WORM_MABEZAT.SM

ワームは、他のマルウェアに作成されるか、悪意あるWebサイトからユーザが誤ってダウンロードすることによりコンピュータに侵入します。

ワームは、タスクマネージャやレジストリエディタ、フォルダオプションを無効にします。

侵入方法

ワームは、他のマルウェアに作成されるか、悪意あるWebサイトからユーザが誤ってダウンロードすることによりコンピュータに侵入します。

インストール

ワームは、感染したコンピュータ内に以下のように自身のコピーを作成します。

• %User Temp%\0000a1be_rar\{malware file name}

(註：%User Temp%フォルダはWindowsの種類とインストール時の設定などにより異なります。標準設定では、Windows 2000、XP および Server 2003 の場合、"C:\Documents and Settings\＜ユーザー名＞\Local Settings\Temp"、Windows Vista および 7 の場合、"C:\Users\＜ユーザ名＞\AppData\Local\Temp" です。)

ワームは、以下のフォルダを作成します。

• %System Root%\Documents and Settings\Administrator
• %User Profile%\Application Data\tazebama
• %User Temp%\0000A1BE_Rar

(註：%System Root%フォルダは、標準設定では "C:" です。また、オペレーティングシステムが存在する場所です。. %User Profile% フォルダは、Windows 2000、XP および Server 2003 の場合、通常、"C:\Documents and Settings\＜ユーザ名＞"、Windows Vista および 7 の場合、"C:\Users\＜ユーザ名＞" です。. %User Temp%フォルダはWindowsの種類とインストール時の設定などにより異なります。標準設定では、Windows 2000、XP および Server 2003 の場合、"C:\Documents and Settings\＜ユーザー名＞\Local Settings\Temp"、Windows Vista および 7 の場合、"C:\Users\＜ユーザ名＞\AppData\Local\Temp" です。)

他のシステム変更

ワームは、以下のファイルを削除します。

• %System Root%\autorun.inf
• %Application Data%\Microsoft\CD Burning\autorun.inf
• %Application Data%\Microsoft\CD Burning\zPharaoh.exe

(註：%System Root%フォルダは、標準設定では "C:" です。また、オペレーティングシステムが存在する場所です。. %Application Data%フォルダは、Windows 2000、XP および Server 2003 の場合、通常 "C:\Documents and Settings\＜ユーザ名＞\Local Settings\Application Data"、Windows Vista および 7 の場合、"C:\Users\＜ユーザ名＞\AppData\Roaming" です。)

ワームは、以下のレジストリキーを追加します。

HKEY_CURRENT_USER\Software\Microsoft\
Windows\CurrentVersion\policies\
system

HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\
Security Center\Svc

HKEY_CURRENT_USER\Software\Aasppapmmxkvs\
-993627007

HKEY_CURRENT_USER\software\Microsoft\
Exchange

ワームは、以下のレジストリ値を追加します。

HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\
Security Center
UacDisableNotify = "1"

HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\
Security Center\Svc
AntiVirusOverride = "1"

HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\
Security Center\Svc
AntiVirusDisableNotify = "1"

HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\
Security Center\Svc
FirewallDisableNotify = "1"

HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\
Security Center\Svc
FirewallOverride = "1"

HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\
Security Center\Svc
UpdatesDisableNotify = "1"

HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\
Security Center\Svc
UacDisableNotify = "1"

HKEY_CURRENT_USER\Software\Microsoft\
Windows\CurrentVersion\Internet Settings
GlobalUserOffline = "0"

HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\
Windows\CurrentVersion\policies\
system
EnableLUA = "0"

HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\
Services\SharedAccess\Parameters\
FirewallPolicy\StandardProfile\AuthorizedApplications\
List
{malware path and file name} = "{malware path and file name}:*:enabled:ipsec"

HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\
Services\SharedAccess\Parameters\
FirewallPolicy\StandardProfile
EnableFirewall = "0"

HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\
Services\SharedAccess\Parameters\
FirewallPolicy\StandardProfile
DoNotAllowExceptions = "0"

HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\
Services\SharedAccess\Parameters\
FirewallPolicy\StandardProfile
DisableNotifications = "1"

HKEY_CURRENT_USER\Software\Aasppapmmxkvs\
-993627007
1768776769 = "98"

HKEY_CURRENT_USER\Software\Aasppapmmxkvs\
-993627007
-757413758 = "0"

HKEY_CURRENT_USER\Software\Aasppapmmxkvs\
-993627007
1011363011 = "0"

HKEY_CURRENT_USER\Software\Aasppapmmxkvs\
-993627007
-1514827516 = "23"

HKEY_CURRENT_USER\Software\Aasppapmmxkvs\
-993627007
253949253 = "17f"

HKEY_CURRENT_USER\Software\Aasppapmmxkvs\
-993627007
2022726022 = "{random characters}"

HKEY_CURRENT_USER\Software\Aasppapmmxkvs\
-993627007
-503464505 = "{random characters}"

HKEY_CURRENT_USER\Software\Aasppapmmxkvs
A1_0 = "cb6e694c"

HKEY_CURRENT_USER\Software\Aasppapmmxkvs
A2_0 = "23b5"

HKEY_CURRENT_USER\Software\Aasppapmmxkvs
A3_0 = "136a29"

HKEY_CURRENT_USER\Software\Aasppapmmxkvs
A4_0 = "0"

HKEY_CURRENT_USER\Software\Aasppapmmxkvs
A1_1 = "38a61d14"

HKEY_CURRENT_USER\Software\Aasppapmmxkvs
A2_1 = "696d7f61"

HKEY_CURRENT_USER\Software\Aasppapmmxkvs
A3_1 = "686ee68"

HKEY_CURRENT_USER\Software\Aasppapmmxkvs
A4_1 = "696d6441"

HKEY_CURRENT_USER\Software\Aasppapmmxkvs
A1_2 = "5def42ec"

HKEY_CURRENT_USER\Software\Aasppapmmxkvs
A2_2 = "d2dad29"

HKEY_CURRENT_USER\Software\Aasppapmmxkvs
A3_2 = "d3d9a2ab"

HKEY_CURRENT_USER\Software\Aasppapmmxkvs
A4_2 = "d2dac882"

HKEY_CURRENT_USER\Software\Aasppapmmxkvs
A1_3 = "efba79a"

HKEY_CURRENT_USER\Software\Aasppapmmxkvs
A2_3 = "3c4837b"

HKEY_CURRENT_USER\Software\Aasppapmmxkvs
A3_3 = "3d4b46ea"

HKEY_CURRENT_USER\Software\Aasppapmmxkvs
A4_3 = "3c482cc3"

HKEY_CURRENT_USER\Software\Aasppapmmxkvs
A1_4 = "6a14cc"

HKEY_CURRENT_USER\Software\Aasppapmmxkvs
A2_4 = "a5b58f28"

HKEY_CURRENT_USER\Software\Aasppapmmxkvs
A3_4 = "a4b6fb2d"

HKEY_CURRENT_USER\Software\Aasppapmmxkvs
A4_4 = "a5b5914"

HKEY_CURRENT_USER\Software\Aasppapmmxkvs
A1_5 = "541feab"

HKEY_CURRENT_USER\Software\Aasppapmmxkvs
A2_5 = "f22e2fe"

HKEY_CURRENT_USER\Software\Aasppapmmxkvs
A3_5 = "e219f6c"

HKEY_CURRENT_USER\Software\Aasppapmmxkvs
A4_5 = "f22f545"

HKEY_CURRENT_USER\Software\Aasppapmmxkvs
A1_6 = "95a336c2"

HKEY_CURRENT_USER\Software\Aasppapmmxkvs
A2_6 = "7894715"

HKEY_CURRENT_USER\Software\Aasppapmmxkvs
A3_6 = "799333af"

HKEY_CURRENT_USER\Software\Aasppapmmxkvs
A4_6 = "7895986"

HKEY_CURRENT_USER\Software\Aasppapmmxkvs
A1_7 = "4ef98399"

HKEY_CURRENT_USER\Software\Aasppapmmxkvs
A2_7 = "e1fda4f8"

HKEY_CURRENT_USER\Software\Aasppapmmxkvs
A3_7 = "efed7ee"

HKEY_CURRENT_USER\Software\Aasppapmmxkvs
A4_7 = "e1fdbdc7"

HKEY_CURRENT_USER\Software\Aasppapmmxkvs
A1_8 = "49ade5f"

HKEY_CURRENT_USER\Software\Aasppapmmxkvs
A2_8 = "4b6b3e6d"

HKEY_CURRENT_USER\Software\Aasppapmmxkvs
A3_8 = "4a684821"

HKEY_CURRENT_USER\Software\Aasppapmmxkvs
A4_8 = "4b6b228"

HKEY_CURRENT_USER\Software\Aasppapmmxkvs
A1_9 = "6858f2f5"

HKEY_CURRENT_USER\Software\Aasppapmmxkvs
A2_9 = "b4d89c25"

HKEY_CURRENT_USER\Software\Aasppapmmxkvs
A3_9 = "b5dbec6"

HKEY_CURRENT_USER\Software\Aasppapmmxkvs
A4_9 = "b4d88649"

HKEY_CURRENT_USER\Software\Aasppapmmxkvs
A1_10 = "5f829636"

HKEY_CURRENT_USER\Software\Aasppapmmxkvs
A2_10 = "1e45cac5"

HKEY_CURRENT_USER\Software\Aasppapmmxkvs
A3_10 = "1f468a3"

HKEY_CURRENT_USER\Software\Aasppapmmxkvs
A4_10 = "1e45ea8a"

HKEY_CURRENT_USER\Software\Aasppapmmxkvs
A1_11 = "f4eb196"

HKEY_CURRENT_USER\Software\Aasppapmmxkvs
A2_11 = "87b35a6"

HKEY_CURRENT_USER\Software\Aasppapmmxkvs
A3_11 = "86b24e2"

HKEY_CURRENT_USER\Software\Aasppapmmxkvs
A4_11 = "87b34ecb"

HKEY_CURRENT_USER\Software\Aasppapmmxkvs
A1_12 = "15157177"

HKEY_CURRENT_USER\Software\Aasppapmmxkvs
A2_12 = "f12adaf"

HKEY_CURRENT_USER\Software\Aasppapmmxkvs
A3_12 = "f23d925"

HKEY_CURRENT_USER\Software\Aasppapmmxkvs
A4_12 = "f12b3c"

HKEY_CURRENT_USER\Software\Aasppapmmxkvs
A1_13 = "559cb63"

HKEY_CURRENT_USER\Software\Aasppapmmxkvs
A2_13 = "5a8ee8a"

HKEY_CURRENT_USER\Software\Aasppapmmxkvs
A3_13 = "5b8d7d64"

HKEY_CURRENT_USER\Software\Aasppapmmxkvs
A4_13 = "5a8e174d"

HKEY_CURRENT_USER\Software\Aasppapmmxkvs
A1_14 = "53ec5fd7"

HKEY_CURRENT_USER\Software\Aasppapmmxkvs
A2_14 = "c3fb585f"

HKEY_CURRENT_USER\Software\Aasppapmmxkvs
A3_14 = "c2f811a7"

HKEY_CURRENT_USER\Software\Aasppapmmxkvs
A4_14 = "c3fb7b8e"

HKEY_CURRENT_USER\Software\Aasppapmmxkvs
A1_15 = "b1dbfb9"

HKEY_CURRENT_USER\Software\Aasppapmmxkvs
A2_15 = "2d68fce2"

HKEY_CURRENT_USER\Software\Aasppapmmxkvs
A3_15 = "2c6bb5e6"

HKEY_CURRENT_USER\Software\Aasppapmmxkvs
A4_15 = "2d68dfcf"

HKEY_CURRENT_USER\Software\Aasppapmmxkvs
A1_16 = "ed4364d"

HKEY_CURRENT_USER\Software\Aasppapmmxkvs
A2_16 = "96d65159"

HKEY_CURRENT_USER\Software\Aasppapmmxkvs
A3_16 = "97d52e39"

HKEY_CURRENT_USER\Software\Aasppapmmxkvs
A4_16 = "96d6441"

HKEY_CURRENT_USER\Software\Aasppapmmxkvs
A1_17 = "f29fcbe6"

HKEY_CURRENT_USER\Software\Aasppapmmxkvs
A2_17 = "43b246"

HKEY_CURRENT_USER\Software\Aasppapmmxkvs
A3_17 = "14c278"

HKEY_CURRENT_USER\Software\Aasppapmmxkvs
A4_17 = "43a851"

HKEY_CURRENT_USER\Software\Aasppapmmxkvs
A1_18 = "bf2cd8d8"

HKEY_CURRENT_USER\Software\Aasppapmmxkvs
A2_18 = "69b11a1b"

HKEY_CURRENT_USER\Software\Aasppapmmxkvs
A3_18 = "68b266bb"

HKEY_CURRENT_USER\Software\Aasppapmmxkvs
A4_18 = "69b1c92"

HKEY_CURRENT_USER\Software\Aasppapmmxkvs
A1_19 = "851a758c"

HKEY_CURRENT_USER\Software\Aasppapmmxkvs
A2_19 = "d31e589"

HKEY_CURRENT_USER\Software\Aasppapmmxkvs
A3_19 = "d21d1afa"

HKEY_CURRENT_USER\Software\Aasppapmmxkvs
A4_19 = "d31e7d3"

HKEY_CURRENT_USER\Software\Aasppapmmxkvs
A1_20 = "4c993a59"

HKEY_CURRENT_USER\Software\Aasppapmmxkvs
A2_20 = "3c8bc3fb"

HKEY_CURRENT_USER\Software\Aasppapmmxkvs
A3_20 = "3d88bf3d"

HKEY_CURRENT_USER\Software\Aasppapmmxkvs
A4_20 = "3c8bd514"

HKEY_CURRENT_USER\Software\Aasppapmmxkvs
A1_21 = "def8b7"

HKEY_CURRENT_USER\Software\Aasppapmmxkvs
A2_21 = "a5f926d5"

HKEY_CURRENT_USER\Software\Aasppapmmxkvs
A3_21 = "a4fa537c"

HKEY_CURRENT_USER\Software\Aasppapmmxkvs
A4_21 = "a5f93955"

HKEY_CURRENT_USER\Software\Aasppapmmxkvs
A1_22 = "af92e4fb"

HKEY_CURRENT_USER\Software\Aasppapmmxkvs
A2_22 = "f6681d2"

HKEY_CURRENT_USER\Software\Aasppapmmxkvs
A3_22 = "e65f7bf"

HKEY_CURRENT_USER\Software\Aasppapmmxkvs
A4_22 = "f669d96"

HKEY_CURRENT_USER\Software\Aasppapmmxkvs
A1_23 = "ad216684"

HKEY_CURRENT_USER\Software\Aasppapmmxkvs
A2_23 = "78d41be"

HKEY_CURRENT_USER\Software\Aasppapmmxkvs
A3_23 = "79d76bfe"

HKEY_CURRENT_USER\Software\Aasppapmmxkvs
A4_23 = "78d41d7"

HKEY_CURRENT_USER\Software\Aasppapmmxkvs
A1_24 = "c8accacd"

HKEY_CURRENT_USER\Software\Aasppapmmxkvs
A2_24 = "e2417aff"

HKEY_CURRENT_USER\Software\Aasppapmmxkvs
A3_24 = "e342c31"

HKEY_CURRENT_USER\Software\Aasppapmmxkvs
A4_24 = "e2416618"

HKEY_CURRENT_USER\Software\Aasppapmmxkvs
A1_25 = "b9e27617"

HKEY_CURRENT_USER\Software\Aasppapmmxkvs
A2_25 = "4baee9e6"

HKEY_CURRENT_USER\Software\Aasppapmmxkvs
A3_25 = "4aada7"

HKEY_CURRENT_USER\Software\Aasppapmmxkvs
A4_25 = "4baeca59"

HKEY_CURRENT_USER\Software\Aasppapmmxkvs
A1_26 = "7eb5624"

HKEY_CURRENT_USER\Software\Aasppapmmxkvs
A2_26 = "b51cab9"

HKEY_CURRENT_USER\Software\Aasppapmmxkvs
A3_26 = "b41f44b3"

HKEY_CURRENT_USER\Software\Aasppapmmxkvs
A4_26 = "b51c2e9a"

HKEY_CURRENT_USER\Software\Aasppapmmxkvs
A1_27 = "b132b882"

HKEY_CURRENT_USER\Software\Aasppapmmxkvs
A2_27 = "1e898a92"

HKEY_CURRENT_USER\Software\Aasppapmmxkvs
A3_27 = "1f8af8f2"

HKEY_CURRENT_USER\Software\Aasppapmmxkvs
A4_27 = "1e8992db"

HKEY_CURRENT_USER\Software\Aasppapmmxkvs
A1_28 = "74bec67"

HKEY_CURRENT_USER\Software\Aasppapmmxkvs
A2_28 = "87f6ee86"

HKEY_CURRENT_USER\Software\Aasppapmmxkvs
A3_28 = "86f59d35"

HKEY_CURRENT_USER\Software\Aasppapmmxkvs
A4_28 = "87f6f71c"

HKEY_CURRENT_USER\Software\Aasppapmmxkvs
A1_29 = "c6823b"

HKEY_CURRENT_USER\Software\Aasppapmmxkvs
A2_29 = "f1644ce6"

HKEY_CURRENT_USER\Software\Aasppapmmxkvs
A3_29 = "f673174"

HKEY_CURRENT_USER\Software\Aasppapmmxkvs
A4_29 = "f1645b5d"

HKEY_CURRENT_USER\Software\Aasppapmmxkvs
A1_30 = "7978cbc3"

HKEY_CURRENT_USER\Software\Aasppapmmxkvs
A2_30 = "5ad1a6f1"

HKEY_CURRENT_USER\Software\Aasppapmmxkvs
A3_30 = "5bd2d5b7"

HKEY_CURRENT_USER\Software\Aasppapmmxkvs
A4_30 = "5ad1bf9e"

HKEY_CURRENT_USER\Software\Aasppapmmxkvs
A1_31 = "33485fb"

HKEY_CURRENT_USER\Software\Aasppapmmxkvs
A2_31 = "c43f3b34"

HKEY_CURRENT_USER\Software\Aasppapmmxkvs
A3_31 = "c53c49f6"

HKEY_CURRENT_USER\Software\Aasppapmmxkvs
A4_31 = "c43f23df"

HKEY_CURRENT_USER\Software\Aasppapmmxkvs
A1_32 = "fa37c4e8"

HKEY_CURRENT_USER\Software\Aasppapmmxkvs
A2_32 = "2dacabd"

HKEY_CURRENT_USER\Software\Aasppapmmxkvs
A3_32 = "2cafe29"

HKEY_CURRENT_USER\Software\Aasppapmmxkvs
A4_32 = "2dac882"

HKEY_CURRENT_USER\Software\Aasppapmmxkvs
A1_33 = "14142e1a"

HKEY_CURRENT_USER\Software\Aasppapmmxkvs
A2_33 = "9719f7e"

HKEY_CURRENT_USER\Software\Aasppapmmxkvs
A3_33 = "961a8648"

HKEY_CURRENT_USER\Software\Aasppapmmxkvs
A4_33 = "9719ec61"

HKEY_CURRENT_USER\Software\Aasppapmmxkvs
A1_34 = "5f5d4dde"

HKEY_CURRENT_USER\Software\Aasppapmmxkvs
A2_34 = "874d8a"

HKEY_CURRENT_USER\Software\Aasppapmmxkvs
A3_34 = "1843a8b"

HKEY_CURRENT_USER\Software\Aasppapmmxkvs
A4_34 = "875a2"

HKEY_CURRENT_USER\Software\Aasppapmmxkvs
A1_35 = "5761ceb5"

HKEY_CURRENT_USER\Software\Aasppapmmxkvs
A2_35 = "69f49468"

HKEY_CURRENT_USER\Software\Aasppapmmxkvs
A3_35 = "68f7deca"

HKEY_CURRENT_USER\Software\Aasppapmmxkvs
A4_35 = "69f4b4e3"

HKEY_CURRENT_USER\Software\Aasppapmmxkvs
A1_36 = "fb61d5f"

HKEY_CURRENT_USER\Software\Aasppapmmxkvs
A2_36 = "d3623a9"

HKEY_CURRENT_USER\Software\Aasppapmmxkvs
A3_36 = "d26173d"

HKEY_CURRENT_USER\Software\Aasppapmmxkvs
A4_36 = "d3621924"

HKEY_CURRENT_USER\Software\Aasppapmmxkvs
A1_37 = "bb278fac"

HKEY_CURRENT_USER\Software\Aasppapmmxkvs
A2_37 = "3ccf6335"

HKEY_CURRENT_USER\Software\Aasppapmmxkvs
A3_37 = "3dcc174c"

HKEY_CURRENT_USER\Software\Aasppapmmxkvs
A4_37 = "3ccf7d65"

HKEY_CURRENT_USER\Software\Aasppapmmxkvs
A1_38 = "14e89eb"

HKEY_CURRENT_USER\Software\Aasppapmmxkvs
A2_38 = "a63cf456"

HKEY_CURRENT_USER\Software\Aasppapmmxkvs
A3_38 = "a73f8b8f"

HKEY_CURRENT_USER\Software\Aasppapmmxkvs
A4_38 = "a63ce1a6"

HKEY_CURRENT_USER\Software\Aasppapmmxkvs
A1_39 = "ab2865a"

HKEY_CURRENT_USER\Software\Aasppapmmxkvs
A2_39 = "faa5ddc"

HKEY_CURRENT_USER\Software\Aasppapmmxkvs
A3_39 = "ea92fce"

HKEY_CURRENT_USER\Software\Aasppapmmxkvs
A4_39 = "faa45e7"

HKEY_CURRENT_USER\Software\Aasppapmmxkvs
A1_40 = "49caf62"

HKEY_CURRENT_USER\Software\Aasppapmmxkvs
A2_40 = "7917bc8f"

HKEY_CURRENT_USER\Software\Aasppapmmxkvs
A3_40 = "7814c1"

HKEY_CURRENT_USER\Software\Aasppapmmxkvs
A4_40 = "7917aa28"

HKEY_CURRENT_USER\Software\Aasppapmmxkvs
A1_41 = "71df531e"

HKEY_CURRENT_USER\Software\Aasppapmmxkvs
A2_41 = "e2851475"

HKEY_CURRENT_USER\Software\Aasppapmmxkvs
A3_41 = "e386644"

HKEY_CURRENT_USER\Software\Aasppapmmxkvs
A4_41 = "e285e69"

HKEY_CURRENT_USER\Software\Aasppapmmxkvs
A1_42 = "8ff11"

HKEY_CURRENT_USER\Software\Aasppapmmxkvs
A2_42 = "4bf26f39"

HKEY_CURRENT_USER\Software\Aasppapmmxkvs
A3_42 = "4af11883"

HKEY_CURRENT_USER\Software\Aasppapmmxkvs
A4_42 = "4bf272aa"

HKEY_CURRENT_USER\Software\Aasppapmmxkvs
A1_43 = "1b1e6691"

HKEY_CURRENT_USER\Software\Aasppapmmxkvs
A2_43 = "b55ff2cc"

HKEY_CURRENT_USER\Software\Aasppapmmxkvs
A3_43 = "b45cbcc2"

HKEY_CURRENT_USER\Software\Aasppapmmxkvs
A4_43 = "b55fd6eb"

HKEY_CURRENT_USER\Software\Aasppapmmxkvs
A1_44 = "5f4792"

HKEY_CURRENT_USER\Software\Aasppapmmxkvs
A2_44 = "1ecd26fb"

HKEY_CURRENT_USER\Software\Aasppapmmxkvs
A3_44 = "1fce515"

HKEY_CURRENT_USER\Software\Aasppapmmxkvs
A4_44 = "1ecd3b2c"

HKEY_CURRENT_USER\Software\Aasppapmmxkvs
A1_45 = "93745436"

HKEY_CURRENT_USER\Software\Aasppapmmxkvs
A2_45 = "883a8756"

HKEY_CURRENT_USER\Software\Aasppapmmxkvs
A3_45 = "8939f544"

HKEY_CURRENT_USER\Software\Aasppapmmxkvs
A4_45 = "883a9f6d"

HKEY_CURRENT_USER\Software\Aasppapmmxkvs
A1_46 = "872c8ef"

HKEY_CURRENT_USER\Software\Aasppapmmxkvs
A2_46 = "f1a81541"

HKEY_CURRENT_USER\Software\Aasppapmmxkvs
A3_46 = "fab6987"

HKEY_CURRENT_USER\Software\Aasppapmmxkvs
A4_46 = "f1a83ae"

HKEY_CURRENT_USER\Software\Aasppapmmxkvs
A1_47 = "64f3c8d"

HKEY_CURRENT_USER\Software\Aasppapmmxkvs
A2_47 = "5b157252"

HKEY_CURRENT_USER\Software\Aasppapmmxkvs
A3_47 = "5a16dc6"

HKEY_CURRENT_USER\Software\Aasppapmmxkvs
A4_47 = "5b1567ef"

HKEY_CURRENT_USER\Software\Aasppapmmxkvs
A1_48 = "f3afe8b"

HKEY_CURRENT_USER\Software\Aasppapmmxkvs
A2_48 = "c482edbe"

HKEY_CURRENT_USER\Software\Aasppapmmxkvs
A3_48 = "c581a619"

HKEY_CURRENT_USER\Software\Aasppapmmxkvs
A4_48 = "c482cc3"

HKEY_CURRENT_USER\Software\Aasppapmmxkvs
A1_49 = "d7ce65f"

HKEY_CURRENT_USER\Software\Aasppapmmxkvs
A2_49 = "2df2928"

HKEY_CURRENT_USER\Software\Aasppapmmxkvs
A3_49 = "2cf35a58"

HKEY_CURRENT_USER\Software\Aasppapmmxkvs
A4_49 = "2df371"

HKEY_CURRENT_USER\Software\Aasppapmmxkvs
A1_50 = "f4aec6c5"

HKEY_CURRENT_USER\Software\Aasppapmmxkvs
A2_50 = "975d83c5"

HKEY_CURRENT_USER\Software\Aasppapmmxkvs
A3_50 = "965efe9b"

HKEY_CURRENT_USER\Software\Aasppapmmxkvs
A4_50 = "975d94b2"

HKEY_CURRENT_USER\Software\Aasppapmmxkvs
A1_51 = "28eaf6a6"

HKEY_CURRENT_USER\Software\Aasppapmmxkvs
A2_51 = "cae24c"

HKEY_CURRENT_USER\Software\Aasppapmmxkvs
A3_51 = "1c992da"

HKEY_CURRENT_USER\Software\Aasppapmmxkvs
A4_51 = "caf8f3"

HKEY_CURRENT_USER\Software\Aasppapmmxkvs
A1_52 = "8b5ce61a"

HKEY_CURRENT_USER\Software\Aasppapmmxkvs
A2_52 = "6a384583"

HKEY_CURRENT_USER\Software\Aasppapmmxkvs
A3_52 = "6b3b371d"

HKEY_CURRENT_USER\Software\Aasppapmmxkvs
A4_52 = "6a385d34"

HKEY_CURRENT_USER\Software\Aasppapmmxkvs
A1_53 = "ae415d2d"

HKEY_CURRENT_USER\Software\Aasppapmmxkvs
A2_53 = "d3a5d84a"

HKEY_CURRENT_USER\Software\Aasppapmmxkvs
A3_53 = "d2a6ab5c"

HKEY_CURRENT_USER\Software\Aasppapmmxkvs
A4_53 = "d3a5c175"

HKEY_CURRENT_USER\Software\Aasppapmmxkvs
A1_54 = "ee6785"

HKEY_CURRENT_USER\Software\Aasppapmmxkvs
A2_54 = "3d133e9a"

HKEY_CURRENT_USER\Software\Aasppapmmxkvs
A3_54 = "3c14f9f"

HKEY_CURRENT_USER\Software\Aasppapmmxkvs
A4_54 = "3d1325b6"

HKEY_CURRENT_USER\Software\Aasppapmmxkvs
A1_55 = "5a47aeb9"

HKEY_CURRENT_USER\Software\Aasppapmmxkvs
A2_55 = "a689549"

HKEY_CURRENT_USER\Software\Aasppapmmxkvs
A3_55 = "a783e3de"

HKEY_CURRENT_USER\Software\Aasppapmmxkvs
A4_55 = "a6889f7"

HKEY_CURRENT_USER\Software\Aasppapmmxkvs
A1_56 = "b915a2f1"

HKEY_CURRENT_USER\Software\Aasppapmmxkvs
A2_56 = "fedfb95"

HKEY_CURRENT_USER\Software\Aasppapmmxkvs
A3_56 = "eee8411"

HKEY_CURRENT_USER\Software\Aasppapmmxkvs
A4_56 = "fedee38"

HKEY_CURRENT_USER\Software\Aasppapmmxkvs
A1_57 = "736e98b"

HKEY_CURRENT_USER\Software\Aasppapmmxkvs
A2_57 = "795b4713"

HKEY_CURRENT_USER\Software\Aasppapmmxkvs
A3_57 = "7858385"

HKEY_CURRENT_USER\Software\Aasppapmmxkvs
A4_57 = "795b5279"

HKEY_CURRENT_USER\Software\Aasppapmmxkvs
A1_58 = "2a6a6e4"

HKEY_CURRENT_USER\Software\Aasppapmmxkvs
A2_58 = "e2c8accd"

HKEY_CURRENT_USER\Software\Aasppapmmxkvs
A3_58 = "e3cbdc93"

HKEY_CURRENT_USER\Software\Aasppapmmxkvs
A4_58 = "e2c8b6ba"

HKEY_CURRENT_USER\Software\Aasppapmmxkvs
A1_59 = "d7f9c84f"

HKEY_CURRENT_USER\Software\Aasppapmmxkvs
A2_59 = "4c36e66"

HKEY_CURRENT_USER\Software\Aasppapmmxkvs
A3_59 = "4d357d2"

HKEY_CURRENT_USER\Software\Aasppapmmxkvs
A4_59 = "4c361afb"

HKEY_CURRENT_USER\Software\Aasppapmmxkvs
A1_60 = "21682786"

HKEY_CURRENT_USER\Software\Aasppapmmxkvs
A2_60 = "b5a36653"

HKEY_CURRENT_USER\Software\Aasppapmmxkvs
A3_60 = "b4a1515"

HKEY_CURRENT_USER\Software\Aasppapmmxkvs
A4_60 = "b5a37f3c"

HKEY_CURRENT_USER\Software\Aasppapmmxkvs
A1_61 = "445a1"

HKEY_CURRENT_USER\Software\Aasppapmmxkvs
A2_61 = "1f1fbf5"

HKEY_CURRENT_USER\Software\Aasppapmmxkvs
A3_61 = "1e138954"

HKEY_CURRENT_USER\Software\Aasppapmmxkvs
A4_61 = "1f1e37d"

HKEY_CURRENT_USER\Software\Aasppapmmxkvs
A1_62 = "161f3ce8"

HKEY_CURRENT_USER\Software\Aasppapmmxkvs
A2_62 = "887e5979"

HKEY_CURRENT_USER\Software\Aasppapmmxkvs
A3_62 = "897d2d97"

HKEY_CURRENT_USER\Software\Aasppapmmxkvs
A4_62 = "887e47be"

HKEY_CURRENT_USER\Software\Aasppapmmxkvs
A1_63 = "67f8a6"

HKEY_CURRENT_USER\Software\Aasppapmmxkvs
A2_63 = "f1ebb19e"

HKEY_CURRENT_USER\Software\Aasppapmmxkvs
A3_63 = "fe8c1d6"

HKEY_CURRENT_USER\Software\Aasppapmmxkvs
A4_63 = "f1ebabff"

HKEY_CURRENT_USER\Software\Aasppapmmxkvs
A1_64 = "eff1ef15"

HKEY_CURRENT_USER\Software\Aasppapmmxkvs
A2_64 = "5b595fd"

HKEY_CURRENT_USER\Software\Aasppapmmxkvs
A3_64 = "5a5a7a69"

HKEY_CURRENT_USER\Software\Aasppapmmxkvs
A4_64 = "5b5914"

HKEY_CURRENT_USER\Software\Aasppapmmxkvs
A1_65 = "2e2e7eef"

HKEY_CURRENT_USER\Software\Aasppapmmxkvs
A2_65 = "c4c66b41"

HKEY_CURRENT_USER\Software\Aasppapmmxkvs
A3_65 = "c5c51ea8"

HKEY_CURRENT_USER\Software\Aasppapmmxkvs
A4_65 = "c4c67481"

HKEY_CURRENT_USER\Software\Aasppapmmxkvs
A1_66 = "f822f9b"

HKEY_CURRENT_USER\Software\Aasppapmmxkvs
A2_66 = "2e33c1b5"

HKEY_CURRENT_USER\Software\Aasppapmmxkvs
A3_66 = "2f3b2eb"

HKEY_CURRENT_USER\Software\Aasppapmmxkvs
A4_66 = "2e33d8c2"

HKEY_CURRENT_USER\Software\Aasppapmmxkvs
A1_67 = "e1d5aade"

HKEY_CURRENT_USER\Software\Aasppapmmxkvs
A2_67 = "97a12474"

HKEY_CURRENT_USER\Software\Aasppapmmxkvs
A3_67 = "96a2572a"

HKEY_CURRENT_USER\Software\Aasppapmmxkvs
A4_67 = "97a13d3"

HKEY_CURRENT_USER\Software\Aasppapmmxkvs
A1_68 = "d5298e1d"

HKEY_CURRENT_USER\Software\Aasppapmmxkvs
A2_68 = "1e848e"

HKEY_CURRENT_USER\Software\Aasppapmmxkvs
A3_68 = "dcb6d"

HKEY_CURRENT_USER\Software\Aasppapmmxkvs
A4_68 = "1ea144"

HKEY_CURRENT_USER\Software\Aasppapmmxkvs
A1_69 = "66ea37"

HKEY_CURRENT_USER\Software\Aasppapmmxkvs
A2_69 = "6a7c13c"

HKEY_CURRENT_USER\Software\Aasppapmmxkvs
A3_69 = "6b7f6fac"

HKEY_CURRENT_USER\Software\Aasppapmmxkvs
A4_69 = "6a7c585"

HKEY_CURRENT_USER\Software\Aasppapmmxkvs
A1_70 = "1663d24"

HKEY_CURRENT_USER\Software\Aasppapmmxkvs
A2_70 = "d3e94815"

HKEY_CURRENT_USER\Software\Aasppapmmxkvs
A3_70 = "d2ea3ef"

HKEY_CURRENT_USER\Software\Aasppapmmxkvs
A4_70 = "d3e969c6"

HKEY_CURRENT_USER\Software\Aasppapmmxkvs
A1_71 = "e7bab551"

HKEY_CURRENT_USER\Software\Aasppapmmxkvs
A2_71 = "3d56d7"

HKEY_CURRENT_USER\Software\Aasppapmmxkvs
A3_71 = "3c55a42e"

HKEY_CURRENT_USER\Software\Aasppapmmxkvs
A4_71 = "3d56ce7"

HKEY_CURRENT_USER\Software\Aasppapmmxkvs
A1_72 = "7a6e8315"

HKEY_CURRENT_USER\Software\Aasppapmmxkvs
A2_72 = "a6c41253"

HKEY_CURRENT_USER\Software\Aasppapmmxkvs
A3_72 = "a7c75861"

HKEY_CURRENT_USER\Software\Aasppapmmxkvs
A4_72 = "a6c43248"

HKEY_CURRENT_USER\Software\Aasppapmmxkvs
A1_73 = "4b79fed6"

HKEY_CURRENT_USER\Software\Aasppapmmxkvs
A2_73 = "131885"

HKEY_CURRENT_USER\Software\Aasppapmmxkvs
A3_73 = "1132fca"

HKEY_CURRENT_USER\Software\Aasppapmmxkvs
A4_73 = "1319689"

HKEY_CURRENT_USER\Software\Aasppapmmxkvs
A1_74 = "9f553a9"

HKEY_CURRENT_USER\Software\Aasppapmmxkvs
A2_74 = "799ee545"

HKEY_CURRENT_USER\Software\Aasppapmmxkvs
A3_74 = "789d9e3"

HKEY_CURRENT_USER\Software\Aasppapmmxkvs
A4_74 = "799efaca"

HKEY_CURRENT_USER\Software\Aasppapmmxkvs
A1_75 = "d883d944"

HKEY_CURRENT_USER\Software\Aasppapmmxkvs
A2_75 = "e3c478c"

HKEY_CURRENT_USER\Software\Aasppapmmxkvs
A3_75 = "e2f3522"

HKEY_CURRENT_USER\Software\Aasppapmmxkvs
A4_75 = "e3c5fb"

HKEY_CURRENT_USER\Software\Aasppapmmxkvs
A1_76 = "6a1a137"

HKEY_CURRENT_USER\Software\Aasppapmmxkvs
A2_76 = "4c79d95b"

HKEY_CURRENT_USER\Software\Aasppapmmxkvs
A3_76 = "4d7aa965"

HKEY_CURRENT_USER\Software\Aasppapmmxkvs
A4_76 = "4c79c34c"

HKEY_CURRENT_USER\Software\Aasppapmmxkvs
A1_77 = "dc7868c7"

HKEY_CURRENT_USER\Software\Aasppapmmxkvs
A2_77 = "b5e73ddf"

HKEY_CURRENT_USER\Software\Aasppapmmxkvs
A3_77 = "b4e44da4"

HKEY_CURRENT_USER\Software\Aasppapmmxkvs
A4_77 = "b5e7278d"

HKEY_CURRENT_USER\Software\Aasppapmmxkvs
A1_78 = "313ced"

HKEY_CURRENT_USER\Software\Aasppapmmxkvs
A2_78 = "1f549619"

HKEY_CURRENT_USER\Software\Aasppapmmxkvs
A3_78 = "1e57e1e7"

HKEY_CURRENT_USER\Software\Aasppapmmxkvs
A4_78 = "1f548bce"

HKEY_CURRENT_USER\Software\Aasppapmmxkvs
A1_79 = "d96a885"

HKEY_CURRENT_USER\Software\Aasppapmmxkvs
A2_79 = "88c1ee5"

HKEY_CURRENT_USER\Software\Aasppapmmxkvs
A3_79 = "89c29a26"

HKEY_CURRENT_USER\Software\Aasppapmmxkvs
A4_79 = "88c1ff"

HKEY_CURRENT_USER\Software\Aasppapmmxkvs
A1_80 = "a6efc16b"

HKEY_CURRENT_USER\Software\Aasppapmmxkvs
A2_80 = "f22f47a7"

HKEY_CURRENT_USER\Software\Aasppapmmxkvs
A3_80 = "f32c3e79"

HKEY_CURRENT_USER\Software\Aasppapmmxkvs
A4_80 = "f22f545"

HKEY_CURRENT_USER\Software\Aasppapmmxkvs
A1_81 = "51163c5a"

HKEY_CURRENT_USER\Software\Aasppapmmxkvs
A2_81 = "5b9ca1c8"

HKEY_CURRENT_USER\Software\Aasppapmmxkvs
A3_81 = "5a9fd2b8"

HKEY_CURRENT_USER\Software\Aasppapmmxkvs
A4_81 = "5b9cb891"

HKEY_CURRENT_USER\Software\Aasppapmmxkvs
A1_82 = "f824c82"

HKEY_CURRENT_USER\Software\Aasppapmmxkvs
A2_82 = "c5a59"

HKEY_CURRENT_USER\Software\Aasppapmmxkvs
A3_82 = "c4976fb"

HKEY_CURRENT_USER\Software\Aasppapmmxkvs
A4_82 = "c5a1cd2"

HKEY_CURRENT_USER\Software\Aasppapmmxkvs
A1_83 = "9942217e"

HKEY_CURRENT_USER\Software\Aasppapmmxkvs
A2_83 = "2e77a5df"

HKEY_CURRENT_USER\Software\Aasppapmmxkvs
A3_83 = "2f74eb3a"

HKEY_CURRENT_USER\Software\Aasppapmmxkvs
A4_83 = "2e778113"

HKEY_CURRENT_USER\Software\Aasppapmmxkvs
A1_84 = "35132fea"

HKEY_CURRENT_USER\Software\Aasppapmmxkvs
A2_84 = "97e4f98"

HKEY_CURRENT_USER\Software\Aasppapmmxkvs
A3_84 = "96e78f7d"

HKEY_CURRENT_USER\Software\Aasppapmmxkvs
A4_84 = "97e4e554"

HKEY_CURRENT_USER\Software\Aasppapmmxkvs
A1_85 = "ce33c6e7"

HKEY_CURRENT_USER\Software\Aasppapmmxkvs
A2_85 = "1526ab8"

HKEY_CURRENT_USER\Software\Aasppapmmxkvs
A3_85 = "5123bc"

HKEY_CURRENT_USER\Software\Aasppapmmxkvs
A4_85 = "1524995"

HKEY_CURRENT_USER\Software\Aasppapmmxkvs
A1_86 = "5416d483"

HKEY_CURRENT_USER\Software\Aasppapmmxkvs
A2_86 = "6abfbab9"

HKEY_CURRENT_USER\Software\Aasppapmmxkvs
A3_86 = "6bbcc7ff"

HKEY_CURRENT_USER\Software\Aasppapmmxkvs
A4_86 = "6abfadd6"

HKEY_CURRENT_USER\Software\Aasppapmmxkvs
A1_87 = "31ce212b"

HKEY_CURRENT_USER\Software\Aasppapmmxkvs
A2_87 = "d42d8cd"

HKEY_CURRENT_USER\Software\Aasppapmmxkvs
A3_87 = "d52e783e"

HKEY_CURRENT_USER\Software\Aasppapmmxkvs
A4_87 = "d42d1217"

HKEY_CURRENT_USER\Software\Aasppapmmxkvs
A1_88 = "d728f"

HKEY_CURRENT_USER\Software\Aasppapmmxkvs
A2_88 = "3d9a6d2b"

HKEY_CURRENT_USER\Software\Aasppapmmxkvs
A3_88 = "3c991c71"

HKEY_CURRENT_USER\Software\Aasppapmmxkvs
A4_88 = "3d9a7658"

HKEY_CURRENT_USER\Software\Aasppapmmxkvs
A1_89 = "ca33e8c5"

HKEY_CURRENT_USER\Software\Aasppapmmxkvs
A2_89 = "a77fa6e"

HKEY_CURRENT_USER\Software\Aasppapmmxkvs
A3_89 = "a64bb"

HKEY_CURRENT_USER\Software\Aasppapmmxkvs
A4_89 = "a77da99"

HKEY_CURRENT_USER\Software\Aasppapmmxkvs
A1_90 = "f4797687"

HKEY_CURRENT_USER\Software\Aasppapmmxkvs
A2_90 = "1752327"

HKEY_CURRENT_USER\Software\Aasppapmmxkvs
A3_90 = "117654f3"

HKEY_CURRENT_USER\Software\Aasppapmmxkvs
A4_90 = "1753eda"

HKEY_CURRENT_USER\Software\Aasppapmmxkvs
A1_91 = "34a888cb"

HKEY_CURRENT_USER\Software\Aasppapmmxkvs
A2_91 = "79e2836"

HKEY_CURRENT_USER\Software\Aasppapmmxkvs
A3_91 = "78e1c932"

HKEY_CURRENT_USER\Software\Aasppapmmxkvs
A4_91 = "79e2a31b"

HKEY_CURRENT_USER\Software\Aasppapmmxkvs
A1_92 = "a7dfc23e"

HKEY_CURRENT_USER\Software\Aasppapmmxkvs
A2_92 = "e351d83"

HKEY_CURRENT_USER\Software\Aasppapmmxkvs
A3_92 = "e2536d75"

HKEY_CURRENT_USER\Software\Aasppapmmxkvs
A4_92 = "e3575c"

HKEY_CURRENT_USER\Software\Aasppapmmxkvs
A1_93 = "7f354ea"

HKEY_CURRENT_USER\Software\Aasppapmmxkvs
A2_93 = "4cbd7d3a"

HKEY_CURRENT_USER\Software\Aasppapmmxkvs
A3_93 = "4dbe1b4"

HKEY_CURRENT_USER\Software\Aasppapmmxkvs
A4_93 = "4cbd6b9d"

HKEY_CURRENT_USER\Software\Aasppapmmxkvs
A1_94 = "ce7d9564"

HKEY_CURRENT_USER\Software\Aasppapmmxkvs
A2_94 = "b62ad29"

HKEY_CURRENT_USER\Software\Aasppapmmxkvs
A3_94 = "b729a5f7"

HKEY_CURRENT_USER\Software\Aasppapmmxkvs
A4_94 = "b62acfde"

HKEY_CURRENT_USER\Software\Aasppapmmxkvs
A1_95 = "d2f87fde"

HKEY_CURRENT_USER\Software\Aasppapmmxkvs
A2_95 = "1f982c32"

HKEY_CURRENT_USER\Software\Aasppapmmxkvs
A3_95 = "1e9b5e36"

HKEY_CURRENT_USER\Software\Aasppapmmxkvs
A4_95 = "1f98341f"

HKEY_CURRENT_USER\Software\Aasppapmmxkvs
A1_96 = "da5ee235"

HKEY_CURRENT_USER\Software\Aasppapmmxkvs
A2_96 = "89582df"

HKEY_CURRENT_USER\Software\Aasppapmmxkvs
A3_96 = "886f249"

HKEY_CURRENT_USER\Software\Aasppapmmxkvs
A4_96 = "895986"

HKEY_CURRENT_USER\Software\Aasppapmmxkvs
A1_97 = "4722f2f4"

HKEY_CURRENT_USER\Software\Aasppapmmxkvs
A2_97 = "f272e53b"

HKEY_CURRENT_USER\Software\Aasppapmmxkvs
A3_97 = "f3719688"

HKEY_CURRENT_USER\Software\Aasppapmmxkvs
A4_97 = "f272fca1"

HKEY_CURRENT_USER\Software\Aasppapmmxkvs
A1_98 = "dda2e9bb"

HKEY_CURRENT_USER\Software\Aasppapmmxkvs
A2_98 = "5be77e1"

HKEY_CURRENT_USER\Software\Aasppapmmxkvs
A3_98 = "5ae3acb"

HKEY_CURRENT_USER\Software\Aasppapmmxkvs
A4_98 = "5be6e2"

HKEY_CURRENT_USER\Software\Aasppapmmxkvs
A1_99 = "17a8a27e"

HKEY_CURRENT_USER\Software\Aasppapmmxkvs
A2_99 = "c54dde8"

HKEY_CURRENT_USER\Software\Aasppapmmxkvs
A3_99 = "c44eafa"

HKEY_CURRENT_USER\Software\Aasppapmmxkvs
A4_99 = "c54dc523"

HKEY_CURRENT_USER\Software\Aasppapmmxkvs
A1_100 = "faa6439"

HKEY_CURRENT_USER\Software\Aasppapmmxkvs
A2_100 = "2ebb3e57"

HKEY_CURRENT_USER\Software\Aasppapmmxkvs
A3_100 = "2fb8434d"

HKEY_CURRENT_USER\Software\Aasppapmmxkvs
A4_100 = "2ebb2964"

HKEY_CURRENT_USER\Software\Aasppapmmxkvs
A1_101 = "d24a68e2"

HKEY_CURRENT_USER\Software\Aasppapmmxkvs
A2_101 = "9828983e"

HKEY_CURRENT_USER\Software\Aasppapmmxkvs
A3_101 = "992be78c"

HKEY_CURRENT_USER\Software\Aasppapmmxkvs
A4_101 = "98288da5"

HKEY_CURRENT_USER\Software\Aasppapmmxkvs
A1_102 = "f38892f"

HKEY_CURRENT_USER\Software\Aasppapmmxkvs
A2_102 = "195ef45"

HKEY_CURRENT_USER\Software\Aasppapmmxkvs
A3_102 = "969bcf"

HKEY_CURRENT_USER\Software\Aasppapmmxkvs
A4_102 = "195f1e6"

HKEY_CURRENT_USER\Software\Aasppapmmxkvs
A1_103 = "d6689"

HKEY_CURRENT_USER\Software\Aasppapmmxkvs
A2_103 = "6b3767"

HKEY_CURRENT_USER\Software\Aasppapmmxkvs
A3_103 = "6a3ce"

HKEY_CURRENT_USER\Software\Aasppapmmxkvs
A4_103 = "6b35627"

HKEY_CURRENT_USER\Software\Aasppapmmxkvs
A1_104 = "4f49c43e"

HKEY_CURRENT_USER\Software\Aasppapmmxkvs
A2_104 = "d47a35"

HKEY_CURRENT_USER\Software\Aasppapmmxkvs
A3_104 = "d573d41"

HKEY_CURRENT_USER\Software\Aasppapmmxkvs
A4_104 = "d47ba68"

HKEY_CURRENT_USER\Software\Aasppapmmxkvs
A1_105 = "3bb8b63"

HKEY_CURRENT_USER\Software\Aasppapmmxkvs
A2_105 = "3dde2d8"

HKEY_CURRENT_USER\Software\Aasppapmmxkvs
A3_105 = "3cdd748"

HKEY_CURRENT_USER\Software\Aasppapmmxkvs
A4_105 = "3dde1ea9"

HKEY_CURRENT_USER\Software\Aasppapmmxkvs
A1_106 = "c4ec5bc3"

HKEY_CURRENT_USER\Software\Aasppapmmxkvs
A2_106 = "a74b9c49"

HKEY_CURRENT_USER\Software\Aasppapmmxkvs
A3_106 = "a648e8c3"

HKEY_CURRENT_USER\Software\Aasppapmmxkvs
A4_106 = "a74b82ea"

HKEY_CURRENT_USER\Software\Aasppapmmxkvs
A1_107 = "be8c9d6e"

HKEY_CURRENT_USER\Software\Aasppapmmxkvs
A2_107 = "1b8faac"

HKEY_CURRENT_USER\Software\Aasppapmmxkvs
A3_107 = "11bb8d2"

HKEY_CURRENT_USER\Software\Aasppapmmxkvs
A4_107 = "1b8e72b"

HKEY_CURRENT_USER\Software\Aasppapmmxkvs
A1_108 = "a229292"

HKEY_CURRENT_USER\Software\Aasppapmmxkvs
A2_108 = "7a26546f"

HKEY_CURRENT_USER\Software\Aasppapmmxkvs
A3_108 = "7b252145"

HKEY_CURRENT_USER\Software\Aasppapmmxkvs
A4_108 = "7a264b6c"

HKEY_CURRENT_USER\Software\Aasppapmmxkvs
A1_109 = "ecc9d3b"

HKEY_CURRENT_USER\Software\Aasppapmmxkvs
A2_109 = "e393b216"

HKEY_CURRENT_USER\Software\Aasppapmmxkvs
A3_109 = "e29c584"

HKEY_CURRENT_USER\Software\Aasppapmmxkvs
A4_109 = "e393afad"

HKEY_CURRENT_USER\Software\Aasppapmmxkvs
A1_110 = "225adb5"

HKEY_CURRENT_USER\Software\Aasppapmmxkvs
A2_110 = "4d1c61"

HKEY_CURRENT_USER\Software\Aasppapmmxkvs
A3_110 = "4c279c7"

HKEY_CURRENT_USER\Software\Aasppapmmxkvs
A4_110 = "4d113ee"

HKEY_CURRENT_USER\Software\Aasppapmmxkvs
A1_111 = "f125697a"

HKEY_CURRENT_USER\Software\Aasppapmmxkvs
A2_111 = "b66e672a"

HKEY_CURRENT_USER\Software\Aasppapmmxkvs
A3_111 = "b76d126"

HKEY_CURRENT_USER\Software\Aasppapmmxkvs
A4_111 = "b66e782f"

HKEY_CURRENT_USER\Software\Aasppapmmxkvs
A1_112 = "987e223"

HKEY_CURRENT_USER\Software\Aasppapmmxkvs
A2_112 = "1fdbc71f"

HKEY_CURRENT_USER\Software\Aasppapmmxkvs
A3_112 = "1ed8b659"

HKEY_CURRENT_USER\Software\Aasppapmmxkvs
A4_112 = "1fdbdc7"

HKEY_CURRENT_USER\Software\Microsoft\
Windows\CurrentVersion\Explorer\
Advanced
ShowSuperHidden = "0"

HKEY_CURRENT_USER\Software\Aasppapmmxkvs
A1_113 = "32b5a578"

HKEY_CURRENT_USER\Software\Aasppapmmxkvs
A2_113 = "8949616"

HKEY_CURRENT_USER\Software\Aasppapmmxkvs
A3_113 = "884a2a98"

HKEY_CURRENT_USER\Software\Aasppapmmxkvs
A4_113 = "89494b1"

HKEY_CURRENT_USER\Software\Aasppapmmxkvs
A1_114 = "71dc645"

HKEY_CURRENT_USER\Software\Aasppapmmxkvs
A2_114 = "f2b6baa2"

HKEY_CURRENT_USER\Software\Aasppapmmxkvs
A3_114 = "f3b5cedb"

HKEY_CURRENT_USER\Software\Aasppapmmxkvs
A4_114 = "f2b6a4f2"

HKEY_CURRENT_USER\Software\Aasppapmmxkvs
A1_115 = "35885389"

HKEY_CURRENT_USER\Software\Aasppapmmxkvs
A2_115 = "5c241fcf"

HKEY_CURRENT_USER\Software\Aasppapmmxkvs
A3_115 = "5d27631a"

HKEY_CURRENT_USER\Software\Aasppapmmxkvs
A4_115 = "5c24933"

HKEY_CURRENT_USER\Software\Aasppapmmxkvs
A1_116 = "e2d1bfbd"

HKEY_CURRENT_USER\Software\Aasppapmmxkvs
A2_116 = "c5914ce7"

HKEY_CURRENT_USER\Software\Aasppapmmxkvs
A3_116 = "c49275d"

HKEY_CURRENT_USER\Software\Aasppapmmxkvs
A4_116 = "c5916d74"

HKEY_CURRENT_USER\Software\Aasppapmmxkvs
A1_117 = "32e6b1c3"

HKEY_CURRENT_USER\Software\Aasppapmmxkvs
A2_117 = "2efece4c"

HKEY_CURRENT_USER\Software\Aasppapmmxkvs
A3_117 = "2ffdbb9c"

HKEY_CURRENT_USER\Software\Aasppapmmxkvs
A4_117 = "2efed1b5"

HKEY_CURRENT_USER\Software\Aasppapmmxkvs
A1_118 = "1f6f3e"

HKEY_CURRENT_USER\Software\Aasppapmmxkvs
A2_118 = "986c25b"

HKEY_CURRENT_USER\Software\Aasppapmmxkvs
A3_118 = "996f5fdf"

HKEY_CURRENT_USER\Software\Aasppapmmxkvs
A4_118 = "986c35f6"

HKEY_CURRENT_USER\Software\Aasppapmmxkvs
A1_119 = "421bc6e"

HKEY_CURRENT_USER\Software\Aasppapmmxkvs
A2_119 = "1d98c5"

HKEY_CURRENT_USER\Software\Aasppapmmxkvs
A3_119 = "daf1e"

HKEY_CURRENT_USER\Software\Aasppapmmxkvs
A4_119 = "1d99a37"

HKEY_CURRENT_USER\Software\Aasppapmmxkvs
A1_120 = "66c1562"

HKEY_CURRENT_USER\Software\Aasppapmmxkvs
A2_120 = "6b46e181"

HKEY_CURRENT_USER\Software\Aasppapmmxkvs
A3_120 = "6a459451"

HKEY_CURRENT_USER\Software\Aasppapmmxkvs
A4_120 = "6b46fe78"

HKEY_CURRENT_USER\Software\Aasppapmmxkvs
A1_121 = "3dd7e873"

HKEY_CURRENT_USER\Software\Aasppapmmxkvs
A2_121 = "d4b47a54"

HKEY_CURRENT_USER\Software\Aasppapmmxkvs
A3_121 = "d5b789"

HKEY_CURRENT_USER\Software\Aasppapmmxkvs
A4_121 = "d4b462b9"

HKEY_CURRENT_USER\Software\Aasppapmmxkvs
A1_122 = "5a8ea328"

HKEY_CURRENT_USER\Software\Aasppapmmxkvs
A2_122 = "3e21d8f7"

HKEY_CURRENT_USER\Software\Aasppapmmxkvs
A3_122 = "3f22acd3"

HKEY_CURRENT_USER\Software\Aasppapmmxkvs
A4_122 = "3e21c6fa"

HKEY_CURRENT_USER\Software\Aasppapmmxkvs
A1_123 = "9d421f2"

HKEY_CURRENT_USER\Software\Aasppapmmxkvs
A2_123 = "a78f3db2"

HKEY_CURRENT_USER\Software\Aasppapmmxkvs
A3_123 = "a68c4112"

HKEY_CURRENT_USER\Software\Aasppapmmxkvs
A4_123 = "a78f2b3b"

HKEY_CURRENT_USER\Software\Aasppapmmxkvs
A1_124 = "b8da24"

HKEY_CURRENT_USER\Software\Aasppapmmxkvs
A2_124 = "1fc9a35"

HKEY_CURRENT_USER\Software\Aasppapmmxkvs
A3_124 = "11ffe555"

HKEY_CURRENT_USER\Software\Aasppapmmxkvs
A4_124 = "1fc8f7c"

HKEY_CURRENT_USER\Software\Aasppapmmxkvs
A1_125 = "17cc26"

HKEY_CURRENT_USER\Software\Aasppapmmxkvs
A2_125 = "7a69eed5"

HKEY_CURRENT_USER\Software\Aasppapmmxkvs
A3_125 = "7b6a9994"

HKEY_CURRENT_USER\Software\Aasppapmmxkvs
A4_125 = "7a69f3bd"

HKEY_CURRENT_USER\Software\Aasppapmmxkvs
A1_126 = "d95a25a3"

HKEY_CURRENT_USER\Software\Aasppapmmxkvs
A2_126 = "e3d74de2"

HKEY_CURRENT_USER\Software\Aasppapmmxkvs
A3_126 = "e2d43dd7"

HKEY_CURRENT_USER\Software\Aasppapmmxkvs
A4_126 = "e3d757fe"

HKEY_CURRENT_USER\Software\Aasppapmmxkvs
A1_127 = "1f797e44"

HKEY_CURRENT_USER\Software\Aasppapmmxkvs
A2_127 = "4d44a5e4"

HKEY_CURRENT_USER\Software\Aasppapmmxkvs
A3_127 = "4c47d616"

HKEY_CURRENT_USER\Software\Aasppapmmxkvs
A4_127 = "4d44bc3f"

HKEY_CURRENT_USER\Software\Aasppapmmxkvs
A1_128 = "e4f1253b"

HKEY_CURRENT_USER\Software\Aasppapmmxkvs
A2_128 = "b6b23a3f"

HKEY_CURRENT_USER\Software\Aasppapmmxkvs
A3_128 = "b7b14aa9"

HKEY_CURRENT_USER\Software\Aasppapmmxkvs
A4_128 = "b6b228"

HKEY_CURRENT_USER\Software\Aasppapmmxkvs
A1_129 = "5d83fd96"

HKEY_CURRENT_USER\Software\Aasppapmmxkvs
A2_129 = "21f913e"

HKEY_CURRENT_USER\Software\Aasppapmmxkvs
A3_129 = "211ceee8"

HKEY_CURRENT_USER\Software\Aasppapmmxkvs
A4_129 = "21f84c1"

HKEY_CURRENT_USER\Software\Aasppapmmxkvs
A1_130 = "18f4e146"

HKEY_CURRENT_USER\Software\Aasppapmmxkvs
A2_130 = "898cff41"

HKEY_CURRENT_USER\Software\Aasppapmmxkvs
A3_130 = "888f832b"

HKEY_CURRENT_USER\Software\Aasppapmmxkvs
A4_130 = "898ce92"

HKEY_CURRENT_USER\Software\Aasppapmmxkvs
A1_131 = "44cbf31d"

HKEY_CURRENT_USER\Software\Aasppapmmxkvs
A2_131 = "f2fa6de4"

HKEY_CURRENT_USER\Software\Aasppapmmxkvs
A3_131 = "f3f9276a"

HKEY_CURRENT_USER\Software\Aasppapmmxkvs
A4_131 = "f2fa4d43"

HKEY_CURRENT_USER\Software\Aasppapmmxkvs
A1_132 = "2e663e"

HKEY_CURRENT_USER\Software\Aasppapmmxkvs
A2_132 = "5c67ac2f"

HKEY_CURRENT_USER\Software\Aasppapmmxkvs
A3_132 = "5d64dbad"

HKEY_CURRENT_USER\Software\Aasppapmmxkvs
A4_132 = "5c67b184"

HKEY_CURRENT_USER\Software\Aasppapmmxkvs
A1_133 = "a13a77e"

HKEY_CURRENT_USER\Software\Aasppapmmxkvs
A2_133 = "c5d53b7"

HKEY_CURRENT_USER\Software\Aasppapmmxkvs
A3_133 = "c4d67fec"

HKEY_CURRENT_USER\Software\Aasppapmmxkvs
A4_133 = "c5d515c5"

HKEY_CURRENT_USER\Software\Aasppapmmxkvs
A1_134 = "2a178677"

HKEY_CURRENT_USER\Software\Aasppapmmxkvs
A2_134 = "2f426221"

HKEY_CURRENT_USER\Software\Aasppapmmxkvs
A3_134 = "2e4112f"

HKEY_CURRENT_USER\Software\Aasppapmmxkvs
A4_134 = "2f427a6"

HKEY_CURRENT_USER\Software\Aasppapmmxkvs
A1_135 = "91be99a"

HKEY_CURRENT_USER\Software\Aasppapmmxkvs
A2_135 = "98affb8d"

HKEY_CURRENT_USER\Software\Aasppapmmxkvs
A3_135 = "99acb46e"

HKEY_CURRENT_USER\Software\Aasppapmmxkvs
A4_135 = "98afde47"

HKEY_CURRENT_USER\Software\Aasppapmmxkvs
A1_136 = "b2fbdd"

HKEY_CURRENT_USER\Software\Aasppapmmxkvs
A2_136 = "21d5816"

HKEY_CURRENT_USER\Software\Aasppapmmxkvs
A3_136 = "31e28a1"

HKEY_CURRENT_USER\Software\Aasppapmmxkvs
A4_136 = "21d4288"

HKEY_CURRENT_USER\Software\Aasppapmmxkvs
A1_137 = "161a2775"

HKEY_CURRENT_USER\Software\Aasppapmmxkvs
A2_137 = "6b8aba77"

HKEY_CURRENT_USER\Software\Aasppapmmxkvs
A3_137 = "6a89cce"

HKEY_CURRENT_USER\Software\Aasppapmmxkvs
A4_137 = "6b8aa6c9"

HKEY_CURRENT_USER\Software\Aasppapmmxkvs
A1_138 = "fcef4d4e"

HKEY_CURRENT_USER\Software\Aasppapmmxkvs
A2_138 = "d4f8126"

HKEY_CURRENT_USER\Software\Aasppapmmxkvs
A3_138 = "d5fb6123"

HKEY_CURRENT_USER\Software\Aasppapmmxkvs
A4_138 = "d4f8ba"

HKEY_CURRENT_USER\Software\Aasppapmmxkvs
A1_139 = "11da713"

HKEY_CURRENT_USER\Software\Aasppapmmxkvs
A2_139 = "3e657213"

HKEY_CURRENT_USER\Software\Aasppapmmxkvs
A3_139 = "3f66562"

HKEY_CURRENT_USER\Software\Aasppapmmxkvs
A4_139 = "3e656f4b"

HKEY_CURRENT_USER\Software\Aasppapmmxkvs
A1_140 = "92d3f4d5"

HKEY_CURRENT_USER\Software\Aasppapmmxkvs
A2_140 = "a7d2c4af"

HKEY_CURRENT_USER\Software\Aasppapmmxkvs
A3_140 = "a6d1b9a5"

HKEY_CURRENT_USER\Software\Aasppapmmxkvs
A4_140 = "a7d2d38c"

HKEY_CURRENT_USER\Software\Aasppapmmxkvs
A1_141 = "7273976"

HKEY_CURRENT_USER\Software\Aasppapmmxkvs
A2_141 = "1142166"

HKEY_CURRENT_USER\Software\Aasppapmmxkvs
A3_141 = "1435de4"

HKEY_CURRENT_USER\Software\Aasppapmmxkvs
A4_141 = "11437cd"

HKEY_CURRENT_USER\Software\Aasppapmmxkvs
A1_142 = "ec7b2c5"

HKEY_CURRENT_USER\Software\Aasppapmmxkvs
A2_142 = "7aad8b9"

HKEY_CURRENT_USER\Software\Aasppapmmxkvs
A3_142 = "7baef627"

HKEY_CURRENT_USER\Software\Aasppapmmxkvs
A4_142 = "7aad9ce"

HKEY_CURRENT_USER\Software\Aasppapmmxkvs
A1_143 = "85d988e"

HKEY_CURRENT_USER\Software\Aasppapmmxkvs
A2_143 = "e41b22c6"

HKEY_CURRENT_USER\Software\Aasppapmmxkvs
A3_143 = "e5186a66"

HKEY_CURRENT_USER\Software\Aasppapmmxkvs
A4_143 = "e41b4f"

HKEY_CURRENT_USER\Software\Aasppapmmxkvs
A1_144 = "ff91b459"

HKEY_CURRENT_USER\Software\Aasppapmmxkvs
A2_144 = "4d887823"

HKEY_CURRENT_USER\Software\Aasppapmmxkvs
A3_144 = "4c8beb9"

HKEY_CURRENT_USER\Software\Aasppapmmxkvs
A4_144 = "4d88649"

HKEY_CURRENT_USER\Software\Aasppapmmxkvs
A1_145 = "93716d18"

HKEY_CURRENT_USER\Software\Aasppapmmxkvs
A2_145 = "b6f5d1be"

HKEY_CURRENT_USER\Software\Aasppapmmxkvs
A3_145 = "b7f6a2f8"

HKEY_CURRENT_USER\Software\Aasppapmmxkvs
A4_145 = "b6f5c8d1"

HKEY_CURRENT_USER\Software\Aasppapmmxkvs
A1_146 = "62a2b8d1"

HKEY_CURRENT_USER\Software\Aasppapmmxkvs
A2_146 = "26333c7"

HKEY_CURRENT_USER\Software\Aasppapmmxkvs
A3_146 = "216473b"

HKEY_CURRENT_USER\Software\Aasppapmmxkvs
A4_146 = "2632d12"

HKEY_CURRENT_USER\Software\Aasppapmmxkvs
A1_147 = "deba"

HKEY_CURRENT_USER\Software\Aasppapmmxkvs
A2_147 = "89d8d36"

HKEY_CURRENT_USER\Software\Aasppapmmxkvs
A3_147 = "88d3fb7a"

HKEY_CURRENT_USER\Software\Aasppapmmxkvs
A4_147 = "89d9153"

HKEY_CURRENT_USER\Software\Aasppapmmxkvs
A1_148 = "beb494ed"

HKEY_CURRENT_USER\Software\Aasppapmmxkvs
A2_148 = "f33dd1e1"

HKEY_CURRENT_USER\Software\Aasppapmmxkvs
A3_148 = "f23e9fbd"

HKEY_CURRENT_USER\Software\Aasppapmmxkvs
A4_148 = "f33df594"

HKEY_CURRENT_USER\Software\Aasppapmmxkvs
A1_149 = "f3969bae"

HKEY_CURRENT_USER\Software\Aasppapmmxkvs
A2_149 = "5cab22e"

HKEY_CURRENT_USER\Software\Aasppapmmxkvs
A3_149 = "5da833fc"

HKEY_CURRENT_USER\Software\Aasppapmmxkvs
A4_149 = "5cab59d5"

HKEY_CURRENT_USER\Software\Aasppapmmxkvs
A1_150 = "5e5e9dad"

HKEY_CURRENT_USER\Software\Aasppapmmxkvs
A2_150 = "c618a935"

HKEY_CURRENT_USER\Software\Aasppapmmxkvs
A3_150 = "c71bd43f"

HKEY_CURRENT_USER\Software\Aasppapmmxkvs
A4_150 = "c618be16"

HKEY_CURRENT_USER\Software\Aasppapmmxkvs
A1_151 = "5a5212d"

HKEY_CURRENT_USER\Software\Aasppapmmxkvs
A2_151 = "2f863a3"

HKEY_CURRENT_USER\Software\Aasppapmmxkvs
A3_151 = "2e85487e"

HKEY_CURRENT_USER\Software\Aasppapmmxkvs
A4_151 = "2f862257"

HKEY_CURRENT_USER\Software\Aasppapmmxkvs
A1_152 = "cb89f5c5"

HKEY_CURRENT_USER\Software\Aasppapmmxkvs
A2_152 = "98f39b5"

HKEY_CURRENT_USER\Software\Aasppapmmxkvs
A3_152 = "99fecb1"

HKEY_CURRENT_USER\Software\Aasppapmmxkvs
A4_152 = "98f38698"

HKEY_CURRENT_USER\Software\Aasppapmmxkvs
A1_153 = "eb68c5c6"

HKEY_CURRENT_USER\Software\Aasppapmmxkvs
A2_153 = "26f38a"

HKEY_CURRENT_USER\Software\Aasppapmmxkvs
A3_153 = "3638f"

HKEY_CURRENT_USER\Software\Aasppapmmxkvs
A4_153 = "26ead9"

HKEY_CURRENT_USER\Software\Aasppapmmxkvs
A1_154 = "b53d3a5f"

HKEY_CURRENT_USER\Software\Aasppapmmxkvs
A2_154 = "6bce5c96"

HKEY_CURRENT_USER\Software\Aasppapmmxkvs
A3_154 = "6acd2533"

HKEY_CURRENT_USER\Software\Aasppapmmxkvs
A4_154 = "6bce4f1a"

HKEY_CURRENT_USER\Software\Aasppapmmxkvs
A1_155 = "2222af91"

HKEY_CURRENT_USER\Software\Aasppapmmxkvs
A2_155 = "d53b921c"

HKEY_CURRENT_USER\Software\Aasppapmmxkvs
A3_155 = "d438d972"

HKEY_CURRENT_USER\Software\Aasppapmmxkvs
A4_155 = "d53bb35b"

HKEY_CURRENT_USER\Software\Aasppapmmxkvs
A1_156 = "42d3e62"

HKEY_CURRENT_USER\Software\Aasppapmmxkvs
A2_156 = "3ea9eab"

HKEY_CURRENT_USER\Software\Aasppapmmxkvs
A3_156 = "3faa7db5"

HKEY_CURRENT_USER\Software\Aasppapmmxkvs
A4_156 = "3ea9179c"

HKEY_CURRENT_USER\Software\Aasppapmmxkvs
A1_157 = "e5e32693"

HKEY_CURRENT_USER\Software\Aasppapmmxkvs
A2_157 = "a81658f"

HKEY_CURRENT_USER\Software\Aasppapmmxkvs
A3_157 = "a91511f4"

HKEY_CURRENT_USER\Software\Aasppapmmxkvs
A4_157 = "a8167bdd"

HKEY_CURRENT_USER\Software\Aasppapmmxkvs
A1_158 = "e8cb7d6"

HKEY_CURRENT_USER\Software\Aasppapmmxkvs
A2_158 = "1183f745"

HKEY_CURRENT_USER\Software\Aasppapmmxkvs
A3_158 = "188a37"

HKEY_CURRENT_USER\Software\Aasppapmmxkvs
A4_158 = "1183e1e"

HKEY_CURRENT_USER\Software\Aasppapmmxkvs
A1_159 = "c363362"

HKEY_CURRENT_USER\Software\Aasppapmmxkvs
A2_159 = "7af15229"

HKEY_CURRENT_USER\Software\Aasppapmmxkvs
A3_159 = "7bf22e76"

HKEY_CURRENT_USER\Software\Aasppapmmxkvs
A4_159 = "7af1445f"

HKEY_CURRENT_USER\Software\Aasppapmmxkvs
A1_160 = "8e8cdf7"

HKEY_CURRENT_USER\Software\Aasppapmmxkvs
A2_160 = "e45eb577"

HKEY_CURRENT_USER\Software\Aasppapmmxkvs
A3_160 = "e55dc289"

HKEY_CURRENT_USER\Software\Aasppapmmxkvs
A4_160 = "e45ea8a"

HKEY_CURRENT_USER\Software\Aasppapmmxkvs
A1_161 = "9d3ce9a"

HKEY_CURRENT_USER\Software\Aasppapmmxkvs
A2_161 = "4dcc1bde"

HKEY_CURRENT_USER\Software\Aasppapmmxkvs
A3_161 = "4ccf66c8"

HKEY_CURRENT_USER\Software\Aasppapmmxkvs
A4_161 = "4dccce1"

HKEY_CURRENT_USER\Software\Aasppapmmxkvs
A1_162 = "1cbdd49e"

HKEY_CURRENT_USER\Software\Aasppapmmxkvs
A2_162 = "b7396b9d"

HKEY_CURRENT_USER\Software\Aasppapmmxkvs
A3_162 = "b63a1bb"

HKEY_CURRENT_USER\Software\Aasppapmmxkvs
A4_162 = "b7397122"

HKEY_CURRENT_USER\Software\Aasppapmmxkvs
A1_163 = "feeaa2df"

HKEY_CURRENT_USER\Software\Aasppapmmxkvs
A2_163 = "2a6cde4"

HKEY_CURRENT_USER\Software\Aasppapmmxkvs
A3_163 = "21a5bf4a"

HKEY_CURRENT_USER\Software\Aasppapmmxkvs
A4_163 = "2a6d563"

HKEY_CURRENT_USER\Software\Aasppapmmxkvs
A1_164 = "6fa75fb"

HKEY_CURRENT_USER\Software\Aasppapmmxkvs
A2_164 = "8a1427c9"

HKEY_CURRENT_USER\Software\Aasppapmmxkvs
A3_164 = "8b17538d"

HKEY_CURRENT_USER\Software\Aasppapmmxkvs
A4_164 = "8a1439a4"

HKEY_CURRENT_USER\Software\Aasppapmmxkvs
A1_165 = "d611c8a6"

HKEY_CURRENT_USER\Software\Aasppapmmxkvs
A2_165 = "f3818333"

HKEY_CURRENT_USER\Software\Aasppapmmxkvs
A3_165 = "f282f7cc"

HKEY_CURRENT_USER\Software\Aasppapmmxkvs
A4_165 = "f3819de5"

HKEY_CURRENT_USER\Software\Aasppapmmxkvs
A1_166 = "6287e9a"

HKEY_CURRENT_USER\Software\Aasppapmmxkvs
A2_166 = "5cef1b51"

HKEY_CURRENT_USER\Software\Aasppapmmxkvs
A3_166 = "5dec68f"

HKEY_CURRENT_USER\Software\Aasppapmmxkvs
A4_166 = "5cef226"

HKEY_CURRENT_USER\Software\Aasppapmmxkvs
A1_167 = "6c6187bb"

HKEY_CURRENT_USER\Software\Aasppapmmxkvs
A2_167 = "c65c474e"

HKEY_CURRENT_USER\Software\Aasppapmmxkvs
A3_167 = "c75fc4e"

HKEY_CURRENT_USER\Software\Aasppapmmxkvs
A4_167 = "c65c6667"

HKEY_CURRENT_USER\Software\Aasppapmmxkvs
A1_168 = "dade16c"

HKEY_CURRENT_USER\Software\Aasppapmmxkvs
A2_168 = "2fc9d3f1"

HKEY_CURRENT_USER\Software\Aasppapmmxkvs
A3_168 = "2ecaa81"

HKEY_CURRENT_USER\Software\Aasppapmmxkvs
A4_168 = "2fc9caa8"

HKEY_CURRENT_USER\Software\Aasppapmmxkvs
A1_169 = "29db2"

HKEY_CURRENT_USER\Software\Aasppapmmxkvs
A2_169 = "9937321c"

HKEY_CURRENT_USER\Software\Aasppapmmxkvs
A3_169 = "983444c"

HKEY_CURRENT_USER\Software\Aasppapmmxkvs
A4_169 = "99372ee9"

HKEY_CURRENT_USER\Software\Aasppapmmxkvs
A1_170 = "27411f5a"

HKEY_CURRENT_USER\Software\Aasppapmmxkvs
A2_170 = "2a4889d"

HKEY_CURRENT_USER\Software\Aasppapmmxkvs
A3_170 = "3a7f93"

HKEY_CURRENT_USER\Software\Aasppapmmxkvs
A4_170 = "2a4932a"

HKEY_CURRENT_USER\Software\Aasppapmmxkvs
A1_171 = "e229e825"

HKEY_CURRENT_USER\Software\Aasppapmmxkvs
A2_171 = "6c11edf5"

HKEY_CURRENT_USER\Software\Aasppapmmxkvs
A3_171 = "6d129d42"

HKEY_CURRENT_USER\Software\Aasppapmmxkvs
A4_171 = "6c11f76b"

HKEY_CURRENT_USER\Software\Aasppapmmxkvs
A1_172 = "ad4eff3"

HKEY_CURRENT_USER\Software\Aasppapmmxkvs
A2_172 = "d57f4353"

HKEY_CURRENT_USER\Software\Aasppapmmxkvs
A3_172 = "d47c3185"

HKEY_CURRENT_USER\Software\Aasppapmmxkvs
A4_172 = "d57f5bac"

HKEY_CURRENT_USER\Software\Aasppapmmxkvs
A1_173 = "adc3e8b2"

HKEY_CURRENT_USER\Software\Aasppapmmxkvs
A2_173 = "3eeca64a"

HKEY_CURRENT_USER\Software\Aasppapmmxkvs
A3_173 = "3fefd5c4"

HKEY_CURRENT_USER\Software\Aasppapmmxkvs
A4_173 = "3eecbfed"

HKEY_CURRENT_USER\Software\Aasppapmmxkvs
A1_174 = "b7c779e6"

HKEY_CURRENT_USER\Software\Aasppapmmxkvs
A2_174 = "a85a3a7e"

HKEY_CURRENT_USER\Software\Aasppapmmxkvs
A3_174 = "a9594e7"

HKEY_CURRENT_USER\Software\Aasppapmmxkvs
A4_174 = "a85a242e"

HKEY_CURRENT_USER\Software\Aasppapmmxkvs
A1_175 = "b2f97da6"

HKEY_CURRENT_USER\Software\Aasppapmmxkvs
A2_175 = "11c79df4"

HKEY_CURRENT_USER\Software\Aasppapmmxkvs
A3_175 = "1c4e246"

HKEY_CURRENT_USER\Software\Aasppapmmxkvs
A4_175 = "11c7886f"

HKEY_CURRENT_USER\Software\Aasppapmmxkvs
A1_176 = "79bb598a"

HKEY_CURRENT_USER\Software\Aasppapmmxkvs
A2_176 = "7b34cd51"

HKEY_CURRENT_USER\Software\Aasppapmmxkvs
A3_176 = "7a378699"

HKEY_CURRENT_USER\Software\Aasppapmmxkvs
A4_176 = "7b34ecb"

HKEY_CURRENT_USER\Software\Aasppapmmxkvs
A1_177 = "62ea7c33"

HKEY_CURRENT_USER\Software\Aasppapmmxkvs
A2_177 = "e4a24c8"

HKEY_CURRENT_USER\Software\Aasppapmmxkvs
A3_177 = "e5a13ad8"

HKEY_CURRENT_USER\Software\Aasppapmmxkvs
A4_177 = "e4a25f1"

HKEY_CURRENT_USER\Software\Aasppapmmxkvs
A1_178 = "3bde3df8"

HKEY_CURRENT_USER\Software\Aasppapmmxkvs
A2_178 = "4ef9595"

HKEY_CURRENT_USER\Software\Aasppapmmxkvs
A3_178 = "4fcdf1b"

HKEY_CURRENT_USER\Software\Aasppapmmxkvs
A4_178 = "4efb532"

HKEY_CURRENT_USER\Software\Aasppapmmxkvs
A1_179 = "fbfc8ba"

HKEY_CURRENT_USER\Software\Aasppapmmxkvs
A2_179 = "b77d63a"

HKEY_CURRENT_USER\Software\Aasppapmmxkvs
A3_179 = "b67e735a"

HKEY_CURRENT_USER\Software\Aasppapmmxkvs
A4_179 = "b77d1973"

HKEY_CURRENT_USER\Software\Aasppapmmxkvs
A1_180 = "51daf6e6"

HKEY_CURRENT_USER\Software\Aasppapmmxkvs
A2_180 = "2ea5d29"

HKEY_CURRENT_USER\Software\Aasppapmmxkvs
A3_180 = "21e9179d"

HKEY_CURRENT_USER\Software\Aasppapmmxkvs
A4_180 = "2ea7db4"

HKEY_CURRENT_USER\Software\Aasppapmmxkvs
A1_181 = "3f52f248"

HKEY_CURRENT_USER\Software\Aasppapmmxkvs
A2_181 = "8a57faa"

HKEY_CURRENT_USER\Software\Aasppapmmxkvs
A3_181 = "8b548bdc"

HKEY_CURRENT_USER\Software\Aasppapmmxkvs
A4_181 = "8a57e1f5"

HKEY_CURRENT_USER\Software\Aasppapmmxkvs
A1_182 = "6cb3a984"

HKEY_CURRENT_USER\Software\Aasppapmmxkvs
A2_182 = "f3c56674"

HKEY_CURRENT_USER\Software\Aasppapmmxkvs
A3_182 = "f2c62c1f"

HKEY_CURRENT_USER\Software\Aasppapmmxkvs
A4_182 = "f3c54636"

HKEY_CURRENT_USER\Software\Aasppapmmxkvs
A1_183 = "38de43a3"

HKEY_CURRENT_USER\Software\Aasppapmmxkvs
A2_183 = "5d3289c2"

HKEY_CURRENT_USER\Software\Aasppapmmxkvs
A3_183 = "5c31c5e"

HKEY_CURRENT_USER\Software\Aasppapmmxkvs
A4_183 = "5d32aa77"

HKEY_CURRENT_USER\Software\Aasppapmmxkvs
A1_184 = "113174ed"

HKEY_CURRENT_USER\Software\Aasppapmmxkvs
A2_184 = "c6a1426"

HKEY_CURRENT_USER\Software\Aasppapmmxkvs
A3_184 = "c7a36491"

HKEY_CURRENT_USER\Software\Aasppapmmxkvs
A4_184 = "c6aeb8"

HKEY_CURRENT_USER\Software\Aasppapmmxkvs
A1_185 = "3256c2a7"

HKEY_CURRENT_USER\Software\Aasppapmmxkvs
A2_185 = "3d6732"

HKEY_CURRENT_USER\Software\Aasppapmmxkvs
A3_185 = "31e18d"

HKEY_CURRENT_USER\Software\Aasppapmmxkvs
A4_185 = "3d72f9"

HKEY_CURRENT_USER\Software\Aasppapmmxkvs
A1_186 = "a469572"

HKEY_CURRENT_USER\Software\Aasppapmmxkvs
A2_186 = "997af251"

HKEY_CURRENT_USER\Software\Aasppapmmxkvs
A3_186 = "9879bd13"

HKEY_CURRENT_USER\Software\Aasppapmmxkvs
A4_186 = "997ad73a"

HKEY_CURRENT_USER\Software\Aasppapmmxkvs
A1_187 = "db96812e"

HKEY_CURRENT_USER\Software\Aasppapmmxkvs
A2_187 = "2e82c4"

HKEY_CURRENT_USER\Software\Aasppapmmxkvs
A3_187 = "3eb5152"

HKEY_CURRENT_USER\Software\Aasppapmmxkvs
A4_187 = "2e83b7b"

HKEY_CURRENT_USER\Software\Aasppapmmxkvs
A1_188 = "fc36e"

HKEY_CURRENT_USER\Software\Aasppapmmxkvs
A2_188 = "6c55bbab"

HKEY_CURRENT_USER\Software\Aasppapmmxkvs
A3_188 = "6d56f595"

HKEY_CURRENT_USER\Software\Aasppapmmxkvs
A4_188 = "6c559fbc"

HKEY_CURRENT_USER\Software\Aasppapmmxkvs
A1_189 = "6927dab"

HKEY_CURRENT_USER\Software\Aasppapmmxkvs
A2_189 = "d5c31b7a"

HKEY_CURRENT_USER\Software\Aasppapmmxkvs
A3_189 = "d4c69d4"

HKEY_CURRENT_USER\Software\Aasppapmmxkvs
A4_189 = "d5c33fd"

HKEY_CURRENT_USER\Software\Aasppapmmxkvs
A1_190 = "57ae1153"

HKEY_CURRENT_USER\Software\Aasppapmmxkvs
A2_190 = "3f37b9"

HKEY_CURRENT_USER\Software\Aasppapmmxkvs
A3_190 = "3e33217"

HKEY_CURRENT_USER\Software\Aasppapmmxkvs
A4_190 = "3f3683e"

HKEY_CURRENT_USER\Software\Aasppapmmxkvs
A1_191 = "55f98b7"

HKEY_CURRENT_USER\Software\Aasppapmmxkvs
A2_191 = "a89dd696"

HKEY_CURRENT_USER\Software\Aasppapmmxkvs
A3_191 = "a99ea656"

HKEY_CURRENT_USER\Software\Aasppapmmxkvs
A4_191 = "a89dcc7f"

HKEY_CURRENT_USER\Software\Aasppapmmxkvs
A1_192 = "f84282e9"

HKEY_CURRENT_USER\Software\Aasppapmmxkvs
A2_192 = "12b2aa1"

HKEY_CURRENT_USER\Software\Aasppapmmxkvs
A3_192 = "1385ae9"

HKEY_CURRENT_USER\Software\Aasppapmmxkvs
A4_192 = "12b3c"

HKEY_CURRENT_USER\Software\Aasppapmmxkvs
A1_193 = "d635f56"

HKEY_CURRENT_USER\Software\Aasppapmmxkvs
A2_193 = "7b788868"

HKEY_CURRENT_USER\Software\Aasppapmmxkvs
A3_193 = "7a7bff28"

HKEY_CURRENT_USER\Software\Aasppapmmxkvs
A4_193 = "7b78951"

HKEY_CURRENT_USER\Software\Aasppapmmxkvs
A1_194 = "adb75938"

HKEY_CURRENT_USER\Software\Aasppapmmxkvs
A2_194 = "e4e5eae"

HKEY_CURRENT_USER\Software\Aasppapmmxkvs
A3_194 = "e5e6936b"

HKEY_CURRENT_USER\Software\Aasppapmmxkvs
A4_194 = "e4e5f942"

HKEY_CURRENT_USER\Software\Aasppapmmxkvs
A1_195 = "a4eb69dd"

HKEY_CURRENT_USER\Software\Aasppapmmxkvs
A2_195 = "4e534768"

HKEY_CURRENT_USER\Software\Aasppapmmxkvs
A3_195 = "4f537aa"

HKEY_CURRENT_USER\Software\Aasppapmmxkvs
A4_195 = "4e535d83"

HKEY_CURRENT_USER\Software\Aasppapmmxkvs
A1_196 = "4923b17e"

HKEY_CURRENT_USER\Software\Aasppapmmxkvs
A2_196 = "b7ce215"

HKEY_CURRENT_USER\Software\Aasppapmmxkvs
A3_196 = "b6c3abed"

HKEY_CURRENT_USER\Software\Aasppapmmxkvs
A4_196 = "b7cc1c4"

HKEY_CURRENT_USER\Software\Aasppapmmxkvs
A1_197 = "fe96148"

HKEY_CURRENT_USER\Software\Aasppapmmxkvs
A2_197 = "212e386"

HKEY_CURRENT_USER\Software\Aasppapmmxkvs
A3_197 = "22d4c2c"

HKEY_CURRENT_USER\Software\Aasppapmmxkvs
A4_197 = "212e265"

HKEY_CURRENT_USER\Software\Aasppapmmxkvs
A1_198 = "a64a482"

HKEY_CURRENT_USER\Software\Aasppapmmxkvs
A2_198 = "8a9baf8c"

HKEY_CURRENT_USER\Software\Aasppapmmxkvs
A3_198 = "8b98e6f"

HKEY_CURRENT_USER\Software\Aasppapmmxkvs
A4_198 = "8a9b8a46"

HKEY_CURRENT_USER\Software\Aasppapmmxkvs
A1_199 = "56a1c339"

HKEY_CURRENT_USER\Software\Aasppapmmxkvs
A2_199 = "f48f424"

HKEY_CURRENT_USER\Software\Aasppapmmxkvs
A3_199 = "f5b84ae"

HKEY_CURRENT_USER\Software\Aasppapmmxkvs
A4_199 = "f48ee87"

HKEY_CURRENT_USER\Software\Aasppapmmxkvs
A1_200 = "fc97ce9"

HKEY_CURRENT_USER\Software\Aasppapmmxkvs
A2_200 = "5d76473"

HKEY_CURRENT_USER\Software\Aasppapmmxkvs
A3_200 = "5c7538e1"

HKEY_CURRENT_USER\Software\Aasppapmmxkvs
A4_200 = "5d7652c8"

HKEY_CURRENT_USER\Software\Aasppapmmxkvs
A1_201 = "69161578"

HKEY_CURRENT_USER\Software\Aasppapmmxkvs
A2_201 = "c6e3958e"

HKEY_CURRENT_USER\Software\Aasppapmmxkvs
A3_201 = "c7edd2"

HKEY_CURRENT_USER\Software\Aasppapmmxkvs
A4_201 = "c6e3b79"

HKEY_CURRENT_USER\Software\Aasppapmmxkvs
A1_202 = "67e4577"

HKEY_CURRENT_USER\Software\Aasppapmmxkvs
A2_202 = "3513b47"

HKEY_CURRENT_USER\Software\Aasppapmmxkvs
A3_202 = "31527163"

HKEY_CURRENT_USER\Software\Aasppapmmxkvs
A4_202 = "3511b4a"

HKEY_CURRENT_USER\Software\Aasppapmmxkvs
A1_203 = "9fbb16f7"

HKEY_CURRENT_USER\Software\Aasppapmmxkvs
A2_203 = "99be66d2"

HKEY_CURRENT_USER\Software\Aasppapmmxkvs
A3_203 = "98bd15a2"

HKEY_CURRENT_USER\Software\Aasppapmmxkvs
A4_203 = "99be7f8b"

HKEY_CURRENT_USER\Software\Aasppapmmxkvs
A1_204 = "53146597"

HKEY_CURRENT_USER\Software\Aasppapmmxkvs
A2_204 = "32bf8e"

HKEY_CURRENT_USER\Software\Aasppapmmxkvs
A3_204 = "22889e5"

HKEY_CURRENT_USER\Software\Aasppapmmxkvs
A4_204 = "32be3cc"

HKEY_CURRENT_USER\Software\Aasppapmmxkvs
A1_205 = "8eb928d4"

HKEY_CURRENT_USER\Software\Aasppapmmxkvs
A2_205 = "6c99544a"

HKEY_CURRENT_USER\Software\Aasppapmmxkvs
A3_205 = "6d9a2224"

HKEY_CURRENT_USER\Software\Aasppapmmxkvs
A4_205 = "6c9948d"

HKEY_CURRENT_USER\Software\Aasppapmmxkvs
A1_206 = "56371f4"

HKEY_CURRENT_USER\Software\Aasppapmmxkvs
A2_206 = "d66b2ed"

HKEY_CURRENT_USER\Software\Aasppapmmxkvs
A3_206 = "d75c667"

HKEY_CURRENT_USER\Software\Aasppapmmxkvs
A4_206 = "d66ac4e"

HKEY_CURRENT_USER\Software\Aasppapmmxkvs
A1_207 = "55362434"

HKEY_CURRENT_USER\Software\Aasppapmmxkvs
A2_207 = "3f74af8"

HKEY_CURRENT_USER\Software\Aasppapmmxkvs
A3_207 = "3e777aa6"

HKEY_CURRENT_USER\Software\Aasppapmmxkvs
A4_207 = "3f7418f"

HKEY_CURRENT_USER\Software\Aasppapmmxkvs
A1_208 = "fcc82ed"

HKEY_CURRENT_USER\Software\Aasppapmmxkvs
A2_208 = "a8e16bf6"

HKEY_CURRENT_USER\Software\Aasppapmmxkvs
A3_208 = "a9e21ef9"

HKEY_CURRENT_USER\Software\Aasppapmmxkvs
A4_208 = "a8e174d"

HKEY_CURRENT_USER\Software\Aasppapmmxkvs
A1_209 = "699fa1c5"

HKEY_CURRENT_USER\Software\Aasppapmmxkvs
A2_209 = "124ec426"

HKEY_CURRENT_USER\Software\Aasppapmmxkvs
A3_209 = "134db338"

HKEY_CURRENT_USER\Software\Aasppapmmxkvs
A4_209 = "124ed911"

HKEY_CURRENT_USER\Software\Aasppapmmxkvs
A1_210 = "a5797f26"

HKEY_CURRENT_USER\Software\Aasppapmmxkvs
A2_210 = "7bbc1e2d"

HKEY_CURRENT_USER\Software\Aasppapmmxkvs
A3_210 = "7abf577b"

HKEY_CURRENT_USER\Software\Aasppapmmxkvs
A4_210 = "7bbc3d52"

HKEY_CURRENT_USER\Software\Aasppapmmxkvs
A1_211 = "f68bf829"

HKEY_CURRENT_USER\Software\Aasppapmmxkvs
A2_211 = "e529b6c7"

HKEY_CURRENT_USER\Software\Aasppapmmxkvs
A3_211 = "e42acbba"

HKEY_CURRENT_USER\Software\Aasppapmmxkvs
A4_211 = "e529a193"

HKEY_CURRENT_USER\Software\Aasppapmmxkvs
A1_212 = "525a6c82"

HKEY_CURRENT_USER\Software\Aasppapmmxkvs
A2_212 = "4e9721a1"

HKEY_CURRENT_USER\Software\Aasppapmmxkvs
A3_212 = "4f946ffd"

HKEY_CURRENT_USER\Software\Aasppapmmxkvs
A4_212 = "4e975d4"

HKEY_CURRENT_USER\Software\Aasppapmmxkvs
A1_213 = "b2f21f5a"

HKEY_CURRENT_USER\Software\Aasppapmmxkvs
A2_213 = "b844854"

HKEY_CURRENT_USER\Software\Aasppapmmxkvs
A3_213 = "b973c"

HKEY_CURRENT_USER\Software\Aasppapmmxkvs
A4_213 = "b846a15"

HKEY_CURRENT_USER\Software\Aasppapmmxkvs
A1_214 = "c4f9"

HKEY_CURRENT_USER\Software\Aasppapmmxkvs
A2_214 = "2171d6de"

HKEY_CURRENT_USER\Software\Aasppapmmxkvs
A3_214 = "272a47f"

HKEY_CURRENT_USER\Software\Aasppapmmxkvs
A4_214 = "2171ce56"

HKEY_CURRENT_USER\Software\Aasppapmmxkvs
A1_215 = "38a8d943"

HKEY_CURRENT_USER\Software\Aasppapmmxkvs
A2_215 = "8adf24a4"

HKEY_CURRENT_USER\Software\Aasppapmmxkvs
A3_215 = "8bdc58be"

HKEY_CURRENT_USER\Software\Aasppapmmxkvs
A4_215 = "8adf3297"

HKEY_CURRENT_USER\Software\Aasppapmmxkvs
A1_216 = "6c5f796"

HKEY_CURRENT_USER\Software\Aasppapmmxkvs
A2_216 = "f44c8343"

HKEY_CURRENT_USER\Software\Aasppapmmxkvs
A3_216 = "f54ffcf1"

HKEY_CURRENT_USER\Software\Aasppapmmxkvs
A4_216 = "f44c96d8"

HKEY_CURRENT_USER\Software\Aasppapmmxkvs
A1_217 = "8ae776a"

HKEY_CURRENT_USER\Software\Aasppapmmxkvs
A2_217 = "5db9d834"

HKEY_CURRENT_USER\Software\Aasppapmmxkvs
A3_217 = "5cba913"

HKEY_CURRENT_USER\Software\Aasppapmmxkvs
A4_217 = "5db9fb19"

HKEY_CURRENT_USER\Software\Aasppapmmxkvs
A1_218 = "3d3be1d"

HKEY_CURRENT_USER\Software\Aasppapmmxkvs
A2_218 = "c727454d"

HKEY_CURRENT_USER\Software\Aasppapmmxkvs
A3_218 = "c6243573"

HKEY_CURRENT_USER\Software\Aasppapmmxkvs
A4_218 = "c7275f5a"

HKEY_CURRENT_USER\Software\Aasppapmmxkvs
A1_219 = "2ccb3a"

HKEY_CURRENT_USER\Software\Aasppapmmxkvs
A2_219 = "394dfb4"

HKEY_CURRENT_USER\Software\Aasppapmmxkvs
A3_219 = "3197a9b2"

HKEY_CURRENT_USER\Software\Aasppapmmxkvs
A4_219 = "394c39b"

HKEY_CURRENT_USER\Software\Aasppapmmxkvs
A1_220 = "9544c28f"

HKEY_CURRENT_USER\Software\Aasppapmmxkvs
A2_220 = "9a264f"

HKEY_CURRENT_USER\Software\Aasppapmmxkvs
A3_220 = "9b14df5"

HKEY_CURRENT_USER\Software\Aasppapmmxkvs
A4_220 = "9a227dc"

HKEY_CURRENT_USER\Software\Aasppapmmxkvs
A1_221 = "54bb8576"

HKEY_CURRENT_USER\Software\Aasppapmmxkvs
A2_221 = "36fad5b"

HKEY_CURRENT_USER\Software\Aasppapmmxkvs
A3_221 = "26ce634"

HKEY_CURRENT_USER\Software\Aasppapmmxkvs
A4_221 = "36f8c1d"

HKEY_CURRENT_USER\Software\Aasppapmmxkvs
A1_222 = "cedc17"

HKEY_CURRENT_USER\Software\Aasppapmmxkvs
A2_222 = "6cdcec7a"

HKEY_CURRENT_USER\Software\Aasppapmmxkvs
A3_222 = "6ddf9a77"

HKEY_CURRENT_USER\Software\Aasppapmmxkvs
A4_222 = "6cdcf5e"

HKEY_CURRENT_USER\Software\Aasppapmmxkvs
A1_223 = "888eec"

HKEY_CURRENT_USER\Software\Aasppapmmxkvs
A2_223 = "d64a4e24"

HKEY_CURRENT_USER\Software\Aasppapmmxkvs
A3_223 = "d7493eb6"

HKEY_CURRENT_USER\Software\Aasppapmmxkvs
A4_223 = "d64a549f"

HKEY_CURRENT_USER\Software\Aasppapmmxkvs
A1_224 = "db8d8158"

HKEY_CURRENT_USER\Software\Aasppapmmxkvs
A2_224 = "3fb7a7bc"

HKEY_CURRENT_USER\Software\Aasppapmmxkvs
A3_224 = "3eb4d2c9"

HKEY_CURRENT_USER\Software\Aasppapmmxkvs
A4_224 = "3fb7b8e"

HKEY_CURRENT_USER\Software\Aasppapmmxkvs
A1_225 = "4e46fb43"

HKEY_CURRENT_USER\Software\Aasppapmmxkvs
A2_225 = "a925625"

HKEY_CURRENT_USER\Software\Aasppapmmxkvs
A3_225 = "a826778"

HKEY_CURRENT_USER\Software\Aasppapmmxkvs
A4_225 = "a9251d21"

HKEY_CURRENT_USER\Software\Aasppapmmxkvs
A1_226 = "b233d22c"

HKEY_CURRENT_USER\Software\Aasppapmmxkvs
A2_226 = "12929bf8"

HKEY_CURRENT_USER\Software\Aasppapmmxkvs
A3_226 = "1391eb4b"

HKEY_CURRENT_USER\Software\Aasppapmmxkvs
A4_226 = "12928162"

HKEY_CURRENT_USER\Software\Aasppapmmxkvs
A1_227 = "a4c619f7"

HKEY_CURRENT_USER\Software\Aasppapmmxkvs
A2_227 = "7bfffb75"

HKEY_CURRENT_USER\Software\Aasppapmmxkvs
A3_227 = "7afc8f8a"

HKEY_CURRENT_USER\Software\Aasppapmmxkvs
A4_227 = "7bffe5a3"

HKEY_CURRENT_USER\Software\Aasppapmmxkvs
A1_228 = "f25d62c"

HKEY_CURRENT_USER\Software\Aasppapmmxkvs
A2_228 = "e56d5129"

HKEY_CURRENT_USER\Software\Aasppapmmxkvs
A3_228 = "e46e23cd"

HKEY_CURRENT_USER\Software\Aasppapmmxkvs
A4_228 = "e56d49e4"

HKEY_CURRENT_USER\Software\Aasppapmmxkvs
A1_229 = "dd3a7af7"

HKEY_CURRENT_USER\Software\Aasppapmmxkvs
A2_229 = "4eda8ca2"

HKEY_CURRENT_USER\Software\Aasppapmmxkvs
A3_229 = "4fd9c4c"

HKEY_CURRENT_USER\Software\Aasppapmmxkvs
A4_229 = "4edaae25"

HKEY_CURRENT_USER\Software\Aasppapmmxkvs
A1_230 = "8fddba1f"

HKEY_CURRENT_USER\Software\Aasppapmmxkvs
A2_230 = "b848da6"

HKEY_CURRENT_USER\Software\Aasppapmmxkvs
A3_230 = "b94b784f"

HKEY_CURRENT_USER\Software\Aasppapmmxkvs
A4_230 = "b8481266"

HKEY_CURRENT_USER\Software\Aasppapmmxkvs
A1_231 = "1dffbc63"

HKEY_CURRENT_USER\Software\Aasppapmmxkvs
A2_231 = "21b569c8"

HKEY_CURRENT_USER\Software\Aasppapmmxkvs
A3_231 = "2b61c8e"

HKEY_CURRENT_USER\Software\Aasppapmmxkvs
A4_231 = "21b576a7"

HKEY_CURRENT_USER\Software\Aasppapmmxkvs
A1_232 = "4739953"

HKEY_CURRENT_USER\Software\Aasppapmmxkvs
A2_232 = "8b22cc51"

HKEY_CURRENT_USER\Software\Aasppapmmxkvs
A3_232 = "8a21bc1"

HKEY_CURRENT_USER\Software\Aasppapmmxkvs
A4_232 = "8b22dae8"

HKEY_CURRENT_USER\Software\Aasppapmmxkvs
A1_233 = "666219e"

HKEY_CURRENT_USER\Software\Aasppapmmxkvs
A2_233 = "f491c4"

HKEY_CURRENT_USER\Software\Aasppapmmxkvs
A3_233 = "f59355"

HKEY_CURRENT_USER\Software\Aasppapmmxkvs
A4_233 = "f493f29"

HKEY_CURRENT_USER\Software\Aasppapmmxkvs
A1_234 = "291e3629"

HKEY_CURRENT_USER\Software\Aasppapmmxkvs
A2_234 = "5dfdbe25"

HKEY_CURRENT_USER\Software\Aasppapmmxkvs
A3_234 = "5cfec943"

HKEY_CURRENT_USER\Software\Aasppapmmxkvs
A4_234 = "5dfda36a"

HKEY_CURRENT_USER\Software\Aasppapmmxkvs
A1_235 = "f1e2151"

HKEY_CURRENT_USER\Software\Aasppapmmxkvs
A2_235 = "c76b1d9e"

HKEY_CURRENT_USER\Software\Aasppapmmxkvs
A3_235 = "c6686d82"

HKEY_CURRENT_USER\Software\Aasppapmmxkvs
A4_235 = "c76b7ab"

HKEY_CURRENT_USER\Software\Aasppapmmxkvs
A1_236 = "24951da3"

HKEY_CURRENT_USER\Software\Aasppapmmxkvs
A2_236 = "3d87685"

HKEY_CURRENT_USER\Software\Aasppapmmxkvs
A3_236 = "31db1c5"

HKEY_CURRENT_USER\Software\Aasppapmmxkvs
A4_236 = "3d86bec"

HKEY_CURRENT_USER\Software\Aasppapmmxkvs
A1_237 = "e67df974"

HKEY_CURRENT_USER\Software\Aasppapmmxkvs
A2_237 = "9a45cb42"

HKEY_CURRENT_USER\Software\Aasppapmmxkvs
A3_237 = "9b46ba4"

HKEY_CURRENT_USER\Software\Aasppapmmxkvs
A4_237 = "9a45d2d"

HKEY_CURRENT_USER\Software\Aasppapmmxkvs
A1_238 = "8b71337"

HKEY_CURRENT_USER\Software\Aasppapmmxkvs
A2_238 = "3b31732"

HKEY_CURRENT_USER\Software\Aasppapmmxkvs
A3_238 = "2b5e47"

HKEY_CURRENT_USER\Software\Aasppapmmxkvs
A4_238 = "3b3346e"

HKEY_CURRENT_USER\Software\Aasppapmmxkvs
A1_239 = "6fd575fb"

HKEY_CURRENT_USER\Software\Aasppapmmxkvs
A2_239 = "6d28683"

HKEY_CURRENT_USER\Software\Aasppapmmxkvs
A3_239 = "6c23f286"

HKEY_CURRENT_USER\Software\Aasppapmmxkvs
A4_239 = "6d298af"

HKEY_CURRENT_USER\Software\Aasppapmmxkvs
A1_240 = "fea2338"

HKEY_CURRENT_USER\Software\Aasppapmmxkvs
A2_240 = "d68de477"

HKEY_CURRENT_USER\Software\Aasppapmmxkvs
A3_240 = "d78e96d9"

HKEY_CURRENT_USER\Software\Aasppapmmxkvs
A4_240 = "d68dfcf"

HKEY_CURRENT_USER\Software\Aasppapmmxkvs
A1_241 = "563b57e"

HKEY_CURRENT_USER\Software\Aasppapmmxkvs
A2_241 = "3ffb7c6"

HKEY_CURRENT_USER\Software\Aasppapmmxkvs
A3_241 = "3ef8b18"

HKEY_CURRENT_USER\Software\Aasppapmmxkvs
A4_241 = "3ffb6131"

HKEY_CURRENT_USER\Software\Aasppapmmxkvs
A1_242 = "4c77972d"

HKEY_CURRENT_USER\Software\Aasppapmmxkvs
A2_242 = "a968dc1"

ワームは、以下のレジストリ値を変更します。

HKEY_CURRENT_USER\Software\Microsoft\
Windows\CurrentVersion\Explorer\
Advanced
Hidden = "2"

(註：変更前の上記レジストリ値は、「2」となります。)

HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\
Security Center
AntiVirusOverride = "1"

HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\
Security Center
AntiVirusDisableNotify = "1"

HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\
Security Center
FirewallDisableNotify = "1"

HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\
Security Center
FirewallOverride = "1"

HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\
Security Center
UpdatesDisableNotify = "1"

ワームは、以下のレジストリ値を追加し、タスクマネージャやレジストリエディタ、フォルダオプションを無効にします。

HKEY_CURRENT_USER\Software\Microsoft\
Windows\CurrentVersion\Policies\
system
DisableTaskMgr = "1"

HKEY_CURRENT_USER\Software\Microsoft\
Windows\CurrentVersion\Policies\
system
DisableRegistryTools = "1"

ワームは、以下のレジストリキーを削除します。

HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\
Control\SafeBoot\Minimal\
AppMgmt

HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\
Control\SafeBoot\Minimal\
Base

HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\
Control\SafeBoot\Minimal\
Boot Bus Extender

HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\
Control\SafeBoot\Minimal\
Boot file system

HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\
Control\SafeBoot\Minimal\
CryptSvc

HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\
Control\SafeBoot\Minimal\
DcomLaunch

HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\
Control\SafeBoot\Minimal\
dmadmin

HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\
Control\SafeBoot\Minimal\
dmboot.sys

HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\
Control\SafeBoot\Minimal\
dmio.sys

HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\
Control\SafeBoot\Minimal\
dmload.sys

HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\
Control\SafeBoot\Minimal\
dmserver

HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\
Control\SafeBoot\Minimal\
EventLog

HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\
Control\SafeBoot\Minimal\
File system

HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\
Control\SafeBoot\Minimal\
Filter

HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\
Control\SafeBoot\Minimal\
HelpSvc

HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\
Control\SafeBoot\Minimal\
Netlogon

HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\
Control\SafeBoot\Minimal\
PCI Configuration

HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\
Control\SafeBoot\Minimal\
PlugPlay

HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\
Control\SafeBoot\Minimal\
PNP Filter

HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\
Control\SafeBoot\Minimal\
Primary disk

HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\
Control\SafeBoot\Minimal\
RpcSs

HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\
Control\SafeBoot\Minimal\
SCSI Class

HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\
Control\SafeBoot\Minimal\
sermouse.sys

HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\
Control\SafeBoot\Minimal\
sr.sys

HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\
Control\SafeBoot\Minimal\
SRService

HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\
Control\SafeBoot\Minimal\
System Bus Extender

HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\
Control\SafeBoot\Minimal\
vga.sys

HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\
Control\SafeBoot\Minimal\
vgasave.sys

HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\
Control\SafeBoot\Minimal\
WinMgmt

HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\
Control\SafeBoot\Minimal\
{36FC9E60-C465-11CF-8056-444553540000}

HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\
Control\SafeBoot\Minimal\
{4D36E965-E325-11CE-BFC1-08002BE10318}

HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\
Control\SafeBoot\Minimal\
{4D36E967-E325-11CE-BFC1-08002BE10318}

HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\
Control\SafeBoot\Minimal\
{4D36E969-E325-11CE-BFC1-08002BE10318}

HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\
Control\SafeBoot\Minimal\
{4D36E96A-E325-11CE-BFC1-08002BE10318}

HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\
Control\SafeBoot\Minimal\
{4D36E96B-E325-11CE-BFC1-08002BE10318}

HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\
Control\SafeBoot\Minimal\
{4D36E96F-E325-11CE-BFC1-08002BE10318}

HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\
Control\SafeBoot\Minimal\
{4D36E977-E325-11CE-BFC1-08002BE10318}

HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\
Control\SafeBoot\Minimal\
{4D36E97B-E325-11CE-BFC1-08002BE10318}

HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\
Control\SafeBoot\Minimal\
{4D36E97D-E325-11CE-BFC1-08002BE10318}

HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\
Control\SafeBoot\Minimal\
{4D36E980-E325-11CE-BFC1-08002BE10318}

HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\
Control\SafeBoot\Minimal\
{71A27CDD-812A-11D0-BEC7-08002BE2092F}

HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\
Control\SafeBoot\Minimal\
{745A17A0-74D3-11D0-B6FE-00A0C90F57DA}

HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\
Control\SafeBoot\Minimal

HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\
Control\SafeBoot\Network\
AFD

HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\
Control\SafeBoot\Network\
AppMgmt

HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\
Control\SafeBoot\Network\
Base

HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\
Control\SafeBoot\Network\
Boot Bus Extender

HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\
Control\SafeBoot\Network\
Boot file system

HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\
Control\SafeBoot\Network\
Browser

HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\
Control\SafeBoot\Network\
CryptSvc

HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\
Control\SafeBoot\Network\
DcomLaunch

HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\
Control\SafeBoot\Network\
Dhcp

HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\
Control\SafeBoot\Network\
dmadmin

HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\
Control\SafeBoot\Network\
dmboot.sys

HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\
Control\SafeBoot\Network\
dmio.sys

HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\
Control\SafeBoot\Network\
dmload.sys

HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\
Control\SafeBoot\Network\
dmserver

HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\
Control\SafeBoot\Network\
DnsCache

HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\
Control\SafeBoot\Network\
EventLog

HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\
Control\SafeBoot\Network\
File system

HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\
Control\SafeBoot\Network\
Filter

HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\
Control\SafeBoot\Network\
HelpSvc

HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\
Control\SafeBoot\Network\
ip6fw.sys

HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\
Control\SafeBoot\Network\
ipnat.sys

HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\
Control\SafeBoot\Network\
LanmanServer

HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\
Control\SafeBoot\Network\
LanmanWorkstation

HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\
Control\SafeBoot\Network\
LmHosts

HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\
Control\SafeBoot\Network\
Messenger

HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\
Control\SafeBoot\Network\
NDIS

HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\
Control\SafeBoot\Network\
NDIS Wrapper

HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\
Control\SafeBoot\Network\
Ndisuio

HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\
Control\SafeBoot\Network\
NetBIOS

HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\
Control\SafeBoot\Network\
NetBIOSGroup

HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\
Control\SafeBoot\Network\
NetBT

HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\
Control\SafeBoot\Network\
NetDDEGroup

HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\
Control\SafeBoot\Network\
Netlogon

HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\
Control\SafeBoot\Network\
NetMan

HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\
Control\SafeBoot\Network\
Network

HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\
Control\SafeBoot\Network\
NetworkProvider

HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\
Control\SafeBoot\Network\
NtLmSsp

HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\
Control\SafeBoot\Network\
PCI Configuration

HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\
Control\SafeBoot\Network\
PlugPlay

HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\
Control\SafeBoot\Network\
PNP Filter

HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\
Control\SafeBoot\Network\
PNP_TDI

HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\
Control\SafeBoot\Network\
Primary disk

HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\
Control\SafeBoot\Network\
rdpcdd.sys

HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\
Control\SafeBoot\Network\
rdpdd.sys

HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\
Control\SafeBoot\Network\
rdpwd.sys

HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\
Control\SafeBoot\Network\
rdsessmgr

HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\
Control\SafeBoot\Network\
RpcSs

HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\
Control\SafeBoot\Network\
SCSI Class

HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\
Control\SafeBoot\Network\
sermouse.sys

HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\
Control\SafeBoot\Network\
SharedAccess

HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\
Control\SafeBoot\Network\
sr.sys

HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\
Control\SafeBoot\Network\
SRService

HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\
Control\SafeBoot\Network\
Streams Drivers

HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\
Control\SafeBoot\Network\
System Bus Extender

HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\
Control\SafeBoot\Network\
Tcpip

HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\
Control\SafeBoot\Network\
TDI

HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\
Control\SafeBoot\Network\
tdpipe.sys

HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\
Control\SafeBoot\Network\
tdtcp.sys

HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\
Control\SafeBoot\Network\
termservice

HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\
Control\SafeBoot\Network\
vga.sys

HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\
Control\SafeBoot\Network\
vgasave.sys

HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\
Control\SafeBoot\Network\
WinMgmt

HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\
Control\SafeBoot\Network\
WZCSVC

HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\
Control\SafeBoot\Network\
{36FC9E60-C465-11CF-8056-444553540000}

HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\
Control\SafeBoot\Network\
{4D36E965-E325-11CE-BFC1-08002BE10318}

HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\
Control\SafeBoot\Network\
{4D36E967-E325-11CE-BFC1-08002BE10318}

HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\
Control\SafeBoot\Network\
{4D36E969-E325-11CE-BFC1-08002BE10318}

HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\
Control\SafeBoot\Network\
{4D36E96A-E325-11CE-BFC1-08002BE10318}

HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\
Control\SafeBoot\Network\
{4D36E96B-E325-11CE-BFC1-08002BE10318}

HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\
Control\SafeBoot\Network\
{4D36E96F-E325-11CE-BFC1-08002BE10318}

HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\
Control\SafeBoot\Network\
{4D36E972-E325-11CE-BFC1-08002BE10318}

HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\
Control\SafeBoot\Network\
{4D36E973-E325-11CE-BFC1-08002BE10318}

HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\
Control\SafeBoot\Network\
{4D36E974-E325-11CE-BFC1-08002BE10318}

HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\
Control\SafeBoot\Network\
{4D36E975-E325-11CE-BFC1-08002BE10318}

HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\
Control\SafeBoot\Network\
{4D36E977-E325-11CE-BFC1-08002BE10318}

HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\
Control\SafeBoot\Network\
{4D36E97B-E325-11CE-BFC1-08002BE10318}

HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\
Control\SafeBoot\Network\
{4D36E97D-E325-11CE-BFC1-08002BE10318}

HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\
Control\SafeBoot\Network\
{4D36E980-E325-11CE-BFC1-08002BE10318}

HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\
Control\SafeBoot\Network\
{71A27CDD-812A-11D0-BEC7-08002BE2092F}

HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\
Control\SafeBoot\Network\
{745A17A0-74D3-11D0-B6FE-00A0C90F57DA}

HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\
Control\SafeBoot\Network

作成活動

ワームは、以下のファイルを作成します。

• %User Temp%\krbff.exe
• %System%\drivers\inegn.sys

(註：%User Temp%フォルダはWindowsの種類とインストール時の設定などにより異なります。標準設定では、Windows 2000、XP および Server 2003 の場合、"C:\Documents and Settings\＜ユーザー名＞\Local Settings\Temp"、Windows Vista および 7 の場合、"C:\Users\＜ユーザ名＞\AppData\Local\Temp" です。. %System%フォルダはWindowsの種類とインストール時の設定などにより異なります。標準設定では "C:\Windows\System32" です。)

その他

ワームは、以下の不正なWebサイトにアクセスします。

• http://acemoglusucuklari.{BLOCKED}m.tr/images/logo.gif?7fbf=98109

このウイルス情報は、自動解析システムにより作成されました。