WORM_OTORUN.SMIC

October 15, 2013

ALIASES:

Virus:Win32/Sality.AT (Microsoft); W32/Autorun.worm.bbd (McAfee); W32.SillyFDC (Symantec); Virus.Win32.Sality.ag (Kaspersky); Virus.Win32.Sality.at (v) (Sunbelt); Worm.Generic.333481 (FSecure)

PLATFORM:

Windows 2000, Windows XP, Windows Server 2003

OVERALL RISK RATING:

DAMAGE POTENTIAL:

DISTRIBUTION POTENTIAL:

REPORTED INFECTION:

Threat Type: Worm
Destructiveness: No
Encrypted:
In the wild: Yes

OVERVIEW

This worm arrives on a system as a file dropped by other malware or as a file downloaded unknowingly by users when visiting malicious sites.

It disables Task Manager, Registry Editor, and Folder Options.

TECHNICAL DETAILS

File Size:

1,028,096 bytes

File Type:

EXE

Memory Resident:

Initial Samples Received Date:

16 Apr 2012

Arrival Details

This worm arrives on a system as a file dropped by other malware or as a file downloaded unknowingly by users when visiting malicious sites.

Installation

This worm creates the following folders:

%System%\dllcache\Recycler.{645FF040-5081-101B-9F08-00AA002F954E}

(Note: %System% is the Windows system folder, which is usually C:\Windows\System32.)

Other System Modifications

This worm deletes the following files:

%User Temp%\fkjcc.exe

It adds the following registry keys:

HKEY_CURRENT_USER\Software\Microsoft\
Windows\CurrentVersion\policies\
system

HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\
Security Center\Svc

HKEY_CURRENT_USER\Software\Aasppapmmxkvs\
-993627007

HKEY_CURRENT_USER\Software\VB and VBA Program Settings\
trial version\trial

HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\
Windows NT\CurrentVersion\Image File Execution Options\
ctfmon.exe

HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\
Windows NT\CurrentVersion\Image File Execution Options\
taskmgr.exe

HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\
Windows NT\CurrentVersion\Image File Execution Options\
boot.exe

HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\
Windows NT\CurrentVersion\Image File Execution Options\
autorun.exe

HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\
Windows NT\CurrentVersion\Image File Execution Options\
autoruns.exe

HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\
Windows NT\CurrentVersion\Image File Execution Options\
auto.exe

HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\
Windows NT\CurrentVersion\Image File Execution Options\
msconfig.exe

HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\
Windows NT\CurrentVersion\Image File Execution Options\
procexp.exe

HKEY_CURRENT_USER\SOFTWARE\Microsoft\
Windows\CurrentVersion\RunOnce

HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\
Windows\CurrentVersion\policies\
Explorer\Run

HKEY_CURRENT_USER\Software\Policies\
Microsoft\Windows\System\
Scripts\Logoff\0

HKEY_CURRENT_USER\Software\Policies\
Microsoft\Windows\System\
Scripts\Logoff\0\
0

HKEY_LOCAL_MACHINE\Software\Policies\
Microsoft\Windows\System\
Scripts\Shutdown\0

HKEY_LOCAL_MACHINE\Software\Policies\
Microsoft\Windows\System\
Scripts\Shutdown\0\
0

HKEY_LOCAL_MACHINE\Software\Policies\
Microsoft\Windows\System\
Scripts\Startup\0

HKEY_LOCAL_MACHINE\Software\Policies\
Microsoft\Windows\System\
Scripts\Startup\0\
0

It adds the following registry entries:

HKEY_CURRENT_USER\Software\Aasppapmmxkvs
A1_172 = "63befdc"

HKEY_CURRENT_USER\Software\Aasppapmmxkvs
A2_172 = "d57f4da"

HKEY_CURRENT_USER\Software\Aasppapmmxkvs
A3_172 = "d47c3185"

HKEY_CURRENT_USER\Software\Aasppapmmxkvs
A4_172 = "d57f5bac"

HKEY_CURRENT_USER\Software\Aasppapmmxkvs
A1_173 = "dc5b493e"

HKEY_CURRENT_USER\Software\Aasppapmmxkvs
A2_173 = "3eeca412"

HKEY_CURRENT_USER\Software\Aasppapmmxkvs
A3_173 = "3fefd5c4"

HKEY_CURRENT_USER\Software\Aasppapmmxkvs
A4_173 = "3eecbfed"

HKEY_CURRENT_USER\Software\Aasppapmmxkvs
A1_174 = "d78cd592"

HKEY_CURRENT_USER\Software\Aasppapmmxkvs
A2_174 = "a85a3f51"

HKEY_CURRENT_USER\Software\Aasppapmmxkvs
A3_174 = "a9594e7"

HKEY_CURRENT_USER\Software\Aasppapmmxkvs
A4_174 = "a85a242e"

HKEY_CURRENT_USER\Software\Aasppapmmxkvs
A1_175 = "57aae821"

HKEY_CURRENT_USER\Software\Aasppapmmxkvs
A2_175 = "11c7a8c6"

HKEY_CURRENT_USER\Software\Aasppapmmxkvs
A3_175 = "1c4e246"

HKEY_CURRENT_USER\Software\Aasppapmmxkvs
A4_175 = "11c7886f"

HKEY_CURRENT_USER\Software\Aasppapmmxkvs
A1_176 = "d19be7"

HKEY_CURRENT_USER\Software\Aasppapmmxkvs
A2_176 = "7b34f57"

HKEY_CURRENT_USER\Software\Aasppapmmxkvs
A3_176 = "7a378699"

HKEY_CURRENT_USER\Software\Aasppapmmxkvs
A4_176 = "7b34ecb"

HKEY_CURRENT_USER\Software\Aasppapmmxkvs
A1_177 = "9d59693"

HKEY_CURRENT_USER\Software\Aasppapmmxkvs
A2_177 = "e4a24efc"

HKEY_CURRENT_USER\Software\Aasppapmmxkvs
A3_177 = "e5a13ad8"

HKEY_CURRENT_USER\Software\Aasppapmmxkvs
A4_177 = "e4a25f1"

HKEY_CURRENT_USER\Software\Aasppapmmxkvs
A1_178 = "2e2f467"

HKEY_CURRENT_USER\Software\Aasppapmmxkvs
A2_178 = "4efaae7"

HKEY_CURRENT_USER\Software\Aasppapmmxkvs
A3_178 = "4fcdf1b"

HKEY_CURRENT_USER\Software\Aasppapmmxkvs
A4_178 = "4efb532"

HKEY_CURRENT_USER\Software\Aasppapmmxkvs
A1_179 = "9c74483e"

HKEY_CURRENT_USER\Software\Aasppapmmxkvs
A2_179 = "b77d8e4"

HKEY_CURRENT_USER\Software\Aasppapmmxkvs
A3_179 = "b67e735a"

HKEY_CURRENT_USER\Software\Aasppapmmxkvs
A4_179 = "b77d1973"

HKEY_CURRENT_USER\Software\Aasppapmmxkvs
A1_180 = "a96225fe"

HKEY_CURRENT_USER\Software\Aasppapmmxkvs
A2_180 = "2ea66e9"

HKEY_CURRENT_USER\Software\Aasppapmmxkvs
A3_180 = "21e9179d"

HKEY_CURRENT_USER\Software\Aasppapmmxkvs
A4_180 = "2ea7db4"

HKEY_CURRENT_USER\Software\Aasppapmmxkvs
A1_181 = "ea549248"

HKEY_CURRENT_USER\Software\Aasppapmmxkvs
A2_181 = "8a57fcb1"

HKEY_CURRENT_USER\Software\Aasppapmmxkvs
A3_181 = "8b548bdc"

HKEY_CURRENT_USER\Software\Aasppapmmxkvs
A4_181 = "8a57e1f5"

HKEY_CURRENT_USER\Software\Aasppapmmxkvs
A1_182 = "42ad9254"

HKEY_CURRENT_USER\Software\Aasppapmmxkvs
A2_182 = "f3c55d32"

HKEY_CURRENT_USER\Software\Aasppapmmxkvs
A3_182 = "f2c62c1f"

HKEY_CURRENT_USER\Software\Aasppapmmxkvs
A4_182 = "f3c54636"

HKEY_CURRENT_USER\Software\Aasppapmmxkvs
A1_183 = "5883832e"

HKEY_CURRENT_USER\Software\Aasppapmmxkvs
A2_183 = "5d328a16"

HKEY_CURRENT_USER\Software\Aasppapmmxkvs
A3_183 = "5c31c5e"

HKEY_CURRENT_USER\Software\Aasppapmmxkvs
A4_183 = "5d32aa77"

HKEY_CURRENT_USER\Software\Aasppapmmxkvs
A1_184 = "cad62be1"

HKEY_CURRENT_USER\Software\Aasppapmmxkvs
A2_184 = "c6a18fb"

HKEY_CURRENT_USER\Software\Aasppapmmxkvs
A3_184 = "c7a36491"

HKEY_CURRENT_USER\Software\Aasppapmmxkvs
A4_184 = "c6aeb8"

HKEY_CURRENT_USER\Software\Aasppapmmxkvs
A1_185 = "53934b4"

HKEY_CURRENT_USER\Software\Aasppapmmxkvs
A2_185 = "3d68e5"

HKEY_CURRENT_USER\Software\Aasppapmmxkvs
A3_185 = "31e18d"

HKEY_CURRENT_USER\Software\Aasppapmmxkvs
A4_185 = "3d72f9"

HKEY_CURRENT_USER\Software\Aasppapmmxkvs
A1_186 = "dce11c22"

HKEY_CURRENT_USER\Software\Aasppapmmxkvs
A2_186 = "997af2f"

HKEY_CURRENT_USER\Software\Aasppapmmxkvs
A3_186 = "9879bd13"

HKEY_CURRENT_USER\Software\Aasppapmmxkvs
A4_186 = "997ad73a"

HKEY_CURRENT_USER\Software\Aasppapmmxkvs
A1_187 = "b164e133"

HKEY_CURRENT_USER\Software\Aasppapmmxkvs
A2_187 = "2e82499"

HKEY_CURRENT_USER\Software\Aasppapmmxkvs
A3_187 = "3eb5152"

HKEY_CURRENT_USER\Software\Aasppapmmxkvs
A4_187 = "2e83b7b"

HKEY_CURRENT_USER\Software\Aasppapmmxkvs
A1_188 = "59e59dea"

HKEY_CURRENT_USER\Software\Aasppapmmxkvs
A2_188 = "6c558663"

HKEY_CURRENT_USER\Software\Aasppapmmxkvs
A3_188 = "6d56f595"

HKEY_CURRENT_USER\Software\Aasppapmmxkvs
A4_188 = "6c559fbc"

HKEY_CURRENT_USER\Software\Aasppapmmxkvs
A1_189 = "a7beddae"

HKEY_CURRENT_USER\Software\Aasppapmmxkvs
A2_189 = "d5c322e"

HKEY_CURRENT_USER\Software\Aasppapmmxkvs
A3_189 = "d4c69d4"

HKEY_CURRENT_USER\Software\Aasppapmmxkvs
A4_189 = "d5c33fd"

HKEY_CURRENT_USER\Software\Aasppapmmxkvs
A1_190 = "98a86f"

HKEY_CURRENT_USER\Software\Aasppapmmxkvs
A2_190 = "3f37527"

HKEY_CURRENT_USER\Software\Aasppapmmxkvs
A3_190 = "3e33217"

HKEY_CURRENT_USER\Software\Aasppapmmxkvs
A4_190 = "3f3683e"

HKEY_CURRENT_USER\Software\Aasppapmmxkvs
A1_191 = "75a8f9c1"

HKEY_CURRENT_USER\Software\Aasppapmmxkvs
A2_191 = "a89dd4aa"

HKEY_CURRENT_USER\Software\Aasppapmmxkvs
A3_191 = "a99ea656"

HKEY_CURRENT_USER\Software\Aasppapmmxkvs
A4_191 = "a89dcc7f"

HKEY_CURRENT_USER\Software\Aasppapmmxkvs
A1_192 = "dbfc872"

HKEY_CURRENT_USER\Software\Aasppapmmxkvs
A2_192 = "12b253"

HKEY_CURRENT_USER\Software\Aasppapmmxkvs
A3_192 = "1385ae9"

HKEY_CURRENT_USER\Software\Aasppapmmxkvs
A4_192 = "12b3c"

HKEY_CURRENT_USER\Software\Aasppapmmxkvs
A1_193 = "92bf1259"

HKEY_CURRENT_USER\Software\Aasppapmmxkvs
A2_193 = "7b78b626"

HKEY_CURRENT_USER\Software\Aasppapmmxkvs
A3_193 = "7a7bff28"

HKEY_CURRENT_USER\Software\Aasppapmmxkvs
A4_193 = "7b78951"

HKEY_CURRENT_USER\Software\Aasppapmmxkvs
A1_194 = "12d8714"

HKEY_CURRENT_USER\Software\Aasppapmmxkvs
A2_194 = "e4e5ecb2"

HKEY_CURRENT_USER\Software\Aasppapmmxkvs
A3_194 = "e5e6936b"

HKEY_CURRENT_USER\Software\Aasppapmmxkvs
A4_194 = "e4e5f942"

HKEY_CURRENT_USER\Software\Aasppapmmxkvs
A1_195 = "e85121ee"

HKEY_CURRENT_USER\Software\Aasppapmmxkvs
A2_195 = "4e534fe"

HKEY_CURRENT_USER\Software\Aasppapmmxkvs
A3_195 = "4f537aa"

HKEY_CURRENT_USER\Software\Aasppapmmxkvs
A4_195 = "4e535d83"

HKEY_CURRENT_USER\Software\Aasppapmmxkvs
A1_196 = "e5a9db4"

HKEY_CURRENT_USER\Software\Aasppapmmxkvs
A2_196 = "b7cdc6e"

HKEY_CURRENT_USER\Software\Aasppapmmxkvs
A3_196 = "b6c3abed"

HKEY_CURRENT_USER\Software\Aasppapmmxkvs
A4_196 = "b7cc1c4"

HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\
Windows NT\CurrentVersion\Image File Execution Options\
ctfmon.exe
Debugger = "%Windows%\Fonts\Fonts.exe"

HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\
Windows NT\CurrentVersion\Image File Execution Options\
taskmgr.exe
Debugger = "%Windows%\Fonts\tskmgr.exe"

HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\
Windows NT\CurrentVersion\Image File Execution Options\
boot.exe
Debugger = "%Windows%\Fonts\fonts.exe"

HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\
Windows NT\CurrentVersion\Image File Execution Options\
autorun.exe
Debugger = "%System%\drivers\drivers.cab.exe"

HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\
Windows NT\CurrentVersion\Image File Execution Options\
autoruns.exe
Debugger = "%System%\drivers\drivers.cab.exe"

HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\
Windows NT\CurrentVersion\Image File Execution Options\
auto.exe
Debugger = "%System%\drivers\drivers.cab.exe"

HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\
Windows NT\CurrentVersion\Image File Execution Options\
msconfig.exe
Debugger = "%Windows%\Media\rndll32.pif"

HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\
Windows NT\CurrentVersion\Image File Execution Options\
procexp.exe
Debugger = "%Windows%\pchealth\helpctr\binaries\HelpHost.com"

HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\
Windows\CurrentVersion\policies\
Explorer\Run
sys = "%Windows%\Fonts\Fonts.exe"

HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\
Windows\CurrentVersion\policies\
system
DisableStatusMessages = "1"

HKEY_CURRENT_USER\Software\Policies\
Microsoft\Windows\System\
Scripts\Logoff\0
DisplayName = "Local Group Policy"

HKEY_CURRENT_USER\Software\Policies\
Microsoft\Windows\System\
Scripts\Logoff\0
GPO-ID = "LocalGPO"

HKEY_CURRENT_USER\Software\Policies\
Microsoft\Windows\System\
Scripts\Logoff\0
GPOName = "Local Group Policy"

HKEY_CURRENT_USER\Software\Policies\
Microsoft\Windows\System\
Scripts\Logoff\0
SOM-ID = "Local"

HKEY_CURRENT_USER\Software\Policies\
Microsoft\Windows\System\
Scripts\Logoff\0\
0
Script = "%Windows%\Cursors\Boom.vbs"

HKEY_LOCAL_MACHINE\SOFTWARE\Policies\
Microsoft\Windows\System\
Scripts\Shutdown\0
DisplayName = "Local Group Policy"

HKEY_LOCAL_MACHINE\SOFTWARE\Policies\
Microsoft\Windows\System\
Scripts\Shutdown\0
GPO-ID = "LocalGPO"

HKEY_LOCAL_MACHINE\SOFTWARE\Policies\
Microsoft\Windows\System\
Scripts\Shutdown\0
GPOName = "Local Group Policy"

HKEY_LOCAL_MACHINE\SOFTWARE\Policies\
Microsoft\Windows\System\
Scripts\Shutdown\0
SOM-ID = "Local"

HKEY_LOCAL_MACHINE\SOFTWARE\Policies\
Microsoft\Windows\System\
Scripts\Shutdown\0\
0
Script = "%Windows%\Cursors\Boom.vbs"

HKEY_LOCAL_MACHINE\SOFTWARE\Policies\
Microsoft\Windows\System\
Scripts\Startup\0
DisplayName = "Local Group Policy"

HKEY_LOCAL_MACHINE\SOFTWARE\Policies\
Microsoft\Windows\System\
Scripts\Startup\0
GPO-ID = "LocalGPO"

HKEY_LOCAL_MACHINE\SOFTWARE\Policies\
Microsoft\Windows\System\
Scripts\Startup\0
GPOName = "Local Group Policy"

HKEY_LOCAL_MACHINE\SOFTWARE\Policies\
Microsoft\Windows\System\
Scripts\Startup\0
SOM-ID = "Local"

HKEY_LOCAL_MACHINE\SOFTWARE\Policies\
Microsoft\Windows\System\
Scripts\Startup\0\
0
Script = "%Windows%\Cursors\Boom.vbs"

HKEY_LOCAL_MACHINE\SOFTWARE\Classes\
exefile
NeverShowExt = "1"

HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\
Security Center
UacDisableNotify = "1"

HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\
Security Center\Svc
AntiVirusOverride = "1"

HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\
Security Center\Svc
AntiVirusDisableNotify = "1"

HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\
Security Center\Svc
FirewallDisableNotify = "1"

HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\
Security Center\Svc
FirewallOverride = "1"

HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\
Security Center\Svc
UpdatesDisableNotify = "1"

HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\
Security Center\Svc
UacDisableNotify = "1"

HKEY_CURRENT_USER\Software\Microsoft\
Windows\CurrentVersion\Internet Settings
GlobalUserOffline = "0"

HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\
Windows\CurrentVersion\policies\
system
EnableLUA = "0"

HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\
Services\SharedAccess\Parameters\
FirewallPolicy\StandardProfile\AuthorizedApplications\
List
{malware path and file name} = "{malware path and file name}:*:enabled:ipsec"

HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\
Services\SharedAccess\Parameters\
FirewallPolicy\StandardProfile
EnableFirewall = "0"

HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\
Services\SharedAccess\Parameters\
FirewallPolicy\StandardProfile
DoNotAllowExceptions = "0"

HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\
Services\SharedAccess\Parameters\
FirewallPolicy\StandardProfile
DisableNotifications = "1"

HKEY_CURRENT_USER\Software\Aasppapmmxkvs\
-993627007
1768776769 = "93"

HKEY_CURRENT_USER\Software\Aasppapmmxkvs\
-993627007
-757413758 = "0"

HKEY_CURRENT_USER\Software\Aasppapmmxkvs\
-993627007
1011363011 = "0"

HKEY_CURRENT_USER\Software\Aasppapmmxkvs\
-993627007
-1514827516 = "23"

HKEY_CURRENT_USER\Software\Aasppapmmxkvs\
-993627007
253949253 = "1a1"

HKEY_CURRENT_USER\Software\Aasppapmmxkvs\
-993627007
2022726022 = "{random characters}"

HKEY_CURRENT_USER\Software\Aasppapmmxkvs\
-993627007
-503464505 = "{random characters}"

HKEY_CURRENT_USER\Software\Aasppapmmxkvs
A1_0 = "cc96283a"

HKEY_CURRENT_USER\Software\Aasppapmmxkvs
A2_0 = "158d"

HKEY_CURRENT_USER\Software\Aasppapmmxkvs
A3_0 = "136a29"

HKEY_CURRENT_USER\Software\Aasppapmmxkvs
A4_0 = "0"

HKEY_CURRENT_USER\Software\Aasppapmmxkvs
A1_1 = "274b5a28"

HKEY_CURRENT_USER\Software\Aasppapmmxkvs
A2_1 = "696d71cc"

HKEY_CURRENT_USER\Software\Aasppapmmxkvs
A3_1 = "686ee68"

HKEY_CURRENT_USER\Software\Aasppapmmxkvs
A4_1 = "696d6441"

HKEY_CURRENT_USER\Software\Aasppapmmxkvs
A1_2 = "966c8ca7"

HKEY_CURRENT_USER\Software\Aasppapmmxkvs
A2_2 = "d2daddf"

HKEY_CURRENT_USER\Software\Aasppapmmxkvs
A3_2 = "d3d9a2ab"

HKEY_CURRENT_USER\Software\Aasppapmmxkvs
A4_2 = "d2dac882"

HKEY_CURRENT_USER\Software\Aasppapmmxkvs
A1_3 = "2b12cf3"

HKEY_CURRENT_USER\Software\Aasppapmmxkvs
A2_3 = "3c48394e"

HKEY_CURRENT_USER\Software\Aasppapmmxkvs
A3_3 = "3d4b46ea"

HKEY_CURRENT_USER\Software\Aasppapmmxkvs
A4_3 = "3c482cc3"

HKEY_CURRENT_USER\Software\Aasppapmmxkvs
A1_4 = "41c4c3fd"

HKEY_CURRENT_USER\Software\Aasppapmmxkvs
A2_4 = "a5b58489"

HKEY_CURRENT_USER\Software\Aasppapmmxkvs
A3_4 = "a4b6fb2d"

HKEY_CURRENT_USER\Software\Aasppapmmxkvs
A4_4 = "a5b5914"

HKEY_CURRENT_USER\Software\Aasppapmmxkvs
A1_5 = "311bc98d"

HKEY_CURRENT_USER\Software\Aasppapmmxkvs
A2_5 = "f22ec8"

HKEY_CURRENT_USER\Software\Aasppapmmxkvs
A3_5 = "e219f6c"

HKEY_CURRENT_USER\Software\Aasppapmmxkvs
A4_5 = "f22f545"

HKEY_CURRENT_USER\Software\Aasppapmmxkvs
A1_6 = "2c2cd"

HKEY_CURRENT_USER\Software\Aasppapmmxkvs
A2_6 = "7894cb"

HKEY_CURRENT_USER\Software\Aasppapmmxkvs
A3_6 = "799333af"

HKEY_CURRENT_USER\Software\Aasppapmmxkvs
A4_6 = "7895986"

HKEY_CURRENT_USER\Software\Aasppapmmxkvs
A1_7 = "9deeef94"

HKEY_CURRENT_USER\Software\Aasppapmmxkvs
A2_7 = "e1fda84a"

HKEY_CURRENT_USER\Software\Aasppapmmxkvs
A3_7 = "efed7ee"

HKEY_CURRENT_USER\Software\Aasppapmmxkvs
A4_7 = "e1fdbdc7"

HKEY_CURRENT_USER\Software\Aasppapmmxkvs
A1_8 = "b2e23ad"

HKEY_CURRENT_USER\Software\Aasppapmmxkvs
A2_8 = "4b6b3785"

HKEY_CURRENT_USER\Software\Aasppapmmxkvs
A3_8 = "4a684821"

HKEY_CURRENT_USER\Software\Aasppapmmxkvs
A4_8 = "4b6b228"

HKEY_CURRENT_USER\Software\Aasppapmmxkvs
A1_9 = "1f34131"

HKEY_CURRENT_USER\Software\Aasppapmmxkvs
A2_9 = "b4d893c4"

HKEY_CURRENT_USER\Software\Aasppapmmxkvs
A3_9 = "b5dbec6"

HKEY_CURRENT_USER\Software\Aasppapmmxkvs
A4_9 = "b4d88649"

HKEY_CURRENT_USER\Software\Aasppapmmxkvs
A1_10 = "ae7fae37"

HKEY_CURRENT_USER\Software\Aasppapmmxkvs
A2_10 = "1e45f5e2"

HKEY_CURRENT_USER\Software\Aasppapmmxkvs
A3_10 = "1f468a3"

HKEY_CURRENT_USER\Software\Aasppapmmxkvs
A4_10 = "1e45ea8a"

HKEY_CURRENT_USER\Software\Aasppapmmxkvs
A1_11 = "f7edf9a"

HKEY_CURRENT_USER\Software\Aasppapmmxkvs
A2_11 = "87b3548f"

HKEY_CURRENT_USER\Software\Aasppapmmxkvs
A3_11 = "86b24e2"

HKEY_CURRENT_USER\Software\Aasppapmmxkvs
A4_11 = "87b34ecb"

HKEY_CURRENT_USER\Software\Aasppapmmxkvs
A1_12 = "5c75c941"

HKEY_CURRENT_USER\Software\Aasppapmmxkvs
A2_12 = "f12a5"

HKEY_CURRENT_USER\Software\Aasppapmmxkvs
A3_12 = "f23d925"

HKEY_CURRENT_USER\Software\Aasppapmmxkvs
A4_12 = "f12b3c"

HKEY_CURRENT_USER\Software\Aasppapmmxkvs
A1_13 = "f1ea3a84"

HKEY_CURRENT_USER\Software\Aasppapmmxkvs
A2_13 = "5a8ede9"

HKEY_CURRENT_USER\Software\Aasppapmmxkvs
A3_13 = "5b8d7d64"

HKEY_CURRENT_USER\Software\Aasppapmmxkvs
A4_13 = "5a8e174d"

HKEY_CURRENT_USER\Software\Aasppapmmxkvs
A1_14 = "4e853d57"

HKEY_CURRENT_USER\Software\Aasppapmmxkvs
A2_14 = "c3fb6e7"

HKEY_CURRENT_USER\Software\Aasppapmmxkvs
A3_14 = "c2f811a7"

HKEY_CURRENT_USER\Software\Aasppapmmxkvs
A4_14 = "c3fb7b8e"

HKEY_CURRENT_USER\Software\Aasppapmmxkvs
A1_15 = "6d42f8fd"

HKEY_CURRENT_USER\Software\Aasppapmmxkvs
A2_15 = "2d68c11"

HKEY_CURRENT_USER\Software\Aasppapmmxkvs
A3_15 = "2c6bb5e6"

HKEY_CURRENT_USER\Software\Aasppapmmxkvs
A4_15 = "2d68dfcf"

HKEY_CURRENT_USER\Software\Aasppapmmxkvs
A1_16 = "f4e515b"

HKEY_CURRENT_USER\Software\Aasppapmmxkvs
A2_16 = "96d65ade"

HKEY_CURRENT_USER\Software\Aasppapmmxkvs
A3_16 = "97d52e39"

HKEY_CURRENT_USER\Software\Aasppapmmxkvs
A4_16 = "96d6441"

HKEY_CURRENT_USER\Software\Aasppapmmxkvs
A1_17 = "23ae96"

HKEY_CURRENT_USER\Software\Aasppapmmxkvs
A2_17 = "43b4d8"

HKEY_CURRENT_USER\Software\Aasppapmmxkvs
A3_17 = "14c278"

HKEY_CURRENT_USER\Software\Aasppapmmxkvs
A4_17 = "43a851"

HKEY_CURRENT_USER\Software\Aasppapmmxkvs
A1_18 = "9f891cbe"

HKEY_CURRENT_USER\Software\Aasppapmmxkvs
A2_18 = "69b11127"

HKEY_CURRENT_USER\Software\Aasppapmmxkvs
A3_18 = "68b266bb"

HKEY_CURRENT_USER\Software\Aasppapmmxkvs
A4_18 = "69b1c92"

HKEY_CURRENT_USER\Software\Aasppapmmxkvs
A1_19 = "17b96186"

HKEY_CURRENT_USER\Software\Aasppapmmxkvs
A2_19 = "d31e56bb"

HKEY_CURRENT_USER\Software\Aasppapmmxkvs
A3_19 = "d21d1afa"

HKEY_CURRENT_USER\Software\Aasppapmmxkvs
A4_19 = "d31e7d3"

HKEY_CURRENT_USER\Software\Aasppapmmxkvs
A1_20 = "f7c32c3d"

HKEY_CURRENT_USER\Software\Aasppapmmxkvs
A2_20 = "3c8bcc63"

HKEY_CURRENT_USER\Software\Aasppapmmxkvs
A3_20 = "3d88bf3d"

HKEY_CURRENT_USER\Software\Aasppapmmxkvs
A4_20 = "3c8bd514"

HKEY_CURRENT_USER\Software\Aasppapmmxkvs
A1_21 = "95fa4b6b"

HKEY_CURRENT_USER\Software\Aasppapmmxkvs
A2_21 = "a5f91c9f"

HKEY_CURRENT_USER\Software\Aasppapmmxkvs
A3_21 = "a4fa537c"

HKEY_CURRENT_USER\Software\Aasppapmmxkvs
A4_21 = "a5f93955"

HKEY_CURRENT_USER\Software\Aasppapmmxkvs
A1_22 = "d4c64dc4"

HKEY_CURRENT_USER\Software\Aasppapmmxkvs
A2_22 = "f66bda1"

HKEY_CURRENT_USER\Software\Aasppapmmxkvs
A3_22 = "e65f7bf"

HKEY_CURRENT_USER\Software\Aasppapmmxkvs
A4_22 = "f669d96"

HKEY_CURRENT_USER\Software\Aasppapmmxkvs
A1_23 = "3db27b81"

HKEY_CURRENT_USER\Software\Aasppapmmxkvs
A2_23 = "78d41c5"

HKEY_CURRENT_USER\Software\Aasppapmmxkvs
A3_23 = "79d76bfe"

HKEY_CURRENT_USER\Software\Aasppapmmxkvs
A4_23 = "78d41d7"

HKEY_CURRENT_USER\Software\Aasppapmmxkvs
A1_24 = "2bcc9e4"

HKEY_CURRENT_USER\Software\Aasppapmmxkvs
A2_24 = "e241719a"

HKEY_CURRENT_USER\Software\Aasppapmmxkvs
A3_24 = "e342c31"

HKEY_CURRENT_USER\Software\Aasppapmmxkvs
A4_24 = "e2416618"

HKEY_CURRENT_USER\Software\Aasppapmmxkvs
A1_25 = "9a9db85"

HKEY_CURRENT_USER\Software\Aasppapmmxkvs
A2_25 = "4baed4fa"

HKEY_CURRENT_USER\Software\Aasppapmmxkvs
A3_25 = "4aada7"

HKEY_CURRENT_USER\Software\Aasppapmmxkvs
A4_25 = "4baeca59"

HKEY_CURRENT_USER\Software\Aasppapmmxkvs
A1_26 = "68833653"

HKEY_CURRENT_USER\Software\Aasppapmmxkvs
A2_26 = "b51cf14"

HKEY_CURRENT_USER\Software\Aasppapmmxkvs
A3_26 = "b41f44b3"

HKEY_CURRENT_USER\Software\Aasppapmmxkvs
A4_26 = "b51c2e9a"

HKEY_CURRENT_USER\Software\Aasppapmmxkvs
A1_27 = "3ef2fa84"

HKEY_CURRENT_USER\Software\Aasppapmmxkvs
A2_27 = "1e898d5b"

HKEY_CURRENT_USER\Software\Aasppapmmxkvs
A3_27 = "1f8af8f2"

HKEY_CURRENT_USER\Software\Aasppapmmxkvs
A4_27 = "1e8992db"

HKEY_CURRENT_USER\Software\Aasppapmmxkvs
A1_28 = "db7cd2dd"

HKEY_CURRENT_USER\Software\Aasppapmmxkvs
A2_28 = "87f6d68f"

HKEY_CURRENT_USER\Software\Aasppapmmxkvs
A3_28 = "86f59d35"

HKEY_CURRENT_USER\Software\Aasppapmmxkvs
A4_28 = "87f6f71c"

HKEY_CURRENT_USER\Software\Aasppapmmxkvs
A1_29 = "4e416f"

HKEY_CURRENT_USER\Software\Aasppapmmxkvs
A2_29 = "f1644619"

HKEY_CURRENT_USER\Software\Aasppapmmxkvs
A3_29 = "f673174"

HKEY_CURRENT_USER\Software\Aasppapmmxkvs
A4_29 = "f1645b5d"

HKEY_CURRENT_USER\Software\Aasppapmmxkvs
A1_30 = "da44fb57"

HKEY_CURRENT_USER\Software\Aasppapmmxkvs
A2_30 = "5ad1a461"

HKEY_CURRENT_USER\Software\Aasppapmmxkvs
A3_30 = "5bd2d5b7"

HKEY_CURRENT_USER\Software\Aasppapmmxkvs
A4_30 = "5ad1bf9e"

HKEY_CURRENT_USER\Software\Aasppapmmxkvs
A1_31 = "59464a8a"

HKEY_CURRENT_USER\Software\Aasppapmmxkvs
A2_31 = "c43f615"

HKEY_CURRENT_USER\Software\Aasppapmmxkvs
A3_31 = "c53c49f6"

HKEY_CURRENT_USER\Software\Aasppapmmxkvs
A4_31 = "c43f23df"

HKEY_CURRENT_USER\Software\Aasppapmmxkvs
A1_32 = "28ec3d71"

HKEY_CURRENT_USER\Software\Aasppapmmxkvs
A2_32 = "2dac9fa5"

HKEY_CURRENT_USER\Software\Aasppapmmxkvs
A3_32 = "2cafe29"

HKEY_CURRENT_USER\Software\Aasppapmmxkvs
A4_32 = "2dac882"

HKEY_CURRENT_USER\Software\Aasppapmmxkvs
A1_33 = "f5679e3d"

HKEY_CURRENT_USER\Software\Aasppapmmxkvs
A2_33 = "9719f969"

HKEY_CURRENT_USER\Software\Aasppapmmxkvs
A3_33 = "961a8648"

HKEY_CURRENT_USER\Software\Aasppapmmxkvs
A4_33 = "9719ec61"

HKEY_CURRENT_USER\Software\Aasppapmmxkvs
A1_34 = "e1dd31ec"

HKEY_CURRENT_USER\Software\Aasppapmmxkvs
A2_34 = "87491e"

HKEY_CURRENT_USER\Software\Aasppapmmxkvs
A3_34 = "1843a8b"

HKEY_CURRENT_USER\Software\Aasppapmmxkvs
A4_34 = "875a2"

HKEY_CURRENT_USER\Software\Aasppapmmxkvs
A1_35 = "3582dfaf"

HKEY_CURRENT_USER\Software\Aasppapmmxkvs
A2_35 = "69f4afcf"

HKEY_CURRENT_USER\Software\Aasppapmmxkvs
A3_35 = "68f7deca"

HKEY_CURRENT_USER\Software\Aasppapmmxkvs
A4_35 = "69f4b4e3"

HKEY_CURRENT_USER\Software\Aasppapmmxkvs
A1_36 = "cfa297d"

HKEY_CURRENT_USER\Software\Aasppapmmxkvs
A2_36 = "d36238b7"

HKEY_CURRENT_USER\Software\Aasppapmmxkvs
A3_36 = "d26173d"

HKEY_CURRENT_USER\Software\Aasppapmmxkvs
A4_36 = "d3621924"

HKEY_CURRENT_USER\Software\Aasppapmmxkvs
A1_37 = "a8641de"

HKEY_CURRENT_USER\Software\Aasppapmmxkvs
A2_37 = "3ccf5d6e"

HKEY_CURRENT_USER\Software\Aasppapmmxkvs
A3_37 = "3dcc174c"

HKEY_CURRENT_USER\Software\Aasppapmmxkvs
A4_37 = "3ccf7d65"

HKEY_CURRENT_USER\Software\Aasppapmmxkvs
A1_38 = "94c3bf6"

HKEY_CURRENT_USER\Software\Aasppapmmxkvs
A2_38 = "a63cf8be"

HKEY_CURRENT_USER\Software\Aasppapmmxkvs
A3_38 = "a73f8b8f"

HKEY_CURRENT_USER\Software\Aasppapmmxkvs
A4_38 = "a63ce1a6"

HKEY_CURRENT_USER\Software\Aasppapmmxkvs
A1_39 = "2f33d32"

HKEY_CURRENT_USER\Software\Aasppapmmxkvs
A2_39 = "faa5ec7"

HKEY_CURRENT_USER\Software\Aasppapmmxkvs
A3_39 = "ea92fce"

HKEY_CURRENT_USER\Software\Aasppapmmxkvs
A4_39 = "faa45e7"

HKEY_CURRENT_USER\Software\Aasppapmmxkvs
A1_40 = "e56beee1"

HKEY_CURRENT_USER\Software\Aasppapmmxkvs
A2_40 = "7917b499"

HKEY_CURRENT_USER\Software\Aasppapmmxkvs
A3_40 = "7814c1"

HKEY_CURRENT_USER\Software\Aasppapmmxkvs
A4_40 = "7917aa28"

HKEY_CURRENT_USER\Software\Aasppapmmxkvs
A1_41 = "d9f97534"

HKEY_CURRENT_USER\Software\Aasppapmmxkvs
A2_41 = "e28516f6"

HKEY_CURRENT_USER\Software\Aasppapmmxkvs
A3_41 = "e386644"

HKEY_CURRENT_USER\Software\Aasppapmmxkvs
A4_41 = "e285e69"

HKEY_CURRENT_USER\Software\Aasppapmmxkvs
A1_42 = "73bc56f3"

HKEY_CURRENT_USER\Software\Aasppapmmxkvs
A2_42 = "4bf26f39"

HKEY_CURRENT_USER\Software\Aasppapmmxkvs
A3_42 = "4af11883"

HKEY_CURRENT_USER\Software\Aasppapmmxkvs
A4_42 = "4bf272aa"

HKEY_CURRENT_USER\Software\Aasppapmmxkvs
A1_43 = "93c2dd46"

HKEY_CURRENT_USER\Software\Aasppapmmxkvs
A2_43 = "b55fc71c"

HKEY_CURRENT_USER\Software\Aasppapmmxkvs
A3_43 = "b45cbcc2"

HKEY_CURRENT_USER\Software\Aasppapmmxkvs
A4_43 = "b55fd6eb"

HKEY_CURRENT_USER\Software\Aasppapmmxkvs
A1_44 = "1362c4c"

HKEY_CURRENT_USER\Software\Aasppapmmxkvs
A2_44 = "1ecd22d5"

HKEY_CURRENT_USER\Software\Aasppapmmxkvs
A3_44 = "1fce515"

HKEY_CURRENT_USER\Software\Aasppapmmxkvs
A4_44 = "1ecd3b2c"

HKEY_CURRENT_USER\Software\Aasppapmmxkvs
A1_45 = "91b34525"

HKEY_CURRENT_USER\Software\Aasppapmmxkvs
A2_45 = "883a88f"

HKEY_CURRENT_USER\Software\Aasppapmmxkvs
A3_45 = "8939f544"

HKEY_CURRENT_USER\Software\Aasppapmmxkvs
A4_45 = "883a9f6d"

HKEY_CURRENT_USER\Software\Aasppapmmxkvs
A1_46 = "49b7affb"

HKEY_CURRENT_USER\Software\Aasppapmmxkvs
A2_46 = "f1a81fdf"

HKEY_CURRENT_USER\Software\Aasppapmmxkvs
A3_46 = "fab6987"

HKEY_CURRENT_USER\Software\Aasppapmmxkvs
A4_46 = "f1a83ae"

HKEY_CURRENT_USER\Software\Aasppapmmxkvs
A1_47 = "2ab14b3"

HKEY_CURRENT_USER\Software\Aasppapmmxkvs
A2_47 = "5b157fe8"

HKEY_CURRENT_USER\Software\Aasppapmmxkvs
A3_47 = "5a16dc6"

HKEY_CURRENT_USER\Software\Aasppapmmxkvs
A4_47 = "5b1567ef"

HKEY_CURRENT_USER\Software\Aasppapmmxkvs
A1_48 = "daced68c"

HKEY_CURRENT_USER\Software\Aasppapmmxkvs
A2_48 = "c482d61"

HKEY_CURRENT_USER\Software\Aasppapmmxkvs
A3_48 = "c581a619"

HKEY_CURRENT_USER\Software\Aasppapmmxkvs
A4_48 = "c482cc3"

HKEY_CURRENT_USER\Software\Aasppapmmxkvs
A1_49 = "aec2e829"

HKEY_CURRENT_USER\Software\Aasppapmmxkvs
A2_49 = "2df15bb"

HKEY_CURRENT_USER\Software\Aasppapmmxkvs
A3_49 = "2cf35a58"

HKEY_CURRENT_USER\Software\Aasppapmmxkvs
A4_49 = "2df371"

HKEY_CURRENT_USER\Software\Aasppapmmxkvs
A1_50 = "8b3a277a"

HKEY_CURRENT_USER\Software\Aasppapmmxkvs
A2_50 = "975db79f"

HKEY_CURRENT_USER\Software\Aasppapmmxkvs
A3_50 = "965efe9b"

HKEY_CURRENT_USER\Software\Aasppapmmxkvs
A4_50 = "975d94b2"

HKEY_CURRENT_USER\Software\Aasppapmmxkvs
A1_51 = "97ddb1ad"

HKEY_CURRENT_USER\Software\Aasppapmmxkvs
A2_51 = "cae44d"

HKEY_CURRENT_USER\Software\Aasppapmmxkvs
A3_51 = "1c992da"

HKEY_CURRENT_USER\Software\Aasppapmmxkvs
A4_51 = "caf8f3"

HKEY_CURRENT_USER\Software\Aasppapmmxkvs
A1_52 = "6349bde7"

HKEY_CURRENT_USER\Software\Aasppapmmxkvs
A2_52 = "6a386db"

HKEY_CURRENT_USER\Software\Aasppapmmxkvs
A3_52 = "6b3b371d"

HKEY_CURRENT_USER\Software\Aasppapmmxkvs
A4_52 = "6a385d34"

HKEY_CURRENT_USER\Software\Aasppapmmxkvs
A1_53 = "9d966c2c"

HKEY_CURRENT_USER\Software\Aasppapmmxkvs
A2_53 = "d3a5e122"

HKEY_CURRENT_USER\Software\Aasppapmmxkvs
A3_53 = "d2a6ab5c"

HKEY_CURRENT_USER\Software\Aasppapmmxkvs
A4_53 = "d3a5c175"

HKEY_CURRENT_USER\Software\Aasppapmmxkvs
A1_54 = "ca5e8ffa"

HKEY_CURRENT_USER\Software\Aasppapmmxkvs
A2_54 = "3d1369b"

HKEY_CURRENT_USER\Software\Aasppapmmxkvs
A3_54 = "3c14f9f"

HKEY_CURRENT_USER\Software\Aasppapmmxkvs
A4_54 = "3d1325b6"

HKEY_CURRENT_USER\Software\Aasppapmmxkvs
A1_55 = "8f85aba1"

HKEY_CURRENT_USER\Software\Aasppapmmxkvs
A2_55 = "a689592"

HKEY_CURRENT_USER\Software\Aasppapmmxkvs
A3_55 = "a783e3de"

HKEY_CURRENT_USER\Software\Aasppapmmxkvs
A4_55 = "a6889f7"

HKEY_CURRENT_USER\Software\Aasppapmmxkvs
A1_56 = "bd4fe36e"

HKEY_CURRENT_USER\Software\Aasppapmmxkvs
A2_56 = "fedf1cf"

HKEY_CURRENT_USER\Software\Aasppapmmxkvs
A3_56 = "eee8411"

HKEY_CURRENT_USER\Software\Aasppapmmxkvs
A4_56 = "fedee38"

HKEY_CURRENT_USER\Software\Aasppapmmxkvs
A1_57 = "af6e72"

HKEY_CURRENT_USER\Software\Aasppapmmxkvs
A2_57 = "795b486"

HKEY_CURRENT_USER\Software\Aasppapmmxkvs
A3_57 = "7858385"

HKEY_CURRENT_USER\Software\Aasppapmmxkvs
A4_57 = "795b5279"

HKEY_CURRENT_USER\Software\Aasppapmmxkvs
A1_58 = "39af8e3"

HKEY_CURRENT_USER\Software\Aasppapmmxkvs
A2_58 = "e2c8aa82"

HKEY_CURRENT_USER\Software\Aasppapmmxkvs
A3_58 = "e3cbdc93"

HKEY_CURRENT_USER\Software\Aasppapmmxkvs
A4_58 = "e2c8b6ba"

HKEY_CURRENT_USER\Software\Aasppapmmxkvs
A1_59 = "2dcaf3ab"

HKEY_CURRENT_USER\Software\Aasppapmmxkvs
A2_59 = "4c36393c"

HKEY_CURRENT_USER\Software\Aasppapmmxkvs
A3_59 = "4d357d2"

HKEY_CURRENT_USER\Software\Aasppapmmxkvs
A4_59 = "4c361afb"

HKEY_CURRENT_USER\Software\Aasppapmmxkvs
A1_60 = "6da93765"

HKEY_CURRENT_USER\Software\Aasppapmmxkvs
A2_60 = "b5a3696a"

HKEY_CURRENT_USER\Software\Aasppapmmxkvs
A3_60 = "b4a1515"

HKEY_CURRENT_USER\Software\Aasppapmmxkvs
A4_60 = "b5a37f3c"

HKEY_CURRENT_USER\Software\Aasppapmmxkvs
A1_61 = "7d8bca24"

HKEY_CURRENT_USER\Software\Aasppapmmxkvs
A2_61 = "1f1c2ee"

HKEY_CURRENT_USER\Software\Aasppapmmxkvs
A3_61 = "1e138954"

HKEY_CURRENT_USER\Software\Aasppapmmxkvs
A4_61 = "1f1e37d"

HKEY_CURRENT_USER\Software\Aasppapmmxkvs
A1_62 = "bc1d36f1"

HKEY_CURRENT_USER\Software\Aasppapmmxkvs
A2_62 = "887e5e24"

HKEY_CURRENT_USER\Software\Aasppapmmxkvs
A3_62 = "897d2d97"

HKEY_CURRENT_USER\Software\Aasppapmmxkvs
A4_62 = "887e47be"

HKEY_CURRENT_USER\Software\Aasppapmmxkvs
A1_63 = "7c3e4da6"

HKEY_CURRENT_USER\Software\Aasppapmmxkvs
A2_63 = "f1ebb6e2"

HKEY_CURRENT_USER\Software\Aasppapmmxkvs
A3_63 = "fe8c1d6"

HKEY_CURRENT_USER\Software\Aasppapmmxkvs
A4_63 = "f1ebabff"

HKEY_CURRENT_USER\Software\Aasppapmmxkvs
A1_64 = "4cfa6314"

HKEY_CURRENT_USER\Software\Aasppapmmxkvs
A2_64 = "5b59ecc"

HKEY_CURRENT_USER\Software\Aasppapmmxkvs
A3_64 = "5a5a7a69"

HKEY_CURRENT_USER\Software\Aasppapmmxkvs
A4_64 = "5b5914"

HKEY_CURRENT_USER\Software\Aasppapmmxkvs
A1_65 = "d52fcd8"

HKEY_CURRENT_USER\Software\Aasppapmmxkvs
A2_65 = "c4c668a5"

HKEY_CURRENT_USER\Software\Aasppapmmxkvs
A3_65 = "c5c51ea8"

HKEY_CURRENT_USER\Software\Aasppapmmxkvs
A4_65 = "c4c67481"

HKEY_CURRENT_USER\Software\Aasppapmmxkvs
A1_66 = "7fa9898f"

HKEY_CURRENT_USER\Software\Aasppapmmxkvs
A2_66 = "2e33fbbd"

HKEY_CURRENT_USER\Software\Aasppapmmxkvs
A3_66 = "2f3b2eb"

HKEY_CURRENT_USER\Software\Aasppapmmxkvs
A4_66 = "2e33d8c2"

HKEY_CURRENT_USER\Software\Aasppapmmxkvs
A1_67 = "52284f5a"

HKEY_CURRENT_USER\Software\Aasppapmmxkvs
A2_67 = "97a125ee"

HKEY_CURRENT_USER\Software\Aasppapmmxkvs
A3_67 = "96a2572a"

HKEY_CURRENT_USER\Software\Aasppapmmxkvs
A4_67 = "97a13d3"

HKEY_CURRENT_USER\Software\Aasppapmmxkvs
A1_68 = "6338291d"

HKEY_CURRENT_USER\Software\Aasppapmmxkvs
A2_68 = "1eb89f"

HKEY_CURRENT_USER\Software\Aasppapmmxkvs
A3_68 = "dcb6d"

HKEY_CURRENT_USER\Software\Aasppapmmxkvs
A4_68 = "1ea144"

HKEY_CURRENT_USER\Software\Aasppapmmxkvs
A1_69 = "7e2fabe"

HKEY_CURRENT_USER\Software\Aasppapmmxkvs
A2_69 = "6a7c1b34"

HKEY_CURRENT_USER\Software\Aasppapmmxkvs
A3_69 = "6b7f6fac"

HKEY_CURRENT_USER\Software\Aasppapmmxkvs
A4_69 = "6a7c585"

HKEY_CURRENT_USER\Software\Aasppapmmxkvs
A1_70 = "3c1499f"

HKEY_CURRENT_USER\Software\Aasppapmmxkvs
A2_70 = "d3e971a9"

HKEY_CURRENT_USER\Software\Aasppapmmxkvs
A3_70 = "d2ea3ef"

HKEY_CURRENT_USER\Software\Aasppapmmxkvs
A4_70 = "d3e969c6"

HKEY_CURRENT_USER\Software\Aasppapmmxkvs
A1_71 = "74f9e5e"

HKEY_CURRENT_USER\Software\Aasppapmmxkvs
A2_71 = "3d56d1e5"

HKEY_CURRENT_USER\Software\Aasppapmmxkvs
A3_71 = "3c55a42e"

HKEY_CURRENT_USER\Software\Aasppapmmxkvs
A4_71 = "3d56ce7"

HKEY_CURRENT_USER\Software\Aasppapmmxkvs
A1_72 = "733b3f4"

HKEY_CURRENT_USER\Software\Aasppapmmxkvs
A2_72 = "a6c41435"

HKEY_CURRENT_USER\Software\Aasppapmmxkvs
A3_72 = "a7c75861"

HKEY_CURRENT_USER\Software\Aasppapmmxkvs
A4_72 = "a6c43248"

HKEY_CURRENT_USER\Software\Aasppapmmxkvs
A1_73 = "ac45dad6"

HKEY_CURRENT_USER\Software\Aasppapmmxkvs
A2_73 = "1318c4"

HKEY_CURRENT_USER\Software\Aasppapmmxkvs
A3_73 = "1132fca"

HKEY_CURRENT_USER\Software\Aasppapmmxkvs
A4_73 = "1319689"

HKEY_CURRENT_USER\Software\Aasppapmmxkvs
A1_74 = "d2135a95"

HKEY_CURRENT_USER\Software\Aasppapmmxkvs
A2_74 = "799eeb5d"

HKEY_CURRENT_USER\Software\Aasppapmmxkvs
A3_74 = "789d9e3"

HKEY_CURRENT_USER\Software\Aasppapmmxkvs
A4_74 = "799efaca"

HKEY_CURRENT_USER\Software\Aasppapmmxkvs
A1_75 = "7562a5e"

HKEY_CURRENT_USER\Software\Aasppapmmxkvs
A2_75 = "e3c487c"

HKEY_CURRENT_USER\Software\Aasppapmmxkvs
A3_75 = "e2f3522"

HKEY_CURRENT_USER\Software\Aasppapmmxkvs
A4_75 = "e3c5fb"

HKEY_CURRENT_USER\Software\Aasppapmmxkvs
A1_76 = "37bad2"

HKEY_CURRENT_USER\Software\Aasppapmmxkvs
A2_76 = "4c79d56f"

HKEY_CURRENT_USER\Software\Aasppapmmxkvs
A3_76 = "4d7aa965"

HKEY_CURRENT_USER\Software\Aasppapmmxkvs
A4_76 = "4c79c34c"

HKEY_CURRENT_USER\Software\Aasppapmmxkvs
A1_77 = "5adec"

HKEY_CURRENT_USER\Software\Aasppapmmxkvs
A2_77 = "b5e73ead"

HKEY_CURRENT_USER\Software\Aasppapmmxkvs
A3_77 = "b4e44da4"

HKEY_CURRENT_USER\Software\Aasppapmmxkvs
A4_77 = "b5e7278d"

HKEY_CURRENT_USER\Software\Aasppapmmxkvs
A1_78 = "5bffa93"

HKEY_CURRENT_USER\Software\Aasppapmmxkvs
A2_78 = "1f54979"

HKEY_CURRENT_USER\Software\Aasppapmmxkvs
A3_78 = "1e57e1e7"

HKEY_CURRENT_USER\Software\Aasppapmmxkvs
A4_78 = "1f548bce"

HKEY_CURRENT_USER\Software\Aasppapmmxkvs
A1_79 = "11aed756"

HKEY_CURRENT_USER\Software\Aasppapmmxkvs
A2_79 = "88c1e6c"

HKEY_CURRENT_USER\Software\Aasppapmmxkvs
A3_79 = "89c29a26"

HKEY_CURRENT_USER\Software\Aasppapmmxkvs
A4_79 = "88c1ff"

HKEY_CURRENT_USER\Software\Aasppapmmxkvs
A1_80 = "c7625d"

HKEY_CURRENT_USER\Software\Aasppapmmxkvs
A2_80 = "f22f49fa"

HKEY_CURRENT_USER\Software\Aasppapmmxkvs
A3_80 = "f32c3e79"

HKEY_CURRENT_USER\Software\Aasppapmmxkvs
A4_80 = "f22f545"

HKEY_CURRENT_USER\Software\Aasppapmmxkvs
A1_81 = "7a7fd9df"

HKEY_CURRENT_USER\Software\Aasppapmmxkvs
A2_81 = "5b9ca53b"

HKEY_CURRENT_USER\Software\Aasppapmmxkvs
A3_81 = "5a9fd2b8"

HKEY_CURRENT_USER\Software\Aasppapmmxkvs
A4_81 = "5b9cb891"

HKEY_CURRENT_USER\Software\Aasppapmmxkvs
A1_82 = "6492518d"

HKEY_CURRENT_USER\Software\Aasppapmmxkvs
A2_82 = "c5af6"

HKEY_CURRENT_USER\Software\Aasppapmmxkvs
A3_82 = "c4976fb"

HKEY_CURRENT_USER\Software\Aasppapmmxkvs
A4_82 = "c5a1cd2"

HKEY_CURRENT_USER\Software\Aasppapmmxkvs
A1_83 = "3c34654"

HKEY_CURRENT_USER\Software\Aasppapmmxkvs
A2_83 = "2e7794ec"

HKEY_CURRENT_USER\Software\Aasppapmmxkvs
A3_83 = "2f74eb3a"

HKEY_CURRENT_USER\Software\Aasppapmmxkvs
A4_83 = "2e778113"

HKEY_CURRENT_USER\Software\Aasppapmmxkvs
A1_84 = "3b82d34"

HKEY_CURRENT_USER\Software\Aasppapmmxkvs
A2_84 = "97e4c383"

HKEY_CURRENT_USER\Software\Aasppapmmxkvs
A3_84 = "96e78f7d"

HKEY_CURRENT_USER\Software\Aasppapmmxkvs
A4_84 = "97e4e554"

HKEY_CURRENT_USER\Software\Aasppapmmxkvs
A1_85 = "3ac92346"

HKEY_CURRENT_USER\Software\Aasppapmmxkvs
A2_85 = "1525736"

HKEY_CURRENT_USER\Software\Aasppapmmxkvs
A3_85 = "5123bc"

HKEY_CURRENT_USER\Software\Aasppapmmxkvs
A4_85 = "1524995"

HKEY_CURRENT_USER\Software\Aasppapmmxkvs
A1_86 = "e1648"

HKEY_CURRENT_USER\Software\Aasppapmmxkvs
A2_86 = "6abf8c97"

HKEY_CURRENT_USER\Software\Aasppapmmxkvs
A3_86 = "6bbcc7ff"

HKEY_CURRENT_USER\Software\Aasppapmmxkvs
A4_86 = "6abfadd6"

HKEY_CURRENT_USER\Software\Aasppapmmxkvs
A1_87 = "75497a48"

HKEY_CURRENT_USER\Software\Aasppapmmxkvs
A2_87 = "d42d4f8"

HKEY_CURRENT_USER\Software\Aasppapmmxkvs
A3_87 = "d52e783e"

HKEY_CURRENT_USER\Software\Aasppapmmxkvs
A4_87 = "d42d1217"

HKEY_CURRENT_USER\Software\Aasppapmmxkvs
A1_88 = "1fe7562"

HKEY_CURRENT_USER\Software\Aasppapmmxkvs
A2_88 = "3d9a623f"

HKEY_CURRENT_USER\Software\Aasppapmmxkvs
A3_88 = "3c991c71"

HKEY_CURRENT_USER\Software\Aasppapmmxkvs
A4_88 = "3d9a7658"

HKEY_CURRENT_USER\Software\Aasppapmmxkvs
A1_89 = "f7716cc"

HKEY_CURRENT_USER\Software\Aasppapmmxkvs
A2_89 = "a77fba"

HKEY_CURRENT_USER\Software\Aasppapmmxkvs
A3_89 = "a64bb"

HKEY_CURRENT_USER\Software\Aasppapmmxkvs
A4_89 = "a77da99"

HKEY_CURRENT_USER\Software\Aasppapmmxkvs
A1_90 = "d8cbbf66"

HKEY_CURRENT_USER\Software\Aasppapmmxkvs
A2_90 = "17523ed"

HKEY_CURRENT_USER\Software\Aasppapmmxkvs
A3_90 = "117654f3"

HKEY_CURRENT_USER\Software\Aasppapmmxkvs
A4_90 = "1753eda"

HKEY_CURRENT_USER\Software\Aasppapmmxkvs
A1_91 = "66ccb44"

HKEY_CURRENT_USER\Software\Aasppapmmxkvs
A2_91 = "79e283bc"

HKEY_CURRENT_USER\Software\Aasppapmmxkvs
A3_91 = "78e1c932"

HKEY_CURRENT_USER\Software\Aasppapmmxkvs
A4_91 = "79e2a31b"

HKEY_CURRENT_USER\Software\Aasppapmmxkvs
A1_92 = "6fe8d9f"

HKEY_CURRENT_USER\Software\Aasppapmmxkvs
A2_92 = "e352641"

HKEY_CURRENT_USER\Software\Aasppapmmxkvs
A3_92 = "e2536d75"

HKEY_CURRENT_USER\Software\Aasppapmmxkvs
A4_92 = "e3575c"

HKEY_CURRENT_USER\Software\Aasppapmmxkvs
A1_93 = "f1ead3"

HKEY_CURRENT_USER\Software\Aasppapmmxkvs
A2_93 = "4cbd72a"

HKEY_CURRENT_USER\Software\Aasppapmmxkvs
A3_93 = "4dbe1b4"

HKEY_CURRENT_USER\Software\Aasppapmmxkvs
A4_93 = "4cbd6b9d"

HKEY_CURRENT_USER\Software\Aasppapmmxkvs
A1_94 = "88befb8"

HKEY_CURRENT_USER\Software\Aasppapmmxkvs
A2_94 = "b62ad6d"

HKEY_CURRENT_USER\Software\Aasppapmmxkvs
A3_94 = "b729a5f7"

HKEY_CURRENT_USER\Software\Aasppapmmxkvs
A4_94 = "b62acfde"

HKEY_CURRENT_USER\Software\Aasppapmmxkvs
A1_95 = "911e4dc3"

HKEY_CURRENT_USER\Software\Aasppapmmxkvs
A2_95 = "1f982be8"

HKEY_CURRENT_USER\Software\Aasppapmmxkvs
A3_95 = "1e9b5e36"

HKEY_CURRENT_USER\Software\Aasppapmmxkvs
A4_95 = "1f98341f"

HKEY_CURRENT_USER\Software\Aasppapmmxkvs
A1_96 = "ca26d52d"

HKEY_CURRENT_USER\Software\Aasppapmmxkvs
A2_96 = "89581f1"

HKEY_CURRENT_USER\Software\Aasppapmmxkvs
A3_96 = "886f249"

HKEY_CURRENT_USER\Software\Aasppapmmxkvs
A4_96 = "895986"

HKEY_CURRENT_USER\Software\Aasppapmmxkvs
A1_97 = "da13d2f8"

HKEY_CURRENT_USER\Software\Aasppapmmxkvs
A2_97 = "f272df21"

HKEY_CURRENT_USER\Software\Aasppapmmxkvs
A3_97 = "f3719688"

HKEY_CURRENT_USER\Software\Aasppapmmxkvs
A4_97 = "f272fca1"

HKEY_CURRENT_USER\Software\Aasppapmmxkvs
A1_98 = "35bf13b"

HKEY_CURRENT_USER\Software\Aasppapmmxkvs
A2_98 = "5be786a"

HKEY_CURRENT_USER\Software\Aasppapmmxkvs
A3_98 = "5ae3acb"

HKEY_CURRENT_USER\Software\Aasppapmmxkvs
A4_98 = "5be6e2"

HKEY_CURRENT_USER\Software\Aasppapmmxkvs
A1_99 = "ffefe867"

HKEY_CURRENT_USER\Software\Aasppapmmxkvs
A2_99 = "c54ddb2e"

HKEY_CURRENT_USER\Software\Aasppapmmxkvs
A3_99 = "c44eafa"

HKEY_CURRENT_USER\Software\Aasppapmmxkvs
A4_99 = "c54dc523"

HKEY_CURRENT_USER\Software\Aasppapmmxkvs
A1_100 = "4c9ba13d"

HKEY_CURRENT_USER\Software\Aasppapmmxkvs
A2_100 = "2ebb3caf"

HKEY_CURRENT_USER\Software\Aasppapmmxkvs
A3_100 = "2fb8434d"

HKEY_CURRENT_USER\Software\Aasppapmmxkvs
A4_100 = "2ebb2964"

HKEY_CURRENT_USER\Software\Aasppapmmxkvs
A1_101 = "5d87c1fc"

HKEY_CURRENT_USER\Software\Aasppapmmxkvs
A2_101 = "98289ae"

HKEY_CURRENT_USER\Software\Aasppapmmxkvs
A3_101 = "992be78c"

HKEY_CURRENT_USER\Software\Aasppapmmxkvs
A4_101 = "98288da5"

HKEY_CURRENT_USER\Software\Aasppapmmxkvs
A1_102 = "486db495"

HKEY_CURRENT_USER\Software\Aasppapmmxkvs
A2_102 = "195e7ab"

HKEY_CURRENT_USER\Software\Aasppapmmxkvs
A3_102 = "969bcf"

HKEY_CURRENT_USER\Software\Aasppapmmxkvs
A4_102 = "195f1e6"

HKEY_CURRENT_USER\Software\Aasppapmmxkvs
A1_103 = "67ee717e"

HKEY_CURRENT_USER\Software\Aasppapmmxkvs
A2_103 = "6b34a5c"

HKEY_CURRENT_USER\Software\Aasppapmmxkvs
A3_103 = "6a3ce"

HKEY_CURRENT_USER\Software\Aasppapmmxkvs
A4_103 = "6b35627"

HKEY_CURRENT_USER\Software\Aasppapmmxkvs
A1_104 = "5335c831"

HKEY_CURRENT_USER\Software\Aasppapmmxkvs
A2_104 = "d47a267"

HKEY_CURRENT_USER\Software\Aasppapmmxkvs
A3_104 = "d573d41"

HKEY_CURRENT_USER\Software\Aasppapmmxkvs
A4_104 = "d47ba68"

HKEY_CURRENT_USER\Software\Aasppapmmxkvs
A1_105 = "f8377ff"

HKEY_CURRENT_USER\Software\Aasppapmmxkvs
A2_105 = "3ddee29"

HKEY_CURRENT_USER\Software\Aasppapmmxkvs
A3_105 = "3cdd748"

HKEY_CURRENT_USER\Software\Aasppapmmxkvs
A4_105 = "3dde1ea9"

HKEY_CURRENT_USER\Software\Aasppapmmxkvs
A1_106 = "73198ba4"

HKEY_CURRENT_USER\Software\Aasppapmmxkvs
A2_106 = "a74b9551"

HKEY_CURRENT_USER\Software\Aasppapmmxkvs
A3_106 = "a648e8c3"

HKEY_CURRENT_USER\Software\Aasppapmmxkvs
A4_106 = "a74b82ea"

HKEY_CURRENT_USER\Software\Aasppapmmxkvs
A1_107 = "c7be85c"

HKEY_CURRENT_USER\Software\Aasppapmmxkvs
A2_107 = "1b8f2c"

HKEY_CURRENT_USER\Software\Aasppapmmxkvs
A3_107 = "11bb8d2"

HKEY_CURRENT_USER\Software\Aasppapmmxkvs
A4_107 = "1b8e72b"

HKEY_CURRENT_USER\Software\Aasppapmmxkvs
A1_108 = "bc7e423"

HKEY_CURRENT_USER\Software\Aasppapmmxkvs
A2_108 = "7a26523"

HKEY_CURRENT_USER\Software\Aasppapmmxkvs
A3_108 = "7b252145"

HKEY_CURRENT_USER\Software\Aasppapmmxkvs
A4_108 = "7a264b6c"

HKEY_CURRENT_USER\Software\Aasppapmmxkvs
A1_109 = "d6cf7f2"

HKEY_CURRENT_USER\Software\Aasppapmmxkvs
A2_109 = "e3938ab4"

HKEY_CURRENT_USER\Software\Aasppapmmxkvs
A3_109 = "e29c584"

HKEY_CURRENT_USER\Software\Aasppapmmxkvs
A4_109 = "e393afad"

HKEY_CURRENT_USER\Software\Aasppapmmxkvs
A1_110 = "cf9a2db"

HKEY_CURRENT_USER\Software\Aasppapmmxkvs
A2_110 = "4d1f2"

HKEY_CURRENT_USER\Software\Aasppapmmxkvs
A3_110 = "4c279c7"

HKEY_CURRENT_USER\Software\Aasppapmmxkvs
A4_110 = "4d113ee"

HKEY_CURRENT_USER\Software\Aasppapmmxkvs
A1_111 = "411ecd7e"

HKEY_CURRENT_USER\Software\Aasppapmmxkvs
A2_111 = "b66e59a1"

HKEY_CURRENT_USER\Software\Aasppapmmxkvs
A3_111 = "b76d126"

HKEY_CURRENT_USER\Software\Aasppapmmxkvs
A4_111 = "b66e782f"

HKEY_CURRENT_USER\Software\Aasppapmmxkvs
A1_112 = "e2bb3e37"

HKEY_CURRENT_USER\Software\Aasppapmmxkvs
A2_112 = "1fdbc622"

HKEY_CURRENT_USER\Software\Aasppapmmxkvs
A3_112 = "1ed8b659"

HKEY_CURRENT_USER\Software\Aasppapmmxkvs
A4_112 = "1fdbdc7"

HKEY_CURRENT_USER\Software\Aasppapmmxkvs
A1_113 = "a45f17e4"

HKEY_CURRENT_USER\Software\Aasppapmmxkvs
A2_113 = "89495596"

HKEY_CURRENT_USER\Software\Aasppapmmxkvs
A3_113 = "884a2a98"

HKEY_CURRENT_USER\Software\Aasppapmmxkvs
A4_113 = "89494b1"

HKEY_CURRENT_USER\Software\Aasppapmmxkvs
A1_114 = "fa61ccbe"

HKEY_CURRENT_USER\Software\Aasppapmmxkvs
A2_114 = "f2b6bf9d"

HKEY_CURRENT_USER\Software\Aasppapmmxkvs
A3_114 = "f3b5cedb"

HKEY_CURRENT_USER\Software\Aasppapmmxkvs
A4_114 = "f2b6a4f2"

HKEY_CURRENT_USER\Software\Aasppapmmxkvs
A1_115 = "ed32688"

HKEY_CURRENT_USER\Software\Aasppapmmxkvs
A2_115 = "5c2416f6"

HKEY_CURRENT_USER\Software\Aasppapmmxkvs
A3_115 = "5d27631a"

HKEY_CURRENT_USER\Software\Aasppapmmxkvs
A4_115 = "5c24933"

HKEY_CURRENT_USER\Software\Aasppapmmxkvs
A1_116 = "f91a1721"

HKEY_CURRENT_USER\Software\Aasppapmmxkvs
A2_116 = "c5917ba3"

HKEY_CURRENT_USER\Software\Aasppapmmxkvs
A3_116 = "c49275d"

HKEY_CURRENT_USER\Software\Aasppapmmxkvs
A4_116 = "c5916d74"

HKEY_CURRENT_USER\Software\Aasppapmmxkvs
A1_117 = "44681fe2"

HKEY_CURRENT_USER\Software\Aasppapmmxkvs
A2_117 = "2efec7c"

HKEY_CURRENT_USER\Software\Aasppapmmxkvs
A3_117 = "2ffdbb9c"

HKEY_CURRENT_USER\Software\Aasppapmmxkvs
A4_117 = "2efed1b5"

HKEY_CURRENT_USER\Software\Aasppapmmxkvs
A1_118 = "cfcf6d7c"

HKEY_CURRENT_USER\Software\Aasppapmmxkvs
A2_118 = "986c2c51"

HKEY_CURRENT_USER\Software\Aasppapmmxkvs
A3_118 = "996f5fdf"

HKEY_CURRENT_USER\Software\Aasppapmmxkvs
A4_118 = "986c35f6"

HKEY_CURRENT_USER\Software\Aasppapmmxkvs
A1_119 = "54df3462"

HKEY_CURRENT_USER\Software\Aasppapmmxkvs
A2_119 = "1d987b"

HKEY_CURRENT_USER\Software\Aasppapmmxkvs
A3_119 = "daf1e"

HKEY_CURRENT_USER\Software\Aasppapmmxkvs
A4_119 = "1d99a37"

HKEY_CURRENT_USER\Software\Aasppapmmxkvs
A1_120 = "8c9ab12a"

HKEY_CURRENT_USER\Software\Aasppapmmxkvs
A2_120 = "6b46e827"

HKEY_CURRENT_USER\Software\Aasppapmmxkvs
A3_120 = "6a459451"

HKEY_CURRENT_USER\Software\Aasppapmmxkvs
A4_120 = "6b46fe78"

HKEY_CURRENT_USER\Software\Aasppapmmxkvs
A1_121 = "76f82af7"

HKEY_CURRENT_USER\Software\Aasppapmmxkvs
A2_121 = "d4b44773"

HKEY_CURRENT_USER\Software\Aasppapmmxkvs
A3_121 = "d5b789"

HKEY_CURRENT_USER\Software\Aasppapmmxkvs
A4_121 = "d4b462b9"

HKEY_CURRENT_USER\Software\Aasppapmmxkvs
A1_122 = "37937cbc"

HKEY_CURRENT_USER\Software\Aasppapmmxkvs
A2_122 = "3e21dda7"

HKEY_CURRENT_USER\Software\Aasppapmmxkvs
A3_122 = "3f22acd3"

HKEY_CURRENT_USER\Software\Aasppapmmxkvs
A4_122 = "3e21c6fa"

HKEY_CURRENT_USER\Software\Aasppapmmxkvs
A1_123 = "b2e64f6d"

HKEY_CURRENT_USER\Software\Aasppapmmxkvs
A2_123 = "a78f3334"

HKEY_CURRENT_USER\Software\Aasppapmmxkvs
A3_123 = "a68c4112"

HKEY_CURRENT_USER\Software\Aasppapmmxkvs
A4_123 = "a78f2b3b"

HKEY_CURRENT_USER\Software\Aasppapmmxkvs
A1_124 = "6d549a8"

HKEY_CURRENT_USER\Software\Aasppapmmxkvs
A2_124 = "1fc92b6"

HKEY_CURRENT_USER\Software\Aasppapmmxkvs
A3_124 = "11ffe555"

HKEY_CURRENT_USER\Software\Aasppapmmxkvs
A4_124 = "1fc8f7c"

HKEY_CURRENT_USER\Software\Aasppapmmxkvs
A1_125 = "2b93f3"

HKEY_CURRENT_USER\Software\Aasppapmmxkvs
A2_125 = "7a69e69a"

HKEY_CURRENT_USER\Software\Aasppapmmxkvs
A3_125 = "7b6a9994"

HKEY_CURRENT_USER\Software\Aasppapmmxkvs
A4_125 = "7a69f3bd"

HKEY_CURRENT_USER\Software\Aasppapmmxkvs
A1_126 = "fcf5bb6d"

HKEY_CURRENT_USER\Software\Aasppapmmxkvs
A2_126 = "e3d74859"

HKEY_CURRENT_USER\Software\Aasppapmmxkvs
A3_126 = "e2d43dd7"

HKEY_CURRENT_USER\Software\Aasppapmmxkvs
A4_126 = "e3d757fe"

HKEY_CURRENT_USER\Software\Aasppapmmxkvs
A1_127 = "aad9f6be"

HKEY_CURRENT_USER\Software\Aasppapmmxkvs
A2_127 = "4d44a5a"

HKEY_CURRENT_USER\Software\Aasppapmmxkvs
A3_127 = "4c47d616"

HKEY_CURRENT_USER\Software\Aasppapmmxkvs
A4_127 = "4d44bc3f"

HKEY_CURRENT_USER\Software\Aasppapmmxkvs
A1_128 = "76c45d9"

HKEY_CURRENT_USER\Software\Aasppapmmxkvs
A2_128 = "b6b2367c"

HKEY_CURRENT_USER\Software\Aasppapmmxkvs
A3_128 = "b7b14aa9"

HKEY_CURRENT_USER\Software\Aasppapmmxkvs
A4_128 = "b6b228"

HKEY_CURRENT_USER\Software\Aasppapmmxkvs
A1_129 = "13d85b9e"

HKEY_CURRENT_USER\Software\Aasppapmmxkvs
A2_129 = "21f9b88"

HKEY_CURRENT_USER\Software\Aasppapmmxkvs
A3_129 = "211ceee8"

HKEY_CURRENT_USER\Software\Aasppapmmxkvs
A4_129 = "21f84c1"

HKEY_CURRENT_USER\Software\Aasppapmmxkvs
A1_130 = "875464d"

HKEY_CURRENT_USER\Software\Aasppapmmxkvs
A2_130 = "898cf3a5"

HKEY_CURRENT_USER\Software\Aasppapmmxkvs
A3_130 = "888f832b"

HKEY_CURRENT_USER\Software\Aasppapmmxkvs
A4_130 = "898ce92"

HKEY_CURRENT_USER\Software\Aasppapmmxkvs
A1_131 = "3594251c"

HKEY_CURRENT_USER\Software\Aasppapmmxkvs
A2_131 = "f2fa5461"

HKEY_CURRENT_USER\Software\Aasppapmmxkvs
A3_131 = "f3f9276a"

HKEY_CURRENT_USER\Software\Aasppapmmxkvs
A4_131 = "f2fa4d43"

HKEY_CURRENT_USER\Software\Aasppapmmxkvs
A1_132 = "a1a6d8d2"

HKEY_CURRENT_USER\Software\Aasppapmmxkvs
A2_132 = "5c67a694"

HKEY_CURRENT_USER\Software\Aasppapmmxkvs
A3_132 = "5d64dbad"

HKEY_CURRENT_USER\Software\Aasppapmmxkvs
A4_132 = "5c67b184"

HKEY_CURRENT_USER\Software\Aasppapmmxkvs
A1_133 = "c88f7d9a"

HKEY_CURRENT_USER\Software\Aasppapmmxkvs
A2_133 = "c5d5963"

HKEY_CURRENT_USER\Software\Aasppapmmxkvs
A3_133 = "c4d67fec"

HKEY_CURRENT_USER\Software\Aasppapmmxkvs
A4_133 = "c5d515c5"

HKEY_CURRENT_USER\Software\Aasppapmmxkvs
A1_134 = "e3c74c42"

HKEY_CURRENT_USER\Software\Aasppapmmxkvs
A2_134 = "2f42639c"

HKEY_CURRENT_USER\Software\Aasppapmmxkvs
A3_134 = "2e4112f"

HKEY_CURRENT_USER\Software\Aasppapmmxkvs
A4_134 = "2f427a6"

HKEY_CURRENT_USER\Software\Aasppapmmxkvs
A1_135 = "c97ea71"

HKEY_CURRENT_USER\Software\Aasppapmmxkvs
A2_135 = "98afc8a8"

HKEY_CURRENT_USER\Software\Aasppapmmxkvs
A3_135 = "99acb46e"

HKEY_CURRENT_USER\Software\Aasppapmmxkvs
A4_135 = "98afde47"

HKEY_CURRENT_USER\Software\Aasppapmmxkvs
A1_136 = "98c38de"

HKEY_CURRENT_USER\Software\Aasppapmmxkvs
A2_136 = "21d564f"

HKEY_CURRENT_USER\Software\Aasppapmmxkvs
A3_136 = "31e28a1"

HKEY_CURRENT_USER\Software\Aasppapmmxkvs
A4_136 = "21d4288"

HKEY_CURRENT_USER\Software\Aasppapmmxkvs
A1_137 = "a4884c9d"

HKEY_CURRENT_USER\Software\Aasppapmmxkvs
A2_137 = "6b8ab1be"

HKEY_CURRENT_USER\Software\Aasppapmmxkvs
A3_137 = "6a89cce"

HKEY_CURRENT_USER\Software\Aasppapmmxkvs
A4_137 = "6b8aa6c9"

HKEY_CURRENT_USER\Software\Aasppapmmxkvs
A1_138 = "e9818353"

HKEY_CURRENT_USER\Software\Aasppapmmxkvs
A2_138 = "d4f81c5e"

HKEY_CURRENT_USER\Software\Aasppapmmxkvs
A3_138 = "d5fb6123"

HKEY_CURRENT_USER\Software\Aasppapmmxkvs
A4_138 = "d4f8ba"

HKEY_CURRENT_USER\Software\Aasppapmmxkvs
A1_139 = "94c226"

HKEY_CURRENT_USER\Software\Aasppapmmxkvs
A2_139 = "3e65733a"

HKEY_CURRENT_USER\Software\Aasppapmmxkvs
A3_139 = "3f66562"

HKEY_CURRENT_USER\Software\Aasppapmmxkvs
A4_139 = "3e656f4b"

HKEY_CURRENT_USER\Software\Aasppapmmxkvs
A1_140 = "92af7d5"

HKEY_CURRENT_USER\Software\VB and VBA Program Settings\
trial version\trial
date1 = "11/20/2011"

HKEY_CURRENT_USER\Software\Aasppapmmxkvs
A2_140 = "a7d2ca51"

HKEY_CURRENT_USER\Software\Aasppapmmxkvs
A3_140 = "a6d1b9a5"

HKEY_CURRENT_USER\Software\Aasppapmmxkvs
A4_140 = "a7d2d38c"

HKEY_CURRENT_USER\Software\Aasppapmmxkvs
A1_141 = "276d2f81"

HKEY_CURRENT_USER\Software\Aasppapmmxkvs
A2_141 = "1142bc2"

HKEY_CURRENT_USER\Software\Aasppapmmxkvs
A3_141 = "1435de4"

HKEY_CURRENT_USER\Software\Aasppapmmxkvs
A4_141 = "11437cd"

HKEY_CURRENT_USER\Software\Aasppapmmxkvs
A1_142 = "fe38f56"

HKEY_CURRENT_USER\Software\Aasppapmmxkvs
A2_142 = "7aad8721"

HKEY_CURRENT_USER\Software\Aasppapmmxkvs
A3_142 = "7baef627"

HKEY_CURRENT_USER\Software\Aasppapmmxkvs
A4_142 = "7aad9ce"

HKEY_CURRENT_USER\Software\Aasppapmmxkvs
A1_143 = "59f12e16"

HKEY_CURRENT_USER\Software\Aasppapmmxkvs
A2_143 = "e41b176a"

HKEY_CURRENT_USER\Software\Aasppapmmxkvs
A3_143 = "e5186a66"

HKEY_CURRENT_USER\Software\Aasppapmmxkvs
A4_143 = "e41b4f"

HKEY_CURRENT_USER\Software\Aasppapmmxkvs
A1_144 = "875116cd"

HKEY_CURRENT_USER\Software\Aasppapmmxkvs
A2_144 = "4d887a33"

HKEY_CURRENT_USER\Software\Aasppapmmxkvs
A3_144 = "4c8beb9"

HKEY_CURRENT_USER\Software\Aasppapmmxkvs
A4_144 = "4d88649"

HKEY_CURRENT_USER\Software\Aasppapmmxkvs
A1_145 = "95f12d83"

HKEY_CURRENT_USER\Software\Aasppapmmxkvs
A2_145 = "b6f5db2b"

HKEY_CURRENT_USER\Software\Aasppapmmxkvs
A3_145 = "b7f6a2f8"

HKEY_CURRENT_USER\Software\Aasppapmmxkvs
A4_145 = "b6f5c8d1"

HKEY_CURRENT_USER\Software\Aasppapmmxkvs
A1_146 = "47bb9a4a"

HKEY_CURRENT_USER\Software\Aasppapmmxkvs
A2_146 = "263359a"

HKEY_CURRENT_USER\Software\Aasppapmmxkvs
A3_146 = "216473b"

HKEY_CURRENT_USER\Software\Aasppapmmxkvs
A4_146 = "2632d12"

HKEY_CURRENT_USER\Software\Aasppapmmxkvs
A1_147 = "bfc5cb6d"

HKEY_CURRENT_USER\Software\Aasppapmmxkvs
A2_147 = "89d8c4c"

HKEY_CURRENT_USER\Software\Aasppapmmxkvs
A3_147 = "88d3fb7a"

HKEY_CURRENT_USER\Software\Aasppapmmxkvs
A4_147 = "89d9153"

HKEY_CURRENT_USER\Software\Aasppapmmxkvs
A1_148 = "43d741c5"

HKEY_CURRENT_USER\Software\Aasppapmmxkvs
A2_148 = "f33dd158"

HKEY_CURRENT_USER\Software\Aasppapmmxkvs
A3_148 = "f23e9fbd"

HKEY_CURRENT_USER\Software\Aasppapmmxkvs
A4_148 = "f33df594"

HKEY_CURRENT_USER\Software\Aasppapmmxkvs
A1_149 = "2cf1b8"

HKEY_CURRENT_USER\Software\Aasppapmmxkvs
A2_149 = "5cab7af2"

HKEY_CURRENT_USER\Software\Aasppapmmxkvs
A3_149 = "5da833fc"

HKEY_CURRENT_USER\Software\Aasppapmmxkvs
A4_149 = "5cab59d5"

HKEY_CURRENT_USER\Software\Aasppapmmxkvs
A1_150 = "ba851d5"

HKEY_CURRENT_USER\Software\Aasppapmmxkvs
A2_150 = "c618a7cd"

HKEY_CURRENT_USER\Software\Aasppapmmxkvs
A3_150 = "c71bd43f"

HKEY_CURRENT_USER\Software\Aasppapmmxkvs
A4_150 = "c618be16"

HKEY_CURRENT_USER\Software\Aasppapmmxkvs
A1_151 = "66b6ce12"

HKEY_CURRENT_USER\Software\Aasppapmmxkvs
A2_151 = "2f8639a2"

HKEY_CURRENT_USER\Software\Aasppapmmxkvs
A3_151 = "2e85487e"

HKEY_CURRENT_USER\Software\Aasppapmmxkvs
A4_151 = "2f862257"

HKEY_CURRENT_USER\Software\Aasppapmmxkvs
A1_152 = "6defde4"

HKEY_CURRENT_USER\Software\Aasppapmmxkvs
A2_152 = "98f39c47"

HKEY_CURRENT_USER\Software\Aasppapmmxkvs
A3_152 = "99fecb1"

HKEY_CURRENT_USER\Software\Aasppapmmxkvs
A4_152 = "98f38698"

HKEY_CURRENT_USER\Software\Aasppapmmxkvs
A1_153 = "364ec68"

HKEY_CURRENT_USER\Software\Aasppapmmxkvs
A2_153 = "26fc9a"

HKEY_CURRENT_USER\Software\Aasppapmmxkvs
A3_153 = "3638f"

HKEY_CURRENT_USER\Software\Aasppapmmxkvs
A4_153 = "26ead9"

HKEY_CURRENT_USER\Software\Aasppapmmxkvs
A1_154 = "13945b"

HKEY_CURRENT_USER\Software\Aasppapmmxkvs
A2_154 = "6bce5f9a"

HKEY_CURRENT_USER\Software\Aasppapmmxkvs
A3_154 = "6acd2533"

HKEY_CURRENT_USER\Software\Aasppapmmxkvs
A4_154 = "6bce4f1a"

HKEY_CURRENT_USER\Software\Aasppapmmxkvs
A1_155 = "b9cf4c16"

HKEY_CURRENT_USER\Software\Aasppapmmxkvs
A2_155 = "d53ba468"

HKEY_CURRENT_USER\Software\Aasppapmmxkvs
A3_155 = "d438d972"

HKEY_CURRENT_USER\Software\Aasppapmmxkvs
A4_155 = "d53bb35b"

HKEY_CURRENT_USER\Software\Aasppapmmxkvs
A1_156 = "6fa346d1"

HKEY_CURRENT_USER\Software\Aasppapmmxkvs
A2_156 = "3ea9d3f"

HKEY_CURRENT_USER\Software\Aasppapmmxkvs
A3_156 = "3faa7db5"

HKEY_CURRENT_USER\Software\Aasppapmmxkvs
A4_156 = "3ea9179c"

HKEY_CURRENT_USER\Software\Aasppapmmxkvs
A1_157 = "384f39"

HKEY_CURRENT_USER\Software\Aasppapmmxkvs
A2_157 = "a81665fa"

HKEY_CURRENT_USER\Software\Aasppapmmxkvs
A3_157 = "a91511f4"

HKEY_CURRENT_USER\Software\Aasppapmmxkvs
A4_157 = "a8167bdd"

HKEY_CURRENT_USER\Software\Aasppapmmxkvs
A1_158 = "47b33ada"

HKEY_CURRENT_USER\Software\Aasppapmmxkvs
A2_158 = "1183c3cf"

HKEY_CURRENT_USER\Software\Aasppapmmxkvs
A3_158 = "188a37"

HKEY_CURRENT_USER\Software\Aasppapmmxkvs
A4_158 = "1183e1e"

HKEY_CURRENT_USER\Software\Aasppapmmxkvs
A1_159 = "6ab6e6"

HKEY_CURRENT_USER\Software\Aasppapmmxkvs
A2_159 = "7af1648"

HKEY_CURRENT_USER\Software\Aasppapmmxkvs
A3_159 = "7bf22e76"

HKEY_CURRENT_USER\Software\Aasppapmmxkvs
A4_159 = "7af1445f"

HKEY_CURRENT_USER\Software\Aasppapmmxkvs
A1_160 = "a34583f9"

HKEY_CURRENT_USER\Software\Aasppapmmxkvs
A2_160 = "e45ebdd"

HKEY_CURRENT_USER\Software\Aasppapmmxkvs
A3_160 = "e55dc289"

HKEY_CURRENT_USER\Software\Aasppapmmxkvs
A4_160 = "e45ea8a"

HKEY_CURRENT_USER\Software\Aasppapmmxkvs
A1_161 = "d96c4caa"

HKEY_CURRENT_USER\Software\Aasppapmmxkvs
A2_161 = "4dcc29f8"

HKEY_CURRENT_USER\Software\Aasppapmmxkvs
A3_161 = "4ccf66c8"

HKEY_CURRENT_USER\Software\Aasppapmmxkvs
A4_161 = "4dccce1"

HKEY_CURRENT_USER\Software\Aasppapmmxkvs
A1_162 = "939f7df6"

HKEY_CURRENT_USER\Software\Aasppapmmxkvs
A2_162 = "b7396ead"

HKEY_CURRENT_USER\Software\Aasppapmmxkvs
A3_162 = "b63a1bb"

HKEY_CURRENT_USER\Software\Aasppapmmxkvs
A4_162 = "b7397122"

HKEY_CURRENT_USER\Software\Aasppapmmxkvs
A1_163 = "3fff8a33"

HKEY_CURRENT_USER\Software\Aasppapmmxkvs
A2_163 = "2a6f614"

HKEY_CURRENT_USER\Software\Aasppapmmxkvs
A3_163 = "21a5bf4a"

HKEY_CURRENT_USER\Software\Aasppapmmxkvs
A4_163 = "2a6d563"

HKEY_CURRENT_USER\Software\Aasppapmmxkvs
A1_164 = "65a989ea"

HKEY_CURRENT_USER\Software\Aasppapmmxkvs
A2_164 = "8a142772"

HKEY_CURRENT_USER\Software\Aasppapmmxkvs
A3_164 = "8b17538d"

HKEY_CURRENT_USER\Software\Aasppapmmxkvs
A4_164 = "8a1439a4"

HKEY_CURRENT_USER\Software\Aasppapmmxkvs
A1_165 = "ca351c59"

HKEY_CURRENT_USER\Software\Aasppapmmxkvs
A2_165 = "f3818ee"

HKEY_CURRENT_USER\Software\Aasppapmmxkvs
A3_165 = "f282f7cc"

HKEY_CURRENT_USER\Software\Aasppapmmxkvs
A4_165 = "f3819de5"

HKEY_CURRENT_USER\Software\Aasppapmmxkvs
A1_166 = "9eb4e71"

HKEY_CURRENT_USER\Software\Aasppapmmxkvs
A2_166 = "5cef2159"

HKEY_CURRENT_USER\Software\Aasppapmmxkvs
A3_166 = "5dec68f"

HKEY_CURRENT_USER\Software\Aasppapmmxkvs
A4_166 = "5cef226"

HKEY_CURRENT_USER\Software\Aasppapmmxkvs
A1_167 = "395d629"

HKEY_CURRENT_USER\Software\Aasppapmmxkvs
A2_167 = "c65c7c78"

HKEY_CURRENT_USER\Software\Aasppapmmxkvs
A3_167 = "c75fc4e"

HKEY_CURRENT_USER\Software\Aasppapmmxkvs
A4_167 = "c65c6667"

HKEY_CURRENT_USER\Software\Aasppapmmxkvs
A1_168 = "6a6dbbf5"

HKEY_CURRENT_USER\Software\Aasppapmmxkvs
A2_168 = "2fc9ddc7"

HKEY_CURRENT_USER\Software\Aasppapmmxkvs
A3_168 = "2ecaa81"

HKEY_CURRENT_USER\Software\Aasppapmmxkvs
A4_168 = "2fc9caa8"

HKEY_CURRENT_USER\Software\Aasppapmmxkvs
A1_169 = "5c8451bf"

HKEY_CURRENT_USER\Software\Aasppapmmxkvs
A2_169 = "993735d9"

HKEY_CURRENT_USER\Software\Aasppapmmxkvs
A3_169 = "983444c"

HKEY_CURRENT_USER\Software\Aasppapmmxkvs
A4_169 = "99372ee9"

HKEY_CURRENT_USER\Software\Aasppapmmxkvs
A1_170 = "d79c8f6c"

HKEY_CURRENT_USER\Software\Aasppapmmxkvs
A2_170 = "2a48f51"

HKEY_CURRENT_USER\Software\Aasppapmmxkvs
A3_170 = "3a7f93"

HKEY_CURRENT_USER\Software\Aasppapmmxkvs
A4_170 = "2a4932a"

HKEY_CURRENT_USER\Software\Aasppapmmxkvs
A1_171 = "13d7d6"

HKEY_CURRENT_USER\Software\Aasppapmmxkvs
A2_171 = "6c11d73c"

HKEY_CURRENT_USER\Software\Aasppapmmxkvs
A3_171 = "6d129d42"

HKEY_CURRENT_USER\Software\Aasppapmmxkvs
A4_171 = "6c11f76b"

HKEY_LOCAL_MACHINE\SOFTWARE\Classes\
comfile
NeverShowExt = "1"

HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\
Services\SharedAccess\Parameters\
FirewallPolicy\StandardProfile\AuthorizedApplications\
List
%User Temp%\uuawoi.exe = "%User Temp%\uuawoi.exe:*:Enabled:ipsec"

It modifies the following registry entries:

HKEY_CURRENT_USER\Software\Microsoft\
Windows\CurrentVersion\Explorer\
Advanced
Hidden = "2"

(Note: The default value data of the said registry entry is 2.)

HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\
Security Center
AntiVirusOverride = "1"

HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\
Security Center
AntiVirusDisableNotify = "1"

HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\
Security Center
FirewallDisableNotify = "1"

HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\
Security Center
FirewallOverride = "1"

HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\
Security Center
UpdatesDisableNotify = "1"

HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\
Windows\CurrentVersion\Explorer\
Advanced\Folder\SuperHidden
ValueName = "ShowSuperHiden"

(Note: The default value data of the said registry entry is ShowSuperHidden.)

HKEY_CURRENT_USER\Control Panel\Desktop
SCRNSAVE.EXE = "%Windows%\pchealth\helpctr\binaries\HelpHost.com"

(Note: The default value data of the said registry entry is %Windows%\system32\logon.scr.)

HKEY_CURRENT_USER\Control Panel\Desktop
ScreenSaveTimeOut = "30"

(Note: The default value data of the said registry entry is 600.)

HKEY_CURRENT_USER\Control Panel\Desktop
AutoEndTasks = "1"

(Note: The default value data of the said registry entry is 0.)

It creates the following registry entry(ies) to disable Task Manager, Registry Tools and Folder Options:

HKEY_CURRENT_USER\Software\Microsoft\
Windows\CurrentVersion\Policies\
system
DisableTaskMgr = "1"

HKEY_CURRENT_USER\Software\Microsoft\
Windows\CurrentVersion\Policies\
system
DisableRegistryTools = "1"

It deletes the following registry keys:

HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\
Control\SafeBoot\Minimal\
AppMgmt

HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\
Control\SafeBoot\Minimal\
Base

HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\
Control\SafeBoot\Minimal\
Boot Bus Extender

HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\
Control\SafeBoot\Minimal\
Boot file system

HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\
Control\SafeBoot\Minimal\
CryptSvc

HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\
Control\SafeBoot\Minimal\
DcomLaunch

HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\
Control\SafeBoot\Minimal\
dmadmin

HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\
Control\SafeBoot\Minimal\
dmboot.sys

HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\
Control\SafeBoot\Minimal\
dmio.sys

HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\
Control\SafeBoot\Minimal\
dmload.sys

HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\
Control\SafeBoot\Minimal\
dmserver

HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\
Control\SafeBoot\Minimal\
EventLog

HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\
Control\SafeBoot\Minimal\
File system

HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\
Control\SafeBoot\Minimal\
Filter

HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\
Control\SafeBoot\Minimal\
HelpSvc

HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\
Control\SafeBoot\Minimal\
Netlogon

HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\
Control\SafeBoot\Minimal\
PCI Configuration

HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\
Control\SafeBoot\Minimal\
PlugPlay

HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\
Control\SafeBoot\Minimal\
PNP Filter

HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\
Control\SafeBoot\Minimal\
Primary disk

HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\
Control\SafeBoot\Minimal\
RpcSs

HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\
Control\SafeBoot\Minimal\
SCSI Class

HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\
Control\SafeBoot\Minimal\
sermouse.sys

HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\
Control\SafeBoot\Minimal\
sr.sys

HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\
Control\SafeBoot\Minimal\
SRService

HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\
Control\SafeBoot\Minimal\
System Bus Extender

HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\
Control\SafeBoot\Minimal\
vga.sys

HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\
Control\SafeBoot\Minimal\
vgasave.sys

HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\
Control\SafeBoot\Minimal\
WinMgmt

HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\
Control\SafeBoot\Minimal\
{36FC9E60-C465-11CF-8056-444553540000}

HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\
Control\SafeBoot\Minimal\
{4D36E965-E325-11CE-BFC1-08002BE10318}

HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\
Control\SafeBoot\Minimal\
{4D36E967-E325-11CE-BFC1-08002BE10318}

HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\
Control\SafeBoot\Minimal\
{4D36E969-E325-11CE-BFC1-08002BE10318}

HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\
Control\SafeBoot\Minimal\
{4D36E96A-E325-11CE-BFC1-08002BE10318}

HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\
Control\SafeBoot\Minimal\
{4D36E96B-E325-11CE-BFC1-08002BE10318}

HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\
Control\SafeBoot\Minimal\
{4D36E96F-E325-11CE-BFC1-08002BE10318}

HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\
Control\SafeBoot\Minimal\
{4D36E977-E325-11CE-BFC1-08002BE10318}

HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\
Control\SafeBoot\Minimal\
{4D36E97B-E325-11CE-BFC1-08002BE10318}

HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\
Control\SafeBoot\Minimal\
{4D36E97D-E325-11CE-BFC1-08002BE10318}

HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\
Control\SafeBoot\Minimal\
{4D36E980-E325-11CE-BFC1-08002BE10318}

HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\
Control\SafeBoot\Minimal\
{71A27CDD-812A-11D0-BEC7-08002BE2092F}

HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\
Control\SafeBoot\Minimal\
{745A17A0-74D3-11D0-B6FE-00A0C90F57DA}

HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\
Control\SafeBoot\Minimal

HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\
Control\SafeBoot\Network\
AFD

HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\
Control\SafeBoot\Network\
AppMgmt

HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\
Control\SafeBoot\Network\
Base

HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\
Control\SafeBoot\Network\
Boot Bus Extender

HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\
Control\SafeBoot\Network\
Boot file system

HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\
Control\SafeBoot\Network\
Browser

HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\
Control\SafeBoot\Network\
CryptSvc

HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\
Control\SafeBoot\Network\
DcomLaunch

HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\
Control\SafeBoot\Network\
Dhcp

HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\
Control\SafeBoot\Network\
dmadmin

HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\
Control\SafeBoot\Network\
dmboot.sys

HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\
Control\SafeBoot\Network\
dmio.sys

HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\
Control\SafeBoot\Network\
dmload.sys

HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\
Control\SafeBoot\Network\
dmserver

HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\
Control\SafeBoot\Network\
DnsCache

HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\
Control\SafeBoot\Network\
EventLog

HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\
Control\SafeBoot\Network\
File system

HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\
Control\SafeBoot\Network\
Filter

HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\
Control\SafeBoot\Network\
HelpSvc

HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\
Control\SafeBoot\Network\
ip6fw.sys

HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\
Control\SafeBoot\Network\
ipnat.sys

HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\
Control\SafeBoot\Network\
LanmanServer

HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\
Control\SafeBoot\Network\
LanmanWorkstation

HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\
Control\SafeBoot\Network\
LmHosts

HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\
Control\SafeBoot\Network\
Messenger

HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\
Control\SafeBoot\Network\
NDIS

HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\
Control\SafeBoot\Network\
NDIS Wrapper

HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\
Control\SafeBoot\Network\
Ndisuio

HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\
Control\SafeBoot\Network\
NetBIOS

HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\
Control\SafeBoot\Network\
NetBIOSGroup

HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\
Control\SafeBoot\Network\
NetBT

HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\
Control\SafeBoot\Network\
NetDDEGroup

HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\
Control\SafeBoot\Network\
Netlogon

HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\
Control\SafeBoot\Network\
NetMan

HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\
Control\SafeBoot\Network\
Network

HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\
Control\SafeBoot\Network\
NetworkProvider

HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\
Control\SafeBoot\Network\
NtLmSsp

HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\
Control\SafeBoot\Network\
PCI Configuration

HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\
Control\SafeBoot\Network\
PlugPlay

HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\
Control\SafeBoot\Network\
PNP Filter

HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\
Control\SafeBoot\Network\
PNP_TDI

HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\
Control\SafeBoot\Network\
Primary disk

HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\
Control\SafeBoot\Network\
rdpcdd.sys

HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\
Control\SafeBoot\Network\
rdpdd.sys

HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\
Control\SafeBoot\Network\
rdpwd.sys

HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\
Control\SafeBoot\Network\
rdsessmgr

HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\
Control\SafeBoot\Network\
RpcSs

HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\
Control\SafeBoot\Network\
SCSI Class

HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\
Control\SafeBoot\Network\
sermouse.sys

HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\
Control\SafeBoot\Network\
SharedAccess

HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\
Control\SafeBoot\Network\
sr.sys

HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\
Control\SafeBoot\Network\
SRService

HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\
Control\SafeBoot\Network\
Streams Drivers

HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\
Control\SafeBoot\Network\
System Bus Extender

HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\
Control\SafeBoot\Network\
Tcpip

HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\
Control\SafeBoot\Network\
TDI

HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\
Control\SafeBoot\Network\
tdpipe.sys

HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\
Control\SafeBoot\Network\
tdtcp.sys

HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\
Control\SafeBoot\Network\
termservice

HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\
Control\SafeBoot\Network\
vga.sys

HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\
Control\SafeBoot\Network\
vgasave.sys

HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\
Control\SafeBoot\Network\
WinMgmt

HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\
Control\SafeBoot\Network\
WZCSVC

HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\
Control\SafeBoot\Network\
{36FC9E60-C465-11CF-8056-444553540000}

HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\
Control\SafeBoot\Network\
{4D36E965-E325-11CE-BFC1-08002BE10318}

HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\
Control\SafeBoot\Network\
{4D36E967-E325-11CE-BFC1-08002BE10318}

HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\
Control\SafeBoot\Network\
{4D36E969-E325-11CE-BFC1-08002BE10318}

HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\
Control\SafeBoot\Network\
{4D36E96A-E325-11CE-BFC1-08002BE10318}

HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\
Control\SafeBoot\Network\
{4D36E96B-E325-11CE-BFC1-08002BE10318}

HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\
Control\SafeBoot\Network\
{4D36E96F-E325-11CE-BFC1-08002BE10318}

HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\
Control\SafeBoot\Network\
{4D36E972-E325-11CE-BFC1-08002BE10318}

HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\
Control\SafeBoot\Network\
{4D36E973-E325-11CE-BFC1-08002BE10318}

HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\
Control\SafeBoot\Network\
{4D36E974-E325-11CE-BFC1-08002BE10318}

HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\
Control\SafeBoot\Network\
{4D36E975-E325-11CE-BFC1-08002BE10318}

HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\
Control\SafeBoot\Network\
{4D36E977-E325-11CE-BFC1-08002BE10318}

HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\
Control\SafeBoot\Network\
{4D36E97B-E325-11CE-BFC1-08002BE10318}

HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\
Control\SafeBoot\Network\
{4D36E97D-E325-11CE-BFC1-08002BE10318}

HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\
Control\SafeBoot\Network\
{4D36E980-E325-11CE-BFC1-08002BE10318}

HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\
Control\SafeBoot\Network\
{71A27CDD-812A-11D0-BEC7-08002BE2092F}

HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\
Control\SafeBoot\Network\
{745A17A0-74D3-11D0-B6FE-00A0C90F57DA}

HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\
Control\SafeBoot\Network

Dropping Routine

This worm drops the following files:

%User Temp%\epxxjs.exe
%System%\drivers\nkoin.sys
%System%\dllcache\autorun.inf
%Windows%\Cursors\Boom.vbs
B:\f230
%System Root%\f637
E:\fa3e
E:\fe45
F:\1024d
G:\10654
H:\10a8a
I:\10edf
J:\11383
K:\1178a
L:\11b91
M:\11fd7
N:\123de
O:\127e6
P:\12c1c
Q:\13023
R:\1342a
%User Temp%\winpins.exe
%User Temp%\winqxfd.exe
S:\13831
%User Temp%\wintrxgl.exe
T:\13c39
U:\1407e
%User Temp%\winbueeof.exe
%User Temp%\ajvu.exe
V:\14495
%User Temp%\opdy.exe
%User Temp%\uuawoi.exe
W:\148cb
X:\14ed6
Y:\1530c
%User Temp%\winlkic.exe
%User Temp%\winkriell.exe
%User Temp%\winsqso.exe
%System%\dllcache\tskmgr.exe
%Windows%\Fonts\wav.wav
%User Temp%\fkjcc.exe

(Note: %User Temp% is the current user's Temp folder, which is usually C:\Documents and Settings\{user name}\Local Settings\Temp on Windows 2000, XP, and Server 2003, or C:\Users\{user name}\AppData\Local\Temp on Windows Vista and 7.. %System% is the Windows system folder, which is usually C:\Windows\System32.. %Windows% is the Windows folder, which is usually C:\Windows.. %System Root% is the root folder, which is usually C:\. It is also where the operating system is located.)

Other Details

This worm connects to the following possibly malicious URL:

http://www.{BLOCKED}s.com.br/images/logo.gif?ba28=476560
http://zanzoul.{BLOCKED}a.com.sy/logo.gif?dd9e=283670
http://{BLOCKED}rystal.com/logo.gif?131b9=782650
http://{BLOCKED}meja.fr/img/banner.gif?1334f=314684
http://{BLOCKED}designs.com/logo.gif?134d6=632496
http://{BLOCKED}a.nl/banner.gif?136da=636624
http://{BLOCKED}osonline.com/logo.gif?13cb6=567546
http://scglobal.{BLOCKED}m.ph/logo.gif?14169=82281
http://www.{BLOCKED}ideo.com.br/logo.gif?143f9=331748
http://thecleanergroup.{BLOCKED}m.br/logo.gif?144f3=831870
http://{BLOCKED}ielektrik.com/logo.gif?152fd=260343
http://{BLOCKED}r.net/logo.gif?15493=87187
http://www.{BLOCKED}s.com.br/images/logo.gif?1582d=616763

This report is generated via an automated analysis system.

SOLUTION

Minimum Scan Engine:

9.200

Step 1

Before doing any scans, Windows XP, Windows Vista, and Windows 7 users must disable System Restore to allow full scanning of their computers.

Step 2

Enable Registry Editor, Task Manager, and Folder options

[ Learn More ]

By doing this step, you also enable other applications/programs disabled by this malware/grayware/spyware.

Step 3

Delete this registry key

[ Learn More ]

Important: Editing the Windows Registry incorrectly can lead to irreversible system malfunction. Please do this step only if you know how or you can ask assistance from your system administrator. Else, check this Microsoft article first before modifying your computer's registry.

In HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\policies
- system

In HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center
- Svc

In HKEY_CURRENT_USER\Software\Aasppapmmxkvs
- -993627007

In HKEY_CURRENT_USER\Software\VB and VBA Program Settings version
- trial

In HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Image File Execution Options
- ctfmon.exe

In HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Image File Execution Options
- taskmgr.exe

In HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Image File Execution Options
- boot.exe

In HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Image File Execution Options
- autorun.exe

In HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Image File Execution Options
- autoruns.exe

In HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Image File Execution Options
- auto.exe

In HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Image File Execution Options
- msconfig.exe

In HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Image File Execution Options
- procexp.exe

In HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion
- RunOnce

In HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer
- Run

In HKEY_CURRENT_USER\Software\Policies\Microsoft\Windows\System\Scripts\Logoff
- 0

In HKEY_CURRENT_USER\Software\Policies\Microsoft\Windows\System\Scripts\Logoff
- 0

In HKEY_LOCAL_MACHINE\Software\Policies\Microsoft\Windows\System\Scripts\Shutdown
- 0

In HKEY_LOCAL_MACHINE\Software\Policies\Microsoft\Windows\System\Scripts\Shutdown
- 0

In HKEY_LOCAL_MACHINE\Software\Policies\Microsoft\Windows\System\Scripts\Startup
- 0

In HKEY_LOCAL_MACHINE\Software\Policies\Microsoft\Windows\System\Scripts\Startup
- 0

To delete the registry key this malware/grayware created:

Open Registry Editor. Click Start>Run, type REGEDIT, then press Enter.
In the left panel, double-click the following:
HKEY_CURRENT_USER>Software>Microsoft>Windows>CurrentVersion>policies
Still in the left panel, locate and delete the key:
system
In the left panel, double-click the following:
HKEY_LOCAL_MACHINE>SOFTWARE>Microsoft>Security Center
Still in the left panel, locate and delete the key:
Svc
In the left panel, double-click the following:
HKEY_CURRENT_USER>Software>Aasppapmmxkvs
Still in the left panel, locate and delete the key:
-993627007
In the left panel, double-click the following:
HKEY_CURRENT_USER>Software>VB and VBA Program Settings version
Still in the left panel, locate and delete the key:
trial
In the left panel, double-click the following:
HKEY_LOCAL_MACHINE>SOFTWARE>Microsoft>Windows NT>CurrentVersion>Image File Execution Options
Still in the left panel, locate and delete the key:
ctfmon.exe
Again Still in the left panel, locate and delete the key:
taskmgr.exe
Again Still in the left panel, locate and delete the key:
boot.exe
Again Still in the left panel, locate and delete the key:
autorun.exe
Again Still in the left panel, locate and delete the key:
autoruns.exe
Again Still in the left panel, locate and delete the key:
auto.exe
Again Still in the left panel, locate and delete the key:
msconfig.exe
Again Still in the left panel, locate and delete the key:
procexp.exe
In the left panel, double-click the following:
HKEY_CURRENT_USER>SOFTWARE>Microsoft>Windows>CurrentVersion
Still in the left panel, locate and delete the key:
RunOnce
In the left panel, double-click the following:
HKEY_LOCAL_MACHINE>SOFTWARE>Microsoft>Windows>CurrentVersion>policies>Explorer
Still in the left panel, locate and delete the key:
Run
In the left panel, double-click the following:
HKEY_CURRENT_USER>Software>Policies>Microsoft>Windows>System>Scripts>Logoff
Still in the left panel, locate and delete the key:
0
Again Still in the left panel, locate and delete the key:
0
In the left panel, double-click the following:
HKEY_LOCAL_MACHINE>Software>Policies>Microsoft>Windows>System>Scripts>Shutdown
Still in the left panel, locate and delete the key:
0
Again Still in the left panel, locate and delete the key:
0
In the left panel, double-click the following:
HKEY_LOCAL_MACHINE>Software>Policies>Microsoft>Windows>System>Scripts>Startup
Still in the left panel, locate and delete the key:
0
Again Still in the left panel, locate and delete the key:
0
Close Registry Editor.

Step 4

Delete this registry value

[ Learn More ]

In HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center
- UacDisableNotify = "1"

In HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Svc
- AntiVirusOverride = "1"

In HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Svc
- AntiVirusDisableNotify = "1"

In HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Svc
- FirewallDisableNotify = "1"

In HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Svc
- FirewallOverride = "1"

In HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Svc
- UpdatesDisableNotify = "1"

In HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Svc
- UacDisableNotify = "1"

In HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Internet Settings
- GlobalUserOffline = "0"

In HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\system
- EnableLUA = "0"

In HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Services\SharedAccess\Parameters\FirewallPolicy\StandardProfile\AuthorizedApplications\List
- {malware path and file name} = "{malware path and file name}:*:enabled:ipsec"

In HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Services\SharedAccess\Parameters\FirewallPolicy\StandardProfile
- EnableFirewall = "0"

In HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Services\SharedAccess\Parameters\FirewallPolicy\StandardProfile
- DoNotAllowExceptions = "0"

In HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Services\SharedAccess\Parameters\FirewallPolicy\StandardProfile
- DisableNotifications = "1"

In HKEY_CURRENT_USER\Software\Aasppapmmxkvs\-993627007
- 1768776769 = "93"

In HKEY_CURRENT_USER\Software\Aasppapmmxkvs\-993627007
- -757413758 = "0"

In HKEY_CURRENT_USER\Software\Aasppapmmxkvs\-993627007
- 1011363011 = "0"

In HKEY_CURRENT_USER\Software\Aasppapmmxkvs\-993627007
- -1514827516 = "23"

In HKEY_CURRENT_USER\Software\Aasppapmmxkvs\-993627007
- 253949253 = "1a1"

In HKEY_CURRENT_USER\Software\Aasppapmmxkvs\-993627007
- 2022726022 = "{random characters}"

In HKEY_CURRENT_USER\Software\Aasppapmmxkvs\-993627007
- -503464505 = "{random characters}"

In HKEY_CURRENT_USER\Software\Aasppapmmxkvs
- A1_0 = "cc96283a"

In HKEY_CURRENT_USER\Software\Aasppapmmxkvs
- A2_0 = "158d"

In HKEY_CURRENT_USER\Software\Aasppapmmxkvs
- A3_0 = "136a29"

In HKEY_CURRENT_USER\Software\Aasppapmmxkvs
- A4_0 = "0"

In HKEY_CURRENT_USER\Software\Aasppapmmxkvs
- A1_1 = "274b5a28"

In HKEY_CURRENT_USER\Software\Aasppapmmxkvs
- A2_1 = "696d71cc"

In HKEY_CURRENT_USER\Software\Aasppapmmxkvs
- A3_1 = "686ee68"

In HKEY_CURRENT_USER\Software\Aasppapmmxkvs
- A4_1 = "696d6441"

In HKEY_CURRENT_USER\Software\Aasppapmmxkvs
- A1_2 = "966c8ca7"

In HKEY_CURRENT_USER\Software\Aasppapmmxkvs
- A2_2 = "d2daddf"

In HKEY_CURRENT_USER\Software\Aasppapmmxkvs
- A3_2 = "d3d9a2ab"

In HKEY_CURRENT_USER\Software\Aasppapmmxkvs
- A4_2 = "d2dac882"

In HKEY_CURRENT_USER\Software\Aasppapmmxkvs
- A1_3 = "2b12cf3"

In HKEY_CURRENT_USER\Software\Aasppapmmxkvs
- A2_3 = "3c48394e"

In HKEY_CURRENT_USER\Software\Aasppapmmxkvs
- A3_3 = "3d4b46ea"

In HKEY_CURRENT_USER\Software\Aasppapmmxkvs
- A4_3 = "3c482cc3"

In HKEY_CURRENT_USER\Software\Aasppapmmxkvs
- A1_4 = "41c4c3fd"

In HKEY_CURRENT_USER\Software\Aasppapmmxkvs
- A2_4 = "a5b58489"

In HKEY_CURRENT_USER\Software\Aasppapmmxkvs
- A3_4 = "a4b6fb2d"

In HKEY_CURRENT_USER\Software\Aasppapmmxkvs
- A4_4 = "a5b5914"

In HKEY_CURRENT_USER\Software\Aasppapmmxkvs
- A1_5 = "311bc98d"

In HKEY_CURRENT_USER\Software\Aasppapmmxkvs
- A2_5 = "f22ec8"

In HKEY_CURRENT_USER\Software\Aasppapmmxkvs
- A3_5 = "e219f6c"

In HKEY_CURRENT_USER\Software\Aasppapmmxkvs
- A4_5 = "f22f545"

In HKEY_CURRENT_USER\Software\Aasppapmmxkvs
- A1_6 = "2c2cd"

In HKEY_CURRENT_USER\Software\Aasppapmmxkvs
- A2_6 = "7894cb"

In HKEY_CURRENT_USER\Software\Aasppapmmxkvs
- A3_6 = "799333af"

In HKEY_CURRENT_USER\Software\Aasppapmmxkvs
- A4_6 = "7895986"

In HKEY_CURRENT_USER\Software\Aasppapmmxkvs
- A1_7 = "9deeef94"

In HKEY_CURRENT_USER\Software\Aasppapmmxkvs
- A2_7 = "e1fda84a"

In HKEY_CURRENT_USER\Software\Aasppapmmxkvs
- A3_7 = "efed7ee"

In HKEY_CURRENT_USER\Software\Aasppapmmxkvs
- A4_7 = "e1fdbdc7"

In HKEY_CURRENT_USER\Software\Aasppapmmxkvs
- A1_8 = "b2e23ad"

In HKEY_CURRENT_USER\Software\Aasppapmmxkvs
- A2_8 = "4b6b3785"

In HKEY_CURRENT_USER\Software\Aasppapmmxkvs
- A3_8 = "4a684821"

In HKEY_CURRENT_USER\Software\Aasppapmmxkvs
- A4_8 = "4b6b228"

In HKEY_CURRENT_USER\Software\Aasppapmmxkvs
- A1_9 = "1f34131"

In HKEY_CURRENT_USER\Software\Aasppapmmxkvs
- A2_9 = "b4d893c4"

In HKEY_CURRENT_USER\Software\Aasppapmmxkvs
- A3_9 = "b5dbec6"

In HKEY_CURRENT_USER\Software\Aasppapmmxkvs
- A4_9 = "b4d88649"

In HKEY_CURRENT_USER\Software\Aasppapmmxkvs
- A1_10 = "ae7fae37"

In HKEY_CURRENT_USER\Software\Aasppapmmxkvs
- A2_10 = "1e45f5e2"

In HKEY_CURRENT_USER\Software\Aasppapmmxkvs
- A3_10 = "1f468a3"

In HKEY_CURRENT_USER\Software\Aasppapmmxkvs
- A4_10 = "1e45ea8a"

In HKEY_CURRENT_USER\Software\Aasppapmmxkvs
- A1_11 = "f7edf9a"

In HKEY_CURRENT_USER\Software\Aasppapmmxkvs
- A2_11 = "87b3548f"

In HKEY_CURRENT_USER\Software\Aasppapmmxkvs
- A3_11 = "86b24e2"

In HKEY_CURRENT_USER\Software\Aasppapmmxkvs
- A4_11 = "87b34ecb"

In HKEY_CURRENT_USER\Software\Aasppapmmxkvs
- A1_12 = "5c75c941"

In HKEY_CURRENT_USER\Software\Aasppapmmxkvs
- A2_12 = "f12a5"

In HKEY_CURRENT_USER\Software\Aasppapmmxkvs
- A3_12 = "f23d925"

In HKEY_CURRENT_USER\Software\Aasppapmmxkvs
- A4_12 = "f12b3c"

In HKEY_CURRENT_USER\Software\Aasppapmmxkvs
- A1_13 = "f1ea3a84"

In HKEY_CURRENT_USER\Software\Aasppapmmxkvs
- A2_13 = "5a8ede9"

In HKEY_CURRENT_USER\Software\Aasppapmmxkvs
- A3_13 = "5b8d7d64"

In HKEY_CURRENT_USER\Software\Aasppapmmxkvs
- A4_13 = "5a8e174d"

In HKEY_CURRENT_USER\Software\Aasppapmmxkvs
- A1_14 = "4e853d57"

In HKEY_CURRENT_USER\Software\Aasppapmmxkvs
- A2_14 = "c3fb6e7"

In HKEY_CURRENT_USER\Software\Aasppapmmxkvs
- A3_14 = "c2f811a7"

In HKEY_CURRENT_USER\Software\Aasppapmmxkvs
- A4_14 = "c3fb7b8e"

In HKEY_CURRENT_USER\Software\Aasppapmmxkvs
- A1_15 = "6d42f8fd"

In HKEY_CURRENT_USER\Software\Aasppapmmxkvs
- A2_15 = "2d68c11"

In HKEY_CURRENT_USER\Software\Aasppapmmxkvs
- A3_15 = "2c6bb5e6"

In HKEY_CURRENT_USER\Software\Aasppapmmxkvs
- A4_15 = "2d68dfcf"

In HKEY_CURRENT_USER\Software\Aasppapmmxkvs
- A1_16 = "f4e515b"

In HKEY_CURRENT_USER\Software\Aasppapmmxkvs
- A2_16 = "96d65ade"

In HKEY_CURRENT_USER\Software\Aasppapmmxkvs
- A3_16 = "97d52e39"

In HKEY_CURRENT_USER\Software\Aasppapmmxkvs
- A4_16 = "96d6441"

In HKEY_CURRENT_USER\Software\Aasppapmmxkvs
- A1_17 = "23ae96"

In HKEY_CURRENT_USER\Software\Aasppapmmxkvs
- A2_17 = "43b4d8"

In HKEY_CURRENT_USER\Software\Aasppapmmxkvs
- A3_17 = "14c278"

In HKEY_CURRENT_USER\Software\Aasppapmmxkvs
- A4_17 = "43a851"

In HKEY_CURRENT_USER\Software\Aasppapmmxkvs
- A1_18 = "9f891cbe"

In HKEY_CURRENT_USER\Software\Aasppapmmxkvs
- A2_18 = "69b11127"

In HKEY_CURRENT_USER\Software\Aasppapmmxkvs
- A3_18 = "68b266bb"

In HKEY_CURRENT_USER\Software\Aasppapmmxkvs
- A4_18 = "69b1c92"

In HKEY_CURRENT_USER\Software\Aasppapmmxkvs
- A1_19 = "17b96186"

In HKEY_CURRENT_USER\Software\Aasppapmmxkvs
- A2_19 = "d31e56bb"

In HKEY_CURRENT_USER\Software\Aasppapmmxkvs
- A3_19 = "d21d1afa"

In HKEY_CURRENT_USER\Software\Aasppapmmxkvs
- A4_19 = "d31e7d3"

In HKEY_CURRENT_USER\Software\Aasppapmmxkvs
- A1_20 = "f7c32c3d"

In HKEY_CURRENT_USER\Software\Aasppapmmxkvs
- A2_20 = "3c8bcc63"

In HKEY_CURRENT_USER\Software\Aasppapmmxkvs
- A3_20 = "3d88bf3d"

In HKEY_CURRENT_USER\Software\Aasppapmmxkvs
- A4_20 = "3c8bd514"

In HKEY_CURRENT_USER\Software\Aasppapmmxkvs
- A1_21 = "95fa4b6b"

In HKEY_CURRENT_USER\Software\Aasppapmmxkvs
- A2_21 = "a5f91c9f"

In HKEY_CURRENT_USER\Software\Aasppapmmxkvs
- A3_21 = "a4fa537c"

In HKEY_CURRENT_USER\Software\Aasppapmmxkvs
- A4_21 = "a5f93955"

In HKEY_CURRENT_USER\Software\Aasppapmmxkvs
- A1_22 = "d4c64dc4"

In HKEY_CURRENT_USER\Software\Aasppapmmxkvs
- A2_22 = "f66bda1"

In HKEY_CURRENT_USER\Software\Aasppapmmxkvs
- A3_22 = "e65f7bf"

In HKEY_CURRENT_USER\Software\Aasppapmmxkvs
- A4_22 = "f669d96"

In HKEY_CURRENT_USER\Software\Aasppapmmxkvs
- A1_23 = "3db27b81"

In HKEY_CURRENT_USER\Software\Aasppapmmxkvs
- A2_23 = "78d41c5"

In HKEY_CURRENT_USER\Software\Aasppapmmxkvs
- A3_23 = "79d76bfe"

In HKEY_CURRENT_USER\Software\Aasppapmmxkvs
- A4_23 = "78d41d7"

In HKEY_CURRENT_USER\Software\Aasppapmmxkvs
- A1_24 = "2bcc9e4"

In HKEY_CURRENT_USER\Software\Aasppapmmxkvs
- A2_24 = "e241719a"

In HKEY_CURRENT_USER\Software\Aasppapmmxkvs
- A3_24 = "e342c31"

In HKEY_CURRENT_USER\Software\Aasppapmmxkvs
- A4_24 = "e2416618"

In HKEY_CURRENT_USER\Software\Aasppapmmxkvs
- A1_25 = "9a9db85"

In HKEY_CURRENT_USER\Software\Aasppapmmxkvs
- A2_25 = "4baed4fa"

In HKEY_CURRENT_USER\Software\Aasppapmmxkvs
- A3_25 = "4aada7"

In HKEY_CURRENT_USER\Software\Aasppapmmxkvs
- A4_25 = "4baeca59"

In HKEY_CURRENT_USER\Software\Aasppapmmxkvs
- A1_26 = "68833653"

In HKEY_CURRENT_USER\Software\Aasppapmmxkvs
- A2_26 = "b51cf14"

In HKEY_CURRENT_USER\Software\Aasppapmmxkvs
- A3_26 = "b41f44b3"

In HKEY_CURRENT_USER\Software\Aasppapmmxkvs
- A4_26 = "b51c2e9a"

In HKEY_CURRENT_USER\Software\Aasppapmmxkvs
- A1_27 = "3ef2fa84"

In HKEY_CURRENT_USER\Software\Aasppapmmxkvs
- A2_27 = "1e898d5b"

In HKEY_CURRENT_USER\Software\Aasppapmmxkvs
- A3_27 = "1f8af8f2"

In HKEY_CURRENT_USER\Software\Aasppapmmxkvs
- A4_27 = "1e8992db"

In HKEY_CURRENT_USER\Software\Aasppapmmxkvs
- A1_28 = "db7cd2dd"

In HKEY_CURRENT_USER\Software\Aasppapmmxkvs
- A2_28 = "87f6d68f"

In HKEY_CURRENT_USER\Software\Aasppapmmxkvs
- A3_28 = "86f59d35"

In HKEY_CURRENT_USER\Software\Aasppapmmxkvs
- A4_28 = "87f6f71c"

In HKEY_CURRENT_USER\Software\Aasppapmmxkvs
- A1_29 = "4e416f"

In HKEY_CURRENT_USER\Software\Aasppapmmxkvs
- A2_29 = "f1644619"

In HKEY_CURRENT_USER\Software\Aasppapmmxkvs
- A3_29 = "f673174"

In HKEY_CURRENT_USER\Software\Aasppapmmxkvs
- A4_29 = "f1645b5d"

In HKEY_CURRENT_USER\Software\Aasppapmmxkvs
- A1_30 = "da44fb57"

In HKEY_CURRENT_USER\Software\Aasppapmmxkvs
- A2_30 = "5ad1a461"

In HKEY_CURRENT_USER\Software\Aasppapmmxkvs
- A3_30 = "5bd2d5b7"

In HKEY_CURRENT_USER\Software\Aasppapmmxkvs
- A4_30 = "5ad1bf9e"

In HKEY_CURRENT_USER\Software\Aasppapmmxkvs
- A1_31 = "59464a8a"

In HKEY_CURRENT_USER\Software\Aasppapmmxkvs
- A2_31 = "c43f615"

In HKEY_CURRENT_USER\Software\Aasppapmmxkvs
- A3_31 = "c53c49f6"

In HKEY_CURRENT_USER\Software\Aasppapmmxkvs
- A4_31 = "c43f23df"

In HKEY_CURRENT_USER\Software\Aasppapmmxkvs
- A1_32 = "28ec3d71"

In HKEY_CURRENT_USER\Software\Aasppapmmxkvs
- A2_32 = "2dac9fa5"

In HKEY_CURRENT_USER\Software\Aasppapmmxkvs
- A3_32 = "2cafe29"

In HKEY_CURRENT_USER\Software\Aasppapmmxkvs
- A4_32 = "2dac882"

In HKEY_CURRENT_USER\Software\Aasppapmmxkvs
- A1_33 = "f5679e3d"

In HKEY_CURRENT_USER\Software\Aasppapmmxkvs
- A2_33 = "9719f969"

In HKEY_CURRENT_USER\Software\Aasppapmmxkvs
- A3_33 = "961a8648"

In HKEY_CURRENT_USER\Software\Aasppapmmxkvs
- A4_33 = "9719ec61"

In HKEY_CURRENT_USER\Software\Aasppapmmxkvs
- A1_34 = "e1dd31ec"

In HKEY_CURRENT_USER\Software\Aasppapmmxkvs
- A2_34 = "87491e"

In HKEY_CURRENT_USER\Software\Aasppapmmxkvs
- A3_34 = "1843a8b"

In HKEY_CURRENT_USER\Software\Aasppapmmxkvs
- A4_34 = "875a2"

In HKEY_CURRENT_USER\Software\Aasppapmmxkvs
- A1_35 = "3582dfaf"

In HKEY_CURRENT_USER\Software\Aasppapmmxkvs
- A2_35 = "69f4afcf"

In HKEY_CURRENT_USER\Software\Aasppapmmxkvs
- A3_35 = "68f7deca"

In HKEY_CURRENT_USER\Software\Aasppapmmxkvs
- A4_35 = "69f4b4e3"

In HKEY_CURRENT_USER\Software\Aasppapmmxkvs
- A1_36 = "cfa297d"

In HKEY_CURRENT_USER\Software\Aasppapmmxkvs
- A2_36 = "d36238b7"

In HKEY_CURRENT_USER\Software\Aasppapmmxkvs
- A3_36 = "d26173d"

In HKEY_CURRENT_USER\Software\Aasppapmmxkvs
- A4_36 = "d3621924"

In HKEY_CURRENT_USER\Software\Aasppapmmxkvs
- A1_37 = "a8641de"

In HKEY_CURRENT_USER\Software\Aasppapmmxkvs
- A2_37 = "3ccf5d6e"

In HKEY_CURRENT_USER\Software\Aasppapmmxkvs
- A3_37 = "3dcc174c"

In HKEY_CURRENT_USER\Software\Aasppapmmxkvs
- A4_37 = "3ccf7d65"

In HKEY_CURRENT_USER\Software\Aasppapmmxkvs
- A1_38 = "94c3bf6"

In HKEY_CURRENT_USER\Software\Aasppapmmxkvs
- A2_38 = "a63cf8be"

In HKEY_CURRENT_USER\Software\Aasppapmmxkvs
- A3_38 = "a73f8b8f"

In HKEY_CURRENT_USER\Software\Aasppapmmxkvs
- A4_38 = "a63ce1a6"

In HKEY_CURRENT_USER\Software\Aasppapmmxkvs
- A1_39 = "2f33d32"

In HKEY_CURRENT_USER\Software\Aasppapmmxkvs
- A2_39 = "faa5ec7"

In HKEY_CURRENT_USER\Software\Aasppapmmxkvs
- A3_39 = "ea92fce"

In HKEY_CURRENT_USER\Software\Aasppapmmxkvs
- A4_39 = "faa45e7"

In HKEY_CURRENT_USER\Software\Aasppapmmxkvs
- A1_40 = "e56beee1"

In HKEY_CURRENT_USER\Software\Aasppapmmxkvs
- A2_40 = "7917b499"

In HKEY_CURRENT_USER\Software\Aasppapmmxkvs
- A3_40 = "7814c1"

In HKEY_CURRENT_USER\Software\Aasppapmmxkvs
- A4_40 = "7917aa28"

In HKEY_CURRENT_USER\Software\Aasppapmmxkvs
- A1_41 = "d9f97534"

In HKEY_CURRENT_USER\Software\Aasppapmmxkvs
- A2_41 = "e28516f6"

In HKEY_CURRENT_USER\Software\Aasppapmmxkvs
- A3_41 = "e386644"

In HKEY_CURRENT_USER\Software\Aasppapmmxkvs
- A4_41 = "e285e69"

In HKEY_CURRENT_USER\Software\Aasppapmmxkvs
- A1_42 = "73bc56f3"

In HKEY_CURRENT_USER\Software\Aasppapmmxkvs
- A2_42 = "4bf26f39"

In HKEY_CURRENT_USER\Software\Aasppapmmxkvs
- A3_42 = "4af11883"

In HKEY_CURRENT_USER\Software\Aasppapmmxkvs
- A4_42 = "4bf272aa"

In HKEY_CURRENT_USER\Software\Aasppapmmxkvs
- A1_43 = "93c2dd46"

In HKEY_CURRENT_USER\Software\Aasppapmmxkvs
- A2_43 = "b55fc71c"

In HKEY_CURRENT_USER\Software\Aasppapmmxkvs
- A3_43 = "b45cbcc2"

In HKEY_CURRENT_USER\Software\Aasppapmmxkvs
- A4_43 = "b55fd6eb"

In HKEY_CURRENT_USER\Software\Aasppapmmxkvs
- A1_44 = "1362c4c"

In HKEY_CURRENT_USER\Software\Aasppapmmxkvs
- A2_44 = "1ecd22d5"

In HKEY_CURRENT_USER\Software\Aasppapmmxkvs
- A3_44 = "1fce515"

In HKEY_CURRENT_USER\Software\Aasppapmmxkvs
- A4_44 = "1ecd3b2c"

In HKEY_CURRENT_USER\Software\Aasppapmmxkvs
- A1_45 = "91b34525"

In HKEY_CURRENT_USER\Software\Aasppapmmxkvs
- A2_45 = "883a88f"

In HKEY_CURRENT_USER\Software\Aasppapmmxkvs
- A3_45 = "8939f544"

In HKEY_CURRENT_USER\Software\Aasppapmmxkvs
- A4_45 = "883a9f6d"

In HKEY_CURRENT_USER\Software\Aasppapmmxkvs
- A1_46 = "49b7affb"

In HKEY_CURRENT_USER\Software\Aasppapmmxkvs
- A2_46 = "f1a81fdf"

In HKEY_CURRENT_USER\Software\Aasppapmmxkvs
- A3_46 = "fab6987"

In HKEY_CURRENT_USER\Software\Aasppapmmxkvs
- A4_46 = "f1a83ae"

In HKEY_CURRENT_USER\Software\Aasppapmmxkvs
- A1_47 = "2ab14b3"

In HKEY_CURRENT_USER\Software\Aasppapmmxkvs
- A2_47 = "5b157fe8"

In HKEY_CURRENT_USER\Software\Aasppapmmxkvs
- A3_47 = "5a16dc6"

In HKEY_CURRENT_USER\Software\Aasppapmmxkvs
- A4_47 = "5b1567ef"

In HKEY_CURRENT_USER\Software\Aasppapmmxkvs
- A1_48 = "daced68c"

In HKEY_CURRENT_USER\Software\Aasppapmmxkvs
- A2_48 = "c482d61"

In HKEY_CURRENT_USER\Software\Aasppapmmxkvs
- A3_48 = "c581a619"

In HKEY_CURRENT_USER\Software\Aasppapmmxkvs
- A4_48 = "c482cc3"

In HKEY_CURRENT_USER\Software\Aasppapmmxkvs
- A1_49 = "aec2e829"

In HKEY_CURRENT_USER\Software\Aasppapmmxkvs
- A2_49 = "2df15bb"

In HKEY_CURRENT_USER\Software\Aasppapmmxkvs
- A3_49 = "2cf35a58"

In HKEY_CURRENT_USER\Software\Aasppapmmxkvs
- A4_49 = "2df371"

In HKEY_CURRENT_USER\Software\Aasppapmmxkvs
- A1_50 = "8b3a277a"

In HKEY_CURRENT_USER\Software\Aasppapmmxkvs
- A2_50 = "975db79f"

In HKEY_CURRENT_USER\Software\Aasppapmmxkvs
- A3_50 = "965efe9b"

In HKEY_CURRENT_USER\Software\Aasppapmmxkvs
- A4_50 = "975d94b2"

In HKEY_CURRENT_USER\Software\Aasppapmmxkvs
- A1_51 = "97ddb1ad"

In HKEY_CURRENT_USER\Software\Aasppapmmxkvs
- A2_51 = "cae44d"

In HKEY_CURRENT_USER\Software\Aasppapmmxkvs
- A3_51 = "1c992da"

In HKEY_CURRENT_USER\Software\Aasppapmmxkvs
- A4_51 = "caf8f3"

In HKEY_CURRENT_USER\Software\Aasppapmmxkvs
- A1_52 = "6349bde7"

In HKEY_CURRENT_USER\Software\Aasppapmmxkvs
- A2_52 = "6a386db"

In HKEY_CURRENT_USER\Software\Aasppapmmxkvs
- A3_52 = "6b3b371d"

In HKEY_CURRENT_USER\Software\Aasppapmmxkvs
- A4_52 = "6a385d34"

In HKEY_CURRENT_USER\Software\Aasppapmmxkvs
- A1_53 = "9d966c2c"

In HKEY_CURRENT_USER\Software\Aasppapmmxkvs
- A2_53 = "d3a5e122"

In HKEY_CURRENT_USER\Software\Aasppapmmxkvs
- A3_53 = "d2a6ab5c"

In HKEY_CURRENT_USER\Software\Aasppapmmxkvs
- A4_53 = "d3a5c175"

In HKEY_CURRENT_USER\Software\Aasppapmmxkvs
- A1_54 = "ca5e8ffa"

In HKEY_CURRENT_USER\Software\Aasppapmmxkvs
- A2_54 = "3d1369b"

In HKEY_CURRENT_USER\Software\Aasppapmmxkvs
- A3_54 = "3c14f9f"

In HKEY_CURRENT_USER\Software\Aasppapmmxkvs
- A4_54 = "3d1325b6"

In HKEY_CURRENT_USER\Software\Aasppapmmxkvs
- A1_55 = "8f85aba1"

In HKEY_CURRENT_USER\Software\Aasppapmmxkvs
- A2_55 = "a689592"

In HKEY_CURRENT_USER\Software\Aasppapmmxkvs
- A3_55 = "a783e3de"

In HKEY_CURRENT_USER\Software\Aasppapmmxkvs
- A4_55 = "a6889f7"

In HKEY_CURRENT_USER\Software\Aasppapmmxkvs
- A1_56 = "bd4fe36e"

In HKEY_CURRENT_USER\Software\Aasppapmmxkvs
- A2_56 = "fedf1cf"

In HKEY_CURRENT_USER\Software\Aasppapmmxkvs
- A3_56 = "eee8411"

In HKEY_CURRENT_USER\Software\Aasppapmmxkvs
- A4_56 = "fedee38"

In HKEY_CURRENT_USER\Software\Aasppapmmxkvs
- A1_57 = "af6e72"

In HKEY_CURRENT_USER\Software\Aasppapmmxkvs
- A2_57 = "795b486"

In HKEY_CURRENT_USER\Software\Aasppapmmxkvs
- A3_57 = "7858385"

In HKEY_CURRENT_USER\Software\Aasppapmmxkvs
- A4_57 = "795b5279"

In HKEY_CURRENT_USER\Software\Aasppapmmxkvs
- A1_58 = "39af8e3"

In HKEY_CURRENT_USER\Software\Aasppapmmxkvs
- A2_58 = "e2c8aa82"

In HKEY_CURRENT_USER\Software\Aasppapmmxkvs
- A3_58 = "e3cbdc93"

In HKEY_CURRENT_USER\Software\Aasppapmmxkvs
- A4_58 = "e2c8b6ba"

In HKEY_CURRENT_USER\Software\Aasppapmmxkvs
- A1_59 = "2dcaf3ab"

In HKEY_CURRENT_USER\Software\Aasppapmmxkvs
- A2_59 = "4c36393c"

In HKEY_CURRENT_USER\Software\Aasppapmmxkvs
- A3_59 = "4d357d2"

In HKEY_CURRENT_USER\Software\Aasppapmmxkvs
- A4_59 = "4c361afb"

In HKEY_CURRENT_USER\Software\Aasppapmmxkvs
- A1_60 = "6da93765"

In HKEY_CURRENT_USER\Software\Aasppapmmxkvs
- A2_60 = "b5a3696a"

In HKEY_CURRENT_USER\Software\Aasppapmmxkvs
- A3_60 = "b4a1515"

In HKEY_CURRENT_USER\Software\Aasppapmmxkvs
- A4_60 = "b5a37f3c"

In HKEY_CURRENT_USER\Software\Aasppapmmxkvs
- A1_61 = "7d8bca24"

In HKEY_CURRENT_USER\Software\Aasppapmmxkvs
- A2_61 = "1f1c2ee"

In HKEY_CURRENT_USER\Software\Aasppapmmxkvs
- A3_61 = "1e138954"

In HKEY_CURRENT_USER\Software\Aasppapmmxkvs
- A4_61 = "1f1e37d"

In HKEY_CURRENT_USER\Software\Aasppapmmxkvs
- A1_62 = "bc1d36f1"

In HKEY_CURRENT_USER\Software\Aasppapmmxkvs
- A2_62 = "887e5e24"

In HKEY_CURRENT_USER\Software\Aasppapmmxkvs
- A3_62 = "897d2d97"

In HKEY_CURRENT_USER\Software\Aasppapmmxkvs
- A4_62 = "887e47be"

In HKEY_CURRENT_USER\Software\Aasppapmmxkvs
- A1_63 = "7c3e4da6"

In HKEY_CURRENT_USER\Software\Aasppapmmxkvs
- A2_63 = "f1ebb6e2"

In HKEY_CURRENT_USER\Software\Aasppapmmxkvs
- A3_63 = "fe8c1d6"

In HKEY_CURRENT_USER\Software\Aasppapmmxkvs
- A4_63 = "f1ebabff"

In HKEY_CURRENT_USER\Software\Aasppapmmxkvs
- A1_64 = "4cfa6314"

In HKEY_CURRENT_USER\Software\Aasppapmmxkvs
- A2_64 = "5b59ecc"

In HKEY_CURRENT_USER\Software\Aasppapmmxkvs
- A3_64 = "5a5a7a69"

In HKEY_CURRENT_USER\Software\Aasppapmmxkvs
- A4_64 = "5b5914"

In HKEY_CURRENT_USER\Software\Aasppapmmxkvs
- A1_65 = "d52fcd8"

In HKEY_CURRENT_USER\Software\Aasppapmmxkvs
- A2_65 = "c4c668a5"

In HKEY_CURRENT_USER\Software\Aasppapmmxkvs
- A3_65 = "c5c51ea8"

In HKEY_CURRENT_USER\Software\Aasppapmmxkvs
- A4_65 = "c4c67481"

In HKEY_CURRENT_USER\Software\Aasppapmmxkvs
- A1_66 = "7fa9898f"

In HKEY_CURRENT_USER\Software\Aasppapmmxkvs
- A2_66 = "2e33fbbd"

In HKEY_CURRENT_USER\Software\Aasppapmmxkvs
- A3_66 = "2f3b2eb"

In HKEY_CURRENT_USER\Software\Aasppapmmxkvs
- A4_66 = "2e33d8c2"

In HKEY_CURRENT_USER\Software\Aasppapmmxkvs
- A1_67 = "52284f5a"

In HKEY_CURRENT_USER\Software\Aasppapmmxkvs
- A2_67 = "97a125ee"

In HKEY_CURRENT_USER\Software\Aasppapmmxkvs
- A3_67 = "96a2572a"

In HKEY_CURRENT_USER\Software\Aasppapmmxkvs
- A4_67 = "97a13d3"

In HKEY_CURRENT_USER\Software\Aasppapmmxkvs
- A1_68 = "6338291d"

In HKEY_CURRENT_USER\Software\Aasppapmmxkvs
- A2_68 = "1eb89f"

In HKEY_CURRENT_USER\Software\Aasppapmmxkvs
- A3_68 = "dcb6d"

In HKEY_CURRENT_USER\Software\Aasppapmmxkvs
- A4_68 = "1ea144"

In HKEY_CURRENT_USER\Software\Aasppapmmxkvs
- A1_69 = "7e2fabe"

In HKEY_CURRENT_USER\Software\Aasppapmmxkvs
- A2_69 = "6a7c1b34"

In HKEY_CURRENT_USER\Software\Aasppapmmxkvs
- A3_69 = "6b7f6fac"

In HKEY_CURRENT_USER\Software\Aasppapmmxkvs
- A4_69 = "6a7c585"

In HKEY_CURRENT_USER\Software\Aasppapmmxkvs
- A1_70 = "3c1499f"

In HKEY_CURRENT_USER\Software\Aasppapmmxkvs
- A2_70 = "d3e971a9"

In HKEY_CURRENT_USER\Software\Aasppapmmxkvs
- A3_70 = "d2ea3ef"

In HKEY_CURRENT_USER\Software\Aasppapmmxkvs
- A4_70 = "d3e969c6"

In HKEY_CURRENT_USER\Software\Aasppapmmxkvs
- A1_71 = "74f9e5e"

In HKEY_CURRENT_USER\Software\Aasppapmmxkvs
- A2_71 = "3d56d1e5"

In HKEY_CURRENT_USER\Software\Aasppapmmxkvs
- A3_71 = "3c55a42e"

In HKEY_CURRENT_USER\Software\Aasppapmmxkvs
- A4_71 = "3d56ce7"

In HKEY_CURRENT_USER\Software\Aasppapmmxkvs
- A1_72 = "733b3f4"

In HKEY_CURRENT_USER\Software\Aasppapmmxkvs
- A2_72 = "a6c41435"

In HKEY_CURRENT_USER\Software\Aasppapmmxkvs
- A3_72 = "a7c75861"

In HKEY_CURRENT_USER\Software\Aasppapmmxkvs
- A4_72 = "a6c43248"

In HKEY_CURRENT_USER\Software\Aasppapmmxkvs
- A1_73 = "ac45dad6"

In HKEY_CURRENT_USER\Software\Aasppapmmxkvs
- A2_73 = "1318c4"

In HKEY_CURRENT_USER\Software\Aasppapmmxkvs
- A3_73 = "1132fca"

In HKEY_CURRENT_USER\Software\Aasppapmmxkvs
- A4_73 = "1319689"

In HKEY_CURRENT_USER\Software\Aasppapmmxkvs
- A1_74 = "d2135a95"

In HKEY_CURRENT_USER\Software\Aasppapmmxkvs
- A2_74 = "799eeb5d"

In HKEY_CURRENT_USER\Software\Aasppapmmxkvs
- A3_74 = "789d9e3"

In HKEY_CURRENT_USER\Software\Aasppapmmxkvs
- A4_74 = "799efaca"

In HKEY_CURRENT_USER\Software\Aasppapmmxkvs
- A1_75 = "7562a5e"

In HKEY_CURRENT_USER\Software\Aasppapmmxkvs
- A2_75 = "e3c487c"

In HKEY_CURRENT_USER\Software\Aasppapmmxkvs
- A3_75 = "e2f3522"

In HKEY_CURRENT_USER\Software\Aasppapmmxkvs
- A4_75 = "e3c5fb"

In HKEY_CURRENT_USER\Software\Aasppapmmxkvs
- A1_76 = "37bad2"

In HKEY_CURRENT_USER\Software\Aasppapmmxkvs
- A2_76 = "4c79d56f"

In HKEY_CURRENT_USER\Software\Aasppapmmxkvs
- A3_76 = "4d7aa965"

In HKEY_CURRENT_USER\Software\Aasppapmmxkvs
- A4_76 = "4c79c34c"

In HKEY_CURRENT_USER\Software\Aasppapmmxkvs
- A1_77 = "5adec"

In HKEY_CURRENT_USER\Software\Aasppapmmxkvs
- A2_77 = "b5e73ead"

In HKEY_CURRENT_USER\Software\Aasppapmmxkvs
- A3_77 = "b4e44da4"

In HKEY_CURRENT_USER\Software\Aasppapmmxkvs
- A4_77 = "b5e7278d"

In HKEY_CURRENT_USER\Software\Aasppapmmxkvs
- A1_78 = "5bffa93"

In HKEY_CURRENT_USER\Software\Aasppapmmxkvs
- A2_78 = "1f54979"

In HKEY_CURRENT_USER\Software\Aasppapmmxkvs
- A3_78 = "1e57e1e7"

In HKEY_CURRENT_USER\Software\Aasppapmmxkvs
- A4_78 = "1f548bce"

In HKEY_CURRENT_USER\Software\Aasppapmmxkvs
- A1_79 = "11aed756"

In HKEY_CURRENT_USER\Software\Aasppapmmxkvs
- A2_79 = "88c1e6c"

In HKEY_CURRENT_USER\Software\Aasppapmmxkvs
- A3_79 = "89c29a26"

In HKEY_CURRENT_USER\Software\Aasppapmmxkvs
- A4_79 = "88c1ff"

In HKEY_CURRENT_USER\Software\Aasppapmmxkvs
- A1_80 = "c7625d"

In HKEY_CURRENT_USER\Software\Aasppapmmxkvs
- A2_80 = "f22f49fa"

In HKEY_CURRENT_USER\Software\Aasppapmmxkvs
- A3_80 = "f32c3e79"

In HKEY_CURRENT_USER\Software\Aasppapmmxkvs
- A4_80 = "f22f545"

In HKEY_CURRENT_USER\Software\Aasppapmmxkvs
- A1_81 = "7a7fd9df"

In HKEY_CURRENT_USER\Software\Aasppapmmxkvs
- A2_81 = "5b9ca53b"

In HKEY_CURRENT_USER\Software\Aasppapmmxkvs
- A3_81 = "5a9fd2b8"

In HKEY_CURRENT_USER\Software\Aasppapmmxkvs
- A4_81 = "5b9cb891"

In HKEY_CURRENT_USER\Software\Aasppapmmxkvs
- A1_82 = "6492518d"

In HKEY_CURRENT_USER\Software\Aasppapmmxkvs
- A2_82 = "c5af6"

In HKEY_CURRENT_USER\Software\Aasppapmmxkvs
- A3_82 = "c4976fb"

In HKEY_CURRENT_USER\Software\Aasppapmmxkvs
- A4_82 = "c5a1cd2"

In HKEY_CURRENT_USER\Software\Aasppapmmxkvs
- A1_83 = "3c34654"

In HKEY_CURRENT_USER\Software\Aasppapmmxkvs
- A2_83 = "2e7794ec"

In HKEY_CURRENT_USER\Software\Aasppapmmxkvs
- A3_83 = "2f74eb3a"

In HKEY_CURRENT_USER\Software\Aasppapmmxkvs
- A4_83 = "2e778113"

In HKEY_CURRENT_USER\Software\Aasppapmmxkvs
- A1_84 = "3b82d34"

In HKEY_CURRENT_USER\Software\Aasppapmmxkvs
- A2_84 = "97e4c383"

In HKEY_CURRENT_USER\Software\Aasppapmmxkvs
- A3_84 = "96e78f7d"

In HKEY_CURRENT_USER\Software\Aasppapmmxkvs
- A4_84 = "97e4e554"

In HKEY_CURRENT_USER\Software\Aasppapmmxkvs
- A1_85 = "3ac92346"

In HKEY_CURRENT_USER\Software\Aasppapmmxkvs
- A2_85 = "1525736"

In HKEY_CURRENT_USER\Software\Aasppapmmxkvs
- A3_85 = "5123bc"

In HKEY_CURRENT_USER\Software\Aasppapmmxkvs
- A4_85 = "1524995"

In HKEY_CURRENT_USER\Software\Aasppapmmxkvs
- A1_86 = "e1648"

In HKEY_CURRENT_USER\Software\Aasppapmmxkvs
- A2_86 = "6abf8c97"

In HKEY_CURRENT_USER\Software\Aasppapmmxkvs
- A3_86 = "6bbcc7ff"

In HKEY_CURRENT_USER\Software\Aasppapmmxkvs
- A4_86 = "6abfadd6"

In HKEY_CURRENT_USER\Software\Aasppapmmxkvs
- A1_87 = "75497a48"

In HKEY_CURRENT_USER\Software\Aasppapmmxkvs
- A2_87 = "d42d4f8"

In HKEY_CURRENT_USER\Software\Aasppapmmxkvs
- A3_87 = "d52e783e"

In HKEY_CURRENT_USER\Software\Aasppapmmxkvs
- A4_87 = "d42d1217"

In HKEY_CURRENT_USER\Software\Aasppapmmxkvs
- A1_88 = "1fe7562"

In HKEY_CURRENT_USER\Software\Aasppapmmxkvs
- A2_88 = "3d9a623f"

In HKEY_CURRENT_USER\Software\Aasppapmmxkvs
- A3_88 = "3c991c71"

In HKEY_CURRENT_USER\Software\Aasppapmmxkvs
- A4_88 = "3d9a7658"

In HKEY_CURRENT_USER\Software\Aasppapmmxkvs
- A1_89 = "f7716cc"

In HKEY_CURRENT_USER\Software\Aasppapmmxkvs
- A2_89 = "a77fba"

In HKEY_CURRENT_USER\Software\Aasppapmmxkvs
- A3_89 = "a64bb"

In HKEY_CURRENT_USER\Software\Aasppapmmxkvs
- A4_89 = "a77da99"

In HKEY_CURRENT_USER\Software\Aasppapmmxkvs
- A1_90 = "d8cbbf66"

In HKEY_CURRENT_USER\Software\Aasppapmmxkvs
- A2_90 = "17523ed"

In HKEY_CURRENT_USER\Software\Aasppapmmxkvs
- A3_90 = "117654f3"

In HKEY_CURRENT_USER\Software\Aasppapmmxkvs
- A4_90 = "1753eda"

In HKEY_CURRENT_USER\Software\Aasppapmmxkvs
- A1_91 = "66ccb44"

In HKEY_CURRENT_USER\Software\Aasppapmmxkvs
- A2_91 = "79e283bc"

In HKEY_CURRENT_USER\Software\Aasppapmmxkvs
- A3_91 = "78e1c932"

In HKEY_CURRENT_USER\Software\Aasppapmmxkvs
- A4_91 = "79e2a31b"

In HKEY_CURRENT_USER\Software\Aasppapmmxkvs
- A1_92 = "6fe8d9f"

In HKEY_CURRENT_USER\Software\Aasppapmmxkvs
- A2_92 = "e352641"

In HKEY_CURRENT_USER\Software\Aasppapmmxkvs
- A3_92 = "e2536d75"

In HKEY_CURRENT_USER\Software\Aasppapmmxkvs
- A4_92 = "e3575c"

In HKEY_CURRENT_USER\Software\Aasppapmmxkvs
- A1_93 = "f1ead3"

In HKEY_CURRENT_USER\Software\Aasppapmmxkvs
- A2_93 = "4cbd72a"

In HKEY_CURRENT_USER\Software\Aasppapmmxkvs
- A3_93 = "4dbe1b4"

In HKEY_CURRENT_USER\Software\Aasppapmmxkvs
- A4_93 = "4cbd6b9d"

In HKEY_CURRENT_USER\Software\Aasppapmmxkvs
- A1_94 = "88befb8"

In HKEY_CURRENT_USER\Software\Aasppapmmxkvs
- A2_94 = "b62ad6d"

In HKEY_CURRENT_USER\Software\Aasppapmmxkvs
- A3_94 = "b729a5f7"

In HKEY_CURRENT_USER\Software\Aasppapmmxkvs
- A4_94 = "b62acfde"

In HKEY_CURRENT_USER\Software\Aasppapmmxkvs
- A1_95 = "911e4dc3"

In HKEY_CURRENT_USER\Software\Aasppapmmxkvs
- A2_95 = "1f982be8"

In HKEY_CURRENT_USER\Software\Aasppapmmxkvs
- A3_95 = "1e9b5e36"

In HKEY_CURRENT_USER\Software\Aasppapmmxkvs
- A4_95 = "1f98341f"

In HKEY_CURRENT_USER\Software\Aasppapmmxkvs
- A1_96 = "ca26d52d"

In HKEY_CURRENT_USER\Software\Aasppapmmxkvs
- A2_96 = "89581f1"

In HKEY_CURRENT_USER\Software\Aasppapmmxkvs
- A3_96 = "886f249"

In HKEY_CURRENT_USER\Software\Aasppapmmxkvs
- A4_96 = "895986"

In HKEY_CURRENT_USER\Software\Aasppapmmxkvs
- A1_97 = "da13d2f8"

In HKEY_CURRENT_USER\Software\Aasppapmmxkvs
- A2_97 = "f272df21"

In HKEY_CURRENT_USER\Software\Aasppapmmxkvs
- A3_97 = "f3719688"

In HKEY_CURRENT_USER\Software\Aasppapmmxkvs
- A4_97 = "f272fca1"

In HKEY_CURRENT_USER\Software\Aasppapmmxkvs
- A1_98 = "35bf13b"

In HKEY_CURRENT_USER\Software\Aasppapmmxkvs
- A2_98 = "5be786a"

In HKEY_CURRENT_USER\Software\Aasppapmmxkvs
- A3_98 = "5ae3acb"

In HKEY_CURRENT_USER\Software\Aasppapmmxkvs
- A4_98 = "5be6e2"

In HKEY_CURRENT_USER\Software\Aasppapmmxkvs
- A1_99 = "ffefe867"

In HKEY_CURRENT_USER\Software\Aasppapmmxkvs
- A2_99 = "c54ddb2e"

In HKEY_CURRENT_USER\Software\Aasppapmmxkvs
- A3_99 = "c44eafa"

In HKEY_CURRENT_USER\Software\Aasppapmmxkvs
- A4_99 = "c54dc523"

In HKEY_CURRENT_USER\Software\Aasppapmmxkvs
- A1_100 = "4c9ba13d"

In HKEY_CURRENT_USER\Software\Aasppapmmxkvs
- A2_100 = "2ebb3caf"

In HKEY_CURRENT_USER\Software\Aasppapmmxkvs
- A3_100 = "2fb8434d"

In HKEY_CURRENT_USER\Software\Aasppapmmxkvs
- A4_100 = "2ebb2964"

In HKEY_CURRENT_USER\Software\Aasppapmmxkvs
- A1_101 = "5d87c1fc"

In HKEY_CURRENT_USER\Software\Aasppapmmxkvs
- A2_101 = "98289ae"

In HKEY_CURRENT_USER\Software\Aasppapmmxkvs
- A3_101 = "992be78c"

In HKEY_CURRENT_USER\Software\Aasppapmmxkvs
- A4_101 = "98288da5"

In HKEY_CURRENT_USER\Software\Aasppapmmxkvs
- A1_102 = "486db495"

In HKEY_CURRENT_USER\Software\Aasppapmmxkvs
- A2_102 = "195e7ab"

In HKEY_CURRENT_USER\Software\Aasppapmmxkvs
- A3_102 = "969bcf"

In HKEY_CURRENT_USER\Software\Aasppapmmxkvs
- A4_102 = "195f1e6"

In HKEY_CURRENT_USER\Software\Aasppapmmxkvs
- A1_103 = "67ee717e"

In HKEY_CURRENT_USER\Software\Aasppapmmxkvs
- A2_103 = "6b34a5c"

In HKEY_CURRENT_USER\Software\Aasppapmmxkvs
- A3_103 = "6a3ce"

In HKEY_CURRENT_USER\Software\Aasppapmmxkvs
- A4_103 = "6b35627"

In HKEY_CURRENT_USER\Software\Aasppapmmxkvs
- A1_104 = "5335c831"

In HKEY_CURRENT_USER\Software\Aasppapmmxkvs
- A2_104 = "d47a267"

In HKEY_CURRENT_USER\Software\Aasppapmmxkvs
- A3_104 = "d573d41"

In HKEY_CURRENT_USER\Software\Aasppapmmxkvs
- A4_104 = "d47ba68"

In HKEY_CURRENT_USER\Software\Aasppapmmxkvs
- A1_105 = "f8377ff"

In HKEY_CURRENT_USER\Software\Aasppapmmxkvs
- A2_105 = "3ddee29"

In HKEY_CURRENT_USER\Software\Aasppapmmxkvs
- A3_105 = "3cdd748"

In HKEY_CURRENT_USER\Software\Aasppapmmxkvs
- A4_105 = "3dde1ea9"

In HKEY_CURRENT_USER\Software\Aasppapmmxkvs
- A1_106 = "73198ba4"

In HKEY_CURRENT_USER\Software\Aasppapmmxkvs
- A2_106 = "a74b9551"

In HKEY_CURRENT_USER\Software\Aasppapmmxkvs
- A3_106 = "a648e8c3"

In HKEY_CURRENT_USER\Software\Aasppapmmxkvs
- A4_106 = "a74b82ea"

In HKEY_CURRENT_USER\Software\Aasppapmmxkvs
- A1_107 = "c7be85c"

In HKEY_CURRENT_USER\Software\Aasppapmmxkvs
- A2_107 = "1b8f2c"

In HKEY_CURRENT_USER\Software\Aasppapmmxkvs
- A3_107 = "11bb8d2"

In HKEY_CURRENT_USER\Software\Aasppapmmxkvs
- A4_107 = "1b8e72b"

In HKEY_CURRENT_USER\Software\Aasppapmmxkvs
- A1_108 = "bc7e423"

In HKEY_CURRENT_USER\Software\Aasppapmmxkvs
- A2_108 = "7a26523"

In HKEY_CURRENT_USER\Software\Aasppapmmxkvs
- A3_108 = "7b252145"

In HKEY_CURRENT_USER\Software\Aasppapmmxkvs
- A4_108 = "7a264b6c"

In HKEY_CURRENT_USER\Software\Aasppapmmxkvs
- A1_109 = "d6cf7f2"

In HKEY_CURRENT_USER\Software\Aasppapmmxkvs
- A2_109 = "e3938ab4"

In HKEY_CURRENT_USER\Software\Aasppapmmxkvs
- A3_109 = "e29c584"

In HKEY_CURRENT_USER\Software\Aasppapmmxkvs
- A4_109 = "e393afad"

In HKEY_CURRENT_USER\Software\Aasppapmmxkvs
- A1_110 = "cf9a2db"

In HKEY_CURRENT_USER\Software\Aasppapmmxkvs
- A2_110 = "4d1f2"

In HKEY_CURRENT_USER\Software\Aasppapmmxkvs
- A3_110 = "4c279c7"

In HKEY_CURRENT_USER\Software\Aasppapmmxkvs
- A4_110 = "4d113ee"

In HKEY_CURRENT_USER\Software\Aasppapmmxkvs
- A1_111 = "411ecd7e"

In HKEY_CURRENT_USER\Software\Aasppapmmxkvs
- A2_111 = "b66e59a1"

In HKEY_CURRENT_USER\Software\Aasppapmmxkvs
- A3_111 = "b76d126"

In HKEY_CURRENT_USER\Software\Aasppapmmxkvs
- A4_111 = "b66e782f"

In HKEY_CURRENT_USER\Software\Aasppapmmxkvs
- A1_112 = "e2bb3e37"

In HKEY_CURRENT_USER\Software\Aasppapmmxkvs
- A2_112 = "1fdbc622"

In HKEY_CURRENT_USER\Software\Aasppapmmxkvs
- A3_112 = "1ed8b659"

In HKEY_CURRENT_USER\Software\Aasppapmmxkvs
- A4_112 = "1fdbdc7"

In HKEY_CURRENT_USER\Software\Aasppapmmxkvs
- A1_113 = "a45f17e4"

In HKEY_CURRENT_USER\Software\Aasppapmmxkvs
- A2_113 = "89495596"

In HKEY_CURRENT_USER\Software\Aasppapmmxkvs
- A3_113 = "884a2a98"

In HKEY_CURRENT_USER\Software\Aasppapmmxkvs
- A4_113 = "89494b1"

In HKEY_CURRENT_USER\Software\Aasppapmmxkvs
- A1_114 = "fa61ccbe"

In HKEY_CURRENT_USER\Software\Aasppapmmxkvs
- A2_114 = "f2b6bf9d"

In HKEY_CURRENT_USER\Software\Aasppapmmxkvs
- A3_114 = "f3b5cedb"

In HKEY_CURRENT_USER\Software\Aasppapmmxkvs
- A4_114 = "f2b6a4f2"

In HKEY_CURRENT_USER\Software\Aasppapmmxkvs
- A1_115 = "ed32688"

In HKEY_CURRENT_USER\Software\Aasppapmmxkvs
- A2_115 = "5c2416f6"

In HKEY_CURRENT_USER\Software\Aasppapmmxkvs
- A3_115 = "5d27631a"

In HKEY_CURRENT_USER\Software\Aasppapmmxkvs
- A4_115 = "5c24933"

In HKEY_CURRENT_USER\Software\Aasppapmmxkvs
- A1_116 = "f91a1721"

In HKEY_CURRENT_USER\Software\Aasppapmmxkvs
- A2_116 = "c5917ba3"

In HKEY_CURRENT_USER\Software\Aasppapmmxkvs
- A3_116 = "c49275d"

In HKEY_CURRENT_USER\Software\Aasppapmmxkvs
- A4_116 = "c5916d74"

In HKEY_CURRENT_USER\Software\Aasppapmmxkvs
- A1_117 = "44681fe2"

In HKEY_CURRENT_USER\Software\Aasppapmmxkvs
- A2_117 = "2efec7c"

In HKEY_CURRENT_USER\Software\Aasppapmmxkvs
- A3_117 = "2ffdbb9c"

In HKEY_CURRENT_USER\Software\Aasppapmmxkvs
- A4_117 = "2efed1b5"

In HKEY_CURRENT_USER\Software\Aasppapmmxkvs
- A1_118 = "cfcf6d7c"

In HKEY_CURRENT_USER\Software\Aasppapmmxkvs
- A2_118 = "986c2c51"

In HKEY_CURRENT_USER\Software\Aasppapmmxkvs
- A3_118 = "996f5fdf"

In HKEY_CURRENT_USER\Software\Aasppapmmxkvs
- A4_118 = "986c35f6"

In HKEY_CURRENT_USER\Software\Aasppapmmxkvs
- A1_119 = "54df3462"

In HKEY_CURRENT_USER\Software\Aasppapmmxkvs
- A2_119 = "1d987b"

In HKEY_CURRENT_USER\Software\Aasppapmmxkvs
- A3_119 = "daf1e"

In HKEY_CURRENT_USER\Software\Aasppapmmxkvs
- A4_119 = "1d99a37"

In HKEY_CURRENT_USER\Software\Aasppapmmxkvs
- A1_120 = "8c9ab12a"

In HKEY_CURRENT_USER\Software\Aasppapmmxkvs
- A2_120 = "6b46e827"

In HKEY_CURRENT_USER\Software\Aasppapmmxkvs
- A3_120 = "6a459451"

In HKEY_CURRENT_USER\Software\Aasppapmmxkvs
- A4_120 = "6b46fe78"

In HKEY_CURRENT_USER\Software\Aasppapmmxkvs
- A1_121 = "76f82af7"

In HKEY_CURRENT_USER\Software\Aasppapmmxkvs
- A2_121 = "d4b44773"

In HKEY_CURRENT_USER\Software\Aasppapmmxkvs
- A3_121 = "d5b789"

In HKEY_CURRENT_USER\Software\Aasppapmmxkvs
- A4_121 = "d4b462b9"

In HKEY_CURRENT_USER\Software\Aasppapmmxkvs
- A1_122 = "37937cbc"

In HKEY_CURRENT_USER\Software\Aasppapmmxkvs
- A2_122 = "3e21dda7"

In HKEY_CURRENT_USER\Software\Aasppapmmxkvs
- A3_122 = "3f22acd3"

In HKEY_CURRENT_USER\Software\Aasppapmmxkvs
- A4_122 = "3e21c6fa"

In HKEY_CURRENT_USER\Software\Aasppapmmxkvs
- A1_123 = "b2e64f6d"

In HKEY_CURRENT_USER\Software\Aasppapmmxkvs
- A2_123 = "a78f3334"

In HKEY_CURRENT_USER\Software\Aasppapmmxkvs
- A3_123 = "a68c4112"

In HKEY_CURRENT_USER\Software\Aasppapmmxkvs
- A4_123 = "a78f2b3b"

In HKEY_CURRENT_USER\Software\Aasppapmmxkvs
- A1_124 = "6d549a8"

In HKEY_CURRENT_USER\Software\Aasppapmmxkvs
- A2_124 = "1fc92b6"

In HKEY_CURRENT_USER\Software\Aasppapmmxkvs
- A3_124 = "11ffe555"

In HKEY_CURRENT_USER\Software\Aasppapmmxkvs
- A4_124 = "1fc8f7c"

In HKEY_CURRENT_USER\Software\Aasppapmmxkvs
- A1_125 = "2b93f3"

In HKEY_CURRENT_USER\Software\Aasppapmmxkvs
- A2_125 = "7a69e69a"

In HKEY_CURRENT_USER\Software\Aasppapmmxkvs
- A3_125 = "7b6a9994"

In HKEY_CURRENT_USER\Software\Aasppapmmxkvs
- A4_125 = "7a69f3bd"

In HKEY_CURRENT_USER\Software\Aasppapmmxkvs
- A1_126 = "fcf5bb6d"

In HKEY_CURRENT_USER\Software\Aasppapmmxkvs
- A2_126 = "e3d74859"

In HKEY_CURRENT_USER\Software\Aasppapmmxkvs
- A3_126 = "e2d43dd7"

In HKEY_CURRENT_USER\Software\Aasppapmmxkvs
- A4_126 = "e3d757fe"

In HKEY_CURRENT_USER\Software\Aasppapmmxkvs
- A1_127 = "aad9f6be"

In HKEY_CURRENT_USER\Software\Aasppapmmxkvs
- A2_127 = "4d44a5a"

In HKEY_CURRENT_USER\Software\Aasppapmmxkvs
- A3_127 = "4c47d616"

In HKEY_CURRENT_USER\Software\Aasppapmmxkvs
- A4_127 = "4d44bc3f"

In HKEY_CURRENT_USER\Software\Aasppapmmxkvs
- A1_128 = "76c45d9"

In HKEY_CURRENT_USER\Software\Aasppapmmxkvs
- A2_128 = "b6b2367c"

In HKEY_CURRENT_USER\Software\Aasppapmmxkvs
- A3_128 = "b7b14aa9"

In HKEY_CURRENT_USER\Software\Aasppapmmxkvs
- A4_128 = "b6b228"

In HKEY_CURRENT_USER\Software\Aasppapmmxkvs
- A1_129 = "13d85b9e"

In HKEY_CURRENT_USER\Software\Aasppapmmxkvs
- A2_129 = "21f9b88"

In HKEY_CURRENT_USER\Software\Aasppapmmxkvs
- A3_129 = "211ceee8"

In HKEY_CURRENT_USER\Software\Aasppapmmxkvs
- A4_129 = "21f84c1"

In HKEY_CURRENT_USER\Software\Aasppapmmxkvs
- A1_130 = "875464d"

In HKEY_CURRENT_USER\Software\Aasppapmmxkvs
- A2_130 = "898cf3a5"

In HKEY_CURRENT_USER\Software\Aasppapmmxkvs
- A3_130 = "888f832b"

In HKEY_CURRENT_USER\Software\Aasppapmmxkvs
- A4_130 = "898ce92"

In HKEY_CURRENT_USER\Software\Aasppapmmxkvs
- A1_131 = "3594251c"

In HKEY_CURRENT_USER\Software\Aasppapmmxkvs
- A2_131 = "f2fa5461"

In HKEY_CURRENT_USER\Software\Aasppapmmxkvs
- A3_131 = "f3f9276a"

In HKEY_CURRENT_USER\Software\Aasppapmmxkvs
- A4_131 = "f2fa4d43"

In HKEY_CURRENT_USER\Software\Aasppapmmxkvs
- A1_132 = "a1a6d8d2"

In HKEY_CURRENT_USER\Software\Aasppapmmxkvs
- A2_132 = "5c67a694"

In HKEY_CURRENT_USER\Software\Aasppapmmxkvs
- A3_132 = "5d64dbad"

In HKEY_CURRENT_USER\Software\Aasppapmmxkvs
- A4_132 = "5c67b184"

In HKEY_CURRENT_USER\Software\Aasppapmmxkvs
- A1_133 = "c88f7d9a"

In HKEY_CURRENT_USER\Software\Aasppapmmxkvs
- A2_133 = "c5d5963"

In HKEY_CURRENT_USER\Software\Aasppapmmxkvs
- A3_133 = "c4d67fec"

In HKEY_CURRENT_USER\Software\Aasppapmmxkvs
- A4_133 = "c5d515c5"

In HKEY_CURRENT_USER\Software\Aasppapmmxkvs
- A1_134 = "e3c74c42"

In HKEY_CURRENT_USER\Software\Aasppapmmxkvs
- A2_134 = "2f42639c"

In HKEY_CURRENT_USER\Software\Aasppapmmxkvs
- A3_134 = "2e4112f"

In HKEY_CURRENT_USER\Software\Aasppapmmxkvs
- A4_134 = "2f427a6"

In HKEY_CURRENT_USER\Software\Aasppapmmxkvs
- A1_135 = "c97ea71"

In HKEY_CURRENT_USER\Software\Aasppapmmxkvs
- A2_135 = "98afc8a8"

In HKEY_CURRENT_USER\Software\Aasppapmmxkvs
- A3_135 = "99acb46e"

In HKEY_CURRENT_USER\Software\Aasppapmmxkvs
- A4_135 = "98afde47"

In HKEY_CURRENT_USER\Software\Aasppapmmxkvs
- A1_136 = "98c38de"

In HKEY_CURRENT_USER\Software\Aasppapmmxkvs
- A2_136 = "21d564f"

In HKEY_CURRENT_USER\Software\Aasppapmmxkvs
- A3_136 = "31e28a1"

In HKEY_CURRENT_USER\Software\Aasppapmmxkvs
- A4_136 = "21d4288"

In HKEY_CURRENT_USER\Software\Aasppapmmxkvs
- A1_137 = "a4884c9d"

In HKEY_CURRENT_USER\Software\Aasppapmmxkvs
- A2_137 = "6b8ab1be"

In HKEY_CURRENT_USER\Software\Aasppapmmxkvs
- A3_137 = "6a89cce"

In HKEY_CURRENT_USER\Software\Aasppapmmxkvs
- A4_137 = "6b8aa6c9"

In HKEY_CURRENT_USER\Software\Aasppapmmxkvs
- A1_138 = "e9818353"

In HKEY_CURRENT_USER\Software\Aasppapmmxkvs
- A2_138 = "d4f81c5e"

In HKEY_CURRENT_USER\Software\Aasppapmmxkvs
- A3_138 = "d5fb6123"

In HKEY_CURRENT_USER\Software\Aasppapmmxkvs
- A4_138 = "d4f8ba"

In HKEY_CURRENT_USER\Software\Aasppapmmxkvs
- A1_139 = "94c226"

In HKEY_CURRENT_USER\Software\Aasppapmmxkvs
- A2_139 = "3e65733a"

In HKEY_CURRENT_USER\Software\Aasppapmmxkvs
- A3_139 = "3f66562"

In HKEY_CURRENT_USER\Software\Aasppapmmxkvs
- A4_139 = "3e656f4b"

In HKEY_CURRENT_USER\Software\Aasppapmmxkvs
- A1_140 = "92af7d5"

In HKEY_CURRENT_USER\Software\VB and VBA Program Settings\trial version\trial
- date1 = "11/20/2011"

In HKEY_CURRENT_USER\Software\Aasppapmmxkvs
- A2_140 = "a7d2ca51"

In HKEY_CURRENT_USER\Software\Aasppapmmxkvs
- A3_140 = "a6d1b9a5"

In HKEY_CURRENT_USER\Software\Aasppapmmxkvs
- A4_140 = "a7d2d38c"

In HKEY_CURRENT_USER\Software\Aasppapmmxkvs
- A1_141 = "276d2f81"

In HKEY_CURRENT_USER\Software\Aasppapmmxkvs
- A2_141 = "1142bc2"

In HKEY_CURRENT_USER\Software\Aasppapmmxkvs
- A3_141 = "1435de4"

In HKEY_CURRENT_USER\Software\Aasppapmmxkvs
- A4_141 = "11437cd"

In HKEY_CURRENT_USER\Software\Aasppapmmxkvs
- A1_142 = "fe38f56"

In HKEY_CURRENT_USER\Software\Aasppapmmxkvs
- A2_142 = "7aad8721"

In HKEY_CURRENT_USER\Software\Aasppapmmxkvs
- A3_142 = "7baef627"

In HKEY_CURRENT_USER\Software\Aasppapmmxkvs
- A4_142 = "7aad9ce"

In HKEY_CURRENT_USER\Software\Aasppapmmxkvs
- A1_143 = "59f12e16"

In HKEY_CURRENT_USER\Software\Aasppapmmxkvs
- A2_143 = "e41b176a"

In HKEY_CURRENT_USER\Software\Aasppapmmxkvs
- A3_143 = "e5186a66"

In HKEY_CURRENT_USER\Software\Aasppapmmxkvs
- A4_143 = "e41b4f"

In HKEY_CURRENT_USER\Software\Aasppapmmxkvs
- A1_144 = "875116cd"

In HKEY_CURRENT_USER\Software\Aasppapmmxkvs
- A2_144 = "4d887a33"

In HKEY_CURRENT_USER\Software\Aasppapmmxkvs
- A3_144 = "4c8beb9"

In HKEY_CURRENT_USER\Software\Aasppapmmxkvs
- A4_144 = "4d88649"

In HKEY_CURRENT_USER\Software\Aasppapmmxkvs
- A1_145 = "95f12d83"

In HKEY_CURRENT_USER\Software\Aasppapmmxkvs
- A2_145 = "b6f5db2b"

In HKEY_CURRENT_USER\Software\Aasppapmmxkvs
- A3_145 = "b7f6a2f8"

In HKEY_CURRENT_USER\Software\Aasppapmmxkvs
- A4_145 = "b6f5c8d1"

In HKEY_CURRENT_USER\Software\Aasppapmmxkvs
- A1_146 = "47bb9a4a"

In HKEY_CURRENT_USER\Software\Aasppapmmxkvs
- A2_146 = "263359a"

In HKEY_CURRENT_USER\Software\Aasppapmmxkvs
- A3_146 = "216473b"

In HKEY_CURRENT_USER\Software\Aasppapmmxkvs
- A4_146 = "2632d12"

In HKEY_CURRENT_USER\Software\Aasppapmmxkvs
- A1_147 = "bfc5cb6d"

In HKEY_CURRENT_USER\Software\Aasppapmmxkvs
- A2_147 = "89d8c4c"

In HKEY_CURRENT_USER\Software\Aasppapmmxkvs
- A3_147 = "88d3fb7a"

In HKEY_CURRENT_USER\Software\Aasppapmmxkvs
- A4_147 = "89d9153"

In HKEY_CURRENT_USER\Software\Aasppapmmxkvs
- A1_148 = "43d741c5"

In HKEY_CURRENT_USER\Software\Aasppapmmxkvs
- A2_148 = "f33dd158"

In HKEY_CURRENT_USER\Software\Aasppapmmxkvs
- A3_148 = "f23e9fbd"

In HKEY_CURRENT_USER\Software\Aasppapmmxkvs
- A4_148 = "f33df594"

In HKEY_CURRENT_USER\Software\Aasppapmmxkvs
- A1_149 = "2cf1b8"

In HKEY_CURRENT_USER\Software\Aasppapmmxkvs
- A2_149 = "5cab7af2"

In HKEY_CURRENT_USER\Software\Aasppapmmxkvs
- A3_149 = "5da833fc"

In HKEY_CURRENT_USER\Software\Aasppapmmxkvs
- A4_149 = "5cab59d5"

In HKEY_CURRENT_USER\Software\Aasppapmmxkvs
- A1_150 = "ba851d5"

In HKEY_CURRENT_USER\Software\Aasppapmmxkvs
- A2_150 = "c618a7cd"

In HKEY_CURRENT_USER\Software\Aasppapmmxkvs
- A3_150 = "c71bd43f"

In HKEY_CURRENT_USER\Software\Aasppapmmxkvs
- A4_150 = "c618be16"

In HKEY_CURRENT_USER\Software\Aasppapmmxkvs
- A1_151 = "66b6ce12"

In HKEY_CURRENT_USER\Software\Aasppapmmxkvs
- A2_151 = "2f8639a2"

In HKEY_CURRENT_USER\Software\Aasppapmmxkvs
- A3_151 = "2e85487e"

In HKEY_CURRENT_USER\Software\Aasppapmmxkvs
- A4_151 = "2f862257"

In HKEY_CURRENT_USER\Software\Aasppapmmxkvs
- A1_152 = "6defde4"

In HKEY_CURRENT_USER\Software\Aasppapmmxkvs
- A2_152 = "98f39c47"

In HKEY_CURRENT_USER\Software\Aasppapmmxkvs
- A3_152 = "99fecb1"

In HKEY_CURRENT_USER\Software\Aasppapmmxkvs
- A4_152 = "98f38698"

In HKEY_CURRENT_USER\Software\Aasppapmmxkvs
- A1_153 = "364ec68"

In HKEY_CURRENT_USER\Software\Aasppapmmxkvs
- A2_153 = "26fc9a"

In HKEY_CURRENT_USER\Software\Aasppapmmxkvs
- A3_153 = "3638f"

In HKEY_CURRENT_USER\Software\Aasppapmmxkvs
- A4_153 = "26ead9"

In HKEY_CURRENT_USER\Software\Aasppapmmxkvs
- A1_154 = "13945b"

In HKEY_CURRENT_USER\Software\Aasppapmmxkvs
- A2_154 = "6bce5f9a"

In HKEY_CURRENT_USER\Software\Aasppapmmxkvs
- A3_154 = "6acd2533"

In HKEY_CURRENT_USER\Software\Aasppapmmxkvs
- A4_154 = "6bce4f1a"

In HKEY_CURRENT_USER\Software\Aasppapmmxkvs
- A1_155 = "b9cf4c16"

In HKEY_CURRENT_USER\Software\Aasppapmmxkvs
- A2_155 = "d53ba468"

In HKEY_CURRENT_USER\Software\Aasppapmmxkvs
- A3_155 = "d438d972"

In HKEY_CURRENT_USER\Software\Aasppapmmxkvs
- A4_155 = "d53bb35b"

In HKEY_CURRENT_USER\Software\Aasppapmmxkvs
- A1_156 = "6fa346d1"

In HKEY_CURRENT_USER\Software\Aasppapmmxkvs
- A2_156 = "3ea9d3f"

In HKEY_CURRENT_USER\Software\Aasppapmmxkvs
- A3_156 = "3faa7db5"

In HKEY_CURRENT_USER\Software\Aasppapmmxkvs
- A4_156 = "3ea9179c"

In HKEY_CURRENT_USER\Software\Aasppapmmxkvs
- A1_157 = "384f39"

In HKEY_CURRENT_USER\Software\Aasppapmmxkvs
- A2_157 = "a81665fa"

In HKEY_CURRENT_USER\Software\Aasppapmmxkvs
- A3_157 = "a91511f4"

In HKEY_CURRENT_USER\Software\Aasppapmmxkvs
- A4_157 = "a8167bdd"

In HKEY_CURRENT_USER\Software\Aasppapmmxkvs
- A1_158 = "47b33ada"

In HKEY_CURRENT_USER\Software\Aasppapmmxkvs
- A2_158 = "1183c3cf"

In HKEY_CURRENT_USER\Software\Aasppapmmxkvs
- A3_158 = "188a37"

In HKEY_CURRENT_USER\Software\Aasppapmmxkvs
- A4_158 = "1183e1e"

In HKEY_CURRENT_USER\Software\Aasppapmmxkvs
- A1_159 = "6ab6e6"

In HKEY_CURRENT_USER\Software\Aasppapmmxkvs
- A2_159 = "7af1648"

In HKEY_CURRENT_USER\Software\Aasppapmmxkvs
- A3_159 = "7bf22e76"

In HKEY_CURRENT_USER\Software\Aasppapmmxkvs
- A4_159 = "7af1445f"

In HKEY_CURRENT_USER\Software\Aasppapmmxkvs
- A1_160 = "a34583f9"

In HKEY_CURRENT_USER\Software\Aasppapmmxkvs
- A2_160 = "e45ebdd"

In HKEY_CURRENT_USER\Software\Aasppapmmxkvs
- A3_160 = "e55dc289"

In HKEY_CURRENT_USER\Software\Aasppapmmxkvs
- A4_160 = "e45ea8a"

In HKEY_CURRENT_USER\Software\Aasppapmmxkvs
- A1_161 = "d96c4caa"

In HKEY_CURRENT_USER\Software\Aasppapmmxkvs
- A2_161 = "4dcc29f8"

In HKEY_CURRENT_USER\Software\Aasppapmmxkvs
- A3_161 = "4ccf66c8"

In HKEY_CURRENT_USER\Software\Aasppapmmxkvs
- A4_161 = "4dccce1"

In HKEY_CURRENT_USER\Software\Aasppapmmxkvs
- A1_162 = "939f7df6"

In HKEY_CURRENT_USER\Software\Aasppapmmxkvs
- A2_162 = "b7396ead"

In HKEY_CURRENT_USER\Software\Aasppapmmxkvs
- A3_162 = "b63a1bb"

In HKEY_CURRENT_USER\Software\Aasppapmmxkvs
- A4_162 = "b7397122"

In HKEY_CURRENT_USER\Software\Aasppapmmxkvs
- A1_163 = "3fff8a33"

In HKEY_CURRENT_USER\Software\Aasppapmmxkvs
- A2_163 = "2a6f614"

In HKEY_CURRENT_USER\Software\Aasppapmmxkvs
- A3_163 = "21a5bf4a"

In HKEY_CURRENT_USER\Software\Aasppapmmxkvs
- A4_163 = "2a6d563"

In HKEY_CURRENT_USER\Software\Aasppapmmxkvs
- A1_164 = "65a989ea"

In HKEY_CURRENT_USER\Software\Aasppapmmxkvs
- A2_164 = "8a142772"

In HKEY_CURRENT_USER\Software\Aasppapmmxkvs
- A3_164 = "8b17538d"

In HKEY_CURRENT_USER\Software\Aasppapmmxkvs
- A4_164 = "8a1439a4"

In HKEY_CURRENT_USER\Software\Aasppapmmxkvs
- A1_165 = "ca351c59"

In HKEY_CURRENT_USER\Software\Aasppapmmxkvs
- A2_165 = "f3818ee"

In HKEY_CURRENT_USER\Software\Aasppapmmxkvs
- A3_165 = "f282f7cc"

In HKEY_CURRENT_USER\Software\Aasppapmmxkvs
- A4_165 = "f3819de5"

In HKEY_CURRENT_USER\Software\Aasppapmmxkvs
- A1_166 = "9eb4e71"

In HKEY_CURRENT_USER\Software\Aasppapmmxkvs
- A2_166 = "5cef2159"

In HKEY_CURRENT_USER\Software\Aasppapmmxkvs
- A3_166 = "5dec68f"

In HKEY_CURRENT_USER\Software\Aasppapmmxkvs
- A4_166 = "5cef226"

In HKEY_CURRENT_USER\Software\Aasppapmmxkvs
- A1_167 = "395d629"

In HKEY_CURRENT_USER\Software\Aasppapmmxkvs
- A2_167 = "c65c7c78"

In HKEY_CURRENT_USER\Software\Aasppapmmxkvs
- A3_167 = "c75fc4e"

In HKEY_CURRENT_USER\Software\Aasppapmmxkvs
- A4_167 = "c65c6667"

In HKEY_CURRENT_USER\Software\Aasppapmmxkvs
- A1_168 = "6a6dbbf5"

In HKEY_CURRENT_USER\Software\Aasppapmmxkvs
- A2_168 = "2fc9ddc7"

In HKEY_CURRENT_USER\Software\Aasppapmmxkvs
- A3_168 = "2ecaa81"

In HKEY_CURRENT_USER\Software\Aasppapmmxkvs
- A4_168 = "2fc9caa8"

In HKEY_CURRENT_USER\Software\Aasppapmmxkvs
- A1_169 = "5c8451bf"

In HKEY_CURRENT_USER\Software\Aasppapmmxkvs
- A2_169 = "993735d9"

In HKEY_CURRENT_USER\Software\Aasppapmmxkvs
- A3_169 = "983444c"

In HKEY_CURRENT_USER\Software\Aasppapmmxkvs
- A4_169 = "99372ee9"

In HKEY_CURRENT_USER\Software\Aasppapmmxkvs
- A1_170 = "d79c8f6c"

In HKEY_CURRENT_USER\Software\Aasppapmmxkvs
- A2_170 = "2a48f51"

In HKEY_CURRENT_USER\Software\Aasppapmmxkvs
- A3_170 = "3a7f93"

In HKEY_CURRENT_USER\Software\Aasppapmmxkvs
- A4_170 = "2a4932a"

In HKEY_CURRENT_USER\Software\Aasppapmmxkvs
- A1_171 = "13d7d6"

In HKEY_CURRENT_USER\Software\Aasppapmmxkvs
- A2_171 = "6c11d73c"

In HKEY_CURRENT_USER\Software\Aasppapmmxkvs
- A3_171 = "6d129d42"

In HKEY_CURRENT_USER\Software\Aasppapmmxkvs
- A4_171 = "6c11f76b"

In HKEY_CURRENT_USER\Software\Aasppapmmxkvs
- A1_172 = "63befdc"

In HKEY_CURRENT_USER\Software\Aasppapmmxkvs
- A2_172 = "d57f4da"

In HKEY_CURRENT_USER\Software\Aasppapmmxkvs
- A3_172 = "d47c3185"

In HKEY_CURRENT_USER\Software\Aasppapmmxkvs
- A4_172 = "d57f5bac"

In HKEY_CURRENT_USER\Software\Aasppapmmxkvs
- A1_173 = "dc5b493e"

In HKEY_CURRENT_USER\Software\Aasppapmmxkvs
- A2_173 = "3eeca412"

In HKEY_CURRENT_USER\Software\Aasppapmmxkvs
- A3_173 = "3fefd5c4"

In HKEY_CURRENT_USER\Software\Aasppapmmxkvs
- A4_173 = "3eecbfed"

In HKEY_CURRENT_USER\Software\Aasppapmmxkvs
- A1_174 = "d78cd592"

In HKEY_CURRENT_USER\Software\Aasppapmmxkvs
- A2_174 = "a85a3f51"

In HKEY_CURRENT_USER\Software\Aasppapmmxkvs
- A3_174 = "a9594e7"

In HKEY_CURRENT_USER\Software\Aasppapmmxkvs
- A4_174 = "a85a242e"

In HKEY_CURRENT_USER\Software\Aasppapmmxkvs
- A1_175 = "57aae821"

In HKEY_CURRENT_USER\Software\Aasppapmmxkvs
- A2_175 = "11c7a8c6"

In HKEY_CURRENT_USER\Software\Aasppapmmxkvs
- A3_175 = "1c4e246"

In HKEY_CURRENT_USER\Software\Aasppapmmxkvs
- A4_175 = "11c7886f"

In HKEY_CURRENT_USER\Software\Aasppapmmxkvs
- A1_176 = "d19be7"

In HKEY_CURRENT_USER\Software\Aasppapmmxkvs
- A2_176 = "7b34f57"

In HKEY_CURRENT_USER\Software\Aasppapmmxkvs
- A3_176 = "7a378699"

In HKEY_CURRENT_USER\Software\Aasppapmmxkvs
- A4_176 = "7b34ecb"

In HKEY_CURRENT_USER\Software\Aasppapmmxkvs
- A1_177 = "9d59693"

In HKEY_CURRENT_USER\Software\Aasppapmmxkvs
- A2_177 = "e4a24efc"

In HKEY_CURRENT_USER\Software\Aasppapmmxkvs
- A3_177 = "e5a13ad8"

In HKEY_CURRENT_USER\Software\Aasppapmmxkvs
- A4_177 = "e4a25f1"

In HKEY_CURRENT_USER\Software\Aasppapmmxkvs
- A1_178 = "2e2f467"

In HKEY_CURRENT_USER\Software\Aasppapmmxkvs
- A2_178 = "4efaae7"

In HKEY_CURRENT_USER\Software\Aasppapmmxkvs
- A3_178 = "4fcdf1b"

In HKEY_CURRENT_USER\Software\Aasppapmmxkvs
- A4_178 = "4efb532"

In HKEY_CURRENT_USER\Software\Aasppapmmxkvs
- A1_179 = "9c74483e"

In HKEY_CURRENT_USER\Software\Aasppapmmxkvs
- A2_179 = "b77d8e4"

In HKEY_CURRENT_USER\Software\Aasppapmmxkvs
- A3_179 = "b67e735a"

In HKEY_CURRENT_USER\Software\Aasppapmmxkvs
- A4_179 = "b77d1973"

In HKEY_CURRENT_USER\Software\Aasppapmmxkvs
- A1_180 = "a96225fe"

In HKEY_CURRENT_USER\Software\Aasppapmmxkvs
- A2_180 = "2ea66e9"

In HKEY_CURRENT_USER\Software\Aasppapmmxkvs
- A3_180 = "21e9179d"

In HKEY_CURRENT_USER\Software\Aasppapmmxkvs
- A4_180 = "2ea7db4"

In HKEY_CURRENT_USER\Software\Aasppapmmxkvs
- A1_181 = "ea549248"

In HKEY_CURRENT_USER\Software\Aasppapmmxkvs
- A2_181 = "8a57fcb1"

In HKEY_CURRENT_USER\Software\Aasppapmmxkvs
- A3_181 = "8b548bdc"

In HKEY_CURRENT_USER\Software\Aasppapmmxkvs
- A4_181 = "8a57e1f5"

In HKEY_CURRENT_USER\Software\Aasppapmmxkvs
- A1_182 = "42ad9254"

In HKEY_CURRENT_USER\Software\Aasppapmmxkvs
- A2_182 = "f3c55d32"

In HKEY_CURRENT_USER\Software\Aasppapmmxkvs
- A3_182 = "f2c62c1f"

In HKEY_CURRENT_USER\Software\Aasppapmmxkvs
- A4_182 = "f3c54636"

In HKEY_CURRENT_USER\Software\Aasppapmmxkvs
- A1_183 = "5883832e"

In HKEY_CURRENT_USER\Software\Aasppapmmxkvs
- A2_183 = "5d328a16"

In HKEY_CURRENT_USER\Software\Aasppapmmxkvs
- A3_183 = "5c31c5e"

In HKEY_CURRENT_USER\Software\Aasppapmmxkvs
- A4_183 = "5d32aa77"

In HKEY_CURRENT_USER\Software\Aasppapmmxkvs
- A1_184 = "cad62be1"

In HKEY_CURRENT_USER\Software\Aasppapmmxkvs
- A2_184 = "c6a18fb"

In HKEY_CURRENT_USER\Software\Aasppapmmxkvs
- A3_184 = "c7a36491"

In HKEY_CURRENT_USER\Software\Aasppapmmxkvs
- A4_184 = "c6aeb8"

In HKEY_CURRENT_USER\Software\Aasppapmmxkvs
- A1_185 = "53934b4"

In HKEY_CURRENT_USER\Software\Aasppapmmxkvs
- A2_185 = "3d68e5"

In HKEY_CURRENT_USER\Software\Aasppapmmxkvs
- A3_185 = "31e18d"

In HKEY_CURRENT_USER\Software\Aasppapmmxkvs
- A4_185 = "3d72f9"

In HKEY_CURRENT_USER\Software\Aasppapmmxkvs
- A1_186 = "dce11c22"

In HKEY_CURRENT_USER\Software\Aasppapmmxkvs
- A2_186 = "997af2f"

In HKEY_CURRENT_USER\Software\Aasppapmmxkvs
- A3_186 = "9879bd13"

In HKEY_CURRENT_USER\Software\Aasppapmmxkvs
- A4_186 = "997ad73a"

In HKEY_CURRENT_USER\Software\Aasppapmmxkvs
- A1_187 = "b164e133"

In HKEY_CURRENT_USER\Software\Aasppapmmxkvs
- A2_187 = "2e82499"

In HKEY_CURRENT_USER\Software\Aasppapmmxkvs
- A3_187 = "3eb5152"

In HKEY_CURRENT_USER\Software\Aasppapmmxkvs
- A4_187 = "2e83b7b"

In HKEY_CURRENT_USER\Software\Aasppapmmxkvs
- A1_188 = "59e59dea"

In HKEY_CURRENT_USER\Software\Aasppapmmxkvs
- A2_188 = "6c558663"

In HKEY_CURRENT_USER\Software\Aasppapmmxkvs
- A3_188 = "6d56f595"

In HKEY_CURRENT_USER\Software\Aasppapmmxkvs
- A4_188 = "6c559fbc"

In HKEY_CURRENT_USER\Software\Aasppapmmxkvs
- A1_189 = "a7beddae"

In HKEY_CURRENT_USER\Software\Aasppapmmxkvs
- A2_189 = "d5c322e"

In HKEY_CURRENT_USER\Software\Aasppapmmxkvs
- A3_189 = "d4c69d4"

In HKEY_CURRENT_USER\Software\Aasppapmmxkvs
- A4_189 = "d5c33fd"

In HKEY_CURRENT_USER\Software\Aasppapmmxkvs
- A1_190 = "98a86f"

In HKEY_CURRENT_USER\Software\Aasppapmmxkvs
- A2_190 = "3f37527"

In HKEY_CURRENT_USER\Software\Aasppapmmxkvs
- A3_190 = "3e33217"

In HKEY_CURRENT_USER\Software\Aasppapmmxkvs
- A4_190 = "3f3683e"

In HKEY_CURRENT_USER\Software\Aasppapmmxkvs
- A1_191 = "75a8f9c1"

In HKEY_CURRENT_USER\Software\Aasppapmmxkvs
- A2_191 = "a89dd4aa"

In HKEY_CURRENT_USER\Software\Aasppapmmxkvs
- A3_191 = "a99ea656"

In HKEY_CURRENT_USER\Software\Aasppapmmxkvs
- A4_191 = "a89dcc7f"

In HKEY_CURRENT_USER\Software\Aasppapmmxkvs
- A1_192 = "dbfc872"

In HKEY_CURRENT_USER\Software\Aasppapmmxkvs
- A2_192 = "12b253"

In HKEY_CURRENT_USER\Software\Aasppapmmxkvs
- A3_192 = "1385ae9"

In HKEY_CURRENT_USER\Software\Aasppapmmxkvs
- A4_192 = "12b3c"

In HKEY_CURRENT_USER\Software\Aasppapmmxkvs
- A1_193 = "92bf1259"

In HKEY_CURRENT_USER\Software\Aasppapmmxkvs
- A2_193 = "7b78b626"

In HKEY_CURRENT_USER\Software\Aasppapmmxkvs
- A3_193 = "7a7bff28"

In HKEY_CURRENT_USER\Software\Aasppapmmxkvs
- A4_193 = "7b78951"

In HKEY_CURRENT_USER\Software\Aasppapmmxkvs
- A1_194 = "12d8714"

In HKEY_CURRENT_USER\Software\Aasppapmmxkvs
- A2_194 = "e4e5ecb2"

In HKEY_CURRENT_USER\Software\Aasppapmmxkvs
- A3_194 = "e5e6936b"

In HKEY_CURRENT_USER\Software\Aasppapmmxkvs
- A4_194 = "e4e5f942"

In HKEY_CURRENT_USER\Software\Aasppapmmxkvs
- A1_195 = "e85121ee"

In HKEY_CURRENT_USER\Software\Aasppapmmxkvs
- A2_195 = "4e534fe"

In HKEY_CURRENT_USER\Software\Aasppapmmxkvs
- A3_195 = "4f537aa"

In HKEY_CURRENT_USER\Software\Aasppapmmxkvs
- A4_195 = "4e535d83"

In HKEY_CURRENT_USER\Software\Aasppapmmxkvs
- A1_196 = "e5a9db4"

In HKEY_CURRENT_USER\Software\Aasppapmmxkvs
- A2_196 = "b7cdc6e"

In HKEY_CURRENT_USER\Software\Aasppapmmxkvs
- A3_196 = "b6c3abed"

In HKEY_CURRENT_USER\Software\Aasppapmmxkvs
- A4_196 = "b7cc1c4"

In HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Image File Execution Options\ctfmon.exe
- Debugger = "%Windows%\Fonts\Fonts.exe"

In HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Image File Execution Options\taskmgr.exe
- Debugger = "%Windows%\Fonts\tskmgr.exe"

In HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Image File Execution Options\boot.exe
- Debugger = "%Windows%\Fonts\fonts.exe"

In HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Image File Execution Options\autorun.exe
- Debugger = "%System%\drivers\drivers.cab.exe"

In HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Image File Execution Options\autoruns.exe
- Debugger = "%System%\drivers\drivers.cab.exe"

In HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Image File Execution Options\auto.exe
- Debugger = "%System%\drivers\drivers.cab.exe"

In HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Image File Execution Options\msconfig.exe
- Debugger = "%Windows%\Media\rndll32.pif"

In HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Image File Execution Options\procexp.exe
- Debugger = "%Windows%\pchealth\helpctr\binaries\HelpHost.com"

In HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer\Run
- sys = "%Windows%\Fonts\Fonts.exe"

In HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\system
- DisableStatusMessages = "1"

In HKEY_CURRENT_USER\Software\Policies\Microsoft\Windows\System\Scripts\Logoff\0
- DisplayName = "Local Group Policy"

In HKEY_CURRENT_USER\Software\Policies\Microsoft\Windows\System\Scripts\Logoff\0
- GPO-ID = "LocalGPO"

In HKEY_CURRENT_USER\Software\Policies\Microsoft\Windows\System\Scripts\Logoff\0
- GPOName = "Local Group Policy"

In HKEY_CURRENT_USER\Software\Policies\Microsoft\Windows\System\Scripts\Logoff\0
- SOM-ID = "Local"

In HKEY_CURRENT_USER\Software\Policies\Microsoft\Windows\System\Scripts\Logoff\0\0
- Script = "%Windows%\Cursors\Boom.vbs"

In HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\System\Scripts\Shutdown\0
- DisplayName = "Local Group Policy"

In HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\System\Scripts\Shutdown\0
- GPO-ID = "LocalGPO"

In HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\System\Scripts\Shutdown\0
- GPOName = "Local Group Policy"

In HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\System\Scripts\Shutdown\0
- SOM-ID = "Local"

In HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\System\Scripts\Shutdown\0\0
- Script = "%Windows%\Cursors\Boom.vbs"

In HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\System\Scripts\Startup\0
- DisplayName = "Local Group Policy"

In HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\System\Scripts\Startup\0
- GPO-ID = "LocalGPO"

In HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\System\Scripts\Startup\0
- GPOName = "Local Group Policy"

In HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\System\Scripts\Startup\0
- SOM-ID = "Local"

In HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\System\Scripts\Startup\0\0
- Script = "%Windows%\Cursors\Boom.vbs"

In HKEY_LOCAL_MACHINE\SOFTWARE\Classes\exefile
- NeverShowExt = "1"

In HKEY_LOCAL_MACHINE\SOFTWARE\Classes\comfile
- NeverShowExt = "1"

In HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Services\SharedAccess\Parameters\FirewallPolicy\StandardProfile\AuthorizedApplications\List
- %User Temp%\uuawoi.exe = "%User Temp%\uuawoi.exe:*:Enabled:ipsec"

To delete the registry value this malware/grayware created:

Open Registry Editor. Click Start>Run, type REGEDIT, then press Enter.
In the left panel, double-click the following:
HKEY_LOCAL_MACHINE>SOFTWARE>Microsoft>Security Center
In the right panel, locate and delete the entry:
UacDisableNotify = "1"
In the left panel, double-click the following:
HKEY_LOCAL_MACHINE>SOFTWARE>Microsoft>Security Center>Svc
In the right panel, locate and delete the entry:
AntiVirusOverride = "1"
Again In the right panel, locate and delete the entry:
AntiVirusDisableNotify = "1"
Again In the right panel, locate and delete the entry:
FirewallDisableNotify = "1"
Again In the right panel, locate and delete the entry:
FirewallOverride = "1"
Again In the right panel, locate and delete the entry:
UpdatesDisableNotify = "1"
Again In the right panel, locate and delete the entry:
UacDisableNotify = "1"
In the left panel, double-click the following:
HKEY_CURRENT_USER>Software>Microsoft>Windows>CurrentVersion>Internet Settings
In the right panel, locate and delete the entry:
GlobalUserOffline = "0"
In the left panel, double-click the following:
HKEY_LOCAL_MACHINE>SOFTWARE>Microsoft>Windows>CurrentVersion>policies>system
In the right panel, locate and delete the entry:
EnableLUA = "0"
In the left panel, double-click the following:
HKEY_LOCAL_MACHINE>SYSTEM>ControlSet001>Services>SharedAccess>Parameters>FirewallPolicy>StandardProfile>AuthorizedApplications>List
In the right panel, locate and delete the entry:
{malware path and file name} = "{malware path and file name}:*:enabled:ipsec"
In the left panel, double-click the following:
HKEY_LOCAL_MACHINE>SYSTEM>ControlSet001>Services>SharedAccess>Parameters>FirewallPolicy>StandardProfile
In the right panel, locate and delete the entry:
EnableFirewall = "0"
Again In the right panel, locate and delete the entry:
DoNotAllowExceptions = "0"
Again In the right panel, locate and delete the entry:
DisableNotifications = "1"
In the left panel, double-click the following:
HKEY_CURRENT_USER>Software>Aasppapmmxkvs>-993627007
In the right panel, locate and delete the entry:
1768776769 = "93"
Again In the right panel, locate and delete the entry:
-757413758 = "0"
Again In the right panel, locate and delete the entry:
1011363011 = "0"
Again In the right panel, locate and delete the entry:
-1514827516 = "23"
Again In the right panel, locate and delete the entry:
253949253 = "1a1"
Again In the right panel, locate and delete the entry:
2022726022 = "{random characters}"
Again In the right panel, locate and delete the entry:
-503464505 = "{random characters}"
In the left panel, double-click the following:
HKEY_CURRENT_USER>Software>Aasppapmmxkvs
In the right panel, locate and delete the entry:
A1_0 = "cc96283a"
Again In the right panel, locate and delete the entry:
A2_0 = "158d"
Again In the right panel, locate and delete the entry:
A3_0 = "136a29"
Again In the right panel, locate and delete the entry:
A4_0 = "0"
Again In the right panel, locate and delete the entry:
A1_1 = "274b5a28"
Again In the right panel, locate and delete the entry:
A2_1 = "696d71cc"
Again In the right panel, locate and delete the entry:
A3_1 = "686ee68"
Again In the right panel, locate and delete the entry:
A4_1 = "696d6441"
Again In the right panel, locate and delete the entry:
A1_2 = "966c8ca7"
Again In the right panel, locate and delete the entry:
A2_2 = "d2daddf"
Again In the right panel, locate and delete the entry:
A3_2 = "d3d9a2ab"
Again In the right panel, locate and delete the entry:
A4_2 = "d2dac882"
Again In the right panel, locate and delete the entry:
A1_3 = "2b12cf3"
Again In the right panel, locate and delete the entry:
A2_3 = "3c48394e"
Again In the right panel, locate and delete the entry:
A3_3 = "3d4b46ea"
Again In the right panel, locate and delete the entry:
A4_3 = "3c482cc3"
Again In the right panel, locate and delete the entry:
A1_4 = "41c4c3fd"
Again In the right panel, locate and delete the entry:
A2_4 = "a5b58489"
Again In the right panel, locate and delete the entry:
A3_4 = "a4b6fb2d"
Again In the right panel, locate and delete the entry:
A4_4 = "a5b5914"
Again In the right panel, locate and delete the entry:
A1_5 = "311bc98d"
Again In the right panel, locate and delete the entry:
A2_5 = "f22ec8"
Again In the right panel, locate and delete the entry:
A3_5 = "e219f6c"
Again In the right panel, locate and delete the entry:
A4_5 = "f22f545"
Again In the right panel, locate and delete the entry:
A1_6 = "2c2cd"
Again In the right panel, locate and delete the entry:
A2_6 = "7894cb"
Again In the right panel, locate and delete the entry:
A3_6 = "799333af"
Again In the right panel, locate and delete the entry:
A4_6 = "7895986"
Again In the right panel, locate and delete the entry:
A1_7 = "9deeef94"
Again In the right panel, locate and delete the entry:
A2_7 = "e1fda84a"
Again In the right panel, locate and delete the entry:
A3_7 = "efed7ee"
Again In the right panel, locate and delete the entry:
A4_7 = "e1fdbdc7"
Again In the right panel, locate and delete the entry:
A1_8 = "b2e23ad"
Again In the right panel, locate and delete the entry:
A2_8 = "4b6b3785"
Again In the right panel, locate and delete the entry:
A3_8 = "4a684821"
Again In the right panel, locate and delete the entry:
A4_8 = "4b6b228"
Again In the right panel, locate and delete the entry:
A1_9 = "1f34131"
Again In the right panel, locate and delete the entry:
A2_9 = "b4d893c4"
Again In the right panel, locate and delete the entry:
A3_9 = "b5dbec6"
Again In the right panel, locate and delete the entry:
A4_9 = "b4d88649"
Again In the right panel, locate and delete the entry:
A1_10 = "ae7fae37"
Again In the right panel, locate and delete the entry:
A2_10 = "1e45f5e2"
Again In the right panel, locate and delete the entry:
A3_10 = "1f468a3"
Again In the right panel, locate and delete the entry:
A4_10 = "1e45ea8a"
Again In the right panel, locate and delete the entry:
A1_11 = "f7edf9a"
Again In the right panel, locate and delete the entry:
A2_11 = "87b3548f"
Again In the right panel, locate and delete the entry:
A3_11 = "86b24e2"
Again In the right panel, locate and delete the entry:
A4_11 = "87b34ecb"
Again In the right panel, locate and delete the entry:
A1_12 = "5c75c941"
Again In the right panel, locate and delete the entry:
A2_12 = "f12a5"
Again In the right panel, locate and delete the entry:
A3_12 = "f23d925"
Again In the right panel, locate and delete the entry:
A4_12 = "f12b3c"
Again In the right panel, locate and delete the entry:
A1_13 = "f1ea3a84"
Again In the right panel, locate and delete the entry:
A2_13 = "5a8ede9"
Again In the right panel, locate and delete the entry:
A3_13 = "5b8d7d64"
Again In the right panel, locate and delete the entry:
A4_13 = "5a8e174d"
Again In the right panel, locate and delete the entry:
A1_14 = "4e853d57"
Again In the right panel, locate and delete the entry:
A2_14 = "c3fb6e7"
Again In the right panel, locate and delete the entry:
A3_14 = "c2f811a7"
Again In the right panel, locate and delete the entry:
A4_14 = "c3fb7b8e"
Again In the right panel, locate and delete the entry:
A1_15 = "6d42f8fd"
Again In the right panel, locate and delete the entry:
A2_15 = "2d68c11"
Again In the right panel, locate and delete the entry:
A3_15 = "2c6bb5e6"
Again In the right panel, locate and delete the entry:
A4_15 = "2d68dfcf"
Again In the right panel, locate and delete the entry:
A1_16 = "f4e515b"
Again In the right panel, locate and delete the entry:
A2_16 = "96d65ade"
Again In the right panel, locate and delete the entry:
A3_16 = "97d52e39"
Again In the right panel, locate and delete the entry:
A4_16 = "96d6441"
Again In the right panel, locate and delete the entry:
A1_17 = "23ae96"
Again In the right panel, locate and delete the entry:
A2_17 = "43b4d8"
Again In the right panel, locate and delete the entry:
A3_17 = "14c278"
Again In the right panel, locate and delete the entry:
A4_17 = "43a851"
Again In the right panel, locate and delete the entry:
A1_18 = "9f891cbe"
Again In the right panel, locate and delete the entry:
A2_18 = "69b11127"
Again In the right panel, locate and delete the entry:
A3_18 = "68b266bb"
Again In the right panel, locate and delete the entry:
A4_18 = "69b1c92"
Again In the right panel, locate and delete the entry:
A1_19 = "17b96186"
Again In the right panel, locate and delete the entry:
A2_19 = "d31e56bb"
Again In the right panel, locate and delete the entry:
A3_19 = "d21d1afa"
Again In the right panel, locate and delete the entry:
A4_19 = "d31e7d3"
Again In the right panel, locate and delete the entry:
A1_20 = "f7c32c3d"
Again In the right panel, locate and delete the entry:
A2_20 = "3c8bcc63"
Again In the right panel, locate and delete the entry:
A3_20 = "3d88bf3d"
Again In the right panel, locate and delete the entry:
A4_20 = "3c8bd514"
Again In the right panel, locate and delete the entry:
A1_21 = "95fa4b6b"
Again In the right panel, locate and delete the entry:
A2_21 = "a5f91c9f"
Again In the right panel, locate and delete the entry:
A3_21 = "a4fa537c"
Again In the right panel, locate and delete the entry:
A4_21 = "a5f93955"
Again In the right panel, locate and delete the entry:
A1_22 = "d4c64dc4"
Again In the right panel, locate and delete the entry:
A2_22 = "f66bda1"
Again In the right panel, locate and delete the entry:
A3_22 = "e65f7bf"
Again In the right panel, locate and delete the entry:
A4_22 = "f669d96"
Again In the right panel, locate and delete the entry:
A1_23 = "3db27b81"
Again In the right panel, locate and delete the entry:
A2_23 = "78d41c5"
Again In the right panel, locate and delete the entry:
A3_23 = "79d76bfe"
Again In the right panel, locate and delete the entry:
A4_23 = "78d41d7"
Again In the right panel, locate and delete the entry:
A1_24 = "2bcc9e4"
Again In the right panel, locate and delete the entry:
A2_24 = "e241719a"
Again In the right panel, locate and delete the entry:
A3_24 = "e342c31"
Again In the right panel, locate and delete the entry:
A4_24 = "e2416618"
Again In the right panel, locate and delete the entry:
A1_25 = "9a9db85"
Again In the right panel, locate and delete the entry:
A2_25 = "4baed4fa"
Again In the right panel, locate and delete the entry:
A3_25 = "4aada7"
Again In the right panel, locate and delete the entry:
A4_25 = "4baeca59"
Again In the right panel, locate and delete the entry:
A1_26 = "68833653"
Again In the right panel, locate and delete the entry:
A2_26 = "b51cf14"
Again In the right panel, locate and delete the entry:
A3_26 = "b41f44b3"
Again In the right panel, locate and delete the entry:
A4_26 = "b51c2e9a"
Again In the right panel, locate and delete the entry:
A1_27 = "3ef2fa84"
Again In the right panel, locate and delete the entry:
A2_27 = "1e898d5b"
Again In the right panel, locate and delete the entry:
A3_27 = "1f8af8f2"
Again In the right panel, locate and delete the entry:
A4_27 = "1e8992db"
Again In the right panel, locate and delete the entry:
A1_28 = "db7cd2dd"
Again In the right panel, locate and delete the entry:
A2_28 = "87f6d68f"
Again In the right panel, locate and delete the entry:
A3_28 = "86f59d35"
Again In the right panel, locate and delete the entry:
A4_28 = "87f6f71c"
Again In the right panel, locate and delete the entry:
A1_29 = "4e416f"
Again In the right panel, locate and delete the entry:
A2_29 = "f1644619"
Again In the right panel, locate and delete the entry:
A3_29 = "f673174"
Again In the right panel, locate and delete the entry:
A4_29 = "f1645b5d"
Again In the right panel, locate and delete the entry:
A1_30 = "da44fb57"
Again In the right panel, locate and delete the entry:
A2_30 = "5ad1a461"
Again In the right panel, locate and delete the entry:
A3_30 = "5bd2d5b7"
Again In the right panel, locate and delete the entry:
A4_30 = "5ad1bf9e"
Again In the right panel, locate and delete the entry:
A1_31 = "59464a8a"
Again In the right panel, locate and delete the entry:
A2_31 = "c43f615"
Again In the right panel, locate and delete the entry:
A3_31 = "c53c49f6"
Again In the right panel, locate and delete the entry:
A4_31 = "c43f23df"
Again In the right panel, locate and delete the entry:
A1_32 = "28ec3d71"
Again In the right panel, locate and delete the entry:
A2_32 = "2dac9fa5"
Again In the right panel, locate and delete the entry:
A3_32 = "2cafe29"
Again In the right panel, locate and delete the entry:
A4_32 = "2dac882"
Again In the right panel, locate and delete the entry:
A1_33 = "f5679e3d"
Again In the right panel, locate and delete the entry:
A2_33 = "9719f969"
Again In the right panel, locate and delete the entry:
A3_33 = "961a8648"
Again In the right panel, locate and delete the entry:
A4_33 = "9719ec61"
Again In the right panel, locate and delete the entry:
A1_34 = "e1dd31ec"
Again In the right panel, locate and delete the entry:
A2_34 = "87491e"
Again In the right panel, locate and delete the entry:
A3_34 = "1843a8b"
Again In the right panel, locate and delete the entry:
A4_34 = "875a2"
Again In the right panel, locate and delete the entry:
A1_35 = "3582dfaf"
Again In the right panel, locate and delete the entry:
A2_35 = "69f4afcf"
Again In the right panel, locate and delete the entry:
A3_35 = "68f7deca"
Again In the right panel, locate and delete the entry:
A4_35 = "69f4b4e3"
Again In the right panel, locate and delete the entry:
A1_36 = "cfa297d"
Again In the right panel, locate and delete the entry:
A2_36 = "d36238b7"
Again In the right panel, locate and delete the entry:
A3_36 = "d26173d"
Again In the right panel, locate and delete the entry:
A4_36 = "d3621924"
Again In the right panel, locate and delete the entry:
A1_37 = "a8641de"
Again In the right panel, locate and delete the entry:
A2_37 = "3ccf5d6e"
Again In the right panel, locate and delete the entry:
A3_37 = "3dcc174c"
Again In the right panel, locate and delete the entry:
A4_37 = "3ccf7d65"
Again In the right panel, locate and delete the entry:
A1_38 = "94c3bf6"
Again In the right panel, locate and delete the entry:
A2_38 = "a63cf8be"
Again In the right panel, locate and delete the entry:
A3_38 = "a73f8b8f"
Again In the right panel, locate and delete the entry:
A4_38 = "a63ce1a6"
Again In the right panel, locate and delete the entry:
A1_39 = "2f33d32"
Again In the right panel, locate and delete the entry:
A2_39 = "faa5ec7"
Again In the right panel, locate and delete the entry:
A3_39 = "ea92fce"
Again In the right panel, locate and delete the entry:
A4_39 = "faa45e7"
Again In the right panel, locate and delete the entry:
A1_40 = "e56beee1"
Again In the right panel, locate and delete the entry:
A2_40 = "7917b499"
Again In the right panel, locate and delete the entry:
A3_40 = "7814c1"
Again In the right panel, locate and delete the entry:
A4_40 = "7917aa28"
Again In the right panel, locate and delete the entry:
A1_41 = "d9f97534"
Again In the right panel, locate and delete the entry:
A2_41 = "e28516f6"
Again In the right panel, locate and delete the entry:
A3_41 = "e386644"
Again In the right panel, locate and delete the entry:
A4_41 = "e285e69"
Again In the right panel, locate and delete the entry:
A1_42 = "73bc56f3"
Again In the right panel, locate and delete the entry:
A2_42 = "4bf26f39"
Again In the right panel, locate and delete the entry:
A3_42 = "4af11883"
Again In the right panel, locate and delete the entry:
A4_42 = "4bf272aa"
Again In the right panel, locate and delete the entry:
A1_43 = "93c2dd46"
Again In the right panel, locate and delete the entry:
A2_43 = "b55fc71c"
Again In the right panel, locate and delete the entry:
A3_43 = "b45cbcc2"
Again In the right panel, locate and delete the entry:
A4_43 = "b55fd6eb"
Again In the right panel, locate and delete the entry:
A1_44 = "1362c4c"
Again In the right panel, locate and delete the entry:
A2_44 = "1ecd22d5"
Again In the right panel, locate and delete the entry:
A3_44 = "1fce515"
Again In the right panel, locate and delete the entry:
A4_44 = "1ecd3b2c"
Again In the right panel, locate and delete the entry:
A1_45 = "91b34525"
Again In the right panel, locate and delete the entry:
A2_45 = "883a88f"
Again In the right panel, locate and delete the entry:
A3_45 = "8939f544"
Again In the right panel, locate and delete the entry:
A4_45 = "883a9f6d"
Again In the right panel, locate and delete the entry:
A1_46 = "49b7affb"
Again In the right panel, locate and delete the entry:
A2_46 = "f1a81fdf"
Again In the right panel, locate and delete the entry:
A3_46 = "fab6987"
Again In the right panel, locate and delete the entry:
A4_46 = "f1a83ae"
Again In the right panel, locate and delete the entry:
A1_47 = "2ab14b3"
Again In the right panel, locate and delete the entry:
A2_47 = "5b157fe8"
Again In the right panel, locate and delete the entry:
A3_47 = "5a16dc6"
Again In the right panel, locate and delete the entry:
A4_47 = "5b1567ef"
Again In the right panel, locate and delete the entry:
A1_48 = "daced68c"
Again In the right panel, locate and delete the entry:
A2_48 = "c482d61"
Again In the right panel, locate and delete the entry:
A3_48 = "c581a619"
Again In the right panel, locate and delete the entry:
A4_48 = "c482cc3"
Again In the right panel, locate and delete the entry:
A1_49 = "aec2e829"
Again In the right panel, locate and delete the entry:
A2_49 = "2df15bb"
Again In the right panel, locate and delete the entry:
A3_49 = "2cf35a58"
Again In the right panel, locate and delete the entry:
A4_49 = "2df371"
Again In the right panel, locate and delete the entry:
A1_50 = "8b3a277a"
Again In the right panel, locate and delete the entry:
A2_50 = "975db79f"
Again In the right panel, locate and delete the entry:
A3_50 = "965efe9b"
Again In the right panel, locate and delete the entry:
A4_50 = "975d94b2"
Again In the right panel, locate and delete the entry:
A1_51 = "97ddb1ad"
Again In the right panel, locate and delete the entry:
A2_51 = "cae44d"
Again In the right panel, locate and delete the entry:
A3_51 = "1c992da"
Again In the right panel, locate and delete the entry:
A4_51 = "caf8f3"
Again In the right panel, locate and delete the entry:
A1_52 = "6349bde7"
Again In the right panel, locate and delete the entry:
A2_52 = "6a386db"
Again In the right panel, locate and delete the entry:
A3_52 = "6b3b371d"
Again In the right panel, locate and delete the entry:
A4_52 = "6a385d34"
Again In the right panel, locate and delete the entry:
A1_53 = "9d966c2c"
Again In the right panel, locate and delete the entry:
A2_53 = "d3a5e122"
Again In the right panel, locate and delete the entry:
A3_53 = "d2a6ab5c"
Again In the right panel, locate and delete the entry:
A4_53 = "d3a5c175"
Again In the right panel, locate and delete the entry:
A1_54 = "ca5e8ffa"
Again In the right panel, locate and delete the entry:
A2_54 = "3d1369b"
Again In the right panel, locate and delete the entry:
A3_54 = "3c14f9f"
Again In the right panel, locate and delete the entry:
A4_54 = "3d1325b6"
Again In the right panel, locate and delete the entry:
A1_55 = "8f85aba1"
Again In the right panel, locate and delete the entry:
A2_55 = "a689592"
Again In the right panel, locate and delete the entry:
A3_55 = "a783e3de"
Again In the right panel, locate and delete the entry:
A4_55 = "a6889f7"
Again In the right panel, locate and delete the entry:
A1_56 = "bd4fe36e"
Again In the right panel, locate and delete the entry:
A2_56 = "fedf1cf"
Again In the right panel, locate and delete the entry:
A3_56 = "eee8411"
Again In the right panel, locate and delete the entry:
A4_56 = "fedee38"
Again In the right panel, locate and delete the entry:
A1_57 = "af6e72"
Again In the right panel, locate and delete the entry:
A2_57 = "795b486"
Again In the right panel, locate and delete the entry:
A3_57 = "7858385"
Again In the right panel, locate and delete the entry:
A4_57 = "795b5279"
Again In the right panel, locate and delete the entry:
A1_58 = "39af8e3"
Again In the right panel, locate and delete the entry:
A2_58 = "e2c8aa82"
Again In the right panel, locate and delete the entry:
A3_58 = "e3cbdc93"
Again In the right panel, locate and delete the entry:
A4_58 = "e2c8b6ba"
Again In the right panel, locate and delete the entry:
A1_59 = "2dcaf3ab"
Again In the right panel, locate and delete the entry:
A2_59 = "4c36393c"
Again In the right panel, locate and delete the entry:
A3_59 = "4d357d2"
Again In the right panel, locate and delete the entry:
A4_59 = "4c361afb"
Again In the right panel, locate and delete the entry:
A1_60 = "6da93765"
Again In the right panel, locate and delete the entry:
A2_60 = "b5a3696a"
Again In the right panel, locate and delete the entry:
A3_60 = "b4a1515"
Again In the right panel, locate and delete the entry:
A4_60 = "b5a37f3c"
Again In the right panel, locate and delete the entry:
A1_61 = "7d8bca24"
Again In the right panel, locate and delete the entry:
A2_61 = "1f1c2ee"
Again In the right panel, locate and delete the entry:
A3_61 = "1e138954"
Again In the right panel, locate and delete the entry:
A4_61 = "1f1e37d"
Again In the right panel, locate and delete the entry:
A1_62 = "bc1d36f1"
Again In the right panel, locate and delete the entry:
A2_62 = "887e5e24"
Again In the right panel, locate and delete the entry:
A3_62 = "897d2d97"
Again In the right panel, locate and delete the entry:
A4_62 = "887e47be"
Again In the right panel, locate and delete the entry:
A1_63 = "7c3e4da6"
Again In the right panel, locate and delete the entry:
A2_63 = "f1ebb6e2"
Again In the right panel, locate and delete the entry:
A3_63 = "fe8c1d6"
Again In the right panel, locate and delete the entry:
A4_63 = "f1ebabff"
Again In the right panel, locate and delete the entry:
A1_64 = "4cfa6314"
Again In the right panel, locate and delete the entry:
A2_64 = "5b59ecc"
Again In the right panel, locate and delete the entry:
A3_64 = "5a5a7a69"
Again In the right panel, locate and delete the entry:
A4_64 = "5b5914"
Again In the right panel, locate and delete the entry:
A1_65 = "d52fcd8"
Again In the right panel, locate and delete the entry:
A2_65 = "c4c668a5"
Again In the right panel, locate and delete the entry:
A3_65 = "c5c51ea8"
Again In the right panel, locate and delete the entry:
A4_65 = "c4c67481"
Again In the right panel, locate and delete the entry:
A1_66 = "7fa9898f"
Again In the right panel, locate and delete the entry:
A2_66 = "2e33fbbd"
Again In the right panel, locate and delete the entry:
A3_66 = "2f3b2eb"
Again In the right panel, locate and delete the entry:
A4_66 = "2e33d8c2"
Again In the right panel, locate and delete the entry:
A1_67 = "52284f5a"
Again In the right panel, locate and delete the entry:
A2_67 = "97a125ee"
Again In the right panel, locate and delete the entry:
A3_67 = "96a2572a"
Again In the right panel, locate and delete the entry:
A4_67 = "97a13d3"
Again In the right panel, locate and delete the entry:
A1_68 = "6338291d"
Again In the right panel, locate and delete the entry:
A2_68 = "1eb89f"
Again In the right panel, locate and delete the entry:
A3_68 = "dcb6d"
Again In the right panel, locate and delete the entry:
A4_68 = "1ea144"
Again In the right panel, locate and delete the entry:
A1_69 = "7e2fabe"
Again In the right panel, locate and delete the entry:
A2_69 = "6a7c1b34"
Again In the right panel, locate and delete the entry:
A3_69 = "6b7f6fac"
Again In the right panel, locate and delete the entry:
A4_69 = "6a7c585"
Again In the right panel, locate and delete the entry:
A1_70 = "3c1499f"
Again In the right panel, locate and delete the entry:
A2_70 = "d3e971a9"
Again In the right panel, locate and delete the entry:
A3_70 = "d2ea3ef"
Again In the right panel, locate and delete the entry:
A4_70 = "d3e969c6"
Again In the right panel, locate and delete the entry:
A1_71 = "74f9e5e"
Again In the right panel, locate and delete the entry:
A2_71 = "3d56d1e5"
Again In the right panel, locate and delete the entry:
A3_71 = "3c55a42e"
Again In the right panel, locate and delete the entry:
A4_71 = "3d56ce7"
Again In the right panel, locate and delete the entry:
A1_72 = "733b3f4"
Again In the right panel, locate and delete the entry:
A2_72 = "a6c41435"
Again In the right panel, locate and delete the entry:
A3_72 = "a7c75861"
Again In the right panel, locate and delete the entry:
A4_72 = "a6c43248"
Again In the right panel, locate and delete the entry:
A1_73 = "ac45dad6"
Again In the right panel, locate and delete the entry:
A2_73 = "1318c4"
Again In the right panel, locate and delete the entry:
A3_73 = "1132fca"
Again In the right panel, locate and delete the entry:
A4_73 = "1319689"
Again In the right panel, locate and delete the entry:
A1_74 = "d2135a95"
Again In the right panel, locate and delete the entry:
A2_74 = "799eeb5d"
Again In the right panel, locate and delete the entry:
A3_74 = "789d9e3"
Again In the right panel, locate and delete the entry:
A4_74 = "799efaca"
Again In the right panel, locate and delete the entry:
A1_75 = "7562a5e"
Again In the right panel, locate and delete the entry:
A2_75 = "e3c487c"
Again In the right panel, locate and delete the entry:
A3_75 = "e2f3522"
Again In the right panel, locate and delete the entry:
A4_75 = "e3c5fb"
Again In the right panel, locate and delete the entry:
A1_76 = "37bad2"
Again In the right panel, locate and delete the entry:
A2_76 = "4c79d56f"
Again In the right panel, locate and delete the entry:
A3_76 = "4d7aa965"
Again In the right panel, locate and delete the entry:
A4_76 = "4c79c34c"
Again In the right panel, locate and delete the entry:
A1_77 = "5adec"
Again In the right panel, locate and delete the entry:
A2_77 = "b5e73ead"
Again In the right panel, locate and delete the entry:
A3_77 = "b4e44da4"
Again In the right panel, locate and delete the entry:
A4_77 = "b5e7278d"
Again In the right panel, locate and delete the entry:
A1_78 = "5bffa93"
Again In the right panel, locate and delete the entry:
A2_78 = "1f54979"
Again In the right panel, locate and delete the entry:
A3_78 = "1e57e1e7"
Again In the right panel, locate and delete the entry:
A4_78 = "1f548bce"
Again In the right panel, locate and delete the entry:
A1_79 = "11aed756"
Again In the right panel, locate and delete the entry:
A2_79 = "88c1e6c"
Again In the right panel, locate and delete the entry:
A3_79 = "89c29a26"
Again In the right panel, locate and delete the entry:
A4_79 = "88c1ff"
Again In the right panel, locate and delete the entry:
A1_80 = "c7625d"
Again In the right panel, locate and delete the entry:
A2_80 = "f22f49fa"
Again In the right panel, locate and delete the entry:
A3_80 = "f32c3e79"
Again In the right panel, locate and delete the entry:
A4_80 = "f22f545"
Again In the right panel, locate and delete the entry:
A1_81 = "7a7fd9df"
Again In the right panel, locate and delete the entry:
A2_81 = "5b9ca53b"
Again In the right panel, locate and delete the entry:
A3_81 = "5a9fd2b8"
Again In the right panel, locate and delete the entry:
A4_81 = "5b9cb891"
Again In the right panel, locate and delete the entry:
A1_82 = "6492518d"
Again In the right panel, locate and delete the entry:
A2_82 = "c5af6"
Again In the right panel, locate and delete the entry:
A3_82 = "c4976fb"
Again In the right panel, locate and delete the entry:
A4_82 = "c5a1cd2"
Again In the right panel, locate and delete the entry:
A1_83 = "3c34654"
Again In the right panel, locate and delete the entry:
A2_83 = "2e7794ec"
Again In the right panel, locate and delete the entry:
A3_83 = "2f74eb3a"
Again In the right panel, locate and delete the entry:
A4_83 = "2e778113"
Again In the right panel, locate and delete the entry:
A1_84 = "3b82d34"
Again In the right panel, locate and delete the entry:
A2_84 = "97e4c383"
Again In the right panel, locate and delete the entry:
A3_84 = "96e78f7d"
Again In the right panel, locate and delete the entry:
A4_84 = "97e4e554"
Again In the right panel, locate and delete the entry:
A1_85 = "3ac92346"
Again In the right panel, locate and delete the entry:
A2_85 = "1525736"
Again In the right panel, locate and delete the entry:
A3_85 = "5123bc"
Again In the right panel, locate and delete the entry:
A4_85 = "1524995"
Again In the right panel, locate and delete the entry:
A1_86 = "e1648"
Again In the right panel, locate and delete the entry:
A2_86 = "6abf8c97"
Again In the right panel, locate and delete the entry:
A3_86 = "6bbcc7ff"
Again In the right panel, locate and delete the entry:
A4_86 = "6abfadd6"
Again In the right panel, locate and delete the entry:
A1_87 = "75497a48"
Again In the right panel, locate and delete the entry:
A2_87 = "d42d4f8"
Again In the right panel, locate and delete the entry:
A3_87 = "d52e783e"
Again In the right panel, locate and delete the entry:
A4_87 = "d42d1217"
Again In the right panel, locate and delete the entry:
A1_88 = "1fe7562"
Again In the right panel, locate and delete the entry:
A2_88 = "3d9a623f"
Again In the right panel, locate and delete the entry:
A3_88 = "3c991c71"
Again In the right panel, locate and delete the entry:
A4_88 = "3d9a7658"
Again In the right panel, locate and delete the entry:
A1_89 = "f7716cc"
Again In the right panel, locate and delete the entry:
A2_89 = "a77fba"
Again In the right panel, locate and delete the entry:
A3_89 = "a64bb"
Again In the right panel, locate and delete the entry:
A4_89 = "a77da99"
Again In the right panel, locate and delete the entry:
A1_90 = "d8cbbf66"
Again In the right panel, locate and delete the entry:
A2_90 = "17523ed"
Again In the right panel, locate and delete the entry:
A3_90 = "117654f3"
Again In the right panel, locate and delete the entry:
A4_90 = "1753eda"
Again In the right panel, locate and delete the entry:
A1_91 = "66ccb44"
Again In the right panel, locate and delete the entry:
A2_91 = "79e283bc"
Again In the right panel, locate and delete the entry:
A3_91 = "78e1c932"
Again In the right panel, locate and delete the entry:
A4_91 = "79e2a31b"
Again In the right panel, locate and delete the entry:
A1_92 = "6fe8d9f"
Again In the right panel, locate and delete the entry:
A2_92 = "e352641"
Again In the right panel, locate and delete the entry:
A3_92 = "e2536d75"
Again In the right panel, locate and delete the entry:
A4_92 = "e3575c"
Again In the right panel, locate and delete the entry:
A1_93 = "f1ead3"
Again In the right panel, locate and delete the entry:
A2_93 = "4cbd72a"
Again In the right panel, locate and delete the entry:
A3_93 = "4dbe1b4"
Again In the right panel, locate and delete the entry:
A4_93 = "4cbd6b9d"
Again In the right panel, locate and delete the entry:
A1_94 = "88befb8"
Again In the right panel, locate and delete the entry:
A2_94 = "b62ad6d"
Again In the right panel, locate and delete the entry:
A3_94 = "b729a5f7"
Again In the right panel, locate and delete the entry:
A4_94 = "b62acfde"
Again In the right panel, locate and delete the entry:
A1_95 = "911e4dc3"
Again In the right panel, locate and delete the entry:
A2_95 = "1f982be8"
Again In the right panel, locate and delete the entry:
A3_95 = "1e9b5e36"
Again In the right panel, locate and delete the entry:
A4_95 = "1f98341f"
Again In the right panel, locate and delete the entry:
A1_96 = "ca26d52d"
Again In the right panel, locate and delete the entry:
A2_96 = "89581f1"
Again In the right panel, locate and delete the entry:
A3_96 = "886f249"
Again In the right panel, locate and delete the entry:
A4_96 = "895986"
Again In the right panel, locate and delete the entry:
A1_97 = "da13d2f8"
Again In the right panel, locate and delete the entry:
A2_97 = "f272df21"
Again In the right panel, locate and delete the entry:
A3_97 = "f3719688"
Again In the right panel, locate and delete the entry:
A4_97 = "f272fca1"
Again In the right panel, locate and delete the entry:
A1_98 = "35bf13b"
Again In the right panel, locate and delete the entry:
A2_98 = "5be786a"
Again In the right panel, locate and delete the entry:
A3_98 = "5ae3acb"
Again In the right panel, locate and delete the entry:
A4_98 = "5be6e2"
Again In the right panel, locate and delete the entry:
A1_99 = "ffefe867"
Again In the right panel, locate and delete the entry:
A2_99 = "c54ddb2e"
Again In the right panel, locate and delete the entry:
A3_99 = "c44eafa"
Again In the right panel, locate and delete the entry:
A4_99 = "c54dc523"
Again In the right panel, locate and delete the entry:
A1_100 = "4c9ba13d"
Again In the right panel, locate and delete the entry:
A2_100 = "2ebb3caf"
Again In the right panel, locate and delete the entry:
A3_100 = "2fb8434d"
Again In the right panel, locate and delete the entry:
A4_100 = "2ebb2964"
Again In the right panel, locate and delete the entry:
A1_101 = "5d87c1fc"
Again In the right panel, locate and delete the entry:
A2_101 = "98289ae"
Again In the right panel, locate and delete the entry:
A3_101 = "992be78c"
Again In the right panel, locate and delete the entry:
A4_101 = "98288da5"
Again In the right panel, locate and delete the entry:
A1_102 = "486db495"
Again In the right panel, locate and delete the entry:
A2_102 = "195e7ab"
Again In the right panel, locate and delete the entry:
A3_102 = "969bcf"
Again In the right panel, locate and delete the entry:
A4_102 = "195f1e6"
Again In the right panel, locate and delete the entry:
A1_103 = "67ee717e"
Again In the right panel, locate and delete the entry:
A2_103 = "6b34a5c"
Again In the right panel, locate and delete the entry:
A3_103 = "6a3ce"
Again In the right panel, locate and delete the entry:
A4_103 = "6b35627"
Again In the right panel, locate and delete the entry:
A1_104 = "5335c831"
Again In the right panel, locate and delete the entry:
A2_104 = "d47a267"
Again In the right panel, locate and delete the entry:
A3_104 = "d573d41"
Again In the right panel, locate and delete the entry:
A4_104 = "d47ba68"
Again In the right panel, locate and delete the entry:
A1_105 = "f8377ff"
Again In the right panel, locate and delete the entry:
A2_105 = "3ddee29"
Again In the right panel, locate and delete the entry:
A3_105 = "3cdd748"
Again In the right panel, locate and delete the entry:
A4_105 = "3dde1ea9"
Again In the right panel, locate and delete the entry:
A1_106 = "73198ba4"
Again In the right panel, locate and delete the entry:
A2_106 = "a74b9551"
Again In the right panel, locate and delete the entry:
A3_106 = "a648e8c3"
Again In the right panel, locate and delete the entry:
A4_106 = "a74b82ea"
Again In the right panel, locate and delete the entry:
A1_107 = "c7be85c"
Again In the right panel, locate and delete the entry:
A2_107 = "1b8f2c"
Again In the right panel, locate and delete the entry:
A3_107 = "11bb8d2"
Again In the right panel, locate and delete the entry:
A4_107 = "1b8e72b"
Again In the right panel, locate and delete the entry:
A1_108 = "bc7e423"
Again In the right panel, locate and delete the entry:
A2_108 = "7a26523"
Again In the right panel, locate and delete the entry:
A3_108 = "7b252145"
Again In the right panel, locate and delete the entry:
A4_108 = "7a264b6c"
Again In the right panel, locate and delete the entry:
A1_109 = "d6cf7f2"
Again In the right panel, locate and delete the entry:
A2_109 = "e3938ab4"
Again In the right panel, locate and delete the entry:
A3_109 = "e29c584"
Again In the right panel, locate and delete the entry:
A4_109 = "e393afad"
Again In the right panel, locate and delete the entry:
A1_110 = "cf9a2db"
Again In the right panel, locate and delete the entry:
A2_110 = "4d1f2"
Again In the right panel, locate and delete the entry:
A3_110 = "4c279c7"
Again In the right panel, locate and delete the entry:
A4_110 = "4d113ee"
Again In the right panel, locate and delete the entry:
A1_111 = "411ecd7e"
Again In the right panel, locate and delete the entry:
A2_111 = "b66e59a1"
Again In the right panel, locate and delete the entry:
A3_111 = "b76d126"
Again In the right panel, locate and delete the entry:
A4_111 = "b66e782f"
Again In the right panel, locate and delete the entry:
A1_112 = "e2bb3e37"
Again In the right panel, locate and delete the entry:
A2_112 = "1fdbc622"
Again In the right panel, locate and delete the entry:
A3_112 = "1ed8b659"
Again In the right panel, locate and delete the entry:
A4_112 = "1fdbdc7"
Again In the right panel, locate and delete the entry:
A1_113 = "a45f17e4"
Again In the right panel, locate and delete the entry:
A2_113 = "89495596"
Again In the right panel, locate and delete the entry:
A3_113 = "884a2a98"
Again In the right panel, locate and delete the entry:
A4_113 = "89494b1"
Again In the right panel, locate and delete the entry:
A1_114 = "fa61ccbe"
Again In the right panel, locate and delete the entry:
A2_114 = "f2b6bf9d"
Again In the right panel, locate and delete the entry:
A3_114 = "f3b5cedb"
Again In the right panel, locate and delete the entry:
A4_114 = "f2b6a4f2"
Again In the right panel, locate and delete the entry:
A1_115 = "ed32688"
Again In the right panel, locate and delete the entry:
A2_115 = "5c2416f6"
Again In the right panel, locate and delete the entry:
A3_115 = "5d27631a"
Again In the right panel, locate and delete the entry:
A4_115 = "5c24933"
Again In the right panel, locate and delete the entry:
A1_116 = "f91a1721"
Again In the right panel, locate and delete the entry:
A2_116 = "c5917ba3"
Again In the right panel, locate and delete the entry:
A3_116 = "c49275d"
Again In the right panel, locate and delete the entry:
A4_116 = "c5916d74"
Again In the right panel, locate and delete the entry:
A1_117 = "44681fe2"
Again In the right panel, locate and delete the entry:
A2_117 = "2efec7c"
Again In the right panel, locate and delete the entry:
A3_117 = "2ffdbb9c"
Again In the right panel, locate and delete the entry:
A4_117 = "2efed1b5"
Again In the right panel, locate and delete the entry:
A1_118 = "cfcf6d7c"
Again In the right panel, locate and delete the entry:
A2_118 = "986c2c51"
Again In the right panel, locate and delete the entry:
A3_118 = "996f5fdf"
Again In the right panel, locate and delete the entry:
A4_118 = "986c35f6"
Again In the right panel, locate and delete the entry:
A1_119 = "54df3462"
Again In the right panel, locate and delete the entry:
A2_119 = "1d987b"
Again In the right panel, locate and delete the entry:
A3_119 = "daf1e"
Again In the right panel, locate and delete the entry:
A4_119 = "1d99a37"
Again In the right panel, locate and delete the entry:
A1_120 = "8c9ab12a"
Again In the right panel, locate and delete the entry:
A2_120 = "6b46e827"
Again In the right panel, locate and delete the entry:
A3_120 = "6a459451"
Again In the right panel, locate and delete the entry:
A4_120 = "6b46fe78"
Again In the right panel, locate and delete the entry:
A1_121 = "76f82af7"
Again In the right panel, locate and delete the entry:
A2_121 = "d4b44773"
Again In the right panel, locate and delete the entry:
A3_121 = "d5b789"
Again In the right panel, locate and delete the entry:
A4_121 = "d4b462b9"
Again In the right panel, locate and delete the entry:
A1_122 = "37937cbc"
Again In the right panel, locate and delete the entry:
A2_122 = "3e21dda7"
Again In the right panel, locate and delete the entry:
A3_122 = "3f22acd3"
Again In the right panel, locate and delete the entry:
A4_122 = "3e21c6fa"
Again In the right panel, locate and delete the entry:
A1_123 = "b2e64f6d"
Again In the right panel, locate and delete the entry:
A2_123 = "a78f3334"
Again In the right panel, locate and delete the entry:
A3_123 = "a68c4112"
Again In the right panel, locate and delete the entry:
A4_123 = "a78f2b3b"
Again In the right panel, locate and delete the entry:
A1_124 = "6d549a8"
Again In the right panel, locate and delete the entry:
A2_124 = "1fc92b6"
Again In the right panel, locate and delete the entry:
A3_124 = "11ffe555"
Again In the right panel, locate and delete the entry:
A4_124 = "1fc8f7c"
Again In the right panel, locate and delete the entry:
A1_125 = "2b93f3"
Again In the right panel, locate and delete the entry:
A2_125 = "7a69e69a"
Again In the right panel, locate and delete the entry:
A3_125 = "7b6a9994"
Again In the right panel, locate and delete the entry:
A4_125 = "7a69f3bd"
Again In the right panel, locate and delete the entry:
A1_126 = "fcf5bb6d"
Again In the right panel, locate and delete the entry:
A2_126 = "e3d74859"
Again In the right panel, locate and delete the entry:
A3_126 = "e2d43dd7"
Again In the right panel, locate and delete the entry:
A4_126 = "e3d757fe"
Again In the right panel, locate and delete the entry:
A1_127 = "aad9f6be"
Again In the right panel, locate and delete the entry:
A2_127 = "4d44a5a"
Again In the right panel, locate and delete the entry:
A3_127 = "4c47d616"
Again In the right panel, locate and delete the entry:
A4_127 = "4d44bc3f"
Again In the right panel, locate and delete the entry:
A1_128 = "76c45d9"
Again In the right panel, locate and delete the entry:
A2_128 = "b6b2367c"
Again In the right panel, locate and delete the entry:
A3_128 = "b7b14aa9"
Again In the right panel, locate and delete the entry:
A4_128 = "b6b228"
Again In the right panel, locate and delete the entry:
A1_129 = "13d85b9e"
Again In the right panel, locate and delete the entry:
A2_129 = "21f9b88"
Again In the right panel, locate and delete the entry:
A3_129 = "211ceee8"
Again In the right panel, locate and delete the entry:
A4_129 = "21f84c1"
Again In the right panel, locate and delete the entry:
A1_130 = "875464d"
Again In the right panel, locate and delete the entry:
A2_130 = "898cf3a5"
Again In the right panel, locate and delete the entry:
A3_130 = "888f832b"
Again In the right panel, locate and delete the entry:
A4_130 = "898ce92"
Again In the right panel, locate and delete the entry:
A1_131 = "3594251c"
Again In the right panel, locate and delete the entry:
A2_131 = "f2fa5461"
Again In the right panel, locate and delete the entry:
A3_131 = "f3f9276a"
Again In the right panel, locate and delete the entry:
A4_131 = "f2fa4d43"
Again In the right panel, locate and delete the entry:
A1_132 = "a1a6d8d2"
Again In the right panel, locate and delete the entry:
A2_132 = "5c67a694"
Again In the right panel, locate and delete the entry:
A3_132 = "5d64dbad"
Again In the right panel, locate and delete the entry:
A4_132 = "5c67b184"
Again In the right panel, locate and delete the entry:
A1_133 = "c88f7d9a"
Again In the right panel, locate and delete the entry:
A2_133 = "c5d5963"
Again In the right panel, locate and delete the entry:
A3_133 = "c4d67fec"
Again In the right panel, locate and delete the entry:
A4_133 = "c5d515c5"
Again In the right panel, locate and delete the entry:
A1_134 = "e3c74c42"
Again In the right panel, locate and delete the entry:
A2_134 = "2f42639c"
Again In the right panel, locate and delete the entry:
A3_134 = "2e4112f"
Again In the right panel, locate and delete the entry:
A4_134 = "2f427a6"
Again In the right panel, locate and delete the entry:
A1_135 = "c97ea71"
Again In the right panel, locate and delete the entry:
A2_135 = "98afc8a8"
Again In the right panel, locate and delete the entry:
A3_135 = "99acb46e"
Again In the right panel, locate and delete the entry:
A4_135 = "98afde47"
Again In the right panel, locate and delete the entry:
A1_136 = "98c38de"
Again In the right panel, locate and delete the entry:
A2_136 = "21d564f"
Again In the right panel, locate and delete the entry:
A3_136 = "31e28a1"
Again In the right panel, locate and delete the entry:
A4_136 = "21d4288"
Again In the right panel, locate and delete the entry:
A1_137 = "a4884c9d"
Again In the right panel, locate and delete the entry:
A2_137 = "6b8ab1be"
Again In the right panel, locate and delete the entry:
A3_137 = "6a89cce"
Again In the right panel, locate and delete the entry:
A4_137 = "6b8aa6c9"
Again In the right panel, locate and delete the entry:
A1_138 = "e9818353"
Again In the right panel, locate and delete the entry:
A2_138 = "d4f81c5e"
Again In the right panel, locate and delete the entry:
A3_138 = "d5fb6123"
Again In the right panel, locate and delete the entry:
A4_138 = "d4f8ba"
Again In the right panel, locate and delete the entry:
A1_139 = "94c226"
Again In the right panel, locate and delete the entry:
A2_139 = "3e65733a"
Again In the right panel, locate and delete the entry:
A3_139 = "3f66562"
Again In the right panel, locate and delete the entry:
A4_139 = "3e656f4b"
Again In the right panel, locate and delete the entry:
A1_140 = "92af7d5"
In the left panel, double-click the following:
HKEY_CURRENT_USER>Software>VB and VBA Program Settings>trial version>trial
In the right panel, locate and delete the entry:
date1 = "11/20/2011"
Again In the right panel, locate and delete the entry:
A2_140 = "a7d2ca51"
Again In the right panel, locate and delete the entry:
A3_140 = "a6d1b9a5"
Again In the right panel, locate and delete the entry:
A4_140 = "a7d2d38c"
Again In the right panel, locate and delete the entry:
A1_141 = "276d2f81"
Again In the right panel, locate and delete the entry:
A2_141 = "1142bc2"
Again In the right panel, locate and delete the entry:
A3_141 = "1435de4"
Again In the right panel, locate and delete the entry:
A4_141 = "11437cd"
Again In the right panel, locate and delete the entry:
A1_142 = "fe38f56"
Again In the right panel, locate and delete the entry:
A2_142 = "7aad8721"
Again In the right panel, locate and delete the entry:
A3_142 = "7baef627"
Again In the right panel, locate and delete the entry:
A4_142 = "7aad9ce"
Again In the right panel, locate and delete the entry:
A1_143 = "59f12e16"
Again In the right panel, locate and delete the entry:
A2_143 = "e41b176a"
Again In the right panel, locate and delete the entry:
A3_143 = "e5186a66"
Again In the right panel, locate and delete the entry:
A4_143 = "e41b4f"
Again In the right panel, locate and delete the entry:
A1_144 = "875116cd"
Again In the right panel, locate and delete the entry:
A2_144 = "4d887a33"
Again In the right panel, locate and delete the entry:
A3_144 = "4c8beb9"
Again In the right panel, locate and delete the entry:
A4_144 = "4d88649"
Again In the right panel, locate and delete the entry:
A1_145 = "95f12d83"
Again In the right panel, locate and delete the entry:
A2_145 = "b6f5db2b"
Again In the right panel, locate and delete the entry:
A3_145 = "b7f6a2f8"
Again In the right panel, locate and delete the entry:
A4_145 = "b6f5c8d1"
Again In the right panel, locate and delete the entry:
A1_146 = "47bb9a4a"
Again In the right panel, locate and delete the entry:
A2_146 = "263359a"
Again In the right panel, locate and delete the entry:
A3_146 = "216473b"
Again In the right panel, locate and delete the entry:
A4_146 = "2632d12"
Again In the right panel, locate and delete the entry:
A1_147 = "bfc5cb6d"
Again In the right panel, locate and delete the entry:
A2_147 = "89d8c4c"
Again In the right panel, locate and delete the entry:
A3_147 = "88d3fb7a"
Again In the right panel, locate and delete the entry:
A4_147 = "89d9153"
Again In the right panel, locate and delete the entry:
A1_148 = "43d741c5"
Again In the right panel, locate and delete the entry:
A2_148 = "f33dd158"
Again In the right panel, locate and delete the entry:
A3_148 = "f23e9fbd"
Again In the right panel, locate and delete the entry:
A4_148 = "f33df594"
Again In the right panel, locate and delete the entry:
A1_149 = "2cf1b8"
Again In the right panel, locate and delete the entry:
A2_149 = "5cab7af2"
Again In the right panel, locate and delete the entry:
A3_149 = "5da833fc"
Again In the right panel, locate and delete the entry:
A4_149 = "5cab59d5"
Again In the right panel, locate and delete the entry:
A1_150 = "ba851d5"
Again In the right panel, locate and delete the entry:
A2_150 = "c618a7cd"
Again In the right panel, locate and delete the entry:
A3_150 = "c71bd43f"
Again In the right panel, locate and delete the entry:
A4_150 = "c618be16"
Again In the right panel, locate and delete the entry:
A1_151 = "66b6ce12"
Again In the right panel, locate and delete the entry:
A2_151 = "2f8639a2"
Again In the right panel, locate and delete the entry:
A3_151 = "2e85487e"
Again In the right panel, locate and delete the entry:
A4_151 = "2f862257"
Again In the right panel, locate and delete the entry:
A1_152 = "6defde4"
Again In the right panel, locate and delete the entry:
A2_152 = "98f39c47"
Again In the right panel, locate and delete the entry:
A3_152 = "99fecb1"
Again In the right panel, locate and delete the entry:
A4_152 = "98f38698"
Again In the right panel, locate and delete the entry:
A1_153 = "364ec68"
Again In the right panel, locate and delete the entry:
A2_153 = "26fc9a"
Again In the right panel, locate and delete the entry:
A3_153 = "3638f"
Again In the right panel, locate and delete the entry:
A4_153 = "26ead9"
Again In the right panel, locate and delete the entry:
A1_154 = "13945b"
Again In the right panel, locate and delete the entry:
A2_154 = "6bce5f9a"
Again In the right panel, locate and delete the entry:
A3_154 = "6acd2533"
Again In the right panel, locate and delete the entry:
A4_154 = "6bce4f1a"
Again In the right panel, locate and delete the entry:
A1_155 = "b9cf4c16"
Again In the right panel, locate and delete the entry:
A2_155 = "d53ba468"
Again In the right panel, locate and delete the entry:
A3_155 = "d438d972"
Again In the right panel, locate and delete the entry:
A4_155 = "d53bb35b"
Again In the right panel, locate and delete the entry:
A1_156 = "6fa346d1"
Again In the right panel, locate and delete the entry:
A2_156 = "3ea9d3f"
Again In the right panel, locate and delete the entry:
A3_156 = "3faa7db5"
Again In the right panel, locate and delete the entry:
A4_156 = "3ea9179c"
Again In the right panel, locate and delete the entry:
A1_157 = "384f39"
Again In the right panel, locate and delete the entry:
A2_157 = "a81665fa"
Again In the right panel, locate and delete the entry:
A3_157 = "a91511f4"
Again In the right panel, locate and delete the entry:
A4_157 = "a8167bdd"
Again In the right panel, locate and delete the entry:
A1_158 = "47b33ada"
Again In the right panel, locate and delete the entry:
A2_158 = "1183c3cf"
Again In the right panel, locate and delete the entry:
A3_158 = "188a37"
Again In the right panel, locate and delete the entry:
A4_158 = "1183e1e"
Again In the right panel, locate and delete the entry:
A1_159 = "6ab6e6"
Again In the right panel, locate and delete the entry:
A2_159 = "7af1648"
Again In the right panel, locate and delete the entry:
A3_159 = "7bf22e76"
Again In the right panel, locate and delete the entry:
A4_159 = "7af1445f"
Again In the right panel, locate and delete the entry:
A1_160 = "a34583f9"
Again In the right panel, locate and delete the entry:
A2_160 = "e45ebdd"
Again In the right panel, locate and delete the entry:
A3_160 = "e55dc289"
Again In the right panel, locate and delete the entry:
A4_160 = "e45ea8a"
Again In the right panel, locate and delete the entry:
A1_161 = "d96c4caa"
Again In the right panel, locate and delete the entry:
A2_161 = "4dcc29f8"
Again In the right panel, locate and delete the entry:
A3_161 = "4ccf66c8"
Again In the right panel, locate and delete the entry:
A4_161 = "4dccce1"
Again In the right panel, locate and delete the entry:
A1_162 = "939f7df6"
Again In the right panel, locate and delete the entry:
A2_162 = "b7396ead"
Again In the right panel, locate and delete the entry:
A3_162 = "b63a1bb"
Again In the right panel, locate and delete the entry:
A4_162 = "b7397122"
Again In the right panel, locate and delete the entry:
A1_163 = "3fff8a33"
Again In the right panel, locate and delete the entry:
A2_163 = "2a6f614"
Again In the right panel, locate and delete the entry:
A3_163 = "21a5bf4a"
Again In the right panel, locate and delete the entry:
A4_163 = "2a6d563"
Again In the right panel, locate and delete the entry:
A1_164 = "65a989ea"
Again In the right panel, locate and delete the entry:
A2_164 = "8a142772"
Again In the right panel, locate and delete the entry:
A3_164 = "8b17538d"
Again In the right panel, locate and delete the entry:
A4_164 = "8a1439a4"
Again In the right panel, locate and delete the entry:
A1_165 = "ca351c59"
Again In the right panel, locate and delete the entry:
A2_165 = "f3818ee"
Again In the right panel, locate and delete the entry:
A3_165 = "f282f7cc"
Again In the right panel, locate and delete the entry:
A4_165 = "f3819de5"
Again In the right panel, locate and delete the entry:
A1_166 = "9eb4e71"
Again In the right panel, locate and delete the entry:
A2_166 = "5cef2159"
Again In the right panel, locate and delete the entry:
A3_166 = "5dec68f"
Again In the right panel, locate and delete the entry:
A4_166 = "5cef226"
Again In the right panel, locate and delete the entry:
A1_167 = "395d629"
Again In the right panel, locate and delete the entry:
A2_167 = "c65c7c78"
Again In the right panel, locate and delete the entry:
A3_167 = "c75fc4e"
Again In the right panel, locate and delete the entry:
A4_167 = "c65c6667"
Again In the right panel, locate and delete the entry:
A1_168 = "6a6dbbf5"
Again In the right panel, locate and delete the entry:
A2_168 = "2fc9ddc7"
Again In the right panel, locate and delete the entry:
A3_168 = "2ecaa81"
Again In the right panel, locate and delete the entry:
A4_168 = "2fc9caa8"
Again In the right panel, locate and delete the entry:
A1_169 = "5c8451bf"
Again In the right panel, locate and delete the entry:
A2_169 = "993735d9"
Again In the right panel, locate and delete the entry:
A3_169 = "983444c"
Again In the right panel, locate and delete the entry:
A4_169 = "99372ee9"
Again In the right panel, locate and delete the entry:
A1_170 = "d79c8f6c"
Again In the right panel, locate and delete the entry:
A2_170 = "2a48f51"
Again In the right panel, locate and delete the entry:
A3_170 = "3a7f93"
Again In the right panel, locate and delete the entry:
A4_170 = "2a4932a"
Again In the right panel, locate and delete the entry:
A1_171 = "13d7d6"
Again In the right panel, locate and delete the entry:
A2_171 = "6c11d73c"
Again In the right panel, locate and delete the entry:
A3_171 = "6d129d42"
Again In the right panel, locate and delete the entry:
A4_171 = "6c11f76b"
Again In the right panel, locate and delete the entry:
A1_172 = "63befdc"
Again In the right panel, locate and delete the entry:
A2_172 = "d57f4da"
Again In the right panel, locate and delete the entry:
A3_172 = "d47c3185"
Again In the right panel, locate and delete the entry:
A4_172 = "d57f5bac"
Again In the right panel, locate and delete the entry:
A1_173 = "dc5b493e"
Again In the right panel, locate and delete the entry:
A2_173 = "3eeca412"
Again In the right panel, locate and delete the entry:
A3_173 = "3fefd5c4"
Again In the right panel, locate and delete the entry:
A4_173 = "3eecbfed"
Again In the right panel, locate and delete the entry:
A1_174 = "d78cd592"
Again In the right panel, locate and delete the entry:
A2_174 = "a85a3f51"
Again In the right panel, locate and delete the entry:
A3_174 = "a9594e7"
Again In the right panel, locate and delete the entry:
A4_174 = "a85a242e"
Again In the right panel, locate and delete the entry:
A1_175 = "57aae821"
Again In the right panel, locate and delete the entry:
A2_175 = "11c7a8c6"
Again In the right panel, locate and delete the entry:
A3_175 = "1c4e246"
Again In the right panel, locate and delete the entry:
A4_175 = "11c7886f"
Again In the right panel, locate and delete the entry:
A1_176 = "d19be7"
Again In the right panel, locate and delete the entry:
A2_176 = "7b34f57"
Again In the right panel, locate and delete the entry:
A3_176 = "7a378699"
Again In the right panel, locate and delete the entry:
A4_176 = "7b34ecb"
Again In the right panel, locate and delete the entry:
A1_177 = "9d59693"
Again In the right panel, locate and delete the entry:
A2_177 = "e4a24efc"
Again In the right panel, locate and delete the entry:
A3_177 = "e5a13ad8"
Again In the right panel, locate and delete the entry:
A4_177 = "e4a25f1"
Again In the right panel, locate and delete the entry:
A1_178 = "2e2f467"
Again In the right panel, locate and delete the entry:
A2_178 = "4efaae7"
Again In the right panel, locate and delete the entry:
A3_178 = "4fcdf1b"
Again In the right panel, locate and delete the entry:
A4_178 = "4efb532"
Again In the right panel, locate and delete the entry:
A1_179 = "9c74483e"
Again In the right panel, locate and delete the entry:
A2_179 = "b77d8e4"
Again In the right panel, locate and delete the entry:
A3_179 = "b67e735a"
Again In the right panel, locate and delete the entry:
A4_179 = "b77d1973"
Again In the right panel, locate and delete the entry:
A1_180 = "a96225fe"
Again In the right panel, locate and delete the entry:
A2_180 = "2ea66e9"
Again In the right panel, locate and delete the entry:
A3_180 = "21e9179d"
Again In the right panel, locate and delete the entry:
A4_180 = "2ea7db4"
Again In the right panel, locate and delete the entry:
A1_181 = "ea549248"
Again In the right panel, locate and delete the entry:
A2_181 = "8a57fcb1"
Again In the right panel, locate and delete the entry:
A3_181 = "8b548bdc"
Again In the right panel, locate and delete the entry:
A4_181 = "8a57e1f5"
Again In the right panel, locate and delete the entry:
A1_182 = "42ad9254"
Again In the right panel, locate and delete the entry:
A2_182 = "f3c55d32"
Again In the right panel, locate and delete the entry:
A3_182 = "f2c62c1f"
Again In the right panel, locate and delete the entry:
A4_182 = "f3c54636"
Again In the right panel, locate and delete the entry:
A1_183 = "5883832e"
Again In the right panel, locate and delete the entry:
A2_183 = "5d328a16"
Again In the right panel, locate and delete the entry:
A3_183 = "5c31c5e"
Again In the right panel, locate and delete the entry:
A4_183 = "5d32aa77"
Again In the right panel, locate and delete the entry:
A1_184 = "cad62be1"
Again In the right panel, locate and delete the entry:
A2_184 = "c6a18fb"
Again In the right panel, locate and delete the entry:
A3_184 = "c7a36491"
Again In the right panel, locate and delete the entry:
A4_184 = "c6aeb8"
Again In the right panel, locate and delete the entry:
A1_185 = "53934b4"
Again In the right panel, locate and delete the entry:
A2_185 = "3d68e5"
Again In the right panel, locate and delete the entry:
A3_185 = "31e18d"
Again In the right panel, locate and delete the entry:
A4_185 = "3d72f9"
Again In the right panel, locate and delete the entry:
A1_186 = "dce11c22"
Again In the right panel, locate and delete the entry:
A2_186 = "997af2f"
Again In the right panel, locate and delete the entry:
A3_186 = "9879bd13"
Again In the right panel, locate and delete the entry:
A4_186 = "997ad73a"
Again In the right panel, locate and delete the entry:
A1_187 = "b164e133"
Again In the right panel, locate and delete the entry:
A2_187 = "2e82499"
Again In the right panel, locate and delete the entry:
A3_187 = "3eb5152"
Again In the right panel, locate and delete the entry:
A4_187 = "2e83b7b"
Again In the right panel, locate and delete the entry:
A1_188 = "59e59dea"
Again In the right panel, locate and delete the entry:
A2_188 = "6c558663"
Again In the right panel, locate and delete the entry:
A3_188 = "6d56f595"
Again In the right panel, locate and delete the entry:
A4_188 = "6c559fbc"
Again In the right panel, locate and delete the entry:
A1_189 = "a7beddae"
Again In the right panel, locate and delete the entry:
A2_189 = "d5c322e"
Again In the right panel, locate and delete the entry:
A3_189 = "d4c69d4"
Again In the right panel, locate and delete the entry:
A4_189 = "d5c33fd"
Again In the right panel, locate and delete the entry:
A1_190 = "98a86f"
Again In the right panel, locate and delete the entry:
A2_190 = "3f37527"
Again In the right panel, locate and delete the entry:
A3_190 = "3e33217"
Again In the right panel, locate and delete the entry:
A4_190 = "3f3683e"
Again In the right panel, locate and delete the entry:
A1_191 = "75a8f9c1"
Again In the right panel, locate and delete the entry:
A2_191 = "a89dd4aa"
Again In the right panel, locate and delete the entry:
A3_191 = "a99ea656"
Again In the right panel, locate and delete the entry:
A4_191 = "a89dcc7f"
Again In the right panel, locate and delete the entry:
A1_192 = "dbfc872"
Again In the right panel, locate and delete the entry:
A2_192 = "12b253"
Again In the right panel, locate and delete the entry:
A3_192 = "1385ae9"
Again In the right panel, locate and delete the entry:
A4_192 = "12b3c"
Again In the right panel, locate and delete the entry:
A1_193 = "92bf1259"
Again In the right panel, locate and delete the entry:
A2_193 = "7b78b626"
Again In the right panel, locate and delete the entry:
A3_193 = "7a7bff28"
Again In the right panel, locate and delete the entry:
A4_193 = "7b78951"
Again In the right panel, locate and delete the entry:
A1_194 = "12d8714"
Again In the right panel, locate and delete the entry:
A2_194 = "e4e5ecb2"
Again In the right panel, locate and delete the entry:
A3_194 = "e5e6936b"
Again In the right panel, locate and delete the entry:
A4_194 = "e4e5f942"
Again In the right panel, locate and delete the entry:
A1_195 = "e85121ee"
Again In the right panel, locate and delete the entry:
A2_195 = "4e534fe"
Again In the right panel, locate and delete the entry:
A3_195 = "4f537aa"
Again In the right panel, locate and delete the entry:
A4_195 = "4e535d83"
Again In the right panel, locate and delete the entry:
A1_196 = "e5a9db4"
Again In the right panel, locate and delete the entry:
A2_196 = "b7cdc6e"
Again In the right panel, locate and delete the entry:
A3_196 = "b6c3abed"
Again In the right panel, locate and delete the entry:
A4_196 = "b7cc1c4"
In the left panel, double-click the following:
HKEY_LOCAL_MACHINE>SOFTWARE>Microsoft>Windows NT>CurrentVersion>Image File Execution Options>ctfmon.exe
In the right panel, locate and delete the entry:
Debugger = "%Windows%\Fonts\Fonts.exe"
In the left panel, double-click the following:
HKEY_LOCAL_MACHINE>SOFTWARE>Microsoft>Windows NT>CurrentVersion>Image File Execution Options>taskmgr.exe
In the right panel, locate and delete the entry:
Debugger = "%Windows%\Fonts\tskmgr.exe"
In the left panel, double-click the following:
HKEY_LOCAL_MACHINE>SOFTWARE>Microsoft>Windows NT>CurrentVersion>Image File Execution Options>boot.exe
In the right panel, locate and delete the entry:
Debugger = "%Windows%\Fonts\fonts.exe"
In the left panel, double-click the following:
HKEY_LOCAL_MACHINE>SOFTWARE>Microsoft>Windows NT>CurrentVersion>Image File Execution Options>autorun.exe
In the right panel, locate and delete the entry:
Debugger = "%System%\drivers\drivers.cab.exe"
In the left panel, double-click the following:
HKEY_LOCAL_MACHINE>SOFTWARE>Microsoft>Windows NT>CurrentVersion>Image File Execution Options>autoruns.exe
In the right panel, locate and delete the entry:
Debugger = "%System%\drivers\drivers.cab.exe"
In the left panel, double-click the following:
HKEY_LOCAL_MACHINE>SOFTWARE>Microsoft>Windows NT>CurrentVersion>Image File Execution Options>auto.exe
In the right panel, locate and delete the entry:
Debugger = "%System%\drivers\drivers.cab.exe"
In the left panel, double-click the following:
HKEY_LOCAL_MACHINE>SOFTWARE>Microsoft>Windows NT>CurrentVersion>Image File Execution Options>msconfig.exe
In the right panel, locate and delete the entry:
Debugger = "%Windows%\Media\rndll32.pif"
In the left panel, double-click the following:
HKEY_LOCAL_MACHINE>SOFTWARE>Microsoft>Windows NT>CurrentVersion>Image File Execution Options>procexp.exe
In the right panel, locate and delete the entry:
Debugger = "%Windows%\pchealth\helpctr\binaries\HelpHost.com"
In the left panel, double-click the following:
HKEY_LOCAL_MACHINE>SOFTWARE>Microsoft>Windows>CurrentVersion>policies>Explorer>Run
In the right panel, locate and delete the entry:
sys = "%Windows%\Fonts\Fonts.exe"
Again In the right panel, locate and delete the entry:
DisableStatusMessages = "1"
In the left panel, double-click the following:
HKEY_CURRENT_USER>Software>Policies>Microsoft>Windows>System>Scripts>Logoff>0
In the right panel, locate and delete the entry:
DisplayName = "Local Group Policy"
Again In the right panel, locate and delete the entry:
GPO-ID = "LocalGPO"
Again In the right panel, locate and delete the entry:
GPOName = "Local Group Policy"
Again In the right panel, locate and delete the entry:
SOM-ID = "Local"
In the left panel, double-click the following:
HKEY_CURRENT_USER>Software>Policies>Microsoft>Windows>System>Scripts>Logoff>0>0
In the right panel, locate and delete the entry:
Script = "%Windows%\Cursors\Boom.vbs"
In the left panel, double-click the following:
HKEY_LOCAL_MACHINE>SOFTWARE>Policies>Microsoft>Windows>System>Scripts>Shutdown>0
In the right panel, locate and delete the entry:
DisplayName = "Local Group Policy"
Again In the right panel, locate and delete the entry:
GPO-ID = "LocalGPO"
Again In the right panel, locate and delete the entry:
GPOName = "Local Group Policy"
Again In the right panel, locate and delete the entry:
SOM-ID = "Local"
In the left panel, double-click the following:
HKEY_LOCAL_MACHINE>SOFTWARE>Policies>Microsoft>Windows>System>Scripts>Shutdown>0>0
In the right panel, locate and delete the entry:
Script = "%Windows%\Cursors\Boom.vbs"
In the left panel, double-click the following:
HKEY_LOCAL_MACHINE>SOFTWARE>Policies>Microsoft>Windows>System>Scripts>Startup>0
In the right panel, locate and delete the entry:
DisplayName = "Local Group Policy"
Again In the right panel, locate and delete the entry:
GPO-ID = "LocalGPO"
Again In the right panel, locate and delete the entry:
GPOName = "Local Group Policy"
Again In the right panel, locate and delete the entry:
SOM-ID = "Local"
In the left panel, double-click the following:
HKEY_LOCAL_MACHINE>SOFTWARE>Policies>Microsoft>Windows>System>Scripts>Startup>0>0
In the right panel, locate and delete the entry:
Script = "%Windows%\Cursors\Boom.vbs"
In the left panel, double-click the following:
HKEY_LOCAL_MACHINE>SOFTWARE>Classes>exefile
In the right panel, locate and delete the entry:
NeverShowExt = "1"
In the left panel, double-click the following:
HKEY_LOCAL_MACHINE>SOFTWARE>Classes>comfile
In the right panel, locate and delete the entry:
NeverShowExt = "1"
Again In the right panel, locate and delete the entry:
%User Temp%\uuawoi.exe = "%User Temp%\uuawoi.exe:*:Enabled:ipsec"
Close Registry Editor.

Step 5

Restore these modified registry values

[ Learn More ]

Important:Editing the Windows Registry incorrectly can lead to irreversible system malfunction. Please do this only if you know how to or you can seek your system administrator's help. You may also check out this Microsoft article first before modifying your computer's registry.

In HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Explorer\Advanced
- From: Hidden = "2"
  To: Hidden = ""2""

In HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center
- AntiVirusOverride = "1"

In HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center
- AntiVirusDisableNotify = "1"

In HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center
- FirewallDisableNotify = "1"

In HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center
- FirewallOverride = "1"

In HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center
- UpdatesDisableNotify = "1"

In HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Advanced\Folder\SuperHidden
- From: ValueName = "ShowSuperHiden"
  To: ValueName = ""ShowSuperHidden""

In HKEY_CURRENT_USER\Control Panel\Desktop
- From: SCRNSAVE.EXE = "%Windows%\pchealth\helpctr\binaries\HelpHost.com"
  To: SCRNSAVE.EXE = ""%Windows%\system32\logon.scr""

In HKEY_CURRENT_USER\Control Panel\Desktop
- From: ScreenSaveTimeOut = "30"
  To: ScreenSaveTimeOut = ""600""

In HKEY_CURRENT_USER\Control Panel\Desktop
- From: AutoEndTasks = "1"
  To: AutoEndTasks = ""0""

To restore registry values this malware/grayware modified:

Open Registry Editor. To do this:
- On Windows 2000, XP, and Server 2003:
  Click Start>Run, type REGEDIT in the text box provided, and then press Enter.
- On Windows Vista and 7:
  Click the Start button, type REGEDIT in the Search input field then press Enter.
In the left panel, double-click the following:
HKEY_CURRENT_USER>Software>Microsoft>Windows>CurrentVersion>Explorer>Advanced
In the right panel, locate the registry value:
Hidden = "2"
Right-click on the value name and choose Modify. Change the value data of this entry to:
Hidden = "2"
In the left panel, double-click the following:
HKEY_LOCAL_MACHINE>SOFTWARE>Microsoft>Security Center
In the right panel, locate the registry value:
AntiVirusOverride = "1"
Again In the right panel, locate the registry value:
AntiVirusDisableNotify = "1"
Again In the right panel, locate the registry value:
FirewallDisableNotify = "1"
Again In the right panel, locate the registry value:
FirewallOverride = "1"
Again In the right panel, locate the registry value:
UpdatesDisableNotify = "1"
In the left panel, double-click the following:
HKEY_LOCAL_MACHINE>SOFTWARE>Microsoft>Windows>CurrentVersion>Explorer>Advanced>Folder>SuperHidden
In the right panel, locate the registry value:
ValueName = "ShowSuperHiden"
Right-click on the value name and choose Modify. Change the value data of this entry to:
ValueName = "ShowSuperHidden"
In the left panel, double-click the following:
HKEY_CURRENT_USER>Control Panel>Desktop
In the right panel, locate the registry value:
SCRNSAVE.EXE = "%Windows%\pchealth\helpctr\binaries\HelpHost.com"
Right-click on the value name and choose Modify. Change the value data of this entry to:
SCRNSAVE.EXE = "%Windows%\system32\logon.scr"
Again In the right panel, locate the registry value:
ScreenSaveTimeOut = "30"
Right-click on the value name and choose Modify. Change the value data of this entry to:
ScreenSaveTimeOut = "600"
Again In the right panel, locate the registry value:
AutoEndTasks = "1"
Right-click on the value name and choose Modify. Change the value data of this entry to:
AutoEndTasks = "0"
Close Registry Editor.

Step 6

Search and delete these components

[ Learn More ]

There may be some components that are hidden. Please make sure you check the Search Hidden Files and Folders checkbox in the "More advanced options" option to include all hidden files and folders in the search result.

%User Temp%\epxxjs.exe
%System%\drivers\nkoin.sys
%System%\dllcache\autorun.inf
%Windows%\Cursors\Boom.vbs
B:\f230
%System Root%\f637
E:\fa3e
E:\fe45
F:\1024d
G:\10654
H:\10a8a
I:\10edf
J:\11383
K:\1178a
L:\11b91
M:\11fd7
N:\123de
O:\127e6
P:\12c1c
Q:\13023
R:\1342a
%User Temp%\winpins.exe
%User Temp%\winqxfd.exe
S:\13831
%User Temp%\wintrxgl.exe
T:\13c39
U:\1407e
%User Temp%\winbueeof.exe
%User Temp%\ajvu.exe
V:\14495
%User Temp%\opdy.exe
%User Temp%\uuawoi.exe
W:\148cb
X:\14ed6
Y:\1530c
%User Temp%\winlkic.exe
%User Temp%\winkriell.exe
%User Temp%\winsqso.exe
%System%\dllcache\tskmgr.exe
%Windows%\Fonts\wav.wav
%User Temp%\fkjcc.exe

Step 7

Search and delete this folder

[ Learn More ]

Please make sure you check the Search Hidden Files and Folders checkbox in the More advanced options option to include all hidden folders in the search result.

%System%\dllcache\Recycler.{645FF040-5081-101B-9F08-00AA002F954E}

Step 8

Scan your computer with your Trend Micro product to delete files detected as WORM_OTORUN.SMIC. If the detected files have already been cleaned, deleted, or quarantined by your Trend Micro product, no further step is required. You may opt to simply delete the quarantined files. Please check this Knowledge Base page for more information.

Step 9

Restore this file from backup only Microsoft-related files will be restored. If this malware/grayware also deleted files related to programs that are not from Microsoft, please reinstall those programs on you computer again.

%User Temp%\fkjcc.exe

Step 10

Restore these deleted registry keys/values from backup

*Note: Only Microsoft-related keys/values will be restored. If the malware/grayware also deleted registry keys/values related to programs that are not from Microsoft, please reinstall those programs on your computer.

In HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Control\SafeBoot\Minimal
- AppMgmt

In HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Control\SafeBoot\Minimal
- Base

In HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Control\SafeBoot\Minimal
- Boot Bus Extender

In HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Control\SafeBoot\Minimal
- Boot file system

In HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Control\SafeBoot\Minimal
- CryptSvc

In HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Control\SafeBoot\Minimal
- DcomLaunch

In HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Control\SafeBoot\Minimal
- dmadmin

In HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Control\SafeBoot\Minimal
- dmboot.sys

In HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Control\SafeBoot\Minimal
- dmio.sys

In HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Control\SafeBoot\Minimal
- dmload.sys

In HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Control\SafeBoot\Minimal
- dmserver

In HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Control\SafeBoot\Minimal
- EventLog

In HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Control\SafeBoot\Minimal
- File system

In HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Control\SafeBoot\Minimal
- Filter

In HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Control\SafeBoot\Minimal
- HelpSvc

In HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Control\SafeBoot\Minimal
- Netlogon

In HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Control\SafeBoot\Minimal
- PCI Configuration

In HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Control\SafeBoot\Minimal
- PlugPlay

In HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Control\SafeBoot\Minimal
- PNP Filter

In HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Control\SafeBoot\Minimal
- Primary disk

In HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Control\SafeBoot\Minimal
- RpcSs

In HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Control\SafeBoot\Minimal
- SCSI Class

In HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Control\SafeBoot\Minimal
- sermouse.sys

In HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Control\SafeBoot\Minimal
- sr.sys

In HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Control\SafeBoot\Minimal
- SRService

In HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Control\SafeBoot\Minimal
- System Bus Extender

In HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Control\SafeBoot\Minimal
- vga.sys

In HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Control\SafeBoot\Minimal
- vgasave.sys

In HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Control\SafeBoot\Minimal
- WinMgmt

In HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Control\SafeBoot\Minimal
- {36FC9E60-C465-11CF-8056-444553540000}

In HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Control\SafeBoot\Minimal
- {4D36E965-E325-11CE-BFC1-08002BE10318}

In HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Control\SafeBoot\Minimal
- {4D36E967-E325-11CE-BFC1-08002BE10318}

In HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Control\SafeBoot\Minimal
- {4D36E969-E325-11CE-BFC1-08002BE10318}

In HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Control\SafeBoot\Minimal
- {4D36E96A-E325-11CE-BFC1-08002BE10318}

In HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Control\SafeBoot\Minimal
- {4D36E96B-E325-11CE-BFC1-08002BE10318}

In HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Control\SafeBoot\Minimal
- {4D36E96F-E325-11CE-BFC1-08002BE10318}

In HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Control\SafeBoot\Minimal
- {4D36E977-E325-11CE-BFC1-08002BE10318}

In HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Control\SafeBoot\Minimal
- {4D36E97B-E325-11CE-BFC1-08002BE10318}

In HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Control\SafeBoot\Minimal
- {4D36E97D-E325-11CE-BFC1-08002BE10318}

In HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Control\SafeBoot\Minimal
- {4D36E980-E325-11CE-BFC1-08002BE10318}

In HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Control\SafeBoot\Minimal
- {71A27CDD-812A-11D0-BEC7-08002BE2092F}

In HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Control\SafeBoot\Minimal
- {745A17A0-74D3-11D0-B6FE-00A0C90F57DA}

In HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Control\SafeBoot
- Minimal

In HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Control\SafeBoot\Network
- AFD

In HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Control\SafeBoot\Network
- AppMgmt

In HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Control\SafeBoot\Network
- Base

In HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Control\SafeBoot\Network
- Boot Bus Extender

In HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Control\SafeBoot\Network
- Boot file system

In HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Control\SafeBoot\Network
- Browser

In HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Control\SafeBoot\Network
- CryptSvc

In HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Control\SafeBoot\Network
- DcomLaunch

In HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Control\SafeBoot\Network
- Dhcp

In HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Control\SafeBoot\Network
- dmadmin

In HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Control\SafeBoot\Network
- dmboot.sys

In HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Control\SafeBoot\Network
- dmio.sys

In HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Control\SafeBoot\Network
- dmload.sys

In HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Control\SafeBoot\Network
- dmserver

In HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Control\SafeBoot\Network
- DnsCache

In HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Control\SafeBoot\Network
- EventLog

In HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Control\SafeBoot\Network
- File system

In HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Control\SafeBoot\Network
- Filter

In HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Control\SafeBoot\Network
- HelpSvc

In HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Control\SafeBoot\Network
- ip6fw.sys

In HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Control\SafeBoot\Network
- ipnat.sys

In HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Control\SafeBoot\Network
- LanmanServer

In HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Control\SafeBoot\Network
- LanmanWorkstation

In HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Control\SafeBoot\Network
- LmHosts

In HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Control\SafeBoot\Network
- Messenger

In HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Control\SafeBoot\Network
- NDIS

In HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Control\SafeBoot\Network
- NDIS Wrapper

In HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Control\SafeBoot\Network
- Ndisuio

In HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Control\SafeBoot\Network
- NetBIOS

In HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Control\SafeBoot\Network
- NetBIOSGroup

In HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Control\SafeBoot\Network
- NetBT

In HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Control\SafeBoot\Network
- NetDDEGroup

In HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Control\SafeBoot\Network
- Netlogon

In HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Control\SafeBoot\Network
- NetMan

In HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Control\SafeBoot
- Network

In HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Control\SafeBoot\Network
- NetworkProvider

In HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Control\SafeBoot\Network
- NtLmSsp

In HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Control\SafeBoot\Network
- PCI Configuration

In HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Control\SafeBoot\Network
- PlugPlay

In HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Control\SafeBoot\Network
- PNP Filter

In HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Control\SafeBoot\Network
- PNP_TDI

In HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Control\SafeBoot\Network
- Primary disk

In HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Control\SafeBoot\Network
- rdpcdd.sys

In HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Control\SafeBoot\Network
- rdpdd.sys

In HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Control\SafeBoot\Network
- rdpwd.sys

In HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Control\SafeBoot\Network
- rdsessmgr

In HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Control\SafeBoot\Network
- RpcSs

In HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Control\SafeBoot\Network
- SCSI Class

In HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Control\SafeBoot\Network
- sermouse.sys

In HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Control\SafeBoot\Network
- SharedAccess

In HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Control\SafeBoot\Network
- sr.sys

In HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Control\SafeBoot\Network
- SRService

In HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Control\SafeBoot\Network
- Streams Drivers

In HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Control\SafeBoot\Network
- System Bus Extender

In HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Control\SafeBoot\Network
- Tcpip

In HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Control\SafeBoot\Network
- TDI

In HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Control\SafeBoot\Network
- tdpipe.sys

In HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Control\SafeBoot\Network
- tdtcp.sys

In HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Control\SafeBoot\Network
- termservice

In HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Control\SafeBoot\Network
- vga.sys

In HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Control\SafeBoot\Network
- vgasave.sys

In HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Control\SafeBoot\Network
- WinMgmt

In HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Control\SafeBoot\Network
- WZCSVC

In HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Control\SafeBoot\Network
- {36FC9E60-C465-11CF-8056-444553540000}

In HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Control\SafeBoot\Network
- {4D36E965-E325-11CE-BFC1-08002BE10318}

In HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Control\SafeBoot\Network
- {4D36E967-E325-11CE-BFC1-08002BE10318}

In HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Control\SafeBoot\Network
- {4D36E969-E325-11CE-BFC1-08002BE10318}

In HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Control\SafeBoot\Network
- {4D36E96A-E325-11CE-BFC1-08002BE10318}

In HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Control\SafeBoot\Network
- {4D36E96B-E325-11CE-BFC1-08002BE10318}

In HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Control\SafeBoot\Network
- {4D36E96F-E325-11CE-BFC1-08002BE10318}

In HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Control\SafeBoot\Network
- {4D36E972-E325-11CE-BFC1-08002BE10318}

In HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Control\SafeBoot\Network
- {4D36E973-E325-11CE-BFC1-08002BE10318}

In HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Control\SafeBoot\Network
- {4D36E974-E325-11CE-BFC1-08002BE10318}

In HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Control\SafeBoot\Network
- {4D36E975-E325-11CE-BFC1-08002BE10318}

In HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Control\SafeBoot\Network
- {4D36E977-E325-11CE-BFC1-08002BE10318}

In HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Control\SafeBoot\Network
- {4D36E97B-E325-11CE-BFC1-08002BE10318}

In HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Control\SafeBoot\Network
- {4D36E97D-E325-11CE-BFC1-08002BE10318}

In HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Control\SafeBoot\Network
- {4D36E980-E325-11CE-BFC1-08002BE10318}

In HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Control\SafeBoot\Network
- {71A27CDD-812A-11D0-BEC7-08002BE2092F}

In HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Control\SafeBoot\Network
- {745A17A0-74D3-11D0-B6FE-00A0C90F57DA}

In HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Control\SafeBoot
- Network

Did this description help? Tell us how we did.

WORM_OTORUN.SMIC

OVERVIEW

TECHNICAL DETAILS

SOLUTION

Resources

Support

About Trend

Country Headquarters

WORM_OTORUN.SMIC

OVERVIEW

TECHNICAL DETAILS

SOLUTION

Resources

Support

About Trend

Country Headquarters

The Americas

Middle East & Africa

Europe

Asia & Pacific