Top 10 Alerts

Top 100 Alerts List ...

Latest 10 Malware Files

Latest Files List ...

Testimonials

You guys are freakin' awesome, love the program, love the personalized service, and my pc loves it too :D

Justin S.

More ...

Vundo (Virtumondo) Registry Values

Scan your Windows registry for Vundo (Virtumondo)

HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Run, tusqnkdrv=rundll32.exe "fcyxyy.dll",s
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run, wvttssdrv=rundll32.exe "fcyxyy.dll",s
HKEY_USERS\.DEFAULT\SOFTWARE\Microsoft\Windows\CurrentVersion\Run, cbxvutdrv=rundll32.exe "fcyxyy.dll",s
HKEY_USERS\.DEFAULT\SOFTWARE\Microsoft\Windows\CurrentVersion\Run, khifeddrv=rundll32.exe "ljkhhf.dll",s
HKEY_USERS\.DEFAULT\SOFTWARE\Microsoft\Windows\CurrentVersion\Run, gebxxwdrv=rundll32.exe "effeec.dll",s
HKEY_USERS\S-1-5-18\SOFTWARE\Microsoft\Windows\CurrentVersion\Run, cbxvutdrv=rundll32.exe "fcyxyy.dll",s
HKEY_USERS\S-1-5-18\SOFTWARE\Microsoft\Windows\CurrentVersion\Run, khifeddrv=rundll32.exe "ljkhhf.dll",s
HKEY_USERS\S-1-5-18\SOFTWARE\Microsoft\Windows\CurrentVersion\Run, gebxxwdrv=rundll32.exe "effeec.dll",s
HKEY_USERS\.DEFAULT\SOFTWARE\Microsoft\Windows\CurrentVersion\Run, gedbbasys=rundll32.exe "cbbxyv.dll",DllRegisterServer
HKEY_USERS\S-1-5-18\SOFTWARE\Microsoft\Windows\CurrentVersion\Run, gedbbasys=rundll32.exe "cbbxyv.dll",DllRegisterServer
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Run, MSSMSGS=rundll32.exe winrps32.rom,fWxQWf
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Run, Jsetuhogehu=rundll32.exe "[%LOCAL_APPDATA%]\ebusawegumesa.dll",Startup
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Run, MSSMSGS=rundll32.exe winjrj32.rom,aRklYdvmrQ
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Run, Qlulu=rundll32.exe "[%LOCAL_APPDATA%]\itabubov.dll",Startup
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Run, Qbogiku=rundll32.exe "[%LOCAL_APPDATA%]\KBDali.dll",Startup
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Run, Czoxuxerugu=rundll32.exe "[%LOCAL_APPDATA%]\inopufaxaw.dll",Startup
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run, Qbihasamoqixate=rundll32.exe "[%WINDOWS%]\ikuzifowasi.dll",Startup
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Run, MSSMSGS=rundll32.exe winjmo32.rom,jPJnHcplSQ
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Run, MSSMSGS=rundll32.exe winkml32.rom,hxglaR
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run, Sbotenoc=rundll32.exe "[%WINDOWS%]\osoreqon.dll",Startup
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run, Kwahoqiraceven=rundll32.exe "[%WINDOWS%]\owogacut.dll",Startup
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Run, Vjitoqaxacodeneq=rundll32.exe "[%LOCAL_APPDATA%]\ulijejohehucuca.dll",Startup
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\ShellExecuteHooks, {7ce67716-5803-4fb7-b344-0c7a17f93b5d}=
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\ShellExecuteHooks, {826a5ed9-1316-4efd-87f8-aa400c5d551a}=
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\ShellExecuteHooks, {d2376fb3-3d0d-414d-83aa-3ad6ad6b111f}=
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run, nnmjjgsys=rundll32.exe "gebbab.dll",DllRegisterServer
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run, rqpnnlaudio=rundll32.exe "rqopqn.dll",s
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Run, opqnnnaudio=rundll32.exe "rqopqn.dll",s
HKEY_USERS\.DEFAULT\SOFTWARE\Microsoft\Windows\CurrentVersion\Run, yaayyvaudio=rundll32.exe "rqopqn.dll",s
HKEY_USERS\S-1-5-18\SOFTWARE\Microsoft\Windows\CurrentVersion\Run, yaayyvaudio=rundll32.exe "rqopqn.dll",s
HKEY_USERS\.DEFAULT\SOFTWARE\Microsoft\Windows\CurrentVersion\Run, pmlkkksys=rundll32.exe "gebbab.dll",DllRegisterServer
HKEY_USERS\S-1-5-18\SOFTWARE\Microsoft\Windows\CurrentVersion\Run, pmlkkksys=rundll32.exe "gebbab.dll",DllRegisterServer
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Run, MSSMSGS=rundll32.exe winmsp32.rom,CWLaFByO
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Run, MSSMSGS=rundll32.exe winruq32.rom,jwAVWQv
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Run, MSSMSGS=rundll32.exe winhwb32.rom,GUgLxLmClJ
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run, CPM187725a2=Rundll32.exe "[%SYSTEM%]\jogihuju.dll",a
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run, Jxesicilucipihax=rundll32.exe "[%WINDOWS%]\ipamuked.dll",Startup
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run, iiffffsys=rundll32.exe "pmnkkj.dll",s
HKEY_USERS\.DEFAULT\SOFTWARE\Microsoft\Windows\CurrentVersion\Run, rqrrrqsys=rundll32.exe "pmnkkj.dll",s
HKEY_USERS\S-1-5-18\SOFTWARE\Microsoft\Windows\CurrentVersion\Run, rqrrrqsys=rundll32.exe "pmnkkj.dll",s
HKEY_LOCAL_MACHINE\Software\Microsoft\Windows NT\CurrentVersion\Windows, AppInit_DLLs=[%SYSTEM%]\vunogenu.dll
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run-, 882f640e=rundll32.exe "[%SYSTEM%]\dararudi.dll",b
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run-, tegojetaye=Rundll32.exe "[%SYSTEM%]\dipakule.dll",s
HKEY_USERS\S-1-5-20\SOFTWARE\Microsoft\Windows\CurrentVersion\Run, tegojetaye=Rundll32.exe "[%SYSTEM%]\dipakule.dll",s
HKEY_USERS\S-1-5-19\SOFTWARE\Microsoft\Windows\CurrentVersion\Run, tegojetaye=Rundll32.exe "[%SYSTEM%]\dipakule.dll",s
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Run, MSSMSGS=rundll32.exe winfav32.rom,cfAniuyMWR
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Run, MSSMSGS=rundll32.exe winphd32.rom,MuunbRzRZt
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Run, opmnlmaudio=rundll32.exe "mlmnki.dll",s
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run, iiijhgaudio=rundll32.exe "mlmnki.dll",s
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run, ddbxussys=rundll32.exe "geecaw.dll",s
HKEY_USERS\.DEFAULT\SOFTWARE\Microsoft\Windows\CurrentVersion\Run, wvvtutaudio=rundll32.exe "yabaxv.dll",s
HKEY_USERS\.DEFAULT\SOFTWARE\Microsoft\Windows\CurrentVersion\Run, pmlmmnaudio=rundll32.exe "mlmnki.dll",s
HKEY_USERS\.DEFAULT\SOFTWARE\Microsoft\Windows\CurrentVersion\Run, jkjkkhsys=rundll32.exe "geecaw.dll",s
HKEY_USERS\S-1-5-18\SOFTWARE\Microsoft\Windows\CurrentVersion\Run, wvvtutaudio=rundll32.exe "yabaxv.dll",s
HKEY_USERS\S-1-5-18\SOFTWARE\Microsoft\Windows\CurrentVersion\Run, pmlmmnaudio=rundll32.exe "mlmnki.dll",s
HKEY_USERS\S-1-5-18\SOFTWARE\Microsoft\Windows\CurrentVersion\Run, jkjkkhsys=rundll32.exe "geecaw.dll",s
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Run, byvwwwaudio=rundll32.exe "urspnk.dll",s
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run, cbyyvwaudio=rundll32.exe "urspnk.dll",s
HKEY_USERS\.DEFAULT\SOFTWARE\Microsoft\Windows\CurrentVersion\Run, awuuvsaudio=rundll32.exe "urspnk.dll",s
HKEY_USERS\S-1-5-18\SOFTWARE\Microsoft\Windows\CurrentVersion\Run, awuuvsaudio=rundll32.exe "urspnk.dll",s
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Run, MSSMSGS=rundll32.exe winqnj32.rom,IFglLUrW
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Run, Rcoyubi=rundll32.exe "[%LOCAL_APPDATA%]\omopikepeqepijo.dll",Startup
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Run, MSSMSGS=rundll32.exe winxuj32.rom,COuRJnhGHyw
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Run, MSSMSGS=rundll32.exe winjyn32.rom,TkfAIWkkeL
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Run, MSSMSGS=rundll32.exe winyxe32.rom,TVkAKX
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Run, MSSMSGS=rundll32.exe winpbm32.rom,gttsxdUFV
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\ShellExecuteHooks, {c81e7a5c-42c9-4d0c-b1f9-5458899deffb}=
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\ShellExecuteHooks, {a6807262-1d7a-44ab-947b-23b71e97915c}=
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Run, MSSMSGS=rundll32.exe winwcu32.rom,RMgQvYcRqKI
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Run, MSSMSGS=rundll32.exe winsdk32.rom,rzeSwTZfX
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Run, MSSMSGS=rundll32.exe winvsh32.rom,XXGeXzO
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run, Jzejudulig=rundll32.exe "[%LOCAL_APPDATA%]\afojoganisapamot.dll",Startup
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Run, MSSMSGS=rundll32.exe winiym32.rom,ZZJgRFMUol
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run, Lcemigibavuku=rundll32.exe "[%WINDOWS%]\icihapaximibahu.dll",Startup
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Run, MSSMSGS=rundll32.exe winkxs32.rom,bTdbAV
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Run, Vlusenuqavefog=rundll32.exe "[%LOCAL_APPDATA%]\ufayixusu.dll",Startup
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run, Gsuhelewizut=rundll32.exe "[%WINDOWS%]\igudedugugek.dll",Startup
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Run, Hyideciluv=rundll32.exe "[%WINDOWS%]\wiclcsy.dll",Startup
HKEY_USERS\S-1-5-21-464511372-1067406915-592272715-1007\SOFTWARE\Microsoft\Windows\CurrentVersion\Run, Hyideciluv=rundll32.exe "[%WINDOWS%]\wiclcsy.dll",Startup
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Run, MSSMSGS=rundll32.exe winvna32.rom,fFsMKBpVik
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Run, MSSMSGS=rundll32.exe winuji32.rom,AbYuFFPtbZDN
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run, Kwahoqiraceven=rundll32.exe "[%WINDOWS%]\iyuxagawoyuliw.dll",Startup
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Run, MSSMSGS=rundll32.exe winioa32.rom,uBcoljhN
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Run, MSSMSGS=rundll32.exe winuvz32.rom,peoKWQCeRx
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Run, MSSMSGS=rundll32.exe winmxr32.rom,vIQQeSY
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Run, MSSMSGS=rundll32.exe winiio32.rom,ZvPfDkuhtzD
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Run, MSSMSGS=rundll32.exe winldd32.rom,yXmCpCijS
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Run, MSSMSGS=rundll32.exe winrjf32.rom,uLTvJmQwB
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Run, MSSMSGS=rundll32.exe winhcj32.rom,aroDlXX
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Run, MSSMSGS=rundll32.exe wincaz32.rom,GHZIps
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Run, hgdaabaudio=rundll32.exe "xxxwtq.dll",s
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run, xxvtspsys=rundll32.exe "fcbawv.dll",DllRegisterServer
HKEY_USERS\.DEFAULT\SOFTWARE\Microsoft\Windows\CurrentVersion\Run, ddayyydrv=rundll32.exe "xxyvsr.dll",s
HKEY_USERS\.DEFAULT\SOFTWARE\Microsoft\Windows\CurrentVersion\Run, nnmjhfdrv=rundll32.exe "qopnon.dll",s
HKEY_USERS\.DEFAULT\SOFTWARE\Microsoft\Windows\CurrentVersion\Run, iihebydrv=rundll32.exe "qopqrq.dll",s
HKEY_USERS\.DEFAULT\SOFTWARE\Microsoft\Windows\CurrentVersion\Run, jkjjjidrv=rundll32.exe "yaxurs.dll",s
HKEY_USERS\.DEFAULT\SOFTWARE\Microsoft\Windows\CurrentVersion\Run, gedebcdrv=rundll32.exe "cbbywv.dll",s
HKEY_USERS\.DEFAULT\SOFTWARE\Microsoft\Windows\CurrentVersion\Run, dddaxvdrv=rundll32.exe "khgfec.dll",s
HKEY_USERS\.DEFAULT\SOFTWARE\Microsoft\Windows\CurrentVersion\Run, yaawusdrv=rundll32.exe "yaaxwu.dll",s
HKEY_USERS\.DEFAULT\SOFTWARE\Microsoft\Windows\CurrentVersion\Run, khggdedrv=rundll32.exe "nnmmjk.dll",s
HKEY_USERS\S-1-5-18\SOFTWARE\Microsoft\Windows\CurrentVersion\Run, ddayyydrv=rundll32.exe "xxyvsr.dll",s
HKEY_USERS\S-1-5-18\SOFTWARE\Microsoft\Windows\CurrentVersion\Run, nnmjhfdrv=rundll32.exe "qopnon.dll",s
HKEY_USERS\S-1-5-18\SOFTWARE\Microsoft\Windows\CurrentVersion\Run, iihebydrv=rundll32.exe "qopqrq.dll",s
HKEY_USERS\S-1-5-18\SOFTWARE\Microsoft\Windows\CurrentVersion\Run, jkjjjidrv=rundll32.exe "yaxurs.dll",s
HKEY_USERS\S-1-5-18\SOFTWARE\Microsoft\Windows\CurrentVersion\Run, gedebcdrv=rundll32.exe "cbbywv.dll",s
HKEY_USERS\S-1-5-18\SOFTWARE\Microsoft\Windows\CurrentVersion\Run, dddaxvdrv=rundll32.exe "khgfec.dll",s
HKEY_USERS\S-1-5-18\SOFTWARE\Microsoft\Windows\CurrentVersion\Run, yaawusdrv=rundll32.exe "yaaxwu.dll",s
HKEY_USERS\S-1-5-18\SOFTWARE\Microsoft\Windows\CurrentVersion\Run, khggdedrv=rundll32.exe "nnmmjk.dll",s
HKEY_USERS\.DEFAULT\SOFTWARE\Microsoft\Windows\CurrentVersion\Run, awusspsys=rundll32.exe "fcbawv.dll",DllRegisterServer
HKEY_USERS\S-1-5-18\SOFTWARE\Microsoft\Windows\CurrentVersion\Run, awusspsys=rundll32.exe "fcbawv.dll",DllRegisterServer
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run, lakoriyep=Rundll32.exe "[%SYSTEM%]\vuyugije.dll",a
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Run, MSSMSGS=rundll32.exe winsdb32.rom,cYYNopSTmhzE
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run, Wkisulizegosuliz=rundll32.exe "[%WINDOWS%]\anajecux.dll",Startup
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Run, Gyicihagonama=rundll32.exe "[%LOCAL_APPDATA%]\upufokelod.dll",Startup
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run, Akigicacepepaj=rundll32.exe "[%WINDOWS%]\exowahatewisucej.dll",Startup
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Run, MSSMSGS=rundll32.exe winzir32.rom,GNwuSal
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Run, MSSMSGS=rundll32.exe wincsc32.rom,UcjxzVpkt
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Run, MSSMSGS=rundll32.exe windho32.rom,KoiJCJaflre
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Run, MSSMSGS=rundll32.exe winhsx32.rom,pldnMEpqXDRv
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Run, MSSMSGS=rundll32.exe wincvu32.rom,tKorcjhWsLEU
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Run, Gyohuwaxohe=rundll32.exe "[%WINDOWS%]\kbjtofx.dll",Startup
HKEY_USERS\S-1-5-21-97400744-4247568029-2495073255-1003\SOFTWARE\Microsoft\Windows\CurrentVersion\Run, Gyohuwaxohe=rundll32.exe "[%WINDOWS%]\kbjtofx.dll",Startup
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Run, Uyaqorefube=rundll32.exe "[%LOCAL_APPDATA%]\etokakejupe.dll",Startup
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Run, MSSMSGS=rundll32.exe windnb32.rom,YRdqEk
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Run, MSSMSGS=rundll32.exe winhxc32.rom,zmYZFj
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Run, Rcoyubi=rundll32.exe "[%LOCAL_APPDATA%]\amemuhifopa.dll",Startup
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Run, Rrokesufiyasomiz=rundll32.exe "[%WINDOWS%]\dinti32.dll",Startup
HKEY_USERS\S-1-5-21-1547161642-838170752-682003330-1009\SOFTWARE\Microsoft\Windows\CurrentVersion\Run, Rrokesufiyasomiz=rundll32.exe "[%WINDOWS%]\dinti32.dll",Startup
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Run, MSSMSGS=rundll32.exe winpzc32.rom,eOXbOd
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Run, MSSMSGS=rundll32.exe winiot32.rom,AVUpaZeRX
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\ShellExecuteHooks, {49d63e18-33b1-46f2-82c2-39431fb94794}=
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\ShellExecuteHooks, {6aa3809c-6261-456f-8fca-43fe39adc5e9}=
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\ShellExecuteHooks, {1eb27c5e-3df4-41e2-b51a-d80f812d561d}=
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Run, MSSMSGS=rundll32.exe winpqf32.rom,WLdmmoezz
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run, Dzubucineputeh=rundll32.exe "[%WINDOWS%]\alidukemuguxav.dll",Startup
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Run, Mduquwow=rundll32.exe "[%WINDOWS%]\wpntanp.dll",Startup
HKEY_USERS\S-1-5-21-1275210071-1500820517-1801674531-1003\SOFTWARE\Microsoft\Windows\CurrentVersion\Run, Mduquwow=rundll32.exe "[%WINDOWS%]\wpntanp.dll",Startup
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run, Pdugepodatode=rundll32.exe "[%LOCAL_APPDATA%]\egafojufane.dll",Startup
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Run, Xvudo=rundll32.exe "[%LOCAL_APPDATA%]\obovawubixax.dll",Startup
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Run, MSSMSGS=rundll32.exe winnig32.rom,fcCRAFRR
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Run, MSSMSGS=rundll32.exe winrji32.rom,bXQpffOBxW
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Run, MSSMSGS=rundll32.exe winqdd32.rom,mRYMvOuqLvAL
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Run, MSSMSGS=rundll32.exe winqyu32.rom,CQgvSJfWH
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Run, MSSMSGS=rundll32.exe winnnv32.rom,caiIug
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Run, MSSMSGS=rundll32.exe winxru32.rom,jzKuEALzlSi
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Run, Tdalibavukubo=rundll32.exe "[%LOCAL_APPDATA%]\elocodaqoxoqirac.dll",Startup
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Run, Lxerupiceri=rundll32.exe "[%LOCAL_APPDATA%]\wstadmxy.dll",Startup
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Run, MSSMSGS=rundll32.exe winhjn32.rom,vXTZPuEOWfEh
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Run, MSSMSGS=rundll32.exe winlmj32.rom,eyepQXBDjX
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Run, MSSMSGS=rundll32.exe winhes32.rom,ufAAbR
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Run, MSSMSGS=rundll32.exe windwl32.rom,PCBhhjqT
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Run, Pwozasokupug=rundll32.exe "[%LOCAL_APPDATA%]\afudisuv.dll",Startup
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Run, Xxurecatev=rundll32.exe "[%LOCAL_APPDATA%]\cbmwmor.dll",Startup
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Run, Ocusiluyirogodin=rundll32.exe "[%WINDOWS%]\nmr3260.dll",Startup
HKEY_USERS\S-1-5-21-3787669529-1843859185-1951298529-1008\SOFTWARE\Microsoft\Windows\CurrentVersion\Run, Ocusiluyirogodin=rundll32.exe "[%WINDOWS%]\nmr3260.dll",Startup
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run, fajiremugi=Rundll32.exe "suhahebu.dll",s
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Run, MSSMSGS=rundll32.exe winwff32.rom,XzYyBGmK
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Run, qonlliaudio=rundll32.exe "bywvur.dll",s
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run, jkkiigaudio=rundll32.exe "bywvur.dll",s
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run, xxxuutsys=rundll32.exe "opqrol.dll",s
HKEY_USERS\.DEFAULT\SOFTWARE\Microsoft\Windows\CurrentVersion\Run, iihgghsys=rundll32.exe "opqrol.dll",s
HKEY_USERS\S-1-5-18\SOFTWARE\Microsoft\Windows\CurrentVersion\Run, iihgghsys=rundll32.exe "opqrol.dll",s
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Run, MSSMSGS=rundll32.exe wineoy32.rom,gvcyOxWTR
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Run, MSSMSGS=rundll32.exe winjsf32.rom,HKuoCyg
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run, dalutujij=Rundll32.exe "[%SYSTEM%]\ziranime.dll",a
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run, Fbeyogan=rundll32.exe "[%WINDOWS%]\ivotohunica.dll",Startup
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Run, MSSMSGS=rundll32.exe wingzj32.rom,CXCtJMIqe
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run, MSServer=rundll32.exe [%SYSTEM%]\pmnlmMfG.dll,#1
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Run, MSSMSGS=rundll32.exe winbwh32.rom,WniYoStv
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Run, MSSMSGS=rundll32.exe winjfp32.rom,PCBhhjqT
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Run, MSSMSGS=rundll32.exe winwiz32.rom,lBOOYEnAzYj
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Run, MSSMSGS=rundll32.exe winrtt32.rom,LfHJxx
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run, Onohudumosedox=rundll32.exe "[%WINDOWS%]\idurafiqejivul.dll",Startup
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Run, Onusoroxazivazo=rundll32.exe "[%LOCAL_APPDATA%]\aqolenar.dll",Startup
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Run, MSSMSGS=rundll32.exe winlmj32.rom,eVAIVgSuG
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\ShellExecuteHooks, {4c2142f9-e90d-4d2f-b286-840afdc4bc5f}=
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run, Xnejonid=rundll32.exe "[%WINDOWS%]\uqisokarad.dll",Startup
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run, Fbeyogan=rundll32.exe "[%WINDOWS%]\okisovuni.dll",Startup
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run, Olebu=rundll32.exe "[%WINDOWS%]\ekalubemojokesiy.dll",Startup
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Run, MSSMSGS=rundll32.exe winina32.rom,hIbGpEyaXsKO
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Run, MSSMSGS=rundll32.exe winrta32.rom,VJVfrEIJsh
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Run, MSSMSGS=rundll32.exe winigi32.rom,HrPsac
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run, Rcobohufajel=rundll32.exe "[%LOCAL_APPDATA%]\ivigawop.dll",Startup
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Run, Rcobohufajel=rundll32.exe "[%LOCAL_APPDATA%]\ivigawop.dll",Startup
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run, Ywibavef=rundll32.exe "[%WINDOWS%]\agiqibiyov.dll",Startup
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Run, MSSMSGS=rundll32.exe winobp32.rom,VAvrNMQZ
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Run, MSSMSGS=rundll32.exe winuwf32.rom,ZDTLrhlu
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Run, MSSMSGS=rundll32.exe winurk32.rom,sXRqAszdRL
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Run, MSSMSGS=rundll32.exe winrhi32.rom,fZnpRTEYhMWy
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Run, Xdomabupic=rundll32.exe "[%LOCAL_APPDATA%]\igojonuqucadotex.dll",Startup
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Run, MSSMSGS=rundll32.exe winigd32.rom,imIoHW
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Run, MSSMSGS=rundll32.exe winrtt32.rom,FlGFblBhBkhn
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run, Hrasuzifu=rundll32.exe "[%WINDOWS%]\avuwomaquden.dll",Startup
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Run, Dfivezenoco=rundll32.exe "[%WINDOWS%]\mecmgr.dll",Startup
HKEY_USERS\S-1-5-21-2243266678-113990660-1963939374-1153\SOFTWARE\Microsoft\Windows\CurrentVersion\Run, Dfivezenoco=rundll32.exe "[%WINDOWS%]\mecmgr.dll",Startup
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run, Oyoverevafid=rundll32.exe "[%WINDOWS%]\aziquqisef.dll",Startup
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Run, Jbudih=rundll32.exe "[%WINDOWS%]\awr16g.dll",Startup
HKEY_USERS\S-1-5-21-798616143-475969859-1608736215-1003\SOFTWARE\Microsoft\Windows\CurrentVersion\Run, Jbudih=rundll32.exe "[%WINDOWS%]\awr16g.dll",Startup
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\ShellExecuteHooks, {baceb7af-8d88-456e-82d0-7beb9a4410fe}=
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\ShellExecuteHooks, {c3f37eca-a8d9-4633-92c6-fe24c7d16aba}=
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run, Umuway=rundll32.exe "[%WINDOWS%]\iresanukukub.dll",Startup
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Run, Itugikot=rundll32.exe "[%WINDOWS%]\wsf132.dll",Startup
HKEY_USERS\S-1-5-21-1229272821-1409082233-725345543-1003\SOFTWARE\Microsoft\Windows\CurrentVersion\Run, Itugikot=rundll32.exe "[%WINDOWS%]\wsf132.dll",Startup
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Run, MSSMSGS=rundll32.exe winnig32.rom,XkqkYG
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Run, MSSMSGS=rundll32.exe wincvy32.rom,MTfgJmRc
HKEY_USERS\S-1-5-20\SOFTWARE\Microsoft\Windows\CurrentVersion\Run, titenepapu=Rundll32.exe "[%SYSTEM%]\zobayoha.dll",s
HKEY_USERS\S-1-5-19\SOFTWARE\Microsoft\Windows\CurrentVersion\Run, titenepapu=Rundll32.exe "[%SYSTEM%]\zobayoha.dll",s
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Run, MSSMSGS=rundll32.exe winigi32.rom,FOOhPLmv
HKEY_USERS\S-1-5-20\SOFTWARE\Microsoft\Windows\CurrentVersion\Run, pulalikede=Rundll32.exe "[%SYSTEM%]\pujorila.dll",s
HKEY_USERS\S-1-5-19\SOFTWARE\Microsoft\Windows\CurrentVersion\Run, pulalikede=Rundll32.exe "[%SYSTEM%]\pujorila.dll",s
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run, Rrosecaguhimuh=rundll32.exe "[%WINDOWS%]\ewotiwuv.dll",Startup
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Run, MSSMSGS=rundll32.exe winnig32.rom,qMcjrqoRu
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Run, MSSMSGS=rundll32.exe winlfo32.rom,YQAeIYA
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Run, MSSMSGS=rundll32.exe wincsc32.rom,JDRmyrQN
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Run, MSSMSGS=rundll32.exe winigi32.rom,cMJTrOns
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Run, MSSMSGS=rundll32.exe winkxs32.rom,JvyMKwpmV
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Run, MSSMSGS=rundll32.exe wineay32.rom,uocVvNDh
HKEY_USERS\S-1-5-20\SOFTWARE\Microsoft\Windows\CurrentVersion\Run, weweyiwipi=Rundll32.exe "[%SYSTEM%]\juhalobo.dll",s
HKEY_USERS\S-1-5-19\SOFTWARE\Microsoft\Windows\CurrentVersion\Run, weweyiwipi=Rundll32.exe "[%SYSTEM%]\juhalobo.dll",s
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Run, MSSMSGS=rundll32.exe winrtt32.rom,VIjCsEdhR
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run-, Rqigiyayidadot=rundll32.exe "[%SYSTEM%]\config\systemprofile\AppData\Local\alaharusaneyulex.dll",Startup
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Run, MSSMSGS=rundll32.exe winwss32.rom,kFWeWY
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Run, MSSMSGS=rundll32.exe winbab32.rom,DpwZyRyCbQt
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Run, MSSMSGS=rundll32.exe winajk32.rom,QBYKSVsgUXrE
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Run, MSSMSGS=rundll32.exe winhxc32.rom,TGizftcOaXkB
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Run, MSSMSGS=rundll32.exe winqre32.rom,AlfcXDsUHcAn
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Run, MSSMSGS=rundll32.exe winssh32.rom,ZoCEXL
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Run, MSSMSGS=rundll32.exe winfgz32.rom,LKtOkdBrZgjU
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Run, Fsuporuzifulo=rundll32.exe "[%LOCAL_APPDATA%]\oyenuver.dll",Startup
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Run, Clanuwibiqo=rundll32.exe "[%LOCAL_APPDATA%]\Nlsprce.dll",Startup
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Run, MSSMSGS=rundll32.exe wincsc32.rom,OGuZDtk
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Run, MSSMSGS=rundll32.exe winfgd32.rom,odrTgazsm
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run, Msacadujugerudan=rundll32.exe "[%WINDOWS%]\ofiqiyaloqetu.dll",Startup
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\ShellExecuteHooks, {02715e47-5a8e-495b-8f63-0d30470b8e72}=
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Run, MSSMSGS=rundll32.exe winwrj32.rom,fMYdGX
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Run, Jtihavejogumaja=rundll32.exe "[%LOCAL_APPDATA%]\ofusazukuya.dll",Startup
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Run, MSSMSGS=rundll32.exe winpfi32.rom,JDRmyrQN
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Run, MSSMSGS=rundll32.exe winvuw32.rom,VndHiljBLTLb
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Run, MSSMSGS=rundll32.exe winrzy32.rom,zWlpjZW
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Run, MSSMSGS=rundll32.exe winqez32.rom,LfmpIe
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Run, MSSMSGS=rundll32.exe winxuj32.rom,mYXNTeK
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Run, MSSMSGS=rundll32.exe winruq32.rom,NGnjUvieQ
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run, Hqefudivosogike=rundll32.exe "[%WINDOWS%]\ujeworucato.dll",Startup
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Run, MSSMSGS=rundll32.exe winkep32.rom,aMhYAMnPum
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Run, MSSMSGS=rundll32.exe winxhv32.rom,DcshiYCDzLW
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Run, MSSMSGS=rundll32.exe winkeb32.rom,GldQrzMLoxIt
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Run, MSSMSGS=rundll32.exe winiqk32.rom,RSGpzLARh
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Run, MSSMSGS=rundll32.exe winjdi32.rom,COuRJnhGHyw
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Run, MSSMSGS=rundll32.exe winsgn32.rom,LbRDEG
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run, efdbyvsys=rundll32.exe "mlmmki.dll",s
HKEY_USERS\.DEFAULT\SOFTWARE\Microsoft\Windows\CurrentVersion\Run, khihhesys=rundll32.exe "mlmmki.dll",s
HKEY_USERS\S-1-5-18\SOFTWARE\Microsoft\Windows\CurrentVersion\Run, khihhesys=rundll32.exe "mlmmki.dll",s
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run, Dyuwo=rundll32.exe "[%WINDOWS%]\iqoxezibeceri.dll",Startup
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Run, MSSMSGS=rundll32.exe winnbw32.rom,TZGZdUXz
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Run, MSSMSGS=rundll32.exe winiqk32.rom,HnGCwSrgRSfR
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Run, MSSMSGS=rundll32.exe winbqi32.rom,hSbZIWEw
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run, Mqasos=rundll32.exe "[%WINDOWS%]\eyoxonug.dll",Startup
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Run, MSSMSGS=rundll32.exe winxwf32.rom,AjRTAtm
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Run, Wxiwuxujabow=rundll32.exe "[%LOCAL_APPDATA%]\ayubozeyesog.dll",Startup
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Run, MSSMSGS=rundll32.exe winnuj32.rom,MuunbRzRZt
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run, Knatibuzixuqot=rundll32.exe "[%WINDOWS%]\akiviyifanivago.dll",Startup
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run, Eregasibidukemu=rundll32.exe "[%WINDOWS%]\ucipiconihuqaja.dll",Startup
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run, Kgefemomixefeno=rundll32.exe "[%WINDOWS%]\uwimowem.dll",Startup
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Run, Nxokidozo=rundll32.exe "[%WINDOWS%]\wasap32.dll",Startup
HKEY_USERS\S-1-5-21-3753493424-2358766450-1344658844-1004\SOFTWARE\Microsoft\Windows\CurrentVersion\Run, Nxokidozo=rundll32.exe "[%WINDOWS%]\wasap32.dll",Startup
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Run, urrrrsaudio=rundll32.exe "rqomji.dll",s
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Run, ssqoljaudio=rundll32.exe "wvvvwt.dll",s
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run, awtsroaudio=rundll32.exe "rqomji.dll",s
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run, bywvutaudio=rundll32.exe "wvvvwt.dll",s
HKEY_USERS\.DEFAULT\SOFTWARE\Microsoft\Windows\CurrentVersion\Run, wvwtqnaudio=rundll32.exe "wvvvwt.dll",s
HKEY_USERS\.DEFAULT\SOFTWARE\Microsoft\Windows\CurrentVersion\Run, bywwtqaudio=rundll32.exe "rqomji.dll",s
HKEY_USERS\S-1-5-18\SOFTWARE\Microsoft\Windows\CurrentVersion\Run, wvwtqnaudio=rundll32.exe "wvvvwt.dll",s
HKEY_USERS\S-1-5-18\SOFTWARE\Microsoft\Windows\CurrentVersion\Run, bywwtqaudio=rundll32.exe "rqomji.dll",s
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Run, MSSMSGS=rundll32.exe winvtj32.rom,AuwgCjK
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Run, MSSMSGS=rundll32.exe winees32.rom,WWsQrePcTRdA
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Run, MSSMSGS=rundll32.exe winhwn32.rom,ZZJgRFMUol
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Run, MSSMSGS=rundll32.exe winwyt32.rom,lHrkPDQcI
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Run, MSSMSGS=rundll32.exe winzir32.rom,pndYCzEFkwJB
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Run, MSSMSGS=rundll32.exe winbsx32.rom,FKoURC
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Run, MSSMSGS=rundll32.exe winpij32.rom,OcDNeydjZ
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Run, MSSMSGS=rundll32.exe winyms32.rom,JIxrrG
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Run, Ntumutamuxudipo=rundll32.exe "[%WINDOWS%]\donhcr.dll",Startup
HKEY_USERS\S-1-5-21-1390067357-746137067-1343024091-1003\SOFTWARE\Microsoft\Windows\CurrentVersion\Run, Ntumutamuxudipo=rundll32.exe "[%WINDOWS%]\donhcr.dll",Startup
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Run, MSSMSGS=rundll32.exe winbbb32.rom,LQxwbHdsDcL
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run, Dbowuma=rundll32.exe "[%WINDOWS%]\ejosejefiqasu.dll",Startup
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Run, MSSMSGS=rundll32.exe winbiy32.rom,DxJewI
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Run, MSSMSGS=rundll32.exe winjst32.rom,apAYrqi
HKEY_USERS\S-1-5-20\SOFTWARE\Microsoft\Windows\CurrentVersion\Run, jutahipibu=Rundll32.exe "[%SYSTEM%]\givinoye.dll",s
HKEY_USERS\S-1-5-19\SOFTWARE\Microsoft\Windows\CurrentVersion\Run, jutahipibu=Rundll32.exe "[%SYSTEM%]\givinoye.dll",s
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Run, MSSMSGS=rundll32.exe winjak32.rom,fJnRXyMjWtF
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Run, MSSMSGS=rundll32.exe winqnj32.rom,lkZHQc
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Run, MSSMSGS=rundll32.exe winnnv32.rom,KMiGkaUCBeG
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run, Mjuxaxim=rundll32.exe "[%WINDOWS%]\udifivuf.dll",Startup
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\ShellExecuteHooks, {453f51e8-fef5-4c54-b136-944bf434360c}=
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Run, MSSMSGS=rundll32.exe winwes32.rom,pPednYZuFfv
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Run, MSSMSGS=rundll32.exe winckn32.rom,SFgtNarxxyty
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run, Ozononizoki=rundll32.exe "[%LOCAL_APPDATA%]\iqosiwit.dll",Startup
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Run, Ozononizoki=rundll32.exe "[%LOCAL_APPDATA%]\iqosiwit.dll",Startup
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Run, MSSMSGS=rundll32.exe winvfe32.rom,XfJucAPzHul
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run, Dcuwimifix=rundll32.exe "[%WINDOWS%]\iqekucuraq.dll",Startup
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run, Fnafidi=rundll32.exe "[%WINDOWS%]\uyicohuvilitaciw.dll",Startup
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Run, Lrododegexino=rundll32.exe "[%WINDOWS%]\kbdbdf.dll",Startup
HKEY_USERS\S-1-5-21-4271383378-675215057-214577698-1006\SOFTWARE\Microsoft\Windows\CurrentVersion\Run, Lrododegexino=rundll32.exe "[%WINDOWS%]\kbdbdf.dll",Startup
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Run, Ayoduduqi=rundll32.exe "[%LOCAL_APPDATA%]\enodonotudokawas.dll",Startup
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Run, MSSMSGS=rundll32.exe winhov32.rom,CeiGTeZwNqVF
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Run, MSSMSGS=rundll32.exe winifz32.rom,uavWgnkOakA
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Run, MSSMSGS=rundll32.exe winqez32.rom,URBNESY
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run, Wqeheg=rundll32.exe "[%WINDOWS%]\omurulaz.dll",Startup
HKEY_USERS\S-1-5-18\SOFTWARE\Microsoft\Windows\CurrentVersion\Run, Hresilobakamod=rundll32.exe "[%WINDOWS%]\shieltpi.dll",Startup
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Run, MSSMSGS=rundll32.exe winjfb32.rom,xHpTlJT
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Run, MSSMSGS=rundll32.exe winoej32.rom,ZZJgRFMUol
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Run, MSSMSGS=rundll32.exe winvct32.rom,ChtYafgYEPj
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Run, MSSMSGS=rundll32.exe winjfb32.rom,eRtakVfIU
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Run, MSSMSGS=rundll32.exe winugy32.rom,NiZLWOA
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Run, MSSMSGS=rundll32.exe winbiy32.rom,JsVkjcvrlo
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run, sowemonar=Rundll32.exe "[%SYSTEM%]\jifakade.dll",a
HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Explorer\SharedTaskScheduler, {b90c3747-7396-43eb-a077-58edb2772188}=tokatiluy
HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\ShellServiceObjectDelayLoad, kazuvuyeg={b90c3747-7396-43eb-a077-58edb2772188}
HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Explorer\SharedTaskScheduler, {98ec4710-a3ac-4673-a2c9-ac22ddd7b526}=jugezatag
HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\ShellServiceObjectDelayLoad, jozafuzek={98ec4710-a3ac-4673-a2c9-ac22ddd7b526}
HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Explorer\SharedTaskScheduler, {fba113c1-09bb-469d-90ad-657e3fb9ba5a}=kupuhivus
HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\ShellServiceObjectDelayLoad, zumosezuw={fba113c1-09bb-469d-90ad-657e3fb9ba5a}
HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Explorer\SharedTaskScheduler, {b0686da1-06dc-45bd-a38a-37019387a97d}=jugezatag
HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\ShellServiceObjectDelayLoad, dosokusay={b0686da1-06dc-45bd-a38a-37019387a97d}
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run, Gjifubaderotegi=rundll32.exe "[%WINDOWS%]\ezuvabuyud.dll",Startup
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Run, MSSMSGS=rundll32.exe wincuv32.rom,tYdBgypCldvV
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run, Lcajosiziwawazul=rundll32.exe "[%LOCAL_APPDATA%]\ogonupiyepeter.dll",Startup
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Run, MSSMSGS=rundll32.exe winqku32.rom,clpWGR
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Run, MSSMSGS=rundll32.exe winohf32.rom,LQxwbHdsDcL
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Run, MSSMSGS=rundll32.exe wingnr32.rom,LQxwbHdsDcL
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Run, Fwufomizih=rundll32.exe "[%LOCAL_APPDATA%]\svbdug.dll",Startup
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Run, MSSMSGS=rundll32.exe winmjm32.rom,VnYUHeYlfUc
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Run, MSSMSGS=rundll32.exe winvtj32.rom,xFVzkgSLAlMy
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run, Rquhiwokojeg=rundll32.exe "[%WINDOWS%]\ibogeteko.dll",Startup
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\ShellExecuteHooks, {f1b2b165-fbf2-4eb3-98ff-9cf5506062b5}=
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Run, MSSMSGS=rundll32.exe winbfc32.rom,xKqnjAqJ
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run, Uvuyugesavadebib=rundll32.exe "[%WINDOWS%]\otalalihocimafey.dll",Startup
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run, Opipatuzar=rundll32.exe "[%WINDOWS%]\ibivaruyuqide.dll",Startup
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Run, MSSMSGS=rundll32.exe winllf32.rom,cZrEWwPlHo
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run, Cmoxe=rundll32.exe "[%WINDOWS%]\iyaqibiy.dll",Startup
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Run, Gnuqubomurediqa=rundll32.exe "[%WINDOWS%]\holunCDF.dll",Startup
HKEY_USERS\S-1-5-21-1482476501-1647877149-682003330-1004\SOFTWARE\Microsoft\Windows\CurrentVersion\Run, Gnuqubomurediqa=rundll32.exe "[%WINDOWS%]\holunCDF.dll",Startup
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Run, MSSMSGS="rundll32.exe" winhxc32.rom,axvJrOC
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Run, Afoyemilapeya=rundll32.exe "[%LOCAL_APPDATA%]\uyudejexijok.dll",Startup
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Run, MSSMSGS=rundll32.exe winplk32.rom,hegueysmI
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Run, MSSMSGS=rundll32.exe winhes32.rom,VJVfrEIJsh
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run, Aluxe=rundll32.exe "[%WINDOWS%]\amewopik.dll",Startup
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Run, MSSMSGS=rundll32.exe winjsf32.rom,GHlsYmJAu
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Run, MSSMSGS=rundll32.exe winnbw32.rom,WhpVbag
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run, Vfagoy=rundll32.exe "[%WINDOWS%]\icimeteqariwita.dll",Startup
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run, cbyxyvaudio=rundll32.exe "efcccb.dll",s
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Run, sstrrraudio=rundll32.exe "efcccb.dll",s
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Run, MSSMSGS=rundll32.exe wingsw32.rom,ASnaAwwaty
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run, Mbapufa=rundll32.exe "[%LOCAL_APPDATA%]\evecofirujiqigis.dll",Startup
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run, Xloyerecom=rundll32.exe "[%WINDOWS%]\ikehohic.dll",Startup
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Internet Explorer\Toolbar, {bb936323-19fa-4521-ba29-eca6a121bc78}=????
HKEY_USERS\S-1-5-20\SOFTWARE\Microsoft\Windows\CurrentVersion\Run, lulonedese=Rundll32.exe "[%SYSTEM%]\kihinuga.dll",s
HKEY_USERS\S-1-5-19\SOFTWARE\Microsoft\Windows\CurrentVersion\Run, lulonedese=Rundll32.exe "[%SYSTEM%]\kihinuga.dll",s
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run, Bnavecaguhimuhab=rundll32.exe "[%WINDOWS%]\ahihedil.dll",Startup
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Run, Bnavecaguhimuhab=rundll32.exe "[%WINDOWS%]\ahihedil.dll",Startup
HKEY_USERS\S-1-5-21-3521943628-3664042646-1024633318-1011\SOFTWARE\Microsoft\Windows\CurrentVersion\Run, Bnavecaguhimuhab=rundll32.exe "[%WINDOWS%]\ahihedil.dll",Startup
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Run, MSSMSGS=rundll32.exe winipx32.rom,COuRJnhGHyw
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Run, MSSMSGS=rundll32.exe winiym32.rom,mQxtWRsLMtEs
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run, Xsubupiliy=rundll32.exe "[%WINDOWS%]\idogahopiranohi.dll",Startup
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Run, MSSMSGS=rundll32.exe winees32.rom,gysLYOtd
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run, Kvayenipav=rundll32.exe "[%WINDOWS%]\etoniqivuxe.dll",Startup
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Run, MSSMSGS=rundll32.exe winvhi32.rom,HFVRXVggJMxS
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Run, MSSMSGS=rundll32.exe winbiy32.rom,RQWntzPc
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Run, MSSMSGS=rundll32.exe winhcj32.rom,yhqAsSIlIaH
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Run, MSSMSGS=rundll32.exe winrso32.rom,cFnUNbyAfeN
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Run, MSSMSGS=rundll32.exe winxhs32.rom,GvEQoIgoio
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Run, MSSMSGS=rundll32.exe winsgn32.rom,YdYpRPzitjfn
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Run, MSSMSGS=rundll32.exe winsdk32.rom,QhzlCJQll
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run, Lrenucob=rundll32.exe "[%SYSTEM%]\config\systemprofile\AppData\Local\isifasufolifa.dll",Startup
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Run, MSSMSGS=rundll32.exe winhdk32.rom,mlMCIJw
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Run, MSSMSGS=rundll32.exe winyxe32.rom,sHvDfrm
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Run, MSSMSGS=rundll32.exe winwuq32.rom,cYfxpM
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Run, tustsqsys=rundll32.exe "[%PROFILE_TEMP%]\effdaa.dll",s
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run, Wrosuli=rundll32.exe "[%WINDOWS%]\elurigeg.dll",Startup
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Run, MSSMSGS=rundll32.exe winzpm32.rom,taLyIzU
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Run, Igocohuvilita=rundll32.exe "[%LOCAL_APPDATA%]\KBDEnMAM.dll",Startup
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run-Disabled, Jxiyeho=rundll32.exe "[%WINDOWS%]\ohidefakor.dll",Startup
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run, pumofep=Rundll32.exe "[%COMMON_APPDATA%]\lonanez\lonanez.dll" s
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Run, MSSMSGS=rundll32.exe winnbw32.rom,aPYgNJZkU
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\ShellExecuteHooks, {b3102264-d09d-4322-b625-503fbf18dd7e}=
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\ShellExecuteHooks, {8E13DDE1-E013-47ec-9C4C-27C2F78BDD26}=
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Run, rmnzhp=RUNDLL32.EXE [%PROFILE_TEMP%]\mswyxtnd.dll,w
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Run, MSSMSGS=rundll32.exe winxru32.rom,ewAWdVI
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Run, MSSMSGS=rundll32.exe winjak32.rom,TPoMVXQwCh
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Run, Ihudub=rundll32.exe "[%LOCAL_APPDATA%]\uxenuyoz.dll",Startup
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Run, Wvulabokogikewej=rundll32.exe "[%LOCAL_APPDATA%]\dhohs01.dll",Startup
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Run, MSSMSGS=rundll32.exe winpan32.rom,ZoWmCQlZgCrc
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Run, MSSMSGS=rundll32.exe winddp32.rom,DcqfVNlndw
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Run, MSSMSGS=rundll32.exe winwrv32.rom,HHvsdKKzfe
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Run, MSSMSGS=rundll32.exe winigi32.rom,YxweBJ
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Run, MSSMSGS=rundll32.exe winmxr32.rom,AwbqEGgpf
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Run, MSSMSGS=rundll32.exe winjes32.rom,sMnygKxC
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run, Ynapiz=rundll32.exe "[%WINDOWS%]\erocokuhupotovun.dll",Startup
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run, Hzosuyuqidefay=rundll32.exe "[%WINDOWS%]\ubujuhiq.dll",Startup
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Run, MSSMSGS=rundll32.exe wintvo32.rom,DSlZbp
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run, Sgihutuy=rundll32.exe "[%WINDOWS%]\aracuronece.dll",Startup
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Run, MSSMSGS=rundll32.exe winvhw32.rom,NAZHrG
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Run, MSSMSGS=rundll32.exe winytj32.rom,OvxWRCZ
HKEY_USERS\S-1-5-18\SOFTWARE\Microsoft\Windows\CurrentVersion\Run, Pxixesab=rundll32.exe "[%WINDOWS%]\dmovegr.dll",Startup
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Run, MSSMSGS=rundll32.exe wintcm32.rom,yxInxAnwpav
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Run, MSSMSGS=rundll32.exe winnfi32.rom,ZBuVBXrVGkH
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\ShellExecuteHooks, {7bc6b793-bbaa-4eed-9e56-8cbfa6f5bb03}=
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Run, MSSMSGS=rundll32.exe windwl32.rom,WELmPbrmYp
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Run, Yvacudegem=rundll32.exe "[%LOCAL_APPDATA%]\arihigusu.dll",Startup
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Run, MSSMSGS=rundll32.exe wincui32.rom,zSTqsacK
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Run, MSSMSGS=rundll32.exe winzfx32.rom,dkbaYJAf
HKEY_USERS\S-1-5-20\SOFTWARE\Microsoft\Windows\CurrentVersion\Run, kaheraleze=Rundll32.exe "[%SYSTEM%]\peyumama.dll",s
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Run, 38a9a153=rundll32.exe "[%PROFILE_TEMP%]\fsopxvec.dll",b
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Run, cmds=rundll32.exe [%PROFILE_TEMP%]\mlJDwWQj.dll,c
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Run, MSSMSGS=rundll32.exe winauj32.rom,mpDvqaF
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Run, MSSMSGS=rundll32.exe winxfp32.rom,iBKQHs
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Run, MSSMSGS=rundll32.exe winvus32.rom,LfmpIe
HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Explorer\SharedTaskScheduler, {f1089142-e755-4c8b-bc00-9e9724c2f2be}=kupuhivus
HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\ShellServiceObjectDelayLoad, hukokuvuh={f1089142-e755-4c8b-bc00-9e9724c2f2be}
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run, CPM4269aed0=Rundll32.exe "[%SYSTEM%]\yepogofa.dll",a
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run, 415a9d4c=rundll32.exe "[%SYSTEM%]\nifudoju.dll",b
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run, vigosisari=Rundll32.exe "[%SYSTEM%]\lodohive.dll",s
HKEY_USERS\S-1-5-20\SOFTWARE\Microsoft\Windows\CurrentVersion\Run, vigosisari=Rundll32.exe "[%SYSTEM%]\lodohive.dll",s
HKEY_USERS\S-1-5-19\SOFTWARE\Microsoft\Windows\CurrentVersion\Run, vigosisari=Rundll32.exe "[%SYSTEM%]\lodohive.dll",s
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Run, MSSMSGS=rundll32.exe winbqi32.rom,iljWwHlrp
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Run, Nyevumokekegasud=rundll32.exe "[%LOCAL_APPDATA%]\exesuvubovi.dll",Startup
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Run, Dpukaduqir=rundll32.exe "[%LOCAL_APPDATA%]\qudins.dll",Startup
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Run-, Yniqanapiqifepu=rundll32.exe "[%LOCAL_APPDATA%]\emocepex.dll",Startup
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Run, MSSMSGS=rundll32.exe winpfi32.rom,DlpZiES
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Run, MSSMSGS=rundll32.exe winhpa32.rom,RpfxDwGlxPP
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run, Opipatuzar=rundll32.exe "[%WINDOWS%]\uzuwoniqivu.dll",Startup
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Run, MSSMSGS=rundll32.exe winbgo32.rom,oqfXAotpjNzZ
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Run, MSSMSGS=rundll32.exe winvtn32.rom,bjhKmTNKT
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Run, MSSMSGS=rundll32.exe winwss32.rom,VTjNrwiiYcwD
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Run, MSSMSGS=rundll32.exe winfcb32.rom,RJODgCMHsr
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run, Opakevulase=rundll32.exe "[%WINDOWS%]\uwuriquyi.dll",Startup
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Run, Yguyupomukimu=rundll32.exe "[%WINDOWS%]\msxdg2.dll",Startup
HKEY_USERS\S-1-5-21-3671738458-4252511799-2155628690-1007\SOFTWARE\Microsoft\Windows\CurrentVersion\Run, Yguyupomukimu=rundll32.exe "[%WINDOWS%]\msxdg2.dll",Startup
HKEY_USERS\S-1-5-20\SOFTWARE\Microsoft\Windows\CurrentVersion\Run, kuweholabi=Rundll32.exe "[%SYSTEM%]\tagitasa.dll",s
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Run, Uwupaqekoj=rundll32.exe "[%LOCAL_APPDATA%]\uqiqixat.dll",Startup
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Run, Vlevedul=rundll32.exe "[%LOCAL_APPDATA%]\ms081rf.dll",Startup
HKEY_LOCAL_MACHINE\Software\Microsoft\Windows NT\CurrentVersion\Windows, AppInit_DLLs=[%SYSTEM%]\vozutiso.dll [%SYSTEM%]\gimuhohe.dll
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run, CPM7fda042b=Rundll32.exe "[%SYSTEM%]\gimuhohe.dll",a
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run, 7ce937b7=rundll32.exe "[%SYSTEM%]\tuzoyono.dll",b
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run, womawolaja=Rundll32.exe "[%SYSTEM%]\deluguba.dll",s
HKEY_USERS\S-1-5-20\SOFTWARE\Microsoft\Windows\CurrentVersion\Run, womawolaja=Rundll32.exe "[%SYSTEM%]\deluguba.dll",s
HKEY_USERS\S-1-5-19\SOFTWARE\Microsoft\Windows\CurrentVersion\Run, womawolaja=Rundll32.exe "[%SYSTEM%]\deluguba.dll",s
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Run, MSSMSGS=rundll32.exe winfqj32.rom,ACvkXCQYYs
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Run, MSSMSGS=rundll32.exe winggf32.rom,hbrVKZStsmU
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Run, MSSMSGS=rundll32.exe winipx32.rom,OGuZDtk
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Run, MSSMSGS=rundll32.exe winrji32.rom,ykINQNZCtO
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run, CPM970597b3=Rundll32.exe "[%SYSTEM%]\pubulasi.dll",a
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run, 9436a42f=rundll32.exe "[%SYSTEM%]\jimikesu.dll",b
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run, lokuhosogo=Rundll32.exe "[%SYSTEM%]\vufurajo.dll",s
HKEY_USERS\S-1-5-19\SOFTWARE\Microsoft\Windows\CurrentVersion\Run, lokuhosogo=Rundll32.exe "[%SYSTEM%]\vufurajo.dll",s
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Run, MSSMSGS=rundll32.exe winpkp32.rom,POaczpu
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Run, MSSMSGS=rundll32.exe winlfo32.rom,uNepIqJpyKaK
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Run, MSSMSGS=rundll32.exe winqre32.rom,ImXlXw
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Run, MSSMSGS=rundll32.exe winyms32.rom,zTAEaV
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Run, MSSMSGS=rundll32.exe winjmo32.rom,tkggKAkU
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Run, MSSMSGS=rundll32.exe winfit32.rom,NhxjvSFHR
HKEY_USERS\S-1-5-20\SOFTWARE\Microsoft\Windows\CurrentVersion\Run, dosovagube=Rundll32.exe "[%SYSTEM%]\telekena.dll",s
HKEY_USERS\S-1-5-19\SOFTWARE\Microsoft\Windows\CurrentVersion\Run, dosovagube=Rundll32.exe "[%SYSTEM%]\telekena.dll",s
HKEY_USERS\.DEFAULT\SOFTWARE\Microsoft\Windows\CurrentVersion\Run, opmjhhsys=rundll32.exe "nnklki.dll",s
HKEY_USERS\S-1-5-18\SOFTWARE\Microsoft\Windows\CurrentVersion\Run, opmjhhsys=rundll32.exe "nnklki.dll",s
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run, Fjoqekafomohu=rundll32.exe "[%WINDOWS%]\ajesonocesofihut.dll",Startup
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Run, MSSMSGS=rundll32.exe winsdk32.rom,rXWJtZvfxC
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Run, MSSMSGS=rundll32.exe winqez32.rom,YRVDoGe
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Run, MSSMSGS=rundll32.exe winmty32.rom,oMIkgf
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Run, MSSMSGS=rundll32.exe winhov32.rom,PGrgASSqMW
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Run, MSSMSGS=rundll32.exe winvhw32.rom,ErRYOumL
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Run, MSSMSGS=rundll32.exe wintfb32.rom,AoemwHDKcCnd
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Run, MSSMSGS=rundll32.exe winxnz32.rom,HniJQLdwcFi
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run, Vgulud=rundll32.exe "[%WINDOWS%]\ipayisadoqene.dll",Startup
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Run, MSSMSGS=rundll32.exe winees32.rom,khLQpT
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Run, MSSMSGS=rundll32.exe winqzb32.rom,dzmAqgMxsGDn
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run, Thoqojo=rundll32.exe "[%WINDOWS%]\iqebeyey.dll",Startup
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Run, MSSMSGS=rundll32.exe winqhs32.rom,uEdBNjJhuO
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Run, MSSMSGS=rundll32.exe winwuq32.rom,fPqSyTRYDjzR
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Run, MSSMSGS=rundll32.exe winybl32.rom,dZLbgi
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run, Opipatuzar=rundll32.exe "[%WINDOWS%]\ofukipejoxi.dll",Startup
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run, Igizivanomo=rundll32.exe "[%WINDOWS%]\ibimofiv.dll",Startup
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Run, MSSMSGS=rundll32.exe winjef32.rom,ZjzAuwLRukfp
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run, Tyenulipizul=rundll32.exe "[%WINDOWS%]\arebusax.dll",Startup
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Run, MSSMSGS=rundll32.exe winhwn32.rom,WjnaOdsWqEs
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Run, MSSMSGS=rundll32.exe winsdb32.rom,TKhidFRteSI
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Run, MSSMSGS=rundll32.exe winnnv32.rom,rvQeDxMjQjFU
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Run, MSSMSGS=rundll32.exe winwvy32.rom,XGYGzmuu
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Run, MSSMSGS=rundll32.exe winfgz32.rom,KFtvLUxLpKk
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Run, MSSMSGS=rundll32.exe winbiy32.rom,mWlJwwxOA
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Run, Qwamux=rundll32.exe "[%LOCAL_APPDATA%]\inudewilulok.dll",Startup
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Run, Ekeqamunumat=rundll32.exe "[%LOCAL_APPDATA%]\KBADMODT.dll",Startup
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Run, MSSMSGS=rundll32.exe winvhi32.rom,RArmPiBoO
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run, Ubenopiba=rundll32.exe "[%WINDOWS%]\ogofunaner.dll",Startup
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run, Qridopebasuse=rundll32.exe "[%WINDOWS%]\ofiqawep.dll",Startup
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run, Jcuhuzuzes=rundll32.exe "[%WINDOWS%]\oponecat.dll",Startup
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Run, Hloxezib=rundll32.exe "[%WINDOWS%]\qacui32.dll",Startup
HKEY_USERS\S-1-5-21-3222517188-4055541732-2184944160-1008\SOFTWARE\Microsoft\Windows\CurrentVersion\Run, Hloxezib=rundll32.exe "[%WINDOWS%]\qacui32.dll",Startup
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\ShellExecuteHooks, {62d1390b-75e8-445c-a99d-3340e08fd4c5}=
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Run, MSSMSGS=rundll32.exe winxru32.rom,DmvGAabpq

Scan your system registry for FREE

CURIOLAB S.M.B.A., Amagertorv 15, 2, 1160 Copenhagen K, Denmark, +45.36965533