Exterminate It! Antimalware

malpedia

Known threats:699,742 Last Update:November 20, 22:46

Testimonials

Just want to say that apparently your Exterminate It has worked like a charm. I was infected with a most troublesome Malware Trojan that kept replicating every time McAfee found, blocked and removed it... most annoying for several days... until Mr. Google led me to your door. What a God send!

With thanks,

Tom S.

MultiPlug- Registry Values List

This is a complete list of MultiPlug registry values collected by Exterminate It!. If you find any of these registry values on your PC, your computer is very likely to be infected with the MultiPlug - adware.

IMPORTANT: Because the registry is a core component of your Windows system, it is strongly recommended that you back up the registry before you begin deleting keys and values. For information about backing up the Windows registry, refer to the Registry Editor online help.
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\rijufoze]ImagePath=[%PROGRAM_FILES%]\185D2F12-1460371105-805D-1A7F-5DAC17195DDC\hnseD56.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\rocufyky]ImagePath=[%PROGRAM_FILES%]\185D2F12-1460371105-805D-1A7F-5DAC17195DDC\jnsbF7B9.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\rocufyky]ImagePath=[%PROGRAM_FILES%]\4C4C4544-1460516021-3710-8054-C8C04F4B5831\jnsa28E.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\rocufyky]ImagePath=[%PROGRAM_FILES%]\FEFEFEFE-1460401524-FEFE-FEFE-FEFEFEFEFEFE\jnsiF2E6.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\rijufoze]ImagePath=[%PROGRAM_FILES%]\FEFEFEFE-1460401524-FEFE-FEFE-FEFEFEFEFEFE\hnsi2E04.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\rocufyky]ImagePath=[%PROGRAM_FILES%]\FFFFFFFF-1460488733-FFFF-FFFF-FFFFFFFFFFFF\jnsk7B6A.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\rijufoze]ImagePath=[%PROGRAM_FILES%]\FFFFFFFF-1460488733-FFFF-FFFF-FFFFFFFFFFFF\hnsy909A.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\rowugoqo]ImagePath=[%LOCAL_APPDATA%]\9771DF2D-1460536219-11E1-974E-910A7F19C83D\snsh84BF.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\rocufyky]ImagePath=[%PROGRAM_FILES%]\9771DF2D-1460528818-11E1-974E-910A7F19C83D\jnsqCB9C.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\rijufoze]ImagePath=[%PROGRAM_FILES%]\9771DF2D-1460528818-11E1-974E-910A7F19C83D\hnsc680C.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\rocufyky]ImagePath=[%PROGRAM_FILES%]\A43AB440-1460486775-7F48-8931-200CD72E9AE2\jnsfD345.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\rijufoze]ImagePath=[%PROGRAM_FILES%]\A43AB440-1460486775-7F48-8931-200CD72E9AE2\hnslEEED.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\zigipyro]ImagePath=[%LOCAL_APPDATA%]\DF006885-1460537930-DF11-9315-705AB6551F89\qnsb5285.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\rowugoqo]ImagePath=[%LOCAL_APPDATA%]\DF006885-1460537805-DF11-9315-705AB6551F89\snsq6E6E.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\rocufyky]ImagePath=[%PROGRAM_FILES%]\DF006885-1460512414-DF11-9315-705AB6551F89\jnspFE2D.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\rijufoze]ImagePath=[%PROGRAM_FILES%]\DF006885-1460512414-DF11-9315-705AB6551F89\hnsa260A.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\rocufyky]ImagePath=[%PROGRAM_FILES%]\4C4C4544-1460191102-5210-804D-C3C04F463332\jnss7F2E.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\rijufoze]ImagePath=[%PROGRAM_FILES%]\4C4C4544-1460191102-5210-804D-C3C04F463332\hnsnBF27.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\zutuzuni]ImagePath=[%PROGRAM_FILES%]\DA6773E2-1455003390-6F33-8E88-50FBD03DB69B\jnsx733.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\zigipyro]ImagePath=[%LOCAL_APPDATA%]\8AD1F981-1460549793-11CB-BF20-BDEDED716849\qnsd4287.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\rocufyky]ImagePath=[%PROGRAM_FILES%]\8AD1F981-1460417401-11CB-BF20-BDEDED716849\jnsx9A0F.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\rijufoze]ImagePath=[%PROGRAM_FILES%]\8AD1F981-1460417401-11CB-BF20-BDEDED716849\hnscBC9E.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\zigipyro]ImagePath=[%LOCAL_APPDATA%]\03D40274-1460542869-0598-5606-7B0700080009\qnss9D5C.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\rocufyky]ImagePath=[%PROGRAM_FILES%]\03D40274-1460394901-0598-5606-7B0700080009\jnspD549.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\rocufyky]ImagePath=[%PROGRAM_FILES%]\70197BAC-1460477014-573D-A9D9-66722C83341D\jnso4E40.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\rijufoze]ImagePath=[%PROGRAM_FILES%]\70197BAC-1460477014-573D-A9D9-66722C83341D\hnsj6635.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\rijufoze]ImagePath=[%PROGRAM_FILES%]\8F75A136-1460540364-8D4B-AE1F-8F53EBAF1D6F\hnsrE7D.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\zigipyro]ImagePath=[%LOCAL_APPDATA%]\8F75A136-1460578581-8D4B-AE1F-8F53EBAF1D6F\qnsyB5BA.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\rocufyky]ImagePath=[%PROGRAM_FILES%]\8F75A136-1460540364-8D4B-AE1F-8F53EBAF1D6F\jnsrF64F.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\rowugoqo]ImagePath=[%LOCAL_APPDATA%]\E47A55A3-1460545438-F247-8764-2C600C8867B8\snsh3459.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\rocufyky]ImagePath=[%PROGRAM_FILES%]\E47A55A3-1460563242-F247-8764-2C600C8867B8\jnsh9255.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\rijufoze]ImagePath=[%PROGRAM_FILES%]\E47A55A3-1460563242-F247-8764-2C600C8867B8\hnseB11A.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\rocufyky]ImagePath=[%PROGRAM_FILES%]\CCEFD6E6-1460496158-6560-7AFB-9E0A6337DB53\jnsxA379.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\woforemu]ImagePath=[%LOCAL_APPDATA%]\03000200-1451144978-0500-0006-000700080009\snso400.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\zutuzuni]ImagePath=[%PROGRAM_FILES%]\03000200-1451173710-0500-0006-000700080009\jnsj462D.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\zigipyro]ImagePath=[%LOCAL_APPDATA%]\03000200-1460387950-0500-0006-000700080009\qnslE51B.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\wucotusy]ImagePath=[%PROGRAM_FILES%]\03000200-1451173710-0500-0006-000700080009\hnsa6FA0.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\peziqewu]ImagePath=[%PROGRAM_FILES%]\03000200-1451173710-0500-0006-000700080009\knsg25FC.tmpfs
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\zigipyro]ImagePath=[%LOCAL_APPDATA%]\7C0D006D-1460506673-DF11-8D86-001CC0C13E9C\qnsk9698.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\rowugoqo]ImagePath=[%LOCAL_APPDATA%]\7C0D006D-1460506618-DF11-8D86-001CC0C13E9C\snsrB7B1.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\rocufyky]ImagePath=[%PROGRAM_FILES%]\7C0D006D-1460486735-DF11-8D86-001CC0C13E9C\jnsdA287.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\rijufoze]ImagePath=[%PROGRAM_FILES%]\7C0D006D-1460486735-DF11-8D86-001CC0C13E9C\hnsnBAF3.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\zutuzuni]ImagePath=[%PROGRAM_FILES%]\40D7D122-1456464733-DC11-94EE-DA1B972D8D1F\jnsa58BC.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\zigipyro]ImagePath=[%LOCAL_APPDATA%]\40D7D122-1456490942-DC11-94EE-DA1B972D8D1F\qnsq873C.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\wucotusy]ImagePath=[%PROGRAM_FILES%]\40D7D122-1456464733-DC11-94EE-DA1B972D8D1F\hnsf9A5F.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\rowugoqo]ImagePath=[%LOCAL_APPDATA%]\40D7D122-1456490034-DC11-94EE-DA1B972D8D1F\snsvAB11.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\rijufoze]ImagePath=[%PROGRAM_FILES%]\03000200-1460372708-0500-0006-000700080009\hnseF32.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\wucotusy]ImagePath=[%PROGRAM_FILES%]\B5324663-1458042332-8D28-8FA0-A0B3CCCA0AA9\hnss4D66.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\rowugoqo]ImagePath=[%LOCAL_APPDATA%]\B5324663-1458062227-8D28-8FA0-A0B3CCCA0AA9\snsy696E.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\gerocyni]ImagePath=[%PROGRAM_FILES%]\B5324663-1458042332-8D28-8FA0-A0B3CCCA0AA9\jnsn2423.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\rocufyky]ImagePath=[%PROGRAM_FILES%]\45443439-1460422003-3146-3438-3334FFFFFFFF\jnsw8668.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\rijufoze]ImagePath=[%PROGRAM_FILES%]\45443439-1460422003-3146-3438-3334FFFFFFFF\hnscA126.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\rocufyky]ImagePath=[%PROGRAM_FILES%]\25FD794C-1460482278-E211-A302-208984924B71\jnss967A.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\rijufoze]ImagePath=[%PROGRAM_FILES%]\25FD794C-1460482278-E211-A302-208984924B71\hnsnBBE1.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\zigipyro]ImagePath=[%LOCAL_APPDATA%]\31464E43-1460409431-5A34-4A38-984BE1C2CEB1\qnsmDFF4.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\rocufyky]ImagePath=[%PROGRAM_FILES%]\03000200-1460217012-0500-0006-000700080009\jnsz3957.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\rijufoze]ImagePath=[%PROGRAM_FILES%]\03000200-1460217012-0500-0006-000700080009\hnsv63E3.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\zigipyro]ImagePath=[%LOCAL_APPDATA%]\B0820F21-1460480710-885C-8618-C8CBB85A98F1\qnsd1BAD.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\wucotusy]ImagePath=[%PROGRAM_FILES%]\B0820F21-1455703207-885C-8618-C8CBB85A98F1\hnsv731F.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\rocufyky]ImagePath=[%PROGRAM_FILES%]\B0820F21-1460446762-885C-8618-C8CBB85A98F1\jnso7474.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\rijufoze]ImagePath=[%PROGRAM_FILES%]\B0820F21-1460446762-885C-8618-C8CBB85A98F1\hnsu51CA.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\rocufyky]ImagePath=[%PROGRAM_FILES%]\5696CD11-1460442704-E311-A968-201A06354D1E\jnse8870.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\rijufoze]ImagePath=[%PROGRAM_FILES%]\5696CD11-1460442704-E311-A968-201A06354D1E\hnseFCD6.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\surinifo]ImagePath=[%PROGRAM_FILES%]\032B0290-1446739151-0577-E906-E70700080009\knso72D3.tmpfs
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\mivygiro]ImagePath=[%PROGRAM_FILES%]\032B0290-1446739151-0577-E906-E70700080009\jnso97B7.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\fipufuwu]ImagePath=[%PROGRAM_FILES%]\032B0290-1446739151-0577-E906-E70700080009\hnsyB18F.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\zigipyro]ImagePath=[%LOCAL_APPDATA%]\46B37227-1459971314-11E4-A961-68F7289BAC7F\qnsoA948.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\rocufyky]ImagePath=[%PROGRAM_FILES%]\46B37227-1459766662-11E4-A961-68F7289BAC7F\jnsd9297.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\rijufoze]ImagePath=[%PROGRAM_FILES%]\46B37227-1459766662-11E4-A961-68F7289BAC7F\hnssB6EA.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\zigipyro]ImagePath=[%LOCAL_APPDATA%]\00000000-1460332426-0000-0000-50E5493A75D4\qnsk79A0.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\rocufyky]ImagePath=[%PROGRAM_FILES%]\00000000-1460237656-0000-0000-50E5493A75D4\jnsu62FC.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\rijufoze]ImagePath=[%PROGRAM_FILES%]\00000000-1460237656-0000-0000-50E5493A75D4\hnst7955.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\rocufyky]ImagePath=[%PROGRAM_FILES%]\03000200-1460384158-0500-0006-000700080009\jnszA8AF.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\rijufoze]ImagePath=[%PROGRAM_FILES%]\03000200-1460384158-0500-0006-000700080009\hnsuC0F2.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\wucotusy]ImagePath=[%PROGRAM_FILES%]\33444335-1456154132-4731-434E-38EAA7F32713\hnsf2A2.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\zutuzuni]ImagePath=[%PROGRAM_FILES%]\33444335-1456154132-4731-434E-38EAA7F32713\jnskE189.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\ziminylu]ImagePath=[%PROGRAM_FILES%]\33444335-1456154132-4731-434E-38EAA7F32713\knsfBB4E.tmpfs
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\zigipyro]ImagePath=[%LOCAL_APPDATA%]\33444335-1456234542-4731-434E-38EAA7F32713\qnst3C95.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\zigipyro]ImagePath=[%LOCAL_APPDATA%]\4C4C4544-1460390778-3610-8053-C2C04F515231\qnsx3851.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\rocufyky]ImagePath=[%PROGRAM_FILES%]\4C4C4544-1460369021-3610-8053-C2C04F515231\jnsa9250.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\rijufoze]ImagePath=[%PROGRAM_FILES%]\4C4C4544-1460369021-3610-8053-C2C04F515231\hnsvB6C3.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\kuhufyku]ImagePath=[%PROGRAM_FILES%]\6CFFDC20-1447302481-11E1-8CAA-30F9EDD3DC0E\knsy6416.tmpfs
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\zutuzuni]ImagePath=[%PROGRAM_FILES%]\082ADBBA-1455603884-6742-9DF7-60EB6990A0BA\jnsh7A7D.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\zigipyro]ImagePath=[%LOCAL_APPDATA%]\082ADBBA-1456754741-6742-9DF7-60EB6990A0BA\qnslC6CF.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\rocufyky]ImagePath=[%PROGRAM_FILES%]\03000200-1460356426-0500-0006-000700080009\jnsrE69F.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\rowugoqo]ImagePath=[%LOCAL_APPDATA%]\9412CEA1-1460038660-DD11-B02D-001999232E5D\snso1F6.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\zigipyro]ImagePath=[%LOCAL_APPDATA%]\9412CEA1-1460391683-DD11-B02D-001999232E5D\qnsh92CF.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\rocufyky]ImagePath=[%PROGRAM_FILES%]\9412CEA1-1460063758-DD11-B02D-001999232E5D\jnsi9444.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\rijufoze]ImagePath=[%PROGRAM_FILES%]\9412CEA1-1460063758-DD11-B02D-001999232E5D\hnsdAB9D.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\rocufyky]ImagePath=[%PROGRAM_FILES%]\D7DD5B4A-1460367331-90D7-C4DD-69A0EA0A92C2\jnsp357D.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\rijufoze]ImagePath=[%PROGRAM_FILES%]\D7DD5B4A-1460367331-90D7-C4DD-69A0EA0A92C2\hnss63D2.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\rocufyky]ImagePath=[%PROGRAM_FILES%]\D1E46344-1460402447-11DE-BBDA-C0ADA70A78AC\jnsd10F.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\rijufoze]ImagePath=[%PROGRAM_FILES%]\D1E46344-1460402447-11DE-BBDA-C0ADA70A78AC\hnsp3B15.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\rocufyky]ImagePath=[%PROGRAM_FILES%]\87639460-1460392362-11DC-BD40-40167EB56B26\jnscFAB4.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\rocufyky]ImagePath=[%PROGRAM_FILES%]\00000000-1460113757-0000-0000-448A5B467BC9\jnsfBADB.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\rijufoze]ImagePath=[%PROGRAM_FILES%]\00000000-1460113757-0000-0000-448A5B467BC9\hnsdCFFB.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\rowugoqo]ImagePath=[%LOCAL_APPDATA%]\81EAC786-1460313224-DC11-AF6B-0015174CA93C\snseD2A2.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\rocufyky]ImagePath=[%PROGRAM_FILES%]\81EAC786-1460305950-DC11-AF6B-0015174CA93C\jnstD455.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\rijufoze]ImagePath=[%PROGRAM_FILES%]\81EAC786-1460305950-DC11-AF6B-0015174CA93C\hnsdEAD3.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\zigipyro]ImagePath=[%LOCAL_APPDATA%]\804B9997-1460273171-E511-8062-B05D86019423\qnsnC23.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\rijufoze]ImagePath=[%PROGRAM_FILES%]\804B9997-1460140415-E511-8062-B05D86019423\hnsrBBE3.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\zigipyro]ImagePath=[%LOCAL_APPDATA%]\D983F860-1458725106-11E4-A961-68F728A0B7B1\qnsp48CF.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\wucotusy]ImagePath=[%PROGRAM_FILES%]\D983F860-1458565318-11E4-A961-68F728A0B7B1\hnsz9871.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\gerocyni]ImagePath=[%PROGRAM_FILES%]\D983F860-1458565318-11E4-A961-68F728A0B7B1\jnso7D46.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\rocufyky]ImagePath=[%PROGRAM_FILES%]\81D042BD-1460294703-E511-BA4C-507B9D34E83A\jnsn5169.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\rijufoze]ImagePath=[%PROGRAM_FILES%]\81D042BD-1460294703-E511-BA4C-507B9D34E83A\hnsm8210.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\vylonomo]ImagePath=[%APPDATA%]\00BBA123-1430026751-E011-A4C5-86EACACAECA7\nszE23E.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\xixuqibu]ImagePath=[%LOCAL_APPDATA%]\00BBA123-1430001829-E011-A4C5-86EACACAECA7\snsj121B.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\wezudyxi]ImagePath=[%LOCAL_APPDATA%]\00BBA123-1430001822-E011-A4C5-86EACACAECA7\cnse3F16.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\rocufyky]ImagePath=[%PROGRAM_FILES%]\343663AE-1460272229-11E0-975C-40C25F064027\jnst4159.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\rijufoze]ImagePath=[%PROGRAM_FILES%]\343663AE-1460272229-11E0-975C-40C25F064027\hnst5C2B.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\zigipyro]ImagePath=[%LOCAL_APPDATA%]\7BFA20A1-1460307267-DE11-A2D5-00235AAA59F5\qnsn393B.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\rocufyky]ImagePath=[%PROGRAM_FILES%]\7BFA20A1-1460217010-DE11-A2D5-00235AAA59F5\jnsw696E.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\rijufoze]ImagePath=[%PROGRAM_FILES%]\7BFA20A1-1460217010-DE11-A2D5-00235AAA59F5\hnsb8CE7.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\zigipyro]ImagePath=[%LOCAL_APPDATA%]\0D4B5C6A-1460315497-0004-0000-000000000000\qnskED.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\rowugoqo]ImagePath=[%LOCAL_APPDATA%]\583EDC1D-1460209036-11DC-BBDA-FE8A6264000F\snst10C.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\zigipyro]ImagePath=[%LOCAL_APPDATA%]\03000200-1459955713-0500-0006-000700080009\qnsw238.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\zigipyro]ImagePath=[%LOCAL_APPDATA%]\A5D8AB34-1460243822-11DF-B503-6AC0590000A0\qnsb62B1.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\zigipyro]ImagePath=[%LOCAL_APPDATA%]\34CC2960-1460136541-11D8-94EE-001B24C02943\qnsm4DA4.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\rocufyky]ImagePath=[%PROGRAM_FILES%]\34CC2960-1459685781-11D8-94EE-001B24C02943\jnswFDC0.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\zigipyro]ImagePath=[%LOCAL_APPDATA%]\4C4C4544-1460164352-3110-8038-B1C04F324E31\qnsb36B.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\zigipyro]ImagePath=[%LOCAL_APPDATA%]\82EF9B20-1460225280-11D5-BCDA-10BF487521FC\qnsl993.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\rocufyky]ImagePath=[%PROGRAM_FILES%]\82EF9B20-1460235253-11D5-BCDA-10BF487521FC\jnss8C38.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\zigipyro]ImagePath=[%LOCAL_APPDATA%]\44E7FAC0-1459933360-11E1-8846-047D7B38659C\qnsxFF09.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\wucotusy]ImagePath=[%PROGRAM_FILES%]\44E7FAC0-1458039894-11E1-8846-047D7B38659C\hnsj81B1.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\rowugoqo]ImagePath=[%LOCAL_APPDATA%]\44E7FAC0-1458050827-11E1-8846-047D7B38659C\snsz2629.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\gerocyni]ImagePath=[%PROGRAM_FILES%]\44E7FAC0-1458039894-11E1-8846-047D7B38659C\jnsj5B99.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\rocufyky]ImagePath=[%PROGRAM_FILES%]\B9A538A0-1460165041-11E2-8CC4-5453EDB81EA5\jnswF8E6.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\rijufoze]ImagePath=[%PROGRAM_FILES%]\B9A538A0-1460165041-11E2-8CC4-5453EDB81EA5\hnsb1355.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\bikofenu]ImagePath=[%PROGRAM_FILES%]\35453035-1448194229-3935-4630-3638FFFFFFFF\knsl2F83.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\dojygici]ImagePath=[%PROGRAM_FILES%]\4C4C4544-1457743261-4210-8056-C8C04F343032\jnsjBBB.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\wucotusy]ImagePath=[%PROGRAM_FILES%]\4C4C4544-1457743261-4210-8056-C8C04F343032\hnss2D7E.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\rijufoze]ImagePath=[%PROGRAM_FILES%]\2603C420-1460130275-11DF-930F-20CF309AB2CC\hnsoF42.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\rocufyky]ImagePath=[%PROGRAM_FILES%]\2603C420-1460130275-11DF-930F-20CF309AB2CC\jnsyF54A.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\rocufyky]ImagePath=[%PROGRAM_FILES%]\C46FEE40-1459776337-11DF-B6A8-E0CB4EC7176D\jnsnE0DD.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\rijufoze]ImagePath=[%PROGRAM_FILES%]\C46FEE40-1459776337-11DF-B6A8-E0CB4EC7176D\hnst3CA5.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\rowugoqo]ImagePath=[%LOCAL_APPDATA%]\41C9F186-1460220291-E411-AB1F-742B626ED92A\snsa81AA.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\rocufyky]ImagePath=[%PROGRAM_FILES%]\41C9F186-1460216539-E411-AB1F-742B626ED92A\jnsvAD17.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\rijufoze]ImagePath=[%PROGRAM_FILES%]\41C9F186-1460216539-E411-AB1F-742B626ED92A\hnsvC45B.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\wucotusy]ImagePath=[%PROGRAM_FILES%]\00000000-1459372923-0000-0000-001A4DFCE7ED\hnsxA317.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\zigipyro]ImagePath=[%LOCAL_APPDATA%]\00000000-1460209890-0000-0000-000000000000\qnsx784D.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\wucotusy]ImagePath=[%PROGRAM_FILES%]\9F0E1B50-1455948146-C249-AC29-047D7B996D22\hnsvBC11.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\zigipyro]ImagePath=[%LOCAL_APPDATA%]\A106A31C-1460198939-11E4-B57F-68F72843FCAF\qnswB0B4.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\wucotusy]ImagePath=[%PROGRAM_FILES%]\A106A31C-1457690797-11E4-B57F-68F72843FCAF\hnsdD52B.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\dojygici]ImagePath=[%PROGRAM_FILES%]\A106A31C-1457690797-11E4-B57F-68F72843FCAF\jnsqA6E6.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\myfejozi]ImagePath=[%PROGRAM_FILES%]\4C4C4544-1447756294-5310-8044-C6C04F51334A\jnslF319.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\bykesute]ImagePath=[%PROGRAM_FILES%]\4C4C4544-1447756294-5310-8044-C6C04F51334A\hnsg1BD0.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\zuluqeli]ImagePath=[%PROGRAM_FILES%]\00000000-1454692106-0000-0000-6CF049EFFADF\znsjF25C.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\zigipyro]ImagePath=[%LOCAL_APPDATA%]\1D141BE0-1455809668-11DD-8B6E-50465DB73096\qnsrC737.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\hyqodohe]ImagePath=[%PROGRAM_FILES%]\1D141BE0-1455722739-11DD-8B6E-50465DB73096\znsxF5CA.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\rijufoze]ImagePath=[%PROGRAM_FILES%]\4C4C4544-1459663776-4610-8030-C6C04F575931\hnsk22B4.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\rocufyky]ImagePath=[%PROGRAM_FILES%]\03000200-1460185236-0500-0006-000700080009\jnsf2857.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\rijufoze]ImagePath=[%PROGRAM_FILES%]\5E6774A0-1460179002-11DE-AE0A-00261811B7B7\hnsn9A3.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\rocufyky]ImagePath=[%PROGRAM_FILES%]\5E6774A0-1460179002-11DE-AE0A-00261811B7B7\jnsnC561.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\wunizyko]ImagePath=[%PROGRAM_FILES%]\1C7CC43C-1438421103-E311-B2A0-F8A963964EE6\knslDD0.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\hyverumu]ImagePath=[%PROGRAM_FILES%]\1C7CC43C-1438421103-E311-B2A0-F8A963964EE6\jnsb6578.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\comyninu]ImagePath=[%PROGRAM_FILES%]\1C7CC43C-1438421103-E311-B2A0-F8A963964EE6\hnsx81CC.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\zigipyro]ImagePath=[%LOCAL_APPDATA%]\C07885BD-1460197485-E011-96C8-CD14782B379F\qnsc7E7A.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\hyzegypu]ImagePath=[%PROGRAM_FILES%]\C07885BD-1443454802-E011-96C8-CD14782B379F\knsh3DEC.tmpfs
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\zigipyro]ImagePath=[%LOCAL_APPDATA%]\03D40274-1460231821-0571-E306-E00700080009\qnsw1844.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\mulikety]ImagePath=[%APPDATA%]\03000200-1432638501-0500-0006-000700080009\hnsj1788.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\jimocoso]ImagePath=[%PROGRAM_FILES%]\03000200-1440182182-0500-0006-000700080009\jnscBEDB.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\rocufyky]ImagePath=[%PROGRAM_FILES%]\A62D2600-1460137203-11D5-8728-BCAEC5DEE313\jnscD548.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\rijufoze]ImagePath=[%PROGRAM_FILES%]\A62D2600-1460137203-11D5-8728-BCAEC5DEE313\hnsnEA41.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\wovivugu]ImagePath=[%LOCAL_APPDATA%]\03000200-1429432218-0500-0006-000700080009\snsr5821.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\bobotifu]ImagePath=[%APPDATA%]\03000200-1429457342-0500-0006-000700080009\jnsb9128.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\rowugoqo]ImagePath=[%LOCAL_APPDATA%]\B53B8E00-1460132279-11DE-B9DC-90E6BAB62306\snsg5B8C.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\rocufyky]ImagePath=[%PROGRAM_FILES%]\B53B8E00-1460124956-11DE-B9DC-90E6BAB62306\jnsa96B6.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\rijufoze]ImagePath=[%PROGRAM_FILES%]\B53B8E00-1460124956-11DE-B9DC-90E6BAB62306\hnsvB7DE.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\zigipyro]ImagePath=[%LOCAL_APPDATA%]\00000000-1460164705-0000-0807-060504030201\qnsrFE63.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\rocufyky]ImagePath=[%PROGRAM_FILES%]\00000000-1460141060-0000-0807-060504030201\jnsnA27B.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\rijufoze]ImagePath=[%PROGRAM_FILES%]\00000000-1460141060-0000-0807-060504030201\hnsnD5FB.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\rocufyky]ImagePath=[%PROGRAM_FILES%]\9BFEA893-1459634225-DB4A-B87E-2FF8A2E20F37\jnsm9388.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\rijufoze]ImagePath=[%PROGRAM_FILES%]\9BFEA893-1459634225-DB4A-B87E-2FF8A2E20F37\hnsxA8CF.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\zutuzuni]ImagePath=[%PROGRAM_FILES%]\BCFBC6F4-1455896299-11E2-9673-CE39E79CBB00\jnsy9024.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\wucotusy]ImagePath=[%PROGRAM_FILES%]\BCFBC6F4-1455896299-11E2-9673-CE39E79CBB00\hnsaBB6C.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\zigipyro]ImagePath=[%LOCAL_APPDATA%]\2014CF5D-1460105816-DE11-A2A1-00235A0DDE9F\qnsc8EAA.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\wucotusy]ImagePath=[%PROGRAM_FILES%]\2014CF5D-1458770633-DE11-A2A1-00235A0DDE9F\hnsh6933.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\gerocyni]ImagePath=[%PROGRAM_FILES%]\2014CF5D-1458770633-DE11-A2A1-00235A0DDE9F\jnscFBB0.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\zigipyro]ImagePath=[%LOCAL_APPDATA%]\8DDC615F-1460147174-6700-6575-86509EA3CF91\qnsc87A8.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\rowugoqo]ImagePath=[%LOCAL_APPDATA%]\8DDC615F-1460144529-6700-6575-86509EA3CF91\snsa2602.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\rocufyky]ImagePath=[%PROGRAM_FILES%]\8DDC615F-1460136980-6700-6575-86509EA3CF91\jnsy5A34.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\rijufoze]ImagePath=[%PROGRAM_FILES%]\8DDC615F-1460136980-6700-6575-86509EA3CF91\hnsrB083.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\zigipyro]ImagePath=[%LOCAL_APPDATA%]\5FEC5102-1460117361-11E1-BCE0-48111E0DE0E8\qnsz9A4F.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\gerocyni]ImagePath=[%PROGRAM_FILES%]\56E8BDBE-1458250642-0F4E-DF18-D2575EFB16AE\jnsi176.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\zigipyro]ImagePath=[%LOCAL_APPDATA%]\56E8BDBE-1458247128-0F4E-DF18-D2575EFB16AE\qnstF179.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\wucotusy]ImagePath=[%PROGRAM_FILES%]\56E8BDBE-1458250642-0F4E-DF18-D2575EFB16AE\hnsk3AF6.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\zigipyro]ImagePath=[%LOCAL_APPDATA%]\02651539-1460110131-7322-7766-3085A9F5A910\qnsa1566.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\rocufyky]ImagePath=[%PROGRAM_FILES%]\4C4C4544-1460047624-5610-804D-B1C04F374831\jnscB0F2.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\rijufoze]ImagePath=[%PROGRAM_FILES%]\4C4C4544-1460047624-5610-804D-B1C04F374831\hnswC816.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\wohoxugo]ImagePath=[%PROGRAM_FILES%]\2901A3AE-1453074633-11E1-AB57-48C45900001C\znsqA1.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\rocufyky]ImagePath=[%PROGRAM_FILES%]\96814520-1459591544-11BD-B6EC-485B3997A140\jnsz9197.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\rocufyky]ImagePath=[%PROGRAM_FILES%]\4C4C4544-1460097230-3110-8030-CAC04F544E31\jnsh6401.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\rijufoze]ImagePath=[%PROGRAM_FILES%]\4C4C4544-1460097230-3110-8030-CAC04F544E31\hnsx8B61.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\zigipyro]ImagePath=[%LOCAL_APPDATA%]\03000200-1459839461-0500-0006-000700080009\qnsgF4BC.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\wucotusy]ImagePath=[%PROGRAM_FILES%]\03000200-1459454995-0500-0006-000700080009\hnsz7C43.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\gerocyni]ImagePath=[%PROGRAM_FILES%]\03000200-1459454995-0500-0006-000700080009\jnsp643F.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\rocufyky]ImagePath=[%PROGRAM_FILES%]\C949B481-1459926795-11CB-98A2-ABA94683E8E2\jnslBAC9.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\rijufoze]ImagePath=[%PROGRAM_FILES%]\C949B481-1459926795-11CB-98A2-ABA94683E8E2\hnssF606.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\rocufyky]ImagePath=[%PROGRAM_FILES%]\33444335-1460128230-4434-3037-A0481C2660E5\jnsg15A.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\rijufoze]ImagePath=[%PROGRAM_FILES%]\33444335-1460128230-4434-3037-A0481C2660E5\hnsf18EB.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\rocufyky]ImagePath=[%PROGRAM_FILES%]\4C4C4544-1460123403-4E10-8037-C7C04F353132\jnse820.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\rijufoze]ImagePath=[%PROGRAM_FILES%]\4C4C4544-1460123403-4E10-8037-C7C04F353132\hnsi2AFC.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\zigipyro]ImagePath=[%LOCAL_APPDATA%]\4C4C4544-1460146276-4E10-8037-C7C04F353132\qnsa5CE4.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\rocufyky]ImagePath=[%PROGRAM_FILES%]\4E9328DB-1460132450-E411-A26A-F0761C69E019\jnsc6E30.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\rijufoze]ImagePath=[%PROGRAM_FILES%]\4E9328DB-1460132450-E411-A26A-F0761C69E019\hnsh8593.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\poweweby]ImagePath=[%PROGRAM_FILES%]\30464E43-1460045781-5730-4D59-C80AA932211B\znsiBE49.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\zigipyro]ImagePath=[%LOCAL_APPDATA%]\6C3D2500-1460068571-4EA8-5886-203040506099\qnssC238.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\rowugoqo]ImagePath=[%LOCAL_APPDATA%]\6C3D2500-1459991246-4EA8-5886-203040506099\snssF3A6.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\rocufyky]ImagePath=[%PROGRAM_FILES%]\6C3D2500-1459962164-4EA8-5886-203040506099\jnsqD09A.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\rijufoze]ImagePath=[%PROGRAM_FILES%]\6C3D2500-1459962164-4EA8-5886-203040506099\hnsqE9E6.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\zigipyro]ImagePath=[%LOCAL_APPDATA%]\6C3D2500-1460072279-4EA8-5886-203040506099\qnsc10D4.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\rowugoqo]ImagePath=[%LOCAL_APPDATA%]\E2EE52FC-1460064211-584E-B549-4E55DAB59A6E\snsj797.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\rijufoze]ImagePath=[%PROGRAM_FILES%]\E2EE52FC-1460038911-584E-B549-4E55DAB59A6E\hnsx6C1.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\rocufyky]ImagePath=[%PROGRAM_FILES%]\E2EE52FC-1460038911-584E-B549-4E55DAB59A6E\jnsdBD71.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\zigipyro]ImagePath=[%LOCAL_APPDATA%]\CDA266FB-1460013229-D649-8429-54AB3A120A09\qnso7FF2.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\rocufyky]ImagePath=[%PROGRAM_FILES%]\4FDEDC2E-1460030729-11E0-B119-16E12F03806E\jnsaB4A2.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\rijufoze]ImagePath=[%PROGRAM_FILES%]\4FDEDC2E-1460030729-11E0-B119-16E12F03806E\hnsqEAF0.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\lehicewu]ImagePath=[%PROGRAM_FILES%]\37353533-1442923922-3030-3135-433831314531\jnsz3D2.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\nibijico]ImagePath=[%PROGRAM_FILES%]\37353533-1442923922-3030-3135-433831314531\knsf95E1.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\gyvixodu]ImagePath=[%PROGRAM_FILES%]\37353533-1442923922-3030-3135-433831314531\hnsj1C3E.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\zigipyro]ImagePath=[%LOCAL_APPDATA%]\F622FCE6-1459968958-CC02-ED1D-707FB60CBA0C\qnsu2E1E.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\rocufyky]ImagePath=[%PROGRAM_FILES%]\F622FCE6-1459501175-CC02-ED1D-707FB60CBA0C\jnstAE05.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\rijufoze]ImagePath=[%PROGRAM_FILES%]\F622FCE6-1459501175-CC02-ED1D-707FB60CBA0C\hnsv252B.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\rocufyky]ImagePath=[%PROGRAM_FILES%]\65A49999-1459861175-F6C8-5AD5-104BA5CA53F1\jnsmFD72.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\rijufoze]ImagePath=[%PROGRAM_FILES%]\65A49999-1459861175-F6C8-5AD5-104BA5CA53F1\hnsm2696.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\rocufyky]ImagePath=[%PROGRAM_FILES%]\7EFE4408-1459989583-E011-A8F3-00E01800C773\jnsm51B0.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\rijufoze]ImagePath=[%PROGRAM_FILES%]\7EFE4408-1459989583-E011-A8F3-00E01800C773\hnsg74EA.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\rowugoqo]ImagePath=[%LOCAL_APPDATA%]\FD116140-1459886444-11E1-827F-30F9EDD90785\snsoCB8A.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\rocufyky]ImagePath=[%PROGRAM_FILES%]\FD116140-1459875057-11E1-827F-30F9EDD90785\jnss7020.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\rijufoze]ImagePath=[%PROGRAM_FILES%]\FD116140-1459875057-11E1-827F-30F9EDD90785\hnss896C.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\zigipyro]ImagePath=[%LOCAL_APPDATA%]\F7E1223D-1459646312-11DD-BBDA-0B3E5D2C001E\qnsx598B.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\wucotusy]ImagePath=[%PROGRAM_FILES%]\F7E1223D-1459387696-11DD-BBDA-0B3E5D2C001E\hnss125A.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\rowugoqo]ImagePath=[%LOCAL_APPDATA%]\F7E1223D-1459395059-11DD-BBDA-0B3E5D2C001E\snsd343B.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\gerocyni]ImagePath=[%PROGRAM_FILES%]\F7E1223D-1459387696-11DD-BBDA-0B3E5D2C001E\jnsiF1CE.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\rowugoqo]ImagePath=[%LOCAL_APPDATA%]\4C4C4544-1459807775-4B10-8059-B5C04F4E304A\snsn4D79.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\rocufyky]ImagePath=[%PROGRAM_FILES%]\4C4C4544-1459799653-4B10-8059-B5C04F4E304A\jnsbB2CD.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\rijufoze]ImagePath=[%PROGRAM_FILES%]\4C4C4544-1459799653-4B10-8059-B5C04F4E304A\hnsfD5A9.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\zigipyro]ImagePath=[%LOCAL_APPDATA%]\32444335-1459970088-4C33-5642-A0B3CC7291D4\qnsg60EA.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\rowugoqo]ImagePath=[%LOCAL_APPDATA%]\4C4C4544-1459427254-4210-8059-C8C04F533153\snse7724.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\zigipyro]ImagePath=[%LOCAL_APPDATA%]\00000011-1459249529-0000-0000-60A44C73C4B2\qnsa45A8.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\wucotusy]ImagePath=[%PROGRAM_FILES%]\00000011-1459222280-0000-0000-60A44C73C4B2\hnsd9953.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\gerocyni]ImagePath=[%PROGRAM_FILES%]\00000011-1459222280-0000-0000-60A44C73C4B2\jnsd8055.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\wucotusy]ImagePath=[%PROGRAM_FILES%]\038D0240-1458818722-054E-7E06-C50700080009\hnsgF8F0.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\rocufyky]ImagePath=[%PROGRAM_FILES%]\038D0240-1459930717-054E-7E06-C50700080009\jnsf985B.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\rijufoze]ImagePath=[%PROGRAM_FILES%]\038D0240-1459930717-054E-7E06-C50700080009\hnsaC7C6.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\gerocyni]ImagePath=[%PROGRAM_FILES%]\038D0240-1458818722-054E-7E06-C50700080009\jnslC985.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\zigipyro]ImagePath=[%LOCAL_APPDATA%]\038D0240-1459962958-054E-7E06-C50700080009\qnswD422.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\rocufyky]ImagePath=[%PROGRAM_FILES%]\4012D8EE-1459919951-E111-8BE7-8C52AFA9BBEB\jnsnAC75.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\rijufoze]ImagePath=[%PROGRAM_FILES%]\4012D8EE-1459919951-E111-8BE7-8C52AFA9BBEB\hnsnC6AB.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\rocufyky]ImagePath=[%PROGRAM_FILES%]\03000200-1459956317-0500-0006-000700080009\jnsr366F.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\rijufoze]ImagePath=[%PROGRAM_FILES%]\03000200-1459956317-0500-0006-000700080009\hnsnF6D3.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\rowugoqo]ImagePath=[%LOCAL_APPDATA%]\0EEF0F3E-1459994803-DF11-AB61-705AB634BB5E\snsz119.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\rijufoze]ImagePath=[%PROGRAM_FILES%]\C1F54C38-1459885244-E411-A26A-F0761C6BD268\hnsz69FB.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\rijufoze]ImagePath=[%PROGRAM_FILES%]\31444335-1459953575-5234-5A39-EC9A7450C08A\hnsqC94A.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\rocufyky]ImagePath=[%PROGRAM_FILES%]\9E90BA80-1459858914-8148-2B4B-E840F2D32DB8\jnsaE3C.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\rijufoze]ImagePath=[%PROGRAM_FILES%]\9E90BA80-1459858914-8148-2B4B-E840F2D32DB8\hnsa2754.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\zutuzuni]ImagePath=[%PROGRAM_FILES%]\0009110C-1451518148-E211-B346-2CD44499AC90\jnsh46AB.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\wucotusy]ImagePath=[%PROGRAM_FILES%]\DE70CF8F-1456786692-DF11-B990-88AE1DDC5BCC\hnszE79.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\zutuzuni]ImagePath=[%PROGRAM_FILES%]\DE70CF8F-1456786692-DF11-B990-88AE1DDC5BCC\jnslF7C3.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\rocufyky]ImagePath=[%PROGRAM_FILES%]\4C4C4544-1459706225-4210-8058-C3C04F464731\jnsn389.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\rijufoze]ImagePath=[%PROGRAM_FILES%]\4C4C4544-1459706225-4210-8058-C3C04F464731\hnsy2500.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\zigipyro]ImagePath=[%LOCAL_APPDATA%]\00000011-1459898892-0000-0000-08606E90FAB3\qnsw553C.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\rocufyky]ImagePath=[%PROGRAM_FILES%]\35444335-1459801443-5933-574E-B05ADAD9B7D4\jnsc7D4A.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\rijufoze]ImagePath=[%PROGRAM_FILES%]\35444335-1459801443-5933-574E-B05ADAD9B7D4\hnsjA641.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\rowugoqo]ImagePath=[%LOCAL_APPDATA%]\03DE0294-1457022465-0507-B306-7F0700080009\snsy3FB0.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\rocufyky]ImagePath=[%PROGRAM_FILES%]\0BC23D0E-1459867625-BBA7-0E46-7C0507FAB926\jnsmC310.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\rijufoze]ImagePath=[%PROGRAM_FILES%]\0BC23D0E-1459867625-BBA7-0E46-7C0507FAB926\hnsxDA79.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\rijufoze]ImagePath=[%PROGRAM_FILES%]\00412F4E-1459698031-0000-0000-0000FFFFFFFF\hnsk6B4.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\zigipyro]ImagePath=[%LOCAL_APPDATA%]\00412F4E-1459844816-0000-0000-0000FFFFFFFF\qnsf425D.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\rocufyky]ImagePath=[%PROGRAM_FILES%]\00412F4E-1459698031-0000-0000-0000FFFFFFFF\jnsbF107.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\rowugoqo]ImagePath=[%LOCAL_APPDATA%]\4C4C4544-1459869630-3310-8037-B7C04F515331\snsg5F6.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\zigipyro]ImagePath=[%LOCAL_APPDATA%]\4C4C4544-1459873428-3310-8037-B7C04F515331\qnsbAA25.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\rocufyky]ImagePath=[%PROGRAM_FILES%]\4C4C4544-1459862312-3310-8037-B7C04F515331\jnsa5EAE.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\rijufoze]ImagePath=[%PROGRAM_FILES%]\4C4C4544-1459862312-3310-8037-B7C04F515331\hnsq76D2.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\dojygici]ImagePath=[%PROGRAM_FILES%]\1A4AC697-1457605906-434A-B05B-047D7BCEC843\jnsc31C.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\wucotusy]ImagePath=[%PROGRAM_FILES%]\1A4AC697-1457605906-434A-B05B-047D7BCEC843\hnsc22CE.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\wucotusy]ImagePath=[%PROGRAM_FILES%]\4065297B-1459338934-E111-A8E8-C0C66A898583\hnsu49AC.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\gerocyni]ImagePath=[%PROGRAM_FILES%]\4065297B-1459338934-E111-A8E8-C0C66A898583\jnsh36E3.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\rocufyky]ImagePath=[%PROGRAM_FILES%]\A043AF6E-1459726673-E111-8B0F-E329F18CAFC8\jnsn1D5.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\rijufoze]ImagePath=[%PROGRAM_FILES%]\A043AF6E-1459726673-E111-8B0F-E329F18CAFC8\hnsd195D.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\rowugoqo]ImagePath=[%LOCAL_APPDATA%]\4C4C4544-1459818123-4710-8050-C3C04F383832\snsn3069.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\rocufyky]ImagePath=[%PROGRAM_FILES%]\4C4C4544-1459803655-4710-8050-C3C04F383832\jnsc50E2.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\rijufoze]ImagePath=[%PROGRAM_FILES%]\4C4C4544-1459803655-4710-8050-C3C04F383832\hnsm6FE8.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\rocufyky]ImagePath=[%PROGRAM_FILES%]\4C4C4544-1459817440-4210-8052-B1C04F445331\jnsi1530.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\rijufoze]ImagePath=[%PROGRAM_FILES%]\4C4C4544-1459817440-4210-8052-B1C04F445331\hnsn3021.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\dojygici]ImagePath=[%PROGRAM_FILES%]\947E8A20-1457541950-DC11-A8C9-001B3843D5A4\jnsv3C69.tmp
  • [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]autoauto=c.bat
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\rowugoqo]ImagePath=[%LOCAL_APPDATA%]\00000000-1459440178-0000-0000-902B347C852A\snsp749.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\zigipyro]ImagePath=[%LOCAL_APPDATA%]\00000000-1459683471-0000-0000-902B347C852A\qnsc2EFE.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\wucotusy]ImagePath=[%PROGRAM_FILES%]\00000000-1459420164-0000-0000-902B347C852A\hnst4977.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\gerocyni]ImagePath=[%PROGRAM_FILES%]\00000000-1459420164-0000-0000-902B347C852A\jnsy1922.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\wucotusy]ImagePath=[%PROGRAM_FILES%]\0E8A647E-1458058845-4138-8727-8EC3A9C80D84\hnsz51CB.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\zigipyro]ImagePath=[%LOCAL_APPDATA%]\753D4690-1459801092-81E2-374C-7054D2416763\qnsf8B77.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\rocufyky]ImagePath=[%PROGRAM_FILES%]\35444335-1459716974-3130-4D35-3CA82AA2C855\jnsn7AA1.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\rijufoze]ImagePath=[%PROGRAM_FILES%]\35444335-1459716974-3130-4D35-3CA82AA2C855\hnszA405.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\rocufyky]ImagePath=[%PROGRAM_FILES%]\596A94C0-1459720905-11DD-AE39-3085A9974D72\jnss4FFE.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\rijufoze]ImagePath=[%PROGRAM_FILES%]\596A94C0-1459720905-11DD-AE39-3085A9974D72\hnsj79CF.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\wucotusy]ImagePath=[%PROGRAM_FILES%]\BEBFBAA0-1459119092-81E2-3ADB-4C72B9FCE20F\hnsv5AD5.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\gerocyni]ImagePath=[%PROGRAM_FILES%]\BEBFBAA0-1459119092-81E2-3ADB-4C72B9FCE20F\jnse328A.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\zigipyro]ImagePath=[%LOCAL_APPDATA%]\F9BAC5B1-1459788617-E411-B2A0-F0761C549AEE\qnsk1586.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\rocufyky]ImagePath=[%PROGRAM_FILES%]\F9BAC5B1-1459677752-E411-B2A0-F0761C549AEE\jnsn9979.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\rijufoze]ImagePath=[%PROGRAM_FILES%]\F9BAC5B1-1459677752-E411-B2A0-F0761C549AEE\hnstB6A7.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\wucotusy]ImagePath=[%PROGRAM_FILES%]\DE9483F1-1458222012-E211-8423-2CD4449C59BC\hnsz5793.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\rowugoqo]ImagePath=[%LOCAL_APPDATA%]\DE9483F1-1458241940-E211-8423-2CD4449C59BC\snsfD827.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\gerocyni]ImagePath=[%PROGRAM_FILES%]\DE9483F1-1458222012-E211-8423-2CD4449C59BC\jnsz2D85.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\wucotusy]ImagePath=[%PROGRAM_FILES%]\038D0240-1459060579-0528-FD06-AF0700080009\hnsg5EE6.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\gerocyni]ImagePath=[%PROGRAM_FILES%]\038D0240-1459060579-0528-FD06-AF0700080009\jnsb3333.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\zigipyro]ImagePath=[%LOCAL_APPDATA%]\686F4273-1458753212-E111-9EF0-00173128E88D\qnsc4840.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\videvupe]ImagePath=[%PROGRAM_FILES%]\686F4273-1446878130-E111-9EF0-00173128E88D\knsbB8B8.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\fowelyri]ImagePath=[%PROGRAM_FILES%]\686F4273-1447656519-E111-9EF0-00173128E88D\knsjDEC5.tmpfs
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\rijufoze]ImagePath=[%PROGRAM_FILES%]\D663D3E0-1459645753-11DC-A5D5-001E685BF09A\hnsnEE85.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\wucotusy]ImagePath=[%PROGRAM_FILES%]\42C79880-1457412840-1014-AEA5-E550B5D4CD22\hnsq71E0.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\dojygici]ImagePath=[%PROGRAM_FILES%]\42C79880-1457412840-1014-AEA5-E550B5D4CD22\jnsg5AAC.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\rijufoze]ImagePath=[%PROGRAM_FILES%]\4012F780-1459641686-1014-B2FF-C9B32E9BB0B1\hnsp171B.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\zutuzuni]ImagePath=[%PROGRAM_FILES%]\00000000-1456773490-0000-0000-D43D7EF4D510\jnscB90C.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\wucotusy]ImagePath=[%PROGRAM_FILES%]\00000000-1456773490-0000-0000-D43D7EF4D510\hnshD229.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\rocufyky]ImagePath=[%PROGRAM_FILES%]\C45E3D1B-1459608718-8DF3-C5D5-94DB32790E17\jnst80DB.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\rijufoze]ImagePath=[%PROGRAM_FILES%]\C45E3D1B-1459608718-8DF3-C5D5-94DB32790E17\hnsm95DC.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\rowugoqo]ImagePath=[%LOCAL_APPDATA%]\919332D8-1459645069-E311-AD5B-201A060F2869\snswB016.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\rocufyky]ImagePath=[%PROGRAM_FILES%]\919332D8-1459641371-E311-AD5B-201A060F2869\jnsu5392.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\rijufoze]ImagePath=[%PROGRAM_FILES%]\919332D8-1459641371-E311-AD5B-201A060F2869\hnsi6910.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\zigipyro]ImagePath=[%LOCAL_APPDATA%]\A840B100-1459704926-1016-8917-D7E95923A2AA\qnsk9D98.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\rocufyky]ImagePath=[%PROGRAM_FILES%]\A840B100-1459700641-1016-8917-D7E95923A2AA\jnsv868D.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\rijufoze]ImagePath=[%PROGRAM_FILES%]\A840B100-1459700641-1016-8917-D7E95923A2AA\hnsl9D2B.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\quwukogi]ImagePath=[%PROGRAM_FILES%]\25B10100-1447133904-11DD-9580-08606E87457A\knsz9C8B.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\dogixuho]ImagePath=[%LOCAL_APPDATA%]\25B10100-1429338234-11DD-9580-08606E87457A\insx8F18.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\bezezexu]ImagePath=[%PROGRAM_FILES%]\25B10100-1447133904-11DD-9580-08606E87457A\jnsf3FEC.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\zigipyro]ImagePath=[%LOCAL_APPDATA%]\4C4C4544-1458142527-3710-804A-CAC04F385231\qnsh4951.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\wucotusy]ImagePath=[%PROGRAM_FILES%]\4C4C4544-1458121983-3710-804A-CAC04F385231\hnsn54F5.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\rocufyky]ImagePath=[%PROGRAM_FILES%]\4B1FE30F-1459575175-B718-75C3-5489AFB59D60\jnsw7436.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\rijufoze]ImagePath=[%PROGRAM_FILES%]\4B1FE30F-1459575175-B718-75C3-5489AFB59D60\hnslAD41.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\zigipyro]ImagePath=[%LOCAL_APPDATA%]\31444335-1459727746-5030-4757-101F74B11EEF\qnsiD6A.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\rocufyky]ImagePath=[%PROGRAM_FILES%]\31444335-1459709976-5030-4757-101F74B11EEF\jnsqF3D0.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\rijufoze]ImagePath=[%PROGRAM_FILES%]\31444335-1459709976-5030-4757-101F74B11EEF\hnsg2628.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\wykujeni]ImagePath=[%PROGRAM_FILES%]\4C4C4544-1446157220-5710-8047-C2C04F44334A\knsq67BF.tmpfs
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\vihinosu]ImagePath=[%PROGRAM_FILES%]\4C4C4544-1446157220-5710-8047-C2C04F44334A\jnsv8D10.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\ninefyci]ImagePath=[%PROGRAM_FILES%]\4C4C4544-1446157220-5710-8047-C2C04F44334A\hnsuA4EF.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\rijufoze]ImagePath=[%PROGRAM_FILES%]\4C4C4544-1459438436-0010-8000-80C04F000000\hnsb809D.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\gerocyni]ImagePath=[%PROGRAM_FILES%]\4C4C4544-1459438436-0010-8000-80C04F000000\jnsg596C.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\rocufyky]ImagePath=[%PROGRAM_FILES%]\22341140-1459520155-11B2-8000-A0C28C85E6B4\jnsd6493.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\rijufoze]ImagePath=[%PROGRAM_FILES%]\22341140-1459520155-11B2-8000-A0C28C85E6B4\hnsm1BAC.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\rijufoze]ImagePath=[%PROGRAM_FILES%]\0E9CDBB8-1459558141-E411-A26A-3CA82A7C0A04\hnsjA3F.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\zigipyro]ImagePath=[%LOCAL_APPDATA%]\0E9CDBB8-1459602508-E411-A26A-3CA82A7C0A04\qnsy386E.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\rocufyky]ImagePath=[%PROGRAM_FILES%]\0E9CDBB8-1459558141-E411-A26A-3CA82A7C0A04\jnsiEDCC.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\rowugoqo]ImagePath=[%LOCAL_APPDATA%]\4C4C4544-1455620068-4A10-8033-B7C04F4B3432\snsz9D1.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\zutuzuni]ImagePath=[%PROGRAM_FILES%]\4C4C4544-1455594780-4A10-8033-B7C04F4B3432\jnsuE198.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\zigipyro]ImagePath=[%LOCAL_APPDATA%]\4C4C4544-1457341286-4A10-8033-B7C04F4B3432\qnscE6B8.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\wucotusy]ImagePath=[%PROGRAM_FILES%]\4C4C4544-1455594780-4A10-8033-B7C04F4B3432\hnsuFBCE.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\zutuzuni]ImagePath=[%PROGRAM_FILES%]\29232EFF-1454064655-11E3-9B5E-8B458200E0FF\jnsk4684.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\wucotusy]ImagePath=[%PROGRAM_FILES%]\29232EFF-1454064655-11E3-9B5E-8B458200E0FF\hnsq65BA.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\zigipyro]ImagePath=[%LOCAL_APPDATA%]\0E212400-1459521587-0920-0620-071206000000\qnsdB9C5.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\wucotusy]ImagePath=[%PROGRAM_FILES%]\60FEFFFF-1458714041-60FE-FFFF-FE60FFFFFE60\hnss6E9E.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\gerocyni]ImagePath=[%PROGRAM_FILES%]\60FEFFFF-1458714041-60FE-FFFF-FE60FFFFFE60\jnsc5014.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\zigipyro]ImagePath=[%LOCAL_APPDATA%]\00000011-1458062221-0000-0000-74D02BE2EBA7\qnsp843F.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\wucotusy]ImagePath=[%PROGRAM_FILES%]\00000011-1458035304-0000-0000-74D02BE2EBA7\hnsa3B3E.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\rowugoqo]ImagePath=[%LOCAL_APPDATA%]\00000011-1458061113-0000-0000-74D02BE2EBA7\snsn9BF3.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\feqihese]ImagePath=[%PROGRAM_FILES%]\D7E90861-1448778176-11DF-2990-6D9912394929\knsm73D.tmpfs
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\xenyduje]ImagePath=[%LOCAL_APPDATA%]\D7E90861-1448798070-11DF-2990-6D9912394929\snsd4955.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\ryrojiry]ImagePath=[%PROGRAM_FILES%]\D7E90861-1448778176-11DF-2990-6D9912394929\hnsn45FA.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\pupivyhi]ImagePath=[%PROGRAM_FILES%]\D7E90861-1448778176-11DF-2990-6D9912394929\jnss4849.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\rocufyky]ImagePath=[%PROGRAM_FILES%]\F2205EE7-1459557084-9E48-ACD5-2EA124579F00\jnso18D4.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\rijufoze]ImagePath=[%PROGRAM_FILES%]\F2205EE7-1459557084-9E48-ACD5-2EA124579F00\hnss3084.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\zigipyro]ImagePath=[%LOCAL_APPDATA%]\D8CE8335-1459628041-11E4-A818-28D244E30FE8\qnsvD0C3.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\rocufyky]ImagePath=[%PROGRAM_FILES%]\D8CE8335-1459526652-11E4-A818-28D244E30FE8\jnst7C11.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\rijufoze]ImagePath=[%PROGRAM_FILES%]\D8CE8335-1459526652-11E4-A818-28D244E30FE8\hnst9539.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\zigipyro]ImagePath=[%LOCAL_APPDATA%]\F86533E0-1459629480-DD11-B195-000C6E5C0FAF\qnsn6D55.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\rocufyky]ImagePath=[%PROGRAM_FILES%]\F86533E0-1459614397-DD11-B195-000C6E5C0FAF\jnse344A.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\rijufoze]ImagePath=[%PROGRAM_FILES%]\F86533E0-1459614397-DD11-B195-000C6E5C0FAF\hnsu5238.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\zigipyro]ImagePath=[%LOCAL_APPDATA%]\00000000-1459619730-0000-0000-00004DF1F548\qnss510E.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\rijufoze]ImagePath=[%PROGRAM_FILES%]\00000000-1459440608-0000-0000-00004DF1F548\hnsfFC5B.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\gerocyni]ImagePath=[%PROGRAM_FILES%]\00000000-1459440608-0000-0000-00004DF1F548\jnsf4319.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\rocufyky]ImagePath=[%PROGRAM_FILES%]\00000000-1459576752-0000-0000-4061867DBF95\jnsc986C.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\rijufoze]ImagePath=[%PROGRAM_FILES%]\00000000-1459576752-0000-0000-4061867DBF95\hnsnB8F9.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\rocufyky]ImagePath=[%PROGRAM_FILES%]\39E86D28-1459614243-C349-E89A-1CB72CAD65AE\jnsm5090.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\rijufoze]ImagePath=[%PROGRAM_FILES%]\39E86D28-1459614243-C349-E89A-1CB72CAD65AE\hnsg710C.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\wucotusy]ImagePath=[%PROGRAM_FILES%]\4C4C4544-1458063823-4410-8050-B2C04F565131\hnsl4B2D.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\zutuzuni]ImagePath=[%PROGRAM_FILES%]\4C4C4544-1453944623-4710-8046-B4C04F51334A\jnsl129.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\zigipyro]ImagePath=[%LOCAL_APPDATA%]\4C4C4544-1456706914-4710-8046-B4C04F51334A\qnsv1E2F.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\wucotusy]ImagePath=[%PROGRAM_FILES%]\4C4C4544-1453944623-4710-8046-B4C04F51334A\hnsv4339.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\rijufoze]ImagePath=[%PROGRAM_FILES%]\1F0024C0-1459462388-1B00-ADA1-C860000A91CD\hnsj3323.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\wucotusy]ImagePath=[%PROGRAM_FILES%]\00000000-1458582837-0000-0000-00241D3D3128\hnsjEB6C.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\gerocyni]ImagePath=[%PROGRAM_FILES%]\00000000-1458582837-0000-0000-00241D3D3128\jnstC757.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\wucotusy]ImagePath=[%PROGRAM_FILES%]\71C1FA20-1459289396-E411-AA1F-F0761C3A8033\hnseF950.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\gerocyni]ImagePath=[%PROGRAM_FILES%]\71C1FA20-1459289396-E411-AA1F-F0761C3A8033\jnstE047.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\zigipyro]ImagePath=[%LOCAL_APPDATA%]\4C4C4544-1459488221-3310-8048-CAC04F435331\qnsw5BE0.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\wucotusy]ImagePath=[%PROGRAM_FILES%]\4C4C4544-1459366420-3310-8048-CAC04F435331\hnsbAB01.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\gerocyni]ImagePath=[%PROGRAM_FILES%]\4C4C4544-1459366420-3310-8048-CAC04F435331\jnsg85A4.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\xykiqery]ImagePath=[%PROGRAM_FILES%]\DB813858-1439642060-0344-7600-0018F3667C1F\knsk47B.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\xinovudi]ImagePath=[%PROGRAM_FILES%]\DB813858-1439642060-0344-7600-0018F3667C1F\knsv2D5.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\qenyjotu]ImagePath=[%PROGRAM_FILES%]\DB813858-1439642060-0344-7600-0018F3667C1F\knsa3CE.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\libymymy]ImagePath=[%PROGRAM_FILES%]\DB813858-1439642060-0344-7600-0018F3667C1F\knsr3AF.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\kipysoqy]ImagePath=[%PROGRAM_FILES%]\DB813858-1439642060-0344-7600-0018F3667C1F\knst6EF.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\cetotowu]ImagePath=[%PROGRAM_FILES%]\DB813858-1439642060-0344-7600-0018F3667C1F\knsn739.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\zigipyro]ImagePath=[%LOCAL_APPDATA%]\0B2ED6A7-1459508862-DF11-9791-88AE1D30B743\qnsn9D2B.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\wucotusy]ImagePath=[%PROGRAM_FILES%]\0B2ED6A7-1459422765-DF11-9791-88AE1D30B743\hnsi681C.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\gerocyni]ImagePath=[%PROGRAM_FILES%]\0B2ED6A7-1459422765-DF11-9791-88AE1D30B743\jnst49E1.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\zigipyro]ImagePath=[%LOCAL_APPDATA%]\4C4C4544-1459513152-3210-8032-C7C04F393332\qnsiDFF4.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\rowugoqo]ImagePath=[%LOCAL_APPDATA%]\4C4C4544-1459512490-3210-8032-C7C04F393332\snsuC66C.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\rocufyky]ImagePath=[%PROGRAM_FILES%]\4C4C4544-1459497916-3210-8032-C7C04F393332\jnsd95C9.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\rijufoze]ImagePath=[%PROGRAM_FILES%]\4C4C4544-1459497916-3210-8032-C7C04F393332\hnsyECD0.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\zigipyro]ImagePath=[%LOCAL_APPDATA%]\038D0240-1459408831-056B-1806-6F0700080009\qnsaC6E8.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\wucotusy]ImagePath=[%PROGRAM_FILES%]\038D0240-1459325471-056B-1806-6F0700080009\hnspC49D.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\rowugoqo]ImagePath=[%LOCAL_APPDATA%]\038D0240-1459350756-056B-1806-6F0700080009\snskC104.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\gerocyni]ImagePath=[%PROGRAM_FILES%]\038D0240-1459325471-056B-1806-6F0700080009\jnskAA48.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\wucotusy]ImagePath=[%PROGRAM_FILES%]\00000011-1459347068-0000-0000-74D02B46D8D5\hnsaA4AC.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\gerocyni]ImagePath=[%PROGRAM_FILES%]\00000011-1459347068-0000-0000-74D02B46D8D5\jnsb1C11.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\wucotusy]ImagePath=[%PROGRAM_FILES%]\038D0240-1459386667-0508-6B06-D30700080009\hnsm2620.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\rowugoqo]ImagePath=[%LOCAL_APPDATA%]\038D0240-1459411968-0508-6B06-D30700080009\snsc57BA.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\rijufoze]ImagePath=[%PROGRAM_FILES%]\F72BEF00-1459448890-81DF-2909-485B39178222\hnsf311.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\gerocyni]ImagePath=[%PROGRAM_FILES%]\F72BEF00-1459448890-81DF-2909-485B39178222\jnsuE9BA.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\zigipyro]ImagePath=[%LOCAL_APPDATA%]\9F988354-1458993967-11E3-9C43-C62901D897BB\qnsn2153.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\wucotusy]ImagePath=[%PROGRAM_FILES%]\9F988354-1458971244-11E3-9C43-C62901D897BB\hnsc3B9E.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\gerocyni]ImagePath=[%PROGRAM_FILES%]\9F988354-1458971244-11E3-9C43-C62901D897BB\jnsl2053.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\zigipyro]ImagePath=[%LOCAL_APPDATA%]\4C4C4544-1459461752-5710-8042-C6C04F4C3532\qnsf3E2D.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\wucotusy]ImagePath=[%PROGRAM_FILES%]\4C4C4544-1459427031-5710-8042-C6C04F4C3532\hnsa6D06.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\gerocyni]ImagePath=[%PROGRAM_FILES%]\4C4C4544-1459427031-5710-8042-C6C04F4C3532\jnso4306.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\wucotusy]ImagePath=[%PROGRAM_FILES%]\37464E43-1457769888-3631-5738-001B24373B22\hnsg5692.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\dojygici]ImagePath=[%PROGRAM_FILES%]\37464E43-1457769888-3631-5738-001B24373B22\jnsx3F5F.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\zigipyro]ImagePath=[%LOCAL_APPDATA%]\03D40274-1459106819-0574-5106-660700080009\qnsxA183.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\wucotusy]ImagePath=[%PROGRAM_FILES%]\03D40274-1458626413-0574-5106-660700080009\hnse452C.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\gerocyni]ImagePath=[%PROGRAM_FILES%]\03D40274-1458626413-0574-5106-660700080009\jnsoE658.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\gerocyni]ImagePath=[%PROGRAM_FILES%]\01010101-1458313733-0101-0101-010101010101\jnsmF392.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\zigipyro]ImagePath=[%LOCAL_APPDATA%]\81D85C83-1457535274-CB11-8C36-D1199BD9D92C\qnsy62C.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\dojygici]ImagePath=[%PROGRAM_FILES%]\81D85C83-1457168172-CB11-8C36-D1199BD9D92C\jnsoCD20.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\zigipyro]ImagePath=[%LOCAL_APPDATA%]\34356455-1459433043-7C77-312C-F3D0494E232D\qnsv2CBF.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\woxojuvu]ImagePath=[%PROGRAM_FILES%]\34356455-1448194520-7C77-312C-F3D0494E232D\jnsc5022.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\sycizyhy]ImagePath=[%PROGRAM_FILES%]\34356455-1448194520-7C77-312C-F3D0494E232D\hnssF9EA.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\hyverumu]ImagePath=[%PROGRAM_FILES%]\34356455-1438338930-7C77-312C-F3D0494E232D\jnsn8258.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\fexynetu]ImagePath=[%LOCAL_APPDATA%]\34356455-1448219889-7C77-312C-F3D0494E232D\snsn4DC3.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\comyninu]ImagePath=[%PROGRAM_FILES%]\34356455-1438338930-7C77-312C-F3D0494E232D\hnsi9FC9.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\zigipyro]ImagePath=[%LOCAL_APPDATA%]\00000000-1458053430-0000-0000-50E5498DD11D\qnsrC75B.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\wucotusy]ImagePath=[%PROGRAM_FILES%]\00000000-1458027243-0000-0000-50E5498DD11D\hnsq2478.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\rowugoqo]ImagePath=[%LOCAL_APPDATA%]\00000000-1458052724-0000-0000-50E5498DD11D\snshF76F.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\gerocyni]ImagePath=[%PROGRAM_FILES%]\00000000-1458027243-0000-0000-50E5498DD11D\jnsqFF4A.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\zigipyro]ImagePath=[%LOCAL_APPDATA%]\79FD8C80-1459426544-11DC-A14B-10BF48B9B58B\qnscB34A.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\wucotusy]ImagePath=[%PROGRAM_FILES%]\79FD8C80-1459395698-11DC-A14B-10BF48B9B58B\hnsfC525.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\rowugoqo]ImagePath=[%LOCAL_APPDATA%]\79FD8C80-1459424655-11DC-A14B-10BF48B9B58B\snslE783.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\gerocyni]ImagePath=[%PROGRAM_FILES%]\79FD8C80-1459395698-11DC-A14B-10BF48B9B58B\jnsfAE49.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\zigipyro]ImagePath=[%LOCAL_APPDATA%]\98ECB4C7-1458745251-11E3-B93F-649B230F20B5\qnsz947.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\zutuzuni]ImagePath=[%PROGRAM_FILES%]\98ECB4C7-1456230023-11E3-B93F-649B230F20B5\jnss9AFE.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\wucotusy]ImagePath=[%PROGRAM_FILES%]\98ECB4C7-1456230023-11E3-B93F-649B230F20B5\hnsjB86B.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\zutuzuni]ImagePath=[%PROGRAM_FILES%]\4C4C4544-1454198841-3310-8034-C3C04F384253\jnsnA007.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\zigipyro]ImagePath=[%LOCAL_APPDATA%]\4C4C4544-1459340359-3310-8034-C3C04F384253\qnsc4368.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\wucotusy]ImagePath=[%PROGRAM_FILES%]\4C4C4544-1454198841-3310-8034-C3C04F384253\hnsnC3AF.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\wucotusy]ImagePath=[%PROGRAM_FILES%]\4BC5AFD9-1459287667-11E0-9231-52E22F079CB1\hnsxC2F.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\rowugoqo]ImagePath=[%LOCAL_APPDATA%]\D778E4A2-1459273628-E511-A26A-308D99F74904\snsu8014.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\wucotusy]ImagePath=[%PROGRAM_FILES%]\03000200-1458800075-0500-0006-000700080009\hnsrDBA7.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\gerocyni]ImagePath=[%PROGRAM_FILES%]\03000200-1458800075-0500-0006-000700080009\jnswC00A.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\rinizisu]ImagePath=[%APPDATA%]\4C4C4544-1432792534-2010-8020-A0C04F202020\hnsl8E8.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\pogifipi]ImagePath=[%APPDATA%]\4C4C4544-1432792534-2010-8020-A0C04F202020\jnsvD7C8.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\holyxuti]ImagePath=[%LOCAL_APPDATA%]\4C4C4544-1432812626-2010-8020-A0C04F202020\snsxE005.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\zigipyro]ImagePath=[%LOCAL_APPDATA%]\60060DE3-1459352545-E011-B8DA-00266C9B3CBB\qnskE26C.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\wucotusy]ImagePath=[%PROGRAM_FILES%]\60060DE3-1459322343-E011-B8DA-00266C9B3CBB\hnsk60C2.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\rowugoqo]ImagePath=[%LOCAL_APPDATA%]\60060DE3-1459347643-E011-B8DA-00266C9B3CBB\snsk9078.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\gerocyni]ImagePath=[%PROGRAM_FILES%]\60060DE3-1459322343-E011-B8DA-00266C9B3CBB\jnsr49ED.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\wybopito]ImagePath=[%PROGRAM_FILES%]\4358AEA8-1448870506-E411-A7B9-00101859A779\knswF45.tmpfs
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\gerocyni]ImagePath=[%PROGRAM_FILES%]\00000000-1459324579-0000-0807-060504030201\jnspF1D.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\sulukevo]ImagePath=[%APPDATA%]\33676102-1425215007-E111-BD1D-001E674337E1\nsuB6AB.tmpfs
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\zigipyro]ImagePath=[%LOCAL_APPDATA%]\613C22EE-1459278028-11E1-BBDA-3531ABCCE839\qnscC884.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\wucotusy]ImagePath=[%PROGRAM_FILES%]\D96B37CD-1459250394-F944-B1A0-2C600CD55EC2\hnsz41E9.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\gerocyni]ImagePath=[%PROGRAM_FILES%]\D96B37CD-1459250394-F944-B1A0-2C600CD55EC2\jnsq2BA0.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\zutuzuni]ImagePath=[%PROGRAM_FILES%]\55C3ECF8-1451457148-724B-9641-00E0B803ACA2\jnsz47AF.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\zigipyro]ImagePath=[%LOCAL_APPDATA%]\55C3ECF8-1459285106-724B-9641-00E0B803ACA2\qnso7C08.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\wucotusy]ImagePath=[%PROGRAM_FILES%]\55C3ECF8-1451457148-724B-9641-00E0B803ACA2\hnsz5DEF.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\woforemu]ImagePath=[%LOCAL_APPDATA%]\55C3ECF8-1451482422-724B-9641-00E0B803ACA2\snsk3624.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\dojygici]ImagePath=[%PROGRAM_FILES%]\4C4C4544-1456992439-4710-8050-B5C04F423253\jnsoD466.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\wucotusy]ImagePath=[%PROGRAM_FILES%]\00000011-1458561243-0000-0000-D850E6F17F97\hnsm932C.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\wucotusy]ImagePath=[%PROGRAM_FILES%]\BDB01889-1459176479-2F4A-6A73-2C768AD52400\hnsbC249.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\zutuzuni]ImagePath=[%PROGRAM_FILES%]\5D6E8575-1453972636-E211-83C6-B888E3FF5034\jnswA2B6.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\zigipyro]ImagePath=[%LOCAL_APPDATA%]\5D6E8575-1459252012-E211-83C6-B888E3FF5034\qnsw109A.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\wucotusy]ImagePath=[%PROGRAM_FILES%]\5D6E8575-1453972636-E211-83C6-B888E3FF5034\hnslE157.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\wucotusy]ImagePath=[%PROGRAM_FILES%]\D1F03FA7-1459265163-11DE-A2AD-8CB4D24E00E4\hnsn313F.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\wucotusy]ImagePath=[%PROGRAM_FILES%]\00000000-1459210272-0000-0000-0019DBB5DCD7\hnsc7BF2.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\gerocyni]ImagePath=[%PROGRAM_FILES%]\00000000-1459210272-0000-0000-0019DBB5DCD7\jnsw5FFC.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\wucotusy]ImagePath=[%PROGRAM_FILES%]\4B435451-1459093833-3633-4432-10BF4830484F\hnsc88E0.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\gerocyni]ImagePath=[%PROGRAM_FILES%]\4B435451-1459093833-3633-4432-10BF4830484F\jnsh70EB.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\wucotusy]ImagePath=[%PROGRAM_FILES%]\1E006AE0-1459191180-6300-9D48-74D02B25CAB4\hnsxEFBD.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\gerocyni]ImagePath=[%PROGRAM_FILES%]\1E006AE0-1459191180-6300-9D48-74D02B25CAB4\jnsnDA29.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\sefecewo]ImagePath=[%PROGRAM_FILES%]\5E4442E0-1439677238-7D4A-A55D-785A28E2D9EB\knse7B8D.tmpfs
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\hyverumu]ImagePath=[%PROGRAM_FILES%]\5E4442E0-1439677238-7D4A-A55D-785A28E2D9EB\jnsaBE97.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\comyninu]ImagePath=[%PROGRAM_FILES%]\5E4442E0-1439677238-7D4A-A55D-785A28E2D9EB\hnspD54E.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\zigipyro]ImagePath=[%LOCAL_APPDATA%]\34444335-1459180638-3139-3139-6CC21778E2E3\qnsk3080.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\wucotusy]ImagePath=[%PROGRAM_FILES%]\A3056400-1459077408-11DD-94A1-002354BEC71F\hnsx13B7.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\gerocyni]ImagePath=[%PROGRAM_FILES%]\A3056400-1459077408-11DD-94A1-002354BEC71F\jnscFA22.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\zutuzuni]ImagePath=[%PROGRAM_FILES%]\1962EEFE-1451613589-0E9B-23C1-D3A9332E886A\jnsj9C55.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\wucotusy]ImagePath=[%PROGRAM_FILES%]\1962EEFE-1451613589-0E9B-23C1-D3A9332E886A\hnsuC56A.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\zutuzuni]ImagePath=[%PROGRAM_FILES%]\5BC10FD6-1453886517-8746-9703-8E6490F3B6CA\jnsk668C.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\wucotusy]ImagePath=[%PROGRAM_FILES%]\5BC10FD6-1453886517-8746-9703-8E6490F3B6CA\hnsf810B.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\zutuzuni]ImagePath=[%PROGRAM_FILES%]\03000200-1453189371-0500-0006-000700080009\jnsw4894.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\zigipyro]ImagePath=[%LOCAL_APPDATA%]\03000200-1453217377-0500-0006-000700080009\qnswD1F0.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\wucotusy]ImagePath=[%PROGRAM_FILES%]\03000200-1453189371-0500-0006-000700080009\hnsh66FF.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\zutuzuni]ImagePath=[%PROGRAM_FILES%]\00000000-1452148529-0000-0000-00241D04C65D\jnsjA365.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\wucotusy]ImagePath=[%PROGRAM_FILES%]\00000000-1452148529-0000-0000-00241D04C65D\hnstBACD.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\gerocyni]ImagePath=[%PROGRAM_FILES%]\9DFB123D-1459162717-11E0-BBD8-2B6339F43CD9\jnsy668.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\wucotusy]ImagePath=[%PROGRAM_FILES%]\9DFB123D-1459162717-11E0-BBD8-2B6339F43CD9\hnsv25C9.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\wucotusy]ImagePath=[%PROGRAM_FILES%]\8FED1BE1-1458408476-E311-B2A0-F8A963911ED3\hnsu331C.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\gerocyni]ImagePath=[%PROGRAM_FILES%]\8FED1BE1-1458408476-E311-B2A0-F8A963911ED3\jnseD9DE.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\wucotusy]ImagePath=[%PROGRAM_FILES%]\4C4C4544-1459052494-4E10-804B-B5C04F4C5031\hnsvB609.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\rowugoqo]ImagePath=[%LOCAL_APPDATA%]\4C4C4544-1459077836-4E10-804B-B5C04F4C5031\snsw6654.tmp