Exterminate It! Antimalware

malpedia

Known threats:700,086 Last Update:March 16, 12:51

Testimonials

Hello, I wanted to say thanks for the time you guys spent on getting that Vundo trojan off my computer.

Thanks again, I am highly recommending your software to friends and partners because of the extra effort I know you went to.

Michael M.

FakeAlert- Registry Values List

This is a complete list of FakeAlert registry values collected by Exterminate It!. If you find any of these registry values on your PC, your computer is very likely to be infected with the FakeAlert - trojan,downloader,hoax.

IMPORTANT: Because the registry is a core component of your Windows system, it is strongly recommended that you back up the registry before you begin deleting keys and values. For information about backing up the Windows registry, refer to the Registry Editor online help.
  • [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]LuvvS2obFpmGaJ=[%APPDATA%]\dwme.exe
  • [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]NjjUCelIBrPNx1v=[%APPDATA%]\dwme.exe
  • [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]TDD2onF4pm5sJdK=[%APPDATA%]\dwme.exe
  • [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]YcSS1ivDonF4m5W=[%APPDATA%]\dwme.exe
  • [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]VxP00ucSibDon4m=[%APPDATA%]\dwme.exe
  • [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]IVrllNNxP0uS=[%APPDATA%]\dwme.exe
  • [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]NkkIIVrzNtx=[%APPDATA%]\dwme.exe
  • [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]OONNyxA0uS2iFpG=[%APPDATA%]\dwme.exe
  • [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]CzPPNyxA1vS2b3m=[%APPDATA%]\dwme.exe
  • [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]LBBtzPNyc1uv2b4=[%APPDATA%]\dwme.exe
  • [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]o4ammH5sJ7dL8Rq=[%APPDATA%]\dwme.exe
  • [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]HS1iiDD3nG4m6sJ=[%APPDATA%]\dwme.exe
  • [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]DucSSiib3pn4QHs=[%APPDATA%]\dwme.exe
  • [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]mWK77fRL9gXqY=[%APPDATA%]\dwme.exe
  • [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]eWWK8fRL9hXqUe=[%APPDATA%]\dwme.exe
  • [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]GAuuvD2ob4pm5Q6=[%APPDATA%]\dwme.exe
  • [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]ljUUVelIBzPN=[%APPDATA%]\dwme.exe
  • [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]VppmH5sQJ7EK=[%APPDATA%]\dwme.exe
  • [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]QaamH55WJ7ELgZ=[%APPDATA%]\dwme.exe
  • [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]OHssWJ7fE8gTqYw=[%APPDATA%]\dwme.exe
  • [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]bK77fEL9gZqYCkV=[%APPDATA%]\dwme.exe
  • [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]c22ibFFpnGaQ=[%APPDATA%]\dwme.exe
  • [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]AaQQH6dW7fRLgXj=[%APPDATA%]\dwme.exe
  • [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]kdEEK8fRZhT=[%APPDATA%]\dwme.exe
  • [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]P11iiDDonFpm5Q7=[%APPDATA%]\dwme.exe
  • [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]APP0ycS1iv3oFaH=[%APPDATA%]\dwme.exe
  • [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]fP00ucS1iD3oGaH=[%APPDATA%]\dwme.exe
  • [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]QxA00ccSibDpn4Q=[%APPDATA%]\dwme.exe
  • [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]R6ssWK7fL9gTqY=[%APPDATA%]\dwme.exe
  • [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]IffRL99TXqYCkVz=[%APPDATA%]\dwme.exe
  • [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]J6ddWK7fL9gT=[%APPDATA%]\dwme.exe
  • [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]sRRL9hTXqjCeIrO=[%APPDATA%]\dwme.exe
  • [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]a1uvv22bF3pGaQ6=[%APPDATA%]\dwme.exe
  • [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]wgRRZ9hYXjUVlBz=[%APPDATA%]\dwme.exe
  • [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]oUUVeelOBtzPyc=[%APPDATA%]\dwme.exe
  • [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]P111ivvD3on4am5=[%APPDATA%]\dwme.exe
  • [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]ZhhYYCwwk=[%APPDATA%]\dwme.exe
  • [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]U6ssWWJ7fEL8TZ=[%APPDATA%]\dwme.exe
  • [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]AmmHH6ssW=[%APPDATA%]\dwme.exe
  • [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]bOONNtxAA0cS2b=[%APPDATA%]\dwme.exe
  • [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]laQQH6dWKfRLgXj=[%APPDATA%]\dwme.exe
  • [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]sQJJ6dWK8RL9TqU=[%APPDATA%]\dwme.exe
  • [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]dpmmG5sQJdEKfZh=[%APPDATA%]\dwme.exe
  • [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]BNNycA1uvDob4m5=[%APPDATA%]\dwme.exe
  • [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]TnFF4pmH5QJ7=[%APPDATA%]\dwme.exe
  • [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]JonnF4pm5sQJ=[%APPDATA%]\dwme.exe
  • [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]OLLL8gRRZhYXkVl=[%APPDATA%]\dwme.exe
  • [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]U3oonG4aH6sW7E=[%APPDATA%]\dwme.exe
  • [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]bEL99TTZjYCkVrO=[%APPDATA%]\dwme.exe
  • [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]hrrzONNxA0cSiDp=[%APPDATA%]\dwme.exe
  • [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]GTXqqUUCkIBzN=[%APPDATA%]\dwme.exe
  • [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]ippmG5aQJdWKfLh=[%APPDATA%]\dwme.exe
  • [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]noobF44mG5QJdKf=[%APPDATA%]\dwme.exe
  • [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]rwjjUVelBtzPyAu=[%APPDATA%]\dwme.exe
  • [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]EEL88RRqhYXkV=[%APPDATA%]\dwme.exe
  • [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]WllOOttP0uS1=[%APPDATA%]\dwme.exe
  • [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]ducSSiiD3pn4Q6s=[%APPDATA%]\dwme.exe
  • [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]GuccS2ibDpnGaHs=[%APPDATA%]\dwme.exe
  • [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]LFF4pGG5sQ6dKfZ=[%APPDATA%]\dwme.exe
  • [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]p7dEE88RZ=[%APPDATA%]\dwme.exe
  • [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]BF44amH5sJ7dLgZ=[%APPDATA%]\dwme.exe
  • [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]BJJJ7ffL8g=[%APPDATA%]\dwme.exe
  • [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]pOONtxP0uc1i=[%APPDATA%]\dwme.exe
  • [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]FKK8fRL9hTXjUeI=[%APPDATA%]\dwme.exe
  • [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]fpmGGssJ6dE8R9h=[%APPDATA%]\dwme.exe
  • [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]UwwjUVelIBzPyA=[%APPDATA%]\dwme.exe
  • [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]ionnF4amHsWJdLg=[%APPDATA%]\dwme.exe
  • [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]cOONtxx0u=[%APPDATA%]\dwme.exe
  • [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]hTZqqYYwkIVlNtP=[%APPDATA%]\dwme.exe
  • [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]g2iibD3pn4aQ6W7=[%APPDATA%]\dwme.exe
  • [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]oqqjYCCkIVzOtAu=[%APPDATA%]\dwme.exe
  • [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]HhTXXjjCekIrOyx=[%APPDATA%]\dwme.exe
  • [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]NQJJ6dEK8fR=[%APPDATA%]\dwme.exe
  • [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]f11ivD2onFpm5Q7=[%APPDATA%]\dwme.exe
  • [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]fvD33nn4am=[%APPDATA%]\dwme.exe
  • [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]p9gTTqqYCwkV=[%APPDATA%]\dwme.exe
  • [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]EzOONyyxAu=[%APPDATA%]\dwme.exe
  • [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]SllIBtzPNyA1v=[%APPDATA%]\dwme.exe
  • [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]glOOBzz0yc1iDo=[%APPDATA%]\dwme.exe
  • [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]YkUUVelOtzP0c=[%APPDATA%]\dwme.exe
  • [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]uamHsWJJ7fL8TqY=[%APPDATA%]\dwme.exe
  • [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]K22iibD3pG4aH=[%APPDATA%]\dwme.exe
  • [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]Y3pnn55aH6dKfR9=[%APPDATA%]\dwme.exe
  • [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]tG55aQJ6WK8fLhX=[%APPDATA%]\dwme.exe
  • [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]sTXXwjUCeIBrPy=[%APPDATA%]\dwme.exe
  • [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]ryyxA1uvS=[%APPDATA%]\dwme.exe
  • [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]VwwjUVVeIBtPyc1=[%APPDATA%]\dwme.exe
  • [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]FAA1ivv2on4p=[%APPDATA%]\dwme.exe
  • [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]bL88gRZqhXw=[%APPDATA%]\dwme.exe
  • [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]uucSSiib3pn4QHs=[%APPDATA%]\dwme.exe
  • [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]VH6ssWK7EL9g=[%APPDATA%]\dwme.exe
  • [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]VL99gTXqYCekVzN=[%APPDATA%]\dwme.exe
  • [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]bbFF3ppnG5QHdKf=[%APPDATA%]\dwme.exe
  • [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]kzzPNyyA1uS2b3=[%APPDATA%]\dwme.exe
  • [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]ZzPPNycA1vD2b4m=[%APPDATA%]\dwme.exe
  • [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]AgRRZ9hYXjUVlBz=[%APPDATA%]\dwme.exe
  • [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]cJ77EK8gRZhYwUe=[%APPDATA%]\dwme.exe
  • [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]cZZqhYXwkUelBz0=[%APPDATA%]\dwme.exe
  • [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]lggTZqhYCwUVlBx=[%APPDATA%]\dwme.exe
  • [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]LpnGGaaH6dW7R9g=[%APPDATA%]\dwme.exe
  • [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]XIBBrzPNxA1uSoF=[%APPDATA%]\dwme.exe
  • [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]CtzzP0yc1ivDoF=[%APPDATA%]\dwme.exe
  • [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]IqqhYCwkUVlO=[%APPDATA%]\dwme.exe
  • [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]FD3ppGG4QH6W7fL=[%APPDATA%]\dwme.exe
  • [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]SA1uuSS2bF3m5aJ=[%APPDATA%]\dwme.exe
  • [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]UddEK8gRZhYXjVl=[%APPDATA%]\dwme.exe
  • [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]uF44amH5sJ7d=[%APPDATA%]\dwme.exe
  • [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]znnFFaaH5sJ7E=[%APPDATA%]\dwme.exe
  • [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]wllONtxP0cS1b3n=[%APPDATA%]\dwme.exe
  • [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]t44aQH6sWKfE9Tq=[%APPDATA%]\dwme.exe
  • [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]wnG55QQHdWKfL9T=[%APPDATA%]\dwme.exe
  • [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]jTTXXjjCelIrPyA=[%APPDATA%]\dwme.exe
  • [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]VtzPPyyA1=[%APPDATA%]\dwme.exe
  • [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]NEEKKgR9hYXjUe=[%APPDATA%]\dwme.exe
  • [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]SSS1ivD3on4aHsJ=[%APPDATA%]\dwme.exe
  • [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]BccS1bbD3nG4m6W=[%APPDATA%]\dwme.exe
  • [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]viibD3pnG4QHsKf=[%APPDATA%]\dwme.exe
  • [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]dNyyxA0uS2ib3n5=[%APPDATA%]\dwme.exe
  • [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]FpnGGaaQ6dW7=[%APPDATA%]\dwme.exe
  • [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]HyyxA0uvS2iF3n5=[%APPDATA%]\dwme.exe
  • [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]x8fRR99TXqjCkBr=[%APPDATA%]\dwme.exe
  • [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]kKK88RR9hTXjClI=[%APPDATA%]\dwme.exe
  • [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]k8ggRZqhYwkUeOt=[%APPDATA%]\dwme.exe
  • [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]chhYYCwkUVlO=[%APPDATA%]\dwme.exe
  • [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]mxP00ucSib=[%APPDATA%]\dwme.exe
  • [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]I00ucS2ibDpn=[%APPDATA%]\dwme.exe
  • [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]fnnG5aQH6dK7R9T=[%APPDATA%]\dwme.exe
  • [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]eQJ66WWKfRLhXqU=[%APPDATA%]\dwme.exe
  • [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]m9YYXwjUUVlItPy=[%APPDATA%]\dwme.exe
  • [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]kP0yyAAivD2n4m=[%APPDATA%]\dwme.exe
  • [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]wvD22nn4pmHsJdK=[%APPDATA%]\dwme.exe
  • [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]ixxP0ycc1iD3n4m=[%APPDATA%]\dwme.exe
  • [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]HWJ77EE8gZqhCk=[%APPDATA%]\dwme.exe
  • [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]ouuSS2iDpn4aHsK=[%APPDATA%]\dwme.exe
  • [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]KKK88f9hTXqUeIr=[%APPDATA%]\dwme.exe
  • [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]uCeelIBrzNyx1v2=[%APPDATA%]\dwme.exe
  • [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]dZ9hhXXjUVeItPN=[%APPDATA%]\dwme.exe
  • [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]pgRRZqhYXkUVlBz=[%APPDATA%]\dwme.exe
  • [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]BL99gTZjYCkIrOt=[%APPDATA%]\dwme.exe
  • [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]ugTTXqYCekIrONx=[%APPDATA%]\dwme.exe
  • [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]ZAA0uvS2ib3pGaH=[%APPDATA%]\dwme.exe
  • [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]WekkIVrzO=[%APPDATA%]\dwme.exe
  • [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]nUCCekIBr=[%APPDATA%]\dwme.exe
  • [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]YNycc1uvDobFpGs=[%APPDATA%]\dwme.exe
  • [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]jDD2onF4pm=[%APPDATA%]\dwme.exe
  • [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]aOBBtxP0cS1vDoF=[%APPDATA%]\dwme.exe
  • [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]HibDDooG4aH=[%APPDATA%]\dwme.exe
  • [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]dqqjYCwkIVlOtPu=[%APPDATA%]\dwme.exe
  • [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]GqjYYeeIVrzNx0u=[%APPDATA%]\dwme.exe
  • [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]G1uuvS2ob3pm5Q6=[%APPDATA%]\dwme.exe
  • [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]Q9hhYXwjVelItPy=[%APPDATA%]\dwme.exe
  • [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]DUVVrlOBtP0ySi=[%APPDATA%]\dwme.exe
  • [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]tYYCCwkUVlOBx=[%APPDATA%]\dwme.exe
  • [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]spnnG4aQ6sWKfLg=[%APPDATA%]\dwme.exe
  • [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]uXqjjCCeIBrOyx0=[%APPDATA%]\dwme.exe
  • [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]PQQJ6dEK8RZ=[%APPDATA%]\dwme.exe
  • [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]RaamHssJ8gRqYX=[%APPDATA%]\dwme.exe
  • [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]zUVrrOOtxP0c1iD=[%APPDATA%]\dwme.exe
  • [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]oONttPPucS1b3nG=[%APPDATA%]\dwme.exe
  • [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]a7ffRL9gXq=[%APPDATA%]\dwme.exe
  • [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]XXXqjUCekIrzNx0=[%APPDATA%]\dwme.exe
  • [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]zUCCelIBrPNyAuS=[%APPDATA%]\dwme.exe
  • [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]FtzzPNyc1=[%APPDATA%]\dwme.exe
  • [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]CPPNNycA1vD=[%APPDATA%]\dwme.exe
  • [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]ZZqhhXXkUVeOtPy=[%APPDATA%]\dwme.exe
  • [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]ConGGaaH6sW7E8g=[%APPDATA%]\dwme.exe
  • [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]vA0uucS2bD3nGaH=[%APPDATA%]\dwme.exe
  • [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]PBBrrPPyxAuv2b3=[%APPDATA%]\dwme.exe
  • [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]YDD2obF4pG5sJ=[%APPDATA%]\dwme.exe
  • [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]LeelIBtzPNcAuDo=[%APPDATA%]\dwme.exe
  • [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]sJJJ7ddEL8g=[%APPDATA%]\dwme.exe
  • [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]JrllONNtxP0u=[%APPDATA%]\dwme.exe
  • [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]PCCCekIBrzOyx0=[%APPDATA%]\dwme.exe
  • [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]g55ssQJ77EK8gZh=[%APPDATA%]\dwme.exe
  • [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]J55ssJJdE=[%APPDATA%]\dwme.exe
  • [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]cS1iiDDonF4m5WJ=[%APPDATA%]\dwme.exe
  • [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]pQQH6sWK7fL9TqY=[%APPDATA%]\dwme.exe
  • [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]dTTXqjUCekBr=[%APPDATA%]\dwme.exe
  • [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]q11uvS2ob=[%APPDATA%]\dwme.exe
  • [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]VcAA1uvDo=[%APPDATA%]\dwme.exe
  • [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]elIBBzzNycAuD2b=[%APPDATA%]\dwme.exe
  • [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]OUVVelOBzP0yAiD=[%APPDATA%]\dwme.exe
  • [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]xqhYYCwkVrlBtPy=[%APPDATA%]\dwme.exe
  • [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]tA00ucS2iD3pGaH=[%APPDATA%]\dwme.exe
  • [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]b55aQJJdWKfR9T=[%APPDATA%]\dwme.exe
  • [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]HPPNyxA1uS2oFpG=[%APPDATA%]\dwme.exe
  • [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]INycc11uD2oF4m5=[%APPDATA%]\dwme.exe
  • [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]gnnF4ppH5sQ7E8=[%APPDATA%]\dwme.exe
  • [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]QoonF4amH5sW7E=[%APPDATA%]\dwme.exe
  • [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]OWK7fEL9gZ=[%APPDATA%]\dwme.exe
  • [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]ePNNyxA1vS2oFpG=[%APPDATA%]\dwme.exe
  • [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]moobF44mG5QJd=[%APPDATA%]\dwme.exe
  • [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]anF4amm5sWJdLgR=[%APPDATA%]\dwme.exe
  • [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]GIIVrzONtx0uS=[%APPDATA%]\dwme.exe
  • [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]ORRL9TXqUCekBzN=[%APPDATA%]\dwme.exe
  • [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]sRZZ9hTXwUCeIrP=[%APPDATA%]\dwme.exe
  • [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]BD22obF4pG5sJ=[%APPDATA%]\dwme.exe
  • [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]WlOOBtzzP0cAiD2=[%APPDATA%]\dwme.exe
  • [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]FeelIBrNcAuv8234A=[%SYSTEM%]\AV Security 2012v121.exe
  • [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]U2iibFF3pnGaQ6d=[%APPDATA%]\dwme.exe
  • [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]SBBttxP0uc8234A=[%SYSTEM%]\AV Security 2012v121.exe
  • [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]q999hTTqjClB=[%APPDATA%]\dwme.exe
  • [HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]JP595IR86O=[%PROFILE_TEMP%]\Cnr.exe
  • [HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]System32=[%APPDATA%]\Svchost.exe
  • [HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]8JE5UHC6FZ=[%PROFILE_TEMP%]\Wqd.exe
  • [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]UzPP0ycA1vD8234A=[%SYSTEM%]\d33pnG4aQHsW7E9.exe
  • [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]bxP0ucS1iDoGaH8234A=[%APPDATA%]\YA0ucS2ib3n4Q6W\AV Security 2012v121.exe
  • [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]vaQH6dWK7R9Tq8234A=[%SYSTEM%]\AV Security 2012v121.exe
  • [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]cccA1ivD2oF4m5Q8234A=[%APPDATA%]\dHH55WW7dE8g\AV Security 2012v121.exe
  • [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]VonGG4am68234A=[%SYSTEM%]\AV Security 2012v121.exe
  • [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]POBtxP0yc1v3n4m=[%APPDATA%]\dwme.exe
  • [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]bbD3pnG4aHsKfLg=[%APPDATA%]\dwme.exe
  • [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]aUVeeIItzPNc1uD=[%APPDATA%]\dwme.exe
  • [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]gSS1ivD3on4m5W7=[%APPDATA%]\dwme.exe
  • [HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]8DDYX0ZBPZ=[%WINDOWS%]\TEMP\Uml.exe
  • [HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]m2iibDDpnGaQ6W78234A=[%APPDATA%]\rTTXqjYCe\AV Security 2012v121.exe
  • [HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]YNO00BFRKM=[%WINDOWS%]\TEMP\c.exe
  • [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]qYCwkIVrlNx0c2b8234A=[%SYSTEM%]\IvD2onF4pHsJdLg.exe
  • [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]v9gTXqjYCk8234A=[%APPDATA%]\ThTXqjUCeIrOyAu\AV Security 2012v121.exe
  • [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]A2obF4pmGsJdKfZ8234A=[%SYSTEM%]\AV Security 2012v121.exe
  • [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]qH5sQJ7dE8R9YwU8234A=[%SYSTEM%]\AV Security 2012v121.exe
  • [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]WD3onG4am6W7E8T=[%APPDATA%]\dwme.exe
  • [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]cucS1ibD3n4m6W7=[%APPDATA%]\dwme.exe
  • [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]BUCelIBrzNx1v2b=[%APPDATA%]\dwme.exe
  • [HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]2680972979=[%LOCAL_APPDATA%]\wok.exe
  • [HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]8DDYX0ZBPZ=[%PROFILE_TEMP%]\Rmc.exe
  • [HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]JDK5SWFMZY=[%PROFILE_TEMP%]\Bnh.exe
  • [HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]JP595IR86O=[%PROFILE_TEMP%]\Pjc.exe
  • [HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]8DDYX0ZBPZ=[%PROFILE_TEMP%]\Htd.exe
  • [HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]R8388QA8U8=[%WINDOWS%]\TEMP\Cbg.exe
  • [HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]4ECYTQ9SIC=[%WINDOWS%]\TEMP\Cbh.exe
  • [HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]8DDYX0ZBPZ=[%WINDOWS%]\TEMP\Cbg.exe
  • [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]cvDD22onF4pm8234A=[%SYSTEM%]\AV Security 2012v121.exe
  • [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Internet Explorer\Toolbar]{16a0662e-ac21-4ad9-89e8-7495ac5ace93}=(EMPTY)
  • [HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]R8388QA8U8=[%PROFILE_TEMP%]\Pgf.exe
  • [HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]icuvibsv=[%PROFILE_TEMP%]\cpllwylto\evcpbbixsik.exe
  • [HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]OUU6KC5WPX=[%PROFILE_TEMP%]\Ifz.exe
  • [HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]YVIBBBHA8C=[%WINDOWS%]\TEMP\Ddl.exe
  • [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]yVVrrlONtxA0cS=[%APPDATA%]\dwme.exe
  • [HKEY_CURRENT_USER\software\microsoft\windows\currentversion\explorer]idstrf=1-1CA7B9B9E5E8F68
  • [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]S4pm5sWJ7E8234A=[%SYSTEM%]\OqjUCeBPNc.exe
  • [HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]wwjUVelIBzNc1v28234A=[%APPDATA%]\SgRZqhYXwUeOtPy\AV Security 2012v121.exe
  • [HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]HL9gTZqjYwIrOt8234A=[%SYSTEM%]\AV Security 2012v121.exe
  • [HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]JP595IR86O=[%PROFILE_TEMP%]\Uqj.exe
  • [HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]CE8SIIFGSU=[%PROFILE_TEMP%]\Uql.exe
  • [HKEY_CURRENT_USER\SOFTWARE\MICROSOFT\WINDOWS\CURRENTVERSION\RUN]Security Protection=[%APPDATA%]\defender.exe /min
  • [HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]oiecohtc=[%LOCAL_APPDATA%]\ffyonqbht\tsjridhshdw.exe
  • [HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]Security Manager=[%APPDATA%]\AntiVirus System 2011\securitymanager.exe
  • [HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]ryyycAA1iv2nFas8234A=[%APPDATA%]\VDD33pnG5aQHdW8\System Security 2012v121.exe
  • [HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]hgggRZZqhYCkUrl8234A=[%SYSTEM%]\System Security 2012v121.exe
  • [HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]TlOOOBtxP0yc1iD8234A="[%APPDATA%]\LHHH6ssWJ7fL8TZ\System Security 2012v121.exe"
  • [HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]aSSS1iibD38234A=[%SYSTEM%]\System Security 2012v121.exe
  • [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]lS22oGhYXwkV8234A=[%SYSTEM%]\System Security 2012v121.exe
  • [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]bxAA11uvD2oF4m58234A=[%SYSTEM%]\System Security 2012v121.exe
  • [HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]vjnbelkw=[%PROFILE_TEMP%]\gunrbwpro\nhxksgtyhsn.exe
  • [HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]NtWqIVLZEWZU=[%PROFILE_TEMP%]\Bx2.exe
  • [HKEY_CURRENT_USER\software\microsoft\windows\currentversion\explorer]idstrf=1-1CC24835DB6E5DC
  • [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]OkkkIVzONx0vSib8234A=[%SYSTEM%]\AV Security 2012v121.exe
  • [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]YK77fRRLhT8234A=[%SYSTEM%]\AV Security 2012v121.exe
  • [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]c66dEEK8RZ9hXwU8234A=[%SYSTEM%]\AV Security 2012v121.exe
  • [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]j2iib55aQHd8fL98234A=[%SYSTEM%]\AV Security 2012v121.exe
  • [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]RellBrrzNyc1uDo8234A=[%SYSTEM%]\AV Security 2012v121.exe
  • [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]rEEELgTTZqYe8234A=[%SYSTEM%]\AV Security 2012v121.exe
  • [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]dZ99hYYXeOtz8234A=[%SYSTEM%]\AV Security 2012v121.exe
  • [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]J77ddEL88TZqhCk8234A=[%SYSTEM%]\AV Security 2012v121.exe
  • [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]wOOONtxP0ucSi8234A=[%SYSTEM%]\AV Security 2012v121.exe
  • [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]EXXwwkUVrl8234A=[%SYSTEM%]\AV Security 2012v121.exe
  • [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]VYYXXwkUVelO8234A=[%SYSTEM%]\AV Security 2012v121.exe
  • [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]uvDD3onF4amH8234A=[%SYSTEM%]\AV Security 2012v121.exe
  • [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]XbbbF4ppmH8234A=[%SYSTEM%]\AV Security 2012v121.exe
  • [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]mRRZqqhwkUVlOtP8234A=[%SYSTEM%]\AV Security 2012v121.exe
  • [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]tEEL8gRZqYwkU8234A=[%SYSTEM%]\AV Security 2012v121.exe
  • [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]wK7ffRL9hT8234A=[%SYSTEM%]\AV Security 2012v121.exe
  • [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]BllONtxA0u8234A=[%SYSTEM%]\AV Security 2012v121.exe
  • [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]rEELL8gRZqhYwkV8234A=[%SYSTEM%]\AV Security 2012v121.exe
  • [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]wSSS2iiF3pmGaQ68234A=[%SYSTEM%]\AV Security 2012v121.exe
  • [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]LUUUCelIBrzPyA18234A=[%SYSTEM%]\AV Security 2012v121.exe
  • [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]kZZZ9hTTXwUVlI8234A=[%SYSTEM%]\AV Security 2012v121.exe
  • [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]PbbDD3onG4aHsW8234A=[%SYSTEM%]\AV Security 2012v121.exe
  • [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]K2oonamH5s8234A=[%SYSTEM%]\AV Security 2012v121.exe
  • [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]tnnnG4amHsWKE8234A=[%SYSTEM%]\AV Security 2012v121.exe
  • [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]bhhYCwkkIrlNt0u8234A=[%SYSTEM%]\AV Security 2012v121.exe
  • [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]RdddEK88RZ98234A=[%SYSTEM%]\AV Security 2012v121.exe
  • [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]dFF44amH5sWJ8234A=[%SYSTEM%]\AV Security 2012v121.exe
  • [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]iibbDD3nG4aQ6W78234A=[%SYSTEM%]\AV Security 2012v121.exe
  • [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]iTTTZqjYCe8234A=[%SYSTEM%]\AV Security 2012v121.exe
  • [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]LTTXXwjUCelItzN8234A=[%SYSTEM%]\AV Security 2012v121.exe
  • [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]WCwwkIVrrONx8234A=[%SYSTEM%]\AV Security 2012v121.exe
  • [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]BUUCekkIBrPNyAu8234A=[%SYSTEM%]\AV Security 2012v121.exe
  • [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]dvvSS2obF4pGsJ78234A=[%SYSTEM%]\AV Security 2012v121.exe
  • [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]VJJ7fEL99TZjYek8234A=[%SYSTEM%]\AV Security 2012v121.exe
  • [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]iXwwjUCelIBtP8234A=[%SYSTEM%]\AV Security 2012v121.exe
  • [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]s444aQHH6dK7fLT8234A=[%SYSTEM%]\AV Security 2012v121.exe
  • [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]p666dEK88RZ9YXU8234A=[%SYSTEM%]\AV Security 2012v121.exe
  • [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]i88ggTZqjY8234A=[%SYSTEM%]\AV Security 2012v121.exe
  • [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]OYYYCwkIrOtxAcS8234A=[%SYSTEM%]\AV Security 2012v121.exe
  • [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]oKK88fRL9hTXjUe8234A=[%SYSTEM%]\AV Security 2012v121.exe
  • [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]DcS2F3pnG5QJ6W88234A=[%SYSTEM%]\AV Security 2012v121.exe
  • [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]jCCCelIIBt8234A=[%SYSTEM%]\AV Security 2012v121.exe
  • [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]t3ppnG5aQJ6WKfZ8234A=[%SYSTEM%]\AV Security 2012v121.exe
  • [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]V44aamH5sJ7fE8T8234A=[%SYSTEM%]\AV Security 2012v121.exe
  • [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]Iiibb3ppG5J68234A=[%SYSTEM%]\AV Security 2012v121.exe
  • [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]a22onnF4am8234A=[%SYSTEM%]\AV Security 2012v121.exe
  • [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]jAAA0uccS2bFpn58234A=[%SYSTEM%]\AV Security 2012v121.exe
  • [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]TivvD33onF4m8234A=[%SYSTEM%]\AV Security 2012v121.exe
  • [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]KkIVrNtxA0uv2iF8234A=[%SYSTEM%]\AV Security 2012v121.exe
  • [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]xeellIBtP0yc1v8234A=[%SYSTEM%]\AV Security 2012v121.exe
  • [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]U9hhTwwjUCl8234A=[%SYSTEM%]\AV Security 2012v121.exe
  • [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]mqqhhYCwkI8234A=[%SYSTEM%]\AV Security 2012v121.exe
  • [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]cbbF33pn5a6K8RZ8234A=[%SYSTEM%]\AV Security 2012v121.exe
  • [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]i0yySiibD38234A=[%SYSTEM%]\AV Security 2012v121.exe
  • [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]N22ibD3ppG5aH68234A=[%SYSTEM%]\AV Security 2012v121.exe
  • [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]JWWWK7fEL9gTqYe8234A=[%SYSTEM%]\AV Security 2012v121.exe
  • [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]PP00yycA1iv3oFa8234A=[%SYSTEM%]\AV Security 2012v121.exe
  • [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]XQQ6sWK7R9gXUkB8234A=[%SYSTEM%]\AV Security 2012v121.exe
  • [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]n8RZZ9hYXwjUeOt8234A=[%SYSTEM%]\AV Security 2012v121.exe
  • [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]aQQHH6dWK7fRXjC8234A=[%SYSTEM%]\AV Security 2012v121.exe
  • [HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]zvDn4pH5sQ8234A=[%SYSTEM%]\AV Security 2012v121.exe
  • [HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]NtWqIVLZEWZU=[%PROFILE_TEMP%]\Ltl.exe
  • [HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]CE8SIIFGSU=[%PROFILE_TEMP%]\Ltg.exe
  • [HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]VXEG3ZNNE5=[%PROFILE_TEMP%]\Ltl.exe
  • [HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]M5T8QL3YW3=[%PROFILE_TEMP%]\Ql0.exe
  • [HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]NtWqIVLZEWZU=[%PROFILE_TEMP%]\Yc0.exe
  • [HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]R4B1ZAOPF5=[%PROFILE_TEMP%]\Ycy.exe
  • [HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]M5T8QL3YW3=[%PROFILE_TEMP%]\Bpl.exe
  • [HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]npcopxgt=[%LOCAL_APPDATA%]\gsirfqhgy\sfugheeuqiw.exe
  • [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]E7fEL9gTZjCkVzN8234A=[%SYSTEM%]\AV Security 2012v121.exe
  • [HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]J40NOZ44HU=[%WINDOWS%]\TEMP\Qnk.exe
  • [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]bcatjlui=[%LOCAL_APPDATA%]\qnggqr\rqqfsftav.exe
  • [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]ccysihwx=[%LOCAL_APPDATA%]\turtpu\rrjtsftav.exe
  • [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]ebeqmuux=[%LOCAL_APPDATA%]\swefou\rlqbsftav.exe
  • [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]fbaciwnn=[%LOCAL_APPDATA%]\acsnap\rnmasftav.exe
  • [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]gbibptgg=[%LOCAL_APPDATA%]\spiwyj\rfhcsftav.exe
  • [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]hbxafnst=[%LOCAL_APPDATA%]\fqopxw\roxfsftav.exe
  • [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]jaskykny=[%LOCAL_APPDATA%]\pdpmju\rrmusftav.exe
  • [HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]bcatjlui=[%LOCAL_APPDATA%]\qnggqr\rqqfsftav.exe
  • [HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]ccysihwx=[%LOCAL_APPDATA%]\turtpu\rrjtsftav.exe
  • [HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]ebeqmuux=[%LOCAL_APPDATA%]\swefou\rlqbsftav.exe
  • [HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]fbaciwnn=[%LOCAL_APPDATA%]\acsnap\rnmasftav.exe
  • [HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]gbibptgg=[%LOCAL_APPDATA%]\spiwyj\rfhcsftav.exe
  • [HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]hbxafnst=[%LOCAL_APPDATA%]\fqopxw\roxfsftav.exe
  • [HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]jaskykny=[%LOCAL_APPDATA%]\pdpmju\rrmusftav.exe
  • [HKEY_CURRENT_USER\software\microsoft\windows\currentversion\explorer]idstrf=1-1CC70E1B7F72362
  • [HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]xxuspmvd=[%PROFILE_TEMP%]\injijgfjk\vxrmhkiuerb.exe
  • [HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]66jlkvureno1=[%PROFILE_TEMP%]\m.21897.tmp.exe
  • [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]Jss7E8ZhXkeOPyi8234A=[%SYSTEM%]\dA1iivDD2on4mHs.exe
  • [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]mUUCCeIrzNxA0=[%APPDATA%]\dwme.exe
  • [HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]AZ15NF7UKG=[%PROFILE_TEMP%]\Htq.exe
  • [HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]ICS5R7Y0OS=[%WINDOWS%]\Hlohaa.exe
  • [HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]R8388QA8U8=[%PROFILE_TEMP%]\Htr.exe
  • [HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]lphc3d4j0ep93=[%SYSTEM%]\lphc3d4j0ep93.exe
  • [HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]envyrgax=[%LOCAL_APPDATA%]\oqkono\xknusftav.exe
  • [HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]TNNNyxxA1uvSob38234A=[%APPDATA%]\vNNNyccA1vDb4pG\IsssQ66dEKfZCIr.exe
  • [HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]f77ddEL8gZqhX8234A=[%SYSTEM%]\rSS1ivvDon4aH5W.exe
  • [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]s5sJ778gRZYXjVB8234A=[%SYSTEM%]\ncciv3oonam57Lg.exe
  • [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]lIINNvS2oFpQ6K88234A=[%SYSTEM%]\p22bpGQJE8R9.exe
  • [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]cZZ9hTXwjUIzPy18234A=[%SYSTEM%]\cd9XUBtvo4m5sJE.exe
  • [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]PLgTZqhCkUrOBxv8234A=[%SYSTEM%]\exPP00SS1iDo4m6.exe
  • [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]aD33n66WJE8TCrO8234A=[%SYSTEM%]\bVOx0i4aHsWKkVl.exe
  • [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]jcccSS1ivD8234A=[%SYSTEM%]\chhYYCwkUVrlOtP.exe
  • [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]RH5sQQJdKgZ9YwV8234A=[%SYSTEM%]\gycAiivDoF4.exe
  • [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]a7dEL8gqYX8234A=[%SYSTEM%]\t00yccS1vD3nF.exe
  • [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]YpmH5sQQdE8234A=[%SYSTEM%]\HllOOBtzP0c1vD.exe
  • [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]WXXwUUVelIBtPyA8234A=[%SYSTEM%]\kmHH5sQQJ7EK8R9.exe
  • [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]UggTTXqjYCekVr8234A=[%SYSTEM%]\adWWKK7fRL.exe
  • [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]mNNNtxxP0ucib8234A=[%SYSTEM%]\O777fEEL9TZjYkV.exe
  • [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]dJJ77EK88RZh8234A=[%SYSTEM%]\eccAA1ivD2on4mH.exe
  • [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]UwwjjUCeelBrzN8234A=[%SYSTEM%]\cG55sQQJ6dKfR9h.exe
  • [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]aRRZZ9hTXwjUelB8234A=[%SYSTEM%]\JGG55sQJ6dEK.exe
  • [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]SxxxA00ucS2iD3n8234A=[%SYSTEM%]\JggTTXqjYCekVrO.exe
  • [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]UEEL88gTZqhYwkV8234A=[%SYSTEM%]\BnnnG4amH6sW7.exe
  • [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]r22oobF44pG58234A=[%SYSTEM%]\dcccA11uv.exe
  • [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]WaaaQQHdWKfRLTq8234A=[%SYSTEM%]\wOOOyxA0uvSiF3n.exe
  • [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]hrllOBtP0ycSiv38234A=[%SYSTEM%]\nssWWJ7EL8gZqYw.exe
  • [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]S5ssWJ77dL8234A=[%SYSTEM%]\dxPP00cS1v3on4m.exe
  • [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]sJ66ddEKfRZhTjC8234A=[%SYSTEM%]\jAA1uvvD2ob4pGs.exe
  • [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]OCCeekIBrOyv2b38234A=[%SYSTEM%]\fmmG5aaJ6dWKfLX.exe
  • [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]UEEL9gqYCkI8234A=[%SYSTEM%]\JSSS2ibbD3n46sK.exe
  • [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]YvvvD22onF4mH8234A=[%SYSTEM%]\cwwkkUVelOBtP0c.exe
  • [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]PaaaQHH6dWK7R9g8234A=[%SYSTEM%]\A0002iibF3pn.exe
  • [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]WIVzzNxA0uSp8234A=[%SYSTEM%]\yaaaHH6dWKLTqj.exe
  • [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]QKKK7fEL9gTjVlN8234A=[%SYSTEM%]\C222ibD3pnG4aH.exe
  • [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]G122F4mG5s8234A=[%SYSTEM%]\h555Q7EK8gRhwVl.exe
  • [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]JPNyxAA1uv2o8234A=[%SYSTEM%]\AEEK8ffZ9hTwUIB.exe
  • [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]EgggTXXqjYCeVrt8234A=[%SYSTEM%]\ZaQQH66dWKfR.exe
  • [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]iWWJ7ffEL8gZhCk8234A=[%SYSTEM%]\mrrrlONxPi3n4aH.exe
  • [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]RbDD3pp4HsW8234A=[%SYSTEM%]\rCCCekIVrONA0cS.exe
  • [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]UTXXjUCBrPNAoF8234A=[%SYSTEM%]\i444mmG5sQJd8fZ.exe
  • [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]o22onFF4pmHsJ78234A=[%SYSTEM%]\vhhhYXXwelOzyAi.exe
  • [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]Z22ibF3pnG5Q6WK8234A=[%SYSTEM%]\JzzONyA0u.exe
  • [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]c555sWWJ7L8gZqY8234A=[%SYSTEM%]\riivvD3onF4a.exe
  • [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]SXwwjUCelIBrz8234A=[%SYSTEM%]\YF4ppG5QJ6E8fZ9.exe
  • [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]UppmmG55aQJ8234A=[%SYSTEM%]\ezzzPNNyxA1vSob.exe
  • [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]YrrllONNtP0uc8234A=[%SYSTEM%]\A777fEEL9gTqjCw.exe
  • [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]nlllOBtxP0yc1iD8234A=[%SYSTEM%]\uTZZqhhYCwkU.exe
  • [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]frrzzPNyxAuvSoF8234A=[%SYSTEM%]\aTXXwUCelI.exe
  • [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]BzP00ycAA1vD2n48234A=[%SYSTEM%]\PZqqhhYXwkUVlO.exe
  • [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]L11uvoobpm5QJd8=[%SVC_SYS_APPDATA%]\dwme.exe
  • [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]qkItib3nG=[%SVC_SYS_APPDATA%]\dwme.exe
  • [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]ODFGJR9TCr=[%SVC_SYS_APPDATA%]\dwme.exe
  • [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]yUUUVeelOBtP0c=[%SVC_SYS_APPDATA%]\dwme.exe
  • [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]FffRRZ99hXwjUeI=[%SVC_SYS_APPDATA%]\dwme.exe
  • [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]fKKK8gRZ9hwjVPy=[%SVC_SYS_APPDATA%]\dwme.exe
  • [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]FJJ66dW8fRLhTqU=[%SVC_SYS_APPDATA%]\dwme.exe
  • [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]WllIBBrzPNyAv2b=[%SVC_SYS_APPDATA%]\dwme.exe
  • [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]c77EEZqqhYCkUrO=[%SVC_SYS_APPDATA%]\dwme.exe
  • [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]IwwwkUVelOBzP0A=[%SVC_SYS_APPDATA%]\dwme.exe
  • [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]gCelIBrzAuFGQd8=[%SVC_SYS_APPDATA%]\dwme.exe
  • [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]rAA11uvSSobFpG5=[%SVC_SYS_APPDATA%]\dwme.exe
  • [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]x222bF3pnGaQ67=[%SVC_SYS_APPDATA%]\dwme.exe
  • [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]LaamH6sWJ7fL8Tq=[%SVC_SYS_APPDATA%]\dwme.exe
  • [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]s00yycAA1vDon4=[%SVC_SYS_APPDATA%]\dwme.exe
  • [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]H88ffRLL9hXqUCk=[%SVC_SYS_APPDATA%]\dwme.exe
  • [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]OTZZqjYCkI4mHsW=[%SVC_SYS_APPDATA%]\dwme.exe
  • [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]Innn4m5sJ=[%SVC_SYS_APPDATA%]\dwme.exe
  • [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]TE8gZ9XjUVlt1vs=[%SVC_SYS_APPDATA%]\dwme.exe
  • [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]GrrzOxx0uv=[%SVC_SYS_APPDATA%]\dwme.exe
  • [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]SttxP00ucSibD=[%SVC_SYS_APPDATA%]\dwme.exe
  • [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]htttxyS1iHsJd8Z=[%SVC_SYS_APPDATA%]\dwme.exe
  • [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]UCCelIIBzPN=[%SVC_SYS_APPDATA%]\dwme.exe
  • [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]zK7fELLCtxPuc1D=[%SVC_SYS_APPDATA%]\dwme.exe
  • [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]T00ycS1iv=[%SVC_SYS_APPDATA%]\dwme.exe
  • [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]ttxP0ycEL8gRqhX=[%SVC_SYS_APPDATA%]\dwme.exe
  • [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]tffEL99TqCIxuSi=[%SVC_SYS_APPDATA%]\dwme.exe
  • [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]hP0cS1ibD=[%SVC_SYS_APPDATA%]\dwme.exe
  • [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]kUUIBtzPNyA1vDo=[%SVC_SYS_APPDATA%]\dwme.exe
  • [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]mccSS1ibD3Gam6W=[%SVC_SYS_APPDATA%]\dwme.exe
  • [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]ztxx0uci3o=[%SVC_SYS_APPDATA%]\dwme.exe
  • [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]zQQJIBBrzPNyA1v=[%SVC_SYS_APPDATA%]\dwme.exe
  • [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]RcSS1ibD3oG4mHs=[%SVC_SYS_APPDATA%]\dwme.exe
  • [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]LYUzPNycA1uD2oF=[%SVC_SYS_APPDATA%]\dwme.exe
  • [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]GpmmGf9XUekBzyA=[%SVC_SYS_APPDATA%]\dwme.exe
  • [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]FrrrlOBts=[%SVC_SYS_APPDATA%]\dwme.exe
  • [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]l5ssQQJ7dE8g=[%SVC_SYS_APPDATA%]\dwme.exe
  • [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]TLL9gTXqjYCkIrO=[%SVC_SYS_APPDATA%]\dwme.exe
  • [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]VsssQJ66EK8fZ9T=[%SVC_SYS_APPDATA%]\dwme.exe
  • [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]PgTTXXqjYCekIr8234A=[%SYSTEM%]\ZbbFF3pnnGaQHdK.exe
  • [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]RGGG4aaQH6sW7fL=[%APPDATA%]\dwme.exe
  • [HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]braviax=?
  • [HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]INCG9WP8HQ=[%PROFILE_TEMP%]\Zvx.exe
  • [HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]2L4NOI3W05=[%WINDOWS%]\Bloxus.exe
  • [HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]IJKUK66HMN=[%PROFILE_TEMP%]\Brr.exe
  • [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]n88ggRZqhwkUeOB8234A=[%SYSTEM%]\uammHH5sWJ7E.exe
  • [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]AllOOBtxP8234A=[%SYSTEM%]\JfEEL88gTZqYCkU.exe
  • [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]wGG4ammH6sW7fL88234A=[%SYSTEM%]\exxxP00ucS1iD3.exe
  • [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]bjjjUVVelItzNc18234A=[%SYSTEM%]\m777dEKK8gZ9Y.exe
  • [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]ylIIIBtzPNyA1vD8234A=[%SYSTEM%]\O5ssQQJ7dK8R9Xj.exe
  • [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]QTTTjUUCezNyxuo8234A=[%SYSTEM%]\LuvvG5sQQJdEKfZ.exe
  • [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]RJJJdWKKfRLhTqj8234A=[%SYSTEM%]\ZSS2obbF3pG5.exe
  • [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]VqqjUCCekIrzNyA8234A=[%SYSTEM%]\tAA1uvS2bm5QKRL.exe
  • [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]RppnnG44aQ6sK7E8234A=[%SYSTEM%]\iCCCekkIzO.exe
  • [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]mffELL9gZqjYw8234A=[%SYSTEM%]\lQQQH6sWK.exe
  • [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]DZZqhYXwkUVeOB8234A=[%SYSTEM%]\donnFamm5sWJdE8.exe
  • [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]EJ7ffEL8gTqYCkV8234A=[%SYSTEM%]\gFFP0cS1ivDoFHs.exe
  • [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]WaassWKK7fL9gZY8234A=[%SYSTEM%]\HIVVrzOxAuc2iDp.exe
  • [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]yaam6WJ7fLgZhCw8234A=[%SYSTEM%]\qLggTZqYCVucb3n.exe
  • [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]laaam6s7f8CkrOy8234A=[%SYSTEM%]\pTTjwIIVlOtP0c3.exe
  • [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]CJJ6ddWK8fR9hX8234A=[%SYSTEM%]\wAAA1uuvS2oF3m5.exe
  • [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]seeBtzPPNbp8234A=[%SYSTEM%]\aDD3onF4aHsJ7.exe
  • [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]K4p5sQJ7dEg9hXj8234A=[%SYSTEM%]\gZZZYkkVltP01v2.exe
  • [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]OP00ucS11b4m68234A=[%SYSTEM%]\AL9L99gTZqYwkVr.exe
  • [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]vKK8ffRZhT8234A=[%SYSTEM%]\aZYwlIIPyc12bFp.exe
  • [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]jTTTqhYCwUrltP08234A=[%SYSTEM%]\waaamH667E.exe
  • [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]xxA0uvS2bF3pGaH8234A=[%SYSTEM%]\YpmmG5aQJ6dK8R9.exe
  • [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]Uss7fEL8TZqYCk8234A=[%SYSTEM%]\bYYwkrNtucb.exe
  • [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]frrlOPibDo8234A=[%SYSTEM%]\JHH6WK7fE9TZ.exe
  • [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]JrrlOBBt0ycSv3F8234A=[%SYSTEM%]\C77fEEL8gTZqYCk.exe
  • [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]OooonG44amHsW7E8234A=[%SYSTEM%]\ANttxPucS1ib.exe
  • [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]GonnFamHJE8234A=[%SYSTEM%]\OwwkUVrOBtP0c.exe
  • [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]RmmmH66sWJ78234A=[%SYSTEM%]\blOONNtxP0uS1b.exe
  • [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]HjUUVBtzPycAuD28234A=[%SYSTEM%]\x4mm5QJ7dEK8R9Y.exe
  • [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]qKK8gRRZ9YXw8234A=[%SYSTEM%]\QiivvD2onF4pHs7.exe
  • [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]UqqjjYCekIVrzN8234A=[%SYSTEM%]\eaaaQH6ddW7fR9T.exe
  • [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]v88g9hYYjUVIBzN8234A=[%SYSTEM%]\GP00yycA1vH5sJd.exe
  • [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]ZVrrzOONt8234A=[%SYSTEM%]\qKK77fRLLgTXjYk.exe
  • [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]SuvvDD2obF4pG8234A=[%SYSTEM%]\ijUUVVelIBtzNyA.exe
  • [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]b00uucS1ibD3oGa8234A=[%SYSTEM%]\twwwkIIVrlONx.exe
  • [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]fBBBrzzPNy8234A=[%SYSTEM%]\lK88ffRZ9hTXjUe.exe
  • [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]zJJJ77fEL8gTqhC8234A=[%SYSTEM%]\yiibbD3ooG4am6.exe
  • [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]BFFF3ppnG58234A=[%SYSTEM%]\rIBBrrzONyxAuv2.exe
  • [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]TooonFF4pmHsQJd8234A=[%SYSTEM%]\WPPP00ycA1iv.exe
  • [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]SeekkIVrrONtx0c8234A=[%SYSTEM%]\iddWWK7ffL9gTqY.exe
  • [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]BeellIBBtz8234A=[%SYSTEM%]\zdddEK88gRZhYwj.exe
  • [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]L444aQQH6sWKfE98234A=[%SYSTEM%]\a00uucSS2iD3p.exe
  • [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]qBBrrzPPNyx1uS28234A=[%SYSTEM%]\VhhTTXwwjUCl.exe
  • [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]dBBBtxxP0ycS8234A=[%SYSTEM%]\uJJ77fELL8TZqYC.exe
  • [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]pvvvS22obF3mGaQ8234A=[%SYSTEM%]\TUUUCeelIBrPNxA.exe
  • [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]N11uuvSSobFpm5J8234A=[%SYSTEM%]\xwwjUUCelIBrPy.exe
  • [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]uqqhhYXwkUVlOtP8234A=[%SYSTEM%]\zvonF4amH5W7dLg.exe
  • [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]vwkIrllNNtPuc1i8234A=[%SYSTEM%]\EKKK7ffEL9gZq.exe
  • [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]GUUUCekIBrzOy8234A=[%SYSTEM%]\g55aQ6ddW8fRLhX.exe
  • [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]J88gRRZ9h8234A=[%SYSTEM%]\jvvvnnF4pHQJd.exe
  • [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]CYXXwUVelOB8234A=[%SYSTEM%]\c4aaamH5sWJ7ELg.exe
  • [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]IJJ7gZqqhYwkVrO8234A=[%SYSTEM%]\zibbD33onG4m6.exe
  • [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]nAA11iv2onF48234A=[%SYSTEM%]\ghYYXXwkUVeOBzP.exe
  • [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]dqqhhYCwkUVlOtP8234A=[%SYSTEM%]\coonnamHHsW7fLg.exe
  • [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]hGGG4aamH6sW7E88234A=[%SYSTEM%]\pVrrlNtP0ucSib3.exe
  • [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]rELL88gTZqhYwkV8234A=[%SYSTEM%]\q44aamH66WJ7.exe
  • [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]viiv3nF4amHsW8234A=[%SYSTEM%]\dCCwwkUUVrlBtPy.exe
  • [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]vm66sWWJ7E8gThw8234A=[%SYSTEM%]\tSSS1iibD3.exe