common Files\Advanced System Optimizer\App\SystemCleaner.exe (17655 bytes)
%Program Files%\Common Files\Advanced System Optimizer\App\PrivacyProtector.exe (12628 bytes)
%Program Files%\Common Files\Advanced System Optimizer\App\updater\vista\DriverRestore.exe (722 bytes)
%Program Files%\Common Files\Advanced System Optimizer\App\DiskDoctor.exe (3123 bytes)
%Program Files%\Common Files\Advanced System Optimizer\App\GameOptLauncher64.exe (2512 bytes)
%Program Files%\Common Files\Advanced System Optimizer\App\XceedZip.dll (1468 bytes)
%Program Files%\Common Files\Advanced System Optimizer\App\xmllite.dll (861 bytes)
%Program Files%\Common Files\Advanced System Optimizer\App\DefragReport\Report_header_left_image.jpg (11 bytes)
%Program Files%\Common Files\Advanced System Optimizer\App\launcher.exe (47 bytes)
%Program Files%\Common Files\Advanced System Optimizer\App\eng\backupman.ini (78 bytes)
%Program Files%\Common Files\Advanced System Optimizer\App\eng\memopt.ini (12 bytes)
%Program Files%\Common Files\Advanced System Optimizer\App\updater\win7i386\DriverRestore.manifest (682 bytes)
%Program Files%\Common Files\Advanced System Optimizer\App\aspsys.dll (1708 bytes)
%Program Files%\Common Files\Advanced System Optimizer\App\MemoryOptimizer.exe (2376 bytes)
%Program Files%\Common Files\Advanced System Optimizer\App\difxapi64.dll (4584 bytes)
%Program Files%\Common Files\Advanced System Optimizer\App\mfc90u.dll (34642 bytes)
%Program Files%\Common Files\Advanced System Optimizer\App\eng\DiskOpt.ini (19 bytes)
%Program Files%\Common Files\Advanced System Optimizer\App\UndeleteDLL.dll (1415 bytes)
%Program Files%\Common Files\Advanced System Optimizer\App\HighestAvailable.exe (753 bytes)
%Program Files%\Common Files\Advanced System Optimizer\App\SystemProtector.exe (38774 bytes)
%Program Files%\Common Files\Advanced System Optimizer\App\AppResource.dll (17986 bytes)
%Program Files%\Common Files\Advanced System Optimizer\App\VolumeControl.exe (49 bytes)
%Program Files%\Common Files\Advanced System Optimizer\ASO3portable.exe (697 bytes)
%Program Files%\Common Files\Advanced System Optimizer\App\asplangs\categories.ini (42 bytes)
%Program Files%\Common Files\Advanced System Optimizer\App\ASO3DefragSrv64.exe (2241 bytes)
%Program Files%\Common Files\Advanced System Optimizer\App\database.dat (32 bytes)
%Program Files%\Common Files\Advanced System Optimizer\App\ASO3DefragSrv.exe (3340 bytes)
%Program Files%\Common Files\Advanced System Optimizer\App\ASO3.exe (27333 bytes)
%Program Files%\Common Files\Advanced System Optimizer\App\eng\sysadvisor.ini (104 bytes)
%Program Files%\Common Files\Advanced System Optimizer\App\GameOptLauncher.exe (1922 bytes)
%Program Files%\Common Files\Advanced System Optimizer\App\eng\newscheduler.ini (8 bytes)
%Program Files%\Common Files\Advanced System Optimizer\App\updater\extract\license.txt (2 bytes)
%Program Files%\Common Files\Advanced System Optimizer\App\msvcp90.dll (7063 bytes)
%Program Files%\Common Files\Advanced System Optimizer\App\eng\checkupdate.ini (12 bytes)
%Program Files%\Common Files\Advanced System Optimizer\App\Systweak Software Website.url (245 bytes)
%Program Files%\Common Files\Advanced System Optimizer\App\single_click_care.ico (15 bytes)
%Program Files%\Common Files\Advanced System Optimizer\App\eng\gameopt.ini (8 bytes)
%Program Files%\Common Files\Advanced System Optimizer\App\clamunpack\libclamav.dll (5447 bytes)
%Program Files%\Common Files\Advanced System Optimizer\App\Microsoft.VC90.MFC.manifest (349 bytes)
%Program Files%\Common Files\Advanced System Optimizer\App\Undelete.exe (2603 bytes)
%Program Files%\Common Files\Advanced System Optimizer\App\NewScheduler.exe (7142 bytes)
%Program Files%\Common Files\Advanced System Optimizer\App\Interop.IWshRuntimeLibrary.dll (49 bytes)
%Program Files%\Common Files\Advanced System Optimizer\App\KillASOProcesses.exe (227 bytes)
%Program Files%\Common Files\Advanced System Optimizer\App\eng\diskexplorer.ini (21 bytes)
%Program Files%\Common Files\Advanced System Optimizer\App\eng\client.ini (65 bytes)
%Program Files%\Common Files\Advanced System Optimizer\App\DefragServiceManager.exe (71 bytes)
%Program Files%\Common Files\Advanced System Optimizer\App\updater\amd64\DriverRestore.manifest (682 bytes)
%Program Files%\Common Files\Advanced System Optimizer\App\difxapi.dll (3413 bytes)
%Program Files%\Common Files\Advanced System Optimizer\App\PCFixer.exe (6753 bytes)
%Program Files%\Common Files\Advanced System Optimizer\App\Microsoft.Win32.TaskScheduler.dll (1929 bytes)
%Program Files%\Common Files\Advanced System Optimizer\App\eng\pcfixer.ini (24 bytes)
%Program Files%\Common Files\Advanced System Optimizer\App\asores.dll (65453 bytes)
%Program Files%\Common Files\Advanced System Optimizer\App\eng\sysclean.ini (52 bytes)
%Program Files%\Common Files\Advanced System Optimizer\App\updater\xp\DriverRestore.exe (62 bytes)
%Program Files%\Common Files\Advanced System Optimizer\App\updater\win7amd64\DriverRestore.exe (917 bytes)
%Program Files%\Common Files\Advanced System Optimizer\App\msvcr90.dll (3847 bytes)
%Program Files%\Common Files\Advanced System Optimizer\App\asplangs\eng_asp_en.ini (101 bytes)
%Program Files%\Common Files\Advanced System Optimizer\App\Xceed.Compression.dll (552 bytes)
%Program Files%\Common Files\Advanced System Optimizer\App\eng\dupfileremover.ini (28 bytes)
%Program Files%\Common Files\Advanced System Optimizer\App\rw.dat (7386 bytes)
%Program Files%\Common Files\Advanced System Optimizer\App\GameOptimizer.exe (1948 bytes)
%Program Files%\Common Files\Advanced System Optimizer\App\Downloader.dll (1425 bytes)
%Program Files%\Common Files\Advanced System Optimizer\App\SystemProtector.exe.config (4 bytes)
%Program Files%\Common Files\Advanced System Optimizer\App\System.Data.SQLite.dll (6225 bytes)
%Program Files%\Common Files\Advanced System Optimizer\App\SecureShell.dll (5525 bytes)
%Program Files%\Common Files\Advanced System Optimizer\App\updater\extract\7z.dll (8067 bytes)
%Program Files%\Common Files\Advanced System Optimizer\App\Network.dll (4748 bytes)
%Program Files%\Common Files\Advanced System Optimizer\App\Buy Advanced System Optimizer.url (331 bytes)
%Program Files%\Common Files\Advanced System Optimizer\App\DefragReport\footer_right.jpg (11 bytes)
%Program Files%\Common Files\Advanced System Optimizer\App\categories.ini (42 bytes)
%Program Files%\Common Files\Advanced System Optimizer\App\DefragReport\line3px_Blue.jpg (11 bytes)
%Program Files%\Common Files\Advanced System Optimizer\App\CheckUpdate.exe (27994 bytes)
%Program Files%\Common Files\Advanced System Optimizer\App\DefragReport\Report_header_top_right.jpg (12 bytes)
%Program Files%\Common Files\Advanced System Optimizer\App\StartupManager.exe (1706 bytes)
%Program Files%\Common Files\Advanced System Optimizer\App\SysFileBakRes.exe (4335 bytes)
%Program Files%\Common Files\Advanced System Optimizer\App\eng\UninstallManager.ini (5 bytes)
%Program Files%\Common Files\Advanced System Optimizer\App\unrar.dll (1349 bytes)
%Program Files%\Common Files\Advanced System Optimizer\App\Help.ico (1 bytes)
%Program Files%\Common Files\Advanced System Optimizer\App\SecureEncryptor.exe (1854 bytes)
%Program Files%\Common Files\Advanced System Optimizer\App\updater\extract\History.txt (29 bytes)
%Program Files%\Common Files\Advanced System Optimizer\App\System.Core.dll (8923 bytes)
%Program Files%\Common Files\Advanced System Optimizer\App\zlibwapi.dll (319 bytes)
%Program Files%\Common Files\Advanced System Optimizer\App\rw.ini (54 bytes)
%Program Files%\Common Files\Advanced System Optimizer\App\Microsoft.VC90.CRT.manifest (391 bytes)
%Program Files%\Common Files\Advanced System Optimizer\App\DuplicateFilesRemover.exe (460 bytes)
%Program Files%\Common Files\Advanced System Optimizer\App\updater\amd64Helper\DriverUpdateHelper64.exe (2221 bytes)
%Program Files%\Common Files\Advanced System Optimizer\App\asohtm.dll (3901 bytes)
%Program Files%\Common Files\Advanced System Optimizer\App\Xceed.Compression.Formats.dll (1916 bytes)
%Program Files%\Common Files\Advanced System Optimizer\App\eng\privprotector.ini (44 bytes)
%Program Files%\Common Files\Advanced System Optimizer\App\DefragReport\footer_left.jpg (11 bytes)
%Program Files%\Common Files\Advanced System Optimizer\Portable.reg (14 bytes)
%Program Files%\Common Files\Advanced System Optimizer\App\DefragReport\left_border.jpg (11 bytes)
%Program Files%\Common Files\Advanced System Optimizer\App\UninstallManager.exe (692 bytes)
%Program Files%\Common Files\Advanced System Optimizer\App\Order.ico (1 bytes)
%Program Files%\Common Files\Advanced System Optimizer\App\SystemAnalyzerAndAdvisor.exe (5321 bytes)
Registry activity
The process ASO3.exe:340 makes changes in the system registry.
The Trojan creates and/or sets the following values in system registry:
[HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Internet Settings\Cache\Paths]
"Directory" = "%Documents and Settings%\%current user%\Local Settings\Temporary Internet Files\Content.IE5"
[HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Internet Settings\Cache\Paths\path4]
"CacheLimit" = "65452"
"CachePath" = "%Documents and Settings%\%current user%\Local Settings\Temporary Internet Files\Content.IE5\Cache4"
[HKLM\SOFTWARE\Microsoft\RFC1156Agent\CurrentVersion\Parameters]
"TrapPollTimeMilliSecs" = "15000"
[HKCU\Software\Microsoft\Windows\CurrentVersion\Explorer\Shell Folders]
"AppData" = "%Documents and Settings%\%current user%\Application Data"
[HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings]
"GlobalUserOffline" = "0"
[HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings\Connections]
"SavedLegacySettings" = "3C 00 00 00 1B 00 00 00 01 00 00 00 00 00 00 00"
[HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Shell Folders]
"Common Documents" = "%Documents and Settings%\All Users\Documents"
[HKCU\Software\Licenses]
"{K7C0DB872A3F777C0}" = "41 22 6C 8B E1 16 1F 05 48 6E 02 90 27 91 BF 00"
[HKCU\Software\Microsoft\Windows\CurrentVersion\Explorer\MountPoints2\{c155cd73-744b-11e2-8294-806d6172696f}]
"BaseClass" = "Drive"
[HKLM\SOFTWARE\Systweak\ASO3]
"MachineHashID" = "768429272046948335"
[HKCU\Software\Microsoft\Windows\CurrentVersion\Explorer\Shell Folders]
"Cookies" = "%Documents and Settings%\%current user%\Cookies"
[HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Internet Settings\Cache\Paths\path2]
"CachePath" = "%Documents and Settings%\%current user%\Local Settings\Temporary Internet Files\Content.IE5\Cache2"
[HKCU\Software\Microsoft\Windows\CurrentVersion\Explorer\Shell Folders]
"Personal" = "%Documents and Settings%\%current user%\My Documents"
[HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Shell Folders]
"Common AppData" = "%Documents and Settings%\All Users\Application Data"
[HKCU\Software\Microsoft\Windows\CurrentVersion\Explorer\MountPoints2\{c155cd75-744b-11e2-8294-806d6172696f}]
"BaseClass" = "Drive"
[HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Shell Folders]
"Common Desktop" = "%Documents and Settings%\All Users\Desktop"
[HKCU\Software\Licenses]
"{0F8356A249F37E323}" = "56 3E A8 0E 0B A2 A7 A6 41 06 53 98 DA A5 44 A3"
[HKCU\Software\Microsoft\Windows\CurrentVersion\Explorer\Shell Folders]
"Cache" = "%Documents and Settings%\%current user%\Local Settings\Temporary Internet Files"
[HKCR\CLSID\{B0F3F4F9-CB76-9A52-9442-B481A5FF49D3}\InProcServer32]
"(Default)" = "%Program Files%\NetMeeting\nac.dll"
[HKCU\Software\systweak\ASO3]
"SecEncryptAppName" = "Mã hóa an toàn"
[HKCU\Software\Microsoft\Windows\CurrentVersion\Explorer\Shell Folders]
"Desktop" = "%Documents and Settings%\%current user%\Desktop"
[HKLM\System\CurrentControlSet\Hardware Profiles\0001\Software\Microsoft\windows\CurrentVersion\Internet Settings]
"ProxyEnable" = "0"
[HKCU\Software\systweak\ASO3]
"KeyExpired" = "0"
"SecDelAppName" = "Xóa vĩnh viễn"
[HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Internet Settings\Cache\Paths\path1]
"CacheLimit" = "65452"
[HKCU\Software\Microsoft\Windows\ShellNoRoam\MUICache\%System%]
"schtasks.exe" = "Schedule Tasks"
[HKCR\CLSID\{B0F3F4F9-CB76-9A52-9442-B481A5FF49D3}]
"(Default)" = "Microsoft NetMeeting Quality of Service"
[HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Internet Settings\Cache\Paths\path2]
"CacheLimit" = "65452"
[HKCU\Software\Microsoft\Windows\ShellNoRoam\MUICache\%Program Files%\Common Files\Advanced System Optimizer\App]
"CheckUpdate.exe" = "Advanced System Optimizer - Checking for Updates"
[HKLM\SOFTWARE\Microsoft\Cryptography\RNG]
"Seed" = "BF 55 91 60 C3 BB 91 9E 24 45 39 FA 4A F1 6E 23"
[HKCU\Software\Licenses]
"{R7C0DB872A3F777C0}" = "4A 8D 7D 4C"
[HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Internet Settings\Cache\Paths\path1]
"CachePath" = "%Documents and Settings%\%current user%\Local Settings\Temporary Internet Files\Content.IE5\Cache1"
[HKLM\SOFTWARE\Systweak\ASO3]
"KeyExpired" = "0"
[HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Internet Settings\Cache\Paths\path3]
"CacheLimit" = "65452"
[HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings]
"MigrateProxy" = "1"
[HKCU\Software\Microsoft\Windows\CurrentVersion\Explorer\MountPoints2\{c155cd72-744b-11e2-8294-806d6172696f}]
"BaseClass" = "Drive"
[HKCU\Software\Microsoft\Windows\CurrentVersion\Explorer\MountPoints2\{b98117e8-75ca-11e2-81b2-000c293708fb}]
"BaseClass" = "Drive"
[HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Internet Settings\Cache\Paths\path3]
"CachePath" = "%Documents and Settings%\%current user%\Local Settings\Temporary Internet Files\Content.IE5\Cache3"
[HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Internet Settings\Cache\Paths]
"Paths" = "4"
[HKCU\Software\Licenses]
"{IF8356A249F37E323}" = "01 00 00 00"
[HKCR\CLSID\{B0F3F4F9-CB76-9A52-9442-B481A5FF49D3}\InProcServer32]
"ThreadingModel" = "Apartment"
[HKLM\SOFTWARE\Systweak\ASO3]
"REGISTEREDVERFOUNINSTALL" = "1"
[HKCU\Software\Microsoft\Windows\CurrentVersion\Explorer\Shell Folders]
"History" = "%Documents and Settings%\%current user%\Local Settings\History"
The Trojan modifies IE settings for security zones to map all local web-nodes with no dots which do not refer to any zone to the Intranet Zone:
[HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings\ZoneMap]
"UNCAsIntranet" = "1"
The Trojan modifies IE settings for security zones to map all web-nodes that bypassing the proxy to the Intranet Zone:
"ProxyBypass" = "1"
Proxy settings are disabled:
[HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings]
"ProxyEnable" = "0"
The Trojan modifies IE settings for security zones to map all urls to the Intranet Zone:
[HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings\ZoneMap]
"IntranetName" = "1"
The Trojan deletes the following value(s) in system registry:
[HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings]
"ProxyOverride"
"ProxyServer"
"AutoConfigURL"
[HKCR\CLSID\{B0F3F4F9-CB76-9A52-9442-B481A5FF49D3}]
"0"
The Trojan disables automatic startup of the application by deleting the following autorun value:
[HKCU\Software\Microsoft\Windows\CurrentVersion\Run]
"Advanced System Optimizer"
[HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]
"Advanced System Optimizer"
The process CheckUpdate.exe:516 makes changes in the system registry.
The Trojan creates and/or sets the following values in system registry:
[HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Internet Settings\Cache\Paths]
"Directory" = "%Documents and Settings%\%current user%\Local Settings\Temporary Internet Files\Content.IE5"
[HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Internet Settings\Cache\Paths\path4]
"CacheLimit" = "65452"
"CachePath" = "%Documents and Settings%\%current user%\Local Settings\Temporary Internet Files\Content.IE5\Cache4"
[HKLM\SOFTWARE\Microsoft\RFC1156Agent\CurrentVersion\Parameters]
"TrapPollTimeMilliSecs" = "15000"
[HKCU\Software\Microsoft\Windows\CurrentVersion\Explorer\Shell Folders]
"AppData" = "%Documents and Settings%\%current user%\Application Data"
[HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings]
"GlobalUserOffline" = "0"
[HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings\Connections]
"SavedLegacySettings" = "3C 00 00 00 1D 00 00 00 01 00 00 00 00 00 00 00"
[HKCU\Software\Microsoft\Windows\CurrentVersion\Explorer\MountPoints2\{c155cd73-744b-11e2-8294-806d6172696f}]
"BaseClass" = "Drive"
[HKLM\SOFTWARE\Systweak\ASO3]
"MachineHashID" = "768429272046948335"
[HKCU\Software\Microsoft\Windows\CurrentVersion\Explorer\Shell Folders]
"Cookies" = "%Documents and Settings%\%current user%\Cookies"
[HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Internet Settings\Cache\Paths\path2]
"CachePath" = "%Documents and Settings%\%current user%\Local Settings\Temporary Internet Files\Content.IE5\Cache2"
[HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Shell Folders]
"Common AppData" = "%Documents and Settings%\All Users\Application Data"
[HKCU\Software\Microsoft\Windows\CurrentVersion\Explorer\MountPoints2\{c155cd75-744b-11e2-8294-806d6172696f}]
"BaseClass" = "Drive"
[HKCU\Software\Licenses]
"{0F8356A249F37E323}" = "5B 3E 96 0F EF 81 A3 86 00 6A 3D BA 69 DA 2F C9"
[HKCU\Software\Microsoft\Windows\CurrentVersion\Explorer\Shell Folders]
"Cache" = "%Documents and Settings%\%current user%\Local Settings\Temporary Internet Files"
[HKCU\Software\systweak\ASO3]
"SecEncryptAppName" = "Mã hóa an toàn"
[HKLM\System\CurrentControlSet\Hardware Profiles\0001\Software\Microsoft\windows\CurrentVersion\Internet Settings]
"ProxyEnable" = "0"
[HKCU\Software\systweak\ASO3]
"CFUHWND" = "FC 01 03 00"
"KeyExpired" = "0"
"SecDelAppName" = "Xóa vĩnh viễn"
[HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Internet Settings\Cache\Paths\path1]
"CacheLimit" = "65452"
[HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Internet Settings\Cache\Paths\path2]
"CacheLimit" = "65452"
[HKLM\SOFTWARE\Microsoft\Cryptography\RNG]
"Seed" = "5C 0B 42 80 0B 17 FB 22 77 AE 89 CC 6E 8C F5 64"
[HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Internet Settings\Cache\Paths\path1]
"CachePath" = "%Documents and Settings%\%current user%\Local Settings\Temporary Internet Files\Content.IE5\Cache1"
[HKLM\SOFTWARE\Systweak\ASO3]
"KeyExpired" = "0"
[HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Internet Settings\Cache\Paths\path3]
"CacheLimit" = "65452"
[HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings]
"MigrateProxy" = "1"
[HKCU\Software\Microsoft\Windows\CurrentVersion\Explorer\MountPoints2\{c155cd72-744b-11e2-8294-806d6172696f}]
"BaseClass" = "Drive"
[HKCU\Software\Microsoft\Windows\CurrentVersion\Explorer\MountPoints2\{b98117e8-75ca-11e2-81b2-000c293708fb}]
"BaseClass" = "Drive"
[HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Internet Settings\Cache\Paths\path3]
"CachePath" = "%Documents and Settings%\%current user%\Local Settings\Temporary Internet Files\Content.IE5\Cache3"
[HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Internet Settings\Cache\Paths]
"Paths" = "4"
[HKCU\Software\Licenses]
"{IF8356A249F37E323}" = "1B 00 00 00"
[HKLM\SOFTWARE\Systweak\ASO3]
"REGISTEREDVERFOUNINSTALL" = "1"
"G_SUPPORT_PHONE_NUM" = "(855) 716-7030"
[HKCU\Software\Microsoft\Windows\CurrentVersion\Explorer\Shell Folders]
"History" = "%Documents and Settings%\%current user%\Local Settings\History"
The Trojan modifies IE settings for security zones to map all local web-nodes with no dots which do not refer to any zone to the Intranet Zone:
[HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings\ZoneMap]
"UNCAsIntranet" = "1"
The Trojan modifies IE settings for security zones to map all web-nodes that bypassing the proxy to the Intranet Zone:
"ProxyBypass" = "1"
Proxy settings are disabled:
[HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings]
"ProxyEnable" = "0"
The Trojan modifies IE settings for security zones to map all urls to the Intranet Zone:
[HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings\ZoneMap]
"IntranetName" = "1"
The Trojan deletes the following value(s) in system registry:
[HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings]
"AutoConfigURL"
"ProxyServer"
"ProxyOverride"
[HKCU\Software\systweak\ASO3]
"CFUHWND"
The process schtasks.exe:1128 makes changes in the system registry.
The Trojan creates and/or sets the following values in system registry:
[HKLM\SOFTWARE\Microsoft\Cryptography\RNG]
"Seed" = "4B 20 2A F0 71 EC 0E BC C1 85 96 A5 88 8A 99 63"
The process schtasks.exe:1364 makes changes in the system registry.
The Trojan creates and/or sets the following values in system registry:
[HKLM\SOFTWARE\Microsoft\Cryptography\RNG]
"Seed" = "BF 0D D1 45 03 54 CC 35 07 E7 BE 2E F4 A9 5C B6"
The process regedit.exe:264 makes changes in the system registry.
The Trojan creates and/or sets the following values in system registry:
[HKCU\Software\systweak\ASO3\System Cleaner\PPOptions\RegularSystemCleanerSPC]
"jfThumbnail" = "0"
[HKCU\Software\systweak\ASO3\System Cleaner\PPOptions\Section1]
"ie8_AddBarHistory" = "1"
[HKCU\Software\systweak\ASO3\Advanced System Optimizer\OneClick]
"chkDiskDefrag" = "0"
[HKCU\Software\systweak\ASO3\System Cleaner\PPOptions\Section3]
"winsys_dnscache" = "0"
[HKCU\Software\systweak\ASO3\LANG]
"LangID" = "0"
[HKCU\Software\systweak\ASO3\System Cleaner\PPOptions\Section4]
"app_prg_adobephotoshopcss" = "0"
[HKCU\Software\systweak\ASO3\System Cleaner\PPOptions\RegularSystemCleanerSPC]
"iMychavoihis" = "0"
[HKCU\Software\systweak\ASO3\Advanced System Optimizer]
"FirstRunASO" = "1"
[HKCU\Software\systweak\ASO3\System Cleaner\PPOptions\RegularSystemCleanerSPC]
"winsys_startmenushortcuts" = "0"
[HKCU\Software\systweak\ASO3\System Cleaner\PPOptions\Section4]
"app_prg_winrar" = "1"
"app_prg_regedit" = "1"
[HKCU\Software\systweak\ASO3\System Cleaner\PPOptions\RegularSystemCleanerSPC]
"ie8_HistoryVS" = "1"
"app_prg_mssearch" = "1"
[HKCU\Software\systweak\ASO3\System Cleaner\PPOptions\Section3]
"winsys_windowslogfiles" = "1"
"winsys_desktopshortcuts" = "0"
[HKCU\Software\systweak\ASO3\ScanStatusForLauncher\SysFileBackup]
"ErrorCount" = "1"
[HKCU\Software\systweak\ASO3\System Cleaner\PPOptions\RegularSystemCleanerSPC]
"jfReportLogFile" = "1"
[HKCU\Software\systweak\ASO3\System Cleaner\PPOptions\Section4]
"app_prg_windowsmediaplayer" = "1"
[HKCU\Software\systweak\ASO3\System Cleaner\PPOptions\Section2]
"jfdotnet" = "1"
"jfdownloadprgfile" = "0"
[HKCU\Software\systweak\ASO3\Advanced System Optimizer\OneClick]
"chkDriverupdater" = "1"
[HKCU\Software\systweak\ASO3]
"KeyExpired" = "1"
[HKCU\Software\systweak\ASO3\System Cleaner\PPOptions\RegularSystemCleanerSPC]
"jfbackupcopiewin" = "0"
[HKCU\Software\systweak\ASO3\System Cleaner\PPOptions\Section2]
"jfReportLogFile" = "1"
[HKCU\Software\systweak\ASO3\System Cleaner\PPOptions\Section4]
"app_prg_skype" = "1"
[HKCU\Software\systweak\ASO3\System Cleaner\PPOptions\Section1]
"googlechrome_VisitedLinks" = "1"
[HKCU\Software\systweak\ASO3\System Cleaner\PPOptions\Section4]
"mso2013MS_Excel" = "1"
[HKCU\Software\systweak\ASO3]
"cname" = "systweak"
[HKCU\Software\systweak\ASO3\System Cleaner\PPOptions\RegularSystemCleanerSPC]
"winsys_otherexplorermrus" = "1"
[HKCU\Software\systweak\ASO3\Scheduler\OneClick]
"chkPrivacyProtector" = "1"
[HKCU\Software\systweak\ASO3]
"SecEncryptAppName" = "Mã hóa an toàn"
[HKCU\Software\systweak\ASO3\System Cleaner\PPOptions\RegularSystemCleanerSPC]
"ie8_TempIntFileFolder" = "1"
[HKCU\Software\systweak\ASO3\Scheduler\OneClick]
"chkJunkFileCleaner" = "1"
[HKCU\Software\systweak\ASO3\System Cleaner\PPOptions\RegularSystemCleanerSPC]
"jfTempFile" = "1"
[HKCU\Software\systweak\ASO3\System Cleaner\PPOptions\Section2]
"jfbackupcopiewin" = "0"
[HKCU\Software\systweak\ASO3\System Cleaner\PPOptions\Section3]
"winsys_startmenushortcuts" = "0"
"winsys_searchautocomplete" = "0"
[HKCU\Software\systweak\ASO3\System Cleaner\PPOptions\Section4]
"app_prg_mssearch" = "1"
[HKCU\Software\systweak\ASO3\System Cleaner\PPOptions\Section1]
"ie8_TempIntFileFolder" = "1"
[HKCU\Software\systweak\ASO3\System Cleaner\PPOptions\RegularSystemCleanerSPC]
"jfoldprefach" = "0"
[HKCU\Software\systweak\ASO3\System Cleaner\PPOptions\Section4]
"iMychavoihis" = "0"
[HKCU\Software\systweak\ASO3\System Cleaner\PPOptions\RegularSystemCleanerSPC]
"mso2013MS_Excel" = "1"
[HKCU\Software\systweak\ASO3\System Cleaner\PPOptions\Section4]
"mso2013MS_RecentFolder" = "1"
[HKCU\Software\systweak\ASO3]
"ASO3AFFILIATE" = ""
[HKCU\Software\systweak\ASO3\System Cleaner\PPOptions\RegularSystemCleanerSPC]
"ie8_AddBarHistory" = "1"
[HKCU\Software\systweak\ASO3\Scheduler\OneClick]
"chkRegClean" = "1"
[HKCU\Software\systweak\ASO3\System Cleaner\PPOptions\RegularSystemCleanerSPC]
"winsys_chkdskfilefragments" = "1"
[HKCU\Software\systweak\ASO3\Advanced System Optimizer\OneClick]
"chkAntispyware" = "0"
[HKCU\Software\systweak\ASO3\System Cleaner\PPOptions\RegularSystemCleanerSPC]
"winsys_winerrorreporting" = "0"
"winsys_desktopshortcuts" = "0"
[HKCU\Software\systweak\ASO3\System Cleaner\PPOptions\Section3]
"winsys_networkpasswords" = "0"
[HKCU\Software\systweak\ASO3\System Cleaner\PPOptions]
"StartAppli_FirstTime" = "0"
[HKCU\Software\systweak\ASO3\System Cleaner\PPOptions\Section4]
"app_prg_remotedesktop" = "1"
[HKCU\Software\systweak\ASO3\Scheduler\OneClick]
"chkDiskDefrag" = "0"
[HKCU\Software\systweak\ASO3\System Cleaner\PPOptions\RegularSystemCleanerSPC]
"app_prg_msmanagementconsole" = "1"
[HKCU\Software\systweak\ASO3\System Cleaner\PPOptions\Section3]
"winsys_chkdskfilefragments" = "1"
[HKCU\Software\systweak\ASO3\System Cleaner\PPOptions\RegularSystemCleanerSPC]
"mso2013MS_PowerPoint" = "1"
[HKCU\Software\systweak\ASO3\System Cleaner\PPOptions\Section1]
"ie8_HistoryVS" = "1"
[HKCU\Software\systweak\ASO3]
"RegisteredUser" = ""
[HKCU\Software\systweak\ASO3\System Cleaner\PPOptions\Section4]
"app_prg_windowsdefender" = "1"
[HKCU\Software\systweak\ASO3]
"InstalledPath" = "%Program Files%\Advanced System Optimizer 3"
[HKCU\Software\systweak\ASO3\System Cleaner\PPOptions\RegularSystemCleanerSPC]
"app_prg_remotedesktop" = "1"
[HKCU\Software\systweak\ASO3\System Cleaner\PPOptions\Section4]
"app_prg_gameexplorer" = "0"
[HKCU\Software\systweak\ASO3\System Cleaner\PPOptions\Section1]
"ie8_Cookies" = "1"
[HKCU\Software\systweak\ASO3\System Cleaner\PPOptions\RegularSystemCleanerSPC]
"app_prg_windowsmediacenter" = "1"
"googlechrome_VisitedLinks" = "1"
"jfdotnet" = "1"
[HKLM\SOFTWARE\Microsoft\Cryptography\RNG]
"Seed" = "47 6B 0D AE FC F2 21 3A 3E FE 98 1D 54 A9 33 32"
[HKCU\Software\systweak\ASO3\Scheduler\OneClick]
"ASO-OneClickCare" = "Không có lịch trình"
[HKCU\Software\systweak\ASO3\System Cleaner\PPOptions\RegularSystemCleanerSPC]
"app_prg_regedit" = "1"
[HKCU\Software\systweak\ASO3\Scheduler\OneClick]
"chkAntispyware" = "0"
[HKCU\Software\systweak\ASO3\System Cleaner\PPOptions\Section1]
"AdobeFlashPlayer" = "0"
[HKCU\Software\systweak\ASO3\System Cleaner\PPOptions\Section3]
"winsys_winerrorreporting" = "0"
[HKCU\Software\systweak\ASO3\System Cleaner\PPOptions\RegularSystemCleanerSPC]
"app_prg_windowsdefender" = "1"
"winsys_clipboard" = "1"
"iMycache" = "0"
[HKCU\Software\systweak\ASO3\Scheduler\OneClick]
"chkDriverupdater" = "1"
[HKCU\Software\systweak\ASO3\System Cleaner\PPOptions\RegularSystemCleanerSPC]
"app_prg_skype" = "1"
"winsys_memorydumps" = "1"
[HKCU\Software\systweak\ASO3\System Cleaner\PPOptions\Section4]
"app_prg_adobeair" = "0"
"mso2013MS_Word" = "1"
[HKCU\Software\systweak\ASO3]
"ASO3CAM" = "website"
[HKCU\Software\systweak\ASO3\System Cleaner\PPOptions\RegularSystemCleanerSPC]
"app_prg_adobephotoshopcss" = "0"
"app_prg_acrobatdistiller" = "1"
[HKCU\Software\systweak\ASO3\System Cleaner\PPOptions\Section4]
"app_prg_msofficepicturemanager" = "1"
[HKCU\Software\systweak\ASO3\ScanStatusForLauncher\SysFileBackup]
"LastScanDateTime" = "10/21/2014 2:12:47 PM"
[HKCU\Software\systweak\ASO3\System Cleaner\PPOptions\Section2]
"jfoldprefach" = "0"
[HKCU\Software\systweak\ASO3\System Cleaner\PPOptions\Section4]
"app_prg_utorrent" = "1"
[HKCU\Software\systweak\ASO3\System Cleaner\PPOptions\RegularSystemCleanerSPC]
"jflogfileactive" = "1"
[HKCU\Software\systweak\ASO3\OneClickCure\SysFileBackup]
"CLEANFINISHED" = "1"
[HKCU\Software\systweak\ASO3\OneclickLastScanDetailsPath]
"SystemCleaner.exe" = "0"
[HKCU\Software\systweak\ASO3\System Cleaner\PPOptions\Section3]
"winsys_taskbarjumplists" = "1"
[HKCU\Software\systweak\ASO3\System Cleaner\PPOptions\RegularSystemCleanerSPC]
"app_prg_winrar" = "1"
"app_prg_utorrent" = "1"
"app_prg_gameexplorer" = "0"
[HKCU\Software\systweak\ASO3\System Cleaner\PPOptions\Section3]
"winsys_otherexplorermrus" = "1"
[HKCU\Software\systweak\ASO3\System Cleaner\PPOptions\RegularSystemCleanerSPC]
"app_prg_windowsmediaplayer" = "1"
[HKCU\Software\systweak\ASO3\ScanStatusForLauncher\SysFileBackup]
"iconStatus" = "1"
[HKCU\Software\systweak\ASO3\System Cleaner\PPOptions\RegularSystemCleanerSPC]
"mso2013MS_Access" = "1"
"app_prg_msofficepicturemanager" = "1"
[HKCU\Software\systweak\ASO3\ScanStatusForLauncher\SysFileBackup]
"MSGOnHome" = ""
[HKCU\Software\systweak\ASO3\System Cleaner\PPOptions\RegularSystemCleanerSPC]
"googlechrome_Cookies" = "1"
"jfrecentprgdocset" = "0"
"winsys_windowslogfiles" = "1"
"winsys_taskbarjumplists" = "1"
[HKCU\Software\systweak\ASO3\Advanced System Optimizer\OneClick]
"chkPrivacyProtector" = "1"
[HKCU\Software\systweak\ASO3\System Cleaner\PPOptions\Section4]
"app_prg_microsoftsilverlight" = "1"
"app_prg_msmanagementconsole" = "1"
[HKCU\Software\systweak\ASO3\System Cleaner\PPOptions\RegularSystemCleanerSPC]
"app_prg_adobeacrobat" = "1"
[HKCU\Software\systweak\ASO3\System Cleaner\PPOptions\Section4]
"app_prg_acrobatdistiller" = "1"
"iMycache" = "0"
[HKCU\Software\systweak\ASO3\Advanced System Optimizer\OneClick]
"chkJunkFileCleaner" = "1"
[HKCU\Software\systweak\ASO3\System Cleaner\PPOptions\Section1]
"googlechrome_Cache" = "1"
[HKCU\Software\systweak\ASO3\System Cleaner\PPOptions\RegularSystemCleanerSPC]
"winsys_networkpasswords" = "0"
[HKCU\Software\systweak\ASO3\System Cleaner\PPOptions\Section2]
"jfrecentprgdocset" = "0"
[HKCU\Software\systweak\ASO3\System Cleaner\PPOptions\Section3]
"winsys_clipboard" = "1"
[HKCU\Software\systweak\ASO3]
"ASOBUILDFOR" = "systweak"
[HKCU\Software\systweak\ASO3\Advanced System Optimizer\OneClick]
"chkRegClean" = "1"
[HKCU\Software\systweak\ASO3\System Cleaner\PPOptions\RegularSystemCleanerSPC]
"app_prg_adobeair" = "0"
"googlechrome_History" = "1"
"mso2013MS_RecentFolder" = "1"
[HKCU\Software\systweak\ASO3\Scheduler\OneClick]
"(Default)" = "Scan Not Scheduled"
"chkRegOptimizer" = "1"
[HKCU\Software\systweak\ASO3\System Cleaner\PPOptions\Section4]
"mso2013MS_PowerPoint" = "1"
[HKCU\Software\systweak\ASO3\System Cleaner\PPOptions\RegularSystemCleanerSPC]
"app_prg_malwarebytesantimalware" = "0"
"jfdownloadprgfile" = "0"
[HKCU\Software\systweak\ASO3\System Cleaner\PPOptions\Section3]
"winsys_memorydumps" = "1"
[HKCU\Software\systweak\ASO3\LAST_CALL_TIME]
"LastGVTime" = "DF 07 01 00 06 00 0A 00 02 00 28 00 10 00 B2 02"
[HKCU\Software\systweak\ASO3\Advanced System Optimizer\OneClick]
"chkRegOptimizer" = "1"
[HKCU\Software\systweak\ASO3\System Cleaner\PPOptions\Section2]
"jfThumbnail" = "0"
[HKCU\Software\systweak\ASO3\System Cleaner\PPOptions\RegularSystemCleanerSPC]
"AdobeFlashPlayer" = "0"
"msofficeothertool_2013" = "1"
"gchromeoptdatabases" = "0"
[HKCU\Software\systweak\ASO3\System Cleaner\PPOptions\Section1]
"gchromeoptdatabases" = "0"
[HKCU\Software\systweak\ASO3\System Cleaner\PPOptions\RegularSystemCleanerSPC]
"app_prg_microsoftsilverlight" = "1"
"winsys_dnscache" = "0"
[HKCU\Software\systweak\ASO3\System Cleaner\PPOptions\Section2]
"jfTempFile" = "1"
[HKCU\Software\systweak\ASO3\System Cleaner\PPOptions\Section1]
"googlechrome_History" = "1"
[HKCU\Software\systweak\ASO3\System Cleaner\PPOptions\Section2]
"jfwpffont" = "0"
[HKCU\Software\systweak\ASO3\System Cleaner\PPOptions\RegularSystemCleanerSPC]
"googlechrome_Cache" = "1"
[HKCU\Software\systweak\ASO3\System Cleaner\PPOptions\Section4]
"app_prg_windowsmediacenter" = "1"
[HKCU\Software\systweak\ASO3]
"SecDelAppName" = "Xóa vĩnh viễn"
[HKCU\Software\systweak\ASO3\System Cleaner\PPOptions\RegularSystemCleanerSPC]
"winsys_searchautocomplete" = "0"
[HKCU\Software\systweak\ASO3\System Cleaner\PPOptions\Section4]
"mso2013MS_Access" = "1"
"app_prg_malwarebytesantimalware" = "0"
[HKCU\Software\systweak\ASO3\System Cleaner\PPOptions\Section2]
"jflogfileactive" = "1"
[HKCU\Software\systweak\ASO3\System Cleaner\PPOptions\RegularSystemCleanerSPC]
"jfwpffont" = "0"
[HKCU\Software\systweak\ASO3]
"RegisteredPass" = "00JJY7-WTAY0J-K146RX-84C8TJ"
[HKCU\Software\systweak\ASO3\System Cleaner\PPOptions\Section1]
"googlechrome_Cookies" = "1"
[HKCU\Software\systweak\ASO3\System Cleaner\PPOptions\RegularSystemCleanerSPC]
"ie8_Cookies" = "1"
[HKCU\Software\systweak\ASO3\System Cleaner\PPOptions\Section4]
"msofficeothertool_2013" = "1"
"app_prg_adobeacrobat" = "1"
[HKCU\Software\systweak\ASO3\System Cleaner\PPOptions\RegularSystemCleanerSPC]
"mso2013MS_Word" = "1"
[HKCU\Software\systweak\ASO3\ScanStatusForLauncher\SysFileBackup]
"msg" = "Last backup taken on:Tue. October 21, 2014. 02:12 PM"
The process %original file name%.exe:228 makes changes in the system registry.
The Trojan creates and/or sets the following values in system registry:
[HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Shell Folders]
"Common Favorites" = "%Documents and Settings%\All Users\Favorites"
[HKCU\Software\Microsoft\Windows\CurrentVersion\Explorer\MountPoints2\{c155cd72-744b-11e2-8294-806d6172696f}]
"BaseClass" = "Drive"
[HKCU\Software\Microsoft\Windows\CurrentVersion\Explorer\Shell Folders]
"My Video" = ""
"NetHood" = "%Documents and Settings%\%current user%\NetHood"
"Fonts" = "%WinDir%\Fonts"
"AppData" = "%Documents and Settings%\%current user%\Application Data"
[HKCU\Software\Microsoft\Windows\ShellNoRoam\MUICache\%Program Files%\Common Files\Advanced System Optimizer]
"ASO3portable.exe" = "ASO3portable"
[HKCU\Software\Microsoft\Windows\CurrentVersion\Explorer\Shell Folders]
"Cache" = "%Documents and Settings%\%current user%\Local Settings\Temporary Internet Files"
[HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Shell Folders]
"Common Start Menu" = "%Documents and Settings%\All Users\Start Menu"
[HKCU\Software\Microsoft\Windows\CurrentVersion\Explorer\Shell Folders]
"Personal" = "%Documents and Settings%\%current user%\My Documents"
[HKCU\Software\Microsoft\Windows\CurrentVersion\Explorer\MountPoints2\{c155cd73-744b-11e2-8294-806d6172696f}]
"BaseClass" = "Drive"
[HKCU\Software\Microsoft\Windows\CurrentVersion\Explorer\Shell Folders]
"PrintHood" = "%Documents and Settings%\%current user%\PrintHood"
"Startup" = "%Documents and Settings%\%current user%\Start Menu\Programs\Startup"
"Local AppData" = "%Documents and Settings%\%current user%\Local Settings\Application Data"
[HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Shell Folders]
"Common AppData" = "%Documents and Settings%\All Users\Application Data"
[HKCU\Software\Microsoft\Windows\CurrentVersion\Explorer\MountPoints2\{c155cd75-744b-11e2-8294-806d6172696f}]
"BaseClass" = "Drive"
[HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Shell Folders]
"CommonMusic" = "%Documents and Settings%\All Users\Documents\My Music"
[HKCU\Software\Microsoft\Windows\CurrentVersion\Explorer\Shell Folders]
"Templates" = "%Documents and Settings%\%current user%\Templates"
[HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Shell Folders]
"Common Administrative Tools" = "%Documents and Settings%\All Users\Start Menu\Programs\Administrative Tools"
"Common Startup" = "%Documents and Settings%\All Users\Start Menu\Programs\Startup"
"Common Desktop" = "%Documents and Settings%\All Users\Desktop"
"Common Templates" = "%Documents and Settings%\All Users\Templates"
[HKCU\Software\Microsoft\Windows\CurrentVersion\Explorer\Shell Folders]
"Desktop" = "%Documents and Settings%\%current user%\Desktop"
[HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Shell Folders]
"Common Documents" = "%Documents and Settings%\All Users\Documents"
[HKCU\Software\Microsoft\Windows\CurrentVersion\Explorer\Shell Folders]
"Administrative Tools" = ""
"My Pictures" = "%Documents and Settings%\%current user%\My Documents\My Pictures"
"SendTo" = "%Documents and Settings%\%current user%\SendTo"
"Cookies" = "%Documents and Settings%\%current user%\Cookies"
"Start Menu" = "%Documents and Settings%\%current user%\Start Menu"
[HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Shell Folders]
"CommonVideo" = "%Documents and Settings%\All Users\Documents\My Videos"
"CommonPictures" = "%Documents and Settings%\All Users\Documents\My Pictures"
[HKLM\SOFTWARE\Microsoft\Cryptography\RNG]
"Seed" = "C6 D1 7F 0D 2B F9 9A 32 8D 1D 7F 86 D9 1E 2B CD"
[HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Shell Folders]
"Common Programs" = "%Documents and Settings%\All Users\Start Menu\Programs"
[HKCU\Software\Microsoft\Windows\CurrentVersion\Explorer\Shell Folders]
"My Music" = "%Documents and Settings%\%current user%\My Documents\My Music"
"Programs" = "%Documents and Settings%\%current user%\Start Menu\Programs"
[HKCU\Software\Microsoft\Windows\CurrentVersion\Explorer\MountPoints2\{b98117e8-75ca-11e2-81b2-000c293708fb}]
"BaseClass" = "Drive"
[HKCU\Software\Microsoft\Windows\CurrentVersion\Explorer\Shell Folders]
"CD Burning" = "%Documents and Settings%\%current user%\Local Settings\Application Data\Microsoft\CD Burning"
"Recent" = "%Documents and Settings%\%current user%\Recent"
"Favorites" = "%Documents and Settings%\%current user%\Favorites"
"History" = "%Documents and Settings%\%current user%\Local Settings\History"
The Trojan modifies IE settings for security zones to map all local web-nodes with no dots which do not refer to any zone to the Intranet Zone:
[HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings\ZoneMap]
"UNCAsIntranet" = "1"
The Trojan modifies IE settings for security zones to map all urls to the Intranet Zone:
"IntranetName" = "1"
The Trojan modifies IE settings for security zones to map all web-nodes that bypassing the proxy to the Intranet Zone:
"ProxyBypass" = "1"
The process ASO3portable.exe:644 makes changes in the system registry.
The Trojan creates and/or sets the following values in system registry:
[HKLM\SOFTWARE\Microsoft\Cryptography\RNG]
"Seed" = "CC 07 42 E9 1A B9 4F AF 06 7E F2 8C 52 46 BC E7"
[HKCU\Software\Microsoft\Windows\CurrentVersion\Explorer\MountPoints2\{c155cd73-744b-11e2-8294-806d6172696f}]
"BaseClass" = "Drive"
[HKCU\Software\Microsoft\Windows\CurrentVersion\Explorer\MountPoints2\{c155cd72-744b-11e2-8294-806d6172696f}]
"BaseClass" = "Drive"
[HKCU\Software\Microsoft\Windows\CurrentVersion\Explorer\MountPoints2\{b98117e8-75ca-11e2-81b2-000c293708fb}]
"BaseClass" = "Drive"
[HKCU\Software\Microsoft\Windows\CurrentVersion\Explorer\MountPoints2\{c155cd75-744b-11e2-8294-806d6172696f}]
"BaseClass" = "Drive"
Dropped PE files
| MD5 | File path |
|---|---|
| 5aaef929e3a558b37f6d1051e5601dc4 | c:\Program Files\Common Files\Advanced System Optimizer\ASO3portable.exe |
| b77141a7e264541e3d24fac13232bb48 | c:\Program Files\Common Files\Advanced System Optimizer\App\ASEng.dll |
| daac23be5dcf0c0421eacd9e49ec8da1 | c:\Program Files\Common Files\Advanced System Optimizer\App\ASO3.exe |
| 4e95dfb0e61d468f3ae1c8867547a001 | c:\Program Files\Common Files\Advanced System Optimizer\App\ASO3DefragSrv.exe |
| 644e03d595d83adbd23bf09c6ca9f06b | c:\Program Files\Common Files\Advanced System Optimizer\App\ASO3DefragSrv64.exe |
| 23f573befc557b61c66e682463ba4c5f | c:\Program Files\Common Files\Advanced System Optimizer\App\ASOHelper.dll |
| 44eb05fcfc115ad4e3e62951b3bca0a1 | c:\Program Files\Common Files\Advanced System Optimizer\App\AppResource.dll |
| c2faf254cc84d9046d6cd182a1612ff6 | c:\Program Files\Common Files\Advanced System Optimizer\App\AsInvoker.exe |
| 7ad0a2b5eedef906a920ad6184009b25 | c:\Program Files\Common Files\Advanced System Optimizer\App\BackupManager.exe |
| 3b177a43390f2818f2d9b313fcf15cab | c:\Program Files\Common Files\Advanced System Optimizer\App\BeforeUninstall.exe |
| 162515fbb69263bd123b419b7e8cfd1f | c:\Program Files\Common Files\Advanced System Optimizer\App\CheckUpdate.exe |
| 1353efe21ef7810bf5dff59624ee50d7 | c:\Program Files\Common Files\Advanced System Optimizer\App\DefragServiceManager.exe |
| 7644f527364fe352628b221f0c58131f | c:\Program Files\Common Files\Advanced System Optimizer\App\DiskDoctor.exe |
| 949ca435c3315f43def341fb971d5d2e | c:\Program Files\Common Files\Advanced System Optimizer\App\DiskExplorer.exe |
| 1e40b0580cd8e473396525c5db54f286 | c:\Program Files\Common Files\Advanced System Optimizer\App\DiskOptimizer.exe |
| 8fae0e1ff85f5e0151d50d32a9e977e0 | c:\Program Files\Common Files\Advanced System Optimizer\App\Downloader.dll |
| 6e7f1b9b84a980e6800da912ac1022b7 | c:\Program Files\Common Files\Advanced System Optimizer\App\DriverUpdater.exe |
| 704d3abd5b8a851c31071cdc551cb8ff | c:\Program Files\Common Files\Advanced System Optimizer\App\DuplicateFilesRemover.exe |
| 88ca1ba1d436a38e1c467f3180143e53 | c:\Program Files\Common Files\Advanced System Optimizer\App\GOHelper.exe |
| bb8bfd65b50a71143c7db630e0fc3326 | c:\Program Files\Common Files\Advanced System Optimizer\App\GameOptLauncher.exe |
| 00de2a32220d5b1e7045b5fb0e14d05f | c:\Program Files\Common Files\Advanced System Optimizer\App\GameOptLauncher64.exe |
| 1674545957e74382d5ee242e7e7aec8c | c:\Program Files\Common Files\Advanced System Optimizer\App\GameOptimizer.exe |
| 6773b1263f2f73f671a26872e8a27366 | c:\Program Files\Common Files\Advanced System Optimizer\App\HighestAvailable.exe |
| 19567cf3b5e386d4d82b216fe0bfb036 | c:\Program Files\Common Files\Advanced System Optimizer\App\HookDll.dll |
| d1c3b96e0d0df71d197d2a7c1bdf4cf4 | c:\Program Files\Common Files\Advanced System Optimizer\App\HookDll64.dll |
| 44cc83891dcee9cb4b5e813411e5f118 | c:\Program Files\Common Files\Advanced System Optimizer\App\Interop.IWshRuntimeLibrary.dll |
| 7c4798a1f682703e1ef5b6264f4fde4d | c:\Program Files\Common Files\Advanced System Optimizer\App\KillASOProcesses.exe |
| 2229324ce0374811ca64a19ee62f130b | c:\Program Files\Common Files\Advanced System Optimizer\App\MFC90ENU.dll |
| 4031c546092925f6f59448d7c8a5c663 | c:\Program Files\Common Files\Advanced System Optimizer\App\MemoryOptimizer.exe |
| c757150e058428e2a0757701930c223c | c:\Program Files\Common Files\Advanced System Optimizer\App\Microsoft.Win32.TaskScheduler.dll |
| a41c452bc2a72c6dccb00ab7188b91ed | c:\Program Files\Common Files\Advanced System Optimizer\App\Network.dll |
| c001999e8b902a67c0c850d84b8fd9cb | c:\Program Files\Common Files\Advanced System Optimizer\App\NewScheduler.exe |
| 504b39ada690135ad94f2e92fbc0132a | c:\Program Files\Common Files\Advanced System Optimizer\App\PCFixer.exe |
| 36b04c851aa990b1f17f5a5210c265fc | c:\Program Files\Common Files\Advanced System Optimizer\App\PTBWin7.exe |
| 1883e8b1030e0f57b779df42a951cbc6 | c:\Program Files\Common Files\Advanced System Optimizer\App\PrivacyProtector.exe |
| 17196301c272764aa7f888d6d0728151 | c:\Program Files\Common Files\Advanced System Optimizer\App\RegClean.exe |
| a4cf9afc61a959fec15e1fdb119a6475 | c:\Program Files\Common Files\Advanced System Optimizer\App\RegistryOptimizer.exe |
| 75b3a51cdddd8b021f086d66943b6c53 | c:\Program Files\Common Files\Advanced System Optimizer\App\RequireAdministrator.exe |
| 3e827530ae7537febfb60bab2aaf2517 | c:\Program Files\Common Files\Advanced System Optimizer\App\ScanDll.dll |
| 5df9dd071160fff20501650c3a3198ab | c:\Program Files\Common Files\Advanced System Optimizer\App\SecureDelete.exe |
| e469b61fcc60d4c170c4a009a8e2ef92 | c:\Program Files\Common Files\Advanced System Optimizer\App\SecureEncryptor.exe |
| 02b91c2a280387456645b7c5ff0961e9 | c:\Program Files\Common Files\Advanced System Optimizer\App\SecureShell.dll |
| 4c0309576b4f66ddeabc5759133b4d86 | c:\Program Files\Common Files\Advanced System Optimizer\App\SevenZipSharp.dll |
| d22b2d6b80e11bc475ba78a46b01bf54 | c:\Program Files\Common Files\Advanced System Optimizer\App\StartupManager.exe |
| e5b29497b56985eaa5de485ba0f87e2f | c:\Program Files\Common Files\Advanced System Optimizer\App\SysFileBakRes.exe |
| e515cf797dc351ed69bef2437a7f4d87 | c:\Program Files\Common Files\Advanced System Optimizer\App\System.Core.dll |
| 9892e0d72eedf3da1cdcfdac318d556c | c:\Program Files\Common Files\Advanced System Optimizer\App\System.Data.SQLite.dll |
| dbf9622d88860a3d3e37dd20461aee0f | c:\Program Files\Common Files\Advanced System Optimizer\App\SystemAnalyzerAndAdvisor.exe |
| b8a6ff6c7f654a66f6b602906ff9b338 | c:\Program Files\Common Files\Advanced System Optimizer\App\SystemCleaner.exe |
| 1b7387124beba02e51d858d37c0e77aa | c:\Program Files\Common Files\Advanced System Optimizer\App\SystemProtector.XmlSerializers.dll |
| 63edefd10b11e945192d4f16fe48d93f | c:\Program Files\Common Files\Advanced System Optimizer\App\SystemProtector.exe |
| 96b86ff7f590360b87beebb308176648 | c:\Program Files\Common Files\Advanced System Optimizer\App\Undelete.exe |
| 80c2684509659a30833838c6d26e2c31 | c:\Program Files\Common Files\Advanced System Optimizer\App\UndeleteDLL.dll |
| d40d63ac9eb6c2148e218e3ca25217eb | c:\Program Files\Common Files\Advanced System Optimizer\App\UninstallManager.exe |
| 6e92c0d44ed109e27f6e42c8a84bc5d5 | c:\Program Files\Common Files\Advanced System Optimizer\App\VolumeControl.exe |
| 2e5da0a8298f52a8bbc1e4a2d07ee9fd | c:\Program Files\Common Files\Advanced System Optimizer\App\VolumeControl64.exe |
| f3c6318caf18c3c5027981b426a33c4d | c:\Program Files\Common Files\Advanced System Optimizer\App\Xceed.Compression.Formats.dll |
| a35a326e2e52fe01c04fac9cf8f039d2 | c:\Program Files\Common Files\Advanced System Optimizer\App\Xceed.Compression.dll |
| 6d188ac513b2efffb766a0e181e46c16 | c:\Program Files\Common Files\Advanced System Optimizer\App\Xceed.FileSystem.dll |
| 5861f0dd9a6b14a4087c2cb66b731d49 | c:\Program Files\Common Files\Advanced System Optimizer\App\Xceed.Zip.dll |
| 318caf44f4d7b7389fb34e1f22d1d852 | c:\Program Files\Common Files\Advanced System Optimizer\App\XceedZip.dll |
| 465b126f56630d3877412c8bdc574414 | c:\Program Files\Common Files\Advanced System Optimizer\App\aso3sys.dll |
| 9f230a2b21b5546c359fbeb0a38867be | c:\Program Files\Common Files\Advanced System Optimizer\App\asodemo.exe |
| 335d3a3ea2c152cde9cf3da9259e8b92 | c:\Program Files\Common Files\Advanced System Optimizer\App\asohtm.dll |
| f5b3347a9cd0d4dfbd61766c9aad3cea | c:\Program Files\Common Files\Advanced System Optimizer\App\asores.dll |
| 1895b096ea98c81146d614e121190cbd | c:\Program Files\Common Files\Advanced System Optimizer\App\aspcomm.dll |
| 4a53ada608f1470960ee2ed7ed45dfad | c:\Program Files\Common Files\Advanced System Optimizer\App\aspsys.dll |
| 47857df83c1bd9755afd1c7f0ae65465 | c:\Program Files\Common Files\Advanced System Optimizer\App\atl90.dll |
| 0dc354c787e65d69ec3a19f8b53d8dd7 | c:\Program Files\Common Files\Advanced System Optimizer\App\clamunpack\clamscan.exe |
| 1063cd2d85acbe00210a0f65b5c13a4e | c:\Program Files\Common Files\Advanced System Optimizer\App\clamunpack\libclamav.dll |
| cf73c3a03582408d422d4f7a01190d00 | c:\Program Files\Common Files\Advanced System Optimizer\App\difxapi.dll |
| 1a2e5109c2bb5c68d499e17b83acb73a | c:\Program Files\Common Files\Advanced System Optimizer\App\difxapi64.dll |
| 39038bb09f1d41b731f77a51bf19f519 | c:\Program Files\Common Files\Advanced System Optimizer\App\launcher.exe |
| a76104d8d9aba3670fd3cea603d70ada | c:\Program Files\Common Files\Advanced System Optimizer\App\mfc90u.dll |
| 871f979d70414c900b35e56222932daf | c:\Program Files\Common Files\Advanced System Optimizer\App\msvcp90.dll |
| 4d03ca609e68f4c90cf66515218017f8 | c:\Program Files\Common Files\Advanced System Optimizer\App\msvcr90.dll |
| 0834bb938f243cd146b7e84e05526d81 | c:\Program Files\Common Files\Advanced System Optimizer\App\sqlite3.dll |
| 92040a0f7f7d7a3f1e12d8bb064cb3b2 | c:\Program Files\Common Files\Advanced System Optimizer\App\unrar.dll |
| f966b2dbba84704f916540b2446203a0 | c:\Program Files\Common Files\Advanced System Optimizer\App\updater\amd64Helper\DriverUpdateHelper64.exe |
| be0f2a1fa41d92db10a80c3c58b49a7a | c:\Program Files\Common Files\Advanced System Optimizer\App\updater\amd64\DriverRestore.exe |
| ca41d56630191e61565a343c59695ca1 | c:\Program Files\Common Files\Advanced System Optimizer\App\updater\extract\7z.dll |
| f7831ac853ec186059465b2f0aa2676d | c:\Program Files\Common Files\Advanced System Optimizer\App\updater\extract\7z.exe |
| 782cc17d6398f166d544674971957e7d | c:\Program Files\Common Files\Advanced System Optimizer\App\updater\vista\DriverRestore.exe |
| ca8a74818e1f0db034151b0e4baf61a0 | c:\Program Files\Common Files\Advanced System Optimizer\App\updater\win7amd64\DriverRestore.exe |
| 3f8150764229352837f1070d2dfc8cc3 | c:\Program Files\Common Files\Advanced System Optimizer\App\updater\win7i386\DriverRestore.exe |
| 73f5f937c9651f8388b31ad1dce63ddb | c:\Program Files\Common Files\Advanced System Optimizer\App\updater\xp\DriverRestore.exe |
| 2fae9f2a922e3fc5909fcf716aae61f2 | c:\Program Files\Common Files\Advanced System Optimizer\App\xmllite.dll |
| 98d9a8402f0eb75bbbf7f49fc36688b5 | c:\Program Files\Common Files\Advanced System Optimizer\App\zlibwapi.dll |
HOSTS file anomalies
No changes have been detected.
Rootkit activity
No anomalies have been detected.
Propagation
VersionInfo
Company Name: Vietnamese by ptk911
Product Name:
Product Version:
Legal Copyright:
Legal Trademarks:
Original Filename:
Internal Name:
File Version: 3.9.1111.16526
File Description: Advanced System Optimizer
Comments:
Language: English (United States)
PE Sections
| Name | Virtual Address | Virtual Size | Raw Size | Entropy | Section MD5 |
|---|---|---|---|---|---|
| .text | 4096 | 86734 | 87040 | 4.60473 | 2e42313f3fc3e4989aab7b05c9410cfb |
| .rdata | 94208 | 14650 | 14848 | 3.94375 | 728782433047ac51db0416723bf6117d |
| .data | 110592 | 19564 | 2560 | 2.99063 | 78722c0b942b18d90bd9fea6bed3e5ba |
| .rsrc | 131072 | 7532 | 7680 | 3.21054 | 17cbc2a5d9e365b65e0b61b6737766d4 |
Dropped from:
Downloaded by:
Similar by SSDeep:
Similar by Lavasoft Polymorphic Checker:
URLs
| URL | IP |
|---|---|
| hxxp://www.systweak.com/activationcheck/checkactivation.asp?ActivationKey=00JJY7-WTAY0J-K146RX-84C8TJ | |
| hxxp://systweak.vo.llnwd.net/asoupdates/update.aspx?productname=aso¤tapplicationid=3.9.1111.16526¤tdbversionid=0®ver=1&machineid=768429272046948335&key=00JJY7-WTAY0J-K146RX-84C8TJ&username=&daysleft=0&cname=&TELNO=(855) 716-7030&TELNOFR= | |
| hxxp://updates3.systweak.com/asoupdates/update.aspx?productname=aso¤tapplicationid=3.9.1111.16526¤tdbversionid=0®ver=1&machineid=768429272046948335&key=00JJY7-WTAY0J-K146RX-84C8TJ&username=&daysleft=0&cname=&TELNO=(855) 716-7030&TELNOFR= |
IDS verdicts (Suricata alerts: Emerging Threats ET ruleset)
ET MALWARE Common Adware Library ISX User Agent Detected
Traffic
GET /asoupdates/update.aspx?productname=aso¤tapplicationid=3.9.1111.16526¤tdbversionid=0®ver=1&machineid=768429272046948335&key=00JJY7-WTAY0J-K146RX-84C8TJ&username=&daysleft=0&cname=&TELNO=(855) 716-7030&TELNOFR= HTTP/1.1
Accept: */*
Range: bytes=0-416
User-Agent: ISX Download DLL
Host: updates3.systweak.com
HTTP/1.1 206 Partial Content
Server: nginx/1.0.12
Date: Wed, 14 Jan 2015 14:10:53 GMT
Content-Type: application/octet-stream
Last-Modified: Tue, 16 Dec 2014 12:24:19 GMT
Accept-Ranges: bytes
X-Agile-Checksum: ee66ea91c242c9ae2edeb334317715c8dd73c3c69de8f10beba4e62dd4af1da0
Content-Range: bytes 0-415/416
Content-Length: 416
Connection: keep-alive[Application]..PROGRAM_VERSION=3.9.1111.0..PROGRAM_URL=hXXp://cdn.syst
weak.com/asoupdates/updates/aso_updatestub.exe..PROGRAM_SIZE=627024..O
pen_Browser=0..Description=..Key=aso_updatestub.exe..Hash=757a290af9cd
154fd5482a89fe8f3b3dde1ac726..IS_MANDATORY=0..TELNO=(855) 716-7030..TE
LNOFR=..[TELNOLIST]..1=(800) 871-7918:(855) 716-7030..2=(800) 983-7054
:(855) 716-7030..3=(855) 765-6710:(855) 716-7030........HTTP/1.1 206 P
artial Content..Server: nginx/1.0.12..Date: Wed, 14 Jan 2015 14:10:53
GMT..Content-Type: application/octet-stream..Last-Modified: Tue, 16 De
c 2014 12:24:19 GMT..Accept-Ranges: bytes..X-Agile-Checksum: ee66ea91c
242c9ae2edeb334317715c8dd73c3c69de8f10beba4e62dd4af1da0..Content-Range
: bytes 0-415/416..Content-Length: 416..Connection: keep-alive..[Appli
cation]..PROGRAM_VERSION=3.9.1111.0..PROGRAM_URL=hXXp://cdn.systweak.c
om/asoupdates/updates/aso_updatestub.exe..PROGRAM_SIZE=627024..Open_Br
owser=0..Description=..Key=aso_updatestub.exe..Hash=757a290af9cd154fd5
482a89fe8f3b3dde1ac726..IS_MANDATORY=0..TELNO=(855) 716-7030..TELNOFR=
..[TELNOLIST]..1=(800) 871-7918:(855) 716-7030..2=(800) 983-7054:(855)
716-7030..3=(855) 765-6710:(855) 716-7030..<<< skipped >>>
HEAD /asoupdates/update.aspx?productname=aso¤tapplicationid=3.9.1111.16526¤tdbversionid=0®ver=1&machineid=768429272046948335&key=00JJY7-WTAY0J-K146RX-84C8TJ&username=&daysleft=0&cname=&TELNO=(855) 716-7030&TELNOFR= HTTP/1.1
Accept: */*
User-Agent: ISX Download DLL
Host: updates3.systweak.com
Content-Length: 0
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx/1.0.12
Date: Wed, 14 Jan 2015 14:10:53 GMT
Content-Type: application/octet-stream
Last-Modified: Tue, 16 Dec 2014 12:24:19 GMT
Accept-Ranges: bytes
X-Agile-Checksum: ee66ea91c242c9ae2edeb334317715c8dd73c3c69de8f10beba4e62dd4af1da0
Content-Length: 416
Connection: keep-alive
HEAD /activationcheck/checkactivation.asp?ActivationKey=00JJY7-WTAY0J-K146RX-84C8TJ HTTP/1.1
Accept: */*
User-Agent: ISX Download DLL
Host: VVV.systweak.com
Content-Length: 0
Cache-Control: no-cache
HTTP/1.1 200 OK
Cache-Control: private
Content-Length: 0
Content-Type: text/html
Server: Microsoft-IIS/7.5
Set-Cookie: ASPSESSIONIDCSBDRBRA=PEAODGMCBPLNLIFMBBDOMMOB; path=/
X-Powered-By: ASP.NET
Date: Wed, 14 Jan 2015 14:10:32 GMT....
GET /activationcheck/checkactivation.asp?ActivationKey=00JJY7-WTAY0J-K146RX-84C8TJ HTTP/1.1
Accept: */*
User-Agent: ISX Download DLL
Host: VVV.systweak.com
Connection: Keep-Alive
Cache-Control: no-cache
Cookie: ASPSESSIONIDCSBDRBRA=PEAODGMCBPLNLIFMBBDOMMOB
HTTP/1.1 200 OK
Cache-Control: private
Content-Length: 0
Content-Type: text/html
Server: Microsoft-IIS/7.5
X-Powered-By: ASP.NET
Date: Wed, 14 Jan 2015 14:10:32 GMTHTTP/1.1 200 OK..Cache-Control: private..Content-Length: 0..Content-Ty
pe: text/html..Server: Microsoft-IIS/7.5..X-Powered-By: ASP.NET..Date:
Wed, 14 Jan 2015 14:10:32 GMT..
The Trojan connects to the servers at the folowing location(s):
!Require Windows
.text
`.rdata
@.data
.rsrc
PSSSSSSh
<x%u<
ttNt_Nt.Nt
:Language:%u
Enter password:
0xx
"%s".
Could not overwrite file "%s".
Could not create file "%s".
0xX.
7-Zip: Internal error, code 0xX.
7-Zip: Internal error, code %u.
The archive is corrupted, or invalid password was entered.
7-Zip: Unsupported method.
Error during execution "%s".
"setup.exe"
Could not find "setup.exe".
Could not find command for "%s".
Could not delete file or folder "%s".
Could not create folder "%s".
Error in line %d of configuration data:
Could not open archive file "%s".
1.6.0 develop [x86]
2712 (30
1.6.0 develop [x86] build 2712 (December 30, 2012)
Supported methods and filters, build options:
Sorry, this program requires Microsoft Windows 2000 or later.
COMCTL32.dll
ShellExecuteExW
ShellExecuteW
SHELL32.dll
GDI32.dll
ADVAPI32.dll
GetKeyState
UnhookWindowsHookEx
SetWindowsHookExW
USER32.dll
ole32.dll
OLEAUT32.dll
CreateIoCompletionPort
KERNEL32.dll
MSVCRT.dll
_acmdln
1/*7;8**7
<assemblyIdentity version="1.6.0.2712" name="7-Zip.SfxMod" type="win32"></assemblyIdentity>
<assemblyIdentity type="win32" name="Microsoft.Windows.Common-Controls" version="6.0.0.0" processorArchitecture="X86" publicKeyToken="6595b64144ccf1df"></assemblyIdentity>
<requestedPrivileges><requestedExecutionLevel level="asInvoker" uiAccess="false"></requestedExecutionLevel></requestedPrivileges>
<supportedOS Id="{35138b9a-5d96-4fbd-8e2d-a2440225f93a}"></supportedOS>X%cX%c
SfxString%d
SfxFolderd
PasswordTitle
PasswordText
%X - X - X - X - X
7ZSfxx.cmd
setup.exe
7ZipSfx.x
SfxVarCmdLine1
SfxVarCmdLine2
SfxVarCmdLine0
@ (%d%s)
3.9.1111.16526
ASO3portable.exe_644:
`.rsrc
N{B%dSSShh
PSSh$
HHt8Ht.Ht
tUHt5Ht.Ht
!"""#$#$%&'()*(
support for \P, \p, and \X has not been compiled
PCRE does not support \L, \l, \N, \U, or \u
this version of PCRE is not compiled with PCRE_UTF8 support
POSIX collating elements are not supported
erroffset passed as NULL
POSIX named classes are supported only within a class
operand of unlimited repeat could match the empty string
mscoree.dll
- This application cannot run using the active version of the Microsoft .NET Runtime
Please contact the application's support team for more information.
internal state. The program cannot safely continue execution and must
continue execution and must now be terminated.
GetProcessWindowStation
/AutoIt3ExecuteScript
/AutoIt3ExecuteLine
CmdLine
CmdLineRaw
user32.dll
%d/d/d
kernel32.dll
AutoIt script files (*.au3, *.a3x)
*.au3;*.a3x
All files (*.*)
ASC 0%d
APPSKEY
Psapi.dll
0.0.0.0
%u.%u.%u.%u
04090000
Line %d (File "%s"):
Line %d:
%s (%d) : ==> %s.:
%s (%d) : ==> %s:
FMddddd
URLDOWNLOADTOFILE
UDPSTARTUP
UDPSHUTDOWN
UDPSEND
UDPRECV
UDPOPEN
UDPCLOSESOCKET
UDPBIND
TRAYGETMSG
TCPSTARTUP
TCPSHUTDOWN
TCPSEND
TCPRECV
TCPNAMETOIP
TCPLISTEN
TCPCONNECT
TCPCLOSESOCKET
TCPACCEPT
SHELLEXECUTEWAIT
SHELLEXECUTE
REGENUMKEY
MSGBOX
ISKEYWORD
HTTPSETPROXY
HOTKEYSET
GUIREGISTERMSG
GUIGETMSG
GUICTRLSENDMSG
GUICTRLRECVMSG
FTPSETPROXY
shell32.dll
\??\%s
GUI_RUNDEFMSG
ICMP.DLL
InternetCrackUrlA
FtpGetFileSize
FtpOpenFileA
HttpQueryInfoA
HttpSendRequestA
HttpOpenRequestA
InternetOpenUrlA
Wininet.dll
AutoItCallVariable%d
TCPTimeout
SendKeyDownDelay
SendKeyDelay
FtpBinaryMode
Incorrect Object type in FOR..IN loop
Null Object assignment in FOR..IN loop
AutoIt.Error
3, 2, 2, 0
.DEFAULT\Control Panel\Desktop\ResourceLocale
WIN32_WINDOWS
UNKN%d
SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Shell Folders
SOFTWARE\Microsoft\Windows\CurrentVersion
HOTKEYPRESSED
AUTOITEXE
WINDOWSDIR
Advapi32.dll
HKEY_USERS
HKEY_CURRENT_USER
HKEY_CURRENT_CONFIG
HKEY_CLASSES_ROOT
HKEY_LOCAL_MACHINE
Use directly Windows handle
zcÁ
%Program Files%\Common Files\Advanced System Optimizer\ASO3portable.exe
e /s Delete.reg
GetWindowsDirectoryA
CreatePipe
PeekNamedPipe
GetCPInfo
RegDeleteKeyA
RegCreateKeyExA
RegEnumKeyExA
RegCloseKey
RegOpenKeyExA
SetViewportOrgEx
SHFileOperationA
ShellExecuteA
ShellExecuteExA
RegisterHotKey
EnumWindows
GetAsyncKeyState
GetKeyState
UnregisterHotKey
ExitWindowsEx
EnumThreadWindows
SetKeyboardState
GetKeyboardState
keybd_event
VkKeyScanA
GetKeyboardLayoutNameA
MapVirtualKeyA
EnumChildWindows
.text
`.rdata
@.data
.rsrc
|P/'.hzyBzie
U@UdPFL
86-146
-./012345678
!"#$%&'()*
version="3.0.0.0"
<requestedExecutionLevel
name="Microsoft.Windows.Common-Controls"
version="6.0.0.0"
publicKeyToken="6595b64144ccf1df"
KERNEL32.DLL
ADVAPI32.dll
COMCTL32.dll
comdlg32.dll
GDI32.dll
MPR.dll
ole32.dll
OLEAUT32.dll
SHELL32.dll
USER32.dll
VERSION.dll
WINMM.dll
WSOCK32.dll
Missing operator in expression."Unbalanced brackets in expression.
0Incorrect number of parameters in function call.'"ReDim" used without an array variable.>Illegal text at the end of statement (one statement per line).1"If" statement has no matching "EndIf" statement.1"Else" statement with no matching "If" statement.2"EndIf" statement with no matching "If" statement.7Too many "Else" statements for matching "If" statement.3"While" statement has no matching "Wend" statement.4"Wend" statement with no matching "While" statement.%Variable used without being declared.XArray variable has incorrect number of subscripts or subscript dimension range exceeded.)Array variable subscript badly formatted.'Subscript used with non-Array variable.&Too many subscripts used for an array.0Missing subscript dimensions in "Dim" statement.DNo variable given for "Dim", "Local", "Global" or "Const" statement.
0Expected a "=" operator in assignment statement.*Invalid keyword at the start of this line.
Unknown macro.'Unable to execute the external program.*Unable to get a list of running processes.
Invalid file filter given.*Expected a variable in user function call.1"Do" statement has no matching "Until" statement.2"Until" statement with no matching "Do" statement.#"For" statement is badly formatted.2"Next" statement with no matching "For" statement.N"ExitLoop/ContinueLoop" statements only valid from inside a For/Do/While loop.1"For" statement has no matching "Next" statement.@"Case" statement with no matching "Select"or "Switch" statement.:"EndSelect" statement with no matching "Select" statement.ORecursion level has been exceeded - AutoIt will quit to prevent stack overflow.
!Badly formated variable or macro.3This keyword cannot be used after a "Then" keyword.>"Select" statement is missing "EndSelect" or "Case" statement. "If" statements must have a "Then" keyword.
"Cannot assign values to constants..Cannot make existing variables into constants.:Only Object-type variables allowed in an "With" statement.
HCan pass constants by reference only to parameters with "Const" keyword.*Can not initialize a variable with itself.$Incorrect way to use this parameter.:"EndSwitch" statement with no matching "Switch" statement.>"Switch" statement is missing "EndSwitch" or "Case" statement.H"ContinueCase" statement with no matching "Select"or "Switch" statement.
Unable to execute DLLCall.
ASO3portable.exe_644_rwx_00401000_0007E000:
SSShh
PSSh$
HHt8Ht.Ht
tUHt5Ht.Ht
!"""#$#$%&'()*(
support for \P, \p, and \X has not been compiled
PCRE does not support \L, \l, \N, \U, or \u
this version of PCRE is not compiled with PCRE_UTF8 support
POSIX collating elements are not supported
erroffset passed as NULL
POSIX named classes are supported only within a class
operand of unlimited repeat could match the empty string
mscoree.dll
- This application cannot run using the active version of the Microsoft .NET Runtime
Please contact the application's support team for more information.
internal state. The program cannot safely continue execution and must
continue execution and must now be terminated.
GetProcessWindowStation
/AutoIt3ExecuteScript
/AutoIt3ExecuteLine
CmdLine
CmdLineRaw
user32.dll
%d/d/d
kernel32.dll
AutoIt script files (*.au3, *.a3x)
*.au3;*.a3x
All files (*.*)
ASC 0%d
APPSKEY
Psapi.dll
0.0.0.0
%u.%u.%u.%u
04090000
Line %d (File "%s"):
Line %d:
%s (%d) : ==> %s.:
%s (%d) : ==> %s:
FMddddd
URLDOWNLOADTOFILE
UDPSTARTUP
UDPSHUTDOWN
UDPSEND
UDPRECV
UDPOPEN
UDPCLOSESOCKET
UDPBIND
TRAYGETMSG
TCPSTARTUP
TCPSHUTDOWN
TCPSEND
TCPRECV
TCPNAMETOIP
TCPLISTEN
TCPCONNECT
TCPCLOSESOCKET
TCPACCEPT
SHELLEXECUTEWAIT
SHELLEXECUTE
REGENUMKEY
MSGBOX
ISKEYWORD
HTTPSETPROXY
HOTKEYSET
GUIREGISTERMSG
GUIGETMSG
GUICTRLSENDMSG
GUICTRLRECVMSG
FTPSETPROXY
shell32.dll
\??\%s
GUI_RUNDEFMSG
ICMP.DLL
InternetCrackUrlA
FtpGetFileSize
FtpOpenFileA
HttpQueryInfoA
HttpSendRequestA
HttpOpenRequestA
InternetOpenUrlA
Wininet.dll
AutoItCallVariable%d
TCPTimeout
SendKeyDownDelay
SendKeyDelay
FtpBinaryMode
Incorrect Object type in FOR..IN loop
Null Object assignment in FOR..IN loop
AutoIt.Error
3, 2, 2, 0
.DEFAULT\Control Panel\Desktop\ResourceLocale
WIN32_WINDOWS
UNKN%d
SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Shell Folders
SOFTWARE\Microsoft\Windows\CurrentVersion
HOTKEYPRESSED
AUTOITEXE
WINDOWSDIR
Advapi32.dll
HKEY_USERS
HKEY_CURRENT_USER
HKEY_CURRENT_CONFIG
HKEY_CLASSES_ROOT
HKEY_LOCAL_MACHINE
Use directly Windows handle
zcÁ
%Program Files%\Common Files\Advanced System Optimizer\ASO3portable.exe
e /s Delete.reg
GetWindowsDirectoryA
CreatePipe
PeekNamedPipe
GetCPInfo
RegDeleteKeyA
RegCreateKeyExA
RegEnumKeyExA
RegCloseKey
RegOpenKeyExA
SetViewportOrgEx
SHFileOperationA
ShellExecuteA
ShellExecuteExA
RegisterHotKey
EnumWindows
GetAsyncKeyState
GetKeyState
UnregisterHotKey
ExitWindowsEx
EnumThreadWindows
SetKeyboardState
GetKeyboardState
keybd_event
VkKeyScanA
GetKeyboardLayoutNameA
MapVirtualKeyA
EnumChildWindows
.text
`.rdata
@.data
.rsrc
Missing operator in expression."Unbalanced brackets in expression.
0Incorrect number of parameters in function call.'"ReDim" used without an array variable.>Illegal text at the end of statement (one statement per line).1"If" statement has no matching "EndIf" statement.1"Else" statement with no matching "If" statement.2"EndIf" statement with no matching "If" statement.7Too many "Else" statements for matching "If" statement.3"While" statement has no matching "Wend" statement.4"Wend" statement with no matching "While" statement.%Variable used without being declared.XArray variable has incorrect number of subscripts or subscript dimension range exceeded.)Array variable subscript badly formatted.'Subscript used with non-Array variable.&Too many subscripts used for an array.0Missing subscript dimensions in "Dim" statement.DNo variable given for "Dim", "Local", "Global" or "Const" statement.
0Expected a "=" operator in assignment statement.*Invalid keyword at the start of this line.
Unknown macro.'Unable to execute the external program.*Unable to get a list of running processes.
Invalid file filter given.*Expected a variable in user function call.1"Do" statement has no matching "Until" statement.2"Until" statement with no matching "Do" statement.#"For" statement is badly formatted.2"Next" statement with no matching "For" statement.N"ExitLoop/ContinueLoop" statements only valid from inside a For/Do/While loop.1"For" statement has no matching "Next" statement.@"Case" statement with no matching "Select"or "Switch" statement.:"EndSelect" statement with no matching "Select" statement.ORecursion level has been exceeded - AutoIt will quit to prevent stack overflow.
!Badly formated variable or macro.3This keyword cannot be used after a "Then" keyword.>"Select" statement is missing "EndSelect" or "Case" statement. "If" statements must have a "Then" keyword.
"Cannot assign values to constants..Cannot make existing variables into constants.:Only Object-type variables allowed in an "With" statement.
HCan pass constants by reference only to parameters with "Const" keyword.*Can not initialize a variable with itself.$Incorrect way to use this parameter.:"EndSwitch" statement with no matching "Switch" statement.>"Switch" statement is missing "EndSwitch" or "Case" statement.H"ContinueCase" statement with no matching "Select"or "Switch" statement.
Unable to execute DLLCall.
ASO3.exe_340:
.text
`.rdata
@.data
.rsrc
@.reloc
t.Ht#
t.Ht$
SSShX
{969BB502-2ABB-40c4-BF80-F1530EFEB273}%ls : Caption:%ls size: %d GB
D:\MyProjects\ASO3Rebrandings\ASO3Stable_INI_Logrus\core\bin\Win32\Release\ASO3.pdb
?GetThisMessageMap@CDlgLeftSideChild@@KGPBUAFX_MSGMAP@@XZ
?GetCurSelLang@@YA?AW4ASO_SUPPORTED_LANG@@XZ
?LoadStringW@CSystweakApp@@QAE?AV?$CStringT@_WV?$StrTraitMFC_DLL@_WV?$ChTraitsCRT@_W@ATL@@@@@ATL@@PB_W0@Z
?GetTextWidthAndHeightSingleLineLF@@YAHPAVCWnd@@V?$CStringT@_WV?$StrTraitMFC_DLL@_WV?$ChTraitsCRT@_W@ATL@@@@@ATL@@PAUtagLOGFONTW@@H@Z
?LoadBitmapW@CHoverButton@@QAE_NIIIVCSize@@V?$CStringT@_WV?$StrTraitMFC_DLL@_WV?$ChTraitsCRT@_W@ATL@@@@@ATL@@@Z
?ReturnAppFont@CSystweakApp@@SA?AV?$CStringT@_WV?$StrTraitMFC_DLL@_WV?$ChTraitsCRT@_W@ATL@@@@@ATL@@XZ
?PreTranslateMessage@CDlgBaseWnd@@UAEHPAUtagMSG@@@Z
??0CRegistry@@QAE@ABQAUHKEY__@@@Z
?Open@CRegistry@@QAEHPAUHKEY__@@PB_W_N@Z
?GetScanStatusASP@CSystweakApp@@QAE?AV?$CStringT@_WV?$StrTraitMFC_DLL@_WV?$ChTraitsCRT@_W@ATL@@@@@ATL@@AAK0_N1@Z
?GetScanStatus@CSystweakApp@@QAE?AV?$CStringT@_WV?$StrTraitMFC_DLL@_WV?$ChTraitsCRT@_W@ATL@@@@@ATL@@IAAK_N1@Z
?GetSystweakAppKey@@YAPB_WXZ
?STPathAppend@@YA?AW4PCO_ERROR_CODES@@AAV?$CStringT@_WV?$StrTraitMFC_DLL@_WV?$ChTraitsCRT@_W@ATL@@@@@ATL@@ABV23@@Z
?ReadString@CRegistry@@QAEHPB_WAAV?$CStringT@_WV?$StrTraitMFC_DLL@_WV?$ChTraitsCRT@_W@ATL@@@@@ATL@@@Z
?GetTextWidthAndHeightSingleLine@@YAHPAVCWnd@@V?$CStringT@_WV?$StrTraitMFC_DLL@_WV?$ChTraitsCRT@_W@ATL@@@@@ATL@@PAVCFont@@H@Z
?InitButton@CLauncherProgBtns@@QAE_NIPAUHINSTANCE__@@HV?$CStringT@_WV?$StrTraitMFC_DLL@_WV?$ChTraitsCRT@_W@ATL@@@@@ATL@@1W4BTN_RIGHT_SIDE_STATE@1@1@Z
?GetApplicationEXEName@@YAPB_WH@Z
?m_CurLoggedUser@CSystweakApp@@2W4CUR_LOGGED_IN_USER_RIGHTS@@A
?LoadStringW@CSystweakApp@@QAE?AV?$CStringT@_WV?$StrTraitMFC_DLL@_WV?$ChTraitsCRT@_W@ATL@@@@@ATL@@PBD@Z
?GetRegAppPath@CSystweakApp@@SA?AV?$CStringT@_WV?$StrTraitMFC_DLL@_WV?$ChTraitsCRT@_W@ATL@@@@@ATL@@XZ
?RestartSelfAsAdmin@CSystweakApp@@QAE_NV?$CStringT@_WV?$StrTraitMFC_DLL@_WV?$ChTraitsCRT@_W@ATL@@@@@ATL@@_N@Z
?IsApplicationRunning@CSystweakApp@@QAE_NV?$CStringT@_WV?$StrTraitMFC_DLL@_WV?$ChTraitsCRT@_W@ATL@@@@@ATL@@K_N@Z
?KillApplication@CSystweakApp@@QAEHV?$CStringT@_WV?$StrTraitMFC_DLL@_WV?$ChTraitsCRT@_W@ATL@@@@@ATL@@@Z
?GetProductNAME@@YA?AV?$CStringT@_WV?$StrTraitMFC_DLL@_WV?$ChTraitsCRT@_W@ATL@@@@@ATL@@XZ
?GetCompanyNAME@@YA?AV?$CStringT@_WV?$StrTraitMFC_DLL@_WV?$ChTraitsCRT@_W@ATL@@@@@ATL@@XZ
?STStartWebsite@@YAXXZ
?STOnlinehelpandsupport@@YAXPB_W@Z
?ShowEnterKeyDlg@CSystweakApp@@SAXPAVCDialog@@PAVCRect@@@Z
?GetThisMessageMap@CDlgBaseWnd@@KGPBUAFX_MSGMAP@@XZ
?ReturnSystweakRegKey@@YAXAAV?$CStringT@_WV?$StrTraitMFC_DLL@_WV?$ChTraitsCRT@_W@ATL@@@@@ATL@@@Z
?STLoadStringFromMainINI@@YA?AV?$CStringT@_WV?$StrTraitMFC_DLL@_WV?$ChTraitsCRT@_W@ATL@@@@@ATL@@PB_W0@Z
?AddRemoveItemToStringArray@CSystweakApp@@QAEXAAVCStringArray@@V?$CStringT@_WV?$StrTraitMFC_DLL@_WV?$ChTraitsCRT@_W@ATL@@@@@ATL@@_N@Z
?GetAppPath@@YAPB_WPAUHINSTANCE__@@AAV?$CStringT@_WV?$StrTraitMFC_DLL@_WV?$ChTraitsCRT@_W@ATL@@@@@ATL@@@Z
?ShellExecuteW@CDlgBaseWnd@@SAPAUHINSTANCE__@@PAUHWND__@@PB_W111H@Z
?ShowShutDownDlg@CSystweakApp@@SAXPAVCDialog@@V?$CStringT@_WV?$StrTraitMFC_DLL@_WV?$ChTraitsCRT@_W@ATL@@@@@ATL@@PAVCRect@@_N@Z
?CreateRestorePoint@CSystweakApp@@QAE_NV?$CStringT@_WV?$StrTraitMFC_DLL@_WV?$ChTraitsCRT@_W@ATL@@@@@ATL@@@Z
?GetAppProgramName@CSystweakApp@@SA?AV?$CStringT@_WV?$StrTraitMFC_DLL@_WV?$ChTraitsCRT@_W@ATL@@@@@ATL@@XZ
?ClearSpcExeNameArray@CSystweakApp@@QAEXXZ
?GetThisMessageMap@CDlgBaseChildPopUpWndBase@@KGPBUAFX_MSGMAP@@XZ
?m_strRegID@CSystweakApp@@2V?$CStringT@_WV?$StrTraitMFC_DLL@_WV?$ChTraitsCRT@_W@ATL@@@@@ATL@@A
?SetAnimationIcons@CXTTrayIcon@@UAE_NPBIHPBV?$CStringT@_WV?$StrTraitMFC_DLL@_WV?$ChTraitsCRT@_W@ATL@@@@@ATL@@@Z
?strDemoCommandlineArgument@CDlgMainWnd@@2V?$CStringT@_WV?$StrTraitMFC_DLL@_WV?$ChTraitsCRT@_W@ATL@@@@@ATL@@A
?OnDllMenuReportFeedback@CDlgMainWnd@@QAEXXZ
?GetThisMessageMap@CDlgMainWnd@@KGPBUAFX_MSGMAP@@XZ
?GetSystemDrive@@YA?AV?$CStringT@_WV?$StrTraitMFC_DLL@_WV?$ChTraitsCRT@_W@ATL@@@@@ATL@@XZ
?LoadStringW@CSystweakApp@@QAE?AV?$CStringT@_WV?$StrTraitMFC_DLL@_WV?$ChTraitsCRT@_W@ATL@@@@@ATL@@I@Z
?CheckKeyStatus@CDlgMainWnd@@SAXXZ
?StartCheckForUpdateWithCmdArgs@CDlgBaseWnd@@SAHV?$CStringT@_WV?$StrTraitMFC_DLL@_WV?$ChTraitsCRT@_W@ATL@@@@@ATL@@@Z
?GetSupportPhoneNumber@@YA?AV?$CStringT@_WV?$StrTraitMFC_DLL@_WV?$ChTraitsCRT@_W@ATL@@@@@ATL@@XZ
?GetSupportPhoneNumberFR@@YA?AV?$CStringT@_WV?$StrTraitMFC_DLL@_WV?$ChTraitsCRT@_W@ATL@@@@@ATL@@XZ
?GetMessageMap@CXTTrayIcon@@MBEPBUAFX_MSGMAP@@XZ
?SetAnimationIcons@CXTTrayIcon@@UAEXPBIPBV?$CStringT@_WV?$StrTraitMFC_DLL@_WV?$ChTraitsCRT@_W@ATL@@@@@ATL@@H@Z
?GetProduct_ABBERIVATED_NAME@@YA?AV?$CStringT@_WV?$StrTraitMFC_DLL@_WV?$ChTraitsCRT@_W@ATL@@@@@ATL@@XZ
?GetThisMessageMap@CSystweakApp@@KGPBUAFX_MSGMAP@@XZ
?m_ExeName@CDlgMainWnd@@2V?$CStringT@_WV?$StrTraitMFC_DLL@_WV?$ChTraitsCRT@_W@ATL@@@@@ATL@@A
?m_ProgramName@CSystweakApp@@1V?$CStringT@_WV?$StrTraitMFC_DLL@_WV?$ChTraitsCRT@_W@ATL@@@@@ATL@@A
?ShellExecuteW@CSystweakApp@@SAPAUHINSTANCE__@@PAUHWND__@@PB_W111H@Z
?GetAppExePath@CSystweakApp@@SA?AV?$CStringT@_WV?$StrTraitMFC_DLL@_WV?$ChTraitsCRT@_W@ATL@@@@@ATL@@XZ
?STGetPublishedURL@@YA_NAAV?$CStringT@_WV?$StrTraitMFC_DLL@_WV?$ChTraitsCRT@_W@ATL@@@@@ATL@@V12@@Z
?RegWriteStringInRegistry@@YA_NPAUHKEY__@@PB_W11@Z
?STGetExecutablePath@@YAHAAV?$CStringT@_WV?$StrTraitMFC_DLL@_WV?$ChTraitsCRT@_W@ATL@@@@@ATL@@@Z
?copy_CString_to_TCHAR@@YAXV?$CStringT@_WV?$StrTraitMFC_DLL@_WV?$ChTraitsCRT@_W@ATL@@@@@ATL@@AAPA_W@Z
ASOHelper.dll
mfc90u.dll
_amsg_exit
_wcmdln
MSVCR90.dll
_crt_debugger_hook
KERNEL32.dll
GetAsyncKeyState
ExitWindowsEx
USER32.dll
GDI32.dll
RegCreateKeyExW
RegCloseKey
RegOpenKeyW
ADVAPI32.dll
ShellExecuteExW
ShellExecuteW
SHELL32.dll
COMCTL32.dll
SHDeleteKeyW
SHLWAPI.dll
ole32.dll
OLEAUT32.dll
gdiplus.dll
MSVCP90.dll
RPCRT4.dll
GetProcessHeap
.?AVCCmdTarget@@
.PAVCException@@
.?AVCWebPage@@
<!--The ID below indicates application support for Windows Vista -->
<supportedOS Id="{e2011457-1546-43c5-a5fe-008deee3d3f0}"/><!--The ID below indicates application support for Windows 7 -->
<supportedOS Id="{35138b9a-5d96-4fbd-8e2d-a2440225f93a}"/><requestedExecutionLevel level="asInvoker" uiAccess="false"></requestedExecutionLevel>
<assemblyIdentity type="win32" name="Microsoft.VC90.CRT" version="9.0.30729.1" processorArchitecture="x86"></assemblyIdentity>
<assemblyIdentity type="win32" name="Microsoft.VC90.MFC" version="9.0.30729.1" processorArchitecture="x86"></assemblyIdentity>
<assemblyIdentity type="win32" name="Microsoft.Windows.Common-Controls" version="6.0.0.0" processorArchitecture="x86" publicKeyToken="6595b64144ccf1df" language="*"></assemblyIdentity>
&%%! # "
76.15555
---77888
1/*7;8**7
=.-0<<'<
64;*%),/
88/DECJKKJJJIIIHHHHHHHHHIIIIIIIIIIIIIIIJJJJJJIIIIIIIIIIIIIIIKKKKKKKKKKKKKKKKKKKKKKKKKKKKKKKKKKKKKKKKKKJJJKKKKKKLLLLLLLLLKKKKKKKKKKKKLLLLLLKKKKKKLLLLLLLLLMMMLLLLLLLLLLLLLLLMMMMMMMMMMMMMMMMMMMMMMMMNNNPPPPPPPPPPPPPPPPPPPPPPPPQQQQQQRSSHHC
==7KMMKLLJKKIJJGHH?A>99254*31&75,992??<GHHJKKLMMJKKCDB:9376.76.AB>LMMIKKCED;;676,42&42&87.??;GIIKLLMNNHIG<<587.@@<LMMNOOMNNBB>87.87.CC?OPPOPPIJH=<598/CC?MNNNNNNNNMMMMMMMMMMMMNNNNNNNOOLMMIKKDD@>=4:9-86)97*>=3CC=KLKOPPRRRTUUVWWGG@
?>4>>4:9,?>5EE@OPPSSSUVVUVVUUUMMKBB:?>3@?4LLGPQODC;@>5KKFWYYRRPDC<?>4HHCVVVWXXWXXKKG@?5@?5LLGXYYXYYRRPED=@?5KKGXYYWXXIIDA?6JJEXYYKKG@?5?>5@?5@?5@?5@?5@?5@?5@?5JJEWXXVWWQSSHIEA@6<:-:8 <;/@@8JJGRSSUVVUVVHHD>=3AA9MNLTTTRRRRRRQQQQQQOOONNNNNNNNNNNNNNNLLLLLLLLLKKKKKKKKKKKKJJJJJJJJJIIIIIIIIIIIIIIIIIIIIIHHHHHHHHHGGGGGGGGGFFFFFFFFFFFFEEEEEEEEEDDDDDDDDDDDDDDDCCCCCCCCCCCCCCCCCCBBBBBBBBBBBBAAA@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@??????????????????????????????@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@AAABBBBBBBBBBBBBBBBBBBBBBBBBBBCCCCCCCCCCCCCCCDDDDDDDDDDDDEEEEEEEEEEEEFFFFFFFFFFFFGGGGGGGGGGGGHHHHHHHHHHHHHHHHHHHHHHHHHHHHHHIIIIIIIIIIIIIIIIIIIIIJJJJJJJJJJJJJJJJJJJJJJJJJJJJJJJJJJJJJJJJJJJJJJJJJJJJJJJJJIIIIIIIIIIIIIIIIIIIIIHHHHHHHHHHHHHHHHHHGGGGGGGGGGGGGGGGGGGGGEEEEEEEEEDDDDDDDDDDDDDDDDDDDDDDDDCCCCCCCCCCCCBBBBBBBBBBBBBBBBBBBBBAAA???????????????>>>>>>>>>>>>>>>>>>===========================================================================?????????EEEPPP
jh_@?8OQQRSSHIG>>6
87.PRRKLKMKA
hg^JKHPQQOOOMMMNNNOOORSSHHD
KKEY[[WYYVXXSTRFF>
<:.WZYAA6
98.NPPMNNLMMLMMLLLKKKKKKKKKKKKLLLLMMLMMLMMLMMMNNMNNMNNNOOMNNMNNMNNMNNMNNOPP;:1
gf]HIFNOOMMMLLLLLLLLLMMMMMMMMMMMMLLLLLLLLLNNNNNNNNNNNNPPPPPPPPPPPPPPPPPPPPPPPPPPPPPPPPPPPPOOOOOOOOOOOOOOOOOOOOOOOOPPPQQQRSSHIDDB6
Y.vQ/
}%cHAAACCCAAA>>>;;;777KKK
yyy---999^^^:::...FFF
%dIAAADDDAAA>>>999fff
%dJAAADDDBBB>>>:::ggg
%dJAAADDDCCC@@@===999
...zzz
JJJRRR???????????????>>>>>>>>>>>>>>>>>>=========??????????????????????????????@@@@@@@@@@@@@@@@@@@@@AAAAAAAAAAAABBBBBBBBBBBBBBBBBBCCCCCCCCCDDDDDDDDDDDDDDDEEEEEECCC???555 .AGxCM
]]]FFFDDDAAA<<<JJJ...FFFfff
999<<<888]]]
1/.HB>QMJ r
$$$--,=;9
zwiii```UUUJJJBBB>>>GA>.Tm
|#!6-]\[
xB20.yyy
h*20.yyy
$!;.lkj
$!;.VUT
%SwJuxt
={.VsNuwu4@4,8* :():&&7"#5
/-;*-;*-;*-=*.@
TyGTxFUzG[~NMs?=g.=g.=g.=g.=g.=g.=g.=g.=g.=g.=g.=g.=g.=g.=g.=g.=g.=g.=g.=g.=g.=g.=g.=g.=g.=g.=g.=g.=g.=g.=g.=g.=g.=g.=g.=g.=g.=g.=g.=g.=g.=g.=g.=g.=g.=g.=g.=g.=g.=g.=g.=g.=g.=g.=g.=g.=g.=g.=g.=g.=g.=g.=g.=g.=g.=g.=g.=g.=g.=g.=g.=g.=g.=g.=g.=g.=g.=g.=g.=g.=g.=g.=g.=g.=g.=g.=g.=g.=g.=g.=g.=g.=g.=g.=g.=g.=g.=g.=g.=g.=g.=g.=g.=g.=g.=g.=g.=g.=g.=g.=g.=g.=g.=g.=g.=g.=g.=g.=g.=g.=g.=g.=g.=g.=g.=g.=g.=g.=g.=g.=g.=g.=g.=g.=g.=g.=g.=g.=g.=g.=g.=g.=g.=g.=g.=g.=g.=g.=g.=g.=g.=g.=g.=g.=g.=g.=g.=g.=g.=g.=g.=g.=g.=g.=g.=g.=g.=g.=g.=g.=g.=g.=g.=g.=g.=g.=g.=g.=g.=g.=g.=g.=g.=g.=g.=g.=g.=g.=g.=g.=g.=g.=g.=g.=g.=g.=g.=g.=g.=g.=g.=g.=g.=g.=g.=g.=g.=g.=g.=g.=g.=g.=g.=g.=g.=g.=g.=g.=g.=g.=g.=g.=g.=g.=g.=g.=g.=g.=g.=g.=g.=g.=g.=g.=g.=g.=g.=g.=g.=g.=g.=g.=g.=g.=g.=g.=g.=g.=g.=g.=g.PwBh
k[;weB
r@:.ZRA2-$@:.
`.rZ:
m%4U71B71B71B71B71B71B71B71B71B71B71B71B71B71B71B71B60A60A60A60A60A60A60A60A!5l 2
Adobe Photoshop CS4 Windows
2009:07:01 13:19:55
urlTEXT
MsgeTEXT
hXXp://ns.adobe.com/xap/1.0/
" id="W5M0MpCehiHzreSzNTczkc9d"?> <x:xmpmeta xmlns:x="adobe:ns:meta/" x:xmptk="Adobe XMP Core 4.2.2-c063 53.352624, 2008/07/30-18:12:18 "> <rdf:RDF xmlns:rdf="hXXp://VVV.w3.org/1999/02/22-rdf-syntax-ns#"> <rdf:Description rdf:about="" xmlns:xmp="hXXp://ns.adobe.com/xap/1.0/" xmlns:xmpMM="hXXp://ns.adobe.com/xap/1.0/mm/" xmlns:stEvt="hXXp://ns.adobe.com/xap/1.0/sType/ResourceEvent#" xmlns:dc="hXXp://purl.org/dc/elements/1.1/" xmlns:photoshop="hXXp://ns.adobe.com/photoshop/1.0/" xmlns:tiff="hXXp://ns.adobe.com/tiff/1.0/" xmlns:exif="hXXp://ns.adobe.com/exif/1.0/" xmp:CreatorTool="Adobe Photoshop CS4 Windows" xmp:MetadataDate="2009-07-01T13:19:55 05:30" xmp:ModifyDate="2009-07-01T13:19:55 05:30" xmp:CreateDate="2009-07-01T13:19:55 05:30" xmpMM:InstanceID="xmp.iid:BF060A6A1266DE11A7F6CCFE2D698220" xmpMM:DocumentID="xmp.did:BE060A6A1266DE11A7F6CCFE2D698220" xmpMM:OriginalDocumentID="xmp.did:BE060A6A1266DE11A7F6CCFE2D698220" dc:format="image/jpeg" photoshop:ColorMode="3" photoshop:ICCProfile="sRGB IEC61966-2.1" tiff:Orientation="1" tiff:XResolution="720090/10000" tiff:YResolution="720090/10000" tiff:ResolutionUnit="2" tiff:NativeDigest="256,257,258,259,262,274,277,284,530,531,282,283,296,301,318,319,529,532,306,270,271,272,305,315,33432;4159B9843A7FCCCC8A1FA2D248110B7F" exif:PixelXDimension="60" exif:PixelYDimension="60" exif:ColorSpace="1" exif:NativeDigest="36864,40960,40961,37121,37122,40962,40963,37510,40964,36867,36868,33434,33437,34850,34852,34855,34856,37377,37378,37379,37380,37381,37382,37383,37384,37385,37386,37396,41483,41484,41486,41487,41488,41492,41493,41495,41728,41729,41730,41985,41986,41987,41988,41989,41990,41991,41992,41993,41994,41995,41996,42016,0,2,4,5,6,7,8,9,10,11,12,13,14,15,16,17,18,20,22,23,24,25,26,27,28,30;B22D5A9BC7549E7A8AB88C762634CF58"> <xmpMM:History> <rdf:Seq> <rdf:li stEvt:action="created" stEvt:instanceID="xmp.iid:BE060A6A1266DE11A7F6CCFE2D698220" stEvt:when="2009-07-01T13:19:55 05:30" stEvt:softwareAgent="Adobe Photoshop CS4 Windows"/> <rdf:li stEvt:action="saved" stEvt:instanceID="xmp.iid:BF060A6A1266DE11A7F6CCFE2D698220" stEvt:when="2009-07-01T13:19:55 05:30" stEvt:softwareAgent="Adobe Photoshop CS4 Windows" stEvt:changed="/"/> </rdf:Seq> </xmpMM:History> </rdf:Description> </rdf:RDF> </x:xmpmeta> <?xpacket end="w"?>
IEC hXXp://VVV.iec.ch
.IEC 61966-2.1 Default RGB colour space - sRGB
CRT curv
2009:08:30 15:59:08
webShiftPercentlong
}hXXp://ns.adobe.com/xap/1.0/
" id="W5M0MpCehiHzreSzNTczkc9d"?> <x:xmpmeta xmlns:x="adobe:ns:meta/" x:xmptk="Adobe XMP Core 4.2.2-c063 53.352624, 2008/07/30-18:12:18 "> <rdf:RDF xmlns:rdf="hXXp://VVV.w3.org/1999/02/22-rdf-syntax-ns#"> <rdf:Description rdf:about="" xmlns:xmp="hXXp://ns.adobe.com/xap/1.0/" xmlns:xmpMM="hXXp://ns.adobe.com/xap/1.0/mm/" xmlns:stEvt="hXXp://ns.adobe.com/xap/1.0/sType/ResourceEvent#" xmlns:dc="hXXp://purl.org/dc/elements/1.1/" xmlns:photoshop="hXXp://ns.adobe.com/photoshop/1.0/" xmlns:tiff="hXXp://ns.adobe.com/tiff/1.0/" xmlns:exif="hXXp://ns.adobe.com/exif/1.0/" xmp:CreatorTool="Adobe Photoshop CS4 Windows" xmp:MetadataDate="2009-08-30T15:59:08 05:30" xmp:ModifyDate="2009-08-30T15:59:08 05:30" xmp:CreateDate="2009-07-01T13:19:55 05:30" xmpMM:InstanceID="xmp.iid:EF74C2F53795DE119EF89106E52B7296" xmpMM:DocumentID="xmp.did:BE060A6A1266DE11A7F6CCFE2D698220" xmpMM:OriginalDocumentID="xmp.did:BE060A6A1266DE11A7F6CCFE2D698220" dc:format="image/jpeg" photoshop:ColorMode="3" photoshop:ICCProfile="sRGB IEC61966-2.1" tiff:Orientation="1" tiff:XResolution="720090/10000" tiff:YResolution="720090/10000" tiff:ResolutionUnit="2" tiff:NativeDigest="256,257,258,259,262,274,277,284,530,531,282,283,296,301,318,319,529,532,306,270,271,272,305,315,33432;1E352A1B9D195F7E784A795BC7813831" exif:PixelXDimension="60" exif:PixelYDimension="60" exif:ColorSpace="1" exif:NativeDigest="36864,40960,40961,37121,37122,40962,40963,37510,40964,36867,36868,33434,33437,34850,34852,34855,34856,37377,37378,37379,37380,37381,37382,37383,37384,37385,37386,37396,41483,41484,41486,41487,41488,41492,41493,41495,41728,41729,41730,41985,41986,41987,41988,41989,41990,41991,41992,41993,41994,41995,41996,42016,0,2,4,5,6,7,8,9,10,11,12,13,14,15,16,17,18,20,22,23,24,25,26,27,28,30;B22D5A9BC7549E7A8AB88C762634CF58"> <xmpMM:History> <rdf:Seq> <rdf:li stEvt:action="created" stEvt:instanceID="xmp.iid:BE060A6A1266DE11A7F6CCFE2D698220" stEvt:when="2009-07-01T13:19:55 05:30" stEvt:softwareAgent="Adobe Photoshop CS4 Windows"/> <rdf:li stEvt:action="saved" stEvt:instanceID="xmp.iid:BF060A6A1266DE11A7F6CCFE2D698220" stEvt:when="2009-07-01T13:19:55 05:30" stEvt:softwareAgent="Adobe Photoshop CS4 Windows" stEvt:changed="/"/> <rdf:li stEvt:action="saved" stEvt:instanceID="xmp.iid:29DF24771966DE11B579BA6AC5BF8994" stEvt:when="2009-07-01T14:03:34 05:30" stEvt:softwareAgent="Adobe Photoshop CS4 Windows" stEvt:changed="/"/> <rdf:li stEvt:action="saved" stEvt:instanceID="xmp.iid:2ADF24771966DE11B579BA6AC5BF8994" stEvt:when="2009-07-01T14:03:34 05:30" stEvt:softwareAgent="Adobe Photoshop CS4 Windows" stEvt:changed="/"/> <rdf:li stEvt:action="saved" stEvt:instanceID="xmp.iid:EF74C2F53795DE119EF89106E52B7296" stEvt:when="2009-08-30T15:59:08 05:30" stEvt:softwareAgent="Adobe Photoshop CS4 Windows" stEvt:changed="/"/> </rdf:Seq> </xmpMM:History> </rdf:Description> </rdf:RDF> </x:xmpmeta> <?xpacket end="w"?>
2009:09:03 12:28:05
hXXp://ns.adobe.com/xap/1.0/
" id="W5M0MpCehiHzreSzNTczkc9d"?> <x:xmpmeta xmlns:x="adobe:ns:meta/" x:xmptk="Adobe XMP Core 4.2.2-c063 53.352624, 2008/07/30-18:12:18 "> <rdf:RDF xmlns:rdf="hXXp://VVV.w3.org/1999/02/22-rdf-syntax-ns#"> <rdf:Description rdf:about="" xmlns:xmp="hXXp://ns.adobe.com/xap/1.0/" xmlns:xmpMM="hXXp://ns.adobe.com/xap/1.0/mm/" xmlns:stEvt="hXXp://ns.adobe.com/xap/1.0/sType/ResourceEvent#" xmlns:stRef="hXXp://ns.adobe.com/xap/1.0/sType/ResourceRef#" xmlns:dc="hXXp://purl.org/dc/elements/1.1/" xmlns:photoshop="hXXp://ns.adobe.com/photoshop/1.0/" xmlns:tiff="hXXp://ns.adobe.com/tiff/1.0/" xmlns:exif="hXXp://ns.adobe.com/exif/1.0/" xmp:CreatorTool="Adobe Photoshop CS4 Windows" xmp:MetadataDate="2009-09-03T12:28:05 05:30" xmp:ModifyDate="2009-09-03T12:28:05 05:30" xmp:CreateDate="2009-07-01T13:19:55 05:30" xmpMM:InstanceID="xmp.iid:F3AE43215798DE118F2AA83EB6DBBBB8" xmpMM:DocumentID="xmp.did:BE060A6A1266DE11A7F6CCFE2D698220" xmpMM:OriginalDocumentID="xmp.did:BE060A6A1266DE11A7F6CCFE2D698220" dc:format="image/jpeg" photoshop:ColorMode="3" photoshop:ICCProfile="sRGB IEC61966-2.1" tiff:Orientation="1" tiff:XResolution="720090/10000" tiff:YResolution="720090/10000" tiff:ResolutionUnit="2" tiff:NativeDigest="256,257,258,259,262,274,277,284,530,531,282,283,296,301,318,319,529,532,306,270,271,272,305,315,33432;1A6E16B8D00F38B667BE827E85FE4E06" exif:PixelXDimension="60" exif:PixelYDimension="60" exif:ColorSpace="1" exif:NativeDigest="36864,40960,40961,37121,37122,40962,40963,37510,40964,36867,36868,33434,33437,34850,34852,34855,34856,37377,37378,37379,37380,37381,37382,37383,37384,37385,37386,37396,41483,41484,41486,41487,41488,41492,41493,41495,41728,41729,41730,41985,41986,41987,41988,41989,41990,41991,41992,41993,41994,41995,41996,42016,0,2,4,5,6,7,8,9,10,11,12,13,14,15,16,17,18,20,22,23,24,25,26,27,28,30;B22D5A9BC7549E7A8AB88C762634CF58"> <xmpMM:History> <rdf:Seq> <rdf:li stEvt:action="created" stEvt:instanceID="xmp.iid:BE060A6A1266DE11A7F6CCFE2D698220" stEvt:when="2009-07-01T13:19:55 05:30" stEvt:softwareAgent="Adobe Photoshop CS4 Windows"/> <rdf:li stEvt:action="saved" stEvt:instanceID="xmp.iid:BF060A6A1266DE11A7F6CCFE2D698220" stEvt:when="2009-07-01T13:19:55 05:30" stEvt:softwareAgent="Adobe Photoshop CS4 Windows" stEvt:changed="/"/> <rdf:li stEvt:action="saved" stEvt:instanceID="xmp.iid:8AF66B0A1E66DE11B579BA6AC5BF8994" stEvt:when="2009-07-01T14:35:56 05:30" stEvt:softwareAgent="Adobe Photoshop CS4 Windows" stEvt:changed="/"/> <rdf:li stEvt:action="converted" stEvt:parameters="from image/jpeg to application/vnd.adobe.photoshop"/> <rdf:li stEvt:action="derived" stEvt:parameters="converted from image/jpeg to application/vnd.adobe.photoshop"/> <rdf:li stEvt:action="saved" stEvt:instanceID="xmp.iid:8BF66B0A1E66DE11B579BA6AC5BF8994" stEvt:when="2009-07-01T14:35:56 05:30" stEvt:softwareAgent="Adobe Photoshop CS4 Windows" stEvt:changed="/"/> <rdf:li stEvt:action="saved" stEvt:instanceID="xmp.iid:F2B2CD74F596DE11BBDAB5D8D180CF22" stEvt:when="2009-09-01T19:14:36 05:30" stEvt:softwareAgent="Adobe Photoshop CS4 Windows" stEvt:changed="/"/> <rdf:li stEvt:action="saved" stEvt:instanceID="xmp.iid:3CFD5F3A5298DE118F2AA83EB6DBBBB8" stEvt:when="2009-09-03T12:28:05 05:30" stEvt:softwareAgent="Adobe Photoshop CS4 Windows" stEvt:changed="/"/> <rdf:li stEvt:action="converted" stEvt:parameters="from application/vnd.adobe.photoshop to image/jpeg"/> <rdf:li stEvt:action="derived" stEvt:parameters="converted from application/vnd.adobe.photoshop to image/jpeg"/> <rdf:li stEvt:action="saved" stEvt:instanceID="xmp.iid:F3AE43215798DE118F2AA83EB6DBBBB8" stEvt:when="2009-09-03T12:28:05 05:30" stEvt:softwareAgent="Adobe Photoshop CS4 Windows" stEvt:changed="/"/> </rdf:Seq> </xmpMM:History> <xmpMM:DerivedFrom stRef:instanceID="xmp.iid:3CFD5F3A5298DE118F2AA83EB6DBBBB8" stRef:documentID="xmp.did:BE060A6A1266DE11A7F6CCFE2D698220" stRef:originalDocumentID="xmp.did:BE060A6A1266DE11A7F6CCFE2D698220"/> </rdf:Description> </rdf:RDF> </x:xmpmeta> <?xpacket end="w"?>
.DdhW
2009:09:03 12:24:45
" id="W5M0MpCehiHzreSzNTczkc9d"?> <x:xmpmeta xmlns:x="adobe:ns:meta/" x:xmptk="Adobe XMP Core 4.2.2-c063 53.352624, 2008/07/30-18:12:18 "> <rdf:RDF xmlns:rdf="hXXp://VVV.w3.org/1999/02/22-rdf-syntax-ns#"> <rdf:Description rdf:about="" xmlns:xmp="hXXp://ns.adobe.com/xap/1.0/" xmlns:xmpMM="hXXp://ns.adobe.com/xap/1.0/mm/" xmlns:stEvt="hXXp://ns.adobe.com/xap/1.0/sType/ResourceEvent#" xmlns:stRef="hXXp://ns.adobe.com/xap/1.0/sType/ResourceRef#" xmlns:dc="hXXp://purl.org/dc/elements/1.1/" xmlns:photoshop="hXXp://ns.adobe.com/photoshop/1.0/" xmlns:tiff="hXXp://ns.adobe.com/tiff/1.0/" xmlns:exif="hXXp://ns.adobe.com/exif/1.0/" xmp:CreatorTool="Adobe Photoshop CS4 Windows" xmp:MetadataDate="2009-09-03T12:24:45 05:30" xmp:ModifyDate="2009-09-03T12:24:45 05:30" xmp:CreateDate="2009-07-01T13:19:55 05:30" xmpMM:InstanceID="xmp.iid:3BFD5F3A5298DE118F2AA83EB6DBBBB8" xmpMM:DocumentID="xmp.did:BE060A6A1266DE11A7F6CCFE2D698220" xmpMM:OriginalDocumentID="xmp.did:BE060A6A1266DE11A7F6CCFE2D698220" dc:format="image/jpeg" photoshop:ColorMode="3" photoshop:ICCProfile="sRGB IEC61966-2.1" tiff:Orientation="1" tiff:XResolution="720090/10000" tiff:YResolution="720090/10000" tiff:ResolutionUnit="2" tiff:NativeDigest="256,257,258,259,262,274,277,284,530,531,282,283,296,301,318,319,529,532,306,270,271,272,305,315,33432;BBC914672BE2574ADE497A52436C224D" exif:PixelXDimension="60" exif:PixelYDimension="60" exif:ColorSpace="1" exif:NativeDigest="36864,40960,40961,37121,37122,40962,40963,37510,40964,36867,36868,33434,33437,34850,34852,34855,34856,37377,37378,37379,37380,37381,37382,37383,37384,37385,37386,37396,41483,41484,41486,41487,41488,41492,41493,41495,41728,41729,41730,41985,41986,41987,41988,41989,41990,41991,41992,41993,41994,41995,41996,42016,0,2,4,5,6,7,8,9,10,11,12,13,14,15,16,17,18,20,22,23,24,25,26,27,28,30;B22D5A9BC7549E7A8AB88C762634CF58"> <xmpMM:History> <rdf:Seq> <rdf:li stEvt:action="created" stEvt:instanceID="xmp.iid:BE060A6A1266DE11A7F6CCFE2D698220" stEvt:when="2009-07-01T13:19:55 05:30" stEvt:softwareAgent="Adobe Photoshop CS4 Windows"/> <rdf:li stEvt:action="saved" stEvt:instanceID="xmp.iid:BF060A6A1266DE11A7F6CCFE2D698220" stEvt:when="2009-07-01T13:19:55 05:30" stEvt:softwareAgent="Adobe Photoshop CS4 Windows" stEvt:changed="/"/> <rdf:li stEvt:action="saved" stEvt:instanceID="xmp.iid:8AF66B0A1E66DE11B579BA6AC5BF8994" stEvt:when="2009-07-01T14:35:56 05:30" stEvt:softwareAgent="Adobe Photoshop CS4 Windows" stEvt:changed="/"/> <rdf:li stEvt:action="converted" stEvt:parameters="from image/jpeg to application/vnd.adobe.photoshop"/> <rdf:li stEvt:action="derived" stEvt:parameters="converted from image/jpeg to application/vnd.adobe.photoshop"/> <rdf:li stEvt:action="saved" stEvt:instanceID="xmp.iid:8BF66B0A1E66DE11B579BA6AC5BF8994" stEvt:when="2009-07-01T14:35:56 05:30" stEvt:softwareAgent="Adobe Photoshop CS4 Windows" stEvt:changed="/"/> <rdf:li stEvt:action="saved" stEvt:instanceID="xmp.iid:F2B2CD74F596DE11BBDAB5D8D180CF22" stEvt:when="2009-09-01T19:14:36 05:30" stEvt:softwareAgent="Adobe Photoshop CS4 Windows" stEvt:changed="/"/> <rdf:li stEvt:action="saved" stEvt:instanceID="xmp.iid:3AFD5F3A5298DE118F2AA83EB6DBBBB8" stEvt:when="2009-09-03T12:24:45 05:30" stEvt:softwareAgent="Adobe Photoshop CS4 Windows" stEvt:changed="/"/> <rdf:li stEvt:action="converted" stEvt:parameters="from application/vnd.adobe.photoshop to image/jpeg"/> <rdf:li stEvt:action="derived" stEvt:parameters="converted from application/vnd.adobe.photoshop to image/jpeg"/> <rdf:li stEvt:action="saved" stEvt:instanceID="xmp.iid:3BFD5F3A5298DE118F2AA83EB6DBBBB8" stEvt:when="2009-09-03T12:24:45 05:30" stEvt:softwareAgent="Adobe Photoshop CS4 Windows" stEvt:changed="/"/> </rdf:Seq> </xmpMM:History> <xmpMM:DerivedFrom stRef:instanceID="xmp.iid:3AFD5F3A5298DE118F2AA83EB6DBBBB8" stRef:documentID="xmp.did:BE060A6A1266DE11A7F6CCFE2D698220" stRef:originalDocumentID="xmp.did:BE060A6A1266DE11A7F6CCFE2D698220"/> </rdf:Description> </rdf:RDF> </x:xmpmeta> <?xpacket end="w"?>
2009:09:19 17:14:09
" id="W5M0MpCehiHzreSzNTczkc9d"?> <x:xmpmeta xmlns:x="adobe:ns:meta/" x:xmptk="Adobe XMP Core 4.2.2-c063 53.352624, 2008/07/30-18:12:18 "> <rdf:RDF xmlns:rdf="hXXp://VVV.w3.org/1999/02/22-rdf-syntax-ns#"> <rdf:Description rdf:about="" xmlns:xmp="hXXp://ns.adobe.com/xap/1.0/" xmlns:xmpMM="hXXp://ns.adobe.com/xap/1.0/mm/" xmlns:stEvt="hXXp://ns.adobe.com/xap/1.0/sType/ResourceEvent#" xmlns:dc="hXXp://purl.org/dc/elements/1.1/" xmlns:photoshop="hXXp://ns.adobe.com/photoshop/1.0/" xmlns:tiff="hXXp://ns.adobe.com/tiff/1.0/" xmlns:exif="hXXp://ns.adobe.com/exif/1.0/" xmp:CreatorTool="Adobe Photoshop CS4 Windows" xmp:MetadataDate="2009-09-19T17:14:09 05:30" xmp:ModifyDate="2009-09-19T17:14:09 05:30" xmp:CreateDate="2009-07-01T13:19:55 05:30" xmpMM:InstanceID="xmp.iid:56C60B3911A5DE1198A5E1DCD1622CC2" xmpMM:DocumentID="xmp.did:BE060A6A1266DE11A7F6CCFE2D698220" xmpMM:OriginalDocumentID="xmp.did:BE060A6A1266DE11A7F6CCFE2D698220" dc:format="image/jpeg" photoshop:ColorMode="3" photoshop:ICCProfile="sRGB IEC61966-2.1" tiff:Orientation="1" tiff:XResolution="720090/10000" tiff:YResolution="720090/10000" tiff:ResolutionUnit="2" tiff:NativeDigest="256,257,258,259,262,274,277,284,530,531,282,283,296,301,318,319,529,532,306,270,271,272,305,315,33432;F092497761876CB168D2B7ADABC50F3D" exif:PixelXDimension="60" exif:PixelYDimension="60" exif:ColorSpace="1" exif:NativeDigest="36864,40960,40961,37121,37122,40962,40963,37510,40964,36867,36868,33434,33437,34850,34852,34855,34856,37377,37378,37379,37380,37381,37382,37383,37384,37385,37386,37396,41483,41484,41486,41487,41488,41492,41493,41495,41728,41729,41730,41985,41986,41987,41988,41989,41990,41991,41992,41993,41994,41995,41996,42016,0,2,4,5,6,7,8,9,10,11,12,13,14,15,16,17,18,20,22,23,24,25,26,27,28,30;B22D5A9BC7549E7A8AB88C762634CF58"> <xmpMM:History> <rdf:Seq> <rdf:li stEvt:action="created" stEvt:instanceID="xmp.iid:BE060A6A1266DE11A7F6CCFE2D698220" stEvt:when="2009-07-01T13:19:55 05:30" stEvt:softwareAgent="Adobe Photoshop CS4 Windows"/> <rdf:li stEvt:action="saved" stEvt:instanceID="xmp.iid:BF060A6A1266DE11A7F6CCFE2D698220" stEvt:when="2009-07-01T13:19:55 05:30" stEvt:softwareAgent="Adobe Photoshop CS4 Windows" stEvt:changed="/"/> <rdf:li stEvt:action="saved" stEvt:instanceID="xmp.iid:FD21DFBF1A66DE11B579BA6AC5BF8994" stEvt:when="2009-07-01T14:19:18 05:30" stEvt:softwareAgent="Adobe Photoshop CS4 Windows" stEvt:changed="/"/> <rdf:li stEvt:action="saved" stEvt:instanceID="xmp.iid:CD1447101C66DE11B579BA6AC5BF8994" stEvt:when="2009-07-01T14:19:18 05:30" stEvt:softwareAgent="Adobe Photoshop CS4 Windows" stEvt:changed="/"/> <rdf:li stEvt:action="saved" stEvt:instanceID="xmp.iid:56C60B3911A5DE1198A5E1DCD1622CC2" stEvt:when="2009-09-19T17:14:09 05:30" stEvt:softwareAgent="Adobe Photoshop CS4 Windows" stEvt:changed="/"/> </rdf:Seq> </xmpMM:History> </rdf:Description> </rdf:RDF> </x:xmpmeta> <?xpacket end="w"?>
2009:07:01 14:21:06
" id="W5M0MpCehiHzreSzNTczkc9d"?> <x:xmpmeta xmlns:x="adobe:ns:meta/" x:xmptk="Adobe XMP Core 4.2.2-c063 53.352624, 2008/07/30-18:12:18 "> <rdf:RDF xmlns:rdf="hXXp://VVV.w3.org/1999/02/22-rdf-syntax-ns#"> <rdf:Description rdf:about="" xmlns:xmp="hXXp://ns.adobe.com/xap/1.0/" xmlns:xmpMM="hXXp://ns.adobe.com/xap/1.0/mm/" xmlns:stEvt="hXXp://ns.adobe.com/xap/1.0/sType/ResourceEvent#" xmlns:dc="hXXp://purl.org/dc/elements/1.1/" xmlns:photoshop="hXXp://ns.adobe.com/photoshop/1.0/" xmlns:tiff="hXXp://ns.adobe.com/tiff/1.0/" xmlns:exif="hXXp://ns.adobe.com/exif/1.0/" xmp:CreatorTool="Adobe Photoshop CS4 Windows" xmp:MetadataDate="2009-07-01T14:21:06 05:30" xmp:ModifyDate="2009-07-01T14:21:06 05:30" xmp:CreateDate="2009-07-01T13:19:55 05:30" xmpMM:InstanceID="xmp.iid:D31447101C66DE11B579BA6AC5BF8994" xmpMM:DocumentID="xmp.did:BE060A6A1266DE11A7F6CCFE2D698220" xmpMM:OriginalDocumentID="xmp.did:BE060A6A1266DE11A7F6CCFE2D698220" dc:format="image/jpeg" photoshop:ColorMode="3" photoshop:ICCProfile="sRGB IEC61966-2.1" tiff:Orientation="1" tiff:XResolution="720090/10000" tiff:YResolution="720090/10000" tiff:ResolutionUnit="2" tiff:NativeDigest="256,257,258,259,262,274,277,284,530,531,282,283,296,301,318,319,529,532,306,270,271,272,305,315,33432;6FD4AB00213AFE979E140B72C3CC21AF" exif:PixelXDimension="60" exif:PixelYDimension="60" exif:ColorSpace="1" exif:NativeDigest="36864,40960,40961,37121,37122,40962,40963,37510,40964,36867,36868,33434,33437,34850,34852,34855,34856,37377,37378,37379,37380,37381,37382,37383,37384,37385,37386,37396,41483,41484,41486,41487,41488,41492,41493,41495,41728,41729,41730,41985,41986,41987,41988,41989,41990,41991,41992,41993,41994,41995,41996,42016,0,2,4,5,6,7,8,9,10,11,12,13,14,15,16,17,18,20,22,23,24,25,26,27,28,30;B22D5A9BC7549E7A8AB88C762634CF58"> <xmpMM:History> <rdf:Seq> <rdf:li stEvt:action="created" stEvt:instanceID="xmp.iid:BE060A6A1266DE11A7F6CCFE2D698220" stEvt:when="2009-07-01T13:19:55 05:30" stEvt:softwareAgent="Adobe Photoshop CS4 Windows"/> <rdf:li stEvt:action="saved" stEvt:instanceID="xmp.iid:BF060A6A1266DE11A7F6CCFE2D698220" stEvt:when="2009-07-01T13:19:55 05:30" stEvt:softwareAgent="Adobe Photoshop CS4 Windows" stEvt:changed="/"/> <rdf:li stEvt:action="saved" stEvt:instanceID="xmp.iid:D21447101C66DE11B579BA6AC5BF8994" stEvt:when="2009-07-01T14:21:06 05:30" stEvt:softwareAgent="Adobe Photoshop CS4 Windows" stEvt:changed="/"/> <rdf:li stEvt:action="saved" stEvt:instanceID="xmp.iid:D31447101C66DE11B579BA6AC5BF8994" stEvt:when="2009-07-01T14:21:06 05:30" stEvt:softwareAgent="Adobe Photoshop CS4 Windows" stEvt:changed="/"/> </rdf:Seq> </xmpMM:History> </rdf:Description> </rdf:RDF> </x:xmpmeta> <?xpacket end="w"?>
8,-%xld
/%cV`9
2009:07:01 14:21:37
" id="W5M0MpCehiHzreSzNTczkc9d"?> <x:xmpmeta xmlns:x="adobe:ns:meta/" x:xmptk="Adobe XMP Core 4.2.2-c063 53.352624, 2008/07/30-18:12:18 "> <rdf:RDF xmlns:rdf="hXXp://VVV.w3.org/1999/02/22-rdf-syntax-ns#"> <rdf:Description rdf:about="" xmlns:xmp="hXXp://ns.adobe.com/xap/1.0/" xmlns:xmpMM="hXXp://ns.adobe.com/xap/1.0/mm/" xmlns:stEvt="hXXp://ns.adobe.com/xap/1.0/sType/ResourceEvent#" xmlns:dc="hXXp://purl.org/dc/elements/1.1/" xmlns:photoshop="hXXp://ns.adobe.com/photoshop/1.0/" xmlns:tiff="hXXp://ns.adobe.com/tiff/1.0/" xmlns:exif="hXXp://ns.adobe.com/exif/1.0/" xmp:CreatorTool="Adobe Photoshop CS4 Windows" xmp:MetadataDate="2009-07-01T14:21:37 05:30" xmp:ModifyDate="2009-07-01T14:21:37 05:30" xmp:CreateDate="2009-07-01T13:19:55 05:30" xmpMM:InstanceID="xmp.iid:D51447101C66DE11B579BA6AC5BF8994" xmpMM:DocumentID="xmp.did:BE060A6A1266DE11A7F6CCFE2D698220" xmpMM:OriginalDocumentID="xmp.did:BE060A6A1266DE11A7F6CCFE2D698220" dc:format="image/jpeg" photoshop:ColorMode="3" photoshop:ICCProfile="sRGB IEC61966-2.1" tiff:Orientation="1" tiff:XResolution="720090/10000" tiff:YResolution="720090/10000" tiff:ResolutionUnit="2" tiff:NativeDigest="256,257,258,259,262,274,277,284,530,531,282,283,296,301,318,319,529,532,306,270,271,272,305,315,33432;648CFD385C7F3334BD9E9C11DC8AC9E7" exif:PixelXDimension="60" exif:PixelYDimension="60" exif:ColorSpace="1" exif:NativeDigest="36864,40960,40961,37121,37122,40962,40963,37510,40964,36867,36868,33434,33437,34850,34852,34855,34856,37377,37378,37379,37380,37381,37382,37383,37384,37385,37386,37396,41483,41484,41486,41487,41488,41492,41493,41495,41728,41729,41730,41985,41986,41987,41988,41989,41990,41991,41992,41993,41994,41995,41996,42016,0,2,4,5,6,7,8,9,10,11,12,13,14,15,16,17,18,20,22,23,24,25,26,27,28,30;B22D5A9BC7549E7A8AB88C762634CF58"> <xmpMM:History> <rdf:Seq> <rdf:li stEvt:action="created" stEvt:instanceID="xmp.iid:BE060A6A1266DE11A7F6CCFE2D698220" stEvt:when="2009-07-01T13:19:55 05:30" stEvt:softwareAgent="Adobe Photoshop CS4 Windows"/> <rdf:li stEvt:action="saved" stEvt:instanceID="xmp.iid:BF060A6A1266DE11A7F6CCFE2D698220" stEvt:when="2009-07-01T13:19:55 05:30" stEvt:softwareAgent="Adobe Photoshop CS4 Windows" stEvt:changed="/"/> <rdf:li stEvt:action="saved" stEvt:instanceID="xmp.iid:D41447101C66DE11B579BA6AC5BF8994" stEvt:when="2009-07-01T14:21:37 05:30" stEvt:softwareAgent="Adobe Photoshop CS4 Windows" stEvt:changed="/"/> <rdf:li stEvt:action="saved" stEvt:instanceID="xmp.iid:D51447101C66DE11B579BA6AC5BF8994" stEvt:when="2009-07-01T14:21:37 05:30" stEvt:softwareAgent="Adobe Photoshop CS4 Windows" stEvt:changed="/"/> </rdf:Seq> </xmpMM:History> </rdf:Description> </rdf:RDF> </x:xmpmeta> <?xpacket end="w"?>
0%U}Q_Y
2009:07:01 14:22:44
" id="W5M0MpCehiHzreSzNTczkc9d"?> <x:xmpmeta xmlns:x="adobe:ns:meta/" x:xmptk="Adobe XMP Core 4.2.2-c063 53.352624, 2008/07/30-18:12:18 "> <rdf:RDF xmlns:rdf="hXXp://VVV.w3.org/1999/02/22-rdf-syntax-ns#"> <rdf:Description rdf:about="" xmlns:xmp="hXXp://ns.adobe.com/xap/1.0/" xmlns:xmpMM="hXXp://ns.adobe.com/xap/1.0/mm/" xmlns:stEvt="hXXp://ns.adobe.com/xap/1.0/sType/ResourceEvent#" xmlns:dc="hXXp://purl.org/dc/elements/1.1/" xmlns:photoshop="hXXp://ns.adobe.com/photoshop/1.0/" xmlns:tiff="hXXp://ns.adobe.com/tiff/1.0/" xmlns:exif="hXXp://ns.adobe.com/exif/1.0/" xmp:CreatorTool="Adobe Photoshop CS4 Windows" xmp:MetadataDate="2009-07-01T14:22:44 05:30" xmp:ModifyDate="2009-07-01T14:22:44 05:30" xmp:CreateDate="2009-07-01T13:19:55 05:30" xmpMM:InstanceID="xmp.iid:D71447101C66DE11B579BA6AC5BF8994" xmpMM:DocumentID="xmp.did:BE060A6A1266DE11A7F6CCFE2D698220" xmpMM:OriginalDocumentID="xmp.did:BE060A6A1266DE11A7F6CCFE2D698220" dc:format="image/jpeg" photoshop:ColorMode="3" photoshop:ICCProfile="sRGB IEC61966-2.1" tiff:Orientation="1" tiff:XResolution="720090/10000" tiff:YResolution="720090/10000" tiff:ResolutionUnit="2" tiff:NativeDigest="256,257,258,259,262,274,277,284,530,531,282,283,296,301,318,319,529,532,306,270,271,272,305,315,33432;48BC7ACFF44AB16266584295DDFD6A78" exif:PixelXDimension="60" exif:PixelYDimension="60" exif:ColorSpace="1" exif:NativeDigest="36864,40960,40961,37121,37122,40962,40963,37510,40964,36867,36868,33434,33437,34850,34852,34855,34856,37377,37378,37379,37380,37381,37382,37383,37384,37385,37386,37396,41483,41484,41486,41487,41488,41492,41493,41495,41728,41729,41730,41985,41986,41987,41988,41989,41990,41991,41992,41993,41994,41995,41996,42016,0,2,4,5,6,7,8,9,10,11,12,13,14,15,16,17,18,20,22,23,24,25,26,27,28,30;B22D5A9BC7549E7A8AB88C762634CF58"> <xmpMM:History> <rdf:Seq> <rdf:li stEvt:action="created" stEvt:instanceID="xmp.iid:BE060A6A1266DE11A7F6CCFE2D698220" stEvt:when="2009-07-01T13:19:55 05:30" stEvt:softwareAgent="Adobe Photoshop CS4 Windows"/> <rdf:li stEvt:action="saved" stEvt:instanceID="xmp.iid:BF060A6A1266DE11A7F6CCFE2D698220" stEvt:when="2009-07-01T13:19:55 05:30" stEvt:softwareAgent="Adobe Photoshop CS4 Windows" stEvt:changed="/"/> <rdf:li stEvt:action="saved" stEvt:instanceID="xmp.iid:D61447101C66DE11B579BA6AC5BF8994" stEvt:when="2009-07-01T14:22:44 05:30" stEvt:softwareAgent="Adobe Photoshop CS4 Windows" stEvt:changed="/"/> <rdf:li stEvt:action="saved" stEvt:instanceID="xmp.iid:D71447101C66DE11B579BA6AC5BF8994" stEvt:when="2009-07-01T14:22:44 05:30" stEvt:softwareAgent="Adobe Photoshop CS4 Windows" stEvt:changed="/"/> </rdf:Seq> </xmpMM:History> </rdf:Description> </rdf:RDF> </x:xmpmeta> <?xpacket end="w"?>
2009:07:01 14:23:23
" id="W5M0MpCehiHzreSzNTczkc9d"?> <x:xmpmeta xmlns:x="adobe:ns:meta/" x:xmptk="Adobe XMP Core 4.2.2-c063 53.352624, 2008/07/30-18:12:18 "> <rdf:RDF xmlns:rdf="hXXp://VVV.w3.org/1999/02/22-rdf-syntax-ns#"> <rdf:Description rdf:about="" xmlns:xmp="hXXp://ns.adobe.com/xap/1.0/" xmlns:xmpMM="hXXp://ns.adobe.com/xap/1.0/mm/" xmlns:stEvt="hXXp://ns.adobe.com/xap/1.0/sType/ResourceEvent#" xmlns:dc="hXXp://purl.org/dc/elements/1.1/" xmlns:photoshop="hXXp://ns.adobe.com/photoshop/1.0/" xmlns:tiff="hXXp://ns.adobe.com/tiff/1.0/" xmlns:exif="hXXp://ns.adobe.com/exif/1.0/" xmp:CreatorTool="Adobe Photoshop CS4 Windows" xmp:MetadataDate="2009-07-01T14:23:23 05:30" xmp:ModifyDate="2009-07-01T14:23:23 05:30" xmp:CreateDate="2009-07-01T13:19:55 05:30" xmpMM:InstanceID="xmp.iid:69CFF7A11C66DE11B579BA6AC5BF8994" xmpMM:DocumentID="xmp.did:BE060A6A1266DE11A7F6CCFE2D698220" xmpMM:OriginalDocumentID="xmp.did:BE060A6A1266DE11A7F6CCFE2D698220" dc:format="image/jpeg" photoshop:ColorMode="3" photoshop:ICCProfile="sRGB IEC61966-2.1" tiff:Orientation="1" tiff:XResolution="720090/10000" tiff:YResolution="720090/10000" tiff:ResolutionUnit="2" tiff:NativeDigest="256,257,258,259,262,274,277,284,530,531,282,283,296,301,318,319,529,532,306,270,271,272,305,315,33432;F180FDAEAB3DCF58FA0A00B136B7BAE0" exif:PixelXDimension="60" exif:PixelYDimension="60" exif:ColorSpace="1" exif:NativeDigest="36864,40960,40961,37121,37122,40962,40963,37510,40964,36867,36868,33434,33437,34850,34852,34855,34856,37377,37378,37379,37380,37381,37382,37383,37384,37385,37386,37396,41483,41484,41486,41487,41488,41492,41493,41495,41728,41729,41730,41985,41986,41987,41988,41989,41990,41991,41992,41993,41994,41995,41996,42016,0,2,4,5,6,7,8,9,10,11,12,13,14,15,16,17,18,20,22,23,24,25,26,27,28,30;B22D5A9BC7549E7A8AB88C762634CF58"> <xmpMM:History> <rdf:Seq> <rdf:li stEvt:action="created" stEvt:instanceID="xmp.iid:BE060A6A1266DE11A7F6CCFE2D698220" stEvt:when="2009-07-01T13:19:55 05:30" stEvt:softwareAgent="Adobe Photoshop CS4 Windows"/> <rdf:li stEvt:action="saved" stEvt:instanceID="xmp.iid:BF060A6A1266DE11A7F6CCFE2D698220" stEvt:when="2009-07-01T13:19:55 05:30" stEvt:softwareAgent="Adobe Photoshop CS4 Windows" stEvt:changed="/"/> <rdf:li stEvt:action="saved" stEvt:instanceID="xmp.iid:68CFF7A11C66DE11B579BA6AC5BF8994" stEvt:when="2009-07-01T14:23:23 05:30" stEvt:softwareAgent="Adobe Photoshop CS4 Windows" stEvt:changed="/"/> <rdf:li stEvt:action="saved" stEvt:instanceID="xmp.iid:69CFF7A11C66DE11B579BA6AC5BF8994" stEvt:when="2009-07-01T14:23:23 05:30" stEvt:softwareAgent="Adobe Photoshop CS4 Windows" stEvt:changed="/"/> </rdf:Seq> </xmpMM:History> </rdf:Description> </rdf:RDF> </x:xmpmeta> <?xpacket end="w"?>
2009:07:01 14:24:06
" id="W5M0MpCehiHzreSzNTczkc9d"?> <x:xmpmeta xmlns:x="adobe:ns:meta/" x:xmptk="Adobe XMP Core 4.2.2-c063 53.352624, 2008/07/30-18:12:18 "> <rdf:RDF xmlns:rdf="hXXp://VVV.w3.org/1999/02/22-rdf-syntax-ns#"> <rdf:Description rdf:about="" xmlns:xmp="hXXp://ns.adobe.com/xap/1.0/" xmlns:xmpMM="hXXp://ns.adobe.com/xap/1.0/mm/" xmlns:stEvt="hXXp://ns.adobe.com/xap/1.0/sType/ResourceEvent#" xmlns:dc="hXXp://purl.org/dc/elements/1.1/" xmlns:photoshop="hXXp://ns.adobe.com/photoshop/1.0/" xmlns:tiff="hXXp://ns.adobe.com/tiff/1.0/" xmlns:exif="hXXp://ns.adobe.com/exif/1.0/" xmp:CreatorTool="Adobe Photoshop CS4 Windows" xmp:MetadataDate="2009-07-01T14:24:06 05:30" xmp:ModifyDate="2009-07-01T14:24:06 05:30" xmp:CreateDate="2009-07-01T13:19:55 05:30" xmpMM:InstanceID="xmp.iid:6BCFF7A11C66DE11B579BA6AC5BF8994" xmpMM:DocumentID="xmp.did:BE060A6A1266DE11A7F6CCFE2D698220" xmpMM:OriginalDocumentID="xmp.did:BE060A6A1266DE11A7F6CCFE2D698220" dc:format="image/jpeg" photoshop:ColorMode="3" photoshop:ICCProfile="sRGB IEC61966-2.1" tiff:Orientation="1" tiff:XResolution="720090/10000" tiff:YResolution="720090/10000" tiff:ResolutionUnit="2" tiff:NativeDigest="256,257,258,259,262,274,277,284,530,531,282,283,296,301,318,319,529,532,306,270,271,272,305,315,33432;DE839AA6582AC48B348C3FA5713EA238" exif:PixelXDimension="60" exif:PixelYDimension="60" exif:ColorSpace="1" exif:NativeDigest="36864,40960,40961,37121,37122,40962,40963,37510,40964,36867,36868,33434,33437,34850,34852,34855,34856,37377,37378,37379,37380,37381,37382,37383,37384,37385,37386,37396,41483,41484,41486,41487,41488,41492,41493,41495,41728,41729,41730,41985,41986,41987,41988,41989,41990,41991,41992,41993,41994,41995,41996,42016,0,2,4,5,6,7,8,9,10,11,12,13,14,15,16,17,18,20,22,23,24,25,26,27,28,30;B22D5A9BC7549E7A8AB88C762634CF58"> <xmpMM:History> <rdf:Seq> <rdf:li stEvt:action="created" stEvt:instanceID="xmp.iid:BE060A6A1266DE11A7F6CCFE2D698220" stEvt:when="2009-07-01T13:19:55 05:30" stEvt:softwareAgent="Adobe Photoshop CS4 Windows"/> <rdf:li stEvt:action="saved" stEvt:instanceID="xmp.iid:BF060A6A1266DE11A7F6CCFE2D698220" stEvt:when="2009-07-01T13:19:55 05:30" stEvt:softwareAgent="Adobe Photoshop CS4 Windows" stEvt:changed="/"/> <rdf:li stEvt:action="saved" stEvt:instanceID="xmp.iid:6ACFF7A11C66DE11B579BA6AC5BF8994" stEvt:when="2009-07-01T14:24:06 05:30" stEvt:softwareAgent="Adobe Photoshop CS4 Windows" stEvt:changed="/"/> <rdf:li stEvt:action="saved" stEvt:instanceID="xmp.iid:6BCFF7A11C66DE11B579BA6AC5BF8994" stEvt:when="2009-07-01T14:24:06 05:30" stEvt:softwareAgent="Adobe Photoshop CS4 Windows" stEvt:changed="/"/> </rdf:Seq> </xmpMM:History> </rdf:Description> </rdf:RDF> </x:xmpmeta> <?xpacket end="w"?>
V;!.kd#
.Ft?eD
2009:07:01 14:25:00
" id="W5M0MpCehiHzreSzNTczkc9d"?> <x:xmpmeta xmlns:x="adobe:ns:meta/" x:xmptk="Adobe XMP Core 4.2.2-c063 53.352624, 2008/07/30-18:12:18 "> <rdf:RDF xmlns:rdf="hXXp://VVV.w3.org/1999/02/22-rdf-syntax-ns#"> <rdf:Description rdf:about="" xmlns:xmp="hXXp://ns.adobe.com/xap/1.0/" xmlns:xmpMM="hXXp://ns.adobe.com/xap/1.0/mm/" xmlns:stEvt="hXXp://ns.adobe.com/xap/1.0/sType/ResourceEvent#" xmlns:dc="hXXp://purl.org/dc/elements/1.1/" xmlns:photoshop="hXXp://ns.adobe.com/photoshop/1.0/" xmlns:tiff="hXXp://ns.adobe.com/tiff/1.0/" xmlns:exif="hXXp://ns.adobe.com/exif/1.0/" xmp:CreatorTool="Adobe Photoshop CS4 Windows" xmp:MetadataDate="2009-07-01T14:25 05:30" xmp:ModifyDate="2009-07-01T14:25 05:30" xmp:CreateDate="2009-07-01T13:19:55 05:30" xmpMM:InstanceID="xmp.iid:6DCFF7A11C66DE11B579BA6AC5BF8994" xmpMM:DocumentID="xmp.did:BE060A6A1266DE11A7F6CCFE2D698220" xmpMM:OriginalDocumentID="xmp.did:BE060A6A1266DE11A7F6CCFE2D698220" dc:format="image/jpeg" photoshop:ColorMode="3" photoshop:ICCProfile="sRGB IEC61966-2.1" tiff:Orientation="1" tiff:XResolution="720090/10000" tiff:YResolution="720090/10000" tiff:ResolutionUnit="2" tiff:NativeDigest="256,257,258,259,262,274,277,284,530,531,282,283,296,301,318,319,529,532,306,270,271,272,305,315,33432;ED53615AF3A33A08E8EF7FA1D85DB33D" exif:PixelXDimension="60" exif:PixelYDimension="60" exif:ColorSpace="1" exif:NativeDigest="36864,40960,40961,37121,37122,40962,40963,37510,40964,36867,36868,33434,33437,34850,34852,34855,34856,37377,37378,37379,37380,37381,37382,37383,37384,37385,37386,37396,41483,41484,41486,41487,41488,41492,41493,41495,41728,41729,41730,41985,41986,41987,41988,41989,41990,41991,41992,41993,41994,41995,41996,42016,0,2,4,5,6,7,8,9,10,11,12,13,14,15,16,17,18,20,22,23,24,25,26,27,28,30;B22D5A9BC7549E7A8AB88C762634CF58"> <xmpMM:History> <rdf:Seq> <rdf:li stEvt:action="created" stEvt:instanceID="xmp.iid:BE060A6A1266DE11A7F6CCFE2D698220" stEvt:when="2009-07-01T13:19:55 05:30" stEvt:softwareAgent="Adobe Photoshop CS4 Windows"/> <rdf:li stEvt:action="saved" stEvt:instanceID="xmp.iid:BF060A6A1266DE11A7F6CCFE2D698220" stEvt:when="2009-07-01T13:19:55 05:30" stEvt:softwareAgent="Adobe Photoshop CS4 Windows" stEvt:changed="/"/> <rdf:li stEvt:action="saved" stEvt:instanceID="xmp.iid:6CCFF7A11C66DE11B579BA6AC5BF8994" stEvt:when="2009-07-01T14:25 05:30" stEvt:softwareAgent="Adobe Photoshop CS4 Windows" stEvt:changed="/"/> <rdf:li stEvt:action="saved" stEvt:instanceID="xmp.iid:6DCFF7A11C66DE11B579BA6AC5BF8994" stEvt:when="2009-07-01T14:25 05:30" stEvt:softwareAgent="Adobe Photoshop CS4 Windows" stEvt:changed="/"/> </rdf:Seq> </xmpMM:History> </rdf:Description> </rdf:RDF> </x:xmpmeta> <?xpacket end="w"?>
2009:07:01 14:25:34
" id="W5M0MpCehiHzreSzNTczkc9d"?> <x:xmpmeta xmlns:x="adobe:ns:meta/" x:xmptk="Adobe XMP Core 4.2.2-c063 53.352624, 2008/07/30-18:12:18 "> <rdf:RDF xmlns:rdf="hXXp://VVV.w3.org/1999/02/22-rdf-syntax-ns#"> <rdf:Description rdf:about="" xmlns:xmp="hXXp://ns.adobe.com/xap/1.0/" xmlns:xmpMM="hXXp://ns.adobe.com/xap/1.0/mm/" xmlns:stEvt="hXXp://ns.adobe.com/xap/1.0/sType/ResourceEvent#" xmlns:dc="hXXp://purl.org/dc/elements/1.1/" xmlns:photoshop="hXXp://ns.adobe.com/photoshop/1.0/" xmlns:tiff="hXXp://ns.adobe.com/tiff/1.0/" xmlns:exif="hXXp://ns.adobe.com/exif/1.0/" xmp:CreatorTool="Adobe Photoshop CS4 Windows" xmp:MetadataDate="2009-07-01T14:25:34 05:30" xmp:ModifyDate="2009-07-01T14:25:34 05:30" xmp:CreateDate="2009-07-01T13:19:55 05:30" xmpMM:InstanceID="xmp.iid:6FCFF7A11C66DE11B579BA6AC5BF8994" xmpMM:DocumentID="xmp.did:BE060A6A1266DE11A7F6CCFE2D698220" xmpMM:OriginalDocumentID="xmp.did:BE060A6A1266DE11A7F6CCFE2D698220" dc:format="image/jpeg" photoshop:ColorMode="3" photoshop:ICCProfile="sRGB IEC61966-2.1" tiff:Orientation="1" tiff:XResolution="720090/10000" tiff:YResolution="720090/10000" tiff:ResolutionUnit="2" tiff:NativeDigest="256,257,258,259,262,274,277,284,530,531,282,283,296,301,318,319,529,532,306,270,271,272,305,315,33432;D6E5C12A3508F731E111180440839F5B" exif:PixelXDimension="60" exif:PixelYDimension="60" exif:ColorSpace="1" exif:NativeDigest="36864,40960,40961,37121,37122,40962,40963,37510,40964,36867,36868,33434,33437,34850,34852,34855,34856,37377,37378,37379,37380,37381,37382,37383,37384,37385,37386,37396,41483,41484,41486,41487,41488,41492,41493,41495,41728,41729,41730,41985,41986,41987,41988,41989,41990,41991,41992,41993,41994,41995,41996,42016,0,2,4,5,6,7,8,9,10,11,12,13,14,15,16,17,18,20,22,23,24,25,26,27,28,30;B22D5A9BC7549E7A8AB88C762634CF58"> <xmpMM:History> <rdf:Seq> <rdf:li stEvt:action="created" stEvt:instanceID="xmp.iid:BE060A6A1266DE11A7F6CCFE2D698220" stEvt:when="2009-07-01T13:19:55 05:30" stEvt:softwareAgent="Adobe Photoshop CS4 Windows"/> <rdf:li stEvt:action="saved" stEvt:instanceID="xmp.iid:BF060A6A1266DE11A7F6CCFE2D698220" stEvt:when="2009-07-01T13:19:55 05:30" stEvt:softwareAgent="Adobe Photoshop CS4 Windows" stEvt:changed="/"/> <rdf:li stEvt:action="saved" stEvt:instanceID="xmp.iid:6ECFF7A11C66DE11B579BA6AC5BF8994" stEvt:when="2009-07-01T14:25:34 05:30" stEvt:softwareAgent="Adobe Photoshop CS4 Windows" stEvt:changed="/"/> <rdf:li stEvt:action="saved" stEvt:instanceID="xmp.iid:6FCFF7A11C66DE11B579BA6AC5BF8994" stEvt:when="2009-07-01T14:25:34 05:30" stEvt:softwareAgent="Adobe Photoshop CS4 Windows" stEvt:changed="/"/> </rdf:Seq> </xmpMM:History> </rdf:Description> </rdf:RDF> </x:xmpmeta> <?xpacket end="w"?>
2009:07:01 14:03:52
" id="W5M0MpCehiHzreSzNTczkc9d"?> <x:xmpmeta xmlns:x="adobe:ns:meta/" x:xmptk="Adobe XMP Core 4.2.2-c063 53.352624, 2008/07/30-18:12:18 "> <rdf:RDF xmlns:rdf="hXXp://VVV.w3.org/1999/02/22-rdf-syntax-ns#"> <rdf:Description rdf:about="" xmlns:xmp="hXXp://ns.adobe.com/xap/1.0/" xmlns:xmpMM="hXXp://ns.adobe.com/xap/1.0/mm/" xmlns:stEvt="hXXp://ns.adobe.com/xap/1.0/sType/ResourceEvent#" xmlns:dc="hXXp://purl.org/dc/elements/1.1/" xmlns:photoshop="hXXp://ns.adobe.com/photoshop/1.0/" xmlns:tiff="hXXp://ns.adobe.com/tiff/1.0/" xmlns:exif="hXXp://ns.adobe.com/exif/1.0/" xmp:CreatorTool="Adobe Photoshop CS4 Windows" xmp:MetadataDate="2009-07-01T14:03:52 05:30" xmp:ModifyDate="2009-07-01T14:03:52 05:30" xmp:CreateDate="2009-07-01T13:19:55 05:30" xmpMM:InstanceID="xmp.iid:2CDF24771966DE11B579BA6AC5BF8994" xmpMM:DocumentID="xmp.did:BE060A6A1266DE11A7F6CCFE2D698220" xmpMM:OriginalDocumentID="xmp.did:BE060A6A1266DE11A7F6CCFE2D698220" dc:format="image/jpeg" photoshop:ColorMode="3" photoshop:ICCProfile="sRGB IEC61966-2.1" tiff:Orientation="1" tiff:XResolution="720090/10000" tiff:YResolution="720090/10000" tiff:ResolutionUnit="2" tiff:NativeDigest="256,257,258,259,262,274,277,284,530,531,282,283,296,301,318,319,529,532,306,270,271,272,305,315,33432;85E45F63A5A1F7DAE5D0529DCFC5DBE5" exif:PixelXDimension="60" exif:PixelYDimension="60" exif:ColorSpace="1" exif:NativeDigest="36864,40960,40961,37121,37122,40962,40963,37510,40964,36867,36868,33434,33437,34850,34852,34855,34856,37377,37378,37379,37380,37381,37382,37383,37384,37385,37386,37396,41483,41484,41486,41487,41488,41492,41493,41495,41728,41729,41730,41985,41986,41987,41988,41989,41990,41991,41992,41993,41994,41995,41996,42016,0,2,4,5,6,7,8,9,10,11,12,13,14,15,16,17,18,20,22,23,24,25,26,27,28,30;B22D5A9BC7549E7A8AB88C762634CF58"> <xmpMM:History> <rdf:Seq> <rdf:li stEvt:action="created" stEvt:instanceID="xmp.iid:BE060A6A1266DE11A7F6CCFE2D698220" stEvt:when="2009-07-01T13:19:55 05:30" stEvt:softwareAgent="Adobe Photoshop CS4 Windows"/> <rdf:li stEvt:action="saved" stEvt:instanceID="xmp.iid:BF060A6A1266DE11A7F6CCFE2D698220" stEvt:when="2009-07-01T13:19:55 05:30" stEvt:softwareAgent="Adobe Photoshop CS4 Windows" stEvt:changed="/"/> <rdf:li stEvt:action="saved" stEvt:instanceID="xmp.iid:2BDF24771966DE11B579BA6AC5BF8994" stEvt:when="2009-07-01T14:03:52 05:30" stEvt:softwareAgent="Adobe Photoshop CS4 Windows" stEvt:changed="/"/> <rdf:li stEvt:action="saved" stEvt:instanceID="xmp.iid:2CDF24771966DE11B579BA6AC5BF8994" stEvt:when="2009-07-01T14:03:52 05:30" stEvt:softwareAgent="Adobe Photoshop CS4 Windows" stEvt:changed="/"/> </rdf:Seq> </xmpMM:History> </rdf:Description> </rdf:RDF> </x:xmpmeta> <?xpacket end="w"?>
A.VcK
2009:07:01 14:27:23
" id="W5M0MpCehiHzreSzNTczkc9d"?> <x:xmpmeta xmlns:x="adobe:ns:meta/" x:xmptk="Adobe XMP Core 4.2.2-c063 53.352624, 2008/07/30-18:12:18 "> <rdf:RDF xmlns:rdf="hXXp://VVV.w3.org/1999/02/22-rdf-syntax-ns#"> <rdf:Description rdf:about="" xmlns:xmp="hXXp://ns.adobe.com/xap/1.0/" xmlns:xmpMM="hXXp://ns.adobe.com/xap/1.0/mm/" xmlns:stEvt="hXXp://ns.adobe.com/xap/1.0/sType/ResourceEvent#" xmlns:dc="hXXp://purl.org/dc/elements/1.1/" xmlns:photoshop="hXXp://ns.adobe.com/photoshop/1.0/" xmlns:tiff="hXXp://ns.adobe.com/tiff/1.0/" xmlns:exif="hXXp://ns.adobe.com/exif/1.0/" xmp:CreatorTool="Adobe Photoshop CS4 Windows" xmp:MetadataDate="2009-07-01T14:27:23 05:30" xmp:ModifyDate="2009-07-01T14:27:23 05:30" xmp:CreateDate="2009-07-01T13:19:55 05:30" xmpMM:InstanceID="xmp.iid:71CFF7A11C66DE11B579BA6AC5BF8994" xmpMM:DocumentID="xmp.did:BE060A6A1266DE11A7F6CCFE2D698220" xmpMM:OriginalDocumentID="xmp.did:BE060A6A1266DE11A7F6CCFE2D698220" dc:format="image/jpeg" photoshop:ColorMode="3" photoshop:ICCProfile="sRGB IEC61966-2.1" tiff:Orientation="1" tiff:XResolution="720090/10000" tiff:YResolution="720090/10000" tiff:ResolutionUnit="2" tiff:NativeDigest="256,257,258,259,262,274,277,284,530,531,282,283,296,301,318,319,529,532,306,270,271,272,305,315,33432;6B7B19E8C3F17CB160FA88CDDD9253AB" exif:PixelXDimension="60" exif:PixelYDimension="60" exif:ColorSpace="1" exif:NativeDigest="36864,40960,40961,37121,37122,40962,40963,37510,40964,36867,36868,33434,33437,34850,34852,34855,34856,37377,37378,37379,37380,37381,37382,37383,37384,37385,37386,37396,41483,41484,41486,41487,41488,41492,41493,41495,41728,41729,41730,41985,41986,41987,41988,41989,41990,41991,41992,41993,41994,41995,41996,42016,0,2,4,5,6,7,8,9,10,11,12,13,14,15,16,17,18,20,22,23,24,25,26,27,28,30;B22D5A9BC7549E7A8AB88C762634CF58"> <xmpMM:History> <rdf:Seq> <rdf:li stEvt:action="created" stEvt:instanceID="xmp.iid:BE060A6A1266DE11A7F6CCFE2D698220" stEvt:when="2009-07-01T13:19:55 05:30" stEvt:softwareAgent="Adobe Photoshop CS4 Windows"/> <rdf:li stEvt:action="saved" stEvt:instanceID="xmp.iid:BF060A6A1266DE11A7F6CCFE2D698220" stEvt:when="2009-07-01T13:19:55 05:30" stEvt:softwareAgent="Adobe Photoshop CS4 Windows" stEvt:changed="/"/> <rdf:li stEvt:action="saved" stEvt:instanceID="xmp.iid:70CFF7A11C66DE11B579BA6AC5BF8994" stEvt:when="2009-07-01T14:27:23 05:30" stEvt:softwareAgent="Adobe Photoshop CS4 Windows" stEvt:changed="/"/> <rdf:li stEvt:action="saved" stEvt:instanceID="xmp.iid:71CFF7A11C66DE11B579BA6AC5BF8994" stEvt:when="2009-07-01T14:27:23 05:30" stEvt:softwareAgent="Adobe Photoshop CS4 Windows" stEvt:changed="/"/> </rdf:Seq> </xmpMM:History> </rdf:Description> </rdf:RDF> </x:xmpmeta> <?xpacket end="w"?>
zjS%dq
2009:07:01 14:29:45
" id="W5M0MpCehiHzreSzNTczkc9d"?> <x:xmpmeta xmlns:x="adobe:ns:meta/" x:xmptk="Adobe XMP Core 4.2.2-c063 53.352624, 2008/07/30-18:12:18 "> <rdf:RDF xmlns:rdf="hXXp://VVV.w3.org/1999/02/22-rdf-syntax-ns#"> <rdf:Description rdf:about="" xmlns:xmp="hXXp://ns.adobe.com/xap/1.0/" xmlns:xmpMM="hXXp://ns.adobe.com/xap/1.0/mm/" xmlns:stEvt="hXXp://ns.adobe.com/xap/1.0/sType/ResourceEvent#" xmlns:dc="hXXp://purl.org/dc/elements/1.1/" xmlns:photoshop="hXXp://ns.adobe.com/photoshop/1.0/" xmlns:tiff="hXXp://ns.adobe.com/tiff/1.0/" xmlns:exif="hXXp://ns.adobe.com/exif/1.0/" xmp:CreatorTool="Adobe Photoshop CS4 Windows" xmp:MetadataDate="2009-07-01T14:29:45 05:30" xmp:ModifyDate="2009-07-01T14:29:45 05:30" xmp:CreateDate="2009-07-01T13:19:55 05:30" xmpMM:InstanceID="xmp.iid:E7C0285F1D66DE11B579BA6AC5BF8994" xmpMM:DocumentID="xmp.did:BE060A6A1266DE11A7F6CCFE2D698220" xmpMM:OriginalDocumentID="xmp.did:BE060A6A1266DE11A7F6CCFE2D698220" dc:format="image/jpeg" photoshop:ColorMode="3" photoshop:ICCProfile="sRGB IEC61966-2.1" tiff:Orientation="1" tiff:XResolution="720090/10000" tiff:YResolution="720090/10000" tiff:ResolutionUnit="2" tiff:NativeDigest="256,257,258,259,262,274,277,284,530,531,282,283,296,301,318,319,529,532,306,270,271,272,305,315,33432;C2E8259CFC99E471915A66853754885E" exif:PixelXDimension="60" exif:PixelYDimension="60" exif:ColorSpace="1" exif:NativeDigest="36864,40960,40961,37121,37122,40962,40963,37510,40964,36867,36868,33434,33437,34850,34852,34855,34856,37377,37378,37379,37380,37381,37382,37383,37384,37385,37386,37396,41483,41484,41486,41487,41488,41492,41493,41495,41728,41729,41730,41985,41986,41987,41988,41989,41990,41991,41992,41993,41994,41995,41996,42016,0,2,4,5,6,7,8,9,10,11,12,13,14,15,16,17,18,20,22,23,24,25,26,27,28,30;B22D5A9BC7549E7A8AB88C762634CF58"> <xmpMM:History> <rdf:Seq> <rdf:li stEvt:action="created" stEvt:instanceID="xmp.iid:BE060A6A1266DE11A7F6CCFE2D698220" stEvt:when="2009-07-01T13:19:55 05:30" stEvt:softwareAgent="Adobe Photoshop CS4 Windows"/> <rdf:li stEvt:action="saved" stEvt:instanceID="xmp.iid:BF060A6A1266DE11A7F6CCFE2D698220" stEvt:when="2009-07-01T13:19:55 05:30" stEvt:softwareAgent="Adobe Photoshop CS4 Windows" stEvt:changed="/"/> <rdf:li stEvt:action="saved" stEvt:instanceID="xmp.iid:E6C0285F1D66DE11B579BA6AC5BF8994" stEvt:when="2009-07-01T14:29:45 05:30" stEvt:softwareAgent="Adobe Photoshop CS4 Windows" stEvt:changed="/"/> <rdf:li stEvt:action="saved" stEvt:instanceID="xmp.iid:E7C0285F1D66DE11B579BA6AC5BF8994" stEvt:when="2009-07-01T14:29:45 05:30" stEvt:softwareAgent="Adobe Photoshop CS4 Windows" stEvt:changed="/"/> </rdf:Seq> </xmpMM:History> </rdf:Description> </rdf:RDF> </x:xmpmeta> <?xpacket end="w"?>
2009:07:01 14:02:54
" id="W5M0MpCehiHzreSzNTczkc9d"?> <x:xmpmeta xmlns:x="adobe:ns:meta/" x:xmptk="Adobe XMP Core 4.2.2-c063 53.352624, 2008/07/30-18:12:18 "> <rdf:RDF xmlns:rdf="hXXp://VVV.w3.org/1999/02/22-rdf-syntax-ns#"> <rdf:Description rdf:about="" xmlns:xmp="hXXp://ns.adobe.com/xap/1.0/" xmlns:xmpMM="hXXp://ns.adobe.com/xap/1.0/mm/" xmlns:stEvt="hXXp://ns.adobe.com/xap/1.0/sType/ResourceEvent#" xmlns:dc="hXXp://purl.org/dc/elements/1.1/" xmlns:photoshop="hXXp://ns.adobe.com/photoshop/1.0/" xmlns:tiff="hXXp://ns.adobe.com/tiff/1.0/" xmlns:exif="hXXp://ns.adobe.com/exif/1.0/" xmp:CreatorTool="Adobe Photoshop CS4 Windows" xmp:MetadataDate="2009-07-01T14:02:54 05:30" xmp:ModifyDate="2009-07-01T14:02:54 05:30" xmp:CreateDate="2009-07-01T13:19:55 05:30" xmpMM:InstanceID="xmp.iid:28DF24771966DE11B579BA6AC5BF8994" xmpMM:DocumentID="xmp.did:BE060A6A1266DE11A7F6CCFE2D698220" xmpMM:OriginalDocumentID="xmp.did:BE060A6A1266DE11A7F6CCFE2D698220" dc:format="image/jpeg" photoshop:ColorMode="3" photoshop:ICCProfile="sRGB IEC61966-2.1" tiff:Orientation="1" tiff:XResolution="720090/10000" tiff:YResolution="720090/10000" tiff:ResolutionUnit="2" tiff:NativeDigest="256,257,258,259,262,274,277,284,530,531,282,283,296,301,318,319,529,532,306,270,271,272,305,315,33432;4827CA82EDA50EB04C40C6E7057E8CC2" exif:PixelXDimension="60" exif:PixelYDimension="60" exif:ColorSpace="1" exif:NativeDigest="36864,40960,40961,37121,37122,40962,40963,37510,40964,36867,36868,33434,33437,34850,34852,34855,34856,37377,37378,37379,37380,37381,37382,37383,37384,37385,37386,37396,41483,41484,41486,41487,41488,41492,41493,41495,41728,41729,41730,41985,41986,41987,41988,41989,41990,41991,41992,41993,41994,41995,41996,42016,0,2,4,5,6,7,8,9,10,11,12,13,14,15,16,17,18,20,22,23,24,25,26,27,28,30;B22D5A9BC7549E7A8AB88C762634CF58"> <xmpMM:History> <rdf:Seq> <rdf:li stEvt:action="created" stEvt:instanceID="xmp.iid:BE060A6A1266DE11A7F6CCFE2D698220" stEvt:when="2009-07-01T13:19:55 05:30" stEvt:softwareAgent="Adobe Photoshop CS4 Windows"/> <rdf:li stEvt:action="saved" stEvt:instanceID="xmp.iid:BF060A6A1266DE11A7F6CCFE2D698220" stEvt:when="2009-07-01T13:19:55 05:30" stEvt:softwareAgent="Adobe Photoshop CS4 Windows" stEvt:changed="/"/> <rdf:li stEvt:action="saved" stEvt:instanceID="xmp.iid:27DF24771966DE11B579BA6AC5BF8994" stEvt:when="2009-07-01T14:02:54 05:30" stEvt:softwareAgent="Adobe Photoshop CS4 Windows" stEvt:changed="/"/> <rdf:li stEvt:action="saved" stEvt:instanceID="xmp.iid:28DF24771966DE11B579BA6AC5BF8994" stEvt:when="2009-07-01T14:02:54 05:30" stEvt:softwareAgent="Adobe Photoshop CS4 Windows" stEvt:changed="/"/> </rdf:Seq> </xmpMM:History> </rdf:Description> </rdf:RDF> </x:xmpmeta> <?xpacket end="w"?>
;1.MI<I<I>
2009:07:01 14:30:35
" id="W5M0MpCehiHzreSzNTczkc9d"?> <x:xmpmeta xmlns:x="adobe:ns:meta/" x:xmptk="Adobe XMP Core 4.2.2-c063 53.352624, 2008/07/30-18:12:18 "> <rdf:RDF xmlns:rdf="hXXp://VVV.w3.org/1999/02/22-rdf-syntax-ns#"> <rdf:Description rdf:about="" xmlns:xmp="hXXp://ns.adobe.com/xap/1.0/" xmlns:xmpMM="hXXp://ns.adobe.com/xap/1.0/mm/" xmlns:stEvt="hXXp://ns.adobe.com/xap/1.0/sType/ResourceEvent#" xmlns:dc="hXXp://purl.org/dc/elements/1.1/" xmlns:photoshop="hXXp://ns.adobe.com/photoshop/1.0/" xmlns:tiff="hXXp://ns.adobe.com/tiff/1.0/" xmlns:exif="hXXp://ns.adobe.com/exif/1.0/" xmp:CreatorTool="Adobe Photoshop CS4 Windows" xmp:MetadataDate="2009-07-01T14:30:35 05:30" xmp:ModifyDate="2009-07-01T14:30:35 05:30" xmp:CreateDate="2009-07-01T13:19:55 05:30" xmpMM:InstanceID="xmp.iid:E9C0285F1D66DE11B579BA6AC5BF8994" xmpMM:DocumentID="xmp.did:BE060A6A1266DE11A7F6CCFE2D698220" xmpMM:OriginalDocumentID="xmp.did:BE060A6A1266DE11A7F6CCFE2D698220" dc:format="image/jpeg" photoshop:ColorMode="3" photoshop:ICCProfile="sRGB IEC61966-2.1" tiff:Orientation="1" tiff:XResolution="720090/10000" tiff:YResolution="720090/10000" tiff:ResolutionUnit="2" tiff:NativeDigest="256,257,258,259,262,274,277,284,530,531,282,283,296,301,318,319,529,532,306,270,271,272,305,315,33432;762B82EF91C5A1528FFEBB3D179CE439" exif:PixelXDimension="60" exif:PixelYDimension="60" exif:ColorSpace="1" exif:NativeDigest="36864,40960,40961,37121,37122,40962,40963,37510,40964,36867,36868,33434,33437,34850,34852,34855,34856,37377,37378,37379,37380,37381,37382,37383,37384,37385,37386,37396,41483,41484,41486,41487,41488,41492,41493,41495,41728,41729,41730,41985,41986,41987,41988,41989,41990,41991,41992,41993,41994,41995,41996,42016,0,2,4,5,6,7,8,9,10,11,12,13,14,15,16,17,18,20,22,23,24,25,26,27,28,30;B22D5A9BC7549E7A8AB88C762634CF58"> <xmpMM:History> <rdf:Seq> <rdf:li stEvt:action="created" stEvt:instanceID="xmp.iid:BE060A6A1266DE11A7F6CCFE2D698220" stEvt:when="2009-07-01T13:19:55 05:30" stEvt:softwareAgent="Adobe Photoshop CS4 Windows"/> <rdf:li stEvt:action="saved" stEvt:instanceID="xmp.iid:BF060A6A1266DE11A7F6CCFE2D698220" stEvt:when="2009-07-01T13:19:55 05:30" stEvt:softwareAgent="Adobe Photoshop CS4 Windows" stEvt:changed="/"/> <rdf:li stEvt:action="saved" stEvt:instanceID="xmp.iid:E8C0285F1D66DE11B579BA6AC5BF8994" stEvt:when="2009-07-01T14:30:35 05:30" stEvt:softwareAgent="Adobe Photoshop CS4 Windows" stEvt:changed="/"/> <rdf:li stEvt:action="saved" stEvt:instanceID="xmp.iid:E9C0285F1D66DE11B579BA6AC5BF8994" stEvt:when="2009-07-01T14:30:35 05:30" stEvt:softwareAgent="Adobe Photoshop CS4 Windows" stEvt:changed="/"/> </rdf:Seq> </xmpMM:History> </rdf:Description> </rdf:RDF> </x:xmpmeta> <?xpacket end="w"?>
2009:07:01 14:31:18
" id="W5M0MpCehiHzreSzNTczkc9d"?> <x:xmpmeta xmlns:x="adobe:ns:meta/" x:xmptk="Adobe XMP Core 4.2.2-c063 53.352624, 2008/07/30-18:12:18 "> <rdf:RDF xmlns:rdf="hXXp://VVV.w3.org/1999/02/22-rdf-syntax-ns#"> <rdf:Description rdf:about="" xmlns:xmp="hXXp://ns.adobe.com/xap/1.0/" xmlns:xmpMM="hXXp://ns.adobe.com/xap/1.0/mm/" xmlns:stEvt="hXXp://ns.adobe.com/xap/1.0/sType/ResourceEvent#" xmlns:dc="hXXp://purl.org/dc/elements/1.1/" xmlns:photoshop="hXXp://ns.adobe.com/photoshop/1.0/" xmlns:tiff="hXXp://ns.adobe.com/tiff/1.0/" xmlns:exif="hXXp://ns.adobe.com/exif/1.0/" xmp:CreatorTool="Adobe Photoshop CS4 Windows" xmp:MetadataDate="2009-07-01T14:31:18 05:30" xmp:ModifyDate="2009-07-01T14:31:18 05:30" xmp:CreateDate="2009-07-01T13:19:55 05:30" xmpMM:InstanceID="xmp.iid:EBC0285F1D66DE11B579BA6AC5BF8994" xmpMM:DocumentID="xmp.did:BE060A6A1266DE11A7F6CCFE2D698220" xmpMM:OriginalDocumentID="xmp.did:BE060A6A1266DE11A7F6CCFE2D698220" dc:format="image/jpeg" photoshop:ColorMode="3" photoshop:ICCProfile="sRGB IEC61966-2.1" tiff:Orientation="1" tiff:XResolution="720090/10000" tiff:YResolution="720090/10000" tiff:ResolutionUnit="2" tiff:NativeDigest="256,257,258,259,262,274,277,284,530,531,282,283,296,301,318,319,529,532,306,270,271,272,305,315,33432;B52D80A2F07A7F5BF8C2FB3F3EF58848" exif:PixelXDimension="60" exif:PixelYDimension="60" exif:ColorSpace="1" exif:NativeDigest="36864,40960,40961,37121,37122,40962,40963,37510,40964,36867,36868,33434,33437,34850,34852,34855,34856,37377,37378,37379,37380,37381,37382,37383,37384,37385,37386,37396,41483,41484,41486,41487,41488,41492,41493,41495,41728,41729,41730,41985,41986,41987,41988,41989,41990,41991,41992,41993,41994,41995,41996,42016,0,2,4,5,6,7,8,9,10,11,12,13,14,15,16,17,18,20,22,23,24,25,26,27,28,30;B22D5A9BC7549E7A8AB88C762634CF58"> <xmpMM:History> <rdf:Seq> <rdf:li stEvt:action="created" stEvt:instanceID="xmp.iid:BE060A6A1266DE11A7F6CCFE2D698220" stEvt:when="2009-07-01T13:19:55 05:30" stEvt:softwareAgent="Adobe Photoshop CS4 Windows"/> <rdf:li stEvt:action="saved" stEvt:instanceID="xmp.iid:BF060A6A1266DE11A7F6CCFE2D698220" stEvt:when="2009-07-01T13:19:55 05:30" stEvt:softwareAgent="Adobe Photoshop CS4 Windows" stEvt:changed="/"/> <rdf:li stEvt:action="saved" stEvt:instanceID="xmp.iid:EAC0285F1D66DE11B579BA6AC5BF8994" stEvt:when="2009-07-01T14:31:18 05:30" stEvt:softwareAgent="Adobe Photoshop CS4 Windows" stEvt:changed="/"/> <rdf:li stEvt:action="saved" stEvt:instanceID="xmp.iid:EBC0285F1D66DE11B579BA6AC5BF8994" stEvt:when="2009-07-01T14:31:18 05:30" stEvt:softwareAgent="Adobe Photoshop CS4 Windows" stEvt:changed="/"/> </rdf:Seq> </xmpMM:History> </rdf:Description> </rdf:RDF> </x:xmpmeta> <?xpacket end="w"?>
2009:07:01 14:32:09
" id="W5M0MpCehiHzreSzNTczkc9d"?> <x:xmpmeta xmlns:x="adobe:ns:meta/" x:xmptk="Adobe XMP Core 4.2.2-c063 53.352624, 2008/07/30-18:12:18 "> <rdf:RDF xmlns:rdf="hXXp://VVV.w3.org/1999/02/22-rdf-syntax-ns#"> <rdf:Description rdf:about="" xmlns:xmp="hXXp://ns.adobe.com/xap/1.0/" xmlns:xmpMM="hXXp://ns.adobe.com/xap/1.0/mm/" xmlns:stEvt="hXXp://ns.adobe.com/xap/1.0/sType/ResourceEvent#" xmlns:dc="hXXp://purl.org/dc/elements/1.1/" xmlns:photoshop="hXXp://ns.adobe.com/photoshop/1.0/" xmlns:tiff="hXXp://ns.adobe.com/tiff/1.0/" xmlns:exif="hXXp://ns.adobe.com/exif/1.0/" xmp:CreatorTool="Adobe Photoshop CS4 Windows" xmp:MetadataDate="2009-07-01T14:32:09 05:30" xmp:ModifyDate="2009-07-01T14:32:09 05:30" xmp:CreateDate="2009-07-01T13:19:55 05:30" xmpMM:InstanceID="xmp.iid:EDC0285F1D66DE11B579BA6AC5BF8994" xmpMM:DocumentID="xmp.did:BE060A6A1266DE11A7F6CCFE2D698220" xmpMM:OriginalDocumentID="xmp.did:BE060A6A1266DE11A7F6CCFE2D698220" dc:format="image/jpeg" photoshop:ColorMode="3" photoshop:ICCProfile="sRGB IEC61966-2.1" tiff:Orientation="1" tiff:XResolution="720090/10000" tiff:YResolution="720090/10000" tiff:ResolutionUnit="2" tiff:NativeDigest="256,257,258,259,262,274,277,284,530,531,282,283,296,301,318,319,529,532,306,270,271,272,305,315,33432;BAE1A43E0303030F5C1B4E6485E03BAF" exif:PixelXDimension="60" exif:PixelYDimension="60" exif:ColorSpace="1" exif:NativeDigest="36864,40960,40961,37121,37122,40962,40963,37510,40964,36867,36868,33434,33437,34850,34852,34855,34856,37377,37378,37379,37380,37381,37382,37383,37384,37385,37386,37396,41483,41484,41486,41487,41488,41492,41493,41495,41728,41729,41730,41985,41986,41987,41988,41989,41990,41991,41992,41993,41994,41995,41996,42016,0,2,4,5,6,7,8,9,10,11,12,13,14,15,16,17,18,20,22,23,24,25,26,27,28,30;B22D5A9BC7549E7A8AB88C762634CF58"> <xmpMM:History> <rdf:Seq> <rdf:li stEvt:action="created" stEvt:instanceID="xmp.iid:BE060A6A1266DE11A7F6CCFE2D698220" stEvt:when="2009-07-01T13:19:55 05:30" stEvt:softwareAgent="Adobe Photoshop CS4 Windows"/> <rdf:li stEvt:action="saved" stEvt:instanceID="xmp.iid:BF060A6A1266DE11A7F6CCFE2D698220" stEvt:when="2009-07-01T13:19:55 05:30" stEvt:softwareAgent="Adobe Photoshop CS4 Windows" stEvt:changed="/"/> <rdf:li stEvt:action="saved" stEvt:instanceID="xmp.iid:ECC0285F1D66DE11B579BA6AC5BF8994" stEvt:when="2009-07-01T14:32:09 05:30" stEvt:softwareAgent="Adobe Photoshop CS4 Windows" stEvt:changed="/"/> <rdf:li stEvt:action="saved" stEvt:instanceID="xmp.iid:EDC0285F1D66DE11B579BA6AC5BF8994" stEvt:when="2009-07-01T14:32:09 05:30" stEvt:softwareAgent="Adobe Photoshop CS4 Windows" stEvt:changed="/"/> </rdf:Seq> </xmpMM:History> </rdf:Description> </rdf:RDF> </x:xmpmeta> <?xpacket end="w"?>
zf{x.bhnaI!n*2009:07:01 14:32:44
" id="W5M0MpCehiHzreSzNTczkc9d"?> <x:xmpmeta xmlns:x="adobe:ns:meta/" x:xmptk="Adobe XMP Core 4.2.2-c063 53.352624, 2008/07/30-18:12:18 "> <rdf:RDF xmlns:rdf="hXXp://VVV.w3.org/1999/02/22-rdf-syntax-ns#"> <rdf:Description rdf:about="" xmlns:xmp="hXXp://ns.adobe.com/xap/1.0/" xmlns:xmpMM="hXXp://ns.adobe.com/xap/1.0/mm/" xmlns:stEvt="hXXp://ns.adobe.com/xap/1.0/sType/ResourceEvent#" xmlns:dc="hXXp://purl.org/dc/elements/1.1/" xmlns:photoshop="hXXp://ns.adobe.com/photoshop/1.0/" xmlns:tiff="hXXp://ns.adobe.com/tiff/1.0/" xmlns:exif="hXXp://ns.adobe.com/exif/1.0/" xmp:CreatorTool="Adobe Photoshop CS4 Windows" xmp:MetadataDate="2009-07-01T14:32:44 05:30" xmp:ModifyDate="2009-07-01T14:32:44 05:30" xmp:CreateDate="2009-07-01T13:19:55 05:30" xmpMM:InstanceID="xmp.iid:EFC0285F1D66DE11B579BA6AC5BF8994" xmpMM:DocumentID="xmp.did:BE060A6A1266DE11A7F6CCFE2D698220" xmpMM:OriginalDocumentID="xmp.did:BE060A6A1266DE11A7F6CCFE2D698220" dc:format="image/jpeg" photoshop:ColorMode="3" photoshop:ICCProfile="sRGB IEC61966-2.1" tiff:Orientation="1" tiff:XResolution="720090/10000" tiff:YResolution="720090/10000" tiff:ResolutionUnit="2" tiff:NativeDigest="256,257,258,259,262,274,277,284,530,531,282,283,296,301,318,319,529,532,306,270,271,272,305,315,33432;38CF29B73F9A77582E3B16E1596474C5" exif:PixelXDimension="60" exif:PixelYDimension="60" exif:ColorSpace="1" exif:NativeDigest="36864,40960,40961,37121,37122,40962,40963,37510,40964,36867,36868,33434,33437,34850,34852,34855,34856,37377,37378,37379,37380,37381,37382,37383,37384,37385,37386,37396,41483,41484,41486,41487,41488,41492,41493,41495,41728,41729,41730,41985,41986,41987,41988,41989,41990,41991,41992,41993,41994,41995,41996,42016,0,2,4,5,6,7,8,9,10,11,12,13,14,15,16,17,18,20,22,23,24,25,26,27,28,30;B22D5A9BC7549E7A8AB88C762634CF58"> <xmpMM:History> <rdf:Seq> <rdf:li stEvt:action="created" stEvt:instanceID="xmp.iid:BE060A6A1266DE11A7F6CCFE2D698220" stEvt:when="2009-07-01T13:19:55 05:30" stEvt:softwareAgent="Adobe Photoshop CS4 Windows"/> <rdf:li stEvt:action="saved" stEvt:instanceID="xmp.iid:BF060A6A1266DE11A7F6CCFE2D698220" stEvt:when="2009-07-01T13:19:55 05:30" stEvt:softwareAgent="Adobe Photoshop CS4 Windows" stEvt:changed="/"/> <rdf:li stEvt:action="saved" stEvt:instanceID="xmp.iid:EEC0285F1D66DE11B579BA6AC5BF8994" stEvt:when="2009-07-01T14:32:44 05:30" stEvt:softwareAgent="Adobe Photoshop CS4 Windows" stEvt:changed="/"/> <rdf:li stEvt:action="saved" stEvt:instanceID="xmp.iid:EFC0285F1D66DE11B579BA6AC5BF8994" stEvt:when="2009-07-01T14:32:44 05:30" stEvt:softwareAgent="Adobe Photoshop CS4 Windows" stEvt:changed="/"/> </rdf:Seq> </xmpMM:History> </rdf:Description> </rdf:RDF> </x:xmpmeta> <?xpacket end="w"?>
2009:07:01 14:33:27
" id="W5M0MpCehiHzreSzNTczkc9d"?> <x:xmpmeta xmlns:x="adobe:ns:meta/" x:xmptk="Adobe XMP Core 4.2.2-c063 53.352624, 2008/07/30-18:12:18 "> <rdf:RDF xmlns:rdf="hXXp://VVV.w3.org/1999/02/22-rdf-syntax-ns#"> <rdf:Description rdf:about="" xmlns:xmp="hXXp://ns.adobe.com/xap/1.0/" xmlns:xmpMM="hXXp://ns.adobe.com/xap/1.0/mm/" xmlns:stEvt="hXXp://ns.adobe.com/xap/1.0/sType/ResourceEvent#" xmlns:dc="hXXp://purl.org/dc/elements/1.1/" xmlns:photoshop="hXXp://ns.adobe.com/photoshop/1.0/" xmlns:tiff="hXXp://ns.adobe.com/tiff/1.0/" xmlns:exif="hXXp://ns.adobe.com/exif/1.0/" xmp:CreatorTool="Adobe Photoshop CS4 Windows" xmp:MetadataDate="2009-07-01T14:33:27 05:30" xmp:ModifyDate="2009-07-01T14:33:27 05:30" xmp:CreateDate="2009-07-01T13:19:55 05:30" xmpMM:InstanceID="xmp.iid:83F66B0A1E66DE11B579BA6AC5BF8994" xmpMM:DocumentID="xmp.did:BE060A6A1266DE11A7F6CCFE2D698220" xmpMM:OriginalDocumentID="xmp.did:BE060A6A1266DE11A7F6CCFE2D698220" dc:format="image/jpeg" photoshop:ColorMode="3" photoshop:ICCProfile="sRGB IEC61966-2.1" tiff:Orientation="1" tiff:XResolution="720090/10000" tiff:YResolution="720090/10000" tiff:ResolutionUnit="2" tiff:NativeDigest="256,257,258,259,262,274,277,284,530,531,282,283,296,301,318,319,529,532,306,270,271,272,305,315,33432;F3C1AC8F7AB698E8EA67EC260201EB3C" exif:PixelXDimension="60" exif:PixelYDimension="60" exif:ColorSpace="1" exif:NativeDigest="36864,40960,40961,37121,37122,40962,40963,37510,40964,36867,36868,33434,33437,34850,34852,34855,34856,37377,37378,37379,37380,37381,37382,37383,37384,37385,37386,37396,41483,41484,41486,41487,41488,41492,41493,41495,41728,41729,41730,41985,41986,41987,41988,41989,41990,41991,41992,41993,41994,41995,41996,42016,0,2,4,5,6,7,8,9,10,11,12,13,14,15,16,17,18,20,22,23,24,25,26,27,28,30;B22D5A9BC7549E7A8AB88C762634CF58"> <xmpMM:History> <rdf:Seq> <rdf:li stEvt:action="created" stEvt:instanceID="xmp.iid:BE060A6A1266DE11A7F6CCFE2D698220" stEvt:when="2009-07-01T13:19:55 05:30" stEvt:softwareAgent="Adobe Photoshop CS4 Windows"/> <rdf:li stEvt:action="saved" stEvt:instanceID="xmp.iid:BF060A6A1266DE11A7F6CCFE2D698220" stEvt:when="2009-07-01T13:19:55 05:30" stEvt:softwareAgent="Adobe Photoshop CS4 Windows" stEvt:changed="/"/> <rdf:li stEvt:action="saved" stEvt:instanceID="xmp.iid:82F66B0A1E66DE11B579BA6AC5BF8994" stEvt:when="2009-07-01T14:33:27 05:30" stEvt:softwareAgent="Adobe Photoshop CS4 Windows" stEvt:changed="/"/> <rdf:li stEvt:action="saved" stEvt:instanceID="xmp.iid:83F66B0A1E66DE11B579BA6AC5BF8994" stEvt:when="2009-07-01T14:33:27 05:30" stEvt:softwareAgent="Adobe Photoshop CS4 Windows" stEvt:changed="/"/> </rdf:Seq> </xmpMM:History> </rdf:Description> </rdf:RDF> </x:xmpmeta> <?xpacket end="w"?>
`2%fS/
2009:09:03 12:46:46
" id="W5M0MpCehiHzreSzNTczkc9d"?> <x:xmpmeta xmlns:x="adobe:ns:meta/" x:xmptk="Adobe XMP Core 4.2.2-c063 53.352624, 2008/07/30-18:12:18 "> <rdf:RDF xmlns:rdf="hXXp://VVV.w3.org/1999/02/22-rdf-syntax-ns#"> <rdf:Description rdf:about="" xmlns:xmp="hXXp://ns.adobe.com/xap/1.0/" xmlns:xmpMM="hXXp://ns.adobe.com/xap/1.0/mm/" xmlns:stEvt="hXXp://ns.adobe.com/xap/1.0/sType/ResourceEvent#" xmlns:stRef="hXXp://ns.adobe.com/xap/1.0/sType/ResourceRef#" xmlns:dc="hXXp://purl.org/dc/elements/1.1/" xmlns:photoshop="hXXp://ns.adobe.com/photoshop/1.0/" xmlns:tiff="hXXp://ns.adobe.com/tiff/1.0/" xmlns:exif="hXXp://ns.adobe.com/exif/1.0/" xmp:CreatorTool="Adobe Photoshop CS4 Windows" xmp:MetadataDate="2009-09-03T12:46:46 05:30" xmp:ModifyDate="2009-09-03T12:46:46 05:30" xmp:CreateDate="2009-07-01T13:19:55 05:30" xmpMM:InstanceID="xmp.iid:F6AE43215798DE118F2AA83EB6DBBBB8" xmpMM:DocumentID="xmp.did:BE060A6A1266DE11A7F6CCFE2D698220" xmpMM:OriginalDocumentID="xmp.did:BE060A6A1266DE11A7F6CCFE2D698220" dc:format="image/jpeg" photoshop:ColorMode="3" photoshop:ICCProfile="sRGB IEC61966-2.1" tiff:Orientation="1" tiff:XResolution="720090/10000" tiff:YResolution="720090/10000" tiff:ResolutionUnit="2" tiff:NativeDigest="256,257,258,259,262,274,277,284,530,531,282,283,296,301,318,319,529,532,306,270,271,272,305,315,33432;D928E7C48CB83642717DF99E873B0DC5" exif:PixelXDimension="60" exif:PixelYDimension="60" exif:ColorSpace="1" exif:NativeDigest="36864,40960,40961,37121,37122,40962,40963,37510,40964,36867,36868,33434,33437,34850,34852,34855,34856,37377,37378,37379,37380,37381,37382,37383,37384,37385,37386,37396,41483,41484,41486,41487,41488,41492,41493,41495,41728,41729,41730,41985,41986,41987,41988,41989,41990,41991,41992,41993,41994,41995,41996,42016,0,2,4,5,6,7,8,9,10,11,12,13,14,15,16,17,18,20,22,23,24,25,26,27,28,30;B22D5A9BC7549E7A8AB88C762634CF58"> <xmpMM:History> <rdf:Seq> <rdf:li stEvt:action="created" stEvt:instanceID="xmp.iid:BE060A6A1266DE11A7F6CCFE2D698220" stEvt:when="2009-07-01T13:19:55 05:30" stEvt:softwareAgent="Adobe Photoshop CS4 Windows"/> <rdf:li stEvt:action="saved" stEvt:instanceID="xmp.iid:BF060A6A1266DE11A7F6CCFE2D698220" stEvt:when="2009-07-01T13:19:55 05:30" stEvt:softwareAgent="Adobe Photoshop CS4 Windows" stEvt:changed="/"/> <rdf:li stEvt:action="saved" stEvt:instanceID="xmp.iid:8AF66B0A1E66DE11B579BA6AC5BF8994" stEvt:when="2009-07-01T14:35:56 05:30" stEvt:softwareAgent="Adobe Photoshop CS4 Windows" stEvt:changed="/"/> <rdf:li stEvt:action="converted" stEvt:parameters="from image/jpeg to application/vnd.adobe.photoshop"/> <rdf:li stEvt:action="derived" stEvt:parameters="converted from image/jpeg to application/vnd.adobe.photoshop"/> <rdf:li stEvt:action="saved" stEvt:instanceID="xmp.iid:8BF66B0A1E66DE11B579BA6AC5BF8994" stEvt:when="2009-07-01T14:35:56 05:30" stEvt:softwareAgent="Adobe Photoshop CS4 Windows" stEvt:changed="/"/> <rdf:li stEvt:action="saved" stEvt:instanceID="xmp.iid:F2B2CD74F596DE11BBDAB5D8D180CF22" stEvt:when="2009-09-01T19:14:36 05:30" stEvt:softwareAgent="Adobe Photoshop CS4 Windows" stEvt:changed="/"/> <rdf:li stEvt:action="saved" stEvt:instanceID="xmp.iid:F4AE43215798DE118F2AA83EB6DBBBB8" stEvt:when="2009-09-03T12:28:12 05:30" stEvt:softwareAgent="Adobe Photoshop CS4 Windows" stEvt:changed="/"/> <rdf:li stEvt:action="saved" stEvt:instanceID="xmp.iid:F5AE43215798DE118F2AA83EB6DBBBB8" stEvt:when="2009-09-03T12:46:46 05:30" stEvt:softwareAgent="Adobe Photoshop CS4 Windows" stEvt:changed="/"/> <rdf:li stEvt:action="converted" stEvt:parameters="from application/vnd.adobe.photoshop to image/jpeg"/> <rdf:li stEvt:action="derived" stEvt:parameters="converted from application/vnd.adobe.photoshop to image/jpeg"/> <rdf:li stEvt:action="saved" stEvt:instanceID="xmp.iid:F6AE43215798DE118F2AA83EB6DBBBB8" stEvt:when="2009-09-03T12:46:46 05:30" stEvt:softwareAgent="Adobe Photoshop CS4 Windows" stEvt:changed="/"/> </rdf:Seq> </xmpMM:History> <xmpMM:DerivedFrom stRef:instanceID="xmp.iid:F5AE43215798DE118F2AA83EB6DBBBB8" stRef:documentID="xmp.did:BE060A6A1266DE11A7F6CCFE2D698220" stRef:originalDocumentID="xmp.did:BE060A6A1266DE11A7F6CCFE2D698220"/> </rdf:Description> </rdf:RDF> </x:xmpmeta> <?xpacket end="w"?>
2009:07:01 14:34:43
,.kU>
" id="W5M0MpCehiHzreSzNTczkc9d"?> <x:xmpmeta xmlns:x="adobe:ns:meta/" x:xmptk="Adobe XMP Core 4.2.2-c063 53.352624, 2008/07/30-18:12:18 "> <rdf:RDF xmlns:rdf="hXXp://VVV.w3.org/1999/02/22-rdf-syntax-ns#"> <rdf:Description rdf:about="" xmlns:xmp="hXXp://ns.adobe.com/xap/1.0/" xmlns:xmpMM="hXXp://ns.adobe.com/xap/1.0/mm/" xmlns:stEvt="hXXp://ns.adobe.com/xap/1.0/sType/ResourceEvent#" xmlns:dc="hXXp://purl.org/dc/elements/1.1/" xmlns:photoshop="hXXp://ns.adobe.com/photoshop/1.0/" xmlns:tiff="hXXp://ns.adobe.com/tiff/1.0/" xmlns:exif="hXXp://ns.adobe.com/exif/1.0/" xmp:CreatorTool="Adobe Photoshop CS4 Windows" xmp:MetadataDate="2009-07-01T14:34:43 05:30" xmp:ModifyDate="2009-07-01T14:34:43 05:30" xmp:CreateDate="2009-07-01T13:19:55 05:30" xmpMM:InstanceID="xmp.iid:87F66B0A1E66DE11B579BA6AC5BF8994" xmpMM:DocumentID="xmp.did:BE060A6A1266DE11A7F6CCFE2D698220" xmpMM:OriginalDocumentID="xmp.did:BE060A6A1266DE11A7F6CCFE2D698220" dc:format="image/jpeg" photoshop:ColorMode="3" photoshop:ICCProfile="sRGB IEC61966-2.1" tiff:Orientation="1" tiff:XResolution="720090/10000" tiff:YResolution="720090/10000" tiff:ResolutionUnit="2" tiff:NativeDigest="256,257,258,259,262,274,277,284,530,531,282,283,296,301,318,319,529,532,306,270,271,272,305,315,33432;8C15289AFDEA20217846FC0811BCCAC7" exif:PixelXDimension="60" exif:PixelYDimension="60" exif:ColorSpace="1" exif:NativeDigest="36864,40960,40961,37121,37122,40962,40963,37510,40964,36867,36868,33434,33437,34850,34852,34855,34856,37377,37378,37379,37380,37381,37382,37383,37384,37385,37386,37396,41483,41484,41486,41487,41488,41492,41493,41495,41728,41729,41730,41985,41986,41987,41988,41989,41990,41991,41992,41993,41994,41995,41996,42016,0,2,4,5,6,7,8,9,10,11,12,13,14,15,16,17,18,20,22,23,24,25,26,27,28,30;B22D5A9BC7549E7A8AB88C762634CF58"> <xmpMM:History> <rdf:Seq> <rdf:li stEvt:action="created" stEvt:instanceID="xmp.iid:BE060A6A1266DE11A7F6CCFE2D698220" stEvt:when="2009-07-01T13:19:55 05:30" stEvt:softwareAgent="Adobe Photoshop CS4 Windows"/> <rdf:li stEvt:action="saved" stEvt:instanceID="xmp.iid:BF060A6A1266DE11A7F6CCFE2D698220" stEvt:when="2009-07-01T13:19:55 05:30" stEvt:softwareAgent="Adobe Photoshop CS4 Windows" stEvt:changed="/"/> <rdf:li stEvt:action="saved" stEvt:instanceID="xmp.iid:86F66B0A1E66DE11B579BA6AC5BF8994" stEvt:when="2009-07-01T14:34:43 05:30" stEvt:softwareAgent="Adobe Photoshop CS4 Windows" stEvt:changed="/"/> <rdf:li stEvt:action="saved" stEvt:instanceID="xmp.iid:87F66B0A1E66DE11B579BA6AC5BF8994" stEvt:when="2009-07-01T14:34:43 05:30" stEvt:softwareAgent="Adobe Photoshop CS4 Windows" stEvt:changed="/"/> </rdf:Seq> </xmpMM:History> </rdf:Description> </rdf:RDF> </x:xmpmeta> <?xpacket end="w"?>
2009:07:01 14:35:20
" id="W5M0MpCehiHzreSzNTczkc9d"?> <x:xmpmeta xmlns:x="adobe:ns:meta/" x:xmptk="Adobe XMP Core 4.2.2-c063 53.352624, 2008/07/30-18:12:18 "> <rdf:RDF xmlns:rdf="hXXp://VVV.w3.org/1999/02/22-rdf-syntax-ns#"> <rdf:Description rdf:about="" xmlns:xmp="hXXp://ns.adobe.com/xap/1.0/" xmlns:xmpMM="hXXp://ns.adobe.com/xap/1.0/mm/" xmlns:stEvt="hXXp://ns.adobe.com/xap/1.0/sType/ResourceEvent#" xmlns:dc="hXXp://purl.org/dc/elements/1.1/" xmlns:photoshop="hXXp://ns.adobe.com/photoshop/1.0/" xmlns:tiff="hXXp://ns.adobe.com/tiff/1.0/" xmlns:exif="hXXp://ns.adobe.com/exif/1.0/" xmp:CreatorTool="Adobe Photoshop CS4 Windows" xmp:MetadataDate="2009-07-01T14:35:20 05:30" xmp:ModifyDate="2009-07-01T14:35:20 05:30" xmp:CreateDate="2009-07-01T13:19:55 05:30" xmpMM:InstanceID="xmp.iid:89F66B0A1E66DE11B579BA6AC5BF8994" xmpMM:DocumentID="xmp.did:BE060A6A1266DE11A7F6CCFE2D698220" xmpMM:OriginalDocumentID="xmp.did:BE060A6A1266DE11A7F6CCFE2D698220" dc:format="image/jpeg" photoshop:ColorMode="3" photoshop:ICCProfile="sRGB IEC61966-2.1" tiff:Orientation="1" tiff:XResolution="720090/10000" tiff:YResolution="720090/10000" tiff:ResolutionUnit="2" tiff:NativeDigest="256,257,258,259,262,274,277,284,530,531,282,283,296,301,318,319,529,532,306,270,271,272,305,315,33432;FC86CE575ACA7A898AC4BF4C7D2AED1E" exif:PixelXDimension="60" exif:PixelYDimension="60" exif:ColorSpace="1" exif:NativeDigest="36864,40960,40961,37121,37122,40962,40963,37510,40964,36867,36868,33434,33437,34850,34852,34855,34856,37377,37378,37379,37380,37381,37382,37383,37384,37385,37386,37396,41483,41484,41486,41487,41488,41492,41493,41495,41728,41729,41730,41985,41986,41987,41988,41989,41990,41991,41992,41993,41994,41995,41996,42016,0,2,4,5,6,7,8,9,10,11,12,13,14,15,16,17,18,20,22,23,24,25,26,27,28,30;B22D5A9BC7549E7A8AB88C762634CF58"> <xmpMM:History> <rdf:Seq> <rdf:li stEvt:action="created" stEvt:instanceID="xmp.iid:BE060A6A1266DE11A7F6CCFE2D698220" stEvt:when="2009-07-01T13:19:55 05:30" stEvt:softwareAgent="Adobe Photoshop CS4 Windows"/> <rdf:li stEvt:action="saved" stEvt:instanceID="xmp.iid:BF060A6A1266DE11A7F6CCFE2D698220" stEvt:when="2009-07-01T13:19:55 05:30" stEvt:softwareAgent="Adobe Photoshop CS4 Windows" stEvt:changed="/"/> <rdf:li stEvt:action="saved" stEvt:instanceID="xmp.iid:88F66B0A1E66DE11B579BA6AC5BF8994" stEvt:when="2009-07-01T14:35:20 05:30" stEvt:softwareAgent="Adobe Photoshop CS4 Windows" stEvt:changed="/"/> <rdf:li stEvt:action="saved" stEvt:instanceID="xmp.iid:89F66B0A1E66DE11B579BA6AC5BF8994" stEvt:when="2009-07-01T14:35:20 05:30" stEvt:softwareAgent="Adobe Photoshop CS4 Windows" stEvt:changed="/"/> </rdf:Seq> </xmpMM:History> </rdf:Description> </rdf:RDF> </x:xmpmeta> <?xpacket end="w"?>
2009:08:31 16:12:20
" id="W5M0MpCehiHzreSzNTczkc9d"?> <x:xmpmeta xmlns:x="adobe:ns:meta/" x:xmptk="Adobe XMP Core 4.2.2-c063 53.352624, 2008/07/30-18:12:18 "> <rdf:RDF xmlns:rdf="hXXp://VVV.w3.org/1999/02/22-rdf-syntax-ns#"> <rdf:Description rdf:about="" xmlns:xmp="hXXp://ns.adobe.com/xap/1.0/" xmlns:dc="hXXp://purl.org/dc/elements/1.1/" xmlns:xmpMM="hXXp://ns.adobe.com/xap/1.0/mm/" xmlns:stEvt="hXXp://ns.adobe.com/xap/1.0/sType/ResourceEvent#" xmlns:stRef="hXXp://ns.adobe.com/xap/1.0/sType/ResourceRef#" xmlns:tiff="hXXp://ns.adobe.com/tiff/1.0/" xmlns:exif="hXXp://ns.adobe.com/exif/1.0/" xmlns:photoshop="hXXp://ns.adobe.com/photoshop/1.0/" xmp:CreatorTool="Adobe Photoshop CS4 Windows" xmp:CreateDate="2009-08-31T16:10:09 05:30" xmp:MetadataDate="2009-08-31T16:12:20 05:30" xmp:ModifyDate="2009-08-31T16:12:20 05:30" dc:format="image/jpeg" xmpMM:InstanceID="xmp.iid:7E8037EF1A96DE11B8B1F7A8EAF0CDF5" xmpMM:DocumentID="xmp.did:6529C00A1296DE11B8B1F7A8EAF0CDF5" xmpMM:OriginalDocumentID="xmp.did:6729C00A1296DE11B8B1F7A8EAF0CDF5" tiff:Orientation="1" tiff:XResolution="720090/10000" tiff:YResolution="720090/10000" tiff:ResolutionUnit="2" tiff:NativeDigest="256,257,258,259,262,274,277,284,530,531,282,283,296,301,318,319,529,532,306,270,271,272,305,315,33432;78ABED42E88796266002F58F547ED288" exif:PixelXDimension="60" exif:PixelYDimension="60" exif:ColorSpace="1" exif:NativeDigest="36864,40960,40961,37121,37122,40962,40963,37510,40964,36867,36868,33434,33437,34850,34852,34855,34856,37377,37378,37379,37380,37381,37382,37383,37384,37385,37386,37396,41483,41484,41486,41487,41488,41492,41493,41495,41728,41729,41730,41985,41986,41987,41988,41989,41990,41991,41992,41993,41994,41995,41996,42016,0,2,4,5,6,7,8,9,10,11,12,13,14,15,16,17,18,20,22,23,24,25,26,27,28,30;B22D5A9BC7549E7A8AB88C762634CF58" photoshop:ColorMode="3" photoshop:ICCProfile="sRGB IEC61966-2.1"> <xmpMM:History> <rdf:Seq> <rdf:li stEvt:action="created" stEvt:instanceID="xmp.iid:6729C00A1296DE11B8B1F7A8EAF0CDF5" stEvt:when="2009-08-31T16:10:09 05:30" stEvt:softwareAgent="Adobe Photoshop CS4 Windows"/> <rdf:li stEvt:action="saved" stEvt:instanceID="xmp.iid:7D8037EF1A96DE11B8B1F7A8EAF0CDF5" stEvt:when="2009-08-31T16:12:20 05:30" stEvt:softwareAgent="Adobe Photoshop CS4 Windows" stEvt:changed="/"/> <rdf:li stEvt:action="converted" stEvt:parameters="from application/vnd.adobe.photoshop to image/jpeg"/> <rdf:li stEvt:action="derived" stEvt:parameters="converted from application/vnd.adobe.photoshop to image/jpeg"/> <rdf:li stEvt:action="saved" stEvt:instanceID="xmp.iid:7E8037EF1A96DE11B8B1F7A8EAF0CDF5" stEvt:when="2009-08-31T16:12:20 05:30" stEvt:softwareAgent="Adobe Photoshop CS4 Windows" stEvt:changed="/"/> </rdf:Seq> </xmpMM:History> <xmpMM:DerivedFrom stRef:instanceID="xmp.iid:7D8037EF1A96DE11B8B1F7A8EAF0CDF5" stRef:documentID="xmp.did:6529C00A1296DE11B8B1F7A8EAF0CDF5" stRef:originalDocumentID="xmp.did:6729C00A1296DE11B8B1F7A8EAF0CDF5"/> </rdf:Description> </rdf:RDF> </x:xmpmeta> <?xpacket end="w"?>
)/.mV
2009:08:31 16:42:16
" id="W5M0MpCehiHzreSzNTczkc9d"?> <x:xmpmeta xmlns:x="adobe:ns:meta/" x:xmptk="Adobe XMP Core 4.2.2-c063 53.352624, 2008/07/30-18:12:18 "> <rdf:RDF xmlns:rdf="hXXp://VVV.w3.org/1999/02/22-rdf-syntax-ns#"> <rdf:Description rdf:about="" xmlns:xmp="hXXp://ns.adobe.com/xap/1.0/" xmlns:dc="hXXp://purl.org/dc/elements/1.1/" xmlns:xmpMM="hXXp://ns.adobe.com/xap/1.0/mm/" xmlns:stEvt="hXXp://ns.adobe.com/xap/1.0/sType/ResourceEvent#" xmlns:stRef="hXXp://ns.adobe.com/xap/1.0/sType/ResourceRef#" xmlns:tiff="hXXp://ns.adobe.com/tiff/1.0/" xmlns:exif="hXXp://ns.adobe.com/exif/1.0/" xmlns:photoshop="hXXp://ns.adobe.com/photoshop/1.0/" xmp:CreatorTool="Adobe Photoshop CS4 Windows" xmp:CreateDate="2009-08-31T16:10:09 05:30" xmp:MetadataDate="2009-08-31T16:42:16 05:30" xmp:ModifyDate="2009-08-31T16:42:16 05:30" dc:format="image/jpeg" xmpMM:InstanceID="xmp.iid:8BFB727F1E96DE11B8B1F7A8EAF0CDF5" xmpMM:DocumentID="xmp.did:6529C00A1296DE11B8B1F7A8EAF0CDF5" xmpMM:OriginalDocumentID="xmp.did:6729C00A1296DE11B8B1F7A8EAF0CDF5" tiff:Orientation="1" tiff:XResolution="720090/10000" tiff:YResolution="720090/10000" tiff:ResolutionUnit="2" tiff:NativeDigest="256,257,258,259,262,274,277,284,530,531,282,283,296,301,318,319,529,532,306,270,271,272,305,315,33432;ECBA89B3475BA1A6527245331C506B2D" exif:PixelXDimension="60" exif:PixelYDimension="60" exif:ColorSpace="1" exif:NativeDigest="36864,40960,40961,37121,37122,40962,40963,37510,40964,36867,36868,33434,33437,34850,34852,34855,34856,37377,37378,37379,37380,37381,37382,37383,37384,37385,37386,37396,41483,41484,41486,41487,41488,41492,41493,41495,41728,41729,41730,41985,41986,41987,41988,41989,41990,41991,41992,41993,41994,41995,41996,42016,0,2,4,5,6,7,8,9,10,11,12,13,14,15,16,17,18,20,22,23,24,25,26,27,28,30;B22D5A9BC7549E7A8AB88C762634CF58" photoshop:ColorMode="3" photoshop:ICCProfile="sRGB IEC61966-2.1"> <xmpMM:History> <rdf:Seq> <rdf:li stEvt:action="created" stEvt:instanceID="xmp.iid:6729C00A1296DE11B8B1F7A8EAF0CDF5" stEvt:when="2009-08-31T16:10:09 05:30" stEvt:softwareAgent="Adobe Photoshop CS4 Windows"/> <rdf:li stEvt:action="saved" stEvt:instanceID="xmp.iid:8AFB727F1E96DE11B8B1F7A8EAF0CDF5" stEvt:when="2009-08-31T16:42:16 05:30" stEvt:softwareAgent="Adobe Photoshop CS4 Windows" stEvt:changed="/"/> <rdf:li stEvt:action="converted" stEvt:parameters="from application/vnd.adobe.photoshop to image/jpeg"/> <rdf:li stEvt:action="derived" stEvt:parameters="converted from application/vnd.adobe.photoshop to image/jpeg"/> <rdf:li stEvt:action="saved" stEvt:instanceID="xmp.iid:8BFB727F1E96DE11B8B1F7A8EAF0CDF5" stEvt:when="2009-08-31T16:42:16 05:30" stEvt:softwareAgent="Adobe Photoshop CS4 Windows" stEvt:changed="/"/> </rdf:Seq> </xmpMM:History> <xmpMM:DerivedFrom stRef:instanceID="xmp.iid:8AFB727F1E96DE11B8B1F7A8EAF0CDF5" stRef:documentID="xmp.did:6529C00A1296DE11B8B1F7A8EAF0CDF5" stRef:originalDocumentID="xmp.did:6729C00A1296DE11B8B1F7A8EAF0CDF5"/> </rdf:Description> </rdf:RDF> </x:xmpmeta> <?xpacket end="w"?>
2009:08:31 16:40:15
I%)%C?
" id="W5M0MpCehiHzreSzNTczkc9d"?> <x:xmpmeta xmlns:x="adobe:ns:meta/" x:xmptk="Adobe XMP Core 4.2.2-c063 53.352624, 2008/07/30-18:12:18 "> <rdf:RDF xmlns:rdf="hXXp://VVV.w3.org/1999/02/22-rdf-syntax-ns#"> <rdf:Description rdf:about="" xmlns:xmp="hXXp://ns.adobe.com/xap/1.0/" xmlns:dc="hXXp://purl.org/dc/elements/1.1/" xmlns:xmpMM="hXXp://ns.adobe.com/xap/1.0/mm/" xmlns:stEvt="hXXp://ns.adobe.com/xap/1.0/sType/ResourceEvent#" xmlns:stRef="hXXp://ns.adobe.com/xap/1.0/sType/ResourceRef#" xmlns:tiff="hXXp://ns.adobe.com/tiff/1.0/" xmlns:exif="hXXp://ns.adobe.com/exif/1.0/" xmlns:photoshop="hXXp://ns.adobe.com/photoshop/1.0/" xmp:CreatorTool="Adobe Photoshop CS4 Windows" xmp:CreateDate="2009-08-31T16:10:09 05:30" xmp:MetadataDate="2009-08-31T16:40:15 05:30" xmp:ModifyDate="2009-08-31T16:40:15 05:30" dc:format="image/jpeg" xmpMM:InstanceID="xmp.iid:89FB727F1E96DE11B8B1F7A8EAF0CDF5" xmpMM:DocumentID="xmp.did:6529C00A1296DE11B8B1F7A8EAF0CDF5" xmpMM:OriginalDocumentID="xmp.did:6729C00A1296DE11B8B1F7A8EAF0CDF5" tiff:Orientation="1" tiff:XResolution="720090/10000" tiff:YResolution="720090/10000" tiff:ResolutionUnit="2" tiff:NativeDigest="256,257,258,259,262,274,277,284,530,531,282,283,296,301,318,319,529,532,306,270,271,272,305,315,33432;0F86D3716AFC5EF571F8EB1E67D05A36" exif:PixelXDimension="60" exif:PixelYDimension="60" exif:ColorSpace="1" exif:NativeDigest="36864,40960,40961,37121,37122,40962,40963,37510,40964,36867,36868,33434,33437,34850,34852,34855,34856,37377,37378,37379,37380,37381,37382,37383,37384,37385,37386,37396,41483,41484,41486,41487,41488,41492,41493,41495,41728,41729,41730,41985,41986,41987,41988,41989,41990,41991,41992,41993,41994,41995,41996,42016,0,2,4,5,6,7,8,9,10,11,12,13,14,15,16,17,18,20,22,23,24,25,26,27,28,30;B22D5A9BC7549E7A8AB88C762634CF58" photoshop:ColorMode="3" photoshop:ICCProfile="sRGB IEC61966-2.1"> <xmpMM:History> <rdf:Seq> <rdf:li stEvt:action="created" stEvt:instanceID="xmp.iid:6729C00A1296DE11B8B1F7A8EAF0CDF5" stEvt:when="2009-08-31T16:10:09 05:30" stEvt:softwareAgent="Adobe Photoshop CS4 Windows"/> <rdf:li stEvt:action="saved" stEvt:instanceID="xmp.iid:88FB727F1E96DE11B8B1F7A8EAF0CDF5" stEvt:when="2009-08-31T16:40:15 05:30" stEvt:softwareAgent="Adobe Photoshop CS4 Windows" stEvt:changed="/"/> <rdf:li stEvt:action="converted" stEvt:parameters="from application/vnd.adobe.photoshop to image/jpeg"/> <rdf:li stEvt:action="derived" stEvt:parameters="converted from application/vnd.adobe.photoshop to image/jpeg"/> <rdf:li stEvt:action="saved" stEvt:instanceID="xmp.iid:89FB727F1E96DE11B8B1F7A8EAF0CDF5" stEvt:when="2009-08-31T16:40:15 05:30" stEvt:softwareAgent="Adobe Photoshop CS4 Windows" stEvt:changed="/"/> </rdf:Seq> </xmpMM:History> <xmpMM:DerivedFrom stRef:instanceID="xmp.iid:88FB727F1E96DE11B8B1F7A8EAF0CDF5" stRef:documentID="xmp.did:6529C00A1296DE11B8B1F7A8EAF0CDF5" stRef:originalDocumentID="xmp.did:6729C00A1296DE11B8B1F7A8EAF0CDF5"/> </rdf:Description> </rdf:RDF> </x:xmpmeta> <?xpacket end="w"?>
2009:08:31 16:15:15
lx,.sD
" id="W5M0MpCehiHzreSzNTczkc9d"?> <x:xmpmeta xmlns:x="adobe:ns:meta/" x:xmptk="Adobe XMP Core 4.2.2-c063 53.352624, 2008/07/30-18:12:18 "> <rdf:RDF xmlns:rdf="hXXp://VVV.w3.org/1999/02/22-rdf-syntax-ns#"> <rdf:Description rdf:about="" xmlns:xmp="hXXp://ns.adobe.com/xap/1.0/" xmlns:dc="hXXp://purl.org/dc/elements/1.1/" xmlns:xmpMM="hXXp://ns.adobe.com/xap/1.0/mm/" xmlns:stEvt="hXXp://ns.adobe.com/xap/1.0/sType/ResourceEvent#" xmlns:stRef="hXXp://ns.adobe.com/xap/1.0/sType/ResourceRef#" xmlns:tiff="hXXp://ns.adobe.com/tiff/1.0/" xmlns:exif="hXXp://ns.adobe.com/exif/1.0/" xmlns:photoshop="hXXp://ns.adobe.com/photoshop/1.0/" xmp:CreatorTool="Adobe Photoshop CS4 Windows" xmp:CreateDate="2009-08-31T16:10:09 05:30" xmp:MetadataDate="2009-08-31T16:15:15 05:30" xmp:ModifyDate="2009-08-31T16:15:15 05:30" dc:format="image/jpeg" xmpMM:InstanceID="xmp.iid:808037EF1A96DE11B8B1F7A8EAF0CDF5" xmpMM:DocumentID="xmp.did:6529C00A1296DE11B8B1F7A8EAF0CDF5" xmpMM:OriginalDocumentID="xmp.did:6729C00A1296DE11B8B1F7A8EAF0CDF5" tiff:Orientation="1" tiff:XResolution="720090/10000" tiff:YResolution="720090/10000" tiff:ResolutionUnit="2" tiff:NativeDigest="256,257,258,259,262,274,277,284,530,531,282,283,296,301,318,319,529,532,306,270,271,272,305,315,33432;E122C8D71691BFF16E84284E2A74739B" exif:PixelXDimension="60" exif:PixelYDimension="60" exif:ColorSpace="1" exif:NativeDigest="36864,40960,40961,37121,37122,40962,40963,37510,40964,36867,36868,33434,33437,34850,34852,34855,34856,37377,37378,37379,37380,37381,37382,37383,37384,37385,37386,37396,41483,41484,41486,41487,41488,41492,41493,41495,41728,41729,41730,41985,41986,41987,41988,41989,41990,41991,41992,41993,41994,41995,41996,42016,0,2,4,5,6,7,8,9,10,11,12,13,14,15,16,17,18,20,22,23,24,25,26,27,28,30;B22D5A9BC7549E7A8AB88C762634CF58" photoshop:ColorMode="3" photoshop:ICCProfile="sRGB IEC61966-2.1"> <xmpMM:History> <rdf:Seq> <rdf:li stEvt:action="created" stEvt:instanceID="xmp.iid:6729C00A1296DE11B8B1F7A8EAF0CDF5" stEvt:when="2009-08-31T16:10:09 05:30" stEvt:softwareAgent="Adobe Photoshop CS4 Windows"/> <rdf:li stEvt:action="saved" stEvt:instanceID="xmp.iid:7F8037EF1A96DE11B8B1F7A8EAF0CDF5" stEvt:when="2009-08-31T16:15:15 05:30" stEvt:softwareAgent="Adobe Photoshop CS4 Windows" stEvt:changed="/"/> <rdf:li stEvt:action="converted" stEvt:parameters="from application/vnd.adobe.photoshop to image/jpeg"/> <rdf:li stEvt:action="derived" stEvt:parameters="converted from application/vnd.adobe.photoshop to image/jpeg"/> <rdf:li stEvt:action="saved" stEvt:instanceID="xmp.iid:808037EF1A96DE11B8B1F7A8EAF0CDF5" stEvt:when="2009-08-31T16:15:15 05:30" stEvt:softwareAgent="Adobe Photoshop CS4 Windows" stEvt:changed="/"/> </rdf:Seq> </xmpMM:History> <xmpMM:DerivedFrom stRef:instanceID="xmp.iid:7F8037EF1A96DE11B8B1F7A8EAF0CDF5" stRef:documentID="xmp.did:6529C00A1296DE11B8B1F7A8EAF0CDF5" stRef:originalDocumentID="xmp.did:6729C00A1296DE11B8B1F7A8EAF0CDF5"/> </rdf:Description> </rdf:RDF> </x:xmpmeta> <?xpacket end="w"?>
2009:08:31 16:36:14
Nni.hy
" id="W5M0MpCehiHzreSzNTczkc9d"?> <x:xmpmeta xmlns:x="adobe:ns:meta/" x:xmptk="Adobe XMP Core 4.2.2-c063 53.352624, 2008/07/30-18:12:18 "> <rdf:RDF xmlns:rdf="hXXp://VVV.w3.org/1999/02/22-rdf-syntax-ns#"> <rdf:Description rdf:about="" xmlns:xmp="hXXp://ns.adobe.com/xap/1.0/" xmlns:dc="hXXp://purl.org/dc/elements/1.1/" xmlns:xmpMM="hXXp://ns.adobe.com/xap/1.0/mm/" xmlns:stEvt="hXXp://ns.adobe.com/xap/1.0/sType/ResourceEvent#" xmlns:stRef="hXXp://ns.adobe.com/xap/1.0/sType/ResourceRef#" xmlns:tiff="hXXp://ns.adobe.com/tiff/1.0/" xmlns:exif="hXXp://ns.adobe.com/exif/1.0/" xmlns:photoshop="hXXp://ns.adobe.com/photoshop/1.0/" xmp:CreatorTool="Adobe Photoshop CS4 Windows" xmp:CreateDate="2009-08-31T16:10:09 05:30" xmp:MetadataDate="2009-08-31T16:36:14 05:30" xmp:ModifyDate="2009-08-31T16:36:14 05:30" dc:format="image/jpeg" xmpMM:InstanceID="xmp.iid:17A776D91B96DE11B8B1F7A8EAF0CDF5" xmpMM:DocumentID="xmp.did:6529C00A1296DE11B8B1F7A8EAF0CDF5" xmpMM:OriginalDocumentID="xmp.did:6729C00A1296DE11B8B1F7A8EAF0CDF5" tiff:Orientation="1" tiff:XResolution="720090/10000" tiff:YResolution="720090/10000" tiff:ResolutionUnit="2" tiff:NativeDigest="256,257,258,259,262,274,277,284,530,531,282,283,296,301,318,319,529,532,306,270,271,272,305,315,33432;F5C041207618612FEEA6411DC934A05C" exif:PixelXDimension="60" exif:PixelYDimension="60" exif:ColorSpace="1" exif:NativeDigest="36864,40960,40961,37121,37122,40962,40963,37510,40964,36867,36868,33434,33437,34850,34852,34855,34856,37377,37378,37379,37380,37381,37382,37383,37384,37385,37386,37396,41483,41484,41486,41487,41488,41492,41493,41495,41728,41729,41730,41985,41986,41987,41988,41989,41990,41991,41992,41993,41994,41995,41996,42016,0,2,4,5,6,7,8,9,10,11,12,13,14,15,16,17,18,20,22,23,24,25,26,27,28,30;B22D5A9BC7549E7A8AB88C762634CF58" photoshop:ColorMode="3" photoshop:ICCProfile="sRGB IEC61966-2.1"> <xmpMM:History> <rdf:Seq> <rdf:li stEvt:action="created" stEvt:instanceID="xmp.iid:6729C00A1296DE11B8B1F7A8EAF0CDF5" stEvt:when="2009-08-31T16:10:09 05:30" stEvt:softwareAgent="Adobe Photoshop CS4 Windows"/> <rdf:li stEvt:action="saved" stEvt:instanceID="xmp.iid:16A776D91B96DE11B8B1F7A8EAF0CDF5" stEvt:when="2009-08-31T16:36:14 05:30" stEvt:softwareAgent="Adobe Photoshop CS4 Windows" stEvt:changed="/"/> <rdf:li stEvt:action="converted" stEvt:parameters="from application/vnd.adobe.photoshop to image/jpeg"/> <rdf:li stEvt:action="derived" stEvt:parameters="converted from application/vnd.adobe.photoshop to image/jpeg"/> <rdf:li stEvt:action="saved" stEvt:instanceID="xmp.iid:17A776D91B96DE11B8B1F7A8EAF0CDF5" stEvt:when="2009-08-31T16:36:14 05:30" stEvt:softwareAgent="Adobe Photoshop CS4 Windows" stEvt:changed="/"/> </rdf:Seq> </xmpMM:History> <xmpMM:DerivedFrom stRef:instanceID="xmp.iid:16A776D91B96DE11B8B1F7A8EAF0CDF5" stRef:documentID="xmp.did:6529C00A1296DE11B8B1F7A8EAF0CDF5" stRef:originalDocumentID="xmp.did:6729C00A1296DE11B8B1F7A8EAF0CDF5"/> </rdf:Description> </rdf:RDF> </x:xmpmeta> <?xpacket end="w"?>
/-.Cq
2009:08:31 16:10:05
" id="W5M0MpCehiHzreSzNTczkc9d"?> <x:xmpmeta xmlns:x="adobe:ns:meta/" x:xmptk="Adobe XMP Core 4.2.2-c063 53.352624, 2008/07/30-18:12:18 "> <rdf:RDF xmlns:rdf="hXXp://VVV.w3.org/1999/02/22-rdf-syntax-ns#"> <rdf:Description rdf:about="" xmlns:xmp="hXXp://ns.adobe.com/xap/1.0/" xmlns:xmpMM="hXXp://ns.adobe.com/xap/1.0/mm/" xmlns:stEvt="hXXp://ns.adobe.com/xap/1.0/sType/ResourceEvent#" xmlns:dc="hXXp://purl.org/dc/elements/1.1/" xmlns:photoshop="hXXp://ns.adobe.com/photoshop/1.0/" xmlns:tiff="hXXp://ns.adobe.com/tiff/1.0/" xmlns:exif="hXXp://ns.adobe.com/exif/1.0/" xmp:CreatorTool="Adobe Photoshop CS4 Windows" xmp:MetadataDate="2009-08-31T16:10:05 05:30" xmp:ModifyDate="2009-08-31T16:10:05 05:30" xmp:CreateDate="2009-08-31T16:10:05 05:30" xmpMM:InstanceID="xmp.iid:6629C00A1296DE11B8B1F7A8EAF0CDF5" xmpMM:DocumentID="xmp.did:6529C00A1296DE11B8B1F7A8EAF0CDF5" xmpMM:OriginalDocumentID="xmp.did:6529C00A1296DE11B8B1F7A8EAF0CDF5" dc:format="image/jpeg" photoshop:ColorMode="3" photoshop:ICCProfile="sRGB IEC61966-2.1" tiff:Orientation="1" tiff:XResolution="720090/10000" tiff:YResolution="720090/10000" tiff:ResolutionUnit="2" tiff:NativeDigest="256,257,258,259,262,274,277,284,530,531,282,283,296,301,318,319,529,532,306,270,271,272,305,315,33432;256304104C483086D6D4D9AAB845751F" exif:PixelXDimension="60" exif:PixelYDimension="60" exif:ColorSpace="1" exif:NativeDigest="36864,40960,40961,37121,37122,40962,40963,37510,40964,36867,36868,33434,33437,34850,34852,34855,34856,37377,37378,37379,37380,37381,37382,37383,37384,37385,37386,37396,41483,41484,41486,41487,41488,41492,41493,41495,41728,41729,41730,41985,41986,41987,41988,41989,41990,41991,41992,41993,41994,41995,41996,42016,0,2,4,5,6,7,8,9,10,11,12,13,14,15,16,17,18,20,22,23,24,25,26,27,28,30;B22D5A9BC7549E7A8AB88C762634CF58"> <xmpMM:History> <rdf:Seq> <rdf:li stEvt:action="created" stEvt:instanceID="xmp.iid:6529C00A1296DE11B8B1F7A8EAF0CDF5" stEvt:when="2009-08-31T16:10:05 05:30" stEvt:softwareAgent="Adobe Photoshop CS4 Windows"/> <rdf:li stEvt:action="saved" stEvt:instanceID="xmp.iid:6629C00A1296DE11B8B1F7A8EAF0CDF5" stEvt:when="2009-08-31T16:10:05 05:30" stEvt:softwareAgent="Adobe Photoshop CS4 Windows" stEvt:changed="/"/> </rdf:Seq> </xmpMM:History> </rdf:Description> </rdf:RDF> </x:xmpmeta> <?xpacket end="w"?>
%ßP
2009:08:31 16:37:48
i(.uRB
" id="W5M0MpCehiHzreSzNTczkc9d"?> <x:xmpmeta xmlns:x="adobe:ns:meta/" x:xmptk="Adobe XMP Core 4.2.2-c063 53.352624, 2008/07/30-18:12:18 "> <rdf:RDF xmlns:rdf="hXXp://VVV.w3.org/1999/02/22-rdf-syntax-ns#"> <rdf:Description rdf:about="" xmlns:xmp="hXXp://ns.adobe.com/xap/1.0/" xmlns:dc="hXXp://purl.org/dc/elements/1.1/" xmlns:xmpMM="hXXp://ns.adobe.com/xap/1.0/mm/" xmlns:stEvt="hXXp://ns.adobe.com/xap/1.0/sType/ResourceEvent#" xmlns:stRef="hXXp://ns.adobe.com/xap/1.0/sType/ResourceRef#" xmlns:tiff="hXXp://ns.adobe.com/tiff/1.0/" xmlns:exif="hXXp://ns.adobe.com/exif/1.0/" xmlns:photoshop="hXXp://ns.adobe.com/photoshop/1.0/" xmp:CreatorTool="Adobe Photoshop CS4 Windows" xmp:CreateDate="2009-08-31T16:10:09 05:30" xmp:MetadataDate="2009-08-31T16:37:48 05:30" xmp:ModifyDate="2009-08-31T16:37:48 05:30" dc:format="image/jpeg" xmpMM:InstanceID="xmp.iid:87FB727F1E96DE11B8B1F7A8EAF0CDF5" xmpMM:DocumentID="xmp.did:6529C00A1296DE11B8B1F7A8EAF0CDF5" xmpMM:OriginalDocumentID="xmp.did:6729C00A1296DE11B8B1F7A8EAF0CDF5" tiff:Orientation="1" tiff:XResolution="720090/10000" tiff:YResolution="720090/10000" tiff:ResolutionUnit="2" tiff:NativeDigest="256,257,258,259,262,274,277,284,530,531,282,283,296,301,318,319,529,532,306,270,271,272,305,315,33432;CD33981ADDC0CD7B3DD49B805D653792" exif:PixelXDimension="60" exif:PixelYDimension="60" exif:ColorSpace="1" exif:NativeDigest="36864,40960,40961,37121,37122,40962,40963,37510,40964,36867,36868,33434,33437,34850,34852,34855,34856,37377,37378,37379,37380,37381,37382,37383,37384,37385,37386,37396,41483,41484,41486,41487,41488,41492,41493,41495,41728,41729,41730,41985,41986,41987,41988,41989,41990,41991,41992,41993,41994,41995,41996,42016,0,2,4,5,6,7,8,9,10,11,12,13,14,15,16,17,18,20,22,23,24,25,26,27,28,30;B22D5A9BC7549E7A8AB88C762634CF58" photoshop:ColorMode="3" photoshop:ICCProfile="sRGB IEC61966-2.1"> <xmpMM:History> <rdf:Seq> <rdf:li stEvt:action="created" stEvt:instanceID="xmp.iid:6729C00A1296DE11B8B1F7A8EAF0CDF5" stEvt:when="2009-08-31T16:10:09 05:30" stEvt:softwareAgent="Adobe Photoshop CS4 Windows"/> <rdf:li stEvt:action="saved" stEvt:instanceID="xmp.iid:86FB727F1E96DE11B8B1F7A8EAF0CDF5" stEvt:when="2009-08-31T16:37:48 05:30" stEvt:softwareAgent="Adobe Photoshop CS4 Windows" stEvt:changed="/"/> <rdf:li stEvt:action="converted" stEvt:parameters="from application/vnd.adobe.photoshop to image/jpeg"/> <rdf:li stEvt:action="derived" stEvt:parameters="converted from application/vnd.adobe.photoshop to image/jpeg"/> <rdf:li stEvt:action="saved" stEvt:instanceID="xmp.iid:87FB727F1E96DE11B8B1F7A8EAF0CDF5" stEvt:when="2009-08-31T16:37:48 05:30" stEvt:softwareAgent="Adobe Photoshop CS4 Windows" stEvt:changed="/"/> </rdf:Seq> </xmpMM:History> <xmpMM:DerivedFrom stRef:instanceID="xmp.iid:86FB727F1E96DE11B8B1F7A8EAF0CDF5" stRef:documentID="xmp.did:6529C00A1296DE11B8B1F7A8EAF0CDF5" stRef:originalDocumentID="xmp.did:6729C00A1296DE11B8B1F7A8EAF0CDF5"/> </rdf:Description> </rdf:RDF> </x:xmpmeta> <?xpacket end="w"?>
2009:08:31 16:17:57
" id="W5M0MpCehiHzreSzNTczkc9d"?> <x:xmpmeta xmlns:x="adobe:ns:meta/" x:xmptk="Adobe XMP Core 4.2.2-c063 53.352624, 2008/07/30-18:12:18 "> <rdf:RDF xmlns:rdf="hXXp://VVV.w3.org/1999/02/22-rdf-syntax-ns#"> <rdf:Description rdf:about="" xmlns:xmp="hXXp://ns.adobe.com/xap/1.0/" xmlns:dc="hXXp://purl.org/dc/elements/1.1/" xmlns:xmpMM="hXXp://ns.adobe.com/xap/1.0/mm/" xmlns:stEvt="hXXp://ns.adobe.com/xap/1.0/sType/ResourceEvent#" xmlns:stRef="hXXp://ns.adobe.com/xap/1.0/sType/ResourceRef#" xmlns:tiff="hXXp://ns.adobe.com/tiff/1.0/" xmlns:exif="hXXp://ns.adobe.com/exif/1.0/" xmlns:photoshop="hXXp://ns.adobe.com/photoshop/1.0/" xmp:CreatorTool="Adobe Photoshop CS4 Windows" xmp:CreateDate="2009-08-31T16:10:09 05:30" xmp:MetadataDate="2009-08-31T16:17:57 05:30" xmp:ModifyDate="2009-08-31T16:17:57 05:30" dc:format="image/jpeg" xmpMM:InstanceID="xmp.iid:828037EF1A96DE11B8B1F7A8EAF0CDF5" xmpMM:DocumentID="xmp.did:6529C00A1296DE11B8B1F7A8EAF0CDF5" xmpMM:OriginalDocumentID="xmp.did:6729C00A1296DE11B8B1F7A8EAF0CDF5" tiff:Orientation="1" tiff:XResolution="720090/10000" tiff:YResolution="720090/10000" tiff:ResolutionUnit="2" tiff:NativeDigest="256,257,258,259,262,274,277,284,530,531,282,283,296,301,318,319,529,532,306,270,271,272,305,315,33432;A8EA9B09EDA627870302287CED17A9AA" exif:PixelXDimension="60" exif:PixelYDimension="60" exif:ColorSpace="1" exif:NativeDigest="36864,40960,40961,37121,37122,40962,40963,37510,40964,36867,36868,33434,33437,34850,34852,34855,34856,37377,37378,37379,37380,37381,37382,37383,37384,37385,37386,37396,41483,41484,41486,41487,41488,41492,41493,41495,41728,41729,41730,41985,41986,41987,41988,41989,41990,41991,41992,41993,41994,41995,41996,42016,0,2,4,5,6,7,8,9,10,11,12,13,14,15,16,17,18,20,22,23,24,25,26,27,28,30;B22D5A9BC7549E7A8AB88C762634CF58" photoshop:ColorMode="3" photoshop:ICCProfile="sRGB IEC61966-2.1"> <xmpMM:History> <rdf:Seq> <rdf:li stEvt:action="created" stEvt:instanceID="xmp.iid:6729C00A1296DE11B8B1F7A8EAF0CDF5" stEvt:when="2009-08-31T16:10:09 05:30" stEvt:softwareAgent="Adobe Photoshop CS4 Windows"/> <rdf:li stEvt:action="saved" stEvt:instanceID="xmp.iid:818037EF1A96DE11B8B1F7A8EAF0CDF5" stEvt:when="2009-08-31T16:17:57 05:30" stEvt:softwareAgent="Adobe Photoshop CS4 Windows" stEvt:changed="/"/> <rdf:li stEvt:action="converted" stEvt:parameters="from application/vnd.adobe.photoshop to image/jpeg"/> <rdf:li stEvt:action="derived" stEvt:parameters="converted from application/vnd.adobe.photoshop to image/jpeg"/> <rdf:li stEvt:action="saved" stEvt:instanceID="xmp.iid:828037EF1A96DE11B8B1F7A8EAF0CDF5" stEvt:when="2009-08-31T16:17:57 05:30" stEvt:softwareAgent="Adobe Photoshop CS4 Windows" stEvt:changed="/"/> </rdf:Seq> </xmpMM:History> <xmpMM:DerivedFrom stRef:instanceID="xmp.iid:818037EF1A96DE11B8B1F7A8EAF0CDF5" stRef:documentID="xmp.did:6529C00A1296DE11B8B1F7A8EAF0CDF5" stRef:originalDocumentID="xmp.did:6729C00A1296DE11B8B1F7A8EAF0CDF5"/> </rdf:Description> </rdf:RDF> </x:xmpmeta> <?xpacket end="w"?>
2009:09:01 19:13:27
ehXXp://ns.adobe.com/xap/1.0/
" id="W5M0MpCehiHzreSzNTczkc9d"?> <x:xmpmeta xmlns:x="adobe:ns:meta/" x:xmptk="Adobe XMP Core 4.2.2-c063 53.352624, 2008/07/30-18:12:18 "> <rdf:RDF xmlns:rdf="hXXp://VVV.w3.org/1999/02/22-rdf-syntax-ns#"> <rdf:Description rdf:about="" xmlns:xmp="hXXp://ns.adobe.com/xap/1.0/" xmlns:dc="hXXp://purl.org/dc/elements/1.1/" xmlns:xmpMM="hXXp://ns.adobe.com/xap/1.0/mm/" xmlns:stEvt="hXXp://ns.adobe.com/xap/1.0/sType/ResourceEvent#" xmlns:stRef="hXXp://ns.adobe.com/xap/1.0/sType/ResourceRef#" xmlns:tiff="hXXp://ns.adobe.com/tiff/1.0/" xmlns:exif="hXXp://ns.adobe.com/exif/1.0/" xmlns:photoshop="hXXp://ns.adobe.com/photoshop/1.0/" xmp:CreatorTool="Adobe Photoshop CS4 Windows" xmp:CreateDate="2009-08-31T16:10:09 05:30" xmp:MetadataDate="2009-09-01T19:13:27 05:30" xmp:ModifyDate="2009-09-01T19:13:27 05:30" dc:format="image/jpeg" xmpMM:InstanceID="xmp.iid:F1B2CD74F596DE11BBDAB5D8D180CF22" xmpMM:DocumentID="xmp.did:6529C00A1296DE11B8B1F7A8EAF0CDF5" xmpMM:OriginalDocumentID="xmp.did:6729C00A1296DE11B8B1F7A8EAF0CDF5" tiff:Orientation="1" tiff:XResolution="720090/10000" tiff:YResolution="720090/10000" tiff:ResolutionUnit="2" tiff:NativeDigest="256,257,258,259,262,274,277,284,530,531,282,283,296,301,318,319,529,532,306,270,271,272,305,315,33432;4E00F4DAC50EBB50AEEA72E3DBCA0E98" exif:PixelXDimension="60" exif:PixelYDimension="60" exif:ColorSpace="1" exif:NativeDigest="36864,40960,40961,37121,37122,40962,40963,37510,40964,36867,36868,33434,33437,34850,34852,34855,34856,37377,37378,37379,37380,37381,37382,37383,37384,37385,37386,37396,41483,41484,41486,41487,41488,41492,41493,41495,41728,41729,41730,41985,41986,41987,41988,41989,41990,41991,41992,41993,41994,41995,41996,42016,0,2,4,5,6,7,8,9,10,11,12,13,14,15,16,17,18,20,22,23,24,25,26,27,28,30;B22D5A9BC7549E7A8AB88C762634CF58" photoshop:ColorMode="3" photoshop:ICCProfile="sRGB IEC61966-2.1"> <xmpMM:History> <rdf:Seq> <rdf:li stEvt:action="created" stEvt:instanceID="xmp.iid:6729C00A1296DE11B8B1F7A8EAF0CDF5" stEvt:when="2009-08-31T16:10:09 05:30" stEvt:softwareAgent="Adobe Photoshop CS4 Windows"/> <rdf:li stEvt:action="saved" stEvt:instanceID="xmp.iid:8CFB727F1E96DE11B8B1F7A8EAF0CDF5" stEvt:when="2009-08-31T16:43:54 05:30" stEvt:softwareAgent="Adobe Photoshop CS4 Windows" stEvt:changed="/"/> <rdf:li stEvt:action="saved" stEvt:instanceID="xmp.iid:EFB2CD74F596DE11BBDAB5D8D180CF22" stEvt:when="2009-09-01T19:13:20 05:30" stEvt:softwareAgent="Adobe Photoshop CS4 Windows" stEvt:changed="/"/> <rdf:li stEvt:action="saved" stEvt:instanceID="xmp.iid:F0B2CD74F596DE11BBDAB5D8D180CF22" stEvt:when="2009-09-01T19:13:27 05:30" stEvt:softwareAgent="Adobe Photoshop CS4 Windows" stEvt:changed="/"/> <rdf:li stEvt:action="converted" stEvt:parameters="from application/vnd.adobe.photoshop to image/jpeg"/> <rdf:li stEvt:action="derived" stEvt:parameters="converted from application/vnd.adobe.photoshop to image/jpeg"/> <rdf:li stEvt:action="saved" stEvt:instanceID="xmp.iid:F1B2CD74F596DE11BBDAB5D8D180CF22" stEvt:when="2009-09-01T19:13:27 05:30" stEvt:softwareAgent="Adobe Photoshop CS4 Windows" stEvt:changed="/"/> </rdf:Seq> </xmpMM:History> <xmpMM:DerivedFrom stRef:instanceID="xmp.iid:F0B2CD74F596DE11BBDAB5D8D180CF22" stRef:documentID="xmp.did:6529C00A1296DE11B8B1F7A8EAF0CDF5" stRef:originalDocumentID="xmp.did:6729C00A1296DE11B8B1F7A8EAF0CDF5"/> </rdf:Description> </rdf:RDF> </x:xmpmeta> <?xpacket end="w"?>
"Y-%U
var theTable = document.frames[0].document.all['resulttable'];
var lastRow = theTable.rows.length;
theTable.deleteRow(0);
return parseInt(document.frmresult.problemid.value);
I1.event.srcElement.className = 'withoutbg';
I1.event.srcElement.className = 'withbg';
window.parent.document.frmresult.problemid.value = I1.event.srcElement.id;
window.parent.document.getElementById('problemid').click();function addrow(id, Title, imageurl, Desc, probCount, strDetails)
var Row = theTable.insertRow();
Row.setAttribute('id',id);Cell = Row.insertCell();
Cell1 = Row.insertCell();
Cell.setAttribute('width', '15%');Row.setAttribute('className', 'withbg');Cell.innerHTML = "<img src=" imageurl " /> ";
Cell1.innerHTML = "<A onclick=setid(" id ")><b><font color=272727>" Title "</font></b></a><br></font><A onclick=setid(" id ")>" Desc "</a></font>";Row.onmouseover = ClassChangeOnOver;
Row.onmouseout = ClassChangeOnOut;
Row.OnClick = setnewid;
switch (event.keyCode)
event.keyCode = 0;
event.returnValue = false;
<body onkeydown = "disableRefresh()" bgcolor="" topmargin=0 leftmargin=0>
<td width=100% align=left valign=top><iframe name='I1' onkeydown = "disableRefresh()" width=100% height=100% scrolling=yes src="results.htm"></iframe></td>
window.parent.document.frmresult.problemid.value=id;
switch (event.keyCode)
event.keyCode = 0;
event.returnValue = false;
var elem = event.srcElement;
//alert(elem.id);
id = elem.id;
elem = elem.parentElement;
} while (!(document.frames[0].document.all[id]))
document.frames[0].document.getElementById(id).className = 'withoutbg';
event.srcElement.className = 'withoutbg';
event.srcElement.className = 'withbg';
.LightGrayNormalText
.LightBlueBoldText
.withbg{background-image: url(IDB_SEARCH_MIDDLEBG.GIF);
.withoutbg{background-image: url(Transparent.GIF);
<body onkeydown = "disableRefresh()" topmargin=0 leftmargin=0 background=IDB_SEARCH_MIDDLEBG.GIF>
<body onkeydown = "disableRefresh()" bgcolor="#FFFFFF">
<td colspan=2 background="headerbg.gif">
<td background="headerbg.gif">
//document.frames[0].document.all['schedule_daily'].innerHTML
var theTable = document.frames[0].document.all['resulttable'];
function addrow(id,imageurl,Title,Desc,probCount,strDetails)
//var lastRow = theTable.rows.length;
var Row1=theTable.insertRow();
firstCell=Row1.insertCell();
firstCell.setAttribute('colspan',3);firstCell.setAttribute('height',1);firstCell.setAttribute('bgcolor',"#FFFFFF");Row.setAttribute('border',1);Cell1 = Row.insertCell();
Cell2 = Row.insertCell();
Cell.setAttribute('width','7%');Cell1.setAttribute('width','75%');Cell2.setAttribute('width','18%');Cell1.innerHTML = "<font face = arial style='font-size:13px;' color = '#0467ff' this.style.background='#FFFFFF'><A style='cursor:hand; cursor:pointer'onclick=setid(" id ")> <b><u>" Title "</u></b></a><br></font><font face = arial style='font-size:13px;' color = black>" Desc "</font>";Cell2.innerHTML = "<div align=right ><font face = arial style='font-size:13px;'>" probCount "</font><br><A style='cursor:hand; cursor:pointer;' onclick=setid(" id ")> <font face = arial style='font-size:13px;' color = '#0467ff' ><u>" strDetails "</u></font> </a></div>";Cell.innerHTML = "<div align=right > <img src=" imageurl " /></div>";
Cell1.innerHTML = "<div align=left background='#adc3e2' ><font face = verdana size = 2pt color = blue><A style='cursor:hand; cursor:pointer'onclick=setid(" id ")> <b>" Title "</b></a><br></font><font face = verdana size = 2pt color = black>" Desc "</font></div>";Cell2.innerHTML = "<div align=right this.style.background='#adc3e2' ><font face = verdana size = 2pt>" probCount "</font><br><A style='cursor:hand; cursor:pointer' onclick=setid(" id ")> <font face = verdana size = 2pt color = blue> Details</font> </a></div>";//onmouseover=this.style.background='#adc3e2' onmouseout=this.style.background='#ffffff'
//document.all['resulttable'].style.cursor='hand';
document[img_name].src = img_src;
<body onkeydown = "disableRefresh()" bgcolor="#FFFFFF" >
<iframe onkeydown = "disableRefresh()" width=100% height=100% scrolling=auto marginheight=2 marginwidth=2 src="ACTION_CENTER.HTM"></iframe>
return parseInt(document.frmresult.problemid.value);
var mayval = parseInt(document.frmresult.checkboxvalue.value);
return (document.frmresult.textboxid.value);
var mayval = parseInt(document.frmresult.textboxvalue.value);
Row.setAttribute('border', 1);Row.setAttribute('height', 50);Cell.setAttribute('width', '5%');Cell.setAttribute('vAlign', 'top');Cell.innerHTML = "<table><tr><td style=padding-top:2px;><input type=checkbox id=" id " onclick=OnSetCheckUncheck(this) checked></td></tr></table>";
Cell.innerHTML = "<table><tr><td style=padding-top:2px;><input type=checkbox id=" id " onclick=OnSetCheckUncheck(this)></td></tr></table>";
Cell1.innerHTML = "<table width=100% cellpadding=0 cellspacing=0><tr><td><font face = arial style='font-size:12px;' color = '#0467ff' this.style.background='#FFFFFF'>" Title "</font></td></tr><tr><td><table cellpadding=0 cellspacing=0><tr><td><font face = arial style='font-size:12px;' color = black>" Note1 "</font></td><td> <input type=text id='txt" id "' value=" probCount " onblur=GetTextBoxVal(this); style='width:40px; height:20px;'> </td><td><font face = arial style='font-size:12px;' color = 'black' > " Note2 "</font></td></tr></table></td></tr></table>";
document[img_name].src = img_src;
<iframe onkeydown = "disableRefresh()" width=100% height=100% scrolling=auto marginheight=2 marginwidth=2 src="ALERT_SETTINGS.HTM"></iframe>
window.parent.document.frmresult.problemid.value = str.id;
if (str.checked) {window.parent.document.frmresult.checkboxvalue.value = 1;
window.parent.document.frmresult.checkboxvalue.value = 0;
window.parent.document.frmresult.textboxid.value = var1.id;
window.parent.document.frmresult.textboxvalue.value = var1.value;
window.parent.document.getElementById('textboxid').click();4%4X4v4
0$0-0>0^0~0
9-9A9U9i9}9
>">)>/>=>
? ?$?(?,?0?4?
8B003BA9-D593-49d5-B60F-5FD67EC6FB59
%Program Files% (x86)\Microsoft Visual Studio 9.0\VC\atlmfc\include\afxwin1.inl
%s (%s:%d)
NewScheduler.exe
system_cleaner_icon.jpg
registry_icon.jpg
Registry_Optimizer_icon.jpg
disk_defrag_icon.jpg
Disk_Checkup_icons.jpg
Dsik_info_icons.jpg
Windows_Tuneup_icon.jpg
memoptimizer_icons.jpg
DriverBackupandUpdate_icon.jpg
AntiSpyware_icon.jpg
PrivacyProtecxtor_icon.jpg
securedelete_icon.jpg
secure_encryptor.jpg
Undelete_icon.jpg
backup_manager_icons.jpg
backupandrestore_icons.jpg
RepairWizard_icons.jpg
systemanalyzer_icons.jpg
findduplicatefiles_icon.jpg
Startup_Manager_icon.jpg
Uninstall_Manager_icon.jpg
Scheduler_icon.jpg
onlineHelp.jpg
about.jpg
buyNow.jpg
support.jpg
IDS_SEARCH_SUPPORT
checkForUpdates.jpg
register.jpg
smartPC_Care.jpg
game_optimizer.jpg
support
Support
SystemCleaner.exe
RegClean.exe
RegistryOptimizer.exe
DiskOptimizer.exe
DiskDoctor.exe
DiskExplorer.exe
MemoryOptimizer.exe
DriverUpdater.exe
SystemProtector.exe
PrivacyProtector.exe
SecureDelete.exe
SecureEncryptor.exe
Undelete.exe
BackupManager.exe
SysFileBakRes.exe
PCFixer.exe
SystemAnalyzerAndAdvisor.exe
DuplicateFilesRemover.exe
StartupManager.exe
UninstallManager.exe
GameOptimizer.exe
CheckUpdate.exe
IDS_RECENTMSG_RESOLPRB
IDC_BTN_RESULT_EXPORT_REG
CREGISTER.JPG
REGISTRY_ICON.JPG
ANTISPYWARE_ICON.JPG
DRIVERBACKUPANDUPDATE_ICON.JPG
BACKUPANDRESTORE_ICONS.JPG
PRIVACYPROTECXTOR_ICON.JPG
SYSTEM_CLEANER_ICON.JPG
REGISTRY_OPTIMIZER_ICON.JPG
DISK_DEFRAG_ICON.JPG
IDC_BTN_WINDOWS_OPTIMIZERS
IDS_MSG
IDS_MSGS
IDS_NUMOF_IMPORTANT
IDS_SPC_OPERATION_INPROCE
B.doc
%s /HandleDocument:%%1
ASO_NEWINSTALL_MESSAGE_TO_BE_PASSED_TO_RUNNING_INSTANCE
PSAPI.dll
Software\Microsoft\Windows\CurrentVersion\Run
"%s" /autorun
Template\SPC_Report\spcoptreport.htm
Template\SPC_Report\spcscanreport.htm
\pipe\aso3launcher_rpcecho_homeserver
\pipe\aso3launcher_rpcecho_regopt
\pipe\aso3launcher_rpcecho_regclean
\pipe\aso3launcher_rpcecho_driverupdater
\pipe\aso3launcher_rpcecho_pp
\pipe\aso3launcher_rpcecho_antispyware
\pipe\aso3launcher_rpcecho_defrag
\pipe\aso3launcher_rpcecho_systemcleaner
RPC error: %d
Couldn't find launched %s.
BMicrosoft_Sample_4.doc
Microsoft_Sample_3.doc
Microsoft_Sample_2.txt
Microsoft_Sample_1.txt
HighestAvailable.exe
RequireAdministrator.exe
aso3.exe
%s %s
info.ico
Help.ico
Advanced System Optimizer Help.url
IDS_COMP_WEBSITE_URL
website.ico
Systweak Software Website.url
Associators of {Win32_DiskDrive.DeviceID='\\.\Associators of {Win32_DiskPartition.DeviceID='IDB_SEARCH_SYSTEM_CLEANER.BMP
IDB_SEARCH_DISK_DEFRAG.BMP
IDB_SEARCH_HEADER.GIF
TRANSPARENT.GIF
IDB_SEARCH_MIDDLEBG.GIF
IDB_SEARCH_SINGLEBG.GIF
ANTISPYWARE_ICON.JPG
BACKUP_MANAGER_ICONS.JPG
DISK_CHECKUP_ICONS.JPG
DSIK_INFO_ICONS.JPG
FINDDUPLICATEFILES_ICON.JPG
INTRO_ICON.JPG
MEMOPTIMIZER_ICONS.JPG
ONECLICKFIX-UP_ICONS.JPG
REPAIRWIZARD_ICONS.JPG
SCHEDULER_ICON.JPG
SECUREDELETE_ICON.JPG
STARTUP_MANAGER_ICON.JPG
SYSTEMANALYZER_ICONS.JPG
UNDELETE_ICON.JPG
UNINSTALL_MANAGER_ICON.JPG
UPDATE_ICON.JPG
WINDOWS_TUNEUP_ICON.JPG
ABOUT.JPG
BUYNOW.JPG
CHECKFORUPDATES.JPG
ONLINEHELP.JPG
REGISTER.JPG
SECURE_ENCRYPTOR.JPG
SMARTPC_CARE.JPG
SUPPORT.JPG
GAME_OPTIMIZER.JPG
RESULTS.HTM
ACTION_CENTER.HTM
ALERT_SETTINGS.HTM
3.9.1111.16526
Remove it with Ad-Aware
- Click (here) to download and install Ad-Aware Free Antivirus.
- Update the definition files.
- Run a full scan of your computer.
Manual removal*
- Terminate malicious process(es) (How to End a Process With the Task Manager):
ASO3.exe:340
CheckUpdate.exe:516
schtasks.exe:1128
schtasks.exe:1364
regedit.exe:264
%original file name%.exe:228 - Delete the original Trojan file.
- Delete or disinfect the following files created/modified by the Trojan:
%Documents and Settings%\%current user%\Local Settings\Temporary Internet Files\Content.IE5\GDE3MT21\desktop.ini (67 bytes)
%Documents and Settings%\%current user%\Local Settings\Temporary Internet Files\Content.IE5\desktop.ini (67 bytes)
%Documents and Settings%\%current user%\Local Settings\History\History.IE5\desktop.ini (159 bytes)
%Documents and Settings%\%current user%\Local Settings\Temporary Internet Files\Content.IE5\CRMNWZYD\desktop.ini (67 bytes)
%Documents and Settings%\%current user%\Local Settings\Temporary Internet Files\Content.IE5\GLSHOFWZ\desktop.ini (67 bytes)
%Documents and Settings%\%current user%\Local Settings\Temporary Internet Files\Content.IE5\6RMRY1S9\desktop.ini (67 bytes)
%Documents and Settings%\%current user%\Application Data\Systweak\ASO3\Checking for Updates\AppUpdates\LatestVersion.htm (832 bytes)
%Program Files%\Common Files\Advanced System Optimizer\App\SecureDelete.exe (10347 bytes)
%Program Files%\Common Files\Advanced System Optimizer\App\DefragReport\Report_header_leftText.jpg (14 bytes)
%Program Files%\Common Files\Advanced System Optimizer\App\DiskOptimizer.exe (848 bytes)
%Program Files%\Common Files\Advanced System Optimizer\App\Xceed.FileSystem.dll (584 bytes)
%Program Files%\Common Files\Advanced System Optimizer\App\Microsoft.VC90.ATL.manifest (353 bytes)
%Program Files%\Common Files\Advanced System Optimizer\App\clamunpack\clamscan.exe (15 bytes)
%Program Files%\Common Files\Advanced System Optimizer\App\info.ico (1 bytes)
%Program Files%\Common Files\Advanced System Optimizer\App\RegClean.exe (11276 bytes)
%Program Files%\Common Files\Advanced System Optimizer\App\BackupManager.exe (18844 bytes)
%Program Files%\Common Files\Advanced System Optimizer\App\SystemProtector.XmlSerializers.dll (45 bytes)
%Program Files%\Common Files\Advanced System Optimizer\App\MFC90ENU.dll (754 bytes)
%Program Files%\Common Files\Advanced System Optimizer\App\DiskExplorer.exe (9732 bytes)
%Program Files%\Common Files\Advanced System Optimizer\App\sqlite3.dll (6101 bytes)
%Program Files%\Common Files\Advanced System Optimizer\App\ASOHelper.dll (8600 bytes)
%Program Files%\Common Files\Advanced System Optimizer\App\GOHelper.exe (37 bytes)
%Program Files%\Common Files\Advanced System Optimizer\App\eng\driveropt.ini (70 bytes)
%Program Files%\Common Files\Advanced System Optimizer\App\Xceed.Zip.dll (1430 bytes)
%Program Files%\Common Files\Advanced System Optimizer\App\updater\extract\copying.txt (26 bytes)
%Program Files%\Common Files\Advanced System Optimizer\App\HookDll64.dll (395 bytes)
%Program Files%\Common Files\Advanced System Optimizer\App\VolumeControl64.exe (515 bytes)
%Program Files%\Common Files\Advanced System Optimizer\App\eng\regclean.ini (82 bytes)
%Program Files%\Common Files\Advanced System Optimizer\App\RegistryOptimizer.exe (3599 bytes)
%Program Files%\Common Files\Advanced System Optimizer\App\eng\sysfilebackres.ini (23 bytes)
%Program Files%\Common Files\Advanced System Optimizer\App\eng\regopt.ini (12 bytes)
%Program Files%\Common Files\Advanced System Optimizer\App\updater\extract\7z.exe (267 bytes)
%Program Files%\Common Files\Advanced System Optimizer\App\updater\vista\DriverRestore.manifest (682 bytes)
%Program Files%\Common Files\Advanced System Optimizer\App\updater\amd64Helper\DriverUpdateHelper64.manifest (689 bytes)
%Program Files%\Common Files\Advanced System Optimizer\App\DefragReport\Report_header_top_middle.jpg (7 bytes)
%Program Files%\Common Files\Advanced System Optimizer\App\updater\win7i386\DriverRestore.exe (84 bytes)
%Program Files%\Common Files\Advanced System Optimizer\App\eng\startupman.ini (10 bytes)
%Program Files%\Common Files\Advanced System Optimizer\Portable1.reg (11 bytes)
%Program Files%\Common Files\Advanced System Optimizer\App\ScanDll.dll (64 bytes)
%Program Files%\Common Files\Advanced System Optimizer\App\updater\amd64\DriverRestore.exe (1635 bytes)
%Program Files%\Common Files\Advanced System Optimizer\App\website.ico (1 bytes)
%Program Files%\Common Files\Advanced System Optimizer\App\eng\secencrypt.ini (26 bytes)
%Program Files%\Common Files\Advanced System Optimizer\App\eng\aso.ini (135 bytes)
%Program Files%\Common Files\Advanced System Optimizer\App\PTBWin7.exe (20 bytes)
%Program Files%\Common Files\Advanced System Optimizer\App\AsInvoker.exe (64 bytes)
%Program Files%\Common Files\Advanced System Optimizer\App\aspcomm.dll (2741 bytes)
%Program Files%\Common Files\Advanced System Optimizer\App\DefragReport\right_border.jpg (11 bytes)
%Program Files%\Common Files\Advanced System Optimizer\App\DefragReport\footer_middle.jpg (7 bytes)
%Program Files%\Common Files\Advanced System Optimizer\App\updater\extract\readme.txt (1 bytes)
%Program Files%\Common Files\Advanced System Optimizer\App\asodemo.exe (6577 bytes)
%Program Files%\Common Files\Advanced System Optimizer\Delete1.reg (11 bytes)
%Program Files%\Common Files\Advanced System Optimizer\App\HookDll.dll (56 bytes)
%Program Files%\Common Files\Advanced System Optimizer\App\Microsoft.VC90.MFCLOC.manifest (670 bytes)
%Program Files%\Common Files\Advanced System Optimizer\App\RequireAdministrator.exe (1846 bytes)
%Program Files%\Common Files\Advanced System Optimizer\App\BeforeUninstall.exe (13907 bytes)
%Program Files%\Common Files\Advanced System Optimizer\App\eng\undelete.ini (28 bytes)
%Program Files%\Common Files\Advanced System Optimizer\App\DriverUpdater.exe (8022 bytes)
%Program Files%\Common Files\Advanced System Optimizer\App\updater\win7amd64\DriverRestore.manifest (682 bytes)
%Program Files%\Common Files\Advanced System Optimizer\App\aso3sys.dll (6771 bytes)
%Program Files%\Common Files\Advanced System Optimizer\Delete.reg (5 bytes)
%Program Files%\Common Files\Advanced System Optimizer\App\eng\securedelete.ini (39 bytes)
%Program Files%\Common Files\Advanced System Optimizer\App\SevenZipSharp.dll (1223 bytes)
%Program Files%\Common Files\Advanced System Optimizer\App\clamunpack\readme.txt (535 bytes)
%Program Files%\Common Files\Advanced System Optimizer\App\ASEng.dll (1678 bytes)
%Program Files%\Common Files\Advanced System Optimizer\App\eng\diskdoc.ini (32 bytes)
%Program Files%\Common Files\Advanced System Optimizer\App\atl90.dll (1395 bytes)
%Program Files%\Common Files\Advanced System Optimizer\App\Advanced System Optimizer Help.url (432 bytes)
%Program Files%\Common Files\Advanced System Optimizer\App\SystemCleaner.exe (17655 bytes)
%Program Files%\Common Files\Advanced System Optimizer\App\PrivacyProtector.exe (12628 bytes)
%Program Files%\Common Files\Advanced System Optimizer\App\updater\vista\DriverRestore.exe (722 bytes)
%Program Files%\Common Files\Advanced System Optimizer\App\DiskDoctor.exe (3123 bytes)
%Program Files%\Common Files\Advanced System Optimizer\App\GameOptLauncher64.exe (2512 bytes)
%Program Files%\Common Files\Advanced System Optimizer\App\XceedZip.dll (1468 bytes)
%Program Files%\Common Files\Advanced System Optimizer\App\xmllite.dll (861 bytes)
%Program Files%\Common Files\Advanced System Optimizer\App\DefragReport\Report_header_left_image.jpg (11 bytes)
%Program Files%\Common Files\Advanced System Optimizer\App\launcher.exe (47 bytes)
%Program Files%\Common Files\Advanced System Optimizer\App\eng\backupman.ini (78 bytes)
%Program Files%\Common Files\Advanced System Optimizer\App\eng\memopt.ini (12 bytes)
%Program Files%\Common Files\Advanced System Optimizer\App\updater\win7i386\DriverRestore.manifest (682 bytes)
%Program Files%\Common Files\Advanced System Optimizer\App\aspsys.dll (1708 bytes)
%Program Files%\Common Files\Advanced System Optimizer\App\MemoryOptimizer.exe (2376 bytes)
%Program Files%\Common Files\Advanced System Optimizer\App\difxapi64.dll (4584 bytes)
%Program Files%\Common Files\Advanced System Optimizer\App\mfc90u.dll (34642 bytes)
%Program Files%\Common Files\Advanced System Optimizer\App\eng\DiskOpt.ini (19 bytes)
%Program Files%\Common Files\Advanced System Optimizer\App\UndeleteDLL.dll (1415 bytes)
%Program Files%\Common Files\Advanced System Optimizer\App\HighestAvailable.exe (753 bytes)
%Program Files%\Common Files\Advanced System Optimizer\App\SystemProtector.exe (38774 bytes)
%Program Files%\Common Files\Advanced System Optimizer\App\AppResource.dll (17986 bytes)
%Program Files%\Common Files\Advanced System Optimizer\App\VolumeControl.exe (49 bytes)
%Program Files%\Common Files\Advanced System Optimizer\ASO3portable.exe (697 bytes)
%Program Files%\Common Files\Advanced System Optimizer\App\asplangs\categories.ini (42 bytes)
%Program Files%\Common Files\Advanced System Optimizer\App\ASO3DefragSrv64.exe (2241 bytes)
%Program Files%\Common Files\Advanced System Optimizer\App\database.dat (32 bytes)
%Program Files%\Common Files\Advanced System Optimizer\App\ASO3DefragSrv.exe (3340 bytes)
%Program Files%\Common Files\Advanced System Optimizer\App\ASO3.exe (27333 bytes)
%Program Files%\Common Files\Advanced System Optimizer\App\eng\sysadvisor.ini (104 bytes)
%Program Files%\Common Files\Advanced System Optimizer\App\GameOptLauncher.exe (1922 bytes)
%Program Files%\Common Files\Advanced System Optimizer\App\eng\newscheduler.ini (8 bytes)
%Program Files%\Common Files\Advanced System Optimizer\App\updater\extract\license.txt (2 bytes)
%Program Files%\Common Files\Advanced System Optimizer\App\msvcp90.dll (7063 bytes)
%Program Files%\Common Files\Advanced System Optimizer\App\eng\checkupdate.ini (12 bytes)
%Program Files%\Common Files\Advanced System Optimizer\App\Systweak Software Website.url (245 bytes)
%Program Files%\Common Files\Advanced System Optimizer\App\single_click_care.ico (15 bytes)
%Program Files%\Common Files\Advanced System Optimizer\App\eng\gameopt.ini (8 bytes)
%Program Files%\Common Files\Advanced System Optimizer\App\clamunpack\libclamav.dll (5447 bytes)
%Program Files%\Common Files\Advanced System Optimizer\App\Microsoft.VC90.MFC.manifest (349 bytes)
%Program Files%\Common Files\Advanced System Optimizer\App\Undelete.exe (2603 bytes)
%Program Files%\Common Files\Advanced System Optimizer\App\NewScheduler.exe (7142 bytes)
%Program Files%\Common Files\Advanced System Optimizer\App\Interop.IWshRuntimeLibrary.dll (49 bytes)
%Program Files%\Common Files\Advanced System Optimizer\App\KillASOProcesses.exe (227 bytes)
%Program Files%\Common Files\Advanced System Optimizer\App\eng\diskexplorer.ini (21 bytes)
%Program Files%\Common Files\Advanced System Optimizer\App\eng\client.ini (65 bytes)
%Program Files%\Common Files\Advanced System Optimizer\App\DefragServiceManager.exe (71 bytes)
%Program Files%\Common Files\Advanced System Optimizer\App\updater\amd64\DriverRestore.manifest (682 bytes)
%Program Files%\Common Files\Advanced System Optimizer\App\difxapi.dll (3413 bytes)
%Program Files%\Common Files\Advanced System Optimizer\App\PCFixer.exe (6753 bytes)
%Program Files%\Common Files\Advanced System Optimizer\App\Microsoft.Win32.TaskScheduler.dll (1929 bytes)
%Program Files%\Common Files\Advanced System Optimizer\App\eng\pcfixer.ini (24 bytes)
%Program Files%\Common Files\Advanced System Optimizer\App\asores.dll (65453 bytes)
%Program Files%\Common Files\Advanced System Optimizer\App\eng\sysclean.ini (52 bytes)
%Program Files%\Common Files\Advanced System Optimizer\App\updater\xp\DriverRestore.exe (62 bytes)
%Program Files%\Common Files\Advanced System Optimizer\App\updater\win7amd64\DriverRestore.exe (917 bytes)
%Program Files%\Common Files\Advanced System Optimizer\App\msvcr90.dll (3847 bytes)
%Program Files%\Common Files\Advanced System Optimizer\App\asplangs\eng_asp_en.ini (101 bytes)
%Program Files%\Common Files\Advanced System Optimizer\App\Xceed.Compression.dll (552 bytes)
%Program Files%\Common Files\Advanced System Optimizer\App\eng\dupfileremover.ini (28 bytes)
%Program Files%\Common Files\Advanced System Optimizer\App\rw.dat (7386 bytes)
%Program Files%\Common Files\Advanced System Optimizer\App\GameOptimizer.exe (1948 bytes)
%Program Files%\Common Files\Advanced System Optimizer\App\Downloader.dll (1425 bytes)
%Program Files%\Common Files\Advanced System Optimizer\App\SystemProtector.exe.config (4 bytes)
%Program Files%\Common Files\Advanced System Optimizer\App\System.Data.SQLite.dll (6225 bytes)
%Program Files%\Common Files\Advanced System Optimizer\App\SecureShell.dll (5525 bytes)
%Program Files%\Common Files\Advanced System Optimizer\App\updater\extract\7z.dll (8067 bytes)
%Program Files%\Common Files\Advanced System Optimizer\App\Network.dll (4748 bytes)
%Program Files%\Common Files\Advanced System Optimizer\App\Buy Advanced System Optimizer.url (331 bytes)
%Program Files%\Common Files\Advanced System Optimizer\App\DefragReport\footer_right.jpg (11 bytes)
%Program Files%\Common Files\Advanced System Optimizer\App\categories.ini (42 bytes)
%Program Files%\Common Files\Advanced System Optimizer\App\DefragReport\line3px_Blue.jpg (11 bytes)
%Program Files%\Common Files\Advanced System Optimizer\App\CheckUpdate.exe (27994 bytes)
%Program Files%\Common Files\Advanced System Optimizer\App\DefragReport\Report_header_top_right.jpg (12 bytes)
%Program Files%\Common Files\Advanced System Optimizer\App\StartupManager.exe (1706 bytes)
%Program Files%\Common Files\Advanced System Optimizer\App\SysFileBakRes.exe (4335 bytes)
%Program Files%\Common Files\Advanced System Optimizer\App\eng\UninstallManager.ini (5 bytes)
%Program Files%\Common Files\Advanced System Optimizer\App\unrar.dll (1349 bytes)
%Program Files%\Common Files\Advanced System Optimizer\App\Help.ico (1 bytes)
%Program Files%\Common Files\Advanced System Optimizer\App\SecureEncryptor.exe (1854 bytes)
%Program Files%\Common Files\Advanced System Optimizer\App\updater\extract\History.txt (29 bytes)
%Program Files%\Common Files\Advanced System Optimizer\App\System.Core.dll (8923 bytes)
%Program Files%\Common Files\Advanced System Optimizer\App\zlibwapi.dll (319 bytes)
%Program Files%\Common Files\Advanced System Optimizer\App\rw.ini (54 bytes)
%Program Files%\Common Files\Advanced System Optimizer\App\Microsoft.VC90.CRT.manifest (391 bytes)
%Program Files%\Common Files\Advanced System Optimizer\App\DuplicateFilesRemover.exe (460 bytes)
%Program Files%\Common Files\Advanced System Optimizer\App\updater\amd64Helper\DriverUpdateHelper64.exe (2221 bytes)
%Program Files%\Common Files\Advanced System Optimizer\App\asohtm.dll (3901 bytes)
%Program Files%\Common Files\Advanced System Optimizer\App\Xceed.Compression.Formats.dll (1916 bytes)
%Program Files%\Common Files\Advanced System Optimizer\App\eng\privprotector.ini (44 bytes)
%Program Files%\Common Files\Advanced System Optimizer\App\DefragReport\footer_left.jpg (11 bytes)
%Program Files%\Common Files\Advanced System Optimizer\Portable.reg (14 bytes)
%Program Files%\Common Files\Advanced System Optimizer\App\DefragReport\left_border.jpg (11 bytes)
%Program Files%\Common Files\Advanced System Optimizer\App\UninstallManager.exe (692 bytes)
%Program Files%\Common Files\Advanced System Optimizer\App\Order.ico (1 bytes)
%Program Files%\Common Files\Advanced System Optimizer\App\SystemAnalyzerAndAdvisor.exe (5321 bytes) - Clean the Temporary Internet Files folder, which may contain infected files (How to clean Temporary Internet Files folder).
- Reboot the computer.
*Manual removal may cause unexpected system behaviour and should be performed at your own risk.