Trend Micro Security

Ransom_MAKTUB.F117CM

2017年4月6日

 別名:

Ransom:Win32/Takabum (Microsoft); GenericRXBD-FQ!D22B7DB174F3 (McAfee); Trojan.Gen.2 (Symantec); Trojan-Downloader.Win32.Cabby.zipxo (Kaspersky); Troj/Agent-AVUH (Sophos); Trojan.Win32.Generic!BT (Sunbelt); Trojan horse FileCryptor.OIY (AVG)

 プラットフォーム:

Windows

 危険度:
 ダメージ度:
 感染力:
 感染確認数:


  • マルウェアタイプ: トロイの木馬型
  • 破壊活動の有無: なし
  • 暗号化:  
  • 感染報告の有無: はい

  概要


マルウェアは、他のマルウェアに作成されるか、悪意あるWebサイトからユーザが誤ってダウンロードすることによりコンピュータに侵入します。


  詳細

ファイルサイズ 59,904 bytes
タイプ EXE
メモリ常駐 なし
発見日 2017年4月6日

侵入方法

その他は、他のマルウェアに作成されるか、悪意あるWebサイトからユーザが誤ってダウンロードすることによりコンピュータに侵入します。

インストール

その他は、以下のフォルダを作成します。

  • %Application Data%\Povo

(註:%Application Data%フォルダは、Windows 2000、XP および Server 2003 の場合、通常 "C:\Documents and Settings\<ユーザ名>\Local Settings\Application Data"、Windows Vista 、 7 、8、8.1 、Server 2008 および Server 2012の場合、"C:\Users\<ユーザ名>\AppData\Roaming" です。.)

他のシステム変更

その他は、以下のファイルを削除します。

  • %User Profile%\Templates\wordpfct.wpd
  • %User Profile%\Templates\winword2.doc
  • %User Profile%\Templates\winword.doc
  • %User Profile%\Templates\quattro.wb2
  • %User Profile%\Templates\powerpnt.ppt
  • %User Profile%\Templates\excel4.xls
  • %User Profile%\Templates\excel.xls
  • %Temporary Internet Files%\Content.IE5\ZSGKJKO6\widgets[1].js
  • %Temporary Internet Files%\Content.IE5\ZSGKJKO6\table_top3[1].png
  • %Temporary Internet Files%\Content.IE5\ZSGKJKO6\table_left3[1].png
  • %Temporary Internet Files%\Content.IE5\ZSGKJKO6\sck[1].htm
  • %Temporary Internet Files%\Content.IE5\ZSGKJKO6\F7D0CF254A92D3932EDCF252CA5AB4[1].jpg
  • %Temporary Internet Files%\Content.IE5\ZSGKJKO6\en[1].js
  • %Temporary Internet Files%\Content.IE5\ZSGKJKO6\D8F68391953F21ECC405DCBA92D39[1].jpg
  • %Temporary Internet Files%\Content.IE5\ZSGKJKO6\conditionalbanners[1].htm
  • %Temporary Internet Files%\Content.IE5\ZSGKJKO6\BING_websearch_2[1].jpg
  • %Temporary Internet Files%\Content.IE5\ZSGKJKO6\BCEE3611B4F81EDE9240922336F1[1].jpg
  • %Temporary Internet Files%\Content.IE5\ZSGKJKO6\ADSAdClient31[1].htm
  • %Temporary Internet Files%\Content.IE5\ZSGKJKO6\A5EE7088EC167F676F626203E7371[1].png
  • %Temporary Internet Files%\Content.IE5\ZSGKJKO6\9b61bd1a420364db439350bebaac19[1].css
  • %Temporary Internet Files%\Content.IE5\ZSGKJKO6\844DD2D2B4733FAE13849F794A7BD8[1].jpg
  • %Temporary Internet Files%\Content.IE5\ZSGKJKO6\72541472A285479CAB60A1F736581[1].jpg
  • %Temporary Internet Files%\Content.IE5\ZSGKJKO6\300x250_45914_4crocsl[1].jpg
  • %Temporary Internet Files%\Content.IE5\ZDGZNKA5\top_right3[1].png
  • %Temporary Internet Files%\Content.IE5\ZDGZNKA5\table_right3[1].png
  • %Temporary Internet Files%\Content.IE5\ZDGZNKA5\FD4957C9FB46179035C1C4F6407F10[1].jpg
  • %Temporary Internet Files%\Content.IE5\ZDGZNKA5\dapmsn[1].js
  • %Temporary Internet Files%\Content.IE5\ZDGZNKA5\CDAB2F44A1591D2B308C20C6C15375[1].jpg
  • %Temporary Internet Files%\Content.IE5\ZDGZNKA5\ADSAdClient31[2].htm
  • %Temporary Internet Files%\Content.IE5\ZDGZNKA5\ADSAdClient31[1].htm
  • %Temporary Internet Files%\Content.IE5\ZDGZNKA5\9E82BCBB661C2665F77225A5DCC867[1].jpg
  • %Temporary Internet Files%\Content.IE5\ZDGZNKA5\1db850e671ac9a39751a1482909ea6[1].jpg
  • %Temporary Internet Files%\Content.IE5\ZDGZNKA5\147[1].jpg
  • %Temporary Internet Files%\Content.IE5\BVLBNMKH\table_bottom3[1].png
  • %Temporary Internet Files%\Content.IE5\BVLBNMKH\sck[1].htm
  • %Temporary Internet Files%\Content.IE5\BVLBNMKH\jquery-1.4.2.min[1].js
  • %Temporary Internet Files%\Content.IE5\BVLBNMKH\ecbrolfa1ff2b64fe659f792daafb90b16a4[1].js
  • %Temporary Internet Files%\Content.IE5\BVLBNMKH\BA0EAC3FA44E01BE67D7651C9E60[1].jpg
  • %Temporary Internet Files%\Content.IE5\BVLBNMKH\anatm[1].js
  • %Temporary Internet Files%\Content.IE5\BVLBNMKH\ADSAdClient31[1].htm
  • %Temporary Internet Files%\Content.IE5\BVLBNMKH\9FFCFB0D17D6A8FD7C27416ED0DB[1].jpg
  • %Temporary Internet Files%\Content.IE5\BVLBNMKH\923334461022280076d968be269386[1].png
  • %Temporary Internet Files%\Content.IE5\BVLBNMKH\15A727F1384E33C33F18A135D9710[1].jpg
  • %Temporary Internet Files%\Content.IE5\09RWHJQN\top_left3[1].png
  • %Temporary Internet Files%\Content.IE5\09RWHJQN\msn[1].htm
  • %Temporary Internet Files%\Content.IE5\09RWHJQN\gw[1].js
  • %Temporary Internet Files%\Content.IE5\09RWHJQN\d3a1be3129df1dc11a599ea57981b2[2].js
  • %Temporary Internet Files%\Content.IE5\09RWHJQN\D2543C851E4AE4B1DB2DE3B1562DB[1].jpg
  • %Temporary Internet Files%\Content.IE5\09RWHJQN\bottom_right3[1].png
  • %Temporary Internet Files%\Content.IE5\09RWHJQN\bottom_left3[1].png
  • %Temporary Internet Files%\Content.IE5\09RWHJQN\BA1FA617D2822CCF20CF2239452095[1].jpg
  • %Temporary Internet Files%\Content.IE5\09RWHJQN\all[1].js
  • %Temporary Internet Files%\Content.IE5\09RWHJQN\ADSAdClient31[2].htm
  • %Temporary Internet Files%\Content.IE5\09RWHJQN\ADSAdClient31[1].htm
  • %Temporary Internet Files%\Content.IE5\09RWHJQN\836390dd7004a00c9b21db33678d84[1].png
  • %Temporary Internet Files%\Content.IE5\09RWHJQN\8213D9F75AD098D48F237D6CCC29F8[1].jpg
  • %Temporary Internet Files%\Content.IE5\09RWHJQN\5c5d9b9cb6c19bcac7f82d676b488b[1].css
  • %Temporary Internet Files%\Content.IE5\09RWHJQN\1d56986ff895d82941fb9faf08c76f[1].css
  • %User Profile%\Cookies\wilbert@www.msn[1].txt
  • %User Profile%\Cookies\wilbert@www.bing[2].txt
  • %User Profile%\Cookies\wilbert@scorecardresearch[2].txt
  • %User Profile%\Cookies\wilbert@msn[2].txt
  • %User Profile%\Cookies\wilbert@msnportal.112.2o7[1].txt
  • %User Profile%\Cookies\wilbert@microsoft[1].txt
  • %User Profile%\Cookies\wilbert@doubleclick[1].txt
  • %User Profile%\Cookies\wilbert@c.msn[2].txt
  • %User Profile%\Cookies\wilbert@c.atdmt[2].txt
  • %User Profile%\Cookies\wilbert@bing[2].txt
  • %User Profile%\Cookies\wilbert@atdmt[2].txt
  • %User Profile%\Sample Pictures\Winter.jpg
  • %User Profile%\Sample Pictures\Water lilies.jpg
  • %User Profile%\Sample Pictures\Sunset.jpg
  • %User Profile%\Sample Pictures\Blue hills.jpg
  • %User Profile%\Sample Music\New Stories (Highway Blues).wma
  • %User Profile%\Sample Music\Beethoven's Symphony No. 9 (Scherzo).wma
  • %User Profile%\Templates\wordpfct.wpg
  • %User Profile%\Templates\presenta.shw
  • %User Profile%\Templates\lotus.wk4
  • %User Profile%\Templates\amipro.sam
  • %Temporary Internet Files%\Content.IE5\ZSGKJKO6\qsonhs[1].aspx
  • %Temporary Internet Files%\Content.IE5\ZDGZNKA5\msnhomepagehistory[1].aspx
  • %Temporary Internet Files%\Content.IE5\ZDGZNKA5\GRedirect[2].aspx
  • %Favorites%\Radio Station Guide.url
  • %Favorites%\MSN.com.url
  • %Favorites%\Links\Windows.url
  • %Favorites%\Links\Windows Media.url
  • %Favorites%\Links\Windows Marketplace.url
  • %Favorites%\Links\Free Hotmail.url
  • %Favorites%\Links\Customize Links.url
  • %Application Data%\IconCache.db
  • %Start Menu%\Programs\WinPcap\WinPcap Web Site.url
  • %User Profile%\DRM\drmv2.lic
  • %User Profile%\DRM\drmv2.sst
  • %User Profile%\Security\directories.acrodata
  • %User Profile%\0008044E\Plylst8.wpl
  • %User Profile%\0008044E\Plylst9.wpl
  • %User Profile%\0008044E\Plylst6.wpl
  • %User Profile%\0008044E\Plylst7.wpl
  • %User Profile%\0008044E\Plylst5.wpl
  • %User Profile%\0008044E\Plylst4.wpl
  • %User Profile%\0008044E\Plylst3.wpl
  • %User Profile%\0008044E\Plylst2.wpl
  • %User Profile%\0008044E\Plylst15.wpl
  • %User Profile%\0008044E\Plylst14.wpl
  • %User Profile%\0008044E\Plylst13.wpl
  • %User Profile%\0008044E\Plylst12.wpl
  • %User Profile%\0008044E\Plylst11.wpl
  • %User Profile%\0008044E\Plylst10.wpl
  • %User Profile%\0008044E\Plylst1.wpl

その他は、以下のレジストリキーを追加します。

HKEY_CURRENT_USER\Software\Microsoft\
Windows\CurrentVersion\Applets\
Wordpad

HKEY_CURRENT_USER\Software\Microsoft\
Windows\CurrentVersion\Applets\
Wordpad\Options

HKEY_CURRENT_USER\Software\Microsoft\
Windows\CurrentVersion\Applets\
Wordpad\Text

HKEY_CURRENT_USER\Software\Microsoft\
Windows\CurrentVersion\Applets\
Wordpad\RTF

HKEY_CURRENT_USER\Software\Microsoft\
Windows\CurrentVersion\Applets\
Wordpad\Word6

HKEY_CURRENT_USER\Software\Microsoft\
Windows\CurrentVersion\Applets\
Wordpad\Write

HKEY_CURRENT_USER\Software\Microsoft\
Windows\CurrentVersion\Applets\
Wordpad\IP

HKEY_CURRENT_USER\Software\Microsoft\
Windows\CurrentVersion\Applets\
Wordpad\Recent File List

HKEY_CURRENT_USER\Software\Microsoft\
Windows\CurrentVersion\Applets\
Wordpad\Settings

作成活動

その他は、以下のファイルを作成します。

  • %User Temp%\3DC0B566E8C7F293F5A87B4D31BEFA946795.rtf
  • %User Temp%\0.dat
  • %User Temp%\1.dat
  • %User Temp%\2.dat
  • %User Temp%\3.dat
  • %User Temp%\4.dat
  • %User Temp%\5.dat
  • %User Temp%\6.dat
  • %User Temp%\7.dat
  • %User Temp%\8.dat
  • %User Temp%\9.dat
  • %User Temp%\10.dat
  • %User Temp%\11.dat
  • %User Temp%\12.dat
  • %User Temp%\13.dat
  • %User Temp%\14.dat
  • %User Temp%\15.dat
  • %User Temp%\16.dat
  • %User Temp%\17.dat
  • %User Temp%\18.dat
  • %User Temp%\19.dat
  • %User Temp%\20.dat
  • %User Temp%\21.dat
  • %User Temp%\22.dat
  • %User Temp%\23.dat
  • %User Temp%\24.dat
  • %User Temp%\25.dat
  • %User Temp%\26.dat
  • %User Temp%\27.dat
  • %User Temp%\28.dat
  • %User Temp%\29.dat
  • %User Temp%\30.dat
  • %User Temp%\31.dat
  • %User Temp%\32.dat
  • %User Temp%\33.dat
  • %User Temp%\34.dat
  • %User Temp%\35.dat
  • %User Temp%\36.dat
  • %User Temp%\37.dat
  • %User Temp%\38.dat
  • %User Temp%\39.dat
  • %User Temp%\40.dat
  • %User Temp%\41.dat
  • %User Temp%\42.dat
  • %User Temp%\43.dat
  • %User Temp%\44.dat
  • %User Temp%\45.dat
  • %User Temp%\46.dat
  • %User Temp%\47.dat
  • %User Temp%\48.dat
  • %User Temp%\49.dat
  • %User Temp%\50.dat
  • %User Temp%\51.dat
  • %User Temp%\52.dat
  • %User Temp%\53.dat
  • %User Temp%\54.dat
  • %User Temp%\55.dat
  • %User Temp%\56.dat
  • %User Temp%\57.dat
  • %User Temp%\58.dat
  • %User Temp%\59.dat
  • %User Temp%\60.dat
  • %User Temp%\61.dat
  • %User Temp%\62.dat
  • %User Temp%\63.dat
  • %User Temp%\64.dat
  • %User Temp%\65.dat
  • %User Temp%\66.dat
  • %User Temp%\67.dat
  • %User Temp%\68.dat
  • %User Temp%\69.dat
  • %User Temp%\70.dat
  • %User Temp%\71.dat
  • %User Temp%\72.dat
  • %User Temp%\73.dat
  • %User Temp%\74.dat
  • %User Temp%\75.dat
  • %User Temp%\76.dat
  • %User Temp%\77.dat
  • %User Temp%\78.dat
  • %User Temp%\79.dat
  • %User Temp%\80.dat
  • %User Temp%\81.dat
  • %User Temp%\82.dat
  • %User Temp%\83.dat
  • %User Temp%\84.dat
  • %User Temp%\85.dat
  • %User Temp%\86.dat
  • %User Temp%\87.dat
  • %User Temp%\88.dat
  • %User Temp%\89.dat
  • %User Temp%\90.dat
  • %User Temp%\91.dat
  • %User Temp%\92.dat
  • %User Temp%\93.dat
  • %User Temp%\94.dat
  • %User Temp%\95.dat
  • %User Temp%\96.dat
  • %User Temp%\97.dat
  • %User Temp%\98.dat
  • %User Temp%\99.dat
  • %User Temp%\100.dat
  • %User Temp%\101.dat
  • %User Temp%\102.dat
  • %User Temp%\103.dat
  • %User Temp%\104.dat
  • %User Temp%\105.dat
  • %User Temp%\106.dat
  • %User Temp%\107.dat
  • %User Temp%\108.dat
  • %User Temp%\109.dat
  • %User Temp%\110.dat
  • %User Temp%\111.dat
  • %User Temp%\112.dat
  • %User Temp%\113.dat
  • %User Temp%\114.dat
  • %User Temp%\115.dat
  • %User Temp%\116.dat
  • %User Temp%\117.dat
  • %User Temp%\118.dat
  • %User Temp%\119.dat
  • %User Temp%\120.dat
  • %User Temp%\121.dat
  • %User Temp%\122.dat
  • %User Temp%\123.dat
  • %User Temp%\124.dat
  • %User Temp%\125.dat
  • %User Temp%\126.dat
  • %User Temp%\127.dat
  • %User Temp%\128.dat
  • %User Temp%\129.dat
  • %User Temp%\130.dat
  • %User Temp%\131.dat
  • %User Temp%\132.dat
  • %User Temp%\133.dat
  • %User Temp%\134.dat
  • %User Temp%\135.dat
  • %User Temp%\136.dat
  • %User Temp%\137.dat
  • %User Temp%\138.dat
  • %User Temp%\139.dat
  • %User Temp%\140.dat
  • %User Temp%\141.dat
  • %User Temp%\142.dat
  • %User Temp%\143.dat
  • %User Temp%\144.dat
  • %User Temp%\145.dat
  • %User Temp%\146.dat
  • %User Temp%\147.dat
  • %User Temp%\148.dat
  • %User Temp%\149.dat
  • %User Temp%\150.dat
  • %User Temp%\151.dat
  • %User Temp%\152.dat
  • %User Temp%\153.dat
  • %User Temp%\154.dat
  • %User Temp%\155.dat
  • %User Temp%\156.dat
  • %User Temp%\157.dat
  • %User Temp%\158.dat
  • %User Temp%\159.dat
  • %User Temp%\160.dat
  • %User Temp%\161.dat
  • %User Temp%\162.dat
  • %User Temp%\163.dat
  • %User Temp%\164.dat
  • %User Temp%\165.dat
  • %User Temp%\166.dat
  • %User Temp%\167.dat
  • %User Temp%\168.dat
  • %User Temp%\169.dat
  • %User Temp%\170.dat
  • %User Temp%\171.dat
  • %User Temp%\172.dat
  • %User Temp%\173.dat
  • %User Temp%\174.dat
  • %User Temp%\175.dat
  • %User Temp%\176.dat
  • %User Temp%\177.dat
  • %User Temp%\178.dat
  • %User Temp%\179.dat
  • %User Temp%\180.dat
  • %User Temp%\181.dat
  • %User Temp%\182.dat
  • %User Temp%\183.dat
  • %User Temp%\184.dat
  • %User Temp%\185.dat
  • %User Temp%\186.dat
  • %User Temp%\187.dat
  • %User Temp%\188.dat
  • %User Temp%\189.dat
  • %User Temp%\190.dat
  • %User Temp%\191.dat
  • %User Temp%\192.dat
  • %User Temp%\193.dat
  • %User Temp%\194.dat
  • %User Temp%\195.dat
  • %User Temp%\196.dat
  • %User Temp%\197.dat
  • %User Temp%\198.dat
  • %User Temp%\199.dat
  • %User Temp%\200.dat
  • %User Temp%\201.dat
  • %User Temp%\202.dat
  • %User Temp%\203.dat
  • %User Temp%\204.dat
  • %User Temp%\205.dat
  • %User Temp%\206.dat
  • %User Temp%\207.dat
  • %User Temp%\208.dat
  • %User Temp%\209.dat
  • %User Temp%\210.dat
  • %User Temp%\211.dat
  • %User Temp%\212.dat
  • %User Temp%\213.dat
  • %User Temp%\214.dat
  • %User Temp%\215.dat
  • %User Temp%\216.dat
  • %User Temp%\217.dat
  • %User Temp%\218.dat
  • %User Temp%\219.dat
  • %User Temp%\220.dat
  • %User Temp%\221.dat
  • %User Temp%\222.dat
  • %User Temp%\223.dat
  • %User Temp%\224.dat
  • %User Temp%\225.dat
  • %User Temp%\226.dat
  • %User Temp%\227.dat
  • %User Temp%\228.dat
  • %User Temp%\229.dat
  • %User Temp%\230.dat
  • %User Temp%\231.dat
  • %User Temp%\232.dat
  • %User Temp%\233.dat
  • %User Temp%\234.dat
  • %User Temp%\235.dat
  • %User Temp%\236.dat
  • %User Temp%\237.dat
  • %User Temp%\238.dat
  • %User Temp%\239.dat
  • %User Temp%\240.dat
  • %User Temp%\241.dat
  • %User Temp%\242.dat
  • %User Temp%\243.dat
  • %User Temp%\244.dat
  • %User Temp%\245.dat
  • %User Temp%\246.dat
  • %User Temp%\247.dat
  • %User Temp%\248.dat
  • %User Temp%\249.dat
  • %User Temp%\250.dat
  • %User Temp%\251.dat
  • %User Temp%\252.dat
  • %User Temp%\253.dat
  • %User Temp%\254.dat
  • %User Temp%\255.dat
  • %User Temp%\256.dat
  • %User Temp%\257.dat
  • %User Temp%\258.dat
  • %User Temp%\259.dat
  • %User Temp%\260.dat
  • %User Temp%\261.dat
  • %User Temp%\262.dat
  • %User Temp%\263.dat
  • %User Temp%\264.dat
  • %User Temp%\265.dat
  • %User Temp%\266.dat
  • %User Temp%\267.dat
  • %User Temp%\268.dat
  • %User Temp%\269.dat
  • %User Temp%\270.dat
  • %User Temp%\271.dat
  • %User Temp%\272.dat
  • %User Temp%\273.dat
  • %User Temp%\274.dat
  • %User Temp%\275.dat
  • %User Temp%\276.dat
  • %User Temp%\277.dat
  • %User Temp%\278.dat
  • %User Temp%\279.dat
  • %User Temp%\280.dat
  • %User Temp%\281.dat
  • %User Temp%\282.dat
  • %User Temp%\283.dat
  • %User Temp%\284.dat
  • %User Temp%\285.dat
  • %User Temp%\286.dat
  • %User Temp%\287.dat
  • %User Temp%\288.dat
  • %User Temp%\289.dat
  • %User Temp%\290.dat
  • %User Temp%\291.dat
  • %User Temp%\292.dat
  • %User Temp%\293.dat
  • %User Temp%\294.dat
  • %User Temp%\295.dat
  • %User Temp%\296.dat
  • %User Temp%\297.dat
  • %User Temp%\298.dat
  • %User Temp%\299.dat
  • %User Temp%\300.dat
  • %User Temp%\301.dat
  • %User Temp%\302.dat
  • %User Temp%\303.dat
  • %User Temp%\304.dat
  • %User Temp%\305.dat
  • %User Temp%\306.dat
  • %User Temp%\307.dat
  • %User Temp%\308.dat
  • %User Temp%\309.dat
  • %User Temp%\310.dat
  • %User Temp%\311.dat
  • %User Temp%\312.dat
  • %User Temp%\313.dat
  • %User Temp%\314.dat
  • %User Temp%\315.dat
  • %User Temp%\316.dat
  • %User Temp%\317.dat
  • %User Temp%\318.dat
  • %User Temp%\319.dat
  • %User Temp%\320.dat
  • %User Temp%\321.dat
  • %User Temp%\322.dat
  • %User Temp%\323.dat
  • %User Temp%\324.dat
  • %User Temp%\325.dat
  • %User Temp%\326.dat
  • %User Temp%\327.dat
  • %User Temp%\328.dat
  • %User Temp%\329.dat
  • %User Temp%\330.dat
  • %User Temp%\331.dat
  • %User Temp%\332.dat
  • %User Temp%\333.dat
  • %User Temp%\334.dat
  • %User Temp%\335.dat
  • %User Temp%\336.dat
  • %User Temp%\337.dat
  • %User Temp%\338.dat
  • %User Temp%\339.dat
  • %User Temp%\340.dat
  • %User Temp%\341.dat
  • %User Temp%\342.dat
  • %User Temp%\343.dat
  • %User Temp%\344.dat
  • %User Temp%\345.dat
  • %User Temp%\346.dat
  • %User Temp%\347.dat
  • %User Temp%\348.dat
  • %User Temp%\349.dat
  • %User Temp%\350.dat
  • %User Temp%\351.dat
  • %User Temp%\352.dat
  • %User Temp%\353.dat
  • %User Temp%\354.dat
  • %User Temp%\355.dat
  • %User Temp%\356.dat
  • %User Temp%\357.dat
  • %User Temp%\358.dat
  • %User Temp%\359.dat
  • %User Temp%\360.dat
  • %User Temp%\361.dat
  • %User Temp%\362.dat
  • %User Temp%\363.dat
  • %User Temp%\364.dat
  • %User Temp%\365.dat
  • %User Temp%\366.dat
  • %User Temp%\367.dat
  • %User Temp%\368.dat
  • %User Temp%\369.dat
  • %User Temp%\370.dat
  • %User Temp%\371.dat
  • %User Temp%\372.dat
  • %User Temp%\373.dat
  • %User Temp%\374.dat
  • %User Temp%\375.dat
  • %User Temp%\376.dat
  • %User Temp%\377.dat
  • %User Temp%\378.dat
  • %User Temp%\379.dat
  • %User Temp%\380.dat
  • %User Temp%\381.dat
  • %User Temp%\382.dat
  • %User Temp%\383.dat
  • %User Temp%\384.dat
  • %User Temp%\385.dat
  • %User Temp%\386.dat
  • %User Temp%\387.dat
  • %User Temp%\388.dat
  • %User Temp%\389.dat
  • %User Temp%\390.dat
  • %User Temp%\391.dat
  • %User Temp%\392.dat
  • %User Temp%\393.dat
  • %User Temp%\394.dat
  • %User Temp%\395.dat
  • %User Temp%\396.dat
  • %User Temp%\397.dat
  • %User Temp%\398.dat
  • %User Temp%\399.dat
  • %User Temp%\400.dat
  • %User Temp%\401.dat
  • %User Temp%\402.dat
  • %User Temp%\403.dat
  • %User Temp%\404.dat
  • %User Temp%\405.dat
  • %User Temp%\406.dat
  • %User Temp%\407.dat
  • %User Temp%\408.dat
  • %User Temp%\409.dat
  • %User Temp%\410.dat
  • %User Temp%\411.dat
  • %User Temp%\412.dat
  • %User Temp%\413.dat
  • %User Temp%\414.dat
  • %User Temp%\415.dat
  • %User Temp%\416.dat
  • %User Temp%\417.dat
  • %User Temp%\418.dat
  • %User Temp%\419.dat
  • %User Temp%\420.dat
  • %User Temp%\421.dat
  • %User Temp%\422.dat
  • %User Temp%\423.dat
  • %User Temp%\424.dat
  • %User Temp%\425.dat
  • %User Temp%\426.dat
  • %User Temp%\427.dat
  • %User Temp%\428.dat
  • %User Temp%\429.dat
  • %User Temp%\430.dat
  • %User Temp%\431.dat
  • %User Temp%\432.dat
  • %User Temp%\433.dat
  • %User Temp%\434.dat
  • %User Temp%\435.dat
  • %User Temp%\436.dat
  • %User Temp%\437.dat
  • %User Temp%\438.dat
  • %User Temp%\439.dat
  • %User Temp%\440.dat
  • %User Temp%\441.dat
  • %User Temp%\442.dat
  • %User Temp%\443.dat
  • %User Temp%\444.dat
  • %User Temp%\445.dat
  • %User Temp%\446.dat
  • %User Temp%\447.dat
  • %User Temp%\448.dat
  • %User Temp%\449.dat
  • %User Temp%\450.dat
  • %User Temp%\451.dat
  • %User Temp%\452.dat
  • %User Temp%\453.dat
  • %User Temp%\454.dat
  • %User Temp%\455.dat
  • %User Temp%\456.dat
  • %User Temp%\457.dat
  • %User Temp%\458.dat
  • %User Temp%\459.dat
  • %User Temp%\460.dat
  • %User Temp%\461.dat
  • %User Temp%\462.dat
  • %User Temp%\463.dat
  • %User Temp%\464.dat
  • %User Temp%\465.dat
  • %User Temp%\466.dat
  • %User Temp%\467.dat
  • %User Temp%\468.dat
  • %User Temp%\469.dat
  • %User Temp%\470.dat
  • %User Temp%\471.dat
  • %User Temp%\472.dat
  • %User Temp%\473.dat
  • %User Temp%\474.dat
  • %User Temp%\475.dat
  • %User Temp%\476.dat
  • %User Temp%\477.dat
  • %User Temp%\478.dat
  • %User Temp%\479.dat
  • %User Temp%\480.dat
  • %User Temp%\481.dat
  • %User Temp%\482.dat
  • %User Temp%\483.dat
  • %User Temp%\484.dat
  • %User Temp%\485.dat
  • %User Temp%\486.dat
  • %User Temp%\487.dat
  • %User Temp%\488.dat
  • %User Temp%\489.dat
  • %User Temp%\490.dat
  • %User Temp%\491.dat
  • %User Temp%\492.dat
  • %User Temp%\493.dat
  • %User Temp%\494.dat
  • %User Temp%\495.dat
  • %User Temp%\496.dat
  • %User Temp%\497.dat
  • %User Temp%\498.dat
  • %User Temp%\499.dat
  • %User Temp%\500.dat
  • %User Temp%\501.dat
  • %User Temp%\502.dat
  • %User Temp%\503.dat
  • %User Temp%\504.dat
  • %User Temp%\505.dat
  • %User Temp%\506.dat
  • %User Temp%\507.dat
  • %User Temp%\508.dat
  • %User Temp%\509.dat
  • %User Temp%\510.dat
  • %User Temp%\511.dat
  • %User Temp%\512.dat
  • %User Temp%\513.dat
  • %User Temp%\514.dat
  • %User Temp%\515.dat
  • %User Temp%\516.dat
  • %User Temp%\517.dat
  • %User Temp%\518.dat
  • %User Temp%\519.dat
  • %User Temp%\520.dat
  • %User Temp%\521.dat
  • %User Temp%\522.dat
  • %User Temp%\523.dat
  • %User Temp%\524.dat
  • %User Temp%\525.dat
  • %User Temp%\526.dat
  • %User Temp%\527.dat
  • %User Temp%\528.dat
  • %User Temp%\529.dat
  • %User Temp%\530.dat
  • %User Temp%\531.dat
  • %User Temp%\532.dat
  • %User Temp%\533.dat
  • %User Temp%\534.dat
  • %User Temp%\535.dat
  • %User Temp%\536.dat
  • %User Temp%\537.dat
  • %User Temp%\538.dat
  • %User Temp%\539.dat
  • %User Temp%\540.dat
  • %User Temp%\541.dat
  • %User Temp%\542.dat
  • %User Temp%\543.dat
  • %User Temp%\544.dat
  • %User Temp%\545.dat
  • %User Temp%\546.dat
  • %User Temp%\547.dat
  • %User Temp%\548.dat
  • %User Temp%\549.dat
  • %User Temp%\550.dat
  • %User Temp%\551.dat
  • %User Temp%\552.dat
  • %User Temp%\553.dat
  • %User Temp%\554.dat
  • %User Temp%\555.dat
  • %User Temp%\556.dat
  • %User Temp%\557.dat
  • %User Temp%\558.dat
  • %User Temp%\559.dat
  • %User Temp%\560.dat
  • %User Temp%\561.dat
  • %User Temp%\562.dat
  • %User Temp%\563.dat
  • %User Temp%\564.dat
  • %User Temp%\565.dat
  • %User Temp%\566.dat
  • %User Temp%\567.dat
  • %User Temp%\568.dat
  • %User Temp%\569.dat
  • %User Temp%\570.dat
  • %User Temp%\571.dat
  • %User Temp%\572.dat
  • %User Temp%\573.dat
  • %User Temp%\574.dat
  • %User Temp%\575.dat
  • %User Temp%\576.dat
  • %User Temp%\577.dat
  • %User Temp%\578.dat
  • %User Temp%\579.dat
  • %User Temp%\580.dat
  • %User Temp%\581.dat
  • %User Temp%\582.dat
  • %User Temp%\583.dat
  • %User Temp%\584.dat
  • %User Temp%\585.dat
  • %User Temp%\586.dat
  • %User Temp%\587.dat
  • %User Temp%\588.dat
  • %User Temp%\589.dat
  • %User Temp%\590.dat
  • %User Temp%\591.dat
  • %User Temp%\592.dat
  • %User Temp%\593.dat
  • %User Temp%\594.dat
  • %User Temp%\595.dat
  • %User Temp%\596.dat
  • %User Temp%\597.dat
  • %User Temp%\598.dat
  • %User Temp%\599.dat
  • %User Temp%\600.dat
  • %User Temp%\601.dat
  • %User Temp%\602.dat
  • %User Temp%\603.dat
  • %User Temp%\604.dat
  • %User Temp%\605.dat
  • %User Temp%\606.dat
  • %User Temp%\607.dat
  • %User Temp%\608.dat
  • %User Temp%\609.dat
  • %User Temp%\610.dat
  • %User Temp%\611.dat
  • %User Temp%\612.dat
  • %User Temp%\613.dat
  • %User Temp%\614.dat
  • %User Temp%\615.dat
  • %User Temp%\616.dat
  • %User Temp%\617.dat
  • %User Temp%\618.dat
  • %User Temp%\619.dat
  • %User Temp%\620.dat
  • %User Temp%\621.dat
  • %User Temp%\622.dat
  • %User Temp%\623.dat
  • %User Temp%\624.dat
  • %User Temp%\625.dat
  • %User Temp%\626.dat
  • %User Temp%\627.dat
  • %User Temp%\628.dat
  • %User Temp%\629.dat
  • %User Temp%\630.dat
  • %User Temp%\631.dat
  • %User Temp%\632.dat
  • %User Temp%\633.dat
  • %User Temp%\634.dat
  • %User Temp%\635.dat
  • %User Temp%\636.dat
  • %User Temp%\637.dat
  • %User Temp%\638.dat
  • %User Temp%\639.dat
  • %User Temp%\640.dat
  • %User Temp%\641.dat
  • %User Temp%\642.dat
  • %User Temp%\643.dat
  • %User Temp%\644.dat
  • %User Temp%\645.dat
  • %User Temp%\646.dat
  • %User Temp%\647.dat
  • %User Temp%\648.dat
  • %User Temp%\649.dat
  • %User Temp%\650.dat
  • %User Temp%\651.dat
  • %User Temp%\652.dat
  • %User Temp%\653.dat
  • %User Temp%\654.dat
  • %User Temp%\655.dat
  • %User Temp%\656.dat
  • %User Temp%\657.dat
  • %User Temp%\658.dat
  • %User Temp%\659.dat
  • %User Temp%\660.dat
  • %User Temp%\661.dat
  • %User Temp%\662.dat
  • %User Temp%\663.dat
  • %User Temp%\664.dat
  • %User Temp%\665.dat
  • %User Temp%\666.dat
  • %User Temp%\667.dat
  • %User Temp%\668.dat
  • %User Temp%\669.dat
  • %User Temp%\670.dat
  • %User Temp%\671.dat
  • %User Temp%\672.dat
  • %User Temp%\673.dat
  • %User Temp%\674.dat
  • %User Temp%\675.dat
  • %User Temp%\676.dat
  • %User Temp%\677.dat
  • %User Temp%\678.dat
  • %User Temp%\679.dat
  • %User Temp%\680.dat
  • %User Temp%\681.dat
  • %User Temp%\682.dat
  • %User Temp%\683.dat
  • %User Temp%\684.dat
  • %User Temp%\685.dat
  • %User Temp%\686.dat
  • %User Temp%\687.dat
  • %User Temp%\688.dat
  • %User Temp%\689.dat
  • %User Temp%\690.dat
  • %User Temp%\691.dat
  • %User Temp%\692.dat
  • %User Temp%\693.dat
  • %User Temp%\694.dat
  • %User Temp%\695.dat
  • %User Temp%\696.dat
  • %User Temp%\697.dat
  • %User Temp%\698.dat
  • %User Temp%\699.dat
  • %User Temp%\700.dat
  • %User Temp%\701.dat
  • %User Temp%\702.dat
  • %User Temp%\703.dat
  • %User Temp%\704.dat
  • %User Temp%\705.dat
  • %User Temp%\706.dat
  • %User Temp%\707.dat
  • %User Temp%\708.dat
  • %User Temp%\709.dat
  • %User Temp%\710.dat
  • %User Temp%\711.dat
  • %User Temp%\712.dat
  • %User Temp%\713.dat
  • %User Temp%\714.dat
  • %User Temp%\715.dat
  • %User Temp%\716.dat
  • %User Temp%\717.dat
  • %User Temp%\718.dat
  • %User Temp%\719.dat
  • %User Temp%\720.dat
  • %User Temp%\721.dat
  • %User Temp%\722.dat
  • %User Temp%\723.dat
  • %User Temp%\724.dat
  • %User Temp%\725.dat
  • %User Temp%\726.dat
  • %User Temp%\727.dat
  • %User Temp%\728.dat
  • %User Temp%\729.dat
  • %User Temp%\730.dat
  • %User Temp%\731.dat
  • %User Temp%\732.dat
  • %User Temp%\733.dat
  • %User Temp%\734.dat
  • %User Temp%\735.dat
  • %User Temp%\736.dat
  • %User Temp%\737.dat
  • %User Temp%\738.dat
  • %User Temp%\739.dat
  • %User Temp%\740.dat
  • %User Temp%\741.dat
  • %User Temp%\742.dat
  • %User Temp%\743.dat
  • %User Temp%\744.dat
  • %User Temp%\745.dat
  • %User Temp%\746.dat
  • %User Temp%\747.dat
  • %User Temp%\748.dat
  • %User Temp%\749.dat
  • %User Temp%\750.dat
  • %User Temp%\751.dat
  • %User Temp%\752.dat
  • %User Temp%\753.dat
  • %User Temp%\754.dat
  • %User Temp%\755.dat
  • %User Temp%\756.dat
  • %User Temp%\757.dat
  • %User Temp%\758.dat
  • %User Temp%\759.dat
  • %User Temp%\760.dat
  • %User Temp%\761.dat
  • %User Temp%\762.dat
  • %User Temp%\763.dat
  • %User Temp%\764.dat
  • %User Temp%\765.dat
  • %User Temp%\766.dat
  • %User Temp%\767.dat
  • %User Temp%\768.dat
  • %User Temp%\769.dat
  • %User Temp%\770.dat
  • %User Temp%\771.dat
  • %User Temp%\772.dat
  • %User Temp%\773.dat
  • %User Temp%\774.dat
  • %User Temp%\775.dat
  • %User Temp%\776.dat
  • %User Temp%\777.dat
  • %User Temp%\778.dat
  • %User Temp%\779.dat
  • %User Temp%\780.dat
  • %User Temp%\781.dat
  • %User Temp%\782.dat
  • %User Temp%\783.dat
  • %User Temp%\784.dat
  • %User Temp%\785.dat
  • %User Temp%\786.dat
  • %User Temp%\787.dat
  • %User Temp%\788.dat
  • %User Temp%\789.dat
  • %User Temp%\790.dat
  • %User Temp%\791.dat
  • %User Temp%\792.dat
  • %User Temp%\793.dat
  • %User Temp%\794.dat
  • %User Temp%\795.dat
  • %User Temp%\796.dat
  • %User Temp%\797.dat
  • %User Temp%\798.dat
  • %User Temp%\799.dat
  • %User Temp%\800.dat
  • %User Temp%\801.dat
  • %User Temp%\802.dat
  • %User Temp%\803.dat
  • %User Temp%\804.dat
  • %User Temp%\805.dat
  • %User Temp%\806.dat
  • %User Temp%\807.dat
  • %User Temp%\808.dat
  • %User Temp%\809.dat
  • %User Temp%\810.dat
  • %User Temp%\811.dat
  • %User Temp%\812.dat
  • %User Temp%\813.dat
  • %User Temp%\814.dat
  • %User Temp%\815.dat
  • %User Temp%\816.dat
  • %User Temp%\817.dat
  • %User Temp%\818.dat
  • %User Temp%\819.dat
  • %User Temp%\820.dat
  • %User Temp%\821.dat
  • %User Temp%\822.dat
  • %User Temp%\823.dat
  • %User Temp%\824.dat
  • %User Temp%\825.dat
  • %User Temp%\826.dat
  • %User Temp%\827.dat
  • %User Temp%\828.dat
  • %User Temp%\829.dat
  • %User Temp%\830.dat
  • %User Temp%\831.dat
  • %User Temp%\832.dat
  • %User Temp%\833.dat
  • %User Temp%\834.dat
  • %User Temp%\835.dat
  • %User Temp%\836.dat
  • %User Temp%\837.dat
  • %User Temp%\838.dat
  • %User Temp%\839.dat
  • %User Temp%\840.dat
  • %User Temp%\841.dat
  • %User Temp%\842.dat
  • %User Temp%\843.dat
  • %User Temp%\844.dat
  • %User Temp%\845.dat
  • %User Temp%\846.dat
  • %User Temp%\847.dat
  • %User Temp%\848.dat
  • %User Temp%\849.dat
  • %User Temp%\850.dat
  • %User Temp%\851.dat
  • %User Temp%\852.dat
  • %User Temp%\853.dat
  • %User Temp%\854.dat
  • %User Temp%\855.dat
  • %User Temp%\856.dat
  • %User Temp%\857.dat
  • %User Temp%\858.dat
  • %User Temp%\859.dat
  • %User Temp%\860.dat
  • %User Temp%\861.dat
  • %User Temp%\862.dat
  • %User Temp%\863.dat
  • %User Temp%\864.dat
  • %User Temp%\865.dat
  • %User Temp%\866.dat
  • %User Temp%\867.dat
  • %User Temp%\868.dat
  • %User Temp%\869.dat
  • %User Temp%\870.dat
  • %User Temp%\871.dat
  • %User Temp%\872.dat
  • %User Temp%\873.dat
  • %User Temp%\874.dat
  • %User Temp%\875.dat
  • %User Temp%\876.dat
  • %User Temp%\877.dat
  • %User Temp%\878.dat
  • %User Temp%\879.dat
  • %User Temp%\880.dat
  • %User Temp%\881.dat
  • %User Temp%\882.dat
  • %User Temp%\883.dat
  • %User Temp%\884.dat
  • %User Temp%\885.dat
  • %User Temp%\886.dat
  • %User Temp%\887.dat
  • %User Temp%\888.dat
  • %User Temp%\889.dat
  • %User Temp%\890.dat
  • %User Temp%\891.dat
  • %User Temp%\892.dat
  • %User Temp%\893.dat
  • %User Temp%\894.dat
  • %User Temp%\895.dat
  • %User Temp%\896.dat
  • %User Temp%\897.dat
  • %User Temp%\898.dat
  • %User Temp%\899.dat
  • %User Temp%\900.dat
  • %User Temp%\901.dat
  • %User Temp%\902.dat
  • %User Temp%\903.dat
  • %User Temp%\904.dat
  • %User Temp%\905.dat
  • %User Temp%\906.dat
  • %User Temp%\907.dat
  • %User Temp%\908.dat
  • %User Temp%\909.dat
  • %User Temp%\910.dat
  • %User Temp%\911.dat
  • %User Temp%\912.dat
  • %User Temp%\913.dat
  • %User Temp%\914.dat
  • %User Temp%\915.dat
  • %User Temp%\916.dat
  • %User Temp%\917.dat
  • %User Temp%\918.dat
  • %User Temp%\919.dat
  • %User Temp%\920.dat
  • %User Temp%\921.dat
  • %User Temp%\922.dat
  • %User Temp%\923.dat
  • %User Temp%\924.dat
  • %User Temp%\925.dat
  • %User Temp%\926.dat
  • %User Temp%\927.dat
  • %User Temp%\928.dat
  • %User Temp%\929.dat
  • %User Temp%\930.dat
  • %User Temp%\931.dat
  • %User Temp%\932.dat
  • %User Temp%\933.dat
  • %User Temp%\934.dat
  • %User Temp%\935.dat
  • %User Temp%\936.dat
  • %User Temp%\937.dat
  • %User Temp%\938.dat
  • %User Temp%\939.dat
  • %User Temp%\940.dat
  • %User Temp%\941.dat
  • %User Temp%\942.dat
  • %User Temp%\943.dat
  • %User Temp%\944.dat
  • %User Temp%\945.dat
  • %User Temp%\946.dat
  • %User Temp%\947.dat
  • %User Temp%\948.dat
  • %User Temp%\949.dat
  • %User Temp%\950.dat
  • %User Temp%\951.dat
  • %User Temp%\952.dat
  • %User Temp%\953.dat
  • %User Temp%\954.dat
  • %User Temp%\955.dat
  • %User Temp%\956.dat
  • %User Temp%\957.dat
  • %User Temp%\958.dat
  • %User Temp%\959.dat
  • %User Temp%\960.dat
  • %User Temp%\961.dat
  • %User Temp%\962.dat
  • %User Temp%\963.dat
  • %User Temp%\964.dat
  • %User Temp%\965.dat
  • %User Temp%\966.dat
  • %User Temp%\967.dat
  • %User Temp%\968.dat
  • %User Temp%\969.dat
  • %User Temp%\970.dat
  • %User Temp%\971.dat
  • %User Temp%\972.dat
  • %User Temp%\973.dat
  • %User Temp%\974.dat
  • %User Temp%\975.dat
  • %User Temp%\976.dat
  • %User Temp%\977.dat
  • %User Temp%\978.dat
  • %User Temp%\979.dat
  • %User Temp%\980.dat
  • %User Temp%\981.dat
  • %User Temp%\982.dat
  • %User Temp%\983.dat
  • %User Temp%\984.dat
  • %User Temp%\985.dat
  • %User Temp%\986.dat
  • %User Temp%\987.dat
  • %User Temp%\988.dat
  • %User Temp%\989.dat
  • %User Temp%\990.dat
  • %User Temp%\991.dat
  • %User Temp%\992.dat
  • %User Temp%\993.dat
  • %User Temp%\994.dat
  • %User Temp%\995.dat
  • %User Temp%\996.dat
  • %User Temp%\997.dat
  • %User Temp%\998.dat
  • %User Temp%\999.dat
  • %User Temp%\1000.dat
  • %User Temp%\1001.dat
  • %User Temp%\1002.dat
  • %User Temp%\1003.dat
  • %User Temp%\1004.dat
  • %User Temp%\1005.dat
  • %User Temp%\1006.dat
  • %User Temp%\1007.dat
  • %User Temp%\1008.dat
  • %User Temp%\1009.dat
  • %User Temp%\1010.dat
  • %User Temp%\1011.dat
  • %User Temp%\1012.dat
  • %User Temp%\1013.dat
  • %User Temp%\1014.dat
  • %User Temp%\1015.dat
  • %User Temp%\1016.dat
  • %User Temp%\1017.dat
  • %User Temp%\1018.dat
  • %User Temp%\1019.dat
  • %User Temp%\1020.dat
  • %User Temp%\1021.dat
  • %User Temp%\1022.dat
  • %User Temp%\1023.dat
  • %User Temp%\1024.dat
  • %User Temp%\1025.dat
  • %User Temp%\1026.dat
  • %User Temp%\1027.dat
  • %User Temp%\1028.dat
  • %User Temp%\1029.dat
  • %User Temp%\1030.dat
  • %User Temp%\1031.dat
  • %User Temp%\1032.dat
  • %User Temp%\1033.dat
  • %User Temp%\1034.dat
  • %User Temp%\1035.dat
  • %User Temp%\1036.dat
  • %User Temp%\1037.dat
  • %User Temp%\1038.dat
  • %User Temp%\1039.dat
  • %User Temp%\1040.dat
  • %User Temp%\1041.dat
  • %User Temp%\1042.dat
  • %User Temp%\1043.dat
  • %User Temp%\1044.dat
  • %User Temp%\1045.dat
  • %User Temp%\1046.dat
  • %Application Data%\Povo\pyxo.dat
  • %User Profile%\Templates\wordpfct.wpd.yuybbwh
  • %User Profile%\Templates\_DECRYPT_INFO_yuybbwh.html
  • %User Profile%\Templates\winword2.doc.yuybbwh
  • %User Profile%\Templates\winword.doc.yuybbwh
  • %User Profile%\Templates\quattro.wb2.yuybbwh
  • %User Profile%\Templates\powerpnt.ppt.yuybbwh
  • %User Profile%\Templates\excel4.xls.yuybbwh
  • %User Profile%\Templates\excel.xls.yuybbwh
  • %Temporary Internet Files%\Content.IE5\ZSGKJKO6\widgets[1].js.yuybbwh
  • %Temporary Internet Files%\Content.IE5\ZSGKJKO6\_DECRYPT_INFO_yuybbwh.html
  • %Temporary Internet Files%\Content.IE5\ZSGKJKO6\table_top3[1].png.yuybbwh
  • %Temporary Internet Files%\Content.IE5\ZSGKJKO6\table_left3[1].png.yuybbwh
  • %Temporary Internet Files%\Content.IE5\ZSGKJKO6\sck[1].htm.yuybbwh
  • %Temporary Internet Files%\Content.IE5\ZSGKJKO6\F7D0CF254A92D3932EDCF252CA5AB4[1].jpg.yuybbwh
  • %Temporary Internet Files%\Content.IE5\ZSGKJKO6\en[1].js.yuybbwh
  • %Temporary Internet Files%\Content.IE5\ZSGKJKO6\D8F68391953F21ECC405DCBA92D39[1].jpg.yuybbwh
  • %Temporary Internet Files%\Content.IE5\ZSGKJKO6\conditionalbanners[1].htm.yuybbwh
  • %Temporary Internet Files%\Content.IE5\ZSGKJKO6\BING_websearch_2[1].jpg.yuybbwh
  • %Temporary Internet Files%\Content.IE5\ZSGKJKO6\BCEE3611B4F81EDE9240922336F1[1].jpg.yuybbwh
  • %Temporary Internet Files%\Content.IE5\ZSGKJKO6\ADSAdClient31[1].htm.yuybbwh
  • %Temporary Internet Files%\Content.IE5\ZSGKJKO6\A5EE7088EC167F676F626203E7371[1].png.yuybbwh
  • %Temporary Internet Files%\Content.IE5\ZSGKJKO6\9b61bd1a420364db439350bebaac19[1].css.yuybbwh
  • %Temporary Internet Files%\Content.IE5\ZSGKJKO6\844DD2D2B4733FAE13849F794A7BD8[1].jpg.yuybbwh
  • %Temporary Internet Files%\Content.IE5\ZSGKJKO6\72541472A285479CAB60A1F736581[1].jpg.yuybbwh
  • %Temporary Internet Files%\Content.IE5\ZSGKJKO6\300x250_45914_4crocsl[1].jpg.yuybbwh
  • %Temporary Internet Files%\Content.IE5\ZDGZNKA5\top_right3[1].png.yuybbwh
  • %Temporary Internet Files%\Content.IE5\ZDGZNKA5\_DECRYPT_INFO_yuybbwh.html
  • %Temporary Internet Files%\Content.IE5\ZDGZNKA5\table_right3[1].png.yuybbwh
  • %Temporary Internet Files%\Content.IE5\ZDGZNKA5\FD4957C9FB46179035C1C4F6407F10[1].jpg.yuybbwh
  • %Temporary Internet Files%\Content.IE5\ZDGZNKA5\dapmsn[1].js.yuybbwh
  • %Temporary Internet Files%\Content.IE5\ZDGZNKA5\CDAB2F44A1591D2B308C20C6C15375[1].jpg.yuybbwh
  • %Temporary Internet Files%\Content.IE5\ZDGZNKA5\ADSAdClient31[2].htm.yuybbwh
  • %Temporary Internet Files%\Content.IE5\ZDGZNKA5\ADSAdClient31[1].htm.yuybbwh
  • %Temporary Internet Files%\Content.IE5\ZDGZNKA5\9E82BCBB661C2665F77225A5DCC867[1].jpg.yuybbwh
  • %Temporary Internet Files%\Content.IE5\ZDGZNKA5\1db850e671ac9a39751a1482909ea6[1].jpg.yuybbwh
  • %Temporary Internet Files%\Content.IE5\ZDGZNKA5\147[1].jpg.yuybbwh
  • %Temporary Internet Files%\Content.IE5\BVLBNMKH\table_bottom3[1].png.yuybbwh
  • %Temporary Internet Files%\Content.IE5\BVLBNMKH\_DECRYPT_INFO_yuybbwh.html
  • %Temporary Internet Files%\Content.IE5\BVLBNMKH\sck[1].htm.yuybbwh
  • %Temporary Internet Files%\Content.IE5\BVLBNMKH\jquery-1.4.2.min[1].js.yuybbwh
  • %Temporary Internet Files%\Content.IE5\BVLBNMKH\ecbrolfa1ff2b64fe659f792daafb90b16a4[1].js.yuybbwh
  • %Temporary Internet Files%\Content.IE5\BVLBNMKH\BA0EAC3FA44E01BE67D7651C9E60[1].jpg.yuybbwh
  • %Temporary Internet Files%\Content.IE5\BVLBNMKH\anatm[1].js.yuybbwh
  • %Temporary Internet Files%\Content.IE5\BVLBNMKH\ADSAdClient31[1].htm.yuybbwh
  • %Temporary Internet Files%\Content.IE5\BVLBNMKH\9FFCFB0D17D6A8FD7C27416ED0DB[1].jpg.yuybbwh
  • %Temporary Internet Files%\Content.IE5\BVLBNMKH\923334461022280076d968be269386[1].png.yuybbwh
  • %Temporary Internet Files%\Content.IE5\BVLBNMKH\15A727F1384E33C33F18A135D9710[1].jpg.yuybbwh
  • %Temporary Internet Files%\Content.IE5\09RWHJQN\top_left3[1].png.yuybbwh
  • %Temporary Internet Files%\Content.IE5\09RWHJQN\_DECRYPT_INFO_yuybbwh.html
  • %Temporary Internet Files%\Content.IE5\09RWHJQN\msn[1].htm.yuybbwh
  • %Temporary Internet Files%\Content.IE5\09RWHJQN\gw[1].js.yuybbwh
  • %Temporary Internet Files%\Content.IE5\09RWHJQN\d3a1be3129df1dc11a599ea57981b2[2].js.yuybbwh
  • %Temporary Internet Files%\Content.IE5\09RWHJQN\D2543C851E4AE4B1DB2DE3B1562DB[1].jpg.yuybbwh
  • %Temporary Internet Files%\Content.IE5\09RWHJQN\bottom_right3[1].png.yuybbwh
  • %Temporary Internet Files%\Content.IE5\09RWHJQN\bottom_left3[1].png.yuybbwh
  • %Temporary Internet Files%\Content.IE5\09RWHJQN\BA1FA617D2822CCF20CF2239452095[1].jpg.yuybbwh
  • %Temporary Internet Files%\Content.IE5\09RWHJQN\all[1].js.yuybbwh
  • %Temporary Internet Files%\Content.IE5\09RWHJQN\ADSAdClient31[2].htm.yuybbwh
  • %Temporary Internet Files%\Content.IE5\09RWHJQN\ADSAdClient31[1].htm.yuybbwh
  • %Temporary Internet Files%\Content.IE5\09RWHJQN\836390dd7004a00c9b21db33678d84[1].png.yuybbwh
  • %Temporary Internet Files%\Content.IE5\09RWHJQN\8213D9F75AD098D48F237D6CCC29F8[1].jpg.yuybbwh
  • %Temporary Internet Files%\Content.IE5\09RWHJQN\5c5d9b9cb6c19bcac7f82d676b488b[1].css.yuybbwh
  • %Temporary Internet Files%\Content.IE5\09RWHJQN\1d56986ff895d82941fb9faf08c76f[1].css.yuybbwh
  • %User Profile%\Cookies\wilbert@www.msn[1].txt.yuybbwh
  • %User Profile%\Cookies\_DECRYPT_INFO_yuybbwh.html
  • %User Profile%\Cookies\wilbert@www.bing[2].txt.yuybbwh
  • %User Profile%\Cookies\wilbert@scorecardresearch[2].txt.yuybbwh
  • %User Profile%\Cookies\wilbert@msn[2].txt.yuybbwh
  • %User Profile%\Cookies\wilbert@msnportal.112.2o7[1].txt.yuybbwh
  • %User Profile%\Cookies\wilbert@microsoft[1].txt.yuybbwh
  • %User Profile%\Cookies\wilbert@doubleclick[1].txt.yuybbwh
  • %User Profile%\Cookies\wilbert@c.msn[2].txt.yuybbwh
  • %User Profile%\Cookies\wilbert@c.atdmt[2].txt.yuybbwh
  • %User Profile%\Cookies\wilbert@bing[2].txt.yuybbwh
  • %User Profile%\Cookies\wilbert@atdmt[2].txt.yuybbwh
  • %User Profile%\Sample Pictures\Winter.jpg.yuybbwh
  • %User Profile%\Sample Pictures\_DECRYPT_INFO_yuybbwh.html
  • %User Profile%\Sample Pictures\Water lilies.jpg.yuybbwh
  • %User Profile%\Sample Pictures\Sunset.jpg.yuybbwh
  • %User Profile%\Sample Pictures\Blue hills.jpg.yuybbwh
  • %User Profile%\Sample Music\New Stories (Highway Blues).wma.yuybbwh
  • %User Profile%\Sample Music\Beethoven's Symphony No. 9 (Scherzo).wma.yuybbwh
  • %User Profile%\Sample Music\_DECRYPT_INFO_yuybbwh.html
  • %User Temp%\yuybbwh.gif
  • %User Profile%\Templates\wordpfct.wpg.yuybbwh
  • %User Profile%\Templates\presenta.shw.yuybbwh
  • %User Profile%\Templates\lotus.wk4.yuybbwh
  • %User Profile%\Templates\amipro.sam.yuybbwh
  • %Temporary Internet Files%\Content.IE5\ZSGKJKO6\qsonhs[1].aspx.yuybbwh
  • %Temporary Internet Files%\Content.IE5\ZDGZNKA5\GRedirect[2].aspx.yuybbwh
  • %Temporary Internet Files%\Content.IE5\ZDGZNKA5\msnhomepagehistory[1].aspx.yuybbwh
  • %Application Data%\IconCache.db.yuybbwh
  • %Favorites%\Radio Station Guide.url.yuybbwh
  • %Favorites%\_DECRYPT_INFO_yuybbwh.html
  • %Favorites%\MSN.com.url.yuybbwh
  • %Favorites%\Links\Windows.url.yuybbwh
  • %Favorites%\Links\_DECRYPT_INFO_yuybbwh.html
  • %Favorites%\Links\Windows Media.url.yuybbwh
  • %Favorites%\Links\Windows Marketplace.url.yuybbwh
  • %Favorites%\Links\Free Hotmail.url.yuybbwh
  • %Favorites%\Links\Customize Links.url.yuybbwh
  • %Application Data%\_DECRYPT_INFO_yuybbwh.html
  • %Start Menu%\Programs\WinPcap\WinPcap Web Site.url.yuybbwh
  • %Start Menu%\Programs\WinPcap\_DECRYPT_INFO_yuybbwh.html
  • %User Profile%\DRM\drmv2.lic.yuybbwh
  • %User Profile%\DRM\drmv2.sst.yuybbwh
  • %User Profile%\DRM\_DECRYPT_INFO_yuybbwh.html
  • %User Profile%\Security\directories.acrodata.yuybbwh
  • %User Profile%\Security\_DECRYPT_INFO_yuybbwh.html
  • %User Profile%\0008044E\Plylst8.wpl.yuybbwh
  • %User Profile%\0008044E\Plylst9.wpl.yuybbwh
  • %User Profile%\0008044E\_DECRYPT_INFO_yuybbwh.html
  • %User Profile%\0008044E\Plylst6.wpl.yuybbwh
  • %User Profile%\0008044E\Plylst7.wpl.yuybbwh
  • %User Profile%\0008044E\Plylst5.wpl.yuybbwh
  • %User Profile%\0008044E\Plylst4.wpl.yuybbwh
  • %User Profile%\0008044E\Plylst3.wpl.yuybbwh
  • %User Profile%\0008044E\Plylst2.wpl.yuybbwh
  • %User Profile%\0008044E\Plylst15.wpl.yuybbwh
  • %User Profile%\0008044E\Plylst14.wpl.yuybbwh
  • %User Profile%\0008044E\Plylst13.wpl.yuybbwh
  • %User Profile%\0008044E\Plylst12.wpl.yuybbwh
  • %User Profile%\0008044E\Plylst11.wpl.yuybbwh
  • %User Profile%\0008044E\Plylst10.wpl.yuybbwh
  • %User Profile%\0008044E\Plylst1.wpl.yuybbwh

その他

その他は、以下の不正なWebサイトにアクセスします。

  • {BLOCKED}.144.58

このウイルス情報は、自動解析システムにより作成されました。


  対応方法

対応検索エンジン: 9.8

手順 1

Windows XP、Windows Vista および Windows 7 のユーザは、コンピュータからマルウェアもしくはアドウェア等を完全に削除するために、ウイルス検索の実行前には必ず「システムの復元」を無効にしてください。

手順 2

不明なレジストリキーを削除します。

[ 詳細 ]

警告:レジストリはWindowsの構成情報が格納されているデータベースであり、レジストリの編集内容に問題があると、システムが正常に動作しなくなる場合があります。
レジストリの編集はお客様の責任で行っていただくようお願いいたします。弊社ではレジストリの編集による如何なる問題に対しても補償いたしかねます。
レジストリの編集前にこちらをご参照ください。

  • In HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Applets
    • Wordpad
  • In HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Applets\Wordpad
    • Options
  • In HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Applets\Wordpad
    • Text
  • In HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Applets\Wordpad
    • RTF
  • In HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Applets\Wordpad
    • Word6
  • In HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Applets\Wordpad
    • Write
  • In HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Applets\Wordpad
    • IP
  • In HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Applets\Wordpad
    • Recent File List
  • In HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Applets\Wordpad
    • Settings

手順 3

以下のファイルを検索し削除します。

[ 詳細 ]
コンポーネントファイルが隠しファイル属性の場合があります。[詳細設定オプション]をクリックし、[隠しファイルとフォルダの検索]のチェックボックスをオンにし、検索結果に隠しファイルとフォルダが含まれるようにしてください。
  • %User Temp%\3DC0B566E8C7F293F5A87B4D31BEFA946795.rtf
  • %User Temp%\0.dat
  • %User Temp%\1.dat
  • %User Temp%\2.dat
  • %User Temp%\3.dat
  • %User Temp%\4.dat
  • %User Temp%\5.dat
  • %User Temp%\6.dat
  • %User Temp%\7.dat
  • %User Temp%\8.dat
  • %User Temp%\9.dat
  • %User Temp%\10.dat
  • %User Temp%\11.dat
  • %User Temp%\12.dat
  • %User Temp%\13.dat
  • %User Temp%\14.dat
  • %User Temp%\15.dat
  • %User Temp%\16.dat
  • %User Temp%\17.dat
  • %User Temp%\18.dat
  • %User Temp%\19.dat
  • %User Temp%\20.dat
  • %User Temp%\21.dat
  • %User Temp%\22.dat
  • %User Temp%\23.dat
  • %User Temp%\24.dat
  • %User Temp%\25.dat
  • %User Temp%\26.dat
  • %User Temp%\27.dat
  • %User Temp%\28.dat
  • %User Temp%\29.dat
  • %User Temp%\30.dat
  • %User Temp%\31.dat
  • %User Temp%\32.dat
  • %User Temp%\33.dat
  • %User Temp%\34.dat
  • %User Temp%\35.dat
  • %User Temp%\36.dat
  • %User Temp%\37.dat
  • %User Temp%\38.dat
  • %User Temp%\39.dat
  • %User Temp%\40.dat
  • %User Temp%\41.dat
  • %User Temp%\42.dat
  • %User Temp%\43.dat
  • %User Temp%\44.dat
  • %User Temp%\45.dat
  • %User Temp%\46.dat
  • %User Temp%\47.dat
  • %User Temp%\48.dat
  • %User Temp%\49.dat
  • %User Temp%\50.dat
  • %User Temp%\51.dat
  • %User Temp%\52.dat
  • %User Temp%\53.dat
  • %User Temp%\54.dat
  • %User Temp%\55.dat
  • %User Temp%\56.dat
  • %User Temp%\57.dat
  • %User Temp%\58.dat
  • %User Temp%\59.dat
  • %User Temp%\60.dat
  • %User Temp%\61.dat
  • %User Temp%\62.dat
  • %User Temp%\63.dat
  • %User Temp%\64.dat
  • %User Temp%\65.dat
  • %User Temp%\66.dat
  • %User Temp%\67.dat
  • %User Temp%\68.dat
  • %User Temp%\69.dat
  • %User Temp%\70.dat
  • %User Temp%\71.dat
  • %User Temp%\72.dat
  • %User Temp%\73.dat
  • %User Temp%\74.dat
  • %User Temp%\75.dat
  • %User Temp%\76.dat
  • %User Temp%\77.dat
  • %User Temp%\78.dat
  • %User Temp%\79.dat
  • %User Temp%\80.dat
  • %User Temp%\81.dat
  • %User Temp%\82.dat
  • %User Temp%\83.dat
  • %User Temp%\84.dat
  • %User Temp%\85.dat
  • %User Temp%\86.dat
  • %User Temp%\87.dat
  • %User Temp%\88.dat
  • %User Temp%\89.dat
  • %User Temp%\90.dat
  • %User Temp%\91.dat
  • %User Temp%\92.dat
  • %User Temp%\93.dat
  • %User Temp%\94.dat
  • %User Temp%\95.dat
  • %User Temp%\96.dat
  • %User Temp%\97.dat
  • %User Temp%\98.dat
  • %User Temp%\99.dat
  • %User Temp%\100.dat
  • %User Temp%\101.dat
  • %User Temp%\102.dat
  • %User Temp%\103.dat
  • %User Temp%\104.dat
  • %User Temp%\105.dat
  • %User Temp%\106.dat
  • %User Temp%\107.dat
  • %User Temp%\108.dat
  • %User Temp%\109.dat
  • %User Temp%\110.dat
  • %User Temp%\111.dat
  • %User Temp%\112.dat
  • %User Temp%\113.dat
  • %User Temp%\114.dat
  • %User Temp%\115.dat
  • %User Temp%\116.dat
  • %User Temp%\117.dat
  • %User Temp%\118.dat
  • %User Temp%\119.dat
  • %User Temp%\120.dat
  • %User Temp%\121.dat
  • %User Temp%\122.dat
  • %User Temp%\123.dat
  • %User Temp%\124.dat
  • %User Temp%\125.dat
  • %User Temp%\126.dat
  • %User Temp%\127.dat
  • %User Temp%\128.dat
  • %User Temp%\129.dat
  • %User Temp%\130.dat
  • %User Temp%\131.dat
  • %User Temp%\132.dat
  • %User Temp%\133.dat
  • %User Temp%\134.dat
  • %User Temp%\135.dat
  • %User Temp%\136.dat
  • %User Temp%\137.dat
  • %User Temp%\138.dat
  • %User Temp%\139.dat
  • %User Temp%\140.dat
  • %User Temp%\141.dat
  • %User Temp%\142.dat
  • %User Temp%\143.dat
  • %User Temp%\144.dat
  • %User Temp%\145.dat
  • %User Temp%\146.dat
  • %User Temp%\147.dat
  • %User Temp%\148.dat
  • %User Temp%\149.dat
  • %User Temp%\150.dat
  • %User Temp%\151.dat
  • %User Temp%\152.dat
  • %User Temp%\153.dat
  • %User Temp%\154.dat
  • %User Temp%\155.dat
  • %User Temp%\156.dat
  • %User Temp%\157.dat
  • %User Temp%\158.dat
  • %User Temp%\159.dat
  • %User Temp%\160.dat
  • %User Temp%\161.dat
  • %User Temp%\162.dat
  • %User Temp%\163.dat
  • %User Temp%\164.dat
  • %User Temp%\165.dat
  • %User Temp%\166.dat
  • %User Temp%\167.dat
  • %User Temp%\168.dat
  • %User Temp%\169.dat
  • %User Temp%\170.dat
  • %User Temp%\171.dat
  • %User Temp%\172.dat
  • %User Temp%\173.dat
  • %User Temp%\174.dat
  • %User Temp%\175.dat
  • %User Temp%\176.dat
  • %User Temp%\177.dat
  • %User Temp%\178.dat
  • %User Temp%\179.dat
  • %User Temp%\180.dat
  • %User Temp%\181.dat
  • %User Temp%\182.dat
  • %User Temp%\183.dat
  • %User Temp%\184.dat
  • %User Temp%\185.dat
  • %User Temp%\186.dat
  • %User Temp%\187.dat
  • %User Temp%\188.dat
  • %User Temp%\189.dat
  • %User Temp%\190.dat
  • %User Temp%\191.dat
  • %User Temp%\192.dat
  • %User Temp%\193.dat
  • %User Temp%\194.dat
  • %User Temp%\195.dat
  • %User Temp%\196.dat
  • %User Temp%\197.dat
  • %User Temp%\198.dat
  • %User Temp%\199.dat
  • %User Temp%\200.dat
  • %User Temp%\201.dat
  • %User Temp%\202.dat
  • %User Temp%\203.dat
  • %User Temp%\204.dat
  • %User Temp%\205.dat
  • %User Temp%\206.dat
  • %User Temp%\207.dat
  • %User Temp%\208.dat
  • %User Temp%\209.dat
  • %User Temp%\210.dat
  • %User Temp%\211.dat
  • %User Temp%\212.dat
  • %User Temp%\213.dat
  • %User Temp%\214.dat
  • %User Temp%\215.dat
  • %User Temp%\216.dat
  • %User Temp%\217.dat
  • %User Temp%\218.dat
  • %User Temp%\219.dat
  • %User Temp%\220.dat
  • %User Temp%\221.dat
  • %User Temp%\222.dat
  • %User Temp%\223.dat
  • %User Temp%\224.dat
  • %User Temp%\225.dat
  • %User Temp%\226.dat
  • %User Temp%\227.dat
  • %User Temp%\228.dat
  • %User Temp%\229.dat
  • %User Temp%\230.dat
  • %User Temp%\231.dat
  • %User Temp%\232.dat
  • %User Temp%\233.dat
  • %User Temp%\234.dat
  • %User Temp%\235.dat
  • %User Temp%\236.dat
  • %User Temp%\237.dat
  • %User Temp%\238.dat
  • %User Temp%\239.dat
  • %User Temp%\240.dat
  • %User Temp%\241.dat
  • %User Temp%\242.dat
  • %User Temp%\243.dat
  • %User Temp%\244.dat
  • %User Temp%\245.dat
  • %User Temp%\246.dat
  • %User Temp%\247.dat
  • %User Temp%\248.dat
  • %User Temp%\249.dat
  • %User Temp%\250.dat
  • %User Temp%\251.dat
  • %User Temp%\252.dat
  • %User Temp%\253.dat
  • %User Temp%\254.dat
  • %User Temp%\255.dat
  • %User Temp%\256.dat
  • %User Temp%\257.dat
  • %User Temp%\258.dat
  • %User Temp%\259.dat
  • %User Temp%\260.dat
  • %User Temp%\261.dat
  • %User Temp%\262.dat
  • %User Temp%\263.dat
  • %User Temp%\264.dat
  • %User Temp%\265.dat
  • %User Temp%\266.dat
  • %User Temp%\267.dat
  • %User Temp%\268.dat
  • %User Temp%\269.dat
  • %User Temp%\270.dat
  • %User Temp%\271.dat
  • %User Temp%\272.dat
  • %User Temp%\273.dat
  • %User Temp%\274.dat
  • %User Temp%\275.dat
  • %User Temp%\276.dat
  • %User Temp%\277.dat
  • %User Temp%\278.dat
  • %User Temp%\279.dat
  • %User Temp%\280.dat
  • %User Temp%\281.dat
  • %User Temp%\282.dat
  • %User Temp%\283.dat
  • %User Temp%\284.dat
  • %User Temp%\285.dat
  • %User Temp%\286.dat
  • %User Temp%\287.dat
  • %User Temp%\288.dat
  • %User Temp%\289.dat
  • %User Temp%\290.dat
  • %User Temp%\291.dat
  • %User Temp%\292.dat
  • %User Temp%\293.dat
  • %User Temp%\294.dat
  • %User Temp%\295.dat
  • %User Temp%\296.dat
  • %User Temp%\297.dat
  • %User Temp%\298.dat
  • %User Temp%\299.dat
  • %User Temp%\300.dat
  • %User Temp%\301.dat
  • %User Temp%\302.dat
  • %User Temp%\303.dat
  • %User Temp%\304.dat
  • %User Temp%\305.dat
  • %User Temp%\306.dat
  • %User Temp%\307.dat
  • %User Temp%\308.dat
  • %User Temp%\309.dat
  • %User Temp%\310.dat
  • %User Temp%\311.dat
  • %User Temp%\312.dat
  • %User Temp%\313.dat
  • %User Temp%\314.dat
  • %User Temp%\315.dat
  • %User Temp%\316.dat
  • %User Temp%\317.dat
  • %User Temp%\318.dat
  • %User Temp%\319.dat
  • %User Temp%\320.dat
  • %User Temp%\321.dat
  • %User Temp%\322.dat
  • %User Temp%\323.dat
  • %User Temp%\324.dat
  • %User Temp%\325.dat
  • %User Temp%\326.dat
  • %User Temp%\327.dat
  • %User Temp%\328.dat
  • %User Temp%\329.dat
  • %User Temp%\330.dat
  • %User Temp%\331.dat
  • %User Temp%\332.dat
  • %User Temp%\333.dat
  • %User Temp%\334.dat
  • %User Temp%\335.dat
  • %User Temp%\336.dat
  • %User Temp%\337.dat
  • %User Temp%\338.dat
  • %User Temp%\339.dat
  • %User Temp%\340.dat
  • %User Temp%\341.dat
  • %User Temp%\342.dat
  • %User Temp%\343.dat
  • %User Temp%\344.dat
  • %User Temp%\345.dat
  • %User Temp%\346.dat
  • %User Temp%\347.dat
  • %User Temp%\348.dat
  • %User Temp%\349.dat
  • %User Temp%\350.dat
  • %User Temp%\351.dat
  • %User Temp%\352.dat
  • %User Temp%\353.dat
  • %User Temp%\354.dat
  • %User Temp%\355.dat
  • %User Temp%\356.dat
  • %User Temp%\357.dat
  • %User Temp%\358.dat
  • %User Temp%\359.dat
  • %User Temp%\360.dat
  • %User Temp%\361.dat
  • %User Temp%\362.dat
  • %User Temp%\363.dat
  • %User Temp%\364.dat
  • %User Temp%\365.dat
  • %User Temp%\366.dat
  • %User Temp%\367.dat
  • %User Temp%\368.dat
  • %User Temp%\369.dat
  • %User Temp%\370.dat
  • %User Temp%\371.dat
  • %User Temp%\372.dat
  • %User Temp%\373.dat
  • %User Temp%\374.dat
  • %User Temp%\375.dat
  • %User Temp%\376.dat
  • %User Temp%\377.dat
  • %User Temp%\378.dat
  • %User Temp%\379.dat
  • %User Temp%\380.dat
  • %User Temp%\381.dat
  • %User Temp%\382.dat
  • %User Temp%\383.dat
  • %User Temp%\384.dat
  • %User Temp%\385.dat
  • %User Temp%\386.dat
  • %User Temp%\387.dat
  • %User Temp%\388.dat
  • %User Temp%\389.dat
  • %User Temp%\390.dat
  • %User Temp%\391.dat
  • %User Temp%\392.dat
  • %User Temp%\393.dat
  • %User Temp%\394.dat
  • %User Temp%\395.dat
  • %User Temp%\396.dat
  • %User Temp%\397.dat
  • %User Temp%\398.dat
  • %User Temp%\399.dat
  • %User Temp%\400.dat
  • %User Temp%\401.dat
  • %User Temp%\402.dat
  • %User Temp%\403.dat
  • %User Temp%\404.dat
  • %User Temp%\405.dat
  • %User Temp%\406.dat
  • %User Temp%\407.dat
  • %User Temp%\408.dat
  • %User Temp%\409.dat
  • %User Temp%\410.dat
  • %User Temp%\411.dat
  • %User Temp%\412.dat
  • %User Temp%\413.dat
  • %User Temp%\414.dat
  • %User Temp%\415.dat
  • %User Temp%\416.dat
  • %User Temp%\417.dat
  • %User Temp%\418.dat
  • %User Temp%\419.dat
  • %User Temp%\420.dat
  • %User Temp%\421.dat
  • %User Temp%\422.dat
  • %User Temp%\423.dat
  • %User Temp%\424.dat
  • %User Temp%\425.dat
  • %User Temp%\426.dat
  • %User Temp%\427.dat
  • %User Temp%\428.dat
  • %User Temp%\429.dat
  • %User Temp%\430.dat
  • %User Temp%\431.dat
  • %User Temp%\432.dat
  • %User Temp%\433.dat
  • %User Temp%\434.dat
  • %User Temp%\435.dat
  • %User Temp%\436.dat
  • %User Temp%\437.dat
  • %User Temp%\438.dat
  • %User Temp%\439.dat
  • %User Temp%\440.dat
  • %User Temp%\441.dat
  • %User Temp%\442.dat
  • %User Temp%\443.dat
  • %User Temp%\444.dat
  • %User Temp%\445.dat
  • %User Temp%\446.dat
  • %User Temp%\447.dat
  • %User Temp%\448.dat
  • %User Temp%\449.dat
  • %User Temp%\450.dat
  • %User Temp%\451.dat
  • %User Temp%\452.dat
  • %User Temp%\453.dat
  • %User Temp%\454.dat
  • %User Temp%\455.dat
  • %User Temp%\456.dat
  • %User Temp%\457.dat
  • %User Temp%\458.dat
  • %User Temp%\459.dat
  • %User Temp%\460.dat
  • %User Temp%\461.dat
  • %User Temp%\462.dat
  • %User Temp%\463.dat
  • %User Temp%\464.dat
  • %User Temp%\465.dat
  • %User Temp%\466.dat
  • %User Temp%\467.dat
  • %User Temp%\468.dat
  • %User Temp%\469.dat
  • %User Temp%\470.dat
  • %User Temp%\471.dat
  • %User Temp%\472.dat
  • %User Temp%\473.dat
  • %User Temp%\474.dat
  • %User Temp%\475.dat
  • %User Temp%\476.dat
  • %User Temp%\477.dat
  • %User Temp%\478.dat
  • %User Temp%\479.dat
  • %User Temp%\480.dat
  • %User Temp%\481.dat
  • %User Temp%\482.dat
  • %User Temp%\483.dat
  • %User Temp%\484.dat
  • %User Temp%\485.dat
  • %User Temp%\486.dat
  • %User Temp%\487.dat
  • %User Temp%\488.dat
  • %User Temp%\489.dat
  • %User Temp%\490.dat
  • %User Temp%\491.dat
  • %User Temp%\492.dat
  • %User Temp%\493.dat
  • %User Temp%\494.dat
  • %User Temp%\495.dat
  • %User Temp%\496.dat
  • %User Temp%\497.dat
  • %User Temp%\498.dat
  • %User Temp%\499.dat
  • %User Temp%\500.dat
  • %User Temp%\501.dat
  • %User Temp%\502.dat
  • %User Temp%\503.dat
  • %User Temp%\504.dat
  • %User Temp%\505.dat
  • %User Temp%\506.dat
  • %User Temp%\507.dat
  • %User Temp%\508.dat
  • %User Temp%\509.dat
  • %User Temp%\510.dat
  • %User Temp%\511.dat
  • %User Temp%\512.dat
  • %User Temp%\513.dat
  • %User Temp%\514.dat
  • %User Temp%\515.dat
  • %User Temp%\516.dat
  • %User Temp%\517.dat
  • %User Temp%\518.dat
  • %User Temp%\519.dat
  • %User Temp%\520.dat
  • %User Temp%\521.dat
  • %User Temp%\522.dat
  • %User Temp%\523.dat
  • %User Temp%\524.dat
  • %User Temp%\525.dat
  • %User Temp%\526.dat
  • %User Temp%\527.dat
  • %User Temp%\528.dat
  • %User Temp%\529.dat
  • %User Temp%\530.dat
  • %User Temp%\531.dat
  • %User Temp%\532.dat
  • %User Temp%\533.dat
  • %User Temp%\534.dat
  • %User Temp%\535.dat
  • %User Temp%\536.dat
  • %User Temp%\537.dat
  • %User Temp%\538.dat
  • %User Temp%\539.dat
  • %User Temp%\540.dat
  • %User Temp%\541.dat
  • %User Temp%\542.dat
  • %User Temp%\543.dat
  • %User Temp%\544.dat
  • %User Temp%\545.dat
  • %User Temp%\546.dat
  • %User Temp%\547.dat
  • %User Temp%\548.dat
  • %User Temp%\549.dat
  • %User Temp%\550.dat
  • %User Temp%\551.dat
  • %User Temp%\552.dat
  • %User Temp%\553.dat
  • %User Temp%\554.dat
  • %User Temp%\555.dat
  • %User Temp%\556.dat
  • %User Temp%\557.dat
  • %User Temp%\558.dat
  • %User Temp%\559.dat
  • %User Temp%\560.dat
  • %User Temp%\561.dat
  • %User Temp%\562.dat
  • %User Temp%\563.dat
  • %User Temp%\564.dat
  • %User Temp%\565.dat
  • %User Temp%\566.dat
  • %User Temp%\567.dat
  • %User Temp%\568.dat
  • %User Temp%\569.dat
  • %User Temp%\570.dat
  • %User Temp%\571.dat
  • %User Temp%\572.dat
  • %User Temp%\573.dat
  • %User Temp%\574.dat
  • %User Temp%\575.dat
  • %User Temp%\576.dat
  • %User Temp%\577.dat
  • %User Temp%\578.dat
  • %User Temp%\579.dat
  • %User Temp%\580.dat
  • %User Temp%\581.dat
  • %User Temp%\582.dat
  • %User Temp%\583.dat
  • %User Temp%\584.dat
  • %User Temp%\585.dat
  • %User Temp%\586.dat
  • %User Temp%\587.dat
  • %User Temp%\588.dat
  • %User Temp%\589.dat
  • %User Temp%\590.dat
  • %User Temp%\591.dat
  • %User Temp%\592.dat
  • %User Temp%\593.dat
  • %User Temp%\594.dat
  • %User Temp%\595.dat
  • %User Temp%\596.dat
  • %User Temp%\597.dat
  • %User Temp%\598.dat
  • %User Temp%\599.dat
  • %User Temp%\600.dat
  • %User Temp%\601.dat
  • %User Temp%\602.dat
  • %User Temp%\603.dat
  • %User Temp%\604.dat
  • %User Temp%\605.dat
  • %User Temp%\606.dat
  • %User Temp%\607.dat
  • %User Temp%\608.dat
  • %User Temp%\609.dat
  • %User Temp%\610.dat
  • %User Temp%\611.dat
  • %User Temp%\612.dat
  • %User Temp%\613.dat
  • %User Temp%\614.dat
  • %User Temp%\615.dat
  • %User Temp%\616.dat
  • %User Temp%\617.dat
  • %User Temp%\618.dat
  • %User Temp%\619.dat
  • %User Temp%\620.dat
  • %User Temp%\621.dat
  • %User Temp%\622.dat
  • %User Temp%\623.dat
  • %User Temp%\624.dat
  • %User Temp%\625.dat
  • %User Temp%\626.dat
  • %User Temp%\627.dat
  • %User Temp%\628.dat
  • %User Temp%\629.dat
  • %User Temp%\630.dat
  • %User Temp%\631.dat
  • %User Temp%\632.dat
  • %User Temp%\633.dat
  • %User Temp%\634.dat
  • %User Temp%\635.dat
  • %User Temp%\636.dat
  • %User Temp%\637.dat
  • %User Temp%\638.dat
  • %User Temp%\639.dat
  • %User Temp%\640.dat
  • %User Temp%\641.dat
  • %User Temp%\642.dat
  • %User Temp%\643.dat
  • %User Temp%\644.dat
  • %User Temp%\645.dat
  • %User Temp%\646.dat
  • %User Temp%\647.dat
  • %User Temp%\648.dat
  • %User Temp%\649.dat
  • %User Temp%\650.dat
  • %User Temp%\651.dat
  • %User Temp%\652.dat
  • %User Temp%\653.dat
  • %User Temp%\654.dat
  • %User Temp%\655.dat
  • %User Temp%\656.dat
  • %User Temp%\657.dat
  • %User Temp%\658.dat
  • %User Temp%\659.dat
  • %User Temp%\660.dat
  • %User Temp%\661.dat
  • %User Temp%\662.dat
  • %User Temp%\663.dat
  • %User Temp%\664.dat
  • %User Temp%\665.dat
  • %User Temp%\666.dat
  • %User Temp%\667.dat
  • %User Temp%\668.dat
  • %User Temp%\669.dat
  • %User Temp%\670.dat
  • %User Temp%\671.dat
  • %User Temp%\672.dat
  • %User Temp%\673.dat
  • %User Temp%\674.dat
  • %User Temp%\675.dat
  • %User Temp%\676.dat
  • %User Temp%\677.dat
  • %User Temp%\678.dat
  • %User Temp%\679.dat
  • %User Temp%\680.dat
  • %User Temp%\681.dat
  • %User Temp%\682.dat
  • %User Temp%\683.dat
  • %User Temp%\684.dat
  • %User Temp%\685.dat
  • %User Temp%\686.dat
  • %User Temp%\687.dat
  • %User Temp%\688.dat
  • %User Temp%\689.dat
  • %User Temp%\690.dat
  • %User Temp%\691.dat
  • %User Temp%\692.dat
  • %User Temp%\693.dat
  • %User Temp%\694.dat
  • %User Temp%\695.dat
  • %User Temp%\696.dat
  • %User Temp%\697.dat
  • %User Temp%\698.dat
  • %User Temp%\699.dat
  • %User Temp%\700.dat
  • %User Temp%\701.dat
  • %User Temp%\702.dat
  • %User Temp%\703.dat
  • %User Temp%\704.dat
  • %User Temp%\705.dat
  • %User Temp%\706.dat
  • %User Temp%\707.dat
  • %User Temp%\708.dat
  • %User Temp%\709.dat
  • %User Temp%\710.dat
  • %User Temp%\711.dat
  • %User Temp%\712.dat
  • %User Temp%\713.dat
  • %User Temp%\714.dat
  • %User Temp%\715.dat
  • %User Temp%\716.dat
  • %User Temp%\717.dat
  • %User Temp%\718.dat
  • %User Temp%\719.dat
  • %User Temp%\720.dat
  • %User Temp%\721.dat
  • %User Temp%\722.dat
  • %User Temp%\723.dat
  • %User Temp%\724.dat
  • %User Temp%\725.dat
  • %User Temp%\726.dat
  • %User Temp%\727.dat
  • %User Temp%\728.dat
  • %User Temp%\729.dat
  • %User Temp%\730.dat
  • %User Temp%\731.dat
  • %User Temp%\732.dat
  • %User Temp%\733.dat
  • %User Temp%\734.dat
  • %User Temp%\735.dat
  • %User Temp%\736.dat
  • %User Temp%\737.dat
  • %User Temp%\738.dat
  • %User Temp%\739.dat
  • %User Temp%\740.dat
  • %User Temp%\741.dat
  • %User Temp%\742.dat
  • %User Temp%\743.dat
  • %User Temp%\744.dat
  • %User Temp%\745.dat
  • %User Temp%\746.dat
  • %User Temp%\747.dat
  • %User Temp%\748.dat
  • %User Temp%\749.dat
  • %User Temp%\750.dat
  • %User Temp%\751.dat
  • %User Temp%\752.dat
  • %User Temp%\753.dat
  • %User Temp%\754.dat
  • %User Temp%\755.dat
  • %User Temp%\756.dat
  • %User Temp%\757.dat
  • %User Temp%\758.dat
  • %User Temp%\759.dat
  • %User Temp%\760.dat
  • %User Temp%\761.dat
  • %User Temp%\762.dat
  • %User Temp%\763.dat
  • %User Temp%\764.dat
  • %User Temp%\765.dat
  • %User Temp%\766.dat
  • %User Temp%\767.dat
  • %User Temp%\768.dat
  • %User Temp%\769.dat
  • %User Temp%\770.dat
  • %User Temp%\771.dat
  • %User Temp%\772.dat
  • %User Temp%\773.dat
  • %User Temp%\774.dat
  • %User Temp%\775.dat
  • %User Temp%\776.dat
  • %User Temp%\777.dat
  • %User Temp%\778.dat
  • %User Temp%\779.dat
  • %User Temp%\780.dat
  • %User Temp%\781.dat
  • %User Temp%\782.dat
  • %User Temp%\783.dat
  • %User Temp%\784.dat
  • %User Temp%\785.dat
  • %User Temp%\786.dat
  • %User Temp%\787.dat
  • %User Temp%\788.dat
  • %User Temp%\789.dat
  • %User Temp%\790.dat
  • %User Temp%\791.dat
  • %User Temp%\792.dat
  • %User Temp%\793.dat
  • %User Temp%\794.dat
  • %User Temp%\795.dat
  • %User Temp%\796.dat
  • %User Temp%\797.dat
  • %User Temp%\798.dat
  • %User Temp%\799.dat
  • %User Temp%\800.dat
  • %User Temp%\801.dat
  • %User Temp%\802.dat
  • %User Temp%\803.dat
  • %User Temp%\804.dat
  • %User Temp%\805.dat
  • %User Temp%\806.dat
  • %User Temp%\807.dat
  • %User Temp%\808.dat
  • %User Temp%\809.dat
  • %User Temp%\810.dat
  • %User Temp%\811.dat
  • %User Temp%\812.dat
  • %User Temp%\813.dat
  • %User Temp%\814.dat
  • %User Temp%\815.dat
  • %User Temp%\816.dat
  • %User Temp%\817.dat
  • %User Temp%\818.dat
  • %User Temp%\819.dat
  • %User Temp%\820.dat
  • %User Temp%\821.dat
  • %User Temp%\822.dat
  • %User Temp%\823.dat
  • %User Temp%\824.dat
  • %User Temp%\825.dat
  • %User Temp%\826.dat
  • %User Temp%\827.dat
  • %User Temp%\828.dat
  • %User Temp%\829.dat
  • %User Temp%\830.dat
  • %User Temp%\831.dat
  • %User Temp%\832.dat
  • %User Temp%\833.dat
  • %User Temp%\834.dat
  • %User Temp%\835.dat
  • %User Temp%\836.dat
  • %User Temp%\837.dat
  • %User Temp%\838.dat
  • %User Temp%\839.dat
  • %User Temp%\840.dat
  • %User Temp%\841.dat
  • %User Temp%\842.dat
  • %User Temp%\843.dat
  • %User Temp%\844.dat
  • %User Temp%\845.dat
  • %User Temp%\846.dat
  • %User Temp%\847.dat
  • %User Temp%\848.dat
  • %User Temp%\849.dat
  • %User Temp%\850.dat
  • %User Temp%\851.dat
  • %User Temp%\852.dat
  • %User Temp%\853.dat
  • %User Temp%\854.dat
  • %User Temp%\855.dat
  • %User Temp%\856.dat
  • %User Temp%\857.dat
  • %User Temp%\858.dat
  • %User Temp%\859.dat
  • %User Temp%\860.dat
  • %User Temp%\861.dat
  • %User Temp%\862.dat
  • %User Temp%\863.dat
  • %User Temp%\864.dat
  • %User Temp%\865.dat
  • %User Temp%\866.dat
  • %User Temp%\867.dat
  • %User Temp%\868.dat
  • %User Temp%\869.dat
  • %User Temp%\870.dat
  • %User Temp%\871.dat
  • %User Temp%\872.dat
  • %User Temp%\873.dat
  • %User Temp%\874.dat
  • %User Temp%\875.dat
  • %User Temp%\876.dat
  • %User Temp%\877.dat
  • %User Temp%\878.dat
  • %User Temp%\879.dat
  • %User Temp%\880.dat
  • %User Temp%\881.dat
  • %User Temp%\882.dat
  • %User Temp%\883.dat
  • %User Temp%\884.dat
  • %User Temp%\885.dat
  • %User Temp%\886.dat
  • %User Temp%\887.dat
  • %User Temp%\888.dat
  • %User Temp%\889.dat
  • %User Temp%\890.dat
  • %User Temp%\891.dat
  • %User Temp%\892.dat
  • %User Temp%\893.dat
  • %User Temp%\894.dat
  • %User Temp%\895.dat
  • %User Temp%\896.dat
  • %User Temp%\897.dat
  • %User Temp%\898.dat
  • %User Temp%\899.dat
  • %User Temp%\900.dat
  • %User Temp%\901.dat
  • %User Temp%\902.dat
  • %User Temp%\903.dat
  • %User Temp%\904.dat
  • %User Temp%\905.dat
  • %User Temp%\906.dat
  • %User Temp%\907.dat
  • %User Temp%\908.dat
  • %User Temp%\909.dat
  • %User Temp%\910.dat
  • %User Temp%\911.dat
  • %User Temp%\912.dat
  • %User Temp%\913.dat
  • %User Temp%\914.dat
  • %User Temp%\915.dat
  • %User Temp%\916.dat
  • %User Temp%\917.dat
  • %User Temp%\918.dat
  • %User Temp%\919.dat
  • %User Temp%\920.dat
  • %User Temp%\921.dat
  • %User Temp%\922.dat
  • %User Temp%\923.dat
  • %User Temp%\924.dat
  • %User Temp%\925.dat
  • %User Temp%\926.dat
  • %User Temp%\927.dat
  • %User Temp%\928.dat
  • %User Temp%\929.dat
  • %User Temp%\930.dat
  • %User Temp%\931.dat
  • %User Temp%\932.dat
  • %User Temp%\933.dat
  • %User Temp%\934.dat
  • %User Temp%\935.dat
  • %User Temp%\936.dat
  • %User Temp%\937.dat
  • %User Temp%\938.dat
  • %User Temp%\939.dat
  • %User Temp%\940.dat
  • %User Temp%\941.dat
  • %User Temp%\942.dat
  • %User Temp%\943.dat
  • %User Temp%\944.dat
  • %User Temp%\945.dat
  • %User Temp%\946.dat
  • %User Temp%\947.dat
  • %User Temp%\948.dat
  • %User Temp%\949.dat
  • %User Temp%\950.dat
  • %User Temp%\951.dat
  • %User Temp%\952.dat
  • %User Temp%\953.dat
  • %User Temp%\954.dat
  • %User Temp%\955.dat
  • %User Temp%\956.dat
  • %User Temp%\957.dat
  • %User Temp%\958.dat
  • %User Temp%\959.dat
  • %User Temp%\960.dat
  • %User Temp%\961.dat
  • %User Temp%\962.dat
  • %User Temp%\963.dat
  • %User Temp%\964.dat
  • %User Temp%\965.dat
  • %User Temp%\966.dat
  • %User Temp%\967.dat
  • %User Temp%\968.dat
  • %User Temp%\969.dat
  • %User Temp%\970.dat
  • %User Temp%\971.dat
  • %User Temp%\972.dat
  • %User Temp%\973.dat
  • %User Temp%\974.dat
  • %User Temp%\975.dat
  • %User Temp%\976.dat
  • %User Temp%\977.dat
  • %User Temp%\978.dat
  • %User Temp%\979.dat
  • %User Temp%\980.dat
  • %User Temp%\981.dat
  • %User Temp%\982.dat
  • %User Temp%\983.dat
  • %User Temp%\984.dat
  • %User Temp%\985.dat
  • %User Temp%\986.dat
  • %User Temp%\987.dat
  • %User Temp%\988.dat
  • %User Temp%\989.dat
  • %User Temp%\990.dat
  • %User Temp%\991.dat
  • %User Temp%\992.dat
  • %User Temp%\993.dat
  • %User Temp%\994.dat
  • %User Temp%\995.dat
  • %User Temp%\996.dat
  • %User Temp%\997.dat
  • %User Temp%\998.dat
  • %User Temp%\999.dat
  • %User Temp%\1000.dat
  • %User Temp%\1001.dat
  • %User Temp%\1002.dat
  • %User Temp%\1003.dat
  • %User Temp%\1004.dat
  • %User Temp%\1005.dat
  • %User Temp%\1006.dat
  • %User Temp%\1007.dat
  • %User Temp%\1008.dat
  • %User Temp%\1009.dat
  • %User Temp%\1010.dat
  • %User Temp%\1011.dat
  • %User Temp%\1012.dat
  • %User Temp%\1013.dat
  • %User Temp%\1014.dat
  • %User Temp%\1015.dat
  • %User Temp%\1016.dat
  • %User Temp%\1017.dat
  • %User Temp%\1018.dat
  • %User Temp%\1019.dat
  • %User Temp%\1020.dat
  • %User Temp%\1021.dat
  • %User Temp%\1022.dat
  • %User Temp%\1023.dat
  • %User Temp%\1024.dat
  • %User Temp%\1025.dat
  • %User Temp%\1026.dat
  • %User Temp%\1027.dat
  • %User Temp%\1028.dat
  • %User Temp%\1029.dat
  • %User Temp%\1030.dat
  • %User Temp%\1031.dat
  • %User Temp%\1032.dat
  • %User Temp%\1033.dat
  • %User Temp%\1034.dat
  • %User Temp%\1035.dat
  • %User Temp%\1036.dat
  • %User Temp%\1037.dat
  • %User Temp%\1038.dat
  • %User Temp%\1039.dat
  • %User Temp%\1040.dat
  • %User Temp%\1041.dat
  • %User Temp%\1042.dat
  • %User Temp%\1043.dat
  • %User Temp%\1044.dat
  • %User Temp%\1045.dat
  • %User Temp%\1046.dat
  • %Application Data%\Povo\pyxo.dat
  • %User Profile%\Templates\wordpfct.wpd.yuybbwh
  • %User Profile%\Templates\_DECRYPT_INFO_yuybbwh.html
  • %User Profile%\Templates\winword2.doc.yuybbwh
  • %User Profile%\Templates\winword.doc.yuybbwh
  • %User Profile%\Templates\quattro.wb2.yuybbwh
  • %User Profile%\Templates\powerpnt.ppt.yuybbwh
  • %User Profile%\Templates\excel4.xls.yuybbwh
  • %User Profile%\Templates\excel.xls.yuybbwh
  • %Temporary Internet Files%\Content.IE5\ZSGKJKO6\widgets[1].js.yuybbwh
  • %Temporary Internet Files%\Content.IE5\ZSGKJKO6\_DECRYPT_INFO_yuybbwh.html
  • %Temporary Internet Files%\Content.IE5\ZSGKJKO6\table_top3[1].png.yuybbwh
  • %Temporary Internet Files%\Content.IE5\ZSGKJKO6\table_left3[1].png.yuybbwh
  • %Temporary Internet Files%\Content.IE5\ZSGKJKO6\sck[1].htm.yuybbwh
  • %Temporary Internet Files%\Content.IE5\ZSGKJKO6\F7D0CF254A92D3932EDCF252CA5AB4[1].jpg.yuybbwh
  • %Temporary Internet Files%\Content.IE5\ZSGKJKO6\en[1].js.yuybbwh
  • %Temporary Internet Files%\Content.IE5\ZSGKJKO6\D8F68391953F21ECC405DCBA92D39[1].jpg.yuybbwh
  • %Temporary Internet Files%\Content.IE5\ZSGKJKO6\conditionalbanners[1].htm.yuybbwh
  • %Temporary Internet Files%\Content.IE5\ZSGKJKO6\BING_websearch_2[1].jpg.yuybbwh
  • %Temporary Internet Files%\Content.IE5\ZSGKJKO6\BCEE3611B4F81EDE9240922336F1[1].jpg.yuybbwh
  • %Temporary Internet Files%\Content.IE5\ZSGKJKO6\ADSAdClient31[1].htm.yuybbwh
  • %Temporary Internet Files%\Content.IE5\ZSGKJKO6\A5EE7088EC167F676F626203E7371[1].png.yuybbwh
  • %Temporary Internet Files%\Content.IE5\ZSGKJKO6\9b61bd1a420364db439350bebaac19[1].css.yuybbwh
  • %Temporary Internet Files%\Content.IE5\ZSGKJKO6\844DD2D2B4733FAE13849F794A7BD8[1].jpg.yuybbwh
  • %Temporary Internet Files%\Content.IE5\ZSGKJKO6\72541472A285479CAB60A1F736581[1].jpg.yuybbwh
  • %Temporary Internet Files%\Content.IE5\ZSGKJKO6\300x250_45914_4crocsl[1].jpg.yuybbwh
  • %Temporary Internet Files%\Content.IE5\ZDGZNKA5\top_right3[1].png.yuybbwh
  • %Temporary Internet Files%\Content.IE5\ZDGZNKA5\_DECRYPT_INFO_yuybbwh.html
  • %Temporary Internet Files%\Content.IE5\ZDGZNKA5\table_right3[1].png.yuybbwh
  • %Temporary Internet Files%\Content.IE5\ZDGZNKA5\FD4957C9FB46179035C1C4F6407F10[1].jpg.yuybbwh
  • %Temporary Internet Files%\Content.IE5\ZDGZNKA5\dapmsn[1].js.yuybbwh
  • %Temporary Internet Files%\Content.IE5\ZDGZNKA5\CDAB2F44A1591D2B308C20C6C15375[1].jpg.yuybbwh
  • %Temporary Internet Files%\Content.IE5\ZDGZNKA5\ADSAdClient31[2].htm.yuybbwh
  • %Temporary Internet Files%\Content.IE5\ZDGZNKA5\ADSAdClient31[1].htm.yuybbwh
  • %Temporary Internet Files%\Content.IE5\ZDGZNKA5\9E82BCBB661C2665F77225A5DCC867[1].jpg.yuybbwh
  • %Temporary Internet Files%\Content.IE5\ZDGZNKA5\1db850e671ac9a39751a1482909ea6[1].jpg.yuybbwh
  • %Temporary Internet Files%\Content.IE5\ZDGZNKA5\147[1].jpg.yuybbwh
  • %Temporary Internet Files%\Content.IE5\BVLBNMKH\table_bottom3[1].png.yuybbwh
  • %Temporary Internet Files%\Content.IE5\BVLBNMKH\_DECRYPT_INFO_yuybbwh.html
  • %Temporary Internet Files%\Content.IE5\BVLBNMKH\sck[1].htm.yuybbwh
  • %Temporary Internet Files%\Content.IE5\BVLBNMKH\jquery-1.4.2.min[1].js.yuybbwh
  • %Temporary Internet Files%\Content.IE5\BVLBNMKH\ecbrolfa1ff2b64fe659f792daafb90b16a4[1].js.yuybbwh
  • %Temporary Internet Files%\Content.IE5\BVLBNMKH\BA0EAC3FA44E01BE67D7651C9E60[1].jpg.yuybbwh
  • %Temporary Internet Files%\Content.IE5\BVLBNMKH\anatm[1].js.yuybbwh
  • %Temporary Internet Files%\Content.IE5\BVLBNMKH\ADSAdClient31[1].htm.yuybbwh
  • %Temporary Internet Files%\Content.IE5\BVLBNMKH\9FFCFB0D17D6A8FD7C27416ED0DB[1].jpg.yuybbwh
  • %Temporary Internet Files%\Content.IE5\BVLBNMKH\923334461022280076d968be269386[1].png.yuybbwh
  • %Temporary Internet Files%\Content.IE5\BVLBNMKH\15A727F1384E33C33F18A135D9710[1].jpg.yuybbwh
  • %Temporary Internet Files%\Content.IE5\09RWHJQN\top_left3[1].png.yuybbwh
  • %Temporary Internet Files%\Content.IE5\09RWHJQN\_DECRYPT_INFO_yuybbwh.html
  • %Temporary Internet Files%\Content.IE5\09RWHJQN\msn[1].htm.yuybbwh
  • %Temporary Internet Files%\Content.IE5\09RWHJQN\gw[1].js.yuybbwh
  • %Temporary Internet Files%\Content.IE5\09RWHJQN\d3a1be3129df1dc11a599ea57981b2[2].js.yuybbwh
  • %Temporary Internet Files%\Content.IE5\09RWHJQN\D2543C851E4AE4B1DB2DE3B1562DB[1].jpg.yuybbwh
  • %Temporary Internet Files%\Content.IE5\09RWHJQN\bottom_right3[1].png.yuybbwh
  • %Temporary Internet Files%\Content.IE5\09RWHJQN\bottom_left3[1].png.yuybbwh
  • %Temporary Internet Files%\Content.IE5\09RWHJQN\BA1FA617D2822CCF20CF2239452095[1].jpg.yuybbwh
  • %Temporary Internet Files%\Content.IE5\09RWHJQN\all[1].js.yuybbwh
  • %Temporary Internet Files%\Content.IE5\09RWHJQN\ADSAdClient31[2].htm.yuybbwh
  • %Temporary Internet Files%\Content.IE5\09RWHJQN\ADSAdClient31[1].htm.yuybbwh
  • %Temporary Internet Files%\Content.IE5\09RWHJQN\836390dd7004a00c9b21db33678d84[1].png.yuybbwh
  • %Temporary Internet Files%\Content.IE5\09RWHJQN\8213D9F75AD098D48F237D6CCC29F8[1].jpg.yuybbwh
  • %Temporary Internet Files%\Content.IE5\09RWHJQN\5c5d9b9cb6c19bcac7f82d676b488b[1].css.yuybbwh
  • %Temporary Internet Files%\Content.IE5\09RWHJQN\1d56986ff895d82941fb9faf08c76f[1].css.yuybbwh
  • %User Profile%\Cookies\wilbert@www.msn[1].txt.yuybbwh
  • %User Profile%\Cookies\_DECRYPT_INFO_yuybbwh.html
  • %User Profile%\Cookies\wilbert@www.bing[2].txt.yuybbwh
  • %User Profile%\Cookies\wilbert@scorecardresearch[2].txt.yuybbwh
  • %User Profile%\Cookies\wilbert@msn[2].txt.yuybbwh
  • %User Profile%\Cookies\wilbert@msnportal.112.2o7[1].txt.yuybbwh
  • %User Profile%\Cookies\wilbert@microsoft[1].txt.yuybbwh
  • %User Profile%\Cookies\wilbert@doubleclick[1].txt.yuybbwh
  • %User Profile%\Cookies\wilbert@c.msn[2].txt.yuybbwh
  • %User Profile%\Cookies\wilbert@c.atdmt[2].txt.yuybbwh
  • %User Profile%\Cookies\wilbert@bing[2].txt.yuybbwh
  • %User Profile%\Cookies\wilbert@atdmt[2].txt.yuybbwh
  • %User Profile%\Sample Pictures\Winter.jpg.yuybbwh
  • %User Profile%\Sample Pictures\_DECRYPT_INFO_yuybbwh.html
  • %User Profile%\Sample Pictures\Water lilies.jpg.yuybbwh
  • %User Profile%\Sample Pictures\Sunset.jpg.yuybbwh
  • %User Profile%\Sample Pictures\Blue hills.jpg.yuybbwh
  • %User Profile%\Sample Music\New Stories (Highway Blues).wma.yuybbwh
  • %User Profile%\Sample Music\Beethoven's Symphony No. 9 (Scherzo).wma.yuybbwh
  • %User Profile%\Sample Music\_DECRYPT_INFO_yuybbwh.html
  • %User Temp%\yuybbwh.gif
  • %User Profile%\Templates\wordpfct.wpg.yuybbwh
  • %User Profile%\Templates\presenta.shw.yuybbwh
  • %User Profile%\Templates\lotus.wk4.yuybbwh
  • %User Profile%\Templates\amipro.sam.yuybbwh
  • %Temporary Internet Files%\Content.IE5\ZSGKJKO6\qsonhs[1].aspx.yuybbwh
  • %Temporary Internet Files%\Content.IE5\ZDGZNKA5\GRedirect[2].aspx.yuybbwh
  • %Temporary Internet Files%\Content.IE5\ZDGZNKA5\msnhomepagehistory[1].aspx.yuybbwh
  • %Application Data%\IconCache.db.yuybbwh
  • %Favorites%\Radio Station Guide.url.yuybbwh
  • %Favorites%\_DECRYPT_INFO_yuybbwh.html
  • %Favorites%\MSN.com.url.yuybbwh
  • %Favorites%\Links\Windows.url.yuybbwh
  • %Favorites%\Links\_DECRYPT_INFO_yuybbwh.html
  • %Favorites%\Links\Windows Media.url.yuybbwh
  • %Favorites%\Links\Windows Marketplace.url.yuybbwh
  • %Favorites%\Links\Free Hotmail.url.yuybbwh
  • %Favorites%\Links\Customize Links.url.yuybbwh
  • %Application Data%\_DECRYPT_INFO_yuybbwh.html
  • %Start Menu%\Programs\WinPcap\WinPcap Web Site.url.yuybbwh
  • %Start Menu%\Programs\WinPcap\_DECRYPT_INFO_yuybbwh.html
  • %User Profile%\DRM\drmv2.lic.yuybbwh
  • %User Profile%\DRM\drmv2.sst.yuybbwh
  • %User Profile%\DRM\_DECRYPT_INFO_yuybbwh.html
  • %User Profile%\Security\directories.acrodata.yuybbwh
  • %User Profile%\Security\_DECRYPT_INFO_yuybbwh.html
  • %User Profile%\0008044E\Plylst8.wpl.yuybbwh
  • %User Profile%\0008044E\Plylst9.wpl.yuybbwh
  • %User Profile%\0008044E\_DECRYPT_INFO_yuybbwh.html
  • %User Profile%\0008044E\Plylst6.wpl.yuybbwh
  • %User Profile%\0008044E\Plylst7.wpl.yuybbwh
  • %User Profile%\0008044E\Plylst5.wpl.yuybbwh
  • %User Profile%\0008044E\Plylst4.wpl.yuybbwh
  • %User Profile%\0008044E\Plylst3.wpl.yuybbwh
  • %User Profile%\0008044E\Plylst2.wpl.yuybbwh
  • %User Profile%\0008044E\Plylst15.wpl.yuybbwh
  • %User Profile%\0008044E\Plylst14.wpl.yuybbwh
  • %User Profile%\0008044E\Plylst13.wpl.yuybbwh
  • %User Profile%\0008044E\Plylst12.wpl.yuybbwh
  • %User Profile%\0008044E\Plylst11.wpl.yuybbwh
  • %User Profile%\0008044E\Plylst10.wpl.yuybbwh
  • %User Profile%\0008044E\Plylst1.wpl.yuybbwh

手順 4

以下のフォルダを検索し削除します。

[ 詳細 ]
註:このフォルダは、隠しフォルダとして設定されている場合があります。[詳細設定オプション]をクリックし、[隠しファイルとフォルダの検索]のチェックボックスをオンにし、検索結果に隠しファイルとフォルダが含まれるようにしてください。
  • %Application Data%\Povo

手順 5

最新のバージョン(エンジン、パターンファイル)を導入したウイルス対策製品を用い、ウイルス検索を実行してください。「Ransom_MAKTUB.F117CM」と検出したファイルはすべて削除してください。 検出されたファイルが、弊社ウイルス対策製品により既に駆除、隔離またはファイル削除の処理が実行された場合、ウイルスの処理は完了しており、他の削除手順は特にありません。

手順 6

以下のファイルをバックアップを用いて修復します。なお、マイクロソフト製品に関連したファイルのみ修復されます。このマルウェア/グレイウェア/スパイウェアが同社製品以外のプログラムをも削除した場合には、該当プログラムを再度インストールする必要があります。

  • %User Profile%\Templates\wordpfct.wpd
  • %User Profile%\Templates\winword2.doc
  • %User Profile%\Templates\winword.doc
  • %User Profile%\Templates\quattro.wb2
  • %User Profile%\Templates\powerpnt.ppt
  • %User Profile%\Templates\excel4.xls
  • %User Profile%\Templates\excel.xls
  • %Temporary Internet Files%\Content.IE5\ZSGKJKO6\widgets[1].js
  • %Temporary Internet Files%\Content.IE5\ZSGKJKO6\table_top3[1].png
  • %Temporary Internet Files%\Content.IE5\ZSGKJKO6\table_left3[1].png
  • %Temporary Internet Files%\Content.IE5\ZSGKJKO6\sck[1].htm
  • %Temporary Internet Files%\Content.IE5\ZSGKJKO6\F7D0CF254A92D3932EDCF252CA5AB4[1].jpg
  • %Temporary Internet Files%\Content.IE5\ZSGKJKO6\en[1].js
  • %Temporary Internet Files%\Content.IE5\ZSGKJKO6\D8F68391953F21ECC405DCBA92D39[1].jpg
  • %Temporary Internet Files%\Content.IE5\ZSGKJKO6\conditionalbanners[1].htm
  • %Temporary Internet Files%\Content.IE5\ZSGKJKO6\BING_websearch_2[1].jpg
  • %Temporary Internet Files%\Content.IE5\ZSGKJKO6\BCEE3611B4F81EDE9240922336F1[1].jpg
  • %Temporary Internet Files%\Content.IE5\ZSGKJKO6\ADSAdClient31[1].htm
  • %Temporary Internet Files%\Content.IE5\ZSGKJKO6\A5EE7088EC167F676F626203E7371[1].png
  • %Temporary Internet Files%\Content.IE5\ZSGKJKO6\9b61bd1a420364db439350bebaac19[1].css
  • %Temporary Internet Files%\Content.IE5\ZSGKJKO6\844DD2D2B4733FAE13849F794A7BD8[1].jpg
  • %Temporary Internet Files%\Content.IE5\ZSGKJKO6\72541472A285479CAB60A1F736581[1].jpg
  • %Temporary Internet Files%\Content.IE5\ZSGKJKO6\300x250_45914_4crocsl[1].jpg
  • %Temporary Internet Files%\Content.IE5\ZDGZNKA5\top_right3[1].png
  • %Temporary Internet Files%\Content.IE5\ZDGZNKA5\table_right3[1].png
  • %Temporary Internet Files%\Content.IE5\ZDGZNKA5\FD4957C9FB46179035C1C4F6407F10[1].jpg
  • %Temporary Internet Files%\Content.IE5\ZDGZNKA5\dapmsn[1].js
  • %Temporary Internet Files%\Content.IE5\ZDGZNKA5\CDAB2F44A1591D2B308C20C6C15375[1].jpg
  • %Temporary Internet Files%\Content.IE5\ZDGZNKA5\ADSAdClient31[2].htm
  • %Temporary Internet Files%\Content.IE5\ZDGZNKA5\ADSAdClient31[1].htm
  • %Temporary Internet Files%\Content.IE5\ZDGZNKA5\9E82BCBB661C2665F77225A5DCC867[1].jpg
  • %Temporary Internet Files%\Content.IE5\ZDGZNKA5\1db850e671ac9a39751a1482909ea6[1].jpg
  • %Temporary Internet Files%\Content.IE5\ZDGZNKA5\147[1].jpg
  • %Temporary Internet Files%\Content.IE5\BVLBNMKH\table_bottom3[1].png
  • %Temporary Internet Files%\Content.IE5\BVLBNMKH\sck[1].htm
  • %Temporary Internet Files%\Content.IE5\BVLBNMKH\jquery-1.4.2.min[1].js
  • %Temporary Internet Files%\Content.IE5\BVLBNMKH\ecbrolfa1ff2b64fe659f792daafb90b16a4[1].js
  • %Temporary Internet Files%\Content.IE5\BVLBNMKH\BA0EAC3FA44E01BE67D7651C9E60[1].jpg
  • %Temporary Internet Files%\Content.IE5\BVLBNMKH\anatm[1].js
  • %Temporary Internet Files%\Content.IE5\BVLBNMKH\ADSAdClient31[1].htm
  • %Temporary Internet Files%\Content.IE5\BVLBNMKH\9FFCFB0D17D6A8FD7C27416ED0DB[1].jpg
  • %Temporary Internet Files%\Content.IE5\BVLBNMKH\923334461022280076d968be269386[1].png
  • %Temporary Internet Files%\Content.IE5\BVLBNMKH\15A727F1384E33C33F18A135D9710[1].jpg
  • %Temporary Internet Files%\Content.IE5\09RWHJQN\top_left3[1].png
  • %Temporary Internet Files%\Content.IE5\09RWHJQN\msn[1].htm
  • %Temporary Internet Files%\Content.IE5\09RWHJQN\gw[1].js
  • %Temporary Internet Files%\Content.IE5\09RWHJQN\d3a1be3129df1dc11a599ea57981b2[2].js
  • %Temporary Internet Files%\Content.IE5\09RWHJQN\D2543C851E4AE4B1DB2DE3B1562DB[1].jpg
  • %Temporary Internet Files%\Content.IE5\09RWHJQN\bottom_right3[1].png
  • %Temporary Internet Files%\Content.IE5\09RWHJQN\bottom_left3[1].png
  • %Temporary Internet Files%\Content.IE5\09RWHJQN\BA1FA617D2822CCF20CF2239452095[1].jpg
  • %Temporary Internet Files%\Content.IE5\09RWHJQN\all[1].js
  • %Temporary Internet Files%\Content.IE5\09RWHJQN\ADSAdClient31[2].htm
  • %Temporary Internet Files%\Content.IE5\09RWHJQN\ADSAdClient31[1].htm
  • %Temporary Internet Files%\Content.IE5\09RWHJQN\836390dd7004a00c9b21db33678d84[1].png
  • %Temporary Internet Files%\Content.IE5\09RWHJQN\8213D9F75AD098D48F237D6CCC29F8[1].jpg
  • %Temporary Internet Files%\Content.IE5\09RWHJQN\5c5d9b9cb6c19bcac7f82d676b488b[1].css
  • %Temporary Internet Files%\Content.IE5\09RWHJQN\1d56986ff895d82941fb9faf08c76f[1].css
  • %User Profile%\Cookies\wilbert@www.msn[1].txt
  • %User Profile%\Cookies\wilbert@www.bing[2].txt
  • %User Profile%\Cookies\wilbert@scorecardresearch[2].txt
  • %User Profile%\Cookies\wilbert@msn[2].txt
  • %User Profile%\Cookies\wilbert@msnportal.112.2o7[1].txt
  • %User Profile%\Cookies\wilbert@microsoft[1].txt
  • %User Profile%\Cookies\wilbert@doubleclick[1].txt
  • %User Profile%\Cookies\wilbert@c.msn[2].txt
  • %User Profile%\Cookies\wilbert@c.atdmt[2].txt
  • %User Profile%\Cookies\wilbert@bing[2].txt
  • %User Profile%\Cookies\wilbert@atdmt[2].txt
  • %User Profile%\Sample Pictures\Winter.jpg
  • %User Profile%\Sample Pictures\Water lilies.jpg
  • %User Profile%\Sample Pictures\Sunset.jpg
  • %User Profile%\Sample Pictures\Blue hills.jpg
  • %User Profile%\Sample Music\New Stories (Highway Blues).wma
  • %User Profile%\Sample Music\Beethoven's Symphony No. 9 (Scherzo).wma
  • %User Profile%\Templates\wordpfct.wpg
  • %User Profile%\Templates\presenta.shw
  • %User Profile%\Templates\lotus.wk4
  • %User Profile%\Templates\amipro.sam
  • %Temporary Internet Files%\Content.IE5\ZSGKJKO6\qsonhs[1].aspx
  • %Temporary Internet Files%\Content.IE5\ZDGZNKA5\msnhomepagehistory[1].aspx
  • %Temporary Internet Files%\Content.IE5\ZDGZNKA5\GRedirect[2].aspx
  • %Favorites%\Radio Station Guide.url
  • %Favorites%\MSN.com.url
  • %Favorites%\Links\Windows.url
  • %Favorites%\Links\Windows Media.url
  • %Favorites%\Links\Windows Marketplace.url
  • %Favorites%\Links\Free Hotmail.url
  • %Favorites%\Links\Customize Links.url
  • %Application Data%\IconCache.db
  • %Start Menu%\Programs\WinPcap\WinPcap Web Site.url
  • %User Profile%\DRM\drmv2.lic
  • %User Profile%\DRM\drmv2.sst
  • %User Profile%\Security\directories.acrodata
  • %User Profile%\0008044E\Plylst8.wpl
  • %User Profile%\0008044E\Plylst9.wpl
  • %User Profile%\0008044E\Plylst6.wpl
  • %User Profile%\0008044E\Plylst7.wpl
  • %User Profile%\0008044E\Plylst5.wpl
  • %User Profile%\0008044E\Plylst4.wpl
  • %User Profile%\0008044E\Plylst3.wpl
  • %User Profile%\0008044E\Plylst2.wpl
  • %User Profile%\0008044E\Plylst15.wpl
  • %User Profile%\0008044E\Plylst14.wpl
  • %User Profile%\0008044E\Plylst13.wpl
  • %User Profile%\0008044E\Plylst12.wpl
  • %User Profile%\0008044E\Plylst11.wpl
  • %User Profile%\0008044E\Plylst10.wpl
  • %User Profile%\0008044E\Plylst1.wpl


ご利用はいかがでしたか? アンケートにご協力ください