Exterminate It! Antimalware

malpedia

Known threats:700,086 Last Update:March 16, 12:51

Testimonials

Just want to say that apparently your Exterminate It has worked like a charm. I was infected with a most troublesome Malware Trojan that kept replicating every time McAfee found, blocked and removed it... most annoying for several days... until Mr. Google led me to your door. What a God send!

With thanks,

Tom S.

MultiPlug- Registry Values List

This is a complete list of MultiPlug registry values collected by Exterminate It!. If you find any of these registry values on your PC, your computer is very likely to be infected with the MultiPlug - adware.

IMPORTANT: Because the registry is a core component of your Windows system, it is strongly recommended that you back up the registry before you begin deleting keys and values. For information about backing up the Windows registry, refer to the Registry Editor online help.
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\zigipyro]ImagePath=[%LOCAL_APPDATA%]\4C4C4544-1457861231-4C10-8033-C8C04F535A31\qnsxE00F.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\wucotusy]ImagePath=[%PROGRAM_FILES%]\4C4C4544-1457828097-4C10-8033-C8C04F535A31\hnsnF083.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\dojygici]ImagePath=[%PROGRAM_FILES%]\4C4C4544-1457828097-4C10-8033-C8C04F535A31\jnsiD7B4.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\dojygici]ImagePath=[%PROGRAM_FILES%]\E2E46440-1457297264-71D9-20D3-88AE1D00D589\jnsn237.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\zigipyro]ImagePath=[%LOCAL_APPDATA%]\E2E46440-1458387148-71D9-20D3-88AE1D00D589\qnse147E.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\wucotusy]ImagePath=[%PROGRAM_FILES%]\E2E46440-1457297264-71D9-20D3-88AE1D00D589\hnsi1858.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\gerocyni]ImagePath=[%PROGRAM_FILES%]\E2E46440-1458381524-71D9-20D3-88AE1D00D589\jnswB8A6.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\zigipyro]ImagePath=[%LOCAL_APPDATA%]\46313030-1458400627-4136-3535-4435FFFFFFFF\qnswAAF0.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\wucotusy]ImagePath=[%PROGRAM_FILES%]\46313030-1458151433-4136-3535-4435FFFFFFFF\hnse2F4C.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\gerocyni]ImagePath=[%PROGRAM_FILES%]\46313030-1458151433-4136-3535-4435FFFFFFFF\jnsj18DD.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\wucotusy]ImagePath=[%PROGRAM_FILES%]\8F3B8C90-1457419831-11D5-AE74-CA256A3D10FA\hnsm789C.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\wucotusy]ImagePath=[%PROGRAM_FILES%]\03000200-1458348129-0500-0006-000700080009\hnsg5A7C.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\gerocyni]ImagePath=[%PROGRAM_FILES%]\03000200-1458348129-0500-0006-000700080009\jnsh4339.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\gerocyni]ImagePath=[%PROGRAM_FILES%]\8083592B-1458058662-E211-9F71-A12859799B2E\jnsr5B61.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\wucotusy]ImagePath=[%PROGRAM_FILES%]\4C4C4544-1458376373-3810-8048-B4C04F373253\hnslE0B3.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\gerocyni]ImagePath=[%PROGRAM_FILES%]\4C4C4544-1458376373-3810-8048-B4C04F373253\jnsgB992.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\wucotusy]ImagePath=[%PROGRAM_FILES%]\F5E11D28-1458327732-11E4-9F6E-28D244FE024A\hnsa6380.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\gerocyni]ImagePath=[%PROGRAM_FILES%]\F5E11D28-1458327732-11E4-9F6E-28D244FE024A\jnsl4C2D.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\wucotusy]ImagePath=[%PROGRAM_FILES%]\0D519BA0-1458416332-11DD-9C28-00221595BE67\hnso11C.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\gerocyni]ImagePath=[%PROGRAM_FILES%]\0D519BA0-1458416332-11DD-9C28-00221595BE67\jnsiE8E8.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\zigipyro]ImagePath=[%LOCAL_APPDATA%]\D9A54BF8-1456754666-FE08-BB1A-A02BB823413D\qnsr8A9.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\zutuzuni]ImagePath=[%PROGRAM_FILES%]\03000200-1456548893-0500-0006-000700080009\jnst6347.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\zigipyro]ImagePath=[%LOCAL_APPDATA%]\03000200-1458389422-0500-0006-000700080009\qnse55EE.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\wucotusy]ImagePath=[%PROGRAM_FILES%]\03000200-1456548893-0500-0006-000700080009\hnsi78FA.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\wucotusy]ImagePath=[%PROGRAM_FILES%]\E65C0523-1457334490-DE11-8D35-001CC0C13E9C\hnssD720.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\dojygici]ImagePath=[%PROGRAM_FILES%]\E65C0523-1457334490-DE11-8D35-001CC0C13E9C\jnssA9B8.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\wucotusy]ImagePath=[%PROGRAM_FILES%]\E0FB1C5C-1458297870-E411-B2A0-1458D01137B1\hnsbC63F.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\gerocyni]ImagePath=[%PROGRAM_FILES%]\E0FB1C5C-1458297870-E411-B2A0-1458D01137B1\jnsa7668.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\rowugoqo]ImagePath=[%LOCAL_APPDATA%]\03000200-1458329021-0500-0006-000700080009\snsi1452.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\gerocyni]ImagePath=[%PROGRAM_FILES%]\03000200-1458325048-0500-0006-000700080009\jnsaA77A.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\wucotusy]ImagePath=[%PROGRAM_FILES%]\A66A7420-1458245311-11DE-8FD2-90E6BA845DA4\hnsbDBD.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\gerocyni]ImagePath=[%PROGRAM_FILES%]\A66A7420-1458245311-11DE-8FD2-90E6BA845DA4\jnscF67A.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\wucotusy]ImagePath=[%PROGRAM_FILES%]\44AA60B9-1455955188-4648-857F-2C600CC9F8F8\hnsnE0E7.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\zutuzuni]ImagePath=[%PROGRAM_FILES%]\38E3D580-1456853389-16B1-AC63-35A14851EE87\jnspC3F5.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\wucotusy]ImagePath=[%PROGRAM_FILES%]\38E3D580-1456853389-16B1-AC63-35A14851EE87\hnssD982.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\zigipyro]ImagePath=[%LOCAL_APPDATA%]\B4C4FEB2-1458294590-3381-252E-FB373B674442\qnsg61CA.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\wucotusy]ImagePath=[%PROGRAM_FILES%]\B4C4FEB2-1457950209-3381-252E-FB373B674442\hnso7EC0.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\gerocyni]ImagePath=[%PROGRAM_FILES%]\B4C4FEB2-1457950209-3381-252E-FB373B674442\jnsd5731.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\zutuzuni]ImagePath=[%PROGRAM_FILES%]\A9A6104E-1454370476-FF4A-B66F-382C4A7FCC2F\jnse7096.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\wucotusy]ImagePath=[%PROGRAM_FILES%]\A9A6104E-1454370476-FF4A-B66F-382C4A7FCC2F\hnscF894.tmp
  • [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]autoauto=[%PROGRAM_FILES%]\atonement\reliving.exe
  • [HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]dutoauto=[%PROGRAM_FILES%]\atonement\vexation.exe
  • [HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]interpee=[%PROGRAM_FILES%]\atonement\reliving.exe
  • [HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]rutoauto=[%PROGRAM_FILES%]\atonement\reliving.exe
  • [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]interpee=[%PROGRAM_FILES%]\atonement\reliving.exe
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\wucotusy]ImagePath=[%PROGRAM_FILES%]\41414141-1458263342-4141-4141-414141414141\hnsn1A19.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\zigipyro]ImagePath=[%LOCAL_APPDATA%]\804EEB8F-1458316534-DF11-A139-4487FCCD896E\qnsu7190.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\wucotusy]ImagePath=[%PROGRAM_FILES%]\804EEB8F-1458341034-DF11-A139-4487FCCD896E\hnsl56FF.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\gerocyni]ImagePath=[%PROGRAM_FILES%]\804EEB8F-1458341034-DF11-A139-4487FCCD896E\jnsg3B72.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\wucotusy]ImagePath=[%PROGRAM_FILES%]\153A23C7-1458184543-E211-A5A4-201A06080C85\hnsr649D.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\gerocyni]ImagePath=[%PROGRAM_FILES%]\153A23C7-1458184543-E211-A5A4-201A06080C85\jnsy4F00.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\zutuzuni]ImagePath=[%PROGRAM_FILES%]\A0496D45-1455602409-C0A9-E1E0-4E45435F4349\jnsz7B71.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\zigipyro]ImagePath=[%LOCAL_APPDATA%]\A0496D45-1456850060-C0A9-E1E0-4E45435F4349\qnsw2360.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\wucotusy]ImagePath=[%PROGRAM_FILES%]\A0496D45-1455602409-C0A9-E1E0-4E45435F4349\hnsp947F.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\rowugoqo]ImagePath=[%LOCAL_APPDATA%]\A0496D45-1455613307-C0A9-E1E0-4E45435F4349\snskD0E2.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\wucotusy]ImagePath=[%PROGRAM_FILES%]\4236B985-1458265732-0A24-93A2-8E4F5340E6F9\hnsy1C80.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\gerocyni]ImagePath=[%PROGRAM_FILES%]\4236B985-1458265732-0A24-93A2-8E4F5340E6F9\jnsjFD0D.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\zigipyro]ImagePath=[%LOCAL_APPDATA%]\9F8FB5A0-1458228168-11B2-8000-FE41804DD76F\qnsl9B9.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\wucotusy]ImagePath=[%PROGRAM_FILES%]\9F8FB5A0-1457700128-11B2-8000-FE41804DD76F\hnsg176C.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\dojygici]ImagePath=[%PROGRAM_FILES%]\9F8FB5A0-1457700128-11B2-8000-FE41804DD76F\jnsqF70E.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\wucotusy]ImagePath=[%PROGRAM_FILES%]\4C4C4544-1458236529-4E10-8059-B8C04F475A31\hnsl30F.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\gerocyni]ImagePath=[%PROGRAM_FILES%]\4C4C4544-1458236529-4E10-8059-B8C04F475A31\jnsgDE5E.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\gerocyni]ImagePath=[%PROGRAM_FILES%]\4C4C4544-1458203774-3010-804C-B9C04F503532\jnsd91AF.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\wucotusy]ImagePath=[%PROGRAM_FILES%]\00430C4E-1458210042-E211-8030-B01DA3070617\hnsb5057.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\gerocyni]ImagePath=[%PROGRAM_FILES%]\00430C4E-1458210042-E211-8030-B01DA3070617\jnsx39DF.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\zutuzuni]ImagePath=[%PROGRAM_FILES%]\35444335-1456152622-5436-5354-D0BF9C87018F\jnsx77A1.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\zigipyro]ImagePath=[%LOCAL_APPDATA%]\35444335-1458249769-5436-5354-D0BF9C87018F\qnsuB94C.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\wucotusy]ImagePath=[%PROGRAM_FILES%]\35444335-1456152622-5436-5354-D0BF9C87018F\hnsx923F.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\gerocyni]ImagePath=[%PROGRAM_FILES%]\35444335-1458230215-5436-5354-D0BF9C87018F\jnsb671B.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\zigipyro]ImagePath=[%LOCAL_APPDATA%]\7589A758-1458252348-11E2-BF8A-A088BF0C300E\qnsaAE38.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\dojygici]ImagePath=[%PROGRAM_FILES%]\A821564A-1457632995-E211-8444-208984A0202A\jnsj941.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\wucotusy]ImagePath=[%PROGRAM_FILES%]\A821564A-1457632995-E211-8444-208984A0202A\hnss2C8A.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\wucotusy]ImagePath=[%PROGRAM_FILES%]\D6819081-1458123209-E111-8811-DC0EA168C80A\hnsb2FAB.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\gerocyni]ImagePath=[%PROGRAM_FILES%]\D6819081-1458123209-E111-8811-DC0EA168C80A\jnsr1279.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\wucotusy]ImagePath=[%PROGRAM_FILES%]\81AE4C3B-1458287137-CB11-8E49-C527292ABB28\hnsiA7CA.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\zigipyro]ImagePath=[%LOCAL_APPDATA%]\4A6976A0-1458150983-11DD-B0DF-1C872C58E0DF\qnsj47AB.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\wucotusy]ImagePath=[%PROGRAM_FILES%]\4A6976A0-1458163494-11DD-B0DF-1C872C58E0DF\hnsxB2B7.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\gerocyni]ImagePath=[%PROGRAM_FILES%]\4A6976A0-1458163494-11DD-B0DF-1C872C58E0DF\jnsg971E.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\zigipyro]ImagePath=[%LOCAL_APPDATA%]\4C4C4544-1458164113-3410-8054-B9C04F305131\qnsxFCA9.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\gerocyni]ImagePath=[%PROGRAM_FILES%]\4C4C4544-1458172936-3410-8054-B9C04F305131\jnsa2A2C.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\zigipyro]ImagePath=[%LOCAL_APPDATA%]\A7F240E8-1457298303-1220-0427-171724000000\qnsxFCE7.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\rowugoqo]ImagePath=[%LOCAL_APPDATA%]\566E55B0-1458205943-81E5-27D3-2C56DC1EA30E\snsx9883.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\wucotusy]ImagePath=[%PROGRAM_FILES%]\03000200-1458160447-0500-0006-000700080009\hnseBF96.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\gerocyni]ImagePath=[%PROGRAM_FILES%]\03000200-1458160447-0500-0006-000700080009\jnse9FE4.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\zigipyro]ImagePath=[%LOCAL_APPDATA%]\03000200-1458203818-0500-0006-000700080009\qnsk72D8.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\zigipyro]ImagePath=[%LOCAL_APPDATA%]\03000200-1458216854-0500-0006-000700080009\qnsmDFF6.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\zigipyro]ImagePath=[%LOCAL_APPDATA%]\56C0C845-1458024597-89E8-4B5E-DAEABC8C320D\qnswDA78.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\wucotusy]ImagePath=[%PROGRAM_FILES%]\56C0C845-1457774452-89E8-4B5E-DAEABC8C320D\hnsbCD5F.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\dojygici]ImagePath=[%PROGRAM_FILES%]\56C0C845-1457774452-89E8-4B5E-DAEABC8C320D\jnswB4DE.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\wucotusy]ImagePath=[%PROGRAM_FILES%]\32444335-1458215675-5833-5342-38EAA7D7C700\hnsdBCA9.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\gerocyni]ImagePath=[%PROGRAM_FILES%]\32444335-1458215675-5833-5342-38EAA7D7C700\jnsf9B25.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\wucotusy]ImagePath=[%PROGRAM_FILES%]\1EC882A0-1458135729-11DD-B01F-E03F4947BDAB\hnsa3CEA.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\gerocyni]ImagePath=[%PROGRAM_FILES%]\1EC882A0-1458135729-11DD-B01F-E03F4947BDAB\jnsc272E.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\zigipyro]ImagePath=[%LOCAL_APPDATA%]\1A606C00-1458279845-11E3-9248-A0D3C11A0676\qnsn7D6B.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\wucotusy]ImagePath=[%PROGRAM_FILES%]\1A606C00-1458049233-11E3-9248-A0D3C11A0676\hnss32DE.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\gerocyni]ImagePath=[%PROGRAM_FILES%]\1A606C00-1458049233-11E3-9248-A0D3C11A0676\jnso10EC.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\zigipyro]ImagePath=[%LOCAL_APPDATA%]\6AD4C389-1458233175-DF11-88A9-88AE1DCFD949\qnscC0E0.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\wucotusy]ImagePath=[%PROGRAM_FILES%]\6AD4C389-1457684434-DF11-88A9-88AE1DCFD949\hnsqE6BC.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\dojygici]ImagePath=[%PROGRAM_FILES%]\6AD4C389-1457684434-DF11-88A9-88AE1DCFD949\jnsaAF36.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\zutuzuni]ImagePath=[%PROGRAM_FILES%]\E6C298C0-1455286233-11DD-82A3-544249E2B3FA\jnsb9733.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\wucotusy]ImagePath=[%PROGRAM_FILES%]\E6C298C0-1455286233-11DD-82A3-544249E2B3FA\hnsbCEA9.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\gerocyni]ImagePath=[%PROGRAM_FILES%]\03000200-1457977800-0500-0006-000700080009\jnsb8579.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\rowugoqo]ImagePath=[%LOCAL_APPDATA%]\03000200-1457879256-0500-0006-000700080009\snsgFBC.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\zigipyro]ImagePath=[%LOCAL_APPDATA%]\03000200-1458145598-0500-0006-000700080009\qnsr7003.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\wucotusy]ImagePath=[%PROGRAM_FILES%]\03000200-1457875538-0500-0006-000700080009\hnsaA602.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\gerocyni]ImagePath=[%PROGRAM_FILES%]\03000200-1457875538-0500-0006-000700080009\jnsa8602.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\dojygici]ImagePath=[%PROGRAM_FILES%]\3539FE12-1457332602-CDE2-FC94-D850E6547045\jnsl36B.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\wucotusy]ImagePath=[%PROGRAM_FILES%]\3539FE12-1457332602-CDE2-FC94-D850E6547045\hnsrE3CD.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\wucotusy]ImagePath=[%PROGRAM_FILES%]\79AC4C5E-1457982636-5AE8-B793-AB2D8069E0A2\hnsbF451.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\rowugoqo]ImagePath=[%LOCAL_APPDATA%]\79AC4C5E-1458002560-5AE8-B793-AB2D8069E0A2\snsr7217.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\gerocyni]ImagePath=[%PROGRAM_FILES%]\79AC4C5E-1457982636-5AE8-B793-AB2D8069E0A2\jnsgC534.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\gerocyni]ImagePath=[%PROGRAM_FILES%]\30464E43-1458079395-3239-3948-00269EE62C62\jnsg6284.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\wucotusy]ImagePath=[%PROGRAM_FILES%]\01D0866D-1457883223-FE5A-6DC5-9D4151FA4690\hnshD57.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\zigipyro]ImagePath=[%LOCAL_APPDATA%]\01D0866D-1458089025-FE5A-6DC5-9D4151FA4690\qnss1EEA.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\gerocyni]ImagePath=[%PROGRAM_FILES%]\01D0866D-1457883223-FE5A-6DC5-9D4151FA4690\jnssE8B6.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\wucotusy]ImagePath=[%PROGRAM_FILES%]\4C4C4544-1458030311-5410-8042-C3C04F59334A\hnsc67A8.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\gerocyni]ImagePath=[%PROGRAM_FILES%]\4C4C4544-1458030311-5410-8042-C3C04F59334A\jnsc4DC0.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\wucotusy]ImagePath=[%PROGRAM_FILES%]\2B212B08-1458136980-0F01-0408-DC4A3E179768\hnsw7274.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\gerocyni]ImagePath=[%PROGRAM_FILES%]\2B212B08-1458136980-0F01-0408-DC4A3E179768\jnst5D35.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\zigipyro]ImagePath=[%LOCAL_APPDATA%]\80A1CA5B-1456937113-E411-85C7-F0761C807B13\qnsj8AE7.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\wucotusy]ImagePath=[%PROGRAM_FILES%]\80A1CA5B-1456922610-E411-85C7-F0761C807B13\hnspAD13.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\dojygici]ImagePath=[%PROGRAM_FILES%]\80A1CA5B-1456922610-E411-85C7-F0761C807B13\jnso9226.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\wucotusy]ImagePath=[%PROGRAM_FILES%]\4C4C4544-1457951443-3610-8033-C6C04F535131\hnsl4A3D.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\gerocyni]ImagePath=[%PROGRAM_FILES%]\4C4C4544-1457951443-3610-8033-C6C04F535131\jnsr2A5D.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\wucotusy]ImagePath=[%PROGRAM_FILES%]\4C4C4544-1458023957-5110-8037-C3C04F515831\hnsmC182.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\gerocyni]ImagePath=[%PROGRAM_FILES%]\4C4C4544-1458023957-5110-8037-C3C04F515831\jnsyA126.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\wucotusy]ImagePath=[%PROGRAM_FILES%]\B82B3C82-1458124685-3642-8F9B-382C4A7DD92D\hnsz3BA3.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\gerocyni]ImagePath=[%PROGRAM_FILES%]\B82B3C82-1458124685-3642-8F9B-382C4A7DD92D\jnsj14DF.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\molelere]ImagePath=[%APPDATA%]\D35B8A44-1424386585-1420-1117-105916000000\jnsjF45C.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\wucotusy]ImagePath=[%PROGRAM_FILES%]\00035F72-1458116094-DF11-9657-7071BC716BBC\hnsm6972.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\gerocyni]ImagePath=[%PROGRAM_FILES%]\00035F72-1458116094-DF11-9657-7071BC716BBC\jnsw4DF4.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\zigipyro]ImagePath=[%LOCAL_APPDATA%]\552BB6CC-1458130489-E411-ADE7-3863BBCDD594\qnswB512.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\wucotusy]ImagePath=[%PROGRAM_FILES%]\552BB6CC-1458123960-E411-ADE7-3863BBCDD594\hnsj7FB7.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\gerocyni]ImagePath=[%PROGRAM_FILES%]\552BB6CC-1458123960-E411-ADE7-3863BBCDD594\jnsp67F7.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\wyricexe]ImagePath=[%PROGRAM_FILES%]\03AA02FC-1437110134-05D9-6106-650700080009\knskF95.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\weriwixo]ImagePath=[%PROGRAM_FILES%]\03AA02FC-1437110134-05D9-6106-650700080009\knsd6602.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\vodovyfe]ImagePath=[%PROGRAM_FILES%]\03AA02FC-1437110134-05D9-6106-650700080009\knsr408C.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\titebewo]ImagePath=[%PROGRAM_FILES%]\03AA02FC-1437110134-05D9-6106-650700080009\knsz6468.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\rygycucu]ImagePath=[%PROGRAM_FILES%]\03AA02FC-1437110134-05D9-6106-650700080009\knsy6351.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\pegicede]ImagePath=[%PROGRAM_FILES%]\03AA02FC-1437110134-05D9-6106-650700080009\knsc1AE1.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\moketudo]ImagePath=[%PROGRAM_FILES%]\03AA02FC-1437110134-05D9-6106-650700080009\knsi4C3B.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\junihuji]ImagePath=[%PROGRAM_FILES%]\03AA02FC-1437110134-05D9-6106-650700080009\knsyDAF5.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\hiqesulu]ImagePath=[%PROGRAM_FILES%]\03AA02FC-1437110134-05D9-6106-650700080009\knsy3993.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\hemogety]ImagePath=[%PROGRAM_FILES%]\03AA02FC-1437110134-05D9-6106-650700080009\knsjBB02.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\gusuviby]ImagePath=[%PROGRAM_FILES%]\03AA02FC-1437110134-05D9-6106-650700080009\knsn6A0A.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\wucotusy]ImagePath=[%PROGRAM_FILES%]\13B86C20-1458111778-11D9-9EDC-F46D0466C1A8\hnsl52EB.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\zigipyro]ImagePath=[%LOCAL_APPDATA%]\522B4760-1458156698-11E1-8D1A-047D7BB2B183\qnsx8349.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\wucotusy]ImagePath=[%PROGRAM_FILES%]\522B4760-1458099661-11E1-8D1A-047D7BB2B183\hnspB7FB.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\rowugoqo]ImagePath=[%LOCAL_APPDATA%]\522B4760-1458128914-11E1-8D1A-047D7BB2B183\snsnFF57.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\gerocyni]ImagePath=[%PROGRAM_FILES%]\522B4760-1458099661-11E1-8D1A-047D7BB2B183\jnst806F.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\wucotusy]ImagePath=[%PROGRAM_FILES%]\03000200-1458109483-0500-0006-000700080009\hnscBCA.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\gerocyni]ImagePath=[%PROGRAM_FILES%]\03000200-1458109483-0500-0006-000700080009\jnsgF012.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\gerocyni]ImagePath=[%PROGRAM_FILES%]\40E31210-1458085801-DE11-9BB8-BB749A3E5D79\jnso1E4.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\wucotusy]ImagePath=[%PROGRAM_FILES%]\40E31210-1458085801-DE11-9BB8-BB749A3E5D79\hnsd1797.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\wucotusy]ImagePath=[%PROGRAM_FILES%]\975E0080-1458158964-81DF-27E7-20CF3076042B\hnsoA1B2.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\gerocyni]ImagePath=[%PROGRAM_FILES%]\975E0080-1458158964-81DF-27E7-20CF3076042B\jnsk8BD6.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\zigipyro]ImagePath=[%LOCAL_APPDATA%]\6CF7324B-1458073284-E511-90AB-DC4A3ED113DE\qnsi293A.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\wucotusy]ImagePath=[%PROGRAM_FILES%]\6CF7324B-1456740195-E511-90AB-DC4A3ED113DE\hnsw4B58.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\wucotusy]ImagePath=[%PROGRAM_FILES%]\400EE856-1458045163-DA09-F8F1-1C7508DCF31C\hnsxFA79.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\wucotusy]ImagePath=[%PROGRAM_FILES%]\FF7DF4A0-1458036957-11E4-BE79-287CD1C91700\hnswA6C8.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\gerocyni]ImagePath=[%PROGRAM_FILES%]\FF7DF4A0-1458036957-11E4-BE79-287CD1C91700\jnsh8EF3.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\zigipyro]ImagePath=[%LOCAL_APPDATA%]\88149E27-1457711651-0C97-37D9-40167E20728E\qnsjAA9B.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\wucotusy]ImagePath=[%PROGRAM_FILES%]\88149E27-1457682102-0C97-37D9-40167E20728E\hnseA53E.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\dojygici]ImagePath=[%PROGRAM_FILES%]\88149E27-1457682102-0C97-37D9-40167E20728E\jnsp830D.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\wucotusy]ImagePath=[%PROGRAM_FILES%]\03000200-1457810149-0500-0006-000700080009\hnsrC929.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\wucotusy]ImagePath=[%PROGRAM_FILES%]\33444335-1458031082-4635-314E-7446A07ADB92\hnsu9720.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\gerocyni]ImagePath=[%PROGRAM_FILES%]\33444335-1458031082-4635-314E-7446A07ADB92\jnsf7FCD.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\zutuzuni]ImagePath=[%PROGRAM_FILES%]\4C4C4544-1454568448-5A10-805A-B9C04F373132\jnsa2A2E.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\wucotusy]ImagePath=[%PROGRAM_FILES%]\4C4C4544-1454568448-5A10-805A-B9C04F373132\hnslAC21.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\zigipyro]ImagePath=[%LOCAL_APPDATA%]\32B655E4-1454701755-DF11-AF6E-00270E035F08\qnsxD75D.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\rowugoqo]ImagePath=[%LOCAL_APPDATA%]\8A7C8FC8-1454262418-0CB4-AAD6-CAEAC88B3FD2\snso2878.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\wucotusy]ImagePath=[%PROGRAM_FILES%]\7906B1E6-1458055196-5546-93FB-382C4A7DD43E\hnsg75EC.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\zigipyro]ImagePath=[%LOCAL_APPDATA%]\803B7C3B-1457836895-E111-9621-00266C23C76E\qnsh85A5.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\wucotusy]ImagePath=[%PROGRAM_FILES%]\803B7C3B-1457476421-E111-9621-00266C23C76E\hnszEBB9.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\dojygici]ImagePath=[%PROGRAM_FILES%]\803B7C3B-1457476421-E111-9621-00266C23C76E\jnseCE48.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\wucotusy]ImagePath=[%PROGRAM_FILES%]\57E21F00-1458033035-0820-0828-141019000000\hnsl4DA7.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\gerocyni]ImagePath=[%PROGRAM_FILES%]\57E21F00-1458033035-0820-0828-141019000000\jnsg3268.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\zigipyro]ImagePath=[%LOCAL_APPDATA%]\A1A586E7-1458047014-08F6-5110-5EADB9F88684\qnsn10BB.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\wucotusy]ImagePath=[%PROGRAM_FILES%]\A1A586E7-1457925954-08F6-5110-5EADB9F88684\hnsoDAFC.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\gerocyni]ImagePath=[%PROGRAM_FILES%]\A1A586E7-1457925954-08F6-5110-5EADB9F88684\jnsdBA6F.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\rowugoqo]ImagePath=[%LOCAL_APPDATA%]\1DF24A0F-1458068167-11DA-BBDA-C2035E150014\snsj127.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\zigipyro]ImagePath=[%LOCAL_APPDATA%]\03D40274-1457725398-0511-5206-B30700080009\qnsaD7BA.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\wucotusy]ImagePath=[%PROGRAM_FILES%]\03D40274-1457717977-0511-5206-B30700080009\hnsp8C69.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\zigipyro]ImagePath=[%LOCAL_APPDATA%]\1E006360-1458067601-4700-FF5C-C86000C224C3\qnsa6A78.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\wucotusy]ImagePath=[%PROGRAM_FILES%]\1E006360-1458063364-4700-FF5C-C86000C224C3\hnsc2A00.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\gerocyni]ImagePath=[%PROGRAM_FILES%]\1E006360-1458063364-4700-FF5C-C86000C224C3\jnst12CD.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\zigipyro]ImagePath=[%LOCAL_APPDATA%]\03DE0294-1457815039-0519-8706-010700080009\qnshC295.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\gerocyni]ImagePath=[%PROGRAM_FILES%]\6188D400-1457920941-11DD-A444-BCEE7B78DED3\jnsk4D00.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\wucotusy]ImagePath=[%PROGRAM_FILES%]\E98F04E0-1454655820-11E1-B32E-047D7B666D4F\hnslCD4F.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\zutuzuni]ImagePath=[%PROGRAM_FILES%]\2A84D099-1456582400-0A45-B51A-2C600CE020ED\jnsv4C2D.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\zigipyro]ImagePath=[%LOCAL_APPDATA%]\2A84D099-1457994556-0A45-B51A-2C600CE020ED\qnsmD950.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\wucotusy]ImagePath=[%PROGRAM_FILES%]\2A84D099-1456582400-0A45-B51A-2C600CE020ED\hnsq9704.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\wucotusy]ImagePath=[%PROGRAM_FILES%]\1EBD0553-1457692905-E7F4-1B2F-F8495C777FD3\hnse47B0.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\dojygici]ImagePath=[%PROGRAM_FILES%]\1EBD0553-1457692905-E7F4-1B2F-F8495C777FD3\jnse23BA.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\gerocyni]ImagePath=[%PROGRAM_FILES%]\00000000-1457900882-0000-0000-448A5B57C668\jnsv5BD.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\wucotusy]ImagePath=[%PROGRAM_FILES%]\00000000-1457900882-0000-0000-448A5B57C668\hnsq1AA6.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\zutuzuni]ImagePath=[%PROGRAM_FILES%]\2F221FDB-1456320238-11E4-B57F-68F728234A84\jnsfF66F.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\wucotusy]ImagePath=[%PROGRAM_FILES%]\2F221FDB-1456320238-11E4-B57F-68F728234A84\hnsg16BE.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\rowugoqo]ImagePath=[%LOCAL_APPDATA%]\2F221FDB-1456298726-11E4-B57F-68F728234A84\snsq1CF4.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\wucotusy]ImagePath=[%PROGRAM_FILES%]\00000000-1457682590-0000-0807-060504030201\hnsg6F5E.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\dojygici]ImagePath=[%PROGRAM_FILES%]\00000000-1457682590-0000-0807-060504030201\jnsu53E4.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\gerocyni]ImagePath=[%PROGRAM_FILES%]\00000000-1457901633-0000-0807-060504030201\jnsvB411.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\wucotusy]ImagePath=[%PROGRAM_FILES%]\D63C5C1B-1458008278-9942-B853-00E0B87497E0\hnsbF5FF.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\gerocyni]ImagePath=[%PROGRAM_FILES%]\D63C5C1B-1458008278-9942-B853-00E0B87497E0\jnspD94D.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\kiqidetu]ImagePath=[%PROGRAM_FILES%]\D6B6907C-1447268852-DF11-8D9C-705AB67C4271\jnsm131A.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\gilefywi]ImagePath=[%PROGRAM_FILES%]\D6B6907C-1447268852-DF11-8D9C-705AB67C4271\hnst30E5.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\zigipyro]ImagePath=[%LOCAL_APPDATA%]\03D40274-1457812945-05DF-AB06-2B0700080009\qnsnA8B9.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\wucotusy]ImagePath=[%PROGRAM_FILES%]\03D40274-1457792466-05DF-AB06-2B0700080009\hnsu9402.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\rowugoqo]ImagePath=[%LOCAL_APPDATA%]\03D40274-1457812374-05DF-AB06-2B0700080009\snsuF1BA.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\dojygici]ImagePath=[%PROGRAM_FILES%]\03D40274-1457792466-05DF-AB06-2B0700080009\jnse7884.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\wucotusy]ImagePath=[%PROGRAM_FILES%]\4C4C4544-1458011268-4610-8033-B5C04F535031\hnscF8C8.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\gerocyni]ImagePath=[%PROGRAM_FILES%]\4C4C4544-1458011268-4610-8033-B5C04F535031\jnsvDB4B.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\zigipyro]ImagePath=[%LOCAL_APPDATA%]\FFFFFFFF-1455765841-FFFF-FFFF-FFFFFFFFFFFF\qnst39C.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\zigipyro]ImagePath=[%LOCAL_APPDATA%]\59404F98-1457905092-E511-A726-F0761CC839AB\qnsq150E.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\roqenufe]ImagePath=[%PROGRAM_FILES%]\59404F98-1449525423-E511-A726-F0761CC839AB\jnst6FAA.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\nyneryxo]ImagePath=[%PROGRAM_FILES%]\59404F98-1449525423-E511-A726-F0761CC839AB\hnsy88E1.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\wucotusy]ImagePath=[%PROGRAM_FILES%]\03000200-1457936167-0500-0006-000700080009\hnsa25CC.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\gerocyni]ImagePath=[%PROGRAM_FILES%]\03000200-1457936167-0500-0006-000700080009\jnsvED4D.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\mecobigi]ImagePath=[%APPDATA%]\9085BF8D-1426459838-DF11-AFCC-88AE1D897A40\jnsh44EE.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\zigipyro]ImagePath=[%LOCAL_APPDATA%]\1E0050E0-1457981688-1701-9A69-001FC6110A82\qnsdFF43.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\wucotusy]ImagePath=[%PROGRAM_FILES%]\1E0050E0-1457973520-1701-9A69-001FC6110A82\hnsgBA54.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\gerocyni]ImagePath=[%PROGRAM_FILES%]\1E0050E0-1457973520-1701-9A69-001FC6110A82\jnsmA37E.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\zigipyro]ImagePath=[%LOCAL_APPDATA%]\4C4C4544-1457703099-5810-804B-B1C04F583132\qnsxE393.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\rowugoqo]ImagePath=[%LOCAL_APPDATA%]\BC68EB80-1454795841-81E1-3B9B-C86000386664\snssCA14.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\zigipyro]ImagePath=[%LOCAL_APPDATA%]\4C4C4544-1457805506-5610-8033-B6C04F48344A\qnsz6D47.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\wucotusy]ImagePath=[%PROGRAM_FILES%]\4C4C4544-1457705049-5610-8033-B6C04F48344A\hnsc682E.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\dojygici]ImagePath=[%PROGRAM_FILES%]\4C4C4544-1457705049-5610-8033-B6C04F48344A\jnsw2D8C.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\zigipyro]ImagePath=[%LOCAL_APPDATA%]\4C4C4544-1457824619-5110-8042-B7C04F353132\qnsl4021.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\zigipyro]ImagePath=[%LOCAL_APPDATA%]\00000000-1457880556-0000-0000-D8CB8A10275D\qnsi9F86.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\wucotusy]ImagePath=[%PROGRAM_FILES%]\00000000-1457875049-0000-0000-D8CB8A10275D\hnskF9F8.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\gerocyni]ImagePath=[%PROGRAM_FILES%]\00000000-1457875049-0000-0000-D8CB8A10275D\jnslE43B.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\wucotusy]ImagePath=[%PROGRAM_FILES%]\00000000-1457817655-0000-0000-1C6F6593BE74\hnsmB0EE.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\dojygici]ImagePath=[%PROGRAM_FILES%]\4C4C4544-1457786199-3610-8035-B4C04F4D5631\jnsuA14.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\wucotusy]ImagePath=[%PROGRAM_FILES%]\4C4C4544-1457786199-3610-8035-B4C04F4D5631\hnsp2257.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\wucotusy]ImagePath=[%PROGRAM_FILES%]\4C4C4544-1457726212-5A10-8048-C4C04F4A5631\hnssC5B0.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\dojygici]ImagePath=[%PROGRAM_FILES%]\4C4C4544-1457726212-5A10-8048-C4C04F4A5631\jnswA8C0.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\zigipyro]ImagePath=[%LOCAL_APPDATA%]\A7E9C3C1-1457823930-11E1-A60C-987F041CF03A\qnss60.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\wucotusy]ImagePath=[%PROGRAM_FILES%]\A7E9C3C1-1457803260-11E1-A60C-987F041CF03A\hnstEEA5.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\dojygici]ImagePath=[%PROGRAM_FILES%]\A7E9C3C1-1457803260-11E1-A60C-987F041CF03A\jnsd7475.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\wucotusy]ImagePath=[%PROGRAM_FILES%]\D86EB4A0-1457637296-11B2-8000-92ACFDEC7D41\hnsuA44C.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\dojygici]ImagePath=[%PROGRAM_FILES%]\D86EB4A0-1457637296-11B2-8000-92ACFDEC7D41\jnsu8BD0.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\zutuzuni]ImagePath=[%PROGRAM_FILES%]\4C4C4544-1456618609-4410-8044-B5C04F4A5631\jnsg6652.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\zigipyro]ImagePath=[%LOCAL_APPDATA%]\4C4C4544-1457798516-4410-8044-B5C04F4A5631\qnsq6B8C.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\wucotusy]ImagePath=[%PROGRAM_FILES%]\4C4C4544-1456618609-4410-8044-B5C04F4A5631\hnsv7E8F.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\zutuzuni]ImagePath=[%PROGRAM_FILES%]\87BD4F4D-1455205405-D9F9-FBD4-F0795991E5DC\jnss5908.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\zigipyro]ImagePath=[%LOCAL_APPDATA%]\87BD4F4D-1455209628-D9F9-FBD4-F0795991E5DC\qnsg9F0E.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\wucotusy]ImagePath=[%PROGRAM_FILES%]\87BD4F4D-1455205405-D9F9-FBD4-F0795991E5DC\hnsn731F.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\wucotusy]ImagePath=[%PROGRAM_FILES%]\ECEB860E-1457720694-DE11-91E1-002622E5A706\hnsgDF8.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\dojygici]ImagePath=[%PROGRAM_FILES%]\ECEB860E-1457720694-DE11-91E1-002622E5A706\jnsqF44E.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\zigipyro]ImagePath=[%LOCAL_APPDATA%]\6CD47174-1457714431-1141-2D36-D9731E2F021A\qnsg12.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\rowugoqo]ImagePath=[%LOCAL_APPDATA%]\6CD47174-1457713872-1141-2D36-D9731E2F021A\snsd7947.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\wucotusy]ImagePath=[%PROGRAM_FILES%]\FFFFFFFF-1457878992-FFFF-FFFF-FFFFFFFFFFFF\hnsh746F.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\wucotusy]ImagePath=[%PROGRAM_FILES%]\028542C5-1457813340-E011-923A-14DAE9E84E46\hnsr1F1F.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\rowugoqo]ImagePath=[%LOCAL_APPDATA%]\4C4C4544-1457001010-0110-8001-80C04F010101\snstFA0.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\zigipyro]ImagePath=[%LOCAL_APPDATA%]\4C4C4544-1457069233-0110-8001-80C04F010101\qnsv29D6.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\zutuzuni]ImagePath=[%APPDATA%]\542AF37C-1454485122-E411-B2A0-D0BF9C0EC823\jnsrA4E6.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\zigipyro]ImagePath=[%LOCAL_APPDATA%]\542AF37C-1457768692-E411-B2A0-D0BF9C0EC823\qnsx4471.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\wucotusy]ImagePath=[%APPDATA%]\542AF37C-1454485122-E411-B2A0-D0BF9C0EC823\hnswD099.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\zigipyro]ImagePath=[%LOCAL_APPDATA%]\03000200-1457724754-0500-0006-000700080009\qnsxCC93.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\wucotusy]ImagePath=[%PROGRAM_FILES%]\03000200-1457624357-0500-0006-000700080009\hnsr860F.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\dojygici]ImagePath=[%PROGRAM_FILES%]\03000200-1457624357-0500-0006-000700080009\jnsl5E51.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\zutuzuni]ImagePath=[%PROGRAM_FILES%]\F59191E0-1457624248-11E1-9DC3-C86000CA0D26\jnscB4B8.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\wucotusy]ImagePath=[%PROGRAM_FILES%]\F59191E0-1457624248-11E1-9DC3-C86000CA0D26\hnsaD504.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\rijedubu]ImagePath=[%APPDATA%]\71167A00-1427434874-11E3-AEEF-ECA86BF73D23\jnsc9241.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\zigipyro]ImagePath=[%LOCAL_APPDATA%]\00000000-1457680359-0000-0000-6CF04945A726\qnsdA18.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\zutuzuni]ImagePath=[%PROGRAM_FILES%]\2891CB6E-1453863742-11DD-BBDA-FEE5C41E000F\jnsdD015.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\wucotusy]ImagePath=[%PROGRAM_FILES%]\2891CB6E-1453863742-11DD-BBDA-FEE5C41E000F\hnsd131F.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\rowugoqo]ImagePath=[%LOCAL_APPDATA%]\2891CB6E-1453835075-11DD-BBDA-FEE5C41E000F\snso618C.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\zigipyro]ImagePath=[%LOCAL_APPDATA%]\D18122D5-1457182737-E011-BE76-1C7508DEC327\qnst30F1.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\wucotusy]ImagePath=[%PROGRAM_FILES%]\D18122D5-1457152254-E011-BE76-1C7508DEC327\hnsr2ED1.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\mewigosi]ImagePath=[%PROGRAM_FILES%]\4C4C4544-1457191731-4310-8044-CAC04F4C4C31\znst6C18.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\zutuzuni]ImagePath=[%PROGRAM_FILES%]\4C4C4544-1455877790-4D10-8043-B2C04F525231\jnsw12E0.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\wucotusy]ImagePath=[%PROGRAM_FILES%]\4C4C4544-1455877790-4D10-8043-B2C04F525231\hnsj3F9F.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\zigipyro]ImagePath=[%LOCAL_APPDATA%]\1C1CC8E1-1457729576-4647-AC96-29BFC398C3EC\qnsm894C.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\wucotusy]ImagePath=[%PROGRAM_FILES%]\1C1CC8E1-1457707421-4647-AC96-29BFC398C3EC\hnsdE0ED.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\dojygici]ImagePath=[%PROGRAM_FILES%]\1C1CC8E1-1457707421-4647-AC96-29BFC398C3EC\jnsd5593.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\wucotusy]ImagePath=[%PROGRAM_FILES%]\4B435451-1457544181-3043-4631-14DAE9AC5041\hnsy5A28.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\dojygici]ImagePath=[%PROGRAM_FILES%]\4B435451-1457544181-3043-4631-14DAE9AC5041\jnsx39D9.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\hidekoqe]ImagePath=[%LOCAL_APPDATA%]\00000000-1448618240-0000-0000-00241DDF9BD0\qnsyA3FE.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\cexotovy]ImagePath=[%PROGRAM_FILES%]\00000000-1447976127-0000-0000-00241DDF9BD0\knsmA2D3.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\zutuzuni]ImagePath=[%PROGRAM_FILES%]\2DB1F640-1453538227-11B2-8000-A7544BE1060E\jnsv9771.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\zigipyro]ImagePath=[%LOCAL_APPDATA%]\2DB1F640-1453558782-11B2-8000-A7544BE1060E\qnsuEB4C.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\wucotusy]ImagePath=[%PROGRAM_FILES%]\2DB1F640-1453538227-11B2-8000-A7544BE1060E\hnsfB7AF.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\rowugoqo]ImagePath=[%LOCAL_APPDATA%]\2DB1F640-1453558122-11B2-8000-A7544BE1060E\snsqCB4E.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\zutuzuni]ImagePath=[%PROGRAM_FILES%]\B12B79E0-1453371445-11E2-8843-3C07715D8DE7\jnsdABA1.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\wucotusy]ImagePath=[%PROGRAM_FILES%]\B12B79E0-1453371445-11E2-8843-3C07715D8DE7\hnsvCA03.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\zigipyro]ImagePath=[%LOCAL_APPDATA%]\1E005FC0-1457656158-D200-101E-485B3925623F\qnsm97E2.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\dojygici]ImagePath=[%PROGRAM_FILES%]\00000000-1456989016-0000-0000-D8CB8A6EC1E4\jnsrA225.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\zigipyro]ImagePath=[%LOCAL_APPDATA%]\00000000-1457748786-0000-0000-6CF049A2BEAF\qnsw13EA.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\wucotusy]ImagePath=[%PROGRAM_FILES%]\00000000-1457730697-0000-0000-6CF049A2BEAF\hnsi9E60.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\dojygici]ImagePath=[%PROGRAM_FILES%]\00000000-1457730697-0000-0000-6CF049A2BEAF\jnss8622.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\wucotusy]ImagePath=[%PROGRAM_FILES%]\4C4C4544-1457716117-5910-8047-B3C04F574E31\hnsdE841.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\dojygici]ImagePath=[%PROGRAM_FILES%]\4C4C4544-1457716117-5910-8047-B3C04F574E31\jnsdD29D.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\wucotusy]ImagePath=[%PROGRAM_FILES%]\8CD3C560-1457648290-11E2-ADBF-089E015CA37F\hnsz1577.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\dojygici]ImagePath=[%PROGRAM_FILES%]\8CD3C560-1457648290-11E2-ADBF-089E015CA37F\jnszFA09.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\meqexisi]ImagePath=[%PROGRAM_FILES%]\9464AD80-1439738439-81E0-3555-BCAEC5433DCD\knsiF85.tmpfs
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\zutuzuni]ImagePath=[%PROGRAM_FILES%]\CCA6167C-1456553997-11DC-9921-17D386031397\jnsa226E.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\wucotusy]ImagePath=[%PROGRAM_FILES%]\CCA6167C-1456553997-11DC-9921-17D386031397\hnsb3C57.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\zigipyro]ImagePath=[%LOCAL_APPDATA%]\C364E646-1457728206-79D7-5C7B-B4B52F34B1A1\qnsh3717.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\zigipyro]ImagePath=[%LOCAL_APPDATA%]\7D142960-1457727232-11E1-9096-386077C4B493\qnsx89.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\zutuzuni]ImagePath=[%PROGRAM_FILES%]\C1F59000-1453103966-0000-0000-000000000000\jnst1C11.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\wucotusy]ImagePath=[%PROGRAM_FILES%]\C1F59000-1453103966-0000-0000-000000000000\hnsu3204.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\zutuzuni]ImagePath=[%PROGRAM_FILES%]\58417946-1456801390-11E4-B57F-68F728252B2C\jnsz2819.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\zigipyro]ImagePath=[%LOCAL_APPDATA%]\58417946-1457424427-11E4-B57F-68F728252B2C\qnsx584F.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\wucotusy]ImagePath=[%PROGRAM_FILES%]\58417946-1456801390-11E4-B57F-68F728252B2C\hnsp425F.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\zigipyro]ImagePath=[%LOCAL_APPDATA%]\58417946-1457598232-11E4-B57F-68F728252B2C\qnssEAFC.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\zigipyro]ImagePath=[%LOCAL_APPDATA%]\19D78E80-1457641855-11DD-B096-BCEE7B8BED3B\qnsfB4B3.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\wucotusy]ImagePath=[%PROGRAM_FILES%]\3C862D34-1457626599-E511-A961-68F728E082B6\hnsx272B.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\dojygici]ImagePath=[%PROGRAM_FILES%]\3C862D34-1457626599-E511-A961-68F728E082B6\jnst10B3.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\zigipyro]ImagePath=[%LOCAL_APPDATA%]\4C4C4544-1457625204-5810-8039-B5C04F443332\qnsm5246.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\wucotusy]ImagePath=[%PROGRAM_FILES%]\4C4C4544-1457624918-5810-8039-B5C04F443332\hnsxFE61.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\dojygici]ImagePath=[%PROGRAM_FILES%]\4C4C4544-1457624918-5810-8039-B5C04F443332\jnsxE341.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\zutuzuni]ImagePath=[%PROGRAM_FILES%]\807DB127-1455315621-11E2-B4A9-C3EEEC03C06C\jnsqE22C.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\wucotusy]ImagePath=[%PROGRAM_FILES%]\807DB127-1455315621-11E2-B4A9-C3EEEC03C06C\hnsjF865.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\zutuzuni]ImagePath=[%PROGRAM_FILES%]\37C9B5D0-1456656249-DF11-8072-705AB6C1E3C5\jnslDEBB.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\wucotusy]ImagePath=[%PROGRAM_FILES%]\37C9B5D0-1456656249-DF11-8072-705AB6C1E3C5\hnsaF558.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\wucotusy]ImagePath=[%PROGRAM_FILES%]\45F75E00-1453025091-11E4-A0E8-3464A9109AF4\hnsy2AEC.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\wucotusy]ImagePath=[%PROGRAM_FILES%]\00000000-1457641131-0000-0000-448A5BD503A1\hnst7553.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\rowugoqo]ImagePath=[%LOCAL_APPDATA%]\00000000-1457666444-0000-0000-448A5BD503A1\snsoD3D6.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\dojygici]ImagePath=[%PROGRAM_FILES%]\00000000-1457641131-0000-0000-448A5BD503A1\jnsy5A52.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\wucotusy]ImagePath=[%PROGRAM_FILES%]\5059EC60-1457571211-DF11-94E4-88AE1D12B99D\hnsqAA6E.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\dojygici]ImagePath=[%PROGRAM_FILES%]\5059EC60-1457571211-DF11-94E4-88AE1D12B99D\jnsa8A10.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\wucotusy]ImagePath=[%PROGRAM_FILES%]\B40E1F63-1457594405-4A40-882F-60EB69135FEA\hnsgF040.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\dojygici]ImagePath=[%PROGRAM_FILES%]\B40E1F63-1457594405-4A40-882F-60EB69135FEA\jnslD5DB.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\zigipyro]ImagePath=[%LOCAL_APPDATA%]\72A26C2D-1457549225-7C47-9A72-2EF07125E8FE\qnsyB9F4.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\wucotusy]ImagePath=[%PROGRAM_FILES%]\72A26C2D-1457557780-7C47-9A72-2EF07125E8FE\hnsm881A.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\dojygici]ImagePath=[%PROGRAM_FILES%]\72A26C2D-1457557780-7C47-9A72-2EF07125E8FE\jnsn7089.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\zutuzuni]ImagePath=[%PROGRAM_FILES%]\4C4C4544-1450577947-5810-804E-C7C04F325231\jnsr421B.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\wucotusy]ImagePath=[%PROGRAM_FILES%]\4C4C4544-1450577947-5810-804E-C7C04F325231\hnst60FF.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\dojygici]ImagePath=[%PROGRAM_FILES%]\0C60EB38-1457567270-A997-9593-14DDA94DC03B\jnsz3F.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\zigipyro]ImagePath=[%LOCAL_APPDATA%]\0C60EB38-1457575122-A997-9593-14DDA94DC03B\qnsy4534.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\wucotusy]ImagePath=[%PROGRAM_FILES%]\0C60EB38-1457567270-A997-9593-14DDA94DC03B\hnsn16F5.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\rowugoqo]ImagePath=[%LOCAL_APPDATA%]\0C60EB38-1457574530-A997-9593-14DDA94DC03B\snsvC229.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\wucotusy]ImagePath=[%PROGRAM_FILES%]\4C0F1620-1457549216-11DD-8421-7824AF8875A8\hnshFC47.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\rowugoqo]ImagePath=[%LOCAL_APPDATA%]\4C0F1620-1457574508-11DD-8421-7824AF8875A8\snsn1C93.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\dojygici]ImagePath=[%PROGRAM_FILES%]\4C0F1620-1457549216-11DD-8421-7824AF8875A8\jnshE607.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\vicoqudu]ImagePath=[%APPDATA%]\5EBDBF60-1436482172-11D9-8D37-BCAEC5E1ED97\hnsr3E12.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\rowugoqo]ImagePath=[%LOCAL_APPDATA%]\077EC580-1453279149-1016-A665-AF2D3B825C84\snsu7C52.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\dojygici]ImagePath=[%PROGRAM_FILES%]\077EC580-1457098897-1016-A665-AF2D3B825C84\jnsy18BE.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\zigipyro]ImagePath=[%LOCAL_APPDATA%]\3FBC0976-1457489617-11DF-9553-190067018030\qnsbAD8D.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\wucotusy]ImagePath=[%PROGRAM_FILES%]\B92DB1AD-1457423199-DF11-B25F-88AE1D221A69\hnse2DF8.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\rowugoqo]ImagePath=[%LOCAL_APPDATA%]\B92DB1AD-1457443177-DF11-B25F-88AE1D221A69\snspA143.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\dojygici]ImagePath=[%PROGRAM_FILES%]\B92DB1AD-1457423199-DF11-B25F-88AE1D221A69\jnsoC120.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\wucotusy]ImagePath=[%PROGRAM_FILES%]\4C4C4544-1457249614-5410-8032-CAC04F475631\hnsyDB9E.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\dojygici]ImagePath=[%PROGRAM_FILES%]\4C4C4544-1457249614-5410-8032-CAC04F475631\jnsqBB14.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\wucotusy]ImagePath=[%PROGRAM_FILES%]\526DAD9A-1457193893-AC48-920C-40167E8CC674\hnsq6450.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\dojygici]ImagePath=[%PROGRAM_FILES%]\526DAD9A-1457193893-AC48-920C-40167E8CC674\jnsu47FC.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\wucotusy]ImagePath=[%PROGRAM_FILES%]\00000000-1457420030-0000-0000-1C6F656A12D2\hnstBF7D.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\zigipyro]ImagePath=[%LOCAL_APPDATA%]\4B435451-1457530887-5232-4932-C86000B72CAC\qnst8967.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\wucotusy]ImagePath=[%PROGRAM_FILES%]\4B435451-1457362089-5232-4932-C86000B72CAC\hnss924C.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\dojygici]ImagePath=[%PROGRAM_FILES%]\4B435451-1457362089-5232-4932-C86000B72CAC\jnsa730A.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\zigipyro]ImagePath=[%LOCAL_APPDATA%]\D97A5F57-1457536308-11E5-BA4C-507B9D27D979\qnswE79A.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\wucotusy]ImagePath=[%PROGRAM_FILES%]\D97A5F57-1457514473-11E5-BA4C-507B9D27D979\hnsd7971.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\dojygici]ImagePath=[%PROGRAM_FILES%]\D97A5F57-1457514473-11E5-BA4C-507B9D27D979\jnsa4B6A.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\zigipyro]ImagePath=[%LOCAL_APPDATA%]\78DA2A86-1457467816-5356-A19A-F561DD912F40\qnsp11BF.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\zigipyro]ImagePath=[%LOCAL_APPDATA%]\A1ECD7D0-1457516733-11DE-9B6B-909EF3BB1A00\qnsf64FD.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\dojygici]ImagePath=[%PROGRAM_FILES%]\48D62BDA-1457256799-E211-BADF-208984CED190\jnsxCC77.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\wucotusy]ImagePath=[%PROGRAM_FILES%]\34444335-1457514488-4B38-3952-3863BB911A16\hnsoEEDA.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\dojygici]ImagePath=[%PROGRAM_FILES%]\34444335-1457514488-4B38-3952-3863BB911A16\jnsiD5A2.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\wucotusy]ImagePath=[%PROGRAM_FILES%]\67452301-1457540602-EFCD-0123-456789ABCDEF\hnsf6C17.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\rowugoqo]ImagePath=[%LOCAL_APPDATA%]\67452301-1457544486-EFCD-0123-456789ABCDEF\snsg51E2.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\wucotusy]ImagePath=[%PROGRAM_FILES%]\4B435451-1457519687-3034-4931-F46D04B8D6B1\hnsvB0B.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\dojygici]ImagePath=[%PROGRAM_FILES%]\4B435451-1457519687-3034-4931-F46D04B8D6B1\jnsuE2D0.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\zigipyro]ImagePath=[%LOCAL_APPDATA%]\4C3A5C14-1457474201-E011-9D01-0050BF20DC86\qnsh59F7.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\wucotusy]ImagePath=[%PROGRAM_FILES%]\4C3A5C14-1457414743-E011-9D01-0050BF20DC86\hnspE71B.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\dojygici]ImagePath=[%PROGRAM_FILES%]\4C3A5C14-1457414743-E011-9D01-0050BF20DC86\jnspC71B.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\wenuvisi]ImagePath=[%PROGRAM_FILES%]\4FCA4960-1445976050-11DD-97BE-50465D9E9ED1\jnslC25C.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\lywutemy]ImagePath=[%PROGRAM_FILES%]\4FCA4960-1445976050-11DD-97BE-50465D9E9ED1\knsgB1DB.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\dijojyvi]ImagePath=[%PROGRAM_FILES%]\4FCA4960-1445976050-11DD-97BE-50465D9E9ED1\hnsgEFF3.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\wucotusy]ImagePath=[%PROGRAM_FILES%]\0839ADC4-1457275169-E411-B2A0-3863BB72A11D\hnsb6F51.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\dojygici]ImagePath=[%PROGRAM_FILES%]\0839ADC4-1457275169-E411-B2A0-3863BB72A11D\jnsk466A.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\zutuzuni]ImagePath=[%PROGRAM_FILES%]\864FDA20-1452471779-11E1-8C37-78843CF8B2FC\jnsj4B21.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\zigipyro]ImagePath=[%LOCAL_APPDATA%]\864FDA20-1457383691-11E1-8C37-78843CF8B2FC\qnsp7AF3.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\wucotusy]ImagePath=[%PROGRAM_FILES%]\864FDA20-1452471779-11E1-8C37-78843CF8B2FC\hnsj6523.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\zutuzuni]ImagePath=[%PROGRAM_FILES%]\9283E377-1455415146-E111-9FBB-0013D4D0774C\jnsx7D55.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\zigipyro]ImagePath=[%LOCAL_APPDATA%]\9283E377-1457477191-E111-9FBB-0013D4D0774C\qnsm47AC.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\wucotusy]ImagePath=[%PROGRAM_FILES%]\9283E377-1455415146-E111-9FBB-0013D4D0774C\hnszC387.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\zigipyro]ImagePath=[%LOCAL_APPDATA%]\F1E6219C-1457456955-F289-7E63-40167E735381\qnsvF87F.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\rowugoqo]ImagePath=[%LOCAL_APPDATA%]\F1E6219C-1457159940-F289-7E63-40167E735381\snssC360.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\dojygici]ImagePath=[%PROGRAM_FILES%]\F1E6219C-1457170642-F289-7E63-40167E735381\jnsb78C7.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\detoqoke]ImagePath=[%APPDATA%]\03000200-1430745602-0500-0006-000700080009\nsyC39.tmpfs
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\zigowyni]ImagePath=[%APPDATA%]\03000200-1431963610-0500-0006-000700080009\nsg3E73.tmpfs
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\rowugoqo]ImagePath=[%LOCAL_APPDATA%]\4C4C4544-1457208535-5910-8035-B9C04F383931\snsjE947.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\dojygici]ImagePath=[%PROGRAM_FILES%]\4C4C4544-1457152998-5910-8035-B9C04F383931\jnsvA9BB.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\zigipyro]ImagePath=[%LOCAL_APPDATA%]\4C4C4544-1457282489-3810-805A-C2C04F593732\qnsrFE4D.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\dojygici]ImagePath=[%PROGRAM_FILES%]\4C4C4544-1457268832-3810-805A-C2C04F593732\jnsaE7E0.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\dojygici]ImagePath=[%PROGRAM_FILES%]\4C4C4544-1457277337-4810-8036-B8C04F353432\jnsm5A70.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\wucotusy]ImagePath=[%PROGRAM_FILES%]\03AA02FC-1457268820-05C2-8D06-4A0700080009\hnsp20CD.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\dojygici]ImagePath=[%PROGRAM_FILES%]\03AA02FC-1457268820-05C2-8D06-4A0700080009\jnsu9964.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\zutuzuni]ImagePath=[%PROGRAM_FILES%]\4C4C4544-1455605022-3410-8035-B9C04F33354A\jnswA43C.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\zigipyro]ImagePath=[%LOCAL_APPDATA%]\4C4C4544-1457436462-3410-8035-B9C04F33354A\qnswDC8E.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\wucotusy]ImagePath=[%PROGRAM_FILES%]\4C4C4544-1455605022-3410-8035-B9C04F33354A\hnswD76E.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\wucotusy]ImagePath=[%PROGRAM_FILES%]\57F57C00-1457245526-81E2-2222-AC220BA9E97B\hnsw9A46.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\dojygici]ImagePath=[%PROGRAM_FILES%]\57F57C00-1457245526-81E2-2222-AC220BA9E97B\jnsp6365.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\wucotusy]ImagePath=[%PROGRAM_FILES%]\8B19CFA5-1457436671-58D0-B07E-E3394968AA7D\hnsh70BD.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\dojygici]ImagePath=[%PROGRAM_FILES%]\8B19CFA5-1457436671-58D0-B07E-E3394968AA7D\jnsg5312.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\wucotusy]ImagePath=[%PROGRAM_FILES%]\FFFFFFFF-1457431139-FFFF-FFFF-FFFFFFFFFFFF\hnssA4CA.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\wucotusy]ImagePath=[%PROGRAM_FILES%]\8C04B72A-1457348563-E411-B2A0-F0761C2045D4\hnsi30F8.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\dojygici]ImagePath=[%PROGRAM_FILES%]\8C04B72A-1457348563-E411-B2A0-F0761C2045D4\jnsi187C.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\wucotusy]ImagePath=[%PROGRAM_FILES%]\03000200-1457462800-0500-0006-000700080009\hnsc73CE.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\dojygici]ImagePath=[%PROGRAM_FILES%]\03000200-1457462800-0500-0006-000700080009\jnsi5AD6.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\wucotusy]ImagePath=[%PROGRAM_FILES%]\03000200-1457460001-0500-0006-000700080009\hnsm12C8.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\dojygici]ImagePath=[%PROGRAM_FILES%]\03000200-1457460001-0500-0006-000700080009\jnswFDB0.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\wucotusy]ImagePath=[%PROGRAM_FILES%]\1E00E340-1457332609-6E00-A34E-D850E6519425\hnsfF473.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\dojygici]ImagePath=[%PROGRAM_FILES%]\1E00E340-1457332609-6E00-A34E-D850E6519425\jnsvDFC9.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\jidybopi]ImagePath=[%APPDATA%]\00000000-1425901426-0000-0000-001FD0E31801\nsw548F.tmpfs
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\vyfesyzy]ImagePath=[%APPDATA%]\00000000-1425901426-0000-0000-001FD0E31801\jnswAB5B.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\zigipyro]ImagePath=[%LOCAL_APPDATA%]\B4DAC676-1457350154-DB11-8B53-00E018E171B9\qnsq1D1.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\rowugoqo]ImagePath=[%LOCAL_APPDATA%]\B4DAC676-1457180002-DB11-8B53-00E018E171B9\snse1A0.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\zigipyro]ImagePath=[%LOCAL_APPDATA%]\90347964-1457364448-6C06-C5CD-382C4ABB3519\qnsnD4DD.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\wucotusy]ImagePath=[%PROGRAM_FILES%]\03000200-1457327282-0500-0006-000700080009\hnsh9CCF.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\dojygici]ImagePath=[%PROGRAM_FILES%]\03000200-1457327282-0500-0006-000700080009\jnsh561D.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\wucotusy]ImagePath=[%PROGRAM_FILES%]\41FCBA77-1457289538-DE11-92F4-00262203B285\hnsq68D2.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\rowugoqo]ImagePath=[%LOCAL_APPDATA%]\41FCBA77-1457314841-DE11-92F4-00262203B285\snswBA2C.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\dojygici]ImagePath=[%PROGRAM_FILES%]\41FCBA77-1457289538-DE11-92F4-00262203B285\jnsl5189.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\zigipyro]ImagePath=[%LOCAL_APPDATA%]\BAB9BFF9-1457392186-EC3C-0308-B587AE9632B2\qnsj99D3.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\wucotusy]ImagePath=[%PROGRAM_FILES%]\BAB9BFF9-1457373521-EC3C-0308-B587AE9632B2\hnsnCAAF.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\rowugoqo]ImagePath=[%LOCAL_APPDATA%]\BAB9BFF9-1457380849-EC3C-0308-B587AE9632B2\snss1520.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\dojygici]ImagePath=[%PROGRAM_FILES%]\BAB9BFF9-1457373521-EC3C-0308-B587AE9632B2\jnsl91CB.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\wucotusy]ImagePath=[%PROGRAM_FILES%]\7BA72B8E-1457347902-599A-03DF-BA0FD7CFB3FF\hnsd9A3D.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\dojygici]ImagePath=[%PROGRAM_FILES%]\7BA72B8E-1457347902-599A-03DF-BA0FD7CFB3FF\jnse8348.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\wucotusy]ImagePath=[%PROGRAM_FILES%]\4C4C4544-1457344682-4610-8034-C2C04F345931\hnsqAC96.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\dojygici]ImagePath=[%PROGRAM_FILES%]\4C4C4544-1457344682-4610-8034-C2C04F345931\jnsl870A.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\wucotusy]ImagePath=[%PROGRAM_FILES%]\03000200-1457375961-0500-0006-000700080009\hnsd2FFD.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\dojygici]ImagePath=[%PROGRAM_FILES%]\03000200-1457375961-0500-0006-000700080009\jnsv1B3B.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\wucotusy]ImagePath=[%PROGRAM_FILES%]\6AB5B300-1457377236-1014-9FB5-B0684D007B53\hnshBAD3.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\dojygici]ImagePath=[%PROGRAM_FILES%]\6AB5B300-1457377236-1014-9FB5-B0684D007B53\jnsg9E60.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\dojygici]ImagePath=[%PROGRAM_FILES%]\CA526660-1457307642-11E1-92AB-047D7B16B838\jnspE39.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\wucotusy]ImagePath=[%PROGRAM_FILES%]\4C4C4544-1457346352-3510-8046-C3C04F4C5231\hnss3A50.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\dojygici]ImagePath=[%PROGRAM_FILES%]\4C4C4544-1457346352-3510-8046-C3C04F4C5231\jnsy15DE.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\rowugoqo]ImagePath=[%LOCAL_APPDATA%]\FFFFFFFF-1457322385-FFFF-FFFF-FFFFFFFFFFFF\snsc156.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\wucotusy]ImagePath=[%PROGRAM_FILES%]\61393765-1457348034-3139-3036-705AB6D90916\hnszB83F.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\dojygici]ImagePath=[%PROGRAM_FILES%]\61393765-1457348034-3139-3036-705AB6D90916\jnsz97A3.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\rowugoqo]ImagePath=[%LOCAL_APPDATA%]\73852100-1457265736-0820-1010-055120000000\snst9797.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\dojygici]ImagePath=[%PROGRAM_FILES%]\73852100-1457258347-0820-1010-055120000000\jnsc3F8C.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\zutuzuni]ImagePath=[%PROGRAM_FILES%]\FF961E01-1452767172-11CB-B4BF-DFE1ED80E267\jnsaF00.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\zigipyro]ImagePath=[%LOCAL_APPDATA%]\FF961E01-1457361112-11CB-B4BF-DFE1ED80E267\qnszB453.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\wucotusy]ImagePath=[%PROGRAM_FILES%]\FF961E01-1452767172-11CB-B4BF-DFE1ED80E267\hnsg67BC.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\dojygici]ImagePath=[%PROGRAM_FILES%]\00009CBD-1457169472-2F05-FFFF-50465D3E7377\jnsy42A.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\zigipyro]ImagePath=[%LOCAL_APPDATA%]\00009CBD-1457368532-2F05-FFFF-50465D3E7377\qnsfD801.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\wucotusy]ImagePath=[%PROGRAM_FILES%]\00009CBD-1457169472-2F05-FFFF-50465D3E7377\hnsd1DAF.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\zigipyro]ImagePath=[%LOCAL_APPDATA%]\2E431571-1457359863-11E4-9F6E-68F72812842B\qnsr4AD7.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\wucotusy]ImagePath=[%PROGRAM_FILES%]\2E431571-1457341529-11E4-9F6E-68F72812842B\hnsc1112.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\dojygici]ImagePath=[%PROGRAM_FILES%]\2E431571-1457341529-11E4-9F6E-68F72812842B\jnshFA07.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\dojygici]ImagePath=[%PROGRAM_FILES%]\03DE0294-1457251918-05B8-1306-5E0700080009\jnsr17D.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\wucotusy]ImagePath=[%PROGRAM_FILES%]\03DE0294-1457251918-05B8-1306-5E0700080009\hnsv23BD.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\zigipyro]ImagePath=[%LOCAL_APPDATA%]\FFFFFFFF-1457281260-FFFF-FFFF-FFFFFFFFFFFF\qnsk84.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\dojygici]ImagePath=[%PROGRAM_FILES%]\D5CE91C0-1457277719-11E3-933A-305A3A45E6BA\jnsv9AA3.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\kihiburo]ImagePath=[%PROGRAM_FILES%]\03000200-1439313457-0500-0006-000700080009\knsjDF9E.tmpfs
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\hyverumu]ImagePath=[%PROGRAM_FILES%]\03000200-1439313457-0500-0006-000700080009\jnsjFE1C.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\gopibeko]ImagePath=[%LOCAL_APPDATA%]\03000200-1439299124-0500-0006-000700080009\snseD470.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\comyninu]ImagePath=[%PROGRAM_FILES%]\03000200-1439313457-0500-0006-000700080009\hnse1881.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\zutuzuni]ImagePath=[%PROGRAM_FILES%]\2840D800-1456767439-11DD-A56A-BCEE7B87F99A\jnsxFCD5.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\zigipyro]ImagePath=[%LOCAL_APPDATA%]\2840D800-1457273591-11DD-A56A-BCEE7B87F99A\qnsh567B.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\wucotusy]ImagePath=[%PROGRAM_FILES%]\2840D800-1456767439-11DD-A56A-BCEE7B87F99A\hnsx13FF.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\rowugoqo]ImagePath=[%LOCAL_APPDATA%]\2840D800-1456771101-11DD-A56A-BCEE7B87F99A\snsiCAFE.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\rowugoqo]ImagePath=[%LOCAL_APPDATA%]\05657C00-1457215021-1011-92E3-8D4B1F35BB09\snsc13A.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\wucotusy]ImagePath=[%PROGRAM_FILES%]\6C237980-1457272046-81E3-3C9C-D850E61DA336\hnsw66A4.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\dojygici]ImagePath=[%PROGRAM_FILES%]\6C237980-1457272046-81E3-3C9C-D850E61DA336\jnsr4F5B.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\wucotusy]ImagePath=[%PROGRAM_FILES%]\DD6B4A74-1457289518-E411-B2A0-F8A9634B2B9C\hnsl88A9.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\rowugoqo]ImagePath=[%LOCAL_APPDATA%]\DD6B4A74-1457296808-E411-B2A0-F8A9634B2B9C\snswAC20.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\dojygici]ImagePath=[%PROGRAM_FILES%]\DD6B4A74-1457289518-E411-B2A0-F8A9634B2B9C\jnsb6E83.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\wucotusy]ImagePath=[%PROGRAM_FILES%]\F41DBEF2-1455487373-BC49-83AF-089E0176B62E\hnsd17D.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\zutuzuni]ImagePath=[%PROGRAM_FILES%]\F41DBEF2-1455487373-BC49-83AF-089E0176B62E\jnsdE9B7.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\wucotusy]ImagePath=[%PROGRAM_FILES%]\FFFFFFFF-1457179235-FFFF-FFFF-FFFFFFFFFFFF\hnseE540.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\dojygici]ImagePath=[%PROGRAM_FILES%]\FFFFFFFF-1457179235-FFFF-FFFF-FFFFFFFFFFFF\jnstBF85.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\zigipyro]ImagePath=[%LOCAL_APPDATA%]\934A9067-1457139817-DA4E-9E51-42D2C1FBC3B3\qnshE7C1.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\dojygici]ImagePath=[%PROGRAM_FILES%]\044C9F80-1457117608-11DE-85C6-0024BEB5E1A1\jnsyD72E.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\rowugoqo]ImagePath=[%LOCAL_APPDATA%]\FFFFFFFF-1457027580-FFFF-FFFF-FFFFFFFFFFFF\snsf1BF9.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\dojygici]ImagePath=[%PROGRAM_FILES%]\FFFFFFFF-1457007537-FFFF-FFFF-FFFFFFFFFFFF\jnsb8CE5.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\dojygici]ImagePath=[%PROGRAM_FILES%]\B2059EC0-1457152886-11DD-89AA-54424972CA29\jnsyD0.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\wucotusy]ImagePath=[%PROGRAM_FILES%]\B2059EC0-1457152886-11DD-89AA-54424972CA29\hnsy4C62.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\wucotusy]ImagePath=[%PROGRAM_FILES%]\30A89F00-1457148481-11DD-B0DD-50465DA3895F\hnsb8A49.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\dojygici]ImagePath=[%PROGRAM_FILES%]\30A89F00-1457148481-11DD-B0DD-50465DA3895F\jnsr6615.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\zigipyro]ImagePath=[%LOCAL_APPDATA%]\80AAAA8A-1457193517-DC11-9E6A-0013D4D9C940\qnsvC11D.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\wucotusy]ImagePath=[%PROGRAM_FILES%]\80AAAA8A-1457187535-DC11-9E6A-0013D4D9C940\hnso8268.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\dojygici]ImagePath=[%PROGRAM_FILES%]\80AAAA8A-1457187535-DC11-9E6A-0013D4D9C940\jnsq6CFA.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\wucotusy]ImagePath=[%PROGRAM_FILES%]\FEFEFEFE-1457087229-FEFE-FEFE-FEFEFEFEFEFE\hnsk187C.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\dojygici]ImagePath=[%PROGRAM_FILES%]\FEFEFEFE-1457087229-FEFE-FEFE-FEFEFEFEFEFE\jnso7034.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\myqityze]ImagePath=[%PROGRAM_FILES%]\1E009600-1445022434-6E00-A84C-D850E653A1CD\jnstDD1C.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\jenujixi]ImagePath=[%PROGRAM_FILES%]\1E009600-1445022434-6E00-A84C-D850E653A1CD\knslBE14.tmpfs
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\comyninu]ImagePath=[%PROGRAM_FILES%]\1E009600-1439407877-6E00-A84C-D850E653A1CD\hnshC51E.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\dojygici]ImagePath=[%PROGRAM_FILES%]\7E63B1C0-1457147109-11B2-8000-97D92D81165E\jnsr243.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\wucotusy]ImagePath=[%PROGRAM_FILES%]\7E63B1C0-1457147109-11B2-8000-97D92D81165E\hnsb1AE3.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\zutuzuni]ImagePath=[%PROGRAM_FILES%]\27AFDC80-1456077618-11DE-8697-78843C2DE280\jnsoF5A0.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\zigipyro]ImagePath=[%LOCAL_APPDATA%]\27AFDC80-1456958839-11DE-8697-78843C2DE280\qnse5560.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\wucotusy]ImagePath=[%PROGRAM_FILES%]\27AFDC80-1456077618-11DE-8697-78843C2DE280\hnsk2ABC.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\zutuzuni]ImagePath=[%PROGRAM_FILES%]\C6EA3BEE-1453584217-E311-940D-F8A96370CD71\jnsq552.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\wucotusy]ImagePath=[%PROGRAM_FILES%]\C6EA3BEE-1453584217-E311-940D-F8A96370CD71\hnsq1DCE.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\zutuzuni]ImagePath=[%PROGRAM_FILES%]\F4F23580-1455270567-11DF-8389-20CF30CA8092\jnsbCE37.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\zigipyro]ImagePath=[%LOCAL_APPDATA%]\F4F23580-1457168575-11DF-8389-20CF30CA8092\qnsxBC3F.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\wucotusy]ImagePath=[%PROGRAM_FILES%]\F4F23580-1455270567-11DF-8389-20CF30CA8092\hnswE716.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\wucotusy]ImagePath=[%PROGRAM_FILES%]\03D40274-1457044316-051B-EC06-060700080009\hnse6A4C.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\dojygici]ImagePath=[%PROGRAM_FILES%]\03D40274-1457044316-051B-EC06-060700080009\jnsa53D4.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\zutuzuni]ImagePath=[%PROGRAM_FILES%]\0E274060-1456867413-11D9-A11B-14DAE96D5D37\jnse51E0.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\wucotusy]ImagePath=[%PROGRAM_FILES%]\0E274060-1456867413-11D9-A11B-14DAE96D5D37\hnsn6829.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\zigipyro]ImagePath=[%LOCAL_APPDATA%]\E14BB0E2-1457120066-8B47-7AD7-AAACA2955074\qnso46E2.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\liquqosy]ImagePath=[%PROGRAM_FILES%]\E14BB0E2-1445793416-8B47-7AD7-AAACA2955074\jnse34B3.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\dijojyvi]ImagePath=[%PROGRAM_FILES%]\E14BB0E2-1445793416-8B47-7AD7-AAACA2955074\hnsx5666.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\wucotusy]ImagePath=[%PROGRAM_FILES%]\188104FC-1457080353-C64E-B5FD-48E05C532D83\hnsdF385.tmp