Exterminate It! Antimalware

malpedia

Known threats:699,742 Last Update:October 27, 11:19

Testimonials

Just want to say that apparently your Exterminate It has worked like a charm. I was infected with a most troublesome Malware Trojan that kept replicating every time McAfee found, blocked and removed it... most annoying for several days... until Mr. Google led me to your door. What a God send!

With thanks,

Tom S.

MultiPlug- Registry Values List

This is a complete list of MultiPlug registry values collected by Exterminate It!. If you find any of these registry values on your PC, your computer is very likely to be infected with the MultiPlug - adware.

IMPORTANT: Because the registry is a core component of your Windows system, it is strongly recommended that you back up the registry before you begin deleting keys and values. For information about backing up the Windows registry, refer to the Registry Editor online help.
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\gerocyni]ImagePath=[%PROGRAM_FILES%]\4C4C4544-1459052494-4E10-804B-B5C04F4C5031\jnsf99A1.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\wucotusy]ImagePath=[%PROGRAM_FILES%]\8E846414-1459056262-4A72-6B12-B902FA3A589A\hnsg3EE.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\zutuzuni]ImagePath=[%PROGRAM_FILES%]\60CB5C81-1455791633-DE11-845A-E87F8695D777\jnsk8630.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\wucotusy]ImagePath=[%PROGRAM_FILES%]\60CB5C81-1455791633-DE11-845A-E87F8695D777\hnseB858.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\lehicewu]ImagePath=[%PROGRAM_FILES%]\28AD3E60-1443756394-81E4-245E-382C4A3280EC\jnsyE1BE.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\hopisore]ImagePath=[%PROGRAM_FILES%]\28AD3E60-1443756394-81E4-245E-382C4A3280EC\knsx7DEF.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\gyvixodu]ImagePath=[%PROGRAM_FILES%]\28AD3E60-1443756394-81E4-245E-382C4A3280EC\hnszFE7F.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\soposuqy]ImagePath=[%PROGRAM_FILES%]\61A6D680-1439032090-1ADA-900F-592D57EE2962\knsiC4F9.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\hyverumu]ImagePath=[%PROGRAM_FILES%]\61A6D680-1439032090-1ADA-900F-592D57EE2962\jnsi762D.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\geviwire]ImagePath=[%PROGRAM_FILES%]\61A6D680-1439032090-1ADA-900F-592D57EE2962\knsiE745.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\zigipyro]ImagePath=[%LOCAL_APPDATA%]\4C4C4544-1458834629-4C10-8054-B8C04F443032\qnsw6B84.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\wucotusy]ImagePath=[%PROGRAM_FILES%]\4C4C4544-1458664816-4C10-8054-B8C04F443032\hnslADEB.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\gerocyni]ImagePath=[%PROGRAM_FILES%]\4C4C4544-1458664816-4C10-8054-B8C04F443032\jnsg8E68.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\zigipyro]ImagePath=[%LOCAL_APPDATA%]\70397F30-1459098003-11DB-9200-CAE314710F13\qnsyF836.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\wucotusy]ImagePath=[%PROGRAM_FILES%]\32444335-1459061967-5232-3738-28924A58DA00\hnsgB87C.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\gerocyni]ImagePath=[%PROGRAM_FILES%]\32444335-1459061967-5232-3738-28924A58DA00\jnsy99C6.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\wucotusy]ImagePath=[%PROGRAM_FILES%]\4E435451-1459030731-3041-4332-50465D3CC577\hnskEBF2.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\rowugoqo]ImagePath=[%LOCAL_APPDATA%]\4E435451-1459012815-3041-4332-50465D3CC577\snsjDAF5.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\gerocyni]ImagePath=[%PROGRAM_FILES%]\4E435451-1459030731-3041-4332-50465D3CC577\jnskB8DA.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\wucotusy]ImagePath=[%PROGRAM_FILES%]\4C4C4544-1457647999-5410-8057-C3C04F355A31\hnso770C.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\dojygici]ImagePath=[%PROGRAM_FILES%]\4C4C4544-1457647999-5410-8057-C3C04F355A31\jnsj5F0D.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\zigipyro]ImagePath=[%LOCAL_APPDATA%]\4C4C4544-1459053750-5210-804A-C7C04F374731\qnsj8E9.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\wucotusy]ImagePath=[%PROGRAM_FILES%]\4C4C4544-1459061469-5210-804A-C7C04F374731\hnso4E60.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\gerocyni]ImagePath=[%PROGRAM_FILES%]\4C4C4544-1459061469-5210-804A-C7C04F374731\jnsy15F0.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\wucotusy]ImagePath=[%PROGRAM_FILES%]\34444335-1458377025-3834-5259-6CC217660BC3\hnse3742.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\wucotusy]ImagePath=[%PROGRAM_FILES%]\4C4C4544-1459017524-3410-8047-C8C04F325831\hnskCD62.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\gerocyni]ImagePath=[%PROGRAM_FILES%]\4C4C4544-1459017524-3410-8047-C8C04F325831\jnseB16C.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\rowugoqo]ImagePath=[%LOCAL_APPDATA%]\00000000-1459015312-0000-0000-001D7D03F9E6\snso1A40.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\wucotusy]ImagePath=[%PROGRAM_FILES%]\671F147F-1458893978-11E4-A511-6076960000FF\hnst9071.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\gerocyni]ImagePath=[%PROGRAM_FILES%]\671F147F-1458893978-11E4-A511-6076960000FF\jnsu6D66.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\zigipyro]ImagePath=[%LOCAL_APPDATA%]\FFFFFFFF-1458995184-FFFF-FFFF-FFFFFFFFFFFF\qnsc2934.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\wucotusy]ImagePath=[%PROGRAM_FILES%]\FFFFFFFF-1458991830-FFFF-FFFF-FFFFFFFFFFFF\hnsq9722.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\gerocyni]ImagePath=[%PROGRAM_FILES%]\FFFFFFFF-1458991830-FFFF-FFFF-FFFFFFFFFFFF\jnsq7FAA.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\wucotusy]ImagePath=[%PROGRAM_FILES%]\A3FB58C8-1458865232-E411-A26A-5CB901FCD8C0\hnspC469.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\gerocyni]ImagePath=[%PROGRAM_FILES%]\A3FB58C8-1458865232-E411-A26A-5CB901FCD8C0\jnsqA0C2.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\wucotusy]ImagePath=[%PROGRAM_FILES%]\438E706A-1458909054-11E4-A818-28D244B3D3E0\hnsp25B.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\gerocyni]ImagePath=[%PROGRAM_FILES%]\438E706A-1458909054-11E4-A818-28D244B3D3E0\jnsqEA2E.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\zutuzuni]ImagePath=[%PROGRAM_FILES%]\4C4C4544-1455560629-4710-8032-CAC04F594A31\jnsfACB.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\zigipyro]ImagePath=[%LOCAL_APPDATA%]\4C4C4544-1458912410-4710-8032-CAC04F594A31\qnsmE966.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\wucotusy]ImagePath=[%PROGRAM_FILES%]\4C4C4544-1455560629-4710-8032-CAC04F594A31\hnsa31AE.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\zigipyro]ImagePath=[%LOCAL_APPDATA%]\4C4C4544-1458782588-3810-805A-C4C04F354253\qnse90F2.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\wucotusy]ImagePath=[%PROGRAM_FILES%]\4C4C4544-1458761855-3810-805A-C4C04F354253\hnsyB9C6.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\rowugoqo]ImagePath=[%LOCAL_APPDATA%]\4C4C4544-1458781918-3810-805A-C4C04F354253\snsv573D.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\gerocyni]ImagePath=[%PROGRAM_FILES%]\4C4C4544-1458761855-3810-805A-C4C04F354253\jnsy90A2.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\wucotusy]ImagePath=[%PROGRAM_FILES%]\232B8020-1458642321-11D9-A298-C86000C5FBB6\hnsm8828.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\zutuzuni]ImagePath=[%PROGRAM_FILES%]\430C3FA8-1456414977-11E4-8DBA-2809C89D1500\jnsa54BA.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\wucotusy]ImagePath=[%PROGRAM_FILES%]\430C3FA8-1456414977-11E4-8DBA-2809C89D1500\hnsq6F1A.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\zutuzuni]ImagePath=[%PROGRAM_FILES%]\36323138-1452463769-584D-3235-32393030524D\jnsf167.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\zigipyro]ImagePath=[%LOCAL_APPDATA%]\36323138-1458905402-584D-3235-32393030524D\qnsh472F.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\wucotusy]ImagePath=[%PROGRAM_FILES%]\36323138-1452463769-584D-3235-32393030524D\hnsf17F5.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\zigipyro]ImagePath=[%LOCAL_APPDATA%]\36323138-1458909801-584D-3235-32393030524D\qnsc3036.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\wucotusy]ImagePath=[%PROGRAM_FILES%]\4C4C4544-1457638712-5910-804A-B8C04F485631\hnsvA1FF.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\dojygici]ImagePath=[%PROGRAM_FILES%]\4C4C4544-1457638712-5910-804A-B8C04F485631\jnsg8460.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\zigipyro]ImagePath=[%LOCAL_APPDATA%]\C15500B3-1458935413-E111-A3A4-DC0EA1A60C8A\qnsh7F91.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\wucotusy]ImagePath=[%PROGRAM_FILES%]\C15500B3-1458067002-E111-A3A4-DC0EA1A60C8A\hnshE6A1.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\rowugoqo]ImagePath=[%LOCAL_APPDATA%]\C15500B3-1458077901-E111-A3A4-DC0EA1A60C8A\snsh226D.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\gerocyni]ImagePath=[%PROGRAM_FILES%]\C15500B3-1458067002-E111-A3A4-DC0EA1A60C8A\jnsbCB47.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\wucotusy]ImagePath=[%PROGRAM_FILES%]\AF3C7300-1458696983-11DD-80E4-5442495F07D5\hnsb50BD.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\gerocyni]ImagePath=[%PROGRAM_FILES%]\AF3C7300-1458696983-11DD-80E4-5442495F07D5\jnsw5302.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\gerocyni]ImagePath=[%PROGRAM_FILES%]\8AC4D266-1458862700-E111-83C6-B888E36A7319\jnsa6C8.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\wucotusy]ImagePath=[%PROGRAM_FILES%]\8AC4D266-1458862700-E111-83C6-B888E36A7319\hnsc22EE.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\rowugoqo]ImagePath=[%LOCAL_APPDATA%]\32292ECF-1458846586-DD11-B234-0013D4D9C9BF\snspB441.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\wucotusy]ImagePath=[%PROGRAM_FILES%]\03AA02FC-1458697240-052E-E606-8E0700080009\hnse5602.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\gerocyni]ImagePath=[%PROGRAM_FILES%]\03AA02FC-1458697240-052E-E606-8E0700080009\jnsl34EB.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\wucotusy]ImagePath=[%PROGRAM_FILES%]\35453035-1458634544-3043-3743-4437FFFFFFFF\hnsd723D.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\gerocyni]ImagePath=[%PROGRAM_FILES%]\35453035-1458634544-3043-3743-4437FFFFFFFF\jnsy4EC4.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\nozuwosu]ImagePath=[%PROGRAM_FILES%]\03000200-1445262278-0500-0006-000700080009\jnsqF37B.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\hidekoqe]ImagePath=[%LOCAL_APPDATA%]\03000200-1448557346-0500-0006-000700080009\qnsxC175.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\hefykoto]ImagePath=[%PROGRAM_FILES%]\03000200-1445262278-0500-0006-000700080009\knsqC6AB.tmpfs
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\gefojewy]ImagePath=[%LOCAL_APPDATA%]\03000200-1445269540-0500-0006-000700080009\snslA36B.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\dijojyvi]ImagePath=[%PROGRAM_FILES%]\03000200-1445262278-0500-0006-000700080009\hnsg2BEB.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\wucotusy]ImagePath=[%PROGRAM_FILES%]\4C4C4544-1458075815-4A10-8047-C4C04F383332\hnsgC72.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\rowugoqo]ImagePath=[%LOCAL_APPDATA%]\4C4C4544-1458061575-4A10-8047-C4C04F383332\snsq738.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\gerocyni]ImagePath=[%PROGRAM_FILES%]\4C4C4544-1458075815-4A10-8047-C4C04F383332\jnsbF4C1.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\wucotusy]ImagePath=[%PROGRAM_FILES%]\19621060-1458811976-11DD-94F3-7824AF40F8B9\hnsf5707.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\gerocyni]ImagePath=[%PROGRAM_FILES%]\19621060-1458811976-11DD-94F3-7824AF40F8B9\jnsf3977.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\zutuzuni]ImagePath=[%PROGRAM_FILES%]\6011458B-1455406977-DE11-BBA9-00266C3BF4FB\jnsvD7.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\wucotusy]ImagePath=[%PROGRAM_FILES%]\6011458B-1455406977-DE11-BBA9-00266C3BF4FB\hnsv2E8D.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\wucotusy]ImagePath=[%PROGRAM_FILES%]\4C4C4544-1458478235-5910-8052-C7C04F444E31\hnsvC999.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\gerocyni]ImagePath=[%PROGRAM_FILES%]\4C4C4544-1458478235-5910-8052-C7C04F444E31\jnspA313.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\wucotusy]ImagePath=[%PROGRAM_FILES%]\98FAA24C-1458741672-C82E-3124-099687DA906C\hnsiDCE8.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\gerocyni]ImagePath=[%PROGRAM_FILES%]\98FAA24C-1458741672-C82E-3124-099687DA906C\jnstBA1B.tmp
  • [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]autoauto=45524600.bat
  • [HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]dutoauto=[%SYSTEM_DRIVE%]\a\wincheckfe.exe
  • [HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]interpee=[%SYSTEM_DRIVE%]\a\internetport3.exe
  • [HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]rutoauto=45524600.bat
  • [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]interpee=[%SYSTEM_DRIVE%]\a\internetport3.exe
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\wucotusy]ImagePath=[%PROGRAM_FILES%]\1231B967-1458808452-1D41-BE93-F0795980AAF3\hnsgC65E.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\rowugoqo]ImagePath=[%LOCAL_APPDATA%]\1231B967-1458783352-1D41-BE93-F0795980AAF3\snsgC60A.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\gerocyni]ImagePath=[%PROGRAM_FILES%]\1231B967-1458808452-1D41-BE93-F0795980AAF3\jnssA650.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\wucotusy]ImagePath=[%PROGRAM_FILES%]\928AA4E0-1458777673-11DC-B706-08606EF22EEA\hnsiA3DA.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\rowugoqo]ImagePath=[%LOCAL_APPDATA%]\928AA4E0-1458752568-11DC-B706-08606EF22EEA\snsvCF0B.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\gerocyni]ImagePath=[%PROGRAM_FILES%]\928AA4E0-1458777673-11DC-B706-08606EF22EEA\jnsd8AA3.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\wucotusy]ImagePath=[%PROGRAM_FILES%]\03D40274-1458854163-0501-3106-700700080009\hnso8232.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\gerocyni]ImagePath=[%PROGRAM_FILES%]\03D40274-1458854163-0501-3106-700700080009\jnsc661C.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\vecybety]ImagePath=[%APPDATA%]\E0B52C60-1433859285-B942-9430-AC9E174116CD\knsiF43F.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\wucotusy]ImagePath=[%PROGRAM_FILES%]\39409087-1453529081-9D93-CC72-74D02BCA76E7\hnsj7391.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\zigipyro]ImagePath=[%LOCAL_APPDATA%]\C76C2F52-1458666106-E184-61E0-14147A147BFB\qnsdD20D.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\wucotusy]ImagePath=[%PROGRAM_FILES%]\C76C2F52-1457588303-E184-61E0-14147A147BFB\hnsyE5C6.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\dojygici]ImagePath=[%PROGRAM_FILES%]\C76C2F52-1457588303-E184-61E0-14147A147BFB\jnsoCC22.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\dyvehiqu]ImagePath=[%APPDATA%]\DCF59000-1432904173-0000-0000-000000000000\hnsb7B98.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\zigipyro]ImagePath=[%LOCAL_APPDATA%]\4C4C4544-1458740480-5010-8047-B2C04F513132\qnsf350F.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\wucotusy]ImagePath=[%PROGRAM_FILES%]\C0BDA7D5-1458526408-E111-923F-B888E30624C2\hnsm5CB8.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\gerocyni]ImagePath=[%PROGRAM_FILES%]\C0BDA7D5-1458526408-E111-923F-B888E30624C2\jnsb37E7.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\wucotusy]ImagePath=[%PROGRAM_FILES%]\48EB9F00-1458756426-81E3-21B2-2025642E800B\hnszD631.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\rowugoqo]ImagePath=[%LOCAL_APPDATA%]\48EB9F00-1458756508-81E3-21B2-2025642E800B\snsiB8C0.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\gerocyni]ImagePath=[%PROGRAM_FILES%]\48EB9F00-1458756426-81E3-21B2-2025642E800B\jnswA962.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\zigipyro]ImagePath=[%LOCAL_APPDATA%]\6F4907E0-1458772641-11DD-9786-10C37BA13E9C\qnskA3F4.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\wucotusy]ImagePath=[%PROGRAM_FILES%]\6F4907E0-1458755809-11DD-9786-10C37BA13E9C\hnsu8FCC.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\keneqiwe]ImagePath=[%PROGRAM_FILES%]\F99A2DD7-1448538844-11DC-BBDA-C4320F32001C\knsi616.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\pupivyhi]ImagePath=[%PROGRAM_FILES%]\F99A2DD7-1448538844-11DC-BBDA-C4320F32001C\jnsmF966.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\hidekoqe]ImagePath=[%LOCAL_APPDATA%]\F99A2DD7-1450669887-11DC-BBDA-C4320F32001C\qnsr13A7.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\wucotusy]ImagePath=[%PROGRAM_FILES%]\AFC41600-1454540961-81E1-26A6-10BF481BF375\hnslF9EB.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\rihenudu]ImagePath=[%LOCAL_APPDATA%]\44313030-1425072040-3944-4332-3443FFFFFFFF\cnsxB78.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\wucotusy]ImagePath=[%PROGRAM_FILES%]\BAF33271-1458714944-E311-A35D-201A062CC925\hnsh5A53.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\gerocyni]ImagePath=[%PROGRAM_FILES%]\BAF33271-1458714944-E311-A35D-201A062CC925\jnsy35D2.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\wucotusy]ImagePath=[%PROGRAM_FILES%]\4C4C4544-1458103288-4210-8056-C7C04F313632\hnsw9572.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\gerocyni]ImagePath=[%PROGRAM_FILES%]\4C4C4544-1458103288-4210-8056-C7C04F313632\jnsw6EBE.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\wucotusy]ImagePath=[%PROGRAM_FILES%]\796AB638-1458533994-11E4-B57F-68F7284FC161\hnsuA3B2.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\zigipyro]ImagePath=[%LOCAL_APPDATA%]\33444335-1458702982-3730-4C32-7446A08A6831\qnsuAF84.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\wucotusy]ImagePath=[%PROGRAM_FILES%]\E00B9052-1458316753-E111-9A38-D5B1D3B66D6A\hnsaD938.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\gerocyni]ImagePath=[%PROGRAM_FILES%]\E00B9052-1458316753-E111-9A38-D5B1D3B66D6A\jnspAC7B.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\wucotusy]ImagePath=[%PROGRAM_FILES%]\60813160-1458694441-11E0-B8A7-BCAEC55D562C\hnscE02.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\rowugoqo]ImagePath=[%LOCAL_APPDATA%]\60813160-1458694587-11E0-B8A7-BCAEC55D562C\snsoDC68.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\gerocyni]ImagePath=[%PROGRAM_FILES%]\60813160-1458694441-11E0-B8A7-BCAEC55D562C\jnsbDA9B.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\zigipyro]ImagePath=[%LOCAL_APPDATA%]\B89516E4-1458672039-E511-A020-6C0B8493CF94\qnsg9A36.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\wucotusy]ImagePath=[%PROGRAM_FILES%]\B89516E4-1458110350-E511-A020-6C0B8493CF94\hnsb1091.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\gerocyni]ImagePath=[%PROGRAM_FILES%]\B89516E4-1458110350-E511-A020-6C0B8493CF94\jnszE681.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\wucotusy]ImagePath=[%PROGRAM_FILES%]\6CBBF460-1458184171-11DD-A6E8-C86000A1A4B9\hnsi4482.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\gerocyni]ImagePath=[%PROGRAM_FILES%]\6CBBF460-1458184171-11DD-A6E8-C86000A1A4B9\jnsy1FB2.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\wucotusy]ImagePath=[%PROGRAM_FILES%]\03000200-1458658089-0500-0006-000700080009\hnsr92A3.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\gerocyni]ImagePath=[%PROGRAM_FILES%]\03000200-1458658089-0500-0006-000700080009\jnsb7023.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\xykuwuke]ImagePath=[%PROGRAM_FILES%]\C9CF0E80-1446648806-1262-8AF7-A19755BA9441\hnssA49.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\sydybyfu]ImagePath=[%PROGRAM_FILES%]\C9CF0E80-1446648806-1262-8AF7-A19755BA9441\jnsdF25A.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\bekotopy]ImagePath=[%PROGRAM_FILES%]\C9CF0E80-1446648806-1262-8AF7-A19755BA9441\knssDF75.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\zigipyro]ImagePath=[%LOCAL_APPDATA%]\31444335-1458722807-4833-4452-441EA1DFD10B\qnsbF8D1.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\wucotusy]ImagePath=[%PROGRAM_FILES%]\31444335-1458691713-4833-4452-441EA1DFD10B\hnsh82A9.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\gerocyni]ImagePath=[%PROGRAM_FILES%]\31444335-1458691713-4833-4452-441EA1DFD10B\jnsc645E.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\wucotusy]ImagePath=[%PROGRAM_FILES%]\4C4C4544-1458166151-4E10-804A-B9C04F333632\hnslEDF1.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\wucotusy]ImagePath=[%PROGRAM_FILES%]\A06B6648-1458537012-11E1-A42B-3D034D226C2E\hnsy17E6.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\rowugoqo]ImagePath=[%LOCAL_APPDATA%]\A06B6648-1458556976-11E1-A42B-3D034D226C2E\snstB971.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\gerocyni]ImagePath=[%PROGRAM_FILES%]\A06B6648-1458537012-11E1-A42B-3D034D226C2E\jnsd95E9.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\zigipyro]ImagePath=[%LOCAL_APPDATA%]\FFFFFFFF-1457685234-FFFF-FFFF-FFFFFFFFFFFF\qnso5E0.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\gerocyni]ImagePath=[%PROGRAM_FILES%]\F74CAD84-1458621158-E211-A335-208984EEFE8C\jnsvB6E1.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\zigipyro]ImagePath=[%LOCAL_APPDATA%]\4C4C4544-1458649820-3210-8051-B7C04F534E31\qnscDF48.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\wucotusy]ImagePath=[%PROGRAM_FILES%]\4C4C4544-1458600404-3210-8051-B7C04F534E31\hnsm3898.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\gerocyni]ImagePath=[%PROGRAM_FILES%]\4C4C4544-1458600404-3210-8051-B7C04F534E31\jnsm1934.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\wucotusy]ImagePath=[%PROGRAM_FILES%]\4C4C4544-1458543645-5210-8035-B1C04F345931\hnsr2DE7.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\gerocyni]ImagePath=[%PROGRAM_FILES%]\4C4C4544-1458543645-5210-8035-B1C04F345931\jnsbEE75.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\rowugoqo]ImagePath=[%LOCAL_APPDATA%]\34444335-1456963552-3232-5935-8CDCD477B993\snsu2064.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\dojygici]ImagePath=[%PROGRAM_FILES%]\34444335-1456956201-3232-5935-8CDCD477B993\jnsr5017.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\zutuzuni]ImagePath=[%PROGRAM_FILES%]\3AE4D524-1453214124-11D5-A19D-CD8810697F63\jnsa65E8.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\wucotusy]ImagePath=[%PROGRAM_FILES%]\3AE4D524-1453214124-11D5-A19D-CD8810697F63\hnsv7FCB.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\jimocoso]ImagePath=[%PROGRAM_FILES%]\3AE4D524-1440502431-11D5-A19D-CD8810697F63\jnsx4D68.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\gijihedy]ImagePath=[%PROGRAM_FILES%]\3AE4D524-1440502431-11D5-A19D-CD8810697F63\knsdC314.tmpfs
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\fimevebo]ImagePath=[%PROGRAM_FILES%]\3AE4D524-1440502431-11D5-A19D-CD8810697F63\hnss66FD.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\zigipyro]ImagePath=[%LOCAL_APPDATA%]\DAE63060-1458607488-11DD-99A3-BCEE7B9F3E26\qnsqBD8C.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\xyryxyve]ImagePath=[%PROGRAM_FILES%]\00334CF5-1446655663-E011-875E-B2D76A34E6CA\hnsm3F0B.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\wixupugo]ImagePath=[%PROGRAM_FILES%]\00334CF5-1446655663-E011-875E-B2D76A34E6CA\knsjB7D1.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\ridifupo]ImagePath=[%PROGRAM_FILES%]\00334CF5-1446655663-E011-875E-B2D76A34E6CA\knst38C5.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\zutuzuni]ImagePath=[%PROGRAM_FILES%]\B6B0D120-1456399250-11E0-B3DC-14DAE9CF4FCB\jnsx433B.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\wucotusy]ImagePath=[%PROGRAM_FILES%]\B6B0D120-1456399250-11E0-B3DC-14DAE9CF4FCB\hnsx602F.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\wucotusy]ImagePath=[%PROGRAM_FILES%]\1AF453E7-1458593018-A5F2-6752-C0F285F2523B\hnsu810C.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\gerocyni]ImagePath=[%PROGRAM_FILES%]\AC65E82A-1458637848-655A-A958-00235AE96659\jnsq4B18.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\zigipyro]ImagePath=[%LOCAL_APPDATA%]\F01A826F-1458590868-F2FE-3093-08626698A438\qnsc6084.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\zutuzuni]ImagePath=[%PROGRAM_FILES%]\25F3CAE0-1455370470-11E0-AAA7-E89A8F0ABE08\jnsrD22F.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\wucotusy]ImagePath=[%PROGRAM_FILES%]\25F3CAE0-1455370470-11E0-AAA7-E89A8F0ABE08\hnsfE849.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\zigipyro]ImagePath=[%LOCAL_APPDATA%]\4C4C4544-1458676002-5910-8046-B5C04F313032\qnsr5F21.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\wucotusy]ImagePath=[%PROGRAM_FILES%]\4C4C4544-1458652503-5910-8046-B5C04F313032\hnsgAF2A.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\gerocyni]ImagePath=[%PROGRAM_FILES%]\4C4C4544-1458652503-5910-8046-B5C04F313032\jnsj8FC9.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\zigipyro]ImagePath=[%LOCAL_APPDATA%]\35453035-1458550149-3239-3830-3133FFFFFFFF\qnse2422.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\wucotusy]ImagePath=[%PROGRAM_FILES%]\35453035-1458454206-3239-3830-3133FFFFFFFF\hnst38C1.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\rowugoqo]ImagePath=[%LOCAL_APPDATA%]\35453035-1458474089-3239-3830-3133FFFFFFFF\snsb306F.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\gerocyni]ImagePath=[%PROGRAM_FILES%]\35453035-1458454206-3239-3830-3133FFFFFFFF\jnsi1D96.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\zigipyro]ImagePath=[%LOCAL_APPDATA%]\4C4C4544-1458067131-5610-8051-B7C04F425231\qnseACC8.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\wucotusy]ImagePath=[%PROGRAM_FILES%]\4C4C4544-1458059292-5610-8051-B7C04F425231\hnsa3F66.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\gerocyni]ImagePath=[%PROGRAM_FILES%]\4C4C4544-1458059292-5610-8051-B7C04F425231\jnsa2002.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\zigipyro]ImagePath=[%LOCAL_APPDATA%]\03000200-1458570231-0500-0006-000700080009\qnsoC0E2.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\wucotusy]ImagePath=[%PROGRAM_FILES%]\48B0A720-1458267090-11DE-8B3F-78843C0108C6\hnswB5A8.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\gerocyni]ImagePath=[%PROGRAM_FILES%]\48B0A720-1458267090-11DE-8B3F-78843C0108C6\jnsl9C51.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\wucotusy]ImagePath=[%PROGRAM_FILES%]\C00301C0-1458564861-11DD-AF38-10C37B9E320B\hnse41C6.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\gerocyni]ImagePath=[%PROGRAM_FILES%]\C00301C0-1458564861-11DD-AF38-10C37B9E320B\jnsl2C77.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\wucotusy]ImagePath=[%PROGRAM_FILES%]\A7803B41-1458468366-11E1-91DB-48116701E079\hnse3D50.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\gerocyni]ImagePath=[%PROGRAM_FILES%]\A7803B41-1458468366-11E1-91DB-48116701E079\jnsx1F85.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\gerocyni]ImagePath=[%PROGRAM_FILES%]\03AA02FC-1457949460-054C-FF06-D00700080009\jnsjE45.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\wucotusy]ImagePath=[%PROGRAM_FILES%]\03AA02FC-1457949460-054C-FF06-D00700080009\hnsz29C3.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\zigipyro]ImagePath=[%LOCAL_APPDATA%]\4B435451-1458565068-3031-4532-3085A9297531\qnss7226.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\zigipyro]ImagePath=[%LOCAL_APPDATA%]\415036AA-1454600347-454F-8E5B-E718621D7177\qnsf5D8B.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\zigipyro]ImagePath=[%LOCAL_APPDATA%]\801F6FF8-1458589634-E011-974C-B42723CE0029\qnsr13C1.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\zigipyro]ImagePath=[%LOCAL_APPDATA%]\03000200-1458475269-0500-0006-000700080009\qnsn2E33.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\wucotusy]ImagePath=[%PROGRAM_FILES%]\03000200-1458392419-0500-0006-000700080009\hnseC1AC.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\wewevido]ImagePath=[%PROGRAM_FILES%]\03000200-1456745076-0500-0006-000700080009\znsb7A54.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\rowugoqo]ImagePath=[%LOCAL_APPDATA%]\03000200-1458412364-0500-0006-000700080009\snsk8B12.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\gerocyni]ImagePath=[%PROGRAM_FILES%]\03000200-1458392419-0500-0006-000700080009\jnsj9C01.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\zigipyro]ImagePath=[%LOCAL_APPDATA%]\07055791-1458507067-D7A2-EAFC-68B599E0AF64\qnsh9885.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\wucotusy]ImagePath=[%PROGRAM_FILES%]\07055791-1458506076-D7A2-EAFC-68B599E0AF64\hnslF303.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\gerocyni]ImagePath=[%PROGRAM_FILES%]\07055791-1458506076-D7A2-EAFC-68B599E0AF64\jnspD7E7.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\zutuzuni]ImagePath=[%PROGRAM_FILES%]\9028A71A-1455219597-E011-AFDF-B870F4CD1C9C\jnsx7159.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\zigipyro]ImagePath=[%LOCAL_APPDATA%]\9028A71A-1457385681-E011-AFDF-B870F4CD1C9C\qnsmA278.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\wucotusy]ImagePath=[%PROGRAM_FILES%]\9028A71A-1455219597-E011-AFDF-B870F4CD1C9C\hnsc9B86.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\zigipyro]ImagePath=[%LOCAL_APPDATA%]\364EE69C-1458567524-9CB1-2111-88AE1D080BCF\qnsu458A.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\wucotusy]ImagePath=[%PROGRAM_FILES%]\F1ABEEA5-1458557393-0542-A27F-108BC8FE9289\hnsa1452.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\gerocyni]ImagePath=[%PROGRAM_FILES%]\F1ABEEA5-1458557393-0542-A27F-108BC8FE9289\jnskC160.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\wucotusy]ImagePath=[%PROGRAM_FILES%]\ABD10801-1458572769-11CB-98B0-FAF5C147E8F5\hnsuB5F0.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\gerocyni]ImagePath=[%PROGRAM_FILES%]\ABD10801-1458572769-11CB-98B0-FAF5C147E8F5\jnsoAA4A.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\wucotusy]ImagePath=[%PROGRAM_FILES%]\4B435451-1457980734-3034-4532-50465D2CD553\hnsrEF81.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\gerocyni]ImagePath=[%PROGRAM_FILES%]\4B435451-1457980734-3034-4532-50465D2CD553\jnssD7F0.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\zigipyro]ImagePath=[%LOCAL_APPDATA%]\4C4C4544-1458083426-5110-804E-B8C04F535031\qnsn881F.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\wucotusy]ImagePath=[%PROGRAM_FILES%]\4C4C4544-1458074113-5110-804E-B8C04F535031\hnssA538.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\gerocyni]ImagePath=[%PROGRAM_FILES%]\4C4C4544-1458074113-5110-804E-B8C04F535031\jnsv849F.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\zigipyro]ImagePath=[%LOCAL_APPDATA%]\4C4C4544-1458550081-5310-805A-C4C04F433253\qnsuA3.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\zigipyro]ImagePath=[%LOCAL_APPDATA%]\E09FC364-1458554377-DF11-8432-7071BCB0C62B\qnsw57C2.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\wucotusy]ImagePath=[%PROGRAM_FILES%]\E09FC364-1458409360-DF11-8432-7071BCB0C62B\hnsaF4FA.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\gerocyni]ImagePath=[%PROGRAM_FILES%]\E09FC364-1458409360-DF11-8432-7071BCB0C62B\jnsaD8F0.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\gerocyni]ImagePath=[%PROGRAM_FILES%]\B5D01828-1458323749-E511-8B16-9457A5E6A30F\jnso61E.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\zizusyju]ImagePath=[%PROGRAM_FILES%]\49682388-1450239506-7D67-C92C-74D02BC6288C\hnsr939.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\wucotusy]ImagePath=[%PROGRAM_FILES%]\49682388-1457874665-7D67-C92C-74D02BC6288C\hnsn4277.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\woforemu]ImagePath=[%LOCAL_APPDATA%]\49682388-1450264757-7D67-C92C-74D02BC6288C\snsc9014.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\tejyvuxy]ImagePath=[%PROGRAM_FILES%]\49682388-1450239506-7D67-C92C-74D02BC6288C\knsbD63F.tmpfs
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\rizyqibe]ImagePath=[%PROGRAM_FILES%]\49682388-1450239506-7D67-C92C-74D02BC6288C\jnshF099.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\mucifyfy]ImagePath=[%PROGRAM_FILES%]\49682388-1448466312-7D67-C92C-74D02BC6288C\jnsgCB72.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\kukyqejy]ImagePath=[%PROGRAM_FILES%]\49682388-1448466312-7D67-C92C-74D02BC6288C\knsbB119.tmpfs
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\gerocyni]ImagePath=[%PROGRAM_FILES%]\49682388-1457874665-7D67-C92C-74D02BC6288C\jnsh2BC9.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\cuzihece]ImagePath=[%PROGRAM_FILES%]\49682388-1448466312-7D67-C92C-74D02BC6288C\hnsbE6C1.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\wucotusy]ImagePath=[%PROGRAM_FILES%]\93E59B7F-1458592723-11E4-9F6E-68F728013264\hnsnBD.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\gerocyni]ImagePath=[%PROGRAM_FILES%]\93E59B7F-1458592723-11E4-9F6E-68F728013264\jnswE5C0.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\zigipyro]ImagePath=[%LOCAL_APPDATA%]\50E5EBEE-1457270879-11E1-9938-2488BF0CA0E7\qnsyB446.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\dojygici]ImagePath=[%PROGRAM_FILES%]\50E5EBEE-1457262973-11E1-9938-2488BF0CA0E7\jnse407C.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\zigipyro]ImagePath=[%LOCAL_APPDATA%]\00000000-1458533926-0000-0000-6CF0496E8356\qnsjD6A9.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\wucotusy]ImagePath=[%PROGRAM_FILES%]\75047020-1456204406-11E3-A06A-2830CCE21600\hnsv58BD.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\zigipyro]ImagePath=[%LOCAL_APPDATA%]\60B7D83A-1458445512-E311-B3AF-008CFA6C32D3\qnspC57D.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\wucotusy]ImagePath=[%PROGRAM_FILES%]\60B7D83A-1457264273-E311-B3AF-008CFA6C32D3\hnsa6DFE.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\dojygici]ImagePath=[%PROGRAM_FILES%]\60B7D83A-1457264273-E311-B3AF-008CFA6C32D3\jnsh4BFD.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\zigipyro]ImagePath=[%LOCAL_APPDATA%]\61383066-1458486549-3962-6635-001B38539534\qnsc9E34.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\wucotusy]ImagePath=[%PROGRAM_FILES%]\61383066-1458334109-3962-6635-001B38539534\hnso59E8.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\gerocyni]ImagePath=[%PROGRAM_FILES%]\61383066-1458334109-3962-6635-001B38539534\jnsz3631.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\wucotusy]ImagePath=[%PROGRAM_FILES%]\00000000-1458446690-0000-0000-6CF049AF0D9F\hnsjAE97.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\gerocyni]ImagePath=[%PROGRAM_FILES%]\00000000-1458446690-0000-0000-6CF049AF0D9F\jnse8C08.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\wucotusy]ImagePath=[%PROGRAM_FILES%]\1D43CD60-1458071423-11E0-9F8B-14DAE9CF6C4F\hnsrE29.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\zigipyro]ImagePath=[%LOCAL_APPDATA%]\1D43CD60-1458499367-11E0-9F8B-14DAE9CF6C4F\qnseB4EC.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\gerocyni]ImagePath=[%PROGRAM_FILES%]\1D43CD60-1458071423-11E0-9F8B-14DAE9CF6C4F\jnskBD96.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\gerocyni]ImagePath=[%PROGRAM_FILES%]\8D650DB5-1458434406-4B0E-8072-6CBE0EADFA77\jnstBDF1.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\gerocyni]ImagePath=[%PROGRAM_FILES%]\4C4C4544-1458499854-4710-8043-CAC04F513332\jnsr6B7.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\zigipyro]ImagePath=[%LOCAL_APPDATA%]\4C4C4544-1458480515-4710-8043-CAC04F513332\qnse37C6.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\wucotusy]ImagePath=[%PROGRAM_FILES%]\4C4C4544-1458499854-4710-8043-CAC04F513332\hnsu1C44.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\gerocyni]ImagePath=[%PROGRAM_FILES%]\1DDF1B4E-1458465968-11E4-A961-68F728C4D272\jnstA85.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\wucotusy]ImagePath=[%PROGRAM_FILES%]\1DDF1B4E-1458465968-11E4-A961-68F728C4D272\hnsd5607.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\rowugoqo]ImagePath=[%LOCAL_APPDATA%]\1DDF1B4E-1458476895-11E4-A961-68F728C4D272\snsm8DCC.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\gerocyni]ImagePath=[%PROGRAM_FILES%]\03000200-1458379200-0500-0006-000700080009\jnss239E.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\wucotusy]ImagePath=[%PROGRAM_FILES%]\00000000-1458491046-0000-0000-D8CB8A9856E9\hnsrB2B1.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\gerocyni]ImagePath=[%PROGRAM_FILES%]\00000000-1458491046-0000-0000-D8CB8A9856E9\jnsf95B1.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\wucotusy]ImagePath=[%PROGRAM_FILES%]\00000000-1458435595-0000-0000-448A5B4784D9\hnsz5121.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\gerocyni]ImagePath=[%PROGRAM_FILES%]\00000000-1458435595-0000-0000-448A5B4784D9\jnsy3634.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\zigipyro]ImagePath=[%LOCAL_APPDATA%]\00000000-1458507566-0000-0000-448A5B4730CF\qnseD892.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\wucotusy]ImagePath=[%PROGRAM_FILES%]\00000000-1458474561-0000-0000-448A5B4730CF\hnsiDB5A.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\gerocyni]ImagePath=[%PROGRAM_FILES%]\00000000-1458474561-0000-0000-448A5B4730CF\jnshBF83.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\fyjehivu]ImagePath=[%PROGRAM_FILES%]\00000000-1448505782-0000-0000-94DE803996F1\jnsqA2C.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\zigipyro]ImagePath=[%LOCAL_APPDATA%]\00000000-1458510895-0000-0000-94DE803996F1\qnsqA28C.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\nuvosuqo]ImagePath=[%PROGRAM_FILES%]\00000000-1448505782-0000-0000-94DE803996F1\hnsa3A76.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\zigipyro]ImagePath=[%LOCAL_APPDATA%]\4C4C4544-1458464786-3210-8034-C8C04F4D5031\qnsm409A.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\wucotusy]ImagePath=[%PROGRAM_FILES%]\4C4C4544-1458359553-3210-8034-C8C04F4D5031\hnsx60F7.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\rowugoqo]ImagePath=[%LOCAL_APPDATA%]\4C4C4544-1458379466-3210-8034-C8C04F4D5031\snsdB425.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\gerocyni]ImagePath=[%PROGRAM_FILES%]\4C4C4544-1458359553-3210-8034-C8C04F4D5031\jnsc3276.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\zigipyro]ImagePath=[%LOCAL_APPDATA%]\FFFFFFFF-1458437023-FFFF-FFFF-FFFFFFFFFFFF\qnsdE1.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\wucotusy]ImagePath=[%PROGRAM_FILES%]\00000000-1458291855-0000-0000-0020EDFFFFFF\hnsu1424.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\gerocyni]ImagePath=[%PROGRAM_FILES%]\00000000-1458291855-0000-0000-0020EDFFFFFF\jnseFD86.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\gerocyni]ImagePath=[%PROGRAM_FILES%]\0734B440-1458184568-11DE-8551-0024BEEA668E\jnsn93.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\wucotusy]ImagePath=[%PROGRAM_FILES%]\0734B440-1458184568-11DE-8551-0024BEEA668E\hnsk50E8.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\wucotusy]ImagePath=[%PROGRAM_FILES%]\6E98D700-1458176453-81E3-30F0-10C37B19EBE6\hnsu14E6.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\rowugoqo]ImagePath=[%LOCAL_APPDATA%]\6E98D700-1458216180-81E3-30F0-10C37B19EBE6\snsi5AB4.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\zigipyro]ImagePath=[%LOCAL_APPDATA%]\34444335-1458395738-5A31-4A36-A01D48D50DCF\qnsd4B9.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\pydefydo]ImagePath=[%PROGRAM_FILES%]\34444335-1437558093-5A31-4A36-A01D48D50DCF\knso1411.tmpfs
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\wucotusy]ImagePath=[%PROGRAM_FILES%]\03000200-1458352485-0500-0006-000700080009\hnsdC3BD.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\gerocyni]ImagePath=[%PROGRAM_FILES%]\03000200-1458352485-0500-0006-000700080009\jnsdAC79.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\zigipyro]ImagePath=[%LOCAL_APPDATA%]\4C4C4544-1457861231-4C10-8033-C8C04F535A31\qnsxE00F.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\wucotusy]ImagePath=[%PROGRAM_FILES%]\4C4C4544-1457828097-4C10-8033-C8C04F535A31\hnsnF083.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\dojygici]ImagePath=[%PROGRAM_FILES%]\4C4C4544-1457828097-4C10-8033-C8C04F535A31\jnsiD7B4.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\dojygici]ImagePath=[%PROGRAM_FILES%]\E2E46440-1457297264-71D9-20D3-88AE1D00D589\jnsn237.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\zigipyro]ImagePath=[%LOCAL_APPDATA%]\E2E46440-1458387148-71D9-20D3-88AE1D00D589\qnse147E.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\wucotusy]ImagePath=[%PROGRAM_FILES%]\E2E46440-1457297264-71D9-20D3-88AE1D00D589\hnsi1858.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\gerocyni]ImagePath=[%PROGRAM_FILES%]\E2E46440-1458381524-71D9-20D3-88AE1D00D589\jnswB8A6.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\zigipyro]ImagePath=[%LOCAL_APPDATA%]\46313030-1458400627-4136-3535-4435FFFFFFFF\qnswAAF0.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\wucotusy]ImagePath=[%PROGRAM_FILES%]\46313030-1458151433-4136-3535-4435FFFFFFFF\hnse2F4C.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\gerocyni]ImagePath=[%PROGRAM_FILES%]\46313030-1458151433-4136-3535-4435FFFFFFFF\jnsj18DD.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\wucotusy]ImagePath=[%PROGRAM_FILES%]\8F3B8C90-1457419831-11D5-AE74-CA256A3D10FA\hnsm789C.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\wucotusy]ImagePath=[%PROGRAM_FILES%]\03000200-1458348129-0500-0006-000700080009\hnsg5A7C.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\gerocyni]ImagePath=[%PROGRAM_FILES%]\03000200-1458348129-0500-0006-000700080009\jnsh4339.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\gerocyni]ImagePath=[%PROGRAM_FILES%]\8083592B-1458058662-E211-9F71-A12859799B2E\jnsr5B61.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\wucotusy]ImagePath=[%PROGRAM_FILES%]\4C4C4544-1458376373-3810-8048-B4C04F373253\hnslE0B3.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\gerocyni]ImagePath=[%PROGRAM_FILES%]\4C4C4544-1458376373-3810-8048-B4C04F373253\jnsgB992.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\wucotusy]ImagePath=[%PROGRAM_FILES%]\F5E11D28-1458327732-11E4-9F6E-28D244FE024A\hnsa6380.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\gerocyni]ImagePath=[%PROGRAM_FILES%]\F5E11D28-1458327732-11E4-9F6E-28D244FE024A\jnsl4C2D.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\wucotusy]ImagePath=[%PROGRAM_FILES%]\0D519BA0-1458416332-11DD-9C28-00221595BE67\hnso11C.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\gerocyni]ImagePath=[%PROGRAM_FILES%]\0D519BA0-1458416332-11DD-9C28-00221595BE67\jnsiE8E8.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\zigipyro]ImagePath=[%LOCAL_APPDATA%]\D9A54BF8-1456754666-FE08-BB1A-A02BB823413D\qnsr8A9.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\zutuzuni]ImagePath=[%PROGRAM_FILES%]\03000200-1456548893-0500-0006-000700080009\jnst6347.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\zigipyro]ImagePath=[%LOCAL_APPDATA%]\03000200-1458389422-0500-0006-000700080009\qnse55EE.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\wucotusy]ImagePath=[%PROGRAM_FILES%]\03000200-1456548893-0500-0006-000700080009\hnsi78FA.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\wucotusy]ImagePath=[%PROGRAM_FILES%]\E65C0523-1457334490-DE11-8D35-001CC0C13E9C\hnssD720.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\dojygici]ImagePath=[%PROGRAM_FILES%]\E65C0523-1457334490-DE11-8D35-001CC0C13E9C\jnssA9B8.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\wucotusy]ImagePath=[%PROGRAM_FILES%]\E0FB1C5C-1458297870-E411-B2A0-1458D01137B1\hnsbC63F.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\gerocyni]ImagePath=[%PROGRAM_FILES%]\E0FB1C5C-1458297870-E411-B2A0-1458D01137B1\jnsa7668.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\rowugoqo]ImagePath=[%LOCAL_APPDATA%]\03000200-1458329021-0500-0006-000700080009\snsi1452.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\gerocyni]ImagePath=[%PROGRAM_FILES%]\03000200-1458325048-0500-0006-000700080009\jnsaA77A.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\wucotusy]ImagePath=[%PROGRAM_FILES%]\A66A7420-1458245311-11DE-8FD2-90E6BA845DA4\hnsbDBD.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\gerocyni]ImagePath=[%PROGRAM_FILES%]\A66A7420-1458245311-11DE-8FD2-90E6BA845DA4\jnscF67A.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\wucotusy]ImagePath=[%PROGRAM_FILES%]\44AA60B9-1455955188-4648-857F-2C600CC9F8F8\hnsnE0E7.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\zutuzuni]ImagePath=[%PROGRAM_FILES%]\38E3D580-1456853389-16B1-AC63-35A14851EE87\jnspC3F5.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\wucotusy]ImagePath=[%PROGRAM_FILES%]\38E3D580-1456853389-16B1-AC63-35A14851EE87\hnssD982.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\zigipyro]ImagePath=[%LOCAL_APPDATA%]\B4C4FEB2-1458294590-3381-252E-FB373B674442\qnsg61CA.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\wucotusy]ImagePath=[%PROGRAM_FILES%]\B4C4FEB2-1457950209-3381-252E-FB373B674442\hnso7EC0.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\gerocyni]ImagePath=[%PROGRAM_FILES%]\B4C4FEB2-1457950209-3381-252E-FB373B674442\jnsd5731.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\zutuzuni]ImagePath=[%PROGRAM_FILES%]\A9A6104E-1454370476-FF4A-B66F-382C4A7FCC2F\jnse7096.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\wucotusy]ImagePath=[%PROGRAM_FILES%]\A9A6104E-1454370476-FF4A-B66F-382C4A7FCC2F\hnscF894.tmp
  • [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]autoauto=[%PROGRAM_FILES%]\atonement\reliving.exe
  • [HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]dutoauto=[%PROGRAM_FILES%]\atonement\vexation.exe
  • [HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]interpee=[%PROGRAM_FILES%]\atonement\reliving.exe
  • [HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]rutoauto=[%PROGRAM_FILES%]\atonement\reliving.exe
  • [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]interpee=[%PROGRAM_FILES%]\atonement\reliving.exe
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\wucotusy]ImagePath=[%PROGRAM_FILES%]\41414141-1458263342-4141-4141-414141414141\hnsn1A19.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\zigipyro]ImagePath=[%LOCAL_APPDATA%]\804EEB8F-1458316534-DF11-A139-4487FCCD896E\qnsu7190.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\wucotusy]ImagePath=[%PROGRAM_FILES%]\804EEB8F-1458341034-DF11-A139-4487FCCD896E\hnsl56FF.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\gerocyni]ImagePath=[%PROGRAM_FILES%]\804EEB8F-1458341034-DF11-A139-4487FCCD896E\jnsg3B72.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\wucotusy]ImagePath=[%PROGRAM_FILES%]\153A23C7-1458184543-E211-A5A4-201A06080C85\hnsr649D.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\gerocyni]ImagePath=[%PROGRAM_FILES%]\153A23C7-1458184543-E211-A5A4-201A06080C85\jnsy4F00.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\zutuzuni]ImagePath=[%PROGRAM_FILES%]\A0496D45-1455602409-C0A9-E1E0-4E45435F4349\jnsz7B71.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\zigipyro]ImagePath=[%LOCAL_APPDATA%]\A0496D45-1456850060-C0A9-E1E0-4E45435F4349\qnsw2360.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\wucotusy]ImagePath=[%PROGRAM_FILES%]\A0496D45-1455602409-C0A9-E1E0-4E45435F4349\hnsp947F.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\rowugoqo]ImagePath=[%LOCAL_APPDATA%]\A0496D45-1455613307-C0A9-E1E0-4E45435F4349\snskD0E2.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\wucotusy]ImagePath=[%PROGRAM_FILES%]\4236B985-1458265732-0A24-93A2-8E4F5340E6F9\hnsy1C80.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\gerocyni]ImagePath=[%PROGRAM_FILES%]\4236B985-1458265732-0A24-93A2-8E4F5340E6F9\jnsjFD0D.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\zigipyro]ImagePath=[%LOCAL_APPDATA%]\9F8FB5A0-1458228168-11B2-8000-FE41804DD76F\qnsl9B9.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\wucotusy]ImagePath=[%PROGRAM_FILES%]\9F8FB5A0-1457700128-11B2-8000-FE41804DD76F\hnsg176C.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\dojygici]ImagePath=[%PROGRAM_FILES%]\9F8FB5A0-1457700128-11B2-8000-FE41804DD76F\jnsqF70E.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\wucotusy]ImagePath=[%PROGRAM_FILES%]\4C4C4544-1458236529-4E10-8059-B8C04F475A31\hnsl30F.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\gerocyni]ImagePath=[%PROGRAM_FILES%]\4C4C4544-1458236529-4E10-8059-B8C04F475A31\jnsgDE5E.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\gerocyni]ImagePath=[%PROGRAM_FILES%]\4C4C4544-1458203774-3010-804C-B9C04F503532\jnsd91AF.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\wucotusy]ImagePath=[%PROGRAM_FILES%]\00430C4E-1458210042-E211-8030-B01DA3070617\hnsb5057.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\gerocyni]ImagePath=[%PROGRAM_FILES%]\00430C4E-1458210042-E211-8030-B01DA3070617\jnsx39DF.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\zutuzuni]ImagePath=[%PROGRAM_FILES%]\35444335-1456152622-5436-5354-D0BF9C87018F\jnsx77A1.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\zigipyro]ImagePath=[%LOCAL_APPDATA%]\35444335-1458249769-5436-5354-D0BF9C87018F\qnsuB94C.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\wucotusy]ImagePath=[%PROGRAM_FILES%]\35444335-1456152622-5436-5354-D0BF9C87018F\hnsx923F.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\gerocyni]ImagePath=[%PROGRAM_FILES%]\35444335-1458230215-5436-5354-D0BF9C87018F\jnsb671B.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\zigipyro]ImagePath=[%LOCAL_APPDATA%]\7589A758-1458252348-11E2-BF8A-A088BF0C300E\qnsaAE38.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\dojygici]ImagePath=[%PROGRAM_FILES%]\A821564A-1457632995-E211-8444-208984A0202A\jnsj941.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\wucotusy]ImagePath=[%PROGRAM_FILES%]\A821564A-1457632995-E211-8444-208984A0202A\hnss2C8A.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\wucotusy]ImagePath=[%PROGRAM_FILES%]\D6819081-1458123209-E111-8811-DC0EA168C80A\hnsb2FAB.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\gerocyni]ImagePath=[%PROGRAM_FILES%]\D6819081-1458123209-E111-8811-DC0EA168C80A\jnsr1279.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\wucotusy]ImagePath=[%PROGRAM_FILES%]\81AE4C3B-1458287137-CB11-8E49-C527292ABB28\hnsiA7CA.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\zigipyro]ImagePath=[%LOCAL_APPDATA%]\4A6976A0-1458150983-11DD-B0DF-1C872C58E0DF\qnsj47AB.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\wucotusy]ImagePath=[%PROGRAM_FILES%]\4A6976A0-1458163494-11DD-B0DF-1C872C58E0DF\hnsxB2B7.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\gerocyni]ImagePath=[%PROGRAM_FILES%]\4A6976A0-1458163494-11DD-B0DF-1C872C58E0DF\jnsg971E.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\zigipyro]ImagePath=[%LOCAL_APPDATA%]\4C4C4544-1458164113-3410-8054-B9C04F305131\qnsxFCA9.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\gerocyni]ImagePath=[%PROGRAM_FILES%]\4C4C4544-1458172936-3410-8054-B9C04F305131\jnsa2A2C.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\zigipyro]ImagePath=[%LOCAL_APPDATA%]\A7F240E8-1457298303-1220-0427-171724000000\qnsxFCE7.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\rowugoqo]ImagePath=[%LOCAL_APPDATA%]\566E55B0-1458205943-81E5-27D3-2C56DC1EA30E\snsx9883.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\wucotusy]ImagePath=[%PROGRAM_FILES%]\03000200-1458160447-0500-0006-000700080009\hnseBF96.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\gerocyni]ImagePath=[%PROGRAM_FILES%]\03000200-1458160447-0500-0006-000700080009\jnse9FE4.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\zigipyro]ImagePath=[%LOCAL_APPDATA%]\03000200-1458203818-0500-0006-000700080009\qnsk72D8.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\zigipyro]ImagePath=[%LOCAL_APPDATA%]\03000200-1458216854-0500-0006-000700080009\qnsmDFF6.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\zigipyro]ImagePath=[%LOCAL_APPDATA%]\56C0C845-1458024597-89E8-4B5E-DAEABC8C320D\qnswDA78.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\wucotusy]ImagePath=[%PROGRAM_FILES%]\56C0C845-1457774452-89E8-4B5E-DAEABC8C320D\hnsbCD5F.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\dojygici]ImagePath=[%PROGRAM_FILES%]\56C0C845-1457774452-89E8-4B5E-DAEABC8C320D\jnswB4DE.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\wucotusy]ImagePath=[%PROGRAM_FILES%]\32444335-1458215675-5833-5342-38EAA7D7C700\hnsdBCA9.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\gerocyni]ImagePath=[%PROGRAM_FILES%]\32444335-1458215675-5833-5342-38EAA7D7C700\jnsf9B25.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\wucotusy]ImagePath=[%PROGRAM_FILES%]\1EC882A0-1458135729-11DD-B01F-E03F4947BDAB\hnsa3CEA.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\gerocyni]ImagePath=[%PROGRAM_FILES%]\1EC882A0-1458135729-11DD-B01F-E03F4947BDAB\jnsc272E.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\zigipyro]ImagePath=[%LOCAL_APPDATA%]\1A606C00-1458279845-11E3-9248-A0D3C11A0676\qnsn7D6B.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\wucotusy]ImagePath=[%PROGRAM_FILES%]\1A606C00-1458049233-11E3-9248-A0D3C11A0676\hnss32DE.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\gerocyni]ImagePath=[%PROGRAM_FILES%]\1A606C00-1458049233-11E3-9248-A0D3C11A0676\jnso10EC.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\zigipyro]ImagePath=[%LOCAL_APPDATA%]\6AD4C389-1458233175-DF11-88A9-88AE1DCFD949\qnscC0E0.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\wucotusy]ImagePath=[%PROGRAM_FILES%]\6AD4C389-1457684434-DF11-88A9-88AE1DCFD949\hnsqE6BC.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\dojygici]ImagePath=[%PROGRAM_FILES%]\6AD4C389-1457684434-DF11-88A9-88AE1DCFD949\jnsaAF36.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\zutuzuni]ImagePath=[%PROGRAM_FILES%]\E6C298C0-1455286233-11DD-82A3-544249E2B3FA\jnsb9733.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\wucotusy]ImagePath=[%PROGRAM_FILES%]\E6C298C0-1455286233-11DD-82A3-544249E2B3FA\hnsbCEA9.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\gerocyni]ImagePath=[%PROGRAM_FILES%]\03000200-1457977800-0500-0006-000700080009\jnsb8579.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\rowugoqo]ImagePath=[%LOCAL_APPDATA%]\03000200-1457879256-0500-0006-000700080009\snsgFBC.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\zigipyro]ImagePath=[%LOCAL_APPDATA%]\03000200-1458145598-0500-0006-000700080009\qnsr7003.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\wucotusy]ImagePath=[%PROGRAM_FILES%]\03000200-1457875538-0500-0006-000700080009\hnsaA602.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\gerocyni]ImagePath=[%PROGRAM_FILES%]\03000200-1457875538-0500-0006-000700080009\jnsa8602.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\dojygici]ImagePath=[%PROGRAM_FILES%]\3539FE12-1457332602-CDE2-FC94-D850E6547045\jnsl36B.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\wucotusy]ImagePath=[%PROGRAM_FILES%]\3539FE12-1457332602-CDE2-FC94-D850E6547045\hnsrE3CD.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\wucotusy]ImagePath=[%PROGRAM_FILES%]\79AC4C5E-1457982636-5AE8-B793-AB2D8069E0A2\hnsbF451.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\rowugoqo]ImagePath=[%LOCAL_APPDATA%]\79AC4C5E-1458002560-5AE8-B793-AB2D8069E0A2\snsr7217.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\gerocyni]ImagePath=[%PROGRAM_FILES%]\79AC4C5E-1457982636-5AE8-B793-AB2D8069E0A2\jnsgC534.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\gerocyni]ImagePath=[%PROGRAM_FILES%]\30464E43-1458079395-3239-3948-00269EE62C62\jnsg6284.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\wucotusy]ImagePath=[%PROGRAM_FILES%]\01D0866D-1457883223-FE5A-6DC5-9D4151FA4690\hnshD57.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\zigipyro]ImagePath=[%LOCAL_APPDATA%]\01D0866D-1458089025-FE5A-6DC5-9D4151FA4690\qnss1EEA.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\gerocyni]ImagePath=[%PROGRAM_FILES%]\01D0866D-1457883223-FE5A-6DC5-9D4151FA4690\jnssE8B6.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\wucotusy]ImagePath=[%PROGRAM_FILES%]\4C4C4544-1458030311-5410-8042-C3C04F59334A\hnsc67A8.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\gerocyni]ImagePath=[%PROGRAM_FILES%]\4C4C4544-1458030311-5410-8042-C3C04F59334A\jnsc4DC0.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\wucotusy]ImagePath=[%PROGRAM_FILES%]\2B212B08-1458136980-0F01-0408-DC4A3E179768\hnsw7274.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\gerocyni]ImagePath=[%PROGRAM_FILES%]\2B212B08-1458136980-0F01-0408-DC4A3E179768\jnst5D35.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\zigipyro]ImagePath=[%LOCAL_APPDATA%]\80A1CA5B-1456937113-E411-85C7-F0761C807B13\qnsj8AE7.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\wucotusy]ImagePath=[%PROGRAM_FILES%]\80A1CA5B-1456922610-E411-85C7-F0761C807B13\hnspAD13.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\dojygici]ImagePath=[%PROGRAM_FILES%]\80A1CA5B-1456922610-E411-85C7-F0761C807B13\jnso9226.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\wucotusy]ImagePath=[%PROGRAM_FILES%]\4C4C4544-1457951443-3610-8033-C6C04F535131\hnsl4A3D.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\gerocyni]ImagePath=[%PROGRAM_FILES%]\4C4C4544-1457951443-3610-8033-C6C04F535131\jnsr2A5D.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\wucotusy]ImagePath=[%PROGRAM_FILES%]\4C4C4544-1458023957-5110-8037-C3C04F515831\hnsmC182.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\gerocyni]ImagePath=[%PROGRAM_FILES%]\4C4C4544-1458023957-5110-8037-C3C04F515831\jnsyA126.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\wucotusy]ImagePath=[%PROGRAM_FILES%]\B82B3C82-1458124685-3642-8F9B-382C4A7DD92D\hnsz3BA3.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\gerocyni]ImagePath=[%PROGRAM_FILES%]\B82B3C82-1458124685-3642-8F9B-382C4A7DD92D\jnsj14DF.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\molelere]ImagePath=[%APPDATA%]\D35B8A44-1424386585-1420-1117-105916000000\jnsjF45C.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\wucotusy]ImagePath=[%PROGRAM_FILES%]\00035F72-1458116094-DF11-9657-7071BC716BBC\hnsm6972.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\gerocyni]ImagePath=[%PROGRAM_FILES%]\00035F72-1458116094-DF11-9657-7071BC716BBC\jnsw4DF4.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\zigipyro]ImagePath=[%LOCAL_APPDATA%]\552BB6CC-1458130489-E411-ADE7-3863BBCDD594\qnswB512.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\wucotusy]ImagePath=[%PROGRAM_FILES%]\552BB6CC-1458123960-E411-ADE7-3863BBCDD594\hnsj7FB7.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\gerocyni]ImagePath=[%PROGRAM_FILES%]\552BB6CC-1458123960-E411-ADE7-3863BBCDD594\jnsp67F7.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\wyricexe]ImagePath=[%PROGRAM_FILES%]\03AA02FC-1437110134-05D9-6106-650700080009\knskF95.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\weriwixo]ImagePath=[%PROGRAM_FILES%]\03AA02FC-1437110134-05D9-6106-650700080009\knsd6602.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\vodovyfe]ImagePath=[%PROGRAM_FILES%]\03AA02FC-1437110134-05D9-6106-650700080009\knsr408C.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\titebewo]ImagePath=[%PROGRAM_FILES%]\03AA02FC-1437110134-05D9-6106-650700080009\knsz6468.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\rygycucu]ImagePath=[%PROGRAM_FILES%]\03AA02FC-1437110134-05D9-6106-650700080009\knsy6351.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\pegicede]ImagePath=[%PROGRAM_FILES%]\03AA02FC-1437110134-05D9-6106-650700080009\knsc1AE1.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\moketudo]ImagePath=[%PROGRAM_FILES%]\03AA02FC-1437110134-05D9-6106-650700080009\knsi4C3B.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\junihuji]ImagePath=[%PROGRAM_FILES%]\03AA02FC-1437110134-05D9-6106-650700080009\knsyDAF5.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\hiqesulu]ImagePath=[%PROGRAM_FILES%]\03AA02FC-1437110134-05D9-6106-650700080009\knsy3993.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\hemogety]ImagePath=[%PROGRAM_FILES%]\03AA02FC-1437110134-05D9-6106-650700080009\knsjBB02.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\gusuviby]ImagePath=[%PROGRAM_FILES%]\03AA02FC-1437110134-05D9-6106-650700080009\knsn6A0A.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\wucotusy]ImagePath=[%PROGRAM_FILES%]\13B86C20-1458111778-11D9-9EDC-F46D0466C1A8\hnsl52EB.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\zigipyro]ImagePath=[%LOCAL_APPDATA%]\522B4760-1458156698-11E1-8D1A-047D7BB2B183\qnsx8349.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\wucotusy]ImagePath=[%PROGRAM_FILES%]\522B4760-1458099661-11E1-8D1A-047D7BB2B183\hnspB7FB.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\rowugoqo]ImagePath=[%LOCAL_APPDATA%]\522B4760-1458128914-11E1-8D1A-047D7BB2B183\snsnFF57.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\gerocyni]ImagePath=[%PROGRAM_FILES%]\522B4760-1458099661-11E1-8D1A-047D7BB2B183\jnst806F.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\wucotusy]ImagePath=[%PROGRAM_FILES%]\03000200-1458109483-0500-0006-000700080009\hnscBCA.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\gerocyni]ImagePath=[%PROGRAM_FILES%]\03000200-1458109483-0500-0006-000700080009\jnsgF012.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\gerocyni]ImagePath=[%PROGRAM_FILES%]\40E31210-1458085801-DE11-9BB8-BB749A3E5D79\jnso1E4.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\wucotusy]ImagePath=[%PROGRAM_FILES%]\40E31210-1458085801-DE11-9BB8-BB749A3E5D79\hnsd1797.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\wucotusy]ImagePath=[%PROGRAM_FILES%]\975E0080-1458158964-81DF-27E7-20CF3076042B\hnsoA1B2.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\gerocyni]ImagePath=[%PROGRAM_FILES%]\975E0080-1458158964-81DF-27E7-20CF3076042B\jnsk8BD6.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\zigipyro]ImagePath=[%LOCAL_APPDATA%]\6CF7324B-1458073284-E511-90AB-DC4A3ED113DE\qnsi293A.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\wucotusy]ImagePath=[%PROGRAM_FILES%]\6CF7324B-1456740195-E511-90AB-DC4A3ED113DE\hnsw4B58.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\wucotusy]ImagePath=[%PROGRAM_FILES%]\400EE856-1458045163-DA09-F8F1-1C7508DCF31C\hnsxFA79.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\wucotusy]ImagePath=[%PROGRAM_FILES%]\FF7DF4A0-1458036957-11E4-BE79-287CD1C91700\hnswA6C8.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\gerocyni]ImagePath=[%PROGRAM_FILES%]\FF7DF4A0-1458036957-11E4-BE79-287CD1C91700\jnsh8EF3.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\zigipyro]ImagePath=[%LOCAL_APPDATA%]\88149E27-1457711651-0C97-37D9-40167E20728E\qnsjAA9B.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\wucotusy]ImagePath=[%PROGRAM_FILES%]\88149E27-1457682102-0C97-37D9-40167E20728E\hnseA53E.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\dojygici]ImagePath=[%PROGRAM_FILES%]\88149E27-1457682102-0C97-37D9-40167E20728E\jnsp830D.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\wucotusy]ImagePath=[%PROGRAM_FILES%]\03000200-1457810149-0500-0006-000700080009\hnsrC929.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\wucotusy]ImagePath=[%PROGRAM_FILES%]\33444335-1458031082-4635-314E-7446A07ADB92\hnsu9720.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\gerocyni]ImagePath=[%PROGRAM_FILES%]\33444335-1458031082-4635-314E-7446A07ADB92\jnsf7FCD.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\zutuzuni]ImagePath=[%PROGRAM_FILES%]\4C4C4544-1454568448-5A10-805A-B9C04F373132\jnsa2A2E.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\wucotusy]ImagePath=[%PROGRAM_FILES%]\4C4C4544-1454568448-5A10-805A-B9C04F373132\hnslAC21.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\zigipyro]ImagePath=[%LOCAL_APPDATA%]\32B655E4-1454701755-DF11-AF6E-00270E035F08\qnsxD75D.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\rowugoqo]ImagePath=[%LOCAL_APPDATA%]\8A7C8FC8-1454262418-0CB4-AAD6-CAEAC88B3FD2\snso2878.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\wucotusy]ImagePath=[%PROGRAM_FILES%]\7906B1E6-1458055196-5546-93FB-382C4A7DD43E\hnsg75EC.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\zigipyro]ImagePath=[%LOCAL_APPDATA%]\803B7C3B-1457836895-E111-9621-00266C23C76E\qnsh85A5.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\wucotusy]ImagePath=[%PROGRAM_FILES%]\803B7C3B-1457476421-E111-9621-00266C23C76E\hnszEBB9.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\dojygici]ImagePath=[%PROGRAM_FILES%]\803B7C3B-1457476421-E111-9621-00266C23C76E\jnseCE48.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\wucotusy]ImagePath=[%PROGRAM_FILES%]\57E21F00-1458033035-0820-0828-141019000000\hnsl4DA7.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\gerocyni]ImagePath=[%PROGRAM_FILES%]\57E21F00-1458033035-0820-0828-141019000000\jnsg3268.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\zigipyro]ImagePath=[%LOCAL_APPDATA%]\A1A586E7-1458047014-08F6-5110-5EADB9F88684\qnsn10BB.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\wucotusy]ImagePath=[%PROGRAM_FILES%]\A1A586E7-1457925954-08F6-5110-5EADB9F88684\hnsoDAFC.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\gerocyni]ImagePath=[%PROGRAM_FILES%]\A1A586E7-1457925954-08F6-5110-5EADB9F88684\jnsdBA6F.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\rowugoqo]ImagePath=[%LOCAL_APPDATA%]\1DF24A0F-1458068167-11DA-BBDA-C2035E150014\snsj127.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\zigipyro]ImagePath=[%LOCAL_APPDATA%]\03D40274-1457725398-0511-5206-B30700080009\qnsaD7BA.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\wucotusy]ImagePath=[%PROGRAM_FILES%]\03D40274-1457717977-0511-5206-B30700080009\hnsp8C69.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\zigipyro]ImagePath=[%LOCAL_APPDATA%]\1E006360-1458067601-4700-FF5C-C86000C224C3\qnsa6A78.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\wucotusy]ImagePath=[%PROGRAM_FILES%]\1E006360-1458063364-4700-FF5C-C86000C224C3\hnsc2A00.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\gerocyni]ImagePath=[%PROGRAM_FILES%]\1E006360-1458063364-4700-FF5C-C86000C224C3\jnst12CD.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\zigipyro]ImagePath=[%LOCAL_APPDATA%]\03DE0294-1457815039-0519-8706-010700080009\qnshC295.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\gerocyni]ImagePath=[%PROGRAM_FILES%]\6188D400-1457920941-11DD-A444-BCEE7B78DED3\jnsk4D00.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\wucotusy]ImagePath=[%PROGRAM_FILES%]\E98F04E0-1454655820-11E1-B32E-047D7B666D4F\hnslCD4F.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\zutuzuni]ImagePath=[%PROGRAM_FILES%]\2A84D099-1456582400-0A45-B51A-2C600CE020ED\jnsv4C2D.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\zigipyro]ImagePath=[%LOCAL_APPDATA%]\2A84D099-1457994556-0A45-B51A-2C600CE020ED\qnsmD950.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\wucotusy]ImagePath=[%PROGRAM_FILES%]\2A84D099-1456582400-0A45-B51A-2C600CE020ED\hnsq9704.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\wucotusy]ImagePath=[%PROGRAM_FILES%]\1EBD0553-1457692905-E7F4-1B2F-F8495C777FD3\hnse47B0.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\dojygici]ImagePath=[%PROGRAM_FILES%]\1EBD0553-1457692905-E7F4-1B2F-F8495C777FD3\jnse23BA.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\gerocyni]ImagePath=[%PROGRAM_FILES%]\00000000-1457900882-0000-0000-448A5B57C668\jnsv5BD.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\wucotusy]ImagePath=[%PROGRAM_FILES%]\00000000-1457900882-0000-0000-448A5B57C668\hnsq1AA6.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\zutuzuni]ImagePath=[%PROGRAM_FILES%]\2F221FDB-1456320238-11E4-B57F-68F728234A84\jnsfF66F.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\wucotusy]ImagePath=[%PROGRAM_FILES%]\2F221FDB-1456320238-11E4-B57F-68F728234A84\hnsg16BE.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\rowugoqo]ImagePath=[%LOCAL_APPDATA%]\2F221FDB-1456298726-11E4-B57F-68F728234A84\snsq1CF4.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\wucotusy]ImagePath=[%PROGRAM_FILES%]\00000000-1457682590-0000-0807-060504030201\hnsg6F5E.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\dojygici]ImagePath=[%PROGRAM_FILES%]\00000000-1457682590-0000-0807-060504030201\jnsu53E4.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\gerocyni]ImagePath=[%PROGRAM_FILES%]\00000000-1457901633-0000-0807-060504030201\jnsvB411.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\wucotusy]ImagePath=[%PROGRAM_FILES%]\D63C5C1B-1458008278-9942-B853-00E0B87497E0\hnsbF5FF.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\gerocyni]ImagePath=[%PROGRAM_FILES%]\D63C5C1B-1458008278-9942-B853-00E0B87497E0\jnspD94D.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\kiqidetu]ImagePath=[%PROGRAM_FILES%]\D6B6907C-1447268852-DF11-8D9C-705AB67C4271\jnsm131A.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\gilefywi]ImagePath=[%PROGRAM_FILES%]\D6B6907C-1447268852-DF11-8D9C-705AB67C4271\hnst30E5.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\zigipyro]ImagePath=[%LOCAL_APPDATA%]\03D40274-1457812945-05DF-AB06-2B0700080009\qnsnA8B9.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\wucotusy]ImagePath=[%PROGRAM_FILES%]\03D40274-1457792466-05DF-AB06-2B0700080009\hnsu9402.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\rowugoqo]ImagePath=[%LOCAL_APPDATA%]\03D40274-1457812374-05DF-AB06-2B0700080009\snsuF1BA.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\dojygici]ImagePath=[%PROGRAM_FILES%]\03D40274-1457792466-05DF-AB06-2B0700080009\jnse7884.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\wucotusy]ImagePath=[%PROGRAM_FILES%]\4C4C4544-1458011268-4610-8033-B5C04F535031\hnscF8C8.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\gerocyni]ImagePath=[%PROGRAM_FILES%]\4C4C4544-1458011268-4610-8033-B5C04F535031\jnsvDB4B.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\zigipyro]ImagePath=[%LOCAL_APPDATA%]\FFFFFFFF-1455765841-FFFF-FFFF-FFFFFFFFFFFF\qnst39C.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\zigipyro]ImagePath=[%LOCAL_APPDATA%]\59404F98-1457905092-E511-A726-F0761CC839AB\qnsq150E.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\roqenufe]ImagePath=[%PROGRAM_FILES%]\59404F98-1449525423-E511-A726-F0761CC839AB\jnst6FAA.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\nyneryxo]ImagePath=[%PROGRAM_FILES%]\59404F98-1449525423-E511-A726-F0761CC839AB\hnsy88E1.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\wucotusy]ImagePath=[%PROGRAM_FILES%]\03000200-1457936167-0500-0006-000700080009\hnsa25CC.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\gerocyni]ImagePath=[%PROGRAM_FILES%]\03000200-1457936167-0500-0006-000700080009\jnsvED4D.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\mecobigi]ImagePath=[%APPDATA%]\9085BF8D-1426459838-DF11-AFCC-88AE1D897A40\jnsh44EE.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\zigipyro]ImagePath=[%LOCAL_APPDATA%]\1E0050E0-1457981688-1701-9A69-001FC6110A82\qnsdFF43.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\wucotusy]ImagePath=[%PROGRAM_FILES%]\1E0050E0-1457973520-1701-9A69-001FC6110A82\hnsgBA54.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\gerocyni]ImagePath=[%PROGRAM_FILES%]\1E0050E0-1457973520-1701-9A69-001FC6110A82\jnsmA37E.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\zigipyro]ImagePath=[%LOCAL_APPDATA%]\4C4C4544-1457703099-5810-804B-B1C04F583132\qnsxE393.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\rowugoqo]ImagePath=[%LOCAL_APPDATA%]\BC68EB80-1454795841-81E1-3B9B-C86000386664\snssCA14.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\zigipyro]ImagePath=[%LOCAL_APPDATA%]\4C4C4544-1457805506-5610-8033-B6C04F48344A\qnsz6D47.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\wucotusy]ImagePath=[%PROGRAM_FILES%]\4C4C4544-1457705049-5610-8033-B6C04F48344A\hnsc682E.tmp