Top 10 virus alerts

Latest 10 malware files

Testimonials

Vundo (Virtumondo) Registry Values

Scan your Windows registry for Vundo (Virtumondo)

• HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run, MSServer=rundll32.exe [%SYSTEM%]\iiffGVoO.dll,#1
• HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run, \SUE4681.exe=[%WINDOWS%]\SUE4681.exe
• HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run, \SUEF1A1.exe=[%WINDOWS%]\SUEF1A1.exe
• HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Run, \SUE4681.exe=[%WINDOWS%]\SUE4681.exe
• HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Run, \SUEF1A1.exe=[%WINDOWS%]\SUEF1A1.exe
• HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run, \VIEB25D.exe=[%SYSTEM%]\VIEB25D.exe
• HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run, \VIEB163.exe=[%SYSTEM%]\VIEB163.exe
• HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run, \VIE6D3.exe=[%SYSTEM%]\VIE6D3.exe
• HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run, \VIEEA9D.exe=[%SYSTEM%]\VIEEA9D.exe
• HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run, \VIEC966.exe=[%SYSTEM%]\VIEC966.exe
• HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run, \VIE2B44.exe=[%SYSTEM%]\VIE2B44.exe
• HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run, \VIE1479.exe=[%SYSTEM%]\VIE1479.exe
• HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run, \VIEBD84.exe=[%SYSTEM%]\VIEBD84.exe
• HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run, \VIEBC8A.exe=[%SYSTEM%]\VIEBC8A.exe
• HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run, \VIEB7E9.exe=[%SYSTEM%]\VIEB7E9.exe
• HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run, \VIE9877.exe=[%SYSTEM%]\VIE9877.exe
• HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run, \VIE9896.exe=[%SYSTEM%]\VIE9896.exe
• HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run, \VIE3B6A.exe=[%SYSTEM%]\VIE3B6A.exe
• HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run, \VIE3AAE.exe=[%SYSTEM%]\VIE3AAE.exe
• HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run, \VIE3A9F.exe=[%SYSTEM%]\VIE3A9F.exe
• HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run, \VIEBA2A.exe=[%SYSTEM%]\VIEBA2A.exe
• HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run, \VIEADCB.exe=[%SYSTEM%]\VIEADCB.exe
• HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run, \VIEAD9C.exe=[%SYSTEM%]\VIEAD9C.exe
• HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run, \VIE7A2E.exe=[%SYSTEM%]\VIE7A2E.exe
• HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run, \VIE7905.exe=[%SYSTEM%]\VIE7905.exe
• HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run, \VIE7925.exe=[%SYSTEM%]\VIE7925.exe
• HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run, \VIED0E5.exe=[%SYSTEM%]\VIED0E5.exe
• HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run, \VIECE84.exe=[%SYSTEM%]\VIECE84.exe
• HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run, \VIECE65.exe=[%SYSTEM%]\VIECE65.exe
• HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run, \VIEADDB.exe=[%SYSTEM%]\VIEADDB.exe
• HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run, \VIEACE1.exe=[%SYSTEM%]\VIEACE1.exe
• HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run, \VIEACF1.exe=[%SYSTEM%]\VIEACF1.exe
• HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run, \VIEC14B.exe=[%SYSTEM%]\VIEC14B.exe
• HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run, \VIEC11C.exe=[%SYSTEM%]\VIEC11C.exe
• HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run, \VIEB615.exe=[%SYSTEM%]\VIEB615.exe
• HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run, \VIE9B06.exe=[%SYSTEM%]\VIE9B06.exe
• HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run, \VIE36A9.exe=[%SYSTEM%]\VIE36A9.exe
• HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run, \VIEE08E.exe=[%SYSTEM%]\VIEE08E.exe
• HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run, \VIEE06F.exe=[%SYSTEM%]\VIEE06F.exe
• HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run, \VIEEC51.exe=[%SYSTEM%]\VIEEC51.exe
• HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run, \VIEC9E3.exe=[%SYSTEM%]\VIEC9E3.exe
• HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run, \VIEC9F2.exe=[%SYSTEM%]\VIEC9F2.exe
• HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run, \VIEC9C3.exe=[%SYSTEM%]\VIEC9C3.exe
• HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run, \VIE422E.exe=[%SYSTEM%]\VIE422E.exe
• HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run, \VIE40F6.exe=[%SYSTEM%]\VIE40F6.exe
• HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run, \VIE3EB4.exe=[%SYSTEM%]\VIE3EB4.exe
• HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run, \VIE3E18.exe=[%SYSTEM%]\VIE3E18.exe
• HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run, \VIEEFFC.exe=[%SYSTEM%]\VIEEFFC.exe
• HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run, \VIEEF02.exe=[%SYSTEM%]\VIEEF02.exe
• HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run, \VIEED9C.exe=[%SYSTEM%]\VIEED9C.exe
• HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run, \VIEED1F.exe=[%SYSTEM%]\VIEED1F.exe
• HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Run, \VIEB25D.exe=[%SYSTEM%]\VIEB25D.exe
• HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Run, \VIEB163.exe=[%SYSTEM%]\VIEB163.exe
• HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Run, \VIE6D3.exe=[%SYSTEM%]\VIE6D3.exe
• HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Run, \VIEEA9D.exe=[%SYSTEM%]\VIEEA9D.exe
• HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Run, \VIEC966.exe=[%SYSTEM%]\VIEC966.exe
• HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Run, \VIE2B44.exe=[%SYSTEM%]\VIE2B44.exe
• HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Run, \VIE1479.exe=[%SYSTEM%]\VIE1479.exe
• HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Run, \VIEBD84.exe=[%SYSTEM%]\VIEBD84.exe
• HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Run, \VIEBC8A.exe=[%SYSTEM%]\VIEBC8A.exe
• HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Run, \VIEB7E9.exe=[%SYSTEM%]\VIEB7E9.exe
• HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Run, \VIE9877.exe=[%SYSTEM%]\VIE9877.exe
• HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Run, \VIE9896.exe=[%SYSTEM%]\VIE9896.exe
• HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Run, \VIE3B6A.exe=[%SYSTEM%]\VIE3B6A.exe
• HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Run, \VIE3AAE.exe=[%SYSTEM%]\VIE3AAE.exe
• HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Run, \VIE3A9F.exe=[%SYSTEM%]\VIE3A9F.exe
• HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Run, \VIEBA2A.exe=[%SYSTEM%]\VIEBA2A.exe
• HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Run, \VIEADCB.exe=[%SYSTEM%]\VIEADCB.exe
• HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Run, \VIEAD9C.exe=[%SYSTEM%]\VIEAD9C.exe
• HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Run, \VIE7A2E.exe=[%SYSTEM%]\VIE7A2E.exe
• HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Run, \VIE7905.exe=[%SYSTEM%]\VIE7905.exe
• HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Run, \VIE7925.exe=[%SYSTEM%]\VIE7925.exe
• HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Run, \VIED0E5.exe=[%SYSTEM%]\VIED0E5.exe
• HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Run, \VIECE84.exe=[%SYSTEM%]\VIECE84.exe
• HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Run, \VIECE65.exe=[%SYSTEM%]\VIECE65.exe
• HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Run, \VIEADDB.exe=[%SYSTEM%]\VIEADDB.exe
• HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Run, \VIEACE1.exe=[%SYSTEM%]\VIEACE1.exe
• HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Run, \VIEACF1.exe=[%SYSTEM%]\VIEACF1.exe
• HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Run, \VIEC14B.exe=[%SYSTEM%]\VIEC14B.exe
• HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Run, \VIEC11C.exe=[%SYSTEM%]\VIEC11C.exe
• HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Run, \VIEB615.exe=[%SYSTEM%]\VIEB615.exe
• HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Run, \VIE9B06.exe=[%SYSTEM%]\VIE9B06.exe
• HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Run, \VIE36A9.exe=[%SYSTEM%]\VIE36A9.exe
• HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Run, \VIEE08E.exe=[%SYSTEM%]\VIEE08E.exe
• HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Run, \VIEE06F.exe=[%SYSTEM%]\VIEE06F.exe
• HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Run, \VIEEC51.exe=[%SYSTEM%]\VIEEC51.exe
• HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Run, \VIEC9E3.exe=[%SYSTEM%]\VIEC9E3.exe
• HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Run, \VIEC9F2.exe=[%SYSTEM%]\VIEC9F2.exe
• HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Run, \VIEC9C3.exe=[%SYSTEM%]\VIEC9C3.exe
• HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Run, \VIEC216.exe=[%SYSTEM%]\VIEC216.exe
• HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Run, \VIEB70E.exe=[%SYSTEM%]\VIEB70E.exe
• HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Run, \VIEB6B1.exe=[%SYSTEM%]\VIEB6B1.exe
• HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Run, \VIEB5C7.exe=[%SYSTEM%]\VIEB5C7.exe
• HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Run, \VIEDEAA.exe=[%SYSTEM%]\VIEDEAA.exe
• HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Run, \VIEDB8F.exe=[%SYSTEM%]\VIEDB8F.exe
• HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Run, \VIEDB7F.exe=[%SYSTEM%]\VIEDB7F.exe
• HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Run, \VIED95D.exe=[%SYSTEM%]\VIED95D.exe
• HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Run, \VIED049.exe=[%SYSTEM%]\VIED049.exe
• HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Run, \VIEB94F.exe=[%SYSTEM%]\VIEB94F.exe
• HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Run, \VIEB911.exe=[%SYSTEM%]\VIEB911.exe
• HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Run, \VIEB921.exe=[%SYSTEM%]\VIEB921.exe
• HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Run, \VIEF7E5.exe=[%SYSTEM%]\VIEF7E5.exe
• HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Run, \VIEF305.exe=[%SYSTEM%]\VIEF305.exe
• HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Run, \VIEEFBA.exe=[%SYSTEM%]\VIEEFBA.exe
• HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Run, \VIEEF8B.exe=[%SYSTEM%]\VIEEF8B.exe
• HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Run, \VIE422E.exe=[%SYSTEM%]\VIE422E.exe
• HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Run, \VIE40F6.exe=[%SYSTEM%]\VIE40F6.exe
• HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Run, \VIE3EB4.exe=[%SYSTEM%]\VIE3EB4.exe
• HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Run, \VIE81AD.exe=[%SYSTEM%]\VIE81AD.exe
• HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Run, \VIE194A.exe=[%SYSTEM%]\VIE194A.exe
• HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Run, \VIE12C4.exe=[%SYSTEM%]\VIE12C4.exe
• HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Run, \VIE1351.exe=[%SYSTEM%]\VIE1351.exe
• HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Run, \VIEDCD6.exe=[%SYSTEM%]\VIEDCD6.exe
• HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Run, \VIEE011.exe=[%SYSTEM%]\VIEE011.exe
• HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Run, \VIEDCC7.exe=[%SYSTEM%]\VIEDCC7.exe
• HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Run, \VIEDA95.exe=[%SYSTEM%]\VIEDA95.exe
• HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Run, \VIED596.exe=[%SYSTEM%]\VIED596.exe
• HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Run, \VIED104.exe=[%SYSTEM%]\VIED104.exe
• HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Run, \VIED0F4.exe=[%SYSTEM%]\VIED0F4.exe
• HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Run, \VIECABD.exe=[%SYSTEM%]\VIECABD.exe
• HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Run, \VIEFCD4.exe=[%SYSTEM%]\VIEFCD4.exe
• HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Run, \VIEF333.exe=[%SYSTEM%]\VIEF333.exe
• HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Run, \VIEE9B2.exe=[%SYSTEM%]\VIEE9B2.exe
• HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Run, \VIEE973.exe=[%SYSTEM%]\VIEE973.exe
• HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Run, \VIE4114.exe=[%SYSTEM%]\VIE4114.exe
• HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Run, \VIE4105.exe=[%SYSTEM%]\VIE4105.exe
• HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Run, \VIE3DDA.exe=[%SYSTEM%]\VIE3DDA.exe
• HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Run, \VIE3DCA.exe=[%SYSTEM%]\VIE3DCA.exe
• HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Run, \VIE16E9.exe=[%SYSTEM%]\VIE16E9.exe
• HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Run, \VIEEEA1.exe=[%SYSTEM%]\VIEEEA1.exe
• HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Run, \VIEEE63.exe=[%SYSTEM%]\VIEEE63.exe
• HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Run, \VIEEE44.exe=[%SYSTEM%]\VIEEE44.exe
• HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Run, \VIEEFFC.exe=[%SYSTEM%]\VIEEFFC.exe
• HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Run, \VIEEF02.exe=[%SYSTEM%]\VIEEF02.exe
• HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Run, \VIEED9C.exe=[%SYSTEM%]\VIEED9C.exe
• HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Run, \VIEED1F.exe=[%SYSTEM%]\VIEED1F.exe
• HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run, f40f966d=rundll32.exe "[%SYSTEM%]\qivlyvbm.dll",b
• HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run, BMf73ca5f1=Rundll32.exe "[%SYSTEM%]\ywruetvl.dll",s
• HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run, a22e3a48=rundll32.exe "[%SYSTEM%]\wjvtkxfw.dll",b
• HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run, MSServer=rundll32.exe [%SYSTEM%]\pmnmnKCT.dll,#1
• HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run, c4e1de01=rundll32.exe "[%PROFILE_TEMP%]\uhqsravs.dll",b
• HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Run, cmds=rundll32.exe [%PROFILE_TEMP%]\ddcBTMfd.dll,c
• HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run, BMc7d2ed9d=Rundll32.exe "[%SYSTEM%]\cmqrxrtf.dll",s
• HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Run, BMc7d2ed9d=Rundll32.exe "[%PROFILE_TEMP%]\snpukyhg.dll",s
• HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run, MSServer=rundll32.exe [%SYSTEM%]\tuvUKcCV.dll,#1
• HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run, 581bef6c=rundll32.exe "[%SYSTEM%]\lxcdvisn.dll",b
• HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run, f80cf638=rundll32.exe "[%SYSTEM%]\rucponiw.dll",b
• HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run, \SUEB6AF.exe=[%WINDOWS%]\SUEB6AF.exe
• HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Run, \SUEB6AF.exe=[%WINDOWS%]\SUEB6AF.exe
• HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Run, \VIEE1E5.exe=[%SYSTEM%]\VIEE1E5.exe
• HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Run, \VIEE178.exe=[%SYSTEM%]\VIEE178.exe
• HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run, \YURD1A1.exe=[%SYSTEM%]\YURD1A1.exe
• HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run, \YURD02A.exe=[%SYSTEM%]\YURD02A.exe
• HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run, \YUR397F.exe=[%SYSTEM%]\YUR397F.exe
• HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run, \YURBED1.exe=[%SYSTEM%]\YURBED1.exe
• HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run, \YUR4423.exe=[%SYSTEM%]\YUR4423.exe
• HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run, \YURC975.exe=[%SYSTEM%]\YURC975.exe
• HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run, \YUR4AB1.exe=[%SYSTEM%]\YUR4AB1.exe
• HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Run, \YUR2E11.exe=[%SYSTEM%]\YUR2E11.exe
• HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Run, \YUR28E3.exe=[%SYSTEM%]\YUR28E3.exe
• HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Run, \YURE59D.exe=[%SYSTEM%]\YURE59D.exe
• HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Run, \YURE197.exe=[%SYSTEM%]\YURE197.exe
• HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Run, \YURD1A1.exe=[%SYSTEM%]\YURD1A1.exe
• HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Run, \YURD02A.exe=[%SYSTEM%]\YURD02A.exe
• HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Run, \YURCBE6.exe=[%SYSTEM%]\YURCBE6.exe
• HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Run, \YUR9EC8.exe=[%SYSTEM%]\YUR9EC8.exe
• HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Run, \YUR1EFB.exe=[%SYSTEM%]\YUR1EFB.exe
• HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Run, \YUR9E73.exe=[%SYSTEM%]\YUR9E73.exe
• HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Run, \YUR1B4C.exe=[%SYSTEM%]\YUR1B4C.exe
• HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Run, \YUR397F.exe=[%SYSTEM%]\YUR397F.exe
• HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Run, \YURBED1.exe=[%SYSTEM%]\YURBED1.exe
• HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Run, \YUR4423.exe=[%SYSTEM%]\YUR4423.exe
• HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Run, \YUR4AB1.exe=[%SYSTEM%]\YUR4AB1.exe
• HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run, b86925c3=rundll32.exe "[%SYSTEM%]\jedlcjbd.dll",b
• HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run, aced3e31=rundll32.exe "[%SYSTEM%]\cbjgmkgu.dll",b
• HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run, BMafde0dad=Rundll32.exe "[%SYSTEM%]\nhoxmovw.dll",s
• HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run, f8d07a1b=rundll32.exe "[%SYSTEM%]\nskvmlyr.dll",b
• HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run, 8cc0b912=rundll32.exe "[%SYSTEM%]\jgmdvhsm.dll",b
• HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run, 50684d01=rundll32.exe "[%SYSTEM%]\utkdgkfn.dll",b
• HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run, d05c1e36=rundll32.exe "[%SYSTEM%]\hfxvugkf.dll",b
• HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run, BMd36f2daa=Rundll32.exe "[%SYSTEM%]\ryiyqjle.dll",s
• HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Run, \VIE78.exe=[%SYSTEM%]\VIE78.exe
• HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run, 407b8a93=rundll32.exe "[%SYSTEM%]\yyulbile.dll",b
• HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run, BM4348b90f=Rundll32.exe "[%SYSTEM%]\xkwpckof.dll",s
• HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Run, \VIED5.exe=[%SYSTEM%]\VIED5.exe
• HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run, 5d131bd6=rundll32.exe "[%SYSTEM%]\kjrdyfqr.dll",b
• HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run, BM5e20284a=Rundll32.exe "[%SYSTEM%]\nbdvutbv.dll",s
• HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run, 8c410727=rundll32.exe "[%SYSTEM%]\sjvhalqt.dll",b
• HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run, bc456cb9=rundll32.exe "[%SYSTEM%]\qfefukkk.dll",b
• HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run, 383c04bd=rundll32.exe "[%SYSTEM%]\rpnyrtpv.dll",b
• HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run, BM3b0f3721=Rundll32.exe "[%SYSTEM%]\uftgevis.dll",s
• HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run, d85c916a=rundll32.exe "[%SYSTEM%]\mdxgxfdj.dll",b
• HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run, 0ca577db=rundll32.exe "[%SYSTEM%]\yxtwxysb.dll",b
• HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run, 7c176b4b=rundll32.exe "[%SYSTEM%]\pdlogyvl.dll",b
• HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run, f8a9744b=rundll32.exe "[%SYSTEM%]\gvbughnj.dll",b
• HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run, 504fb519=rundll32.exe "[%SYSTEM%]\frfequih.dll",b
• HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run, 369e46dd=rundll32.exe "[%SYSTEM%]\avkjduvl.dll",b
• HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Run, cmds=rundll32.exe [%PROFILE_TEMP%]\opnmJYSk.dll,c
• HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Run, BM5dfaad1b=Rundll32.exe "[%PROFILE_TEMP%]\jipqwmok.dll",s
• HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run, 04b756a4=rundll32.exe "[%SYSTEM%]\xcmsvwoc.dll",b
• HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run, BM07846538=Rundll32.exe "[%SYSTEM%]\twelbpui.dll",s
• HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Run, cmds=rundll32.exe [%PROFILE_TEMP%]\iifddcCR.dll,c
• HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Run, BM79cef530=Rundll32.exe "[%PROFILE_TEMP%]\knrdcijy.dll",s
• HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Run, \YUR1110.exe=[%SYSTEM%]\YUR1110.exe
• HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Run, \YUR507F.exe=[%SYSTEM%]\YUR507F.exe
• HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Run, \YURC98C.exe=[%SYSTEM%]\YURC98C.exe
• HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Run, \YUR3E89.exe=[%SYSTEM%]\YUR3E89.exe
• HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Run, \YURAC45.exe=[%SYSTEM%]\YURAC45.exe
• HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Run, \YUR845B.exe=[%SYSTEM%]\YUR845B.exe
• HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Run, \YUR20C8.exe=[%SYSTEM%]\YUR20C8.exe
• HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Run, \YUR1998.exe=[%SYSTEM%]\YUR1998.exe
• HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Run, \YUR8DDD.exe=[%SYSTEM%]\YUR8DDD.exe
• HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Run, \YURE954.exe=[%SYSTEM%]\YURE954.exe
• HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Run, \YURD836.exe=[%SYSTEM%]\YURD836.exe
• HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Run, \YUR5D49.exe=[%SYSTEM%]\YUR5D49.exe
• HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Run, \YURE1E0.exe=[%SYSTEM%]\YURE1E0.exe
• HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Run, \YUR6676.exe=[%SYSTEM%]\YUR6676.exe
• HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Run, \YURDF0B.exe=[%SYSTEM%]\YURDF0B.exe
• HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Run, \YUR402A.exe=[%SYSTEM%]\YUR402A.exe
• HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Run, \YUR67F5.exe=[%SYSTEM%]\YUR67F5.exe
• HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Run, \YUR1A72.exe=[%SYSTEM%]\YUR1A72.exe
• HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Run, \YUR4900.exe=[%SYSTEM%]\YUR4900.exe
• HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Run, \YUR496E.exe=[%SYSTEM%]\YUR496E.exe
• HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Run, \YUR3150.exe=[%SYSTEM%]\YUR3150.exe
• HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Run, \YUR9740.exe=[%SYSTEM%]\YUR9740.exe
• HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run, 3025a8cc=rundll32.exe "[%SYSTEM%]\eamoyfgj.dll",b
• HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run, BM33169b50=Rundll32.exe "[%SYSTEM%]\hbcqfuxg.dll",s
• HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run, 44391fc9=rundll32.exe "[%SYSTEM%]\avvgbcbp.dll",b
• HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run, BM470a2c55=Rundll32.exe "[%SYSTEM%]\mliiucdd.dll",s
• HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run, \YURAF62.exe=[%SYSTEM%]\YURAF62.exe
• HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run, \YUR29CF.exe=[%SYSTEM%]\YUR29CF.exe
• HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Run, \YURAF62.exe=[%SYSTEM%]\YURAF62.exe
• HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Run, \YUR29CF.exe=[%SYSTEM%]\YUR29CF.exe
• HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run, 581bef6c=rundll32.exe "[%SYSTEM%]\xfxjlcwr.dll",b
• HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run, BM5b28dcf0=Rundll32.exe "[%SYSTEM%]\khjuhnvj.dll",s
• HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run, 2484e488=rundll32.exe "[%SYSTEM%]\vogqrmtv.dll",b
• HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run, b86925c3=rundll32.exe "[%SYSTEM%]\dnrxwvaf.dll",b
• HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Run, 648b5ced=rundll32.exe "[%PROFILE_TEMP%]\iuyrpxhq.dll",b
• HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Run, cmds=rundll32.exe [%PROFILE_TEMP%]\byXRijhF.dll,c
• HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run, MSServer=rundll32.exe [%SYSTEM%]\yayaXPhI.dll,#1
• HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Run, BM67b86f71=Rundll32.exe "[%PROFILE_TEMP%]\nrcmarot.dll",s
• HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run, d4c25b14=rundll32.exe "[%SYSTEM%]\liyxkwds.dll",b
• HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run, BMd7f16888=Rundll32.exe "[%SYSTEM%]\akiisdjc.dll",s
• HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Run, 88558e44=rundll32.exe "[%PROFILE_TEMP%]\bplegwhi.dll",b
• HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Run, cmds=rundll32.exe [%PROFILE_TEMP%]\nnnoLBrp.dll,c
• HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Run, MSServer=rundll32.exe [%PROFILE_TEMP%]\lJaWNeFx.dll,#1
• HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Run, BM8b66bdd8=Rundll32.exe "[%PROFILE_TEMP%]\jwrlicie.dll",s
• HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run, \YUR7834.exe=[%SYSTEM%]\YUR7834.exe
• HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Run, \YUR7261.exe=[%SYSTEM%]\YUR7261.exe
• HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Run, \YURF21B.exe=[%SYSTEM%]\YURF21B.exe
• HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Run, \YUR7834.exe=[%SYSTEM%]\YUR7834.exe
• HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Run, \VIE16A.exe=[%SYSTEM%]\VIE16A.exe
• HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run, b47ccb28=rundll32.exe "[%SYSTEM%]\mfqshdxq.dll",b
• HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run, BMb74ff8b4=Rundll32.exe "[%SYSTEM%]\pplqsrnr.dll",s
• HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run, 88b990b2=rundll32.exe "[%SYSTEM%]\xbufxpme.dll",b
• HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run, BM8b8aa32e=Rundll32.exe "[%SYSTEM%]\eqysgoaq.dll",s
• HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run, 78eb0f24=rundll32.exe "[%SYSTEM%]\ffwdhufv.dll",b
• HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run, BM7bd83cb8=Rundll32.exe "[%SYSTEM%]\lgeghsrb.dll",s
• HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run, 78eb0f24=rundll32.exe "[%SYSTEM%]\ckshgvdp.dll",b
• HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run, BM7bd83cb8=Rundll32.exe "[%SYSTEM%]\elwgadsr.dll",s
• HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run, 24aafc29=rundll32.exe "[%SYSTEM%]\qvvengda.dll",b
• HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run, BMdb4b8c8d=Rundll32.exe "[%SYSTEM%]\yftfjwfm.dll",s
• HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Run, \YUR6814.exe=[%SYSTEM%]\YUR6814.exe
• HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Run, \YUR6660.exe=[%SYSTEM%]\YUR6660.exe
• HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Run, \YUR7C11.exe=[%SYSTEM%]\YUR7C11.exe
• HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Run, \YUR7ACA.exe=[%SYSTEM%]\YUR7ACA.exe
• HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Run, \YUR2F10.exe=[%SYSTEM%]\YUR2F10.exe
• HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Run, \YURAAA5.exe=[%SYSTEM%]\YURAAA5.exe
• HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Run, \YURA651.exe=[%SYSTEM%]\YURA651.exe
• HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Run, \YURA299.exe=[%SYSTEM%]\YURA299.exe
• HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Run, \YURA0E5.exe=[%SYSTEM%]\YURA0E5.exe
• HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run, 74df4d75=rundll32.exe "[%SYSTEM%]\uydoakuh.dll",b
• HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run, BM77ec7ee9=Rundll32.exe "[%SYSTEM%]\qgkgkuno.dll",s
• HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run, BM0bc0ed6f=Rundll32.exe "[%SYSTEM%]\awylasqa.dll",s
• HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Run, \VIE1A.exe=[%SYSTEM%]\VIE1A.exe
• HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Run, \VIE38.exe=[%SYSTEM%]\VIE38.exe
• HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run, \VIE1F9.exe=[%SYSTEM%]\VIE1F9.exe
• HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run, BM013131d4=Rundll32.exe "[%SYSTEM%]\pxfrsxrt.dll",s
• HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run, \YURF9EF.exe=[%SYSTEM%]\YURF9EF.exe
• HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run, \YUR7A51.exe=[%SYSTEM%]\YUR7A51.exe
• HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run, \YUR674A.exe=[%SYSTEM%]\YUR674A.exe
• HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run, \YURDEAB.exe=[%SYSTEM%]\YURDEAB.exe
• HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Run, \YUR75BB.exe=[%SYSTEM%]\YUR75BB.exe
• HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Run, \YUR7119.exe=[%SYSTEM%]\YUR7119.exe
• HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Run, \YUR60D4.exe=[%SYSTEM%]\YUR60D4.exe
• HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Run, \YUR53F8.exe=[%SYSTEM%]\YUR53F8.exe
• HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Run, \YUR5012.exe=[%SYSTEM%]\YUR5012.exe
• HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Run, \YUR4E8C.exe=[%SYSTEM%]\YUR4E8C.exe
• HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Run, \YUR22FA.exe=[%SYSTEM%]\YUR22FA.exe
• HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Run, \YURA40B.exe=[%SYSTEM%]\YURA40B.exe
• HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Run, \YURF9EF.exe=[%SYSTEM%]\YURF9EF.exe
• HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Run, \YUR7A51.exe=[%SYSTEM%]\YUR7A51.exe
• HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Run, \YURDEAB.exe=[%SYSTEM%]\YURDEAB.exe
• HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Run, 3e7edaf0=rundll32.exe "[%PROFILE_TEMP%]\hopwnyle.dll",b
• HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Run, cmds=rundll32.exe [%PROFILE_TEMP%]\opnlMgeF.dll,c
• HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run, BMc76280a6=Rundll32.exe "[%SYSTEM%]\qbechbpr.dll",s
• HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run, \YUR6C06.exe=[%SYSTEM%]\YUR6C06.exe
• HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Run, \YUR6C06.exe=[%SYSTEM%]\YUR6C06.exe
• HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run, \YUR94E.exe=[%SYSTEM%]\YUR94E.exe
• HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run, \YUR6FAE.exe=[%SYSTEM%]\YUR6FAE.exe
• HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Run, \YUR4F57.exe=[%SYSTEM%]\YUR4F57.exe
• HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Run, \YUR4401.exe=[%SYSTEM%]\YUR4401.exe
• HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Run, \YURCDAB.exe=[%SYSTEM%]\YURCDAB.exe
• HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Run, \YURCFCC.exe=[%SYSTEM%]\YURCFCC.exe
• HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Run, \YURDD72.exe=[%SYSTEM%]\YURDD72.exe
• HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Run, \YUR94E.exe=[%SYSTEM%]\YUR94E.exe
• HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Run, \YUR6FAE.exe=[%SYSTEM%]\YUR6FAE.exe
• HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run, BM0f786e10=Rundll32.exe "[%SYSTEM%]\btkilhtw.dll",s
• HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run, 8cf53469=rundll32.exe "[%SYSTEM%]\axdxmlqn.dll",b
• HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run, BM8fc607f5=Rundll32.exe "[%SYSTEM%]\ktegkxeb.dll",s
• HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Run, cmds=rundll32.exe [%PROFILE_TEMP%]\pmnoOHYQ.dll,c
• HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run, \SUE873C.exe=[%WINDOWS%]\SUE873C.exe
• HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run, \SUE78BC.exe=[%WINDOWS%]\SUE78BC.exe
• HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run, \SUE76C8.exe=[%WINDOWS%]\SUE76C8.exe
• HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run, \SUE7552.exe=[%WINDOWS%]\SUE7552.exe
• HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run, \SUE74A6.exe=[%WINDOWS%]\SUE74A6.exe
• HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run, \SUE931E.exe=[%WINDOWS%]\SUE931E.exe
• HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run, \SUE8ECA.exe=[%WINDOWS%]\SUE8ECA.exe
• HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run, \SUE8884.exe=[%WINDOWS%]\SUE8884.exe
• HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run, \SUE8614.exe=[%WINDOWS%]\SUE8614.exe
• HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run, \SUE84CC.exe=[%WINDOWS%]\SUE84CC.exe
• HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Run, \SUE873C.exe=[%WINDOWS%]\SUE873C.exe
• HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Run, \SUE78BC.exe=[%WINDOWS%]\SUE78BC.exe
• HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Run, \SUE76C8.exe=[%WINDOWS%]\SUE76C8.exe
• HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Run, \SUE7552.exe=[%WINDOWS%]\SUE7552.exe
• HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Run, \SUE74A6.exe=[%WINDOWS%]\SUE74A6.exe
• HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run, 320d18a1=rundll32.exe "[%SYSTEM%]\tivhxrcg.dll",b
• HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Run, \YUR1ED.exe=[%SYSTEM%]\YUR1ED.exe
• HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run, 9ca7636a=rundll32.exe "[%SYSTEM%]\prwevbsi.dll",b
• HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run, BM2bf0742a=Rundll32.exe "[%SYSTEM%]\dvscorav.dll",s
• HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run, \YUR822F.exe=[%SYSTEM%]\YUR822F.exe
• HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run, \YURF2BC.exe=[%SYSTEM%]\YURF2BC.exe
• HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Run, \YUREFE5.exe=[%SYSTEM%]\YUREFE5.exe
• HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Run, \YUR658C.exe=[%SYSTEM%]\YUR658C.exe
• HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Run, \YURE468.exe=[%SYSTEM%]\YURE468.exe
• HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Run, \YUREB96.exe=[%SYSTEM%]\YUREB96.exe
• HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Run, \YUREC22.exe=[%SYSTEM%]\YUREC22.exe
• HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Run, \YUR929D.exe=[%SYSTEM%]\YUR929D.exe
• HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Run, \YURFD33.exe=[%SYSTEM%]\YURFD33.exe
• HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Run, \YURFD32.exe=[%SYSTEM%]\YURFD32.exe
• HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Run, \YURFE7.exe=[%SYSTEM%]\YURFE7.exe
• HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Run, \YURDE7C.exe=[%SYSTEM%]\YURDE7C.exe
• HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Run, \YURC3F9.exe=[%SYSTEM%]\YURC3F9.exe
• HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Run, \YUR822F.exe=[%SYSTEM%]\YUR822F.exe
• HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Run, \YURF2BC.exe=[%SYSTEM%]\YURF2BC.exe
• HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run, 1d0f117a=rundll32.exe "[%SYSTEM%]\ymimhpvb.dll",b
• HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run, BM07846538=Rundll32.exe "[%SYSTEM%]\kfcxcgjf.dll",s
• HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Run, fc53a4d3=rundll32.exe "[%PROFILE_TEMP%]\lrvjljaa.dll",b
• HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Run, cmds=rundll32.exe [%PROFILE_TEMP%]\lJaYQGxY.dll,c
• HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run, MSServer=rundll32.exe [%SYSTEM%]\khfFXrPf.dll,#1
• HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run, BM5105076d=Rundll32.exe "[%SYSTEM%]\sxrsxbws.dll",s
• HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run, \VIE64.exe=[%SYSTEM%]\VIE64.exe
• HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Run, \VIE65.exe=[%SYSTEM%]\VIE65.exe
• HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Run, \VIE64.exe=[%SYSTEM%]\VIE64.exe
• HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run, c4071b4f=rundll32.exe "[%SYSTEM%]\nktvhvmd.dll",b
• HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run, BMc73428d3=Rundll32.exe "[%SYSTEM%]\suquwifa.dll",s
• HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run, 5d131bd6=rundll32.exe "[%SYSTEM%]\xqvxjtjh.dll",b
• HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run, BM5e20284a=Rundll32.exe "[%SYSTEM%]\raqeexag.dll",s
• HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run, 44391fc9=rundll32.exe "[%SYSTEM%]\uifgsmmr.dll",b
• HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run, BM470a2c55=Rundll32.exe "[%SYSTEM%]\kcaoqeps.dll",s
• HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run, ec820686=rundll32.exe "[%SYSTEM%]\sjdfrmfa.dll",b
• HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run, BMefb1351a=Rundll32.exe "[%SYSTEM%]\ogcieorb.dll",s
• HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run, f8b53f44=rundll32.exe "[%SYSTEM%]\ifoiixgr.dll",b
• HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run, BMcb26982d=Rundll32.exe "[%SYSTEM%]\nqrllucw.dll",s
• HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run, 581bef6c=rundll32.exe "[%SYSTEM%]\yebljemx.dll",b
• HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run, BM5b28dcf0=Rundll32.exe "[%SYSTEM%]\hobkecrm.dll",s
• HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run, \VIE67.exe=[%SYSTEM%]\VIE67.exe
• HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run, \VIE66.exe=[%SYSTEM%]\VIE66.exe
• HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Run, \VIE67.exe=[%SYSTEM%]\VIE67.exe
• HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Run, \VIE66.exe=[%SYSTEM%]\VIE66.exe
• HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run, dc7ad20d=rundll32.exe "[%SYSTEM%]\owptbypb.dll",b
• HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run, f46afa47=rundll32.exe "[%SYSTEM%]\wolxbxht.dll",b
• HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run, \VIE226.exe=[%SYSTEM%]\VIE226.exe
• HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run, \VIE221.exe=[%SYSTEM%]\VIE221.exe
• HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Run, \VIE1E2.exe=[%SYSTEM%]\VIE1E2.exe
• HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run, \VIE645.exe=[%SYSTEM%]\VIE645.exe
• HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run, \VIE644.exe=[%SYSTEM%]\VIE644.exe
• HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run, \VIE120.exe=[%SYSTEM%]\VIE120.exe
• HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run, \VIE11E.exe=[%SYSTEM%]\VIE11E.exe
• HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run, \VIE11D.exe=[%SYSTEM%]\VIE11D.exe
• HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run, \VIE11C.exe=[%SYSTEM%]\VIE11C.exe
• HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run, \VIE11B.exe=[%SYSTEM%]\VIE11B.exe
• HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run, \VIE119.exe=[%SYSTEM%]\VIE119.exe
• HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run, \VIEF4.exe=[%SYSTEM%]\VIEF4.exe
• HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run, \VIEF3.exe=[%SYSTEM%]\VIEF3.exe
• HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run, \VIEF2.exe=[%SYSTEM%]\VIEF2.exe
• HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run, \VIEF0.exe=[%SYSTEM%]\VIEF0.exe
• HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run, \VIEEF.exe=[%SYSTEM%]\VIEEF.exe
• HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run, \VIEE5.exe=[%SYSTEM%]\VIEE5.exe
• HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run, \VIEE2.exe=[%SYSTEM%]\VIEE2.exe
• HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Run, \VIE645.exe=[%SYSTEM%]\VIE645.exe
• HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Run, \VIE644.exe=[%SYSTEM%]\VIE644.exe
• HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Run, \VIE120.exe=[%SYSTEM%]\VIE120.exe
• HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Run, \VIE11E.exe=[%SYSTEM%]\VIE11E.exe
• HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Run, \VIE11D.exe=[%SYSTEM%]\VIE11D.exe
• HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Run, \VIE11C.exe=[%SYSTEM%]\VIE11C.exe
• HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Run, \VIE11B.exe=[%SYSTEM%]\VIE11B.exe
• HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Run, \VIE119.exe=[%SYSTEM%]\VIE119.exe
• HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Run, \VIEF4.exe=[%SYSTEM%]\VIEF4.exe
• HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Run, \VIEF3.exe=[%SYSTEM%]\VIEF3.exe
• HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Run, \VIEF2.exe=[%SYSTEM%]\VIEF2.exe
• HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Run, \VIEF0.exe=[%SYSTEM%]\VIEF0.exe
• HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Run, \VIEEF.exe=[%SYSTEM%]\VIEEF.exe
• HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Run, \VIEE5.exe=[%SYSTEM%]\VIEE5.exe
• HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Run, \VIEE2.exe=[%SYSTEM%]\VIEE2.exe
• HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run, \VIE172.exe=[%SYSTEM%]\VIE172.exe
• HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Run, \VIE172.exe=[%SYSTEM%]\VIE172.exe
• HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run, 04c7380c=rundll32.exe "[%SYSTEM%]\lrxaksgp.dll",b
• HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run, BM07f40b90=Rundll32.exe "[%SYSTEM%]\rggoebci.dll",s
• HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Run, \VIE1B.exe=[%SYSTEM%]\VIE1B.exe
• HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run, d88ea9e8=rundll32.exe "[%SYSTEM%]\qqcdlpig.dll",b
• HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Run, cmds=rundll32.exe [%SYSTEM%]\mllml.dll,CreateProtectProc
• HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run, 9874ffb8=rundll32.exe "[%SYSTEM%]\ugwwonon.dll",b
• HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run, d03999c6=rundll32.exe "[%SYSTEM%]\tumylryh.dll",b
• HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run, BMd30aaa5a=Rundll32.exe "[%SYSTEM%]\hgxchbuc.dll",s
• HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run, 92570042=rundll32.exe "[%SYSTEM%]\arssrbxl.dll",b
• HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run, MSServer=rundll32.exe [%SYSTEM%]\urqRIcyA.dll,#1
• HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run, BM916433de=Rundll32.exe "[%SYSTEM%]\cbotfchy.dll",s
• HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run, 92570042=rundll32.exe "[%SYSTEM%]\uymhsdto.dll",b
• HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run, MSServer=rundll32.exe [%SYSTEM%]\cbXNHWMd.dll,#1
• HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run, BM916433de=Rundll32.exe "[%SYSTEM%]\xdxcobvs.dll",s
• HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run, 186d1095=rundll32.exe "[%SYSTEM%]\auyreple.dll",b
• HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run, BM2b70eeb9=Rundll32.exe "[%SYSTEM%]\qthsexcm.dll",s
• HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run, cca8dda4=rundll32.exe "[%SYSTEM%]\njdnojtv.dll",b
• HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run, \VIE23A.exe=[%SYSTEM%]\VIE23A.exe
• HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Run, \VIE23A.exe=[%SYSTEM%]\VIE23A.exe
• HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Run, \VIECC.exe=[%SYSTEM%]\VIECC.exe
• HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Run, cmds=rundll32.exe [%PROFILE_TEMP%]\ssQhfccA.dll,c
• HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Run, \VIECE.exe=[%SYSTEM%]\VIECE.exe
• HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Run, 7682bfc1=rundll32.exe "[%PROFILE_TEMP%]\udsivdfy.dll",b
• HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Run, cmds=rundll32.exe [%PROFILE_TEMP%]\mlJARhii.dll,c
• HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Run, BM75b18c5d=Rundll32.exe "[%PROFILE_TEMP%]\onbrguml.dll",s
• HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run, \YUR459.exe=[%SYSTEM%]\YUR459.exe
• HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run, \YUR457.exe=[%SYSTEM%]\YUR457.exe
• HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run, \YUR456.exe=[%SYSTEM%]\YUR456.exe
• HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run, \YUR44F.exe=[%SYSTEM%]\YUR44F.exe
• HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run, \YUR2E2.exe=[%SYSTEM%]\YUR2E2.exe
• HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run, \YUR24A.exe=[%SYSTEM%]\YUR24A.exe
• HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run, \YUR527.exe=[%SYSTEM%]\YUR527.exe
• HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run, \YUR451.exe=[%SYSTEM%]\YUR451.exe
• HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run, \YUR179.exe=[%SYSTEM%]\YUR179.exe
• HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run, \YURA7B.exe=[%SYSTEM%]\YURA7B.exe
• HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run, \YURA77.exe=[%SYSTEM%]\YURA77.exe
• HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run, \YURA74.exe=[%SYSTEM%]\YURA74.exe
• HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Run, \YUR459.exe=[%SYSTEM%]\YUR459.exe
• HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Run, \YUR457.exe=[%SYSTEM%]\YUR457.exe
• HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Run, \YUR456.exe=[%SYSTEM%]\YUR456.exe
• HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Run, \YUR44F.exe=[%SYSTEM%]\YUR44F.exe
• HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Run, \YUR2E2.exe=[%SYSTEM%]\YUR2E2.exe
• HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Run, \YUR24A.exe=[%SYSTEM%]\YUR24A.exe
• HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Run, \YUR220.exe=[%SYSTEM%]\YUR220.exe
• HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Run, \YUR527.exe=[%SYSTEM%]\YUR527.exe
• HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Run, \YUR451.exe=[%SYSTEM%]\YUR451.exe
• HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Run, \YUR179.exe=[%SYSTEM%]\YUR179.exe
• HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run, BMbb6e1c9c=Rundll32.exe "[%SYSTEM%]\adregrwh.dll",s
• HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run, 98c2ce37=rundll32.exe "[%SYSTEM%]\fmlnqxwq.dll",b
• HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run, Win32 SDK=[%SYSTEM%]\pfgsvkwod.exe
• HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run, 9ca7636a=rundll32.exe "[%SYSTEM%]\dapqbxyp.dll",b
• HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run, 9ca7636a=rundll32.exe "[%SYSTEM%]\kpsfdrvg.dll",b
• HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run, \YUR413.exe=[%SYSTEM%]\YUR413.exe
• HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run, \YUR40D.exe=[%SYSTEM%]\YUR40D.exe
• HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run, \YUR40C.exe=[%SYSTEM%]\YUR40C.exe
• HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Run, \YUR413.exe=[%SYSTEM%]\YUR413.exe
• HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Run, \YUR40D.exe=[%SYSTEM%]\YUR40D.exe
• HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Run, \YUR40C.exe=[%SYSTEM%]\YUR40C.exe
• HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run, e404f93f=rundll32.exe "[%SYSTEM%]\uwcfpvfh.dll",b
• HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run, BM874bbd22=Rundll32.exe "[%SYSTEM%]\yfhyoglq.dll",s
• HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run, 789a29fb=rundll32.exe "[%SYSTEM%]\wdxdffif.dll",b
• HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run, BM7ba91a67=Rundll32.exe "[%SYSTEM%]\panbpnoe.dll",s
• HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run, 00309580=rundll32.exe "[%SYSTEM%]\pvnnhmjt.dll",b
• HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run, 2848b4c9=rundll32.exe "[%SYSTEM%]\vxosnfuo.dll",b
• HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run, \YURB784.exe=[%SYSTEM%]\YURB784.exe
• HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run, \YUR32BB.exe=[%SYSTEM%]\YUR32BB.exe
• HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Run, \YUR5169.exe=[%SYSTEM%]\YUR5169.exe
• HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Run, \YUR5475.exe=[%SYSTEM%]\YUR5475.exe
• HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Run, \YUR1D01.exe=[%SYSTEM%]\YUR1D01.exe
• HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Run, \YURB784.exe=[%SYSTEM%]\YURB784.exe
• HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Run, \YUR32BB.exe=[%SYSTEM%]\YUR32BB.exe
• HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run, 80d7bfee=rundll32.exe "[%SYSTEM%]\ejswpgkb.dll",b
• HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run, \YURAFD.exe=[%SYSTEM%]\YURAFD.exe
• HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run, \YURAF7.exe=[%SYSTEM%]\YURAF7.exe
• HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run, \YURAEE.exe=[%SYSTEM%]\YURAEE.exe
• HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run, \YURAEC.exe=[%SYSTEM%]\YURAEC.exe
• HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Run, \YURAF7.exe=[%SYSTEM%]\YURAF7.exe
• HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Run, \YURAEC.exe=[%SYSTEM%]\YURAEC.exe
• HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run, d0e470d8=rundll32.exe "[%SYSTEM%]\txtquhue.dll",b
• HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run, 04b756a4=rundll32.exe "[%SYSTEM%]\pmtbxjwa.dll",b
• HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run, BM07846538=Rundll32.exe "[%SYSTEM%]\ixshrysh.dll",s
• HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run, 246a13ac="rundll32.exe" "[%SYSTEM%]\diypfwbj.dll",b
• HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run, d0fce882=rundll32.exe "[%SYSTEM%]\hcbbkbdt.dll",b
• HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run, BMd3cfdb1e=Rundll32.exe "[%SYSTEM%]\pmhrxpva.dll",s
• HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run, BMc73428d3=Rundll32.exe "[%SYSTEM%]\xijodfmr.dll",s
• HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run, 64e79eaa=rundll32.exe "[%SYSTEM%]\faxpjwau.dll",b
• HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run, f8b53f44=rundll32.exe "[%SYSTEM%]\obaspwjx.dll",b
• HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run, \YUR3D0.exe=[%SYSTEM%]\YUR3D0.exe
• HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run, \YUR3BD.exe=[%SYSTEM%]\YUR3BD.exe
• HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run, \YUR3BC.exe=[%SYSTEM%]\YUR3BC.exe
• HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run, \YUR3BB.exe=[%SYSTEM%]\YUR3BB.exe
• HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run, \YUR3BA.exe=[%SYSTEM%]\YUR3BA.exe
• HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Run, \YUR3D0.exe=[%SYSTEM%]\YUR3D0.exe

Scan your system registry for FREE

Comments