WORM_UTOTI.VRX

This worm arrives on a system as a file dropped by other malware or as a file downloaded unknowingly by users when visiting malicious sites.

It disables Task Manager, Registry Editor, and Folder Options.

Arrival Details

This worm arrives on a system as a file dropped by other malware or as a file downloaded unknowingly by users when visiting malicious sites.

Installation

This worm drops the following copies of itself into the affected system:

• %System%\chrome.exe
• %Windows%\chrome.exe

(Note: %System% is the Windows system folder, which is usually C:\Windows\System on Windows 98 and ME, C:\WINNT\System32 on Windows NT and 2000, or C:\Windows\System32 on Windows XP and Server 2003.. %Windows% is the Windows folder, which is usually C:\Windows or C:\WINNT.)

Autostart Technique

This worm adds the following registry entries to enable its automatic execution at every system startup:

HKEY_CURRENT_USER\Software\Microsoft\
Windows\CurrentVersion\Run
Yahoo Messengger = "%System%\chrome.exe"

It modifies the following registry entries to ensure it automatic execution at every system startup:

HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\
Windows NT\CurrentVersion\Winlogon
Shell = "Explorer.exe chrome.exe"

(Note: The default value data of the said registry entry is Explorer.exe.)

Other System Modifications

This worm deletes the following files:

• %User Temp%\wineqptog.exe

(Note: %User Temp% is the current user's Temp folder, which is usually C:\Documents and Settings\{user name}\Local Settings\Temp on Windows 2000, XP, and Server 2003.)

It adds the following registry keys:

HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\
Security Center\Svc

HKEY_CURRENT_USER\Software\Afqteuv\
1926745233

HKEY_CURRENT_USER\Software\Microsoft\
Windows\CurrentVersion\Policies\
System

HKEY_LOCAL_MACHINE\Software\Policies\
Microsoft\Internet Explorer\Control Panel

HKEY_CURRENT_USER\Software\Policies\
Microsoft\Internet Explorer\Control Panel

It adds the following registry entries:

HKEY_CURRENT_USER\Software\Microsoft\
Windows\CurrentVersion\Internet Settings
GlobalUserOffline = "0"

HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\
Windows\CurrentVersion\policies\
system
EnableLUA = "0"

HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\
Security Center
UacDisableNotify = "1"

HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\
Security Center\Svc
AntiVirusOverride = "1"

HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\
Security Center\Svc
AntiVirusDisableNotify = "1"

HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\
Security Center\Svc
FirewallDisableNotify = "1"

HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\
Security Center\Svc
FirewallOverride = "1"

HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\
Security Center\Svc
UpdatesDisableNotify = "1"

HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\
Security Center\Svc
UacDisableNotify = "1"

HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\
Services\SharedAccess\Parameters\
FirewallPolicy\StandardProfile\AuthorizedApplications\
List
{malware path and file name} = "{malware path and file name}:*:enabled:ipsec"

HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\
Services\SharedAccess\Parameters\
FirewallPolicy\StandardProfile
EnableFirewall = "0"

HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\
Services\SharedAccess\Parameters\
FirewallPolicy\StandardProfile
DoNotAllowExceptions = "0"

HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\
Services\SharedAccess\Parameters\
FirewallPolicy\StandardProfile
DisableNotifications = "1"

HKEY_CURRENT_USER\Software\Afqteuv\
1926745233
1651272023 = "7c"

HKEY_CURRENT_USER\Software\Afqteuv\
1926745233
-992423250 = "0"

HKEY_CURRENT_USER\Software\Afqteuv\
1926745233
658848773 = "0"

HKEY_CURRENT_USER\Software\Afqteuv\
1926745233
-1984846500 = "23"

HKEY_CURRENT_USER\Software\Afqteuv\
1926745233
-333574477 = "18d"

HKEY_CURRENT_USER\Software\Afqteuv\
1926745233
1317697546 = "{random characters}"

HKEY_CURRENT_USER\Software\Afqteuv\
1926745233
-1325997727 = "{random characters}"

HKEY_CURRENT_USER\Software\Afqteuv
W1_0 = "c4a71155"

HKEY_CURRENT_USER\Software\Afqteuv
W2_0 = "2668"

HKEY_CURRENT_USER\Software\Afqteuv
W3_0 = "136a29"

HKEY_CURRENT_USER\Software\Afqteuv
W4_0 = "0"

HKEY_CURRENT_USER\Software\Afqteuv
W1_1 = "abe191f"

HKEY_CURRENT_USER\Software\Afqteuv
W2_1 = "626c7ed5"

HKEY_CURRENT_USER\Software\Afqteuv
W3_1 = "636f37e"

HKEY_CURRENT_USER\Software\Afqteuv
W4_1 = "626c6957"

HKEY_CURRENT_USER\Software\Afqteuv
W1_2 = "1947ca67"

HKEY_CURRENT_USER\Software\Afqteuv
W2_2 = "c4d8f32"

HKEY_CURRENT_USER\Software\Afqteuv
W3_2 = "c5dbb887"

HKEY_CURRENT_USER\Software\Afqteuv
W4_2 = "c4d8d2ae"

HKEY_CURRENT_USER\Software\Afqteuv
W1_3 = "ba3c555"

HKEY_CURRENT_USER\Software\Afqteuv
W2_3 = "274519cf"

HKEY_CURRENT_USER\Software\Afqteuv
W3_3 = "2646562c"

HKEY_CURRENT_USER\Software\Afqteuv
W4_3 = "27453c5"

HKEY_CURRENT_USER\Software\Afqteuv
W1_4 = "8cf11d"

HKEY_CURRENT_USER\Software\Afqteuv
W2_4 = "89b1b2d9"

HKEY_CURRENT_USER\Software\Afqteuv
W3_4 = "88b2cf75"

HKEY_CURRENT_USER\Software\Afqteuv
W4_4 = "89b1a55c"

HKEY_CURRENT_USER\Software\Afqteuv
W1_5 = "ca8351e"

HKEY_CURRENT_USER\Software\Afqteuv
W2_5 = "ec1e1f44"

HKEY_CURRENT_USER\Software\Afqteuv
W3_5 = "ed1d649a"

HKEY_CURRENT_USER\Software\Afqteuv
W4_5 = "ec1eeb3"

HKEY_CURRENT_USER\Software\Afqteuv
W1_6 = "573a242"

HKEY_CURRENT_USER\Software\Afqteuv
W2_6 = "4e8a67e8"

HKEY_CURRENT_USER\Software\Afqteuv
W3_6 = "4f891223"

HKEY_CURRENT_USER\Software\Afqteuv
W4_6 = "4e8a78a"

HKEY_CURRENT_USER\Software\Afqteuv
W1_7 = "3d23738"

HKEY_CURRENT_USER\Software\Afqteuv
W2_7 = "bf6fc7c"

HKEY_CURRENT_USER\Software\Afqteuv
W3_7 = "b1f58b48"

HKEY_CURRENT_USER\Software\Afqteuv
W4_7 = "bf6e161"

HKEY_CURRENT_USER\Software\Afqteuv
W1_8 = "28a32e1"

HKEY_CURRENT_USER\Software\Afqteuv
W2_8 = "1363569c"

HKEY_CURRENT_USER\Software\Afqteuv
W3_8 = "126291"

HKEY_CURRENT_USER\Software\Afqteuv
W4_8 = "13634ab8"

HKEY_CURRENT_USER\Software\Afqteuv
W1_9 = "d9a9825f"

HKEY_CURRENT_USER\Software\Afqteuv
W2_9 = "75cf92d8"

HKEY_CURRENT_USER\Software\Afqteuv
W3_9 = "74ccde26"

HKEY_CURRENT_USER\Software\Afqteuv
W4_9 = "75cfb4f"

HKEY_CURRENT_USER\Software\Afqteuv
W1_10 = "e3a777b5"

HKEY_CURRENT_USER\Software\Afqteuv
W2_10 = "d83c3c5"

HKEY_CURRENT_USER\Software\Afqteuv
W3_10 = "d93f774f"

HKEY_CURRENT_USER\Software\Afqteuv
W4_10 = "d83c1d66"

HKEY_CURRENT_USER\Software\Afqteuv
W1_11 = "b42eff61"

HKEY_CURRENT_USER\Software\Afqteuv
W2_11 = "3aa8994a"

HKEY_CURRENT_USER\Software\Afqteuv
W3_11 = "3babec94"

HKEY_CURRENT_USER\Software\Afqteuv
W4_11 = "3aa886bd"

HKEY_CURRENT_USER\Software\Afqteuv
W1_12 = "de37bd59"

HKEY_CURRENT_USER\Software\Afqteuv
W2_12 = "9d14e985"

HKEY_CURRENT_USER\Software\Afqteuv
W3_12 = "9c179a3d"

HKEY_CURRENT_USER\Software\Afqteuv
W4_12 = "9d14f14"

HKEY_CURRENT_USER\Software\Afqteuv
W1_13 = "8f1ec3a"

HKEY_CURRENT_USER\Software\Afqteuv
W2_13 = "ff8178e5"

HKEY_CURRENT_USER\Software\Afqteuv
W3_13 = "fe823342"

HKEY_CURRENT_USER\Software\Afqteuv
W4_13 = "ff81596b"

HKEY_CURRENT_USER\Software\Afqteuv
W1_14 = "9c8d285"

HKEY_CURRENT_USER\Software\Afqteuv
W2_14 = "61edd89"

HKEY_CURRENT_USER\Software\Afqteuv
W3_14 = "6eea8eb"

HKEY_CURRENT_USER\Software\Afqteuv
W4_14 = "61edc2c2"

HKEY_CURRENT_USER\Software\Afqteuv
W1_15 = "cc8d4455"

HKEY_CURRENT_USER\Software\Afqteuv
W2_15 = "c45a3776"

HKEY_CURRENT_USER\Software\Afqteuv
W3_15 = "c559463"

HKEY_CURRENT_USER\Software\Afqteuv
W4_15 = "c45a2c19"

HKEY_CURRENT_USER\Software\Afqteuv
W1_16 = "77aff53e"

HKEY_CURRENT_USER\Software\Afqteuv
W2_16 = "26c6836"

HKEY_CURRENT_USER\Software\Afqteuv
W3_16 = "27c5ff59"

HKEY_CURRENT_USER\Software\Afqteuv
W4_16 = "26c6957"

HKEY_CURRENT_USER\Software\Afqteuv
W1_17 = "6eafb446"

HKEY_CURRENT_USER\Software\Afqteuv
W2_17 = "8932e2a2"

HKEY_CURRENT_USER\Software\Afqteuv
W3_17 = "883194ee"

HKEY_CURRENT_USER\Software\Afqteuv
W4_17 = "8932fec7"

HKEY_CURRENT_USER\Software\Afqteuv
W1_18 = "ba4e1149"

HKEY_CURRENT_USER\Software\Afqteuv
W2_18 = "eb9f7ef1"

HKEY_CURRENT_USER\Software\Afqteuv
W3_18 = "ea9c237"

HKEY_CURRENT_USER\Software\Afqteuv
W4_18 = "eb9f681e"

HKEY_CURRENT_USER\Software\Afqteuv
W1_19 = "f3e1ff2c"

HKEY_CURRENT_USER\Software\Afqteuv
W2_19 = "4ebc65"

HKEY_CURRENT_USER\Software\Afqteuv
W3_19 = "4f8bb5c"

HKEY_CURRENT_USER\Software\Afqteuv
W4_19 = "4ebd175"

HKEY_CURRENT_USER\Software\Afqteuv
W1_20 = "866d6f2"

HKEY_CURRENT_USER\Software\Afqteuv
W2_20 = "b7827d3"

HKEY_CURRENT_USER\Software\Afqteuv
W3_20 = "b17b5e5"

HKEY_CURRENT_USER\Software\Afqteuv
W4_20 = "b783acc"

HKEY_CURRENT_USER\Software\Afqteuv
W1_21 = "a2e172"

HKEY_CURRENT_USER\Software\Afqteuv
W2_21 = "12e48ef"

HKEY_CURRENT_USER\Software\Afqteuv
W3_21 = "13e7cea"

HKEY_CURRENT_USER\Software\Afqteuv
W4_21 = "12e4a423"

HKEY_CURRENT_USER\Software\Afqteuv
W1_22 = "51f71ae"

HKEY_CURRENT_USER\Software\Afqteuv
W2_22 = "755112f5"

HKEY_CURRENT_USER\Software\Afqteuv
W3_22 = "74526753"

HKEY_CURRENT_USER\Software\Afqteuv
W4_22 = "7551d7a"

HKEY_CURRENT_USER\Software\Afqteuv
W1_23 = "8d66485"

HKEY_CURRENT_USER\Software\Afqteuv
W2_23 = "d7bd6dbe"

HKEY_CURRENT_USER\Software\Afqteuv
W3_23 = "d6be1cf8"

HKEY_CURRENT_USER\Software\Afqteuv
W4_23 = "d7bd76d1"

HKEY_CURRENT_USER\Software\Afqteuv
W1_24 = "483695e"

HKEY_CURRENT_USER\Software\Afqteuv
W2_24 = "3a29faf2"

HKEY_CURRENT_USER\Software\Afqteuv
W3_24 = "3b2a8a1"

HKEY_CURRENT_USER\Software\Afqteuv
W4_24 = "3a29e28"

HKEY_CURRENT_USER\Software\Afqteuv
W1_25 = "38131638"

HKEY_CURRENT_USER\Software\Afqteuv
W2_25 = "9c96551a"

HKEY_CURRENT_USER\Software\Afqteuv
W3_25 = "9d952356"

HKEY_CURRENT_USER\Software\Afqteuv
W4_25 = "9c96497f"

HKEY_CURRENT_USER\Software\Afqteuv
W1_26 = "dc54bc83"

HKEY_CURRENT_USER\Software\Afqteuv
W2_26 = "ff29351"

HKEY_CURRENT_USER\Software\Afqteuv
W3_26 = "fe1d8ff"

HKEY_CURRENT_USER\Software\Afqteuv
W4_26 = "ff2b2d6"

HKEY_CURRENT_USER\Software\Afqteuv
W1_27 = "5fec6189"

HKEY_CURRENT_USER\Software\Afqteuv
W2_27 = "616f39e7"

HKEY_CURRENT_USER\Software\Afqteuv
W3_27 = "66c764"

HKEY_CURRENT_USER\Software\Afqteuv
W4_27 = "616f1c2d"

HKEY_CURRENT_USER\Software\Afqteuv
W1_28 = "85caac1"

HKEY_CURRENT_USER\Software\Afqteuv
W2_28 = "c3db9835"

HKEY_CURRENT_USER\Software\Afqteuv
W3_28 = "c2d8efad"

HKEY_CURRENT_USER\Software\Afqteuv
W4_28 = "c3db8584"

HKEY_CURRENT_USER\Software\Afqteuv
W1_29 = "9b645e99"

HKEY_CURRENT_USER\Software\Afqteuv
W2_29 = "2647fb4"

HKEY_CURRENT_USER\Software\Afqteuv
W3_29 = "274484f2"

HKEY_CURRENT_USER\Software\Afqteuv
W4_29 = "2647eedb"

HKEY_CURRENT_USER\Software\Afqteuv
W1_30 = "19a1762"

HKEY_CURRENT_USER\Software\Afqteuv
W2_30 = "88b44112"

HKEY_CURRENT_USER\Software\Afqteuv
W3_30 = "89b7321b"

HKEY_CURRENT_USER\Software\Afqteuv
W4_30 = "88b45832"

HKEY_CURRENT_USER\Software\Afqteuv
W1_31 = "1bb74cc"

HKEY_CURRENT_USER\Software\Afqteuv
W2_31 = "eb2ecf"

HKEY_CURRENT_USER\Software\Afqteuv
W3_31 = "ea23aba"

HKEY_CURRENT_USER\Software\Afqteuv
W4_31 = "eb2c189"

HKEY_CURRENT_USER\Software\Afqteuv
W1_32 = "5bcf582"

HKEY_CURRENT_USER\Software\Afqteuv
W2_32 = "4d8d31bd"

HKEY_CURRENT_USER\Software\Afqteuv
W3_32 = "4c8e4c9"

HKEY_CURRENT_USER\Software\Afqteuv
W4_32 = "4d8d2ae"

HKEY_CURRENT_USER\Software\Afqteuv
W1_33 = "3322a9a"

HKEY_CURRENT_USER\Software\Afqteuv
W2_33 = "aff98889"

HKEY_CURRENT_USER\Software\Afqteuv
W3_33 = "aefafe1e"

HKEY_CURRENT_USER\Software\Afqteuv
W4_33 = "aff99437"

HKEY_CURRENT_USER\Software\Afqteuv
W1_34 = "987df4c"

HKEY_CURRENT_USER\Software\Afqteuv
W2_34 = "1265e378"

HKEY_CURRENT_USER\Software\Afqteuv
W3_34 = "136697a7"

HKEY_CURRENT_USER\Software\Afqteuv
W4_34 = "1265fd8e"

HKEY_CURRENT_USER\Software\Afqteuv
W1_35 = "6c3cc893"

HKEY_CURRENT_USER\Software\Afqteuv
W2_35 = "74d2442e"

HKEY_CURRENT_USER\Software\Afqteuv
W3_35 = "75d1ccc"

HKEY_CURRENT_USER\Software\Afqteuv
W4_35 = "74d266e5"

HKEY_CURRENT_USER\Software\Afqteuv
W1_36 = "afac8bee"

HKEY_CURRENT_USER\Software\Afqteuv
W2_36 = "d73ece31"

HKEY_CURRENT_USER\Software\Afqteuv
W3_36 = "d63dba15"

HKEY_CURRENT_USER\Software\Afqteuv
W4_36 = "d73ed3c"

HKEY_CURRENT_USER\Software\Afqteuv
W1_37 = "88c3edf1"

HKEY_CURRENT_USER\Software\Afqteuv
W2_37 = "39ab2297"

HKEY_CURRENT_USER\Software\Afqteuv
W3_37 = "38a853ba"

HKEY_CURRENT_USER\Software\Afqteuv
W4_37 = "39ab3993"

HKEY_CURRENT_USER\Software\Afqteuv
W1_38 = "8942bb3"

HKEY_CURRENT_USER\Software\Afqteuv
W2_38 = "9c17bfe1"

HKEY_CURRENT_USER\Software\Afqteuv
W3_38 = "9d14c8c3"

HKEY_CURRENT_USER\Software\Afqteuv
W4_38 = "9c17a2ea"

HKEY_CURRENT_USER\Software\Afqteuv
W1_39 = "27fec5"

HKEY_CURRENT_USER\Software\Afqteuv
W2_39 = "fe84186"

HKEY_CURRENT_USER\Software\Afqteuv
W3_39 = "ff876668"

HKEY_CURRENT_USER\Software\Afqteuv
W4_39 = "fe84c41"

HKEY_CURRENT_USER\Software\Afqteuv
W1_40 = "c8638d4"

HKEY_CURRENT_USER\Software\Afqteuv
W2_40 = "6f6fca"

HKEY_CURRENT_USER\Software\Afqteuv
W3_40 = "61f31fb1"

HKEY_CURRENT_USER\Software\Afqteuv
W4_40 = "6f7598"

HKEY_CURRENT_USER\Software\Afqteuv
W1_41 = "94caab2"

HKEY_CURRENT_USER\Software\Afqteuv
W2_41 = "c35cc689"

HKEY_CURRENT_USER\Software\Afqteuv
W3_41 = "c25fb4c6"

HKEY_CURRENT_USER\Software\Afqteuv
W4_41 = "c35cdeef"

HKEY_CURRENT_USER\Software\Afqteuv
W1_42 = "1794a1"

HKEY_CURRENT_USER\Software\Afqteuv
W2_42 = "25c95199"

HKEY_CURRENT_USER\Software\Afqteuv
W3_42 = "24ca226f"

HKEY_CURRENT_USER\Software\Afqteuv
W4_42 = "25c94846"

HKEY_CURRENT_USER\Software\Afqteuv
W1_43 = "aac954"

HKEY_CURRENT_USER\Software\Afqteuv
W2_43 = "8835aa4a"

HKEY_CURRENT_USER\Software\Afqteuv
W3_43 = "8936dbb4"

HKEY_CURRENT_USER\Software\Afqteuv
W4_43 = "8835b19d"

HKEY_CURRENT_USER\Software\Afqteuv
W1_44 = "c87e53d"

HKEY_CURRENT_USER\Software\Afqteuv
W2_44 = "eaa23b15"

HKEY_CURRENT_USER\Software\Afqteuv
W3_44 = "eba17dd"

HKEY_CURRENT_USER\Software\Afqteuv
W4_44 = "eaa21af4"

HKEY_CURRENT_USER\Software\Afqteuv
W1_45 = "cee312"

HKEY_CURRENT_USER\Software\Afqteuv
W2_45 = "4de93ac"

HKEY_CURRENT_USER\Software\Afqteuv
W3_45 = "4cdee62"

HKEY_CURRENT_USER\Software\Afqteuv
W4_45 = "4de844b"

HKEY_CURRENT_USER\Software\Afqteuv
W1_46 = "aa1ee2f"

HKEY_CURRENT_USER\Software\Afqteuv
W2_46 = "af7afbd7"

HKEY_CURRENT_USER\Software\Afqteuv
W3_46 = "ae79878b"

HKEY_CURRENT_USER\Software\Afqteuv
W4_46 = "af7aeda2"

HKEY_CURRENT_USER\Software\Afqteuv
W1_47 = "bc58de1"

HKEY_CURRENT_USER\Software\Afqteuv
W2_47 = "11e74ce5"

HKEY_CURRENT_USER\Software\Afqteuv
W3_47 = "1e43cd"

HKEY_CURRENT_USER\Software\Afqteuv
W4_47 = "11e756f9"

HKEY_CURRENT_USER\Software\Afqteuv
W1_48 = "6f7da86"

HKEY_CURRENT_USER\Software\Afqteuv
W2_48 = "7453e5b"

HKEY_CURRENT_USER\Software\Afqteuv
W3_48 = "755aa79"

HKEY_CURRENT_USER\Software\Afqteuv
W4_48 = "7453c5"

HKEY_CURRENT_USER\Software\Afqteuv
W1_49 = "a2e55fe"

HKEY_CURRENT_USER\Software\Afqteuv
W2_49 = "d6c92c"

HKEY_CURRENT_USER\Software\Afqteuv
W3_49 = "d7c3438e"

HKEY_CURRENT_USER\Software\Afqteuv
W4_49 = "d6c29a7"

HKEY_CURRENT_USER\Software\Afqteuv
W1_50 = "d22b719c"

HKEY_CURRENT_USER\Software\Afqteuv
W2_50 = "392c89a3"

HKEY_CURRENT_USER\Software\Afqteuv
W3_50 = "382ff8d7"

HKEY_CURRENT_USER\Software\Afqteuv
W4_50 = "392c92fe"

HKEY_CURRENT_USER\Software\Afqteuv
W1_51 = "f9e6fc97"

HKEY_CURRENT_USER\Software\Afqteuv
W2_51 = "9b98eadc"

HKEY_CURRENT_USER\Software\Afqteuv
W3_51 = "9a9b967c"

HKEY_CURRENT_USER\Software\Afqteuv
W4_51 = "9b98fc55"

HKEY_CURRENT_USER\Software\Afqteuv
W1_52 = "ce2e6412"

HKEY_CURRENT_USER\Software\Afqteuv
W2_52 = "fe57f29"

HKEY_CURRENT_USER\Software\Afqteuv
W3_52 = "ff6f85"

HKEY_CURRENT_USER\Software\Afqteuv
W4_52 = "fe565ac"

HKEY_CURRENT_USER\Software\Afqteuv
W1_53 = "2a299d5"

HKEY_CURRENT_USER\Software\Afqteuv
W2_53 = "671eed"

HKEY_CURRENT_USER\Software\Afqteuv
W3_53 = "6172a52a"

HKEY_CURRENT_USER\Software\Afqteuv
W4_53 = "671cf3"

HKEY_CURRENT_USER\Software\Afqteuv
W1_54 = "fda123"

HKEY_CURRENT_USER\Software\Afqteuv
W2_54 = "c2de2f9d"

HKEY_CURRENT_USER\Software\Afqteuv
W3_54 = "c3dd5273"

HKEY_CURRENT_USER\Software\Afqteuv
W4_54 = "c2de385a"

HKEY_CURRENT_USER\Software\Afqteuv
W1_55 = "4af7e1e4"

HKEY_CURRENT_USER\Software\Afqteuv
W2_55 = "254ab837"

HKEY_CURRENT_USER\Software\Afqteuv
W3_55 = "2449cb98"

HKEY_CURRENT_USER\Software\Afqteuv
W4_55 = "254aa1b1"

HKEY_CURRENT_USER\Software\Afqteuv
W1_56 = "be1ef472"

HKEY_CURRENT_USER\Software\Afqteuv
W2_56 = "87b71d4b"

HKEY_CURRENT_USER\Software\Afqteuv
W3_56 = "86b46121"

HKEY_CURRENT_USER\Software\Afqteuv
W4_56 = "87b7b8"

HKEY_CURRENT_USER\Software\Afqteuv
W1_57 = "4ae85e6"

HKEY_CURRENT_USER\Software\Afqteuv
W2_57 = "ea2369a2"

HKEY_CURRENT_USER\Software\Afqteuv
W3_57 = "eb21e76"

HKEY_CURRENT_USER\Software\Afqteuv
W4_57 = "ea23745f"

HKEY_CURRENT_USER\Software\Afqteuv
W1_58 = "8e3e41ee"

HKEY_CURRENT_USER\Software\Afqteuv
W2_58 = "4c8fc614"

HKEY_CURRENT_USER\Software\Afqteuv
W3_58 = "4d8cb79f"

HKEY_CURRENT_USER\Software\Afqteuv
W4_58 = "4c8fddb6"

HKEY_CURRENT_USER\Software\Afqteuv
W1_59 = "7e6d1443"

HKEY_CURRENT_USER\Software\Afqteuv
W2_59 = "aefc5e54"

HKEY_CURRENT_USER\Software\Afqteuv
W3_59 = "afff2d24"

HKEY_CURRENT_USER\Software\Afqteuv
W4_59 = "aefc47d"

HKEY_CURRENT_USER\Software\Afqteuv
W1_60 = "b57c273d"

HKEY_CURRENT_USER\Software\Afqteuv
W2_60 = "1168a93d"

HKEY_CURRENT_USER\Software\Afqteuv
W3_60 = "16bda4d"

HKEY_CURRENT_USER\Software\Afqteuv
W4_60 = "1168b64"

HKEY_CURRENT_USER\Software\Afqteuv
W1_61 = "7a86fe6"

HKEY_CURRENT_USER\Software\Afqteuv
W2_61 = "73d5eab"

HKEY_CURRENT_USER\Software\Afqteuv
W3_61 = "72d67392"

HKEY_CURRENT_USER\Software\Afqteuv
W4_61 = "73d519bb"

HKEY_CURRENT_USER\Software\Afqteuv
W1_62 = "1d2fea5e"

HKEY_CURRENT_USER\Software\Afqteuv
W2_62 = "d641aa7"

HKEY_CURRENT_USER\Software\Afqteuv
W3_62 = "d742e93b"

HKEY_CURRENT_USER\Software\Afqteuv
W4_62 = "d6418312"

HKEY_CURRENT_USER\Software\Afqteuv
W1_63 = "5f53953c"

HKEY_CURRENT_USER\Software\Afqteuv
W2_63 = "38adf1f4"

HKEY_CURRENT_USER\Software\Afqteuv
W3_63 = "39ae864"

HKEY_CURRENT_USER\Software\Afqteuv
W4_63 = "38adec69"

HKEY_CURRENT_USER\Software\Afqteuv
W1_64 = "5ad2ccbc"

HKEY_CURRENT_USER\Software\Afqteuv
W2_64 = "9b1a4294"

HKEY_CURRENT_USER\Software\Afqteuv
W3_64 = "9a193fe9"

HKEY_CURRENT_USER\Software\Afqteuv
W4_64 = "9b1a55c"

HKEY_CURRENT_USER\Software\Afqteuv
W1_65 = "418f5543"

HKEY_CURRENT_USER\Software\Afqteuv
W2_65 = "fd86a678"

HKEY_CURRENT_USER\Software\Afqteuv
W3_65 = "fc85d53e"

HKEY_CURRENT_USER\Software\Afqteuv
W4_65 = "fd86bf17"

HKEY_CURRENT_USER\Software\Afqteuv
W1_66 = "9487132"

HKEY_CURRENT_USER\Software\Afqteuv
W2_66 = "5ff332c8"

HKEY_CURRENT_USER\Software\Afqteuv
W3_66 = "5ef4247"

HKEY_CURRENT_USER\Software\Afqteuv
W4_66 = "5ff3286e"

HKEY_CURRENT_USER\Software\Afqteuv
W1_67 = "1eddb59c"

HKEY_CURRENT_USER\Software\Afqteuv
W2_67 = "c25f8a8d"

HKEY_CURRENT_USER\Software\Afqteuv
W3_67 = "c35cfbec"

HKEY_CURRENT_USER\Software\Afqteuv
W4_67 = "c25f91c5"

HKEY_CURRENT_USER\Software\Afqteuv
W1_68 = "663794a"

HKEY_CURRENT_USER\Software\Afqteuv
W2_68 = "24cbe56b"

HKEY_CURRENT_USER\Software\Afqteuv
W3_68 = "25c89135"

HKEY_CURRENT_USER\Software\Afqteuv
W4_68 = "24cbfb1c"

HKEY_CURRENT_USER\Software\Afqteuv
W1_69 = "8aaf593d"

HKEY_CURRENT_USER\Software\Afqteuv
W2_69 = "87387264"

HKEY_CURRENT_USER\Software\Afqteuv
W3_69 = "863be5a"

HKEY_CURRENT_USER\Software\Afqteuv
W4_69 = "87386473"

HKEY_CURRENT_USER\Software\Afqteuv
W1_70 = "4aa389"

HKEY_CURRENT_USER\Software\Afqteuv
W2_70 = "e9a4d71"

HKEY_CURRENT_USER\Software\Afqteuv
W3_70 = "e8a7a7e3"

HKEY_CURRENT_USER\Software\Afqteuv
W4_70 = "e9a4cdca"

HKEY_CURRENT_USER\Software\Afqteuv
W1_71 = "4d3b379a"

HKEY_CURRENT_USER\Software\Afqteuv
W2_71 = "4c111516"

HKEY_CURRENT_USER\Software\Afqteuv
W3_71 = "4d125d8"

HKEY_CURRENT_USER\Software\Afqteuv
W4_71 = "4c113721"

HKEY_CURRENT_USER\Software\Afqteuv
W1_72 = "7cf3491a"

HKEY_CURRENT_USER\Software\Afqteuv
W2_72 = "ae7dbc57"

HKEY_CURRENT_USER\Software\Afqteuv
W3_72 = "af7eca51"

HKEY_CURRENT_USER\Software\Afqteuv
W4_72 = "ae7da78"

HKEY_CURRENT_USER\Software\Afqteuv
W1_73 = "89d5e74"

HKEY_CURRENT_USER\Software\Afqteuv
W2_73 = "1ea114"

HKEY_CURRENT_USER\Software\Afqteuv
W3_73 = "11e963e6"

HKEY_CURRENT_USER\Software\Afqteuv
W4_73 = "1ea9cf"

HKEY_CURRENT_USER\Software\Afqteuv
W1_74 = "5df5587f"

HKEY_CURRENT_USER\Software\Afqteuv
W2_74 = "735657e1"

HKEY_CURRENT_USER\Software\Afqteuv
W3_74 = "725519f"

HKEY_CURRENT_USER\Software\Afqteuv
W4_74 = "73567326"

HKEY_CURRENT_USER\Software\Afqteuv
W1_75 = "a5f83933"

HKEY_CURRENT_USER\Software\Afqteuv
W2_75 = "d5c2cb4a"

HKEY_CURRENT_USER\Software\Afqteuv
W3_75 = "d4c1b654"

HKEY_CURRENT_USER\Software\Afqteuv
W4_75 = "d5c2dc7d"

HKEY_CURRENT_USER\Software\Afqteuv
W1_76 = "346ca7"

HKEY_CURRENT_USER\Software\Afqteuv
W2_76 = "382f583f"

HKEY_CURRENT_USER\Software\Afqteuv
W3_76 = "392c2ffd"

HKEY_CURRENT_USER\Software\Afqteuv
W4_76 = "382f45d4"

HKEY_CURRENT_USER\Software\Afqteuv
W1_77 = "43bf126d"

HKEY_CURRENT_USER\Software\Afqteuv
W2_77 = "9a9b8e6d"

HKEY_CURRENT_USER\Software\Afqteuv
W3_77 = "9b98c52"

HKEY_CURRENT_USER\Software\Afqteuv
W4_77 = "9a9baf2b"

HKEY_CURRENT_USER\Software\Afqteuv
W1_78 = "66586fcd"

HKEY_CURRENT_USER\Software\Afqteuv
W2_78 = "fd8e7e"

HKEY_CURRENT_USER\Software\Afqteuv
W3_78 = "fcb72ab"

HKEY_CURRENT_USER\Software\Afqteuv
W4_78 = "fd81882"

HKEY_CURRENT_USER\Software\Afqteuv
W1_79 = "2fd725"

HKEY_CURRENT_USER\Software\Afqteuv
W2_79 = "5f74a5ac"

HKEY_CURRENT_USER\Software\Afqteuv
W3_79 = "5e77ebf"

HKEY_CURRENT_USER\Software\Afqteuv
W4_79 = "5f7481d9"

HKEY_CURRENT_USER\Software\Afqteuv
W1_80 = "37bc9969"

HKEY_CURRENT_USER\Software\Afqteuv
W2_80 = "c1ef2eb"

HKEY_CURRENT_USER\Software\Afqteuv
W3_80 = "ce38119"

HKEY_CURRENT_USER\Software\Afqteuv
W4_80 = "c1eeb3"

HKEY_CURRENT_USER\Software\Afqteuv
W1_81 = "54616b3a"

HKEY_CURRENT_USER\Software\Afqteuv
W2_81 = "244d4a7"

HKEY_CURRENT_USER\Software\Afqteuv
W3_81 = "254e3eae"

HKEY_CURRENT_USER\Software\Afqteuv
W4_81 = "244d5487"

HKEY_CURRENT_USER\Software\Afqteuv
W1_82 = "d6a88865"

HKEY_CURRENT_USER\Software\Afqteuv
W2_82 = "86b9a5f9"

HKEY_CURRENT_USER\Software\Afqteuv
W3_82 = "87bad7f7"

HKEY_CURRENT_USER\Software\Afqteuv
W4_82 = "86b9bdde"

HKEY_CURRENT_USER\Software\Afqteuv
W1_83 = "892b666"

HKEY_CURRENT_USER\Software\Afqteuv
W2_83 = "e92638e"

HKEY_CURRENT_USER\Software\Afqteuv
W3_83 = "e8254d1c"

HKEY_CURRENT_USER\Software\Afqteuv
W4_83 = "e9262735"

HKEY_CURRENT_USER\Software\Afqteuv
W1_84 = "2652d445"

HKEY_CURRENT_USER\Software\Afqteuv
W2_84 = "4b928e3d"

HKEY_CURRENT_USER\Software\Afqteuv
W3_84 = "4a91faa5"

HKEY_CURRENT_USER\Software\Afqteuv
W4_84 = "4b9298c"

HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\
Services\Schedule
AtTaskMaxHours = "0"

HKEY_CURRENT_USER\Software\Afqteuv
W1_85 = "6ab3bb7"

HKEY_CURRENT_USER\Software\Afqteuv
W2_85 = "adfee5c7"

HKEY_CURRENT_USER\Software\Afqteuv
W3_85 = "acfd93ca"

HKEY_CURRENT_USER\Software\Afqteuv
W4_85 = "adfef9e3"

HKEY_CURRENT_USER\Software\Afqteuv
W1_86 = "677ec5f2"

HKEY_CURRENT_USER\Software\Afqteuv
W2_86 = "16b7f41"

HKEY_CURRENT_USER\Software\Afqteuv
W3_86 = "1168913"

HKEY_CURRENT_USER\Software\Afqteuv
W4_86 = "16b633a"

HKEY_CURRENT_USER\Software\Afqteuv
W1_87 = "3bb47c8"

HKEY_CURRENT_USER\Software\Afqteuv
W2_87 = "72d7edd"

HKEY_CURRENT_USER\Software\Afqteuv
W3_87 = "73d4a6b8"

HKEY_CURRENT_USER\Software\Afqteuv
W4_87 = "72d7cc91"

HKEY_CURRENT_USER\Software\Afqteuv
W1_88 = "df36f3bc"

HKEY_CURRENT_USER\Software\Afqteuv
W2_88 = "d5442361"

HKEY_CURRENT_USER\Software\Afqteuv
W3_88 = "d4475fc1"

HKEY_CURRENT_USER\Software\Afqteuv
W4_88 = "d54435e8"

HKEY_CURRENT_USER\Software\Afqteuv
W1_89 = "4f3c49f1"

HKEY_CURRENT_USER\Software\Afqteuv
W2_89 = "37b86f9"

HKEY_CURRENT_USER\Software\Afqteuv
W3_89 = "36b3f516"

HKEY_CURRENT_USER\Software\Afqteuv
W4_89 = "37b9f3f"

HKEY_CURRENT_USER\Software\Afqteuv
W1_90 = "b91de1d8"

HKEY_CURRENT_USER\Software\Afqteuv
W2_90 = "9a1d1471"

HKEY_CURRENT_USER\Software\Afqteuv
W3_90 = "9b1e62bf"

HKEY_CURRENT_USER\Software\Afqteuv
W4_90 = "9a1d896"

HKEY_CURRENT_USER\Software\Afqteuv
W1_91 = "ac26b51"

HKEY_CURRENT_USER\Software\Afqteuv
W2_91 = "fc8951d6"

HKEY_CURRENT_USER\Software\Afqteuv
W3_91 = "fd8a1bc4"

HKEY_CURRENT_USER\Software\Afqteuv
W4_91 = "fc8971ed"

HKEY_CURRENT_USER\Software\Afqteuv
W1_92 = "653ec7f9"

HKEY_CURRENT_USER\Software\Afqteuv
W2_92 = "5ef5c1da"

HKEY_CURRENT_USER\Software\Afqteuv
W3_92 = "5ff6b16d"

HKEY_CURRENT_USER\Software\Afqteuv
W4_92 = "5ef5db44"

HKEY_CURRENT_USER\Software\Afqteuv
W1_93 = "7ad7b8f9"

HKEY_CURRENT_USER\Software\Afqteuv
W2_93 = "c1625d62"

HKEY_CURRENT_USER\Software\Afqteuv
W3_93 = "c612eb2"

HKEY_CURRENT_USER\Software\Afqteuv
W4_93 = "c162449b"

HKEY_CURRENT_USER\Software\Afqteuv
W1_94 = "f7568dab"

HKEY_CURRENT_USER\Software\Afqteuv
W2_94 = "23ceb272"

HKEY_CURRENT_USER\Software\Afqteuv
W3_94 = "22cdc7db"

HKEY_CURRENT_USER\Software\Afqteuv
W4_94 = "23ceadf2"

HKEY_CURRENT_USER\Software\Afqteuv
W1_95 = "c2d44b9d"

HKEY_CURRENT_USER\Software\Afqteuv
W2_95 = "863bab4"

HKEY_CURRENT_USER\Software\Afqteuv
W3_95 = "87387d6"

HKEY_CURRENT_USER\Software\Afqteuv
W4_95 = "863b1749"

HKEY_CURRENT_USER\Software\Afqteuv
W1_96 = "6d61e8dc"

HKEY_CURRENT_USER\Software\Afqteuv
W2_96 = "e8a79fcd"

HKEY_CURRENT_USER\Software\Afqteuv
W3_96 = "e9a4ea89"

HKEY_CURRENT_USER\Software\Afqteuv
W4_96 = "e8a78a"

HKEY_CURRENT_USER\Software\Afqteuv
W1_97 = "cc71a3e"

HKEY_CURRENT_USER\Software\Afqteuv
W2_97 = "4b13cada"

HKEY_CURRENT_USER\Software\Afqteuv
W3_97 = "4a183de"

HKEY_CURRENT_USER\Software\Afqteuv
W4_97 = "4b13e9f7"

HKEY_CURRENT_USER\Software\Afqteuv
W1_98 = "19ca2c18"

HKEY_CURRENT_USER\Software\Afqteuv
W2_98 = "ad848f9"

HKEY_CURRENT_USER\Software\Afqteuv
W3_98 = "ac833967"

HKEY_CURRENT_USER\Software\Afqteuv
W4_98 = "ad8534e"

HKEY_CURRENT_USER\Software\Afqteuv
W1_99 = "375a519"

HKEY_CURRENT_USER\Software\Afqteuv
W2_99 = "feca222"

HKEY_CURRENT_USER\Software\Afqteuv
W3_99 = "eefd68c"

HKEY_CURRENT_USER\Software\Afqteuv
W4_99 = "fecbca5"

HKEY_CURRENT_USER\Software\Afqteuv
W1_100 = "3d3c4da3"

HKEY_CURRENT_USER\Software\Afqteuv
W2_100 = "7259381"

HKEY_CURRENT_USER\Software\Afqteuv
W3_100 = "735a4fd5"

HKEY_CURRENT_USER\Software\Afqteuv
W4_100 = "725925fc"

HKEY_CURRENT_USER\Software\Afqteuv
W1_101 = "57e5fef"

HKEY_CURRENT_USER\Software\Afqteuv
W2_101 = "d4c5988"

HKEY_CURRENT_USER\Software\Afqteuv
W3_101 = "d5c6e57a"

HKEY_CURRENT_USER\Software\Afqteuv
W4_101 = "d4c58f53"

HKEY_CURRENT_USER\Software\Afqteuv
W1_102 = "5268c411"

HKEY_CURRENT_USER\Software\Afqteuv
W2_102 = "3731d8a1"

HKEY_CURRENT_USER\Software\Afqteuv
W3_102 = "36329283"

HKEY_CURRENT_USER\Software\Afqteuv
W4_102 = "3731f8aa"

HKEY_CURRENT_USER\Software\Afqteuv
W1_103 = "af188451"

HKEY_CURRENT_USER\Software\Afqteuv
W2_103 = "999e79b6"

HKEY_CURRENT_USER\Software\Afqteuv
W3_103 = "989d828"

HKEY_CURRENT_USER\Software\Afqteuv
W4_103 = "999e621"

HKEY_CURRENT_USER\Software\Afqteuv
W1_104 = "53abaee"

HKEY_CURRENT_USER\Software\Afqteuv
W2_104 = "fcad6e9"

HKEY_CURRENT_USER\Software\Afqteuv
W3_104 = "fd9a171"

HKEY_CURRENT_USER\Software\Afqteuv
W4_104 = "fcacb58"

HKEY_CURRENT_USER\Software\Afqteuv
W1_105 = "1becffb7"

HKEY_CURRENT_USER\Software\Afqteuv
W2_105 = "5e771165"

HKEY_CURRENT_USER\Software\Afqteuv
W3_105 = "5f745e86"

HKEY_CURRENT_USER\Software\Afqteuv
W4_105 = "5e7734af"

HKEY_CURRENT_USER\Software\Afqteuv
W1_106 = "2e28e85b"

HKEY_CURRENT_USER\Software\Afqteuv
W2_106 = "ce38971"

HKEY_CURRENT_USER\Software\Afqteuv
W3_106 = "c1ef42f"

HKEY_CURRENT_USER\Software\Afqteuv
W4_106 = "ce39e6"

HKEY_CURRENT_USER\Software\Afqteuv
W1_107 = "ce7ae1f"

HKEY_CURRENT_USER\Software\Afqteuv
W2_107 = "2351e4"

HKEY_CURRENT_USER\Software\Afqteuv
W3_107 = "22536d74"

HKEY_CURRENT_USER\Software\Afqteuv
W4_107 = "23575d"

HKEY_CURRENT_USER\Software\Afqteuv
W1_108 = "ae2956a"

HKEY_CURRENT_USER\Software\Afqteuv
W2_108 = "85bc6791"

HKEY_CURRENT_USER\Software\Afqteuv
W3_108 = "84bf1a9d"

HKEY_CURRENT_USER\Software\Afqteuv
W4_108 = "85bc7b4"

HKEY_CURRENT_USER\Software\Afqteuv
W1_109 = "3b98a5d"

HKEY_CURRENT_USER\Software\Afqteuv
W2_109 = "e828ccc4"

HKEY_CURRENT_USER\Software\Afqteuv
W3_109 = "e92bb22"

HKEY_CURRENT_USER\Software\Afqteuv
W4_109 = "e828dab"

HKEY_CURRENT_USER\Software\Afqteuv
W1_110 = "668258de"

HKEY_CURRENT_USER\Software\Afqteuv
W2_110 = "4a955ea8"

HKEY_CURRENT_USER\Software\Afqteuv
W3_110 = "4b96294b"

HKEY_CURRENT_USER\Software\Afqteuv
W4_110 = "4a954362"

HKEY_CURRENT_USER\Software\Afqteuv
W1_111 = "c35e66c9"

HKEY_CURRENT_USER\Software\Afqteuv
W2_111 = "ad1ba6"

HKEY_CURRENT_USER\Software\Afqteuv
W3_111 = "ac2c69"

HKEY_CURRENT_USER\Software\Afqteuv
W4_111 = "ad1acb9"

HKEY_CURRENT_USER\Software\Afqteuv
W1_112 = "f3e879ad"

HKEY_CURRENT_USER\Software\Afqteuv
W2_112 = "f6e3497"

HKEY_CURRENT_USER\Software\Afqteuv
W3_112 = "e6d7c39"

HKEY_CURRENT_USER\Software\Afqteuv
W4_112 = "f6e161"

HKEY_CURRENT_USER\Software\Afqteuv
W1_113 = "ae49b736"

HKEY_CURRENT_USER\Software\Afqteuv
W2_113 = "71da62e"

HKEY_CURRENT_USER\Software\Afqteuv
W3_113 = "7d9154e"

HKEY_CURRENT_USER\Software\Afqteuv
W4_113 = "71da7f67"

HKEY_CURRENT_USER\Software\Afqteuv
W1_114 = "69984edc"

HKEY_CURRENT_USER\Software\Afqteuv
W2_114 = "d446fd25"

HKEY_CURRENT_USER\Software\Afqteuv
W3_114 = "d5458297"

HKEY_CURRENT_USER\Software\Afqteuv
W4_114 = "d446e8be"

HKEY_CURRENT_USER\Software\Afqteuv
W1_115 = "52fb4c67"

HKEY_CURRENT_USER\Software\Afqteuv
W2_115 = "36b34537"

HKEY_CURRENT_USER\Software\Afqteuv
W3_115 = "37b383c"

HKEY_CURRENT_USER\Software\Afqteuv
W4_115 = "36b35215"

HKEY_CURRENT_USER\Software\Afqteuv
W1_116 = "cd4627b5"

HKEY_CURRENT_USER\Software\Afqteuv
W2_116 = "991fa457"

HKEY_CURRENT_USER\Software\Afqteuv
W3_116 = "981cd145"

HKEY_CURRENT_USER\Software\Afqteuv
W4_116 = "991fbb6c"

HKEY_CURRENT_USER\Software\Afqteuv
W1_117 = "c9c9729f"

HKEY_CURRENT_USER\Software\Afqteuv
W2_117 = "fb8c38fc"

HKEY_CURRENT_USER\Software\Afqteuv
W3_117 = "fa8f4eea"

HKEY_CURRENT_USER\Software\Afqteuv
W4_117 = "fb8c24c3"

HKEY_CURRENT_USER\Software\Afqteuv
W1_118 = "45119921"

HKEY_CURRENT_USER\Software\Afqteuv
W2_118 = "5df894f3"

HKEY_CURRENT_USER\Software\Afqteuv
W3_118 = "5cfbe433"

HKEY_CURRENT_USER\Software\Afqteuv
W4_118 = "5df88e1a"

HKEY_CURRENT_USER\Software\Afqteuv
W1_119 = "a56312cd"

HKEY_CURRENT_USER\Software\Afqteuv
W2_119 = "c64ed9a"

HKEY_CURRENT_USER\Software\Afqteuv
W3_119 = "c1679d58"

HKEY_CURRENT_USER\Software\Afqteuv
W4_119 = "c64f771"

HKEY_CURRENT_USER\Software\Afqteuv
W1_120 = "cde97f86"

HKEY_CURRENT_USER\Software\Afqteuv
W2_120 = "22d17ee4"

HKEY_CURRENT_USER\Software\Afqteuv
W3_120 = "23d2ae1"

HKEY_CURRENT_USER\Software\Afqteuv
W4_120 = "22d16c8"

HKEY_CURRENT_USER\Software\Afqteuv
W1_121 = "8c1e35d6"

HKEY_CURRENT_USER\Software\Afqteuv
W2_121 = "853ddcc6"

HKEY_CURRENT_USER\Software\Afqteuv
W3_121 = "843ea36"

HKEY_CURRENT_USER\Software\Afqteuv
W4_121 = "853dca1f"

HKEY_CURRENT_USER\Software\Afqteuv
W1_122 = "ee27b13d"

HKEY_CURRENT_USER\Software\Afqteuv
W2_122 = "e7aa2a8f"

HKEY_CURRENT_USER\Software\Afqteuv
W3_122 = "e6a9595f"

HKEY_CURRENT_USER\Software\Afqteuv
W4_122 = "e7aa3376"

HKEY_CURRENT_USER\Software\Afqteuv
W1_123 = "cccd67"

HKEY_CURRENT_USER\Software\Afqteuv
W2_123 = "4a16bc25"

HKEY_CURRENT_USER\Software\Afqteuv
W3_123 = "4b15f6e4"

HKEY_CURRENT_USER\Software\Afqteuv
W4_123 = "4a169ccd"

HKEY_CURRENT_USER\Software\Afqteuv
W1_124 = "1ab1766b"

HKEY_CURRENT_USER\Software\Afqteuv
W2_124 = "ac8326fb"

HKEY_CURRENT_USER\Software\Afqteuv
W3_124 = "ad86cd"

HKEY_CURRENT_USER\Software\Afqteuv
W4_124 = "ac83624"

HKEY_CURRENT_USER\Software\Afqteuv
W1_125 = "4ca22c5"

HKEY_CURRENT_USER\Software\Afqteuv
W2_125 = "eef4d4f"

HKEY_CURRENT_USER\Software\Afqteuv
W3_125 = "fec552"

HKEY_CURRENT_USER\Software\Afqteuv
W4_125 = "eef6f7b"

HKEY_CURRENT_USER\Software\Afqteuv
W1_126 = "4bd8268b"

HKEY_CURRENT_USER\Software\Afqteuv
W2_126 = "715bc129"

HKEY_CURRENT_USER\Software\Afqteuv
W3_126 = "758b2fb"

HKEY_CURRENT_USER\Software\Afqteuv
W4_126 = "715bd8d2"

HKEY_CURRENT_USER\Software\Afqteuv
W1_127 = "d4cb2a76"

HKEY_CURRENT_USER\Software\Afqteuv
W2_127 = "d3c8544e"

HKEY_CURRENT_USER\Software\Afqteuv
W3_127 = "d2cb28"

HKEY_CURRENT_USER\Software\Afqteuv
W4_127 = "d3c84229"

HKEY_CURRENT_USER\Software\Afqteuv
W1_128 = "d9fee23e"

HKEY_CURRENT_USER\Software\Afqteuv
W2_128 = "3634b63"

HKEY_CURRENT_USER\Software\Afqteuv
W3_128 = "3737c1a9"

HKEY_CURRENT_USER\Software\Afqteuv
W4_128 = "3634ab8"

HKEY_CURRENT_USER\Software\Afqteuv
W1_129 = "9bc6bba"

HKEY_CURRENT_USER\Software\Afqteuv
W2_129 = "98a19be"

HKEY_CURRENT_USER\Software\Afqteuv
W3_129 = "99a27efe"

HKEY_CURRENT_USER\Software\Afqteuv
W4_129 = "98a114d7"

HKEY_CURRENT_USER\Software\Afqteuv
W1_130 = "b2472843"

HKEY_CURRENT_USER\Software\Afqteuv
W2_130 = "fbd69c"

HKEY_CURRENT_USER\Software\Afqteuv
W3_130 = "fae147"

HKEY_CURRENT_USER\Software\Afqteuv
W4_130 = "fbd7e2e"

HKEY_CURRENT_USER\Software\Afqteuv
W1_131 = "e6f45"

HKEY_CURRENT_USER\Software\Afqteuv
W2_131 = "5d79fc7a"

HKEY_CURRENT_USER\Software\Afqteuv
W3_131 = "5c7a8dac"

HKEY_CURRENT_USER\Software\Afqteuv
W4_131 = "5d79e785"

HKEY_CURRENT_USER\Software\Afqteuv
W1_132 = "5ceeeb1"

HKEY_CURRENT_USER\Software\Afqteuv
W2_132 = "bfe64cad"

HKEY_CURRENT_USER\Software\Afqteuv
W3_132 = "bee53af5"

HKEY_CURRENT_USER\Software\Afqteuv
W4_132 = "bfe65dc"

HKEY_CURRENT_USER\Software\Afqteuv
W1_133 = "6672c86e"

HKEY_CURRENT_USER\Software\Afqteuv
W2_133 = "2252a4bf"

HKEY_CURRENT_USER\Software\Afqteuv
W3_133 = "2351d1a"

HKEY_CURRENT_USER\Software\Afqteuv
W4_133 = "2252ba33"

HKEY_CURRENT_USER\Software\Afqteuv
W1_134 = "9852fd3"

HKEY_CURRENT_USER\Software\Afqteuv
W2_134 = "84bf3b61"

HKEY_CURRENT_USER\Software\Afqteuv
W3_134 = "85bc49a3"

HKEY_CURRENT_USER\Software\Afqteuv
W4_134 = "84bf238a"

HKEY_CURRENT_USER\Software\Afqteuv
W1_135 = "ee44ffdb"

HKEY_CURRENT_USER\Software\Afqteuv
W2_135 = "e72b9c5"

HKEY_CURRENT_USER\Software\Afqteuv
W3_135 = "e628e6c8"

HKEY_CURRENT_USER\Software\Afqteuv
W4_135 = "e72b8ce1"

HKEY_CURRENT_USER\Software\Afqteuv
W1_136 = "b8ceec6d"

HKEY_CURRENT_USER\Software\Afqteuv
W2_136 = "4997ea5d"

HKEY_CURRENT_USER\Software\Afqteuv
W3_136 = "48949c11"

HKEY_CURRENT_USER\Software\Afqteuv
W4_136 = "4997f638"

HKEY_CURRENT_USER\Software\Afqteuv
W1_137 = "6b9b455"

HKEY_CURRENT_USER\Software\Afqteuv
W2_137 = "ac4494e"

HKEY_CURRENT_USER\Software\Afqteuv
W3_137 = "ad735a6"

HKEY_CURRENT_USER\Software\Afqteuv
W4_137 = "ac45f8f"

HKEY_CURRENT_USER\Software\Afqteuv
W1_138 = "3b16e2bf"

HKEY_CURRENT_USER\Software\Afqteuv
W2_138 = "e7d15"

HKEY_CURRENT_USER\Software\Afqteuv
W3_138 = "f73a2cf"

HKEY_CURRENT_USER\Software\Afqteuv
W4_138 = "e7c8e6"

HKEY_CURRENT_USER\Software\Afqteuv
W1_139 = "f6db63"

HKEY_CURRENT_USER\Software\Afqteuv
W2_139 = "7dd11ec"

HKEY_CURRENT_USER\Software\Afqteuv
W3_139 = "71de5814"

HKEY_CURRENT_USER\Software\Afqteuv
W4_139 = "7dd323d"

HKEY_CURRENT_USER\Software\Afqteuv
W1_140 = "7fa6af4d"

HKEY_CURRENT_USER\Software\Afqteuv
W2_140 = "d349bb8f"

HKEY_CURRENT_USER\Software\Afqteuv
W3_140 = "d24af1bd"

HKEY_CURRENT_USER\Software\Afqteuv
W4_140 = "d3499b94"

HKEY_CURRENT_USER\Software\Afqteuv
W1_141 = "d5a7b5b5"

HKEY_CURRENT_USER\Software\Afqteuv
W2_141 = "35b61265"

HKEY_CURRENT_USER\Software\Afqteuv
W3_141 = "34b56ec2"

HKEY_CURRENT_USER\Software\Afqteuv
W4_141 = "35b64eb"

HKEY_CURRENT_USER\Software\Afqteuv
W1_142 = "d64b41b"

HKEY_CURRENT_USER\Software\Afqteuv
W2_142 = "982272e4"

HKEY_CURRENT_USER\Software\Afqteuv
W3_142 = "992146b"

HKEY_CURRENT_USER\Software\Afqteuv
W4_142 = "98226e42"

HKEY_CURRENT_USER\Software\Afqteuv
W1_143 = "dc59a8ef"

HKEY_CURRENT_USER\Software\Afqteuv
W2_143 = "fa8eccf6"

HKEY_CURRENT_USER\Software\Afqteuv
W3_143 = "fb8dbdb"

HKEY_CURRENT_USER\Software\Afqteuv
W4_143 = "fa8ed799"

HKEY_CURRENT_USER\Software\Afqteuv
W1_144 = "561638a5"

HKEY_CURRENT_USER\Software\Afqteuv
W2_144 = "5cfb5aef"

HKEY_CURRENT_USER\Software\Afqteuv
W3_144 = "5df82ad9"

HKEY_CURRENT_USER\Software\Afqteuv
W4_144 = "5cfb4f"

HKEY_CURRENT_USER\Software\Afqteuv
W1_145 = "c86e4d19"

HKEY_CURRENT_USER\Software\Afqteuv
W2_145 = "bf67bd44"

HKEY_CURRENT_USER\Software\Afqteuv
W3_145 = "be64c6e"

HKEY_CURRENT_USER\Software\Afqteuv
W4_145 = "bf67aa47"

HKEY_CURRENT_USER\Software\Afqteuv
W1_146 = "d4f64955"

HKEY_CURRENT_USER\Software\Afqteuv
W2_146 = "21d488c"

HKEY_CURRENT_USER\Software\Afqteuv
W3_146 = "2d779b7"

HKEY_CURRENT_USER\Software\Afqteuv
W4_146 = "21d4139e"

HKEY_CURRENT_USER\Software\Afqteuv
W1_147 = "15f92b98"

HKEY_CURRENT_USER\Software\Afqteuv
W2_147 = "8446298"

HKEY_CURRENT_USER\Software\Afqteuv
W3_147 = "854316dc"

HKEY_CURRENT_USER\Software\Afqteuv
W4_147 = "8447cf5"

HKEY_CURRENT_USER\Software\Afqteuv
W1_148 = "6111991a"

HKEY_CURRENT_USER\Software\Afqteuv
W2_148 = "e6acfccb"

HKEY_CURRENT_USER\Software\Afqteuv
W3_148 = "e7af8c65"

HKEY_CURRENT_USER\Software\Afqteuv
W4_148 = "e6ace64c"

HKEY_CURRENT_USER\Software\Afqteuv
W1_149 = "8db361fa"

HKEY_CURRENT_USER\Software\Afqteuv
W2_149 = "491959ee"

HKEY_CURRENT_USER\Software\Afqteuv
W3_149 = "481a258a"

HKEY_CURRENT_USER\Software\Afqteuv
W4_149 = "49194fa3"

HKEY_CURRENT_USER\Software\Afqteuv
W1_150 = "b452512e"

HKEY_CURRENT_USER\Software\Afqteuv
W2_150 = "ab85a5"

HKEY_CURRENT_USER\Software\Afqteuv
W3_150 = "aa86d2d3"

HKEY_CURRENT_USER\Software\Afqteuv
W4_150 = "ab85b8fa"

HKEY_CURRENT_USER\Software\Afqteuv
W1_151 = "ff24e"

HKEY_CURRENT_USER\Software\Afqteuv
W2_151 = "df2274"

HKEY_CURRENT_USER\Software\Afqteuv
W3_151 = "cf14878"

HKEY_CURRENT_USER\Software\Afqteuv
W4_151 = "df22251"

HKEY_CURRENT_USER\Software\Afqteuv
W1_152 = "3a5f39f5"

HKEY_CURRENT_USER\Software\Afqteuv
W2_152 = "75e974f"

HKEY_CURRENT_USER\Software\Afqteuv
W3_152 = "715de181"

HKEY_CURRENT_USER\Software\Afqteuv
W4_152 = "75e8ba8"

HKEY_CURRENT_USER\Software\Afqteuv
W1_153 = "b31d7b82"

HKEY_CURRENT_USER\Software\Afqteuv
W2_153 = "d2cae89a"

HKEY_CURRENT_USER\Software\Afqteuv
W3_153 = "d3c99ed6"

HKEY_CURRENT_USER\Software\Afqteuv
W4_153 = "d2caf4ff"

HKEY_CURRENT_USER\Software\Afqteuv
W1_154 = "f44e9e8"

HKEY_CURRENT_USER\Software\Afqteuv
W2_154 = "353747cc"

HKEY_CURRENT_USER\Software\Afqteuv
W3_154 = "3434347f"

HKEY_CURRENT_USER\Software\Afqteuv
W4_154 = "35375e56"

HKEY_CURRENT_USER\Software\Afqteuv
W1_155 = "8cbcd216"

HKEY_CURRENT_USER\Software\Afqteuv
W2_155 = "97a3d9a"

HKEY_CURRENT_USER\Software\Afqteuv
W3_155 = "96aad84"

HKEY_CURRENT_USER\Software\Afqteuv
W4_155 = "97a3c7ad"

HKEY_CURRENT_USER\Software\Afqteuv
W1_156 = "cee9fc7"

HKEY_CURRENT_USER\Software\Afqteuv
W2_156 = "fa12f28"

HKEY_CURRENT_USER\Software\Afqteuv
W3_156 = "fb135b2d"

HKEY_CURRENT_USER\Software\Afqteuv
W4_156 = "fa1314"

HKEY_CURRENT_USER\Software\Afqteuv
W1_157 = "d7578f6"

HKEY_CURRENT_USER\Software\Afqteuv
W2_157 = "5c7cb59c"

HKEY_CURRENT_USER\Software\Afqteuv
W3_157 = "5d7ff72"

HKEY_CURRENT_USER\Software\Afqteuv
W4_157 = "5c7c9a5b"

HKEY_CURRENT_USER\Software\Afqteuv
W1_158 = "98c79e7"

HKEY_CURRENT_USER\Software\Afqteuv
W2_158 = "bee91515"

HKEY_CURRENT_USER\Software\Afqteuv
W3_158 = "bfea699b"

HKEY_CURRENT_USER\Software\Afqteuv
W4_158 = "bee93b2"

HKEY_CURRENT_USER\Software\Afqteuv
W1_159 = "91c4dca"

HKEY_CURRENT_USER\Software\Afqteuv
W2_159 = "21557676"

HKEY_CURRENT_USER\Software\Afqteuv
W3_159 = "25672"

HKEY_CURRENT_USER\Software\Afqteuv
W4_159 = "21556d9"

HKEY_CURRENT_USER\Software\Afqteuv
W1_160 = "962378a3"

HKEY_CURRENT_USER\Software\Afqteuv
W2_160 = "83c1f4e3"

HKEY_CURRENT_USER\Software\Afqteuv
W3_160 = "82c2bc49"

HKEY_CURRENT_USER\Software\Afqteuv
W4_160 = "83c1d66"

HKEY_CURRENT_USER\Software\Afqteuv
W1_161 = "99ca9bce"

HKEY_CURRENT_USER\Software\Afqteuv
W2_161 = "e62e1c66"

HKEY_CURRENT_USER\Software\Afqteuv
W3_161 = "e72d559e"

HKEY_CURRENT_USER\Software\Afqteuv
W4_161 = "e62e3fb7"

HKEY_CURRENT_USER\Software\Afqteuv
W1_162 = "67aebd35"

HKEY_CURRENT_USER\Software\Afqteuv
W2_162 = "489abfcb"

HKEY_CURRENT_USER\Software\Afqteuv
W3_162 = "4999c327"

HKEY_CURRENT_USER\Software\Afqteuv
W4_162 = "489aa9e"

HKEY_CURRENT_USER\Software\Afqteuv
W1_163 = "eae9f26"

HKEY_CURRENT_USER\Software\Afqteuv
W2_163 = "ab73148"

HKEY_CURRENT_USER\Software\Afqteuv
W3_163 = "aa4784c"

HKEY_CURRENT_USER\Software\Afqteuv
W4_163 = "ab71265"

HKEY_CURRENT_USER\Software\Afqteuv
W1_164 = "944b18e"

HKEY_CURRENT_USER\Software\Afqteuv
W2_164 = "d7367b3"

HKEY_CURRENT_USER\Software\Afqteuv
W3_164 = "c71195"

HKEY_CURRENT_USER\Software\Afqteuv
W4_164 = "d737bbc"

HKEY_CURRENT_USER\Software\Afqteuv
W1_165 = "a3e7845d"

HKEY_CURRENT_USER\Software\Afqteuv
W2_165 = "6fdff25a"

HKEY_CURRENT_USER\Software\Afqteuv
W3_165 = "6edc8f3a"

HKEY_CURRENT_USER\Software\Afqteuv
W4_165 = "6fdfe513"

HKEY_CURRENT_USER\Software\Afqteuv
W1_166 = "e8433d33"

HKEY_CURRENT_USER\Software\Afqteuv
W2_166 = "d24c5b"

HKEY_CURRENT_USER\Software\Afqteuv
W3_166 = "d34f2443"

HKEY_CURRENT_USER\Software\Afqteuv
W4_166 = "d24c4e6a"

HKEY_CURRENT_USER\Software\Afqteuv
W1_167 = "4f3dfb14"

HKEY_CURRENT_USER\Software\Afqteuv
W2_167 = "34b892b"

HKEY_CURRENT_USER\Software\Afqteuv
W3_167 = "35bbdde8"

HKEY_CURRENT_USER\Software\Afqteuv
W4_167 = "34b8b7c1"

HKEY_CURRENT_USER\Software\Afqteuv
W1_168 = "29de7b56"

HKEY_CURRENT_USER\Software\Afqteuv
W2_168 = "972521b"

HKEY_CURRENT_USER\Software\Afqteuv
W3_168 = "96264b31"

HKEY_CURRENT_USER\Software\Afqteuv
W4_168 = "97252118"

HKEY_CURRENT_USER\Software\Afqteuv
W1_169 = "c8cb6eac"

HKEY_CURRENT_USER\Software\Afqteuv
W2_169 = "f99197ca"

HKEY_CURRENT_USER\Software\Afqteuv
W3_169 = "f892e46"

HKEY_CURRENT_USER\Software\Afqteuv
W4_169 = "f9918a6f"

HKEY_CURRENT_USER\Software\Afqteuv
W1_170 = "916f429b"

HKEY_CURRENT_USER\Software\Afqteuv
W2_170 = "5bfdeed5"

HKEY_CURRENT_USER\Software\Afqteuv
W3_170 = "5afe99ef"

HKEY_CURRENT_USER\Software\Afqteuv
W4_170 = "5bfdf3c6"

HKEY_CURRENT_USER\Software\Afqteuv
W1_171 = "d3577544"

HKEY_CURRENT_USER\Software\Afqteuv
W2_171 = "be6a7cfc"

HKEY_CURRENT_USER\Software\Afqteuv
W3_171 = "bf693734"

HKEY_CURRENT_USER\Software\Afqteuv
W4_171 = "be6a5d1d"

HKEY_CURRENT_USER\Software\Afqteuv
W1_172 = "966b47c8"

HKEY_CURRENT_USER\Software\Afqteuv
W2_172 = "2d6d42e"

HKEY_CURRENT_USER\Software\Afqteuv
W3_172 = "21d5ac5d"

HKEY_CURRENT_USER\Software\Afqteuv
W4_172 = "2d6c674"

HKEY_CURRENT_USER\Software\Afqteuv
W1_173 = "32e4c9c"

HKEY_CURRENT_USER\Software\Afqteuv
W2_173 = "834336a4"

HKEY_CURRENT_USER\Software\Afqteuv
W3_173 = "82445e2"

HKEY_CURRENT_USER\Software\Afqteuv
W4_173 = "83432fcb"

HKEY_CURRENT_USER\Software\Afqteuv
W1_174 = "e784e566"

HKEY_CURRENT_USER\Software\Afqteuv
W2_174 = "e5af8429"

HKEY_CURRENT_USER\Software\Afqteuv
W3_174 = "e4acf3b"

HKEY_CURRENT_USER\Software\Afqteuv
W4_174 = "e5af9922"

HKEY_CURRENT_USER\Software\Afqteuv
W1_175 = "8c9da7a4"

HKEY_CURRENT_USER\Software\Afqteuv
W2_175 = "481c1824"

HKEY_CURRENT_USER\Software\Afqteuv
W3_175 = "491f685"

HKEY_CURRENT_USER\Software\Afqteuv
W4_175 = "481c279"

HKEY_CURRENT_USER\Software\Afqteuv
W1_176 = "8a2c5b8"

HKEY_CURRENT_USER\Software\Afqteuv
W2_176 = "aa88776e"

HKEY_CURRENT_USER\Software\Afqteuv
W3_176 = "ab8b1f9"

HKEY_CURRENT_USER\Software\Afqteuv
W4_176 = "aa886bd"

HKEY_CURRENT_USER\Software\Afqteuv
W1_177 = "686ba568"

HKEY_CURRENT_USER\Software\Afqteuv
W2_177 = "cf4cc5"

HKEY_CURRENT_USER\Software\Afqteuv
W3_177 = "df7bfe"

HKEY_CURRENT_USER\Software\Afqteuv
W4_177 = "cf4d527"

HKEY_CURRENT_USER\Software\Afqteuv
W1_178 = "3657a4"

HKEY_CURRENT_USER\Software\Afqteuv
W2_178 = "6f612b29"

HKEY_CURRENT_USER\Software\Afqteuv
W3_178 = "6e625457"

HKEY_CURRENT_USER\Software\Afqteuv
W4_178 = "6f613e7e"

HKEY_CURRENT_USER\Software\Afqteuv
W1_179 = "496daa83"

HKEY_CURRENT_USER\Software\Afqteuv
W2_179 = "d1cdb1b2"

HKEY_CURRENT_USER\Software\Afqteuv
W3_179 = "dcecdfc"

HKEY_CURRENT_USER\Software\Afqteuv
W4_179 = "d1cda7d5"

HKEY_CURRENT_USER\Software\Afqteuv
W1_180 = "5e43e75"

HKEY_CURRENT_USER\Software\Afqteuv
W2_180 = "343a773"

HKEY_CURRENT_USER\Software\Afqteuv
W3_180 = "35397b5"

HKEY_CURRENT_USER\Software\Afqteuv
W4_180 = "343a112c"

HKEY_CURRENT_USER\Software\Afqteuv
W1_181 = "c1715eda"

HKEY_CURRENT_USER\Software\Afqteuv
W2_181 = "96a661a4"

HKEY_CURRENT_USER\Software\Afqteuv
W3_181 = "97a51aa"

HKEY_CURRENT_USER\Software\Afqteuv
W4_181 = "96a67a83"

HKEY_CURRENT_USER\Software\Afqteuv
W1_182 = "6b59eeb9"

HKEY_CURRENT_USER\Software\Afqteuv
W2_182 = "f912fd85"

HKEY_CURRENT_USER\Software\Afqteuv
W3_182 = "f81189f3"

HKEY_CURRENT_USER\Software\Afqteuv
W4_182 = "f912e3da"

HKEY_CURRENT_USER\Software\Afqteuv
W1_183 = "d99661e2"

HKEY_CURRENT_USER\Software\Afqteuv
W2_183 = "5b7f533c"

HKEY_CURRENT_USER\Software\Afqteuv
W3_183 = "5a7c2718"

HKEY_CURRENT_USER\Software\Afqteuv
W4_183 = "5b7f4d31"

HKEY_CURRENT_USER\Software\Afqteuv
W1_184 = "c2c1dcb"

HKEY_CURRENT_USER\Software\Afqteuv
W2_184 = "bdeba8f"

HKEY_CURRENT_USER\Software\Afqteuv
W3_184 = "bce8dca1"

HKEY_CURRENT_USER\Software\Afqteuv
W4_184 = "bdebb688"

HKEY_CURRENT_USER\Software\Afqteuv
W1_185 = "b96e739"

HKEY_CURRENT_USER\Software\Afqteuv
W2_185 = "25887e"

HKEY_CURRENT_USER\Software\Afqteuv
W3_185 = "215b75f6"

HKEY_CURRENT_USER\Software\Afqteuv
W4_185 = "2581fdf"

HKEY_CURRENT_USER\Software\Afqteuv
W1_186 = "196d3d69"

HKEY_CURRENT_USER\Software\Afqteuv
W2_186 = "82c49c5c"

HKEY_CURRENT_USER\Software\Afqteuv
W3_186 = "83c7e31f"

HKEY_CURRENT_USER\Software\Afqteuv
W4_186 = "82c48936"

HKEY_CURRENT_USER\Software\Afqteuv
W1_187 = "8dba88d8"

HKEY_CURRENT_USER\Software\Afqteuv
W2_187 = "e53ec62"

HKEY_CURRENT_USER\Software\Afqteuv
W3_187 = "e43398a4"

HKEY_CURRENT_USER\Software\Afqteuv
W4_187 = "e53f28d"

HKEY_CURRENT_USER\Software\Afqteuv
W1_188 = "3157a8b"

HKEY_CURRENT_USER\Software\Afqteuv
W2_188 = "479d79d3"

HKEY_CURRENT_USER\Software\Afqteuv
W3_188 = "469e31cd"

HKEY_CURRENT_USER\Software\Afqteuv
W4_188 = "479d5be4"

HKEY_CURRENT_USER\Software\Afqteuv
W1_189 = "85c93575"

HKEY_CURRENT_USER\Software\Afqteuv
W2_189 = "aa9ded8"

HKEY_CURRENT_USER\Software\Afqteuv
W3_189 = "abaaf12"

HKEY_CURRENT_USER\Software\Afqteuv
W4_189 = "aa9c53b"

HKEY_CURRENT_USER\Software\Afqteuv
W1_190 = "2257451"

HKEY_CURRENT_USER\Software\Afqteuv
W2_190 = "c763ad"

HKEY_CURRENT_USER\Software\Afqteuv
W3_190 = "d7544bb"

HKEY_CURRENT_USER\Software\Afqteuv
W4_190 = "c762e92"

HKEY_CURRENT_USER\Software\Afqteuv
W1_191 = "7ae3e4b"

HKEY_CURRENT_USER\Software\Afqteuv
W2_191 = "6ee28f6e"

HKEY_CURRENT_USER\Software\Afqteuv
W3_191 = "6fe1fdc"

HKEY_CURRENT_USER\Software\Afqteuv
W4_191 = "6ee297e9"

HKEY_CURRENT_USER\Software\Afqteuv
W1_192 = "24fd7a16"

HKEY_CURRENT_USER\Software\Afqteuv
W2_192 = "d14f1d87"

HKEY_CURRENT_USER\Software\Afqteuv
W3_192 = "d4c6b69"

HKEY_CURRENT_USER\Software\Afqteuv
W4_192 = "d14f14"

HKEY_CURRENT_USER\Software\Afqteuv
W1_193 = "721c4ace"

HKEY_CURRENT_USER\Software\Afqteuv
W2_193 = "33bb776a"

HKEY_CURRENT_USER\Software\Afqteuv
W3_193 = "32b8be"

HKEY_CURRENT_USER\Software\Afqteuv
W4_193 = "33bb6a97"

HKEY_CURRENT_USER\Software\Afqteuv
W1_194 = "8b13d355"

HKEY_CURRENT_USER\Software\Afqteuv
W2_194 = "9627f2b"

HKEY_CURRENT_USER\Software\Afqteuv
W3_194 = "9724b9c7"

HKEY_CURRENT_USER\Software\Afqteuv
W4_194 = "9627d3ee"

HKEY_CURRENT_USER\Software\Afqteuv
W1_195 = "accea2cd"

HKEY_CURRENT_USER\Software\Afqteuv
W2_195 = "f89425c2"

HKEY_CURRENT_USER\Software\Afqteuv
W3_195 = "f997576c"

HKEY_CURRENT_USER\Software\Afqteuv
W4_195 = "f8943d45"

HKEY_CURRENT_USER\Software\Afqteuv
W1_196 = "42a176d6"

HKEY_CURRENT_USER\Software\Afqteuv
W2_196 = "5bbd8e"

HKEY_CURRENT_USER\Software\Afqteuv
W3_196 = "5a3ccb5"

HKEY_CURRENT_USER\Software\Afqteuv
W4_196 = "5ba69c"

HKEY_CURRENT_USER\Software\Afqteuv
W1_197 = "2fc7fae"

HKEY_CURRENT_USER\Software\Afqteuv
W2_197 = "bd6d19be"

HKEY_CURRENT_USER\Software\Afqteuv
W3_197 = "bc6e65da"

HKEY_CURRENT_USER\Software\Afqteuv
W4_197 = "bd6dff3"

HKEY_CURRENT_USER\Software\Afqteuv
W1_198 = "6a7a52"

HKEY_CURRENT_USER\Software\Afqteuv
W2_198 = "1fd96572"

HKEY_CURRENT_USER\Software\Afqteuv
W3_198 = "1eda1363"

HKEY_CURRENT_USER\Software\Afqteuv
W4_198 = "1fd9794a"

HKEY_CURRENT_USER\Software\Afqteuv
W1_199 = "4876a7f1"

HKEY_CURRENT_USER\Software\Afqteuv
W2_199 = "8245fe99"

HKEY_CURRENT_USER\Software\Afqteuv
W3_199 = "83468888"

HKEY_CURRENT_USER\Software\Afqteuv
W4_199 = "8245e2a1"

HKEY_CURRENT_USER\Software\Afqteuv
W1_200 = "5f793c57"

HKEY_CURRENT_USER\Software\Afqteuv
W2_200 = "e4b25d4"

HKEY_CURRENT_USER\Software\Afqteuv
W3_200 = "e5b121d1"

HKEY_CURRENT_USER\Software\Afqteuv
W4_200 = "e4b24bf8"

HKEY_CURRENT_USER\Software\Afqteuv
W1_201 = "e95bc716"

HKEY_CURRENT_USER\Software\Afqteuv
W2_201 = "471eae3c"

HKEY_CURRENT_USER\Software\Afqteuv
W3_201 = "461ddf66"

HKEY_CURRENT_USER\Software\Afqteuv
W4_201 = "471eb54f"

HKEY_CURRENT_USER\Software\Afqteuv
W1_202 = "3661df2"

HKEY_CURRENT_USER\Software\Afqteuv
W2_202 = "a98b81"

HKEY_CURRENT_USER\Software\Afqteuv
W3_202 = "a888748f"

HKEY_CURRENT_USER\Software\Afqteuv
W4_202 = "a98b1ea6"

HKEY_CURRENT_USER\Software\Afqteuv
W1_203 = "293aa8a4"

HKEY_CURRENT_USER\Software\Afqteuv
W2_203 = "bf796c"

HKEY_CURRENT_USER\Software\Afqteuv
W3_203 = "af4edd4"

HKEY_CURRENT_USER\Software\Afqteuv
W4_203 = "bf787fd"

HKEY_CURRENT_USER\Software\Afqteuv
W1_204 = "e3f981"

HKEY_CURRENT_USER\Software\Afqteuv
W2_204 = "6e63ec55"

HKEY_CURRENT_USER\Software\Afqteuv
W3_204 = "6f69b7d"

HKEY_CURRENT_USER\Software\Afqteuv
W4_204 = "6e63f154"

HKEY_CURRENT_USER\Software\Afqteuv
W1_205 = "bb28f2"

HKEY_CURRENT_USER\Software\Afqteuv
W2_205 = "dd4959"

HKEY_CURRENT_USER\Software\Afqteuv
W3_205 = "d1d3382"

HKEY_CURRENT_USER\Software\Afqteuv
W4_205 = "dd5aab"

HKEY_CURRENT_USER\Software\Afqteuv
W1_206 = "291ebe42"

HKEY_CURRENT_USER\Software\Afqteuv
W2_206 = "333ce1c8"

HKEY_CURRENT_USER\Software\Afqteuv
W3_206 = "323fae2b"

HKEY_CURRENT_USER\Software\Afqteuv
W4_206 = "333cc42"

HKEY_CURRENT_USER\Software\Afqteuv
W1_207 = "f7cc48d"

HKEY_CURRENT_USER\Software\Afqteuv
W2_207 = "95a9d1b"

HKEY_CURRENT_USER\Software\Afqteuv
W3_207 = "94aa477"

HKEY_CURRENT_USER\Software\Afqteuv
W4_207 = "95a92d59"

HKEY_CURRENT_USER\Software\Afqteuv
W1_208 = "115e5874"

HKEY_CURRENT_USER\Software\Afqteuv
W2_208 = "f8158bc"

HKEY_CURRENT_USER\Software\Afqteuv
W3_208 = "f916fc99"

HKEY_CURRENT_USER\Software\Afqteuv
W4_208 = "f81596b"

HKEY_CURRENT_USER\Software\Afqteuv
W1_209 = "fe6fbdb9"

HKEY_CURRENT_USER\Software\Afqteuv
W2_209 = "5a8215aa"

HKEY_CURRENT_USER\Software\Afqteuv
W3_209 = "5b816a2e"

HKEY_CURRENT_USER\Software\Afqteuv
W4_209 = "5a827"

HKEY_CURRENT_USER\Software\Afqteuv
W1_210 = "722465c"

HKEY_CURRENT_USER\Software\Afqteuv
W2_210 = "bcee73f5"

HKEY_CURRENT_USER\Software\Afqteuv
W3_210 = "bded377"

HKEY_CURRENT_USER\Software\Afqteuv
W4_210 = "bcee695e"

HKEY_CURRENT_USER\Software\Afqteuv
W1_211 = "884b848f"

HKEY_CURRENT_USER\Software\Afqteuv
W2_211 = "1f5accb2"

HKEY_CURRENT_USER\Software\Afqteuv
W3_211 = "1e59b89c"

HKEY_CURRENT_USER\Software\Afqteuv
W4_211 = "1f5ad2b5"

HKEY_CURRENT_USER\Software\Afqteuv
W1_212 = "5584bf7a"

HKEY_CURRENT_USER\Software\Afqteuv
W2_212 = "81c727b7"

HKEY_CURRENT_USER\Software\Afqteuv
W3_212 = "8c45625"

HKEY_CURRENT_USER\Software\Afqteuv
W4_212 = "81c73cc"

HKEY_CURRENT_USER\Software\Afqteuv
W1_213 = "5af8cdde"

HKEY_CURRENT_USER\Software\Afqteuv
W2_213 = "e433bb52"

HKEY_CURRENT_USER\Software\Afqteuv
W3_213 = "e53cf4a"

HKEY_CURRENT_USER\Software\Afqteuv
W4_213 = "e433a563"

HKEY_CURRENT_USER\Software\Afqteuv
W1_214 = "7687fe7"

HKEY_CURRENT_USER\Software\Afqteuv
W2_214 = "46a15d3"

HKEY_CURRENT_USER\Software\Afqteuv
W3_214 = "47a36493"

HKEY_CURRENT_USER\Software\Afqteuv
W4_214 = "46aeba"

HKEY_CURRENT_USER\Software\Afqteuv
W1_215 = "1ce747"

HKEY_CURRENT_USER\Software\Afqteuv
W2_215 = "a9c6e32"

HKEY_CURRENT_USER\Software\Afqteuv
W3_215 = "a8f1238"

HKEY_CURRENT_USER\Software\Afqteuv
W4_215 = "a9c7811"

HKEY_CURRENT_USER\Software\Afqteuv
W1_216 = "3fec825"

HKEY_CURRENT_USER\Software\Afqteuv
W2_216 = "b78fb74"

HKEY_CURRENT_USER\Software\Afqteuv
W3_216 = "a7b8b41"

HKEY_CURRENT_USER\Software\Afqteuv
W4_216 = "b78e168"

HKEY_CURRENT_USER\Software\Afqteuv
W1_217 = "3c222e"

HKEY_CURRENT_USER\Software\Afqteuv
W2_217 = "6de557d6"

HKEY_CURRENT_USER\Software\Afqteuv
W3_217 = "6ce6296"

HKEY_CURRENT_USER\Software\Afqteuv
W4_217 = "6de54abf"

HKEY_CURRENT_USER\Software\Afqteuv
W1_218 = "2c586b6"

HKEY_CURRENT_USER\Software\Afqteuv
W2_218 = "d51abd6"

HKEY_CURRENT_USER\Software\Afqteuv
W3_218 = "d152de3f"

HKEY_CURRENT_USER\Software\Afqteuv
W4_218 = "d51b416"

HKEY_CURRENT_USER\Software\Afqteuv
W1_219 = "6deb6738"

HKEY_CURRENT_USER\Software\Afqteuv
W2_219 = "32be38a7"

HKEY_CURRENT_USER\Software\Afqteuv
W3_219 = "33bd7744"

HKEY_CURRENT_USER\Software\Afqteuv
W4_219 = "32be1d6d"

HKEY_CURRENT_USER\Software\Afqteuv
W1_220 = "2e675d"

HKEY_CURRENT_USER\Software\Afqteuv
W2_220 = "952a9165"

HKEY_CURRENT_USER\Software\Afqteuv
W3_220 = "9429eced"

HKEY_CURRENT_USER\Software\Afqteuv
W4_220 = "952a86c4"

HKEY_CURRENT_USER\Software\Afqteuv
W1_221 = "4f788246"

HKEY_CURRENT_USER\Software\Afqteuv
W2_221 = "f796e6c"

HKEY_CURRENT_USER\Software\Afqteuv
W3_221 = "f6959a32"

HKEY_CURRENT_USER\Software\Afqteuv
W4_221 = "f796f1b"

HKEY_CURRENT_USER\Software\Afqteuv
W1_222 = "c719383c"

HKEY_CURRENT_USER\Software\Afqteuv
W2_222 = "5a34db5"

HKEY_CURRENT_USER\Software\Afqteuv
W3_222 = "5b335b"

HKEY_CURRENT_USER\Software\Afqteuv
W4_222 = "5a35972"

HKEY_CURRENT_USER\Software\Afqteuv
W1_223 = "52e2891"

HKEY_CURRENT_USER\Software\Afqteuv
W2_223 = "bc6fdaf2"

HKEY_CURRENT_USER\Software\Afqteuv
W3_223 = "bd6ca8e"

HKEY_CURRENT_USER\Software\Afqteuv
W4_223 = "bc6fc2c9"

HKEY_CURRENT_USER\Software\Afqteuv
W1_224 = "adb753e8"

HKEY_CURRENT_USER\Software\Afqteuv
W2_224 = "1edc3178"

HKEY_CURRENT_USER\Software\Afqteuv
W3_224 = "1fdf469"

HKEY_CURRENT_USER\Software\Afqteuv
W4_224 = "1edc2c2"

HKEY_CURRENT_USER\Software\Afqteuv
W1_225 = "474ea2b"

HKEY_CURRENT_USER\Software\Afqteuv
W2_225 = "81488e65"

HKEY_CURRENT_USER\Software\Afqteuv
W3_225 = "84bff5e"

HKEY_CURRENT_USER\Software\Afqteuv
W4_225 = "81489577"

HKEY_CURRENT_USER\Software\Afqteuv
W1_226 = "8b433f7"

HKEY_CURRENT_USER\Software\Afqteuv
W2_226 = "e3b4e5ee"

HKEY_CURRENT_USER\Software\Afqteuv
W3_226 = "e2b794e7"

HKEY_CURRENT_USER\Software\Afqteuv
W4_226 = "e3b4fece"

HKEY_CURRENT_USER\Software\Afqteuv
W1_227 = "6d2ab59"

HKEY_CURRENT_USER\Software\Afqteuv
W2_227 = "462175ef"

HKEY_CURRENT_USER\Software\Afqteuv
W3_227 = "47222c"

HKEY_CURRENT_USER\Software\Afqteuv
W4_227 = "46216825"

HKEY_CURRENT_USER\Software\Afqteuv
W1_228 = "cce5132"

HKEY_CURRENT_USER\Software\Afqteuv
W2_228 = "a88dcd7d"

HKEY_CURRENT_USER\Software\Afqteuv
W3_228 = "a98ebb55"

HKEY_CURRENT_USER\Software\Afqteuv
W4_228 = "a88dd17c"

HKEY_CURRENT_USER\Software\Afqteuv
W1_229 = "6426cbe"

HKEY_CURRENT_USER\Software\Afqteuv
W2_229 = "afa246"

HKEY_CURRENT_USER\Software\Afqteuv
W3_229 = "bf95fa"

HKEY_CURRENT_USER\Software\Afqteuv
W4_229 = "afa3ad3"

HKEY_CURRENT_USER\Software\Afqteuv
W1_230 = "c5e7f997"

HKEY_CURRENT_USER\Software\Afqteuv
W2_230 = "6d66ba27"

HKEY_CURRENT_USER\Software\Afqteuv
W3_230 = "6c65ce3"

HKEY_CURRENT_USER\Software\Afqteuv
W4_230 = "6d66a42a"

HKEY_CURRENT_USER\Software\Afqteuv
W1_231 = "29c44d58"

HKEY_CURRENT_USER\Software\Afqteuv
W2_231 = "cfd3179d"

HKEY_CURRENT_USER\Software\Afqteuv
W3_231 = "ced67a8"

HKEY_CURRENT_USER\Software\Afqteuv
W4_231 = "cfd3d81"

HKEY_CURRENT_USER\Software\Afqteuv
W1_232 = "77cd39b"

HKEY_CURRENT_USER\Software\Afqteuv
W2_232 = "323f68f4"

HKEY_CURRENT_USER\Software\Afqteuv
W3_232 = "333c1cf1"

HKEY_CURRENT_USER\Software\Afqteuv
W4_232 = "323f76d8"

HKEY_CURRENT_USER\Software\Afqteuv
W1_233 = "8415a95b"

HKEY_CURRENT_USER\Software\Afqteuv
W2_233 = "94abcba"

HKEY_CURRENT_USER\Software\Afqteuv
W3_233 = "95a88a6"

HKEY_CURRENT_USER\Software\Afqteuv
W4_233 = "94abe2f"

HKEY_CURRENT_USER\Software\Afqteuv
W1_234 = "b24632d2"

HKEY_CURRENT_USER\Software\Afqteuv
W2_234 = "f718548d"

HKEY_CURRENT_USER\Software\Afqteuv
W3_234 = "f61b23af"

HKEY_CURRENT_USER\Software\Afqteuv
W4_234 = "f7184986"

HKEY_CURRENT_USER\Software\Afqteuv
W1_235 = "a155e7"

HKEY_CURRENT_USER\Software\Afqteuv
W2_235 = "5984a482"

HKEY_CURRENT_USER\Software\Afqteuv
W3_235 = "5887d8f4"

HKEY_CURRENT_USER\Software\Afqteuv
W4_235 = "5984b2dd"

HKEY_CURRENT_USER\Software\Afqteuv
W1_236 = "b96461"

HKEY_CURRENT_USER\Software\Afqteuv
W2_236 = "bbf12c2"

HKEY_CURRENT_USER\Software\Afqteuv
W3_236 = "baf2761d"

HKEY_CURRENT_USER\Software\Afqteuv
W4_236 = "bbf11c34"

HKEY_CURRENT_USER\Software\Afqteuv
W1_237 = "143df7d2"

HKEY_CURRENT_USER\Software\Afqteuv
W2_237 = "1e5d924c"

HKEY_CURRENT_USER\Software\Afqteuv
W3_237 = "1f5eefa2"

HKEY_CURRENT_USER\Software\Afqteuv
W4_237 = "1e5d858b"

HKEY_CURRENT_USER\Software\Afqteuv
W1_238 = "daf7a796"

HKEY_CURRENT_USER\Software\Afqteuv
W2_238 = "8c9f7fa"

HKEY_CURRENT_USER\Software\Afqteuv
W3_238 = "81ca84cb"

HKEY_CURRENT_USER\Software\Afqteuv
W4_238 = "8c9eee2"

HKEY_CURRENT_USER\Software\Afqteuv
W1_239 = "351d4d2"

HKEY_CURRENT_USER\Software\Afqteuv
W2_239 = "e336746e"

HKEY_CURRENT_USER\Software\Afqteuv
W3_239 = "e235321"

HKEY_CURRENT_USER\Software\Afqteuv
W4_239 = "e3365839"

HKEY_CURRENT_USER\Software\Afqteuv
W1_240 = "e29e1e2"

HKEY_CURRENT_USER\Software\Afqteuv
W2_240 = "45a2e45a"

HKEY_CURRENT_USER\Software\Afqteuv
W3_240 = "44a1abb9"

HKEY_CURRENT_USER\Software\Afqteuv
W4_240 = "45a2c19"

HKEY_CURRENT_USER\Software\Afqteuv
W1_241 = "8fd8ba3e"

HKEY_CURRENT_USER\Software\Afqteuv
W2_241 = "a8f3145"

HKEY_CURRENT_USER\Software\Afqteuv
W3_241 = "a9c4ce"

HKEY_CURRENT_USER\Software\Afqteuv
W4_241 = "a8f2ae7"

HKEY_CURRENT_USER\Software\Afqteuv
W1_242 = "ad1ab667"

HKEY_CURRENT_USER\Software\Afqteuv
W2_242 = "a7b82e9"

HKEY_CURRENT_USER\Software\Afqteuv
W3_242 = "b78fe17"

HKEY_CURRENT_USER\Software\Afqteuv
W4_242 = "a7b943e"

HKEY_CURRENT_USER\Software\Afqteuv
W1_243 = "83fa15cc"

HKEY_CURRENT_USER\Software\Afqteuv
W2_243 = "6ce7e5ae"

HKEY_CURRENT_USER\Software\Afqteuv
W3_243 = "6de497bc"

HKEY_CURRENT_USER\Software\Afqteuv
W4_243 = "6ce7fd95"

HKEY_CURRENT_USER\Software\Afqteuv
W1_244 = "d41a381"

HKEY_CURRENT_USER\Software\Afqteuv
W2_244 = "cf547ad"

HKEY_CURRENT_USER\Software\Afqteuv
W3_244 = "ce57cc5"

HKEY_CURRENT_USER\Software\Afqteuv
W4_244 = "cf5466ec"

HKEY_CURRENT_USER\Software\Afqteuv
W1_245 = "ed711c18"

HKEY_CURRENT_USER\Software\Afqteuv
W2_245 = "31cf49"

HKEY_CURRENT_USER\Software\Afqteuv
W3_245 = "3c3ba6a"

HKEY_CURRENT_USER\Software\Afqteuv
W4_245 = "31cd43"

HKEY_CURRENT_USER\Software\Afqteuv
W1_246 = "3d9f74c5"

HKEY_CURRENT_USER\Software\Afqteuv
W2_246 = "942d2f3d"

HKEY_CURRENT_USER\Software\Afqteuv
W3_246 = "952e53b3"

HKEY_CURRENT_USER\Software\Afqteuv
W4_246 = "942d399a"

HKEY_CURRENT_USER\Software\Afqteuv
W1_247 = "169cee4f"

HKEY_CURRENT_USER\Software\Afqteuv
W2_247 = "f69981dc"

HKEY_CURRENT_USER\Software\Afqteuv
W3_247 = "f79ac8d8"

HKEY_CURRENT_USER\Software\Afqteuv
W4_247 = "f699a2f1"

HKEY_CURRENT_USER\Software\Afqteuv
W1_248 = "e79c6d6"

HKEY_CURRENT_USER\Software\Afqteuv
W2_248 = "59616ee"

HKEY_CURRENT_USER\Software\Afqteuv
W3_248 = "5856661"

HKEY_CURRENT_USER\Software\Afqteuv
W4_248 = "596c48"

HKEY_CURRENT_USER\Software\Afqteuv
W1_249 = "5c7f423"

HKEY_CURRENT_USER\Software\Afqteuv
W2_249 = "bb72623e"

HKEY_CURRENT_USER\Software\Afqteuv
W3_249 = "ba711fb6"

HKEY_CURRENT_USER\Software\Afqteuv
W4_249 = "bb72759f"

HKEY_CURRENT_USER\Software\Afqteuv
W1_250 = "b663352c"

HKEY_CURRENT_USER\Software\Afqteuv
W2_250 = "1ddec837"

HKEY_CURRENT_USER\Software\Afqteuv
W3_250 = "1cddb4df"

HKEY_CURRENT_USER\Software\Afqteuv
W4_250 = "1ddedef6"

HKEY_CURRENT_USER\Software\Afqteuv
W1_251 = "7a4e1a84"

HKEY_CURRENT_USER\Software\Afqteuv
W2_251 = "84b6846"

HKEY_CURRENT_USER\Software\Afqteuv
W3_251 = "81482264"

HKEY_CURRENT_USER\Software\Afqteuv
W4_251 = "84b484d"

HKEY_CURRENT_USER\Software\Afqteuv
W1_252 = "e8d8dfea"

HKEY_CURRENT_USER\Software\Afqteuv
W2_252 = "e2b71439"

HKEY_CURRENT_USER\Software\Afqteuv
W3_252 = "e3b4db8d"

HKEY_CURRENT_USER\Software\Afqteuv
W4_252 = "e2b7b1a4"

HKEY_CURRENT_USER\Software\Afqteuv
W1_253 = "ceca8ea2"

HKEY_CURRENT_USER\Software\Afqteuv
W2_253 = "45246df"

HKEY_CURRENT_USER\Software\Afqteuv
W3_253 = "44277d2"

HKEY_CURRENT_USER\Software\Afqteuv
W4_253 = "45241afb"

HKEY_CURRENT_USER\Software\Afqteuv
W1_254 = "387cdc"

HKEY_CURRENT_USER\Software\Afqteuv
W2_254 = "a7998ec"

HKEY_CURRENT_USER\Software\Afqteuv
W3_254 = "a693ee7b"

HKEY_CURRENT_USER\Software\Afqteuv
W4_254 = "a798452"

HKEY_CURRENT_USER\Software\Afqteuv
W1_255 = "6599c817"

HKEY_CURRENT_USER\Software\Afqteuv
W2_255 = "9fcf6f4"

HKEY_CURRENT_USER\Software\Afqteuv
W3_255 = "8ff878"

HKEY_CURRENT_USER\Software\Afqteuv
W4_255 = "9fceda9"

HKEY_CURRENT_USER\Software\Afqteuv
W1_256 = "a27c734f"

HKEY_CURRENT_USER\Software\Afqteuv
W2_256 = "6c694141"

HKEY_CURRENT_USER\Software\Afqteuv
W3_256 = "6d6a3d29"

HKEY_CURRENT_USER\Software\Afqteuv
W4_256 = "6c6957"

HKEY_CURRENT_USER\Software\Afqteuv
W1_257 = "a2dfaec"

HKEY_CURRENT_USER\Software\Afqteuv
W2_257 = "ced5d7c"

HKEY_CURRENT_USER\Software\Afqteuv
W3_257 = "cfd6aa7e"

HKEY_CURRENT_USER\Software\Afqteuv
W4_257 = "ced5c57"

HKEY_CURRENT_USER\Software\Afqteuv
W1_258 = "3f92187c"

HKEY_CURRENT_USER\Software\Afqteuv
W2_258 = "3142371"

HKEY_CURRENT_USER\Software\Afqteuv
W3_258 = "3414387"

HKEY_CURRENT_USER\Software\Afqteuv
W4_258 = "314229ae"

HKEY_CURRENT_USER\Software\Afqteuv
W1_259 = "118744b9"

HKEY_CURRENT_USER\Software\Afqteuv
W2_259 = "93ae8dab"

HKEY_CURRENT_USER\Software\Afqteuv
W3_259 = "92adf92c"

HKEY_CURRENT_USER\Software\Afqteuv
W4_259 = "93ae935"

HKEY_CURRENT_USER\Software\Afqteuv
W1_260 = "e1d3fee"

HKEY_CURRENT_USER\Software\Afqteuv
W2_260 = "f61ad87a"

HKEY_CURRENT_USER\Software\Afqteuv
W3_260 = "f7199675"

HKEY_CURRENT_USER\Software\Afqteuv
W4_260 = "f61afc5c"

HKEY_CURRENT_USER\Software\Afqteuv
W1_261 = "2baf14ee"

HKEY_CURRENT_USER\Software\Afqteuv
W2_261 = "58877819"

HKEY_CURRENT_USER\Software\Afqteuv
W3_261 = "5984f9a"

HKEY_CURRENT_USER\Software\Afqteuv
W4_261 = "588765b3"

HKEY_CURRENT_USER\Software\Afqteuv
W1_262 = "1dd4e653"

HKEY_CURRENT_USER\Software\Afqteuv
W2_262 = "baf3d5e1"

HKEY_CURRENT_USER\Software\Afqteuv
W3_262 = "bbfa523"

HKEY_CURRENT_USER\Software\Afqteuv
W4_262 = "baf3cfa"

HKEY_CURRENT_USER\Software\Afqteuv
W1_263 = "62ce5c"

HKEY_CURRENT_USER\Software\Afqteuv
W2_263 = "1d6256a"

HKEY_CURRENT_USER\Software\Afqteuv
W3_263 = "1c635248"

HKEY_CURRENT_USER\Software\Afqteuv
W4_263 = "1d63861"

HKEY_CURRENT_USER\Software\Afqteuv
W1_264 = "ee3bff5"

HKEY_CURRENT_USER\Software\Afqteuv
W2_264 = "7fccb7f5"

HKEY_CURRENT_USER\Software\Afqteuv
W3_264 = "7ecfcb91"

HKEY_CURRENT_USER\Software\Afqteuv
W4_264 = "7fcca1b8"

HKEY_CURRENT_USER\Software\Afqteuv
W1_265 = "91f87853"

HKEY_CURRENT_USER\Software\Afqteuv
W2_265 = "e23913da"

HKEY_CURRENT_USER\Software\Afqteuv
W3_265 = "e33a6126"

HKEY_CURRENT_USER\Software\Afqteuv
W4_265 = "e239bf"

HKEY_CURRENT_USER\Software\Afqteuv
W1_266 = "1a4adb"

HKEY_CURRENT_USER\Software\Afqteuv
W2_266 = "44a56245"

HKEY_CURRENT_USER\Software\Afqteuv
W3_266 = "45a61e4f"

HKEY_CURRENT_USER\Software\Afqteuv
W4_266 = "44a57466"

HKEY_CURRENT_USER\Software\Afqteuv
W1_267 = "6df7a1"

HKEY_CURRENT_USER\Software\Afqteuv
W2_267 = "a711fd14"

HKEY_CURRENT_USER\Software\Afqteuv
W3_267 = "a612b794"

HKEY_CURRENT_USER\Software\Afqteuv
W4_267 = "a711ddbd"

HKEY_CURRENT_USER\Software\Afqteuv
W1_268 = "18ac6c4d"

HKEY_CURRENT_USER\Software\Afqteuv
W2_268 = "97e5c33"

HKEY_CURRENT_USER\Software\Afqteuv
W3_268 = "87d2d3d"

HKEY_CURRENT_USER\Software\Afqteuv
W4_268 = "97e4714"

HKEY_CURRENT_USER\Software\Afqteuv
W1_269 = "7a19232"

HKEY_CURRENT_USER\Software\Afqteuv
W2_269 = "6beaaf5"

HKEY_CURRENT_USER\Software\Afqteuv
W3_269 = "6ae9da42"

HKEY_CURRENT_USER\Software\Afqteuv
W4_269 = "6beab6b"

HKEY_CURRENT_USER\Software\Afqteuv
W1_270 = "dfab6b9f"

HKEY_CURRENT_USER\Software\Afqteuv
W2_270 = "ce575a7"

HKEY_CURRENT_USER\Software\Afqteuv
W3_270 = "cf5473eb"

HKEY_CURRENT_USER\Software\Afqteuv
W4_270 = "ce5719c2"

HKEY_CURRENT_USER\Software\Afqteuv
W1_271 = "371d4751"

HKEY_CURRENT_USER\Software\Afqteuv
W2_271 = "3c3a148"

HKEY_CURRENT_USER\Software\Afqteuv
W3_271 = "31ce93"

HKEY_CURRENT_USER\Software\Afqteuv
W4_271 = "3c38319"

HKEY_CURRENT_USER\Software\Afqteuv
W1_272 = "fa6c82cb"

HKEY_CURRENT_USER\Software\Afqteuv
W2_272 = "932ff2d3"

HKEY_CURRENT_USER\Software\Afqteuv
W3_272 = "922c8659"

HKEY_CURRENT_USER\Software\Afqteuv
W4_272 = "932fec7"

HKEY_CURRENT_USER\Software\Afqteuv
W1_273 = "16dc6e7a"

HKEY_CURRENT_USER\Software\Afqteuv
W2_273 = "f59c4b31"

HKEY_CURRENT_USER\Software\Afqteuv
W3_273 = "f49f3fee"

HKEY_CURRENT_USER\Software\Afqteuv
W4_273 = "f59c55c7"

HKEY_CURRENT_USER\Software\Afqteuv
W1_274 = "faf64842"

HKEY_CURRENT_USER\Software\Afqteuv
W2_274 = "588a439"

HKEY_CURRENT_USER\Software\Afqteuv
W3_274 = "59bd537"

HKEY_CURRENT_USER\Software\Afqteuv
W4_274 = "588bf1e"

HKEY_CURRENT_USER\Software\Afqteuv
W1_275 = "2a8fa2c"

HKEY_CURRENT_USER\Software\Afqteuv
W2_275 = "ba75344"

HKEY_CURRENT_USER\Software\Afqteuv
W3_275 = "bb76425c"

HKEY_CURRENT_USER\Software\Afqteuv
W4_275 = "ba752875"

HKEY_CURRENT_USER\Software\Afqteuv
W1_276 = "c6ef7c7a"

HKEY_CURRENT_USER\Software\Afqteuv
W2_276 = "1ce18c88"

HKEY_CURRENT_USER\Software\Afqteuv
W3_276 = "1de2fbe5"

HKEY_CURRENT_USER\Software\Afqteuv
W4_276 = "1ce191cc"

HKEY_CURRENT_USER\Software\Afqteuv
W1_277 = "35164b7d"

HKEY_CURRENT_USER\Software\Afqteuv
W2_277 = "7f4de6f4"

HKEY_CURRENT_USER\Software\Afqteuv
W3_277 = "7e4e91a"

HKEY_CURRENT_USER\Software\Afqteuv
W4_277 = "7f4dfb23"

HKEY_CURRENT_USER\Software\Afqteuv
W1_278 = "2928752f"

HKEY_CURRENT_USER\Software\Afqteuv
W2_278 = "e1ba47ab"

HKEY_CURRENT_USER\Software\Afqteuv
W3_278 = "eb9e53"

HKEY_CURRENT_USER\Software\Afqteuv
W4_278 = "e1ba647a"

HKEY_CURRENT_USER\Software\Afqteuv
W1_279 = "2f595988"

HKEY_CURRENT_USER\Software\Afqteuv
W2_279 = "4426ec9"

HKEY_CURRENT_USER\Software\Afqteuv
W3_279 = "4525a7f8"

HKEY_CURRENT_USER\Software\Afqteuv
W4_279 = "4426cdd1"

HKEY_CURRENT_USER\Software\Afqteuv
W1_280 = "24bfe96"

HKEY_CURRENT_USER\Software\Afqteuv
W2_280 = "a6931749"

HKEY_CURRENT_USER\Software\Afqteuv
W3_280 = "a795d1"

HKEY_CURRENT_USER\Software\Afqteuv
W4_280 = "a6933728"

HKEY_CURRENT_USER\Software\Afqteuv
W1_281 = "f4851f3f"

HKEY_CURRENT_USER\Software\Afqteuv
W2_281 = "8ffb967"

HKEY_CURRENT_USER\Software\Afqteuv
W3_281 = "9fcca56"

HKEY_CURRENT_USER\Software\Afqteuv
W4_281 = "8ffa7f"

HKEY_CURRENT_USER\Software\Afqteuv
W1_282 = "e9849b14"

HKEY_CURRENT_USER\Software\Afqteuv
W2_282 = "6b6c2afb"

HKEY_CURRENT_USER\Software\Afqteuv
W3_282 = "6a6f63ff"

HKEY_CURRENT_USER\Software\Afqteuv
W4_282 = "6b6c9d6"

HKEY_CURRENT_USER\Software\Afqteuv
W1_283 = "a3713a93"

HKEY_CURRENT_USER\Software\Afqteuv
W2_283 = "cdd86dca"

HKEY_CURRENT_USER\Software\Afqteuv
W3_283 = "ccdb194"

HKEY_CURRENT_USER\Software\Afqteuv
W4_283 = "cdd8732d"

HKEY_CURRENT_USER\Software\Afqteuv
W1_284 = "7662fdd"

HKEY_CURRENT_USER\Software\Afqteuv
W2_284 = "344c119"

HKEY_CURRENT_USER\Software\Afqteuv
W3_284 = "3147b6ad"

HKEY_CURRENT_USER\Software\Afqteuv
W4_284 = "344dc84"

HKEY_CURRENT_USER\Software\Afqteuv
W1_285 = "7d53586"

HKEY_CURRENT_USER\Software\Afqteuv
W2_285 = "92b15edf"

HKEY_CURRENT_USER\Software\Afqteuv
W3_285 = "93b22ff2"

HKEY_CURRENT_USER\Software\Afqteuv
W4_285 = "92b145db"

HKEY_CURRENT_USER\Software\Afqteuv
W1_286 = "ad9a7a69"

HKEY_CURRENT_USER\Software\Afqteuv
W2_286 = "f51db3fc"

HKEY_CURRENT_USER\Software\Afqteuv
W3_286 = "f41ec51b"

HKEY_CURRENT_USER\Software\Afqteuv
W4_286 = "f51daf32"

HKEY_CURRENT_USER\Software\Afqteuv
W1_287 = "589fec5d"

HKEY_CURRENT_USER\Software\Afqteuv
W2_287 = "578a3861"

HKEY_CURRENT_USER\Software\Afqteuv
W3_287 = "568972a"

HKEY_CURRENT_USER\Software\Afqteuv
W4_287 = "578a1889"

HKEY_CURRENT_USER\Software\Afqteuv
W1_288 = "e4c56b9"

HKEY_CURRENT_USER\Software\Afqteuv
W2_288 = "b9f6984d"

HKEY_CURRENT_USER\Software\Afqteuv
W3_288 = "b8f5ebc9"

HKEY_CURRENT_USER\Software\Afqteuv
W4_288 = "b9f681e"

HKEY_CURRENT_USER\Software\Afqteuv
W1_289 = "c8cf9661"

HKEY_CURRENT_USER\Software\Afqteuv
W2_289 = "1c62f1e8"

HKEY_CURRENT_USER\Software\Afqteuv
W3_289 = "1d61811e"

HKEY_CURRENT_USER\Software\Afqteuv
W4_289 = "1c62eb37"

HKEY_CURRENT_USER\Software\Afqteuv
W1_290 = "1ac474c3"

HKEY_CURRENT_USER\Software\Afqteuv
W2_290 = "7ecf7144"

HKEY_CURRENT_USER\Software\Afqteuv
W3_290 = "7fcc3ea7"

HKEY_CURRENT_USER\Software\Afqteuv
W4_290 = "7ecf548e"

HKEY_CURRENT_USER\Software\Afqteuv
W1_291 = "345598bc"

HKEY_CURRENT_USER\Software\Afqteuv
W2_291 = "e13ba743"

HKEY_CURRENT_USER\Software\Afqteuv
W3_291 = "e38d7cc"

HKEY_CURRENT_USER\Software\Afqteuv
W4_291 = "e13bbde5"

HKEY_CURRENT_USER\Software\Afqteuv
W1_292 = "391c1e81"

HKEY_CURRENT_USER\Software\Afqteuv
W2_292 = "43a867b"

HKEY_CURRENT_USER\Software\Afqteuv
W3_292 = "42ab4d15"

HKEY_CURRENT_USER\Software\Afqteuv
W4_292 = "43a8273c"

HKEY_CURRENT_USER\Software\Afqteuv
W1_293 = "314d74ca"

HKEY_CURRENT_USER\Software\Afqteuv
W2_293 = "a614b559"

HKEY_CURRENT_USER\Software\Afqteuv
W3_293 = "a717faba"

HKEY_CURRENT_USER\Software\Afqteuv
W4_293 = "a614993"

HKEY_CURRENT_USER\Software\Afqteuv
W1_294 = "68a91829"

HKEY_CURRENT_USER\Software\Afqteuv
W2_294 = "88e73c"

HKEY_CURRENT_USER\Software\Afqteuv
W3_294 = "98393c3"

HKEY_CURRENT_USER\Software\Afqteuv
W4_294 = "88f9ea"

HKEY_CURRENT_USER\Software\Afqteuv
W1_295 = "5dd8aeff"

HKEY_CURRENT_USER\Software\Afqteuv
W2_295 = "6aed78ac"

HKEY_CURRENT_USER\Software\Afqteuv
W3_295 = "6bee968"

HKEY_CURRENT_USER\Software\Afqteuv
W4_295 = "6aed6341"

HKEY_CURRENT_USER\Software\Afqteuv
W1_296 = "4821f5b"

HKEY_CURRENT_USER\Software\Afqteuv
W2_296 = "cd59d6ff"

HKEY_CURRENT_USER\Software\Afqteuv
W3_296 = "cc5aa6b1"

HKEY_CURRENT_USER\Software\Afqteuv
W4_296 = "cd59cc98"

HKEY_CURRENT_USER\Software\Afqteuv
W1_297 = "5ed14b52"

HKEY_CURRENT_USER\Software\Afqteuv
W2_297 = "2fc616f6"

HKEY_CURRENT_USER\Software\Afqteuv
W3_297 = "2ec55fc6"

HKEY_CURRENT_USER\Software\Afqteuv
W4_297 = "2fc635ef"

HKEY_CURRENT_USER\Software\Afqteuv
W1_298 = "14aabf1f"

HKEY_CURRENT_USER\Software\Afqteuv
W2_298 = "92328895"

HKEY_CURRENT_USER\Software\Afqteuv
W3_298 = "9331f56f"

HKEY_CURRENT_USER\Software\Afqteuv
W4_298 = "92329f46"

HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\
WBEM\WDM
%System%\advapi32.dll[MofResourceName] = "{random characters}"

It modifies the following registry entries:

HKEY_CURRENT_USER\Software\Microsoft\
Windows\CurrentVersion\Explorer\
Advanced
Hidden = "2"

(Note: The default value data of the said registry entry is 2.)

HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\
Security Center
AntiVirusOverride = "1"

HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\
Security Center
AntiVirusDisableNotify = "1"

HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\
Security Center
FirewallDisableNotify = "1"

HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\
Security Center
FirewallOverride = "1"

HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\
Security Center
UpdatesDisableNotify = "1"

HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\
Internet Explorer\Main
Default_Page_URL = "http://h1.{BLOCKED}y.com/poojasharma/index.html"

(Note: The default value data of the said registry entry is http://www.microsoft.com/isapi/redir.dll?prd=ie&pver=6&ar=msnhome.)

HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\
Internet Explorer\Main
Default_Search_URL = "http://h1.{BLOCKED}y.com/poojasharma/index.html"

(Note: The default value data of the said registry entry is http://www.microsoft.com/isapi/redir.dll?prd=ie&ar=iesearch.)

HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\
Internet Explorer\Main
Search Page = "http://h1.{BLOCKED}y.com/poojasharma/index.html"

(Note: The default value data of the said registry entry is http://www.microsoft.com/isapi/redir.dll?prd=ie&ar=iesearch.)

HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\
Internet Explorer\Main
Start Page = "http://h1.{BLOCKED}y.com/poojasharma/index.html"

(Note: The default value data of the said registry entry is http://www.microsoft.com/isapi/redir.dll?prd={SUB_PRD}&clcid={SUB_CLSID}&pver={SUB_PVER}&ar=home.)

HKEY_CURRENT_USER\Software\Microsoft\
Internet Explorer\Main
Start Page = "http://h1.{BLOCKED}y.com/poojasharma/index.html"

(Note: The default value data of the said registry entry is http://www.microsoft.com/isapi/redir.dll?prd=ie&pver=6&ar=msnhome.)

It creates the following registry entry(ies) to disable Task Manager, Registry Tools and Folder Options:

HKEY_CURRENT_USER\Software\Microsoft\
Windows\CurrentVersion\Policies\
Explorer
NofolderOptions = "1"

HKEY_CURRENT_USER\Software\Microsoft\
Windows\CurrentVersion\Policies\
System
DisableTaskMgr = "1"

HKEY_CURRENT_USER\Software\Microsoft\
Windows\CurrentVersion\Policies\
System
DisableRegistryTools = "1"

It deletes the following registry keys:

HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\
Control\SafeBoot\Minimal\
AppMgmt

HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\
Control\SafeBoot\Minimal\
Base

HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\
Control\SafeBoot\Minimal\
Boot Bus Extender

HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\
Control\SafeBoot\Minimal\
Boot file system

HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\
Control\SafeBoot\Minimal\
CryptSvc

HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\
Control\SafeBoot\Minimal\
DcomLaunch

HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\
Control\SafeBoot\Minimal\
dmadmin

HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\
Control\SafeBoot\Minimal\
dmboot.sys

HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\
Control\SafeBoot\Minimal\
dmio.sys

HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\
Control\SafeBoot\Minimal\
dmload.sys

HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\
Control\SafeBoot\Minimal\
dmserver

HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\
Control\SafeBoot\Minimal\
EventLog

HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\
Control\SafeBoot\Minimal\
File system

HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\
Control\SafeBoot\Minimal\
Filter

HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\
Control\SafeBoot\Minimal\
HelpSvc

HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\
Control\SafeBoot\Minimal\
Netlogon

HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\
Control\SafeBoot\Minimal\
PCI Configuration

HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\
Control\SafeBoot\Minimal\
PlugPlay

HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\
Control\SafeBoot\Minimal\
PNP Filter

HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\
Control\SafeBoot\Minimal\
Primary disk

HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\
Control\SafeBoot\Minimal\
RpcSs

HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\
Control\SafeBoot\Minimal\
SCSI Class

HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\
Control\SafeBoot\Minimal\
sermouse.sys

HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\
Control\SafeBoot\Minimal\
sr.sys

HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\
Control\SafeBoot\Minimal\
SRService

HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\
Control\SafeBoot\Minimal\
System Bus Extender

HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\
Control\SafeBoot\Minimal\
vga.sys

HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\
Control\SafeBoot\Minimal\
vgasave.sys

HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\
Control\SafeBoot\Minimal\
WinMgmt

HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\
Control\SafeBoot\Minimal\
{36FC9E60-C465-11CF-8056-444553540000}

HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\
Control\SafeBoot\Minimal\
{4D36E965-E325-11CE-BFC1-08002BE10318}

HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\
Control\SafeBoot\Minimal\
{4D36E967-E325-11CE-BFC1-08002BE10318}

HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\
Control\SafeBoot\Minimal\
{4D36E969-E325-11CE-BFC1-08002BE10318}

HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\
Control\SafeBoot\Minimal\
{4D36E96A-E325-11CE-BFC1-08002BE10318}

HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\
Control\SafeBoot\Minimal\
{4D36E96B-E325-11CE-BFC1-08002BE10318}

HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\
Control\SafeBoot\Minimal\
{4D36E96F-E325-11CE-BFC1-08002BE10318}

HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\
Control\SafeBoot\Minimal\
{4D36E977-E325-11CE-BFC1-08002BE10318}

HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\
Control\SafeBoot\Minimal\
{4D36E97B-E325-11CE-BFC1-08002BE10318}

HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\
Control\SafeBoot\Minimal\
{4D36E97D-E325-11CE-BFC1-08002BE10318}

HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\
Control\SafeBoot\Minimal\
{4D36E980-E325-11CE-BFC1-08002BE10318}

HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\
Control\SafeBoot\Minimal\
{71A27CDD-812A-11D0-BEC7-08002BE2092F}

HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\
Control\SafeBoot\Minimal\
{745A17A0-74D3-11D0-B6FE-00A0C90F57DA}

HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\
Control\SafeBoot\Minimal

HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\
Control\SafeBoot\Network\
AFD

HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\
Control\SafeBoot\Network\
AppMgmt

HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\
Control\SafeBoot\Network\
Base

HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\
Control\SafeBoot\Network\
Boot Bus Extender

HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\
Control\SafeBoot\Network\
Boot file system

HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\
Control\SafeBoot\Network\
Browser

HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\
Control\SafeBoot\Network\
CryptSvc

HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\
Control\SafeBoot\Network\
DcomLaunch

HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\
Control\SafeBoot\Network\
Dhcp

HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\
Control\SafeBoot\Network\
dmadmin

HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\
Control\SafeBoot\Network\
dmboot.sys

HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\
Control\SafeBoot\Network\
dmio.sys

HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\
Control\SafeBoot\Network\
dmload.sys

HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\
Control\SafeBoot\Network\
dmserver

HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\
Control\SafeBoot\Network\
DnsCache

HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\
Control\SafeBoot\Network\
EventLog

HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\
Control\SafeBoot\Network\
File system

HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\
Control\SafeBoot\Network\
Filter

HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\
Control\SafeBoot\Network\
HelpSvc

HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\
Control\SafeBoot\Network\
ip6fw.sys

HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\
Control\SafeBoot\Network\
ipnat.sys

HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\
Control\SafeBoot\Network\
LanmanServer

HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\
Control\SafeBoot\Network\
LanmanWorkstation

HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\
Control\SafeBoot\Network\
LmHosts

HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\
Control\SafeBoot\Network\
Messenger

HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\
Control\SafeBoot\Network\
NDIS

HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\
Control\SafeBoot\Network\
NDIS Wrapper

HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\
Control\SafeBoot\Network\
Ndisuio

HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\
Control\SafeBoot\Network\
NetBIOS

HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\
Control\SafeBoot\Network\
NetBIOSGroup

HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\
Control\SafeBoot\Network\
NetBT

HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\
Control\SafeBoot\Network\
NetDDEGroup

HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\
Control\SafeBoot\Network\
Netlogon

HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\
Control\SafeBoot\Network\
NetMan

HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\
Control\SafeBoot\Network\
Network

HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\
Control\SafeBoot\Network\
NetworkProvider

HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\
Control\SafeBoot\Network\
NtLmSsp

HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\
Control\SafeBoot\Network\
PCI Configuration

HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\
Control\SafeBoot\Network\
PlugPlay

HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\
Control\SafeBoot\Network\
PNP Filter

HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\
Control\SafeBoot\Network\
PNP_TDI

HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\
Control\SafeBoot\Network\
Primary disk

HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\
Control\SafeBoot\Network\
rdpcdd.sys

HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\
Control\SafeBoot\Network\
rdpdd.sys

HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\
Control\SafeBoot\Network\
rdpwd.sys

HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\
Control\SafeBoot\Network\
rdsessmgr

HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\
Control\SafeBoot\Network\
RpcSs

HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\
Control\SafeBoot\Network\
SCSI Class

HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\
Control\SafeBoot\Network\
sermouse.sys

HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\
Control\SafeBoot\Network\
SharedAccess

HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\
Control\SafeBoot\Network\
sr.sys

HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\
Control\SafeBoot\Network\
SRService

HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\
Control\SafeBoot\Network\
Streams Drivers

HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\
Control\SafeBoot\Network\
System Bus Extender

HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\
Control\SafeBoot\Network\
Tcpip

HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\
Control\SafeBoot\Network\
TDI

HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\
Control\SafeBoot\Network\
tdpipe.sys

HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\
Control\SafeBoot\Network\
tdtcp.sys

HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\
Control\SafeBoot\Network\
termservice

HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\
Control\SafeBoot\Network\
vga.sys

HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\
Control\SafeBoot\Network\
vgasave.sys

HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\
Control\SafeBoot\Network\
WinMgmt

HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\
Control\SafeBoot\Network\
WZCSVC

HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\
Control\SafeBoot\Network\
{36FC9E60-C465-11CF-8056-444553540000}

HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\
Control\SafeBoot\Network\
{4D36E965-E325-11CE-BFC1-08002BE10318}

HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\
Control\SafeBoot\Network\
{4D36E967-E325-11CE-BFC1-08002BE10318}

HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\
Control\SafeBoot\Network\
{4D36E969-E325-11CE-BFC1-08002BE10318}

HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\
Control\SafeBoot\Network\
{4D36E96A-E325-11CE-BFC1-08002BE10318}

HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\
Control\SafeBoot\Network\
{4D36E96B-E325-11CE-BFC1-08002BE10318}

HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\
Control\SafeBoot\Network\
{4D36E96F-E325-11CE-BFC1-08002BE10318}

HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\
Control\SafeBoot\Network\
{4D36E972-E325-11CE-BFC1-08002BE10318}

HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\
Control\SafeBoot\Network\
{4D36E973-E325-11CE-BFC1-08002BE10318}

HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\
Control\SafeBoot\Network\
{4D36E974-E325-11CE-BFC1-08002BE10318}

HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\
Control\SafeBoot\Network\
{4D36E975-E325-11CE-BFC1-08002BE10318}

HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\
Control\SafeBoot\Network\
{4D36E977-E325-11CE-BFC1-08002BE10318}

HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\
Control\SafeBoot\Network\
{4D36E97B-E325-11CE-BFC1-08002BE10318}

HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\
Control\SafeBoot\Network\
{4D36E97D-E325-11CE-BFC1-08002BE10318}

HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\
Control\SafeBoot\Network\
{4D36E980-E325-11CE-BFC1-08002BE10318}

HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\
Control\SafeBoot\Network\
{71A27CDD-812A-11D0-BEC7-08002BE2092F}

HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\
Control\SafeBoot\Network\
{745A17A0-74D3-11D0-B6FE-00A0C90F57DA}

HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\
Control\SafeBoot\Network

Dropping Routine

This worm drops the following files:

• %System%\jo207388.dl_
• %System Root%\KUKU406beta
• %System%\uo714168.dl_
• E:\KUKU406beta
• %System%\xf207388.dl_
• F:\KUKU406beta
• G:\KUKU406beta
• H:\KUKU406beta
• I:\KUKU406beta
• J:\KUKU406beta
• K:\KUKU406beta
• L:\KUKU406beta
• M:\KUKU406beta
• N:\KUKU406beta
• %System%\drivers\ilfut.sys
• O:\KUKU406beta
• P:\KUKU406beta
• Q:\KUKU406beta
• R:\KUKU406beta
• S:\KUKU406beta
• T:\KUKU406beta
• U:\KUKU406beta
• V:\KUKU406beta
• W:\KUKU406beta
• X:\KUKU406beta
• Y:\KUKU406beta
• Z:\KUKU406beta
• VMWARE SHARED FOLDERS\KUKU406beta
• MICROSOFT TERMINAL SERVICES\KUKU406beta
• MICROSOFT WINDOWS NETWORK\KUKU406beta
• WORKGROUP\KUKU406beta
• WEB CLIENT NETWORK\KUKU406beta

(Note: %System% is the Windows system folder, which is usually C:\Windows\System on Windows 98 and ME, C:\WINNT\System32 on Windows NT and 2000, or C:\Windows\System32 on Windows XP and Server 2003.. %System Root% is the root folder, which is usually C:\. It is also where the operating system is located.)

Other Details

This worm connects to the following possibly malicious URL:

• http://pelcpawel.{BLOCKED}m.interia.pl/logos.gif?a6de=256308
• http://{BLOCKED}good24.com/?{random characters}
• http://13ca6.{BLOCKED}good24.com/?13ca6=81062&id=4117118979
• http://{BLOCKED}tara.com/logof.gif?13ca6=810620
• http://{BLOCKED}egood24.com/?{random characters}
• http://{BLOCKED}lie.com/images/logos.gif?18121=690151
• http://h1.{BLOCKED}y.com/poojasharma1/setting.ini
• http://{BLOCKED}nt-eg.com/images/logosa.gif?1c82d=934248
• http://h1.{BLOCKED}y.com/poojasharma2/setting.ini

This report is generated via an automated analysis system.