| | Registry Key | Value Name | Value Data |
 | HKEY_CLASSES_ROOT\NewAdPopup.ToolbarDetector | | |
 | HKEY_CLASSES_ROOT\NewAdPopup.ToolbarDetector.1 | | |
 | HKEY_CLASSES_ROOT\NewAvertPup.BWLogic | | |
 | HKEY_CLASSES_ROOT\NewAvertPup.BWLogic.1 | | |
 | HKEY_CLASSES_ROOT\NewsCocoMediaPop.PopCoco | | |
 | HKEY_CLASSES_ROOT\NewsCocoMediaPop.PopCoco.1 | | |
 | HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{11F09AFD-75AD-4E51-AB43-E09 E9351CE16} | | CAdLogic Object |
 | HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{11F09AFD-75AD-4E51-AB43-E09 E9351CE16} | AppID | |
 | HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{11F09AFD-75AD-4E51-AB43-E09 E9351CE16}\InprocServer32 | | %PROGRAMFILES%\Common Files\CPUSH\cpush. dll |
 | HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{11F09AFD-75AD-4E51-AB43-E09 E9351CE16}\InprocServer32 | ThreadingModel | apartment |
 | HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{11F09AFD-75AD-4E51-AB43-E09 E9351CE16}\ProgID | | NewAvertPup.BWLogic.1 |
 | HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{11F09AFD-75AD-4E51-AB43-E09 E9351CE16}\Programmable | | |
 | HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{11F09AFD-75AD-4E51-AB43-E09 E9351CE16}\TypeLib | | {DE2267BD-B163-407F-9E8D-6ADEC771E7AB} |
 | HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{11F09AFD-75AD-4E51-AB43-E09 E9351CE16}\VersionIndependentProgID | | NewAvertPup.BWLogic |
 | HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{34A12A06-48C0-420D-8F11-735 52EE9631A} | | CToolbarDetector Object |
 | HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{34A12A06-48C0-420D-8F11-735 52EE9631A} | AppID | |
 | HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{34A12A06-48C0-420D-8F11-735 52EE9631A}\InprocServer32 | | %PROGRAMFILES%\Common Files\CPUSH\cpush. dll |
 | HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{34A12A06-48C0-420D-8F11-735 52EE9631A}\InprocServer32 | ThreadingModel | apartment |
 | HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{34A12A06-48C0-420D-8F11-735 52EE9631A}\ProgID | | NewAdPopup.ToolbarDetector.1 |
 | HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{34A12A06-48C0-420D-8F11-735 52EE9631A}\Programmable | | |
 | HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{34A12A06-48C0-420D-8F11-735 52EE9631A}\TypeLib | | {DE2267BD-B163-407F-9E8D-6ADEC771E7AB} |
 | HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{34A12A06-48C0-420D-8F11-735 52EE9631A}\VersionIndependentProgID | | NewAdPopup.ToolbarDetector |
 | HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{CDE9EB54-A08E-4570-B748-13F 5DDB5781C} | | CPopupBlock Object |
 | HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{CDE9EB54-A08E-4570-B748-13F 5DDB5781C} | AppID | |
 | HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{CDE9EB54-A08E-4570-B748-13F 5DDB5781C}\InprocServer32 | | %PROGRAMFILES%\Common Files\CPUSH\cpush. dll |
 | HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{CDE9EB54-A08E-4570-B748-13F 5DDB5781C}\InprocServer32 | ThreadingModel | apartment |
 | HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{CDE9EB54-A08E-4570-B748-13F 5DDB5781C}\ProgID | | NewsCocoMediaPop.PopCoco.1 |
 | HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{CDE9EB54-A08E-4570-B748-13F 5DDB5781C}\Programmable | | |
 | HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{CDE9EB54-A08E-4570-B748-13F 5DDB5781C}\TypeLib | | {DE2267BD-B163-407F-9E8D-6ADEC771E7AB} |
 | HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{CDE9EB54-A08E-4570-B748-13F 5DDB5781C}\VersionIndependentProgID | | NewsCocoMediaPop.PopCoco |
 | HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Interface\{0AD3AB16-6D0E-4F04-8660 -FB1F36BC2DC0} | | IAdLogic |
 | HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Interface\{0AD3AB16-6D0E-4F04-8660 -FB1F36BC2DC0}\ProxyStubClsid | | {00020424-0000-0000-C000-000000000046} |
 | HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Interface\{0AD3AB16-6D0E-4F04-8660 -FB1F36BC2DC0}\ProxyStubClsid32 | | {00020424-0000-0000-C000-000000000046} |
 | HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Interface\{0AD3AB16-6D0E-4F04-8660 -FB1F36BC2DC0}\TypeLib | | {DE2267BD-B163-407F-9E8D-6ADEC771E7AB} |
 | HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Interface\{0AD3AB16-6D0E-4F04-8660 -FB1F36BC2DC0}\TypeLib | Version | 1.0 |
 | HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Interface\{2F685B36-C53A-4653-9231 -1DAE5736DE45} | | IToolbarDetector |
 | HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Interface\{2F685B36-C53A-4653-9231 -1DAE5736DE45}\ProxyStubClsid | | {00020424-0000-0000-C000-000000000046} |
 | HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Interface\{2F685B36-C53A-4653-9231 -1DAE5736DE45}\ProxyStubClsid32 | | {00020424-0000-0000-C000-000000000046} |
 | HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Interface\{2F685B36-C53A-4653-9231 -1DAE5736DE45}\TypeLib | | {DE2267BD-B163-407F-9E8D-6ADEC771E7AB} |
 | HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Interface\{2F685B36-C53A-4653-9231 -1DAE5736DE45}\TypeLib | Version | 1.0 |
 | HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Interface\{50C4CDD9-22D7-49FF-AC6D -7D4D528A3AB2} | | IPopupBlock |
 | HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Interface\{50C4CDD9-22D7-49FF-AC6D -7D4D528A3AB2}\ProxyStubClsid | | {00020424-0000-0000-C000-000000000046} |
 | HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Interface\{50C4CDD9-22D7-49FF-AC6D -7D4D528A3AB2}\ProxyStubClsid32 | | {00020424-0000-0000-C000-000000000046} |
 | HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Interface\{50C4CDD9-22D7-49FF-AC6D -7D4D528A3AB2}\TypeLib | | {DE2267BD-B163-407F-9E8D-6ADEC771E7AB} |
 | HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Interface\{50C4CDD9-22D7-49FF-AC6D -7D4D528A3AB2}\TypeLib | Version | 1.0 |
 | HKEY_LOCAL_MACHINE\SOFTWARE\Classes\NewAdPopup.ToolbarDetector | | CToolbarDetector Object |
 | HKEY_LOCAL_MACHINE\SOFTWARE\Classes\NewAdPopup.ToolbarDetector.1 | | CToolbarDetector Object |
 | HKEY_LOCAL_MACHINE\SOFTWARE\Classes\NewAdPopup.ToolbarDetector.1\CLSID
| | {34A12A06-48C0-420D-8F11-73552EE9631A} |
 | HKEY_LOCAL_MACHINE\SOFTWARE\Classes\NewAdPopup.ToolbarDetector\CLSID | | {34A12A06-48C0-420D-8F11-73552EE9631A} |
 | HKEY_LOCAL_MACHINE\SOFTWARE\Classes\NewAdPopup.ToolbarDetector\CurVer | | NewAdPopup.ToolbarDetector.1 |
 | HKEY_LOCAL_MACHINE\SOFTWARE\Classes\NewAvertPup.BWLogic | | CAdLogic Object |
 | HKEY_LOCAL_MACHINE\SOFTWARE\Classes\NewAvertPup.BWLogic.1 | | CAdLogic Object |
 | HKEY_LOCAL_MACHINE\SOFTWARE\Classes\NewAvertPup.BWLogic.1\CLSID | | {11F09AFD-75AD-4E51-AB43-E09E9351CE16} |
 | HKEY_LOCAL_MACHINE\SOFTWARE\Classes\NewAvertPup.BWLogic\CLSID | | {11F09AFD-75AD-4E51-AB43-E09E9351CE16} |
 | HKEY_LOCAL_MACHINE\SOFTWARE\Classes\NewAvertPup.BWLogic\CurVer | | NewAvertPup.BWLogic.1 |
 | HKEY_LOCAL_MACHINE\SOFTWARE\Classes\NewsCocoMediaPop.PopCoco | | CPopupBlock Object |
 | HKEY_LOCAL_MACHINE\SOFTWARE\Classes\NewsCocoMediaPop.PopCoco.1 | | CPopupBlock Object |
 | HKEY_LOCAL_MACHINE\SOFTWARE\Classes\NewsCocoMediaPop.PopCoco.1\CLSID | | {CDE9EB54-A08E-4570-B748-13F5DDB5781C} |
 | HKEY_LOCAL_MACHINE\SOFTWARE\Classes\NewsCocoMediaPop.PopCoco\CLSID | | {CDE9EB54-A08E-4570-B748-13F5DDB5781C} |
 | HKEY_LOCAL_MACHINE\SOFTWARE\Classes\NewsCocoMediaPop.PopCoco\CurVer | | NewsCocoMediaPop.PopCoco.1 |
 | HKEY_LOCAL_MACHINE\SOFTWARE\Classes\TypeLib\{DE2267BD-B163-407F-9E8D-6 ADEC771E7AB} | | |
 | HKEY_LOCAL_MACHINE\SOFTWARE\Classes\TypeLib\{DE2267BD-B163-407F-9E8D-6 ADEC771E7AB}\1.0 | | NewAdPopup 1.0 Type Library |
 | HKEY_LOCAL_MACHINE\SOFTWARE\Classes\TypeLib\{DE2267BD-B163-407F-9E8D-6 ADEC771E7AB}\1.0\0 | | |
 | HKEY_LOCAL_MACHINE\SOFTWARE\Classes\TypeLib\{DE2267BD-B163-407F-9E8D-6 ADEC771E7AB}\1.0\0\win32 | | %PROGRAMFILES%\Common Files\CPUSH\cpush. dll |
 | HKEY_LOCAL_MACHINE\SOFTWARE\Classes\TypeLib\{DE2267BD-B163-407F-9E8D-6 ADEC771E7AB}\1.0\FLAGS | | 0 |
 | HKEY_LOCAL_MACHINE\SOFTWARE\Classes\TypeLib\{DE2267BD-B163-407F-9E8D-6 ADEC771E7AB}\1.0\HELPDIR | | %PROGRAMFILES%\Common Files\CPUSH\ |
 | HKEY_LOCAL_MACHINE\SOFTWARE\cpush | | |
 | HKEY_LOCAL_MACHINE\SOFTWARE\cpush\update | | |
 | HKEY_LOCAL_MACHINE\SOFTWARE\cpush\update | Ad_Version | 1,0,6,9 |
 | HKEY_LOCAL_MACHINE\SOFTWARE\MicroPlugins\Common | | |
 | HKEY_LOCAL_MACHINE\SOFTWARE\MicroPlugins\Common | param | sid=ad |
 | HKEY_LOCAL_MACHINE\SOFTWARE\MicroPlugins\Common | size | [REG_DWORD, value: 010F59CA] |
 | HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\ Browser Helper Objects | | |
 | HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\ Browser Helper Objects\{11F09AFD-75AD-4E51-AB43-E09E9351CE16} | | AdPopup |
 | HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Uninstall \ContentMatch | | |
 | HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall \ContentMatch | DisplayName | Adsense based PopAd |
 | HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall \ContentMatch | UninstallString | %PROGRAMFILES%\Common Files\CPUSH\Uninst .exe |