![Trend Micro Security](https://www.trendmicro.com/content/dam/trendmicro/global/en/global/logo/logo-desktop.png)
RANSOM_KIRK.A
Trojan.Ransom.Kirk (ALYac), TR/KirkRansom.A (Avira), Python/Filecoder.Kirk.A (ESET-NOD32), Win32.Trojan-Ransom.Kirk.B (GData), Trojan-Ransom.Kirky (Ikarus), Ransom.Kirk (Malwarebytes)
Windows
![](/vinfo/imgFiles/JPlegend.jpg)
- マルウェアタイプ: Ransom
- 破壊活動の有無: なし
- 暗号化:
- 感染報告の有無: はい
概要
マルウェアは、他のマルウェアに作成されるか、悪意あるWebサイトからユーザが誤ってダウンロードすることによりコンピュータに侵入します。
詳細
侵入方法
その他は、他のマルウェアに作成されるか、悪意あるWebサイトからユーザが誤ってダウンロードすることによりコンピュータに侵入します。
インストール
その他は、以下のファイルを作成します。
- %User Temp%\_MEI{Random numbers}\Crypto.Cipher._AES.pyd
- %User Temp%\_MEI{Random numbers}\Crypto.Cipher._DES.pyd
- %User Temp%\_MEI{Random numbers}\Crypto.Cipher._DES3.pyd
- %User Temp%\_MEI{Random numbers}\Crypto.Hash._SHA256.pyd
- %User Temp%\_MEI{Random numbers}\Crypto.Random.OSRNG.winrandom.pyd
- %User Temp%\_MEI{Random numbers}\Crypto.Util._counter.pyd
- %User Temp%\_MEI{Random numbers}\Crypto.Util.strxor.pyd
- %User Temp%\_MEI{Random numbers}\Microsoft.VC90.CRT.manifest
- %User Temp%\_MEI{Random numbers}\_ctypes.pyd
- %User Temp%\_MEI{Random numbers}\_hashlib.pyd
- %User Temp%\_MEI{Random numbers}\_tkinter.pyd
- %User Temp%\_MEI{Random numbers}\bz2.pyd
- %User Temp%\_MEI{Random numbers}\loic_win32.exe.manifest
- %User Temp%\_MEI{Random numbers}\msvcm90.dll
- %User Temp%\_MEI{Random numbers}\msvcp90.dll
- %User Temp%\_MEI{Random numbers}\msvcr90.dll
- %User Temp%\_MEI{Random numbers}\python27.dll
- %User Temp%\_MEI{Random numbers}\select.pyd
- %User Temp%\_MEI{Random numbers}\tcl85.dll
- %User Temp%\_MEI{Random numbers}\tk85.dll
- %User Temp%\_MEI{Random numbers}\unicodedata.pyd
- %User Temp%\_MEI{Random numbers}\tcl\auto.tcl
- %User Temp%\_MEI{Random numbers}\tcl\clock.tcl
- %User Temp%\_MEI{Random numbers}\tcl\encoding\ascii.enc
- %User Temp%\_MEI{Random numbers}\tcl\encoding\big5.enc
- %User Temp%\_MEI{Random numbers}\tcl\encoding\cp1250.enc
- %User Temp%\_MEI{Random numbers}\tcl\encoding\cp1251.enc
- %User Temp%\_MEI{Random numbers}\tcl\encoding\cp1252.enc
- %User Temp%\_MEI{Random numbers}\tcl\encoding\cp1253.enc
- %User Temp%\_MEI{Random numbers}\tcl\encoding\cp1254.enc
- %User Temp%\_MEI{Random numbers}\tcl\encoding\cp1255.enc
- %User Temp%\_MEI{Random numbers}\tcl\encoding\cp1256.enc
- %User Temp%\_MEI{Random numbers}\tcl\encoding\cp1257.enc
- %User Temp%\_MEI{Random numbers}\tcl\encoding\cp1258.enc
- %User Temp%\_MEI{Random numbers}\tcl\encoding\cp437.enc
- %User Temp%\_MEI{Random numbers}\tcl\encoding\cp737.enc
- %User Temp%\_MEI{Random numbers}\tcl\encoding\cp775.enc
- %User Temp%\_MEI{Random numbers}\tcl\encoding\cp850.enc
- %User Temp%\_MEI{Random numbers}\tcl\encoding\cp852.enc
- %User Temp%\_MEI{Random numbers}\tcl\encoding\cp855.enc
- %User Temp%\_MEI{Random numbers}\tcl\encoding\cp857.enc
- %User Temp%\_MEI{Random numbers}\tcl\encoding\cp860.enc
- %User Temp%\_MEI{Random numbers}\tcl\encoding\cp861.enc
- %User Temp%\_MEI{Random numbers}\tcl\encoding\cp862.enc
- %User Temp%\_MEI{Random numbers}\tcl\encoding\cp863.enc
- %User Temp%\_MEI{Random numbers}\tcl\encoding\cp864.enc
- %User Temp%\_MEI{Random numbers}\tcl\encoding\cp865.enc
- %User Temp%\_MEI{Random numbers}\tcl\encoding\cp866.enc
- %User Temp%\_MEI{Random numbers}\tcl\encoding\cp869.enc
- %User Temp%\_MEI{Random numbers}\tcl\encoding\cp874.enc
- %User Temp%\_MEI{Random numbers}\tcl\encoding\cp932.enc
- %User Temp%\_MEI{Random numbers}\tcl\encoding\cp936.enc
- %User Temp%\_MEI{Random numbers}\tcl\encoding\cp949.enc
- %User Temp%\_MEI{Random numbers}\tcl\encoding\cp950.enc
- %User Temp%\_MEI{Random numbers}\tcl\encoding\dingbats.enc
- %User Temp%\_MEI{Random numbers}\tcl\encoding\ebcdic.enc
- %User Temp%\_MEI{Random numbers}\tcl\encoding\euc-cn.enc
- %User Temp%\_MEI{Random numbers}\tcl\encoding\euc-jp.enc
- %User Temp%\_MEI{Random numbers}\tcl\encoding\euc-kr.enc
- %User Temp%\_MEI{Random numbers}\tcl\encoding\gb12345.enc
- %User Temp%\_MEI{Random numbers}\tcl\encoding\gb1988.enc
- %User Temp%\_MEI{Random numbers}\tcl\encoding\gb2312-raw.enc
- %User Temp%\_MEI{Random numbers}\tcl\encoding\gb2312.enc
- %User Temp%\_MEI{Random numbers}\tcl\encoding\iso2022-jp.enc
- %User Temp%\_MEI{Random numbers}\tcl\encoding\iso2022-kr.enc
- %User Temp%\_MEI{Random numbers}\tcl\encoding\iso2022.enc
- %User Temp%\_MEI{Random numbers}\tcl\encoding\iso8859-1.enc
- %User Temp%\_MEI{Random numbers}\tcl\encoding\iso8859-10.enc
- %User Temp%\_MEI{Random numbers}\tcl\encoding\iso8859-13.enc
- %User Temp%\_MEI{Random numbers}\tcl\encoding\iso8859-14.enc
- %User Temp%\_MEI{Random numbers}\tcl\encoding\iso8859-15.enc
- %User Temp%\_MEI{Random numbers}\tcl\encoding\iso8859-16.enc
- %User Temp%\_MEI{Random numbers}\tcl\encoding\iso8859-2.enc
- %User Temp%\_MEI{Random numbers}\tcl\encoding\iso8859-3.enc
- %User Temp%\_MEI{Random numbers}\tcl\encoding\iso8859-4.enc
- %User Temp%\_MEI{Random numbers}\tcl\encoding\iso8859-5.enc
- %User Temp%\_MEI{Random numbers}\tcl\encoding\iso8859-6.enc
- %User Temp%\_MEI{Random numbers}\tcl\encoding\iso8859-7.enc
- %User Temp%\_MEI{Random numbers}\tcl\encoding\iso8859-8.enc
- %User Temp%\_MEI{Random numbers}\tcl\encoding\iso8859-9.enc
- %User Temp%\_MEI{Random numbers}\tcl\encoding\jis0201.enc
- %User Temp%\_MEI{Random numbers}\tcl\encoding\jis0208.enc
- %User Temp%\_MEI{Random numbers}\tcl\encoding\jis0212.enc
- %User Temp%\_MEI{Random numbers}\tcl\encoding\koi8-r.enc
- %User Temp%\_MEI{Random numbers}\tcl\encoding\koi8-u.enc
- %User Temp%\_MEI{Random numbers}\tcl\encoding\ksc5601.enc
- %User Temp%\_MEI{Random numbers}\tcl\encoding\macCentEuro.enc
- %User Temp%\_MEI{Random numbers}\tcl\encoding\macCroatian.enc
- %User Temp%\_MEI{Random numbers}\tcl\encoding\macCyrillic.enc
- %User Temp%\_MEI{Random numbers}\tcl\encoding\macDingbats.enc
- %User Temp%\_MEI{Random numbers}\tcl\encoding\macGreek.enc
- %User Temp%\_MEI{Random numbers}\tcl\encoding\macIceland.enc
- %User Temp%\_MEI{Random numbers}\tcl\encoding\macJapan.enc
- %User Temp%\_MEI{Random numbers}\tcl\encoding\macRoman.enc
- %User Temp%\_MEI{Random numbers}\tcl\encoding\macRomania.enc
- %User Temp%\_MEI{Random numbers}\tcl\encoding\macThai.enc
- %User Temp%\_MEI{Random numbers}\tcl\encoding\macTurkish.enc
- %User Temp%\_MEI{Random numbers}\tcl\encoding\macUkraine.enc
- %User Temp%\_MEI{Random numbers}\tcl\encoding\shiftjis.enc
- %User Temp%\_MEI{Random numbers}\tcl\encoding\symbol.enc
- %User Temp%\_MEI{Random numbers}\tcl\encoding\tis-620.enc
- %User Temp%\_MEI{Random numbers}\tcl\history.tcl
- %User Temp%\_MEI{Random numbers}\tcl\http1.0\http.tcl
- %User Temp%\_MEI{Random numbers}\tcl\http1.0\pkgIndex.tcl
- %User Temp%\_MEI{Random numbers}\tcl\init.tcl
- %User Temp%\_MEI{Random numbers}\tcl\msgs\af.msg
- %User Temp%\_MEI{Random numbers}\tcl\msgs\af_za.msg
- %User Temp%\_MEI{Random numbers}\tcl\msgs\ar.msg
- %User Temp%\_MEI{Random numbers}\tcl\msgs\ar_in.msg
- %User Temp%\_MEI{Random numbers}\tcl\msgs\ar_jo.msg
- %User Temp%\_MEI{Random numbers}\tcl\msgs\ar_lb.msg
- %User Temp%\_MEI{Random numbers}\tcl\msgs\ar_sy.msg
- %User Temp%\_MEI{Random numbers}\tcl\msgs\be.msg
- %User Temp%\_MEI{Random numbers}\tcl\msgs\bg.msg
- %User Temp%\_MEI{Random numbers}\tcl\msgs\bn.msg
- %User Temp%\_MEI{Random numbers}\tcl\msgs\bn_in.msg
- %User Temp%\_MEI{Random numbers}\tcl\msgs\ca.msg
- %User Temp%\_MEI{Random numbers}\tcl\msgs\cs.msg
- %User Temp%\_MEI{Random numbers}\tcl\msgs\da.msg
- %User Temp%\_MEI{Random numbers}\tcl\msgs\de.msg
- %User Temp%\_MEI{Random numbers}\tcl\msgs\de_at.msg
- %User Temp%\_MEI{Random numbers}\tcl\msgs\de_be.msg
- %User Temp%\_MEI{Random numbers}\tcl\msgs\el.msg
- %User Temp%\_MEI{Random numbers}\tcl\msgs\en_au.msg
- %User Temp%\_MEI{Random numbers}\tcl\msgs\en_be.msg
- %User Temp%\_MEI{Random numbers}\tcl\msgs\en_bw.msg
- %User Temp%\_MEI{Random numbers}\tcl\msgs\en_ca.msg
- %User Temp%\_MEI{Random numbers}\tcl\msgs\en_gb.msg
- %User Temp%\_MEI{Random numbers}\tcl\msgs\en_hk.msg
- %User Temp%\_MEI{Random numbers}\tcl\msgs\en_ie.msg
- %User Temp%\_MEI{Random numbers}\tcl\msgs\en_in.msg
- %User Temp%\_MEI{Random numbers}\tcl\msgs\en_nz.msg
- %User Temp%\_MEI{Random numbers}\tcl\msgs\en_ph.msg
- %User Temp%\_MEI{Random numbers}\tcl\msgs\en_sg.msg
- %User Temp%\_MEI{Random numbers}\tcl\msgs\en_za.msg
- %User Temp%\_MEI{Random numbers}\tcl\msgs\en_zw.msg
- %User Temp%\_MEI{Random numbers}\tcl\msgs\eo.msg
- %User Temp%\_MEI{Random numbers}\tcl\msgs\es.msg
- %User Temp%\_MEI{Random numbers}\tcl\msgs\es_ar.msg
- %User Temp%\_MEI{Random numbers}\tcl\msgs\es_bo.msg
- %User Temp%\_MEI{Random numbers}\tcl\msgs\es_cl.msg
- %User Temp%\_MEI{Random numbers}\tcl\msgs\es_co.msg
- %User Temp%\_MEI{Random numbers}\tcl\msgs\es_cr.msg
- %User Temp%\_MEI{Random numbers}\tcl\msgs\es_do.msg
- %User Temp%\_MEI{Random numbers}\tcl\msgs\es_ec.msg
- %User Temp%\_MEI{Random numbers}\tcl\msgs\es_gt.msg
- %User Temp%\_MEI{Random numbers}\tcl\msgs\es_hn.msg
- %User Temp%\_MEI{Random numbers}\tcl\msgs\es_mx.msg
- %User Temp%\_MEI{Random numbers}\tcl\msgs\es_ni.msg
- %User Temp%\_MEI{Random numbers}\tcl\msgs\es_pa.msg
- %User Temp%\_MEI{Random numbers}\tcl\msgs\es_pe.msg
- %User Temp%\_MEI{Random numbers}\tcl\msgs\es_pr.msg
- %User Temp%\_MEI{Random numbers}\tcl\msgs\es_py.msg
- %User Temp%\_MEI{Random numbers}\tcl\msgs\es_sv.msg
- %User Temp%\_MEI{Random numbers}\tcl\msgs\es_uy.msg
- %User Temp%\_MEI{Random numbers}\tcl\msgs\es_ve.msg
- %User Temp%\_MEI{Random numbers}\tcl\msgs\et.msg
- %User Temp%\_MEI{Random numbers}\tcl\msgs\eu.msg
- %User Temp%\_MEI{Random numbers}\tcl\msgs\eu_es.msg
- %User Temp%\_MEI{Random numbers}\tcl\msgs\fa.msg
- %User Temp%\_MEI{Random numbers}\tcl\msgs\fa_in.msg
- %User Temp%\_MEI{Random numbers}\tcl\msgs\fa_ir.msg
- %User Temp%\_MEI{Random numbers}\tcl\msgs\fi.msg
- %User Temp%\_MEI{Random numbers}\tcl\msgs\fo.msg
- %User Temp%\_MEI{Random numbers}\tcl\msgs\fo_fo.msg
- %User Temp%\_MEI{Random numbers}\tcl\msgs\fr.msg
- %User Temp%\_MEI{Random numbers}\tcl\msgs\fr_be.msg
- %User Temp%\_MEI{Random numbers}\tcl\msgs\fr_ca.msg
- %User Temp%\_MEI{Random numbers}\tcl\msgs\fr_ch.msg
- %User Temp%\_MEI{Random numbers}\tcl\msgs\ga.msg
- %User Temp%\_MEI{Random numbers}\tcl\msgs\ga_ie.msg
- %User Temp%\_MEI{Random numbers}\tcl\msgs\gl.msg
- %User Temp%\_MEI{Random numbers}\tcl\msgs\gl_es.msg
- %User Temp%\_MEI{Random numbers}\tcl\msgs\gv.msg
- %User Temp%\_MEI{Random numbers}\tcl\msgs\gv_gb.msg
- %User Temp%\_MEI{Random numbers}\tcl\msgs\he.msg
- %User Temp%\_MEI{Random numbers}\tcl\msgs\hi.msg
- %User Temp%\_MEI{Random numbers}\tcl\msgs\hi_in.msg
- %User Temp%\_MEI{Random numbers}\tcl\msgs\hr.msg
- %User Temp%\_MEI{Random numbers}\tcl\msgs\hu.msg
- %User Temp%\_MEI{Random numbers}\tcl\msgs\id.msg
- %User Temp%\_MEI{Random numbers}\tcl\msgs\id_id.msg
- %User Temp%\_MEI{Random numbers}\tcl\msgs\is.msg
- %User Temp%\_MEI{Random numbers}\tcl\msgs\it.msg
- %User Temp%\_MEI{Random numbers}\tcl\msgs\it_ch.msg
- %User Temp%\_MEI{Random numbers}\tcl\msgs\ja.msg
- %User Temp%\_MEI{Random numbers}\tcl\msgs\kl.msg
- %User Temp%\_MEI{Random numbers}\tcl\msgs\kl_gl.msg
- %User Temp%\_MEI{Random numbers}\tcl\msgs\ko.msg
- %User Temp%\_MEI{Random numbers}\tcl\msgs\ko_kr.msg
- %User Temp%\_MEI{Random numbers}\tcl\msgs\kok.msg
- %User Temp%\_MEI{Random numbers}\tcl\msgs\kok_in.msg
- %User Temp%\_MEI{Random numbers}\tcl\msgs\kw.msg
- %User Temp%\_MEI{Random numbers}\tcl\msgs\kw_gb.msg
- %User Temp%\_MEI{Random numbers}\tcl\msgs\lt.msg
- %User Temp%\_MEI{Random numbers}\tcl\msgs\lv.msg
- %User Temp%\_MEI{Random numbers}\tcl\msgs\mk.msg
- %User Temp%\_MEI{Random numbers}\tcl\msgs\mr.msg
- %User Temp%\_MEI{Random numbers}\tcl\msgs\mr_in.msg
- %User Temp%\_MEI{Random numbers}\tcl\msgs\ms.msg
- %User Temp%\_MEI{Random numbers}\tcl\msgs\ms_my.msg
- %User Temp%\_MEI{Random numbers}\tcl\msgs\mt.msg
- %User Temp%\_MEI{Random numbers}\tcl\msgs\nb.msg
- %User Temp%\_MEI{Random numbers}\tcl\msgs\nl.msg
- %User Temp%\_MEI{Random numbers}\tcl\msgs\nl_be.msg
- %User Temp%\_MEI{Random numbers}\tcl\msgs\nn.msg
- %User Temp%\_MEI{Random numbers}\tcl\msgs\pl.msg
- %User Temp%\_MEI{Random numbers}\tcl\msgs\pt.msg
- %User Temp%\_MEI{Random numbers}\tcl\msgs\pt_br.msg
- %User Temp%\_MEI{Random numbers}\tcl\msgs\ro.msg
- %User Temp%\_MEI{Random numbers}\tcl\msgs\ru.msg
- %User Temp%\_MEI{Random numbers}\tcl\msgs\ru_ua.msg
- %User Temp%\_MEI{Random numbers}\tcl\msgs\sh.msg
- %User Temp%\_MEI{Random numbers}\tcl\msgs\sk.msg
- %User Temp%\_MEI{Random numbers}\tcl\msgs\sl.msg
- %User Temp%\_MEI{Random numbers}\tcl\msgs\sq.msg
- %User Temp%\_MEI{Random numbers}\tcl\msgs\sr.msg
- %User Temp%\_MEI{Random numbers}\tcl\msgs\sv.msg
- %User Temp%\_MEI{Random numbers}\tcl\msgs\sw.msg
- %User Temp%\_MEI{Random numbers}\tcl\msgs\ta.msg
- %User Temp%\_MEI{Random numbers}\tcl\msgs\ta_in.msg
- %User Temp%\_MEI{Random numbers}\tcl\msgs\te.msg
- %User Temp%\_MEI{Random numbers}\tcl\msgs\te_in.msg
- %User Temp%\_MEI{Random numbers}\tcl\msgs\th.msg
- %User Temp%\_MEI{Random numbers}\tcl\msgs\tr.msg
- %User Temp%\_MEI{Random numbers}\tcl\msgs\uk.msg
- %User Temp%\_MEI{Random numbers}\tcl\msgs\vi.msg
- %User Temp%\_MEI{Random numbers}\tcl\msgs\zh.msg
- %User Temp%\_MEI{Random numbers}\tcl\msgs\zh_cn.msg
- %User Temp%\_MEI{Random numbers}\tcl\msgs\zh_hk.msg
- %User Temp%\_MEI{Random numbers}\tcl\msgs\zh_sg.msg
- %User Temp%\_MEI{Random numbers}\tcl\msgs\zh_tw.msg
- %User Temp%\_MEI{Random numbers}\tcl\opt0.4\optparse.tcl
- %User Temp%\_MEI{Random numbers}\tcl\opt0.4\pkgIndex.tcl
- %User Temp%\_MEI{Random numbers}\tcl\package.tcl
- %User Temp%\_MEI{Random numbers}\tcl\parray.tcl
- %User Temp%\_MEI{Random numbers}\tcl\safe.tcl
- %User Temp%\_MEI{Random numbers}\tcl\tclIndex
- %User Temp%\_MEI{Random numbers}\tcl\tm.tcl
- %User Temp%\_MEI{Random numbers}\tcl\tzdata\Africa\Abidjan
- %User Temp%\_MEI{Random numbers}\tcl\tzdata\Africa\Accra
- %User Temp%\_MEI{Random numbers}\tcl\tzdata\Africa\Addis_Ababa
- %User Temp%\_MEI{Random numbers}\tcl\tzdata\Africa\Algiers
- %User Temp%\_MEI{Random numbers}\tcl\tzdata\Africa\Asmara
- %User Temp%\_MEI{Random numbers}\tcl\tzdata\Africa\Asmera
- %User Temp%\_MEI{Random numbers}\tcl\tzdata\Africa\Bamako
- %User Temp%\_MEI{Random numbers}\tcl\tzdata\Africa\Bangui
- %User Temp%\_MEI{Random numbers}\tcl\tzdata\Africa\Banjul
- %User Temp%\_MEI{Random numbers}\tcl\tzdata\Africa\Bissau
- %User Temp%\_MEI{Random numbers}\tcl\tzdata\Africa\Blantyre
- %User Temp%\_MEI{Random numbers}\tcl\tzdata\Africa\Brazzaville
- %User Temp%\_MEI{Random numbers}\tcl\tzdata\Africa\Bujumbura
- %User Temp%\_MEI{Random numbers}\tcl\tzdata\Africa\Cairo
- %User Temp%\_MEI{Random numbers}\tcl\tzdata\Africa\Casablanca
- %User Temp%\_MEI{Random numbers}\tcl\tzdata\Africa\Ceuta
- %User Temp%\_MEI{Random numbers}\tcl\tzdata\Africa\Conakry
- %User Temp%\_MEI{Random numbers}\tcl\tzdata\Africa\Dakar
- %User Temp%\_MEI{Random numbers}\tcl\tzdata\Africa\Dar_es_Salaam
- %User Temp%\_MEI{Random numbers}\tcl\tzdata\Africa\Djibouti
- %User Temp%\_MEI{Random numbers}\tcl\tzdata\Africa\Douala
- %User Temp%\_MEI{Random numbers}\tcl\tzdata\Africa\El_Aaiun
- %User Temp%\_MEI{Random numbers}\tcl\tzdata\Africa\Freetown
- %User Temp%\_MEI{Random numbers}\tcl\tzdata\Africa\Gaborone
- %User Temp%\_MEI{Random numbers}\tcl\tzdata\Africa\Harare
- %User Temp%\_MEI{Random numbers}\tcl\tzdata\Africa\Johannesburg
- %User Temp%\_MEI{Random numbers}\tcl\tzdata\Africa\Juba
- %User Temp%\_MEI{Random numbers}\tcl\tzdata\Africa\Kampala
- %User Temp%\_MEI{Random numbers}\tcl\tzdata\Africa\Khartoum
- %User Temp%\_MEI{Random numbers}\tcl\tzdata\Africa\Kigali
- %User Temp%\_MEI{Random numbers}\tcl\tzdata\Africa\Kinshasa
- %User Temp%\_MEI{Random numbers}\tcl\tzdata\Africa\Lagos
- %User Temp%\_MEI{Random numbers}\tcl\tzdata\Africa\Libreville
- %User Temp%\_MEI{Random numbers}\tcl\tzdata\Africa\Lome
- %User Temp%\_MEI{Random numbers}\tcl\tzdata\Africa\Luanda
- %User Temp%\_MEI{Random numbers}\tcl\tzdata\Africa\Lubumbashi
- %User Temp%\_MEI{Random numbers}\tcl\tzdata\Africa\Lusaka
- %User Temp%\_MEI{Random numbers}\tcl\tzdata\Africa\Malabo
- %User Temp%\_MEI{Random numbers}\tcl\tzdata\Africa\Maputo
- %User Temp%\_MEI{Random numbers}\tcl\tzdata\Africa\Maseru
- %User Temp%\_MEI{Random numbers}\tcl\tzdata\Africa\Mbabane
- %User Temp%\_MEI{Random numbers}\tcl\tzdata\Africa\Mogadishu
- %User Temp%\_MEI{Random numbers}\tcl\tzdata\Africa\Monrovia
- %User Temp%\_MEI{Random numbers}\tcl\tzdata\Africa\Nairobi
- %User Temp%\_MEI{Random numbers}\tcl\tzdata\Africa\Ndjamena
- %User Temp%\_MEI{Random numbers}\tcl\tzdata\Africa\Niamey
- %User Temp%\_MEI{Random numbers}\tcl\tzdata\Africa\Nouakchott
- %User Temp%\_MEI{Random numbers}\tcl\tzdata\Africa\Ouagadougou
- %User Temp%\_MEI{Random numbers}\tcl\tzdata\Africa\Porto-Novo
- %User Temp%\_MEI{Random numbers}\tcl\tzdata\Africa\Sao_Tome
- %User Temp%\_MEI{Random numbers}\tcl\tzdata\Africa\Timbuktu
- %User Temp%\_MEI{Random numbers}\tcl\tzdata\Africa\Tripoli
- %User Temp%\_MEI{Random numbers}\tcl\tzdata\Africa\Tunis
- %User Temp%\_MEI{Random numbers}\tcl\tzdata\Africa\Windhoek
- %User Temp%\_MEI{Random numbers}\tcl\tzdata\America\Adak
- %User Temp%\_MEI{Random numbers}\tcl\tzdata\America\Anchorage
- %User Temp%\_MEI{Random numbers}\tcl\tzdata\America\Anguilla
- %User Temp%\_MEI{Random numbers}\tcl\tzdata\America\Antigua
- %User Temp%\_MEI{Random numbers}\tcl\tzdata\America\Araguaina
- %User Temp%\_MEI{Random numbers}\tcl\tzdata\America\Argentina\Buenos_Aires
- %User Temp%\_MEI{Random numbers}\tcl\tzdata\America\Argentina\Catamarca
- %User Temp%\_MEI{Random numbers}\tcl\tzdata\America\Argentina\ComodRivadavia
- %User Temp%\_MEI{Random numbers}\tcl\tzdata\America\Argentina\Cordoba
- %User Temp%\_MEI{Random numbers}\tcl\tzdata\America\Argentina\Jujuy
- %User Temp%\_MEI{Random numbers}\tcl\tzdata\America\Argentina\La_Rioja
- %User Temp%\_MEI{Random numbers}\tcl\tzdata\America\Argentina\Mendoza
- %User Temp%\_MEI{Random numbers}\tcl\tzdata\America\Argentina\Rio_Gallegos
- %User Temp%\_MEI{Random numbers}\tcl\tzdata\America\Argentina\Salta
- %User Temp%\_MEI{Random numbers}\tcl\tzdata\America\Argentina\San_Juan
- %User Temp%\_MEI{Random numbers}\tcl\tzdata\America\Argentina\San_Luis
- %User Temp%\_MEI{Random numbers}\tcl\tzdata\America\Argentina\Tucuman
- %User Temp%\_MEI{Random numbers}\tcl\tzdata\America\Argentina\Ushuaia
- %User Temp%\_MEI{Random numbers}\tcl\tzdata\America\Aruba
- %User Temp%\_MEI{Random numbers}\tcl\tzdata\America\Asuncion
- %User Temp%\_MEI{Random numbers}\tcl\tzdata\America\Atikokan
- %User Temp%\_MEI{Random numbers}\tcl\tzdata\America\Atka
- %User Temp%\_MEI{Random numbers}\tcl\tzdata\America\Bahia
- %User Temp%\_MEI{Random numbers}\tcl\tzdata\America\Bahia_Banderas
- %User Temp%\_MEI{Random numbers}\tcl\tzdata\America\Barbados
- %User Temp%\_MEI{Random numbers}\tcl\tzdata\America\Belem
- %User Temp%\_MEI{Random numbers}\tcl\tzdata\America\Belize
- %User Temp%\_MEI{Random numbers}\tcl\tzdata\America\Blanc-Sablon
- %User Temp%\_MEI{Random numbers}\tcl\tzdata\America\Boa_Vista
- %User Temp%\_MEI{Random numbers}\tcl\tzdata\America\Bogota
- %User Temp%\_MEI{Random numbers}\tcl\tzdata\America\Boise
- %User Temp%\_MEI{Random numbers}\tcl\tzdata\America\Buenos_Aires
- %User Temp%\_MEI{Random numbers}\tcl\tzdata\America\Cambridge_Bay
- %User Temp%\_MEI{Random numbers}\tcl\tzdata\America\Campo_Grande
- %User Temp%\_MEI{Random numbers}\tcl\tzdata\America\Cancun
- %User Temp%\_MEI{Random numbers}\tcl\tzdata\America\Caracas
- %User Temp%\_MEI{Random numbers}\tcl\tzdata\America\Catamarca
- %User Temp%\_MEI{Random numbers}\tcl\tzdata\America\Cayenne
- %User Temp%\_MEI{Random numbers}\tcl\tzdata\America\Cayman
- %User Temp%\_MEI{Random numbers}\tcl\tzdata\America\Chicago
- %User Temp%\_MEI{Random numbers}\tcl\tzdata\America\Chihuahua
- %User Temp%\_MEI{Random numbers}\tcl\tzdata\America\Coral_Harbour
- %User Temp%\_MEI{Random numbers}\tcl\tzdata\America\Cordoba
- %User Temp%\_MEI{Random numbers}\tcl\tzdata\America\Costa_Rica
- %User Temp%\_MEI{Random numbers}\tcl\tzdata\America\Creston
- %User Temp%\_MEI{Random numbers}\tcl\tzdata\America\Cuiaba
- %User Temp%\_MEI{Random numbers}\tcl\tzdata\America\Curacao
- %User Temp%\_MEI{Random numbers}\tcl\tzdata\America\Danmarkshavn
- %User Temp%\_MEI{Random numbers}\tcl\tzdata\America\Dawson
- %User Temp%\_MEI{Random numbers}\tcl\tzdata\America\Dawson_Creek
- %User Temp%\_MEI{Random numbers}\tcl\tzdata\America\Denver
- %User Temp%\_MEI{Random numbers}\tcl\tzdata\America\Detroit
- %User Temp%\_MEI{Random numbers}\tcl\tzdata\America\Dominica
- %User Temp%\_MEI{Random numbers}\tcl\tzdata\America\Edmonton
- %User Temp%\_MEI{Random numbers}\tcl\tzdata\America\Eirunepe
- %User Temp%\_MEI{Random numbers}\tcl\tzdata\America\El_Salvador
- %User Temp%\_MEI{Random numbers}\tcl\tzdata\America\Ensenada
- %User Temp%\_MEI{Random numbers}\tcl\tzdata\America\Fort_Wayne
- %User Temp%\_MEI{Random numbers}\tcl\tzdata\America\Fortaleza
- %User Temp%\_MEI{Random numbers}\tcl\tzdata\America\Glace_Bay
- %User Temp%\_MEI{Random numbers}\tcl\tzdata\America\Godthab
- %User Temp%\_MEI{Random numbers}\tcl\tzdata\America\Goose_Bay
- %User Temp%\_MEI{Random numbers}\tcl\tzdata\America\Grand_Turk
- %User Temp%\_MEI{Random numbers}\tcl\tzdata\America\Grenada
- %User Temp%\_MEI{Random numbers}\tcl\tzdata\America\Guadeloupe
- %User Temp%\_MEI{Random numbers}\tcl\tzdata\America\Guatemala
- %User Temp%\_MEI{Random numbers}\tcl\tzdata\America\Guayaquil
- %User Temp%\_MEI{Random numbers}\tcl\tzdata\America\Guyana
- %User Temp%\_MEI{Random numbers}\tcl\tzdata\America\Halifax
- %User Temp%\_MEI{Random numbers}\tcl\tzdata\America\Havana
- %User Temp%\_MEI{Random numbers}\tcl\tzdata\America\Hermosillo
- %User Temp%\_MEI{Random numbers}\tcl\tzdata\America\Indiana\Indianapolis
- %User Temp%\_MEI{Random numbers}\tcl\tzdata\America\Indiana\Knox
- %User Temp%\_MEI{Random numbers}\tcl\tzdata\America\Indiana\Marengo
- %User Temp%\_MEI{Random numbers}\tcl\tzdata\America\Indiana\Petersburg
- %User Temp%\_MEI{Random numbers}\tcl\tzdata\America\Indiana\Tell_City
- %User Temp%\_MEI{Random numbers}\tcl\tzdata\America\Indiana\Vevay
- %User Temp%\_MEI{Random numbers}\tcl\tzdata\America\Indiana\Vincennes
- %User Temp%\_MEI{Random numbers}\tcl\tzdata\America\Indiana\Winamac
- %User Temp%\_MEI{Random numbers}\tcl\tzdata\America\Indianapolis
- %User Temp%\_MEI{Random numbers}\tcl\tzdata\America\Inuvik
- %User Temp%\_MEI{Random numbers}\tcl\tzdata\America\Iqaluit
- %User Temp%\_MEI{Random numbers}\tcl\tzdata\America\Jamaica
- %User Temp%\_MEI{Random numbers}\tcl\tzdata\America\Jujuy
- %User Temp%\_MEI{Random numbers}\tcl\tzdata\America\Juneau
- %User Temp%\_MEI{Random numbers}\tcl\tzdata\America\Kentucky\Louisville
- %User Temp%\_MEI{Random numbers}\tcl\tzdata\America\Kentucky\Monticello
- %User Temp%\_MEI{Random numbers}\tcl\tzdata\America\Knox_IN
- %User Temp%\_MEI{Random numbers}\tcl\tzdata\America\Kralendijk
- %User Temp%\_MEI{Random numbers}\tcl\tzdata\America\La_Paz
- %User Temp%\_MEI{Random numbers}\tcl\tzdata\America\Lima
- %User Temp%\_MEI{Random numbers}\tcl\tzdata\America\Los_Angeles
- %User Temp%\_MEI{Random numbers}\tcl\tzdata\America\Louisville
- %User Temp%\_MEI{Random numbers}\tcl\tzdata\America\Lower_Princes
- %User Temp%\_MEI{Random numbers}\tcl\tzdata\America\Maceio
- %User Temp%\_MEI{Random numbers}\tcl\tzdata\America\Managua
- %User Temp%\_MEI{Random numbers}\tcl\tzdata\America\Manaus
- %User Temp%\_MEI{Random numbers}\tcl\tzdata\America\Marigot
- %User Temp%\_MEI{Random numbers}\tcl\tzdata\America\Martinique
- %User Temp%\_MEI{Random numbers}\tcl\tzdata\America\Matamoros
- %User Temp%\_MEI{Random numbers}\tcl\tzdata\America\Mazatlan
- %User Temp%\_MEI{Random numbers}\tcl\tzdata\America\Mendoza
- %User Temp%\_MEI{Random numbers}\tcl\tzdata\America\Menominee
- %User Temp%\_MEI{Random numbers}\tcl\tzdata\America\Merida
- %User Temp%\_MEI{Random numbers}\tcl\tzdata\America\Metlakatla
- %User Temp%\_MEI{Random numbers}\tcl\tzdata\America\Mexico_City
- %User Temp%\_MEI{Random numbers}\tcl\tzdata\America\Miquelon
- %User Temp%\_MEI{Random numbers}\tcl\tzdata\America\Moncton
- %User Temp%\_MEI{Random numbers}\tcl\tzdata\America\Monterrey
- %User Temp%\_MEI{Random numbers}\tcl\tzdata\America\Montevideo
- %User Temp%\_MEI{Random numbers}\tcl\tzdata\America\Montreal
- %User Temp%\_MEI{Random numbers}\tcl\tzdata\America\Montserrat
- %User Temp%\_MEI{Random numbers}\tcl\tzdata\America\Nassau
- %User Temp%\_MEI{Random numbers}\tcl\tzdata\America\New_York
- %User Temp%\_MEI{Random numbers}\tcl\tzdata\America\Nipigon
- %User Temp%\_MEI{Random numbers}\tcl\tzdata\America\Nome
- %User Temp%\_MEI{Random numbers}\tcl\tzdata\America\Noronha
- %User Temp%\_MEI{Random numbers}\tcl\tzdata\America\North_Dakota\Beulah
- %User Temp%\_MEI{Random numbers}\tcl\tzdata\America\North_Dakota\Center
- %User Temp%\_MEI{Random numbers}\tcl\tzdata\America\North_Dakota\New_Salem
- %User Temp%\_MEI{Random numbers}\tcl\tzdata\America\Ojinaga
- %User Temp%\_MEI{Random numbers}\tcl\tzdata\America\Panama
- %User Temp%\_MEI{Random numbers}\tcl\tzdata\America\Pangnirtung
- %User Temp%\_MEI{Random numbers}\tcl\tzdata\America\Paramaribo
- %User Temp%\_MEI{Random numbers}\tcl\tzdata\America\Phoenix
- %User Temp%\_MEI{Random numbers}\tcl\tzdata\America\Port-au-Prince
- %User Temp%\_MEI{Random numbers}\tcl\tzdata\America\Port_of_Spain
- %User Temp%\_MEI{Random numbers}\tcl\tzdata\America\Porto_Acre
- %User Temp%\_MEI{Random numbers}\tcl\tzdata\America\Porto_Velho
- %User Temp%\_MEI{Random numbers}\tcl\tzdata\America\Puerto_Rico
- %User Temp%\_MEI{Random numbers}\tcl\tzdata\America\Rainy_River
- %User Temp%\_MEI{Random numbers}\tcl\tzdata\America\Rankin_Inlet
- %User Temp%\_MEI{Random numbers}\tcl\tzdata\America\Recife
- %User Temp%\_MEI{Random numbers}\tcl\tzdata\America\Regina
- %User Temp%\_MEI{Random numbers}\tcl\tzdata\America\Resolute
- %User Temp%\_MEI{Random numbers}\tcl\tzdata\America\Rio_Branco
- %User Temp%\_MEI{Random numbers}\tcl\tzdata\America\Rosario
- %User Temp%\_MEI{Random numbers}\tcl\tzdata\America\Santa_Isabel
- %User Temp%\_MEI{Random numbers}\tcl\tzdata\America\Santarem
- %User Temp%\_MEI{Random numbers}\tcl\tzdata\America\Santiago
- %User Temp%\_MEI{Random numbers}\tcl\tzdata\America\Santo_Domingo
- %User Temp%\_MEI{Random numbers}\tcl\tzdata\America\Sao_Paulo
- %User Temp%\_MEI{Random numbers}\tcl\tzdata\America\Scoresbysund
- %User Temp%\_MEI{Random numbers}\tcl\tzdata\America\Shiprock
- %User Temp%\_MEI{Random numbers}\tcl\tzdata\America\Sitka
- %User Temp%\_MEI{Random numbers}\tcl\tzdata\America\St_Barthelemy
- %User Temp%\_MEI{Random numbers}\tcl\tzdata\America\St_Johns
- %User Temp%\_MEI{Random numbers}\tcl\tzdata\America\St_Kitts
- %User Temp%\_MEI{Random numbers}\tcl\tzdata\America\St_Lucia
- %User Temp%\_MEI{Random numbers}\tcl\tzdata\America\St_Thomas
- %User Temp%\_MEI{Random numbers}\tcl\tzdata\America\St_Vincent
- %User Temp%\_MEI{Random numbers}\tcl\tzdata\America\Swift_Current
- %User Temp%\_MEI{Random numbers}\tcl\tzdata\America\Tegucigalpa
- %User Temp%\_MEI{Random numbers}\tcl\tzdata\America\Thule
- %User Temp%\_MEI{Random numbers}\tcl\tzdata\America\Thunder_Bay
- %User Temp%\_MEI{Random numbers}\tcl\tzdata\America\Tijuana
- %User Temp%\_MEI{Random numbers}\tcl\tzdata\America\Toronto
- %User Temp%\_MEI{Random numbers}\tcl\tzdata\America\Tortola
- %User Temp%\_MEI{Random numbers}\tcl\tzdata\America\Vancouver
- %User Temp%\_MEI{Random numbers}\tcl\tzdata\America\Virgin
- %User Temp%\_MEI{Random numbers}\tcl\tzdata\America\Whitehorse
- %User Temp%\_MEI{Random numbers}\tcl\tzdata\America\Winnipeg
- %User Temp%\_MEI{Random numbers}\tcl\tzdata\America\Yakutat
- %User Temp%\_MEI{Random numbers}\tcl\tzdata\America\Yellowknife
- %User Temp%\_MEI{Random numbers}\tcl\tzdata\Antarctica\Casey
- %User Temp%\_MEI{Random numbers}\tcl\tzdata\Antarctica\Davis
- %User Temp%\_MEI{Random numbers}\tcl\tzdata\Antarctica\DumontDUrville
- %User Temp%\_MEI{Random numbers}\tcl\tzdata\Antarctica\Macquarie
- %User Temp%\_MEI{Random numbers}\tcl\tzdata\Antarctica\Mawson
- %User Temp%\_MEI{Random numbers}\tcl\tzdata\Antarctica\McMurdo
- %User Temp%\_MEI{Random numbers}\tcl\tzdata\Antarctica\Palmer
- %User Temp%\_MEI{Random numbers}\tcl\tzdata\Antarctica\Rothera
- %User Temp%\_MEI{Random numbers}\tcl\tzdata\Antarctica\South_Pole
- %User Temp%\_MEI{Random numbers}\tcl\tzdata\Antarctica\Syowa
- %User Temp%\_MEI{Random numbers}\tcl\tzdata\Antarctica\Vostok
- %User Temp%\_MEI{Random numbers}\tcl\tzdata\Arctic\Longyearbyen
- %User Temp%\_MEI{Random numbers}\tcl\tzdata\Asia\Aden
- %User Temp%\_MEI{Random numbers}\tcl\tzdata\Asia\Almaty
- %User Temp%\_MEI{Random numbers}\tcl\tzdata\Asia\Amman
- %User Temp%\_MEI{Random numbers}\tcl\tzdata\Asia\Anadyr
- %User Temp%\_MEI{Random numbers}\tcl\tzdata\Asia\Aqtau
- %User Temp%\_MEI{Random numbers}\tcl\tzdata\Asia\Aqtobe
- %User Temp%\_MEI{Random numbers}\tcl\tzdata\Asia\Ashgabat
- %User Temp%\_MEI{Random numbers}\tcl\tzdata\Asia\Ashkhabad
- %User Temp%\_MEI{Random numbers}\tcl\tzdata\Asia\Baghdad
- %User Temp%\_MEI{Random numbers}\tcl\tzdata\Asia\Bahrain
- %User Temp%\_MEI{Random numbers}\tcl\tzdata\Asia\Baku
- %User Temp%\_MEI{Random numbers}\tcl\tzdata\Asia\Bangkok
- %User Temp%\_MEI{Random numbers}\tcl\tzdata\Asia\Beirut
- %User Temp%\_MEI{Random numbers}\tcl\tzdata\Asia\Bishkek
- %User Temp%\_MEI{Random numbers}\tcl\tzdata\Asia\Brunei
- %User Temp%\_MEI{Random numbers}\tcl\tzdata\Asia\Calcutta
- %User Temp%\_MEI{Random numbers}\tcl\tzdata\Asia\Choibalsan
- %User Temp%\_MEI{Random numbers}\tcl\tzdata\Asia\Chongqing
- %User Temp%\_MEI{Random numbers}\tcl\tzdata\Asia\Chungking
- %User Temp%\_MEI{Random numbers}\tcl\tzdata\Asia\Colombo
- %User Temp%\_MEI{Random numbers}\tcl\tzdata\Asia\Dacca
- %User Temp%\_MEI{Random numbers}\tcl\tzdata\Asia\Damascus
- %User Temp%\_MEI{Random numbers}\tcl\tzdata\Asia\Dhaka
- %User Temp%\_MEI{Random numbers}\tcl\tzdata\Asia\Dili
- %User Temp%\_MEI{Random numbers}\tcl\tzdata\Asia\Dubai
- %User Temp%\_MEI{Random numbers}\tcl\tzdata\Asia\Dushanbe
- %User Temp%\_MEI{Random numbers}\tcl\tzdata\Asia\Gaza
- %User Temp%\_MEI{Random numbers}\tcl\tzdata\Asia\Harbin
- %User Temp%\_MEI{Random numbers}\tcl\tzdata\Asia\Hebron
- %User Temp%\_MEI{Random numbers}\tcl\tzdata\Asia\Ho_Chi_Minh
- %User Temp%\_MEI{Random numbers}\tcl\tzdata\Asia\Hong_Kong
- %User Temp%\_MEI{Random numbers}\tcl\tzdata\Asia\Hovd
- %User Temp%\_MEI{Random numbers}\tcl\tzdata\Asia\Irkutsk
- %User Temp%\_MEI{Random numbers}\tcl\tzdata\Asia\Istanbul
- %User Temp%\_MEI{Random numbers}\tcl\tzdata\Asia\Jakarta
- %User Temp%\_MEI{Random numbers}\tcl\tzdata\Asia\Jayapura
- %User Temp%\_MEI{Random numbers}\tcl\tzdata\Asia\Jerusalem
- %User Temp%\_MEI{Random numbers}\tcl\tzdata\Asia\Kabul
- %User Temp%\_MEI{Random numbers}\tcl\tzdata\Asia\Kamchatka
- %User Temp%\_MEI{Random numbers}\tcl\tzdata\Asia\Karachi
- %User Temp%\_MEI{Random numbers}\tcl\tzdata\Asia\Nicosia
- %User Temp%\_MEI{Random numbers}\tcl\tzdata\Asia\Novokuznetsk
- %User Temp%\_MEI{Random numbers}\tcl\tzdata\Asia\Novosibirsk
- %User Temp%\_MEI{Random numbers}\tcl\tzdata\Asia\Omsk
- %User Temp%\_MEI{Random numbers}\tcl\tzdata\Asia\Oral
- %User Temp%\_MEI{Random numbers}\tcl\tzdata\Asia\Phnom_Penh
- %User Temp%\_MEI{Random numbers}\tcl\tzdata\Asia\Pontianak
- %User Temp%\_MEI{Random numbers}\tcl\tzdata\Asia\Pyongyang
- %User Temp%\_MEI{Random numbers}\tcl\tzdata\Asia\Qatar
- %User Temp%\_MEI{Random numbers}\tcl\tzdata\Asia\Qyzylorda
- %User Temp%\_MEI{Random numbers}\tcl\tzdata\Asia\Rangoon
- %User Temp%\_MEI{Random numbers}\tcl\tzdata\Asia\Riyadh
- %User Temp%\_MEI{Random numbers}\tcl\tzdata\Asia\Saigon
- %User Temp%\_MEI{Random numbers}\tcl\tzdata\Asia\Sakhalin
- %User Temp%\_MEI{Random numbers}\tcl\tzdata\Asia\Samarkand
- %User Temp%\_MEI{Random numbers}\tcl\tzdata\Asia\Seoul
- %User Temp%\_MEI{Random numbers}\tcl\tzdata\Asia\Shanghai
- %User Temp%\_MEI{Random numbers}\tcl\tzdata\Asia\Singapore
- %User Temp%\_MEI{Random numbers}\tcl\tzdata\Asia\Taipei
- %User Temp%\_MEI{Random numbers}\tcl\tzdata\Asia\Tashkent
- %User Temp%\_MEI{Random numbers}\tcl\tzdata\Asia\Tbilisi
- %User Temp%\_MEI{Random numbers}\tcl\tzdata\Asia\Tehran
- %User Temp%\_MEI{Random numbers}\tcl\tzdata\Asia\Tel_Aviv
- %User Temp%\_MEI{Random numbers}\tcl\tzdata\Asia\Thimbu
- %User Temp%\_MEI{Random numbers}\tcl\tzdata\Asia\Thimphu
- %User Temp%\_MEI{Random numbers}\tcl\tzdata\Asia\Tokyo
- %User Temp%\_MEI{Random numbers}\tcl\tzdata\Asia\Ujung_Pandang
- %User Temp%\_MEI{Random numbers}\tcl\tzdata\Asia\Ulaanbaatar
- %User Temp%\_MEI{Random numbers}\tcl\tzdata\Asia\Ulan_Bator
- %User Temp%\_MEI{Random numbers}\tcl\tzdata\Asia\Urumqi
- %User Temp%\_MEI{Random numbers}\tcl\tzdata\Asia\Ust-Nera
- %User Temp%\_MEI{Random numbers}\tcl\tzdata\Asia\Vientiane
- %User Temp%\_MEI{Random numbers}\tcl\tzdata\Asia\Vladivostok
- %User Temp%\_MEI{Random numbers}\tcl\tzdata\Asia\Yakutsk
- %User Temp%\_MEI{Random numbers}\tcl\tzdata\Asia\Yekaterinburg
- %User Temp%\_MEI{Random numbers}\tcl\tzdata\Asia\Yerevan
- %User Temp%\_MEI{Random numbers}\tcl\tzdata\Atlantic\Azores
- %User Temp%\_MEI{Random numbers}\tcl\tzdata\Singapore
- %User Temp%\_MEI{Random numbers}\tcl\tzdata\SystemV\AST4
- %User Temp%\_MEI{Random numbers}\tcl\tzdata\SystemV\AST4ADT
- %User Temp%\_MEI{Random numbers}\tcl\tzdata\SystemV\CST6
- %User Temp%\_MEI{Random numbers}\tcl\tzdata\SystemV\CST6CDT
- %User Temp%\_MEI{Random numbers}\tcl\tzdata\SystemV\EST5
- %User Temp%\_MEI{Random numbers}\tcl\tzdata\SystemV\EST5EDT
- %User Temp%\_MEI{Random numbers}\tcl\tzdata\SystemV\HST10
- %User Temp%\_MEI{Random numbers}\tcl\tzdata\SystemV\MST7
- %User Temp%\_MEI{Random numbers}\tcl\tzdata\SystemV\MST7MDT
- %User Temp%\_MEI{Random numbers}\tcl\tzdata\SystemV\PST8
- %User Temp%\_MEI{Random numbers}\tcl\tzdata\SystemV\PST8PDT
- %User Temp%\_MEI{Random numbers}\tcl\tzdata\SystemV\YST9
- %User Temp%\_MEI{Random numbers}\tcl\tzdata\SystemV\YST9YDT
- %User Temp%\_MEI{Random numbers}\tcl\tzdata\Turkey
- %User Temp%\_MEI{Random numbers}\tcl\tzdata\UCT
- %User Temp%\_MEI{Random numbers}\tcl\tzdata\US\Alaska
- %User Temp%\_MEI{Random numbers}\tcl\tzdata\US\Aleutian
- %User Temp%\_MEI{Random numbers}\tcl\tzdata\US\Arizona
- %User Temp%\_MEI{Random numbers}\tcl\tzdata\US\Central
- %User Temp%\_MEI{Random numbers}\tcl\tzdata\US\East-Indiana
- %User Temp%\_MEI{Random numbers}\tcl\tzdata\US\Eastern
- %User Temp%\_MEI{Random numbers}\tcl\tzdata\US\Hawaii
- %User Temp%\_MEI{Random numbers}\tcl\tzdata\US\Indiana-Starke
- %User Temp%\_MEI{Random numbers}\tcl\tzdata\US\Michigan
- %User Temp%\_MEI{Random numbers}\tcl\tzdata\US\Mountain
- %User Temp%\_MEI{Random numbers}\tcl\tzdata\US\Pacific
- %User Temp%\_MEI{Random numbers}\tcl\tzdata\US\Pacific-New
- %User Temp%\_MEI{Random numbers}\tcl\tzdata\US\Samoa
- %User Temp%\_MEI{Random numbers}\tcl\tzdata\UTC
- %User Temp%\_MEI{Random numbers}\tcl\tzdata\Universal
- %User Temp%\_MEI{Random numbers}\tcl\tzdata\W-SU
- %User Temp%\_MEI{Random numbers}\tcl\tzdata\WET
- %User Temp%\_MEI{Random numbers}\tcl\tzdata\Zulu
- %User Temp%\_MEI{Random numbers}\tk\bgerror.tcl
- %User Temp%\_MEI{Random numbers}\tk\button.tcl
- %User Temp%\_MEI{Random numbers}\tk\choosedir.tcl
- %User Temp%\_MEI{Random numbers}\tk\clrpick.tcl
- %User Temp%\_MEI{Random numbers}\tk\comdlg.tcl
- %User Temp%\_MEI{Random numbers}\tk\console.tcl
- %User Temp%\_MEI{Random numbers}\tk\dialog.tcl
- %User Temp%\_MEI{Random numbers}\tk\entry.tcl
- %User Temp%\_MEI{Random numbers}\tk\focus.tcl
- %User Temp%\_MEI{Random numbers}\tk\images\README
- %User Temp%\_MEI{Random numbers}\tk\images\logo.eps
- %User Temp%\_MEI{Random numbers}\tk\images\logo100.gif
- %User Temp%\_MEI{Random numbers}\tk\images\logo64.gif
- %User Temp%\_MEI{Random numbers}\tk\images\logoLarge.gif
- %User Temp%\_MEI{Random numbers}\tk\images\logoMed.gif
- %User Temp%\_MEI{Random numbers}\tk\images\pwrdLogo.eps
- %User Temp%\_MEI{Random numbers}\tk\images\pwrdLogo100.gif
- %User Temp%\_MEI{Random numbers}\tk\images\pwrdLogo150.gif
- %User Temp%\_MEI{Random numbers}\tk\images\pwrdLogo175.gif
- %User Temp%\_MEI{Random numbers}\tk\images\pwrdLogo200.gif
- %User Temp%\_MEI{Random numbers}\tk\images\pwrdLogo75.gif
- %User Temp%\_MEI{Random numbers}\tk\images\tai-ku.gif
- %User Temp%\_MEI{Random numbers}\tk\license.terms
- %User Temp%\_MEI{Random numbers}\tk\listbox.tcl
- %User Temp%\_MEI{Random numbers}\tk\menu.tcl
- %User Temp%\_MEI{Random numbers}\tk\mkpsenc.tcl
- %User Temp%\_MEI{Random numbers}\tk\msgbox.tcl
- %User Temp%\_MEI{Random numbers}\tk\msgs\cs.msg
- %User Temp%\_MEI{Random numbers}\tk\msgs\da.msg
- %User Temp%\_MEI{Random numbers}\tk\msgs\de.msg
- %User Temp%\_MEI{Random numbers}\tk\msgs\el.msg
- %User Temp%\_MEI{Random numbers}\tk\msgs\en.msg
- %User Temp%\_MEI{Random numbers}\tk\msgs\en_gb.msg
- %User Temp%\_MEI{Random numbers}\tk\msgs\eo.msg
- %User Temp%\_MEI{Random numbers}\tk\msgs\es.msg
- %User Temp%\_MEI{Random numbers}\tk\msgs\fr.msg
- %User Temp%\_MEI{Random numbers}\tk\msgs\hu.msg
- %User Temp%\_MEI{Random numbers}\tk\msgs\it.msg
- %User Temp%\_MEI{Random numbers}\tk\msgs\nl.msg
- %User Temp%\_MEI{Random numbers}\tk\msgs\pl.msg
- %User Temp%\_MEI{Random numbers}\tk\msgs\pt.msg
- %User Temp%\_MEI{Random numbers}\tk\msgs\ru.msg
- %User Temp%\_MEI{Random numbers}\tk\msgs\sv.msg
- %User Temp%\_MEI{Random numbers}\tk\obsolete.tcl
- %User Temp%\_MEI{Random numbers}\tk\optMenu.tcl
- %User Temp%\_MEI{Random numbers}\tk\palette.tcl
- %User Temp%\_MEI{Random numbers}\tk\panedwindow.tcl
- %User Temp%\_MEI{Random numbers}\tk\pkgIndex.tcl
- %User Temp%\_MEI{Random numbers}\tk\safetk.tcl
- %User Temp%\_MEI{Random numbers}\tk\scale.tcl
- %User Temp%\_MEI{Random numbers}\tk\scrlbar.tcl
- %User Temp%\_MEI{Random numbers}\tk\spinbox.tcl
- %User Temp%\_MEI{Random numbers}\tk\tclIndex
- %User Temp%\_MEI{Random numbers}\tk\tearoff.tcl
- %User Temp%\_MEI{Random numbers}\tk\text.tcl
- %User Temp%\_MEI{Random numbers}\tk\tk.tcl
- %User Temp%\_MEI{Random numbers}\tk\tkfbox.tcl
- %User Temp%\_MEI{Random numbers}\tk\ttk\altTheme.tcl
- %User Temp%\_MEI{Random numbers}\tk\ttk\treeview.tcl
- %User Temp%\_MEI{Random numbers}\tk\ttk\ttk.tcl
- %User Temp%\_MEI{Random numbers}\tk\ttk\utils.tcl
- %User Temp%\_MEI{Random numbers}\tk\ttk\vistaTheme.tcl
- %User Temp%\_MEI{Random numbers}\tk\ttk\winTheme.tcl
- %User Temp%\_MEI{Random numbers}\tk\ttk\xpTheme.tcl
- %User Temp%\_MEI{Random numbers}\tk\unsupported.tcl
- %User Temp%\_MEI{Random numbers}\tk\xmfbox.tcl
- {malware path}\RANSOM_NOTE.txt - Copy of ransom note
- {malware path}\pwd - Contains encryption keys
- %User Temp%\_MEI{Random numbers}\tcl\tzdata\Asia\Kashgar
- %User Temp%\_MEI{Random numbers}\tcl\tzdata\Asia\Kathmandu
- %User Temp%\_MEI{Random numbers}\tcl\tzdata\Asia\Katmandu
- %User Temp%\_MEI{Random numbers}\tcl\tzdata\Asia\Khandyga
- %User Temp%\_MEI{Random numbers}\tcl\tzdata\Asia\Kolkata
- %User Temp%\_MEI{Random numbers}\tcl\tzdata\Asia\Krasnoyarsk
- %User Temp%\_MEI{Random numbers}\tcl\tzdata\Asia\Kuala_Lumpur
- %User Temp%\_MEI{Random numbers}\tcl\tzdata\Asia\Kuching
- %User Temp%\_MEI{Random numbers}\tcl\tzdata\Asia\Kuwait
- %User Temp%\_MEI{Random numbers}\tcl\tzdata\Asia\Macao
- %User Temp%\_MEI{Random numbers}\tcl\tzdata\Asia\Macau
- %User Temp%\_MEI{Random numbers}\tcl\tzdata\Asia\Magadan
- %User Temp%\_MEI{Random numbers}\tcl\tzdata\Asia\Makassar
- %User Temp%\_MEI{Random numbers}\tcl\tzdata\Asia\Manila
- %User Temp%\_MEI{Random numbers}\tcl\tzdata\Asia\Muscat
- %User Temp%\_MEI{Random numbers}\tcl\tzdata\Atlantic\Bermuda
- %User Temp%\_MEI{Random numbers}\tcl\tzdata\Atlantic\Canary
- %User Temp%\_MEI{Random numbers}\tcl\tzdata\Atlantic\Cape_Verde
- %User Temp%\_MEI{Random numbers}\tcl\tzdata\Atlantic\Faeroe
- %User Temp%\_MEI{Random numbers}\tcl\tzdata\Atlantic\Faroe
- %User Temp%\_MEI{Random numbers}\tcl\tzdata\Atlantic\Jan_Mayen
- %User Temp%\_MEI{Random numbers}\tcl\tzdata\Atlantic\Madeira
- %User Temp%\_MEI{Random numbers}\tcl\tzdata\Atlantic\Reykjavik
- %User Temp%\_MEI{Random numbers}\tcl\tzdata\Atlantic\South_Georgia
- %User Temp%\_MEI{Random numbers}\tcl\tzdata\Atlantic\St_Helena
- %User Temp%\_MEI{Random numbers}\tcl\tzdata\Atlantic\Stanley
- %User Temp%\_MEI{Random numbers}\tcl\tzdata\Australia\ACT
- %User Temp%\_MEI{Random numbers}\tcl\tzdata\Australia\Adelaide
- %User Temp%\_MEI{Random numbers}\tcl\tzdata\Australia\Brisbane
- %User Temp%\_MEI{Random numbers}\tcl\tzdata\Australia\Broken_Hill
- %User Temp%\_MEI{Random numbers}\tcl\tzdata\Australia\Canberra
- %User Temp%\_MEI{Random numbers}\tcl\tzdata\Australia\Currie
- %User Temp%\_MEI{Random numbers}\tcl\tzdata\Australia\Darwin
- %User Temp%\_MEI{Random numbers}\tcl\tzdata\Australia\Eucla
- %User Temp%\_MEI{Random numbers}\tcl\tzdata\Australia\Hobart
- %User Temp%\_MEI{Random numbers}\tcl\tzdata\Australia\LHI
- %User Temp%\_MEI{Random numbers}\tcl\tzdata\Australia\Lindeman
- %User Temp%\_MEI{Random numbers}\tcl\tzdata\Australia\Lord_Howe
- %User Temp%\_MEI{Random numbers}\tcl\tzdata\Australia\Melbourne
- %User Temp%\_MEI{Random numbers}\tcl\tzdata\Australia\NSW
- %User Temp%\_MEI{Random numbers}\tcl\tzdata\Australia\North
- %User Temp%\_MEI{Random numbers}\tcl\tzdata\Australia\Perth
- %User Temp%\_MEI{Random numbers}\tcl\tzdata\Australia\Queensland
- %User Temp%\_MEI{Random numbers}\tcl\tzdata\Australia\South
- %User Temp%\_MEI{Random numbers}\tcl\tzdata\Australia\Sydney
- %User Temp%\_MEI{Random numbers}\tcl\tzdata\Australia\Tasmania
- %User Temp%\_MEI{Random numbers}\tcl\tzdata\Australia\Victoria
- %User Temp%\_MEI{Random numbers}\tcl\tzdata\Australia\West
- %User Temp%\_MEI{Random numbers}\tcl\tzdata\Australia\Yancowinna
- %User Temp%\_MEI{Random numbers}\tcl\tzdata\Brazil\Acre
- %User Temp%\_MEI{Random numbers}\tcl\tzdata\Brazil\DeNoronha
- %User Temp%\_MEI{Random numbers}\tcl\tzdata\Brazil\East
- %User Temp%\_MEI{Random numbers}\tcl\tzdata\Brazil\West
- %User Temp%\_MEI{Random numbers}\tcl\tzdata\CET
- %User Temp%\_MEI{Random numbers}\tcl\tzdata\CST6CDT
- %User Temp%\_MEI{Random numbers}\tcl\tzdata\Canada\Atlantic
- %User Temp%\_MEI{Random numbers}\tcl\tzdata\Canada\Central
- %User Temp%\_MEI{Random numbers}\tcl\tzdata\Canada\East-Saskatchewan
- %User Temp%\_MEI{Random numbers}\tcl\tzdata\Canada\Eastern
- %User Temp%\_MEI{Random numbers}\tcl\tzdata\Canada\Mountain
- %User Temp%\_MEI{Random numbers}\tcl\tzdata\Canada\Newfoundland
- %User Temp%\_MEI{Random numbers}\tcl\tzdata\Canada\Pacific
- %User Temp%\_MEI{Random numbers}\tcl\tzdata\Canada\Saskatchewan
- %User Temp%\_MEI{Random numbers}\tcl\tzdata\Canada\Yukon
- %User Temp%\_MEI{Random numbers}\tcl\tzdata\Chile\Continental
- %User Temp%\_MEI{Random numbers}\tcl\tzdata\Chile\EasterIsland
- %User Temp%\_MEI{Random numbers}\tcl\tzdata\Cuba
- %User Temp%\_MEI{Random numbers}\tcl\tzdata\EET
- %User Temp%\_MEI{Random numbers}\tcl\tzdata\EST
- %User Temp%\_MEI{Random numbers}\tcl\tzdata\EST5EDT
- %User Temp%\_MEI{Random numbers}\tcl\tzdata\Egypt
- %User Temp%\_MEI{Random numbers}\tcl\tzdata\Eire
- %User Temp%\_MEI{Random numbers}\tcl\tzdata\Etc\GMT
- %User Temp%\_MEI{Random numbers}\tcl\tzdata\Etc\GMT+0
- %User Temp%\_MEI{Random numbers}\tcl\tzdata\Etc\GMT+1
- %User Temp%\_MEI{Random numbers}\tcl\tzdata\Etc\GMT+10
- %User Temp%\_MEI{Random numbers}\tcl\tzdata\Etc\GMT+11
- %User Temp%\_MEI{Random numbers}\tcl\tzdata\Etc\GMT+12
- %User Temp%\_MEI{Random numbers}\tcl\tzdata\Etc\GMT+2
- %User Temp%\_MEI{Random numbers}\tcl\tzdata\Etc\GMT+3
- %User Temp%\_MEI{Random numbers}\tcl\tzdata\Etc\GMT+4
- %User Temp%\_MEI{Random numbers}\tcl\tzdata\Etc\GMT+5
- %User Temp%\_MEI{Random numbers}\tcl\tzdata\Etc\GMT+6
- %User Temp%\_MEI{Random numbers}\tcl\tzdata\Etc\GMT+7
- %User Temp%\_MEI{Random numbers}\tcl\tzdata\Etc\GMT+8
- %User Temp%\_MEI{Random numbers}\tcl\tzdata\Etc\GMT+9
- %User Temp%\_MEI{Random numbers}\tcl\tzdata\Etc\GMT-0
- %User Temp%\_MEI{Random numbers}\tcl\tzdata\Etc\GMT-1
- %User Temp%\_MEI{Random numbers}\tcl\tzdata\Etc\GMT-10
- %User Temp%\_MEI{Random numbers}\tcl\tzdata\Etc\GMT-11
- %User Temp%\_MEI{Random numbers}\tcl\tzdata\Etc\GMT-12
- %User Temp%\_MEI{Random numbers}\tcl\tzdata\Etc\GMT-13
- %User Temp%\_MEI{Random numbers}\tcl\tzdata\Etc\GMT-14
- %User Temp%\_MEI{Random numbers}\tcl\tzdata\Etc\GMT-2
- %User Temp%\_MEI{Random numbers}\tcl\tzdata\Etc\GMT-3
- %User Temp%\_MEI{Random numbers}\tcl\tzdata\Etc\GMT-4
- %User Temp%\_MEI{Random numbers}\tcl\tzdata\Etc\GMT-5
- %User Temp%\_MEI{Random numbers}\tcl\tzdata\Etc\GMT-6
- %User Temp%\_MEI{Random numbers}\tcl\tzdata\Etc\GMT-7
- %User Temp%\_MEI{Random numbers}\tcl\tzdata\Etc\GMT-8
- %User Temp%\_MEI{Random numbers}\tcl\tzdata\Etc\GMT-9
- %User Temp%\_MEI{Random numbers}\tcl\tzdata\Etc\GMT0
- %User Temp%\_MEI{Random numbers}\tcl\tzdata\Etc\Greenwich
- %User Temp%\_MEI{Random numbers}\tcl\tzdata\Etc\UCT
- %User Temp%\_MEI{Random numbers}\tcl\tzdata\Etc\UTC
- %User Temp%\_MEI{Random numbers}\tcl\tzdata\Etc\Universal
- %User Temp%\_MEI{Random numbers}\tcl\tzdata\Etc\Zulu
- %User Temp%\_MEI{Random numbers}\tcl\tzdata\Europe\Amsterdam
- %User Temp%\_MEI{Random numbers}\tcl\tzdata\Europe\Andorra
- %User Temp%\_MEI{Random numbers}\tcl\tzdata\Europe\Athens
- %User Temp%\_MEI{Random numbers}\tcl\tzdata\Europe\Belfast
- %User Temp%\_MEI{Random numbers}\tcl\tzdata\Europe\Belgrade
- %User Temp%\_MEI{Random numbers}\tcl\tzdata\Europe\Berlin
- %User Temp%\_MEI{Random numbers}\tcl\tzdata\Europe\Bratislava
- %User Temp%\_MEI{Random numbers}\tcl\tzdata\Europe\Brussels
- %User Temp%\_MEI{Random numbers}\tcl\tzdata\Europe\Bucharest
- %User Temp%\_MEI{Random numbers}\tcl\tzdata\Europe\Budapest
- %User Temp%\_MEI{Random numbers}\tcl\tzdata\Europe\Busingen
- %User Temp%\_MEI{Random numbers}\tcl\tzdata\Europe\Chisinau
- %User Temp%\_MEI{Random numbers}\tcl\tzdata\Europe\Copenhagen
- %User Temp%\_MEI{Random numbers}\tcl\tzdata\Europe\Dublin
- %User Temp%\_MEI{Random numbers}\tcl\tzdata\Europe\Gibraltar
- %User Temp%\_MEI{Random numbers}\tcl\tzdata\Europe\Guernsey
- %User Temp%\_MEI{Random numbers}\tcl\tzdata\Europe\Helsinki
- %User Temp%\_MEI{Random numbers}\tcl\tzdata\Europe\Isle_of_Man
- %User Temp%\_MEI{Random numbers}\tcl\tzdata\Europe\Istanbul
- %User Temp%\_MEI{Random numbers}\tcl\tzdata\Europe\Jersey
- %User Temp%\_MEI{Random numbers}\tcl\tzdata\Europe\Kaliningrad
- %User Temp%\_MEI{Random numbers}\tcl\tzdata\Europe\Kiev
- %User Temp%\_MEI{Random numbers}\tcl\tzdata\Europe\Lisbon
- %User Temp%\_MEI{Random numbers}\tcl\tzdata\Europe\Ljubljana
- %User Temp%\_MEI{Random numbers}\tcl\tzdata\Europe\London
- %User Temp%\_MEI{Random numbers}\tcl\tzdata\Europe\Luxembourg
- %User Temp%\_MEI{Random numbers}\tcl\tzdata\Europe\Madrid
- %User Temp%\_MEI{Random numbers}\tcl\tzdata\Europe\Malta
- %User Temp%\_MEI{Random numbers}\tcl\tzdata\Europe\Mariehamn
- %User Temp%\_MEI{Random numbers}\tcl\tzdata\Europe\Minsk
- %User Temp%\_MEI{Random numbers}\tcl\tzdata\Europe\Monaco
- %User Temp%\_MEI{Random numbers}\tcl\tzdata\Europe\Moscow
- %User Temp%\_MEI{Random numbers}\tcl\tzdata\Europe\Nicosia
- %User Temp%\_MEI{Random numbers}\tcl\tzdata\Europe\Oslo
- %User Temp%\_MEI{Random numbers}\tcl\tzdata\Europe\Paris
- %User Temp%\_MEI{Random numbers}\tcl\tzdata\Europe\Podgorica
- %User Temp%\_MEI{Random numbers}\tcl\tzdata\Europe\Prague
- %User Temp%\_MEI{Random numbers}\tcl\tzdata\Europe\Riga
- %User Temp%\_MEI{Random numbers}\tcl\tzdata\Europe\Rome
- %User Temp%\_MEI{Random numbers}\tcl\tzdata\Europe\Samara
- %User Temp%\_MEI{Random numbers}\tcl\tzdata\Europe\San_Marino
- %User Temp%\_MEI{Random numbers}\tcl\tzdata\Europe\Sarajevo
- %User Temp%\_MEI{Random numbers}\tcl\tzdata\Europe\Simferopol
- %User Temp%\_MEI{Random numbers}\tcl\tzdata\Europe\Skopje
- %User Temp%\_MEI{Random numbers}\tcl\tzdata\Europe\Sofia
- %User Temp%\_MEI{Random numbers}\tcl\tzdata\Europe\Stockholm
- %User Temp%\_MEI{Random numbers}\tcl\tzdata\Europe\Tallinn
- %User Temp%\_MEI{Random numbers}\tcl\tzdata\Europe\Tirane
- %User Temp%\_MEI{Random numbers}\tcl\tzdata\Europe\Tiraspol
- %User Temp%\_MEI{Random numbers}\tcl\tzdata\Europe\Uzhgorod
- %User Temp%\_MEI{Random numbers}\tcl\tzdata\Europe\Vaduz
- %User Temp%\_MEI{Random numbers}\tcl\tzdata\Europe\Vatican
- %User Temp%\_MEI{Random numbers}\tcl\tzdata\Europe\Vienna
- %User Temp%\_MEI{Random numbers}\tcl\tzdata\Europe\Vilnius
- %User Temp%\_MEI{Random numbers}\tcl\tzdata\Europe\Volgograd
- %User Temp%\_MEI{Random numbers}\tcl\tzdata\Europe\Warsaw
- %User Temp%\_MEI{Random numbers}\tcl\tzdata\Europe\Zagreb
- %User Temp%\_MEI{Random numbers}\tcl\tzdata\Europe\Zaporozhye
- %User Temp%\_MEI{Random numbers}\tcl\tzdata\Europe\Zurich
- %User Temp%\_MEI{Random numbers}\tcl\tzdata\GB
- %User Temp%\_MEI{Random numbers}\tcl\tzdata\GB-Eire
- %User Temp%\_MEI{Random numbers}\tcl\tzdata\GMT
- %User Temp%\_MEI{Random numbers}\tcl\tzdata\GMT+0
- %User Temp%\_MEI{Random numbers}\tcl\tzdata\GMT-0
- %User Temp%\_MEI{Random numbers}\tcl\tzdata\GMT0
- %User Temp%\_MEI{Random numbers}\tcl\tzdata\Greenwich
- %User Temp%\_MEI{Random numbers}\tcl\tzdata\HST
- %User Temp%\_MEI{Random numbers}\tcl\tzdata\Hongkong
- %User Temp%\_MEI{Random numbers}\tcl\tzdata\Iceland
- %User Temp%\_MEI{Random numbers}\tcl\tzdata\Indian\Antananarivo
- %User Temp%\_MEI{Random numbers}\tcl\tzdata\Indian\Chagos
- %User Temp%\_MEI{Random numbers}\tcl\tzdata\Indian\Christmas
- %User Temp%\_MEI{Random numbers}\tcl\tzdata\Indian\Cocos
- %User Temp%\_MEI{Random numbers}\tcl\tzdata\Indian\Comoro
- %User Temp%\_MEI{Random numbers}\tcl\tzdata\Indian\Kerguelen
- %User Temp%\_MEI{Random numbers}\tcl\tzdata\Indian\Mahe
- %User Temp%\_MEI{Random numbers}\tcl\tzdata\Indian\Maldives
- %User Temp%\_MEI{Random numbers}\tcl\tzdata\Indian\Mauritius
- %User Temp%\_MEI{Random numbers}\tcl\tzdata\Indian\Mayotte
- %User Temp%\_MEI{Random numbers}\tcl\tzdata\Indian\Reunion
- %User Temp%\_MEI{Random numbers}\tcl\tzdata\Iran
- %User Temp%\_MEI{Random numbers}\tcl\tzdata\Israel
- %User Temp%\_MEI{Random numbers}\tcl\tzdata\Jamaica
- %User Temp%\_MEI{Random numbers}\tcl\tzdata\Japan
- %User Temp%\_MEI{Random numbers}\tcl\tzdata\Kwajalein
- %User Temp%\_MEI{Random numbers}\tcl\tzdata\Libya
- %User Temp%\_MEI{Random numbers}\tcl\tzdata\MET
- %User Temp%\_MEI{Random numbers}\tcl\tzdata\MST
- %User Temp%\_MEI{Random numbers}\tcl\tzdata\MST7MDT
- %User Temp%\_MEI{Random numbers}\tcl\tzdata\Mexico\BajaNorte
- %User Temp%\_MEI{Random numbers}\tcl\tzdata\Mexico\BajaSur
- %User Temp%\_MEI{Random numbers}\tcl\tzdata\Mexico\General
- %User Temp%\_MEI{Random numbers}\tcl\tzdata\NZ
- %User Temp%\_MEI{Random numbers}\tcl\tzdata\NZ-CHAT
- %User Temp%\_MEI{Random numbers}\tcl\tzdata\Navajo
- %User Temp%\_MEI{Random numbers}\tcl\tzdata\PRC
- %User Temp%\_MEI{Random numbers}\tcl\tzdata\PST8PDT
- %User Temp%\_MEI{Random numbers}\tcl\tzdata\Pacific\Apia
- %User Temp%\_MEI{Random numbers}\tcl\tzdata\Pacific\Auckland
- %User Temp%\_MEI{Random numbers}\tcl\tzdata\Pacific\Chatham
- %User Temp%\_MEI{Random numbers}\tcl\tzdata\Pacific\Chuuk
- %User Temp%\_MEI{Random numbers}\tcl\tzdata\Pacific\Easter
- %User Temp%\_MEI{Random numbers}\tcl\tzdata\Pacific\Efate
- %User Temp%\_MEI{Random numbers}\tcl\tzdata\Pacific\Enderbury
- %User Temp%\_MEI{Random numbers}\tcl\tzdata\Pacific\Fakaofo
- %User Temp%\_MEI{Random numbers}\tcl\tzdata\Pacific\Fiji
- %User Temp%\_MEI{Random numbers}\tcl\tzdata\Pacific\Funafuti
- %User Temp%\_MEI{Random numbers}\tcl\tzdata\Pacific\Galapagos
- %User Temp%\_MEI{Random numbers}\tcl\tzdata\Pacific\Gambier
- %User Temp%\_MEI{Random numbers}\tcl\tzdata\Pacific\Guadalcanal
- %User Temp%\_MEI{Random numbers}\tcl\tzdata\Pacific\Guam
- %User Temp%\_MEI{Random numbers}\tcl\tzdata\Pacific\Honolulu
- %User Temp%\_MEI{Random numbers}\tcl\tzdata\Pacific\Johnston
- %User Temp%\_MEI{Random numbers}\tcl\tzdata\Pacific\Kiritimati
- %User Temp%\_MEI{Random numbers}\tcl\tzdata\Pacific\Kosrae
- %User Temp%\_MEI{Random numbers}\tcl\tzdata\Pacific\Kwajalein
- %User Temp%\_MEI{Random numbers}\tcl\tzdata\Pacific\Majuro
- %User Temp%\_MEI{Random numbers}\tcl\tzdata\Pacific\Marquesas
- %User Temp%\_MEI{Random numbers}\tcl\tzdata\Pacific\Midway
- %User Temp%\_MEI{Random numbers}\tcl\tzdata\Pacific\Nauru
- %User Temp%\_MEI{Random numbers}\tcl\tzdata\Pacific\Niue
- %User Temp%\_MEI{Random numbers}\tcl\tzdata\Pacific\Norfolk
- %User Temp%\_MEI{Random numbers}\tcl\tzdata\Pacific\Noumea
- %User Temp%\_MEI{Random numbers}\tcl\tzdata\Pacific\Pago_Pago
- %User Temp%\_MEI{Random numbers}\tcl\tzdata\Pacific\Palau
- %User Temp%\_MEI{Random numbers}\tcl\tzdata\Pacific\Pitcairn
- %User Temp%\_MEI{Random numbers}\tcl\tzdata\Pacific\Pohnpei
- %User Temp%\_MEI{Random numbers}\tcl\tzdata\Pacific\Ponape
- %User Temp%\_MEI{Random numbers}\tcl\tzdata\Pacific\Port_Moresby
- %User Temp%\_MEI{Random numbers}\tcl\tzdata\Pacific\Rarotonga
- %User Temp%\_MEI{Random numbers}\tcl\tzdata\Pacific\Saipan
- %User Temp%\_MEI{Random numbers}\tcl\tzdata\Pacific\Samoa
- %User Temp%\_MEI{Random numbers}\tcl\tzdata\Pacific\Tahiti
- %User Temp%\_MEI{Random numbers}\tcl\tzdata\Pacific\Tarawa
- %User Temp%\_MEI{Random numbers}\tcl\tzdata\Pacific\Tongatapu
- %User Temp%\_MEI{Random numbers}\tcl\tzdata\Pacific\Truk
- %User Temp%\_MEI{Random numbers}\tcl\tzdata\Pacific\Wake
- %User Temp%\_MEI{Random numbers}\tcl\tzdata\Pacific\Wallis
- %User Temp%\_MEI{Random numbers}\tcl\tzdata\Pacific\Yap
- %User Temp%\_MEI{Random numbers}\tcl\tzdata\Poland
- %User Temp%\_MEI{Random numbers}\tcl\tzdata\Portugal
- %User Temp%\_MEI{Random numbers}\tcl\tzdata\ROC
- %User Temp%\_MEI{Random numbers}\tcl\tzdata\ROK
- %User Temp%\_MEI{Random numbers}\tcl\word.tcl
- %User Temp%\_MEI{Random numbers}\tk\ttk\aquaTheme.tcl
- %User Temp%\_MEI{Random numbers}\tk\ttk\button.tcl
- %User Temp%\_MEI{Random numbers}\tk\ttk\clamTheme.tcl
- %User Temp%\_MEI{Random numbers}\tk\ttk\classicTheme.tcl
- %User Temp%\_MEI{Random numbers}\tk\ttk\combobox.tcl
- %User Temp%\_MEI{Random numbers}\tk\ttk\cursors.tcl
- %User Temp%\_MEI{Random numbers}\tk\ttk\defaults.tcl
- %User Temp%\_MEI{Random numbers}\tk\ttk\entry.tcl
- %User Temp%\_MEI{Random numbers}\tk\ttk\fonts.tcl
- %User Temp%\_MEI{Random numbers}\tk\ttk\menubutton.tcl
- %User Temp%\_MEI{Random numbers}\tk\ttk\notebook.tcl
- %User Temp%\_MEI{Random numbers}\tk\ttk\panedwindow.tcl
- %User Temp%\_MEI{Random numbers}\tk\ttk\progress.tcl
- %User Temp%\_MEI{Random numbers}\tk\ttk\scale.tcl
- %User Temp%\_MEI{Random numbers}\tk\ttk\scrollbar.tcl
- %User Temp%\_MEI{Random numbers}\tk\ttk\sizegrip.tcl
- %User Temp%\_MEI{Random numbers}\tk\ttk\spinbox.tcl
(註:%User Temp%フォルダは、ユーザの一時フォルダで、Windows 2000、XP および Server 2003 の場合、通常、"C:\Documents and Settings\<ユーザー名>\Local Settings\Temp"、Windows Vista 、 7 、8、8.1 、Server 2008 および Server 2012の場合、"C:\Users\<ユーザ名>\AppData\Local\Temp" です。.)
その他
その他は、以下の拡張子をもつファイルを暗号化します。
- .cfr
- .ytd
- .sngw
- .tst
- .skudef
- .dem
- .sims3pack
- .hbr
- .hkx
- .rgt
- .ggpk
- .ttarch2
- .hogg
- .spv
- .bm2
- .lua
- .dff
- .save
- .rgssad
- .scm
- .aud
- .rxdata
- .mcmeta
- .bin
- .mpqe
- .rez
- .xbe
- .grle
- .bf
- .iwd
- .vpp_pc
- .scb
- .naz
- .m2
- .xpk
- .sabs
- .nfs13save
- .gro
- .emi
- .wad
- .15
- .vfs
- .drs
- .taf
- .m4s
- .player
- .umv
- .sgm
- .ntl
- .esm
- .qvm
- .arch00
- .tir
- .bk
- .sabl
- .bin
- .opk
- .vfs0
- .xp3
- .tobj
- .rcf
- .sga
- .esf
- .rpack
- .DayZProfile
- .qsv
- .gam
- .bndl
- .u2car
- .psk
- .gob
- .lrf
- .lts
- .iqm
- .i3d
- .acm
- .SC2Replay
- .xfbin
- .db0
- .fsh
- .dsb
- .cry
- .osr
- .gcv
- .blk
- .4
- .lzc
- .umod
- .w3x
- .mwm
- .crf
- .tad
- .pbn
- .14
- .ppe
- .ydc
- .fmf
- .swe
- .nfs11save
- .tgx
- .trf
- .atlas
- .20
- .game
- .rw
- .rvproj2
- .sc1
- .ed
- .lsd
- .pkz
- .rim
- .bff
- .gct
- .9
- .fpk
- .pk3
- .osf
- .bns
- .cas
- .lfl
- .rbz
- .sex
- .mrm
- .mca
- .hsv
- .vpt
- .pff
- .i3chr
- .tor
- .01
- .utx
- .kf
- .dzip
- .fxcb
- .modpak
- .ydr
- .frd
- .bmd
- .vpp
- .gcm
- .frw
- .baf
- .edf
- .w3g
- .mtf
- .tfc
- .lpr
- .pk2
- .cs2
- .fps
- .osz
- .lnc
- .jpz
- .tinyid
- .ebm
- .i3exec
- .ert
- .sv4
- .cbf
- .oppc
- .enc
- .rmv
- .mta
- .otd
- .pk7
- .gm
- .cdp
- .cmg
- .ubi
- .hpk
- .plr
- .mis
- .ids
- .replay_last_battle
- .z2f
- .map
- .ut4mod
- .dm_1
- .p3d
- .tre
- .package
- .streamed
- .l2r
- .xbf
- .wep
- .evd
- .dxt
- .bba
- .profile
- .vmt
- .rpf
- .ucs
- .lab
- .cow
- .ibf
- .tew
- .bix
- .uhtm
- .txd
- .jam
- .ugd
- .13
- .dc6
- .vdk
- .bar
- .cvm
- .wso
- .xxx
- .zar
- .anm
- .6
- .ant
- .ctp
- .sv5
- .dnf
- .he0
- .mve
- .emz
- .e4mod
- .gxt
- .bag
- .arz
- .tbi
- .itp
- .i3animpack
- .vtf
- .afl
- .ncs
- .gaf
- .ccw
- .tsr
- .bank
- .lec
- .pk4
- .psv
- .los
- .civ5save
- .rlv
- .nh
- .sco
- .ims
- .epc
- .rgm
- .res
- .wld
- .sve
- .db1
- .dazip
- .vcm
- .rvm
- .eur
- .me2headmorph
- .azp
- .ags
- .12
- .slh
- .cha
- .wowsreplay
- .dor
- .ibi
- .bnd
- .zse
- .ddsx
- .mcworld
- .intr
- .vdf
- .mtr
- .addr
- .blp
- .mlx
- .d2i
- .21
- .tlk
- .gm1
- .n2pk
- .ekx
- .tas
- .rav
- .ttg
- .spawn
- .osu
- .oac
- .bod
- .dcz
- .mgx
- .wowpreplay
- .fuk
- .kto
- .fda
- .vob
- .ahc
- .rrs
- .ala
- .mao
- .udk
- .jit
- .25
- .swar
- .nav
- .bot
- .jdf
- .32
- .mul
- .szs
- .gax
- .xmg
- .udm
- .zdk
- .dcc
- .blb
- .wxd
- .isb
- .pt2
- .utc
- .card
- .lug
- .JQ3SaveGame
- .osk
- .nut
- .unity
- .cme
- .elu
- .db7
- .hlk
- .ds1
- .wx
- .bsm
- .w3z
- .itm
- .clz
- .zfs
- .3do
- .pac
- .dbi
- .alo
- .gla
- .yrm
- .fomod
- .ees
- .erp
- .dl
- .bmd
- .pud
- .ibt
- .24
- .wai
- .sww
- .opq
- .gtf
- .bnt
- .ngn
- .tit
- .wf
- .bnk
- .ttz
- .nif
- .ghb
- .la0
- .bun
- .11
- .icd
- .z3
- .djs
- .mog
- .2da
- .imc
- .sgh
- .db9
- .42
- .vis
- .whd
- .pcc
- .43
- .ldw
- .age3yrec
- .pcpack
- .ddt
- .cok
- .xcr
- .bsp
- .yaf
- .swd
- .tfil
- .lsd
- .blorb
- .unr
- .mob
- .fos
- .cem
- .material
- .lfd
- .hmi
- .md4
- .dog
- .256
- .eix
- .oob
- .cpx
- .cdata
- .hak
- .phz
- .stormreplay
- .lrn
- .spidersolitairesave-ms
- .anm
- .til
- .lta
- .sims2pack
- .md2
- .pkx
- .sns
- .pat
- .tdf
- .cm
- .mine
- .rbn
- .uc
- .asg
- .raf
- .myp
- .mys
- .tex
- .cpn
- .flmod
- .model
- .sfar
- .fbrb
- .sav2
- .lmg
- .tbc
- .xpd
- .bundledmesh
- .bmg
- .18
- .gsc
- .shader_bundle
- .drl
- .world
- .rwd
- .rwv
- .rda
- .3g2
- .3gp
- .asf
- .asx
- .avi
- .flv
- .ai
- .m2ts
- .mkv
- .mov
- .mp4
- .mpg
- .mpeg
- .mpeg4
- .rm
- .swf
- .vob
- .wmv
- .doc
- .docx
- .rar
- .jpg
- .jpeg
- .png
- .tiff
- .zip
- .7z
- .dif.z
- .exe
- .tar.gz
- .tar
- .mp3
- .sh
- .c
- .cpp
- .h
- .mov
- .gif
- .txt
- .py
- .pyc
- .jar
- .csv
- .psd
- .wav
- .ogg
- .wma
- .aif
- .mpa
- .wpl
- .arj
- .deb
- .pkg
- .db
- .dbf
- .sav
- .xml
- .html
- .aiml
- .apk
- .bat
- .bin
- .cgi
- .pl
- .com
- .wsf
- .bmp
- .bmp
- .gif
- .tif
- .tiff
- .htm
- .js
- .jsp
- .php
- .xhtml
- .cfm
- .rss
- .key
- .odp
- .pps
- .ppt
- .pptx
- .class
- .cd
- .java
- .swift
- .vb
- .ods
- .xlr
- .xls
- .xlsx
- .dot
- .docm
- .dotx
- .dotm
- .wpd
- .wps
- .rtf
- .sdw
- .sgl
- .vor
- .uot
- .uof
- .jtd
- .jtt
- .hwp
- .602
- .pdb
- .psw
- .xlw
- .xlt
- .xlsm
- .xltx
- .xltm
- .xlsb
- .wk1
- .wks
- .123
- .sdc
- .slk
- .pxl
- .wb2
- .pot
- .pptm
- .potx
- .potm
- .sda
- .sdd
- .sdp
- .cgm
- .wotreplay
- .rofl
- .pak
- .big
- .bik
- .xtbl
- .unity3d
- .capx
- .ttarch
- .iwi
- .rgss3a
- .gblorb
- .xwm
- .j2e
- .mpk
- .xex
- .tiger
- .lbf
- .cab
- .rx3
- .epk
- .vol
- .asset
- .forge
- .lng
- .sii
- .litemod
- .vef
- .dat
- .papa
- .psark
- .ydk
- .mpq
- .wtf
- .bsa
- .re4
- .dds
- .ff
- .yrp
- .pck
- .t3
- .ltx
- .uasset
- .bikey
- .patch
- .upk
- .uax
- .mdl
- .lvl
- .qst
- .ddv
- .pta
その他は、以下のファイル名を使用し、暗号化されたファイルを改称します。
- {Original filename and extension}.kirked
対応方法
手順 1
Windows XP、Windows Vista および Windows 7 のユーザは、コンピュータからマルウェアもしくはアドウェア等を完全に削除するために、ウイルス検索の実行前には必ず「システムの復元」を無効にしてください。
手順 2
このマルウェアもしくはアドウェア等の実行により、手順中に記載されたすべてのファイル、フォルダおよびレジストリキーや値がコンピュータにインストールされるとは限りません。インストールが不完全である場合の他、オペレーティングシステム(OS)の条件によりインストールがされない場合が考えられます。手順中に記載されたファイル/フォルダ/レジストリ情報が確認されない場合、該当の手順の操作は不要ですので、次の手順に進んでください。
手順 3
Windowsをセーフモードで再起動します。
手順 4
以下のフォルダを検索し削除します。
- %User Temp%\_MEI{Random numbers}
手順 5
以下のファイルを検索し削除します。
- {malware path}\pwd
- {malware path}\RANSOM_NOTE.txt
手順 6
コンピュータを通常モードで再起動し、最新のバージョン(エンジン、パターンファイル)を導入したウイルス対策製品を用い、「RANSOM_KIRK.A」と検出したファイルの検索を実行してください。 検出されたファイルが、弊社ウイルス対策製品により既に駆除、隔離またはファイル削除の処理が実行された場合、ウイルスの処理は完了しており、他の削除手順は特にありません。
手順 8
最新のバージョン(エンジン、パターンファイル)を導入したウイルス対策製品を用い、ウイルス検索を実行してください。「RANSOM_KIRK.A」と検出したファイルはすべて削除してください。 検出されたファイルが、弊社ウイルス対策製品により既に駆除、隔離またはファイル削除の処理が実行された場合、ウイルスの処理は完了しており、他の削除手順は特にありません。
ご利用はいかがでしたか? アンケートにご協力ください