Top 10 Alerts

Latest 10 Malware Files

Testimonials

A Big thanks to you people, who have developed this product. My Windows XP Media Center OS was infected with Win32.Renos, Backdoor, XPAntivirus, Xta.kill trojans, spyware as I use rapidshare links a lot. I have licensed McAfee, which is good for nothing and was unable to protect my laptop from these malwares. I tried trial version of Bit Defender, Sunbelt Spyware, Claim Win, A-Squared, but they were unable to do a complete detection and removal of malwares. Exterminate listed all the malwares and registry changes done by them, like task manager, registry edit was disabled. I bought a single PC license, activated, scanned my system thrice and my system is now free from all malwares and viruses and running absolutely fine. I still have to use Mcafee as I have a licensed version but buying Exterminate IT is a worth of £20 spent on it. I will recommend this to everyone who use P2P sites or rapidshare or torrents. Now, I dont have to worry about any malware as I have Exterminate in my system.

Rajkumar P.

More ...

Palevo Registry Values

Scan your Windows registry for Palevo

HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Winlogon, Taskman=[%SYSTEM_DRIVE%]\RECYCLER\S-1-5-21-7780286978-9771504029-763818091-9492\yv8g67.exe
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Winlogon, Taskman=[%SYSTEM_DRIVE%]\Documents and Settings\Б¤Ає\Application Data\ygmdrm.exe
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Winlogon, Taskman=[%SYSTEM_DRIVE%]\RECYCLER\S-1-5-21-3799278687-4363260305-359570408-1293\nvapbar.exe
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Winlogon, Shell=[%SYSTEM_DRIVE%]\RECYCLER\S-1-5-21-4112527885-0075705409-636059329-3309\hdav.exe,[%APPDATA%]\ltzqai.exe,[%SYSTEM_DRIVE%]\RECYCLER\S-1-5-21-9165694900-6886959345-709263675-2286\syscr.exe,[%SYSTEM_DRIVE%]\RECYCLER\S-1-5-21-0433489243-6203224996-152094021-0301\hdav.exe,explorer.exe,[%APPDATA%]\ohydy.exe
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Policies\Explorer\Run, Microsoft Driver Setup=[%SYSTEM%]\drivers\BSLBT.exe
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run, Microsoft Driver Setup=[%SYSTEM%]\drivers\BSLBT.exe
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Policies\Explorer\Run, Microsoft Driver Setup=[%SYSTEM%]\drivers\ProMgr.exe
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Policies\Explorer\Run, Microsoft Driver Setup=[%SYSTEM%]\drivers\BSzBT.exe
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Winlogon, Taskman=[%SYSTEM_DRIVE%]\RECYCLER\S-1-5-21-6249011346-8023703754-164691079-8119\hdav.exe
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Winlogon, Shell=[%APPDATA%]\juzjf.exe,explorer.exe,[%SYSTEM_DRIVE%]\RECYCLER\S-1-5-21-3511287056-1265588777-852112661-3085\yv8g67.exe
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Winlogon, Taskman=[%SYSTEM_DRIVE%]\RECYCLER\S-1-5-21-3511287056-1265588777-852112661-3085\yv8g67.exe
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Winlogon, Shell=[%APPDATA%]\juzjf.exe,[%APPDATA%]\lbisov.exe,explorer.exe,[%APPDATA%]\ozzfhv.exe
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Winlogon, Taskman=[%SYSTEM_DRIVE%]\RECYCLER\S-1-5-21-0711629273-5709456885-374337051-9728\yv8g67.exe
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Winlogon, Shell=[%SYSTEM_DRIVE%]\RECYCLER\S-1-5-21-9829902085-0658685437-283567101-1171\yv8g67.exe,[%APPDATA%]\juzjf.exe,explorer.exe,[%SYSTEM_DRIVE%]\RECYCLER\S-1-5-21-8091250174-3450946324-398609995-8130\yv8g67.exe
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Winlogon, Taskman=[%SYSTEM_DRIVE%]\RECYCLER\S-1-5-21-8091250174-3450946324-398609995-8130\yv8g67.exe
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Winlogon, Taskman=[%SYSTEM_DRIVE%]\RECYCLER\S-1-5-21-3359038647-8744078736-934306649-2461\hdav.exe
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Winlogon, Shell=explorer.exe,[%APPDATA%]\ohydy.exe,[%APPDATA%]\hotfix.exe
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Winlogon, Shell=[%SYSTEM_DRIVE%]\RECYCLER\S-1-5-21-3932097029-9598174389-873292108-5807\rundll32.exe,explorer.exe,[%SYSTEM_DRIVE%]\RECYCLER\S-1-5-21-8748620491-6314843653-090279743-0747\yv8g67.exe
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Winlogon, Shell=[%SYSTEM_DRIVE%]\RECYCLER\S-1-5-21-5397293877-4253486631-691240889-1986\hdav.exe,explorer.exe,[%APPDATA%]\ohydy.exe
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Winlogon, Taskman=[%SYSTEM_DRIVE%]\RECYCLER\S-1-5-21-5397293877-4253486631-691240889-1986\hdav.exe
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Winlogon, Shell=[%SYSTEM_DRIVE%]\RECYCLER\S-1-5-21-2677893948-1118390673-952733217-2963\rundll32.exe,[%APPDATA%]\ygmdrm.exe,explorer.exe,[%SYSTEM_DRIVE%]\RECYCLER\S-1-5-21-2003836664-0409276940-944986167-6324\MsMxEng.exe
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Winlogon, Shell=explorer.exe,[%SYSTEM_DRIVE%]\RECYCLER\S-1-5-21-2469983304-8287363940-171395601-4350\yv8g67.exe
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Winlogon, Taskman=[%SYSTEM_DRIVE%]\RECYCLER\S-1-5-21-2469983304-8287363940-171395601-4350\yv8g67.exe
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Winlogon, Shell=[%SYSTEM_DRIVE%]\RECYCLER\S-1-5-21-1550265171-7032174753-912913974-8428\yv8g67.exe,explorer.exe,[%APPDATA%]\juzjf.exe
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Winlogon, Taskman=[%SYSTEM_DRIVE%]\RECYCLER\S-1-5-21-4706628017-3067584512-014546587-6925\yv8g67.exe
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Winlogon, Shell=[%SYSTEM_DRIVE%]\RECYCLER\S-1-5-21-7751476957-3246692726-790371343-1459\yv8g67.exe,[%PROFILE%]\csrss.exe,explorer.exe,[%APPDATA%]\juzjf.exe
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Winlogon, Shell=explorer.exe,[%APPDATA%]\mmmpc.exe,Explorer.exe
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Winlogon, Taskman=[%SYSTEM_DRIVE%]\RECYCLER\S-1-5-21-9927207523-2924985232-963848148-3396\yv8g67.exe
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Winlogon, Shell=[%PROFILE%]\msgvn.exe,explorer.exe,[%APPDATA%]\buku.exe
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Winlogon, Taskman=[%SYSTEM_DRIVE%]\RECYCLER\S-1-5-21-7220865532-1502581275-962938832-1444\yv8g67.exe
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Policies\Explorer\Run, Microsoft Driver Setup=[%SYSTEM%]\drivers\BSvBT.exe
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run, Microsoft Driver Setup=[%SYSTEM%]\drivers\BSvBT.exe
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Winlogon, Shell=[%SYSTEM_DRIVE%]\Documents and Settings\daniel\Dados de aplicativos\sbeb.exe,[%PROFILE%]\ctfmon.exe,[%APPDATA%]\eqegwk.exe,explorer.exe,[%APPDATA%]\sbeb.exe
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Winlogon, Shell=[%APPDATA%]\juzjf.exe,explorer.exe,[%SYSTEM_DRIVE%]\RECYCLER\S-1-5-21-2012827661-8086143345-106882029-1381\yv8g67.exe
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Winlogon, Taskman=[%SYSTEM_DRIVE%]\RECYCLER\S-1-5-21-2012827661-8086143345-106882029-1381\yv8g67.exe
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Winlogon, Shell=[%PROFILE%]\ctfmon.exe,[%SYSTEM_DRIVE%]\RECYCLER\S-1-5-21-4822175644-3829654612-032703747-8659\nvapbar.exe,[%SYSTEM_DRIVE%]\RECYCLER\S-1-5-21-9763580865-5788727004-347522779-1649\windll.exe,[%SYSTEM_DRIVE%]\RECYCLER\S-1-5-21-1953709339-3006927045-187306510-3020\czzi.exe,explorer.exe,[%SYSTEM_DRIVE%]\RECYCLER\S-1-5-21-6634105663-4574088046-271657809-7437\windll.exe
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Winlogon, Taskman=[%SYSTEM_DRIVE%]\RECYCLER\S-1-5-21-4822175644-3829654612-032703747-8659\nvapbar.exe
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Winlogon, Shell=[%APPDATA%]\juzjf.exe,explorer.exe,[%SYSTEM_DRIVE%]\RECYCLER\S-1-5-21-8028745111-6636865598-312976659-6994\yv8g67.exe
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Winlogon, Shell=[%SYSTEM_DRIVE%]\RECYCLER\S-1-5-21-7266136593-8082056410-214068056-8773\yv8g67.exe,[%SYSTEM_DRIVE%]\RECYCLER\S-1-5-21-1418298263-4301241696-543270767-6226\nissan.exe,explorer.exe,[%APPDATA%]\juzjf.exe
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Winlogon, Shell=[%APPDATA%]\ygmdrm.exe,explorer.exe,[%SYSTEM_DRIVE%]\RECYCLER\S-1-5-21-7397011082-5949563240-567125307-1770\MsMxEng.exe
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Winlogon, Shell=[%SYSTEM_DRIVE%]\RECYCLER\S-1-5-21-1573897532-2649679334-582959945-7014\yv8g67.exe,explorer.exe,[%APPDATA%]\juzjf.exe
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Winlogon, Shell=[%APPDATA%]\bbizd.exe,explorer.exe,[%APPDATA%]\bdepdf.exe
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Winlogon, Shell=explorer.exe,[%APPDATA%]\juzjf.exe,Explorer.exe
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Winlogon, Shell=[%SYSTEM_DRIVE%]\RECYCLER\S-1-5-21-8317959745-3083546647-459880673-4260\nissan.exe,explorer.exe,[%APPDATA%]\juzjf.exe
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Winlogon, Shell=[%SYSTEM_DRIVE%]\RECYCLER\S-1-5-21-5671596788-1254726417-284982158-6614\yv8g67.exe,[%SYSTEM_DRIVE%]\RECYCLER\S-1-5-21-9624543124-3300046243-107651708-7739\nissan.exe,explorer.exe,[%APPDATA%]\juzjf.exe
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Winlogon, Taskman=[%SYSTEM_DRIVE%]\RECYCLER\S-1-5-21-5671596788-1254726417-284982158-6614\yv8g67.exe
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Winlogon, Shell=[%SYSTEM_DRIVE%]\RECYCLER\S-1-5-21-9906589564-6136782422-181411992-1379\mwau.exe,explorer.exe,[%SYSTEM_DRIVE%]\RECYCLER\S-1-5-21-7248961343-1206851115-075819122-1062\yv8g67.exe
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Winlogon, Shell=[%SYSTEM_DRIVE%]\RECYCLER\S-1-5-21-4906868945-6060111084-562652526-4765\yv8g67.exe,[%APPDATA%]\ygmdrm.exe,explorer.exe,[%APPDATA%]\juzjf.exe
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Winlogon, Taskman=[%SYSTEM_DRIVE%]\RECYCLER\S-1-5-21-2599637216-5410562405-977385020-2436\yv8g67.exe
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Winlogon, Shell=[%SYSTEM_DRIVE%]\RECYCLER\S-1-5-21-7573539063-8099983143-431911059-7794\yv8g67.exe,[%APPDATA%]\juzjf.exe,explorer.exe,[%SYSTEM_DRIVE%]\RECYCLER\S-1-5-21-1190512518-3115900354-279610970-9605\yv8g67.exe
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Winlogon, Shell=explorer.exe,[%SYSTEM_DRIVE%]\RECYCLER\S-1-5-21-2165113786-9215828891-193672696-3796\yv8g67.exe
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Winlogon, Taskman=[%SYSTEM_DRIVE%]\RECYCLER\S-1-5-21-2165113786-9215828891-193672696-3796\yv8g67.exe
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Winlogon, Taskman=[%SYSTEM_DRIVE%]\RECYCLER\S-1-5-21-3570623838-5350915815-428021631-9001\nvapbar.exe
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Winlogon, Taskman=[%SYSTEM_DRIVE%]\RECYCLER\S-1-5-21-3301732683-2568187676-856649713-7010\yv8g67.exe
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Winlogon, Taskman=[%SYSTEM_DRIVE%]\RECYCLER\S-1-5-21-0510214189-2379493636-986213166-7118\nvapbar.exe
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run, Ci Servs=SysTuwin.exe
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Winlogon, Shell=[%SYSTEM_DRIVE%]\RECYCLER\S-1-5-21-8530466306-2852880492-611843606-0213\yv8g67.exe,[%APPDATA%]\ozzfhv.exe,explorer.exe,[%APPDATA%]\lbisov.exe
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Winlogon, Shell=explorer.exe,[%APPDATA%]\rmhzb.exe,Explorer.exe
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run, Microsoft Driver Setup="[%WINDOWS%]\cfdrive32.exe"
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Winlogon, Shell=[%SYSTEM_DRIVE%]\RECYCLER\S-1-5-21-8513565216-3368834369-565473009-9759\yv8g67.exe,[%PROFILE%]\csrss.exe,explorer.exe,[%APPDATA%]\juzjf.exe
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Winlogon, Shell=[%APPDATA%]\lbisov.exe,[%APPDATA%]\yftza.exe,explorer.exe
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Winlogon, Shell=[%SYSTEM_DRIVE%]\RECYCLER\S-1-5-21-7128419891-0986525655-038287218-6528\yv8g67.exe,explorer.exe,[%APPDATA%]\juzjf.exe
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Policies\Explorer\Run, Microsoft Driver Setup=[%WINDOWS%]\sysmngsr32.exe
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run, Microsoft Driver Setup=[%SYSTEM%]\drivers\ProMgr.exe
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Winlogon, Taskman=[%SYSTEM_DRIVE%]\Documents and Settings\Administrator\Application Data\rmhzb.exe
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Winlogon, Shell=[%PROFILE%]\ctfmon.exe,[%APPDATA%]\juzjf.exe,explorer.exe,[%SYSTEM_DRIVE%]\RECYCLER\S-1-5-21-9663799979-8408642102-773321911-3950\yv8g67.exe
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Winlogon, Shell=[%APPDATA%]\sjlp.exe,explorer.exe,[%APPDATA%]\rmhzb.exe
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Winlogon, Shell=[%SYSTEM_DRIVE%]\RECYCLER\S-1-5-21-9905291158-4026029943-359001519-5364\hdav.exe,explorer.exe,[%APPDATA%]\ohydy.exe,
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Winlogon, Taskman=[%SYSTEM_DRIVE%]\RECYCLER\S-1-5-21-9905291158-4026029943-359001519-5364\hdav.exe
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Winlogon, Shell=[%SYSTEM_DRIVE%]\RECYCLER\S-1-5-21-1688568839-7437568104-617051438-7914\yv8g67.exe,[%PROFILE%]\csrss.exe,explorer.exe,[%APPDATA%]\juzjf.exe
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Winlogon, Taskman=[%SYSTEM_DRIVE%]\RECYCLER\S-1-5-21-9663799979-8408642102-773321911-3950\yv8g67.exe
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Winlogon, Shell=[%SYSTEM_DRIVE%]\RECYCLER\S-1-5-21-2077410159-2577645291-495477956-7299\yv8g67.exe,[%APPDATA%]\juzjf.exe,explorer.exe,[%PROFILE%]\ctfmon.exe
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Winlogon, Taskman=[%SYSTEM_DRIVE%]\RECYCLER\S-1-5-21-2077410159-2577645291-495477956-7299\yv8g67.exe
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Winlogon, Shell=[%SYSTEM_DRIVE%]\RECYCLER\S-1-5-21-4224624144-0895315374-175743844-9800\sysdate.exe,[%SYSTEM_DRIVE%]\RECYCLER\S-1-5-21-1175232821-6676019146-455278979-9406\sysdate.exe,[%SYSTEM_DRIVE%]\RECYCLER\S-1-5-21-5521472739-4833848199-930367858-2990\sysdate.exe,[%SYSTEM_DRIVE%]\RECYCLER\S-1-5-21-0946075404-6651711617-735248330-1874\dllhost.exe,[%APPDATA%]\oynnuf.exe,[%SYSTEM_DRIVE%]\RECYCLER\S-1-5-21-9091722844-8571487006-138492641-7008\yv8g67.exe,explorer.exe "[%PROFILE%]\ygienps.exe"
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Winlogon, Shell=[%APPDATA%]\djjqs.exe,[%APPDATA%]\tyol.exe,[%APPDATA%]\cqsgf.exe,[%APPDATA%]\insnts.exe,explorer.exe,[%APPDATA%]\mqpp.exe
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Winlogon, Shell=[%SYSTEM_DRIVE%]\RECYCLER\S-1-5-21-7206109461-4761446674-706348566-5332\yv8g67.exe,[%PROFILE%]\csrss.exe,explorer.exe,[%APPDATA%]\juzjf.exe
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Winlogon, Shell=[%APPDATA%]\bbizd.exe,explorer.exe,[%APPDATA%]\jxiz.exe
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Winlogon, Shell=explorer.exe,[%SYSTEM_DRIVE%]\RECYCLER\S-1-5-21-6751887574-4557155938-562941789-5610\yv8g67.exe
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Winlogon, Shell=[%APPDATA%]\rmhzb.exe,explorer.exe,[%APPDATA%]\mmmpc.exe
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Winlogon, Shell=[%APPDATA%]\lbisov.exe,explorer.exe,[%APPDATA%]\rmhzb.exe
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Winlogon, Shell=[%APPDATA%]\rmhzb.exe,explorer.exe,[%APPDATA%]\sjlp.exe
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Winlogon, Taskman=[%APPDATA%]\nmkl.exe
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Winlogon, Shell=[%APPDATA%]\rmhzb.exe,[%APPDATA%]\sjlp.exe,G:\GICAN\PRASICAN.exe,[%APPDATA%]\gnja.exe,[%PROFILE%]\csrss.exe,explorer.exe,[%PROFILE%]\ctfmon.exe
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Winlogon, Shell=[%APPDATA%]\rmhzb.exe,explorer.exe
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Winlogon, Shell=[%APPDATA%]\juzjf.exe,[%SYSTEM_DRIVE%]\RECYCLER\S-1-5-21-6318929809-8179298352-598795104-1139\yv8g67.exe,explorer.exe,[%PROFILE%]\ctfmon.exe,
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Winlogon, Taskman=[%SYSTEM_DRIVE%]\RECYCLER\S-1-5-21-7611719832-7230873203-493042036-5343\yv8g67.exe
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Winlogon, Shell=[%SYSTEM_DRIVE%]\RECYCLER\S-1-5-21-5258965217-5322633419-518155779-3916\yv8g67.exe,[%SYSTEM_DRIVE%]\RECYCLER\S-1-5-21-1731693786-5390701567-840754620-5500\nissan.exe,explorer.exe,[%APPDATA%]\juzjf.exe
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Winlogon, Shell=[%APPDATA%]\bdepdf.exe,explorer.exe
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run, Microsoft Driver Setup=[%SYSTEM%]\Instmtv.exe
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Terminal Server\Install\Software\Microsoft\Windows\CurrentVersion\Run, Ci Servs=winsont.exe
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Winlogon, Shell=[%APPDATA%]\juzjf.exe,[%SYSTEM_DRIVE%]\RECYCLER\S-1-5-21-1821187241-2132148404-943851699-3308\yv8g67.exe,explorer.exe,[%SYSTEM_DRIVE%]\RECYCLER\S-1-5-21-0175707893-5705543332-948666266-2986\nissan.exe
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Winlogon, Shell=[%APPDATA%]\ohydy.exe,explorer.exe,[%PROFILE_TEMP%]\igaul.exe
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Winlogon, Shell=[%SYSTEM_DRIVE%]\RECYCLER\S-1-5-21-2024841353-0681741959-605040517-2903\yv8g67.exe,[%APPDATA%]\juzjf.exe,explorer.exe,[%PROFILE%]\ctfmon.exe
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Winlogon, Shell=[%SYSTEM_DRIVE%]\RECYCLER\S-1-5-21-8902456492-5376668205-448192481-4720\yv8g67.exe,[%PROFILE%]\csrss.exe,explorer.exe,[%APPDATA%]\juzjf.exe
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Winlogon, Shell=[%PROFILE%]\csrss.exe,[%APPDATA%]\juzjf.exe,explorer.exe,[%SYSTEM_DRIVE%]\RECYCLER\S-1-5-21-8902456492-5376668205-448192481-4720\yv8g67.exe
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Winlogon, Shell=[%PROFILE%]\csrss.exe,[%SYSTEM_DRIVE%]\RECYCLER\S-1-5-21-8902456492-5376668205-448192481-4720\yv8g67.exe,explorer.exe,[%APPDATA%]\juzjf.exe
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Policies\Explorer\Run, Microsoft Driver Setup=[%WINDOWS%]\mxmxxl.exe
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Winlogon, Shell=explorer.exe,[%APPDATA%]\lbisov.exe,Explorer.exe
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Winlogon, Taskman=[%SYSTEM_DRIVE%]\Documents and Settings\SEIT\Datos de programa\nwvyyw.exe
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Winlogon, Shell=[%APPDATA%]\dxlreu.exe,[%SYSTEM_DRIVE%]\RECYCLER\S-1-5-21-7760566445-6072929316-307686287-6999\yv8g67.exe,[%SYSTEM_DRIVE%]\RECYCLER\S-1-5-21-6593422162-4914553667-667012683-3440\nissan.exe,explorer.exe,[%APPDATA%]\scddf.exe
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Winlogon, Shell=[%SYSTEM_DRIVE%]\RECYCLER\S-1-5-21-1471896150-1610647088-028961101-3631\yv8g67.exe,[%APPDATA%]\ozzfhv.exe,explorer.exe,[%APPDATA%]\lbisov.exe
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Winlogon, Shell=[%APPDATA%]\gphboo.exe,explorer.exe,[%APPDATA%]\yaptm.exe
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Winlogon, Taskman=[%SYSTEM_DRIVE%]\RECYCLER\S-1-5-21-1952156842-0602544821-906800977-2329\yv8g67.exe
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run, Ci Servs=newbin.exe
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Winlogon, Shell=[%SYSTEM_DRIVE%]\RECYCLER\S-1-5-21-1821187241-2132148404-943851699-3308\yv8g67.exe,[%SYSTEM_DRIVE%]\RECYCLER\S-1-5-21-0175707893-5705543332-948666266-2986\nissan.exe,explorer.exe,[%APPDATA%]\juzjf.exe
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Winlogon, Shell=[%SYSTEM_DRIVE%]\RECYCLER\S-1-5-21-3228161541-8818460346-445998852-4844\yv8g67.exe,[%APPDATA%]\juzjf.exe,explorer.exe,[%PROFILE%]\csrss.exe
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Winlogon, Taskman=[%SYSTEM_DRIVE%]\RECYCLER\S-1-5-21-3228161541-8818460346-445998852-4844\yv8g67.exe
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Winlogon, Shell=[%APPDATA%]\juzjf.exe,explorer.exe,[%SYSTEM_DRIVE%]\RECYCLER\S-1-5-21-0843388185-2005455193-930478872-9492\yv8g67.exe
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Winlogon, Taskman=[%SYSTEM_DRIVE%]\RECYCLER\S-1-5-21-0843388185-2005455193-930478872-9492\yv8g67.exe
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Winlogon, Shell=[%APPDATA%]\juzjf.exe,explorer.exe,[%SYSTEM_DRIVE%]\RECYCLER\S-1-5-21-1181008523-9328825031-768250006-1983\yv8g67.exe
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Winlogon, Taskman=[%SYSTEM_DRIVE%]\RECYCLER\S-1-5-21-1181008523-9328825031-768250006-1983\yv8g67.exe
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Winlogon, Shell=[%SYSTEM_DRIVE%]\RECYCLER\S-1-5-21-9522167814-8709426920-080946195-3174\yv8g67.exe,[%APPDATA%]\juzjf.exe,explorer.exe,[%PROFILE%]\csrss.exe
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Winlogon, Taskman=[%SYSTEM_DRIVE%]\RECYCLER\S-1-5-21-0509883381-2596858641-730963611-1281\hdav.exe
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Winlogon, Shell=[%SYSTEM_DRIVE%]\RECYCLER\S-1-5-21-2754140104-1436888201-358690491-1005\yv8g67.exe,[%SYSTEM_DRIVE%]\RECYCLER\S-1-5-21-6092656277-6949342584-516303111-6029\yv8g67.exe,[%PROFILE%]\ctfmon.exe,explorer.exe,[%APPDATA%]\juzjf.exe
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Winlogon, Shell=[%PROFILE_TEMP%]\igaul.exe,explorer.exe,[%APPDATA%]\ohydy.exe,[%APPDATA%]\hotfix.exe
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Winlogon, Shell=[%APPDATA%]\lbisov.exe,explorer.exe,I:\TOPHILL\maksimus.exe
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Winlogon, Shell=[%SYSTEM_DRIVE%]\RECYCLER\S-1-5-21-7932862894-8242002406-911201980-0390\yv8g67.exe,[%APPDATA%]\juzjf.exe,explorer.exe,[%PROFILE%]\csrss.exe
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Winlogon, Taskman=[%SYSTEM_DRIVE%]\RECYCLER\S-1-5-21-7932862894-8242002406-911201980-0390\yv8g67.exe
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Winlogon, Shell=[%APPDATA%]\juzjf.exe,explorer.exe,[%SYSTEM_DRIVE%]\RECYCLER\S-1-5-21-5341585431-7082352277-088113147-5738\yv8g67.exe
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Winlogon, Taskman=[%SYSTEM_DRIVE%]\RECYCLER\S-1-5-21-5341585431-7082352277-088113147-5738\yv8g67.exe
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Winlogon, Shell=[%SYSTEM_DRIVE%]\RECYCLER\S-1-5-21-9117580644-0624202345-186261256-3675\rndl.exe,[%PROFILE%]\msgvn.exe,[%SYSTEM_DRIVE%]\RECYCLER\S-1-5-21-2476328181-8141583420-182817885-3125\yv8g67.exe,explorer.exe,[%APPDATA%]\buku.exe
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Winlogon, Shell=[%SYSTEM_DRIVE%]\RECYCLER\S-1-5-21-3835102013-1540709813-988841361-9337\yv8g67.exe,[%SYSTEM_DRIVE%]\RECYCLER\S-1-5-21-5060478607-1719723680-125989119-1801\yv8g67.exe,[%SYSTEM_DRIVE%]\RECYCLER\S-1-5-21-0176818581-4293025028-659923865-6292\yv8g67.exe,[%APPDATA%]\sqxw.exe,[%SYSTEM_DRIVE%]\RECYCLER\S-1-5-21-2390955494-4914063774-999112158-5920\yv8g67.exe,[%APPDATA%]\ebzbg.exe,explorer.exe,[%SYSTEM_DRIVE%]\RECYCLER\S-1-5-21-5319626796-3647714796-341579736-1964\yv8g67.exe
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Winlogon, Shell=[%APPDATA%]\rmhzb.exe,I:\DINO\nastavishh.exe,[%APPDATA%]\vfbu.exe,[%APPDATA%]\szdx.exe,explorer.exe,[%SYSTEM_DRIVE%]\RECYCLER\S-1-5-21-1477668342-5926421696-857956826-5721\yv8g67.exe
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Winlogon, Taskman=[%SYSTEM_DRIVE%]\RECYCLER\S-1-5-21-4118219819-0259366154-640686563-2093\hdav.exe
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Winlogon, Taskman=[%SYSTEM_DRIVE%]\RECYCLER\S-1-5-21-2783634651-7383604869-637277028-5347\yv8g67.exe
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Winlogon, Shell=[%SYSTEM_DRIVE%]\RECYCLER\S-1-5-21-7390281316-0001612137-301311059-8707\nissan.exe,[%SYSTEM_DRIVE%]\RECYCLER\S-1-5-21-9392288444-1286485574-136671667-7692\yv8g67.exe,explorer.exe,[%APPDATA%]\juzjf.exe
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Winlogon, Shell=[%APPDATA%]\lbisov.exe,[%APPDATA%]\ozzfhv.exe,explorer.exe,[%SYSTEM_DRIVE%]\RECYCLER\S-1-5-21-0560555662-7581568154-254528124-1979\yv8g67.exe
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Winlogon, Shell=explorer.exe,[%SYSTEM_DRIVE%]\RECYCLER\S-1-5-21-2017344931-3393237786-493079160-9573\hdav.exe
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Winlogon, Shell=[%SYSTEM_DRIVE%]\RECYCLER\S-1-5-21-1261813000-2024110428-737890117-0882\yv8g67.exe,[%PROFILE%]\ctfmon.exe,explorer.exe,[%APPDATA%]\juzjf.exe
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Winlogon, Shell=[%APPDATA%]\ohydy.exe,explorer.exe,[%SYSTEM_DRIVE%]\RECYCLER\S-1-5-21-0243556031-888888379-781863308-1455\fddg.exe
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Winlogon, Shell=[%APPDATA%]\dgixy.exe,explorer.exe,[%APPDATA%]\lbisov.exe
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Winlogon, Taskman=[%SYSTEM_DRIVE%]\Documents and Settings\Administrator\Application Data\lbisov.exe
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Winlogon, Shell=[%APPDATA%]\ohydy.exe,explorer.exe,[%SYSTEM_DRIVE%]\RECYCLER\S-1-5-21-0243556031-888888379-781863308-1455\lssvc.exe,Explorer.exe
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Winlogon, Shell=explorer.exe,[%APPDATA%]\mwgovz.exe
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Winlogon, Shell=[%SYSTEM_DRIVE%]\RECYCLER\S-1-5-21-8846377716-2022339764-979153587-0639\yv8g67.exe,[%PROFILE%]\csrss.exe,[%APPDATA%]\juzjf.exe,[%SYSTEM_DRIVE%]\RECYCLER\S-1-5-21-5245318457-8497038645-497488046-4855\yv8g67.exe,[%APPDATA%]\ozzfhv.exe,explorer.exe,[%APPDATA%]\lbisov.exe
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Winlogon, Taskman=[%SYSTEM_DRIVE%]\RECYCLER\S-1-5-21-1204062990-9047966713-564361521-8732\hdav.exe
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Winlogon, Shell=[%APPDATA%]\fhrkmk.exe,explorer.exe,[%SYSTEM_DRIVE%]\RECYCLER\S-1-5-21-2715069651-1492583798-096839048-7908\MsMxEng.exe
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run, Microsoft Driver Setup=[%WINDOWS%]\updatd7.exe
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Winlogon, Shell=[%APPDATA%]\lbisov.exe,explorer.exe,[%APPDATA%]\sjlp.exe
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Winlogon, Shell=[%APPDATA%]\sjlp.exe,explorer.exe,[%SYSTEM_DRIVE%]\RECYCLER\S-1-5-21-9952050038-6773115423-914795221-6953\cht2009.exe
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Winlogon, Shell=[%APPDATA%]\sjlp.exe,[%SYSTEM_DRIVE%]\RECYCLER\S-1-5-21-9082490866-1984906736-110527366-6099\MsMxEng.exe,explorer.exe,[%SYSTEM_DRIVE%]\RECYCLER\S-1-5-21-3971304089-3300407121-485074746-1546\MsMxEng.exe
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Winlogon, Shell=[%APPDATA%]\bdepdf.exe,explorer.exe,[%APPDATA%]\csldjm.exe
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Winlogon, Shell=[%APPDATA%]\csldjm.exe,explorer.exe,[%APPDATA%]\bdepdf.exe
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Policies\Explorer\Run, Microsoft Driver Setup=[%SYSTEM%]\xfgnp.exe
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run, Microsoft Driver Setup=[%SYSTEM%]\xfgnp.exe
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Winlogon, Shell=[%APPDATA%]\lbisov.exe,[%APPDATA%]\sjlp.exe,[%APPDATA%]\mmmpc.exe,explorer.exe,[%PROFILE%]\msgvn.exe
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Winlogon, Shell=[%APPDATA%]\rmhzb.exe,[%APPDATA%]\szdx.exe,explorer.exe,[%APPDATA%]\ohydy.exe,[%APPDATA%]\hotfix.exe
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Winlogon, Shell=[%PROFILE%]\ctfmon.exe,[%APPDATA%]\ozzfhv.exe,explorer.exe,[%APPDATA%]\lbisov.exe
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Policies\Explorer\Run, Microsoft Driver Setup=[%SYSTEM%]\drivers\Cafgm.exe
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run, Microsoft Driver Setup=[%SYSTEM%]\drivers\Cafgm.exe
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Winlogon, Shell=[%APPDATA%]\lbisov.exe,explorer.exe,[%SYSTEM_DRIVE%]\RECYCLER\S-1-5-21-3892300686-5909175921-343337337-8688\osversion.exe
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Winlogon, Shell=[%APPDATA%]\vdolew.exe,[%APPDATA%]\mqpp.exe,explorer.exe
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Winlogon, Shell=[%APPDATA%]\lbisov.exe,[%APPDATA%]\kyrnmy.exe,[%PROFILE_TEMP%]\423.exe,[%PROFILE_TEMP%]\593.exe,[%SYSTEM_DRIVE%]\Documents and Settings\Ваче\Application Data\cift.exe,[%PROFILE%]\csrss.exe,explorer.exe,[%APPDATA%]\cift.exe
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Winlogon, Shell=[%SYSTEM_DRIVE%]\RECYCLER\S-1-5-21-5879615770-2605142797-036921278-6794\yv8g67.exe,explorer.exe,[%APPDATA%]\lbisov.exe
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Winlogon, Shell=[%SYSTEM_DRIVE%]\RECYCLER\S-1-5-21-9652930113-4931561346-664493155-1058\yv8g67.exe,explorer.exe,[%APPDATA%]\lbisov.exe
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Winlogon, Shell=[%SYSTEM_DRIVE%]\RECYCLER\S-1-5-21-7909065289-1279212953-111729760-3936\yv8g67.exe,[%APPDATA%]\ozzfhv.exe,explorer.exe,[%APPDATA%]\lbisov.exe
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Winlogon, Shell=[%SYSTEM_DRIVE%]\RECYCLER\S-1-5-21-8100251044-0645553072-406831065-1151\yv8g67.exe,[%APPDATA%]\ozzfhv.exe,explorer.exe,[%APPDATA%]\lbisov.exe
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Winlogon, Shell=[%SYSTEM_DRIVE%]\RECYCLER\S-1-5-21-2799508594-4380701912-369922432-1913\yv8g67.exe,[%APPDATA%]\ozzfhv.exe,explorer.exe,[%APPDATA%]\lbisov.exe
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Winlogon, Taskman=[%APPDATA%]\mwgovz.exe
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Winlogon, Shell=[%APPDATA%]\mwgovz.exe,explorer.exe,[%APPDATA%]\zqeaq.exe
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Winlogon, Shell=[%SYSTEM_DRIVE%]\RECYCLER\S-1-5-21-1877960486-7859775975-923245253-2948\syscr.exe,explorer.exe,[%APPDATA%]\ohydy.exe
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Winlogon, Taskman=[%APPDATA%]\rthdti.exe
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Winlogon, Shell=[%APPDATA%]\buku.exe,explorer.exe,[%PROFILE%]\msgvn.exe
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Winlogon, Shell=[%SYSTEM_DRIVE%]\RECYCLER\S-1-5-21-0243556031-888888379-781863308-1455\lssvc.exe,explorer.exe,[%APPDATA%]\ohydy.exe
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Winlogon, Shell=[%APPDATA%]\mmmpc.exe,explorer.exe,[%APPDATA%]\yxttd.exe
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Winlogon, Taskman=[%SYSTEM_DRIVE%]\Documents and Settings\clinic\Application Data\qmkin.exe
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Policies\Explorer\Run, Microsoft Driver Setup=[%SYSTEM%]\drivers\Jwrb.exe
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Winlogon, Shell=[%SYSTEM_DRIVE%]\RECYCLER\S-1-5-21-6696361574-0021329703-976734654-6179\yv8g67.exe,[%APPDATA%]\lbisov.exe,explorer.exe,[%APPDATA%]\ozzfhv.exe
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Winlogon, Shell=[%SYSTEM_DRIVE%]\RECYCLER\S-1-5-21-4370047629-5369761124-866876280-7792\yv8g67.exe,[%APPDATA%]\szdx.exe,explorer.exe,[%APPDATA%]\lbisov.exe
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Winlogon, Shell=explorer.exe,[%APPDATA%]\sjlp.exe,Explorer.exe
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Winlogon, Shell=[%SYSTEM_DRIVE%]\RECYCLER\S-1-5-21-0243556031-888888379-781863308-1456\budau44.exe,[%APPDATA%]\lbisov.exe,explorer.exe,[%SYSTEM_DRIVE%]\RECYCLER\S-1-5-21-5300953464-7098891699-899837448-2596\MsMxEng.exe
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Winlogon, Shell=[%SYSTEM_DRIVE%]\RECYCLER\S-1-5-21-5279613169-2387569438-763492305-7357\yv8g67.exe,[%APPDATA%]\ozzfhv.exe,explorer.exe,[%APPDATA%]\lbisov.exe
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Winlogon, Shell=[%PROFILE_TEMP%]\jfrevf.exe,[%APPDATA%]\ohydy.exe,explorer.exe,[%PROFILE_TEMP%]\mtrtwfh.exe
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Winlogon, Shell=explorer.exe,[%APPDATA%]\buku.exe
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Winlogon, Shell=[%SYSTEM_DRIVE%]\RECYCLER\S-1-5-21-8997822344-9643961817-869151134-0947\yv8g67.exe,[%APPDATA%]\ozzfhv.exe,explorer.exe,[%APPDATA%]\lbisov.exe
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Winlogon, Shell=[%APPDATA%]\sjlp.exe,explorer.exe,[%APPDATA%]\ohydy.exe
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Policies\Explorer\Run, Microsoft Driver Setup=[%SYSTEM%]\Zsorm.exe
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Winlogon, Shell=[%SYSTEM_DRIVE%]\RECYCLER\S-1-5-21-8437779552-7393783454-826073466-0674\yv8g67.exe,[%APPDATA%]\lbisov.exe,explorer.exe,[%APPDATA%]\ozzfhv.exe
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Winlogon, Shell=[%SYSTEM_DRIVE%]\RECYCLER\S-1-5-21-6328765658-2934009100-193949591-8420\yv8g67.exe,[%APPDATA%]\lbisov.exe,explorer.exe,[%APPDATA%]\ozzfhv.exe
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Winlogon, Shell=[%APPDATA%]\ozzfhv.exe,[%APPDATA%]\lbisov.exe,explorer.exe,[%SYSTEM_DRIVE%]\RECYCLER\S-1-5-21-2861290148-0254534685-816974933-6026\yv8g67.exe
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Winlogon, Shell=[%SYSTEM_DRIVE%]\RECYCLER\S-1-5-21-0820422744-5255802490-158536162-6257\yv8g67.exe,[%APPDATA%]\lbisov.exe,explorer.exe,[%APPDATA%]\ozzfhv.exe
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Winlogon, Shell=[%SYSTEM_DRIVE%]\RECYCLER\S-1-5-21-8305323982-7361568725-180437945-9832\yv8g67.exe,[%APPDATA%]\lbisov.exe,explorer.exe,[%APPDATA%]\ozzfhv.exe
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Winlogon, Shell=[%SYSTEM_DRIVE%]\RECYCLER\S-1-5-21-0243556031-888888379-781863308-1455\fresdg.exe,explorer.exe,[%APPDATA%]\ohydy.exe
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Winlogon, Shell=[%APPDATA%]\lbisov.exe,explorer.exe,[%APPDATA%]\qvcxxb.exe
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Winlogon, Shell=[%APPDATA%]\lbisov.exe,[%APPDATA%]\ozzfhv.exe,explorer.exe,[%PROFILE%]\msgvn.exe
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Winlogon, Shell=[%APPDATA%]\lbisov.exe,[%SYSTEM_DRIVE%]\RECYCLER\S-1-5-21-6431728118-4763547174-492417846-4344\yv8g67.exe,[%PROFILE%]\msgvn.exe,[%PROFILE%]\ctfmon.exe,explorer.exe,[%APPDATA%]\ozzfhv.exe
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Winlogon, Shell=[%APPDATA%]\bdepdf.exe,explorer.exe,[%APPDATA%]\gnja.exe
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Winlogon, Shell=[%APPDATA%]\ohydy.exe,explorer.exe,[%SYSTEM_DRIVE%]\RECYCLER\S-1-5-21-6652542905-0249734551-006033132-2895\mwau.exe
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Winlogon, Shell=[%PROFILE_TEMP%]\hcnc.exe,[%APPDATA%]\ohydy.exe,[%SYSTEM_DRIVE%]\RECYCLER\S-1-5-21-7066749209-5644023831-059609952-1690\mgrls32.exe,[%SYSTEM_DRIVE%]\RECYCLER\S-1-5-21-3790423750-8177064519-931070286-3241\yv8g67.exe,explorer.exe,[%SYSTEM_DRIVE%]\RECYCLER\S-1-5-21-4497368157-9986299246-041157459-0193\hdav.exe
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Winlogon, Shell=[%APPDATA%]\ohydy.exe,[%SYSTEM_DRIVE%]\RECYCLER\S-1-5-21-8961989001-4796442328-020107207-0937\mgrls32.exe,[%SYSTEM_DRIVE%]\RECYCLER\S-1-5-21-0080744221-0657779301-834997487-3124\sysdate.exe,explorer.exe,[%SYSTEM_DRIVE%]\RECYCLER\S-1-5-21-1219294958-2573559083-878237928-9446\winsystem.exe
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Winlogon, Shell=[%APPDATA%]\dgixy.exe,[%APPDATA%]\qvcxxb.exe,[%APPDATA%]\ooyi.exe,[%APPDATA%]\xcjv.exe,explorer.exe,[%APPDATA%]\iptyr.exe
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Policies\Explorer\Run, Microsoft Driver Setup=[%SYSTEM%]\drivers\BSsBT.exe
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Winlogon, Shell=[%APPDATA%]\mmmpc.exe,explorer.exe,[%PROFILE%]\csrss.exe
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Winlogon, Shell=[%APPDATA%]\ohydy.exe,explorer.exe,[%SYSTEM_DRIVE%]\RECYCLER\S-1-5-21-7681944076-5856821473-550876528-9613\hdav.exe
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Winlogon, Shell=[%SYSTEM_DRIVE%]\RECYCLER\S-1-5-21-0404184897-6359160243-733411939-5801\syscr.exe,[%SYSTEM_DRIVE%]\RECYCLER\S-1-5-21-5268277515-5887781370-454316210-8233\syscr.exe,[%SYSTEM_DRIVE%]\RECYCLER\S-1-5-21-0256390793-6266210730-065167834-5729\syscr.exe,[%SYSTEM_DRIVE%]\RECYCLER\S-1-5-21-9286841915-2300558321-225319229-0911\syscr.exe,[%APPDATA%]\ltzqai.exe,[%APPDATA%]\ohydy.exe,explorer.exe,[%SYSTEM_DRIVE%]\RECYCLER\S-1-5-21-2395499019-6676659616-263286860-2099\syscr.exe
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Winlogon, Shell=[%APPDATA%]\mmmpc.exe,explorer.exe
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Policies\Explorer\Run, Microsoft Driver Setup=[%SYSTEM%]\Zsnkspm.exe
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run, Microsoft Driver Setup=[%SYSTEM%]\Zsnkspm.exe
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Winlogon, Shell=[%APPDATA%]\mmmpc.exe,explorer.exe,[%APPDATA%]\qvcxxb.exe
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Winlogon, Shell=[%APPDATA%]\zdrvj.exe,[%APPDATA%]\wyzlo.exe,[%APPDATA%]\nisgw.exe,[%APPDATA%]\rthdti.exe,explorer.exe,[%PROFILE%]\csrss.exe
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Winlogon, Shell=[%SYSTEM_DRIVE%]\RECYCLER\S-1-5-21-0025214679-9590531885-614948187-7190\hdav.exe,explorer.exe,[%APPDATA%]\ohydy.exe
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Winlogon, Shell=[%SYSTEM_DRIVE%]\RECYCLER\S-1-5-21-3127514451-9042079597-168193044-0786\mwau.exe,[%APPDATA%]\ohydy.exe,explorer.exe,[%APPDATA%]\csldjm.exe
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Policies\Explorer\Run, Microsoft Driver Setup=[%WINDOWS%]\waw32.exe
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Policies\Explorer\Run, Microsoft Driver Setup=[%WINDOWS%]\cedrive32.exe
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run, Microsoft Driver Setup=[%WINDOWS%]\cedrive32.exe
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Winlogon, Shell=[%APPDATA%]\mmmpc.exe,[%APPDATA%]\trpo.exe,explorer.exe
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Winlogon, Shell=[%APPDATA%]\ozzfhv.exe,explorer.exe,[%APPDATA%]\mmmpc.exe
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Policies\Explorer\Run, Microsoft Driver Setup=[%SYSTEM%]\drivers\BSmBT.exe
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run, Microsoft Driver Setup=[%SYSTEM%]\drivers\BSmBT.exe
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Policies\Explorer\Run, Microsoft Driver Setup=[%WINDOWS%]\windows7install.exe
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run, Microsoft Driver Setup=[%WINDOWS%]\windows7addon.exe
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Policies\Explorer\Run, Microsoft Driver Setup=[%SYSTEM%]\drivers\CztF.exe
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run, Microsoft Driver Setup=[%SYSTEM%]\drivers\CztF.exe
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Winlogon, Taskman=[%SYSTEM_DRIVE%]\Documents and Settings\Dalle\Application Data\ohydy.exe
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Policies\Explorer\Run, Microsoft Driver Setup=[%WINDOWS%]\WindowsUpdate.exe
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run, Microsoft Driver Setup=[%WINDOWS%]\WindowsUpdate.exe
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Winlogon, Taskman=[%SYSTEM_DRIVE%]\Documents and Settings\stage002\csrss.exe
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Policies\Explorer\Run, Microsoft Driver Setup=[%SYSTEM%]\drivers\Instmsi.exe
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Winlogon, Taskman=[%SYSTEM_DRIVE%]\Documents and Settings\git\csrss.exe
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Policies\Explorer\Run, Microsoft Driver Setup=[%SYSTEM%]\Instmsv.exe
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Policies\Explorer\Run, Microsoft Driver Setup=[%SYSTEM%]\Zsnkstl.exe
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Policies\Explorer\Run, Microsoft Driver Setup=[%WINDOWS%]\rcdrive32.exe
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run, Microsoft Driver Setup=[%SYSTEM%]\drivers\LBTWiz.exe
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Winlogon, Taskman=[%SYSTEM_DRIVE%]\Documents and Settings\Administrator\csrss.exe
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Policies\Explorer\Run, Microsoft Driver Setup=[%SYSTEM%]\drivers\CzhrF.exe
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run, Microsoft Driver Setup=[%WINDOWS%]\mxmxxl.exe
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Policies\Explorer\Run, Microsoft Driver Setup=[%SYSTEM%]\drivers\BSxBT.exe
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run, Microsoft Driver Setup=[%SYSTEM%]\drivers\BSxBT.exe
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Policies\Explorer\Run, Microsoft Driver Setup=[%SYSTEM%]\drivers\CbhF.EXE
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run, Microsoft Driver Setup=[%SYSTEM%]\drivers\CbhF.EXE
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run, Microsoft Driver Setup=[%SYSTEM%]\drivers\BStBT.exe
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Policies\Explorer\Run, Microsoft Driver Setup=[%SYSTEM%]\drivers\Sams.exe
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run, Microsoft Driver Setup=[%SYSTEM%]\drivers\Sams.exe
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Winlogon, Taskman=[%SYSTEM_DRIVE%]\Documents and Settings\Ourba\csrss.exe
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Policies\Explorer\Run, Microsoft Driver Setup=[%SYSTEM%]\drivers\CzvrF.exe
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Winlogon, Taskman=[%SYSTEM_DRIVE%]\Documents and Settings\emyxemy\csrss.exe
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Policies\Explorer\Run, Microsoft Driver Setup=[%SYSTEM%]\drivers\Instmsx.exe
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run, Microsoft Driver Setup=[%SYSTEM%]\drivers\Instmsx.exe
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Policies\Explorer\Run, Microsoft Driver Setup=[%WINDOWS%]\jcdrive32.exe
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Winlogon, Taskman=[%SYSTEM_DRIVE%]\Documents and Settings\user2\csrss.exe
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Policies\Explorer\Run, Microsoft Driver Setup=[%SYSTEM%]\drivers\BSoBT.exe
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run, Microsoft Driver Setup=[%SYSTEM%]\drivers\BSoBT.exe
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run, Microsoft Driver Setup=[%WINDOWS%]\ondrive32.exe
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Policies\Explorer\Run, Microsoft Driver Setup=[%WINDOWS%]\osdrive32.exe
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run, Microsoft Driver Setup=[%WINDOWS%]\osdrive32.exe
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Policies\Explorer\Run, Microsoft Driver Setup=[%SYSTEM%]\Instmiv.exe
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Policies\Explorer\Run, Microsoft Driver Setup=[%SYSTEM%]\drivers\CzhkF.exe
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Policies\Explorer\Run, Microsoft Driver Setup=[%SYSTEM%]\drivers\dafmgr.exe
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run, Microsoft Driver Setup=[%SYSTEM%]\drivers\dafmgr.exe
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Winlogon, Taskman=[%SYSTEM_DRIVE%]\Documents and Settings\harishp\csrss.exe
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run, Microsoft Driver Setup=[%SYSTEM%]\drivers\Cbfgm.exe
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Winlogon, Taskman=[%SYSTEM_DRIVE%]\Documents and Settings\ute1\csrss.exe
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Winlogon, Taskman=[%SYSTEM_DRIVE%]\Documents and Settings\Korisnik\csrss.exe
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Policies\Explorer\Run, Microsoft Driver Setup=[%SYSTEM%]\drivers\BSwBT.exe
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Winlogon, Taskman=[%APPDATA%]\gkewzr.exe
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Policies\Explorer\Run, Microsoft Driver Setup=[%SYSTEM%]\xfgnl.exe
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run, Microsoft Driver Setup=[%SYSTEM%]\drivers\dllhost.exe
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run, Microsoft Driver Setup=[%SYSTEM%]\xfgnl.exe
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Policies\Explorer\Run, Microsoft Driver Setup=[%WINDOWS%]\iexplorer7.exe
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run, Microsoft Driver Setup=[%SYSTEM%]\Instmsv.exe
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Policies\Explorer\Run, Microsoft Driver Setup=[%WINDOWS%]\ncdrive32.exe
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run, Microsoft Driver Setup=[%WINDOWS%]\ncdrive32.exe
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run, Microsoft Driver Setup=[%WINDOWS%]\updated7.exe
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Policies\Explorer\Run, Microsoft Driver Setup=[%SYSTEM%]\drivers\BSuBT.exe
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Policies\Explorer\Run, Microsoft Driver Setup=[%WINDOWS%]\Temp\\xfgnp.exe
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run, Microsoft Driver Setup=[%WINDOWS%]\TEMP\\xfgnp.exe
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Winlogon, Taskman=[%SYSTEM_DRIVE%]\Documents and Settings\lisha\csrss.exe
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run, Microsoft Driver Setup=[%SYSTEM_DRIVE%]\DOCUME~1\ADMINI~1\LOCALS~1\Temp\\xfgnp.exe
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Policies\Explorer\Run, Microsoft Driver Setup=[%WINDOWS%]\winupd.exe
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run, Microsoft Driver Setup=[%WINDOWS%]\winupd.exe
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run, Microsoft Driver Setup=[%SYSTEM%]\drivers\xfgni.exe
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Policies\Explorer\Run, Microsoft Driver Setup=[%WINDOWS%]\msvddr32.exe
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Policies\Explorer\Run, Microsoft Driver Setup=[%WINDOWS%]\scvchost.exe
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run, Microsoft Driver Setup=[%WINDOWS%]\scvchost.exe
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Policies\Explorer\Run, Microsoft Driver Setup=[%WINDOWS%]\mscth32.exe
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run, Microsoft Driver Setup=[%WINDOWS%]\mscth32.exe
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Policies\Explorer\Run, Microsoft Driver Setup=[%SYSTEM%]\drivers\Cbccm.exe
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run, Microsoft Driver Setup=[%SYSTEM%]\drivers\Cbccm.exe
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Policies\Explorer\Run, Microsoft Driver Setup=[%WINDOWS%]\w7services.exe
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run, Microsoft Driver Setup=[%WINDOWS%]\w7services.exe
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Policies\Explorer\Run, Microsoft Driver Setup=[%SYSTEM%]\drivers\xfgn.exe
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run, Microsoft Driver Setup=[%SYSTEM%]\drivers\Instmsi.exe
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run, Microsoft Driver Setup=[%WINDOWS%]\sysmngsr32.exe
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run, Microsoft Driver Setup=[%SYSTEM%]\drivers\Czhkk.exe
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Policies\Explorer\Run, Microsoft Driver Setup=[%WINDOWS%]\expaende.exe
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run, Microsoft Driver Setup=[%SYSTEM%]\drivers\BSuBT.exe
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Policies\Explorer\Run, Microsoft Driver Setup=[%SYSTEM%]\drivers\syslog.exe
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run, Microsoft Driver Setup=[%SYSTEM%]\drivers\syslog.exe
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Policies\Explorer\Run, Microsoft Driver Setup=[%WINDOWS%]\windowsup.exe
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Policies\Explorer\Run, Microsoft Driver Setup=[%WINDOWS%]\svhost.exe
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run, Microsoft Driver Setup=[%SYSTEM%]\drivers\CzhkF.exe
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run, Microsoft Driver Setup=[%WINDOWS%]\svhost.exe
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run, Microsoft Driver Setup=[%WINDOWS%]\rcdrive32.exe
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Policies\Explorer\Run, Microsoft Driver Setup=0
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Policies\Explorer\Run, Microsoft Driver Setup=[%WINDOWS%]\win7service.exe
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Policies\Explorer\Run, Microsoft Driver Setup=[%SYSTEM%]\drivers\CzuF.exe
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Policies\Explorer\Run, Microsoft Driver Setup=[%WINDOWS%]\win7.exe
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run, Microsoft Driver Setup=[%WINDOWS%]\win7.exe
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Policies\Explorer\Run, Microsoft Driver Setup=[%SYSTEM%]\drivers\LBT.exe
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run, Microsoft Driver Setup=[%SYSTEM%]\drivers\CzuF.exe
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Policies\Explorer\Run, Microsoft Driver Setup=[%WINDOWS%]\ondrive32.exe
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run, Microsoft Driver Setup=[%SYSTEM%]\drivers\CzhrF.exe
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run, Microsoft Driver Setup=[%SYSTEM%]\drivers\LBT.exe
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Policies\Explorer\Run, Microsoft Driver Setup=[%WINDOWS%]\het7upd.exe
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run, Microsoft Driver Setup=[%WINDOWS%]\het7upd.exe
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Policies\Explorer\Run, Microsoft Driver Setup=[%WINDOWS%]\nldrive32.exe
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run, Microsoft Driver Setup=[%WINDOWS%]\nldrive32.exe
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run, Microsoft Driver Setup=[%WINDOWS%]\windowsup.exe
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Policies\Explorer\Run, Microsoft Driver Setup=[%SYSTEM%]\drivers\winhost.exe
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run, Microsoft Driver Setup=[%SYSTEM%]\drivers\CzvrF.exe
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Policies\Explorer\Run, Microsoft Driver Setup=[%WINDOWS%]\ntdrive32.exe
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run, Microsoft Driver Setup=[%WINDOWS%]\ntdrive32.exe
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Policies\Explorer\Run, Microsoft Driver Setup=[%SYSTEM%]\drivers\
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run, Microsoft Driver Setup=[%SYSTEM%]\drivers\BSzBT1.exe
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run, Microsoft Driver Setup=[%WINDOWS%]\mslsrv32.exe
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Policies\Explorer\Run, Microsoft Driver Setup=[%WINDOWS%]\mssis32.exe
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run, Microsoft Driver Setup=[%WINDOWS%]\mssis32.exe
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Policies\Explorer\Run, Microsoft Driver Setup=[%WINDOWS%]\updatelive.exe
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run, Microsoft Driver Setup=[%WINDOWS%]\updatelive.exe
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Policies\Explorer\Run, Microsoft Driver Setup=[%WINDOWS%]\mslsrv.exe
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run, Microsoft Driver Setup=[%WINDOWS%]\jcdrive32.exe
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run, Microsoft Driver Setup=[%WINDOWS%]\msvddr32.exe
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run, Microsoft Driver Setup=[%SYSTEM%]\drivers\BSwBT.exe
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run, Microsoft Driver Setup=[%SYSTEM%]\drivers\Qsaf.exe
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Policies\Explorer\Run, Microsoft Driver Setup=[%SYSTEM%]\drivers\CshF.EXE
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run, Microsoft Driver Setup=[%SYSTEM%]\drivers\CshF.EXE
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Policies\Explorer\Run, Microsoft Driver Setup=[%WINDOWS%]\usdrive32.exe
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Policies\Explorer\Run, Microsoft Driver Setup=[%WINDOWS%]\iexplorer72.exe
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run, Microsoft Driver Setup=[%WINDOWS%]\iexplorer72.exe
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Policies\Explorer\Run, Microsoft Driver Setup=[%SYSTEM%]\drivers\CphF.exe
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run, Microsoft Driver Setup=[%SYSTEM%]\drivers\CphF.exe
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Policies\Explorer\Run, Microsoft Driver Setup=[%SYSTEM%]\drivers\BSrBT.exe
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Policies\Explorer\Run, Microsoft Driver Setup=[%SYSTEM%]\drivers\LBTWi.exe
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Policies\Explorer\Run, Microsoft Driver Setup=[%SYSTEM%]\drivers\dllhost.exe
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run, Microsoft Driver Setup=[%WINDOWS%]\win7service.exe
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run, Microsoft Driver Setup=[%WINDOWS%]\avdrive32.exe
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run, Microsoft Driver Setup="[%WINDOWS%]\ncdrive32.exe"
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Policies\Explorer\Run, Microsoft Driver Setup=[%SYSTEM%]\drivers\ddwin.exe
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run, Microsoft Driver Setup=[%SYSTEM%]\drivers\ddwin.exe
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run, Microsoft Driver Setup=-[%SYSTEM%]\drivers\BSqBT.exe
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run, Microsoft Driver Setup=[%SYSTEM%]\drivers\BSrBT.exe
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Policies\Explorer\Run, Microsoft Driver Setup=[%WINDOWS%]\msath32.exe
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run, Microsoft Driver Setup=[%SYSTEM%]\drivers\BSpBT.exe
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Policies\Explorer\Run, Microsoft Driver Setup=[%SYSTEM%]\drivers\CsgF.EXE
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run, Microsoft Driver Setup=[%SYSTEM%]\drivers\CsgF.EXE
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Policies\Explorer\Run, Microsoft Driver Setup=[%SYSTEM%]\drivers\BSpBT.exe
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Policies\Explorer\Run, Microsoft Driver Setup=[%SYSTEM%]\drivers\dfwin.exe
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run, Microsoft Driver Setup=[%SYSTEM%]\drivers\dfwin.exe
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Policies\Explorer\Run, Microsoft Driver Setup=[%SYSTEM%]\drivers\LBTW.exe
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run, Microsoft Driver Setup=[%SYSTEM%]\drivers\LBTW.exe
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Policies\Explorer\Run, Microsoft Driver Setup=[%SYSTEM%]\drivers\winlogon.exe
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Policies\Explorer\Run, Microsoft Driver Setup=[%SYSTEM%]\drivers\Secrun.exe
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Policies\Explorer\Run, Microsoft Driver Setup=[%SYSTEM%]\drivers\zLBT.exe
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Policies\Explorer\Run, Microsoft Driver Setup=[%SYSTEM%]\drivers\dcin.exe
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run, Microsoft Driver Setup=[%SYSTEM%]\drivers\dcin.exe
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run, Microsoft Driver Setup=[%WINDOWS%]\mslsrv.exe
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run, Microsoft Driver Setup=[%SYSTEM%]\drivers\zLBT.exe
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run, Microsoft Driver Setup=[%WINDOWS%]\iexplorer7.exe
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Policies\Explorer\Run, Microsoft Driver Setup=[%WINDOWS%]\msdrv32s.exe
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run, Microsoft Driver Setup=[%WINDOWS%]\msdrv32s.exe
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run, Microsoft Driver Setup=[%SYSTEM%]\drivers\LBTWi.exe
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Policies\Explorer\Run, Microsoft Driver Setup=[%WINDOWS%]\avdrive32.exe
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Policies\Explorer\Run, Microsoft Driver Setup=[%SYSTEM%]\drivers\Zgmh.exe
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run, Microsoft Driver Setup=[%SYSTEM%]\drivers\Zgmh.exe
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Policies\Explorer\Run, Microsoft Driver Setup=[%WINDOWS%]\msxver32.exe
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run, Microsoft Driver Setup=[%WINDOWS%]\msxver32.exe
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Policies\Explorer\Run, Microsoft Driver Setup=[%WINDOWS%]\mcdrive32.exe
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Policies\Explorer\Run, Microsoft Driver Setup=[%WINDOWS%]\winlsrv.exe
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Policies\Explorer\Run, Microsoft Driver Setup=[%WINDOWS%]\msxver321.exe
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run, Microsoft Driver Setup=[%WINDOWS%]\msxver321.exe
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Policies\Explorer\Run, Microsoft Driver Setup=[%SYSTEM%]\drivers\ati2evxx.exe
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run, Microsoft Driver Setup=[%WINDOWS%]\usdrive32.exe
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run, Microsoft Driver Setup=[%WINDOWS%]\expaende.exe
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Policies\Explorer\Run, Microsoft Driver Setup=[%WINDOWS%]\mssrv32.exe
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run, Microsoft Driver Setup=[%WINDOWS%]\mssrv32.exe
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run, Microsoft Driver Setup=[%SYSTEM%]\drivers\Secrun.exe
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run, Microsoft Driver Setup=[%WINDOWS%]\expaend.exe
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Policies\Explorer\Run, Microsoft Driver Setup=[%SYSTEM%]\drivers\Qsaf.exe
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Policies\Explorer\Run, Microsoft Driver Setup=[%WINDOWS%]\msddrv42.exe
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run, Microsoft Driver Setup=[%WINDOWS%]\msddrv42.exe
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run, Microsoft Driver Setup=REM [%SYSTEM%]\drivers\Secrun.exe

Scan your system registry for FREE

CURIOLAB S.M.B.A., Amagertorv 15, 2, 1160 Copenhagen K, Denmark, +45.36965533