別名:

Virus:Win32/Sality.AT (Microsoft); W32/Autorun.worm.bbd (McAfee); W32.SillyFDC (Symantec); Virus.Win32.Sality.ag (Kaspersky); Virus.Win32.Sality.at (v) (Sunbelt); Worm.Generic.333481 (FSecure)

 プラットフォーム:

Windows 2000, Windows XP, Windows Server 2003

 危険度:
 ダメージ度:
 感染力:
 感染確認数:

  • マルウェアタイプ:
    ワーム

  • 破壊活動の有無:
    なし

  • 暗号化:
     

  • 感染報告の有無 :
    はい

  概要

ワームは、他のマルウェアに作成されるか、悪意あるWebサイトからユーザが誤ってダウンロードすることによりコンピュータに侵入します。

ワームは、タスクマネージャやレジストリエディタ、フォルダオプションを無効にします。

  詳細

ファイルサイズ 1,028,096 bytes
タイプ EXE
メモリ常駐 なし
発見日 2012年4月16日

侵入方法

ワームは、他のマルウェアに作成されるか、悪意あるWebサイトからユーザが誤ってダウンロードすることによりコンピュータに侵入します。

インストール

ワームは、以下のフォルダを作成します。

  • %System%\dllcache\Recycler.{645FF040-5081-101B-9F08-00AA002F954E}

(註：%System%フォルダはWindowsの種類とインストール時の設定などにより異なります。標準設定では "C:\Windows\System32" です。)

他のシステム変更

ワームは、以下のファイルを削除します。

  • %User Temp%\fkjcc.exe

(註：%User Temp%フォルダはWindowsの種類とインストール時の設定などにより異なります。標準設定では、Windows 2000、XP および Server 2003 の場合、"C:\Documents and Settings\＜ユーザー名＞\Local Settings\Temp"、Windows Vista および 7 の場合、"C:\Users\＜ユーザ名＞\AppData\Local\Temp" です。)

ワームは、以下のレジストリキーを追加します。

HKEY_CURRENT_USER\Software\Microsoft\
Windows\CurrentVersion\policies\
system

HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\
Security Center\Svc

HKEY_CURRENT_USER\Software\Aasppapmmxkvs\
-993627007

HKEY_CURRENT_USER\Software\VB and VBA Program Settings\
trial version\trial

HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\
Windows NT\CurrentVersion\Image File Execution Options\
ctfmon.exe

HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\
Windows NT\CurrentVersion\Image File Execution Options\
taskmgr.exe

HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\
Windows NT\CurrentVersion\Image File Execution Options\
boot.exe

HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\
Windows NT\CurrentVersion\Image File Execution Options\
autorun.exe

HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\
Windows NT\CurrentVersion\Image File Execution Options\
autoruns.exe

HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\
Windows NT\CurrentVersion\Image File Execution Options\
auto.exe

HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\
Windows NT\CurrentVersion\Image File Execution Options\
msconfig.exe

HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\
Windows NT\CurrentVersion\Image File Execution Options\
procexp.exe

HKEY_CURRENT_USER\SOFTWARE\Microsoft\
Windows\CurrentVersion\RunOnce

HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\
Windows\CurrentVersion\policies\
Explorer\Run

HKEY_CURRENT_USER\Software\Policies\
Microsoft\Windows\System\
Scripts\Logoff\0

HKEY_CURRENT_USER\Software\Policies\
Microsoft\Windows\System\
Scripts\Logoff\0\
0

HKEY_LOCAL_MACHINE\Software\Policies\
Microsoft\Windows\System\
Scripts\Shutdown\0

HKEY_LOCAL_MACHINE\Software\Policies\
Microsoft\Windows\System\
Scripts\Shutdown\0\
0

HKEY_LOCAL_MACHINE\Software\Policies\
Microsoft\Windows\System\
Scripts\Startup\0

HKEY_LOCAL_MACHINE\Software\Policies\
Microsoft\Windows\System\
Scripts\Startup\0\
0

ワームは、以下のレジストリ値を追加します。

HKEY_CURRENT_USER\Software\Aasppapmmxkvs
A1_172 = "63befdc"

HKEY_CURRENT_USER\Software\Aasppapmmxkvs
A2_172 = "d57f4da"

HKEY_CURRENT_USER\Software\Aasppapmmxkvs
A3_172 = "d47c3185"

HKEY_CURRENT_USER\Software\Aasppapmmxkvs
A4_172 = "d57f5bac"

HKEY_CURRENT_USER\Software\Aasppapmmxkvs
A1_173 = "dc5b493e"

HKEY_CURRENT_USER\Software\Aasppapmmxkvs
A2_173 = "3eeca412"

HKEY_CURRENT_USER\Software\Aasppapmmxkvs
A3_173 = "3fefd5c4"

HKEY_CURRENT_USER\Software\Aasppapmmxkvs
A4_173 = "3eecbfed"

HKEY_CURRENT_USER\Software\Aasppapmmxkvs
A1_174 = "d78cd592"

HKEY_CURRENT_USER\Software\Aasppapmmxkvs
A2_174 = "a85a3f51"

HKEY_CURRENT_USER\Software\Aasppapmmxkvs
A3_174 = "a9594e7"

HKEY_CURRENT_USER\Software\Aasppapmmxkvs
A4_174 = "a85a242e"

HKEY_CURRENT_USER\Software\Aasppapmmxkvs
A1_175 = "57aae821"

HKEY_CURRENT_USER\Software\Aasppapmmxkvs
A2_175 = "11c7a8c6"

HKEY_CURRENT_USER\Software\Aasppapmmxkvs
A3_175 = "1c4e246"

HKEY_CURRENT_USER\Software\Aasppapmmxkvs
A4_175 = "11c7886f"

HKEY_CURRENT_USER\Software\Aasppapmmxkvs
A1_176 = "d19be7"

HKEY_CURRENT_USER\Software\Aasppapmmxkvs
A2_176 = "7b34f57"

HKEY_CURRENT_USER\Software\Aasppapmmxkvs
A3_176 = "7a378699"

HKEY_CURRENT_USER\Software\Aasppapmmxkvs
A4_176 = "7b34ecb"

HKEY_CURRENT_USER\Software\Aasppapmmxkvs
A1_177 = "9d59693"

HKEY_CURRENT_USER\Software\Aasppapmmxkvs
A2_177 = "e4a24efc"

HKEY_CURRENT_USER\Software\Aasppapmmxkvs
A3_177 = "e5a13ad8"

HKEY_CURRENT_USER\Software\Aasppapmmxkvs
A4_177 = "e4a25f1"

HKEY_CURRENT_USER\Software\Aasppapmmxkvs
A1_178 = "2e2f467"

HKEY_CURRENT_USER\Software\Aasppapmmxkvs
A2_178 = "4efaae7"

HKEY_CURRENT_USER\Software\Aasppapmmxkvs
A3_178 = "4fcdf1b"

HKEY_CURRENT_USER\Software\Aasppapmmxkvs
A4_178 = "4efb532"

HKEY_CURRENT_USER\Software\Aasppapmmxkvs
A1_179 = "9c74483e"

HKEY_CURRENT_USER\Software\Aasppapmmxkvs
A2_179 = "b77d8e4"

HKEY_CURRENT_USER\Software\Aasppapmmxkvs
A3_179 = "b67e735a"

HKEY_CURRENT_USER\Software\Aasppapmmxkvs
A4_179 = "b77d1973"

HKEY_CURRENT_USER\Software\Aasppapmmxkvs
A1_180 = "a96225fe"

HKEY_CURRENT_USER\Software\Aasppapmmxkvs
A2_180 = "2ea66e9"

HKEY_CURRENT_USER\Software\Aasppapmmxkvs
A3_180 = "21e9179d"

HKEY_CURRENT_USER\Software\Aasppapmmxkvs
A4_180 = "2ea7db4"

HKEY_CURRENT_USER\Software\Aasppapmmxkvs
A1_181 = "ea549248"

HKEY_CURRENT_USER\Software\Aasppapmmxkvs
A2_181 = "8a57fcb1"

HKEY_CURRENT_USER\Software\Aasppapmmxkvs
A3_181 = "8b548bdc"

HKEY_CURRENT_USER\Software\Aasppapmmxkvs
A4_181 = "8a57e1f5"

HKEY_CURRENT_USER\Software\Aasppapmmxkvs
A1_182 = "42ad9254"

HKEY_CURRENT_USER\Software\Aasppapmmxkvs
A2_182 = "f3c55d32"

HKEY_CURRENT_USER\Software\Aasppapmmxkvs
A3_182 = "f2c62c1f"

HKEY_CURRENT_USER\Software\Aasppapmmxkvs
A4_182 = "f3c54636"

HKEY_CURRENT_USER\Software\Aasppapmmxkvs
A1_183 = "5883832e"

HKEY_CURRENT_USER\Software\Aasppapmmxkvs
A2_183 = "5d328a16"

HKEY_CURRENT_USER\Software\Aasppapmmxkvs
A3_183 = "5c31c5e"

HKEY_CURRENT_USER\Software\Aasppapmmxkvs
A4_183 = "5d32aa77"

HKEY_CURRENT_USER\Software\Aasppapmmxkvs
A1_184 = "cad62be1"

HKEY_CURRENT_USER\Software\Aasppapmmxkvs
A2_184 = "c6a18fb"

HKEY_CURRENT_USER\Software\Aasppapmmxkvs
A3_184 = "c7a36491"

HKEY_CURRENT_USER\Software\Aasppapmmxkvs
A4_184 = "c6aeb8"

HKEY_CURRENT_USER\Software\Aasppapmmxkvs
A1_185 = "53934b4"

HKEY_CURRENT_USER\Software\Aasppapmmxkvs
A2_185 = "3d68e5"

HKEY_CURRENT_USER\Software\Aasppapmmxkvs
A3_185 = "31e18d"

HKEY_CURRENT_USER\Software\Aasppapmmxkvs
A4_185 = "3d72f9"

HKEY_CURRENT_USER\Software\Aasppapmmxkvs
A1_186 = "dce11c22"

HKEY_CURRENT_USER\Software\Aasppapmmxkvs
A2_186 = "997af2f"

HKEY_CURRENT_USER\Software\Aasppapmmxkvs
A3_186 = "9879bd13"

HKEY_CURRENT_USER\Software\Aasppapmmxkvs
A4_186 = "997ad73a"

HKEY_CURRENT_USER\Software\Aasppapmmxkvs
A1_187 = "b164e133"

HKEY_CURRENT_USER\Software\Aasppapmmxkvs
A2_187 = "2e82499"

HKEY_CURRENT_USER\Software\Aasppapmmxkvs
A3_187 = "3eb5152"

HKEY_CURRENT_USER\Software\Aasppapmmxkvs
A4_187 = "2e83b7b"

HKEY_CURRENT_USER\Software\Aasppapmmxkvs
A1_188 = "59e59dea"

HKEY_CURRENT_USER\Software\Aasppapmmxkvs
A2_188 = "6c558663"

HKEY_CURRENT_USER\Software\Aasppapmmxkvs
A3_188 = "6d56f595"

HKEY_CURRENT_USER\Software\Aasppapmmxkvs
A4_188 = "6c559fbc"

HKEY_CURRENT_USER\Software\Aasppapmmxkvs
A1_189 = "a7beddae"

HKEY_CURRENT_USER\Software\Aasppapmmxkvs
A2_189 = "d5c322e"

HKEY_CURRENT_USER\Software\Aasppapmmxkvs
A3_189 = "d4c69d4"

HKEY_CURRENT_USER\Software\Aasppapmmxkvs
A4_189 = "d5c33fd"

HKEY_CURRENT_USER\Software\Aasppapmmxkvs
A1_190 = "98a86f"

HKEY_CURRENT_USER\Software\Aasppapmmxkvs
A2_190 = "3f37527"

HKEY_CURRENT_USER\Software\Aasppapmmxkvs
A3_190 = "3e33217"

HKEY_CURRENT_USER\Software\Aasppapmmxkvs
A4_190 = "3f3683e"

HKEY_CURRENT_USER\Software\Aasppapmmxkvs
A1_191 = "75a8f9c1"

HKEY_CURRENT_USER\Software\Aasppapmmxkvs
A2_191 = "a89dd4aa"

HKEY_CURRENT_USER\Software\Aasppapmmxkvs
A3_191 = "a99ea656"

HKEY_CURRENT_USER\Software\Aasppapmmxkvs
A4_191 = "a89dcc7f"

HKEY_CURRENT_USER\Software\Aasppapmmxkvs
A1_192 = "dbfc872"

HKEY_CURRENT_USER\Software\Aasppapmmxkvs
A2_192 = "12b253"

HKEY_CURRENT_USER\Software\Aasppapmmxkvs
A3_192 = "1385ae9"

HKEY_CURRENT_USER\Software\Aasppapmmxkvs
A4_192 = "12b3c"

HKEY_CURRENT_USER\Software\Aasppapmmxkvs
A1_193 = "92bf1259"

HKEY_CURRENT_USER\Software\Aasppapmmxkvs
A2_193 = "7b78b626"

HKEY_CURRENT_USER\Software\Aasppapmmxkvs
A3_193 = "7a7bff28"

HKEY_CURRENT_USER\Software\Aasppapmmxkvs
A4_193 = "7b78951"

HKEY_CURRENT_USER\Software\Aasppapmmxkvs
A1_194 = "12d8714"

HKEY_CURRENT_USER\Software\Aasppapmmxkvs
A2_194 = "e4e5ecb2"

HKEY_CURRENT_USER\Software\Aasppapmmxkvs
A3_194 = "e5e6936b"

HKEY_CURRENT_USER\Software\Aasppapmmxkvs
A4_194 = "e4e5f942"

HKEY_CURRENT_USER\Software\Aasppapmmxkvs
A1_195 = "e85121ee"

HKEY_CURRENT_USER\Software\Aasppapmmxkvs
A2_195 = "4e534fe"

HKEY_CURRENT_USER\Software\Aasppapmmxkvs
A3_195 = "4f537aa"

HKEY_CURRENT_USER\Software\Aasppapmmxkvs
A4_195 = "4e535d83"

HKEY_CURRENT_USER\Software\Aasppapmmxkvs
A1_196 = "e5a9db4"

HKEY_CURRENT_USER\Software\Aasppapmmxkvs
A2_196 = "b7cdc6e"

HKEY_CURRENT_USER\Software\Aasppapmmxkvs
A3_196 = "b6c3abed"

HKEY_CURRENT_USER\Software\Aasppapmmxkvs
A4_196 = "b7cc1c4"

HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\
Windows NT\CurrentVersion\Image File Execution Options\
ctfmon.exe
Debugger = "%Windows%\Fonts\Fonts.exe"

HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\
Windows NT\CurrentVersion\Image File Execution Options\
taskmgr.exe
Debugger = "%Windows%\Fonts\tskmgr.exe"

HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\
Windows NT\CurrentVersion\Image File Execution Options\
boot.exe
Debugger = "%Windows%\Fonts\fonts.exe"

HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\
Windows NT\CurrentVersion\Image File Execution Options\
autorun.exe
Debugger = "%System%\drivers\drivers.cab.exe"

HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\
Windows NT\CurrentVersion\Image File Execution Options\
autoruns.exe
Debugger = "%System%\drivers\drivers.cab.exe"

HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\
Windows NT\CurrentVersion\Image File Execution Options\
auto.exe
Debugger = "%System%\drivers\drivers.cab.exe"

HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\
Windows NT\CurrentVersion\Image File Execution Options\
msconfig.exe
Debugger = "%Windows%\Media\rndll32.pif"

HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\
Windows NT\CurrentVersion\Image File Execution Options\
procexp.exe
Debugger = "%Windows%\pchealth\helpctr\binaries\HelpHost.com"

HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\
Windows\CurrentVersion\policies\
Explorer\Run
sys = "%Windows%\Fonts\Fonts.exe"

HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\
Windows\CurrentVersion\policies\
system
DisableStatusMessages = "1"

HKEY_CURRENT_USER\Software\Policies\
Microsoft\Windows\System\
Scripts\Logoff\0
DisplayName = "Local Group Policy"

HKEY_CURRENT_USER\Software\Policies\
Microsoft\Windows\System\
Scripts\Logoff\0
GPO-ID = "LocalGPO"

HKEY_CURRENT_USER\Software\Policies\
Microsoft\Windows\System\
Scripts\Logoff\0
GPOName = "Local Group Policy"

HKEY_CURRENT_USER\Software\Policies\
Microsoft\Windows\System\
Scripts\Logoff\0
SOM-ID = "Local"

HKEY_CURRENT_USER\Software\Policies\
Microsoft\Windows\System\
Scripts\Logoff\0\
0
Script = "%Windows%\Cursors\Boom.vbs"

HKEY_LOCAL_MACHINE\SOFTWARE\Policies\
Microsoft\Windows\System\
Scripts\Shutdown\0
DisplayName = "Local Group Policy"

HKEY_LOCAL_MACHINE\SOFTWARE\Policies\
Microsoft\Windows\System\
Scripts\Shutdown\0
GPO-ID = "LocalGPO"

HKEY_LOCAL_MACHINE\SOFTWARE\Policies\
Microsoft\Windows\System\
Scripts\Shutdown\0
GPOName = "Local Group Policy"

HKEY_LOCAL_MACHINE\SOFTWARE\Policies\
Microsoft\Windows\System\
Scripts\Shutdown\0
SOM-ID = "Local"

HKEY_LOCAL_MACHINE\SOFTWARE\Policies\
Microsoft\Windows\System\
Scripts\Shutdown\0\
0
Script = "%Windows%\Cursors\Boom.vbs"

HKEY_LOCAL_MACHINE\SOFTWARE\Policies\
Microsoft\Windows\System\
Scripts\Startup\0
DisplayName = "Local Group Policy"

HKEY_LOCAL_MACHINE\SOFTWARE\Policies\
Microsoft\Windows\System\
Scripts\Startup\0
GPO-ID = "LocalGPO"

HKEY_LOCAL_MACHINE\SOFTWARE\Policies\
Microsoft\Windows\System\
Scripts\Startup\0
GPOName = "Local Group Policy"

HKEY_LOCAL_MACHINE\SOFTWARE\Policies\
Microsoft\Windows\System\
Scripts\Startup\0
SOM-ID = "Local"

HKEY_LOCAL_MACHINE\SOFTWARE\Policies\
Microsoft\Windows\System\
Scripts\Startup\0\
0
Script = "%Windows%\Cursors\Boom.vbs"

HKEY_LOCAL_MACHINE\SOFTWARE\Classes\
exefile
NeverShowExt = "1"

HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\
Security Center
UacDisableNotify = "1"

HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\
Security Center\Svc
AntiVirusOverride = "1"

HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\
Security Center\Svc
AntiVirusDisableNotify = "1"

HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\
Security Center\Svc
FirewallDisableNotify = "1"

HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\
Security Center\Svc
FirewallOverride = "1"

HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\
Security Center\Svc
UpdatesDisableNotify = "1"

HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\
Security Center\Svc
UacDisableNotify = "1"

HKEY_CURRENT_USER\Software\Microsoft\
Windows\CurrentVersion\Internet Settings
GlobalUserOffline = "0"

HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\
Windows\CurrentVersion\policies\
system
EnableLUA = "0"

HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\
Services\SharedAccess\Parameters\
FirewallPolicy\StandardProfile\AuthorizedApplications\
List
{malware path and file name} = "{malware path and file name}:*:enabled:ipsec"

HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\
Services\SharedAccess\Parameters\
FirewallPolicy\StandardProfile
EnableFirewall = "0"

HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\
Services\SharedAccess\Parameters\
FirewallPolicy\StandardProfile
DoNotAllowExceptions = "0"

HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\
Services\SharedAccess\Parameters\
FirewallPolicy\StandardProfile
DisableNotifications = "1"

HKEY_CURRENT_USER\Software\Aasppapmmxkvs\
-993627007
1768776769 = "93"

HKEY_CURRENT_USER\Software\Aasppapmmxkvs\
-993627007
-757413758 = "0"

HKEY_CURRENT_USER\Software\Aasppapmmxkvs\
-993627007
1011363011 = "0"

HKEY_CURRENT_USER\Software\Aasppapmmxkvs\
-993627007
-1514827516 = "23"

HKEY_CURRENT_USER\Software\Aasppapmmxkvs\
-993627007
253949253 = "1a1"

HKEY_CURRENT_USER\Software\Aasppapmmxkvs\
-993627007
2022726022 = "{random characters}"

HKEY_CURRENT_USER\Software\Aasppapmmxkvs\
-993627007
-503464505 = "{random characters}"

HKEY_CURRENT_USER\Software\Aasppapmmxkvs
A1_0 = "cc96283a"

HKEY_CURRENT_USER\Software\Aasppapmmxkvs
A2_0 = "158d"

HKEY_CURRENT_USER\Software\Aasppapmmxkvs
A3_0 = "136a29"

HKEY_CURRENT_USER\Software\Aasppapmmxkvs
A4_0 = "0"

HKEY_CURRENT_USER\Software\Aasppapmmxkvs
A1_1 = "274b5a28"

HKEY_CURRENT_USER\Software\Aasppapmmxkvs
A2_1 = "696d71cc"

HKEY_CURRENT_USER\Software\Aasppapmmxkvs
A3_1 = "686ee68"

HKEY_CURRENT_USER\Software\Aasppapmmxkvs
A4_1 = "696d6441"

HKEY_CURRENT_USER\Software\Aasppapmmxkvs
A1_2 = "966c8ca7"

HKEY_CURRENT_USER\Software\Aasppapmmxkvs
A2_2 = "d2daddf"

HKEY_CURRENT_USER\Software\Aasppapmmxkvs
A3_2 = "d3d9a2ab"

HKEY_CURRENT_USER\Software\Aasppapmmxkvs
A4_2 = "d2dac882"

HKEY_CURRENT_USER\Software\Aasppapmmxkvs
A1_3 = "2b12cf3"

HKEY_CURRENT_USER\Software\Aasppapmmxkvs
A2_3 = "3c48394e"

HKEY_CURRENT_USER\Software\Aasppapmmxkvs
A3_3 = "3d4b46ea"

HKEY_CURRENT_USER\Software\Aasppapmmxkvs
A4_3 = "3c482cc3"

HKEY_CURRENT_USER\Software\Aasppapmmxkvs
A1_4 = "41c4c3fd"

HKEY_CURRENT_USER\Software\Aasppapmmxkvs
A2_4 = "a5b58489"

HKEY_CURRENT_USER\Software\Aasppapmmxkvs
A3_4 = "a4b6fb2d"

HKEY_CURRENT_USER\Software\Aasppapmmxkvs
A4_4 = "a5b5914"

HKEY_CURRENT_USER\Software\Aasppapmmxkvs
A1_5 = "311bc98d"

HKEY_CURRENT_USER\Software\Aasppapmmxkvs
A2_5 = "f22ec8"

HKEY_CURRENT_USER\Software\Aasppapmmxkvs
A3_5 = "e219f6c"

HKEY_CURRENT_USER\Software\Aasppapmmxkvs
A4_5 = "f22f545"

HKEY_CURRENT_USER\Software\Aasppapmmxkvs
A1_6 = "2c2cd"

HKEY_CURRENT_USER\Software\Aasppapmmxkvs
A2_6 = "7894cb"

HKEY_CURRENT_USER\Software\Aasppapmmxkvs
A3_6 = "799333af"

HKEY_CURRENT_USER\Software\Aasppapmmxkvs
A4_6 = "7895986"

HKEY_CURRENT_USER\Software\Aasppapmmxkvs
A1_7 = "9deeef94"

HKEY_CURRENT_USER\Software\Aasppapmmxkvs
A2_7 = "e1fda84a"

HKEY_CURRENT_USER\Software\Aasppapmmxkvs
A3_7 = "efed7ee"

HKEY_CURRENT_USER\Software\Aasppapmmxkvs
A4_7 = "e1fdbdc7"

HKEY_CURRENT_USER\Software\Aasppapmmxkvs
A1_8 = "b2e23ad"

HKEY_CURRENT_USER\Software\Aasppapmmxkvs
A2_8 = "4b6b3785"

HKEY_CURRENT_USER\Software\Aasppapmmxkvs
A3_8 = "4a684821"

HKEY_CURRENT_USER\Software\Aasppapmmxkvs
A4_8 = "4b6b228"

HKEY_CURRENT_USER\Software\Aasppapmmxkvs
A1_9 = "1f34131"

HKEY_CURRENT_USER\Software\Aasppapmmxkvs
A2_9 = "b4d893c4"

HKEY_CURRENT_USER\Software\Aasppapmmxkvs
A3_9 = "b5dbec6"

HKEY_CURRENT_USER\Software\Aasppapmmxkvs
A4_9 = "b4d88649"

HKEY_CURRENT_USER\Software\Aasppapmmxkvs
A1_10 = "ae7fae37"

HKEY_CURRENT_USER\Software\Aasppapmmxkvs
A2_10 = "1e45f5e2"

HKEY_CURRENT_USER\Software\Aasppapmmxkvs
A3_10 = "1f468a3"

HKEY_CURRENT_USER\Software\Aasppapmmxkvs
A4_10 = "1e45ea8a"

HKEY_CURRENT_USER\Software\Aasppapmmxkvs
A1_11 = "f7edf9a"

HKEY_CURRENT_USER\Software\Aasppapmmxkvs
A2_11 = "87b3548f"

HKEY_CURRENT_USER\Software\Aasppapmmxkvs
A3_11 = "86b24e2"

HKEY_CURRENT_USER\Software\Aasppapmmxkvs
A4_11 = "87b34ecb"

HKEY_CURRENT_USER\Software\Aasppapmmxkvs
A1_12 = "5c75c941"

HKEY_CURRENT_USER\Software\Aasppapmmxkvs
A2_12 = "f12a5"

HKEY_CURRENT_USER\Software\Aasppapmmxkvs
A3_12 = "f23d925"

HKEY_CURRENT_USER\Software\Aasppapmmxkvs
A4_12 = "f12b3c"

HKEY_CURRENT_USER\Software\Aasppapmmxkvs
A1_13 = "f1ea3a84"

HKEY_CURRENT_USER\Software\Aasppapmmxkvs
A2_13 = "5a8ede9"

HKEY_CURRENT_USER\Software\Aasppapmmxkvs
A3_13 = "5b8d7d64"

HKEY_CURRENT_USER\Software\Aasppapmmxkvs
A4_13 = "5a8e174d"

HKEY_CURRENT_USER\Software\Aasppapmmxkvs
A1_14 = "4e853d57"

HKEY_CURRENT_USER\Software\Aasppapmmxkvs
A2_14 = "c3fb6e7"

HKEY_CURRENT_USER\Software\Aasppapmmxkvs
A3_14 = "c2f811a7"

HKEY_CURRENT_USER\Software\Aasppapmmxkvs
A4_14 = "c3fb7b8e"

HKEY_CURRENT_USER\Software\Aasppapmmxkvs
A1_15 = "6d42f8fd"

HKEY_CURRENT_USER\Software\Aasppapmmxkvs
A2_15 = "2d68c11"

HKEY_CURRENT_USER\Software\Aasppapmmxkvs
A3_15 = "2c6bb5e6"

HKEY_CURRENT_USER\Software\Aasppapmmxkvs
A4_15 = "2d68dfcf"

HKEY_CURRENT_USER\Software\Aasppapmmxkvs
A1_16 = "f4e515b"

HKEY_CURRENT_USER\Software\Aasppapmmxkvs
A2_16 = "96d65ade"

HKEY_CURRENT_USER\Software\Aasppapmmxkvs
A3_16 = "97d52e39"

HKEY_CURRENT_USER\Software\Aasppapmmxkvs
A4_16 = "96d6441"

HKEY_CURRENT_USER\Software\Aasppapmmxkvs
A1_17 = "23ae96"

HKEY_CURRENT_USER\Software\Aasppapmmxkvs
A2_17 = "43b4d8"

HKEY_CURRENT_USER\Software\Aasppapmmxkvs
A3_17 = "14c278"

HKEY_CURRENT_USER\Software\Aasppapmmxkvs
A4_17 = "43a851"

HKEY_CURRENT_USER\Software\Aasppapmmxkvs
A1_18 = "9f891cbe"

HKEY_CURRENT_USER\Software\Aasppapmmxkvs
A2_18 = "69b11127"

HKEY_CURRENT_USER\Software\Aasppapmmxkvs
A3_18 = "68b266bb"

HKEY_CURRENT_USER\Software\Aasppapmmxkvs
A4_18 = "69b1c92"

HKEY_CURRENT_USER\Software\Aasppapmmxkvs
A1_19 = "17b96186"

HKEY_CURRENT_USER\Software\Aasppapmmxkvs
A2_19 = "d31e56bb"

HKEY_CURRENT_USER\Software\Aasppapmmxkvs
A3_19 = "d21d1afa"

HKEY_CURRENT_USER\Software\Aasppapmmxkvs
A4_19 = "d31e7d3"

HKEY_CURRENT_USER\Software\Aasppapmmxkvs
A1_20 = "f7c32c3d"

HKEY_CURRENT_USER\Software\Aasppapmmxkvs
A2_20 = "3c8bcc63"

HKEY_CURRENT_USER\Software\Aasppapmmxkvs
A3_20 = "3d88bf3d"

HKEY_CURRENT_USER\Software\Aasppapmmxkvs
A4_20 = "3c8bd514"

HKEY_CURRENT_USER\Software\Aasppapmmxkvs
A1_21 = "95fa4b6b"

HKEY_CURRENT_USER\Software\Aasppapmmxkvs
A2_21 = "a5f91c9f"

HKEY_CURRENT_USER\Software\Aasppapmmxkvs
A3_21 = "a4fa537c"

HKEY_CURRENT_USER\Software\Aasppapmmxkvs
A4_21 = "a5f93955"

HKEY_CURRENT_USER\Software\Aasppapmmxkvs
A1_22 = "d4c64dc4"

HKEY_CURRENT_USER\Software\Aasppapmmxkvs
A2_22 = "f66bda1"

HKEY_CURRENT_USER\Software\Aasppapmmxkvs
A3_22 = "e65f7bf"

HKEY_CURRENT_USER\Software\Aasppapmmxkvs
A4_22 = "f669d96"

HKEY_CURRENT_USER\Software\Aasppapmmxkvs
A1_23 = "3db27b81"

HKEY_CURRENT_USER\Software\Aasppapmmxkvs
A2_23 = "78d41c5"

HKEY_CURRENT_USER\Software\Aasppapmmxkvs
A3_23 = "79d76bfe"

HKEY_CURRENT_USER\Software\Aasppapmmxkvs
A4_23 = "78d41d7"

HKEY_CURRENT_USER\Software\Aasppapmmxkvs
A1_24 = "2bcc9e4"

HKEY_CURRENT_USER\Software\Aasppapmmxkvs
A2_24 = "e241719a"

HKEY_CURRENT_USER\Software\Aasppapmmxkvs
A3_24 = "e342c31"

HKEY_CURRENT_USER\Software\Aasppapmmxkvs
A4_24 = "e2416618"

HKEY_CURRENT_USER\Software\Aasppapmmxkvs
A1_25 = "9a9db85"

HKEY_CURRENT_USER\Software\Aasppapmmxkvs
A2_25 = "4baed4fa"

HKEY_CURRENT_USER\Software\Aasppapmmxkvs
A3_25 = "4aada7"

HKEY_CURRENT_USER\Software\Aasppapmmxkvs
A4_25 = "4baeca59"

HKEY_CURRENT_USER\Software\Aasppapmmxkvs
A1_26 = "68833653"

HKEY_CURRENT_USER\Software\Aasppapmmxkvs
A2_26 = "b51cf14"

HKEY_CURRENT_USER\Software\Aasppapmmxkvs
A3_26 = "b41f44b3"

HKEY_CURRENT_USER\Software\Aasppapmmxkvs
A4_26 = "b51c2e9a"

HKEY_CURRENT_USER\Software\Aasppapmmxkvs
A1_27 = "3ef2fa84"

HKEY_CURRENT_USER\Software\Aasppapmmxkvs
A2_27 = "1e898d5b"

HKEY_CURRENT_USER\Software\Aasppapmmxkvs
A3_27 = "1f8af8f2"

HKEY_CURRENT_USER\Software\Aasppapmmxkvs
A4_27 = "1e8992db"

HKEY_CURRENT_USER\Software\Aasppapmmxkvs
A1_28 = "db7cd2dd"

HKEY_CURRENT_USER\Software\Aasppapmmxkvs
A2_28 = "87f6d68f"

HKEY_CURRENT_USER\Software\Aasppapmmxkvs
A3_28 = "86f59d35"

HKEY_CURRENT_USER\Software\Aasppapmmxkvs
A4_28 = "87f6f71c"

HKEY_CURRENT_USER\Software\Aasppapmmxkvs
A1_29 = "4e416f"

HKEY_CURRENT_USER\Software\Aasppapmmxkvs
A2_29 = "f1644619"

HKEY_CURRENT_USER\Software\Aasppapmmxkvs
A3_29 = "f673174"

HKEY_CURRENT_USER\Software\Aasppapmmxkvs
A4_29 = "f1645b5d"

HKEY_CURRENT_USER\Software\Aasppapmmxkvs
A1_30 = "da44fb57"

HKEY_CURRENT_USER\Software\Aasppapmmxkvs
A2_30 = "5ad1a461"

HKEY_CURRENT_USER\Software\Aasppapmmxkvs
A3_30 = "5bd2d5b7"

HKEY_CURRENT_USER\Software\Aasppapmmxkvs
A4_30 = "5ad1bf9e"

HKEY_CURRENT_USER\Software\Aasppapmmxkvs
A1_31 = "59464a8a"

HKEY_CURRENT_USER\Software\Aasppapmmxkvs
A2_31 = "c43f615"

HKEY_CURRENT_USER\Software\Aasppapmmxkvs
A3_31 = "c53c49f6"

HKEY_CURRENT_USER\Software\Aasppapmmxkvs
A4_31 = "c43f23df"

HKEY_CURRENT_USER\Software\Aasppapmmxkvs
A1_32 = "28ec3d71"

HKEY_CURRENT_USER\Software\Aasppapmmxkvs
A2_32 = "2dac9fa5"

HKEY_CURRENT_USER\Software\Aasppapmmxkvs
A3_32 = "2cafe29"

HKEY_CURRENT_USER\Software\Aasppapmmxkvs
A4_32 = "2dac882"

HKEY_CURRENT_USER\Software\Aasppapmmxkvs
A1_33 = "f5679e3d"

HKEY_CURRENT_USER\Software\Aasppapmmxkvs
A2_33 = "9719f969"

HKEY_CURRENT_USER\Software\Aasppapmmxkvs
A3_33 = "961a8648"

HKEY_CURRENT_USER\Software\Aasppapmmxkvs
A4_33 = "9719ec61"

HKEY_CURRENT_USER\Software\Aasppapmmxkvs
A1_34 = "e1dd31ec"

HKEY_CURRENT_USER\Software\Aasppapmmxkvs
A2_34 = "87491e"

HKEY_CURRENT_USER\Software\Aasppapmmxkvs
A3_34 = "1843a8b"

HKEY_CURRENT_USER\Software\Aasppapmmxkvs
A4_34 = "875a2"

HKEY_CURRENT_USER\Software\Aasppapmmxkvs
A1_35 = "3582dfaf"

HKEY_CURRENT_USER\Software\Aasppapmmxkvs
A2_35 = "69f4afcf"

HKEY_CURRENT_USER\Software\Aasppapmmxkvs
A3_35 = "68f7deca"

HKEY_CURRENT_USER\Software\Aasppapmmxkvs
A4_35 = "69f4b4e3"

HKEY_CURRENT_USER\Software\Aasppapmmxkvs
A1_36 = "cfa297d"

HKEY_CURRENT_USER\Software\Aasppapmmxkvs
A2_36 = "d36238b7"

HKEY_CURRENT_USER\Software\Aasppapmmxkvs
A3_36 = "d26173d"

HKEY_CURRENT_USER\Software\Aasppapmmxkvs
A4_36 = "d3621924"

HKEY_CURRENT_USER\Software\Aasppapmmxkvs
A1_37 = "a8641de"

HKEY_CURRENT_USER\Software\Aasppapmmxkvs
A2_37 = "3ccf5d6e"

HKEY_CURRENT_USER\Software\Aasppapmmxkvs
A3_37 = "3dcc174c"

HKEY_CURRENT_USER\Software\Aasppapmmxkvs
A4_37 = "3ccf7d65"

HKEY_CURRENT_USER\Software\Aasppapmmxkvs
A1_38 = "94c3bf6"

HKEY_CURRENT_USER\Software\Aasppapmmxkvs
A2_38 = "a63cf8be"

HKEY_CURRENT_USER\Software\Aasppapmmxkvs
A3_38 = "a73f8b8f"

HKEY_CURRENT_USER\Software\Aasppapmmxkvs
A4_38 = "a63ce1a6"

HKEY_CURRENT_USER\Software\Aasppapmmxkvs
A1_39 = "2f33d32"

HKEY_CURRENT_USER\Software\Aasppapmmxkvs
A2_39 = "faa5ec7"

HKEY_CURRENT_USER\Software\Aasppapmmxkvs
A3_39 = "ea92fce"

HKEY_CURRENT_USER\Software\Aasppapmmxkvs
A4_39 = "faa45e7"

HKEY_CURRENT_USER\Software\Aasppapmmxkvs
A1_40 = "e56beee1"

HKEY_CURRENT_USER\Software\Aasppapmmxkvs
A2_40 = "7917b499"

HKEY_CURRENT_USER\Software\Aasppapmmxkvs
A3_40 = "7814c1"

HKEY_CURRENT_USER\Software\Aasppapmmxkvs
A4_40 = "7917aa28"

HKEY_CURRENT_USER\Software\Aasppapmmxkvs
A1_41 = "d9f97534"

HKEY_CURRENT_USER\Software\Aasppapmmxkvs
A2_41 = "e28516f6"

HKEY_CURRENT_USER\Software\Aasppapmmxkvs
A3_41 = "e386644"

HKEY_CURRENT_USER\Software\Aasppapmmxkvs
A4_41 = "e285e69"

HKEY_CURRENT_USER\Software\Aasppapmmxkvs
A1_42 = "73bc56f3"

HKEY_CURRENT_USER\Software\Aasppapmmxkvs
A2_42 = "4bf26f39"

HKEY_CURRENT_USER\Software\Aasppapmmxkvs
A3_42 = "4af11883"

HKEY_CURRENT_USER\Software\Aasppapmmxkvs
A4_42 = "4bf272aa"

HKEY_CURRENT_USER\Software\Aasppapmmxkvs
A1_43 = "93c2dd46"

HKEY_CURRENT_USER\Software\Aasppapmmxkvs
A2_43 = "b55fc71c"

HKEY_CURRENT_USER\Software\Aasppapmmxkvs
A3_43 = "b45cbcc2"

HKEY_CURRENT_USER\Software\Aasppapmmxkvs
A4_43 = "b55fd6eb"

HKEY_CURRENT_USER\Software\Aasppapmmxkvs
A1_44 = "1362c4c"

HKEY_CURRENT_USER\Software\Aasppapmmxkvs
A2_44 = "1ecd22d5"

HKEY_CURRENT_USER\Software\Aasppapmmxkvs
A3_44 = "1fce515"

HKEY_CURRENT_USER\Software\Aasppapmmxkvs
A4_44 = "1ecd3b2c"

HKEY_CURRENT_USER\Software\Aasppapmmxkvs
A1_45 = "91b34525"

HKEY_CURRENT_USER\Software\Aasppapmmxkvs
A2_45 = "883a88f"

HKEY_CURRENT_USER\Software\Aasppapmmxkvs
A3_45 = "8939f544"

HKEY_CURRENT_USER\Software\Aasppapmmxkvs
A4_45 = "883a9f6d"

HKEY_CURRENT_USER\Software\Aasppapmmxkvs
A1_46 = "49b7affb"

HKEY_CURRENT_USER\Software\Aasppapmmxkvs
A2_46 = "f1a81fdf"

HKEY_CURRENT_USER\Software\Aasppapmmxkvs
A3_46 = "fab6987"

HKEY_CURRENT_USER\Software\Aasppapmmxkvs
A4_46 = "f1a83ae"

HKEY_CURRENT_USER\Software\Aasppapmmxkvs
A1_47 = "2ab14b3"

HKEY_CURRENT_USER\Software\Aasppapmmxkvs
A2_47 = "5b157fe8"

HKEY_CURRENT_USER\Software\Aasppapmmxkvs
A3_47 = "5a16dc6"

HKEY_CURRENT_USER\Software\Aasppapmmxkvs
A4_47 = "5b1567ef"

HKEY_CURRENT_USER\Software\Aasppapmmxkvs
A1_48 = "daced68c"

HKEY_CURRENT_USER\Software\Aasppapmmxkvs
A2_48 = "c482d61"

HKEY_CURRENT_USER\Software\Aasppapmmxkvs
A3_48 = "c581a619"

HKEY_CURRENT_USER\Software\Aasppapmmxkvs
A4_48 = "c482cc3"

HKEY_CURRENT_USER\Software\Aasppapmmxkvs
A1_49 = "aec2e829"

HKEY_CURRENT_USER\Software\Aasppapmmxkvs
A2_49 = "2df15bb"

HKEY_CURRENT_USER\Software\Aasppapmmxkvs
A3_49 = "2cf35a58"

HKEY_CURRENT_USER\Software\Aasppapmmxkvs
A4_49 = "2df371"

HKEY_CURRENT_USER\Software\Aasppapmmxkvs
A1_50 = "8b3a277a"

HKEY_CURRENT_USER\Software\Aasppapmmxkvs
A2_50 = "975db79f"

HKEY_CURRENT_USER\Software\Aasppapmmxkvs
A3_50 = "965efe9b"

HKEY_CURRENT_USER\Software\Aasppapmmxkvs
A4_50 = "975d94b2"

HKEY_CURRENT_USER\Software\Aasppapmmxkvs
A1_51 = "97ddb1ad"

HKEY_CURRENT_USER\Software\Aasppapmmxkvs
A2_51 = "cae44d"

HKEY_CURRENT_USER\Software\Aasppapmmxkvs
A3_51 = "1c992da"

HKEY_CURRENT_USER\Software\Aasppapmmxkvs
A4_51 = "caf8f3"

HKEY_CURRENT_USER\Software\Aasppapmmxkvs
A1_52 = "6349bde7"

HKEY_CURRENT_USER\Software\Aasppapmmxkvs
A2_52 = "6a386db"

HKEY_CURRENT_USER\Software\Aasppapmmxkvs
A3_52 = "6b3b371d"

HKEY_CURRENT_USER\Software\Aasppapmmxkvs
A4_52 = "6a385d34"

HKEY_CURRENT_USER\Software\Aasppapmmxkvs
A1_53 = "9d966c2c"

HKEY_CURRENT_USER\Software\Aasppapmmxkvs
A2_53 = "d3a5e122"

HKEY_CURRENT_USER\Software\Aasppapmmxkvs
A3_53 = "d2a6ab5c"

HKEY_CURRENT_USER\Software\Aasppapmmxkvs
A4_53 = "d3a5c175"

HKEY_CURRENT_USER\Software\Aasppapmmxkvs
A1_54 = "ca5e8ffa"

HKEY_CURRENT_USER\Software\Aasppapmmxkvs
A2_54 = "3d1369b"

HKEY_CURRENT_USER\Software\Aasppapmmxkvs
A3_54 = "3c14f9f"

HKEY_CURRENT_USER\Software\Aasppapmmxkvs
A4_54 = "3d1325b6"

HKEY_CURRENT_USER\Software\Aasppapmmxkvs
A1_55 = "8f85aba1"

HKEY_CURRENT_USER\Software\Aasppapmmxkvs
A2_55 = "a689592"

HKEY_CURRENT_USER\Software\Aasppapmmxkvs
A3_55 = "a783e3de"

HKEY_CURRENT_USER\Software\Aasppapmmxkvs
A4_55 = "a6889f7"

HKEY_CURRENT_USER\Software\Aasppapmmxkvs
A1_56 = "bd4fe36e"

HKEY_CURRENT_USER\Software\Aasppapmmxkvs
A2_56 = "fedf1cf"

HKEY_CURRENT_USER\Software\Aasppapmmxkvs
A3_56 = "eee8411"

HKEY_CURRENT_USER\Software\Aasppapmmxkvs
A4_56 = "fedee38"

HKEY_CURRENT_USER\Software\Aasppapmmxkvs
A1_57 = "af6e72"

HKEY_CURRENT_USER\Software\Aasppapmmxkvs
A2_57 = "795b486"

HKEY_CURRENT_USER\Software\Aasppapmmxkvs
A3_57 = "7858385"

HKEY_CURRENT_USER\Software\Aasppapmmxkvs
A4_57 = "795b5279"

HKEY_CURRENT_USER\Software\Aasppapmmxkvs
A1_58 = "39af8e3"

HKEY_CURRENT_USER\Software\Aasppapmmxkvs
A2_58 = "e2c8aa82"

HKEY_CURRENT_USER\Software\Aasppapmmxkvs
A3_58 = "e3cbdc93"

HKEY_CURRENT_USER\Software\Aasppapmmxkvs
A4_58 = "e2c8b6ba"

HKEY_CURRENT_USER\Software\Aasppapmmxkvs
A1_59 = "2dcaf3ab"

HKEY_CURRENT_USER\Software\Aasppapmmxkvs
A2_59 = "4c36393c"

HKEY_CURRENT_USER\Software\Aasppapmmxkvs
A3_59 = "4d357d2"

HKEY_CURRENT_USER\Software\Aasppapmmxkvs
A4_59 = "4c361afb"

HKEY_CURRENT_USER\Software\Aasppapmmxkvs
A1_60 = "6da93765"

HKEY_CURRENT_USER\Software\Aasppapmmxkvs
A2_60 = "b5a3696a"

HKEY_CURRENT_USER\Software\Aasppapmmxkvs
A3_60 = "b4a1515"

HKEY_CURRENT_USER\Software\Aasppapmmxkvs
A4_60 = "b5a37f3c"

HKEY_CURRENT_USER\Software\Aasppapmmxkvs
A1_61 = "7d8bca24"

HKEY_CURRENT_USER\Software\Aasppapmmxkvs
A2_61 = "1f1c2ee"

HKEY_CURRENT_USER\Software\Aasppapmmxkvs
A3_61 = "1e138954"

HKEY_CURRENT_USER\Software\Aasppapmmxkvs
A4_61 = "1f1e37d"

HKEY_CURRENT_USER\Software\Aasppapmmxkvs
A1_62 = "bc1d36f1"

HKEY_CURRENT_USER\Software\Aasppapmmxkvs
A2_62 = "887e5e24"

HKEY_CURRENT_USER\Software\Aasppapmmxkvs
A3_62 = "897d2d97"

HKEY_CURRENT_USER\Software\Aasppapmmxkvs
A4_62 = "887e47be"

HKEY_CURRENT_USER\Software\Aasppapmmxkvs
A1_63 = "7c3e4da6"

HKEY_CURRENT_USER\Software\Aasppapmmxkvs
A2_63 = "f1ebb6e2"

HKEY_CURRENT_USER\Software\Aasppapmmxkvs
A3_63 = "fe8c1d6"

HKEY_CURRENT_USER\Software\Aasppapmmxkvs
A4_63 = "f1ebabff"

HKEY_CURRENT_USER\Software\Aasppapmmxkvs
A1_64 = "4cfa6314"

HKEY_CURRENT_USER\Software\Aasppapmmxkvs
A2_64 = "5b59ecc"

HKEY_CURRENT_USER\Software\Aasppapmmxkvs
A3_64 = "5a5a7a69"

HKEY_CURRENT_USER\Software\Aasppapmmxkvs
A4_64 = "5b5914"

HKEY_CURRENT_USER\Software\Aasppapmmxkvs
A1_65 = "d52fcd8"

HKEY_CURRENT_USER\Software\Aasppapmmxkvs
A2_65 = "c4c668a5"

HKEY_CURRENT_USER\Software\Aasppapmmxkvs
A3_65 = "c5c51ea8"

HKEY_CURRENT_USER\Software\Aasppapmmxkvs
A4_65 = "c4c67481"

HKEY_CURRENT_USER\Software\Aasppapmmxkvs
A1_66 = "7fa9898f"

HKEY_CURRENT_USER\Software\Aasppapmmxkvs
A2_66 = "2e33fbbd"

HKEY_CURRENT_USER\Software\Aasppapmmxkvs
A3_66 = "2f3b2eb"

HKEY_CURRENT_USER\Software\Aasppapmmxkvs
A4_66 = "2e33d8c2"

HKEY_CURRENT_USER\Software\Aasppapmmxkvs
A1_67 = "52284f5a"

HKEY_CURRENT_USER\Software\Aasppapmmxkvs
A2_67 = "97a125ee"

HKEY_CURRENT_USER\Software\Aasppapmmxkvs
A3_67 = "96a2572a"

HKEY_CURRENT_USER\Software\Aasppapmmxkvs
A4_67 = "97a13d3"

HKEY_CURRENT_USER\Software\Aasppapmmxkvs
A1_68 = "6338291d"

HKEY_CURRENT_USER\Software\Aasppapmmxkvs
A2_68 = "1eb89f"

HKEY_CURRENT_USER\Software\Aasppapmmxkvs
A3_68 = "dcb6d"

HKEY_CURRENT_USER\Software\Aasppapmmxkvs
A4_68 = "1ea144"

HKEY_CURRENT_USER\Software\Aasppapmmxkvs
A1_69 = "7e2fabe"

HKEY_CURRENT_USER\Software\Aasppapmmxkvs
A2_69 = "6a7c1b34"

HKEY_CURRENT_USER\Software\Aasppapmmxkvs
A3_69 = "6b7f6fac"

HKEY_CURRENT_USER\Software\Aasppapmmxkvs
A4_69 = "6a7c585"

HKEY_CURRENT_USER\Software\Aasppapmmxkvs
A1_70 = "3c1499f"

HKEY_CURRENT_USER\Software\Aasppapmmxkvs
A2_70 = "d3e971a9"

HKEY_CURRENT_USER\Software\Aasppapmmxkvs
A3_70 = "d2ea3ef"

HKEY_CURRENT_USER\Software\Aasppapmmxkvs
A4_70 = "d3e969c6"

HKEY_CURRENT_USER\Software\Aasppapmmxkvs
A1_71 = "74f9e5e"

HKEY_CURRENT_USER\Software\Aasppapmmxkvs
A2_71 = "3d56d1e5"

HKEY_CURRENT_USER\Software\Aasppapmmxkvs
A3_71 = "3c55a42e"

HKEY_CURRENT_USER\Software\Aasppapmmxkvs
A4_71 = "3d56ce7"

HKEY_CURRENT_USER\Software\Aasppapmmxkvs
A1_72 = "733b3f4"

HKEY_CURRENT_USER\Software\Aasppapmmxkvs
A2_72 = "a6c41435"

HKEY_CURRENT_USER\Software\Aasppapmmxkvs
A3_72 = "a7c75861"

HKEY_CURRENT_USER\Software\Aasppapmmxkvs
A4_72 = "a6c43248"

HKEY_CURRENT_USER\Software\Aasppapmmxkvs
A1_73 = "ac45dad6"

HKEY_CURRENT_USER\Software\Aasppapmmxkvs
A2_73 = "1318c4"

HKEY_CURRENT_USER\Software\Aasppapmmxkvs
A3_73 = "1132fca"

HKEY_CURRENT_USER\Software\Aasppapmmxkvs
A4_73 = "1319689"

HKEY_CURRENT_USER\Software\Aasppapmmxkvs
A1_74 = "d2135a95"

HKEY_CURRENT_USER\Software\Aasppapmmxkvs
A2_74 = "799eeb5d"

HKEY_CURRENT_USER\Software\Aasppapmmxkvs
A3_74 = "789d9e3"

HKEY_CURRENT_USER\Software\Aasppapmmxkvs
A4_74 = "799efaca"

HKEY_CURRENT_USER\Software\Aasppapmmxkvs
A1_75 = "7562a5e"

HKEY_CURRENT_USER\Software\Aasppapmmxkvs
A2_75 = "e3c487c"

HKEY_CURRENT_USER\Software\Aasppapmmxkvs
A3_75 = "e2f3522"

HKEY_CURRENT_USER\Software\Aasppapmmxkvs
A4_75 = "e3c5fb"

HKEY_CURRENT_USER\Software\Aasppapmmxkvs
A1_76 = "37bad2"

HKEY_CURRENT_USER\Software\Aasppapmmxkvs
A2_76 = "4c79d56f"

HKEY_CURRENT_USER\Software\Aasppapmmxkvs
A3_76 = "4d7aa965"

HKEY_CURRENT_USER\Software\Aasppapmmxkvs
A4_76 = "4c79c34c"

HKEY_CURRENT_USER\Software\Aasppapmmxkvs
A1_77 = "5adec"

HKEY_CURRENT_USER\Software\Aasppapmmxkvs
A2_77 = "b5e73ead"

HKEY_CURRENT_USER\Software\Aasppapmmxkvs
A3_77 = "b4e44da4"

HKEY_CURRENT_USER\Software\Aasppapmmxkvs
A4_77 = "b5e7278d"

HKEY_CURRENT_USER\Software\Aasppapmmxkvs
A1_78 = "5bffa93"

HKEY_CURRENT_USER\Software\Aasppapmmxkvs
A2_78 = "1f54979"

HKEY_CURRENT_USER\Software\Aasppapmmxkvs
A3_78 = "1e57e1e7"

HKEY_CURRENT_USER\Software\Aasppapmmxkvs
A4_78 = "1f548bce"

HKEY_CURRENT_USER\Software\Aasppapmmxkvs
A1_79 = "11aed756"

HKEY_CURRENT_USER\Software\Aasppapmmxkvs
A2_79 = "88c1e6c"

HKEY_CURRENT_USER\Software\Aasppapmmxkvs
A3_79 = "89c29a26"

HKEY_CURRENT_USER\Software\Aasppapmmxkvs
A4_79 = "88c1ff"

HKEY_CURRENT_USER\Software\Aasppapmmxkvs
A1_80 = "c7625d"

HKEY_CURRENT_USER\Software\Aasppapmmxkvs
A2_80 = "f22f49fa"

HKEY_CURRENT_USER\Software\Aasppapmmxkvs
A3_80 = "f32c3e79"

HKEY_CURRENT_USER\Software\Aasppapmmxkvs
A4_80 = "f22f545"

HKEY_CURRENT_USER\Software\Aasppapmmxkvs
A1_81 = "7a7fd9df"

HKEY_CURRENT_USER\Software\Aasppapmmxkvs
A2_81 = "5b9ca53b"

HKEY_CURRENT_USER\Software\Aasppapmmxkvs
A3_81 = "5a9fd2b8"

HKEY_CURRENT_USER\Software\Aasppapmmxkvs
A4_81 = "5b9cb891"

HKEY_CURRENT_USER\Software\Aasppapmmxkvs
A1_82 = "6492518d"

HKEY_CURRENT_USER\Software\Aasppapmmxkvs
A2_82 = "c5af6"

HKEY_CURRENT_USER\Software\Aasppapmmxkvs
A3_82 = "c4976fb"

HKEY_CURRENT_USER\Software\Aasppapmmxkvs
A4_82 = "c5a1cd2"

HKEY_CURRENT_USER\Software\Aasppapmmxkvs
A1_83 = "3c34654"

HKEY_CURRENT_USER\Software\Aasppapmmxkvs
A2_83 = "2e7794ec"

HKEY_CURRENT_USER\Software\Aasppapmmxkvs
A3_83 = "2f74eb3a"

HKEY_CURRENT_USER\Software\Aasppapmmxkvs
A4_83 = "2e778113"

HKEY_CURRENT_USER\Software\Aasppapmmxkvs
A1_84 = "3b82d34"

HKEY_CURRENT_USER\Software\Aasppapmmxkvs
A2_84 = "97e4c383"

HKEY_CURRENT_USER\Software\Aasppapmmxkvs
A3_84 = "96e78f7d"

HKEY_CURRENT_USER\Software\Aasppapmmxkvs
A4_84 = "97e4e554"

HKEY_CURRENT_USER\Software\Aasppapmmxkvs
A1_85 = "3ac92346"

HKEY_CURRENT_USER\Software\Aasppapmmxkvs
A2_85 = "1525736"

HKEY_CURRENT_USER\Software\Aasppapmmxkvs
A3_85 = "5123bc"

HKEY_CURRENT_USER\Software\Aasppapmmxkvs
A4_85 = "1524995"

HKEY_CURRENT_USER\Software\Aasppapmmxkvs
A1_86 = "e1648"

HKEY_CURRENT_USER\Software\Aasppapmmxkvs
A2_86 = "6abf8c97"

HKEY_CURRENT_USER\Software\Aasppapmmxkvs
A3_86 = "6bbcc7ff"

HKEY_CURRENT_USER\Software\Aasppapmmxkvs
A4_86 = "6abfadd6"

HKEY_CURRENT_USER\Software\Aasppapmmxkvs
A1_87 = "75497a48"

HKEY_CURRENT_USER\Software\Aasppapmmxkvs
A2_87 = "d42d4f8"

HKEY_CURRENT_USER\Software\Aasppapmmxkvs
A3_87 = "d52e783e"

HKEY_CURRENT_USER\Software\Aasppapmmxkvs
A4_87 = "d42d1217"

HKEY_CURRENT_USER\Software\Aasppapmmxkvs
A1_88 = "1fe7562"

HKEY_CURRENT_USER\Software\Aasppapmmxkvs
A2_88 = "3d9a623f"

HKEY_CURRENT_USER\Software\Aasppapmmxkvs
A3_88 = "3c991c71"

HKEY_CURRENT_USER\Software\Aasppapmmxkvs
A4_88 = "3d9a7658"

HKEY_CURRENT_USER\Software\Aasppapmmxkvs
A1_89 = "f7716cc"

HKEY_CURRENT_USER\Software\Aasppapmmxkvs
A2_89 = "a77fba"

HKEY_CURRENT_USER\Software\Aasppapmmxkvs
A3_89 = "a64bb"

HKEY_CURRENT_USER\Software\Aasppapmmxkvs
A4_89 = "a77da99"

HKEY_CURRENT_USER\Software\Aasppapmmxkvs
A1_90 = "d8cbbf66"

HKEY_CURRENT_USER\Software\Aasppapmmxkvs
A2_90 = "17523ed"

HKEY_CURRENT_USER\Software\Aasppapmmxkvs
A3_90 = "117654f3"

HKEY_CURRENT_USER\Software\Aasppapmmxkvs
A4_90 = "1753eda"

HKEY_CURRENT_USER\Software\Aasppapmmxkvs
A1_91 = "66ccb44"

HKEY_CURRENT_USER\Software\Aasppapmmxkvs
A2_91 = "79e283bc"

HKEY_CURRENT_USER\Software\Aasppapmmxkvs
A3_91 = "78e1c932"

HKEY_CURRENT_USER\Software\Aasppapmmxkvs
A4_91 = "79e2a31b"

HKEY_CURRENT_USER\Software\Aasppapmmxkvs
A1_92 = "6fe8d9f"

HKEY_CURRENT_USER\Software\Aasppapmmxkvs
A2_92 = "e352641"

HKEY_CURRENT_USER\Software\Aasppapmmxkvs
A3_92 = "e2536d75"

HKEY_CURRENT_USER\Software\Aasppapmmxkvs
A4_92 = "e3575c"

HKEY_CURRENT_USER\Software\Aasppapmmxkvs
A1_93 = "f1ead3"

HKEY_CURRENT_USER\Software\Aasppapmmxkvs
A2_93 = "4cbd72a"

HKEY_CURRENT_USER\Software\Aasppapmmxkvs
A3_93 = "4dbe1b4"

HKEY_CURRENT_USER\Software\Aasppapmmxkvs
A4_93 = "4cbd6b9d"

HKEY_CURRENT_USER\Software\Aasppapmmxkvs
A1_94 = "88befb8"

HKEY_CURRENT_USER\Software\Aasppapmmxkvs
A2_94 = "b62ad6d"

HKEY_CURRENT_USER\Software\Aasppapmmxkvs
A3_94 = "b729a5f7"

HKEY_CURRENT_USER\Software\Aasppapmmxkvs
A4_94 = "b62acfde"

HKEY_CURRENT_USER\Software\Aasppapmmxkvs
A1_95 = "911e4dc3"

HKEY_CURRENT_USER\Software\Aasppapmmxkvs
A2_95 = "1f982be8"

HKEY_CURRENT_USER\Software\Aasppapmmxkvs
A3_95 = "1e9b5e36"

HKEY_CURRENT_USER\Software\Aasppapmmxkvs
A4_95 = "1f98341f"

HKEY_CURRENT_USER\Software\Aasppapmmxkvs
A1_96 = "ca26d52d"

HKEY_CURRENT_USER\Software\Aasppapmmxkvs
A2_96 = "89581f1"

HKEY_CURRENT_USER\Software\Aasppapmmxkvs
A3_96 = "886f249"

HKEY_CURRENT_USER\Software\Aasppapmmxkvs
A4_96 = "895986"

HKEY_CURRENT_USER\Software\Aasppapmmxkvs
A1_97 = "da13d2f8"

HKEY_CURRENT_USER\Software\Aasppapmmxkvs
A2_97 = "f272df21"

HKEY_CURRENT_USER\Software\Aasppapmmxkvs
A3_97 = "f3719688"

HKEY_CURRENT_USER\Software\Aasppapmmxkvs
A4_97 = "f272fca1"

HKEY_CURRENT_USER\Software\Aasppapmmxkvs
A1_98 = "35bf13b"

HKEY_CURRENT_USER\Software\Aasppapmmxkvs
A2_98 = "5be786a"

HKEY_CURRENT_USER\Software\Aasppapmmxkvs
A3_98 = "5ae3acb"

HKEY_CURRENT_USER\Software\Aasppapmmxkvs
A4_98 = "5be6e2"

HKEY_CURRENT_USER\Software\Aasppapmmxkvs
A1_99 = "ffefe867"

HKEY_CURRENT_USER\Software\Aasppapmmxkvs
A2_99 = "c54ddb2e"

HKEY_CURRENT_USER\Software\Aasppapmmxkvs
A3_99 = "c44eafa"

HKEY_CURRENT_USER\Software\Aasppapmmxkvs
A4_99 = "c54dc523"

HKEY_CURRENT_USER\Software\Aasppapmmxkvs
A1_100 = "4c9ba13d"

HKEY_CURRENT_USER\Software\Aasppapmmxkvs
A2_100 = "2ebb3caf"

HKEY_CURRENT_USER\Software\Aasppapmmxkvs
A3_100 = "2fb8434d"

HKEY_CURRENT_USER\Software\Aasppapmmxkvs
A4_100 = "2ebb2964"

HKEY_CURRENT_USER\Software\Aasppapmmxkvs
A1_101 = "5d87c1fc"

HKEY_CURRENT_USER\Software\Aasppapmmxkvs
A2_101 = "98289ae"

HKEY_CURRENT_USER\Software\Aasppapmmxkvs
A3_101 = "992be78c"

HKEY_CURRENT_USER\Software\Aasppapmmxkvs
A4_101 = "98288da5"

HKEY_CURRENT_USER\Software\Aasppapmmxkvs
A1_102 = "486db495"

HKEY_CURRENT_USER\Software\Aasppapmmxkvs
A2_102 = "195e7ab"

HKEY_CURRENT_USER\Software\Aasppapmmxkvs
A3_102 = "969bcf"

HKEY_CURRENT_USER\Software\Aasppapmmxkvs
A4_102 = "195f1e6"

HKEY_CURRENT_USER\Software\Aasppapmmxkvs
A1_103 = "67ee717e"

HKEY_CURRENT_USER\Software\Aasppapmmxkvs
A2_103 = "6b34a5c"

HKEY_CURRENT_USER\Software\Aasppapmmxkvs
A3_103 = "6a3ce"

HKEY_CURRENT_USER\Software\Aasppapmmxkvs
A4_103 = "6b35627"

HKEY_CURRENT_USER\Software\Aasppapmmxkvs
A1_104 = "5335c831"

HKEY_CURRENT_USER\Software\Aasppapmmxkvs
A2_104 = "d47a267"

HKEY_CURRENT_USER\Software\Aasppapmmxkvs
A3_104 = "d573d41"

HKEY_CURRENT_USER\Software\Aasppapmmxkvs
A4_104 = "d47ba68"

HKEY_CURRENT_USER\Software\Aasppapmmxkvs
A1_105 = "f8377ff"

HKEY_CURRENT_USER\Software\Aasppapmmxkvs
A2_105 = "3ddee29"

HKEY_CURRENT_USER\Software\Aasppapmmxkvs
A3_105 = "3cdd748"

HKEY_CURRENT_USER\Software\Aasppapmmxkvs
A4_105 = "3dde1ea9"

HKEY_CURRENT_USER\Software\Aasppapmmxkvs
A1_106 = "73198ba4"

HKEY_CURRENT_USER\Software\Aasppapmmxkvs
A2_106 = "a74b9551"

HKEY_CURRENT_USER\Software\Aasppapmmxkvs
A3_106 = "a648e8c3"

HKEY_CURRENT_USER\Software\Aasppapmmxkvs
A4_106 = "a74b82ea"

HKEY_CURRENT_USER\Software\Aasppapmmxkvs
A1_107 = "c7be85c"

HKEY_CURRENT_USER\Software\Aasppapmmxkvs
A2_107 = "1b8f2c"

HKEY_CURRENT_USER\Software\Aasppapmmxkvs
A3_107 = "11bb8d2"

HKEY_CURRENT_USER\Software\Aasppapmmxkvs
A4_107 = "1b8e72b"

HKEY_CURRENT_USER\Software\Aasppapmmxkvs
A1_108 = "bc7e423"

HKEY_CURRENT_USER\Software\Aasppapmmxkvs
A2_108 = "7a26523"

HKEY_CURRENT_USER\Software\Aasppapmmxkvs
A3_108 = "7b252145"

HKEY_CURRENT_USER\Software\Aasppapmmxkvs
A4_108 = "7a264b6c"

HKEY_CURRENT_USER\Software\Aasppapmmxkvs
A1_109 = "d6cf7f2"

HKEY_CURRENT_USER\Software\Aasppapmmxkvs
A2_109 = "e3938ab4"

HKEY_CURRENT_USER\Software\Aasppapmmxkvs
A3_109 = "e29c584"

HKEY_CURRENT_USER\Software\Aasppapmmxkvs
A4_109 = "e393afad"

HKEY_CURRENT_USER\Software\Aasppapmmxkvs
A1_110 = "cf9a2db"

HKEY_CURRENT_USER\Software\Aasppapmmxkvs
A2_110 = "4d1f2"

HKEY_CURRENT_USER\Software\Aasppapmmxkvs
A3_110 = "4c279c7"

HKEY_CURRENT_USER\Software\Aasppapmmxkvs
A4_110 = "4d113ee"

HKEY_CURRENT_USER\Software\Aasppapmmxkvs
A1_111 = "411ecd7e"

HKEY_CURRENT_USER\Software\Aasppapmmxkvs
A2_111 = "b66e59a1"

HKEY_CURRENT_USER\Software\Aasppapmmxkvs
A3_111 = "b76d126"

HKEY_CURRENT_USER\Software\Aasppapmmxkvs
A4_111 = "b66e782f"

HKEY_CURRENT_USER\Software\Aasppapmmxkvs
A1_112 = "e2bb3e37"

HKEY_CURRENT_USER\Software\Aasppapmmxkvs
A2_112 = "1fdbc622"

HKEY_CURRENT_USER\Software\Aasppapmmxkvs
A3_112 = "1ed8b659"

HKEY_CURRENT_USER\Software\Aasppapmmxkvs
A4_112 = "1fdbdc7"

HKEY_CURRENT_USER\Software\Aasppapmmxkvs
A1_113 = "a45f17e4"

HKEY_CURRENT_USER\Software\Aasppapmmxkvs
A2_113 = "89495596"

HKEY_CURRENT_USER\Software\Aasppapmmxkvs
A3_113 = "884a2a98"

HKEY_CURRENT_USER\Software\Aasppapmmxkvs
A4_113 = "89494b1"

HKEY_CURRENT_USER\Software\Aasppapmmxkvs
A1_114 = "fa61ccbe"

HKEY_CURRENT_USER\Software\Aasppapmmxkvs
A2_114 = "f2b6bf9d"

HKEY_CURRENT_USER\Software\Aasppapmmxkvs
A3_114 = "f3b5cedb"

HKEY_CURRENT_USER\Software\Aasppapmmxkvs
A4_114 = "f2b6a4f2"

HKEY_CURRENT_USER\Software\Aasppapmmxkvs
A1_115 = "ed32688"

HKEY_CURRENT_USER\Software\Aasppapmmxkvs
A2_115 = "5c2416f6"

HKEY_CURRENT_USER\Software\Aasppapmmxkvs
A3_115 = "5d27631a"

HKEY_CURRENT_USER\Software\Aasppapmmxkvs
A4_115 = "5c24933"

HKEY_CURRENT_USER\Software\Aasppapmmxkvs
A1_116 = "f91a1721"

HKEY_CURRENT_USER\Software\Aasppapmmxkvs
A2_116 = "c5917ba3"

HKEY_CURRENT_USER\Software\Aasppapmmxkvs
A3_116 = "c49275d"

HKEY_CURRENT_USER\Software\Aasppapmmxkvs
A4_116 = "c5916d74"

HKEY_CURRENT_USER\Software\Aasppapmmxkvs
A1_117 = "44681fe2"

HKEY_CURRENT_USER\Software\Aasppapmmxkvs
A2_117 = "2efec7c"

HKEY_CURRENT_USER\Software\Aasppapmmxkvs
A3_117 = "2ffdbb9c"

HKEY_CURRENT_USER\Software\Aasppapmmxkvs
A4_117 = "2efed1b5"

HKEY_CURRENT_USER\Software\Aasppapmmxkvs
A1_118 = "cfcf6d7c"

HKEY_CURRENT_USER\Software\Aasppapmmxkvs
A2_118 = "986c2c51"

HKEY_CURRENT_USER\Software\Aasppapmmxkvs
A3_118 = "996f5fdf"

HKEY_CURRENT_USER\Software\Aasppapmmxkvs
A4_118 = "986c35f6"

HKEY_CURRENT_USER\Software\Aasppapmmxkvs
A1_119 = "54df3462"

HKEY_CURRENT_USER\Software\Aasppapmmxkvs
A2_119 = "1d987b"

HKEY_CURRENT_USER\Software\Aasppapmmxkvs
A3_119 = "daf1e"

HKEY_CURRENT_USER\Software\Aasppapmmxkvs
A4_119 = "1d99a37"

HKEY_CURRENT_USER\Software\Aasppapmmxkvs
A1_120 = "8c9ab12a"

HKEY_CURRENT_USER\Software\Aasppapmmxkvs
A2_120 = "6b46e827"

HKEY_CURRENT_USER\Software\Aasppapmmxkvs
A3_120 = "6a459451"

HKEY_CURRENT_USER\Software\Aasppapmmxkvs
A4_120 = "6b46fe78"

HKEY_CURRENT_USER\Software\Aasppapmmxkvs
A1_121 = "76f82af7"

HKEY_CURRENT_USER\Software\Aasppapmmxkvs
A2_121 = "d4b44773"

HKEY_CURRENT_USER\Software\Aasppapmmxkvs
A3_121 = "d5b789"

HKEY_CURRENT_USER\Software\Aasppapmmxkvs
A4_121 = "d4b462b9"

HKEY_CURRENT_USER\Software\Aasppapmmxkvs
A1_122 = "37937cbc"

HKEY_CURRENT_USER\Software\Aasppapmmxkvs
A2_122 = "3e21dda7"

HKEY_CURRENT_USER\Software\Aasppapmmxkvs
A3_122 = "3f22acd3"

HKEY_CURRENT_USER\Software\Aasppapmmxkvs
A4_122 = "3e21c6fa"

HKEY_CURRENT_USER\Software\Aasppapmmxkvs
A1_123 = "b2e64f6d"

HKEY_CURRENT_USER\Software\Aasppapmmxkvs
A2_123 = "a78f3334"

HKEY_CURRENT_USER\Software\Aasppapmmxkvs
A3_123 = "a68c4112"

HKEY_CURRENT_USER\Software\Aasppapmmxkvs
A4_123 = "a78f2b3b"

HKEY_CURRENT_USER\Software\Aasppapmmxkvs
A1_124 = "6d549a8"

HKEY_CURRENT_USER\Software\Aasppapmmxkvs
A2_124 = "1fc92b6"

HKEY_CURRENT_USER\Software\Aasppapmmxkvs
A3_124 = "11ffe555"

HKEY_CURRENT_USER\Software\Aasppapmmxkvs
A4_124 = "1fc8f7c"

HKEY_CURRENT_USER\Software\Aasppapmmxkvs
A1_125 = "2b93f3"

HKEY_CURRENT_USER\Software\Aasppapmmxkvs
A2_125 = "7a69e69a"

HKEY_CURRENT_USER\Software\Aasppapmmxkvs
A3_125 = "7b6a9994"

HKEY_CURRENT_USER\Software\Aasppapmmxkvs
A4_125 = "7a69f3bd"

HKEY_CURRENT_USER\Software\Aasppapmmxkvs
A1_126 = "fcf5bb6d"

HKEY_CURRENT_USER\Software\Aasppapmmxkvs
A2_126 = "e3d74859"

HKEY_CURRENT_USER\Software\Aasppapmmxkvs
A3_126 = "e2d43dd7"

HKEY_CURRENT_USER\Software\Aasppapmmxkvs
A4_126 = "e3d757fe"

HKEY_CURRENT_USER\Software\Aasppapmmxkvs
A1_127 = "aad9f6be"

HKEY_CURRENT_USER\Software\Aasppapmmxkvs
A2_127 = "4d44a5a"

HKEY_CURRENT_USER\Software\Aasppapmmxkvs
A3_127 = "4c47d616"

HKEY_CURRENT_USER\Software\Aasppapmmxkvs
A4_127 = "4d44bc3f"

HKEY_CURRENT_USER\Software\Aasppapmmxkvs
A1_128 = "76c45d9"

HKEY_CURRENT_USER\Software\Aasppapmmxkvs
A2_128 = "b6b2367c"

HKEY_CURRENT_USER\Software\Aasppapmmxkvs
A3_128 = "b7b14aa9"

HKEY_CURRENT_USER\Software\Aasppapmmxkvs
A4_128 = "b6b228"

HKEY_CURRENT_USER\Software\Aasppapmmxkvs
A1_129 = "13d85b9e"

HKEY_CURRENT_USER\Software\Aasppapmmxkvs
A2_129 = "21f9b88"

HKEY_CURRENT_USER\Software\Aasppapmmxkvs
A3_129 = "211ceee8"

HKEY_CURRENT_USER\Software\Aasppapmmxkvs
A4_129 = "21f84c1"

HKEY_CURRENT_USER\Software\Aasppapmmxkvs
A1_130 = "875464d"

HKEY_CURRENT_USER\Software\Aasppapmmxkvs
A2_130 = "898cf3a5"

HKEY_CURRENT_USER\Software\Aasppapmmxkvs
A3_130 = "888f832b"

HKEY_CURRENT_USER\Software\Aasppapmmxkvs
A4_130 = "898ce92"

HKEY_CURRENT_USER\Software\Aasppapmmxkvs
A1_131 = "3594251c"

HKEY_CURRENT_USER\Software\Aasppapmmxkvs
A2_131 = "f2fa5461"

HKEY_CURRENT_USER\Software\Aasppapmmxkvs
A3_131 = "f3f9276a"

HKEY_CURRENT_USER\Software\Aasppapmmxkvs
A4_131 = "f2fa4d43"

HKEY_CURRENT_USER\Software\Aasppapmmxkvs
A1_132 = "a1a6d8d2"

HKEY_CURRENT_USER\Software\Aasppapmmxkvs
A2_132 = "5c67a694"

HKEY_CURRENT_USER\Software\Aasppapmmxkvs
A3_132 = "5d64dbad"

HKEY_CURRENT_USER\Software\Aasppapmmxkvs
A4_132 = "5c67b184"

HKEY_CURRENT_USER\Software\Aasppapmmxkvs
A1_133 = "c88f7d9a"

HKEY_CURRENT_USER\Software\Aasppapmmxkvs
A2_133 = "c5d5963"

HKEY_CURRENT_USER\Software\Aasppapmmxkvs
A3_133 = "c4d67fec"

HKEY_CURRENT_USER\Software\Aasppapmmxkvs
A4_133 = "c5d515c5"

HKEY_CURRENT_USER\Software\Aasppapmmxkvs
A1_134 = "e3c74c42"

HKEY_CURRENT_USER\Software\Aasppapmmxkvs
A2_134 = "2f42639c"

HKEY_CURRENT_USER\Software\Aasppapmmxkvs
A3_134 = "2e4112f"

HKEY_CURRENT_USER\Software\Aasppapmmxkvs
A4_134 = "2f427a6"

HKEY_CURRENT_USER\Software\Aasppapmmxkvs
A1_135 = "c97ea71"

HKEY_CURRENT_USER\Software\Aasppapmmxkvs
A2_135 = "98afc8a8"

HKEY_CURRENT_USER\Software\Aasppapmmxkvs
A3_135 = "99acb46e"

HKEY_CURRENT_USER\Software\Aasppapmmxkvs
A4_135 = "98afde47"

HKEY_CURRENT_USER\Software\Aasppapmmxkvs
A1_136 = "98c38de"

HKEY_CURRENT_USER\Software\Aasppapmmxkvs
A2_136 = "21d564f"

HKEY_CURRENT_USER\Software\Aasppapmmxkvs
A3_136 = "31e28a1"

HKEY_CURRENT_USER\Software\Aasppapmmxkvs
A4_136 = "21d4288"

HKEY_CURRENT_USER\Software\Aasppapmmxkvs
A1_137 = "a4884c9d"

HKEY_CURRENT_USER\Software\Aasppapmmxkvs
A2_137 = "6b8ab1be"

HKEY_CURRENT_USER\Software\Aasppapmmxkvs
A3_137 = "6a89cce"

HKEY_CURRENT_USER\Software\Aasppapmmxkvs
A4_137 = "6b8aa6c9"

HKEY_CURRENT_USER\Software\Aasppapmmxkvs
A1_138 = "e9818353"

HKEY_CURRENT_USER\Software\Aasppapmmxkvs
A2_138 = "d4f81c5e"

HKEY_CURRENT_USER\Software\Aasppapmmxkvs
A3_138 = "d5fb6123"

HKEY_CURRENT_USER\Software\Aasppapmmxkvs
A4_138 = "d4f8ba"

HKEY_CURRENT_USER\Software\Aasppapmmxkvs
A1_139 = "94c226"

HKEY_CURRENT_USER\Software\Aasppapmmxkvs
A2_139 = "3e65733a"

HKEY_CURRENT_USER\Software\Aasppapmmxkvs
A3_139 = "3f66562"

HKEY_CURRENT_USER\Software\Aasppapmmxkvs
A4_139 = "3e656f4b"

HKEY_CURRENT_USER\Software\Aasppapmmxkvs
A1_140 = "92af7d5"

HKEY_CURRENT_USER\Software\VB and VBA Program Settings\
trial version\trial
date1 = "11/20/2011"

HKEY_CURRENT_USER\Software\Aasppapmmxkvs
A2_140 = "a7d2ca51"

HKEY_CURRENT_USER\Software\Aasppapmmxkvs
A3_140 = "a6d1b9a5"

HKEY_CURRENT_USER\Software\Aasppapmmxkvs
A4_140 = "a7d2d38c"

HKEY_CURRENT_USER\Software\Aasppapmmxkvs
A1_141 = "276d2f81"

HKEY_CURRENT_USER\Software\Aasppapmmxkvs
A2_141 = "1142bc2"

HKEY_CURRENT_USER\Software\Aasppapmmxkvs
A3_141 = "1435de4"

HKEY_CURRENT_USER\Software\Aasppapmmxkvs
A4_141 = "11437cd"

HKEY_CURRENT_USER\Software\Aasppapmmxkvs
A1_142 = "fe38f56"

HKEY_CURRENT_USER\Software\Aasppapmmxkvs
A2_142 = "7aad8721"

HKEY_CURRENT_USER\Software\Aasppapmmxkvs
A3_142 = "7baef627"

HKEY_CURRENT_USER\Software\Aasppapmmxkvs
A4_142 = "7aad9ce"

HKEY_CURRENT_USER\Software\Aasppapmmxkvs
A1_143 = "59f12e16"

HKEY_CURRENT_USER\Software\Aasppapmmxkvs
A2_143 = "e41b176a"

HKEY_CURRENT_USER\Software\Aasppapmmxkvs
A3_143 = "e5186a66"

HKEY_CURRENT_USER\Software\Aasppapmmxkvs
A4_143 = "e41b4f"

HKEY_CURRENT_USER\Software\Aasppapmmxkvs
A1_144 = "875116cd"

HKEY_CURRENT_USER\Software\Aasppapmmxkvs
A2_144 = "4d887a33"

HKEY_CURRENT_USER\Software\Aasppapmmxkvs
A3_144 = "4c8beb9"

HKEY_CURRENT_USER\Software\Aasppapmmxkvs
A4_144 = "4d88649"

HKEY_CURRENT_USER\Software\Aasppapmmxkvs
A1_145 = "95f12d83"

HKEY_CURRENT_USER\Software\Aasppapmmxkvs
A2_145 = "b6f5db2b"

HKEY_CURRENT_USER\Software\Aasppapmmxkvs
A3_145 = "b7f6a2f8"

HKEY_CURRENT_USER\Software\Aasppapmmxkvs
A4_145 = "b6f5c8d1"

HKEY_CURRENT_USER\Software\Aasppapmmxkvs
A1_146 = "47bb9a4a"

HKEY_CURRENT_USER\Software\Aasppapmmxkvs
A2_146 = "263359a"

HKEY_CURRENT_USER\Software\Aasppapmmxkvs
A3_146 = "216473b"

HKEY_CURRENT_USER\Software\Aasppapmmxkvs
A4_146 = "2632d12"

HKEY_CURRENT_USER\Software\Aasppapmmxkvs
A1_147 = "bfc5cb6d"

HKEY_CURRENT_USER\Software\Aasppapmmxkvs
A2_147 = "89d8c4c"

HKEY_CURRENT_USER\Software\Aasppapmmxkvs
A3_147 = "88d3fb7a"

HKEY_CURRENT_USER\Software\Aasppapmmxkvs
A4_147 = "89d9153"

HKEY_CURRENT_USER\Software\Aasppapmmxkvs
A1_148 = "43d741c5"

HKEY_CURRENT_USER\Software\Aasppapmmxkvs
A2_148 = "f33dd158"

HKEY_CURRENT_USER\Software\Aasppapmmxkvs
A3_148 = "f23e9fbd"

HKEY_CURRENT_USER\Software\Aasppapmmxkvs
A4_148 = "f33df594"

HKEY_CURRENT_USER\Software\Aasppapmmxkvs
A1_149 = "2cf1b8"

HKEY_CURRENT_USER\Software\Aasppapmmxkvs
A2_149 = "5cab7af2"

HKEY_CURRENT_USER\Software\Aasppapmmxkvs
A3_149 = "5da833fc"

HKEY_CURRENT_USER\Software\Aasppapmmxkvs
A4_149 = "5cab59d5"

HKEY_CURRENT_USER\Software\Aasppapmmxkvs
A1_150 = "ba851d5"

HKEY_CURRENT_USER\Software\Aasppapmmxkvs
A2_150 = "c618a7cd"

HKEY_CURRENT_USER\Software\Aasppapmmxkvs
A3_150 = "c71bd43f"

HKEY_CURRENT_USER\Software\Aasppapmmxkvs
A4_150 = "c618be16"

HKEY_CURRENT_USER\Software\Aasppapmmxkvs
A1_151 = "66b6ce12"

HKEY_CURRENT_USER\Software\Aasppapmmxkvs
A2_151 = "2f8639a2"

HKEY_CURRENT_USER\Software\Aasppapmmxkvs
A3_151 = "2e85487e"

HKEY_CURRENT_USER\Software\Aasppapmmxkvs
A4_151 = "2f862257"

HKEY_CURRENT_USER\Software\Aasppapmmxkvs
A1_152 = "6defde4"

HKEY_CURRENT_USER\Software\Aasppapmmxkvs
A2_152 = "98f39c47"

HKEY_CURRENT_USER\Software\Aasppapmmxkvs
A3_152 = "99fecb1"

HKEY_CURRENT_USER\Software\Aasppapmmxkvs
A4_152 = "98f38698"

HKEY_CURRENT_USER\Software\Aasppapmmxkvs
A1_153 = "364ec68"

HKEY_CURRENT_USER\Software\Aasppapmmxkvs
A2_153 = "26fc9a"

HKEY_CURRENT_USER\Software\Aasppapmmxkvs
A3_153 = "3638f"

HKEY_CURRENT_USER\Software\Aasppapmmxkvs
A4_153 = "26ead9"

HKEY_CURRENT_USER\Software\Aasppapmmxkvs
A1_154 = "13945b"

HKEY_CURRENT_USER\Software\Aasppapmmxkvs
A2_154 = "6bce5f9a"

HKEY_CURRENT_USER\Software\Aasppapmmxkvs
A3_154 = "6acd2533"

HKEY_CURRENT_USER\Software\Aasppapmmxkvs
A4_154 = "6bce4f1a"

HKEY_CURRENT_USER\Software\Aasppapmmxkvs
A1_155 = "b9cf4c16"

HKEY_CURRENT_USER\Software\Aasppapmmxkvs
A2_155 = "d53ba468"

HKEY_CURRENT_USER\Software\Aasppapmmxkvs
A3_155 = "d438d972"

HKEY_CURRENT_USER\Software\Aasppapmmxkvs
A4_155 = "d53bb35b"

HKEY_CURRENT_USER\Software\Aasppapmmxkvs
A1_156 = "6fa346d1"

HKEY_CURRENT_USER\Software\Aasppapmmxkvs
A2_156 = "3ea9d3f"

HKEY_CURRENT_USER\Software\Aasppapmmxkvs
A3_156 = "3faa7db5"

HKEY_CURRENT_USER\Software\Aasppapmmxkvs
A4_156 = "3ea9179c"

HKEY_CURRENT_USER\Software\Aasppapmmxkvs
A1_157 = "384f39"

HKEY_CURRENT_USER\Software\Aasppapmmxkvs
A2_157 = "a81665fa"

HKEY_CURRENT_USER\Software\Aasppapmmxkvs
A3_157 = "a91511f4"

HKEY_CURRENT_USER\Software\Aasppapmmxkvs
A4_157 = "a8167bdd"

HKEY_CURRENT_USER\Software\Aasppapmmxkvs
A1_158 = "47b33ada"

HKEY_CURRENT_USER\Software\Aasppapmmxkvs
A2_158 = "1183c3cf"

HKEY_CURRENT_USER\Software\Aasppapmmxkvs
A3_158 = "188a37"

HKEY_CURRENT_USER\Software\Aasppapmmxkvs
A4_158 = "1183e1e"

HKEY_CURRENT_USER\Software\Aasppapmmxkvs
A1_159 = "6ab6e6"

HKEY_CURRENT_USER\Software\Aasppapmmxkvs
A2_159 = "7af1648"

HKEY_CURRENT_USER\Software\Aasppapmmxkvs
A3_159 = "7bf22e76"

HKEY_CURRENT_USER\Software\Aasppapmmxkvs
A4_159 = "7af1445f"

HKEY_CURRENT_USER\Software\Aasppapmmxkvs
A1_160 = "a34583f9"

HKEY_CURRENT_USER\Software\Aasppapmmxkvs
A2_160 = "e45ebdd"

HKEY_CURRENT_USER\Software\Aasppapmmxkvs
A3_160 = "e55dc289"

HKEY_CURRENT_USER\Software\Aasppapmmxkvs
A4_160 = "e45ea8a"

HKEY_CURRENT_USER\Software\Aasppapmmxkvs
A1_161 = "d96c4caa"

HKEY_CURRENT_USER\Software\Aasppapmmxkvs
A2_161 = "4dcc29f8"

HKEY_CURRENT_USER\Software\Aasppapmmxkvs
A3_161 = "4ccf66c8"

HKEY_CURRENT_USER\Software\Aasppapmmxkvs
A4_161 = "4dccce1"

HKEY_CURRENT_USER\Software\Aasppapmmxkvs
A1_162 = "939f7df6"

HKEY_CURRENT_USER\Software\Aasppapmmxkvs
A2_162 = "b7396ead"

HKEY_CURRENT_USER\Software\Aasppapmmxkvs
A3_162 = "b63a1bb"

HKEY_CURRENT_USER\Software\Aasppapmmxkvs
A4_162 = "b7397122"

HKEY_CURRENT_USER\Software\Aasppapmmxkvs
A1_163 = "3fff8a33"

HKEY_CURRENT_USER\Software\Aasppapmmxkvs
A2_163 = "2a6f614"

HKEY_CURRENT_USER\Software\Aasppapmmxkvs
A3_163 = "21a5bf4a"

HKEY_CURRENT_USER\Software\Aasppapmmxkvs
A4_163 = "2a6d563"

HKEY_CURRENT_USER\Software\Aasppapmmxkvs
A1_164 = "65a989ea"

HKEY_CURRENT_USER\Software\Aasppapmmxkvs
A2_164 = "8a142772"

HKEY_CURRENT_USER\Software\Aasppapmmxkvs
A3_164 = "8b17538d"

HKEY_CURRENT_USER\Software\Aasppapmmxkvs
A4_164 = "8a1439a4"

HKEY_CURRENT_USER\Software\Aasppapmmxkvs
A1_165 = "ca351c59"

HKEY_CURRENT_USER\Software\Aasppapmmxkvs
A2_165 = "f3818ee"

HKEY_CURRENT_USER\Software\Aasppapmmxkvs
A3_165 = "f282f7cc"

HKEY_CURRENT_USER\Software\Aasppapmmxkvs
A4_165 = "f3819de5"

HKEY_CURRENT_USER\Software\Aasppapmmxkvs
A1_166 = "9eb4e71"

HKEY_CURRENT_USER\Software\Aasppapmmxkvs
A2_166 = "5cef2159"

HKEY_CURRENT_USER\Software\Aasppapmmxkvs
A3_166 = "5dec68f"

HKEY_CURRENT_USER\Software\Aasppapmmxkvs
A4_166 = "5cef226"

HKEY_CURRENT_USER\Software\Aasppapmmxkvs
A1_167 = "395d629"

HKEY_CURRENT_USER\Software\Aasppapmmxkvs
A2_167 = "c65c7c78"

HKEY_CURRENT_USER\Software\Aasppapmmxkvs
A3_167 = "c75fc4e"

HKEY_CURRENT_USER\Software\Aasppapmmxkvs
A4_167 = "c65c6667"

HKEY_CURRENT_USER\Software\Aasppapmmxkvs
A1_168 = "6a6dbbf5"

HKEY_CURRENT_USER\Software\Aasppapmmxkvs
A2_168 = "2fc9ddc7"

HKEY_CURRENT_USER\Software\Aasppapmmxkvs
A3_168 = "2ecaa81"

HKEY_CURRENT_USER\Software\Aasppapmmxkvs
A4_168 = "2fc9caa8"

HKEY_CURRENT_USER\Software\Aasppapmmxkvs
A1_169 = "5c8451bf"

HKEY_CURRENT_USER\Software\Aasppapmmxkvs
A2_169 = "993735d9"

HKEY_CURRENT_USER\Software\Aasppapmmxkvs
A3_169 = "983444c"

HKEY_CURRENT_USER\Software\Aasppapmmxkvs
A4_169 = "99372ee9"

HKEY_CURRENT_USER\Software\Aasppapmmxkvs
A1_170 = "d79c8f6c"

HKEY_CURRENT_USER\Software\Aasppapmmxkvs
A2_170 = "2a48f51"

HKEY_CURRENT_USER\Software\Aasppapmmxkvs
A3_170 = "3a7f93"

HKEY_CURRENT_USER\Software\Aasppapmmxkvs
A4_170 = "2a4932a"

HKEY_CURRENT_USER\Software\Aasppapmmxkvs
A1_171 = "13d7d6"

HKEY_CURRENT_USER\Software\Aasppapmmxkvs
A2_171 = "6c11d73c"

HKEY_CURRENT_USER\Software\Aasppapmmxkvs
A3_171 = "6d129d42"

HKEY_CURRENT_USER\Software\Aasppapmmxkvs
A4_171 = "6c11f76b"

HKEY_LOCAL_MACHINE\SOFTWARE\Classes\
comfile
NeverShowExt = "1"

HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\
Services\SharedAccess\Parameters\
FirewallPolicy\StandardProfile\AuthorizedApplications\
List
%User Temp%\uuawoi.exe = "%User Temp%\uuawoi.exe:*:Enabled:ipsec"

ワームは、以下のレジストリ値を変更します。

HKEY_CURRENT_USER\Software\Microsoft\
Windows\CurrentVersion\Explorer\
Advanced
Hidden = "2"

(註：変更前の上記レジストリ値は、「2」となります。)

HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\
Security Center
AntiVirusOverride = "1"

HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\
Security Center
AntiVirusDisableNotify = "1"

HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\
Security Center
FirewallDisableNotify = "1"

HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\
Security Center
FirewallOverride = "1"

HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\
Security Center
UpdatesDisableNotify = "1"

HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\
Windows\CurrentVersion\Explorer\
Advanced\Folder\SuperHidden
ValueName = "ShowSuperHiden"

(註：変更前の上記レジストリ値は、「ShowSuperHidden」となります。)

HKEY_CURRENT_USER\Control Panel\Desktop
SCRNSAVE.EXE = "%Windows%\pchealth\helpctr\binaries\HelpHost.com"

(註：変更前の上記レジストリ値は、「%Windows%\system32\logon.scr」となります。)

HKEY_CURRENT_USER\Control Panel\Desktop
ScreenSaveTimeOut = "30"

(註：変更前の上記レジストリ値は、「600」となります。)

HKEY_CURRENT_USER\Control Panel\Desktop
AutoEndTasks = "1"

(註：変更前の上記レジストリ値は、「0」となります。)

ワームは、以下のレジストリ値を追加し、タスクマネージャやレジストリエディタ、フォルダオプションを無効にします。

HKEY_CURRENT_USER\Software\Microsoft\
Windows\CurrentVersion\Policies\
system
DisableTaskMgr = "1"

HKEY_CURRENT_USER\Software\Microsoft\
Windows\CurrentVersion\Policies\
system
DisableRegistryTools = "1"

ワームは、以下のレジストリキーを削除します。

HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\
Control\SafeBoot\Minimal\
AppMgmt

HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\
Control\SafeBoot\Minimal\
Base

HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\
Control\SafeBoot\Minimal\
Boot Bus Extender

HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\
Control\SafeBoot\Minimal\
Boot file system

HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\
Control\SafeBoot\Minimal\
CryptSvc

HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\
Control\SafeBoot\Minimal\
DcomLaunch

HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\
Control\SafeBoot\Minimal\
dmadmin

HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\
Control\SafeBoot\Minimal\
dmboot.sys

HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\
Control\SafeBoot\Minimal\
dmio.sys

HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\
Control\SafeBoot\Minimal\
dmload.sys

HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\
Control\SafeBoot\Minimal\
dmserver

HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\
Control\SafeBoot\Minimal\
EventLog

HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\
Control\SafeBoot\Minimal\
File system

HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\
Control\SafeBoot\Minimal\
Filter

HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\
Control\SafeBoot\Minimal\
HelpSvc

HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\
Control\SafeBoot\Minimal\
Netlogon

HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\
Control\SafeBoot\Minimal\
PCI Configuration

HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\
Control\SafeBoot\Minimal\
PlugPlay

HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\
Control\SafeBoot\Minimal\
PNP Filter

HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\
Control\SafeBoot\Minimal\
Primary disk

HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\
Control\SafeBoot\Minimal\
RpcSs

HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\
Control\SafeBoot\Minimal\
SCSI Class

HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\
Control\SafeBoot\Minimal\
sermouse.sys

HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\
Control\SafeBoot\Minimal\
sr.sys

HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\
Control\SafeBoot\Minimal\
SRService

HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\
Control\SafeBoot\Minimal\
System Bus Extender

HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\
Control\SafeBoot\Minimal\
vga.sys

HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\
Control\SafeBoot\Minimal\
vgasave.sys

HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\
Control\SafeBoot\Minimal\
WinMgmt

HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\
Control\SafeBoot\Minimal\
{36FC9E60-C465-11CF-8056-444553540000}

HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\
Control\SafeBoot\Minimal\
{4D36E965-E325-11CE-BFC1-08002BE10318}

HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\
Control\SafeBoot\Minimal\
{4D36E967-E325-11CE-BFC1-08002BE10318}

HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\
Control\SafeBoot\Minimal\
{4D36E969-E325-11CE-BFC1-08002BE10318}

HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\
Control\SafeBoot\Minimal\
{4D36E96A-E325-11CE-BFC1-08002BE10318}

HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\
Control\SafeBoot\Minimal\
{4D36E96B-E325-11CE-BFC1-08002BE10318}

HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\
Control\SafeBoot\Minimal\
{4D36E96F-E325-11CE-BFC1-08002BE10318}

HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\
Control\SafeBoot\Minimal\
{4D36E977-E325-11CE-BFC1-08002BE10318}

HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\
Control\SafeBoot\Minimal\
{4D36E97B-E325-11CE-BFC1-08002BE10318}

HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\
Control\SafeBoot\Minimal\
{4D36E97D-E325-11CE-BFC1-08002BE10318}

HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\
Control\SafeBoot\Minimal\
{4D36E980-E325-11CE-BFC1-08002BE10318}

HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\
Control\SafeBoot\Minimal\
{71A27CDD-812A-11D0-BEC7-08002BE2092F}

HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\
Control\SafeBoot\Minimal\
{745A17A0-74D3-11D0-B6FE-00A0C90F57DA}

HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\
Control\SafeBoot\Minimal

HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\
Control\SafeBoot\Network\
AFD

HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\
Control\SafeBoot\Network\
AppMgmt

HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\
Control\SafeBoot\Network\
Base

HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\
Control\SafeBoot\Network\
Boot Bus Extender

HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\
Control\SafeBoot\Network\
Boot file system

HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\
Control\SafeBoot\Network\
Browser

HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\
Control\SafeBoot\Network\
CryptSvc

HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\
Control\SafeBoot\Network\
DcomLaunch

HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\
Control\SafeBoot\Network\
Dhcp

HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\
Control\SafeBoot\Network\
dmadmin

HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\
Control\SafeBoot\Network\
dmboot.sys

HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\
Control\SafeBoot\Network\
dmio.sys

HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\
Control\SafeBoot\Network\
dmload.sys

HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\
Control\SafeBoot\Network\
dmserver

HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\
Control\SafeBoot\Network\
DnsCache

HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\
Control\SafeBoot\Network\
EventLog

HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\
Control\SafeBoot\Network\
File system

HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\
Control\SafeBoot\Network\
Filter

HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\
Control\SafeBoot\Network\
HelpSvc

HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\
Control\SafeBoot\Network\
ip6fw.sys

HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\
Control\SafeBoot\Network\
ipnat.sys

HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\
Control\SafeBoot\Network\
LanmanServer

HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\
Control\SafeBoot\Network\
LanmanWorkstation

HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\
Control\SafeBoot\Network\
LmHosts

HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\
Control\SafeBoot\Network\
Messenger

HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\
Control\SafeBoot\Network\
NDIS

HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\
Control\SafeBoot\Network\
NDIS Wrapper

HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\
Control\SafeBoot\Network\
Ndisuio

HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\
Control\SafeBoot\Network\
NetBIOS

HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\
Control\SafeBoot\Network\
NetBIOSGroup

HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\
Control\SafeBoot\Network\
NetBT

HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\
Control\SafeBoot\Network\
NetDDEGroup

HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\
Control\SafeBoot\Network\
Netlogon

HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\
Control\SafeBoot\Network\
NetMan

HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\
Control\SafeBoot\Network\
Network

HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\
Control\SafeBoot\Network\
NetworkProvider

HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\
Control\SafeBoot\Network\
NtLmSsp

HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\
Control\SafeBoot\Network\
PCI Configuration

HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\
Control\SafeBoot\Network\
PlugPlay

HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\
Control\SafeBoot\Network\
PNP Filter

HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\
Control\SafeBoot\Network\
PNP_TDI

HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\
Control\SafeBoot\Network\
Primary disk

HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\
Control\SafeBoot\Network\
rdpcdd.sys

HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\
Control\SafeBoot\Network\
rdpdd.sys

HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\
Control\SafeBoot\Network\
rdpwd.sys

HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\
Control\SafeBoot\Network\
rdsessmgr

HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\
Control\SafeBoot\Network\
RpcSs

HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\
Control\SafeBoot\Network\
SCSI Class

HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\
Control\SafeBoot\Network\
sermouse.sys

HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\
Control\SafeBoot\Network\
SharedAccess

HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\
Control\SafeBoot\Network\
sr.sys

HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\
Control\SafeBoot\Network\
SRService

HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\
Control\SafeBoot\Network\
Streams Drivers

HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\
Control\SafeBoot\Network\
System Bus Extender

HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\
Control\SafeBoot\Network\
Tcpip

HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\
Control\SafeBoot\Network\
TDI

HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\
Control\SafeBoot\Network\
tdpipe.sys

HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\
Control\SafeBoot\Network\
tdtcp.sys

HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\
Control\SafeBoot\Network\
termservice

HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\
Control\SafeBoot\Network\
vga.sys

HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\
Control\SafeBoot\Network\
vgasave.sys

HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\
Control\SafeBoot\Network\
WinMgmt

HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\
Control\SafeBoot\Network\
WZCSVC

HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\
Control\SafeBoot\Network\
{36FC9E60-C465-11CF-8056-444553540000}

HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\
Control\SafeBoot\Network\
{4D36E965-E325-11CE-BFC1-08002BE10318}

HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\
Control\SafeBoot\Network\
{4D36E967-E325-11CE-BFC1-08002BE10318}

HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\
Control\SafeBoot\Network\
{4D36E969-E325-11CE-BFC1-08002BE10318}

HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\
Control\SafeBoot\Network\
{4D36E96A-E325-11CE-BFC1-08002BE10318}

HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\
Control\SafeBoot\Network\
{4D36E96B-E325-11CE-BFC1-08002BE10318}

HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\
Control\SafeBoot\Network\
{4D36E96F-E325-11CE-BFC1-08002BE10318}

HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\
Control\SafeBoot\Network\
{4D36E972-E325-11CE-BFC1-08002BE10318}

HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\
Control\SafeBoot\Network\
{4D36E973-E325-11CE-BFC1-08002BE10318}

HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\
Control\SafeBoot\Network\
{4D36E974-E325-11CE-BFC1-08002BE10318}

HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\
Control\SafeBoot\Network\
{4D36E975-E325-11CE-BFC1-08002BE10318}

HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\
Control\SafeBoot\Network\
{4D36E977-E325-11CE-BFC1-08002BE10318}

HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\
Control\SafeBoot\Network\
{4D36E97B-E325-11CE-BFC1-08002BE10318}

HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\
Control\SafeBoot\Network\
{4D36E97D-E325-11CE-BFC1-08002BE10318}

HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\
Control\SafeBoot\Network\
{4D36E980-E325-11CE-BFC1-08002BE10318}

HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\
Control\SafeBoot\Network\
{71A27CDD-812A-11D0-BEC7-08002BE2092F}

HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\
Control\SafeBoot\Network\
{745A17A0-74D3-11D0-B6FE-00A0C90F57DA}

HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\
Control\SafeBoot\Network

作成活動

ワームは、以下のファイルを作成します。

  • %User Temp%\epxxjs.exe
  • %System%\drivers\nkoin.sys
  • %System%\dllcache\autorun.inf
  • %Windows%\Cursors\Boom.vbs
  • B:\f230
  • %System Root%\f637
  • E:\fa3e
  • E:\fe45
  • F:\1024d
  • G:\10654
  • H:\10a8a
  • I:\10edf
  • J:\11383
  • K:\1178a
  • L:\11b91
  • M:\11fd7
  • N:\123de
  • O:\127e6
  • P:\12c1c
  • Q:\13023
  • R:\1342a
  • %User Temp%\winpins.exe
  • %User Temp%\winqxfd.exe
  • S:\13831
  • %User Temp%\wintrxgl.exe
  • T:\13c39
  • U:\1407e
  • %User Temp%\winbueeof.exe
  • %User Temp%\ajvu.exe
  • V:\14495
  • %User Temp%\opdy.exe
  • %User Temp%\uuawoi.exe
  • W:\148cb
  • X:\14ed6
  • Y:\1530c
  • %User Temp%\winlkic.exe
  • %User Temp%\winkriell.exe
  • %User Temp%\winsqso.exe
  • %System%\dllcache\tskmgr.exe
  • %Windows%\Fonts\wav.wav
  • %User Temp%\fkjcc.exe

(註：%User Temp%フォルダはWindowsの種類とインストール時の設定などにより異なります。標準設定では、Windows 2000、XP および Server 2003 の場合、"C:\Documents and Settings\＜ユーザー名＞\Local Settings\Temp"、Windows Vista および 7 の場合、"C:\Users\＜ユーザ名＞\AppData\Local\Temp" です。. %System%フォルダはWindowsの種類とインストール時の設定などにより異なります。標準設定では "C:\Windows\System32" です。. %Windows%フォルダはWindowsの種類とインストール時の設定などにより異なります。標準設定では、"C:\Windows" です。. %System Root%フォルダは、標準設定では "C:" です。また、オペレーティングシステムが存在する場所です。)

その他

ワームは、以下の不正なWebサイトにアクセスします。

  • http://www.{BLOCKED}s.com.br/images/logo.gif?ba28=476560
  • http://zanzoul.{BLOCKED}a.com.sy/logo.gif?dd9e=283670
  • http://{BLOCKED}rystal.com/logo.gif?131b9=782650
  • http://{BLOCKED}meja.fr/img/banner.gif?1334f=314684
  • http://{BLOCKED}designs.com/logo.gif?134d6=632496
  • http://{BLOCKED}a.nl/banner.gif?136da=636624
  • http://{BLOCKED}osonline.com/logo.gif?13cb6=567546
  • http://scglobal.{BLOCKED}m.ph/logo.gif?14169=82281
  • http://www.{BLOCKED}ideo.com.br/logo.gif?143f9=331748
  • http://thecleanergroup.{BLOCKED}m.br/logo.gif?144f3=831870
  • http://{BLOCKED}ielektrik.com/logo.gif?152fd=260343
  • http://{BLOCKED}r.net/logo.gif?15493=87187
  • http://www.{BLOCKED}s.com.br/images/logo.gif?1582d=616763

このウイルス情報は、自動解析システムにより作成されました。

  対応方法

対応検索エンジン: 9.200

手順 1

Windows XP、Windows Vista および Windows 7 のユーザは、コンピュータからマルウェアもしくはアドウェア等を完全に削除するために、ウイルス検索の実行前には必ず「システムの復元」を無効にしてください。

手順 2

レジストリエディタおよびタスクマネージャ、フォルダオプションの機能を有効にします。

[ 詳細 ]
この手順により、このワームが無効にした他のアプリケーションまたはプログラムの機能も有効になります。

手順 3

このレジストリキーを削除します。

[ 詳細 ]

警告：レジストリはWindowsの構成情報が格納されているデータベースであり、レジストリの編集内容に問題があると、システムが正常に動作しなくなる場合があります。
レジストリの編集はお客様の責任で行っていただくようお願いいたします。弊社ではレジストリの編集による如何なる問題に対しても補償いたしかねます。
レジストリの編集前にこちらをご参照ください。

  • In HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\policies
    • system
  • In HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center
    • Svc
  • In HKEY_CURRENT_USER\Software\Aasppapmmxkvs
    • -993627007
  • In HKEY_CURRENT_USER\Software\VB and VBA Program Settings version
    • trial
  • In HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Image File Execution Options
    • ctfmon.exe
  • In HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Image File Execution Options
    • taskmgr.exe
  • In HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Image File Execution Options
    • boot.exe
  • In HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Image File Execution Options
    • autorun.exe
  • In HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Image File Execution Options
    • autoruns.exe
  • In HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Image File Execution Options
    • auto.exe
  • In HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Image File Execution Options
    • msconfig.exe
  • In HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Image File Execution Options
    • procexp.exe
  • In HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion
    • RunOnce
  • In HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer
    • Run
  • In HKEY_CURRENT_USER\Software\Policies\Microsoft\Windows\System\Scripts\Logoff
    • 0
  • In HKEY_CURRENT_USER\Software\Policies\Microsoft\Windows\System\Scripts\Logoff
    • 0
  • In HKEY_LOCAL_MACHINE\Software\Policies\Microsoft\Windows\System\Scripts\Shutdown
    • 0
  • In HKEY_LOCAL_MACHINE\Software\Policies\Microsoft\Windows\System\Scripts\Shutdown
    • 0
  • In HKEY_LOCAL_MACHINE\Software\Policies\Microsoft\Windows\System\Scripts\Startup
    • 0
  • In HKEY_LOCAL_MACHINE\Software\Policies\Microsoft\Windows\System\Scripts\Startup
    • 0

手順 4

このレジストリ値を削除します。

[ 詳細 ]

警告：レジストリはWindowsの構成情報が格納されているデータベースであり、レジストリの編集内容に問題があると、システムが正常に動作しなくなる場合があります。
レジストリの編集はお客様の責任で行っていただくようお願いいたします。弊社ではレジストリの編集による如何なる問題に対しても補償いたしかねます。
レジストリの編集前にこちらをご参照ください。

  • In HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center
    • UacDisableNotify = "1"
  • In HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Svc
    • AntiVirusOverride = "1"
  • In HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Svc
    • AntiVirusDisableNotify = "1"
  • In HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Svc
    • FirewallDisableNotify = "1"
  • In HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Svc
    • FirewallOverride = "1"
  • In HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Svc
    • UpdatesDisableNotify = "1"
  • In HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Svc
    • UacDisableNotify = "1"
  • In HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Internet Settings
    • GlobalUserOffline = "0"
  • In HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\system
    • EnableLUA = "0"
  • In HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Services\SharedAccess\Parameters\FirewallPolicy\StandardProfile\AuthorizedApplications\List
    • {malware path and file name} = "{malware path and file name}:*:enabled:ipsec"
  • In HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Services\SharedAccess\Parameters\FirewallPolicy\StandardProfile
    • EnableFirewall = "0"
  • In HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Services\SharedAccess\Parameters\FirewallPolicy\StandardProfile
    • DoNotAllowExceptions = "0"
  • In HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Services\SharedAccess\Parameters\FirewallPolicy\StandardProfile
    • DisableNotifications = "1"
  • In HKEY_CURRENT_USER\Software\Aasppapmmxkvs\-993627007
    • 1768776769 = "93"
  • In HKEY_CURRENT_USER\Software\Aasppapmmxkvs\-993627007
    • -757413758 = "0"
  • In HKEY_CURRENT_USER\Software\Aasppapmmxkvs\-993627007
    • 1011363011 = "0"
  • In HKEY_CURRENT_USER\Software\Aasppapmmxkvs\-993627007
    • -1514827516 = "23"
  • In HKEY_CURRENT_USER\Software\Aasppapmmxkvs\-993627007
    • 253949253 = "1a1"
  • In HKEY_CURRENT_USER\Software\Aasppapmmxkvs\-993627007
    • 2022726022 = "{random characters}"
  • In HKEY_CURRENT_USER\Software\Aasppapmmxkvs\-993627007
    • -503464505 = "{random characters}"
  • In HKEY_CURRENT_USER\Software\Aasppapmmxkvs
    • A1_0 = "cc96283a"
  • In HKEY_CURRENT_USER\Software\Aasppapmmxkvs
    • A2_0 = "158d"
  • In HKEY_CURRENT_USER\Software\Aasppapmmxkvs
    • A3_0 = "136a29"
  • In HKEY_CURRENT_USER\Software\Aasppapmmxkvs
    • A4_0 = "0"
  • In HKEY_CURRENT_USER\Software\Aasppapmmxkvs
    • A1_1 = "274b5a28"
  • In HKEY_CURRENT_USER\Software\Aasppapmmxkvs
    • A2_1 = "696d71cc"
  • In HKEY_CURRENT_USER\Software\Aasppapmmxkvs
    • A3_1 = "686ee68"
  • In HKEY_CURRENT_USER\Software\Aasppapmmxkvs
    • A4_1 = "696d6441"
  • In HKEY_CURRENT_USER\Software\Aasppapmmxkvs
    • A1_2 = "966c8ca7"
  • In HKEY_CURRENT_USER\Software\Aasppapmmxkvs
    • A2_2 = "d2daddf"
  • In HKEY_CURRENT_USER\Software\Aasppapmmxkvs
    • A3_2 = "d3d9a2ab"
  • In HKEY_CURRENT_USER\Software\Aasppapmmxkvs
    • A4_2 = "d2dac882"
  • In HKEY_CURRENT_USER\Software\Aasppapmmxkvs
    • A1_3 = "2b12cf3"
  • In HKEY_CURRENT_USER\Software\Aasppapmmxkvs
    • A2_3 = "3c48394e"
  • In HKEY_CURRENT_USER\Software\Aasppapmmxkvs
    • A3_3 = "3d4b46ea"
  • In HKEY_CURRENT_USER\Software\Aasppapmmxkvs
    • A4_3 = "3c482cc3"
  • In HKEY_CURRENT_USER\Software\Aasppapmmxkvs
    • A1_4 = "41c4c3fd"
  • In HKEY_CURRENT_USER\Software\Aasppapmmxkvs
    • A2_4 = "a5b58489"
  • In HKEY_CURRENT_USER\Software\Aasppapmmxkvs
    • A3_4 = "a4b6fb2d"
  • In HKEY_CURRENT_USER\Software\Aasppapmmxkvs
    • A4_4 = "a5b5914"
  • In HKEY_CURRENT_USER\Software\Aasppapmmxkvs
    • A1_5 = "311bc98d"
  • In HKEY_CURRENT_USER\Software\Aasppapmmxkvs
    • A2_5 = "f22ec8"
  • In HKEY_CURRENT_USER\Software\Aasppapmmxkvs
    • A3_5 = "e219f6c"
  • In HKEY_CURRENT_USER\Software\Aasppapmmxkvs
    • A4_5 = "f22f545"
  • In HKEY_CURRENT_USER\Software\Aasppapmmxkvs
    • A1_6 = "2c2cd"
  • In HKEY_CURRENT_USER\Software\Aasppapmmxkvs
    • A2_6 = "7894cb"
  • In HKEY_CURRENT_USER\Software\Aasppapmmxkvs
    • A3_6 = "799333af"
  • In HKEY_CURRENT_USER\Software\Aasppapmmxkvs
    • A4_6 = "7895986"
  • In HKEY_CURRENT_USER\Software\Aasppapmmxkvs
    • A1_7 = "9deeef94"
  • In HKEY_CURRENT_USER\Software\Aasppapmmxkvs
    • A2_7 = "e1fda84a"
  • In HKEY_CURRENT_USER\Software\Aasppapmmxkvs
    • A3_7 = "efed7ee"
  • In HKEY_CURRENT_USER\Software\Aasppapmmxkvs
    • A4_7 = "e1fdbdc7"
  • In HKEY_CURRENT_USER\Software\Aasppapmmxkvs
    • A1_8 = "b2e23ad"
  • In HKEY_CURRENT_USER\Software\Aasppapmmxkvs
    • A2_8 = "4b6b3785"
  • In HKEY_CURRENT_USER\Software\Aasppapmmxkvs
    • A3_8 = "4a684821"
  • In HKEY_CURRENT_USER\Software\Aasppapmmxkvs
    • A4_8 = "4b6b228"
  • In HKEY_CURRENT_USER\Software\Aasppapmmxkvs
    • A1_9 = "1f34131"
  • In HKEY_CURRENT_USER\Software\Aasppapmmxkvs
    • A2_9 = "b4d893c4"
  • In HKEY_CURRENT_USER\Software\Aasppapmmxkvs
    • A3_9 = "b5dbec6"
  • In HKEY_CURRENT_USER\Software\Aasppapmmxkvs
    • A4_9 = "b4d88649"
  • In HKEY_CURRENT_USER\Software\Aasppapmmxkvs
    • A1_10 = "ae7fae37"
  • In HKEY_CURRENT_USER\Software\Aasppapmmxkvs
    • A2_10 = "1e45f5e2"
  • In HKEY_CURRENT_USER\Software\Aasppapmmxkvs
    • A3_10 = "1f468a3"
  • In HKEY_CURRENT_USER\Software\Aasppapmmxkvs
    • A4_10 = "1e45ea8a"
  • In HKEY_CURRENT_USER\Software\Aasppapmmxkvs
    • A1_11 = "f7edf9a"
  • In HKEY_CURRENT_USER\Software\Aasppapmmxkvs
    • A2_11 = "87b3548f"
  • In HKEY_CURRENT_USER\Software\Aasppapmmxkvs
    • A3_11 = "86b24e2"
  • In HKEY_CURRENT_USER\Software\Aasppapmmxkvs
    • A4_11 = "87b34ecb"
  • In HKEY_CURRENT_USER\Software\Aasppapmmxkvs
    • A1_12 = "5c75c941"
  • In HKEY_CURRENT_USER\Software\Aasppapmmxkvs
    • A2_12 = "f12a5"
  • In HKEY_CURRENT_USER\Software\Aasppapmmxkvs
    • A3_12 = "f23d925"
  • In HKEY_CURRENT_USER\Software\Aasppapmmxkvs
    • A4_12 = "f12b3c"
  • In HKEY_CURRENT_USER\Software\Aasppapmmxkvs
    • A1_13 = "f1ea3a84"
  • In HKEY_CURRENT_USER\Software\Aasppapmmxkvs
    • A2_13 = "5a8ede9"
  • In HKEY_CURRENT_USER\Software\Aasppapmmxkvs
    • A3_13 = "5b8d7d64"
  • In HKEY_CURRENT_USER\Software\Aasppapmmxkvs
    • A4_13 = "5a8e174d"
  • In HKEY_CURRENT_USER\Software\Aasppapmmxkvs
    • A1_14 = "4e853d57"
  • In HKEY_CURRENT_USER\Software\Aasppapmmxkvs
    • A2_14 = "c3fb6e7"
  • In HKEY_CURRENT_USER\Software\Aasppapmmxkvs
    • A3_14 = "c2f811a7"
  • In HKEY_CURRENT_USER\Software\Aasppapmmxkvs
    • A4_14 = "c3fb7b8e"
  • In HKEY_CURRENT_USER\Software\Aasppapmmxkvs
    • A1_15 = "6d42f8fd"
  • In HKEY_CURRENT_USER\Software\Aasppapmmxkvs
    • A2_15 = "2d68c11"
  • In HKEY_CURRENT_USER\Software\Aasppapmmxkvs
    • A3_15 = "2c6bb5e6"
  • In HKEY_CURRENT_USER\Software\Aasppapmmxkvs
    • A4_15 = "2d68dfcf"
  • In HKEY_CURRENT_USER\Software\Aasppapmmxkvs
    • A1_16 = "f4e515b"
  • In HKEY_CURRENT_USER\Software\Aasppapmmxkvs
    • A2_16 = "96d65ade"
  • In HKEY_CURRENT_USER\Software\Aasppapmmxkvs
    • A3_16 = "97d52e39"
  • In HKEY_CURRENT_USER\Software\Aasppapmmxkvs
    • A4_16 = "96d6441"
  • In HKEY_CURRENT_USER\Software\Aasppapmmxkvs
    • A1_17 = "23ae96"
  • In HKEY_CURRENT_USER\Software\Aasppapmmxkvs
    • A2_17 = "43b4d8"
  • In HKEY_CURRENT_USER\Software\Aasppapmmxkvs
    • A3_17 = "14c278"
  • In HKEY_CURRENT_USER\Software\Aasppapmmxkvs
    • A4_17 = "43a851"
  • In HKEY_CURRENT_USER\Software\Aasppapmmxkvs
    • A1_18 = "9f891cbe"
  • In HKEY_CURRENT_USER\Software\Aasppapmmxkvs
    • A2_18 = "69b11127"
  • In HKEY_CURRENT_USER\Software\Aasppapmmxkvs
    • A3_18 = "68b266bb"
  • In HKEY_CURRENT_USER\Software\Aasppapmmxkvs
    • A4_18 = "69b1c92"
  • In HKEY_CURRENT_USER\Software\Aasppapmmxkvs
    • A1_19 = "17b96186"
  • In HKEY_CURRENT_USER\Software\Aasppapmmxkvs
    • A2_19 = "d31e56bb"
  • In HKEY_CURRENT_USER\Software\Aasppapmmxkvs
    • A3_19 = "d21d1afa"
  • In HKEY_CURRENT_USER\Software\Aasppapmmxkvs
    • A4_19 = "d31e7d3"
  • In HKEY_CURRENT_USER\Software\Aasppapmmxkvs
    • A1_20 = "f7c32c3d"
  • In HKEY_CURRENT_USER\Software\Aasppapmmxkvs
    • A2_20 = "3c8bcc63"
  • In HKEY_CURRENT_USER\Software\Aasppapmmxkvs
    • A3_20 = "3d88bf3d"
  • In HKEY_CURRENT_USER\Software\Aasppapmmxkvs
    • A4_20 = "3c8bd514"
  • In HKEY_CURRENT_USER\Software\Aasppapmmxkvs
    • A1_21 = "95fa4b6b"
  • In HKEY_CURRENT_USER\Software\Aasppapmmxkvs
    • A2_21 = "a5f91c9f"
  • In HKEY_CURRENT_USER\Software\Aasppapmmxkvs
    • A3_21 = "a4fa537c"
  • In HKEY_CURRENT_USER\Software\Aasppapmmxkvs
    • A4_21 = "a5f93955"
  • In HKEY_CURRENT_USER\Software\Aasppapmmxkvs
    • A1_22 = "d4c64dc4"
  • In HKEY_CURRENT_USER\Software\Aasppapmmxkvs
    • A2_22 = "f66bda1"
  • In HKEY_CURRENT_USER\Software\Aasppapmmxkvs
    • A3_22 = "e65f7bf"
  • In HKEY_CURRENT_USER\Software\Aasppapmmxkvs
    • A4_22 = "f669d96"
  • In HKEY_CURRENT_USER\Software\Aasppapmmxkvs
    • A1_23 = "3db27b81"
  • In HKEY_CURRENT_USER\Software\Aasppapmmxkvs
    • A2_23 = "78d41c5"
  • In HKEY_CURRENT_USER\Software\Aasppapmmxkvs
    • A3_23 = "79d76bfe"
  • In HKEY_CURRENT_USER\Software\Aasppapmmxkvs
    • A4_23 = "78d41d7"
  • In HKEY_CURRENT_USER\Software\Aasppapmmxkvs
    • A1_24 = "2bcc9e4"
  • In HKEY_CURRENT_USER\Software\Aasppapmmxkvs
    • A2_24 = "e241719a"
  • In HKEY_CURRENT_USER\Software\Aasppapmmxkvs
    • A3_24 = "e342c31"
  • In HKEY_CURRENT_USER\Software\Aasppapmmxkvs
    • A4_24 = "e2416618"
  • In HKEY_CURRENT_USER\Software\Aasppapmmxkvs
    • A1_25 = "9a9db85"
  • In HKEY_CURRENT_USER\Software\Aasppapmmxkvs
    • A2_25 = "4baed4fa"
  • In HKEY_CURRENT_USER\Software\Aasppapmmxkvs
    • A3_25 = "4aada7"
  • In HKEY_CURRENT_USER\Software\Aasppapmmxkvs
    • A4_25 = "4baeca59"
  • In HKEY_CURRENT_USER\Software\Aasppapmmxkvs
    • A1_26 = "68833653"
  • In HKEY_CURRENT_USER\Software\Aasppapmmxkvs
    • A2_26 = "b51cf14"
  • In HKEY_CURRENT_USER\Software\Aasppapmmxkvs
    • A3_26 = "b41f44b3"
  • In HKEY_CURRENT_USER\Software\Aasppapmmxkvs
    • A4_26 = "b51c2e9a"
  • In HKEY_CURRENT_USER\Software\Aasppapmmxkvs
    • A1_27 = "3ef2fa84"
  • In HKEY_CURRENT_USER\Software\Aasppapmmxkvs
    • A2_27 = "1e898d5b"
  • In HKEY_CURRENT_USER\Software\Aasppapmmxkvs
    • A3_27 = "1f8af8f2"
  • In HKEY_CURRENT_USER\Software\Aasppapmmxkvs
    • A4_27 = "1e8992db"
  • In HKEY_CURRENT_USER\Software\Aasppapmmxkvs
    • A1_28 = "db7cd2dd"
  • In HKEY_CURRENT_USER\Software\Aasppapmmxkvs
    • A2_28 = "87f6d68f"
  • In HKEY_CURRENT_USER\Software\Aasppapmmxkvs
    • A3_28 = "86f59d35"
  • In HKEY_CURRENT_USER\Software\Aasppapmmxkvs
    • A4_28 = "87f6f71c"
  • In HKEY_CURRENT_USER\Software\Aasppapmmxkvs
    • A1_29 = "4e416f"
  • In HKEY_CURRENT_USER\Software\Aasppapmmxkvs
    • A2_29 = "f1644619"
  • In HKEY_CURRENT_USER\Software\Aasppapmmxkvs
    • A3_29 = "f673174"
  • In HKEY_CURRENT_USER\Software\Aasppapmmxkvs
    • A4_29 = "f1645b5d"
  • In HKEY_CURRENT_USER\Software\Aasppapmmxkvs
    • A1_30 = "da44fb57"
  • In HKEY_CURRENT_USER\Software\Aasppapmmxkvs
    • A2_30 = "5ad1a461"
  • In HKEY_CURRENT_USER\Software\Aasppapmmxkvs
    • A3_30 = "5bd2d5b7"
  • In HKEY_CURRENT_USER\Software\Aasppapmmxkvs
    • A4_30 = "5ad1bf9e"
  • In HKEY_CURRENT_USER\Software\Aasppapmmxkvs
    • A1_31 = "59464a8a"
  • In HKEY_CURRENT_USER\Software\Aasppapmmxkvs
    • A2_31 = "c43f615"
  • In HKEY_CURRENT_USER\Software\Aasppapmmxkvs
    • A3_31 = "c53c49f6"
  • In HKEY_CURRENT_USER\Software\Aasppapmmxkvs
    • A4_31 = "c43f23df"
  • In HKEY_CURRENT_USER\Software\Aasppapmmxkvs
    • A1_32 = "28ec3d71"
  • In HKEY_CURRENT_USER\Software\Aasppapmmxkvs
    • A2_32 = "2dac9fa5"
  • In HKEY_CURRENT_USER\Software\Aasppapmmxkvs
    • A3_32 = "2cafe29"
  • In HKEY_CURRENT_USER\Software\Aasppapmmxkvs
    • A4_32 = "2dac882"
  • In HKEY_CURRENT_USER\Software\Aasppapmmxkvs
    • A1_33 = "f5679e3d"
  • In HKEY_CURRENT_USER\Software\Aasppapmmxkvs
    • A2_33 = "9719f969"
  • In HKEY_CURRENT_USER\Software\Aasppapmmxkvs
    • A3_33 = "961a8648"
  • In HKEY_CURRENT_USER\Software\Aasppapmmxkvs
    • A4_33 = "9719ec61"
  • In HKEY_CURRENT_USER\Software\Aasppapmmxkvs
    • A1_34 = "e1dd31ec"
  • In HKEY_CURRENT_USER\Software\Aasppapmmxkvs
    • A2_34 = "87491e"
  • In HKEY_CURRENT_USER\Software\Aasppapmmxkvs
    • A3_34 = "1843a8b"
  • In HKEY_CURRENT_USER\Software\Aasppapmmxkvs
    • A4_34 = "875a2"
  • In HKEY_CURRENT_USER\Software\Aasppapmmxkvs
    • A1_35 = "3582dfaf"
  • In HKEY_CURRENT_USER\Software\Aasppapmmxkvs
    • A2_35 = "69f4afcf"
  • In HKEY_CURRENT_USER\Software\Aasppapmmxkvs
    • A3_35 = "68f7deca"
  • In HKEY_CURRENT_USER\Software\Aasppapmmxkvs
    • A4_35 = "69f4b4e3"
  • In HKEY_CURRENT_USER\Software\Aasppapmmxkvs
    • A1_36 = "cfa297d"
  • In HKEY_CURRENT_USER\Software\Aasppapmmxkvs
    • A2_36 = "d36238b7"
  • In HKEY_CURRENT_USER\Software\Aasppapmmxkvs
    • A3_36 = "d26173d"
  • In HKEY_CURRENT_USER\Software\Aasppapmmxkvs
    • A4_36 = "d3621924"
  • In HKEY_CURRENT_USER\Software\Aasppapmmxkvs
    • A1_37 = "a8641de"
  • In HKEY_CURRENT_USER\Software\Aasppapmmxkvs
    • A2_37 = "3ccf5d6e"
  • In HKEY_CURRENT_USER\Software\Aasppapmmxkvs
    • A3_37 = "3dcc174c"
  • In HKEY_CURRENT_USER\Software\Aasppapmmxkvs
    • A4_37 = "3ccf7d65"
  • In HKEY_CURRENT_USER\Software\Aasppapmmxkvs
    • A1_38 = "94c3bf6"
  • In HKEY_CURRENT_USER\Software\Aasppapmmxkvs
    • A2_38 = "a63cf8be"
  • In HKEY_CURRENT_USER\Software\Aasppapmmxkvs
    • A3_38 = "a73f8b8f"
  • In HKEY_CURRENT_USER\Software\Aasppapmmxkvs
    • A4_38 = "a63ce1a6"
  • In HKEY_CURRENT_USER\Software\Aasppapmmxkvs
    • A1_39 = "2f33d32"
  • In HKEY_CURRENT_USER\Software\Aasppapmmxkvs
    • A2_39 = "faa5ec7"
  • In HKEY_CURRENT_USER\Software\Aasppapmmxkvs
    • A3_39 = "ea92fce"
  • In HKEY_CURRENT_USER\Software\Aasppapmmxkvs
    • A4_39 = "faa45e7"
  • In HKEY_CURRENT_USER\Software\Aasppapmmxkvs
    • A1_40 = "e56beee1"
  • In HKEY_CURRENT_USER\Software\Aasppapmmxkvs
    • A2_40 = "7917b499"
  • In HKEY_CURRENT_USER\Software\Aasppapmmxkvs
    • A3_40 = "7814c1"
  • In HKEY_CURRENT_USER\Software\Aasppapmmxkvs
    • A4_40 = "7917aa28"
  • In HKEY_CURRENT_USER\Software\Aasppapmmxkvs
    • A1_41 = "d9f97534"
  • In HKEY_CURRENT_USER\Software\Aasppapmmxkvs
    • A2_41 = "e28516f6"
  • In HKEY_CURRENT_USER\Software\Aasppapmmxkvs
    • A3_41 = "e386644"
  • In HKEY_CURRENT_USER\Software\Aasppapmmxkvs
    • A4_41 = "e285e69"
  • In HKEY_CURRENT_USER\Software\Aasppapmmxkvs
    • A1_42 = "73bc56f3"
  • In HKEY_CURRENT_USER\Software\Aasppapmmxkvs
    • A2_42 = "4bf26f39"
  • In HKEY_CURRENT_USER\Software\Aasppapmmxkvs
    • A3_42 = "4af11883"
  • In HKEY_CURRENT_USER\Software\Aasppapmmxkvs
    • A4_42 = "4bf272aa"
  • In HKEY_CURRENT_USER\Software\Aasppapmmxkvs
    • A1_43 = "93c2dd46"
  • In HKEY_CURRENT_USER\Software\Aasppapmmxkvs
    • A2_43 = "b55fc71c"
  • In HKEY_CURRENT_USER\Software\Aasppapmmxkvs
    • A3_43 = "b45cbcc2"
  • In HKEY_CURRENT_USER\Software\Aasppapmmxkvs
    • A4_43 = "b55fd6eb"
  • In HKEY_CURRENT_USER\Software\Aasppapmmxkvs
    • A1_44 = "1362c4c"
  • In HKEY_CURRENT_USER\Software\Aasppapmmxkvs
    • A2_44 = "1ecd22d5"
  • In HKEY_CURRENT_USER\Software\Aasppapmmxkvs
    • A3_44 = "1fce515"
  • In HKEY_CURRENT_USER\Software\Aasppapmmxkvs
    • A4_44 = "1ecd3b2c"
  • In HKEY_CURRENT_USER\Software\Aasppapmmxkvs
    • A1_45 = "91b34525"
  • In HKEY_CURRENT_USER\Software\Aasppapmmxkvs
    • A2_45 = "883a88f"
  • In HKEY_CURRENT_USER\Software\Aasppapmmxkvs
    • A3_45 = "8939f544"
  • In HKEY_CURRENT_USER\Software\Aasppapmmxkvs
    • A4_45 = "883a9f6d"
  • In HKEY_CURRENT_USER\Software\Aasppapmmxkvs
    • A1_46 = "49b7affb"
  • In HKEY_CURRENT_USER\Software\Aasppapmmxkvs
    • A2_46 = "f1a81fdf"
  • In HKEY_CURRENT_USER\Software\Aasppapmmxkvs
    • A3_46 = "fab6987"
  • In HKEY_CURRENT_USER\Software\Aasppapmmxkvs
    • A4_46 = "f1a83ae"
  • In HKEY_CURRENT_USER\Software\Aasppapmmxkvs
    • A1_47 = "2ab14b3"
  • In HKEY_CURRENT_USER\Software\Aasppapmmxkvs
    • A2_47 = "5b157fe8"
  • In HKEY_CURRENT_USER\Software\Aasppapmmxkvs
    • A3_47 = "5a16dc6"
  • In HKEY_CURRENT_USER\Software\Aasppapmmxkvs
    • A4_47 = "5b1567ef"
  • In HKEY_CURRENT_USER\Software\Aasppapmmxkvs
    • A1_48 = "daced68c"
  • In HKEY_CURRENT_USER\Software\Aasppapmmxkvs
    • A2_48 = "c482d61"
  • In HKEY_CURRENT_USER\Software\Aasppapmmxkvs
    • A3_48 = "c581a619"
  • In HKEY_CURRENT_USER\Software\Aasppapmmxkvs
    • A4_48 = "c482cc3"
  • In HKEY_CURRENT_USER\Software\Aasppapmmxkvs
    • A1_49 = "aec2e829"
  • In HKEY_CURRENT_USER\Software\Aasppapmmxkvs
    • A2_49 = "2df15bb"
  • In HKEY_CURRENT_USER\Software\Aasppapmmxkvs
    • A3_49 = "2cf35a58"
  • In HKEY_CURRENT_USER\Software\Aasppapmmxkvs
    • A4_49 = "2df371"
  • In HKEY_CURRENT_USER\Software\Aasppapmmxkvs
    • A1_50 = "8b3a277a"
  • In HKEY_CURRENT_USER\Software\Aasppapmmxkvs
    • A2_50 = "975db79f"
  • In HKEY_CURRENT_USER\Software\Aasppapmmxkvs
    • A3_50 = "965efe9b"
  • In HKEY_CURRENT_USER\Software\Aasppapmmxkvs
    • A4_50 = "975d94b2"
  • In HKEY_CURRENT_USER\Software\Aasppapmmxkvs
    • A1_51 = "97ddb1ad"
  • In HKEY_CURRENT_USER\Software\Aasppapmmxkvs
    • A2_51 = "cae44d"
  • In HKEY_CURRENT_USER\Software\Aasppapmmxkvs
    • A3_51 = "1c992da"
  • In HKEY_CURRENT_USER\Software\Aasppapmmxkvs
    • A4_51 = "caf8f3"
  • In HKEY_CURRENT_USER\Software\Aasppapmmxkvs
    • A1_52 = "6349bde7"
  • In HKEY_CURRENT_USER\Software\Aasppapmmxkvs
    • A2_52 = "6a386db"
  • In HKEY_CURRENT_USER\Software\Aasppapmmxkvs
    • A3_52 = "6b3b371d"
  • In HKEY_CURRENT_USER\Software\Aasppapmmxkvs
    • A4_52 = "6a385d34"
  • In HKEY_CURRENT_USER\Software\Aasppapmmxkvs
    • A1_53 = "9d966c2c"
  • In HKEY_CURRENT_USER\Software\Aasppapmmxkvs
    • A2_53 = "d3a5e122"
  • In HKEY_CURRENT_USER\Software\Aasppapmmxkvs
    • A3_53 = "d2a6ab5c"
  • In HKEY_CURRENT_USER\Software\Aasppapmmxkvs
    • A4_53 = "d3a5c175"
  • In HKEY_CURRENT_USER\Software\Aasppapmmxkvs
    • A1_54 = "ca5e8ffa"
  • In HKEY_CURRENT_USER\Software\Aasppapmmxkvs
    • A2_54 = "3d1369b"
  • In HKEY_CURRENT_USER\Software\Aasppapmmxkvs
    • A3_54 = "3c14f9f"
  • In HKEY_CURRENT_USER\Software\Aasppapmmxkvs
    • A4_54 = "3d1325b6"
  • In HKEY_CURRENT_USER\Software\Aasppapmmxkvs
    • A1_55 = "8f85aba1"
  • In HKEY_CURRENT_USER\Software\Aasppapmmxkvs
    • A2_55 = "a689592"
  • In HKEY_CURRENT_USER\Software\Aasppapmmxkvs
    • A3_55 = "a783e3de"
  • In HKEY_CURRENT_USER\Software\Aasppapmmxkvs
    • A4_55 = "a6889f7"
  • In HKEY_CURRENT_USER\Software\Aasppapmmxkvs
    • A1_56 = "bd4fe36e"
  • In HKEY_CURRENT_USER\Software\Aasppapmmxkvs
    • A2_56 = "fedf1cf"
  • In HKEY_CURRENT_USER\Software\Aasppapmmxkvs
    • A3_56 = "eee8411"
  • In HKEY_CURRENT_USER\Software\Aasppapmmxkvs
    • A4_56 = "fedee38"
  • In HKEY_CURRENT_USER\Software\Aasppapmmxkvs
    • A1_57 = "af6e72"
  • In HKEY_CURRENT_USER\Software\Aasppapmmxkvs
    • A2_57 = "795b486"
  • In HKEY_CURRENT_USER\Software\Aasppapmmxkvs
    • A3_57 = "7858385"
  • In HKEY_CURRENT_USER\Software\Aasppapmmxkvs
    • A4_57 = "795b5279"
  • In HKEY_CURRENT_USER\Software\Aasppapmmxkvs
    • A1_58 = "39af8e3"
  • In HKEY_CURRENT_USER\Software\Aasppapmmxkvs
    • A2_58 = "e2c8aa82"
  • In HKEY_CURRENT_USER\Software\Aasppapmmxkvs
    • A3_58 = "e3cbdc93"
  • In HKEY_CURRENT_USER\Software\Aasppapmmxkvs
    • A4_58 = "e2c8b6ba"
  • In HKEY_CURRENT_USER\Software\Aasppapmmxkvs
    • A1_59 = "2dcaf3ab"
  • In HKEY_CURRENT_USER\Software\Aasppapmmxkvs
    • A2_59 = "4c36393c"
  • In HKEY_CURRENT_USER\Software\Aasppapmmxkvs
    • A3_59 = "4d357d2"
  • In HKEY_CURRENT_USER\Software\Aasppapmmxkvs
    • A4_59 = "4c361afb"
  • In HKEY_CURRENT_USER\Software\Aasppapmmxkvs
    • A1_60 = "6da93765"
  • In HKEY_CURRENT_USER\Software\Aasppapmmxkvs
    • A2_60 = "b5a3696a"
  • In HKEY_CURRENT_USER\Software\Aasppapmmxkvs
    • A3_60 = "b4a1515"
  • In HKEY_CURRENT_USER\Software\Aasppapmmxkvs
    • A4_60 = "b5a37f3c"
  • In HKEY_CURRENT_USER\Software\Aasppapmmxkvs
    • A1_61 = "7d8bca24"
  • In HKEY_CURRENT_USER\Software\Aasppapmmxkvs
    • A2_61 = "1f1c2ee"
  • In HKEY_CURRENT_USER\Software\Aasppapmmxkvs
    • A3_61 = "1e138954"
  • In HKEY_CURRENT_USER\Software\Aasppapmmxkvs
    • A4_61 = "1f1e37d"
  • In HKEY_CURRENT_USER\Software\Aasppapmmxkvs
    • A1_62 = "bc1d36f1"
  • In HKEY_CURRENT_USER\Software\Aasppapmmxkvs
    • A2_62 = "887e5e24"
  • In HKEY_CURRENT_USER\Software\Aasppapmmxkvs
    • A3_62 = "897d2d97"
  • In HKEY_CURRENT_USER\Software\Aasppapmmxkvs
    • A4_62 = "887e47be"
  • In HKEY_CURRENT_USER\Software\Aasppapmmxkvs
    • A1_63 = "7c3e4da6"
  • In HKEY_CURRENT_USER\Software\Aasppapmmxkvs
    • A2_63 = "f1ebb6e2"
  • In HKEY_CURRENT_USER\Software\Aasppapmmxkvs
    • A3_63 = "fe8c1d6"
  • In HKEY_CURRENT_USER\Software\Aasppapmmxkvs
    • A4_63 = "f1ebabff"
  • In HKEY_CURRENT_USER\Software\Aasppapmmxkvs
    • A1_64 = "4cfa6314"
  • In HKEY_CURRENT_USER\Software\Aasppapmmxkvs
    • A2_64 = "5b59ecc"
  • In HKEY_CURRENT_USER\Software\Aasppapmmxkvs
    • A3_64 = "5a5a7a69"
  • In HKEY_CURRENT_USER\Software\Aasppapmmxkvs
    • A4_64 = "5b5914"
  • In HKEY_CURRENT_USER\Software\Aasppapmmxkvs
    • A1_65 = "d52fcd8"
  • In HKEY_CURRENT_USER\Software\Aasppapmmxkvs
    • A2_65 = "c4c668a5"
  • In HKEY_CURRENT_USER\Software\Aasppapmmxkvs
    • A3_65 = "c5c51ea8"
  • In HKEY_CURRENT_USER\Software\Aasppapmmxkvs
    • A4_65 = "c4c67481"
  • In HKEY_CURRENT_USER\Software\Aasppapmmxkvs
    • A1_66 = "7fa9898f"
  • In HKEY_CURRENT_USER\Software\Aasppapmmxkvs
    • A2_66 = "2e33fbbd"
  • In HKEY_CURRENT_USER\Software\Aasppapmmxkvs
    • A3_66 = "2f3b2eb"
  • In HKEY_CURRENT_USER\Software\Aasppapmmxkvs
    • A4_66 = "2e33d8c2"
  • In HKEY_CURRENT_USER\Software\Aasppapmmxkvs
    • A1_67 = "52284f5a"
  • In HKEY_CURRENT_USER\Software\Aasppapmmxkvs
    • A2_67 = "97a125ee"
  • In HKEY_CURRENT_USER\Software\Aasppapmmxkvs
    • A3_67 = "96a2572a"
  • In HKEY_CURRENT_USER\Software\Aasppapmmxkvs
    • A4_67 = "97a13d3"
  • In HKEY_CURRENT_USER\Software\Aasppapmmxkvs
    • A1_68 = "6338291d"
  • In HKEY_CURRENT_USER\Software\Aasppapmmxkvs
    • A2_68 = "1eb89f"
  • In HKEY_CURRENT_USER\Software\Aasppapmmxkvs
    • A3_68 = "dcb6d"
  • In HKEY_CURRENT_USER\Software\Aasppapmmxkvs
    • A4_68 = "1ea144"
  • In HKEY_CURRENT_USER\Software\Aasppapmmxkvs
    • A1_69 = "7e2fabe"
  • In HKEY_CURRENT_USER\Software\Aasppapmmxkvs
    • A2_69 = "6a7c1b34"
  • In HKEY_CURRENT_USER\Software\Aasppapmmxkvs
    • A3_69 = "6b7f6fac"
  • In HKEY_CURRENT_USER\Software\Aasppapmmxkvs
    • A4_69 = "6a7c585"
  • In HKEY_CURRENT_USER\Software\Aasppapmmxkvs
    • A1_70 = "3c1499f"
  • In HKEY_CURRENT_USER\Software\Aasppapmmxkvs
    • A2_70 = "d3e971a9"
  • In HKEY_CURRENT_USER\Software\Aasppapmmxkvs
    • A3_70 = "d2ea3ef"
  • In HKEY_CURRENT_USER\Software\Aasppapmmxkvs
    • A4_70 = "d3e969c6"
  • In HKEY_CURRENT_USER\Software\Aasppapmmxkvs
    • A1_71 = "74f9e5e"
  • In HKEY_CURRENT_USER\Software\Aasppapmmxkvs
    • A2_71 = "3d56d1e5"
  • In HKEY_CURRENT_USER\Software\Aasppapmmxkvs
    • A3_71 = "3c55a42e"
  • In HKEY_CURRENT_USER\Software\Aasppapmmxkvs
    • A4_71 = "3d56ce7"
  • In HKEY_CURRENT_USER\Software\Aasppapmmxkvs
    • A1_72 = "733b3f4"
  • In HKEY_CURRENT_USER\Software\Aasppapmmxkvs
    • A2_72 = "a6c41435"
  • In HKEY_CURRENT_USER\Software\Aasppapmmxkvs
    • A3_72 = "a7c75861"
  • In HKEY_CURRENT_USER\Software\Aasppapmmxkvs
    • A4_72 = "a6c43248"
  • In HKEY_CURRENT_USER\Software\Aasppapmmxkvs
    • A1_73 = "ac45dad6"
  • In HKEY_CURRENT_USER\Software\Aasppapmmxkvs
    • A2_73 = "1318c4"
  • In HKEY_CURRENT_USER\Software\Aasppapmmxkvs
    • A3_73 = "1132fca"
  • In HKEY_CURRENT_USER\Software\Aasppapmmxkvs
    • A4_73 = "1319689"
  • In HKEY_CURRENT_USER\Software\Aasppapmmxkvs
    • A1_74 = "d2135a95"
  • In HKEY_CURRENT_USER\Software\Aasppapmmxkvs
    • A2_74 = "799eeb5d"
  • In HKEY_CURRENT_USER\Software\Aasppapmmxkvs
    • A3_74 = "789d9e3"
  • In HKEY_CURRENT_USER\Software\Aasppapmmxkvs
    • A4_74 = "799efaca"
  • In HKEY_CURRENT_USER\Software\Aasppapmmxkvs
    • A1_75 = "7562a5e"
  • In HKEY_CURRENT_USER\Software\Aasppapmmxkvs
    • A2_75 = "e3c487c"
  • In HKEY_CURRENT_USER\Software\Aasppapmmxkvs
    • A3_75 = "e2f3522"
  • In HKEY_CURRENT_USER\Software\Aasppapmmxkvs
    • A4_75 = "e3c5fb"
  • In HKEY_CURRENT_USER\Software\Aasppapmmxkvs
    • A1_76 = "37bad2"
  • In HKEY_CURRENT_USER\Software\Aasppapmmxkvs
    • A2_76 = "4c79d56f"
  • In HKEY_CURRENT_USER\Software\Aasppapmmxkvs
    • A3_76 = "4d7aa965"
  • In HKEY_CURRENT_USER\Software\Aasppapmmxkvs
    • A4_76 = "4c79c34c"
  • In HKEY_CURRENT_USER\Software\Aasppapmmxkvs
    • A1_77 = "5adec"
  • In HKEY_CURRENT_USER\Software\Aasppapmmxkvs
    • A2_77 = "b5e73ead"
  • In HKEY_CURRENT_USER\Software\Aasppapmmxkvs
    • A3_77 = "b4e44da4"
  • In HKEY_CURRENT_USER\Software\Aasppapmmxkvs
    • A4_77 = "b5e7278d"
  • In HKEY_CURRENT_USER\Software\Aasppapmmxkvs
    • A1_78 = "5bffa93"
  • In HKEY_CURRENT_USER\Software\Aasppapmmxkvs
    • A2_78 = "1f54979"
  • In HKEY_CURRENT_USER\Software\Aasppapmmxkvs
    • A3_78 = "1e57e1e7"
  • In HKEY_CURRENT_USER\Software\Aasppapmmxkvs
    • A4_78 = "1f548bce"
  • In HKEY_CURRENT_USER\Software\Aasppapmmxkvs
    • A1_79 = "11aed756"
  • In HKEY_CURRENT_USER\Software\Aasppapmmxkvs
    • A2_79 = "88c1e6c"
  • In HKEY_CURRENT_USER\Software\Aasppapmmxkvs
    • A3_79 = "89c29a26"
  • In HKEY_CURRENT_USER\Software\Aasppapmmxkvs
    • A4_79 = "88c1ff"
  • In HKEY_CURRENT_USER\Software\Aasppapmmxkvs
    • A1_80 = "c7625d"
  • In HKEY_CURRENT_USER\Software\Aasppapmmxkvs
    • A2_80 = "f22f49fa"
  • In HKEY_CURRENT_USER\Software\Aasppapmmxkvs
    • A3_80 = "f32c3e79"
  • In HKEY_CURRENT_USER\Software\Aasppapmmxkvs
    • A4_80 = "f22f545"
  • In HKEY_CURRENT_USER\Software\Aasppapmmxkvs
    • A1_81 = "7a7fd9df"
  • In HKEY_CURRENT_USER\Software\Aasppapmmxkvs
    • A2_81 = "5b9ca53b"
  • In HKEY_CURRENT_USER\Software\Aasppapmmxkvs
    • A3_81 = "5a9fd2b8"
  • In HKEY_CURRENT_USER\Software\Aasppapmmxkvs
    • A4_81 = "5b9cb891"
  • In HKEY_CURRENT_USER\Software\Aasppapmmxkvs
    • A1_82 = "6492518d"
  • In HKEY_CURRENT_USER\Software\Aasppapmmxkvs
    • A2_82 = "c5af6"
  • In HKEY_CURRENT_USER\Software\Aasppapmmxkvs
    • A3_82 = "c4976fb"
  • In HKEY_CURRENT_USER\Software\Aasppapmmxkvs
    • A4_82 = "c5a1cd2"
  • In HKEY_CURRENT_USER\Software\Aasppapmmxkvs
    • A1_83 = "3c34654"
  • In HKEY_CURRENT_USER\Software\Aasppapmmxkvs
    • A2_83 = "2e7794ec"
  • In HKEY_CURRENT_USER\Software\Aasppapmmxkvs
    • A3_83 = "2f74eb3a"
  • In HKEY_CURRENT_USER\Software\Aasppapmmxkvs
    • A4_83 = "2e778113"
  • In HKEY_CURRENT_USER\Software\Aasppapmmxkvs
    • A1_84 = "3b82d34"
  • In HKEY_CURRENT_USER\Software\Aasppapmmxkvs
    • A2_84 = "97e4c383"
  • In HKEY_CURRENT_USER\Software\Aasppapmmxkvs
    • A3_84 = "96e78f7d"
  • In HKEY_CURRENT_USER\Software\Aasppapmmxkvs
    • A4_84 = "97e4e554"
  • In HKEY_CURRENT_USER\Software\Aasppapmmxkvs
    • A1_85 = "3ac92346"
  • In HKEY_CURRENT_USER\Software\Aasppapmmxkvs
    • A2_85 = "1525736"
  • In HKEY_CURRENT_USER\Software\Aasppapmmxkvs
    • A3_85 = "5123bc"
  • In HKEY_CURRENT_USER\Software\Aasppapmmxkvs
    • A4_85 = "1524995"
  • In HKEY_CURRENT_USER\Software\Aasppapmmxkvs
    • A1_86 = "e1648"
  • In HKEY_CURRENT_USER\Software\Aasppapmmxkvs
    • A2_86 = "6abf8c97"
  • In HKEY_CURRENT_USER\Software\Aasppapmmxkvs
    • A3_86 = "6bbcc7ff"
  • In HKEY_CURRENT_USER\Software\Aasppapmmxkvs
    • A4_86 = "6abfadd6"
  • In HKEY_CURRENT_USER\Software\Aasppapmmxkvs
    • A1_87 = "75497a48"
  • In HKEY_CURRENT_USER\Software\Aasppapmmxkvs
    • A2_87 = "d42d4f8"
  • In HKEY_CURRENT_USER\Software\Aasppapmmxkvs
    • A3_87 = "d52e783e"
  • In HKEY_CURRENT_USER\Software\Aasppapmmxkvs
    • A4_87 = "d42d1217"
  • In HKEY_CURRENT_USER\Software\Aasppapmmxkvs
    • A1_88 = "1fe7562"
  • In HKEY_CURRENT_USER\Software\Aasppapmmxkvs
    • A2_88 = "3d9a623f"
  • In HKEY_CURRENT_USER\Software\Aasppapmmxkvs
    • A3_88 = "3c991c71"
  • In HKEY_CURRENT_USER\Software\Aasppapmmxkvs
    • A4_88 = "3d9a7658"
  • In HKEY_CURRENT_USER\Software\Aasppapmmxkvs
    • A1_89 = "f7716cc"
  • In HKEY_CURRENT_USER\Software\Aasppapmmxkvs
    • A2_89 = "a77fba"
  • In HKEY_CURRENT_USER\Software\Aasppapmmxkvs
    • A3_89 = "a64bb"
  • In HKEY_CURRENT_USER\Software\Aasppapmmxkvs
    • A4_89 = "a77da99"
  • In HKEY_CURRENT_USER\Software\Aasppapmmxkvs
    • A1_90 = "d8cbbf66"
  • In HKEY_CURRENT_USER\Software\Aasppapmmxkvs
    • A2_90 = "17523ed"
  • In HKEY_CURRENT_USER\Software\Aasppapmmxkvs
    • A3_90 = "117654f3"
  • In HKEY_CURRENT_USER\Software\Aasppapmmxkvs
    • A4_90 = "1753eda"
  • In HKEY_CURRENT_USER\Software\Aasppapmmxkvs
    • A1_91 = "66ccb44"
  • In HKEY_CURRENT_USER\Software\Aasppapmmxkvs
    • A2_91 = "79e283bc"
  • In HKEY_CURRENT_USER\Software\Aasppapmmxkvs
    • A3_91 = "78e1c932"
  • In HKEY_CURRENT_USER\Software\Aasppapmmxkvs
    • A4_91 = "79e2a31b"
  • In HKEY_CURRENT_USER\Software\Aasppapmmxkvs
    • A1_92 = "6fe8d9f"
  • In HKEY_CURRENT_USER\Software\Aasppapmmxkvs
    • A2_92 = "e352641"
  • In HKEY_CURRENT_USER\Software\Aasppapmmxkvs
    • A3_92 = "e2536d75"
  • In HKEY_CURRENT_USER\Software\Aasppapmmxkvs
    • A4_92 = "e3575c"
  • In HKEY_CURRENT_USER\Software\Aasppapmmxkvs
    • A1_93 = "f1ead3"
  • In HKEY_CURRENT_USER\Software\Aasppapmmxkvs
    • A2_93 = "4cbd72a"
  • In HKEY_CURRENT_USER\Software\Aasppapmmxkvs
    • A3_93 = "4dbe1b4"
  • In HKEY_CURRENT_USER\Software\Aasppapmmxkvs
    • A4_93 = "4cbd6b9d"
  • In HKEY_CURRENT_USER\Software\Aasppapmmxkvs
    • A1_94 = "88befb8"
  • In HKEY_CURRENT_USER\Software\Aasppapmmxkvs
    • A2_94 = "b62ad6d"
  • In HKEY_CURRENT_USER\Software\Aasppapmmxkvs
    • A3_94 = "b729a5f7"
  • In HKEY_CURRENT_USER\Software\Aasppapmmxkvs
    • A4_94 = "b62acfde"
  • In HKEY_CURRENT_USER\Software\Aasppapmmxkvs
    • A1_95 = "911e4dc3"
  • In HKEY_CURRENT_USER\Software\Aasppapmmxkvs
    • A2_95 = "1f982be8"
  • In HKEY_CURRENT_USER\Software\Aasppapmmxkvs
    • A3_95 = "1e9b5e36"
  • In HKEY_CURRENT_USER\Software\Aasppapmmxkvs
    • A4_95 = "1f98341f"
  • In HKEY_CURRENT_USER\Software\Aasppapmmxkvs
    • A1_96 = "ca26d52d"
  • In HKEY_CURRENT_USER\Software\Aasppapmmxkvs
    • A2_96 = "89581f1"
  • In HKEY_CURRENT_USER\Software\Aasppapmmxkvs
    • A3_96 = "886f249"
  • In HKEY_CURRENT_USER\Software\Aasppapmmxkvs
    • A4_96 = "895986"
  • In HKEY_CURRENT_USER\Software\Aasppapmmxkvs
    • A1_97 = "da13d2f8"
  • In HKEY_CURRENT_USER\Software\Aasppapmmxkvs
    • A2_97 = "f272df21"
  • In HKEY_CURRENT_USER\Software\Aasppapmmxkvs
    • A3_97 = "f3719688"
  • In HKEY_CURRENT_USER\Software\Aasppapmmxkvs
    • A4_97 = "f272fca1"
  • In HKEY_CURRENT_USER\Software\Aasppapmmxkvs
    • A1_98 = "35bf13b"
  • In HKEY_CURRENT_USER\Software\Aasppapmmxkvs
    • A2_98 = "5be786a"
  • In HKEY_CURRENT_USER\Software\Aasppapmmxkvs
    • A3_98 = "5ae3acb"
  • In HKEY_CURRENT_USER\Software\Aasppapmmxkvs
    • A4_98 = "5be6e2"
  • In HKEY_CURRENT_USER\Software\Aasppapmmxkvs
    • A1_99 = "ffefe867"
  • In HKEY_CURRENT_USER\Software\Aasppapmmxkvs
    • A2_99 = "c54ddb2e"
  • In HKEY_CURRENT_USER\Software\Aasppapmmxkvs
    • A3_99 = "c44eafa"
  • In HKEY_CURRENT_USER\Software\Aasppapmmxkvs
    • A4_99 = "c54dc523"
  • In HKEY_CURRENT_USER\Software\Aasppapmmxkvs
    • A1_100 = "4c9ba13d"
  • In HKEY_CURRENT_USER\Software\Aasppapmmxkvs
    • A2_100 = "2ebb3caf"
  • In HKEY_CURRENT_USER\Software\Aasppapmmxkvs
    • A3_100 = "2fb8434d"
  • In HKEY_CURRENT_USER\Software\Aasppapmmxkvs
    • A4_100 = "2ebb2964"
  • In HKEY_CURRENT_USER\Software\Aasppapmmxkvs
    • A1_101 = "5d87c1fc"
  • In HKEY_CURRENT_USER\Software\Aasppapmmxkvs
    • A2_101 = "98289ae"
  • In HKEY_CURRENT_USER\Software\Aasppapmmxkvs
    • A3_101 = "992be78c"
  • In HKEY_CURRENT_USER\Software\Aasppapmmxkvs
    • A4_101 = "98288da5"
  • In HKEY_CURRENT_USER\Software\Aasppapmmxkvs
    • A1_102 = "486db495"
  • In HKEY_CURRENT_USER\Software\Aasppapmmxkvs
    • A2_102 = "195e7ab"
  • In HKEY_CURRENT_USER\Software\Aasppapmmxkvs
    • A3_102 = "969bcf"
  • In HKEY_CURRENT_USER\Software\Aasppapmmxkvs
    • A4_102 = "195f1e6"
  • In HKEY_CURRENT_USER\Software\Aasppapmmxkvs
    • A1_103 = "67ee717e"
  • In HKEY_CURRENT_USER\Software\Aasppapmmxkvs
    • A2_103 = "6b34a5c"
  • In HKEY_CURRENT_USER\Software\Aasppapmmxkvs
    • A3_103 = "6a3ce"
  • In HKEY_CURRENT_USER\Software\Aasppapmmxkvs
    • A4_103 = "6b35627"
  • In HKEY_CURRENT_USER\Software\Aasppapmmxkvs
    • A1_104 = "5335c831"
  • In HKEY_CURRENT_USER\Software\Aasppapmmxkvs
    • A2_104 = "d47a267"
  • In HKEY_CURRENT_USER\Software\Aasppapmmxkvs
    • A3_104 = "d573d41"
  • In HKEY_CURRENT_USER\Software\Aasppapmmxkvs
    • A4_104 = "d47ba68"
  • In HKEY_CURRENT_USER\Software\Aasppapmmxkvs
    • A1_105 = "f8377ff"
  • In HKEY_CURRENT_USER\Software\Aasppapmmxkvs
    • A2_105 = "3ddee29"
  • In HKEY_CURRENT_USER\Software\Aasppapmmxkvs
    • A3_105 = "3cdd748"
  • In HKEY_CURRENT_USER\Software\Aasppapmmxkvs
    • A4_105 = "3dde1ea9"
  • In HKEY_CURRENT_USER\Software\Aasppapmmxkvs
    • A1_106 = "73198ba4"
  • In HKEY_CURRENT_USER\Software\Aasppapmmxkvs
    • A2_106 = "a74b9551"
  • In HKEY_CURRENT_USER\Software\Aasppapmmxkvs
    • A3_106 = "a648e8c3"
  • In HKEY_CURRENT_USER\Software\Aasppapmmxkvs
    • A4_106 = "a74b82ea"
  • In HKEY_CURRENT_USER\Software\Aasppapmmxkvs
    • A1_107 = "c7be85c"
  • In HKEY_CURRENT_USER\Software\Aasppapmmxkvs
    • A2_107 = "1b8f2c"
  • In HKEY_CURRENT_USER\Software\Aasppapmmxkvs
    • A3_107 = "11bb8d2"
  • In HKEY_CURRENT_USER\Software\Aasppapmmxkvs
    • A4_107 = "1b8e72b"
  • In HKEY_CURRENT_USER\Software\Aasppapmmxkvs
    • A1_108 = "bc7e423"
  • In HKEY_CURRENT_USER\Software\Aasppapmmxkvs
    • A2_108 = "7a26523"
  • In HKEY_CURRENT_USER\Software\Aasppapmmxkvs
    • A3_108 = "7b252145"
  • In HKEY_CURRENT_USER\Software\Aasppapmmxkvs
    • A4_108 = "7a264b6c"
  • In HKEY_CURRENT_USER\Software\Aasppapmmxkvs
    • A1_109 = "d6cf7f2"
  • In HKEY_CURRENT_USER\Software\Aasppapmmxkvs
    • A2_109 = "e3938ab4"
  • In HKEY_CURRENT_USER\Software\Aasppapmmxkvs
    • A3_109 = "e29c584"
  • In HKEY_CURRENT_USER\Software\Aasppapmmxkvs
    • A4_109 = "e393afad"
  • In HKEY_CURRENT_USER\Software\Aasppapmmxkvs
    • A1_110 = "cf9a2db"
  • In HKEY_CURRENT_USER\Software\Aasppapmmxkvs
    • A2_110 = "4d1f2"
  • In HKEY_CURRENT_USER\Software\Aasppapmmxkvs
    • A3_110 = "4c279c7"
  • In HKEY_CURRENT_USER\Software\Aasppapmmxkvs
    • A4_110 = "4d113ee"
  • In HKEY_CURRENT_USER\Software\Aasppapmmxkvs
    • A1_111 = "411ecd7e"
  • In HKEY_CURRENT_USER\Software\Aasppapmmxkvs
    • A2_111 = "b66e59a1"
  • In HKEY_CURRENT_USER\Software\Aasppapmmxkvs
    • A3_111 = "b76d126"
  • In HKEY_CURRENT_USER\Software\Aasppapmmxkvs
    • A4_111 = "b66e782f"
  • In HKEY_CURRENT_USER\Software\Aasppapmmxkvs
    • A1_112 = "e2bb3e37"
  • In HKEY_CURRENT_USER\Software\Aasppapmmxkvs
    • A2_112 = "1fdbc622"
  • In HKEY_CURRENT_USER\Software\Aasppapmmxkvs
    • A3_112 = "1ed8b659"
  • In HKEY_CURRENT_USER\Software\Aasppapmmxkvs
    • A4_112 = "1fdbdc7"
  • In HKEY_CURRENT_USER\Software\Aasppapmmxkvs
    • A1_113 = "a45f17e4"
  • In HKEY_CURRENT_USER\Software\Aasppapmmxkvs
    • A2_113 = "89495596"
  • In HKEY_CURRENT_USER\Software\Aasppapmmxkvs
    • A3_113 = "884a2a98"
  • In HKEY_CURRENT_USER\Software\Aasppapmmxkvs
    • A4_113 = "89494b1"
  • In HKEY_CURRENT_USER\Software\Aasppapmmxkvs
    • A1_114 = "fa61ccbe"
  • In HKEY_CURRENT_USER\Software\Aasppapmmxkvs
    • A2_114 = "f2b6bf9d"
  • In HKEY_CURRENT_USER\Software\Aasppapmmxkvs
    • A3_114 = "f3b5cedb"
  • In HKEY_CURRENT_USER\Software\Aasppapmmxkvs
    • A4_114 = "f2b6a4f2"
  • In HKEY_CURRENT_USER\Software\Aasppapmmxkvs
    • A1_115 = "ed32688"
  • In HKEY_CURRENT_USER\Software\Aasppapmmxkvs
    • A2_115 = "5c2416f6"
  • In HKEY_CURRENT_USER\Software\Aasppapmmxkvs
    • A3_115 = "5d27631a"
  • In HKEY_CURRENT_USER\Software\Aasppapmmxkvs
    • A4_115 = "5c24933"
  • In HKEY_CURRENT_USER\Software\Aasppapmmxkvs
    • A1_116 = "f91a1721"
  • In HKEY_CURRENT_USER\Software\Aasppapmmxkvs
    • A2_116 = "c5917ba3"
  • In HKEY_CURRENT_USER\Software\Aasppapmmxkvs
    • A3_116 = "c49275d"
  • In HKEY_CURRENT_USER\Software\Aasppapmmxkvs
    • A4_116 = "c5916d74"
  • In HKEY_CURRENT_USER\Software\Aasppapmmxkvs
    • A1_117 = "44681fe2"
  • In HKEY_CURRENT_USER\Software\Aasppapmmxkvs
    • A2_117 = "2efec7c"
  • In HKEY_CURRENT_USER\Software\Aasppapmmxkvs
    • A3_117 = "2ffdbb9c"
  • In HKEY_CURRENT_USER\Software\Aasppapmmxkvs
    • A4_117 = "2efed1b5"
  • In HKEY_CURRENT_USER\Software\Aasppapmmxkvs
    • A1_118 = "cfcf6d7c"
  • In HKEY_CURRENT_USER\Software\Aasppapmmxkvs
    • A2_118 = "986c2c51"
  • In HKEY_CURRENT_USER\Software\Aasppapmmxkvs
    • A3_118 = "996f5fdf"
  • In HKEY_CURRENT_USER\Software\Aasppapmmxkvs
    • A4_118 = "986c35f6"
  • In HKEY_CURRENT_USER\Software\Aasppapmmxkvs
    • A1_119 = "54df3462"
  • In HKEY_CURRENT_USER\Software\Aasppapmmxkvs
    • A2_119 = "1d987b"
  • In HKEY_CURRENT_USER\Software\Aasppapmmxkvs
    • A3_119 = "daf1e"
  • In HKEY_CURRENT_USER\Software\Aasppapmmxkvs
    • A4_119 = "1d99a37"
  • In HKEY_CURRENT_USER\Software\Aasppapmmxkvs
    • A1_120 = "8c9ab12a"
  • In HKEY_CURRENT_USER\Software\Aasppapmmxkvs
    • A2_120 = "6b46e827"
  • In HKEY_CURRENT_USER\Software\Aasppapmmxkvs
    • A3_120 = "6a459451"
  • In HKEY_CURRENT_USER\Software\Aasppapmmxkvs
    • A4_120 = "6b46fe78"
  • In HKEY_CURRENT_USER\Software\Aasppapmmxkvs
    • A1_121 = "76f82af7"
  • In HKEY_CURRENT_USER\Software\Aasppapmmxkvs
    • A2_121 = "d4b44773"
  • In HKEY_CURRENT_USER\Software\Aasppapmmxkvs
    • A3_121 = "d5b789"
  • In HKEY_CURRENT_USER\Software\Aasppapmmxkvs
    • A4_121 = "d4b462b9"
  • In HKEY_CURRENT_USER\Software\Aasppapmmxkvs
    • A1_122 = "37937cbc"
  • In HKEY_CURRENT_USER\Software\Aasppapmmxkvs
    • A2_122 = "3e21dda7"
  • In HKEY_CURRENT_USER\Software\Aasppapmmxkvs
    • A3_122 = "3f22acd3"
  • In HKEY_CURRENT_USER\Software\Aasppapmmxkvs
    • A4_122 = "3e21c6fa"
  • In HKEY_CURRENT_USER\Software\Aasppapmmxkvs
    • A1_123 = "b2e64f6d"
  • In HKEY_CURRENT_USER\Software\Aasppapmmxkvs
    • A2_123 = "a78f3334"
  • In HKEY_CURRENT_USER\Software\Aasppapmmxkvs
    • A3_123 = "a68c4112"
  • In HKEY_CURRENT_USER\Software\Aasppapmmxkvs
    • A4_123 = "a78f2b3b"
  • In HKEY_CURRENT_USER\Software\Aasppapmmxkvs
    • A1_124 = "6d549a8"
  • In HKEY_CURRENT_USER\Software\Aasppapmmxkvs
    • A2_124 = "1fc92b6"
  • In HKEY_CURRENT_USER\Software\Aasppapmmxkvs
    • A3_124 = "11ffe555"
  • In HKEY_CURRENT_USER\Software\Aasppapmmxkvs
    • A4_124 = "1fc8f7c"
  • In HKEY_CURRENT_USER\Software\Aasppapmmxkvs
    • A1_125 = "2b93f3"
  • In HKEY_CURRENT_USER\Software\Aasppapmmxkvs
    • A2_125 = "7a69e69a"
  • In HKEY_CURRENT_USER\Software\Aasppapmmxkvs
    • A3_125 = "7b6a9994"
  • In HKEY_CURRENT_USER\Software\Aasppapmmxkvs
    • A4_125 = "7a69f3bd"
  • In HKEY_CURRENT_USER\Software\Aasppapmmxkvs
    • A1_126 = "fcf5bb6d"
  • In HKEY_CURRENT_USER\Software\Aasppapmmxkvs
    • A2_126 = "e3d74859"
  • In HKEY_CURRENT_USER\Software\Aasppapmmxkvs
    • A3_126 = "e2d43dd7"
  • In HKEY_CURRENT_USER\Software\Aasppapmmxkvs
    • A4_126 = "e3d757fe"
  • In HKEY_CURRENT_USER\Software\Aasppapmmxkvs
    • A1_127 = "aad9f6be"
  • In HKEY_CURRENT_USER\Software\Aasppapmmxkvs
    • A2_127 = "4d44a5a"
  • In HKEY_CURRENT_USER\Software\Aasppapmmxkvs
    • A3_127 = "4c47d616"
  • In HKEY_CURRENT_USER\Software\Aasppapmmxkvs
    • A4_127 = "4d44bc3f"
  • In HKEY_CURRENT_USER\Software\Aasppapmmxkvs
    • A1_128 = "76c45d9"
  • In HKEY_CURRENT_USER\Software\Aasppapmmxkvs
    • A2_128 = "b6b2367c"
  • In HKEY_CURRENT_USER\Software\Aasppapmmxkvs
    • A3_128 = "b7b14aa9"
  • In HKEY_CURRENT_USER\Software\Aasppapmmxkvs
    • A4_128 = "b6b228"
  • In HKEY_CURRENT_USER\Software\Aasppapmmxkvs
    • A1_129 = "13d85b9e"
  • In HKEY_CURRENT_USER\Software\Aasppapmmxkvs
    • A2_129 = "21f9b88"
  • In HKEY_CURRENT_USER\Software\Aasppapmmxkvs
    • A3_129 = "211ceee8"
  • In HKEY_CURRENT_USER\Software\Aasppapmmxkvs
    • A4_129 = "21f84c1"
  • In HKEY_CURRENT_USER\Software\Aasppapmmxkvs
    • A1_130 = "875464d"
  • In HKEY_CURRENT_USER\Software\Aasppapmmxkvs
    • A2_130 = "898cf3a5"
  • In HKEY_CURRENT_USER\Software\Aasppapmmxkvs
    • A3_130 = "888f832b"
  • In HKEY_CURRENT_USER\Software\Aasppapmmxkvs
    • A4_130 = "898ce92"
  • In HKEY_CURRENT_USER\Software\Aasppapmmxkvs
    • A1_131 = "3594251c"
  • In HKEY_CURRENT_USER\Software\Aasppapmmxkvs
    • A2_131 = "f2fa5461"
  • In HKEY_CURRENT_USER\Software\Aasppapmmxkvs
    • A3_131 = "f3f9276a"
  • In HKEY_CURRENT_USER\Software\Aasppapmmxkvs
    • A4_131 = "f2fa4d43"
  • In HKEY_CURRENT_USER\Software\Aasppapmmxkvs
    • A1_132 = "a1a6d8d2"
  • In HKEY_CURRENT_USER\Software\Aasppapmmxkvs
    • A2_132 = "5c67a694"
  • In HKEY_CURRENT_USER\Software\Aasppapmmxkvs
    • A3_132 = "5d64dbad"
  • In HKEY_CURRENT_USER\Software\Aasppapmmxkvs
    • A4_132 = "5c67b184"
  • In HKEY_CURRENT_USER\Software\Aasppapmmxkvs
    • A1_133 = "c88f7d9a"
  • In HKEY_CURRENT_USER\Software\Aasppapmmxkvs
    • A2_133 = "c5d5963"
  • In HKEY_CURRENT_USER\Software\Aasppapmmxkvs
    • A3_133 = "c4d67fec"
  • In HKEY_CURRENT_USER\Software\Aasppapmmxkvs
    • A4_133 = "c5d515c5"
  • In HKEY_CURRENT_USER\Software\Aasppapmmxkvs
    • A1_134 = "e3c74c42"
  • In HKEY_CURRENT_USER\Software\Aasppapmmxkvs
    • A2_134 = "2f42639c"
  • In HKEY_CURRENT_USER\Software\Aasppapmmxkvs
    • A3_134 = "2e4112f"
  • In HKEY_CURRENT_USER\Software\Aasppapmmxkvs
    • A4_134 = "2f427a6"
  • In HKEY_CURRENT_USER\Software\Aasppapmmxkvs
    • A1_135 = "c97ea71"
  • In HKEY_CURRENT_USER\Software\Aasppapmmxkvs
    • A2_135 = "98afc8a8"
  • In HKEY_CURRENT_USER\Software\Aasppapmmxkvs
    • A3_135 = "99acb46e"
  • In HKEY_CURRENT_USER\Software\Aasppapmmxkvs
    • A4_135 = "98afde47"
  • In HKEY_CURRENT_USER\Software\Aasppapmmxkvs
    • A1_136 = "98c38de"
  • In HKEY_CURRENT_USER\Software\Aasppapmmxkvs
    • A2_136 = "21d564f"
  • In HKEY_CURRENT_USER\Software\Aasppapmmxkvs
    • A3_136 = "31e28a1"
  • In HKEY_CURRENT_USER\Software\Aasppapmmxkvs
    • A4_136 = "21d4288"
  • In HKEY_CURRENT_USER\Software\Aasppapmmxkvs
    • A1_137 = "a4884c9d"
  • In HKEY_CURRENT_USER\Software\Aasppapmmxkvs
    • A2_137 = "6b8ab1be"
  • In HKEY_CURRENT_USER\Software\Aasppapmmxkvs
    • A3_137 = "6a89cce"
  • In HKEY_CURRENT_USER\Software\Aasppapmmxkvs
    • A4_137 = "6b8aa6c9"
  • In HKEY_CURRENT_USER\Software\Aasppapmmxkvs
    • A1_138 = "e9818353"
  • In HKEY_CURRENT_USER\Software\Aasppapmmxkvs
    • A2_138 = "d4f81c5e"
  • In HKEY_CURRENT_USER\Software\Aasppapmmxkvs
    • A3_138 = "d5fb6123"
  • In HKEY_CURRENT_USER\Software\Aasppapmmxkvs
    • A4_138 = "d4f8ba"
  • In HKEY_CURRENT_USER\Software\Aasppapmmxkvs
    • A1_139 = "94c226"
  • In HKEY_CURRENT_USER\Software\Aasppapmmxkvs
    • A2_139 = "3e65733a"
  • In HKEY_CURRENT_USER\Software\Aasppapmmxkvs
    • A3_139 = "3f66562"
  • In HKEY_CURRENT_USER\Software\Aasppapmmxkvs
    • A4_139 = "3e656f4b"
  • In HKEY_CURRENT_USER\Software\Aasppapmmxkvs
    • A1_140 = "92af7d5"
  • In HKEY_CURRENT_USER\Software\VB and VBA Program Settings\trial version\trial
    • date1 = "11/20/2011"
  • In HKEY_CURRENT_USER\Software\Aasppapmmxkvs
    • A2_140 = "a7d2ca51"
  • In HKEY_CURRENT_USER\Software\Aasppapmmxkvs
    • A3_140 = "a6d1b9a5"
  • In HKEY_CURRENT_USER\Software\Aasppapmmxkvs
    • A4_140 = "a7d2d38c"
  • In HKEY_CURRENT_USER\Software\Aasppapmmxkvs
    • A1_141 = "276d2f81"
  • In HKEY_CURRENT_USER\Software\Aasppapmmxkvs
    • A2_141 = "1142bc2"
  • In HKEY_CURRENT_USER\Software\Aasppapmmxkvs
    • A3_141 = "1435de4"
  • In HKEY_CURRENT_USER\Software\Aasppapmmxkvs
    • A4_141 = "11437cd"
  • In HKEY_CURRENT_USER\Software\Aasppapmmxkvs
    • A1_142 = "fe38f56"
  • In HKEY_CURRENT_USER\Software\Aasppapmmxkvs
    • A2_142 = "7aad8721"
  • In HKEY_CURRENT_USER\Software\Aasppapmmxkvs
    • A3_142 = "7baef627"
  • In HKEY_CURRENT_USER\Software\Aasppapmmxkvs
    • A4_142 = "7aad9ce"
  • In HKEY_CURRENT_USER\Software\Aasppapmmxkvs
    • A1_143 = "59f12e16"
  • In HKEY_CURRENT_USER\Software\Aasppapmmxkvs
    • A2_143 = "e41b176a"
  • In HKEY_CURRENT_USER\Software\Aasppapmmxkvs
    • A3_143 = "e5186a66"
  • In HKEY_CURRENT_USER\Software\Aasppapmmxkvs
    • A4_143 = "e41b4f"
  • In HKEY_CURRENT_USER\Software\Aasppapmmxkvs
    • A1_144 = "875116cd"
  • In HKEY_CURRENT_USER\Software\Aasppapmmxkvs
    • A2_144 = "4d887a33"
  • In HKEY_CURRENT_USER\Software\Aasppapmmxkvs
    • A3_144 = "4c8beb9"
  • In HKEY_CURRENT_USER\Software\Aasppapmmxkvs
    • A4_144 = "4d88649"
  • In HKEY_CURRENT_USER\Software\Aasppapmmxkvs
    • A1_145 = "95f12d83"
  • In HKEY_CURRENT_USER\Software\Aasppapmmxkvs
    • A2_145 = "b6f5db2b"
  • In HKEY_CURRENT_USER\Software\Aasppapmmxkvs
    • A3_145 = "b7f6a2f8"
  • In HKEY_CURRENT_USER\Software\Aasppapmmxkvs
    • A4_145 = "b6f5c8d1"
  • In HKEY_CURRENT_USER\Software\Aasppapmmxkvs
    • A1_146 = "47bb9a4a"
  • In HKEY_CURRENT_USER\Software\Aasppapmmxkvs
    • A2_146 = "263359a"
  • In HKEY_CURRENT_USER\Software\Aasppapmmxkvs
    • A3_146 = "216473b"
  • In HKEY_CURRENT_USER\Software\Aasppapmmxkvs
    • A4_146 = "2632d12"
  • In HKEY_CURRENT_USER\Software\Aasppapmmxkvs
    • A1_147 = "bfc5cb6d"
  • In HKEY_CURRENT_USER\Software\Aasppapmmxkvs
    • A2_147 = "89d8c4c"
  • In HKEY_CURRENT_USER\Software\Aasppapmmxkvs
    • A3_147 = "88d3fb7a"
  • In HKEY_CURRENT_USER\Software\Aasppapmmxkvs
    • A4_147 = "89d9153"
  • In HKEY_CURRENT_USER\Software\Aasppapmmxkvs
    • A1_148 = "43d741c5"
  • In HKEY_CURRENT_USER\Software\Aasppapmmxkvs
    • A2_148 = "f33dd158"
  • In HKEY_CURRENT_USER\Software\Aasppapmmxkvs
    • A3_148 = "f23e9fbd"
  • In HKEY_CURRENT_USER\Software\Aasppapmmxkvs
    • A4_148 = "f33df594"
  • In HKEY_CURRENT_USER\Software\Aasppapmmxkvs
    • A1_149 = "2cf1b8"
  • In HKEY_CURRENT_USER\Software\Aasppapmmxkvs
    • A2_149 = "5cab7af2"
  • In HKEY_CURRENT_USER\Software\Aasppapmmxkvs
    • A3_149 = "5da833fc"
  • In HKEY_CURRENT_USER\Software\Aasppapmmxkvs
    • A4_149 = "5cab59d5"
  • In HKEY_CURRENT_USER\Software\Aasppapmmxkvs
    • A1_150 = "ba851d5"
  • In HKEY_CURRENT_USER\Software\Aasppapmmxkvs
    • A2_150 = "c618a7cd"
  • In HKEY_CURRENT_USER\Software\Aasppapmmxkvs
    • A3_150 = "c71bd43f"
  • In HKEY_CURRENT_USER\Software\Aasppapmmxkvs
    • A4_150 = "c618be16"
  • In HKEY_CURRENT_USER\Software\Aasppapmmxkvs
    • A1_151 = "66b6ce12"
  • In HKEY_CURRENT_USER\Software\Aasppapmmxkvs
    • A2_151 = "2f8639a2"
  • In HKEY_CURRENT_USER\Software\Aasppapmmxkvs
    • A3_151 = "2e85487e"
  • In HKEY_CURRENT_USER\Software\Aasppapmmxkvs
    • A4_151 = "2f862257"
  • In HKEY_CURRENT_USER\Software\Aasppapmmxkvs
    • A1_152 = "6defde4"
  • In HKEY_CURRENT_USER\Software\Aasppapmmxkvs
    • A2_152 = "98f39c47"
  • In HKEY_CURRENT_USER\Software\Aasppapmmxkvs
    • A3_152 = "99fecb1"
  • In HKEY_CURRENT_USER\Software\Aasppapmmxkvs
    • A4_152 = "98f38698"
  • In HKEY_CURRENT_USER\Software\Aasppapmmxkvs
    • A1_153 = "364ec68"
  • In HKEY_CURRENT_USER\Software\Aasppapmmxkvs
    • A2_153 = "26fc9a"
  • In HKEY_CURRENT_USER\Software\Aasppapmmxkvs
    • A3_153 = "3638f"
  • In HKEY_CURRENT_USER\Software\Aasppapmmxkvs
    • A4_153 = "26ead9"
  • In HKEY_CURRENT_USER\Software\Aasppapmmxkvs
    • A1_154 = "13945b"
  • In HKEY_CURRENT_USER\Software\Aasppapmmxkvs
    • A2_154 = "6bce5f9a"
  • In HKEY_CURRENT_USER\Software\Aasppapmmxkvs
    • A3_154 = "6acd2533"
  • In HKEY_CURRENT_USER\Software\Aasppapmmxkvs
    • A4_154 = "6bce4f1a"
  • In HKEY_CURRENT_USER\Software\Aasppapmmxkvs
    • A1_155 = "b9cf4c16"
  • In HKEY_CURRENT_USER\Software\Aasppapmmxkvs
    • A2_155 = "d53ba468"
  • In HKEY_CURRENT_USER\Software\Aasppapmmxkvs
    • A3_155 = "d438d972"
  • In HKEY_CURRENT_USER\Software\Aasppapmmxkvs
    • A4_155 = "d53bb35b"
  • In HKEY_CURRENT_USER\Software\Aasppapmmxkvs
    • A1_156 = "6fa346d1"
  • In HKEY_CURRENT_USER\Software\Aasppapmmxkvs
    • A2_156 = "3ea9d3f"
  • In HKEY_CURRENT_USER\Software\Aasppapmmxkvs
    • A3_156 = "3faa7db5"
  • In HKEY_CURRENT_USER\Software\Aasppapmmxkvs
    • A4_156 = "3ea9179c"
  • In HKEY_CURRENT_USER\Software\Aasppapmmxkvs
    • A1_157 = "384f39"
  • In HKEY_CURRENT_USER\Software\Aasppapmmxkvs
    • A2_157 = "a81665fa"
  • In HKEY_CURRENT_USER\Software\Aasppapmmxkvs
    • A3_157 = "a91511f4"
  • In HKEY_CURRENT_USER\Software\Aasppapmmxkvs
    • A4_157 = "a8167bdd"
  • In HKEY_CURRENT_USER\Software\Aasppapmmxkvs
    • A1_158 = "47b33ada"
  • In HKEY_CURRENT_USER\Software\Aasppapmmxkvs
    • A2_158 = "1183c3cf"
  • In HKEY_CURRENT_USER\Software\Aasppapmmxkvs
    • A3_158 = "188a37"
  • In HKEY_CURRENT_USER\Software\Aasppapmmxkvs
    • A4_158 = "1183e1e"
  • In HKEY_CURRENT_USER\Software\Aasppapmmxkvs
    • A1_159 = "6ab6e6"
  • In HKEY_CURRENT_USER\Software\Aasppapmmxkvs
    • A2_159 = "7af1648"
  • In HKEY_CURRENT_USER\Software\Aasppapmmxkvs
    • A3_159 = "7bf22e76"
  • In HKEY_CURRENT_USER\Software\Aasppapmmxkvs
    • A4_159 = "7af1445f"
  • In HKEY_CURRENT_USER\Software\Aasppapmmxkvs
    • A1_160 = "a34583f9"
  • In HKEY_CURRENT_USER\Software\Aasppapmmxkvs
    • A2_160 = "e45ebdd"
  • In HKEY_CURRENT_USER\Software\Aasppapmmxkvs
    • A3_160 = "e55dc289"
  • In HKEY_CURRENT_USER\Software\Aasppapmmxkvs
    • A4_160 = "e45ea8a"
  • In HKEY_CURRENT_USER\Software\Aasppapmmxkvs
    • A1_161 = "d96c4caa"
  • In HKEY_CURRENT_USER\Software\Aasppapmmxkvs
    • A2_161 = "4dcc29f8"
  • In HKEY_CURRENT_USER\Software\Aasppapmmxkvs
    • A3_161 = "4ccf66c8"
  • In HKEY_CURRENT_USER\Software\Aasppapmmxkvs
    • A4_161 = "4dccce1"
  • In HKEY_CURRENT_USER\Software\Aasppapmmxkvs
    • A1_162 = "939f7df6"
  • In HKEY_CURRENT_USER\Software\Aasppapmmxkvs
    • A2_162 = "b7396ead"
  • In HKEY_CURRENT_USER\Software\Aasppapmmxkvs
    • A3_162 = "b63a1bb"
  • In HKEY_CURRENT_USER\Software\Aasppapmmxkvs
    • A4_162 = "b7397122"
  • In HKEY_CURRENT_USER\Software\Aasppapmmxkvs
    • A1_163 = "3fff8a33"
  • In HKEY_CURRENT_USER\Software\Aasppapmmxkvs
    • A2_163 = "2a6f614"
  • In HKEY_CURRENT_USER\Software\Aasppapmmxkvs
    • A3_163 = "21a5bf4a"
  • In HKEY_CURRENT_USER\Software\Aasppapmmxkvs
    • A4_163 = "2a6d563"
  • In HKEY_CURRENT_USER\Software\Aasppapmmxkvs
    • A1_164 = "65a989ea"
  • In HKEY_CURRENT_USER\Software\Aasppapmmxkvs
    • A2_164 = "8a142772"
  • In HKEY_CURRENT_USER\Software\Aasppapmmxkvs
    • A3_164 = "8b17538d"
  • In HKEY_CURRENT_USER\Software\Aasppapmmxkvs
    • A4_164 = "8a1439a4"
  • In HKEY_CURRENT_USER\Software\Aasppapmmxkvs
    • A1_165 = "ca351c59"
  • In HKEY_CURRENT_USER\Software\Aasppapmmxkvs
    • A2_165 = "f3818ee"
  • In HKEY_CURRENT_USER\Software\Aasppapmmxkvs
    • A3_165 = "f282f7cc"
  • In HKEY_CURRENT_USER\Software\Aasppapmmxkvs
    • A4_165 = "f3819de5"
  • In HKEY_CURRENT_USER\Software\Aasppapmmxkvs
    • A1_166 = "9eb4e71"
  • In HKEY_CURRENT_USER\Software\Aasppapmmxkvs
    • A2_166 = "5cef2159"
  • In HKEY_CURRENT_USER\Software\Aasppapmmxkvs
    • A3_166 = "5dec68f"
  • In HKEY_CURRENT_USER\Software\Aasppapmmxkvs
    • A4_166 = "5cef226"
  • In HKEY_CURRENT_USER\Software\Aasppapmmxkvs
    • A1_167 = "395d629"
  • In HKEY_CURRENT_USER\Software\Aasppapmmxkvs
    • A2_167 = "c65c7c78"
  • In HKEY_CURRENT_USER\Software\Aasppapmmxkvs
    • A3_167 = "c75fc4e"
  • In HKEY_CURRENT_USER\Software\Aasppapmmxkvs
    • A4_167 = "c65c6667"
  • In HKEY_CURRENT_USER\Software\Aasppapmmxkvs
    • A1_168 = "6a6dbbf5"
  • In HKEY_CURRENT_USER\Software\Aasppapmmxkvs
    • A2_168 = "2fc9ddc7"
  • In HKEY_CURRENT_USER\Software\Aasppapmmxkvs
    • A3_168 = "2ecaa81"
  • In HKEY_CURRENT_USER\Software\Aasppapmmxkvs
    • A4_168 = "2fc9caa8"
  • In HKEY_CURRENT_USER\Software\Aasppapmmxkvs
    • A1_169 = "5c8451bf"
  • In HKEY_CURRENT_USER\Software\Aasppapmmxkvs
    • A2_169 = "993735d9"
  • In HKEY_CURRENT_USER\Software\Aasppapmmxkvs
    • A3_169 = "983444c"
  • In HKEY_CURRENT_USER\Software\Aasppapmmxkvs
    • A4_169 = "99372ee9"
  • In HKEY_CURRENT_USER\Software\Aasppapmmxkvs
    • A1_170 = "d79c8f6c"
  • In HKEY_CURRENT_USER\Software\Aasppapmmxkvs
    • A2_170 = "2a48f51"
  • In HKEY_CURRENT_USER\Software\Aasppapmmxkvs
    • A3_170 = "3a7f93"
  • In HKEY_CURRENT_USER\Software\Aasppapmmxkvs
    • A4_170 = "2a4932a"
  • In HKEY_CURRENT_USER\Software\Aasppapmmxkvs
    • A1_171 = "13d7d6"
  • In HKEY_CURRENT_USER\Software\Aasppapmmxkvs
    • A2_171 = "6c11d73c"
  • In HKEY_CURRENT_USER\Software\Aasppapmmxkvs
    • A3_171 = "6d129d42"
  • In HKEY_CURRENT_USER\Software\Aasppapmmxkvs
    • A4_171 = "6c11f76b"
  • In HKEY_CURRENT_USER\Software\Aasppapmmxkvs
    • A1_172 = "63befdc"
  • In HKEY_CURRENT_USER\Software\Aasppapmmxkvs
    • A2_172 = "d57f4da"
  • In HKEY_CURRENT_USER\Software\Aasppapmmxkvs
    • A3_172 = "d47c3185"
  • In HKEY_CURRENT_USER\Software\Aasppapmmxkvs
    • A4_172 = "d57f5bac"
  • In HKEY_CURRENT_USER\Software\Aasppapmmxkvs
    • A1_173 = "dc5b493e"
  • In HKEY_CURRENT_USER\Software\Aasppapmmxkvs
    • A2_173 = "3eeca412"
  • In HKEY_CURRENT_USER\Software\Aasppapmmxkvs
    • A3_173 = "3fefd5c4"
  • In HKEY_CURRENT_USER\Software\Aasppapmmxkvs
    • A4_173 = "3eecbfed"
  • In HKEY_CURRENT_USER\Software\Aasppapmmxkvs
    • A1_174 = "d78cd592"
  • In HKEY_CURRENT_USER\Software\Aasppapmmxkvs
    • A2_174 = "a85a3f51"
  • In HKEY_CURRENT_USER\Software\Aasppapmmxkvs
    • A3_174 = "a9594e7"
  • In HKEY_CURRENT_USER\Software\Aasppapmmxkvs
    • A4_174 = "a85a242e"
  • In HKEY_CURRENT_USER\Software\Aasppapmmxkvs
    • A1_175 = "57aae821"
  • In HKEY_CURRENT_USER\Software\Aasppapmmxkvs
    • A2_175 = "11c7a8c6"
  • In HKEY_CURRENT_USER\Software\Aasppapmmxkvs
    • A3_175 = "1c4e246"
  • In HKEY_CURRENT_USER\Software\Aasppapmmxkvs
    • A4_175 = "11c7886f"
  • In HKEY_CURRENT_USER\Software\Aasppapmmxkvs
    • A1_176 = "d19be7"
  • In HKEY_CURRENT_USER\Software\Aasppapmmxkvs
    • A2_176 = "7b34f57"
  • In HKEY_CURRENT_USER\Software\Aasppapmmxkvs
    • A3_176 = "7a378699"
  • In HKEY_CURRENT_USER\Software\Aasppapmmxkvs
    • A4_176 = "7b34ecb"
  • In HKEY_CURRENT_USER\Software\Aasppapmmxkvs
    • A1_177 = "9d59693"
  • In HKEY_CURRENT_USER\Software\Aasppapmmxkvs
    • A2_177 = "e4a24efc"
  • In HKEY_CURRENT_USER\Software\Aasppapmmxkvs
    • A3_177 = "e5a13ad8"
  • In HKEY_CURRENT_USER\Software\Aasppapmmxkvs
    • A4_177 = "e4a25f1"
  • In HKEY_CURRENT_USER\Software\Aasppapmmxkvs
    • A1_178 = "2e2f467"
  • In HKEY_CURRENT_USER\Software\Aasppapmmxkvs
    • A2_178 = "4efaae7"
  • In HKEY_CURRENT_USER\Software\Aasppapmmxkvs
    • A3_178 = "4fcdf1b"
  • In HKEY_CURRENT_USER\Software\Aasppapmmxkvs
    • A4_178 = "4efb532"
  • In HKEY_CURRENT_USER\Software\Aasppapmmxkvs
    • A1_179 = "9c74483e"
  • In HKEY_CURRENT_USER\Software\Aasppapmmxkvs
    • A2_179 = "b77d8e4"
  • In HKEY_CURRENT_USER\Software\Aasppapmmxkvs
    • A3_179 = "b67e735a"
  • In HKEY_CURRENT_USER\Software\Aasppapmmxkvs
    • A4_179 = "b77d1973"
  • In HKEY_CURRENT_USER\Software\Aasppapmmxkvs
    • A1_180 = "a96225fe"
  • In HKEY_CURRENT_USER\Software\Aasppapmmxkvs
    • A2_180 = "2ea66e9"
  • In HKEY_CURRENT_USER\Software\Aasppapmmxkvs
    • A3_180 = "21e9179d"
  • In HKEY_CURRENT_USER\Software\Aasppapmmxkvs
    • A4_180 = "2ea7db4"
  • In HKEY_CURRENT_USER\Software\Aasppapmmxkvs
    • A1_181 = "ea549248"
  • In HKEY_CURRENT_USER\Software\Aasppapmmxkvs
    • A2_181 = "8a57fcb1"
  • In HKEY_CURRENT_USER\Software\Aasppapmmxkvs
    • A3_181 = "8b548bdc"
  • In HKEY_CURRENT_USER\Software\Aasppapmmxkvs
    • A4_181 = "8a57e1f5"
  • In HKEY_CURRENT_USER\Software\Aasppapmmxkvs
    • A1_182 = "42ad9254"
  • In HKEY_CURRENT_USER\Software\Aasppapmmxkvs
    • A2_182 = "f3c55d32"
  • In HKEY_CURRENT_USER\Software\Aasppapmmxkvs
    • A3_182 = "f2c62c1f"
  • In HKEY_CURRENT_USER\Software\Aasppapmmxkvs
    • A4_182 = "f3c54636"
  • In HKEY_CURRENT_USER\Software\Aasppapmmxkvs
    • A1_183 = "5883832e"
  • In HKEY_CURRENT_USER\Software\Aasppapmmxkvs
    • A2_183 = "5d328a16"
  • In HKEY_CURRENT_USER\Software\Aasppapmmxkvs
    • A3_183 = "5c31c5e"
  • In HKEY_CURRENT_USER\Software\Aasppapmmxkvs
    • A4_183 = "5d32aa77"
  • In HKEY_CURRENT_USER\Software\Aasppapmmxkvs
    • A1_184 = "cad62be1"
  • In HKEY_CURRENT_USER\Software\Aasppapmmxkvs
    • A2_184 = "c6a18fb"
  • In HKEY_CURRENT_USER\Software\Aasppapmmxkvs
    • A3_184 = "c7a36491"
  • In HKEY_CURRENT_USER\Software\Aasppapmmxkvs
    • A4_184 = "c6aeb8"
  • In HKEY_CURRENT_USER\Software\Aasppapmmxkvs
    • A1_185 = "53934b4"
  • In HKEY_CURRENT_USER\Software\Aasppapmmxkvs
    • A2_185 = "3d68e5"
  • In HKEY_CURRENT_USER\Software\Aasppapmmxkvs
    • A3_185 = "31e18d"
  • In HKEY_CURRENT_USER\Software\Aasppapmmxkvs
    • A4_185 = "3d72f9"
  • In HKEY_CURRENT_USER\Software\Aasppapmmxkvs
    • A1_186 = "dce11c22"
  • In HKEY_CURRENT_USER\Software\Aasppapmmxkvs
    • A2_186 = "997af2f"
  • In HKEY_CURRENT_USER\Software\Aasppapmmxkvs
    • A3_186 = "9879bd13"
  • In HKEY_CURRENT_USER\Software\Aasppapmmxkvs
    • A4_186 = "997ad73a"
  • In HKEY_CURRENT_USER\Software\Aasppapmmxkvs
    • A1_187 = "b164e133"
  • In HKEY_CURRENT_USER\Software\Aasppapmmxkvs
    • A2_187 = "2e82499"
  • In HKEY_CURRENT_USER\Software\Aasppapmmxkvs
    • A3_187 = "3eb5152"
  • In HKEY_CURRENT_USER\Software\Aasppapmmxkvs
    • A4_187 = "2e83b7b"
  • In HKEY_CURRENT_USER\Software\Aasppapmmxkvs
    • A1_188 = "59e59dea"
  • In HKEY_CURRENT_USER\Software\Aasppapmmxkvs
    • A2_188 = "6c558663"
  • In HKEY_CURRENT_USER\Software\Aasppapmmxkvs
    • A3_188 = "6d56f595"
  • In HKEY_CURRENT_USER\Software\Aasppapmmxkvs
    • A4_188 = "6c559fbc"
  • In HKEY_CURRENT_USER\Software\Aasppapmmxkvs
    • A1_189 = "a7beddae"
  • In HKEY_CURRENT_USER\Software\Aasppapmmxkvs
    • A2_189 = "d5c322e"
  • In HKEY_CURRENT_USER\Software\Aasppapmmxkvs
    • A3_189 = "d4c69d4"
  • In HKEY_CURRENT_USER\Software\Aasppapmmxkvs
    • A4_189 = "d5c33fd"
  • In HKEY_CURRENT_USER\Software\Aasppapmmxkvs
    • A1_190 = "98a86f"
  • In HKEY_CURRENT_USER\Software\Aasppapmmxkvs
    • A2_190 = "3f37527"
  • In HKEY_CURRENT_USER\Software\Aasppapmmxkvs
    • A3_190 = "3e33217"
  • In HKEY_CURRENT_USER\Software\Aasppapmmxkvs
    • A4_190 = "3f3683e"
  • In HKEY_CURRENT_USER\Software\Aasppapmmxkvs
    • A1_191 = "75a8f9c1"
  • In HKEY_CURRENT_USER\Software\Aasppapmmxkvs
    • A2_191 = "a89dd4aa"
  • In HKEY_CURRENT_USER\Software\Aasppapmmxkvs
    • A3_191 = "a99ea656"
  • In HKEY_CURRENT_USER\Software\Aasppapmmxkvs
    • A4_191 = "a89dcc7f"
  • In HKEY_CURRENT_USER\Software\Aasppapmmxkvs
    • A1_192 = "dbfc872"
  • In HKEY_CURRENT_USER\Software\Aasppapmmxkvs
    • A2_192 = "12b253"
  • In HKEY_CURRENT_USER\Software\Aasppapmmxkvs
    • A3_192 = "1385ae9"
  • In HKEY_CURRENT_USER\Software\Aasppapmmxkvs
    • A4_192 = "12b3c"
  • In HKEY_CURRENT_USER\Software\Aasppapmmxkvs
    • A1_193 = "92bf1259"
  • In HKEY_CURRENT_USER\Software\Aasppapmmxkvs
    • A2_193 = "7b78b626"
  • In HKEY_CURRENT_USER\Software\Aasppapmmxkvs
    • A3_193 = "7a7bff28"
  • In HKEY_CURRENT_USER\Software\Aasppapmmxkvs
    • A4_193 = "7b78951"
  • In HKEY_CURRENT_USER\Software\Aasppapmmxkvs
    • A1_194 = "12d8714"
  • In HKEY_CURRENT_USER\Software\Aasppapmmxkvs
    • A2_194 = "e4e5ecb2"
  • In HKEY_CURRENT_USER\Software\Aasppapmmxkvs
    • A3_194 = "e5e6936b"
  • In HKEY_CURRENT_USER\Software\Aasppapmmxkvs
    • A4_194 = "e4e5f942"
  • In HKEY_CURRENT_USER\Software\Aasppapmmxkvs
    • A1_195 = "e85121ee"
  • In HKEY_CURRENT_USER\Software\Aasppapmmxkvs
    • A2_195 = "4e534fe"
  • In HKEY_CURRENT_USER\Software\Aasppapmmxkvs
    • A3_195 = "4f537aa"
  • In HKEY_CURRENT_USER\Software\Aasppapmmxkvs
    • A4_195 = "4e535d83"
  • In HKEY_CURRENT_USER\Software\Aasppapmmxkvs
    • A1_196 = "e5a9db4"
  • In HKEY_CURRENT_USER\Software\Aasppapmmxkvs
    • A2_196 = "b7cdc6e"
  • In HKEY_CURRENT_USER\Software\Aasppapmmxkvs
    • A3_196 = "b6c3abed"
  • In HKEY_CURRENT_USER\Software\Aasppapmmxkvs
    • A4_196 = "b7cc1c4"
  • In HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Image File Execution Options\ctfmon.exe
    • Debugger = "%Windows%\Fonts\Fonts.exe"
  • In HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Image File Execution Options\taskmgr.exe
    • Debugger = "%Windows%\Fonts\tskmgr.exe"
  • In HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Image File Execution Options\boot.exe
    • Debugger = "%Windows%\Fonts\fonts.exe"
  • In HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Image File Execution Options\autorun.exe
    • Debugger = "%System%\drivers\drivers.cab.exe"
  • In HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Image File Execution Options\autoruns.exe
    • Debugger = "%System%\drivers\drivers.cab.exe"
  • In HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Image File Execution Options\auto.exe
    • Debugger = "%System%\drivers\drivers.cab.exe"
  • In HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Image File Execution Options\msconfig.exe
    • Debugger = "%Windows%\Media\rndll32.pif"
  • In HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Image File Execution Options\procexp.exe
    • Debugger = "%Windows%\pchealth\helpctr\binaries\HelpHost.com"
  • In HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer\Run
    • sys = "%Windows%\Fonts\Fonts.exe"
  • In HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\system
    • DisableStatusMessages = "1"
  • In HKEY_CURRENT_USER\Software\Policies\Microsoft\Windows\System\Scripts\Logoff\0
    • DisplayName = "Local Group Policy"
  • In HKEY_CURRENT_USER\Software\Policies\Microsoft\Windows\System\Scripts\Logoff\0
    • GPO-ID = "LocalGPO"
  • In HKEY_CURRENT_USER\Software\Policies\Microsoft\Windows\System\Scripts\Logoff\0
    • GPOName = "Local Group Policy"
  • In HKEY_CURRENT_USER\Software\Policies\Microsoft\Windows\System\Scripts\Logoff\0
    • SOM-ID = "Local"
  • In HKEY_CURRENT_USER\Software\Policies\Microsoft\Windows\System\Scripts\Logoff\0\0
    • Script = "%Windows%\Cursors\Boom.vbs"
  • In HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\System\Scripts\Shutdown\0
    • DisplayName = "Local Group Policy"
  • In HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\System\Scripts\Shutdown\0
    • GPO-ID = "LocalGPO"
  • In HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\System\Scripts\Shutdown\0
    • GPOName = "Local Group Policy"
  • In HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\System\Scripts\Shutdown\0
    • SOM-ID = "Local"
  • In HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\System\Scripts\Shutdown\0\0
    • Script = "%Windows%\Cursors\Boom.vbs"
  • In HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\System\Scripts\Startup\0
    • DisplayName = "Local Group Policy"
  • In HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\System\Scripts\Startup\0
    • GPO-ID = "LocalGPO"
  • In HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\System\Scripts\Startup\0
    • GPOName = "Local Group Policy"
  • In HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\System\Scripts\Startup\0
    • SOM-ID = "Local"
  • In HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\System\Scripts\Startup\0\0
    • Script = "%Windows%\Cursors\Boom.vbs"
  • In HKEY_LOCAL_MACHINE\SOFTWARE\Classes\exefile
    • NeverShowExt = "1"
  • In HKEY_LOCAL_MACHINE\SOFTWARE\Classes\comfile
    • NeverShowExt = "1"
  • In HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Services\SharedAccess\Parameters\FirewallPolicy\StandardProfile\AuthorizedApplications\List
    • %User Temp%\uuawoi.exe = "%User Temp%\uuawoi.exe:*:Enabled:ipsec"

手順 5

変更されたレジストリ値を修正します。

[ 詳細 ]

警告：レジストリはWindowsの構成情報が格納されているデータベースであり、レジストリの編集内容に問題があると、システムが正常に動作しなくなる場合があります。
レジストリの編集はお客様の責任で行っていただくようお願いいたします。弊社ではレジストリの編集による如何なる問題に対しても補償いたしかねます。
レジストリの編集前にこちらをご参照ください。

  • In HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Explorer\Advanced
    • From: Hidden = "2"
      To: Hidden = ""2""
  • In HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center
    • AntiVirusOverride = "1"
  • In HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center
    • AntiVirusDisableNotify = "1"
  • In HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center
    • FirewallDisableNotify = "1"
  • In HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center
    • FirewallOverride = "1"
  • In HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center
    • UpdatesDisableNotify = "1"
  • In HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Advanced\Folder\SuperHidden
    • From: ValueName = "ShowSuperHiden"
      To: ValueName = ""ShowSuperHidden""
  • In HKEY_CURRENT_USER\Control Panel\Desktop
    • From: SCRNSAVE.EXE = "%Windows%\pchealth\helpctr\binaries\HelpHost.com"
      To: SCRNSAVE.EXE = ""%Windows%\system32\logon.scr""
  • In HKEY_CURRENT_USER\Control Panel\Desktop
    • From: ScreenSaveTimeOut = "30"
      To: ScreenSaveTimeOut = ""600""
  • In HKEY_CURRENT_USER\Control Panel\Desktop
    • From: AutoEndTasks = "1"
      To: AutoEndTasks = ""0""

手順 6

以下のファイルを検索し削除します。

[ 詳細 ]
コンポーネントファイルが隠しファイル属性の場合があります。[詳細設定オプション]をクリックし、[隠しファイルとフォルダの検索]のチェックボックスをオンにし、検索結果に隠しファイルとフォルダが含まれるようにしてください。
  • %User Temp%\epxxjs.exe
  • %System%\drivers\nkoin.sys
  • %System%\dllcache\autorun.inf
  • %Windows%\Cursors\Boom.vbs
  • B:\f230
  • %System Root%\f637
  • E:\fa3e
  • E:\fe45
  • F:\1024d
  • G:\10654
  • H:\10a8a
  • I:\10edf
  • J:\11383
  • K:\1178a
  • L:\11b91
  • M:\11fd7
  • N:\123de
  • O:\127e6
  • P:\12c1c
  • Q:\13023
  • R:\1342a
  • %User Temp%\winpins.exe
  • %User Temp%\winqxfd.exe
  • S:\13831
  • %User Temp%\wintrxgl.exe
  • T:\13c39
  • U:\1407e
  • %User Temp%\winbueeof.exe
  • %User Temp%\ajvu.exe
  • V:\14495
  • %User Temp%\opdy.exe
  • %User Temp%\uuawoi.exe
  • W:\148cb
  • X:\14ed6
  • Y:\1530c
  • %User Temp%\winlkic.exe
  • %User Temp%\winkriell.exe
  • %User Temp%\winsqso.exe
  • %System%\dllcache\tskmgr.exe
  • %Windows%\Fonts\wav.wav
  • %User Temp%\fkjcc.exe

手順 7

以下のフォルダを検索し削除します。

[ 詳細 ]
註：このフォルダは、隠しフォルダとして設定されている場合があります。[詳細設定オプション]をクリックし、[隠しファイルとフォルダの検索]のチェックボックスをオンにし、検索結果に隠しファイルとフォルダが含まれるようにしてください。
  • %System%\dllcache\Recycler.{645FF040-5081-101B-9F08-00AA002F954E}

手順 8

最新のバージョン（エンジン、パターンファイル）を導入したウイルス対策製品を用い、ウイルス検索を実行してください。「WORM_OTORUN.SMIC」と検出したファイルはすべて削除してください。 検出されたファイルが、弊社ウイルス対策製品により既に駆除、隔離またはファイル削除の処理が実行された場合、ウイルスの処理は完了しており、他の削除手順は特にありません。

手順 9

以下のファイルをバックアップを用いて修復します。なお、マイクロソフト製品に関連したファイルのみ修復されます。このマルウェア／グレイウェア／スパイウェアが同社製品以外のプログラムをも削除した場合には、該当プログラムを再度インストールする必要があります。

  • %User Temp%\fkjcc.exe

手順 10

以下の削除されたレジストリキーまたはレジストリ値をバックアップを用いて修復します。

※註：マイクロソフト製品に関連したレジストリキーおよびレジストリ値のみが修復されます。このマルウェアもしくはアドウェア等が同社製品以外のプログラムも削除した場合には、該当プログラムを再度インストールする必要があります。

  • In HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Control\SafeBoot\Minimal
    • AppMgmt
  • In HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Control\SafeBoot\Minimal
    • Base
  • In HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Control\SafeBoot\Minimal
    • Boot Bus Extender
  • In HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Control\SafeBoot\Minimal
    • Boot file system
  • In HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Control\SafeBoot\Minimal
    • CryptSvc
  • In HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Control\SafeBoot\Minimal
    • DcomLaunch
  • In HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Control\SafeBoot\Minimal
    • dmadmin
  • In HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Control\SafeBoot\Minimal
    • dmboot.sys
  • In HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Control\SafeBoot\Minimal
    • dmio.sys
  • In HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Control\SafeBoot\Minimal
    • dmload.sys
  • In HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Control\SafeBoot\Minimal
    • dmserver
  • In HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Control\SafeBoot\Minimal
    • EventLog
  • In HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Control\SafeBoot\Minimal
    • File system
  • In HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Control\SafeBoot\Minimal
    • Filter
  • In HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Control\SafeBoot\Minimal
    • HelpSvc
  • In HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Control\SafeBoot\Minimal
    • Netlogon
  • In HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Control\SafeBoot\Minimal
    • PCI Configuration
  • In HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Control\SafeBoot\Minimal
    • PlugPlay
  • In HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Control\SafeBoot\Minimal
    • PNP Filter
  • In HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Control\SafeBoot\Minimal
    • Primary disk
  • In HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Control\SafeBoot\Minimal
    • RpcSs
  • In HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Control\SafeBoot\Minimal
    • SCSI Class
  • In HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Control\SafeBoot\Minimal
    • sermouse.sys
  • In HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Control\SafeBoot\Minimal
    • sr.sys
  • In HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Control\SafeBoot\Minimal
    • SRService
  • In HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Control\SafeBoot\Minimal
    • System Bus Extender
  • In HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Control\SafeBoot\Minimal
    • vga.sys
  • In HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Control\SafeBoot\Minimal
    • vgasave.sys
  • In HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Control\SafeBoot\Minimal
    • WinMgmt
  • In HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Control\SafeBoot\Minimal
    • {36FC9E60-C465-11CF-8056-444553540000}
  • In HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Control\SafeBoot\Minimal
    • {4D36E965-E325-11CE-BFC1-08002BE10318}
  • In HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Control\SafeBoot\Minimal
    • {4D36E967-E325-11CE-BFC1-08002BE10318}
  • In HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Control\SafeBoot\Minimal
    • {4D36E969-E325-11CE-BFC1-08002BE10318}
  • In HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Control\SafeBoot\Minimal
    • {4D36E96A-E325-11CE-BFC1-08002BE10318}
  • In HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Control\SafeBoot\Minimal
    • {4D36E96B-E325-11CE-BFC1-08002BE10318}
  • In HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Control\SafeBoot\Minimal
    • {4D36E96F-E325-11CE-BFC1-08002BE10318}
  • In HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Control\SafeBoot\Minimal
    • {4D36E977-E325-11CE-BFC1-08002BE10318}
  • In HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Control\SafeBoot\Minimal
    • {4D36E97B-E325-11CE-BFC1-08002BE10318}
  • In HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Control\SafeBoot\Minimal
    • {4D36E97D-E325-11CE-BFC1-08002BE10318}
  • In HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Control\SafeBoot\Minimal
    • {4D36E980-E325-11CE-BFC1-08002BE10318}
  • In HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Control\SafeBoot\Minimal
    • {71A27CDD-812A-11D0-BEC7-08002BE2092F}
  • In HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Control\SafeBoot\Minimal
    • {745A17A0-74D3-11D0-B6FE-00A0C90F57DA}
  • In HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Control\SafeBoot
    • Minimal
  • In HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Control\SafeBoot\Network
    • AFD
  • In HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Control\SafeBoot\Network
    • AppMgmt
  • In HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Control\SafeBoot\Network
    • Base
  • In HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Control\SafeBoot\Network
    • Boot Bus Extender
  • In HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Control\SafeBoot\Network
    • Boot file system
  • In HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Control\SafeBoot\Network
    • Browser
  • In HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Control\SafeBoot\Network
    • CryptSvc
  • In HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Control\SafeBoot\Network
    • DcomLaunch
  • In HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Control\SafeBoot\Network
    • Dhcp
  • In HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Control\SafeBoot\Network
    • dmadmin
  • In HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Control\SafeBoot\Network
    • dmboot.sys
  • In HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Control\SafeBoot\Network
    • dmio.sys
  • In HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Control\SafeBoot\Network
    • dmload.sys
  • In HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Control\SafeBoot\Network
    • dmserver
  • In HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Control\SafeBoot\Network
    • DnsCache
  • In HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Control\SafeBoot\Network
    • EventLog
  • In HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Control\SafeBoot\Network
    • File system
  • In HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Control\SafeBoot\Network
    • Filter
  • In HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Control\SafeBoot\Network
    • HelpSvc
  • In HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Control\SafeBoot\Network
    • ip6fw.sys
  • In HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Control\SafeBoot\Network
    • ipnat.sys
  • In HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Control\SafeBoot\Network
    • LanmanServer
  • In HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Control\SafeBoot\Network
    • LanmanWorkstation
  • In HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Control\SafeBoot\Network
    • LmHosts
  • In HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Control\SafeBoot\Network
    • Messenger
  • In HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Control\SafeBoot\Network
    • NDIS
  • In HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Control\SafeBoot\Network
    • NDIS Wrapper
  • In HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Control\SafeBoot\Network
    • Ndisuio
  • In HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Control\SafeBoot\Network
    • NetBIOS
  • In HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Control\SafeBoot\Network
    • NetBIOSGroup
  • In HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Control\SafeBoot\Network
    • NetBT
  • In HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Control\SafeBoot\Network
    • NetDDEGroup
  • In HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Control\SafeBoot\Network
    • Netlogon
  • In HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Control\SafeBoot\Network
    • NetMan
  • In HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Control\SafeBoot
    • Network
  • In HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Control\SafeBoot\Network
    • NetworkProvider
  • In HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Control\SafeBoot\Network
    • NtLmSsp
  • In HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Control\SafeBoot\Network
    • PCI Configuration
  • In HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Control\SafeBoot\Network
    • PlugPlay
  • In HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Control\SafeBoot\Network
    • PNP Filter
  • In HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Control\SafeBoot\Network
    • PNP_TDI
  • In HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Control\SafeBoot\Network
    • Primary disk
  • In HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Control\SafeBoot\Network
    • rdpcdd.sys
  • In HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Control\SafeBoot\Network
    • rdpdd.sys
  • In HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Control\SafeBoot\Network
    • rdpwd.sys
  • In HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Control\SafeBoot\Network
    • rdsessmgr
  • In HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Control\SafeBoot\Network
    • RpcSs
  • In HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Control\SafeBoot\Network
    • SCSI Class
  • In HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Control\SafeBoot\Network
    • sermouse.sys
  • In HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Control\SafeBoot\Network
    • SharedAccess
  • In HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Control\SafeBoot\Network
    • sr.sys
  • In HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Control\SafeBoot\Network
    • SRService
  • In HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Control\SafeBoot\Network
    • Streams Drivers
  • In HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Control\SafeBoot\Network
    • System Bus Extender
  • In HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Control\SafeBoot\Network
    • Tcpip
  • In HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Control\SafeBoot\Network
    • TDI
  • In HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Control\SafeBoot\Network
    • tdpipe.sys
  • In HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Control\SafeBoot\Network
    • tdtcp.sys
  • In HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Control\SafeBoot\Network
    • termservice
  • In HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Control\SafeBoot\Network
    • vga.sys
  • In HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Control\SafeBoot\Network
    • vgasave.sys
  • In HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Control\SafeBoot\Network
    • WinMgmt
  • In HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Control\SafeBoot\Network
    • WZCSVC
  • In HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Control\SafeBoot\Network
    • {36FC9E60-C465-11CF-8056-444553540000}
  • In HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Control\SafeBoot\Network
    • {4D36E965-E325-11CE-BFC1-08002BE10318}
  • In HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Control\SafeBoot\Network
    • {4D36E967-E325-11CE-BFC1-08002BE10318}
  • In HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Control\SafeBoot\Network
    • {4D36E969-E325-11CE-BFC1-08002BE10318}
  • In HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Control\SafeBoot\Network
    • {4D36E96A-E325-11CE-BFC1-08002BE10318}
  • In HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Control\SafeBoot\Network
    • {4D36E96B-E325-11CE-BFC1-08002BE10318}
  • In HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Control\SafeBoot\Network
    • {4D36E96F-E325-11CE-BFC1-08002BE10318}
  • In HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Control\SafeBoot\Network
    • {4D36E972-E325-11CE-BFC1-08002BE10318}
  • In HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Control\SafeBoot\Network
    • {4D36E973-E325-11CE-BFC1-08002BE10318}
  • In HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Control\SafeBoot\Network
    • {4D36E974-E325-11CE-BFC1-08002BE10318}
  • In HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Control\SafeBoot\Network
    • {4D36E975-E325-11CE-BFC1-08002BE10318}
  • In HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Control\SafeBoot\Network
    • {4D36E977-E325-11CE-BFC1-08002BE10318}
  • In HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Control\SafeBoot\Network
    • {4D36E97B-E325-11CE-BFC1-08002BE10318}
  • In HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Control\SafeBoot\Network
    • {4D36E97D-E325-11CE-BFC1-08002BE10318}
  • In HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Control\SafeBoot\Network
    • {4D36E980-E325-11CE-BFC1-08002BE10318}
  • In HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Control\SafeBoot\Network
    • {71A27CDD-812A-11D0-BEC7-08002BE2092F}
  • In HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Control\SafeBoot\Network
    • {745A17A0-74D3-11D0-B6FE-00A0C90F57DA}
  • In HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Control\SafeBoot
    • Network


ご利用はいかがでしたか？　アンケートにご協力ください