Exterminate It! Antimalware

malpedia

Known threats:699,742 Last Update:November 20, 22:46

Testimonials

Just want to say that apparently your Exterminate It has worked like a charm. I was infected with a most troublesome Malware Trojan that kept replicating every time McAfee found, blocked and removed it... most annoying for several days... until Mr. Google led me to your door. What a God send!

With thanks,

Tom S.

MultiPlug- Registry Values List

This is a complete list of MultiPlug registry values collected by Exterminate It!. If you find any of these registry values on your PC, your computer is very likely to be infected with the MultiPlug - adware.

IMPORTANT: Because the registry is a core component of your Windows system, it is strongly recommended that you back up the registry before you begin deleting keys and values. For information about backing up the Windows registry, refer to the Registry Editor online help.
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\dojygici]ImagePath=[%PROGRAM_FILES%]\4C4C4544-1457705049-5610-8033-B6C04F48344A\jnsw2D8C.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\zigipyro]ImagePath=[%LOCAL_APPDATA%]\4C4C4544-1457824619-5110-8042-B7C04F353132\qnsl4021.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\zigipyro]ImagePath=[%LOCAL_APPDATA%]\00000000-1457880556-0000-0000-D8CB8A10275D\qnsi9F86.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\wucotusy]ImagePath=[%PROGRAM_FILES%]\00000000-1457875049-0000-0000-D8CB8A10275D\hnskF9F8.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\gerocyni]ImagePath=[%PROGRAM_FILES%]\00000000-1457875049-0000-0000-D8CB8A10275D\jnslE43B.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\wucotusy]ImagePath=[%PROGRAM_FILES%]\00000000-1457817655-0000-0000-1C6F6593BE74\hnsmB0EE.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\dojygici]ImagePath=[%PROGRAM_FILES%]\4C4C4544-1457786199-3610-8035-B4C04F4D5631\jnsuA14.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\wucotusy]ImagePath=[%PROGRAM_FILES%]\4C4C4544-1457786199-3610-8035-B4C04F4D5631\hnsp2257.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\wucotusy]ImagePath=[%PROGRAM_FILES%]\4C4C4544-1457726212-5A10-8048-C4C04F4A5631\hnssC5B0.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\dojygici]ImagePath=[%PROGRAM_FILES%]\4C4C4544-1457726212-5A10-8048-C4C04F4A5631\jnswA8C0.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\zigipyro]ImagePath=[%LOCAL_APPDATA%]\A7E9C3C1-1457823930-11E1-A60C-987F041CF03A\qnss60.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\wucotusy]ImagePath=[%PROGRAM_FILES%]\A7E9C3C1-1457803260-11E1-A60C-987F041CF03A\hnstEEA5.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\dojygici]ImagePath=[%PROGRAM_FILES%]\A7E9C3C1-1457803260-11E1-A60C-987F041CF03A\jnsd7475.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\wucotusy]ImagePath=[%PROGRAM_FILES%]\D86EB4A0-1457637296-11B2-8000-92ACFDEC7D41\hnsuA44C.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\dojygici]ImagePath=[%PROGRAM_FILES%]\D86EB4A0-1457637296-11B2-8000-92ACFDEC7D41\jnsu8BD0.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\zutuzuni]ImagePath=[%PROGRAM_FILES%]\4C4C4544-1456618609-4410-8044-B5C04F4A5631\jnsg6652.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\zigipyro]ImagePath=[%LOCAL_APPDATA%]\4C4C4544-1457798516-4410-8044-B5C04F4A5631\qnsq6B8C.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\wucotusy]ImagePath=[%PROGRAM_FILES%]\4C4C4544-1456618609-4410-8044-B5C04F4A5631\hnsv7E8F.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\zutuzuni]ImagePath=[%PROGRAM_FILES%]\87BD4F4D-1455205405-D9F9-FBD4-F0795991E5DC\jnss5908.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\zigipyro]ImagePath=[%LOCAL_APPDATA%]\87BD4F4D-1455209628-D9F9-FBD4-F0795991E5DC\qnsg9F0E.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\wucotusy]ImagePath=[%PROGRAM_FILES%]\87BD4F4D-1455205405-D9F9-FBD4-F0795991E5DC\hnsn731F.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\wucotusy]ImagePath=[%PROGRAM_FILES%]\ECEB860E-1457720694-DE11-91E1-002622E5A706\hnsgDF8.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\dojygici]ImagePath=[%PROGRAM_FILES%]\ECEB860E-1457720694-DE11-91E1-002622E5A706\jnsqF44E.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\zigipyro]ImagePath=[%LOCAL_APPDATA%]\6CD47174-1457714431-1141-2D36-D9731E2F021A\qnsg12.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\rowugoqo]ImagePath=[%LOCAL_APPDATA%]\6CD47174-1457713872-1141-2D36-D9731E2F021A\snsd7947.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\wucotusy]ImagePath=[%PROGRAM_FILES%]\FFFFFFFF-1457878992-FFFF-FFFF-FFFFFFFFFFFF\hnsh746F.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\wucotusy]ImagePath=[%PROGRAM_FILES%]\028542C5-1457813340-E011-923A-14DAE9E84E46\hnsr1F1F.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\rowugoqo]ImagePath=[%LOCAL_APPDATA%]\4C4C4544-1457001010-0110-8001-80C04F010101\snstFA0.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\zigipyro]ImagePath=[%LOCAL_APPDATA%]\4C4C4544-1457069233-0110-8001-80C04F010101\qnsv29D6.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\zutuzuni]ImagePath=[%APPDATA%]\542AF37C-1454485122-E411-B2A0-D0BF9C0EC823\jnsrA4E6.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\zigipyro]ImagePath=[%LOCAL_APPDATA%]\542AF37C-1457768692-E411-B2A0-D0BF9C0EC823\qnsx4471.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\wucotusy]ImagePath=[%APPDATA%]\542AF37C-1454485122-E411-B2A0-D0BF9C0EC823\hnswD099.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\zigipyro]ImagePath=[%LOCAL_APPDATA%]\03000200-1457724754-0500-0006-000700080009\qnsxCC93.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\wucotusy]ImagePath=[%PROGRAM_FILES%]\03000200-1457624357-0500-0006-000700080009\hnsr860F.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\dojygici]ImagePath=[%PROGRAM_FILES%]\03000200-1457624357-0500-0006-000700080009\jnsl5E51.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\zutuzuni]ImagePath=[%PROGRAM_FILES%]\F59191E0-1457624248-11E1-9DC3-C86000CA0D26\jnscB4B8.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\wucotusy]ImagePath=[%PROGRAM_FILES%]\F59191E0-1457624248-11E1-9DC3-C86000CA0D26\hnsaD504.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\rijedubu]ImagePath=[%APPDATA%]\71167A00-1427434874-11E3-AEEF-ECA86BF73D23\jnsc9241.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\zigipyro]ImagePath=[%LOCAL_APPDATA%]\00000000-1457680359-0000-0000-6CF04945A726\qnsdA18.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\zutuzuni]ImagePath=[%PROGRAM_FILES%]\2891CB6E-1453863742-11DD-BBDA-FEE5C41E000F\jnsdD015.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\wucotusy]ImagePath=[%PROGRAM_FILES%]\2891CB6E-1453863742-11DD-BBDA-FEE5C41E000F\hnsd131F.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\rowugoqo]ImagePath=[%LOCAL_APPDATA%]\2891CB6E-1453835075-11DD-BBDA-FEE5C41E000F\snso618C.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\zigipyro]ImagePath=[%LOCAL_APPDATA%]\D18122D5-1457182737-E011-BE76-1C7508DEC327\qnst30F1.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\wucotusy]ImagePath=[%PROGRAM_FILES%]\D18122D5-1457152254-E011-BE76-1C7508DEC327\hnsr2ED1.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\mewigosi]ImagePath=[%PROGRAM_FILES%]\4C4C4544-1457191731-4310-8044-CAC04F4C4C31\znst6C18.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\zutuzuni]ImagePath=[%PROGRAM_FILES%]\4C4C4544-1455877790-4D10-8043-B2C04F525231\jnsw12E0.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\wucotusy]ImagePath=[%PROGRAM_FILES%]\4C4C4544-1455877790-4D10-8043-B2C04F525231\hnsj3F9F.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\zigipyro]ImagePath=[%LOCAL_APPDATA%]\1C1CC8E1-1457729576-4647-AC96-29BFC398C3EC\qnsm894C.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\wucotusy]ImagePath=[%PROGRAM_FILES%]\1C1CC8E1-1457707421-4647-AC96-29BFC398C3EC\hnsdE0ED.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\dojygici]ImagePath=[%PROGRAM_FILES%]\1C1CC8E1-1457707421-4647-AC96-29BFC398C3EC\jnsd5593.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\wucotusy]ImagePath=[%PROGRAM_FILES%]\4B435451-1457544181-3043-4631-14DAE9AC5041\hnsy5A28.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\dojygici]ImagePath=[%PROGRAM_FILES%]\4B435451-1457544181-3043-4631-14DAE9AC5041\jnsx39D9.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\hidekoqe]ImagePath=[%LOCAL_APPDATA%]\00000000-1448618240-0000-0000-00241DDF9BD0\qnsyA3FE.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\cexotovy]ImagePath=[%PROGRAM_FILES%]\00000000-1447976127-0000-0000-00241DDF9BD0\knsmA2D3.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\zutuzuni]ImagePath=[%PROGRAM_FILES%]\2DB1F640-1453538227-11B2-8000-A7544BE1060E\jnsv9771.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\zigipyro]ImagePath=[%LOCAL_APPDATA%]\2DB1F640-1453558782-11B2-8000-A7544BE1060E\qnsuEB4C.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\wucotusy]ImagePath=[%PROGRAM_FILES%]\2DB1F640-1453538227-11B2-8000-A7544BE1060E\hnsfB7AF.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\rowugoqo]ImagePath=[%LOCAL_APPDATA%]\2DB1F640-1453558122-11B2-8000-A7544BE1060E\snsqCB4E.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\zutuzuni]ImagePath=[%PROGRAM_FILES%]\B12B79E0-1453371445-11E2-8843-3C07715D8DE7\jnsdABA1.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\wucotusy]ImagePath=[%PROGRAM_FILES%]\B12B79E0-1453371445-11E2-8843-3C07715D8DE7\hnsvCA03.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\zigipyro]ImagePath=[%LOCAL_APPDATA%]\1E005FC0-1457656158-D200-101E-485B3925623F\qnsm97E2.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\dojygici]ImagePath=[%PROGRAM_FILES%]\00000000-1456989016-0000-0000-D8CB8A6EC1E4\jnsrA225.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\zigipyro]ImagePath=[%LOCAL_APPDATA%]\00000000-1457748786-0000-0000-6CF049A2BEAF\qnsw13EA.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\wucotusy]ImagePath=[%PROGRAM_FILES%]\00000000-1457730697-0000-0000-6CF049A2BEAF\hnsi9E60.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\dojygici]ImagePath=[%PROGRAM_FILES%]\00000000-1457730697-0000-0000-6CF049A2BEAF\jnss8622.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\wucotusy]ImagePath=[%PROGRAM_FILES%]\4C4C4544-1457716117-5910-8047-B3C04F574E31\hnsdE841.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\dojygici]ImagePath=[%PROGRAM_FILES%]\4C4C4544-1457716117-5910-8047-B3C04F574E31\jnsdD29D.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\wucotusy]ImagePath=[%PROGRAM_FILES%]\8CD3C560-1457648290-11E2-ADBF-089E015CA37F\hnsz1577.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\dojygici]ImagePath=[%PROGRAM_FILES%]\8CD3C560-1457648290-11E2-ADBF-089E015CA37F\jnszFA09.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\meqexisi]ImagePath=[%PROGRAM_FILES%]\9464AD80-1439738439-81E0-3555-BCAEC5433DCD\knsiF85.tmpfs
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\zutuzuni]ImagePath=[%PROGRAM_FILES%]\CCA6167C-1456553997-11DC-9921-17D386031397\jnsa226E.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\wucotusy]ImagePath=[%PROGRAM_FILES%]\CCA6167C-1456553997-11DC-9921-17D386031397\hnsb3C57.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\zigipyro]ImagePath=[%LOCAL_APPDATA%]\C364E646-1457728206-79D7-5C7B-B4B52F34B1A1\qnsh3717.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\zigipyro]ImagePath=[%LOCAL_APPDATA%]\7D142960-1457727232-11E1-9096-386077C4B493\qnsx89.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\zutuzuni]ImagePath=[%PROGRAM_FILES%]\C1F59000-1453103966-0000-0000-000000000000\jnst1C11.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\wucotusy]ImagePath=[%PROGRAM_FILES%]\C1F59000-1453103966-0000-0000-000000000000\hnsu3204.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\zutuzuni]ImagePath=[%PROGRAM_FILES%]\58417946-1456801390-11E4-B57F-68F728252B2C\jnsz2819.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\zigipyro]ImagePath=[%LOCAL_APPDATA%]\58417946-1457424427-11E4-B57F-68F728252B2C\qnsx584F.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\wucotusy]ImagePath=[%PROGRAM_FILES%]\58417946-1456801390-11E4-B57F-68F728252B2C\hnsp425F.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\zigipyro]ImagePath=[%LOCAL_APPDATA%]\58417946-1457598232-11E4-B57F-68F728252B2C\qnssEAFC.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\zigipyro]ImagePath=[%LOCAL_APPDATA%]\19D78E80-1457641855-11DD-B096-BCEE7B8BED3B\qnsfB4B3.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\wucotusy]ImagePath=[%PROGRAM_FILES%]\3C862D34-1457626599-E511-A961-68F728E082B6\hnsx272B.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\dojygici]ImagePath=[%PROGRAM_FILES%]\3C862D34-1457626599-E511-A961-68F728E082B6\jnst10B3.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\zigipyro]ImagePath=[%LOCAL_APPDATA%]\4C4C4544-1457625204-5810-8039-B5C04F443332\qnsm5246.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\wucotusy]ImagePath=[%PROGRAM_FILES%]\4C4C4544-1457624918-5810-8039-B5C04F443332\hnsxFE61.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\dojygici]ImagePath=[%PROGRAM_FILES%]\4C4C4544-1457624918-5810-8039-B5C04F443332\jnsxE341.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\zutuzuni]ImagePath=[%PROGRAM_FILES%]\807DB127-1455315621-11E2-B4A9-C3EEEC03C06C\jnsqE22C.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\wucotusy]ImagePath=[%PROGRAM_FILES%]\807DB127-1455315621-11E2-B4A9-C3EEEC03C06C\hnsjF865.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\zutuzuni]ImagePath=[%PROGRAM_FILES%]\37C9B5D0-1456656249-DF11-8072-705AB6C1E3C5\jnslDEBB.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\wucotusy]ImagePath=[%PROGRAM_FILES%]\37C9B5D0-1456656249-DF11-8072-705AB6C1E3C5\hnsaF558.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\wucotusy]ImagePath=[%PROGRAM_FILES%]\45F75E00-1453025091-11E4-A0E8-3464A9109AF4\hnsy2AEC.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\wucotusy]ImagePath=[%PROGRAM_FILES%]\00000000-1457641131-0000-0000-448A5BD503A1\hnst7553.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\rowugoqo]ImagePath=[%LOCAL_APPDATA%]\00000000-1457666444-0000-0000-448A5BD503A1\snsoD3D6.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\dojygici]ImagePath=[%PROGRAM_FILES%]\00000000-1457641131-0000-0000-448A5BD503A1\jnsy5A52.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\wucotusy]ImagePath=[%PROGRAM_FILES%]\5059EC60-1457571211-DF11-94E4-88AE1D12B99D\hnsqAA6E.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\dojygici]ImagePath=[%PROGRAM_FILES%]\5059EC60-1457571211-DF11-94E4-88AE1D12B99D\jnsa8A10.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\wucotusy]ImagePath=[%PROGRAM_FILES%]\B40E1F63-1457594405-4A40-882F-60EB69135FEA\hnsgF040.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\dojygici]ImagePath=[%PROGRAM_FILES%]\B40E1F63-1457594405-4A40-882F-60EB69135FEA\jnslD5DB.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\zigipyro]ImagePath=[%LOCAL_APPDATA%]\72A26C2D-1457549225-7C47-9A72-2EF07125E8FE\qnsyB9F4.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\wucotusy]ImagePath=[%PROGRAM_FILES%]\72A26C2D-1457557780-7C47-9A72-2EF07125E8FE\hnsm881A.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\dojygici]ImagePath=[%PROGRAM_FILES%]\72A26C2D-1457557780-7C47-9A72-2EF07125E8FE\jnsn7089.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\zutuzuni]ImagePath=[%PROGRAM_FILES%]\4C4C4544-1450577947-5810-804E-C7C04F325231\jnsr421B.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\wucotusy]ImagePath=[%PROGRAM_FILES%]\4C4C4544-1450577947-5810-804E-C7C04F325231\hnst60FF.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\dojygici]ImagePath=[%PROGRAM_FILES%]\0C60EB38-1457567270-A997-9593-14DDA94DC03B\jnsz3F.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\zigipyro]ImagePath=[%LOCAL_APPDATA%]\0C60EB38-1457575122-A997-9593-14DDA94DC03B\qnsy4534.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\wucotusy]ImagePath=[%PROGRAM_FILES%]\0C60EB38-1457567270-A997-9593-14DDA94DC03B\hnsn16F5.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\rowugoqo]ImagePath=[%LOCAL_APPDATA%]\0C60EB38-1457574530-A997-9593-14DDA94DC03B\snsvC229.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\wucotusy]ImagePath=[%PROGRAM_FILES%]\4C0F1620-1457549216-11DD-8421-7824AF8875A8\hnshFC47.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\rowugoqo]ImagePath=[%LOCAL_APPDATA%]\4C0F1620-1457574508-11DD-8421-7824AF8875A8\snsn1C93.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\dojygici]ImagePath=[%PROGRAM_FILES%]\4C0F1620-1457549216-11DD-8421-7824AF8875A8\jnshE607.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\vicoqudu]ImagePath=[%APPDATA%]\5EBDBF60-1436482172-11D9-8D37-BCAEC5E1ED97\hnsr3E12.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\rowugoqo]ImagePath=[%LOCAL_APPDATA%]\077EC580-1453279149-1016-A665-AF2D3B825C84\snsu7C52.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\dojygici]ImagePath=[%PROGRAM_FILES%]\077EC580-1457098897-1016-A665-AF2D3B825C84\jnsy18BE.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\zigipyro]ImagePath=[%LOCAL_APPDATA%]\3FBC0976-1457489617-11DF-9553-190067018030\qnsbAD8D.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\wucotusy]ImagePath=[%PROGRAM_FILES%]\B92DB1AD-1457423199-DF11-B25F-88AE1D221A69\hnse2DF8.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\rowugoqo]ImagePath=[%LOCAL_APPDATA%]\B92DB1AD-1457443177-DF11-B25F-88AE1D221A69\snspA143.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\dojygici]ImagePath=[%PROGRAM_FILES%]\B92DB1AD-1457423199-DF11-B25F-88AE1D221A69\jnsoC120.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\wucotusy]ImagePath=[%PROGRAM_FILES%]\4C4C4544-1457249614-5410-8032-CAC04F475631\hnsyDB9E.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\dojygici]ImagePath=[%PROGRAM_FILES%]\4C4C4544-1457249614-5410-8032-CAC04F475631\jnsqBB14.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\wucotusy]ImagePath=[%PROGRAM_FILES%]\526DAD9A-1457193893-AC48-920C-40167E8CC674\hnsq6450.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\dojygici]ImagePath=[%PROGRAM_FILES%]\526DAD9A-1457193893-AC48-920C-40167E8CC674\jnsu47FC.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\wucotusy]ImagePath=[%PROGRAM_FILES%]\00000000-1457420030-0000-0000-1C6F656A12D2\hnstBF7D.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\zigipyro]ImagePath=[%LOCAL_APPDATA%]\4B435451-1457530887-5232-4932-C86000B72CAC\qnst8967.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\wucotusy]ImagePath=[%PROGRAM_FILES%]\4B435451-1457362089-5232-4932-C86000B72CAC\hnss924C.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\dojygici]ImagePath=[%PROGRAM_FILES%]\4B435451-1457362089-5232-4932-C86000B72CAC\jnsa730A.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\zigipyro]ImagePath=[%LOCAL_APPDATA%]\D97A5F57-1457536308-11E5-BA4C-507B9D27D979\qnswE79A.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\wucotusy]ImagePath=[%PROGRAM_FILES%]\D97A5F57-1457514473-11E5-BA4C-507B9D27D979\hnsd7971.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\dojygici]ImagePath=[%PROGRAM_FILES%]\D97A5F57-1457514473-11E5-BA4C-507B9D27D979\jnsa4B6A.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\zigipyro]ImagePath=[%LOCAL_APPDATA%]\78DA2A86-1457467816-5356-A19A-F561DD912F40\qnsp11BF.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\zigipyro]ImagePath=[%LOCAL_APPDATA%]\A1ECD7D0-1457516733-11DE-9B6B-909EF3BB1A00\qnsf64FD.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\dojygici]ImagePath=[%PROGRAM_FILES%]\48D62BDA-1457256799-E211-BADF-208984CED190\jnsxCC77.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\wucotusy]ImagePath=[%PROGRAM_FILES%]\34444335-1457514488-4B38-3952-3863BB911A16\hnsoEEDA.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\dojygici]ImagePath=[%PROGRAM_FILES%]\34444335-1457514488-4B38-3952-3863BB911A16\jnsiD5A2.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\wucotusy]ImagePath=[%PROGRAM_FILES%]\67452301-1457540602-EFCD-0123-456789ABCDEF\hnsf6C17.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\rowugoqo]ImagePath=[%LOCAL_APPDATA%]\67452301-1457544486-EFCD-0123-456789ABCDEF\snsg51E2.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\wucotusy]ImagePath=[%PROGRAM_FILES%]\4B435451-1457519687-3034-4931-F46D04B8D6B1\hnsvB0B.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\dojygici]ImagePath=[%PROGRAM_FILES%]\4B435451-1457519687-3034-4931-F46D04B8D6B1\jnsuE2D0.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\zigipyro]ImagePath=[%LOCAL_APPDATA%]\4C3A5C14-1457474201-E011-9D01-0050BF20DC86\qnsh59F7.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\wucotusy]ImagePath=[%PROGRAM_FILES%]\4C3A5C14-1457414743-E011-9D01-0050BF20DC86\hnspE71B.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\dojygici]ImagePath=[%PROGRAM_FILES%]\4C3A5C14-1457414743-E011-9D01-0050BF20DC86\jnspC71B.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\wenuvisi]ImagePath=[%PROGRAM_FILES%]\4FCA4960-1445976050-11DD-97BE-50465D9E9ED1\jnslC25C.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\lywutemy]ImagePath=[%PROGRAM_FILES%]\4FCA4960-1445976050-11DD-97BE-50465D9E9ED1\knsgB1DB.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\dijojyvi]ImagePath=[%PROGRAM_FILES%]\4FCA4960-1445976050-11DD-97BE-50465D9E9ED1\hnsgEFF3.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\wucotusy]ImagePath=[%PROGRAM_FILES%]\0839ADC4-1457275169-E411-B2A0-3863BB72A11D\hnsb6F51.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\dojygici]ImagePath=[%PROGRAM_FILES%]\0839ADC4-1457275169-E411-B2A0-3863BB72A11D\jnsk466A.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\zutuzuni]ImagePath=[%PROGRAM_FILES%]\864FDA20-1452471779-11E1-8C37-78843CF8B2FC\jnsj4B21.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\zigipyro]ImagePath=[%LOCAL_APPDATA%]\864FDA20-1457383691-11E1-8C37-78843CF8B2FC\qnsp7AF3.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\wucotusy]ImagePath=[%PROGRAM_FILES%]\864FDA20-1452471779-11E1-8C37-78843CF8B2FC\hnsj6523.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\zutuzuni]ImagePath=[%PROGRAM_FILES%]\9283E377-1455415146-E111-9FBB-0013D4D0774C\jnsx7D55.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\zigipyro]ImagePath=[%LOCAL_APPDATA%]\9283E377-1457477191-E111-9FBB-0013D4D0774C\qnsm47AC.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\wucotusy]ImagePath=[%PROGRAM_FILES%]\9283E377-1455415146-E111-9FBB-0013D4D0774C\hnszC387.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\zigipyro]ImagePath=[%LOCAL_APPDATA%]\F1E6219C-1457456955-F289-7E63-40167E735381\qnsvF87F.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\rowugoqo]ImagePath=[%LOCAL_APPDATA%]\F1E6219C-1457159940-F289-7E63-40167E735381\snssC360.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\dojygici]ImagePath=[%PROGRAM_FILES%]\F1E6219C-1457170642-F289-7E63-40167E735381\jnsb78C7.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\detoqoke]ImagePath=[%APPDATA%]\03000200-1430745602-0500-0006-000700080009\nsyC39.tmpfs
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\zigowyni]ImagePath=[%APPDATA%]\03000200-1431963610-0500-0006-000700080009\nsg3E73.tmpfs
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\rowugoqo]ImagePath=[%LOCAL_APPDATA%]\4C4C4544-1457208535-5910-8035-B9C04F383931\snsjE947.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\dojygici]ImagePath=[%PROGRAM_FILES%]\4C4C4544-1457152998-5910-8035-B9C04F383931\jnsvA9BB.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\zigipyro]ImagePath=[%LOCAL_APPDATA%]\4C4C4544-1457282489-3810-805A-C2C04F593732\qnsrFE4D.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\dojygici]ImagePath=[%PROGRAM_FILES%]\4C4C4544-1457268832-3810-805A-C2C04F593732\jnsaE7E0.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\dojygici]ImagePath=[%PROGRAM_FILES%]\4C4C4544-1457277337-4810-8036-B8C04F353432\jnsm5A70.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\wucotusy]ImagePath=[%PROGRAM_FILES%]\03AA02FC-1457268820-05C2-8D06-4A0700080009\hnsp20CD.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\dojygici]ImagePath=[%PROGRAM_FILES%]\03AA02FC-1457268820-05C2-8D06-4A0700080009\jnsu9964.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\zutuzuni]ImagePath=[%PROGRAM_FILES%]\4C4C4544-1455605022-3410-8035-B9C04F33354A\jnswA43C.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\zigipyro]ImagePath=[%LOCAL_APPDATA%]\4C4C4544-1457436462-3410-8035-B9C04F33354A\qnswDC8E.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\wucotusy]ImagePath=[%PROGRAM_FILES%]\4C4C4544-1455605022-3410-8035-B9C04F33354A\hnswD76E.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\wucotusy]ImagePath=[%PROGRAM_FILES%]\57F57C00-1457245526-81E2-2222-AC220BA9E97B\hnsw9A46.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\dojygici]ImagePath=[%PROGRAM_FILES%]\57F57C00-1457245526-81E2-2222-AC220BA9E97B\jnsp6365.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\wucotusy]ImagePath=[%PROGRAM_FILES%]\8B19CFA5-1457436671-58D0-B07E-E3394968AA7D\hnsh70BD.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\dojygici]ImagePath=[%PROGRAM_FILES%]\8B19CFA5-1457436671-58D0-B07E-E3394968AA7D\jnsg5312.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\wucotusy]ImagePath=[%PROGRAM_FILES%]\FFFFFFFF-1457431139-FFFF-FFFF-FFFFFFFFFFFF\hnssA4CA.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\wucotusy]ImagePath=[%PROGRAM_FILES%]\8C04B72A-1457348563-E411-B2A0-F0761C2045D4\hnsi30F8.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\dojygici]ImagePath=[%PROGRAM_FILES%]\8C04B72A-1457348563-E411-B2A0-F0761C2045D4\jnsi187C.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\wucotusy]ImagePath=[%PROGRAM_FILES%]\03000200-1457462800-0500-0006-000700080009\hnsc73CE.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\dojygici]ImagePath=[%PROGRAM_FILES%]\03000200-1457462800-0500-0006-000700080009\jnsi5AD6.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\wucotusy]ImagePath=[%PROGRAM_FILES%]\03000200-1457460001-0500-0006-000700080009\hnsm12C8.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\dojygici]ImagePath=[%PROGRAM_FILES%]\03000200-1457460001-0500-0006-000700080009\jnswFDB0.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\wucotusy]ImagePath=[%PROGRAM_FILES%]\1E00E340-1457332609-6E00-A34E-D850E6519425\hnsfF473.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\dojygici]ImagePath=[%PROGRAM_FILES%]\1E00E340-1457332609-6E00-A34E-D850E6519425\jnsvDFC9.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\jidybopi]ImagePath=[%APPDATA%]\00000000-1425901426-0000-0000-001FD0E31801\nsw548F.tmpfs
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\vyfesyzy]ImagePath=[%APPDATA%]\00000000-1425901426-0000-0000-001FD0E31801\jnswAB5B.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\zigipyro]ImagePath=[%LOCAL_APPDATA%]\B4DAC676-1457350154-DB11-8B53-00E018E171B9\qnsq1D1.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\rowugoqo]ImagePath=[%LOCAL_APPDATA%]\B4DAC676-1457180002-DB11-8B53-00E018E171B9\snse1A0.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\zigipyro]ImagePath=[%LOCAL_APPDATA%]\90347964-1457364448-6C06-C5CD-382C4ABB3519\qnsnD4DD.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\wucotusy]ImagePath=[%PROGRAM_FILES%]\03000200-1457327282-0500-0006-000700080009\hnsh9CCF.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\dojygici]ImagePath=[%PROGRAM_FILES%]\03000200-1457327282-0500-0006-000700080009\jnsh561D.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\wucotusy]ImagePath=[%PROGRAM_FILES%]\41FCBA77-1457289538-DE11-92F4-00262203B285\hnsq68D2.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\rowugoqo]ImagePath=[%LOCAL_APPDATA%]\41FCBA77-1457314841-DE11-92F4-00262203B285\snswBA2C.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\dojygici]ImagePath=[%PROGRAM_FILES%]\41FCBA77-1457289538-DE11-92F4-00262203B285\jnsl5189.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\zigipyro]ImagePath=[%LOCAL_APPDATA%]\BAB9BFF9-1457392186-EC3C-0308-B587AE9632B2\qnsj99D3.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\wucotusy]ImagePath=[%PROGRAM_FILES%]\BAB9BFF9-1457373521-EC3C-0308-B587AE9632B2\hnsnCAAF.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\rowugoqo]ImagePath=[%LOCAL_APPDATA%]\BAB9BFF9-1457380849-EC3C-0308-B587AE9632B2\snss1520.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\dojygici]ImagePath=[%PROGRAM_FILES%]\BAB9BFF9-1457373521-EC3C-0308-B587AE9632B2\jnsl91CB.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\wucotusy]ImagePath=[%PROGRAM_FILES%]\7BA72B8E-1457347902-599A-03DF-BA0FD7CFB3FF\hnsd9A3D.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\dojygici]ImagePath=[%PROGRAM_FILES%]\7BA72B8E-1457347902-599A-03DF-BA0FD7CFB3FF\jnse8348.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\wucotusy]ImagePath=[%PROGRAM_FILES%]\4C4C4544-1457344682-4610-8034-C2C04F345931\hnsqAC96.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\dojygici]ImagePath=[%PROGRAM_FILES%]\4C4C4544-1457344682-4610-8034-C2C04F345931\jnsl870A.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\wucotusy]ImagePath=[%PROGRAM_FILES%]\03000200-1457375961-0500-0006-000700080009\hnsd2FFD.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\dojygici]ImagePath=[%PROGRAM_FILES%]\03000200-1457375961-0500-0006-000700080009\jnsv1B3B.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\wucotusy]ImagePath=[%PROGRAM_FILES%]\6AB5B300-1457377236-1014-9FB5-B0684D007B53\hnshBAD3.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\dojygici]ImagePath=[%PROGRAM_FILES%]\6AB5B300-1457377236-1014-9FB5-B0684D007B53\jnsg9E60.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\dojygici]ImagePath=[%PROGRAM_FILES%]\CA526660-1457307642-11E1-92AB-047D7B16B838\jnspE39.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\wucotusy]ImagePath=[%PROGRAM_FILES%]\4C4C4544-1457346352-3510-8046-C3C04F4C5231\hnss3A50.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\dojygici]ImagePath=[%PROGRAM_FILES%]\4C4C4544-1457346352-3510-8046-C3C04F4C5231\jnsy15DE.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\rowugoqo]ImagePath=[%LOCAL_APPDATA%]\FFFFFFFF-1457322385-FFFF-FFFF-FFFFFFFFFFFF\snsc156.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\wucotusy]ImagePath=[%PROGRAM_FILES%]\61393765-1457348034-3139-3036-705AB6D90916\hnszB83F.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\dojygici]ImagePath=[%PROGRAM_FILES%]\61393765-1457348034-3139-3036-705AB6D90916\jnsz97A3.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\rowugoqo]ImagePath=[%LOCAL_APPDATA%]\73852100-1457265736-0820-1010-055120000000\snst9797.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\dojygici]ImagePath=[%PROGRAM_FILES%]\73852100-1457258347-0820-1010-055120000000\jnsc3F8C.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\zutuzuni]ImagePath=[%PROGRAM_FILES%]\FF961E01-1452767172-11CB-B4BF-DFE1ED80E267\jnsaF00.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\zigipyro]ImagePath=[%LOCAL_APPDATA%]\FF961E01-1457361112-11CB-B4BF-DFE1ED80E267\qnszB453.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\wucotusy]ImagePath=[%PROGRAM_FILES%]\FF961E01-1452767172-11CB-B4BF-DFE1ED80E267\hnsg67BC.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\dojygici]ImagePath=[%PROGRAM_FILES%]\00009CBD-1457169472-2F05-FFFF-50465D3E7377\jnsy42A.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\zigipyro]ImagePath=[%LOCAL_APPDATA%]\00009CBD-1457368532-2F05-FFFF-50465D3E7377\qnsfD801.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\wucotusy]ImagePath=[%PROGRAM_FILES%]\00009CBD-1457169472-2F05-FFFF-50465D3E7377\hnsd1DAF.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\zigipyro]ImagePath=[%LOCAL_APPDATA%]\2E431571-1457359863-11E4-9F6E-68F72812842B\qnsr4AD7.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\wucotusy]ImagePath=[%PROGRAM_FILES%]\2E431571-1457341529-11E4-9F6E-68F72812842B\hnsc1112.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\dojygici]ImagePath=[%PROGRAM_FILES%]\2E431571-1457341529-11E4-9F6E-68F72812842B\jnshFA07.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\dojygici]ImagePath=[%PROGRAM_FILES%]\03DE0294-1457251918-05B8-1306-5E0700080009\jnsr17D.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\wucotusy]ImagePath=[%PROGRAM_FILES%]\03DE0294-1457251918-05B8-1306-5E0700080009\hnsv23BD.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\zigipyro]ImagePath=[%LOCAL_APPDATA%]\FFFFFFFF-1457281260-FFFF-FFFF-FFFFFFFFFFFF\qnsk84.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\dojygici]ImagePath=[%PROGRAM_FILES%]\D5CE91C0-1457277719-11E3-933A-305A3A45E6BA\jnsv9AA3.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\kihiburo]ImagePath=[%PROGRAM_FILES%]\03000200-1439313457-0500-0006-000700080009\knsjDF9E.tmpfs
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\hyverumu]ImagePath=[%PROGRAM_FILES%]\03000200-1439313457-0500-0006-000700080009\jnsjFE1C.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\gopibeko]ImagePath=[%LOCAL_APPDATA%]\03000200-1439299124-0500-0006-000700080009\snseD470.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\comyninu]ImagePath=[%PROGRAM_FILES%]\03000200-1439313457-0500-0006-000700080009\hnse1881.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\zutuzuni]ImagePath=[%PROGRAM_FILES%]\2840D800-1456767439-11DD-A56A-BCEE7B87F99A\jnsxFCD5.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\zigipyro]ImagePath=[%LOCAL_APPDATA%]\2840D800-1457273591-11DD-A56A-BCEE7B87F99A\qnsh567B.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\wucotusy]ImagePath=[%PROGRAM_FILES%]\2840D800-1456767439-11DD-A56A-BCEE7B87F99A\hnsx13FF.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\rowugoqo]ImagePath=[%LOCAL_APPDATA%]\2840D800-1456771101-11DD-A56A-BCEE7B87F99A\snsiCAFE.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\rowugoqo]ImagePath=[%LOCAL_APPDATA%]\05657C00-1457215021-1011-92E3-8D4B1F35BB09\snsc13A.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\wucotusy]ImagePath=[%PROGRAM_FILES%]\6C237980-1457272046-81E3-3C9C-D850E61DA336\hnsw66A4.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\dojygici]ImagePath=[%PROGRAM_FILES%]\6C237980-1457272046-81E3-3C9C-D850E61DA336\jnsr4F5B.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\wucotusy]ImagePath=[%PROGRAM_FILES%]\DD6B4A74-1457289518-E411-B2A0-F8A9634B2B9C\hnsl88A9.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\rowugoqo]ImagePath=[%LOCAL_APPDATA%]\DD6B4A74-1457296808-E411-B2A0-F8A9634B2B9C\snswAC20.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\dojygici]ImagePath=[%PROGRAM_FILES%]\DD6B4A74-1457289518-E411-B2A0-F8A9634B2B9C\jnsb6E83.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\wucotusy]ImagePath=[%PROGRAM_FILES%]\F41DBEF2-1455487373-BC49-83AF-089E0176B62E\hnsd17D.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\zutuzuni]ImagePath=[%PROGRAM_FILES%]\F41DBEF2-1455487373-BC49-83AF-089E0176B62E\jnsdE9B7.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\wucotusy]ImagePath=[%PROGRAM_FILES%]\FFFFFFFF-1457179235-FFFF-FFFF-FFFFFFFFFFFF\hnseE540.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\dojygici]ImagePath=[%PROGRAM_FILES%]\FFFFFFFF-1457179235-FFFF-FFFF-FFFFFFFFFFFF\jnstBF85.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\zigipyro]ImagePath=[%LOCAL_APPDATA%]\934A9067-1457139817-DA4E-9E51-42D2C1FBC3B3\qnshE7C1.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\dojygici]ImagePath=[%PROGRAM_FILES%]\044C9F80-1457117608-11DE-85C6-0024BEB5E1A1\jnsyD72E.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\rowugoqo]ImagePath=[%LOCAL_APPDATA%]\FFFFFFFF-1457027580-FFFF-FFFF-FFFFFFFFFFFF\snsf1BF9.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\dojygici]ImagePath=[%PROGRAM_FILES%]\FFFFFFFF-1457007537-FFFF-FFFF-FFFFFFFFFFFF\jnsb8CE5.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\dojygici]ImagePath=[%PROGRAM_FILES%]\B2059EC0-1457152886-11DD-89AA-54424972CA29\jnsyD0.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\wucotusy]ImagePath=[%PROGRAM_FILES%]\B2059EC0-1457152886-11DD-89AA-54424972CA29\hnsy4C62.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\wucotusy]ImagePath=[%PROGRAM_FILES%]\30A89F00-1457148481-11DD-B0DD-50465DA3895F\hnsb8A49.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\dojygici]ImagePath=[%PROGRAM_FILES%]\30A89F00-1457148481-11DD-B0DD-50465DA3895F\jnsr6615.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\zigipyro]ImagePath=[%LOCAL_APPDATA%]\80AAAA8A-1457193517-DC11-9E6A-0013D4D9C940\qnsvC11D.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\wucotusy]ImagePath=[%PROGRAM_FILES%]\80AAAA8A-1457187535-DC11-9E6A-0013D4D9C940\hnso8268.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\dojygici]ImagePath=[%PROGRAM_FILES%]\80AAAA8A-1457187535-DC11-9E6A-0013D4D9C940\jnsq6CFA.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\wucotusy]ImagePath=[%PROGRAM_FILES%]\FEFEFEFE-1457087229-FEFE-FEFE-FEFEFEFEFEFE\hnsk187C.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\dojygici]ImagePath=[%PROGRAM_FILES%]\FEFEFEFE-1457087229-FEFE-FEFE-FEFEFEFEFEFE\jnso7034.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\myqityze]ImagePath=[%PROGRAM_FILES%]\1E009600-1445022434-6E00-A84C-D850E653A1CD\jnstDD1C.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\jenujixi]ImagePath=[%PROGRAM_FILES%]\1E009600-1445022434-6E00-A84C-D850E653A1CD\knslBE14.tmpfs
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\comyninu]ImagePath=[%PROGRAM_FILES%]\1E009600-1439407877-6E00-A84C-D850E653A1CD\hnshC51E.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\dojygici]ImagePath=[%PROGRAM_FILES%]\7E63B1C0-1457147109-11B2-8000-97D92D81165E\jnsr243.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\wucotusy]ImagePath=[%PROGRAM_FILES%]\7E63B1C0-1457147109-11B2-8000-97D92D81165E\hnsb1AE3.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\zutuzuni]ImagePath=[%PROGRAM_FILES%]\27AFDC80-1456077618-11DE-8697-78843C2DE280\jnsoF5A0.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\zigipyro]ImagePath=[%LOCAL_APPDATA%]\27AFDC80-1456958839-11DE-8697-78843C2DE280\qnse5560.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\wucotusy]ImagePath=[%PROGRAM_FILES%]\27AFDC80-1456077618-11DE-8697-78843C2DE280\hnsk2ABC.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\zutuzuni]ImagePath=[%PROGRAM_FILES%]\C6EA3BEE-1453584217-E311-940D-F8A96370CD71\jnsq552.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\wucotusy]ImagePath=[%PROGRAM_FILES%]\C6EA3BEE-1453584217-E311-940D-F8A96370CD71\hnsq1DCE.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\zutuzuni]ImagePath=[%PROGRAM_FILES%]\F4F23580-1455270567-11DF-8389-20CF30CA8092\jnsbCE37.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\zigipyro]ImagePath=[%LOCAL_APPDATA%]\F4F23580-1457168575-11DF-8389-20CF30CA8092\qnsxBC3F.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\wucotusy]ImagePath=[%PROGRAM_FILES%]\F4F23580-1455270567-11DF-8389-20CF30CA8092\hnswE716.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\wucotusy]ImagePath=[%PROGRAM_FILES%]\03D40274-1457044316-051B-EC06-060700080009\hnse6A4C.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\dojygici]ImagePath=[%PROGRAM_FILES%]\03D40274-1457044316-051B-EC06-060700080009\jnsa53D4.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\zutuzuni]ImagePath=[%PROGRAM_FILES%]\0E274060-1456867413-11D9-A11B-14DAE96D5D37\jnse51E0.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\wucotusy]ImagePath=[%PROGRAM_FILES%]\0E274060-1456867413-11D9-A11B-14DAE96D5D37\hnsn6829.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\zigipyro]ImagePath=[%LOCAL_APPDATA%]\E14BB0E2-1457120066-8B47-7AD7-AAACA2955074\qnso46E2.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\liquqosy]ImagePath=[%PROGRAM_FILES%]\E14BB0E2-1445793416-8B47-7AD7-AAACA2955074\jnse34B3.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\dijojyvi]ImagePath=[%PROGRAM_FILES%]\E14BB0E2-1445793416-8B47-7AD7-AAACA2955074\hnsx5666.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\wucotusy]ImagePath=[%PROGRAM_FILES%]\188104FC-1457080353-C64E-B5FD-48E05C532D83\hnsdF385.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\dojygici]ImagePath=[%PROGRAM_FILES%]\188104FC-1457080353-C64E-B5FD-48E05C532D83\jnsfD0C9.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\zigipyro]ImagePath=[%LOCAL_APPDATA%]\000F8EB3-1457100432-8015-FFFF-485B39E6B8A8\qnsxF96D.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\wucotusy]ImagePath=[%PROGRAM_FILES%]\000F8EB3-1456998841-8015-FFFF-485B39E6B8A8\hnsaC96A.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\dojygici]ImagePath=[%PROGRAM_FILES%]\000F8EB3-1456998841-8015-FFFF-485B39E6B8A8\jnsfAFA1.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\zutuzuni]ImagePath=[%PROGRAM_FILES%]\4C4C4544-1453057898-4E10-8038-B6C04F38354A\jnsiFCEC.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\wucotusy]ImagePath=[%PROGRAM_FILES%]\4C4C4544-1453057898-4E10-8038-B6C04F38354A\hnsy14C2.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\zizusyju]ImagePath=[%PROGRAM_FILES%]\4C4C4544-1450750027-5410-804C-C6C04F4E5431\hnsh69.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\zigipyro]ImagePath=[%LOCAL_APPDATA%]\4C4C4544-1456708395-5410-804C-C6C04F4E5431\qnsi3C6C.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\rizyqibe]ImagePath=[%PROGRAM_FILES%]\4C4C4544-1450750027-5410-804C-C6C04F4E5431\jnsmD8EA.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\rowugoqo]ImagePath=[%LOCAL_APPDATA%]\7CC8B91C-1457047272-5149-89BF-D5E92EFAADC6\snsx9EBB.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\rowugoqo]ImagePath=[%LOCAL_APPDATA%]\FFFFFFFF-1456070419-FFFF-FFFF-FFFFFFFFFFFF\snsiF1.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\wucotusy]ImagePath=[%PROGRAM_FILES%]\C1F59000-1457077135-0000-0000-000000000000\hnso38FC.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\dojygici]ImagePath=[%PROGRAM_FILES%]\C1F59000-1457077135-0000-0000-000000000000\jnsj2165.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\zigipyro]ImagePath=[%LOCAL_APPDATA%]\C13733AF-1457077619-E211-809C-20898481A880\qnsd8495.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\tobibizy]ImagePath=[%APPDATA%]\9E47B81D-1431935289-DC11-B5D9-001A9239FA9B\jnst63A.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\jimocoso]ImagePath=[%PROGRAM_FILES%]\9E47B81D-1440996372-DC11-B5D9-001A9239FA9B\jnsw981.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\comyninu]ImagePath=[%PROGRAM_FILES%]\9E47B81D-1438672005-DC11-B5D9-001A9239FA9B\hnsoC91.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\cofynosu]ImagePath=[%APPDATA%]\9E47B81D-1431935289-DC11-B5D9-001A9239FA9B\nsdCABA.tmpfs
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\zutuzuni]ImagePath=[%PROGRAM_FILES%]\9E47B81D-1455873349-DC11-B5D9-001A9239FA9B\jnse2272.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\wyhesete]ImagePath=[%APPDATA%]\9E47B81D-1431935289-DC11-B5D9-001A9239FA9B\hnso1FB5.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\wucotusy]ImagePath=[%PROGRAM_FILES%]\9E47B81D-1455873349-DC11-B5D9-001A9239FA9B\hnsy3CD6.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\totyseku]ImagePath=[%PROGRAM_FILES%]\9E47B81D-1440996372-DC11-B5D9-001A9239FA9B\hnsb22EC.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\mikypuku]ImagePath=[%PROGRAM_FILES%]\9E47B81D-1440996372-DC11-B5D9-001A9239FA9B\knsuD2A9.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\hyverumu]ImagePath=[%PROGRAM_FILES%]\9E47B81D-1438672005-DC11-B5D9-001A9239FA9B\jnstF316.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\cubyrubi]ImagePath=[%PROGRAM_FILES%]\9E47B81D-1438672005-DC11-B5D9-001A9239FA9B\knsdD1CA.tmpfs
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\wucotusy]ImagePath=[%PROGRAM_FILES%]\6528A60A-1457040483-E411-85C7-F0761C7AC82D\hnsm65BC.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\dojygici]ImagePath=[%PROGRAM_FILES%]\6528A60A-1457040483-E411-85C7-F0761C7AC82D\jnsc4D9E.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\wucotusy]ImagePath=[%PROGRAM_FILES%]\6B1920DF-1457165103-E311-B2A0-288023E6CA63\hnsa4E8C.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\rowugoqo]ImagePath=[%LOCAL_APPDATA%]\6B1920DF-1457136500-E311-B2A0-288023E6CA63\snscA7BE.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\dojygici]ImagePath=[%PROGRAM_FILES%]\6B1920DF-1457165103-E311-B2A0-288023E6CA63\jnsj246D.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\zigipyro]ImagePath=[%LOCAL_APPDATA%]\35444335-1457094725-3533-4B35-D0BF9C994EC2\qnsq326C.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\zutuzuni]ImagePath=[%PROGRAM_FILES%]\9B7AF226-1453020687-E011-A8A5-8C736EADD728\jnsfB8D3.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\zigipyro]ImagePath=[%LOCAL_APPDATA%]\9B7AF226-1457101182-E011-A8A5-8C736EADD728\qnso2E10.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\wucotusy]ImagePath=[%PROGRAM_FILES%]\9B7AF226-1453020687-E011-A8A5-8C736EADD728\hnspD0F1.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\dojygici]ImagePath=[%PROGRAM_FILES%]\1F925D00-1456964463-815C-22C2-4C72B92D8C0A\jnsx657.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\zigipyro]ImagePath=[%LOCAL_APPDATA%]\1F925D00-1457000275-815C-22C2-4C72B92D8C0A\qnsv8CD9.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\wucotusy]ImagePath=[%PROGRAM_FILES%]\1F925D00-1456964463-815C-22C2-4C72B92D8C0A\hnsx2D59.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\dojygici]ImagePath=[%PROGRAM_FILES%]\00000011-1457000404-0000-0000-40167E996326\jnsiC22A.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\zigipyro]ImagePath=[%LOCAL_APPDATA%]\00000000-1457047960-0000-0000-001A4DF80FBB\qnsf3153.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\wucotusy]ImagePath=[%PROGRAM_FILES%]\84827020-1457020485-11D5-9370-001D60B12A0C\hnse8BCA.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\dojygici]ImagePath=[%PROGRAM_FILES%]\84827020-1457020485-11D5-9370-001D60B12A0C\jnsp73DB.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\xetecype]ImagePath=[%PROGRAM_FILES%]\10386380-1443257923-11DE-AE17-00248CDD7EA6\knsf5E99.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\lehicewu]ImagePath=[%PROGRAM_FILES%]\10386380-1443257923-11DE-AE17-00248CDD7EA6\jnsi2E65.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\gyvixodu]ImagePath=[%PROGRAM_FILES%]\10386380-1443257923-11DE-AE17-00248CDD7EA6\hnsl448E.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\dipubibu]ImagePath=[%LOCAL_APPDATA%]\10386380-1443286769-11DE-AE17-00248CDD7EA6\snsnAEA3.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\zutuzuni]ImagePath=[%PROGRAM_FILES%]\62717680-1454229041-11E0-B186-E89A8F9AF471\jnsj608D.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\zigipyro]ImagePath=[%LOCAL_APPDATA%]\62717680-1456941941-11E0-B186-E89A8F9AF471\qnsdE3D7.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\wucotusy]ImagePath=[%PROGRAM_FILES%]\62717680-1454229041-11E0-B186-E89A8F9AF471\hnsw7FB0.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\dojygici]ImagePath=[%PROGRAM_FILES%]\1675A39B-1457042576-DC11-B975-00E0188501F7\jnsu9C86.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\zigipyro]ImagePath=[%LOCAL_APPDATA%]\16DF0700-1457004571-81E2-3979-4C72B95AEB9F\qnsiEE18.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\wucotusy]ImagePath=[%PROGRAM_FILES%]\16DF0700-1456588597-81E2-3979-4C72B95AEB9F\hnst438B.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\rowugoqo]ImagePath=[%LOCAL_APPDATA%]\16DF0700-1456595941-81E2-3979-4C72B95AEB9F\snse8D66.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\gopibeko]ImagePath=[%LOCAL_APPDATA%]\80344FE5-1441025808-DB11-B266-B290F0F26181\snsk47DE.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\zutuzuni]ImagePath=[%PROGRAM_FILES%]\DA77A780-1454423831-1E38-9ECF-D90015614AA7\jnssDA44.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\zigipyro]ImagePath=[%LOCAL_APPDATA%]\DA77A780-1457037806-1E38-9ECF-D90015614AA7\qnsv90F3.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\wucotusy]ImagePath=[%PROGRAM_FILES%]\DA77A780-1454423831-1E38-9ECF-D90015614AA7\hnsrF04F.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\zutuzuni]ImagePath=[%PROGRAM_FILES%]\00000000-1456566629-0000-0000-000000000000\jnse74D2.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\wucotusy]ImagePath=[%PROGRAM_FILES%]\00000000-1456566629-0000-0000-000000000000\hnseB2FC.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\wucotusy]ImagePath=[%PROGRAM_FILES%]\4C4C4544-1456137840-3310-8031-C6C04F324631\hnseB433.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\dojygici]ImagePath=[%PROGRAM_FILES%]\35453035-1456938747-3643-3144-4139FFFFFFFF\jnsrF617.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\zutuzuni]ImagePath=[%PROGRAM_FILES%]\53F77008-1456058279-86E7-A00D-50465DE6DB01\jnsbDEE7.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\wucotusy]ImagePath=[%PROGRAM_FILES%]\53F77008-1456058279-86E7-A00D-50465DE6DB01\hnsj95A7.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\zutuzuni]ImagePath=[%PROGRAM_FILES%]\714C930C-1454520105-E211-80DE-2089847CD4A6\jnsi7FC0.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\wucotusy]ImagePath=[%PROGRAM_FILES%]\714C930C-1454520105-E211-80DE-2089847CD4A6\hnsi988A.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\rowugoqo]ImagePath=[%LOCAL_APPDATA%]\03000200-1456914819-0500-0006-000700080009\snso7C1E.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\wucotusy]ImagePath=[%PROGRAM_FILES%]\687B5349-1456887571-2FAC-D99C-E967AE12BBFF\hnso90CC.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\dojygici]ImagePath=[%PROGRAM_FILES%]\687B5349-1456887571-2FAC-D99C-E967AE12BBFF\jnst5051.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\zutuzuni]ImagePath=[%PROGRAM_FILES%]\D06C9DC0-1456724412-11E0-A96E-F46D04424F42\jnsv38F5.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\zigipyro]ImagePath=[%LOCAL_APPDATA%]\D06C9DC0-1456925967-11E0-A96E-F46D04424F42\qnscF99C.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\wucotusy]ImagePath=[%PROGRAM_FILES%]\D06C9DC0-1456724412-11E0-A96E-F46D04424F42\hnsp81A9.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\zutuzuni]ImagePath=[%PROGRAM_FILES%]\AE217DFC-1455847821-E211-A83E-50465DCFBD37\jnsd573B.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\zigipyro]ImagePath=[%LOCAL_APPDATA%]\AE217DFC-1456873160-E211-A83E-50465DCFBD37\qnsf1031.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\wucotusy]ImagePath=[%PROGRAM_FILES%]\AE217DFC-1455847821-E211-A83E-50465DCFBD37\hnsr86B9.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\zutuzuni]ImagePath=[%PROGRAM_FILES%]\CF54A3C0-1456869024-11DE-8359-90E6BACD9925\jnstACE5.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\wucotusy]ImagePath=[%PROGRAM_FILES%]\CF54A3C0-1456869024-11DE-8359-90E6BACD9925\hnsyCDEE.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\wucotusy]ImagePath=[%PROGRAM_FILES%]\74C08C57-1456915051-11E3-9673-CE39E75CD40F\hnsgCC56.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\dojygici]ImagePath=[%PROGRAM_FILES%]\74C08C57-1456915051-11E3-9673-CE39E75CD40F\jnslA87F.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\zutuzuni]ImagePath=[%PROGRAM_FILES%]\03000200-1456562937-0500-0006-000700080009\jnssADC2.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\wucotusy]ImagePath=[%PROGRAM_FILES%]\03000200-1456562937-0500-0006-000700080009\hnszCB3F.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\zutuzuni]ImagePath=[%PROGRAM_FILES%]\E76FC2C4-1456848701-B55F-B9AF-264CF6DE5593\jnsqE6F8.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\wucotusy]ImagePath=[%PROGRAM_FILES%]\E76FC2C4-1456848701-B55F-B9AF-264CF6DE5593\hnsb1A01.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\zutuzuni]ImagePath=[%PROGRAM_FILES%]\9095D785-1456807654-E111-8E8C-DC0EA14132D8\jnswDA12.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\wucotusy]ImagePath=[%PROGRAM_FILES%]\9095D785-1456807654-E111-8E8C-DC0EA14132D8\hnsbF7C1.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\rowugoqo]ImagePath=[%LOCAL_APPDATA%]\9095D785-1456807739-E111-8E8C-DC0EA14132D8\snsbF669.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\dojygici]ImagePath=[%PROGRAM_FILES%]\AD403FD8-1456878877-E511-8EC8-F8A963667F66\jnsbF69.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\zutuzuni]ImagePath=[%PROGRAM_FILES%]\8935D847-1456853881-4641-A387-44249C8758D0\jnsa157C.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\zigipyro]ImagePath=[%LOCAL_APPDATA%]\8935D847-1456911377-4641-A387-44249C8758D0\qnspC809.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\wucotusy]ImagePath=[%PROGRAM_FILES%]\8935D847-1456853881-4641-A387-44249C8758D0\hnsz2D0D.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\wucotusy]ImagePath=[%PROGRAM_FILES%]\E493D520-1456880563-11B2-8000-E1047BEAD1D1\hnstF845.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\dojygici]ImagePath=[%PROGRAM_FILES%]\E493D520-1456880563-11B2-8000-E1047BEAD1D1\jnstDD73.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\zigipyro]ImagePath=[%LOCAL_APPDATA%]\1DFDF566-1456899877-0E76-FD01-305A3A7646E7\qnsg6B6C.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\wucotusy]ImagePath=[%PROGRAM_FILES%]\1DFDF566-1456915825-0E76-FD01-305A3A7646E7\hnsa52CA.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\rowugoqo]ImagePath=[%LOCAL_APPDATA%]\1DFDF566-1456897888-0E76-FD01-305A3A7646E7\snsf10AB.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\dojygici]ImagePath=[%PROGRAM_FILES%]\1DFDF566-1456915825-0E76-FD01-305A3A7646E7\jnsr3B97.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\wucotusy]ImagePath=[%PROGRAM_FILES%]\71A68EA0-1456938513-11D5-AA3A-14DAE9E0DF90\hnsjE0F1.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\wucotusy]ImagePath=[%PROGRAM_FILES%]\229DA680-1456937385-11DD-8D4A-382C4A64D5D9\hnss495A.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\dojygici]ImagePath=[%PROGRAM_FILES%]\229DA680-1456937385-11DD-8D4A-382C4A64D5D9\jnss33B6.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\zutuzuni]ImagePath=[%PROGRAM_FILES%]\68A68B00-1456821417-11E5-AC96-305A3A0C5695\jnsv24B1.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\zigipyro]ImagePath=[%LOCAL_APPDATA%]\68A68B00-1456830464-11E5-AC96-305A3A0C5695\qnsx3067.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\wucotusy]ImagePath=[%PROGRAM_FILES%]\68A68B00-1456821417-11E5-AC96-305A3A0C5695\hnsg3BCC.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\zutuzuni]ImagePath=[%PROGRAM_FILES%]\5EABBD2F-1456863192-A04C-8C4A-BF934B56436A\jnsd4FA5.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\wucotusy]ImagePath=[%PROGRAM_FILES%]\5EABBD2F-1456863192-A04C-8C4A-BF934B56436A\hnsd6A29.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\zutuzuni]ImagePath=[%PROGRAM_FILES%]\4C4C4544-1455676545-5110-8034-B3C04F4D5231\jnsp3F29.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\wucotusy]ImagePath=[%PROGRAM_FILES%]\4C4C4544-1455676545-5110-8034-B3C04F4D5231\hnsv5A69.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\zutuzuni]ImagePath=[%PROGRAM_FILES%]\4AE158D1-1456837318-DF11-9C99-705AB6773C51\jnsh9745.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\wucotusy]ImagePath=[%PROGRAM_FILES%]\4AE158D1-1456837318-DF11-9C99-705AB6773C51\hnshB091.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\rowugoqo]ImagePath=[%LOCAL_APPDATA%]\03000200-1456831215-0500-0006-000700080009\snskECD6.tmp
  • [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]interpee=[%PROGRAM_FILES%]\earthquake\productive.exe
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\zizusyju]ImagePath=[%PROGRAM_FILES%]\2CC7D3FB-1450890115-E111-91BE-B888E343204C\hnss1536.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\rizyqibe]ImagePath=[%PROGRAM_FILES%]\2CC7D3FB-1450890115-E111-91BE-B888E343204C\jnseF306.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\zutuzuni]ImagePath=[%PROGRAM_FILES%]\35444335-1456857760-5732-3134-D0BF9C9A9606\jnsy5396.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\wucotusy]ImagePath=[%PROGRAM_FILES%]\35444335-1456857760-5732-3134-D0BF9C9A9606\hnsh6991.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\zutuzuni]ImagePath=[%PROGRAM_FILES%]\FFFFFFFF-1455744938-FFFF-FFFF-FFFFFFFFFFFF\jnsy7508.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\wucotusy]ImagePath=[%PROGRAM_FILES%]\FFFFFFFF-1455744938-FFFF-FFFF-FFFFFFFFFFFF\hnsd93A1.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\heleqyky]ImagePath=[%PROGRAM_FILES%]\AFEB9F86-1446896983-379B-7D50-D850E6BC7074\knse509B.tmpfs
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\fipufuwu]ImagePath=[%PROGRAM_FILES%]\AFEB9F86-1446896983-379B-7D50-D850E6BC7074\hnsj8182.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\zutuzuni]ImagePath=[%PROGRAM_FILES%]\9B02DD80-1456185300-81E1-20E0-C860000E742B\jnscE9F2.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\wucotusy]ImagePath=[%PROGRAM_FILES%]\9B02DD80-1456185300-81E1-20E0-C860000E742B\hnsh1029.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\rowugoqo]ImagePath=[%LOCAL_APPDATA%]\9B02DD80-1456196168-81E1-20E0-C860000E742B\snshC69B.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\zigipyro]ImagePath=[%LOCAL_APPDATA%]\9B02DD80-1456863428-81E1-20E0-C860000E742B\qnsn5E09.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\zutuzuni]ImagePath=[%PROGRAM_FILES%]\00000000-1456409311-0000-0000-1C6F65AEB225\jnsvF2F7.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\zigipyro]ImagePath=[%LOCAL_APPDATA%]\00000000-1456750244-0000-0000-1C6F65AEB225\qnssA372.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\wucotusy]ImagePath=[%PROGRAM_FILES%]\00000000-1456409311-0000-0000-1C6F65AEB225\hnsb1365.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\wucotusy]ImagePath=[%PROGRAM_FILES%]\F4D5FCD2-1456439758-3012-8B14-E01877C70216\hnsa9E2.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\zutuzuni]ImagePath=[%PROGRAM_FILES%]\F4D5FCD2-1456439758-3012-8B14-E01877C70216\jnsfC2B3.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\rowugoqo]ImagePath=[%LOCAL_APPDATA%]\F4D5FCD2-1456459690-3012-8B14-E01877C70216\snsl8F27.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\zutuzuni]ImagePath=[%PROGRAM_FILES%]\5E4B7000-1455776599-11E4-BE3C-A0D3C1445B4E\jnsy3DEA.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\wucotusy]ImagePath=[%PROGRAM_FILES%]\5E4B7000-1455776599-11E4-BE3C-A0D3C1445B4E\hnsi5996.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\zutuzuni]ImagePath=[%PROGRAM_FILES%]\CAF59000-1456713260-0000-0000-000000000000\jnsn45F5.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\wucotusy]ImagePath=[%PROGRAM_FILES%]\CAF59000-1456713260-0000-0000-000000000000\hnsi5C16.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\cicifiso]ImagePath=[%APPDATA%]\4C4C4544-1427780857-5910-8048-B6C04F324253\nsu1F31.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\zutuzuni]ImagePath=[%PROGRAM_FILES%]\42455EBE-1456415908-E111-9D6E-B888E35E0A45\jnskAE24.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\wucotusy]ImagePath=[%PROGRAM_FILES%]\42455EBE-1456415908-E111-9D6E-B888E35E0A45\hnstC3D1.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\rowugoqo]ImagePath=[%LOCAL_APPDATA%]\42455EBE-1456423207-E111-9D6E-B888E35E0A45\snsrFC8F.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\zutuzuni]ImagePath=[%PROGRAM_FILES%]\ADD126F3-1456658690-E211-9E13-208984B65B30\jnsh8E89.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\wucotusy]ImagePath=[%PROGRAM_FILES%]\ADD126F3-1456658690-E211-9E13-208984B65B30\hnshA88B.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\rowugoqo]ImagePath=[%LOCAL_APPDATA%]\ADD126F3-1456684199-E211-9E13-208984B65B30\snshEBF9.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\zutuzuni]ImagePath=[%PROGRAM_FILES%]\03000200-1456733566-0500-0006-000700080009\jnsi40FC.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\zigipyro]ImagePath=[%LOCAL_APPDATA%]\03000200-1456768027-0500-0006-000700080009\qnseC066.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\wucotusy]ImagePath=[%PROGRAM_FILES%]\03000200-1456733566-0500-0006-000700080009\hnsz7731.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\zutuzuni]ImagePath=[%PROGRAM_FILES%]\32444335-1456674175-4C30-3756-A0B3CC7BEE95\jnsm788E.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\zigipyro]ImagePath=[%LOCAL_APPDATA%]\32444335-1456695395-4C30-3756-A0B3CC7BEE95\qnsk2A5A.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\wucotusy]ImagePath=[%PROGRAM_FILES%]\32444335-1456674175-4C30-3756-A0B3CC7BEE95\hnsx936B.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\zutuzuni]ImagePath=[%PROGRAM_FILES%]\D5380D30-1456592424-DC11-8FE5-001B38FF2062\jnsy67F6.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\wucotusy]ImagePath=[%PROGRAM_FILES%]\D5380D30-1456592424-DC11-8FE5-001B38FF2062\hnsj8799.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\zigipyro]ImagePath=[%LOCAL_APPDATA%]\FEE8C0C0-1456690639-11B2-8000-E0CAE78F896B\qnse7B36.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\zutuzuni]ImagePath=[%PROGRAM_FILES%]\672C80E0-1454496158-81E2-3AAB-54BEF7011957\jnsbC0D1.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\zigipyro]ImagePath=[%LOCAL_APPDATA%]\672C80E0-1456703935-81E2-3AAB-54BEF7011957\qnseD9E2.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\wucotusy]ImagePath=[%PROGRAM_FILES%]\672C80E0-1454496158-81E2-3AAB-54BEF7011957\hnslFD31.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\zutuzuni]ImagePath=[%PROGRAM_FILES%]\33444335-1455433894-5032-4253-A45D366DF369\jnsz3E3B.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\wucotusy]ImagePath=[%PROGRAM_FILES%]\33444335-1455433894-5032-4253-A45D366DF369\hnsj568D.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\zigipyro]ImagePath=[%LOCAL_APPDATA%]\60865DB5-1456476280-D411-8952-00014AF928D2\qnsh4F2.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\rowugoqo]ImagePath=[%LOCAL_APPDATA%]\60865DB5-1456403006-D411-8952-00014AF928D2\snsk2CA.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\zutuzuni]ImagePath=[%PROGRAM_FILES%]\4C4C4544-1456698296-4810-8056-B2C04F363032\jnsl6C4B.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\zigipyro]ImagePath=[%LOCAL_APPDATA%]\4C4C4544-1456713224-4810-8056-B2C04F363032\qnsqD598.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\wucotusy]ImagePath=[%PROGRAM_FILES%]\4C4C4544-1456698296-4810-8056-B2C04F363032\hnsg8662.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\rowugoqo]ImagePath=[%LOCAL_APPDATA%]\4C4C4544-1456709184-4810-8056-B2C04F363032\snsm9E26.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\zutuzuni]ImagePath=[%PROGRAM_FILES%]\4C4C4544-1456510483-5610-8059-B1C04F503132\jnsf8849.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\zigipyro]ImagePath=[%LOCAL_APPDATA%]\4C4C4544-1456696136-5610-8059-B1C04F503132\qnsyCC72.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\wucotusy]ImagePath=[%PROGRAM_FILES%]\4C4C4544-1456510483-5610-8059-B1C04F503132\hnsuA720.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\zutuzuni]ImagePath=[%PROGRAM_FILES%]\D528604C-1454137722-5453-ACAE-C274BF4D1098\jnspAED1.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\wucotusy]ImagePath=[%PROGRAM_FILES%]\D528604C-1454137722-5453-ACAE-C274BF4D1098\hnsqC9A4.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\wucotusy]ImagePath=[%PROGRAM_FILES%]\6DAEF681-1456078464-11CB-BFB6-B88034189145\hnsv7A4F.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\zutuzuni]ImagePath=[%PROGRAM_FILES%]\90697381-1456678532-E211-A91F-008CFA364F52\jnse1EB4.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\zigipyro]ImagePath=[%LOCAL_APPDATA%]\90697381-1456690081-E211-A91F-008CFA364F52\qnsv753F.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\wucotusy]ImagePath=[%PROGRAM_FILES%]\90697381-1456678532-E211-A91F-008CFA364F52\hnsk3A5C.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\zigipyro]ImagePath=[%LOCAL_APPDATA%]\E8B53404-1456618679-DF11-A6A5-000EA68F75A4\qnsn5AED.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\jedyhusi]ImagePath=[%APPDATA%]\C3CB2299-1429889291-6EDC-6D8D-D89D67CA7919\nsmEA5B.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\mojufili]ImagePath=[%APPDATA%]\C3CB2299-1429889291-6EDC-6D8D-D89D67CA7919\jnss420B.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\zigipyro]ImagePath=[%LOCAL_APPDATA%]\FFFFFFFF-1456692274-FFFF-FFFF-FFFFFFFFFFFF\qnsr2EF.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\zigipyro]ImagePath=[%LOCAL_APPDATA%]\00000000-1456255765-0000-0000-001A4D4851EC\qnsj1A43.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\wucotusy]ImagePath=[%PROGRAM_FILES%]\32444335-1456630712-4B31-3454-38EAA7DF1FB4\hnswCCE.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\zutuzuni]ImagePath=[%PROGRAM_FILES%]\32444335-1456630712-4B31-3454-38EAA7DF1FB4\jnsgEDA8.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\buzesylo]ImagePath=[%PROGRAM_FILES%]\2DADA000-1441140094-11D9-BA2E-5404A6F2B893\knsoB69.tmpfs
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\zutuzuni]ImagePath=[%PROGRAM_FILES%]\03000200-1456096782-0500-0006-000700080009\jnswFD42.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\wucotusy]ImagePath=[%PROGRAM_FILES%]\03000200-1456096782-0500-0006-000700080009\hnsr13FF.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\zutuzuni]ImagePath=[%PROGRAM_FILES%]\DCA4CF00-1455639543-11E2-BCAB-089E015A7B95\jnsh4FD5.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\wucotusy]ImagePath=[%PROGRAM_FILES%]\DCA4CF00-1455639543-11E2-BCAB-089E015A7B95\hnsm8FF2.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\zutuzuni]ImagePath=[%PROGRAM_FILES%]\BDF89681-1456658645-11CB-BDE0-C2E65F69C5F8\jnse773A.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\wucotusy]ImagePath=[%PROGRAM_FILES%]\BDF89681-1456658645-11CB-BDE0-C2E65F69C5F8\hnsp8EF1.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\rowugoqo]ImagePath=[%LOCAL_APPDATA%]\82C4D57C-1453135159-417D-8DBC-54BEF72460EA\snsoAD9C.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\rowugoqo]ImagePath=[%LOCAL_APPDATA%]\6BFD6D38-1456570602-11E0-8A49-6CDA05DC38B7\snstF3E7.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\zutuzuni]ImagePath=[%PROGRAM_FILES%]\33444335-1455362365-4635-4E4E-D4C9EF670EB3\jnse4406.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\zigipyro]ImagePath=[%LOCAL_APPDATA%]\33444335-1456682038-4635-4E4E-D4C9EF670EB3\qnsq33E4.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\wucotusy]ImagePath=[%PROGRAM_FILES%]\33444335-1455362365-4635-4E4E-D4C9EF670EB3\hnse9DEA.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\zutuzuni]ImagePath=[%PROGRAM_FILES%]\4C4C4544-1456620884-5710-805A-B1C04F475931\jnsv34CB.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\zigipyro]ImagePath=[%LOCAL_APPDATA%]\4C4C4544-1456629240-5710-805A-B1C04F475931\qnsnA413.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\wucotusy]ImagePath=[%PROGRAM_FILES%]\4C4C4544-1456620884-5710-805A-B1C04F475931\hnsg8EA0.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\dosimevu]ImagePath=[%PROGRAM_FILES%]\4C4C4544-1442067490-4C10-8044-B2C04F505731\knskD6E9.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\zigipyro]ImagePath=[%LOCAL_APPDATA%]\4C4C4544-1456640649-3210-8047-B1C04F46344A\qnsmD9.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\rowugoqo]ImagePath=[%LOCAL_APPDATA%]\4C4C4544-1456341566-3210-8047-B1C04F46344A\snst35A.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\lehicewu]ImagePath=[%PROGRAM_FILES%]\A1FCB480-1442673404-11E0-BC34-BCAEC549A5AA\jnsxCD5E.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\gyvixodu]ImagePath=[%PROGRAM_FILES%]\A1FCB480-1442673404-11E0-BC34-BCAEC549A5AA\hnsxE3EC.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\girequqo]ImagePath=[%PROGRAM_FILES%]\A1FCB480-1442673404-11E0-BC34-BCAEC549A5AA\knscB2F5.tmpfs
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\zutuzuni]ImagePath=[%PROGRAM_FILES%]\2561633A-1456576152-E211-83C6-B0EE4524BC19\jnswFC76.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\zigipyro]ImagePath=[%LOCAL_APPDATA%]\4C4C4544-1456593704-5910-8039-C8C04F485231\qnsa5BC8.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\zutuzuni]ImagePath=[%PROGRAM_FILES%]\03000200-1456600916-0500-0006-000700080009\jnsuB2AC.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\wucotusy]ImagePath=[%PROGRAM_FILES%]\03000200-1456600916-0500-0006-000700080009\hnsjCB1D.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\wucotusy]ImagePath=[%PROGRAM_FILES%]\3B2B83BE-1456595802-E511-8B16-9457A504B523\hnsn985.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\zutuzuni]ImagePath=[%PROGRAM_FILES%]\3B2B83BE-1456595802-E511-8B16-9457A504B523\jnsiE60C.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\zigipyro]ImagePath=[%LOCAL_APPDATA%]\3B2B83BE-1456617602-E511-8B16-9457A504B523\qnsnFE57.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\zutuzuni]ImagePath=[%PROGRAM_FILES%]\3F4E83AC-1456583561-2E47-9B51-CCC2BCD0C303\jnsv63C3.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\wucotusy]ImagePath=[%PROGRAM_FILES%]\3F4E83AC-1456583561-2E47-9B51-CCC2BCD0C303\hnsj7941.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\zutuzuni]ImagePath=[%PROGRAM_FILES%]\E74D41BE-1456579445-E311-A911-201A06D7B5F7\jnsh8053.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\wucotusy]ImagePath=[%PROGRAM_FILES%]\E74D41BE-1456579445-E311-A911-201A06D7B5F7\hnsr9823.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\zigipyro]ImagePath=[%LOCAL_APPDATA%]\00000000-1456585278-0000-0000-50E549F7FB1B\qnsw36F6.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\wucotusy]ImagePath=[%PROGRAM_FILES%]\00000000-1456577467-0000-0000-50E549F7FB1B\hnsw63DE.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\zutuzuni]ImagePath=[%PROGRAM_FILES%]\B003E33C-1454140771-11D5-9CD9-A424B111B0FA\jnsuB8A8.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\wucotusy]ImagePath=[%PROGRAM_FILES%]\B003E33C-1454140771-11D5-9CD9-A424B111B0FA\hnskD26C.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\xezebite]ImagePath=[%PROGRAM_FILES%]\72E85902-1444324569-E011-93EE-BF0104C11243\knsv30AD.tmpfs
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\syfinizy]ImagePath=[%PROGRAM_FILES%]\72E85902-1444324569-E011-93EE-BF0104C11243\jnsv50FF.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\gyvixodu]ImagePath=[%PROGRAM_FILES%]\72E85902-1444324569-E011-93EE-BF0104C11243\hnsq6C4E.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\zigipyro]ImagePath=[%LOCAL_APPDATA%]\B003E33C-1456015598-11D5-9CD9-A424B111B0FA\qnsv769D.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\zigipyro]ImagePath=[%LOCAL_APPDATA%]\5C24FBA0-1456433095-11D9-B7F5-C860007479C6\qnsr8133.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\zutuzuni]ImagePath=[%PROGRAM_FILES%]\34323030-1456487827-3031-3335-3539FFFFFFFF\jnsc9B32.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\wucotusy]ImagePath=[%PROGRAM_FILES%]\34323030-1456487827-3031-3335-3539FFFFFFFF\hnskBB20.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\zigipyro]ImagePath=[%LOCAL_APPDATA%]\03000200-1456483880-0500-0006-000700080009\qnsi1EE.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\zigipyro]ImagePath=[%LOCAL_APPDATA%]\28F1D620-1456449312-11B2-8000-BF4359FF0DF2\qnsi31E.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\zutuzuni]ImagePath=[%PROGRAM_FILES%]\00000000-1456487090-0000-0000-1C6F6580BEE5\jnsa14B0.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\zigipyro]ImagePath=[%LOCAL_APPDATA%]\00000000-1456507654-0000-0000-1C6F6580BEE5\qnseAA7A.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\wucotusy]ImagePath=[%PROGRAM_FILES%]\00000000-1456487090-0000-0000-1C6F6580BEE5\hnsp3ECD.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\zutuzuni]ImagePath=[%PROGRAM_FILES%]\03000200-1456482058-0500-0006-000700080009\jnsy18DA.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\wucotusy]ImagePath=[%PROGRAM_FILES%]\03000200-1456482058-0500-0006-000700080009\hnsd3175.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\zutuzuni]ImagePath=[%PROGRAM_FILES%]\03000200-1456317700-0500-0006-000700080009\jnsu5100.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\wucotusy]ImagePath=[%PROGRAM_FILES%]\03000200-1456317700-0500-0006-000700080009\hnsf69BB.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\zibirefo]ImagePath=[%PROGRAM_FILES%]\D284CA62-1441667722-11E0-876D-50C25F06002E\knsg91B0.tmp