Exterminate It! Antimalware

malpedia

Known threats:699,742 Last Update:October 27, 11:19

Testimonials

Just want to say that apparently your Exterminate It has worked like a charm. I was infected with a most troublesome Malware Trojan that kept replicating every time McAfee found, blocked and removed it... most annoying for several days... until Mr. Google led me to your door. What a God send!

With thanks,

Tom S.

MultiPlug- Registry Values List

This is a complete list of MultiPlug registry values collected by Exterminate It!. If you find any of these registry values on your PC, your computer is very likely to be infected with the MultiPlug - adware.

IMPORTANT: Because the registry is a core component of your Windows system, it is strongly recommended that you back up the registry before you begin deleting keys and values. For information about backing up the Windows registry, refer to the Registry Editor online help.
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\zutuzuni]ImagePath=[%PROGRAM_FILES%]\00000000-1456374600-0000-0000-00241DB914ED\jnsdD968.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\zutuzuni]ImagePath=[%PROGRAM_FILES%]\8C20E463-1456339974-DD11-9714-001EEC8A7068\jnsj4A17.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\zigipyro]ImagePath=[%LOCAL_APPDATA%]\8C20E463-1456457603-DD11-9714-001EEC8A7068\qnsy7D70.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\wucotusy]ImagePath=[%PROGRAM_FILES%]\8C20E463-1456339974-DD11-9714-001EEC8A7068\hnsu38EA.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\zigipyro]ImagePath=[%LOCAL_APPDATA%]\0DF78800-1456409703-815C-22C2-6002924266C7\qnsa46C.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\zutuzuni]ImagePath=[%PROGRAM_FILES%]\0DF78800-1456405521-815C-22C2-6002924266C7\jnst38B5.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\wucotusy]ImagePath=[%PROGRAM_FILES%]\0DF78800-1456405521-815C-22C2-6002924266C7\hnsx5017.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\rowugoqo]ImagePath=[%LOCAL_APPDATA%]\0DF78800-1456409177-815C-22C2-6002924266C7\snscF272.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\zutuzuni]ImagePath=[%PROGRAM_FILES%]\4C4C4544-1456407986-3110-8048-B2C04F333032\jnsdD32D.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\wucotusy]ImagePath=[%PROGRAM_FILES%]\4C4C4544-1456407986-3110-8048-B2C04F333032\hnsxEAED.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\rowugoqo]ImagePath=[%LOCAL_APPDATA%]\4C4C4544-1456415247-3110-8048-B2C04F333032\snsjA0CF.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\zutuzuni]ImagePath=[%PROGRAM_FILES%]\63507C4C-1456375195-1A41-8A3E-089E0194696F\jnsiB92A.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\wucotusy]ImagePath=[%PROGRAM_FILES%]\63507C4C-1456375195-1A41-8A3E-089E0194696F\hnsmCFF0.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\zutuzuni]ImagePath=[%PROGRAM_FILES%]\00000000-1456424239-0000-0000-001A4D6342CC\jnsfC33D.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\wucotusy]ImagePath=[%PROGRAM_FILES%]\00000000-1456424239-0000-0000-001A4D6342CC\hnsfE81D.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\zutuzuni]ImagePath=[%PROGRAM_FILES%]\3534DDE0-1456360164-11DD-9471-382C4ABA70FA\jnsqE650.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\wucotusy]ImagePath=[%PROGRAM_FILES%]\3534DDE0-1456360164-11DD-9471-382C4ABA70FA\hnsfFD55.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\zutuzuni]ImagePath=[%PROGRAM_FILES%]\00000000-1455277255-0000-0000-000000000000\jnsd12FD.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\wucotusy]ImagePath=[%PROGRAM_FILES%]\00000000-1455277255-0000-0000-000000000000\hnsc2B2A.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\zigipyro]ImagePath=[%LOCAL_APPDATA%]\4C4C4544-1456399155-3110-8037-C7C04F543032\qnsjE5F5.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\zigipyro]ImagePath=[%LOCAL_APPDATA%]\32444335-1454257144-4D32-3148-80C16E56821B\qnsdE27B.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\wucotusy]ImagePath=[%PROGRAM_FILES%]\00000000-1455417622-0000-0000-6CF049E2793E\hnsyCB2.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\zutuzuni]ImagePath=[%PROGRAM_FILES%]\00000000-1455417622-0000-0000-6CF049E2793E\jnsjEDDB.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\zigipyro]ImagePath=[%LOCAL_APPDATA%]\FFFFFFFF-1456353649-FFFF-FFFF-FFFFFFFFFFFF\qnsf3D.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\munoficy]ImagePath=[%PROGRAM_FILES%]\31464E43-1448433982-4D31-3358-101F74CA2E9D\knsq9EEC.tmpfs
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\mucifyfy]ImagePath=[%PROGRAM_FILES%]\31464E43-1448433982-4D31-3358-101F74CA2E9D\jnsqC028.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\hidekoqe]ImagePath=[%LOCAL_APPDATA%]\31464E43-1448460256-4D31-3358-101F74CA2E9D\qnsc4F10.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\cuzihece]ImagePath=[%PROGRAM_FILES%]\31464E43-1448433982-4D31-3358-101F74CA2E9D\hnsqDA10.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\zutuzuni]ImagePath=[%PROGRAM_FILES%]\608D3DA2-1455616738-E011-81AB-00266CE36A4D\jnsmC17A.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\wucotusy]ImagePath=[%PROGRAM_FILES%]\608D3DA2-1455616738-E011-81AB-00266CE36A4D\hnssD8C4.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\rowugoqo]ImagePath=[%LOCAL_APPDATA%]\608D3DA2-1455636648-E011-81AB-00266CE36A4D\snss1102.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\vekeziti]ImagePath=[%PROGRAM_FILES%]\03DE0294-1448502900-05C4-B606-360700080009\knsp3AB9.tmpfs
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\nuvosuqo]ImagePath=[%PROGRAM_FILES%]\03DE0294-1448502900-05C4-B606-360700080009\hnsz757F.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\fyjehivu]ImagePath=[%PROGRAM_FILES%]\03DE0294-1448502900-05C4-B606-360700080009\jnsp59D3.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\bykesute]ImagePath=[%PROGRAM_FILES%]\03DE0294-1447747218-05C4-B606-360700080009\hnsm520A.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\zutuzuni]ImagePath=[%PROGRAM_FILES%]\03000200-1456157112-0500-0006-000700080009\jnsp7DEB.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\zutuzuni]ImagePath=[%PROGRAM_FILES%]\00000011-1456224636-0000-0000-60A44CD7F0BE\jnsu2F92.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\wucotusy]ImagePath=[%PROGRAM_FILES%]\00000011-1456224636-0000-0000-60A44CD7F0BE\hnse624C.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\rowugoqo]ImagePath=[%LOCAL_APPDATA%]\00000011-1456196389-0000-0000-60A44CD7F0BE\snsaBDDC.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\zutuzuni]ImagePath=[%PROGRAM_FILES%]\32CB3EE4-1456218159-DC11-908C-001EEC0ECF58\jnsy387E.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\wucotusy]ImagePath=[%PROGRAM_FILES%]\32CB3EE4-1456218159-DC11-908C-001EEC0ECF58\hnst515D.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\rowugoqo]ImagePath=[%LOCAL_APPDATA%]\32CB3EE4-1456238101-DC11-908C-001EEC0ECF58\snszFB13.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\zutuzuni]ImagePath=[%PROGRAM_FILES%]\34444335-1456148283-4232-3747-A02BB85990AD\jnsq5B2C.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\wucotusy]ImagePath=[%PROGRAM_FILES%]\34444335-1456148283-4232-3747-A02BB85990AD\hnso7CB0.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\rowugoqo]ImagePath=[%LOCAL_APPDATA%]\34444335-1456159208-4232-3747-A02BB85990AD\snsqD848.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\wucotusy]ImagePath=[%PROGRAM_FILES%]\03000200-1456172490-0500-0006-000700080009\hnssD00.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\zutuzuni]ImagePath=[%PROGRAM_FILES%]\DA88EAFC-1454438667-11DE-A090-00427F19904C\jnsu4D14.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\wucotusy]ImagePath=[%PROGRAM_FILES%]\DA88EAFC-1454438667-11DE-A090-00427F19904C\hnso81FA.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\wucotusy]ImagePath=[%PROGRAM_FILES%]\4C4C4544-1455979063-4810-804C-B9C04F324E31\hnsp5AAF.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\wucotusy]ImagePath=[%PROGRAM_FILES%]\B6F906B6-1456148629-578D-AA69-C4A7FCC1A0C9\hnsfCB2B.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\zutuzuni]ImagePath=[%PROGRAM_FILES%]\0030DF97-1455892437-DE11-A545-B219F8A1FCBA\jnsuC468.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\wucotusy]ImagePath=[%PROGRAM_FILES%]\0030DF97-1455892437-DE11-A545-B219F8A1FCBA\hnskF05A.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\zutuzuni]ImagePath=[%PROGRAM_FILES%]\00000000-1456138727-0000-0000-D8CB8A5071C3\jnseC5EC.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\wucotusy]ImagePath=[%PROGRAM_FILES%]\00000000-1456138727-0000-0000-D8CB8A5071C3\hnsmE53E.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\zigipyro]ImagePath=[%LOCAL_APPDATA%]\2E877100-1456096678-81E0-2B4B-14DAE935FF8F\qnsw3074.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\rowugoqo]ImagePath=[%LOCAL_APPDATA%]\2E877100-1456090245-81E0-2B4B-14DAE935FF8F\snsm21CA.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\mubosiri]ImagePath=[%APPDATA%]\4402A9D6-1432701161-E011-AF93-B870F46528F1\jnsl2342.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\dixowumu]ImagePath=[%APPDATA%]\4402A9D6-1432701161-E011-AF93-B870F46528F1\hnsg3AE9.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\cobojino]ImagePath=[%LOCAL_APPDATA%]\4402A9D6-1432735566-E011-AF93-B870F46528F1\snsmFF12.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\qewyxefo]ImagePath=[%PROGRAM_FILES%]\4C4C4544-1442734532-5810-8050-C7C04F503153\knsd9AA4.tmpfs
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\lehicewu]ImagePath=[%PROGRAM_FILES%]\4C4C4544-1442734532-5810-8050-C7C04F503153\jnsiF595.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\gyvixodu]ImagePath=[%PROGRAM_FILES%]\4C4C4544-1442734532-5810-8050-C7C04F503153\hnsi2261.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\zutuzuni]ImagePath=[%PROGRAM_FILES%]\17A1654B-1455849237-E311-83BA-201A06DED42A\jnsa1F50.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\zigipyro]ImagePath=[%LOCAL_APPDATA%]\17A1654B-1455983295-E311-83BA-201A06DED42A\qnst6EF9.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\wucotusy]ImagePath=[%PROGRAM_FILES%]\17A1654B-1455849237-E311-83BA-201A06DED42A\hnsdBCE5.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\zigipyro]ImagePath=[%LOCAL_APPDATA%]\17A1654B-1456135475-E311-83BA-201A06DED42A\qnsv3577.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\zutuzuni]ImagePath=[%PROGRAM_FILES%]\03AA02FC-1456063409-0518-AC06-110700080009\jnsoEFD.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\ziminylu]ImagePath=[%PROGRAM_FILES%]\03AA02FC-1456063409-0518-AC06-110700080009\knsiF05F.tmpfs
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\wucotusy]ImagePath=[%PROGRAM_FILES%]\03AA02FC-1456063409-0518-AC06-110700080009\hnso48D3.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\rowugoqo]ImagePath=[%LOCAL_APPDATA%]\03AA02FC-1456083273-0518-AC06-110700080009\snstD605.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\gopibeko]ImagePath=[%LOCAL_APPDATA%]\00000000-1438561619-0000-0000-00241D7487F7\snsx11B.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\zigipyro]ImagePath=[%LOCAL_APPDATA%]\00000000-1455415188-0000-0000-00241D7487F7\qnshF587.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\hyverumu]ImagePath=[%PROGRAM_FILES%]\00000000-1438536375-0000-0000-00241D7487F7\jnss8381.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\fojohuvi]ImagePath=[%PROGRAM_FILES%]\00000000-1438536375-0000-0000-00241D7487F7\knsm67A1.tmpfs
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\comyninu]ImagePath=[%PROGRAM_FILES%]\00000000-1438536375-0000-0000-00241D7487F7\hnsc9AE9.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\wucotusy]ImagePath=[%PROGRAM_FILES%]\4A9A351B-1456106972-3A43-A2E1-14D5DCB6117D\hnsu22BE.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\zutuzuni]ImagePath=[%PROGRAM_FILES%]\AD013AC0-1456103948-A194-8CC2-A966E0F82A66\jnslF551.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\wucotusy]ImagePath=[%PROGRAM_FILES%]\AD013AC0-1456103948-A194-8CC2-A966E0F82A66\hnsx1167.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\zutuzuni]ImagePath=[%PROGRAM_FILES%]\074EE5C0-1456133487-11E2-86D8-78843C376071\jnsw759C.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\wucotusy]ImagePath=[%PROGRAM_FILES%]\074EE5C0-1456133487-11E2-86D8-78843C376071\hnsr8E7B.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\rowugoqo]ImagePath=[%LOCAL_APPDATA%]\074EE5C0-1456140772-11E2-86D8-78843C376071\snss9A3E.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\zigipyro]ImagePath=[%LOCAL_APPDATA%]\32444335-1455800167-3732-5834-A0B3CC6EDED2\qnsa9D82.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\wucotusy]ImagePath=[%PROGRAM_FILES%]\03AA02FC-1456137224-05C9-4A06-470700080009\hnsk1A8C.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\rowugoqo]ImagePath=[%LOCAL_APPDATA%]\03AA02FC-1456162520-05C9-4A06-470700080009\snsq1D98.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\wucotusy]ImagePath=[%PROGRAM_FILES%]\AC9AE1B5-1456125181-B248-A526-CA537C5E482D\hnszB8F.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\zutuzuni]ImagePath=[%PROGRAM_FILES%]\AC9AE1B5-1456125181-B248-A526-CA537C5E482D\jnszED63.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\zigipyro]ImagePath=[%LOCAL_APPDATA%]\00000000-1456144690-0000-0000-6CF0497E02BF\qnsn3FA1.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\wyteqite]ImagePath=[%PROGRAM_FILES%]\00000000-1451512480-0000-0000-6CF0497E02BF\knswE6D4.tmpfs
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\zutuzuni]ImagePath=[%PROGRAM_FILES%]\FFFFFFFF-1453232583-FFFF-FFFF-FFFFFFFFFFFF\jnsvAE.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\wucotusy]ImagePath=[%PROGRAM_FILES%]\FFFFFFFF-1453232583-FFFF-FFFF-FFFFFFFFFFFF\hnsfB2.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\rowugoqo]ImagePath=[%LOCAL_APPDATA%]\FFFFFFFF-1453225485-FFFF-FFFF-FFFFFFFFFFFF\snsrF6.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\zutuzuni]ImagePath=[%PROGRAM_FILES%]\9B0842BB-1456165687-11E4-A818-28D244C2D3C9\jnszDEA5.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\zigipyro]ImagePath=[%LOCAL_APPDATA%]\9B0842BB-1456190584-11E4-A818-28D244C2D3C9\qnsbB6AD.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\wucotusy]ImagePath=[%PROGRAM_FILES%]\9B0842BB-1456165687-11E4-A818-28D244C2D3C9\hnsf5EF3.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\rowugoqo]ImagePath=[%LOCAL_APPDATA%]\9B0842BB-1456185764-11E4-A818-28D244C2D3C9\snsy2390.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\zigipyro]ImagePath=[%LOCAL_APPDATA%]\FDBB80C0-1456078206-11D5-BF85-5404A67FB9AF\qnsaAA82.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\zikosito]ImagePath=[%LOCAL_APPDATA%]\C75EE21B-1430656236-11E3-8AD2-6C6DE2018093\snsnABBB.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\wivijuji]ImagePath=[%APPDATA%]\C75EE21B-1430648763-11E3-8AD2-6C6DE2018093\jnslF046.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\zutuzuni]ImagePath=[%PROGRAM_FILES%]\A0DE575C-1456076994-A54C-83D9-60EB69470852\jnst1447.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\zigipyro]ImagePath=[%LOCAL_APPDATA%]\A0DE575C-1456100924-A54C-83D9-60EB69470852\qnsf8E19.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\wucotusy]ImagePath=[%PROGRAM_FILES%]\A0DE575C-1456076994-A54C-83D9-60EB69470852\hnsvB099.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\rowugoqo]ImagePath=[%LOCAL_APPDATA%]\03000200-1456021331-0500-0006-000700080009\snsd8C9.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\zutuzuni]ImagePath=[%PROGRAM_FILES%]\03000200-1456050059-0500-0006-000700080009\jnsn2221.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\wucotusy]ImagePath=[%PROGRAM_FILES%]\03000200-1456050059-0500-0006-000700080009\hnsn3F15.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\zutuzuni]ImagePath=[%PROGRAM_FILES%]\4C4C4544-1456060028-4D10-8030-C7C04F544D31\jnsg4E6D.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\ziminylu]ImagePath=[%PROGRAM_FILES%]\4C4C4544-1456060028-4D10-8030-C7C04F544D31\knsf2064.tmpfs
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\wucotusy]ImagePath=[%PROGRAM_FILES%]\4C4C4544-1456060028-4D10-8030-C7C04F544D31\hnsv73AA.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\rowugoqo]ImagePath=[%LOCAL_APPDATA%]\4C4C4544-1456080128-4D10-8030-C7C04F544D31\snsc5F60.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\nijuzuzi]ImagePath=[%PROGRAM_FILES%]\00000011-1450991537-0000-0000-BCEE7BB703B5\knsu78FC.tmpfs
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\bedejofi]ImagePath=[%PROGRAM_FILES%]\03000200-1448104683-0500-0006-000700080009\knsx5E41.tmpfs
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\zutuzuni]ImagePath=[%PROGRAM_FILES%]\EFB9D19B-1456048812-11E5-BA4C-507B9D38743A\jnsn6393.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\wucotusy]ImagePath=[%PROGRAM_FILES%]\EFB9D19B-1456048812-11E5-BA4C-507B9D38743A\hnsn80D5.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\rowugoqo]ImagePath=[%LOCAL_APPDATA%]\4B673D60-1456087765-11DD-A92B-7824AF37EFF3\snsd370.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\zutuzuni]ImagePath=[%PROGRAM_FILES%]\4B673D60-1456076902-11DD-A92B-7824AF37EFF3\jnsr4FED.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\wucotusy]ImagePath=[%PROGRAM_FILES%]\4B673D60-1456076902-11DD-A92B-7824AF37EFF3\hnsb6721.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\zutuzuni]ImagePath=[%PROGRAM_FILES%]\E08130F0-1453073952-6B89-0E80-BCAEC552EBF7\jnskF5F6.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\zigipyro]ImagePath=[%LOCAL_APPDATA%]\E08130F0-1455986915-6B89-0E80-BCAEC552EBF7\qnso8066.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\wucotusy]ImagePath=[%PROGRAM_FILES%]\E08130F0-1453073952-6B89-0E80-BCAEC552EBF7\hnsx169F.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\zutuzuni]ImagePath=[%PROGRAM_FILES%]\FDBB80C0-1455913635-11D5-BF85-5404A67FB9AF\jnsz8711.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\wucotusy]ImagePath=[%PROGRAM_FILES%]\FDBB80C0-1455913635-11D5-BF85-5404A67FB9AF\hnst9DE7.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\zutuzuni]ImagePath=[%PROGRAM_FILES%]\18B33E71-1456059995-E411-A26A-F0761C68E53A\jnsrABF.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\wucotusy]ImagePath=[%PROGRAM_FILES%]\18B33E71-1456059995-E411-A26A-F0761C68E53A\hnsv619B.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\zutuzuni]ImagePath=[%PROGRAM_FILES%]\4B5ABC40-1455967572-11B2-8000-D403D05DBA3F\jnsy9DB6.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\wucotusy]ImagePath=[%PROGRAM_FILES%]\4B5ABC40-1455967572-11B2-8000-D403D05DBA3F\hnsyB492.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\wucotusy]ImagePath=[%PROGRAM_FILES%]\03000200-1455988169-0500-0006-000700080009\hnsz56F.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\zutuzuni]ImagePath=[%PROGRAM_FILES%]\03000200-1455988169-0500-0006-000700080009\jnsdD005.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\zutuzuni]ImagePath=[%PROGRAM_FILES%]\D30F7050-1455977280-81F5-3EB4-54A050C6193D\jnsaFB5A.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\wucotusy]ImagePath=[%PROGRAM_FILES%]\D30F7050-1455977280-81F5-3EB4-54A050C6193D\hnsp13E5.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\zigipyro]ImagePath=[%LOCAL_APPDATA%]\B003E33C-1455926959-11D5-9CD9-A424B111B0FA\qnsl981D.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\zutuzuni]ImagePath=[%PROGRAM_FILES%]\8EB84A5F-1455976950-DD11-A24E-001EEC3DFCB1\jnsd63D1.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\wucotusy]ImagePath=[%PROGRAM_FILES%]\8EB84A5F-1455976950-DD11-A24E-001EEC3DFCB1\hnsiB32A.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\zutuzuni]ImagePath=[%PROGRAM_FILES%]\DC972EEA-1455392957-6243-A219-00E0B8015C60\jnsv66E9.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\wucotusy]ImagePath=[%PROGRAM_FILES%]\DC972EEA-1455392957-6243-A219-00E0B8015C60\hnsq7FE2.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\zigipyro]ImagePath=[%LOCAL_APPDATA%]\038D0240-1455991382-054A-1006-E30700080009\qnsv6DF.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\zutuzuni]ImagePath=[%PROGRAM_FILES%]\03020100-1455368308-0706-0809-0A0B0C0D0E0F\jnsdEDA9.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\wucotusy]ImagePath=[%PROGRAM_FILES%]\03020100-1455368308-0706-0809-0A0B0C0D0E0F\hnsr1027.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\zutuzuni]ImagePath=[%PROGRAM_FILES%]\163C6660-1455536966-11DD-A75B-382C4AE8CDAA\jnsy77AE.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\wucotusy]ImagePath=[%PROGRAM_FILES%]\163C6660-1455536966-11DD-A75B-382C4AE8CDAA\hnsi98D6.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\rowugoqo]ImagePath=[%LOCAL_APPDATA%]\163C6660-1455565866-11DD-A75B-382C4AE8CDAA\snsoB4DE.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\zigipyro]ImagePath=[%LOCAL_APPDATA%]\2B63BE80-1455993785-11DD-AECD-3085A99BD338\qnsp86D5.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\rowugoqo]ImagePath=[%LOCAL_APPDATA%]\2B63BE80-1455984405-11DD-AECD-3085A99BD338\snsr6741.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\wucotusy]ImagePath=[%PROGRAM_FILES%]\B03C1489-1455922065-DF11-887E-88AE1DF04F1A\hnso3F8.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\zutuzuni]ImagePath=[%PROGRAM_FILES%]\B03C1489-1455922065-DF11-887E-88AE1DF04F1A\jnsjEA8D.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\zigipyro]ImagePath=[%LOCAL_APPDATA%]\B03C1489-1455938512-DF11-887E-88AE1DF04F1A\qnsv66F1.tmp
  • [HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]dutoauto=[%PROGRAM_FILES%]\need\eminent.exe
  • [HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]interpee=[%PROGRAM_FILES%]\need\ants.exe
  • [HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]rutoauto=[%PROGRAM_FILES%]\need\ants.exe
  • [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]interpee=[%PROGRAM_FILES%]\need\ants.exe
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\zutuzuni]ImagePath=[%PROGRAM_FILES%]\DC9B8112-1455828190-DF11-B191-88AE1D4C2E08\jnsaC8DA.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\wucotusy]ImagePath=[%PROGRAM_FILES%]\DC9B8112-1455828190-DF11-B191-88AE1D4C2E08\hnsqE236.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\wucotusy]ImagePath=[%PROGRAM_FILES%]\14901E00-1455987984-0720-1114-000106000000\hnsy7B0.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\zutuzuni]ImagePath=[%PROGRAM_FILES%]\C9A53140-1455452461-11D7-9378-00C09F17D5FC\jnso344.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\ziminylu]ImagePath=[%PROGRAM_FILES%]\C9A53140-1455452461-11D7-9378-00C09F17D5FC\knso33A.tmpfs
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\zigipyro]ImagePath=[%LOCAL_APPDATA%]\C9A53140-1455474161-11D7-9378-00C09F17D5FC\qnsu46B.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\wucotusy]ImagePath=[%PROGRAM_FILES%]\C9A53140-1455452461-11D7-9378-00C09F17D5FC\hnsb347.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\ryrojiry]ImagePath=[%PROGRAM_FILES%]\00000000-1448828818-0000-0000-D43D7E6BE48C\hnsy1509.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\zutuzuni]ImagePath=[%PROGRAM_FILES%]\4C4C4544-1455426556-5610-8030-B9C04F575331\jnsz421F.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\wucotusy]ImagePath=[%PROGRAM_FILES%]\4C4C4544-1455426556-5610-8030-B9C04F575331\hnsy59FE.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\huwiboro]ImagePath=[%PROGRAM_FILES%]\FF25877B-1448549722-11E1-BBD8-38AA799A2C41\knsaE7AB.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\wucotusy]ImagePath=[%PROGRAM_FILES%]\80EA4011-1455977947-E211-8031-B05964091209\hnse48.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\zutuzuni]ImagePath=[%PROGRAM_FILES%]\80EA4011-1455977947-E211-8031-B05964091209\jnsxE27D.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\zutuzuni]ImagePath=[%PROGRAM_FILES%]\4C4C4544-1455543088-4210-8054-B1C04F585831\jnsc6190.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\wucotusy]ImagePath=[%PROGRAM_FILES%]\4C4C4544-1455543088-4210-8054-B1C04F585831\hnsx7B0B.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\zutuzuni]ImagePath=[%PROGRAM_FILES%]\34444335-1455342414-4731-464A-4A4732354435\jnsi7A78.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\wucotusy]ImagePath=[%PROGRAM_FILES%]\34444335-1455342414-4731-464A-4A4732354435\hnsc9322.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\zutuzuni]ImagePath=[%PROGRAM_FILES%]\15B72C80-1454185666-815C-3858-54BEF71C8815\jnsoFFB6.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\zigipyro]ImagePath=[%LOCAL_APPDATA%]\15B72C80-1454717937-815C-3858-54BEF71C8815\qnsg6844.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\wucotusy]ImagePath=[%PROGRAM_FILES%]\15B72C80-1454185666-815C-3858-54BEF71C8815\hnsx169B.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\zigipyro]ImagePath=[%LOCAL_APPDATA%]\8C6B9100-1455898498-11DC-B42F-7824AF450873\qnsg6E92.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\wucotusy]ImagePath=[%PROGRAM_FILES%]\8C6B9100-1455872845-11DC-B42F-7824AF450873\hnse7B02.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\wucotusy]ImagePath=[%PROGRAM_FILES%]\127D8722-1455810234-DD11-85C2-004095005280\hnsz3A7.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\zutuzuni]ImagePath=[%PROGRAM_FILES%]\127D8722-1455810234-DD11-85C2-004095005280\jnsoD64E.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\zutuzuni]ImagePath=[%PROGRAM_FILES%]\00000011-1455885770-0000-0000-AC220B6E16BE\jnsuE790.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\wucotusy]ImagePath=[%PROGRAM_FILES%]\00000011-1455885770-0000-0000-AC220B6E16BE\hnsl10C5.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\zutuzuni]ImagePath=[%PROGRAM_FILES%]\0E735FF6-1455851037-4DA1-8D12-0780E6138EE1\jnsz3169.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\wucotusy]ImagePath=[%PROGRAM_FILES%]\0E735FF6-1455851037-4DA1-8D12-0780E6138EE1\hnsh51F3.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\zutuzuni]ImagePath=[%PROGRAM_FILES%]\4DA6DFCE-1453220838-B1B4-CA1E-300ED50E7D8F\jnsh283D.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\zutuzuni]ImagePath=[%PROGRAM_FILES%]\8F21A663-1455790760-0445-AD19-3F7252D375C9\jnskD592.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\wucotusy]ImagePath=[%PROGRAM_FILES%]\8F21A663-1455790760-0445-AD19-3F7252D375C9\hnszED81.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\zutuzuni]ImagePath=[%PROGRAM_FILES%]\032B0290-1453857952-05F0-F206-170700080009\jnsd2F9F.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\zigipyro]ImagePath=[%LOCAL_APPDATA%]\032B0290-1455843429-05F0-F206-170700080009\qnsm7E9A.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\wucotusy]ImagePath=[%PROGRAM_FILES%]\032B0290-1453857952-05F0-F206-170700080009\hnsd4B27.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\zutuzuni]ImagePath=[%PROGRAM_FILES%]\5C4606FA-1453350093-453A-B299-7B088C63BB9B\jnssFC98.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\wucotusy]ImagePath=[%PROGRAM_FILES%]\5C4606FA-1453350093-453A-B299-7B088C63BB9B\hnss2178.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\wuwypuve]ImagePath=[%PROGRAM_FILES%]\7B8236B9-1455138989-30AA-1487-382C4AE8890A\znsf3586.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\lufukumi]ImagePath=[%PROGRAM_FILES%]\7BAE6180-1448659892-81E1-2F0F-3085A9085377\knsr7C4.tmpfs
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\zutuzuni]ImagePath=[%PROGRAM_FILES%]\AAAAAAAA-1455768969-AAAA-AAAA-D8CB8A18A9B8\jnsk98CE.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\wucotusy]ImagePath=[%PROGRAM_FILES%]\AAAAAAAA-1455768969-AAAA-AAAA-D8CB8A18A9B8\hnsvE403.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\woforemu]ImagePath=[%LOCAL_APPDATA%]\03D40274-1450708046-0575-6D06-1A0700080009\snsz15C3.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\zutuzuni]ImagePath=[%PROGRAM_FILES%]\35453035-1455637979-3946-3644-3632FFFFFFFF\jnscF80.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\zigipyro]ImagePath=[%LOCAL_APPDATA%]\35453035-1455787042-3946-3644-3632FFFFFFFF\qnsr191D.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\wucotusy]ImagePath=[%PROGRAM_FILES%]\35453035-1455637979-3946-3644-3632FFFFFFFF\hnss2756.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\zutuzuni]ImagePath=[%PROGRAM_FILES%]\00000000-1455613403-0000-0000-4061861DC1E1\jnsjA93B.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\wucotusy]ImagePath=[%PROGRAM_FILES%]\00000000-1455613403-0000-0000-4061861DC1E1\hnsyBF8A.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\zutuzuni]ImagePath=[%PROGRAM_FILES%]\737C8720-1455770839-11D5-BC35-F46D04D868DC\jnsh23E5.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\wucotusy]ImagePath=[%PROGRAM_FILES%]\737C8720-1455770839-11D5-BC35-F46D04D868DC\hnsr4951.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\rowugoqo]ImagePath=[%LOCAL_APPDATA%]\AFA2D8FA-1455133216-11E2-959F-40D7CC411900\snsp64E7.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\keneqiwe]ImagePath=[%PROGRAM_FILES%]\48072300-1450647768-1EEE-A3BB-ED1EA0F4B086\knso1074.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\zigipyro]ImagePath=[%LOCAL_APPDATA%]\B003E33C-1455666892-11D5-9CD9-A424B111B0FA\qnsr6961.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\zutuzuni]ImagePath=[%PROGRAM_FILES%]\4C4C4544-1453341657-4A10-804D-B6C04F595131\jnsf4A39.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\zigipyro]ImagePath=[%LOCAL_APPDATA%]\4C4C4544-1455570377-4A10-804D-B6C04F595131\qnsg9410.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\wucotusy]ImagePath=[%PROGRAM_FILES%]\4C4C4544-1453341657-4A10-804D-B6C04F595131\hnsq6390.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\zutuzuni]ImagePath=[%PROGRAM_FILES%]\35444335-1455692771-4B34-3533-3CA82AA7828E\jnsj8F01.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\wucotusy]ImagePath=[%PROGRAM_FILES%]\35444335-1455692771-4B34-3533-3CA82AA7828E\hnsjA6E1.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\zutuzuni]ImagePath=[%PROGRAM_FILES%]\3BB63500-1455625826-11D5-AE7D-0862669985E3\jnsf5F4B.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\zigipyro]ImagePath=[%LOCAL_APPDATA%]\3BB63500-1455686893-11D5-AE7D-0862669985E3\qnsl69F3.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\wucotusy]ImagePath=[%PROGRAM_FILES%]\3BB63500-1455625826-11D5-AE7D-0862669985E3\hnst7FA7.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\zutuzuni]ImagePath=[%PROGRAM_FILES%]\4C4C4544-1455316819-4410-8043-B4C04F565931\jnsv9A9F.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\wucotusy]ImagePath=[%PROGRAM_FILES%]\4C4C4544-1455316819-4410-8043-B4C04F565931\hnsoBCA0.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\lopixyji]ImagePath=[%PROGRAM_FILES%]\4C4C4544-1449381888-5710-8046-C4C04F425831\knsx8ED.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\zigipyro]ImagePath=[%LOCAL_APPDATA%]\4C4C4544-1454849831-5710-8046-C4C04F425831\qnsp5431.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\roqenufe]ImagePath=[%PROGRAM_FILES%]\4C4C4544-1449381888-5710-8046-C4C04F425831\jnss16ED.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\nyneryxo]ImagePath=[%PROGRAM_FILES%]\4C4C4544-1449381888-5710-8046-C4C04F425831\hnsa83F1.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\zutuzuni]ImagePath=[%PROGRAM_FILES%]\E2236D5B-1455553835-20A0-7ABD-305A3A7C7E82\jnswC341.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\ziminylu]ImagePath=[%PROGRAM_FILES%]\E2236D5B-1455553835-20A0-7ABD-305A3A7C7E82\knswA253.tmpfs
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\zigipyro]ImagePath=[%LOCAL_APPDATA%]\E2236D5B-1455574751-20A0-7ABD-305A3A7C7E82\qnsy940A.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\wucotusy]ImagePath=[%PROGRAM_FILES%]\E2236D5B-1455553835-20A0-7ABD-305A3A7C7E82\hnsbEEA6.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\zutuzuni]ImagePath=[%PROGRAM_FILES%]\E83DFC7B-1455704353-E211-87F5-08606E8CAE8E\jnst94E3.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\zigipyro]ImagePath=[%LOCAL_APPDATA%]\E83DFC7B-1455735535-E211-87F5-08606E8CAE8E\qnsxAB7D.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\wucotusy]ImagePath=[%PROGRAM_FILES%]\E83DFC7B-1455704353-E211-87F5-08606E8CAE8E\hnsjB283.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\rowugoqo]ImagePath=[%LOCAL_APPDATA%]\06365508-1455241939-F8B1-2F69-28C2DD5FF14F\snsb206D.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\zutuzuni]ImagePath=[%PROGRAM_FILES%]\F1F5CC61-1455285171-11E4-A26A-F0761C687254\jnsj461D.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\wucotusy]ImagePath=[%PROGRAM_FILES%]\F1F5CC61-1455285171-11E4-A26A-F0761C687254\hnsoD148.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\rowugoqo]ImagePath=[%LOCAL_APPDATA%]\F1F5CC61-1455256506-11E4-A26A-F0761C687254\snsz916B.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\zutuzuni]ImagePath=[%PROGRAM_FILES%]\03000200-1455722689-0500-0006-000700080009\jnsv6D95.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\wucotusy]ImagePath=[%PROGRAM_FILES%]\03000200-1455722689-0500-0006-000700080009\hnsv8645.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\zigipyro]ImagePath=[%LOCAL_APPDATA%]\4C4C4544-1455578428-4610-804A-B4C04F4A5731\qnsb61EF.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\zutuzuni]ImagePath=[%PROGRAM_FILES%]\79A5604C-1452438890-E111-A7AF-AC162D4C760F\jnsh21B3.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\wucotusy]ImagePath=[%PROGRAM_FILES%]\79A5604C-1452438890-E111-A7AF-AC162D4C760F\hnsc3CB4.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\wucotusy]ImagePath=[%PROGRAM_FILES%]\7666AEC0-1455588400-11D5-AAA9-00261801708A\hnsh7897.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\rizyqibe]ImagePath=[%PROGRAM_FILES%]\7666AEC0-1455588400-11D5-AAA9-00261801708A\jnsb5961.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\xumypufy]ImagePath=[%PROGRAM_FILES%]\DA09D716-1449562587-334D-8BE6-B18A4243BF87\knsbD06.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\jodyfyti]ImagePath=[%PROGRAM_FILES%]\DA09D716-1449562587-334D-8BE6-B18A4243BF87\knsbBAAA.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\zutuzuni]ImagePath=[%PROGRAM_FILES%]\0CFAA50B-1455575410-E311-B6C2-201A069BE71A\jnsiA570.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\wucotusy]ImagePath=[%PROGRAM_FILES%]\0CFAA50B-1455575410-E311-B6C2-201A069BE71A\hnskC280.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\rowugoqo]ImagePath=[%LOCAL_APPDATA%]\0CFAA50B-1455579125-E311-B6C2-201A069BE71A\snsm1F02.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\zutuzuni]ImagePath=[%PROGRAM_FILES%]\00163189-1455209065-8022-FFFF-3085A9B4351F\jnscDD96.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\zigipyro]ImagePath=[%LOCAL_APPDATA%]\00163189-1455555173-8022-FFFF-3085A9B4351F\qnshF307.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\wucotusy]ImagePath=[%PROGRAM_FILES%]\00163189-1455209065-8022-FFFF-3085A9B4351F\hnsm106A.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\zutuzuni]ImagePath=[%PROGRAM_FILES%]\03000200-1455470254-0500-0006-000700080009\jnst56B9.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\wucotusy]ImagePath=[%PROGRAM_FILES%]\03000200-1455378434-0500-0006-000700080009\hnsxF80A.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\zutuzuni]ImagePath=[%PROGRAM_FILES%]\12828DFB-1455514062-DE11-B27E-00235A9DD9D3\jnsc6DEA.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\wucotusy]ImagePath=[%PROGRAM_FILES%]\12828DFB-1455514062-DE11-B27E-00235A9DD9D3\hnsg8684.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\zutuzuni]ImagePath=[%PROGRAM_FILES%]\03000200-1455603011-0500-0006-000700080009\jnsl8B51.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\wucotusy]ImagePath=[%PROGRAM_FILES%]\03000200-1455603011-0500-0006-000700080009\hnsvCCC5.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\wucotusy]ImagePath=[%PROGRAM_FILES%]\35453035-1455666695-4636-3746-3341FFFFFFFF\hnsk41E.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\zutuzuni]ImagePath=[%PROGRAM_FILES%]\35453035-1455666695-4636-3746-3341FFFFFFFF\jnsyE856.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\zigipyro]ImagePath=[%LOCAL_APPDATA%]\B003E33C-1455659619-11D5-9CD9-A424B111B0FA\qnso71BA.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\rowugoqo]ImagePath=[%LOCAL_APPDATA%]\0714B700-1455404025-11DD-B210-001FC6B4741A\snstDF.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\zutuzuni]ImagePath=[%PROGRAM_FILES%]\809533AF-1455368973-DD11-A70E-001E33609DCC\jnsh215.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\zigipyro]ImagePath=[%LOCAL_APPDATA%]\809533AF-1455393686-DD11-A70E-001E33609DCC\qnsdED1F.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\wucotusy]ImagePath=[%PROGRAM_FILES%]\809533AF-1455368973-DD11-A70E-001E33609DCC\hnsi1D50.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\wucotusy]ImagePath=[%PROGRAM_FILES%]\03000200-1452936266-0500-0006-000700080009\hnsfF09.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\zutuzuni]ImagePath=[%PROGRAM_FILES%]\03000200-1452936266-0500-0006-000700080009\jnskF526.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\rowugoqo]ImagePath=[%LOCAL_APPDATA%]\03000200-1452947139-0500-0006-000700080009\snsnE275.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\rowugoqo]ImagePath=[%LOCAL_APPDATA%]\5B6F4E39-1455028658-D7FE-244D-009C0291BB67\snscAA1A.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\zutuzuni]ImagePath=[%PROGRAM_FILES%]\8A284F00-1455474759-81E2-2404-E840F29534CC\jnskC3A8.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\zigipyro]ImagePath=[%LOCAL_APPDATA%]\8A284F00-1455626064-81E2-2404-E840F29534CC\qnsh3C47.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\wucotusy]ImagePath=[%PROGRAM_FILES%]\8A284F00-1455474759-81E2-2404-E840F29534CC\hnskD8B0.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\zutuzuni]ImagePath=[%PROGRAM_FILES%]\A0DE575C-1455615044-A54C-83D9-60EB69470852\jnskEE26.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\wucotusy]ImagePath=[%PROGRAM_FILES%]\A0DE575C-1455615044-A54C-83D9-60EB69470852\hnsu253E.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\zutuzuni]ImagePath=[%PROGRAM_FILES%]\5E55D759-1455618195-E111-B636-B888E365CB6E\jnsn80AB.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\wucotusy]ImagePath=[%PROGRAM_FILES%]\5E55D759-1455618195-E111-B636-B888E365CB6E\hnsm97EE.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\zigipyro]ImagePath=[%LOCAL_APPDATA%]\03000200-1455629423-0500-0006-000700080009\qnsw4A2E.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\zutuzuni]ImagePath=[%PROGRAM_FILES%]\4B435451-1455512650-4331-4731-14DAE9665674\jnspBB85.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\wucotusy]ImagePath=[%PROGRAM_FILES%]\4B435451-1455512650-4331-4731-14DAE9665674\hnsvE4C9.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\rowugoqo]ImagePath=[%LOCAL_APPDATA%]\4B435451-1455537974-4331-4731-14DAE9665674\snsq3FA4.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\zutuzuni]ImagePath=[%PROGRAM_FILES%]\45443439-1455095900-3833-4432-4532FFFFFFFF\jnsz9BF3.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\wucotusy]ImagePath=[%PROGRAM_FILES%]\45443439-1455095900-3833-4432-4532FFFFFFFF\hnslB8F3.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\zigipyro]ImagePath=[%LOCAL_APPDATA%]\2C31A929-1455551043-A44B-8586-4D8F863F9F8E\qnsv74F1.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\wucotusy]ImagePath=[%PROGRAM_FILES%]\2C31A929-1455526948-A44B-8586-4D8F863F9F8E\hnsk4562.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\zutuzuni]ImagePath=[%PROGRAM_FILES%]\5CCA4342-1455173324-DD11-B190-000C6E5C0FAF\jnst6B13.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\wucotusy]ImagePath=[%PROGRAM_FILES%]\5CCA4342-1455173324-DD11-B190-000C6E5C0FAF\hnsy91E6.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\wucotusy]ImagePath=[%PROGRAM_FILES%]\03AA02FC-1455348595-05E7-1906-EE0700080009\hnsz1575.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\rowugoqo]ImagePath=[%LOCAL_APPDATA%]\03AA02FC-1455368462-05E7-1906-EE0700080009\snsyBA20.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\zutuzuni]ImagePath=[%PROGRAM_FILES%]\0D8F4A80-1455543204-11DE-811E-0024BE67B784\jnsvC552.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\ziminylu]ImagePath=[%PROGRAM_FILES%]\0D8F4A80-1455543204-11DE-811E-0024BE67B784\knskAE33.tmpfs
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\wucotusy]ImagePath=[%PROGRAM_FILES%]\0D8F4A80-1455543204-11DE-811E-0024BE67B784\hnspDB24.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\wucotusy]ImagePath=[%PROGRAM_FILES%]\9049DA2E-1455547132-E311-8B14-008CFA9A0188\hnsq966.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\zutuzuni]ImagePath=[%PROGRAM_FILES%]\9049DA2E-1455547132-E311-8B14-008CFA9A0188\jnsgF148.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\zigipyro]ImagePath=[%LOCAL_APPDATA%]\9049DA2E-1455563803-E311-8B14-008CFA9A0188\qnswF4D8.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\wucotusy]ImagePath=[%PROGRAM_FILES%]\03000200-1455506039-0500-0006-000700080009\hnsa16A.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\zutuzuni]ImagePath=[%PROGRAM_FILES%]\03000200-1455506039-0500-0006-000700080009\jnsqDC4C.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\rowugoqo]ImagePath=[%LOCAL_APPDATA%]\03000200-1455513308-0500-0006-000700080009\snsdB9CD.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\zutuzuni]ImagePath=[%PROGRAM_FILES%]\00000000-1455454189-0000-0000-00241D299157\jnsk9B54.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\wucotusy]ImagePath=[%PROGRAM_FILES%]\00000000-1455454189-0000-0000-00241D299157\hnseB278.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\zutuzuni]ImagePath=[%PROGRAM_FILES%]\1D941F20-1455004749-8AFD-2F4D-0021CC3F4EF8\jnso4E00.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\zigipyro]ImagePath=[%LOCAL_APPDATA%]\1D941F20-1455457024-8AFD-2F4D-0021CC3F4EF8\qnsd27BB.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\wucotusy]ImagePath=[%PROGRAM_FILES%]\1D941F20-1455004749-8AFD-2F4D-0021CC3F4EF8\hnso7BB6.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\zutuzuni]ImagePath=[%PROGRAM_FILES%]\E60C017A-1455450759-E511-8B16-9457A5AB2B1A\jnsy240C.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\wucotusy]ImagePath=[%PROGRAM_FILES%]\E60C017A-1455450759-E511-8B16-9457A5AB2B1A\hnse6784.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\zutuzuni]ImagePath=[%PROGRAM_FILES%]\33444335-1455288028-5431-3053-A45D367290AC\jnssCBDC.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\wucotusy]ImagePath=[%PROGRAM_FILES%]\33444335-1455288028-5431-3053-A45D367290AC\hnsb1403.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\zutuzuni]ImagePath=[%PROGRAM_FILES%]\4C4C4544-1455423998-4610-8057-B4C04F39344A\jnss7D7E.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\zigipyro]ImagePath=[%LOCAL_APPDATA%]\4C4C4544-1455429453-4610-8057-B4C04F39344A\qnseA8D4.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\wucotusy]ImagePath=[%PROGRAM_FILES%]\4C4C4544-1455423998-4610-8057-B4C04F39344A\hnsn9351.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\wucotusy]ImagePath=[%PROGRAM_FILES%]\6DBBBB60-1455463295-11E0-95BC-F46D045227CD\hnslFAD.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\zutuzuni]ImagePath=[%PROGRAM_FILES%]\6DBBBB60-1455463295-11E0-95BC-F46D045227CD\jnsfF8B1.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\zigipyro]ImagePath=[%LOCAL_APPDATA%]\6DBBBB60-1455473066-11E0-95BC-F46D045227CD\qnsr8D05.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\zutuzuni]ImagePath=[%PROGRAM_FILES%]\4108BF30-1455324449-F053-BA9B-9FA0E0C34477\jnsa5062.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\wucotusy]ImagePath=[%PROGRAM_FILES%]\4108BF30-1455324449-F053-BA9B-9FA0E0C34477\hnsq6E9E.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\zutuzuni]ImagePath=[%PROGRAM_FILES%]\F0A300C0-1455375770-11DF-A232-A2CB235CB524\jnsg69F0.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\zigipyro]ImagePath=[%LOCAL_APPDATA%]\F0A300C0-1455436209-11DF-A232-A2CB235CB524\qnsr958D.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\wucotusy]ImagePath=[%PROGRAM_FILES%]\F0A300C0-1455375770-11DF-A232-A2CB235CB524\hnsv7F07.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\zutuzuni]ImagePath=[%PROGRAM_FILES%]\3920682C-1455045135-11DD-888B-1850E8868B96\jnsl1A3B.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\wucotusy]ImagePath=[%PROGRAM_FILES%]\3920682C-1455045135-11DD-888B-1850E8868B96\hnsy54E4.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\zutuzuni]ImagePath=[%PROGRAM_FILES%]\80F0CCD1-1455463891-E011-AE8C-C89CDCBC2C6D\jnszCF8B.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\zigipyro]ImagePath=[%LOCAL_APPDATA%]\80F0CCD1-1455448429-E011-AE8C-C89CDCBC2C6D\qnsmB388.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\wucotusy]ImagePath=[%PROGRAM_FILES%]\80F0CCD1-1455463891-E011-AE8C-C89CDCBC2C6D\hnszE5CB.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\qovowotu]ImagePath=[%PROGRAM_FILES%]\7F7EA592-1448559319-146E-D7E3-B84D5276A143\knsyF590.tmpfs
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\pupivyhi]ImagePath=[%PROGRAM_FILES%]\7F7EA592-1448559319-146E-D7E3-B84D5276A143\jnsy18A0.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\hidekoqe]ImagePath=[%LOCAL_APPDATA%]\7F7EA592-1448575570-146E-D7E3-B84D5276A143\qnsh20CB.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\zutuzuni]ImagePath=[%PROGRAM_FILES%]\03000200-1455330626-0500-0006-000700080009\jnsn7061.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\zigipyro]ImagePath=[%LOCAL_APPDATA%]\03000200-1455363831-0500-0006-000700080009\qnss7E94.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\wucotusy]ImagePath=[%PROGRAM_FILES%]\03000200-1455330626-0500-0006-000700080009\hnsx97A1.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\zigipyro]ImagePath=[%LOCAL_APPDATA%]\B003E33C-1455321772-11D5-9CD9-A424B111B0FA\qnsjFA09.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\zutuzuni]ImagePath=[%PROGRAM_FILES%]\AE37E820-1455253185-11E3-8FBF-C24DD3610700\jnsu7132.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\wucotusy]ImagePath=[%PROGRAM_FILES%]\AE37E820-1455253185-11E3-8FBF-C24DD3610700\hnsv6147.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\rowugoqo]ImagePath=[%LOCAL_APPDATA%]\4C4C4544-1455325002-4410-8052-C7C04F4E4431\snss11C.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\zutuzuni]ImagePath=[%PROGRAM_FILES%]\4C4C4544-1456001178-3310-8034-B4C04F354253\jnsg4164.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\wucotusy]ImagePath=[%PROGRAM_FILES%]\4C4C4544-1456001178-3310-8034-B4C04F354253\hnsw5F04.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\zutuzuni]ImagePath=[%PROGRAM_FILES%]\A1029C80-1455336727-81E2-33B3-AC220B028D0E\jnslAAF5.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\wucotusy]ImagePath=[%PROGRAM_FILES%]\A1029C80-1455336727-81E2-33B3-AC220B028D0E\hnsgD35E.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\zutuzuni]ImagePath=[%PROGRAM_FILES%]\03000200-1455369473-0500-0006-000700080009\jnsjB911.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\wucotusy]ImagePath=[%PROGRAM_FILES%]\03000200-1455369473-0500-0006-000700080009\hnsoDBEE.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\zutuzuni]ImagePath=[%PROGRAM_FILES%]\C0CAD845-1455348229-E011-82BD-F67EC18ACED7\jnskE62.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\wucotusy]ImagePath=[%PROGRAM_FILES%]\C0CAD845-1455348229-E011-82BD-F67EC18ACED7\hnsp5053.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\wucotusy]ImagePath=[%PROGRAM_FILES%]\8B328317-1453426922-9340-BE0C-58EE9AF00D27\hnscA6E.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\zutuzuni]ImagePath=[%PROGRAM_FILES%]\8B328317-1453426922-9340-BE0C-58EE9AF00D27\jnsg8DFC.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\zigipyro]ImagePath=[%LOCAL_APPDATA%]\40874E71-1455306311-DF11-A7FD-88AE1DF23391\qnse80E4.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\xuluxivy]ImagePath=[%PROGRAM_FILES%]\40874E71-1434006255-DF11-A7FD-88AE1DF23391\knsmB299.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\zutuzuni]ImagePath=[%PROGRAM_FILES%]\33ADF28B-1455126542-11E5-A26A-F0761CD95346\jnst439.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\wucotusy]ImagePath=[%PROGRAM_FILES%]\33ADF28B-1455126542-11E5-A26A-F0761CD95346\hnsj1F35.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\zigipyro]ImagePath=[%LOCAL_APPDATA%]\07D0A3BF-1455359241-28AD-4A94-F079598B59DF\qnseF28.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\zutuzuni]ImagePath=[%PROGRAM_FILES%]\905E3EA2-1452789123-D74B-B6C9-7824AFBB73B9\jnsh2B3.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\wucotusy]ImagePath=[%PROGRAM_FILES%]\905E3EA2-1452789123-D74B-B6C9-7824AFBB73B9\hnsb577D.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\zigipyro]ImagePath=[%LOCAL_APPDATA%]\C8F240E8-1455392908-1220-0503-004946000000\qnscD01E.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\rowugoqo]ImagePath=[%LOCAL_APPDATA%]\C8F240E8-1455390966-1220-0503-004946000000\snsu2EB0.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\zutuzuni]ImagePath=[%PROGRAM_FILES%]\512B1248-1455272219-11E4-A818-28D244C2E496\jnsp45C7.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\wucotusy]ImagePath=[%PROGRAM_FILES%]\512B1248-1455272219-11E4-A818-28D244C2E496\hnsu5D10.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\relibily]ImagePath=[%LOCAL_APPDATA%]\533EC291-1455229449-8419-CA5F-74D02B1AAF03\cnss472.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\zutuzuni]ImagePath=[%PROGRAM_FILES%]\82028CD9-1455223894-11E4-A961-68F72897E0D1\jnsp75AB.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\wucotusy]ImagePath=[%PROGRAM_FILES%]\82028CD9-1455223894-11E4-A961-68F72897E0D1\hnszA5F5.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\zutuzuni]ImagePath=[%PROGRAM_FILES%]\2EE1C900-1453415271-11E2-A209-ECA86BF65F41\jnsm7EE.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\zigipyro]ImagePath=[%LOCAL_APPDATA%]\2EE1C900-1455228030-11E2-A209-ECA86BF65F41\qnss6EAC.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\wucotusy]ImagePath=[%PROGRAM_FILES%]\2EE1C900-1453415271-11E2-A209-ECA86BF65F41\hnsc2456.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\rowugoqo]ImagePath=[%LOCAL_APPDATA%]\2EE1C900-1454331290-11E2-A209-ECA86BF65F41\snslD5B7.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\zutuzuni]ImagePath=[%PROGRAM_FILES%]\31444335-1452369491-3033-5938-101F74C0CC79\jnsuD741.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\ziminylu]ImagePath=[%PROGRAM_FILES%]\31444335-1452369491-3033-5938-101F74C0CC79\knsfB902.tmpfs
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\wucotusy]ImagePath=[%PROGRAM_FILES%]\31444335-1452369491-3033-5938-101F74C0CC79\hnsaF1E5.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\zutuzuni]ImagePath=[%PROGRAM_FILES%]\00000000-1455269999-0000-0000-50E549EC91DD\jnsiE486.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\wucotusy]ImagePath=[%PROGRAM_FILES%]\00000000-1455269999-0000-0000-50E549EC91DD\hnsdFAA7.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\zutuzuni]ImagePath=[%PROGRAM_FILES%]\0F58C366-1455298087-11DE-BBDA-810FFB200024\jnsuBE20.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\ziminylu]ImagePath=[%PROGRAM_FILES%]\0F58C366-1455298087-11DE-BBDA-810FFB200024\knsz9EC8.tmpfs
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\wucotusy]ImagePath=[%PROGRAM_FILES%]\0F58C366-1455298087-11DE-BBDA-810FFB200024\hnsuE38D.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\zutuzuni]ImagePath=[%PROGRAM_FILES%]\12345678-1454966885-5678-90AB-CDDEEFAABBCC\jnsm88E8.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\zigipyro]ImagePath=[%LOCAL_APPDATA%]\12345678-1455262822-5678-90AB-CDDEEFAABBCC\qnse5CBC.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\wucotusy]ImagePath=[%PROGRAM_FILES%]\12345678-1454966885-5678-90AB-CDDEEFAABBCC\hnswA154.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\zutuzuni]ImagePath=[%PROGRAM_FILES%]\3B67A331-1455303683-E111-9545-DC0EA1809F60\jnsg6E8A.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\wucotusy]ImagePath=[%PROGRAM_FILES%]\3B67A331-1455303683-E111-9545-DC0EA1809F60\hnsl88AB.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\zutuzuni]ImagePath=[%PROGRAM_FILES%]\562E70BB-1455273305-9040-A7C3-00E0B878B293\jnsu8008.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\wucotusy]ImagePath=[%PROGRAM_FILES%]\562E70BB-1455273305-9040-A7C3-00E0B878B293\hnsz98A3.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\rowugoqo]ImagePath=[%LOCAL_APPDATA%]\562E70BB-1455277000-9040-A7C3-00E0B878B293\snsj7DF1.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\zutuzuni]ImagePath=[%PROGRAM_FILES%]\DF8132F2-1454832461-0A7F-A780-485B395193A9\jnssA358.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\zigipyro]ImagePath=[%LOCAL_APPDATA%]\DF8132F2-1454964642-0A7F-A780-485B395193A9\qnskDF14.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\wucotusy]ImagePath=[%PROGRAM_FILES%]\DF8132F2-1454832461-0A7F-A780-485B395193A9\hnsnBDD7.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\zutuzuni]ImagePath=[%PROGRAM_FILES%]\C421D86C-1455132863-E011-B83A-B870F44D5E63\jnsq3D7E.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\wucotusy]ImagePath=[%PROGRAM_FILES%]\C421D86C-1455132863-E011-B83A-B870F44D5E63\hnsl64FD.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\zutuzuni]ImagePath=[%PROGRAM_FILES%]\27F03FE8-1454946546-11DC-A054-38B036219939\jnsy8A0C.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\zigipyro]ImagePath=[%LOCAL_APPDATA%]\27F03FE8-1455298016-11DC-A054-38B036219939\qnsfA459.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\wucotusy]ImagePath=[%PROGRAM_FILES%]\27F03FE8-1454946546-11DC-A054-38B036219939\hnsyA594.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\zizusyju]ImagePath=[%PROGRAM_FILES%]\B6AEDE58-1450773953-0AE7-F3AC-E03F495678A5\hnsc72F0.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\viqysuho]ImagePath=[%PROGRAM_FILES%]\B6AEDE58-1450773953-0AE7-F3AC-E03F495678A5\knseB768.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\rizyqibe]ImagePath=[%PROGRAM_FILES%]\B6AEDE58-1450773953-0AE7-F3AC-E03F495678A5\jnsx4FC5.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\hidekoqe]ImagePath=[%LOCAL_APPDATA%]\B6AEDE58-1451085001-0AE7-F3AC-E03F495678A5\qnsn936B.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\zutuzuni]ImagePath=[%PROGRAM_FILES%]\00000000-1455242321-0000-0000-D8CB8A96609A\jnsb32C1.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\wucotusy]ImagePath=[%PROGRAM_FILES%]\00000000-1455242321-0000-0000-D8CB8A96609A\hnsl49DB.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\bovipidy]ImagePath=[%PROGRAM_FILES%]\2754D6D2-1449328630-E311-80E0-F8A9633C747E\knstADE.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\zigipyro]ImagePath=[%LOCAL_APPDATA%]\2754D6D2-1453639979-E311-80E0-F8A9633C747E\qnsv6DBF.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\roqenufe]ImagePath=[%PROGRAM_FILES%]\2754D6D2-1449328630-E311-80E0-F8A9633C747E\jnsh41D6.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\nyneryxo]ImagePath=[%PROGRAM_FILES%]\2754D6D2-1449328630-E311-80E0-F8A9633C747E\hnsm73D5.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\zutuzuni]ImagePath=[%PROGRAM_FILES%]\4C4C4544-1455261593-4710-805A-CAC04F353132\jnss693A.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\wucotusy]ImagePath=[%PROGRAM_FILES%]\4C4C4544-1455261593-4710-805A-CAC04F353132\hnsa88DA.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\zutuzuni]ImagePath=[%PROGRAM_FILES%]\DE95D244-1455203083-DC11-980C-001B3846A2D7\jnsa8A08.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\wucotusy]ImagePath=[%PROGRAM_FILES%]\DE95D244-1455203083-DC11-980C-001B3846A2D7\hnszA14B.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\zutuzuni]ImagePath=[%PROGRAM_FILES%]\03000200-1455152314-0500-0006-000700080009\jnsgD888.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\wucotusy]ImagePath=[%PROGRAM_FILES%]\03000200-1455152314-0500-0006-000700080009\hnsuEEF0.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\zutuzuni]ImagePath=[%PROGRAM_FILES%]\4C4C4544-1455111744-3410-804E-B5C04F463432\jnskBEE0.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\wucotusy]ImagePath=[%PROGRAM_FILES%]\4C4C4544-1455111744-3410-804E-B5C04F463432\hnskD6A6.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\zutuzuni]ImagePath=[%PROGRAM_FILES%]\A0AADF6A-1454518102-DD11-A956-F834FDDF7571\jnsm8DF0.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\zigipyro]ImagePath=[%LOCAL_APPDATA%]\A0AADF6A-1455223694-DD11-A956-F834FDDF7571\qnsiA220.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\wucotusy]ImagePath=[%PROGRAM_FILES%]\A0AADF6A-1454518102-DD11-A956-F834FDDF7571\hnsvA571.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\wucotusy]ImagePath=[%PROGRAM_FILES%]\010ACDD8-1454768330-DD11-8654-001EEC9C1102\hnsb2933.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\zutuzuni]ImagePath=[%PROGRAM_FILES%]\6583582C-1455208239-11D5-B97E-859B88E89E7D\jnsh8533.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\zigipyro]ImagePath=[%LOCAL_APPDATA%]\6583582C-1455219076-11D5-B97E-859B88E89E7D\qnswEC0A.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\wucotusy]ImagePath=[%PROGRAM_FILES%]\6583582C-1455208239-11D5-B97E-859B88E89E7D\hnsa9A82.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\zutuzuni]ImagePath=[%PROGRAM_FILES%]\D1285FF9-1455166465-004A-9CFB-80E53AAB64F5\jnsw41C4.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\wucotusy]ImagePath=[%PROGRAM_FILES%]\D1285FF9-1455166465-004A-9CFB-80E53AAB64F5\hnsi5E28.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\zutuzuni]ImagePath=[%PROGRAM_FILES%]\4C4C4544-1454743773-4C10-8057-C4C04F565331\jnsf892F.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\zutuzuni]ImagePath=[%PROGRAM_FILES%]\00000000-1453900334-0000-0000-00241DF302D1\jnstFD23.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\wucotusy]ImagePath=[%PROGRAM_FILES%]\00000000-1453900334-0000-0000-00241DF302D1\hnso369C.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\zutuzuni]ImagePath=[%PROGRAM_FILES%]\000E4653-1455093404-8014-BF5A-3391090216A0\jnss3B56.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\wucotusy]ImagePath=[%PROGRAM_FILES%]\100CED56-1455197240-11E4-8FEB-F80F41E14268\hnsuDCC2.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\lehicewu]ImagePath=[%PROGRAM_FILES%]\00000000-1442332054-0000-0000-406186FA6CAF\jnsg5BAD.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\gyvixodu]ImagePath=[%PROGRAM_FILES%]\00000000-1442332054-0000-0000-406186FA6CAF\hnsu712B.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\rowugoqo]ImagePath=[%LOCAL_APPDATA%]\4C4C4544-1455234744-4B10-8058-C3C04F445231\snsrD0B9.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\zutuzuni]ImagePath=[%PROGRAM_FILES%]\55AD4300-1455198632-11D5-950F-20CF30C214CF\jnsj5663.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\wucotusy]ImagePath=[%PROGRAM_FILES%]\55AD4300-1455198632-11D5-950F-20CF30C214CF\hnsf80A1.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\zutuzuni]ImagePath=[%PROGRAM_FILES%]\33156860-1455085650-81F5-3FDE-382C4A278BAF\jnstC445.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\zigipyro]ImagePath=[%LOCAL_APPDATA%]\33156860-1455113168-81F5-3FDE-382C4A278BAF\qnsj99D3.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\wucotusy]ImagePath=[%PROGRAM_FILES%]\33156860-1455085650-81F5-3FDE-382C4A278BAF\hnsoDD3E.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\zutuzuni]ImagePath=[%PROGRAM_FILES%]\03000200-1455044607-0500-0006-000700080009\jnsx9F89.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\wucotusy]ImagePath=[%PROGRAM_FILES%]\03000200-1455044607-0500-0006-000700080009\hnsnB981.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\zigipyro]ImagePath=[%LOCAL_APPDATA%]\03000200-1455129831-0500-0006-000700080009\qnshA037.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\wucotusy]ImagePath=[%PROGRAM_FILES%]\48C9C6EE-1455132110-5100-BBC0-54915F3C8E6A\hnsg4314.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\zutuzuni]ImagePath=[%PROGRAM_FILES%]\0D29D468-1455067811-E411-85C7-F0761CBC82D8\jnsqF542.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\wucotusy]ImagePath=[%PROGRAM_FILES%]\0D29D468-1455067811-E411-85C7-F0761CBC82D8\hnsb1D6D.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\rowugoqo]ImagePath=[%LOCAL_APPDATA%]\0D29D468-1455060682-E411-85C7-F0761CBC82D8\snsiE07E.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\zutuzuni]ImagePath=[%PROGRAM_FILES%]\4C4C4544-1455116065-4D10-8036-B1C04F435231\jnsoD03A.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\wucotusy]ImagePath=[%PROGRAM_FILES%]\4C4C4544-1455116065-4D10-8036-B1C04F435231\hnstECB1.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\zutuzuni]ImagePath=[%PROGRAM_FILES%]\B602F15A-1455015307-DE11-8A63-0007E9BECBF3\jnsc5130.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\wucotusy]ImagePath=[%PROGRAM_FILES%]\B602F15A-1455015307-DE11-8A63-0007E9BECBF3\hnsh7BAB.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\rowugoqo]ImagePath=[%LOCAL_APPDATA%]\03AA02FC-1455121030-05F5-EB06-800700080009\snszE019.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\zutuzuni]ImagePath=[%PROGRAM_FILES%]\2B16C1F0-1455066910-11DF-BBDA-64128B51D485\jnsl41A3.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\wucotusy]ImagePath=[%PROGRAM_FILES%]\2B16C1F0-1455066910-11DF-BBDA-64128B51D485\hnsq93BA.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\zutuzuni]ImagePath=[%PROGRAM_FILES%]\20DB17F6-1455119662-E411-A26A-5CB901B4DB20\jnsb9AD9.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\zigipyro]ImagePath=[%LOCAL_APPDATA%]\20DB17F6-1455124064-E411-A26A-5CB901B4DB20\qnsuAFEC.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\wucotusy]ImagePath=[%PROGRAM_FILES%]\20DB17F6-1455119662-E411-A26A-5CB901B4DB20\hnscB662.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\zutuzuni]ImagePath=[%PROGRAM_FILES%]\45443439-1455063993-4632-4241-3330FFFFFFFF\jnsb3223.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\wucotusy]ImagePath=[%PROGRAM_FILES%]\45443439-1455063993-4632-4241-3330FFFFFFFF\hnsk4782.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\zutuzuni]ImagePath=[%PROGRAM_FILES%]\257EA660-1455062653-11DD-BF10-7824AF382876\jnsl199D.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\wucotusy]ImagePath=[%PROGRAM_FILES%]\257EA660-1455062653-11DD-BF10-7824AF382876\hnsv2EE3.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\zutuzuni]ImagePath=[%PROGRAM_FILES%]\F5CA672C-1455053569-1A73-37AB-C93AD8CBAF5C\jnst695D.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\wucotusy]ImagePath=[%PROGRAM_FILES%]\F5CA672C-1455053569-1A73-37AB-C93AD8CBAF5C\hnsy844E.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\zutuzuni]ImagePath=[%PROGRAM_FILES%]\6A042CC2-1455050041-E311-9EF2-201A06D1D973\jnsv44DF.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\wucotusy]ImagePath=[%PROGRAM_FILES%]\6A042CC2-1455050041-E311-9EF2-201A06D1D973\hnsp5B67.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\zutuzuni]ImagePath=[%PROGRAM_FILES%]\1939CA93-1455113405-DF11-A5D3-705AB6568B3C\jnsv8D51.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\wucotusy]ImagePath=[%PROGRAM_FILES%]\1939CA93-1455113405-DF11-A5D3-705AB6568B3C\hnskA6AC.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\zutuzuni]ImagePath=[%PROGRAM_FILES%]\E087A3E0-1453039362-11E0-B26A-E89A8F880DB5\jnsw53DC.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\wucotusy]ImagePath=[%PROGRAM_FILES%]\E087A3E0-1453039362-11E0-B26A-E89A8F880DB5\hnsh95ED.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\zutuzuni]ImagePath=[%PROGRAM_FILES%]\A0BB31C0-1453796410-11B2-8000-8431CF982B99\jnsr3A91.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\wucotusy]ImagePath=[%PROGRAM_FILES%]\A0BB31C0-1453796410-11B2-8000-8431CF982B99\hnsw5C84.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\rowugoqo]ImagePath=[%LOCAL_APPDATA%]\A0BB31C0-1453816302-11B2-8000-8431CF982B99\snsh6D27.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\wucotusy]ImagePath=[%PROGRAM_FILES%]\9A633246-1453114298-1BB6-A43D-1C7508077E48\hnsaB96A.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\zizusyju]ImagePath=[%PROGRAM_FILES%]\4C4C4544-1450462081-5210-8039-C8C04F383032\hnszE5BD.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\zigipyro]ImagePath=[%LOCAL_APPDATA%]\4C4C4544-1455020180-5210-8039-C8C04F383032\qnsv963B.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\woforemu]ImagePath=[%LOCAL_APPDATA%]\4C4C4544-1450469505-5210-8039-C8C04F383032\snsiED2A.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\rizyqibe]ImagePath=[%PROGRAM_FILES%]\4C4C4544-1450462081-5210-8039-C8C04F383032\jnswEF4A.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\wucotusy]ImagePath=[%PROGRAM_FILES%]\60FEFFFF-1455021565-60FE-FFFF-FE60FFFFFE60\hnsp1CB9.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\zutuzuni]ImagePath=[%PROGRAM_FILES%]\804E2C38-1454709182-DC11-8052-B05987063514\jnso9F20.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\wucotusy]ImagePath=[%PROGRAM_FILES%]\804E2C38-1454709182-DC11-8052-B05987063514\hnsdCD33.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\zutuzuni]ImagePath=[%PROGRAM_FILES%]\1D4FB171-1451152826-E011-B28A-1C75087E9E3C\jnsdA5F1.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\wucotusy]ImagePath=[%PROGRAM_FILES%]\1D4FB171-1451152826-E011-B28A-1C75087E9E3C\hnsyC2C6.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\zuluqeli]ImagePath=[%PROGRAM_FILES%]\4C4C4544-1454724498-5110-8046-B6C04F324D31\znsu9141.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\zutuzuni]ImagePath=[%PROGRAM_FILES%]\740D8CB1-1454898309-D348-F06F-E79E94BF69F7\jnsm8A5A.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\zigipyro]ImagePath=[%LOCAL_APPDATA%]\740D8CB1-1454931080-D348-F06F-E79E94BF69F7\qnswE9F2.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\wucotusy]ImagePath=[%PROGRAM_FILES%]\740D8CB1-1454898309-D348-F06F-E79E94BF69F7\hnsiA4DA.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\zutuzuni]ImagePath=[%PROGRAM_FILES%]\FB442FB2-1454360715-974B-AF09-1BA6CA71B9A8\jnskC1BA.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\wucotusy]ImagePath=[%PROGRAM_FILES%]\FB442FB2-1454360715-974B-AF09-1BA6CA71B9A8\hnsoD880.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\zigipyro]ImagePath=[%LOCAL_APPDATA%]\4C4C4544-1454955223-4C10-8031-B4C04F325631\qnsoF82E.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\zutuzuni]ImagePath=[%PROGRAM_FILES%]\79EE3000-1454934898-11E5-958C-3464A92B4FF8\jnsdD8B9.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\wucotusy]ImagePath=[%PROGRAM_FILES%]\79EE3000-1454934898-11E5-958C-3464A92B4FF8\hnszF339.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\zutuzuni]ImagePath=[%PROGRAM_FILES%]\E2901D6B-1454897797-E511-A726-1C3947042F73\jnsk8A4.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\zigipyro]ImagePath=[%LOCAL_APPDATA%]\E2901D6B-1454880647-E511-A726-1C3947042F73\qnswF27E.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\wucotusy]ImagePath=[%PROGRAM_FILES%]\E2901D6B-1454897797-E511-A726-1C3947042F73\hnsv24B9.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\zigipyro]ImagePath=[%LOCAL_APPDATA%]\4C4C4544-1454075080-3810-804E-B8C04F4A3332\qnsx1AD7.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\wucotusy]ImagePath=[%PROGRAM_FILES%]\D600692B-1454874404-11DE-BBDA-649E427AD485\hnsd7F7.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\zutuzuni]ImagePath=[%PROGRAM_FILES%]\D600692B-1454874404-11DE-BBDA-649E427AD485\jnsmC4C2.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\zutuzuni]ImagePath=[%PROGRAM_FILES%]\B5DB5B50-1454846362-81E3-36EE-2025642EF173\jnsr3FED.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\zigipyro]ImagePath=[%LOCAL_APPDATA%]\B5DB5B50-1454899594-81E3-36EE-2025642EF173\qnshE477.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\wucotusy]ImagePath=[%PROGRAM_FILES%]\B5DB5B50-1454846362-81E3-36EE-2025642EF173\hnsm5CC2.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\zutuzuni]ImagePath=[%PROGRAM_FILES%]\C3428DA0-1454965540-11DD-9BEB-AC220B761EF1\jnsbC1BB.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\wucotusy]ImagePath=[%PROGRAM_FILES%]\C3428DA0-1454965540-11DD-9BEB-AC220B761EF1\hnsnDE6D.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\wuhucyri]ImagePath=[%PROGRAM_FILES%]\863F145F-1447337576-52A7-257A-6E35FD4F7B1E\knsl8C52.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\zutuzuni]ImagePath=[%PROGRAM_FILES%]\38464E43-1454777231-4A32-3446-001E68CE628F\jnsw92FE.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\rowugoqo]ImagePath=[%LOCAL_APPDATA%]\38464E43-1454784634-4A32-3446-001E68CE628F\snsn44D1.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\zigipyro]ImagePath=[%LOCAL_APPDATA%]\03AA02FC-1454928130-0533-B806-050700080009\qnsmC2C4.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\zutuzuni]ImagePath=[%PROGRAM_FILES%]\EFEFEFEF-1453543842-EFEF-EFEF-EFEFEFEFEFEF\jnshA8.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\wucotusy]ImagePath=[%PROGRAM_FILES%]\EFEFEFEF-1453543842-EFEF-EFEF-EFEFEFEFEFEF\hnseAD.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\zutuzuni]ImagePath=[%PROGRAM_FILES%]\8064A5D2-1454932917-E211-8444-2089849F56EC\jnsn28B5.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\wucotusy]ImagePath=[%PROGRAM_FILES%]\8064A5D2-1454932917-E211-8444-2089849F56EC\hnss457A.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\rowugoqo]ImagePath=[%LOCAL_APPDATA%]\8064A5D2-1454944004-E211-8444-2089849F56EC\snsu46B2.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\zutuzuni]ImagePath=[%PROGRAM_FILES%]\4C4C4544-1454848339-4B10-8042-B1C04F505031\jnsy39C8.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\wucotusy]ImagePath=[%PROGRAM_FILES%]\4C4C4544-1454848339-4B10-8042-B1C04F505031\hnsi5AF0.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\wucotusy]ImagePath=[%PROGRAM_FILES%]\7A48A3E5-1454828273-1A03-2331-101F7413C83E\hnsf3E49.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\zutuzuni]ImagePath=[%PROGRAM_FILES%]\03000200-1453983195-0500-0006-000700080009\jnsk9996.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\wucotusy]ImagePath=[%PROGRAM_FILES%]\03000200-1453983195-0500-0006-000700080009\hnshD1BF.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\rowugoqo]ImagePath=[%LOCAL_APPDATA%]\03000200-1454003086-0500-0006-000700080009\snsqC064.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\fiwedule]ImagePath=[%APPDATA%]\20755110-1427635848-E211-B0AC-9343B48AB2D8\nsq6BAB.tmpfs
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\behewygo]ImagePath=[%APPDATA%]\20755110-1427635848-E211-B0AC-9343B48AB2D8\jnsnA2EE.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\wucotusy]ImagePath=[%PROGRAM_FILES%]\00000000-1454815494-0000-0000-448A5BCE3CFB\hnsmD410.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\rowugoqo]ImagePath=[%LOCAL_APPDATA%]\00000000-1454840757-0000-0000-448A5BCE3CFB\snsw83D8.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\zutuzuni]ImagePath=[%PROGRAM_FILES%]\03000200-1454844780-0500-0006-000700080009\jnsrE2A3.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\wucotusy]ImagePath=[%PROGRAM_FILES%]\03000200-1454844780-0500-0006-000700080009\hnsrF8E3.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\zigipyro]ImagePath=[%LOCAL_APPDATA%]\03000200-1454850257-0500-0006-000700080009\qnst6359.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\zejytose]ImagePath=[%APPDATA%]\812DDE29-1436926622-E211-844B-208984EE3541\jnsx67DC.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\totobini]ImagePath=[%PROGRAM_FILES%]\812DDE29-1436926622-E211-844B-208984EE3541\knsj4DBE.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\gopibeko]ImagePath=[%LOCAL_APPDATA%]\812DDE29-1436946497-E211-844B-208984EE3541\snsd1D05.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\vicoqudu]ImagePath=[%APPDATA%]\00000000-1436377528-0000-0000-00241DB1DA29\hnsdC85.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\lehepusi]ImagePath=[%APPDATA%]\00000000-1436377528-0000-0000-00241DB1DA29\knspC69.tmpfs