Top 10 Alerts

Top 100 Alerts List ...

Latest 10 Malware Files

Latest Files List ...

Testimonials

You guys are freakin' awesome, love the program, love the personalized service, and my pc loves it too :D

Justin S.

More ...

Vundo (Virtumondo) Registry Values

Scan your Windows registry for Vundo (Virtumondo)

HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run, a8e1ca44=rundll32.exe "[%SYSTEM%]\gnyusjpn.dll",b
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run, ac32bc3b=rundll32.exe "[%SYSTEM%]\gtygdpns.dll",b
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run, ac8a6a09=rundll32.exe "[%SYSTEM%]\ywwusmec.dll",b
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run, acb12650=rundll32.exe "[%SYSTEM%]\yagvteua.dll",b
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run, accf72f3=rundll32.exe "[%SYSTEM%]\ictrnqom.dll",b
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run, aceccf84=rundll32.exe "[%SYSTEM%]\tbckpkns.dll",b
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run, akapesrbdzm=[%SYSTEM%]\akapesrbdzm.exe
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run, AL8HLMS=AL8HLMS.exe
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run, apefabax.exe=[%SYSTEM%]\apefabax.exe
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run, apm=[%SYSTEM%]\apm.exe
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run, Application Layer Scheduler=agtsvc.exe
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run, Application Process=pgvsvc.exe
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run, Application Process=rndsvc.exe
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run, ArtChk=[%SYSTEM%]\artchker.exe
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run, atmdiag=[%SYSTEM%]\atmconf.exe
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run, axkrqfwb.exe=[%SYSTEM%]\axkrqfwb.exe
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run, b010fc66=rundll32.exe "[%SYSTEM%]\drtytlvd.dll",b
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run, b03eebb4=rundll32.exe "[%SYSTEM%]\uowmcrhs.dll",b
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run, b0f1a874=rundll32.exe "[%SYSTEM%]\jbdiphay.dll",b
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run, b415d38c=rundll32.exe "[%SYSTEM%]\qphjqxfp.dll",b
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run, b43d5dac=rundll32.exe "[%SYSTEM%]\hfqqfohs.dll",b
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run, b4b6e2d0=rundll32.exe "[%SYSTEM%]\kwhwanfr.dll",b
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run, b4bda793=rundll32.exe "[%SYSTEM%]\gxuwjayd.dll",b
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run, b4bda793=rundll32.exe "[%SYSTEM%]\iicselfm.dll",b
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run, b4bda793=rundll32.exe "[%SYSTEM%]\lpvkuctp.dll",b
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run, b4f3e007=rundll32.exe "[%SYSTEM%]\ngjafkyc.dll",b
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run, b4fe43bd=rundll32.exe "[%SYSTEM%]\nqgpqjot.dll",b
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run, b4fe43bd=rundll32.exe "[%SYSTEM%]\podndmhf.dll",b
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\run, b8326933=rundll32.exe "[%SYSTEM%]\jlspxafl.dll",b
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run, b87613d6=rundll32.exe "[%SYSTEM%]\lqseiwrk.dll",b
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run, b8bf6bc3=rundll32.exe "[%SYSTEM%]\usvcgjaq.dll",b
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run, b8c0e73f=rundll32.exe "[%SYSTEM%]\sekmyjjg.dll",b
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run, b8cd5621=rundll32.exe "[%SYSTEM%]\qeuuejvs.dll",b
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run, bbrskabfyv=[%SYSTEM%]\bbrskabfyv.exe
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run, bc649a27=rundll32.exe "[%SYSTEM%]\tvapoytq.dll",b
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run, bckrxyuwyz=[%SYSTEM%]\bckrxyuwyz.exe
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run, beadsofti=[%SYSTEM%]\iwssv32.exe
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run, BootService=rundll32.exe "[%SYSTEM%]\__c00738ED.dat",realset
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run, BootService=rundll32.exe "[%WINDOWS%]\qonkll.dll",realset
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run, bqne=[%SYSTEM%]\bqne.exe
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run, bqo=[%SYSTEM%]\bqo.exe
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run, bzk=[%SYSTEM%]\bzk.exe
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run, c00b8f7b=rundll32.exe "[%SYSTEM%]\fnhwkkuq.dll",sitypnow
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run, c04a9428=rundll32.exe "[%SYSTEM%]\sxikoghy.dll",b
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run, c09b0897=rundll32.exe "[%SYSTEM%]\riuqoplr.dll",b
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run, c0a59116=rundll32.exe "[%SYSTEM%]\skgrgtjc.dll",b
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run, c0b2a916=rundll32.exe "[%SYSTEM%]\eyluufta.dll",b
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run, c4611614=rundll32.exe "[%SYSTEM%]\gnubmqpe.dll",b
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run, c87d885b=rundll32.exe "[%SYSTEM%]\ctpkrfqg.dll",b
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run, c8d69bee=rundll32.exe "[%SYSTEM%]\ptisrcet.dll",b
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run, cc13e6bf=rundll32.exe "[%SYSTEM%]\fhsydphs.dll",b
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run, cc1842bf=rundll32.exe "[%SYSTEM%]\xwyrlpje.dll",b
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run, cc5d3832=rundll32.exe "[%SYSTEM%]\clmcbegh.dll",b
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run, cc9d0c90=rundll32.exe "[%SYSTEM%]\ypgtuyis.dll",b
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run, cca06a8b=rundll32.exe "[%SYSTEM%]\keqhymwp.dll",b
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run, cca06a8b=rundll32.exe "[%SYSTEM%]\xbcseppt.dll",b
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run, ccb995ab=rundll32.exe "[%SYSTEM%]\rioftwrx.dll",b
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run, ccdab347=rundll32.exe "[%SYSTEM%]\tpdnnado.dll",b
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run, cmds=[%SYSTEM%]\cmds.exe
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run, CTDrive=rundll32.exe [%SYSTEM%]\drvboc.dll,startup
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run, CTDrive=rundll32.exe [%SYSTEM%]\drvbov.dll,startup
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run, CTDrive=rundll32.exe [%SYSTEM%]\drvbug.dll,startup
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run, CTDrive=rundll32.exe [%SYSTEM%]\drvdem.dll,startup
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run, CTDrive=rundll32.exe [%SYSTEM%]\drvduk.dll,startup
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run, CTDrive=rundll32.exe [%SYSTEM%]\drvfid.dll,startup
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run, CTDrive=rundll32.exe [%SYSTEM%]\drvfil.dll,startup
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run, CTDrive=rundll32.exe [%SYSTEM%]\drvgac.dll,startup
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run, CTDrive=rundll32.exe [%SYSTEM%]\drvgoh.dll,startup
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run, CTDrive=rundll32.exe [%SYSTEM%]\drvgol.dll,startup
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run, CTDrive=rundll32.exe [%SYSTEM%]\drvgun.dll,startup
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run, CTDrive=rundll32.exe [%SYSTEM%]\drvhac.dll,startup
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run, CTDrive=rundll32.exe [%SYSTEM%]\drvhux.dll,startup
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run, CTDrive=rundll32.exe [%SYSTEM%]\drvjex.dll,startup
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run, CTDrive=rundll32.exe [%SYSTEM%]\drvker.dll,startup
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run, CTDrive=rundll32.exe [%SYSTEM%]\drvkuv.dll,startup
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run, CTDrive=rundll32.exe [%SYSTEM%]\drvlur.dll,startup
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run, CTDrive=rundll32.exe [%SYSTEM%]\drvmap.dll,startup
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run, CTDrive=rundll32.exe [%SYSTEM%]\drvpar.dll,startup
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run, CTDrive=rundll32.exe [%SYSTEM%]\drvpot.dll,startup
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run, CTDrive=rundll32.exe [%SYSTEM%]\drvrab.dll,startup
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run, CTDrive=rundll32.exe [%SYSTEM%]\drvsod.dll,startup
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run, CTDrive=rundll32.exe [%SYSTEM%]\drvten.dll,startup
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run, CTDrive=rundll32.exe [%SYSTEM%]\drvtog.dll,startup
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run, CTDrive=rundll32.exe [%SYSTEM%]\drvvoj.dll,startup
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run, CTDrive=rundll32.exe [%SYSTEM%]\drvwov.dll,startup
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run, CTDrive=rundll32.exe [%SYSTEM%]\drvxap.dll,startup
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run, CTDrive=rundll32.exe [%SYSTEM%]\drvxot.dll,startup
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run, CTDrive=rundll32.exe [%SYSTEM%]\drvzuc.dll,startup
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\run, d01d9fcc=rundll32.exe "[%SYSTEM%]\usijxetn.dll",b
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run, d03245e7=rundll32.exe "[%SYSTEM%]\laehveec.dll",b
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run, d04e2d7e=rundll32.exe "[%SYSTEM%]\kvpdhnoc.dll",b
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\run, d43d1384=rundll32.exe "[%SYSTEM%]\cdbsdjbr.dll",b
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run, d497cf04=rundll32.exe "[%SYSTEM%]\hhicjhpc.dll",b
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run, d4c1f5b8=rundll32.exe "[%SYSTEM%]\yawavevd.dll",b
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run, d4fe1003=rundll32.exe "[%SYSTEM%]\mfkyrvce.dll",b
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run, d82ef35f=rundll32.exe "[%SYSTEM%]\yywmaqkb.dll",b
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run, d86915a9=rundll32.exe "[%SYSTEM%]\bcrunwfv.dll",b
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\run, d8bba171=rundll32.exe "[%SYSTEM%]\knrpiguv.dll",b
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run, dbqqjq=[%SYSTEM%]\dbqqjq.exe
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersionRun, dc1834d5=rundll32.exe "[%SYSTEM%]\eqjbgigh.dll",b
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run, dc3499c1=rundll32.exe "[%SYSTEM%]\uxprchxx.dll",b
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run, dc79c8ff=rundll32.exe "[%SYSTEM%]\hdafmyjw.dll",b
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run, dcef7b54=rundll32.exe "[%SYSTEM%]\ylbnynax.dll",b
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run, dchgiwm=[%SYSTEM%]\dchgiwm.exe
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run, df83d7433234=[%SYSTEM%]\ATRACE31.exe
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run, DllRunning=rundll32.exe "[%SYSTEM%]\atwlejkg.dll",setvm
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run, DllRunning=rundll32.exe "[%SYSTEM%]\djrmvwom.dll",setvm
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run, DllRunning=rundll32.exe "[%SYSTEM%]\dliledmn.dll",setvm
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run, DllRunning=rundll32.exe "[%SYSTEM%]\fclmcurm.dll",setvm
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run, DllRunning=rundll32.exe "[%SYSTEM%]\flmmfuli.dll",setvm
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run, DllRunning=rundll32.exe "[%SYSTEM%]\fyvservh.dll",setvm
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run, DllRunning=rundll32.exe "[%SYSTEM%]\hjgjghbb.dll",setvm
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run, DllRunning=rundll32.exe "[%SYSTEM%]\iobeumwq.dll",setvm
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run, DllRunning=rundll32.exe "[%SYSTEM%]\iodjtlch.dll",setvm
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run, DllRunning=rundll32.exe "[%SYSTEM%]\jvqtyljd.dll",setvm
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run, DllRunning=rundll32.exe "[%SYSTEM%]\kjifarxx.dll",setvm
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run, DllRunning=rundll32.exe "[%SYSTEM%]\lrfcchng.dll",setvm
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run, DllRunning=rundll32.exe "[%SYSTEM%]\mdvhkvid.dll",setvm
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run, DllRunning=rundll32.exe "[%SYSTEM%]\mlhxaqts.dll",setvm
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run, DllRunning=rundll32.exe "[%SYSTEM%]\qotsxrmv.dll",setvm
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run, DllRunning=rundll32.exe "[%SYSTEM%]\uginsbmi.dll",setvm
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run, DllRunning=rundll32.exe "[%SYSTEM%]\wmegekfs.dll",setvm
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run, DllRunning=rundll32.exe "[%SYSTEM%]\wxywgsgr.dll",setvm
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run, DllRunning=rundll32.exe "[%SYSTEM%]\ysngcysc.dll",setvm
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run, dxvndlbggj=[%SYSTEM%]\dxvndlbggj.exe
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run, dyjopsvk.exe=[%SYSTEM%]\dyjopsvk.exe
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run, e027fa7a=rundll32.exe "[%SYSTEM%]\mwoetoix.dll",b
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run, e02e2014=rundll32.exe "[%SYSTEM%]\koqeabgi.dll",b
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run, e05d6861=rundll32.exe "[%SYSTEM%]\kmjovtop.dll",b
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run, e07c3ec3=rundll32.exe "[%SYSTEM%]\fobeylxu.dll",b
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run, e0af566b=rundll32.exe "[%SYSTEM%]\cbtkcxue.dll",b
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run, e42e28c6=rundll32.exe "[%SYSTEM%]\phvlarhw.dll",b
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run, e44e46d1=rundll32.exe "[%SYSTEM%]\cnatdpex.dll",b
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run, e496cc9f=rundll32.exe "[%SYSTEM%]\isoodsfm.dll",b
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run, e4998540=rundll32.exe "[%SYSTEM%]\urckiqtw.dll",b
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run, e4ad6bab=rundll32.exe "[%SYSTEM%]\pxjwriwe.dll",b
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run, e4b94219=rundll32.exe "[%SYSTEM%]\fhodwnqg.dll",b
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run, e4ba63dd=rundll32.exe "[%SYSTEM%]\fyrblwjd.dll",b
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run, e4f50fa1=rundll32.exe "[%SYSTEM%]\eofxprbb.dll",b
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run, e819c3f6=rundll32.exe "[%SYSTEM%]\kuscjffj.dll",b
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run, e8e06ee5=rundll32.exe "[%SYSTEM%]\vgoxndih.dll",b
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run, ec258fae=rundll32.exe "[%SYSTEM%]\tjahcgtt.dll",b
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run, ec83d2be=rundll32.exe "[%SYSTEM%]\jyrkagew.dll",b
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run, ecc536f7=rundll32.exe "[%SYSTEM%]\kxotxlfv.dll",b
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run, eihilch=[%SYSTEM%]\eihilch.exe
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run, emfkwvp=[%SYSTEM%]\emfkwvp.exe
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run, ernceuud=[%SYSTEM%]\ernceuud.exe
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run, f038a6fa=rundll32.exe "[%SYSTEM%]\usmxirfs.dll",b
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run, f07bd2f8=rundll32.exe "[%SYSTEM%]\uhmxbkki.dll",b
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run, f4435080=rundll32.exe "[%SYSTEM%]\cjwdbpwd.dll",b
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run, f49f2be6=rundll32.exe "[%SYSTEM%]\splkbcnb.dll",b
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run, f4a92243=rundll32.exe "[%SYSTEM%]\mhhwkrrd.dll",b
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run, f4e432de=rundll32.exe "[%SYSTEM%]\awopituh.dll",b
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run, f4e7c0f6=rundll32.exe "[%SYSTEM%]\vquqcmgd.dll",b
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run, f4eff32c=rundll32.exe "[%SYSTEM%]\sitfhask.dll",b
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run, f853fe7c=rundll32.exe "[%SYSTEM%]\rrvuxwyg.dll",b
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run, f893ce9b=rundll32.exe "[%SYSTEM%]\oihvqsdt.dll",b
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run, f8a4b399=rundll32.exe "[%SYSTEM%]\koykombx.dll",b
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run, f8d5f531=rundll32.exe "[%SYSTEM%]\pisefkbc.dll",b
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run, fc4d4982=rundll32.exe "[%SYSTEM%]\hsfyksuc.dll",b
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run, fc50d2a6=rundll32.exe "[%SYSTEM%]\owwgpfqw.dll",b
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run, fc521003=rundll32.exe "[%SYSTEM%]\wvoinmji.dll",b
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run, fca1dc5e=rundll32.exe "[%SYSTEM%]\qwlulxpm.dll",b
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run, fghtbeyykrui=[%SYSTEM%]\fghtbeyykrui.exe
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run, fghwprylsg=[%SYSTEM%]\fghwprylsg.exe
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run, fhjpug=[%SYSTEM%]\fhjpug.exe
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run, fkfwtnhhbcg=[%SYSTEM%]\fkfwtnhhbcg.exe
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run, FolderView=rundll32.exe "[%SYSTEM%]\mwuuylap.dll",sitypnow
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run, foupbbkouao=[%SYSTEM%]\foupbbkouao.exe
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run, fujerib.dll=[%SYSTEM%]\rundll32.exe [%SYSTEM%]\fujerib.dll,chgqvhf
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run, fxflmgd.dll=[%SYSTEM%]\rundll32.exe [%SYSTEM%]\fxflmgd.dll,kklacib
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run, gazqrla=[%SYSTEM%]\gazqrla.exe
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run, gmlczk=[%SYSTEM%]\gmlczk.exe
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run, GPLv3=rundll32.exe "[%SYSTEM%]\acgevlok.dll",realset
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run, GPLv3=rundll32.exe "[%SYSTEM%]\bdwkveak.dll",realset
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run, GPLv3=rundll32.exe "[%SYSTEM%]\dyqarvop.dll",realset
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run, GPLv3=rundll32.exe "[%SYSTEM%]\ebqhvbrv.dll",realset
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run, GPLv3=rundll32.exe "[%SYSTEM%]\epaxujci.dll",realset
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run, GPLv3=rundll32.exe "[%SYSTEM%]\kkfnkauq.dll",realset
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run, GPLv3=rundll32.exe "[%SYSTEM%]\mvpjusqf.dll",realset
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run, GPLv3=rundll32.exe "[%SYSTEM%]\ngorrpfk.dll",realset
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run, GPLv3=rundll32.exe "[%SYSTEM%]\omfgectk.dll",realset
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run, GPLv3=rundll32.exe "[%SYSTEM%]\otsllxoc.dll",realset
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run, GPLv3=rundll32.exe "[%SYSTEM%]\ourxnjwc.dll",realset
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run, GPLv3=rundll32.exe "[%SYSTEM%]\peyuurob.dll",realset
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run, GPLv3=rundll32.exe "[%SYSTEM%]\pqdmoyyk.dll",realset
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run, GPLv3=rundll32.exe "[%SYSTEM%]\pvqpcmra.dll",realset
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run, GPLv3=rundll32.exe "[%SYSTEM%]\qildygob.dll",realset
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run, GPLv3=rundll32.exe "[%SYSTEM%]\qiqejkqt.dll",realset
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run, GPLv3=rundll32.exe "[%SYSTEM%]\qjccfokc.dll",realset
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run, GPLv3=rundll32.exe "[%SYSTEM%]\qjlxkymh.dll",realset
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run, GPLv3=rundll32.exe "[%SYSTEM%]\scaleaoy.dll",realset
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run, GPLv3=rundll32.exe "[%SYSTEM%]\sjchwwar.dll",realset
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run, GPLv3=rundll32.exe "[%SYSTEM%]\tbwtfiea.dll",realset
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run, GPLv3=rundll32.exe "[%SYSTEM%]\uifgfkaf.dll",realset
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run, GPLv3=rundll32.exe "[%SYSTEM%]\vkocrjkj.dll",realset
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run, GPLv3=rundll32.exe "[%SYSTEM%]\wmjiesrq.dll",realset
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run, GPLv3=rundll32.exe "[%SYSTEM%]\xsijruot.dll",realset
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run, GPLv3=rundll32.exe "[%SYSTEM%]\yaauasot.dll",realset
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run, GPLv3=rundll32.exe "[%SYSTEM%]\ypbfvpij.dll",realset
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run, GPLv3=rundll32.exe "[%SYSTEM%]\yypqylfs.dll",realset
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run, gtzlb=[%SYSTEM%]\gtzlb.exe
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run, gwiz=[%SYSTEM%]\arpl.exe
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run, gwiz=[%SYSTEM%]\ntsystem.exe
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run, gxgel=[%SYSTEM%]\gxgel.exe
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run, hmrcbcvk.exe=[%SYSTEM%]\hmrcbcvk.exe
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run, HotKeysCmds=[%SYSTEM%]\hkcmd.exe
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run, HPHmon05=[%SYSTEM%]\hphmon05.exe
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run, hsuw=[%SYSTEM%]\hsuw.exe
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run, ibfpxud.dll=[%SYSTEM%]\rundll32.exe [%SYSTEM%]\ibfpxud.dll,shhdsmb
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run, icq.com=rundll32.exe "[%SYSTEM%]\aqfkabbl.dll",forkonce
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run, icq.com=rundll32.exe "[%SYSTEM%]\blmntwxa.dll",forkonce
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run, icq.com=rundll32.exe "[%SYSTEM%]\cjnuxptl.dll",forkonce
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run, icq.com=rundll32.exe "[%SYSTEM%]\crxtbffn.dll",forkonce
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run, icq.com=rundll32.exe "[%SYSTEM%]\fmnufnjg.dll",forkonce
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run, icq.com=rundll32.exe "[%SYSTEM%]\fulkvjxh.dll",forkonce
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run, icq.com=rundll32.exe "[%SYSTEM%]\ginhjvon.dll",forkonce
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run, icq.com=rundll32.exe "[%SYSTEM%]\ivexeamd.dll",forkonce
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run, icq.com=rundll32.exe "[%SYSTEM%]\nrgawsco.dll",forkonce
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run, icq.com=rundll32.exe "[%SYSTEM%]\qdmqoxlf.dll",forkonce
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run, icq.com=rundll32.exe "[%SYSTEM%]\qfbyqpcw.dll",forkonce
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run, icq.com=rundll32.exe "[%SYSTEM%]\qvbvhykl.dll",forkonce
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run, icq.com=rundll32.exe "[%SYSTEM%]\sfywuluh.dll",forkonce
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run, icq.com=rundll32.exe "[%SYSTEM%]\sjmfvnfh.dll",forkonce
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run, icq.com=rundll32.exe "[%SYSTEM%]\tdatwegs.dll",forkonce
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run, icq.com=rundll32.exe "[%SYSTEM%]\tqmntyxf.dll",forkonce
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run, icq.com=rundll32.exe "[%SYSTEM%]\vvdgiobt.dll",forkonce
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run, icq.com=rundll32.exe "[%SYSTEM%]\vyblurxq.dll",forkonce
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run, icq.com=rundll32.exe "[%SYSTEM%]\weqqjbdh.dll",forkonce
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run, IgfxTray=[%SYSTEM%]\igfxtray.exe
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run, InfoData=rundll32.exe "[%WINDOWS%]\opqqqp.dll",realset
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run, InfoData=rundll32.exe "[%WINDOWS%]\xxyabc.dll",realset
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run, iq=[%SYSTEM%]\iq.exe
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run, j=[%SYSTEM%]\j.exe
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run, jq=[%SYSTEM%]\jq.exe
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run, jsobuabvr=[%SYSTEM%]\jsobuabvr.exe
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run, kenddl=[%SYSTEM%]\kenddl.exe
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run, kj=[%SYSTEM%]\kj.exe
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run, LMSAL1K=LMSAL1K.exe
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run, LMSXXD=LMSXXD.exe
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run, Logical Disk Detection=mdesvc.exe
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run, MemoryManager=rundll32.exe "[%SYSTEM%]\bjocpujw.dll",forkonce
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run, MemoryManager=rundll32.exe "[%SYSTEM%]\cumnxoml.dll",sitypnow
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run, MemoryManager=rundll32.exe "[%SYSTEM%]\eiknmmpq.dll",forkonce
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run, MemoryManager=rundll32.exe "[%SYSTEM%]\lswpwrqr.dll",forkonce
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run, MemoryManager=rundll32.exe "[%SYSTEM%]\mbscsqns.dll",forkonce
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run, MemoryManager=rundll32.exe "[%SYSTEM%]\salxrjii.dll",forkonce
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run, MemoryManager=rundll32.exe "[%SYSTEM%]\tigkdrrx.dll",forkonce
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run, MemoryManager=rundll32.exe "[%SYSTEM%]\umbvdedy.dll",forkonce
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run, MemoryManager=rundll32.exe "[%SYSTEM%]\xiicmduw.dll",forkonce
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run, mimxmyh=[%SYSTEM%]\mimxmyh.exe
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run, MSOffice=rundll32.exe "[%SYSTEM%]\odetbldy.dll",sitypnow
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run, MSOffice=rundll32.exe "[%SYSTEM%]\vobgkfwf.dll",sitypnow
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run, muja=[%SYSTEM%]\muja.exe
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run, n=[%SYSTEM%]\n.exe
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run, ndpab=[%SYSTEM%]\ndpab.exe
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run, NDPS=[%WINDOWS%]\System32\dpmw32.exe
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run, New Value #1=rundll32.exe "[%SYSTEM%]\VundoTest.dll",realset
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run, neweof=[%SYSTEM%]\neweof.exe
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run, nf=[%SYSTEM%]\nf.exe
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run, nrampdvb=[%SYSTEM%]\nrampdvb.exe
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run, nwyqahl.dll=[%SYSTEM%]\rundll32.exe [%SYSTEM%]\nwyqahl.dll,wydqzl
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run, nxkaaaaa=[%SYSTEM%]\nxkaaaaa.exe
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run, nyt=[%SYSTEM%]\nyt.exe
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run, ockreixlz=[%SYSTEM%]\ockreixlz.exe
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run, onzdiohrkk=[%SYSTEM%]\onzdiohrkk.exe
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run, owv=[%SYSTEM%]\owv.exe
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run, PCHelp tools=[%SYSTEM%]\pchtls32.exe
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run, Persistence=[%SYSTEM%]\igfxpers
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run, 1c2e4ac0=rundll32.exe "[%SYSTEM%]\dqeeyatd.dll",b
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run, 88737fe5=rundll32.exe "[%SYSTEM%]\gjvhwody.dll",b
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run, dc1834d5=rundll32.exe "[%SYSTEM%]\eqjbgigh.dll",b
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run, Intel system tool=[%SYSTEM%]\svehost.exe
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run, Persistence=[%SYSTEM%]\igfxpers.exe
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run, Personal Security Center Monitor=[%SYSTEM%]\isc_ui.exe
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run, Personal Security Center Monitor=[%SYSTEM%]\psc_mon.exe
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run, pllp=[%SYSTEM%]\pllp.exe
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run, poiths=[%SYSTEM%]\poiths.exe
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run, poqagffdh=[%SYSTEM%]\poqagffdh.exe
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run, PrintDrive=rundll32.exe "[%SYSTEM%]\ckdhhwup.dll",setvm
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run, PrintDrive=rundll32.exe "[%SYSTEM%]\lumanfhh.dll",setvm
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run, PrintDrive=rundll32.exe "[%SYSTEM%]\nobveehv.dll",setvm
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run, PrintDrive=rundll32.exe "[%SYSTEM%]\pfumptli.dll",setvm
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run, PrintDrive=rundll32.exe "[%SYSTEM%]\qqbhuwqo.dll",setvm
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run, PrintDrive=rundll32.exe "[%SYSTEM%]\tugycwwd.dll",setvm
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run, PrintDrive=rundll32.exe "[%SYSTEM%]\uhytmfbt.dll",setvm
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run, PrintDrive=rundll32.exe "[%SYSTEM%]\vhvmkbyu.dll",setvm
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run, PrintDrive=rundll32.exe "[%SYSTEM%]\vwararel.dll",setvm
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run, qhsdcik.dll=[%SYSTEM%]\rundll32.exe [%SYSTEM%]\qhsdcik.dll,zhszihe
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run, QuickTime Task=[%SYSTEM%]\qttask.exe
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run, QuickTime Task=[%WINDOWS%]\System32\qttask.exe
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run, Remote Access Adapter=rvasvc.exe
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run, RemoteControl=[%SYSTEM%]\rmctrl.exe
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run, RemoteControl=[%WINDOWS%]\System32\rmctrl.exe
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run, RemoveElanIcon=[%SYSTEM%]\ELAN.exe
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run, Runonce=[%SYSTEM%]\runouce.exe
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run, rvoddsemjlt=[%SYSTEM%]\rvoddsemjlt.exe
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run, rxaokbgqxp=[%SYSTEM%]\rxaokbgqxp.exe
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run, S3apphk=S3apphk.exe
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run, saddwbrsr=[%SYSTEM%]\saddwbrsr.exe
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run, saqkix=[%SYSTEM%]\saqkix.exe
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run, sbodyzfhdza=[%SYSTEM%]\sbodyzfhdza.exe
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run, sdivba=[%SYSTEM%]\igfzfgzy.exe
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run, SearchIndexer=rundll32.exe "[%SYSTEM%]\anhxptky.dll",sitypnow
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run, SearchIndexer=rundll32.exe "[%SYSTEM%]\aorsbaio.dll",sitypnow
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run, SearchIndexer=rundll32.exe "[%SYSTEM%]\aqhvedaf.dll",sitypnow
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run, SearchIndexer=rundll32.exe "[%SYSTEM%]\asmpoqfp.dll",sitypnow
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run, SearchIndexer=rundll32.exe "[%SYSTEM%]\bdxmqovv.dll",sitypnow
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run, SearchIndexer=rundll32.exe "[%SYSTEM%]\bitcwhah.dll",sitypnow
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run, SearchIndexer=rundll32.exe "[%SYSTEM%]\bpbowvlo.dll",sitypnow
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run, SearchIndexer=rundll32.exe "[%SYSTEM%]\cjkabccc.dll",sitypnow
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run, SearchIndexer=rundll32.exe "[%SYSTEM%]\cllkgmvf.dll",sitypnow
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run, SearchIndexer=rundll32.exe "[%SYSTEM%]\cmmjhbnv.dll",sitypnow
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run, SearchIndexer=rundll32.exe "[%SYSTEM%]\ctuomdtg.dll",sitypnow
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run, SearchIndexer=rundll32.exe "[%SYSTEM%]\ejwghlpr.dll",sitypnow
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run, SearchIndexer=rundll32.exe "[%SYSTEM%]\esfkocgj.dll",sitypnow
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run, SearchIndexer=rundll32.exe "[%SYSTEM%]\fcaeaewb.dll",sitypnow
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run, SearchIndexer=rundll32.exe "[%SYSTEM%]\fjedxmbc.dll",sitypnow
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run, SearchIndexer=rundll32.exe "[%SYSTEM%]\fvtvauuo.dll",sitypnow
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run, SearchIndexer=rundll32.exe "[%SYSTEM%]\gbvrmrqa.dll",sitypnow
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run, SearchIndexer=rundll32.exe "[%SYSTEM%]\getbqacb.dll",sitypnow
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run, SearchIndexer=rundll32.exe "[%SYSTEM%]\ggqdyvdi.dll",sitypnow
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run, SearchIndexer=rundll32.exe "[%SYSTEM%]\gmrudkxh.dll",sitypnow
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run, SearchIndexer=rundll32.exe "[%SYSTEM%]\gnfhxdcp.dll",sitypnow
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run, SearchIndexer=rundll32.exe "[%SYSTEM%]\gqenomvx.dll",sitypnow
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run, SearchIndexer=rundll32.exe "[%SYSTEM%]\hhsrtsun.dll",sitypnow
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run, SearchIndexer=rundll32.exe "[%SYSTEM%]\hlpvbguq.dll",sitypnow
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run, SearchIndexer=rundll32.exe "[%SYSTEM%]\hvxjwfag.dll",sitypnow
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run, SearchIndexer=rundll32.exe "[%SYSTEM%]\hyuphiqj.dll",sitypnow
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run, SearchIndexer=rundll32.exe "[%SYSTEM%]\jrescmkj.dll",sitypnow
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run, SearchIndexer=rundll32.exe "[%SYSTEM%]\kcawgvgp.dll",sitypnow
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run, SearchIndexer=rundll32.exe "[%SYSTEM%]\kgeqgcmu.dll",sitypnow
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run, SearchIndexer=rundll32.exe "[%SYSTEM%]\kgqnomsb.dll",sitypnow
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run, SearchIndexer=rundll32.exe "[%SYSTEM%]\kkeaknps.dll",sitypnow
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run, SearchIndexer=rundll32.exe "[%SYSTEM%]\kmbvmosw.dll",sitypnow
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run, SearchIndexer=rundll32.exe "[%SYSTEM%]\lkvgujwa.dll",sitypnow
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run, SearchIndexer=rundll32.exe "[%SYSTEM%]\lnpxnbjs.dll",sitypnow
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run, SearchIndexer=rundll32.exe "[%SYSTEM%]\lpvojtso.dll",sitypnow
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run, SearchIndexer=rundll32.exe "[%SYSTEM%]\naqqihld.dll",sitypnow
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run, SearchIndexer=rundll32.exe "[%SYSTEM%]\nbcxtolm.dll",sitypnow
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run, SearchIndexer=rundll32.exe "[%SYSTEM%]\obaxhqpt.dll",sitypnow
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run, SearchIndexer=rundll32.exe "[%SYSTEM%]\odqbgacb.dll",sitypnow
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run, SearchIndexer=rundll32.exe "[%SYSTEM%]\ohtcdwkl.dll",sitypnow
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run, SearchIndexer=rundll32.exe "[%SYSTEM%]\ojgulkvq.dll",sitypnow
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run, SearchIndexer=rundll32.exe "[%SYSTEM%]\osjwuwyd.dll",sitypnow
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run, SearchIndexer=rundll32.exe "[%SYSTEM%]\pnlqnyns.dll",sitypnow
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run, SearchIndexer=rundll32.exe "[%SYSTEM%]\qkulxhvg.dll",sitypnow
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run, SearchIndexer=rundll32.exe "[%SYSTEM%]\qlnoojil.dll",sitypnow
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run, SearchIndexer=rundll32.exe "[%SYSTEM%]\qmgaubbi.dll",sitypnow
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run, SearchIndexer=rundll32.exe "[%SYSTEM%]\rcevoqkt.dll",sitypnow
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run, SearchIndexer=rundll32.exe "[%SYSTEM%]\rifnmdob.dll",sitypnow
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run, SearchIndexer=rundll32.exe "[%SYSTEM%]\rjhsnutl.dll",sitypnow
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run, SearchIndexer=rundll32.exe "[%SYSTEM%]\rktkbnjd.dll",sitypnow
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run, SearchIndexer=rundll32.exe "[%SYSTEM%]\rurgobhk.dll",sitypnow
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run, SearchIndexer=rundll32.exe "[%SYSTEM%]\rvkrjkom.dll",sitypnow
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run, SearchIndexer=rundll32.exe "[%SYSTEM%]\rwupnrdp.dll",sitypnow
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run, SearchIndexer=rundll32.exe "[%SYSTEM%]\sjdpmxer.dll",sitypnow
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run, SearchIndexer=rundll32.exe "[%SYSTEM%]\sjxrdhhk.dll",sitypnow
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run, SearchIndexer=rundll32.exe "[%SYSTEM%]\skruqbll.dll",sitypnow
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run, SearchIndexer=rundll32.exe "[%SYSTEM%]\sleiiiwb.dll",sitypnow
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run, SearchIndexer=rundll32.exe "[%SYSTEM%]\stqdlttq.dll",sitypnow
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run, SearchIndexer=rundll32.exe "[%SYSTEM%]\syhjobri.dll",sitypnow
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run, SearchIndexer=rundll32.exe "[%SYSTEM%]\tejtgeyq.dll",sitypnow
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run, SearchIndexer=rundll32.exe "[%SYSTEM%]\tgpobchv.dll",sitypnow
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run, SearchIndexer=rundll32.exe "[%SYSTEM%]\tsaftqft.dll",sitypnow
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run, SearchIndexer=rundll32.exe "[%SYSTEM%]\tyjpnwod.dll",sitypnow
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run, SearchIndexer=rundll32.exe "[%SYSTEM%]\ucdxaeob.dll",sitypnow
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run, SearchIndexer=rundll32.exe "[%SYSTEM%]\umvkrrfc.dll",sitypnow
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run, SearchIndexer=rundll32.exe "[%SYSTEM%]\uruyxejb.dll",sitypnow
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run, SearchIndexer=rundll32.exe "[%SYSTEM%]\uxtdacdv.dll",sitypnow
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run, SearchIndexer=rundll32.exe "[%SYSTEM%]\vnjwkcvb.dll",sitypnow
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run, SearchIndexer=rundll32.exe "[%SYSTEM%]\vnsbvjre.dll",sitypnow
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run, SearchIndexer=rundll32.exe "[%SYSTEM%]\voxbcrxs.dll",sitypnow
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run, SearchIndexer=rundll32.exe "[%SYSTEM%]\vvwtsvle.dll",sitypnow
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run, SearchIndexer=rundll32.exe "[%SYSTEM%]\vydghuyb.dll",sitypnow
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run, SearchIndexer=rundll32.exe "[%SYSTEM%]\wfapdism.dll",sitypnow
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run, SearchIndexer=rundll32.exe "[%SYSTEM%]\wvrfkcun.dll",sitypnow
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run, SearchIndexer=rundll32.exe "[%SYSTEM%]\xcrgnllw.dll",sitypnow
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run, SearchIndexer=rundll32.exe "[%SYSTEM%]\xjhalicf.dll",sitypnow
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run, SearchIndexer=rundll32.exe "[%SYSTEM%]\xnhswqmg.dll",sitypnow
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run, SearchIndexer=rundll32.exe "[%SYSTEM%]\xoakddqs.dll",sitypnow
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run, SearchIndexer=rundll32.exe "[%SYSTEM%]\xvsslabe.dll",sitypnow
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run, SearchIndexer=rundll32.exe "[%SYSTEM%]\xxpvbbqn.dll",sitypnow
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run, SearchIndexer=rundll32.exe "[%SYSTEM%]\ybjgyten.dll",sitypnow
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run, SearchIndexer=rundll32.exe "[%SYSTEM%]\yktrfmbx.dll",sitypnow
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run, SearchIndexer=rundll32.exe "[%SYSTEM%]\ymydbpsy.dll",sitypnow
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run, SearchIndexer=rundll32.exe "[%SYSTEM%]\yoiskgqq.dll",sitypnow
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run, SearchIndexer=rundll32.exe "[%SYSTEM%]\yoxctudm.dll",sitypnow
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run, SearchIndexer=rundll32.exe "[%SYSTEM%]\yqlouqim.dll",sitypnow
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run, SecurityUpdate=rundll32.exe [%SYSTEM%]\biodzhb.dll,TurnOn2
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run, SecurityUpdate=rundll32.exe [%SYSTEM%]\cnywaup.dll,TurnOn2
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run, SecurityUpdate=rundll32.exe [%SYSTEM%]\cxjfxpz.dll,TurnOn2
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run, SecurityUpdate=rundll32.exe [%SYSTEM%]\eozaznz.dll,TurnOn2
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run, SecurityUpdate=rundll32.exe [%SYSTEM%]\evzkekq.dll,TurnOn2
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run, SecurityUpdate=rundll32.exe [%SYSTEM%]\hlhrfzx.dll,TurnOn2
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run, SecurityUpdate=rundll32.exe [%SYSTEM%]\hwnvfoi.dll,TurnOn2
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run, SecurityUpdate=rundll32.exe [%SYSTEM%]\ingntrx.dll,TurnOn2
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run, SecurityUpdate=rundll32.exe [%SYSTEM%]\ndqtaui.dll,TurnOn2
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run, SecurityUpdate=rundll32.exe [%SYSTEM%]\ocmxypa.dll,TurnOn2
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run, SecurityUpdate=rundll32.exe [%SYSTEM%]\sfbmaqs.dll,TurnOn2
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run, SecurityUpdate=rundll32.exe [%SYSTEM%]\sfhyhhr.dll,TurnOn2
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run, SecurityUpdate=rundll32.exe [%SYSTEM%]\smgcabu.dll,TurnOn2
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run, SecurityUpdate=rundll32.exe [%SYSTEM%]\vhionps.dll,TurnOn2
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run, SecurityUpdate=rundll32.exe [%SYSTEM%]\wqjdiqv.dll,TurnOn2
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run, setup=rundll32.exe "[%SYSTEM%]\adncflhb.dll",realset
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run, setup=rundll32.exe "[%SYSTEM%]\arkyhqpn.dll",realset
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run, setup=rundll32.exe "[%SYSTEM%]\cqrhfydc.dll",realset
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run, setup=rundll32.exe "[%SYSTEM%]\dqdgqsiq.dll",realset
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run, setup=rundll32.exe "[%SYSTEM%]\emeqdsbh.dll",realset
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run, setup=rundll32.exe "[%SYSTEM%]\eqmbwpjg.dll",realset
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run, setup=rundll32.exe "[%SYSTEM%]\fewxlaqc.dll",realset
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run, setup=rundll32.exe "[%SYSTEM%]\gkfwqryj.dll",realset
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run, setup=rundll32.exe "[%SYSTEM%]\gpuavqxg.dll",realset
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run, setup=rundll32.exe "[%SYSTEM%]\gutcfqdc.dll",realset
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run, setup=rundll32.exe "[%SYSTEM%]\hutqxrdp.dll",realset
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run, setup=rundll32.exe "[%SYSTEM%]\hvtrexnq.dll",realset
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run, setup=rundll32.exe "[%SYSTEM%]\iqqmakan.dll",realset
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run, setup=rundll32.exe "[%SYSTEM%]\kmxbnqdq.dll",realset
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run, setup=rundll32.exe "[%SYSTEM%]\mrialbwp.dll",realset
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run, setup=rundll32.exe "[%SYSTEM%]\nidhaadj.dll",realset
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run, setup=rundll32.exe "[%SYSTEM%]\ohsuyklc.dll",realset
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run, setup=rundll32.exe "[%SYSTEM%]\ovfytntg.dll",realset
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run, setup=rundll32.exe "[%SYSTEM%]\sylflwbn.dll",realset
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run, setup=rundll32.exe "[%SYSTEM%]\tbqpknjj.dll",realset
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run, setup=rundll32.exe "[%SYSTEM%]\ubsckxnw.dll",realset
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run, setup=rundll32.exe "[%SYSTEM%]\yrxrhvxg.dll",realset
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run, setup=rundll32.exe "[%SYSTEM%]\yvrfdjhn.dll",realset
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run, setup=rundll32.exe "[%WINDOWS%]\geedax.dll",realset
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run, setup=rundll32.exe "[%WINDOWS%]\iifecd.dll",realset
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run, setup=rundll32.exe "[%WINDOWS%]\mlifde.dll",realset
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run, setup=rundll32.exe "[%WINDOWS%]\mlkhed.dll",realset
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run, setup=rundll32.exe "[%WINDOWS%]\nnkheb.dll",realset
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run, setup=rundll32.exe "[%WINDOWS%]\nnmmnk.dll",realset
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run, setup=rundll32.exe "[%WINDOWS%]\nnommm.dll",realset
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run, setup=rundll32.exe "[%WINDOWS%]\tuvuvs.dll",realset
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run, setup=rundll32.exe "[%WINDOWS%]\wvwvwx.dll",realset
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run, setup=rundll32.exe
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run, SoundService=rundll32.exe "[%SYSTEM%]\agxutpck.dll",setvm
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run, SoundService=rundll32.exe "[%SYSTEM%]\gadcncpm.dll",setvm
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run, SoundService=rundll32.exe "[%SYSTEM%]\gikvvtlo.dll",setvm
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run, SoundService=rundll32.exe "[%SYSTEM%]\icwhqlpy.dll",setvm
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run, SoundService=rundll32.exe "[%SYSTEM%]\kqcpkgkf.dll",setvm
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run, SoundService=rundll32.exe "[%SYSTEM%]\lyplutka.dll",setvm
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run, SoundService=rundll32.exe "[%SYSTEM%]\mdtuolsd.dll",setvm
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run, SoundService=rundll32.exe "[%SYSTEM%]\nhqkuaic.dll",setvm
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run, SoundService=rundll32.exe "[%SYSTEM%]\oeieqame.dll",setvm
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run, SoundService=rundll32.exe "[%SYSTEM%]\ovocmkra.dll",setvm
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run, SoundService=rundll32.exe "[%SYSTEM%]\ryjhxeit.dll",setvm
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run, SoundService=rundll32.exe "[%SYSTEM%]\tfhrkfuj.dll",setvm
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run, SoundService=rundll32.exe "[%SYSTEM%]\viiojkfp.dll",setvm
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run, SoundService=rundll32.exe "[%SYSTEM%]\wvuemiuy.dll",setvm
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run, SoundService=rundll32.exe "[%SYSTEM%]\wwqwsqiw.dll",setvm
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run, SoundService=rundll32.exe "[%SYSTEM%]\xuyjalbr.dll",setvm
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run, SoundService=rundll32.exe "[%WINDOWS%]\iiihec.dll",setvm
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run, SoundService=rundll32.exe "[%WINDOWS%]\rqrsrr.dll",setvm
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run, STDSB=[%SYSTEM%]\STDSB.exe
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run, svchostzamj=[%SYSTEM%]\svchostzamj.exe
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run, System Terminal Storage=smtsvc.exe
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run, SystemOptimizer=rundll32.exe "[%SYSTEM%]\adpdjbnx.dll",forkonce
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run, SystemOptimizer=rundll32.exe "[%SYSTEM%]\aqejcswq.dll",forkonce
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run, SystemOptimizer=rundll32.exe "[%SYSTEM%]\csmgtbbc.dll",forkonce
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run, SystemOptimizer=rundll32.exe "[%SYSTEM%]\cswddrxm.dll",forkonce
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run, SystemOptimizer=rundll32.exe "[%SYSTEM%]\dlftkkuh.dll",forkonce
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run, SystemOptimizer=rundll32.exe "[%SYSTEM%]\dshwtxml.dll",forkonce
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run, SystemOptimizer=rundll32.exe "[%SYSTEM%]\dxqoyoqn.dll",forkonce
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run, SystemOptimizer=rundll32.exe "[%SYSTEM%]\ehbwoafx.dll",forkonce
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run, SystemOptimizer=rundll32.exe "[%SYSTEM%]\ehgejajm.dll",forkonce
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run, SystemOptimizer=rundll32.exe "[%SYSTEM%]\ehnractg.dll",forkonce
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run, SystemOptimizer=rundll32.exe "[%SYSTEM%]\enoubngm.dll",forkonce
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run, SystemOptimizer=rundll32.exe "[%SYSTEM%]\eqebnabt.dll",forkonce
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run, SystemOptimizer=rundll32.exe "[%SYSTEM%]\euxiaclm.dll",forkonce
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run, SystemOptimizer=rundll32.exe "[%SYSTEM%]\fbotyvco.dll",forkonce
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run, SystemOptimizer=rundll32.exe "[%SYSTEM%]\fkybvvbt.dll",forkonce
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run, SystemOptimizer=rundll32.exe "[%SYSTEM%]\ggsbwopm.dll",forkonce
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run, SystemOptimizer=rundll32.exe "[%SYSTEM%]\gljpsdlp.dll",forkonce
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run, SystemOptimizer=rundll32.exe "[%SYSTEM%]\gmasqmfq.dll",forkonce
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run, SystemOptimizer=rundll32.exe "[%SYSTEM%]\gviowppl.dll",forkonce
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run, SystemOptimizer=rundll32.exe "[%SYSTEM%]\gxqlxusg.dll",forkonce
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run, SystemOptimizer=rundll32.exe "[%SYSTEM%]\hxwadksr.dll",forkonce
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run, SystemOptimizer=rundll32.exe "[%SYSTEM%]\ifuxdjbo.dll",forkonce
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run, SystemOptimizer=rundll32.exe "[%SYSTEM%]\iquivupw.dll",forkonce
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run, SystemOptimizer=rundll32.exe "[%SYSTEM%]\jarmcpkd.dll",forkonce
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run, SystemOptimizer=rundll32.exe "[%SYSTEM%]\juuqywwy.dll",forkonce
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run, SystemOptimizer=rundll32.exe "[%SYSTEM%]\jvavtncm.dll",forkonce
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run, SystemOptimizer=rundll32.exe "[%SYSTEM%]\kfrxaojc.dll",forkonce
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run, SystemOptimizer=rundll32.exe "[%SYSTEM%]\kjavedoc.dll",forkonce
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run, SystemOptimizer=rundll32.exe "[%SYSTEM%]\kowhfkhw.dll",forkonce
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run, SystemOptimizer=rundll32.exe "[%SYSTEM%]\lcvyonwc.dll",forkonce
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run, SystemOptimizer=rundll32.exe "[%SYSTEM%]\lepiscoi.dll",forkonce
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run, SystemOptimizer=rundll32.exe "[%SYSTEM%]\ltbpwlvy.dll",forkonce
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run, SystemOptimizer=rundll32.exe "[%SYSTEM%]\muheagih.dll",forkonce
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run, SystemOptimizer=rundll32.exe "[%SYSTEM%]\nhohjgak.dll",forkonce
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run, SystemOptimizer=rundll32.exe "[%SYSTEM%]\nrbasniu.dll",forkonce
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run, SystemOptimizer=rundll32.exe "[%SYSTEM%]\obbwllnh.dll",forkonce
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run, SystemOptimizer=rundll32.exe "[%SYSTEM%]\okcliybk.dll",forkonce
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run, SystemOptimizer=rundll32.exe "[%SYSTEM%]\piyyrlmo.dll",forkonce
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run, SystemOptimizer=rundll32.exe "[%SYSTEM%]\plxjnldw.dll",forkonce
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run, SystemOptimizer=rundll32.exe "[%SYSTEM%]\pmxqirva.dll",forkonce
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run, SystemOptimizer=rundll32.exe "[%SYSTEM%]\puhqluod.dll",forkonce
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run, SystemOptimizer=rundll32.exe "[%SYSTEM%]\qbjrsovr.dll",forkonce

Scan your system registry for FREE

CURIOLAB S.M.B.A., Amagertorv 15, 2, 1160 Copenhagen K, Denmark, +45.36965533