Exterminate It! Antimalware

malpedia

Known threats:698,172 Last Update:April 28, 11:39

Testimonials

In recent weeks, my computer has been infected with malware and adware that just would not quit. A*G G*****t failed to remove them. S****t just froze up. Another anti-virus program just sat there and looked at me. So I purchased Exterminate It! This was the only anti-virus program I could find that would recognize and remove particularly pesky viruses from my computer. But even more impressive, they allow subscribers to send in descriptions of new viruses they encounter, and they will design a way to remove the virus and send out to you an update. I submitted the description of a virus to them, and a couple of days later they sent to me an update that cleanly removed it. If you run into viruses that just won't quit, give this anti-virus program a try. It's cheap and removes the viruses that the other anti-virus programs can't touch for some reason.

Source

Brother Mel

AdClicker- Registry Values List

This is a complete list of AdClicker registry values collected by Exterminate It!. If you find any of these registry values on your PC, your computer is very likely to be infected with the AdClicker - trojan,adware,backdoor,downloader,dos.

IMPORTANT: Because the registry is a core component of your Windows system, it is strongly recommended that you back up the registry before you begin deleting keys and values. For information about backing up the Windows registry, refer to the Registry Editor online help.
  • [HKEY_CURRENT_USER\software\microsoft\windows\currentversion\run]csrss=[%SYSTEM%]\WindowsPowerShell\v1.0\powershell.exe
  • [HKEY_CURRENT_USER\software\microsoft\windows\currentversion\run]csrss=[%APPDATA%]\Microsoft\Temp.exe
  • [HKEY_CURRENT_USER\software\microsoft\windows\currentversion\run]csrss=[%APPDATA%]\Microsoft\Crypto\host.exe
  • [HKEY_CURRENT_USER\software\microsoft\windows\currentversion\run]csrss=wscript.exe //B "[%PROFILE_TEMP%]\csrss.vbs"
  • [HKEY_CURRENT_USER\software\microsoft\windows\currentversion\run]csrss="[%COMMON_APPDATA%]\Drivers\csrss.exe"
  • [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]skb=rundll32 "fioklgtw.dll",,Run
  • [HKEY_CURRENT_USER\software\microsoft\windows\currentversion\run]csrss=[%PERSONAL%]\MSDCSC\msdcsc.exe
  • [HKEY_CURRENT_USER\software\microsoft\windows\currentversion\run]csrss=[%APPDATA%]\csrss.exe
  • [HKEY_CURRENT_USER\software\microsoft\windows\currentversion\run]csrss=[%APPDATA%]\Microsoft\csrss.exe
  • [HKEY_CURRENT_USER\software\microsoft\windows\currentversion\run]windows installer=[%SYSTEM_DRIVE%]\winstall.exe
  • [HKEY_CURRENT_USER\software\microsoft\windows\currentversion\run]csrss=[%SYSTEM%]\csrss\csrss.exe
  • [HKEY_CURRENT_USER\software\vb and vba program settings\imadvertiser\aol]daystoclear=1
  • [HKEY_CURRENT_USER\software\vb and vba program settings\imadvertiser\msn]daystoclear=1
  • [HKEY_CURRENT_USER\software\vb and vba program settings\imadvertiser\yahoo]daystoclear=1
  • [HKEY_CURRENT_USER\software\vb and vba program settings\imadvertiser\aol]lastdate=12/09/2005
  • [HKEY_CURRENT_USER\software\vb and vba program settings\imadvertiser\msn]lastdate=12/09/2005
  • [HKEY_CURRENT_USER\software\vb and vba program settings\imadvertiser\yahoo]lastdate=12/09/2005
  • [HKEY_CURRENT_USER\software\microsoft\windows\currentversion\run]csrss=[%APPDATA%]\csrss\Csrss.exe
  • [HKEY_CURRENT_USER\software\microsoft\windows\currentversion\run]csrss=[%APPDATA%]\FH3090.exe
  • [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]ezLife=rundll32 "jmkqrfcl.dll",,Run
  • [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]sta=rundll32 "cyycp.dll",,Run
  • [HKEY_CURRENT_USER\software\microsoft\windows\currentversion\run]csrss=[%APPDATA%]\adobe\csrss.exe
  • [HKEY_CURRENT_USER\software\microsoft\windows\currentversion\run]csrss=[%APPDATA%]\csrss .exe
  • [HKEY_CURRENT_USER\software\microsoft\windows\currentversion\run]csrss=[%APPDATA%]\adobe\csrsse.exe
  • [HKEY_CURRENT_USER\software\vb and vba program settings\imadvertiser\aol]lastdate=08/15/2008
  • [HKEY_CURRENT_USER\software\vb and vba program settings\imadvertiser\msn]lastdate=08/15/2008
  • [HKEY_CURRENT_USER\software\vb and vba program settings\imadvertiser\yahoo]lastdate=08/15/2008
  • [HKEY_CURRENT_USER\software\microsoft\windows\currentversion\run]csrss="[%APPDATA%]\csrss.exe "
  • [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\RunDisabled]ezLife=rundll32 "savfdhon.dll",,Run
  • [HKEY_CURRENT_USER\software\vb and vba program settings\imadvertiser\aol]daystoclear=4
  • [HKEY_CURRENT_USER\software\vb and vba program settings\imadvertiser\aol]lastdate=05/12/2006
  • [HKEY_CURRENT_USER\software\vb and vba program settings\imadvertiser\msn]daystoclear=4
  • [HKEY_CURRENT_USER\software\vb and vba program settings\imadvertiser\msn]lastdate=05/12/2006
  • [HKEY_CURRENT_USER\software\vb and vba program settings\imadvertiser\yahoo]daystoclear=4
  • [HKEY_CURRENT_USER\software\vb and vba program settings\imadvertiser\yahoo]lastdate=05/12/2006
  • [HKEY_CURRENT_USER\software\microsoft\windows\currentversion\run]csrss=[%APPDATA%]\Microsoft\System\Services\csrss.exe
  • [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]skb=rundll32 "tckmtpif.dll",,Run
  • [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]skb=rundll32 "awbyklpc.dll",,Run
  • [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]ezLife=rundll32 "bncalvfi.dll",,Run
  • [HKEY_CURRENT_USER\software\microsoft\windows\currentversion\run]csrss=[%WINDOWS%]\Csrss\Csrss.exe
  • [HKEY_CURRENT_USER\software\microsoft\windows\currentversion\run]csrss=[%APPDATA%]\IDM.exe
  • [HKEY_CURRENT_USER\software\microsoft\windows\currentversion\run]csrss=[%APPDATA%]\Botcuklar.exe
  • [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]sta=rundll32 "qpvkp.dll",,Run
  • [HKEY_CURRENT_USER\software\microsoft\windows\currentversion\run]csrss=[%APPDATA%]\Quick.exe
  • [HKEY_CURRENT_USER\software\microsoft\windows\currentversion\run]csrss=[%APPDATA%]\mymsn.exe
  • [HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\run]syshost=[%APPDATA%]\program.exe
  • [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]skb=rundll32 "skvcsduz.dll",,Run
  • [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]ezLife=rundll32 "qbbkqmpy.dll",,Run
  • [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]ezLife=rundll32 "kkckgutg.dll",,Run
  • [HKEY_CURRENT_USER\software\microsoft\windows\currentversion\run]csrss=[%PROFILE%]\AppData\Roaming:system.exe
  • [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]ezLife=rundll32 "zoxzxqem.dll",,Run
  • [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]ezLife=rundll32 "ryodvolz.dll",,Run
  • [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run-]ezLife=rundll32 "agnnwttk.dll",,Run
  • [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]ezLife=rundll32 "kjtqzavv.dll",,Run
  • [HKEY_CURRENT_USER\software\microsoft\windows\currentversion\run]csrss=[%APPDATA%]\csrss.exe.exe
  • [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]ezLife=rundll32 "wnfbrjtx.dll",,Run
  • [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]skb=rundll32 "rubcbhew.dll",,Run
  • [HKEY_CURRENT_USER\software\microsoft\windows\currentversion\run]csrss=[%PROFILE_TEMP%]\csrss.exe
  • [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]sta=rundll32 "fhqgp.dll",,Run
  • [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]ezLife=rundll32 "dwkbdmab.dll",,Run
  • [HKEY_CURRENT_USER\software\microsoft\windows\currentversion\run]csrss=[%APPDATA%]\Microsoft\winlogin.exe
  • [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]ezLife=rundll32 "vvoqgkes.dll",,Run
  • [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]ezLife=rundll32 "vetcadmr.dll",,Run
  • [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]sta=rundll32 "imcop.dll",,Run
  • [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]ezLife=rundll32 "xzzivroy.dll",,Run
  • [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]ezLife=rundll32 "rhctsblk.dll",,Run
  • [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]ezLife=rundll32 "juygjqvt.dll",,Run
  • [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run-]sta=rundll32 "nloip.dll",,Run
  • [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]ezLife=rundll32 "smhahykq.dll",,Run
  • [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]ezLife=rundll32 "qovdoisi.dll",,Run
  • [HKEY_CURRENT_USER\software\microsoft\windows\currentversion\run]csrss=[%RECYCLE_BIN%]\smss.exe
  • [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run-Disabled]ezLife=rundll32 "jfcesgsf.dll",,Run
  • [HKEY_CURRENT_USER\software\vb and vba program settings\imadvertiser\aol]daystoclear=5
  • [HKEY_CURRENT_USER\software\vb and vba program settings\imadvertiser\aol]lastdate=09/16/2005
  • [HKEY_CURRENT_USER\software\vb and vba program settings\imadvertiser\msn]daystoclear=5
  • [HKEY_CURRENT_USER\software\vb and vba program settings\imadvertiser\msn]lastdate=09/16/2005
  • [HKEY_CURRENT_USER\software\vb and vba program settings\imadvertiser\yahoo]daystoclear=5
  • [HKEY_CURRENT_USER\software\vb and vba program settings\imadvertiser\yahoo]lastdate=09/16/2005
  • [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]skb=rundll32 "E1840.dll",,Run
  • [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]sta=rundll32 "wlgap.dll",,Run
  • [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]skb=rundll32 "leqwqwoa.dll",,Run
  • [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]ezLife=rundll32 "ifdeuhmz.dll",,Run
  • [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]skb=rundll32 "yguragsb.dll",,Run
  • [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]skb=rundll32 "E1820.dll",,Run
  • [HKEY_CURRENT_USER\software\microsoft\windows\currentversion\run]csrss="[%APPDATA%]\Quick.exe"
  • [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]skb=rundll32 "lnibdhao.dll",,Run
  • [HKEY_CURRENT_USER\software\microsoft\windows\currentversion\run]windows system recover!=[%PROFILE_TEMP%]\debug.exe
  • [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]ezLife=rundll32 "vrjvjhdi.dll",,Run
  • [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]ezLife=rundll32 "bqioxqbq.dll",,Run
  • [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run-]ezLife=rundll32 "zrrdygiw.dll",,Run
  • [HKEY_CURRENT_USER\software\microsoft\windows\currentversion\run]csrss=[%APPDATA%]\svchost.exe
  • [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]ezLife=rundll32 "uwjadlmj.dll",,Run
  • [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]sta=rundll32 "iuyep.dll",,Run
  • [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]ezLife=rundll32 "krvkzrbh.dll",,Run
  • [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run-]ezLife=rundll32 "uhovyvit.dll",,Run
  • [HKEY_CURRENT_USER\software\vb and vba program settings\imadvertiser\aol]daystoclear=3
  • [HKEY_CURRENT_USER\software\vb and vba program settings\imadvertiser\aol]lastdate=06/20/2006
  • [HKEY_CURRENT_USER\software\vb and vba program settings\imadvertiser\msn]daystoclear=3
  • [HKEY_CURRENT_USER\software\vb and vba program settings\imadvertiser\msn]lastdate=06/20/2006
  • [HKEY_CURRENT_USER\software\vb and vba program settings\imadvertiser\yahoo]daystoclear=3
  • [HKEY_CURRENT_USER\software\vb and vba program settings\imadvertiser\yahoo]lastdate=06/20/2006
  • [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]ezLife=rundll32 "erxmfrcc.dll",,Run
  • [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]ezLife=rundll32 "ehtdhflq.dll",,Run
  • [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]ezLife=rundll32 "cclzhmny.dll",,Run
  • [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]ezLife=rundll32 "kzymvkqx.dll",,Run
  • [HKEY_CURRENT_USER\software\microsoft\windows\currentversion\run]csrss=[%PROGRAM_FILES%]\Microsoft\smss.exe
  • [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]ezLife=rundll32 "igtyngec.dll",,Run
  • [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]ezLife=rundll32 "E1460.dll",,Run
  • [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]sta=rundll32 "vounp.dll",,Run
  • [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]ezLife=rundll32 "vgseujih.dll",,Run
  • [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]ezLife=rundll32 "E1550.dll",,Run
  • [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]sta=rundll32 "E1890.dll",,Run
  • [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]sta=rundll32 "kdjyp.dll",,Run
  • [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]ezLife=rundll32 "wshdsojh.dll",,Run
  • [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]ezLife=rundll32 "pnigeutx.dll",,Run
  • [HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\run]netw=[%WINDOWS%]\svw.exe
  • [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]sta=rundll32 "yhrkp.dll",,Run
  • [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]sta=rundll32 "vcqsp.dll",,Run
  • [HKEY_CURRENT_USER\software\microsoft\windows\currentversion\run]csrss=[%SYSTEM%]\windows\csrss.exe
  • [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]skb=rundll32 "zwdpcbju.dll",,Run
  • [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run_Disabled]ezLife=rundll32 "zjjmddyr.dll",,Run
  • [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]ezLife=rundll32 "badkhcmj.dll",,Run
  • [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]sta=rundll32 "qfeop.dll",,Run
  • [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]sta=rundll32 "zvpgp.dll",,Run
  • [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]sta=rundll32 "nkcop.dll",,Run
  • [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]skb=rundll32 "tfqzsawu.dll",,Run
  • [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]bipro=rundll32 "ndkuq.dll",,Run
  • [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]ezLife=rundll32 "jvaiehbu.dll",,Run
  • [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]skb=rundll32 "molchcre.dll",,Run
  • [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]ezLife=rundll32 "hrgvembi.dll",,Run
  • [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]sta=rundll32 "cqfqp.dll",,Run
  • [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]skb=rundll32 "efiaplis.dll",,Run
  • [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]ezLife=rundll32 "wlozfknx.dll",,Run
  • [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]ezLife=rundll32 "qpjekdxt.dll",,Run
  • [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]sta=rundll32 "lmasp.dll",,Run
  • [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]ezLife=rundll32 "kutwzgxk.dll",,Run
  • [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]skb=rundll32 "gishdthn.dll",,Run
  • [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]sta=rundll32 "tnvkp.dll",,Run
  • [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]sta=rundll32 "zhmop.dll",,Run
  • [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]sta=rundll32 "ewpip.dll",,Run
  • [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]sta=rundll32 "gpncp.dll",,Run
  • [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]skb=rundll32 "eckqv.dll",,Run
  • [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]ezLife=rundll32 "tgcnorgo.dll",,Run
  • [HKEY_CURRENT_USER\software\microsoft\windows\currentversion\run]csrss=[%APPDATA%]\Xilisoft.exe
  • [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]ezLife=rundll32 "xlfpcgxp.dll",,Run
  • [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]sta=rundll32 "ndkwp.dll",,Run
  • [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]ezLife=rundll32 "ueseqwwl.dll",,Run
  • [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]ezLife=rundll32 "curjapgf.dll",,Run
  • [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]sta=rundll32 "kpaup.dll",,Run
  • [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]sta=rundll32 "cswip.dll",,Run
  • [HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\run]syshost=[%WINDOWS%]\syshost.exe
  • [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]ezLife=rundll32 "uyhbghyu.dll",,Run
  • [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run-]sta=rundll32 "twuup.dll",,Run
  • [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]sta=rundll32 "twuup.dll",,Run
  • [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]sta=rundll32 "kvzop.dll",,Run
  • [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run-]ezLife=rundll32 "knnxiqco.dll",,Run
  • [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]sta=rundll32 "vruip.dll",,Run
  • [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run-Disabled]sta=rundll32 "dsdqp.dll",,Run
  • [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]ezLife=rundll32 "jbmpjqpy.dll",,Run
  • [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]sta=rundll32 "emiyp.dll",,Run
  • [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]ezLife=rundll32 "zjbracyp.dll",,Run
  • [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]skb=rundll32 "kewybhay.dll",,Run
  • [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]sta=rundll32 "cgkyp.dll",,Run
  • [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]sta=rundll32 "kowop.dll",,Run
  • [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]ezLife=rundll32 "dmcykzqe.dll",,Run
  • [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]sta=rundll32 "nbpcp.dll",,Run
  • [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]sta=rundll32 "mhlwp.dll",,Run
  • [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]sta=rundll32 "elzgp.dll",,Run
  • [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]skb=rundll32 "lrzosphb.dll",,Run
  • [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]ezLife=rundll32 "ahcrlzed.dll",,Run
  • [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]skb=rundll32 "rnztschd.dll",,Run
  • [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]sta=rundll32 "vdjmp.dll",,Run
  • [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]sta=rundll32 "guukp.dll",,Run
  • [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]skb=rundll32 "guujt.dll",,Run
  • [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]skb=rundll32 "nbpbt.dll",,Run
  • [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]skb=rundll32 "hbrnesmh.dll",,Run
  • [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]sta=rundll32 "djhop.dll",,Run
  • [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]sta=rundll32 "aobkp.dll",,Run
  • [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]ezLife=rundll32 "htsysdmu.dll",,Run
  • [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]sta=rundll32 "cudop.dll",,Run
  • [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]sta=rundll32 "vlcyp.dll",,Run
  • [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]sta=rundll32 "cjlep.dll",,Run
  • [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]sta=rundll32 "yzssp.dll",,Run
  • [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]sta=rundll32 "buvip.dll",,Run
  • [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]sta=rundll32 "smiqp.dll",,Run
  • [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]sta=rundll32 "jgnep.dll",,Run
  • [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run-]sta=rundll32 "heyup.dll",,Run
  • [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run-]sta=rundll32 "kxlip.dll",,Run
  • [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]sta=rundll32 "awnep.dll",,Run
  • [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]sta=rundll32 "gqwkp.dll",,Run
  • [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]sta=rundll32 "lndqp.dll",,Run
  • [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]sta=rundll32 "kkdqp.dll",,Run
  • [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]sta=rundll32 "ilhyp.dll",,Run
  • [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]sta=rundll32 "uksup.dll",,Run
  • [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]sta=rundll32 "tknap.dll",,Run
  • [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]sta=rundll32 "kkmqp.dll",,Run
  • [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]ezLife=rundll32 "yrmyhrom.dll",,Run
  • [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]sta=rundll32 "guuip.dll",,Run
  • [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]sta=rundll32 "czgip.dll",,Run
  • [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]sta=rundll32 "csbkp.dll",,Run
  • [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]sta=rundll32 "zuhap.dll",,Run
  • [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]skb=rundll32 "gaxxpjam.dll",,Run
  • [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]sta=rundll32 "ggewp.dll",,Run
  • [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]sta=rundll32 "jghqp.dll",,Run
  • [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]sta=rundll32 "amdqp.dll",,Run
  • [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]sta=rundll32 "ooakp.dll",,Run
  • [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]sta=rundll32 "mthqp.dll",,Run
  • [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]ezLife=rundll32 "hhxkoqqd.dll",,Run
  • [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]sta=rundll32 "ulicp.dll",,Run
  • [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run-]sta=rundll32 "keccp.dll",,Run
  • [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]sta=rundll32 "zyaip.dll",,Run
  • [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]sta=rundll32 "wrhep.dll",,Run
  • [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]sta=rundll32 "umskp.dll",,Run
  • [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]ezLife=rundll32 "qgdczcrn.dll",,Run
  • [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]sta=rundll32 "luwep.dll",,Run
  • [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]sta=rundll32 "uucmp.dll",,Run
  • [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]sta=rundll32 "bdzep.dll",,Run
  • [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]sta=rundll32 "slqwp.dll",,Run
  • [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]sta=rundll32 "yjmop.dll",,Run
  • [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]sta=rundll32 "pqvgp.dll",,Run
  • [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]ezLife=rundll32 "ixvqcxii.dll",,Run
  • [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]sta=rundll32 "tulrp.dll",,Run
  • [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]sta=rundll32 "tleep.dll",,Run
  • [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]sta=rundll32 "iypop.dll",,Run
  • [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]sta=rundll32 "sdisp.dll",,Run
  • [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]sta=rundll32 "uexup.dll",,Run
  • [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]sta=rundll32 "gowgp.dll",,Run
  • [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]sta=rundll32 "iuump.dll",,Run
  • [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]sta=rundll32 "kdfup.dll",,Run
  • [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]sta=rundll32 "ggbup.dll",,Run
  • [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]sta=rundll32 "qdsip.dll",,Run
  • [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]sta=rundll32 "cslyp.dll",,Run
  • [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]skb=rundll32 "zsytmqrh.dll",,Run
  • [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]sta=rundll32 "jqjip.dll",,Run
  • [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]sta=rundll32 "hbfgp.dll",,Run
  • [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]bipro=rundll32 "ctwyp.dll",,Run
  • [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]sta=rundll32 "rfwap.dll",,Run
  • [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]skb=rundll32 "gtwcv.dll",,Run
  • [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]sta=rundll32 "beuqp.dll",,Run
  • [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]sta=rundll32 "ucscp.dll",,Run
  • [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]sta=rundll32 "pndip.dll",,Run
  • [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]ezLife=rundll32 "ckwbrvdx.dll",,Run
  • [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]sta=rundll32 "vghyp.dll",,Run
  • [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]sta=rundll32 "ebosp.dll",,Run
  • [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]sta=rundll32 "iynop.dll",,Run
  • [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]sta=rundll32 "lahap.dll",,Run
  • [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]sta=rundll32 "djhkp.dll",,Run
  • [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]skb=rundll32 "ulvwv.dll",,Run
  • [HKEY_CURRENT_USER\software\microsoft\windows\currentversion\run]csrss=[%APPDATA%]\Pawn.exe
  • [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]ezLife=rundll32 "pmrvxbjr.dll",,Run
  • [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]sta=rundll32 "flrcp.dll",,Run
  • [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]bipro=rundll32 "ikukp.dll",,Run
  • [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]sta=rundll32 "iktsp.dll",,Run
  • [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]sta=rundll32 "ruowp.dll",,Run
  • [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]sta=rundll32 "tygyp.dll",,Run
  • [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]sta=rundll32 "dglap.dll",,Run
  • [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]sta=rundll32 "zxnsp.dll",,Run
  • [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]sta=rundll32 "oviop.dll",,Run
  • [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]sta=rundll32 "luuep.dll",,Run
  • [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]ezLife=rundll32 "dkofjcza.dll",,Run
  • [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]sta=rundll32 "syqwp.dll",,Run
  • [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]sta=rundll32 "sxekp.dll",,Run
  • [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]ezLife=rundll32 "cwgiswip.dll",,Run
  • [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]sta=rundll32 "zsbip.dll",,Run
  • [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]sta=rundll32 "jitsp.dll",,Run
  • [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]sta=rundll32 "ajfgp.dll",,Run
  • [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]ezLife=rundll32 "ncowojjb.dll",,Run
  • [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]ezLife=rundll32 "otjmcxgf.dll",,Run
  • [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]sta=rundll32 "mubpp.dll",,Run
  • [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]sta=rundll32 "uzywp.dll",,Run
  • [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]sta=rundll32 "lmrap.dll",,Run
  • [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]sta=rundll32 "cpkup.dll",,Run
  • [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]sta=rundll32 "njmop.dll",,Run
  • [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]sta=rundll32 "eoccp.dll",,Run
  • [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]sta=rundll32 "ybhgp.dll",,Run
  • [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]sta=rundll32 "ulqep.dll",,Run
  • [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]sta=rundll32 "mosmp.dll",,Run
  • [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]sta=rundll32 "fraip.dll",,Run
  • [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]sta=rundll32 "xmoqp.dll",,Run
  • [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]sta=rundll32 "etbup.dll",,Run
  • [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]sta=rundll32 "zzkep.dll",,Run
  • [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]ezLife=rundll32 "slbcclbf.dll",,Run
  • [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]sta=rundll32 "enswp.dll",,Run
  • [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]sta=rundll32 "spakp.dll",,Run
  • [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]sta=rundll32 "idrop.dll",,Run
  • [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]sta=rundll32 "pwvsp.dll",,Run
  • [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]sta=rundll32 "kgaep.dll",,Run
  • [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]skb=rundll32 "ixvbwyej.dll",,Run
  • [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]sta=rundll32 "mnpop.dll",,Run
  • [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]ezLife=rundll32 "fkulaubk.dll",,Run
  • [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]sta=rundll32 "cotup.dll",,Run
  • [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]sta=rundll32 "trtvp.dll",,Run
  • [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]sta=rundll32 "ibxmp.dll",,Run
  • [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]sta=rundll32 "pqkap.dll",,Run
  • [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]sta=rundll32 "pcvqp.dll",,Run
  • [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]sta=rundll32 "mhdep.dll",,Run
  • [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run-]sta=rundll32 "ktisp.dll",,Run
  • [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]ezLife=rundll32 "zaoqthve.dll",,Run
  • [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]sta=rundll32 "odvsp.dll",,Run
  • [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]sta=rundll32 "swzep.dll",,Run
  • [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]sta=rundll32 "acamp.dll",,Run
  • [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]ezLife=rundll32 "tzfdgubf.dll",,Run
  • [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]ezLife=rundll32 "eafwpllb.dll",,Run
  • [HKEY_CURRENT_USER\software\microsoft\windows\currentversion\run]csrss=[%PROFILE_TEMP%]\tmp-3\csrss.exe
  • [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run-]sta=rundll32 "rhjep.dll",,Run
  • [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]sta=rundll32 "gkqwp.dll",,Run
  • [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]sta=rundll32 "achmp.dll",,Run
  • [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]sta=rundll32 "nkxip.dll",,Run
  • [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]sta=rundll32 "suajp.dll",,Run
  • [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]sta=rundll32 "sztkp.dll",,Run
  • [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]ezLife=rundll32 "fncubdtr.dll",,Run
  • [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]skb=rundll32 "wzfuv.dll",,Run
  • [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]sta=rundll32 "uweip.dll",,Run
  • [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]skb=rundll32 "qmhuv.dll",,Run
  • [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]skb=rundll32 "bvpdt.dll",,Run
  • [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]ezLife=rundll32 "rsttqvqm.dll",,Run
  • [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]sta=rundll32 "ldoip.dll",,Run
  • [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]sta=rundll32 "spsop.dll",,Run
  • [HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\run]syshost=[%APPDATA%]\jusched.exe
  • [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]skb=rundll32 "dhhhs.dll",,Run
  • [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]skb=rundll32 "stzkv.dll",,Run
  • [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]skb=rundll32 "qxhpydbk.dll",,Run
  • [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run-]ezLife=rundll32 "gdafrisi.dll",,Run
  • [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]ezLife=rundll32 "lpkkuljd.dll",,Run
  • [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]ezLife=rundll32 "qylwfpmz.dll",,Run
  • [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]skb=rundll32 "ukfht.dll",,Run
  • [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]skb=rundll32 "mmhzs.dll",,Run
  • [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]skb=rundll32 "wghfxgct.dll",,Run
  • [HKEY_CURRENT_USER\software\microsoft\windows\currentversion\run]csrss=[%APPDATA%]\Bot.exe
  • [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]skb=rundll32 "ktfev.dll",,Run
  • [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]skb=rundll32 "mjyqv.dll",,Run
  • [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]skb=rundll32 "cawumdvb.dll",,Run
  • [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]ezLife=rundll32 "hcqnqtac.dll",,Run
  • [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]ezLife=rundll32 "cpvbvmbc.dll",,Run
  • [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run-]ezLife=rundll32 "rdrvhmbr.dll",,Run
  • [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]skb=rundll32 "ypvcv.dll",,Run
  • [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run-]ezLife=rundll32 "hcvtflnk.dll",,Run
  • [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]skb=rundll32 "cjrmqvob.dll",,Run
  • [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]skb=rundll32 "rnpvbfew.dll",,Run
  • [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]skb=rundll32 "wsppt.dll",,Run
  • [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]skb=rundll32 "ypvdt.dll",,Run
  • [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]skb=rundll32 "ysipxfdl.dll",,Run
  • [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]ezLife=rundll32 "rygngimf.dll",,Run
  • [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]skb=rundll32 "qvgpt.dll",,Run
  • [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]ezLife=rundll32 "ganjzwqk.dll",,Run
  • [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]skb=rundll32 "hdyht.dll",,Run
  • [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]ezLife=rundll32 "E1420.dll",,Run
  • [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]skb=rundll32 "nbrzs.dll",,Run
  • [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]skb=rundll32 "cwtmifts.dll",,Run
  • [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]skb=rundll32 "drrft.dll",,Run
  • [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]ezLife=rundll32 "bqrvmisi.dll",,Run
  • [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]skb=rundll32 "gvgiukcm.dll",,Run
  • [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]skb=rundll32 "gohvt.dll",,Run
  • [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]skb=rundll32 "ypvei.dll",,Run
  • [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]skb=rundll32 "rbnqi.dll",,Run
  • [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]skb=rundll32 "jxvhs.dll",,Run
  • [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]skb=rundll32 "nabwdwqt.dll",,Run
  • [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]ezLife=rundll32 "zckvydlg.dll",,Run
  • [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]skb=rundll32 "jnbgv.dll",,Run
  • [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]ezLife=rundll32 "nfqkgwmz.dll",,Run
  • [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]skb=rundll32 "dvsch.dll",,Run
  • [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]ezLife=rundll32 "sbrnzuwt.dll",,Run
  • [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]ezLife=rundll32 "ofulmugf.dll",,Run
  • [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]ezlife=rundll32 "lidumbyc.dll",,Run
  • [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]skb=rundll32 "qhjidvnl.dll",,Run
  • [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]skb=rundll32 "wdqtnftq.dll",,Run
  • [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]ezLife=rundll32 "ajkzyycg.dll",,Run
  • [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]skb=rundll32 "eftoh.dll",,Run
  • [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]ezLife=rundll32 "ldtetzkp.dll",,Run
  • [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]skb=rundll32 "klepnjrb.dll",,Run
  • [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]skb=rundll32 "hsfeg.dll",,Run
  • [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]ezLife=rundll32 "mofsqkqo.dll",,Run
  • [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]skb=rundll32 "rqlizake.dll",,Run
  • [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]skb=rundll32 "rilmg.dll",,Run
  • [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]skb=rundll32 "vdfod.dll",,Run
  • [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]skb=rundll32 "qgfxcynr.dll",,Run
  • [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run-]ezLife=rundll32 "airhsbrw.dll",,Run
  • [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]ezLife=rundll32 "cxlgplpi.dll",,Run
  • [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]skb=rundll32 "xdkyhosh.dll",,Run
  • [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\RunAdvanced Uninstaller]skb=rundll32 "mfutmbut.dll",,Run
  • [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run-]skb=rundll32 "iizraiux.dll",,Run
  • [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]skb=rundll32 "ulqrcdyc.dll",,Run
  • [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]skb=rundll32 "jgkbuhbd.dll",,Run
  • [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]skb=rundll32 "llehagnm.dll",,Run
  • [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]skb=rundll32 "jcqkhuca.dll",,Run
  • [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]skb=rundll32 "wsmdsbbg.dll",,Run
  • [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]skb=rundll32 "pvdmtwne.dll",,Run
  • [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]skb=rundll32 "hxbykdlz.dll",,Run
  • [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]skb=rundll32 "gvtbcgnh.dll",,Run
  • [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]skb=rundll32 "laxsowgm.dll",,Run
  • [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]skb=rundll32 "frzxniux.dll",,Run
  • [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]skb=rundll32 "zphzqhee.dll",,Run
  • [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]skb=rundll32 "cupdncyg.dll",,Run
  • [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run-]skb=rundll32 "knjlulmh.dll",,Run
  • [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]skb=rundll32 "rgpykack.dll",,Run
  • [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]skb=rundll32 "hjblbbjh.dll",,Run
  • [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]skb=rundll32 "ganevbsu.dll",,Run
  • [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]skb=rundll32 "tnyakcud.dll",,Run
  • [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]skb=rundll32 "isbabgdz.dll",,Run
  • [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]skb=rundll32 "xyeffder.dll",,Run
  • [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]skb=rundll32 "nhezyfpq.dll",,Run
  • [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]ezLife=rundll32 "fydwexwr.dll",,Run
  • [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]skb=rundll32 "qlfyuvpx.dll",,Run
  • [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]skb=rundll32 "bfsovtah.dll",,Run
  • [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]skb=rundll32 "rgbyojqh.dll",,Run
  • [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]skb=rundll32 "ictiumav.dll",,Run
  • [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]skb=rundll32 "oyejcjrw.dll",,Run
  • [HKEY_LOCAL_MACHINE\software\eachnet]install_dir=[%PROGRAM_FILES%]\eachnet
  • [HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\run]office sturtup=osa9.exe
  • [HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\run]syshost=[%SYSTEM%]\syshost.exe
  • [HKEY_CURRENT_USER\software\vb and vba program settings\imadvertiser\aol] daystoclear=0
  • [HKEY_CURRENT_USER\software\vb and vba program settings\imadvertiser\aol] daystoclear=1
  • [HKEY_CURRENT_USER\software\vb and vba program settings\imadvertiser\aol] daystoclear=2
  • [HKEY_CURRENT_USER\software\vb and vba program settings\imadvertiser\aol] daystoclear=5
  • [HKEY_CURRENT_USER\software\vb and vba program settings\imadvertiser\aol] daystoclear=6
  • [HKEY_CURRENT_USER\software\vb and vba program settings\imadvertiser\aol] lastdate=01/06/2006
  • [HKEY_CURRENT_USER\software\vb and vba program settings\imadvertiser\aol] lastdate=01/30/2006
  • [HKEY_CURRENT_USER\software\vb and vba program settings\imadvertiser\aol] lastdate=02/02/2006
  • [HKEY_CURRENT_USER\software\vb and vba program settings\imadvertiser\aol] lastdate=02/10/2006
  • [HKEY_CURRENT_USER\software\vb and vba program settings\imadvertiser\aol] lastdate=02/17/2007
  • [HKEY_CURRENT_USER\software\vb and vba program settings\imadvertiser\aol] lastdate=04/29/2007
  • [HKEY_CURRENT_USER\software\vb and vba program settings\imadvertiser\aol] lastdate=05/05/2549
  • [HKEY_CURRENT_USER\software\vb and vba program settings\imadvertiser\aol] lastdate=10/12/2005
  • [HKEY_CURRENT_USER\software\vb and vba program settings\imadvertiser\msn] daystoclear=0
  • [HKEY_CURRENT_USER\software\vb and vba program settings\imadvertiser\msn] daystoclear=1
  • [HKEY_CURRENT_USER\software\vb and vba program settings\imadvertiser\msn] daystoclear=2
  • [HKEY_CURRENT_USER\software\vb and vba program settings\imadvertiser\msn] daystoclear=5
  • [HKEY_CURRENT_USER\software\vb and vba program settings\imadvertiser\msn] daystoclear=6
  • [HKEY_CURRENT_USER\software\vb and vba program settings\imadvertiser\msn] lastdate=01/06/2006
  • [HKEY_CURRENT_USER\software\vb and vba program settings\imadvertiser\msn] lastdate=01/30/2006
  • [HKEY_CURRENT_USER\software\vb and vba program settings\imadvertiser\msn] lastdate=02/02/2006
  • [HKEY_CURRENT_USER\software\vb and vba program settings\imadvertiser\msn] lastdate=02/10/2006
  • [HKEY_CURRENT_USER\software\vb and vba program settings\imadvertiser\msn] lastdate=02/17/2007
  • [HKEY_CURRENT_USER\software\vb and vba program settings\imadvertiser\msn] lastdate=04/29/2007
  • [HKEY_CURRENT_USER\software\vb and vba program settings\imadvertiser\msn] lastdate=05/05/2549
  • [HKEY_CURRENT_USER\software\vb and vba program settings\imadvertiser\msn] lastdate=10/12/2005
  • [HKEY_CURRENT_USER\software\vb and vba program settings\imadvertiser\yahoo] daystoclear=0
  • [HKEY_CURRENT_USER\software\vb and vba program settings\imadvertiser\yahoo] daystoclear=1
  • [HKEY_CURRENT_USER\software\vb and vba program settings\imadvertiser\yahoo] daystoclear=2
  • [HKEY_CURRENT_USER\software\vb and vba program settings\imadvertiser\yahoo] daystoclear=5
  • [HKEY_CURRENT_USER\software\vb and vba program settings\imadvertiser\yahoo] daystoclear=6
  • [HKEY_CURRENT_USER\software\vb and vba program settings\imadvertiser\yahoo] lastdate=01/06/2006
  • [HKEY_CURRENT_USER\software\vb and vba program settings\imadvertiser\yahoo] lastdate=01/30/2006
  • [HKEY_CURRENT_USER\software\vb and vba program settings\imadvertiser\yahoo] lastdate=02/02/2006
  • [HKEY_CURRENT_USER\software\vb and vba program settings\imadvertiser\yahoo] lastdate=02/10/2006
  • [HKEY_CURRENT_USER\software\vb and vba program settings\imadvertiser\yahoo] lastdate=02/17/2007
  • [HKEY_CURRENT_USER\software\vb and vba program settings\imadvertiser\yahoo] lastdate=04/29/2007
  • [HKEY_CURRENT_USER\software\vb and vba program settings\imadvertiser\yahoo] lastdate=05/05/2549
  • [HKEY_CURRENT_USER\software\vb and vba program settings\imadvertiser\yahoo] lastdate=10/12/2005
  • [HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\run] actx1=[%WINDOWS%]\v1201.exe
  • [HKEY_CURRENT_USER\software\microsoft\windows\currentversion\run] adobemgr=(EMPTY)
  • [HKEY_CURRENT_USER\software\microsoft\windows\currentversion\run] sninstall=(EMPTY)
  • [HKEY_CURRENT_USER\software\microsoft\windows\currentversion\run] windows installer=(EMPTY)
  • [HKEY_CURRENT_USER\software\vb and vba program settings\imadvertiser\aol] daystoclear=(EMPTY)
  • [HKEY_CURRENT_USER\software\vb and vba program settings\imadvertiser\aol] lastdate=(EMPTY)
  • [HKEY_CURRENT_USER\software\vb and vba program settings\imadvertiser\msn] daystoclear=(EMPTY)
  • [HKEY_CURRENT_USER\software\vb and vba program settings\imadvertiser\msn] lastdate=(EMPTY)
  • [HKEY_CURRENT_USER\software\vb and vba program settings\imadvertiser\yahoo] daystoclear=(EMPTY)
  • [HKEY_CURRENT_USER\software\vb and vba program settings\imadvertiser\yahoo] lastdate=(EMPTY)
  • [HKEY_LOCAL_MACHINE\software\eachnet] install_dir=(EMPTY)
  • [HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\explorer\shellexecutehooks] {5eed7056-b89d-4de8-a060-d285ea746799}=(EMPTY)
  • [HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\run] actx1=(EMPTY)
  • [HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\run] adtech2006=(EMPTY)
  • [HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\run]mmkyybxa=[%WINDOWS%]\mmkyybxa.exe
  • [HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\run]mylqmyla=[%WINDOWS%]\mylqmyla.exe
  • [HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\run] office sturtup=(EMPTY)
  • [HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\run] rtf32.exe=(EMPTY)
  • [HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\run] stopphish=(EMPTY)
  • [HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\run] syshost=(EMPTY)