Top 10 Alerts

Latest 10 Malware Files

Testimonials

In recent weeks, my computer has been infected with malware and adware that just would not quit. A*G G*****t failed to remove them. S****t just froze up. Another anti-virus program just sat there and looked at me. So I purchased Exterminate It! This was the only anti-virus program I could find that would recognize and remove particularly pesky viruses from my computer. But even more impressive, they allow subscribers to send in descriptions of new viruses they encounter, and they will design a way to remove the virus and send out to you an update. I submitted the description of a virus to them, and a couple of days later they sent to me an update that cleanly removed it. If you run into viruses that just won't quit, give this anti-virus program a try. It's cheap and removes the viruses that the other anti-virus programs can't touch for some reason.

Source

Brother Mel

More ...

Startpage Registry Values

Scan your Windows registry for Startpage

HKEY_CURRENT_USER\software\microsoft\windows\currentversion\run, update=[%APPDATA%]\k8h00.exe
HKEY_CURRENT_USER\software\microsoft\windows\currentversion\run, update=rundll32.exe "[%APPDATA%]\Identities\Identities\uzseuiy.dll",DllRegisterServer
HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\run, run32=[%SYSTEM_DRIVE%]\Win\lsass.exe
HKEY_CURRENT_USER\software\microsoft\windows\currentversion\run, update=rundll32.exe "[%APPDATA%]\ArcSoft\ArcSoft\yvfpemrj.dll",DllRegisterServer
HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\run, svchost=[%WINDOWS%]\svchost.exe
HKEY_CURRENT_USER\software\microsoft\windows\currentversion\run, update=rundll32.exe "[%APPDATA%]\2B0D7B83-FC1D-4672-A150-4D59EE81A3FF\2B0D7B83-FC1D-4672-A150-4D59EE81A3FF\dkgjonab.dll",DllRegisterServer
HKEY_CURRENT_USER\software\microsoft\windows\currentversion\run, update=[%LOCAL_SETTINGS%]\wualocal.exe
HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\run, svchost=[%SYSTEM%]\system32\svchost.exe
HKEY_CURRENT_USER\software\microsoft\windows\currentversion\run, update=rundll32.exe "[%APPDATA%]\Macromedia\Macromedia\ulbzyvwiq.dll",DllRegisterServer
HKEY_CURRENT_USER\software\microsoft\windows\currentversion\run, update=rundll32.exe "[%APPDATA%]\Adobe\Adobe\ulbzyvwiq.dll",DllRegisterServer
HKEY_CURRENT_USER\software\microsoft\windows\currentversion\run, update=rundll32.exe "[%APPDATA%]\Adobe\Adobe\kmzkybj.dll",DllRegisterServer
HKEY_CURRENT_USER\software\microsoft\windows\currentversion\run, update=[%APPDATA%]\hj8ol0.exe
HKEY_CURRENT_USER\software\microsoft\windows\currentversion\run, update=rundll32.exe "[%APPDATA%]\Adobe\Adobe\vubjh.dll",DllRegisterServer
HKEY_CURRENT_USER\software\microsoft\windows\currentversion\run, update=rundll32.exe "[%APPDATA%]\Adobe\Adobe\xiuzb.dll",DllRegisterServer
HKEY_CURRENT_USER\software\microsoft\windows\currentversion\run, update=[%APPDATA%]\wpbt0.dll
HKEY_CURRENT_USER\software\microsoft\windows\currentversion\run, update=rundll32.exe "[%APPDATA%]\Microsoft\Microsoft\ulbzyvwiq.dll",DllRegisterServer
HKEY_CURRENT_USER\software\microsoft\windows\currentversion\run, update="[%APPDATA%]\Cewym\minaa.exe"
HKEY_CURRENT_USER\software\microsoft\windows\currentversion\run, update=rundll32.exe "[%APPDATA%]\Real\Real\zchvwceaw.dll",DllRegisterServer
HKEY_CURRENT_USER\software\microsoft\windows\currentversion\run, update=
HKEY_CURRENT_USER\software\microsoft\windows\currentversion\run, update=rundll32.exe "[%APPDATA%]\CyberLink\CyberLink\vubjh.dll",DllRegisterServer
HKEY_CURRENT_USER\software\microsoft\windows\currentversion\run, update=rundll32.exe "[%APPDATA%]\ICAClient\ICAClient\kmzkybj.dll",DllRegisterServer
HKEY_CURRENT_USER\software\microsoft\windows\currentversion\run, update=rundll32.exe "[%SYSTEM%]\config\systemprofile\Application Data\Yahoo!\Yahoo!\arroibs.dll",DllRegisterServer
HKEY_CURRENT_USER\software\microsoft\windows\currentversion\run, update=rundll32.exe "[%APPDATA%]\AVG10\AVG10\zchvwceaw.dll",DllRegisterServer
HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\run, svchost=[%APPDATA%]\Microsoft\svchost.exe
HKEY_CURRENT_USER\software\microsoft\windows\currentversion\run, update=[%APPDATA%]\hnszs0.exe
HKEY_CURRENT_USER\software\microsoft\windows\currentversion\run, update=rundll32.exe "[%APPDATA%]\MinMaxGames\MinMaxGames\ulbzyvwiq.dll",DllRegisterServer
HKEY_CURRENT_USER\software\microsoft\windows\currentversion\run, update=rundll32.exe "[%APPDATA%]\AVG Secure Search\AVG Secure Search\kmzkybj.dll",DllRegisterServer
HKEY_CURRENT_USER\software\microsoft\windows\currentversion\run, update=rundll32.exe "[%APPDATA%]\Adobe\Adobe\uzseuiy.dll",DllRegisterServer
HKEY_CURRENT_USER\software\microsoft\windows\currentversion\run, update=rundll32.exe "[%SYSTEM%]\config\systemprofile\AppData\Roaming\{90140011-0066-0409-0000-0000000FF1CE}\{90140011-0066-0409-0000-0000000FF1CE}\kmzkybj.dll",DllRegisterServer
HKEY_CURRENT_USER\software\microsoft\windows\currentversion\run, update=rundll32.exe "[%APPDATA%]\Dell\Dell\kmzkybj.dll",DllRegisterServer
HKEY_CURRENT_USER\software\microsoft\windows\currentversion\run, update=rundll32.exe "[%APPDATA%]\Adobe\Adobe\dpvdx.dll",DllRegisterServer
HKEY_CURRENT_USER\software\microsoft\windows\currentversion\run, update=rundll32.exe "[%APPDATA%]\Apple Computer\Apple Computer\wmgaaaizl.dll",DllRegisterServer
HKEY_CURRENT_USER\software\microsoft\windows\currentversion\run, update=[%APPDATA%]\seti0.exe
HKEY_CURRENT_USER\software\microsoft\windows\currentversion\run, update=rundll32.exe "[%APPDATA%]\Audacity\Audacity\wmgaaaizl.dll",DllRegisterServer
HKEY_CURRENT_USER\software\microsoft\windows\currentversion\run, update=rundll32.exe "[%APPDATA%]\Blackberry Desktop\Blackberry Desktop\sgpeue.dll",DllRegisterServer
HKEY_CURRENT_USER\software\microsoft\windows\currentversion\run, update=rundll32.exe "[%APPDATA%]\Curiolab\Curiolab\dpvdx.dll",DllRegisterServer
HKEY_CURRENT_USER\software\microsoft\windows\currentversion\run, update=[%APPDATA%]\msuu0.exe
HKEY_CURRENT_USER\software\microsoft\windows\currentversion\run, update=rundll32.exe "[%APPDATA%]\Curiolab\Curiolab\kmzkybj.dll",DllRegisterServer
HKEY_CURRENT_USER\software\microsoft\windows\currentversion\run, update=rundll32.exe "[%APPDATA%]\RemoteDocs\RemoteDocs\sgpeue.dll",DllRegisterServer
HKEY_CURRENT_USER\software\microsoft\windows\currentversion\run, update=rundll32.exe "[%SYSTEM%]\config\systemprofile\AppData\Roaming\Microsoft\Microsoft\sgpeue.dll",DllRegisterServer
HKEY_CURRENT_USER\software\microsoft\windows\currentversion\run, update=rundll32.exe "[%APPDATA%]\HP SimpleSave Application\HP SimpleSave Application\sgpeue.dll",DllRegisterServer
HKEY_CURRENT_USER\software\microsoft\windows\currentversion\run, update=rundll32.exe "[%APPDATA%]\Yahoo!\Yahoo!\arroibs.dll",DllRegisterServer
HKEY_CURRENT_USER\software\microsoft\windows\currentversion\run, update=rundll32.exe "[%APPDATA%]\Brother\Brother\dpvdx.dll",DllRegisterServer
HKEY_CURRENT_USER\software\microsoft\windows\currentversion\run, update=rundll32.exe "[%APPDATA%]\fltk.org\fltk.org\uuuqi.dll",DllRegisterServer
HKEY_CURRENT_USER\software\microsoft\windows\currentversion\run, update=rundll32.exe "[%APPDATA%]\Help\Help\arroibs.dll",DllRegisterServer
HKEY_CURRENT_USER\software\microsoft\windows\currentversion\run, update=[%APPDATA%]\install\winup.exe
HKEY_CURRENT_USER\software\microsoft\windows\currentversion\run, update=rundll32.exe "[%APPDATA%]\WinBatch\WinBatch\sgpeue.dll",DllRegisterServer
HKEY_CURRENT_USER\software\microsoft\windows\currentversion\run, update=rundll32.exe "[%SYSTEM%]\config\systemprofile\AppData\Roaming\Microsoft\Microsoft\kmzkybj.dll",DllRegisterServer
HKEY_CURRENT_USER\software\microsoft\windows\currentversion\run, update=rundll32.exe "[%APPDATA%]\Adobe\Adobe\buhjtfc.dll",DllRegisterServer
HKEY_CURRENT_USER\software\microsoft\windows\currentversion\run, update=rundll32.exe "[%APPDATA%]\Apple Computer\Apple Computer\sgpeue.dll",DllRegisterServer
HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\run, svchost=[%APPDATA%]\bot.exe
HKEY_CURRENT_USER\software\microsoft\windows\currentversion\run, update=[%APPDATA%]\ch8l0.exe
HKEY_CURRENT_USER\software\microsoft\windows\currentversion\run, update=rundll32.exe "[%APPDATA%]\BlueFlare Antivirus\BlueFlare Antivirus\arroibs.dll",DllRegisterServer
HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\run, svchost=[%WINDOWS%]\svchost.exe /e:vbs [%SYSTEM%]\SvCHosT.DAT
HKEY_CURRENT_USER\software\microsoft\windows\currentversion\run, update=rundll32.exe "[%APPDATA%]\Intel Corporation\Intel Corporation\buhjtfc.dll",DllRegisterServer
HKEY_CURRENT_USER\software\microsoft\windows\currentversion\run, update=rundll32.exe "[%APPDATA%]\Apple Computer\Apple Computer\arzpii.dll",DllRegisterServer
HKEY_CURRENT_USER\software\microsoft\windows\currentversion\run, update=rundll32.exe "[%APPDATA%]\Babylon\Babylon\xnzbyn.dll",DllRegisterServer
HKEY_CURRENT_USER\software\microsoft\windows\currentversion\run, update=rundll32.exe "[%APPDATA%]\CasinoOnNet\CasinoOnNet\wmgaaaizl.dll",DllRegisterServer
HKEY_CURRENT_USER\software\microsoft\windows\currentversion\run, update=rundll32.exe "[%APPDATA%]\DivX\DivX\arroibs.dll",DllRegisterServer
HKEY_CURRENT_USER\software\microsoft\windows\currentversion\run, update=rundll32.exe "[%APPDATA%]\TP\TP\mijimxh.dll",DllRegisterServer
HKEY_CURRENT_USER\software\microsoft\windows\currentversion\run, update=rundll32.exe "[%APPDATA%]\Xilisoft\Xilisoft\buhjtfc.dll",DllRegisterServer
HKEY_CURRENT_USER\software\microsoft\windows\currentversion\run, update=rundll32.exe "[%SYSTEM%]\config\systemprofile\AppData\Roaming\Macromedia\Macromedia\hmlxkn.dll",DllRegisterServer
HKEY_CURRENT_USER\software\microsoft\windows\currentversion\run, update=rundll32.exe "[%APPDATA%]\vlc\vlc\vmvsz.dll",DllRegisterServer
HKEY_CURRENT_USER\software\microsoft\windows\currentversion\run, update=rundll32.exe "[%APPDATA%]\Avery\Avery\vmvsz.dll",DllRegisterServer
HKEY_CURRENT_USER\software\microsoft\windows\currentversion\run, update=rundll32.exe "[%APPDATA%]\Windows Live Writer\Windows Live Writer\uzseuiy.dll",DllRegisterServer
HKEY_CURRENT_USER\software\microsoft\windows\currentversion\run, update=rundll32.exe "[%APPDATA%]\dvdcss\dvdcss\vmvsz.dll",DllRegisterServer
HKEY_CURRENT_USER\software\microsoft\windows\currentversion\run, update=rundll32.exe "[%APPDATA%]\Roxio Burn\Roxio Burn\wmgaaaizl.dll",DllRegisterServer
HKEY_CURRENT_USER\software\microsoft\windows\currentversion\run, update=rundll32.exe "[%SYSTEM%]\config\systemprofile\AppData\Roaming\Microsoft\Microsoft\vubjh.dll",DllRegisterServer
HKEY_CURRENT_USER\software\microsoft\windows\currentversion\run, update=rundll32.exe "[%APPDATA%]\Roxio\Roxio\uzseuiy.dll",DllRegisterServer
HKEY_CURRENT_USER\software\microsoft\windows\currentversion\run, update=rundll32.exe "[%APPDATA%]\Update\Update\vmvsz.dll",DllRegisterServer
HKEY_CURRENT_USER\software\microsoft\windows\currentversion\run, update=rundll32.exe "[%APPDATA%]\Acapela Group\Acapela Group\buhjtfc.dll",DllRegisterServer
HKEY_CURRENT_USER\software\microsoft\windows\currentversion\run, update=rundll32.exe "[%APPDATA%]\Apple Computer\Apple Computer\zchvwceaw.dll",DllRegisterServer
HKEY_CURRENT_USER\software\microsoft\windows\currentversion\run, update=rundll32.exe "[%APPDATA%]\AVG Secure Search\AVG Secure Search\vubjh.dll",DllRegisterServer
HKEY_CURRENT_USER\software\microsoft\windows\currentversion\run, update=rundll32.exe "[%SYSTEM%]\config\systemprofile\AppData\Roaming\Mozilla\Mozilla\vubjh.dll",DllRegisterServer
HKEY_CURRENT_USER\software\microsoft\windows\currentversion\run, update=rundll32.exe "[%APPDATA%]\Apple Computer\Apple Computer\klzgc.dll",DllRegisterServer
HKEY_CURRENT_USER\software\microsoft\windows\currentversion\run, update=rundll32.exe "[%APPDATA%]\Microsoft\Microsoft\vubjh.dll",DllRegisterServer
HKEY_CURRENT_USER\software\microsoft\windows\currentversion\run, update=rundll32.exe "[%WINDOWS%]\TEMP\",DllRegisterServer
HKEY_CURRENT_USER\software\microsoft\windows\currentversion\run, update=rundll32.exe "[%APPDATA%]\DriverCure\DriverCure\vubjh.dll",DllRegisterServer
HKEY_CURRENT_USER\software\microsoft\windows\currentversion\run, update=rundll32.exe "[%APPDATA%]\Adobe\Adobe\zchvwceaw.dll",DllRegisterServer
HKEY_CURRENT_USER\software\microsoft\windows\currentversion\run, update=rundll32.exe "[%APPDATA%]\SystemOptimizeExpert\SystemOptimizeExpert\vubjh.dll",DllRegisterServer
HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\run, svchost=[%APPDATA%]\401984581.exe
HKEY_CURRENT_USER\software\microsoft\windows\currentversion\run, update=rundll32.exe "[%APPDATA%]\Google\Google\arzpii.dll",DllRegisterServer
HKEY_CURRENT_USER\software\microsoft\windows\currentversion\run, update=rundll32.exe "[%SYSTEM%]\config\systemprofile\Application Data\Sun\Sun\hmlxkn.dll",DllRegisterServer
HKEY_CURRENT_USER\software\microsoft\windows\currentversion\run, update=rundll32.exe "[%APPDATA%]\ArcSoft\ArcSoft\zchvwceaw.dll",DllRegisterServer
HKEY_CURRENT_USER\software\microsoft\windows\currentversion\run, update=rundll32.exe "[%SYSTEM%]\config\systemprofile\AppData\Roaming\Adobe\Adobe\zchvwceaw.dll",DllRegisterServer
HKEY_CURRENT_USER\software\microsoft\windows\currentversion\run, update=[%APPDATA%]\0.48229738521589616.exe
HKEY_CURRENT_USER\software\microsoft\windows\currentversion\run, update=rundll32.exe "[%SYSTEM%]\config\systemprofile\AppData\Roaming\Mozilla\Mozilla\zchvwceaw.dll",DllRegisterServer
HKEY_CURRENT_USER\software\microsoft\windows\currentversion\run, update=rundll32.exe "[%APPDATA%]\Dell\Dell\hmlxkn.dll",DllRegisterServer
HKEY_CURRENT_USER\software\microsoft\windows\currentversion\run, update=rundll32.exe "[%APPDATA%]\.minecraft\.minecraft\zchvwceaw.dll",DllRegisterServer
HKEY_CURRENT_USER\software\microsoft\windows\currentversion\run, update=rundll32.exe "[%SYSTEM%]\config\systemprofile\AppData\Roaming\Macromedia\Macromedia\zchvwceaw.dll",DllRegisterServer
HKEY_CURRENT_USER\software\microsoft\windows\currentversion\run, update=rundll32.exe "[%APPDATA%]\Intel\Intel\zchvwceaw.dll",DllRegisterServer
HKEY_CURRENT_USER\software\microsoft\windows\currentversion\run, update=rundll32.exe "[%SYSTEM%]\config\systemprofile\AppData\Roaming\Security Defender\Security Defender\zchvwceaw.dll",DllRegisterServer
HKEY_CURRENT_USER\software\microsoft\windows\currentversion\run, update=rundll32.exe "[%SYSTEM%]\config\systemprofile\AppData\Roaming\Apple Computer\Apple Computer\zchvwceaw.dll",DllRegisterServer
HKEY_CURRENT_USER\software\microsoft\windows\currentversion\run, update=rundll32.exe "[%APPDATA%]\7 Taskbar Tweaker\7 Taskbar Tweaker\klzgc.dll",DllRegisterServer
HKEY_CURRENT_USER\software\microsoft\windows\currentversion\run, update=rundll32.exe "[%APPDATA%]\ATI\ATI\zchvwceaw.dll",DllRegisterServer
HKEY_CURRENT_USER\software\microsoft\windows\currentversion\run, update=rundll32.exe "[%SYSTEM%]\config\systemprofile\AppData\Roaming\Microsoft\Microsoft\zchvwceaw.dll",DllRegisterServer
HKEY_CURRENT_USER\software\microsoft\windows\currentversion\run, update=rundll32.exe "[%APPDATA%]\ArcSoft\ArcSoft\hmlxkn.dll",DllRegisterServer
HKEY_CURRENT_USER\software\microsoft\windows\currentversion\run, update=rundll32.exe "[%SYSTEM%]\config\systemprofile\AppData\Roaming\Tencent\Tencent\hmlxkn.dll",DllRegisterServer
HKEY_CURRENT_USER\software\microsoft\windows\currentversion\run, update=rundll32.exe "[%SYSTEM%]\config\systemprofile\AppData\Roaming\Apple Computer\Apple Computer\klzgc.dll",DllRegisterServer
HKEY_CURRENT_USER\software\microsoft\windows\currentversion\run, update=rundll32.exe "[%SYSTEM%]\config\systemprofile\AppData\Roaming\Macromedia\Macromedia\klzgc.dll",DllRegisterServer
HKEY_CURRENT_USER\software\microsoft\windows\currentversion\run, microsoft windows driver=[%WINDOWS%]\rundll32.exe
HKEY_CURRENT_USER\software\microsoft\windows\currentversion\run, update=rundll32.exe "[%APPDATA%]\Windows Search\Windows Search\xzjfhrf.dll",DllRegisterServer
HKEY_CURRENT_USER\software\microsoft\windows\currentversion\run, update=rundll32.exe "[%SYSTEM%]\config\systemprofile\AppData\Roaming\Microsoft\Microsoft\dkgjonab.dll",DllRegisterServer
HKEY_CURRENT_USER\software\microsoft\windows\currentversion\run, update=rundll32.exe "[%APPDATA%]\Media Center Programs\Media Center Programs\nssqf.dll",DllRegisterServer
HKEY_CURRENT_USER\software\microsoft\windows\currentversion\run, update=rundll32.exe "[%APPDATA%]\Actual Tools\Actual Tools\hmlxkn.dll",DllRegisterServer
HKEY_CURRENT_USER\software\microsoft\windows\currentversion\run, update=rundll32.exe "[%APPDATA%]\Apple Computer\Apple Computer\dkgjonab.dll",DllRegisterServer
HKEY_CURRENT_USER\software\microsoft\windows\currentversion\run, update=rundll32.exe "[%APPDATA%]\Adobe\Adobe\klzgc.dll",DllRegisterServer
HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\run, svchost=[%PROFILE%]\Localdir\svchost.exe
HKEY_CURRENT_USER\software\microsoft\windows\currentversion\run, update=rundll32.exe "[%SYSTEM%]\config\systemprofile\AppData\Roaming\Apple Computer\Apple Computer\yvfpemrj.dll",DllRegisterServer
HKEY_CURRENT_USER\software\microsoft\windows\currentversion\run, update=[%APPDATA%]\update.exe
HKEY_CURRENT_USER\software\microsoft\windows\currentversion\run, update=rundll32.exe "[%SYSTEM%]\config\systemprofile\AppData\Roaming\Adobe\Adobe\klzgc.dll",DllRegisterServer
HKEY_CURRENT_USER\software\microsoft\windows\currentversion\run, update=rundll32.exe "[%APPDATA%]\AVG10\AVG10\dkgjonab.dll",DllRegisterServer
HKEY_CURRENT_USER\software\microsoft\windows\currentversion\run, update=rundll32.exe "[%SYSTEM%]\config\systemprofile\AppData\Roaming\Microsoft\Microsoft\klzgc.dll",DllRegisterServer
HKEY_CURRENT_USER\software\microsoft\windows\currentversion\run, update=rundll32.exe "[%APPDATA%]\com.adobe.mauby.4875E02D9FB21EE389F73B8D1702B320485DF8CE.1\com.adobe.mauby.4875E02D9FB21EE389F73B8D1702B320485DF8CE.1\klzgc.dll",DllRegisterServer
HKEY_CURRENT_USER\software\microsoft\windows\currentversion\run, update=rundll32.exe "[%APPDATA%]\Adobe\Adobe\dkgjonab.dll",DllRegisterServer
HKEY_CURRENT_USER\software\microsoft\windows\currentversion\run, update=rundll32.exe "[%APPDATA%]\Macromedia\Macromedia\klzgc.dll",DllRegisterServer
HKEY_CURRENT_USER\software\microsoft\windows\currentversion\run, update=rundll32.exe "[%APPDATA%]\Google\Google\nssqf.dll",DllRegisterServer
HKEY_CURRENT_USER\software\microsoft\windows\currentversion\run, update=rundll32.exe "[%APPDATA%]\Identities\Identities\dkgjonab.dll",DllRegisterServer
HKEY_CURRENT_USER\software\microsoft\windows\currentversion\run, update=rundll32.exe "[%APPDATA%]\WinRAR\WinRAR\dkgjonab.dll",DllRegisterServer
HKEY_CURRENT_USER\software\microsoft\windows\currentversion\run, update=rundll32.exe "[%APPDATA%]\com.skinkers.aa\com.skinkers.aa\klzgc.dll",DllRegisterServer
HKEY_CURRENT_USER\software\microsoft\windows\currentversion\run, update=rundll32.exe "[%APPDATA%]\acccore\acccore\nssqf.dll",DllRegisterServer
HKEY_CURRENT_USER\software\microsoft\windows\currentversion\run, update=rundll32.exe "[%APPDATA%]\ChaYoWo Games\ChaYoWo Games\klzgc.dll",DllRegisterServer
HKEY_CURRENT_USER\software\microsoft\windows\currentversion\run, update=rundll32.exe "[%APPDATA%]\Book Place\Book Place\nssqf.dll",DllRegisterServer
HKEY_CURRENT_USER\software\microsoft\windows\currentversion\run, update=rundll32.exe "[%APPDATA%]\ATI\ATI\lwwxb.dll",DllRegisterServer
HKEY_CURRENT_USER\software\microsoft\windows\currentversion\run, update=rundll32.exe "[%APPDATA%]\Arcsoft\Arcsoft\nssqf.dll",DllRegisterServer
HKEY_CURRENT_USER\software\microsoft\windows\currentversion\run, update=rundll32.exe "[%APPDATA%]\Google\Google\xiuzb.dll",DllRegisterServer
HKEY_CURRENT_USER\software\microsoft\windows\currentversion\run, update=rundll32.exe "[%APPDATA%]\Media Player Classic\Media Player Classic\klzgc.dll",DllRegisterServer
HKEY_CURRENT_USER\software\microsoft\windows\currentversion\run, update=rundll32.exe "[%APPDATA%]\vlc\vlc\klzgc.dll",DllRegisterServer
HKEY_CURRENT_USER\software\microsoft\windows\currentversion\run, update=rundll32.exe "[%APPDATA%]\Real\Real\nssqf.dll",DllRegisterServer
HKEY_CURRENT_USER\software\microsoft\windows\currentversion\run, update=rundll32.exe "[%APPDATA%]\Bubble Xmas\Bubble Xmas\dkgjonab.dll",DllRegisterServer
HKEY_CURRENT_USER\software\microsoft\windows\currentversion\run, update=rundll32.exe "[%APPDATA%]\Creative\Creative\klzgc.dll",DllRegisterServer
HKEY_CURRENT_USER\software\microsoft\windows\currentversion\run, update=rundll32.exe "[%APPDATA%]\ACD Systems\ACD Systems\nssqf.dll",DllRegisterServer
HKEY_CURRENT_USER\software\microsoft\windows\currentversion\run, update=rundll32.exe "[%APPDATA%]\hewlett-packard\hewlett-packard\dkgjonab.dll",DllRegisterServer
HKEY_CURRENT_USER\software\microsoft\windows\currentversion\run, update=rundll32.exe "[%APPDATA%]\Download Manager\Download Manager\dkgjonab.dll",DllRegisterServer
HKEY_CURRENT_USER\software\microsoft\windows\currentversion\run, update=rundll32.exe "[%APPDATA%]\ATI\ATI\dkgjonab.dll",DllRegisterServer
HKEY_CURRENT_USER\software\microsoft\windows\currentversion\run, update=rundll32.exe "[%APPDATA%]\GARMIN\GARMIN\dkgjonab.dll",DllRegisterServer
HKEY_CURRENT_USER\software\microsoft\windows\currentversion\run, update=rundll32.exe "[%APPDATA%]\YoudaGames\YoudaGames\dkgjonab.dll",DllRegisterServer
HKEY_CURRENT_USER\software\microsoft\windows\currentversion\run, update=rundll32.exe "[%APPDATA%]\Media Player Classic\Media Player Classic\dkgjonab.dll",DllRegisterServer
HKEY_CURRENT_USER\software\microsoft\windows\currentversion\run, update=[%APPDATA%]\Microsoft\conime.exe
HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\run, svchost=RU
HKEY_CURRENT_USER\software\microsoft\windows\currentversion\run, update=rundll32.exe "[%APPDATA%]\Macrovision\Macrovision\dkgjonab.dll",DllRegisterServer
HKEY_CURRENT_USER\software\microsoft\windows\currentversion\run, update=rundll32.exe "[%APPDATA%]\LimeWire\LimeWire\dkgjonab.dll",DllRegisterServer
HKEY_CURRENT_USER\software\microsoft\windows\currentversion\run, update=rundll32.exe "[%APPDATA%]\Dev-Cpp\Dev-Cpp\dkgjonab.dll",DllRegisterServer
HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\run, svchost=[%WINDOWS%]\javaing\svchost.exe
HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\run, svchost=[%WINDOWS%]\svchost.exe RU
HKEY_CURRENT_USER\software\microsoft\windows\currentversion\run, update=[%SYSTEM%]\MSDCSC\msdcsc.exe
HKEY_CURRENT_USER\software\microsoft\windows\currentversion\run, update=[%APPDATA%]\0.727383938223187867f76.exe
HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\uninstall\winvi, displayname=winvi (remove only)
HKEY_CURRENT_USER\software\microsoft\windows\currentversion\run, update=rundll32.exe "[%APPDATA%]\Adobe\Adobe\jsrzbhj.dll",DllRegisterServer
HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\run, svchost=[%SYSTEM%]\wdir\smswin.exe
HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\run, svchost=[%APPDATA%]\svchost.exe
HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\run, svchost=[%SYSTEM%]\Setup\svchost.exe
HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\run, svchost=[%WINDOWS%]\system\svchost.exe RU
HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\run, svchost=[%APPDATA%]\Microsoft\System\Services\svchost.exe
HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\run, svchost=[%APPDATA%]\Microsoft\conhost.exe
HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\run, svchost=[%APPDATA%]\ueycpb.exe
HKEY_CURRENT_USER\software\microsoft\windows\currentversion\run, update=[%WINDOWS%]\systemhost.exe
HKEY_CURRENT_USER\software\microsoft\windows\currentversion\run, update=rundll32.exe "[%APPDATA%]\Creative\Creative\vhtqyfeya.dll",DllRegisterServer
HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\run, run32=C:\Win\lsass.exe
HKEY_CURRENT_USER\software\microsoft\windows\currentversion\run, update=[%PROFILE_TEMP%]\__tmp.exe
HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\run, svchost=[%WINDOWS%]\system\lsass.exe
HKEY_CURRENT_USER\software\microsoft\windows\currentversion\run, update=[%WINDOWS%]\install\winup.exe
HKEY_CURRENT_USER\software\microsoft\windows\currentversion\run, update=[%PROFILE_TEMP%]\Win_Update_newdsfsd\Windows_Update_newdsfsd.exe
HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\run, svchost=[%WINDOWS%]\MDM.EXE
HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\run, svchost="[%WINDOWS%]\SysWOW64\winservices\svchost.exe" /hide
HKEY_CURRENT_USER\software\microsoft\windows\currentversion\run, update=[%SYSTEM%]\Msdocument\svchost.exe
HKEY_CURRENT_USER\software\microsoft\windows\currentversion\run, scvhost=[%WINDOWS%]\scvhost.exe
HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\run, svchost=[%PROFILE_TEMP%]\IXP000.TMP\HAIRS-~1.EXE
HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\run, svchost="[%PROGRAM_FILES%]\Internet Explorer\svchost.exe"
HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\run, svchost=[%WINDOWS%]\system32:svchost.exe
HKEY_CURRENT_USER\software\microsoft\windows\currentversion\run, update=[%APPDATA%]\magecoin.exe
HKEY_CURRENT_USER\software\microsoft\windows\currentversion\run, update=[%SYSTEM_DRIVE%]\PC\up.exe
HKEY_CURRENT_USER\software\microsoft\windows\currentversion\run, update=[%SYSTEM_DRIVE%]\LETICIA\up.exe
HKEY_CURRENT_USER\software\microsoft\windows\currentversion\run, scvhost=[%PROGRAM_FILES%]\dllhost.exe
HKEY_CURRENT_USER\software\microsoft\windows\currentversion\run, update=[%APPDATA%]\Microsoft\Svhost.exe
HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\run, svchost=[%PROGRAM_FILES%]\Security extra\svchost.exe
HKEY_CURRENT_USER\software\microsoft\internet explorer\main, start page=http://www.toggle.com/index.php?rvs=hompag
HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\run, svchost=[%APPDATA%]\svchost32.exe
HKEY_CURRENT_USER\software\microsoft\windows\currentversion\run, update=[%APPDATA%]\Microsoft\Office\taskmgr.exe
HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\run, svchost=[%APPDATA%]\Nvidia\Svchost.exe
HKEY_CURRENT_USER\software\microsoft\windows\currentversion\run, update=[%APPDATA%]\Microsoft\zainaf22.exe
HKEY_CURRENT_USER\software\microsoft\windows\currentversion\run, update=[%APPDATA%]\update\update.exe
HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\run, svchost=[%PROGRAM_FILES_COMMON%]\Microsoft Shared\DAO\System\svchost.exe
HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\run, svchost="[%SYSTEM%]\winservices\svchost.exe" /hide
HKEY_CURRENT_USER\software\microsoft\windows\currentversion\run, update=[%LOCAL_APPDATA%]\Temp/MSNUpdate/Windows_Update.exe
HKEY_CURRENT_USER\software\microsoft\windows\currentversion\run, update=[%SYSTEM_DRIVE%]\CONTITEC-PC\up.exe
HKEY_CURRENT_USER\software\microsoft\windows\currentversion\run, update="[%PROFILE_TEMP%]\update.exe"
HKEY_CURRENT_USER\software\microsoft\windows\currentversion\run, update=[%SYSTEM_DRIVE%]\WINDOWS-55216B1\up.exe
HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\run, svchost=[%WINDOWS%]\system\svchost.exe
HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\run, svchost=[%WINDOWS%]\System\SMSS.exe
HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\run, svchost=[%APPDATA%]\twunk_32.exe
HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\run, svchost=[%WINDOWS%]\win.exe
HKEY_CURRENT_USER\software\microsoft\windows\currentversion\run, scvhost=[%PROFILE_TEMP%]\Java\update.exe
HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\run, svchost=[%PROFILE_TEMP%]\msn.exe
HKEY_CURRENT_USER\software\microsoft\windows\currentversion\run, update=[%PERSONAL%]\SYS\winupdate.exe
HKEY_CURRENT_USER\software\microsoft\windows\currentversion\run, update=[%APPDATA%]\Microsoft\Windows Update.exe
HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\run, svchost=AB
HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\run, svchost=[%SYSTEM%]\svchostnt.exe
HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\run, svchost=[%PROGRAM_FILES%]\System\svchost.exe
HKEY_CURRENT_USER\software\microsoft\windows\currentversion\run, update=[%APPDATA%]\Win\WindowsUpdate.exe
HKEY_CURRENT_USER\software\microsoft\windows\currentversion\run, scvhost=[%APPDATA%]\install\winlogon.exe
HKEY_CURRENT_USER\software\microsoft\windows\currentversion\run, update=[%WINDOWS%]\SysWOW64\sysanalizer\video.exe
HKEY_CURRENT_USER\software\microsoft\windows\currentversion\run, update=[%APPDATA%]\sysanalizer\video.exe
HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\run, run32=F:\Win\lsass.exe
HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\run, svchost=[%APPDATA%]\local.exe
HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\run, svchost=[%SYSTEM%]\wbem\svchost.exe
HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\run, svchost=svchost.exe
HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\run, svchost=[%SYSTEM%]\v\smss.exe
HKEY_CURRENT_USER\software\microsoft\windows\currentversion\run, update="[%APPDATA%]\Update.exe"
HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\run, svchost=[%SYSTEM%]\svchost\server.exe
HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\run, svchost=[%SYSTEM%]\msoft\svhost.exe
HKEY_CURRENT_USER\software\microsoft\windows\currentversion\run, update=[%SYSTEM_DRIVE%]\Program Files\Internet Explorer\SIGNUP\update.exe
HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\run, svchost=[%SYSTEM%]\1010\svchost.exe
HKEY_CURRENT_USER\software\microsoft\windows\currentversion\run, update=[%APPDATA%]\explorer.exe
HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\run, svchost=[%WINDOWS%]\mssrvc\svchost.exe
HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\run, svchost=[%WINDOWS%]\security\svchost.exe
HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\run, svchost=[%PROGRAM_FILES%]\Regret\KillMe2.exe
HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\run, svchost=[%SYSTEM%]\svchost.exe
HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\run, svchost=[%SYSTEM%]\wndexec\svchost.exe
HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\run, svchost=[%SYSTEM%]\install\svchost.exe
HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\run, svchost="[%APPDATA%]\Microsoft\svchost.exe"
HKEY_CURRENT_USER\software\microsoft\windows\currentversion\run, scvhost=[%SYSTEM%]\installer\winxp.exe
HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\run, svchost=[%SYSTEM%]\MicroSoft\Windows Update.exe
HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\run, svchost=[%SYSTEM_DRIVE%]\Documents and Settings\Steve\Application Data\Microsoft\svchost.exe
HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\run, svchost=[%APPDATA%]\install\svchost.exe
HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\run, svchost=[%PROGRAM_FILES%]\Internet Explorer\svchost.exe
HKEY_CURRENT_USER\software\microsoft\windows\currentversion\run, update=[%APPDATA%]\Microsoft\10361508_Windows Media Centre.exe
HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\run, svchost=[%SYSTEM_DRIVE%]\Spywise\svchost.exe
HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\run, svchost="[%WINDOWS%]\addins\svchost.exe"
HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\run, svchost=[%SYSTEM%]\config\systemprofile\AppData\Roaming\Microsoft\svchost.exe
HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\run, svchost=[%SYSTEM_DRIVE%]\Users\doneil\AppData\Roaming\Microsoft\svchost.exe
HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\run, svchost=[%SYSTEM%]\Conexion.exe
HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\run, svchost=[%SYSTEM%]\wscrss\iexplorer.exe
HKEY_CURRENT_USER\software\microsoft\windows\currentversion\run, update=[%LOCAL_APPDATA%]\Microsoft\Windows\Themes\Windows.exe
HKEY_CURRENT_USER\software\microsoft\windows\currentversion\run, scvhost=[%SYSTEM_DRIVE%]\scvhost.exe
HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\run, svchost=[%SYSTEM%]\Windows\Svchost.exe
HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\run, svchost=[%APPDATA%]\svchost\svchost.exe
HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\run, svchost=[%WINDOWS%]\regedit\svchost.exe
HKEY_CURRENT_USER\software\microsoft\windows\currentversion\run, scvhost=[%SYSTEM%]\scvhost.exe
HKEY_CURRENT_USER\software\microsoft\windows\currentversion\run, update=[%LOCAL_APPDATA%]\Update Windows.exe
HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\run, svchost=[%SYSTEM_DRIVE%]\appmsgr\svchost.exe
HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\run, svchost=[%APPDATA%]\system\svchost.exe
HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\run, svchost=[%PROGRAM_FILES%]\msgmsn\svchost.exe
HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\run, svchost="[%PROGRAM_FILES%]\EZPlus2010\svchost.exe"
HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\run, svchost=[%PROGRAM_FILES_COMMON%]\svchost.exe
HKEY_CURRENT_USER\software\microsoft\windows\currentversion\run, update=[%APPDATA%]\Update\Windows Update.exe
HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\run, svchost=[%PROFILE_TEMP%]\88641.exe
HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\run, svchost=[%WINDOWS%]\winhost.exe
HKEY_CURRENT_USER\software\microsoft\windows\currentversion\run, update=hoirg.exe
HKEY_CURRENT_USER\software\microsoft\windows\currentversion\run, update=[%APPDATA%]\update\runtime.exe
HKEY_CURRENT_USER\software\microsoft\windows\currentversion\run, update=[%APPDATA%]\CriticalUpdate.exe
HKEY_LOCAL_MACHINE\software\microsoft\internet explorer\main, xmllibadutid=1117753046
HKEY_LOCAL_MACHINE\software\microsoft\internet explorer\main, xmllibbnxt=1117756678
HKEY_LOCAL_MACHINE\software\microsoft\internet explorer\main, xmllibid=479301722
HKEY_LOCAL_MACHINE\software\microsoft\internet explorer\main, xmllibiftid=1117753178
HKEY_LOCAL_MACHINE\software\microsoft\internet explorer\main, xmllibreg=1
HKEY_LOCAL_MACHINE\software\microsoft\internet explorer\main, xmllibutid=1117925478
HKEY_CURRENT_USER\software\microsoft\windows\currentversion\run, scvhost=[%APPDATA%]\scvhost\scvhosts.exe
HKEY_CURRENT_USER\software\microsoft\windows\currentversion\run, scvhost=[%APPDATA%]\scvhost\scvhost.exe
HKEY_CURRENT_USER\software\microsoft\windows\currentversion\run, update=[%WINDOWS%]\taskmgr.exe
HKEY_CURRENT_USER\software\microsoft\windows\currentversion\run, scvhost=[%APPDATA%]\system32\server.exe.exe
HKEY_CURRENT_USER\software\microsoft\internet explorer\main, search bar=http://w-find.com/sp.htm
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run, SVCHOST=[%PROFILE%]\WINDOWS\svchost.exe
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run, svchost=[%PROGRAM_FILES%]\Internet Explorer\Setup\svchost.exe
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run, svchost=[%PROGRAM_FILES_COMMON%]\Microsoft Shared\web server extensions\40\bots\vinavbar\svchost.exe
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run, SVCHOST=[%STARTUP%]\svchost.exe
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run, SVCHOST=[%SYSTEM%]\pldnbvbdom\svchost.exe
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run, SVCHOST=[%WINDOWS%]\MDM.EXE
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run, svchost=[%WINDOWS%]\svchost.exe
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run, SVCHOST=[%WINDOWS%]\system\svhost.exe
HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\run, svchost=
HKEY_CLASSES_ROOT\protocols\filter\text/html, clsid={71bafe05-b6c5-49db-9c61-397a60343877}
HKEY_CLASSES_ROOT\protocols\filter\text/plain, clsid={71bafe05-b6c5-49db-9c61-397a60343877}
HKEY_CURRENT_USER\software\microsoft\internet explorer\main, default_page_url=http://12cha.com
HKEY_CURRENT_USER\software\microsoft\internet explorer\main, first home page=http://12cha.com
HKEY_CURRENT_USER\software\microsoft\internet explorer\main, local page=http://12cha.com
HKEY_CURRENT_USER\software\microsoft\internet explorer\main, search bar=http://w-find.com/sp.htm
HKEY_CURRENT_USER\software\microsoft\internet explorer\main, start page=http://12cha.com
HKEY_CURRENT_USER\software\microsoft\internet explorer\main, start page=http://www.ricerchefacili.com
HKEY_CURRENT_USER\software\microsoft\windows\currentversion\run, ieengine=
HKEY_CURRENT_USER\software\microsoft\windows\currentversion\run, jopa=
HKEY_CURRENT_USER\software\microsoft\windows\currentversion\run, microsoft windows driver=
HKEY_CURRENT_USER\software\microsoft\windows\currentversion\run, romahere=
HKEY_CURRENT_USER\software\microsoft\windows\currentversion\run, scvhost=
HKEY_CURRENT_USER\software\microsoft\windows\currentversion\run, smssu=
HKEY_CURRENT_USER\software\microsoft\windows\currentversion\run, spywareguard=
HKEY_CURRENT_USER\software\microsoft\windows\currentversion\run, tmntsrv32=
HKEY_CURRENT_USER\software\microsoft\windows\currentversion\run, users system=
HKEY_CURRENT_USER\software\microsoft\windows\currentversion\runonce, hipewr5.exe=
HKEY_CURRENT_USER\software\microsoft\windows\currentversion\runonce, sounddrv=
HKEY_CURRENT_USER\software\microsoft\windows\currentversion\runservices, users system=
HKEY_LOCAL_MACHINE\software\microsoft\active setup\installed components\{524d5441-544e-524e-562d-474145575241}, isinstalled=
HKEY_LOCAL_MACHINE\software\microsoft\active setup\installed components\{524d5441-544e-524e-562d-474145575241}, stubpath=
HKEY_LOCAL_MACHINE\software\microsoft\internet explorer\main, default_page_url=http://12cha.com
HKEY_LOCAL_MACHINE\software\microsoft\internet explorer\main, first home page=http://12cha.com
HKEY_LOCAL_MACHINE\software\microsoft\internet explorer\main, local page=http://12cha.com
HKEY_LOCAL_MACHINE\software\microsoft\internet explorer\main, start page=http://12cha.com
HKEY_LOCAL_MACHINE\software\microsoft\internet explorer\main, xmllibadutid=
HKEY_LOCAL_MACHINE\software\microsoft\internet explorer\main, xmllibbnxt=
HKEY_LOCAL_MACHINE\software\microsoft\internet explorer\main, xmllibid=
HKEY_LOCAL_MACHINE\software\microsoft\internet explorer\main, xmllibiftid=
HKEY_LOCAL_MACHINE\software\microsoft\internet explorer\main, xmllibreg=
HKEY_LOCAL_MACHINE\software\microsoft\internet explorer\main, xmllibutid=
HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\run, 88rj236rel=
HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\run, jopa=
HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\run, loadewxd=
HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\run, mstss=[%PROGRAM_FILES%]\sysobjectsex\mstss.exe
HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\run, ntldr=
HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\run, romahere=
HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\run, run32=
HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\run, soundmx=
HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\run, sysa=
HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\run, syspnp=
HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\run, usb=[%SYSTEM%]\sass.exe
HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\run, winupd=
HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\run, www.looksoft.net.exe=
HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\runonce, hipewr5.exe=
HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\runonce, jw09tin.exe=
HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\runservices, dnscache=

Scan your system registry for FREE

CURIOLAB S.M.B.A., Amagertorv 15, 2, 1160 Copenhagen K, Denmark, +45.36965533