Top 10 virus alerts

Top 100 List...

Latest 10 malware files

Latest Files List...

Testimonials

You guys are freakin' awesome, love the program, love the personalized service, and my pc loves it too :D

Justin S.

More ...

Vundo (Virtumondo) Registry Values

Scan your Windows registry for Vundo (Virtumondo)

HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run, effgdbsys=rundll32.exe "vttutq.dll",DllRegisterServer
HKEY_USERS\.DEFAULT\SOFTWARE\Microsoft\Windows\CurrentVersion\Run, gedawxsys=rundll32.exe "vttutq.dll",DllRegisterServer
HKEY_USERS\S-1-5-18\SOFTWARE\Microsoft\Windows\CurrentVersion\Run, gedawxsys=rundll32.exe "vttutq.dll",DllRegisterServer
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run, opopnlsys=rundll32.exe "vttutq.dll",DllRegisterServer
HKEY_USERS\.DEFAULT\SOFTWARE\Microsoft\Windows\CurrentVersion\Run, tuvurqsys=rundll32.exe "vttutq.dll",DllRegisterServer
HKEY_USERS\S-1-5-18\SOFTWARE\Microsoft\Windows\CurrentVersion\Run, tuvurqsys=rundll32.exe "vttutq.dll",DllRegisterServer
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Run, MSSMSGS=rundll32.exe winpdj32.rom,YBDKgiJV
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run, gasokiyul=Rundll32.exe "[%SYSTEM%]\fidofepu.dll",a
HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Explorer\SharedTaskScheduler, {e78039ea-9b6a-4ab3-86bf-7b402504b244}=mujuzedij
HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\ShellServiceObjectDelayLoad, telahoyor={e78039ea-9b6a-4ab3-86bf-7b402504b244}
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Run, MSSMSGS=rundll32.exe winrzy32.rom,WXaQupIKOO
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\ShellExecuteHooks, {0af6f4c1-a419-4eed-ba4e-cbf12a16adfe}=
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Run, MSSMSGS=rundll32.exe winguc32.rom,vwAcsMKgnw
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run, kojejeloj=Rundll32.exe "[%SYSTEM%]\maligoha.dll",a
HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Explorer\SharedTaskScheduler, {dd6db3ea-887d-448b-911d-d254e7e38e05}=jugezatag
HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\ShellServiceObjectDelayLoad, lojugenov={dd6db3ea-887d-448b-911d-d254e7e38e05}
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run, zakisoruyo=Rundll32.exe "fuwoduke.dll",s
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Run, zakisoruyo=Rundll32.exe "fuwoduke.dll",s
HKEY_USERS\.DEFAULT\SOFTWARE\Microsoft\Windows\CurrentVersion\Run, zakisoruyo=Rundll32.exe "fuwoduke.dll",s
HKEY_USERS\S-1-5-18\SOFTWARE\Microsoft\Windows\CurrentVersion\Run, zakisoruyo=Rundll32.exe "fuwoduke.dll",s
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run, Lzusi=rundll32.exe "[%WINDOWS%]\akuqiyal.dll",Startup
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Run, lubutodobe=Rundll32.exe "bowarago.dll",s
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run, bogeseweg=Rundll32.exe "[%SYSTEM%]\mitihuho.dll",a
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run, vttuutdrv=rundll32.exe "byywxv.dll",s
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Run, iiiihedrv=rundll32.exe "byywxv.dll",s
HKEY_USERS\.DEFAULT\SOFTWARE\Microsoft\Windows\CurrentVersion\Run, urroopdrv=rundll32.exe "byywxv.dll",s
HKEY_USERS\S-1-5-18\SOFTWARE\Microsoft\Windows\CurrentVersion\Run, urroopdrv=rundll32.exe "byywxv.dll",s
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run, vttsspsys=rundll32.exe "vttutq.dll",DllRegisterServer
HKEY_USERS\.DEFAULT\SOFTWARE\Microsoft\Windows\CurrentVersion\Run, ljiifdsys=rundll32.exe "vttutq.dll",DllRegisterServer
HKEY_USERS\S-1-5-18\SOFTWARE\Microsoft\Windows\CurrentVersion\Run, ljiifdsys=rundll32.exe "vttutq.dll",DllRegisterServer
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run, ljghiidrv=rundll32.exe "hgdded.dll",s
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Run, wvturpdrv=rundll32.exe "hgdded.dll",s
HKEY_USERS\.DEFAULT\SOFTWARE\Microsoft\Windows\CurrentVersion\Run, qommnldrv=rundll32.exe "hgdded.dll",s
HKEY_USERS\.DEFAULT\SOFTWARE\Microsoft\Windows\CurrentVersion\Run, efdeeddrv=rundll32.exe "byywxv.dll",s
HKEY_USERS\S-1-5-18\SOFTWARE\Microsoft\Windows\CurrentVersion\Run, qommnldrv=rundll32.exe "hgdded.dll",s
HKEY_USERS\S-1-5-18\SOFTWARE\Microsoft\Windows\CurrentVersion\Run, efdeeddrv=rundll32.exe "byywxv.dll",s
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run, ljkjjisys=rundll32.exe "vttutq.dll",DllRegisterServer
HKEY_USERS\.DEFAULT\SOFTWARE\Microsoft\Windows\CurrentVersion\Run, opopqpsys=rundll32.exe "vttutq.dll",DllRegisterServer
HKEY_USERS\S-1-5-18\SOFTWARE\Microsoft\Windows\CurrentVersion\Run, opopqpsys=rundll32.exe "vttutq.dll",DllRegisterServer
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run, wvtqomsys=rundll32.exe "vttutq.dll",DllRegisterServer
HKEY_USERS\.DEFAULT\SOFTWARE\Microsoft\Windows\CurrentVersion\Run, dddecasys=rundll32.exe "vttutq.dll",DllRegisterServer
HKEY_USERS\S-1-5-18\SOFTWARE\Microsoft\Windows\CurrentVersion\Run, dddecasys=rundll32.exe "vttutq.dll",DllRegisterServer
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run, suleyeweb=Rundll32.exe "[%SYSTEM%]\sosazeri.dll",a
HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Explorer\SharedTaskScheduler, {cf6f28c7-ee5c-4e7a-a441-24fbedddccb7}=kupuhivus
HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\ShellServiceObjectDelayLoad, gujuyuwep={cf6f28c7-ee5c-4e7a-a441-24fbedddccb7}
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run, zpbosw=RUNDLL32.EXE [%SYSTEM%]\msehbxny.dll,w
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Run, dddbcadrv=rundll32.exe "urrqro.dll",s
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Run, mlmlmksys=rundll32.exe "khiihf.dll",DllRegisterServer
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run, 18a4cec6=rundll32.exe "[%SYSTEM%]\popefuha.dll",b
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run, xfencx=RUNDLL32.EXE [%SYSTEM%]\msexxynm.dll,w
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run, MSServer=rundll32.exe [%SYSTEM%]\jkkHAsPf.dll,#1
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Run, MSServer=rundll32.exe [%PROFILE_TEMP%]\wVPgDVmj.dll,#1
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run, nolitamug=Rundll32.exe "[%SYSTEM%]\lilayeti.dll",a
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run, zedazenayi=Rundll32.exe "veriwada.dll",s
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Run, zedazenayi=Rundll32.exe "veriwada.dll",s
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Run, MSSMSGS=rundll32.exe winfpw32.rom,sTovUxOnTHk
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Run, MSSMSGS=rundll32.exe winrxo32.rom,rbtmnRGVaCx
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run, Xsevibugo=rundll32.exe "[%WINDOWS%]\ukunalepetiyo.dll",Startup
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Run, kihilarow=Rundll32.exe "[%COMMON_APPDATA%]\zimuroha\zimuroha.dll",a
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Run, MSSMSGS=rundll32.exe winqre32.rom,JaQjqAV
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Run, MSSMSGS=rundll32.exe winjef32.rom,eGwdahSAxXCe
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Run, cmds=rundll32.exe [%PROFILE_TEMP%]\ddcDvsTk.dll,c
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Run, MSSMSGS=rundll32.exe winjes32.rom,DDyLQZak
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run, Xyelox=rundll32.exe "[%WINDOWS%]\exiwafonutul.dll",Startup
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run, mepayeyal=Rundll32.exe "[%SYSTEM%]\lodayija.dll",a
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Run, MSSMSGS=rundll32.exe winqcc32.rom,MnpNiWXPlWp
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run, wvtqqodrv=rundll32.exe "awwwtq.dll",s
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Run, jkhfgfdrv=rundll32.exe "awwwtq.dll",s
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run, ssqrsrsys=rundll32.exe "jkklll.dll",DllRegisterServer
HKEY_USERS\.DEFAULT\SOFTWARE\Microsoft\Windows\CurrentVersion\Run, tusttusys=rundll32.exe "jkklll.dll",DllRegisterServer
HKEY_USERS\S-1-5-18\SOFTWARE\Microsoft\Windows\CurrentVersion\Run, tusttusys=rundll32.exe "jkklll.dll",DllRegisterServer
HKEY_USERS\.DEFAULT\SOFTWARE\Microsoft\Windows\CurrentVersion\Run, jejaneguji=Rundll32.exe "[%SYSTEM%]\dogatidi.dll",s
HKEY_USERS\S-1-5-18\SOFTWARE\Microsoft\Windows\CurrentVersion\Run, jejaneguji=Rundll32.exe "[%SYSTEM%]\dogatidi.dll",s
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run, Cyuyorojewu=rundll32.exe "[%WINDOWS%]\esadubadi.dll",Startup
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Run, MSSMSGS=rundll32.exe winfcb32.rom,RnBIxcZIL
HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Explorer\SharedTaskScheduler, {bd0e16e1-fb55-4dc0-84bf-db7787498f07}=gahurihor
HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\ShellServiceObjectDelayLoad, gibovemug={bd0e16e1-fb55-4dc0-84bf-db7787498f07}
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Internet Explorer\Toolbar, {12F02779-6D88-4958-8AD3-83C12D86ADC7}=00
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run, CPM374f7f07=Rundll32.exe "[%SYSTEM%]\husugudi.dll",a
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run, 347c4c9b=rundll32.exe "[%SYSTEM%]\sipayado.dll",b
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run, 44f6f82d=rundll32.exe "[%SYSTEM%]\mpnfvvao.dll",b
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Run, MSSMSGS=rundll32.exe winioa32.rom,JFALUWGHYvvF
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Run, MSSMSGS=rundll32.exe winnuj32.rom,NrBAYqNxe
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run, lipurehey=Rundll32.exe "[%SYSTEM%]\rojayefi.dll",a
HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Explorer\SharedTaskScheduler, {72c9e2cf-7eb8-438f-bde5-2b0853b9a396}=tokatiluy
HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\ShellServiceObjectDelayLoad, fanozapuv={72c9e2cf-7eb8-438f-bde5-2b0853b9a396}
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run, kevekakijo=Rundll32.exe "jujijano.dll",s
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run, nejujatal=Rundll32.exe "[%SYSTEM%]\getaviwi.dll",a
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run, huzapoziv=Rundll32.exe "[%SYSTEM%]\bojitoya.dll",a
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run, maladozawe=Rundll32.exe "towefuzu.dll",s
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\ShellExecuteHooks, {e908a6a7-026c-4fbe-93a9-96020beead53}=
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run, SecurityUpdate=rundll32.exe [%SYSTEM%]\wcamcvj.dll,TurnOn2
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Run, MSSMSGS=rundll32.exe winxnz32.rom,yXmCpCijS
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run, Ckubedu=rundll32.exe "[%WINDOWS%]\acagasuti.dll",Startup
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Run, MSSMSGS=rundll32.exe winpdc32.rom,HObXMPnn
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Run, MSServer=rundll32.exe [%PROFILE_TEMP%]\mljjGVlj.dll,#1
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Run, MSSMSGS=rundll32.exe winnuj32.rom,EkOmSNsmIhKH
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Run, MSSMSGS=rundll32.exe winvsh32.rom,CTHPmCkPHcI
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run, mepayeyal=Rundll32.exe "[%SYSTEM%]\pasugusa.dll",a
HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Explorer\SharedTaskScheduler, {53e62185-8acd-4bad-814c-020932b37614}=kupuhivus
HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\ShellServiceObjectDelayLoad, rukinahuh={53e62185-8acd-4bad-814c-020932b37614}
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\ShellExecuteHooks, {099AC52C-1CD4-434C-9CC6-FF56DABB5010}=
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run, uehaxo=RUNDLL32.EXE [%SYSTEM%]\msqmlkrl.dll,w
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run, 643f61d4=rundll32.exe "[%SYSTEM%]\tbopctfj.dll",b
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run, ssrrsqsys=rundll32.exe "opmnom.dll",DllRegisterServer
HKEY_USERS\.DEFAULT\SOFTWARE\Microsoft\Windows\CurrentVersion\Run, ljihijsys=rundll32.exe "opmnom.dll",DllRegisterServer
HKEY_USERS\S-1-5-18\SOFTWARE\Microsoft\Windows\CurrentVersion\Run, ljihijsys=rundll32.exe "opmnom.dll",DllRegisterServer
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run, nnmmkjdrv=rundll32.exe "yaxvtu.dll",s
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run, effeffdrv=rundll32.exe "khecaa.dll",s
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run, awuvutdrv=rundll32.exe "efcyvs.dll",s
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run, vtuspmdrv=rundll32.exe "rqpmjg.dll",s
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run, ssromndrv=rundll32.exe "hgghhh.dll",s
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run, nnmlmndrv=rundll32.exe "qomkih.dll",s
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Run, ljifcddrv=rundll32.exe "yaxvtu.dll",s
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Run, cbxwtudrv=rundll32.exe "khecaa.dll",s
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Run, tustqqdrv=rundll32.exe "efcyvs.dll",s
HKEY_USERS\.DEFAULT\SOFTWARE\Microsoft\Windows\CurrentVersion\Run, urpoondrv=rundll32.exe "khecaa.dll",s
HKEY_USERS\.DEFAULT\SOFTWARE\Microsoft\Windows\CurrentVersion\Run, kheebbdrv=rundll32.exe "efcyvs.dll",s
HKEY_USERS\.DEFAULT\SOFTWARE\Microsoft\Windows\CurrentVersion\Run, fcbxwtdrv=rundll32.exe "rqpmjg.dll",s
HKEY_USERS\.DEFAULT\SOFTWARE\Microsoft\Windows\CurrentVersion\Run, fccywtdrv=rundll32.exe "hgghhh.dll",s
HKEY_USERS\S-1-5-18\SOFTWARE\Microsoft\Windows\CurrentVersion\Run, urpoondrv=rundll32.exe "khecaa.dll",s
HKEY_USERS\S-1-5-18\SOFTWARE\Microsoft\Windows\CurrentVersion\Run, kheebbdrv=rundll32.exe "efcyvs.dll",s
HKEY_USERS\S-1-5-18\SOFTWARE\Microsoft\Windows\CurrentVersion\Run, fcbxwtdrv=rundll32.exe "rqpmjg.dll",s
HKEY_USERS\S-1-5-18\SOFTWARE\Microsoft\Windows\CurrentVersion\Run, fccywtdrv=rundll32.exe "hgghhh.dll",s
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run, ljgdddsys=rundll32.exe "ursrop.dll",DllRegisterServer
HKEY_USERS\.DEFAULT\SOFTWARE\Microsoft\Windows\CurrentVersion\Run, ljiighsys=rundll32.exe "ursrop.dll",DllRegisterServer
HKEY_USERS\S-1-5-18\SOFTWARE\Microsoft\Windows\CurrentVersion\Run, ljiighsys=rundll32.exe "ursrop.dll",DllRegisterServer
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run, gameyifelo=Rundll32.exe "[%SYSTEM%]\zijotijo.dll",s
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run, Vramosexasuxomo=rundll32.exe "[%WINDOWS%]\eriyetuk.dll",Startup
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run, wepodahure=Rundll32.exe "[%SYSTEM%]\yovopepa.dll",s
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Run, MSSMSGS=rundll32.exe winjfb32.rom,ZKSLNIUD
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run, Jnefoxisi=rundll32.exe "[%WINDOWS%]\araxehiza.dll",Startup
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Run, MSSMSGS=rundll32.exe winigi32.rom,afmWJt
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Run, fcbcawdrv=rundll32.exe "urrqro.dll",s
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Run, nnkhghsys=rundll32.exe "khiihf.dll",DllRegisterServer
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run-, xfencx=RUNDLL32.EXE [%SYSTEM%]\msexxynm.dll,w
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Run, nnmnomdrv=rundll32.exe "yaxvtu.dll",s
HKEY_USERS\.DEFAULT\SOFTWARE\Microsoft\Windows\CurrentVersion\Run, iiiihfdrv=rundll32.exe "yaxvtu.dll",s
HKEY_USERS\S-1-5-18\SOFTWARE\Microsoft\Windows\CurrentVersion\Run, iiiihfdrv=rundll32.exe "yaxvtu.dll",s
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run, vttrspsys=rundll32.exe "ursrop.dll",DllRegisterServer
HKEY_USERS\.DEFAULT\SOFTWARE\Microsoft\Windows\CurrentVersion\Run, ursqonsys=rundll32.exe "ursrop.dll",DllRegisterServer
HKEY_USERS\S-1-5-18\SOFTWARE\Microsoft\Windows\CurrentVersion\Run, ursqonsys=rundll32.exe "ursrop.dll",DllRegisterServer
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\ShellExecuteHooks, {4ec66e48-b863-4413-bc91-463d9cca093b}=
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\ShellExecuteHooks, {e3ab1349-922f-4cd9-b6f2-b189d9b6bb98}=
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Run, MSSMSGS=rundll32.exe winxpa32.rom,dwnQVORiEiic
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run, geefffsys=rundll32.exe "opmnom.dll",DllRegisterServer
HKEY_USERS\.DEFAULT\SOFTWARE\Microsoft\Windows\CurrentVersion\Run, pmnkkhsys=rundll32.exe "opmnom.dll",DllRegisterServer
HKEY_USERS\S-1-5-18\SOFTWARE\Microsoft\Windows\CurrentVersion\Run, pmnkkhsys=rundll32.exe "opmnom.dll",DllRegisterServer
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run, qonlljsys=rundll32.exe "opmnom.dll",DllRegisterServer
HKEY_USERS\.DEFAULT\SOFTWARE\Microsoft\Windows\CurrentVersion\Run, ljkkihsys=rundll32.exe "opmnom.dll",DllRegisterServer
HKEY_USERS\S-1-5-18\SOFTWARE\Microsoft\Windows\CurrentVersion\Run, ljkkihsys=rundll32.exe "opmnom.dll",DllRegisterServer
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run, iihheddrv=rundll32.exe "hgfcba.dll",s
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Run, nnoolldrv=rundll32.exe "hgfcba.dll",s
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run, tuvtspsys=rundll32.exe "opmnom.dll",DllRegisterServer
HKEY_USERS\.DEFAULT\SOFTWARE\Microsoft\Windows\CurrentVersion\Run, opqpqpsys=rundll32.exe "opmnom.dll",DllRegisterServer
HKEY_USERS\S-1-5-18\SOFTWARE\Microsoft\Windows\CurrentVersion\Run, opqpqpsys=rundll32.exe "opmnom.dll",DllRegisterServer
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Run, MSSMSGS=rundll32.exe winjfb32.rom,byZNYRlFBgT
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run, jofisugena=Rundll32.exe "[%SYSTEM%]\nonabefa.dll",s
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run, Ffufi=rundll32.exe "[%WINDOWS%]\opokixuy.dll",Startup
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Run, MSSMSGS=rundll32.exe winbwh32.rom,iUQyiBHrP
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run, d81ff562=rundll32.exe "[%SYSTEM%]\jhehwnnj.dll",b
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run, BMdb2cc6fe=Rundll32.exe "[%SYSTEM%]\wfsfeqwp.dll",s
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run, ljiifgdrv=rundll32.exe "hgdbcc.dll",s
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Run, opqnkidrv=rundll32.exe "hgdbcc.dll",s
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run, mlkkhesys=rundll32.exe "opmnom.dll",DllRegisterServer
HKEY_USERS\.DEFAULT\SOFTWARE\Microsoft\Windows\CurrentVersion\Run, ddabaasys=rundll32.exe "opmnom.dll",DllRegisterServer
HKEY_USERS\S-1-5-18\SOFTWARE\Microsoft\Windows\CurrentVersion\Run, ddabaasys=rundll32.exe "opmnom.dll",DllRegisterServer
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run, yaaxxysys=rundll32.exe "opmnom.dll",DllRegisterServer
HKEY_USERS\.DEFAULT\SOFTWARE\Microsoft\Windows\CurrentVersion\Run, qopmllsys=rundll32.exe "opmnom.dll",DllRegisterServer
HKEY_USERS\S-1-5-18\SOFTWARE\Microsoft\Windows\CurrentVersion\Run, qopmllsys=rundll32.exe "opmnom.dll",DllRegisterServer
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run, mepayeyal=Rundll32.exe "[%SYSTEM%]\lomodefi.dll",a
HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Explorer\SharedTaskScheduler, {ea47dc27-b879-4468-ac19-b66ec249c65f}=tokatiluy
HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\ShellServiceObjectDelayLoad, wadodogev={ea47dc27-b879-4468-ac19-b66ec249c65f}
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run, wihofefih=Rundll32.exe "[%SYSTEM%]\zepepewa.dll",a
HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Explorer\SharedTaskScheduler, {72437862-d475-4f28-a201-862a9af000ea}=kupuhivus
HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\ShellServiceObjectDelayLoad, duseniret={72437862-d475-4f28-a201-862a9af000ea}
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Run, MSSMSGS=rundll32.exe winilr32.rom,kBKdRsJTsM
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run, Bnawo=rundll32.exe "[%WINDOWS%]\eyexuyir.dll",Startup
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\ShellExecuteHooks, {22e58089-6db5-45d9-bf87-6c8975246d26}=
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run, Ykegudulige=rundll32.exe "[%WINDOWS%]\ehezusuqikuw.dll",Startup
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Run, MSSMSGS=rundll32.exe winvhi32.rom,xMHeoitni
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run, swsimi=RUNDLL32.EXE [%SYSTEM%]\mszyplcq.dll,w
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Run, MSSMSGS=rundll32.exe wintvo32.rom,QjKFuizgVnJ
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Run, MSSMSGS=rundll32.exe winohf32.rom,oRaPUtnC
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Run-, MSSMSGS=rundll32.exe wintxr32.rom,bhmaGZS
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Run, MSSMSGS=rundll32.exe winqre32.rom,opxFtskMGJ
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run, hofagowah=Rundll32.exe "[%SYSTEM%]\wajivegu.dll",a
HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Explorer\SharedTaskScheduler, {1a8a9be6-55fa-4f05-a9bd-967e330fa9fb}=kupuhivus
HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\ShellServiceObjectDelayLoad, yuwowirut={1a8a9be6-55fa-4f05-a9bd-967e330fa9fb}
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Run, MSSMSGS=rundll32.exe winjdi32.rom,FCXtlWaB
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run, wihavepoj=Rundll32.exe "[%SYSTEM%]\nurofoyi.dll",a
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run, mepayeyal=Rundll32.exe "[%SYSTEM%]\rudenahe.dll",a
HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Explorer\SharedTaskScheduler, {ac416ded-61ef-49ad-9c81-d3a7fd93945d}=kupuhivus
HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\ShellServiceObjectDelayLoad, tumuvanej={ac416ded-61ef-49ad-9c81-d3a7fd93945d}
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run, mepayeyal=Rundll32.exe "[%SYSTEM%]\marujate.dll",a
HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Explorer\SharedTaskScheduler, {608708da-a476-4d40-ba04-dd7dcdfdc054}=jugezatag
HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\ShellServiceObjectDelayLoad, gojuzuyif={608708da-a476-4d40-ba04-dd7dcdfdc054}
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run, sajuhukif=Rundll32.exe "[%SYSTEM%]\feyisebo.dll",a
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run, fusigutojo=Rundll32.exe "loganoye.dll",s
HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Explorer\SharedTaskScheduler, {5b29ddb2-5610-46ea-806d-cbb9cb923cf7}=kupuhivus
HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\ShellServiceObjectDelayLoad, sukihovip={5b29ddb2-5610-46ea-806d-cbb9cb923cf7}
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run, npjzjb=RUNDLL32.EXE [%SYSTEM%]\mszdltsg.dll,w
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run, rlbjbm=RUNDLL32.EXE [%SYSTEM%]\msxhiejj.dll,w
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run, hofagowah=Rundll32.exe "[%SYSTEM%]\diyohobe.dll",a
HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Explorer\SharedTaskScheduler, {5ee09f87-30f3-4b04-a8d8-de0b3a9705ae}=mujuzedij
HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\ShellServiceObjectDelayLoad, zebijurat={5ee09f87-30f3-4b04-a8d8-de0b3a9705ae}
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run, Ecoqufo=rundll32.exe "[%WINDOWS%]\izepaniy.dll",Startup
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run, Pzoquliwolu=rundll32.exe "[%WINDOWS%]\omoxowalifipul.dll",Startup
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run, nt32.exe=[%SYSTEM%]\nt32.exe
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\ShellExecuteHooks, {a6c54318-5ac7-477d-b0a7-49af5189300c}=
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\ShellExecuteHooks, {97e86a6b-bb35-4e0d-99bc-e8253759e763}=
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Run, MSSMSGS=rundll32.exe wincni32.rom,qALpmKtOl
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Run, MSSMSGS=rundll32.exe winhjn32.rom,kBKdRsJTsM
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Run, MSSMSGS=rundll32.exe winguc32.rom,QNZCtOV
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run, SearchIndexer=rundll32.exe "[%SYSTEM%]\iahhrifv.dll",sitypnow
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\ShellExecuteHooks, {970d022e-a884-4d2a-bb4a-ebc22d2febd2}=
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Run, MSSMSGS=rundll32.exe winsqx32.rom,LVwDdg
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run, Fmawubalikoq=rundll32.exe "[%WINDOWS%]\ewowihepa.dll",Startup
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run, gomayabuk=Rundll32.exe "[%SYSTEM%]\hitivora.dll",a
HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Explorer\SharedTaskScheduler, {c214f2e1-d524-4756-826e-332b3d8c1405}=gahurihor
HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\ShellServiceObjectDelayLoad, sidonipup={c214f2e1-d524-4756-826e-332b3d8c1405}
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run, jiziyonube=Rundll32.exe "finegefo.dll",s
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Run, MSSMSGS=rundll32.exe wincmm32.rom,sigRqIullhVW
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run (Disabled by AnVir), swsimi=RUNDLL32.EXE [%SYSTEM%]\mszyplcq.dll,w
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run, Bgawijoyi=rundll32.exe "[%WINDOWS%]\abixibabud.dll",Startup
HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Run, A00F11DB694.exe=[%PROFILE_TEMP%]\_A00F11DB694.exe
HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Run, A00F420BE5.exe=[%PROFILE_TEMP%]\_A00F420BE5.exe
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Run, MSSMSGS=rundll32.exe winpij32.rom,QgTRUswIft
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run, pesadupog=Rundll32.exe "[%SYSTEM%]\berutehe.dll",a
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run, Bbogewekifen=rundll32.exe "[%WINDOWS%]\ewuqifepuxekuv.dll",Startup
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run, verazihoj=Rundll32.exe "[%SYSTEM%]\kunuzavi.dll",a
HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Explorer\SharedTaskScheduler, {a6293561-9ab5-4bca-972b-7e2bb6d56efb}=jugezatag
HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\ShellServiceObjectDelayLoad, gopulogan={a6293561-9ab5-4bca-972b-7e2bb6d56efb}
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run, hofagowah=Rundll32.exe "[%SYSTEM%]\jolujara.dll",a
HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Explorer\SharedTaskScheduler, {44af65e4-c5ab-4f2f-ae63-8f214427f19d}=tokatiluy
HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\ShellServiceObjectDelayLoad, hahurusiz={44af65e4-c5ab-4f2f-ae63-8f214427f19d}
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run, tebezafoz=Rundll32.exe "[%SYSTEM%]\ruyupuno.dll",a
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run, mekadanar=Rundll32.exe "[%SYSTEM%]\dorebobo.dll",a
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run, Premonaxeh=rundll32.exe "[%WINDOWS%]\otomipusovo.dll",Startup
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run, mepayeyal=Rundll32.exe "[%SYSTEM%]\dowuvedo.dll",a
HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Explorer\SharedTaskScheduler, {f148e37c-8a59-4b78-b55e-382a4568d407}=kupuhivus
HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\ShellServiceObjectDelayLoad, dubinehej={f148e37c-8a59-4b78-b55e-382a4568d407}
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run, BM7fefe868=Rundll32.exe "[%SYSTEM%]\ljhjdqgd.dll",s
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run, Gpigelapelepixox=rundll32.exe "[%WINDOWS%]\osisiwojiyerez.dll",Startup
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run, hibavetaw=Rundll32.exe "[%SYSTEM%]\gahejeyu.dll",a
HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Explorer\SharedTaskScheduler, {2d777d97-9b3c-4226-87e7-fbd661fcabd4}=mujuzedij
HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\ShellServiceObjectDelayLoad, hepizatoz={2d777d97-9b3c-4226-87e7-fbd661fcabd4}
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run, Xtodux=rundll32.exe "[%WINDOWS%]\ewavehami.dll",Startup
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Run, MSSMSGS=rundll32.exe winvhi32.rom,IgUMhRqxPNk
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run, rasufatuh=Rundll32.exe "[%SYSTEM%]\monajole.dll",a
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Run, lodamumoz=Rundll32.exe "[%COMMON_APPDATA%]\buzojoja\buzojoja.dll",a
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Run, kuwuhiyufa=Rundll32.exe "[%COMMON_APPDATA%]\yenojuje\yenojuje.dll",s
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run, hofagowah=Rundll32.exe "[%SYSTEM%]\mamapome.dll",a
HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Explorer\SharedTaskScheduler, {292e8ca0-c4cf-4baa-b190-1ed90444d9d5}=jugezatag
HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\ShellServiceObjectDelayLoad, mojinureg={292e8ca0-c4cf-4baa-b190-1ed90444d9d5}
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run, zutojogod=Rundll32.exe "[%SYSTEM%]\tawaluvu.dll",a
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run, vituwulihe=Rundll32.exe "vuwilamu.dll",s
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run, mepayeyal=Rundll32.exe "[%SYSTEM%]\dejufedu.dll",a
HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Explorer\SharedTaskScheduler, {32143d9a-6e9e-4ee2-a15c-59328e135e94}=jugezatag
HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\ShellServiceObjectDelayLoad, nodikayuf={32143d9a-6e9e-4ee2-a15c-59328e135e94}
HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Explorer\SharedTaskScheduler, {a50eaccd-85a7-46c3-a91c-379fdd45d68d}=kupuhivus
HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\ShellServiceObjectDelayLoad, tudezapit={a50eaccd-85a7-46c3-a91c-379fdd45d68d}
HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Explorer\SharedTaskScheduler, {4294b7ce-1b83-4c4d-9bff-3b1d37225002}=jugezatag
HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\ShellServiceObjectDelayLoad, monasuloj={4294b7ce-1b83-4c4d-9bff-3b1d37225002}
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run, levuromaw=Rundll32.exe "[%SYSTEM%]\palowaru.dll",a
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run, pujoboponu=Rundll32.exe "hojimiru.dll",s
HKEY_USERS\.DEFAULT\SOFTWARE\Microsoft\Windows\CurrentVersion\Run, yotehahese=Rundll32.exe "[%SYSTEM%]\wogiregu.dll",s
HKEY_USERS\S-1-5-18\SOFTWARE\Microsoft\Windows\CurrentVersion\Run, yotehahese=Rundll32.exe "[%SYSTEM%]\wogiregu.dll",s
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Run, MSSMSGS=rundll32.exe winrzy32.rom,XkWfzsBkQxX
HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Run, A00F7C5076.exe=[%PROFILE_TEMP%]\_A00F7C5076.exe
HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Run, A00F2EE5D.exe=[%PROFILE_TEMP%]\_A00F2EE5D.exe
HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Run, A00FC2AD18.exe=[%PROFILE_TEMP%]\_A00FC2AD18.exe
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run, mebawuhow=Rundll32.exe "[%SYSTEM%]\mikomuyo.dll",a
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\ShellExecuteHooks, {a63e645f-13bd-45ed-b15f-6e8c1bd57279}=
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\ShellExecuteHooks, {f1f1537f-671e-41c2-8b7e-c3042f59c7ed}=
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\ShellExecuteHooks, {90f75e47-94d2-48ac-8d32-863356fa6578}=
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run, cc838248=rundll32.exe "[%SYSTEM%]\bcwhaera.dll",b
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run, Dtevivumegedeko=rundll32.exe "[%WINDOWS%]\iqeromazizu.dll",Startup
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Run, MSSMSGS=rundll32.exe winqez32.rom,jhmpYYZv
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run, Nsatoyara=rundll32.exe "[%WINDOWS%]\orureciyozoxu.dll",Startup
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run, zevubahawe=Rundll32.exe "logozama.dll",s
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run, hofagowah=Rundll32.exe "[%SYSTEM%]\yawotana.dll",a
HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Explorer\SharedTaskScheduler, {2077ae7f-e607-4f71-8a90-8f47596ff59e}=mujuzedij
HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\ShellServiceObjectDelayLoad, ferabizel={2077ae7f-e607-4f71-8a90-8f47596ff59e}
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Run, MSSMSGS=rundll32.exe wintvo32.rom,LQJImhEtYfn
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run, lobajepum=Rundll32.exe "[%SYSTEM%]\nesonavo.dll",a
HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Explorer\SharedTaskScheduler, {373ba595-e19c-4bee-b7d8-13cb30ef8c04}=tokatiluy
HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\ShellServiceObjectDelayLoad, rajawotup={373ba595-e19c-4bee-b7d8-13cb30ef8c04}
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run, Etofucadotexa=rundll32.exe "[%WINDOWS%]\otuduyenax.dll",Startup
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run, dagonigin=Rundll32.exe "[%SYSTEM%]\ginuzefa.dll",a
HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Explorer\SharedTaskScheduler, {63726882-84f6-4b28-b2cc-aa34b974c8de}=tokatiluy
HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\ShellServiceObjectDelayLoad, padugusin={63726882-84f6-4b28-b2cc-aa34b974c8de}
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run, Qqubeniqedu=rundll32.exe "[%WINDOWS%]\elarajozapowi.dll",Startup
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\ShellExecuteHooks, {48f0b738-34a6-4113-b966-33c4ef85bcd9}=
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run, Wwumizag=rundll32.exe "[%WINDOWS%]\ikezebaz.dll",Startup
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run, wagediyer=Rundll32.exe "[%SYSTEM%]\jozoyona.dll",a
HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Explorer\SharedTaskScheduler, {3441b138-d9b0-4b6c-b4b6-63c904422d8b}=kupuhivus
HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\ShellServiceObjectDelayLoad, zuguponih={3441b138-d9b0-4b6c-b4b6-63c904422d8b}
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run, kayuhanen=Rundll32.exe "[%SYSTEM%]\bozuhanu.dll",a
HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Explorer\SharedTaskScheduler, {8ad6e214-759b-42d6-8aad-f4dc31b53bce}=tokatiluy
HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\ShellServiceObjectDelayLoad, papukiguj={8ad6e214-759b-42d6-8aad-f4dc31b53bce}
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run, geeefedrv=rundll32.exe "geddba.dll",s
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Run, tutusqdrv=rundll32.exe "geddba.dll",s
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run, byvttsdrv=rundll32.exe "wvvspq.dll",s
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Run, kheedddrv=rundll32.exe "wvvspq.dll",s
HKEY_USERS\.DEFAULT\SOFTWARE\Microsoft\Windows\CurrentVersion\Run, qopnondrv=rundll32.exe "geddba.dll",s
HKEY_USERS\.DEFAULT\SOFTWARE\Microsoft\Windows\CurrentVersion\Run, cbbxxwdrv=rundll32.exe "wvvspq.dll",s
HKEY_USERS\S-1-5-18\SOFTWARE\Microsoft\Windows\CurrentVersion\Run, qopnondrv=rundll32.exe "geddba.dll",s
HKEY_USERS\S-1-5-18\SOFTWARE\Microsoft\Windows\CurrentVersion\Run, cbbxxwdrv=rundll32.exe "wvvspq.dll",s
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run, geeccysys=rundll32.exe "opmmji.dll",DllRegisterServer
HKEY_USERS\.DEFAULT\SOFTWARE\Microsoft\Windows\CurrentVersion\Run, tusrqqsys=rundll32.exe "opmmji.dll",DllRegisterServer
HKEY_USERS\S-1-5-18\SOFTWARE\Microsoft\Windows\CurrentVersion\Run, tusrqqsys=rundll32.exe "opmmji.dll",DllRegisterServer
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run, Bdabanisapamotet=rundll32.exe "[%WINDOWS%]\ogunogew.dll",Startup
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Run, tutssqsys=rundll32.exe "[%PROFILE_TEMP%]\hggdcb.dll",DllRegisterServer
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Run, cmds=rundll32.exe [%PROFILE_TEMP%]\yayaWnME.dll,c
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run, hofagowah=Rundll32.exe "[%SYSTEM%]\hepinomu.dll",a
HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Explorer\SharedTaskScheduler, {16fa317e-c5ff-4d47-9542-4e7c7f4b45f4}=jugezatag
HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\ShellServiceObjectDelayLoad, honiwidid={16fa317e-c5ff-4d47-9542-4e7c7f4b45f4}
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Run, MSSMSGS=rundll32.exe wineez32.rom,pDsDLnaGPn
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run, Hhocoqaxacod=rundll32.exe "[%WINDOWS%]\iyeyuzubizebufis.dll",Startup
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run, CPM37c0e552=Rundll32.exe "[%SYSTEM%]\fejolave.dll",a
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Run, MSSMSGS=rundll32.exe winjes32.rom,XIspKg
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run, Pzasuko=rundll32.exe "[%WINDOWS%]\otuwapafiqemaqa.dll",Startup
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Run, sayurekite=Rundll32.exe "[%COMMON_APPDATA%]\yibavisu\yibavisu.dll",s
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\ShellExecuteHooks, {bbb05d9e-0297-404d-a6bf-d8f2876b84a6}=
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\ShellExecuteHooks, {dd3ec823-d3a1-48b3-a18a-a1958795a18a}=
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\ShellExecuteHooks, {bd3c6f7c-6c8d-48f6-ac52-5e4071aeb257}=
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\ShellExecuteHooks, {dabb1c43-1596-49c4-9e4d-51ae7a1518bb}=
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run, nuvevegod=Rundll32.exe "[%SYSTEM%]\pinapuwe.dll",a
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run, Gfatufom=rundll32.exe "[%WINDOWS%]\ujakapak.dll",Startup
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run, Bxuhaqudeneno=rundll32.exe "[%WINDOWS%]\exotekud.dll",Startup
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Run, MSSMSGS=rundll32.exe winqdd32.rom,WJOfUtmXzIO
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run, fcccyysys=rundll32.exe "tuturq.dll",DllRegisterServer
HKEY_USERS\.DEFAULT\SOFTWARE\Microsoft\Windows\CurrentVersion\Run, rqpqqqsys=rundll32.exe "tuturq.dll",DllRegisterServer
HKEY_USERS\S-1-5-18\SOFTWARE\Microsoft\Windows\CurrentVersion\Run, rqpqqqsys=rundll32.exe "tuturq.dll",DllRegisterServer
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run, xxvurpsys=rundll32.exe "tuturq.dll",DllRegisterServer
HKEY_USERS\.DEFAULT\SOFTWARE\Microsoft\Windows\CurrentVersion\Run, urpmkksys=rundll32.exe "tuturq.dll",DllRegisterServer
HKEY_USERS\S-1-5-18\SOFTWARE\Microsoft\Windows\CurrentVersion\Run, urpmkksys=rundll32.exe "tuturq.dll",DllRegisterServer
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Run, MSSMSGS=rundll32.exe winxnz32.rom,LQJImhEtYfn
HKEY_USERS\.DEFAULT\SOFTWARE\Microsoft\Windows\CurrentVersion\Run, ddbcabdrv=rundll32.exe "rqrppn.dll",s
HKEY_USERS\S-1-5-18\SOFTWARE\Microsoft\Windows\CurrentVersion\Run, ddbcabdrv=rundll32.exe "rqrppn.dll",s
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run, gebxwwsys=rundll32.exe "bywvtt.dll",DllRegisterServer
HKEY_USERS\.DEFAULT\SOFTWARE\Microsoft\Windows\CurrentVersion\Run, pmlmklsys=rundll32.exe "bywvtt.dll",DllRegisterServer
HKEY_USERS\S-1-5-18\SOFTWARE\Microsoft\Windows\CurrentVersion\Run, pmlmklsys=rundll32.exe "bywvtt.dll",DllRegisterServer
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Run, MSSMSGS=rundll32.exe winzfx32.rom,NJeXvllCFLa
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run, Wbawuko=rundll32.exe "[%WINDOWS%]\ayarudanesu.dll",Startup
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run, haputawey=Rundll32.exe "[%SYSTEM%]\gezafuje.dll",a
HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Explorer\SharedTaskScheduler, {ff84d099-0a04-409c-8f5c-bc9d8183b199}=jugezatag
HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\ShellServiceObjectDelayLoad, pohupadud={ff84d099-0a04-409c-8f5c-bc9d8183b199}
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run, sinisavudo=Rundll32.exe "kuhunuze.dll",s
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run, opmjijdrv=rundll32.exe "ssqrsq.dll",s
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Run, hgdccadrv=rundll32.exe "ssqrsq.dll",s
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run, Kqisiheb=rundll32.exe "[%WINDOWS%]\uyelezelag.dll",Startup
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run, lejuvivoh=Rundll32.exe "[%SYSTEM%]\ruwutugu.dll",a
HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Explorer\SharedTaskScheduler, {f5c4622e-7f2f-4908-b6a6-7188d4e4f112}=gahurihor
HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\ShellServiceObjectDelayLoad, biretepey={f5c4622e-7f2f-4908-b6a6-7188d4e4f112}
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run, nozehorune=Rundll32.exe "takavere.dll",s
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run, lobajepum=Rundll32.exe "[%SYSTEM%]\telemize.dll",a
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Run, MSSMSGS=rundll32.exe winpdc32.rom,WJOfUtmXzIO
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run, Local Security Authority Service=[%SYSTEM%]\lssas.exe
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\ShellExecuteHooks, {6a6eae1b-4ad6-4035-974d-504d6dbaa9c3}=
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\ShellExecuteHooks, {007c0568-5eeb-45a1-be86-10aa7beab6bb}=
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run, awuturdrv=rundll32.exe "byyyyx.dll",s
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Run, awwtsrdrv=rundll32.exe "byyyyx.dll",s
HKEY_USERS\.DEFAULT\SOFTWARE\Microsoft\Windows\CurrentVersion\Run, yaayvudrv=rundll32.exe "byyyyx.dll",s
HKEY_USERS\S-1-5-18\SOFTWARE\Microsoft\Windows\CurrentVersion\Run, yaayvudrv=rundll32.exe "byyyyx.dll",s
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run, yaaxyvsys=rundll32.exe "xxvvsr.dll",DllRegisterServer
HKEY_USERS\.DEFAULT\SOFTWARE\Microsoft\Windows\CurrentVersion\Run, qopqonsys=rundll32.exe "xxvvsr.dll",DllRegisterServer
HKEY_USERS\S-1-5-18\SOFTWARE\Microsoft\Windows\CurrentVersion\Run, qopqonsys=rundll32.exe "xxvvsr.dll",DllRegisterServer
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run, iiheffdrv=rundll32.exe "nnmmlm.dll",s
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Run, iiifecdrv=rundll32.exe "nnmmlm.dll",s
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run, ddbcaxdrv=rundll32.exe "byyyyx.dll",s
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Run, yaaxvwdrv=rundll32.exe "byyyyx.dll",s
HKEY_USERS\.DEFAULT\SOFTWARE\Microsoft\Windows\CurrentVersion\Run, khighhdrv=rundll32.exe "byyyyx.dll",s
HKEY_USERS\S-1-5-18\SOFTWARE\Microsoft\Windows\CurrentVersion\Run, khighhdrv=rundll32.exe "byyyyx.dll",s
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run, xxvwtqsys=rundll32.exe "xxvvsr.dll",DllRegisterServer
HKEY_USERS\.DEFAULT\SOFTWARE\Microsoft\Windows\CurrentVersion\Run, efdaxxsys=rundll32.exe "xxvvsr.dll",DllRegisterServer
HKEY_USERS\S-1-5-18\SOFTWARE\Microsoft\Windows\CurrentVersion\Run, efdaxxsys=rundll32.exe "xxvvsr.dll",DllRegisterServer
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run, pmlmkjdrv=rundll32.exe "nnmmlm.dll",s
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Run, wvtutqdrv=rundll32.exe "nnmmlm.dll",s
HKEY_USERS\.DEFAULT\SOFTWARE\Microsoft\Windows\CurrentVersion\Run, ljgfgfdrv=rundll32.exe "nnmmlm.dll",s
HKEY_USERS\S-1-5-18\SOFTWARE\Microsoft\Windows\CurrentVersion\Run, ljgfgfdrv=rundll32.exe "nnmmlm.dll",s
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run, iihiffsys=rundll32.exe "xxvvsr.dll",DllRegisterServer
HKEY_USERS\.DEFAULT\SOFTWARE\Microsoft\Windows\CurrentVersion\Run, vturomsys=rundll32.exe "xxvvsr.dll",DllRegisterServer
HKEY_USERS\S-1-5-18\SOFTWARE\Microsoft\Windows\CurrentVersion\Run, vturomsys=rundll32.exe "xxvvsr.dll",DllRegisterServer
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run, byvvwwsys=rundll32.exe "xxvvsr.dll",DllRegisterServer
HKEY_USERS\.DEFAULT\SOFTWARE\Microsoft\Windows\CurrentVersion\Run, xxxuussys=rundll32.exe "xxvvsr.dll",DllRegisterServer
HKEY_USERS\S-1-5-18\SOFTWARE\Microsoft\Windows\CurrentVersion\Run, xxxuussys=rundll32.exe "xxvvsr.dll",DllRegisterServer
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run, yegukanit=Rundll32.exe "[%SYSTEM%]\vihokaso.dll",a
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run, xxxvwvdrv=rundll32.exe "byvwus.dll",s
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Run, efdaaydrv=rundll32.exe "byvwus.dll",s
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run, ssqrppsys=rundll32.exe "xxvvsr.dll",DllRegisterServer
HKEY_USERS\.DEFAULT\SOFTWARE\Microsoft\Windows\CurrentVersion\Run, dddefdsys=rundll32.exe "xxvvsr.dll",DllRegisterServer
HKEY_USERS\S-1-5-18\SOFTWARE\Microsoft\Windows\CurrentVersion\Run, dddefdsys=rundll32.exe "xxvvsr.dll",DllRegisterServer
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run, byvvtsdrv=rundll32.exe "byyyyx.dll",s
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Run, jkjjkhdrv=rundll32.exe "byyyyx.dll",s
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run, geedcddrv=rundll32.exe "xxyxvv.dll",s
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Run, gedbaadrv=rundll32.exe "xxyxvv.dll",s
HKEY_USERS\.DEFAULT\SOFTWARE\Microsoft\Windows\CurrentVersion\Run, efccdcdrv=rundll32.exe "byyyyx.dll",s
HKEY_USERS\.DEFAULT\SOFTWARE\Microsoft\Windows\CurrentVersion\Run, nnmlkkdrv=rundll32.exe "xxyxvv.dll",s
HKEY_USERS\S-1-5-18\SOFTWARE\Microsoft\Windows\CurrentVersion\Run, efccdcdrv=rundll32.exe "byyyyx.dll",s
HKEY_USERS\S-1-5-18\SOFTWARE\Microsoft\Windows\CurrentVersion\Run, nnmlkkdrv=rundll32.exe "xxyxvv.dll",s
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run, khihggsys=rundll32.exe "xxvvsr.dll",DllRegisterServer
HKEY_USERS\.DEFAULT\SOFTWARE\Microsoft\Windows\CurrentVersion\Run, urrqnmsys=rundll32.exe "xxvvsr.dll",DllRegisterServer
HKEY_USERS\S-1-5-18\SOFTWARE\Microsoft\Windows\CurrentVersion\Run, urrqnmsys=rundll32.exe "xxvvsr.dll",DllRegisterServer
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run, Tfozatuqic=rundll32.exe "[%WINDOWS%]\ohorotani.dll",Startup
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run, nedisowif=Rundll32.exe "[%SYSTEM%]\ramobugu.dll",a
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run, rokigafah=Rundll32.exe "[%SYSTEM%]\yifiroso.dll",a
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run, rqrrpndrv=rundll32.exe "tuspol.dll",s
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Run, pmkljkdrv=rundll32.exe "tuspol.dll",s
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run, kheccbdrv=rundll32.exe "byvwus.dll",s
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Run, cbbcccdrv=rundll32.exe "byvwus.dll",s
HKEY_USERS\.DEFAULT\SOFTWARE\Microsoft\Windows\CurrentVersion\Run, ssrromdrv=rundll32.exe "tuspol.dll",s
HKEY_USERS\.DEFAULT\SOFTWARE\Microsoft\Windows\CurrentVersion\Run, xxyawxdrv=rundll32.exe "byvwus.dll",s
HKEY_USERS\S-1-5-18\SOFTWARE\Microsoft\Windows\CurrentVersion\Run, ssrromdrv=rundll32.exe "tuspol.dll",s
HKEY_USERS\S-1-5-18\SOFTWARE\Microsoft\Windows\CurrentVersion\Run, xxyawxdrv=rundll32.exe "byvwus.dll",s
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run, iihfdbsys=rundll32.exe "xxvvsr.dll",DllRegisterServer
HKEY_USERS\.DEFAULT\SOFTWARE\Microsoft\Windows\CurrentVersion\Run, tusqpmsys=rundll32.exe "xxvvsr.dll",DllRegisterServer
HKEY_USERS\S-1-5-18\SOFTWARE\Microsoft\Windows\CurrentVersion\Run, tusqpmsys=rundll32.exe "xxvvsr.dll",DllRegisterServer
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Run, MSSMSGS=rundll32.exe winddp32.rom,EJVYWJju
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Run, MSSMSGS=rundll32.exe winjak32.rom,pTlJTxf
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run, Ntuqiquwejulatiw=rundll32.exe "[%WINDOWS%]\imugopep.dll",Startup
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Run, kesewujune=Rundll32.exe "[%SYSTEM%]\kogetagi.dll",s
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Run, MSSMSGS=rundll32.exe winqez32.rom,CgjEiCN
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run, wvvtsqdrv=rundll32.exe "opmnkj.dll",s
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Run, byvvurdrv=rundll32.exe "opmnkj.dll",s
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run, awwxvtdrv=rundll32.exe "yabcab.dll",s
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Run, pmkllmdrv=rundll32.exe "yabcab.dll",s
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run, pmlmljdrv=rundll32.exe "efcaxx.dll",s
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Run, oponljdrv=rundll32.exe "efcaxx.dll",s
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Run, MSSMSGS=rundll32.exe winqre32.rom,EJVYWJju
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run, Nzazawebew=rundll32.exe "[%WINDOWS%]\osapupik.dll",Startup
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run, Bnawo=rundll32.exe "[%WINDOWS%]\awuhuqerofiboqa.dll",Startup
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run, Okaxugawop=rundll32.exe "[%WINDOWS%]\azowexuluqizev.dll",Startup
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run, mebawuhow=Rundll32.exe "[%SYSTEM%]\gupureje.dll",a
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\ShellExecuteHooks, {b4ae9134-fbb6-484a-89bb-b39c9ed47449}=
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\ShellExecuteHooks, {4e3e60f5-f691-475f-afba-cf9fcab47c15}=
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\ShellExecuteHooks, {77d3a5b4-cfd1-4046-8909-7cd99a68311f}=
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run, Bboni=rundll32.exe "[%WINDOWS%]\uyonaqafotocedo.dll",Startup
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\ShellExecuteHooks, {c47a9554-195a-4769-9b13-04f15b450a39}=
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Run, MSSMSGS=rundll32.exe wingsw32.rom,hILoqxTVwIQ
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run, Cqavep=rundll32.exe "[%WINDOWS%]\exorotegixiv.dll",Startup
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run, Fduguhoxajedecod=rundll32.exe "[%WINDOWS%]\ogeyewiducena.dll",Startup
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run, horubukajo=Rundll32.exe "lomehane.dll",s
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Run, horubukajo=Rundll32.exe "lomehane.dll",s
HKEY_USERS\.DEFAULT\SOFTWARE\Microsoft\Windows\CurrentVersion\Run, horubukajo=Rundll32.exe "lomehane.dll",s
HKEY_USERS\S-1-5-18\SOFTWARE\Microsoft\Windows\CurrentVersion\Run, horubukajo=Rundll32.exe "lomehane.dll",s
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run, Tjawomi=rundll32.exe "[%WINDOWS%]\usuzuhifucize.dll",Startup
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run, opmmjjdrv=rundll32.exe "bywtqp.dll",s
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Run, ddawvwdrv=rundll32.exe "bywtqp.dll",s
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run, hgdbxudrv=rundll32.exe "geedbb.dll",s
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Run, jkhedbdrv=rundll32.exe "geedbb.dll",s
HKEY_USERS\.DEFAULT\SOFTWARE\Microsoft\Windows\CurrentVersion\Run, opmmjidrv=rundll32.exe "hggddd.dll",s
HKEY_USERS\S-1-5-18\SOFTWARE\Microsoft\Windows\CurrentVersion\Run, opmmjidrv=rundll32.exe "hggddd.dll",s
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run, xxyxvssys=rundll32.exe "xxvvsr.dll",DllRegisterServer
HKEY_USERS\.DEFAULT\SOFTWARE\Microsoft\Windows\CurrentVersion\Run, ljkihfsys=rundll32.exe "xxvvsr.dll",DllRegisterServer
HKEY_USERS\S-1-5-18\SOFTWARE\Microsoft\Windows\CurrentVersion\Run, ljkihfsys=rundll32.exe "xxvvsr.dll",DllRegisterServer
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run, opopqqdrv=rundll32.exe "xxyxvv.dll",s
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Run, awtstrdrv=rundll32.exe "xxyxvv.dll",s
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Run, iiffcbdrv=rundll32.exe "bywtqp.dll",s
HKEY_USERS\.DEFAULT\SOFTWARE\Microsoft\Windows\CurrentVersion\Run, efffdbdrv=rundll32.exe "xxyxvv.dll",s
HKEY_USERS\S-1-5-18\SOFTWARE\Microsoft\Windows\CurrentVersion\Run, efffdbdrv=rundll32.exe "xxyxvv.dll",s
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run, tuvuttsys=rundll32.exe "xxvvsr.dll",DllRegisterServer
HKEY_USERS\.DEFAULT\SOFTWARE\Microsoft\Windows\CurrentVersion\Run, hgdecasys=rundll32.exe "xxvvsr.dll",DllRegisterServer
HKEY_USERS\S-1-5-18\SOFTWARE\Microsoft\Windows\CurrentVersion\Run, hgdecasys=rundll32.exe "xxvvsr.dll",DllRegisterServer
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run, manofasuj=Rundll32.exe "[%SYSTEM%]\tahiraga.dll",a
HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Explorer\SharedTaskScheduler, {217f277f-3252-4a42-b638-952662ef3bdf}=jugezatag
HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\ShellServiceObjectDelayLoad, nopimidow={217f277f-3252-4a42-b638-952662ef3bdf}
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Run, sopevusam=Rundll32.exe "[%COMMON_APPDATA%]\wiwonahu\wiwonahu.dll",a
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Run, hunupofubi=Rundll32.exe "[%COMMON_APPDATA%]\wadizulo\wadizulo.dll",s
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run, yipafurobe=Rundll32.exe "[%SYSTEM%]\lafokune.dll",s
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run, lavarutet=Rundll32.exe "[%SYSTEM%]\jokigaju.dll",a
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Run, tzualwh=[%SYSTEM%]\duupvlc0.exe
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Run, tpu3l=[%SYSTEM%]\6uu6gg5.exe
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run, mebawuhow=Rundll32.exe "[%SYSTEM%]\garazuha.dll",a
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\ShellExecuteHooks, {837b45d6-bf85-457d-aabf-6d2e7815f791}=
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\ShellExecuteHooks, {10c08715-ad85-4fb5-bb96-a7f700ab2964}=
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run, vonarepina=Rundll32.exe "rutasaka.dll",s
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Run, hurituhuza=Rundll32.exe "yiheguku.dll",s
HKEY_USERS\.DEFAULT\SOFTWARE\Microsoft\Windows\CurrentVersion\Run, hurituhuza=Rundll32.exe "yiheguku.dll",s
HKEY_USERS\S-1-5-18\SOFTWARE\Microsoft\Windows\CurrentVersion\Run, hurituhuza=Rundll32.exe "yiheguku.dll",s
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run, fuvuwaheh=Rundll32.exe "[%SYSTEM%]\sokoyeji.dll",a
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run, negeserube=Rundll32.exe "tuhenato.dll",s
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run, vuyuvibog=Rundll32.exe "[%SYSTEM%]\juyobosu.dll",a
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Run, vuyuvibog=Rundll32.exe "[%SYSTEM%]\juyobosu.dll",a
HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Explorer\SharedTaskScheduler, {ca510c1b-e164-43e5-94dc-02e9dac76278}=mujuzedij
HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\ShellServiceObjectDelayLoad, nenivisig={ca510c1b-e164-43e5-94dc-02e9dac76278}
HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Explorer\SharedTaskScheduler, {ca510c1b-e164-43e5-94dc-02e9dac76278}=tokatiluy
HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\ShellServiceObjectDelayLoad, nasotigaz={ca510c1b-e164-43e5-94dc-02e9dac76278}
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run, sifayihip=Rundll32.exe "[%SYSTEM%]\lehebofi.dll",a
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run, Fmawubalikoq=rundll32.exe "[%WINDOWS%]\ejijinur.dll",Startup
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Run, MSSMSGS=rundll32.exe winbfi32.rom,LQJImhEtYfn
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run, Hfuzerofiboqa=rundll32.exe "[%WINDOWS%]\avopaguh.dll",Startup
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run, Imujizego=rundll32.exe "[%WINDOWS%]\asawatebicogicey.dll",Startup
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run, nitevozij=Rundll32.exe "[%SYSTEM%]\fopijunu.dll",a
HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Explorer\SharedTaskScheduler, {201faa5b-98bf-4be0-9e7b-82145e59f320}=gahurihor
HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\ShellServiceObjectDelayLoad, wiyutahev={201faa5b-98bf-4be0-9e7b-82145e59f320}
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run, zisudupil=Rundll32.exe "[%SYSTEM%]\bufufodu.dll",a
HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Explorer\SharedTaskScheduler, {3ee6fd98-acf8-464f-b94e-65f0a9f2a592}=gahurihor
HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\ShellServiceObjectDelayLoad, zisakekil={3ee6fd98-acf8-464f-b94e-65f0a9f2a592}

Scan your system registry for FREE

Comments

I downloaded and installed AVG free home anti-virus three times already and everytime I get the same thing.

It always finds most of my program executable files to be have a virus as well as windows DLL divers, not to mention its own installation AVG files. And I’ve downloaded it each time to download.

What can I do??? What anti-virus can that won’t stuff up my PC so often that I can’t even have an anti-virus?

— Basil · Mar 9, 07:05 AM ·

Name		Remember
E-mail		Your e-mail will never be shown.
Message