| | Registry Key | Value Name | Value Data |
 | HKEY_CLASSES_ROOT\Adware.AdHelper | | |
 | HKEY_CLASSES_ROOT\Adware.AdHelper | | response class |
 | HKEY_CLASSES_ROOT\Adware.AdHelper.1 | | |
 | HKEY_CLASSES_ROOT\Adware.AdHelper.1 | | response class |
 | HKEY_CLASSES_ROOT\Adware.AdHelper.1\CLSID | | |
 | HKEY_CLASSES_ROOT\Adware.AdHelper.1\CLSID | | {81a99149-f047-4090-8aad-d11ff4efb734} |
 | HKEY_CLASSES_ROOT\Adware.AdHelper\CLSID | | |
 | HKEY_CLASSES_ROOT\Adware.AdHelper\CLSID | | {81a99149-f047-4090-8aad-d11ff4efb734} |
 | HKEY_CLASSES_ROOT\Adware.AdHelper\CurVer | | |
 | HKEY_CLASSES_ROOT\Adware.AdHelper\CurVer | | rtarget.response.1 |
 | HKEY_CLASSES_ROOT\CLSID\{81A99149-F047-4090-8AAD-D11FF4EFB734} | | |
 | HKEY_CLASSES_ROOT\CLSID\{81A99149-F047-4090-8AAD-D11FF4EFB734} | | response class |
 | HKEY_CLASSES_ROOT\CLSID\{81A99149-F047-4090-8AAD-D11FF4EFB734}\Control
| | |
 | HKEY_CLASSES_ROOT\CLSID\{81A99149-F047-4090-8AAD-D11FF4EFB734}\InprocS erver32 | | |
 | HKEY_CLASSES_ROOT\CLSID\{81A99149-F047-4090-8AAD-D11FF4EFB734}\InprocS erver32 | | %SYSTEMDRIVE%\data\d52d27~1.exe |
 | HKEY_CLASSES_ROOT\CLSID\{81A99149-F047-4090-8AAD-D11FF4EFB734}\InprocS erver32 | ThreadingModel | apartment |
 | HKEY_CLASSES_ROOT\CLSID\{81A99149-F047-4090-8AAD-D11FF4EFB734}\MiscSta tus | | |
 | HKEY_CLASSES_ROOT\CLSID\{81A99149-F047-4090-8AAD-D11FF4EFB734}\MiscSta tus | | 0 |
 | HKEY_CLASSES_ROOT\CLSID\{81A99149-F047-4090-8AAD-D11FF4EFB734}\MiscSta tus\1 | | |
 | HKEY_CLASSES_ROOT\CLSID\{81A99149-F047-4090-8AAD-D11FF4EFB734}\MiscSta tus\1 | | 131473 |
 | HKEY_CLASSES_ROOT\CLSID\{81A99149-F047-4090-8AAD-D11FF4EFB734}\ProgID | | |
 | HKEY_CLASSES_ROOT\CLSID\{81A99149-F047-4090-8AAD-D11FF4EFB734}\ProgID | | rtarget.response.1 |
 | HKEY_CLASSES_ROOT\CLSID\{81A99149-F047-4090-8AAD-D11FF4EFB734}\Program mable | | |
 | HKEY_CLASSES_ROOT\CLSID\{81A99149-F047-4090-8AAD-D11FF4EFB734}\Toolbox Bitmap32 | | |
 | HKEY_CLASSES_ROOT\CLSID\{81A99149-F047-4090-8AAD-D11FF4EFB734}\Toolbox Bitmap32 | | %SYSTEMDRIVE%\data\d52d27~1.exe, 101 |
 | HKEY_CLASSES_ROOT\CLSID\{81A99149-F047-4090-8AAD-D11FF4EFB734}\TypeLib
| | |
 | HKEY_CLASSES_ROOT\CLSID\{81A99149-F047-4090-8AAD-D11FF4EFB734}\TypeLib
| | {9c8b84ba-5357-4f66-8d5b-597e5ae0f805} |
 | HKEY_CLASSES_ROOT\CLSID\{81A99149-F047-4090-8AAD-D11FF4EFB734}\Version
| | |
 | HKEY_CLASSES_ROOT\CLSID\{81A99149-F047-4090-8AAD-D11FF4EFB734}\Version
| | 1.0 |
 | HKEY_CLASSES_ROOT\CLSID\{81A99149-F047-4090-8AAD-D11FF4EFB734}\Version IndependentProgID | | |
 | HKEY_CLASSES_ROOT\CLSID\{81A99149-F047-4090-8AAD-D11FF4EFB734}\Version IndependentProgID | | rtarget.response |
 | HKEY_CLASSES_ROOT\Interface\{3BD2842E-ACA0-4E6A-9640-EA961B179734} | | |
 | HKEY_CLASSES_ROOT\Interface\{3BD2842E-ACA0-4E6A-9640-EA961B179734} | | iadhelper |
 | HKEY_CLASSES_ROOT\Interface\{3BD2842E-ACA0-4E6A-9640-EA961B179734}\Pro xyStubClsid | | |
 | HKEY_CLASSES_ROOT\Interface\{3BD2842E-ACA0-4E6A-9640-EA961B179734}\Pro xyStubClsid | | {00020424-0000-0000-c000-000000000046} |
 | HKEY_CLASSES_ROOT\Interface\{3BD2842E-ACA0-4E6A-9640-EA961B179734}\Pro xyStubClsid32 | | |
 | HKEY_CLASSES_ROOT\Interface\{3BD2842E-ACA0-4E6A-9640-EA961B179734}\Pro xyStubClsid32 | | {00020424-0000-0000-c000-000000000046} |
 | HKEY_CLASSES_ROOT\Interface\{3BD2842E-ACA0-4E6A-9640-EA961B179734}\Typ eLib | | |
 | HKEY_CLASSES_ROOT\Interface\{3BD2842E-ACA0-4E6A-9640-EA961B179734}\Typ eLib | | {9c8b84ba-5357-4f66-8d5b-597e5ae0f805} |
 | HKEY_CLASSES_ROOT\Interface\{3BD2842E-ACA0-4E6A-9640-EA961B179734}\Typ eLib | Version | 1.0 |
 | HKEY_CLASSES_ROOT\TypeLib\{9C8B84BA-5357-4F66-8D5B-597E5AE0F805} | | |
 | HKEY_CLASSES_ROOT\TypeLib\{9C8B84BA-5357-4F66-8D5B-597E5AE0F805}\1.0 | | |
 | HKEY_CLASSES_ROOT\TypeLib\{9C8B84BA-5357-4F66-8D5B-597E5AE0F805}\1.0 | | dae 1.0 type library |
 | HKEY_CLASSES_ROOT\TypeLib\{9C8B84BA-5357-4F66-8D5B-597E5AE0F805}\1.0\0
| | |
 | HKEY_CLASSES_ROOT\TypeLib\{9C8B84BA-5357-4F66-8D5B-597E5AE0F805}\1.0\0 \win32 | | |
 | HKEY_CLASSES_ROOT\TypeLib\{9C8B84BA-5357-4F66-8D5B-597E5AE0F805}\1.0\0 \win32 | | %SYSTEMDRIVE%\data\d52d277bc24cfb199c90b 6982aa9ef4c.exe |
 | HKEY_CLASSES_ROOT\TypeLib\{9C8B84BA-5357-4F66-8D5B-597E5AE0F805}\1.0\F LAGS | | |
 | HKEY_CLASSES_ROOT\TypeLib\{9C8B84BA-5357-4F66-8D5B-597E5AE0F805}\1.0\F LAGS | | 0 |
 | HKEY_CLASSES_ROOT\TypeLib\{9C8B84BA-5357-4F66-8D5B-597E5AE0F805}\1.0\H ELPDIR | | |
 | HKEY_CLASSES_ROOT\TypeLib\{9C8B84BA-5357-4F66-8D5B-597E5AE0F805}\1.0\H ELPDIR | | %SYSTEMDRIVE%\data\ |
 | HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\ Browser Helper Objects | | |
 | HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\ Browser Helper Objects\{81A99149-F047-4090-8AAD-D11FF4EFB734} | | |
 | HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Uninstall \AdHelper | | |
 | HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Uninstall \AdHelper | DisplayName | dae |
 | HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Uninstall \AdHelper | UninstallString | regsvr32 /u /s "%SYSTEMDRIVE%\data\ d52d277bc24cfb199c90b6982aa9ef4c.exe " |