WORM_VB.CKH

ワームは、他のマルウェアに作成されるか、悪意あるWebサイトからユーザが誤ってダウンロードすることによりコンピュータに侵入します。

ワームは、タスクマネージャやレジストリエディタ、フォルダオプションを無効にします。

侵入方法

ワームは、他のマルウェアに作成されるか、悪意あるWebサイトからユーザが誤ってダウンロードすることによりコンピュータに侵入します。

自動実行方法

ワームは、自身のコピーがWindows起動時に自動実行されるよう以下のレジストリ値を追加します。

HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\
Windows\CurrentVersion\Run
ASocksrv = "SocksA.exe"

他のシステム変更

ワームは、以下のファイルを削除します。

• %User Temp%\duth.exe

(註：%User Temp%フォルダはWindowsの種類とインストール時の設定などにより異なります。標準設定では、Windows 2000、XP および Server 2003 の場合、"C:\Documents and Settings\＜ユーザー名＞\Local Settings\Temp"、Windows Vista および 7 の場合、"C:\Users\＜ユーザ名＞\AppData\Local\Temp" です。)

ワームは、以下のレジストリキーを追加します。

HKEY_CURRENT_USER\Software\Microsoft\
Windows\CurrentVersion\policies\
system

HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\
Security Center\Svc

HKEY_CURRENT_USER\Software\Afqteuv\
1926745233

ワームは、以下のレジストリ値を追加します。

HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\
Security Center
UacDisableNotify = "1"

HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\
Security Center\Svc
AntiVirusOverride = "1"

HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\
Security Center\Svc
AntiVirusDisableNotify = "1"

HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\
Security Center\Svc
FirewallDisableNotify = "1"

HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\
Security Center\Svc
FirewallOverride = "1"

HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\
Security Center\Svc
UpdatesDisableNotify = "1"

HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\
Security Center\Svc
UacDisableNotify = "1"

HKEY_CURRENT_USER\Software\Microsoft\
Windows\CurrentVersion\Internet Settings
GlobalUserOffline = "0"

HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\
Windows\CurrentVersion\policies\
system
EnableLUA = "0"

HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\
Services\SharedAccess\Parameters\
FirewallPolicy\StandardProfile\AuthorizedApplications\
List
{malware path and file name} = "{malware path and file name}:*:enabled:ipsec"

HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\
Services\SharedAccess\Parameters\
FirewallPolicy\StandardProfile
EnableFirewall = "0"

HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\
Services\SharedAccess\Parameters\
FirewallPolicy\StandardProfile
DoNotAllowExceptions = "0"

HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\
Services\SharedAccess\Parameters\
FirewallPolicy\StandardProfile
DisableNotifications = "1"

HKEY_CURRENT_USER\Software\Afqteuv\
1926745233
1651272023 = "79"

HKEY_CURRENT_USER\Software\Afqteuv\
1926745233
-992423250 = "0"

HKEY_CURRENT_USER\Software\Afqteuv\
1926745233
658848773 = "0"

HKEY_CURRENT_USER\Software\Afqteuv\
1926745233
-1984846500 = "23"

HKEY_CURRENT_USER\Software\Afqteuv\
1926745233
-333574477 = "183"

HKEY_CURRENT_USER\Software\Afqteuv\
1926745233
1317697546 = "{random characters}"

HKEY_CURRENT_USER\Software\Afqteuv\
1926745233
-1325997727 = "{random characters}"

HKEY_CURRENT_USER\Software\Afqteuv
W1_0 = "c4a71155"

HKEY_CURRENT_USER\Software\Afqteuv
W2_0 = "2668"

HKEY_CURRENT_USER\Software\Afqteuv
W3_0 = "136a29"

HKEY_CURRENT_USER\Software\Afqteuv
W4_0 = "0"

HKEY_CURRENT_USER\Software\Afqteuv
W1_1 = "abe191f"

HKEY_CURRENT_USER\Software\Afqteuv
W2_1 = "626c7ed5"

HKEY_CURRENT_USER\Software\Afqteuv
W3_1 = "636f37e"

HKEY_CURRENT_USER\Software\Afqteuv
W4_1 = "626c6957"

HKEY_CURRENT_USER\Software\Afqteuv
W1_2 = "1947ca67"

HKEY_CURRENT_USER\Software\Afqteuv
W2_2 = "c4d8f32"

HKEY_CURRENT_USER\Software\Afqteuv
W3_2 = "c5dbb887"

HKEY_CURRENT_USER\Software\Afqteuv
W4_2 = "c4d8d2ae"

HKEY_CURRENT_USER\Software\Afqteuv
W1_3 = "ba3c555"

HKEY_CURRENT_USER\Software\Afqteuv
W2_3 = "274519cf"

HKEY_CURRENT_USER\Software\Afqteuv
W3_3 = "2646562c"

HKEY_CURRENT_USER\Software\Afqteuv
W4_3 = "27453c5"

HKEY_CURRENT_USER\Software\Afqteuv
W1_4 = "8cf11d"

HKEY_CURRENT_USER\Software\Afqteuv
W2_4 = "89b1b2d9"

HKEY_CURRENT_USER\Software\Afqteuv
W3_4 = "88b2cf75"

HKEY_CURRENT_USER\Software\Afqteuv
W4_4 = "89b1a55c"

HKEY_CURRENT_USER\Software\Afqteuv
W1_5 = "ca8351e"

HKEY_CURRENT_USER\Software\Afqteuv
W2_5 = "ec1e1f44"

HKEY_CURRENT_USER\Software\Afqteuv
W3_5 = "ed1d649a"

HKEY_CURRENT_USER\Software\Afqteuv
W4_5 = "ec1eeb3"

HKEY_CURRENT_USER\Software\Afqteuv
W1_6 = "573a242"

HKEY_CURRENT_USER\Software\Afqteuv
W2_6 = "4e8a67e8"

HKEY_CURRENT_USER\Software\Afqteuv
W3_6 = "4f891223"

HKEY_CURRENT_USER\Software\Afqteuv
W4_6 = "4e8a78a"

HKEY_CURRENT_USER\Software\Afqteuv
W1_7 = "3d23738"

HKEY_CURRENT_USER\Software\Afqteuv
W2_7 = "bf6fc7c"

HKEY_CURRENT_USER\Software\Afqteuv
W3_7 = "b1f58b48"

HKEY_CURRENT_USER\Software\Afqteuv
W4_7 = "bf6e161"

HKEY_CURRENT_USER\Software\Afqteuv
W1_8 = "28a32e1"

HKEY_CURRENT_USER\Software\Afqteuv
W2_8 = "1363569c"

HKEY_CURRENT_USER\Software\Afqteuv
W3_8 = "126291"

HKEY_CURRENT_USER\Software\Afqteuv
W4_8 = "13634ab8"

HKEY_CURRENT_USER\Software\Afqteuv
W1_9 = "d9a9825f"

HKEY_CURRENT_USER\Software\Afqteuv
W2_9 = "75cf92d8"

HKEY_CURRENT_USER\Software\Afqteuv
W3_9 = "74ccde26"

HKEY_CURRENT_USER\Software\Afqteuv
W4_9 = "75cfb4f"

HKEY_CURRENT_USER\Software\Afqteuv
W1_10 = "e3a777b5"

HKEY_CURRENT_USER\Software\Afqteuv
W2_10 = "d83c3c5"

HKEY_CURRENT_USER\Software\Afqteuv
W3_10 = "d93f774f"

HKEY_CURRENT_USER\Software\Afqteuv
W4_10 = "d83c1d66"

HKEY_CURRENT_USER\Software\Afqteuv
W1_11 = "b42eff61"

HKEY_CURRENT_USER\Software\Afqteuv
W2_11 = "3aa8994a"

HKEY_CURRENT_USER\Software\Afqteuv
W3_11 = "3babec94"

HKEY_CURRENT_USER\Software\Afqteuv
W4_11 = "3aa886bd"

HKEY_CURRENT_USER\Software\Afqteuv
W1_12 = "de37bd59"

HKEY_CURRENT_USER\Software\Afqteuv
W2_12 = "9d14e985"

HKEY_CURRENT_USER\Software\Afqteuv
W3_12 = "9c179a3d"

HKEY_CURRENT_USER\Software\Afqteuv
W4_12 = "9d14f14"

HKEY_CURRENT_USER\Software\Afqteuv
W1_13 = "8f1ec3a"

HKEY_CURRENT_USER\Software\Afqteuv
W2_13 = "ff8178e5"

HKEY_CURRENT_USER\Software\Afqteuv
W3_13 = "fe823342"

HKEY_CURRENT_USER\Software\Afqteuv
W4_13 = "ff81596b"

HKEY_CURRENT_USER\Software\Afqteuv
W1_14 = "9c8d285"

HKEY_CURRENT_USER\Software\Afqteuv
W2_14 = "61edd89"

HKEY_CURRENT_USER\Software\Afqteuv
W3_14 = "6eea8eb"

HKEY_CURRENT_USER\Software\Afqteuv
W4_14 = "61edc2c2"

HKEY_CURRENT_USER\Software\Afqteuv
W1_15 = "cc8d4455"

HKEY_CURRENT_USER\Software\Afqteuv
W2_15 = "c45a3776"

HKEY_CURRENT_USER\Software\Afqteuv
W3_15 = "c559463"

HKEY_CURRENT_USER\Software\Afqteuv
W4_15 = "c45a2c19"

HKEY_CURRENT_USER\Software\Afqteuv
W1_16 = "77aff53e"

HKEY_CURRENT_USER\Software\Afqteuv
W2_16 = "26c6836"

HKEY_CURRENT_USER\Software\Afqteuv
W3_16 = "27c5ff59"

HKEY_CURRENT_USER\Software\Afqteuv
W4_16 = "26c6957"

HKEY_CURRENT_USER\Software\Afqteuv
W1_17 = "6eafb446"

HKEY_CURRENT_USER\Software\Afqteuv
W2_17 = "8932e2a2"

HKEY_CURRENT_USER\Software\Afqteuv
W3_17 = "883194ee"

HKEY_CURRENT_USER\Software\Afqteuv
W4_17 = "8932fec7"

HKEY_CURRENT_USER\Software\Afqteuv
W1_18 = "ba4e1149"

HKEY_CURRENT_USER\Software\Afqteuv
W2_18 = "eb9f7ef1"

HKEY_CURRENT_USER\Software\Afqteuv
W3_18 = "ea9c237"

HKEY_CURRENT_USER\Software\Afqteuv
W4_18 = "eb9f681e"

HKEY_CURRENT_USER\Software\Afqteuv
W1_19 = "f3e1ff2c"

HKEY_CURRENT_USER\Software\Afqteuv
W2_19 = "4ebc65"

HKEY_CURRENT_USER\Software\Afqteuv
W3_19 = "4f8bb5c"

HKEY_CURRENT_USER\Software\Afqteuv
W4_19 = "4ebd175"

HKEY_CURRENT_USER\Software\Afqteuv
W1_20 = "866d6f2"

HKEY_CURRENT_USER\Software\Afqteuv
W2_20 = "b7827d3"

HKEY_CURRENT_USER\Software\Afqteuv
W3_20 = "b17b5e5"

HKEY_CURRENT_USER\Software\Afqteuv
W4_20 = "b783acc"

HKEY_CURRENT_USER\Software\Afqteuv
W1_21 = "a2e172"

HKEY_CURRENT_USER\Software\Afqteuv
W2_21 = "12e48ef"

HKEY_CURRENT_USER\Software\Afqteuv
W3_21 = "13e7cea"

HKEY_CURRENT_USER\Software\Afqteuv
W4_21 = "12e4a423"

HKEY_CURRENT_USER\Software\Afqteuv
W1_22 = "51f71ae"

HKEY_CURRENT_USER\Software\Afqteuv
W2_22 = "755112f5"

HKEY_CURRENT_USER\Software\Afqteuv
W3_22 = "74526753"

HKEY_CURRENT_USER\Software\Afqteuv
W4_22 = "7551d7a"

HKEY_CURRENT_USER\Software\Afqteuv
W1_23 = "8d66485"

HKEY_CURRENT_USER\Software\Afqteuv
W2_23 = "d7bd6dbe"

HKEY_CURRENT_USER\Software\Afqteuv
W3_23 = "d6be1cf8"

HKEY_CURRENT_USER\Software\Afqteuv
W4_23 = "d7bd76d1"

HKEY_CURRENT_USER\Software\Afqteuv
W1_24 = "483695e"

HKEY_CURRENT_USER\Software\Afqteuv
W2_24 = "3a29faf2"

HKEY_CURRENT_USER\Software\Afqteuv
W3_24 = "3b2a8a1"

HKEY_CURRENT_USER\Software\Afqteuv
W4_24 = "3a29e28"

HKEY_CURRENT_USER\Software\Afqteuv
W1_25 = "38131638"

HKEY_CURRENT_USER\Software\Afqteuv
W2_25 = "9c96551a"

HKEY_CURRENT_USER\Software\Afqteuv
W3_25 = "9d952356"

HKEY_CURRENT_USER\Software\Afqteuv
W4_25 = "9c96497f"

HKEY_CURRENT_USER\Software\Afqteuv
W1_26 = "dc54bc83"

HKEY_CURRENT_USER\Software\Afqteuv
W2_26 = "ff29351"

HKEY_CURRENT_USER\Software\Afqteuv
W3_26 = "fe1d8ff"

HKEY_CURRENT_USER\Software\Afqteuv
W4_26 = "ff2b2d6"

HKEY_CURRENT_USER\Software\Afqteuv
W1_27 = "5fec6189"

HKEY_CURRENT_USER\Software\Afqteuv
W2_27 = "616f39e7"

HKEY_CURRENT_USER\Software\Afqteuv
W3_27 = "66c764"

HKEY_CURRENT_USER\Software\Afqteuv
W4_27 = "616f1c2d"

HKEY_CURRENT_USER\Software\Afqteuv
W1_28 = "85caac1"

HKEY_CURRENT_USER\Software\Afqteuv
W2_28 = "c3db9835"

HKEY_CURRENT_USER\Software\Afqteuv
W3_28 = "c2d8efad"

HKEY_CURRENT_USER\Software\Afqteuv
W4_28 = "c3db8584"

HKEY_CURRENT_USER\Software\Afqteuv
W1_29 = "9b645e99"

HKEY_CURRENT_USER\Software\Afqteuv
W2_29 = "2647fb4"

HKEY_CURRENT_USER\Software\Afqteuv
W3_29 = "274484f2"

HKEY_CURRENT_USER\Software\Afqteuv
W4_29 = "2647eedb"

HKEY_CURRENT_USER\Software\Afqteuv
W1_30 = "19a1762"

HKEY_CURRENT_USER\Software\Afqteuv
W2_30 = "88b44112"

HKEY_CURRENT_USER\Software\Afqteuv
W3_30 = "89b7321b"

HKEY_CURRENT_USER\Software\Afqteuv
W4_30 = "88b45832"

HKEY_CURRENT_USER\Software\Afqteuv
W1_31 = "1bb74cc"

HKEY_CURRENT_USER\Software\Afqteuv
W2_31 = "eb2ecf"

HKEY_CURRENT_USER\Software\Afqteuv
W3_31 = "ea23aba"

HKEY_CURRENT_USER\Software\Afqteuv
W4_31 = "eb2c189"

HKEY_CURRENT_USER\Software\Afqteuv
W1_32 = "5bcf582"

HKEY_CURRENT_USER\Software\Afqteuv
W2_32 = "4d8d31bd"

HKEY_CURRENT_USER\Software\Afqteuv
W3_32 = "4c8e4c9"

HKEY_CURRENT_USER\Software\Afqteuv
W4_32 = "4d8d2ae"

HKEY_CURRENT_USER\Software\Afqteuv
W1_33 = "3322a9a"

HKEY_CURRENT_USER\Software\Afqteuv
W2_33 = "aff98889"

HKEY_CURRENT_USER\Software\Afqteuv
W3_33 = "aefafe1e"

HKEY_CURRENT_USER\Software\Afqteuv
W4_33 = "aff99437"

HKEY_CURRENT_USER\Software\Afqteuv
W1_34 = "987df4c"

HKEY_CURRENT_USER\Software\Afqteuv
W2_34 = "1265e378"

HKEY_CURRENT_USER\Software\Afqteuv
W3_34 = "136697a7"

HKEY_CURRENT_USER\Software\Afqteuv
W4_34 = "1265fd8e"

HKEY_CURRENT_USER\Software\Afqteuv
W1_35 = "6c3cc893"

HKEY_CURRENT_USER\Software\Afqteuv
W2_35 = "74d2442e"

HKEY_CURRENT_USER\Software\Afqteuv
W3_35 = "75d1ccc"

HKEY_CURRENT_USER\Software\Afqteuv
W4_35 = "74d266e5"

HKEY_CURRENT_USER\Software\Afqteuv
W1_36 = "afac8bee"

HKEY_CURRENT_USER\Software\Afqteuv
W2_36 = "d73ece31"

HKEY_CURRENT_USER\Software\Afqteuv
W3_36 = "d63dba15"

HKEY_CURRENT_USER\Software\Afqteuv
W4_36 = "d73ed3c"

HKEY_CURRENT_USER\Software\Afqteuv
W1_37 = "88c3edf1"

HKEY_CURRENT_USER\Software\Afqteuv
W2_37 = "39ab2297"

HKEY_CURRENT_USER\Software\Afqteuv
W3_37 = "38a853ba"

HKEY_CURRENT_USER\Software\Afqteuv
W4_37 = "39ab3993"

HKEY_CURRENT_USER\Software\Afqteuv
W1_38 = "8942bb3"

HKEY_CURRENT_USER\Software\Afqteuv
W2_38 = "9c17bfe1"

HKEY_CURRENT_USER\Software\Afqteuv
W3_38 = "9d14c8c3"

HKEY_CURRENT_USER\Software\Afqteuv
W4_38 = "9c17a2ea"

HKEY_CURRENT_USER\Software\Afqteuv
W1_39 = "27fec5"

HKEY_CURRENT_USER\Software\Afqteuv
W2_39 = "fe84186"

HKEY_CURRENT_USER\Software\Afqteuv
W3_39 = "ff876668"

HKEY_CURRENT_USER\Software\Afqteuv
W4_39 = "fe84c41"

HKEY_CURRENT_USER\Software\Afqteuv
W1_40 = "c8638d4"

HKEY_CURRENT_USER\Software\Afqteuv
W2_40 = "6f6fca"

HKEY_CURRENT_USER\Software\Afqteuv
W3_40 = "61f31fb1"

HKEY_CURRENT_USER\Software\Afqteuv
W4_40 = "6f7598"

HKEY_CURRENT_USER\Software\Afqteuv
W1_41 = "94caab2"

HKEY_CURRENT_USER\Software\Afqteuv
W2_41 = "c35cc689"

HKEY_CURRENT_USER\Software\Afqteuv
W3_41 = "c25fb4c6"

HKEY_CURRENT_USER\Software\Afqteuv
W4_41 = "c35cdeef"

HKEY_CURRENT_USER\Software\Afqteuv
W1_42 = "1794a1"

HKEY_CURRENT_USER\Software\Afqteuv
W2_42 = "25c95199"

HKEY_CURRENT_USER\Software\Afqteuv
W3_42 = "24ca226f"

HKEY_CURRENT_USER\Software\Afqteuv
W4_42 = "25c94846"

HKEY_CURRENT_USER\Software\Afqteuv
W1_43 = "aac954"

HKEY_CURRENT_USER\Software\Afqteuv
W2_43 = "8835aa4a"

HKEY_CURRENT_USER\Software\Afqteuv
W3_43 = "8936dbb4"

HKEY_CURRENT_USER\Software\Afqteuv
W4_43 = "8835b19d"

HKEY_CURRENT_USER\Software\Afqteuv
W1_44 = "c87e53d"

HKEY_CURRENT_USER\Software\Afqteuv
W2_44 = "eaa23b15"

HKEY_CURRENT_USER\Software\Afqteuv
W3_44 = "eba17dd"

HKEY_CURRENT_USER\Software\Afqteuv
W4_44 = "eaa21af4"

HKEY_CURRENT_USER\Software\Afqteuv
W1_45 = "cee312"

HKEY_CURRENT_USER\Software\Afqteuv
W2_45 = "4de93ac"

HKEY_CURRENT_USER\Software\Afqteuv
W3_45 = "4cdee62"

HKEY_CURRENT_USER\Software\Afqteuv
W4_45 = "4de844b"

HKEY_CURRENT_USER\Software\Afqteuv
W1_46 = "aa1ee2f"

HKEY_CURRENT_USER\Software\Afqteuv
W2_46 = "af7afbd7"

HKEY_CURRENT_USER\Software\Afqteuv
W3_46 = "ae79878b"

HKEY_CURRENT_USER\Software\Afqteuv
W4_46 = "af7aeda2"

HKEY_CURRENT_USER\Software\Afqteuv
W1_47 = "bc58de1"

HKEY_CURRENT_USER\Software\Afqteuv
W2_47 = "11e74ce5"

HKEY_CURRENT_USER\Software\Afqteuv
W3_47 = "1e43cd"

HKEY_CURRENT_USER\Software\Afqteuv
W4_47 = "11e756f9"

HKEY_CURRENT_USER\Software\Afqteuv
W1_48 = "6f7da86"

HKEY_CURRENT_USER\Software\Afqteuv
W2_48 = "7453e5b"

HKEY_CURRENT_USER\Software\Afqteuv
W3_48 = "755aa79"

HKEY_CURRENT_USER\Software\Afqteuv
W4_48 = "7453c5"

HKEY_CURRENT_USER\Software\Afqteuv
W1_49 = "a2e55fe"

HKEY_CURRENT_USER\Software\Afqteuv
W2_49 = "d6c92c"

HKEY_CURRENT_USER\Software\Afqteuv
W3_49 = "d7c3438e"

HKEY_CURRENT_USER\Software\Afqteuv
W4_49 = "d6c29a7"

HKEY_CURRENT_USER\Software\Afqteuv
W1_50 = "d22b719c"

HKEY_CURRENT_USER\Software\Afqteuv
W2_50 = "392c89a3"

HKEY_CURRENT_USER\Software\Afqteuv
W3_50 = "382ff8d7"

HKEY_CURRENT_USER\Software\Afqteuv
W4_50 = "392c92fe"

HKEY_CURRENT_USER\Software\Afqteuv
W1_51 = "f9e6fc97"

HKEY_CURRENT_USER\Software\Afqteuv
W2_51 = "9b98eadc"

HKEY_CURRENT_USER\Software\Afqteuv
W3_51 = "9a9b967c"

HKEY_CURRENT_USER\Software\Afqteuv
W4_51 = "9b98fc55"

HKEY_CURRENT_USER\Software\Afqteuv
W1_52 = "ce2e6412"

HKEY_CURRENT_USER\Software\Afqteuv
W2_52 = "fe57f29"

HKEY_CURRENT_USER\Software\Afqteuv
W3_52 = "ff6f85"

HKEY_CURRENT_USER\Software\Afqteuv
W4_52 = "fe565ac"

HKEY_CURRENT_USER\Software\Afqteuv
W1_53 = "2a299d5"

HKEY_CURRENT_USER\Software\Afqteuv
W2_53 = "671eed"

HKEY_CURRENT_USER\Software\Afqteuv
W3_53 = "6172a52a"

HKEY_CURRENT_USER\Software\Afqteuv
W4_53 = "671cf3"

HKEY_CURRENT_USER\Software\Afqteuv
W1_54 = "fda123"

HKEY_CURRENT_USER\Software\Afqteuv
W2_54 = "c2de2f9d"

HKEY_CURRENT_USER\Software\Afqteuv
W3_54 = "c3dd5273"

HKEY_CURRENT_USER\Software\Afqteuv
W4_54 = "c2de385a"

HKEY_CURRENT_USER\Software\Afqteuv
W1_55 = "4af7e1e4"

HKEY_CURRENT_USER\Software\Afqteuv
W2_55 = "254ab837"

HKEY_CURRENT_USER\Software\Afqteuv
W3_55 = "2449cb98"

HKEY_CURRENT_USER\Software\Afqteuv
W4_55 = "254aa1b1"

HKEY_CURRENT_USER\Software\Afqteuv
W1_56 = "be1ef472"

HKEY_CURRENT_USER\Software\Afqteuv
W2_56 = "87b71d4b"

HKEY_CURRENT_USER\Software\Afqteuv
W3_56 = "86b46121"

HKEY_CURRENT_USER\Software\Afqteuv
W4_56 = "87b7b8"

HKEY_CURRENT_USER\Software\Afqteuv
W1_57 = "4ae85e6"

HKEY_CURRENT_USER\Software\Afqteuv
W2_57 = "ea2369a2"

HKEY_CURRENT_USER\Software\Afqteuv
W3_57 = "eb21e76"

HKEY_CURRENT_USER\Software\Afqteuv
W4_57 = "ea23745f"

HKEY_CURRENT_USER\Software\Afqteuv
W1_58 = "8e3e41ee"

HKEY_CURRENT_USER\Software\Afqteuv
W2_58 = "4c8fc614"

HKEY_CURRENT_USER\Software\Afqteuv
W3_58 = "4d8cb79f"

HKEY_CURRENT_USER\Software\Afqteuv
W4_58 = "4c8fddb6"

HKEY_CURRENT_USER\Software\Afqteuv
W1_59 = "7e6d1443"

HKEY_CURRENT_USER\Software\Afqteuv
W2_59 = "aefc5e54"

HKEY_CURRENT_USER\Software\Afqteuv
W3_59 = "afff2d24"

HKEY_CURRENT_USER\Software\Afqteuv
W4_59 = "aefc47d"

HKEY_CURRENT_USER\Software\Afqteuv
W1_60 = "b57c273d"

HKEY_CURRENT_USER\Software\Afqteuv
W2_60 = "1168a93d"

HKEY_CURRENT_USER\Software\Afqteuv
W3_60 = "16bda4d"

HKEY_CURRENT_USER\Software\Afqteuv
W4_60 = "1168b64"

HKEY_CURRENT_USER\Software\Afqteuv
W1_61 = "7a86fe6"

HKEY_CURRENT_USER\Software\Afqteuv
W2_61 = "73d5eab"

HKEY_CURRENT_USER\Software\Afqteuv
W3_61 = "72d67392"

HKEY_CURRENT_USER\Software\Afqteuv
W4_61 = "73d519bb"

HKEY_CURRENT_USER\Software\Afqteuv
W1_62 = "1d2fea5e"

HKEY_CURRENT_USER\Software\Afqteuv
W2_62 = "d641aa7"

HKEY_CURRENT_USER\Software\Afqteuv
W3_62 = "d742e93b"

HKEY_CURRENT_USER\Software\Afqteuv
W4_62 = "d6418312"

HKEY_CURRENT_USER\Software\Afqteuv
W1_63 = "5f53953c"

HKEY_CURRENT_USER\Software\Afqteuv
W2_63 = "38adf1f4"

HKEY_CURRENT_USER\Software\Afqteuv
W3_63 = "39ae864"

HKEY_CURRENT_USER\Software\Afqteuv
W4_63 = "38adec69"

HKEY_CURRENT_USER\Software\Afqteuv
W1_64 = "5ad2ccbc"

HKEY_CURRENT_USER\Software\Afqteuv
W2_64 = "9b1a4294"

HKEY_CURRENT_USER\Software\Afqteuv
W3_64 = "9a193fe9"

HKEY_CURRENT_USER\Software\Afqteuv
W4_64 = "9b1a55c"

HKEY_CURRENT_USER\Software\Afqteuv
W1_65 = "418f5543"

HKEY_CURRENT_USER\Software\Afqteuv
W2_65 = "fd86a678"

HKEY_CURRENT_USER\Software\Afqteuv
W3_65 = "fc85d53e"

HKEY_CURRENT_USER\Software\Afqteuv
W4_65 = "fd86bf17"

HKEY_CURRENT_USER\Software\Afqteuv
W1_66 = "9487132"

HKEY_CURRENT_USER\Software\Afqteuv
W2_66 = "5ff332c8"

HKEY_CURRENT_USER\Software\Afqteuv
W3_66 = "5ef4247"

HKEY_CURRENT_USER\Software\Afqteuv
W4_66 = "5ff3286e"

HKEY_CURRENT_USER\Software\Afqteuv
W1_67 = "1eddb59c"

HKEY_CURRENT_USER\Software\Afqteuv
W2_67 = "c25f8a8d"

HKEY_CURRENT_USER\Software\Afqteuv
W3_67 = "c35cfbec"

HKEY_CURRENT_USER\Software\Afqteuv
W4_67 = "c25f91c5"

HKEY_CURRENT_USER\Software\Afqteuv
W1_68 = "663794a"

HKEY_CURRENT_USER\Software\Afqteuv
W2_68 = "24cbe56b"

HKEY_CURRENT_USER\Software\Afqteuv
W3_68 = "25c89135"

HKEY_CURRENT_USER\Software\Afqteuv
W4_68 = "24cbfb1c"

HKEY_CURRENT_USER\Software\Afqteuv
W1_69 = "8aaf593d"

HKEY_CURRENT_USER\Software\Afqteuv
W2_69 = "87387264"

HKEY_CURRENT_USER\Software\Afqteuv
W3_69 = "863be5a"

HKEY_CURRENT_USER\Software\Afqteuv
W4_69 = "87386473"

HKEY_CURRENT_USER\Software\Afqteuv
W1_70 = "4aa389"

HKEY_CURRENT_USER\Software\Afqteuv
W2_70 = "e9a4d71"

HKEY_CURRENT_USER\Software\Afqteuv
W3_70 = "e8a7a7e3"

HKEY_CURRENT_USER\Software\Afqteuv
W4_70 = "e9a4cdca"

HKEY_CURRENT_USER\Software\Afqteuv
W1_71 = "4d3b379a"

HKEY_CURRENT_USER\Software\Afqteuv
W2_71 = "4c111516"

HKEY_CURRENT_USER\Software\Afqteuv
W3_71 = "4d125d8"

HKEY_CURRENT_USER\Software\Afqteuv
W4_71 = "4c113721"

HKEY_CURRENT_USER\Software\Afqteuv
W1_72 = "7cf3491a"

HKEY_CURRENT_USER\Software\Afqteuv
W2_72 = "ae7dbc57"

HKEY_CURRENT_USER\Software\Afqteuv
W3_72 = "af7eca51"

HKEY_CURRENT_USER\Software\Afqteuv
W4_72 = "ae7da78"

HKEY_CURRENT_USER\Software\Afqteuv
W1_73 = "89d5e74"

HKEY_CURRENT_USER\Software\Afqteuv
W2_73 = "1ea114"

HKEY_CURRENT_USER\Software\Afqteuv
W3_73 = "11e963e6"

HKEY_CURRENT_USER\Software\Afqteuv
W4_73 = "1ea9cf"

HKEY_CURRENT_USER\Software\Afqteuv
W1_74 = "5df5587f"

HKEY_CURRENT_USER\Software\Afqteuv
W2_74 = "735657e1"

HKEY_CURRENT_USER\Software\Afqteuv
W3_74 = "725519f"

HKEY_CURRENT_USER\Software\Afqteuv
W4_74 = "73567326"

HKEY_CURRENT_USER\Software\Afqteuv
W1_75 = "a5f83933"

HKEY_CURRENT_USER\Software\Afqteuv
W2_75 = "d5c2cb4a"

HKEY_CURRENT_USER\Software\Afqteuv
W3_75 = "d4c1b654"

HKEY_CURRENT_USER\Software\Afqteuv
W4_75 = "d5c2dc7d"

HKEY_CURRENT_USER\Software\Afqteuv
W1_76 = "346ca7"

HKEY_CURRENT_USER\Software\Afqteuv
W2_76 = "382f583f"

HKEY_CURRENT_USER\Software\Afqteuv
W3_76 = "392c2ffd"

HKEY_CURRENT_USER\Software\Afqteuv
W4_76 = "382f45d4"

HKEY_CURRENT_USER\Software\Afqteuv
W1_77 = "43bf126d"

HKEY_CURRENT_USER\Software\Afqteuv
W2_77 = "9a9b8e6d"

HKEY_CURRENT_USER\Software\Afqteuv
W3_77 = "9b98c52"

HKEY_CURRENT_USER\Software\Afqteuv
W4_77 = "9a9baf2b"

HKEY_CURRENT_USER\Software\Afqteuv
W1_78 = "66586fcd"

HKEY_CURRENT_USER\Software\Afqteuv
W2_78 = "fd8e7e"

HKEY_CURRENT_USER\Software\Afqteuv
W3_78 = "fcb72ab"

HKEY_CURRENT_USER\Software\Afqteuv
W4_78 = "fd81882"

HKEY_CURRENT_USER\Software\Afqteuv
W1_79 = "2fd725"

HKEY_CURRENT_USER\Software\Afqteuv
W2_79 = "5f74a5ac"

HKEY_CURRENT_USER\Software\Afqteuv
W3_79 = "5e77ebf"

HKEY_CURRENT_USER\Software\Afqteuv
W4_79 = "5f7481d9"

HKEY_CURRENT_USER\Software\Afqteuv
W1_80 = "37bc9969"

HKEY_CURRENT_USER\Software\Afqteuv
W2_80 = "c1ef2eb"

HKEY_CURRENT_USER\Software\Afqteuv
W3_80 = "ce38119"

HKEY_CURRENT_USER\Software\Afqteuv
W4_80 = "c1eeb3"

HKEY_CURRENT_USER\Software\Afqteuv
W1_81 = "54616b3a"

HKEY_CURRENT_USER\Software\Afqteuv
W2_81 = "244d4a7"

HKEY_CURRENT_USER\Software\Afqteuv
W3_81 = "254e3eae"

HKEY_CURRENT_USER\Software\Afqteuv
W4_81 = "244d5487"

HKEY_CURRENT_USER\Software\Afqteuv
W1_82 = "d6a88865"

HKEY_CURRENT_USER\Software\Afqteuv
W2_82 = "86b9a5f9"

HKEY_CURRENT_USER\Software\Afqteuv
W3_82 = "87bad7f7"

HKEY_CURRENT_USER\Software\Afqteuv
W4_82 = "86b9bdde"

HKEY_CURRENT_USER\Software\Afqteuv
W1_83 = "892b666"

HKEY_CURRENT_USER\Software\Afqteuv
W2_83 = "e92638e"

HKEY_CURRENT_USER\Software\Afqteuv
W3_83 = "e8254d1c"

HKEY_CURRENT_USER\Software\Afqteuv
W4_83 = "e9262735"

HKEY_CURRENT_USER\Software\Afqteuv
W1_84 = "2652d445"

HKEY_CURRENT_USER\Software\Afqteuv
W2_84 = "4b928e3d"

HKEY_CURRENT_USER\Software\Afqteuv
W3_84 = "4a91faa5"

HKEY_CURRENT_USER\Software\Afqteuv
W4_84 = "4b9298c"

HKEY_CURRENT_USER\Software\Afqteuv
W1_85 = "6ab3bb7"

HKEY_CURRENT_USER\Software\Afqteuv
W2_85 = "adfee5c7"

HKEY_CURRENT_USER\Software\Afqteuv
W3_85 = "acfd93ca"

HKEY_CURRENT_USER\Software\Afqteuv
W4_85 = "adfef9e3"

HKEY_CURRENT_USER\Software\Afqteuv
W1_86 = "677ec5f2"

HKEY_CURRENT_USER\Software\Afqteuv
W2_86 = "16b7f41"

HKEY_CURRENT_USER\Software\Afqteuv
W3_86 = "1168913"

HKEY_CURRENT_USER\Software\Afqteuv
W4_86 = "16b633a"

HKEY_CURRENT_USER\Software\Afqteuv
W1_87 = "3bb47c8"

HKEY_CURRENT_USER\Software\Afqteuv
W2_87 = "72d7edd"

HKEY_CURRENT_USER\Software\Afqteuv
W3_87 = "73d4a6b8"

HKEY_CURRENT_USER\Software\Afqteuv
W4_87 = "72d7cc91"

HKEY_CURRENT_USER\Software\Afqteuv
W1_88 = "df36f3bc"

HKEY_CURRENT_USER\Software\Afqteuv
W2_88 = "d5442361"

HKEY_CURRENT_USER\Software\Afqteuv
W3_88 = "d4475fc1"

HKEY_CURRENT_USER\Software\Afqteuv
W4_88 = "d54435e8"

HKEY_CURRENT_USER\Software\Afqteuv
W1_89 = "4f3c49f1"

HKEY_CURRENT_USER\Software\Afqteuv
W2_89 = "37b86f9"

HKEY_CURRENT_USER\Software\Afqteuv
W3_89 = "36b3f516"

HKEY_CURRENT_USER\Software\Afqteuv
W4_89 = "37b9f3f"

HKEY_CURRENT_USER\Software\Afqteuv
W1_90 = "b91de1d8"

HKEY_CURRENT_USER\Software\Afqteuv
W2_90 = "9a1d1471"

HKEY_CURRENT_USER\Software\Afqteuv
W3_90 = "9b1e62bf"

HKEY_CURRENT_USER\Software\Afqteuv
W4_90 = "9a1d896"

HKEY_CURRENT_USER\Software\Afqteuv
W1_91 = "ac26b51"

HKEY_CURRENT_USER\Software\Afqteuv
W2_91 = "fc8951d6"

HKEY_CURRENT_USER\Software\Afqteuv
W3_91 = "fd8a1bc4"

HKEY_CURRENT_USER\Software\Afqteuv
W4_91 = "fc8971ed"

HKEY_CURRENT_USER\Software\Afqteuv
W1_92 = "653ec7f9"

HKEY_CURRENT_USER\Software\Afqteuv
W2_92 = "5ef5c1da"

HKEY_CURRENT_USER\Software\Afqteuv
W3_92 = "5ff6b16d"

HKEY_CURRENT_USER\Software\Afqteuv
W4_92 = "5ef5db44"

HKEY_CURRENT_USER\Software\Afqteuv
W1_93 = "7ad7b8f9"

HKEY_CURRENT_USER\Software\Afqteuv
W2_93 = "c1625d62"

HKEY_CURRENT_USER\Software\Afqteuv
W3_93 = "c612eb2"

HKEY_CURRENT_USER\Software\Afqteuv
W4_93 = "c162449b"

HKEY_CURRENT_USER\Software\Afqteuv
W1_94 = "f7568dab"

HKEY_CURRENT_USER\Software\Afqteuv
W2_94 = "23ceb272"

HKEY_CURRENT_USER\Software\Afqteuv
W3_94 = "22cdc7db"

HKEY_CURRENT_USER\Software\Afqteuv
W4_94 = "23ceadf2"

HKEY_CURRENT_USER\Software\Afqteuv
W1_95 = "c2d44b9d"

HKEY_CURRENT_USER\Software\Afqteuv
W2_95 = "863bab4"

HKEY_CURRENT_USER\Software\Afqteuv
W3_95 = "87387d6"

HKEY_CURRENT_USER\Software\Afqteuv
W4_95 = "863b1749"

HKEY_CURRENT_USER\Software\Afqteuv
W1_96 = "6d61e8dc"

HKEY_CURRENT_USER\Software\Afqteuv
W2_96 = "e8a79fcd"

HKEY_CURRENT_USER\Software\Afqteuv
W3_96 = "e9a4ea89"

HKEY_CURRENT_USER\Software\Afqteuv
W4_96 = "e8a78a"

HKEY_CURRENT_USER\Software\Afqteuv
W1_97 = "cc71a3e"

HKEY_CURRENT_USER\Software\Afqteuv
W2_97 = "4b13cada"

HKEY_CURRENT_USER\Software\Afqteuv
W3_97 = "4a183de"

HKEY_CURRENT_USER\Software\Afqteuv
W4_97 = "4b13e9f7"

HKEY_CURRENT_USER\Software\Afqteuv
W1_98 = "19ca2c18"

HKEY_CURRENT_USER\Software\Afqteuv
W2_98 = "ad848f9"

HKEY_CURRENT_USER\Software\Afqteuv
W3_98 = "ac833967"

HKEY_CURRENT_USER\Software\Afqteuv
W4_98 = "ad8534e"

HKEY_CURRENT_USER\Software\Afqteuv
W1_99 = "375a519"

HKEY_CURRENT_USER\Software\Afqteuv
W2_99 = "feca222"

HKEY_CURRENT_USER\Software\Afqteuv
W3_99 = "eefd68c"

HKEY_CURRENT_USER\Software\Afqteuv
W4_99 = "fecbca5"

HKEY_CURRENT_USER\Software\Afqteuv
W1_100 = "3d3c4da3"

HKEY_CURRENT_USER\Software\Afqteuv
W2_100 = "7259381"

HKEY_CURRENT_USER\Software\Afqteuv
W3_100 = "735a4fd5"

HKEY_CURRENT_USER\Software\Afqteuv
W4_100 = "725925fc"

HKEY_CURRENT_USER\Software\Afqteuv
W1_101 = "57e5fef"

HKEY_CURRENT_USER\Software\Afqteuv
W2_101 = "d4c5988"

HKEY_CURRENT_USER\Software\Afqteuv
W3_101 = "d5c6e57a"

HKEY_CURRENT_USER\Software\Afqteuv
W4_101 = "d4c58f53"

HKEY_CURRENT_USER\Software\Afqteuv
W1_102 = "5268c411"

HKEY_CURRENT_USER\Software\Afqteuv
W2_102 = "3731d8a1"

HKEY_CURRENT_USER\Software\Afqteuv
W3_102 = "36329283"

HKEY_CURRENT_USER\Software\Afqteuv
W4_102 = "3731f8aa"

HKEY_CURRENT_USER\Software\Afqteuv
W1_103 = "af188451"

HKEY_CURRENT_USER\Software\Afqteuv
W2_103 = "999e79b6"

HKEY_CURRENT_USER\Software\Afqteuv
W3_103 = "989d828"

HKEY_CURRENT_USER\Software\Afqteuv
W4_103 = "999e621"

HKEY_CURRENT_USER\Software\Afqteuv
W1_104 = "53abaee"

HKEY_CURRENT_USER\Software\Afqteuv
W2_104 = "fcad6e9"

HKEY_CURRENT_USER\Software\Afqteuv
W3_104 = "fd9a171"

HKEY_CURRENT_USER\Software\Afqteuv
W4_104 = "fcacb58"

HKEY_CURRENT_USER\Software\Afqteuv
W1_105 = "1becffb7"

HKEY_CURRENT_USER\Software\Afqteuv
W2_105 = "5e771165"

HKEY_CURRENT_USER\Software\Afqteuv
W3_105 = "5f745e86"

HKEY_CURRENT_USER\Software\Afqteuv
W4_105 = "5e7734af"

HKEY_CURRENT_USER\Software\Afqteuv
W1_106 = "2e28e85b"

HKEY_CURRENT_USER\Software\Afqteuv
W2_106 = "ce38971"

HKEY_CURRENT_USER\Software\Afqteuv
W3_106 = "c1ef42f"

HKEY_CURRENT_USER\Software\Afqteuv
W4_106 = "ce39e6"

HKEY_CURRENT_USER\Software\Afqteuv
W1_107 = "ce7ae1f"

HKEY_CURRENT_USER\Software\Afqteuv
W2_107 = "2351e4"

HKEY_CURRENT_USER\Software\Afqteuv
W3_107 = "22536d74"

HKEY_CURRENT_USER\Software\Afqteuv
W4_107 = "23575d"

HKEY_CURRENT_USER\Software\Afqteuv
W1_108 = "ae2956a"

HKEY_CURRENT_USER\Software\Afqteuv
W2_108 = "85bc6791"

HKEY_CURRENT_USER\Software\Afqteuv
W3_108 = "84bf1a9d"

HKEY_CURRENT_USER\Software\Afqteuv
W4_108 = "85bc7b4"

HKEY_CURRENT_USER\Software\Afqteuv
W1_109 = "3b98a5d"

HKEY_CURRENT_USER\Software\Afqteuv
W2_109 = "e828ccc4"

HKEY_CURRENT_USER\Software\Afqteuv
W3_109 = "e92bb22"

HKEY_CURRENT_USER\Software\Afqteuv
W4_109 = "e828dab"

HKEY_CURRENT_USER\Software\Afqteuv
W1_110 = "668258de"

HKEY_CURRENT_USER\Software\Afqteuv
W2_110 = "4a955ea8"

HKEY_CURRENT_USER\Software\Afqteuv
W3_110 = "4b96294b"

HKEY_CURRENT_USER\Software\Afqteuv
W4_110 = "4a954362"

HKEY_CURRENT_USER\Software\Afqteuv
W1_111 = "c35e66c9"

HKEY_CURRENT_USER\Software\Afqteuv
W2_111 = "ad1ba6"

HKEY_CURRENT_USER\Software\Afqteuv
W3_111 = "ac2c69"

HKEY_CURRENT_USER\Software\Afqteuv
W4_111 = "ad1acb9"

HKEY_CURRENT_USER\Software\Afqteuv
W1_112 = "f3e879ad"

HKEY_CURRENT_USER\Software\Afqteuv
W2_112 = "f6e3497"

HKEY_CURRENT_USER\Software\Afqteuv
W3_112 = "e6d7c39"

HKEY_CURRENT_USER\Software\Afqteuv
W4_112 = "f6e161"

HKEY_CURRENT_USER\Software\Afqteuv
W1_113 = "ae49b736"

HKEY_CURRENT_USER\Software\Afqteuv
W2_113 = "71da62e"

HKEY_CURRENT_USER\Software\Afqteuv
W3_113 = "7d9154e"

HKEY_CURRENT_USER\Software\Afqteuv
W4_113 = "71da7f67"

HKEY_CURRENT_USER\Software\Afqteuv
W1_114 = "69984edc"

HKEY_CURRENT_USER\Software\Afqteuv
W2_114 = "d446fd25"

HKEY_CURRENT_USER\Software\Afqteuv
W3_114 = "d5458297"

HKEY_CURRENT_USER\Software\Afqteuv
W4_114 = "d446e8be"

HKEY_CURRENT_USER\Software\Afqteuv
W1_115 = "52fb4c67"

HKEY_CURRENT_USER\Software\Afqteuv
W2_115 = "36b34537"

HKEY_CURRENT_USER\Software\Afqteuv
W3_115 = "37b383c"

HKEY_CURRENT_USER\Software\Afqteuv
W4_115 = "36b35215"

HKEY_CURRENT_USER\Software\Afqteuv
W1_116 = "cd4627b5"

HKEY_CURRENT_USER\Software\Afqteuv
W2_116 = "991fa457"

HKEY_CURRENT_USER\Software\Afqteuv
W3_116 = "981cd145"

HKEY_CURRENT_USER\Software\Afqteuv
W4_116 = "991fbb6c"

HKEY_CURRENT_USER\Software\Afqteuv
W1_117 = "c9c9729f"

HKEY_CURRENT_USER\Software\Afqteuv
W2_117 = "fb8c38fc"

HKEY_CURRENT_USER\Software\Afqteuv
W3_117 = "fa8f4eea"

HKEY_CURRENT_USER\Software\Afqteuv
W4_117 = "fb8c24c3"

HKEY_CURRENT_USER\Software\Afqteuv
W1_118 = "45119921"

HKEY_CURRENT_USER\Software\Afqteuv
W2_118 = "5df894f3"

HKEY_CURRENT_USER\Software\Afqteuv
W3_118 = "5cfbe433"

HKEY_CURRENT_USER\Software\Afqteuv
W4_118 = "5df88e1a"

HKEY_CURRENT_USER\Software\Afqteuv
W1_119 = "a56312cd"

HKEY_CURRENT_USER\Software\Afqteuv
W2_119 = "c64ed9a"

HKEY_CURRENT_USER\Software\Afqteuv
W3_119 = "c1679d58"

HKEY_CURRENT_USER\Software\Afqteuv
W4_119 = "c64f771"

HKEY_CURRENT_USER\Software\Afqteuv
W1_120 = "cde97f86"

HKEY_CURRENT_USER\Software\Afqteuv
W2_120 = "22d17ee4"

HKEY_CURRENT_USER\Software\Afqteuv
W3_120 = "23d2ae1"

HKEY_CURRENT_USER\Software\Afqteuv
W4_120 = "22d16c8"

HKEY_CURRENT_USER\Software\Afqteuv
W1_121 = "8c1e35d6"

HKEY_CURRENT_USER\Software\Afqteuv
W2_121 = "853ddcc6"

HKEY_CURRENT_USER\Software\Afqteuv
W3_121 = "843ea36"

HKEY_CURRENT_USER\Software\Afqteuv
W4_121 = "853dca1f"

HKEY_CURRENT_USER\Software\Afqteuv
W1_122 = "ee27b13d"

HKEY_CURRENT_USER\Software\Afqteuv
W2_122 = "e7aa2a8f"

HKEY_CURRENT_USER\Software\Afqteuv
W3_122 = "e6a9595f"

HKEY_CURRENT_USER\Software\Afqteuv
W4_122 = "e7aa3376"

HKEY_CURRENT_USER\Software\Afqteuv
W1_123 = "cccd67"

HKEY_CURRENT_USER\Software\Afqteuv
W2_123 = "4a16bc25"

HKEY_CURRENT_USER\Software\Afqteuv
W3_123 = "4b15f6e4"

HKEY_CURRENT_USER\Software\Afqteuv
W4_123 = "4a169ccd"

HKEY_CURRENT_USER\Software\Afqteuv
W1_124 = "1ab1766b"

HKEY_CURRENT_USER\Software\Afqteuv
W2_124 = "ac8326fb"

HKEY_CURRENT_USER\Software\Afqteuv
W3_124 = "ad86cd"

HKEY_CURRENT_USER\Software\Afqteuv
W4_124 = "ac83624"

HKEY_CURRENT_USER\Software\Afqteuv
W1_125 = "4ca22c5"

HKEY_CURRENT_USER\Software\Afqteuv
W2_125 = "eef4d4f"

HKEY_CURRENT_USER\Software\Afqteuv
W3_125 = "fec552"

HKEY_CURRENT_USER\Software\Afqteuv
W4_125 = "eef6f7b"

HKEY_CURRENT_USER\Software\Afqteuv
W1_126 = "4bd8268b"

HKEY_CURRENT_USER\Software\Afqteuv
W2_126 = "715bc129"

HKEY_CURRENT_USER\Software\Afqteuv
W3_126 = "758b2fb"

HKEY_CURRENT_USER\Software\Afqteuv
W4_126 = "715bd8d2"

HKEY_CURRENT_USER\Software\Afqteuv
W1_127 = "d4cb2a76"

HKEY_CURRENT_USER\Software\Afqteuv
W2_127 = "d3c8544e"

HKEY_CURRENT_USER\Software\Afqteuv
W3_127 = "d2cb28"

HKEY_CURRENT_USER\Software\Afqteuv
W4_127 = "d3c84229"

HKEY_CURRENT_USER\Software\Afqteuv
W1_128 = "d9fee23e"

HKEY_CURRENT_USER\Software\Afqteuv
W2_128 = "3634b63"

HKEY_CURRENT_USER\Software\Afqteuv
W3_128 = "3737c1a9"

HKEY_CURRENT_USER\Software\Afqteuv
W4_128 = "3634ab8"

HKEY_CURRENT_USER\Software\Afqteuv
W1_129 = "9bc6bba"

HKEY_CURRENT_USER\Software\Afqteuv
W2_129 = "98a19be"

HKEY_CURRENT_USER\Software\Afqteuv
W3_129 = "99a27efe"

HKEY_CURRENT_USER\Software\Afqteuv
W4_129 = "98a114d7"

HKEY_CURRENT_USER\Software\Afqteuv
W1_130 = "b2472843"

HKEY_CURRENT_USER\Software\Afqteuv
W2_130 = "fbd69c"

HKEY_CURRENT_USER\Software\Afqteuv
W3_130 = "fae147"

HKEY_CURRENT_USER\Software\Afqteuv
W4_130 = "fbd7e2e"

HKEY_CURRENT_USER\Software\Afqteuv
W1_131 = "e6f45"

HKEY_CURRENT_USER\Software\Afqteuv
W2_131 = "5d79fc7a"

HKEY_CURRENT_USER\Software\Afqteuv
W3_131 = "5c7a8dac"

HKEY_CURRENT_USER\Software\Afqteuv
W4_131 = "5d79e785"

HKEY_CURRENT_USER\Software\Afqteuv
W1_132 = "5ceeeb1"

HKEY_CURRENT_USER\Software\Afqteuv
W2_132 = "bfe64cad"

HKEY_CURRENT_USER\Software\Afqteuv
W3_132 = "bee53af5"

HKEY_CURRENT_USER\Software\Afqteuv
W4_132 = "bfe65dc"

HKEY_CURRENT_USER\Software\Afqteuv
W1_133 = "6672c86e"

HKEY_CURRENT_USER\Software\Afqteuv
W2_133 = "2252a4bf"

HKEY_CURRENT_USER\Software\Afqteuv
W3_133 = "2351d1a"

HKEY_CURRENT_USER\Software\Afqteuv
W4_133 = "2252ba33"

HKEY_CURRENT_USER\Software\Afqteuv
W1_134 = "9852fd3"

HKEY_CURRENT_USER\Software\Afqteuv
W2_134 = "84bf3b61"

HKEY_CURRENT_USER\Software\Afqteuv
W3_134 = "85bc49a3"

HKEY_CURRENT_USER\Software\Afqteuv
W4_134 = "84bf238a"

HKEY_CURRENT_USER\Software\Afqteuv
W1_135 = "ee44ffdb"

HKEY_CURRENT_USER\Software\Afqteuv
W2_135 = "e72b9c5"

HKEY_CURRENT_USER\Software\Afqteuv
W3_135 = "e628e6c8"

HKEY_CURRENT_USER\Software\Afqteuv
W4_135 = "e72b8ce1"

HKEY_CURRENT_USER\Software\Afqteuv
W1_136 = "b8ceec6d"

HKEY_CURRENT_USER\Software\Afqteuv
W2_136 = "4997ea5d"

HKEY_CURRENT_USER\Software\Afqteuv
W3_136 = "48949c11"

HKEY_CURRENT_USER\Software\Afqteuv
W4_136 = "4997f638"

HKEY_CURRENT_USER\Software\Afqteuv
W1_137 = "6b9b455"

HKEY_CURRENT_USER\Software\Afqteuv
W2_137 = "ac4494e"

HKEY_CURRENT_USER\Software\Afqteuv
W3_137 = "ad735a6"

HKEY_CURRENT_USER\Software\Afqteuv
W4_137 = "ac45f8f"

HKEY_CURRENT_USER\Software\Afqteuv
W1_138 = "3b16e2bf"

HKEY_CURRENT_USER\Software\Afqteuv
W2_138 = "e7d15"

HKEY_CURRENT_USER\Software\Afqteuv
W3_138 = "f73a2cf"

HKEY_CURRENT_USER\Software\Afqteuv
W4_138 = "e7c8e6"

HKEY_CURRENT_USER\Software\Afqteuv
W1_139 = "f6db63"

HKEY_CURRENT_USER\Software\Afqteuv
W2_139 = "7dd11ec"

HKEY_CURRENT_USER\Software\Afqteuv
W3_139 = "71de5814"

HKEY_CURRENT_USER\Software\Afqteuv
W4_139 = "7dd323d"

HKEY_CURRENT_USER\Software\Afqteuv
W1_140 = "7fa6af4d"

HKEY_CURRENT_USER\Software\Afqteuv
W2_140 = "d349bb8f"

HKEY_CURRENT_USER\Software\Afqteuv
W3_140 = "d24af1bd"

HKEY_CURRENT_USER\Software\Afqteuv
W4_140 = "d3499b94"

HKEY_CURRENT_USER\Software\Afqteuv
W1_141 = "d5a7b5b5"

HKEY_CURRENT_USER\Software\Afqteuv
W2_141 = "35b61265"

HKEY_CURRENT_USER\Software\Afqteuv
W3_141 = "34b56ec2"

HKEY_CURRENT_USER\Software\Afqteuv
W4_141 = "35b64eb"

HKEY_CURRENT_USER\Software\Afqteuv
W1_142 = "d64b41b"

HKEY_CURRENT_USER\Software\Afqteuv
W2_142 = "982272e4"

HKEY_CURRENT_USER\Software\Afqteuv
W3_142 = "992146b"

HKEY_CURRENT_USER\Software\Afqteuv
W4_142 = "98226e42"

HKEY_CURRENT_USER\Software\Afqteuv
W1_143 = "dc59a8ef"

HKEY_CURRENT_USER\Software\Afqteuv
W2_143 = "fa8eccf6"

HKEY_CURRENT_USER\Software\Afqteuv
W3_143 = "fb8dbdb"

HKEY_CURRENT_USER\Software\Afqteuv
W4_143 = "fa8ed799"

HKEY_CURRENT_USER\Software\Afqteuv
W1_144 = "561638a5"

HKEY_CURRENT_USER\Software\Afqteuv
W2_144 = "5cfb5aef"

HKEY_CURRENT_USER\Software\Afqteuv
W3_144 = "5df82ad9"

HKEY_CURRENT_USER\Software\Afqteuv
W4_144 = "5cfb4f"

HKEY_CURRENT_USER\Software\Afqteuv
W1_145 = "c86e4d19"

HKEY_CURRENT_USER\Software\Afqteuv
W2_145 = "bf67bd44"

HKEY_CURRENT_USER\Software\Afqteuv
W3_145 = "be64c6e"

HKEY_CURRENT_USER\Software\Afqteuv
W4_145 = "bf67aa47"

HKEY_CURRENT_USER\Software\Afqteuv
W1_146 = "d4f64955"

HKEY_CURRENT_USER\Software\Afqteuv
W2_146 = "21d488c"

HKEY_CURRENT_USER\Software\Afqteuv
W3_146 = "2d779b7"

HKEY_CURRENT_USER\Software\Afqteuv
W4_146 = "21d4139e"

HKEY_CURRENT_USER\Software\Afqteuv
W1_147 = "15f92b98"

HKEY_CURRENT_USER\Software\Afqteuv
W2_147 = "8446298"

HKEY_CURRENT_USER\Software\Afqteuv
W3_147 = "854316dc"

HKEY_CURRENT_USER\Software\Afqteuv
W4_147 = "8447cf5"

HKEY_CURRENT_USER\Software\Afqteuv
W1_148 = "6111991a"

HKEY_CURRENT_USER\Software\Afqteuv
W2_148 = "e6acfccb"

HKEY_CURRENT_USER\Software\Afqteuv
W3_148 = "e7af8c65"

HKEY_CURRENT_USER\Software\Afqteuv
W4_148 = "e6ace64c"

HKEY_CURRENT_USER\Software\Afqteuv
W1_149 = "8db361fa"

HKEY_CURRENT_USER\Software\Afqteuv
W2_149 = "491959ee"

HKEY_CURRENT_USER\Software\Afqteuv
W3_149 = "481a258a"

HKEY_CURRENT_USER\Software\Afqteuv
W4_149 = "49194fa3"

HKEY_CURRENT_USER\Software\Afqteuv
W1_150 = "b452512e"

HKEY_CURRENT_USER\Software\Afqteuv
W2_150 = "ab85a5"

HKEY_CURRENT_USER\Software\Afqteuv
W3_150 = "aa86d2d3"

HKEY_CURRENT_USER\Software\Afqteuv
W4_150 = "ab85b8fa"

HKEY_CURRENT_USER\Software\Afqteuv
W1_151 = "ff24e"

HKEY_CURRENT_USER\Software\Afqteuv
W2_151 = "df2274"

HKEY_CURRENT_USER\Software\Afqteuv
W3_151 = "cf14878"

HKEY_CURRENT_USER\Software\Afqteuv
W4_151 = "df22251"

HKEY_CURRENT_USER\Software\Afqteuv
W1_152 = "3a5f39f5"

HKEY_CURRENT_USER\Software\Afqteuv
W2_152 = "75e974f"

HKEY_CURRENT_USER\Software\Afqteuv
W3_152 = "715de181"

HKEY_CURRENT_USER\Software\Afqteuv
W4_152 = "75e8ba8"

HKEY_CURRENT_USER\Software\Afqteuv
W1_153 = "b31d7b82"

HKEY_CURRENT_USER\Software\Afqteuv
W2_153 = "d2cae89a"

HKEY_CURRENT_USER\Software\Afqteuv
W3_153 = "d3c99ed6"

HKEY_CURRENT_USER\Software\Afqteuv
W4_153 = "d2caf4ff"

HKEY_CURRENT_USER\Software\Afqteuv
W1_154 = "f44e9e8"

HKEY_CURRENT_USER\Software\Afqteuv
W2_154 = "353747cc"

HKEY_CURRENT_USER\Software\Afqteuv
W3_154 = "3434347f"

HKEY_CURRENT_USER\Software\Afqteuv
W4_154 = "35375e56"

HKEY_CURRENT_USER\Software\Afqteuv
W1_155 = "8cbcd216"

HKEY_CURRENT_USER\Software\Afqteuv
W2_155 = "97a3d9a"

HKEY_CURRENT_USER\Software\Afqteuv
W3_155 = "96aad84"

HKEY_CURRENT_USER\Software\Afqteuv
W4_155 = "97a3c7ad"

HKEY_CURRENT_USER\Software\Afqteuv
W1_156 = "cee9fc7"

HKEY_CURRENT_USER\Software\Afqteuv
W2_156 = "fa12f28"

HKEY_CURRENT_USER\Software\Afqteuv
W3_156 = "fb135b2d"

HKEY_CURRENT_USER\Software\Afqteuv
W4_156 = "fa1314"

HKEY_CURRENT_USER\Software\Afqteuv
W1_157 = "d7578f6"

HKEY_CURRENT_USER\Software\Afqteuv
W2_157 = "5c7cb59c"

HKEY_CURRENT_USER\Software\Afqteuv
W3_157 = "5d7ff72"

HKEY_CURRENT_USER\Software\Afqteuv
W4_157 = "5c7c9a5b"

HKEY_CURRENT_USER\Software\Afqteuv
W1_158 = "98c79e7"

HKEY_CURRENT_USER\Software\Afqteuv
W2_158 = "bee91515"

HKEY_CURRENT_USER\Software\Afqteuv
W3_158 = "bfea699b"

HKEY_CURRENT_USER\Software\Afqteuv
W4_158 = "bee93b2"

HKEY_CURRENT_USER\Software\Afqteuv
W1_159 = "91c4dca"

HKEY_CURRENT_USER\Software\Afqteuv
W2_159 = "21557676"

HKEY_CURRENT_USER\Software\Afqteuv
W3_159 = "25672"

HKEY_CURRENT_USER\Software\Afqteuv
W4_159 = "21556d9"

HKEY_CURRENT_USER\Software\Afqteuv
W1_160 = "962378a3"

HKEY_CURRENT_USER\Software\Afqteuv
W2_160 = "83c1f4e3"

HKEY_CURRENT_USER\Software\Afqteuv
W3_160 = "82c2bc49"

HKEY_CURRENT_USER\Software\Afqteuv
W4_160 = "83c1d66"

HKEY_CURRENT_USER\Software\Afqteuv
W1_161 = "99ca9bce"

HKEY_CURRENT_USER\Software\Afqteuv
W2_161 = "e62e1c66"

HKEY_CURRENT_USER\Software\Afqteuv
W3_161 = "e72d559e"

HKEY_CURRENT_USER\Software\Afqteuv
W4_161 = "e62e3fb7"

HKEY_CURRENT_USER\Software\Afqteuv
W1_162 = "67aebd35"

HKEY_CURRENT_USER\Software\Afqteuv
W2_162 = "489abfcb"

HKEY_CURRENT_USER\Software\Afqteuv
W3_162 = "4999c327"

HKEY_CURRENT_USER\Software\Afqteuv
W4_162 = "489aa9e"

HKEY_CURRENT_USER\Software\Afqteuv
W1_163 = "eae9f26"

HKEY_CURRENT_USER\Software\Afqteuv
W2_163 = "ab73148"

HKEY_CURRENT_USER\Software\Afqteuv
W3_163 = "aa4784c"

HKEY_CURRENT_USER\Software\Afqteuv
W4_163 = "ab71265"

HKEY_CURRENT_USER\Software\Afqteuv
W1_164 = "944b18e"

HKEY_CURRENT_USER\Software\Afqteuv
W2_164 = "d7367b3"

HKEY_CURRENT_USER\Software\Afqteuv
W3_164 = "c71195"

HKEY_CURRENT_USER\Software\Afqteuv
W4_164 = "d737bbc"

HKEY_CURRENT_USER\Software\Afqteuv
W1_165 = "a3e7845d"

HKEY_CURRENT_USER\Software\Afqteuv
W2_165 = "6fdff25a"

HKEY_CURRENT_USER\Software\Afqteuv
W3_165 = "6edc8f3a"

HKEY_CURRENT_USER\Software\Afqteuv
W4_165 = "6fdfe513"

HKEY_CURRENT_USER\Software\Afqteuv
W1_166 = "e8433d33"

HKEY_CURRENT_USER\Software\Afqteuv
W2_166 = "d24c5b"

HKEY_CURRENT_USER\Software\Afqteuv
W3_166 = "d34f2443"

HKEY_CURRENT_USER\Software\Afqteuv
W4_166 = "d24c4e6a"

HKEY_CURRENT_USER\Software\Afqteuv
W1_167 = "4f3dfb14"

HKEY_CURRENT_USER\Software\Afqteuv
W2_167 = "34b892b"

HKEY_CURRENT_USER\Software\Afqteuv
W3_167 = "35bbdde8"

HKEY_CURRENT_USER\Software\Afqteuv
W4_167 = "34b8b7c1"

HKEY_CURRENT_USER\Software\Afqteuv
W1_168 = "29de7b56"

HKEY_CURRENT_USER\Software\Afqteuv
W2_168 = "972521b"

HKEY_CURRENT_USER\Software\Afqteuv
W3_168 = "96264b31"

HKEY_CURRENT_USER\Software\Afqteuv
W4_168 = "97252118"

HKEY_CURRENT_USER\Software\Afqteuv
W1_169 = "c8cb6eac"

HKEY_CURRENT_USER\Software\Afqteuv
W2_169 = "f99197ca"

HKEY_CURRENT_USER\Software\Afqteuv
W3_169 = "f892e46"

HKEY_CURRENT_USER\Software\Afqteuv
W4_169 = "f9918a6f"

HKEY_CURRENT_USER\Software\Afqteuv
W1_170 = "916f429b"

HKEY_CURRENT_USER\Software\Afqteuv
W2_170 = "5bfdeed5"

HKEY_CURRENT_USER\Software\Afqteuv
W3_170 = "5afe99ef"

HKEY_CURRENT_USER\Software\Afqteuv
W4_170 = "5bfdf3c6"

HKEY_CURRENT_USER\Software\Afqteuv
W1_171 = "d3577544"

HKEY_CURRENT_USER\Software\Afqteuv
W2_171 = "be6a7cfc"

HKEY_CURRENT_USER\Software\Afqteuv
W3_171 = "bf693734"

HKEY_CURRENT_USER\Software\Afqteuv
W4_171 = "be6a5d1d"

HKEY_CURRENT_USER\Software\Afqteuv
W1_172 = "966b47c8"

HKEY_CURRENT_USER\Software\Afqteuv
W2_172 = "2d6d42e"

HKEY_CURRENT_USER\Software\Afqteuv
W3_172 = "21d5ac5d"

HKEY_CURRENT_USER\Software\Afqteuv
W4_172 = "2d6c674"

HKEY_CURRENT_USER\Software\Afqteuv
W1_173 = "32e4c9c"

HKEY_CURRENT_USER\Software\Afqteuv
W2_173 = "834336a4"

HKEY_CURRENT_USER\Software\Afqteuv
W3_173 = "82445e2"

HKEY_CURRENT_USER\Software\Afqteuv
W4_173 = "83432fcb"

HKEY_CURRENT_USER\Software\Afqteuv
W1_174 = "e784e566"

HKEY_CURRENT_USER\Software\Afqteuv
W2_174 = "e5af8429"

HKEY_CURRENT_USER\Software\Afqteuv
W3_174 = "e4acf3b"

HKEY_CURRENT_USER\Software\Afqteuv
W4_174 = "e5af9922"

HKEY_CURRENT_USER\Software\Afqteuv
W1_175 = "8c9da7a4"

HKEY_CURRENT_USER\Software\Afqteuv
W2_175 = "481c1824"

HKEY_CURRENT_USER\Software\Afqteuv
W3_175 = "491f685"

HKEY_CURRENT_USER\Software\Afqteuv
W4_175 = "481c279"

HKEY_CURRENT_USER\Software\Afqteuv
W1_176 = "8a2c5b8"

HKEY_CURRENT_USER\Software\Afqteuv
W2_176 = "aa88776e"

HKEY_CURRENT_USER\Software\Afqteuv
W3_176 = "ab8b1f9"

HKEY_CURRENT_USER\Software\Afqteuv
W4_176 = "aa886bd"

HKEY_CURRENT_USER\Software\Afqteuv
W1_177 = "686ba568"

HKEY_CURRENT_USER\Software\Afqteuv
W2_177 = "cf4cc5"

HKEY_CURRENT_USER\Software\Afqteuv
W3_177 = "df7bfe"

HKEY_CURRENT_USER\Software\Afqteuv
W4_177 = "cf4d527"

HKEY_CURRENT_USER\Software\Afqteuv
W1_178 = "3657a4"

HKEY_CURRENT_USER\Software\Afqteuv
W2_178 = "6f612b29"

HKEY_CURRENT_USER\Software\Afqteuv
W3_178 = "6e625457"

HKEY_CURRENT_USER\Software\Afqteuv
W4_178 = "6f613e7e"

HKEY_CURRENT_USER\Software\Afqteuv
W1_179 = "496daa83"

HKEY_CURRENT_USER\Software\Afqteuv
W2_179 = "d1cdb1b2"

HKEY_CURRENT_USER\Software\Afqteuv
W3_179 = "dcecdfc"

HKEY_CURRENT_USER\Software\Afqteuv
W4_179 = "d1cda7d5"

HKEY_CURRENT_USER\Software\Afqteuv
W1_180 = "5e43e75"

HKEY_CURRENT_USER\Software\Afqteuv
W2_180 = "343a773"

HKEY_CURRENT_USER\Software\Afqteuv
W3_180 = "35397b5"

HKEY_CURRENT_USER\Software\Afqteuv
W4_180 = "343a112c"

HKEY_CURRENT_USER\Software\Afqteuv
W1_181 = "c1715eda"

HKEY_CURRENT_USER\Software\Afqteuv
W2_181 = "96a661a4"

HKEY_CURRENT_USER\Software\Afqteuv
W3_181 = "97a51aa"

HKEY_CURRENT_USER\Software\Afqteuv
W4_181 = "96a67a83"

HKEY_CURRENT_USER\Software\Afqteuv
W1_182 = "6b59eeb9"

HKEY_CURRENT_USER\Software\Afqteuv
W2_182 = "f912fd85"

HKEY_CURRENT_USER\Software\Afqteuv
W3_182 = "f81189f3"

HKEY_CURRENT_USER\Software\Afqteuv
W4_182 = "f912e3da"

HKEY_CURRENT_USER\Software\Afqteuv
W1_183 = "d99661e2"

HKEY_CURRENT_USER\Software\Afqteuv
W2_183 = "5b7f533c"

HKEY_CURRENT_USER\Software\Afqteuv
W3_183 = "5a7c2718"

HKEY_CURRENT_USER\Software\Afqteuv
W4_183 = "5b7f4d31"

HKEY_CURRENT_USER\Software\Afqteuv
W1_184 = "c2c1dcb"

HKEY_CURRENT_USER\Software\Afqteuv
W2_184 = "bdeba8f"

HKEY_CURRENT_USER\Software\Afqteuv
W3_184 = "bce8dca1"

HKEY_CURRENT_USER\Software\Afqteuv
W4_184 = "bdebb688"

HKEY_CURRENT_USER\Software\Afqteuv
W1_185 = "b96e739"

HKEY_CURRENT_USER\Software\Afqteuv
W2_185 = "25887e"

HKEY_CURRENT_USER\Software\Afqteuv
W3_185 = "215b75f6"

HKEY_CURRENT_USER\Software\Afqteuv
W4_185 = "2581fdf"

HKEY_CURRENT_USER\Software\Afqteuv
W1_186 = "196d3d69"

HKEY_CURRENT_USER\Software\Afqteuv
W2_186 = "82c49c5c"

HKEY_CURRENT_USER\Software\Afqteuv
W3_186 = "83c7e31f"

HKEY_CURRENT_USER\Software\Afqteuv
W4_186 = "82c48936"

HKEY_CURRENT_USER\Software\Afqteuv
W1_187 = "8dba88d8"

HKEY_CURRENT_USER\Software\Afqteuv
W2_187 = "e53ec62"

HKEY_CURRENT_USER\Software\Afqteuv
W3_187 = "e43398a4"

HKEY_CURRENT_USER\Software\Afqteuv
W4_187 = "e53f28d"

HKEY_CURRENT_USER\Software\Afqteuv
W1_188 = "3157a8b"

HKEY_CURRENT_USER\Software\Afqteuv
W2_188 = "479d79d3"

HKEY_CURRENT_USER\Software\Afqteuv
W3_188 = "469e31cd"

HKEY_CURRENT_USER\Software\Afqteuv
W4_188 = "479d5be4"

HKEY_CURRENT_USER\Software\Afqteuv
W1_189 = "85c93575"

HKEY_CURRENT_USER\Software\Afqteuv
W2_189 = "aa9ded8"

HKEY_CURRENT_USER\Software\Afqteuv
W3_189 = "abaaf12"

HKEY_CURRENT_USER\Software\Afqteuv
W4_189 = "aa9c53b"

HKEY_CURRENT_USER\Software\Afqteuv
W1_190 = "2257451"

HKEY_CURRENT_USER\Software\Afqteuv
W2_190 = "c763ad"

HKEY_CURRENT_USER\Software\Afqteuv
W3_190 = "d7544bb"

HKEY_CURRENT_USER\Software\Afqteuv
W4_190 = "c762e92"

HKEY_CURRENT_USER\Software\Afqteuv
W1_191 = "7ae3e4b"

HKEY_CURRENT_USER\Software\Afqteuv
W2_191 = "6ee28f6e"

HKEY_CURRENT_USER\Software\Afqteuv
W3_191 = "6fe1fdc"

HKEY_CURRENT_USER\Software\Afqteuv
W4_191 = "6ee297e9"

HKEY_CURRENT_USER\Software\Afqteuv
W1_192 = "24fd7a16"

HKEY_CURRENT_USER\Software\Afqteuv
W2_192 = "d14f1d87"

HKEY_CURRENT_USER\Software\Afqteuv
W3_192 = "d4c6b69"

HKEY_CURRENT_USER\Software\Afqteuv
W4_192 = "d14f14"

HKEY_CURRENT_USER\Software\Afqteuv
W1_193 = "721c4ace"

HKEY_CURRENT_USER\Software\Afqteuv
W2_193 = "33bb776a"

HKEY_CURRENT_USER\Software\Afqteuv
W3_193 = "32b8be"

HKEY_CURRENT_USER\Software\Afqteuv
W4_193 = "33bb6a97"

HKEY_CURRENT_USER\Software\Afqteuv
W1_194 = "8b13d355"

HKEY_CURRENT_USER\Software\Afqteuv
W2_194 = "9627f2b"

HKEY_CURRENT_USER\Software\Afqteuv
W3_194 = "9724b9c7"

HKEY_CURRENT_USER\Software\Afqteuv
W4_194 = "9627d3ee"

HKEY_CURRENT_USER\Software\Afqteuv
W1_195 = "accea2cd"

HKEY_CURRENT_USER\Software\Afqteuv
W2_195 = "f89425c2"

HKEY_CURRENT_USER\Software\Afqteuv
W3_195 = "f997576c"

HKEY_CURRENT_USER\Software\Afqteuv
W4_195 = "f8943d45"

HKEY_CURRENT_USER\Software\Afqteuv
W1_196 = "42a176d6"

HKEY_CURRENT_USER\Software\Afqteuv
W2_196 = "5bbd8e"

HKEY_CURRENT_USER\Software\Afqteuv
W3_196 = "5a3ccb5"

HKEY_CURRENT_USER\Software\Afqteuv
W4_196 = "5ba69c"

HKEY_CURRENT_USER\Software\Afqteuv
W1_197 = "2fc7fae"

HKEY_CURRENT_USER\Software\Afqteuv
W2_197 = "bd6d19be"

HKEY_CURRENT_USER\Software\Afqteuv
W3_197 = "bc6e65da"

HKEY_CURRENT_USER\Software\Afqteuv
W4_197 = "bd6dff3"

HKEY_CURRENT_USER\Software\Afqteuv
W1_198 = "6a7a52"

HKEY_CURRENT_USER\Software\Afqteuv
W2_198 = "1fd96572"

HKEY_CURRENT_USER\Software\Afqteuv
W3_198 = "1eda1363"

HKEY_CURRENT_USER\Software\Afqteuv
W4_198 = "1fd9794a"

HKEY_CURRENT_USER\Software\Afqteuv
W1_199 = "4876a7f1"

HKEY_CURRENT_USER\Software\Afqteuv
W2_199 = "8245fe99"

HKEY_CURRENT_USER\Software\Afqteuv
W3_199 = "83468888"

HKEY_CURRENT_USER\Software\Afqteuv
W4_199 = "8245e2a1"

HKEY_CURRENT_USER\Software\Afqteuv
W1_200 = "5f793c57"

HKEY_CURRENT_USER\Software\Afqteuv
W2_200 = "e4b25d4"

HKEY_CURRENT_USER\Software\Afqteuv
W3_200 = "e5b121d1"

HKEY_CURRENT_USER\Software\Afqteuv
W4_200 = "e4b24bf8"

HKEY_CURRENT_USER\Software\Afqteuv
W1_201 = "e95bc716"

HKEY_CURRENT_USER\Software\Afqteuv
W2_201 = "471eae3c"

HKEY_CURRENT_USER\Software\Afqteuv
W3_201 = "461ddf66"

HKEY_CURRENT_USER\Software\Afqteuv
W4_201 = "471eb54f"

HKEY_CURRENT_USER\Software\Afqteuv
W1_202 = "3661df2"

HKEY_CURRENT_USER\Software\Afqteuv
W2_202 = "a98b81"

HKEY_CURRENT_USER\Software\Afqteuv
W3_202 = "a888748f"

HKEY_CURRENT_USER\Software\Afqteuv
W4_202 = "a98b1ea6"

HKEY_CURRENT_USER\Software\Afqteuv
W1_203 = "293aa8a4"

HKEY_CURRENT_USER\Software\Afqteuv
W2_203 = "bf796c"

HKEY_CURRENT_USER\Software\Afqteuv
W3_203 = "af4edd4"

HKEY_CURRENT_USER\Software\Afqteuv
W4_203 = "bf787fd"

HKEY_CURRENT_USER\Software\Afqteuv
W1_204 = "e3f981"

HKEY_CURRENT_USER\Software\Afqteuv
W2_204 = "6e63ec55"

HKEY_CURRENT_USER\Software\Afqteuv
W3_204 = "6f69b7d"

HKEY_CURRENT_USER\Software\Afqteuv
W4_204 = "6e63f154"

HKEY_CURRENT_USER\Software\Afqteuv
W1_205 = "bb28f2"

HKEY_CURRENT_USER\Software\Afqteuv
W2_205 = "dd4959"

HKEY_CURRENT_USER\Software\Afqteuv
W3_205 = "d1d3382"

HKEY_CURRENT_USER\Software\Afqteuv
W4_205 = "dd5aab"

HKEY_CURRENT_USER\Software\Afqteuv
W1_206 = "291ebe42"

HKEY_CURRENT_USER\Software\Afqteuv
W2_206 = "333ce1c8"

HKEY_CURRENT_USER\Software\Afqteuv
W3_206 = "323fae2b"

HKEY_CURRENT_USER\Software\Afqteuv
W4_206 = "333cc42"

HKEY_CURRENT_USER\Software\Afqteuv
W1_207 = "f7cc48d"

HKEY_CURRENT_USER\Software\Afqteuv
W2_207 = "95a9d1b"

HKEY_CURRENT_USER\Software\Afqteuv
W3_207 = "94aa477"

HKEY_CURRENT_USER\Software\Afqteuv
W4_207 = "95a92d59"

HKEY_CURRENT_USER\Software\Afqteuv
W1_208 = "115e5874"

HKEY_CURRENT_USER\Software\Afqteuv
W2_208 = "f8158bc"

HKEY_CURRENT_USER\Software\Afqteuv
W3_208 = "f916fc99"

HKEY_CURRENT_USER\Software\Afqteuv
W4_208 = "f81596b"

HKEY_CURRENT_USER\Software\Afqteuv
W1_209 = "fe6fbdb9"

HKEY_CURRENT_USER\Software\Afqteuv
W2_209 = "5a8215aa"

HKEY_CURRENT_USER\Software\Afqteuv
W3_209 = "5b816a2e"

HKEY_CURRENT_USER\Software\Afqteuv
W4_209 = "5a827"

HKEY_CURRENT_USER\Software\Afqteuv
W1_210 = "722465c"

HKEY_CURRENT_USER\Software\Afqteuv
W2_210 = "bcee73f5"

HKEY_CURRENT_USER\Software\Afqteuv
W3_210 = "bded377"

HKEY_CURRENT_USER\Software\Afqteuv
W4_210 = "bcee695e"

HKEY_CURRENT_USER\Software\Afqteuv
W1_211 = "884b848f"

HKEY_CURRENT_USER\Software\Afqteuv
W2_211 = "1f5accb2"

HKEY_CURRENT_USER\Software\Afqteuv
W3_211 = "1e59b89c"

HKEY_CURRENT_USER\Software\Afqteuv
W4_211 = "1f5ad2b5"

HKEY_CURRENT_USER\Software\Afqteuv
W1_212 = "5584bf7a"

HKEY_CURRENT_USER\Software\Afqteuv
W2_212 = "81c727b7"

HKEY_CURRENT_USER\Software\Afqteuv
W3_212 = "8c45625"

HKEY_CURRENT_USER\Software\Afqteuv
W4_212 = "81c73cc"

HKEY_CURRENT_USER\Software\Afqteuv
W1_213 = "5af8cdde"

HKEY_CURRENT_USER\Software\Afqteuv
W2_213 = "e433bb52"

HKEY_CURRENT_USER\Software\Afqteuv
W3_213 = "e53cf4a"

HKEY_CURRENT_USER\Software\Afqteuv
W4_213 = "e433a563"

HKEY_CURRENT_USER\Software\Afqteuv
W1_214 = "7687fe7"

HKEY_CURRENT_USER\Software\Afqteuv
W2_214 = "46a15d3"

HKEY_CURRENT_USER\Software\Afqteuv
W3_214 = "47a36493"

HKEY_CURRENT_USER\Software\Afqteuv
W4_214 = "46aeba"

HKEY_CURRENT_USER\Software\Afqteuv
W1_215 = "1ce747"

HKEY_CURRENT_USER\Software\Afqteuv
W2_215 = "a9c6e32"

HKEY_CURRENT_USER\Software\Afqteuv
W3_215 = "a8f1238"

HKEY_CURRENT_USER\Software\Afqteuv
W4_215 = "a9c7811"

HKEY_CURRENT_USER\Software\Afqteuv
W1_216 = "3fec825"

HKEY_CURRENT_USER\Software\Afqteuv
W2_216 = "b78fb74"

HKEY_CURRENT_USER\Software\Afqteuv
W3_216 = "a7b8b41"

HKEY_CURRENT_USER\Software\Afqteuv
W4_216 = "b78e168"

HKEY_CURRENT_USER\Software\Afqteuv
W1_217 = "3c222e"

HKEY_CURRENT_USER\Software\Afqteuv
W2_217 = "6de557d6"

HKEY_CURRENT_USER\Software\Afqteuv
W3_217 = "6ce6296"

HKEY_CURRENT_USER\Software\Afqteuv
W4_217 = "6de54abf"

HKEY_CURRENT_USER\Software\Afqteuv
W1_218 = "2c586b6"

HKEY_CURRENT_USER\Software\Afqteuv
W2_218 = "d51abd6"

HKEY_CURRENT_USER\Software\Afqteuv
W3_218 = "d152de3f"

HKEY_CURRENT_USER\Software\Afqteuv
W4_218 = "d51b416"

HKEY_CURRENT_USER\Software\Afqteuv
W1_219 = "6deb6738"

HKEY_CURRENT_USER\Software\Afqteuv
W2_219 = "32be38a7"

HKEY_CURRENT_USER\Software\Afqteuv
W3_219 = "33bd7744"

HKEY_CURRENT_USER\Software\Afqteuv
W4_219 = "32be1d6d"

HKEY_CURRENT_USER\Software\Afqteuv
W1_220 = "2e675d"

HKEY_CURRENT_USER\Software\Afqteuv
W2_220 = "952a9165"

HKEY_CURRENT_USER\Software\Afqteuv
W3_220 = "9429eced"

HKEY_CURRENT_USER\Software\Afqteuv
W4_220 = "952a86c4"

HKEY_CURRENT_USER\Software\Afqteuv
W1_221 = "4f788246"

HKEY_CURRENT_USER\Software\Afqteuv
W2_221 = "f796e6c"

HKEY_CURRENT_USER\Software\Afqteuv
W3_221 = "f6959a32"

HKEY_CURRENT_USER\Software\Afqteuv
W4_221 = "f796f1b"

HKEY_CURRENT_USER\Software\Afqteuv
W1_222 = "c719383c"

HKEY_CURRENT_USER\Software\Afqteuv
W2_222 = "5a34db5"

HKEY_CURRENT_USER\Software\Afqteuv
W3_222 = "5b335b"

HKEY_CURRENT_USER\Software\Afqteuv
W4_222 = "5a35972"

HKEY_CURRENT_USER\Software\Afqteuv
W1_223 = "52e2891"

HKEY_CURRENT_USER\Software\Afqteuv
W2_223 = "bc6fdaf2"

HKEY_CURRENT_USER\Software\Afqteuv
W3_223 = "bd6ca8e"

HKEY_CURRENT_USER\Software\Afqteuv
W4_223 = "bc6fc2c9"

HKEY_CURRENT_USER\Software\Afqteuv
W1_224 = "adb753e8"

HKEY_CURRENT_USER\Software\Afqteuv
W2_224 = "1edc3178"

HKEY_CURRENT_USER\Software\Afqteuv
W3_224 = "1fdf469"

HKEY_CURRENT_USER\Software\Afqteuv
W4_224 = "1edc2c2"

HKEY_CURRENT_USER\Software\Afqteuv
W1_225 = "474ea2b"

HKEY_CURRENT_USER\Software\Afqteuv
W2_225 = "81488e65"

HKEY_CURRENT_USER\Software\Afqteuv
W3_225 = "84bff5e"

HKEY_CURRENT_USER\Software\Afqteuv
W4_225 = "81489577"

HKEY_CURRENT_USER\Software\Afqteuv
W1_226 = "8b433f7"

HKEY_CURRENT_USER\Software\Afqteuv
W2_226 = "e3b4e5ee"

HKEY_CURRENT_USER\Software\Afqteuv
W3_226 = "e2b794e7"

HKEY_CURRENT_USER\Software\Afqteuv
W4_226 = "e3b4fece"

HKEY_CURRENT_USER\Software\Afqteuv
W1_227 = "6d2ab59"

HKEY_CURRENT_USER\Software\Afqteuv
W2_227 = "462175ef"

HKEY_CURRENT_USER\Software\Afqteuv
W3_227 = "47222c"

HKEY_CURRENT_USER\Software\Afqteuv
W4_227 = "46216825"

HKEY_CURRENT_USER\Software\Afqteuv
W1_228 = "cce5132"

HKEY_CURRENT_USER\Software\Afqteuv
W2_228 = "a88dcd7d"

HKEY_CURRENT_USER\Software\Afqteuv
W3_228 = "a98ebb55"

HKEY_CURRENT_USER\Software\Afqteuv
W4_228 = "a88dd17c"

HKEY_CURRENT_USER\Software\Afqteuv
W1_229 = "6426cbe"

HKEY_CURRENT_USER\Software\Afqteuv
W2_229 = "afa246"

HKEY_CURRENT_USER\Software\Afqteuv
W3_229 = "bf95fa"

HKEY_CURRENT_USER\Software\Afqteuv
W4_229 = "afa3ad3"

HKEY_CURRENT_USER\Software\Afqteuv
W1_230 = "c5e7f997"

HKEY_CURRENT_USER\Software\Afqteuv
W2_230 = "6d66ba27"

HKEY_CURRENT_USER\Software\Afqteuv
W3_230 = "6c65ce3"

HKEY_CURRENT_USER\Software\Afqteuv
W4_230 = "6d66a42a"

HKEY_CURRENT_USER\Software\Afqteuv
W1_231 = "29c44d58"

HKEY_CURRENT_USER\Software\Afqteuv
W2_231 = "cfd3179d"

HKEY_CURRENT_USER\Software\Afqteuv
W3_231 = "ced67a8"

HKEY_CURRENT_USER\Software\Afqteuv
W4_231 = "cfd3d81"

HKEY_CURRENT_USER\Software\Afqteuv
W1_232 = "77cd39b"

HKEY_CURRENT_USER\Software\Afqteuv
W2_232 = "323f68f4"

HKEY_CURRENT_USER\Software\Afqteuv
W3_232 = "333c1cf1"

HKEY_CURRENT_USER\Software\Afqteuv
W4_232 = "323f76d8"

HKEY_CURRENT_USER\Software\Afqteuv
W1_233 = "8415a95b"

HKEY_CURRENT_USER\Software\Afqteuv
W2_233 = "94abcba"

HKEY_CURRENT_USER\Software\Afqteuv
W3_233 = "95a88a6"

HKEY_CURRENT_USER\Software\Afqteuv
W4_233 = "94abe2f"

HKEY_CURRENT_USER\Software\Afqteuv
W1_234 = "b24632d2"

HKEY_CURRENT_USER\Software\Afqteuv
W2_234 = "f718548d"

HKEY_CURRENT_USER\Software\Afqteuv
W3_234 = "f61b23af"

HKEY_CURRENT_USER\Software\Afqteuv
W4_234 = "f7184986"

HKEY_CURRENT_USER\Software\Afqteuv
W1_235 = "a155e7"

HKEY_CURRENT_USER\Software\Afqteuv
W2_235 = "5984a482"

HKEY_CURRENT_USER\Software\Afqteuv
W3_235 = "5887d8f4"

HKEY_CURRENT_USER\Software\Afqteuv
W4_235 = "5984b2dd"

HKEY_CURRENT_USER\Software\Afqteuv
W1_236 = "b96461"

HKEY_CURRENT_USER\Software\Afqteuv
W2_236 = "bbf12c2"

HKEY_CURRENT_USER\Software\Afqteuv
W3_236 = "baf2761d"

HKEY_CURRENT_USER\Software\Afqteuv
W4_236 = "bbf11c34"

HKEY_CURRENT_USER\Software\Afqteuv
W1_237 = "143df7d2"

HKEY_CURRENT_USER\Software\Afqteuv
W2_237 = "1e5d924c"

HKEY_CURRENT_USER\Software\Afqteuv
W3_237 = "1f5eefa2"

HKEY_CURRENT_USER\Software\Afqteuv
W4_237 = "1e5d858b"

HKEY_CURRENT_USER\Software\Afqteuv
W1_238 = "daf7a796"

HKEY_CURRENT_USER\Software\Afqteuv
W2_238 = "8c9f7fa"

HKEY_CURRENT_USER\Software\Afqteuv
W3_238 = "81ca84cb"

HKEY_CURRENT_USER\Software\Afqteuv
W4_238 = "8c9eee2"

HKEY_CURRENT_USER\Software\Afqteuv
W1_239 = "351d4d2"

HKEY_CURRENT_USER\Software\Afqteuv
W2_239 = "e336746e"

HKEY_CURRENT_USER\Software\Afqteuv
W3_239 = "e235321"

HKEY_CURRENT_USER\Software\Afqteuv
W4_239 = "e3365839"

HKEY_CURRENT_USER\Software\Afqteuv
W1_240 = "e29e1e2"

HKEY_CURRENT_USER\Software\Afqteuv
W2_240 = "45a2e45a"

HKEY_CURRENT_USER\Software\Afqteuv
W3_240 = "44a1abb9"

HKEY_CURRENT_USER\Software\Afqteuv
W4_240 = "45a2c19"

HKEY_CURRENT_USER\Software\Afqteuv
W1_241 = "8fd8ba3e"

HKEY_CURRENT_USER\Software\Afqteuv
W2_241 = "a8f3145"

HKEY_CURRENT_USER\Software\Afqteuv
W3_241 = "a9c4ce"

HKEY_CURRENT_USER\Software\Afqteuv
W4_241 = "a8f2ae7"

HKEY_CURRENT_USER\Software\Afqteuv
W1_242 = "ad1ab667"

HKEY_CURRENT_USER\Software\Afqteuv
W2_242 = "a7b82e9"

HKEY_CURRENT_USER\Software\Afqteuv
W3_242 = "b78fe17"

HKEY_CURRENT_USER\Software\Afqteuv
W4_242 = "a7b943e"

HKEY_CURRENT_USER\Software\Afqteuv
W1_243 = "83fa15cc"

HKEY_CURRENT_USER\Software\Afqteuv
W2_243 = "6ce7e5ae"

HKEY_CURRENT_USER\Software\Afqteuv
W3_243 = "6de497bc"

HKEY_CURRENT_USER\Software\Afqteuv
W4_243 = "6ce7fd95"

ワームは、以下のレジストリ値を変更します。

HKEY_CURRENT_USER\Software\Microsoft\
Windows\CurrentVersion\Explorer\
Advanced
Hidden = "2"

(註：変更前の上記レジストリ値は、「2」となります。)

HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\
Security Center
AntiVirusOverride = "1"

HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\
Security Center
AntiVirusDisableNotify = "1"

HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\
Security Center
FirewallDisableNotify = "1"

HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\
Security Center
FirewallOverride = "1"

HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\
Security Center
UpdatesDisableNotify = "1"

HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\
Windows\CurrentVersion\Explorer\
Advanced\Folder\Hidden\
SHOWALL
CheckedValue = "0"

(註：変更前の上記レジストリ値は、「1」となります。)

ワームは、以下のレジストリ値を追加し、タスクマネージャやレジストリエディタ、フォルダオプションを無効にします。

HKEY_CURRENT_USER\Software\Microsoft\
Windows\CurrentVersion\Policies\
system
DisableTaskMgr = "1"

HKEY_CURRENT_USER\Software\Microsoft\
Windows\CurrentVersion\Policies\
system
DisableRegistryTools = "1"

ワームは、以下のレジストリキーを削除します。

HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\
Control\SafeBoot\Minimal\
AppMgmt

HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\
Control\SafeBoot\Minimal\
Base

HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\
Control\SafeBoot\Minimal\
Boot Bus Extender

HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\
Control\SafeBoot\Minimal\
Boot file system

HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\
Control\SafeBoot\Minimal\
CryptSvc

HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\
Control\SafeBoot\Minimal\
DcomLaunch

HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\
Control\SafeBoot\Minimal\
dmadmin

HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\
Control\SafeBoot\Minimal\
dmboot.sys

HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\
Control\SafeBoot\Minimal\
dmio.sys

HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\
Control\SafeBoot\Minimal\
dmload.sys

HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\
Control\SafeBoot\Minimal\
dmserver

HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\
Control\SafeBoot\Minimal\
EventLog

HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\
Control\SafeBoot\Minimal\
File system

HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\
Control\SafeBoot\Minimal\
Filter

HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\
Control\SafeBoot\Minimal\
HelpSvc

HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\
Control\SafeBoot\Minimal\
Netlogon

HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\
Control\SafeBoot\Minimal\
PCI Configuration

HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\
Control\SafeBoot\Minimal\
PlugPlay

HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\
Control\SafeBoot\Minimal\
PNP Filter

HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\
Control\SafeBoot\Minimal\
Primary disk

HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\
Control\SafeBoot\Minimal\
RpcSs

HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\
Control\SafeBoot\Minimal\
SCSI Class

HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\
Control\SafeBoot\Minimal\
sermouse.sys

HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\
Control\SafeBoot\Minimal\
sr.sys

HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\
Control\SafeBoot\Minimal\
SRService

HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\
Control\SafeBoot\Minimal\
System Bus Extender

HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\
Control\SafeBoot\Minimal\
vga.sys

HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\
Control\SafeBoot\Minimal\
vgasave.sys

HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\
Control\SafeBoot\Minimal\
WinMgmt

HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\
Control\SafeBoot\Minimal\
{36FC9E60-C465-11CF-8056-444553540000}

HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\
Control\SafeBoot\Minimal\
{4D36E965-E325-11CE-BFC1-08002BE10318}

HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\
Control\SafeBoot\Minimal\
{4D36E967-E325-11CE-BFC1-08002BE10318}

HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\
Control\SafeBoot\Minimal\
{4D36E969-E325-11CE-BFC1-08002BE10318}

HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\
Control\SafeBoot\Minimal\
{4D36E96A-E325-11CE-BFC1-08002BE10318}

HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\
Control\SafeBoot\Minimal\
{4D36E96B-E325-11CE-BFC1-08002BE10318}

HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\
Control\SafeBoot\Minimal\
{4D36E96F-E325-11CE-BFC1-08002BE10318}

HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\
Control\SafeBoot\Minimal\
{4D36E977-E325-11CE-BFC1-08002BE10318}

HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\
Control\SafeBoot\Minimal\
{4D36E97B-E325-11CE-BFC1-08002BE10318}

HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\
Control\SafeBoot\Minimal\
{4D36E97D-E325-11CE-BFC1-08002BE10318}

HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\
Control\SafeBoot\Minimal\
{4D36E980-E325-11CE-BFC1-08002BE10318}

HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\
Control\SafeBoot\Minimal\
{71A27CDD-812A-11D0-BEC7-08002BE2092F}

HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\
Control\SafeBoot\Minimal\
{745A17A0-74D3-11D0-B6FE-00A0C90F57DA}

HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\
Control\SafeBoot\Minimal

HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\
Control\SafeBoot\Network\
AFD

HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\
Control\SafeBoot\Network\
AppMgmt

HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\
Control\SafeBoot\Network\
Base

HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\
Control\SafeBoot\Network\
Boot Bus Extender

HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\
Control\SafeBoot\Network\
Boot file system

HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\
Control\SafeBoot\Network\
Browser

HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\
Control\SafeBoot\Network\
CryptSvc

HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\
Control\SafeBoot\Network\
DcomLaunch

HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\
Control\SafeBoot\Network\
Dhcp

HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\
Control\SafeBoot\Network\
dmadmin

HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\
Control\SafeBoot\Network\
dmboot.sys

HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\
Control\SafeBoot\Network\
dmio.sys

HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\
Control\SafeBoot\Network\
dmload.sys

HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\
Control\SafeBoot\Network\
dmserver

HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\
Control\SafeBoot\Network\
DnsCache

HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\
Control\SafeBoot\Network\
EventLog

HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\
Control\SafeBoot\Network\
File system

HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\
Control\SafeBoot\Network\
Filter

HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\
Control\SafeBoot\Network\
HelpSvc

HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\
Control\SafeBoot\Network\
ip6fw.sys

HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\
Control\SafeBoot\Network\
ipnat.sys

HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\
Control\SafeBoot\Network\
LanmanServer

HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\
Control\SafeBoot\Network\
LanmanWorkstation

HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\
Control\SafeBoot\Network\
LmHosts

HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\
Control\SafeBoot\Network\
Messenger

HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\
Control\SafeBoot\Network\
NDIS

HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\
Control\SafeBoot\Network\
NDIS Wrapper

HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\
Control\SafeBoot\Network\
Ndisuio

HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\
Control\SafeBoot\Network\
NetBIOS

HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\
Control\SafeBoot\Network\
NetBIOSGroup

HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\
Control\SafeBoot\Network\
NetBT

HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\
Control\SafeBoot\Network\
NetDDEGroup

HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\
Control\SafeBoot\Network\
Netlogon

HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\
Control\SafeBoot\Network\
NetMan

HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\
Control\SafeBoot\Network\
Network

HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\
Control\SafeBoot\Network\
NetworkProvider

HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\
Control\SafeBoot\Network\
NtLmSsp

HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\
Control\SafeBoot\Network\
PCI Configuration

HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\
Control\SafeBoot\Network\
PlugPlay

HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\
Control\SafeBoot\Network\
PNP Filter

HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\
Control\SafeBoot\Network\
PNP_TDI

HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\
Control\SafeBoot\Network\
Primary disk

HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\
Control\SafeBoot\Network\
rdpcdd.sys

HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\
Control\SafeBoot\Network\
rdpdd.sys

HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\
Control\SafeBoot\Network\
rdpwd.sys

HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\
Control\SafeBoot\Network\
rdsessmgr

HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\
Control\SafeBoot\Network\
RpcSs

HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\
Control\SafeBoot\Network\
SCSI Class

HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\
Control\SafeBoot\Network\
sermouse.sys

HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\
Control\SafeBoot\Network\
SharedAccess

HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\
Control\SafeBoot\Network\
sr.sys

HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\
Control\SafeBoot\Network\
SRService

HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\
Control\SafeBoot\Network\
Streams Drivers

HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\
Control\SafeBoot\Network\
System Bus Extender

HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\
Control\SafeBoot\Network\
Tcpip

HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\
Control\SafeBoot\Network\
TDI

HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\
Control\SafeBoot\Network\
tdpipe.sys

HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\
Control\SafeBoot\Network\
tdtcp.sys

HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\
Control\SafeBoot\Network\
termservice

HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\
Control\SafeBoot\Network\
vga.sys

HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\
Control\SafeBoot\Network\
vgasave.sys

HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\
Control\SafeBoot\Network\
WinMgmt

HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\
Control\SafeBoot\Network\
WZCSVC

HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\
Control\SafeBoot\Network\
{36FC9E60-C465-11CF-8056-444553540000}

HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\
Control\SafeBoot\Network\
{4D36E965-E325-11CE-BFC1-08002BE10318}

HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\
Control\SafeBoot\Network\
{4D36E967-E325-11CE-BFC1-08002BE10318}

HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\
Control\SafeBoot\Network\
{4D36E969-E325-11CE-BFC1-08002BE10318}

HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\
Control\SafeBoot\Network\
{4D36E96A-E325-11CE-BFC1-08002BE10318}

HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\
Control\SafeBoot\Network\
{4D36E96B-E325-11CE-BFC1-08002BE10318}

HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\
Control\SafeBoot\Network\
{4D36E96F-E325-11CE-BFC1-08002BE10318}

HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\
Control\SafeBoot\Network\
{4D36E972-E325-11CE-BFC1-08002BE10318}

HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\
Control\SafeBoot\Network\
{4D36E973-E325-11CE-BFC1-08002BE10318}

HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\
Control\SafeBoot\Network\
{4D36E974-E325-11CE-BFC1-08002BE10318}

HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\
Control\SafeBoot\Network\
{4D36E975-E325-11CE-BFC1-08002BE10318}

HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\
Control\SafeBoot\Network\
{4D36E977-E325-11CE-BFC1-08002BE10318}

HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\
Control\SafeBoot\Network\
{4D36E97B-E325-11CE-BFC1-08002BE10318}

HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\
Control\SafeBoot\Network\
{4D36E97D-E325-11CE-BFC1-08002BE10318}

HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\
Control\SafeBoot\Network\
{4D36E980-E325-11CE-BFC1-08002BE10318}

HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\
Control\SafeBoot\Network\
{71A27CDD-812A-11D0-BEC7-08002BE2092F}

HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\
Control\SafeBoot\Network\
{745A17A0-74D3-11D0-B6FE-00A0C90F57DA}

HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\
Control\SafeBoot\Network

作成活動

ワームは、以下のファイルを作成します。

• %User Temp%\winkvms.exe
• %System%\drivers\ogkqn.sys
• %User Temp%\qoqbvo.exe
• %User Temp%\winajfut.exe
• %User Temp%\winkxfuii.exe
• %User Temp%\xwqyjs.exe
• %User Temp%\wincecfa.exe
• %User Temp%\winpyuft.exe
• %User Temp%\tcalge.exe
• %User Temp%\winhxoovx.exe
• %User Temp%\tdka.exe
• %User Temp%\winacsqax.exe
• %User Temp%\winqcyya.exe
• %User Temp%\lpgjiy.exe
• %User Temp%\wincupd.exe
• %User Temp%\winfrmsv.exe
• %User Temp%\dkkl.exe
• %User Temp%\wincbkrj.exe
• %User Temp%\winigxcpu.exe
• %User Temp%\winpgwpy.exe
• %User Temp%\poknaa.exe
• %User Temp%\winatle.exe
• %User Temp%\tosit.exe
• %User Temp%\wdfu.exe
• %User Temp%\winuxskj.exe
• %User Temp%\whihup.exe
• %User Temp%\xbea.exe
• %User Temp%\ocaxve.exe
• %User Temp%\chnv.exe
• %User Temp%\jtvdl.exe
• %User Temp%\winabsm.exe
• %User Temp%\winlxkd.exe
• %User Temp%\srgmf.exe
• %User Temp%\windbedeh.exe
• %User Temp%\vdcam.exe
• %User Temp%\wineknht.exe
• %User Temp%\yuvm.exe
• %User Temp%\faarr.exe
• %User Temp%\winxgfi.exe
• %User Temp%\winredy.exe
• %User Temp%\winpltm.exe
• %User Temp%\qjxvio.exe
• %User Temp%\winybvpb.exe
• %User Temp%\winkgihu.exe
• %User Temp%\dpjcq.exe
• %User Temp%\winxjvh.exe
• %User Temp%\yxdojd.exe
• %User Temp%\winupwofu.exe
• %User Temp%\winiavhw.exe
• %User Temp%\winputh.exe
• %User Temp%\winvcgb.exe
• %User Temp%\xgla.exe
• %User Temp%\winmfbskm.exe
• %User Temp%\wintqwj.exe
• %User Temp%\hspum.exe
• %User Temp%\eagnlf.exe
• %User Temp%\windrtd.exe
• %User Temp%\fikja.exe
• %User Temp%\nonbxa.exe
• %User Temp%\winfjex.exe
• %User Temp%\winiaxsx.exe
• %User Temp%\gpfboq.exe
• %User Temp%\winfrsnx.exe
• %User Temp%\winhniej.exe
• %User Temp%\bsawf.exe
• %User Temp%\frqwfh.exe
• %User Temp%\wlqps.exe
• %User Temp%\wintdfb.exe
• %User Temp%\whkyu.exe
• %User Temp%\winvfcmmv.exe
• %User Temp%\winijhoc.exe
• %User Temp%\winnqebd.exe
• %User Temp%\mcvofg.exe
• %User Temp%\winfkwip.exe
• %User Temp%\winhtkrbt.exe
• %User Temp%\eyqri.exe
• %User Temp%\winoomyp.exe
• %User Temp%\winghqnfn.exe
• %User Temp%\winbnmdjr.exe
• %User Temp%\wineppchk.exe
• %User Temp%\winnrqac.exe
• %User Temp%\winkxtrh.exe
• %User Temp%\winyxyk.exe
• %User Temp%\fcdea.exe
• %User Temp%\alnonh.exe
• %User Temp%\winyigd.exe
• %User Temp%\oqja.exe
• %User Temp%\winxpge.exe
• %User Temp%\jnkai.exe
• %User Temp%\fguyvg.exe
• %User Temp%\winvcvm.exe
• %User Temp%\winglaxat.exe
• %User Temp%\winsgpbo.exe
• %User Temp%\bjxdw.exe
• %User Temp%\winkhksi.exe
• %User Temp%\winraqeku.exe
• %User Temp%\winqkeb.exe
• %User Temp%\psip.exe
• %User Temp%\hiih.exe
• %User Temp%\rkmlou.exe
• %User Temp%\pafew.exe
• %User Temp%\winbyko.exe
• %User Temp%\utijpw.exe
• %User Temp%\fbvgba.exe
• %User Temp%\wntkw.exe
• %User Temp%\winhcvmo.exe
• %User Temp%\jpuoa.exe
• %User Temp%\winvttq.exe
• %User Temp%\winimog.exe
• %User Temp%\winrdad.exe
• %User Temp%\kowgbn.exe
• %User Temp%\winnntmkh.exe
• %User Temp%\winoedm.exe
• %User Temp%\wintrrt.exe
• %User Temp%\winwhwc.exe
• %User Temp%\winyraael.exe
• %User Temp%\bvfcu.exe
• %User Temp%\qfaf.exe
• %User Temp%\windahltu.exe
• %User Temp%\winvbpa.exe
• %User Temp%\winaqabjc.exe
• %User Temp%\winbxpsnc.exe
• %User Temp%\ihdpt.exe
• %User Temp%\winhons.exe
• %User Temp%\winfvvpvi.exe
• %User Temp%\icrn.exe
• %User Temp%\wintqiemh.exe
• %User Temp%\winqmlo.exe
• %User Temp%\winwohpsk.exe
• %User Temp%\winkcen.exe
• %User Temp%\winjkkqt.exe
• %User Temp%\bhlrv.exe
• %User Temp%\winhfbbto.exe
• %User Temp%\winrdkk.exe
• %User Temp%\fomjdf.exe
• %User Temp%\bdvay.exe
• %User Temp%\mwibno.exe
• %User Temp%\vcitw.exe
• %User Temp%\winxwhay.exe
• %User Temp%\winbthxgm.exe
• %User Temp%\ntsgei.exe
• %User Temp%\bsyt.exe
• %User Temp%\winydbn.exe
• %User Temp%\winlkjmx.exe
• %User Temp%\jtjl.exe
• %User Temp%\wincfwtg.exe
• %User Temp%\winohorjb.exe
• %User Temp%\winygek.exe
• %User Temp%\windvcgsp.exe
• %User Temp%\yypsvk.exe
• %User Temp%\winknee.exe
• %User Temp%\winpppx.exe
• %User Temp%\uyucmu.exe
• %User Temp%\winisiksh.exe
• %User Temp%\winnuaws.exe
• %User Temp%\winwbqttq.exe
• %User Temp%\winvxetfd.exe
• %User Temp%\rvoqay.exe
• %User Temp%\wintphtmr.exe
• %User Temp%\winkktk.exe
• %User Temp%\wincechr.exe
• %User Temp%\windbftp.exe
• %User Temp%\winkwfpfk.exe
• %User Temp%\winjfyv.exe
• %User Temp%\winmqwi.exe
• %User Temp%\johgon.exe
• %User Temp%\lpsaw.exe
• %User Temp%\winmuqg.exe
• %User Temp%\winkghvdu.exe
• %User Temp%\winkgjr.exe
• %User Temp%\bsrw.exe
• %User Temp%\wintkhpc.exe
• %User Temp%\xcdmo.exe
• %User Temp%\winarkst.exe
• %User Temp%\winwirlr.exe
• %User Temp%\rgnhnk.exe
• %User Temp%\winuugtro.exe
• %User Temp%\winkcsjfc.exe
• %User Temp%\mjqlu.exe
• %User Temp%\voqssb.exe
• %User Temp%\wingijutb.exe
• %User Temp%\winmdtan.exe
• %User Temp%\qwina.exe
• %User Temp%\vldxtc.exe
• %User Temp%\pjjh.exe
• %User Temp%\cdydkm.exe
• %User Temp%\winjrbqiu.exe
• %User Temp%\winpgrchm.exe
• %User Temp%\glenrm.exe
• %User Temp%\hpix.exe
• %User Temp%\winnvkimk.exe
• %User Temp%\otbq.exe
• %User Temp%\winhejygr.exe
• %User Temp%\winoqjmy.exe
• %User Temp%\kfjinc.exe
• %User Temp%\winfqyprm.exe

(註：%User Temp%フォルダはWindowsの種類とインストール時の設定などにより異なります。標準設定では、Windows 2000、XP および Server 2003 の場合、"C:\Documents and Settings\＜ユーザー名＞\Local Settings\Temp"、Windows Vista および 7 の場合、"C:\Users\＜ユーザ名＞\AppData\Local\Temp" です。. %System%フォルダはWindowsの種類とインストール時の設定などにより異なります。標準設定では "C:\Windows\System32" です。)

その他

ワームは、以下の不正なWebサイトにアクセスします。

• http://{BLOCKED}edekparca.com/images/logos.gif?72de=235248
• http://{BLOCKED}arrod.com/images/logos.gif?bd06=145170
• http://{BLOCKED}mevi.com/images/logos.gif?cbbc=469404
• http://brandaoematos.{BLOCKED}m.br/images/logoi.gif?ce4c=264060
• http://{BLOCKED}teknik.com/logos.gif?dcb4=113000
• http://{BLOCKED}isangli.in/logoi.gif?e0f9=57593
• http://cacs.{BLOCKED}g.br/novosite/logos.gif?e3b8=466368
• http://butacm.{BLOCKED}o.ro/lo{BLOCKED}os.gif?e6f5=295625
• http://boyabateml.{BLOCKED}2.tr/images/logos.gif?e9d3=598590
• http://{BLOCKED}roup.com/images/logos.gif?eb79=602810
• http://{BLOCKED}edekparca.com/images/logos.gif?ec73=605310
• http://{BLOCKED}arrod.com/images/logos.gif?edcb=182625
• http://{BLOCKED}mevi.com/images/logos.gif?ee48=427000
• http://brandaoematos.{BLOCKED}m.br/images/logoi.gif?ef80=61312
• http://{BLOCKED}teknik.com/logos.gif?f00d=307265
• http://{BLOCKED}isangli.in/logoi.gif?f30a=248872
• http://cacs.{BLOCKED}g.br/novosite/logos.gif?f3e5=437059
• http://butacm.{BLOCKED}o.ro/lo{BLOCKED}os.gif?f695=631250
• http://boyabateml.{BLOCKED}2.tr/images/logos.gif?f77f=316795
• http://{BLOCKED}roup.com/images/logos.gif?f82b=635310
• http://{BLOCKED}edekparca.com/images/logos.gif?fa00=640000
• http://{BLOCKED}arrod.com/images/logos.gif?fada=256872
• http://{BLOCKED}mevi.com/images/logos.gif?fbd4=322340
• http://brandaoematos.{BLOCKED}m.br/images/logoi.gif?fcbf=647030
• http://{BLOCKED}teknik.com/logos.gif?10059=525000
• http://{BLOCKED}isangli.in/logoi.gif?10683=201609
• http://cacs.{BLOCKED}g.br/novosite/logos.gif?107ea=405372
• http://butacm.{BLOCKED}o.ro/lo{BLOCKED}os.gif?10ae8=614952
• http://boyabateml.{BLOCKED}2.tr/images/logos.gif?10bf1=274372
• http://{BLOCKED}roup.com/images/logos.gif?10cdc=619452
• http://{BLOCKED}edekparca.com/images/logos.gif?10e24=553248
• http://{BLOCKED}arrod.com/images/logos.gif?11076=627750
• http://{BLOCKED}mevi.com/images/logos.gif?11141=559624
• http://brandaoematos.{BLOCKED}m.br/images/logoi.gif?1121b=350855
• http://{BLOCKED}teknik.com/logos.gif?11344=352340
• http://{BLOCKED}isangli.in/logoi.gif?115b5=142186
• http://cacs.{BLOCKED}g.br/novosite/logos.gif?11652=641250
• http://butacm.{BLOCKED}o.ro/lo{BLOCKED}os.gif?11855=502355
• http://boyabateml.{BLOCKED}2.tr/images/logos.gif?119ad=432654
• http://{BLOCKED}roup.com/images/logos.gif?11a59=144562
• http://{BLOCKED}edekparca.com/images/logos.gif?11b24=144968
• http://{BLOCKED}arrod.com/images/logos.gif?11bff=581624
• http://{BLOCKED}mevi.com/images/logos.gif?11c9b=291436
• http://brandaoematos.{BLOCKED}m.br/images/logoi.gif?11de3=73187
• http://{BLOCKED}teknik.com/logos.gif?11e70=293312
• http://{BLOCKED}isangli.in/logoi.gif?120f0=517776
• http://cacs.{BLOCKED}g.br/novosite/logos.gif?1218d=222375
• http://butacm.{BLOCKED}o.ro/lo{BLOCKED}os.gif?1248a=524230
• http://boyabateml.{BLOCKED}2.tr/images/logos.gif?12536=675558
• http://{BLOCKED}roup.com/images/logos.gif?125e2=75234
• http://{BLOCKED}edekparca.com/images/logos.gif?1264f=602744
• http://{BLOCKED}arrod.com/images/logos.gif?1272a=302248
• http://{BLOCKED}mevi.com/images/logos.gif?127b7=605624
• http://brandaoematos.{BLOCKED}m.br/images/logoi.gif?12863=531125
• http://{BLOCKED}teknik.com/logos.gif?1293d=684837
• http://{BLOCKED}isangli.in/logoi.gif?12ca8=153936
• http://cacs.{BLOCKED}g.br/novosite/logos.gif?12d83=463122
• http://butacm.{BLOCKED}o.ro/lo{BLOCKED}os.gif?12fd5=622248
• http://boyabateml.{BLOCKED}2.tr/images/logos.gif?13071=545559
• http://{BLOCKED}roup.com/images/logos.gif?1310d=390465
• http://{BLOCKED}edekparca.com/images/logos.gif?1318a=156436
• http://{BLOCKED}arrod.com/images/logos.gif?13246=78406
• http://{BLOCKED}mevi.com/images/logos.gif?13301=707337
• http://brandaoematos.{BLOCKED}m.br/images/logoi.gif?133ec=630624
• http://{BLOCKED}teknik.com/logos.gif?13469=78953
• http://{BLOCKED}isangli.in/logoi.gif?139b8=401560
• http://cacs.{BLOCKED}g.br/novosite/logos.gif?13a74=402500
• http://butacm.{BLOCKED}o.ro/lo{BLOCKED}os.gif?13c87=162062
• http://boyabateml.{BLOCKED}2.tr/images/logos.gif?13d52=81234
• http://{BLOCKED}roup.com/images/logos.gif?13dfe=244218
• http://{BLOCKED}edekparca.com/images/logos.gif?14aa0=169280
• http://{BLOCKED}arrod.com/images/logos.gif?14c17=425075
• http://{BLOCKED}mevi.com/images/logos.gif?14cb3=170342
• http://brandaoematos.{BLOCKED}m.br/images/logoi.gif?14ddc=85468
• http://{BLOCKED}teknik.com/logos.gif?14e4a=342312
• http://{BLOCKED}isangli.in/logoi.gif?15147=690744
• http://cacs.{BLOCKED}g.br/novosite/logos.gif?15203=605717
• http://butacm.{BLOCKED}o.ro/lo{BLOCKED}os.gif?15464=522840
• http://boyabateml.{BLOCKED}2.tr/images/logos.gif?15500=87296
• http://{BLOCKED}roup.com/images/logos.gif?1559d=262359
• http://{BLOCKED}edekparca.com/images/logos.gif?156d5=438825
• http://{BLOCKED}arrod.com/images/logos.gif?15781=879370
• http://{BLOCKED}mevi.com/images/logos.gif?1580e=792702
• http://brandaoematos.{BLOCKED}m.br/images/logoi.gif?15927=88359
• http://{BLOCKED}teknik.com/logos.gif?159b4=885000
• http://{BLOCKED}isangli.in/logoi.gif?15c15=267327
• http://cacs.{BLOCKED}g.br/novosite/logos.gif?15cc1=624967
• http://butacm.{BLOCKED}o.ro/lo{BLOCKED}os.gif?15fed=360372
• http://boyabateml.{BLOCKED}2.tr/images/logos.gif?1608a=180500
• http://{BLOCKED}roup.com/images/logos.gif?16164=361872
• http://{BLOCKED}edekparca.com/images/logos.gif?16220=634592
• http://{BLOCKED}arrod.com/images/logos.gif?16358=727744
• http://{BLOCKED}mevi.com/images/logos.gif?163d5=455465
• http://brandaoematos.{BLOCKED}m.br/images/logoi.gif?16491=730248
• http://{BLOCKED}teknik.com/logos.gif?1650e=914060
• http://{BLOCKED}isangli.in/logoi.gif?1677f=368124
• http://cacs.{BLOCKED}g.br/novosite/logos.gif?1681b=368748
• http://butacm.{BLOCKED}o.ro/lo{BLOCKED}os.gif?16abb=92859
• http://boyabateml.{BLOCKED}2.tr/images/logos.gif?16bc5=745000
• http://{BLOCKED}roup.com/images/logos.gif?16c61=466405
• http://{BLOCKED}edekparca.com/images/logos.gif?16d5b=467655
• http://{BLOCKED}arrod.com/images/logos.gif?16e36=937500
• http://{BLOCKED}mevi.com/images/logos.gif?16ea3=469295
• http://brandaoematos.{BLOCKED}m.br/images/logoi.gif?17058=282888
• http://{BLOCKED}teknik.com/logos.gif?171df=473435
• http://{BLOCKED}isangli.in/logoi.gif?174ec=190936
• http://cacs.{BLOCKED}g.br/novosite/logos.gif?17598=669480
• http://butacm.{BLOCKED}o.ro/lo{BLOCKED}os.gif?178d4=578808
• http://boyabateml.{BLOCKED}2.tr/images/logos.gif?17990=289968
• http://{BLOCKED}roup.com/images/logos.gif?17a3c=96828
• http://{BLOCKED}edekparca.com/images/logos.gif?17b84=388624
• http://{BLOCKED}arrod.com/images/logos.gif?17c4f=389436
• http://{BLOCKED}mevi.com/images/logos.gif?17d68=292920
• http://brandaoematos.{BLOCKED}m.br/images/logoi.gif?17e33=782744
• http://{BLOCKED}teknik.com/logos.gif?17ec0=979840
• http://{BLOCKED}isangli.in/logoi.gif?18325=693763
• http://cacs.{BLOCKED}g.br/novosite/logos.gif?1840f=99343
• http://butacm.{BLOCKED}o.ro/lo{BLOCKED}os.gif?18680=699776
• http://boyabateml.{BLOCKED}2.tr/images/logos.gif?1872c=901260
• http://{BLOCKED}roup.com/images/logos.gif?187f7=401372
• http://{BLOCKED}edekparca.com/images/logos.gif?1897e=604404
• http://{BLOCKED}arrod.com/images/logos.gif?18a49=908433
• http://{BLOCKED}mevi.com/images/logos.gif?18b05=606750
• http://brandaoematos.{BLOCKED}m.br/images/logoi.gif?18bff=608250
• http://{BLOCKED}teknik.com/logos.gif?18c9b=507655
• http://{BLOCKED}isangli.in/logoi.gif?19054=614904
• http://cacs.{BLOCKED}g.br/novosite/logos.gif?190f0=718480
• http://butacm.{BLOCKED}o.ro/lo{BLOCKED}os.gif?19fb5=744947
• http://boyabateml.{BLOCKED}2.tr/images/logos.gif?1a052=1065780
• http://{BLOCKED}roup.com/images/logos.gif?1a13c=854496
• http://{BLOCKED}edekparca.com/images/logos.gif?1a1e8=855872
• http://{BLOCKED}arrod.com/images/logos.gif?1a320=858368
• http://{BLOCKED}mevi.com/images/logos.gif?1a3ec=860000
• http://brandaoematos.{BLOCKED}m.br/images/logoi.gif?1a4c6=430872
• http://{BLOCKED}teknik.com/logos.gif?1a543=215686
• http://{BLOCKED}isangli.in/logoi.gif?1a8dd=543825
• http://cacs.{BLOCKED}g.br/novosite/logos.gif?1a989=108937
• http://butacm.{BLOCKED}o.ro/lo{BLOCKED}os.gif?1abcb=438060
• http://boyabateml.{BLOCKED}2.tr/images/logos.gif?1acb6=109750
• http://{BLOCKED}roup.com/images/logos.gif?1ad52=1099060
• http://{BLOCKED}edekparca.com/images/logos.gif?1adfe=880624
• http://{BLOCKED}arrod.com/images/logos.gif?1aef8=992952
• http://{BLOCKED}mevi.com/images/logos.gif?1af75=662718
• http://brandaoematos.{BLOCKED}m.br/images/logoi.gif?1b021=995625
• http://{BLOCKED}teknik.com/logos.gif?1b11b=997875
• http://{BLOCKED}isangli.in/logoi.gif?1b3ab=111531
• http://cacs.{BLOCKED}g.br/novosite/logos.gif?1b4c4=894496
• http://butacm.{BLOCKED}o.ro/lo{BLOCKED}os.gif?1b745=224906
• http://boyabateml.{BLOCKED}2.tr/images/logos.gif?1b7f1=675750
• http://{BLOCKED}roup.com/images/logos.gif?1b88d=1015029
• http://{BLOCKED}edekparca.com/images/logos.gif?1b948=790776
• http://{BLOCKED}arrod.com/images/logos.gif?1ba04=1018404
• http://{BLOCKED}mevi.com/images/logos.gif?1ba81=1019529
• http://brandaoematos.{BLOCKED}m.br/images/logoi.gif?1bbd9=909000
• http://{BLOCKED}teknik.com/logos.gif?1bc84=568980
• http://{BLOCKED}isangli.in/logoi.gif?1c07c=918496
• http://cacs.{BLOCKED}g.br/novosite/logos.gif?1c138=575000
• http://butacm.{BLOCKED}o.ro/lo{BLOCKED}os.gif?1c3b8=115640
• http://boyabateml.{BLOCKED}2.tr/images/logos.gif?1c4a3=579375
• http://{BLOCKED}roup.com/images/logos.gif?1c53f=696186
• http://{BLOCKED}edekparca.com/images/logos.gif?1c5db=348561
• http://{BLOCKED}arrod.com/images/logos.gif?1c742=1048914
• http://{BLOCKED}mevi.com/images/logos.gif?1c7b0=233312
• http://brandaoematos.{BLOCKED}m.br/images/logoi.gif?1c8c9=116937
• http://{BLOCKED}teknik.com/logos.gif?1c9b3=468684
• http://{BLOCKED}isangli.in/logoi.gif?1ccd0=353904
• http://cacs.{BLOCKED}g.br/novosite/logos.gif?1cd9b=1063539
• http://butacm.{BLOCKED}o.ro/lo{BLOCKED}os.gif?1da4d=971368
• http://boyabateml.{BLOCKED}2.tr/images/logos.gif?1db38=364968
• http://{BLOCKED}roup.com/images/logos.gif?1dbf3=974744
• http://{BLOCKED}edekparca.com/images/logos.gif?1dd2c=1221560
• http://{BLOCKED}arrod.com/images/logos.gif?1df9d=245562
• http://{BLOCKED}mevi.com/images/logos.gif?1e039=737622
• http://brandaoematos.{BLOCKED}m.br/images/logoi.gif?1e191=1109529
• http://{BLOCKED}teknik.com/logos.gif?1e24c=1234680
• http://{BLOCKED}isangli.in/logoi.gif?1e6c1=124609
• http://cacs.{BLOCKED}g.br/novosite/logos.gif?1e76d=249562
• http://butacm.{BLOCKED}o.ro/lo{BLOCKED}os.gif?1ea1c=752808
• http://boyabateml.{BLOCKED}2.tr/images/logos.gif?1ec01=881671
• http://{BLOCKED}roup.com/images/logos.gif?1ed0a=631090
• http://{BLOCKED}edekparca.com/images/logos.gif?1edc6=1264060
• http://{BLOCKED}arrod.com/images/logos.gif?1ee72=379734
• http://{BLOCKED}mevi.com/images/logos.gif?1eefe=1267180
• http://brandaoematos.{BLOCKED}m.br/images/logoi.gif?1efc9=1142289
• http://{BLOCKED}teknik.com/logos.gif?1f16f=1273430
• http://{BLOCKED}isangli.in/logoi.gif?20277=1185327
• http://cacs.{BLOCKED}g.br/novosite/logos.gif?20361=527748
• http://butacm.{BLOCKED}o.ro/lo{BLOCKED}os.gif?2111d=135453
• http://boyabateml.{BLOCKED}2.tr/images/logos.gif?21217=542812
• http://{BLOCKED}roup.com/images/logos.gif?21340=408000
• http://{BLOCKED}edekparca.com/images/logos.gif?213ad=136109
• http://{BLOCKED}arrod.com/images/logos.gif?21572=136562
• http://{BLOCKED}mevi.com/images/logos.gif?21728=274000
• http://brandaoematos.{BLOCKED}m.br/images/logoi.gif?217e3=274374
• http://{BLOCKED}teknik.com/logos.gif?2189f=549500

このウイルス情報は、自動解析システムにより作成されました。