プラットフォーム:

Windows

 危険度:
 感染確認数:
 システムへの影響:
 情報漏えい:

  • マルウェアタイプ:
    スパイウェア

  • 破壊活動の有無:
    なし

  • 暗号化:
     

  • 感染報告の有無 :
    はい

  概要

スパイウェアは、他のマルウェアに作成されるか、悪意あるWebサイトからユーザが誤ってダウンロードすることによりコンピュータに侵入します。

  詳細

ファイルサイズ 240,640 bytes
タイプ EXE
メモリ常駐 なし
発見日 2016年2月8日

侵入方法

スパイウェアは、他のマルウェアに作成されるか、悪意あるWebサイトからユーザが誤ってダウンロードすることによりコンピュータに侵入します。

インストール

スパイウェアは、感染したコンピュータ内に以下のように自身のコピーを作成します。

  • %User Profile%\FeedCache\nvSCPAPISrv.exe

(註:%User Profile% フォルダは、Windows 2000、XP および Server 2003 の場合、通常、"C:\Documents and Settings\<ユーザ名>"、Windows Vista 、 7 、8、8.1 、Server 2008 および Server 2012の場合、"C:\Users\<ユーザ名>" です。.)

スパイウェアは、以下のフォルダを作成します。

  • %User Profile%\Microsoft\Blend
  • %User Profile%\Blend\14.0
  • %User Profile%\14.0\FeedCache

(註:%User Profile% フォルダは、Windows 2000、XP および Server 2003 の場合、通常、"C:\Documents and Settings\<ユーザ名>"、Windows Vista 、 7 、8、8.1 、Server 2008 および Server 2012の場合、"C:\Users\<ユーザ名>" です。.)

他のシステム変更

スパイウェアは、以下のファイルを削除します。

  • {malware path and file name}:zone.identifier
  • %User Profile%\FeedCache\spoolsw.exe:Zone.Identifier
  • %User Temp%\winwhdamx.exe
  • %User Temp%\jnns.exe

(註:%User Profile% フォルダは、Windows 2000、XP および Server 2003 の場合、通常、"C:\Documents and Settings\<ユーザ名>"、Windows Vista 、 7 、8、8.1 、Server 2008 および Server 2012の場合、"C:\Users\<ユーザ名>" です。.. %User Temp%フォルダは、ユーザの一時フォルダで、Windows 2000、XP および Server 2003 の場合、通常、"C:\Documents and Settings\<ユーザー名>\Local Settings\Temp"、Windows Vista 、 7 、8、8.1 、Server 2008 および Server 2012の場合、"C:\Users\<ユーザ名>\AppData\Local\Temp" です。.)

スパイウェアは、以下のレジストリキーを追加します。

HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\
Security Center\Svc

HKEY_CURRENT_USER\Software\Yqshjvw

HKEY_CURRENT_USER\Software\WinRAR

HKEY_CURRENT_USER\Software\Yqshjvw\
1926745233

スパイウェアは、以下のレジストリ値を追加します。

HKEY_CURRENT_USER\Software\Yqshjvw
W3_180 = "35397b5"

HKEY_CURRENT_USER\Software\Yqshjvw
W4_180 = "343a112c"

HKEY_CURRENT_USER\Software\Yqshjvw
W1_181 = "add7313d"

HKEY_CURRENT_USER\Software\Yqshjvw
W2_181 = "96a66efc"

HKEY_CURRENT_USER\Software\Yqshjvw
W3_181 = "97a51aa"

HKEY_CURRENT_USER\Software\Yqshjvw
W4_181 = "96a67a83"

HKEY_CURRENT_USER\Software\Yqshjvw
W1_182 = "47748a"

HKEY_CURRENT_USER\Software\Yqshjvw
W2_182 = "f912f6fd"

HKEY_CURRENT_USER\Software\Yqshjvw
W3_182 = "f81189f3"

HKEY_CURRENT_USER\Software\Yqshjvw
W4_182 = "f912e3da"

HKEY_CURRENT_USER\Software\Yqshjvw
W1_183 = "ab1726e5"

HKEY_CURRENT_USER\Software\Yqshjvw
W2_183 = "5b7f5c81"

HKEY_CURRENT_USER\Software\Yqshjvw
W3_183 = "5a7c2718"

HKEY_CURRENT_USER\Software\Yqshjvw
W4_183 = "5b7f4d31"

HKEY_CURRENT_USER\Software\Yqshjvw
W1_184 = "21c4613c"

HKEY_CURRENT_USER\Software\Yqshjvw
W2_184 = "bdeba378"

HKEY_CURRENT_USER\Software\Yqshjvw
W3_184 = "bce8dca1"

HKEY_CURRENT_USER\Software\Yqshjvw
W4_184 = "bdebb688"

HKEY_CURRENT_USER\Software\Yqshjvw\
1926745233
1651272023 = "6"

HKEY_CURRENT_USER\Software\Yqshjvw\
1926745233
-992423250 = "0"

HKEY_CURRENT_USER\Software\Yqshjvw\
1926745233
658848773 = "0"

HKEY_CURRENT_USER\Software\Yqshjvw\
1926745233
-1984846500 = "1e"

HKEY_CURRENT_USER\Software\Yqshjvw\
1926745233
-333574477 = "43"

HKEY_CURRENT_USER\Software\Yqshjvw\
1926745233
1317697546 = "{random characters}"

HKEY_CURRENT_USER\Software\Yqshjvw\
1926745233
-1325997727 = "{random characters}"

HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\
Security Center
UacDisableNotify = "1"

HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\
Security Center\Svc
AntiVirusOverride = "1"

HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\
Security Center\Svc
AntiVirusDisableNotify = "1"

HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\
Security Center\Svc
FirewallDisableNotify = "1"

HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\
Security Center\Svc
FirewallOverride = "1"

HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\
Security Center\Svc
UpdatesDisableNotify = "1"

HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\
Security Center\Svc
UacDisableNotify = "1"

HKEY_CURRENT_USER\Software\Microsoft\
Windows\CurrentVersion\Internet Settings
GlobalUserOffline = "0"

HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\
Windows\CurrentVersion\policies\
system
EnableLUA = "0"

HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\
Services\SharedAccess\Parameters\
FirewallPolicy\StandardProfile\AuthorizedApplications\
List
%Windows%\Microsoft.NET\Framework\v2.0.50727\RegAsm.exe = "{random characters}"

HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\
Services\SharedAccess\Parameters\
FirewallPolicy\StandardProfile
EnableFirewall = "0"

HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\
Services\SharedAccess\Parameters\
FirewallPolicy\StandardProfile
DoNotAllowExceptions = "0"

HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\
Services\SharedAccess\Parameters\
FirewallPolicy\StandardProfile
DisableNotifications = "1"

HKEY_CURRENT_USER\Software\Yqshjvw
W1_0 = "13ce4c5e"

HKEY_CURRENT_USER\Software\Yqshjvw
W2_0 = "5c1"

HKEY_CURRENT_USER\Software\Yqshjvw
W3_0 = "136a29"

HKEY_CURRENT_USER\Software\Yqshjvw
W4_0 = "0"

HKEY_CURRENT_USER\Software\Yqshjvw
W1_1 = "79aca21"

HKEY_CURRENT_USER\Software\Yqshjvw
W2_1 = "626c7ca3"

HKEY_CURRENT_USER\Software\Yqshjvw
W3_1 = "636f37e"

HKEY_CURRENT_USER\Software\Yqshjvw
W4_1 = "626c6957"

HKEY_CURRENT_USER\Software\Yqshjvw
W1_2 = "2fd2114"

HKEY_CURRENT_USER\Software\Yqshjvw
W2_2 = "c4d8cf6a"

HKEY_CURRENT_USER\Software\Yqshjvw
W3_2 = "c5dbb887"

HKEY_CURRENT_USER\Software\Yqshjvw
W4_2 = "c4d8d2ae"

HKEY_CURRENT_USER\Software\Yqshjvw
W1_3 = "4caa338"

HKEY_CURRENT_USER\Software\Yqshjvw
W2_3 = "274525b1"

HKEY_CURRENT_USER\Software\Yqshjvw
W3_3 = "2646562c"

HKEY_CURRENT_USER\Software\Yqshjvw
W4_3 = "27453c5"

HKEY_CURRENT_USER\Software\Yqshjvw
W1_4 = "22181def"

HKEY_CURRENT_USER\Software\Yqshjvw
W2_4 = "89b1b994"

HKEY_CURRENT_USER\Software\Yqshjvw
W3_4 = "88b2cf75"

HKEY_CURRENT_USER\Software\Yqshjvw
W4_4 = "89b1a55c"

HKEY_CURRENT_USER\Software\Yqshjvw
W1_5 = "e9c33679"

HKEY_CURRENT_USER\Software\Yqshjvw
W2_5 = "ec1e1c73"

HKEY_CURRENT_USER\Software\Yqshjvw
W3_5 = "ed1d649a"

HKEY_CURRENT_USER\Software\Yqshjvw
W4_5 = "ec1eeb3"

HKEY_CURRENT_USER\Software\Yqshjvw
W1_6 = "3de4731"

HKEY_CURRENT_USER\Software\Yqshjvw
W2_6 = "4e8ad73a"

HKEY_CURRENT_USER\Software\Yqshjvw
W3_6 = "4f891223"

HKEY_CURRENT_USER\Software\Yqshjvw
W4_6 = "4e8a78a"

HKEY_CURRENT_USER\Software\Yqshjvw
W1_7 = "e6c3523b"

HKEY_CURRENT_USER\Software\Yqshjvw
W2_7 = "bf6c4aa"

HKEY_CURRENT_USER\Software\Yqshjvw
W3_7 = "b1f58b48"

HKEY_CURRENT_USER\Software\Yqshjvw
W4_7 = "bf6e161"

HKEY_CURRENT_USER\Software\Yqshjvw
W1_8 = "f971c873"

HKEY_CURRENT_USER\Software\Yqshjvw
W2_8 = "13635332"

HKEY_CURRENT_USER\Software\Yqshjvw
W3_8 = "126291"

HKEY_CURRENT_USER\Software\Yqshjvw
W4_8 = "13634ab8"

HKEY_CURRENT_USER\Software\Yqshjvw
W1_9 = "943774a"

HKEY_CURRENT_USER\Software\Yqshjvw
W2_9 = "75cf91c4"

HKEY_CURRENT_USER\Software\Yqshjvw
W3_9 = "74ccde26"

HKEY_CURRENT_USER\Software\Yqshjvw
W4_9 = "75cfb4f"

HKEY_CURRENT_USER\Software\Yqshjvw
W1_10 = "4e3c1d"

HKEY_CURRENT_USER\Software\Yqshjvw
W2_10 = "d83cdb"

HKEY_CURRENT_USER\Software\Yqshjvw
W3_10 = "d93f774f"

HKEY_CURRENT_USER\Software\Yqshjvw
W4_10 = "d83c1d66"

HKEY_CURRENT_USER\Software\Yqshjvw
W1_11 = "b2ee921e"

HKEY_CURRENT_USER\Software\Yqshjvw
W2_11 = "3aa897e4"

HKEY_CURRENT_USER\Software\Yqshjvw
W3_11 = "3babec94"

HKEY_CURRENT_USER\Software\Yqshjvw
W4_11 = "3aa886bd"

HKEY_CURRENT_USER\Software\Yqshjvw
W1_12 = "876a2bd"

HKEY_CURRENT_USER\Software\Yqshjvw
W2_12 = "9d14e2e7"

HKEY_CURRENT_USER\Software\Yqshjvw
W3_12 = "9c179a3d"

HKEY_CURRENT_USER\Software\Yqshjvw
W4_12 = "9d14f14"

HKEY_CURRENT_USER\Software\Yqshjvw
W1_13 = "a728471"

HKEY_CURRENT_USER\Software\Yqshjvw
W2_13 = "ff814f"

HKEY_CURRENT_USER\Software\Yqshjvw
W3_13 = "fe823342"

HKEY_CURRENT_USER\Software\Yqshjvw
W4_13 = "ff81596b"

HKEY_CURRENT_USER\Software\Yqshjvw
W1_14 = "a6e163b3"

HKEY_CURRENT_USER\Software\Yqshjvw
W2_14 = "61eddc78"

HKEY_CURRENT_USER\Software\Yqshjvw
W3_14 = "6eea8eb"

HKEY_CURRENT_USER\Software\Yqshjvw
W4_14 = "61edc2c2"

HKEY_CURRENT_USER\Software\Yqshjvw
W1_15 = "6e46a3"

HKEY_CURRENT_USER\Software\Yqshjvw
W2_15 = "c45a32a3"

HKEY_CURRENT_USER\Software\Yqshjvw
W3_15 = "c559463"

HKEY_CURRENT_USER\Software\Yqshjvw
W4_15 = "c45a2c19"

HKEY_CURRENT_USER\Software\Yqshjvw
W1_16 = "f12decc"

HKEY_CURRENT_USER\Software\Yqshjvw
W2_16 = "26c687b4"

HKEY_CURRENT_USER\Software\Yqshjvw
W3_16 = "27c5ff59"

HKEY_CURRENT_USER\Software\Yqshjvw
W4_16 = "26c6957"

HKEY_CURRENT_USER\Software\Yqshjvw
W1_17 = "4ff2d58a"

HKEY_CURRENT_USER\Software\Yqshjvw
W2_17 = "89326563"

HKEY_CURRENT_USER\Software\Yqshjvw
W3_17 = "883194ee"

HKEY_CURRENT_USER\Software\Yqshjvw
W4_17 = "8932fec7"

HKEY_CURRENT_USER\Software\Yqshjvw
W1_18 = "ede7c873"

HKEY_CURRENT_USER\Software\Yqshjvw
W2_18 = "eb9f79f2"

HKEY_CURRENT_USER\Software\Yqshjvw
W3_18 = "ea9c237"

HKEY_CURRENT_USER\Software\Yqshjvw
W4_18 = "eb9f681e"

HKEY_CURRENT_USER\Software\Yqshjvw
W1_19 = "cc2475b"

HKEY_CURRENT_USER\Software\Yqshjvw
W2_19 = "4ebc452"

HKEY_CURRENT_USER\Software\Yqshjvw
W3_19 = "4f8bb5c"

HKEY_CURRENT_USER\Software\Yqshjvw
W4_19 = "4ebd175"

HKEY_CURRENT_USER\Software\Yqshjvw
W1_20 = "6e57f74"

HKEY_CURRENT_USER\Software\Yqshjvw
W2_20 = "b78291a"

HKEY_CURRENT_USER\Software\Yqshjvw
W3_20 = "b17b5e5"

HKEY_CURRENT_USER\Software\Yqshjvw
W4_20 = "b783acc"

HKEY_CURRENT_USER\Software\Yqshjvw
W1_21 = "f5b2df6"

HKEY_CURRENT_USER\Software\Yqshjvw
W2_21 = "12e4b14"

HKEY_CURRENT_USER\Software\Yqshjvw
W3_21 = "13e7cea"

HKEY_CURRENT_USER\Software\Yqshjvw
W4_21 = "12e4a423"

HKEY_CURRENT_USER\Software\Yqshjvw
W1_22 = "c97e6225"

HKEY_CURRENT_USER\Software\Yqshjvw
W2_22 = "7551158c"

HKEY_CURRENT_USER\Software\Yqshjvw
W3_22 = "74526753"

HKEY_CURRENT_USER\Software\Yqshjvw
W4_22 = "7551d7a"

HKEY_CURRENT_USER\Software\Yqshjvw
W1_23 = "178137e"

HKEY_CURRENT_USER\Software\Yqshjvw
W2_23 = "d7bd6cb2"

HKEY_CURRENT_USER\Software\Yqshjvw
W3_23 = "d6be1cf8"

HKEY_CURRENT_USER\Software\Yqshjvw
W4_23 = "d7bd76d1"

HKEY_CURRENT_USER\Software\Yqshjvw
W1_24 = "a4b666"

HKEY_CURRENT_USER\Software\Yqshjvw
W2_24 = "3a29f91f"

HKEY_CURRENT_USER\Software\Yqshjvw
W3_24 = "3b2a8a1"

HKEY_CURRENT_USER\Software\Yqshjvw
W4_24 = "3a29e28"

HKEY_CURRENT_USER\Software\Yqshjvw
W1_25 = "816ca7c"

HKEY_CURRENT_USER\Software\Yqshjvw
W2_25 = "9c965f7"

HKEY_CURRENT_USER\Software\Yqshjvw
W3_25 = "9d952356"

HKEY_CURRENT_USER\Software\Yqshjvw
W4_25 = "9c96497f"

HKEY_CURRENT_USER\Software\Yqshjvw
W1_26 = "2a452da5"

HKEY_CURRENT_USER\Software\Yqshjvw
W2_26 = "ff2a182"

HKEY_CURRENT_USER\Software\Yqshjvw
W3_26 = "fe1d8ff"

HKEY_CURRENT_USER\Software\Yqshjvw
W4_26 = "ff2b2d6"

HKEY_CURRENT_USER\Software\Yqshjvw
W1_27 = "34d79dbb"

HKEY_CURRENT_USER\Software\Yqshjvw
W2_27 = "616f994"

HKEY_CURRENT_USER\Software\Yqshjvw
W3_27 = "66c764"

HKEY_CURRENT_USER\Software\Yqshjvw
W4_27 = "616f1c2d"

HKEY_CURRENT_USER\Software\Yqshjvw
W1_28 = "9af282e3"

HKEY_CURRENT_USER\Software\Yqshjvw
W2_28 = "c3db92ce"

HKEY_CURRENT_USER\Software\Yqshjvw
W3_28 = "c2d8efad"

HKEY_CURRENT_USER\Software\Yqshjvw
W4_28 = "c3db8584"

HKEY_CURRENT_USER\Software\Yqshjvw
W1_29 = "2b7e2382"

HKEY_CURRENT_USER\Software\Yqshjvw
W2_29 = "2647fb77"

HKEY_CURRENT_USER\Software\Yqshjvw
W3_29 = "274484f2"

HKEY_CURRENT_USER\Software\Yqshjvw
W4_29 = "2647eedb"

HKEY_CURRENT_USER\Software\Yqshjvw
W1_30 = "d92ef848"

HKEY_CURRENT_USER\Software\Yqshjvw
W2_30 = "88b44dc6"

HKEY_CURRENT_USER\Software\Yqshjvw
W3_30 = "89b7321b"

HKEY_CURRENT_USER\Software\Yqshjvw
W4_30 = "88b45832"

HKEY_CURRENT_USER\Software\Yqshjvw
W1_31 = "d116843"

HKEY_CURRENT_USER\Software\Yqshjvw
W2_31 = "eb2ddfc"

HKEY_CURRENT_USER\Software\Yqshjvw
W3_31 = "ea23aba"

HKEY_CURRENT_USER\Software\Yqshjvw
W4_31 = "eb2c189"

HKEY_CURRENT_USER\Software\Yqshjvw
W1_32 = "db515d93"

HKEY_CURRENT_USER\Software\Yqshjvw
W2_32 = "4d8d35b4"

HKEY_CURRENT_USER\Software\Yqshjvw
W3_32 = "4c8e4c9"

HKEY_CURRENT_USER\Software\Yqshjvw
W4_32 = "4d8d2ae"

HKEY_CURRENT_USER\Software\Yqshjvw
W1_33 = "8d43f4d"

HKEY_CURRENT_USER\Software\Yqshjvw
W2_33 = "aff98cc3"

HKEY_CURRENT_USER\Software\Yqshjvw
W3_33 = "aefafe1e"

HKEY_CURRENT_USER\Software\Yqshjvw
W4_33 = "aff99437"

HKEY_CURRENT_USER\Software\Yqshjvw
W1_34 = "8df4d"

HKEY_CURRENT_USER\Software\Yqshjvw
W2_34 = "1265e833"

HKEY_CURRENT_USER\Software\Yqshjvw
W3_34 = "136697a7"

HKEY_CURRENT_USER\Software\Yqshjvw
W4_34 = "1265fd8e"

HKEY_CURRENT_USER\Software\Yqshjvw
W1_35 = "89e358b"

HKEY_CURRENT_USER\Software\Yqshjvw
W2_35 = "74d268ff"

HKEY_CURRENT_USER\Software\Yqshjvw
W3_35 = "75d1ccc"

HKEY_CURRENT_USER\Software\Yqshjvw
W4_35 = "74d266e5"

HKEY_CURRENT_USER\Software\Yqshjvw
W1_36 = "f13b46a"

HKEY_CURRENT_USER\Software\Yqshjvw
W2_36 = "d73ec24"

HKEY_CURRENT_USER\Software\Yqshjvw
W3_36 = "d63dba15"

HKEY_CURRENT_USER\Software\Yqshjvw
W4_36 = "d73ed3c"

HKEY_CURRENT_USER\Software\Yqshjvw
W1_37 = "58491a4d"

HKEY_CURRENT_USER\Software\Yqshjvw
W2_37 = "39ab24bf"

HKEY_CURRENT_USER\Software\Yqshjvw
W3_37 = "38a853ba"

HKEY_CURRENT_USER\Software\Yqshjvw
W4_37 = "39ab3993"

HKEY_CURRENT_USER\Software\Yqshjvw
W1_38 = "b967bc91"

HKEY_CURRENT_USER\Software\Yqshjvw
W2_38 = "9c17bfca"

HKEY_CURRENT_USER\Software\Yqshjvw
W3_38 = "9d14c8c3"

HKEY_CURRENT_USER\Software\Yqshjvw
W4_38 = "9c17a2ea"

HKEY_CURRENT_USER\Software\Yqshjvw
W1_39 = "192bb7f"

HKEY_CURRENT_USER\Software\Yqshjvw
W2_39 = "fe8412fb"

HKEY_CURRENT_USER\Software\Yqshjvw
W3_39 = "ff876668"

HKEY_CURRENT_USER\Software\Yqshjvw
W4_39 = "fe84c41"

HKEY_CURRENT_USER\Software\Yqshjvw
W1_40 = "a89daac1"

HKEY_CURRENT_USER\Software\Yqshjvw
W2_40 = "6f7d5b"

HKEY_CURRENT_USER\Software\Yqshjvw
W3_40 = "61f31fb1"

HKEY_CURRENT_USER\Software\Yqshjvw
W4_40 = "6f7598"

HKEY_CURRENT_USER\Software\Yqshjvw
W1_41 = "a4525f4"

HKEY_CURRENT_USER\Software\Yqshjvw
W2_41 = "c35ccde"

HKEY_CURRENT_USER\Software\Yqshjvw
W3_41 = "c25fb4c6"

HKEY_CURRENT_USER\Software\Yqshjvw
W4_41 = "c35cdeef"

HKEY_CURRENT_USER\Software\Yqshjvw
W1_42 = "83783835"

HKEY_CURRENT_USER\Software\Yqshjvw
W2_42 = "25c96918"

HKEY_CURRENT_USER\Software\Yqshjvw
W3_42 = "24ca226f"

HKEY_CURRENT_USER\Software\Yqshjvw
W4_42 = "25c94846"

HKEY_CURRENT_USER\Software\Yqshjvw
W1_43 = "4e16cded"

HKEY_CURRENT_USER\Software\Yqshjvw
W2_43 = "8835ab63"

HKEY_CURRENT_USER\Software\Yqshjvw
W3_43 = "8936dbb4"

HKEY_CURRENT_USER\Software\WinRAR
HWID = "{random values}"

HKEY_CURRENT_USER\Software\Yqshjvw
W4_43 = "8835b19d"

HKEY_CURRENT_USER\Software\Yqshjvw
W1_44 = "777a5f45"

HKEY_CURRENT_USER\Software\Yqshjvw
W2_44 = "eaa2ef3"

HKEY_CURRENT_USER\Software\Yqshjvw
W3_44 = "eba17dd"

HKEY_CURRENT_USER\Software\Yqshjvw
W4_44 = "eaa21af4"

HKEY_CURRENT_USER\Software\Yqshjvw
W1_45 = "63c69938"

HKEY_CURRENT_USER\Software\Yqshjvw
W2_45 = "4dead45"

HKEY_CURRENT_USER\Software\Yqshjvw
W3_45 = "4cdee62"

HKEY_CURRENT_USER\Software\Yqshjvw
W4_45 = "4de844b"

HKEY_CURRENT_USER\Software\Yqshjvw
W1_46 = "9279fe1f"

HKEY_CURRENT_USER\Software\Yqshjvw
W2_46 = "af7afab3"

HKEY_CURRENT_USER\Software\Yqshjvw
W3_46 = "ae79878b"

HKEY_CURRENT_USER\Software\Yqshjvw
W4_46 = "af7aeda2"

HKEY_CURRENT_USER\Software\Yqshjvw
W1_47 = "a39d7f8"

HKEY_CURRENT_USER\Software\Yqshjvw
W2_47 = "11e77ff7"

HKEY_CURRENT_USER\Software\Yqshjvw
W3_47 = "1e43cd"

HKEY_CURRENT_USER\Software\Yqshjvw
W4_47 = "11e756f9"

HKEY_CURRENT_USER\Software\Yqshjvw
W1_48 = "56113ec"

HKEY_CURRENT_USER\Software\Yqshjvw
W2_48 = "7453d6e4"

HKEY_CURRENT_USER\Software\Yqshjvw
W3_48 = "755aa79"

HKEY_CURRENT_USER\Software\Yqshjvw
W4_48 = "7453c5"

HKEY_CURRENT_USER\Software\Yqshjvw
W1_49 = "ec55d6f"

HKEY_CURRENT_USER\Software\Yqshjvw
W2_49 = "d6c371d"

HKEY_CURRENT_USER\Software\Yqshjvw
W3_49 = "d7c3438e"

HKEY_CURRENT_USER\Software\Yqshjvw
W4_49 = "d6c29a7"

HKEY_CURRENT_USER\Software\Yqshjvw
W1_50 = "d67b478e"

HKEY_CURRENT_USER\Software\Yqshjvw
W2_50 = "392c85b4"

HKEY_CURRENT_USER\Software\Yqshjvw
W3_50 = "382ff8d7"

HKEY_CURRENT_USER\Software\Yqshjvw
W4_50 = "392c92fe"

HKEY_CURRENT_USER\Software\Yqshjvw
W1_51 = "36b3be8f"

HKEY_CURRENT_USER\Software\Yqshjvw
W2_51 = "9b98f24f"

HKEY_CURRENT_USER\Software\Yqshjvw
W3_51 = "9a9b967c"

HKEY_CURRENT_USER\Software\Yqshjvw
W4_51 = "9b98fc55"

HKEY_CURRENT_USER\Software\Yqshjvw
W1_52 = "4b72a9f9"

HKEY_CURRENT_USER\Software\Yqshjvw
W2_52 = "fe5451c"

HKEY_CURRENT_USER\Software\Yqshjvw
W3_52 = "ff6f85"

HKEY_CURRENT_USER\Software\Yqshjvw
W4_52 = "fe565ac"

HKEY_CURRENT_USER\Software\Yqshjvw
W1_53 = "e2a9367"

HKEY_CURRENT_USER\Software\Yqshjvw
W2_53 = "671da24"

HKEY_CURRENT_USER\Software\Yqshjvw
W3_53 = "6172a52a"

HKEY_CURRENT_USER\Software\Yqshjvw
W4_53 = "671cf3"

HKEY_CURRENT_USER\Software\Yqshjvw
W1_54 = "774bd7ed"

HKEY_CURRENT_USER\Software\Yqshjvw
W2_54 = "c2de18fc"

HKEY_CURRENT_USER\Software\Yqshjvw
W3_54 = "c3dd5273"

HKEY_CURRENT_USER\Software\Yqshjvw
W4_54 = "c2de385a"

HKEY_CURRENT_USER\Software\Yqshjvw
W1_55 = "2ed1d5b"

HKEY_CURRENT_USER\Software\Yqshjvw
W2_55 = "254ab975"

HKEY_CURRENT_USER\Software\Yqshjvw
W3_55 = "2449cb98"

HKEY_CURRENT_USER\Software\Yqshjvw
W4_55 = "254aa1b1"

HKEY_CURRENT_USER\Software\Yqshjvw
W1_56 = "4bf2775e"

HKEY_CURRENT_USER\Software\Yqshjvw
W2_56 = "87b7121"

HKEY_CURRENT_USER\Software\Yqshjvw
W3_56 = "86b46121"

HKEY_CURRENT_USER\Software\Yqshjvw
W4_56 = "87b7b8"

HKEY_CURRENT_USER\Software\Yqshjvw
W1_57 = "2a51837"

HKEY_CURRENT_USER\Software\Yqshjvw
W2_57 = "ea236e3c"

HKEY_CURRENT_USER\Software\Yqshjvw
W3_57 = "eb21e76"

HKEY_CURRENT_USER\Software\Yqshjvw
W4_57 = "ea23745f"

HKEY_CURRENT_USER\Software\Yqshjvw
W1_58 = "a7b32864"

HKEY_CURRENT_USER\Software\Yqshjvw
W2_58 = "4c8ffdb4"

HKEY_CURRENT_USER\Software\Yqshjvw
W3_58 = "4d8cb79f"

HKEY_CURRENT_USER\Software\Yqshjvw
W4_58 = "4c8fddb6"

HKEY_CURRENT_USER\Software\Yqshjvw
W1_59 = "db5cfb55"

HKEY_CURRENT_USER\Software\Yqshjvw
W2_59 = "aefc5e3a"

HKEY_CURRENT_USER\Software\Yqshjvw
W3_59 = "afff2d24"

HKEY_CURRENT_USER\Software\Yqshjvw
W4_59 = "aefc47d"

HKEY_CURRENT_USER\Software\Yqshjvw
W1_60 = "84c8dd31"

HKEY_CURRENT_USER\Software\Yqshjvw
W2_60 = "1168a19"

HKEY_CURRENT_USER\Software\Yqshjvw
W3_60 = "16bda4d"

HKEY_CURRENT_USER\Software\Yqshjvw
W4_60 = "1168b64"

HKEY_CURRENT_USER\Software\Yqshjvw
W1_61 = "1e73b1ba"

HKEY_CURRENT_USER\Software\Yqshjvw
W2_61 = "73d5fcd"

HKEY_CURRENT_USER\Software\Yqshjvw
W3_61 = "72d67392"

HKEY_CURRENT_USER\Software\Yqshjvw
W4_61 = "73d519bb"

HKEY_CURRENT_USER\Software\Yqshjvw
W1_62 = "f5522263"

HKEY_CURRENT_USER\Software\Yqshjvw
W2_62 = "d6419715"

HKEY_CURRENT_USER\Software\Yqshjvw
W3_62 = "d742e93b"

HKEY_CURRENT_USER\Software\Yqshjvw
W4_62 = "d6418312"

HKEY_CURRENT_USER\Software\Yqshjvw
W1_63 = "43b98d67"

HKEY_CURRENT_USER\Software\Yqshjvw
W2_63 = "38adfd31"

HKEY_CURRENT_USER\Software\Yqshjvw
W3_63 = "39ae864"

HKEY_CURRENT_USER\Software\Yqshjvw
W4_63 = "38adec69"

HKEY_CURRENT_USER\Software\Yqshjvw
W1_64 = "58654da7"

HKEY_CURRENT_USER\Software\Yqshjvw
W2_64 = "9b1a4315"

HKEY_CURRENT_USER\Software\Yqshjvw
W3_64 = "9a193fe9"

HKEY_CURRENT_USER\Software\Yqshjvw
W4_64 = "9b1a55c"

HKEY_CURRENT_USER\Software\Yqshjvw
W1_65 = "7d7f442"

HKEY_CURRENT_USER\Software\Yqshjvw
W2_65 = "fd86ad8a"

HKEY_CURRENT_USER\Software\Yqshjvw
W3_65 = "fc85d53e"

HKEY_CURRENT_USER\Software\Yqshjvw
W4_65 = "fd86bf17"

HKEY_CURRENT_USER\Software\Yqshjvw
W1_66 = "dd8662d8"

HKEY_CURRENT_USER\Software\Yqshjvw
W2_66 = "5ff33575"

HKEY_CURRENT_USER\Software\Yqshjvw
W3_66 = "5ef4247"

HKEY_CURRENT_USER\Software\Yqshjvw
W4_66 = "5ff3286e"

HKEY_CURRENT_USER\Software\Yqshjvw
W1_67 = "fa7a9db1"

HKEY_CURRENT_USER\Software\Yqshjvw
W2_67 = "c25f8b1"

HKEY_CURRENT_USER\Software\Yqshjvw
W3_67 = "c35cfbec"

HKEY_CURRENT_USER\Software\Yqshjvw
W4_67 = "c25f91c5"

HKEY_CURRENT_USER\Software\Yqshjvw
W1_68 = "d17c479"

HKEY_CURRENT_USER\Software\Yqshjvw
W2_68 = "24cbded6"

HKEY_CURRENT_USER\Software\Yqshjvw
W3_68 = "25c89135"

HKEY_CURRENT_USER\Software\Yqshjvw
W4_68 = "24cbfb1c"

HKEY_CURRENT_USER\Software\Yqshjvw
W1_69 = "c58457b9"

HKEY_CURRENT_USER\Software\Yqshjvw
W2_69 = "87387de9"

HKEY_CURRENT_USER\Software\Yqshjvw
W3_69 = "863be5a"

HKEY_CURRENT_USER\Software\Yqshjvw
W4_69 = "87386473"

HKEY_CURRENT_USER\Software\Yqshjvw
W1_70 = "44b1ff"

HKEY_CURRENT_USER\Software\Yqshjvw
W2_70 = "e9a4dcc2"

HKEY_CURRENT_USER\Software\Yqshjvw
W3_70 = "e8a7a7e3"

HKEY_CURRENT_USER\Software\Yqshjvw
W4_70 = "e9a4cdca"

HKEY_CURRENT_USER\Software\Yqshjvw
W1_71 = "17dfd5"

HKEY_CURRENT_USER\Software\Yqshjvw
W2_71 = "4c112e1d"

HKEY_CURRENT_USER\Software\Yqshjvw
W3_71 = "4d125d8"

HKEY_CURRENT_USER\Software\Yqshjvw
W4_71 = "4c113721"

HKEY_CURRENT_USER\Software\Yqshjvw
W1_72 = "58c91"

HKEY_CURRENT_USER\Software\Yqshjvw
W2_72 = "ae7db35c"

HKEY_CURRENT_USER\Software\Yqshjvw
W3_72 = "af7eca51"

HKEY_CURRENT_USER\Software\Yqshjvw
W4_72 = "ae7da78"

HKEY_CURRENT_USER\Software\Yqshjvw
W1_73 = "b7414879"

HKEY_CURRENT_USER\Software\Yqshjvw
W2_73 = "1ea1aaf"

HKEY_CURRENT_USER\Software\Yqshjvw
W3_73 = "11e963e6"

HKEY_CURRENT_USER\Software\Yqshjvw
W4_73 = "1ea9cf"

HKEY_CURRENT_USER\Software\Yqshjvw
W1_74 = "6fa9769d"

HKEY_CURRENT_USER\Software\Yqshjvw
W2_74 = "7356677c"

HKEY_CURRENT_USER\Software\Yqshjvw
W3_74 = "725519f"

HKEY_CURRENT_USER\Software\Yqshjvw
W4_74 = "73567326"

HKEY_CURRENT_USER\Software\Yqshjvw
W1_75 = "a5ff7d4"

HKEY_CURRENT_USER\Software\Yqshjvw
W2_75 = "d5c2c569"

HKEY_CURRENT_USER\Software\Yqshjvw
W3_75 = "d4c1b654"

HKEY_CURRENT_USER\Software\Yqshjvw
W4_75 = "d5c2dc7d"

HKEY_CURRENT_USER\Software\Yqshjvw
W1_76 = "f266d1ad"

HKEY_CURRENT_USER\Software\Yqshjvw
W2_76 = "382f5328"

HKEY_CURRENT_USER\Software\Yqshjvw
W3_76 = "392c2ffd"

HKEY_CURRENT_USER\Software\Yqshjvw
W4_76 = "382f45d4"

HKEY_CURRENT_USER\Software\Yqshjvw
W1_77 = "891c48f7"

HKEY_CURRENT_USER\Software\Yqshjvw
W2_77 = "9a9bb515"

HKEY_CURRENT_USER\Software\Yqshjvw
W3_77 = "9b98c52"

HKEY_CURRENT_USER\Software\Yqshjvw
W4_77 = "9a9baf2b"

HKEY_CURRENT_USER\Software\Yqshjvw
W1_78 = "e892ea4b"

HKEY_CURRENT_USER\Software\Yqshjvw
W2_78 = "fd8a32"

HKEY_CURRENT_USER\Software\Yqshjvw
W3_78 = "fcb72ab"

HKEY_CURRENT_USER\Software\Yqshjvw
W4_78 = "fd81882"

HKEY_CURRENT_USER\Software\Yqshjvw
W1_79 = "765d11"

HKEY_CURRENT_USER\Software\Yqshjvw
W2_79 = "5f749bf"

HKEY_CURRENT_USER\Software\Yqshjvw
W3_79 = "5e77ebf"

HKEY_CURRENT_USER\Software\Yqshjvw
W4_79 = "5f7481d9"

HKEY_CURRENT_USER\Software\Yqshjvw
W1_80 = "3f2eebba"

HKEY_CURRENT_USER\Software\Yqshjvw
W2_80 = "c1eca38"

HKEY_CURRENT_USER\Software\Yqshjvw
W3_80 = "ce38119"

HKEY_CURRENT_USER\Software\Yqshjvw
W4_80 = "c1eeb3"

HKEY_CURRENT_USER\Software\Yqshjvw
W1_81 = "ae9f8ae"

HKEY_CURRENT_USER\Software\Yqshjvw
W2_81 = "244d427b"

HKEY_CURRENT_USER\Software\Yqshjvw
W3_81 = "254e3eae"

HKEY_CURRENT_USER\Software\Yqshjvw
W4_81 = "244d5487"

HKEY_CURRENT_USER\Software\Yqshjvw
W1_82 = "43b7e89c"

HKEY_CURRENT_USER\Software\Yqshjvw
W2_82 = "86b9a45a"

HKEY_CURRENT_USER\Software\Yqshjvw
W3_82 = "87bad7f7"

HKEY_CURRENT_USER\Software\Yqshjvw
W4_82 = "86b9bdde"

HKEY_CURRENT_USER\Software\Yqshjvw
W1_83 = "37365b2e"

HKEY_CURRENT_USER\Software\Yqshjvw
W2_83 = "e9263bb1"

HKEY_CURRENT_USER\Software\Yqshjvw
W3_83 = "e8254d1c"

HKEY_CURRENT_USER\Software\Yqshjvw
W4_83 = "e9262735"

HKEY_CURRENT_USER\Software\Yqshjvw
W1_84 = "f938a737"

HKEY_CURRENT_USER\Software\Yqshjvw
W2_84 = "4b92848b"

HKEY_CURRENT_USER\Software\Yqshjvw
W3_84 = "4a91faa5"

HKEY_CURRENT_USER\Software\Yqshjvw
W4_84 = "4b9298c"

HKEY_CURRENT_USER\Software\Yqshjvw
W1_85 = "eadff8b4"

HKEY_CURRENT_USER\Software\Yqshjvw
W2_85 = "adfeeca5"

HKEY_CURRENT_USER\Software\Yqshjvw
W3_85 = "acfd93ca"

HKEY_CURRENT_USER\Software\Yqshjvw
W4_85 = "adfef9e3"

HKEY_CURRENT_USER\Software\Yqshjvw
W1_86 = "edc46c4"

HKEY_CURRENT_USER\Software\Yqshjvw
W2_86 = "16b761d"

HKEY_CURRENT_USER\Software\Yqshjvw
W3_86 = "1168913"

HKEY_CURRENT_USER\Software\Yqshjvw
W4_86 = "16b633a"

HKEY_CURRENT_USER\Software\Yqshjvw
W1_87 = "4a2ecb8"

HKEY_CURRENT_USER\Software\Yqshjvw
W2_87 = "72d7d74"

HKEY_CURRENT_USER\Software\Yqshjvw
W3_87 = "73d4a6b8"

HKEY_CURRENT_USER\Software\Yqshjvw
W4_87 = "72d7cc91"

HKEY_CURRENT_USER\Software\Yqshjvw
W1_88 = "1bd7279f"

HKEY_CURRENT_USER\Software\Yqshjvw
W2_88 = "d544385c"

HKEY_CURRENT_USER\Software\Yqshjvw
W3_88 = "d4475fc1"

HKEY_CURRENT_USER\Software\Yqshjvw
W4_88 = "d54435e8"

HKEY_CURRENT_USER\Software\Yqshjvw
W1_89 = "891b3351"

HKEY_CURRENT_USER\Software\Yqshjvw
W2_89 = "37b859b"

HKEY_CURRENT_USER\Software\Yqshjvw
W3_89 = "36b3f516"

HKEY_CURRENT_USER\Software\Yqshjvw
W4_89 = "37b9f3f"

HKEY_CURRENT_USER\Software\Yqshjvw
W1_90 = "b5d33f1"

HKEY_CURRENT_USER\Software\Yqshjvw
W2_90 = "9a1d1da2"

HKEY_CURRENT_USER\Software\Yqshjvw
W3_90 = "9b1e62bf"

HKEY_CURRENT_USER\Software\Yqshjvw
W4_90 = "9a1d896"

HKEY_CURRENT_USER\Software\Yqshjvw
W1_91 = "284ca69f"

HKEY_CURRENT_USER\Software\Yqshjvw
W2_91 = "fc8958e3"

HKEY_CURRENT_USER\Software\Yqshjvw
W3_91 = "fd8a1bc4"

HKEY_CURRENT_USER\Software\Yqshjvw
W4_91 = "fc8971ed"

HKEY_CURRENT_USER\Software\Yqshjvw
W1_92 = "baadd533"

HKEY_CURRENT_USER\Software\Yqshjvw
W2_92 = "5ef5c11"

HKEY_CURRENT_USER\Software\Yqshjvw
W3_92 = "5ff6b16d"

HKEY_CURRENT_USER\Software\Yqshjvw
W4_92 = "5ef5db44"

HKEY_CURRENT_USER\Software\Yqshjvw
W1_93 = "5df9d2d9"

HKEY_CURRENT_USER\Software\Yqshjvw
W2_93 = "c1625357"

HKEY_CURRENT_USER\Software\Yqshjvw
W3_93 = "c612eb2"

HKEY_CURRENT_USER\Software\Yqshjvw
W4_93 = "c162449b"

HKEY_CURRENT_USER\Software\Yqshjvw
W1_94 = "9395684"

HKEY_CURRENT_USER\Software\Yqshjvw
W2_94 = "23ceb791"

HKEY_CURRENT_USER\Software\Yqshjvw
W3_94 = "22cdc7db"

HKEY_CURRENT_USER\Software\Yqshjvw
W4_94 = "23ceadf2"

HKEY_CURRENT_USER\Software\Yqshjvw
W1_95 = "36b9e56"

HKEY_CURRENT_USER\Software\Yqshjvw
W2_95 = "863bb87"

HKEY_CURRENT_USER\Software\Yqshjvw
W3_95 = "87387d6"

HKEY_CURRENT_USER\Software\Yqshjvw
W4_95 = "863b1749"

HKEY_CURRENT_USER\Software\Yqshjvw
W1_96 = "8d7be3b"

HKEY_CURRENT_USER\Software\Yqshjvw
W2_96 = "e8a79aa4"

HKEY_CURRENT_USER\Software\Yqshjvw
W3_96 = "e9a4ea89"

HKEY_CURRENT_USER\Software\Yqshjvw
W4_96 = "e8a78a"

HKEY_CURRENT_USER\Software\Yqshjvw
W1_97 = "756ca41"

HKEY_CURRENT_USER\Software\Yqshjvw
W2_97 = "4b13f433"

HKEY_CURRENT_USER\Software\Yqshjvw
W3_97 = "4a183de"

HKEY_CURRENT_USER\Software\Yqshjvw
W4_97 = "4b13e9f7"

HKEY_CURRENT_USER\Software\Yqshjvw
W1_98 = "97344d35"

HKEY_CURRENT_USER\Software\Yqshjvw
W2_98 = "ad8734c"

HKEY_CURRENT_USER\Software\Yqshjvw
W3_98 = "ac833967"

HKEY_CURRENT_USER\Software\Yqshjvw
W4_98 = "ad8534e"

HKEY_CURRENT_USER\Software\Yqshjvw
W1_99 = "a8d3b68b"

HKEY_CURRENT_USER\Software\Yqshjvw
W2_99 = "fec996f"

HKEY_CURRENT_USER\Software\Yqshjvw
W3_99 = "eefd68c"

HKEY_CURRENT_USER\Software\Yqshjvw
W4_99 = "fecbca5"

HKEY_CURRENT_USER\Software\Yqshjvw
W1_100 = "25d98ffd"

HKEY_CURRENT_USER\Software\Yqshjvw
W2_100 = "725931e8"

HKEY_CURRENT_USER\Software\Yqshjvw
W3_100 = "735a4fd5"

HKEY_CURRENT_USER\Software\Yqshjvw
W4_100 = "725925fc"

HKEY_CURRENT_USER\Software\Yqshjvw
W1_101 = "13da7e3c"

HKEY_CURRENT_USER\Software\Yqshjvw
W2_101 = "d4c59a39"

HKEY_CURRENT_USER\Software\Yqshjvw
W3_101 = "d5c6e57a"

HKEY_CURRENT_USER\Software\Yqshjvw
W4_101 = "d4c58f53"

HKEY_CURRENT_USER\Software\Yqshjvw
W1_102 = "2ffc8b26"

HKEY_CURRENT_USER\Software\Yqshjvw
W2_102 = "3731e177"

HKEY_CURRENT_USER\Software\Yqshjvw
W3_102 = "36329283"

HKEY_CURRENT_USER\Software\Yqshjvw
W4_102 = "3731f8aa"

HKEY_CURRENT_USER\Software\Yqshjvw
W1_103 = "7b9cc7de"

HKEY_CURRENT_USER\Software\Yqshjvw
W2_103 = "999e7bdc"

HKEY_CURRENT_USER\Software\Yqshjvw
W3_103 = "989d828"

HKEY_CURRENT_USER\Software\Yqshjvw
W4_103 = "999e621"

HKEY_CURRENT_USER\Software\Yqshjvw
W1_104 = "f5c7917"

HKEY_CURRENT_USER\Software\Yqshjvw
W2_104 = "fcade7f"

HKEY_CURRENT_USER\Software\Yqshjvw
W3_104 = "fd9a171"

HKEY_CURRENT_USER\Software\Yqshjvw
W4_104 = "fcacb58"

HKEY_CURRENT_USER\Software\Yqshjvw
W1_105 = "1fb99518"

HKEY_CURRENT_USER\Software\Yqshjvw
W2_105 = "5e772ba6"

HKEY_CURRENT_USER\Software\Yqshjvw
W3_105 = "5f745e86"

HKEY_CURRENT_USER\Software\Yqshjvw
W4_105 = "5e7734af"

HKEY_CURRENT_USER\Software\Yqshjvw
W1_106 = "32a4173"

HKEY_CURRENT_USER\Software\Yqshjvw
W2_106 = "ce388ab"

HKEY_CURRENT_USER\Software\Yqshjvw
W3_106 = "c1ef42f"

HKEY_CURRENT_USER\Software\Yqshjvw
W4_106 = "ce39e6"

HKEY_CURRENT_USER\Software\Yqshjvw
W1_107 = "b25bcc29"

HKEY_CURRENT_USER\Software\Yqshjvw
W2_107 = "23512ad"

HKEY_CURRENT_USER\Software\Yqshjvw
W3_107 = "22536d74"

HKEY_CURRENT_USER\Software\Yqshjvw
W4_107 = "23575d"

HKEY_CURRENT_USER\Software\Yqshjvw
W1_108 = "7ec99c9"

HKEY_CURRENT_USER\Software\Yqshjvw
W2_108 = "85bc6a9"

HKEY_CURRENT_USER\Software\Yqshjvw
W3_108 = "84bf1a9d"

HKEY_CURRENT_USER\Software\Yqshjvw
W4_108 = "85bc7b4"

HKEY_CURRENT_USER\Software\Yqshjvw
W1_109 = "1e3928c2"

HKEY_CURRENT_USER\Software\Yqshjvw
W2_109 = "e828cfb6"

HKEY_CURRENT_USER\Software\Yqshjvw
W3_109 = "e92bb22"

HKEY_CURRENT_USER\Software\Yqshjvw
W4_109 = "e828dab"

HKEY_CURRENT_USER\Software\Yqshjvw
W1_110 = "edad653"

HKEY_CURRENT_USER\Software\Yqshjvw
W2_110 = "4a9561de"

HKEY_CURRENT_USER\Software\Yqshjvw
W3_110 = "4b96294b"

HKEY_CURRENT_USER\Software\Yqshjvw
W4_110 = "4a954362"

HKEY_CURRENT_USER\Software\Yqshjvw
W1_111 = "968e39"

HKEY_CURRENT_USER\Software\Yqshjvw
W2_111 = "ad1b523"

HKEY_CURRENT_USER\Software\Yqshjvw
W3_111 = "ac2c69"

HKEY_CURRENT_USER\Software\Yqshjvw
W4_111 = "ad1acb9"

HKEY_CURRENT_USER\Software\Yqshjvw
W1_112 = "a16c521"

HKEY_CURRENT_USER\Software\Yqshjvw
W2_112 = "f6e8a4"

HKEY_CURRENT_USER\Software\Yqshjvw
W3_112 = "e6d7c39"

HKEY_CURRENT_USER\Software\Yqshjvw
W4_112 = "f6e161"

HKEY_CURRENT_USER\Software\Yqshjvw
W1_113 = "82a78639"

HKEY_CURRENT_USER\Software\Yqshjvw
W2_113 = "71da672c"

HKEY_CURRENT_USER\Software\Yqshjvw
W3_113 = "7d9154e"

HKEY_CURRENT_USER\Software\Yqshjvw
W4_113 = "71da7f67"

HKEY_CURRENT_USER\Software\Yqshjvw
W1_114 = "89519eca"

HKEY_CURRENT_USER\Software\Yqshjvw
W2_114 = "d446fd99"

HKEY_CURRENT_USER\Software\Yqshjvw
W3_114 = "d5458297"

HKEY_CURRENT_USER\Software\Yqshjvw
W4_114 = "d446e8be"

HKEY_CURRENT_USER\Software\Yqshjvw
W1_115 = "757376d"

HKEY_CURRENT_USER\Software\Yqshjvw
W2_115 = "36b34737"

HKEY_CURRENT_USER\Software\Yqshjvw
W3_115 = "37b383c"

HKEY_CURRENT_USER\Software\Yqshjvw
W4_115 = "36b35215"

HKEY_CURRENT_USER\Software\Yqshjvw
W1_116 = "5a5a5419"

HKEY_CURRENT_USER\Software\Yqshjvw
W2_116 = "991fab9b"

HKEY_CURRENT_USER\Software\Yqshjvw
W3_116 = "981cd145"

HKEY_CURRENT_USER\Software\Yqshjvw
W4_116 = "991fbb6c"

HKEY_CURRENT_USER\Software\Yqshjvw
W1_117 = "592d4ea"

HKEY_CURRENT_USER\Software\Yqshjvw
W2_117 = "fb8c3cc7"

HKEY_CURRENT_USER\Software\Yqshjvw
W3_117 = "fa8f4eea"

HKEY_CURRENT_USER\Software\Yqshjvw
W4_117 = "fb8c24c3"

HKEY_CURRENT_USER\Software\Yqshjvw
W1_118 = "68951b1"

HKEY_CURRENT_USER\Software\Yqshjvw
W2_118 = "5df8941e"

HKEY_CURRENT_USER\Software\Yqshjvw
W3_118 = "5cfbe433"

HKEY_CURRENT_USER\Software\Yqshjvw
W4_118 = "5df88e1a"

HKEY_CURRENT_USER\Software\Yqshjvw
W1_119 = "f6bca1bb"

HKEY_CURRENT_USER\Software\Yqshjvw
W2_119 = "c64eec8"

HKEY_CURRENT_USER\Software\Yqshjvw
W3_119 = "c1679d58"

HKEY_CURRENT_USER\Software\Yqshjvw
W4_119 = "c64f771"

HKEY_CURRENT_USER\Software\Yqshjvw
W1_120 = "2417eb3"

HKEY_CURRENT_USER\Software\Yqshjvw
W2_120 = "22d1452"

HKEY_CURRENT_USER\Software\Yqshjvw
W3_120 = "23d2ae1"

HKEY_CURRENT_USER\Software\Yqshjvw
W4_120 = "22d16c8"

HKEY_CURRENT_USER\Software\Yqshjvw
W1_121 = "b8254268"

HKEY_CURRENT_USER\Software\Yqshjvw
W2_121 = "853dea42"

HKEY_CURRENT_USER\Software\Yqshjvw
W3_121 = "843ea36"

HKEY_CURRENT_USER\Software\Yqshjvw
W4_121 = "853dca1f"

HKEY_CURRENT_USER\Software\Yqshjvw
W1_122 = "877565ac"

HKEY_CURRENT_USER\Software\Yqshjvw
W2_122 = "e7aa2c4"

HKEY_CURRENT_USER\Software\Yqshjvw
W3_122 = "e6a9595f"

HKEY_CURRENT_USER\Software\Yqshjvw
W4_122 = "e7aa3376"

HKEY_CURRENT_USER\Software\Yqshjvw
W1_123 = "2c8afe9b"

HKEY_CURRENT_USER\Software\Yqshjvw
W2_123 = "4a168a1"

HKEY_CURRENT_USER\Software\Yqshjvw
W3_123 = "4b15f6e4"

HKEY_CURRENT_USER\Software\Yqshjvw
W4_123 = "4a169ccd"

HKEY_CURRENT_USER\Software\Yqshjvw
W1_124 = "4786e71"

HKEY_CURRENT_USER\Software\Yqshjvw
W2_124 = "ac831be"

HKEY_CURRENT_USER\Software\Yqshjvw
W3_124 = "ad86cd"

HKEY_CURRENT_USER\Software\Yqshjvw
W4_124 = "ac83624"

HKEY_CURRENT_USER\Software\Yqshjvw
W1_125 = "35ed5cc"

HKEY_CURRENT_USER\Software\Yqshjvw
W2_125 = "eef7b53"

HKEY_CURRENT_USER\Software\Yqshjvw
W3_125 = "fec552"

HKEY_CURRENT_USER\Software\Yqshjvw
W4_125 = "eef6f7b"

HKEY_CURRENT_USER\Software\Yqshjvw
W1_126 = "c2c3a8c"

HKEY_CURRENT_USER\Software\Yqshjvw
W2_126 = "715bc958"

HKEY_CURRENT_USER\Software\Yqshjvw
W3_126 = "758b2fb"

HKEY_CURRENT_USER\Software\Yqshjvw
W4_126 = "715bd8d2"

HKEY_CURRENT_USER\Software\Yqshjvw
W1_127 = "48a931e2"

HKEY_CURRENT_USER\Software\Yqshjvw
W2_127 = "d3c85adf"

HKEY_CURRENT_USER\Software\Yqshjvw
W3_127 = "d2cb28"

HKEY_CURRENT_USER\Software\Yqshjvw
W4_127 = "d3c84229"

HKEY_CURRENT_USER\Software\Yqshjvw
W1_128 = "c35cc54"

HKEY_CURRENT_USER\Software\Yqshjvw
W2_128 = "3634ba74"

HKEY_CURRENT_USER\Software\Yqshjvw
W3_128 = "3737c1a9"

HKEY_CURRENT_USER\Software\Yqshjvw
W4_128 = "3634ab8"

HKEY_CURRENT_USER\Software\Yqshjvw
W1_129 = "c17eab8"

HKEY_CURRENT_USER\Software\Yqshjvw
W2_129 = "98a1eb4"

HKEY_CURRENT_USER\Software\Yqshjvw
W3_129 = "99a27efe"

HKEY_CURRENT_USER\Software\Yqshjvw
W4_129 = "98a114d7"

HKEY_CURRENT_USER\Software\Yqshjvw
W1_130 = "49468349"

HKEY_CURRENT_USER\Software\Yqshjvw
W2_130 = "fbd656e"

HKEY_CURRENT_USER\Software\Yqshjvw
W3_130 = "fae147"

HKEY_CURRENT_USER\Software\Yqshjvw
W4_130 = "fbd7e2e"

HKEY_CURRENT_USER\Software\Yqshjvw
W1_131 = "c6d7a7b8"

HKEY_CURRENT_USER\Software\Yqshjvw
W2_131 = "5d79f275"

HKEY_CURRENT_USER\Software\Yqshjvw
W3_131 = "5c7a8dac"

HKEY_CURRENT_USER\Software\Yqshjvw
W4_131 = "5d79e785"

HKEY_CURRENT_USER\Software\Yqshjvw
W1_132 = "88934515"

HKEY_CURRENT_USER\Software\Yqshjvw
W2_132 = "bfe64479"

HKEY_CURRENT_USER\Software\Yqshjvw
W3_132 = "bee53af5"

HKEY_CURRENT_USER\Software\Yqshjvw
W4_132 = "bfe65dc"

HKEY_CURRENT_USER\Software\Yqshjvw
W1_133 = "e3d93bf6"

HKEY_CURRENT_USER\Software\Yqshjvw
W2_133 = "2252af8e"

HKEY_CURRENT_USER\Software\Yqshjvw
W3_133 = "2351d1a"

HKEY_CURRENT_USER\Software\Yqshjvw
W4_133 = "2252ba33"

HKEY_CURRENT_USER\Software\Yqshjvw
W1_134 = "41a573"

HKEY_CURRENT_USER\Software\Yqshjvw
W2_134 = "84bf3f42"

HKEY_CURRENT_USER\Software\Yqshjvw
W3_134 = "85bc49a3"

HKEY_CURRENT_USER\Software\Yqshjvw
W4_134 = "84bf238a"

HKEY_CURRENT_USER\Software\Yqshjvw
W1_135 = "cd6c3a"

HKEY_CURRENT_USER\Software\Yqshjvw
W2_135 = "e72b927d"

HKEY_CURRENT_USER\Software\Yqshjvw
W3_135 = "e628e6c8"

HKEY_CURRENT_USER\Software\Yqshjvw
W4_135 = "e72b8ce1"

HKEY_CURRENT_USER\Software\Yqshjvw
W1_136 = "c7134b76"

HKEY_CURRENT_USER\Software\Yqshjvw
W2_136 = "4997e2de"

HKEY_CURRENT_USER\Software\Yqshjvw
W3_136 = "48949c11"

HKEY_CURRENT_USER\Software\Yqshjvw
W4_136 = "4997f638"

HKEY_CURRENT_USER\Software\Yqshjvw
W1_137 = "b5dfae35"

HKEY_CURRENT_USER\Software\Yqshjvw
W2_137 = "ac44b9"

HKEY_CURRENT_USER\Software\Yqshjvw
W3_137 = "ad735a6"

HKEY_CURRENT_USER\Software\Yqshjvw
W4_137 = "ac45f8f"

HKEY_CURRENT_USER\Software\Yqshjvw
W1_138 = "4c8f181"

HKEY_CURRENT_USER\Software\Yqshjvw
W2_138 = "e7d462"

HKEY_CURRENT_USER\Software\Yqshjvw
W3_138 = "f73a2cf"

HKEY_CURRENT_USER\Software\Yqshjvw
W4_138 = "e7c8e6"

HKEY_CURRENT_USER\Software\Yqshjvw
W1_139 = "dead6"

HKEY_CURRENT_USER\Software\Yqshjvw
W2_139 = "7dd25c3"

HKEY_CURRENT_USER\Software\Yqshjvw
W3_139 = "71de5814"

HKEY_CURRENT_USER\Software\Yqshjvw
W4_139 = "7dd323d"

HKEY_CURRENT_USER\Software\Yqshjvw
W1_140 = "bb89a"

HKEY_CURRENT_USER\Software\Yqshjvw
W2_140 = "d349bb96"

HKEY_CURRENT_USER\Software\Yqshjvw
W3_140 = "d24af1bd"

HKEY_CURRENT_USER\Software\Yqshjvw
W4_140 = "d3499b94"

HKEY_CURRENT_USER\Software\Yqshjvw
W1_141 = "35e2c186"

HKEY_CURRENT_USER\Software\Yqshjvw
W2_141 = "35b61e23"

HKEY_CURRENT_USER\Software\Yqshjvw
W3_141 = "34b56ec2"

HKEY_CURRENT_USER\Software\Yqshjvw
W4_141 = "35b64eb"

HKEY_CURRENT_USER\Software\Yqshjvw
W1_142 = "5df3233"

HKEY_CURRENT_USER\Software\Yqshjvw
W2_142 = "98227291"

HKEY_CURRENT_USER\Software\Yqshjvw
W3_142 = "992146b"

HKEY_CURRENT_USER\Software\Yqshjvw
W4_142 = "98226e42"

HKEY_CURRENT_USER\Software\Yqshjvw
W1_143 = "a5eed628"

HKEY_CURRENT_USER\Software\Yqshjvw
W2_143 = "fa8ec125"

HKEY_CURRENT_USER\Software\Yqshjvw
W3_143 = "fb8dbdb"

HKEY_CURRENT_USER\Software\Yqshjvw
W4_143 = "fa8ed799"

HKEY_CURRENT_USER\Software\Yqshjvw
W1_144 = "95ac63a"

HKEY_CURRENT_USER\Software\Yqshjvw
W2_144 = "5cfb5bb"

HKEY_CURRENT_USER\Software\Yqshjvw
W3_144 = "5df82ad9"

HKEY_CURRENT_USER\Software\Yqshjvw
W4_144 = "5cfb4f"

HKEY_CURRENT_USER\Software\Yqshjvw
W1_145 = "3c75529d"

HKEY_CURRENT_USER\Software\Yqshjvw
W2_145 = "bf67b453"

HKEY_CURRENT_USER\Software\Yqshjvw
W3_145 = "be64c6e"

HKEY_CURRENT_USER\Software\Yqshjvw
W4_145 = "bf67aa47"

HKEY_CURRENT_USER\Software\Yqshjvw
W1_146 = "59db21e6"

HKEY_CURRENT_USER\Software\Yqshjvw
W2_146 = "21d4a43"

HKEY_CURRENT_USER\Software\Yqshjvw
W3_146 = "2d779b7"

HKEY_CURRENT_USER\Software\Yqshjvw
W4_146 = "21d4139e"

HKEY_CURRENT_USER\Software\Yqshjvw
W1_147 = "b8261f8f"

HKEY_CURRENT_USER\Software\Yqshjvw
W2_147 = "8446c2"

HKEY_CURRENT_USER\Software\Yqshjvw
W3_147 = "854316dc"

HKEY_CURRENT_USER\Software\Yqshjvw
W4_147 = "8447cf5"

HKEY_CURRENT_USER\Software\Yqshjvw
W1_148 = "e81b8642"

HKEY_CURRENT_USER\Software\Yqshjvw
W2_148 = "e6acf6bb"

HKEY_CURRENT_USER\Software\Yqshjvw
W3_148 = "e7af8c65"

HKEY_CURRENT_USER\Software\Yqshjvw
W4_148 = "e6ace64c"

HKEY_CURRENT_USER\Software\Yqshjvw
W1_149 = "284a9d1d"

HKEY_CURRENT_USER\Software\Yqshjvw
W2_149 = "491951b7"

HKEY_CURRENT_USER\Software\Yqshjvw
W3_149 = "481a258a"

HKEY_CURRENT_USER\Software\Yqshjvw
W4_149 = "49194fa3"

HKEY_CURRENT_USER\Software\Yqshjvw
W1_150 = "1ac1e181"

HKEY_CURRENT_USER\Software\Yqshjvw
W2_150 = "ab85ae46"

HKEY_CURRENT_USER\Software\Yqshjvw
W3_150 = "aa86d2d3"

HKEY_CURRENT_USER\Software\Yqshjvw
W4_150 = "ab85b8fa"

HKEY_CURRENT_USER\Software\Yqshjvw
W1_151 = "c16dac9b"

HKEY_CURRENT_USER\Software\Yqshjvw
W2_151 = "df228"

HKEY_CURRENT_USER\Software\Yqshjvw
W3_151 = "cf14878"

HKEY_CURRENT_USER\Software\Yqshjvw
W4_151 = "df22251"

HKEY_CURRENT_USER\Software\Yqshjvw
W1_152 = "4db24d8"

HKEY_CURRENT_USER\Software\Yqshjvw
W2_152 = "75e96bc"

HKEY_CURRENT_USER\Software\Yqshjvw
W3_152 = "715de181"

HKEY_CURRENT_USER\Software\Yqshjvw
W4_152 = "75e8ba8"

HKEY_CURRENT_USER\Software\Yqshjvw
W1_153 = "78b8df35"

HKEY_CURRENT_USER\Software\Yqshjvw
W2_153 = "d2caee59"

HKEY_CURRENT_USER\Software\Yqshjvw
W3_153 = "d3c99ed6"

HKEY_CURRENT_USER\Software\Yqshjvw
W4_153 = "d2caf4ff"

HKEY_CURRENT_USER\Software\Yqshjvw
W1_154 = "a121ca3f"

HKEY_CURRENT_USER\Software\Yqshjvw
W2_154 = "3537478b"

HKEY_CURRENT_USER\Software\Yqshjvw
W3_154 = "3434347f"

HKEY_CURRENT_USER\Software\Yqshjvw
W4_154 = "35375e56"

HKEY_CURRENT_USER\Software\Yqshjvw
W1_155 = "9f386fac"

HKEY_CURRENT_USER\Software\Yqshjvw
W2_155 = "97a3d1db"

HKEY_CURRENT_USER\Software\Yqshjvw
W3_155 = "96aad84"

HKEY_CURRENT_USER\Software\Yqshjvw
W4_155 = "97a3c7ad"

HKEY_CURRENT_USER\Software\Yqshjvw
W1_156 = "5828dd2"

HKEY_CURRENT_USER\Software\Yqshjvw
W2_156 = "fa114ce"

HKEY_CURRENT_USER\Software\Yqshjvw
W3_156 = "fb135b2d"

HKEY_CURRENT_USER\Software\Yqshjvw
W4_156 = "fa1314"

HKEY_CURRENT_USER\Software\Yqshjvw
W1_157 = "5d96e2"

HKEY_CURRENT_USER\Software\Yqshjvw
W2_157 = "5c7c8139"

HKEY_CURRENT_USER\Software\Yqshjvw
W3_157 = "5d7ff72"

HKEY_CURRENT_USER\Software\Yqshjvw
W4_157 = "5c7c9a5b"

HKEY_CURRENT_USER\Software\Yqshjvw
W1_158 = "41c8b81"

HKEY_CURRENT_USER\Software\Yqshjvw
W2_158 = "bee91d8"

HKEY_CURRENT_USER\Software\Yqshjvw
W3_158 = "bfea699b"

HKEY_CURRENT_USER\Software\Yqshjvw
W4_158 = "bee93b2"

HKEY_CURRENT_USER\Software\Yqshjvw
W1_159 = "a333c9c1"

HKEY_CURRENT_USER\Software\Yqshjvw
W2_159 = "21557cd"

HKEY_CURRENT_USER\Software\Yqshjvw
W3_159 = "25672"

HKEY_CURRENT_USER\Software\Yqshjvw
W4_159 = "21556d9"

HKEY_CURRENT_USER\Software\Yqshjvw
W1_160 = "1ae6bdb"

HKEY_CURRENT_USER\Software\Yqshjvw
W2_160 = "83c1c39"

HKEY_CURRENT_USER\Software\Yqshjvw
W3_160 = "82c2bc49"

HKEY_CURRENT_USER\Software\Yqshjvw
W4_160 = "83c1d66"

HKEY_CURRENT_USER\Software\Yqshjvw
W1_161 = "5355abec"

HKEY_CURRENT_USER\Software\Yqshjvw
W2_161 = "e62e27fc"

HKEY_CURRENT_USER\Software\Yqshjvw
W3_161 = "e72d559e"

HKEY_CURRENT_USER\Software\Yqshjvw
W4_161 = "e62e3fb7"

HKEY_CURRENT_USER\Software\Yqshjvw
W1_162 = "8aa26457"

HKEY_CURRENT_USER\Software\Yqshjvw
W2_162 = "489abca2"

HKEY_CURRENT_USER\Software\Yqshjvw
W3_162 = "4999c327"

HKEY_CURRENT_USER\Software\Yqshjvw
W4_162 = "489aa9e"

HKEY_CURRENT_USER\Software\Yqshjvw
W1_163 = "5adbb3d2"

HKEY_CURRENT_USER\Software\Yqshjvw
W2_163 = "ab7d6c"

HKEY_CURRENT_USER\Software\Yqshjvw
W3_163 = "aa4784c"

HKEY_CURRENT_USER\Software\Yqshjvw
W4_163 = "ab71265"

HKEY_CURRENT_USER\Software\Yqshjvw
W1_164 = "97624d3"

HKEY_CURRENT_USER\Software\Yqshjvw
W2_164 = "d736ed6"

HKEY_CURRENT_USER\Software\Yqshjvw
W3_164 = "c71195"

HKEY_CURRENT_USER\Software\Yqshjvw
W4_164 = "d737bbc"

HKEY_CURRENT_USER\Software\Yqshjvw
W1_165 = "c12fc261"

HKEY_CURRENT_USER\Software\Yqshjvw
W2_165 = "6fdfcd9"

HKEY_CURRENT_USER\Software\Yqshjvw
W3_165 = "6edc8f3a"

HKEY_CURRENT_USER\Software\Yqshjvw
W4_165 = "6fdfe513"

HKEY_CURRENT_USER\Software\Yqshjvw
W1_166 = "fea2e11a"

HKEY_CURRENT_USER\Software\Yqshjvw
W2_166 = "d24c537e"

HKEY_CURRENT_USER\Software\Yqshjvw
W3_166 = "d34f2443"

HKEY_CURRENT_USER\Software\Yqshjvw
W4_166 = "d24c4e6a"

HKEY_CURRENT_USER\Software\Yqshjvw
W1_167 = "a2ded4bb"

HKEY_CURRENT_USER\Software\Yqshjvw
W2_167 = "34b8a5d"

HKEY_CURRENT_USER\Software\Yqshjvw
W3_167 = "35bbdde8"

HKEY_CURRENT_USER\Software\Yqshjvw
W4_167 = "34b8b7c1"

HKEY_CURRENT_USER\Software\Yqshjvw
W1_168 = "3274876e"

HKEY_CURRENT_USER\Software\Yqshjvw
W2_168 = "97253b7b"

HKEY_CURRENT_USER\Software\Yqshjvw
W3_168 = "96264b31"

HKEY_CURRENT_USER\Software\Yqshjvw
W4_168 = "97252118"

HKEY_CURRENT_USER\Software\Yqshjvw
W1_169 = "278dccb4"

HKEY_CURRENT_USER\Software\Yqshjvw
W2_169 = "f99199ab"

HKEY_CURRENT_USER\Software\Yqshjvw
W3_169 = "f892e46"

HKEY_CURRENT_USER\Software\Yqshjvw
W4_169 = "f9918a6f"

HKEY_CURRENT_USER\Software\Yqshjvw
W1_170 = "57ee5dbc"

HKEY_CURRENT_USER\Software\Yqshjvw
W2_170 = "5bfdea6"

HKEY_CURRENT_USER\Software\Yqshjvw
W3_170 = "5afe99ef"

HKEY_CURRENT_USER\Software\Yqshjvw
W4_170 = "5bfdf3c6"

HKEY_CURRENT_USER\Software\Yqshjvw
W1_171 = "e24c31a9"

HKEY_CURRENT_USER\Software\Yqshjvw
W2_171 = "be6a43a9"

HKEY_CURRENT_USER\Software\Yqshjvw
W3_171 = "bf693734"

HKEY_CURRENT_USER\Software\Yqshjvw
W4_171 = "be6a5d1d"

HKEY_CURRENT_USER\Software\Yqshjvw
W1_172 = "b149a21"

HKEY_CURRENT_USER\Software\Yqshjvw
W2_172 = "2d6d979"

HKEY_CURRENT_USER\Software\Yqshjvw
W3_172 = "21d5ac5d"

HKEY_CURRENT_USER\Software\Yqshjvw
W4_172 = "2d6c674"

HKEY_CURRENT_USER\Software\Yqshjvw
W1_173 = "a1bf1aba"

HKEY_CURRENT_USER\Software\Yqshjvw
W2_173 = "83433ab"

HKEY_CURRENT_USER\Software\Yqshjvw
W3_173 = "82445e2"

HKEY_CURRENT_USER\Software\Yqshjvw
W4_173 = "83432fcb"

HKEY_CURRENT_USER\Software\Yqshjvw
W1_174 = "1fd359c"

HKEY_CURRENT_USER\Software\Yqshjvw
W2_174 = "e5af8439"

HKEY_CURRENT_USER\Software\Yqshjvw
W3_174 = "e4acf3b"

HKEY_CURRENT_USER\Software\Yqshjvw
W4_174 = "e5af9922"

HKEY_CURRENT_USER\Software\Yqshjvw
W1_175 = "f5cf416"

HKEY_CURRENT_USER\Software\Yqshjvw
W2_175 = "481c175e"

HKEY_CURRENT_USER\Software\Yqshjvw
W3_175 = "491f685"

HKEY_CURRENT_USER\Software\Yqshjvw
W4_175 = "481c279"

HKEY_CURRENT_USER\Software\Yqshjvw
W1_176 = "ca7ced"

HKEY_CURRENT_USER\Software\Yqshjvw
W2_176 = "aa88739b"

HKEY_CURRENT_USER\Software\Yqshjvw
W3_176 = "ab8b1f9"

HKEY_CURRENT_USER\Software\Yqshjvw
W4_176 = "aa886bd"

HKEY_CURRENT_USER\Software\Yqshjvw
W1_177 = "4b6d59f4"

HKEY_CURRENT_USER\Software\Yqshjvw
W2_177 = "cf4c855"

HKEY_CURRENT_USER\Software\Yqshjvw
W3_177 = "df7bfe"

HKEY_CURRENT_USER\Software\Yqshjvw
W4_177 = "cf4d527"

HKEY_CURRENT_USER\Software\Yqshjvw
W1_178 = "cee22fc9"

HKEY_CURRENT_USER\Software\Yqshjvw
W2_178 = "6f612a1a"

HKEY_CURRENT_USER\Software\Yqshjvw
W3_178 = "6e625457"

HKEY_CURRENT_USER\Software\Yqshjvw
W4_178 = "6f613e7e"

HKEY_CURRENT_USER\Software\Yqshjvw
W1_179 = "efbed31d"

HKEY_CURRENT_USER\Software\Yqshjvw
W2_179 = "d1cdba11"

HKEY_CURRENT_USER\Software\Yqshjvw
W3_179 = "dcecdfc"

HKEY_CURRENT_USER\Software\Yqshjvw
W4_179 = "d1cda7d5"

HKEY_CURRENT_USER\Software\Yqshjvw
W1_180 = "43b2e12"

HKEY_CURRENT_USER\Software\Yqshjvw
W2_180 = "343a318a"

スパイウェアは、以下のレジストリ値を変更します。

HKEY_CURRENT_USER\Software\Microsoft\
Windows\CurrentVersion\Explorer\
Advanced
Hidden = "2"

(註:変更前の上記レジストリ値は、「2」となります。)

HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\
Security Center
AntiVirusOverride = "1"

HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\
Security Center
AntiVirusDisableNotify = "1"

HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\
Security Center
FirewallDisableNotify = "1"

HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\
Security Center
FirewallOverride = "1"

HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\
Security Center
UpdatesDisableNotify = "1"

HKEY_CURRENT_USER\Software\Microsoft\
Windows NT\CurrentVersion\Windows
Load = "%User Profile%\FeedCache\spoolsw.exe"

スパイウェアは、以下のレジストリキーを削除します。

HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\
Control\SafeBoot\Minimal\
AppMgmt

HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\
Control\SafeBoot\Minimal\
Base

HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\
Control\SafeBoot\Minimal\
Boot Bus Extender

HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\
Control\SafeBoot\Minimal\
Boot file system

HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\
Control\SafeBoot\Minimal\
CryptSvc

HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\
Control\SafeBoot\Minimal\
DcomLaunch

HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\
Control\SafeBoot\Minimal\
dmadmin

HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\
Control\SafeBoot\Minimal\
dmboot.sys

HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\
Control\SafeBoot\Minimal\
dmio.sys

HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\
Control\SafeBoot\Minimal\
dmload.sys

HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\
Control\SafeBoot\Minimal\
dmserver

HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\
Control\SafeBoot\Minimal\
EventLog

HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\
Control\SafeBoot\Minimal\
File system

HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\
Control\SafeBoot\Minimal\
Filter

HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\
Control\SafeBoot\Minimal\
HelpSvc

HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\
Control\SafeBoot\Minimal\
Netlogon

HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\
Control\SafeBoot\Minimal\
PCI Configuration

HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\
Control\SafeBoot\Minimal\
PlugPlay

HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\
Control\SafeBoot\Minimal\
PNP Filter

HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\
Control\SafeBoot\Minimal\
Primary disk

HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\
Control\SafeBoot\Minimal\
RpcSs

HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\
Control\SafeBoot\Minimal\
SCSI Class

HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\
Control\SafeBoot\Minimal\
sermouse.sys

HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\
Control\SafeBoot\Minimal\
sr.sys

HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\
Control\SafeBoot\Minimal\
SRService

HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\
Control\SafeBoot\Minimal\
System Bus Extender

HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\
Control\SafeBoot\Minimal\
vga.sys

HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\
Control\SafeBoot\Minimal\
vgasave.sys

HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\
Control\SafeBoot\Minimal\
WinMgmt

HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\
Control\SafeBoot\Minimal\
{36FC9E60-C465-11CF-8056-444553540000}

HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\
Control\SafeBoot\Minimal\
{4D36E965-E325-11CE-BFC1-08002BE10318}

HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\
Control\SafeBoot\Minimal\
{4D36E967-E325-11CE-BFC1-08002BE10318}

HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\
Control\SafeBoot\Minimal\
{4D36E969-E325-11CE-BFC1-08002BE10318}

HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\
Control\SafeBoot\Minimal\
{4D36E96A-E325-11CE-BFC1-08002BE10318}

HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\
Control\SafeBoot\Minimal\
{4D36E96B-E325-11CE-BFC1-08002BE10318}

HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\
Control\SafeBoot\Minimal\
{4D36E96F-E325-11CE-BFC1-08002BE10318}

HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\
Control\SafeBoot\Minimal\
{4D36E977-E325-11CE-BFC1-08002BE10318}

HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\
Control\SafeBoot\Minimal\
{4D36E97B-E325-11CE-BFC1-08002BE10318}

HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\
Control\SafeBoot\Minimal\
{4D36E97D-E325-11CE-BFC1-08002BE10318}

HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\
Control\SafeBoot\Minimal\
{4D36E980-E325-11CE-BFC1-08002BE10318}

HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\
Control\SafeBoot\Minimal\
{71A27CDD-812A-11D0-BEC7-08002BE2092F}

HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\
Control\SafeBoot\Minimal\
{745A17A0-74D3-11D0-B6FE-00A0C90F57DA}

HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\
Control\SafeBoot\Minimal

HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\
Control\SafeBoot\Network\
AFD

HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\
Control\SafeBoot\Network\
AppMgmt

HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\
Control\SafeBoot\Network\
Base

HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\
Control\SafeBoot\Network\
Boot Bus Extender

HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\
Control\SafeBoot\Network\
Boot file system

HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\
Control\SafeBoot\Network\
Browser

HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\
Control\SafeBoot\Network\
CryptSvc

HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\
Control\SafeBoot\Network\
DcomLaunch

作成活動

スパイウェアは、以下のファイルを作成します。

  • %Windows%\1119af
  • %User Temp%\winhtxm.exe
  • VMware Shared Folders\133b57
  • %User Temp%\seocr.exe
  • Microsoft Terminal Services\135f4a

(註:%Windows%フォルダは、Windowsが利用するフォルダで、いずれのオペレーティングシステム(OS)でも通常、"C:\Windows" です。.. %User Temp%フォルダは、ユーザの一時フォルダで、Windows 2000、XP および Server 2003 の場合、通常、"C:\Documents and Settings\<ユーザー名>\Local Settings\Temp"、Windows Vista 、 7 、8、8.1 、Server 2008 および Server 2012の場合、"C:\Users\<ユーザ名>\AppData\Local\Temp" です。.)

その他

スパイウェアは、以下の不正なWebサイトにアクセスします。

  • http://{BLOCKED}.103.219/sobakavolos.gif?13163b=6254375
  • {BLOCKED}.110.115
  • {BLOCKED}.221.5
  • {BLOCKED}0.18.234
  • {BLOCKED}.169.88
  • {BLOCKED}1.12.199
  • {BLOCKED}28.170

このウイルス情報は、自動解析システムにより作成されました。

  対応方法

対応検索エンジン: 9.8

手順 1

Windows XP、Windows Vista および Windows 7 のユーザは、コンピュータからマルウェアもしくはアドウェア等を完全に削除するために、ウイルス検索の実行前には必ず「システムの復元」を無効にしてください。

手順 2

不明なレジストリキーを削除します。

[ 詳細 ]

警告:レジストリはWindowsの構成情報が格納されているデータベースであり、レジストリの編集内容に問題があると、システムが正常に動作しなくなる場合があります。
レジストリの編集はお客様の責任で行っていただくようお願いいたします。弊社ではレジストリの編集による如何なる問題に対しても補償いたしかねます。
レジストリの編集前にこちらをご参照ください。

  • In HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center
    • Svc
  • In HKEY_CURRENT_USER\Software
    • Yqshjvw
  • In HKEY_CURRENT_USER\Software
    • WinRAR
  • In HKEY_CURRENT_USER\Software\Yqshjvw
    • 1926745233

手順 3

このレジストリ値を削除します。

[ 詳細 ]

警告:レジストリはWindowsの構成情報が格納されているデータベースであり、レジストリの編集内容に問題があると、システムが正常に動作しなくなる場合があります。
レジストリの編集はお客様の責任で行っていただくようお願いいたします。弊社ではレジストリの編集による如何なる問題に対しても補償いたしかねます。
レジストリの編集前にこちらをご参照ください。

  • In HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center
    • UacDisableNotify = "1"
  • In HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Svc
    • AntiVirusOverride = "1"
  • In HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Svc
    • AntiVirusDisableNotify = "1"
  • In HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Svc
    • FirewallDisableNotify = "1"
  • In HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Svc
    • FirewallOverride = "1"
  • In HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Svc
    • UpdatesDisableNotify = "1"
  • In HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Svc
    • UacDisableNotify = "1"
  • In HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Internet Settings
    • GlobalUserOffline = "0"
  • In HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\system
    • EnableLUA = "0"
  • In HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Services\SharedAccess\Parameters\FirewallPolicy\StandardProfile\AuthorizedApplications\List
    • %Windows%\Microsoft.NET\Framework\v2.0.50727\RegAsm.exe = "{random characters}"
  • In HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Services\SharedAccess\Parameters\FirewallPolicy\StandardProfile
    • EnableFirewall = "0"
  • In HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Services\SharedAccess\Parameters\FirewallPolicy\StandardProfile
    • DoNotAllowExceptions = "0"
  • In HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Services\SharedAccess\Parameters\FirewallPolicy\StandardProfile
    • DisableNotifications = "1"
  • In HKEY_CURRENT_USER\Software\Yqshjvw
    • W1_0 = "13ce4c5e"
  • In HKEY_CURRENT_USER\Software\Yqshjvw
    • W2_0 = "5c1"
  • In HKEY_CURRENT_USER\Software\Yqshjvw
    • W3_0 = "136a29"
  • In HKEY_CURRENT_USER\Software\Yqshjvw
    • W4_0 = "0"
  • In HKEY_CURRENT_USER\Software\Yqshjvw
    • W1_1 = "79aca21"
  • In HKEY_CURRENT_USER\Software\Yqshjvw
    • W2_1 = "626c7ca3"
  • In HKEY_CURRENT_USER\Software\Yqshjvw
    • W3_1 = "636f37e"
  • In HKEY_CURRENT_USER\Software\Yqshjvw
    • W4_1 = "626c6957"
  • In HKEY_CURRENT_USER\Software\Yqshjvw
    • W1_2 = "2fd2114"
  • In HKEY_CURRENT_USER\Software\Yqshjvw
    • W2_2 = "c4d8cf6a"
  • In HKEY_CURRENT_USER\Software\Yqshjvw
    • W3_2 = "c5dbb887"
  • In HKEY_CURRENT_USER\Software\Yqshjvw
    • W4_2 = "c4d8d2ae"
  • In HKEY_CURRENT_USER\Software\Yqshjvw
    • W1_3 = "4caa338"
  • In HKEY_CURRENT_USER\Software\Yqshjvw
    • W2_3 = "274525b1"
  • In HKEY_CURRENT_USER\Software\Yqshjvw
    • W3_3 = "2646562c"
  • In HKEY_CURRENT_USER\Software\Yqshjvw
    • W4_3 = "27453c5"
  • In HKEY_CURRENT_USER\Software\Yqshjvw
    • W1_4 = "22181def"
  • In HKEY_CURRENT_USER\Software\Yqshjvw
    • W2_4 = "89b1b994"
  • In HKEY_CURRENT_USER\Software\Yqshjvw
    • W3_4 = "88b2cf75"
  • In HKEY_CURRENT_USER\Software\Yqshjvw
    • W4_4 = "89b1a55c"
  • In HKEY_CURRENT_USER\Software\Yqshjvw
    • W1_5 = "e9c33679"
  • In HKEY_CURRENT_USER\Software\Yqshjvw
    • W2_5 = "ec1e1c73"
  • In HKEY_CURRENT_USER\Software\Yqshjvw
    • W3_5 = "ed1d649a"
  • In HKEY_CURRENT_USER\Software\Yqshjvw
    • W4_5 = "ec1eeb3"
  • In HKEY_CURRENT_USER\Software\Yqshjvw
    • W1_6 = "3de4731"
  • In HKEY_CURRENT_USER\Software\Yqshjvw
    • W2_6 = "4e8ad73a"
  • In HKEY_CURRENT_USER\Software\Yqshjvw
    • W3_6 = "4f891223"
  • In HKEY_CURRENT_USER\Software\Yqshjvw
    • W4_6 = "4e8a78a"
  • In HKEY_CURRENT_USER\Software\Yqshjvw
    • W1_7 = "e6c3523b"
  • In HKEY_CURRENT_USER\Software\Yqshjvw
    • W2_7 = "bf6c4aa"
  • In HKEY_CURRENT_USER\Software\Yqshjvw
    • W3_7 = "b1f58b48"
  • In HKEY_CURRENT_USER\Software\Yqshjvw
    • W4_7 = "bf6e161"
  • In HKEY_CURRENT_USER\Software\Yqshjvw
    • W1_8 = "f971c873"
  • In HKEY_CURRENT_USER\Software\Yqshjvw
    • W2_8 = "13635332"
  • In HKEY_CURRENT_USER\Software\Yqshjvw
    • W3_8 = "126291"
  • In HKEY_CURRENT_USER\Software\Yqshjvw
    • W4_8 = "13634ab8"
  • In HKEY_CURRENT_USER\Software\Yqshjvw
    • W1_9 = "943774a"
  • In HKEY_CURRENT_USER\Software\Yqshjvw
    • W2_9 = "75cf91c4"
  • In HKEY_CURRENT_USER\Software\Yqshjvw
    • W3_9 = "74ccde26"
  • In HKEY_CURRENT_USER\Software\Yqshjvw
    • W4_9 = "75cfb4f"
  • In HKEY_CURRENT_USER\Software\Yqshjvw
    • W1_10 = "4e3c1d"
  • In HKEY_CURRENT_USER\Software\Yqshjvw
    • W2_10 = "d83cdb"
  • In HKEY_CURRENT_USER\Software\Yqshjvw
    • W3_10 = "d93f774f"
  • In HKEY_CURRENT_USER\Software\Yqshjvw
    • W4_10 = "d83c1d66"
  • In HKEY_CURRENT_USER\Software\Yqshjvw
    • W1_11 = "b2ee921e"
  • In HKEY_CURRENT_USER\Software\Yqshjvw
    • W2_11 = "3aa897e4"
  • In HKEY_CURRENT_USER\Software\Yqshjvw
    • W3_11 = "3babec94"
  • In HKEY_CURRENT_USER\Software\Yqshjvw
    • W4_11 = "3aa886bd"
  • In HKEY_CURRENT_USER\Software\Yqshjvw
    • W1_12 = "876a2bd"
  • In HKEY_CURRENT_USER\Software\Yqshjvw
    • W2_12 = "9d14e2e7"
  • In HKEY_CURRENT_USER\Software\Yqshjvw
    • W3_12 = "9c179a3d"
  • In HKEY_CURRENT_USER\Software\Yqshjvw
    • W4_12 = "9d14f14"
  • In HKEY_CURRENT_USER\Software\Yqshjvw
    • W1_13 = "a728471"
  • In HKEY_CURRENT_USER\Software\Yqshjvw
    • W2_13 = "ff814f"
  • In HKEY_CURRENT_USER\Software\Yqshjvw
    • W3_13 = "fe823342"
  • In HKEY_CURRENT_USER\Software\Yqshjvw
    • W4_13 = "ff81596b"
  • In HKEY_CURRENT_USER\Software\Yqshjvw
    • W1_14 = "a6e163b3"
  • In HKEY_CURRENT_USER\Software\Yqshjvw
    • W2_14 = "61eddc78"
  • In HKEY_CURRENT_USER\Software\Yqshjvw
    • W3_14 = "6eea8eb"
  • In HKEY_CURRENT_USER\Software\Yqshjvw
    • W4_14 = "61edc2c2"
  • In HKEY_CURRENT_USER\Software\Yqshjvw
    • W1_15 = "6e46a3"
  • In HKEY_CURRENT_USER\Software\Yqshjvw
    • W2_15 = "c45a32a3"
  • In HKEY_CURRENT_USER\Software\Yqshjvw
    • W3_15 = "c559463"
  • In HKEY_CURRENT_USER\Software\Yqshjvw
    • W4_15 = "c45a2c19"
  • In HKEY_CURRENT_USER\Software\Yqshjvw
    • W1_16 = "f12decc"
  • In HKEY_CURRENT_USER\Software\Yqshjvw
    • W2_16 = "26c687b4"
  • In HKEY_CURRENT_USER\Software\Yqshjvw
    • W3_16 = "27c5ff59"
  • In HKEY_CURRENT_USER\Software\Yqshjvw
    • W4_16 = "26c6957"
  • In HKEY_CURRENT_USER\Software\Yqshjvw
    • W1_17 = "4ff2d58a"
  • In HKEY_CURRENT_USER\Software\Yqshjvw
    • W2_17 = "89326563"
  • In HKEY_CURRENT_USER\Software\Yqshjvw
    • W3_17 = "883194ee"
  • In HKEY_CURRENT_USER\Software\Yqshjvw
    • W4_17 = "8932fec7"
  • In HKEY_CURRENT_USER\Software\Yqshjvw
    • W1_18 = "ede7c873"
  • In HKEY_CURRENT_USER\Software\Yqshjvw
    • W2_18 = "eb9f79f2"
  • In HKEY_CURRENT_USER\Software\Yqshjvw
    • W3_18 = "ea9c237"
  • In HKEY_CURRENT_USER\Software\Yqshjvw
    • W4_18 = "eb9f681e"
  • In HKEY_CURRENT_USER\Software\Yqshjvw
    • W1_19 = "cc2475b"
  • In HKEY_CURRENT_USER\Software\Yqshjvw
    • W2_19 = "4ebc452"
  • In HKEY_CURRENT_USER\Software\Yqshjvw
    • W3_19 = "4f8bb5c"
  • In HKEY_CURRENT_USER\Software\Yqshjvw
    • W4_19 = "4ebd175"
  • In HKEY_CURRENT_USER\Software\Yqshjvw
    • W1_20 = "6e57f74"
  • In HKEY_CURRENT_USER\Software\Yqshjvw
    • W2_20 = "b78291a"
  • In HKEY_CURRENT_USER\Software\Yqshjvw
    • W3_20 = "b17b5e5"
  • In HKEY_CURRENT_USER\Software\Yqshjvw
    • W4_20 = "b783acc"
  • In HKEY_CURRENT_USER\Software\Yqshjvw
    • W1_21 = "f5b2df6"
  • In HKEY_CURRENT_USER\Software\Yqshjvw
    • W2_21 = "12e4b14"
  • In HKEY_CURRENT_USER\Software\Yqshjvw
    • W3_21 = "13e7cea"
  • In HKEY_CURRENT_USER\Software\Yqshjvw
    • W4_21 = "12e4a423"
  • In HKEY_CURRENT_USER\Software\Yqshjvw
    • W1_22 = "c97e6225"
  • In HKEY_CURRENT_USER\Software\Yqshjvw
    • W2_22 = "7551158c"
  • In HKEY_CURRENT_USER\Software\Yqshjvw
    • W3_22 = "74526753"
  • In HKEY_CURRENT_USER\Software\Yqshjvw
    • W4_22 = "7551d7a"
  • In HKEY_CURRENT_USER\Software\Yqshjvw
    • W1_23 = "178137e"
  • In HKEY_CURRENT_USER\Software\Yqshjvw
    • W2_23 = "d7bd6cb2"
  • In HKEY_CURRENT_USER\Software\Yqshjvw
    • W3_23 = "d6be1cf8"
  • In HKEY_CURRENT_USER\Software\Yqshjvw
    • W4_23 = "d7bd76d1"
  • In HKEY_CURRENT_USER\Software\Yqshjvw
    • W1_24 = "a4b666"
  • In HKEY_CURRENT_USER\Software\Yqshjvw
    • W2_24 = "3a29f91f"
  • In HKEY_CURRENT_USER\Software\Yqshjvw
    • W3_24 = "3b2a8a1"
  • In HKEY_CURRENT_USER\Software\Yqshjvw
    • W4_24 = "3a29e28"
  • In HKEY_CURRENT_USER\Software\Yqshjvw
    • W1_25 = "816ca7c"
  • In HKEY_CURRENT_USER\Software\Yqshjvw
    • W2_25 = "9c965f7"
  • In HKEY_CURRENT_USER\Software\Yqshjvw
    • W3_25 = "9d952356"
  • In HKEY_CURRENT_USER\Software\Yqshjvw
    • W4_25 = "9c96497f"
  • In HKEY_CURRENT_USER\Software\Yqshjvw
    • W1_26 = "2a452da5"
  • In HKEY_CURRENT_USER\Software\Yqshjvw
    • W2_26 = "ff2a182"
  • In HKEY_CURRENT_USER\Software\Yqshjvw
    • W3_26 = "fe1d8ff"
  • In HKEY_CURRENT_USER\Software\Yqshjvw
    • W4_26 = "ff2b2d6"
  • In HKEY_CURRENT_USER\Software\Yqshjvw
    • W1_27 = "34d79dbb"
  • In HKEY_CURRENT_USER\Software\Yqshjvw
    • W2_27 = "616f994"
  • In HKEY_CURRENT_USER\Software\Yqshjvw
    • W3_27 = "66c764"
  • In HKEY_CURRENT_USER\Software\Yqshjvw
    • W4_27 = "616f1c2d"
  • In HKEY_CURRENT_USER\Software\Yqshjvw
    • W1_28 = "9af282e3"
  • In HKEY_CURRENT_USER\Software\Yqshjvw
    • W2_28 = "c3db92ce"
  • In HKEY_CURRENT_USER\Software\Yqshjvw
    • W3_28 = "c2d8efad"
  • In HKEY_CURRENT_USER\Software\Yqshjvw
    • W4_28 = "c3db8584"
  • In HKEY_CURRENT_USER\Software\Yqshjvw
    • W1_29 = "2b7e2382"
  • In HKEY_CURRENT_USER\Software\Yqshjvw
    • W2_29 = "2647fb77"
  • In HKEY_CURRENT_USER\Software\Yqshjvw
    • W3_29 = "274484f2"
  • In HKEY_CURRENT_USER\Software\Yqshjvw
    • W4_29 = "2647eedb"
  • In HKEY_CURRENT_USER\Software\Yqshjvw
    • W1_30 = "d92ef848"
  • In HKEY_CURRENT_USER\Software\Yqshjvw
    • W2_30 = "88b44dc6"
  • In HKEY_CURRENT_USER\Software\Yqshjvw
    • W3_30 = "89b7321b"
  • In HKEY_CURRENT_USER\Software\Yqshjvw
    • W4_30 = "88b45832"
  • In HKEY_CURRENT_USER\Software\Yqshjvw
    • W1_31 = "d116843"
  • In HKEY_CURRENT_USER\Software\Yqshjvw
    • W2_31 = "eb2ddfc"
  • In HKEY_CURRENT_USER\Software\Yqshjvw
    • W3_31 = "ea23aba"
  • In HKEY_CURRENT_USER\Software\Yqshjvw
    • W4_31 = "eb2c189"
  • In HKEY_CURRENT_USER\Software\Yqshjvw
    • W1_32 = "db515d93"
  • In HKEY_CURRENT_USER\Software\Yqshjvw
    • W2_32 = "4d8d35b4"
  • In HKEY_CURRENT_USER\Software\Yqshjvw
    • W3_32 = "4c8e4c9"
  • In HKEY_CURRENT_USER\Software\Yqshjvw
    • W4_32 = "4d8d2ae"
  • In HKEY_CURRENT_USER\Software\Yqshjvw
    • W1_33 = "8d43f4d"
  • In HKEY_CURRENT_USER\Software\Yqshjvw
    • W2_33 = "aff98cc3"
  • In HKEY_CURRENT_USER\Software\Yqshjvw
    • W3_33 = "aefafe1e"
  • In HKEY_CURRENT_USER\Software\Yqshjvw
    • W4_33 = "aff99437"
  • In HKEY_CURRENT_USER\Software\Yqshjvw
    • W1_34 = "8df4d"
  • In HKEY_CURRENT_USER\Software\Yqshjvw
    • W2_34 = "1265e833"
  • In HKEY_CURRENT_USER\Software\Yqshjvw
    • W3_34 = "136697a7"
  • In HKEY_CURRENT_USER\Software\Yqshjvw
    • W4_34 = "1265fd8e"
  • In HKEY_CURRENT_USER\Software\Yqshjvw
    • W1_35 = "89e358b"
  • In HKEY_CURRENT_USER\Software\Yqshjvw
    • W2_35 = "74d268ff"
  • In HKEY_CURRENT_USER\Software\Yqshjvw
    • W3_35 = "75d1ccc"
  • In HKEY_CURRENT_USER\Software\Yqshjvw
    • W4_35 = "74d266e5"
  • In HKEY_CURRENT_USER\Software\Yqshjvw
    • W1_36 = "f13b46a"
  • In HKEY_CURRENT_USER\Software\Yqshjvw
    • W2_36 = "d73ec24"
  • In HKEY_CURRENT_USER\Software\Yqshjvw
    • W3_36 = "d63dba15"
  • In HKEY_CURRENT_USER\Software\Yqshjvw
    • W4_36 = "d73ed3c"
  • In HKEY_CURRENT_USER\Software\Yqshjvw
    • W1_37 = "58491a4d"
  • In HKEY_CURRENT_USER\Software\Yqshjvw
    • W2_37 = "39ab24bf"
  • In HKEY_CURRENT_USER\Software\Yqshjvw
    • W3_37 = "38a853ba"
  • In HKEY_CURRENT_USER\Software\Yqshjvw
    • W4_37 = "39ab3993"
  • In HKEY_CURRENT_USER\Software\Yqshjvw
    • W1_38 = "b967bc91"
  • In HKEY_CURRENT_USER\Software\Yqshjvw
    • W2_38 = "9c17bfca"
  • In HKEY_CURRENT_USER\Software\Yqshjvw
    • W3_38 = "9d14c8c3"
  • In HKEY_CURRENT_USER\Software\Yqshjvw
    • W4_38 = "9c17a2ea"
  • In HKEY_CURRENT_USER\Software\Yqshjvw
    • W1_39 = "192bb7f"
  • In HKEY_CURRENT_USER\Software\Yqshjvw
    • W2_39 = "fe8412fb"
  • In HKEY_CURRENT_USER\Software\Yqshjvw
    • W3_39 = "ff876668"
  • In HKEY_CURRENT_USER\Software\Yqshjvw
    • W4_39 = "fe84c41"
  • In HKEY_CURRENT_USER\Software\Yqshjvw
    • W1_40 = "a89daac1"
  • In HKEY_CURRENT_USER\Software\Yqshjvw
    • W2_40 = "6f7d5b"
  • In HKEY_CURRENT_USER\Software\Yqshjvw
    • W3_40 = "61f31fb1"
  • In HKEY_CURRENT_USER\Software\Yqshjvw
    • W4_40 = "6f7598"
  • In HKEY_CURRENT_USER\Software\Yqshjvw
    • W1_41 = "a4525f4"
  • In HKEY_CURRENT_USER\Software\Yqshjvw
    • W2_41 = "c35ccde"
  • In HKEY_CURRENT_USER\Software\Yqshjvw
    • W3_41 = "c25fb4c6"
  • In HKEY_CURRENT_USER\Software\Yqshjvw
    • W4_41 = "c35cdeef"
  • In HKEY_CURRENT_USER\Software\Yqshjvw
    • W1_42 = "83783835"
  • In HKEY_CURRENT_USER\Software\Yqshjvw
    • W2_42 = "25c96918"
  • In HKEY_CURRENT_USER\Software\Yqshjvw
    • W3_42 = "24ca226f"
  • In HKEY_CURRENT_USER\Software\Yqshjvw
    • W4_42 = "25c94846"
  • In HKEY_CURRENT_USER\Software\Yqshjvw
    • W1_43 = "4e16cded"
  • In HKEY_CURRENT_USER\Software\Yqshjvw
    • W2_43 = "8835ab63"
  • In HKEY_CURRENT_USER\Software\Yqshjvw
    • W3_43 = "8936dbb4"
  • In HKEY_CURRENT_USER\Software\WinRAR
    • HWID = "{random values}"
  • In HKEY_CURRENT_USER\Software\Yqshjvw
    • W4_43 = "8835b19d"
  • In HKEY_CURRENT_USER\Software\Yqshjvw
    • W1_44 = "777a5f45"
  • In HKEY_CURRENT_USER\Software\Yqshjvw
    • W2_44 = "eaa2ef3"
  • In HKEY_CURRENT_USER\Software\Yqshjvw
    • W3_44 = "eba17dd"
  • In HKEY_CURRENT_USER\Software\Yqshjvw
    • W4_44 = "eaa21af4"
  • In HKEY_CURRENT_USER\Software\Yqshjvw
    • W1_45 = "63c69938"
  • In HKEY_CURRENT_USER\Software\Yqshjvw
    • W2_45 = "4dead45"
  • In HKEY_CURRENT_USER\Software\Yqshjvw
    • W3_45 = "4cdee62"
  • In HKEY_CURRENT_USER\Software\Yqshjvw
    • W4_45 = "4de844b"
  • In HKEY_CURRENT_USER\Software\Yqshjvw
    • W1_46 = "9279fe1f"
  • In HKEY_CURRENT_USER\Software\Yqshjvw
    • W2_46 = "af7afab3"
  • In HKEY_CURRENT_USER\Software\Yqshjvw
    • W3_46 = "ae79878b"
  • In HKEY_CURRENT_USER\Software\Yqshjvw
    • W4_46 = "af7aeda2"
  • In HKEY_CURRENT_USER\Software\Yqshjvw
    • W1_47 = "a39d7f8"
  • In HKEY_CURRENT_USER\Software\Yqshjvw
    • W2_47 = "11e77ff7"
  • In HKEY_CURRENT_USER\Software\Yqshjvw
    • W3_47 = "1e43cd"
  • In HKEY_CURRENT_USER\Software\Yqshjvw
    • W4_47 = "11e756f9"
  • In HKEY_CURRENT_USER\Software\Yqshjvw
    • W1_48 = "56113ec"
  • In HKEY_CURRENT_USER\Software\Yqshjvw
    • W2_48 = "7453d6e4"
  • In HKEY_CURRENT_USER\Software\Yqshjvw
    • W3_48 = "755aa79"
  • In HKEY_CURRENT_USER\Software\Yqshjvw
    • W4_48 = "7453c5"
  • In HKEY_CURRENT_USER\Software\Yqshjvw
    • W1_49 = "ec55d6f"
  • In HKEY_CURRENT_USER\Software\Yqshjvw
    • W2_49 = "d6c371d"
  • In HKEY_CURRENT_USER\Software\Yqshjvw
    • W3_49 = "d7c3438e"
  • In HKEY_CURRENT_USER\Software\Yqshjvw
    • W4_49 = "d6c29a7"
  • In HKEY_CURRENT_USER\Software\Yqshjvw
    • W1_50 = "d67b478e"
  • In HKEY_CURRENT_USER\Software\Yqshjvw
    • W2_50 = "392c85b4"
  • In HKEY_CURRENT_USER\Software\Yqshjvw
    • W3_50 = "382ff8d7"
  • In HKEY_CURRENT_USER\Software\Yqshjvw
    • W4_50 = "392c92fe"
  • In HKEY_CURRENT_USER\Software\Yqshjvw
    • W1_51 = "36b3be8f"
  • In HKEY_CURRENT_USER\Software\Yqshjvw
    • W2_51 = "9b98f24f"
  • In HKEY_CURRENT_USER\Software\Yqshjvw
    • W3_51 = "9a9b967c"
  • In HKEY_CURRENT_USER\Software\Yqshjvw
    • W4_51 = "9b98fc55"
  • In HKEY_CURRENT_USER\Software\Yqshjvw
    • W1_52 = "4b72a9f9"
  • In HKEY_CURRENT_USER\Software\Yqshjvw
    • W2_52 = "fe5451c"
  • In HKEY_CURRENT_USER\Software\Yqshjvw
    • W3_52 = "ff6f85"
  • In HKEY_CURRENT_USER\Software\Yqshjvw
    • W4_52 = "fe565ac"
  • In HKEY_CURRENT_USER\Software\Yqshjvw
    • W1_53 = "e2a9367"
  • In HKEY_CURRENT_USER\Software\Yqshjvw
    • W2_53 = "671da24"
  • In HKEY_CURRENT_USER\Software\Yqshjvw
    • W3_53 = "6172a52a"
  • In HKEY_CURRENT_USER\Software\Yqshjvw
    • W4_53 = "671cf3"
  • In HKEY_CURRENT_USER\Software\Yqshjvw
    • W1_54 = "774bd7ed"
  • In HKEY_CURRENT_USER\Software\Yqshjvw
    • W2_54 = "c2de18fc"
  • In HKEY_CURRENT_USER\Software\Yqshjvw
    • W3_54 = "c3dd5273"
  • In HKEY_CURRENT_USER\Software\Yqshjvw
    • W4_54 = "c2de385a"
  • In HKEY_CURRENT_USER\Software\Yqshjvw
    • W1_55 = "2ed1d5b"
  • In HKEY_CURRENT_USER\Software\Yqshjvw
    • W2_55 = "254ab975"
  • In HKEY_CURRENT_USER\Software\Yqshjvw
    • W3_55 = "2449cb98"
  • In HKEY_CURRENT_USER\Software\Yqshjvw
    • W4_55 = "254aa1b1"
  • In HKEY_CURRENT_USER\Software\Yqshjvw
    • W1_56 = "4bf2775e"
  • In HKEY_CURRENT_USER\Software\Yqshjvw
    • W2_56 = "87b7121"
  • In HKEY_CURRENT_USER\Software\Yqshjvw
    • W3_56 = "86b46121"
  • In HKEY_CURRENT_USER\Software\Yqshjvw
    • W4_56 = "87b7b8"
  • In HKEY_CURRENT_USER\Software\Yqshjvw
    • W1_57 = "2a51837"
  • In HKEY_CURRENT_USER\Software\Yqshjvw
    • W2_57 = "ea236e3c"
  • In HKEY_CURRENT_USER\Software\Yqshjvw
    • W3_57 = "eb21e76"
  • In HKEY_CURRENT_USER\Software\Yqshjvw
    • W4_57 = "ea23745f"
  • In HKEY_CURRENT_USER\Software\Yqshjvw
    • W1_58 = "a7b32864"
  • In HKEY_CURRENT_USER\Software\Yqshjvw
    • W2_58 = "4c8ffdb4"
  • In HKEY_CURRENT_USER\Software\Yqshjvw
    • W3_58 = "4d8cb79f"
  • In HKEY_CURRENT_USER\Software\Yqshjvw
    • W4_58 = "4c8fddb6"
  • In HKEY_CURRENT_USER\Software\Yqshjvw
    • W1_59 = "db5cfb55"
  • In HKEY_CURRENT_USER\Software\Yqshjvw
    • W2_59 = "aefc5e3a"
  • In HKEY_CURRENT_USER\Software\Yqshjvw
    • W3_59 = "afff2d24"
  • In HKEY_CURRENT_USER\Software\Yqshjvw
    • W4_59 = "aefc47d"
  • In HKEY_CURRENT_USER\Software\Yqshjvw
    • W1_60 = "84c8dd31"
  • In HKEY_CURRENT_USER\Software\Yqshjvw
    • W2_60 = "1168a19"
  • In HKEY_CURRENT_USER\Software\Yqshjvw
    • W3_60 = "16bda4d"
  • In HKEY_CURRENT_USER\Software\Yqshjvw
    • W4_60 = "1168b64"
  • In HKEY_CURRENT_USER\Software\Yqshjvw
    • W1_61 = "1e73b1ba"
  • In HKEY_CURRENT_USER\Software\Yqshjvw
    • W2_61 = "73d5fcd"
  • In HKEY_CURRENT_USER\Software\Yqshjvw
    • W3_61 = "72d67392"
  • In HKEY_CURRENT_USER\Software\Yqshjvw
    • W4_61 = "73d519bb"
  • In HKEY_CURRENT_USER\Software\Yqshjvw
    • W1_62 = "f5522263"
  • In HKEY_CURRENT_USER\Software\Yqshjvw
    • W2_62 = "d6419715"
  • In HKEY_CURRENT_USER\Software\Yqshjvw
    • W3_62 = "d742e93b"
  • In HKEY_CURRENT_USER\Software\Yqshjvw
    • W4_62 = "d6418312"
  • In HKEY_CURRENT_USER\Software\Yqshjvw
    • W1_63 = "43b98d67"
  • In HKEY_CURRENT_USER\Software\Yqshjvw
    • W2_63 = "38adfd31"
  • In HKEY_CURRENT_USER\Software\Yqshjvw
    • W3_63 = "39ae864"
  • In HKEY_CURRENT_USER\Software\Yqshjvw
    • W4_63 = "38adec69"
  • In HKEY_CURRENT_USER\Software\Yqshjvw
    • W1_64 = "58654da7"
  • In HKEY_CURRENT_USER\Software\Yqshjvw
    • W2_64 = "9b1a4315"
  • In HKEY_CURRENT_USER\Software\Yqshjvw
    • W3_64 = "9a193fe9"
  • In HKEY_CURRENT_USER\Software\Yqshjvw
    • W4_64 = "9b1a55c"
  • In HKEY_CURRENT_USER\Software\Yqshjvw
    • W1_65 = "7d7f442"
  • In HKEY_CURRENT_USER\Software\Yqshjvw
    • W2_65 = "fd86ad8a"
  • In HKEY_CURRENT_USER\Software\Yqshjvw
    • W3_65 = "fc85d53e"
  • In HKEY_CURRENT_USER\Software\Yqshjvw
    • W4_65 = "fd86bf17"
  • In HKEY_CURRENT_USER\Software\Yqshjvw
    • W1_66 = "dd8662d8"
  • In HKEY_CURRENT_USER\Software\Yqshjvw
    • W2_66 = "5ff33575"
  • In HKEY_CURRENT_USER\Software\Yqshjvw
    • W3_66 = "5ef4247"
  • In HKEY_CURRENT_USER\Software\Yqshjvw
    • W4_66 = "5ff3286e"
  • In HKEY_CURRENT_USER\Software\Yqshjvw
    • W1_67 = "fa7a9db1"
  • In HKEY_CURRENT_USER\Software\Yqshjvw
    • W2_67 = "c25f8b1"
  • In HKEY_CURRENT_USER\Software\Yqshjvw
    • W3_67 = "c35cfbec"
  • In HKEY_CURRENT_USER\Software\Yqshjvw
    • W4_67 = "c25f91c5"
  • In HKEY_CURRENT_USER\Software\Yqshjvw
    • W1_68 = "d17c479"
  • In HKEY_CURRENT_USER\Software\Yqshjvw
    • W2_68 = "24cbded6"
  • In HKEY_CURRENT_USER\Software\Yqshjvw
    • W3_68 = "25c89135"
  • In HKEY_CURRENT_USER\Software\Yqshjvw
    • W4_68 = "24cbfb1c"
  • In HKEY_CURRENT_USER\Software\Yqshjvw
    • W1_69 = "c58457b9"
  • In HKEY_CURRENT_USER\Software\Yqshjvw
    • W2_69 = "87387de9"
  • In HKEY_CURRENT_USER\Software\Yqshjvw
    • W3_69 = "863be5a"
  • In HKEY_CURRENT_USER\Software\Yqshjvw
    • W4_69 = "87386473"
  • In HKEY_CURRENT_USER\Software\Yqshjvw
    • W1_70 = "44b1ff"
  • In HKEY_CURRENT_USER\Software\Yqshjvw
    • W2_70 = "e9a4dcc2"
  • In HKEY_CURRENT_USER\Software\Yqshjvw
    • W3_70 = "e8a7a7e3"
  • In HKEY_CURRENT_USER\Software\Yqshjvw
    • W4_70 = "e9a4cdca"
  • In HKEY_CURRENT_USER\Software\Yqshjvw
    • W1_71 = "17dfd5"
  • In HKEY_CURRENT_USER\Software\Yqshjvw
    • W2_71 = "4c112e1d"
  • In HKEY_CURRENT_USER\Software\Yqshjvw
    • W3_71 = "4d125d8"
  • In HKEY_CURRENT_USER\Software\Yqshjvw
    • W4_71 = "4c113721"
  • In HKEY_CURRENT_USER\Software\Yqshjvw
    • W1_72 = "58c91"
  • In HKEY_CURRENT_USER\Software\Yqshjvw
    • W2_72 = "ae7db35c"
  • In HKEY_CURRENT_USER\Software\Yqshjvw
    • W3_72 = "af7eca51"
  • In HKEY_CURRENT_USER\Software\Yqshjvw
    • W4_72 = "ae7da78"
  • In HKEY_CURRENT_USER\Software\Yqshjvw
    • W1_73 = "b7414879"
  • In HKEY_CURRENT_USER\Software\Yqshjvw
    • W2_73 = "1ea1aaf"
  • In HKEY_CURRENT_USER\Software\Yqshjvw
    • W3_73 = "11e963e6"
  • In HKEY_CURRENT_USER\Software\Yqshjvw
    • W4_73 = "1ea9cf"
  • In HKEY_CURRENT_USER\Software\Yqshjvw
    • W1_74 = "6fa9769d"
  • In HKEY_CURRENT_USER\Software\Yqshjvw
    • W2_74 = "7356677c"
  • In HKEY_CURRENT_USER\Software\Yqshjvw
    • W3_74 = "725519f"
  • In HKEY_CURRENT_USER\Software\Yqshjvw
    • W4_74 = "73567326"
  • In HKEY_CURRENT_USER\Software\Yqshjvw
    • W1_75 = "a5ff7d4"
  • In HKEY_CURRENT_USER\Software\Yqshjvw
    • W2_75 = "d5c2c569"
  • In HKEY_CURRENT_USER\Software\Yqshjvw
    • W3_75 = "d4c1b654"
  • In HKEY_CURRENT_USER\Software\Yqshjvw
    • W4_75 = "d5c2dc7d"
  • In HKEY_CURRENT_USER\Software\Yqshjvw
    • W1_76 = "f266d1ad"
  • In HKEY_CURRENT_USER\Software\Yqshjvw
    • W2_76 = "382f5328"
  • In HKEY_CURRENT_USER\Software\Yqshjvw
    • W3_76 = "392c2ffd"
  • In HKEY_CURRENT_USER\Software\Yqshjvw
    • W4_76 = "382f45d4"
  • In HKEY_CURRENT_USER\Software\Yqshjvw
    • W1_77 = "891c48f7"
  • In HKEY_CURRENT_USER\Software\Yqshjvw
    • W2_77 = "9a9bb515"
  • In HKEY_CURRENT_USER\Software\Yqshjvw
    • W3_77 = "9b98c52"
  • In HKEY_CURRENT_USER\Software\Yqshjvw
    • W4_77 = "9a9baf2b"
  • In HKEY_CURRENT_USER\Software\Yqshjvw
    • W1_78 = "e892ea4b"
  • In HKEY_CURRENT_USER\Software\Yqshjvw
    • W2_78 = "fd8a32"
  • In HKEY_CURRENT_USER\Software\Yqshjvw
    • W3_78 = "fcb72ab"
  • In HKEY_CURRENT_USER\Software\Yqshjvw
    • W4_78 = "fd81882"
  • In HKEY_CURRENT_USER\Software\Yqshjvw
    • W1_79 = "765d11"
  • In HKEY_CURRENT_USER\Software\Yqshjvw
    • W2_79 = "5f749bf"
  • In HKEY_CURRENT_USER\Software\Yqshjvw
    • W3_79 = "5e77ebf"
  • In HKEY_CURRENT_USER\Software\Yqshjvw
    • W4_79 = "5f7481d9"
  • In HKEY_CURRENT_USER\Software\Yqshjvw
    • W1_80 = "3f2eebba"
  • In HKEY_CURRENT_USER\Software\Yqshjvw
    • W2_80 = "c1eca38"
  • In HKEY_CURRENT_USER\Software\Yqshjvw
    • W3_80 = "ce38119"
  • In HKEY_CURRENT_USER\Software\Yqshjvw
    • W4_80 = "c1eeb3"
  • In HKEY_CURRENT_USER\Software\Yqshjvw
    • W1_81 = "ae9f8ae"
  • In HKEY_CURRENT_USER\Software\Yqshjvw
    • W2_81 = "244d427b"
  • In HKEY_CURRENT_USER\Software\Yqshjvw
    • W3_81 = "254e3eae"
  • In HKEY_CURRENT_USER\Software\Yqshjvw
    • W4_81 = "244d5487"
  • In HKEY_CURRENT_USER\Software\Yqshjvw
    • W1_82 = "43b7e89c"
  • In HKEY_CURRENT_USER\Software\Yqshjvw
    • W2_82 = "86b9a45a"
  • In HKEY_CURRENT_USER\Software\Yqshjvw
    • W3_82 = "87bad7f7"
  • In HKEY_CURRENT_USER\Software\Yqshjvw
    • W4_82 = "86b9bdde"
  • In HKEY_CURRENT_USER\Software\Yqshjvw
    • W1_83 = "37365b2e"
  • In HKEY_CURRENT_USER\Software\Yqshjvw
    • W2_83 = "e9263bb1"
  • In HKEY_CURRENT_USER\Software\Yqshjvw
    • W3_83 = "e8254d1c"
  • In HKEY_CURRENT_USER\Software\Yqshjvw
    • W4_83 = "e9262735"
  • In HKEY_CURRENT_USER\Software\Yqshjvw
    • W1_84 = "f938a737"
  • In HKEY_CURRENT_USER\Software\Yqshjvw
    • W2_84 = "4b92848b"
  • In HKEY_CURRENT_USER\Software\Yqshjvw
    • W3_84 = "4a91faa5"
  • In HKEY_CURRENT_USER\Software\Yqshjvw
    • W4_84 = "4b9298c"
  • In HKEY_CURRENT_USER\Software\Yqshjvw
    • W1_85 = "eadff8b4"
  • In HKEY_CURRENT_USER\Software\Yqshjvw
    • W2_85 = "adfeeca5"
  • In HKEY_CURRENT_USER\Software\Yqshjvw
    • W3_85 = "acfd93ca"
  • In HKEY_CURRENT_USER\Software\Yqshjvw
    • W4_85 = "adfef9e3"
  • In HKEY_CURRENT_USER\Software\Yqshjvw
    • W1_86 = "edc46c4"
  • In HKEY_CURRENT_USER\Software\Yqshjvw
    • W2_86 = "16b761d"
  • In HKEY_CURRENT_USER\Software\Yqshjvw
    • W3_86 = "1168913"
  • In HKEY_CURRENT_USER\Software\Yqshjvw
    • W4_86 = "16b633a"
  • In HKEY_CURRENT_USER\Software\Yqshjvw
    • W1_87 = "4a2ecb8"
  • In HKEY_CURRENT_USER\Software\Yqshjvw
    • W2_87 = "72d7d74"
  • In HKEY_CURRENT_USER\Software\Yqshjvw
    • W3_87 = "73d4a6b8"
  • In HKEY_CURRENT_USER\Software\Yqshjvw
    • W4_87 = "72d7cc91"
  • In HKEY_CURRENT_USER\Software\Yqshjvw
    • W1_88 = "1bd7279f"
  • In HKEY_CURRENT_USER\Software\Yqshjvw
    • W2_88 = "d544385c"
  • In HKEY_CURRENT_USER\Software\Yqshjvw
    • W3_88 = "d4475fc1"
  • In HKEY_CURRENT_USER\Software\Yqshjvw
    • W4_88 = "d54435e8"
  • In HKEY_CURRENT_USER\Software\Yqshjvw
    • W1_89 = "891b3351"
  • In HKEY_CURRENT_USER\Software\Yqshjvw
    • W2_89 = "37b859b"
  • In HKEY_CURRENT_USER\Software\Yqshjvw
    • W3_89 = "36b3f516"
  • In HKEY_CURRENT_USER\Software\Yqshjvw
    • W4_89 = "37b9f3f"
  • In HKEY_CURRENT_USER\Software\Yqshjvw
    • W1_90 = "b5d33f1"
  • In HKEY_CURRENT_USER\Software\Yqshjvw
    • W2_90 = "9a1d1da2"
  • In HKEY_CURRENT_USER\Software\Yqshjvw
    • W3_90 = "9b1e62bf"
  • In HKEY_CURRENT_USER\Software\Yqshjvw
    • W4_90 = "9a1d896"
  • In HKEY_CURRENT_USER\Software\Yqshjvw
    • W1_91 = "284ca69f"
  • In HKEY_CURRENT_USER\Software\Yqshjvw
    • W2_91 = "fc8958e3"
  • In HKEY_CURRENT_USER\Software\Yqshjvw
    • W3_91 = "fd8a1bc4"
  • In HKEY_CURRENT_USER\Software\Yqshjvw
    • W4_91 = "fc8971ed"
  • In HKEY_CURRENT_USER\Software\Yqshjvw
    • W1_92 = "baadd533"
  • In HKEY_CURRENT_USER\Software\Yqshjvw
    • W2_92 = "5ef5c11"
  • In HKEY_CURRENT_USER\Software\Yqshjvw
    • W3_92 = "5ff6b16d"
  • In HKEY_CURRENT_USER\Software\Yqshjvw
    • W4_92 = "5ef5db44"
  • In HKEY_CURRENT_USER\Software\Yqshjvw
    • W1_93 = "5df9d2d9"
  • In HKEY_CURRENT_USER\Software\Yqshjvw
    • W2_93 = "c1625357"
  • In HKEY_CURRENT_USER\Software\Yqshjvw
    • W3_93 = "c612eb2"
  • In HKEY_CURRENT_USER\Software\Yqshjvw
    • W4_93 = "c162449b"
  • In HKEY_CURRENT_USER\Software\Yqshjvw
    • W1_94 = "9395684"
  • In HKEY_CURRENT_USER\Software\Yqshjvw
    • W2_94 = "23ceb791"
  • In HKEY_CURRENT_USER\Software\Yqshjvw
    • W3_94 = "22cdc7db"
  • In HKEY_CURRENT_USER\Software\Yqshjvw
    • W4_94 = "23ceadf2"
  • In HKEY_CURRENT_USER\Software\Yqshjvw
    • W1_95 = "36b9e56"
  • In HKEY_CURRENT_USER\Software\Yqshjvw
    • W2_95 = "863bb87"
  • In HKEY_CURRENT_USER\Software\Yqshjvw
    • W3_95 = "87387d6"
  • In HKEY_CURRENT_USER\Software\Yqshjvw
    • W4_95 = "863b1749"
  • In HKEY_CURRENT_USER\Software\Yqshjvw
    • W1_96 = "8d7be3b"
  • In HKEY_CURRENT_USER\Software\Yqshjvw
    • W2_96 = "e8a79aa4"
  • In HKEY_CURRENT_USER\Software\Yqshjvw
    • W3_96 = "e9a4ea89"
  • In HKEY_CURRENT_USER\Software\Yqshjvw
    • W4_96 = "e8a78a"
  • In HKEY_CURRENT_USER\Software\Yqshjvw
    • W1_97 = "756ca41"
  • In HKEY_CURRENT_USER\Software\Yqshjvw
    • W2_97 = "4b13f433"
  • In HKEY_CURRENT_USER\Software\Yqshjvw
    • W3_97 = "4a183de"
  • In HKEY_CURRENT_USER\Software\Yqshjvw
    • W4_97 = "4b13e9f7"
  • In HKEY_CURRENT_USER\Software\Yqshjvw
    • W1_98 = "97344d35"
  • In HKEY_CURRENT_USER\Software\Yqshjvw
    • W2_98 = "ad8734c"
  • In HKEY_CURRENT_USER\Software\Yqshjvw
    • W3_98 = "ac833967"
  • In HKEY_CURRENT_USER\Software\Yqshjvw
    • W4_98 = "ad8534e"
  • In HKEY_CURRENT_USER\Software\Yqshjvw
    • W1_99 = "a8d3b68b"
  • In HKEY_CURRENT_USER\Software\Yqshjvw
    • W2_99 = "fec996f"
  • In HKEY_CURRENT_USER\Software\Yqshjvw
    • W3_99 = "eefd68c"
  • In HKEY_CURRENT_USER\Software\Yqshjvw
    • W4_99 = "fecbca5"
  • In HKEY_CURRENT_USER\Software\Yqshjvw
    • W1_100 = "25d98ffd"
  • In HKEY_CURRENT_USER\Software\Yqshjvw
    • W2_100 = "725931e8"
  • In HKEY_CURRENT_USER\Software\Yqshjvw
    • W3_100 = "735a4fd5"
  • In HKEY_CURRENT_USER\Software\Yqshjvw
    • W4_100 = "725925fc"
  • In HKEY_CURRENT_USER\Software\Yqshjvw
    • W1_101 = "13da7e3c"
  • In HKEY_CURRENT_USER\Software\Yqshjvw
    • W2_101 = "d4c59a39"
  • In HKEY_CURRENT_USER\Software\Yqshjvw
    • W3_101 = "d5c6e57a"
  • In HKEY_CURRENT_USER\Software\Yqshjvw
    • W4_101 = "d4c58f53"
  • In HKEY_CURRENT_USER\Software\Yqshjvw
    • W1_102 = "2ffc8b26"
  • In HKEY_CURRENT_USER\Software\Yqshjvw
    • W2_102 = "3731e177"
  • In HKEY_CURRENT_USER\Software\Yqshjvw
    • W3_102 = "36329283"
  • In HKEY_CURRENT_USER\Software\Yqshjvw
    • W4_102 = "3731f8aa"
  • In HKEY_CURRENT_USER\Software\Yqshjvw
    • W1_103 = "7b9cc7de"
  • In HKEY_CURRENT_USER\Software\Yqshjvw
    • W2_103 = "999e7bdc"
  • In HKEY_CURRENT_USER\Software\Yqshjvw
    • W3_103 = "989d828"
  • In HKEY_CURRENT_USER\Software\Yqshjvw
    • W4_103 = "999e621"
  • In HKEY_CURRENT_USER\Software\Yqshjvw
    • W1_104 = "f5c7917"
  • In HKEY_CURRENT_USER\Software\Yqshjvw
    • W2_104 = "fcade7f"
  • In HKEY_CURRENT_USER\Software\Yqshjvw
    • W3_104 = "fd9a171"
  • In HKEY_CURRENT_USER\Software\Yqshjvw
    • W4_104 = "fcacb58"
  • In HKEY_CURRENT_USER\Software\Yqshjvw
    • W1_105 = "1fb99518"
  • In HKEY_CURRENT_USER\Software\Yqshjvw
    • W2_105 = "5e772ba6"
  • In HKEY_CURRENT_USER\Software\Yqshjvw
    • W3_105 = "5f745e86"
  • In HKEY_CURRENT_USER\Software\Yqshjvw
    • W4_105 = "5e7734af"
  • In HKEY_CURRENT_USER\Software\Yqshjvw
    • W1_106 = "32a4173"
  • In HKEY_CURRENT_USER\Software\Yqshjvw
    • W2_106 = "ce388ab"
  • In HKEY_CURRENT_USER\Software\Yqshjvw
    • W3_106 = "c1ef42f"
  • In HKEY_CURRENT_USER\Software\Yqshjvw
    • W4_106 = "ce39e6"
  • In HKEY_CURRENT_USER\Software\Yqshjvw
    • W1_107 = "b25bcc29"
  • In HKEY_CURRENT_USER\Software\Yqshjvw
    • W2_107 = "23512ad"
  • In HKEY_CURRENT_USER\Software\Yqshjvw
    • W3_107 = "22536d74"
  • In HKEY_CURRENT_USER\Software\Yqshjvw
    • W4_107 = "23575d"
  • In HKEY_CURRENT_USER\Software\Yqshjvw
    • W1_108 = "7ec99c9"
  • In HKEY_CURRENT_USER\Software\Yqshjvw
    • W2_108 = "85bc6a9"
  • In HKEY_CURRENT_USER\Software\Yqshjvw
    • W3_108 = "84bf1a9d"
  • In HKEY_CURRENT_USER\Software\Yqshjvw
    • W4_108 = "85bc7b4"
  • In HKEY_CURRENT_USER\Software\Yqshjvw
    • W1_109 = "1e3928c2"
  • In HKEY_CURRENT_USER\Software\Yqshjvw
    • W2_109 = "e828cfb6"
  • In HKEY_CURRENT_USER\Software\Yqshjvw
    • W3_109 = "e92bb22"
  • In HKEY_CURRENT_USER\Software\Yqshjvw
    • W4_109 = "e828dab"
  • In HKEY_CURRENT_USER\Software\Yqshjvw
    • W1_110 = "edad653"
  • In HKEY_CURRENT_USER\Software\Yqshjvw
    • W2_110 = "4a9561de"
  • In HKEY_CURRENT_USER\Software\Yqshjvw
    • W3_110 = "4b96294b"
  • In HKEY_CURRENT_USER\Software\Yqshjvw
    • W4_110 = "4a954362"
  • In HKEY_CURRENT_USER\Software\Yqshjvw
    • W1_111 = "968e39"
  • In HKEY_CURRENT_USER\Software\Yqshjvw
    • W2_111 = "ad1b523"
  • In HKEY_CURRENT_USER\Software\Yqshjvw
    • W3_111 = "ac2c69"
  • In HKEY_CURRENT_USER\Software\Yqshjvw
    • W4_111 = "ad1acb9"
  • In HKEY_CURRENT_USER\Software\Yqshjvw
    • W1_112 = "a16c521"
  • In HKEY_CURRENT_USER\Software\Yqshjvw
    • W2_112 = "f6e8a4"
  • In HKEY_CURRENT_USER\Software\Yqshjvw
    • W3_112 = "e6d7c39"
  • In HKEY_CURRENT_USER\Software\Yqshjvw
    • W4_112 = "f6e161"
  • In HKEY_CURRENT_USER\Software\Yqshjvw
    • W1_113 = "82a78639"
  • In HKEY_CURRENT_USER\Software\Yqshjvw
    • W2_113 = "71da672c"
  • In HKEY_CURRENT_USER\Software\Yqshjvw
    • W3_113 = "7d9154e"
  • In HKEY_CURRENT_USER\Software\Yqshjvw
    • W4_113 = "71da7f67"
  • In HKEY_CURRENT_USER\Software\Yqshjvw
    • W1_114 = "89519eca"
  • In HKEY_CURRENT_USER\Software\Yqshjvw
    • W2_114 = "d446fd99"
  • In HKEY_CURRENT_USER\Software\Yqshjvw
    • W3_114 = "d5458297"
  • In HKEY_CURRENT_USER\Software\Yqshjvw
    • W4_114 = "d446e8be"
  • In HKEY_CURRENT_USER\Software\Yqshjvw
    • W1_115 = "757376d"
  • In HKEY_CURRENT_USER\Software\Yqshjvw
    • W2_115 = "36b34737"
  • In HKEY_CURRENT_USER\Software\Yqshjvw
    • W3_115 = "37b383c"
  • In HKEY_CURRENT_USER\Software\Yqshjvw
    • W4_115 = "36b35215"
  • In HKEY_CURRENT_USER\Software\Yqshjvw
    • W1_116 = "5a5a5419"
  • In HKEY_CURRENT_USER\Software\Yqshjvw
    • W2_116 = "991fab9b"
  • In HKEY_CURRENT_USER\Software\Yqshjvw
    • W3_116 = "981cd145"
  • In HKEY_CURRENT_USER\Software\Yqshjvw
    • W4_116 = "991fbb6c"
  • In HKEY_CURRENT_USER\Software\Yqshjvw
    • W1_117 = "592d4ea"
  • In HKEY_CURRENT_USER\Software\Yqshjvw
    • W2_117 = "fb8c3cc7"
  • In HKEY_CURRENT_USER\Software\Yqshjvw
    • W3_117 = "fa8f4eea"
  • In HKEY_CURRENT_USER\Software\Yqshjvw
    • W4_117 = "fb8c24c3"
  • In HKEY_CURRENT_USER\Software\Yqshjvw
    • W1_118 = "68951b1"
  • In HKEY_CURRENT_USER\Software\Yqshjvw
    • W2_118 = "5df8941e"
  • In HKEY_CURRENT_USER\Software\Yqshjvw
    • W3_118 = "5cfbe433"
  • In HKEY_CURRENT_USER\Software\Yqshjvw
    • W4_118 = "5df88e1a"
  • In HKEY_CURRENT_USER\Software\Yqshjvw
    • W1_119 = "f6bca1bb"
  • In HKEY_CURRENT_USER\Software\Yqshjvw
    • W2_119 = "c64eec8"
  • In HKEY_CURRENT_USER\Software\Yqshjvw
    • W3_119 = "c1679d58"
  • In HKEY_CURRENT_USER\Software\Yqshjvw
    • W4_119 = "c64f771"
  • In HKEY_CURRENT_USER\Software\Yqshjvw
    • W1_120 = "2417eb3"
  • In HKEY_CURRENT_USER\Software\Yqshjvw
    • W2_120 = "22d1452"
  • In HKEY_CURRENT_USER\Software\Yqshjvw
    • W3_120 = "23d2ae1"
  • In HKEY_CURRENT_USER\Software\Yqshjvw
    • W4_120 = "22d16c8"
  • In HKEY_CURRENT_USER\Software\Yqshjvw
    • W1_121 = "b8254268"
  • In HKEY_CURRENT_USER\Software\Yqshjvw
    • W2_121 = "853dea42"
  • In HKEY_CURRENT_USER\Software\Yqshjvw
    • W3_121 = "843ea36"
  • In HKEY_CURRENT_USER\Software\Yqshjvw
    • W4_121 = "853dca1f"
  • In HKEY_CURRENT_USER\Software\Yqshjvw
    • W1_122 = "877565ac"
  • In HKEY_CURRENT_USER\Software\Yqshjvw
    • W2_122 = "e7aa2c4"
  • In HKEY_CURRENT_USER\Software\Yqshjvw
    • W3_122 = "e6a9595f"
  • In HKEY_CURRENT_USER\Software\Yqshjvw
    • W4_122 = "e7aa3376"
  • In HKEY_CURRENT_USER\Software\Yqshjvw
    • W1_123 = "2c8afe9b"
  • In HKEY_CURRENT_USER\Software\Yqshjvw
    • W2_123 = "4a168a1"
  • In HKEY_CURRENT_USER\Software\Yqshjvw
    • W3_123 = "4b15f6e4"
  • In HKEY_CURRENT_USER\Software\Yqshjvw
    • W4_123 = "4a169ccd"
  • In HKEY_CURRENT_USER\Software\Yqshjvw
    • W1_124 = "4786e71"
  • In HKEY_CURRENT_USER\Software\Yqshjvw
    • W2_124 = "ac831be"
  • In HKEY_CURRENT_USER\Software\Yqshjvw
    • W3_124 = "ad86cd"
  • In HKEY_CURRENT_USER\Software\Yqshjvw
    • W4_124 = "ac83624"
  • In HKEY_CURRENT_USER\Software\Yqshjvw
    • W1_125 = "35ed5cc"
  • In HKEY_CURRENT_USER\Software\Yqshjvw
    • W2_125 = "eef7b53"
  • In HKEY_CURRENT_USER\Software\Yqshjvw
    • W3_125 = "fec552"
  • In HKEY_CURRENT_USER\Software\Yqshjvw
    • W4_125 = "eef6f7b"
  • In HKEY_CURRENT_USER\Software\Yqshjvw
    • W1_126 = "c2c3a8c"
  • In HKEY_CURRENT_USER\Software\Yqshjvw
    • W2_126 = "715bc958"
  • In HKEY_CURRENT_USER\Software\Yqshjvw
    • W3_126 = "758b2fb"
  • In HKEY_CURRENT_USER\Software\Yqshjvw
    • W4_126 = "715bd8d2"
  • In HKEY_CURRENT_USER\Software\Yqshjvw
    • W1_127 = "48a931e2"
  • In HKEY_CURRENT_USER\Software\Yqshjvw
    • W2_127 = "d3c85adf"
  • In HKEY_CURRENT_USER\Software\Yqshjvw
    • W3_127 = "d2cb28"
  • In HKEY_CURRENT_USER\Software\Yqshjvw
    • W4_127 = "d3c84229"
  • In HKEY_CURRENT_USER\Software\Yqshjvw
    • W1_128 = "c35cc54"
  • In HKEY_CURRENT_USER\Software\Yqshjvw
    • W2_128 = "3634ba74"
  • In HKEY_CURRENT_USER\Software\Yqshjvw
    • W3_128 = "3737c1a9"
  • In HKEY_CURRENT_USER\Software\Yqshjvw
    • W4_128 = "3634ab8"
  • In HKEY_CURRENT_USER\Software\Yqshjvw
    • W1_129 = "c17eab8"
  • In HKEY_CURRENT_USER\Software\Yqshjvw
    • W2_129 = "98a1eb4"
  • In HKEY_CURRENT_USER\Software\Yqshjvw
    • W3_129 = "99a27efe"
  • In HKEY_CURRENT_USER\Software\Yqshjvw
    • W4_129 = "98a114d7"
  • In HKEY_CURRENT_USER\Software\Yqshjvw
    • W1_130 = "49468349"
  • In HKEY_CURRENT_USER\Software\Yqshjvw
    • W2_130 = "fbd656e"
  • In HKEY_CURRENT_USER\Software\Yqshjvw
    • W3_130 = "fae147"
  • In HKEY_CURRENT_USER\Software\Yqshjvw
    • W4_130 = "fbd7e2e"
  • In HKEY_CURRENT_USER\Software\Yqshjvw
    • W1_131 = "c6d7a7b8"
  • In HKEY_CURRENT_USER\Software\Yqshjvw
    • W2_131 = "5d79f275"
  • In HKEY_CURRENT_USER\Software\Yqshjvw
    • W3_131 = "5c7a8dac"
  • In HKEY_CURRENT_USER\Software\Yqshjvw
    • W4_131 = "5d79e785"
  • In HKEY_CURRENT_USER\Software\Yqshjvw
    • W1_132 = "88934515"
  • In HKEY_CURRENT_USER\Software\Yqshjvw
    • W2_132 = "bfe64479"
  • In HKEY_CURRENT_USER\Software\Yqshjvw
    • W3_132 = "bee53af5"
  • In HKEY_CURRENT_USER\Software\Yqshjvw
    • W4_132 = "bfe65dc"
  • In HKEY_CURRENT_USER\Software\Yqshjvw
    • W1_133 = "e3d93bf6"
  • In HKEY_CURRENT_USER\Software\Yqshjvw
    • W2_133 = "2252af8e"
  • In HKEY_CURRENT_USER\Software\Yqshjvw
    • W3_133 = "2351d1a"
  • In HKEY_CURRENT_USER\Software\Yqshjvw
    • W4_133 = "2252ba33"
  • In HKEY_CURRENT_USER\Software\Yqshjvw
    • W1_134 = "41a573"
  • In HKEY_CURRENT_USER\Software\Yqshjvw
    • W2_134 = "84bf3f42"
  • In HKEY_CURRENT_USER\Software\Yqshjvw
    • W3_134 = "85bc49a3"
  • In HKEY_CURRENT_USER\Software\Yqshjvw
    • W4_134 = "84bf238a"
  • In HKEY_CURRENT_USER\Software\Yqshjvw
    • W1_135 = "cd6c3a"
  • In HKEY_CURRENT_USER\Software\Yqshjvw
    • W2_135 = "e72b927d"
  • In HKEY_CURRENT_USER\Software\Yqshjvw
    • W3_135 = "e628e6c8"
  • In HKEY_CURRENT_USER\Software\Yqshjvw
    • W4_135 = "e72b8ce1"
  • In HKEY_CURRENT_USER\Software\Yqshjvw
    • W1_136 = "c7134b76"
  • In HKEY_CURRENT_USER\Software\Yqshjvw
    • W2_136 = "4997e2de"
  • In HKEY_CURRENT_USER\Software\Yqshjvw
    • W3_136 = "48949c11"
  • In HKEY_CURRENT_USER\Software\Yqshjvw
    • W4_136 = "4997f638"
  • In HKEY_CURRENT_USER\Software\Yqshjvw
    • W1_137 = "b5dfae35"
  • In HKEY_CURRENT_USER\Software\Yqshjvw
    • W2_137 = "ac44b9"
  • In HKEY_CURRENT_USER\Software\Yqshjvw
    • W3_137 = "ad735a6"
  • In HKEY_CURRENT_USER\Software\Yqshjvw
    • W4_137 = "ac45f8f"
  • In HKEY_CURRENT_USER\Software\Yqshjvw
    • W1_138 = "4c8f181"
  • In HKEY_CURRENT_USER\Software\Yqshjvw
    • W2_138 = "e7d462"
  • In HKEY_CURRENT_USER\Software\Yqshjvw
    • W3_138 = "f73a2cf"
  • In HKEY_CURRENT_USER\Software\Yqshjvw
    • W4_138 = "e7c8e6"
  • In HKEY_CURRENT_USER\Software\Yqshjvw
    • W1_139 = "dead6"
  • In HKEY_CURRENT_USER\Software\Yqshjvw
    • W2_139 = "7dd25c3"
  • In HKEY_CURRENT_USER\Software\Yqshjvw
    • W3_139 = "71de5814"
  • In HKEY_CURRENT_USER\Software\Yqshjvw
    • W4_139 = "7dd323d"
  • In HKEY_CURRENT_USER\Software\Yqshjvw
    • W1_140 = "bb89a"
  • In HKEY_CURRENT_USER\Software\Yqshjvw
    • W2_140 = "d349bb96"
  • In HKEY_CURRENT_USER\Software\Yqshjvw
    • W3_140 = "d24af1bd"
  • In HKEY_CURRENT_USER\Software\Yqshjvw
    • W4_140 = "d3499b94"
  • In HKEY_CURRENT_USER\Software\Yqshjvw
    • W1_141 = "35e2c186"
  • In HKEY_CURRENT_USER\Software\Yqshjvw
    • W2_141 = "35b61e23"
  • In HKEY_CURRENT_USER\Software\Yqshjvw
    • W3_141 = "34b56ec2"
  • In HKEY_CURRENT_USER\Software\Yqshjvw
    • W4_141 = "35b64eb"
  • In HKEY_CURRENT_USER\Software\Yqshjvw
    • W1_142 = "5df3233"
  • In HKEY_CURRENT_USER\Software\Yqshjvw
    • W2_142 = "98227291"
  • In HKEY_CURRENT_USER\Software\Yqshjvw
    • W3_142 = "992146b"
  • In HKEY_CURRENT_USER\Software\Yqshjvw
    • W4_142 = "98226e42"
  • In HKEY_CURRENT_USER\Software\Yqshjvw
    • W1_143 = "a5eed628"
  • In HKEY_CURRENT_USER\Software\Yqshjvw
    • W2_143 = "fa8ec125"
  • In HKEY_CURRENT_USER\Software\Yqshjvw
    • W3_143 = "fb8dbdb"
  • In HKEY_CURRENT_USER\Software\Yqshjvw
    • W4_143 = "fa8ed799"
  • In HKEY_CURRENT_USER\Software\Yqshjvw
    • W1_144 = "95ac63a"
  • In HKEY_CURRENT_USER\Software\Yqshjvw
    • W2_144 = "5cfb5bb"
  • In HKEY_CURRENT_USER\Software\Yqshjvw
    • W3_144 = "5df82ad9"
  • In HKEY_CURRENT_USER\Software\Yqshjvw
    • W4_144 = "5cfb4f"
  • In HKEY_CURRENT_USER\Software\Yqshjvw
    • W1_145 = "3c75529d"
  • In HKEY_CURRENT_USER\Software\Yqshjvw
    • W2_145 = "bf67b453"
  • In HKEY_CURRENT_USER\Software\Yqshjvw
    • W3_145 = "be64c6e"
  • In HKEY_CURRENT_USER\Software\Yqshjvw
    • W4_145 = "bf67aa47"
  • In HKEY_CURRENT_USER\Software\Yqshjvw
    • W1_146 = "59db21e6"
  • In HKEY_CURRENT_USER\Software\Yqshjvw
    • W2_146 = "21d4a43"
  • In HKEY_CURRENT_USER\Software\Yqshjvw
    • W3_146 = "2d779b7"
  • In HKEY_CURRENT_USER\Software\Yqshjvw
    • W4_146 = "21d4139e"
  • In HKEY_CURRENT_USER\Software\Yqshjvw
    • W1_147 = "b8261f8f"
  • In HKEY_CURRENT_USER\Software\Yqshjvw
    • W2_147 = "8446c2"
  • In HKEY_CURRENT_USER\Software\Yqshjvw
    • W3_147 = "854316dc"
  • In HKEY_CURRENT_USER\Software\Yqshjvw
    • W4_147 = "8447cf5"
  • In HKEY_CURRENT_USER\Software\Yqshjvw
    • W1_148 = "e81b8642"
  • In HKEY_CURRENT_USER\Software\Yqshjvw
    • W2_148 = "e6acf6bb"
  • In HKEY_CURRENT_USER\Software\Yqshjvw
    • W3_148 = "e7af8c65"
  • In HKEY_CURRENT_USER\Software\Yqshjvw
    • W4_148 = "e6ace64c"
  • In HKEY_CURRENT_USER\Software\Yqshjvw
    • W1_149 = "284a9d1d"
  • In HKEY_CURRENT_USER\Software\Yqshjvw
    • W2_149 = "491951b7"
  • In HKEY_CURRENT_USER\Software\Yqshjvw
    • W3_149 = "481a258a"
  • In HKEY_CURRENT_USER\Software\Yqshjvw
    • W4_149 = "49194fa3"
  • In HKEY_CURRENT_USER\Software\Yqshjvw
    • W1_150 = "1ac1e181"
  • In HKEY_CURRENT_USER\Software\Yqshjvw
    • W2_150 = "ab85ae46"
  • In HKEY_CURRENT_USER\Software\Yqshjvw
    • W3_150 = "aa86d2d3"
  • In HKEY_CURRENT_USER\Software\Yqshjvw
    • W4_150 = "ab85b8fa"
  • In HKEY_CURRENT_USER\Software\Yqshjvw
    • W1_151 = "c16dac9b"
  • In HKEY_CURRENT_USER\Software\Yqshjvw
    • W2_151 = "df228"
  • In HKEY_CURRENT_USER\Software\Yqshjvw
    • W3_151 = "cf14878"
  • In HKEY_CURRENT_USER\Software\Yqshjvw
    • W4_151 = "df22251"
  • In HKEY_CURRENT_USER\Software\Yqshjvw
    • W1_152 = "4db24d8"
  • In HKEY_CURRENT_USER\Software\Yqshjvw
    • W2_152 = "75e96bc"
  • In HKEY_CURRENT_USER\Software\Yqshjvw
    • W3_152 = "715de181"
  • In HKEY_CURRENT_USER\Software\Yqshjvw
    • W4_152 = "75e8ba8"
  • In HKEY_CURRENT_USER\Software\Yqshjvw
    • W1_153 = "78b8df35"
  • In HKEY_CURRENT_USER\Software\Yqshjvw
    • W2_153 = "d2caee59"
  • In HKEY_CURRENT_USER\Software\Yqshjvw
    • W3_153 = "d3c99ed6"
  • In HKEY_CURRENT_USER\Software\Yqshjvw
    • W4_153 = "d2caf4ff"
  • In HKEY_CURRENT_USER\Software\Yqshjvw
    • W1_154 = "a121ca3f"
  • In HKEY_CURRENT_USER\Software\Yqshjvw
    • W2_154 = "3537478b"
  • In HKEY_CURRENT_USER\Software\Yqshjvw
    • W3_154 = "3434347f"
  • In HKEY_CURRENT_USER\Software\Yqshjvw
    • W4_154 = "35375e56"
  • In HKEY_CURRENT_USER\Software\Yqshjvw
    • W1_155 = "9f386fac"
  • In HKEY_CURRENT_USER\Software\Yqshjvw
    • W2_155 = "97a3d1db"
  • In HKEY_CURRENT_USER\Software\Yqshjvw
    • W3_155 = "96aad84"
  • In HKEY_CURRENT_USER\Software\Yqshjvw
    • W4_155 = "97a3c7ad"
  • In HKEY_CURRENT_USER\Software\Yqshjvw
    • W1_156 = "5828dd2"
  • In HKEY_CURRENT_USER\Software\Yqshjvw
    • W2_156 = "fa114ce"
  • In HKEY_CURRENT_USER\Software\Yqshjvw
    • W3_156 = "fb135b2d"
  • In HKEY_CURRENT_USER\Software\Yqshjvw
    • W4_156 = "fa1314"
  • In HKEY_CURRENT_USER\Software\Yqshjvw
    • W1_157 = "5d96e2"
  • In HKEY_CURRENT_USER\Software\Yqshjvw
    • W2_157 = "5c7c8139"
  • In HKEY_CURRENT_USER\Software\Yqshjvw
    • W3_157 = "5d7ff72"
  • In HKEY_CURRENT_USER\Software\Yqshjvw
    • W4_157 = "5c7c9a5b"
  • In HKEY_CURRENT_USER\Software\Yqshjvw
    • W1_158 = "41c8b81"
  • In HKEY_CURRENT_USER\Software\Yqshjvw
    • W2_158 = "bee91d8"
  • In HKEY_CURRENT_USER\Software\Yqshjvw
    • W3_158 = "bfea699b"
  • In HKEY_CURRENT_USER\Software\Yqshjvw
    • W4_158 = "bee93b2"
  • In HKEY_CURRENT_USER\Software\Yqshjvw
    • W1_159 = "a333c9c1"
  • In HKEY_CURRENT_USER\Software\Yqshjvw
    • W2_159 = "21557cd"
  • In HKEY_CURRENT_USER\Software\Yqshjvw
    • W3_159 = "25672"
  • In HKEY_CURRENT_USER\Software\Yqshjvw
    • W4_159 = "21556d9"
  • In HKEY_CURRENT_USER\Software\Yqshjvw
    • W1_160 = "1ae6bdb"
  • In HKEY_CURRENT_USER\Software\Yqshjvw
    • W2_160 = "83c1c39"
  • In HKEY_CURRENT_USER\Software\Yqshjvw
    • W3_160 = "82c2bc49"
  • In HKEY_CURRENT_USER\Software\Yqshjvw
    • W4_160 = "83c1d66"
  • In HKEY_CURRENT_USER\Software\Yqshjvw
    • W1_161 = "5355abec"
  • In HKEY_CURRENT_USER\Software\Yqshjvw
    • W2_161 = "e62e27fc"
  • In HKEY_CURRENT_USER\Software\Yqshjvw
    • W3_161 = "e72d559e"
  • In HKEY_CURRENT_USER\Software\Yqshjvw
    • W4_161 = "e62e3fb7"
  • In HKEY_CURRENT_USER\Software\Yqshjvw
    • W1_162 = "8aa26457"
  • In HKEY_CURRENT_USER\Software\Yqshjvw
    • W2_162 = "489abca2"
  • In HKEY_CURRENT_USER\Software\Yqshjvw
    • W3_162 = "4999c327"
  • In HKEY_CURRENT_USER\Software\Yqshjvw
    • W4_162 = "489aa9e"
  • In HKEY_CURRENT_USER\Software\Yqshjvw
    • W1_163 = "5adbb3d2"
  • In HKEY_CURRENT_USER\Software\Yqshjvw
    • W2_163 = "ab7d6c"
  • In HKEY_CURRENT_USER\Software\Yqshjvw
    • W3_163 = "aa4784c"
  • In HKEY_CURRENT_USER\Software\Yqshjvw
    • W4_163 = "ab71265"
  • In HKEY_CURRENT_USER\Software\Yqshjvw
    • W1_164 = "97624d3"
  • In HKEY_CURRENT_USER\Software\Yqshjvw
    • W2_164 = "d736ed6"
  • In HKEY_CURRENT_USER\Software\Yqshjvw
    • W3_164 = "c71195"
  • In HKEY_CURRENT_USER\Software\Yqshjvw
    • W4_164 = "d737bbc"
  • In HKEY_CURRENT_USER\Software\Yqshjvw
    • W1_165 = "c12fc261"
  • In HKEY_CURRENT_USER\Software\Yqshjvw
    • W2_165 = "6fdfcd9"
  • In HKEY_CURRENT_USER\Software\Yqshjvw
    • W3_165 = "6edc8f3a"
  • In HKEY_CURRENT_USER\Software\Yqshjvw
    • W4_165 = "6fdfe513"
  • In HKEY_CURRENT_USER\Software\Yqshjvw
    • W1_166 = "fea2e11a"
  • In HKEY_CURRENT_USER\Software\Yqshjvw
    • W2_166 = "d24c537e"
  • In HKEY_CURRENT_USER\Software\Yqshjvw
    • W3_166 = "d34f2443"
  • In HKEY_CURRENT_USER\Software\Yqshjvw
    • W4_166 = "d24c4e6a"
  • In HKEY_CURRENT_USER\Software\Yqshjvw
    • W1_167 = "a2ded4bb"
  • In HKEY_CURRENT_USER\Software\Yqshjvw
    • W2_167 = "34b8a5d"
  • In HKEY_CURRENT_USER\Software\Yqshjvw
    • W3_167 = "35bbdde8"
  • In HKEY_CURRENT_USER\Software\Yqshjvw
    • W4_167 = "34b8b7c1"
  • In HKEY_CURRENT_USER\Software\Yqshjvw
    • W1_168 = "3274876e"
  • In HKEY_CURRENT_USER\Software\Yqshjvw
    • W2_168 = "97253b7b"
  • In HKEY_CURRENT_USER\Software\Yqshjvw
    • W3_168 = "96264b31"
  • In HKEY_CURRENT_USER\Software\Yqshjvw
    • W4_168 = "97252118"
  • In HKEY_CURRENT_USER\Software\Yqshjvw
    • W1_169 = "278dccb4"
  • In HKEY_CURRENT_USER\Software\Yqshjvw
    • W2_169 = "f99199ab"
  • In HKEY_CURRENT_USER\Software\Yqshjvw
    • W3_169 = "f892e46"
  • In HKEY_CURRENT_USER\Software\Yqshjvw
    • W4_169 = "f9918a6f"
  • In HKEY_CURRENT_USER\Software\Yqshjvw
    • W1_170 = "57ee5dbc"
  • In HKEY_CURRENT_USER\Software\Yqshjvw
    • W2_170 = "5bfdea6"
  • In HKEY_CURRENT_USER\Software\Yqshjvw
    • W3_170 = "5afe99ef"
  • In HKEY_CURRENT_USER\Software\Yqshjvw
    • W4_170 = "5bfdf3c6"
  • In HKEY_CURRENT_USER\Software\Yqshjvw
    • W1_171 = "e24c31a9"
  • In HKEY_CURRENT_USER\Software\Yqshjvw
    • W2_171 = "be6a43a9"
  • In HKEY_CURRENT_USER\Software\Yqshjvw
    • W3_171 = "bf693734"
  • In HKEY_CURRENT_USER\Software\Yqshjvw
    • W4_171 = "be6a5d1d"
  • In HKEY_CURRENT_USER\Software\Yqshjvw
    • W1_172 = "b149a21"
  • In HKEY_CURRENT_USER\Software\Yqshjvw
    • W2_172 = "2d6d979"
  • In HKEY_CURRENT_USER\Software\Yqshjvw
    • W3_172 = "21d5ac5d"
  • In HKEY_CURRENT_USER\Software\Yqshjvw
    • W4_172 = "2d6c674"
  • In HKEY_CURRENT_USER\Software\Yqshjvw
    • W1_173 = "a1bf1aba"
  • In HKEY_CURRENT_USER\Software\Yqshjvw
    • W2_173 = "83433ab"
  • In HKEY_CURRENT_USER\Software\Yqshjvw
    • W3_173 = "82445e2"
  • In HKEY_CURRENT_USER\Software\Yqshjvw
    • W4_173 = "83432fcb"
  • In HKEY_CURRENT_USER\Software\Yqshjvw
    • W1_174 = "1fd359c"
  • In HKEY_CURRENT_USER\Software\Yqshjvw
    • W2_174 = "e5af8439"
  • In HKEY_CURRENT_USER\Software\Yqshjvw
    • W3_174 = "e4acf3b"
  • In HKEY_CURRENT_USER\Software\Yqshjvw
    • W4_174 = "e5af9922"
  • In HKEY_CURRENT_USER\Software\Yqshjvw
    • W1_175 = "f5cf416"
  • In HKEY_CURRENT_USER\Software\Yqshjvw
    • W2_175 = "481c175e"
  • In HKEY_CURRENT_USER\Software\Yqshjvw
    • W3_175 = "491f685"
  • In HKEY_CURRENT_USER\Software\Yqshjvw
    • W4_175 = "481c279"
  • In HKEY_CURRENT_USER\Software\Yqshjvw
    • W1_176 = "ca7ced"
  • In HKEY_CURRENT_USER\Software\Yqshjvw
    • W2_176 = "aa88739b"
  • In HKEY_CURRENT_USER\Software\Yqshjvw
    • W3_176 = "ab8b1f9"
  • In HKEY_CURRENT_USER\Software\Yqshjvw
    • W4_176 = "aa886bd"
  • In HKEY_CURRENT_USER\Software\Yqshjvw
    • W1_177 = "4b6d59f4"
  • In HKEY_CURRENT_USER\Software\Yqshjvw
    • W2_177 = "cf4c855"
  • In HKEY_CURRENT_USER\Software\Yqshjvw
    • W3_177 = "df7bfe"
  • In HKEY_CURRENT_USER\Software\Yqshjvw
    • W4_177 = "cf4d527"
  • In HKEY_CURRENT_USER\Software\Yqshjvw
    • W1_178 = "cee22fc9"
  • In HKEY_CURRENT_USER\Software\Yqshjvw
    • W2_178 = "6f612a1a"
  • In HKEY_CURRENT_USER\Software\Yqshjvw
    • W3_178 = "6e625457"
  • In HKEY_CURRENT_USER\Software\Yqshjvw
    • W4_178 = "6f613e7e"
  • In HKEY_CURRENT_USER\Software\Yqshjvw
    • W1_179 = "efbed31d"
  • In HKEY_CURRENT_USER\Software\Yqshjvw
    • W2_179 = "d1cdba11"
  • In HKEY_CURRENT_USER\Software\Yqshjvw
    • W3_179 = "dcecdfc"
  • In HKEY_CURRENT_USER\Software\Yqshjvw
    • W4_179 = "d1cda7d5"
  • In HKEY_CURRENT_USER\Software\Yqshjvw
    • W1_180 = "43b2e12"
  • In HKEY_CURRENT_USER\Software\Yqshjvw
    • W2_180 = "343a318a"
  • In HKEY_CURRENT_USER\Software\Yqshjvw
    • W3_180 = "35397b5"
  • In HKEY_CURRENT_USER\Software\Yqshjvw
    • W4_180 = "343a112c"
  • In HKEY_CURRENT_USER\Software\Yqshjvw
    • W1_181 = "add7313d"
  • In HKEY_CURRENT_USER\Software\Yqshjvw
    • W2_181 = "96a66efc"
  • In HKEY_CURRENT_USER\Software\Yqshjvw
    • W3_181 = "97a51aa"
  • In HKEY_CURRENT_USER\Software\Yqshjvw
    • W4_181 = "96a67a83"
  • In HKEY_CURRENT_USER\Software\Yqshjvw
    • W1_182 = "47748a"
  • In HKEY_CURRENT_USER\Software\Yqshjvw
    • W2_182 = "f912f6fd"
  • In HKEY_CURRENT_USER\Software\Yqshjvw
    • W3_182 = "f81189f3"
  • In HKEY_CURRENT_USER\Software\Yqshjvw
    • W4_182 = "f912e3da"
  • In HKEY_CURRENT_USER\Software\Yqshjvw
    • W1_183 = "ab1726e5"
  • In HKEY_CURRENT_USER\Software\Yqshjvw
    • W2_183 = "5b7f5c81"
  • In HKEY_CURRENT_USER\Software\Yqshjvw
    • W3_183 = "5a7c2718"
  • In HKEY_CURRENT_USER\Software\Yqshjvw
    • W4_183 = "5b7f4d31"
  • In HKEY_CURRENT_USER\Software\Yqshjvw
    • W1_184 = "21c4613c"
  • In HKEY_CURRENT_USER\Software\Yqshjvw
    • W2_184 = "bdeba378"
  • In HKEY_CURRENT_USER\Software\Yqshjvw
    • W3_184 = "bce8dca1"
  • In HKEY_CURRENT_USER\Software\Yqshjvw
    • W4_184 = "bdebb688"
  • In HKEY_CURRENT_USER\Software\Yqshjvw\1926745233
    • 1651272023 = "6"
  • In HKEY_CURRENT_USER\Software\Yqshjvw\1926745233
    • -992423250 = "0"
  • In HKEY_CURRENT_USER\Software\Yqshjvw\1926745233
    • 658848773 = "0"
  • In HKEY_CURRENT_USER\Software\Yqshjvw\1926745233
    • -1984846500 = "1e"
  • In HKEY_CURRENT_USER\Software\Yqshjvw\1926745233
    • -333574477 = "43"
  • In HKEY_CURRENT_USER\Software\Yqshjvw\1926745233
    • 1317697546 = "{random characters}"
  • In HKEY_CURRENT_USER\Software\Yqshjvw\1926745233
    • -1325997727 = "{random characters}"

手順 4

変更されたレジストリ値を修正します。

[ 詳細 ]

警告:レジストリはWindowsの構成情報が格納されているデータベースであり、レジストリの編集内容に問題があると、システムが正常に動作しなくなる場合があります。
事前に意図的に対象の設定を変更していた場合は、意図するオリジナルの設定に戻してください。変更する値が分からない場合は、システム管理者にお尋ねいただき、レジストリの編集はお客様の責任として行なって頂くようお願いいたします。弊社ではレジストリの編集による如何なる問題に対しても補償いたしかねます。
レジストリの編集前にこちらをご参照ください。

  • In HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Explorer\Advanced
    • From: Hidden = "2"
      To: Hidden = ""2""
  • In HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center
    • AntiVirusOverride = "1"
  • In HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center
    • AntiVirusDisableNotify = "1"
  • In HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center
    • FirewallDisableNotify = "1"
  • In HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center
    • FirewallOverride = "1"
  • In HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center
    • UpdatesDisableNotify = "1"
  • In HKEY_CURRENT_USER\Software\Microsoft\Windows NT\CurrentVersion\Windows
    • Load = "%User Profile%\FeedCache\spoolsw.exe"

手順 5

以下のファイルを検索し削除します。

[ 詳細 ]
コンポーネントファイルが隠しファイル属性の場合があります。[詳細設定オプション]をクリックし、[隠しファイルとフォルダの検索]のチェックボックスをオンにし、検索結果に隠しファイルとフォルダが含まれるようにしてください。
  • %Windows%\1119af
  • %User Temp%\winhtxm.exe
  • VMware Shared Folders\133b57
  • %User Temp%\seocr.exe
  • Microsoft Terminal Services\135f4a

手順 6

以下のフォルダを検索し削除します。

[ 詳細 ]
フォルダが隠しフォルダ属性に設定されている場合があります。[詳細設定オプション]をクリックし、[隠しファイルとフォルダの検索]のチェックボックスをオンにし、検索結果に隠しファイルとフォルダが含まれるようにしてください。
  • %User Profile%\Microsoft\Blend
  • %User Profile%\Blend\14.0
  • %User Profile%\14.0\FeedCache

手順 7

最新のバージョン(エンジン、パターンファイル)を導入したウイルス対策製品を用い、ウイルス検索を実行してください。「TSPY_GOLROTED.AAADV」と検出したファイルはすべて削除してください。 検出されたファイルが、弊社ウイルス対策製品により既に駆除、隔離またはファイル削除の処理が実行された場合、ウイルスの処理は完了しており、他の削除手順は特にありません。

手順 8

以下のファイルをバックアップを用いて修復します。なお、マイクロソフト製品に関連したファイルのみ修復されます。このマルウェア/グレイウェア/スパイウェアが同社製品以外のプログラムをも削除した場合には、該当プログラムを再度インストールする必要があります。

  • {malware path and file name}:zone.identifier
  • %User Profile%\FeedCache\spoolsw.exe:Zone.Identifier
  • %User Temp%\winwhdamx.exe
  • %User Temp%\jnns.exe

手順 9

以下の削除されたレジストリキーまたはレジストリ値をバックアップを用いて修復します。

※註:マイクロソフト製品に関連したレジストリキーおよびレジストリ値のみが修復されます。このマルウェアもしくはアドウェア等が同社製品以外のプログラムも削除した場合には、該当プログラムを再度インストールする必要があります。

  • In HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Control\SafeBoot\Minimal
    • AppMgmt
  • In HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Control\SafeBoot\Minimal
    • Base
  • In HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Control\SafeBoot\Minimal
    • Boot Bus Extender
  • In HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Control\SafeBoot\Minimal
    • Boot file system
  • In HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Control\SafeBoot\Minimal
    • CryptSvc
  • In HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Control\SafeBoot\Minimal
    • DcomLaunch
  • In HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Control\SafeBoot\Minimal
    • dmadmin
  • In HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Control\SafeBoot\Minimal
    • dmboot.sys
  • In HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Control\SafeBoot\Minimal
    • dmio.sys
  • In HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Control\SafeBoot\Minimal
    • dmload.sys
  • In HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Control\SafeBoot\Minimal
    • dmserver
  • In HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Control\SafeBoot\Minimal
    • EventLog
  • In HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Control\SafeBoot\Minimal
    • File system
  • In HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Control\SafeBoot\Minimal
    • Filter
  • In HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Control\SafeBoot\Minimal
    • HelpSvc
  • In HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Control\SafeBoot\Minimal
    • Netlogon
  • In HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Control\SafeBoot\Minimal
    • PCI Configuration
  • In HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Control\SafeBoot\Minimal
    • PlugPlay
  • In HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Control\SafeBoot\Minimal
    • PNP Filter
  • In HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Control\SafeBoot\Minimal
    • Primary disk
  • In HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Control\SafeBoot\Minimal
    • RpcSs
  • In HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Control\SafeBoot\Minimal
    • SCSI Class
  • In HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Control\SafeBoot\Minimal
    • sermouse.sys
  • In HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Control\SafeBoot\Minimal
    • sr.sys
  • In HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Control\SafeBoot\Minimal
    • SRService
  • In HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Control\SafeBoot\Minimal
    • System Bus Extender
  • In HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Control\SafeBoot\Minimal
    • vga.sys
  • In HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Control\SafeBoot\Minimal
    • vgasave.sys
  • In HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Control\SafeBoot\Minimal
    • WinMgmt
  • In HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Control\SafeBoot\Minimal
    • {36FC9E60-C465-11CF-8056-444553540000}
  • In HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Control\SafeBoot\Minimal
    • {4D36E965-E325-11CE-BFC1-08002BE10318}
  • In HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Control\SafeBoot\Minimal
    • {4D36E967-E325-11CE-BFC1-08002BE10318}
  • In HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Control\SafeBoot\Minimal
    • {4D36E969-E325-11CE-BFC1-08002BE10318}
  • In HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Control\SafeBoot\Minimal
    • {4D36E96A-E325-11CE-BFC1-08002BE10318}
  • In HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Control\SafeBoot\Minimal
    • {4D36E96B-E325-11CE-BFC1-08002BE10318}
  • In HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Control\SafeBoot\Minimal
    • {4D36E96F-E325-11CE-BFC1-08002BE10318}
  • In HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Control\SafeBoot\Minimal
    • {4D36E977-E325-11CE-BFC1-08002BE10318}
  • In HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Control\SafeBoot\Minimal
    • {4D36E97B-E325-11CE-BFC1-08002BE10318}
  • In HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Control\SafeBoot\Minimal
    • {4D36E97D-E325-11CE-BFC1-08002BE10318}
  • In HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Control\SafeBoot\Minimal
    • {4D36E980-E325-11CE-BFC1-08002BE10318}
  • In HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Control\SafeBoot\Minimal
    • {71A27CDD-812A-11D0-BEC7-08002BE2092F}
  • In HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Control\SafeBoot\Minimal
    • {745A17A0-74D3-11D0-B6FE-00A0C90F57DA}
  • In HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Control\SafeBoot
    • Minimal
  • In HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Control\SafeBoot\Network
    • AFD
  • In HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Control\SafeBoot\Network
    • AppMgmt
  • In HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Control\SafeBoot\Network
    • Base
  • In HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Control\SafeBoot\Network
    • Boot Bus Extender
  • In HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Control\SafeBoot\Network
    • Boot file system
  • In HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Control\SafeBoot\Network
    • Browser
  • In HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Control\SafeBoot\Network
    • CryptSvc
  • In HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Control\SafeBoot\Network
    • DcomLaunch


ご利用はいかがでしたか? アンケートにご協力ください