Exterminate It! Antimalware

malpedia

Known threats:8,956,154 Last Update:August 18, 11:25

Testimonials

I consider myself pretty good with a computer, but after 10 hours of trying to do this myself, the sysguard.exe whipped me. I couldn't find all the files and when I thought I had them all, they would replicate and play hide and go seek I have never endorsed a product in a comment, but if you want to rid yourself of this stuff, pay the $24.99 and download Exterminate-It It fixed my system in 5 minutes!

Mike T.

Vundo (Virtumondo)- Registry Values List

This is a complete list of Vundo (Virtumondo) registry values collected by Exterminate It!. If you find any of these registry values on your PC, your computer is very likely to be infected with the Vundo (Virtumondo) - trojan,downloader,popups.

IMPORTANT: Because the registry is a core component of your Windows system, it is strongly recommended that you back up the registry before you begin deleting keys and values. For information about backing up the Windows registry, refer to the Registry Editor online help.
  • [HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]MSSMSGS=rundll32.exe winfcb32.rom,trdkagM
  • [HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]MSServer=rundll32.exe [%PROFILE_TEMP%]\jkkLfEVN.dll,#1
  • [HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]Update=rundll32.exe "[%APPDATA%]\Macromedia\Macromedia\ulbzyvwiq.dll",DllRegisterServer
  • [HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]Logishrd=rundll32.exe "[%LOCAL_APPDATA%]\Microsoft\Logishrd\lbzai.dll",DllRegisterServer
  • [HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]MSSMSGS=rundll32.exe wincmm32.rom,NlMYArae
  • [HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]MSSMSGS=rundll32.exe winjfb32.rom,Cwlkr
  • [HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]MSSMSGS=rundll32.exe wineez32.rom,VzeRaYfsd
  • [HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]Canon=rundll32.exe "[%LOCAL_APPDATA%]\CrashDumps\Canon\qrnoxrx.dll",DllRegisterServer
  • [HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]Update=rundll32.exe "[%APPDATA%]\Adobe\Adobe\ulbzyvwiq.dll",DllRegisterServer
  • [HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]Adobe=rundll32.exe "[%LOCAL_APPDATA%]\ArcadeCandy\Adobe\jsnsqwm.dll",DllRegisterServer
  • [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\ShellExecuteHooks]{98663e21-9cce-4cf6-863c-911a9523a66f}=(EMPTY)
  • [HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]MSSMSGS=rundll32.exe winyoo32.rom,AOktVoRYTx
  • [HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]Adobe=rundll32.exe "[%LOCAL_APPDATA%]\ATI\Adobe\iywibaoq.dll",DllRegisterServer
  • [HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]Update=rundll32.exe "[%APPDATA%]\Adobe\Adobe\kmzkybj.dll",DllRegisterServer
  • [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]Fborazaqe=rundll32.exe "[%SVC_SYS_LOCAL_APPDATA%]\arumamajuxuges.dll",Startup
  • [HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]MSSMSGS=rundll32.exe winpfi32.rom,cZrEWwPlHo
  • [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\ShellExecuteHooks]{c4f31a60-d2c7-4b22-ace9-ae33c94d7316}=(EMPTY)
  • [HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]MSSMSGS=rundll32.exe winaru32.rom,aPYgNJZkU
  • [HKEY_USERS\.DEFAULT\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]ApplicationHistory=rundll32.exe "[%LOCAL_APPDATA%]\ArcSoft\ApplicationHistory\dbyxcg.dll",DllRegisterServer
  • [HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]ApplicationHistory=rundll32.exe "[%LOCAL_APPDATA%]\ArcSoft\ApplicationHistory\dbyxcg.dll",DllRegisterServer
  • [HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]MSSMSGS=rundll32.exe winrdz32.rom,AlfcXDsUHcAn
  • [HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]WinNew=rundll32 "[%LOCAL_APPDATA%]\winexe.dll",run
  • [HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]MSSMSGS=rundll32.exe winjak32.rom,JDRmyrQN
  • [HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]Google=rundll32.exe "[%LOCAL_APPDATA%]\IsolatedStorage\Google\rjfiya.dll",DllRegisterServer
  • [HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]MSSMSGS=rundll32.exe winhxc32.rom,wmfsocYCcF
  • [HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]Update=rundll32.exe "[%APPDATA%]\Adobe\Adobe\vubjh.dll",DllRegisterServer
  • [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\ShellExecuteHooks]{24daafb8-b7f5-463f-88c1-d497611fc253}=(EMPTY)
  • [HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]Citrix=rundll32.exe "[%LOCAL_APPDATA%]\Conduit\Citrix\ihkpbqo.dll",DllRegisterServer
  • [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]BMe7c7fcb9=Rundll32.exe "[%SYSTEM%]\ovrpjpwq.dll",s
  • [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]e4f4cf25=rundll32.exe "[%SYSTEM%]\cxrsgnyb.dll",b
  • [HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]MSSMSGS=rundll32.exe winuzg32.rom,nsTDulaxwtMh
  • [HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]DirectxNotifierUpdate=rundll32.exe "[%COMMON_APPDATA%]\DirectxNotifierUpdate.dll",DllRegisterServer
  • [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\ShellExecuteHooks]{109be732-8f8c-49d4-a3f4-fedcac7f0a25}=(EMPTY)
  • [HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]Google=rundll32.exe "[%SVC_SYS_LOCAL_APPDATA%]\Microsoft\Google\weiplhyp.dll",DllRegisterServer
  • [HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]MSSMSGS=rundll32.exe winuvz32.rom,ngTHAzToLm
  • [HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]MSSMSGS=rundll32.exe winwff32.rom,GcTLBgCbe
  • [HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]MSSMSGS=rundll32.exe winmbz32.rom,rRImRHgFa
  • [HKEY_USERS\.DEFAULT\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]Update=rundll32.exe "[%APPDATA%]\Microsoft\Microsoft\ulbzyvwiq.dll",DllRegisterServer
  • [HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]Update=rundll32.exe "[%APPDATA%]\Microsoft\Microsoft\ulbzyvwiq.dll",DllRegisterServer
  • [HKEY_USERS\.DEFAULT\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]Apple Computer=rundll32.exe "[%LOCAL_APPDATA%]\ApplicationHistory\Apple Computer\qrnoxrx.dll",DllRegisterServer
  • [HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]Apple Computer=rundll32.exe "[%LOCAL_APPDATA%]\ApplicationHistory\Apple Computer\qrnoxrx.dll",DllRegisterServer
  • [HKEY_USERS\.DEFAULT\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]ACD Systems=rundll32.exe "[%LOCAL_APPDATA%]\Adobe\ACD Systems\lxexf.dll",DllRegisterServer
  • [HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]MSSMSGS=rundll32.exe winjfp32.rom,DSSwPGhGRw
  • [HKEY_USERS\.DEFAULT\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]Microsoft Games=rundll32.exe "[%LOCAL_APPDATA%]\Microsoft Help\Microsoft Games\weiplhyp.dll",DllRegisterServer
  • [HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]Microsoft Games=rundll32.exe "[%LOCAL_APPDATA%]\Microsoft Help\Microsoft Games\weiplhyp.dll",DllRegisterServer
  • [HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]Wlegenenor=rundll32.exe "[%LOCAL_APPDATA%]\idujanecat.dll",Startup
  • [HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]Update=rundll32.exe "[%APPDATA%]\Real\Real\zchvwceaw.dll",DllRegisterServer
  • [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]efdddbsys=rundll32.exe "sstutq.dll",DllRegisterServer
  • [HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]vtuttqdrv=rundll32.exe "iiffde.dll",s
  • [HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]awtutudrv=rundll32.exe "iiffde.dll",s
  • [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]ddaayvdrv=rundll32.exe "iiffde.dll",s
  • [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\ShellExecuteHooks]{d4576c73-52bd-4401-b966-5a128c4433d4}=(EMPTY)
  • [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\ShellExecuteHooks]{a6c54318-5ac7-477d-b0a7-49af5189300c}=(EMPTY)
  • [HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]History=rundll32.exe "[%LOCAL_APPDATA%]\Microsoft Games\History\weiplhyp.dll",DllRegisterServer
  • [HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]Apple Computer=rundll32.exe "[%LOCAL_APPDATA%]\Apps\Apple Computer\xdlqzl.dll",DllRegisterServer
  • [HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]Sunbelt Software=rundll32.exe "[%SVC_SYS_LOCAL_APPDATA%]\Yahoo\Sunbelt Software\ihkpbqo.dll",DllRegisterServer
  • [HKEY_USERS\.DEFAULT\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]Sunbelt Software=rundll32.exe "[%SVC_SYS_LOCAL_APPDATA%]\Yahoo\Sunbelt Software\ihkpbqo.dll",DllRegisterServer
  • [HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]Update=rundll32.exe "[%SVC_SYS_APPDATA%]\Yahoo!\Yahoo!\arroibs.dll",DllRegisterServer
  • [HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]Update=rundll32.exe "[%APPDATA%]\ICAClient\ICAClient\kmzkybj.dll",DllRegisterServer
  • [HKEY_USERS\.DEFAULT\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]Update=rundll32.exe "[%APPDATA%]\CyberLink\CyberLink\vubjh.dll",DllRegisterServer
  • [HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]MSSMSGS=rundll32.exe winfpw32.rom,XcMBGRyme
  • [HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]VirtualStore=rundll32.exe "[%LOCAL_APPDATA%]\VueSoft\VirtualStore\weiplhyp.dll",DllRegisterServer
  • [HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]Google=rundll32.exe "[%SVC_SYS_LOCAL_APPDATA%]\IsolatedStorage\Google\weiplhyp.dll",DllRegisterServer
  • [HKEY_USERS\.DEFAULT\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]Google=rundll32.exe "[%SVC_SYS_LOCAL_APPDATA%]\IsolatedStorage\Google\weiplhyp.dll",DllRegisterServer
  • [HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]Google=rundll32.exe "[%LOCAL_APPDATA%]\Hewlett-Packard\Google\mtshn.dll",DllRegisterServer
  • [HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]MSSMSGS=rundll32.exe winqhx32.rom,xRecSOetQBEa
  • [HKEY_USERS\.DEFAULT\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]tesikezuha=Rundll32.exe "[%SYSTEM%]\bonigezi.dll",s
  • [HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]tesikezuha=Rundll32.exe "[%SYSTEM%]\bonigezi.dll",s
  • [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]tesikezuha=Rundll32.exe "[%SYSTEM%]\bonigezi.dll",s
  • [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]CPM17d3a4ad=Rundll32.exe "[%SYSTEM%]\zogeyupa.dll",a
  • [HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]dunakotiwo=Rundll32.exe "[%SYSTEM%]\muwujebu.dll",s
  • [HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]Update=rundll32.exe "[%APPDATA%]\AVG10\AVG10\zchvwceaw.dll",DllRegisterServer
  • [HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\ShellServiceObjectDelayLoad]SSODL={EC43E3FD-5C60-46a6-97D7-E0B85DBDD6C4}
  • [HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Explorer\SharedTaskScheduler]{EC43E3FD-5C60-46a6-97D7-E0B85DBDD6C4}=STS
  • [HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]zisehoposo=Rundll32.exe "[%SYSTEM%]\jukadoda.dll",s
  • [HKEY_USERS\[%SVC_LOC_SID%]\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]zisehoposo=Rundll32.exe "[%SYSTEM%]\jukadoda.dll",s
  • [HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]zisehoposo=Rundll32.exe "[%SYSTEM%]\jukadoda.dll",s
  • [HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]MSSMSGS=rundll32.exe winrjf32.rom,BhEOdDB
  • [HKEY_USERS\.DEFAULT\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]Update=rundll32.exe "[%APPDATA%]\AVG Secure Search\AVG Secure Search\kmzkybj.dll",DllRegisterServer
  • [HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]Update=rundll32.exe "[%APPDATA%]\AVG Secure Search\AVG Secure Search\kmzkybj.dll",DllRegisterServer
  • [HKEY_USERS\.DEFAULT\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]Update=rundll32.exe "[%APPDATA%]\MinMaxGames\MinMaxGames\ulbzyvwiq.dll",DllRegisterServer
  • [HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]Update=rundll32.exe "[%APPDATA%]\MinMaxGames\MinMaxGames\ulbzyvwiq.dll",DllRegisterServer
  • [HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]MSSMSGS=rundll32.exe winqut32.rom,DTTuEKK
  • [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\ShellExecuteHooks]{4e3e60f5-f691-475f-afba-cf9fcab47c15}=(EMPTY)
  • [HKEY_USERS\.DEFAULT\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]Update=rundll32.exe "[%APPDATA%]\Adobe\Adobe\uzseuiy.dll",DllRegisterServer
  • [HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]Update=rundll32.exe "[%APPDATA%]\Adobe\Adobe\uzseuiy.dll",DllRegisterServer
  • [HKEY_USERS\.DEFAULT\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]Update=rundll32.exe "[%SVC_SYS_APPDATA%]\{90140011-0066-0409-0000-0000000FF1CE}\{90140011-0066-0409-0000-0000000FF1CE}\kmzkybj.dll",DllRegisterServer
  • [HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]Update=rundll32.exe "[%SVC_SYS_APPDATA%]\{90140011-0066-0409-0000-0000000FF1CE}\{90140011-0066-0409-0000-0000000FF1CE}\kmzkybj.dll",DllRegisterServer
  • [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]600bcbb7=rundll32.exe "[%SYSTEM%]\krvrekwx.dll",b
  • [HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]Update=rundll32.exe "[%APPDATA%]\Adobe\Adobe\dpvdx.dll",DllRegisterServer
  • [HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]Update=rundll32.exe "[%APPDATA%]\Dell\Dell\kmzkybj.dll",DllRegisterServer
  • [HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]Lnunupec=rundll32.exe "[%WINDOWS%]\QTL32E.dll",Startup
  • [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\ShellExecuteHooks]{B0B3393C-62D1-44D8-ABF5-08E0F067F29E}=(EMPTY)
  • [HKEY_USERS\[%SVC_LOC_SID%]\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]hayurafoki=Rundll32.exe "[%SYSTEM%]\nonowoda.dll",s
  • [HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]hayurafoki=Rundll32.exe "[%SYSTEM%]\nonowoda.dll",s
  • [HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]Microsoft=rundll32.exe "[%LOCAL_APPDATA%]\PackageAware\Microsoft\vnyytt.dll",DllRegisterServer
  • [HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]MSSMSGS=rundll32.exe winjit32.rom,hOjgLsDQa
  • [HKEY_USERS\[%SVC_LOC_SID%]\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]polutalilo=Rundll32.exe "[%SYSTEM%]\norolija.dll",s
  • [HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]polutalilo=Rundll32.exe "[%SYSTEM%]\norolija.dll",s
  • [HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]MSSMSGS=rundll32.exe winzir32.rom,ilgXAaGcP
  • [HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]AppleData=rundll32.exe "[%LOCAL_APPDATA%]\Apple Computer\AppleData\Appledata.DLL",DllRegisterServer
  • [HKEY_USERS\.DEFAULT\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]AppleData=rundll32.exe "[%LOCAL_APPDATA%]\Apple Computer\AppleData\Appledata.DLL",DllRegisterServer
  • [HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]MSSMSGS=rundll32.exe winsgn32.rom,GAylmoLJVJl
  • [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\ShellExecuteHooks]{bdd714bc-d36c-487b-8142-8ba020fb6535}=(EMPTY)
  • [HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]Update=rundll32.exe "[%APPDATA%]\Audacity\Audacity\wmgaaaizl.dll",DllRegisterServer
  • [HKEY_USERS\[%SVC_SYS_SID%]\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]Update=rundll32.exe "[%APPDATA%]\Blackberry Desktop\Blackberry Desktop\sgpeue.dll",DllRegisterServer
  • [HKEY_USERS\.DEFAULT\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]Update=rundll32.exe "[%APPDATA%]\Blackberry Desktop\Blackberry Desktop\sgpeue.dll",DllRegisterServer
  • [HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]Update=rundll32.exe "[%APPDATA%]\Blackberry Desktop\Blackberry Desktop\sgpeue.dll",DllRegisterServer
  • [HKEY_USERS\[%SVC_SYS_SID%]\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]Update=rundll32.exe "[%APPDATA%]\RemoteDocs\RemoteDocs\sgpeue.dll",DllRegisterServer
  • [HKEY_USERS\.DEFAULT\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]Update=rundll32.exe "[%APPDATA%]\RemoteDocs\RemoteDocs\sgpeue.dll",DllRegisterServer
  • [HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]Update=rundll32.exe "[%APPDATA%]\RemoteDocs\RemoteDocs\sgpeue.dll",DllRegisterServer
  • [HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]Update=rundll32.exe "[%APPDATA%]\Curiolab\Curiolab\kmzkybj.dll",DllRegisterServer
  • [HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]MSSMSGS=rundll32.exe winhbe32.rom,nEwikXwU
  • [HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]Update=rundll32.exe "[%APPDATA%]\Curiolab\Curiolab\dpvdx.dll",DllRegisterServer
  • [HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]Update=rundll32.exe "[%APPDATA%]\Identities\Identities\vubjh.dll",DllRegisterServer
  • [HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]MSSMSGS=rundll32.exe winxtq32.rom,YOzRkbGbKh
  • [HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]MSSMSGS=rundll32.exe winbyq32.rom,oRcuQm
  • [HKEY_USERS\[%SVC_SYS_SID%]\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]Update=rundll32.exe "[%APPDATA%]\fltk.org\fltk.org\uuuqi.dll",DllRegisterServer
  • [HKEY_USERS\[%SVC_SYS_SID%]\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]Update=rundll32.exe "[%APPDATA%]\Brother\Brother\dpvdx.dll",DllRegisterServer
  • [HKEY_USERS\.DEFAULT\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]Update=rundll32.exe "[%APPDATA%]\fltk.org\fltk.org\uuuqi.dll",DllRegisterServer
  • [HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]Update=rundll32.exe "[%APPDATA%]\fltk.org\fltk.org\uuuqi.dll",DllRegisterServer
  • [HKEY_USERS\.DEFAULT\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]Update=rundll32.exe "[%APPDATA%]\Brother\Brother\dpvdx.dll",DllRegisterServer
  • [HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]Update=rundll32.exe "[%APPDATA%]\Brother\Brother\dpvdx.dll",DllRegisterServer
  • [HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]Update=rundll32.exe "[%APPDATA%]\Yahoo!\Yahoo!\arroibs.dll",DllRegisterServer
  • [HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]Kfojakam=rundll32.exe "[%LOCAL_APPDATA%]\mlebdt.dll",Startup
  • [HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]Update=rundll32.exe "[%APPDATA%]\HP SimpleSave Application\HP SimpleSave Application\sgpeue.dll",DllRegisterServer
  • [HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]Update=rundll32.exe "[%SVC_SYS_APPDATA%]\Microsoft\Microsoft\sgpeue.dll",DllRegisterServer
  • [HKEY_USERS\.DEFAULT\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]Update=rundll32.exe "[%SVC_SYS_APPDATA%]\Microsoft\Microsoft\sgpeue.dll",DllRegisterServer
  • [HKEY_USERS\[%SVC_SYS_SID%]\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]Update=rundll32.exe "[%APPDATA%]\Help\Help\arroibs.dll",DllRegisterServer
  • [HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]Update=rundll32.exe "[%APPDATA%]\.clamwin\.clamwin\sgpeue.dll",DllRegisterServer
  • [HKEY_USERS\.DEFAULT\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]Update=rundll32.exe "[%APPDATA%]\.clamwin\.clamwin\sgpeue.dll",DllRegisterServer
  • [HKEY_USERS\.DEFAULT\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]Update=rundll32.exe "[%APPDATA%]\Help\Help\arroibs.dll",DllRegisterServer
  • [HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]Update=rundll32.exe "[%APPDATA%]\Help\Help\arroibs.dll",DllRegisterServer
  • [HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]Update=rundll32.exe "[%APPDATA%]\AVG2012\AVG2012\sgpeue.dll",DllRegisterServer
  • [HKEY_USERS\.DEFAULT\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]Update=rundll32.exe "[%APPDATA%]\AVG2012\AVG2012\sgpeue.dll",DllRegisterServer
  • [HKEY_USERS\[%SVC_SYS_SID%]\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]Update=rundll32.exe "[%SVC_SYS_APPDATA%]\Microsoft\Microsoft\kmzkybj.dll",DllRegisterServer
  • [HKEY_USERS\.DEFAULT\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]Update=rundll32.exe "[%SVC_SYS_APPDATA%]\Microsoft\Microsoft\kmzkybj.dll",DllRegisterServer
  • [HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]Update=rundll32.exe "[%SVC_SYS_APPDATA%]\Microsoft\Microsoft\kmzkybj.dll",DllRegisterServer
  • [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]sodazomev=Rundll32.exe "[%SYSTEM%]\zerakede.dll",a
  • [HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]Update=rundll32.exe "[%APPDATA%]\WinBatch\WinBatch\sgpeue.dll",DllRegisterServer
  • [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\ShellExecuteHooks]{2860c741-8f63-45da-b029-2b4b148ac499}=(EMPTY)
  • [HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]MSSMSGS=rundll32.exe winyvt32.rom,udcDbvyMgWnD
  • [HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]Update=rundll32.exe "[%APPDATA%]\Adobe\Adobe\buhjtfc.dll",DllRegisterServer
  • [HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Run-]Mtusan=rundll32.exe "[%LOCAL_APPDATA%]\KBSyusDF.dll",Startup
  • [HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]MSSMSGS=rundll32.exe winvbr32.rom,jbOSoQ
  • [HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]MSSMSGS=rundll32.exe wintcm32.rom,BzxiMRec
  • [HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]MSSMSGS=rundll32.exe winfnu32.rom,wyvYexx
  • [HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]MSSMSGS=rundll32.exe winxwf32.rom,lbHeoDdb
  • [HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]MSSMSGS=rundll32.exe winauj32.rom,jNrQSXxsCF
  • [HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]Update=rundll32.exe "[%APPDATA%]\Apple Computer\Apple Computer\sgpeue.dll",DllRegisterServer
  • [HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]Wmoyoxajijohap=rundll32.exe "[%SVC_SYS_LOCAL_APPDATA%]\BDWea02.dll",Startup
  • [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\RunDisabled]0c700c4b=rundll32.exe "[%SYSTEM%]\uyjnbjtg.dll",b
  • [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\ShellExecuteHooks]{280ee6f9-e414-4d35-8fef-8180bb5ac916}=(EMPTY)
  • [HKEY_USERS\[%SVC_LOC_SID%]\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]logemovipo=Rundll32.exe "[%SYSTEM%]\pozimadu.dll",s
  • [HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]logemovipo=Rundll32.exe "[%SYSTEM%]\pozimadu.dll",s
  • [HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]Update=rundll32.exe "[%SVC_SYS_APPDATA%]\Microsoft\Microsoft\arroibs.dll",DllRegisterServer
  • [HKEY_USERS\.DEFAULT\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]Update=rundll32.exe "[%SVC_SYS_APPDATA%]\Microsoft\Microsoft\arroibs.dll",DllRegisterServer
  • [HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]MSSMSGS=rundll32.exe winllf32.rom,NiZLWOA
  • [HKEY_USERS\[%SVC_LOC_SID%]\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]gedegenalu=Rundll32.exe "[%SYSTEM%]\gatinuro.dll",s
  • [HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]MSSMSGS=rundll32.exe winzir32.rom,FMRUHu
  • [HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]Lneloweraxi=rundll32.exe "[%LOCAL_APPDATA%]\igavovepurif.dll",Startup
  • [HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]MSServer=rundll32.exe [%PROFILE_TEMP%]\xxywXQHy.dll,#1
  • [HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]gedegenalu=Rundll32.exe "[%SYSTEM%]\gatinuro.dll",s
  • [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]gedegenalu=Rundll32.exe "[%SYSTEM%]\gatinuro.dll",s
  • [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]34a02479=rundll32.exe "[%SYSTEM%]\wahafuhi.dll",b
  • [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]CPM379317e5=Rundll32.exe "[%SYSTEM%]\hafurive.dll",a
  • [HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]Update=rundll32.exe "[%SVC_SYS_APPDATA%]\Adobe\Adobe\arroibs.dll",DllRegisterServer
  • [HKEY_USERS\.DEFAULT\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]Update=rundll32.exe "[%SVC_SYS_APPDATA%]\Adobe\Adobe\arroibs.dll",DllRegisterServer
  • [HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]IntelProfilePolicy=rundll32.exe "[%COMMON_APPDATA%]\IntelProfilePolicy.dll",DllRegisterServer
  • [HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]DeploymentData=rundll32.exe "[%LOCAL_APPDATA%]\Deployment\DeploymentData\Deploymentdata.DLL",DllRegisterServer
  • [HKEY_USERS\[%SVC_SYS_SID%]\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]Update=rundll32.exe "[%APPDATA%]\BlueFlare Antivirus\BlueFlare Antivirus\arroibs.dll",DllRegisterServer
  • [HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]Update=rundll32.exe "[%APPDATA%]\Identities\Identities\buhjtfc.dll",DllRegisterServer
  • [HKEY_USERS\.DEFAULT\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]Update=rundll32.exe "[%APPDATA%]\Identities\Identities\buhjtfc.dll",DllRegisterServer
  • [HKEY_USERS\.DEFAULT\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]Update=rundll32.exe "[%APPDATA%]\BlueFlare Antivirus\BlueFlare Antivirus\arroibs.dll",DllRegisterServer
  • [HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]Update=rundll32.exe "[%APPDATA%]\BlueFlare Antivirus\BlueFlare Antivirus\arroibs.dll",DllRegisterServer
  • [HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]Gdajuh=rundll32.exe "[%LOCAL_APPDATA%]\ahidunumu.dll",Startup
  • [HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]Update=rundll32.exe "[%APPDATA%]\Intel Corporation\Intel Corporation\buhjtfc.dll",DllRegisterServer
  • [HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]Update=rundll32.exe "[%APPDATA%]\Babylon\Babylon\xnzbyn.dll",DllRegisterServer
  • [HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]f85a42a7=rundll32.exe "[%PROFILE_TEMP%]\jjxkyxvw.dll",b
  • [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]320d18a1=rundll32.exe "[%SYSTEM%]\ornamfhf.dll",b
  • [HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Run]A00FF3F945.exe=[%PROFILE_TEMP%]\_A00FF3F945.exe
  • [HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]Update=rundll32.exe "[%APPDATA%]\Windows Live Writer\Windows Live Writer\mijimxh.dll",DllRegisterServer
  • [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\ShellExecuteHooks]{ee5a1465-1e73-4784-8f63-45983fdf0db8}=(EMPTY)
  • [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\ShellExecuteHooks]{32341e7e-c319-46de-91d0-e30bb1a3caba}=(EMPTY)
  • [HKEY_USERS\[%SVC_SYS_SID%]\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]Update=rundll32.exe "[%APPDATA%]\CasinoOnNet\CasinoOnNet\wmgaaaizl.dll",DllRegisterServer
  • [HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]Update=rundll32.exe "[%APPDATA%]\DivX\DivX\arroibs.dll",DllRegisterServer
  • [HKEY_USERS\.DEFAULT\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]Update=rundll32.exe "[%APPDATA%]\CasinoOnNet\CasinoOnNet\wmgaaaizl.dll",DllRegisterServer
  • [HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]Update=rundll32.exe "[%APPDATA%]\CasinoOnNet\CasinoOnNet\wmgaaaizl.dll",DllRegisterServer
  • [HKEY_USERS\[%SVC_SYS_SID%]\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]Update=rundll32.exe "[%SVC_SYS_APPDATA%]\Macromedia\Macromedia\hmlxkn.dll",DllRegisterServer
  • [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]Owobiyijevulasej=rundll32.exe "[%WINDOWS%]\imohevurijanox.dll",Startup
  • [HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]Update=rundll32.exe "[%APPDATA%]\vlc\vlc\vmvsz.dll",DllRegisterServer
  • [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]nuyoreyuk=Rundll32.exe "[%SYSTEM%]\pogagodi.dll",a
  • [HKEY_USERS\.DEFAULT\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]Update=rundll32.exe "[%SVC_SYS_APPDATA%]\Macromedia\Macromedia\hmlxkn.dll",DllRegisterServer
  • [HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]Update=rundll32.exe "[%SVC_SYS_APPDATA%]\Macromedia\Macromedia\hmlxkn.dll",DllRegisterServer
  • [HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]MSSMSGS=rundll32.exe winhdk32.rom,lApTWrVpAq
  • [HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]Update=rundll32.exe "[%APPDATA%]\TP\TP\mijimxh.dll",DllRegisterServer
  • [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]Hqopuha=rundll32.exe "[%WINDOWS%]\ofomatoyaqogun.dll",Startup
  • [HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]Gxexu=rundll32.exe "[%LOCAL_APPDATA%]\efumidaribiy.dll",Startup
  • [HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]MSSMSGS=rundll32.exe winjst32.rom,YDjTkYrEWc
  • [HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]Update=rundll32.exe "[%APPDATA%]\Avery\Avery\vmvsz.dll",DllRegisterServer
  • [HKEY_USERS\[%SVC_SYS_SID%]\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]Update=rundll32.exe "[%APPDATA%]\dvdcss\dvdcss\vmvsz.dll",DllRegisterServer
  • [HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]Vjitomuyixusu=rundll32.exe "[%LOCAL_APPDATA%]\ujinecatevih.dll",Startup
  • [HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]Update=rundll32.exe "[%APPDATA%]\Roxio Burn\Roxio Burn\wmgaaaizl.dll",DllRegisterServer
  • [HKEY_USERS\.DEFAULT\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]Update=rundll32.exe "[%APPDATA%]\Roxio Burn\Roxio Burn\wmgaaaizl.dll",DllRegisterServer
  • [HKEY_USERS\.DEFAULT\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]Update=rundll32.exe "[%APPDATA%]\dvdcss\dvdcss\vmvsz.dll",DllRegisterServer
  • [HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]Update=rundll32.exe "[%APPDATA%]\dvdcss\dvdcss\vmvsz.dll",DllRegisterServer
  • [HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]Update=rundll32.exe "[%APPDATA%]\Windows Live Writer\Windows Live Writer\uzseuiy.dll",DllRegisterServer
  • [HKEY_USERS\[%SVC_SYS_SID%]\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]Update=rundll32.exe "[%APPDATA%]\Update\Update\vmvsz.dll",DllRegisterServer
  • [HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]Update=rundll32.exe "[%APPDATA%]\Roxio\Roxio\uzseuiy.dll",DllRegisterServer
  • [HKEY_USERS\[%SVC_SYS_SID%]\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]Update=rundll32.exe "[%SVC_SYS_APPDATA%]\Microsoft\Microsoft\vubjh.dll",DllRegisterServer
  • [HKEY_USERS\.DEFAULT\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]Update=rundll32.exe "[%APPDATA%]\Update\Update\vmvsz.dll",DllRegisterServer
  • [HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]Update=rundll32.exe "[%APPDATA%]\Update\Update\vmvsz.dll",DllRegisterServer
  • [HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]Update=rundll32.exe "[%APPDATA%]\Roxio\Roxio\uzseuiy.dll",DllRegisterServer
  • [HKEY_USERS\.DEFAULT\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]Update=rundll32.exe "[%APPDATA%]\Roxio\Roxio\uzseuiy.dll",DllRegisterServer
  • [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]Lcafon=rundll32.exe "[%WINDOWS%]\ivehewatebic.dll",Startup
  • [HKEY_USERS\.DEFAULT\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]Update=rundll32.exe "[%SVC_SYS_APPDATA%]\Microsoft\Microsoft\vubjh.dll",DllRegisterServer
  • [HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]Update=rundll32.exe "[%SVC_SYS_APPDATA%]\Microsoft\Microsoft\vubjh.dll",DllRegisterServer
  • [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]Bvudidesugunepoz=rundll32.exe "[%WINDOWS%]\uyidujugeru.dll",Startup
  • [HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]Ihitale=rundll32.exe "[%LOCAL_APPDATA%]\rkbdtatp.dll",Startup
  • [HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]Update=rundll32.exe "[%APPDATA%]\Acapela Group\Acapela Group\buhjtfc.dll",DllRegisterServer
  • [HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]MSSMSGS=rundll32.exe winyoo32.rom,kCgnMtxxk
  • [HKEY_USERS\[%SVC_LOC_SID%]\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]fulatokeke=Rundll32.exe "[%SYSTEM%]\bozujeyi.dll",s
  • [HKEY_USERS\[%SVC_SYS_SID%]\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]Update=rundll32.exe "[%APPDATA%]\Apple Computer\Apple Computer\zchvwceaw.dll",DllRegisterServer
  • [HKEY_USERS\[%SVC_SYS_SID%]\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]Update=rundll32.exe "[%SVC_SYS_APPDATA%]\Mozilla\Mozilla\vubjh.dll",DllRegisterServer
  • [HKEY_USERS\[%SVC_SYS_SID%]\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]Update=rundll32.exe "[%APPDATA%]\AVG Secure Search\AVG Secure Search\vubjh.dll",DllRegisterServer
  • [HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]fulatokeke=Rundll32.exe "[%SYSTEM%]\bozujeyi.dll",s
  • [HKEY_USERS\.DEFAULT\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]Update=rundll32.exe "[%APPDATA%]\Apple Computer\Apple Computer\zchvwceaw.dll",DllRegisterServer
  • [HKEY_USERS\.DEFAULT\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]Update=rundll32.exe "[%SVC_SYS_APPDATA%]\Mozilla\Mozilla\vubjh.dll",DllRegisterServer
  • [HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]Update=rundll32.exe "[%SVC_SYS_APPDATA%]\Mozilla\Mozilla\vubjh.dll",DllRegisterServer
  • [HKEY_USERS\.DEFAULT\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]Update=rundll32.exe "[%APPDATA%]\AVG Secure Search\AVG Secure Search\vubjh.dll",DllRegisterServer
  • [HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]Update=rundll32.exe "[%APPDATA%]\AVG Secure Search\AVG Secure Search\vubjh.dll",DllRegisterServer
  • [HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]Update=rundll32.exe "[%APPDATA%]\Apple Computer\Apple Computer\zchvwceaw.dll",DllRegisterServer
  • [HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]Update=rundll32.exe "[%APPDATA%]\ArcSoft\ArcSoft\zchvwceaw.dll",DllRegisterServer
  • [HKEY_USERS\.DEFAULT\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]Update=rundll32.exe "[%APPDATA%]\ArcSoft\ArcSoft\zchvwceaw.dll",DllRegisterServer
  • [HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]Update=rundll32.exe "[%APPDATA%]\Microsoft\Microsoft\vubjh.dll",DllRegisterServer
  • [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\ShellExecuteHooks]{a00ca75c-dedd-4474-9088-5d6363d69338}=(EMPTY)
  • [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run-]d880c57d=rundll32.exe "[%SYSTEM%]\idecpgef.dll",b
  • [HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Run]A00F152719.exe=[%PROFILE_TEMP%]\_A00F152719.exe
  • [HKEY_USERS\[%SVC_SYS_SID%]\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]Update=rundll32.exe "[%APPDATA%]\WinRAR\WinRAR\dkgjonab.dll",DllRegisterServer
  • [HKEY_USERS\[%SVC_SYS_SID%]\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]Update=rundll32.exe "[%APPDATA%]\DriverCure\DriverCure\vubjh.dll",DllRegisterServer
  • [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run-]Kzisukazaqawicoz=rundll32.exe "[%WINDOWS%]\ajacogotob.dll",Startup
  • [HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]Myilic=rundll32.exe "[%LOCAL_APPDATA%]\abatulusasiy.dll",Startup
  • [HKEY_USERS\.DEFAULT\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]Update=rundll32.exe "[%APPDATA%]\WinRAR\WinRAR\dkgjonab.dll",DllRegisterServer
  • [HKEY_USERS\.DEFAULT\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]Update=rundll32.exe "[%APPDATA%]\DriverCure\DriverCure\vubjh.dll",DllRegisterServer
  • [HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]Update=rundll32.exe "[%APPDATA%]\DriverCure\DriverCure\vubjh.dll",DllRegisterServer
  • [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\ShellExecuteHooks]{c2d425b2-3452-427a-96be-b3cd66620205}=(EMPTY)
  • [HKEY_USERS\[%SVC_SYS_SID%]\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]Update=rundll32.exe "[%APPDATA%]\SystemOptimizeExpert\SystemOptimizeExpert\vubjh.dll",DllRegisterServer
  • [HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]MSSMSGS=rundll32.exe winhpa32.rom,iOMTdjHkeZF
  • [HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]Update=rundll32.exe "[%SVC_SYS_APPDATA%]\Apple Computer\Apple Computer\xqsnxwgl.dll",DllRegisterServer
  • [HKEY_USERS\.DEFAULT\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]Update=rundll32.exe "[%SVC_SYS_APPDATA%]\Apple Computer\Apple Computer\xqsnxwgl.dll",DllRegisterServer
  • [HKEY_USERS\.DEFAULT\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]Update=rundll32.exe "[%APPDATA%]\SystemOptimizeExpert\SystemOptimizeExpert\vubjh.dll",DllRegisterServer
  • [HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]Update=rundll32.exe "[%APPDATA%]\SystemOptimizeExpert\SystemOptimizeExpert\vubjh.dll",DllRegisterServer
  • [HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]MSSMSGS=rundll32.exe winnxv32.rom,HFUOUwFlQjq
  • [HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]Update=rundll32.exe "[%APPDATA%]\Adobe\Adobe\zchvwceaw.dll",DllRegisterServer
  • [HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]MSSMSGS=rundll32.exe winfcb32.rom,YBCMTsig
  • [HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]geebaxsys=rundll32.exe "[%PROFILE_TEMP%]\pmklkk.dll",DllRegisterServer
  • [HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]tusrqrdrv=rundll32.exe "[%PROFILE_TEMP%]\awuvvw.dll",s
  • [HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]Update=rundll32.exe "[%APPDATA%]\Google\Google\arzpii.dll",DllRegisterServer
  • [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\ShellExecuteHooks]{09c72999-5c10-41a3-a524-24661d942003}=(EMPTY)
  • [HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]Update=rundll32.exe "[%SVC_SYS_APPDATA%]\Mozilla\Mozilla\zchvwceaw.dll",DllRegisterServer
  • [HKEY_USERS\.DEFAULT\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]Update=rundll32.exe "[%SVC_SYS_APPDATA%]\Mozilla\Mozilla\zchvwceaw.dll",DllRegisterServer
  • [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\ShellExecuteHooks]{6ff22309-a6ed-462b-abec-877625c012f3}=(EMPTY)
  • [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\ShellExecuteHooks]{35cfe9b1-81c2-4d01-a350-a759292ad7fc}=(EMPTY)
  • [HKEY_USERS\[%SVC_SYS_SID%]\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]Update=rundll32.exe "[%SVC_SYS_APPDATA%]\Sun\Sun\hmlxkn.dll",DllRegisterServer
  • [HKEY_USERS\[%SVC_SYS_SID%]\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]Update=rundll32.exe "[%SVC_SYS_APPDATA%]\Adobe\Adobe\zchvwceaw.dll",DllRegisterServer
  • [HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]Update=rundll32.exe "[%APPDATA%]\ArcSoft\ArcSoft\zchvwceaw.dll",DllRegisterServer
  • [HKEY_USERS\.DEFAULT\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]Update=rundll32.exe "[%SVC_SYS_APPDATA%]\Sun\Sun\hmlxkn.dll",DllRegisterServer
  • [HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]Update=rundll32.exe "[%SVC_SYS_APPDATA%]\Sun\Sun\hmlxkn.dll",DllRegisterServer
  • [HKEY_USERS\.DEFAULT\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]Update=rundll32.exe "[%SVC_SYS_APPDATA%]\Adobe\Adobe\zchvwceaw.dll",DllRegisterServer
  • [HKEY_USERS\[%SVC_SYS_SID%]\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]Update=rundll32.exe "[%APPDATA%]\.minecraft\.minecraft\zchvwceaw.dll",DllRegisterServer
  • [HKEY_USERS\.DEFAULT\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]Update=rundll32.exe "[%APPDATA%]\.minecraft\.minecraft\zchvwceaw.dll",DllRegisterServer
  • [HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]Update=rundll32.exe "[%APPDATA%]\.minecraft\.minecraft\zchvwceaw.dll",DllRegisterServer
  • [HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]Update=rundll32.exe "[%APPDATA%]\Dell\Dell\hmlxkn.dll",DllRegisterServer
  • [HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]Update=rundll32.exe "[%SVC_SYS_APPDATA%]\Macromedia\Macromedia\zchvwceaw.dll",DllRegisterServer
  • [HKEY_USERS\.DEFAULT\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]Update=rundll32.exe "[%SVC_SYS_APPDATA%]\Macromedia\Macromedia\zchvwceaw.dll",DllRegisterServer
  • [HKEY_USERS\[%SVC_SYS_SID%]\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]Update=rundll32.exe "[%APPDATA%]\7 Taskbar Tweaker\7 Taskbar Tweaker\klzgc.dll",DllRegisterServer
  • [HKEY_USERS\[%SVC_SYS_SID%]\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]Update=rundll32.exe "[%SVC_SYS_APPDATA%]\Apple Computer\Apple Computer\zchvwceaw.dll",DllRegisterServer
  • [HKEY_USERS\[%SVC_SYS_SID%]\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]Update=rundll32.exe "[%SVC_SYS_APPDATA%]\Security Defender\Security Defender\zchvwceaw.dll",DllRegisterServer
  • [HKEY_USERS\[%SVC_SYS_SID%]\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]Update=rundll32.exe "[%APPDATA%]\Intel\Intel\zchvwceaw.dll",DllRegisterServer
  • [HKEY_USERS\.DEFAULT\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]Update=rundll32.exe "[%APPDATA%]\7 Taskbar Tweaker\7 Taskbar Tweaker\klzgc.dll",DllRegisterServer
  • [HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]Update=rundll32.exe "[%APPDATA%]\7 Taskbar Tweaker\7 Taskbar Tweaker\klzgc.dll",DllRegisterServer
  • [HKEY_USERS\.DEFAULT\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]Update=rundll32.exe "[%SVC_SYS_APPDATA%]\Apple Computer\Apple Computer\zchvwceaw.dll",DllRegisterServer
  • [HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]Update=rundll32.exe "[%SVC_SYS_APPDATA%]\Apple Computer\Apple Computer\zchvwceaw.dll",DllRegisterServer
  • [HKEY_USERS\.DEFAULT\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]Update=rundll32.exe "[%SVC_SYS_APPDATA%]\Security Defender\Security Defender\zchvwceaw.dll",DllRegisterServer
  • [HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]Update=rundll32.exe "[%SVC_SYS_APPDATA%]\Security Defender\Security Defender\zchvwceaw.dll",DllRegisterServer
  • [HKEY_USERS\.DEFAULT\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]Update=rundll32.exe "[%APPDATA%]\Intel\Intel\zchvwceaw.dll",DllRegisterServer
  • [HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]Update=rundll32.exe "[%APPDATA%]\Intel\Intel\zchvwceaw.dll",DllRegisterServer
  • [HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]AppleNotifierOnline=rundll32.exe "[%COMMON_APPDATA%]\AppleNotifierOnline.dll",DllRegisterServer
  • [HKEY_USERS\[%SVC_SYS_SID%]\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]Update=rundll32.exe "[%SVC_SYS_APPDATA%]\Microsoft\Microsoft\zchvwceaw.dll",DllRegisterServer
  • [HKEY_USERS\.DEFAULT\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]Update=rundll32.exe "[%SVC_SYS_APPDATA%]\Microsoft\Microsoft\zchvwceaw.dll",DllRegisterServer
  • [HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]Update=rundll32.exe "[%SVC_SYS_APPDATA%]\Microsoft\Microsoft\zchvwceaw.dll",DllRegisterServer
  • [HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]Iletekihib=rundll32.exe "[%LOCAL_APPDATA%]\evodamuj.dll",Startup
  • [HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]Update=rundll32.exe "[%APPDATA%]\ATI\ATI\zchvwceaw.dll",DllRegisterServer
  • [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\ShellExecuteHooks]{420959a7-1b3f-49ee-848e-6de631a39223}=(EMPTY)
  • [HKEY_USERS\[%SVC_SYS_SID%]\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]Update=rundll32.exe "[%SVC_SYS_APPDATA%]\Identities\Identities\zchvwceaw.dll",DllRegisterServer
  • [HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]MSSMSGS=rundll32.exe wintcm32.rom,scDbQiAGmt
  • [HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]MSSMSGS=rundll32.exe winzyt32.rom,jswIAe
  • [HKEY_USERS\.DEFAULT\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]Update=rundll32.exe "[%SVC_SYS_APPDATA%]\Identities\Identities\zchvwceaw.dll",DllRegisterServer
  • [HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]Update=rundll32.exe "[%SVC_SYS_APPDATA%]\Identities\Identities\zchvwceaw.dll",DllRegisterServer
  • [HKEY_USERS\[%SVC_SYS_SID%]\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]Update=rundll32.exe "[%SVC_SYS_APPDATA%]\Apple Computer\Apple Computer\klzgc.dll",DllRegisterServer
  • [HKEY_USERS\[%SVC_LOC_SID%]\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]rumuneziko=Rundll32.exe "[%SYSTEM%]\vevinaho.dll",s
  • [HKEY_USERS\[%SVC_SYS_SID%]\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]Update=rundll32.exe "[%SVC_SYS_APPDATA%]\Tencent\Tencent\hmlxkn.dll",DllRegisterServer
  • [HKEY_USERS\.DEFAULT\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]Update=rundll32.exe "[%SVC_SYS_APPDATA%]\Apple Computer\Apple Computer\klzgc.dll",DllRegisterServer
  • [HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]Update=rundll32.exe "[%SVC_SYS_APPDATA%]\Apple Computer\Apple Computer\klzgc.dll",DllRegisterServer
  • [HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]rumuneziko=Rundll32.exe "[%SYSTEM%]\vevinaho.dll",s
  • [HKEY_USERS\.DEFAULT\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]Update=rundll32.exe "[%SVC_SYS_APPDATA%]\Tencent\Tencent\hmlxkn.dll",DllRegisterServer
  • [HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]Update=rundll32.exe "[%SVC_SYS_APPDATA%]\Tencent\Tencent\hmlxkn.dll",DllRegisterServer
  • [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]vobusikik=Rundll32.exe "[%SYSTEM%]\vonuleta.dll",a
  • [HKEY_USERS\[%SVC_SYS_SID%]\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]AppleData=rundll32.exe "[%LOCAL_APPDATA%]\Apple\AppleData\Appledata.dll",DllRegisterServer
  • [HKEY_USERS\[%SVC_SYS_SID%]\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]Update=rundll32.exe "[%SVC_SYS_APPDATA%]\Macromedia\Macromedia\klzgc.dll",DllRegisterServer
  • [HKEY_USERS\.DEFAULT\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]AppleData=rundll32.exe "[%LOCAL_APPDATA%]\Apple\AppleData\Appledata.dll",DllRegisterServer
  • [HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]Citrix=rundll32.exe "[%LOCAL_APPDATA%]\Apple\AppleUpdate\Appleupdt32.dll",DllRegisterServer
  • [HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]KeyboardNotifierUpdate=rundll32.exe "[%COMMON_APPDATA%]\KeyboardNotifierUpdate.dll",DllRegisterServer
  • [HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]Update=rundll32.exe "[%SVC_SYS_APPDATA%]\Apple Computer\Apple Computer\yvfpemrj.dll",DllRegisterServer
  • [HKEY_USERS\.DEFAULT\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]Update=rundll32.exe "[%SVC_SYS_APPDATA%]\Apple Computer\Apple Computer\yvfpemrj.dll",DllRegisterServer
  • [HKEY_USERS\.DEFAULT\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]Update=rundll32.exe "[%SVC_SYS_APPDATA%]\Macromedia\Macromedia\klzgc.dll",DllRegisterServer
  • [HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]Update=rundll32.exe "[%SVC_SYS_APPDATA%]\Macromedia\Macromedia\klzgc.dll",DllRegisterServer
  • [HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]AppleData=rundll32.exe "[%LOCAL_APPDATA%]\Apple\AppleData\Appledata.dll",DllRegisterServer
  • [HKEY_USERS\[%SVC_SYS_SID%]\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]Update=rundll32.exe "[%APPDATA%]\Windows Search\Windows Search\xzjfhrf.dll",DllRegisterServer
  • [HKEY_USERS\.DEFAULT\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]Update=rundll32.exe "[%APPDATA%]\Windows Search\Windows Search\xzjfhrf.dll",DllRegisterServer
  • [HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]Update=rundll32.exe "[%APPDATA%]\Windows Search\Windows Search\xzjfhrf.dll",DllRegisterServer
  • [HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]MSSMSGS=rundll32.exe winhcd32.rom,WVeJdhVmy
  • [HKEY_USERS\[%SVC_SYS_SID%]\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]Update=rundll32.exe "[%SVC_SYS_APPDATA%]\Microsoft\Microsoft\dkgjonab.dll",DllRegisterServer
  • [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]\WINDOWS\Temp\servcieD282455.exe=[%WINDOWS%]\Temp\servcieD282455.exe
  • [HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]Update=rundll32.exe "[%APPDATA%]\Actual Tools\Actual Tools\hmlxkn.dll",DllRegisterServer
  • [HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]Update=rundll32.exe "[%APPDATA%]\Media Center Programs\Media Center Programs\nssqf.dll",DllRegisterServer
  • [HKEY_USERS\.DEFAULT\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]Update=rundll32.exe "[%SVC_SYS_APPDATA%]\Microsoft\Microsoft\dkgjonab.dll",DllRegisterServer
  • [HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]Update=rundll32.exe "[%SVC_SYS_APPDATA%]\Microsoft\Microsoft\dkgjonab.dll",DllRegisterServer
  • [HKEY_USERS\[%SVC_LOC_SID%]\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]latikalapo=Rundll32.exe "[%SYSTEM%]\gidazina.dll",s
  • [HKEY_USERS\[%SVC_SYS_SID%]\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]Update=rundll32.exe "[%APPDATA%]\Adobe\Adobe\klzgc.dll",DllRegisterServer
  • [HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]latikalapo=Rundll32.exe "[%SYSTEM%]\gidazina.dll",s
  • [HKEY_USERS\.DEFAULT\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]Update=rundll32.exe "[%APPDATA%]\Adobe\Adobe\klzgc.dll",DllRegisterServer
  • [HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]Update=rundll32.exe "[%APPDATA%]\Adobe\Adobe\klzgc.dll",DllRegisterServer
  • [HKEY_USERS\[%SVC_LOC_SID%]\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]towekabodi=Rundll32.exe "[%SYSTEM%]\turazapu.dll",s
  • [HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]towekabodi=Rundll32.exe "[%SYSTEM%]\turazapu.dll",s
  • [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]10f5ec05=rundll32.exe "[%SYSTEM%]\yeneseje.dll",b
  • [HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]Update=rundll32.exe "[%APPDATA%]\uTorrent\uTorrent\klzgc.dll",DllRegisterServer
  • [HKEY_USERS\.DEFAULT\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]Update=rundll32.exe "[%APPDATA%]\uTorrent\uTorrent\klzgc.dll",DllRegisterServer
  • [HKEY_USERS\[%SVC_SYS_SID%]\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]Update=rundll32.exe "[%SVC_SYS_APPDATA%]\Microsoft\Microsoft\klzgc.dll",DllRegisterServer
  • [HKEY_USERS\[%SVC_SYS_SID%]\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]Update=rundll32.exe "[%SVC_SYS_APPDATA%]\Adobe\Adobe\klzgc.dll",DllRegisterServer
  • [HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]Qqepiwareheg=rundll32.exe "[%WINDOWS%]\sryc40.dll",Startup
  • [HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]Update=rundll32.exe "[%APPDATA%]\com.adobe.mauby.4875E02D9FB21EE389F73B8D1702B320485DF8CE.1\com.adobe.mauby.4875E02D9FB21EE389F73B8D1702B320485DF8CE.1\klzgc.dll",DllRegisterServer
  • [HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]Update=rundll32.exe "[%APPDATA%]\AVG10\AVG10\dkgjonab.dll",DllRegisterServer
  • [HKEY_USERS\.DEFAULT\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]Update=rundll32.exe "[%APPDATA%]\AVG10\AVG10\dkgjonab.dll",DllRegisterServer
  • [HKEY_USERS\.DEFAULT\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]Update=rundll32.exe "[%SVC_SYS_APPDATA%]\Microsoft\Microsoft\klzgc.dll",DllRegisterServer
  • [HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]MSSMSGS=rundll32.exe winmci32.rom,MpBGGNFWkqaQ
  • [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]c0c4dc83=rundll32.exe "[%SYSTEM%]\cfxfgkec.dll",b
  • [HKEY_USERS\.DEFAULT\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]Update=rundll32.exe "[%SVC_SYS_APPDATA%]\Adobe\Adobe\klzgc.dll",DllRegisterServer
  • [HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]Update=rundll32.exe "[%SVC_SYS_APPDATA%]\Adobe\Adobe\klzgc.dll",DllRegisterServer
  • [HKEY_USERS\[%SVC_SYS_SID%]\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]Update=rundll32.exe "[%APPDATA%]\Macromedia\Macromedia\klzgc.dll",DllRegisterServer
  • [HKEY_USERS\[%SVC_SYS_SID%]\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]Update=rundll32.exe "[%APPDATA%]\Adobe\Adobe\dkgjonab.dll",DllRegisterServer
  • [HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]Update=rundll32.exe "[%SVC_SYS_APPDATA%]\{90140011-0066-0409-0000-0000000FF1CE}\{90140011-0066-0409-0000-0000000FF1CE}\dkgjonab.dll",DllRegisterServer
  • [HKEY_USERS\.DEFAULT\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]Update=rundll32.exe "[%SVC_SYS_APPDATA%]\{90140011-0066-0409-0000-0000000FF1CE}\{90140011-0066-0409-0000-0000000FF1CE}\dkgjonab.dll",DllRegisterServer
  • [HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]MSSMSGS=rundll32.exe winggf32.rom,vTfGVmjrKGha
  • [HKEY_USERS\.DEFAULT\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]Update=rundll32.exe "[%APPDATA%]\Macromedia\Macromedia\klzgc.dll",DllRegisterServer
  • [HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]Update=rundll32.exe "[%APPDATA%]\Macromedia\Macromedia\klzgc.dll",DllRegisterServer
  • [HKEY_USERS\.DEFAULT\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]Update=rundll32.exe "[%APPDATA%]\Adobe\Adobe\dkgjonab.dll",DllRegisterServer
  • [HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]Update=rundll32.exe "[%APPDATA%]\Adobe\Adobe\dkgjonab.dll",DllRegisterServer
  • [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\ShellExecuteHooks]{81ea3f36-357a-435a-8741-52c27ccc9f21}=(EMPTY)
  • [HKEY_USERS\[%SVC_SYS_SID%]\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]Update=rundll32.exe "[%APPDATA%]\Apple Computer\Apple Computer\klzgc.dll",DllRegisterServer
  • [HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]Update=rundll32.exe "[%APPDATA%]\Google\Google\xiuzb.dll",DllRegisterServer
  • [HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]Update=rundll32.exe "[%APPDATA%]\Arcsoft\Arcsoft\nssqf.dll",DllRegisterServer
  • [HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]Update=rundll32.exe "[%APPDATA%]\InstallShield\InstallShield\nssqf.dll",DllRegisterServer
  • [HKEY_USERS\.DEFAULT\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]Update=rundll32.exe "[%APPDATA%]\InstallShield\InstallShield\nssqf.dll",DllRegisterServer
  • [HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]MSSMSGS=rundll32.exe wintvo32.rom,pdpXQPZmdcgZ
  • [HKEY_USERS\.DEFAULT\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]Update=rundll32.exe "[%APPDATA%]\Apple Computer\Apple Computer\klzgc.dll",DllRegisterServer
  • [HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]Update=rundll32.exe "[%APPDATA%]\Apple Computer\Apple Computer\klzgc.dll",DllRegisterServer
  • [HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]Update=rundll32.exe "[%APPDATA%]\Book Place\Book Place\nssqf.dll",DllRegisterServer
  • [HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]MSSMSGS=rundll32.exe winqhx32.rom,aoVSJQWojo
  • [HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]Update=rundll32.exe "[%APPDATA%]\Google\Google\nssqf.dll",DllRegisterServer
  • [HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]Update=rundll32.exe "[%APPDATA%]\ChaYoWo Games\ChaYoWo Games\klzgc.dll",DllRegisterServer
  • [HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]Update=rundll32.exe "[%APPDATA%]\acccore\acccore\nssqf.dll",DllRegisterServer
  • [HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]Update=rundll32.exe "[%APPDATA%]\com.skinkers.aa\com.skinkers.aa\klzgc.dll",DllRegisterServer
  • [HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]Update=rundll32.exe "[%APPDATA%]\Yahoo!\Yahoo!\nssqf.dll",DllRegisterServer
  • [HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]Update=rundll32.exe "[%APPDATA%]\Identities\Identities\dkgjonab.dll",DllRegisterServer
  • [HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]Lsehomubarax=rundll32.exe "[%LOCAL_APPDATA%]\apokehadehip.dll",Startup
  • [HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]Update=rundll32.exe "[%APPDATA%]\Media Player Classic\Media Player Classic\klzgc.dll",DllRegisterServer
  • [HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]MSSMSGS=rundll32.exe winzfx32.rom,aYmvOpJyI
  • [HKEY_USERS\[%SVC_SYS_SID%]\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]Update=rundll32.exe "[%APPDATA%]\Bubble Xmas\Bubble Xmas\dkgjonab.dll",DllRegisterServer
  • [HKEY_USERS\[%SVC_LOC_SID%]\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]zapitunoyu=Rundll32.exe "[%SYSTEM%]\bafazigi.dll",s
  • [HKEY_USERS\[%SVC_SYS_SID%]\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]Update=rundll32.exe "[%APPDATA%]\vlc\vlc\klzgc.dll",DllRegisterServer
  • [HKEY_USERS\.DEFAULT\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]Update=rundll32.exe "[%APPDATA%]\Bubble Xmas\Bubble Xmas\dkgjonab.dll",DllRegisterServer
  • [HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]Update=rundll32.exe "[%APPDATA%]\Bubble Xmas\Bubble Xmas\dkgjonab.dll",DllRegisterServer
  • [HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]zapitunoyu=Rundll32.exe "[%SYSTEM%]\bafazigi.dll",s
  • [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]zapitunoyu=Rundll32.exe "[%SYSTEM%]\bafazigi.dll",s
  • [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]CPMbf19687c=Rundll32.exe "[%SYSTEM%]\biyiziko.dll",a
  • [HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]Update=rundll32.exe "[%APPDATA%]\Real\Real\nssqf.dll",DllRegisterServer
  • [HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]Fyidibec=rundll32.exe "[%LOCAL_APPDATA%]\ulafulugaw.dll",Startup
  • [HKEY_USERS\.DEFAULT\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]Update=rundll32.exe "[%APPDATA%]\vlc\vlc\klzgc.dll",DllRegisterServer
  • [HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]Update=rundll32.exe "[%APPDATA%]\vlc\vlc\klzgc.dll",DllRegisterServer
  • [HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]MSSMSGS=rundll32.exe winmyb32.rom,alYfhoTNN
  • [HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]Update=rundll32.exe "[%APPDATA%]\Apple Computer\Apple Computer\dkgjonab.dll",DllRegisterServer
  • [HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]Update=rundll32.exe "[%APPDATA%]\ACD Systems\ACD Systems\nssqf.dll",DllRegisterServer
  • [HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]Update=rundll32.exe "[%APPDATA%]\Creative\Creative\klzgc.dll",DllRegisterServer
  • [HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]Tbawasuxom=rundll32.exe "[%LOCAL_APPDATA%]\omizutazet.dll",Startup
  • [HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]JavaOnlineUpdate=rundll32.exe "[%COMMON_APPDATA%]\JavaOnlineUpdate.dll",DllRegisterServer
  • [HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]tusqnmsys=rundll32.exe "urpolk.dll",DllRegisterServer
  • [HKEY_USERS\.DEFAULT\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]tusqnmsys=rundll32.exe "urpolk.dll",DllRegisterServer
  • [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]Trodosaceve=rundll32.exe "[%WINDOWS%]\eqoyogom.dll",Startup
  • [HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]Gsoze=rundll32.exe "[%LOCAL_APPDATA%]\od94010.dll",Startup
  • [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]zuyukuziva=Rundll32.exe "[%SYSTEM%]\sipeheze.dll",s
  • [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]CPMbf97765c=Rundll32.exe "[%SYSTEM%]\pemipigi.dll",a
  • [HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]Update=rundll32.exe "[%APPDATA%]\hewlett-packard\hewlett-packard\dkgjonab.dll",DllRegisterServer
  • [HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]Update=rundll32.exe "[%APPDATA%]\Microsoft\Microsoft\dkgjonab.dll",DllRegisterServer
  • [HKEY_USERS\.DEFAULT\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]Update=rundll32.exe "[%APPDATA%]\Microsoft\Microsoft\dkgjonab.dll",DllRegisterServer
  • [HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]Update=rundll32.exe "[%APPDATA%]\YoudaGames\YoudaGames\dkgjonab.dll",DllRegisterServer
  • [HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]MSSMSGS=rundll32.exe winnwo32.rom,WqeQBEFtHC
  • [HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]Update=rundll32.exe "[%APPDATA%]\GARMIN\GARMIN\dkgjonab.dll",DllRegisterServer
  • [HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]MousePolicyBackup=rundll32.exe "[%COMMON_APPDATA%]\MousePolicyBackup.dll",DllRegisterServer
  • [HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]Update=rundll32.exe "[%APPDATA%]\ATI\ATI\dkgjonab.dll",DllRegisterServer
  • [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\ShellExecuteHooks]{e9bd0828-1fd9-410c-a50f-43ebe65d310f}=(EMPTY)
  • [HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]Update=rundll32.exe "[%APPDATA%]\LimeWire\LimeWire\dkgjonab.dll",DllRegisterServer
  • [HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]MSSMSGS=rundll32.exe winqez32.rom,IOVLdwiBb
  • [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]Oxujubediday=rundll32.exe "[%WINDOWS%]\ovapodovuje.dll",Startup
  • [HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]MSSMSGS=rundll32.exe winxkg32.rom,DHhMFYljb
  • [HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]MSSMSGS=rundll32.exe winiqk32.rom,azLVhlfZPk
  • [HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]Update=rundll32.exe "[%APPDATA%]\Media Player Classic\Media Player Classic\dkgjonab.dll",DllRegisterServer
  • [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\ShellExecuteHooks]{f7f6584c-864b-411d-a410-bb2de0d33ca1}=(EMPTY)
  • [HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]Update=rundll32.exe "[%APPDATA%]\Dev-Cpp\Dev-Cpp\dkgjonab.dll",DllRegisterServer
  • [HKEY_LOCAL_MACHINE\Software\Microsoft\Windows NT\CurrentVersion\Windows]AppInit_DLLs=[%SYSTEM%]\joretido.dll
  • [HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]Sxomohojafabipe=rundll32.exe "[%WINDOWS%]\jgfedh.dll",Startup
  • [HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]MSSMSGS=rundll32.exe winhwz32.rom,hkZTYbHKY
  • [HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]MSSMSGS=rundll32.exe winvib32.rom,qomGIhucJk
  • [HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]DirectxManagerPolicy=rundll32.exe "[%COMMON_APPDATA%]\DirectxManagerPolicy.dll",DllRegisterServer
  • [HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]MSSMSGS=rundll32.exe winpon32.rom,XmhZzw
  • [HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]MSSMSGS=rundll32.exe winkep32.rom,DojJIwGp
  • [HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]Hvowenoguqutoq=rundll32.exe "[%LOCAL_APPDATA%]\efovuhoxuqux.dll",Startup
  • [HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]Otofokuqi=rundll32.exe "[%LOCAL_APPDATA%]\wprx410c.dll",Startup
  • [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]Bquqeris=rundll32.exe "[%WINDOWS%]\exotigihagon.dll",Startup
  • [HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]vuvusasode=Rundll32.exe "[%SYSTEM%]\juvoguru.dll",s
  • [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]vuvusasode=Rundll32.exe "[%SYSTEM%]\juvoguru.dll",s
  • [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]8459ad81=rundll32.exe "[%SYSTEM%]\yoheduva.dll",b
  • [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]CPM876a9e1d=Rundll32.exe "[%SYSTEM%]\lavusita.dll",a
  • [HKEY_USERS\[%SVC_LOC_SID%]\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]lemenonoko=Rundll32.exe "[%SYSTEM%]\yemopego.dll",s
  • [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]Vzocebasu=rundll32.exe "[%WINDOWS%]\usecakenak.dll",Startup
  • [HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]lemenonoko=Rundll32.exe "[%SYSTEM%]\yemopego.dll",s
  • [HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]Icufeh=rundll32.exe "[%LOCAL_APPDATA%]\ejipexominopafe.dll",Startup
  • [HKEY_USERS\[%SVC_LOC_SID%]\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]pabowonaru=Rundll32.exe "[%SYSTEM%]\gahehuje.dll",s
  • [HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]DirectxVerifierUpdate=rundll32.exe "[%COMMON_APPDATA%]\DirectxVerifierUpdate.dll",DllRegisterServer
  • [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]\WINDOWS\Temp\servcieE113B33.exe=[%WINDOWS%]\Temp\servcieE113B33.exe
  • [HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]Update=rundll32.exe "[%APPDATA%]\Adobe\Adobe\jsrzbhj.dll",DllRegisterServer
  • [HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]pabowonaru=Rundll32.exe "[%SYSTEM%]\gahehuje.dll",s
  • [HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]MSSMSGS=rundll32.exe winhwb32.rom,SFgtNarxxyty
  • [HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]GoogleBackupService=rundll32.exe "[%COMMON_APPDATA%]\GoogleBackupService.dll",DllRegisterServer
  • [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\ShellExecuteHooks]{663656df-6bae-460c-a612-8133df519346}=(EMPTY)
  • [HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]MSSMSGS=rundll32.exe winpbz32.rom,KGzPmIaas
  • [HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]MSSMSGS=rundll32.exe winiqk32.rom,dnCgiKQIAdj
  • [HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]GoogleServiceNotifier=rundll32.exe "[%COMMON_APPDATA%]\GoogleServiceNotifier.dll",DllRegisterServer
  • [HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]MSSMSGS=rundll32.exe windju32.rom,wZomaBHbxuS
  • [HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]MSSMSGS=rundll32.exe winbgo32.rom,kyOEbVUNL
  • [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\ShellExecuteHooks]{24e9519b-3f70-429b-99bc-4b2b49b96f66}=(EMPTY)
  • [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\RunAdvanced Uninstaller]Eginepiy=rundll32.exe "[%WINDOWS%]\ijewoniqivu.dll",Startup
  • [HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]MSSMSGS=rundll32.exe winkml32.rom,rWKnku
  • [HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]wvvsposys=rundll32.exe "khgefg.dll",DllRegisterServer
  • [HKEY_USERS\.DEFAULT\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]wvvsposys=rundll32.exe "khgefg.dll",DllRegisterServer
  • [HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]qonoonsys=rundll32.exe "khgefg.dll",DllRegisterServer
  • [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]iifdbbsys=rundll32.exe "khgefg.dll",DllRegisterServer
  • [HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]cbywxvdrv=rundll32.exe "geeebc.dll",s
  • [HKEY_USERS\.DEFAULT\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]cbywxvdrv=rundll32.exe "geeebc.dll",s
  • [HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]wvwuvvdrv=rundll32.exe "geeebc.dll",s
  • [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]iiijghdrv=rundll32.exe "geeebc.dll",s
  • [HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]hgdeffaudio=rundll32.exe "bywxvu.dll",s
  • [HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]khigghsys=rundll32.exe "khgfcy.dll",s
  • [HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]yaxyxusys=rundll32.exe "khgfcy.dll",s
  • [HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]urspqnsys=rundll32.exe "khgfcy.dll",s
  • [HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]iifcaasys=rundll32.exe "khgfcy.dll",s
  • [HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]nnomlmsys=rundll32.exe "khgfcy.dll",s
  • [HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]hggdeesys=rundll32.exe "khgfcy.dll",s
  • [HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]awuropsys=rundll32.exe "khgfcy.dll",s
  • [HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]xxyayvsys=rundll32.exe "khgfcy.dll",s
  • [HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]hgfecysys=rundll32.exe "khgfcy.dll",s
  • [HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]ddabxusys=rundll32.exe "khgfcy.dll",s
  • [HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]vtuvutsys=rundll32.exe "khgfcy.dll",s
  • [HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]wvtrsssys=rundll32.exe "khgfcy.dll",s
  • [HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]tuttsqsys=rundll32.exe "khgfcy.dll",s
  • [HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]cbbabasys=rundll32.exe "khgfcy.dll",s
  • [HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]qopqrrsys=rundll32.exe "khgfcy.dll",s
  • [HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]ursrqnsys=rundll32.exe "khgfcy.dll",s
  • [HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]qopmljsys=rundll32.exe "khgfcy.dll",s
  • [HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]sstttrsys=rundll32.exe "khgfcy.dll",s
  • [HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]vtusqnsys=rundll32.exe "khgfcy.dll",s
  • [HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]mlihffsys=rundll32.exe "khgfcy.dll",s
  • [HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]wvttqrsys=rundll32.exe "khgfcy.dll",s
  • [HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]urpqomsys=rundll32.exe "khgfcy.dll",s
  • [HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]efcdefsys=rundll32.exe "khgfcy.dll",s
  • [HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]vtuuvwsys=rundll32.exe "khgfcy.dll",s
  • [HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]xxxwtqsys=rundll32.exe "khgfcy.dll",s
  • [HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]fcbaxxaudio=rundll32.exe "opqnki.dll",s
  • [HKEY_USERS\.DEFAULT\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]hgdeffaudio=rundll32.exe "bywxvu.dll",s
  • [HKEY_USERS\.DEFAULT\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]khigghsys=rundll32.exe "khgfcy.dll",s
  • [HKEY_USERS\.DEFAULT\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]yaxyxusys=rundll32.exe "khgfcy.dll",s
  • [HKEY_USERS\.DEFAULT\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]urspqnsys=rundll32.exe "khgfcy.dll",s
  • [HKEY_USERS\.DEFAULT\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]iifcaasys=rundll32.exe "khgfcy.dll",s
  • [HKEY_USERS\.DEFAULT\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]nnomlmsys=rundll32.exe "khgfcy.dll",s
  • [HKEY_USERS\.DEFAULT\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]hggdeesys=rundll32.exe "khgfcy.dll",s
  • [HKEY_USERS\.DEFAULT\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]awuropsys=rundll32.exe "khgfcy.dll",s
  • [HKEY_USERS\.DEFAULT\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]xxyayvsys=rundll32.exe "khgfcy.dll",s
  • [HKEY_USERS\.DEFAULT\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]hgfecysys=rundll32.exe "khgfcy.dll",s
  • [HKEY_USERS\.DEFAULT\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]ddabxusys=rundll32.exe "khgfcy.dll",s
  • [HKEY_USERS\.DEFAULT\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]vtuvutsys=rundll32.exe "khgfcy.dll",s