Remove %COMMON APPDATA%\THUNDER NETWORK\XMP5\V5.1.26.4324\PROGRAM\XMP.EXE malware
%COMMON APPDATA%\THUNDER NETWORK\XMP5\V5.1.26.4324\PROGRAM\XMP.EXE Malware Removal Guide
Manual removal instructions:
Antivirus Report of %COMMON APPDATA%\THUNDER NETWORK\XMP5\V5.1.26.4324\PROGRAM\XMP.EXE:
%common appdata%\thunder network\xmp5\v5.1.26.4324\program\xmp.exe
Full path on a computer: %COMMON APPDATA%\THUNDER NETWORK\XMP5\V5.1.26.4324\PROGRAM\XMP.EXE
Autostart registry keys:
HKLM\Software\Classes\.asf\OpenWithList\XMP.exe
HKLM\Software\Classes\.avi\OpenWithList\XMP.exe
HKLM\Software\Classes\.cda\OpenWithList\XMP.exe
HKLM\Software\Classes\.dat\OpenWithList\XMP.exe
HKLM\Software\Classes\.dvd\OpenWithList\XMP.exe
HKLM\Software\Classes\.m1v\OpenWithList\XMP.exe
HKLM\Software\Classes\.m2v\OpenWithList\XMP.exe
HKLM\Software\Classes\.mid\OpenWithList\XMP.exe
HKLM\Software\Classes\.midi\OpenWithList\XMP.exe
HKLM\Software\Classes\.mod\OpenWithList\XMP.exe
HKLM\Software\Classes\.mov\OpenWithList\XMP.exe
HKLM\Software\Classes\.mp2\OpenWithList\XMP.exe
HKLM\Software\Classes\.mp2v\OpenWithList\XMP.exe
HKLM\Software\Classes\.mp3\OpenWithList\XMP.exe
HKLM\Software\Classes\.mpa\OpenWithList\XMP.exe
HKLM\Software\Classes\.mpe\OpenWithList\XMP.exe
HKLM\Software\Classes\.mpeg\OpenWithList\XMP.exe
HKLM\Software\Classes\.mpg\OpenWithList\XMP.exe
HKLM\Software\Classes\.mpv2\OpenWithList\XMP.exe
HKLM\Software\Classes\.smil\OpenWithList\XMP.exe
HKLM\Software\Classes\.swf\OpenWithList\XMP.exe
HKLM\Software\Classes\.wm\OpenWithList\XMP.exe
HKLM\Software\Classes\.wma\OpenWithList\XMP.exe
HKLM\Software\Classes\.wmp\OpenWithList\XMP.exe
HKLM\Software\Classes\.wmv\OpenWithList\XMP.exe
HKLM\Software\Classes\Applications\XMP.exe
HKLM\Software\Classes\Applications\XMP.exe\DefaultIcon
HKLM\Software\Classes\Applications\XMP.exe\Shell
HKLM\Software\Classes\Applications\XMP.exe\Shell\open
HKLM\Software\Classes\Applications\XMP.exe\Shell\open\command
HKLM\Software\Classes\.3g2\OpenWithList\XMP.exe
HKLM\Software\Classes\.3gp\OpenWithList\XMP.exe
HKLM\Software\Classes\.3gp2\OpenWithList\XMP.exe
HKLM\Software\Classes\.3gpp\OpenWithList\XMP.exe
HKLM\Software\Classes\.aac\OpenWithList\XMP.exe
HKLM\Software\Classes\.ac3\OpenWithList\XMP.exe
HKLM\Software\Classes\.amr\OpenWithList\XMP.exe
HKLM\Software\Classes\.amv\OpenWithList\XMP.exe
HKLM\Software\Classes\.ape\OpenWithList\XMP.exe
HKLM\Software\Classes\.ass\OpenWithList\XMP.exe
HKLM\Software\Classes\.av\OpenWithList\XMP.exe
HKLM\Software\Classes\.bik\OpenWithList\XMP.exe
HKLM\Software\Classes\.csf\OpenWithList\XMP.exe
HKLM\Software\Classes\.divx\OpenWithList\XMP.exe
HKLM\Software\Classes\.dts\OpenWithList\XMP.exe
HKLM\Software\Classes\.evo\OpenWithList\XMP.exe
HKLM\Software\Classes\.f4v\OpenWithList\XMP.exe
HKLM\Software\Classes\.flac\OpenWithList\XMP.exe
HKLM\Software\Classes\.flv\OpenWithList\XMP.exe
HKLM\Software\Classes\.hlv\OpenWithList\XMP.exe
HKLM\Software\Classes\.idx\OpenWithList\XMP.exe
HKLM\Software\Classes\.ifo\OpenWithList\XMP.exe
HKLM\Software\Classes\.m1a\OpenWithList\XMP.exe
HKLM\Software\Classes\.m2a\OpenWithList\XMP.exe
HKLM\Software\Classes\.m2p\OpenWithList\XMP.exe
HKLM\Software\Classes\.m2ts\OpenWithList\XMP.exe
HKLM\Software\Classes\.m4a\OpenWithList\XMP.exe
HKLM\Software\Classes\.m4b\OpenWithList\XMP.exe
HKLM\Software\Classes\.m4p\OpenWithList\XMP.exe
HKLM\Software\Classes\.m4v\OpenWithList\XMP.exe
HKLM\Software\Classes\.mka\OpenWithList\XMP.exe
HKLM\Software\Classes\.mkv\OpenWithList\XMP.exe
HKLM\Software\Classes\.mp4\OpenWithList\XMP.exe
HKLM\Software\Classes\.mpc\OpenWithList\XMP.exe
HKLM\Software\Classes\.mpeg1\OpenWithList\XMP.exe
HKLM\Software\Classes\.mpeg2\OpenWithList\XMP.exe
HKLM\Software\Classes\.mpeg4\OpenWithList\XMP.exe
HKLM\Software\Classes\.mts\OpenWithList\XMP.exe
HKLM\Software\Classes\.oga\OpenWithList\XMP.exe
HKLM\Software\Classes\.ogg\OpenWithList\XMP.exe
HKLM\Software\Classes\.ogm\OpenWithList\XMP.exe
HKLM\Software\Classes\.ogv\OpenWithList\XMP.exe
HKLM\Software\Classes\.ogx\OpenWithList\XMP.exe
HKLM\Software\Classes\.pmp\OpenWithList\XMP.exe
HKLM\Software\Classes\.psb\OpenWithList\XMP.exe
HKLM\Software\Classes\.pss\OpenWithList\XMP.exe
HKLM\Software\Classes\.pva\OpenWithList\XMP.exe
HKLM\Software\Classes\.qt\OpenWithList\XMP.exe
HKLM\Software\Classes\.ra\OpenWithList\XMP.exe
HKLM\Software\Classes\.ram\OpenWithList\XMP.exe
HKLM\Software\Classes\.rm\OpenWithList\XMP.exe
HKLM\Software\Classes\.rmvb\OpenWithList\XMP.exe
HKLM\Software\Classes\.rp\OpenWithList\XMP.exe
HKLM\Software\Classes\.rpm\OpenWithList\XMP.exe
HKLM\Software\Classes\.rt\OpenWithList\XMP.exe
HKLM\Software\Classes\.scm\OpenWithList\XMP.exe
HKLM\Software\Classes\.smi\OpenWithList\XMP.exe
HKLM\Software\Classes\.srt\OpenWithList\XMP.exe
HKLM\Software\Classes\.ssa\OpenWithList\XMP.exe
HKLM\Software\Classes\.sub\OpenWithList\XMP.exe
HKLM\Software\Classes\.tp\OpenWithList\XMP.exe
HKLM\Software\Classes\.tpr\OpenWithList\XMP.exe
HKLM\Software\Classes\.ts\OpenWithList\XMP.exe
HKLM\Software\Classes\.tta\OpenWithList\XMP.exe
HKLM\Software\Classes\.usf\OpenWithList\XMP.exe
HKLM\Software\Classes\.vob\OpenWithList\XMP.exe
HKLM\Software\Classes\.vp6\OpenWithList\XMP.exe
HKLM\Software\Classes\.wv\OpenWithList\XMP.exe
HKLM\Software\Classes\.xlmv\OpenWithList\XMP.exe
HKLM\Software\Classes\.xv\OpenWithList\XMP.exe
HKLM\Software\Classes\.xvx\OpenWithList\XMP.exe
HKLM\Software\Microsoft\Windows\CurrentVersion\App Paths\XMP.exe
HKLM\SOFTWARE\CLASSES\APPLICATIONS\XMP.EXE\SHELL\OPEN\COMMAND\: ""%PROGRAM FILES%\THUNDER NETWORK\XMP\V5.1.26.4324\BIN\XMP.EXE" /PLAY "%1" /SOPENFROM WNDEXPLR /SSTARTFROM LOCALFILE"
HKLM\Software\Classes\Applications\XMP.exe\Shell\open\: "?? ???? ??(&P)"
HKLM\Software\Classes\Applications\XMP.exe\Shell\: "open"
HKLM\SOFTWARE\CLASSES\APPLICATIONS\XMP.EXE\DEFAULTICON\: ""%PROGRAM FILES%\THUNDER NETWORK\XMP\V5.1.26.4324\BIN\XMP.EXE",0"
HKLM\SOFTWARE\CLASSES\CLSID\{7040AE7C-D539-4ABB-BEA1-B5E58A3D2655}\LOCALSERVER32\: "%SYSTEMDRIVE%\DOCUME~1\ALLUSE~1\APPLIC~1\THUNDE~1\XMP5\V5126~1.432\PROGRAM\XMP.EXE"
HKLM\SOFTWARE\CLASSES\CLSID\{7040AE7C-D539-4ABB-BEA1-B5E58A3D2655}\LOCALIZEDSTRING: "@%SYSTEMDRIVE%\DOCUME~1\ALLUSE~1\APPLIC~1\THUNDE~1\XMP5\V5126~1.432\PROGRAM\XMP.EXE,-128"
HKLM\SOFTWARE\CLASSES\PLAY\SHELL\OPEN\COMMAND\: ""%PROGRAM FILES%\THUNDER NETWORK\XMP\V5.1.26.4324\BIN\XMP.EXE" "%1" /SSTARTFROM CLOUDPLAYPROTOCOL /SOPENFROM CLOUDPLAYPROTOCOL"
HKLM\SOFTWARE\CLASSES\PLAY.ED2K\SHELL\OPEN\COMMAND\: ""%PROGRAM FILES%\THUNDER NETWORK\XMP\V5.1.26.4324\BIN\XMP.EXE" "%1" /SSTARTFROM CLOUDPLAYPROTOCOL /SOPENFROM CLOUDPLAYPROTOCOL"
HKLM\SOFTWARE\CLASSES\PLAY.FTP\SHELL\OPEN\COMMAND\: ""%PROGRAM FILES%\THUNDER NETWORK\XMP\V5.1.26.4324\BIN\XMP.EXE" "%1" /SSTARTFROM CLOUDPLAYPROTOCOL /SOPENFROM CLOUDPLAYPROTOCOL"
HKLM\SOFTWARE\CLASSES\PLAY.FTP.TORRENT\SHELL\OPEN\COMMAND\: ""%PROGRAM FILES%\THUNDER NETWORK\XMP\V5.1.26.4324\BIN\XMP.EXE" "%1" /SSTARTFROM CLOUDPLAYPROTOCOL /SOPENFROM CLOUDPLAYPROTOCOL"
HKLM\SOFTWARE\CLASSES\PLAY.HTTP\SHELL\OPEN\COMMAND\: ""%PROGRAM FILES%\THUNDER NETWORK\XMP\V5.1.26.4324\BIN\XMP.EXE" "%1" /SSTARTFROM CLOUDPLAYPROTOCOL /SOPENFROM CLOUDPLAYPROTOCOL"
HKLM\SOFTWARE\CLASSES\PLAY.HTTP.TORRENT\SHELL\OPEN\COMMAND\: ""%PROGRAM FILES%\THUNDER NETWORK\XMP\V5.1.26.4324\BIN\XMP.EXE" "%1" /SSTARTFROM CLOUDPLAYPROTOCOL /SOPENFROM CLOUDPLAYPROTOCOL"
HKLM\SOFTWARE\CLASSES\PLAY.MAGNET\SHELL\OPEN\COMMAND\: ""%PROGRAM FILES%\THUNDER NETWORK\XMP\V5.1.26.4324\BIN\XMP.EXE" "%1" /SSTARTFROM CLOUDPLAYPROTOCOL /SOPENFROM CLOUDPLAYPROTOCOL"
HKLM\SOFTWARE\CLASSES\PLAY.MMS\SHELL\OPEN\COMMAND\: ""%PROGRAM FILES%\THUNDER NETWORK\XMP\V5.1.26.4324\BIN\XMP.EXE" "%1" /SSTARTFROM CLOUDPLAYPROTOCOL /SOPENFROM CLOUDPLAYPROTOCOL"
HKLM\SOFTWARE\CLASSES\PLAY.RTSP\SHELL\OPEN\COMMAND\: ""%PROGRAM FILES%\THUNDER NETWORK\XMP\V5.1.26.4324\BIN\XMP.EXE" "%1" /SSTARTFROM CLOUDPLAYPROTOCOL /SOPENFROM CLOUDPLAYPROTOCOL"
HKLM\SOFTWARE\CLASSES\PLAY.THUNDER\SHELL\OPEN\COMMAND\: ""%PROGRAM FILES%\THUNDER NETWORK\XMP\V5.1.26.4324\BIN\XMP.EXE" "%1" /SSTARTFROM CLOUDPLAYPROTOCOL /SOPENFROM CLOUDPLAYPROTOCOL"
HKLM\SOFTWARE\CLASSES\PLAY.THUNDER.TORRENT\SHELL\OPEN\COMMAND\: ""%PROGRAM FILES%\THUNDER NETWORK\XMP\V5.1.26.4324\BIN\XMP.EXE" "%1" /SSTARTFROM CLOUDPLAYPROTOCOL /SOPENFROM CLOUDPLAYPROTOCOL"
HKLM\SOFTWARE\CLASSES\XMP.3G2\SHELL\OPEN\COMMAND\: ""%PROGRAM FILES%\THUNDER NETWORK\XMP\V5.1.26.4324\BIN\XMP.EXE" /PLAY "%1" /SOPENFROM WNDEXPLR /SSTARTFROM LOCALFILE "
HKLM\SOFTWARE\CLASSES\XMP.3GP\SHELL\OPEN\COMMAND\: ""%PROGRAM FILES%\THUNDER NETWORK\XMP\V5.1.26.4324\BIN\XMP.EXE" /PLAY "%1" /SOPENFROM WNDEXPLR /SSTARTFROM LOCALFILE "
HKLM\SOFTWARE\CLASSES\XMP.3GP2\SHELL\OPEN\COMMAND\: ""%PROGRAM FILES%\THUNDER NETWORK\XMP\V5.1.26.4324\BIN\XMP.EXE" /PLAY "%1" /SOPENFROM WNDEXPLR /SSTARTFROM LOCALFILE "
HKLM\SOFTWARE\CLASSES\XMP.3GPP\SHELL\OPEN\COMMAND\: ""%PROGRAM FILES%\THUNDER NETWORK\XMP\V5.1.26.4324\BIN\XMP.EXE" /PLAY "%1" /SOPENFROM WNDEXPLR /SSTARTFROM LOCALFILE "
HKLM\SOFTWARE\CLASSES\XMP.AAC\SHELL\OPEN\COMMAND\: ""%PROGRAM FILES%\THUNDER NETWORK\XMP\V5.1.26.4324\BIN\XMP.EXE" /PLAY "%1" /SOPENFROM WNDEXPLR /SSTARTFROM LOCALFILE "
HKLM\SOFTWARE\CLASSES\XMP.AC3\SHELL\OPEN\COMMAND\: ""%PROGRAM FILES%\THUNDER NETWORK\XMP\V5.1.26.4324\BIN\XMP.EXE" /PLAY "%1" /SOPENFROM WNDEXPLR /SSTARTFROM LOCALFILE "
HKLM\SOFTWARE\CLASSES\XMP.AMR\SHELL\OPEN\COMMAND\: ""%PROGRAM FILES%\THUNDER NETWORK\XMP\V5.1.26.4324\BIN\XMP.EXE" /PLAY "%1" /SOPENFROM WNDEXPLR /SSTARTFROM LOCALFILE "
HKLM\SOFTWARE\CLASSES\XMP.AMV\SHELL\OPEN\COMMAND\: ""%PROGRAM FILES%\THUNDER NETWORK\XMP\V5.1.26.4324\BIN\XMP.EXE" /PLAY "%1" /SOPENFROM WNDEXPLR /SSTARTFROM LOCALFILE "
HKLM\SOFTWARE\CLASSES\XMP.APE\SHELL\OPEN\COMMAND\: ""%PROGRAM FILES%\THUNDER NETWORK\XMP\V5.1.26.4324\BIN\XMP.EXE" /PLAY "%1" /SOPENFROM WNDEXPLR /SSTARTFROM LOCALFILE "
HKLM\SOFTWARE\CLASSES\XMP.ASF\SHELL\OPEN\COMMAND\: ""%PROGRAM FILES%\THUNDER NETWORK\XMP\V5.1.26.4324\BIN\XMP.EXE" /PLAY "%1" /SOPENFROM WNDEXPLR /SSTARTFROM LOCALFILE "
HKLM\SOFTWARE\CLASSES\XMP.ASS\SHELL\OPEN\COMMAND\: ""%PROGRAM FILES%\THUNDER NETWORK\XMP\V5.1.26.4324\BIN\XMP.EXE" /PLAY "%1" /SOPENFROM WNDEXPLR /SSTARTFROM LOCALFILE "
HKLM\SOFTWARE\CLASSES\XMP.AV\SHELL\OPEN\COMMAND\: ""%PROGRAM FILES%\THUNDER NETWORK\XMP\V5.1.26.4324\BIN\XMP.EXE" /PLAY "%1" /SOPENFROM WNDEXPLR /SSTARTFROM LOCALFILE "
HKLM\SOFTWARE\CLASSES\XMP.AVI\SHELL\OPEN\COMMAND\: ""%PROGRAM FILES%\THUNDER NETWORK\XMP\V5.1.26.4324\BIN\XMP.EXE" /PLAY "%1" /SOPENFROM WNDEXPLR /SSTARTFROM LOCALFILE "
HKLM\SOFTWARE\CLASSES\XMP.BIK\SHELL\OPEN\COMMAND\: ""%PROGRAM FILES%\THUNDER NETWORK\XMP\V5.1.26.4324\BIN\XMP.EXE" /PLAY "%1" /SOPENFROM WNDEXPLR /SSTARTFROM LOCALFILE "
HKLM\SOFTWARE\CLASSES\XMP.CDA\SHELL\OPEN\COMMAND\: ""%PROGRAM FILES%\THUNDER NETWORK\XMP\V5.1.26.4324\BIN\XMP.EXE" /PLAY "%1" /SOPENFROM WNDEXPLR /SSTARTFROM LOCALFILE "
HKLM\SOFTWARE\CLASSES\XMP.CSF\SHELL\OPEN\COMMAND\: ""%PROGRAM FILES%\THUNDER NETWORK\XMP\V5.1.26.4324\BIN\XMP.EXE" /PLAY "%1" /SOPENFROM WNDEXPLR /SSTARTFROM LOCALFILE "
HKLM\SOFTWARE\CLASSES\XMP.DAT\SHELL\OPEN\COMMAND\: ""%PROGRAM FILES%\THUNDER NETWORK\XMP\V5.1.26.4324\BIN\XMP.EXE" /PLAY "%1" /SOPENFROM WNDEXPLR /SSTARTFROM LOCALFILE "
HKLM\SOFTWARE\CLASSES\XMP.DIVX\SHELL\OPEN\COMMAND\: ""%PROGRAM FILES%\THUNDER NETWORK\XMP\V5.1.26.4324\BIN\XMP.EXE" /PLAY "%1" /SOPENFROM WNDEXPLR /SSTARTFROM LOCALFILE "
HKLM\SOFTWARE\CLASSES\XMP.DTS\SHELL\OPEN\COMMAND\: ""%PROGRAM FILES%\THUNDER NETWORK\XMP\V5.1.26.4324\BIN\XMP.EXE" /PLAY "%1" /SOPENFROM WNDEXPLR /SSTARTFROM LOCALFILE "
HKLM\SOFTWARE\CLASSES\XMP.DVD\SHELL\OPEN\COMMAND\: ""%PROGRAM FILES%\THUNDER NETWORK\XMP\V5.1.26.4324\BIN\XMP.EXE" /PLAY "%1" /SOPENFROM WNDEXPLR /SSTARTFROM LOCALFILE "
HKLM\SOFTWARE\CLASSES\XMP.EVO\SHELL\OPEN\COMMAND\: ""%PROGRAM FILES%\THUNDER NETWORK\XMP\V5.1.26.4324\BIN\XMP.EXE" /PLAY "%1" /SOPENFROM WNDEXPLR /SSTARTFROM LOCALFILE "
HKLM\SOFTWARE\CLASSES\XMP.F4V\SHELL\OPEN\COMMAND\: ""%PROGRAM FILES%\THUNDER NETWORK\XMP\V5.1.26.4324\BIN\XMP.EXE" /PLAY "%1" /SOPENFROM WNDEXPLR /SSTARTFROM LOCALFILE "
HKLM\SOFTWARE\CLASSES\XMP.FLAC\SHELL\OPEN\COMMAND\: ""%PROGRAM FILES%\THUNDER NETWORK\XMP\V5.1.26.4324\BIN\XMP.EXE" /PLAY "%1" /SOPENFROM WNDEXPLR /SSTARTFROM LOCALFILE "
HKLM\SOFTWARE\CLASSES\XMP.FLV\SHELL\OPEN\COMMAND\: ""%PROGRAM FILES%\THUNDER NETWORK\XMP\V5.1.26.4324\BIN\XMP.EXE" /PLAY "%1" /SOPENFROM WNDEXPLR /SSTARTFROM LOCALFILE "
HKLM\SOFTWARE\CLASSES\XMP.HLV\SHELL\OPEN\COMMAND\: ""%PROGRAM FILES%\THUNDER NETWORK\XMP\V5.1.26.4324\BIN\XMP.EXE" /PLAY "%1" /SOPENFROM WNDEXPLR /SSTARTFROM LOCALFILE "
HKLM\SOFTWARE\CLASSES\XMP.IDX\SHELL\OPEN\COMMAND\: ""%PROGRAM FILES%\THUNDER NETWORK\XMP\V5.1.26.4324\BIN\XMP.EXE" /PLAY "%1" /SOPENFROM WNDEXPLR /SSTARTFROM LOCALFILE "
HKLM\SOFTWARE\CLASSES\XMP.IFO\SHELL\OPEN\COMMAND\: ""%PROGRAM FILES%\THUNDER NETWORK\XMP\V5.1.26.4324\BIN\XMP.EXE" /PLAY "%1" /SOPENFROM WNDEXPLR /SSTARTFROM LOCALFILE "
HKLM\SOFTWARE\CLASSES\XMP.M1A\SHELL\OPEN\COMMAND\: ""%PROGRAM FILES%\THUNDER NETWORK\XMP\V5.1.26.4324\BIN\XMP.EXE" /PLAY "%1" /SOPENFROM WNDEXPLR /SSTARTFROM LOCALFILE "
HKLM\SOFTWARE\CLASSES\XMP.M1V\SHELL\OPEN\COMMAND\: ""%PROGRAM FILES%\THUNDER NETWORK\XMP\V5.1.26.4324\BIN\XMP.EXE" /PLAY "%1" /SOPENFROM WNDEXPLR /SSTARTFROM LOCALFILE "
HKLM\SOFTWARE\CLASSES\XMP.M2A\SHELL\OPEN\COMMAND\: ""%PROGRAM FILES%\THUNDER NETWORK\XMP\V5.1.26.4324\BIN\XMP.EXE" /PLAY "%1" /SOPENFROM WNDEXPLR /SSTARTFROM LOCALFILE "
HKLM\SOFTWARE\CLASSES\XMP.M2P\SHELL\OPEN\COMMAND\: ""%PROGRAM FILES%\THUNDER NETWORK\XMP\V5.1.26.4324\BIN\XMP.EXE" /PLAY "%1" /SOPENFROM WNDEXPLR /SSTARTFROM LOCALFILE "
HKLM\SOFTWARE\CLASSES\XMP.M2TS\SHELL\OPEN\COMMAND\: ""%PROGRAM FILES%\THUNDER NETWORK\XMP\V5.1.26.4324\BIN\XMP.EXE" /PLAY "%1" /SOPENFROM WNDEXPLR /SSTARTFROM LOCALFILE "
HKLM\SOFTWARE\CLASSES\XMP.M2V\SHELL\OPEN\COMMAND\: ""%PROGRAM FILES%\THUNDER NETWORK\XMP\V5.1.26.4324\BIN\XMP.EXE" /PLAY "%1" /SOPENFROM WNDEXPLR /SSTARTFROM LOCALFILE "
HKLM\SOFTWARE\CLASSES\XMP.M4A\SHELL\OPEN\COMMAND\: ""%PROGRAM FILES%\THUNDER NETWORK\XMP\V5.1.26.4324\BIN\XMP.EXE" /PLAY "%1" /SOPENFROM WNDEXPLR /SSTARTFROM LOCALFILE "
HKLM\SOFTWARE\CLASSES\XMP.M4B\SHELL\OPEN\COMMAND\: ""%PROGRAM FILES%\THUNDER NETWORK\XMP\V5.1.26.4324\BIN\XMP.EXE" /PLAY "%1" /SOPENFROM WNDEXPLR /SSTARTFROM LOCALFILE "
HKLM\SOFTWARE\CLASSES\XMP.M4P\SHELL\OPEN\COMMAND\: ""%PROGRAM FILES%\THUNDER NETWORK\XMP\V5.1.26.4324\BIN\XMP.EXE" /PLAY "%1" /SOPENFROM WNDEXPLR /SSTARTFROM LOCALFILE "
HKLM\SOFTWARE\CLASSES\XMP.M4V\SHELL\OPEN\COMMAND\: ""%PROGRAM FILES%\THUNDER NETWORK\XMP\V5.1.26.4324\BIN\XMP.EXE" /PLAY "%1" /SOPENFROM WNDEXPLR /SSTARTFROM LOCALFILE "
HKLM\SOFTWARE\CLASSES\XMP.MID\SHELL\OPEN\COMMAND\: ""%PROGRAM FILES%\THUNDER NETWORK\XMP\V5.1.26.4324\BIN\XMP.EXE" /PLAY "%1" /SOPENFROM WNDEXPLR /SSTARTFROM LOCALFILE "
HKLM\SOFTWARE\CLASSES\XMP.MIDI\SHELL\OPEN\COMMAND\: ""%PROGRAM FILES%\THUNDER NETWORK\XMP\V5.1.26.4324\BIN\XMP.EXE" /PLAY "%1" /SOPENFROM WNDEXPLR /SSTARTFROM LOCALFILE "
HKLM\SOFTWARE\CLASSES\XMP.MKA\SHELL\OPEN\COMMAND\: ""%PROGRAM FILES%\THUNDER NETWORK\XMP\V5.1.26.4324\BIN\XMP.EXE" /PLAY "%1" /SOPENFROM WNDEXPLR /SSTARTFROM LOCALFILE "
HKLM\SOFTWARE\CLASSES\XMP.MKV\SHELL\OPEN\COMMAND\: ""%PROGRAM FILES%\THUNDER NETWORK\XMP\V5.1.26.4324\BIN\XMP.EXE" /PLAY "%1" /SOPENFROM WNDEXPLR /SSTARTFROM LOCALFILE "
HKLM\SOFTWARE\CLASSES\XMP.MOD\SHELL\OPEN\COMMAND\: ""%PROGRAM FILES%\THUNDER NETWORK\XMP\V5.1.26.4324\BIN\XMP.EXE" /PLAY "%1" /SOPENFROM WNDEXPLR /SSTARTFROM LOCALFILE "
HKLM\SOFTWARE\CLASSES\XMP.MOV\SHELL\OPEN\COMMAND\: ""%PROGRAM FILES%\THUNDER NETWORK\XMP\V5.1.26.4324\BIN\XMP.EXE" /PLAY "%1" /SOPENFROM WNDEXPLR /SSTARTFROM LOCALFILE "
HKLM\SOFTWARE\CLASSES\XMP.MP2\SHELL\OPEN\COMMAND\: ""%PROGRAM FILES%\THUNDER NETWORK\XMP\V5.1.26.4324\BIN\XMP.EXE" /PLAY "%1" /SOPENFROM WNDEXPLR /SSTARTFROM LOCALFILE "
HKLM\SOFTWARE\CLASSES\XMP.MP2V\SHELL\OPEN\COMMAND\: ""%PROGRAM FILES%\THUNDER NETWORK\XMP\V5.1.26.4324\BIN\XMP.EXE" /PLAY "%1" /SOPENFROM WNDEXPLR /SSTARTFROM LOCALFILE "
HKLM\SOFTWARE\CLASSES\XMP.MP3\SHELL\OPEN\COMMAND\: ""%PROGRAM FILES%\THUNDER NETWORK\XMP\V5.1.26.4324\BIN\XMP.EXE" /PLAY "%1" /SOPENFROM WNDEXPLR /SSTARTFROM LOCALFILE "
HKLM\SOFTWARE\CLASSES\XMP.MP4\SHELL\OPEN\COMMAND\: ""%PROGRAM FILES%\THUNDER NETWORK\XMP\V5.1.26.4324\BIN\XMP.EXE" /PLAY "%1" /SOPENFROM WNDEXPLR /SSTARTFROM LOCALFILE "
HKLM\SOFTWARE\CLASSES\XMP.MPA\SHELL\OPEN\COMMAND\: ""%PROGRAM FILES%\THUNDER NETWORK\XMP\V5.1.26.4324\BIN\XMP.EXE" /PLAY "%1" /SOPENFROM WNDEXPLR /SSTARTFROM LOCALFILE "
HKLM\SOFTWARE\CLASSES\XMP.MPC\SHELL\OPEN\COMMAND\: ""%PROGRAM FILES%\THUNDER NETWORK\XMP\V5.1.26.4324\BIN\XMP.EXE" /PLAY "%1" /SOPENFROM WNDEXPLR /SSTARTFROM LOCALFILE "
HKLM\SOFTWARE\CLASSES\XMP.MPE\SHELL\OPEN\COMMAND\: ""%PROGRAM FILES%\THUNDER NETWORK\XMP\V5.1.26.4324\BIN\XMP.EXE" /PLAY "%1" /SOPENFROM WNDEXPLR /SSTARTFROM LOCALFILE "
HKLM\SOFTWARE\CLASSES\XMP.MPEG\SHELL\OPEN\COMMAND\: ""%PROGRAM FILES%\THUNDER NETWORK\XMP\V5.1.26.4324\BIN\XMP.EXE" /PLAY "%1" /SOPENFROM WNDEXPLR /SSTARTFROM LOCALFILE "
HKLM\SOFTWARE\CLASSES\XMP.MPEG1\SHELL\OPEN\COMMAND\: ""%PROGRAM FILES%\THUNDER NETWORK\XMP\V5.1.26.4324\BIN\XMP.EXE" /PLAY "%1" /SOPENFROM WNDEXPLR /SSTARTFROM LOCALFILE "
HKLM\SOFTWARE\CLASSES\XMP.MPEG2\SHELL\OPEN\COMMAND\: ""%PROGRAM FILES%\THUNDER NETWORK\XMP\V5.1.26.4324\BIN\XMP.EXE" /PLAY "%1" /SOPENFROM WNDEXPLR /SSTARTFROM LOCALFILE "
HKLM\SOFTWARE\CLASSES\XMP.MPEG4\SHELL\OPEN\COMMAND\: ""%PROGRAM FILES%\THUNDER NETWORK\XMP\V5.1.26.4324\BIN\XMP.EXE" /PLAY "%1" /SOPENFROM WNDEXPLR /SSTARTFROM LOCALFILE "
HKLM\SOFTWARE\CLASSES\XMP.MPG\SHELL\OPEN\COMMAND\: ""%PROGRAM FILES%\THUNDER NETWORK\XMP\V5.1.26.4324\BIN\XMP.EXE" /PLAY "%1" /SOPENFROM WNDEXPLR /SSTARTFROM LOCALFILE "
HKLM\SOFTWARE\CLASSES\XMP.MPV2\SHELL\OPEN\COMMAND\: ""%PROGRAM FILES%\THUNDER NETWORK\XMP\V5.1.26.4324\BIN\XMP.EXE" /PLAY "%1" /SOPENFROM WNDEXPLR /SSTARTFROM LOCALFILE "
HKLM\SOFTWARE\CLASSES\XMP.MTS\SHELL\OPEN\COMMAND\: ""%PROGRAM FILES%\THUNDER NETWORK\XMP\V5.1.26.4324\BIN\XMP.EXE" /PLAY "%1" /SOPENFROM WNDEXPLR /SSTARTFROM LOCALFILE "
HKLM\SOFTWARE\CLASSES\XMP.OGA\SHELL\OPEN\COMMAND\: ""%PROGRAM FILES%\THUNDER NETWORK\XMP\V5.1.26.4324\BIN\XMP.EXE" /PLAY "%1" /SOPENFROM WNDEXPLR /SSTARTFROM LOCALFILE "
HKLM\SOFTWARE\CLASSES\XMP.OGG\SHELL\OPEN\COMMAND\: ""%PROGRAM FILES%\THUNDER NETWORK\XMP\V5.1.26.4324\BIN\XMP.EXE" /PLAY "%1" /SOPENFROM WNDEXPLR /SSTARTFROM LOCALFILE "
HKLM\SOFTWARE\CLASSES\XMP.OGM\SHELL\OPEN\COMMAND\: ""%PROGRAM FILES%\THUNDER NETWORK\XMP\V5.1.26.4324\BIN\XMP.EXE" /PLAY "%1" /SOPENFROM WNDEXPLR /SSTARTFROM LOCALFILE "
HKLM\SOFTWARE\CLASSES\XMP.OGV\SHELL\OPEN\COMMAND\: ""%PROGRAM FILES%\THUNDER NETWORK\XMP\V5.1.26.4324\BIN\XMP.EXE" /PLAY "%1" /SOPENFROM WNDEXPLR /SSTARTFROM LOCALFILE "
HKLM\SOFTWARE\CLASSES\XMP.OGX\SHELL\OPEN\COMMAND\: ""%PROGRAM FILES%\THUNDER NETWORK\XMP\V5.1.26.4324\BIN\XMP.EXE" /PLAY "%1" /SOPENFROM WNDEXPLR /SSTARTFROM LOCALFILE "
HKLM\SOFTWARE\CLASSES\XMP.PMP\SHELL\OPEN\COMMAND\: ""%PROGRAM FILES%\THUNDER NETWORK\XMP\V5.1.26.4324\BIN\XMP.EXE" /PLAY "%1" /SOPENFROM WNDEXPLR /SSTARTFROM LOCALFILE "
HKLM\SOFTWARE\CLASSES\XMP.PSB\SHELL\OPEN\COMMAND\: ""%PROGRAM FILES%\THUNDER NETWORK\XMP\V5.1.26.4324\BIN\XMP.EXE" /PLAY "%1" /SOPENFROM WNDEXPLR /SSTARTFROM LOCALFILE "
HKLM\SOFTWARE\CLASSES\XMP.PSS\SHELL\OPEN\COMMAND\: ""%PROGRAM FILES%\THUNDER NETWORK\XMP\V5.1.26.4324\BIN\XMP.EXE" /PLAY "%1" /SOPENFROM WNDEXPLR /SSTARTFROM LOCALFILE "
HKLM\SOFTWARE\CLASSES\XMP.PVA\SHELL\OPEN\COMMAND\: ""%PROGRAM FILES%\THUNDER NETWORK\XMP\V5.1.26.4324\BIN\XMP.EXE" /PLAY "%1" /SOPENFROM WNDEXPLR /SSTARTFROM LOCALFILE "
HKLM\SOFTWARE\CLASSES\XMP.QT\SHELL\OPEN\COMMAND\: ""%PROGRAM FILES%\THUNDER NETWORK\XMP\V5.1.26.4324\BIN\XMP.EXE" /PLAY "%1" /SOPENFROM WNDEXPLR /SSTARTFROM LOCALFILE "
HKLM\SOFTWARE\CLASSES\XMP.RA\SHELL\OPEN\COMMAND\: ""%PROGRAM FILES%\THUNDER NETWORK\XMP\V5.1.26.4324\BIN\XMP.EXE" /PLAY "%1" /SOPENFROM WNDEXPLR /SSTARTFROM LOCALFILE "
HKLM\SOFTWARE\CLASSES\XMP.RAM\SHELL\OPEN\COMMAND\: ""%PROGRAM FILES%\THUNDER NETWORK\XMP\V5.1.26.4324\BIN\XMP.EXE" /PLAY "%1" /SOPENFROM WNDEXPLR /SSTARTFROM LOCALFILE "
HKLM\SOFTWARE\CLASSES\XMP.RM\SHELL\OPEN\COMMAND\: ""%PROGRAM FILES%\THUNDER NETWORK\XMP\V5.1.26.4324\BIN\XMP.EXE" /PLAY "%1" /SOPENFROM WNDEXPLR /SSTARTFROM LOCALFILE "
HKLM\SOFTWARE\CLASSES\XMP.RMVB\SHELL\OPEN\COMMAND\: ""%PROGRAM FILES%\THUNDER NETWORK\XMP\V5.1.26.4324\BIN\XMP.EXE" /PLAY "%1" /SOPENFROM WNDEXPLR /SSTARTFROM LOCALFILE "
HKLM\SOFTWARE\CLASSES\XMP.RP\SHELL\OPEN\COMMAND\: ""%PROGRAM FILES%\THUNDER NETWORK\XMP\V5.1.26.4324\BIN\XMP.EXE" /PLAY "%1" /SOPENFROM WNDEXPLR /SSTARTFROM LOCALFILE "
HKLM\SOFTWARE\CLASSES\XMP.RPM\SHELL\OPEN\COMMAND\: ""%PROGRAM FILES%\THUNDER NETWORK\XMP\V5.1.26.4324\BIN\XMP.EXE" /PLAY "%1" /SOPENFROM WNDEXPLR /SSTARTFROM LOCALFILE "
HKLM\SOFTWARE\CLASSES\XMP.RT\SHELL\OPEN\COMMAND\: ""%PROGRAM FILES%\THUNDER NETWORK\XMP\V5.1.26.4324\BIN\XMP.EXE" /PLAY "%1" /SOPENFROM WNDEXPLR /SSTARTFROM LOCALFILE "
HKLM\SOFTWARE\CLASSES\XMP.SCM\SHELL\OPEN\COMMAND\: ""%PROGRAM FILES%\THUNDER NETWORK\XMP\V5.1.26.4324\BIN\XMP.EXE" /PLAY "%1" /SOPENFROM WNDEXPLR /SSTARTFROM LOCALFILE "
HKLM\SOFTWARE\CLASSES\XMP.SMI\SHELL\OPEN\COMMAND\: ""%PROGRAM FILES%\THUNDER NETWORK\XMP\V5.1.26.4324\BIN\XMP.EXE" /PLAY "%1" /SOPENFROM WNDEXPLR /SSTARTFROM LOCALFILE "
HKLM\SOFTWARE\CLASSES\XMP.SMIL\SHELL\OPEN\COMMAND\: ""%PROGRAM FILES%\THUNDER NETWORK\XMP\V5.1.26.4324\BIN\XMP.EXE" /PLAY "%1" /SOPENFROM WNDEXPLR /SSTARTFROM LOCALFILE "
HKLM\SOFTWARE\CLASSES\XMP.SRT\SHELL\OPEN\COMMAND\: ""%PROGRAM FILES%\THUNDER NETWORK\XMP\V5.1.26.4324\BIN\XMP.EXE" /PLAY "%1" /SOPENFROM WNDEXPLR /SSTARTFROM LOCALFILE "
HKLM\SOFTWARE\CLASSES\XMP.SSA\SHELL\OPEN\COMMAND\: ""%PROGRAM FILES%\THUNDER NETWORK\XMP\V5.1.26.4324\BIN\XMP.EXE" /PLAY "%1" /SOPENFROM WNDEXPLR /SSTARTFROM LOCALFILE "
HKLM\SOFTWARE\CLASSES\XMP.SUB\SHELL\OPEN\COMMAND\: ""%PROGRAM FILES%\THUNDER NETWORK\XMP\V5.1.26.4324\BIN\XMP.EXE" /PLAY "%1" /SOPENFROM WNDEXPLR /SSTARTFROM LOCALFILE "
HKLM\SOFTWARE\CLASSES\XMP.SWF\SHELL\OPEN\COMMAND\: ""%PROGRAM FILES%\THUNDER NETWORK\XMP\V5.1.26.4324\BIN\XMP.EXE" /PLAY "%1" /SOPENFROM WNDEXPLR /SSTARTFROM LOCALFILE "
HKLM\SOFTWARE\CLASSES\XMP.TORRENT\SHELL\OPEN\COMMAND\: ""%PROGRAM FILES%\THUNDER NETWORK\XMP\V5.1.26.4324\BIN\XMP.EXE" /PLAY "%1" /SOPENFROM WNDEXPLR /SSTARTFROM LOCALFILE "
HKLM\SOFTWARE\CLASSES\XMP.TP\SHELL\OPEN\COMMAND\: ""%PROGRAM FILES%\THUNDER NETWORK\XMP\V5.1.26.4324\BIN\XMP.EXE" /PLAY "%1" /SOPENFROM WNDEXPLR /SSTARTFROM LOCALFILE "
HKLM\SOFTWARE\CLASSES\XMP.TPR\SHELL\OPEN\COMMAND\: ""%PROGRAM FILES%\THUNDER NETWORK\XMP\V5.1.26.4324\BIN\XMP.EXE" /PLAY "%1" /SOPENFROM WNDEXPLR /SSTARTFROM LOCALFILE "
HKLM\SOFTWARE\CLASSES\XMP.TS\SHELL\OPEN\COMMAND\: ""%PROGRAM FILES%\THUNDER NETWORK\XMP\V5.1.26.4324\BIN\XMP.EXE" /PLAY "%1" /SOPENFROM WNDEXPLR /SSTARTFROM LOCALFILE "
HKLM\SOFTWARE\CLASSES\XMP.TTA\SHELL\OPEN\COMMAND\: ""%PROGRAM FILES%\THUNDER NETWORK\XMP\V5.1.26.4324\BIN\XMP.EXE" /PLAY "%1" /SOPENFROM WNDEXPLR /SSTARTFROM LOCALFILE "
HKLM\SOFTWARE\CLASSES\XMP.USF\SHELL\OPEN\COMMAND\: ""%PROGRAM FILES%\THUNDER NETWORK\XMP\V5.1.26.4324\BIN\XMP.EXE" /PLAY "%1" /SOPENFROM WNDEXPLR /SSTARTFROM LOCALFILE "
HKLM\SOFTWARE\CLASSES\XMP.VOB\SHELL\OPEN\COMMAND\: ""%PROGRAM FILES%\THUNDER NETWORK\XMP\V5.1.26.4324\BIN\XMP.EXE" /PLAY "%1" /SOPENFROM WNDEXPLR /SSTARTFROM LOCALFILE "
HKLM\SOFTWARE\CLASSES\XMP.VP6\SHELL\OPEN\COMMAND\: ""%PROGRAM FILES%\THUNDER NETWORK\XMP\V5.1.26.4324\BIN\XMP.EXE" /PLAY "%1" /SOPENFROM WNDEXPLR /SSTARTFROM LOCALFILE "
HKLM\SOFTWARE\CLASSES\XMP.WM\SHELL\OPEN\COMMAND\: ""%PROGRAM FILES%\THUNDER NETWORK\XMP\V5.1.26.4324\BIN\XMP.EXE" /PLAY "%1" /SOPENFROM WNDEXPLR /SSTARTFROM LOCALFILE "
HKLM\SOFTWARE\CLASSES\XMP.WMA\SHELL\OPEN\COMMAND\: ""%PROGRAM FILES%\THUNDER NETWORK\XMP\V5.1.26.4324\BIN\XMP.EXE" /PLAY "%1" /SOPENFROM WNDEXPLR /SSTARTFROM LOCALFILE "
HKLM\SOFTWARE\CLASSES\XMP.WMP\SHELL\OPEN\COMMAND\: ""%PROGRAM FILES%\THUNDER NETWORK\XMP\V5.1.26.4324\BIN\XMP.EXE" /PLAY "%1" /SOPENFROM WNDEXPLR /SSTARTFROM LOCALFILE "
HKLM\SOFTWARE\CLASSES\XMP.WMV\SHELL\OPEN\COMMAND\: ""%PROGRAM FILES%\THUNDER NETWORK\XMP\V5.1.26.4324\BIN\XMP.EXE" /PLAY "%1" /SOPENFROM WNDEXPLR /SSTARTFROM LOCALFILE "
HKLM\SOFTWARE\CLASSES\XMP.WV\SHELL\OPEN\COMMAND\: ""%PROGRAM FILES%\THUNDER NETWORK\XMP\V5.1.26.4324\BIN\XMP.EXE" /PLAY "%1" /SOPENFROM WNDEXPLR /SSTARTFROM LOCALFILE "
HKLM\SOFTWARE\CLASSES\XMP.XLMV\SHELL\OPEN\COMMAND\: ""%PROGRAM FILES%\THUNDER NETWORK\XMP\V5.1.26.4324\BIN\XMP.EXE" /PLAY "%1" /SOPENFROM WNDEXPLR /SSTARTFROM LOCALFILE "
HKLM\SOFTWARE\CLASSES\XMP.XV\SHELL\OPEN\COMMAND\: ""%PROGRAM FILES%\THUNDER NETWORK\XMP\V5.1.26.4324\BIN\XMP.EXE" /PLAY "%1" /SOPENFROM WNDEXPLR /SSTARTFROM LOCALFILE "
HKLM\SOFTWARE\CLASSES\XMP.XVX\SHELL\OPEN\COMMAND\: ""%PROGRAM FILES%\THUNDER NETWORK\XMP\V5.1.26.4324\BIN\XMP.EXE" /PLAY "%1" /SOPENFROM WNDEXPLR /SSTARTFROM LOCALFILE "
HKLM\SOFTWARE\MICROSOFT\INTERNET EXPLORER\EXTENSIONS\{24C1D00E-0B92-4379-880B-444FA2D740DD}\ICON: "%SYSTEMDRIVE%\PROGRA~1\THUNDE~1\XMP\V5126~1.432\BIN\XMP.EXE,128"
HKLM\SOFTWARE\MICROSOFT\INTERNET EXPLORER\EXTENSIONS\{24C1D00E-0B92-4379-880B-444FA2D740DD}\HOTICON: "%SYSTEMDRIVE%\PROGRA~1\THUNDE~1\XMP\V5126~1.432\BIN\XMP.EXE,128"
HKLM\SOFTWARE\MICROSOFT\WINDOWS\CURRENTVERSION\APP PATHS\XMP.EXE\: "%PROGRAM FILES%\THUNDER NETWORK\XMP\V5.1.26.4324\BIN\XMP.EXE"
HKLM\SOFTWARE\MICROSOFT\WINDOWS\CURRENTVERSION\APP PATHS\XMP.EXE\PATH: "%PROGRAM FILES%\THUNDER NETWORK\XMP\V5.1.26.4324\BIN\"
HKLM\Software\Microsoft\Windows\CurrentVersion\App Paths\XMP.exe\UseUrl: 0x00000001
HKLM\SOFTWARE\THUNDER NETWORK\XMP\PATH: "%SYSTEMDRIVE%\PROGRA~1\THUNDE~1\XMP\V5126~1.432\BIN\XMP.EXE"
HKLM\SYSTEM\CURRENTCONTROLSET\SERVICES\SHAREDACCESS\PARAMETERS\FIREWALLPOLICY\STANDARDPROFILE\AUTHORIZEDAPPLICATIONS\LIST\%PROGRAM FILES%\THUNDER NETWORK\XMP\V5.1.26.4324\BIN\XMP.EXE: "%PROGRAM FILES%\THUNDER NETWORK\XMP\V5.1.26.4324\BIN\XMP.EXE:*:ENABLED:????"
HKCU\Software\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{88A2C0AD-F9C3-43A1-8C58-065821FAFA62}\AppName: "XMP.exe"
HKCU\Software\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{C495F919-7162-4340-8DB3-FA978C1C622F}\AppName: "xmp.exe"
HKCU\Software\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{C495F91B-7162-4340-8DB3-FA978C1C622F}\AppName: "XMP.exe"
HKCU\Software\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{C495F91E-7162-4340-8DB3-FA978C1C622F}\AppName: "xmp.exe"
HKCU\Software\Microsoft\Internet Explorer\Main\FeatureControl\FEATURE_BROWSER_EMULATION\XMP.exe: 0x00002AF9
HKCU\SOFTWARE\MICROSOFT\WINDOWS NT\CURRENTVERSION\APPCOMPATFLAGS\COMPATIBILITY ASSISTANT\PERSISTED\%PROGRAM FILES%\THUNDER NETWORK\XMP\V5.1.26.4324\BIN\XMP.EXE: 0X00000001
HKCU\Software\Microsoft\Windows NT\CurrentVersion\AppCompatFlags\Compatibility Assistant\Persisted\SIGN.IE=0AEF28 XMP.exe: 0x00000001
HKCU\SOFTWARE\MICROSOFT\WINDOWS NT\CURRENTVERSION\APPCOMPATFLAGS\COMPATIBILITY ASSISTANT\PERSISTED\%COMMONPROGRAMFILES%\THUNDER NETWORK\KANKAN\XMP.EXE: 0X00000001
HKCU\Software\Microsoft\Windows NT\CurrentVersion\AppCompatFlags\Compatibility Assistant\Persisted\SIGN.IE=00 Xmp.exe: 0x00000001
Related Files:
%COMMON APPDATA%\THUNDER NETWORK\XMP5\V5.1.26.4324\PROGRAM\XMEDIALIBRARY.DLL
%COMMON APPDATA%\THUNDER NETWORK\XMP5\V5.1.26.4324\PROGRAM\XMEDIALIBRARY64.DLL
%COMMON APPDATA%\THUNDER NETWORK\XMP5\V5.1.26.4324\PROGRAM\XMP.EXE
%COMMON APPDATA%\THUNDER NETWORK\XMP5\V5.1.26.4324\PROGRAM\XMP.EXE.LNK
%COMMON APPDATA%\THUNDER NETWORK\XMP5\V5.1.26.4324\PROGRAM\XMPADDINS.DLL
The file XMP.EXE is malware related.
You must delete the file XMP.EXE immediately!
Delete the file XMP.EXE without delay!
Kill the process XMP.EXE and remove XMP.EXE from the Windows startup.
XMP.EXE is related to: Win32.Application.ThunderN.A, XMP.EXE.
Virustotal = 1/55
MD5 = 2B7B1A41456E83C58D112F4EEBCCB078
File Size: 262952
File information:
OriginalFilename: xmp.exe
FileDescription: ????
InternalName: xmp
CompanyName: ?????????????
LegalCopyright: Copyright (c) 2003-2014 ?????????????
| %COMMON APPDATA%\THUNDER NETWORK\XMP5\V5.1.26.4324\PROGRAM\XMP.EXE | Malware |
| %COMMON APPDATA%\THUNDER NETWORK\XMP5\V5.1.26.4324\PROGRAM\XMP.EXE | Dangerous |
| %COMMON APPDATA%\THUNDER NETWORK\XMP5\V5.1.26.4324\PROGRAM\XMP.EXE | High Risk |
Autostart registry keys:
HKLM\Software\Classes\.asf\OpenWithList\XMP.exe
HKLM\Software\Classes\.avi\OpenWithList\XMP.exe
HKLM\Software\Classes\.cda\OpenWithList\XMP.exe
HKLM\Software\Classes\.dat\OpenWithList\XMP.exe
HKLM\Software\Classes\.dvd\OpenWithList\XMP.exe
HKLM\Software\Classes\.m1v\OpenWithList\XMP.exe
HKLM\Software\Classes\.m2v\OpenWithList\XMP.exe
HKLM\Software\Classes\.mid\OpenWithList\XMP.exe
HKLM\Software\Classes\.midi\OpenWithList\XMP.exe
HKLM\Software\Classes\.mod\OpenWithList\XMP.exe
HKLM\Software\Classes\.mov\OpenWithList\XMP.exe
HKLM\Software\Classes\.mp2\OpenWithList\XMP.exe
HKLM\Software\Classes\.mp2v\OpenWithList\XMP.exe
HKLM\Software\Classes\.mp3\OpenWithList\XMP.exe
HKLM\Software\Classes\.mpa\OpenWithList\XMP.exe
HKLM\Software\Classes\.mpe\OpenWithList\XMP.exe
HKLM\Software\Classes\.mpeg\OpenWithList\XMP.exe
HKLM\Software\Classes\.mpg\OpenWithList\XMP.exe
HKLM\Software\Classes\.mpv2\OpenWithList\XMP.exe
HKLM\Software\Classes\.smil\OpenWithList\XMP.exe
HKLM\Software\Classes\.swf\OpenWithList\XMP.exe
HKLM\Software\Classes\.wm\OpenWithList\XMP.exe
HKLM\Software\Classes\.wma\OpenWithList\XMP.exe
HKLM\Software\Classes\.wmp\OpenWithList\XMP.exe
HKLM\Software\Classes\.wmv\OpenWithList\XMP.exe
HKLM\Software\Classes\Applications\XMP.exe
HKLM\Software\Classes\Applications\XMP.exe\DefaultIcon
HKLM\Software\Classes\Applications\XMP.exe\Shell
HKLM\Software\Classes\Applications\XMP.exe\Shell\open
HKLM\Software\Classes\Applications\XMP.exe\Shell\open\command
HKLM\Software\Classes\.3g2\OpenWithList\XMP.exe
HKLM\Software\Classes\.3gp\OpenWithList\XMP.exe
HKLM\Software\Classes\.3gp2\OpenWithList\XMP.exe
HKLM\Software\Classes\.3gpp\OpenWithList\XMP.exe
HKLM\Software\Classes\.aac\OpenWithList\XMP.exe
HKLM\Software\Classes\.ac3\OpenWithList\XMP.exe
HKLM\Software\Classes\.amr\OpenWithList\XMP.exe
HKLM\Software\Classes\.amv\OpenWithList\XMP.exe
HKLM\Software\Classes\.ape\OpenWithList\XMP.exe
HKLM\Software\Classes\.ass\OpenWithList\XMP.exe
HKLM\Software\Classes\.av\OpenWithList\XMP.exe
HKLM\Software\Classes\.bik\OpenWithList\XMP.exe
HKLM\Software\Classes\.csf\OpenWithList\XMP.exe
HKLM\Software\Classes\.divx\OpenWithList\XMP.exe
HKLM\Software\Classes\.dts\OpenWithList\XMP.exe
HKLM\Software\Classes\.evo\OpenWithList\XMP.exe
HKLM\Software\Classes\.f4v\OpenWithList\XMP.exe
HKLM\Software\Classes\.flac\OpenWithList\XMP.exe
HKLM\Software\Classes\.flv\OpenWithList\XMP.exe
HKLM\Software\Classes\.hlv\OpenWithList\XMP.exe
HKLM\Software\Classes\.idx\OpenWithList\XMP.exe
HKLM\Software\Classes\.ifo\OpenWithList\XMP.exe
HKLM\Software\Classes\.m1a\OpenWithList\XMP.exe
HKLM\Software\Classes\.m2a\OpenWithList\XMP.exe
HKLM\Software\Classes\.m2p\OpenWithList\XMP.exe
HKLM\Software\Classes\.m2ts\OpenWithList\XMP.exe
HKLM\Software\Classes\.m4a\OpenWithList\XMP.exe
HKLM\Software\Classes\.m4b\OpenWithList\XMP.exe
HKLM\Software\Classes\.m4p\OpenWithList\XMP.exe
HKLM\Software\Classes\.m4v\OpenWithList\XMP.exe
HKLM\Software\Classes\.mka\OpenWithList\XMP.exe
HKLM\Software\Classes\.mkv\OpenWithList\XMP.exe
HKLM\Software\Classes\.mp4\OpenWithList\XMP.exe
HKLM\Software\Classes\.mpc\OpenWithList\XMP.exe
HKLM\Software\Classes\.mpeg1\OpenWithList\XMP.exe
HKLM\Software\Classes\.mpeg2\OpenWithList\XMP.exe
HKLM\Software\Classes\.mpeg4\OpenWithList\XMP.exe
HKLM\Software\Classes\.mts\OpenWithList\XMP.exe
HKLM\Software\Classes\.oga\OpenWithList\XMP.exe
HKLM\Software\Classes\.ogg\OpenWithList\XMP.exe
HKLM\Software\Classes\.ogm\OpenWithList\XMP.exe
HKLM\Software\Classes\.ogv\OpenWithList\XMP.exe
HKLM\Software\Classes\.ogx\OpenWithList\XMP.exe
HKLM\Software\Classes\.pmp\OpenWithList\XMP.exe
HKLM\Software\Classes\.psb\OpenWithList\XMP.exe
HKLM\Software\Classes\.pss\OpenWithList\XMP.exe
HKLM\Software\Classes\.pva\OpenWithList\XMP.exe
HKLM\Software\Classes\.qt\OpenWithList\XMP.exe
HKLM\Software\Classes\.ra\OpenWithList\XMP.exe
HKLM\Software\Classes\.ram\OpenWithList\XMP.exe
HKLM\Software\Classes\.rm\OpenWithList\XMP.exe
HKLM\Software\Classes\.rmvb\OpenWithList\XMP.exe
HKLM\Software\Classes\.rp\OpenWithList\XMP.exe
HKLM\Software\Classes\.rpm\OpenWithList\XMP.exe
HKLM\Software\Classes\.rt\OpenWithList\XMP.exe
HKLM\Software\Classes\.scm\OpenWithList\XMP.exe
HKLM\Software\Classes\.smi\OpenWithList\XMP.exe
HKLM\Software\Classes\.srt\OpenWithList\XMP.exe
HKLM\Software\Classes\.ssa\OpenWithList\XMP.exe
HKLM\Software\Classes\.sub\OpenWithList\XMP.exe
HKLM\Software\Classes\.tp\OpenWithList\XMP.exe
HKLM\Software\Classes\.tpr\OpenWithList\XMP.exe
HKLM\Software\Classes\.ts\OpenWithList\XMP.exe
HKLM\Software\Classes\.tta\OpenWithList\XMP.exe
HKLM\Software\Classes\.usf\OpenWithList\XMP.exe
HKLM\Software\Classes\.vob\OpenWithList\XMP.exe
HKLM\Software\Classes\.vp6\OpenWithList\XMP.exe
HKLM\Software\Classes\.wv\OpenWithList\XMP.exe
HKLM\Software\Classes\.xlmv\OpenWithList\XMP.exe
HKLM\Software\Classes\.xv\OpenWithList\XMP.exe
HKLM\Software\Classes\.xvx\OpenWithList\XMP.exe
HKLM\Software\Microsoft\Windows\CurrentVersion\App Paths\XMP.exe
HKLM\SOFTWARE\CLASSES\APPLICATIONS\XMP.EXE\SHELL\OPEN\COMMAND\: ""%PROGRAM FILES%\THUNDER NETWORK\XMP\V5.1.26.4324\BIN\XMP.EXE" /PLAY "%1" /SOPENFROM WNDEXPLR /SSTARTFROM LOCALFILE"
HKLM\Software\Classes\Applications\XMP.exe\Shell\open\: "?? ???? ??(&P)"
HKLM\Software\Classes\Applications\XMP.exe\Shell\: "open"
HKLM\SOFTWARE\CLASSES\APPLICATIONS\XMP.EXE\DEFAULTICON\: ""%PROGRAM FILES%\THUNDER NETWORK\XMP\V5.1.26.4324\BIN\XMP.EXE",0"
HKLM\SOFTWARE\CLASSES\CLSID\{7040AE7C-D539-4ABB-BEA1-B5E58A3D2655}\LOCALSERVER32\: "%SYSTEMDRIVE%\DOCUME~1\ALLUSE~1\APPLIC~1\THUNDE~1\XMP5\V5126~1.432\PROGRAM\XMP.EXE"
HKLM\SOFTWARE\CLASSES\CLSID\{7040AE7C-D539-4ABB-BEA1-B5E58A3D2655}\LOCALIZEDSTRING: "@%SYSTEMDRIVE%\DOCUME~1\ALLUSE~1\APPLIC~1\THUNDE~1\XMP5\V5126~1.432\PROGRAM\XMP.EXE,-128"
HKLM\SOFTWARE\CLASSES\PLAY\SHELL\OPEN\COMMAND\: ""%PROGRAM FILES%\THUNDER NETWORK\XMP\V5.1.26.4324\BIN\XMP.EXE" "%1" /SSTARTFROM CLOUDPLAYPROTOCOL /SOPENFROM CLOUDPLAYPROTOCOL"
HKLM\SOFTWARE\CLASSES\PLAY.ED2K\SHELL\OPEN\COMMAND\: ""%PROGRAM FILES%\THUNDER NETWORK\XMP\V5.1.26.4324\BIN\XMP.EXE" "%1" /SSTARTFROM CLOUDPLAYPROTOCOL /SOPENFROM CLOUDPLAYPROTOCOL"
HKLM\SOFTWARE\CLASSES\PLAY.FTP\SHELL\OPEN\COMMAND\: ""%PROGRAM FILES%\THUNDER NETWORK\XMP\V5.1.26.4324\BIN\XMP.EXE" "%1" /SSTARTFROM CLOUDPLAYPROTOCOL /SOPENFROM CLOUDPLAYPROTOCOL"
HKLM\SOFTWARE\CLASSES\PLAY.FTP.TORRENT\SHELL\OPEN\COMMAND\: ""%PROGRAM FILES%\THUNDER NETWORK\XMP\V5.1.26.4324\BIN\XMP.EXE" "%1" /SSTARTFROM CLOUDPLAYPROTOCOL /SOPENFROM CLOUDPLAYPROTOCOL"
HKLM\SOFTWARE\CLASSES\PLAY.HTTP\SHELL\OPEN\COMMAND\: ""%PROGRAM FILES%\THUNDER NETWORK\XMP\V5.1.26.4324\BIN\XMP.EXE" "%1" /SSTARTFROM CLOUDPLAYPROTOCOL /SOPENFROM CLOUDPLAYPROTOCOL"
HKLM\SOFTWARE\CLASSES\PLAY.HTTP.TORRENT\SHELL\OPEN\COMMAND\: ""%PROGRAM FILES%\THUNDER NETWORK\XMP\V5.1.26.4324\BIN\XMP.EXE" "%1" /SSTARTFROM CLOUDPLAYPROTOCOL /SOPENFROM CLOUDPLAYPROTOCOL"
HKLM\SOFTWARE\CLASSES\PLAY.MAGNET\SHELL\OPEN\COMMAND\: ""%PROGRAM FILES%\THUNDER NETWORK\XMP\V5.1.26.4324\BIN\XMP.EXE" "%1" /SSTARTFROM CLOUDPLAYPROTOCOL /SOPENFROM CLOUDPLAYPROTOCOL"
HKLM\SOFTWARE\CLASSES\PLAY.MMS\SHELL\OPEN\COMMAND\: ""%PROGRAM FILES%\THUNDER NETWORK\XMP\V5.1.26.4324\BIN\XMP.EXE" "%1" /SSTARTFROM CLOUDPLAYPROTOCOL /SOPENFROM CLOUDPLAYPROTOCOL"
HKLM\SOFTWARE\CLASSES\PLAY.RTSP\SHELL\OPEN\COMMAND\: ""%PROGRAM FILES%\THUNDER NETWORK\XMP\V5.1.26.4324\BIN\XMP.EXE" "%1" /SSTARTFROM CLOUDPLAYPROTOCOL /SOPENFROM CLOUDPLAYPROTOCOL"
HKLM\SOFTWARE\CLASSES\PLAY.THUNDER\SHELL\OPEN\COMMAND\: ""%PROGRAM FILES%\THUNDER NETWORK\XMP\V5.1.26.4324\BIN\XMP.EXE" "%1" /SSTARTFROM CLOUDPLAYPROTOCOL /SOPENFROM CLOUDPLAYPROTOCOL"
HKLM\SOFTWARE\CLASSES\PLAY.THUNDER.TORRENT\SHELL\OPEN\COMMAND\: ""%PROGRAM FILES%\THUNDER NETWORK\XMP\V5.1.26.4324\BIN\XMP.EXE" "%1" /SSTARTFROM CLOUDPLAYPROTOCOL /SOPENFROM CLOUDPLAYPROTOCOL"
HKLM\SOFTWARE\CLASSES\XMP.3G2\SHELL\OPEN\COMMAND\: ""%PROGRAM FILES%\THUNDER NETWORK\XMP\V5.1.26.4324\BIN\XMP.EXE" /PLAY "%1" /SOPENFROM WNDEXPLR /SSTARTFROM LOCALFILE "
HKLM\SOFTWARE\CLASSES\XMP.3GP\SHELL\OPEN\COMMAND\: ""%PROGRAM FILES%\THUNDER NETWORK\XMP\V5.1.26.4324\BIN\XMP.EXE" /PLAY "%1" /SOPENFROM WNDEXPLR /SSTARTFROM LOCALFILE "
HKLM\SOFTWARE\CLASSES\XMP.3GP2\SHELL\OPEN\COMMAND\: ""%PROGRAM FILES%\THUNDER NETWORK\XMP\V5.1.26.4324\BIN\XMP.EXE" /PLAY "%1" /SOPENFROM WNDEXPLR /SSTARTFROM LOCALFILE "
HKLM\SOFTWARE\CLASSES\XMP.3GPP\SHELL\OPEN\COMMAND\: ""%PROGRAM FILES%\THUNDER NETWORK\XMP\V5.1.26.4324\BIN\XMP.EXE" /PLAY "%1" /SOPENFROM WNDEXPLR /SSTARTFROM LOCALFILE "
HKLM\SOFTWARE\CLASSES\XMP.AAC\SHELL\OPEN\COMMAND\: ""%PROGRAM FILES%\THUNDER NETWORK\XMP\V5.1.26.4324\BIN\XMP.EXE" /PLAY "%1" /SOPENFROM WNDEXPLR /SSTARTFROM LOCALFILE "
HKLM\SOFTWARE\CLASSES\XMP.AC3\SHELL\OPEN\COMMAND\: ""%PROGRAM FILES%\THUNDER NETWORK\XMP\V5.1.26.4324\BIN\XMP.EXE" /PLAY "%1" /SOPENFROM WNDEXPLR /SSTARTFROM LOCALFILE "
HKLM\SOFTWARE\CLASSES\XMP.AMR\SHELL\OPEN\COMMAND\: ""%PROGRAM FILES%\THUNDER NETWORK\XMP\V5.1.26.4324\BIN\XMP.EXE" /PLAY "%1" /SOPENFROM WNDEXPLR /SSTARTFROM LOCALFILE "
HKLM\SOFTWARE\CLASSES\XMP.AMV\SHELL\OPEN\COMMAND\: ""%PROGRAM FILES%\THUNDER NETWORK\XMP\V5.1.26.4324\BIN\XMP.EXE" /PLAY "%1" /SOPENFROM WNDEXPLR /SSTARTFROM LOCALFILE "
HKLM\SOFTWARE\CLASSES\XMP.APE\SHELL\OPEN\COMMAND\: ""%PROGRAM FILES%\THUNDER NETWORK\XMP\V5.1.26.4324\BIN\XMP.EXE" /PLAY "%1" /SOPENFROM WNDEXPLR /SSTARTFROM LOCALFILE "
HKLM\SOFTWARE\CLASSES\XMP.ASF\SHELL\OPEN\COMMAND\: ""%PROGRAM FILES%\THUNDER NETWORK\XMP\V5.1.26.4324\BIN\XMP.EXE" /PLAY "%1" /SOPENFROM WNDEXPLR /SSTARTFROM LOCALFILE "
HKLM\SOFTWARE\CLASSES\XMP.ASS\SHELL\OPEN\COMMAND\: ""%PROGRAM FILES%\THUNDER NETWORK\XMP\V5.1.26.4324\BIN\XMP.EXE" /PLAY "%1" /SOPENFROM WNDEXPLR /SSTARTFROM LOCALFILE "
HKLM\SOFTWARE\CLASSES\XMP.AV\SHELL\OPEN\COMMAND\: ""%PROGRAM FILES%\THUNDER NETWORK\XMP\V5.1.26.4324\BIN\XMP.EXE" /PLAY "%1" /SOPENFROM WNDEXPLR /SSTARTFROM LOCALFILE "
HKLM\SOFTWARE\CLASSES\XMP.AVI\SHELL\OPEN\COMMAND\: ""%PROGRAM FILES%\THUNDER NETWORK\XMP\V5.1.26.4324\BIN\XMP.EXE" /PLAY "%1" /SOPENFROM WNDEXPLR /SSTARTFROM LOCALFILE "
HKLM\SOFTWARE\CLASSES\XMP.BIK\SHELL\OPEN\COMMAND\: ""%PROGRAM FILES%\THUNDER NETWORK\XMP\V5.1.26.4324\BIN\XMP.EXE" /PLAY "%1" /SOPENFROM WNDEXPLR /SSTARTFROM LOCALFILE "
HKLM\SOFTWARE\CLASSES\XMP.CDA\SHELL\OPEN\COMMAND\: ""%PROGRAM FILES%\THUNDER NETWORK\XMP\V5.1.26.4324\BIN\XMP.EXE" /PLAY "%1" /SOPENFROM WNDEXPLR /SSTARTFROM LOCALFILE "
HKLM\SOFTWARE\CLASSES\XMP.CSF\SHELL\OPEN\COMMAND\: ""%PROGRAM FILES%\THUNDER NETWORK\XMP\V5.1.26.4324\BIN\XMP.EXE" /PLAY "%1" /SOPENFROM WNDEXPLR /SSTARTFROM LOCALFILE "
HKLM\SOFTWARE\CLASSES\XMP.DAT\SHELL\OPEN\COMMAND\: ""%PROGRAM FILES%\THUNDER NETWORK\XMP\V5.1.26.4324\BIN\XMP.EXE" /PLAY "%1" /SOPENFROM WNDEXPLR /SSTARTFROM LOCALFILE "
HKLM\SOFTWARE\CLASSES\XMP.DIVX\SHELL\OPEN\COMMAND\: ""%PROGRAM FILES%\THUNDER NETWORK\XMP\V5.1.26.4324\BIN\XMP.EXE" /PLAY "%1" /SOPENFROM WNDEXPLR /SSTARTFROM LOCALFILE "
HKLM\SOFTWARE\CLASSES\XMP.DTS\SHELL\OPEN\COMMAND\: ""%PROGRAM FILES%\THUNDER NETWORK\XMP\V5.1.26.4324\BIN\XMP.EXE" /PLAY "%1" /SOPENFROM WNDEXPLR /SSTARTFROM LOCALFILE "
HKLM\SOFTWARE\CLASSES\XMP.DVD\SHELL\OPEN\COMMAND\: ""%PROGRAM FILES%\THUNDER NETWORK\XMP\V5.1.26.4324\BIN\XMP.EXE" /PLAY "%1" /SOPENFROM WNDEXPLR /SSTARTFROM LOCALFILE "
HKLM\SOFTWARE\CLASSES\XMP.EVO\SHELL\OPEN\COMMAND\: ""%PROGRAM FILES%\THUNDER NETWORK\XMP\V5.1.26.4324\BIN\XMP.EXE" /PLAY "%1" /SOPENFROM WNDEXPLR /SSTARTFROM LOCALFILE "
HKLM\SOFTWARE\CLASSES\XMP.F4V\SHELL\OPEN\COMMAND\: ""%PROGRAM FILES%\THUNDER NETWORK\XMP\V5.1.26.4324\BIN\XMP.EXE" /PLAY "%1" /SOPENFROM WNDEXPLR /SSTARTFROM LOCALFILE "
HKLM\SOFTWARE\CLASSES\XMP.FLAC\SHELL\OPEN\COMMAND\: ""%PROGRAM FILES%\THUNDER NETWORK\XMP\V5.1.26.4324\BIN\XMP.EXE" /PLAY "%1" /SOPENFROM WNDEXPLR /SSTARTFROM LOCALFILE "
HKLM\SOFTWARE\CLASSES\XMP.FLV\SHELL\OPEN\COMMAND\: ""%PROGRAM FILES%\THUNDER NETWORK\XMP\V5.1.26.4324\BIN\XMP.EXE" /PLAY "%1" /SOPENFROM WNDEXPLR /SSTARTFROM LOCALFILE "
HKLM\SOFTWARE\CLASSES\XMP.HLV\SHELL\OPEN\COMMAND\: ""%PROGRAM FILES%\THUNDER NETWORK\XMP\V5.1.26.4324\BIN\XMP.EXE" /PLAY "%1" /SOPENFROM WNDEXPLR /SSTARTFROM LOCALFILE "
HKLM\SOFTWARE\CLASSES\XMP.IDX\SHELL\OPEN\COMMAND\: ""%PROGRAM FILES%\THUNDER NETWORK\XMP\V5.1.26.4324\BIN\XMP.EXE" /PLAY "%1" /SOPENFROM WNDEXPLR /SSTARTFROM LOCALFILE "
HKLM\SOFTWARE\CLASSES\XMP.IFO\SHELL\OPEN\COMMAND\: ""%PROGRAM FILES%\THUNDER NETWORK\XMP\V5.1.26.4324\BIN\XMP.EXE" /PLAY "%1" /SOPENFROM WNDEXPLR /SSTARTFROM LOCALFILE "
HKLM\SOFTWARE\CLASSES\XMP.M1A\SHELL\OPEN\COMMAND\: ""%PROGRAM FILES%\THUNDER NETWORK\XMP\V5.1.26.4324\BIN\XMP.EXE" /PLAY "%1" /SOPENFROM WNDEXPLR /SSTARTFROM LOCALFILE "
HKLM\SOFTWARE\CLASSES\XMP.M1V\SHELL\OPEN\COMMAND\: ""%PROGRAM FILES%\THUNDER NETWORK\XMP\V5.1.26.4324\BIN\XMP.EXE" /PLAY "%1" /SOPENFROM WNDEXPLR /SSTARTFROM LOCALFILE "
HKLM\SOFTWARE\CLASSES\XMP.M2A\SHELL\OPEN\COMMAND\: ""%PROGRAM FILES%\THUNDER NETWORK\XMP\V5.1.26.4324\BIN\XMP.EXE" /PLAY "%1" /SOPENFROM WNDEXPLR /SSTARTFROM LOCALFILE "
HKLM\SOFTWARE\CLASSES\XMP.M2P\SHELL\OPEN\COMMAND\: ""%PROGRAM FILES%\THUNDER NETWORK\XMP\V5.1.26.4324\BIN\XMP.EXE" /PLAY "%1" /SOPENFROM WNDEXPLR /SSTARTFROM LOCALFILE "
HKLM\SOFTWARE\CLASSES\XMP.M2TS\SHELL\OPEN\COMMAND\: ""%PROGRAM FILES%\THUNDER NETWORK\XMP\V5.1.26.4324\BIN\XMP.EXE" /PLAY "%1" /SOPENFROM WNDEXPLR /SSTARTFROM LOCALFILE "
HKLM\SOFTWARE\CLASSES\XMP.M2V\SHELL\OPEN\COMMAND\: ""%PROGRAM FILES%\THUNDER NETWORK\XMP\V5.1.26.4324\BIN\XMP.EXE" /PLAY "%1" /SOPENFROM WNDEXPLR /SSTARTFROM LOCALFILE "
HKLM\SOFTWARE\CLASSES\XMP.M4A\SHELL\OPEN\COMMAND\: ""%PROGRAM FILES%\THUNDER NETWORK\XMP\V5.1.26.4324\BIN\XMP.EXE" /PLAY "%1" /SOPENFROM WNDEXPLR /SSTARTFROM LOCALFILE "
HKLM\SOFTWARE\CLASSES\XMP.M4B\SHELL\OPEN\COMMAND\: ""%PROGRAM FILES%\THUNDER NETWORK\XMP\V5.1.26.4324\BIN\XMP.EXE" /PLAY "%1" /SOPENFROM WNDEXPLR /SSTARTFROM LOCALFILE "
HKLM\SOFTWARE\CLASSES\XMP.M4P\SHELL\OPEN\COMMAND\: ""%PROGRAM FILES%\THUNDER NETWORK\XMP\V5.1.26.4324\BIN\XMP.EXE" /PLAY "%1" /SOPENFROM WNDEXPLR /SSTARTFROM LOCALFILE "
HKLM\SOFTWARE\CLASSES\XMP.M4V\SHELL\OPEN\COMMAND\: ""%PROGRAM FILES%\THUNDER NETWORK\XMP\V5.1.26.4324\BIN\XMP.EXE" /PLAY "%1" /SOPENFROM WNDEXPLR /SSTARTFROM LOCALFILE "
HKLM\SOFTWARE\CLASSES\XMP.MID\SHELL\OPEN\COMMAND\: ""%PROGRAM FILES%\THUNDER NETWORK\XMP\V5.1.26.4324\BIN\XMP.EXE" /PLAY "%1" /SOPENFROM WNDEXPLR /SSTARTFROM LOCALFILE "
HKLM\SOFTWARE\CLASSES\XMP.MIDI\SHELL\OPEN\COMMAND\: ""%PROGRAM FILES%\THUNDER NETWORK\XMP\V5.1.26.4324\BIN\XMP.EXE" /PLAY "%1" /SOPENFROM WNDEXPLR /SSTARTFROM LOCALFILE "
HKLM\SOFTWARE\CLASSES\XMP.MKA\SHELL\OPEN\COMMAND\: ""%PROGRAM FILES%\THUNDER NETWORK\XMP\V5.1.26.4324\BIN\XMP.EXE" /PLAY "%1" /SOPENFROM WNDEXPLR /SSTARTFROM LOCALFILE "
HKLM\SOFTWARE\CLASSES\XMP.MKV\SHELL\OPEN\COMMAND\: ""%PROGRAM FILES%\THUNDER NETWORK\XMP\V5.1.26.4324\BIN\XMP.EXE" /PLAY "%1" /SOPENFROM WNDEXPLR /SSTARTFROM LOCALFILE "
HKLM\SOFTWARE\CLASSES\XMP.MOD\SHELL\OPEN\COMMAND\: ""%PROGRAM FILES%\THUNDER NETWORK\XMP\V5.1.26.4324\BIN\XMP.EXE" /PLAY "%1" /SOPENFROM WNDEXPLR /SSTARTFROM LOCALFILE "
HKLM\SOFTWARE\CLASSES\XMP.MOV\SHELL\OPEN\COMMAND\: ""%PROGRAM FILES%\THUNDER NETWORK\XMP\V5.1.26.4324\BIN\XMP.EXE" /PLAY "%1" /SOPENFROM WNDEXPLR /SSTARTFROM LOCALFILE "
HKLM\SOFTWARE\CLASSES\XMP.MP2\SHELL\OPEN\COMMAND\: ""%PROGRAM FILES%\THUNDER NETWORK\XMP\V5.1.26.4324\BIN\XMP.EXE" /PLAY "%1" /SOPENFROM WNDEXPLR /SSTARTFROM LOCALFILE "
HKLM\SOFTWARE\CLASSES\XMP.MP2V\SHELL\OPEN\COMMAND\: ""%PROGRAM FILES%\THUNDER NETWORK\XMP\V5.1.26.4324\BIN\XMP.EXE" /PLAY "%1" /SOPENFROM WNDEXPLR /SSTARTFROM LOCALFILE "
HKLM\SOFTWARE\CLASSES\XMP.MP3\SHELL\OPEN\COMMAND\: ""%PROGRAM FILES%\THUNDER NETWORK\XMP\V5.1.26.4324\BIN\XMP.EXE" /PLAY "%1" /SOPENFROM WNDEXPLR /SSTARTFROM LOCALFILE "
HKLM\SOFTWARE\CLASSES\XMP.MP4\SHELL\OPEN\COMMAND\: ""%PROGRAM FILES%\THUNDER NETWORK\XMP\V5.1.26.4324\BIN\XMP.EXE" /PLAY "%1" /SOPENFROM WNDEXPLR /SSTARTFROM LOCALFILE "
HKLM\SOFTWARE\CLASSES\XMP.MPA\SHELL\OPEN\COMMAND\: ""%PROGRAM FILES%\THUNDER NETWORK\XMP\V5.1.26.4324\BIN\XMP.EXE" /PLAY "%1" /SOPENFROM WNDEXPLR /SSTARTFROM LOCALFILE "
HKLM\SOFTWARE\CLASSES\XMP.MPC\SHELL\OPEN\COMMAND\: ""%PROGRAM FILES%\THUNDER NETWORK\XMP\V5.1.26.4324\BIN\XMP.EXE" /PLAY "%1" /SOPENFROM WNDEXPLR /SSTARTFROM LOCALFILE "
HKLM\SOFTWARE\CLASSES\XMP.MPE\SHELL\OPEN\COMMAND\: ""%PROGRAM FILES%\THUNDER NETWORK\XMP\V5.1.26.4324\BIN\XMP.EXE" /PLAY "%1" /SOPENFROM WNDEXPLR /SSTARTFROM LOCALFILE "
HKLM\SOFTWARE\CLASSES\XMP.MPEG\SHELL\OPEN\COMMAND\: ""%PROGRAM FILES%\THUNDER NETWORK\XMP\V5.1.26.4324\BIN\XMP.EXE" /PLAY "%1" /SOPENFROM WNDEXPLR /SSTARTFROM LOCALFILE "
HKLM\SOFTWARE\CLASSES\XMP.MPEG1\SHELL\OPEN\COMMAND\: ""%PROGRAM FILES%\THUNDER NETWORK\XMP\V5.1.26.4324\BIN\XMP.EXE" /PLAY "%1" /SOPENFROM WNDEXPLR /SSTARTFROM LOCALFILE "
HKLM\SOFTWARE\CLASSES\XMP.MPEG2\SHELL\OPEN\COMMAND\: ""%PROGRAM FILES%\THUNDER NETWORK\XMP\V5.1.26.4324\BIN\XMP.EXE" /PLAY "%1" /SOPENFROM WNDEXPLR /SSTARTFROM LOCALFILE "
HKLM\SOFTWARE\CLASSES\XMP.MPEG4\SHELL\OPEN\COMMAND\: ""%PROGRAM FILES%\THUNDER NETWORK\XMP\V5.1.26.4324\BIN\XMP.EXE" /PLAY "%1" /SOPENFROM WNDEXPLR /SSTARTFROM LOCALFILE "
HKLM\SOFTWARE\CLASSES\XMP.MPG\SHELL\OPEN\COMMAND\: ""%PROGRAM FILES%\THUNDER NETWORK\XMP\V5.1.26.4324\BIN\XMP.EXE" /PLAY "%1" /SOPENFROM WNDEXPLR /SSTARTFROM LOCALFILE "
HKLM\SOFTWARE\CLASSES\XMP.MPV2\SHELL\OPEN\COMMAND\: ""%PROGRAM FILES%\THUNDER NETWORK\XMP\V5.1.26.4324\BIN\XMP.EXE" /PLAY "%1" /SOPENFROM WNDEXPLR /SSTARTFROM LOCALFILE "
HKLM\SOFTWARE\CLASSES\XMP.MTS\SHELL\OPEN\COMMAND\: ""%PROGRAM FILES%\THUNDER NETWORK\XMP\V5.1.26.4324\BIN\XMP.EXE" /PLAY "%1" /SOPENFROM WNDEXPLR /SSTARTFROM LOCALFILE "
HKLM\SOFTWARE\CLASSES\XMP.OGA\SHELL\OPEN\COMMAND\: ""%PROGRAM FILES%\THUNDER NETWORK\XMP\V5.1.26.4324\BIN\XMP.EXE" /PLAY "%1" /SOPENFROM WNDEXPLR /SSTARTFROM LOCALFILE "
HKLM\SOFTWARE\CLASSES\XMP.OGG\SHELL\OPEN\COMMAND\: ""%PROGRAM FILES%\THUNDER NETWORK\XMP\V5.1.26.4324\BIN\XMP.EXE" /PLAY "%1" /SOPENFROM WNDEXPLR /SSTARTFROM LOCALFILE "
HKLM\SOFTWARE\CLASSES\XMP.OGM\SHELL\OPEN\COMMAND\: ""%PROGRAM FILES%\THUNDER NETWORK\XMP\V5.1.26.4324\BIN\XMP.EXE" /PLAY "%1" /SOPENFROM WNDEXPLR /SSTARTFROM LOCALFILE "
HKLM\SOFTWARE\CLASSES\XMP.OGV\SHELL\OPEN\COMMAND\: ""%PROGRAM FILES%\THUNDER NETWORK\XMP\V5.1.26.4324\BIN\XMP.EXE" /PLAY "%1" /SOPENFROM WNDEXPLR /SSTARTFROM LOCALFILE "
HKLM\SOFTWARE\CLASSES\XMP.OGX\SHELL\OPEN\COMMAND\: ""%PROGRAM FILES%\THUNDER NETWORK\XMP\V5.1.26.4324\BIN\XMP.EXE" /PLAY "%1" /SOPENFROM WNDEXPLR /SSTARTFROM LOCALFILE "
HKLM\SOFTWARE\CLASSES\XMP.PMP\SHELL\OPEN\COMMAND\: ""%PROGRAM FILES%\THUNDER NETWORK\XMP\V5.1.26.4324\BIN\XMP.EXE" /PLAY "%1" /SOPENFROM WNDEXPLR /SSTARTFROM LOCALFILE "
HKLM\SOFTWARE\CLASSES\XMP.PSB\SHELL\OPEN\COMMAND\: ""%PROGRAM FILES%\THUNDER NETWORK\XMP\V5.1.26.4324\BIN\XMP.EXE" /PLAY "%1" /SOPENFROM WNDEXPLR /SSTARTFROM LOCALFILE "
HKLM\SOFTWARE\CLASSES\XMP.PSS\SHELL\OPEN\COMMAND\: ""%PROGRAM FILES%\THUNDER NETWORK\XMP\V5.1.26.4324\BIN\XMP.EXE" /PLAY "%1" /SOPENFROM WNDEXPLR /SSTARTFROM LOCALFILE "
HKLM\SOFTWARE\CLASSES\XMP.PVA\SHELL\OPEN\COMMAND\: ""%PROGRAM FILES%\THUNDER NETWORK\XMP\V5.1.26.4324\BIN\XMP.EXE" /PLAY "%1" /SOPENFROM WNDEXPLR /SSTARTFROM LOCALFILE "
HKLM\SOFTWARE\CLASSES\XMP.QT\SHELL\OPEN\COMMAND\: ""%PROGRAM FILES%\THUNDER NETWORK\XMP\V5.1.26.4324\BIN\XMP.EXE" /PLAY "%1" /SOPENFROM WNDEXPLR /SSTARTFROM LOCALFILE "
HKLM\SOFTWARE\CLASSES\XMP.RA\SHELL\OPEN\COMMAND\: ""%PROGRAM FILES%\THUNDER NETWORK\XMP\V5.1.26.4324\BIN\XMP.EXE" /PLAY "%1" /SOPENFROM WNDEXPLR /SSTARTFROM LOCALFILE "
HKLM\SOFTWARE\CLASSES\XMP.RAM\SHELL\OPEN\COMMAND\: ""%PROGRAM FILES%\THUNDER NETWORK\XMP\V5.1.26.4324\BIN\XMP.EXE" /PLAY "%1" /SOPENFROM WNDEXPLR /SSTARTFROM LOCALFILE "
HKLM\SOFTWARE\CLASSES\XMP.RM\SHELL\OPEN\COMMAND\: ""%PROGRAM FILES%\THUNDER NETWORK\XMP\V5.1.26.4324\BIN\XMP.EXE" /PLAY "%1" /SOPENFROM WNDEXPLR /SSTARTFROM LOCALFILE "
HKLM\SOFTWARE\CLASSES\XMP.RMVB\SHELL\OPEN\COMMAND\: ""%PROGRAM FILES%\THUNDER NETWORK\XMP\V5.1.26.4324\BIN\XMP.EXE" /PLAY "%1" /SOPENFROM WNDEXPLR /SSTARTFROM LOCALFILE "
HKLM\SOFTWARE\CLASSES\XMP.RP\SHELL\OPEN\COMMAND\: ""%PROGRAM FILES%\THUNDER NETWORK\XMP\V5.1.26.4324\BIN\XMP.EXE" /PLAY "%1" /SOPENFROM WNDEXPLR /SSTARTFROM LOCALFILE "
HKLM\SOFTWARE\CLASSES\XMP.RPM\SHELL\OPEN\COMMAND\: ""%PROGRAM FILES%\THUNDER NETWORK\XMP\V5.1.26.4324\BIN\XMP.EXE" /PLAY "%1" /SOPENFROM WNDEXPLR /SSTARTFROM LOCALFILE "
HKLM\SOFTWARE\CLASSES\XMP.RT\SHELL\OPEN\COMMAND\: ""%PROGRAM FILES%\THUNDER NETWORK\XMP\V5.1.26.4324\BIN\XMP.EXE" /PLAY "%1" /SOPENFROM WNDEXPLR /SSTARTFROM LOCALFILE "
HKLM\SOFTWARE\CLASSES\XMP.SCM\SHELL\OPEN\COMMAND\: ""%PROGRAM FILES%\THUNDER NETWORK\XMP\V5.1.26.4324\BIN\XMP.EXE" /PLAY "%1" /SOPENFROM WNDEXPLR /SSTARTFROM LOCALFILE "
HKLM\SOFTWARE\CLASSES\XMP.SMI\SHELL\OPEN\COMMAND\: ""%PROGRAM FILES%\THUNDER NETWORK\XMP\V5.1.26.4324\BIN\XMP.EXE" /PLAY "%1" /SOPENFROM WNDEXPLR /SSTARTFROM LOCALFILE "
HKLM\SOFTWARE\CLASSES\XMP.SMIL\SHELL\OPEN\COMMAND\: ""%PROGRAM FILES%\THUNDER NETWORK\XMP\V5.1.26.4324\BIN\XMP.EXE" /PLAY "%1" /SOPENFROM WNDEXPLR /SSTARTFROM LOCALFILE "
HKLM\SOFTWARE\CLASSES\XMP.SRT\SHELL\OPEN\COMMAND\: ""%PROGRAM FILES%\THUNDER NETWORK\XMP\V5.1.26.4324\BIN\XMP.EXE" /PLAY "%1" /SOPENFROM WNDEXPLR /SSTARTFROM LOCALFILE "
HKLM\SOFTWARE\CLASSES\XMP.SSA\SHELL\OPEN\COMMAND\: ""%PROGRAM FILES%\THUNDER NETWORK\XMP\V5.1.26.4324\BIN\XMP.EXE" /PLAY "%1" /SOPENFROM WNDEXPLR /SSTARTFROM LOCALFILE "
HKLM\SOFTWARE\CLASSES\XMP.SUB\SHELL\OPEN\COMMAND\: ""%PROGRAM FILES%\THUNDER NETWORK\XMP\V5.1.26.4324\BIN\XMP.EXE" /PLAY "%1" /SOPENFROM WNDEXPLR /SSTARTFROM LOCALFILE "
HKLM\SOFTWARE\CLASSES\XMP.SWF\SHELL\OPEN\COMMAND\: ""%PROGRAM FILES%\THUNDER NETWORK\XMP\V5.1.26.4324\BIN\XMP.EXE" /PLAY "%1" /SOPENFROM WNDEXPLR /SSTARTFROM LOCALFILE "
HKLM\SOFTWARE\CLASSES\XMP.TORRENT\SHELL\OPEN\COMMAND\: ""%PROGRAM FILES%\THUNDER NETWORK\XMP\V5.1.26.4324\BIN\XMP.EXE" /PLAY "%1" /SOPENFROM WNDEXPLR /SSTARTFROM LOCALFILE "
HKLM\SOFTWARE\CLASSES\XMP.TP\SHELL\OPEN\COMMAND\: ""%PROGRAM FILES%\THUNDER NETWORK\XMP\V5.1.26.4324\BIN\XMP.EXE" /PLAY "%1" /SOPENFROM WNDEXPLR /SSTARTFROM LOCALFILE "
HKLM\SOFTWARE\CLASSES\XMP.TPR\SHELL\OPEN\COMMAND\: ""%PROGRAM FILES%\THUNDER NETWORK\XMP\V5.1.26.4324\BIN\XMP.EXE" /PLAY "%1" /SOPENFROM WNDEXPLR /SSTARTFROM LOCALFILE "
HKLM\SOFTWARE\CLASSES\XMP.TS\SHELL\OPEN\COMMAND\: ""%PROGRAM FILES%\THUNDER NETWORK\XMP\V5.1.26.4324\BIN\XMP.EXE" /PLAY "%1" /SOPENFROM WNDEXPLR /SSTARTFROM LOCALFILE "
HKLM\SOFTWARE\CLASSES\XMP.TTA\SHELL\OPEN\COMMAND\: ""%PROGRAM FILES%\THUNDER NETWORK\XMP\V5.1.26.4324\BIN\XMP.EXE" /PLAY "%1" /SOPENFROM WNDEXPLR /SSTARTFROM LOCALFILE "
HKLM\SOFTWARE\CLASSES\XMP.USF\SHELL\OPEN\COMMAND\: ""%PROGRAM FILES%\THUNDER NETWORK\XMP\V5.1.26.4324\BIN\XMP.EXE" /PLAY "%1" /SOPENFROM WNDEXPLR /SSTARTFROM LOCALFILE "
HKLM\SOFTWARE\CLASSES\XMP.VOB\SHELL\OPEN\COMMAND\: ""%PROGRAM FILES%\THUNDER NETWORK\XMP\V5.1.26.4324\BIN\XMP.EXE" /PLAY "%1" /SOPENFROM WNDEXPLR /SSTARTFROM LOCALFILE "
HKLM\SOFTWARE\CLASSES\XMP.VP6\SHELL\OPEN\COMMAND\: ""%PROGRAM FILES%\THUNDER NETWORK\XMP\V5.1.26.4324\BIN\XMP.EXE" /PLAY "%1" /SOPENFROM WNDEXPLR /SSTARTFROM LOCALFILE "
HKLM\SOFTWARE\CLASSES\XMP.WM\SHELL\OPEN\COMMAND\: ""%PROGRAM FILES%\THUNDER NETWORK\XMP\V5.1.26.4324\BIN\XMP.EXE" /PLAY "%1" /SOPENFROM WNDEXPLR /SSTARTFROM LOCALFILE "
HKLM\SOFTWARE\CLASSES\XMP.WMA\SHELL\OPEN\COMMAND\: ""%PROGRAM FILES%\THUNDER NETWORK\XMP\V5.1.26.4324\BIN\XMP.EXE" /PLAY "%1" /SOPENFROM WNDEXPLR /SSTARTFROM LOCALFILE "
HKLM\SOFTWARE\CLASSES\XMP.WMP\SHELL\OPEN\COMMAND\: ""%PROGRAM FILES%\THUNDER NETWORK\XMP\V5.1.26.4324\BIN\XMP.EXE" /PLAY "%1" /SOPENFROM WNDEXPLR /SSTARTFROM LOCALFILE "
HKLM\SOFTWARE\CLASSES\XMP.WMV\SHELL\OPEN\COMMAND\: ""%PROGRAM FILES%\THUNDER NETWORK\XMP\V5.1.26.4324\BIN\XMP.EXE" /PLAY "%1" /SOPENFROM WNDEXPLR /SSTARTFROM LOCALFILE "
HKLM\SOFTWARE\CLASSES\XMP.WV\SHELL\OPEN\COMMAND\: ""%PROGRAM FILES%\THUNDER NETWORK\XMP\V5.1.26.4324\BIN\XMP.EXE" /PLAY "%1" /SOPENFROM WNDEXPLR /SSTARTFROM LOCALFILE "
HKLM\SOFTWARE\CLASSES\XMP.XLMV\SHELL\OPEN\COMMAND\: ""%PROGRAM FILES%\THUNDER NETWORK\XMP\V5.1.26.4324\BIN\XMP.EXE" /PLAY "%1" /SOPENFROM WNDEXPLR /SSTARTFROM LOCALFILE "
HKLM\SOFTWARE\CLASSES\XMP.XV\SHELL\OPEN\COMMAND\: ""%PROGRAM FILES%\THUNDER NETWORK\XMP\V5.1.26.4324\BIN\XMP.EXE" /PLAY "%1" /SOPENFROM WNDEXPLR /SSTARTFROM LOCALFILE "
HKLM\SOFTWARE\CLASSES\XMP.XVX\SHELL\OPEN\COMMAND\: ""%PROGRAM FILES%\THUNDER NETWORK\XMP\V5.1.26.4324\BIN\XMP.EXE" /PLAY "%1" /SOPENFROM WNDEXPLR /SSTARTFROM LOCALFILE "
HKLM\SOFTWARE\MICROSOFT\INTERNET EXPLORER\EXTENSIONS\{24C1D00E-0B92-4379-880B-444FA2D740DD}\ICON: "%SYSTEMDRIVE%\PROGRA~1\THUNDE~1\XMP\V5126~1.432\BIN\XMP.EXE,128"
HKLM\SOFTWARE\MICROSOFT\INTERNET EXPLORER\EXTENSIONS\{24C1D00E-0B92-4379-880B-444FA2D740DD}\HOTICON: "%SYSTEMDRIVE%\PROGRA~1\THUNDE~1\XMP\V5126~1.432\BIN\XMP.EXE,128"
HKLM\SOFTWARE\MICROSOFT\WINDOWS\CURRENTVERSION\APP PATHS\XMP.EXE\: "%PROGRAM FILES%\THUNDER NETWORK\XMP\V5.1.26.4324\BIN\XMP.EXE"
HKLM\SOFTWARE\MICROSOFT\WINDOWS\CURRENTVERSION\APP PATHS\XMP.EXE\PATH: "%PROGRAM FILES%\THUNDER NETWORK\XMP\V5.1.26.4324\BIN\"
HKLM\Software\Microsoft\Windows\CurrentVersion\App Paths\XMP.exe\UseUrl: 0x00000001
HKLM\SOFTWARE\THUNDER NETWORK\XMP\PATH: "%SYSTEMDRIVE%\PROGRA~1\THUNDE~1\XMP\V5126~1.432\BIN\XMP.EXE"
HKLM\SYSTEM\CURRENTCONTROLSET\SERVICES\SHAREDACCESS\PARAMETERS\FIREWALLPOLICY\STANDARDPROFILE\AUTHORIZEDAPPLICATIONS\LIST\%PROGRAM FILES%\THUNDER NETWORK\XMP\V5.1.26.4324\BIN\XMP.EXE: "%PROGRAM FILES%\THUNDER NETWORK\XMP\V5.1.26.4324\BIN\XMP.EXE:*:ENABLED:????"
HKCU\Software\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{88A2C0AD-F9C3-43A1-8C58-065821FAFA62}\AppName: "XMP.exe"
HKCU\Software\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{C495F919-7162-4340-8DB3-FA978C1C622F}\AppName: "xmp.exe"
HKCU\Software\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{C495F91B-7162-4340-8DB3-FA978C1C622F}\AppName: "XMP.exe"
HKCU\Software\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{C495F91E-7162-4340-8DB3-FA978C1C622F}\AppName: "xmp.exe"
HKCU\Software\Microsoft\Internet Explorer\Main\FeatureControl\FEATURE_BROWSER_EMULATION\XMP.exe: 0x00002AF9
HKCU\SOFTWARE\MICROSOFT\WINDOWS NT\CURRENTVERSION\APPCOMPATFLAGS\COMPATIBILITY ASSISTANT\PERSISTED\%PROGRAM FILES%\THUNDER NETWORK\XMP\V5.1.26.4324\BIN\XMP.EXE: 0X00000001
HKCU\Software\Microsoft\Windows NT\CurrentVersion\AppCompatFlags\Compatibility Assistant\Persisted\SIGN.IE=0AEF28 XMP.exe: 0x00000001
HKCU\SOFTWARE\MICROSOFT\WINDOWS NT\CURRENTVERSION\APPCOMPATFLAGS\COMPATIBILITY ASSISTANT\PERSISTED\%COMMONPROGRAMFILES%\THUNDER NETWORK\KANKAN\XMP.EXE: 0X00000001
HKCU\Software\Microsoft\Windows NT\CurrentVersion\AppCompatFlags\Compatibility Assistant\Persisted\SIGN.IE=00 Xmp.exe: 0x00000001
Related Files:
%COMMON APPDATA%\THUNDER NETWORK\XMP5\V5.1.26.4324\PROGRAM\XMEDIALIBRARY.DLL
%COMMON APPDATA%\THUNDER NETWORK\XMP5\V5.1.26.4324\PROGRAM\XMEDIALIBRARY64.DLL
%COMMON APPDATA%\THUNDER NETWORK\XMP5\V5.1.26.4324\PROGRAM\XMP.EXE
%COMMON APPDATA%\THUNDER NETWORK\XMP5\V5.1.26.4324\PROGRAM\XMP.EXE.LNK
%COMMON APPDATA%\THUNDER NETWORK\XMP5\V5.1.26.4324\PROGRAM\XMPADDINS.DLL
The file XMP.EXE is malware related.
You must delete the file XMP.EXE immediately!
Delete the file XMP.EXE without delay!
Kill the process XMP.EXE and remove XMP.EXE from the Windows startup.
XMP.EXE is related to: Win32.Application.ThunderN.A, XMP.EXE.
Virustotal = 1/55
MD5 = 2B7B1A41456E83C58D112F4EEBCCB078
File Size: 262952
File information:
OriginalFilename: xmp.exe
FileDescription: ????
InternalName: xmp
CompanyName: ?????????????
LegalCopyright: Copyright (c) 2003-2014 ?????????????
Dmitry Sokolov:
I created UnHackMe in 2006 to fix the problem that antivioruses did not fix: detecting rootkits.
Since that time I work every day to fix the issues that antiviruses cannot.
If your antivirus have not helped you solve the problem, you should try UnHackMe.
We are a small company and you can ask me directly, if you have any questions.