Trojan.Generic.12220278_b14471f648

by malwarelabrobot on January 15th, 2015 in Malware Descriptions.

Trojan.Generic.12220278 (AdAware), WormAutoItGen.YR (Lavasoft MAS)
Behaviour: Trojan, Worm


The description has been automatically generated by Lavasoft Malware Analysis System and it may contain incomplete or inaccurate information.

Requires JavaScript enabled!

Summary
Dynamic Analysis
Static Analysis
Network Activity
Map
Strings from Dumps
Removals

MD5: b14471f648f9710fa322c62ad8dc17f4
SHA1: e850562b06d759cdddb7418098acf2143b5d0e13
SHA256: 11419a15bd4011009e1b233baf96a89432a9c1d1b4553b965960480675b91cea
SSDeep: 393216:vONMtYgPi2RC3XozVkYrJ2NG1CTSOTXd8zXGLfYthwC3:ZYzbeVF2NG1lCdMsfYHF
Size: 13568965 bytes
File type: EXE
Platform: WIN32
Entropy: Packed
PEID: MicrosoftVisualC, MicrosoftVisualCv50v60MFC, MicrosoftVisualC50, Armadillov171, UPolyXv05_v6
Company: no certificate found
Created at: 2012-12-31 02:38:32
Analyzed on: WindowsXP SP3 32-bit


Summary:

Trojan. A program that appears to do one thing but actually does another (a.k.a. Trojan Horse).

Payload

No specific payload has been found.

Process activity

The Trojan creates the following process(es):

ASO3.exe:340
CheckUpdate.exe:516
schtasks.exe:1128
schtasks.exe:1364
regedit.exe:264
%original file name%.exe:228

The Trojan injects its code into the following process(es):

ASO3portable.exe:644

Mutexes

The following mutexes were created/opened:

ZonesLockedCacheCounterMutex
ZonesCacheCounterMutex
ZonesCounterMutex
ShimCacheMutex

File activity

The process ASO3.exe:340 makes changes in the file system.
The Trojan creates and/or writes to the following file(s):

%Documents and Settings%\%current user%\Local Settings\Temporary Internet Files\Content.IE5\GDE3MT21\desktop.ini (67 bytes)
%Documents and Settings%\%current user%\Local Settings\Temporary Internet Files\Content.IE5\desktop.ini (67 bytes)
%Documents and Settings%\%current user%\Local Settings\History\History.IE5\desktop.ini (159 bytes)
%Documents and Settings%\%current user%\Local Settings\Temporary Internet Files\Content.IE5\CRMNWZYD\desktop.ini (67 bytes)
%Documents and Settings%\%current user%\Local Settings\Temporary Internet Files\Content.IE5\GLSHOFWZ\desktop.ini (67 bytes)
%Documents and Settings%\%current user%\Local Settings\Temporary Internet Files\Content.IE5\6RMRY1S9\desktop.ini (67 bytes)

The process CheckUpdate.exe:516 makes changes in the file system.
The Trojan creates and/or writes to the following file(s):

%Documents and Settings%\%current user%\Application Data\Systweak\ASO3\Checking for Updates\AppUpdates\LatestVersion.htm (832 bytes)

The process %original file name%.exe:228 makes changes in the file system.
The Trojan creates and/or writes to the following file(s):

%Program Files%\Common Files\Advanced System Optimizer\App\SecureDelete.exe (10347 bytes)
%Program Files%\Common Files\Advanced System Optimizer\App\DefragReport\Report_header_leftText.jpg (14 bytes)
%Program Files%\Common Files\Advanced System Optimizer\App\DiskOptimizer.exe (848 bytes)
%Program Files%\Common Files\Advanced System Optimizer\App\Xceed.FileSystem.dll (584 bytes)
%Program Files%\Common Files\Advanced System Optimizer\App\Microsoft.VC90.ATL.manifest (353 bytes)
%Program Files%\Common Files\Advanced System Optimizer\App\clamunpack\clamscan.exe (15 bytes)
%Program Files%\Common Files\Advanced System Optimizer\App\info.ico (1 bytes)
%Program Files%\Common Files\Advanced System Optimizer\App\RegClean.exe (11276 bytes)
%Program Files%\Common Files\Advanced System Optimizer\App\BackupManager.exe (18844 bytes)
%Program Files%\Common Files\Advanced System Optimizer\App\SystemProtector.XmlSerializers.dll (45 bytes)
%Program Files%\Common Files\Advanced System Optimizer\App\MFC90ENU.dll (754 bytes)
%Program Files%\Common Files\Advanced System Optimizer\App\DiskExplorer.exe (9732 bytes)
%Program Files%\Common Files\Advanced System Optimizer\App\sqlite3.dll (6101 bytes)
%Program Files%\Common Files\Advanced System Optimizer\App\ASOHelper.dll (8600 bytes)
%Program Files%\Common Files\Advanced System Optimizer\App\GOHelper.exe (37 bytes)
%Program Files%\Common Files\Advanced System Optimizer\App\eng\driveropt.ini (70 bytes)
%Program Files%\Common Files\Advanced System Optimizer\App\Xceed.Zip.dll (1430 bytes)
%Program Files%\Common Files\Advanced System Optimizer\App\updater\extract\copying.txt (26 bytes)
%Program Files%\Common Files\Advanced System Optimizer\App\HookDll64.dll (395 bytes)
%Program Files%\Common Files\Advanced System Optimizer\App\VolumeControl64.exe (515 bytes)
%Program Files%\Common Files\Advanced System Optimizer\App\eng\regclean.ini (82 bytes)
%Program Files%\Common Files\Advanced System Optimizer\App\RegistryOptimizer.exe (3599 bytes)
%Program Files%\Common Files\Advanced System Optimizer\App\eng\sysfilebackres.ini (23 bytes)
%Program Files%\Common Files\Advanced System Optimizer\App\eng\regopt.ini (12 bytes)
%Program Files%\Common Files\Advanced System Optimizer\App\updater\extract\7z.exe (267 bytes)
%Program Files%\Common Files\Advanced System Optimizer\App\updater\vista\DriverRestore.manifest (682 bytes)
%Program Files%\Common Files\Advanced System Optimizer\App\updater\amd64Helper\DriverUpdateHelper64.manifest (689 bytes)
%Program Files%\Common Files\Advanced System Optimizer\App\DefragReport\Report_header_top_middle.jpg (7 bytes)
%Program Files%\Common Files\Advanced System Optimizer\App\updater\win7i386\DriverRestore.exe (84 bytes)
%Program Files%\Common Files\Advanced System Optimizer\App\eng\startupman.ini (10 bytes)
%Program Files%\Common Files\Advanced System Optimizer\Portable1.reg (11 bytes)
%Program Files%\Common Files\Advanced System Optimizer\App\ScanDll.dll (64 bytes)
%Program Files%\Common Files\Advanced System Optimizer\App\updater\amd64\DriverRestore.exe (1635 bytes)
%Program Files%\Common Files\Advanced System Optimizer\App\website.ico (1 bytes)
%Program Files%\Common Files\Advanced System Optimizer\App\eng\secencrypt.ini (26 bytes)
%Program Files%\Common Files\Advanced System Optimizer\App\eng\aso.ini (135 bytes)
%Program Files%\Common Files\Advanced System Optimizer\App\PTBWin7.exe (20 bytes)
%Program Files%\Common Files\Advanced System Optimizer\App\AsInvoker.exe (64 bytes)
%Program Files%\Common Files\Advanced System Optimizer\App\aspcomm.dll (2741 bytes)
%Program Files%\Common Files\Advanced System Optimizer\App\DefragReport\right_border.jpg (11 bytes)
%Program Files%\Common Files\Advanced System Optimizer\App\DefragReport\footer_middle.jpg (7 bytes)
%Program Files%\Common Files\Advanced System Optimizer\App\updater\extract\readme.txt (1 bytes)
%Program Files%\Common Files\Advanced System Optimizer\App\asodemo.exe (6577 bytes)
%Program Files%\Common Files\Advanced System Optimizer\Delete1.reg (11 bytes)
%Program Files%\Common Files\Advanced System Optimizer\App\HookDll.dll (56 bytes)
%Program Files%\Common Files\Advanced System Optimizer\App\Microsoft.VC90.MFCLOC.manifest (670 bytes)
%Program Files%\Common Files\Advanced System Optimizer\App\RequireAdministrator.exe (1846 bytes)
%Program Files%\Common Files\Advanced System Optimizer\App\BeforeUninstall.exe (13907 bytes)
%Program Files%\Common Files\Advanced System Optimizer\App\eng\undelete.ini (28 bytes)
%Program Files%\Common Files\Advanced System Optimizer\App\DriverUpdater.exe (8022 bytes)
%Program Files%\Common Files\Advanced System Optimizer\App\updater\win7amd64\DriverRestore.manifest (682 bytes)
%Program Files%\Common Files\Advanced System Optimizer\App\aso3sys.dll (6771 bytes)
%Program Files%\Common Files\Advanced System Optimizer\Delete.reg (5 bytes)
%Program Files%\Common Files\Advanced System Optimizer\App\eng\securedelete.ini (39 bytes)
%Program Files%\Common Files\Advanced System Optimizer\App\SevenZipSharp.dll (1223 bytes)
%Program Files%\Common Files\Advanced System Optimizer\App\clamunpack\readme.txt (535 bytes)
%Program Files%\Common Files\Advanced System Optimizer\App\ASEng.dll (1678 bytes)
%Program Files%\Common Files\Advanced System Optimizer\App\eng\diskdoc.ini (32 bytes)
%Program Files%\Common Files\Advanced System Optimizer\App\atl90.dll (1395 bytes)
%Program Files%\Common Files\Advanced System Optimizer\App\Advanced System Optimizer Help.url (432 bytes)
%Program Files%\Common Files\Advanced System Optimizer\App\SystemCleaner.exe (17655 bytes)
%Program Files%\Common Files\Advanced System Optimizer\App\PrivacyProtector.exe (12628 bytes)
%Program Files%\Common Files\Advanced System Optimizer\App\updater\vista\DriverRestore.exe (722 bytes)
%Program Files%\Common Files\Advanced System Optimizer\App\DiskDoctor.exe (3123 bytes)
%Program Files%\Common Files\Advanced System Optimizer\App\GameOptLauncher64.exe (2512 bytes)
%Program Files%\Common Files\Advanced System Optimizer\App\XceedZip.dll (1468 bytes)
%Program Files%\Common Files\Advanced System Optimizer\App\xmllite.dll (861 bytes)
%Program Files%\Common Files\Advanced System Optimizer\App\DefragReport\Report_header_left_image.jpg (11 bytes)
%Program Files%\Common Files\Advanced System Optimizer\App\launcher.exe (47 bytes)
%Program Files%\Common Files\Advanced System Optimizer\App\eng\backupman.ini (78 bytes)
%Program Files%\Common Files\Advanced System Optimizer\App\eng\memopt.ini (12 bytes)
%Program Files%\Common Files\Advanced System Optimizer\App\updater\win7i386\DriverRestore.manifest (682 bytes)
%Program Files%\Common Files\Advanced System Optimizer\App\aspsys.dll (1708 bytes)
%Program Files%\Common Files\Advanced System Optimizer\App\MemoryOptimizer.exe (2376 bytes)
%Program Files%\Common Files\Advanced System Optimizer\App\difxapi64.dll (4584 bytes)
%Program Files%\Common Files\Advanced System Optimizer\App\mfc90u.dll (34642 bytes)
%Program Files%\Common Files\Advanced System Optimizer\App\eng\DiskOpt.ini (19 bytes)
%Program Files%\Common Files\Advanced System Optimizer\App\UndeleteDLL.dll (1415 bytes)
%Program Files%\Common Files\Advanced System Optimizer\App\HighestAvailable.exe (753 bytes)
%Program Files%\Common Files\Advanced System Optimizer\App\SystemProtector.exe (38774 bytes)
%Program Files%\Common Files\Advanced System Optimizer\App\AppResource.dll (17986 bytes)
%Program Files%\Common Files\Advanced System Optimizer\App\VolumeControl.exe (49 bytes)
%Program Files%\Common Files\Advanced System Optimizer\ASO3portable.exe (697 bytes)
%Program Files%\Common Files\Advanced System Optimizer\App\asplangs\categories.ini (42 bytes)
%Program Files%\Common Files\Advanced System Optimizer\App\ASO3DefragSrv64.exe (2241 bytes)
%Program Files%\Common Files\Advanced System Optimizer\App\database.dat (32 bytes)
%Program Files%\Common Files\Advanced System Optimizer\App\ASO3DefragSrv.exe (3340 bytes)
%Program Files%\Common Files\Advanced System Optimizer\App\ASO3.exe (27333 bytes)
%Program Files%\Common Files\Advanced System Optimizer\App\eng\sysadvisor.ini (104 bytes)
%Program Files%\Common Files\Advanced System Optimizer\App\GameOptLauncher.exe (1922 bytes)
%Program Files%\Common Files\Advanced System Optimizer\App\eng\newscheduler.ini (8 bytes)
%Program Files%\Common Files\Advanced System Optimizer\App\updater\extract\license.txt (2 bytes)
%Program Files%\Common Files\Advanced System Optimizer\App\msvcp90.dll (7063 bytes)
%Program Files%\Common Files\Advanced System Optimizer\App\eng\checkupdate.ini (12 bytes)
%Program Files%\Common Files\Advanced System Optimizer\App\Systweak Software Website.url (245 bytes)
%Program Files%\Common Files\Advanced System Optimizer\App\single_click_care.ico (15 bytes)
%Program Files%\Common Files\Advanced System Optimizer\App\eng\gameopt.ini (8 bytes)
%Program Files%\Common Files\Advanced System Optimizer\App\clamunpack\libclamav.dll (5447 bytes)
%Program Files%\Common Files\Advanced System Optimizer\App\Microsoft.VC90.MFC.manifest (349 bytes)
%Program Files%\Common Files\Advanced System Optimizer\App\Undelete.exe (2603 bytes)
%Program Files%\Common Files\Advanced System Optimizer\App\NewScheduler.exe (7142 bytes)
%Program Files%\Common Files\Advanced System Optimizer\App\Interop.IWshRuntimeLibrary.dll (49 bytes)
%Program Files%\Common Files\Advanced System Optimizer\App\KillASOProcesses.exe (227 bytes)
%Program Files%\Common Files\Advanced System Optimizer\App\eng\diskexplorer.ini (21 bytes)
%Program Files%\Common Files\Advanced System Optimizer\App\eng\client.ini (65 bytes)
%Program Files%\Common Files\Advanced System Optimizer\App\DefragServiceManager.exe (71 bytes)
%Program Files%\Common Files\Advanced System Optimizer\App\updater\amd64\DriverRestore.manifest (682 bytes)
%Program Files%\Common Files\Advanced System Optimizer\App\difxapi.dll (3413 bytes)
%Program Files%\Common Files\Advanced System Optimizer\App\PCFixer.exe (6753 bytes)
%Program Files%\Common Files\Advanced System Optimizer\App\Microsoft.Win32.TaskScheduler.dll (1929 bytes)
%Program Files%\Common Files\Advanced System Optimizer\App\eng\pcfixer.ini (24 bytes)
%Program Files%\Common Files\Advanced System Optimizer\App\asores.dll (65453 bytes)
%Program Files%\Common Files\Advanced System Optimizer\App\eng\sysclean.ini (52 bytes)
%Program Files%\Common Files\Advanced System Optimizer\App\updater\xp\DriverRestore.exe (62 bytes)
%Program Files%\Common Files\Advanced System Optimizer\App\updater\win7amd64\DriverRestore.exe (917 bytes)
%Program Files%\Common Files\Advanced System Optimizer\App\msvcr90.dll (3847 bytes)
%Program Files%\Common Files\Advanced System Optimizer\App\asplangs\eng_asp_en.ini (101 bytes)
%Program Files%\Common Files\Advanced System Optimizer\App\Xceed.Compression.dll (552 bytes)
%Program Files%\Common Files\Advanced System Optimizer\App\eng\dupfileremover.ini (28 bytes)
%Program Files%\Common Files\Advanced System Optimizer\App\rw.dat (7386 bytes)
%Program Files%\Common Files\Advanced System Optimizer\App\GameOptimizer.exe (1948 bytes)
%Program Files%\Common Files\Advanced System Optimizer\App\Downloader.dll (1425 bytes)
%Program Files%\Common Files\Advanced System Optimizer\App\SystemProtector.exe.config (4 bytes)
%Program Files%\Common Files\Advanced System Optimizer\App\System.Data.SQLite.dll (6225 bytes)
%Program Files%\Common Files\Advanced System Optimizer\App\SecureShell.dll (5525 bytes)
%Program Files%\Common Files\Advanced System Optimizer\App\updater\extract\7z.dll (8067 bytes)
%Program Files%\Common Files\Advanced System Optimizer\App\Network.dll (4748 bytes)
%Program Files%\Common Files\Advanced System Optimizer\App\Buy Advanced System Optimizer.url (331 bytes)
%Program Files%\Common Files\Advanced System Optimizer\App\DefragReport\footer_right.jpg (11 bytes)
%Program Files%\Common Files\Advanced System Optimizer\App\categories.ini (42 bytes)
%Program Files%\Common Files\Advanced System Optimizer\App\DefragReport\line3px_Blue.jpg (11 bytes)
%Program Files%\Common Files\Advanced System Optimizer\App\CheckUpdate.exe (27994 bytes)
%Program Files%\Common Files\Advanced System Optimizer\App\DefragReport\Report_header_top_right.jpg (12 bytes)
%Program Files%\Common Files\Advanced System Optimizer\App\StartupManager.exe (1706 bytes)
%Program Files%\Common Files\Advanced System Optimizer\App\SysFileBakRes.exe (4335 bytes)
%Program Files%\Common Files\Advanced System Optimizer\App\eng\UninstallManager.ini (5 bytes)
%Program Files%\Common Files\Advanced System Optimizer\App\unrar.dll (1349 bytes)
%Program Files%\Common Files\Advanced System Optimizer\App\Help.ico (1 bytes)
%Program Files%\Common Files\Advanced System Optimizer\App\SecureEncryptor.exe (1854 bytes)
%Program Files%\Common Files\Advanced System Optimizer\App\updater\extract\History.txt (29 bytes)
%Program Files%\Common Files\Advanced System Optimizer\App\System.Core.dll (8923 bytes)
%Program Files%\Common Files\Advanced System Optimizer\App\zlibwapi.dll (319 bytes)
%Program Files%\Common Files\Advanced System Optimizer\App\rw.ini (54 bytes)
%Program Files%\Common Files\Advanced System Optimizer\App\Microsoft.VC90.CRT.manifest (391 bytes)
%Program Files%\Common Files\Advanced System Optimizer\App\DuplicateFilesRemover.exe (460 bytes)
%Program Files%\Common Files\Advanced System Optimizer\App\updater\amd64Helper\DriverUpdateHelper64.exe (2221 bytes)
%Program Files%\Common Files\Advanced System Optimizer\App\asohtm.dll (3901 bytes)
%Program Files%\Common Files\Advanced System Optimizer\App\Xceed.Compression.Formats.dll (1916 bytes)
%Program Files%\Common Files\Advanced System Optimizer\App\eng\privprotector.ini (44 bytes)
%Program Files%\Common Files\Advanced System Optimizer\App\DefragReport\footer_left.jpg (11 bytes)
%Program Files%\Common Files\Advanced System Optimizer\Portable.reg (14 bytes)
%Program Files%\Common Files\Advanced System Optimizer\App\DefragReport\left_border.jpg (11 bytes)
%Program Files%\Common Files\Advanced System Optimizer\App\UninstallManager.exe (692 bytes)
%Program Files%\Common Files\Advanced System Optimizer\App\Order.ico (1 bytes)
%Program Files%\Common Files\Advanced System Optimizer\App\SystemAnalyzerAndAdvisor.exe (5321 bytes)

Registry activity

The process ASO3.exe:340 makes changes in the system registry.
The Trojan creates and/or sets the following values in system registry:

[HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Internet Settings\Cache\Paths]
"Directory" = "%Documents and Settings%\%current user%\Local Settings\Temporary Internet Files\Content.IE5"

[HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Internet Settings\Cache\Paths\path4]
"CacheLimit" = "65452"
"CachePath" = "%Documents and Settings%\%current user%\Local Settings\Temporary Internet Files\Content.IE5\Cache4"

[HKLM\SOFTWARE\Microsoft\RFC1156Agent\CurrentVersion\Parameters]
"TrapPollTimeMilliSecs" = "15000"

[HKCU\Software\Microsoft\Windows\CurrentVersion\Explorer\Shell Folders]
"AppData" = "%Documents and Settings%\%current user%\Application Data"

[HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings]
"GlobalUserOffline" = "0"

[HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings\Connections]
"SavedLegacySettings" = "3C 00 00 00 1B 00 00 00 01 00 00 00 00 00 00 00"

[HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Shell Folders]
"Common Documents" = "%Documents and Settings%\All Users\Documents"

[HKCU\Software\Licenses]
"{K7C0DB872A3F777C0}" = "41 22 6C 8B E1 16 1F 05 48 6E 02 90 27 91 BF 00"

[HKCU\Software\Microsoft\Windows\CurrentVersion\Explorer\MountPoints2\{c155cd73-744b-11e2-8294-806d6172696f}]
"BaseClass" = "Drive"

[HKLM\SOFTWARE\Systweak\ASO3]
"MachineHashID" = "768429272046948335"

[HKCU\Software\Microsoft\Windows\CurrentVersion\Explorer\Shell Folders]
"Cookies" = "%Documents and Settings%\%current user%\Cookies"

[HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Internet Settings\Cache\Paths\path2]
"CachePath" = "%Documents and Settings%\%current user%\Local Settings\Temporary Internet Files\Content.IE5\Cache2"

[HKCU\Software\Microsoft\Windows\CurrentVersion\Explorer\Shell Folders]
"Personal" = "%Documents and Settings%\%current user%\My Documents"

[HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Shell Folders]
"Common AppData" = "%Documents and Settings%\All Users\Application Data"

[HKCU\Software\Microsoft\Windows\CurrentVersion\Explorer\MountPoints2\{c155cd75-744b-11e2-8294-806d6172696f}]
"BaseClass" = "Drive"

[HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Shell Folders]
"Common Desktop" = "%Documents and Settings%\All Users\Desktop"

[HKCU\Software\Licenses]
"{0F8356A249F37E323}" = "56 3E A8 0E 0B A2 A7 A6 41 06 53 98 DA A5 44 A3"

[HKCU\Software\Microsoft\Windows\CurrentVersion\Explorer\Shell Folders]
"Cache" = "%Documents and Settings%\%current user%\Local Settings\Temporary Internet Files"

[HKCR\CLSID\{B0F3F4F9-CB76-9A52-9442-B481A5FF49D3}\InProcServer32]
"(Default)" = "%Program Files%\NetMeeting\nac.dll"

[HKCU\Software\systweak\ASO3]
"SecEncryptAppName" = "Mã hóa an toàn"

[HKCU\Software\Microsoft\Windows\CurrentVersion\Explorer\Shell Folders]
"Desktop" = "%Documents and Settings%\%current user%\Desktop"

[HKLM\System\CurrentControlSet\Hardware Profiles\0001\Software\Microsoft\windows\CurrentVersion\Internet Settings]
"ProxyEnable" = "0"

[HKCU\Software\systweak\ASO3]
"KeyExpired" = "0"
"SecDelAppName" = "Xóa vĩnh viễn"

[HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Internet Settings\Cache\Paths\path1]
"CacheLimit" = "65452"

[HKCU\Software\Microsoft\Windows\ShellNoRoam\MUICache\%System%]
"schtasks.exe" = "Schedule Tasks"

[HKCR\CLSID\{B0F3F4F9-CB76-9A52-9442-B481A5FF49D3}]
"(Default)" = "Microsoft NetMeeting Quality of Service"

[HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Internet Settings\Cache\Paths\path2]
"CacheLimit" = "65452"

[HKCU\Software\Microsoft\Windows\ShellNoRoam\MUICache\%Program Files%\Common Files\Advanced System Optimizer\App]
"CheckUpdate.exe" = "Advanced System Optimizer - Checking for Updates"

[HKLM\SOFTWARE\Microsoft\Cryptography\RNG]
"Seed" = "BF 55 91 60 C3 BB 91 9E 24 45 39 FA 4A F1 6E 23"

[HKCU\Software\Licenses]
"{R7C0DB872A3F777C0}" = "4A 8D 7D 4C"

[HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Internet Settings\Cache\Paths\path1]
"CachePath" = "%Documents and Settings%\%current user%\Local Settings\Temporary Internet Files\Content.IE5\Cache1"

[HKLM\SOFTWARE\Systweak\ASO3]
"KeyExpired" = "0"

[HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Internet Settings\Cache\Paths\path3]
"CacheLimit" = "65452"

[HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings]
"MigrateProxy" = "1"

[HKCU\Software\Microsoft\Windows\CurrentVersion\Explorer\MountPoints2\{c155cd72-744b-11e2-8294-806d6172696f}]
"BaseClass" = "Drive"

[HKCU\Software\Microsoft\Windows\CurrentVersion\Explorer\MountPoints2\{b98117e8-75ca-11e2-81b2-000c293708fb}]
"BaseClass" = "Drive"

[HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Internet Settings\Cache\Paths\path3]
"CachePath" = "%Documents and Settings%\%current user%\Local Settings\Temporary Internet Files\Content.IE5\Cache3"

[HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Internet Settings\Cache\Paths]
"Paths" = "4"

[HKCU\Software\Licenses]
"{IF8356A249F37E323}" = "01 00 00 00"

[HKCR\CLSID\{B0F3F4F9-CB76-9A52-9442-B481A5FF49D3}\InProcServer32]
"ThreadingModel" = "Apartment"

[HKLM\SOFTWARE\Systweak\ASO3]
"REGISTEREDVERFOUNINSTALL" = "1"

[HKCU\Software\Microsoft\Windows\CurrentVersion\Explorer\Shell Folders]
"History" = "%Documents and Settings%\%current user%\Local Settings\History"

The Trojan modifies IE settings for security zones to map all local web-nodes with no dots which do not refer to any zone to the Intranet Zone:

[HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings\ZoneMap]
"UNCAsIntranet" = "1"

The Trojan modifies IE settings for security zones to map all web-nodes that bypassing the proxy to the Intranet Zone:

"ProxyBypass" = "1"

Proxy settings are disabled:

[HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings]
"ProxyEnable" = "0"

The Trojan modifies IE settings for security zones to map all urls to the Intranet Zone:

[HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings\ZoneMap]
"IntranetName" = "1"

The Trojan deletes the following value(s) in system registry:

[HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings]
"ProxyOverride"
"ProxyServer"
"AutoConfigURL"

[HKCR\CLSID\{B0F3F4F9-CB76-9A52-9442-B481A5FF49D3}]
"0"

The Trojan disables automatic startup of the application by deleting the following autorun value:

[HKCU\Software\Microsoft\Windows\CurrentVersion\Run]
"Advanced System Optimizer"

[HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]
"Advanced System Optimizer"

The process CheckUpdate.exe:516 makes changes in the system registry.
The Trojan creates and/or sets the following values in system registry:

[HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Internet Settings\Cache\Paths]
"Directory" = "%Documents and Settings%\%current user%\Local Settings\Temporary Internet Files\Content.IE5"

[HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Internet Settings\Cache\Paths\path4]
"CacheLimit" = "65452"
"CachePath" = "%Documents and Settings%\%current user%\Local Settings\Temporary Internet Files\Content.IE5\Cache4"

[HKLM\SOFTWARE\Microsoft\RFC1156Agent\CurrentVersion\Parameters]
"TrapPollTimeMilliSecs" = "15000"

[HKCU\Software\Microsoft\Windows\CurrentVersion\Explorer\Shell Folders]
"AppData" = "%Documents and Settings%\%current user%\Application Data"

[HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings]
"GlobalUserOffline" = "0"

[HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings\Connections]
"SavedLegacySettings" = "3C 00 00 00 1D 00 00 00 01 00 00 00 00 00 00 00"

[HKCU\Software\Microsoft\Windows\CurrentVersion\Explorer\MountPoints2\{c155cd73-744b-11e2-8294-806d6172696f}]
"BaseClass" = "Drive"

[HKLM\SOFTWARE\Systweak\ASO3]
"MachineHashID" = "768429272046948335"

[HKCU\Software\Microsoft\Windows\CurrentVersion\Explorer\Shell Folders]
"Cookies" = "%Documents and Settings%\%current user%\Cookies"

[HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Internet Settings\Cache\Paths\path2]
"CachePath" = "%Documents and Settings%\%current user%\Local Settings\Temporary Internet Files\Content.IE5\Cache2"

[HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Shell Folders]
"Common AppData" = "%Documents and Settings%\All Users\Application Data"

[HKCU\Software\Microsoft\Windows\CurrentVersion\Explorer\MountPoints2\{c155cd75-744b-11e2-8294-806d6172696f}]
"BaseClass" = "Drive"

[HKCU\Software\Licenses]
"{0F8356A249F37E323}" = "5B 3E 96 0F EF 81 A3 86 00 6A 3D BA 69 DA 2F C9"

[HKCU\Software\Microsoft\Windows\CurrentVersion\Explorer\Shell Folders]
"Cache" = "%Documents and Settings%\%current user%\Local Settings\Temporary Internet Files"

[HKCU\Software\systweak\ASO3]
"SecEncryptAppName" = "Mã hóa an toàn"

[HKLM\System\CurrentControlSet\Hardware Profiles\0001\Software\Microsoft\windows\CurrentVersion\Internet Settings]
"ProxyEnable" = "0"

[HKCU\Software\systweak\ASO3]
"CFUHWND" = "FC 01 03 00"
"KeyExpired" = "0"
"SecDelAppName" = "Xóa vĩnh viễn"

[HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Internet Settings\Cache\Paths\path1]
"CacheLimit" = "65452"

[HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Internet Settings\Cache\Paths\path2]
"CacheLimit" = "65452"

[HKLM\SOFTWARE\Microsoft\Cryptography\RNG]
"Seed" = "5C 0B 42 80 0B 17 FB 22 77 AE 89 CC 6E 8C F5 64"

[HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Internet Settings\Cache\Paths\path1]
"CachePath" = "%Documents and Settings%\%current user%\Local Settings\Temporary Internet Files\Content.IE5\Cache1"

[HKLM\SOFTWARE\Systweak\ASO3]
"KeyExpired" = "0"

[HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Internet Settings\Cache\Paths\path3]
"CacheLimit" = "65452"

[HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings]
"MigrateProxy" = "1"

[HKCU\Software\Microsoft\Windows\CurrentVersion\Explorer\MountPoints2\{c155cd72-744b-11e2-8294-806d6172696f}]
"BaseClass" = "Drive"

[HKCU\Software\Microsoft\Windows\CurrentVersion\Explorer\MountPoints2\{b98117e8-75ca-11e2-81b2-000c293708fb}]
"BaseClass" = "Drive"

[HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Internet Settings\Cache\Paths\path3]
"CachePath" = "%Documents and Settings%\%current user%\Local Settings\Temporary Internet Files\Content.IE5\Cache3"

[HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Internet Settings\Cache\Paths]
"Paths" = "4"

[HKCU\Software\Licenses]
"{IF8356A249F37E323}" = "1B 00 00 00"

[HKLM\SOFTWARE\Systweak\ASO3]
"REGISTEREDVERFOUNINSTALL" = "1"
"G_SUPPORT_PHONE_NUM" = "(855) 716-7030"

[HKCU\Software\Microsoft\Windows\CurrentVersion\Explorer\Shell Folders]
"History" = "%Documents and Settings%\%current user%\Local Settings\History"

The Trojan modifies IE settings for security zones to map all local web-nodes with no dots which do not refer to any zone to the Intranet Zone:

[HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings\ZoneMap]
"UNCAsIntranet" = "1"

The Trojan modifies IE settings for security zones to map all web-nodes that bypassing the proxy to the Intranet Zone:

"ProxyBypass" = "1"

Proxy settings are disabled:

[HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings]
"ProxyEnable" = "0"

The Trojan modifies IE settings for security zones to map all urls to the Intranet Zone:

[HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings\ZoneMap]
"IntranetName" = "1"

The Trojan deletes the following value(s) in system registry:

[HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings]
"AutoConfigURL"
"ProxyServer"
"ProxyOverride"

[HKCU\Software\systweak\ASO3]
"CFUHWND"

The process schtasks.exe:1128 makes changes in the system registry.
The Trojan creates and/or sets the following values in system registry:

[HKLM\SOFTWARE\Microsoft\Cryptography\RNG]
"Seed" = "4B 20 2A F0 71 EC 0E BC C1 85 96 A5 88 8A 99 63"

The process schtasks.exe:1364 makes changes in the system registry.
The Trojan creates and/or sets the following values in system registry:

[HKLM\SOFTWARE\Microsoft\Cryptography\RNG]
"Seed" = "BF 0D D1 45 03 54 CC 35 07 E7 BE 2E F4 A9 5C B6"

The process regedit.exe:264 makes changes in the system registry.
The Trojan creates and/or sets the following values in system registry:

[HKCU\Software\systweak\ASO3\System Cleaner\PPOptions\RegularSystemCleanerSPC]
"jfThumbnail" = "0"

[HKCU\Software\systweak\ASO3\System Cleaner\PPOptions\Section1]
"ie8_AddBarHistory" = "1"

[HKCU\Software\systweak\ASO3\Advanced System Optimizer\OneClick]
"chkDiskDefrag" = "0"

[HKCU\Software\systweak\ASO3\System Cleaner\PPOptions\Section3]
"winsys_dnscache" = "0"

[HKCU\Software\systweak\ASO3\LANG]
"LangID" = "0"

[HKCU\Software\systweak\ASO3\System Cleaner\PPOptions\Section4]
"app_prg_adobephotoshopcss" = "0"

[HKCU\Software\systweak\ASO3\System Cleaner\PPOptions\RegularSystemCleanerSPC]
"iMychavoihis" = "0"

[HKCU\Software\systweak\ASO3\Advanced System Optimizer]
"FirstRunASO" = "1"

[HKCU\Software\systweak\ASO3\System Cleaner\PPOptions\RegularSystemCleanerSPC]
"winsys_startmenushortcuts" = "0"

[HKCU\Software\systweak\ASO3\System Cleaner\PPOptions\Section4]
"app_prg_winrar" = "1"
"app_prg_regedit" = "1"

[HKCU\Software\systweak\ASO3\System Cleaner\PPOptions\RegularSystemCleanerSPC]
"ie8_HistoryVS" = "1"
"app_prg_mssearch" = "1"

[HKCU\Software\systweak\ASO3\System Cleaner\PPOptions\Section3]
"winsys_windowslogfiles" = "1"
"winsys_desktopshortcuts" = "0"

[HKCU\Software\systweak\ASO3\ScanStatusForLauncher\SysFileBackup]
"ErrorCount" = "1"

[HKCU\Software\systweak\ASO3\System Cleaner\PPOptions\RegularSystemCleanerSPC]
"jfReportLogFile" = "1"

[HKCU\Software\systweak\ASO3\System Cleaner\PPOptions\Section4]
"app_prg_windowsmediaplayer" = "1"

[HKCU\Software\systweak\ASO3\System Cleaner\PPOptions\Section2]
"jfdotnet" = "1"
"jfdownloadprgfile" = "0"

[HKCU\Software\systweak\ASO3\Advanced System Optimizer\OneClick]
"chkDriverupdater" = "1"

[HKCU\Software\systweak\ASO3]
"KeyExpired" = "1"

[HKCU\Software\systweak\ASO3\System Cleaner\PPOptions\RegularSystemCleanerSPC]
"jfbackupcopiewin" = "0"

[HKCU\Software\systweak\ASO3\System Cleaner\PPOptions\Section2]
"jfReportLogFile" = "1"

[HKCU\Software\systweak\ASO3\System Cleaner\PPOptions\Section4]
"app_prg_skype" = "1"

[HKCU\Software\systweak\ASO3\System Cleaner\PPOptions\Section1]
"googlechrome_VisitedLinks" = "1"

[HKCU\Software\systweak\ASO3\System Cleaner\PPOptions\Section4]
"mso2013MS_Excel" = "1"

[HKCU\Software\systweak\ASO3]
"cname" = "systweak"

[HKCU\Software\systweak\ASO3\System Cleaner\PPOptions\RegularSystemCleanerSPC]
"winsys_otherexplorermrus" = "1"

[HKCU\Software\systweak\ASO3\Scheduler\OneClick]
"chkPrivacyProtector" = "1"

[HKCU\Software\systweak\ASO3]
"SecEncryptAppName" = "Mã hóa an toàn"

[HKCU\Software\systweak\ASO3\System Cleaner\PPOptions\RegularSystemCleanerSPC]
"ie8_TempIntFileFolder" = "1"

[HKCU\Software\systweak\ASO3\Scheduler\OneClick]
"chkJunkFileCleaner" = "1"

[HKCU\Software\systweak\ASO3\System Cleaner\PPOptions\RegularSystemCleanerSPC]
"jfTempFile" = "1"

[HKCU\Software\systweak\ASO3\System Cleaner\PPOptions\Section2]
"jfbackupcopiewin" = "0"

[HKCU\Software\systweak\ASO3\System Cleaner\PPOptions\Section3]
"winsys_startmenushortcuts" = "0"
"winsys_searchautocomplete" = "0"

[HKCU\Software\systweak\ASO3\System Cleaner\PPOptions\Section4]
"app_prg_mssearch" = "1"

[HKCU\Software\systweak\ASO3\System Cleaner\PPOptions\Section1]
"ie8_TempIntFileFolder" = "1"

[HKCU\Software\systweak\ASO3\System Cleaner\PPOptions\RegularSystemCleanerSPC]
"jfoldprefach" = "0"

[HKCU\Software\systweak\ASO3\System Cleaner\PPOptions\Section4]
"iMychavoihis" = "0"

[HKCU\Software\systweak\ASO3\System Cleaner\PPOptions\RegularSystemCleanerSPC]
"mso2013MS_Excel" = "1"

[HKCU\Software\systweak\ASO3\System Cleaner\PPOptions\Section4]
"mso2013MS_RecentFolder" = "1"

[HKCU\Software\systweak\ASO3]
"ASO3AFFILIATE" = ""

[HKCU\Software\systweak\ASO3\System Cleaner\PPOptions\RegularSystemCleanerSPC]
"ie8_AddBarHistory" = "1"

[HKCU\Software\systweak\ASO3\Scheduler\OneClick]
"chkRegClean" = "1"

[HKCU\Software\systweak\ASO3\System Cleaner\PPOptions\RegularSystemCleanerSPC]
"winsys_chkdskfilefragments" = "1"

[HKCU\Software\systweak\ASO3\Advanced System Optimizer\OneClick]
"chkAntispyware" = "0"

[HKCU\Software\systweak\ASO3\System Cleaner\PPOptions\RegularSystemCleanerSPC]
"winsys_winerrorreporting" = "0"
"winsys_desktopshortcuts" = "0"

[HKCU\Software\systweak\ASO3\System Cleaner\PPOptions\Section3]
"winsys_networkpasswords" = "0"

[HKCU\Software\systweak\ASO3\System Cleaner\PPOptions]
"StartAppli_FirstTime" = "0"

[HKCU\Software\systweak\ASO3\System Cleaner\PPOptions\Section4]
"app_prg_remotedesktop" = "1"

[HKCU\Software\systweak\ASO3\Scheduler\OneClick]
"chkDiskDefrag" = "0"

[HKCU\Software\systweak\ASO3\System Cleaner\PPOptions\RegularSystemCleanerSPC]
"app_prg_msmanagementconsole" = "1"

[HKCU\Software\systweak\ASO3\System Cleaner\PPOptions\Section3]
"winsys_chkdskfilefragments" = "1"

[HKCU\Software\systweak\ASO3\System Cleaner\PPOptions\RegularSystemCleanerSPC]
"mso2013MS_PowerPoint" = "1"

[HKCU\Software\systweak\ASO3\System Cleaner\PPOptions\Section1]
"ie8_HistoryVS" = "1"

[HKCU\Software\systweak\ASO3]
"RegisteredUser" = ""

[HKCU\Software\systweak\ASO3\System Cleaner\PPOptions\Section4]
"app_prg_windowsdefender" = "1"

[HKCU\Software\systweak\ASO3]
"InstalledPath" = "%Program Files%\Advanced System Optimizer 3"

[HKCU\Software\systweak\ASO3\System Cleaner\PPOptions\RegularSystemCleanerSPC]
"app_prg_remotedesktop" = "1"

[HKCU\Software\systweak\ASO3\System Cleaner\PPOptions\Section4]
"app_prg_gameexplorer" = "0"

[HKCU\Software\systweak\ASO3\System Cleaner\PPOptions\Section1]
"ie8_Cookies" = "1"

[HKCU\Software\systweak\ASO3\System Cleaner\PPOptions\RegularSystemCleanerSPC]
"app_prg_windowsmediacenter" = "1"
"googlechrome_VisitedLinks" = "1"
"jfdotnet" = "1"

[HKLM\SOFTWARE\Microsoft\Cryptography\RNG]
"Seed" = "47 6B 0D AE FC F2 21 3A 3E FE 98 1D 54 A9 33 32"

[HKCU\Software\systweak\ASO3\Scheduler\OneClick]
"ASO-OneClickCare" = "Không có lịch trình"

[HKCU\Software\systweak\ASO3\System Cleaner\PPOptions\RegularSystemCleanerSPC]
"app_prg_regedit" = "1"

[HKCU\Software\systweak\ASO3\Scheduler\OneClick]
"chkAntispyware" = "0"

[HKCU\Software\systweak\ASO3\System Cleaner\PPOptions\Section1]
"AdobeFlashPlayer" = "0"

[HKCU\Software\systweak\ASO3\System Cleaner\PPOptions\Section3]
"winsys_winerrorreporting" = "0"

[HKCU\Software\systweak\ASO3\System Cleaner\PPOptions\RegularSystemCleanerSPC]
"app_prg_windowsdefender" = "1"
"winsys_clipboard" = "1"
"iMycache" = "0"

[HKCU\Software\systweak\ASO3\Scheduler\OneClick]
"chkDriverupdater" = "1"

[HKCU\Software\systweak\ASO3\System Cleaner\PPOptions\RegularSystemCleanerSPC]
"app_prg_skype" = "1"
"winsys_memorydumps" = "1"

[HKCU\Software\systweak\ASO3\System Cleaner\PPOptions\Section4]
"app_prg_adobeair" = "0"
"mso2013MS_Word" = "1"

[HKCU\Software\systweak\ASO3]
"ASO3CAM" = "website"

[HKCU\Software\systweak\ASO3\System Cleaner\PPOptions\RegularSystemCleanerSPC]
"app_prg_adobephotoshopcss" = "0"
"app_prg_acrobatdistiller" = "1"

[HKCU\Software\systweak\ASO3\System Cleaner\PPOptions\Section4]
"app_prg_msofficepicturemanager" = "1"

[HKCU\Software\systweak\ASO3\ScanStatusForLauncher\SysFileBackup]
"LastScanDateTime" = "10/21/2014 2:12:47 PM"

[HKCU\Software\systweak\ASO3\System Cleaner\PPOptions\Section2]
"jfoldprefach" = "0"

[HKCU\Software\systweak\ASO3\System Cleaner\PPOptions\Section4]
"app_prg_utorrent" = "1"

[HKCU\Software\systweak\ASO3\System Cleaner\PPOptions\RegularSystemCleanerSPC]
"jflogfileactive" = "1"

[HKCU\Software\systweak\ASO3\OneClickCure\SysFileBackup]
"CLEANFINISHED" = "1"

[HKCU\Software\systweak\ASO3\OneclickLastScanDetailsPath]
"SystemCleaner.exe" = "0"

[HKCU\Software\systweak\ASO3\System Cleaner\PPOptions\Section3]
"winsys_taskbarjumplists" = "1"

[HKCU\Software\systweak\ASO3\System Cleaner\PPOptions\RegularSystemCleanerSPC]
"app_prg_winrar" = "1"
"app_prg_utorrent" = "1"
"app_prg_gameexplorer" = "0"

[HKCU\Software\systweak\ASO3\System Cleaner\PPOptions\Section3]
"winsys_otherexplorermrus" = "1"

[HKCU\Software\systweak\ASO3\System Cleaner\PPOptions\RegularSystemCleanerSPC]
"app_prg_windowsmediaplayer" = "1"

[HKCU\Software\systweak\ASO3\ScanStatusForLauncher\SysFileBackup]
"iconStatus" = "1"

[HKCU\Software\systweak\ASO3\System Cleaner\PPOptions\RegularSystemCleanerSPC]
"mso2013MS_Access" = "1"
"app_prg_msofficepicturemanager" = "1"

[HKCU\Software\systweak\ASO3\ScanStatusForLauncher\SysFileBackup]
"MSGOnHome" = ""

[HKCU\Software\systweak\ASO3\System Cleaner\PPOptions\RegularSystemCleanerSPC]
"googlechrome_Cookies" = "1"
"jfrecentprgdocset" = "0"
"winsys_windowslogfiles" = "1"
"winsys_taskbarjumplists" = "1"

[HKCU\Software\systweak\ASO3\Advanced System Optimizer\OneClick]
"chkPrivacyProtector" = "1"

[HKCU\Software\systweak\ASO3\System Cleaner\PPOptions\Section4]
"app_prg_microsoftsilverlight" = "1"
"app_prg_msmanagementconsole" = "1"

[HKCU\Software\systweak\ASO3\System Cleaner\PPOptions\RegularSystemCleanerSPC]
"app_prg_adobeacrobat" = "1"

[HKCU\Software\systweak\ASO3\System Cleaner\PPOptions\Section4]
"app_prg_acrobatdistiller" = "1"
"iMycache" = "0"

[HKCU\Software\systweak\ASO3\Advanced System Optimizer\OneClick]
"chkJunkFileCleaner" = "1"

[HKCU\Software\systweak\ASO3\System Cleaner\PPOptions\Section1]
"googlechrome_Cache" = "1"

[HKCU\Software\systweak\ASO3\System Cleaner\PPOptions\RegularSystemCleanerSPC]
"winsys_networkpasswords" = "0"

[HKCU\Software\systweak\ASO3\System Cleaner\PPOptions\Section2]
"jfrecentprgdocset" = "0"

[HKCU\Software\systweak\ASO3\System Cleaner\PPOptions\Section3]
"winsys_clipboard" = "1"

[HKCU\Software\systweak\ASO3]
"ASOBUILDFOR" = "systweak"

[HKCU\Software\systweak\ASO3\Advanced System Optimizer\OneClick]
"chkRegClean" = "1"

[HKCU\Software\systweak\ASO3\System Cleaner\PPOptions\RegularSystemCleanerSPC]
"app_prg_adobeair" = "0"
"googlechrome_History" = "1"
"mso2013MS_RecentFolder" = "1"

[HKCU\Software\systweak\ASO3\Scheduler\OneClick]
"(Default)" = "Scan Not Scheduled"
"chkRegOptimizer" = "1"

[HKCU\Software\systweak\ASO3\System Cleaner\PPOptions\Section4]
"mso2013MS_PowerPoint" = "1"

[HKCU\Software\systweak\ASO3\System Cleaner\PPOptions\RegularSystemCleanerSPC]
"app_prg_malwarebytesantimalware" = "0"
"jfdownloadprgfile" = "0"

[HKCU\Software\systweak\ASO3\System Cleaner\PPOptions\Section3]
"winsys_memorydumps" = "1"

[HKCU\Software\systweak\ASO3\LAST_CALL_TIME]
"LastGVTime" = "DF 07 01 00 06 00 0A 00 02 00 28 00 10 00 B2 02"

[HKCU\Software\systweak\ASO3\Advanced System Optimizer\OneClick]
"chkRegOptimizer" = "1"

[HKCU\Software\systweak\ASO3\System Cleaner\PPOptions\Section2]
"jfThumbnail" = "0"

[HKCU\Software\systweak\ASO3\System Cleaner\PPOptions\RegularSystemCleanerSPC]
"AdobeFlashPlayer" = "0"
"msofficeothertool_2013" = "1"
"gchromeoptdatabases" = "0"

[HKCU\Software\systweak\ASO3\System Cleaner\PPOptions\Section1]
"gchromeoptdatabases" = "0"

[HKCU\Software\systweak\ASO3\System Cleaner\PPOptions\RegularSystemCleanerSPC]
"app_prg_microsoftsilverlight" = "1"
"winsys_dnscache" = "0"

[HKCU\Software\systweak\ASO3\System Cleaner\PPOptions\Section2]
"jfTempFile" = "1"

[HKCU\Software\systweak\ASO3\System Cleaner\PPOptions\Section1]
"googlechrome_History" = "1"

[HKCU\Software\systweak\ASO3\System Cleaner\PPOptions\Section2]
"jfwpffont" = "0"

[HKCU\Software\systweak\ASO3\System Cleaner\PPOptions\RegularSystemCleanerSPC]
"googlechrome_Cache" = "1"

[HKCU\Software\systweak\ASO3\System Cleaner\PPOptions\Section4]
"app_prg_windowsmediacenter" = "1"

[HKCU\Software\systweak\ASO3]
"SecDelAppName" = "Xóa vĩnh viễn"

[HKCU\Software\systweak\ASO3\System Cleaner\PPOptions\RegularSystemCleanerSPC]
"winsys_searchautocomplete" = "0"

[HKCU\Software\systweak\ASO3\System Cleaner\PPOptions\Section4]
"mso2013MS_Access" = "1"
"app_prg_malwarebytesantimalware" = "0"

[HKCU\Software\systweak\ASO3\System Cleaner\PPOptions\Section2]
"jflogfileactive" = "1"

[HKCU\Software\systweak\ASO3\System Cleaner\PPOptions\RegularSystemCleanerSPC]
"jfwpffont" = "0"

[HKCU\Software\systweak\ASO3]
"RegisteredPass" = "00JJY7-WTAY0J-K146RX-84C8TJ"

[HKCU\Software\systweak\ASO3\System Cleaner\PPOptions\Section1]
"googlechrome_Cookies" = "1"

[HKCU\Software\systweak\ASO3\System Cleaner\PPOptions\RegularSystemCleanerSPC]
"ie8_Cookies" = "1"

[HKCU\Software\systweak\ASO3\System Cleaner\PPOptions\Section4]
"msofficeothertool_2013" = "1"
"app_prg_adobeacrobat" = "1"

[HKCU\Software\systweak\ASO3\System Cleaner\PPOptions\RegularSystemCleanerSPC]
"mso2013MS_Word" = "1"

[HKCU\Software\systweak\ASO3\ScanStatusForLauncher\SysFileBackup]
"msg" = "Last backup taken on:Tue. October 21, 2014. 02:12 PM"

The process %original file name%.exe:228 makes changes in the system registry.
The Trojan creates and/or sets the following values in system registry:

[HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Shell Folders]
"Common Favorites" = "%Documents and Settings%\All Users\Favorites"

[HKCU\Software\Microsoft\Windows\CurrentVersion\Explorer\MountPoints2\{c155cd72-744b-11e2-8294-806d6172696f}]
"BaseClass" = "Drive"

[HKCU\Software\Microsoft\Windows\CurrentVersion\Explorer\Shell Folders]
"My Video" = ""
"NetHood" = "%Documents and Settings%\%current user%\NetHood"
"Fonts" = "%WinDir%\Fonts"
"AppData" = "%Documents and Settings%\%current user%\Application Data"

[HKCU\Software\Microsoft\Windows\ShellNoRoam\MUICache\%Program Files%\Common Files\Advanced System Optimizer]
"ASO3portable.exe" = "ASO3portable"

[HKCU\Software\Microsoft\Windows\CurrentVersion\Explorer\Shell Folders]
"Cache" = "%Documents and Settings%\%current user%\Local Settings\Temporary Internet Files"

[HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Shell Folders]
"Common Start Menu" = "%Documents and Settings%\All Users\Start Menu"

[HKCU\Software\Microsoft\Windows\CurrentVersion\Explorer\Shell Folders]
"Personal" = "%Documents and Settings%\%current user%\My Documents"

[HKCU\Software\Microsoft\Windows\CurrentVersion\Explorer\MountPoints2\{c155cd73-744b-11e2-8294-806d6172696f}]
"BaseClass" = "Drive"

[HKCU\Software\Microsoft\Windows\CurrentVersion\Explorer\Shell Folders]
"PrintHood" = "%Documents and Settings%\%current user%\PrintHood"
"Startup" = "%Documents and Settings%\%current user%\Start Menu\Programs\Startup"
"Local AppData" = "%Documents and Settings%\%current user%\Local Settings\Application Data"

[HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Shell Folders]
"Common AppData" = "%Documents and Settings%\All Users\Application Data"

[HKCU\Software\Microsoft\Windows\CurrentVersion\Explorer\MountPoints2\{c155cd75-744b-11e2-8294-806d6172696f}]
"BaseClass" = "Drive"

[HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Shell Folders]
"CommonMusic" = "%Documents and Settings%\All Users\Documents\My Music"

[HKCU\Software\Microsoft\Windows\CurrentVersion\Explorer\Shell Folders]
"Templates" = "%Documents and Settings%\%current user%\Templates"

[HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Shell Folders]
"Common Administrative Tools" = "%Documents and Settings%\All Users\Start Menu\Programs\Administrative Tools"
"Common Startup" = "%Documents and Settings%\All Users\Start Menu\Programs\Startup"
"Common Desktop" = "%Documents and Settings%\All Users\Desktop"
"Common Templates" = "%Documents and Settings%\All Users\Templates"

[HKCU\Software\Microsoft\Windows\CurrentVersion\Explorer\Shell Folders]
"Desktop" = "%Documents and Settings%\%current user%\Desktop"

[HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Shell Folders]
"Common Documents" = "%Documents and Settings%\All Users\Documents"

[HKCU\Software\Microsoft\Windows\CurrentVersion\Explorer\Shell Folders]
"Administrative Tools" = ""
"My Pictures" = "%Documents and Settings%\%current user%\My Documents\My Pictures"
"SendTo" = "%Documents and Settings%\%current user%\SendTo"
"Cookies" = "%Documents and Settings%\%current user%\Cookies"

"Start Menu" = "%Documents and Settings%\%current user%\Start Menu"

[HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Shell Folders]
"CommonVideo" = "%Documents and Settings%\All Users\Documents\My Videos"
"CommonPictures" = "%Documents and Settings%\All Users\Documents\My Pictures"

[HKLM\SOFTWARE\Microsoft\Cryptography\RNG]
"Seed" = "C6 D1 7F 0D 2B F9 9A 32 8D 1D 7F 86 D9 1E 2B CD"

[HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Shell Folders]
"Common Programs" = "%Documents and Settings%\All Users\Start Menu\Programs"

[HKCU\Software\Microsoft\Windows\CurrentVersion\Explorer\Shell Folders]
"My Music" = "%Documents and Settings%\%current user%\My Documents\My Music"
"Programs" = "%Documents and Settings%\%current user%\Start Menu\Programs"

[HKCU\Software\Microsoft\Windows\CurrentVersion\Explorer\MountPoints2\{b98117e8-75ca-11e2-81b2-000c293708fb}]
"BaseClass" = "Drive"

[HKCU\Software\Microsoft\Windows\CurrentVersion\Explorer\Shell Folders]
"CD Burning" = "%Documents and Settings%\%current user%\Local Settings\Application Data\Microsoft\CD Burning"
"Recent" = "%Documents and Settings%\%current user%\Recent"
"Favorites" = "%Documents and Settings%\%current user%\Favorites"
"History" = "%Documents and Settings%\%current user%\Local Settings\History"

The Trojan modifies IE settings for security zones to map all local web-nodes with no dots which do not refer to any zone to the Intranet Zone:

[HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings\ZoneMap]
"UNCAsIntranet" = "1"

The Trojan modifies IE settings for security zones to map all urls to the Intranet Zone:

"IntranetName" = "1"

The Trojan modifies IE settings for security zones to map all web-nodes that bypassing the proxy to the Intranet Zone:

"ProxyBypass" = "1"

The process ASO3portable.exe:644 makes changes in the system registry.
The Trojan creates and/or sets the following values in system registry:

[HKLM\SOFTWARE\Microsoft\Cryptography\RNG]
"Seed" = "CC 07 42 E9 1A B9 4F AF 06 7E F2 8C 52 46 BC E7"

[HKCU\Software\Microsoft\Windows\CurrentVersion\Explorer\MountPoints2\{c155cd73-744b-11e2-8294-806d6172696f}]
"BaseClass" = "Drive"

[HKCU\Software\Microsoft\Windows\CurrentVersion\Explorer\MountPoints2\{c155cd72-744b-11e2-8294-806d6172696f}]
"BaseClass" = "Drive"

[HKCU\Software\Microsoft\Windows\CurrentVersion\Explorer\MountPoints2\{b98117e8-75ca-11e2-81b2-000c293708fb}]
"BaseClass" = "Drive"

[HKCU\Software\Microsoft\Windows\CurrentVersion\Explorer\MountPoints2\{c155cd75-744b-11e2-8294-806d6172696f}]
"BaseClass" = "Drive"

Dropped PE files

MD5 File path
5aaef929e3a558b37f6d1051e5601dc4 c:\Program Files\Common Files\Advanced System Optimizer\ASO3portable.exe
b77141a7e264541e3d24fac13232bb48 c:\Program Files\Common Files\Advanced System Optimizer\App\ASEng.dll
daac23be5dcf0c0421eacd9e49ec8da1 c:\Program Files\Common Files\Advanced System Optimizer\App\ASO3.exe
4e95dfb0e61d468f3ae1c8867547a001 c:\Program Files\Common Files\Advanced System Optimizer\App\ASO3DefragSrv.exe
644e03d595d83adbd23bf09c6ca9f06b c:\Program Files\Common Files\Advanced System Optimizer\App\ASO3DefragSrv64.exe
23f573befc557b61c66e682463ba4c5f c:\Program Files\Common Files\Advanced System Optimizer\App\ASOHelper.dll
44eb05fcfc115ad4e3e62951b3bca0a1 c:\Program Files\Common Files\Advanced System Optimizer\App\AppResource.dll
c2faf254cc84d9046d6cd182a1612ff6 c:\Program Files\Common Files\Advanced System Optimizer\App\AsInvoker.exe
7ad0a2b5eedef906a920ad6184009b25 c:\Program Files\Common Files\Advanced System Optimizer\App\BackupManager.exe
3b177a43390f2818f2d9b313fcf15cab c:\Program Files\Common Files\Advanced System Optimizer\App\BeforeUninstall.exe
162515fbb69263bd123b419b7e8cfd1f c:\Program Files\Common Files\Advanced System Optimizer\App\CheckUpdate.exe
1353efe21ef7810bf5dff59624ee50d7 c:\Program Files\Common Files\Advanced System Optimizer\App\DefragServiceManager.exe
7644f527364fe352628b221f0c58131f c:\Program Files\Common Files\Advanced System Optimizer\App\DiskDoctor.exe
949ca435c3315f43def341fb971d5d2e c:\Program Files\Common Files\Advanced System Optimizer\App\DiskExplorer.exe
1e40b0580cd8e473396525c5db54f286 c:\Program Files\Common Files\Advanced System Optimizer\App\DiskOptimizer.exe
8fae0e1ff85f5e0151d50d32a9e977e0 c:\Program Files\Common Files\Advanced System Optimizer\App\Downloader.dll
6e7f1b9b84a980e6800da912ac1022b7 c:\Program Files\Common Files\Advanced System Optimizer\App\DriverUpdater.exe
704d3abd5b8a851c31071cdc551cb8ff c:\Program Files\Common Files\Advanced System Optimizer\App\DuplicateFilesRemover.exe
88ca1ba1d436a38e1c467f3180143e53 c:\Program Files\Common Files\Advanced System Optimizer\App\GOHelper.exe
bb8bfd65b50a71143c7db630e0fc3326 c:\Program Files\Common Files\Advanced System Optimizer\App\GameOptLauncher.exe
00de2a32220d5b1e7045b5fb0e14d05f c:\Program Files\Common Files\Advanced System Optimizer\App\GameOptLauncher64.exe
1674545957e74382d5ee242e7e7aec8c c:\Program Files\Common Files\Advanced System Optimizer\App\GameOptimizer.exe
6773b1263f2f73f671a26872e8a27366 c:\Program Files\Common Files\Advanced System Optimizer\App\HighestAvailable.exe
19567cf3b5e386d4d82b216fe0bfb036 c:\Program Files\Common Files\Advanced System Optimizer\App\HookDll.dll
d1c3b96e0d0df71d197d2a7c1bdf4cf4 c:\Program Files\Common Files\Advanced System Optimizer\App\HookDll64.dll
44cc83891dcee9cb4b5e813411e5f118 c:\Program Files\Common Files\Advanced System Optimizer\App\Interop.IWshRuntimeLibrary.dll
7c4798a1f682703e1ef5b6264f4fde4d c:\Program Files\Common Files\Advanced System Optimizer\App\KillASOProcesses.exe
2229324ce0374811ca64a19ee62f130b c:\Program Files\Common Files\Advanced System Optimizer\App\MFC90ENU.dll
4031c546092925f6f59448d7c8a5c663 c:\Program Files\Common Files\Advanced System Optimizer\App\MemoryOptimizer.exe
c757150e058428e2a0757701930c223c c:\Program Files\Common Files\Advanced System Optimizer\App\Microsoft.Win32.TaskScheduler.dll
a41c452bc2a72c6dccb00ab7188b91ed c:\Program Files\Common Files\Advanced System Optimizer\App\Network.dll
c001999e8b902a67c0c850d84b8fd9cb c:\Program Files\Common Files\Advanced System Optimizer\App\NewScheduler.exe
504b39ada690135ad94f2e92fbc0132a c:\Program Files\Common Files\Advanced System Optimizer\App\PCFixer.exe
36b04c851aa990b1f17f5a5210c265fc c:\Program Files\Common Files\Advanced System Optimizer\App\PTBWin7.exe
1883e8b1030e0f57b779df42a951cbc6 c:\Program Files\Common Files\Advanced System Optimizer\App\PrivacyProtector.exe
17196301c272764aa7f888d6d0728151 c:\Program Files\Common Files\Advanced System Optimizer\App\RegClean.exe
a4cf9afc61a959fec15e1fdb119a6475 c:\Program Files\Common Files\Advanced System Optimizer\App\RegistryOptimizer.exe
75b3a51cdddd8b021f086d66943b6c53 c:\Program Files\Common Files\Advanced System Optimizer\App\RequireAdministrator.exe
3e827530ae7537febfb60bab2aaf2517 c:\Program Files\Common Files\Advanced System Optimizer\App\ScanDll.dll
5df9dd071160fff20501650c3a3198ab c:\Program Files\Common Files\Advanced System Optimizer\App\SecureDelete.exe
e469b61fcc60d4c170c4a009a8e2ef92 c:\Program Files\Common Files\Advanced System Optimizer\App\SecureEncryptor.exe
02b91c2a280387456645b7c5ff0961e9 c:\Program Files\Common Files\Advanced System Optimizer\App\SecureShell.dll
4c0309576b4f66ddeabc5759133b4d86 c:\Program Files\Common Files\Advanced System Optimizer\App\SevenZipSharp.dll
d22b2d6b80e11bc475ba78a46b01bf54 c:\Program Files\Common Files\Advanced System Optimizer\App\StartupManager.exe
e5b29497b56985eaa5de485ba0f87e2f c:\Program Files\Common Files\Advanced System Optimizer\App\SysFileBakRes.exe
e515cf797dc351ed69bef2437a7f4d87 c:\Program Files\Common Files\Advanced System Optimizer\App\System.Core.dll
9892e0d72eedf3da1cdcfdac318d556c c:\Program Files\Common Files\Advanced System Optimizer\App\System.Data.SQLite.dll
dbf9622d88860a3d3e37dd20461aee0f c:\Program Files\Common Files\Advanced System Optimizer\App\SystemAnalyzerAndAdvisor.exe
b8a6ff6c7f654a66f6b602906ff9b338 c:\Program Files\Common Files\Advanced System Optimizer\App\SystemCleaner.exe
1b7387124beba02e51d858d37c0e77aa c:\Program Files\Common Files\Advanced System Optimizer\App\SystemProtector.XmlSerializers.dll
63edefd10b11e945192d4f16fe48d93f c:\Program Files\Common Files\Advanced System Optimizer\App\SystemProtector.exe
96b86ff7f590360b87beebb308176648 c:\Program Files\Common Files\Advanced System Optimizer\App\Undelete.exe
80c2684509659a30833838c6d26e2c31 c:\Program Files\Common Files\Advanced System Optimizer\App\UndeleteDLL.dll
d40d63ac9eb6c2148e218e3ca25217eb c:\Program Files\Common Files\Advanced System Optimizer\App\UninstallManager.exe
6e92c0d44ed109e27f6e42c8a84bc5d5 c:\Program Files\Common Files\Advanced System Optimizer\App\VolumeControl.exe
2e5da0a8298f52a8bbc1e4a2d07ee9fd c:\Program Files\Common Files\Advanced System Optimizer\App\VolumeControl64.exe
f3c6318caf18c3c5027981b426a33c4d c:\Program Files\Common Files\Advanced System Optimizer\App\Xceed.Compression.Formats.dll
a35a326e2e52fe01c04fac9cf8f039d2 c:\Program Files\Common Files\Advanced System Optimizer\App\Xceed.Compression.dll
6d188ac513b2efffb766a0e181e46c16 c:\Program Files\Common Files\Advanced System Optimizer\App\Xceed.FileSystem.dll
5861f0dd9a6b14a4087c2cb66b731d49 c:\Program Files\Common Files\Advanced System Optimizer\App\Xceed.Zip.dll
318caf44f4d7b7389fb34e1f22d1d852 c:\Program Files\Common Files\Advanced System Optimizer\App\XceedZip.dll
465b126f56630d3877412c8bdc574414 c:\Program Files\Common Files\Advanced System Optimizer\App\aso3sys.dll
9f230a2b21b5546c359fbeb0a38867be c:\Program Files\Common Files\Advanced System Optimizer\App\asodemo.exe
335d3a3ea2c152cde9cf3da9259e8b92 c:\Program Files\Common Files\Advanced System Optimizer\App\asohtm.dll
f5b3347a9cd0d4dfbd61766c9aad3cea c:\Program Files\Common Files\Advanced System Optimizer\App\asores.dll
1895b096ea98c81146d614e121190cbd c:\Program Files\Common Files\Advanced System Optimizer\App\aspcomm.dll
4a53ada608f1470960ee2ed7ed45dfad c:\Program Files\Common Files\Advanced System Optimizer\App\aspsys.dll
47857df83c1bd9755afd1c7f0ae65465 c:\Program Files\Common Files\Advanced System Optimizer\App\atl90.dll
0dc354c787e65d69ec3a19f8b53d8dd7 c:\Program Files\Common Files\Advanced System Optimizer\App\clamunpack\clamscan.exe
1063cd2d85acbe00210a0f65b5c13a4e c:\Program Files\Common Files\Advanced System Optimizer\App\clamunpack\libclamav.dll
cf73c3a03582408d422d4f7a01190d00 c:\Program Files\Common Files\Advanced System Optimizer\App\difxapi.dll
1a2e5109c2bb5c68d499e17b83acb73a c:\Program Files\Common Files\Advanced System Optimizer\App\difxapi64.dll
39038bb09f1d41b731f77a51bf19f519 c:\Program Files\Common Files\Advanced System Optimizer\App\launcher.exe
a76104d8d9aba3670fd3cea603d70ada c:\Program Files\Common Files\Advanced System Optimizer\App\mfc90u.dll
871f979d70414c900b35e56222932daf c:\Program Files\Common Files\Advanced System Optimizer\App\msvcp90.dll
4d03ca609e68f4c90cf66515218017f8 c:\Program Files\Common Files\Advanced System Optimizer\App\msvcr90.dll
0834bb938f243cd146b7e84e05526d81 c:\Program Files\Common Files\Advanced System Optimizer\App\sqlite3.dll
92040a0f7f7d7a3f1e12d8bb064cb3b2 c:\Program Files\Common Files\Advanced System Optimizer\App\unrar.dll
f966b2dbba84704f916540b2446203a0 c:\Program Files\Common Files\Advanced System Optimizer\App\updater\amd64Helper\DriverUpdateHelper64.exe
be0f2a1fa41d92db10a80c3c58b49a7a c:\Program Files\Common Files\Advanced System Optimizer\App\updater\amd64\DriverRestore.exe
ca41d56630191e61565a343c59695ca1 c:\Program Files\Common Files\Advanced System Optimizer\App\updater\extract\7z.dll
f7831ac853ec186059465b2f0aa2676d c:\Program Files\Common Files\Advanced System Optimizer\App\updater\extract\7z.exe
782cc17d6398f166d544674971957e7d c:\Program Files\Common Files\Advanced System Optimizer\App\updater\vista\DriverRestore.exe
ca8a74818e1f0db034151b0e4baf61a0 c:\Program Files\Common Files\Advanced System Optimizer\App\updater\win7amd64\DriverRestore.exe
3f8150764229352837f1070d2dfc8cc3 c:\Program Files\Common Files\Advanced System Optimizer\App\updater\win7i386\DriverRestore.exe
73f5f937c9651f8388b31ad1dce63ddb c:\Program Files\Common Files\Advanced System Optimizer\App\updater\xp\DriverRestore.exe
2fae9f2a922e3fc5909fcf716aae61f2 c:\Program Files\Common Files\Advanced System Optimizer\App\xmllite.dll
98d9a8402f0eb75bbbf7f49fc36688b5 c:\Program Files\Common Files\Advanced System Optimizer\App\zlibwapi.dll

HOSTS file anomalies

No changes have been detected.

Rootkit activity

No anomalies have been detected.

Propagation

VersionInfo

Company Name: Vietnamese by ptk911
Product Name:
Product Version:
Legal Copyright:
Legal Trademarks:
Original Filename:
Internal Name:
File Version: 3.9.1111.16526
File Description: Advanced System Optimizer
Comments:
Language: English (United States)

PE Sections

Name Virtual Address Virtual Size Raw Size Entropy Section MD5
.text 4096 86734 87040 4.60473 2e42313f3fc3e4989aab7b05c9410cfb
.rdata 94208 14650 14848 3.94375 728782433047ac51db0416723bf6117d
.data 110592 19564 2560 2.99063 78722c0b942b18d90bd9fea6bed3e5ba
.rsrc 131072 7532 7680 3.21054 17cbc2a5d9e365b65e0b61b6737766d4

Dropped from:

Downloaded by:

Similar by SSDeep:

Similar by Lavasoft Polymorphic Checker:

URLs

URL IP
hxxp://www.systweak.com/activationcheck/checkactivation.asp?ActivationKey=00JJY7-WTAY0J-K146RX-84C8TJ 164.177.138.158
hxxp://systweak.vo.llnwd.net/asoupdates/update.aspx?productname=aso&currentapplicationid=3.9.1111.16526&currentdbversionid=0&regver=1&machineid=768429272046948335&key=00JJY7-WTAY0J-K146RX-84C8TJ&username=&daysleft=0&cname=&TELNO=(855) 716-7030&TELNOFR=
hxxp://updates3.systweak.com/asoupdates/update.aspx?productname=aso&currentapplicationid=3.9.1111.16526&currentdbversionid=0&regver=1&machineid=768429272046948335&key=00JJY7-WTAY0J-K146RX-84C8TJ&username=&daysleft=0&cname=&TELNO=(855) 716-7030&TELNOFR= 87.248.217.253


IDS verdicts (Suricata alerts: Emerging Threats ET ruleset)

ET MALWARE Common Adware Library ISX User Agent Detected

Traffic

GET /asoupdates/update.aspx?productname=aso¤tapplicationid=3.9.1111.16526¤tdbversionid=0®ver=1&machineid=768429272046948335&key=00JJY7-WTAY0J-K146RX-84C8TJ&username=&daysleft=0&cname=&TELNO=(855) 716-7030&TELNOFR= HTTP/1.1
Accept: */*
Range: bytes=0-416
User-Agent: ISX Download DLL
Host: updates3.systweak.com


HTTP/1.1 206 Partial Content
Server: nginx/1.0.12
Date: Wed, 14 Jan 2015 14:10:53 GMT
Content-Type: application/octet-stream
Last-Modified: Tue, 16 Dec 2014 12:24:19 GMT
Accept-Ranges: bytes
X-Agile-Checksum: ee66ea91c242c9ae2edeb334317715c8dd73c3c69de8f10beba4e62dd4af1da0
Content-Range: bytes 0-415/416
Content-Length: 416
Connection: keep-alive
[Application]..PROGRAM_VERSION=3.9.1111.0..PROGRAM_URL=hXXp://cdn.syst
weak.com/asoupdates/updates/aso_updatestub.exe..PROGRAM_SIZE=627024..O
pen_Browser=0..Description=..Key=aso_updatestub.exe..Hash=757a290af9cd
154fd5482a89fe8f3b3dde1ac726..IS_MANDATORY=0..TELNO=(855) 716-7030..TE
LNOFR=..[TELNOLIST]..1=(800) 871-7918:(855) 716-7030..2=(800) 983-7054
:(855) 716-7030..3=(855) 765-6710:(855) 716-7030........HTTP/1.1 206 P
artial Content..Server: nginx/1.0.12..Date: Wed, 14 Jan 2015 14:10:53
GMT..Content-Type: application/octet-stream..Last-Modified: Tue, 16 De
c 2014 12:24:19 GMT..Accept-Ranges: bytes..X-Agile-Checksum: ee66ea91c
242c9ae2edeb334317715c8dd73c3c69de8f10beba4e62dd4af1da0..Content-Range
: bytes 0-415/416..Content-Length: 416..Connection: keep-alive..[Appli
cation]..PROGRAM_VERSION=3.9.1111.0..PROGRAM_URL=hXXp://cdn.systweak.c
om/asoupdates/updates/aso_updatestub.exe..PROGRAM_SIZE=627024..Open_Br
owser=0..Description=..Key=aso_updatestub.exe..Hash=757a290af9cd154fd5
482a89fe8f3b3dde1ac726..IS_MANDATORY=0..TELNO=(855) 716-7030..TELNOFR=
..[TELNOLIST]..1=(800) 871-7918:(855) 716-7030..2=(800) 983-7054:(855)
716-7030..3=(855) 765-6710:(855) 716-7030..

<<< skipped >>>

HEAD /asoupdates/update.aspx?productname=aso¤tapplicationid=3.9.1111.16526¤tdbversionid=0®ver=1&machineid=768429272046948335&key=00JJY7-WTAY0J-K146RX-84C8TJ&username=&daysleft=0&cname=&TELNO=(855) 716-7030&TELNOFR= HTTP/1.1
Accept: */*
User-Agent: ISX Download DLL
Host: updates3.systweak.com
Content-Length: 0
Cache-Control: no-cache


HTTP/1.1 200 OK
Server: nginx/1.0.12
Date: Wed, 14 Jan 2015 14:10:53 GMT
Content-Type: application/octet-stream
Last-Modified: Tue, 16 Dec 2014 12:24:19 GMT
Accept-Ranges: bytes
X-Agile-Checksum: ee66ea91c242c9ae2edeb334317715c8dd73c3c69de8f10beba4e62dd4af1da0
Content-Length: 416
Connection: keep-alive


HEAD /activationcheck/checkactivation.asp?ActivationKey=00JJY7-WTAY0J-K146RX-84C8TJ HTTP/1.1
Accept: */*
User-Agent: ISX Download DLL
Host: VVV.systweak.com
Content-Length: 0
Cache-Control: no-cache


HTTP/1.1 200 OK
Cache-Control: private
Content-Length: 0
Content-Type: text/html
Server: Microsoft-IIS/7.5
Set-Cookie: ASPSESSIONIDCSBDRBRA=PEAODGMCBPLNLIFMBBDOMMOB; path=/
X-Powered-By: ASP.NET
Date: Wed, 14 Jan 2015 14:10:32 GMT
....



GET /activationcheck/checkactivation.asp?ActivationKey=00JJY7-WTAY0J-K146RX-84C8TJ HTTP/1.1

Accept: */*
User-Agent: ISX Download DLL
Host: VVV.systweak.com
Connection: Keep-Alive
Cache-Control: no-cache
Cookie: ASPSESSIONIDCSBDRBRA=PEAODGMCBPLNLIFMBBDOMMOB


HTTP/1.1 200 OK
Cache-Control: private
Content-Length: 0
Content-Type: text/html
Server: Microsoft-IIS/7.5
X-Powered-By: ASP.NET
Date: Wed, 14 Jan 2015 14:10:32 GMT
HTTP/1.1 200 OK..Cache-Control: private..Content-Length: 0..Content-Ty
pe: text/html..Server: Microsoft-IIS/7.5..X-Powered-By: ASP.NET..Date:
Wed, 14 Jan 2015 14:10:32 GMT..


The Trojan connects to the servers at the folowing location(s):

%original file name%.exe_228:

!Require Windows
.text
`.rdata
@.data
.rsrc
PSSSSSSh
<x%u<
ttNt_Nt.Nt
:Language:%u
Enter password:
0xx
"%s".
Could not overwrite file "%s".
Could not create file "%s".
0xX.
7-Zip: Internal error, code 0xX.
7-Zip: Internal error, code %u.
The archive is corrupted, or invalid password was entered.
7-Zip: Unsupported method.
Error during execution "%s".
"setup.exe"
Could not find "setup.exe".
Could not find command for "%s".
Could not delete file or folder "%s".
Could not create folder "%s".
Error in line %d of configuration data:
Could not open archive file "%s".
1.6.0 develop [x86]
2712 (30
1.6.0 develop [x86] build 2712 (December 30, 2012)
Supported methods and filters, build options:
Sorry, this program requires Microsoft Windows 2000 or later.
COMCTL32.dll
ShellExecuteExW
ShellExecuteW
SHELL32.dll
GDI32.dll
ADVAPI32.dll
GetKeyState
UnhookWindowsHookEx
SetWindowsHookExW
USER32.dll
ole32.dll
OLEAUT32.dll
CreateIoCompletionPort
KERNEL32.dll
MSVCRT.dll
_acmdln
1/*7;8**7
<assemblyIdentity version="1.6.0.2712" name="7-Zip.SfxMod" type="win32"></assemblyIdentity>
<assemblyIdentity type="win32" name="Microsoft.Windows.Common-Controls" version="6.0.0.0" processorArchitecture="X86" publicKeyToken="6595b64144ccf1df"></assemblyIdentity>
<requestedPrivileges><requestedExecutionLevel level="asInvoker" uiAccess="false"></requestedExecutionLevel></requestedPrivileges>
<supportedOS Id="{35138b9a-5d96-4fbd-8e2d-a2440225f93a}"></supportedOS>
X%cX%c
SfxString%d
SfxFolderd
PasswordTitle
PasswordText
%X - X - X - X - X
7ZSfxx.cmd
setup.exe
7ZipSfx.x
SfxVarCmdLine1
SfxVarCmdLine2
SfxVarCmdLine0
@ (%d%s)
3.9.1111.16526

ASO3portable.exe_644:

`.rsrc
N{B%d
SSShh
PSSh$
HHt8Ht.Ht
tUHt5Ht.Ht
!"""#$#$%&'()*( 
support for \P, \p, and \X has not been compiled
PCRE does not support \L, \l, \N, \U, or \u
this version of PCRE is not compiled with PCRE_UTF8 support
POSIX collating elements are not supported
erroffset passed as NULL
POSIX named classes are supported only within a class
operand of unlimited repeat could match the empty string
mscoree.dll
- This application cannot run using the active version of the Microsoft .NET Runtime
Please contact the application's support team for more information.
internal state. The program cannot safely continue execution and must
continue execution and must now be terminated.
GetProcessWindowStation
/AutoIt3ExecuteScript
/AutoIt3ExecuteLine
CmdLine
CmdLineRaw
user32.dll
%d/d/d
kernel32.dll
AutoIt script files (*.au3, *.a3x)
*.au3;*.a3x
All files (*.*)
ASC 0%d
APPSKEY
Psapi.dll
0.0.0.0
%u.%u.%u.%u
04090000
Line %d (File "%s"):
Line %d:
%s (%d) : ==> %s.:
%s (%d) : ==> %s:
FMddddd
URLDOWNLOADTOFILE
UDPSTARTUP
UDPSHUTDOWN
UDPSEND
UDPRECV
UDPOPEN
UDPCLOSESOCKET
UDPBIND
TRAYGETMSG
TCPSTARTUP
TCPSHUTDOWN
TCPSEND
TCPRECV
TCPNAMETOIP
TCPLISTEN
TCPCONNECT
TCPCLOSESOCKET
TCPACCEPT
SHELLEXECUTEWAIT
SHELLEXECUTE
REGENUMKEY
MSGBOX
ISKEYWORD
HTTPSETPROXY
HOTKEYSET
GUIREGISTERMSG
GUIGETMSG
GUICTRLSENDMSG
GUICTRLRECVMSG
FTPSETPROXY
shell32.dll
\??\%s
GUI_RUNDEFMSG
ICMP.DLL
InternetCrackUrlA
FtpGetFileSize
FtpOpenFileA
HttpQueryInfoA
HttpSendRequestA
HttpOpenRequestA
InternetOpenUrlA
Wininet.dll
AutoItCallVariable%d
TCPTimeout
SendKeyDownDelay
SendKeyDelay
FtpBinaryMode
Incorrect Object type in FOR..IN loop
Null Object assignment in FOR..IN loop
AutoIt.Error
3, 2, 2, 0
.DEFAULT\Control Panel\Desktop\ResourceLocale
WIN32_WINDOWS
UNKN%d
SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Shell Folders
SOFTWARE\Microsoft\Windows\CurrentVersion
HOTKEYPRESSED
AUTOITEXE
WINDOWSDIR
Advapi32.dll
HKEY_USERS
HKEY_CURRENT_USER
HKEY_CURRENT_CONFIG
HKEY_CLASSES_ROOT
HKEY_LOCAL_MACHINE
Use directly Windows handle
zcÁ
%Program Files%\Common Files\Advanced System Optimizer\ASO3portable.exe
e /s Delete.reg
GetWindowsDirectoryA
CreatePipe
PeekNamedPipe
GetCPInfo
RegDeleteKeyA
RegCreateKeyExA
RegEnumKeyExA
RegCloseKey
RegOpenKeyExA
SetViewportOrgEx
SHFileOperationA
ShellExecuteA
ShellExecuteExA
RegisterHotKey
EnumWindows
GetAsyncKeyState
GetKeyState
UnregisterHotKey
ExitWindowsEx
EnumThreadWindows
SetKeyboardState
GetKeyboardState
keybd_event
VkKeyScanA
GetKeyboardLayoutNameA
MapVirtualKeyA
EnumChildWindows
.text
`.rdata
@.data
.rsrc
|P/'.hzyBzie
U@UdPFL
   86-146
-./012345678
!"#$%&'()* 
version="3.0.0.0"
<requestedExecutionLevel
name="Microsoft.Windows.Common-Controls"
version="6.0.0.0"
publicKeyToken="6595b64144ccf1df"
KERNEL32.DLL
ADVAPI32.dll
COMCTL32.dll
comdlg32.dll
GDI32.dll
MPR.dll
ole32.dll
OLEAUT32.dll
SHELL32.dll
USER32.dll
VERSION.dll
WINMM.dll
WSOCK32.dll
Missing operator in expression."Unbalanced brackets in expression.
0Incorrect number of parameters in function call.'"ReDim" used without an array variable.>Illegal text at the end of statement (one statement per line).1"If" statement has no matching "EndIf" statement.1"Else" statement with no matching "If" statement.2"EndIf" statement with no matching "If" statement.7Too many "Else" statements for matching "If" statement.3"While" statement has no matching "Wend" statement.4"Wend" statement with no matching "While" statement.%Variable used without being declared.XArray variable has incorrect number of subscripts or subscript dimension range exceeded.)Array variable subscript badly formatted.'Subscript used with non-Array variable.&Too many subscripts used for an array.0Missing subscript dimensions in "Dim" statement.DNo variable given for "Dim", "Local", "Global" or "Const" statement.
0Expected a "=" operator in assignment statement.*Invalid keyword at the start of this line.
Unknown macro.'Unable to execute the external program.*Unable to get a list of running processes.
Invalid file filter given.*Expected a variable in user function call.1"Do" statement has no matching "Until" statement.2"Until" statement with no matching "Do" statement.#"For" statement is badly formatted.2"Next" statement with no matching "For" statement.N"ExitLoop/ContinueLoop" statements only valid from inside a For/Do/While loop.1"For" statement has no matching "Next" statement.@"Case" statement with no matching "Select"or "Switch" statement.:"EndSelect" statement with no matching "Select" statement.ORecursion level has been exceeded - AutoIt will quit to prevent stack overflow.
!Badly formated variable or macro.3This keyword cannot be used after a "Then" keyword.>"Select" statement is missing "EndSelect" or "Case" statement. "If" statements must have a "Then" keyword.
"Cannot assign values to constants..Cannot make existing variables into constants.:Only Object-type variables allowed in an "With" statement.
HCan pass constants by reference only to parameters with "Const" keyword.*Can not initialize a variable with itself.$Incorrect way to use this parameter.:"EndSwitch" statement with no matching "Switch" statement.>"Switch" statement is missing "EndSwitch" or "Case" statement.H"ContinueCase" statement with no matching "Select"or "Switch" statement.
Unable to execute DLLCall.

ASO3portable.exe_644_rwx_00401000_0007E000:

SSShh
PSSh$
HHt8Ht.Ht
tUHt5Ht.Ht
!"""#$#$%&'()*( 
support for \P, \p, and \X has not been compiled
PCRE does not support \L, \l, \N, \U, or \u
this version of PCRE is not compiled with PCRE_UTF8 support
POSIX collating elements are not supported
erroffset passed as NULL
POSIX named classes are supported only within a class
operand of unlimited repeat could match the empty string
mscoree.dll
- This application cannot run using the active version of the Microsoft .NET Runtime
Please contact the application's support team for more information.
internal state. The program cannot safely continue execution and must
continue execution and must now be terminated.
GetProcessWindowStation
/AutoIt3ExecuteScript
/AutoIt3ExecuteLine
CmdLine
CmdLineRaw
user32.dll
%d/d/d
kernel32.dll
AutoIt script files (*.au3, *.a3x)
*.au3;*.a3x
All files (*.*)
ASC 0%d
APPSKEY
Psapi.dll
0.0.0.0
%u.%u.%u.%u
04090000
Line %d (File "%s"):
Line %d:
%s (%d) : ==> %s.:
%s (%d) : ==> %s:
FMddddd
URLDOWNLOADTOFILE
UDPSTARTUP
UDPSHUTDOWN
UDPSEND
UDPRECV
UDPOPEN
UDPCLOSESOCKET
UDPBIND
TRAYGETMSG
TCPSTARTUP
TCPSHUTDOWN
TCPSEND
TCPRECV
TCPNAMETOIP
TCPLISTEN
TCPCONNECT
TCPCLOSESOCKET
TCPACCEPT
SHELLEXECUTEWAIT
SHELLEXECUTE
REGENUMKEY
MSGBOX
ISKEYWORD
HTTPSETPROXY
HOTKEYSET
GUIREGISTERMSG
GUIGETMSG
GUICTRLSENDMSG
GUICTRLRECVMSG
FTPSETPROXY
shell32.dll
\??\%s
GUI_RUNDEFMSG
ICMP.DLL
InternetCrackUrlA
FtpGetFileSize
FtpOpenFileA
HttpQueryInfoA
HttpSendRequestA
HttpOpenRequestA
InternetOpenUrlA
Wininet.dll
AutoItCallVariable%d
TCPTimeout
SendKeyDownDelay
SendKeyDelay
FtpBinaryMode
Incorrect Object type in FOR..IN loop
Null Object assignment in FOR..IN loop
AutoIt.Error
3, 2, 2, 0
.DEFAULT\Control Panel\Desktop\ResourceLocale
WIN32_WINDOWS
UNKN%d
SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Shell Folders
SOFTWARE\Microsoft\Windows\CurrentVersion
HOTKEYPRESSED
AUTOITEXE
WINDOWSDIR
Advapi32.dll
HKEY_USERS
HKEY_CURRENT_USER
HKEY_CURRENT_CONFIG
HKEY_CLASSES_ROOT
HKEY_LOCAL_MACHINE
Use directly Windows handle
zcÁ
%Program Files%\Common Files\Advanced System Optimizer\ASO3portable.exe
e /s Delete.reg
GetWindowsDirectoryA
CreatePipe
PeekNamedPipe
GetCPInfo
RegDeleteKeyA
RegCreateKeyExA
RegEnumKeyExA
RegCloseKey
RegOpenKeyExA
SetViewportOrgEx
SHFileOperationA
ShellExecuteA
ShellExecuteExA
RegisterHotKey
EnumWindows
GetAsyncKeyState
GetKeyState
UnregisterHotKey
ExitWindowsEx
EnumThreadWindows
SetKeyboardState
GetKeyboardState
keybd_event
VkKeyScanA
GetKeyboardLayoutNameA
MapVirtualKeyA
EnumChildWindows
.text
`.rdata
@.data
.rsrc
Missing operator in expression."Unbalanced brackets in expression.
0Incorrect number of parameters in function call.'"ReDim" used without an array variable.>Illegal text at the end of statement (one statement per line).1"If" statement has no matching "EndIf" statement.1"Else" statement with no matching "If" statement.2"EndIf" statement with no matching "If" statement.7Too many "Else" statements for matching "If" statement.3"While" statement has no matching "Wend" statement.4"Wend" statement with no matching "While" statement.%Variable used without being declared.XArray variable has incorrect number of subscripts or subscript dimension range exceeded.)Array variable subscript badly formatted.'Subscript used with non-Array variable.&Too many subscripts used for an array.0Missing subscript dimensions in "Dim" statement.DNo variable given for "Dim", "Local", "Global" or "Const" statement.
0Expected a "=" operator in assignment statement.*Invalid keyword at the start of this line.
Unknown macro.'Unable to execute the external program.*Unable to get a list of running processes.
Invalid file filter given.*Expected a variable in user function call.1"Do" statement has no matching "Until" statement.2"Until" statement with no matching "Do" statement.#"For" statement is badly formatted.2"Next" statement with no matching "For" statement.N"ExitLoop/ContinueLoop" statements only valid from inside a For/Do/While loop.1"For" statement has no matching "Next" statement.@"Case" statement with no matching "Select"or "Switch" statement.:"EndSelect" statement with no matching "Select" statement.ORecursion level has been exceeded - AutoIt will quit to prevent stack overflow.
!Badly formated variable or macro.3This keyword cannot be used after a "Then" keyword.>"Select" statement is missing "EndSelect" or "Case" statement. "If" statements must have a "Then" keyword.
"Cannot assign values to constants..Cannot make existing variables into constants.:Only Object-type variables allowed in an "With" statement.
HCan pass constants by reference only to parameters with "Const" keyword.*Can not initialize a variable with itself.$Incorrect way to use this parameter.:"EndSwitch" statement with no matching "Switch" statement.>"Switch" statement is missing "EndSwitch" or "Case" statement.H"ContinueCase" statement with no matching "Select"or "Switch" statement.
Unable to execute DLLCall.

ASO3.exe_340:

.text
`.rdata
@.data
.rsrc
@.reloc
t.Ht#
t.Ht$
SSShX
{969BB502-2ABB-40c4-BF80-F1530EFEB273}
%ls : Caption:%ls size: %d GB
D:\MyProjects\ASO3Rebrandings\ASO3Stable_INI_Logrus\core\bin\Win32\Release\ASO3.pdb
?GetThisMessageMap@CDlgLeftSideChild@@KGPBUAFX_MSGMAP@@XZ
?GetCurSelLang@@YA?AW4ASO_SUPPORTED_LANG@@XZ
?LoadStringW@CSystweakApp@@QAE?AV?$CStringT@_WV?$StrTraitMFC_DLL@_WV?$ChTraitsCRT@_W@ATL@@@@@ATL@@PB_W0@Z
?GetTextWidthAndHeightSingleLineLF@@YAHPAVCWnd@@V?$CStringT@_WV?$StrTraitMFC_DLL@_WV?$ChTraitsCRT@_W@ATL@@@@@ATL@@PAUtagLOGFONTW@@H@Z
?LoadBitmapW@CHoverButton@@QAE_NIIIVCSize@@V?$CStringT@_WV?$StrTraitMFC_DLL@_WV?$ChTraitsCRT@_W@ATL@@@@@ATL@@@Z
?ReturnAppFont@CSystweakApp@@SA?AV?$CStringT@_WV?$StrTraitMFC_DLL@_WV?$ChTraitsCRT@_W@ATL@@@@@ATL@@XZ
?PreTranslateMessage@CDlgBaseWnd@@UAEHPAUtagMSG@@@Z
??0CRegistry@@QAE@ABQAUHKEY__@@@Z
?Open@CRegistry@@QAEHPAUHKEY__@@PB_W_N@Z
?GetScanStatusASP@CSystweakApp@@QAE?AV?$CStringT@_WV?$StrTraitMFC_DLL@_WV?$ChTraitsCRT@_W@ATL@@@@@ATL@@AAK0_N1@Z
?GetScanStatus@CSystweakApp@@QAE?AV?$CStringT@_WV?$StrTraitMFC_DLL@_WV?$ChTraitsCRT@_W@ATL@@@@@ATL@@IAAK_N1@Z
?GetSystweakAppKey@@YAPB_WXZ
?STPathAppend@@YA?AW4PCO_ERROR_CODES@@AAV?$CStringT@_WV?$StrTraitMFC_DLL@_WV?$ChTraitsCRT@_W@ATL@@@@@ATL@@ABV23@@Z
?ReadString@CRegistry@@QAEHPB_WAAV?$CStringT@_WV?$StrTraitMFC_DLL@_WV?$ChTraitsCRT@_W@ATL@@@@@ATL@@@Z
?GetTextWidthAndHeightSingleLine@@YAHPAVCWnd@@V?$CStringT@_WV?$StrTraitMFC_DLL@_WV?$ChTraitsCRT@_W@ATL@@@@@ATL@@PAVCFont@@H@Z
?InitButton@CLauncherProgBtns@@QAE_NIPAUHINSTANCE__@@HV?$CStringT@_WV?$StrTraitMFC_DLL@_WV?$ChTraitsCRT@_W@ATL@@@@@ATL@@1W4BTN_RIGHT_SIDE_STATE@1@1@Z
?GetApplicationEXEName@@YAPB_WH@Z
?m_CurLoggedUser@CSystweakApp@@2W4CUR_LOGGED_IN_USER_RIGHTS@@A
?LoadStringW@CSystweakApp@@QAE?AV?$CStringT@_WV?$StrTraitMFC_DLL@_WV?$ChTraitsCRT@_W@ATL@@@@@ATL@@PBD@Z
?GetRegAppPath@CSystweakApp@@SA?AV?$CStringT@_WV?$StrTraitMFC_DLL@_WV?$ChTraitsCRT@_W@ATL@@@@@ATL@@XZ
?RestartSelfAsAdmin@CSystweakApp@@QAE_NV?$CStringT@_WV?$StrTraitMFC_DLL@_WV?$ChTraitsCRT@_W@ATL@@@@@ATL@@_N@Z
?IsApplicationRunning@CSystweakApp@@QAE_NV?$CStringT@_WV?$StrTraitMFC_DLL@_WV?$ChTraitsCRT@_W@ATL@@@@@ATL@@K_N@Z
?KillApplication@CSystweakApp@@QAEHV?$CStringT@_WV?$StrTraitMFC_DLL@_WV?$ChTraitsCRT@_W@ATL@@@@@ATL@@@Z
?GetProductNAME@@YA?AV?$CStringT@_WV?$StrTraitMFC_DLL@_WV?$ChTraitsCRT@_W@ATL@@@@@ATL@@XZ
?GetCompanyNAME@@YA?AV?$CStringT@_WV?$StrTraitMFC_DLL@_WV?$ChTraitsCRT@_W@ATL@@@@@ATL@@XZ
?STStartWebsite@@YAXXZ
?STOnlinehelpandsupport@@YAXPB_W@Z
?ShowEnterKeyDlg@CSystweakApp@@SAXPAVCDialog@@PAVCRect@@@Z
?GetThisMessageMap@CDlgBaseWnd@@KGPBUAFX_MSGMAP@@XZ
?ReturnSystweakRegKey@@YAXAAV?$CStringT@_WV?$StrTraitMFC_DLL@_WV?$ChTraitsCRT@_W@ATL@@@@@ATL@@@Z
?STLoadStringFromMainINI@@YA?AV?$CStringT@_WV?$StrTraitMFC_DLL@_WV?$ChTraitsCRT@_W@ATL@@@@@ATL@@PB_W0@Z
?AddRemoveItemToStringArray@CSystweakApp@@QAEXAAVCStringArray@@V?$CStringT@_WV?$StrTraitMFC_DLL@_WV?$ChTraitsCRT@_W@ATL@@@@@ATL@@_N@Z
?GetAppPath@@YAPB_WPAUHINSTANCE__@@AAV?$CStringT@_WV?$StrTraitMFC_DLL@_WV?$ChTraitsCRT@_W@ATL@@@@@ATL@@@Z
?ShellExecuteW@CDlgBaseWnd@@SAPAUHINSTANCE__@@PAUHWND__@@PB_W111H@Z
?ShowShutDownDlg@CSystweakApp@@SAXPAVCDialog@@V?$CStringT@_WV?$StrTraitMFC_DLL@_WV?$ChTraitsCRT@_W@ATL@@@@@ATL@@PAVCRect@@_N@Z
?CreateRestorePoint@CSystweakApp@@QAE_NV?$CStringT@_WV?$StrTraitMFC_DLL@_WV?$ChTraitsCRT@_W@ATL@@@@@ATL@@@Z
?GetAppProgramName@CSystweakApp@@SA?AV?$CStringT@_WV?$StrTraitMFC_DLL@_WV?$ChTraitsCRT@_W@ATL@@@@@ATL@@XZ
?ClearSpcExeNameArray@CSystweakApp@@QAEXXZ
?GetThisMessageMap@CDlgBaseChildPopUpWndBase@@KGPBUAFX_MSGMAP@@XZ
?m_strRegID@CSystweakApp@@2V?$CStringT@_WV?$StrTraitMFC_DLL@_WV?$ChTraitsCRT@_W@ATL@@@@@ATL@@A
?SetAnimationIcons@CXTTrayIcon@@UAE_NPBIHPBV?$CStringT@_WV?$StrTraitMFC_DLL@_WV?$ChTraitsCRT@_W@ATL@@@@@ATL@@@Z
?strDemoCommandlineArgument@CDlgMainWnd@@2V?$CStringT@_WV?$StrTraitMFC_DLL@_WV?$ChTraitsCRT@_W@ATL@@@@@ATL@@A
?OnDllMenuReportFeedback@CDlgMainWnd@@QAEXXZ
?GetThisMessageMap@CDlgMainWnd@@KGPBUAFX_MSGMAP@@XZ
?GetSystemDrive@@YA?AV?$CStringT@_WV?$StrTraitMFC_DLL@_WV?$ChTraitsCRT@_W@ATL@@@@@ATL@@XZ
?LoadStringW@CSystweakApp@@QAE?AV?$CStringT@_WV?$StrTraitMFC_DLL@_WV?$ChTraitsCRT@_W@ATL@@@@@ATL@@I@Z
?CheckKeyStatus@CDlgMainWnd@@SAXXZ
?StartCheckForUpdateWithCmdArgs@CDlgBaseWnd@@SAHV?$CStringT@_WV?$StrTraitMFC_DLL@_WV?$ChTraitsCRT@_W@ATL@@@@@ATL@@@Z
?GetSupportPhoneNumber@@YA?AV?$CStringT@_WV?$StrTraitMFC_DLL@_WV?$ChTraitsCRT@_W@ATL@@@@@ATL@@XZ
?GetSupportPhoneNumberFR@@YA?AV?$CStringT@_WV?$StrTraitMFC_DLL@_WV?$ChTraitsCRT@_W@ATL@@@@@ATL@@XZ
?GetMessageMap@CXTTrayIcon@@MBEPBUAFX_MSGMAP@@XZ
?SetAnimationIcons@CXTTrayIcon@@UAEXPBIPBV?$CStringT@_WV?$StrTraitMFC_DLL@_WV?$ChTraitsCRT@_W@ATL@@@@@ATL@@H@Z
?GetProduct_ABBERIVATED_NAME@@YA?AV?$CStringT@_WV?$StrTraitMFC_DLL@_WV?$ChTraitsCRT@_W@ATL@@@@@ATL@@XZ
?GetThisMessageMap@CSystweakApp@@KGPBUAFX_MSGMAP@@XZ
?m_ExeName@CDlgMainWnd@@2V?$CStringT@_WV?$StrTraitMFC_DLL@_WV?$ChTraitsCRT@_W@ATL@@@@@ATL@@A
?m_ProgramName@CSystweakApp@@1V?$CStringT@_WV?$StrTraitMFC_DLL@_WV?$ChTraitsCRT@_W@ATL@@@@@ATL@@A
?ShellExecuteW@CSystweakApp@@SAPAUHINSTANCE__@@PAUHWND__@@PB_W111H@Z
?GetAppExePath@CSystweakApp@@SA?AV?$CStringT@_WV?$StrTraitMFC_DLL@_WV?$ChTraitsCRT@_W@ATL@@@@@ATL@@XZ
?STGetPublishedURL@@YA_NAAV?$CStringT@_WV?$StrTraitMFC_DLL@_WV?$ChTraitsCRT@_W@ATL@@@@@ATL@@V12@@Z
?RegWriteStringInRegistry@@YA_NPAUHKEY__@@PB_W11@Z
?STGetExecutablePath@@YAHAAV?$CStringT@_WV?$StrTraitMFC_DLL@_WV?$ChTraitsCRT@_W@ATL@@@@@ATL@@@Z
?copy_CString_to_TCHAR@@YAXV?$CStringT@_WV?$StrTraitMFC_DLL@_WV?$ChTraitsCRT@_W@ATL@@@@@ATL@@AAPA_W@Z
ASOHelper.dll
mfc90u.dll
_amsg_exit
_wcmdln
MSVCR90.dll
_crt_debugger_hook
KERNEL32.dll
GetAsyncKeyState
ExitWindowsEx
USER32.dll
GDI32.dll
RegCreateKeyExW
RegCloseKey
RegOpenKeyW
ADVAPI32.dll
ShellExecuteExW
ShellExecuteW
SHELL32.dll
COMCTL32.dll
SHDeleteKeyW
SHLWAPI.dll
ole32.dll
OLEAUT32.dll
gdiplus.dll
MSVCP90.dll
RPCRT4.dll
GetProcessHeap
.?AVCCmdTarget@@
.PAVCException@@
.?AVCWebPage@@
<!--The ID below indicates application support for Windows Vista -->
<supportedOS Id="{e2011457-1546-43c5-a5fe-008deee3d3f0}"/>
<!--The ID below indicates application support for Windows 7 -->
<supportedOS Id="{35138b9a-5d96-4fbd-8e2d-a2440225f93a}"/>
<requestedExecutionLevel level="asInvoker" uiAccess="false"></requestedExecutionLevel>
<assemblyIdentity type="win32" name="Microsoft.VC90.CRT" version="9.0.30729.1" processorArchitecture="x86"></assemblyIdentity>
<assemblyIdentity type="win32" name="Microsoft.VC90.MFC" version="9.0.30729.1" processorArchitecture="x86"></assemblyIdentity>
<assemblyIdentity type="win32" name="Microsoft.Windows.Common-Controls" version="6.0.0.0" processorArchitecture="x86" publicKeyToken="6595b64144ccf1df" language="*"></assemblyIdentity>
&%%! # "
76.15555
---77888
1/*7;8**7
=.-0<<'<
64;*%),/
88/DECJKKJJJIIIHHHHHHHHHIIIIIIIIIIIIIIIJJJJJJIIIIIIIIIIIIIIIKKKKKKKKKKKKKKKKKKKKKKKKKKKKKKKKKKKKKKKKKKJJJKKKKKKLLLLLLLLLKKKKKKKKKKKKLLLLLLKKKKKKLLLLLLLLLMMMLLLLLLLLLLLLLLLMMMMMMMMMMMMMMMMMMMMMMMMNNNPPPPPPPPPPPPPPPPPPPPPPPPQQQQQQRSSHHC
==7KMMKLLJKKIJJGHH?A>99254*31&75,992??<GHHJKKLMMJKKCDB:9376.76.AB>LMMIKKCED;;676,42&42&87.??;GIIKLLMNNHIG<<587.@@<LMMNOOMNNBB>87.87.CC?OPPOPPIJH=<598/CC?MNNNNNNNNMMMMMMMMMMMMNNNNNNNOOLMMIKKDD@>=4:9-86)97*>=3CC=KLKOPPRRRTUUVWWGG@
?>4>>4:9,?>5EE@OPPSSSUVVUVVUUUMMKBB:?>3@?4LLGPQODC;@>5KKFWYYRRPDC<?>4HHCVVVWXXWXXKKG@?5@?5LLGXYYXYYRRPED=@?5KKGXYYWXXIIDA?6JJEXYYKKG@?5?>5@?5@?5@?5@?5@?5@?5@?5JJEWXXVWWQSSHIEA@6<:-:8 <;/@@8JJGRSSUVVUVVHHD>=3AA9MNLTTTRRRRRRQQQQQQOOONNNNNNNNNNNNNNNLLLLLLLLLKKKKKKKKKKKKJJJJJJJJJIIIIIIIIIIIIIIIIIIIIIHHHHHHHHHGGGGGGGGGFFFFFFFFFFFFEEEEEEEEEDDDDDDDDDDDDDDDCCCCCCCCCCCCCCCCCCBBBBBBBBBBBBAAA@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@??????????????????????????????@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@AAABBBBBBBBBBBBBBBBBBBBBBBBBBBCCCCCCCCCCCCCCCDDDDDDDDDDDDEEEEEEEEEEEEFFFFFFFFFFFFGGGGGGGGGGGGHHHHHHHHHHHHHHHHHHHHHHHHHHHHHHIIIIIIIIIIIIIIIIIIIIIJJJJJJJJJJJJJJJJJJJJJJJJJJJJJJJJJJJJJJJJJJJJJJJJJJJJJJJJJIIIIIIIIIIIIIIIIIIIIIHHHHHHHHHHHHHHHHHHGGGGGGGGGGGGGGGGGGGGGEEEEEEEEEDDDDDDDDDDDDDDDDDDDDDDDDCCCCCCCCCCCCBBBBBBBBBBBBBBBBBBBBBAAA???????????????>>>>>>>>>>>>>>>>>>===========================================================================?????????EEEPPP
jh_@?8OQQRSSHIG>>6
87.PRRKLKMKA
hg^JKHPQQOOOMMMNNNOOORSSHHD
KKEY[[WYYVXXSTRFF>
<:.WZYAA6
98.NPPMNNLMMLMMLLLKKKKKKKKKKKKLLLLMMLMMLMMLMMMNNMNNMNNNOOMNNMNNMNNMNNMNNOPP;:1
gf]HIFNOOMMMLLLLLLLLLMMMMMMMMMMMMLLLLLLLLLNNNNNNNNNNNNPPPPPPPPPPPPPPPPPPPPPPPPPPPPPPPPPPPPOOOOOOOOOOOOOOOOOOOOOOOOPPPQQQRSSHIDDB6
Y.vQ/
}%cHAAACCCAAA>>>;;;777KKK
yyy---999^^^:::...FFF
%dIAAADDDAAA>>>999fff
%dJAAADDDBBB>>>:::ggg
%dJAAADDDCCC@@@===999
...zzz
JJJRRR???????????????>>>>>>>>>>>>>>>>>>=========??????????????????????????????@@@@@@@@@@@@@@@@@@@@@AAAAAAAAAAAABBBBBBBBBBBBBBBBBBCCCCCCCCCDDDDDDDDDDDDDDDEEEEEECCC???555  .AGxCM
]]]FFFDDDAAA<<<JJJ...FFFfff
999<<<888]]]
1/.HB>QMJ r
$$$--,=;9
zwiii```UUUJJJBBB>>>GA>.Tm
|#!6-]\[
xB20.yyy
h*20.yyy
$!;.lkj
$!;.VUT
%SwJuxt
={.VsNuwu
4@4,8* :():&&7"#5
/-;*-;*-;*-=*.@ 
TyGTxFUzG[~NMs?=g.=g.=g.=g.=g.=g.=g.=g.=g.=g.=g.=g.=g.=g.=g.=g.=g.=g.=g.=g.=g.=g.=g.=g.=g.=g.=g.=g.=g.=g.=g.=g.=g.=g.=g.=g.=g.=g.=g.=g.=g.=g.=g.=g.=g.=g.=g.=g.=g.=g.=g.=g.=g.=g.=g.=g.=g.=g.=g.=g.=g.=g.=g.=g.=g.=g.=g.=g.=g.=g.=g.=g.=g.=g.=g.=g.=g.=g.=g.=g.=g.=g.=g.=g.=g.=g.=g.=g.=g.=g.=g.=g.=g.=g.=g.=g.=g.=g.=g.=g.=g.=g.=g.=g.=g.=g.=g.=g.=g.=g.=g.=g.=g.=g.=g.=g.=g.=g.=g.=g.=g.=g.=g.=g.=g.=g.=g.=g.=g.=g.=g.=g.=g.=g.=g.=g.=g.=g.=g.=g.=g.=g.=g.=g.=g.=g.=g.=g.=g.=g.=g.=g.=g.=g.=g.=g.=g.=g.=g.=g.=g.=g.=g.=g.=g.=g.=g.=g.=g.=g.=g.=g.=g.=g.=g.=g.=g.=g.=g.=g.=g.=g.=g.=g.=g.=g.=g.=g.=g.=g.=g.=g.=g.=g.=g.=g.=g.=g.=g.=g.=g.=g.=g.=g.=g.=g.=g.=g.=g.=g.=g.=g.=g.=g.=g.=g.=g.=g.=g.=g.=g.=g.=g.=g.=g.=g.=g.=g.=g.=g.=g.=g.=g.=g.=g.=g.=g.=g.=g.=g.=g.=g.=g.=g.=g.=g.=g.=g.=g.=g.=g.PwBh
k[;weB
r@:.ZRA2-$@:.
`.rZ:
 m%4U71B71B71B71B71B71B71B71B71B71B71B71B71B71B71B71B60A60A60A60A60A60A60A60A!5l 2
Adobe Photoshop CS4 Windows
2009:07:01 13:19:55
urlTEXT
MsgeTEXT
 hXXp://ns.adobe.com/xap/1.0/
" id="W5M0MpCehiHzreSzNTczkc9d"?> <x:xmpmeta xmlns:x="adobe:ns:meta/" x:xmptk="Adobe XMP Core 4.2.2-c063 53.352624, 2008/07/30-18:12:18 "> <rdf:RDF xmlns:rdf="hXXp://VVV.w3.org/1999/02/22-rdf-syntax-ns#"> <rdf:Description rdf:about="" xmlns:xmp="hXXp://ns.adobe.com/xap/1.0/" xmlns:xmpMM="hXXp://ns.adobe.com/xap/1.0/mm/" xmlns:stEvt="hXXp://ns.adobe.com/xap/1.0/sType/ResourceEvent#" xmlns:dc="hXXp://purl.org/dc/elements/1.1/" xmlns:photoshop="hXXp://ns.adobe.com/photoshop/1.0/" xmlns:tiff="hXXp://ns.adobe.com/tiff/1.0/" xmlns:exif="hXXp://ns.adobe.com/exif/1.0/" xmp:CreatorTool="Adobe Photoshop CS4 Windows" xmp:MetadataDate="2009-07-01T13:19:55 05:30" xmp:ModifyDate="2009-07-01T13:19:55 05:30" xmp:CreateDate="2009-07-01T13:19:55 05:30" xmpMM:InstanceID="xmp.iid:BF060A6A1266DE11A7F6CCFE2D698220" xmpMM:DocumentID="xmp.did:BE060A6A1266DE11A7F6CCFE2D698220" xmpMM:OriginalDocumentID="xmp.did:BE060A6A1266DE11A7F6CCFE2D698220" dc:format="image/jpeg" photoshop:ColorMode="3" photoshop:ICCProfile="sRGB IEC61966-2.1" tiff:Orientation="1" tiff:XResolution="720090/10000" tiff:YResolution="720090/10000" tiff:ResolutionUnit="2" tiff:NativeDigest="256,257,258,259,262,274,277,284,530,531,282,283,296,301,318,319,529,532,306,270,271,272,305,315,33432;4159B9843A7FCCCC8A1FA2D248110B7F" exif:PixelXDimension="60" exif:PixelYDimension="60" exif:ColorSpace="1" exif:NativeDigest="36864,40960,40961,37121,37122,40962,40963,37510,40964,36867,36868,33434,33437,34850,34852,34855,34856,37377,37378,37379,37380,37381,37382,37383,37384,37385,37386,37396,41483,41484,41486,41487,41488,41492,41493,41495,41728,41729,41730,41985,41986,41987,41988,41989,41990,41991,41992,41993,41994,41995,41996,42016,0,2,4,5,6,7,8,9,10,11,12,13,14,15,16,17,18,20,22,23,24,25,26,27,28,30;B22D5A9BC7549E7A8AB88C762634CF58"> <xmpMM:History> <rdf:Seq> <rdf:li stEvt:action="created" stEvt:instanceID="xmp.iid:BE060A6A1266DE11A7F6CCFE2D698220" stEvt:when="2009-07-01T13:19:55 05:30" stEvt:softwareAgent="Adobe Photoshop CS4 Windows"/> <rdf:li stEvt:action="saved" stEvt:instanceID="xmp.iid:BF060A6A1266DE11A7F6CCFE2D698220" stEvt:when="2009-07-01T13:19:55 05:30" stEvt:softwareAgent="Adobe Photoshop CS4 Windows" stEvt:changed="/"/> </rdf:Seq> </xmpMM:History> </rdf:Description> </rdf:RDF> </x:xmpmeta> <?xpacket end="w"?>
IEC hXXp://VVV.iec.ch
.IEC 61966-2.1 Default RGB colour space - sRGB
CRT curv
2009:08:30 15:59:08
webShiftPercentlong
}hXXp://ns.adobe.com/xap/1.0/
" id="W5M0MpCehiHzreSzNTczkc9d"?> <x:xmpmeta xmlns:x="adobe:ns:meta/" x:xmptk="Adobe XMP Core 4.2.2-c063 53.352624, 2008/07/30-18:12:18 "> <rdf:RDF xmlns:rdf="hXXp://VVV.w3.org/1999/02/22-rdf-syntax-ns#"> <rdf:Description rdf:about="" xmlns:xmp="hXXp://ns.adobe.com/xap/1.0/" xmlns:xmpMM="hXXp://ns.adobe.com/xap/1.0/mm/" xmlns:stEvt="hXXp://ns.adobe.com/xap/1.0/sType/ResourceEvent#" xmlns:dc="hXXp://purl.org/dc/elements/1.1/" xmlns:photoshop="hXXp://ns.adobe.com/photoshop/1.0/" xmlns:tiff="hXXp://ns.adobe.com/tiff/1.0/" xmlns:exif="hXXp://ns.adobe.com/exif/1.0/" xmp:CreatorTool="Adobe Photoshop CS4 Windows" xmp:MetadataDate="2009-08-30T15:59:08 05:30" xmp:ModifyDate="2009-08-30T15:59:08 05:30" xmp:CreateDate="2009-07-01T13:19:55 05:30" xmpMM:InstanceID="xmp.iid:EF74C2F53795DE119EF89106E52B7296" xmpMM:DocumentID="xmp.did:BE060A6A1266DE11A7F6CCFE2D698220" xmpMM:OriginalDocumentID="xmp.did:BE060A6A1266DE11A7F6CCFE2D698220" dc:format="image/jpeg" photoshop:ColorMode="3" photoshop:ICCProfile="sRGB IEC61966-2.1" tiff:Orientation="1" tiff:XResolution="720090/10000" tiff:YResolution="720090/10000" tiff:ResolutionUnit="2" tiff:NativeDigest="256,257,258,259,262,274,277,284,530,531,282,283,296,301,318,319,529,532,306,270,271,272,305,315,33432;1E352A1B9D195F7E784A795BC7813831" exif:PixelXDimension="60" exif:PixelYDimension="60" exif:ColorSpace="1" exif:NativeDigest="36864,40960,40961,37121,37122,40962,40963,37510,40964,36867,36868,33434,33437,34850,34852,34855,34856,37377,37378,37379,37380,37381,37382,37383,37384,37385,37386,37396,41483,41484,41486,41487,41488,41492,41493,41495,41728,41729,41730,41985,41986,41987,41988,41989,41990,41991,41992,41993,41994,41995,41996,42016,0,2,4,5,6,7,8,9,10,11,12,13,14,15,16,17,18,20,22,23,24,25,26,27,28,30;B22D5A9BC7549E7A8AB88C762634CF58"> <xmpMM:History> <rdf:Seq> <rdf:li stEvt:action="created" stEvt:instanceID="xmp.iid:BE060A6A1266DE11A7F6CCFE2D698220" stEvt:when="2009-07-01T13:19:55 05:30" stEvt:softwareAgent="Adobe Photoshop CS4 Windows"/> <rdf:li stEvt:action="saved" stEvt:instanceID="xmp.iid:BF060A6A1266DE11A7F6CCFE2D698220" stEvt:when="2009-07-01T13:19:55 05:30" stEvt:softwareAgent="Adobe Photoshop CS4 Windows" stEvt:changed="/"/> <rdf:li stEvt:action="saved" stEvt:instanceID="xmp.iid:29DF24771966DE11B579BA6AC5BF8994" stEvt:when="2009-07-01T14:03:34 05:30" stEvt:softwareAgent="Adobe Photoshop CS4 Windows" stEvt:changed="/"/> <rdf:li stEvt:action="saved" stEvt:instanceID="xmp.iid:2ADF24771966DE11B579BA6AC5BF8994" stEvt:when="2009-07-01T14:03:34 05:30" stEvt:softwareAgent="Adobe Photoshop CS4 Windows" stEvt:changed="/"/> <rdf:li stEvt:action="saved" stEvt:instanceID="xmp.iid:EF74C2F53795DE119EF89106E52B7296" stEvt:when="2009-08-30T15:59:08 05:30" stEvt:softwareAgent="Adobe Photoshop CS4 Windows" stEvt:changed="/"/> </rdf:Seq> </xmpMM:History> </rdf:Description> </rdf:RDF> </x:xmpmeta> <?xpacket end="w"?>
2009:09:03 12:28:05
hXXp://ns.adobe.com/xap/1.0/
" id="W5M0MpCehiHzreSzNTczkc9d"?> <x:xmpmeta xmlns:x="adobe:ns:meta/" x:xmptk="Adobe XMP Core 4.2.2-c063 53.352624, 2008/07/30-18:12:18 "> <rdf:RDF xmlns:rdf="hXXp://VVV.w3.org/1999/02/22-rdf-syntax-ns#"> <rdf:Description rdf:about="" xmlns:xmp="hXXp://ns.adobe.com/xap/1.0/" xmlns:xmpMM="hXXp://ns.adobe.com/xap/1.0/mm/" xmlns:stEvt="hXXp://ns.adobe.com/xap/1.0/sType/ResourceEvent#" xmlns:stRef="hXXp://ns.adobe.com/xap/1.0/sType/ResourceRef#" xmlns:dc="hXXp://purl.org/dc/elements/1.1/" xmlns:photoshop="hXXp://ns.adobe.com/photoshop/1.0/" xmlns:tiff="hXXp://ns.adobe.com/tiff/1.0/" xmlns:exif="hXXp://ns.adobe.com/exif/1.0/" xmp:CreatorTool="Adobe Photoshop CS4 Windows" xmp:MetadataDate="2009-09-03T12:28:05 05:30" xmp:ModifyDate="2009-09-03T12:28:05 05:30" xmp:CreateDate="2009-07-01T13:19:55 05:30" xmpMM:InstanceID="xmp.iid:F3AE43215798DE118F2AA83EB6DBBBB8" xmpMM:DocumentID="xmp.did:BE060A6A1266DE11A7F6CCFE2D698220" xmpMM:OriginalDocumentID="xmp.did:BE060A6A1266DE11A7F6CCFE2D698220" dc:format="image/jpeg" photoshop:ColorMode="3" photoshop:ICCProfile="sRGB IEC61966-2.1" tiff:Orientation="1" tiff:XResolution="720090/10000" tiff:YResolution="720090/10000" tiff:ResolutionUnit="2" tiff:NativeDigest="256,257,258,259,262,274,277,284,530,531,282,283,296,301,318,319,529,532,306,270,271,272,305,315,33432;1A6E16B8D00F38B667BE827E85FE4E06" exif:PixelXDimension="60" exif:PixelYDimension="60" exif:ColorSpace="1" exif:NativeDigest="36864,40960,40961,37121,37122,40962,40963,37510,40964,36867,36868,33434,33437,34850,34852,34855,34856,37377,37378,37379,37380,37381,37382,37383,37384,37385,37386,37396,41483,41484,41486,41487,41488,41492,41493,41495,41728,41729,41730,41985,41986,41987,41988,41989,41990,41991,41992,41993,41994,41995,41996,42016,0,2,4,5,6,7,8,9,10,11,12,13,14,15,16,17,18,20,22,23,24,25,26,27,28,30;B22D5A9BC7549E7A8AB88C762634CF58"> <xmpMM:History> <rdf:Seq> <rdf:li stEvt:action="created" stEvt:instanceID="xmp.iid:BE060A6A1266DE11A7F6CCFE2D698220" stEvt:when="2009-07-01T13:19:55 05:30" stEvt:softwareAgent="Adobe Photoshop CS4 Windows"/> <rdf:li stEvt:action="saved" stEvt:instanceID="xmp.iid:BF060A6A1266DE11A7F6CCFE2D698220" stEvt:when="2009-07-01T13:19:55 05:30" stEvt:softwareAgent="Adobe Photoshop CS4 Windows" stEvt:changed="/"/> <rdf:li stEvt:action="saved" stEvt:instanceID="xmp.iid:8AF66B0A1E66DE11B579BA6AC5BF8994" stEvt:when="2009-07-01T14:35:56 05:30" stEvt:softwareAgent="Adobe Photoshop CS4 Windows" stEvt:changed="/"/> <rdf:li stEvt:action="converted" stEvt:parameters="from image/jpeg to application/vnd.adobe.photoshop"/> <rdf:li stEvt:action="derived" stEvt:parameters="converted from image/jpeg to application/vnd.adobe.photoshop"/> <rdf:li stEvt:action="saved" stEvt:instanceID="xmp.iid:8BF66B0A1E66DE11B579BA6AC5BF8994" stEvt:when="2009-07-01T14:35:56 05:30" stEvt:softwareAgent="Adobe Photoshop CS4 Windows" stEvt:changed="/"/> <rdf:li stEvt:action="saved" stEvt:instanceID="xmp.iid:F2B2CD74F596DE11BBDAB5D8D180CF22" stEvt:when="2009-09-01T19:14:36 05:30" stEvt:softwareAgent="Adobe Photoshop CS4 Windows" stEvt:changed="/"/> <rdf:li stEvt:action="saved" stEvt:instanceID="xmp.iid:3CFD5F3A5298DE118F2AA83EB6DBBBB8" stEvt:when="2009-09-03T12:28:05 05:30" stEvt:softwareAgent="Adobe Photoshop CS4 Windows" stEvt:changed="/"/> <rdf:li stEvt:action="converted" stEvt:parameters="from application/vnd.adobe.photoshop to image/jpeg"/> <rdf:li stEvt:action="derived" stEvt:parameters="converted from application/vnd.adobe.photoshop to image/jpeg"/> <rdf:li stEvt:action="saved" stEvt:instanceID="xmp.iid:F3AE43215798DE118F2AA83EB6DBBBB8" stEvt:when="2009-09-03T12:28:05 05:30" stEvt:softwareAgent="Adobe Photoshop CS4 Windows" stEvt:changed="/"/> </rdf:Seq> </xmpMM:History> <xmpMM:DerivedFrom stRef:instanceID="xmp.iid:3CFD5F3A5298DE118F2AA83EB6DBBBB8" stRef:documentID="xmp.did:BE060A6A1266DE11A7F6CCFE2D698220" stRef:originalDocumentID="xmp.did:BE060A6A1266DE11A7F6CCFE2D698220"/> </rdf:Description> </rdf:RDF> </x:xmpmeta> <?xpacket end="w"?>
.DdhW
2009:09:03 12:24:45
" id="W5M0MpCehiHzreSzNTczkc9d"?> <x:xmpmeta xmlns:x="adobe:ns:meta/" x:xmptk="Adobe XMP Core 4.2.2-c063 53.352624, 2008/07/30-18:12:18 "> <rdf:RDF xmlns:rdf="hXXp://VVV.w3.org/1999/02/22-rdf-syntax-ns#"> <rdf:Description rdf:about="" xmlns:xmp="hXXp://ns.adobe.com/xap/1.0/" xmlns:xmpMM="hXXp://ns.adobe.com/xap/1.0/mm/" xmlns:stEvt="hXXp://ns.adobe.com/xap/1.0/sType/ResourceEvent#" xmlns:stRef="hXXp://ns.adobe.com/xap/1.0/sType/ResourceRef#" xmlns:dc="hXXp://purl.org/dc/elements/1.1/" xmlns:photoshop="hXXp://ns.adobe.com/photoshop/1.0/" xmlns:tiff="hXXp://ns.adobe.com/tiff/1.0/" xmlns:exif="hXXp://ns.adobe.com/exif/1.0/" xmp:CreatorTool="Adobe Photoshop CS4 Windows" xmp:MetadataDate="2009-09-03T12:24:45 05:30" xmp:ModifyDate="2009-09-03T12:24:45 05:30" xmp:CreateDate="2009-07-01T13:19:55 05:30" xmpMM:InstanceID="xmp.iid:3BFD5F3A5298DE118F2AA83EB6DBBBB8" xmpMM:DocumentID="xmp.did:BE060A6A1266DE11A7F6CCFE2D698220" xmpMM:OriginalDocumentID="xmp.did:BE060A6A1266DE11A7F6CCFE2D698220" dc:format="image/jpeg" photoshop:ColorMode="3" photoshop:ICCProfile="sRGB IEC61966-2.1" tiff:Orientation="1" tiff:XResolution="720090/10000" tiff:YResolution="720090/10000" tiff:ResolutionUnit="2" tiff:NativeDigest="256,257,258,259,262,274,277,284,530,531,282,283,296,301,318,319,529,532,306,270,271,272,305,315,33432;BBC914672BE2574ADE497A52436C224D" exif:PixelXDimension="60" exif:PixelYDimension="60" exif:ColorSpace="1" exif:NativeDigest="36864,40960,40961,37121,37122,40962,40963,37510,40964,36867,36868,33434,33437,34850,34852,34855,34856,37377,37378,37379,37380,37381,37382,37383,37384,37385,37386,37396,41483,41484,41486,41487,41488,41492,41493,41495,41728,41729,41730,41985,41986,41987,41988,41989,41990,41991,41992,41993,41994,41995,41996,42016,0,2,4,5,6,7,8,9,10,11,12,13,14,15,16,17,18,20,22,23,24,25,26,27,28,30;B22D5A9BC7549E7A8AB88C762634CF58"> <xmpMM:History> <rdf:Seq> <rdf:li stEvt:action="created" stEvt:instanceID="xmp.iid:BE060A6A1266DE11A7F6CCFE2D698220" stEvt:when="2009-07-01T13:19:55 05:30" stEvt:softwareAgent="Adobe Photoshop CS4 Windows"/> <rdf:li stEvt:action="saved" stEvt:instanceID="xmp.iid:BF060A6A1266DE11A7F6CCFE2D698220" stEvt:when="2009-07-01T13:19:55 05:30" stEvt:softwareAgent="Adobe Photoshop CS4 Windows" stEvt:changed="/"/> <rdf:li stEvt:action="saved" stEvt:instanceID="xmp.iid:8AF66B0A1E66DE11B579BA6AC5BF8994" stEvt:when="2009-07-01T14:35:56 05:30" stEvt:softwareAgent="Adobe Photoshop CS4 Windows" stEvt:changed="/"/> <rdf:li stEvt:action="converted" stEvt:parameters="from image/jpeg to application/vnd.adobe.photoshop"/> <rdf:li stEvt:action="derived" stEvt:parameters="converted from image/jpeg to application/vnd.adobe.photoshop"/> <rdf:li stEvt:action="saved" stEvt:instanceID="xmp.iid:8BF66B0A1E66DE11B579BA6AC5BF8994" stEvt:when="2009-07-01T14:35:56 05:30" stEvt:softwareAgent="Adobe Photoshop CS4 Windows" stEvt:changed="/"/> <rdf:li stEvt:action="saved" stEvt:instanceID="xmp.iid:F2B2CD74F596DE11BBDAB5D8D180CF22" stEvt:when="2009-09-01T19:14:36 05:30" stEvt:softwareAgent="Adobe Photoshop CS4 Windows" stEvt:changed="/"/> <rdf:li stEvt:action="saved" stEvt:instanceID="xmp.iid:3AFD5F3A5298DE118F2AA83EB6DBBBB8" stEvt:when="2009-09-03T12:24:45 05:30" stEvt:softwareAgent="Adobe Photoshop CS4 Windows" stEvt:changed="/"/> <rdf:li stEvt:action="converted" stEvt:parameters="from application/vnd.adobe.photoshop to image/jpeg"/> <rdf:li stEvt:action="derived" stEvt:parameters="converted from application/vnd.adobe.photoshop to image/jpeg"/> <rdf:li stEvt:action="saved" stEvt:instanceID="xmp.iid:3BFD5F3A5298DE118F2AA83EB6DBBBB8" stEvt:when="2009-09-03T12:24:45 05:30" stEvt:softwareAgent="Adobe Photoshop CS4 Windows" stEvt:changed="/"/> </rdf:Seq> </xmpMM:History> <xmpMM:DerivedFrom stRef:instanceID="xmp.iid:3AFD5F3A5298DE118F2AA83EB6DBBBB8" stRef:documentID="xmp.did:BE060A6A1266DE11A7F6CCFE2D698220" stRef:originalDocumentID="xmp.did:BE060A6A1266DE11A7F6CCFE2D698220"/> </rdf:Description> </rdf:RDF> </x:xmpmeta> <?xpacket end="w"?>
2009:09:19 17:14:09
" id="W5M0MpCehiHzreSzNTczkc9d"?> <x:xmpmeta xmlns:x="adobe:ns:meta/" x:xmptk="Adobe XMP Core 4.2.2-c063 53.352624, 2008/07/30-18:12:18 "> <rdf:RDF xmlns:rdf="hXXp://VVV.w3.org/1999/02/22-rdf-syntax-ns#"> <rdf:Description rdf:about="" xmlns:xmp="hXXp://ns.adobe.com/xap/1.0/" xmlns:xmpMM="hXXp://ns.adobe.com/xap/1.0/mm/" xmlns:stEvt="hXXp://ns.adobe.com/xap/1.0/sType/ResourceEvent#" xmlns:dc="hXXp://purl.org/dc/elements/1.1/" xmlns:photoshop="hXXp://ns.adobe.com/photoshop/1.0/" xmlns:tiff="hXXp://ns.adobe.com/tiff/1.0/" xmlns:exif="hXXp://ns.adobe.com/exif/1.0/" xmp:CreatorTool="Adobe Photoshop CS4 Windows" xmp:MetadataDate="2009-09-19T17:14:09 05:30" xmp:ModifyDate="2009-09-19T17:14:09 05:30" xmp:CreateDate="2009-07-01T13:19:55 05:30" xmpMM:InstanceID="xmp.iid:56C60B3911A5DE1198A5E1DCD1622CC2" xmpMM:DocumentID="xmp.did:BE060A6A1266DE11A7F6CCFE2D698220" xmpMM:OriginalDocumentID="xmp.did:BE060A6A1266DE11A7F6CCFE2D698220" dc:format="image/jpeg" photoshop:ColorMode="3" photoshop:ICCProfile="sRGB IEC61966-2.1" tiff:Orientation="1" tiff:XResolution="720090/10000" tiff:YResolution="720090/10000" tiff:ResolutionUnit="2" tiff:NativeDigest="256,257,258,259,262,274,277,284,530,531,282,283,296,301,318,319,529,532,306,270,271,272,305,315,33432;F092497761876CB168D2B7ADABC50F3D" exif:PixelXDimension="60" exif:PixelYDimension="60" exif:ColorSpace="1" exif:NativeDigest="36864,40960,40961,37121,37122,40962,40963,37510,40964,36867,36868,33434,33437,34850,34852,34855,34856,37377,37378,37379,37380,37381,37382,37383,37384,37385,37386,37396,41483,41484,41486,41487,41488,41492,41493,41495,41728,41729,41730,41985,41986,41987,41988,41989,41990,41991,41992,41993,41994,41995,41996,42016,0,2,4,5,6,7,8,9,10,11,12,13,14,15,16,17,18,20,22,23,24,25,26,27,28,30;B22D5A9BC7549E7A8AB88C762634CF58"> <xmpMM:History> <rdf:Seq> <rdf:li stEvt:action="created" stEvt:instanceID="xmp.iid:BE060A6A1266DE11A7F6CCFE2D698220" stEvt:when="2009-07-01T13:19:55 05:30" stEvt:softwareAgent="Adobe Photoshop CS4 Windows"/> <rdf:li stEvt:action="saved" stEvt:instanceID="xmp.iid:BF060A6A1266DE11A7F6CCFE2D698220" stEvt:when="2009-07-01T13:19:55 05:30" stEvt:softwareAgent="Adobe Photoshop CS4 Windows" stEvt:changed="/"/> <rdf:li stEvt:action="saved" stEvt:instanceID="xmp.iid:FD21DFBF1A66DE11B579BA6AC5BF8994" stEvt:when="2009-07-01T14:19:18 05:30" stEvt:softwareAgent="Adobe Photoshop CS4 Windows" stEvt:changed="/"/> <rdf:li stEvt:action="saved" stEvt:instanceID="xmp.iid:CD1447101C66DE11B579BA6AC5BF8994" stEvt:when="2009-07-01T14:19:18 05:30" stEvt:softwareAgent="Adobe Photoshop CS4 Windows" stEvt:changed="/"/> <rdf:li stEvt:action="saved" stEvt:instanceID="xmp.iid:56C60B3911A5DE1198A5E1DCD1622CC2" stEvt:when="2009-09-19T17:14:09 05:30" stEvt:softwareAgent="Adobe Photoshop CS4 Windows" stEvt:changed="/"/> </rdf:Seq> </xmpMM:History> </rdf:Description> </rdf:RDF> </x:xmpmeta> <?xpacket end="w"?>
2009:07:01 14:21:06
" id="W5M0MpCehiHzreSzNTczkc9d"?> <x:xmpmeta xmlns:x="adobe:ns:meta/" x:xmptk="Adobe XMP Core 4.2.2-c063 53.352624, 2008/07/30-18:12:18 "> <rdf:RDF xmlns:rdf="hXXp://VVV.w3.org/1999/02/22-rdf-syntax-ns#"> <rdf:Description rdf:about="" xmlns:xmp="hXXp://ns.adobe.com/xap/1.0/" xmlns:xmpMM="hXXp://ns.adobe.com/xap/1.0/mm/" xmlns:stEvt="hXXp://ns.adobe.com/xap/1.0/sType/ResourceEvent#" xmlns:dc="hXXp://purl.org/dc/elements/1.1/" xmlns:photoshop="hXXp://ns.adobe.com/photoshop/1.0/" xmlns:tiff="hXXp://ns.adobe.com/tiff/1.0/" xmlns:exif="hXXp://ns.adobe.com/exif/1.0/" xmp:CreatorTool="Adobe Photoshop CS4 Windows" xmp:MetadataDate="2009-07-01T14:21:06 05:30" xmp:ModifyDate="2009-07-01T14:21:06 05:30" xmp:CreateDate="2009-07-01T13:19:55 05:30" xmpMM:InstanceID="xmp.iid:D31447101C66DE11B579BA6AC5BF8994" xmpMM:DocumentID="xmp.did:BE060A6A1266DE11A7F6CCFE2D698220" xmpMM:OriginalDocumentID="xmp.did:BE060A6A1266DE11A7F6CCFE2D698220" dc:format="image/jpeg" photoshop:ColorMode="3" photoshop:ICCProfile="sRGB IEC61966-2.1" tiff:Orientation="1" tiff:XResolution="720090/10000" tiff:YResolution="720090/10000" tiff:ResolutionUnit="2" tiff:NativeDigest="256,257,258,259,262,274,277,284,530,531,282,283,296,301,318,319,529,532,306,270,271,272,305,315,33432;6FD4AB00213AFE979E140B72C3CC21AF" exif:PixelXDimension="60" exif:PixelYDimension="60" exif:ColorSpace="1" exif:NativeDigest="36864,40960,40961,37121,37122,40962,40963,37510,40964,36867,36868,33434,33437,34850,34852,34855,34856,37377,37378,37379,37380,37381,37382,37383,37384,37385,37386,37396,41483,41484,41486,41487,41488,41492,41493,41495,41728,41729,41730,41985,41986,41987,41988,41989,41990,41991,41992,41993,41994,41995,41996,42016,0,2,4,5,6,7,8,9,10,11,12,13,14,15,16,17,18,20,22,23,24,25,26,27,28,30;B22D5A9BC7549E7A8AB88C762634CF58"> <xmpMM:History> <rdf:Seq> <rdf:li stEvt:action="created" stEvt:instanceID="xmp.iid:BE060A6A1266DE11A7F6CCFE2D698220" stEvt:when="2009-07-01T13:19:55 05:30" stEvt:softwareAgent="Adobe Photoshop CS4 Windows"/> <rdf:li stEvt:action="saved" stEvt:instanceID="xmp.iid:BF060A6A1266DE11A7F6CCFE2D698220" stEvt:when="2009-07-01T13:19:55 05:30" stEvt:softwareAgent="Adobe Photoshop CS4 Windows" stEvt:changed="/"/> <rdf:li stEvt:action="saved" stEvt:instanceID="xmp.iid:D21447101C66DE11B579BA6AC5BF8994" stEvt:when="2009-07-01T14:21:06 05:30" stEvt:softwareAgent="Adobe Photoshop CS4 Windows" stEvt:changed="/"/> <rdf:li stEvt:action="saved" stEvt:instanceID="xmp.iid:D31447101C66DE11B579BA6AC5BF8994" stEvt:when="2009-07-01T14:21:06 05:30" stEvt:softwareAgent="Adobe Photoshop CS4 Windows" stEvt:changed="/"/> </rdf:Seq> </xmpMM:History> </rdf:Description> </rdf:RDF> </x:xmpmeta> <?xpacket end="w"?>
8,-%xld
/%cV`9
2009:07:01 14:21:37
" id="W5M0MpCehiHzreSzNTczkc9d"?> <x:xmpmeta xmlns:x="adobe:ns:meta/" x:xmptk="Adobe XMP Core 4.2.2-c063 53.352624, 2008/07/30-18:12:18 "> <rdf:RDF xmlns:rdf="hXXp://VVV.w3.org/1999/02/22-rdf-syntax-ns#"> <rdf:Description rdf:about="" xmlns:xmp="hXXp://ns.adobe.com/xap/1.0/" xmlns:xmpMM="hXXp://ns.adobe.com/xap/1.0/mm/" xmlns:stEvt="hXXp://ns.adobe.com/xap/1.0/sType/ResourceEvent#" xmlns:dc="hXXp://purl.org/dc/elements/1.1/" xmlns:photoshop="hXXp://ns.adobe.com/photoshop/1.0/" xmlns:tiff="hXXp://ns.adobe.com/tiff/1.0/" xmlns:exif="hXXp://ns.adobe.com/exif/1.0/" xmp:CreatorTool="Adobe Photoshop CS4 Windows" xmp:MetadataDate="2009-07-01T14:21:37 05:30" xmp:ModifyDate="2009-07-01T14:21:37 05:30" xmp:CreateDate="2009-07-01T13:19:55 05:30" xmpMM:InstanceID="xmp.iid:D51447101C66DE11B579BA6AC5BF8994" xmpMM:DocumentID="xmp.did:BE060A6A1266DE11A7F6CCFE2D698220" xmpMM:OriginalDocumentID="xmp.did:BE060A6A1266DE11A7F6CCFE2D698220" dc:format="image/jpeg" photoshop:ColorMode="3" photoshop:ICCProfile="sRGB IEC61966-2.1" tiff:Orientation="1" tiff:XResolution="720090/10000" tiff:YResolution="720090/10000" tiff:ResolutionUnit="2" tiff:NativeDigest="256,257,258,259,262,274,277,284,530,531,282,283,296,301,318,319,529,532,306,270,271,272,305,315,33432;648CFD385C7F3334BD9E9C11DC8AC9E7" exif:PixelXDimension="60" exif:PixelYDimension="60" exif:ColorSpace="1" exif:NativeDigest="36864,40960,40961,37121,37122,40962,40963,37510,40964,36867,36868,33434,33437,34850,34852,34855,34856,37377,37378,37379,37380,37381,37382,37383,37384,37385,37386,37396,41483,41484,41486,41487,41488,41492,41493,41495,41728,41729,41730,41985,41986,41987,41988,41989,41990,41991,41992,41993,41994,41995,41996,42016,0,2,4,5,6,7,8,9,10,11,12,13,14,15,16,17,18,20,22,23,24,25,26,27,28,30;B22D5A9BC7549E7A8AB88C762634CF58"> <xmpMM:History> <rdf:Seq> <rdf:li stEvt:action="created" stEvt:instanceID="xmp.iid:BE060A6A1266DE11A7F6CCFE2D698220" stEvt:when="2009-07-01T13:19:55 05:30" stEvt:softwareAgent="Adobe Photoshop CS4 Windows"/> <rdf:li stEvt:action="saved" stEvt:instanceID="xmp.iid:BF060A6A1266DE11A7F6CCFE2D698220" stEvt:when="2009-07-01T13:19:55 05:30" stEvt:softwareAgent="Adobe Photoshop CS4 Windows" stEvt:changed="/"/> <rdf:li stEvt:action="saved" stEvt:instanceID="xmp.iid:D41447101C66DE11B579BA6AC5BF8994" stEvt:when="2009-07-01T14:21:37 05:30" stEvt:softwareAgent="Adobe Photoshop CS4 Windows" stEvt:changed="/"/> <rdf:li stEvt:action="saved" stEvt:instanceID="xmp.iid:D51447101C66DE11B579BA6AC5BF8994" stEvt:when="2009-07-01T14:21:37 05:30" stEvt:softwareAgent="Adobe Photoshop CS4 Windows" stEvt:changed="/"/> </rdf:Seq> </xmpMM:History> </rdf:Description> </rdf:RDF> </x:xmpmeta> <?xpacket end="w"?>
0%U}Q_Y
2009:07:01 14:22:44
" id="W5M0MpCehiHzreSzNTczkc9d"?> <x:xmpmeta xmlns:x="adobe:ns:meta/" x:xmptk="Adobe XMP Core 4.2.2-c063 53.352624, 2008/07/30-18:12:18 "> <rdf:RDF xmlns:rdf="hXXp://VVV.w3.org/1999/02/22-rdf-syntax-ns#"> <rdf:Description rdf:about="" xmlns:xmp="hXXp://ns.adobe.com/xap/1.0/" xmlns:xmpMM="hXXp://ns.adobe.com/xap/1.0/mm/" xmlns:stEvt="hXXp://ns.adobe.com/xap/1.0/sType/ResourceEvent#" xmlns:dc="hXXp://purl.org/dc/elements/1.1/" xmlns:photoshop="hXXp://ns.adobe.com/photoshop/1.0/" xmlns:tiff="hXXp://ns.adobe.com/tiff/1.0/" xmlns:exif="hXXp://ns.adobe.com/exif/1.0/" xmp:CreatorTool="Adobe Photoshop CS4 Windows" xmp:MetadataDate="2009-07-01T14:22:44 05:30" xmp:ModifyDate="2009-07-01T14:22:44 05:30" xmp:CreateDate="2009-07-01T13:19:55 05:30" xmpMM:InstanceID="xmp.iid:D71447101C66DE11B579BA6AC5BF8994" xmpMM:DocumentID="xmp.did:BE060A6A1266DE11A7F6CCFE2D698220" xmpMM:OriginalDocumentID="xmp.did:BE060A6A1266DE11A7F6CCFE2D698220" dc:format="image/jpeg" photoshop:ColorMode="3" photoshop:ICCProfile="sRGB IEC61966-2.1" tiff:Orientation="1" tiff:XResolution="720090/10000" tiff:YResolution="720090/10000" tiff:ResolutionUnit="2" tiff:NativeDigest="256,257,258,259,262,274,277,284,530,531,282,283,296,301,318,319,529,532,306,270,271,272,305,315,33432;48BC7ACFF44AB16266584295DDFD6A78" exif:PixelXDimension="60" exif:PixelYDimension="60" exif:ColorSpace="1" exif:NativeDigest="36864,40960,40961,37121,37122,40962,40963,37510,40964,36867,36868,33434,33437,34850,34852,34855,34856,37377,37378,37379,37380,37381,37382,37383,37384,37385,37386,37396,41483,41484,41486,41487,41488,41492,41493,41495,41728,41729,41730,41985,41986,41987,41988,41989,41990,41991,41992,41993,41994,41995,41996,42016,0,2,4,5,6,7,8,9,10,11,12,13,14,15,16,17,18,20,22,23,24,25,26,27,28,30;B22D5A9BC7549E7A8AB88C762634CF58"> <xmpMM:History> <rdf:Seq> <rdf:li stEvt:action="created" stEvt:instanceID="xmp.iid:BE060A6A1266DE11A7F6CCFE2D698220" stEvt:when="2009-07-01T13:19:55 05:30" stEvt:softwareAgent="Adobe Photoshop CS4 Windows"/> <rdf:li stEvt:action="saved" stEvt:instanceID="xmp.iid:BF060A6A1266DE11A7F6CCFE2D698220" stEvt:when="2009-07-01T13:19:55 05:30" stEvt:softwareAgent="Adobe Photoshop CS4 Windows" stEvt:changed="/"/> <rdf:li stEvt:action="saved" stEvt:instanceID="xmp.iid:D61447101C66DE11B579BA6AC5BF8994" stEvt:when="2009-07-01T14:22:44 05:30" stEvt:softwareAgent="Adobe Photoshop CS4 Windows" stEvt:changed="/"/> <rdf:li stEvt:action="saved" stEvt:instanceID="xmp.iid:D71447101C66DE11B579BA6AC5BF8994" stEvt:when="2009-07-01T14:22:44 05:30" stEvt:softwareAgent="Adobe Photoshop CS4 Windows" stEvt:changed="/"/> </rdf:Seq> </xmpMM:History> </rdf:Description> </rdf:RDF> </x:xmpmeta> <?xpacket end="w"?>
2009:07:01 14:23:23
" id="W5M0MpCehiHzreSzNTczkc9d"?> <x:xmpmeta xmlns:x="adobe:ns:meta/" x:xmptk="Adobe XMP Core 4.2.2-c063 53.352624, 2008/07/30-18:12:18 "> <rdf:RDF xmlns:rdf="hXXp://VVV.w3.org/1999/02/22-rdf-syntax-ns#"> <rdf:Description rdf:about="" xmlns:xmp="hXXp://ns.adobe.com/xap/1.0/" xmlns:xmpMM="hXXp://ns.adobe.com/xap/1.0/mm/" xmlns:stEvt="hXXp://ns.adobe.com/xap/1.0/sType/ResourceEvent#" xmlns:dc="hXXp://purl.org/dc/elements/1.1/" xmlns:photoshop="hXXp://ns.adobe.com/photoshop/1.0/" xmlns:tiff="hXXp://ns.adobe.com/tiff/1.0/" xmlns:exif="hXXp://ns.adobe.com/exif/1.0/" xmp:CreatorTool="Adobe Photoshop CS4 Windows" xmp:MetadataDate="2009-07-01T14:23:23 05:30" xmp:ModifyDate="2009-07-01T14:23:23 05:30" xmp:CreateDate="2009-07-01T13:19:55 05:30" xmpMM:InstanceID="xmp.iid:69CFF7A11C66DE11B579BA6AC5BF8994" xmpMM:DocumentID="xmp.did:BE060A6A1266DE11A7F6CCFE2D698220" xmpMM:OriginalDocumentID="xmp.did:BE060A6A1266DE11A7F6CCFE2D698220" dc:format="image/jpeg" photoshop:ColorMode="3" photoshop:ICCProfile="sRGB IEC61966-2.1" tiff:Orientation="1" tiff:XResolution="720090/10000" tiff:YResolution="720090/10000" tiff:ResolutionUnit="2" tiff:NativeDigest="256,257,258,259,262,274,277,284,530,531,282,283,296,301,318,319,529,532,306,270,271,272,305,315,33432;F180FDAEAB3DCF58FA0A00B136B7BAE0" exif:PixelXDimension="60" exif:PixelYDimension="60" exif:ColorSpace="1" exif:NativeDigest="36864,40960,40961,37121,37122,40962,40963,37510,40964,36867,36868,33434,33437,34850,34852,34855,34856,37377,37378,37379,37380,37381,37382,37383,37384,37385,37386,37396,41483,41484,41486,41487,41488,41492,41493,41495,41728,41729,41730,41985,41986,41987,41988,41989,41990,41991,41992,41993,41994,41995,41996,42016,0,2,4,5,6,7,8,9,10,11,12,13,14,15,16,17,18,20,22,23,24,25,26,27,28,30;B22D5A9BC7549E7A8AB88C762634CF58"> <xmpMM:History> <rdf:Seq> <rdf:li stEvt:action="created" stEvt:instanceID="xmp.iid:BE060A6A1266DE11A7F6CCFE2D698220" stEvt:when="2009-07-01T13:19:55 05:30" stEvt:softwareAgent="Adobe Photoshop CS4 Windows"/> <rdf:li stEvt:action="saved" stEvt:instanceID="xmp.iid:BF060A6A1266DE11A7F6CCFE2D698220" stEvt:when="2009-07-01T13:19:55 05:30" stEvt:softwareAgent="Adobe Photoshop CS4 Windows" stEvt:changed="/"/> <rdf:li stEvt:action="saved" stEvt:instanceID="xmp.iid:68CFF7A11C66DE11B579BA6AC5BF8994" stEvt:when="2009-07-01T14:23:23 05:30" stEvt:softwareAgent="Adobe Photoshop CS4 Windows" stEvt:changed="/"/> <rdf:li stEvt:action="saved" stEvt:instanceID="xmp.iid:69CFF7A11C66DE11B579BA6AC5BF8994" stEvt:when="2009-07-01T14:23:23 05:30" stEvt:softwareAgent="Adobe Photoshop CS4 Windows" stEvt:changed="/"/> </rdf:Seq> </xmpMM:History> </rdf:Description> </rdf:RDF> </x:xmpmeta> <?xpacket end="w"?>
2009:07:01 14:24:06
" id="W5M0MpCehiHzreSzNTczkc9d"?> <x:xmpmeta xmlns:x="adobe:ns:meta/" x:xmptk="Adobe XMP Core 4.2.2-c063 53.352624, 2008/07/30-18:12:18 "> <rdf:RDF xmlns:rdf="hXXp://VVV.w3.org/1999/02/22-rdf-syntax-ns#"> <rdf:Description rdf:about="" xmlns:xmp="hXXp://ns.adobe.com/xap/1.0/" xmlns:xmpMM="hXXp://ns.adobe.com/xap/1.0/mm/" xmlns:stEvt="hXXp://ns.adobe.com/xap/1.0/sType/ResourceEvent#" xmlns:dc="hXXp://purl.org/dc/elements/1.1/" xmlns:photoshop="hXXp://ns.adobe.com/photoshop/1.0/" xmlns:tiff="hXXp://ns.adobe.com/tiff/1.0/" xmlns:exif="hXXp://ns.adobe.com/exif/1.0/" xmp:CreatorTool="Adobe Photoshop CS4 Windows" xmp:MetadataDate="2009-07-01T14:24:06 05:30" xmp:ModifyDate="2009-07-01T14:24:06 05:30" xmp:CreateDate="2009-07-01T13:19:55 05:30" xmpMM:InstanceID="xmp.iid:6BCFF7A11C66DE11B579BA6AC5BF8994" xmpMM:DocumentID="xmp.did:BE060A6A1266DE11A7F6CCFE2D698220" xmpMM:OriginalDocumentID="xmp.did:BE060A6A1266DE11A7F6CCFE2D698220" dc:format="image/jpeg" photoshop:ColorMode="3" photoshop:ICCProfile="sRGB IEC61966-2.1" tiff:Orientation="1" tiff:XResolution="720090/10000" tiff:YResolution="720090/10000" tiff:ResolutionUnit="2" tiff:NativeDigest="256,257,258,259,262,274,277,284,530,531,282,283,296,301,318,319,529,532,306,270,271,272,305,315,33432;DE839AA6582AC48B348C3FA5713EA238" exif:PixelXDimension="60" exif:PixelYDimension="60" exif:ColorSpace="1" exif:NativeDigest="36864,40960,40961,37121,37122,40962,40963,37510,40964,36867,36868,33434,33437,34850,34852,34855,34856,37377,37378,37379,37380,37381,37382,37383,37384,37385,37386,37396,41483,41484,41486,41487,41488,41492,41493,41495,41728,41729,41730,41985,41986,41987,41988,41989,41990,41991,41992,41993,41994,41995,41996,42016,0,2,4,5,6,7,8,9,10,11,12,13,14,15,16,17,18,20,22,23,24,25,26,27,28,30;B22D5A9BC7549E7A8AB88C762634CF58"> <xmpMM:History> <rdf:Seq> <rdf:li stEvt:action="created" stEvt:instanceID="xmp.iid:BE060A6A1266DE11A7F6CCFE2D698220" stEvt:when="2009-07-01T13:19:55 05:30" stEvt:softwareAgent="Adobe Photoshop CS4 Windows"/> <rdf:li stEvt:action="saved" stEvt:instanceID="xmp.iid:BF060A6A1266DE11A7F6CCFE2D698220" stEvt:when="2009-07-01T13:19:55 05:30" stEvt:softwareAgent="Adobe Photoshop CS4 Windows" stEvt:changed="/"/> <rdf:li stEvt:action="saved" stEvt:instanceID="xmp.iid:6ACFF7A11C66DE11B579BA6AC5BF8994" stEvt:when="2009-07-01T14:24:06 05:30" stEvt:softwareAgent="Adobe Photoshop CS4 Windows" stEvt:changed="/"/> <rdf:li stEvt:action="saved" stEvt:instanceID="xmp.iid:6BCFF7A11C66DE11B579BA6AC5BF8994" stEvt:when="2009-07-01T14:24:06 05:30" stEvt:softwareAgent="Adobe Photoshop CS4 Windows" stEvt:changed="/"/> </rdf:Seq> </xmpMM:History> </rdf:Description> </rdf:RDF> </x:xmpmeta> <?xpacket end="w"?>
V;!.kd#
.Ft?eD
2009:07:01 14:25:00
" id="W5M0MpCehiHzreSzNTczkc9d"?> <x:xmpmeta xmlns:x="adobe:ns:meta/" x:xmptk="Adobe XMP Core 4.2.2-c063 53.352624, 2008/07/30-18:12:18 "> <rdf:RDF xmlns:rdf="hXXp://VVV.w3.org/1999/02/22-rdf-syntax-ns#"> <rdf:Description rdf:about="" xmlns:xmp="hXXp://ns.adobe.com/xap/1.0/" xmlns:xmpMM="hXXp://ns.adobe.com/xap/1.0/mm/" xmlns:stEvt="hXXp://ns.adobe.com/xap/1.0/sType/ResourceEvent#" xmlns:dc="hXXp://purl.org/dc/elements/1.1/" xmlns:photoshop="hXXp://ns.adobe.com/photoshop/1.0/" xmlns:tiff="hXXp://ns.adobe.com/tiff/1.0/" xmlns:exif="hXXp://ns.adobe.com/exif/1.0/" xmp:CreatorTool="Adobe Photoshop CS4 Windows" xmp:MetadataDate="2009-07-01T14:25 05:30" xmp:ModifyDate="2009-07-01T14:25 05:30" xmp:CreateDate="2009-07-01T13:19:55 05:30" xmpMM:InstanceID="xmp.iid:6DCFF7A11C66DE11B579BA6AC5BF8994" xmpMM:DocumentID="xmp.did:BE060A6A1266DE11A7F6CCFE2D698220" xmpMM:OriginalDocumentID="xmp.did:BE060A6A1266DE11A7F6CCFE2D698220" dc:format="image/jpeg" photoshop:ColorMode="3" photoshop:ICCProfile="sRGB IEC61966-2.1" tiff:Orientation="1" tiff:XResolution="720090/10000" tiff:YResolution="720090/10000" tiff:ResolutionUnit="2" tiff:NativeDigest="256,257,258,259,262,274,277,284,530,531,282,283,296,301,318,319,529,532,306,270,271,272,305,315,33432;ED53615AF3A33A08E8EF7FA1D85DB33D" exif:PixelXDimension="60" exif:PixelYDimension="60" exif:ColorSpace="1" exif:NativeDigest="36864,40960,40961,37121,37122,40962,40963,37510,40964,36867,36868,33434,33437,34850,34852,34855,34856,37377,37378,37379,37380,37381,37382,37383,37384,37385,37386,37396,41483,41484,41486,41487,41488,41492,41493,41495,41728,41729,41730,41985,41986,41987,41988,41989,41990,41991,41992,41993,41994,41995,41996,42016,0,2,4,5,6,7,8,9,10,11,12,13,14,15,16,17,18,20,22,23,24,25,26,27,28,30;B22D5A9BC7549E7A8AB88C762634CF58"> <xmpMM:History> <rdf:Seq> <rdf:li stEvt:action="created" stEvt:instanceID="xmp.iid:BE060A6A1266DE11A7F6CCFE2D698220" stEvt:when="2009-07-01T13:19:55 05:30" stEvt:softwareAgent="Adobe Photoshop CS4 Windows"/> <rdf:li stEvt:action="saved" stEvt:instanceID="xmp.iid:BF060A6A1266DE11A7F6CCFE2D698220" stEvt:when="2009-07-01T13:19:55 05:30" stEvt:softwareAgent="Adobe Photoshop CS4 Windows" stEvt:changed="/"/> <rdf:li stEvt:action="saved" stEvt:instanceID="xmp.iid:6CCFF7A11C66DE11B579BA6AC5BF8994" stEvt:when="2009-07-01T14:25 05:30" stEvt:softwareAgent="Adobe Photoshop CS4 Windows" stEvt:changed="/"/> <rdf:li stEvt:action="saved" stEvt:instanceID="xmp.iid:6DCFF7A11C66DE11B579BA6AC5BF8994" stEvt:when="2009-07-01T14:25 05:30" stEvt:softwareAgent="Adobe Photoshop CS4 Windows" stEvt:changed="/"/> </rdf:Seq> </xmpMM:History> </rdf:Description> </rdf:RDF> </x:xmpmeta> <?xpacket end="w"?>
2009:07:01 14:25:34
" id="W5M0MpCehiHzreSzNTczkc9d"?> <x:xmpmeta xmlns:x="adobe:ns:meta/" x:xmptk="Adobe XMP Core 4.2.2-c063 53.352624, 2008/07/30-18:12:18 "> <rdf:RDF xmlns:rdf="hXXp://VVV.w3.org/1999/02/22-rdf-syntax-ns#"> <rdf:Description rdf:about="" xmlns:xmp="hXXp://ns.adobe.com/xap/1.0/" xmlns:xmpMM="hXXp://ns.adobe.com/xap/1.0/mm/" xmlns:stEvt="hXXp://ns.adobe.com/xap/1.0/sType/ResourceEvent#" xmlns:dc="hXXp://purl.org/dc/elements/1.1/" xmlns:photoshop="hXXp://ns.adobe.com/photoshop/1.0/" xmlns:tiff="hXXp://ns.adobe.com/tiff/1.0/" xmlns:exif="hXXp://ns.adobe.com/exif/1.0/" xmp:CreatorTool="Adobe Photoshop CS4 Windows" xmp:MetadataDate="2009-07-01T14:25:34 05:30" xmp:ModifyDate="2009-07-01T14:25:34 05:30" xmp:CreateDate="2009-07-01T13:19:55 05:30" xmpMM:InstanceID="xmp.iid:6FCFF7A11C66DE11B579BA6AC5BF8994" xmpMM:DocumentID="xmp.did:BE060A6A1266DE11A7F6CCFE2D698220" xmpMM:OriginalDocumentID="xmp.did:BE060A6A1266DE11A7F6CCFE2D698220" dc:format="image/jpeg" photoshop:ColorMode="3" photoshop:ICCProfile="sRGB IEC61966-2.1" tiff:Orientation="1" tiff:XResolution="720090/10000" tiff:YResolution="720090/10000" tiff:ResolutionUnit="2" tiff:NativeDigest="256,257,258,259,262,274,277,284,530,531,282,283,296,301,318,319,529,532,306,270,271,272,305,315,33432;D6E5C12A3508F731E111180440839F5B" exif:PixelXDimension="60" exif:PixelYDimension="60" exif:ColorSpace="1" exif:NativeDigest="36864,40960,40961,37121,37122,40962,40963,37510,40964,36867,36868,33434,33437,34850,34852,34855,34856,37377,37378,37379,37380,37381,37382,37383,37384,37385,37386,37396,41483,41484,41486,41487,41488,41492,41493,41495,41728,41729,41730,41985,41986,41987,41988,41989,41990,41991,41992,41993,41994,41995,41996,42016,0,2,4,5,6,7,8,9,10,11,12,13,14,15,16,17,18,20,22,23,24,25,26,27,28,30;B22D5A9BC7549E7A8AB88C762634CF58"> <xmpMM:History> <rdf:Seq> <rdf:li stEvt:action="created" stEvt:instanceID="xmp.iid:BE060A6A1266DE11A7F6CCFE2D698220" stEvt:when="2009-07-01T13:19:55 05:30" stEvt:softwareAgent="Adobe Photoshop CS4 Windows"/> <rdf:li stEvt:action="saved" stEvt:instanceID="xmp.iid:BF060A6A1266DE11A7F6CCFE2D698220" stEvt:when="2009-07-01T13:19:55 05:30" stEvt:softwareAgent="Adobe Photoshop CS4 Windows" stEvt:changed="/"/> <rdf:li stEvt:action="saved" stEvt:instanceID="xmp.iid:6ECFF7A11C66DE11B579BA6AC5BF8994" stEvt:when="2009-07-01T14:25:34 05:30" stEvt:softwareAgent="Adobe Photoshop CS4 Windows" stEvt:changed="/"/> <rdf:li stEvt:action="saved" stEvt:instanceID="xmp.iid:6FCFF7A11C66DE11B579BA6AC5BF8994" stEvt:when="2009-07-01T14:25:34 05:30" stEvt:softwareAgent="Adobe Photoshop CS4 Windows" stEvt:changed="/"/> </rdf:Seq> </xmpMM:History> </rdf:Description> </rdf:RDF> </x:xmpmeta> <?xpacket end="w"?>
2009:07:01 14:03:52
" id="W5M0MpCehiHzreSzNTczkc9d"?> <x:xmpmeta xmlns:x="adobe:ns:meta/" x:xmptk="Adobe XMP Core 4.2.2-c063 53.352624, 2008/07/30-18:12:18 "> <rdf:RDF xmlns:rdf="hXXp://VVV.w3.org/1999/02/22-rdf-syntax-ns#"> <rdf:Description rdf:about="" xmlns:xmp="hXXp://ns.adobe.com/xap/1.0/" xmlns:xmpMM="hXXp://ns.adobe.com/xap/1.0/mm/" xmlns:stEvt="hXXp://ns.adobe.com/xap/1.0/sType/ResourceEvent#" xmlns:dc="hXXp://purl.org/dc/elements/1.1/" xmlns:photoshop="hXXp://ns.adobe.com/photoshop/1.0/" xmlns:tiff="hXXp://ns.adobe.com/tiff/1.0/" xmlns:exif="hXXp://ns.adobe.com/exif/1.0/" xmp:CreatorTool="Adobe Photoshop CS4 Windows" xmp:MetadataDate="2009-07-01T14:03:52 05:30" xmp:ModifyDate="2009-07-01T14:03:52 05:30" xmp:CreateDate="2009-07-01T13:19:55 05:30" xmpMM:InstanceID="xmp.iid:2CDF24771966DE11B579BA6AC5BF8994" xmpMM:DocumentID="xmp.did:BE060A6A1266DE11A7F6CCFE2D698220" xmpMM:OriginalDocumentID="xmp.did:BE060A6A1266DE11A7F6CCFE2D698220" dc:format="image/jpeg" photoshop:ColorMode="3" photoshop:ICCProfile="sRGB IEC61966-2.1" tiff:Orientation="1" tiff:XResolution="720090/10000" tiff:YResolution="720090/10000" tiff:ResolutionUnit="2" tiff:NativeDigest="256,257,258,259,262,274,277,284,530,531,282,283,296,301,318,319,529,532,306,270,271,272,305,315,33432;85E45F63A5A1F7DAE5D0529DCFC5DBE5" exif:PixelXDimension="60" exif:PixelYDimension="60" exif:ColorSpace="1" exif:NativeDigest="36864,40960,40961,37121,37122,40962,40963,37510,40964,36867,36868,33434,33437,34850,34852,34855,34856,37377,37378,37379,37380,37381,37382,37383,37384,37385,37386,37396,41483,41484,41486,41487,41488,41492,41493,41495,41728,41729,41730,41985,41986,41987,41988,41989,41990,41991,41992,41993,41994,41995,41996,42016,0,2,4,5,6,7,8,9,10,11,12,13,14,15,16,17,18,20,22,23,24,25,26,27,28,30;B22D5A9BC7549E7A8AB88C762634CF58"> <xmpMM:History> <rdf:Seq> <rdf:li stEvt:action="created" stEvt:instanceID="xmp.iid:BE060A6A1266DE11A7F6CCFE2D698220" stEvt:when="2009-07-01T13:19:55 05:30" stEvt:softwareAgent="Adobe Photoshop CS4 Windows"/> <rdf:li stEvt:action="saved" stEvt:instanceID="xmp.iid:BF060A6A1266DE11A7F6CCFE2D698220" stEvt:when="2009-07-01T13:19:55 05:30" stEvt:softwareAgent="Adobe Photoshop CS4 Windows" stEvt:changed="/"/> <rdf:li stEvt:action="saved" stEvt:instanceID="xmp.iid:2BDF24771966DE11B579BA6AC5BF8994" stEvt:when="2009-07-01T14:03:52 05:30" stEvt:softwareAgent="Adobe Photoshop CS4 Windows" stEvt:changed="/"/> <rdf:li stEvt:action="saved" stEvt:instanceID="xmp.iid:2CDF24771966DE11B579BA6AC5BF8994" stEvt:when="2009-07-01T14:03:52 05:30" stEvt:softwareAgent="Adobe Photoshop CS4 Windows" stEvt:changed="/"/> </rdf:Seq> </xmpMM:History> </rdf:Description> </rdf:RDF> </x:xmpmeta> <?xpacket end="w"?>
A.VcK
2009:07:01 14:27:23
" id="W5M0MpCehiHzreSzNTczkc9d"?> <x:xmpmeta xmlns:x="adobe:ns:meta/" x:xmptk="Adobe XMP Core 4.2.2-c063 53.352624, 2008/07/30-18:12:18 "> <rdf:RDF xmlns:rdf="hXXp://VVV.w3.org/1999/02/22-rdf-syntax-ns#"> <rdf:Description rdf:about="" xmlns:xmp="hXXp://ns.adobe.com/xap/1.0/" xmlns:xmpMM="hXXp://ns.adobe.com/xap/1.0/mm/" xmlns:stEvt="hXXp://ns.adobe.com/xap/1.0/sType/ResourceEvent#" xmlns:dc="hXXp://purl.org/dc/elements/1.1/" xmlns:photoshop="hXXp://ns.adobe.com/photoshop/1.0/" xmlns:tiff="hXXp://ns.adobe.com/tiff/1.0/" xmlns:exif="hXXp://ns.adobe.com/exif/1.0/" xmp:CreatorTool="Adobe Photoshop CS4 Windows" xmp:MetadataDate="2009-07-01T14:27:23 05:30" xmp:ModifyDate="2009-07-01T14:27:23 05:30" xmp:CreateDate="2009-07-01T13:19:55 05:30" xmpMM:InstanceID="xmp.iid:71CFF7A11C66DE11B579BA6AC5BF8994" xmpMM:DocumentID="xmp.did:BE060A6A1266DE11A7F6CCFE2D698220" xmpMM:OriginalDocumentID="xmp.did:BE060A6A1266DE11A7F6CCFE2D698220" dc:format="image/jpeg" photoshop:ColorMode="3" photoshop:ICCProfile="sRGB IEC61966-2.1" tiff:Orientation="1" tiff:XResolution="720090/10000" tiff:YResolution="720090/10000" tiff:ResolutionUnit="2" tiff:NativeDigest="256,257,258,259,262,274,277,284,530,531,282,283,296,301,318,319,529,532,306,270,271,272,305,315,33432;6B7B19E8C3F17CB160FA88CDDD9253AB" exif:PixelXDimension="60" exif:PixelYDimension="60" exif:ColorSpace="1" exif:NativeDigest="36864,40960,40961,37121,37122,40962,40963,37510,40964,36867,36868,33434,33437,34850,34852,34855,34856,37377,37378,37379,37380,37381,37382,37383,37384,37385,37386,37396,41483,41484,41486,41487,41488,41492,41493,41495,41728,41729,41730,41985,41986,41987,41988,41989,41990,41991,41992,41993,41994,41995,41996,42016,0,2,4,5,6,7,8,9,10,11,12,13,14,15,16,17,18,20,22,23,24,25,26,27,28,30;B22D5A9BC7549E7A8AB88C762634CF58"> <xmpMM:History> <rdf:Seq> <rdf:li stEvt:action="created" stEvt:instanceID="xmp.iid:BE060A6A1266DE11A7F6CCFE2D698220" stEvt:when="2009-07-01T13:19:55 05:30" stEvt:softwareAgent="Adobe Photoshop CS4 Windows"/> <rdf:li stEvt:action="saved" stEvt:instanceID="xmp.iid:BF060A6A1266DE11A7F6CCFE2D698220" stEvt:when="2009-07-01T13:19:55 05:30" stEvt:softwareAgent="Adobe Photoshop CS4 Windows" stEvt:changed="/"/> <rdf:li stEvt:action="saved" stEvt:instanceID="xmp.iid:70CFF7A11C66DE11B579BA6AC5BF8994" stEvt:when="2009-07-01T14:27:23 05:30" stEvt:softwareAgent="Adobe Photoshop CS4 Windows" stEvt:changed="/"/> <rdf:li stEvt:action="saved" stEvt:instanceID="xmp.iid:71CFF7A11C66DE11B579BA6AC5BF8994" stEvt:when="2009-07-01T14:27:23 05:30" stEvt:softwareAgent="Adobe Photoshop CS4 Windows" stEvt:changed="/"/> </rdf:Seq> </xmpMM:History> </rdf:Description> </rdf:RDF> </x:xmpmeta> <?xpacket end="w"?>
zjS%dq
2009:07:01 14:29:45
" id="W5M0MpCehiHzreSzNTczkc9d"?> <x:xmpmeta xmlns:x="adobe:ns:meta/" x:xmptk="Adobe XMP Core 4.2.2-c063 53.352624, 2008/07/30-18:12:18 "> <rdf:RDF xmlns:rdf="hXXp://VVV.w3.org/1999/02/22-rdf-syntax-ns#"> <rdf:Description rdf:about="" xmlns:xmp="hXXp://ns.adobe.com/xap/1.0/" xmlns:xmpMM="hXXp://ns.adobe.com/xap/1.0/mm/" xmlns:stEvt="hXXp://ns.adobe.com/xap/1.0/sType/ResourceEvent#" xmlns:dc="hXXp://purl.org/dc/elements/1.1/" xmlns:photoshop="hXXp://ns.adobe.com/photoshop/1.0/" xmlns:tiff="hXXp://ns.adobe.com/tiff/1.0/" xmlns:exif="hXXp://ns.adobe.com/exif/1.0/" xmp:CreatorTool="Adobe Photoshop CS4 Windows" xmp:MetadataDate="2009-07-01T14:29:45 05:30" xmp:ModifyDate="2009-07-01T14:29:45 05:30" xmp:CreateDate="2009-07-01T13:19:55 05:30" xmpMM:InstanceID="xmp.iid:E7C0285F1D66DE11B579BA6AC5BF8994" xmpMM:DocumentID="xmp.did:BE060A6A1266DE11A7F6CCFE2D698220" xmpMM:OriginalDocumentID="xmp.did:BE060A6A1266DE11A7F6CCFE2D698220" dc:format="image/jpeg" photoshop:ColorMode="3" photoshop:ICCProfile="sRGB IEC61966-2.1" tiff:Orientation="1" tiff:XResolution="720090/10000" tiff:YResolution="720090/10000" tiff:ResolutionUnit="2" tiff:NativeDigest="256,257,258,259,262,274,277,284,530,531,282,283,296,301,318,319,529,532,306,270,271,272,305,315,33432;C2E8259CFC99E471915A66853754885E" exif:PixelXDimension="60" exif:PixelYDimension="60" exif:ColorSpace="1" exif:NativeDigest="36864,40960,40961,37121,37122,40962,40963,37510,40964,36867,36868,33434,33437,34850,34852,34855,34856,37377,37378,37379,37380,37381,37382,37383,37384,37385,37386,37396,41483,41484,41486,41487,41488,41492,41493,41495,41728,41729,41730,41985,41986,41987,41988,41989,41990,41991,41992,41993,41994,41995,41996,42016,0,2,4,5,6,7,8,9,10,11,12,13,14,15,16,17,18,20,22,23,24,25,26,27,28,30;B22D5A9BC7549E7A8AB88C762634CF58"> <xmpMM:History> <rdf:Seq> <rdf:li stEvt:action="created" stEvt:instanceID="xmp.iid:BE060A6A1266DE11A7F6CCFE2D698220" stEvt:when="2009-07-01T13:19:55 05:30" stEvt:softwareAgent="Adobe Photoshop CS4 Windows"/> <rdf:li stEvt:action="saved" stEvt:instanceID="xmp.iid:BF060A6A1266DE11A7F6CCFE2D698220" stEvt:when="2009-07-01T13:19:55 05:30" stEvt:softwareAgent="Adobe Photoshop CS4 Windows" stEvt:changed="/"/> <rdf:li stEvt:action="saved" stEvt:instanceID="xmp.iid:E6C0285F1D66DE11B579BA6AC5BF8994" stEvt:when="2009-07-01T14:29:45 05:30" stEvt:softwareAgent="Adobe Photoshop CS4 Windows" stEvt:changed="/"/> <rdf:li stEvt:action="saved" stEvt:instanceID="xmp.iid:E7C0285F1D66DE11B579BA6AC5BF8994" stEvt:when="2009-07-01T14:29:45 05:30" stEvt:softwareAgent="Adobe Photoshop CS4 Windows" stEvt:changed="/"/> </rdf:Seq> </xmpMM:History> </rdf:Description> </rdf:RDF> </x:xmpmeta> <?xpacket end="w"?>
2009:07:01 14:02:54
" id="W5M0MpCehiHzreSzNTczkc9d"?> <x:xmpmeta xmlns:x="adobe:ns:meta/" x:xmptk="Adobe XMP Core 4.2.2-c063 53.352624, 2008/07/30-18:12:18 "> <rdf:RDF xmlns:rdf="hXXp://VVV.w3.org/1999/02/22-rdf-syntax-ns#"> <rdf:Description rdf:about="" xmlns:xmp="hXXp://ns.adobe.com/xap/1.0/" xmlns:xmpMM="hXXp://ns.adobe.com/xap/1.0/mm/" xmlns:stEvt="hXXp://ns.adobe.com/xap/1.0/sType/ResourceEvent#" xmlns:dc="hXXp://purl.org/dc/elements/1.1/" xmlns:photoshop="hXXp://ns.adobe.com/photoshop/1.0/" xmlns:tiff="hXXp://ns.adobe.com/tiff/1.0/" xmlns:exif="hXXp://ns.adobe.com/exif/1.0/" xmp:CreatorTool="Adobe Photoshop CS4 Windows" xmp:MetadataDate="2009-07-01T14:02:54 05:30" xmp:ModifyDate="2009-07-01T14:02:54 05:30" xmp:CreateDate="2009-07-01T13:19:55 05:30" xmpMM:InstanceID="xmp.iid:28DF24771966DE11B579BA6AC5BF8994" xmpMM:DocumentID="xmp.did:BE060A6A1266DE11A7F6CCFE2D698220" xmpMM:OriginalDocumentID="xmp.did:BE060A6A1266DE11A7F6CCFE2D698220" dc:format="image/jpeg" photoshop:ColorMode="3" photoshop:ICCProfile="sRGB IEC61966-2.1" tiff:Orientation="1" tiff:XResolution="720090/10000" tiff:YResolution="720090/10000" tiff:ResolutionUnit="2" tiff:NativeDigest="256,257,258,259,262,274,277,284,530,531,282,283,296,301,318,319,529,532,306,270,271,272,305,315,33432;4827CA82EDA50EB04C40C6E7057E8CC2" exif:PixelXDimension="60" exif:PixelYDimension="60" exif:ColorSpace="1" exif:NativeDigest="36864,40960,40961,37121,37122,40962,40963,37510,40964,36867,36868,33434,33437,34850,34852,34855,34856,37377,37378,37379,37380,37381,37382,37383,37384,37385,37386,37396,41483,41484,41486,41487,41488,41492,41493,41495,41728,41729,41730,41985,41986,41987,41988,41989,41990,41991,41992,41993,41994,41995,41996,42016,0,2,4,5,6,7,8,9,10,11,12,13,14,15,16,17,18,20,22,23,24,25,26,27,28,30;B22D5A9BC7549E7A8AB88C762634CF58"> <xmpMM:History> <rdf:Seq> <rdf:li stEvt:action="created" stEvt:instanceID="xmp.iid:BE060A6A1266DE11A7F6CCFE2D698220" stEvt:when="2009-07-01T13:19:55 05:30" stEvt:softwareAgent="Adobe Photoshop CS4 Windows"/> <rdf:li stEvt:action="saved" stEvt:instanceID="xmp.iid:BF060A6A1266DE11A7F6CCFE2D698220" stEvt:when="2009-07-01T13:19:55 05:30" stEvt:softwareAgent="Adobe Photoshop CS4 Windows" stEvt:changed="/"/> <rdf:li stEvt:action="saved" stEvt:instanceID="xmp.iid:27DF24771966DE11B579BA6AC5BF8994" stEvt:when="2009-07-01T14:02:54 05:30" stEvt:softwareAgent="Adobe Photoshop CS4 Windows" stEvt:changed="/"/> <rdf:li stEvt:action="saved" stEvt:instanceID="xmp.iid:28DF24771966DE11B579BA6AC5BF8994" stEvt:when="2009-07-01T14:02:54 05:30" stEvt:softwareAgent="Adobe Photoshop CS4 Windows" stEvt:changed="/"/> </rdf:Seq> </xmpMM:History> </rdf:Description> </rdf:RDF> </x:xmpmeta> <?xpacket end="w"?>
;1.MI<I<I>
2009:07:01 14:30:35
" id="W5M0MpCehiHzreSzNTczkc9d"?> <x:xmpmeta xmlns:x="adobe:ns:meta/" x:xmptk="Adobe XMP Core 4.2.2-c063 53.352624, 2008/07/30-18:12:18 "> <rdf:RDF xmlns:rdf="hXXp://VVV.w3.org/1999/02/22-rdf-syntax-ns#"> <rdf:Description rdf:about="" xmlns:xmp="hXXp://ns.adobe.com/xap/1.0/" xmlns:xmpMM="hXXp://ns.adobe.com/xap/1.0/mm/" xmlns:stEvt="hXXp://ns.adobe.com/xap/1.0/sType/ResourceEvent#" xmlns:dc="hXXp://purl.org/dc/elements/1.1/" xmlns:photoshop="hXXp://ns.adobe.com/photoshop/1.0/" xmlns:tiff="hXXp://ns.adobe.com/tiff/1.0/" xmlns:exif="hXXp://ns.adobe.com/exif/1.0/" xmp:CreatorTool="Adobe Photoshop CS4 Windows" xmp:MetadataDate="2009-07-01T14:30:35 05:30" xmp:ModifyDate="2009-07-01T14:30:35 05:30" xmp:CreateDate="2009-07-01T13:19:55 05:30" xmpMM:InstanceID="xmp.iid:E9C0285F1D66DE11B579BA6AC5BF8994" xmpMM:DocumentID="xmp.did:BE060A6A1266DE11A7F6CCFE2D698220" xmpMM:OriginalDocumentID="xmp.did:BE060A6A1266DE11A7F6CCFE2D698220" dc:format="image/jpeg" photoshop:ColorMode="3" photoshop:ICCProfile="sRGB IEC61966-2.1" tiff:Orientation="1" tiff:XResolution="720090/10000" tiff:YResolution="720090/10000" tiff:ResolutionUnit="2" tiff:NativeDigest="256,257,258,259,262,274,277,284,530,531,282,283,296,301,318,319,529,532,306,270,271,272,305,315,33432;762B82EF91C5A1528FFEBB3D179CE439" exif:PixelXDimension="60" exif:PixelYDimension="60" exif:ColorSpace="1" exif:NativeDigest="36864,40960,40961,37121,37122,40962,40963,37510,40964,36867,36868,33434,33437,34850,34852,34855,34856,37377,37378,37379,37380,37381,37382,37383,37384,37385,37386,37396,41483,41484,41486,41487,41488,41492,41493,41495,41728,41729,41730,41985,41986,41987,41988,41989,41990,41991,41992,41993,41994,41995,41996,42016,0,2,4,5,6,7,8,9,10,11,12,13,14,15,16,17,18,20,22,23,24,25,26,27,28,30;B22D5A9BC7549E7A8AB88C762634CF58"> <xmpMM:History> <rdf:Seq> <rdf:li stEvt:action="created" stEvt:instanceID="xmp.iid:BE060A6A1266DE11A7F6CCFE2D698220" stEvt:when="2009-07-01T13:19:55 05:30" stEvt:softwareAgent="Adobe Photoshop CS4 Windows"/> <rdf:li stEvt:action="saved" stEvt:instanceID="xmp.iid:BF060A6A1266DE11A7F6CCFE2D698220" stEvt:when="2009-07-01T13:19:55 05:30" stEvt:softwareAgent="Adobe Photoshop CS4 Windows" stEvt:changed="/"/> <rdf:li stEvt:action="saved" stEvt:instanceID="xmp.iid:E8C0285F1D66DE11B579BA6AC5BF8994" stEvt:when="2009-07-01T14:30:35 05:30" stEvt:softwareAgent="Adobe Photoshop CS4 Windows" stEvt:changed="/"/> <rdf:li stEvt:action="saved" stEvt:instanceID="xmp.iid:E9C0285F1D66DE11B579BA6AC5BF8994" stEvt:when="2009-07-01T14:30:35 05:30" stEvt:softwareAgent="Adobe Photoshop CS4 Windows" stEvt:changed="/"/> </rdf:Seq> </xmpMM:History> </rdf:Description> </rdf:RDF> </x:xmpmeta> <?xpacket end="w"?>
2009:07:01 14:31:18
" id="W5M0MpCehiHzreSzNTczkc9d"?> <x:xmpmeta xmlns:x="adobe:ns:meta/" x:xmptk="Adobe XMP Core 4.2.2-c063 53.352624, 2008/07/30-18:12:18 "> <rdf:RDF xmlns:rdf="hXXp://VVV.w3.org/1999/02/22-rdf-syntax-ns#"> <rdf:Description rdf:about="" xmlns:xmp="hXXp://ns.adobe.com/xap/1.0/" xmlns:xmpMM="hXXp://ns.adobe.com/xap/1.0/mm/" xmlns:stEvt="hXXp://ns.adobe.com/xap/1.0/sType/ResourceEvent#" xmlns:dc="hXXp://purl.org/dc/elements/1.1/" xmlns:photoshop="hXXp://ns.adobe.com/photoshop/1.0/" xmlns:tiff="hXXp://ns.adobe.com/tiff/1.0/" xmlns:exif="hXXp://ns.adobe.com/exif/1.0/" xmp:CreatorTool="Adobe Photoshop CS4 Windows" xmp:MetadataDate="2009-07-01T14:31:18 05:30" xmp:ModifyDate="2009-07-01T14:31:18 05:30" xmp:CreateDate="2009-07-01T13:19:55 05:30" xmpMM:InstanceID="xmp.iid:EBC0285F1D66DE11B579BA6AC5BF8994" xmpMM:DocumentID="xmp.did:BE060A6A1266DE11A7F6CCFE2D698220" xmpMM:OriginalDocumentID="xmp.did:BE060A6A1266DE11A7F6CCFE2D698220" dc:format="image/jpeg" photoshop:ColorMode="3" photoshop:ICCProfile="sRGB IEC61966-2.1" tiff:Orientation="1" tiff:XResolution="720090/10000" tiff:YResolution="720090/10000" tiff:ResolutionUnit="2" tiff:NativeDigest="256,257,258,259,262,274,277,284,530,531,282,283,296,301,318,319,529,532,306,270,271,272,305,315,33432;B52D80A2F07A7F5BF8C2FB3F3EF58848" exif:PixelXDimension="60" exif:PixelYDimension="60" exif:ColorSpace="1" exif:NativeDigest="36864,40960,40961,37121,37122,40962,40963,37510,40964,36867,36868,33434,33437,34850,34852,34855,34856,37377,37378,37379,37380,37381,37382,37383,37384,37385,37386,37396,41483,41484,41486,41487,41488,41492,41493,41495,41728,41729,41730,41985,41986,41987,41988,41989,41990,41991,41992,41993,41994,41995,41996,42016,0,2,4,5,6,7,8,9,10,11,12,13,14,15,16,17,18,20,22,23,24,25,26,27,28,30;B22D5A9BC7549E7A8AB88C762634CF58"> <xmpMM:History> <rdf:Seq> <rdf:li stEvt:action="created" stEvt:instanceID="xmp.iid:BE060A6A1266DE11A7F6CCFE2D698220" stEvt:when="2009-07-01T13:19:55 05:30" stEvt:softwareAgent="Adobe Photoshop CS4 Windows"/> <rdf:li stEvt:action="saved" stEvt:instanceID="xmp.iid:BF060A6A1266DE11A7F6CCFE2D698220" stEvt:when="2009-07-01T13:19:55 05:30" stEvt:softwareAgent="Adobe Photoshop CS4 Windows" stEvt:changed="/"/> <rdf:li stEvt:action="saved" stEvt:instanceID="xmp.iid:EAC0285F1D66DE11B579BA6AC5BF8994" stEvt:when="2009-07-01T14:31:18 05:30" stEvt:softwareAgent="Adobe Photoshop CS4 Windows" stEvt:changed="/"/> <rdf:li stEvt:action="saved" stEvt:instanceID="xmp.iid:EBC0285F1D66DE11B579BA6AC5BF8994" stEvt:when="2009-07-01T14:31:18 05:30" stEvt:softwareAgent="Adobe Photoshop CS4 Windows" stEvt:changed="/"/> </rdf:Seq> </xmpMM:History> </rdf:Description> </rdf:RDF> </x:xmpmeta> <?xpacket end="w"?>
2009:07:01 14:32:09
" id="W5M0MpCehiHzreSzNTczkc9d"?> <x:xmpmeta xmlns:x="adobe:ns:meta/" x:xmptk="Adobe XMP Core 4.2.2-c063 53.352624, 2008/07/30-18:12:18 "> <rdf:RDF xmlns:rdf="hXXp://VVV.w3.org/1999/02/22-rdf-syntax-ns#"> <rdf:Description rdf:about="" xmlns:xmp="hXXp://ns.adobe.com/xap/1.0/" xmlns:xmpMM="hXXp://ns.adobe.com/xap/1.0/mm/" xmlns:stEvt="hXXp://ns.adobe.com/xap/1.0/sType/ResourceEvent#" xmlns:dc="hXXp://purl.org/dc/elements/1.1/" xmlns:photoshop="hXXp://ns.adobe.com/photoshop/1.0/" xmlns:tiff="hXXp://ns.adobe.com/tiff/1.0/" xmlns:exif="hXXp://ns.adobe.com/exif/1.0/" xmp:CreatorTool="Adobe Photoshop CS4 Windows" xmp:MetadataDate="2009-07-01T14:32:09 05:30" xmp:ModifyDate="2009-07-01T14:32:09 05:30" xmp:CreateDate="2009-07-01T13:19:55 05:30" xmpMM:InstanceID="xmp.iid:EDC0285F1D66DE11B579BA6AC5BF8994" xmpMM:DocumentID="xmp.did:BE060A6A1266DE11A7F6CCFE2D698220" xmpMM:OriginalDocumentID="xmp.did:BE060A6A1266DE11A7F6CCFE2D698220" dc:format="image/jpeg" photoshop:ColorMode="3" photoshop:ICCProfile="sRGB IEC61966-2.1" tiff:Orientation="1" tiff:XResolution="720090/10000" tiff:YResolution="720090/10000" tiff:ResolutionUnit="2" tiff:NativeDigest="256,257,258,259,262,274,277,284,530,531,282,283,296,301,318,319,529,532,306,270,271,272,305,315,33432;BAE1A43E0303030F5C1B4E6485E03BAF" exif:PixelXDimension="60" exif:PixelYDimension="60" exif:ColorSpace="1" exif:NativeDigest="36864,40960,40961,37121,37122,40962,40963,37510,40964,36867,36868,33434,33437,34850,34852,34855,34856,37377,37378,37379,37380,37381,37382,37383,37384,37385,37386,37396,41483,41484,41486,41487,41488,41492,41493,41495,41728,41729,41730,41985,41986,41987,41988,41989,41990,41991,41992,41993,41994,41995,41996,42016,0,2,4,5,6,7,8,9,10,11,12,13,14,15,16,17,18,20,22,23,24,25,26,27,28,30;B22D5A9BC7549E7A8AB88C762634CF58"> <xmpMM:History> <rdf:Seq> <rdf:li stEvt:action="created" stEvt:instanceID="xmp.iid:BE060A6A1266DE11A7F6CCFE2D698220" stEvt:when="2009-07-01T13:19:55 05:30" stEvt:softwareAgent="Adobe Photoshop CS4 Windows"/> <rdf:li stEvt:action="saved" stEvt:instanceID="xmp.iid:BF060A6A1266DE11A7F6CCFE2D698220" stEvt:when="2009-07-01T13:19:55 05:30" stEvt:softwareAgent="Adobe Photoshop CS4 Windows" stEvt:changed="/"/> <rdf:li stEvt:action="saved" stEvt:instanceID="xmp.iid:ECC0285F1D66DE11B579BA6AC5BF8994" stEvt:when="2009-07-01T14:32:09 05:30" stEvt:softwareAgent="Adobe Photoshop CS4 Windows" stEvt:changed="/"/> <rdf:li stEvt:action="saved" stEvt:instanceID="xmp.iid:EDC0285F1D66DE11B579BA6AC5BF8994" stEvt:when="2009-07-01T14:32:09 05:30" stEvt:softwareAgent="Adobe Photoshop CS4 Windows" stEvt:changed="/"/> </rdf:Seq> </xmpMM:History> </rdf:Description> </rdf:RDF> </x:xmpmeta> <?xpacket end="w"?>
zf{x.bhnaI!n*
2009:07:01 14:32:44
" id="W5M0MpCehiHzreSzNTczkc9d"?> <x:xmpmeta xmlns:x="adobe:ns:meta/" x:xmptk="Adobe XMP Core 4.2.2-c063 53.352624, 2008/07/30-18:12:18 "> <rdf:RDF xmlns:rdf="hXXp://VVV.w3.org/1999/02/22-rdf-syntax-ns#"> <rdf:Description rdf:about="" xmlns:xmp="hXXp://ns.adobe.com/xap/1.0/" xmlns:xmpMM="hXXp://ns.adobe.com/xap/1.0/mm/" xmlns:stEvt="hXXp://ns.adobe.com/xap/1.0/sType/ResourceEvent#" xmlns:dc="hXXp://purl.org/dc/elements/1.1/" xmlns:photoshop="hXXp://ns.adobe.com/photoshop/1.0/" xmlns:tiff="hXXp://ns.adobe.com/tiff/1.0/" xmlns:exif="hXXp://ns.adobe.com/exif/1.0/" xmp:CreatorTool="Adobe Photoshop CS4 Windows" xmp:MetadataDate="2009-07-01T14:32:44 05:30" xmp:ModifyDate="2009-07-01T14:32:44 05:30" xmp:CreateDate="2009-07-01T13:19:55 05:30" xmpMM:InstanceID="xmp.iid:EFC0285F1D66DE11B579BA6AC5BF8994" xmpMM:DocumentID="xmp.did:BE060A6A1266DE11A7F6CCFE2D698220" xmpMM:OriginalDocumentID="xmp.did:BE060A6A1266DE11A7F6CCFE2D698220" dc:format="image/jpeg" photoshop:ColorMode="3" photoshop:ICCProfile="sRGB IEC61966-2.1" tiff:Orientation="1" tiff:XResolution="720090/10000" tiff:YResolution="720090/10000" tiff:ResolutionUnit="2" tiff:NativeDigest="256,257,258,259,262,274,277,284,530,531,282,283,296,301,318,319,529,532,306,270,271,272,305,315,33432;38CF29B73F9A77582E3B16E1596474C5" exif:PixelXDimension="60" exif:PixelYDimension="60" exif:ColorSpace="1" exif:NativeDigest="36864,40960,40961,37121,37122,40962,40963,37510,40964,36867,36868,33434,33437,34850,34852,34855,34856,37377,37378,37379,37380,37381,37382,37383,37384,37385,37386,37396,41483,41484,41486,41487,41488,41492,41493,41495,41728,41729,41730,41985,41986,41987,41988,41989,41990,41991,41992,41993,41994,41995,41996,42016,0,2,4,5,6,7,8,9,10,11,12,13,14,15,16,17,18,20,22,23,24,25,26,27,28,30;B22D5A9BC7549E7A8AB88C762634CF58"> <xmpMM:History> <rdf:Seq> <rdf:li stEvt:action="created" stEvt:instanceID="xmp.iid:BE060A6A1266DE11A7F6CCFE2D698220" stEvt:when="2009-07-01T13:19:55 05:30" stEvt:softwareAgent="Adobe Photoshop CS4 Windows"/> <rdf:li stEvt:action="saved" stEvt:instanceID="xmp.iid:BF060A6A1266DE11A7F6CCFE2D698220" stEvt:when="2009-07-01T13:19:55 05:30" stEvt:softwareAgent="Adobe Photoshop CS4 Windows" stEvt:changed="/"/> <rdf:li stEvt:action="saved" stEvt:instanceID="xmp.iid:EEC0285F1D66DE11B579BA6AC5BF8994" stEvt:when="2009-07-01T14:32:44 05:30" stEvt:softwareAgent="Adobe Photoshop CS4 Windows" stEvt:changed="/"/> <rdf:li stEvt:action="saved" stEvt:instanceID="xmp.iid:EFC0285F1D66DE11B579BA6AC5BF8994" stEvt:when="2009-07-01T14:32:44 05:30" stEvt:softwareAgent="Adobe Photoshop CS4 Windows" stEvt:changed="/"/> </rdf:Seq> </xmpMM:History> </rdf:Description> </rdf:RDF> </x:xmpmeta> <?xpacket end="w"?>
2009:07:01 14:33:27
" id="W5M0MpCehiHzreSzNTczkc9d"?> <x:xmpmeta xmlns:x="adobe:ns:meta/" x:xmptk="Adobe XMP Core 4.2.2-c063 53.352624, 2008/07/30-18:12:18 "> <rdf:RDF xmlns:rdf="hXXp://VVV.w3.org/1999/02/22-rdf-syntax-ns#"> <rdf:Description rdf:about="" xmlns:xmp="hXXp://ns.adobe.com/xap/1.0/" xmlns:xmpMM="hXXp://ns.adobe.com/xap/1.0/mm/" xmlns:stEvt="hXXp://ns.adobe.com/xap/1.0/sType/ResourceEvent#" xmlns:dc="hXXp://purl.org/dc/elements/1.1/" xmlns:photoshop="hXXp://ns.adobe.com/photoshop/1.0/" xmlns:tiff="hXXp://ns.adobe.com/tiff/1.0/" xmlns:exif="hXXp://ns.adobe.com/exif/1.0/" xmp:CreatorTool="Adobe Photoshop CS4 Windows" xmp:MetadataDate="2009-07-01T14:33:27 05:30" xmp:ModifyDate="2009-07-01T14:33:27 05:30" xmp:CreateDate="2009-07-01T13:19:55 05:30" xmpMM:InstanceID="xmp.iid:83F66B0A1E66DE11B579BA6AC5BF8994" xmpMM:DocumentID="xmp.did:BE060A6A1266DE11A7F6CCFE2D698220" xmpMM:OriginalDocumentID="xmp.did:BE060A6A1266DE11A7F6CCFE2D698220" dc:format="image/jpeg" photoshop:ColorMode="3" photoshop:ICCProfile="sRGB IEC61966-2.1" tiff:Orientation="1" tiff:XResolution="720090/10000" tiff:YResolution="720090/10000" tiff:ResolutionUnit="2" tiff:NativeDigest="256,257,258,259,262,274,277,284,530,531,282,283,296,301,318,319,529,532,306,270,271,272,305,315,33432;F3C1AC8F7AB698E8EA67EC260201EB3C" exif:PixelXDimension="60" exif:PixelYDimension="60" exif:ColorSpace="1" exif:NativeDigest="36864,40960,40961,37121,37122,40962,40963,37510,40964,36867,36868,33434,33437,34850,34852,34855,34856,37377,37378,37379,37380,37381,37382,37383,37384,37385,37386,37396,41483,41484,41486,41487,41488,41492,41493,41495,41728,41729,41730,41985,41986,41987,41988,41989,41990,41991,41992,41993,41994,41995,41996,42016,0,2,4,5,6,7,8,9,10,11,12,13,14,15,16,17,18,20,22,23,24,25,26,27,28,30;B22D5A9BC7549E7A8AB88C762634CF58"> <xmpMM:History> <rdf:Seq> <rdf:li stEvt:action="created" stEvt:instanceID="xmp.iid:BE060A6A1266DE11A7F6CCFE2D698220" stEvt:when="2009-07-01T13:19:55 05:30" stEvt:softwareAgent="Adobe Photoshop CS4 Windows"/> <rdf:li stEvt:action="saved" stEvt:instanceID="xmp.iid:BF060A6A1266DE11A7F6CCFE2D698220" stEvt:when="2009-07-01T13:19:55 05:30" stEvt:softwareAgent="Adobe Photoshop CS4 Windows" stEvt:changed="/"/> <rdf:li stEvt:action="saved" stEvt:instanceID="xmp.iid:82F66B0A1E66DE11B579BA6AC5BF8994" stEvt:when="2009-07-01T14:33:27 05:30" stEvt:softwareAgent="Adobe Photoshop CS4 Windows" stEvt:changed="/"/> <rdf:li stEvt:action="saved" stEvt:instanceID="xmp.iid:83F66B0A1E66DE11B579BA6AC5BF8994" stEvt:when="2009-07-01T14:33:27 05:30" stEvt:softwareAgent="Adobe Photoshop CS4 Windows" stEvt:changed="/"/> </rdf:Seq> </xmpMM:History> </rdf:Description> </rdf:RDF> </x:xmpmeta> <?xpacket end="w"?>
`2%fS/
2009:09:03 12:46:46
" id="W5M0MpCehiHzreSzNTczkc9d"?> <x:xmpmeta xmlns:x="adobe:ns:meta/" x:xmptk="Adobe XMP Core 4.2.2-c063 53.352624, 2008/07/30-18:12:18 "> <rdf:RDF xmlns:rdf="hXXp://VVV.w3.org/1999/02/22-rdf-syntax-ns#"> <rdf:Description rdf:about="" xmlns:xmp="hXXp://ns.adobe.com/xap/1.0/" xmlns:xmpMM="hXXp://ns.adobe.com/xap/1.0/mm/" xmlns:stEvt="hXXp://ns.adobe.com/xap/1.0/sType/ResourceEvent#" xmlns:stRef="hXXp://ns.adobe.com/xap/1.0/sType/ResourceRef#" xmlns:dc="hXXp://purl.org/dc/elements/1.1/" xmlns:photoshop="hXXp://ns.adobe.com/photoshop/1.0/" xmlns:tiff="hXXp://ns.adobe.com/tiff/1.0/" xmlns:exif="hXXp://ns.adobe.com/exif/1.0/" xmp:CreatorTool="Adobe Photoshop CS4 Windows" xmp:MetadataDate="2009-09-03T12:46:46 05:30" xmp:ModifyDate="2009-09-03T12:46:46 05:30" xmp:CreateDate="2009-07-01T13:19:55 05:30" xmpMM:InstanceID="xmp.iid:F6AE43215798DE118F2AA83EB6DBBBB8" xmpMM:DocumentID="xmp.did:BE060A6A1266DE11A7F6CCFE2D698220" xmpMM:OriginalDocumentID="xmp.did:BE060A6A1266DE11A7F6CCFE2D698220" dc:format="image/jpeg" photoshop:ColorMode="3" photoshop:ICCProfile="sRGB IEC61966-2.1" tiff:Orientation="1" tiff:XResolution="720090/10000" tiff:YResolution="720090/10000" tiff:ResolutionUnit="2" tiff:NativeDigest="256,257,258,259,262,274,277,284,530,531,282,283,296,301,318,319,529,532,306,270,271,272,305,315,33432;D928E7C48CB83642717DF99E873B0DC5" exif:PixelXDimension="60" exif:PixelYDimension="60" exif:ColorSpace="1" exif:NativeDigest="36864,40960,40961,37121,37122,40962,40963,37510,40964,36867,36868,33434,33437,34850,34852,34855,34856,37377,37378,37379,37380,37381,37382,37383,37384,37385,37386,37396,41483,41484,41486,41487,41488,41492,41493,41495,41728,41729,41730,41985,41986,41987,41988,41989,41990,41991,41992,41993,41994,41995,41996,42016,0,2,4,5,6,7,8,9,10,11,12,13,14,15,16,17,18,20,22,23,24,25,26,27,28,30;B22D5A9BC7549E7A8AB88C762634CF58"> <xmpMM:History> <rdf:Seq> <rdf:li stEvt:action="created" stEvt:instanceID="xmp.iid:BE060A6A1266DE11A7F6CCFE2D698220" stEvt:when="2009-07-01T13:19:55 05:30" stEvt:softwareAgent="Adobe Photoshop CS4 Windows"/> <rdf:li stEvt:action="saved" stEvt:instanceID="xmp.iid:BF060A6A1266DE11A7F6CCFE2D698220" stEvt:when="2009-07-01T13:19:55 05:30" stEvt:softwareAgent="Adobe Photoshop CS4 Windows" stEvt:changed="/"/> <rdf:li stEvt:action="saved" stEvt:instanceID="xmp.iid:8AF66B0A1E66DE11B579BA6AC5BF8994" stEvt:when="2009-07-01T14:35:56 05:30" stEvt:softwareAgent="Adobe Photoshop CS4 Windows" stEvt:changed="/"/> <rdf:li stEvt:action="converted" stEvt:parameters="from image/jpeg to application/vnd.adobe.photoshop"/> <rdf:li stEvt:action="derived" stEvt:parameters="converted from image/jpeg to application/vnd.adobe.photoshop"/> <rdf:li stEvt:action="saved" stEvt:instanceID="xmp.iid:8BF66B0A1E66DE11B579BA6AC5BF8994" stEvt:when="2009-07-01T14:35:56 05:30" stEvt:softwareAgent="Adobe Photoshop CS4 Windows" stEvt:changed="/"/> <rdf:li stEvt:action="saved" stEvt:instanceID="xmp.iid:F2B2CD74F596DE11BBDAB5D8D180CF22" stEvt:when="2009-09-01T19:14:36 05:30" stEvt:softwareAgent="Adobe Photoshop CS4 Windows" stEvt:changed="/"/> <rdf:li stEvt:action="saved" stEvt:instanceID="xmp.iid:F4AE43215798DE118F2AA83EB6DBBBB8" stEvt:when="2009-09-03T12:28:12 05:30" stEvt:softwareAgent="Adobe Photoshop CS4 Windows" stEvt:changed="/"/> <rdf:li stEvt:action="saved" stEvt:instanceID="xmp.iid:F5AE43215798DE118F2AA83EB6DBBBB8" stEvt:when="2009-09-03T12:46:46 05:30" stEvt:softwareAgent="Adobe Photoshop CS4 Windows" stEvt:changed="/"/> <rdf:li stEvt:action="converted" stEvt:parameters="from application/vnd.adobe.photoshop to image/jpeg"/> <rdf:li stEvt:action="derived" stEvt:parameters="converted from application/vnd.adobe.photoshop to image/jpeg"/> <rdf:li stEvt:action="saved" stEvt:instanceID="xmp.iid:F6AE43215798DE118F2AA83EB6DBBBB8" stEvt:when="2009-09-03T12:46:46 05:30" stEvt:softwareAgent="Adobe Photoshop CS4 Windows" stEvt:changed="/"/> </rdf:Seq> </xmpMM:History> <xmpMM:DerivedFrom stRef:instanceID="xmp.iid:F5AE43215798DE118F2AA83EB6DBBBB8" stRef:documentID="xmp.did:BE060A6A1266DE11A7F6CCFE2D698220" stRef:originalDocumentID="xmp.did:BE060A6A1266DE11A7F6CCFE2D698220"/> </rdf:Description> </rdf:RDF> </x:xmpmeta> <?xpacket end="w"?>
2009:07:01 14:34:43
,.kU>
" id="W5M0MpCehiHzreSzNTczkc9d"?> <x:xmpmeta xmlns:x="adobe:ns:meta/" x:xmptk="Adobe XMP Core 4.2.2-c063 53.352624, 2008/07/30-18:12:18 "> <rdf:RDF xmlns:rdf="hXXp://VVV.w3.org/1999/02/22-rdf-syntax-ns#"> <rdf:Description rdf:about="" xmlns:xmp="hXXp://ns.adobe.com/xap/1.0/" xmlns:xmpMM="hXXp://ns.adobe.com/xap/1.0/mm/" xmlns:stEvt="hXXp://ns.adobe.com/xap/1.0/sType/ResourceEvent#" xmlns:dc="hXXp://purl.org/dc/elements/1.1/" xmlns:photoshop="hXXp://ns.adobe.com/photoshop/1.0/" xmlns:tiff="hXXp://ns.adobe.com/tiff/1.0/" xmlns:exif="hXXp://ns.adobe.com/exif/1.0/" xmp:CreatorTool="Adobe Photoshop CS4 Windows" xmp:MetadataDate="2009-07-01T14:34:43 05:30" xmp:ModifyDate="2009-07-01T14:34:43 05:30" xmp:CreateDate="2009-07-01T13:19:55 05:30" xmpMM:InstanceID="xmp.iid:87F66B0A1E66DE11B579BA6AC5BF8994" xmpMM:DocumentID="xmp.did:BE060A6A1266DE11A7F6CCFE2D698220" xmpMM:OriginalDocumentID="xmp.did:BE060A6A1266DE11A7F6CCFE2D698220" dc:format="image/jpeg" photoshop:ColorMode="3" photoshop:ICCProfile="sRGB IEC61966-2.1" tiff:Orientation="1" tiff:XResolution="720090/10000" tiff:YResolution="720090/10000" tiff:ResolutionUnit="2" tiff:NativeDigest="256,257,258,259,262,274,277,284,530,531,282,283,296,301,318,319,529,532,306,270,271,272,305,315,33432;8C15289AFDEA20217846FC0811BCCAC7" exif:PixelXDimension="60" exif:PixelYDimension="60" exif:ColorSpace="1" exif:NativeDigest="36864,40960,40961,37121,37122,40962,40963,37510,40964,36867,36868,33434,33437,34850,34852,34855,34856,37377,37378,37379,37380,37381,37382,37383,37384,37385,37386,37396,41483,41484,41486,41487,41488,41492,41493,41495,41728,41729,41730,41985,41986,41987,41988,41989,41990,41991,41992,41993,41994,41995,41996,42016,0,2,4,5,6,7,8,9,10,11,12,13,14,15,16,17,18,20,22,23,24,25,26,27,28,30;B22D5A9BC7549E7A8AB88C762634CF58"> <xmpMM:History> <rdf:Seq> <rdf:li stEvt:action="created" stEvt:instanceID="xmp.iid:BE060A6A1266DE11A7F6CCFE2D698220" stEvt:when="2009-07-01T13:19:55 05:30" stEvt:softwareAgent="Adobe Photoshop CS4 Windows"/> <rdf:li stEvt:action="saved" stEvt:instanceID="xmp.iid:BF060A6A1266DE11A7F6CCFE2D698220" stEvt:when="2009-07-01T13:19:55 05:30" stEvt:softwareAgent="Adobe Photoshop CS4 Windows" stEvt:changed="/"/> <rdf:li stEvt:action="saved" stEvt:instanceID="xmp.iid:86F66B0A1E66DE11B579BA6AC5BF8994" stEvt:when="2009-07-01T14:34:43 05:30" stEvt:softwareAgent="Adobe Photoshop CS4 Windows" stEvt:changed="/"/> <rdf:li stEvt:action="saved" stEvt:instanceID="xmp.iid:87F66B0A1E66DE11B579BA6AC5BF8994" stEvt:when="2009-07-01T14:34:43 05:30" stEvt:softwareAgent="Adobe Photoshop CS4 Windows" stEvt:changed="/"/> </rdf:Seq> </xmpMM:History> </rdf:Description> </rdf:RDF> </x:xmpmeta> <?xpacket end="w"?>
2009:07:01 14:35:20
" id="W5M0MpCehiHzreSzNTczkc9d"?> <x:xmpmeta xmlns:x="adobe:ns:meta/" x:xmptk="Adobe XMP Core 4.2.2-c063 53.352624, 2008/07/30-18:12:18 "> <rdf:RDF xmlns:rdf="hXXp://VVV.w3.org/1999/02/22-rdf-syntax-ns#"> <rdf:Description rdf:about="" xmlns:xmp="hXXp://ns.adobe.com/xap/1.0/" xmlns:xmpMM="hXXp://ns.adobe.com/xap/1.0/mm/" xmlns:stEvt="hXXp://ns.adobe.com/xap/1.0/sType/ResourceEvent#" xmlns:dc="hXXp://purl.org/dc/elements/1.1/" xmlns:photoshop="hXXp://ns.adobe.com/photoshop/1.0/" xmlns:tiff="hXXp://ns.adobe.com/tiff/1.0/" xmlns:exif="hXXp://ns.adobe.com/exif/1.0/" xmp:CreatorTool="Adobe Photoshop CS4 Windows" xmp:MetadataDate="2009-07-01T14:35:20 05:30" xmp:ModifyDate="2009-07-01T14:35:20 05:30" xmp:CreateDate="2009-07-01T13:19:55 05:30" xmpMM:InstanceID="xmp.iid:89F66B0A1E66DE11B579BA6AC5BF8994" xmpMM:DocumentID="xmp.did:BE060A6A1266DE11A7F6CCFE2D698220" xmpMM:OriginalDocumentID="xmp.did:BE060A6A1266DE11A7F6CCFE2D698220" dc:format="image/jpeg" photoshop:ColorMode="3" photoshop:ICCProfile="sRGB IEC61966-2.1" tiff:Orientation="1" tiff:XResolution="720090/10000" tiff:YResolution="720090/10000" tiff:ResolutionUnit="2" tiff:NativeDigest="256,257,258,259,262,274,277,284,530,531,282,283,296,301,318,319,529,532,306,270,271,272,305,315,33432;FC86CE575ACA7A898AC4BF4C7D2AED1E" exif:PixelXDimension="60" exif:PixelYDimension="60" exif:ColorSpace="1" exif:NativeDigest="36864,40960,40961,37121,37122,40962,40963,37510,40964,36867,36868,33434,33437,34850,34852,34855,34856,37377,37378,37379,37380,37381,37382,37383,37384,37385,37386,37396,41483,41484,41486,41487,41488,41492,41493,41495,41728,41729,41730,41985,41986,41987,41988,41989,41990,41991,41992,41993,41994,41995,41996,42016,0,2,4,5,6,7,8,9,10,11,12,13,14,15,16,17,18,20,22,23,24,25,26,27,28,30;B22D5A9BC7549E7A8AB88C762634CF58"> <xmpMM:History> <rdf:Seq> <rdf:li stEvt:action="created" stEvt:instanceID="xmp.iid:BE060A6A1266DE11A7F6CCFE2D698220" stEvt:when="2009-07-01T13:19:55 05:30" stEvt:softwareAgent="Adobe Photoshop CS4 Windows"/> <rdf:li stEvt:action="saved" stEvt:instanceID="xmp.iid:BF060A6A1266DE11A7F6CCFE2D698220" stEvt:when="2009-07-01T13:19:55 05:30" stEvt:softwareAgent="Adobe Photoshop CS4 Windows" stEvt:changed="/"/> <rdf:li stEvt:action="saved" stEvt:instanceID="xmp.iid:88F66B0A1E66DE11B579BA6AC5BF8994" stEvt:when="2009-07-01T14:35:20 05:30" stEvt:softwareAgent="Adobe Photoshop CS4 Windows" stEvt:changed="/"/> <rdf:li stEvt:action="saved" stEvt:instanceID="xmp.iid:89F66B0A1E66DE11B579BA6AC5BF8994" stEvt:when="2009-07-01T14:35:20 05:30" stEvt:softwareAgent="Adobe Photoshop CS4 Windows" stEvt:changed="/"/> </rdf:Seq> </xmpMM:History> </rdf:Description> </rdf:RDF> </x:xmpmeta> <?xpacket end="w"?>
2009:08:31 16:12:20
" id="W5M0MpCehiHzreSzNTczkc9d"?> <x:xmpmeta xmlns:x="adobe:ns:meta/" x:xmptk="Adobe XMP Core 4.2.2-c063 53.352624, 2008/07/30-18:12:18 "> <rdf:RDF xmlns:rdf="hXXp://VVV.w3.org/1999/02/22-rdf-syntax-ns#"> <rdf:Description rdf:about="" xmlns:xmp="hXXp://ns.adobe.com/xap/1.0/" xmlns:dc="hXXp://purl.org/dc/elements/1.1/" xmlns:xmpMM="hXXp://ns.adobe.com/xap/1.0/mm/" xmlns:stEvt="hXXp://ns.adobe.com/xap/1.0/sType/ResourceEvent#" xmlns:stRef="hXXp://ns.adobe.com/xap/1.0/sType/ResourceRef#" xmlns:tiff="hXXp://ns.adobe.com/tiff/1.0/" xmlns:exif="hXXp://ns.adobe.com/exif/1.0/" xmlns:photoshop="hXXp://ns.adobe.com/photoshop/1.0/" xmp:CreatorTool="Adobe Photoshop CS4 Windows" xmp:CreateDate="2009-08-31T16:10:09 05:30" xmp:MetadataDate="2009-08-31T16:12:20 05:30" xmp:ModifyDate="2009-08-31T16:12:20 05:30" dc:format="image/jpeg" xmpMM:InstanceID="xmp.iid:7E8037EF1A96DE11B8B1F7A8EAF0CDF5" xmpMM:DocumentID="xmp.did:6529C00A1296DE11B8B1F7A8EAF0CDF5" xmpMM:OriginalDocumentID="xmp.did:6729C00A1296DE11B8B1F7A8EAF0CDF5" tiff:Orientation="1" tiff:XResolution="720090/10000" tiff:YResolution="720090/10000" tiff:ResolutionUnit="2" tiff:NativeDigest="256,257,258,259,262,274,277,284,530,531,282,283,296,301,318,319,529,532,306,270,271,272,305,315,33432;78ABED42E88796266002F58F547ED288" exif:PixelXDimension="60" exif:PixelYDimension="60" exif:ColorSpace="1" exif:NativeDigest="36864,40960,40961,37121,37122,40962,40963,37510,40964,36867,36868,33434,33437,34850,34852,34855,34856,37377,37378,37379,37380,37381,37382,37383,37384,37385,37386,37396,41483,41484,41486,41487,41488,41492,41493,41495,41728,41729,41730,41985,41986,41987,41988,41989,41990,41991,41992,41993,41994,41995,41996,42016,0,2,4,5,6,7,8,9,10,11,12,13,14,15,16,17,18,20,22,23,24,25,26,27,28,30;B22D5A9BC7549E7A8AB88C762634CF58" photoshop:ColorMode="3" photoshop:ICCProfile="sRGB IEC61966-2.1"> <xmpMM:History> <rdf:Seq> <rdf:li stEvt:action="created" stEvt:instanceID="xmp.iid:6729C00A1296DE11B8B1F7A8EAF0CDF5" stEvt:when="2009-08-31T16:10:09 05:30" stEvt:softwareAgent="Adobe Photoshop CS4 Windows"/> <rdf:li stEvt:action="saved" stEvt:instanceID="xmp.iid:7D8037EF1A96DE11B8B1F7A8EAF0CDF5" stEvt:when="2009-08-31T16:12:20 05:30" stEvt:softwareAgent="Adobe Photoshop CS4 Windows" stEvt:changed="/"/> <rdf:li stEvt:action="converted" stEvt:parameters="from application/vnd.adobe.photoshop to image/jpeg"/> <rdf:li stEvt:action="derived" stEvt:parameters="converted from application/vnd.adobe.photoshop to image/jpeg"/> <rdf:li stEvt:action="saved" stEvt:instanceID="xmp.iid:7E8037EF1A96DE11B8B1F7A8EAF0CDF5" stEvt:when="2009-08-31T16:12:20 05:30" stEvt:softwareAgent="Adobe Photoshop CS4 Windows" stEvt:changed="/"/> </rdf:Seq> </xmpMM:History> <xmpMM:DerivedFrom stRef:instanceID="xmp.iid:7D8037EF1A96DE11B8B1F7A8EAF0CDF5" stRef:documentID="xmp.did:6529C00A1296DE11B8B1F7A8EAF0CDF5" stRef:originalDocumentID="xmp.did:6729C00A1296DE11B8B1F7A8EAF0CDF5"/> </rdf:Description> </rdf:RDF> </x:xmpmeta> <?xpacket end="w"?>
)/.mV
2009:08:31 16:42:16
" id="W5M0MpCehiHzreSzNTczkc9d"?> <x:xmpmeta xmlns:x="adobe:ns:meta/" x:xmptk="Adobe XMP Core 4.2.2-c063 53.352624, 2008/07/30-18:12:18 "> <rdf:RDF xmlns:rdf="hXXp://VVV.w3.org/1999/02/22-rdf-syntax-ns#"> <rdf:Description rdf:about="" xmlns:xmp="hXXp://ns.adobe.com/xap/1.0/" xmlns:dc="hXXp://purl.org/dc/elements/1.1/" xmlns:xmpMM="hXXp://ns.adobe.com/xap/1.0/mm/" xmlns:stEvt="hXXp://ns.adobe.com/xap/1.0/sType/ResourceEvent#" xmlns:stRef="hXXp://ns.adobe.com/xap/1.0/sType/ResourceRef#" xmlns:tiff="hXXp://ns.adobe.com/tiff/1.0/" xmlns:exif="hXXp://ns.adobe.com/exif/1.0/" xmlns:photoshop="hXXp://ns.adobe.com/photoshop/1.0/" xmp:CreatorTool="Adobe Photoshop CS4 Windows" xmp:CreateDate="2009-08-31T16:10:09 05:30" xmp:MetadataDate="2009-08-31T16:42:16 05:30" xmp:ModifyDate="2009-08-31T16:42:16 05:30" dc:format="image/jpeg" xmpMM:InstanceID="xmp.iid:8BFB727F1E96DE11B8B1F7A8EAF0CDF5" xmpMM:DocumentID="xmp.did:6529C00A1296DE11B8B1F7A8EAF0CDF5" xmpMM:OriginalDocumentID="xmp.did:6729C00A1296DE11B8B1F7A8EAF0CDF5" tiff:Orientation="1" tiff:XResolution="720090/10000" tiff:YResolution="720090/10000" tiff:ResolutionUnit="2" tiff:NativeDigest="256,257,258,259,262,274,277,284,530,531,282,283,296,301,318,319,529,532,306,270,271,272,305,315,33432;ECBA89B3475BA1A6527245331C506B2D" exif:PixelXDimension="60" exif:PixelYDimension="60" exif:ColorSpace="1" exif:NativeDigest="36864,40960,40961,37121,37122,40962,40963,37510,40964,36867,36868,33434,33437,34850,34852,34855,34856,37377,37378,37379,37380,37381,37382,37383,37384,37385,37386,37396,41483,41484,41486,41487,41488,41492,41493,41495,41728,41729,41730,41985,41986,41987,41988,41989,41990,41991,41992,41993,41994,41995,41996,42016,0,2,4,5,6,7,8,9,10,11,12,13,14,15,16,17,18,20,22,23,24,25,26,27,28,30;B22D5A9BC7549E7A8AB88C762634CF58" photoshop:ColorMode="3" photoshop:ICCProfile="sRGB IEC61966-2.1"> <xmpMM:History> <rdf:Seq> <rdf:li stEvt:action="created" stEvt:instanceID="xmp.iid:6729C00A1296DE11B8B1F7A8EAF0CDF5" stEvt:when="2009-08-31T16:10:09 05:30" stEvt:softwareAgent="Adobe Photoshop CS4 Windows"/> <rdf:li stEvt:action="saved" stEvt:instanceID="xmp.iid:8AFB727F1E96DE11B8B1F7A8EAF0CDF5" stEvt:when="2009-08-31T16:42:16 05:30" stEvt:softwareAgent="Adobe Photoshop CS4 Windows" stEvt:changed="/"/> <rdf:li stEvt:action="converted" stEvt:parameters="from application/vnd.adobe.photoshop to image/jpeg"/> <rdf:li stEvt:action="derived" stEvt:parameters="converted from application/vnd.adobe.photoshop to image/jpeg"/> <rdf:li stEvt:action="saved" stEvt:instanceID="xmp.iid:8BFB727F1E96DE11B8B1F7A8EAF0CDF5" stEvt:when="2009-08-31T16:42:16 05:30" stEvt:softwareAgent="Adobe Photoshop CS4 Windows" stEvt:changed="/"/> </rdf:Seq> </xmpMM:History> <xmpMM:DerivedFrom stRef:instanceID="xmp.iid:8AFB727F1E96DE11B8B1F7A8EAF0CDF5" stRef:documentID="xmp.did:6529C00A1296DE11B8B1F7A8EAF0CDF5" stRef:originalDocumentID="xmp.did:6729C00A1296DE11B8B1F7A8EAF0CDF5"/> </rdf:Description> </rdf:RDF> </x:xmpmeta> <?xpacket end="w"?>
2009:08:31 16:40:15
I%)%C?
" id="W5M0MpCehiHzreSzNTczkc9d"?> <x:xmpmeta xmlns:x="adobe:ns:meta/" x:xmptk="Adobe XMP Core 4.2.2-c063 53.352624, 2008/07/30-18:12:18 "> <rdf:RDF xmlns:rdf="hXXp://VVV.w3.org/1999/02/22-rdf-syntax-ns#"> <rdf:Description rdf:about="" xmlns:xmp="hXXp://ns.adobe.com/xap/1.0/" xmlns:dc="hXXp://purl.org/dc/elements/1.1/" xmlns:xmpMM="hXXp://ns.adobe.com/xap/1.0/mm/" xmlns:stEvt="hXXp://ns.adobe.com/xap/1.0/sType/ResourceEvent#" xmlns:stRef="hXXp://ns.adobe.com/xap/1.0/sType/ResourceRef#" xmlns:tiff="hXXp://ns.adobe.com/tiff/1.0/" xmlns:exif="hXXp://ns.adobe.com/exif/1.0/" xmlns:photoshop="hXXp://ns.adobe.com/photoshop/1.0/" xmp:CreatorTool="Adobe Photoshop CS4 Windows" xmp:CreateDate="2009-08-31T16:10:09 05:30" xmp:MetadataDate="2009-08-31T16:40:15 05:30" xmp:ModifyDate="2009-08-31T16:40:15 05:30" dc:format="image/jpeg" xmpMM:InstanceID="xmp.iid:89FB727F1E96DE11B8B1F7A8EAF0CDF5" xmpMM:DocumentID="xmp.did:6529C00A1296DE11B8B1F7A8EAF0CDF5" xmpMM:OriginalDocumentID="xmp.did:6729C00A1296DE11B8B1F7A8EAF0CDF5" tiff:Orientation="1" tiff:XResolution="720090/10000" tiff:YResolution="720090/10000" tiff:ResolutionUnit="2" tiff:NativeDigest="256,257,258,259,262,274,277,284,530,531,282,283,296,301,318,319,529,532,306,270,271,272,305,315,33432;0F86D3716AFC5EF571F8EB1E67D05A36" exif:PixelXDimension="60" exif:PixelYDimension="60" exif:ColorSpace="1" exif:NativeDigest="36864,40960,40961,37121,37122,40962,40963,37510,40964,36867,36868,33434,33437,34850,34852,34855,34856,37377,37378,37379,37380,37381,37382,37383,37384,37385,37386,37396,41483,41484,41486,41487,41488,41492,41493,41495,41728,41729,41730,41985,41986,41987,41988,41989,41990,41991,41992,41993,41994,41995,41996,42016,0,2,4,5,6,7,8,9,10,11,12,13,14,15,16,17,18,20,22,23,24,25,26,27,28,30;B22D5A9BC7549E7A8AB88C762634CF58" photoshop:ColorMode="3" photoshop:ICCProfile="sRGB IEC61966-2.1"> <xmpMM:History> <rdf:Seq> <rdf:li stEvt:action="created" stEvt:instanceID="xmp.iid:6729C00A1296DE11B8B1F7A8EAF0CDF5" stEvt:when="2009-08-31T16:10:09 05:30" stEvt:softwareAgent="Adobe Photoshop CS4 Windows"/> <rdf:li stEvt:action="saved" stEvt:instanceID="xmp.iid:88FB727F1E96DE11B8B1F7A8EAF0CDF5" stEvt:when="2009-08-31T16:40:15 05:30" stEvt:softwareAgent="Adobe Photoshop CS4 Windows" stEvt:changed="/"/> <rdf:li stEvt:action="converted" stEvt:parameters="from application/vnd.adobe.photoshop to image/jpeg"/> <rdf:li stEvt:action="derived" stEvt:parameters="converted from application/vnd.adobe.photoshop to image/jpeg"/> <rdf:li stEvt:action="saved" stEvt:instanceID="xmp.iid:89FB727F1E96DE11B8B1F7A8EAF0CDF5" stEvt:when="2009-08-31T16:40:15 05:30" stEvt:softwareAgent="Adobe Photoshop CS4 Windows" stEvt:changed="/"/> </rdf:Seq> </xmpMM:History> <xmpMM:DerivedFrom stRef:instanceID="xmp.iid:88FB727F1E96DE11B8B1F7A8EAF0CDF5" stRef:documentID="xmp.did:6529C00A1296DE11B8B1F7A8EAF0CDF5" stRef:originalDocumentID="xmp.did:6729C00A1296DE11B8B1F7A8EAF0CDF5"/> </rdf:Description> </rdf:RDF> </x:xmpmeta> <?xpacket end="w"?>
2009:08:31 16:15:15
lx,.sD
" id="W5M0MpCehiHzreSzNTczkc9d"?> <x:xmpmeta xmlns:x="adobe:ns:meta/" x:xmptk="Adobe XMP Core 4.2.2-c063 53.352624, 2008/07/30-18:12:18 "> <rdf:RDF xmlns:rdf="hXXp://VVV.w3.org/1999/02/22-rdf-syntax-ns#"> <rdf:Description rdf:about="" xmlns:xmp="hXXp://ns.adobe.com/xap/1.0/" xmlns:dc="hXXp://purl.org/dc/elements/1.1/" xmlns:xmpMM="hXXp://ns.adobe.com/xap/1.0/mm/" xmlns:stEvt="hXXp://ns.adobe.com/xap/1.0/sType/ResourceEvent#" xmlns:stRef="hXXp://ns.adobe.com/xap/1.0/sType/ResourceRef#" xmlns:tiff="hXXp://ns.adobe.com/tiff/1.0/" xmlns:exif="hXXp://ns.adobe.com/exif/1.0/" xmlns:photoshop="hXXp://ns.adobe.com/photoshop/1.0/" xmp:CreatorTool="Adobe Photoshop CS4 Windows" xmp:CreateDate="2009-08-31T16:10:09 05:30" xmp:MetadataDate="2009-08-31T16:15:15 05:30" xmp:ModifyDate="2009-08-31T16:15:15 05:30" dc:format="image/jpeg" xmpMM:InstanceID="xmp.iid:808037EF1A96DE11B8B1F7A8EAF0CDF5" xmpMM:DocumentID="xmp.did:6529C00A1296DE11B8B1F7A8EAF0CDF5" xmpMM:OriginalDocumentID="xmp.did:6729C00A1296DE11B8B1F7A8EAF0CDF5" tiff:Orientation="1" tiff:XResolution="720090/10000" tiff:YResolution="720090/10000" tiff:ResolutionUnit="2" tiff:NativeDigest="256,257,258,259,262,274,277,284,530,531,282,283,296,301,318,319,529,532,306,270,271,272,305,315,33432;E122C8D71691BFF16E84284E2A74739B" exif:PixelXDimension="60" exif:PixelYDimension="60" exif:ColorSpace="1" exif:NativeDigest="36864,40960,40961,37121,37122,40962,40963,37510,40964,36867,36868,33434,33437,34850,34852,34855,34856,37377,37378,37379,37380,37381,37382,37383,37384,37385,37386,37396,41483,41484,41486,41487,41488,41492,41493,41495,41728,41729,41730,41985,41986,41987,41988,41989,41990,41991,41992,41993,41994,41995,41996,42016,0,2,4,5,6,7,8,9,10,11,12,13,14,15,16,17,18,20,22,23,24,25,26,27,28,30;B22D5A9BC7549E7A8AB88C762634CF58" photoshop:ColorMode="3" photoshop:ICCProfile="sRGB IEC61966-2.1"> <xmpMM:History> <rdf:Seq> <rdf:li stEvt:action="created" stEvt:instanceID="xmp.iid:6729C00A1296DE11B8B1F7A8EAF0CDF5" stEvt:when="2009-08-31T16:10:09 05:30" stEvt:softwareAgent="Adobe Photoshop CS4 Windows"/> <rdf:li stEvt:action="saved" stEvt:instanceID="xmp.iid:7F8037EF1A96DE11B8B1F7A8EAF0CDF5" stEvt:when="2009-08-31T16:15:15 05:30" stEvt:softwareAgent="Adobe Photoshop CS4 Windows" stEvt:changed="/"/> <rdf:li stEvt:action="converted" stEvt:parameters="from application/vnd.adobe.photoshop to image/jpeg"/> <rdf:li stEvt:action="derived" stEvt:parameters="converted from application/vnd.adobe.photoshop to image/jpeg"/> <rdf:li stEvt:action="saved" stEvt:instanceID="xmp.iid:808037EF1A96DE11B8B1F7A8EAF0CDF5" stEvt:when="2009-08-31T16:15:15 05:30" stEvt:softwareAgent="Adobe Photoshop CS4 Windows" stEvt:changed="/"/> </rdf:Seq> </xmpMM:History> <xmpMM:DerivedFrom stRef:instanceID="xmp.iid:7F8037EF1A96DE11B8B1F7A8EAF0CDF5" stRef:documentID="xmp.did:6529C00A1296DE11B8B1F7A8EAF0CDF5" stRef:originalDocumentID="xmp.did:6729C00A1296DE11B8B1F7A8EAF0CDF5"/> </rdf:Description> </rdf:RDF> </x:xmpmeta> <?xpacket end="w"?>
2009:08:31 16:36:14
Nni.hy
" id="W5M0MpCehiHzreSzNTczkc9d"?> <x:xmpmeta xmlns:x="adobe:ns:meta/" x:xmptk="Adobe XMP Core 4.2.2-c063 53.352624, 2008/07/30-18:12:18 "> <rdf:RDF xmlns:rdf="hXXp://VVV.w3.org/1999/02/22-rdf-syntax-ns#"> <rdf:Description rdf:about="" xmlns:xmp="hXXp://ns.adobe.com/xap/1.0/" xmlns:dc="hXXp://purl.org/dc/elements/1.1/" xmlns:xmpMM="hXXp://ns.adobe.com/xap/1.0/mm/" xmlns:stEvt="hXXp://ns.adobe.com/xap/1.0/sType/ResourceEvent#" xmlns:stRef="hXXp://ns.adobe.com/xap/1.0/sType/ResourceRef#" xmlns:tiff="hXXp://ns.adobe.com/tiff/1.0/" xmlns:exif="hXXp://ns.adobe.com/exif/1.0/" xmlns:photoshop="hXXp://ns.adobe.com/photoshop/1.0/" xmp:CreatorTool="Adobe Photoshop CS4 Windows" xmp:CreateDate="2009-08-31T16:10:09 05:30" xmp:MetadataDate="2009-08-31T16:36:14 05:30" xmp:ModifyDate="2009-08-31T16:36:14 05:30" dc:format="image/jpeg" xmpMM:InstanceID="xmp.iid:17A776D91B96DE11B8B1F7A8EAF0CDF5" xmpMM:DocumentID="xmp.did:6529C00A1296DE11B8B1F7A8EAF0CDF5" xmpMM:OriginalDocumentID="xmp.did:6729C00A1296DE11B8B1F7A8EAF0CDF5" tiff:Orientation="1" tiff:XResolution="720090/10000" tiff:YResolution="720090/10000" tiff:ResolutionUnit="2" tiff:NativeDigest="256,257,258,259,262,274,277,284,530,531,282,283,296,301,318,319,529,532,306,270,271,272,305,315,33432;F5C041207618612FEEA6411DC934A05C" exif:PixelXDimension="60" exif:PixelYDimension="60" exif:ColorSpace="1" exif:NativeDigest="36864,40960,40961,37121,37122,40962,40963,37510,40964,36867,36868,33434,33437,34850,34852,34855,34856,37377,37378,37379,37380,37381,37382,37383,37384,37385,37386,37396,41483,41484,41486,41487,41488,41492,41493,41495,41728,41729,41730,41985,41986,41987,41988,41989,41990,41991,41992,41993,41994,41995,41996,42016,0,2,4,5,6,7,8,9,10,11,12,13,14,15,16,17,18,20,22,23,24,25,26,27,28,30;B22D5A9BC7549E7A8AB88C762634CF58" photoshop:ColorMode="3" photoshop:ICCProfile="sRGB IEC61966-2.1"> <xmpMM:History> <rdf:Seq> <rdf:li stEvt:action="created" stEvt:instanceID="xmp.iid:6729C00A1296DE11B8B1F7A8EAF0CDF5" stEvt:when="2009-08-31T16:10:09 05:30" stEvt:softwareAgent="Adobe Photoshop CS4 Windows"/> <rdf:li stEvt:action="saved" stEvt:instanceID="xmp.iid:16A776D91B96DE11B8B1F7A8EAF0CDF5" stEvt:when="2009-08-31T16:36:14 05:30" stEvt:softwareAgent="Adobe Photoshop CS4 Windows" stEvt:changed="/"/> <rdf:li stEvt:action="converted" stEvt:parameters="from application/vnd.adobe.photoshop to image/jpeg"/> <rdf:li stEvt:action="derived" stEvt:parameters="converted from application/vnd.adobe.photoshop to image/jpeg"/> <rdf:li stEvt:action="saved" stEvt:instanceID="xmp.iid:17A776D91B96DE11B8B1F7A8EAF0CDF5" stEvt:when="2009-08-31T16:36:14 05:30" stEvt:softwareAgent="Adobe Photoshop CS4 Windows" stEvt:changed="/"/> </rdf:Seq> </xmpMM:History> <xmpMM:DerivedFrom stRef:instanceID="xmp.iid:16A776D91B96DE11B8B1F7A8EAF0CDF5" stRef:documentID="xmp.did:6529C00A1296DE11B8B1F7A8EAF0CDF5" stRef:originalDocumentID="xmp.did:6729C00A1296DE11B8B1F7A8EAF0CDF5"/> </rdf:Description> </rdf:RDF> </x:xmpmeta> <?xpacket end="w"?>
/-.Cq
2009:08:31 16:10:05
" id="W5M0MpCehiHzreSzNTczkc9d"?> <x:xmpmeta xmlns:x="adobe:ns:meta/" x:xmptk="Adobe XMP Core 4.2.2-c063 53.352624, 2008/07/30-18:12:18 "> <rdf:RDF xmlns:rdf="hXXp://VVV.w3.org/1999/02/22-rdf-syntax-ns#"> <rdf:Description rdf:about="" xmlns:xmp="hXXp://ns.adobe.com/xap/1.0/" xmlns:xmpMM="hXXp://ns.adobe.com/xap/1.0/mm/" xmlns:stEvt="hXXp://ns.adobe.com/xap/1.0/sType/ResourceEvent#" xmlns:dc="hXXp://purl.org/dc/elements/1.1/" xmlns:photoshop="hXXp://ns.adobe.com/photoshop/1.0/" xmlns:tiff="hXXp://ns.adobe.com/tiff/1.0/" xmlns:exif="hXXp://ns.adobe.com/exif/1.0/" xmp:CreatorTool="Adobe Photoshop CS4 Windows" xmp:MetadataDate="2009-08-31T16:10:05 05:30" xmp:ModifyDate="2009-08-31T16:10:05 05:30" xmp:CreateDate="2009-08-31T16:10:05 05:30" xmpMM:InstanceID="xmp.iid:6629C00A1296DE11B8B1F7A8EAF0CDF5" xmpMM:DocumentID="xmp.did:6529C00A1296DE11B8B1F7A8EAF0CDF5" xmpMM:OriginalDocumentID="xmp.did:6529C00A1296DE11B8B1F7A8EAF0CDF5" dc:format="image/jpeg" photoshop:ColorMode="3" photoshop:ICCProfile="sRGB IEC61966-2.1" tiff:Orientation="1" tiff:XResolution="720090/10000" tiff:YResolution="720090/10000" tiff:ResolutionUnit="2" tiff:NativeDigest="256,257,258,259,262,274,277,284,530,531,282,283,296,301,318,319,529,532,306,270,271,272,305,315,33432;256304104C483086D6D4D9AAB845751F" exif:PixelXDimension="60" exif:PixelYDimension="60" exif:ColorSpace="1" exif:NativeDigest="36864,40960,40961,37121,37122,40962,40963,37510,40964,36867,36868,33434,33437,34850,34852,34855,34856,37377,37378,37379,37380,37381,37382,37383,37384,37385,37386,37396,41483,41484,41486,41487,41488,41492,41493,41495,41728,41729,41730,41985,41986,41987,41988,41989,41990,41991,41992,41993,41994,41995,41996,42016,0,2,4,5,6,7,8,9,10,11,12,13,14,15,16,17,18,20,22,23,24,25,26,27,28,30;B22D5A9BC7549E7A8AB88C762634CF58"> <xmpMM:History> <rdf:Seq> <rdf:li stEvt:action="created" stEvt:instanceID="xmp.iid:6529C00A1296DE11B8B1F7A8EAF0CDF5" stEvt:when="2009-08-31T16:10:05 05:30" stEvt:softwareAgent="Adobe Photoshop CS4 Windows"/> <rdf:li stEvt:action="saved" stEvt:instanceID="xmp.iid:6629C00A1296DE11B8B1F7A8EAF0CDF5" stEvt:when="2009-08-31T16:10:05 05:30" stEvt:softwareAgent="Adobe Photoshop CS4 Windows" stEvt:changed="/"/> </rdf:Seq> </xmpMM:History> </rdf:Description> </rdf:RDF> </x:xmpmeta> <?xpacket end="w"?>
%ßP
2009:08:31 16:37:48
i(.uRB
" id="W5M0MpCehiHzreSzNTczkc9d"?> <x:xmpmeta xmlns:x="adobe:ns:meta/" x:xmptk="Adobe XMP Core 4.2.2-c063 53.352624, 2008/07/30-18:12:18 "> <rdf:RDF xmlns:rdf="hXXp://VVV.w3.org/1999/02/22-rdf-syntax-ns#"> <rdf:Description rdf:about="" xmlns:xmp="hXXp://ns.adobe.com/xap/1.0/" xmlns:dc="hXXp://purl.org/dc/elements/1.1/" xmlns:xmpMM="hXXp://ns.adobe.com/xap/1.0/mm/" xmlns:stEvt="hXXp://ns.adobe.com/xap/1.0/sType/ResourceEvent#" xmlns:stRef="hXXp://ns.adobe.com/xap/1.0/sType/ResourceRef#" xmlns:tiff="hXXp://ns.adobe.com/tiff/1.0/" xmlns:exif="hXXp://ns.adobe.com/exif/1.0/" xmlns:photoshop="hXXp://ns.adobe.com/photoshop/1.0/" xmp:CreatorTool="Adobe Photoshop CS4 Windows" xmp:CreateDate="2009-08-31T16:10:09 05:30" xmp:MetadataDate="2009-08-31T16:37:48 05:30" xmp:ModifyDate="2009-08-31T16:37:48 05:30" dc:format="image/jpeg" xmpMM:InstanceID="xmp.iid:87FB727F1E96DE11B8B1F7A8EAF0CDF5" xmpMM:DocumentID="xmp.did:6529C00A1296DE11B8B1F7A8EAF0CDF5" xmpMM:OriginalDocumentID="xmp.did:6729C00A1296DE11B8B1F7A8EAF0CDF5" tiff:Orientation="1" tiff:XResolution="720090/10000" tiff:YResolution="720090/10000" tiff:ResolutionUnit="2" tiff:NativeDigest="256,257,258,259,262,274,277,284,530,531,282,283,296,301,318,319,529,532,306,270,271,272,305,315,33432;CD33981ADDC0CD7B3DD49B805D653792" exif:PixelXDimension="60" exif:PixelYDimension="60" exif:ColorSpace="1" exif:NativeDigest="36864,40960,40961,37121,37122,40962,40963,37510,40964,36867,36868,33434,33437,34850,34852,34855,34856,37377,37378,37379,37380,37381,37382,37383,37384,37385,37386,37396,41483,41484,41486,41487,41488,41492,41493,41495,41728,41729,41730,41985,41986,41987,41988,41989,41990,41991,41992,41993,41994,41995,41996,42016,0,2,4,5,6,7,8,9,10,11,12,13,14,15,16,17,18,20,22,23,24,25,26,27,28,30;B22D5A9BC7549E7A8AB88C762634CF58" photoshop:ColorMode="3" photoshop:ICCProfile="sRGB IEC61966-2.1"> <xmpMM:History> <rdf:Seq> <rdf:li stEvt:action="created" stEvt:instanceID="xmp.iid:6729C00A1296DE11B8B1F7A8EAF0CDF5" stEvt:when="2009-08-31T16:10:09 05:30" stEvt:softwareAgent="Adobe Photoshop CS4 Windows"/> <rdf:li stEvt:action="saved" stEvt:instanceID="xmp.iid:86FB727F1E96DE11B8B1F7A8EAF0CDF5" stEvt:when="2009-08-31T16:37:48 05:30" stEvt:softwareAgent="Adobe Photoshop CS4 Windows" stEvt:changed="/"/> <rdf:li stEvt:action="converted" stEvt:parameters="from application/vnd.adobe.photoshop to image/jpeg"/> <rdf:li stEvt:action="derived" stEvt:parameters="converted from application/vnd.adobe.photoshop to image/jpeg"/> <rdf:li stEvt:action="saved" stEvt:instanceID="xmp.iid:87FB727F1E96DE11B8B1F7A8EAF0CDF5" stEvt:when="2009-08-31T16:37:48 05:30" stEvt:softwareAgent="Adobe Photoshop CS4 Windows" stEvt:changed="/"/> </rdf:Seq> </xmpMM:History> <xmpMM:DerivedFrom stRef:instanceID="xmp.iid:86FB727F1E96DE11B8B1F7A8EAF0CDF5" stRef:documentID="xmp.did:6529C00A1296DE11B8B1F7A8EAF0CDF5" stRef:originalDocumentID="xmp.did:6729C00A1296DE11B8B1F7A8EAF0CDF5"/> </rdf:Description> </rdf:RDF> </x:xmpmeta> <?xpacket end="w"?>
2009:08:31 16:17:57
" id="W5M0MpCehiHzreSzNTczkc9d"?> <x:xmpmeta xmlns:x="adobe:ns:meta/" x:xmptk="Adobe XMP Core 4.2.2-c063 53.352624, 2008/07/30-18:12:18 "> <rdf:RDF xmlns:rdf="hXXp://VVV.w3.org/1999/02/22-rdf-syntax-ns#"> <rdf:Description rdf:about="" xmlns:xmp="hXXp://ns.adobe.com/xap/1.0/" xmlns:dc="hXXp://purl.org/dc/elements/1.1/" xmlns:xmpMM="hXXp://ns.adobe.com/xap/1.0/mm/" xmlns:stEvt="hXXp://ns.adobe.com/xap/1.0/sType/ResourceEvent#" xmlns:stRef="hXXp://ns.adobe.com/xap/1.0/sType/ResourceRef#" xmlns:tiff="hXXp://ns.adobe.com/tiff/1.0/" xmlns:exif="hXXp://ns.adobe.com/exif/1.0/" xmlns:photoshop="hXXp://ns.adobe.com/photoshop/1.0/" xmp:CreatorTool="Adobe Photoshop CS4 Windows" xmp:CreateDate="2009-08-31T16:10:09 05:30" xmp:MetadataDate="2009-08-31T16:17:57 05:30" xmp:ModifyDate="2009-08-31T16:17:57 05:30" dc:format="image/jpeg" xmpMM:InstanceID="xmp.iid:828037EF1A96DE11B8B1F7A8EAF0CDF5" xmpMM:DocumentID="xmp.did:6529C00A1296DE11B8B1F7A8EAF0CDF5" xmpMM:OriginalDocumentID="xmp.did:6729C00A1296DE11B8B1F7A8EAF0CDF5" tiff:Orientation="1" tiff:XResolution="720090/10000" tiff:YResolution="720090/10000" tiff:ResolutionUnit="2" tiff:NativeDigest="256,257,258,259,262,274,277,284,530,531,282,283,296,301,318,319,529,532,306,270,271,272,305,315,33432;A8EA9B09EDA627870302287CED17A9AA" exif:PixelXDimension="60" exif:PixelYDimension="60" exif:ColorSpace="1" exif:NativeDigest="36864,40960,40961,37121,37122,40962,40963,37510,40964,36867,36868,33434,33437,34850,34852,34855,34856,37377,37378,37379,37380,37381,37382,37383,37384,37385,37386,37396,41483,41484,41486,41487,41488,41492,41493,41495,41728,41729,41730,41985,41986,41987,41988,41989,41990,41991,41992,41993,41994,41995,41996,42016,0,2,4,5,6,7,8,9,10,11,12,13,14,15,16,17,18,20,22,23,24,25,26,27,28,30;B22D5A9BC7549E7A8AB88C762634CF58" photoshop:ColorMode="3" photoshop:ICCProfile="sRGB IEC61966-2.1"> <xmpMM:History> <rdf:Seq> <rdf:li stEvt:action="created" stEvt:instanceID="xmp.iid:6729C00A1296DE11B8B1F7A8EAF0CDF5" stEvt:when="2009-08-31T16:10:09 05:30" stEvt:softwareAgent="Adobe Photoshop CS4 Windows"/> <rdf:li stEvt:action="saved" stEvt:instanceID="xmp.iid:818037EF1A96DE11B8B1F7A8EAF0CDF5" stEvt:when="2009-08-31T16:17:57 05:30" stEvt:softwareAgent="Adobe Photoshop CS4 Windows" stEvt:changed="/"/> <rdf:li stEvt:action="converted" stEvt:parameters="from application/vnd.adobe.photoshop to image/jpeg"/> <rdf:li stEvt:action="derived" stEvt:parameters="converted from application/vnd.adobe.photoshop to image/jpeg"/> <rdf:li stEvt:action="saved" stEvt:instanceID="xmp.iid:828037EF1A96DE11B8B1F7A8EAF0CDF5" stEvt:when="2009-08-31T16:17:57 05:30" stEvt:softwareAgent="Adobe Photoshop CS4 Windows" stEvt:changed="/"/> </rdf:Seq> </xmpMM:History> <xmpMM:DerivedFrom stRef:instanceID="xmp.iid:818037EF1A96DE11B8B1F7A8EAF0CDF5" stRef:documentID="xmp.did:6529C00A1296DE11B8B1F7A8EAF0CDF5" stRef:originalDocumentID="xmp.did:6729C00A1296DE11B8B1F7A8EAF0CDF5"/> </rdf:Description> </rdf:RDF> </x:xmpmeta> <?xpacket end="w"?>
2009:09:01 19:13:27
ehXXp://ns.adobe.com/xap/1.0/
" id="W5M0MpCehiHzreSzNTczkc9d"?> <x:xmpmeta xmlns:x="adobe:ns:meta/" x:xmptk="Adobe XMP Core 4.2.2-c063 53.352624, 2008/07/30-18:12:18 "> <rdf:RDF xmlns:rdf="hXXp://VVV.w3.org/1999/02/22-rdf-syntax-ns#"> <rdf:Description rdf:about="" xmlns:xmp="hXXp://ns.adobe.com/xap/1.0/" xmlns:dc="hXXp://purl.org/dc/elements/1.1/" xmlns:xmpMM="hXXp://ns.adobe.com/xap/1.0/mm/" xmlns:stEvt="hXXp://ns.adobe.com/xap/1.0/sType/ResourceEvent#" xmlns:stRef="hXXp://ns.adobe.com/xap/1.0/sType/ResourceRef#" xmlns:tiff="hXXp://ns.adobe.com/tiff/1.0/" xmlns:exif="hXXp://ns.adobe.com/exif/1.0/" xmlns:photoshop="hXXp://ns.adobe.com/photoshop/1.0/" xmp:CreatorTool="Adobe Photoshop CS4 Windows" xmp:CreateDate="2009-08-31T16:10:09 05:30" xmp:MetadataDate="2009-09-01T19:13:27 05:30" xmp:ModifyDate="2009-09-01T19:13:27 05:30" dc:format="image/jpeg" xmpMM:InstanceID="xmp.iid:F1B2CD74F596DE11BBDAB5D8D180CF22" xmpMM:DocumentID="xmp.did:6529C00A1296DE11B8B1F7A8EAF0CDF5" xmpMM:OriginalDocumentID="xmp.did:6729C00A1296DE11B8B1F7A8EAF0CDF5" tiff:Orientation="1" tiff:XResolution="720090/10000" tiff:YResolution="720090/10000" tiff:ResolutionUnit="2" tiff:NativeDigest="256,257,258,259,262,274,277,284,530,531,282,283,296,301,318,319,529,532,306,270,271,272,305,315,33432;4E00F4DAC50EBB50AEEA72E3DBCA0E98" exif:PixelXDimension="60" exif:PixelYDimension="60" exif:ColorSpace="1" exif:NativeDigest="36864,40960,40961,37121,37122,40962,40963,37510,40964,36867,36868,33434,33437,34850,34852,34855,34856,37377,37378,37379,37380,37381,37382,37383,37384,37385,37386,37396,41483,41484,41486,41487,41488,41492,41493,41495,41728,41729,41730,41985,41986,41987,41988,41989,41990,41991,41992,41993,41994,41995,41996,42016,0,2,4,5,6,7,8,9,10,11,12,13,14,15,16,17,18,20,22,23,24,25,26,27,28,30;B22D5A9BC7549E7A8AB88C762634CF58" photoshop:ColorMode="3" photoshop:ICCProfile="sRGB IEC61966-2.1"> <xmpMM:History> <rdf:Seq> <rdf:li stEvt:action="created" stEvt:instanceID="xmp.iid:6729C00A1296DE11B8B1F7A8EAF0CDF5" stEvt:when="2009-08-31T16:10:09 05:30" stEvt:softwareAgent="Adobe Photoshop CS4 Windows"/> <rdf:li stEvt:action="saved" stEvt:instanceID="xmp.iid:8CFB727F1E96DE11B8B1F7A8EAF0CDF5" stEvt:when="2009-08-31T16:43:54 05:30" stEvt:softwareAgent="Adobe Photoshop CS4 Windows" stEvt:changed="/"/> <rdf:li stEvt:action="saved" stEvt:instanceID="xmp.iid:EFB2CD74F596DE11BBDAB5D8D180CF22" stEvt:when="2009-09-01T19:13:20 05:30" stEvt:softwareAgent="Adobe Photoshop CS4 Windows" stEvt:changed="/"/> <rdf:li stEvt:action="saved" stEvt:instanceID="xmp.iid:F0B2CD74F596DE11BBDAB5D8D180CF22" stEvt:when="2009-09-01T19:13:27 05:30" stEvt:softwareAgent="Adobe Photoshop CS4 Windows" stEvt:changed="/"/> <rdf:li stEvt:action="converted" stEvt:parameters="from application/vnd.adobe.photoshop to image/jpeg"/> <rdf:li stEvt:action="derived" stEvt:parameters="converted from application/vnd.adobe.photoshop to image/jpeg"/> <rdf:li stEvt:action="saved" stEvt:instanceID="xmp.iid:F1B2CD74F596DE11BBDAB5D8D180CF22" stEvt:when="2009-09-01T19:13:27 05:30" stEvt:softwareAgent="Adobe Photoshop CS4 Windows" stEvt:changed="/"/> </rdf:Seq> </xmpMM:History> <xmpMM:DerivedFrom stRef:instanceID="xmp.iid:F0B2CD74F596DE11BBDAB5D8D180CF22" stRef:documentID="xmp.did:6529C00A1296DE11B8B1F7A8EAF0CDF5" stRef:originalDocumentID="xmp.did:6729C00A1296DE11B8B1F7A8EAF0CDF5"/> </rdf:Description> </rdf:RDF> </x:xmpmeta> <?xpacket end="w"?>
"Y-%U
var theTable = document.frames[0].document.all['resulttable'];
var lastRow = theTable.rows.length;
theTable.deleteRow(0);
return parseInt(document.frmresult.problemid.value);
I1.event.srcElement.className = 'withoutbg';
I1.event.srcElement.className = 'withbg';
window.parent.document.frmresult.problemid.value = I1.event.srcElement.id;
window.parent.document.getElementById('problemid').click();
function addrow(id, Title, imageurl, Desc, probCount, strDetails)
var Row = theTable.insertRow();
Row.setAttribute('id',id);
Cell = Row.insertCell();
Cell1 = Row.insertCell();
Cell.setAttribute('width', '15%');
Row.setAttribute('className', 'withbg');
Cell.innerHTML = "<img src="   imageurl   " /> ";
Cell1.innerHTML = "<A onclick=setid("   id   ")><b><font color=272727>"   Title   "</font></b></a><br></font><A onclick=setid("   id   ")>"   Desc   "</a></font>";
Row.onmouseover = ClassChangeOnOver;
Row.onmouseout = ClassChangeOnOut;
Row.OnClick = setnewid;
switch (event.keyCode)
event.keyCode = 0;
event.returnValue = false;
<body onkeydown = "disableRefresh()" bgcolor="" topmargin=0 leftmargin=0>
<td width=100% align=left valign=top><iframe name='I1' onkeydown = "disableRefresh()" width=100% height=100% scrolling=yes src="results.htm"></iframe></td>
window.parent.document.frmresult.problemid.value=id;
switch (event.keyCode)
event.keyCode = 0;
event.returnValue = false;
var elem = event.srcElement;
//alert(elem.id);
id = elem.id;
elem = elem.parentElement;
} while (!(document.frames[0].document.all[id]))
document.frames[0].document.getElementById(id).className = 'withoutbg';
event.srcElement.className = 'withoutbg';
event.srcElement.className = 'withbg';
.LightGrayNormalText
.LightBlueBoldText
.withbg{
background-image: url(IDB_SEARCH_MIDDLEBG.GIF);
.withoutbg{
background-image: url(Transparent.GIF);
<body onkeydown = "disableRefresh()" topmargin=0 leftmargin=0 background=IDB_SEARCH_MIDDLEBG.GIF>
<body onkeydown = "disableRefresh()" bgcolor="#FFFFFF">
<td colspan=2 background="headerbg.gif">
<td background="headerbg.gif">
//document.frames[0].document.all['schedule_daily'].innerHTML
var theTable = document.frames[0].document.all['resulttable'];
function addrow(id,imageurl,Title,Desc,probCount,strDetails)
//var lastRow = theTable.rows.length;
var Row1=theTable.insertRow();
firstCell=Row1.insertCell();
firstCell.setAttribute('colspan',3);
firstCell.setAttribute('height',1);
firstCell.setAttribute('bgcolor',"#FFFFFF");
Row.setAttribute('border',1);
Cell1 = Row.insertCell();
Cell2 = Row.insertCell();
Cell.setAttribute('width','7%');
Cell1.setAttribute('width','75%');
Cell2.setAttribute('width','18%');
Cell1.innerHTML = "<font face = arial style='font-size:13px;' color = '#0467ff' this.style.background='#FFFFFF'><A style='cursor:hand; cursor:pointer'onclick=setid(" id ")> <b><u>"  Title  "</u></b></a><br></font><font face = arial style='font-size:13px;' color = black>"   Desc   "</font>";
Cell2.innerHTML = "<div align=right ><font face = arial style='font-size:13px;'>"   probCount   "</font><br><A style='cursor:hand; cursor:pointer;' onclick=setid(" id ")> <font face = arial style='font-size:13px;' color = '#0467ff' ><u>"   strDetails   "</u></font> </a></div>";
Cell.innerHTML = "<div align=right > <img src="   imageurl   " /></div>";
Cell1.innerHTML = "<div align=left background='#adc3e2' ><font face = verdana size = 2pt color = blue><A style='cursor:hand; cursor:pointer'onclick=setid(" id ")> <b>"  Title  "</b></a><br></font><font face = verdana size = 2pt color = black>"   Desc   "</font></div>";
Cell2.innerHTML = "<div align=right this.style.background='#adc3e2' ><font face = verdana size = 2pt>"   probCount   "</font><br><A style='cursor:hand; cursor:pointer' onclick=setid(" id ")> <font face = verdana size = 2pt color = blue> Details</font> </a></div>";
//onmouseover=this.style.background='#adc3e2' onmouseout=this.style.background='#ffffff'
//document.all['resulttable'].style.cursor='hand';
document[img_name].src = img_src;
<body onkeydown = "disableRefresh()" bgcolor="#FFFFFF" >
<iframe onkeydown = "disableRefresh()" width=100% height=100% scrolling=auto marginheight=2 marginwidth=2 src="ACTION_CENTER.HTM"></iframe>
return parseInt(document.frmresult.problemid.value);
var mayval = parseInt(document.frmresult.checkboxvalue.value);
return (document.frmresult.textboxid.value);
var mayval = parseInt(document.frmresult.textboxvalue.value);
Row.setAttribute('border', 1);
Row.setAttribute('height', 50);
Cell.setAttribute('width', '5%');
Cell.setAttribute('vAlign', 'top');
Cell.innerHTML = "<table><tr><td style=padding-top:2px;><input type=checkbox id="   id   " onclick=OnSetCheckUncheck(this) checked></td></tr></table>";
Cell.innerHTML = "<table><tr><td style=padding-top:2px;><input type=checkbox id="   id   " onclick=OnSetCheckUncheck(this)></td></tr></table>";
Cell1.innerHTML = "<table width=100% cellpadding=0 cellspacing=0><tr><td><font face = arial style='font-size:12px;' color = '#0467ff' this.style.background='#FFFFFF'>"   Title   "</font></td></tr><tr><td><table cellpadding=0 cellspacing=0><tr><td><font face = arial style='font-size:12px;' color = black>"   Note1   "</font></td><td> <input type=text id='txt" id "' value="   probCount   " onblur=GetTextBoxVal(this); style='width:40px; height:20px;'> </td><td><font face = arial style='font-size:12px;' color = 'black' > "   Note2   "</font></td></tr></table></td></tr></table>";
document[img_name].src = img_src;
<iframe onkeydown = "disableRefresh()" width=100% height=100% scrolling=auto marginheight=2 marginwidth=2 src="ALERT_SETTINGS.HTM"></iframe>
window.parent.document.frmresult.problemid.value = str.id;
if (str.checked) {
window.parent.document.frmresult.checkboxvalue.value = 1;
window.parent.document.frmresult.checkboxvalue.value = 0;
window.parent.document.frmresult.textboxid.value = var1.id;
window.parent.document.frmresult.textboxvalue.value = var1.value;
window.parent.document.getElementById('textboxid').click();
4%4X4v4
0$0-0>0^0~0
9-9A9U9i9}9
>">)>/>=>
? ?$?(?,?0?4?
8B003BA9-D593-49d5-B60F-5FD67EC6FB59
%Program Files% (x86)\Microsoft Visual Studio 9.0\VC\atlmfc\include\afxwin1.inl
%s (%s:%d)
NewScheduler.exe
system_cleaner_icon.jpg
registry_icon.jpg
Registry_Optimizer_icon.jpg
disk_defrag_icon.jpg
Disk_Checkup_icons.jpg
Dsik_info_icons.jpg
Windows_Tuneup_icon.jpg
memoptimizer_icons.jpg
DriverBackupandUpdate_icon.jpg
AntiSpyware_icon.jpg
PrivacyProtecxtor_icon.jpg
securedelete_icon.jpg
secure_encryptor.jpg
Undelete_icon.jpg
backup_manager_icons.jpg
backupandrestore_icons.jpg
RepairWizard_icons.jpg
systemanalyzer_icons.jpg
findduplicatefiles_icon.jpg
Startup_Manager_icon.jpg
Uninstall_Manager_icon.jpg
Scheduler_icon.jpg
onlineHelp.jpg
about.jpg
buyNow.jpg
support.jpg
IDS_SEARCH_SUPPORT
checkForUpdates.jpg
register.jpg
smartPC_Care.jpg
game_optimizer.jpg
support
Support
SystemCleaner.exe
RegClean.exe
RegistryOptimizer.exe
DiskOptimizer.exe
DiskDoctor.exe
DiskExplorer.exe
MemoryOptimizer.exe
DriverUpdater.exe
SystemProtector.exe
PrivacyProtector.exe
SecureDelete.exe
SecureEncryptor.exe
Undelete.exe
BackupManager.exe
SysFileBakRes.exe
PCFixer.exe
SystemAnalyzerAndAdvisor.exe
DuplicateFilesRemover.exe
StartupManager.exe
UninstallManager.exe
GameOptimizer.exe
CheckUpdate.exe
IDS_RECENTMSG_RESOLPRB
IDC_BTN_RESULT_EXPORT_REG
CREGISTER.JPG
REGISTRY_ICON.JPG
ANTISPYWARE_ICON.JPG
DRIVERBACKUPANDUPDATE_ICON.JPG
BACKUPANDRESTORE_ICONS.JPG
PRIVACYPROTECXTOR_ICON.JPG
SYSTEM_CLEANER_ICON.JPG
REGISTRY_OPTIMIZER_ICON.JPG
DISK_DEFRAG_ICON.JPG
IDC_BTN_WINDOWS_OPTIMIZERS
IDS_MSG
IDS_MSGS
IDS_NUMOF_IMPORTANT
IDS_SPC_OPERATION_INPROCE
B.doc
%s /HandleDocument:%%1
ASO_NEWINSTALL_MESSAGE_TO_BE_PASSED_TO_RUNNING_INSTANCE
PSAPI.dll
Software\Microsoft\Windows\CurrentVersion\Run
"%s" /autorun
Template\SPC_Report\spcoptreport.htm
Template\SPC_Report\spcscanreport.htm
\pipe\aso3launcher_rpcecho_homeserver
\pipe\aso3launcher_rpcecho_regopt
\pipe\aso3launcher_rpcecho_regclean
\pipe\aso3launcher_rpcecho_driverupdater
\pipe\aso3launcher_rpcecho_pp
\pipe\aso3launcher_rpcecho_antispyware
\pipe\aso3launcher_rpcecho_defrag
\pipe\aso3launcher_rpcecho_systemcleaner
RPC error: %d
Couldn't find launched %s.
BMicrosoft_Sample_4.doc
Microsoft_Sample_3.doc
Microsoft_Sample_2.txt
Microsoft_Sample_1.txt
HighestAvailable.exe
RequireAdministrator.exe
aso3.exe
%s %s
info.ico
Help.ico
Advanced System Optimizer Help.url
IDS_COMP_WEBSITE_URL
website.ico
Systweak Software Website.url
Associators of {Win32_DiskDrive.DeviceID='\\.\
Associators of {Win32_DiskPartition.DeviceID='
IDB_SEARCH_SYSTEM_CLEANER.BMP
IDB_SEARCH_DISK_DEFRAG.BMP
IDB_SEARCH_HEADER.GIF
TRANSPARENT.GIF
IDB_SEARCH_MIDDLEBG.GIF
IDB_SEARCH_SINGLEBG.GIF
ANTISPYWARE_ICON.JPG
BACKUP_MANAGER_ICONS.JPG
DISK_CHECKUP_ICONS.JPG
DSIK_INFO_ICONS.JPG
FINDDUPLICATEFILES_ICON.JPG
INTRO_ICON.JPG
MEMOPTIMIZER_ICONS.JPG
ONECLICKFIX-UP_ICONS.JPG
REPAIRWIZARD_ICONS.JPG
SCHEDULER_ICON.JPG
SECUREDELETE_ICON.JPG
STARTUP_MANAGER_ICON.JPG
SYSTEMANALYZER_ICONS.JPG
UNDELETE_ICON.JPG
UNINSTALL_MANAGER_ICON.JPG
UPDATE_ICON.JPG
WINDOWS_TUNEUP_ICON.JPG
ABOUT.JPG
BUYNOW.JPG
CHECKFORUPDATES.JPG
ONLINEHELP.JPG
REGISTER.JPG
SECURE_ENCRYPTOR.JPG
SMARTPC_CARE.JPG
SUPPORT.JPG
GAME_OPTIMIZER.JPG
RESULTS.HTM
ACTION_CENTER.HTM
ALERT_SETTINGS.HTM
3.9.1111.16526


Remove it with Ad-Aware

  1. Click (here) to download and install Ad-Aware Free Antivirus.
  2. Update the definition files.
  3. Run a full scan of your computer.


Manual removal*

  1. Terminate malicious process(es) (How to End a Process With the Task Manager):

    ASO3.exe:340
    CheckUpdate.exe:516
    schtasks.exe:1128
    schtasks.exe:1364
    regedit.exe:264
    %original file name%.exe:228

  2. Delete the original Trojan file.
  3. Delete or disinfect the following files created/modified by the Trojan:

    %Documents and Settings%\%current user%\Local Settings\Temporary Internet Files\Content.IE5\GDE3MT21\desktop.ini (67 bytes)
    %Documents and Settings%\%current user%\Local Settings\Temporary Internet Files\Content.IE5\desktop.ini (67 bytes)
    %Documents and Settings%\%current user%\Local Settings\History\History.IE5\desktop.ini (159 bytes)
    %Documents and Settings%\%current user%\Local Settings\Temporary Internet Files\Content.IE5\CRMNWZYD\desktop.ini (67 bytes)
    %Documents and Settings%\%current user%\Local Settings\Temporary Internet Files\Content.IE5\GLSHOFWZ\desktop.ini (67 bytes)
    %Documents and Settings%\%current user%\Local Settings\Temporary Internet Files\Content.IE5\6RMRY1S9\desktop.ini (67 bytes)
    %Documents and Settings%\%current user%\Application Data\Systweak\ASO3\Checking for Updates\AppUpdates\LatestVersion.htm (832 bytes)
    %Program Files%\Common Files\Advanced System Optimizer\App\SecureDelete.exe (10347 bytes)
    %Program Files%\Common Files\Advanced System Optimizer\App\DefragReport\Report_header_leftText.jpg (14 bytes)
    %Program Files%\Common Files\Advanced System Optimizer\App\DiskOptimizer.exe (848 bytes)
    %Program Files%\Common Files\Advanced System Optimizer\App\Xceed.FileSystem.dll (584 bytes)
    %Program Files%\Common Files\Advanced System Optimizer\App\Microsoft.VC90.ATL.manifest (353 bytes)
    %Program Files%\Common Files\Advanced System Optimizer\App\clamunpack\clamscan.exe (15 bytes)
    %Program Files%\Common Files\Advanced System Optimizer\App\info.ico (1 bytes)
    %Program Files%\Common Files\Advanced System Optimizer\App\RegClean.exe (11276 bytes)
    %Program Files%\Common Files\Advanced System Optimizer\App\BackupManager.exe (18844 bytes)
    %Program Files%\Common Files\Advanced System Optimizer\App\SystemProtector.XmlSerializers.dll (45 bytes)
    %Program Files%\Common Files\Advanced System Optimizer\App\MFC90ENU.dll (754 bytes)
    %Program Files%\Common Files\Advanced System Optimizer\App\DiskExplorer.exe (9732 bytes)
    %Program Files%\Common Files\Advanced System Optimizer\App\sqlite3.dll (6101 bytes)
    %Program Files%\Common Files\Advanced System Optimizer\App\ASOHelper.dll (8600 bytes)
    %Program Files%\Common Files\Advanced System Optimizer\App\GOHelper.exe (37 bytes)
    %Program Files%\Common Files\Advanced System Optimizer\App\eng\driveropt.ini (70 bytes)
    %Program Files%\Common Files\Advanced System Optimizer\App\Xceed.Zip.dll (1430 bytes)
    %Program Files%\Common Files\Advanced System Optimizer\App\updater\extract\copying.txt (26 bytes)
    %Program Files%\Common Files\Advanced System Optimizer\App\HookDll64.dll (395 bytes)
    %Program Files%\Common Files\Advanced System Optimizer\App\VolumeControl64.exe (515 bytes)
    %Program Files%\Common Files\Advanced System Optimizer\App\eng\regclean.ini (82 bytes)
    %Program Files%\Common Files\Advanced System Optimizer\App\RegistryOptimizer.exe (3599 bytes)
    %Program Files%\Common Files\Advanced System Optimizer\App\eng\sysfilebackres.ini (23 bytes)
    %Program Files%\Common Files\Advanced System Optimizer\App\eng\regopt.ini (12 bytes)
    %Program Files%\Common Files\Advanced System Optimizer\App\updater\extract\7z.exe (267 bytes)
    %Program Files%\Common Files\Advanced System Optimizer\App\updater\vista\DriverRestore.manifest (682 bytes)
    %Program Files%\Common Files\Advanced System Optimizer\App\updater\amd64Helper\DriverUpdateHelper64.manifest (689 bytes)
    %Program Files%\Common Files\Advanced System Optimizer\App\DefragReport\Report_header_top_middle.jpg (7 bytes)
    %Program Files%\Common Files\Advanced System Optimizer\App\updater\win7i386\DriverRestore.exe (84 bytes)
    %Program Files%\Common Files\Advanced System Optimizer\App\eng\startupman.ini (10 bytes)
    %Program Files%\Common Files\Advanced System Optimizer\Portable1.reg (11 bytes)
    %Program Files%\Common Files\Advanced System Optimizer\App\ScanDll.dll (64 bytes)
    %Program Files%\Common Files\Advanced System Optimizer\App\updater\amd64\DriverRestore.exe (1635 bytes)
    %Program Files%\Common Files\Advanced System Optimizer\App\website.ico (1 bytes)
    %Program Files%\Common Files\Advanced System Optimizer\App\eng\secencrypt.ini (26 bytes)
    %Program Files%\Common Files\Advanced System Optimizer\App\eng\aso.ini (135 bytes)
    %Program Files%\Common Files\Advanced System Optimizer\App\PTBWin7.exe (20 bytes)
    %Program Files%\Common Files\Advanced System Optimizer\App\AsInvoker.exe (64 bytes)
    %Program Files%\Common Files\Advanced System Optimizer\App\aspcomm.dll (2741 bytes)
    %Program Files%\Common Files\Advanced System Optimizer\App\DefragReport\right_border.jpg (11 bytes)
    %Program Files%\Common Files\Advanced System Optimizer\App\DefragReport\footer_middle.jpg (7 bytes)
    %Program Files%\Common Files\Advanced System Optimizer\App\updater\extract\readme.txt (1 bytes)
    %Program Files%\Common Files\Advanced System Optimizer\App\asodemo.exe (6577 bytes)
    %Program Files%\Common Files\Advanced System Optimizer\Delete1.reg (11 bytes)
    %Program Files%\Common Files\Advanced System Optimizer\App\HookDll.dll (56 bytes)
    %Program Files%\Common Files\Advanced System Optimizer\App\Microsoft.VC90.MFCLOC.manifest (670 bytes)
    %Program Files%\Common Files\Advanced System Optimizer\App\RequireAdministrator.exe (1846 bytes)
    %Program Files%\Common Files\Advanced System Optimizer\App\BeforeUninstall.exe (13907 bytes)
    %Program Files%\Common Files\Advanced System Optimizer\App\eng\undelete.ini (28 bytes)
    %Program Files%\Common Files\Advanced System Optimizer\App\DriverUpdater.exe (8022 bytes)
    %Program Files%\Common Files\Advanced System Optimizer\App\updater\win7amd64\DriverRestore.manifest (682 bytes)
    %Program Files%\Common Files\Advanced System Optimizer\App\aso3sys.dll (6771 bytes)
    %Program Files%\Common Files\Advanced System Optimizer\Delete.reg (5 bytes)
    %Program Files%\Common Files\Advanced System Optimizer\App\eng\securedelete.ini (39 bytes)
    %Program Files%\Common Files\Advanced System Optimizer\App\SevenZipSharp.dll (1223 bytes)
    %Program Files%\Common Files\Advanced System Optimizer\App\clamunpack\readme.txt (535 bytes)
    %Program Files%\Common Files\Advanced System Optimizer\App\ASEng.dll (1678 bytes)
    %Program Files%\Common Files\Advanced System Optimizer\App\eng\diskdoc.ini (32 bytes)
    %Program Files%\Common Files\Advanced System Optimizer\App\atl90.dll (1395 bytes)
    %Program Files%\Common Files\Advanced System Optimizer\App\Advanced System Optimizer Help.url (432 bytes)
    %Program Files%\Common Files\Advanced System Optimizer\App\SystemCleaner.exe (17655 bytes)
    %Program Files%\Common Files\Advanced System Optimizer\App\PrivacyProtector.exe (12628 bytes)
    %Program Files%\Common Files\Advanced System Optimizer\App\updater\vista\DriverRestore.exe (722 bytes)
    %Program Files%\Common Files\Advanced System Optimizer\App\DiskDoctor.exe (3123 bytes)
    %Program Files%\Common Files\Advanced System Optimizer\App\GameOptLauncher64.exe (2512 bytes)
    %Program Files%\Common Files\Advanced System Optimizer\App\XceedZip.dll (1468 bytes)
    %Program Files%\Common Files\Advanced System Optimizer\App\xmllite.dll (861 bytes)
    %Program Files%\Common Files\Advanced System Optimizer\App\DefragReport\Report_header_left_image.jpg (11 bytes)
    %Program Files%\Common Files\Advanced System Optimizer\App\launcher.exe (47 bytes)
    %Program Files%\Common Files\Advanced System Optimizer\App\eng\backupman.ini (78 bytes)
    %Program Files%\Common Files\Advanced System Optimizer\App\eng\memopt.ini (12 bytes)
    %Program Files%\Common Files\Advanced System Optimizer\App\updater\win7i386\DriverRestore.manifest (682 bytes)
    %Program Files%\Common Files\Advanced System Optimizer\App\aspsys.dll (1708 bytes)
    %Program Files%\Common Files\Advanced System Optimizer\App\MemoryOptimizer.exe (2376 bytes)
    %Program Files%\Common Files\Advanced System Optimizer\App\difxapi64.dll (4584 bytes)
    %Program Files%\Common Files\Advanced System Optimizer\App\mfc90u.dll (34642 bytes)
    %Program Files%\Common Files\Advanced System Optimizer\App\eng\DiskOpt.ini (19 bytes)
    %Program Files%\Common Files\Advanced System Optimizer\App\UndeleteDLL.dll (1415 bytes)
    %Program Files%\Common Files\Advanced System Optimizer\App\HighestAvailable.exe (753 bytes)
    %Program Files%\Common Files\Advanced System Optimizer\App\SystemProtector.exe (38774 bytes)
    %Program Files%\Common Files\Advanced System Optimizer\App\AppResource.dll (17986 bytes)
    %Program Files%\Common Files\Advanced System Optimizer\App\VolumeControl.exe (49 bytes)
    %Program Files%\Common Files\Advanced System Optimizer\ASO3portable.exe (697 bytes)
    %Program Files%\Common Files\Advanced System Optimizer\App\asplangs\categories.ini (42 bytes)
    %Program Files%\Common Files\Advanced System Optimizer\App\ASO3DefragSrv64.exe (2241 bytes)
    %Program Files%\Common Files\Advanced System Optimizer\App\database.dat (32 bytes)
    %Program Files%\Common Files\Advanced System Optimizer\App\ASO3DefragSrv.exe (3340 bytes)
    %Program Files%\Common Files\Advanced System Optimizer\App\ASO3.exe (27333 bytes)
    %Program Files%\Common Files\Advanced System Optimizer\App\eng\sysadvisor.ini (104 bytes)
    %Program Files%\Common Files\Advanced System Optimizer\App\GameOptLauncher.exe (1922 bytes)
    %Program Files%\Common Files\Advanced System Optimizer\App\eng\newscheduler.ini (8 bytes)
    %Program Files%\Common Files\Advanced System Optimizer\App\updater\extract\license.txt (2 bytes)
    %Program Files%\Common Files\Advanced System Optimizer\App\msvcp90.dll (7063 bytes)
    %Program Files%\Common Files\Advanced System Optimizer\App\eng\checkupdate.ini (12 bytes)
    %Program Files%\Common Files\Advanced System Optimizer\App\Systweak Software Website.url (245 bytes)
    %Program Files%\Common Files\Advanced System Optimizer\App\single_click_care.ico (15 bytes)
    %Program Files%\Common Files\Advanced System Optimizer\App\eng\gameopt.ini (8 bytes)
    %Program Files%\Common Files\Advanced System Optimizer\App\clamunpack\libclamav.dll (5447 bytes)
    %Program Files%\Common Files\Advanced System Optimizer\App\Microsoft.VC90.MFC.manifest (349 bytes)
    %Program Files%\Common Files\Advanced System Optimizer\App\Undelete.exe (2603 bytes)
    %Program Files%\Common Files\Advanced System Optimizer\App\NewScheduler.exe (7142 bytes)
    %Program Files%\Common Files\Advanced System Optimizer\App\Interop.IWshRuntimeLibrary.dll (49 bytes)
    %Program Files%\Common Files\Advanced System Optimizer\App\KillASOProcesses.exe (227 bytes)
    %Program Files%\Common Files\Advanced System Optimizer\App\eng\diskexplorer.ini (21 bytes)
    %Program Files%\Common Files\Advanced System Optimizer\App\eng\client.ini (65 bytes)
    %Program Files%\Common Files\Advanced System Optimizer\App\DefragServiceManager.exe (71 bytes)
    %Program Files%\Common Files\Advanced System Optimizer\App\updater\amd64\DriverRestore.manifest (682 bytes)
    %Program Files%\Common Files\Advanced System Optimizer\App\difxapi.dll (3413 bytes)
    %Program Files%\Common Files\Advanced System Optimizer\App\PCFixer.exe (6753 bytes)
    %Program Files%\Common Files\Advanced System Optimizer\App\Microsoft.Win32.TaskScheduler.dll (1929 bytes)
    %Program Files%\Common Files\Advanced System Optimizer\App\eng\pcfixer.ini (24 bytes)
    %Program Files%\Common Files\Advanced System Optimizer\App\asores.dll (65453 bytes)
    %Program Files%\Common Files\Advanced System Optimizer\App\eng\sysclean.ini (52 bytes)
    %Program Files%\Common Files\Advanced System Optimizer\App\updater\xp\DriverRestore.exe (62 bytes)
    %Program Files%\Common Files\Advanced System Optimizer\App\updater\win7amd64\DriverRestore.exe (917 bytes)
    %Program Files%\Common Files\Advanced System Optimizer\App\msvcr90.dll (3847 bytes)
    %Program Files%\Common Files\Advanced System Optimizer\App\asplangs\eng_asp_en.ini (101 bytes)
    %Program Files%\Common Files\Advanced System Optimizer\App\Xceed.Compression.dll (552 bytes)
    %Program Files%\Common Files\Advanced System Optimizer\App\eng\dupfileremover.ini (28 bytes)
    %Program Files%\Common Files\Advanced System Optimizer\App\rw.dat (7386 bytes)
    %Program Files%\Common Files\Advanced System Optimizer\App\GameOptimizer.exe (1948 bytes)
    %Program Files%\Common Files\Advanced System Optimizer\App\Downloader.dll (1425 bytes)
    %Program Files%\Common Files\Advanced System Optimizer\App\SystemProtector.exe.config (4 bytes)
    %Program Files%\Common Files\Advanced System Optimizer\App\System.Data.SQLite.dll (6225 bytes)
    %Program Files%\Common Files\Advanced System Optimizer\App\SecureShell.dll (5525 bytes)
    %Program Files%\Common Files\Advanced System Optimizer\App\updater\extract\7z.dll (8067 bytes)
    %Program Files%\Common Files\Advanced System Optimizer\App\Network.dll (4748 bytes)
    %Program Files%\Common Files\Advanced System Optimizer\App\Buy Advanced System Optimizer.url (331 bytes)
    %Program Files%\Common Files\Advanced System Optimizer\App\DefragReport\footer_right.jpg (11 bytes)
    %Program Files%\Common Files\Advanced System Optimizer\App\categories.ini (42 bytes)
    %Program Files%\Common Files\Advanced System Optimizer\App\DefragReport\line3px_Blue.jpg (11 bytes)
    %Program Files%\Common Files\Advanced System Optimizer\App\CheckUpdate.exe (27994 bytes)
    %Program Files%\Common Files\Advanced System Optimizer\App\DefragReport\Report_header_top_right.jpg (12 bytes)
    %Program Files%\Common Files\Advanced System Optimizer\App\StartupManager.exe (1706 bytes)
    %Program Files%\Common Files\Advanced System Optimizer\App\SysFileBakRes.exe (4335 bytes)
    %Program Files%\Common Files\Advanced System Optimizer\App\eng\UninstallManager.ini (5 bytes)
    %Program Files%\Common Files\Advanced System Optimizer\App\unrar.dll (1349 bytes)
    %Program Files%\Common Files\Advanced System Optimizer\App\Help.ico (1 bytes)
    %Program Files%\Common Files\Advanced System Optimizer\App\SecureEncryptor.exe (1854 bytes)
    %Program Files%\Common Files\Advanced System Optimizer\App\updater\extract\History.txt (29 bytes)
    %Program Files%\Common Files\Advanced System Optimizer\App\System.Core.dll (8923 bytes)
    %Program Files%\Common Files\Advanced System Optimizer\App\zlibwapi.dll (319 bytes)
    %Program Files%\Common Files\Advanced System Optimizer\App\rw.ini (54 bytes)
    %Program Files%\Common Files\Advanced System Optimizer\App\Microsoft.VC90.CRT.manifest (391 bytes)
    %Program Files%\Common Files\Advanced System Optimizer\App\DuplicateFilesRemover.exe (460 bytes)
    %Program Files%\Common Files\Advanced System Optimizer\App\updater\amd64Helper\DriverUpdateHelper64.exe (2221 bytes)
    %Program Files%\Common Files\Advanced System Optimizer\App\asohtm.dll (3901 bytes)
    %Program Files%\Common Files\Advanced System Optimizer\App\Xceed.Compression.Formats.dll (1916 bytes)
    %Program Files%\Common Files\Advanced System Optimizer\App\eng\privprotector.ini (44 bytes)
    %Program Files%\Common Files\Advanced System Optimizer\App\DefragReport\footer_left.jpg (11 bytes)
    %Program Files%\Common Files\Advanced System Optimizer\Portable.reg (14 bytes)
    %Program Files%\Common Files\Advanced System Optimizer\App\DefragReport\left_border.jpg (11 bytes)
    %Program Files%\Common Files\Advanced System Optimizer\App\UninstallManager.exe (692 bytes)
    %Program Files%\Common Files\Advanced System Optimizer\App\Order.ico (1 bytes)
    %Program Files%\Common Files\Advanced System Optimizer\App\SystemAnalyzerAndAdvisor.exe (5321 bytes)

  4. Clean the Temporary Internet Files folder, which may contain infected files (How to clean Temporary Internet Files folder).
  5. Reboot the computer.

*Manual removal may cause unexpected system behaviour and should be performed at your own risk.

No votes yet

x

Our best antivirus yet!

Fresh new look. Faster scanning. Better protection.

Enjoy unique new features, lightning fast scans and a simple yet beautiful new look in our best antivirus yet!

For a quicker, lighter and more secure experience, download the all new adaware antivirus 12 now!

Download adaware antivirus 12
No thanks, continue to lavasoft.com
close x

Discover the new adaware antivirus 12

Our best antivirus yet

Download Now