Trend Micro Security

RANSOM_KIRK.A

2017年3月21日
 解析者: Julie Anne Cabuhat   

 別名:

Trojan.Ransom.Kirk (ALYac), TR/KirkRansom.A (Avira), Python/Filecoder.Kirk.A (ESET-NOD32), Win32.Trojan-Ransom.Kirk.B (GData), Trojan-Ransom.Kirky (Ikarus), Ransom.Kirk (Malwarebytes)

 プラットフォーム:

Windows

 危険度:
 ダメージ度:
 感染力:
 感染確認数:
 情報漏えい:


  • マルウェアタイプ: Ransom
  • 破壊活動の有無: なし
  • 暗号化:  
  • 感染報告の有無: はい

  概要

感染経路 インターネットからのダウンロード, 他のマルウェアからの作成

マルウェアは、他のマルウェアに作成されるか、悪意あるWebサイトからユーザが誤ってダウンロードすることによりコンピュータに侵入します。


  詳細

ファイルサイズ 5,756,255 bytes
タイプ EXE
メモリ常駐 はい
発見日 2017年3月15日
ペイロード 画像の表示

侵入方法

その他は、他のマルウェアに作成されるか、悪意あるWebサイトからユーザが誤ってダウンロードすることによりコンピュータに侵入します。

インストール

その他は、以下のファイルを作成します。

  • %User Temp%\_MEI{Random numbers}\Crypto.Cipher._AES.pyd
  • %User Temp%\_MEI{Random numbers}\Crypto.Cipher._DES.pyd
  • %User Temp%\_MEI{Random numbers}\Crypto.Cipher._DES3.pyd
  • %User Temp%\_MEI{Random numbers}\Crypto.Hash._SHA256.pyd
  • %User Temp%\_MEI{Random numbers}\Crypto.Random.OSRNG.winrandom.pyd
  • %User Temp%\_MEI{Random numbers}\Crypto.Util._counter.pyd
  • %User Temp%\_MEI{Random numbers}\Crypto.Util.strxor.pyd
  • %User Temp%\_MEI{Random numbers}\Microsoft.VC90.CRT.manifest
  • %User Temp%\_MEI{Random numbers}\_ctypes.pyd
  • %User Temp%\_MEI{Random numbers}\_hashlib.pyd
  • %User Temp%\_MEI{Random numbers}\_tkinter.pyd
  • %User Temp%\_MEI{Random numbers}\bz2.pyd
  • %User Temp%\_MEI{Random numbers}\loic_win32.exe.manifest
  • %User Temp%\_MEI{Random numbers}\msvcm90.dll
  • %User Temp%\_MEI{Random numbers}\msvcp90.dll
  • %User Temp%\_MEI{Random numbers}\msvcr90.dll
  • %User Temp%\_MEI{Random numbers}\python27.dll
  • %User Temp%\_MEI{Random numbers}\select.pyd
  • %User Temp%\_MEI{Random numbers}\tcl85.dll
  • %User Temp%\_MEI{Random numbers}\tk85.dll
  • %User Temp%\_MEI{Random numbers}\unicodedata.pyd
  • %User Temp%\_MEI{Random numbers}\tcl\auto.tcl
  • %User Temp%\_MEI{Random numbers}\tcl\clock.tcl
  • %User Temp%\_MEI{Random numbers}\tcl\encoding\ascii.enc
  • %User Temp%\_MEI{Random numbers}\tcl\encoding\big5.enc
  • %User Temp%\_MEI{Random numbers}\tcl\encoding\cp1250.enc
  • %User Temp%\_MEI{Random numbers}\tcl\encoding\cp1251.enc
  • %User Temp%\_MEI{Random numbers}\tcl\encoding\cp1252.enc
  • %User Temp%\_MEI{Random numbers}\tcl\encoding\cp1253.enc
  • %User Temp%\_MEI{Random numbers}\tcl\encoding\cp1254.enc
  • %User Temp%\_MEI{Random numbers}\tcl\encoding\cp1255.enc
  • %User Temp%\_MEI{Random numbers}\tcl\encoding\cp1256.enc
  • %User Temp%\_MEI{Random numbers}\tcl\encoding\cp1257.enc
  • %User Temp%\_MEI{Random numbers}\tcl\encoding\cp1258.enc
  • %User Temp%\_MEI{Random numbers}\tcl\encoding\cp437.enc
  • %User Temp%\_MEI{Random numbers}\tcl\encoding\cp737.enc
  • %User Temp%\_MEI{Random numbers}\tcl\encoding\cp775.enc
  • %User Temp%\_MEI{Random numbers}\tcl\encoding\cp850.enc
  • %User Temp%\_MEI{Random numbers}\tcl\encoding\cp852.enc
  • %User Temp%\_MEI{Random numbers}\tcl\encoding\cp855.enc
  • %User Temp%\_MEI{Random numbers}\tcl\encoding\cp857.enc
  • %User Temp%\_MEI{Random numbers}\tcl\encoding\cp860.enc
  • %User Temp%\_MEI{Random numbers}\tcl\encoding\cp861.enc
  • %User Temp%\_MEI{Random numbers}\tcl\encoding\cp862.enc
  • %User Temp%\_MEI{Random numbers}\tcl\encoding\cp863.enc
  • %User Temp%\_MEI{Random numbers}\tcl\encoding\cp864.enc
  • %User Temp%\_MEI{Random numbers}\tcl\encoding\cp865.enc
  • %User Temp%\_MEI{Random numbers}\tcl\encoding\cp866.enc
  • %User Temp%\_MEI{Random numbers}\tcl\encoding\cp869.enc
  • %User Temp%\_MEI{Random numbers}\tcl\encoding\cp874.enc
  • %User Temp%\_MEI{Random numbers}\tcl\encoding\cp932.enc
  • %User Temp%\_MEI{Random numbers}\tcl\encoding\cp936.enc
  • %User Temp%\_MEI{Random numbers}\tcl\encoding\cp949.enc
  • %User Temp%\_MEI{Random numbers}\tcl\encoding\cp950.enc
  • %User Temp%\_MEI{Random numbers}\tcl\encoding\dingbats.enc
  • %User Temp%\_MEI{Random numbers}\tcl\encoding\ebcdic.enc
  • %User Temp%\_MEI{Random numbers}\tcl\encoding\euc-cn.enc
  • %User Temp%\_MEI{Random numbers}\tcl\encoding\euc-jp.enc
  • %User Temp%\_MEI{Random numbers}\tcl\encoding\euc-kr.enc
  • %User Temp%\_MEI{Random numbers}\tcl\encoding\gb12345.enc
  • %User Temp%\_MEI{Random numbers}\tcl\encoding\gb1988.enc
  • %User Temp%\_MEI{Random numbers}\tcl\encoding\gb2312-raw.enc
  • %User Temp%\_MEI{Random numbers}\tcl\encoding\gb2312.enc
  • %User Temp%\_MEI{Random numbers}\tcl\encoding\iso2022-jp.enc
  • %User Temp%\_MEI{Random numbers}\tcl\encoding\iso2022-kr.enc
  • %User Temp%\_MEI{Random numbers}\tcl\encoding\iso2022.enc
  • %User Temp%\_MEI{Random numbers}\tcl\encoding\iso8859-1.enc
  • %User Temp%\_MEI{Random numbers}\tcl\encoding\iso8859-10.enc
  • %User Temp%\_MEI{Random numbers}\tcl\encoding\iso8859-13.enc
  • %User Temp%\_MEI{Random numbers}\tcl\encoding\iso8859-14.enc
  • %User Temp%\_MEI{Random numbers}\tcl\encoding\iso8859-15.enc
  • %User Temp%\_MEI{Random numbers}\tcl\encoding\iso8859-16.enc
  • %User Temp%\_MEI{Random numbers}\tcl\encoding\iso8859-2.enc
  • %User Temp%\_MEI{Random numbers}\tcl\encoding\iso8859-3.enc
  • %User Temp%\_MEI{Random numbers}\tcl\encoding\iso8859-4.enc
  • %User Temp%\_MEI{Random numbers}\tcl\encoding\iso8859-5.enc
  • %User Temp%\_MEI{Random numbers}\tcl\encoding\iso8859-6.enc
  • %User Temp%\_MEI{Random numbers}\tcl\encoding\iso8859-7.enc
  • %User Temp%\_MEI{Random numbers}\tcl\encoding\iso8859-8.enc
  • %User Temp%\_MEI{Random numbers}\tcl\encoding\iso8859-9.enc
  • %User Temp%\_MEI{Random numbers}\tcl\encoding\jis0201.enc
  • %User Temp%\_MEI{Random numbers}\tcl\encoding\jis0208.enc
  • %User Temp%\_MEI{Random numbers}\tcl\encoding\jis0212.enc
  • %User Temp%\_MEI{Random numbers}\tcl\encoding\koi8-r.enc
  • %User Temp%\_MEI{Random numbers}\tcl\encoding\koi8-u.enc
  • %User Temp%\_MEI{Random numbers}\tcl\encoding\ksc5601.enc
  • %User Temp%\_MEI{Random numbers}\tcl\encoding\macCentEuro.enc
  • %User Temp%\_MEI{Random numbers}\tcl\encoding\macCroatian.enc
  • %User Temp%\_MEI{Random numbers}\tcl\encoding\macCyrillic.enc
  • %User Temp%\_MEI{Random numbers}\tcl\encoding\macDingbats.enc
  • %User Temp%\_MEI{Random numbers}\tcl\encoding\macGreek.enc
  • %User Temp%\_MEI{Random numbers}\tcl\encoding\macIceland.enc
  • %User Temp%\_MEI{Random numbers}\tcl\encoding\macJapan.enc
  • %User Temp%\_MEI{Random numbers}\tcl\encoding\macRoman.enc
  • %User Temp%\_MEI{Random numbers}\tcl\encoding\macRomania.enc
  • %User Temp%\_MEI{Random numbers}\tcl\encoding\macThai.enc
  • %User Temp%\_MEI{Random numbers}\tcl\encoding\macTurkish.enc
  • %User Temp%\_MEI{Random numbers}\tcl\encoding\macUkraine.enc
  • %User Temp%\_MEI{Random numbers}\tcl\encoding\shiftjis.enc
  • %User Temp%\_MEI{Random numbers}\tcl\encoding\symbol.enc
  • %User Temp%\_MEI{Random numbers}\tcl\encoding\tis-620.enc
  • %User Temp%\_MEI{Random numbers}\tcl\history.tcl
  • %User Temp%\_MEI{Random numbers}\tcl\http1.0\http.tcl
  • %User Temp%\_MEI{Random numbers}\tcl\http1.0\pkgIndex.tcl
  • %User Temp%\_MEI{Random numbers}\tcl\init.tcl
  • %User Temp%\_MEI{Random numbers}\tcl\msgs\af.msg
  • %User Temp%\_MEI{Random numbers}\tcl\msgs\af_za.msg
  • %User Temp%\_MEI{Random numbers}\tcl\msgs\ar.msg
  • %User Temp%\_MEI{Random numbers}\tcl\msgs\ar_in.msg
  • %User Temp%\_MEI{Random numbers}\tcl\msgs\ar_jo.msg
  • %User Temp%\_MEI{Random numbers}\tcl\msgs\ar_lb.msg
  • %User Temp%\_MEI{Random numbers}\tcl\msgs\ar_sy.msg
  • %User Temp%\_MEI{Random numbers}\tcl\msgs\be.msg
  • %User Temp%\_MEI{Random numbers}\tcl\msgs\bg.msg
  • %User Temp%\_MEI{Random numbers}\tcl\msgs\bn.msg
  • %User Temp%\_MEI{Random numbers}\tcl\msgs\bn_in.msg
  • %User Temp%\_MEI{Random numbers}\tcl\msgs\ca.msg
  • %User Temp%\_MEI{Random numbers}\tcl\msgs\cs.msg
  • %User Temp%\_MEI{Random numbers}\tcl\msgs\da.msg
  • %User Temp%\_MEI{Random numbers}\tcl\msgs\de.msg
  • %User Temp%\_MEI{Random numbers}\tcl\msgs\de_at.msg
  • %User Temp%\_MEI{Random numbers}\tcl\msgs\de_be.msg
  • %User Temp%\_MEI{Random numbers}\tcl\msgs\el.msg
  • %User Temp%\_MEI{Random numbers}\tcl\msgs\en_au.msg
  • %User Temp%\_MEI{Random numbers}\tcl\msgs\en_be.msg
  • %User Temp%\_MEI{Random numbers}\tcl\msgs\en_bw.msg
  • %User Temp%\_MEI{Random numbers}\tcl\msgs\en_ca.msg
  • %User Temp%\_MEI{Random numbers}\tcl\msgs\en_gb.msg
  • %User Temp%\_MEI{Random numbers}\tcl\msgs\en_hk.msg
  • %User Temp%\_MEI{Random numbers}\tcl\msgs\en_ie.msg
  • %User Temp%\_MEI{Random numbers}\tcl\msgs\en_in.msg
  • %User Temp%\_MEI{Random numbers}\tcl\msgs\en_nz.msg
  • %User Temp%\_MEI{Random numbers}\tcl\msgs\en_ph.msg
  • %User Temp%\_MEI{Random numbers}\tcl\msgs\en_sg.msg
  • %User Temp%\_MEI{Random numbers}\tcl\msgs\en_za.msg
  • %User Temp%\_MEI{Random numbers}\tcl\msgs\en_zw.msg
  • %User Temp%\_MEI{Random numbers}\tcl\msgs\eo.msg
  • %User Temp%\_MEI{Random numbers}\tcl\msgs\es.msg
  • %User Temp%\_MEI{Random numbers}\tcl\msgs\es_ar.msg
  • %User Temp%\_MEI{Random numbers}\tcl\msgs\es_bo.msg
  • %User Temp%\_MEI{Random numbers}\tcl\msgs\es_cl.msg
  • %User Temp%\_MEI{Random numbers}\tcl\msgs\es_co.msg
  • %User Temp%\_MEI{Random numbers}\tcl\msgs\es_cr.msg
  • %User Temp%\_MEI{Random numbers}\tcl\msgs\es_do.msg
  • %User Temp%\_MEI{Random numbers}\tcl\msgs\es_ec.msg
  • %User Temp%\_MEI{Random numbers}\tcl\msgs\es_gt.msg
  • %User Temp%\_MEI{Random numbers}\tcl\msgs\es_hn.msg
  • %User Temp%\_MEI{Random numbers}\tcl\msgs\es_mx.msg
  • %User Temp%\_MEI{Random numbers}\tcl\msgs\es_ni.msg
  • %User Temp%\_MEI{Random numbers}\tcl\msgs\es_pa.msg
  • %User Temp%\_MEI{Random numbers}\tcl\msgs\es_pe.msg
  • %User Temp%\_MEI{Random numbers}\tcl\msgs\es_pr.msg
  • %User Temp%\_MEI{Random numbers}\tcl\msgs\es_py.msg
  • %User Temp%\_MEI{Random numbers}\tcl\msgs\es_sv.msg
  • %User Temp%\_MEI{Random numbers}\tcl\msgs\es_uy.msg
  • %User Temp%\_MEI{Random numbers}\tcl\msgs\es_ve.msg
  • %User Temp%\_MEI{Random numbers}\tcl\msgs\et.msg
  • %User Temp%\_MEI{Random numbers}\tcl\msgs\eu.msg
  • %User Temp%\_MEI{Random numbers}\tcl\msgs\eu_es.msg
  • %User Temp%\_MEI{Random numbers}\tcl\msgs\fa.msg
  • %User Temp%\_MEI{Random numbers}\tcl\msgs\fa_in.msg
  • %User Temp%\_MEI{Random numbers}\tcl\msgs\fa_ir.msg
  • %User Temp%\_MEI{Random numbers}\tcl\msgs\fi.msg
  • %User Temp%\_MEI{Random numbers}\tcl\msgs\fo.msg
  • %User Temp%\_MEI{Random numbers}\tcl\msgs\fo_fo.msg
  • %User Temp%\_MEI{Random numbers}\tcl\msgs\fr.msg
  • %User Temp%\_MEI{Random numbers}\tcl\msgs\fr_be.msg
  • %User Temp%\_MEI{Random numbers}\tcl\msgs\fr_ca.msg
  • %User Temp%\_MEI{Random numbers}\tcl\msgs\fr_ch.msg
  • %User Temp%\_MEI{Random numbers}\tcl\msgs\ga.msg
  • %User Temp%\_MEI{Random numbers}\tcl\msgs\ga_ie.msg
  • %User Temp%\_MEI{Random numbers}\tcl\msgs\gl.msg
  • %User Temp%\_MEI{Random numbers}\tcl\msgs\gl_es.msg
  • %User Temp%\_MEI{Random numbers}\tcl\msgs\gv.msg
  • %User Temp%\_MEI{Random numbers}\tcl\msgs\gv_gb.msg
  • %User Temp%\_MEI{Random numbers}\tcl\msgs\he.msg
  • %User Temp%\_MEI{Random numbers}\tcl\msgs\hi.msg
  • %User Temp%\_MEI{Random numbers}\tcl\msgs\hi_in.msg
  • %User Temp%\_MEI{Random numbers}\tcl\msgs\hr.msg
  • %User Temp%\_MEI{Random numbers}\tcl\msgs\hu.msg
  • %User Temp%\_MEI{Random numbers}\tcl\msgs\id.msg
  • %User Temp%\_MEI{Random numbers}\tcl\msgs\id_id.msg
  • %User Temp%\_MEI{Random numbers}\tcl\msgs\is.msg
  • %User Temp%\_MEI{Random numbers}\tcl\msgs\it.msg
  • %User Temp%\_MEI{Random numbers}\tcl\msgs\it_ch.msg
  • %User Temp%\_MEI{Random numbers}\tcl\msgs\ja.msg
  • %User Temp%\_MEI{Random numbers}\tcl\msgs\kl.msg
  • %User Temp%\_MEI{Random numbers}\tcl\msgs\kl_gl.msg
  • %User Temp%\_MEI{Random numbers}\tcl\msgs\ko.msg
  • %User Temp%\_MEI{Random numbers}\tcl\msgs\ko_kr.msg
  • %User Temp%\_MEI{Random numbers}\tcl\msgs\kok.msg
  • %User Temp%\_MEI{Random numbers}\tcl\msgs\kok_in.msg
  • %User Temp%\_MEI{Random numbers}\tcl\msgs\kw.msg
  • %User Temp%\_MEI{Random numbers}\tcl\msgs\kw_gb.msg
  • %User Temp%\_MEI{Random numbers}\tcl\msgs\lt.msg
  • %User Temp%\_MEI{Random numbers}\tcl\msgs\lv.msg
  • %User Temp%\_MEI{Random numbers}\tcl\msgs\mk.msg
  • %User Temp%\_MEI{Random numbers}\tcl\msgs\mr.msg
  • %User Temp%\_MEI{Random numbers}\tcl\msgs\mr_in.msg
  • %User Temp%\_MEI{Random numbers}\tcl\msgs\ms.msg
  • %User Temp%\_MEI{Random numbers}\tcl\msgs\ms_my.msg
  • %User Temp%\_MEI{Random numbers}\tcl\msgs\mt.msg
  • %User Temp%\_MEI{Random numbers}\tcl\msgs\nb.msg
  • %User Temp%\_MEI{Random numbers}\tcl\msgs\nl.msg
  • %User Temp%\_MEI{Random numbers}\tcl\msgs\nl_be.msg
  • %User Temp%\_MEI{Random numbers}\tcl\msgs\nn.msg
  • %User Temp%\_MEI{Random numbers}\tcl\msgs\pl.msg
  • %User Temp%\_MEI{Random numbers}\tcl\msgs\pt.msg
  • %User Temp%\_MEI{Random numbers}\tcl\msgs\pt_br.msg
  • %User Temp%\_MEI{Random numbers}\tcl\msgs\ro.msg
  • %User Temp%\_MEI{Random numbers}\tcl\msgs\ru.msg
  • %User Temp%\_MEI{Random numbers}\tcl\msgs\ru_ua.msg
  • %User Temp%\_MEI{Random numbers}\tcl\msgs\sh.msg
  • %User Temp%\_MEI{Random numbers}\tcl\msgs\sk.msg
  • %User Temp%\_MEI{Random numbers}\tcl\msgs\sl.msg
  • %User Temp%\_MEI{Random numbers}\tcl\msgs\sq.msg
  • %User Temp%\_MEI{Random numbers}\tcl\msgs\sr.msg
  • %User Temp%\_MEI{Random numbers}\tcl\msgs\sv.msg
  • %User Temp%\_MEI{Random numbers}\tcl\msgs\sw.msg
  • %User Temp%\_MEI{Random numbers}\tcl\msgs\ta.msg
  • %User Temp%\_MEI{Random numbers}\tcl\msgs\ta_in.msg
  • %User Temp%\_MEI{Random numbers}\tcl\msgs\te.msg
  • %User Temp%\_MEI{Random numbers}\tcl\msgs\te_in.msg
  • %User Temp%\_MEI{Random numbers}\tcl\msgs\th.msg
  • %User Temp%\_MEI{Random numbers}\tcl\msgs\tr.msg
  • %User Temp%\_MEI{Random numbers}\tcl\msgs\uk.msg
  • %User Temp%\_MEI{Random numbers}\tcl\msgs\vi.msg
  • %User Temp%\_MEI{Random numbers}\tcl\msgs\zh.msg
  • %User Temp%\_MEI{Random numbers}\tcl\msgs\zh_cn.msg
  • %User Temp%\_MEI{Random numbers}\tcl\msgs\zh_hk.msg
  • %User Temp%\_MEI{Random numbers}\tcl\msgs\zh_sg.msg
  • %User Temp%\_MEI{Random numbers}\tcl\msgs\zh_tw.msg
  • %User Temp%\_MEI{Random numbers}\tcl\opt0.4\optparse.tcl
  • %User Temp%\_MEI{Random numbers}\tcl\opt0.4\pkgIndex.tcl
  • %User Temp%\_MEI{Random numbers}\tcl\package.tcl
  • %User Temp%\_MEI{Random numbers}\tcl\parray.tcl
  • %User Temp%\_MEI{Random numbers}\tcl\safe.tcl
  • %User Temp%\_MEI{Random numbers}\tcl\tclIndex
  • %User Temp%\_MEI{Random numbers}\tcl\tm.tcl
  • %User Temp%\_MEI{Random numbers}\tcl\tzdata\Africa\Abidjan
  • %User Temp%\_MEI{Random numbers}\tcl\tzdata\Africa\Accra
  • %User Temp%\_MEI{Random numbers}\tcl\tzdata\Africa\Addis_Ababa
  • %User Temp%\_MEI{Random numbers}\tcl\tzdata\Africa\Algiers
  • %User Temp%\_MEI{Random numbers}\tcl\tzdata\Africa\Asmara
  • %User Temp%\_MEI{Random numbers}\tcl\tzdata\Africa\Asmera
  • %User Temp%\_MEI{Random numbers}\tcl\tzdata\Africa\Bamako
  • %User Temp%\_MEI{Random numbers}\tcl\tzdata\Africa\Bangui
  • %User Temp%\_MEI{Random numbers}\tcl\tzdata\Africa\Banjul
  • %User Temp%\_MEI{Random numbers}\tcl\tzdata\Africa\Bissau
  • %User Temp%\_MEI{Random numbers}\tcl\tzdata\Africa\Blantyre
  • %User Temp%\_MEI{Random numbers}\tcl\tzdata\Africa\Brazzaville
  • %User Temp%\_MEI{Random numbers}\tcl\tzdata\Africa\Bujumbura
  • %User Temp%\_MEI{Random numbers}\tcl\tzdata\Africa\Cairo
  • %User Temp%\_MEI{Random numbers}\tcl\tzdata\Africa\Casablanca
  • %User Temp%\_MEI{Random numbers}\tcl\tzdata\Africa\Ceuta
  • %User Temp%\_MEI{Random numbers}\tcl\tzdata\Africa\Conakry
  • %User Temp%\_MEI{Random numbers}\tcl\tzdata\Africa\Dakar
  • %User Temp%\_MEI{Random numbers}\tcl\tzdata\Africa\Dar_es_Salaam
  • %User Temp%\_MEI{Random numbers}\tcl\tzdata\Africa\Djibouti
  • %User Temp%\_MEI{Random numbers}\tcl\tzdata\Africa\Douala
  • %User Temp%\_MEI{Random numbers}\tcl\tzdata\Africa\El_Aaiun
  • %User Temp%\_MEI{Random numbers}\tcl\tzdata\Africa\Freetown
  • %User Temp%\_MEI{Random numbers}\tcl\tzdata\Africa\Gaborone
  • %User Temp%\_MEI{Random numbers}\tcl\tzdata\Africa\Harare
  • %User Temp%\_MEI{Random numbers}\tcl\tzdata\Africa\Johannesburg
  • %User Temp%\_MEI{Random numbers}\tcl\tzdata\Africa\Juba
  • %User Temp%\_MEI{Random numbers}\tcl\tzdata\Africa\Kampala
  • %User Temp%\_MEI{Random numbers}\tcl\tzdata\Africa\Khartoum
  • %User Temp%\_MEI{Random numbers}\tcl\tzdata\Africa\Kigali
  • %User Temp%\_MEI{Random numbers}\tcl\tzdata\Africa\Kinshasa
  • %User Temp%\_MEI{Random numbers}\tcl\tzdata\Africa\Lagos
  • %User Temp%\_MEI{Random numbers}\tcl\tzdata\Africa\Libreville
  • %User Temp%\_MEI{Random numbers}\tcl\tzdata\Africa\Lome
  • %User Temp%\_MEI{Random numbers}\tcl\tzdata\Africa\Luanda
  • %User Temp%\_MEI{Random numbers}\tcl\tzdata\Africa\Lubumbashi
  • %User Temp%\_MEI{Random numbers}\tcl\tzdata\Africa\Lusaka
  • %User Temp%\_MEI{Random numbers}\tcl\tzdata\Africa\Malabo
  • %User Temp%\_MEI{Random numbers}\tcl\tzdata\Africa\Maputo
  • %User Temp%\_MEI{Random numbers}\tcl\tzdata\Africa\Maseru
  • %User Temp%\_MEI{Random numbers}\tcl\tzdata\Africa\Mbabane
  • %User Temp%\_MEI{Random numbers}\tcl\tzdata\Africa\Mogadishu
  • %User Temp%\_MEI{Random numbers}\tcl\tzdata\Africa\Monrovia
  • %User Temp%\_MEI{Random numbers}\tcl\tzdata\Africa\Nairobi
  • %User Temp%\_MEI{Random numbers}\tcl\tzdata\Africa\Ndjamena
  • %User Temp%\_MEI{Random numbers}\tcl\tzdata\Africa\Niamey
  • %User Temp%\_MEI{Random numbers}\tcl\tzdata\Africa\Nouakchott
  • %User Temp%\_MEI{Random numbers}\tcl\tzdata\Africa\Ouagadougou
  • %User Temp%\_MEI{Random numbers}\tcl\tzdata\Africa\Porto-Novo
  • %User Temp%\_MEI{Random numbers}\tcl\tzdata\Africa\Sao_Tome
  • %User Temp%\_MEI{Random numbers}\tcl\tzdata\Africa\Timbuktu
  • %User Temp%\_MEI{Random numbers}\tcl\tzdata\Africa\Tripoli
  • %User Temp%\_MEI{Random numbers}\tcl\tzdata\Africa\Tunis
  • %User Temp%\_MEI{Random numbers}\tcl\tzdata\Africa\Windhoek
  • %User Temp%\_MEI{Random numbers}\tcl\tzdata\America\Adak
  • %User Temp%\_MEI{Random numbers}\tcl\tzdata\America\Anchorage
  • %User Temp%\_MEI{Random numbers}\tcl\tzdata\America\Anguilla
  • %User Temp%\_MEI{Random numbers}\tcl\tzdata\America\Antigua
  • %User Temp%\_MEI{Random numbers}\tcl\tzdata\America\Araguaina
  • %User Temp%\_MEI{Random numbers}\tcl\tzdata\America\Argentina\Buenos_Aires
  • %User Temp%\_MEI{Random numbers}\tcl\tzdata\America\Argentina\Catamarca
  • %User Temp%\_MEI{Random numbers}\tcl\tzdata\America\Argentina\ComodRivadavia
  • %User Temp%\_MEI{Random numbers}\tcl\tzdata\America\Argentina\Cordoba
  • %User Temp%\_MEI{Random numbers}\tcl\tzdata\America\Argentina\Jujuy
  • %User Temp%\_MEI{Random numbers}\tcl\tzdata\America\Argentina\La_Rioja
  • %User Temp%\_MEI{Random numbers}\tcl\tzdata\America\Argentina\Mendoza
  • %User Temp%\_MEI{Random numbers}\tcl\tzdata\America\Argentina\Rio_Gallegos
  • %User Temp%\_MEI{Random numbers}\tcl\tzdata\America\Argentina\Salta
  • %User Temp%\_MEI{Random numbers}\tcl\tzdata\America\Argentina\San_Juan
  • %User Temp%\_MEI{Random numbers}\tcl\tzdata\America\Argentina\San_Luis
  • %User Temp%\_MEI{Random numbers}\tcl\tzdata\America\Argentina\Tucuman
  • %User Temp%\_MEI{Random numbers}\tcl\tzdata\America\Argentina\Ushuaia
  • %User Temp%\_MEI{Random numbers}\tcl\tzdata\America\Aruba
  • %User Temp%\_MEI{Random numbers}\tcl\tzdata\America\Asuncion
  • %User Temp%\_MEI{Random numbers}\tcl\tzdata\America\Atikokan
  • %User Temp%\_MEI{Random numbers}\tcl\tzdata\America\Atka
  • %User Temp%\_MEI{Random numbers}\tcl\tzdata\America\Bahia
  • %User Temp%\_MEI{Random numbers}\tcl\tzdata\America\Bahia_Banderas
  • %User Temp%\_MEI{Random numbers}\tcl\tzdata\America\Barbados
  • %User Temp%\_MEI{Random numbers}\tcl\tzdata\America\Belem
  • %User Temp%\_MEI{Random numbers}\tcl\tzdata\America\Belize
  • %User Temp%\_MEI{Random numbers}\tcl\tzdata\America\Blanc-Sablon
  • %User Temp%\_MEI{Random numbers}\tcl\tzdata\America\Boa_Vista
  • %User Temp%\_MEI{Random numbers}\tcl\tzdata\America\Bogota
  • %User Temp%\_MEI{Random numbers}\tcl\tzdata\America\Boise
  • %User Temp%\_MEI{Random numbers}\tcl\tzdata\America\Buenos_Aires
  • %User Temp%\_MEI{Random numbers}\tcl\tzdata\America\Cambridge_Bay
  • %User Temp%\_MEI{Random numbers}\tcl\tzdata\America\Campo_Grande
  • %User Temp%\_MEI{Random numbers}\tcl\tzdata\America\Cancun
  • %User Temp%\_MEI{Random numbers}\tcl\tzdata\America\Caracas
  • %User Temp%\_MEI{Random numbers}\tcl\tzdata\America\Catamarca
  • %User Temp%\_MEI{Random numbers}\tcl\tzdata\America\Cayenne
  • %User Temp%\_MEI{Random numbers}\tcl\tzdata\America\Cayman
  • %User Temp%\_MEI{Random numbers}\tcl\tzdata\America\Chicago
  • %User Temp%\_MEI{Random numbers}\tcl\tzdata\America\Chihuahua
  • %User Temp%\_MEI{Random numbers}\tcl\tzdata\America\Coral_Harbour
  • %User Temp%\_MEI{Random numbers}\tcl\tzdata\America\Cordoba
  • %User Temp%\_MEI{Random numbers}\tcl\tzdata\America\Costa_Rica
  • %User Temp%\_MEI{Random numbers}\tcl\tzdata\America\Creston
  • %User Temp%\_MEI{Random numbers}\tcl\tzdata\America\Cuiaba
  • %User Temp%\_MEI{Random numbers}\tcl\tzdata\America\Curacao
  • %User Temp%\_MEI{Random numbers}\tcl\tzdata\America\Danmarkshavn
  • %User Temp%\_MEI{Random numbers}\tcl\tzdata\America\Dawson
  • %User Temp%\_MEI{Random numbers}\tcl\tzdata\America\Dawson_Creek
  • %User Temp%\_MEI{Random numbers}\tcl\tzdata\America\Denver
  • %User Temp%\_MEI{Random numbers}\tcl\tzdata\America\Detroit
  • %User Temp%\_MEI{Random numbers}\tcl\tzdata\America\Dominica
  • %User Temp%\_MEI{Random numbers}\tcl\tzdata\America\Edmonton
  • %User Temp%\_MEI{Random numbers}\tcl\tzdata\America\Eirunepe
  • %User Temp%\_MEI{Random numbers}\tcl\tzdata\America\El_Salvador
  • %User Temp%\_MEI{Random numbers}\tcl\tzdata\America\Ensenada
  • %User Temp%\_MEI{Random numbers}\tcl\tzdata\America\Fort_Wayne
  • %User Temp%\_MEI{Random numbers}\tcl\tzdata\America\Fortaleza
  • %User Temp%\_MEI{Random numbers}\tcl\tzdata\America\Glace_Bay
  • %User Temp%\_MEI{Random numbers}\tcl\tzdata\America\Godthab
  • %User Temp%\_MEI{Random numbers}\tcl\tzdata\America\Goose_Bay
  • %User Temp%\_MEI{Random numbers}\tcl\tzdata\America\Grand_Turk
  • %User Temp%\_MEI{Random numbers}\tcl\tzdata\America\Grenada
  • %User Temp%\_MEI{Random numbers}\tcl\tzdata\America\Guadeloupe
  • %User Temp%\_MEI{Random numbers}\tcl\tzdata\America\Guatemala
  • %User Temp%\_MEI{Random numbers}\tcl\tzdata\America\Guayaquil
  • %User Temp%\_MEI{Random numbers}\tcl\tzdata\America\Guyana
  • %User Temp%\_MEI{Random numbers}\tcl\tzdata\America\Halifax
  • %User Temp%\_MEI{Random numbers}\tcl\tzdata\America\Havana
  • %User Temp%\_MEI{Random numbers}\tcl\tzdata\America\Hermosillo
  • %User Temp%\_MEI{Random numbers}\tcl\tzdata\America\Indiana\Indianapolis
  • %User Temp%\_MEI{Random numbers}\tcl\tzdata\America\Indiana\Knox
  • %User Temp%\_MEI{Random numbers}\tcl\tzdata\America\Indiana\Marengo
  • %User Temp%\_MEI{Random numbers}\tcl\tzdata\America\Indiana\Petersburg
  • %User Temp%\_MEI{Random numbers}\tcl\tzdata\America\Indiana\Tell_City
  • %User Temp%\_MEI{Random numbers}\tcl\tzdata\America\Indiana\Vevay
  • %User Temp%\_MEI{Random numbers}\tcl\tzdata\America\Indiana\Vincennes
  • %User Temp%\_MEI{Random numbers}\tcl\tzdata\America\Indiana\Winamac
  • %User Temp%\_MEI{Random numbers}\tcl\tzdata\America\Indianapolis
  • %User Temp%\_MEI{Random numbers}\tcl\tzdata\America\Inuvik
  • %User Temp%\_MEI{Random numbers}\tcl\tzdata\America\Iqaluit
  • %User Temp%\_MEI{Random numbers}\tcl\tzdata\America\Jamaica
  • %User Temp%\_MEI{Random numbers}\tcl\tzdata\America\Jujuy
  • %User Temp%\_MEI{Random numbers}\tcl\tzdata\America\Juneau
  • %User Temp%\_MEI{Random numbers}\tcl\tzdata\America\Kentucky\Louisville
  • %User Temp%\_MEI{Random numbers}\tcl\tzdata\America\Kentucky\Monticello
  • %User Temp%\_MEI{Random numbers}\tcl\tzdata\America\Knox_IN
  • %User Temp%\_MEI{Random numbers}\tcl\tzdata\America\Kralendijk
  • %User Temp%\_MEI{Random numbers}\tcl\tzdata\America\La_Paz
  • %User Temp%\_MEI{Random numbers}\tcl\tzdata\America\Lima
  • %User Temp%\_MEI{Random numbers}\tcl\tzdata\America\Los_Angeles
  • %User Temp%\_MEI{Random numbers}\tcl\tzdata\America\Louisville
  • %User Temp%\_MEI{Random numbers}\tcl\tzdata\America\Lower_Princes
  • %User Temp%\_MEI{Random numbers}\tcl\tzdata\America\Maceio
  • %User Temp%\_MEI{Random numbers}\tcl\tzdata\America\Managua
  • %User Temp%\_MEI{Random numbers}\tcl\tzdata\America\Manaus
  • %User Temp%\_MEI{Random numbers}\tcl\tzdata\America\Marigot
  • %User Temp%\_MEI{Random numbers}\tcl\tzdata\America\Martinique
  • %User Temp%\_MEI{Random numbers}\tcl\tzdata\America\Matamoros
  • %User Temp%\_MEI{Random numbers}\tcl\tzdata\America\Mazatlan
  • %User Temp%\_MEI{Random numbers}\tcl\tzdata\America\Mendoza
  • %User Temp%\_MEI{Random numbers}\tcl\tzdata\America\Menominee
  • %User Temp%\_MEI{Random numbers}\tcl\tzdata\America\Merida
  • %User Temp%\_MEI{Random numbers}\tcl\tzdata\America\Metlakatla
  • %User Temp%\_MEI{Random numbers}\tcl\tzdata\America\Mexico_City
  • %User Temp%\_MEI{Random numbers}\tcl\tzdata\America\Miquelon
  • %User Temp%\_MEI{Random numbers}\tcl\tzdata\America\Moncton
  • %User Temp%\_MEI{Random numbers}\tcl\tzdata\America\Monterrey
  • %User Temp%\_MEI{Random numbers}\tcl\tzdata\America\Montevideo
  • %User Temp%\_MEI{Random numbers}\tcl\tzdata\America\Montreal
  • %User Temp%\_MEI{Random numbers}\tcl\tzdata\America\Montserrat
  • %User Temp%\_MEI{Random numbers}\tcl\tzdata\America\Nassau
  • %User Temp%\_MEI{Random numbers}\tcl\tzdata\America\New_York
  • %User Temp%\_MEI{Random numbers}\tcl\tzdata\America\Nipigon
  • %User Temp%\_MEI{Random numbers}\tcl\tzdata\America\Nome
  • %User Temp%\_MEI{Random numbers}\tcl\tzdata\America\Noronha
  • %User Temp%\_MEI{Random numbers}\tcl\tzdata\America\North_Dakota\Beulah
  • %User Temp%\_MEI{Random numbers}\tcl\tzdata\America\North_Dakota\Center
  • %User Temp%\_MEI{Random numbers}\tcl\tzdata\America\North_Dakota\New_Salem
  • %User Temp%\_MEI{Random numbers}\tcl\tzdata\America\Ojinaga
  • %User Temp%\_MEI{Random numbers}\tcl\tzdata\America\Panama
  • %User Temp%\_MEI{Random numbers}\tcl\tzdata\America\Pangnirtung
  • %User Temp%\_MEI{Random numbers}\tcl\tzdata\America\Paramaribo
  • %User Temp%\_MEI{Random numbers}\tcl\tzdata\America\Phoenix
  • %User Temp%\_MEI{Random numbers}\tcl\tzdata\America\Port-au-Prince
  • %User Temp%\_MEI{Random numbers}\tcl\tzdata\America\Port_of_Spain
  • %User Temp%\_MEI{Random numbers}\tcl\tzdata\America\Porto_Acre
  • %User Temp%\_MEI{Random numbers}\tcl\tzdata\America\Porto_Velho
  • %User Temp%\_MEI{Random numbers}\tcl\tzdata\America\Puerto_Rico
  • %User Temp%\_MEI{Random numbers}\tcl\tzdata\America\Rainy_River
  • %User Temp%\_MEI{Random numbers}\tcl\tzdata\America\Rankin_Inlet
  • %User Temp%\_MEI{Random numbers}\tcl\tzdata\America\Recife
  • %User Temp%\_MEI{Random numbers}\tcl\tzdata\America\Regina
  • %User Temp%\_MEI{Random numbers}\tcl\tzdata\America\Resolute
  • %User Temp%\_MEI{Random numbers}\tcl\tzdata\America\Rio_Branco
  • %User Temp%\_MEI{Random numbers}\tcl\tzdata\America\Rosario
  • %User Temp%\_MEI{Random numbers}\tcl\tzdata\America\Santa_Isabel
  • %User Temp%\_MEI{Random numbers}\tcl\tzdata\America\Santarem
  • %User Temp%\_MEI{Random numbers}\tcl\tzdata\America\Santiago
  • %User Temp%\_MEI{Random numbers}\tcl\tzdata\America\Santo_Domingo
  • %User Temp%\_MEI{Random numbers}\tcl\tzdata\America\Sao_Paulo
  • %User Temp%\_MEI{Random numbers}\tcl\tzdata\America\Scoresbysund
  • %User Temp%\_MEI{Random numbers}\tcl\tzdata\America\Shiprock
  • %User Temp%\_MEI{Random numbers}\tcl\tzdata\America\Sitka
  • %User Temp%\_MEI{Random numbers}\tcl\tzdata\America\St_Barthelemy
  • %User Temp%\_MEI{Random numbers}\tcl\tzdata\America\St_Johns
  • %User Temp%\_MEI{Random numbers}\tcl\tzdata\America\St_Kitts
  • %User Temp%\_MEI{Random numbers}\tcl\tzdata\America\St_Lucia
  • %User Temp%\_MEI{Random numbers}\tcl\tzdata\America\St_Thomas
  • %User Temp%\_MEI{Random numbers}\tcl\tzdata\America\St_Vincent
  • %User Temp%\_MEI{Random numbers}\tcl\tzdata\America\Swift_Current
  • %User Temp%\_MEI{Random numbers}\tcl\tzdata\America\Tegucigalpa
  • %User Temp%\_MEI{Random numbers}\tcl\tzdata\America\Thule
  • %User Temp%\_MEI{Random numbers}\tcl\tzdata\America\Thunder_Bay
  • %User Temp%\_MEI{Random numbers}\tcl\tzdata\America\Tijuana
  • %User Temp%\_MEI{Random numbers}\tcl\tzdata\America\Toronto
  • %User Temp%\_MEI{Random numbers}\tcl\tzdata\America\Tortola
  • %User Temp%\_MEI{Random numbers}\tcl\tzdata\America\Vancouver
  • %User Temp%\_MEI{Random numbers}\tcl\tzdata\America\Virgin
  • %User Temp%\_MEI{Random numbers}\tcl\tzdata\America\Whitehorse
  • %User Temp%\_MEI{Random numbers}\tcl\tzdata\America\Winnipeg
  • %User Temp%\_MEI{Random numbers}\tcl\tzdata\America\Yakutat
  • %User Temp%\_MEI{Random numbers}\tcl\tzdata\America\Yellowknife
  • %User Temp%\_MEI{Random numbers}\tcl\tzdata\Antarctica\Casey
  • %User Temp%\_MEI{Random numbers}\tcl\tzdata\Antarctica\Davis
  • %User Temp%\_MEI{Random numbers}\tcl\tzdata\Antarctica\DumontDUrville
  • %User Temp%\_MEI{Random numbers}\tcl\tzdata\Antarctica\Macquarie
  • %User Temp%\_MEI{Random numbers}\tcl\tzdata\Antarctica\Mawson
  • %User Temp%\_MEI{Random numbers}\tcl\tzdata\Antarctica\McMurdo
  • %User Temp%\_MEI{Random numbers}\tcl\tzdata\Antarctica\Palmer
  • %User Temp%\_MEI{Random numbers}\tcl\tzdata\Antarctica\Rothera
  • %User Temp%\_MEI{Random numbers}\tcl\tzdata\Antarctica\South_Pole
  • %User Temp%\_MEI{Random numbers}\tcl\tzdata\Antarctica\Syowa
  • %User Temp%\_MEI{Random numbers}\tcl\tzdata\Antarctica\Vostok
  • %User Temp%\_MEI{Random numbers}\tcl\tzdata\Arctic\Longyearbyen
  • %User Temp%\_MEI{Random numbers}\tcl\tzdata\Asia\Aden
  • %User Temp%\_MEI{Random numbers}\tcl\tzdata\Asia\Almaty
  • %User Temp%\_MEI{Random numbers}\tcl\tzdata\Asia\Amman
  • %User Temp%\_MEI{Random numbers}\tcl\tzdata\Asia\Anadyr
  • %User Temp%\_MEI{Random numbers}\tcl\tzdata\Asia\Aqtau
  • %User Temp%\_MEI{Random numbers}\tcl\tzdata\Asia\Aqtobe
  • %User Temp%\_MEI{Random numbers}\tcl\tzdata\Asia\Ashgabat
  • %User Temp%\_MEI{Random numbers}\tcl\tzdata\Asia\Ashkhabad
  • %User Temp%\_MEI{Random numbers}\tcl\tzdata\Asia\Baghdad
  • %User Temp%\_MEI{Random numbers}\tcl\tzdata\Asia\Bahrain
  • %User Temp%\_MEI{Random numbers}\tcl\tzdata\Asia\Baku
  • %User Temp%\_MEI{Random numbers}\tcl\tzdata\Asia\Bangkok
  • %User Temp%\_MEI{Random numbers}\tcl\tzdata\Asia\Beirut
  • %User Temp%\_MEI{Random numbers}\tcl\tzdata\Asia\Bishkek
  • %User Temp%\_MEI{Random numbers}\tcl\tzdata\Asia\Brunei
  • %User Temp%\_MEI{Random numbers}\tcl\tzdata\Asia\Calcutta
  • %User Temp%\_MEI{Random numbers}\tcl\tzdata\Asia\Choibalsan
  • %User Temp%\_MEI{Random numbers}\tcl\tzdata\Asia\Chongqing
  • %User Temp%\_MEI{Random numbers}\tcl\tzdata\Asia\Chungking
  • %User Temp%\_MEI{Random numbers}\tcl\tzdata\Asia\Colombo
  • %User Temp%\_MEI{Random numbers}\tcl\tzdata\Asia\Dacca
  • %User Temp%\_MEI{Random numbers}\tcl\tzdata\Asia\Damascus
  • %User Temp%\_MEI{Random numbers}\tcl\tzdata\Asia\Dhaka
  • %User Temp%\_MEI{Random numbers}\tcl\tzdata\Asia\Dili
  • %User Temp%\_MEI{Random numbers}\tcl\tzdata\Asia\Dubai
  • %User Temp%\_MEI{Random numbers}\tcl\tzdata\Asia\Dushanbe
  • %User Temp%\_MEI{Random numbers}\tcl\tzdata\Asia\Gaza
  • %User Temp%\_MEI{Random numbers}\tcl\tzdata\Asia\Harbin
  • %User Temp%\_MEI{Random numbers}\tcl\tzdata\Asia\Hebron
  • %User Temp%\_MEI{Random numbers}\tcl\tzdata\Asia\Ho_Chi_Minh
  • %User Temp%\_MEI{Random numbers}\tcl\tzdata\Asia\Hong_Kong
  • %User Temp%\_MEI{Random numbers}\tcl\tzdata\Asia\Hovd
  • %User Temp%\_MEI{Random numbers}\tcl\tzdata\Asia\Irkutsk
  • %User Temp%\_MEI{Random numbers}\tcl\tzdata\Asia\Istanbul
  • %User Temp%\_MEI{Random numbers}\tcl\tzdata\Asia\Jakarta
  • %User Temp%\_MEI{Random numbers}\tcl\tzdata\Asia\Jayapura
  • %User Temp%\_MEI{Random numbers}\tcl\tzdata\Asia\Jerusalem
  • %User Temp%\_MEI{Random numbers}\tcl\tzdata\Asia\Kabul
  • %User Temp%\_MEI{Random numbers}\tcl\tzdata\Asia\Kamchatka
  • %User Temp%\_MEI{Random numbers}\tcl\tzdata\Asia\Karachi
  • %User Temp%\_MEI{Random numbers}\tcl\tzdata\Asia\Nicosia
  • %User Temp%\_MEI{Random numbers}\tcl\tzdata\Asia\Novokuznetsk
  • %User Temp%\_MEI{Random numbers}\tcl\tzdata\Asia\Novosibirsk
  • %User Temp%\_MEI{Random numbers}\tcl\tzdata\Asia\Omsk
  • %User Temp%\_MEI{Random numbers}\tcl\tzdata\Asia\Oral
  • %User Temp%\_MEI{Random numbers}\tcl\tzdata\Asia\Phnom_Penh
  • %User Temp%\_MEI{Random numbers}\tcl\tzdata\Asia\Pontianak
  • %User Temp%\_MEI{Random numbers}\tcl\tzdata\Asia\Pyongyang
  • %User Temp%\_MEI{Random numbers}\tcl\tzdata\Asia\Qatar
  • %User Temp%\_MEI{Random numbers}\tcl\tzdata\Asia\Qyzylorda
  • %User Temp%\_MEI{Random numbers}\tcl\tzdata\Asia\Rangoon
  • %User Temp%\_MEI{Random numbers}\tcl\tzdata\Asia\Riyadh
  • %User Temp%\_MEI{Random numbers}\tcl\tzdata\Asia\Saigon
  • %User Temp%\_MEI{Random numbers}\tcl\tzdata\Asia\Sakhalin
  • %User Temp%\_MEI{Random numbers}\tcl\tzdata\Asia\Samarkand
  • %User Temp%\_MEI{Random numbers}\tcl\tzdata\Asia\Seoul
  • %User Temp%\_MEI{Random numbers}\tcl\tzdata\Asia\Shanghai
  • %User Temp%\_MEI{Random numbers}\tcl\tzdata\Asia\Singapore
  • %User Temp%\_MEI{Random numbers}\tcl\tzdata\Asia\Taipei
  • %User Temp%\_MEI{Random numbers}\tcl\tzdata\Asia\Tashkent
  • %User Temp%\_MEI{Random numbers}\tcl\tzdata\Asia\Tbilisi
  • %User Temp%\_MEI{Random numbers}\tcl\tzdata\Asia\Tehran
  • %User Temp%\_MEI{Random numbers}\tcl\tzdata\Asia\Tel_Aviv
  • %User Temp%\_MEI{Random numbers}\tcl\tzdata\Asia\Thimbu
  • %User Temp%\_MEI{Random numbers}\tcl\tzdata\Asia\Thimphu
  • %User Temp%\_MEI{Random numbers}\tcl\tzdata\Asia\Tokyo
  • %User Temp%\_MEI{Random numbers}\tcl\tzdata\Asia\Ujung_Pandang
  • %User Temp%\_MEI{Random numbers}\tcl\tzdata\Asia\Ulaanbaatar
  • %User Temp%\_MEI{Random numbers}\tcl\tzdata\Asia\Ulan_Bator
  • %User Temp%\_MEI{Random numbers}\tcl\tzdata\Asia\Urumqi
  • %User Temp%\_MEI{Random numbers}\tcl\tzdata\Asia\Ust-Nera
  • %User Temp%\_MEI{Random numbers}\tcl\tzdata\Asia\Vientiane
  • %User Temp%\_MEI{Random numbers}\tcl\tzdata\Asia\Vladivostok
  • %User Temp%\_MEI{Random numbers}\tcl\tzdata\Asia\Yakutsk
  • %User Temp%\_MEI{Random numbers}\tcl\tzdata\Asia\Yekaterinburg
  • %User Temp%\_MEI{Random numbers}\tcl\tzdata\Asia\Yerevan
  • %User Temp%\_MEI{Random numbers}\tcl\tzdata\Atlantic\Azores
  • %User Temp%\_MEI{Random numbers}\tcl\tzdata\Singapore
  • %User Temp%\_MEI{Random numbers}\tcl\tzdata\SystemV\AST4
  • %User Temp%\_MEI{Random numbers}\tcl\tzdata\SystemV\AST4ADT
  • %User Temp%\_MEI{Random numbers}\tcl\tzdata\SystemV\CST6
  • %User Temp%\_MEI{Random numbers}\tcl\tzdata\SystemV\CST6CDT
  • %User Temp%\_MEI{Random numbers}\tcl\tzdata\SystemV\EST5
  • %User Temp%\_MEI{Random numbers}\tcl\tzdata\SystemV\EST5EDT
  • %User Temp%\_MEI{Random numbers}\tcl\tzdata\SystemV\HST10
  • %User Temp%\_MEI{Random numbers}\tcl\tzdata\SystemV\MST7
  • %User Temp%\_MEI{Random numbers}\tcl\tzdata\SystemV\MST7MDT
  • %User Temp%\_MEI{Random numbers}\tcl\tzdata\SystemV\PST8
  • %User Temp%\_MEI{Random numbers}\tcl\tzdata\SystemV\PST8PDT
  • %User Temp%\_MEI{Random numbers}\tcl\tzdata\SystemV\YST9
  • %User Temp%\_MEI{Random numbers}\tcl\tzdata\SystemV\YST9YDT
  • %User Temp%\_MEI{Random numbers}\tcl\tzdata\Turkey
  • %User Temp%\_MEI{Random numbers}\tcl\tzdata\UCT
  • %User Temp%\_MEI{Random numbers}\tcl\tzdata\US\Alaska
  • %User Temp%\_MEI{Random numbers}\tcl\tzdata\US\Aleutian
  • %User Temp%\_MEI{Random numbers}\tcl\tzdata\US\Arizona
  • %User Temp%\_MEI{Random numbers}\tcl\tzdata\US\Central
  • %User Temp%\_MEI{Random numbers}\tcl\tzdata\US\East-Indiana
  • %User Temp%\_MEI{Random numbers}\tcl\tzdata\US\Eastern
  • %User Temp%\_MEI{Random numbers}\tcl\tzdata\US\Hawaii
  • %User Temp%\_MEI{Random numbers}\tcl\tzdata\US\Indiana-Starke
  • %User Temp%\_MEI{Random numbers}\tcl\tzdata\US\Michigan
  • %User Temp%\_MEI{Random numbers}\tcl\tzdata\US\Mountain
  • %User Temp%\_MEI{Random numbers}\tcl\tzdata\US\Pacific
  • %User Temp%\_MEI{Random numbers}\tcl\tzdata\US\Pacific-New
  • %User Temp%\_MEI{Random numbers}\tcl\tzdata\US\Samoa
  • %User Temp%\_MEI{Random numbers}\tcl\tzdata\UTC
  • %User Temp%\_MEI{Random numbers}\tcl\tzdata\Universal
  • %User Temp%\_MEI{Random numbers}\tcl\tzdata\W-SU
  • %User Temp%\_MEI{Random numbers}\tcl\tzdata\WET
  • %User Temp%\_MEI{Random numbers}\tcl\tzdata\Zulu
  • %User Temp%\_MEI{Random numbers}\tk\bgerror.tcl
  • %User Temp%\_MEI{Random numbers}\tk\button.tcl
  • %User Temp%\_MEI{Random numbers}\tk\choosedir.tcl
  • %User Temp%\_MEI{Random numbers}\tk\clrpick.tcl
  • %User Temp%\_MEI{Random numbers}\tk\comdlg.tcl
  • %User Temp%\_MEI{Random numbers}\tk\console.tcl
  • %User Temp%\_MEI{Random numbers}\tk\dialog.tcl
  • %User Temp%\_MEI{Random numbers}\tk\entry.tcl
  • %User Temp%\_MEI{Random numbers}\tk\focus.tcl
  • %User Temp%\_MEI{Random numbers}\tk\images\README
  • %User Temp%\_MEI{Random numbers}\tk\images\logo.eps
  • %User Temp%\_MEI{Random numbers}\tk\images\logo100.gif
  • %User Temp%\_MEI{Random numbers}\tk\images\logo64.gif
  • %User Temp%\_MEI{Random numbers}\tk\images\logoLarge.gif
  • %User Temp%\_MEI{Random numbers}\tk\images\logoMed.gif
  • %User Temp%\_MEI{Random numbers}\tk\images\pwrdLogo.eps
  • %User Temp%\_MEI{Random numbers}\tk\images\pwrdLogo100.gif
  • %User Temp%\_MEI{Random numbers}\tk\images\pwrdLogo150.gif
  • %User Temp%\_MEI{Random numbers}\tk\images\pwrdLogo175.gif
  • %User Temp%\_MEI{Random numbers}\tk\images\pwrdLogo200.gif
  • %User Temp%\_MEI{Random numbers}\tk\images\pwrdLogo75.gif
  • %User Temp%\_MEI{Random numbers}\tk\images\tai-ku.gif
  • %User Temp%\_MEI{Random numbers}\tk\license.terms
  • %User Temp%\_MEI{Random numbers}\tk\listbox.tcl
  • %User Temp%\_MEI{Random numbers}\tk\menu.tcl
  • %User Temp%\_MEI{Random numbers}\tk\mkpsenc.tcl
  • %User Temp%\_MEI{Random numbers}\tk\msgbox.tcl
  • %User Temp%\_MEI{Random numbers}\tk\msgs\cs.msg
  • %User Temp%\_MEI{Random numbers}\tk\msgs\da.msg
  • %User Temp%\_MEI{Random numbers}\tk\msgs\de.msg
  • %User Temp%\_MEI{Random numbers}\tk\msgs\el.msg
  • %User Temp%\_MEI{Random numbers}\tk\msgs\en.msg
  • %User Temp%\_MEI{Random numbers}\tk\msgs\en_gb.msg
  • %User Temp%\_MEI{Random numbers}\tk\msgs\eo.msg
  • %User Temp%\_MEI{Random numbers}\tk\msgs\es.msg
  • %User Temp%\_MEI{Random numbers}\tk\msgs\fr.msg
  • %User Temp%\_MEI{Random numbers}\tk\msgs\hu.msg
  • %User Temp%\_MEI{Random numbers}\tk\msgs\it.msg
  • %User Temp%\_MEI{Random numbers}\tk\msgs\nl.msg
  • %User Temp%\_MEI{Random numbers}\tk\msgs\pl.msg
  • %User Temp%\_MEI{Random numbers}\tk\msgs\pt.msg
  • %User Temp%\_MEI{Random numbers}\tk\msgs\ru.msg
  • %User Temp%\_MEI{Random numbers}\tk\msgs\sv.msg
  • %User Temp%\_MEI{Random numbers}\tk\obsolete.tcl
  • %User Temp%\_MEI{Random numbers}\tk\optMenu.tcl
  • %User Temp%\_MEI{Random numbers}\tk\palette.tcl
  • %User Temp%\_MEI{Random numbers}\tk\panedwindow.tcl
  • %User Temp%\_MEI{Random numbers}\tk\pkgIndex.tcl
  • %User Temp%\_MEI{Random numbers}\tk\safetk.tcl
  • %User Temp%\_MEI{Random numbers}\tk\scale.tcl
  • %User Temp%\_MEI{Random numbers}\tk\scrlbar.tcl
  • %User Temp%\_MEI{Random numbers}\tk\spinbox.tcl
  • %User Temp%\_MEI{Random numbers}\tk\tclIndex
  • %User Temp%\_MEI{Random numbers}\tk\tearoff.tcl
  • %User Temp%\_MEI{Random numbers}\tk\text.tcl
  • %User Temp%\_MEI{Random numbers}\tk\tk.tcl
  • %User Temp%\_MEI{Random numbers}\tk\tkfbox.tcl
  • %User Temp%\_MEI{Random numbers}\tk\ttk\altTheme.tcl
  • %User Temp%\_MEI{Random numbers}\tk\ttk\treeview.tcl
  • %User Temp%\_MEI{Random numbers}\tk\ttk\ttk.tcl
  • %User Temp%\_MEI{Random numbers}\tk\ttk\utils.tcl
  • %User Temp%\_MEI{Random numbers}\tk\ttk\vistaTheme.tcl
  • %User Temp%\_MEI{Random numbers}\tk\ttk\winTheme.tcl
  • %User Temp%\_MEI{Random numbers}\tk\ttk\xpTheme.tcl
  • %User Temp%\_MEI{Random numbers}\tk\unsupported.tcl
  • %User Temp%\_MEI{Random numbers}\tk\xmfbox.tcl
  • {malware path}\RANSOM_NOTE.txt - Copy of ransom note
  • {malware path}\pwd - Contains encryption keys
  • %User Temp%\_MEI{Random numbers}\tcl\tzdata\Asia\Kashgar
  • %User Temp%\_MEI{Random numbers}\tcl\tzdata\Asia\Kathmandu
  • %User Temp%\_MEI{Random numbers}\tcl\tzdata\Asia\Katmandu
  • %User Temp%\_MEI{Random numbers}\tcl\tzdata\Asia\Khandyga
  • %User Temp%\_MEI{Random numbers}\tcl\tzdata\Asia\Kolkata
  • %User Temp%\_MEI{Random numbers}\tcl\tzdata\Asia\Krasnoyarsk
  • %User Temp%\_MEI{Random numbers}\tcl\tzdata\Asia\Kuala_Lumpur
  • %User Temp%\_MEI{Random numbers}\tcl\tzdata\Asia\Kuching
  • %User Temp%\_MEI{Random numbers}\tcl\tzdata\Asia\Kuwait
  • %User Temp%\_MEI{Random numbers}\tcl\tzdata\Asia\Macao
  • %User Temp%\_MEI{Random numbers}\tcl\tzdata\Asia\Macau
  • %User Temp%\_MEI{Random numbers}\tcl\tzdata\Asia\Magadan
  • %User Temp%\_MEI{Random numbers}\tcl\tzdata\Asia\Makassar
  • %User Temp%\_MEI{Random numbers}\tcl\tzdata\Asia\Manila
  • %User Temp%\_MEI{Random numbers}\tcl\tzdata\Asia\Muscat
  • %User Temp%\_MEI{Random numbers}\tcl\tzdata\Atlantic\Bermuda
  • %User Temp%\_MEI{Random numbers}\tcl\tzdata\Atlantic\Canary
  • %User Temp%\_MEI{Random numbers}\tcl\tzdata\Atlantic\Cape_Verde
  • %User Temp%\_MEI{Random numbers}\tcl\tzdata\Atlantic\Faeroe
  • %User Temp%\_MEI{Random numbers}\tcl\tzdata\Atlantic\Faroe
  • %User Temp%\_MEI{Random numbers}\tcl\tzdata\Atlantic\Jan_Mayen
  • %User Temp%\_MEI{Random numbers}\tcl\tzdata\Atlantic\Madeira
  • %User Temp%\_MEI{Random numbers}\tcl\tzdata\Atlantic\Reykjavik
  • %User Temp%\_MEI{Random numbers}\tcl\tzdata\Atlantic\South_Georgia
  • %User Temp%\_MEI{Random numbers}\tcl\tzdata\Atlantic\St_Helena
  • %User Temp%\_MEI{Random numbers}\tcl\tzdata\Atlantic\Stanley
  • %User Temp%\_MEI{Random numbers}\tcl\tzdata\Australia\ACT
  • %User Temp%\_MEI{Random numbers}\tcl\tzdata\Australia\Adelaide
  • %User Temp%\_MEI{Random numbers}\tcl\tzdata\Australia\Brisbane
  • %User Temp%\_MEI{Random numbers}\tcl\tzdata\Australia\Broken_Hill
  • %User Temp%\_MEI{Random numbers}\tcl\tzdata\Australia\Canberra
  • %User Temp%\_MEI{Random numbers}\tcl\tzdata\Australia\Currie
  • %User Temp%\_MEI{Random numbers}\tcl\tzdata\Australia\Darwin
  • %User Temp%\_MEI{Random numbers}\tcl\tzdata\Australia\Eucla
  • %User Temp%\_MEI{Random numbers}\tcl\tzdata\Australia\Hobart
  • %User Temp%\_MEI{Random numbers}\tcl\tzdata\Australia\LHI
  • %User Temp%\_MEI{Random numbers}\tcl\tzdata\Australia\Lindeman
  • %User Temp%\_MEI{Random numbers}\tcl\tzdata\Australia\Lord_Howe
  • %User Temp%\_MEI{Random numbers}\tcl\tzdata\Australia\Melbourne
  • %User Temp%\_MEI{Random numbers}\tcl\tzdata\Australia\NSW
  • %User Temp%\_MEI{Random numbers}\tcl\tzdata\Australia\North
  • %User Temp%\_MEI{Random numbers}\tcl\tzdata\Australia\Perth
  • %User Temp%\_MEI{Random numbers}\tcl\tzdata\Australia\Queensland
  • %User Temp%\_MEI{Random numbers}\tcl\tzdata\Australia\South
  • %User Temp%\_MEI{Random numbers}\tcl\tzdata\Australia\Sydney
  • %User Temp%\_MEI{Random numbers}\tcl\tzdata\Australia\Tasmania
  • %User Temp%\_MEI{Random numbers}\tcl\tzdata\Australia\Victoria
  • %User Temp%\_MEI{Random numbers}\tcl\tzdata\Australia\West
  • %User Temp%\_MEI{Random numbers}\tcl\tzdata\Australia\Yancowinna
  • %User Temp%\_MEI{Random numbers}\tcl\tzdata\Brazil\Acre
  • %User Temp%\_MEI{Random numbers}\tcl\tzdata\Brazil\DeNoronha
  • %User Temp%\_MEI{Random numbers}\tcl\tzdata\Brazil\East
  • %User Temp%\_MEI{Random numbers}\tcl\tzdata\Brazil\West
  • %User Temp%\_MEI{Random numbers}\tcl\tzdata\CET
  • %User Temp%\_MEI{Random numbers}\tcl\tzdata\CST6CDT
  • %User Temp%\_MEI{Random numbers}\tcl\tzdata\Canada\Atlantic
  • %User Temp%\_MEI{Random numbers}\tcl\tzdata\Canada\Central
  • %User Temp%\_MEI{Random numbers}\tcl\tzdata\Canada\East-Saskatchewan
  • %User Temp%\_MEI{Random numbers}\tcl\tzdata\Canada\Eastern
  • %User Temp%\_MEI{Random numbers}\tcl\tzdata\Canada\Mountain
  • %User Temp%\_MEI{Random numbers}\tcl\tzdata\Canada\Newfoundland
  • %User Temp%\_MEI{Random numbers}\tcl\tzdata\Canada\Pacific
  • %User Temp%\_MEI{Random numbers}\tcl\tzdata\Canada\Saskatchewan
  • %User Temp%\_MEI{Random numbers}\tcl\tzdata\Canada\Yukon
  • %User Temp%\_MEI{Random numbers}\tcl\tzdata\Chile\Continental
  • %User Temp%\_MEI{Random numbers}\tcl\tzdata\Chile\EasterIsland
  • %User Temp%\_MEI{Random numbers}\tcl\tzdata\Cuba
  • %User Temp%\_MEI{Random numbers}\tcl\tzdata\EET
  • %User Temp%\_MEI{Random numbers}\tcl\tzdata\EST
  • %User Temp%\_MEI{Random numbers}\tcl\tzdata\EST5EDT
  • %User Temp%\_MEI{Random numbers}\tcl\tzdata\Egypt
  • %User Temp%\_MEI{Random numbers}\tcl\tzdata\Eire
  • %User Temp%\_MEI{Random numbers}\tcl\tzdata\Etc\GMT
  • %User Temp%\_MEI{Random numbers}\tcl\tzdata\Etc\GMT+0
  • %User Temp%\_MEI{Random numbers}\tcl\tzdata\Etc\GMT+1
  • %User Temp%\_MEI{Random numbers}\tcl\tzdata\Etc\GMT+10
  • %User Temp%\_MEI{Random numbers}\tcl\tzdata\Etc\GMT+11
  • %User Temp%\_MEI{Random numbers}\tcl\tzdata\Etc\GMT+12
  • %User Temp%\_MEI{Random numbers}\tcl\tzdata\Etc\GMT+2
  • %User Temp%\_MEI{Random numbers}\tcl\tzdata\Etc\GMT+3
  • %User Temp%\_MEI{Random numbers}\tcl\tzdata\Etc\GMT+4
  • %User Temp%\_MEI{Random numbers}\tcl\tzdata\Etc\GMT+5
  • %User Temp%\_MEI{Random numbers}\tcl\tzdata\Etc\GMT+6
  • %User Temp%\_MEI{Random numbers}\tcl\tzdata\Etc\GMT+7
  • %User Temp%\_MEI{Random numbers}\tcl\tzdata\Etc\GMT+8
  • %User Temp%\_MEI{Random numbers}\tcl\tzdata\Etc\GMT+9
  • %User Temp%\_MEI{Random numbers}\tcl\tzdata\Etc\GMT-0
  • %User Temp%\_MEI{Random numbers}\tcl\tzdata\Etc\GMT-1
  • %User Temp%\_MEI{Random numbers}\tcl\tzdata\Etc\GMT-10
  • %User Temp%\_MEI{Random numbers}\tcl\tzdata\Etc\GMT-11
  • %User Temp%\_MEI{Random numbers}\tcl\tzdata\Etc\GMT-12
  • %User Temp%\_MEI{Random numbers}\tcl\tzdata\Etc\GMT-13
  • %User Temp%\_MEI{Random numbers}\tcl\tzdata\Etc\GMT-14
  • %User Temp%\_MEI{Random numbers}\tcl\tzdata\Etc\GMT-2
  • %User Temp%\_MEI{Random numbers}\tcl\tzdata\Etc\GMT-3
  • %User Temp%\_MEI{Random numbers}\tcl\tzdata\Etc\GMT-4
  • %User Temp%\_MEI{Random numbers}\tcl\tzdata\Etc\GMT-5
  • %User Temp%\_MEI{Random numbers}\tcl\tzdata\Etc\GMT-6
  • %User Temp%\_MEI{Random numbers}\tcl\tzdata\Etc\GMT-7
  • %User Temp%\_MEI{Random numbers}\tcl\tzdata\Etc\GMT-8
  • %User Temp%\_MEI{Random numbers}\tcl\tzdata\Etc\GMT-9
  • %User Temp%\_MEI{Random numbers}\tcl\tzdata\Etc\GMT0
  • %User Temp%\_MEI{Random numbers}\tcl\tzdata\Etc\Greenwich
  • %User Temp%\_MEI{Random numbers}\tcl\tzdata\Etc\UCT
  • %User Temp%\_MEI{Random numbers}\tcl\tzdata\Etc\UTC
  • %User Temp%\_MEI{Random numbers}\tcl\tzdata\Etc\Universal
  • %User Temp%\_MEI{Random numbers}\tcl\tzdata\Etc\Zulu
  • %User Temp%\_MEI{Random numbers}\tcl\tzdata\Europe\Amsterdam
  • %User Temp%\_MEI{Random numbers}\tcl\tzdata\Europe\Andorra
  • %User Temp%\_MEI{Random numbers}\tcl\tzdata\Europe\Athens
  • %User Temp%\_MEI{Random numbers}\tcl\tzdata\Europe\Belfast
  • %User Temp%\_MEI{Random numbers}\tcl\tzdata\Europe\Belgrade
  • %User Temp%\_MEI{Random numbers}\tcl\tzdata\Europe\Berlin
  • %User Temp%\_MEI{Random numbers}\tcl\tzdata\Europe\Bratislava
  • %User Temp%\_MEI{Random numbers}\tcl\tzdata\Europe\Brussels
  • %User Temp%\_MEI{Random numbers}\tcl\tzdata\Europe\Bucharest
  • %User Temp%\_MEI{Random numbers}\tcl\tzdata\Europe\Budapest
  • %User Temp%\_MEI{Random numbers}\tcl\tzdata\Europe\Busingen
  • %User Temp%\_MEI{Random numbers}\tcl\tzdata\Europe\Chisinau
  • %User Temp%\_MEI{Random numbers}\tcl\tzdata\Europe\Copenhagen
  • %User Temp%\_MEI{Random numbers}\tcl\tzdata\Europe\Dublin
  • %User Temp%\_MEI{Random numbers}\tcl\tzdata\Europe\Gibraltar
  • %User Temp%\_MEI{Random numbers}\tcl\tzdata\Europe\Guernsey
  • %User Temp%\_MEI{Random numbers}\tcl\tzdata\Europe\Helsinki
  • %User Temp%\_MEI{Random numbers}\tcl\tzdata\Europe\Isle_of_Man
  • %User Temp%\_MEI{Random numbers}\tcl\tzdata\Europe\Istanbul
  • %User Temp%\_MEI{Random numbers}\tcl\tzdata\Europe\Jersey
  • %User Temp%\_MEI{Random numbers}\tcl\tzdata\Europe\Kaliningrad
  • %User Temp%\_MEI{Random numbers}\tcl\tzdata\Europe\Kiev
  • %User Temp%\_MEI{Random numbers}\tcl\tzdata\Europe\Lisbon
  • %User Temp%\_MEI{Random numbers}\tcl\tzdata\Europe\Ljubljana
  • %User Temp%\_MEI{Random numbers}\tcl\tzdata\Europe\London
  • %User Temp%\_MEI{Random numbers}\tcl\tzdata\Europe\Luxembourg
  • %User Temp%\_MEI{Random numbers}\tcl\tzdata\Europe\Madrid
  • %User Temp%\_MEI{Random numbers}\tcl\tzdata\Europe\Malta
  • %User Temp%\_MEI{Random numbers}\tcl\tzdata\Europe\Mariehamn
  • %User Temp%\_MEI{Random numbers}\tcl\tzdata\Europe\Minsk
  • %User Temp%\_MEI{Random numbers}\tcl\tzdata\Europe\Monaco
  • %User Temp%\_MEI{Random numbers}\tcl\tzdata\Europe\Moscow
  • %User Temp%\_MEI{Random numbers}\tcl\tzdata\Europe\Nicosia
  • %User Temp%\_MEI{Random numbers}\tcl\tzdata\Europe\Oslo
  • %User Temp%\_MEI{Random numbers}\tcl\tzdata\Europe\Paris
  • %User Temp%\_MEI{Random numbers}\tcl\tzdata\Europe\Podgorica
  • %User Temp%\_MEI{Random numbers}\tcl\tzdata\Europe\Prague
  • %User Temp%\_MEI{Random numbers}\tcl\tzdata\Europe\Riga
  • %User Temp%\_MEI{Random numbers}\tcl\tzdata\Europe\Rome
  • %User Temp%\_MEI{Random numbers}\tcl\tzdata\Europe\Samara
  • %User Temp%\_MEI{Random numbers}\tcl\tzdata\Europe\San_Marino
  • %User Temp%\_MEI{Random numbers}\tcl\tzdata\Europe\Sarajevo
  • %User Temp%\_MEI{Random numbers}\tcl\tzdata\Europe\Simferopol
  • %User Temp%\_MEI{Random numbers}\tcl\tzdata\Europe\Skopje
  • %User Temp%\_MEI{Random numbers}\tcl\tzdata\Europe\Sofia
  • %User Temp%\_MEI{Random numbers}\tcl\tzdata\Europe\Stockholm
  • %User Temp%\_MEI{Random numbers}\tcl\tzdata\Europe\Tallinn
  • %User Temp%\_MEI{Random numbers}\tcl\tzdata\Europe\Tirane
  • %User Temp%\_MEI{Random numbers}\tcl\tzdata\Europe\Tiraspol
  • %User Temp%\_MEI{Random numbers}\tcl\tzdata\Europe\Uzhgorod
  • %User Temp%\_MEI{Random numbers}\tcl\tzdata\Europe\Vaduz
  • %User Temp%\_MEI{Random numbers}\tcl\tzdata\Europe\Vatican
  • %User Temp%\_MEI{Random numbers}\tcl\tzdata\Europe\Vienna
  • %User Temp%\_MEI{Random numbers}\tcl\tzdata\Europe\Vilnius
  • %User Temp%\_MEI{Random numbers}\tcl\tzdata\Europe\Volgograd
  • %User Temp%\_MEI{Random numbers}\tcl\tzdata\Europe\Warsaw
  • %User Temp%\_MEI{Random numbers}\tcl\tzdata\Europe\Zagreb
  • %User Temp%\_MEI{Random numbers}\tcl\tzdata\Europe\Zaporozhye
  • %User Temp%\_MEI{Random numbers}\tcl\tzdata\Europe\Zurich
  • %User Temp%\_MEI{Random numbers}\tcl\tzdata\GB
  • %User Temp%\_MEI{Random numbers}\tcl\tzdata\GB-Eire
  • %User Temp%\_MEI{Random numbers}\tcl\tzdata\GMT
  • %User Temp%\_MEI{Random numbers}\tcl\tzdata\GMT+0
  • %User Temp%\_MEI{Random numbers}\tcl\tzdata\GMT-0
  • %User Temp%\_MEI{Random numbers}\tcl\tzdata\GMT0
  • %User Temp%\_MEI{Random numbers}\tcl\tzdata\Greenwich
  • %User Temp%\_MEI{Random numbers}\tcl\tzdata\HST
  • %User Temp%\_MEI{Random numbers}\tcl\tzdata\Hongkong
  • %User Temp%\_MEI{Random numbers}\tcl\tzdata\Iceland
  • %User Temp%\_MEI{Random numbers}\tcl\tzdata\Indian\Antananarivo
  • %User Temp%\_MEI{Random numbers}\tcl\tzdata\Indian\Chagos
  • %User Temp%\_MEI{Random numbers}\tcl\tzdata\Indian\Christmas
  • %User Temp%\_MEI{Random numbers}\tcl\tzdata\Indian\Cocos
  • %User Temp%\_MEI{Random numbers}\tcl\tzdata\Indian\Comoro
  • %User Temp%\_MEI{Random numbers}\tcl\tzdata\Indian\Kerguelen
  • %User Temp%\_MEI{Random numbers}\tcl\tzdata\Indian\Mahe
  • %User Temp%\_MEI{Random numbers}\tcl\tzdata\Indian\Maldives
  • %User Temp%\_MEI{Random numbers}\tcl\tzdata\Indian\Mauritius
  • %User Temp%\_MEI{Random numbers}\tcl\tzdata\Indian\Mayotte
  • %User Temp%\_MEI{Random numbers}\tcl\tzdata\Indian\Reunion
  • %User Temp%\_MEI{Random numbers}\tcl\tzdata\Iran
  • %User Temp%\_MEI{Random numbers}\tcl\tzdata\Israel
  • %User Temp%\_MEI{Random numbers}\tcl\tzdata\Jamaica
  • %User Temp%\_MEI{Random numbers}\tcl\tzdata\Japan
  • %User Temp%\_MEI{Random numbers}\tcl\tzdata\Kwajalein
  • %User Temp%\_MEI{Random numbers}\tcl\tzdata\Libya
  • %User Temp%\_MEI{Random numbers}\tcl\tzdata\MET
  • %User Temp%\_MEI{Random numbers}\tcl\tzdata\MST
  • %User Temp%\_MEI{Random numbers}\tcl\tzdata\MST7MDT
  • %User Temp%\_MEI{Random numbers}\tcl\tzdata\Mexico\BajaNorte
  • %User Temp%\_MEI{Random numbers}\tcl\tzdata\Mexico\BajaSur
  • %User Temp%\_MEI{Random numbers}\tcl\tzdata\Mexico\General
  • %User Temp%\_MEI{Random numbers}\tcl\tzdata\NZ
  • %User Temp%\_MEI{Random numbers}\tcl\tzdata\NZ-CHAT
  • %User Temp%\_MEI{Random numbers}\tcl\tzdata\Navajo
  • %User Temp%\_MEI{Random numbers}\tcl\tzdata\PRC
  • %User Temp%\_MEI{Random numbers}\tcl\tzdata\PST8PDT
  • %User Temp%\_MEI{Random numbers}\tcl\tzdata\Pacific\Apia
  • %User Temp%\_MEI{Random numbers}\tcl\tzdata\Pacific\Auckland
  • %User Temp%\_MEI{Random numbers}\tcl\tzdata\Pacific\Chatham
  • %User Temp%\_MEI{Random numbers}\tcl\tzdata\Pacific\Chuuk
  • %User Temp%\_MEI{Random numbers}\tcl\tzdata\Pacific\Easter
  • %User Temp%\_MEI{Random numbers}\tcl\tzdata\Pacific\Efate
  • %User Temp%\_MEI{Random numbers}\tcl\tzdata\Pacific\Enderbury
  • %User Temp%\_MEI{Random numbers}\tcl\tzdata\Pacific\Fakaofo
  • %User Temp%\_MEI{Random numbers}\tcl\tzdata\Pacific\Fiji
  • %User Temp%\_MEI{Random numbers}\tcl\tzdata\Pacific\Funafuti
  • %User Temp%\_MEI{Random numbers}\tcl\tzdata\Pacific\Galapagos
  • %User Temp%\_MEI{Random numbers}\tcl\tzdata\Pacific\Gambier
  • %User Temp%\_MEI{Random numbers}\tcl\tzdata\Pacific\Guadalcanal
  • %User Temp%\_MEI{Random numbers}\tcl\tzdata\Pacific\Guam
  • %User Temp%\_MEI{Random numbers}\tcl\tzdata\Pacific\Honolulu
  • %User Temp%\_MEI{Random numbers}\tcl\tzdata\Pacific\Johnston
  • %User Temp%\_MEI{Random numbers}\tcl\tzdata\Pacific\Kiritimati
  • %User Temp%\_MEI{Random numbers}\tcl\tzdata\Pacific\Kosrae
  • %User Temp%\_MEI{Random numbers}\tcl\tzdata\Pacific\Kwajalein
  • %User Temp%\_MEI{Random numbers}\tcl\tzdata\Pacific\Majuro
  • %User Temp%\_MEI{Random numbers}\tcl\tzdata\Pacific\Marquesas
  • %User Temp%\_MEI{Random numbers}\tcl\tzdata\Pacific\Midway
  • %User Temp%\_MEI{Random numbers}\tcl\tzdata\Pacific\Nauru
  • %User Temp%\_MEI{Random numbers}\tcl\tzdata\Pacific\Niue
  • %User Temp%\_MEI{Random numbers}\tcl\tzdata\Pacific\Norfolk
  • %User Temp%\_MEI{Random numbers}\tcl\tzdata\Pacific\Noumea
  • %User Temp%\_MEI{Random numbers}\tcl\tzdata\Pacific\Pago_Pago
  • %User Temp%\_MEI{Random numbers}\tcl\tzdata\Pacific\Palau
  • %User Temp%\_MEI{Random numbers}\tcl\tzdata\Pacific\Pitcairn
  • %User Temp%\_MEI{Random numbers}\tcl\tzdata\Pacific\Pohnpei
  • %User Temp%\_MEI{Random numbers}\tcl\tzdata\Pacific\Ponape
  • %User Temp%\_MEI{Random numbers}\tcl\tzdata\Pacific\Port_Moresby
  • %User Temp%\_MEI{Random numbers}\tcl\tzdata\Pacific\Rarotonga
  • %User Temp%\_MEI{Random numbers}\tcl\tzdata\Pacific\Saipan
  • %User Temp%\_MEI{Random numbers}\tcl\tzdata\Pacific\Samoa
  • %User Temp%\_MEI{Random numbers}\tcl\tzdata\Pacific\Tahiti
  • %User Temp%\_MEI{Random numbers}\tcl\tzdata\Pacific\Tarawa
  • %User Temp%\_MEI{Random numbers}\tcl\tzdata\Pacific\Tongatapu
  • %User Temp%\_MEI{Random numbers}\tcl\tzdata\Pacific\Truk
  • %User Temp%\_MEI{Random numbers}\tcl\tzdata\Pacific\Wake
  • %User Temp%\_MEI{Random numbers}\tcl\tzdata\Pacific\Wallis
  • %User Temp%\_MEI{Random numbers}\tcl\tzdata\Pacific\Yap
  • %User Temp%\_MEI{Random numbers}\tcl\tzdata\Poland
  • %User Temp%\_MEI{Random numbers}\tcl\tzdata\Portugal
  • %User Temp%\_MEI{Random numbers}\tcl\tzdata\ROC
  • %User Temp%\_MEI{Random numbers}\tcl\tzdata\ROK
  • %User Temp%\_MEI{Random numbers}\tcl\word.tcl
  • %User Temp%\_MEI{Random numbers}\tk\ttk\aquaTheme.tcl
  • %User Temp%\_MEI{Random numbers}\tk\ttk\button.tcl
  • %User Temp%\_MEI{Random numbers}\tk\ttk\clamTheme.tcl
  • %User Temp%\_MEI{Random numbers}\tk\ttk\classicTheme.tcl
  • %User Temp%\_MEI{Random numbers}\tk\ttk\combobox.tcl
  • %User Temp%\_MEI{Random numbers}\tk\ttk\cursors.tcl
  • %User Temp%\_MEI{Random numbers}\tk\ttk\defaults.tcl
  • %User Temp%\_MEI{Random numbers}\tk\ttk\entry.tcl
  • %User Temp%\_MEI{Random numbers}\tk\ttk\fonts.tcl
  • %User Temp%\_MEI{Random numbers}\tk\ttk\menubutton.tcl
  • %User Temp%\_MEI{Random numbers}\tk\ttk\notebook.tcl
  • %User Temp%\_MEI{Random numbers}\tk\ttk\panedwindow.tcl
  • %User Temp%\_MEI{Random numbers}\tk\ttk\progress.tcl
  • %User Temp%\_MEI{Random numbers}\tk\ttk\scale.tcl
  • %User Temp%\_MEI{Random numbers}\tk\ttk\scrollbar.tcl
  • %User Temp%\_MEI{Random numbers}\tk\ttk\sizegrip.tcl
  • %User Temp%\_MEI{Random numbers}\tk\ttk\spinbox.tcl

(註:%User Temp%フォルダは、ユーザの一時フォルダで、Windows 2000、XP および Server 2003 の場合、通常、"C:\Documents and Settings\<ユーザー名>\Local Settings\Temp"、Windows Vista 、 7 、8、8.1 、Server 2008 および Server 2012の場合、"C:\Users\<ユーザ名>\AppData\Local\Temp" です。.)

その他

その他は、以下の拡張子をもつファイルを暗号化します。

  • .cfr
  • .ytd
  • .sngw
  • .tst
  • .skudef
  • .dem
  • .sims3pack
  • .hbr
  • .hkx
  • .rgt
  • .ggpk
  • .ttarch2
  • .hogg
  • .spv
  • .bm2
  • .lua
  • .dff
  • .save
  • .rgssad
  • .scm
  • .aud
  • .rxdata
  • .mcmeta
  • .bin
  • .mpqe
  • .rez
  • .xbe
  • .grle
  • .bf
  • .iwd
  • .vpp_pc
  • .scb
  • .naz
  • .m2
  • .xpk
  • .sabs
  • .nfs13save
  • .gro
  • .emi
  • .wad
  • .15
  • .vfs
  • .drs
  • .taf
  • .m4s
  • .player
  • .umv
  • .sgm
  • .ntl
  • .esm
  • .qvm
  • .arch00
  • .tir
  • .bk
  • .sabl
  • .bin
  • .opk
  • .vfs0
  • .xp3
  • .tobj
  • .rcf
  • .sga
  • .esf
  • .rpack
  • .DayZProfile
  • .qsv
  • .gam
  • .bndl
  • .u2car
  • .psk
  • .gob
  • .lrf
  • .lts
  • .iqm
  • .i3d
  • .acm
  • .SC2Replay
  • .xfbin
  • .db0
  • .fsh
  • .dsb
  • .cry
  • .osr
  • .gcv
  • .blk
  • .4
  • .lzc
  • .umod
  • .w3x
  • .mwm
  • .crf
  • .tad
  • .pbn
  • .14
  • .ppe
  • .ydc
  • .fmf
  • .swe
  • .nfs11save
  • .tgx
  • .trf
  • .atlas
  • .20
  • .game
  • .rw
  • .rvproj2
  • .sc1
  • .ed
  • .lsd
  • .pkz
  • .rim
  • .bff
  • .gct
  • .9
  • .fpk
  • .pk3
  • .osf
  • .bns
  • .cas
  • .lfl
  • .rbz
  • .sex
  • .mrm
  • .mca
  • .hsv
  • .vpt
  • .pff
  • .i3chr
  • .tor
  • .01
  • .utx
  • .kf
  • .dzip
  • .fxcb
  • .modpak
  • .ydr
  • .frd
  • .bmd
  • .vpp
  • .gcm
  • .frw
  • .baf
  • .edf
  • .w3g
  • .mtf
  • .tfc
  • .lpr
  • .pk2
  • .cs2
  • .fps
  • .osz
  • .lnc
  • .jpz
  • .tinyid
  • .ebm
  • .i3exec
  • .ert
  • .sv4
  • .cbf
  • .oppc
  • .enc
  • .rmv
  • .mta
  • .otd
  • .pk7
  • .gm
  • .cdp
  • .cmg
  • .ubi
  • .hpk
  • .plr
  • .mis
  • .ids
  • .replay_last_battle
  • .z2f
  • .map
  • .ut4mod
  • .dm_1
  • .p3d
  • .tre
  • .package
  • .streamed
  • .l2r
  • .xbf
  • .wep
  • .evd
  • .dxt
  • .bba
  • .profile
  • .vmt
  • .rpf
  • .ucs
  • .lab
  • .cow
  • .ibf
  • .tew
  • .bix
  • .uhtm
  • .txd
  • .jam
  • .ugd
  • .13
  • .dc6
  • .vdk
  • .bar
  • .cvm
  • .wso
  • .xxx
  • .zar
  • .anm
  • .6
  • .ant
  • .ctp
  • .sv5
  • .dnf
  • .he0
  • .mve
  • .emz
  • .e4mod
  • .gxt
  • .bag
  • .arz
  • .tbi
  • .itp
  • .i3animpack
  • .vtf
  • .afl
  • .ncs
  • .gaf
  • .ccw
  • .tsr
  • .bank
  • .lec
  • .pk4
  • .psv
  • .los
  • .civ5save
  • .rlv
  • .nh
  • .sco
  • .ims
  • .epc
  • .rgm
  • .res
  • .wld
  • .sve
  • .db1
  • .dazip
  • .vcm
  • .rvm
  • .eur
  • .me2headmorph
  • .azp
  • .ags
  • .12
  • .slh
  • .cha
  • .wowsreplay
  • .dor
  • .ibi
  • .bnd
  • .zse
  • .ddsx
  • .mcworld
  • .intr
  • .vdf
  • .mtr
  • .addr
  • .blp
  • .mlx
  • .d2i
  • .21
  • .tlk
  • .gm1
  • .n2pk
  • .ekx
  • .tas
  • .rav
  • .ttg
  • .spawn
  • .osu
  • .oac
  • .bod
  • .dcz
  • .mgx
  • .wowpreplay
  • .fuk
  • .kto
  • .fda
  • .vob
  • .ahc
  • .rrs
  • .ala
  • .mao
  • .udk
  • .jit
  • .25
  • .swar
  • .nav
  • .bot
  • .jdf
  • .32
  • .mul
  • .szs
  • .gax
  • .xmg
  • .udm
  • .zdk
  • .dcc
  • .blb
  • .wxd
  • .isb
  • .pt2
  • .utc
  • .card
  • .lug
  • .JQ3SaveGame
  • .osk
  • .nut
  • .unity
  • .cme
  • .elu
  • .db7
  • .hlk
  • .ds1
  • .wx
  • .bsm
  • .w3z
  • .itm
  • .clz
  • .zfs
  • .3do
  • .pac
  • .dbi
  • .alo
  • .gla
  • .yrm
  • .fomod
  • .ees
  • .erp
  • .dl
  • .bmd
  • .pud
  • .ibt
  • .24
  • .wai
  • .sww
  • .opq
  • .gtf
  • .bnt
  • .ngn
  • .tit
  • .wf
  • .bnk
  • .ttz
  • .nif
  • .ghb
  • .la0
  • .bun
  • .11
  • .icd
  • .z3
  • .djs
  • .mog
  • .2da
  • .imc
  • .sgh
  • .db9
  • .42
  • .vis
  • .whd
  • .pcc
  • .43
  • .ldw
  • .age3yrec
  • .pcpack
  • .ddt
  • .cok
  • .xcr
  • .bsp
  • .yaf
  • .swd
  • .tfil
  • .lsd
  • .blorb
  • .unr
  • .mob
  • .fos
  • .cem
  • .material
  • .lfd
  • .hmi
  • .md4
  • .dog
  • .256
  • .eix
  • .oob
  • .cpx
  • .cdata
  • .hak
  • .phz
  • .stormreplay
  • .lrn
  • .spidersolitairesave-ms
  • .anm
  • .til
  • .lta
  • .sims2pack
  • .md2
  • .pkx
  • .sns
  • .pat
  • .tdf
  • .cm
  • .mine
  • .rbn
  • .uc
  • .asg
  • .raf
  • .myp
  • .mys
  • .tex
  • .cpn
  • .flmod
  • .model
  • .sfar
  • .fbrb
  • .sav2
  • .lmg
  • .tbc
  • .xpd
  • .bundledmesh
  • .bmg
  • .18
  • .gsc
  • .shader_bundle
  • .drl
  • .world
  • .rwd
  • .rwv
  • .rda
  • .3g2
  • .3gp
  • .asf
  • .asx
  • .avi
  • .flv
  • .ai
  • .m2ts
  • .mkv
  • .mov
  • .mp4
  • .mpg
  • .mpeg
  • .mpeg4
  • .rm
  • .swf
  • .vob
  • .wmv
  • .doc
  • .docx
  • .pdf
  • .rar
  • .jpg
  • .jpeg
  • .png
  • .tiff
  • .zip
  • .7z
  • .dif.z
  • .exe
  • .tar.gz
  • .tar
  • .mp3
  • .sh
  • .c
  • .cpp
  • .h
  • .mov
  • .gif
  • .txt
  • .py
  • .pyc
  • .jar
  • .csv
  • .psd
  • .wav
  • .ogg
  • .wma
  • .aif
  • .mpa
  • .wpl
  • .arj
  • .deb
  • .pkg
  • .db
  • .dbf
  • .sav
  • .xml
  • .html
  • .aiml
  • .apk
  • .bat
  • .bin
  • .cgi
  • .pl
  • .com
  • .wsf
  • .bmp
  • .bmp
  • .gif
  • .tif
  • .tiff
  • .htm
  • .js
  • .jsp
  • .php
  • .xhtml
  • .cfm
  • .rss
  • .key
  • .odp
  • .pps
  • .ppt
  • .pptx
  • .class
  • .cd
  • .java
  • .swift
  • .vb
  • .ods
  • .xlr
  • .xls
  • .xlsx
  • .dot
  • .docm
  • .dotx
  • .dotm
  • .wpd
  • .wps
  • .rtf
  • .sdw
  • .sgl
  • .vor
  • .uot
  • .uof
  • .jtd
  • .jtt
  • .hwp
  • .602
  • .pdb
  • .psw
  • .xlw
  • .xlt
  • .xlsm
  • .xltx
  • .xltm
  • .xlsb
  • .wk1
  • .wks
  • .123
  • .sdc
  • .slk
  • .pxl
  • .wb2
  • .pot
  • .pptm
  • .potx
  • .potm
  • .sda
  • .sdd
  • .sdp
  • .cgm
  • .wotreplay
  • .rofl
  • .pak
  • .big
  • .bik
  • .xtbl
  • .unity3d
  • .capx
  • .ttarch
  • .iwi
  • .rgss3a
  • .gblorb
  • .xwm
  • .j2e
  • .mpk
  • .xex
  • .tiger
  • .lbf
  • .cab
  • .rx3
  • .epk
  • .vol
  • .asset
  • .forge
  • .lng
  • .sii
  • .litemod
  • .vef
  • .dat
  • .papa
  • .psark
  • .ydk
  • .mpq
  • .wtf
  • .bsa
  • .re4
  • .dds
  • .ff
  • .yrp
  • .pck
  • .t3
  • .ltx
  • .uasset
  • .bikey
  • .patch
  • .upk
  • .uax
  • .mdl
  • .lvl
  • .qst
  • .ddv
  • .pta

その他は、以下のファイル名を使用し、暗号化されたファイルを改称します。

  • {Original filename and extension}.kirked


  対応方法

対応検索エンジン: 9.850
初回 VSAPI パターンバージョン 13.282.03
初回 VSAPI パターンリリース日 2017年3月17日
VSAPI OPR パターンバージョン 13.283.00
VSAPI OPR パターンリリース日 2017年3月18日

手順 1

Windows XP、Windows Vista および Windows 7 のユーザは、コンピュータからマルウェアもしくはアドウェア等を完全に削除するために、ウイルス検索の実行前には必ず「システムの復元」を無効にしてください。

手順 2

このマルウェアもしくはアドウェア等の実行により、手順中に記載されたすべてのファイル、フォルダおよびレジストリキーや値がコンピュータにインストールされるとは限りません。インストールが不完全である場合の他、オペレーティングシステム(OS)の条件によりインストールがされない場合が考えられます。手順中に記載されたファイル/フォルダ/レジストリ情報が確認されない場合、該当の手順の操作は不要ですので、次の手順に進んでください。

手順 3

Windowsをセーフモードで再起動します。

[ 詳細 ]

手順 4

以下のフォルダを検索し削除します。

[ 詳細 ]
註:このフォルダは、隠しフォルダとして設定されている場合があります。[詳細設定オプション]をクリックし、[隠しファイルとフォルダの検索]のチェックボックスをオンにし、検索結果に隠しファイルとフォルダが含まれるようにしてください。  
  • %User Temp%\_MEI{Random numbers}

手順 5

以下のファイルを検索し削除します。

[ 詳細 ]
コンポーネントファイルが隠しファイル属性に設定されている場合があります。[詳細設定オプション]をクリックし、[隠しファイルとフォルダの検索]のチェックボックスをオンにし、検索結果に隠しファイルとフォルダが含まれるようにしてください。
  • {malware path}\pwd
  • {malware path}\RANSOM_NOTE.txt

手順 6

コンピュータを通常モードで再起動し、最新のバージョン(エンジン、パターンファイル)を導入したウイルス対策製品を用い、「RANSOM_KIRK.A」と検出したファイルの検索を実行してください。 検出されたファイルが、弊社ウイルス対策製品により既に駆除、隔離またはファイル削除の処理が実行された場合、ウイルスの処理は完了しており、他の削除手順は特にありません。

手順 8

最新のバージョン(エンジン、パターンファイル)を導入したウイルス対策製品を用い、ウイルス検索を実行してください。「RANSOM_KIRK.A」と検出したファイルはすべて削除してください。 検出されたファイルが、弊社ウイルス対策製品により既に駆除、隔離またはファイル削除の処理が実行された場合、ウイルスの処理は完了しており、他の削除手順は特にありません。


ご利用はいかがでしたか? アンケートにご協力ください