Win32.HLLW.Autoruner1.25574

Technical Information

To ensure autorun and distribution:

Modifies the following registry keys:

[<HKCU>\Software\Microsoft\Windows\CurrentVersion\Run] 'ж м255255' = '#¬™255—255'
[<HKCU>\Software\Microsoft\Windows\CurrentVersion\Run] 'ЬІe…254P254' = '†kп‘254254'
[<HKCU>\Software\Microsoft\Windows\CurrentVersion\Run] '' = ''
[<HKCU>\Software\Microsoft\Windows\CurrentVersion\Run] '' = ''
[<HKCU>\Software\Microsoft\Windows\CurrentVersion\Run] '3' = ''
[<HKCU>\Software\Microsoft\Windows\CurrentVersion\Run] 'Џв253[253' = 'г{r№253Б253'
[<HKCU>\Software\Microsoft\Windows\CurrentVersion\Run] 'х0 249K249' = '8'249&249'
[<HKCU>\Software\Microsoft\Windows\CurrentVersion\Run] '€'xА248О248' = '‘…]248k248'
[<HKCU>\Software\Microsoft\Windows\CurrentVersion\Run] '’™250k250' = 'Ѓ]5Э250250'
[<HKCU>\Software\Microsoft\Windows\CurrentVersion\Run] 'ШХ252И252' = 'ЇЯ‘2520252'
[<HKCU>\Software\Microsoft\Windows\CurrentVersion\Run] 'vЈ¤ 251„251' = 'dї№251E251'
[<HKCU>\Software\Microsoft\Windows\CurrentVersion\Run] '' = '55'
[<HKCU>\Software\Microsoft\Windows\CurrentVersion\Run] ' 1313' = '1313'
[<HKCU>\Software\Microsoft\Windows\CurrentVersion\Run] ' 1212' = ' 12'
[<HKCU>\Software\Microsoft\Windows\CurrentVersion\Run] ' ' = ' 1414'
[<HKCU>\Software\Microsoft\Windows\CurrentVersion\Run] '' = ''
[<HKCU>\Software\Microsoft\Windows\CurrentVersion\Run] '' = '15 15'
[<HKCU>\Software\Microsoft\Windows\CurrentVersion\Run] '' = ' 11 11'
[<HKCU>\Software\Microsoft\Windows\CurrentVersion\Run] '' = ''
[<HKCU>\Software\Microsoft\Windows\CurrentVersion\Run] '66' = ''
[<HKCU>\Software\Microsoft\Windows\CurrentVersion\Run] '88' = '88'
[<HKCU>\Software\Microsoft\Windows\CurrentVersion\Run] '1010' = ''
[<HKCU>\Software\Microsoft\Windows\CurrentVersion\Run] '99' = '99'
[<HKCU>\Software\Microsoft\Windows\CurrentVersion\Run] ' „Ґ247¤247' = ''
[<HKCU>\Software\Microsoft\Windows\CurrentVersion\Run] '0AАѕ231Њ231' = 'vЦв231„231'
[<HKCU>\Software\Microsoft\Windows\CurrentVersion\Run] 'ЪhЋ230V230' = 'Ёueа230v230'
[<HKCU>\Software\Microsoft\Windows\CurrentVersion\Run] '7]+Ф232µ232' = 'ґвГ•232€232'
[<HKCU>\Software\Microsoft\Windows\CurrentVersion\Run] 'СВEi234E234' = 'Ї·аn234%234'
[<HKCU>\Software\Microsoft\Windows\CurrentVersion\Run] 'Њ?Ґ233–233' = 'SaHq233Ж233'
[<HKCU>\Software\Microsoft\Windows\CurrentVersion\Run] 'д…П229Ч229' = 'NЯs229д229'
[<HKCU>\Software\Microsoft\Windows\CurrentVersion\Run] '6B¤v225<225' = '‘vФЭ225-225'
[<HKCU>\Software\Microsoft\Windows\CurrentVersion\Run] '!}М224У224' = '›ћ!224Q224'
[<HKCU>\Software\Microsoft\Windows\CurrentVersion\Run] ' | Е226f226' = 'Ф]T226o226'
[<HKCU>\Software\Microsoft\Windows\CurrentVersion\Run] 'ђ]Ы•228Е228' = 'tДo>228228'
[<HKCU>\Software\Microsoft\Windows\CurrentVersion\Run] 'єња9227;227' = 'ИV*227m227'
[<HKCU>\Software\Microsoft\Windows\CurrentVersion\Run] 'NєјF235©235' = 'R„•O235Ї235'
[<HKCU>\Software\Microsoft\Windows\CurrentVersion\Run] '¤Њ243Л243' = '1z5^2439243'
[<HKCU>\Software\Microsoft\Windows\CurrentVersion\Run] 'CПTҐ242С242' = '·Ѕy242В242'
[<HKCU>\Software\Microsoft\Windows\CurrentVersion\Run] 'ugH$244"244' = 'йЦ„$2440244'
[<HKCU>\Software\Microsoft\Windows\CurrentVersion\Run] '65Y246ё246' = 'q†ЦВ246Ї246'
[<HKCU>\Software\Microsoft\Windows\CurrentVersion\Run] '+тР245Ь245' = 'р„'
[<HKCU>\Software\Microsoft\Windows\CurrentVersion\Run] '^д(Є241€241' = 'QЈЬg241!241'
[<HKCU>\Software\Microsoft\Windows\CurrentVersion\Run] 'La237‡237' = 'Е$5Ђ237Я237'
[<HKCU>\Software\Microsoft\Windows\CurrentVersion\Run] 'б{/236ѓ236' = 'ЈбІB2367236'
[<HKCU>\Software\Microsoft\Windows\CurrentVersion\Run] 'Р0Д238g238' = 'ik€238238'
[<HKCU>\Software\Microsoft\Windows\CurrentVersion\Run] '6#240g240' = '¤А240+240'
[<HKCU>\Software\Microsoft\Windows\CurrentVersion\Run] 'Ю7jї239239' = 'NRtВ239f239'
[<HKCU>\Software\Microsoft\Windows\CurrentVersion\Run] ' 1717' = ''
[<HKCU>\Software\Microsoft\Windows\CurrentVersion\Run] '# 49049' = '4949'
[<HKCU>\Software\Microsoft\Windows\CurrentVersion\Run] '.4848' = '&%)48!48'
[<HKCU>\Software\Microsoft\Windows\CurrentVersion\Run] '$5050' = '5050'
[<HKCU>\Software\Microsoft\Windows\CurrentVersion\Run] ' 35252' = '052,52'
[<HKCU>\Software\Microsoft\Windows\CurrentVersion\Run] '.-)51)51' = ''5151'
[<HKCU>\Software\Microsoft\Windows\CurrentVersion\Run] '$,-4747' = ''$47#47'
[<HKCU>\Software\Microsoft\Windows\CurrentVersion\Run] ''4343' = '4343'
[<HKCU>\Software\Microsoft\Windows\CurrentVersion\Run] '!4242' = '4242'
[<HKCU>\Software\Microsoft\Windows\CurrentVersion\Run] '(4444' = '44+44'
[<HKCU>\Software\Microsoft\Windows\CurrentVersion\Run] '' = ' '46 46'
[<HKCU>\Software\Microsoft\Windows\CurrentVersion\Run] '*4545' = '45&45'
[<HKCU>\Software\Microsoft\Windows\CurrentVersion\Run] '-0 5353' = '1&.53.53'
[<HKCU>\Software\Microsoft\Windows\CurrentVersion\Run] '$ 61(61' = '+!<61361'
[<HKCU>\Software\Microsoft\Windows\CurrentVersion\Run] '8!60 60' = '9886060'
[<HKCU>\Software\Microsoft\Windows\CurrentVersion\Run] '0 6262' = '/%2 62 62'
[<HKCU>\Software\Microsoft\Windows\CurrentVersion\Run] '*1.64' = '>1064)64'
[<HKCU>\Software\Microsoft\Windows\CurrentVersion\Run] ' 63:63' = '9263,63'
[<HKCU>\Software\Microsoft\Windows\CurrentVersion\Run] '-*(5959' = '659659'
[<HKCU>\Software\Microsoft\Windows\CurrentVersion\Run] '55355' = ',55+55'
[<HKCU>\Software\Microsoft\Windows\CurrentVersion\Run] '55&54$54' = ' 5454'
[<HKCU>\Software\Microsoft\Windows\CurrentVersion\Run] '5656' = '-&756 56'
[<HKCU>\Software\Microsoft\Windows\CurrentVersion\Run] '' = ' 958-58'
[<HKCU>\Software\Microsoft\Windows\CurrentVersion\Run] ' 5757' = ''
[<HKCU>\Software\Microsoft\Windows\CurrentVersion\Run] '4141' = '$$4141'
[<HKCU>\Software\Microsoft\Windows\CurrentVersion\Run] '' = ''
[<HKCU>\Software\Microsoft\Windows\CurrentVersion\Run] ' ' = '2424'
[<HKCU>\Software\Microsoft\Windows\CurrentVersion\Run] ' 2626' = ' 2626'
[<HKCU>\Software\Microsoft\Windows\CurrentVersion\Run] ' 2828' = '2828'
[<HKCU>\Software\Microsoft\Windows\CurrentVersion\Run] '2727' = ' '
[<HKCU>\Software\Microsoft\Windows\CurrentVersion\Run] ' 2323' = ' 2323'
[<HKCU>\Software\Microsoft\Windows\CurrentVersion\Run] '1919' = ''
[<HKCU>\Software\Microsoft\Windows\CurrentVersion\Run] ' 1818' = '1818'
[<HKCU>\Software\Microsoft\Windows\CurrentVersion\Run] ' 2020' = '2020'
[<HKCU>\Software\Microsoft\Windows\CurrentVersion\Run] ' 22 22' = '2222'
[<HKCU>\Software\Microsoft\Windows\CurrentVersion\Run] '2121' = ''
[<HKCU>\Software\Microsoft\Windows\CurrentVersion\Run] '2929' = ' 2929'
[<HKCU>\Software\Microsoft\Windows\CurrentVersion\Run] '$' = '#3737'
[<HKCU>\Software\Microsoft\Windows\CurrentVersion\Run] ' 3636' = '3636'
[<HKCU>\Software\Microsoft\Windows\CurrentVersion\Run] '$3838' = ' 3838'
[<HKCU>\Software\Microsoft\Windows\CurrentVersion\Run] ' 40&40' = ' 4040'
[<HKCU>\Software\Microsoft\Windows\CurrentVersion\Run] '&3939' = '#3939'
[<HKCU>\Software\Microsoft\Windows\CurrentVersion\Run] ' "3535' = '!3535'
[<HKCU>\Software\Microsoft\Windows\CurrentVersion\Run] '3131' = '31 31'
[<HKCU>\Software\Microsoft\Windows\CurrentVersion\Run] '' = '3030'
[<HKCU>\Software\Microsoft\Windows\CurrentVersion\Run] '3232' = '32'
[<HKCU>\Software\Microsoft\Windows\CurrentVersion\Run] ' 3434' = '3434'
[<HKCU>\Software\Microsoft\Windows\CurrentVersion\Run] ' ' = '3333'
[<HKCU>\Software\Microsoft\Windows\CurrentVersion\Run] '{vd160160' = 'j:U1603160'
[<HKCU>\Software\Microsoft\Windows\CurrentVersion\Run] '8M159$159' = 'hЉa/159Ђ159'
[<HKCU>\Software\Microsoft\Windows\CurrentVersion\Run] '—+aK161161' = 'D#”161^161'
[<HKCU>\Software\Microsoft\Windows\CurrentVersion\Run] 'w…fc163d163' = '@”v163{163'
[<HKCU>\Software\Microsoft\Windows\CurrentVersion\Run] ']_ 162o162' = '{dcj162k162'
[<HKCU>\Software\Microsoft\Windows\CurrentVersion\Run] 'r<Ђ158158' = 'CYB158158'
[<HKCU>\Software\Microsoft\Windows\CurrentVersion\Run] 'Z ; 154‹154' = ']a:=154E154'
[<HKCU>\Software\Microsoft\Windows\CurrentVersion\Run] ',n‹153153' = '[8t‚153‹153'
[<HKCU>\Software\Microsoft\Windows\CurrentVersion\Run] 'T]155u155' = '@(155?155'
[<HKCU>\Software\Microsoft\Windows\CurrentVersion\Run] '‹’s157-157' = 'VЃp157ђ157'
[<HKCU>\Software\Microsoft\Windows\CurrentVersion\Run] 'fbt156156' = '4#K156156'
[<HKCU>\Software\Microsoft\Windows\CurrentVersion\Run] 'Ќ uџ164y164' = '›[љ>164164'
[<HKCU>\Software\Microsoft\Windows\CurrentVersion\Run] '¦8172172' = '1X172@172'
[<HKCU>\Software\Microsoft\Windows\CurrentVersion\Run] '&¦1ѓ171171' = 'gџd171171'
[<HKCU>\Software\Microsoft\Windows\CurrentVersion\Run] 'ЃЉx1738173' = '•hџ173b173'
[<HKCU>\Software\Microsoft\Windows\CurrentVersion\Run] 'SET.175]175' = '@]ў175175'
[<HKCU>\Software\Microsoft\Windows\CurrentVersion\Run] 'Єx174174' = 'ЄЏ“5174174'
[<HKCU>\Software\Microsoft\Windows\CurrentVersion\Run] '§)7ђ170h170' = ' њj170E170'
[<HKCU>\Software\Microsoft\Windows\CurrentVersion\Run] 'X‰T166R166' = '-oF/166m166'
[<HKCU>\Software\Microsoft\Windows\CurrentVersion\Run] '?G|=165g165' = '0Vћ165165'
[<HKCU>\Software\Microsoft\Windows\CurrentVersion\Run] '!¦%167Y167' = 'Љ8167љ167'
[<HKCU>\Software\Microsoft\Windows\CurrentVersion\Run] '3j‰169*169' = '$њ169o169'
[<HKCU>\Software\Microsoft\Windows\CurrentVersion\Run] 'OЈE168q168' = 'ќa65168F168'
[<HKCU>\Software\Microsoft\Windows\CurrentVersion\Run] 'ђUW152 152' = 'D!N,1521152'
[<HKCU>\Software\Microsoft\Windows\CurrentVersion\Run] '‡$136136' = '8U Q136G136'
[<HKCU>\Software\Microsoft\Windows\CurrentVersion\Run] '^c135135' = '*Ђ<135h135'
[<HKCU>\Software\Microsoft\Windows\CurrentVersion\Run] 'n' = '-mP1137137'
[<HKCU>\Software\Microsoft\Windows\CurrentVersion\Run] 'u':139X139' = 'qO]139139'
[<HKCU>\Software\Microsoft\Windows\CurrentVersion\Run] '4h#L138+138' = 'NRBJ1382138'
[<HKCU>\Software\Microsoft\Windows\CurrentVersion\Run] '6`a134134' = 'W ,134B134'
[<HKCU>\Software\Microsoft\Windows\CurrentVersion\Run] ' KL130S130' = 'q| 130130'
[<HKCU>\Software\Microsoft\Windows\CurrentVersion\Run] 'yy\129z129' = 'e;=J129129'
[<HKCU>\Software\Microsoft\Windows\CurrentVersion\Run] 'D/x131131' = 'V'
[<HKCU>\Software\Microsoft\Windows\CurrentVersion\Run] 'q;LB133Ђ133' = 'T4;133s133'
[<HKCU>\Software\Microsoft\Windows\CurrentVersion\Run] '\?!O132<132' = '&Jd132s132'
[<HKCU>\Software\Microsoft\Windows\CurrentVersion\Run] 'Ed(\140,140' = '2‰I‚140&140'
[<HKCU>\Software\Microsoft\Windows\CurrentVersion\Run] 'Џ4ѓ148:148' = '<MЂf148$148'
[<HKCU>\Software\Microsoft\Windows\CurrentVersion\Run] '6NUЊ147147' = 'h147147'
[<HKCU>\Software\Microsoft\Windows\CurrentVersion\Run] '{zk149Z149' = 'BP[„149h149'
[<HKCU>\Software\Microsoft\Windows\CurrentVersion\Run] '"$M3151*151' = '8K'
[<HKCU>\Software\Microsoft\Windows\CurrentVersion\Run] 'oЉ~y150150' = '‘8€150o150'
[<HKCU>\Software\Microsoft\Windows\CurrentVersion\Run] 'z+um146'146' = '=g_146,146'
[<HKCU>\Software\Microsoft\Windows\CurrentVersion\Run] 'IЉ{"142_142' = 'eL1422142'
[<HKCU>\Software\Microsoft\Windows\CurrentVersion\Run] ' Hѓ141P141' = '5U)141o141'
[<HKCU>\Software\Microsoft\Windows\CurrentVersion\Run] 'DѓN143€143' = '8‰G†143J143'
[<HKCU>\Software\Microsoft\Windows\CurrentVersion\Run] 'RF+145Љ145' = '=7F 145+145'
[<HKCU>\Software\Microsoft\Windows\CurrentVersion\Run] 'LY{ 144c144' = '"Ќ 144144'
[<HKCU>\Software\Microsoft\Windows\CurrentVersion\Run] 'Ё –9176t176' = '¤:1763176'
[<HKCU>\Software\Microsoft\Windows\CurrentVersion\Run] 'Bwі{208«208' = '‹њЃZ208ѕ208'
[<HKCU>\Software\Microsoft\Windows\CurrentVersion\Run] '7µ` 207W207' = '‚$1207207'
[<HKCU>\Software\Microsoft\Windows\CurrentVersion\Run] '*Љ®8209•209' = 'fО’[209209'
[<HKCU>\Software\Microsoft\Windows\CurrentVersion\Run] 'gQ¶211211' = '‡џ'S2112211'
[<HKCU>\Software\Microsoft\Windows\CurrentVersion\Run] '%•210З210' = 'єџ№6210‹210'
[<HKCU>\Software\Microsoft\Windows\CurrentVersion\Run] 'SН206Ґ206' = 'hN 206206'
[<HKCU>\Software\Microsoft\Windows\CurrentVersion\Run] 'c6E&202`202' = '"#202џ202'
[<HKCU>\Software\Microsoft\Windows\CurrentVersion\Run] 'ДgT201201' = 'P‹T201201'
[<HKCU>\Software\Microsoft\Windows\CurrentVersion\Run] '0®AH203*203' = '1~%Г203[203'
[<HKCU>\Software\Microsoft\Windows\CurrentVersion\Run] '‹j205Ђ205' = 'Вёџ205i205'
[<HKCU>\Software\Microsoft\Windows\CurrentVersion\Run] 'YG‰204K204' = '°g€204q204'
[<HKCU>\Software\Microsoft\Windows\CurrentVersion\Run] '_` 212є212' = ' –212k212'
[<HKCU>\Software\Microsoft\Windows\CurrentVersion\Run] 'a›c±2208220' = 'Зљ,№220u220'
[<HKCU>\Software\Microsoft\Windows\CurrentVersion\Run] 'єs)219219' = '7\6W219‹219'
[<HKCU>\Software\Microsoft\Windows\CurrentVersion\Run] '( M 221“221' = 'W_C221Г221'
[<HKCU>\Software\Microsoft\Windows\CurrentVersion\Run] '°ЌЧ223Љ223' = 'Ш“Y223223'
[<HKCU>\Software\Microsoft\Windows\CurrentVersion\Run] 'Џ:љ!222222' = '$gЙi222V222'
[<HKCU>\Software\Microsoft\Windows\CurrentVersion\Run] 'O\i218Ф218' = '6`}d218€218'
[<HKCU>\Software\Microsoft\Windows\CurrentVersion\Run] '©;ѕЖ214 214' = 'М>hm214Й214'
[<HKCU>\Software\Microsoft\Windows\CurrentVersion\Run] '<‡О213u213' = '•ZНw213І213'
[<HKCU>\Software\Microsoft\Windows\CurrentVersion\Run] 'ЖКI215[215' = 'ҐO&€215 215'
[<HKCU>\Software\Microsoft\Windows\CurrentVersion\Run] '•#К…217<217' = 'IЎј217x217'
[<HKCU>\Software\Microsoft\Windows\CurrentVersion\Run] 'Аї!216Љ216' = 'Ё216:216'
[<HKCU>\Software\Microsoft\Windows\CurrentVersion\Run] 'њ A200,200' = ' o-І200p200'
[<HKCU>\Software\Microsoft\Windows\CurrentVersion\Run] '·f¶‘184§184' = '=Wі184184'
[<HKCU>\Software\Microsoft\Windows\CurrentVersion\Run] 'W±]183183' = '6¦1183183'
[<HKCU>\Software\Microsoft\Windows\CurrentVersion\Run] ' ~m185ё185' = '„^oІ185S185'
[<HKCU>\Software\Microsoft\Windows\CurrentVersion\Run] '{©bk187—187' = '¶ ±187І187'
[<HKCU>\Software\Microsoft\Windows\CurrentVersion\Run] 'ґG9186186' = '8;Ё186@186'
[<HKCU>\Software\Microsoft\Windows\CurrentVersion\Run] '$H182g182' = 'Ў 0W182Q182'
[<HKCU>\Software\Microsoft\Windows\CurrentVersion\Run] '[Њ178s178' = 'lЏ(-178 178'
[<HKCU>\Software\Microsoft\Windows\CurrentVersion\Run] 'ЈF™177=177' = '{‰o177…177'
[<HKCU>\Software\Microsoft\Windows\CurrentVersion\Run] ' ІC1798179' = 'VЄII179179'
[<HKCU>\Software\Microsoft\Windows\CurrentVersion\Run] 'r|181‰181' = 'ЂB&ћ181w181'
[<HKCU>\Software\Microsoft\Windows\CurrentVersion\Run] '`r.180§180' = '‹hrX180\180'
[<HKCU>\Software\Microsoft\Windows\CurrentVersion\Run] 'KPl188V188' = '[oEџ188188'
[<HKCU>\Software\Microsoft\Windows\CurrentVersion\Run] 'ZKY!196X196' = '0’oa196¦196'
[<HKCU>\Software\Microsoft\Windows\CurrentVersion\Run] 'ZЄ195ђ195' = 'yѕ195®195'
[<HKCU>\Software\Microsoft\Windows\CurrentVersion\Run] 'Ia_Ў197%197' = '`VGQ197@197'
[<HKCU>\Software\Microsoft\Windows\CurrentVersion\Run] '»WЌ199199' = 'NЏҐ199<199'
[<HKCU>\Software\Microsoft\Windows\CurrentVersion\Run] '4! Ґ198]198' = '1W)198)198'
[<HKCU>\Software\Microsoft\Windows\CurrentVersion\Run] 'Є… 1943194' = '>NX„194194'
[<HKCU>\Software\Microsoft\Windows\CurrentVersion\Run] 'VLp190C190' = 'O«„190 190'
[<HKCU>\Software\Microsoft\Windows\CurrentVersion\Run] 'Јmє]189§189' = ',§Ї189Џ189'
[<HKCU>\Software\Microsoft\Windows\CurrentVersion\Run] 'r3«191E191' = '«!“191191'
[<HKCU>\Software\Microsoft\Windows\CurrentVersion\Run] 'q–’\1939193' = 'Ї¦:193193'
[<HKCU>\Software\Microsoft\Windows\CurrentVersion\Run] 'Ђwhµ192°192' = 'ѕPI—192ё192'
[<HKCU>\Software\Microsoft\Windows\CurrentVersion\Run] ',=:65+65' = '+65#65'
[<HKCU>\Software\Microsoft\Windows\CurrentVersion\Run] 'ґ8192‡192' = '§Y @192,192'
[<HKCU>\Software\Microsoft\Windows\CurrentVersion\Run] 'p} 191±191' = '’i-191ґ191'
[<HKCU>\Software\Microsoft\Windows\CurrentVersion\Run] 'IPЃ193x193' = '”0p193Ђ193'
[<HKCU>\Software\Microsoft\Windows\CurrentVersion\Run] ' _K195Ѕ195' = 'V@IЌ195:195'
[<HKCU>\Software\Microsoft\Windows\CurrentVersion\Run] '' = '’0Yl194194'
[<HKCU>\Software\Microsoft\Windows\CurrentVersion\Run] 'a+<190\190' = '№HsЌ190%190'
[<HKCU>\Software\Microsoft\Windows\CurrentVersion\Run] 'vv 186O186' = '[—^(186186'
[<HKCU>\Software\Microsoft\Windows\CurrentVersion\Run] '5@6185H185' = 'G*d185=185'
[<HKCU>\Software\Microsoft\Windows\CurrentVersion\Run] '‘187•187' = '$=h5187>187'
[<HKCU>\Software\Microsoft\Windows\CurrentVersion\Run] 'C#v189«189' = 'Ё…;i189—189'
[<HKCU>\Software\Microsoft\Windows\CurrentVersion\Run] ' µo188$188' = '^,188188'
[<HKCU>\Software\Microsoft\Windows\CurrentVersion\Run] '%є€њ196u196' = 'T“H196Ј196'
[<HKCU>\Software\Microsoft\Windows\CurrentVersion\Run] '®0*204N204' = 'Й'ё"204R204'
[<HKCU>\Software\Microsoft\Windows\CurrentVersion\Run] '<їr203«203' = '0Ћ„203™203'
[<HKCU>\Software\Microsoft\Windows\CurrentVersion\Run] 'z[w»2052205' = 'rXPl205Й205'
[<HKCU>\Software\Microsoft\Windows\CurrentVersion\Run] ''JЇ207»207' = '·nx207c207'
[<HKCU>\Software\Microsoft\Windows\CurrentVersion\Run] '67ќї206°206' = ',ЎX206'
[<HKCU>\Software\Microsoft\Windows\CurrentVersion\Run] '.©Z>202»202' = '’Д“202Ћ202'
[<HKCU>\Software\Microsoft\Windows\CurrentVersion\Run] '“Bs!198Ё198' = '@0ќ198I198'
[<HKCU>\Software\Microsoft\Windows\CurrentVersion\Run] 'zџ,‰1977197' = '™№·197`197'
[<HKCU>\Software\Microsoft\Windows\CurrentVersion\Run] '›(Ћ199I199' = '‚®JC199199'
[<HKCU>\Software\Microsoft\Windows\CurrentVersion\Run] '¦ZБm201®201' = '‘ґ¶2201K201'
[<HKCU>\Software\Microsoft\Windows\CurrentVersion\Run] 'Вz†4200K200' = '–M*¶200R200'
[<HKCU>\Software\Microsoft\Windows\CurrentVersion\Run] 'xІj†184R184' = 'Oѓ 184Q184'
[<HKCU>\Software\Microsoft\Windows\CurrentVersion\Run] '7G7168O168' = '47~}168C168'
[<HKCU>\Software\Microsoft\Windows\CurrentVersion\Run] 'M^#167Љ167' = '‹ 167167'
[<HKCU>\Software\Microsoft\Windows\CurrentVersion\Run] '.w 169F169' = '!3W169n169'
[<HKCU>\Software\Microsoft\Windows\CurrentVersion\Run] 'M~x171G171' = 'W%*$171171'
[<HKCU>\Software\Microsoft\Windows\CurrentVersion\Run] 'bqq170Y170' = 'JK}170170'
[<HKCU>\Software\Microsoft\Windows\CurrentVersion\Run] '‚K”' = ',EJo166E166'
[<HKCU>\Software\Microsoft\Windows\CurrentVersion\Run] '‚ z1622162' = 'lЎ162'162'
[<HKCU>\Software\Microsoft\Windows\CurrentVersion\Run] '@]b161"161' = 'Ѓ;)161A161'
[<HKCU>\Software\Microsoft\Windows\CurrentVersion\Run] 'ZЂ163€163' = 'U~P163163'
[<HKCU>\Software\Microsoft\Windows\CurrentVersion\Run] '& ‰X165165' = 'F?ќ“165e165'
[<HKCU>\Software\Microsoft\Windows\CurrentVersion\Run] ' [164?164' = '#љN›164p164'
[<HKCU>\Software\Microsoft\Windows\CurrentVersion\Run] 'se‘172€172' = 'ќ>‰172c172'
[<HKCU>\Software\Microsoft\Windows\CurrentVersion\Run] 'BЉI180b180' = 'k00M180R180'
[<HKCU>\Software\Microsoft\Windows\CurrentVersion\Run] ']џ‡d179”179' = 'H§™179Џ179'
[<HKCU>\Software\Microsoft\Windows\CurrentVersion\Run] 'J6q 181/181' = '±9Cb181€181'
[<HKCU>\Software\Microsoft\Windows\CurrentVersion\Run] '®(®183!183' = '?џ¬‹183183'
[<HKCU>\Software\Microsoft\Windows\CurrentVersion\Run] 'ІE+°182)182' = 'm|'
[<HKCU>\Software\Microsoft\Windows\CurrentVersion\Run] ''љ 178)178' = '^9Љ~178178'
[<HKCU>\Software\Microsoft\Windows\CurrentVersion\Run] 'Њѓ&174174' = 'ўѓyH174@174'
[<HKCU>\Software\Microsoft\Windows\CurrentVersion\Run] 'Mc173Ґ173' = 'Q€$173“173'
[<HKCU>\Software\Microsoft\Windows\CurrentVersion\Run] '–d175175' = '0^175V175'
[<HKCU>\Software\Microsoft\Windows\CurrentVersion\Run] 'yЇ177t177' = ' `Ґ177…177'
[<HKCU>\Software\Microsoft\Windows\CurrentVersion\Run] 'qS\176ў176' = '® ‚176џ176'
[<HKCU>\Software\Microsoft\Windows\CurrentVersion\Run] 'Qg"Ї208ѓ208' = 'іOUT2080208'
[<HKCU>\Software\Microsoft\Windows\CurrentVersion\Run] '„9µ·240»240' = 'л.Y·240ј240'
[<HKCU>\Software\Microsoft\Windows\CurrentVersion\Run] '§З(239Я239' = '37x¬239k239'
[<HKCU>\Software\Microsoft\Windows\CurrentVersion\Run] '+ @“241241' = '‡€z241241'
[<HKCU>\Software\Microsoft\Windows\CurrentVersion\Run] 'с4™2437243' = 'Еr‚243Ѕ243'
[<HKCU>\Software\Microsoft\Windows\CurrentVersion\Run] 'Шз¶242M242' = 'ОЊ[ґ242ё242'
[<HKCU>\Software\Microsoft\Windows\CurrentVersion\Run] '/tО238‘238' = 'ЉдЊ¤238'238'
[<HKCU>\Software\Microsoft\Windows\CurrentVersion\Run] 'ґwб~234\234' = 'З!Xv234h234'
[<HKCU>\Software\Microsoft\Windows\CurrentVersion\Run] '([¤233233' = 'ѕ¶їP233ж233'
[<HKCU>\Software\Microsoft\Windows\CurrentVersion\Run] 'Am·‚235¶235' = 'Л6А]235235'
[<HKCU>\Software\Microsoft\Windows\CurrentVersion\Run] '4іґЋ237й237' = 'ћ¦¬237;237'
[<HKCU>\Software\Microsoft\Windows\CurrentVersion\Run] 'S!ЁХ236Ј236' = 'ѕ%Ь236236'
[<HKCU>\Software\Microsoft\Windows\CurrentVersion\Run] ')Ї,244¶244' = '„f¶|244244'
[<HKCU>\Software\Microsoft\Windows\CurrentVersion\Run] 'wе-j252B252' = '2'(z252Б252'
[<HKCU>\Software\Microsoft\Windows\CurrentVersion\Run] ' vAд251Ч251' = 'ќ -u251!251'
[<HKCU>\Software\Microsoft\Windows\CurrentVersion\Run] 'pёRЦ253x253' = 'MЎ#є253щ253'
[<HKCU>\Software\Microsoft\Windows\CurrentVersion\Run] '¤€Ѕ255й255' = 'Еo1e255 255'
[<HKCU>\Software\Microsoft\Windows\CurrentVersion\Run] 'вИ”{2540254' = 'њUVџ254254'
[<HKCU>\Software\Microsoft\Windows\CurrentVersion\Run] 'ётО250ѓ250' = '‰&‹°250ш250'
[<HKCU>\Software\Microsoft\Windows\CurrentVersion\Run] 'Ё/\Ў246ђ246' = 'ЯШtE246246'
[<HKCU>\Software\Microsoft\Windows\CurrentVersion\Run] 'XaЈ245Ї245' = '_oМ245«245'
[<HKCU>\Software\Microsoft\Windows\CurrentVersion\Run] '§†З247247' = 'Zцs247ћ247'
[<HKCU>\Software\Microsoft\Windows\CurrentVersion\Run] 'SѕН 249ц249' = '}e!б249249'
[<HKCU>\Software\Microsoft\Windows\CurrentVersion\Run] 'cY248Џ248' = '99У0248248'
[<HKCU>\Software\Microsoft\Windows\CurrentVersion\Run] '@Я±232ё232' = ',ФЛ232[232'
[<HKCU>\Software\Microsoft\Windows\CurrentVersion\Run] 'c§ЂB216t216' = 'y216.216'
[<HKCU>\Software\Microsoft\Windows\CurrentVersion\Run] 'NO215*215' = 'Њ¦kp215215'
[<HKCU>\Software\Microsoft\Windows\CurrentVersion\Run] '¦љB217u217' = 'n m2178217'
[<HKCU>\Software\Microsoft\Windows\CurrentVersion\Run] 'LЧeЇ219Ђ219' = '¤vЧ219l219'
[<HKCU>\Software\Microsoft\Windows\CurrentVersion\Run] '!ў~С218…218' = '†0p218G218'
[<HKCU>\Software\Microsoft\Windows\CurrentVersion\Run] 'Ћ1Р214О214' = 'NЗМ214!214'
[<HKCU>\Software\Microsoft\Windows\CurrentVersion\Run] 'R1«g210!210' = 'і№1210є210'
[<HKCU>\Software\Microsoft\Windows\CurrentVersion\Run] '+єu209209' = 'ґH«209209'
[<HKCU>\Software\Microsoft\Windows\CurrentVersion\Run] '1Mv211•211' = '•О¦211і211'
[<HKCU>\Software\Microsoft\Windows\CurrentVersion\Run] '‡:T213 213' = '0<213ґ213'
[<HKCU>\Software\Microsoft\Windows\CurrentVersion\Run] 'ЂЈ¶X212N212' = '—ќYЏ212g212'
[<HKCU>\Software\Microsoft\Windows\CurrentVersion\Run] '<У‘220Щ220' = 'DF”Т220-220'
[<HKCU>\Software\Microsoft\Windows\CurrentVersion\Run] 'гЭ228¬228' = '»|јY2288228'
[<HKCU>\Software\Microsoft\Windows\CurrentVersion\Run] 'iDЧЩ227(227' = 'ґk’+227227'
[<HKCU>\Software\Microsoft\Windows\CurrentVersion\Run] 'СЛmЫ229Ч229' = '’бf229Н229'
[<HKCU>\Software\Microsoft\Windows\CurrentVersion\Run] 'ЛUБ 231›231' = '9oі231(231'
[<HKCU>\Software\Microsoft\Windows\CurrentVersion\Run] '[Иas230‰230' = 'Ћµb230230'
[<HKCU>\Software\Microsoft\Windows\CurrentVersion\Run] '2Ж,‰226ј226' = ' lКX226‹226'
[<HKCU>\Software\Microsoft\Windows\CurrentVersion\Run] 'I8PO222' = '~c222/222'
[<HKCU>\Software\Microsoft\Windows\CurrentVersion\Run] 'I–221I221' = '#µѓ"221™221'
[<HKCU>\Software\Microsoft\Windows\CurrentVersion\Run] '2¦#l223223' = '!їИ223F223'
[<HKCU>\Software\Microsoft\Windows\CurrentVersion\Run] 'DН?Ы225Н225' = ';mgЫ225…225'
[<HKCU>\Software\Microsoft\Windows\CurrentVersion\Run] 'mў„224u224' = 'У224U224'
[<HKCU>\Software\Microsoft\Windows\CurrentVersion\Run] 'ME%97G97' = 'H1.9797'
[<HKCU>\Software\Microsoft\Windows\CurrentVersion\Run] '+496Z96' = '-A96P96'
[<HKCU>\Software\Microsoft\Windows\CurrentVersion\Run] '`98?98' = '+'
[<HKCU>\Software\Microsoft\Windows\CurrentVersion\Run] '>%100^100' = ']10100100'
[<HKCU>\Software\Microsoft\Windows\CurrentVersion\Run] 'C3R29999' = 'DQ 99:99'
[<HKCU>\Software\Microsoft\Windows\CurrentVersion\Run] ''47Y95D95' = '@ #9595'
[<HKCU>\Software\Microsoft\Windows\CurrentVersion\Run] '*A' = '+491K91'
[<HKCU>\Software\Microsoft\Windows\CurrentVersion\Run] '=,90#90' = 'B"90M90'
[<HKCU>\Software\Microsoft\Windows\CurrentVersion\Run] 'Q$92E92' = 'O92:92'
[<HKCU>\Software\Microsoft\Windows\CurrentVersion\Run] '2;94,94' = '9:9;94S94'
[<HKCU>\Software\Microsoft\Windows\CurrentVersion\Run] 'UX' = ')9393'
[<HKCU>\Software\Microsoft\Windows\CurrentVersion\Run] ' *?5101&101' = 'GBM101@101'
[<HKCU>\Software\Microsoft\Windows\CurrentVersion\Run] '5`&I109?109' = 'BDO109f109'
[<HKCU>\Software\Microsoft\Windows\CurrentVersion\Run] 'CV!108D108' = '+8a<108'
[<HKCU>\Software\Microsoft\Windows\CurrentVersion\Run] 'hW*j110110' = '@#kE110110'
[<HKCU>\Software\Microsoft\Windows\CurrentVersion\Run] '`U112112' = '!112,112'
[<HKCU>\Software\Microsoft\Windows\CurrentVersion\Run] '#9B`111+111' = '4*111_111'
[<HKCU>\Software\Microsoft\Windows\CurrentVersion\Run] ')+'.107107' = '+ #%107D107'
[<HKCU>\Software\Microsoft\Windows\CurrentVersion\Run] '2'P103U103' = ',9-103+103'
[<HKCU>\Software\Microsoft\Windows\CurrentVersion\Run] 'Ua102H102' = '[8E102,102'
[<HKCU>\Software\Microsoft\Windows\CurrentVersion\Run] 'GL1104G104' = '47M104g104'
[<HKCU>\Software\Microsoft\Windows\CurrentVersion\Run] 'F106C106' = 'X@2106"106'
[<HKCU>\Software\Microsoft\Windows\CurrentVersion\Run] 'ff105105' = ' :105c105'
[<HKCU>\Software\Microsoft\Windows\CurrentVersion\Run] ';+3A89D89' = '/QQ89N89'
[<HKCU>\Software\Microsoft\Windows\CurrentVersion\Run] ';&"73673' = 'B07373'
[<HKCU>\Software\Microsoft\Windows\CurrentVersion\Run] '72172' = '%5'
[<HKCU>\Software\Microsoft\Windows\CurrentVersion\Run] '7474' = '7 74#74'
[<HKCU>\Software\Microsoft\Windows\CurrentVersion\Run] 'A =@76076' = ';/'
[<HKCU>\Software\Microsoft\Windows\CurrentVersion\Run] '!B7575' = '/'
[<HKCU>\Software\Microsoft\Windows\CurrentVersion\Run] '$(71>71' = ')7171'
[<HKCU>\Software\Microsoft\Windows\CurrentVersion\Run] '4 67' = ' 67>67'
[<HKCU>\Software\Microsoft\Windows\CurrentVersion\Run] '0/6666' = '166666'
[<HKCU>\Software\Microsoft\Windows\CurrentVersion\Run] '3=168=68' = '7(68%68'
[<HKCU>\Software\Microsoft\Windows\CurrentVersion\Run] '?<70470' = '0D<87070'
[<HKCU>\Software\Microsoft\Windows\CurrentVersion\Run] '' = '5<69369'
[<HKCU>\Software\Microsoft\Windows\CurrentVersion\Run] 'E#07777' = '-@I47777'
[<HKCU>\Software\Microsoft\Windows\CurrentVersion\Run] '.&4 85 85' = 'SP78585'
[<HKCU>\Software\Microsoft\Windows\CurrentVersion\Run] '6 84484' = ',)(8484'
[<HKCU>\Software\Microsoft\Windows\CurrentVersion\Run] '+,286S86' = 'ACH86%86'
[<HKCU>\Software\Microsoft\Windows\CurrentVersion\Run] '&88*88' = '#5388/88'
[<HKCU>\Software\Microsoft\Windows\CurrentVersion\Run] 'O2287=87' = ''
[<HKCU>\Software\Microsoft\Windows\CurrentVersion\Run] 'Q,83O83' = 'EH=83383'
[<HKCU>\Software\Microsoft\Windows\CurrentVersion\Run] '*&D!79&79' = ' 79(79'
[<HKCU>\Software\Microsoft\Windows\CurrentVersion\Run] 'M+978E78' = '8>078/78'
[<HKCU>\Software\Microsoft\Windows\CurrentVersion\Run] '+OM8080' = '3K@80.80'
[<HKCU>\Software\Microsoft\Windows\CurrentVersion\Run] 'F.82 82' = '@KE82 82'
[<HKCU>\Software\Microsoft\Windows\CurrentVersion\Run] 'L 81B81' = 'PN8181'
[<HKCU>\Software\Microsoft\Windows\CurrentVersion\Run] '_ >j113K113' = 'K0`-113S113'
[<HKCU>\Software\Microsoft\Windows\CurrentVersion\Run] 'S' = 'M1l\145145'
[<HKCU>\Software\Microsoft\Windows\CurrentVersion\Run] 'e En1449144' = 'Ќ6144X144'
[<HKCU>\Software\Microsoft\Windows\CurrentVersion\Run] '=zJ146{146' = '7‚*/146146'
[<HKCU>\Software\Microsoft\Windows\CurrentVersion\Run] 'X2JT1488148' = 'c7Џ148‘148'
[<HKCU>\Software\Microsoft\Windows\CurrentVersion\Run] '&`Ќ147&147' = '"‰:147Ђ147'
[<HKCU>\Software\Microsoft\Windows\CurrentVersion\Run] 'l€A143…143' = 'vkr143o143'
[<HKCU>\Software\Microsoft\Windows\CurrentVersion\Run] 'CO?139‡139' = 'jK139139'
[<HKCU>\Software\Microsoft\Windows\CurrentVersion\Run] 'p‰Ym138o138' = '~N†138138'
[<HKCU>\Software\Microsoft\Windows\CurrentVersion\Run] 'P@@*140-140' = 'W-h/140140'
[<HKCU>\Software\Microsoft\Windows\CurrentVersion\Run] '&B%142R142' = '"‚A1420142'
[<HKCU>\Software\Microsoft\Windows\CurrentVersion\Run] 'a+5…141141' = 'URl141K141'
[<HKCU>\Software\Microsoft\Windows\CurrentVersion\Run] 'Ћa+149=149' = ' Fp‹149149'
[<HKCU>\Software\Microsoft\Windows\CurrentVersion\Run] 'oSH157K157' = '‡\H157†157'
[<HKCU>\Software\Microsoft\Windows\CurrentVersion\Run] 'yRЋ 156f156' = 'iF7\156l156'
[<HKCU>\Software\Microsoft\Windows\CurrentVersion\Run] 'v4158I158' = '›‡zp158™158'
[<HKCU>\Software\Microsoft\Windows\CurrentVersion\Run] '‡Z@o160160' = '6@…160D160'
[<HKCU>\Software\Microsoft\Windows\CurrentVersion\Run] 'Ќ›ЃI159/159' = ':8159j159'
[<HKCU>\Software\Microsoft\Windows\CurrentVersion\Run] '5'/^1556155' = ';k{"155‚155'
[<HKCU>\Software\Microsoft\Windows\CurrentVersion\Run] '|Ur151l151' = '$%%A151u151'
[<HKCU>\Software\Microsoft\Windows\CurrentVersion\Run] 'ce150L150' = '0d/150c150'
[<HKCU>\Software\Microsoft\Windows\CurrentVersion\Run] ' 3' = '‹\c152152'
[<HKCU>\Software\Microsoft\Windows\CurrentVersion\Run] 'ѓdQ154”154' = 't:Yd1542154'
[<HKCU>\Software\Microsoft\Windows\CurrentVersion\Run] 'ehv153 153' = 'Rfd-1538153'
[<HKCU>\Software\Microsoft\Windows\CurrentVersion\Run] '-Vkz137' = '^-137137'
[<HKCU>\Software\Microsoft\Windows\CurrentVersion\Run] 'QjNX121r121' = 'JWXE121T121'
[<HKCU>\Software\Microsoft\Windows\CurrentVersion\Run] '? e120 120' = ']t(U120:120'
[<HKCU>\Software\Microsoft\Windows\CurrentVersion\Run] '3Do91227122' = 'io122U122'
[<HKCU>\Software\Microsoft\Windows\CurrentVersion\Run] 'GA(1244124' = 'z_)c124q124'
[<HKCU>\Software\Microsoft\Windows\CurrentVersion\Run] 'K7 '123*123' = ' 2 k1236123'
[<HKCU>\Software\Microsoft\Windows\CurrentVersion\Run] '84(119_119' = '-=119`119'
[<HKCU>\Software\Microsoft\Windows\CurrentVersion\Run] ''B'115i115' = 'X#115@115'
[<HKCU>\Software\Microsoft\Windows\CurrentVersion\Run] 'eAL114=114' = '2g7114114'
[<HKCU>\Software\Microsoft\Windows\CurrentVersion\Run] 'ZiB116116' = 'LM W116&116'
[<HKCU>\Software\Microsoft\Windows\CurrentVersion\Run] 'uh,118118' = '9Pc118#118'
[<HKCU>\Software\Microsoft\Windows\CurrentVersion\Run] 'g' = ' i9117=117'
[<HKCU>\Software\Microsoft\Windows\CurrentVersion\Run] 'Od*4125G125' = 'W#zM125O125'
[<HKCU>\Software\Microsoft\Windows\CurrentVersion\Run] '?)A7133133' = ''@r133'
[<HKCU>\Software\Microsoft\Windows\CurrentVersion\Run] 'E[Wh132p132' = 'dN132}132'
[<HKCU>\Software\Microsoft\Windows\CurrentVersion\Run] 'Ej134E134' = ' rD134m134'
[<HKCU>\Software\Microsoft\Windows\CurrentVersion\Run] 'Thp…136136' = 'R>136b136'
[<HKCU>\Software\Microsoft\Windows\CurrentVersion\Run] 'ax135;135' = '_135e135'
[<HKCU>\Software\Microsoft\Windows\CurrentVersion\Run] '@[j,131131' = '@f131J131'
[<HKCU>\Software\Microsoft\Windows\CurrentVersion\Run] ' <Wu1274127' = 'uOH127q127'
[<HKCU>\Software\Microsoft\Windows\CurrentVersion\Run] '48M126126' = 'zl2 126Z126'
[<HKCU>\Software\Microsoft\Windows\CurrentVersion\Run] 'i2128t128' = 'P ZD128s128'
[<HKCU>\Software\Microsoft\Windows\CurrentVersion\Run] 'zbr' = 'rjos130130'
[<HKCU>\Software\Microsoft\Windows\CurrentVersion\Run] 'ЂIq129f129' = 'zgn129129'
[<HKCU>\Software\Microsoft\Windows\CurrentVersion\Run] '=!H128^128' = 'M.q/128/128'
[<HKCU>\Software\Microsoft\Windows\CurrentVersion\Run] '+9 126Y126' = '=vLA126p126'
[<HKCU>\Software\Microsoft\Windows\CurrentVersion\Run] '64N125D125' = '3d125125'
[<HKCU>\Software\Microsoft\Windows\CurrentVersion\Run] 'byz127A127' = '"U\Z1277127'
[<HKCU>\Software\Microsoft\Windows\CurrentVersion\Run] 'T5A129j129' = '=OD#129=129'
[<HKCU>\Software\Microsoft\Windows\CurrentVersion\Run] 'e{128&128' = 'Fc~128,128'
[<HKCU>\Software\Microsoft\Windows\CurrentVersion\Run] '1S124j124' = '0u(124y124'
[<HKCU>\Software\Microsoft\Windows\CurrentVersion\Run] ',o55120[120' = 'W)Eo120j120'
[<HKCU>\Software\Microsoft\Windows\CurrentVersion\Run] ' 119119' = 'O@OL119)119'
[<HKCU>\Software\Microsoft\Windows\CurrentVersion\Run] '29$1212121' = '7>ps121T121'
[<HKCU>\Software\Microsoft\Windows\CurrentVersion\Run] 'x\*123n123' = 'y-@123123'
[<HKCU>\Software\Microsoft\Windows\CurrentVersion\Run] '!(R122122' = '3M122"122'
[<HKCU>\Software\Microsoft\Windows\CurrentVersion\Run] 'Nqn 130q130' = 'sBk130/130'
[<HKCU>\Software\Microsoft\Windows\CurrentVersion\Run] 'A6I{138ѓ138' = ';!F138M138'
[<HKCU>\Software\Microsoft\Windows\CurrentVersion\Run] '8%2y137N137' = 'v'
[<HKCU>\Software\Microsoft\Windows\CurrentVersion\Run] 'tWK139,139' = '…3{139139'
[<HKCU>\Software\Microsoft\Windows\CurrentVersion\Run] 'Z' = '[t5R141141'
[<HKCU>\Software\Microsoft\Windows\CurrentVersion\Run] ' WRX140\140' = ' p:1140k140'
[<HKCU>\Software\Microsoft\Windows\CurrentVersion\Run] '|3„136E136' = 'zb136D136'
[<HKCU>\Software\Microsoft\Windows\CurrentVersion\Run] 'l }1329132' = '\ C132132'
[<HKCU>\Software\Microsoft\Windows\CurrentVersion\Run] 'Si<?1318131' = 'n]1319131'
[<HKCU>\Software\Microsoft\Windows\CurrentVersion\Run] 'I='133133' = '4ѓ133z133'
[<HKCU>\Software\Microsoft\Windows\CurrentVersion\Run] '2tli135'135' = '>Y"135 135'
[<HKCU>\Software\Microsoft\Windows\CurrentVersion\Run] 'k‚‚134K134' = 'Ib+ 134134'
[<HKCU>\Software\Microsoft\Windows\CurrentVersion\Run] ' 118:118' = 'mO118o118'
[<HKCU>\Software\Microsoft\Windows\CurrentVersion\Run] '' = 'N(RK102c102'
[<HKCU>\Software\Microsoft\Windows\CurrentVersion\Run] 'V101^101' = ''
[<HKCU>\Software\Microsoft\Windows\CurrentVersion\Run] '%Pa103%103' = '_&`1037103'
[<HKCU>\Software\Microsoft\Windows\CurrentVersion\Run] 'OOP105Q105' = 'GFE105"105'
[<HKCU>\Software\Microsoft\Windows\CurrentVersion\Run] '+K104[104' = '7X1041104'
[<HKCU>\Software\Microsoft\Windows\CurrentVersion\Run] '6R 100?100' = ''
[<HKCU>\Software\Microsoft\Windows\CurrentVersion\Run] 'L349696' = '@096696'
[<HKCU>\Software\Microsoft\Windows\CurrentVersion\Run] 'DA495@95' = '4"%95 95'
[<HKCU>\Software\Microsoft\Windows\CurrentVersion\Run] '3W)97>97' = '7E97/97'
[<HKCU>\Software\Microsoft\Windows\CurrentVersion\Run] '*_JP99)99' = ''
[<HKCU>\Software\Microsoft\Windows\CurrentVersion\Run] '@:498*98' = '2LE9898'
[<HKCU>\Software\Microsoft\Windows\CurrentVersion\Run] '+M106/106' = 'E1065106'
[<HKCU>\Software\Microsoft\Windows\CurrentVersion\Run] '19V114 114' = 'aCB\114c114'
[<HKCU>\Software\Microsoft\Windows\CurrentVersion\Run] 'pAU113,113' = '`&C113113'
[<HKCU>\Software\Microsoft\Windows\CurrentVersion\Run] 'm J115H115' = '<`115O115'
[<HKCU>\Software\Microsoft\Windows\CurrentVersion\Run] 'a3?117117' = 'f3-117P117'
[<HKCU>\Software\Microsoft\Windows\CurrentVersion\Run] ']D 116/116' = 'hWh1167116'
[<HKCU>\Software\Microsoft\Windows\CurrentVersion\Run] 'Od112>112' = '$h"112F112'
[<HKCU>\Software\Microsoft\Windows\CurrentVersion\Run] 'e `108W108' = '`G108]108'
[<HKCU>\Software\Microsoft\Windows\CurrentVersion\Run] 'PWNh107a107' = 'P/107107'
[<HKCU>\Software\Microsoft\Windows\CurrentVersion\Run] 'XNR1098109' = 'Q,109109'
[<HKCU>\Software\Microsoft\Windows\CurrentVersion\Run] '+$ 111111' = 'O%G&111111'
[<HKCU>\Software\Microsoft\Windows\CurrentVersion\Run] '%Mm>110(110' = ' f8k1104110'
[<HKCU>\Software\Microsoft\Windows\CurrentVersion\Run] '\2‡142Y142' = 'Z{142e142'
[<HKCU>\Software\Microsoft\Windows\CurrentVersion\Run] 'l0.174*174' = ':w&`174¤174'
[<HKCU>\Software\Microsoft\Windows\CurrentVersion\Run] 't”1'173o173' = ')d -173N173'
[<HKCU>\Software\Microsoft\Windows\CurrentVersion\Run] 'Qr„175/175' = 't 175#175'
[<HKCU>\Software\Microsoft\Windows\CurrentVersion\Run] 'p2“177I177' = 'nN+Q177y177'
[<HKCU>\Software\Microsoft\Windows\CurrentVersion\Run] '\"%176176' = 'C-176%176'
[<HKCU>\Software\Microsoft\Windows\CurrentVersion\Run] '%rj172‰172' = 'њTЃЄ172*172'
[<HKCU>\Software\Microsoft\Windows\CurrentVersion\Run] '@%i.168168' = 'lV\E1682168'
[<HKCU>\Software\Microsoft\Windows\CurrentVersion\Run] 'l Џ167167' = ']m{Ћ167167'
[<HKCU>\Software\Microsoft\Windows\CurrentVersion\Run] '—gЊ169Џ169' = ':5DЉ1693169'
[<HKCU>\Software\Microsoft\Windows\CurrentVersion\Run] 'uљr171 171' = '"•sR171#171'
[<HKCU>\Software\Microsoft\Windows\CurrentVersion\Run] '’A L170ѓ170' = ';s\j1709170'
[<HKCU>\Software\Microsoft\Windows\CurrentVersion\Run] '†„=178›178' = '«ћЈ01788178'
[<HKCU>\Software\Microsoft\Windows\CurrentVersion\Run] '€\UK186G186' = ' ‘@p186$186'
[<HKCU>\Software\Microsoft\Windows\CurrentVersion\Run] 'Ђe±185m185' = '*«qЊ185•185'
[<HKCU>\Software\Microsoft\Windows\CurrentVersion\Run] '!f h187ё187' = 'ћ_,“187d187'
[<HKCU>\Software\Microsoft\Windows\CurrentVersion\Run] '†®FC189189' = '|ѓ3q189Y189'
[<HKCU>\Software\Microsoft\Windows\CurrentVersion\Run] '™k<X188·188' = '№‘=©188+188'
[<HKCU>\Software\Microsoft\Windows\CurrentVersion\Run] 'Pќ)*184\184' = '‹ћj184184'
[<HKCU>\Software\Microsoft\Windows\CurrentVersion\Run] '[‘Ђ180h180' = 'a>b180“180'
[<HKCU>\Software\Microsoft\Windows\CurrentVersion\Run] '¦•-$179179' = '?@l179‘179'
[<HKCU>\Software\Microsoft\Windows\CurrentVersion\Run] '<ѓЇ1818181' = 'Ї8Џ181^181'
[<HKCU>\Software\Microsoft\Windows\CurrentVersion\Run] 'X€+p183_183' = 'g”f183њ183'
[<HKCU>\Software\Microsoft\Windows\CurrentVersion\Run] 'ґl)ђ182®182' = 'vЂ182’182'
[<HKCU>\Software\Microsoft\Windows\CurrentVersion\Run] '>›+‘166o166' = 'EЏ7166S166'
[<HKCU>\Software\Microsoft\Windows\CurrentVersion\Run] 'ЋUk150…150' = '<-~A150W150'
[<HKCU>\Software\Microsoft\Windows\CurrentVersion\Run] 'b:149>149' = 'UN2149149'
[<HKCU>\Software\Microsoft\Windows\CurrentVersion\Run] 'e7tD151151' = '`da151p151'
[<HKCU>\Software\Microsoft\Windows\CurrentVersion\Run] '1*„3153\153' = 'c*“153M153'
[<HKCU>\Software\Microsoft\Windows\CurrentVersion\Run] '—|g152Y152' = '•••152152'
[<HKCU>\Software\Microsoft\Windows\CurrentVersion\Run] 'n$]148m148' = 'DrE148 148'
[<HKCU>\Software\Microsoft\Windows\CurrentVersion\Run] '(~nR144d144' = '0qK144C144'
[<HKCU>\Software\Microsoft\Windows\CurrentVersion\Run] 'a]l143q143' = '*d143U143'
[<HKCU>\Software\Microsoft\Windows\CurrentVersion\Run] '<HLN145S145' = '%7,J145145'
[<HKCU>\Software\Microsoft\Windows\CurrentVersion\Run] '95L'147‰147' = 'Gug’147D147'
[<HKCU>\Software\Microsoft\Windows\CurrentVersion\Run] 'XFN146R146' = 'c{J1462146'
[<HKCU>\Software\Microsoft\Windows\CurrentVersion\Run] '}i154C154' = 'n>e154@154'
[<HKCU>\Software\Microsoft\Windows\CurrentVersion\Run] 'J/ќ]162@162' = 'RIЏo162Љ162'
[<HKCU>\Software\Microsoft\Windows\CurrentVersion\Run] 'n(Љ161(161' = 'GЉ'
[<HKCU>\Software\Microsoft\Windows\CurrentVersion\Run] ' (q163 163' = 'MЉ9<163†163'
[<HKCU>\Software\Microsoft\Windows\CurrentVersion\Run] '1Ќ(4165 165' = 'c‡)165Љ165'
[<HKCU>\Software\Microsoft\Windows\CurrentVersion\Run] 'VX”A164@164' = 'Fl8164<164'
[<HKCU>\Software\Microsoft\Windows\CurrentVersion\Run] 'h3160x160' = '€”160A160'
[<HKCU>\Software\Microsoft\Windows\CurrentVersion\Run] 'ipad156156' = 'Ђ=g156g156'
[<HKCU>\Software\Microsoft\Windows\CurrentVersion\Run] 'Bѓ155‹155' = ' &]155v155'
[<HKCU>\Software\Microsoft\Windows\CurrentVersion\Run] '157‚157' = 'Xf157X157'
[<HKCU>\Software\Microsoft\Windows\CurrentVersion\Run] '6"љ159n159' = '‹L‡K159;159'
[<HKCU>\Software\Microsoft\Windows\CurrentVersion\Run] '>Џ158158' = '„^љQ1580158'
[<HKCU>\Software\Microsoft\Windows\CurrentVersion\Run] ' 3131' = '3131'
[<HKCU>\Software\Microsoft\Windows\CurrentVersion\Run] '3030' = '3030'
[<HKCU>\Software\Microsoft\Windows\CurrentVersion\Run] '3232' = '3232'
[<HKCU>\Software\Microsoft\Windows\CurrentVersion\Run] '' = '3434'
[<HKCU>\Software\Microsoft\Windows\CurrentVersion\Run] ' 3333' = ' 3333'
[<HKCU>\Software\Microsoft\Windows\CurrentVersion\Run] '' = '29'
[<HKCU>\Software\Microsoft\Windows\CurrentVersion\Run] '2525' = ''
[<HKCU>\Software\Microsoft\Windows\CurrentVersion\Run] '24 24' = '2424'
[<HKCU>\Software\Microsoft\Windows\CurrentVersion\Run] '2626' = ' '
[<HKCU>\Software\Microsoft\Windows\CurrentVersion\Run] '28 28' = '28'
[<HKCU>\Software\Microsoft\Windows\CurrentVersion\Run] ' ' = ' 2727'
[<HKCU>\Software\Microsoft\Windows\CurrentVersion\Run] ' 3535' = '3535'
[<HKCU>\Software\Microsoft\Windows\CurrentVersion\Run] '$43 43' = ''4343'
[<HKCU>\Software\Microsoft\Windows\CurrentVersion\Run] ' 4242' = '42 42'
[<HKCU>\Software\Microsoft\Windows\CurrentVersion\Run] '#44&44' = '%4444'
[<HKCU>\Software\Microsoft\Windows\CurrentVersion\Run] '!46,46' = ')4646'
[<HKCU>\Software\Microsoft\Windows\CurrentVersion\Run] '"45$45' = ' 45 45'
[<HKCU>\Software\Microsoft\Windows\CurrentVersion\Run] ' #4141' = ' 4141'
[<HKCU>\Software\Microsoft\Windows\CurrentVersion\Run] '#$3737' = '3737'
[<HKCU>\Software\Microsoft\Windows\CurrentVersion\Run] '"#' = '3636'
[<HKCU>\Software\Microsoft\Windows\CurrentVersion\Run] '3838' = '$!3838'
[<HKCU>\Software\Microsoft\Windows\CurrentVersion\Run] ''40!40' = ''
[<HKCU>\Software\Microsoft\Windows\CurrentVersion\Run] '' = '$!!3939'
[<HKCU>\Software\Microsoft\Windows\CurrentVersion\Run] ' 2323' = ' 2323'
[<HKCU>\Software\Microsoft\Windows\CurrentVersion\Run] '77' = '77'
[<HKCU>\Software\Microsoft\Windows\CurrentVersion\Run] '' = '6'
[<HKCU>\Software\Microsoft\Windows\CurrentVersion\Run] '' = '88'
[<HKCU>\Software\Microsoft\Windows\CurrentVersion\Run] '' = '1010'
[<HKCU>\Software\Microsoft\Windows\CurrentVersion\Run] '99' = '99'
[<HKCU>\Software\Microsoft\Windows\CurrentVersion\Run] '55' = '55'
[<HKCU>\Software\Microsoft\Windows\CurrentVersion\Run] '%ALLUSERSPROFILE%\Favorites\ Internet Explorer\Update.link' = '%ALLUSERSPROFILE%\Favorites\ Internet Explorer\Update 52%'
[<HKCU>\Software\Microsoft\Windows\CurrentVersion\Run] '%ALLUSERSPROFILE%\Favorites\ Internet Explorer\Web.link' = '%ALLUSERSPROFILE%\Favorites\ Internet Explorer\Downloder'
[<HKCU>\Software\Microsoft\Windows\CurrentVersion\Run] '' = ''
[<HKCU>\Software\Microsoft\Windows\CurrentVersion\Run] '' = '3'
[<HKCU>\Software\Microsoft\Windows\CurrentVersion\Run] '' = ''
[<HKCU>\Software\Microsoft\Windows\CurrentVersion\Run] ' 1111' = ''
[<HKCU>\Software\Microsoft\Windows\CurrentVersion\Run] '1919' = '19 19'
[<HKCU>\Software\Microsoft\Windows\CurrentVersion\Run] '1818' = ' 1818'
[<HKCU>\Software\Microsoft\Windows\CurrentVersion\Run] '20 20' = ' 2020'
[<HKCU>\Software\Microsoft\Windows\CurrentVersion\Run] '' = ' 2222'
[<HKCU>\Software\Microsoft\Windows\CurrentVersion\Run] '2121' = ' '
[<HKCU>\Software\Microsoft\Windows\CurrentVersion\Run] ' 17' = ' 1717'
[<HKCU>\Software\Microsoft\Windows\CurrentVersion\Run] '13 13' = ' 1313'
[<HKCU>\Software\Microsoft\Windows\CurrentVersion\Run] '1212' = ' 1212'
[<HKCU>\Software\Microsoft\Windows\CurrentVersion\Run] ' 1414' = ''
[<HKCU>\Software\Microsoft\Windows\CurrentVersion\Run] '1616' = ''
[<HKCU>\Software\Microsoft\Windows\CurrentVersion\Run] ' 15 15' = ' 15 15'
[<HKCU>\Software\Microsoft\Windows\CurrentVersion\Run] ')4747' = '-4747'
[<HKCU>\Software\Microsoft\Windows\CurrentVersion\Run] '!7M!7979' = ':.079F79'
[<HKCU>\Software\Microsoft\Windows\CurrentVersion\Run] '",678 78' = '7K78>78'
[<HKCU>\Software\Microsoft\Windows\CurrentVersion\Run] '0=280E80' = '80'
[<HKCU>\Software\Microsoft\Windows\CurrentVersion\Run] '" 38282' = ' .ED82 82'
[<HKCU>\Software\Microsoft\Windows\CurrentVersion\Run] 'G81F81' = '&81I81'
[<HKCU>\Software\Microsoft\Windows\CurrentVersion\Run] '-"77577' = ' 77077'
[<HKCU>\Software\Microsoft\Windows\CurrentVersion\Run] '&:-7373' = '="!73073'
[<HKCU>\Software\Microsoft\Windows\CurrentVersion\Run] '772372' = '%4'
[<HKCU>\Software\Microsoft\Windows\CurrentVersion\Run] '1*7474' = '?+>7474'
[<HKCU>\Software\Microsoft\Windows\CurrentVersion\Run] '8;"76 76' = 'C# F76/76'
[<HKCU>\Software\Microsoft\Windows\CurrentVersion\Run] '22?75>75' = '<D75&75'
[<HKCU>\Software\Microsoft\Windows\CurrentVersion\Run] '=?9 8383' = 'L"8383'
[<HKCU>\Software\Microsoft\Windows\CurrentVersion\Run] '6.9191' = 'F>Q9191'
[<HKCU>\Software\Microsoft\Windows\CurrentVersion\Run] 'X9090' = 'XVH 90.90'
[<HKCU>\Software\Microsoft\Windows\CurrentVersion\Run] '#S,&92I92' = '>P9292'
[<HKCU>\Software\Microsoft\Windows\CurrentVersion\Run] '' = ' ?>94[94'
[<HKCU>\Software\Microsoft\Windows\CurrentVersion\Run] 'TK93X93' = '$OHW93 93'
[<HKCU>\Software\Microsoft\Windows\CurrentVersion\Run] 'C N8989' = '16889T89'
[<HKCU>\Software\Microsoft\Windows\CurrentVersion\Run] ''B=8585' = ' KL8585'
[<HKCU>\Software\Microsoft\Windows\CurrentVersion\Run] 'HF8484' = '+4-84/84'
[<HKCU>\Software\Microsoft\Windows\CurrentVersion\Run] 'L; #86%86' = '%CL#86L86'
[<HKCU>\Software\Microsoft\Windows\CurrentVersion\Run] ' W-88U88' = '#;)8888'
[<HKCU>\Software\Microsoft\Windows\CurrentVersion\Run] '1' = 'PO2887!87'
[<HKCU>\Software\Microsoft\Windows\CurrentVersion\Run] ';7171' = ')7171'
[<HKCU>\Software\Microsoft\Windows\CurrentVersion\Run] '3 5555' = '5555-55'
[<HKCU>\Software\Microsoft\Windows\CurrentVersion\Run] ' 45454' = '*154$54'
[<HKCU>\Software\Microsoft\Windows\CurrentVersion\Run] '75656' = ''0-56$56'
[<HKCU>\Software\Microsoft\Windows\CurrentVersion\Run] '$.5858' = '(5858'
[<HKCU>\Software\Microsoft\Windows\CurrentVersion\Run] '1 5757' = '7'
[<HKCU>\Software\Microsoft\Windows\CurrentVersion\Run] '0 5353' = '5353'
[<HKCU>\Software\Microsoft\Windows\CurrentVersion\Run] '$ 49 49' = ',!49 49'
[<HKCU>\Software\Microsoft\Windows\CurrentVersion\Run] ''4848' = '')4848'
[<HKCU>\Software\Microsoft\Windows\CurrentVersion\Run] '' = ',( 50'50'
[<HKCU>\Software\Microsoft\Windows\CurrentVersion\Run] '52/52' = '#&35252'
[<HKCU>\Software\Microsoft\Windows\CurrentVersion\Run] '& .5151' = ',%5151'
[<HKCU>\Software\Microsoft\Windows\CurrentVersion\Run] '7859.59' = '259*59'
[<HKCU>\Software\Microsoft\Windows\CurrentVersion\Run] '?67167' = '<+>67467'
[<HKCU>\Software\Microsoft\Windows\CurrentVersion\Run] '/$#66"66' = '0;$'66766'
[<HKCU>\Software\Microsoft\Windows\CurrentVersion\Run] ';68 68' = '@'C56868'
[<HKCU>\Software\Microsoft\Windows\CurrentVersion\Run] ' E 70 70' = '"7070'
[<HKCU>\Software\Microsoft\Windows\CurrentVersion\Run] ')669 69' = '"2@6969'
[<HKCU>\Software\Microsoft\Windows\CurrentVersion\Run] '!#'6565' = '%1- 65<65'
[<HKCU>\Software\Microsoft\Windows\CurrentVersion\Run] '6161' = '<!61661'
[<HKCU>\Software\Microsoft\Windows\CurrentVersion\Run] ':6060' = '#* 6060'
[<HKCU>\Software\Microsoft\Windows\CurrentVersion\Run] '2$62462' = '#'66262'
[<HKCU>\Software\Microsoft\Windows\CurrentVersion\Run] '964364' = '&6464'
[<HKCU>\Software\Microsoft\Windows\CurrentVersion\Run] ''363663' = ' =*,6363'
[<HKCU>\Software\Microsoft\Windows\CurrentVersion\Run] '®—n¦190`190' = '`O'
[<HKCU>\Software\Microsoft\Windows\CurrentVersion\Run] '?;%6464' = '4 64 64'
[<HKCU>\Software\Microsoft\Windows\CurrentVersion\Run] '63163' = '=6363'
[<HKCU>\Software\Microsoft\Windows\CurrentVersion\Run] '*/2 6565' = '*:165665'
[<HKCU>\Software\Microsoft\Windows\CurrentVersion\Run] '67167' = '.&67A67'
[<HKCU>\Software\Microsoft\Windows\CurrentVersion\Run] '!,?6666' = '5%8)66/66'
[<HKCU>\Software\Microsoft\Windows\CurrentVersion\Run] ' #6262' = ' "+62 62'
[<HKCU>\Software\Microsoft\Windows\CurrentVersion\Run] '05858' = ''5858'
[<HKCU>\Software\Microsoft\Windows\CurrentVersion\Run] '2 (57$57' = '-!5757'
[<HKCU>\Software\Microsoft\Windows\CurrentVersion\Run] '$-59159' = '0#5959'
[<HKCU>\Software\Microsoft\Windows\CurrentVersion\Run] '+ 61 61' = ') 96161'
[<HKCU>\Software\Microsoft\Windows\CurrentVersion\Run] '' = '75060460'
[<HKCU>\Software\Microsoft\Windows\CurrentVersion\Run] '/46868' = '2.&6868'
[<HKCU>\Software\Microsoft\Windows\CurrentVersion\Run] 'D>>%76276' = '(576C76'
[<HKCU>\Software\Microsoft\Windows\CurrentVersion\Run] 'JD75!75' = ',)75;75'
[<HKCU>\Software\Microsoft\Windows\CurrentVersion\Run] ';-?-77*77' = '@(77077'
[<HKCU>\Software\Microsoft\Windows\CurrentVersion\Run] 'KM7979' = 'N7979'
[<HKCU>\Software\Microsoft\Windows\CurrentVersion\Run] '--)78278' = '=(KJ78878'
[<HKCU>\Software\Microsoft\Windows\CurrentVersion\Run] '1=7474' = '0-#074E74'
[<HKCU>\Software\Microsoft\Windows\CurrentVersion\Run] '=).7070' = '87070'
[<HKCU>\Software\Microsoft\Windows\CurrentVersion\Run] '$=$6969' = 'A6969'
[<HKCU>\Software\Microsoft\Windows\CurrentVersion\Run] '>8'71671' = '8<.71571'
[<HKCU>\Software\Microsoft\Windows\CurrentVersion\Run] 'A-473873' = ';,73>73'
[<HKCU>\Software\Microsoft\Windows\CurrentVersion\Run] '58C7272' = ''
[<HKCU>\Software\Microsoft\Windows\CurrentVersion\Run] '(5656' = '%"56&56'
[<HKCU>\Software\Microsoft\Windows\CurrentVersion\Run] '&4040' = ''
[<HKCU>\Software\Microsoft\Windows\CurrentVersion\Run] ' $ 39 39' = '$#39 39'
[<HKCU>\Software\Microsoft\Windows\CurrentVersion\Run] ''4141' = '#41(41'
[<HKCU>\Software\Microsoft\Windows\CurrentVersion\Run] '()43#43' = '4343'
[<HKCU>\Software\Microsoft\Windows\CurrentVersion\Run] ' %4242' = ' 4242'
[<HKCU>\Software\Microsoft\Windows\CurrentVersion\Run] '#38%38' = '# 38 38'
[<HKCU>\Software\Microsoft\Windows\CurrentVersion\Run] '3434' = ' 3434'
[<HKCU>\Software\Microsoft\Windows\CurrentVersion\Run] '3333' = '3333'
[<HKCU>\Software\Microsoft\Windows\CurrentVersion\Run] ' 3535' = '3535'
[<HKCU>\Software\Microsoft\Windows\CurrentVersion\Run] '#' = '3737'
[<HKCU>\Software\Microsoft\Windows\CurrentVersion\Run] ' 3636' = ' 36"36'
[<HKCU>\Software\Microsoft\Windows\CurrentVersion\Run] ''' 44(44' = '!44'
[<HKCU>\Software\Microsoft\Windows\CurrentVersion\Run] '-52052' = '#/52%52'
[<HKCU>\Software\Microsoft\Windows\CurrentVersion\Run] '51-51' = '51%51'
[<HKCU>\Software\Microsoft\Windows\CurrentVersion\Run] '+53 53' = '253153'
[<HKCU>\Software\Microsoft\Windows\CurrentVersion\Run] '#+65555' = '!555155'
[<HKCU>\Software\Microsoft\Windows\CurrentVersion\Run] '2%54454' = '2,+5454'
[<HKCU>\Software\Microsoft\Windows\CurrentVersion\Run] '5050' = '0%5050'
[<HKCU>\Software\Microsoft\Windows\CurrentVersion\Run] ' ) 46'46' = ''4646'
[<HKCU>\Software\Microsoft\Windows\CurrentVersion\Run] ' 4545' = ' ,45%45'
[<HKCU>\Software\Microsoft\Windows\CurrentVersion\Run] '! #4747' = '! 4747'
[<HKCU>\Software\Microsoft\Windows\CurrentVersion\Run] '*(*4949' = '4949'
[<HKCU>\Software\Microsoft\Windows\CurrentVersion\Run] ''4848' = '!!!4848'
[<HKCU>\Software\Microsoft\Windows\CurrentVersion\Run] 'I*80080' = '80,80'
[<HKCU>\Software\Microsoft\Windows\CurrentVersion\Run] 'L.g5112g112' = 'A!N?1120112'
[<HKCU>\Software\Microsoft\Windows\CurrentVersion\Run] '01119111' = 'Zd?111k111'
[<HKCU>\Software\Microsoft\Windows\CurrentVersion\Run] ',&113113' = '+*P113113'
[<HKCU>\Software\Microsoft\Windows\CurrentVersion\Run] '?i!115@115' = 'ki+(115E115'
[<HKCU>\Software\Microsoft\Windows\CurrentVersion\Run] '> 114)114' = '\a114h114'
[<HKCU>\Software\Microsoft\Windows\CurrentVersion\Run] 'C'm110#110' = '4IZ>110110'
[<HKCU>\Software\Microsoft\Windows\CurrentVersion\Run] 'a,G106.106' = '`*;106106'
[<HKCU>\Software\Microsoft\Windows\CurrentVersion\Run] ';$d105105' = '68PJ1055105'
[<HKCU>\Software\Microsoft\Windows\CurrentVersion\Run] 'G02107T107' = '7Ic107107'
[<HKCU>\Software\Microsoft\Windows\CurrentVersion\Run] '! 1098109' = 'J M109 109'
[<HKCU>\Software\Microsoft\Windows\CurrentVersion\Run] ',?/)1088108' = 'k79108108'
[<HKCU>\Software\Microsoft\Windows\CurrentVersion\Run] ' S116F116' = 'VFlX116p116'
[<HKCU>\Software\Microsoft\Windows\CurrentVersion\Run] '/jq1247124' = 'M3Nm124r124'
[<HKCU>\Software\Microsoft\Windows\CurrentVersion\Run] '"nw4123w123' = '%^9^1236123'
[<HKCU>\Software\Microsoft\Windows\CurrentVersion\Run] 'df2 1253125' = 'X(mP125125'
[<HKCU>\Software\Microsoft\Windows\CurrentVersion\Run] ' uU1274127' = 'S?127E127'
[<HKCU>\Software\Microsoft\Windows\CurrentVersion\Run] '% 126126' = 'JIb126F126'
[<HKCU>\Software\Microsoft\Windows\CurrentVersion\Run] 'E3 122=122' = ') 2T1222122'
[<HKCU>\Software\Microsoft\Windows\CurrentVersion\Run] '3et3118118' = ',/118E118'
[<HKCU>\Software\Microsoft\Windows\CurrentVersion\Run] '3>j1172117' = 'E+!117_117'
[<HKCU>\Software\Microsoft\Windows\CurrentVersion\Run] 'pJ4119119' = ');X119u119'
[<HKCU>\Software\Microsoft\Windows\CurrentVersion\Run] 'e?3121K121' = 'MwA121121'
[<HKCU>\Software\Microsoft\Windows\CurrentVersion\Run] ' C_M120`120' = '9M 120 120'
[<HKCU>\Software\Microsoft\Windows\CurrentVersion\Run] '&9\]104104' = '8DC1043104'
[<HKCU>\Software\Microsoft\Windows\CurrentVersion\Run] 'T&$!8888' = 'O&88@88'
[<HKCU>\Software\Microsoft\Windows\CurrentVersion\Run] '9O87N87' = '5Q87487'
[<HKCU>\Software\Microsoft\Windows\CurrentVersion\Run] '"2'89989' = 'AM0S8989'
[<HKCU>\Software\Microsoft\Windows\CurrentVersion\Run] '91H91' = '91B91'
[<HKCU>\Software\Microsoft\Windows\CurrentVersion\Run] 'G2A90&90' = 'R=S90U90'
[<HKCU>\Software\Microsoft\Windows\CurrentVersion\Run] '1:ME86286' = '8I 86S86'
[<HKCU>\Software\Microsoft\Windows\CurrentVersion\Run] '<;82:82' = ''*82'
[<HKCU>\Software\Microsoft\Windows\CurrentVersion\Run] 'I2%8181' = '+/>A81B81'
[<HKCU>\Software\Microsoft\Windows\CurrentVersion\Run] 'LH83683' = 'N883)83'
[<HKCU>\Software\Microsoft\Windows\CurrentVersion\Run] 'N0-S85F85' = '-1/85 85'
[<HKCU>\Software\Microsoft\Windows\CurrentVersion\Run] ')78484' = '@:#8484'
[<HKCU>\Software\Microsoft\Windows\CurrentVersion\Run] '' = 'E)9292'
[<HKCU>\Software\Microsoft\Windows\CurrentVersion\Run] '-QU1009100' = 'VAF100A100'
[<HKCU>\Software\Microsoft\Windows\CurrentVersion\Run] '-<0299]99' = '<299699'
[<HKCU>\Software\Microsoft\Windows\CurrentVersion\Run] 'K+'(101101' = '! %d101P101'
[<HKCU>\Software\Microsoft\Windows\CurrentVersion\Run] '82103<103' = ''
[<HKCU>\Software\Microsoft\Windows\CurrentVersion\Run] 'R&dZ102B102' = '.\H102<102'
[<HKCU>\Software\Microsoft\Windows\CurrentVersion\Run] 'KZJ+9898' = '2_98D98'
[<HKCU>\Software\Microsoft\Windows\CurrentVersion\Run] '04&C94B94' = '43A$9494'
[<HKCU>\Software\Microsoft\Windows\CurrentVersion\Run] '%(N9393' = '5D!.93393'
[<HKCU>\Software\Microsoft\Windows\CurrentVersion\Run] 'XL$ 95#95' = 'OB'
[<HKCU>\Software\Microsoft\Windows\CurrentVersion\Run] '-&D9797' = 'QU97#97'
[<HKCU>\Software\Microsoft\Windows\CurrentVersion\Run] 'DB/96896' = 'Y[29696'
[<HKCU>\Software\Microsoft\Windows\CurrentVersion\Run] 'Тe1222‚222' = '_І_222222'
[<HKCU>\Software\Microsoft\Windows\CurrentVersion\Run] '$Hh221…221' = 'UvQ*221221'
[<HKCU>\Software\Microsoft\Windows\CurrentVersion\Run] 'UЖЖ^223w223' = '7IЅ223џ223'
[<HKCU>\Software\Microsoft\Windows\CurrentVersion\Run] '<M¬5225“225' = 'cЕ5A225v225'
[<HKCU>\Software\Microsoft\Windows\CurrentVersion\Run] 'В#224П224' = 'l”ЖЗ224Н224'
[<HKCU>\Software\Microsoft\Windows\CurrentVersion\Run] 'ЉІНw220ќ220' = '›LDЗ220Ф220'
[<HKCU>\Software\Microsoft\Windows\CurrentVersion\Run] 'KV№z216°216' = '+ЈAВ2160216'
[<HKCU>\Software\Microsoft\Windows\CurrentVersion\Run] '“I"¦215—215' = 'TЈ5215.215'
[<HKCU>\Software\Microsoft\Windows\CurrentVersion\Run] 'Hj"R217_217' = 't) ‘217<217'
[<HKCU>\Software\Microsoft\Windows\CurrentVersion\Run] '™:њb219 219' = '§ҐuЩ219М219'
[<HKCU>\Software\Microsoft\Windows\CurrentVersion\Run] 'X218І218' = ' ‘!®218 218'
[<HKCU>\Software\Microsoft\Windows\CurrentVersion\Run] 'ПЁ«¤226@226' = 'jSҐ226r226'
[<HKCU>\Software\Microsoft\Windows\CurrentVersion\Run] 'RЌt234 234' = '‘}Uј234Ы234'
[<HKCU>\Software\Microsoft\Windows\CurrentVersion\Run] 'D?·233Н233' = 'S‹µ·233Є233'
[<HKCU>\Software\Microsoft\Windows\CurrentVersion\Run] 'Я+b=235й235' = '§}О 235¤235'
[<HKCU>\Software\Microsoft\Windows\CurrentVersion\Run] 'Щ8[!237и237' = 'TE-А237)237'
[<HKCU>\Software\Microsoft\Windows\CurrentVersion\Run] ' Ѕ 236Љ236' = '“±@236Й236'
[<HKCU>\Software\Microsoft\Windows\CurrentVersion\Run] 'Ўj\4232Ѕ232' = 'гIёј232232'
[<HKCU>\Software\Microsoft\Windows\CurrentVersion\Run] 'јNЈ228!228' = 'Hі228228'
[<HKCU>\Software\Microsoft\Windows\CurrentVersion\Run] 'W†227·227' = '|c¦ 227‰227'
[<HKCU>\Software\Microsoft\Windows\CurrentVersion\Run] 'Й|N229•229' = 's'
[<HKCU>\Software\Microsoft\Windows\CurrentVersion\Run] '›њ231H231' = 'G)™231Ѕ231'
[<HKCU>\Software\Microsoft\Windows\CurrentVersion\Run] 'l!ЌГ230Њ230' = 'R ®Щ230Я230'
[<HKCU>\Software\Microsoft\Windows\CurrentVersion\Run] 'Е™214D214' = '—џљњ214¶214'
[<HKCU>\Software\Microsoft\Windows\CurrentVersion\Run] 'ЎTµm198y198' = ';E”V198C198'
[<HKCU>\Software\Microsoft\Windows\CurrentVersion\Run] '?T1’197H197' = 'ўF«m197Ћ197'
[<HKCU>\Software\Microsoft\Windows\CurrentVersion\Run] 'џPO1996199' = ' Py199#199'
[<HKCU>\Software\Microsoft\Windows\CurrentVersion\Run] 'nЊЉ201201' = 'F’›<201^201'
[<HKCU>\Software\Microsoft\Windows\CurrentVersion\Run] 's!I200!200' = 'F©B2003200'
[<HKCU>\Software\Microsoft\Windows\CurrentVersion\Run] 'k!(‘196i196' = 'a"*;196Y196'
[<HKCU>\Software\Microsoft\Windows\CurrentVersion\Run] '‹[U192ђ192' = 'XI«ё192n192'
[<HKCU>\Software\Microsoft\Windows\CurrentVersion\Run] '%‰¦191’191' = 'zЄЋ1913191'
[<HKCU>\Software\Microsoft\Windows\CurrentVersion\Run] 'Tw’193n193' = '5Ј„8193©193'
[<HKCU>\Software\Microsoft\Windows\CurrentVersion\Run] '‚5:є195i195' = '%¤U195'
[<HKCU>\Software\Microsoft\Windows\CurrentVersion\Run] 'Ѓ–¬c194Ј194' = 'bЄ70194h194'
[<HKCU>\Software\Microsoft\Windows\CurrentVersion\Run] 'Аќ202202' = 'j^±2022202'
[<HKCU>\Software\Microsoft\Windows\CurrentVersion\Run] 'ЖЁїZ210d210' = 'ёmBђ210›210'
[<HKCU>\Software\Microsoft\Windows\CurrentVersion\Run] 'ќ'Q<209%209' = '0Жlѓ209"209'
[<HKCU>\Software\Microsoft\Windows\CurrentVersion\Run] '‚bџ·2110211' = 'v—]2111211'
[<HKCU>\Software\Microsoft\Windows\CurrentVersion\Run] 'mLa213r213' = 'ПЋ.213Р213'
[<HKCU>\Software\Microsoft\Windows\CurrentVersion\Run] '{$ЎЏ212}212' = 'Ё.Sђ212`212'
[<HKCU>\Software\Microsoft\Windows\CurrentVersion\Run] '¶И~208}208' = 'ЉH.‰208Є208'
[<HKCU>\Software\Microsoft\Windows\CurrentVersion\Run] '@ЇS204u204' = '±јЈ204`204'
[<HKCU>\Software\Microsoft\Windows\CurrentVersion\Run] '>…•)203]203' = '#ЏR/203*203'
[<HKCU>\Software\Microsoft\Windows\CurrentVersion\Run] '—^\a205O205' = '?s 205P205'
[<HKCU>\Software\Microsoft\Windows\CurrentVersion\Run] 'Љ_љ207ѓ207' = '_D207n207'
[<HKCU>\Software\Microsoft\Windows\CurrentVersion\Run] 'tA¶"206g206' = 'ґџЛ206±206'
[<HKCU>\Software\Microsoft\Windows\CurrentVersion\Run] 'xQ†„238б238' = 'кёЧў238\238'
[<HKCU>\Software\Microsoft\Windows\CurrentVersion\Run] ' ' = ' '
[<HKCU>\Software\Microsoft\Windows\CurrentVersion\Run] ' 16 16' = '16 16'
[<HKCU>\Software\Microsoft\Windows\CurrentVersion\Run] ' 1818' = ''
[<HKCU>\Software\Microsoft\Windows\CurrentVersion\Run] ' 2020' = ' 2020'
[<HKCU>\Software\Microsoft\Windows\CurrentVersion\Run] '1919' = '19 19'
[<HKCU>\Software\Microsoft\Windows\CurrentVersion\Run] ' ' = ' '
[<HKCU>\Software\Microsoft\Windows\CurrentVersion\Run] '' = '1111'
[<HKCU>\Software\Microsoft\Windows\CurrentVersion\Run] '' = '1010'
[<HKCU>\Software\Microsoft\Windows\CurrentVersion\Run] '' = '12'
[<HKCU>\Software\Microsoft\Windows\CurrentVersion\Run] ' 1414' = ' 14 14'
[<HKCU>\Software\Microsoft\Windows\CurrentVersion\Run] '13 13' = ''
[<HKCU>\Software\Microsoft\Windows\CurrentVersion\Run] ' 2121' = '2121'
[<HKCU>\Software\Microsoft\Windows\CurrentVersion\Run] '2929' = ''
[<HKCU>\Software\Microsoft\Windows\CurrentVersion\Run] '2828' = ''
[<HKCU>\Software\Microsoft\Windows\CurrentVersion\Run] '3030' = ' 3030'
[<HKCU>\Software\Microsoft\Windows\CurrentVersion\Run] '3232' = ' '
[<HKCU>\Software\Microsoft\Windows\CurrentVersion\Run] ' 3131' = '3131'
[<HKCU>\Software\Microsoft\Windows\CurrentVersion\Run] ' 2727' = ''
[<HKCU>\Software\Microsoft\Windows\CurrentVersion\Run] ' 2323' = ' 2323'
[<HKCU>\Software\Microsoft\Windows\CurrentVersion\Run] ' 22 22' = '2222'
[<HKCU>\Software\Microsoft\Windows\CurrentVersion\Run] ' 2424' = ''
[<HKCU>\Software\Microsoft\Windows\CurrentVersion\Run] ' 2626' = '2626'
[<HKCU>\Software\Microsoft\Windows\CurrentVersion\Run] ' 2525' = ' 2525'
[<HKCU>\Software\Microsoft\Windows\CurrentVersion\Run] '99' = ''
[<HKCU>\Software\Microsoft\Windows\CurrentVersion\Run] '¬ѕc246М246' = 'Цµ)2467246'
[<HKCU>\Software\Microsoft\Windows\CurrentVersion\Run] 'УфZ245245' = '·qЎ;245Ъ245'
[<HKCU>\Software\Microsoft\Windows\CurrentVersion\Run] 'є…i^247К247' = 'Q…Ў247—247'
[<HKCU>\Software\Microsoft\Windows\CurrentVersion\Run] 'Е©В249w249' = ')_F249С249'
[<HKCU>\Software\Microsoft\Windows\CurrentVersion\Run] 'Ґ“@248248' = '>°Vi248O248'
[<HKCU>\Software\Microsoft\Windows\CurrentVersion\Run] '244Ґ244' = 'ShЎ244й244'
[<HKCU>\Software\Microsoft\Windows\CurrentVersion\Run] 'кAГ240“240' = 'A‚В‘240s240'
[<HKCU>\Software\Microsoft\Windows\CurrentVersion\Run] '`Ељ‘239K239' = 'Q2s7239H239'
[<HKCU>\Software\Microsoft\Windows\CurrentVersion\Run] 'a•А241X241' = '”ЉsБ241s241'
[<HKCU>\Software\Microsoft\Windows\CurrentVersion\Run] 'Ѓ“єа243™243' = '»dЖ¶243v243'
[<HKCU>\Software\Microsoft\Windows\CurrentVersion\Run] 'uЙG242242' = 'JГ‘242Й242'
[<HKCU>\Software\Microsoft\Windows\CurrentVersion\Run] 'ogћ250є250' = 'ИjFc250250'
[<HKCU>\Software\Microsoft\Windows\CurrentVersion\Run] '55' = ''
[<HKCU>\Software\Microsoft\Windows\CurrentVersion\Run] '' = ''
[<HKCU>\Software\Microsoft\Windows\CurrentVersion\Run] '' = ''
[<HKCU>\Software\Microsoft\Windows\CurrentVersion\Run] '' = ''
[<HKCU>\Software\Microsoft\Windows\CurrentVersion\Run] '7' = ''
[<HKCU>\Software\Microsoft\Windows\CurrentVersion\Run] '' = '33'
[<HKCU>\Software\Microsoft\Windows\CurrentVersion\Run] '4Т_Ђ252q252' = 'Ќ`Д252h252'
[<HKCU>\Software\Microsoft\Windows\CurrentVersion\Run] '•шј251<251' = 'Ў{Џ_251ѕ251'
[<HKCU>\Software\Microsoft\Windows\CurrentVersion\Run] 'еb•'253I253' = 'оЦ‹ж253«253'
[<HKCU>\Software\Microsoft\Windows\CurrentVersion\Run] '/+ќЎ255 255' = 'юўЭY255Њ255'
[<HKCU>\Software\Microsoft\Windows\CurrentVersion\Run] 'Г{Цр254254' = 'xдє¶254a254'

Creates or modifies the following files:

%HOMEPATH%\Start Menu\Programs\Startup\SoundDivx.lnk

Substitutes the following executable system files:

<SYSTEM32>\dllcache\telnet.exe with <SYSTEM32>\dllcache\telnet.exe.new
<SYSTEM32>\dllcache\taskmgr.exe with <SYSTEM32>\dllcache\taskmgr.exe.new
<SYSTEM32>\telnet.exe with <SYSTEM32>\telnet.exe.new

Creates the following files on removable media:

<Drive name for removable media>:\sex.exe
<Drive name for removable media>:\autorun.inf

Malicious functions:

Executes the following:

<SYSTEM32>\cmd.exe /c %WINDIR%\temp\l.bat
<SYSTEM32>\cmd.exe /c %WINDIR%\temp\a.bat
<SYSTEM32>\cmd.exe /c %WINDIR%\temp\m.bat
<SYSTEM32>\cmd.exe /c %WINDIR%\temp\o.bat

Modifies file system :

Creates the following files:

%WINDIR%\Temp\a.bat
%WINDIR%\Temp\l.bat
<SYSTEM32>\dllcache\taskmgr.exe.new
<SYSTEM32>\dllcache\telnet.exe.new
%WINDIR%\Temp\windo.ocx
%WINDIR%\Temp\windo.bmp
C:\autorun.inf
%WINDIR%\Temp\m.bat
<SYSTEM32>\regedit.exe
%WINDIR%\Temp\o.bat
<SYSTEM32>\telnet.exe.new
<SYSTEM32>\taskmgr.exe.new

Sets the 'hidden' attribute to the following files:

<Drive name for removable media>:\sex.exe
<Drive name for removable media>:\autorun.inf
C:\autorun.inf

Deletes the following files:

<SYSTEM32>\taskmgr.exe.tmp
%WINDIR%\Temp\windo.ocx
%WINDIR%\Temp\windo.bmp
<SYSTEM32>\taskmgr.exe
<SYSTEM32>\telnet.exe
<SYSTEM32>\regedit.exe

Network activity:

Connects to:

'ft#.##ethost7.com':21

UDP:

DNS ASK ft#.##ethost7.com

Miscellaneous:

Searches for the following windows:

ClassName: 'Shell_TrayWnd' WindowName: ''
ClassName: 'Indicator' WindowName: ''

テクノロジー

用語

トレーニングコースおよび啓蒙プロジェクト

アンチウイルスに関する誤解と噂

Technical Information