WORM_VB.CKH
Virus:Win32/Sality.AU (Microsoft); W32/Sality.gen.z (McAfee); Infostealer.QQRob.A (Symantec); Virus.Win32.Texel.j (Kaspersky); Virus.Win32.Sality.at (v) (Sunbelt); Win32/Sality (AVG)
Windows 2000, Windows XP, Windows Server 2003
![](/vinfo/imgFiles/legend.jpg)
Threat Type: Worm
Destructiveness: No
Encrypted:
In the wild: Yes
OVERVIEW
This worm arrives on a system as a file dropped by other malware or as a file downloaded unknowingly by users when visiting malicious sites.
It disables Task Manager, Registry Editor, and Folder Options.
TECHNICAL DETAILS
Arrival Details
This worm arrives on a system as a file dropped by other malware or as a file downloaded unknowingly by users when visiting malicious sites.
Autostart Technique
This worm adds the following registry entries to enable its automatic execution at every system startup:
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\
Windows\CurrentVersion\Run
ASocksrv = "SocksA.exe"
Other System Modifications
This worm deletes the following files:
- %User Temp%\duth.exe
(Note: %User Temp% is the current user's Temp folder, which is usually C:\Documents and Settings\{user name}\Local Settings\Temp on Windows 2000, XP, and Server 2003, or C:\Users\{user name}\AppData\Local\Temp on Windows Vista and 7.)
It adds the following registry keys:
HKEY_CURRENT_USER\Software\Microsoft\
Windows\CurrentVersion\policies\
system
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\
Security Center\Svc
HKEY_CURRENT_USER\Software\Afqteuv\
1926745233
It adds the following registry entries:
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\
Security Center
UacDisableNotify = "1"
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\
Security Center\Svc
AntiVirusOverride = "1"
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\
Security Center\Svc
AntiVirusDisableNotify = "1"
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\
Security Center\Svc
FirewallDisableNotify = "1"
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\
Security Center\Svc
FirewallOverride = "1"
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\
Security Center\Svc
UpdatesDisableNotify = "1"
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\
Security Center\Svc
UacDisableNotify = "1"
HKEY_CURRENT_USER\Software\Microsoft\
Windows\CurrentVersion\Internet Settings
GlobalUserOffline = "0"
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\
Windows\CurrentVersion\policies\
system
EnableLUA = "0"
HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\
Services\SharedAccess\Parameters\
FirewallPolicy\StandardProfile\AuthorizedApplications\
List
{malware path and file name} = "{malware path and file name}:*:enabled:ipsec"
HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\
Services\SharedAccess\Parameters\
FirewallPolicy\StandardProfile
EnableFirewall = "0"
HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\
Services\SharedAccess\Parameters\
FirewallPolicy\StandardProfile
DoNotAllowExceptions = "0"
HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\
Services\SharedAccess\Parameters\
FirewallPolicy\StandardProfile
DisableNotifications = "1"
HKEY_CURRENT_USER\Software\Afqteuv\
1926745233
1651272023 = "79"
HKEY_CURRENT_USER\Software\Afqteuv\
1926745233
-992423250 = "0"
HKEY_CURRENT_USER\Software\Afqteuv\
1926745233
658848773 = "0"
HKEY_CURRENT_USER\Software\Afqteuv\
1926745233
-1984846500 = "23"
HKEY_CURRENT_USER\Software\Afqteuv\
1926745233
-333574477 = "183"
HKEY_CURRENT_USER\Software\Afqteuv\
1926745233
1317697546 = "{random characters}"
HKEY_CURRENT_USER\Software\Afqteuv\
1926745233
-1325997727 = "{random characters}"
HKEY_CURRENT_USER\Software\Afqteuv
W1_0 = "c4a71155"
HKEY_CURRENT_USER\Software\Afqteuv
W2_0 = "2668"
HKEY_CURRENT_USER\Software\Afqteuv
W3_0 = "136a29"
HKEY_CURRENT_USER\Software\Afqteuv
W4_0 = "0"
HKEY_CURRENT_USER\Software\Afqteuv
W1_1 = "abe191f"
HKEY_CURRENT_USER\Software\Afqteuv
W2_1 = "626c7ed5"
HKEY_CURRENT_USER\Software\Afqteuv
W3_1 = "636f37e"
HKEY_CURRENT_USER\Software\Afqteuv
W4_1 = "626c6957"
HKEY_CURRENT_USER\Software\Afqteuv
W1_2 = "1947ca67"
HKEY_CURRENT_USER\Software\Afqteuv
W2_2 = "c4d8f32"
HKEY_CURRENT_USER\Software\Afqteuv
W3_2 = "c5dbb887"
HKEY_CURRENT_USER\Software\Afqteuv
W4_2 = "c4d8d2ae"
HKEY_CURRENT_USER\Software\Afqteuv
W1_3 = "ba3c555"
HKEY_CURRENT_USER\Software\Afqteuv
W2_3 = "274519cf"
HKEY_CURRENT_USER\Software\Afqteuv
W3_3 = "2646562c"
HKEY_CURRENT_USER\Software\Afqteuv
W4_3 = "27453c5"
HKEY_CURRENT_USER\Software\Afqteuv
W1_4 = "8cf11d"
HKEY_CURRENT_USER\Software\Afqteuv
W2_4 = "89b1b2d9"
HKEY_CURRENT_USER\Software\Afqteuv
W3_4 = "88b2cf75"
HKEY_CURRENT_USER\Software\Afqteuv
W4_4 = "89b1a55c"
HKEY_CURRENT_USER\Software\Afqteuv
W1_5 = "ca8351e"
HKEY_CURRENT_USER\Software\Afqteuv
W2_5 = "ec1e1f44"
HKEY_CURRENT_USER\Software\Afqteuv
W3_5 = "ed1d649a"
HKEY_CURRENT_USER\Software\Afqteuv
W4_5 = "ec1eeb3"
HKEY_CURRENT_USER\Software\Afqteuv
W1_6 = "573a242"
HKEY_CURRENT_USER\Software\Afqteuv
W2_6 = "4e8a67e8"
HKEY_CURRENT_USER\Software\Afqteuv
W3_6 = "4f891223"
HKEY_CURRENT_USER\Software\Afqteuv
W4_6 = "4e8a78a"
HKEY_CURRENT_USER\Software\Afqteuv
W1_7 = "3d23738"
HKEY_CURRENT_USER\Software\Afqteuv
W2_7 = "bf6fc7c"
HKEY_CURRENT_USER\Software\Afqteuv
W3_7 = "b1f58b48"
HKEY_CURRENT_USER\Software\Afqteuv
W4_7 = "bf6e161"
HKEY_CURRENT_USER\Software\Afqteuv
W1_8 = "28a32e1"
HKEY_CURRENT_USER\Software\Afqteuv
W2_8 = "1363569c"
HKEY_CURRENT_USER\Software\Afqteuv
W3_8 = "126291"
HKEY_CURRENT_USER\Software\Afqteuv
W4_8 = "13634ab8"
HKEY_CURRENT_USER\Software\Afqteuv
W1_9 = "d9a9825f"
HKEY_CURRENT_USER\Software\Afqteuv
W2_9 = "75cf92d8"
HKEY_CURRENT_USER\Software\Afqteuv
W3_9 = "74ccde26"
HKEY_CURRENT_USER\Software\Afqteuv
W4_9 = "75cfb4f"
HKEY_CURRENT_USER\Software\Afqteuv
W1_10 = "e3a777b5"
HKEY_CURRENT_USER\Software\Afqteuv
W2_10 = "d83c3c5"
HKEY_CURRENT_USER\Software\Afqteuv
W3_10 = "d93f774f"
HKEY_CURRENT_USER\Software\Afqteuv
W4_10 = "d83c1d66"
HKEY_CURRENT_USER\Software\Afqteuv
W1_11 = "b42eff61"
HKEY_CURRENT_USER\Software\Afqteuv
W2_11 = "3aa8994a"
HKEY_CURRENT_USER\Software\Afqteuv
W3_11 = "3babec94"
HKEY_CURRENT_USER\Software\Afqteuv
W4_11 = "3aa886bd"
HKEY_CURRENT_USER\Software\Afqteuv
W1_12 = "de37bd59"
HKEY_CURRENT_USER\Software\Afqteuv
W2_12 = "9d14e985"
HKEY_CURRENT_USER\Software\Afqteuv
W3_12 = "9c179a3d"
HKEY_CURRENT_USER\Software\Afqteuv
W4_12 = "9d14f14"
HKEY_CURRENT_USER\Software\Afqteuv
W1_13 = "8f1ec3a"
HKEY_CURRENT_USER\Software\Afqteuv
W2_13 = "ff8178e5"
HKEY_CURRENT_USER\Software\Afqteuv
W3_13 = "fe823342"
HKEY_CURRENT_USER\Software\Afqteuv
W4_13 = "ff81596b"
HKEY_CURRENT_USER\Software\Afqteuv
W1_14 = "9c8d285"
HKEY_CURRENT_USER\Software\Afqteuv
W2_14 = "61edd89"
HKEY_CURRENT_USER\Software\Afqteuv
W3_14 = "6eea8eb"
HKEY_CURRENT_USER\Software\Afqteuv
W4_14 = "61edc2c2"
HKEY_CURRENT_USER\Software\Afqteuv
W1_15 = "cc8d4455"
HKEY_CURRENT_USER\Software\Afqteuv
W2_15 = "c45a3776"
HKEY_CURRENT_USER\Software\Afqteuv
W3_15 = "c559463"
HKEY_CURRENT_USER\Software\Afqteuv
W4_15 = "c45a2c19"
HKEY_CURRENT_USER\Software\Afqteuv
W1_16 = "77aff53e"
HKEY_CURRENT_USER\Software\Afqteuv
W2_16 = "26c6836"
HKEY_CURRENT_USER\Software\Afqteuv
W3_16 = "27c5ff59"
HKEY_CURRENT_USER\Software\Afqteuv
W4_16 = "26c6957"
HKEY_CURRENT_USER\Software\Afqteuv
W1_17 = "6eafb446"
HKEY_CURRENT_USER\Software\Afqteuv
W2_17 = "8932e2a2"
HKEY_CURRENT_USER\Software\Afqteuv
W3_17 = "883194ee"
HKEY_CURRENT_USER\Software\Afqteuv
W4_17 = "8932fec7"
HKEY_CURRENT_USER\Software\Afqteuv
W1_18 = "ba4e1149"
HKEY_CURRENT_USER\Software\Afqteuv
W2_18 = "eb9f7ef1"
HKEY_CURRENT_USER\Software\Afqteuv
W3_18 = "ea9c237"
HKEY_CURRENT_USER\Software\Afqteuv
W4_18 = "eb9f681e"
HKEY_CURRENT_USER\Software\Afqteuv
W1_19 = "f3e1ff2c"
HKEY_CURRENT_USER\Software\Afqteuv
W2_19 = "4ebc65"
HKEY_CURRENT_USER\Software\Afqteuv
W3_19 = "4f8bb5c"
HKEY_CURRENT_USER\Software\Afqteuv
W4_19 = "4ebd175"
HKEY_CURRENT_USER\Software\Afqteuv
W1_20 = "866d6f2"
HKEY_CURRENT_USER\Software\Afqteuv
W2_20 = "b7827d3"
HKEY_CURRENT_USER\Software\Afqteuv
W3_20 = "b17b5e5"
HKEY_CURRENT_USER\Software\Afqteuv
W4_20 = "b783acc"
HKEY_CURRENT_USER\Software\Afqteuv
W1_21 = "a2e172"
HKEY_CURRENT_USER\Software\Afqteuv
W2_21 = "12e48ef"
HKEY_CURRENT_USER\Software\Afqteuv
W3_21 = "13e7cea"
HKEY_CURRENT_USER\Software\Afqteuv
W4_21 = "12e4a423"
HKEY_CURRENT_USER\Software\Afqteuv
W1_22 = "51f71ae"
HKEY_CURRENT_USER\Software\Afqteuv
W2_22 = "755112f5"
HKEY_CURRENT_USER\Software\Afqteuv
W3_22 = "74526753"
HKEY_CURRENT_USER\Software\Afqteuv
W4_22 = "7551d7a"
HKEY_CURRENT_USER\Software\Afqteuv
W1_23 = "8d66485"
HKEY_CURRENT_USER\Software\Afqteuv
W2_23 = "d7bd6dbe"
HKEY_CURRENT_USER\Software\Afqteuv
W3_23 = "d6be1cf8"
HKEY_CURRENT_USER\Software\Afqteuv
W4_23 = "d7bd76d1"
HKEY_CURRENT_USER\Software\Afqteuv
W1_24 = "483695e"
HKEY_CURRENT_USER\Software\Afqteuv
W2_24 = "3a29faf2"
HKEY_CURRENT_USER\Software\Afqteuv
W3_24 = "3b2a8a1"
HKEY_CURRENT_USER\Software\Afqteuv
W4_24 = "3a29e28"
HKEY_CURRENT_USER\Software\Afqteuv
W1_25 = "38131638"
HKEY_CURRENT_USER\Software\Afqteuv
W2_25 = "9c96551a"
HKEY_CURRENT_USER\Software\Afqteuv
W3_25 = "9d952356"
HKEY_CURRENT_USER\Software\Afqteuv
W4_25 = "9c96497f"
HKEY_CURRENT_USER\Software\Afqteuv
W1_26 = "dc54bc83"
HKEY_CURRENT_USER\Software\Afqteuv
W2_26 = "ff29351"
HKEY_CURRENT_USER\Software\Afqteuv
W3_26 = "fe1d8ff"
HKEY_CURRENT_USER\Software\Afqteuv
W4_26 = "ff2b2d6"
HKEY_CURRENT_USER\Software\Afqteuv
W1_27 = "5fec6189"
HKEY_CURRENT_USER\Software\Afqteuv
W2_27 = "616f39e7"
HKEY_CURRENT_USER\Software\Afqteuv
W3_27 = "66c764"
HKEY_CURRENT_USER\Software\Afqteuv
W4_27 = "616f1c2d"
HKEY_CURRENT_USER\Software\Afqteuv
W1_28 = "85caac1"
HKEY_CURRENT_USER\Software\Afqteuv
W2_28 = "c3db9835"
HKEY_CURRENT_USER\Software\Afqteuv
W3_28 = "c2d8efad"
HKEY_CURRENT_USER\Software\Afqteuv
W4_28 = "c3db8584"
HKEY_CURRENT_USER\Software\Afqteuv
W1_29 = "9b645e99"
HKEY_CURRENT_USER\Software\Afqteuv
W2_29 = "2647fb4"
HKEY_CURRENT_USER\Software\Afqteuv
W3_29 = "274484f2"
HKEY_CURRENT_USER\Software\Afqteuv
W4_29 = "2647eedb"
HKEY_CURRENT_USER\Software\Afqteuv
W1_30 = "19a1762"
HKEY_CURRENT_USER\Software\Afqteuv
W2_30 = "88b44112"
HKEY_CURRENT_USER\Software\Afqteuv
W3_30 = "89b7321b"
HKEY_CURRENT_USER\Software\Afqteuv
W4_30 = "88b45832"
HKEY_CURRENT_USER\Software\Afqteuv
W1_31 = "1bb74cc"
HKEY_CURRENT_USER\Software\Afqteuv
W2_31 = "eb2ecf"
HKEY_CURRENT_USER\Software\Afqteuv
W3_31 = "ea23aba"
HKEY_CURRENT_USER\Software\Afqteuv
W4_31 = "eb2c189"
HKEY_CURRENT_USER\Software\Afqteuv
W1_32 = "5bcf582"
HKEY_CURRENT_USER\Software\Afqteuv
W2_32 = "4d8d31bd"
HKEY_CURRENT_USER\Software\Afqteuv
W3_32 = "4c8e4c9"
HKEY_CURRENT_USER\Software\Afqteuv
W4_32 = "4d8d2ae"
HKEY_CURRENT_USER\Software\Afqteuv
W1_33 = "3322a9a"
HKEY_CURRENT_USER\Software\Afqteuv
W2_33 = "aff98889"
HKEY_CURRENT_USER\Software\Afqteuv
W3_33 = "aefafe1e"
HKEY_CURRENT_USER\Software\Afqteuv
W4_33 = "aff99437"
HKEY_CURRENT_USER\Software\Afqteuv
W1_34 = "987df4c"
HKEY_CURRENT_USER\Software\Afqteuv
W2_34 = "1265e378"
HKEY_CURRENT_USER\Software\Afqteuv
W3_34 = "136697a7"
HKEY_CURRENT_USER\Software\Afqteuv
W4_34 = "1265fd8e"
HKEY_CURRENT_USER\Software\Afqteuv
W1_35 = "6c3cc893"
HKEY_CURRENT_USER\Software\Afqteuv
W2_35 = "74d2442e"
HKEY_CURRENT_USER\Software\Afqteuv
W3_35 = "75d1ccc"
HKEY_CURRENT_USER\Software\Afqteuv
W4_35 = "74d266e5"
HKEY_CURRENT_USER\Software\Afqteuv
W1_36 = "afac8bee"
HKEY_CURRENT_USER\Software\Afqteuv
W2_36 = "d73ece31"
HKEY_CURRENT_USER\Software\Afqteuv
W3_36 = "d63dba15"
HKEY_CURRENT_USER\Software\Afqteuv
W4_36 = "d73ed3c"
HKEY_CURRENT_USER\Software\Afqteuv
W1_37 = "88c3edf1"
HKEY_CURRENT_USER\Software\Afqteuv
W2_37 = "39ab2297"
HKEY_CURRENT_USER\Software\Afqteuv
W3_37 = "38a853ba"
HKEY_CURRENT_USER\Software\Afqteuv
W4_37 = "39ab3993"
HKEY_CURRENT_USER\Software\Afqteuv
W1_38 = "8942bb3"
HKEY_CURRENT_USER\Software\Afqteuv
W2_38 = "9c17bfe1"
HKEY_CURRENT_USER\Software\Afqteuv
W3_38 = "9d14c8c3"
HKEY_CURRENT_USER\Software\Afqteuv
W4_38 = "9c17a2ea"
HKEY_CURRENT_USER\Software\Afqteuv
W1_39 = "27fec5"
HKEY_CURRENT_USER\Software\Afqteuv
W2_39 = "fe84186"
HKEY_CURRENT_USER\Software\Afqteuv
W3_39 = "ff876668"
HKEY_CURRENT_USER\Software\Afqteuv
W4_39 = "fe84c41"
HKEY_CURRENT_USER\Software\Afqteuv
W1_40 = "c8638d4"
HKEY_CURRENT_USER\Software\Afqteuv
W2_40 = "6f6fca"
HKEY_CURRENT_USER\Software\Afqteuv
W3_40 = "61f31fb1"
HKEY_CURRENT_USER\Software\Afqteuv
W4_40 = "6f7598"
HKEY_CURRENT_USER\Software\Afqteuv
W1_41 = "94caab2"
HKEY_CURRENT_USER\Software\Afqteuv
W2_41 = "c35cc689"
HKEY_CURRENT_USER\Software\Afqteuv
W3_41 = "c25fb4c6"
HKEY_CURRENT_USER\Software\Afqteuv
W4_41 = "c35cdeef"
HKEY_CURRENT_USER\Software\Afqteuv
W1_42 = "1794a1"
HKEY_CURRENT_USER\Software\Afqteuv
W2_42 = "25c95199"
HKEY_CURRENT_USER\Software\Afqteuv
W3_42 = "24ca226f"
HKEY_CURRENT_USER\Software\Afqteuv
W4_42 = "25c94846"
HKEY_CURRENT_USER\Software\Afqteuv
W1_43 = "aac954"
HKEY_CURRENT_USER\Software\Afqteuv
W2_43 = "8835aa4a"
HKEY_CURRENT_USER\Software\Afqteuv
W3_43 = "8936dbb4"
HKEY_CURRENT_USER\Software\Afqteuv
W4_43 = "8835b19d"
HKEY_CURRENT_USER\Software\Afqteuv
W1_44 = "c87e53d"
HKEY_CURRENT_USER\Software\Afqteuv
W2_44 = "eaa23b15"
HKEY_CURRENT_USER\Software\Afqteuv
W3_44 = "eba17dd"
HKEY_CURRENT_USER\Software\Afqteuv
W4_44 = "eaa21af4"
HKEY_CURRENT_USER\Software\Afqteuv
W1_45 = "cee312"
HKEY_CURRENT_USER\Software\Afqteuv
W2_45 = "4de93ac"
HKEY_CURRENT_USER\Software\Afqteuv
W3_45 = "4cdee62"
HKEY_CURRENT_USER\Software\Afqteuv
W4_45 = "4de844b"
HKEY_CURRENT_USER\Software\Afqteuv
W1_46 = "aa1ee2f"
HKEY_CURRENT_USER\Software\Afqteuv
W2_46 = "af7afbd7"
HKEY_CURRENT_USER\Software\Afqteuv
W3_46 = "ae79878b"
HKEY_CURRENT_USER\Software\Afqteuv
W4_46 = "af7aeda2"
HKEY_CURRENT_USER\Software\Afqteuv
W1_47 = "bc58de1"
HKEY_CURRENT_USER\Software\Afqteuv
W2_47 = "11e74ce5"
HKEY_CURRENT_USER\Software\Afqteuv
W3_47 = "1e43cd"
HKEY_CURRENT_USER\Software\Afqteuv
W4_47 = "11e756f9"
HKEY_CURRENT_USER\Software\Afqteuv
W1_48 = "6f7da86"
HKEY_CURRENT_USER\Software\Afqteuv
W2_48 = "7453e5b"
HKEY_CURRENT_USER\Software\Afqteuv
W3_48 = "755aa79"
HKEY_CURRENT_USER\Software\Afqteuv
W4_48 = "7453c5"
HKEY_CURRENT_USER\Software\Afqteuv
W1_49 = "a2e55fe"
HKEY_CURRENT_USER\Software\Afqteuv
W2_49 = "d6c92c"
HKEY_CURRENT_USER\Software\Afqteuv
W3_49 = "d7c3438e"
HKEY_CURRENT_USER\Software\Afqteuv
W4_49 = "d6c29a7"
HKEY_CURRENT_USER\Software\Afqteuv
W1_50 = "d22b719c"
HKEY_CURRENT_USER\Software\Afqteuv
W2_50 = "392c89a3"
HKEY_CURRENT_USER\Software\Afqteuv
W3_50 = "382ff8d7"
HKEY_CURRENT_USER\Software\Afqteuv
W4_50 = "392c92fe"
HKEY_CURRENT_USER\Software\Afqteuv
W1_51 = "f9e6fc97"
HKEY_CURRENT_USER\Software\Afqteuv
W2_51 = "9b98eadc"
HKEY_CURRENT_USER\Software\Afqteuv
W3_51 = "9a9b967c"
HKEY_CURRENT_USER\Software\Afqteuv
W4_51 = "9b98fc55"
HKEY_CURRENT_USER\Software\Afqteuv
W1_52 = "ce2e6412"
HKEY_CURRENT_USER\Software\Afqteuv
W2_52 = "fe57f29"
HKEY_CURRENT_USER\Software\Afqteuv
W3_52 = "ff6f85"
HKEY_CURRENT_USER\Software\Afqteuv
W4_52 = "fe565ac"
HKEY_CURRENT_USER\Software\Afqteuv
W1_53 = "2a299d5"
HKEY_CURRENT_USER\Software\Afqteuv
W2_53 = "671eed"
HKEY_CURRENT_USER\Software\Afqteuv
W3_53 = "6172a52a"
HKEY_CURRENT_USER\Software\Afqteuv
W4_53 = "671cf3"
HKEY_CURRENT_USER\Software\Afqteuv
W1_54 = "fda123"
HKEY_CURRENT_USER\Software\Afqteuv
W2_54 = "c2de2f9d"
HKEY_CURRENT_USER\Software\Afqteuv
W3_54 = "c3dd5273"
HKEY_CURRENT_USER\Software\Afqteuv
W4_54 = "c2de385a"
HKEY_CURRENT_USER\Software\Afqteuv
W1_55 = "4af7e1e4"
HKEY_CURRENT_USER\Software\Afqteuv
W2_55 = "254ab837"
HKEY_CURRENT_USER\Software\Afqteuv
W3_55 = "2449cb98"
HKEY_CURRENT_USER\Software\Afqteuv
W4_55 = "254aa1b1"
HKEY_CURRENT_USER\Software\Afqteuv
W1_56 = "be1ef472"
HKEY_CURRENT_USER\Software\Afqteuv
W2_56 = "87b71d4b"
HKEY_CURRENT_USER\Software\Afqteuv
W3_56 = "86b46121"
HKEY_CURRENT_USER\Software\Afqteuv
W4_56 = "87b7b8"
HKEY_CURRENT_USER\Software\Afqteuv
W1_57 = "4ae85e6"
HKEY_CURRENT_USER\Software\Afqteuv
W2_57 = "ea2369a2"
HKEY_CURRENT_USER\Software\Afqteuv
W3_57 = "eb21e76"
HKEY_CURRENT_USER\Software\Afqteuv
W4_57 = "ea23745f"
HKEY_CURRENT_USER\Software\Afqteuv
W1_58 = "8e3e41ee"
HKEY_CURRENT_USER\Software\Afqteuv
W2_58 = "4c8fc614"
HKEY_CURRENT_USER\Software\Afqteuv
W3_58 = "4d8cb79f"
HKEY_CURRENT_USER\Software\Afqteuv
W4_58 = "4c8fddb6"
HKEY_CURRENT_USER\Software\Afqteuv
W1_59 = "7e6d1443"
HKEY_CURRENT_USER\Software\Afqteuv
W2_59 = "aefc5e54"
HKEY_CURRENT_USER\Software\Afqteuv
W3_59 = "afff2d24"
HKEY_CURRENT_USER\Software\Afqteuv
W4_59 = "aefc47d"
HKEY_CURRENT_USER\Software\Afqteuv
W1_60 = "b57c273d"
HKEY_CURRENT_USER\Software\Afqteuv
W2_60 = "1168a93d"
HKEY_CURRENT_USER\Software\Afqteuv
W3_60 = "16bda4d"
HKEY_CURRENT_USER\Software\Afqteuv
W4_60 = "1168b64"
HKEY_CURRENT_USER\Software\Afqteuv
W1_61 = "7a86fe6"
HKEY_CURRENT_USER\Software\Afqteuv
W2_61 = "73d5eab"
HKEY_CURRENT_USER\Software\Afqteuv
W3_61 = "72d67392"
HKEY_CURRENT_USER\Software\Afqteuv
W4_61 = "73d519bb"
HKEY_CURRENT_USER\Software\Afqteuv
W1_62 = "1d2fea5e"
HKEY_CURRENT_USER\Software\Afqteuv
W2_62 = "d641aa7"
HKEY_CURRENT_USER\Software\Afqteuv
W3_62 = "d742e93b"
HKEY_CURRENT_USER\Software\Afqteuv
W4_62 = "d6418312"
HKEY_CURRENT_USER\Software\Afqteuv
W1_63 = "5f53953c"
HKEY_CURRENT_USER\Software\Afqteuv
W2_63 = "38adf1f4"
HKEY_CURRENT_USER\Software\Afqteuv
W3_63 = "39ae864"
HKEY_CURRENT_USER\Software\Afqteuv
W4_63 = "38adec69"
HKEY_CURRENT_USER\Software\Afqteuv
W1_64 = "5ad2ccbc"
HKEY_CURRENT_USER\Software\Afqteuv
W2_64 = "9b1a4294"
HKEY_CURRENT_USER\Software\Afqteuv
W3_64 = "9a193fe9"
HKEY_CURRENT_USER\Software\Afqteuv
W4_64 = "9b1a55c"
HKEY_CURRENT_USER\Software\Afqteuv
W1_65 = "418f5543"
HKEY_CURRENT_USER\Software\Afqteuv
W2_65 = "fd86a678"
HKEY_CURRENT_USER\Software\Afqteuv
W3_65 = "fc85d53e"
HKEY_CURRENT_USER\Software\Afqteuv
W4_65 = "fd86bf17"
HKEY_CURRENT_USER\Software\Afqteuv
W1_66 = "9487132"
HKEY_CURRENT_USER\Software\Afqteuv
W2_66 = "5ff332c8"
HKEY_CURRENT_USER\Software\Afqteuv
W3_66 = "5ef4247"
HKEY_CURRENT_USER\Software\Afqteuv
W4_66 = "5ff3286e"
HKEY_CURRENT_USER\Software\Afqteuv
W1_67 = "1eddb59c"
HKEY_CURRENT_USER\Software\Afqteuv
W2_67 = "c25f8a8d"
HKEY_CURRENT_USER\Software\Afqteuv
W3_67 = "c35cfbec"
HKEY_CURRENT_USER\Software\Afqteuv
W4_67 = "c25f91c5"
HKEY_CURRENT_USER\Software\Afqteuv
W1_68 = "663794a"
HKEY_CURRENT_USER\Software\Afqteuv
W2_68 = "24cbe56b"
HKEY_CURRENT_USER\Software\Afqteuv
W3_68 = "25c89135"
HKEY_CURRENT_USER\Software\Afqteuv
W4_68 = "24cbfb1c"
HKEY_CURRENT_USER\Software\Afqteuv
W1_69 = "8aaf593d"
HKEY_CURRENT_USER\Software\Afqteuv
W2_69 = "87387264"
HKEY_CURRENT_USER\Software\Afqteuv
W3_69 = "863be5a"
HKEY_CURRENT_USER\Software\Afqteuv
W4_69 = "87386473"
HKEY_CURRENT_USER\Software\Afqteuv
W1_70 = "4aa389"
HKEY_CURRENT_USER\Software\Afqteuv
W2_70 = "e9a4d71"
HKEY_CURRENT_USER\Software\Afqteuv
W3_70 = "e8a7a7e3"
HKEY_CURRENT_USER\Software\Afqteuv
W4_70 = "e9a4cdca"
HKEY_CURRENT_USER\Software\Afqteuv
W1_71 = "4d3b379a"
HKEY_CURRENT_USER\Software\Afqteuv
W2_71 = "4c111516"
HKEY_CURRENT_USER\Software\Afqteuv
W3_71 = "4d125d8"
HKEY_CURRENT_USER\Software\Afqteuv
W4_71 = "4c113721"
HKEY_CURRENT_USER\Software\Afqteuv
W1_72 = "7cf3491a"
HKEY_CURRENT_USER\Software\Afqteuv
W2_72 = "ae7dbc57"
HKEY_CURRENT_USER\Software\Afqteuv
W3_72 = "af7eca51"
HKEY_CURRENT_USER\Software\Afqteuv
W4_72 = "ae7da78"
HKEY_CURRENT_USER\Software\Afqteuv
W1_73 = "89d5e74"
HKEY_CURRENT_USER\Software\Afqteuv
W2_73 = "1ea114"
HKEY_CURRENT_USER\Software\Afqteuv
W3_73 = "11e963e6"
HKEY_CURRENT_USER\Software\Afqteuv
W4_73 = "1ea9cf"
HKEY_CURRENT_USER\Software\Afqteuv
W1_74 = "5df5587f"
HKEY_CURRENT_USER\Software\Afqteuv
W2_74 = "735657e1"
HKEY_CURRENT_USER\Software\Afqteuv
W3_74 = "725519f"
HKEY_CURRENT_USER\Software\Afqteuv
W4_74 = "73567326"
HKEY_CURRENT_USER\Software\Afqteuv
W1_75 = "a5f83933"
HKEY_CURRENT_USER\Software\Afqteuv
W2_75 = "d5c2cb4a"
HKEY_CURRENT_USER\Software\Afqteuv
W3_75 = "d4c1b654"
HKEY_CURRENT_USER\Software\Afqteuv
W4_75 = "d5c2dc7d"
HKEY_CURRENT_USER\Software\Afqteuv
W1_76 = "346ca7"
HKEY_CURRENT_USER\Software\Afqteuv
W2_76 = "382f583f"
HKEY_CURRENT_USER\Software\Afqteuv
W3_76 = "392c2ffd"
HKEY_CURRENT_USER\Software\Afqteuv
W4_76 = "382f45d4"
HKEY_CURRENT_USER\Software\Afqteuv
W1_77 = "43bf126d"
HKEY_CURRENT_USER\Software\Afqteuv
W2_77 = "9a9b8e6d"
HKEY_CURRENT_USER\Software\Afqteuv
W3_77 = "9b98c52"
HKEY_CURRENT_USER\Software\Afqteuv
W4_77 = "9a9baf2b"
HKEY_CURRENT_USER\Software\Afqteuv
W1_78 = "66586fcd"
HKEY_CURRENT_USER\Software\Afqteuv
W2_78 = "fd8e7e"
HKEY_CURRENT_USER\Software\Afqteuv
W3_78 = "fcb72ab"
HKEY_CURRENT_USER\Software\Afqteuv
W4_78 = "fd81882"
HKEY_CURRENT_USER\Software\Afqteuv
W1_79 = "2fd725"
HKEY_CURRENT_USER\Software\Afqteuv
W2_79 = "5f74a5ac"
HKEY_CURRENT_USER\Software\Afqteuv
W3_79 = "5e77ebf"
HKEY_CURRENT_USER\Software\Afqteuv
W4_79 = "5f7481d9"
HKEY_CURRENT_USER\Software\Afqteuv
W1_80 = "37bc9969"
HKEY_CURRENT_USER\Software\Afqteuv
W2_80 = "c1ef2eb"
HKEY_CURRENT_USER\Software\Afqteuv
W3_80 = "ce38119"
HKEY_CURRENT_USER\Software\Afqteuv
W4_80 = "c1eeb3"
HKEY_CURRENT_USER\Software\Afqteuv
W1_81 = "54616b3a"
HKEY_CURRENT_USER\Software\Afqteuv
W2_81 = "244d4a7"
HKEY_CURRENT_USER\Software\Afqteuv
W3_81 = "254e3eae"
HKEY_CURRENT_USER\Software\Afqteuv
W4_81 = "244d5487"
HKEY_CURRENT_USER\Software\Afqteuv
W1_82 = "d6a88865"
HKEY_CURRENT_USER\Software\Afqteuv
W2_82 = "86b9a5f9"
HKEY_CURRENT_USER\Software\Afqteuv
W3_82 = "87bad7f7"
HKEY_CURRENT_USER\Software\Afqteuv
W4_82 = "86b9bdde"
HKEY_CURRENT_USER\Software\Afqteuv
W1_83 = "892b666"
HKEY_CURRENT_USER\Software\Afqteuv
W2_83 = "e92638e"
HKEY_CURRENT_USER\Software\Afqteuv
W3_83 = "e8254d1c"
HKEY_CURRENT_USER\Software\Afqteuv
W4_83 = "e9262735"
HKEY_CURRENT_USER\Software\Afqteuv
W1_84 = "2652d445"
HKEY_CURRENT_USER\Software\Afqteuv
W2_84 = "4b928e3d"
HKEY_CURRENT_USER\Software\Afqteuv
W3_84 = "4a91faa5"
HKEY_CURRENT_USER\Software\Afqteuv
W4_84 = "4b9298c"
HKEY_CURRENT_USER\Software\Afqteuv
W1_85 = "6ab3bb7"
HKEY_CURRENT_USER\Software\Afqteuv
W2_85 = "adfee5c7"
HKEY_CURRENT_USER\Software\Afqteuv
W3_85 = "acfd93ca"
HKEY_CURRENT_USER\Software\Afqteuv
W4_85 = "adfef9e3"
HKEY_CURRENT_USER\Software\Afqteuv
W1_86 = "677ec5f2"
HKEY_CURRENT_USER\Software\Afqteuv
W2_86 = "16b7f41"
HKEY_CURRENT_USER\Software\Afqteuv
W3_86 = "1168913"
HKEY_CURRENT_USER\Software\Afqteuv
W4_86 = "16b633a"
HKEY_CURRENT_USER\Software\Afqteuv
W1_87 = "3bb47c8"
HKEY_CURRENT_USER\Software\Afqteuv
W2_87 = "72d7edd"
HKEY_CURRENT_USER\Software\Afqteuv
W3_87 = "73d4a6b8"
HKEY_CURRENT_USER\Software\Afqteuv
W4_87 = "72d7cc91"
HKEY_CURRENT_USER\Software\Afqteuv
W1_88 = "df36f3bc"
HKEY_CURRENT_USER\Software\Afqteuv
W2_88 = "d5442361"
HKEY_CURRENT_USER\Software\Afqteuv
W3_88 = "d4475fc1"
HKEY_CURRENT_USER\Software\Afqteuv
W4_88 = "d54435e8"
HKEY_CURRENT_USER\Software\Afqteuv
W1_89 = "4f3c49f1"
HKEY_CURRENT_USER\Software\Afqteuv
W2_89 = "37b86f9"
HKEY_CURRENT_USER\Software\Afqteuv
W3_89 = "36b3f516"
HKEY_CURRENT_USER\Software\Afqteuv
W4_89 = "37b9f3f"
HKEY_CURRENT_USER\Software\Afqteuv
W1_90 = "b91de1d8"
HKEY_CURRENT_USER\Software\Afqteuv
W2_90 = "9a1d1471"
HKEY_CURRENT_USER\Software\Afqteuv
W3_90 = "9b1e62bf"
HKEY_CURRENT_USER\Software\Afqteuv
W4_90 = "9a1d896"
HKEY_CURRENT_USER\Software\Afqteuv
W1_91 = "ac26b51"
HKEY_CURRENT_USER\Software\Afqteuv
W2_91 = "fc8951d6"
HKEY_CURRENT_USER\Software\Afqteuv
W3_91 = "fd8a1bc4"
HKEY_CURRENT_USER\Software\Afqteuv
W4_91 = "fc8971ed"
HKEY_CURRENT_USER\Software\Afqteuv
W1_92 = "653ec7f9"
HKEY_CURRENT_USER\Software\Afqteuv
W2_92 = "5ef5c1da"
HKEY_CURRENT_USER\Software\Afqteuv
W3_92 = "5ff6b16d"
HKEY_CURRENT_USER\Software\Afqteuv
W4_92 = "5ef5db44"
HKEY_CURRENT_USER\Software\Afqteuv
W1_93 = "7ad7b8f9"
HKEY_CURRENT_USER\Software\Afqteuv
W2_93 = "c1625d62"
HKEY_CURRENT_USER\Software\Afqteuv
W3_93 = "c612eb2"
HKEY_CURRENT_USER\Software\Afqteuv
W4_93 = "c162449b"
HKEY_CURRENT_USER\Software\Afqteuv
W1_94 = "f7568dab"
HKEY_CURRENT_USER\Software\Afqteuv
W2_94 = "23ceb272"
HKEY_CURRENT_USER\Software\Afqteuv
W3_94 = "22cdc7db"
HKEY_CURRENT_USER\Software\Afqteuv
W4_94 = "23ceadf2"
HKEY_CURRENT_USER\Software\Afqteuv
W1_95 = "c2d44b9d"
HKEY_CURRENT_USER\Software\Afqteuv
W2_95 = "863bab4"
HKEY_CURRENT_USER\Software\Afqteuv
W3_95 = "87387d6"
HKEY_CURRENT_USER\Software\Afqteuv
W4_95 = "863b1749"
HKEY_CURRENT_USER\Software\Afqteuv
W1_96 = "6d61e8dc"
HKEY_CURRENT_USER\Software\Afqteuv
W2_96 = "e8a79fcd"
HKEY_CURRENT_USER\Software\Afqteuv
W3_96 = "e9a4ea89"
HKEY_CURRENT_USER\Software\Afqteuv
W4_96 = "e8a78a"
HKEY_CURRENT_USER\Software\Afqteuv
W1_97 = "cc71a3e"
HKEY_CURRENT_USER\Software\Afqteuv
W2_97 = "4b13cada"
HKEY_CURRENT_USER\Software\Afqteuv
W3_97 = "4a183de"
HKEY_CURRENT_USER\Software\Afqteuv
W4_97 = "4b13e9f7"
HKEY_CURRENT_USER\Software\Afqteuv
W1_98 = "19ca2c18"
HKEY_CURRENT_USER\Software\Afqteuv
W2_98 = "ad848f9"
HKEY_CURRENT_USER\Software\Afqteuv
W3_98 = "ac833967"
HKEY_CURRENT_USER\Software\Afqteuv
W4_98 = "ad8534e"
HKEY_CURRENT_USER\Software\Afqteuv
W1_99 = "375a519"
HKEY_CURRENT_USER\Software\Afqteuv
W2_99 = "feca222"
HKEY_CURRENT_USER\Software\Afqteuv
W3_99 = "eefd68c"
HKEY_CURRENT_USER\Software\Afqteuv
W4_99 = "fecbca5"
HKEY_CURRENT_USER\Software\Afqteuv
W1_100 = "3d3c4da3"
HKEY_CURRENT_USER\Software\Afqteuv
W2_100 = "7259381"
HKEY_CURRENT_USER\Software\Afqteuv
W3_100 = "735a4fd5"
HKEY_CURRENT_USER\Software\Afqteuv
W4_100 = "725925fc"
HKEY_CURRENT_USER\Software\Afqteuv
W1_101 = "57e5fef"
HKEY_CURRENT_USER\Software\Afqteuv
W2_101 = "d4c5988"
HKEY_CURRENT_USER\Software\Afqteuv
W3_101 = "d5c6e57a"
HKEY_CURRENT_USER\Software\Afqteuv
W4_101 = "d4c58f53"
HKEY_CURRENT_USER\Software\Afqteuv
W1_102 = "5268c411"
HKEY_CURRENT_USER\Software\Afqteuv
W2_102 = "3731d8a1"
HKEY_CURRENT_USER\Software\Afqteuv
W3_102 = "36329283"
HKEY_CURRENT_USER\Software\Afqteuv
W4_102 = "3731f8aa"
HKEY_CURRENT_USER\Software\Afqteuv
W1_103 = "af188451"
HKEY_CURRENT_USER\Software\Afqteuv
W2_103 = "999e79b6"
HKEY_CURRENT_USER\Software\Afqteuv
W3_103 = "989d828"
HKEY_CURRENT_USER\Software\Afqteuv
W4_103 = "999e621"
HKEY_CURRENT_USER\Software\Afqteuv
W1_104 = "53abaee"
HKEY_CURRENT_USER\Software\Afqteuv
W2_104 = "fcad6e9"
HKEY_CURRENT_USER\Software\Afqteuv
W3_104 = "fd9a171"
HKEY_CURRENT_USER\Software\Afqteuv
W4_104 = "fcacb58"
HKEY_CURRENT_USER\Software\Afqteuv
W1_105 = "1becffb7"
HKEY_CURRENT_USER\Software\Afqteuv
W2_105 = "5e771165"
HKEY_CURRENT_USER\Software\Afqteuv
W3_105 = "5f745e86"
HKEY_CURRENT_USER\Software\Afqteuv
W4_105 = "5e7734af"
HKEY_CURRENT_USER\Software\Afqteuv
W1_106 = "2e28e85b"
HKEY_CURRENT_USER\Software\Afqteuv
W2_106 = "ce38971"
HKEY_CURRENT_USER\Software\Afqteuv
W3_106 = "c1ef42f"
HKEY_CURRENT_USER\Software\Afqteuv
W4_106 = "ce39e6"
HKEY_CURRENT_USER\Software\Afqteuv
W1_107 = "ce7ae1f"
HKEY_CURRENT_USER\Software\Afqteuv
W2_107 = "2351e4"
HKEY_CURRENT_USER\Software\Afqteuv
W3_107 = "22536d74"
HKEY_CURRENT_USER\Software\Afqteuv
W4_107 = "23575d"
HKEY_CURRENT_USER\Software\Afqteuv
W1_108 = "ae2956a"
HKEY_CURRENT_USER\Software\Afqteuv
W2_108 = "85bc6791"
HKEY_CURRENT_USER\Software\Afqteuv
W3_108 = "84bf1a9d"
HKEY_CURRENT_USER\Software\Afqteuv
W4_108 = "85bc7b4"
HKEY_CURRENT_USER\Software\Afqteuv
W1_109 = "3b98a5d"
HKEY_CURRENT_USER\Software\Afqteuv
W2_109 = "e828ccc4"
HKEY_CURRENT_USER\Software\Afqteuv
W3_109 = "e92bb22"
HKEY_CURRENT_USER\Software\Afqteuv
W4_109 = "e828dab"
HKEY_CURRENT_USER\Software\Afqteuv
W1_110 = "668258de"
HKEY_CURRENT_USER\Software\Afqteuv
W2_110 = "4a955ea8"
HKEY_CURRENT_USER\Software\Afqteuv
W3_110 = "4b96294b"
HKEY_CURRENT_USER\Software\Afqteuv
W4_110 = "4a954362"
HKEY_CURRENT_USER\Software\Afqteuv
W1_111 = "c35e66c9"
HKEY_CURRENT_USER\Software\Afqteuv
W2_111 = "ad1ba6"
HKEY_CURRENT_USER\Software\Afqteuv
W3_111 = "ac2c69"
HKEY_CURRENT_USER\Software\Afqteuv
W4_111 = "ad1acb9"
HKEY_CURRENT_USER\Software\Afqteuv
W1_112 = "f3e879ad"
HKEY_CURRENT_USER\Software\Afqteuv
W2_112 = "f6e3497"
HKEY_CURRENT_USER\Software\Afqteuv
W3_112 = "e6d7c39"
HKEY_CURRENT_USER\Software\Afqteuv
W4_112 = "f6e161"
HKEY_CURRENT_USER\Software\Afqteuv
W1_113 = "ae49b736"
HKEY_CURRENT_USER\Software\Afqteuv
W2_113 = "71da62e"
HKEY_CURRENT_USER\Software\Afqteuv
W3_113 = "7d9154e"
HKEY_CURRENT_USER\Software\Afqteuv
W4_113 = "71da7f67"
HKEY_CURRENT_USER\Software\Afqteuv
W1_114 = "69984edc"
HKEY_CURRENT_USER\Software\Afqteuv
W2_114 = "d446fd25"
HKEY_CURRENT_USER\Software\Afqteuv
W3_114 = "d5458297"
HKEY_CURRENT_USER\Software\Afqteuv
W4_114 = "d446e8be"
HKEY_CURRENT_USER\Software\Afqteuv
W1_115 = "52fb4c67"
HKEY_CURRENT_USER\Software\Afqteuv
W2_115 = "36b34537"
HKEY_CURRENT_USER\Software\Afqteuv
W3_115 = "37b383c"
HKEY_CURRENT_USER\Software\Afqteuv
W4_115 = "36b35215"
HKEY_CURRENT_USER\Software\Afqteuv
W1_116 = "cd4627b5"
HKEY_CURRENT_USER\Software\Afqteuv
W2_116 = "991fa457"
HKEY_CURRENT_USER\Software\Afqteuv
W3_116 = "981cd145"
HKEY_CURRENT_USER\Software\Afqteuv
W4_116 = "991fbb6c"
HKEY_CURRENT_USER\Software\Afqteuv
W1_117 = "c9c9729f"
HKEY_CURRENT_USER\Software\Afqteuv
W2_117 = "fb8c38fc"
HKEY_CURRENT_USER\Software\Afqteuv
W3_117 = "fa8f4eea"
HKEY_CURRENT_USER\Software\Afqteuv
W4_117 = "fb8c24c3"
HKEY_CURRENT_USER\Software\Afqteuv
W1_118 = "45119921"
HKEY_CURRENT_USER\Software\Afqteuv
W2_118 = "5df894f3"
HKEY_CURRENT_USER\Software\Afqteuv
W3_118 = "5cfbe433"
HKEY_CURRENT_USER\Software\Afqteuv
W4_118 = "5df88e1a"
HKEY_CURRENT_USER\Software\Afqteuv
W1_119 = "a56312cd"
HKEY_CURRENT_USER\Software\Afqteuv
W2_119 = "c64ed9a"
HKEY_CURRENT_USER\Software\Afqteuv
W3_119 = "c1679d58"
HKEY_CURRENT_USER\Software\Afqteuv
W4_119 = "c64f771"
HKEY_CURRENT_USER\Software\Afqteuv
W1_120 = "cde97f86"
HKEY_CURRENT_USER\Software\Afqteuv
W2_120 = "22d17ee4"
HKEY_CURRENT_USER\Software\Afqteuv
W3_120 = "23d2ae1"
HKEY_CURRENT_USER\Software\Afqteuv
W4_120 = "22d16c8"
HKEY_CURRENT_USER\Software\Afqteuv
W1_121 = "8c1e35d6"
HKEY_CURRENT_USER\Software\Afqteuv
W2_121 = "853ddcc6"
HKEY_CURRENT_USER\Software\Afqteuv
W3_121 = "843ea36"
HKEY_CURRENT_USER\Software\Afqteuv
W4_121 = "853dca1f"
HKEY_CURRENT_USER\Software\Afqteuv
W1_122 = "ee27b13d"
HKEY_CURRENT_USER\Software\Afqteuv
W2_122 = "e7aa2a8f"
HKEY_CURRENT_USER\Software\Afqteuv
W3_122 = "e6a9595f"
HKEY_CURRENT_USER\Software\Afqteuv
W4_122 = "e7aa3376"
HKEY_CURRENT_USER\Software\Afqteuv
W1_123 = "cccd67"
HKEY_CURRENT_USER\Software\Afqteuv
W2_123 = "4a16bc25"
HKEY_CURRENT_USER\Software\Afqteuv
W3_123 = "4b15f6e4"
HKEY_CURRENT_USER\Software\Afqteuv
W4_123 = "4a169ccd"
HKEY_CURRENT_USER\Software\Afqteuv
W1_124 = "1ab1766b"
HKEY_CURRENT_USER\Software\Afqteuv
W2_124 = "ac8326fb"
HKEY_CURRENT_USER\Software\Afqteuv
W3_124 = "ad86cd"
HKEY_CURRENT_USER\Software\Afqteuv
W4_124 = "ac83624"
HKEY_CURRENT_USER\Software\Afqteuv
W1_125 = "4ca22c5"
HKEY_CURRENT_USER\Software\Afqteuv
W2_125 = "eef4d4f"
HKEY_CURRENT_USER\Software\Afqteuv
W3_125 = "fec552"
HKEY_CURRENT_USER\Software\Afqteuv
W4_125 = "eef6f7b"
HKEY_CURRENT_USER\Software\Afqteuv
W1_126 = "4bd8268b"
HKEY_CURRENT_USER\Software\Afqteuv
W2_126 = "715bc129"
HKEY_CURRENT_USER\Software\Afqteuv
W3_126 = "758b2fb"
HKEY_CURRENT_USER\Software\Afqteuv
W4_126 = "715bd8d2"
HKEY_CURRENT_USER\Software\Afqteuv
W1_127 = "d4cb2a76"
HKEY_CURRENT_USER\Software\Afqteuv
W2_127 = "d3c8544e"
HKEY_CURRENT_USER\Software\Afqteuv
W3_127 = "d2cb28"
HKEY_CURRENT_USER\Software\Afqteuv
W4_127 = "d3c84229"
HKEY_CURRENT_USER\Software\Afqteuv
W1_128 = "d9fee23e"
HKEY_CURRENT_USER\Software\Afqteuv
W2_128 = "3634b63"
HKEY_CURRENT_USER\Software\Afqteuv
W3_128 = "3737c1a9"
HKEY_CURRENT_USER\Software\Afqteuv
W4_128 = "3634ab8"
HKEY_CURRENT_USER\Software\Afqteuv
W1_129 = "9bc6bba"
HKEY_CURRENT_USER\Software\Afqteuv
W2_129 = "98a19be"
HKEY_CURRENT_USER\Software\Afqteuv
W3_129 = "99a27efe"
HKEY_CURRENT_USER\Software\Afqteuv
W4_129 = "98a114d7"
HKEY_CURRENT_USER\Software\Afqteuv
W1_130 = "b2472843"
HKEY_CURRENT_USER\Software\Afqteuv
W2_130 = "fbd69c"
HKEY_CURRENT_USER\Software\Afqteuv
W3_130 = "fae147"
HKEY_CURRENT_USER\Software\Afqteuv
W4_130 = "fbd7e2e"
HKEY_CURRENT_USER\Software\Afqteuv
W1_131 = "e6f45"
HKEY_CURRENT_USER\Software\Afqteuv
W2_131 = "5d79fc7a"
HKEY_CURRENT_USER\Software\Afqteuv
W3_131 = "5c7a8dac"
HKEY_CURRENT_USER\Software\Afqteuv
W4_131 = "5d79e785"
HKEY_CURRENT_USER\Software\Afqteuv
W1_132 = "5ceeeb1"
HKEY_CURRENT_USER\Software\Afqteuv
W2_132 = "bfe64cad"
HKEY_CURRENT_USER\Software\Afqteuv
W3_132 = "bee53af5"
HKEY_CURRENT_USER\Software\Afqteuv
W4_132 = "bfe65dc"
HKEY_CURRENT_USER\Software\Afqteuv
W1_133 = "6672c86e"
HKEY_CURRENT_USER\Software\Afqteuv
W2_133 = "2252a4bf"
HKEY_CURRENT_USER\Software\Afqteuv
W3_133 = "2351d1a"
HKEY_CURRENT_USER\Software\Afqteuv
W4_133 = "2252ba33"
HKEY_CURRENT_USER\Software\Afqteuv
W1_134 = "9852fd3"
HKEY_CURRENT_USER\Software\Afqteuv
W2_134 = "84bf3b61"
HKEY_CURRENT_USER\Software\Afqteuv
W3_134 = "85bc49a3"
HKEY_CURRENT_USER\Software\Afqteuv
W4_134 = "84bf238a"
HKEY_CURRENT_USER\Software\Afqteuv
W1_135 = "ee44ffdb"
HKEY_CURRENT_USER\Software\Afqteuv
W2_135 = "e72b9c5"
HKEY_CURRENT_USER\Software\Afqteuv
W3_135 = "e628e6c8"
HKEY_CURRENT_USER\Software\Afqteuv
W4_135 = "e72b8ce1"
HKEY_CURRENT_USER\Software\Afqteuv
W1_136 = "b8ceec6d"
HKEY_CURRENT_USER\Software\Afqteuv
W2_136 = "4997ea5d"
HKEY_CURRENT_USER\Software\Afqteuv
W3_136 = "48949c11"
HKEY_CURRENT_USER\Software\Afqteuv
W4_136 = "4997f638"
HKEY_CURRENT_USER\Software\Afqteuv
W1_137 = "6b9b455"
HKEY_CURRENT_USER\Software\Afqteuv
W2_137 = "ac4494e"
HKEY_CURRENT_USER\Software\Afqteuv
W3_137 = "ad735a6"
HKEY_CURRENT_USER\Software\Afqteuv
W4_137 = "ac45f8f"
HKEY_CURRENT_USER\Software\Afqteuv
W1_138 = "3b16e2bf"
HKEY_CURRENT_USER\Software\Afqteuv
W2_138 = "e7d15"
HKEY_CURRENT_USER\Software\Afqteuv
W3_138 = "f73a2cf"
HKEY_CURRENT_USER\Software\Afqteuv
W4_138 = "e7c8e6"
HKEY_CURRENT_USER\Software\Afqteuv
W1_139 = "f6db63"
HKEY_CURRENT_USER\Software\Afqteuv
W2_139 = "7dd11ec"
HKEY_CURRENT_USER\Software\Afqteuv
W3_139 = "71de5814"
HKEY_CURRENT_USER\Software\Afqteuv
W4_139 = "7dd323d"
HKEY_CURRENT_USER\Software\Afqteuv
W1_140 = "7fa6af4d"
HKEY_CURRENT_USER\Software\Afqteuv
W2_140 = "d349bb8f"
HKEY_CURRENT_USER\Software\Afqteuv
W3_140 = "d24af1bd"
HKEY_CURRENT_USER\Software\Afqteuv
W4_140 = "d3499b94"
HKEY_CURRENT_USER\Software\Afqteuv
W1_141 = "d5a7b5b5"
HKEY_CURRENT_USER\Software\Afqteuv
W2_141 = "35b61265"
HKEY_CURRENT_USER\Software\Afqteuv
W3_141 = "34b56ec2"
HKEY_CURRENT_USER\Software\Afqteuv
W4_141 = "35b64eb"
HKEY_CURRENT_USER\Software\Afqteuv
W1_142 = "d64b41b"
HKEY_CURRENT_USER\Software\Afqteuv
W2_142 = "982272e4"
HKEY_CURRENT_USER\Software\Afqteuv
W3_142 = "992146b"
HKEY_CURRENT_USER\Software\Afqteuv
W4_142 = "98226e42"
HKEY_CURRENT_USER\Software\Afqteuv
W1_143 = "dc59a8ef"
HKEY_CURRENT_USER\Software\Afqteuv
W2_143 = "fa8eccf6"
HKEY_CURRENT_USER\Software\Afqteuv
W3_143 = "fb8dbdb"
HKEY_CURRENT_USER\Software\Afqteuv
W4_143 = "fa8ed799"
HKEY_CURRENT_USER\Software\Afqteuv
W1_144 = "561638a5"
HKEY_CURRENT_USER\Software\Afqteuv
W2_144 = "5cfb5aef"
HKEY_CURRENT_USER\Software\Afqteuv
W3_144 = "5df82ad9"
HKEY_CURRENT_USER\Software\Afqteuv
W4_144 = "5cfb4f"
HKEY_CURRENT_USER\Software\Afqteuv
W1_145 = "c86e4d19"
HKEY_CURRENT_USER\Software\Afqteuv
W2_145 = "bf67bd44"
HKEY_CURRENT_USER\Software\Afqteuv
W3_145 = "be64c6e"
HKEY_CURRENT_USER\Software\Afqteuv
W4_145 = "bf67aa47"
HKEY_CURRENT_USER\Software\Afqteuv
W1_146 = "d4f64955"
HKEY_CURRENT_USER\Software\Afqteuv
W2_146 = "21d488c"
HKEY_CURRENT_USER\Software\Afqteuv
W3_146 = "2d779b7"
HKEY_CURRENT_USER\Software\Afqteuv
W4_146 = "21d4139e"
HKEY_CURRENT_USER\Software\Afqteuv
W1_147 = "15f92b98"
HKEY_CURRENT_USER\Software\Afqteuv
W2_147 = "8446298"
HKEY_CURRENT_USER\Software\Afqteuv
W3_147 = "854316dc"
HKEY_CURRENT_USER\Software\Afqteuv
W4_147 = "8447cf5"
HKEY_CURRENT_USER\Software\Afqteuv
W1_148 = "6111991a"
HKEY_CURRENT_USER\Software\Afqteuv
W2_148 = "e6acfccb"
HKEY_CURRENT_USER\Software\Afqteuv
W3_148 = "e7af8c65"
HKEY_CURRENT_USER\Software\Afqteuv
W4_148 = "e6ace64c"
HKEY_CURRENT_USER\Software\Afqteuv
W1_149 = "8db361fa"
HKEY_CURRENT_USER\Software\Afqteuv
W2_149 = "491959ee"
HKEY_CURRENT_USER\Software\Afqteuv
W3_149 = "481a258a"
HKEY_CURRENT_USER\Software\Afqteuv
W4_149 = "49194fa3"
HKEY_CURRENT_USER\Software\Afqteuv
W1_150 = "b452512e"
HKEY_CURRENT_USER\Software\Afqteuv
W2_150 = "ab85a5"
HKEY_CURRENT_USER\Software\Afqteuv
W3_150 = "aa86d2d3"
HKEY_CURRENT_USER\Software\Afqteuv
W4_150 = "ab85b8fa"
HKEY_CURRENT_USER\Software\Afqteuv
W1_151 = "ff24e"
HKEY_CURRENT_USER\Software\Afqteuv
W2_151 = "df2274"
HKEY_CURRENT_USER\Software\Afqteuv
W3_151 = "cf14878"
HKEY_CURRENT_USER\Software\Afqteuv
W4_151 = "df22251"
HKEY_CURRENT_USER\Software\Afqteuv
W1_152 = "3a5f39f5"
HKEY_CURRENT_USER\Software\Afqteuv
W2_152 = "75e974f"
HKEY_CURRENT_USER\Software\Afqteuv
W3_152 = "715de181"
HKEY_CURRENT_USER\Software\Afqteuv
W4_152 = "75e8ba8"
HKEY_CURRENT_USER\Software\Afqteuv
W1_153 = "b31d7b82"
HKEY_CURRENT_USER\Software\Afqteuv
W2_153 = "d2cae89a"
HKEY_CURRENT_USER\Software\Afqteuv
W3_153 = "d3c99ed6"
HKEY_CURRENT_USER\Software\Afqteuv
W4_153 = "d2caf4ff"
HKEY_CURRENT_USER\Software\Afqteuv
W1_154 = "f44e9e8"
HKEY_CURRENT_USER\Software\Afqteuv
W2_154 = "353747cc"
HKEY_CURRENT_USER\Software\Afqteuv
W3_154 = "3434347f"
HKEY_CURRENT_USER\Software\Afqteuv
W4_154 = "35375e56"
HKEY_CURRENT_USER\Software\Afqteuv
W1_155 = "8cbcd216"
HKEY_CURRENT_USER\Software\Afqteuv
W2_155 = "97a3d9a"
HKEY_CURRENT_USER\Software\Afqteuv
W3_155 = "96aad84"
HKEY_CURRENT_USER\Software\Afqteuv
W4_155 = "97a3c7ad"
HKEY_CURRENT_USER\Software\Afqteuv
W1_156 = "cee9fc7"
HKEY_CURRENT_USER\Software\Afqteuv
W2_156 = "fa12f28"
HKEY_CURRENT_USER\Software\Afqteuv
W3_156 = "fb135b2d"
HKEY_CURRENT_USER\Software\Afqteuv
W4_156 = "fa1314"
HKEY_CURRENT_USER\Software\Afqteuv
W1_157 = "d7578f6"
HKEY_CURRENT_USER\Software\Afqteuv
W2_157 = "5c7cb59c"
HKEY_CURRENT_USER\Software\Afqteuv
W3_157 = "5d7ff72"
HKEY_CURRENT_USER\Software\Afqteuv
W4_157 = "5c7c9a5b"
HKEY_CURRENT_USER\Software\Afqteuv
W1_158 = "98c79e7"
HKEY_CURRENT_USER\Software\Afqteuv
W2_158 = "bee91515"
HKEY_CURRENT_USER\Software\Afqteuv
W3_158 = "bfea699b"
HKEY_CURRENT_USER\Software\Afqteuv
W4_158 = "bee93b2"
HKEY_CURRENT_USER\Software\Afqteuv
W1_159 = "91c4dca"
HKEY_CURRENT_USER\Software\Afqteuv
W2_159 = "21557676"
HKEY_CURRENT_USER\Software\Afqteuv
W3_159 = "25672"
HKEY_CURRENT_USER\Software\Afqteuv
W4_159 = "21556d9"
HKEY_CURRENT_USER\Software\Afqteuv
W1_160 = "962378a3"
HKEY_CURRENT_USER\Software\Afqteuv
W2_160 = "83c1f4e3"
HKEY_CURRENT_USER\Software\Afqteuv
W3_160 = "82c2bc49"
HKEY_CURRENT_USER\Software\Afqteuv
W4_160 = "83c1d66"
HKEY_CURRENT_USER\Software\Afqteuv
W1_161 = "99ca9bce"
HKEY_CURRENT_USER\Software\Afqteuv
W2_161 = "e62e1c66"
HKEY_CURRENT_USER\Software\Afqteuv
W3_161 = "e72d559e"
HKEY_CURRENT_USER\Software\Afqteuv
W4_161 = "e62e3fb7"
HKEY_CURRENT_USER\Software\Afqteuv
W1_162 = "67aebd35"
HKEY_CURRENT_USER\Software\Afqteuv
W2_162 = "489abfcb"
HKEY_CURRENT_USER\Software\Afqteuv
W3_162 = "4999c327"
HKEY_CURRENT_USER\Software\Afqteuv
W4_162 = "489aa9e"
HKEY_CURRENT_USER\Software\Afqteuv
W1_163 = "eae9f26"
HKEY_CURRENT_USER\Software\Afqteuv
W2_163 = "ab73148"
HKEY_CURRENT_USER\Software\Afqteuv
W3_163 = "aa4784c"
HKEY_CURRENT_USER\Software\Afqteuv
W4_163 = "ab71265"
HKEY_CURRENT_USER\Software\Afqteuv
W1_164 = "944b18e"
HKEY_CURRENT_USER\Software\Afqteuv
W2_164 = "d7367b3"
HKEY_CURRENT_USER\Software\Afqteuv
W3_164 = "c71195"
HKEY_CURRENT_USER\Software\Afqteuv
W4_164 = "d737bbc"
HKEY_CURRENT_USER\Software\Afqteuv
W1_165 = "a3e7845d"
HKEY_CURRENT_USER\Software\Afqteuv
W2_165 = "6fdff25a"
HKEY_CURRENT_USER\Software\Afqteuv
W3_165 = "6edc8f3a"
HKEY_CURRENT_USER\Software\Afqteuv
W4_165 = "6fdfe513"
HKEY_CURRENT_USER\Software\Afqteuv
W1_166 = "e8433d33"
HKEY_CURRENT_USER\Software\Afqteuv
W2_166 = "d24c5b"
HKEY_CURRENT_USER\Software\Afqteuv
W3_166 = "d34f2443"
HKEY_CURRENT_USER\Software\Afqteuv
W4_166 = "d24c4e6a"
HKEY_CURRENT_USER\Software\Afqteuv
W1_167 = "4f3dfb14"
HKEY_CURRENT_USER\Software\Afqteuv
W2_167 = "34b892b"
HKEY_CURRENT_USER\Software\Afqteuv
W3_167 = "35bbdde8"
HKEY_CURRENT_USER\Software\Afqteuv
W4_167 = "34b8b7c1"
HKEY_CURRENT_USER\Software\Afqteuv
W1_168 = "29de7b56"
HKEY_CURRENT_USER\Software\Afqteuv
W2_168 = "972521b"
HKEY_CURRENT_USER\Software\Afqteuv
W3_168 = "96264b31"
HKEY_CURRENT_USER\Software\Afqteuv
W4_168 = "97252118"
HKEY_CURRENT_USER\Software\Afqteuv
W1_169 = "c8cb6eac"
HKEY_CURRENT_USER\Software\Afqteuv
W2_169 = "f99197ca"
HKEY_CURRENT_USER\Software\Afqteuv
W3_169 = "f892e46"
HKEY_CURRENT_USER\Software\Afqteuv
W4_169 = "f9918a6f"
HKEY_CURRENT_USER\Software\Afqteuv
W1_170 = "916f429b"
HKEY_CURRENT_USER\Software\Afqteuv
W2_170 = "5bfdeed5"
HKEY_CURRENT_USER\Software\Afqteuv
W3_170 = "5afe99ef"
HKEY_CURRENT_USER\Software\Afqteuv
W4_170 = "5bfdf3c6"
HKEY_CURRENT_USER\Software\Afqteuv
W1_171 = "d3577544"
HKEY_CURRENT_USER\Software\Afqteuv
W2_171 = "be6a7cfc"
HKEY_CURRENT_USER\Software\Afqteuv
W3_171 = "bf693734"
HKEY_CURRENT_USER\Software\Afqteuv
W4_171 = "be6a5d1d"
HKEY_CURRENT_USER\Software\Afqteuv
W1_172 = "966b47c8"
HKEY_CURRENT_USER\Software\Afqteuv
W2_172 = "2d6d42e"
HKEY_CURRENT_USER\Software\Afqteuv
W3_172 = "21d5ac5d"
HKEY_CURRENT_USER\Software\Afqteuv
W4_172 = "2d6c674"
HKEY_CURRENT_USER\Software\Afqteuv
W1_173 = "32e4c9c"
HKEY_CURRENT_USER\Software\Afqteuv
W2_173 = "834336a4"
HKEY_CURRENT_USER\Software\Afqteuv
W3_173 = "82445e2"
HKEY_CURRENT_USER\Software\Afqteuv
W4_173 = "83432fcb"
HKEY_CURRENT_USER\Software\Afqteuv
W1_174 = "e784e566"
HKEY_CURRENT_USER\Software\Afqteuv
W2_174 = "e5af8429"
HKEY_CURRENT_USER\Software\Afqteuv
W3_174 = "e4acf3b"
HKEY_CURRENT_USER\Software\Afqteuv
W4_174 = "e5af9922"
HKEY_CURRENT_USER\Software\Afqteuv
W1_175 = "8c9da7a4"
HKEY_CURRENT_USER\Software\Afqteuv
W2_175 = "481c1824"
HKEY_CURRENT_USER\Software\Afqteuv
W3_175 = "491f685"
HKEY_CURRENT_USER\Software\Afqteuv
W4_175 = "481c279"
HKEY_CURRENT_USER\Software\Afqteuv
W1_176 = "8a2c5b8"
HKEY_CURRENT_USER\Software\Afqteuv
W2_176 = "aa88776e"
HKEY_CURRENT_USER\Software\Afqteuv
W3_176 = "ab8b1f9"
HKEY_CURRENT_USER\Software\Afqteuv
W4_176 = "aa886bd"
HKEY_CURRENT_USER\Software\Afqteuv
W1_177 = "686ba568"
HKEY_CURRENT_USER\Software\Afqteuv
W2_177 = "cf4cc5"
HKEY_CURRENT_USER\Software\Afqteuv
W3_177 = "df7bfe"
HKEY_CURRENT_USER\Software\Afqteuv
W4_177 = "cf4d527"
HKEY_CURRENT_USER\Software\Afqteuv
W1_178 = "3657a4"
HKEY_CURRENT_USER\Software\Afqteuv
W2_178 = "6f612b29"
HKEY_CURRENT_USER\Software\Afqteuv
W3_178 = "6e625457"
HKEY_CURRENT_USER\Software\Afqteuv
W4_178 = "6f613e7e"
HKEY_CURRENT_USER\Software\Afqteuv
W1_179 = "496daa83"
HKEY_CURRENT_USER\Software\Afqteuv
W2_179 = "d1cdb1b2"
HKEY_CURRENT_USER\Software\Afqteuv
W3_179 = "dcecdfc"
HKEY_CURRENT_USER\Software\Afqteuv
W4_179 = "d1cda7d5"
HKEY_CURRENT_USER\Software\Afqteuv
W1_180 = "5e43e75"
HKEY_CURRENT_USER\Software\Afqteuv
W2_180 = "343a773"
HKEY_CURRENT_USER\Software\Afqteuv
W3_180 = "35397b5"
HKEY_CURRENT_USER\Software\Afqteuv
W4_180 = "343a112c"
HKEY_CURRENT_USER\Software\Afqteuv
W1_181 = "c1715eda"
HKEY_CURRENT_USER\Software\Afqteuv
W2_181 = "96a661a4"
HKEY_CURRENT_USER\Software\Afqteuv
W3_181 = "97a51aa"
HKEY_CURRENT_USER\Software\Afqteuv
W4_181 = "96a67a83"
HKEY_CURRENT_USER\Software\Afqteuv
W1_182 = "6b59eeb9"
HKEY_CURRENT_USER\Software\Afqteuv
W2_182 = "f912fd85"
HKEY_CURRENT_USER\Software\Afqteuv
W3_182 = "f81189f3"
HKEY_CURRENT_USER\Software\Afqteuv
W4_182 = "f912e3da"
HKEY_CURRENT_USER\Software\Afqteuv
W1_183 = "d99661e2"
HKEY_CURRENT_USER\Software\Afqteuv
W2_183 = "5b7f533c"
HKEY_CURRENT_USER\Software\Afqteuv
W3_183 = "5a7c2718"
HKEY_CURRENT_USER\Software\Afqteuv
W4_183 = "5b7f4d31"
HKEY_CURRENT_USER\Software\Afqteuv
W1_184 = "c2c1dcb"
HKEY_CURRENT_USER\Software\Afqteuv
W2_184 = "bdeba8f"
HKEY_CURRENT_USER\Software\Afqteuv
W3_184 = "bce8dca1"
HKEY_CURRENT_USER\Software\Afqteuv
W4_184 = "bdebb688"
HKEY_CURRENT_USER\Software\Afqteuv
W1_185 = "b96e739"
HKEY_CURRENT_USER\Software\Afqteuv
W2_185 = "25887e"
HKEY_CURRENT_USER\Software\Afqteuv
W3_185 = "215b75f6"
HKEY_CURRENT_USER\Software\Afqteuv
W4_185 = "2581fdf"
HKEY_CURRENT_USER\Software\Afqteuv
W1_186 = "196d3d69"
HKEY_CURRENT_USER\Software\Afqteuv
W2_186 = "82c49c5c"
HKEY_CURRENT_USER\Software\Afqteuv
W3_186 = "83c7e31f"
HKEY_CURRENT_USER\Software\Afqteuv
W4_186 = "82c48936"
HKEY_CURRENT_USER\Software\Afqteuv
W1_187 = "8dba88d8"
HKEY_CURRENT_USER\Software\Afqteuv
W2_187 = "e53ec62"
HKEY_CURRENT_USER\Software\Afqteuv
W3_187 = "e43398a4"
HKEY_CURRENT_USER\Software\Afqteuv
W4_187 = "e53f28d"
HKEY_CURRENT_USER\Software\Afqteuv
W1_188 = "3157a8b"
HKEY_CURRENT_USER\Software\Afqteuv
W2_188 = "479d79d3"
HKEY_CURRENT_USER\Software\Afqteuv
W3_188 = "469e31cd"
HKEY_CURRENT_USER\Software\Afqteuv
W4_188 = "479d5be4"
HKEY_CURRENT_USER\Software\Afqteuv
W1_189 = "85c93575"
HKEY_CURRENT_USER\Software\Afqteuv
W2_189 = "aa9ded8"
HKEY_CURRENT_USER\Software\Afqteuv
W3_189 = "abaaf12"
HKEY_CURRENT_USER\Software\Afqteuv
W4_189 = "aa9c53b"
HKEY_CURRENT_USER\Software\Afqteuv
W1_190 = "2257451"
HKEY_CURRENT_USER\Software\Afqteuv
W2_190 = "c763ad"
HKEY_CURRENT_USER\Software\Afqteuv
W3_190 = "d7544bb"
HKEY_CURRENT_USER\Software\Afqteuv
W4_190 = "c762e92"
HKEY_CURRENT_USER\Software\Afqteuv
W1_191 = "7ae3e4b"
HKEY_CURRENT_USER\Software\Afqteuv
W2_191 = "6ee28f6e"
HKEY_CURRENT_USER\Software\Afqteuv
W3_191 = "6fe1fdc"
HKEY_CURRENT_USER\Software\Afqteuv
W4_191 = "6ee297e9"
HKEY_CURRENT_USER\Software\Afqteuv
W1_192 = "24fd7a16"
HKEY_CURRENT_USER\Software\Afqteuv
W2_192 = "d14f1d87"
HKEY_CURRENT_USER\Software\Afqteuv
W3_192 = "d4c6b69"
HKEY_CURRENT_USER\Software\Afqteuv
W4_192 = "d14f14"
HKEY_CURRENT_USER\Software\Afqteuv
W1_193 = "721c4ace"
HKEY_CURRENT_USER\Software\Afqteuv
W2_193 = "33bb776a"
HKEY_CURRENT_USER\Software\Afqteuv
W3_193 = "32b8be"
HKEY_CURRENT_USER\Software\Afqteuv
W4_193 = "33bb6a97"
HKEY_CURRENT_USER\Software\Afqteuv
W1_194 = "8b13d355"
HKEY_CURRENT_USER\Software\Afqteuv
W2_194 = "9627f2b"
HKEY_CURRENT_USER\Software\Afqteuv
W3_194 = "9724b9c7"
HKEY_CURRENT_USER\Software\Afqteuv
W4_194 = "9627d3ee"
HKEY_CURRENT_USER\Software\Afqteuv
W1_195 = "accea2cd"
HKEY_CURRENT_USER\Software\Afqteuv
W2_195 = "f89425c2"
HKEY_CURRENT_USER\Software\Afqteuv
W3_195 = "f997576c"
HKEY_CURRENT_USER\Software\Afqteuv
W4_195 = "f8943d45"
HKEY_CURRENT_USER\Software\Afqteuv
W1_196 = "42a176d6"
HKEY_CURRENT_USER\Software\Afqteuv
W2_196 = "5bbd8e"
HKEY_CURRENT_USER\Software\Afqteuv
W3_196 = "5a3ccb5"
HKEY_CURRENT_USER\Software\Afqteuv
W4_196 = "5ba69c"
HKEY_CURRENT_USER\Software\Afqteuv
W1_197 = "2fc7fae"
HKEY_CURRENT_USER\Software\Afqteuv
W2_197 = "bd6d19be"
HKEY_CURRENT_USER\Software\Afqteuv
W3_197 = "bc6e65da"
HKEY_CURRENT_USER\Software\Afqteuv
W4_197 = "bd6dff3"
HKEY_CURRENT_USER\Software\Afqteuv
W1_198 = "6a7a52"
HKEY_CURRENT_USER\Software\Afqteuv
W2_198 = "1fd96572"
HKEY_CURRENT_USER\Software\Afqteuv
W3_198 = "1eda1363"
HKEY_CURRENT_USER\Software\Afqteuv
W4_198 = "1fd9794a"
HKEY_CURRENT_USER\Software\Afqteuv
W1_199 = "4876a7f1"
HKEY_CURRENT_USER\Software\Afqteuv
W2_199 = "8245fe99"
HKEY_CURRENT_USER\Software\Afqteuv
W3_199 = "83468888"
HKEY_CURRENT_USER\Software\Afqteuv
W4_199 = "8245e2a1"
HKEY_CURRENT_USER\Software\Afqteuv
W1_200 = "5f793c57"
HKEY_CURRENT_USER\Software\Afqteuv
W2_200 = "e4b25d4"
HKEY_CURRENT_USER\Software\Afqteuv
W3_200 = "e5b121d1"
HKEY_CURRENT_USER\Software\Afqteuv
W4_200 = "e4b24bf8"
HKEY_CURRENT_USER\Software\Afqteuv
W1_201 = "e95bc716"
HKEY_CURRENT_USER\Software\Afqteuv
W2_201 = "471eae3c"
HKEY_CURRENT_USER\Software\Afqteuv
W3_201 = "461ddf66"
HKEY_CURRENT_USER\Software\Afqteuv
W4_201 = "471eb54f"
HKEY_CURRENT_USER\Software\Afqteuv
W1_202 = "3661df2"
HKEY_CURRENT_USER\Software\Afqteuv
W2_202 = "a98b81"
HKEY_CURRENT_USER\Software\Afqteuv
W3_202 = "a888748f"
HKEY_CURRENT_USER\Software\Afqteuv
W4_202 = "a98b1ea6"
HKEY_CURRENT_USER\Software\Afqteuv
W1_203 = "293aa8a4"
HKEY_CURRENT_USER\Software\Afqteuv
W2_203 = "bf796c"
HKEY_CURRENT_USER\Software\Afqteuv
W3_203 = "af4edd4"
HKEY_CURRENT_USER\Software\Afqteuv
W4_203 = "bf787fd"
HKEY_CURRENT_USER\Software\Afqteuv
W1_204 = "e3f981"
HKEY_CURRENT_USER\Software\Afqteuv
W2_204 = "6e63ec55"
HKEY_CURRENT_USER\Software\Afqteuv
W3_204 = "6f69b7d"
HKEY_CURRENT_USER\Software\Afqteuv
W4_204 = "6e63f154"
HKEY_CURRENT_USER\Software\Afqteuv
W1_205 = "bb28f2"
HKEY_CURRENT_USER\Software\Afqteuv
W2_205 = "dd4959"
HKEY_CURRENT_USER\Software\Afqteuv
W3_205 = "d1d3382"
HKEY_CURRENT_USER\Software\Afqteuv
W4_205 = "dd5aab"
HKEY_CURRENT_USER\Software\Afqteuv
W1_206 = "291ebe42"
HKEY_CURRENT_USER\Software\Afqteuv
W2_206 = "333ce1c8"
HKEY_CURRENT_USER\Software\Afqteuv
W3_206 = "323fae2b"
HKEY_CURRENT_USER\Software\Afqteuv
W4_206 = "333cc42"
HKEY_CURRENT_USER\Software\Afqteuv
W1_207 = "f7cc48d"
HKEY_CURRENT_USER\Software\Afqteuv
W2_207 = "95a9d1b"
HKEY_CURRENT_USER\Software\Afqteuv
W3_207 = "94aa477"
HKEY_CURRENT_USER\Software\Afqteuv
W4_207 = "95a92d59"
HKEY_CURRENT_USER\Software\Afqteuv
W1_208 = "115e5874"
HKEY_CURRENT_USER\Software\Afqteuv
W2_208 = "f8158bc"
HKEY_CURRENT_USER\Software\Afqteuv
W3_208 = "f916fc99"
HKEY_CURRENT_USER\Software\Afqteuv
W4_208 = "f81596b"
HKEY_CURRENT_USER\Software\Afqteuv
W1_209 = "fe6fbdb9"
HKEY_CURRENT_USER\Software\Afqteuv
W2_209 = "5a8215aa"
HKEY_CURRENT_USER\Software\Afqteuv
W3_209 = "5b816a2e"
HKEY_CURRENT_USER\Software\Afqteuv
W4_209 = "5a827"
HKEY_CURRENT_USER\Software\Afqteuv
W1_210 = "722465c"
HKEY_CURRENT_USER\Software\Afqteuv
W2_210 = "bcee73f5"
HKEY_CURRENT_USER\Software\Afqteuv
W3_210 = "bded377"
HKEY_CURRENT_USER\Software\Afqteuv
W4_210 = "bcee695e"
HKEY_CURRENT_USER\Software\Afqteuv
W1_211 = "884b848f"
HKEY_CURRENT_USER\Software\Afqteuv
W2_211 = "1f5accb2"
HKEY_CURRENT_USER\Software\Afqteuv
W3_211 = "1e59b89c"
HKEY_CURRENT_USER\Software\Afqteuv
W4_211 = "1f5ad2b5"
HKEY_CURRENT_USER\Software\Afqteuv
W1_212 = "5584bf7a"
HKEY_CURRENT_USER\Software\Afqteuv
W2_212 = "81c727b7"
HKEY_CURRENT_USER\Software\Afqteuv
W3_212 = "8c45625"
HKEY_CURRENT_USER\Software\Afqteuv
W4_212 = "81c73cc"
HKEY_CURRENT_USER\Software\Afqteuv
W1_213 = "5af8cdde"
HKEY_CURRENT_USER\Software\Afqteuv
W2_213 = "e433bb52"
HKEY_CURRENT_USER\Software\Afqteuv
W3_213 = "e53cf4a"
HKEY_CURRENT_USER\Software\Afqteuv
W4_213 = "e433a563"
HKEY_CURRENT_USER\Software\Afqteuv
W1_214 = "7687fe7"
HKEY_CURRENT_USER\Software\Afqteuv
W2_214 = "46a15d3"
HKEY_CURRENT_USER\Software\Afqteuv
W3_214 = "47a36493"
HKEY_CURRENT_USER\Software\Afqteuv
W4_214 = "46aeba"
HKEY_CURRENT_USER\Software\Afqteuv
W1_215 = "1ce747"
HKEY_CURRENT_USER\Software\Afqteuv
W2_215 = "a9c6e32"
HKEY_CURRENT_USER\Software\Afqteuv
W3_215 = "a8f1238"
HKEY_CURRENT_USER\Software\Afqteuv
W4_215 = "a9c7811"
HKEY_CURRENT_USER\Software\Afqteuv
W1_216 = "3fec825"
HKEY_CURRENT_USER\Software\Afqteuv
W2_216 = "b78fb74"
HKEY_CURRENT_USER\Software\Afqteuv
W3_216 = "a7b8b41"
HKEY_CURRENT_USER\Software\Afqteuv
W4_216 = "b78e168"
HKEY_CURRENT_USER\Software\Afqteuv
W1_217 = "3c222e"
HKEY_CURRENT_USER\Software\Afqteuv
W2_217 = "6de557d6"
HKEY_CURRENT_USER\Software\Afqteuv
W3_217 = "6ce6296"
HKEY_CURRENT_USER\Software\Afqteuv
W4_217 = "6de54abf"
HKEY_CURRENT_USER\Software\Afqteuv
W1_218 = "2c586b6"
HKEY_CURRENT_USER\Software\Afqteuv
W2_218 = "d51abd6"
HKEY_CURRENT_USER\Software\Afqteuv
W3_218 = "d152de3f"
HKEY_CURRENT_USER\Software\Afqteuv
W4_218 = "d51b416"
HKEY_CURRENT_USER\Software\Afqteuv
W1_219 = "6deb6738"
HKEY_CURRENT_USER\Software\Afqteuv
W2_219 = "32be38a7"
HKEY_CURRENT_USER\Software\Afqteuv
W3_219 = "33bd7744"
HKEY_CURRENT_USER\Software\Afqteuv
W4_219 = "32be1d6d"
HKEY_CURRENT_USER\Software\Afqteuv
W1_220 = "2e675d"
HKEY_CURRENT_USER\Software\Afqteuv
W2_220 = "952a9165"
HKEY_CURRENT_USER\Software\Afqteuv
W3_220 = "9429eced"
HKEY_CURRENT_USER\Software\Afqteuv
W4_220 = "952a86c4"
HKEY_CURRENT_USER\Software\Afqteuv
W1_221 = "4f788246"
HKEY_CURRENT_USER\Software\Afqteuv
W2_221 = "f796e6c"
HKEY_CURRENT_USER\Software\Afqteuv
W3_221 = "f6959a32"
HKEY_CURRENT_USER\Software\Afqteuv
W4_221 = "f796f1b"
HKEY_CURRENT_USER\Software\Afqteuv
W1_222 = "c719383c"
HKEY_CURRENT_USER\Software\Afqteuv
W2_222 = "5a34db5"
HKEY_CURRENT_USER\Software\Afqteuv
W3_222 = "5b335b"
HKEY_CURRENT_USER\Software\Afqteuv
W4_222 = "5a35972"
HKEY_CURRENT_USER\Software\Afqteuv
W1_223 = "52e2891"
HKEY_CURRENT_USER\Software\Afqteuv
W2_223 = "bc6fdaf2"
HKEY_CURRENT_USER\Software\Afqteuv
W3_223 = "bd6ca8e"
HKEY_CURRENT_USER\Software\Afqteuv
W4_223 = "bc6fc2c9"
HKEY_CURRENT_USER\Software\Afqteuv
W1_224 = "adb753e8"
HKEY_CURRENT_USER\Software\Afqteuv
W2_224 = "1edc3178"
HKEY_CURRENT_USER\Software\Afqteuv
W3_224 = "1fdf469"
HKEY_CURRENT_USER\Software\Afqteuv
W4_224 = "1edc2c2"
HKEY_CURRENT_USER\Software\Afqteuv
W1_225 = "474ea2b"
HKEY_CURRENT_USER\Software\Afqteuv
W2_225 = "81488e65"
HKEY_CURRENT_USER\Software\Afqteuv
W3_225 = "84bff5e"
HKEY_CURRENT_USER\Software\Afqteuv
W4_225 = "81489577"
HKEY_CURRENT_USER\Software\Afqteuv
W1_226 = "8b433f7"
HKEY_CURRENT_USER\Software\Afqteuv
W2_226 = "e3b4e5ee"
HKEY_CURRENT_USER\Software\Afqteuv
W3_226 = "e2b794e7"
HKEY_CURRENT_USER\Software\Afqteuv
W4_226 = "e3b4fece"
HKEY_CURRENT_USER\Software\Afqteuv
W1_227 = "6d2ab59"
HKEY_CURRENT_USER\Software\Afqteuv
W2_227 = "462175ef"
HKEY_CURRENT_USER\Software\Afqteuv
W3_227 = "47222c"
HKEY_CURRENT_USER\Software\Afqteuv
W4_227 = "46216825"
HKEY_CURRENT_USER\Software\Afqteuv
W1_228 = "cce5132"
HKEY_CURRENT_USER\Software\Afqteuv
W2_228 = "a88dcd7d"
HKEY_CURRENT_USER\Software\Afqteuv
W3_228 = "a98ebb55"
HKEY_CURRENT_USER\Software\Afqteuv
W4_228 = "a88dd17c"
HKEY_CURRENT_USER\Software\Afqteuv
W1_229 = "6426cbe"
HKEY_CURRENT_USER\Software\Afqteuv
W2_229 = "afa246"
HKEY_CURRENT_USER\Software\Afqteuv
W3_229 = "bf95fa"
HKEY_CURRENT_USER\Software\Afqteuv
W4_229 = "afa3ad3"
HKEY_CURRENT_USER\Software\Afqteuv
W1_230 = "c5e7f997"
HKEY_CURRENT_USER\Software\Afqteuv
W2_230 = "6d66ba27"
HKEY_CURRENT_USER\Software\Afqteuv
W3_230 = "6c65ce3"
HKEY_CURRENT_USER\Software\Afqteuv
W4_230 = "6d66a42a"
HKEY_CURRENT_USER\Software\Afqteuv
W1_231 = "29c44d58"
HKEY_CURRENT_USER\Software\Afqteuv
W2_231 = "cfd3179d"
HKEY_CURRENT_USER\Software\Afqteuv
W3_231 = "ced67a8"
HKEY_CURRENT_USER\Software\Afqteuv
W4_231 = "cfd3d81"
HKEY_CURRENT_USER\Software\Afqteuv
W1_232 = "77cd39b"
HKEY_CURRENT_USER\Software\Afqteuv
W2_232 = "323f68f4"
HKEY_CURRENT_USER\Software\Afqteuv
W3_232 = "333c1cf1"
HKEY_CURRENT_USER\Software\Afqteuv
W4_232 = "323f76d8"
HKEY_CURRENT_USER\Software\Afqteuv
W1_233 = "8415a95b"
HKEY_CURRENT_USER\Software\Afqteuv
W2_233 = "94abcba"
HKEY_CURRENT_USER\Software\Afqteuv
W3_233 = "95a88a6"
HKEY_CURRENT_USER\Software\Afqteuv
W4_233 = "94abe2f"
HKEY_CURRENT_USER\Software\Afqteuv
W1_234 = "b24632d2"
HKEY_CURRENT_USER\Software\Afqteuv
W2_234 = "f718548d"
HKEY_CURRENT_USER\Software\Afqteuv
W3_234 = "f61b23af"
HKEY_CURRENT_USER\Software\Afqteuv
W4_234 = "f7184986"
HKEY_CURRENT_USER\Software\Afqteuv
W1_235 = "a155e7"
HKEY_CURRENT_USER\Software\Afqteuv
W2_235 = "5984a482"
HKEY_CURRENT_USER\Software\Afqteuv
W3_235 = "5887d8f4"
HKEY_CURRENT_USER\Software\Afqteuv
W4_235 = "5984b2dd"
HKEY_CURRENT_USER\Software\Afqteuv
W1_236 = "b96461"
HKEY_CURRENT_USER\Software\Afqteuv
W2_236 = "bbf12c2"
HKEY_CURRENT_USER\Software\Afqteuv
W3_236 = "baf2761d"
HKEY_CURRENT_USER\Software\Afqteuv
W4_236 = "bbf11c34"
HKEY_CURRENT_USER\Software\Afqteuv
W1_237 = "143df7d2"
HKEY_CURRENT_USER\Software\Afqteuv
W2_237 = "1e5d924c"
HKEY_CURRENT_USER\Software\Afqteuv
W3_237 = "1f5eefa2"
HKEY_CURRENT_USER\Software\Afqteuv
W4_237 = "1e5d858b"
HKEY_CURRENT_USER\Software\Afqteuv
W1_238 = "daf7a796"
HKEY_CURRENT_USER\Software\Afqteuv
W2_238 = "8c9f7fa"
HKEY_CURRENT_USER\Software\Afqteuv
W3_238 = "81ca84cb"
HKEY_CURRENT_USER\Software\Afqteuv
W4_238 = "8c9eee2"
HKEY_CURRENT_USER\Software\Afqteuv
W1_239 = "351d4d2"
HKEY_CURRENT_USER\Software\Afqteuv
W2_239 = "e336746e"
HKEY_CURRENT_USER\Software\Afqteuv
W3_239 = "e235321"
HKEY_CURRENT_USER\Software\Afqteuv
W4_239 = "e3365839"
HKEY_CURRENT_USER\Software\Afqteuv
W1_240 = "e29e1e2"
HKEY_CURRENT_USER\Software\Afqteuv
W2_240 = "45a2e45a"
HKEY_CURRENT_USER\Software\Afqteuv
W3_240 = "44a1abb9"
HKEY_CURRENT_USER\Software\Afqteuv
W4_240 = "45a2c19"
HKEY_CURRENT_USER\Software\Afqteuv
W1_241 = "8fd8ba3e"
HKEY_CURRENT_USER\Software\Afqteuv
W2_241 = "a8f3145"
HKEY_CURRENT_USER\Software\Afqteuv
W3_241 = "a9c4ce"
HKEY_CURRENT_USER\Software\Afqteuv
W4_241 = "a8f2ae7"
HKEY_CURRENT_USER\Software\Afqteuv
W1_242 = "ad1ab667"
HKEY_CURRENT_USER\Software\Afqteuv
W2_242 = "a7b82e9"
HKEY_CURRENT_USER\Software\Afqteuv
W3_242 = "b78fe17"
HKEY_CURRENT_USER\Software\Afqteuv
W4_242 = "a7b943e"
HKEY_CURRENT_USER\Software\Afqteuv
W1_243 = "83fa15cc"
HKEY_CURRENT_USER\Software\Afqteuv
W2_243 = "6ce7e5ae"
HKEY_CURRENT_USER\Software\Afqteuv
W3_243 = "6de497bc"
HKEY_CURRENT_USER\Software\Afqteuv
W4_243 = "6ce7fd95"
It modifies the following registry entries:
HKEY_CURRENT_USER\Software\Microsoft\
Windows\CurrentVersion\Explorer\
Advanced
Hidden = "2"
(Note: The default value data of the said registry entry is 2.)
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\
Security Center
AntiVirusOverride = "1"
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\
Security Center
AntiVirusDisableNotify = "1"
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\
Security Center
FirewallDisableNotify = "1"
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\
Security Center
FirewallOverride = "1"
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\
Security Center
UpdatesDisableNotify = "1"
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\
Windows\CurrentVersion\Explorer\
Advanced\Folder\Hidden\
SHOWALL
CheckedValue = "0"
(Note: The default value data of the said registry entry is 1.)
It creates the following registry entry(ies) to disable Task Manager, Registry Tools and Folder Options:
HKEY_CURRENT_USER\Software\Microsoft\
Windows\CurrentVersion\Policies\
system
DisableTaskMgr = "1"
HKEY_CURRENT_USER\Software\Microsoft\
Windows\CurrentVersion\Policies\
system
DisableRegistryTools = "1"
It deletes the following registry keys:
HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\
Control\SafeBoot\Minimal\
AppMgmt
HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\
Control\SafeBoot\Minimal\
Base
HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\
Control\SafeBoot\Minimal\
Boot Bus Extender
HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\
Control\SafeBoot\Minimal\
Boot file system
HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\
Control\SafeBoot\Minimal\
CryptSvc
HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\
Control\SafeBoot\Minimal\
DcomLaunch
HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\
Control\SafeBoot\Minimal\
dmadmin
HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\
Control\SafeBoot\Minimal\
dmboot.sys
HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\
Control\SafeBoot\Minimal\
dmio.sys
HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\
Control\SafeBoot\Minimal\
dmload.sys
HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\
Control\SafeBoot\Minimal\
dmserver
HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\
Control\SafeBoot\Minimal\
EventLog
HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\
Control\SafeBoot\Minimal\
File system
HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\
Control\SafeBoot\Minimal\
Filter
HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\
Control\SafeBoot\Minimal\
HelpSvc
HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\
Control\SafeBoot\Minimal\
Netlogon
HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\
Control\SafeBoot\Minimal\
PCI Configuration
HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\
Control\SafeBoot\Minimal\
PlugPlay
HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\
Control\SafeBoot\Minimal\
PNP Filter
HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\
Control\SafeBoot\Minimal\
Primary disk
HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\
Control\SafeBoot\Minimal\
RpcSs
HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\
Control\SafeBoot\Minimal\
SCSI Class
HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\
Control\SafeBoot\Minimal\
sermouse.sys
HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\
Control\SafeBoot\Minimal\
sr.sys
HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\
Control\SafeBoot\Minimal\
SRService
HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\
Control\SafeBoot\Minimal\
System Bus Extender
HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\
Control\SafeBoot\Minimal\
vga.sys
HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\
Control\SafeBoot\Minimal\
vgasave.sys
HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\
Control\SafeBoot\Minimal\
WinMgmt
HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\
Control\SafeBoot\Minimal\
{36FC9E60-C465-11CF-8056-444553540000}
HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\
Control\SafeBoot\Minimal\
{4D36E965-E325-11CE-BFC1-08002BE10318}
HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\
Control\SafeBoot\Minimal\
{4D36E967-E325-11CE-BFC1-08002BE10318}
HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\
Control\SafeBoot\Minimal\
{4D36E969-E325-11CE-BFC1-08002BE10318}
HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\
Control\SafeBoot\Minimal\
{4D36E96A-E325-11CE-BFC1-08002BE10318}
HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\
Control\SafeBoot\Minimal\
{4D36E96B-E325-11CE-BFC1-08002BE10318}
HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\
Control\SafeBoot\Minimal\
{4D36E96F-E325-11CE-BFC1-08002BE10318}
HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\
Control\SafeBoot\Minimal\
{4D36E977-E325-11CE-BFC1-08002BE10318}
HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\
Control\SafeBoot\Minimal\
{4D36E97B-E325-11CE-BFC1-08002BE10318}
HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\
Control\SafeBoot\Minimal\
{4D36E97D-E325-11CE-BFC1-08002BE10318}
HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\
Control\SafeBoot\Minimal\
{4D36E980-E325-11CE-BFC1-08002BE10318}
HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\
Control\SafeBoot\Minimal\
{71A27CDD-812A-11D0-BEC7-08002BE2092F}
HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\
Control\SafeBoot\Minimal\
{745A17A0-74D3-11D0-B6FE-00A0C90F57DA}
HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\
Control\SafeBoot\Minimal
HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\
Control\SafeBoot\Network\
AFD
HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\
Control\SafeBoot\Network\
AppMgmt
HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\
Control\SafeBoot\Network\
Base
HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\
Control\SafeBoot\Network\
Boot Bus Extender
HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\
Control\SafeBoot\Network\
Boot file system
HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\
Control\SafeBoot\Network\
Browser
HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\
Control\SafeBoot\Network\
CryptSvc
HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\
Control\SafeBoot\Network\
DcomLaunch
HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\
Control\SafeBoot\Network\
Dhcp
HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\
Control\SafeBoot\Network\
dmadmin
HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\
Control\SafeBoot\Network\
dmboot.sys
HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\
Control\SafeBoot\Network\
dmio.sys
HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\
Control\SafeBoot\Network\
dmload.sys
HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\
Control\SafeBoot\Network\
dmserver
HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\
Control\SafeBoot\Network\
DnsCache
HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\
Control\SafeBoot\Network\
EventLog
HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\
Control\SafeBoot\Network\
File system
HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\
Control\SafeBoot\Network\
Filter
HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\
Control\SafeBoot\Network\
HelpSvc
HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\
Control\SafeBoot\Network\
ip6fw.sys
HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\
Control\SafeBoot\Network\
ipnat.sys
HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\
Control\SafeBoot\Network\
LanmanServer
HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\
Control\SafeBoot\Network\
LanmanWorkstation
HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\
Control\SafeBoot\Network\
LmHosts
HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\
Control\SafeBoot\Network\
Messenger
HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\
Control\SafeBoot\Network\
NDIS
HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\
Control\SafeBoot\Network\
NDIS Wrapper
HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\
Control\SafeBoot\Network\
Ndisuio
HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\
Control\SafeBoot\Network\
NetBIOS
HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\
Control\SafeBoot\Network\
NetBIOSGroup
HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\
Control\SafeBoot\Network\
NetBT
HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\
Control\SafeBoot\Network\
NetDDEGroup
HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\
Control\SafeBoot\Network\
Netlogon
HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\
Control\SafeBoot\Network\
NetMan
HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\
Control\SafeBoot\Network\
Network
HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\
Control\SafeBoot\Network\
NetworkProvider
HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\
Control\SafeBoot\Network\
NtLmSsp
HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\
Control\SafeBoot\Network\
PCI Configuration
HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\
Control\SafeBoot\Network\
PlugPlay
HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\
Control\SafeBoot\Network\
PNP Filter
HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\
Control\SafeBoot\Network\
PNP_TDI
HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\
Control\SafeBoot\Network\
Primary disk
HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\
Control\SafeBoot\Network\
rdpcdd.sys
HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\
Control\SafeBoot\Network\
rdpdd.sys
HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\
Control\SafeBoot\Network\
rdpwd.sys
HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\
Control\SafeBoot\Network\
rdsessmgr
HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\
Control\SafeBoot\Network\
RpcSs
HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\
Control\SafeBoot\Network\
SCSI Class
HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\
Control\SafeBoot\Network\
sermouse.sys
HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\
Control\SafeBoot\Network\
SharedAccess
HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\
Control\SafeBoot\Network\
sr.sys
HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\
Control\SafeBoot\Network\
SRService
HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\
Control\SafeBoot\Network\
Streams Drivers
HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\
Control\SafeBoot\Network\
System Bus Extender
HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\
Control\SafeBoot\Network\
Tcpip
HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\
Control\SafeBoot\Network\
TDI
HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\
Control\SafeBoot\Network\
tdpipe.sys
HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\
Control\SafeBoot\Network\
tdtcp.sys
HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\
Control\SafeBoot\Network\
termservice
HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\
Control\SafeBoot\Network\
vga.sys
HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\
Control\SafeBoot\Network\
vgasave.sys
HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\
Control\SafeBoot\Network\
WinMgmt
HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\
Control\SafeBoot\Network\
WZCSVC
HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\
Control\SafeBoot\Network\
{36FC9E60-C465-11CF-8056-444553540000}
HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\
Control\SafeBoot\Network\
{4D36E965-E325-11CE-BFC1-08002BE10318}
HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\
Control\SafeBoot\Network\
{4D36E967-E325-11CE-BFC1-08002BE10318}
HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\
Control\SafeBoot\Network\
{4D36E969-E325-11CE-BFC1-08002BE10318}
HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\
Control\SafeBoot\Network\
{4D36E96A-E325-11CE-BFC1-08002BE10318}
HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\
Control\SafeBoot\Network\
{4D36E96B-E325-11CE-BFC1-08002BE10318}
HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\
Control\SafeBoot\Network\
{4D36E96F-E325-11CE-BFC1-08002BE10318}
HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\
Control\SafeBoot\Network\
{4D36E972-E325-11CE-BFC1-08002BE10318}
HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\
Control\SafeBoot\Network\
{4D36E973-E325-11CE-BFC1-08002BE10318}
HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\
Control\SafeBoot\Network\
{4D36E974-E325-11CE-BFC1-08002BE10318}
HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\
Control\SafeBoot\Network\
{4D36E975-E325-11CE-BFC1-08002BE10318}
HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\
Control\SafeBoot\Network\
{4D36E977-E325-11CE-BFC1-08002BE10318}
HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\
Control\SafeBoot\Network\
{4D36E97B-E325-11CE-BFC1-08002BE10318}
HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\
Control\SafeBoot\Network\
{4D36E97D-E325-11CE-BFC1-08002BE10318}
HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\
Control\SafeBoot\Network\
{4D36E980-E325-11CE-BFC1-08002BE10318}
HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\
Control\SafeBoot\Network\
{71A27CDD-812A-11D0-BEC7-08002BE2092F}
HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\
Control\SafeBoot\Network\
{745A17A0-74D3-11D0-B6FE-00A0C90F57DA}
HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\
Control\SafeBoot\Network
Dropping Routine
This worm drops the following files:
- %User Temp%\winkvms.exe
- %System%\drivers\ogkqn.sys
- %User Temp%\qoqbvo.exe
- %User Temp%\winajfut.exe
- %User Temp%\winkxfuii.exe
- %User Temp%\xwqyjs.exe
- %User Temp%\wincecfa.exe
- %User Temp%\winpyuft.exe
- %User Temp%\tcalge.exe
- %User Temp%\winhxoovx.exe
- %User Temp%\tdka.exe
- %User Temp%\winacsqax.exe
- %User Temp%\winqcyya.exe
- %User Temp%\lpgjiy.exe
- %User Temp%\wincupd.exe
- %User Temp%\winfrmsv.exe
- %User Temp%\dkkl.exe
- %User Temp%\wincbkrj.exe
- %User Temp%\winigxcpu.exe
- %User Temp%\winpgwpy.exe
- %User Temp%\poknaa.exe
- %User Temp%\winatle.exe
- %User Temp%\tosit.exe
- %User Temp%\wdfu.exe
- %User Temp%\winuxskj.exe
- %User Temp%\whihup.exe
- %User Temp%\xbea.exe
- %User Temp%\ocaxve.exe
- %User Temp%\chnv.exe
- %User Temp%\jtvdl.exe
- %User Temp%\winabsm.exe
- %User Temp%\winlxkd.exe
- %User Temp%\srgmf.exe
- %User Temp%\windbedeh.exe
- %User Temp%\vdcam.exe
- %User Temp%\wineknht.exe
- %User Temp%\yuvm.exe
- %User Temp%\faarr.exe
- %User Temp%\winxgfi.exe
- %User Temp%\winredy.exe
- %User Temp%\winpltm.exe
- %User Temp%\qjxvio.exe
- %User Temp%\winybvpb.exe
- %User Temp%\winkgihu.exe
- %User Temp%\dpjcq.exe
- %User Temp%\winxjvh.exe
- %User Temp%\yxdojd.exe
- %User Temp%\winupwofu.exe
- %User Temp%\winiavhw.exe
- %User Temp%\winputh.exe
- %User Temp%\winvcgb.exe
- %User Temp%\xgla.exe
- %User Temp%\winmfbskm.exe
- %User Temp%\wintqwj.exe
- %User Temp%\hspum.exe
- %User Temp%\eagnlf.exe
- %User Temp%\windrtd.exe
- %User Temp%\fikja.exe
- %User Temp%\nonbxa.exe
- %User Temp%\winfjex.exe
- %User Temp%\winiaxsx.exe
- %User Temp%\gpfboq.exe
- %User Temp%\winfrsnx.exe
- %User Temp%\winhniej.exe
- %User Temp%\bsawf.exe
- %User Temp%\frqwfh.exe
- %User Temp%\wlqps.exe
- %User Temp%\wintdfb.exe
- %User Temp%\whkyu.exe
- %User Temp%\winvfcmmv.exe
- %User Temp%\winijhoc.exe
- %User Temp%\winnqebd.exe
- %User Temp%\mcvofg.exe
- %User Temp%\winfkwip.exe
- %User Temp%\winhtkrbt.exe
- %User Temp%\eyqri.exe
- %User Temp%\winoomyp.exe
- %User Temp%\winghqnfn.exe
- %User Temp%\winbnmdjr.exe
- %User Temp%\wineppchk.exe
- %User Temp%\winnrqac.exe
- %User Temp%\winkxtrh.exe
- %User Temp%\winyxyk.exe
- %User Temp%\fcdea.exe
- %User Temp%\alnonh.exe
- %User Temp%\winyigd.exe
- %User Temp%\oqja.exe
- %User Temp%\winxpge.exe
- %User Temp%\jnkai.exe
- %User Temp%\fguyvg.exe
- %User Temp%\winvcvm.exe
- %User Temp%\winglaxat.exe
- %User Temp%\winsgpbo.exe
- %User Temp%\bjxdw.exe
- %User Temp%\winkhksi.exe
- %User Temp%\winraqeku.exe
- %User Temp%\winqkeb.exe
- %User Temp%\psip.exe
- %User Temp%\hiih.exe
- %User Temp%\rkmlou.exe
- %User Temp%\pafew.exe
- %User Temp%\winbyko.exe
- %User Temp%\utijpw.exe
- %User Temp%\fbvgba.exe
- %User Temp%\wntkw.exe
- %User Temp%\winhcvmo.exe
- %User Temp%\jpuoa.exe
- %User Temp%\winvttq.exe
- %User Temp%\winimog.exe
- %User Temp%\winrdad.exe
- %User Temp%\kowgbn.exe
- %User Temp%\winnntmkh.exe
- %User Temp%\winoedm.exe
- %User Temp%\wintrrt.exe
- %User Temp%\winwhwc.exe
- %User Temp%\winyraael.exe
- %User Temp%\bvfcu.exe
- %User Temp%\qfaf.exe
- %User Temp%\windahltu.exe
- %User Temp%\winvbpa.exe
- %User Temp%\winaqabjc.exe
- %User Temp%\winbxpsnc.exe
- %User Temp%\ihdpt.exe
- %User Temp%\winhons.exe
- %User Temp%\winfvvpvi.exe
- %User Temp%\icrn.exe
- %User Temp%\wintqiemh.exe
- %User Temp%\winqmlo.exe
- %User Temp%\winwohpsk.exe
- %User Temp%\winkcen.exe
- %User Temp%\winjkkqt.exe
- %User Temp%\bhlrv.exe
- %User Temp%\winhfbbto.exe
- %User Temp%\winrdkk.exe
- %User Temp%\fomjdf.exe
- %User Temp%\bdvay.exe
- %User Temp%\mwibno.exe
- %User Temp%\vcitw.exe
- %User Temp%\winxwhay.exe
- %User Temp%\winbthxgm.exe
- %User Temp%\ntsgei.exe
- %User Temp%\bsyt.exe
- %User Temp%\winydbn.exe
- %User Temp%\winlkjmx.exe
- %User Temp%\jtjl.exe
- %User Temp%\wincfwtg.exe
- %User Temp%\winohorjb.exe
- %User Temp%\winygek.exe
- %User Temp%\windvcgsp.exe
- %User Temp%\yypsvk.exe
- %User Temp%\winknee.exe
- %User Temp%\winpppx.exe
- %User Temp%\uyucmu.exe
- %User Temp%\winisiksh.exe
- %User Temp%\winnuaws.exe
- %User Temp%\winwbqttq.exe
- %User Temp%\winvxetfd.exe
- %User Temp%\rvoqay.exe
- %User Temp%\wintphtmr.exe
- %User Temp%\winkktk.exe
- %User Temp%\wincechr.exe
- %User Temp%\windbftp.exe
- %User Temp%\winkwfpfk.exe
- %User Temp%\winjfyv.exe
- %User Temp%\winmqwi.exe
- %User Temp%\johgon.exe
- %User Temp%\lpsaw.exe
- %User Temp%\winmuqg.exe
- %User Temp%\winkghvdu.exe
- %User Temp%\winkgjr.exe
- %User Temp%\bsrw.exe
- %User Temp%\wintkhpc.exe
- %User Temp%\xcdmo.exe
- %User Temp%\winarkst.exe
- %User Temp%\winwirlr.exe
- %User Temp%\rgnhnk.exe
- %User Temp%\winuugtro.exe
- %User Temp%\winkcsjfc.exe
- %User Temp%\mjqlu.exe
- %User Temp%\voqssb.exe
- %User Temp%\wingijutb.exe
- %User Temp%\winmdtan.exe
- %User Temp%\qwina.exe
- %User Temp%\vldxtc.exe
- %User Temp%\pjjh.exe
- %User Temp%\cdydkm.exe
- %User Temp%\winjrbqiu.exe
- %User Temp%\winpgrchm.exe
- %User Temp%\glenrm.exe
- %User Temp%\hpix.exe
- %User Temp%\winnvkimk.exe
- %User Temp%\otbq.exe
- %User Temp%\winhejygr.exe
- %User Temp%\winoqjmy.exe
- %User Temp%\kfjinc.exe
- %User Temp%\winfqyprm.exe
(Note: %User Temp% is the current user's Temp folder, which is usually C:\Documents and Settings\{user name}\Local Settings\Temp on Windows 2000, XP, and Server 2003, or C:\Users\{user name}\AppData\Local\Temp on Windows Vista and 7.. %System% is the Windows system folder, which is usually C:\Windows\System32.)
Other Details
This worm connects to the following possibly malicious URL:
- http://{BLOCKED}edekparca.com/images/logos.gif?72de=235248
- http://{BLOCKED}arrod.com/images/logos.gif?bd06=145170
- http://{BLOCKED}mevi.com/images/logos.gif?cbbc=469404
- http://brandaoematos.{BLOCKED}m.br/images/logoi.gif?ce4c=264060
- http://{BLOCKED}teknik.com/logos.gif?dcb4=113000
- http://{BLOCKED}isangli.in/logoi.gif?e0f9=57593
- http://cacs.{BLOCKED}g.br/novosite/logos.gif?e3b8=466368
- http://butacm.{BLOCKED}o.ro/lo{BLOCKED}os.gif?e6f5=295625
- http://boyabateml.{BLOCKED}2.tr/images/logos.gif?e9d3=598590
- http://{BLOCKED}roup.com/images/logos.gif?eb79=602810
- http://{BLOCKED}edekparca.com/images/logos.gif?ec73=605310
- http://{BLOCKED}arrod.com/images/logos.gif?edcb=182625
- http://{BLOCKED}mevi.com/images/logos.gif?ee48=427000
- http://brandaoematos.{BLOCKED}m.br/images/logoi.gif?ef80=61312
- http://{BLOCKED}teknik.com/logos.gif?f00d=307265
- http://{BLOCKED}isangli.in/logoi.gif?f30a=248872
- http://cacs.{BLOCKED}g.br/novosite/logos.gif?f3e5=437059
- http://butacm.{BLOCKED}o.ro/lo{BLOCKED}os.gif?f695=631250
- http://boyabateml.{BLOCKED}2.tr/images/logos.gif?f77f=316795
- http://{BLOCKED}roup.com/images/logos.gif?f82b=635310
- http://{BLOCKED}edekparca.com/images/logos.gif?fa00=640000
- http://{BLOCKED}arrod.com/images/logos.gif?fada=256872
- http://{BLOCKED}mevi.com/images/logos.gif?fbd4=322340
- http://brandaoematos.{BLOCKED}m.br/images/logoi.gif?fcbf=647030
- http://{BLOCKED}teknik.com/logos.gif?10059=525000
- http://{BLOCKED}isangli.in/logoi.gif?10683=201609
- http://cacs.{BLOCKED}g.br/novosite/logos.gif?107ea=405372
- http://butacm.{BLOCKED}o.ro/lo{BLOCKED}os.gif?10ae8=614952
- http://boyabateml.{BLOCKED}2.tr/images/logos.gif?10bf1=274372
- http://{BLOCKED}roup.com/images/logos.gif?10cdc=619452
- http://{BLOCKED}edekparca.com/images/logos.gif?10e24=553248
- http://{BLOCKED}arrod.com/images/logos.gif?11076=627750
- http://{BLOCKED}mevi.com/images/logos.gif?11141=559624
- http://brandaoematos.{BLOCKED}m.br/images/logoi.gif?1121b=350855
- http://{BLOCKED}teknik.com/logos.gif?11344=352340
- http://{BLOCKED}isangli.in/logoi.gif?115b5=142186
- http://cacs.{BLOCKED}g.br/novosite/logos.gif?11652=641250
- http://butacm.{BLOCKED}o.ro/lo{BLOCKED}os.gif?11855=502355
- http://boyabateml.{BLOCKED}2.tr/images/logos.gif?119ad=432654
- http://{BLOCKED}roup.com/images/logos.gif?11a59=144562
- http://{BLOCKED}edekparca.com/images/logos.gif?11b24=144968
- http://{BLOCKED}arrod.com/images/logos.gif?11bff=581624
- http://{BLOCKED}mevi.com/images/logos.gif?11c9b=291436
- http://brandaoematos.{BLOCKED}m.br/images/logoi.gif?11de3=73187
- http://{BLOCKED}teknik.com/logos.gif?11e70=293312
- http://{BLOCKED}isangli.in/logoi.gif?120f0=517776
- http://cacs.{BLOCKED}g.br/novosite/logos.gif?1218d=222375
- http://butacm.{BLOCKED}o.ro/lo{BLOCKED}os.gif?1248a=524230
- http://boyabateml.{BLOCKED}2.tr/images/logos.gif?12536=675558
- http://{BLOCKED}roup.com/images/logos.gif?125e2=75234
- http://{BLOCKED}edekparca.com/images/logos.gif?1264f=602744
- http://{BLOCKED}arrod.com/images/logos.gif?1272a=302248
- http://{BLOCKED}mevi.com/images/logos.gif?127b7=605624
- http://brandaoematos.{BLOCKED}m.br/images/logoi.gif?12863=531125
- http://{BLOCKED}teknik.com/logos.gif?1293d=684837
- http://{BLOCKED}isangli.in/logoi.gif?12ca8=153936
- http://cacs.{BLOCKED}g.br/novosite/logos.gif?12d83=463122
- http://butacm.{BLOCKED}o.ro/lo{BLOCKED}os.gif?12fd5=622248
- http://boyabateml.{BLOCKED}2.tr/images/logos.gif?13071=545559
- http://{BLOCKED}roup.com/images/logos.gif?1310d=390465
- http://{BLOCKED}edekparca.com/images/logos.gif?1318a=156436
- http://{BLOCKED}arrod.com/images/logos.gif?13246=78406
- http://{BLOCKED}mevi.com/images/logos.gif?13301=707337
- http://brandaoematos.{BLOCKED}m.br/images/logoi.gif?133ec=630624
- http://{BLOCKED}teknik.com/logos.gif?13469=78953
- http://{BLOCKED}isangli.in/logoi.gif?139b8=401560
- http://cacs.{BLOCKED}g.br/novosite/logos.gif?13a74=402500
- http://butacm.{BLOCKED}o.ro/lo{BLOCKED}os.gif?13c87=162062
- http://boyabateml.{BLOCKED}2.tr/images/logos.gif?13d52=81234
- http://{BLOCKED}roup.com/images/logos.gif?13dfe=244218
- http://{BLOCKED}edekparca.com/images/logos.gif?14aa0=169280
- http://{BLOCKED}arrod.com/images/logos.gif?14c17=425075
- http://{BLOCKED}mevi.com/images/logos.gif?14cb3=170342
- http://brandaoematos.{BLOCKED}m.br/images/logoi.gif?14ddc=85468
- http://{BLOCKED}teknik.com/logos.gif?14e4a=342312
- http://{BLOCKED}isangli.in/logoi.gif?15147=690744
- http://cacs.{BLOCKED}g.br/novosite/logos.gif?15203=605717
- http://butacm.{BLOCKED}o.ro/lo{BLOCKED}os.gif?15464=522840
- http://boyabateml.{BLOCKED}2.tr/images/logos.gif?15500=87296
- http://{BLOCKED}roup.com/images/logos.gif?1559d=262359
- http://{BLOCKED}edekparca.com/images/logos.gif?156d5=438825
- http://{BLOCKED}arrod.com/images/logos.gif?15781=879370
- http://{BLOCKED}mevi.com/images/logos.gif?1580e=792702
- http://brandaoematos.{BLOCKED}m.br/images/logoi.gif?15927=88359
- http://{BLOCKED}teknik.com/logos.gif?159b4=885000
- http://{BLOCKED}isangli.in/logoi.gif?15c15=267327
- http://cacs.{BLOCKED}g.br/novosite/logos.gif?15cc1=624967
- http://butacm.{BLOCKED}o.ro/lo{BLOCKED}os.gif?15fed=360372
- http://boyabateml.{BLOCKED}2.tr/images/logos.gif?1608a=180500
- http://{BLOCKED}roup.com/images/logos.gif?16164=361872
- http://{BLOCKED}edekparca.com/images/logos.gif?16220=634592
- http://{BLOCKED}arrod.com/images/logos.gif?16358=727744
- http://{BLOCKED}mevi.com/images/logos.gif?163d5=455465
- http://brandaoematos.{BLOCKED}m.br/images/logoi.gif?16491=730248
- http://{BLOCKED}teknik.com/logos.gif?1650e=914060
- http://{BLOCKED}isangli.in/logoi.gif?1677f=368124
- http://cacs.{BLOCKED}g.br/novosite/logos.gif?1681b=368748
- http://butacm.{BLOCKED}o.ro/lo{BLOCKED}os.gif?16abb=92859
- http://boyabateml.{BLOCKED}2.tr/images/logos.gif?16bc5=745000
- http://{BLOCKED}roup.com/images/logos.gif?16c61=466405
- http://{BLOCKED}edekparca.com/images/logos.gif?16d5b=467655
- http://{BLOCKED}arrod.com/images/logos.gif?16e36=937500
- http://{BLOCKED}mevi.com/images/logos.gif?16ea3=469295
- http://brandaoematos.{BLOCKED}m.br/images/logoi.gif?17058=282888
- http://{BLOCKED}teknik.com/logos.gif?171df=473435
- http://{BLOCKED}isangli.in/logoi.gif?174ec=190936
- http://cacs.{BLOCKED}g.br/novosite/logos.gif?17598=669480
- http://butacm.{BLOCKED}o.ro/lo{BLOCKED}os.gif?178d4=578808
- http://boyabateml.{BLOCKED}2.tr/images/logos.gif?17990=289968
- http://{BLOCKED}roup.com/images/logos.gif?17a3c=96828
- http://{BLOCKED}edekparca.com/images/logos.gif?17b84=388624
- http://{BLOCKED}arrod.com/images/logos.gif?17c4f=389436
- http://{BLOCKED}mevi.com/images/logos.gif?17d68=292920
- http://brandaoematos.{BLOCKED}m.br/images/logoi.gif?17e33=782744
- http://{BLOCKED}teknik.com/logos.gif?17ec0=979840
- http://{BLOCKED}isangli.in/logoi.gif?18325=693763
- http://cacs.{BLOCKED}g.br/novosite/logos.gif?1840f=99343
- http://butacm.{BLOCKED}o.ro/lo{BLOCKED}os.gif?18680=699776
- http://boyabateml.{BLOCKED}2.tr/images/logos.gif?1872c=901260
- http://{BLOCKED}roup.com/images/logos.gif?187f7=401372
- http://{BLOCKED}edekparca.com/images/logos.gif?1897e=604404
- http://{BLOCKED}arrod.com/images/logos.gif?18a49=908433
- http://{BLOCKED}mevi.com/images/logos.gif?18b05=606750
- http://brandaoematos.{BLOCKED}m.br/images/logoi.gif?18bff=608250
- http://{BLOCKED}teknik.com/logos.gif?18c9b=507655
- http://{BLOCKED}isangli.in/logoi.gif?19054=614904
- http://cacs.{BLOCKED}g.br/novosite/logos.gif?190f0=718480
- http://butacm.{BLOCKED}o.ro/lo{BLOCKED}os.gif?19fb5=744947
- http://boyabateml.{BLOCKED}2.tr/images/logos.gif?1a052=1065780
- http://{BLOCKED}roup.com/images/logos.gif?1a13c=854496
- http://{BLOCKED}edekparca.com/images/logos.gif?1a1e8=855872
- http://{BLOCKED}arrod.com/images/logos.gif?1a320=858368
- http://{BLOCKED}mevi.com/images/logos.gif?1a3ec=860000
- http://brandaoematos.{BLOCKED}m.br/images/logoi.gif?1a4c6=430872
- http://{BLOCKED}teknik.com/logos.gif?1a543=215686
- http://{BLOCKED}isangli.in/logoi.gif?1a8dd=543825
- http://cacs.{BLOCKED}g.br/novosite/logos.gif?1a989=108937
- http://butacm.{BLOCKED}o.ro/lo{BLOCKED}os.gif?1abcb=438060
- http://boyabateml.{BLOCKED}2.tr/images/logos.gif?1acb6=109750
- http://{BLOCKED}roup.com/images/logos.gif?1ad52=1099060
- http://{BLOCKED}edekparca.com/images/logos.gif?1adfe=880624
- http://{BLOCKED}arrod.com/images/logos.gif?1aef8=992952
- http://{BLOCKED}mevi.com/images/logos.gif?1af75=662718
- http://brandaoematos.{BLOCKED}m.br/images/logoi.gif?1b021=995625
- http://{BLOCKED}teknik.com/logos.gif?1b11b=997875
- http://{BLOCKED}isangli.in/logoi.gif?1b3ab=111531
- http://cacs.{BLOCKED}g.br/novosite/logos.gif?1b4c4=894496
- http://butacm.{BLOCKED}o.ro/lo{BLOCKED}os.gif?1b745=224906
- http://boyabateml.{BLOCKED}2.tr/images/logos.gif?1b7f1=675750
- http://{BLOCKED}roup.com/images/logos.gif?1b88d=1015029
- http://{BLOCKED}edekparca.com/images/logos.gif?1b948=790776
- http://{BLOCKED}arrod.com/images/logos.gif?1ba04=1018404
- http://{BLOCKED}mevi.com/images/logos.gif?1ba81=1019529
- http://brandaoematos.{BLOCKED}m.br/images/logoi.gif?1bbd9=909000
- http://{BLOCKED}teknik.com/logos.gif?1bc84=568980
- http://{BLOCKED}isangli.in/logoi.gif?1c07c=918496
- http://cacs.{BLOCKED}g.br/novosite/logos.gif?1c138=575000
- http://butacm.{BLOCKED}o.ro/lo{BLOCKED}os.gif?1c3b8=115640
- http://boyabateml.{BLOCKED}2.tr/images/logos.gif?1c4a3=579375
- http://{BLOCKED}roup.com/images/logos.gif?1c53f=696186
- http://{BLOCKED}edekparca.com/images/logos.gif?1c5db=348561
- http://{BLOCKED}arrod.com/images/logos.gif?1c742=1048914
- http://{BLOCKED}mevi.com/images/logos.gif?1c7b0=233312
- http://brandaoematos.{BLOCKED}m.br/images/logoi.gif?1c8c9=116937
- http://{BLOCKED}teknik.com/logos.gif?1c9b3=468684
- http://{BLOCKED}isangli.in/logoi.gif?1ccd0=353904
- http://cacs.{BLOCKED}g.br/novosite/logos.gif?1cd9b=1063539
- http://butacm.{BLOCKED}o.ro/lo{BLOCKED}os.gif?1da4d=971368
- http://boyabateml.{BLOCKED}2.tr/images/logos.gif?1db38=364968
- http://{BLOCKED}roup.com/images/logos.gif?1dbf3=974744
- http://{BLOCKED}edekparca.com/images/logos.gif?1dd2c=1221560
- http://{BLOCKED}arrod.com/images/logos.gif?1df9d=245562
- http://{BLOCKED}mevi.com/images/logos.gif?1e039=737622
- http://brandaoematos.{BLOCKED}m.br/images/logoi.gif?1e191=1109529
- http://{BLOCKED}teknik.com/logos.gif?1e24c=1234680
- http://{BLOCKED}isangli.in/logoi.gif?1e6c1=124609
- http://cacs.{BLOCKED}g.br/novosite/logos.gif?1e76d=249562
- http://butacm.{BLOCKED}o.ro/lo{BLOCKED}os.gif?1ea1c=752808
- http://boyabateml.{BLOCKED}2.tr/images/logos.gif?1ec01=881671
- http://{BLOCKED}roup.com/images/logos.gif?1ed0a=631090
- http://{BLOCKED}edekparca.com/images/logos.gif?1edc6=1264060
- http://{BLOCKED}arrod.com/images/logos.gif?1ee72=379734
- http://{BLOCKED}mevi.com/images/logos.gif?1eefe=1267180
- http://brandaoematos.{BLOCKED}m.br/images/logoi.gif?1efc9=1142289
- http://{BLOCKED}teknik.com/logos.gif?1f16f=1273430
- http://{BLOCKED}isangli.in/logoi.gif?20277=1185327
- http://cacs.{BLOCKED}g.br/novosite/logos.gif?20361=527748
- http://butacm.{BLOCKED}o.ro/lo{BLOCKED}os.gif?2111d=135453
- http://boyabateml.{BLOCKED}2.tr/images/logos.gif?21217=542812
- http://{BLOCKED}roup.com/images/logos.gif?21340=408000
- http://{BLOCKED}edekparca.com/images/logos.gif?213ad=136109
- http://{BLOCKED}arrod.com/images/logos.gif?21572=136562
- http://{BLOCKED}mevi.com/images/logos.gif?21728=274000
- http://brandaoematos.{BLOCKED}m.br/images/logoi.gif?217e3=274374
- http://{BLOCKED}teknik.com/logos.gif?2189f=549500
This report is generated via an automated analysis system.
SOLUTION
Step 1
Before doing any scans, Windows XP, Windows Vista, and Windows 7 users must disable System Restore to allow full scanning of their computers.
Step 2
Restart in Safe Mode
Step 3
Enable Registry Editor, Task Manager, and Folder options
Step 4
Delete this registry key
Important: Editing the Windows Registry incorrectly can lead to irreversible system malfunction. Please do this step only if you know how or you can ask assistance from your system administrator. Else, check this Microsoft article first before modifying your computer's registry.
- In HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\policies
- system
- In HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center
- Svc
- In HKEY_CURRENT_USER\Software\Afqteuv
- 1926745233
Step 5
Delete this registry value
Important: Editing the Windows Registry incorrectly can lead to irreversible system malfunction. Please do this step only if you know how or you can ask assistance from your system administrator. Else, check this Microsoft article first before modifying your computer's registry.
- In HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run
- ASocksrv = "SocksA.exe"
- In HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center
- UacDisableNotify = "1"
- In HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Svc
- AntiVirusOverride = "1"
- In HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Svc
- AntiVirusDisableNotify = "1"
- In HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Svc
- FirewallDisableNotify = "1"
- In HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Svc
- FirewallOverride = "1"
- In HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Svc
- UpdatesDisableNotify = "1"
- In HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Svc
- UacDisableNotify = "1"
- In HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Internet Settings
- GlobalUserOffline = "0"
- In HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\system
- EnableLUA = "0"
- In HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Services\SharedAccess\Parameters\FirewallPolicy\StandardProfile\AuthorizedApplications\List
- {malware path and file name} = "{malware path and file name}:*:enabled:ipsec"
- In HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Services\SharedAccess\Parameters\FirewallPolicy\StandardProfile
- EnableFirewall = "0"
- In HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Services\SharedAccess\Parameters\FirewallPolicy\StandardProfile
- DoNotAllowExceptions = "0"
- In HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Services\SharedAccess\Parameters\FirewallPolicy\StandardProfile
- DisableNotifications = "1"
- In HKEY_CURRENT_USER\Software\Afqteuv\1926745233
- 1651272023 = "79"
- In HKEY_CURRENT_USER\Software\Afqteuv\1926745233
- -992423250 = "0"
- In HKEY_CURRENT_USER\Software\Afqteuv\1926745233
- 658848773 = "0"
- In HKEY_CURRENT_USER\Software\Afqteuv\1926745233
- -1984846500 = "23"
- In HKEY_CURRENT_USER\Software\Afqteuv\1926745233
- -333574477 = "183"
- In HKEY_CURRENT_USER\Software\Afqteuv\1926745233
- 1317697546 = "{random characters}"
- In HKEY_CURRENT_USER\Software\Afqteuv\1926745233
- -1325997727 = "{random characters}"
- In HKEY_CURRENT_USER\Software\Afqteuv
- W1_0 = "c4a71155"
- In HKEY_CURRENT_USER\Software\Afqteuv
- W2_0 = "2668"
- In HKEY_CURRENT_USER\Software\Afqteuv
- W3_0 = "136a29"
- In HKEY_CURRENT_USER\Software\Afqteuv
- W4_0 = "0"
- In HKEY_CURRENT_USER\Software\Afqteuv
- W1_1 = "abe191f"
- In HKEY_CURRENT_USER\Software\Afqteuv
- W2_1 = "626c7ed5"
- In HKEY_CURRENT_USER\Software\Afqteuv
- W3_1 = "636f37e"
- In HKEY_CURRENT_USER\Software\Afqteuv
- W4_1 = "626c6957"
- In HKEY_CURRENT_USER\Software\Afqteuv
- W1_2 = "1947ca67"
- In HKEY_CURRENT_USER\Software\Afqteuv
- W2_2 = "c4d8f32"
- In HKEY_CURRENT_USER\Software\Afqteuv
- W3_2 = "c5dbb887"
- In HKEY_CURRENT_USER\Software\Afqteuv
- W4_2 = "c4d8d2ae"
- In HKEY_CURRENT_USER\Software\Afqteuv
- W1_3 = "ba3c555"
- In HKEY_CURRENT_USER\Software\Afqteuv
- W2_3 = "274519cf"
- In HKEY_CURRENT_USER\Software\Afqteuv
- W3_3 = "2646562c"
- In HKEY_CURRENT_USER\Software\Afqteuv
- W4_3 = "27453c5"
- In HKEY_CURRENT_USER\Software\Afqteuv
- W1_4 = "8cf11d"
- In HKEY_CURRENT_USER\Software\Afqteuv
- W2_4 = "89b1b2d9"
- In HKEY_CURRENT_USER\Software\Afqteuv
- W3_4 = "88b2cf75"
- In HKEY_CURRENT_USER\Software\Afqteuv
- W4_4 = "89b1a55c"
- In HKEY_CURRENT_USER\Software\Afqteuv
- W1_5 = "ca8351e"
- In HKEY_CURRENT_USER\Software\Afqteuv
- W2_5 = "ec1e1f44"
- In HKEY_CURRENT_USER\Software\Afqteuv
- W3_5 = "ed1d649a"
- In HKEY_CURRENT_USER\Software\Afqteuv
- W4_5 = "ec1eeb3"
- In HKEY_CURRENT_USER\Software\Afqteuv
- W1_6 = "573a242"
- In HKEY_CURRENT_USER\Software\Afqteuv
- W2_6 = "4e8a67e8"
- In HKEY_CURRENT_USER\Software\Afqteuv
- W3_6 = "4f891223"
- In HKEY_CURRENT_USER\Software\Afqteuv
- W4_6 = "4e8a78a"
- In HKEY_CURRENT_USER\Software\Afqteuv
- W1_7 = "3d23738"
- In HKEY_CURRENT_USER\Software\Afqteuv
- W2_7 = "bf6fc7c"
- In HKEY_CURRENT_USER\Software\Afqteuv
- W3_7 = "b1f58b48"
- In HKEY_CURRENT_USER\Software\Afqteuv
- W4_7 = "bf6e161"
- In HKEY_CURRENT_USER\Software\Afqteuv
- W1_8 = "28a32e1"
- In HKEY_CURRENT_USER\Software\Afqteuv
- W2_8 = "1363569c"
- In HKEY_CURRENT_USER\Software\Afqteuv
- W3_8 = "126291"
- In HKEY_CURRENT_USER\Software\Afqteuv
- W4_8 = "13634ab8"
- In HKEY_CURRENT_USER\Software\Afqteuv
- W1_9 = "d9a9825f"
- In HKEY_CURRENT_USER\Software\Afqteuv
- W2_9 = "75cf92d8"
- In HKEY_CURRENT_USER\Software\Afqteuv
- W3_9 = "74ccde26"
- In HKEY_CURRENT_USER\Software\Afqteuv
- W4_9 = "75cfb4f"
- In HKEY_CURRENT_USER\Software\Afqteuv
- W1_10 = "e3a777b5"
- In HKEY_CURRENT_USER\Software\Afqteuv
- W2_10 = "d83c3c5"
- In HKEY_CURRENT_USER\Software\Afqteuv
- W3_10 = "d93f774f"
- In HKEY_CURRENT_USER\Software\Afqteuv
- W4_10 = "d83c1d66"
- In HKEY_CURRENT_USER\Software\Afqteuv
- W1_11 = "b42eff61"
- In HKEY_CURRENT_USER\Software\Afqteuv
- W2_11 = "3aa8994a"
- In HKEY_CURRENT_USER\Software\Afqteuv
- W3_11 = "3babec94"
- In HKEY_CURRENT_USER\Software\Afqteuv
- W4_11 = "3aa886bd"
- In HKEY_CURRENT_USER\Software\Afqteuv
- W1_12 = "de37bd59"
- In HKEY_CURRENT_USER\Software\Afqteuv
- W2_12 = "9d14e985"
- In HKEY_CURRENT_USER\Software\Afqteuv
- W3_12 = "9c179a3d"
- In HKEY_CURRENT_USER\Software\Afqteuv
- W4_12 = "9d14f14"
- In HKEY_CURRENT_USER\Software\Afqteuv
- W1_13 = "8f1ec3a"
- In HKEY_CURRENT_USER\Software\Afqteuv
- W2_13 = "ff8178e5"
- In HKEY_CURRENT_USER\Software\Afqteuv
- W3_13 = "fe823342"
- In HKEY_CURRENT_USER\Software\Afqteuv
- W4_13 = "ff81596b"
- In HKEY_CURRENT_USER\Software\Afqteuv
- W1_14 = "9c8d285"
- In HKEY_CURRENT_USER\Software\Afqteuv
- W2_14 = "61edd89"
- In HKEY_CURRENT_USER\Software\Afqteuv
- W3_14 = "6eea8eb"
- In HKEY_CURRENT_USER\Software\Afqteuv
- W4_14 = "61edc2c2"
- In HKEY_CURRENT_USER\Software\Afqteuv
- W1_15 = "cc8d4455"
- In HKEY_CURRENT_USER\Software\Afqteuv
- W2_15 = "c45a3776"
- In HKEY_CURRENT_USER\Software\Afqteuv
- W3_15 = "c559463"
- In HKEY_CURRENT_USER\Software\Afqteuv
- W4_15 = "c45a2c19"
- In HKEY_CURRENT_USER\Software\Afqteuv
- W1_16 = "77aff53e"
- In HKEY_CURRENT_USER\Software\Afqteuv
- W2_16 = "26c6836"
- In HKEY_CURRENT_USER\Software\Afqteuv
- W3_16 = "27c5ff59"
- In HKEY_CURRENT_USER\Software\Afqteuv
- W4_16 = "26c6957"
- In HKEY_CURRENT_USER\Software\Afqteuv
- W1_17 = "6eafb446"
- In HKEY_CURRENT_USER\Software\Afqteuv
- W2_17 = "8932e2a2"
- In HKEY_CURRENT_USER\Software\Afqteuv
- W3_17 = "883194ee"
- In HKEY_CURRENT_USER\Software\Afqteuv
- W4_17 = "8932fec7"
- In HKEY_CURRENT_USER\Software\Afqteuv
- W1_18 = "ba4e1149"
- In HKEY_CURRENT_USER\Software\Afqteuv
- W2_18 = "eb9f7ef1"
- In HKEY_CURRENT_USER\Software\Afqteuv
- W3_18 = "ea9c237"
- In HKEY_CURRENT_USER\Software\Afqteuv
- W4_18 = "eb9f681e"
- In HKEY_CURRENT_USER\Software\Afqteuv
- W1_19 = "f3e1ff2c"
- In HKEY_CURRENT_USER\Software\Afqteuv
- W2_19 = "4ebc65"
- In HKEY_CURRENT_USER\Software\Afqteuv
- W3_19 = "4f8bb5c"
- In HKEY_CURRENT_USER\Software\Afqteuv
- W4_19 = "4ebd175"
- In HKEY_CURRENT_USER\Software\Afqteuv
- W1_20 = "866d6f2"
- In HKEY_CURRENT_USER\Software\Afqteuv
- W2_20 = "b7827d3"
- In HKEY_CURRENT_USER\Software\Afqteuv
- W3_20 = "b17b5e5"
- In HKEY_CURRENT_USER\Software\Afqteuv
- W4_20 = "b783acc"
- In HKEY_CURRENT_USER\Software\Afqteuv
- W1_21 = "a2e172"
- In HKEY_CURRENT_USER\Software\Afqteuv
- W2_21 = "12e48ef"
- In HKEY_CURRENT_USER\Software\Afqteuv
- W3_21 = "13e7cea"
- In HKEY_CURRENT_USER\Software\Afqteuv
- W4_21 = "12e4a423"
- In HKEY_CURRENT_USER\Software\Afqteuv
- W1_22 = "51f71ae"
- In HKEY_CURRENT_USER\Software\Afqteuv
- W2_22 = "755112f5"
- In HKEY_CURRENT_USER\Software\Afqteuv
- W3_22 = "74526753"
- In HKEY_CURRENT_USER\Software\Afqteuv
- W4_22 = "7551d7a"
- In HKEY_CURRENT_USER\Software\Afqteuv
- W1_23 = "8d66485"
- In HKEY_CURRENT_USER\Software\Afqteuv
- W2_23 = "d7bd6dbe"
- In HKEY_CURRENT_USER\Software\Afqteuv
- W3_23 = "d6be1cf8"
- In HKEY_CURRENT_USER\Software\Afqteuv
- W4_23 = "d7bd76d1"
- In HKEY_CURRENT_USER\Software\Afqteuv
- W1_24 = "483695e"
- In HKEY_CURRENT_USER\Software\Afqteuv
- W2_24 = "3a29faf2"
- In HKEY_CURRENT_USER\Software\Afqteuv
- W3_24 = "3b2a8a1"
- In HKEY_CURRENT_USER\Software\Afqteuv
- W4_24 = "3a29e28"
- In HKEY_CURRENT_USER\Software\Afqteuv
- W1_25 = "38131638"
- In HKEY_CURRENT_USER\Software\Afqteuv
- W2_25 = "9c96551a"
- In HKEY_CURRENT_USER\Software\Afqteuv
- W3_25 = "9d952356"
- In HKEY_CURRENT_USER\Software\Afqteuv
- W4_25 = "9c96497f"
- In HKEY_CURRENT_USER\Software\Afqteuv
- W1_26 = "dc54bc83"
- In HKEY_CURRENT_USER\Software\Afqteuv
- W2_26 = "ff29351"
- In HKEY_CURRENT_USER\Software\Afqteuv
- W3_26 = "fe1d8ff"
- In HKEY_CURRENT_USER\Software\Afqteuv
- W4_26 = "ff2b2d6"
- In HKEY_CURRENT_USER\Software\Afqteuv
- W1_27 = "5fec6189"
- In HKEY_CURRENT_USER\Software\Afqteuv
- W2_27 = "616f39e7"
- In HKEY_CURRENT_USER\Software\Afqteuv
- W3_27 = "66c764"
- In HKEY_CURRENT_USER\Software\Afqteuv
- W4_27 = "616f1c2d"
- In HKEY_CURRENT_USER\Software\Afqteuv
- W1_28 = "85caac1"
- In HKEY_CURRENT_USER\Software\Afqteuv
- W2_28 = "c3db9835"
- In HKEY_CURRENT_USER\Software\Afqteuv
- W3_28 = "c2d8efad"
- In HKEY_CURRENT_USER\Software\Afqteuv
- W4_28 = "c3db8584"
- In HKEY_CURRENT_USER\Software\Afqteuv
- W1_29 = "9b645e99"
- In HKEY_CURRENT_USER\Software\Afqteuv
- W2_29 = "2647fb4"
- In HKEY_CURRENT_USER\Software\Afqteuv
- W3_29 = "274484f2"
- In HKEY_CURRENT_USER\Software\Afqteuv
- W4_29 = "2647eedb"
- In HKEY_CURRENT_USER\Software\Afqteuv
- W1_30 = "19a1762"
- In HKEY_CURRENT_USER\Software\Afqteuv
- W2_30 = "88b44112"
- In HKEY_CURRENT_USER\Software\Afqteuv
- W3_30 = "89b7321b"
- In HKEY_CURRENT_USER\Software\Afqteuv
- W4_30 = "88b45832"
- In HKEY_CURRENT_USER\Software\Afqteuv
- W1_31 = "1bb74cc"
- In HKEY_CURRENT_USER\Software\Afqteuv
- W2_31 = "eb2ecf"
- In HKEY_CURRENT_USER\Software\Afqteuv
- W3_31 = "ea23aba"
- In HKEY_CURRENT_USER\Software\Afqteuv
- W4_31 = "eb2c189"
- In HKEY_CURRENT_USER\Software\Afqteuv
- W1_32 = "5bcf582"
- In HKEY_CURRENT_USER\Software\Afqteuv
- W2_32 = "4d8d31bd"
- In HKEY_CURRENT_USER\Software\Afqteuv
- W3_32 = "4c8e4c9"
- In HKEY_CURRENT_USER\Software\Afqteuv
- W4_32 = "4d8d2ae"
- In HKEY_CURRENT_USER\Software\Afqteuv
- W1_33 = "3322a9a"
- In HKEY_CURRENT_USER\Software\Afqteuv
- W2_33 = "aff98889"
- In HKEY_CURRENT_USER\Software\Afqteuv
- W3_33 = "aefafe1e"
- In HKEY_CURRENT_USER\Software\Afqteuv
- W4_33 = "aff99437"
- In HKEY_CURRENT_USER\Software\Afqteuv
- W1_34 = "987df4c"
- In HKEY_CURRENT_USER\Software\Afqteuv
- W2_34 = "1265e378"
- In HKEY_CURRENT_USER\Software\Afqteuv
- W3_34 = "136697a7"
- In HKEY_CURRENT_USER\Software\Afqteuv
- W4_34 = "1265fd8e"
- In HKEY_CURRENT_USER\Software\Afqteuv
- W1_35 = "6c3cc893"
- In HKEY_CURRENT_USER\Software\Afqteuv
- W2_35 = "74d2442e"
- In HKEY_CURRENT_USER\Software\Afqteuv
- W3_35 = "75d1ccc"
- In HKEY_CURRENT_USER\Software\Afqteuv
- W4_35 = "74d266e5"
- In HKEY_CURRENT_USER\Software\Afqteuv
- W1_36 = "afac8bee"
- In HKEY_CURRENT_USER\Software\Afqteuv
- W2_36 = "d73ece31"
- In HKEY_CURRENT_USER\Software\Afqteuv
- W3_36 = "d63dba15"
- In HKEY_CURRENT_USER\Software\Afqteuv
- W4_36 = "d73ed3c"
- In HKEY_CURRENT_USER\Software\Afqteuv
- W1_37 = "88c3edf1"
- In HKEY_CURRENT_USER\Software\Afqteuv
- W2_37 = "39ab2297"
- In HKEY_CURRENT_USER\Software\Afqteuv
- W3_37 = "38a853ba"
- In HKEY_CURRENT_USER\Software\Afqteuv
- W4_37 = "39ab3993"
- In HKEY_CURRENT_USER\Software\Afqteuv
- W1_38 = "8942bb3"
- In HKEY_CURRENT_USER\Software\Afqteuv
- W2_38 = "9c17bfe1"
- In HKEY_CURRENT_USER\Software\Afqteuv
- W3_38 = "9d14c8c3"
- In HKEY_CURRENT_USER\Software\Afqteuv
- W4_38 = "9c17a2ea"
- In HKEY_CURRENT_USER\Software\Afqteuv
- W1_39 = "27fec5"
- In HKEY_CURRENT_USER\Software\Afqteuv
- W2_39 = "fe84186"
- In HKEY_CURRENT_USER\Software\Afqteuv
- W3_39 = "ff876668"
- In HKEY_CURRENT_USER\Software\Afqteuv
- W4_39 = "fe84c41"
- In HKEY_CURRENT_USER\Software\Afqteuv
- W1_40 = "c8638d4"
- In HKEY_CURRENT_USER\Software\Afqteuv
- W2_40 = "6f6fca"
- In HKEY_CURRENT_USER\Software\Afqteuv
- W3_40 = "61f31fb1"
- In HKEY_CURRENT_USER\Software\Afqteuv
- W4_40 = "6f7598"
- In HKEY_CURRENT_USER\Software\Afqteuv
- W1_41 = "94caab2"
- In HKEY_CURRENT_USER\Software\Afqteuv
- W2_41 = "c35cc689"
- In HKEY_CURRENT_USER\Software\Afqteuv
- W3_41 = "c25fb4c6"
- In HKEY_CURRENT_USER\Software\Afqteuv
- W4_41 = "c35cdeef"
- In HKEY_CURRENT_USER\Software\Afqteuv
- W1_42 = "1794a1"
- In HKEY_CURRENT_USER\Software\Afqteuv
- W2_42 = "25c95199"
- In HKEY_CURRENT_USER\Software\Afqteuv
- W3_42 = "24ca226f"
- In HKEY_CURRENT_USER\Software\Afqteuv
- W4_42 = "25c94846"
- In HKEY_CURRENT_USER\Software\Afqteuv
- W1_43 = "aac954"
- In HKEY_CURRENT_USER\Software\Afqteuv
- W2_43 = "8835aa4a"
- In HKEY_CURRENT_USER\Software\Afqteuv
- W3_43 = "8936dbb4"
- In HKEY_CURRENT_USER\Software\Afqteuv
- W4_43 = "8835b19d"
- In HKEY_CURRENT_USER\Software\Afqteuv
- W1_44 = "c87e53d"
- In HKEY_CURRENT_USER\Software\Afqteuv
- W2_44 = "eaa23b15"
- In HKEY_CURRENT_USER\Software\Afqteuv
- W3_44 = "eba17dd"
- In HKEY_CURRENT_USER\Software\Afqteuv
- W4_44 = "eaa21af4"
- In HKEY_CURRENT_USER\Software\Afqteuv
- W1_45 = "cee312"
- In HKEY_CURRENT_USER\Software\Afqteuv
- W2_45 = "4de93ac"
- In HKEY_CURRENT_USER\Software\Afqteuv
- W3_45 = "4cdee62"
- In HKEY_CURRENT_USER\Software\Afqteuv
- W4_45 = "4de844b"
- In HKEY_CURRENT_USER\Software\Afqteuv
- W1_46 = "aa1ee2f"
- In HKEY_CURRENT_USER\Software\Afqteuv
- W2_46 = "af7afbd7"
- In HKEY_CURRENT_USER\Software\Afqteuv
- W3_46 = "ae79878b"
- In HKEY_CURRENT_USER\Software\Afqteuv
- W4_46 = "af7aeda2"
- In HKEY_CURRENT_USER\Software\Afqteuv
- W1_47 = "bc58de1"
- In HKEY_CURRENT_USER\Software\Afqteuv
- W2_47 = "11e74ce5"
- In HKEY_CURRENT_USER\Software\Afqteuv
- W3_47 = "1e43cd"
- In HKEY_CURRENT_USER\Software\Afqteuv
- W4_47 = "11e756f9"
- In HKEY_CURRENT_USER\Software\Afqteuv
- W1_48 = "6f7da86"
- In HKEY_CURRENT_USER\Software\Afqteuv
- W2_48 = "7453e5b"
- In HKEY_CURRENT_USER\Software\Afqteuv
- W3_48 = "755aa79"
- In HKEY_CURRENT_USER\Software\Afqteuv
- W4_48 = "7453c5"
- In HKEY_CURRENT_USER\Software\Afqteuv
- W1_49 = "a2e55fe"
- In HKEY_CURRENT_USER\Software\Afqteuv
- W2_49 = "d6c92c"
- In HKEY_CURRENT_USER\Software\Afqteuv
- W3_49 = "d7c3438e"
- In HKEY_CURRENT_USER\Software\Afqteuv
- W4_49 = "d6c29a7"
- In HKEY_CURRENT_USER\Software\Afqteuv
- W1_50 = "d22b719c"
- In HKEY_CURRENT_USER\Software\Afqteuv
- W2_50 = "392c89a3"
- In HKEY_CURRENT_USER\Software\Afqteuv
- W3_50 = "382ff8d7"
- In HKEY_CURRENT_USER\Software\Afqteuv
- W4_50 = "392c92fe"
- In HKEY_CURRENT_USER\Software\Afqteuv
- W1_51 = "f9e6fc97"
- In HKEY_CURRENT_USER\Software\Afqteuv
- W2_51 = "9b98eadc"
- In HKEY_CURRENT_USER\Software\Afqteuv
- W3_51 = "9a9b967c"
- In HKEY_CURRENT_USER\Software\Afqteuv
- W4_51 = "9b98fc55"
- In HKEY_CURRENT_USER\Software\Afqteuv
- W1_52 = "ce2e6412"
- In HKEY_CURRENT_USER\Software\Afqteuv
- W2_52 = "fe57f29"
- In HKEY_CURRENT_USER\Software\Afqteuv
- W3_52 = "ff6f85"
- In HKEY_CURRENT_USER\Software\Afqteuv
- W4_52 = "fe565ac"
- In HKEY_CURRENT_USER\Software\Afqteuv
- W1_53 = "2a299d5"
- In HKEY_CURRENT_USER\Software\Afqteuv
- W2_53 = "671eed"
- In HKEY_CURRENT_USER\Software\Afqteuv
- W3_53 = "6172a52a"
- In HKEY_CURRENT_USER\Software\Afqteuv
- W4_53 = "671cf3"
- In HKEY_CURRENT_USER\Software\Afqteuv
- W1_54 = "fda123"
- In HKEY_CURRENT_USER\Software\Afqteuv
- W2_54 = "c2de2f9d"
- In HKEY_CURRENT_USER\Software\Afqteuv
- W3_54 = "c3dd5273"
- In HKEY_CURRENT_USER\Software\Afqteuv
- W4_54 = "c2de385a"
- In HKEY_CURRENT_USER\Software\Afqteuv
- W1_55 = "4af7e1e4"
- In HKEY_CURRENT_USER\Software\Afqteuv
- W2_55 = "254ab837"
- In HKEY_CURRENT_USER\Software\Afqteuv
- W3_55 = "2449cb98"
- In HKEY_CURRENT_USER\Software\Afqteuv
- W4_55 = "254aa1b1"
- In HKEY_CURRENT_USER\Software\Afqteuv
- W1_56 = "be1ef472"
- In HKEY_CURRENT_USER\Software\Afqteuv
- W2_56 = "87b71d4b"
- In HKEY_CURRENT_USER\Software\Afqteuv
- W3_56 = "86b46121"
- In HKEY_CURRENT_USER\Software\Afqteuv
- W4_56 = "87b7b8"
- In HKEY_CURRENT_USER\Software\Afqteuv
- W1_57 = "4ae85e6"
- In HKEY_CURRENT_USER\Software\Afqteuv
- W2_57 = "ea2369a2"
- In HKEY_CURRENT_USER\Software\Afqteuv
- W3_57 = "eb21e76"
- In HKEY_CURRENT_USER\Software\Afqteuv
- W4_57 = "ea23745f"
- In HKEY_CURRENT_USER\Software\Afqteuv
- W1_58 = "8e3e41ee"
- In HKEY_CURRENT_USER\Software\Afqteuv
- W2_58 = "4c8fc614"
- In HKEY_CURRENT_USER\Software\Afqteuv
- W3_58 = "4d8cb79f"
- In HKEY_CURRENT_USER\Software\Afqteuv
- W4_58 = "4c8fddb6"
- In HKEY_CURRENT_USER\Software\Afqteuv
- W1_59 = "7e6d1443"
- In HKEY_CURRENT_USER\Software\Afqteuv
- W2_59 = "aefc5e54"
- In HKEY_CURRENT_USER\Software\Afqteuv
- W3_59 = "afff2d24"
- In HKEY_CURRENT_USER\Software\Afqteuv
- W4_59 = "aefc47d"
- In HKEY_CURRENT_USER\Software\Afqteuv
- W1_60 = "b57c273d"
- In HKEY_CURRENT_USER\Software\Afqteuv
- W2_60 = "1168a93d"
- In HKEY_CURRENT_USER\Software\Afqteuv
- W3_60 = "16bda4d"
- In HKEY_CURRENT_USER\Software\Afqteuv
- W4_60 = "1168b64"
- In HKEY_CURRENT_USER\Software\Afqteuv
- W1_61 = "7a86fe6"
- In HKEY_CURRENT_USER\Software\Afqteuv
- W2_61 = "73d5eab"
- In HKEY_CURRENT_USER\Software\Afqteuv
- W3_61 = "72d67392"
- In HKEY_CURRENT_USER\Software\Afqteuv
- W4_61 = "73d519bb"
- In HKEY_CURRENT_USER\Software\Afqteuv
- W1_62 = "1d2fea5e"
- In HKEY_CURRENT_USER\Software\Afqteuv
- W2_62 = "d641aa7"
- In HKEY_CURRENT_USER\Software\Afqteuv
- W3_62 = "d742e93b"
- In HKEY_CURRENT_USER\Software\Afqteuv
- W4_62 = "d6418312"
- In HKEY_CURRENT_USER\Software\Afqteuv
- W1_63 = "5f53953c"
- In HKEY_CURRENT_USER\Software\Afqteuv
- W2_63 = "38adf1f4"
- In HKEY_CURRENT_USER\Software\Afqteuv
- W3_63 = "39ae864"
- In HKEY_CURRENT_USER\Software\Afqteuv
- W4_63 = "38adec69"
- In HKEY_CURRENT_USER\Software\Afqteuv
- W1_64 = "5ad2ccbc"
- In HKEY_CURRENT_USER\Software\Afqteuv
- W2_64 = "9b1a4294"
- In HKEY_CURRENT_USER\Software\Afqteuv
- W3_64 = "9a193fe9"
- In HKEY_CURRENT_USER\Software\Afqteuv
- W4_64 = "9b1a55c"
- In HKEY_CURRENT_USER\Software\Afqteuv
- W1_65 = "418f5543"
- In HKEY_CURRENT_USER\Software\Afqteuv
- W2_65 = "fd86a678"
- In HKEY_CURRENT_USER\Software\Afqteuv
- W3_65 = "fc85d53e"
- In HKEY_CURRENT_USER\Software\Afqteuv
- W4_65 = "fd86bf17"
- In HKEY_CURRENT_USER\Software\Afqteuv
- W1_66 = "9487132"
- In HKEY_CURRENT_USER\Software\Afqteuv
- W2_66 = "5ff332c8"
- In HKEY_CURRENT_USER\Software\Afqteuv
- W3_66 = "5ef4247"
- In HKEY_CURRENT_USER\Software\Afqteuv
- W4_66 = "5ff3286e"
- In HKEY_CURRENT_USER\Software\Afqteuv
- W1_67 = "1eddb59c"
- In HKEY_CURRENT_USER\Software\Afqteuv
- W2_67 = "c25f8a8d"
- In HKEY_CURRENT_USER\Software\Afqteuv
- W3_67 = "c35cfbec"
- In HKEY_CURRENT_USER\Software\Afqteuv
- W4_67 = "c25f91c5"
- In HKEY_CURRENT_USER\Software\Afqteuv
- W1_68 = "663794a"
- In HKEY_CURRENT_USER\Software\Afqteuv
- W2_68 = "24cbe56b"
- In HKEY_CURRENT_USER\Software\Afqteuv
- W3_68 = "25c89135"
- In HKEY_CURRENT_USER\Software\Afqteuv
- W4_68 = "24cbfb1c"
- In HKEY_CURRENT_USER\Software\Afqteuv
- W1_69 = "8aaf593d"
- In HKEY_CURRENT_USER\Software\Afqteuv
- W2_69 = "87387264"
- In HKEY_CURRENT_USER\Software\Afqteuv
- W3_69 = "863be5a"
- In HKEY_CURRENT_USER\Software\Afqteuv
- W4_69 = "87386473"
- In HKEY_CURRENT_USER\Software\Afqteuv
- W1_70 = "4aa389"
- In HKEY_CURRENT_USER\Software\Afqteuv
- W2_70 = "e9a4d71"
- In HKEY_CURRENT_USER\Software\Afqteuv
- W3_70 = "e8a7a7e3"
- In HKEY_CURRENT_USER\Software\Afqteuv
- W4_70 = "e9a4cdca"
- In HKEY_CURRENT_USER\Software\Afqteuv
- W1_71 = "4d3b379a"
- In HKEY_CURRENT_USER\Software\Afqteuv
- W2_71 = "4c111516"
- In HKEY_CURRENT_USER\Software\Afqteuv
- W3_71 = "4d125d8"
- In HKEY_CURRENT_USER\Software\Afqteuv
- W4_71 = "4c113721"
- In HKEY_CURRENT_USER\Software\Afqteuv
- W1_72 = "7cf3491a"
- In HKEY_CURRENT_USER\Software\Afqteuv
- W2_72 = "ae7dbc57"
- In HKEY_CURRENT_USER\Software\Afqteuv
- W3_72 = "af7eca51"
- In HKEY_CURRENT_USER\Software\Afqteuv
- W4_72 = "ae7da78"
- In HKEY_CURRENT_USER\Software\Afqteuv
- W1_73 = "89d5e74"
- In HKEY_CURRENT_USER\Software\Afqteuv
- W2_73 = "1ea114"
- In HKEY_CURRENT_USER\Software\Afqteuv
- W3_73 = "11e963e6"
- In HKEY_CURRENT_USER\Software\Afqteuv
- W4_73 = "1ea9cf"
- In HKEY_CURRENT_USER\Software\Afqteuv
- W1_74 = "5df5587f"
- In HKEY_CURRENT_USER\Software\Afqteuv
- W2_74 = "735657e1"
- In HKEY_CURRENT_USER\Software\Afqteuv
- W3_74 = "725519f"
- In HKEY_CURRENT_USER\Software\Afqteuv
- W4_74 = "73567326"
- In HKEY_CURRENT_USER\Software\Afqteuv
- W1_75 = "a5f83933"
- In HKEY_CURRENT_USER\Software\Afqteuv
- W2_75 = "d5c2cb4a"
- In HKEY_CURRENT_USER\Software\Afqteuv
- W3_75 = "d4c1b654"
- In HKEY_CURRENT_USER\Software\Afqteuv
- W4_75 = "d5c2dc7d"
- In HKEY_CURRENT_USER\Software\Afqteuv
- W1_76 = "346ca7"
- In HKEY_CURRENT_USER\Software\Afqteuv
- W2_76 = "382f583f"
- In HKEY_CURRENT_USER\Software\Afqteuv
- W3_76 = "392c2ffd"
- In HKEY_CURRENT_USER\Software\Afqteuv
- W4_76 = "382f45d4"
- In HKEY_CURRENT_USER\Software\Afqteuv
- W1_77 = "43bf126d"
- In HKEY_CURRENT_USER\Software\Afqteuv
- W2_77 = "9a9b8e6d"
- In HKEY_CURRENT_USER\Software\Afqteuv
- W3_77 = "9b98c52"
- In HKEY_CURRENT_USER\Software\Afqteuv
- W4_77 = "9a9baf2b"
- In HKEY_CURRENT_USER\Software\Afqteuv
- W1_78 = "66586fcd"
- In HKEY_CURRENT_USER\Software\Afqteuv
- W2_78 = "fd8e7e"
- In HKEY_CURRENT_USER\Software\Afqteuv
- W3_78 = "fcb72ab"
- In HKEY_CURRENT_USER\Software\Afqteuv
- W4_78 = "fd81882"
- In HKEY_CURRENT_USER\Software\Afqteuv
- W1_79 = "2fd725"
- In HKEY_CURRENT_USER\Software\Afqteuv
- W2_79 = "5f74a5ac"
- In HKEY_CURRENT_USER\Software\Afqteuv
- W3_79 = "5e77ebf"
- In HKEY_CURRENT_USER\Software\Afqteuv
- W4_79 = "5f7481d9"
- In HKEY_CURRENT_USER\Software\Afqteuv
- W1_80 = "37bc9969"
- In HKEY_CURRENT_USER\Software\Afqteuv
- W2_80 = "c1ef2eb"
- In HKEY_CURRENT_USER\Software\Afqteuv
- W3_80 = "ce38119"
- In HKEY_CURRENT_USER\Software\Afqteuv
- W4_80 = "c1eeb3"
- In HKEY_CURRENT_USER\Software\Afqteuv
- W1_81 = "54616b3a"
- In HKEY_CURRENT_USER\Software\Afqteuv
- W2_81 = "244d4a7"
- In HKEY_CURRENT_USER\Software\Afqteuv
- W3_81 = "254e3eae"
- In HKEY_CURRENT_USER\Software\Afqteuv
- W4_81 = "244d5487"
- In HKEY_CURRENT_USER\Software\Afqteuv
- W1_82 = "d6a88865"
- In HKEY_CURRENT_USER\Software\Afqteuv
- W2_82 = "86b9a5f9"
- In HKEY_CURRENT_USER\Software\Afqteuv
- W3_82 = "87bad7f7"
- In HKEY_CURRENT_USER\Software\Afqteuv
- W4_82 = "86b9bdde"
- In HKEY_CURRENT_USER\Software\Afqteuv
- W1_83 = "892b666"
- In HKEY_CURRENT_USER\Software\Afqteuv
- W2_83 = "e92638e"
- In HKEY_CURRENT_USER\Software\Afqteuv
- W3_83 = "e8254d1c"
- In HKEY_CURRENT_USER\Software\Afqteuv
- W4_83 = "e9262735"
- In HKEY_CURRENT_USER\Software\Afqteuv
- W1_84 = "2652d445"
- In HKEY_CURRENT_USER\Software\Afqteuv
- W2_84 = "4b928e3d"
- In HKEY_CURRENT_USER\Software\Afqteuv
- W3_84 = "4a91faa5"
- In HKEY_CURRENT_USER\Software\Afqteuv
- W4_84 = "4b9298c"
- In HKEY_CURRENT_USER\Software\Afqteuv
- W1_85 = "6ab3bb7"
- In HKEY_CURRENT_USER\Software\Afqteuv
- W2_85 = "adfee5c7"
- In HKEY_CURRENT_USER\Software\Afqteuv
- W3_85 = "acfd93ca"
- In HKEY_CURRENT_USER\Software\Afqteuv
- W4_85 = "adfef9e3"
- In HKEY_CURRENT_USER\Software\Afqteuv
- W1_86 = "677ec5f2"
- In HKEY_CURRENT_USER\Software\Afqteuv
- W2_86 = "16b7f41"
- In HKEY_CURRENT_USER\Software\Afqteuv
- W3_86 = "1168913"
- In HKEY_CURRENT_USER\Software\Afqteuv
- W4_86 = "16b633a"
- In HKEY_CURRENT_USER\Software\Afqteuv
- W1_87 = "3bb47c8"
- In HKEY_CURRENT_USER\Software\Afqteuv
- W2_87 = "72d7edd"
- In HKEY_CURRENT_USER\Software\Afqteuv
- W3_87 = "73d4a6b8"
- In HKEY_CURRENT_USER\Software\Afqteuv
- W4_87 = "72d7cc91"
- In HKEY_CURRENT_USER\Software\Afqteuv
- W1_88 = "df36f3bc"
- In HKEY_CURRENT_USER\Software\Afqteuv
- W2_88 = "d5442361"
- In HKEY_CURRENT_USER\Software\Afqteuv
- W3_88 = "d4475fc1"
- In HKEY_CURRENT_USER\Software\Afqteuv
- W4_88 = "d54435e8"
- In HKEY_CURRENT_USER\Software\Afqteuv
- W1_89 = "4f3c49f1"
- In HKEY_CURRENT_USER\Software\Afqteuv
- W2_89 = "37b86f9"
- In HKEY_CURRENT_USER\Software\Afqteuv
- W3_89 = "36b3f516"
- In HKEY_CURRENT_USER\Software\Afqteuv
- W4_89 = "37b9f3f"
- In HKEY_CURRENT_USER\Software\Afqteuv
- W1_90 = "b91de1d8"
- In HKEY_CURRENT_USER\Software\Afqteuv
- W2_90 = "9a1d1471"
- In HKEY_CURRENT_USER\Software\Afqteuv
- W3_90 = "9b1e62bf"
- In HKEY_CURRENT_USER\Software\Afqteuv
- W4_90 = "9a1d896"
- In HKEY_CURRENT_USER\Software\Afqteuv
- W1_91 = "ac26b51"
- In HKEY_CURRENT_USER\Software\Afqteuv
- W2_91 = "fc8951d6"
- In HKEY_CURRENT_USER\Software\Afqteuv
- W3_91 = "fd8a1bc4"
- In HKEY_CURRENT_USER\Software\Afqteuv
- W4_91 = "fc8971ed"
- In HKEY_CURRENT_USER\Software\Afqteuv
- W1_92 = "653ec7f9"
- In HKEY_CURRENT_USER\Software\Afqteuv
- W2_92 = "5ef5c1da"
- In HKEY_CURRENT_USER\Software\Afqteuv
- W3_92 = "5ff6b16d"
- In HKEY_CURRENT_USER\Software\Afqteuv
- W4_92 = "5ef5db44"
- In HKEY_CURRENT_USER\Software\Afqteuv
- W1_93 = "7ad7b8f9"
- In HKEY_CURRENT_USER\Software\Afqteuv
- W2_93 = "c1625d62"
- In HKEY_CURRENT_USER\Software\Afqteuv
- W3_93 = "c612eb2"
- In HKEY_CURRENT_USER\Software\Afqteuv
- W4_93 = "c162449b"
- In HKEY_CURRENT_USER\Software\Afqteuv
- W1_94 = "f7568dab"
- In HKEY_CURRENT_USER\Software\Afqteuv
- W2_94 = "23ceb272"
- In HKEY_CURRENT_USER\Software\Afqteuv
- W3_94 = "22cdc7db"
- In HKEY_CURRENT_USER\Software\Afqteuv
- W4_94 = "23ceadf2"
- In HKEY_CURRENT_USER\Software\Afqteuv
- W1_95 = "c2d44b9d"
- In HKEY_CURRENT_USER\Software\Afqteuv
- W2_95 = "863bab4"
- In HKEY_CURRENT_USER\Software\Afqteuv
- W3_95 = "87387d6"
- In HKEY_CURRENT_USER\Software\Afqteuv
- W4_95 = "863b1749"
- In HKEY_CURRENT_USER\Software\Afqteuv
- W1_96 = "6d61e8dc"
- In HKEY_CURRENT_USER\Software\Afqteuv
- W2_96 = "e8a79fcd"
- In HKEY_CURRENT_USER\Software\Afqteuv
- W3_96 = "e9a4ea89"
- In HKEY_CURRENT_USER\Software\Afqteuv
- W4_96 = "e8a78a"
- In HKEY_CURRENT_USER\Software\Afqteuv
- W1_97 = "cc71a3e"
- In HKEY_CURRENT_USER\Software\Afqteuv
- W2_97 = "4b13cada"
- In HKEY_CURRENT_USER\Software\Afqteuv
- W3_97 = "4a183de"
- In HKEY_CURRENT_USER\Software\Afqteuv
- W4_97 = "4b13e9f7"
- In HKEY_CURRENT_USER\Software\Afqteuv
- W1_98 = "19ca2c18"
- In HKEY_CURRENT_USER\Software\Afqteuv
- W2_98 = "ad848f9"
- In HKEY_CURRENT_USER\Software\Afqteuv
- W3_98 = "ac833967"
- In HKEY_CURRENT_USER\Software\Afqteuv
- W4_98 = "ad8534e"
- In HKEY_CURRENT_USER\Software\Afqteuv
- W1_99 = "375a519"
- In HKEY_CURRENT_USER\Software\Afqteuv
- W2_99 = "feca222"
- In HKEY_CURRENT_USER\Software\Afqteuv
- W3_99 = "eefd68c"
- In HKEY_CURRENT_USER\Software\Afqteuv
- W4_99 = "fecbca5"
- In HKEY_CURRENT_USER\Software\Afqteuv
- W1_100 = "3d3c4da3"
- In HKEY_CURRENT_USER\Software\Afqteuv
- W2_100 = "7259381"
- In HKEY_CURRENT_USER\Software\Afqteuv
- W3_100 = "735a4fd5"
- In HKEY_CURRENT_USER\Software\Afqteuv
- W4_100 = "725925fc"
- In HKEY_CURRENT_USER\Software\Afqteuv
- W1_101 = "57e5fef"
- In HKEY_CURRENT_USER\Software\Afqteuv
- W2_101 = "d4c5988"
- In HKEY_CURRENT_USER\Software\Afqteuv
- W3_101 = "d5c6e57a"
- In HKEY_CURRENT_USER\Software\Afqteuv
- W4_101 = "d4c58f53"
- In HKEY_CURRENT_USER\Software\Afqteuv
- W1_102 = "5268c411"
- In HKEY_CURRENT_USER\Software\Afqteuv
- W2_102 = "3731d8a1"
- In HKEY_CURRENT_USER\Software\Afqteuv
- W3_102 = "36329283"
- In HKEY_CURRENT_USER\Software\Afqteuv
- W4_102 = "3731f8aa"
- In HKEY_CURRENT_USER\Software\Afqteuv
- W1_103 = "af188451"
- In HKEY_CURRENT_USER\Software\Afqteuv
- W2_103 = "999e79b6"
- In HKEY_CURRENT_USER\Software\Afqteuv
- W3_103 = "989d828"
- In HKEY_CURRENT_USER\Software\Afqteuv
- W4_103 = "999e621"
- In HKEY_CURRENT_USER\Software\Afqteuv
- W1_104 = "53abaee"
- In HKEY_CURRENT_USER\Software\Afqteuv
- W2_104 = "fcad6e9"
- In HKEY_CURRENT_USER\Software\Afqteuv
- W3_104 = "fd9a171"
- In HKEY_CURRENT_USER\Software\Afqteuv
- W4_104 = "fcacb58"
- In HKEY_CURRENT_USER\Software\Afqteuv
- W1_105 = "1becffb7"
- In HKEY_CURRENT_USER\Software\Afqteuv
- W2_105 = "5e771165"
- In HKEY_CURRENT_USER\Software\Afqteuv
- W3_105 = "5f745e86"
- In HKEY_CURRENT_USER\Software\Afqteuv
- W4_105 = "5e7734af"
- In HKEY_CURRENT_USER\Software\Afqteuv
- W1_106 = "2e28e85b"
- In HKEY_CURRENT_USER\Software\Afqteuv
- W2_106 = "ce38971"
- In HKEY_CURRENT_USER\Software\Afqteuv
- W3_106 = "c1ef42f"
- In HKEY_CURRENT_USER\Software\Afqteuv
- W4_106 = "ce39e6"
- In HKEY_CURRENT_USER\Software\Afqteuv
- W1_107 = "ce7ae1f"
- In HKEY_CURRENT_USER\Software\Afqteuv
- W2_107 = "2351e4"
- In HKEY_CURRENT_USER\Software\Afqteuv
- W3_107 = "22536d74"
- In HKEY_CURRENT_USER\Software\Afqteuv
- W4_107 = "23575d"
- In HKEY_CURRENT_USER\Software\Afqteuv
- W1_108 = "ae2956a"
- In HKEY_CURRENT_USER\Software\Afqteuv
- W2_108 = "85bc6791"
- In HKEY_CURRENT_USER\Software\Afqteuv
- W3_108 = "84bf1a9d"
- In HKEY_CURRENT_USER\Software\Afqteuv
- W4_108 = "85bc7b4"
- In HKEY_CURRENT_USER\Software\Afqteuv
- W1_109 = "3b98a5d"
- In HKEY_CURRENT_USER\Software\Afqteuv
- W2_109 = "e828ccc4"
- In HKEY_CURRENT_USER\Software\Afqteuv
- W3_109 = "e92bb22"
- In HKEY_CURRENT_USER\Software\Afqteuv
- W4_109 = "e828dab"
- In HKEY_CURRENT_USER\Software\Afqteuv
- W1_110 = "668258de"
- In HKEY_CURRENT_USER\Software\Afqteuv
- W2_110 = "4a955ea8"
- In HKEY_CURRENT_USER\Software\Afqteuv
- W3_110 = "4b96294b"
- In HKEY_CURRENT_USER\Software\Afqteuv
- W4_110 = "4a954362"
- In HKEY_CURRENT_USER\Software\Afqteuv
- W1_111 = "c35e66c9"
- In HKEY_CURRENT_USER\Software\Afqteuv
- W2_111 = "ad1ba6"
- In HKEY_CURRENT_USER\Software\Afqteuv
- W3_111 = "ac2c69"
- In HKEY_CURRENT_USER\Software\Afqteuv
- W4_111 = "ad1acb9"
- In HKEY_CURRENT_USER\Software\Afqteuv
- W1_112 = "f3e879ad"
- In HKEY_CURRENT_USER\Software\Afqteuv
- W2_112 = "f6e3497"
- In HKEY_CURRENT_USER\Software\Afqteuv
- W3_112 = "e6d7c39"
- In HKEY_CURRENT_USER\Software\Afqteuv
- W4_112 = "f6e161"
- In HKEY_CURRENT_USER\Software\Afqteuv
- W1_113 = "ae49b736"
- In HKEY_CURRENT_USER\Software\Afqteuv
- W2_113 = "71da62e"
- In HKEY_CURRENT_USER\Software\Afqteuv
- W3_113 = "7d9154e"
- In HKEY_CURRENT_USER\Software\Afqteuv
- W4_113 = "71da7f67"
- In HKEY_CURRENT_USER\Software\Afqteuv
- W1_114 = "69984edc"
- In HKEY_CURRENT_USER\Software\Afqteuv
- W2_114 = "d446fd25"
- In HKEY_CURRENT_USER\Software\Afqteuv
- W3_114 = "d5458297"
- In HKEY_CURRENT_USER\Software\Afqteuv
- W4_114 = "d446e8be"
- In HKEY_CURRENT_USER\Software\Afqteuv
- W1_115 = "52fb4c67"
- In HKEY_CURRENT_USER\Software\Afqteuv
- W2_115 = "36b34537"
- In HKEY_CURRENT_USER\Software\Afqteuv
- W3_115 = "37b383c"
- In HKEY_CURRENT_USER\Software\Afqteuv
- W4_115 = "36b35215"
- In HKEY_CURRENT_USER\Software\Afqteuv
- W1_116 = "cd4627b5"
- In HKEY_CURRENT_USER\Software\Afqteuv
- W2_116 = "991fa457"
- In HKEY_CURRENT_USER\Software\Afqteuv
- W3_116 = "981cd145"
- In HKEY_CURRENT_USER\Software\Afqteuv
- W4_116 = "991fbb6c"
- In HKEY_CURRENT_USER\Software\Afqteuv
- W1_117 = "c9c9729f"
- In HKEY_CURRENT_USER\Software\Afqteuv
- W2_117 = "fb8c38fc"
- In HKEY_CURRENT_USER\Software\Afqteuv
- W3_117 = "fa8f4eea"
- In HKEY_CURRENT_USER\Software\Afqteuv
- W4_117 = "fb8c24c3"
- In HKEY_CURRENT_USER\Software\Afqteuv
- W1_118 = "45119921"
- In HKEY_CURRENT_USER\Software\Afqteuv
- W2_118 = "5df894f3"
- In HKEY_CURRENT_USER\Software\Afqteuv
- W3_118 = "5cfbe433"
- In HKEY_CURRENT_USER\Software\Afqteuv
- W4_118 = "5df88e1a"
- In HKEY_CURRENT_USER\Software\Afqteuv
- W1_119 = "a56312cd"
- In HKEY_CURRENT_USER\Software\Afqteuv
- W2_119 = "c64ed9a"
- In HKEY_CURRENT_USER\Software\Afqteuv
- W3_119 = "c1679d58"
- In HKEY_CURRENT_USER\Software\Afqteuv
- W4_119 = "c64f771"
- In HKEY_CURRENT_USER\Software\Afqteuv
- W1_120 = "cde97f86"
- In HKEY_CURRENT_USER\Software\Afqteuv
- W2_120 = "22d17ee4"
- In HKEY_CURRENT_USER\Software\Afqteuv
- W3_120 = "23d2ae1"
- In HKEY_CURRENT_USER\Software\Afqteuv
- W4_120 = "22d16c8"
- In HKEY_CURRENT_USER\Software\Afqteuv
- W1_121 = "8c1e35d6"
- In HKEY_CURRENT_USER\Software\Afqteuv
- W2_121 = "853ddcc6"
- In HKEY_CURRENT_USER\Software\Afqteuv
- W3_121 = "843ea36"
- In HKEY_CURRENT_USER\Software\Afqteuv
- W4_121 = "853dca1f"
- In HKEY_CURRENT_USER\Software\Afqteuv
- W1_122 = "ee27b13d"
- In HKEY_CURRENT_USER\Software\Afqteuv
- W2_122 = "e7aa2a8f"
- In HKEY_CURRENT_USER\Software\Afqteuv
- W3_122 = "e6a9595f"
- In HKEY_CURRENT_USER\Software\Afqteuv
- W4_122 = "e7aa3376"
- In HKEY_CURRENT_USER\Software\Afqteuv
- W1_123 = "cccd67"
- In HKEY_CURRENT_USER\Software\Afqteuv
- W2_123 = "4a16bc25"
- In HKEY_CURRENT_USER\Software\Afqteuv
- W3_123 = "4b15f6e4"
- In HKEY_CURRENT_USER\Software\Afqteuv
- W4_123 = "4a169ccd"
- In HKEY_CURRENT_USER\Software\Afqteuv
- W1_124 = "1ab1766b"
- In HKEY_CURRENT_USER\Software\Afqteuv
- W2_124 = "ac8326fb"
- In HKEY_CURRENT_USER\Software\Afqteuv
- W3_124 = "ad86cd"
- In HKEY_CURRENT_USER\Software\Afqteuv
- W4_124 = "ac83624"
- In HKEY_CURRENT_USER\Software\Afqteuv
- W1_125 = "4ca22c5"
- In HKEY_CURRENT_USER\Software\Afqteuv
- W2_125 = "eef4d4f"
- In HKEY_CURRENT_USER\Software\Afqteuv
- W3_125 = "fec552"
- In HKEY_CURRENT_USER\Software\Afqteuv
- W4_125 = "eef6f7b"
- In HKEY_CURRENT_USER\Software\Afqteuv
- W1_126 = "4bd8268b"
- In HKEY_CURRENT_USER\Software\Afqteuv
- W2_126 = "715bc129"
- In HKEY_CURRENT_USER\Software\Afqteuv
- W3_126 = "758b2fb"
- In HKEY_CURRENT_USER\Software\Afqteuv
- W4_126 = "715bd8d2"
- In HKEY_CURRENT_USER\Software\Afqteuv
- W1_127 = "d4cb2a76"
- In HKEY_CURRENT_USER\Software\Afqteuv
- W2_127 = "d3c8544e"
- In HKEY_CURRENT_USER\Software\Afqteuv
- W3_127 = "d2cb28"
- In HKEY_CURRENT_USER\Software\Afqteuv
- W4_127 = "d3c84229"
- In HKEY_CURRENT_USER\Software\Afqteuv
- W1_128 = "d9fee23e"
- In HKEY_CURRENT_USER\Software\Afqteuv
- W2_128 = "3634b63"
- In HKEY_CURRENT_USER\Software\Afqteuv
- W3_128 = "3737c1a9"
- In HKEY_CURRENT_USER\Software\Afqteuv
- W4_128 = "3634ab8"
- In HKEY_CURRENT_USER\Software\Afqteuv
- W1_129 = "9bc6bba"
- In HKEY_CURRENT_USER\Software\Afqteuv
- W2_129 = "98a19be"
- In HKEY_CURRENT_USER\Software\Afqteuv
- W3_129 = "99a27efe"
- In HKEY_CURRENT_USER\Software\Afqteuv
- W4_129 = "98a114d7"
- In HKEY_CURRENT_USER\Software\Afqteuv
- W1_130 = "b2472843"
- In HKEY_CURRENT_USER\Software\Afqteuv
- W2_130 = "fbd69c"
- In HKEY_CURRENT_USER\Software\Afqteuv
- W3_130 = "fae147"
- In HKEY_CURRENT_USER\Software\Afqteuv
- W4_130 = "fbd7e2e"
- In HKEY_CURRENT_USER\Software\Afqteuv
- W1_131 = "e6f45"
- In HKEY_CURRENT_USER\Software\Afqteuv
- W2_131 = "5d79fc7a"
- In HKEY_CURRENT_USER\Software\Afqteuv
- W3_131 = "5c7a8dac"
- In HKEY_CURRENT_USER\Software\Afqteuv
- W4_131 = "5d79e785"
- In HKEY_CURRENT_USER\Software\Afqteuv
- W1_132 = "5ceeeb1"
- In HKEY_CURRENT_USER\Software\Afqteuv
- W2_132 = "bfe64cad"
- In HKEY_CURRENT_USER\Software\Afqteuv
- W3_132 = "bee53af5"
- In HKEY_CURRENT_USER\Software\Afqteuv
- W4_132 = "bfe65dc"
- In HKEY_CURRENT_USER\Software\Afqteuv
- W1_133 = "6672c86e"
- In HKEY_CURRENT_USER\Software\Afqteuv
- W2_133 = "2252a4bf"
- In HKEY_CURRENT_USER\Software\Afqteuv
- W3_133 = "2351d1a"
- In HKEY_CURRENT_USER\Software\Afqteuv
- W4_133 = "2252ba33"
- In HKEY_CURRENT_USER\Software\Afqteuv
- W1_134 = "9852fd3"
- In HKEY_CURRENT_USER\Software\Afqteuv
- W2_134 = "84bf3b61"
- In HKEY_CURRENT_USER\Software\Afqteuv
- W3_134 = "85bc49a3"
- In HKEY_CURRENT_USER\Software\Afqteuv
- W4_134 = "84bf238a"
- In HKEY_CURRENT_USER\Software\Afqteuv
- W1_135 = "ee44ffdb"
- In HKEY_CURRENT_USER\Software\Afqteuv
- W2_135 = "e72b9c5"
- In HKEY_CURRENT_USER\Software\Afqteuv
- W3_135 = "e628e6c8"
- In HKEY_CURRENT_USER\Software\Afqteuv
- W4_135 = "e72b8ce1"
- In HKEY_CURRENT_USER\Software\Afqteuv
- W1_136 = "b8ceec6d"
- In HKEY_CURRENT_USER\Software\Afqteuv
- W2_136 = "4997ea5d"
- In HKEY_CURRENT_USER\Software\Afqteuv
- W3_136 = "48949c11"
- In HKEY_CURRENT_USER\Software\Afqteuv
- W4_136 = "4997f638"
- In HKEY_CURRENT_USER\Software\Afqteuv
- W1_137 = "6b9b455"
- In HKEY_CURRENT_USER\Software\Afqteuv
- W2_137 = "ac4494e"
- In HKEY_CURRENT_USER\Software\Afqteuv
- W3_137 = "ad735a6"
- In HKEY_CURRENT_USER\Software\Afqteuv
- W4_137 = "ac45f8f"
- In HKEY_CURRENT_USER\Software\Afqteuv
- W1_138 = "3b16e2bf"
- In HKEY_CURRENT_USER\Software\Afqteuv
- W2_138 = "e7d15"
- In HKEY_CURRENT_USER\Software\Afqteuv
- W3_138 = "f73a2cf"
- In HKEY_CURRENT_USER\Software\Afqteuv
- W4_138 = "e7c8e6"
- In HKEY_CURRENT_USER\Software\Afqteuv
- W1_139 = "f6db63"
- In HKEY_CURRENT_USER\Software\Afqteuv
- W2_139 = "7dd11ec"
- In HKEY_CURRENT_USER\Software\Afqteuv
- W3_139 = "71de5814"
- In HKEY_CURRENT_USER\Software\Afqteuv
- W4_139 = "7dd323d"
- In HKEY_CURRENT_USER\Software\Afqteuv
- W1_140 = "7fa6af4d"
- In HKEY_CURRENT_USER\Software\Afqteuv
- W2_140 = "d349bb8f"
- In HKEY_CURRENT_USER\Software\Afqteuv
- W3_140 = "d24af1bd"
- In HKEY_CURRENT_USER\Software\Afqteuv
- W4_140 = "d3499b94"
- In HKEY_CURRENT_USER\Software\Afqteuv
- W1_141 = "d5a7b5b5"
- In HKEY_CURRENT_USER\Software\Afqteuv
- W2_141 = "35b61265"
- In HKEY_CURRENT_USER\Software\Afqteuv
- W3_141 = "34b56ec2"
- In HKEY_CURRENT_USER\Software\Afqteuv
- W4_141 = "35b64eb"
- In HKEY_CURRENT_USER\Software\Afqteuv
- W1_142 = "d64b41b"
- In HKEY_CURRENT_USER\Software\Afqteuv
- W2_142 = "982272e4"
- In HKEY_CURRENT_USER\Software\Afqteuv
- W3_142 = "992146b"
- In HKEY_CURRENT_USER\Software\Afqteuv
- W4_142 = "98226e42"
- In HKEY_CURRENT_USER\Software\Afqteuv
- W1_143 = "dc59a8ef"
- In HKEY_CURRENT_USER\Software\Afqteuv
- W2_143 = "fa8eccf6"
- In HKEY_CURRENT_USER\Software\Afqteuv
- W3_143 = "fb8dbdb"
- In HKEY_CURRENT_USER\Software\Afqteuv
- W4_143 = "fa8ed799"
- In HKEY_CURRENT_USER\Software\Afqteuv
- W1_144 = "561638a5"
- In HKEY_CURRENT_USER\Software\Afqteuv
- W2_144 = "5cfb5aef"
- In HKEY_CURRENT_USER\Software\Afqteuv
- W3_144 = "5df82ad9"
- In HKEY_CURRENT_USER\Software\Afqteuv
- W4_144 = "5cfb4f"
- In HKEY_CURRENT_USER\Software\Afqteuv
- W1_145 = "c86e4d19"
- In HKEY_CURRENT_USER\Software\Afqteuv
- W2_145 = "bf67bd44"
- In HKEY_CURRENT_USER\Software\Afqteuv
- W3_145 = "be64c6e"
- In HKEY_CURRENT_USER\Software\Afqteuv
- W4_145 = "bf67aa47"
- In HKEY_CURRENT_USER\Software\Afqteuv
- W1_146 = "d4f64955"
- In HKEY_CURRENT_USER\Software\Afqteuv
- W2_146 = "21d488c"
- In HKEY_CURRENT_USER\Software\Afqteuv
- W3_146 = "2d779b7"
- In HKEY_CURRENT_USER\Software\Afqteuv
- W4_146 = "21d4139e"
- In HKEY_CURRENT_USER\Software\Afqteuv
- W1_147 = "15f92b98"
- In HKEY_CURRENT_USER\Software\Afqteuv
- W2_147 = "8446298"
- In HKEY_CURRENT_USER\Software\Afqteuv
- W3_147 = "854316dc"
- In HKEY_CURRENT_USER\Software\Afqteuv
- W4_147 = "8447cf5"
- In HKEY_CURRENT_USER\Software\Afqteuv
- W1_148 = "6111991a"
- In HKEY_CURRENT_USER\Software\Afqteuv
- W2_148 = "e6acfccb"
- In HKEY_CURRENT_USER\Software\Afqteuv
- W3_148 = "e7af8c65"
- In HKEY_CURRENT_USER\Software\Afqteuv
- W4_148 = "e6ace64c"
- In HKEY_CURRENT_USER\Software\Afqteuv
- W1_149 = "8db361fa"
- In HKEY_CURRENT_USER\Software\Afqteuv
- W2_149 = "491959ee"
- In HKEY_CURRENT_USER\Software\Afqteuv
- W3_149 = "481a258a"
- In HKEY_CURRENT_USER\Software\Afqteuv
- W4_149 = "49194fa3"
- In HKEY_CURRENT_USER\Software\Afqteuv
- W1_150 = "b452512e"
- In HKEY_CURRENT_USER\Software\Afqteuv
- W2_150 = "ab85a5"
- In HKEY_CURRENT_USER\Software\Afqteuv
- W3_150 = "aa86d2d3"
- In HKEY_CURRENT_USER\Software\Afqteuv
- W4_150 = "ab85b8fa"
- In HKEY_CURRENT_USER\Software\Afqteuv
- W1_151 = "ff24e"
- In HKEY_CURRENT_USER\Software\Afqteuv
- W2_151 = "df2274"
- In HKEY_CURRENT_USER\Software\Afqteuv
- W3_151 = "cf14878"
- In HKEY_CURRENT_USER\Software\Afqteuv
- W4_151 = "df22251"
- In HKEY_CURRENT_USER\Software\Afqteuv
- W1_152 = "3a5f39f5"
- In HKEY_CURRENT_USER\Software\Afqteuv
- W2_152 = "75e974f"
- In HKEY_CURRENT_USER\Software\Afqteuv
- W3_152 = "715de181"
- In HKEY_CURRENT_USER\Software\Afqteuv
- W4_152 = "75e8ba8"
- In HKEY_CURRENT_USER\Software\Afqteuv
- W1_153 = "b31d7b82"
- In HKEY_CURRENT_USER\Software\Afqteuv
- W2_153 = "d2cae89a"
- In HKEY_CURRENT_USER\Software\Afqteuv
- W3_153 = "d3c99ed6"
- In HKEY_CURRENT_USER\Software\Afqteuv
- W4_153 = "d2caf4ff"
- In HKEY_CURRENT_USER\Software\Afqteuv
- W1_154 = "f44e9e8"
- In HKEY_CURRENT_USER\Software\Afqteuv
- W2_154 = "353747cc"
- In HKEY_CURRENT_USER\Software\Afqteuv
- W3_154 = "3434347f"
- In HKEY_CURRENT_USER\Software\Afqteuv
- W4_154 = "35375e56"
- In HKEY_CURRENT_USER\Software\Afqteuv
- W1_155 = "8cbcd216"
- In HKEY_CURRENT_USER\Software\Afqteuv
- W2_155 = "97a3d9a"
- In HKEY_CURRENT_USER\Software\Afqteuv
- W3_155 = "96aad84"
- In HKEY_CURRENT_USER\Software\Afqteuv
- W4_155 = "97a3c7ad"
- In HKEY_CURRENT_USER\Software\Afqteuv
- W1_156 = "cee9fc7"
- In HKEY_CURRENT_USER\Software\Afqteuv
- W2_156 = "fa12f28"
- In HKEY_CURRENT_USER\Software\Afqteuv
- W3_156 = "fb135b2d"
- In HKEY_CURRENT_USER\Software\Afqteuv
- W4_156 = "fa1314"
- In HKEY_CURRENT_USER\Software\Afqteuv
- W1_157 = "d7578f6"
- In HKEY_CURRENT_USER\Software\Afqteuv
- W2_157 = "5c7cb59c"
- In HKEY_CURRENT_USER\Software\Afqteuv
- W3_157 = "5d7ff72"
- In HKEY_CURRENT_USER\Software\Afqteuv
- W4_157 = "5c7c9a5b"
- In HKEY_CURRENT_USER\Software\Afqteuv
- W1_158 = "98c79e7"
- In HKEY_CURRENT_USER\Software\Afqteuv
- W2_158 = "bee91515"
- In HKEY_CURRENT_USER\Software\Afqteuv
- W3_158 = "bfea699b"
- In HKEY_CURRENT_USER\Software\Afqteuv
- W4_158 = "bee93b2"
- In HKEY_CURRENT_USER\Software\Afqteuv
- W1_159 = "91c4dca"
- In HKEY_CURRENT_USER\Software\Afqteuv
- W2_159 = "21557676"
- In HKEY_CURRENT_USER\Software\Afqteuv
- W3_159 = "25672"
- In HKEY_CURRENT_USER\Software\Afqteuv
- W4_159 = "21556d9"
- In HKEY_CURRENT_USER\Software\Afqteuv
- W1_160 = "962378a3"
- In HKEY_CURRENT_USER\Software\Afqteuv
- W2_160 = "83c1f4e3"
- In HKEY_CURRENT_USER\Software\Afqteuv
- W3_160 = "82c2bc49"
- In HKEY_CURRENT_USER\Software\Afqteuv
- W4_160 = "83c1d66"
- In HKEY_CURRENT_USER\Software\Afqteuv
- W1_161 = "99ca9bce"
- In HKEY_CURRENT_USER\Software\Afqteuv
- W2_161 = "e62e1c66"
- In HKEY_CURRENT_USER\Software\Afqteuv
- W3_161 = "e72d559e"
- In HKEY_CURRENT_USER\Software\Afqteuv
- W4_161 = "e62e3fb7"
- In HKEY_CURRENT_USER\Software\Afqteuv
- W1_162 = "67aebd35"
- In HKEY_CURRENT_USER\Software\Afqteuv
- W2_162 = "489abfcb"
- In HKEY_CURRENT_USER\Software\Afqteuv
- W3_162 = "4999c327"
- In HKEY_CURRENT_USER\Software\Afqteuv
- W4_162 = "489aa9e"
- In HKEY_CURRENT_USER\Software\Afqteuv
- W1_163 = "eae9f26"
- In HKEY_CURRENT_USER\Software\Afqteuv
- W2_163 = "ab73148"
- In HKEY_CURRENT_USER\Software\Afqteuv
- W3_163 = "aa4784c"
- In HKEY_CURRENT_USER\Software\Afqteuv
- W4_163 = "ab71265"
- In HKEY_CURRENT_USER\Software\Afqteuv
- W1_164 = "944b18e"
- In HKEY_CURRENT_USER\Software\Afqteuv
- W2_164 = "d7367b3"
- In HKEY_CURRENT_USER\Software\Afqteuv
- W3_164 = "c71195"
- In HKEY_CURRENT_USER\Software\Afqteuv
- W4_164 = "d737bbc"
- In HKEY_CURRENT_USER\Software\Afqteuv
- W1_165 = "a3e7845d"
- In HKEY_CURRENT_USER\Software\Afqteuv
- W2_165 = "6fdff25a"
- In HKEY_CURRENT_USER\Software\Afqteuv
- W3_165 = "6edc8f3a"
- In HKEY_CURRENT_USER\Software\Afqteuv
- W4_165 = "6fdfe513"
- In HKEY_CURRENT_USER\Software\Afqteuv
- W1_166 = "e8433d33"
- In HKEY_CURRENT_USER\Software\Afqteuv
- W2_166 = "d24c5b"
- In HKEY_CURRENT_USER\Software\Afqteuv
- W3_166 = "d34f2443"
- In HKEY_CURRENT_USER\Software\Afqteuv
- W4_166 = "d24c4e6a"
- In HKEY_CURRENT_USER\Software\Afqteuv
- W1_167 = "4f3dfb14"
- In HKEY_CURRENT_USER\Software\Afqteuv
- W2_167 = "34b892b"
- In HKEY_CURRENT_USER\Software\Afqteuv
- W3_167 = "35bbdde8"
- In HKEY_CURRENT_USER\Software\Afqteuv
- W4_167 = "34b8b7c1"
- In HKEY_CURRENT_USER\Software\Afqteuv
- W1_168 = "29de7b56"
- In HKEY_CURRENT_USER\Software\Afqteuv
- W2_168 = "972521b"
- In HKEY_CURRENT_USER\Software\Afqteuv
- W3_168 = "96264b31"
- In HKEY_CURRENT_USER\Software\Afqteuv
- W4_168 = "97252118"
- In HKEY_CURRENT_USER\Software\Afqteuv
- W1_169 = "c8cb6eac"
- In HKEY_CURRENT_USER\Software\Afqteuv
- W2_169 = "f99197ca"
- In HKEY_CURRENT_USER\Software\Afqteuv
- W3_169 = "f892e46"
- In HKEY_CURRENT_USER\Software\Afqteuv
- W4_169 = "f9918a6f"
- In HKEY_CURRENT_USER\Software\Afqteuv
- W1_170 = "916f429b"
- In HKEY_CURRENT_USER\Software\Afqteuv
- W2_170 = "5bfdeed5"
- In HKEY_CURRENT_USER\Software\Afqteuv
- W3_170 = "5afe99ef"
- In HKEY_CURRENT_USER\Software\Afqteuv
- W4_170 = "5bfdf3c6"
- In HKEY_CURRENT_USER\Software\Afqteuv
- W1_171 = "d3577544"
- In HKEY_CURRENT_USER\Software\Afqteuv
- W2_171 = "be6a7cfc"
- In HKEY_CURRENT_USER\Software\Afqteuv
- W3_171 = "bf693734"
- In HKEY_CURRENT_USER\Software\Afqteuv
- W4_171 = "be6a5d1d"
- In HKEY_CURRENT_USER\Software\Afqteuv
- W1_172 = "966b47c8"
- In HKEY_CURRENT_USER\Software\Afqteuv
- W2_172 = "2d6d42e"
- In HKEY_CURRENT_USER\Software\Afqteuv
- W3_172 = "21d5ac5d"
- In HKEY_CURRENT_USER\Software\Afqteuv
- W4_172 = "2d6c674"
- In HKEY_CURRENT_USER\Software\Afqteuv
- W1_173 = "32e4c9c"
- In HKEY_CURRENT_USER\Software\Afqteuv
- W2_173 = "834336a4"
- In HKEY_CURRENT_USER\Software\Afqteuv
- W3_173 = "82445e2"
- In HKEY_CURRENT_USER\Software\Afqteuv
- W4_173 = "83432fcb"
- In HKEY_CURRENT_USER\Software\Afqteuv
- W1_174 = "e784e566"
- In HKEY_CURRENT_USER\Software\Afqteuv
- W2_174 = "e5af8429"
- In HKEY_CURRENT_USER\Software\Afqteuv
- W3_174 = "e4acf3b"
- In HKEY_CURRENT_USER\Software\Afqteuv
- W4_174 = "e5af9922"
- In HKEY_CURRENT_USER\Software\Afqteuv
- W1_175 = "8c9da7a4"
- In HKEY_CURRENT_USER\Software\Afqteuv
- W2_175 = "481c1824"
- In HKEY_CURRENT_USER\Software\Afqteuv
- W3_175 = "491f685"
- In HKEY_CURRENT_USER\Software\Afqteuv
- W4_175 = "481c279"
- In HKEY_CURRENT_USER\Software\Afqteuv
- W1_176 = "8a2c5b8"
- In HKEY_CURRENT_USER\Software\Afqteuv
- W2_176 = "aa88776e"
- In HKEY_CURRENT_USER\Software\Afqteuv
- W3_176 = "ab8b1f9"
- In HKEY_CURRENT_USER\Software\Afqteuv
- W4_176 = "aa886bd"
- In HKEY_CURRENT_USER\Software\Afqteuv
- W1_177 = "686ba568"
- In HKEY_CURRENT_USER\Software\Afqteuv
- W2_177 = "cf4cc5"
- In HKEY_CURRENT_USER\Software\Afqteuv
- W3_177 = "df7bfe"
- In HKEY_CURRENT_USER\Software\Afqteuv
- W4_177 = "cf4d527"
- In HKEY_CURRENT_USER\Software\Afqteuv
- W1_178 = "3657a4"
- In HKEY_CURRENT_USER\Software\Afqteuv
- W2_178 = "6f612b29"
- In HKEY_CURRENT_USER\Software\Afqteuv
- W3_178 = "6e625457"
- In HKEY_CURRENT_USER\Software\Afqteuv
- W4_178 = "6f613e7e"
- In HKEY_CURRENT_USER\Software\Afqteuv
- W1_179 = "496daa83"
- In HKEY_CURRENT_USER\Software\Afqteuv
- W2_179 = "d1cdb1b2"
- In HKEY_CURRENT_USER\Software\Afqteuv
- W3_179 = "dcecdfc"
- In HKEY_CURRENT_USER\Software\Afqteuv
- W4_179 = "d1cda7d5"
- In HKEY_CURRENT_USER\Software\Afqteuv
- W1_180 = "5e43e75"
- In HKEY_CURRENT_USER\Software\Afqteuv
- W2_180 = "343a773"
- In HKEY_CURRENT_USER\Software\Afqteuv
- W3_180 = "35397b5"
- In HKEY_CURRENT_USER\Software\Afqteuv
- W4_180 = "343a112c"
- In HKEY_CURRENT_USER\Software\Afqteuv
- W1_181 = "c1715eda"
- In HKEY_CURRENT_USER\Software\Afqteuv
- W2_181 = "96a661a4"
- In HKEY_CURRENT_USER\Software\Afqteuv
- W3_181 = "97a51aa"
- In HKEY_CURRENT_USER\Software\Afqteuv
- W4_181 = "96a67a83"
- In HKEY_CURRENT_USER\Software\Afqteuv
- W1_182 = "6b59eeb9"
- In HKEY_CURRENT_USER\Software\Afqteuv
- W2_182 = "f912fd85"
- In HKEY_CURRENT_USER\Software\Afqteuv
- W3_182 = "f81189f3"
- In HKEY_CURRENT_USER\Software\Afqteuv
- W4_182 = "f912e3da"
- In HKEY_CURRENT_USER\Software\Afqteuv
- W1_183 = "d99661e2"
- In HKEY_CURRENT_USER\Software\Afqteuv
- W2_183 = "5b7f533c"
- In HKEY_CURRENT_USER\Software\Afqteuv
- W3_183 = "5a7c2718"
- In HKEY_CURRENT_USER\Software\Afqteuv
- W4_183 = "5b7f4d31"
- In HKEY_CURRENT_USER\Software\Afqteuv
- W1_184 = "c2c1dcb"
- In HKEY_CURRENT_USER\Software\Afqteuv
- W2_184 = "bdeba8f"
- In HKEY_CURRENT_USER\Software\Afqteuv
- W3_184 = "bce8dca1"
- In HKEY_CURRENT_USER\Software\Afqteuv
- W4_184 = "bdebb688"
- In HKEY_CURRENT_USER\Software\Afqteuv
- W1_185 = "b96e739"
- In HKEY_CURRENT_USER\Software\Afqteuv
- W2_185 = "25887e"
- In HKEY_CURRENT_USER\Software\Afqteuv
- W3_185 = "215b75f6"
- In HKEY_CURRENT_USER\Software\Afqteuv
- W4_185 = "2581fdf"
- In HKEY_CURRENT_USER\Software\Afqteuv
- W1_186 = "196d3d69"
- In HKEY_CURRENT_USER\Software\Afqteuv
- W2_186 = "82c49c5c"
- In HKEY_CURRENT_USER\Software\Afqteuv
- W3_186 = "83c7e31f"
- In HKEY_CURRENT_USER\Software\Afqteuv
- W4_186 = "82c48936"
- In HKEY_CURRENT_USER\Software\Afqteuv
- W1_187 = "8dba88d8"
- In HKEY_CURRENT_USER\Software\Afqteuv
- W2_187 = "e53ec62"
- In HKEY_CURRENT_USER\Software\Afqteuv
- W3_187 = "e43398a4"
- In HKEY_CURRENT_USER\Software\Afqteuv
- W4_187 = "e53f28d"
- In HKEY_CURRENT_USER\Software\Afqteuv
- W1_188 = "3157a8b"
- In HKEY_CURRENT_USER\Software\Afqteuv
- W2_188 = "479d79d3"
- In HKEY_CURRENT_USER\Software\Afqteuv
- W3_188 = "469e31cd"
- In HKEY_CURRENT_USER\Software\Afqteuv
- W4_188 = "479d5be4"
- In HKEY_CURRENT_USER\Software\Afqteuv
- W1_189 = "85c93575"
- In HKEY_CURRENT_USER\Software\Afqteuv
- W2_189 = "aa9ded8"
- In HKEY_CURRENT_USER\Software\Afqteuv
- W3_189 = "abaaf12"
- In HKEY_CURRENT_USER\Software\Afqteuv
- W4_189 = "aa9c53b"
- In HKEY_CURRENT_USER\Software\Afqteuv
- W1_190 = "2257451"
- In HKEY_CURRENT_USER\Software\Afqteuv
- W2_190 = "c763ad"
- In HKEY_CURRENT_USER\Software\Afqteuv
- W3_190 = "d7544bb"
- In HKEY_CURRENT_USER\Software\Afqteuv
- W4_190 = "c762e92"
- In HKEY_CURRENT_USER\Software\Afqteuv
- W1_191 = "7ae3e4b"
- In HKEY_CURRENT_USER\Software\Afqteuv
- W2_191 = "6ee28f6e"
- In HKEY_CURRENT_USER\Software\Afqteuv
- W3_191 = "6fe1fdc"
- In HKEY_CURRENT_USER\Software\Afqteuv
- W4_191 = "6ee297e9"
- In HKEY_CURRENT_USER\Software\Afqteuv
- W1_192 = "24fd7a16"
- In HKEY_CURRENT_USER\Software\Afqteuv
- W2_192 = "d14f1d87"
- In HKEY_CURRENT_USER\Software\Afqteuv
- W3_192 = "d4c6b69"
- In HKEY_CURRENT_USER\Software\Afqteuv
- W4_192 = "d14f14"
- In HKEY_CURRENT_USER\Software\Afqteuv
- W1_193 = "721c4ace"
- In HKEY_CURRENT_USER\Software\Afqteuv
- W2_193 = "33bb776a"
- In HKEY_CURRENT_USER\Software\Afqteuv
- W3_193 = "32b8be"
- In HKEY_CURRENT_USER\Software\Afqteuv
- W4_193 = "33bb6a97"
- In HKEY_CURRENT_USER\Software\Afqteuv
- W1_194 = "8b13d355"
- In HKEY_CURRENT_USER\Software\Afqteuv
- W2_194 = "9627f2b"
- In HKEY_CURRENT_USER\Software\Afqteuv
- W3_194 = "9724b9c7"
- In HKEY_CURRENT_USER\Software\Afqteuv
- W4_194 = "9627d3ee"
- In HKEY_CURRENT_USER\Software\Afqteuv
- W1_195 = "accea2cd"
- In HKEY_CURRENT_USER\Software\Afqteuv
- W2_195 = "f89425c2"
- In HKEY_CURRENT_USER\Software\Afqteuv
- W3_195 = "f997576c"
- In HKEY_CURRENT_USER\Software\Afqteuv
- W4_195 = "f8943d45"
- In HKEY_CURRENT_USER\Software\Afqteuv
- W1_196 = "42a176d6"
- In HKEY_CURRENT_USER\Software\Afqteuv
- W2_196 = "5bbd8e"
- In HKEY_CURRENT_USER\Software\Afqteuv
- W3_196 = "5a3ccb5"
- In HKEY_CURRENT_USER\Software\Afqteuv
- W4_196 = "5ba69c"
- In HKEY_CURRENT_USER\Software\Afqteuv
- W1_197 = "2fc7fae"
- In HKEY_CURRENT_USER\Software\Afqteuv
- W2_197 = "bd6d19be"
- In HKEY_CURRENT_USER\Software\Afqteuv
- W3_197 = "bc6e65da"
- In HKEY_CURRENT_USER\Software\Afqteuv
- W4_197 = "bd6dff3"
- In HKEY_CURRENT_USER\Software\Afqteuv
- W1_198 = "6a7a52"
- In HKEY_CURRENT_USER\Software\Afqteuv
- W2_198 = "1fd96572"
- In HKEY_CURRENT_USER\Software\Afqteuv
- W3_198 = "1eda1363"
- In HKEY_CURRENT_USER\Software\Afqteuv
- W4_198 = "1fd9794a"
- In HKEY_CURRENT_USER\Software\Afqteuv
- W1_199 = "4876a7f1"
- In HKEY_CURRENT_USER\Software\Afqteuv
- W2_199 = "8245fe99"
- In HKEY_CURRENT_USER\Software\Afqteuv
- W3_199 = "83468888"
- In HKEY_CURRENT_USER\Software\Afqteuv
- W4_199 = "8245e2a1"
- In HKEY_CURRENT_USER\Software\Afqteuv
- W1_200 = "5f793c57"
- In HKEY_CURRENT_USER\Software\Afqteuv
- W2_200 = "e4b25d4"
- In HKEY_CURRENT_USER\Software\Afqteuv
- W3_200 = "e5b121d1"
- In HKEY_CURRENT_USER\Software\Afqteuv
- W4_200 = "e4b24bf8"
- In HKEY_CURRENT_USER\Software\Afqteuv
- W1_201 = "e95bc716"
- In HKEY_CURRENT_USER\Software\Afqteuv
- W2_201 = "471eae3c"
- In HKEY_CURRENT_USER\Software\Afqteuv
- W3_201 = "461ddf66"
- In HKEY_CURRENT_USER\Software\Afqteuv
- W4_201 = "471eb54f"
- In HKEY_CURRENT_USER\Software\Afqteuv
- W1_202 = "3661df2"
- In HKEY_CURRENT_USER\Software\Afqteuv
- W2_202 = "a98b81"
- In HKEY_CURRENT_USER\Software\Afqteuv
- W3_202 = "a888748f"
- In HKEY_CURRENT_USER\Software\Afqteuv
- W4_202 = "a98b1ea6"
- In HKEY_CURRENT_USER\Software\Afqteuv
- W1_203 = "293aa8a4"
- In HKEY_CURRENT_USER\Software\Afqteuv
- W2_203 = "bf796c"
- In HKEY_CURRENT_USER\Software\Afqteuv
- W3_203 = "af4edd4"
- In HKEY_CURRENT_USER\Software\Afqteuv
- W4_203 = "bf787fd"
- In HKEY_CURRENT_USER\Software\Afqteuv
- W1_204 = "e3f981"
- In HKEY_CURRENT_USER\Software\Afqteuv
- W2_204 = "6e63ec55"
- In HKEY_CURRENT_USER\Software\Afqteuv
- W3_204 = "6f69b7d"
- In HKEY_CURRENT_USER\Software\Afqteuv
- W4_204 = "6e63f154"
- In HKEY_CURRENT_USER\Software\Afqteuv
- W1_205 = "bb28f2"
- In HKEY_CURRENT_USER\Software\Afqteuv
- W2_205 = "dd4959"
- In HKEY_CURRENT_USER\Software\Afqteuv
- W3_205 = "d1d3382"
- In HKEY_CURRENT_USER\Software\Afqteuv
- W4_205 = "dd5aab"
- In HKEY_CURRENT_USER\Software\Afqteuv
- W1_206 = "291ebe42"
- In HKEY_CURRENT_USER\Software\Afqteuv
- W2_206 = "333ce1c8"
- In HKEY_CURRENT_USER\Software\Afqteuv
- W3_206 = "323fae2b"
- In HKEY_CURRENT_USER\Software\Afqteuv
- W4_206 = "333cc42"
- In HKEY_CURRENT_USER\Software\Afqteuv
- W1_207 = "f7cc48d"
- In HKEY_CURRENT_USER\Software\Afqteuv
- W2_207 = "95a9d1b"
- In HKEY_CURRENT_USER\Software\Afqteuv
- W3_207 = "94aa477"
- In HKEY_CURRENT_USER\Software\Afqteuv
- W4_207 = "95a92d59"
- In HKEY_CURRENT_USER\Software\Afqteuv
- W1_208 = "115e5874"
- In HKEY_CURRENT_USER\Software\Afqteuv
- W2_208 = "f8158bc"
- In HKEY_CURRENT_USER\Software\Afqteuv
- W3_208 = "f916fc99"
- In HKEY_CURRENT_USER\Software\Afqteuv
- W4_208 = "f81596b"
- In HKEY_CURRENT_USER\Software\Afqteuv
- W1_209 = "fe6fbdb9"
- In HKEY_CURRENT_USER\Software\Afqteuv
- W2_209 = "5a8215aa"
- In HKEY_CURRENT_USER\Software\Afqteuv
- W3_209 = "5b816a2e"
- In HKEY_CURRENT_USER\Software\Afqteuv
- W4_209 = "5a827"
- In HKEY_CURRENT_USER\Software\Afqteuv
- W1_210 = "722465c"
- In HKEY_CURRENT_USER\Software\Afqteuv
- W2_210 = "bcee73f5"
- In HKEY_CURRENT_USER\Software\Afqteuv
- W3_210 = "bded377"
- In HKEY_CURRENT_USER\Software\Afqteuv
- W4_210 = "bcee695e"
- In HKEY_CURRENT_USER\Software\Afqteuv
- W1_211 = "884b848f"
- In HKEY_CURRENT_USER\Software\Afqteuv
- W2_211 = "1f5accb2"
- In HKEY_CURRENT_USER\Software\Afqteuv
- W3_211 = "1e59b89c"
- In HKEY_CURRENT_USER\Software\Afqteuv
- W4_211 = "1f5ad2b5"
- In HKEY_CURRENT_USER\Software\Afqteuv
- W1_212 = "5584bf7a"
- In HKEY_CURRENT_USER\Software\Afqteuv
- W2_212 = "81c727b7"
- In HKEY_CURRENT_USER\Software\Afqteuv
- W3_212 = "8c45625"
- In HKEY_CURRENT_USER\Software\Afqteuv
- W4_212 = "81c73cc"
- In HKEY_CURRENT_USER\Software\Afqteuv
- W1_213 = "5af8cdde"
- In HKEY_CURRENT_USER\Software\Afqteuv
- W2_213 = "e433bb52"
- In HKEY_CURRENT_USER\Software\Afqteuv
- W3_213 = "e53cf4a"
- In HKEY_CURRENT_USER\Software\Afqteuv
- W4_213 = "e433a563"
- In HKEY_CURRENT_USER\Software\Afqteuv
- W1_214 = "7687fe7"
- In HKEY_CURRENT_USER\Software\Afqteuv
- W2_214 = "46a15d3"
- In HKEY_CURRENT_USER\Software\Afqteuv
- W3_214 = "47a36493"
- In HKEY_CURRENT_USER\Software\Afqteuv
- W4_214 = "46aeba"
- In HKEY_CURRENT_USER\Software\Afqteuv
- W1_215 = "1ce747"
- In HKEY_CURRENT_USER\Software\Afqteuv
- W2_215 = "a9c6e32"
- In HKEY_CURRENT_USER\Software\Afqteuv
- W3_215 = "a8f1238"
- In HKEY_CURRENT_USER\Software\Afqteuv
- W4_215 = "a9c7811"
- In HKEY_CURRENT_USER\Software\Afqteuv
- W1_216 = "3fec825"
- In HKEY_CURRENT_USER\Software\Afqteuv
- W2_216 = "b78fb74"
- In HKEY_CURRENT_USER\Software\Afqteuv
- W3_216 = "a7b8b41"
- In HKEY_CURRENT_USER\Software\Afqteuv
- W4_216 = "b78e168"
- In HKEY_CURRENT_USER\Software\Afqteuv
- W1_217 = "3c222e"
- In HKEY_CURRENT_USER\Software\Afqteuv
- W2_217 = "6de557d6"
- In HKEY_CURRENT_USER\Software\Afqteuv
- W3_217 = "6ce6296"
- In HKEY_CURRENT_USER\Software\Afqteuv
- W4_217 = "6de54abf"
- In HKEY_CURRENT_USER\Software\Afqteuv
- W1_218 = "2c586b6"
- In HKEY_CURRENT_USER\Software\Afqteuv
- W2_218 = "d51abd6"
- In HKEY_CURRENT_USER\Software\Afqteuv
- W3_218 = "d152de3f"
- In HKEY_CURRENT_USER\Software\Afqteuv
- W4_218 = "d51b416"
- In HKEY_CURRENT_USER\Software\Afqteuv
- W1_219 = "6deb6738"
- In HKEY_CURRENT_USER\Software\Afqteuv
- W2_219 = "32be38a7"
- In HKEY_CURRENT_USER\Software\Afqteuv
- W3_219 = "33bd7744"
- In HKEY_CURRENT_USER\Software\Afqteuv
- W4_219 = "32be1d6d"
- In HKEY_CURRENT_USER\Software\Afqteuv
- W1_220 = "2e675d"
- In HKEY_CURRENT_USER\Software\Afqteuv
- W2_220 = "952a9165"
- In HKEY_CURRENT_USER\Software\Afqteuv
- W3_220 = "9429eced"
- In HKEY_CURRENT_USER\Software\Afqteuv
- W4_220 = "952a86c4"
- In HKEY_CURRENT_USER\Software\Afqteuv
- W1_221 = "4f788246"
- In HKEY_CURRENT_USER\Software\Afqteuv
- W2_221 = "f796e6c"
- In HKEY_CURRENT_USER\Software\Afqteuv
- W3_221 = "f6959a32"
- In HKEY_CURRENT_USER\Software\Afqteuv
- W4_221 = "f796f1b"
- In HKEY_CURRENT_USER\Software\Afqteuv
- W1_222 = "c719383c"
- In HKEY_CURRENT_USER\Software\Afqteuv
- W2_222 = "5a34db5"
- In HKEY_CURRENT_USER\Software\Afqteuv
- W3_222 = "5b335b"
- In HKEY_CURRENT_USER\Software\Afqteuv
- W4_222 = "5a35972"
- In HKEY_CURRENT_USER\Software\Afqteuv
- W1_223 = "52e2891"
- In HKEY_CURRENT_USER\Software\Afqteuv
- W2_223 = "bc6fdaf2"
- In HKEY_CURRENT_USER\Software\Afqteuv
- W3_223 = "bd6ca8e"
- In HKEY_CURRENT_USER\Software\Afqteuv
- W4_223 = "bc6fc2c9"
- In HKEY_CURRENT_USER\Software\Afqteuv
- W1_224 = "adb753e8"
- In HKEY_CURRENT_USER\Software\Afqteuv
- W2_224 = "1edc3178"
- In HKEY_CURRENT_USER\Software\Afqteuv
- W3_224 = "1fdf469"
- In HKEY_CURRENT_USER\Software\Afqteuv
- W4_224 = "1edc2c2"
- In HKEY_CURRENT_USER\Software\Afqteuv
- W1_225 = "474ea2b"
- In HKEY_CURRENT_USER\Software\Afqteuv
- W2_225 = "81488e65"
- In HKEY_CURRENT_USER\Software\Afqteuv
- W3_225 = "84bff5e"
- In HKEY_CURRENT_USER\Software\Afqteuv
- W4_225 = "81489577"
- In HKEY_CURRENT_USER\Software\Afqteuv
- W1_226 = "8b433f7"
- In HKEY_CURRENT_USER\Software\Afqteuv
- W2_226 = "e3b4e5ee"
- In HKEY_CURRENT_USER\Software\Afqteuv
- W3_226 = "e2b794e7"
- In HKEY_CURRENT_USER\Software\Afqteuv
- W4_226 = "e3b4fece"
- In HKEY_CURRENT_USER\Software\Afqteuv
- W1_227 = "6d2ab59"
- In HKEY_CURRENT_USER\Software\Afqteuv
- W2_227 = "462175ef"
- In HKEY_CURRENT_USER\Software\Afqteuv
- W3_227 = "47222c"
- In HKEY_CURRENT_USER\Software\Afqteuv
- W4_227 = "46216825"
- In HKEY_CURRENT_USER\Software\Afqteuv
- W1_228 = "cce5132"
- In HKEY_CURRENT_USER\Software\Afqteuv
- W2_228 = "a88dcd7d"
- In HKEY_CURRENT_USER\Software\Afqteuv
- W3_228 = "a98ebb55"
- In HKEY_CURRENT_USER\Software\Afqteuv
- W4_228 = "a88dd17c"
- In HKEY_CURRENT_USER\Software\Afqteuv
- W1_229 = "6426cbe"
- In HKEY_CURRENT_USER\Software\Afqteuv
- W2_229 = "afa246"
- In HKEY_CURRENT_USER\Software\Afqteuv
- W3_229 = "bf95fa"
- In HKEY_CURRENT_USER\Software\Afqteuv
- W4_229 = "afa3ad3"
- In HKEY_CURRENT_USER\Software\Afqteuv
- W1_230 = "c5e7f997"
- In HKEY_CURRENT_USER\Software\Afqteuv
- W2_230 = "6d66ba27"
- In HKEY_CURRENT_USER\Software\Afqteuv
- W3_230 = "6c65ce3"
- In HKEY_CURRENT_USER\Software\Afqteuv
- W4_230 = "6d66a42a"
- In HKEY_CURRENT_USER\Software\Afqteuv
- W1_231 = "29c44d58"
- In HKEY_CURRENT_USER\Software\Afqteuv
- W2_231 = "cfd3179d"
- In HKEY_CURRENT_USER\Software\Afqteuv
- W3_231 = "ced67a8"
- In HKEY_CURRENT_USER\Software\Afqteuv
- W4_231 = "cfd3d81"
- In HKEY_CURRENT_USER\Software\Afqteuv
- W1_232 = "77cd39b"
- In HKEY_CURRENT_USER\Software\Afqteuv
- W2_232 = "323f68f4"
- In HKEY_CURRENT_USER\Software\Afqteuv
- W3_232 = "333c1cf1"
- In HKEY_CURRENT_USER\Software\Afqteuv
- W4_232 = "323f76d8"
- In HKEY_CURRENT_USER\Software\Afqteuv
- W1_233 = "8415a95b"
- In HKEY_CURRENT_USER\Software\Afqteuv
- W2_233 = "94abcba"
- In HKEY_CURRENT_USER\Software\Afqteuv
- W3_233 = "95a88a6"
- In HKEY_CURRENT_USER\Software\Afqteuv
- W4_233 = "94abe2f"
- In HKEY_CURRENT_USER\Software\Afqteuv
- W1_234 = "b24632d2"
- In HKEY_CURRENT_USER\Software\Afqteuv
- W2_234 = "f718548d"
- In HKEY_CURRENT_USER\Software\Afqteuv
- W3_234 = "f61b23af"
- In HKEY_CURRENT_USER\Software\Afqteuv
- W4_234 = "f7184986"
- In HKEY_CURRENT_USER\Software\Afqteuv
- W1_235 = "a155e7"
- In HKEY_CURRENT_USER\Software\Afqteuv
- W2_235 = "5984a482"
- In HKEY_CURRENT_USER\Software\Afqteuv
- W3_235 = "5887d8f4"
- In HKEY_CURRENT_USER\Software\Afqteuv
- W4_235 = "5984b2dd"
- In HKEY_CURRENT_USER\Software\Afqteuv
- W1_236 = "b96461"
- In HKEY_CURRENT_USER\Software\Afqteuv
- W2_236 = "bbf12c2"
- In HKEY_CURRENT_USER\Software\Afqteuv
- W3_236 = "baf2761d"
- In HKEY_CURRENT_USER\Software\Afqteuv
- W4_236 = "bbf11c34"
- In HKEY_CURRENT_USER\Software\Afqteuv
- W1_237 = "143df7d2"
- In HKEY_CURRENT_USER\Software\Afqteuv
- W2_237 = "1e5d924c"
- In HKEY_CURRENT_USER\Software\Afqteuv
- W3_237 = "1f5eefa2"
- In HKEY_CURRENT_USER\Software\Afqteuv
- W4_237 = "1e5d858b"
- In HKEY_CURRENT_USER\Software\Afqteuv
- W1_238 = "daf7a796"
- In HKEY_CURRENT_USER\Software\Afqteuv
- W2_238 = "8c9f7fa"
- In HKEY_CURRENT_USER\Software\Afqteuv
- W3_238 = "81ca84cb"
- In HKEY_CURRENT_USER\Software\Afqteuv
- W4_238 = "8c9eee2"
- In HKEY_CURRENT_USER\Software\Afqteuv
- W1_239 = "351d4d2"
- In HKEY_CURRENT_USER\Software\Afqteuv
- W2_239 = "e336746e"
- In HKEY_CURRENT_USER\Software\Afqteuv
- W3_239 = "e235321"
- In HKEY_CURRENT_USER\Software\Afqteuv
- W4_239 = "e3365839"
- In HKEY_CURRENT_USER\Software\Afqteuv
- W1_240 = "e29e1e2"
- In HKEY_CURRENT_USER\Software\Afqteuv
- W2_240 = "45a2e45a"
- In HKEY_CURRENT_USER\Software\Afqteuv
- W3_240 = "44a1abb9"
- In HKEY_CURRENT_USER\Software\Afqteuv
- W4_240 = "45a2c19"
- In HKEY_CURRENT_USER\Software\Afqteuv
- W1_241 = "8fd8ba3e"
- In HKEY_CURRENT_USER\Software\Afqteuv
- W2_241 = "a8f3145"
- In HKEY_CURRENT_USER\Software\Afqteuv
- W3_241 = "a9c4ce"
- In HKEY_CURRENT_USER\Software\Afqteuv
- W4_241 = "a8f2ae7"
- In HKEY_CURRENT_USER\Software\Afqteuv
- W1_242 = "ad1ab667"
- In HKEY_CURRENT_USER\Software\Afqteuv
- W2_242 = "a7b82e9"
- In HKEY_CURRENT_USER\Software\Afqteuv
- W3_242 = "b78fe17"
- In HKEY_CURRENT_USER\Software\Afqteuv
- W4_242 = "a7b943e"
- In HKEY_CURRENT_USER\Software\Afqteuv
- W1_243 = "83fa15cc"
- In HKEY_CURRENT_USER\Software\Afqteuv
- W2_243 = "6ce7e5ae"
- In HKEY_CURRENT_USER\Software\Afqteuv
- W3_243 = "6de497bc"
- In HKEY_CURRENT_USER\Software\Afqteuv
- W4_243 = "6ce7fd95"
Step 6
Restore these modified registry values
Important:Editing the Windows Registry incorrectly can lead to irreversible system malfunction. Please do this only if you know how to or you can seek your system administrator's help. You may also check out this Microsoft article first before modifying your computer's registry.
- In HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Explorer\Advanced
- From: Hidden = "2"
To: Hidden = ""2""
- From: Hidden = "2"
- In HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center
- AntiVirusOverride = "1"
- In HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center
- AntiVirusDisableNotify = "1"
- In HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center
- FirewallDisableNotify = "1"
- In HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center
- FirewallOverride = "1"
- In HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center
- UpdatesDisableNotify = "1"
- In HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Advanced\Folder\Hidden\SHOWALL
- From: CheckedValue = "0"
To: CheckedValue = ""1""
- From: CheckedValue = "0"
Step 7
Search and delete these components
- %User Temp%\winkvms.exe
- %System%\drivers\ogkqn.sys
- %User Temp%\qoqbvo.exe
- %User Temp%\winajfut.exe
- %User Temp%\winkxfuii.exe
- %User Temp%\xwqyjs.exe
- %User Temp%\wincecfa.exe
- %User Temp%\winpyuft.exe
- %User Temp%\tcalge.exe
- %User Temp%\winhxoovx.exe
- %User Temp%\tdka.exe
- %User Temp%\winacsqax.exe
- %User Temp%\winqcyya.exe
- %User Temp%\lpgjiy.exe
- %User Temp%\wincupd.exe
- %User Temp%\winfrmsv.exe
- %User Temp%\dkkl.exe
- %User Temp%\wincbkrj.exe
- %User Temp%\winigxcpu.exe
- %User Temp%\winpgwpy.exe
- %User Temp%\poknaa.exe
- %User Temp%\winatle.exe
- %User Temp%\tosit.exe
- %User Temp%\wdfu.exe
- %User Temp%\winuxskj.exe
- %User Temp%\whihup.exe
- %User Temp%\xbea.exe
- %User Temp%\ocaxve.exe
- %User Temp%\chnv.exe
- %User Temp%\jtvdl.exe
- %User Temp%\winabsm.exe
- %User Temp%\winlxkd.exe
- %User Temp%\srgmf.exe
- %User Temp%\windbedeh.exe
- %User Temp%\vdcam.exe
- %User Temp%\wineknht.exe
- %User Temp%\yuvm.exe
- %User Temp%\faarr.exe
- %User Temp%\winxgfi.exe
- %User Temp%\winredy.exe
- %User Temp%\winpltm.exe
- %User Temp%\qjxvio.exe
- %User Temp%\winybvpb.exe
- %User Temp%\winkgihu.exe
- %User Temp%\dpjcq.exe
- %User Temp%\winxjvh.exe
- %User Temp%\yxdojd.exe
- %User Temp%\winupwofu.exe
- %User Temp%\winiavhw.exe
- %User Temp%\winputh.exe
- %User Temp%\winvcgb.exe
- %User Temp%\xgla.exe
- %User Temp%\winmfbskm.exe
- %User Temp%\wintqwj.exe
- %User Temp%\hspum.exe
- %User Temp%\eagnlf.exe
- %User Temp%\windrtd.exe
- %User Temp%\fikja.exe
- %User Temp%\nonbxa.exe
- %User Temp%\winfjex.exe
- %User Temp%\winiaxsx.exe
- %User Temp%\gpfboq.exe
- %User Temp%\winfrsnx.exe
- %User Temp%\winhniej.exe
- %User Temp%\bsawf.exe
- %User Temp%\frqwfh.exe
- %User Temp%\wlqps.exe
- %User Temp%\wintdfb.exe
- %User Temp%\whkyu.exe
- %User Temp%\winvfcmmv.exe
- %User Temp%\winijhoc.exe
- %User Temp%\winnqebd.exe
- %User Temp%\mcvofg.exe
- %User Temp%\winfkwip.exe
- %User Temp%\winhtkrbt.exe
- %User Temp%\eyqri.exe
- %User Temp%\winoomyp.exe
- %User Temp%\winghqnfn.exe
- %User Temp%\winbnmdjr.exe
- %User Temp%\wineppchk.exe
- %User Temp%\winnrqac.exe
- %User Temp%\winkxtrh.exe
- %User Temp%\winyxyk.exe
- %User Temp%\fcdea.exe
- %User Temp%\alnonh.exe
- %User Temp%\winyigd.exe
- %User Temp%\oqja.exe
- %User Temp%\winxpge.exe
- %User Temp%\jnkai.exe
- %User Temp%\fguyvg.exe
- %User Temp%\winvcvm.exe
- %User Temp%\winglaxat.exe
- %User Temp%\winsgpbo.exe
- %User Temp%\bjxdw.exe
- %User Temp%\winkhksi.exe
- %User Temp%\winraqeku.exe
- %User Temp%\winqkeb.exe
- %User Temp%\psip.exe
- %User Temp%\hiih.exe
- %User Temp%\rkmlou.exe
- %User Temp%\pafew.exe
- %User Temp%\winbyko.exe
- %User Temp%\utijpw.exe
- %User Temp%\fbvgba.exe
- %User Temp%\wntkw.exe
- %User Temp%\winhcvmo.exe
- %User Temp%\jpuoa.exe
- %User Temp%\winvttq.exe
- %User Temp%\winimog.exe
- %User Temp%\winrdad.exe
- %User Temp%\kowgbn.exe
- %User Temp%\winnntmkh.exe
- %User Temp%\winoedm.exe
- %User Temp%\wintrrt.exe
- %User Temp%\winwhwc.exe
- %User Temp%\winyraael.exe
- %User Temp%\bvfcu.exe
- %User Temp%\qfaf.exe
- %User Temp%\windahltu.exe
- %User Temp%\winvbpa.exe
- %User Temp%\winaqabjc.exe
- %User Temp%\winbxpsnc.exe
- %User Temp%\ihdpt.exe
- %User Temp%\winhons.exe
- %User Temp%\winfvvpvi.exe
- %User Temp%\icrn.exe
- %User Temp%\wintqiemh.exe
- %User Temp%\winqmlo.exe
- %User Temp%\winwohpsk.exe
- %User Temp%\winkcen.exe
- %User Temp%\winjkkqt.exe
- %User Temp%\bhlrv.exe
- %User Temp%\winhfbbto.exe
- %User Temp%\winrdkk.exe
- %User Temp%\fomjdf.exe
- %User Temp%\bdvay.exe
- %User Temp%\mwibno.exe
- %User Temp%\vcitw.exe
- %User Temp%\winxwhay.exe
- %User Temp%\winbthxgm.exe
- %User Temp%\ntsgei.exe
- %User Temp%\bsyt.exe
- %User Temp%\winydbn.exe
- %User Temp%\winlkjmx.exe
- %User Temp%\jtjl.exe
- %User Temp%\wincfwtg.exe
- %User Temp%\winohorjb.exe
- %User Temp%\winygek.exe
- %User Temp%\windvcgsp.exe
- %User Temp%\yypsvk.exe
- %User Temp%\winknee.exe
- %User Temp%\winpppx.exe
- %User Temp%\uyucmu.exe
- %User Temp%\winisiksh.exe
- %User Temp%\winnuaws.exe
- %User Temp%\winwbqttq.exe
- %User Temp%\winvxetfd.exe
- %User Temp%\rvoqay.exe
- %User Temp%\wintphtmr.exe
- %User Temp%\winkktk.exe
- %User Temp%\wincechr.exe
- %User Temp%\windbftp.exe
- %User Temp%\winkwfpfk.exe
- %User Temp%\winjfyv.exe
- %User Temp%\winmqwi.exe
- %User Temp%\johgon.exe
- %User Temp%\lpsaw.exe
- %User Temp%\winmuqg.exe
- %User Temp%\winkghvdu.exe
- %User Temp%\winkgjr.exe
- %User Temp%\bsrw.exe
- %User Temp%\wintkhpc.exe
- %User Temp%\xcdmo.exe
- %User Temp%\winarkst.exe
- %User Temp%\winwirlr.exe
- %User Temp%\rgnhnk.exe
- %User Temp%\winuugtro.exe
- %User Temp%\winkcsjfc.exe
- %User Temp%\mjqlu.exe
- %User Temp%\voqssb.exe
- %User Temp%\wingijutb.exe
- %User Temp%\winmdtan.exe
- %User Temp%\qwina.exe
- %User Temp%\vldxtc.exe
- %User Temp%\pjjh.exe
- %User Temp%\cdydkm.exe
- %User Temp%\winjrbqiu.exe
- %User Temp%\winpgrchm.exe
- %User Temp%\glenrm.exe
- %User Temp%\hpix.exe
- %User Temp%\winnvkimk.exe
- %User Temp%\otbq.exe
- %User Temp%\winhejygr.exe
- %User Temp%\winoqjmy.exe
- %User Temp%\kfjinc.exe
- %User Temp%\winfqyprm.exe
Step 8
Restart in normal mode and scan your computer with your Trend Micro product for files detected as WORM_VB.CKH. If the detected files have already been cleaned, deleted, or quarantined by your Trend Micro product, no further step is required. You may opt to simply delete the quarantined files. Please check this Knowledge Base page for more information.
Step 9
Restore this file from backup only Microsoft-related files will be restored. If this malware/grayware also deleted files related to programs that are not from Microsoft, please reinstall those programs on you computer again.
- %User Temp%\duth.exe
Step 10
Restore these deleted registry keys/values from backup
*Note: Only Microsoft-related keys/values will be restored. If the malware/grayware also deleted registry keys/values related to programs that are not from Microsoft, please reinstall those programs on your computer.
- In HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Control\SafeBoot\Minimal
- AppMgmt
- In HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Control\SafeBoot\Minimal
- Base
- In HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Control\SafeBoot\Minimal
- Boot Bus Extender
- In HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Control\SafeBoot\Minimal
- Boot file system
- In HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Control\SafeBoot\Minimal
- CryptSvc
- In HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Control\SafeBoot\Minimal
- DcomLaunch
- In HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Control\SafeBoot\Minimal
- dmadmin
- In HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Control\SafeBoot\Minimal
- dmboot.sys
- In HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Control\SafeBoot\Minimal
- dmio.sys
- In HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Control\SafeBoot\Minimal
- dmload.sys
- In HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Control\SafeBoot\Minimal
- dmserver
- In HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Control\SafeBoot\Minimal
- EventLog
- In HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Control\SafeBoot\Minimal
- File system
- In HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Control\SafeBoot\Minimal
- Filter
- In HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Control\SafeBoot\Minimal
- HelpSvc
- In HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Control\SafeBoot\Minimal
- Netlogon
- In HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Control\SafeBoot\Minimal
- PCI Configuration
- In HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Control\SafeBoot\Minimal
- PlugPlay
- In HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Control\SafeBoot\Minimal
- PNP Filter
- In HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Control\SafeBoot\Minimal
- Primary disk
- In HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Control\SafeBoot\Minimal
- RpcSs
- In HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Control\SafeBoot\Minimal
- SCSI Class
- In HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Control\SafeBoot\Minimal
- sermouse.sys
- In HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Control\SafeBoot\Minimal
- sr.sys
- In HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Control\SafeBoot\Minimal
- SRService
- In HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Control\SafeBoot\Minimal
- System Bus Extender
- In HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Control\SafeBoot\Minimal
- vga.sys
- In HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Control\SafeBoot\Minimal
- vgasave.sys
- In HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Control\SafeBoot\Minimal
- WinMgmt
- In HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Control\SafeBoot\Minimal
- {36FC9E60-C465-11CF-8056-444553540000}
- In HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Control\SafeBoot\Minimal
- {4D36E965-E325-11CE-BFC1-08002BE10318}
- In HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Control\SafeBoot\Minimal
- {4D36E967-E325-11CE-BFC1-08002BE10318}
- In HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Control\SafeBoot\Minimal
- {4D36E969-E325-11CE-BFC1-08002BE10318}
- In HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Control\SafeBoot\Minimal
- {4D36E96A-E325-11CE-BFC1-08002BE10318}
- In HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Control\SafeBoot\Minimal
- {4D36E96B-E325-11CE-BFC1-08002BE10318}
- In HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Control\SafeBoot\Minimal
- {4D36E96F-E325-11CE-BFC1-08002BE10318}
- In HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Control\SafeBoot\Minimal
- {4D36E977-E325-11CE-BFC1-08002BE10318}
- In HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Control\SafeBoot\Minimal
- {4D36E97B-E325-11CE-BFC1-08002BE10318}
- In HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Control\SafeBoot\Minimal
- {4D36E97D-E325-11CE-BFC1-08002BE10318}
- In HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Control\SafeBoot\Minimal
- {4D36E980-E325-11CE-BFC1-08002BE10318}
- In HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Control\SafeBoot\Minimal
- {71A27CDD-812A-11D0-BEC7-08002BE2092F}
- In HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Control\SafeBoot\Minimal
- {745A17A0-74D3-11D0-B6FE-00A0C90F57DA}
- In HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Control\SafeBoot
- Minimal
- In HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Control\SafeBoot\Network
- AFD
- In HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Control\SafeBoot\Network
- AppMgmt
- In HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Control\SafeBoot\Network
- Base
- In HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Control\SafeBoot\Network
- Boot Bus Extender
- In HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Control\SafeBoot\Network
- Boot file system
- In HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Control\SafeBoot\Network
- Browser
- In HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Control\SafeBoot\Network
- CryptSvc
- In HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Control\SafeBoot\Network
- DcomLaunch
- In HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Control\SafeBoot\Network
- Dhcp
- In HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Control\SafeBoot\Network
- dmadmin
- In HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Control\SafeBoot\Network
- dmboot.sys
- In HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Control\SafeBoot\Network
- dmio.sys
- In HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Control\SafeBoot\Network
- dmload.sys
- In HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Control\SafeBoot\Network
- dmserver
- In HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Control\SafeBoot\Network
- DnsCache
- In HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Control\SafeBoot\Network
- EventLog
- In HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Control\SafeBoot\Network
- File system
- In HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Control\SafeBoot\Network
- Filter
- In HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Control\SafeBoot\Network
- HelpSvc
- In HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Control\SafeBoot\Network
- ip6fw.sys
- In HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Control\SafeBoot\Network
- ipnat.sys
- In HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Control\SafeBoot\Network
- LanmanServer
- In HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Control\SafeBoot\Network
- LanmanWorkstation
- In HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Control\SafeBoot\Network
- LmHosts
- In HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Control\SafeBoot\Network
- Messenger
- In HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Control\SafeBoot\Network
- NDIS
- In HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Control\SafeBoot\Network
- NDIS Wrapper
- In HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Control\SafeBoot\Network
- Ndisuio
- In HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Control\SafeBoot\Network
- NetBIOS
- In HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Control\SafeBoot\Network
- NetBIOSGroup
- In HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Control\SafeBoot\Network
- NetBT
- In HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Control\SafeBoot\Network
- NetDDEGroup
- In HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Control\SafeBoot\Network
- Netlogon
- In HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Control\SafeBoot\Network
- NetMan
- In HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Control\SafeBoot
- Network
- In HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Control\SafeBoot\Network
- NetworkProvider
- In HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Control\SafeBoot\Network
- NtLmSsp
- In HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Control\SafeBoot\Network
- PCI Configuration
- In HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Control\SafeBoot\Network
- PlugPlay
- In HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Control\SafeBoot\Network
- PNP Filter
- In HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Control\SafeBoot\Network
- PNP_TDI
- In HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Control\SafeBoot\Network
- Primary disk
- In HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Control\SafeBoot\Network
- rdpcdd.sys
- In HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Control\SafeBoot\Network
- rdpdd.sys
- In HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Control\SafeBoot\Network
- rdpwd.sys
- In HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Control\SafeBoot\Network
- rdsessmgr
- In HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Control\SafeBoot\Network
- RpcSs
- In HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Control\SafeBoot\Network
- SCSI Class
- In HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Control\SafeBoot\Network
- sermouse.sys
- In HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Control\SafeBoot\Network
- SharedAccess
- In HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Control\SafeBoot\Network
- sr.sys
- In HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Control\SafeBoot\Network
- SRService
- In HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Control\SafeBoot\Network
- Streams Drivers
- In HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Control\SafeBoot\Network
- System Bus Extender
- In HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Control\SafeBoot\Network
- Tcpip
- In HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Control\SafeBoot\Network
- TDI
- In HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Control\SafeBoot\Network
- tdpipe.sys
- In HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Control\SafeBoot\Network
- tdtcp.sys
- In HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Control\SafeBoot\Network
- termservice
- In HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Control\SafeBoot\Network
- vga.sys
- In HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Control\SafeBoot\Network
- vgasave.sys
- In HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Control\SafeBoot\Network
- WinMgmt
- In HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Control\SafeBoot\Network
- WZCSVC
- In HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Control\SafeBoot\Network
- {36FC9E60-C465-11CF-8056-444553540000}
- In HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Control\SafeBoot\Network
- {4D36E965-E325-11CE-BFC1-08002BE10318}
- In HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Control\SafeBoot\Network
- {4D36E967-E325-11CE-BFC1-08002BE10318}
- In HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Control\SafeBoot\Network
- {4D36E969-E325-11CE-BFC1-08002BE10318}
- In HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Control\SafeBoot\Network
- {4D36E96A-E325-11CE-BFC1-08002BE10318}
- In HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Control\SafeBoot\Network
- {4D36E96B-E325-11CE-BFC1-08002BE10318}
- In HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Control\SafeBoot\Network
- {4D36E96F-E325-11CE-BFC1-08002BE10318}
- In HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Control\SafeBoot\Network
- {4D36E972-E325-11CE-BFC1-08002BE10318}
- In HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Control\SafeBoot\Network
- {4D36E973-E325-11CE-BFC1-08002BE10318}
- In HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Control\SafeBoot\Network
- {4D36E974-E325-11CE-BFC1-08002BE10318}
- In HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Control\SafeBoot\Network
- {4D36E975-E325-11CE-BFC1-08002BE10318}
- In HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Control\SafeBoot\Network
- {4D36E977-E325-11CE-BFC1-08002BE10318}
- In HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Control\SafeBoot\Network
- {4D36E97B-E325-11CE-BFC1-08002BE10318}
- In HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Control\SafeBoot\Network
- {4D36E97D-E325-11CE-BFC1-08002BE10318}
- In HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Control\SafeBoot\Network
- {4D36E980-E325-11CE-BFC1-08002BE10318}
- In HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Control\SafeBoot\Network
- {71A27CDD-812A-11D0-BEC7-08002BE2092F}
- In HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Control\SafeBoot\Network
- {745A17A0-74D3-11D0-B6FE-00A0C90F57DA}
- In HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Control\SafeBoot
- Network
Did this description help? Tell us how we did.