Exterminate It! Antimalware

malpedia

Known threats:699,742 Last Update:October 27, 11:19

Testimonials

Just want to say that apparently your Exterminate It has worked like a charm. I was infected with a most troublesome Malware Trojan that kept replicating every time McAfee found, blocked and removed it... most annoying for several days... until Mr. Google led me to your door. What a God send!

With thanks,

Tom S.

MultiPlug- Registry Values List

This is a complete list of MultiPlug registry values collected by Exterminate It!. If you find any of these registry values on your PC, your computer is very likely to be infected with the MultiPlug - adware.

IMPORTANT: Because the registry is a core component of your Windows system, it is strongly recommended that you back up the registry before you begin deleting keys and values. For information about backing up the Windows registry, refer to the Registry Editor online help.
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\jipemoxi]ImagePath=[%PROGRAM_FILES%]\9A633246-1448405200-1BB6-A43D-1C750847DFB8\jnsw7EA6.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\dukeqove]ImagePath=[%PROGRAM_FILES%]\9A633246-1448405200-1BB6-A43D-1C750847DFB8\hnsr94C7.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\woforemu]ImagePath=[%LOCAL_APPDATA%]\4C4C4544-1449925432-5710-8039-C7C04F34334A\snso52A.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\zizusyju]ImagePath=[%PROGRAM_FILES%]\4C4C4544-1449912707-5710-8039-C7C04F34334A\hnszA386.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\rizyqibe]ImagePath=[%PROGRAM_FILES%]\4C4C4544-1449912707-5710-8039-C7C04F34334A\jnso7D2F.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\duluwewe]ImagePath=[%PROGRAM_FILES%]\4C4C4544-1449912707-5710-8039-C7C04F34334A\knskA3C5.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\jufohycy]ImagePath=[%PROGRAM_FILES%]\D95ACC98-1438338314-DF11-A7E3-88AE1DC7806F\knse808F.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\hyverumu]ImagePath=[%PROGRAM_FILES%]\D95ACC98-1438338314-DF11-A7E3-88AE1DC7806F\jnsc337D.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\gopibeko]ImagePath=[%LOCAL_APPDATA%]\D95ACC98-1438363594-DF11-A7E3-88AE1DC7806F\snscE9A4.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\comyninu]ImagePath=[%PROGRAM_FILES%]\D95ACC98-1438338314-DF11-A7E3-88AE1DC7806F\hnsc4E01.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\vufukice]ImagePath=[%PROGRAM_FILES%]\B5726F36-1448301592-11DF-BBDA-857E6DF7D8D3\jnsa369A.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\roqenufe]ImagePath=[%PROGRAM_FILES%]\B5726F36-1449507217-11DF-BBDA-857E6DF7D8D3\jnsuC38D.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\puxulite]ImagePath=[%PROGRAM_FILES%]\B5726F36-1448301592-11DF-BBDA-857E6DF7D8D3\knsfF3EA.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\nyneryxo]ImagePath=[%PROGRAM_FILES%]\B5726F36-1449507217-11DF-BBDA-857E6DF7D8D3\hnskD8A5.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\muvegyzu]ImagePath=[%PROGRAM_FILES%]\B5726F36-1449507217-11DF-BBDA-857E6DF7D8D3\knsz2508.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\hetenegi]ImagePath=[%PROGRAM_FILES%]\B5726F36-1448301592-11DF-BBDA-857E6DF7D8D3\hnsf4CF9.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\jybyluco]ImagePath=[%APPDATA%]\FFFFFFFF-1426262850-FFFF-FFFF-FFFFFFFFFFFF\nsg102.tmpfs
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\vutyweki]ImagePath=[%APPDATA%]\FFFFFFFF-1426262850-FFFF-FFFF-FFFFFFFFFFFF\jnsl112.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\hidekoqe]ImagePath=[%LOCAL_APPDATA%]\C3EAB6D3-1449916849-4348-A5BC-C913B0D9130E\qnsq81A.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\zizusyju]ImagePath=[%PROGRAM_FILES%]\C3EAB6D3-1449764605-4348-A5BC-C913B0D9130E\hnsc901B.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\woforemu]ImagePath=[%LOCAL_APPDATA%]\C3EAB6D3-1449790136-4348-A5BC-C913B0D9130E\snss227A.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\sywywicy]ImagePath=[%PROGRAM_FILES%]\C3EAB6D3-1449764605-4348-A5BC-C913B0D9130E\knsk4B0B.tmpfs
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\rizyqibe]ImagePath=[%PROGRAM_FILES%]\C3EAB6D3-1449764605-4348-A5BC-C913B0D9130E\jnsx6A80.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\gyvixodu]ImagePath=[%PROGRAM_FILES%]\DF8139F9-1444245862-0C00-4B80-485B3927C2C5\hnsd5E7.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\xezebite]ImagePath=[%PROGRAM_FILES%]\DF8139F9-1444245862-0C00-4B80-485B3927C2C5\knso38DC.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\syfinizy]ImagePath=[%PROGRAM_FILES%]\DF8139F9-1444245862-0C00-4B80-485B3927C2C5\jnsnEC71.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\muridyvo]ImagePath=[%LOCAL_APPDATA%]\DF8139F9-1444262941-0C00-4B80-485B3927C2C5\qnsaD968.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\motimyzi]ImagePath=[%PROGRAM_FILES%]\03000200-1445604358-0500-0006-000700080009\knsrE6C6.tmpfs
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\zizusyju]ImagePath=[%PROGRAM_FILES%]\DA937200-1449884949-11E0-8DCA-E89A8F758CD6\hnsg8853.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\vucexuvy]ImagePath=[%PROGRAM_FILES%]\DA937200-1449884949-11E0-8DCA-E89A8F758CD6\knsb3FF6.tmpfs
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\rizyqibe]ImagePath=[%PROGRAM_FILES%]\DA937200-1449884949-11E0-8DCA-E89A8F758CD6\jnsl6086.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\qezeqofo]ImagePath=[%PROGRAM_FILES%]\DA937200-1449884949-11E0-8DCA-E89A8F758CD6\knsv5D38.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\moruxefo]ImagePath=[%APPDATA%]\2CAFA625-1428968274-D485-5661-00238B9FFD3E\jnsr4BA0.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\zizusyju]ImagePath=[%PROGRAM_FILES%]\801EE28C-1449809142-E011-8FD8-A973D633410C\hnsbACD4.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\lixotefo]ImagePath=[%PROGRAM_FILES%]\801EE28C-1449809142-E011-8FD8-A973D633410C\knsa661B.tmpfs
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\zizusyju]ImagePath=[%PROGRAM_FILES%]\60531320-1449837136-11DD-BBD7-7824AF8905EB\hnswD5E3.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\zizusyju]ImagePath=[%PROGRAM_FILES%]\046BCCA0-1449835224-11D5-9669-20CF30BCDD0A\hnss452B.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\winysequ]ImagePath=[%PROGRAM_FILES%]\046BCCA0-1449835224-11D5-9669-20CF30BCDD0A\knss128F.tmpfs
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\rizyqibe]ImagePath=[%PROGRAM_FILES%]\046BCCA0-1449835224-11D5-9669-20CF30BCDD0A\jnss2D65.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\zizusyju]ImagePath=[%PROGRAM_FILES%]\A0FDD74C-1449743032-E011-BC65-D9AB6B0EEC9B\hnssD0F9.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\zizusyju]ImagePath=[%PROGRAM_FILES%]\00000000-1449833257-0000-0000-D43D7E013364\hnsw12D.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\zizusyju]ImagePath=[%PROGRAM_FILES%]\6A0BD090-1449760930-81E3-3597-54BEF72E4B83\hnsz3D10.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\mepijiko]ImagePath=[%PROGRAM_FILES%]\6A0BD090-1449760930-81E3-3597-54BEF72E4B83\knsmDE1F.tmpfs
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\tiqocuri]ImagePath=[%PROGRAM_FILES%]\7C3CD500-1443541500-11E4-AEA8-C03FD56AEE75\knsrE67B.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\lehicewu]ImagePath=[%PROGRAM_FILES%]\7C3CD500-1443541500-11E4-AEA8-C03FD56AEE75\jnsoC22C.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\hidekoqe]ImagePath=[%LOCAL_APPDATA%]\7C3CD500-1449853110-11E4-AEA8-C03FD56AEE75\qnsg5C68.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\gyvixodu]ImagePath=[%PROGRAM_FILES%]\7C3CD500-1443541500-11E4-AEA8-C03FD56AEE75\hnskDF1C.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\zizusyju]ImagePath=[%PROGRAM_FILES%]\03000200-1449830820-0500-0006-000700080009\hnsrA8.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\rizyqibe]ImagePath=[%PROGRAM_FILES%]\03000200-1449830820-0500-0006-000700080009\jnsbA6.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\zizusyju]ImagePath=[%PROGRAM_FILES%]\79E4C690-1449760389-81E4-2536-AC9E17EEE481\hnsr3670.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\rizyqibe]ImagePath=[%PROGRAM_FILES%]\4C4C4544-1449803435-3510-804E-B7C04F5A3032\jnsr19BC.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\lofucoti]ImagePath=[%PROGRAM_FILES%]\4C4C4544-1449803435-3510-804E-B7C04F5A3032\knsq5309.tmpfs
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\woritefo]ImagePath=[%PROGRAM_FILES%]\4C4C4544-1449860509-5110-8059-C4C04F385331\knss8ED.tmpfs
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\zizusyju]ImagePath=[%PROGRAM_FILES%]\4C4C4544-1449860509-5110-8059-C4C04F385331\hnsm3891.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\rizyqibe]ImagePath=[%PROGRAM_FILES%]\4C4C4544-1449860509-5110-8059-C4C04F385331\jnsh21CA.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\hidekoqe]ImagePath=[%LOCAL_APPDATA%]\4C4C4544-1449856798-5110-8059-C4C04F385331\qnsiF9F0.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\zizusyju]ImagePath=[%PROGRAM_FILES%]\03000200-1449708267-0500-0006-000700080009\hnsh2BAA.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\xejomylo]ImagePath=[%PROGRAM_FILES%]\03000200-1449708267-0500-0006-000700080009\knsk6431.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\woforemu]ImagePath=[%LOCAL_APPDATA%]\03000200-1449697511-0500-0006-000700080009\snsc915A.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\rizyqibe]ImagePath=[%PROGRAM_FILES%]\03000200-1449708267-0500-0006-000700080009\jnsc1189.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\pusetufy]ImagePath=[%APPDATA%]\707727A0-1430270740-11DD-8A11-3085A947D735\jnsvF0B4.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\zizusyju]ImagePath=[%PROGRAM_FILES%]\23491900-1449749054-0321-2601-D89D67C7D323\hnseA13F.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\woforemu]ImagePath=[%LOCAL_APPDATA%]\23491900-1449756307-0321-2601-D89D67C7D323\snsz2F0D.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\rizyqibe]ImagePath=[%PROGRAM_FILES%]\23491900-1449749054-0321-2601-D89D67C7D323\jnsu8767.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\coqusuny]ImagePath=[%PROGRAM_FILES%]\23491900-1449749054-0321-2601-D89D67C7D323\knsj6CA0.tmpfs
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\roqenufe]ImagePath=[%PROGRAM_FILES%]\D5D09635-1449670431-11E4-A961-68F72889BAA7\jnsw4887.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\puceluxe]ImagePath=[%PROGRAM_FILES%]\D5D09635-1449670431-11E4-A961-68F72889BAA7\knsu299F.tmpfs
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\hidekoqe]ImagePath=[%LOCAL_APPDATA%]\39464E43-1449760730-3934-3639-00238BF020DD\qnsdB99.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\woxojuvu]ImagePath=[%PROGRAM_FILES%]\39464E43-1448198874-3934-3639-00238BF020DD\jnstB989.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\sycizyhy]ImagePath=[%PROGRAM_FILES%]\39464E43-1448198874-3934-3639-00238BF020DD\hnso42D6.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\lifyqeki]ImagePath=[%PROGRAM_FILES%]\39464E43-1448198874-3934-3639-00238BF020DD\knsk78C3.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\zizusyju]ImagePath=[%PROGRAM_FILES%]\B4E35B66-1449756004-1CE4-68B4-E4480434E478\hnsr3100.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\rizyqibe]ImagePath=[%PROGRAM_FILES%]\B4E35B66-1449756004-1CE4-68B4-E4480434E478\jnsb19C6.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\ficycoru]ImagePath=[%PROGRAM_FILES%]\B4E35B66-1449756004-1CE4-68B4-E4480434E478\knswFF1F.tmpfs
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\toniqobe]ImagePath=[%PROGRAM_FILES%]\909C9422-1446994836-B067-1EA9-00199956233F\hnsxE08.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\fytigebe]ImagePath=[%PROGRAM_FILES%]\909C9422-1446994836-B067-1EA9-00199956233F\knshD89E.tmpfs
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\delyfiji]ImagePath=[%LOCAL_APPDATA%]\909C9422-1447002087-B067-1EA9-00199956233F\snsc916A.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\nyneryxo]ImagePath=[%PROGRAM_FILES%]\FFFFFFFF-1449618213-FFFF-FFFF-FFFFFFFFFFFF\hnsnC96.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\woforemu]ImagePath=[%LOCAL_APPDATA%]\FFFFFFFF-1449611249-FFFF-FFFF-FFFFFFFFFFFF\snsv759D.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\roqenufe]ImagePath=[%PROGRAM_FILES%]\FFFFFFFF-1449618213-FFFF-FFFF-FFFFFFFFFFFF\jnsu5F8B.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\pywicuty]ImagePath=[%PROGRAM_FILES%]\FFFFFFFF-1449618213-FFFF-FFFF-FFFFFFFFFFFF\knsr8620.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\hidekoqe]ImagePath=[%LOCAL_APPDATA%]\FFFFFFFF-1449637112-FFFF-FFFF-FFFFFFFFFFFF\qnst9E49.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\hidekoqe]ImagePath=[%LOCAL_APPDATA%]\FFFFFFFF-1449645337-FFFF-FFFF-FFFFFFFFFFFF\qnsz403D.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\dohiquqy]ImagePath=[%PROGRAM_FILES%]\717CBCF8-1436911306-FBE2-035B-3CBB14BDB43F\knse9A75.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\roqenufe]ImagePath=[%PROGRAM_FILES%]\00000000-1449552702-0000-0000-50E549AC533C\jnsrD410.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\pywicuty]ImagePath=[%PROGRAM_FILES%]\00000000-1449552702-0000-0000-50E549AC533C\knsf6820.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\nyneryxo]ImagePath=[%PROGRAM_FILES%]\00000000-1449552702-0000-0000-50E549AC533C\hnsc3709.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\hidekoqe]ImagePath=[%LOCAL_APPDATA%]\00000000-1449654546-0000-0000-50E549AC533C\qnsr9B47.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\myfejozi]ImagePath=[%PROGRAM_FILES%]\80C7B550-1447905832-E211-9643-7427EABF718C\jnsmC536.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\kigosode]ImagePath=[%PROGRAM_FILES%]\80C7B550-1447905832-E211-9643-7427EABF718C\knsk4376.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\hidekoqe]ImagePath=[%LOCAL_APPDATA%]\80C7B550-1448383743-E211-9643-7427EABF718C\qnsr3AB1.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\bykesute]ImagePath=[%PROGRAM_FILES%]\80C7B550-1447905832-E211-9643-7427EABF718C\hnshDB57.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\woforemu]ImagePath=[%LOCAL_APPDATA%]\032B0290-1449676112-05D4-B706-1B0700080009\snsjD8A5.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\vykevuty]ImagePath=[%PROGRAM_FILES%]\032B0290-1449647247-05D4-B706-1B0700080009\knsd3674.tmpfs
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\roqenufe]ImagePath=[%PROGRAM_FILES%]\032B0290-1449647247-05D4-B706-1B0700080009\jnsy4FF3.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\nyneryxo]ImagePath=[%PROGRAM_FILES%]\032B0290-1449647247-05D4-B706-1B0700080009\hnso6865.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\hidekoqe]ImagePath=[%LOCAL_APPDATA%]\032B0290-1449676809-05D4-B706-1B0700080009\qnsd7C05.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\ceficibi]ImagePath=[%PROGRAM_FILES%]\CFF94868-1449516379-3A41-BDFF-F87CF9C0DCE8\knsp61CC.tmpfs
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\vykevuty]ImagePath=[%PROGRAM_FILES%]\03000200-1449555802-0500-0006-000700080009\knsoBB7B.tmpfs
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\roqenufe]ImagePath=[%PROGRAM_FILES%]\03000200-1449555802-0500-0006-000700080009\jnsdDAF2.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\nyneryxo]ImagePath=[%PROGRAM_FILES%]\03000200-1449555802-0500-0006-000700080009\hnsyF0C5.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\hidekoqe]ImagePath=[%LOCAL_APPDATA%]\03000200-1449598910-0500-0006-000700080009\qnse8E9A.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\woforemu]ImagePath=[%LOCAL_APPDATA%]\03000200-1449594094-0500-0006-000700080009\snswC2B8.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\roqenufe]ImagePath=[%PROGRAM_FILES%]\03000200-1449590456-0500-0006-000700080009\jnsd53B0.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\rodidezy]ImagePath=[%PROGRAM_FILES%]\03000200-1449590456-0500-0006-000700080009\knst3C2A.tmpfs
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\nyneryxo]ImagePath=[%PROGRAM_FILES%]\03000200-1449590456-0500-0006-000700080009\hnsm69AB.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\qymylofy]ImagePath=[%PROGRAM_FILES%]\4C4C4544-1446275635-4810-8038-C2C04F534A31\hnsqAEB7.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\pokorugi]ImagePath=[%PROGRAM_FILES%]\4C4C4544-1446275635-4810-8038-C2C04F534A31\jnsk9635.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\gymetoqo]ImagePath=[%PROGRAM_FILES%]\4C4C4544-1446275635-4810-8038-C2C04F534A31\knszE9B0.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\bypoduge]ImagePath=[%LOCAL_APPDATA%]\4C4C4544-1446279284-4810-8038-C2C04F534A31\snsa34A8.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\qezexymo]ImagePath=[%PROGRAM_FILES%]\4C4C4544-1437982391-4A10-8048-C8C04F314B31\knskBC75.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\gopibeko]ImagePath=[%LOCAL_APPDATA%]\4C4C4544-1437989835-4A10-8048-C8C04F314B31\snsd9705.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\comyninu]ImagePath=[%PROGRAM_FILES%]\4C4C4544-1437982391-4A10-8048-C8C04F314B31\hnsw4359.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\xixokigi]ImagePath=[%PROGRAM_FILES%]\4C4C4544-1449116305-5810-8042-C8C04F485631\hnss9355.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\komuzori]ImagePath=[%PROGRAM_FILES%]\4C4C4544-1449116305-5810-8042-C8C04F485631\jnsn47F2.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\cobutuzi]ImagePath=[%PROGRAM_FILES%]\4C4C4544-1449116305-5810-8042-C8C04F485631\knszC964.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\teguqesy]ImagePath=[%PROGRAM_FILES%]\9F14BB7D-1441034297-DF11-9240-1C75085A44E6\knsrAB26.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\hyverumu]ImagePath=[%PROGRAM_FILES%]\9F14BB7D-1439303155-DF11-9240-1C75085A44E6\jnsb2932.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\hidekoqe]ImagePath=[%LOCAL_APPDATA%]\9F14BB7D-1446481770-DF11-9240-1C75085A44E6\qnsjD941.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\comyninu]ImagePath=[%PROGRAM_FILES%]\9F14BB7D-1439303155-DF11-9240-1C75085A44E6\hnsl457A.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\tigozoce]ImagePath=[%LOCAL_APPDATA%]\1EB7B9C0-1426695301-11DD-B07D-60A44C544E85\cnsd7EF5.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\pozuqofy]ImagePath=[%LOCAL_APPDATA%]\1EB7B9C0-1429528481-11DD-B07D-60A44C544E85\insc20EB.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\cobutuzi]ImagePath=[%PROGRAM_FILES%]\03000200-1449513540-0500-0006-000700080009\knsjADF0.tmpfs
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\zucenohu]ImagePath=[%PROGRAM_FILES%]\038D0240-1448894922-053A-FD06-2E0700080009\knsi354B.tmpfs
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\xenyduje]ImagePath=[%LOCAL_APPDATA%]\038D0240-1448866166-053A-FD06-2E0700080009\snstCBB9.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\ryrojiry]ImagePath=[%PROGRAM_FILES%]\038D0240-1448894922-053A-FD06-2E0700080009\hnsd650A.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\pupivyhi]ImagePath=[%PROGRAM_FILES%]\038D0240-1448894922-053A-FD06-2E0700080009\jnsd4DE0.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\cocyhiti]ImagePath=[%PROGRAM_FILES%]\E7FDB57F-1449317163-B5F9-52CC-4F3AF623BF73\knsz9808.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\godygyhe]ImagePath=[%PROGRAM_FILES%]\00000000-1449145263-0000-0000-002185588E02\knsy1063.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\digisudo]ImagePath=[%PROGRAM_FILES%]\00000000-1449145263-0000-0000-002185588E02\hnsr19D4.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\zyvirigo]ImagePath=[%PROGRAM_FILES%]\4C4C4544-1445582542-4310-8033-C7C04F425131\jnsf714.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\dijojyvi]ImagePath=[%PROGRAM_FILES%]\4C4C4544-1445582542-4310-8033-C7C04F425131\hnsf214A.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\peqipebe]ImagePath=[%PROGRAM_FILES%]\00000000-1449112797-0000-0000-6CF049424E92\knspBA5A.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\hidekoqe]ImagePath=[%LOCAL_APPDATA%]\00000000-1449084653-0000-0000-6CF049424E92\qnsr1155.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\demynohe]ImagePath=[%PROGRAM_FILES%]\00000000-1449112797-0000-0000-6CF049424E92\jnsn7948.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\debeciqi]ImagePath=[%PROGRAM_FILES%]\00000000-1449112797-0000-0000-6CF049424E92\hnsiB61B.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\woforemu]ImagePath=[%LOCAL_APPDATA%]\00000000-1449262705-0000-0000-001A4D5778B9\snsuBFCC.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\roqenufe]ImagePath=[%PROGRAM_FILES%]\00000000-1449255459-0000-0000-001A4D5778B9\jnsp3650.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\nyneryxo]ImagePath=[%PROGRAM_FILES%]\00000000-1449255459-0000-0000-001A4D5778B9\hnsp4F4E.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\myzikimo]ImagePath=[%PROGRAM_FILES%]\00000000-1449255459-0000-0000-001A4D5778B9\knsk1C45.tmpfs
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\xidisoqe]ImagePath=[%PROGRAM_FILES%]\4D92FA20-1439722251-11D8-B87B-001B24A5D343\knsoF9D9.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\tyviwuxo]ImagePath=[%PROGRAM_FILES%]\4D92FA20-1439722251-11D8-B87B-001B24A5D343\knsl3486.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\tobywimy]ImagePath=[%PROGRAM_FILES%]\4D92FA20-1439722251-11D8-B87B-001B24A5D343\knsv3D68.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\teneqeqe]ImagePath=[%PROGRAM_FILES%]\4D92FA20-1439722251-11D8-B87B-001B24A5D343\knswD16B.tmpfs
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\hyverumu]ImagePath=[%PROGRAM_FILES%]\4D92FA20-1439722251-11D8-B87B-001B24A5D343\jnsr16CA.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\comyninu]ImagePath=[%PROGRAM_FILES%]\4D92FA20-1439722251-11D8-B87B-001B24A5D343\hnsh31AC.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\woforemu]ImagePath=[%LOCAL_APPDATA%]\4C4C4544-1449263093-3310-8052-B3C04F4E3231\snsf2DC.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\vykevuty]ImagePath=[%PROGRAM_FILES%]\4C4C4544-1449284632-3310-8052-B3C04F4E3231\knsk2AA.tmpfs
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\roqenufe]ImagePath=[%PROGRAM_FILES%]\4C4C4544-1449284632-3310-8052-B3C04F4E3231\jnsk2BC.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\nyneryxo]ImagePath=[%PROGRAM_FILES%]\4C4C4544-1449284632-3310-8052-B3C04F4E3231\hnsd2BE.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\liqusijo]ImagePath=[%APPDATA%]\1E00AF60-1436137327-4200-7845-F46D04943F94\knsyF42F.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\godygyhe]ImagePath=[%PROGRAM_FILES%]\35453035-1449266016-4435-3439-4639FFFFFFFF\knst2E14.tmpfs
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\roqenufe]ImagePath=[%PROGRAM_FILES%]\7C85C2A0-1449343385-11D5-B868-C86000EBEC92\jnsy5B45.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\nyneryxo]ImagePath=[%PROGRAM_FILES%]\7C85C2A0-1449343385-11D5-B868-C86000EBEC92\hnsp777A.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\dusypuzy]ImagePath=[%PROGRAM_FILES%]\7C85C2A0-1449343385-11D5-B868-C86000EBEC92\knss3EFD.tmpfs
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\lehicewu]ImagePath=[%PROGRAM_FILES%]\58434351-1442270114-3031-4732-08606E49E0AC\jnsh4E24.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\gyvixodu]ImagePath=[%PROGRAM_FILES%]\58434351-1442270114-3031-4732-08606E49E0AC\hnsl65D4.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\cocyhiti]ImagePath=[%PROGRAM_FILES%]\58434351-1442270114-3031-4732-08606E49E0AC\knsp9A2E.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\comyninu]ImagePath=[%PROGRAM_FILES%]\FB446DB0-1438223157-DB11-848B-0016D4F43F0E\hnsxFF40.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\xecivyqu]ImagePath=[%PROGRAM_FILES%]\6C2B1730-1449126331-7743-9883-00E0B8108871\jnsy9C09.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\qexyduse]ImagePath=[%PROGRAM_FILES%]\6C2B1730-1449126331-7743-9883-00E0B8108871\hnsxB436.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\gezewume]ImagePath=[%PROGRAM_FILES%]\6C2B1730-1449126331-7743-9883-00E0B8108871\knsk5D6D.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\zyfiroqi]ImagePath=[%PROGRAM_FILES%]\888025CA-1449152858-DC11-B1E6-0002B3BDCD59\knss5F3D.tmpfs
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\hidekoqe]ImagePath=[%LOCAL_APPDATA%]\888025CA-1449162141-DC11-B1E6-0002B3BDCD59\qnsqFC1C.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\fulewedu]ImagePath=[%PROGRAM_FILES%]\888025CA-1449152858-DC11-B1E6-0002B3BDCD59\jnsy93B1.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\digisudo]ImagePath=[%PROGRAM_FILES%]\888025CA-1449152858-DC11-B1E6-0002B3BDCD59\hnsvB276.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\toxoginy]ImagePath=[%LOCAL_APPDATA%]\7496CC75-1445730236-E011-B5DC-1C7508E256E2\snsuC6D2.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\hypubyjy]ImagePath=[%PROGRAM_FILES%]\7496CC75-1448167884-E011-B5DC-1C7508E256E2\jnsm3860.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\rebyjoki]ImagePath=[%PROGRAM_FILES%]\00000000-1441892524-0000-0000-8C89A59865BC\knslC2.tmpfs
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\lehicewu]ImagePath=[%PROGRAM_FILES%]\00000000-1441892524-0000-0000-8C89A59865BC\jnsbDE.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\gyvixodu]ImagePath=[%PROGRAM_FILES%]\00000000-1441892524-0000-0000-8C89A59865BC\hnswE1.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\nyneryxo]ImagePath=[%PROGRAM_FILES%]\00000000-1449232946-0000-0000-001D923895A7\hnsp2C0.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\woforemu]ImagePath=[%LOCAL_APPDATA%]\00000000-1449236596-0000-0000-001D923895A7\snsq767A.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\roqenufe]ImagePath=[%PROGRAM_FILES%]\00000000-1449232946-0000-0000-001D923895A7\jnsaEA83.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\lygohyci]ImagePath=[%PROGRAM_FILES%]\00000000-1449232946-0000-0000-001D923895A7\knsbB98A.tmpfs
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\piromemi]ImagePath=[%PROGRAM_FILES%]\4C4C4544-1447494027-3910-8046-C3C04F435631\hnsc1440.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\gitodefu]ImagePath=[%PROGRAM_FILES%]\4C4C4544-1447494027-3910-8046-C3C04F435631\knss66EA.tmpfs
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\citevebo]ImagePath=[%PROGRAM_FILES%]\4C4C4544-1447494027-3910-8046-C3C04F435631\jnsx97CF.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\pyzeqewe]ImagePath=[%PROGRAM_FILES%]\4B435451-1447034380-5031-4A32-50465D3B35A2\jnsz4DC2.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\vuvidivi]ImagePath=[%LOCAL_APPDATA%]\1EF325D0-1448457203-568E-6974-001B3871B07A\snsm74F4.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\mucifyfy]ImagePath=[%PROGRAM_FILES%]\1EF325D0-1448453542-568E-6974-001B3871B07A\jnsbC40B.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\jeqicuwi]ImagePath=[%PROGRAM_FILES%]\1EF325D0-1448453542-568E-6974-001B3871B07A\knshAADB.tmpfs
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\cuzihece]ImagePath=[%PROGRAM_FILES%]\1EF325D0-1448453542-568E-6974-001B3871B07A\hnsrDD0A.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\xenyduje]ImagePath=[%LOCAL_APPDATA%]\3C3AB659-1449012391-154C-B2C3-047D7B59D2BA\snsj5E99.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\ryrojiry]ImagePath=[%PROGRAM_FILES%]\3C3AB659-1449041089-154C-B2C3-047D7B59D2BA\hnsd59B8.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\pupivyhi]ImagePath=[%PROGRAM_FILES%]\3C3AB659-1449041089-154C-B2C3-047D7B59D2BA\jnso3037.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\kodudijy]ImagePath=[%PROGRAM_FILES%]\3C3AB659-1449041089-154C-B2C3-047D7B59D2BA\knsyFC55.tmpfs
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\vyfumyko]ImagePath=[%PROGRAM_FILES%]\D2C0A680-1448610107-11D5-9409-7071BC073F92\knsg3333.tmpfs
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\xixokigi]ImagePath=[%PROGRAM_FILES%]\4C4C4544-1449115430-4310-8056-C8C04F395831\hnstBECA.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\telylowy]ImagePath=[%PROGRAM_FILES%]\4C4C4544-1449115430-4310-8056-C8C04F395831\knsu80CF.tmpfs
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\hidekoqe]ImagePath=[%LOCAL_APPDATA%]\4B435451-1449159705-5031-4A32-50465D3B35A2\qnsx203F.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\gufebepe]ImagePath=[%PROGRAM_FILES%]\4B435451-1447034380-5031-4A32-50465D3B35A2\knsy9175.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\xyhedugi]ImagePath=[%PROGRAM_FILES%]\E22B48AA-1449144190-DD11-A6C2-001A9239FA9B\hnsp123.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\nygulowe]ImagePath=[%PROGRAM_FILES%]\E22B48AA-1449144190-DD11-A6C2-001A9239FA9B\jnsz121.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\lyrorili]ImagePath=[%PROGRAM_FILES%]\E22B48AA-1449144190-DD11-A6C2-001A9239FA9B\knsj117.tmpfs
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\jotiqoto]ImagePath=[%LOCAL_APPDATA%]\E22B48AA-1449147954-DD11-A6C2-001A9239FA9B\snsh14A.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\fulewedu]ImagePath=[%PROGRAM_FILES%]\F1DB33E0-1449157175-11DD-A197-14DDA98084A1\jnszEF2.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\digisudo]ImagePath=[%PROGRAM_FILES%]\F1DB33E0-1449157175-11DD-A197-14DDA98084A1\hnsi2403.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\vodyhuso]ImagePath=[%PROGRAM_FILES%]\4C4C4544-1449081473-3510-8033-B2C04F475031\jnsg3243.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\peqipebe]ImagePath=[%PROGRAM_FILES%]\4C4C4544-1449081473-3510-8033-B2C04F475031\knswF2D3.tmpfs
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\debeciqi]ImagePath=[%PROGRAM_FILES%]\4C4C4544-1449081473-3510-8033-B2C04F475031\hnsh7430.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\fiviwycu]ImagePath=[%PROGRAM_FILES%]\0A4DE000-1449046662-FFFF-FFFF-FFFFFFFFFFFF\jnsa41.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\ruryqoze]ImagePath=[%PROGRAM_FILES%]\0A4DE000-1449046662-FFFF-FFFF-FFFFFFFFFFFF\knsaE00D.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\jumefufe]ImagePath=[%PROGRAM_FILES%]\0A4DE000-1449046662-FFFF-FFFF-FFFFFFFFFFFF\hnsv21A8.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\hidekoqe]ImagePath=[%LOCAL_APPDATA%]\03000200-1449086810-0500-0006-000700080009\qnsm35C.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\ryrojiry]ImagePath=[%PROGRAM_FILES%]\03000200-1448760784-0500-0006-000700080009\hnsr6FC6.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\qogogofy]ImagePath=[%PROGRAM_FILES%]\03000200-1448760784-0500-0006-000700080009\knszD6BC.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\pupivyhi]ImagePath=[%PROGRAM_FILES%]\03000200-1448760784-0500-0006-000700080009\jnsh1160.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\ziminylu]ImagePath=[%PROGRAM_FILES%]\03000200-1448760784-0500-0006-000700080009\knse8CD1.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\wymojopy]ImagePath=[%PROGRAM_FILES%]\4C4C4544-1448903234-3510-8052-B9C04F345231\knsy2CE9.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\pupivyhi]ImagePath=[%PROGRAM_FILES%]\4C4C4544-1448903234-3510-8052-B9C04F345231\jnss3D4D.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\tonuluby]ImagePath=[%PROGRAM_FILES%]\0081A778-1448806160-DF11-B49B-EA018694A21E\knsw7F17.tmpfs
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\ryrojiry]ImagePath=[%PROGRAM_FILES%]\0081A778-1448806160-DF11-B49B-EA018694A21E\hnsrBE60.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\pupivyhi]ImagePath=[%PROGRAM_FILES%]\0081A778-1448806160-DF11-B49B-EA018694A21E\jnsmA0B1.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\wocojili]ImagePath=[%PROGRAM_FILES%]\2694F2C1-1448799950-11E4-A818-28D244C1A656\knsv570E.tmpfs
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\pupivyhi]ImagePath=[%PROGRAM_FILES%]\2694F2C1-1448799950-11E4-A818-28D244C1A656\jnsf74E0.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\tuhyhyfo]ImagePath=[%PROGRAM_FILES%]\1FBEA073-1448717885-E100-80B7-40C3E583294E\knsvBA38.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\pizenilu]ImagePath=[%PROGRAM_FILES%]\1FBEA073-1448717885-E100-80B7-40C3E583294E\knst4228.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\xunujufo]ImagePath=[%PROGRAM_FILES%]\4C4C4544-1449030397-4810-8042-B8C04F4D4D31\knsb144A.tmpfs
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\qopyduzo]ImagePath=[%PROGRAM_FILES%]\4C4C4544-1449030397-4810-8042-B8C04F4D4D31\hnsl4418.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\lyqocidy]ImagePath=[%PROGRAM_FILES%]\4C4C4544-1449030397-4810-8042-B8C04F4D4D31\jnsw2CDF.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\zusubupe]ImagePath=[%PROGRAM_FILES%]\A54EAB9D-1448894149-D34B-AB07-047D7BBCAB76\znsj14FE.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\wowyfici]ImagePath=[%PROGRAM_FILES%]\72962411-1448967020-11DD-7398-6D990C461529\knsxB6E0.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\ryrojiry]ImagePath=[%PROGRAM_FILES%]\72962411-1448967020-11DD-7398-6D990C461529\hnsdD452.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\pupivyhi]ImagePath=[%PROGRAM_FILES%]\72962411-1448967020-11DD-7398-6D990C461529\jnsnBA5A.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\hidekoqe]ImagePath=[%LOCAL_APPDATA%]\72962411-1449017587-11DD-7398-6D990C461529\qnsdED5D.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\qutywoji]ImagePath=[%PROGRAM_FILES%]\00000000-1448955593-0000-0000-001D926E40F8\knsa5A.tmpfs
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\pupivyhi]ImagePath=[%PROGRAM_FILES%]\00000000-1448955593-0000-0000-001D926E40F8\jnst6F.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\suluqufe]ImagePath=[%PROGRAM_FILES%]\03000200-1448966313-0500-0006-000700080009\knso739.tmpfs
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\xenyduje]ImagePath=[%LOCAL_APPDATA%]\03000200-1448969954-0500-0006-000700080009\snsy927A.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\ryrojiry]ImagePath=[%PROGRAM_FILES%]\03000200-1448966313-0500-0006-000700080009\hnsr3372.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\pupivyhi]ImagePath=[%PROGRAM_FILES%]\03000200-1448966313-0500-0006-000700080009\jnss1E03.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\xenyduje]ImagePath=[%LOCAL_APPDATA%]\00000000-1448822766-0000-0000-1C6F65EB99E1\snsj717.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\wyfopedo]ImagePath=[%PROGRAM_FILES%]\00000000-1448797513-0000-0000-1C6F65EB99E1\knsy4E3B.tmpfs
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\ryrojiry]ImagePath=[%PROGRAM_FILES%]\00000000-1448797513-0000-0000-1C6F65EB99E1\hnso7E29.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\pupivyhi]ImagePath=[%PROGRAM_FILES%]\00000000-1448797513-0000-0000-1C6F65EB99E1\jnsj67CA.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\qutywoji]ImagePath=[%PROGRAM_FILES%]\1E006520-1448919996-C100-D99E-E0CB4E196578\knst273A.tmpfs
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\selujepu]ImagePath=[%PROGRAM_FILES%]\1E006520-1448919996-C100-D99E-E0CB4E196578\knsu941F.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\ryrojiry]ImagePath=[%PROGRAM_FILES%]\61336366-1448756461-3534-6466-0026227B5AC5\hnst4488.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\pupivyhi]ImagePath=[%PROGRAM_FILES%]\61336366-1448756461-3534-6466-0026227B5AC5\jnsx1A98.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\jyfelihy]ImagePath=[%PROGRAM_FILES%]\61336366-1448409514-3534-6466-0026227B5AC5\knsr8930.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\hidekoqe]ImagePath=[%LOCAL_APPDATA%]\61336366-1448901821-3534-6466-0026227B5AC5\qnsx466F.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\ryrojiry]ImagePath=[%PROGRAM_FILES%]\BC1188E0-1449002187-11E2-B7E5-5453EDBB8332\hnsz1444.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\pupivyhi]ImagePath=[%PROGRAM_FILES%]\BC1188E0-1449002187-11E2-B7E5-5453EDBB8332\jnszFADE.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\fyjikehe]ImagePath=[%PROGRAM_FILES%]\BC1188E0-1449002187-11E2-B7E5-5453EDBB8332\knseD5CB.tmpfs
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\ryrojiry]ImagePath=[%PROGRAM_FILES%]\34444335-1448925464-4835-3251-6CC217627C4C\hnsw509.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\xenyduje]ImagePath=[%LOCAL_APPDATA%]\34444335-1448932706-4835-3251-6CC217627C4C\snso4A9E.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\wojygyvi]ImagePath=[%PROGRAM_FILES%]\34444335-1448925464-4835-3251-6CC217627C4C\knsmB849.tmpfs
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\pupivyhi]ImagePath=[%PROGRAM_FILES%]\34444335-1448925464-4835-3251-6CC217627C4C\jnsjE376.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\xenyduje]ImagePath=[%LOCAL_APPDATA%]\7CD2F600-1448841041-11E3-8014-A0481C8A1A75\snsi2E96.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\ryrojiry]ImagePath=[%PROGRAM_FILES%]\7CD2F600-1448830193-11E3-8014-A0481C8A1A75\hnsjBED4.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\pupivyhi]ImagePath=[%PROGRAM_FILES%]\7CD2F600-1448830193-11E3-8014-A0481C8A1A75\jnseA417.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\cejicumi]ImagePath=[%PROGRAM_FILES%]\7CD2F600-1448830193-11E3-8014-A0481C8A1A75\knsfA8D6.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\picozyko]ImagePath=[%PROGRAM_FILES%]\4C4C4544-1448770688-3310-8052-B3C04F4E3231\knsa15E.tmpfs
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\xytesyfi]ImagePath=[%PROGRAM_FILES%]\D3D0833B-1448378910-E211-9E12-2089841A0385\knsy9A1A.tmpfs
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\mycynoso]ImagePath=[%PROGRAM_FILES%]\D3D0833B-1448378910-E211-9E12-2089841A0385\hnsgD324.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\lutynyke]ImagePath=[%PROGRAM_FILES%]\D3D0833B-1448378910-E211-9E12-2089841A0385\jnszB559.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\kejuvyxe]ImagePath=[%LOCAL_APPDATA%]\D3D0833B-1448404160-E211-9E12-2089841A0385\snso4B90.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\hidekoqe]ImagePath=[%LOCAL_APPDATA%]\D3D0833B-1448408005-E211-9E12-2089841A0385\qnsbE313.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\bofewowo]ImagePath=[%PROGRAM_FILES%]\5E3616D9-1447110430-45BD-A79F-54EA5FBD3D97\hnsg597F.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\gilefywi]ImagePath=[%PROGRAM_FILES%]\1E00AA60-1447367497-2B00-3C6A-90E6BACFC288\hnszCDC9.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\zupipehe]ImagePath=[%PROGRAM_FILES%]\E1B0B8C4-1448243521-E411-A26A-480FCFDEB6EF\jnse59CE.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\sidedeny]ImagePath=[%PROGRAM_FILES%]\E1B0B8C4-1448243521-E411-A26A-480FCFDEB6EF\knshD693.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\hidekoqe]ImagePath=[%LOCAL_APPDATA%]\E1B0B8C4-1448413590-E411-A26A-480FCFDEB6EF\qnspB883.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\fytyrujo]ImagePath=[%PROGRAM_FILES%]\E1B0B8C4-1448243521-E411-A26A-480FCFDEB6EF\hnsz749B.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\hidekoqe]ImagePath=[%LOCAL_APPDATA%]\245ED2DA-1448834772-E011-885E-00235A6AA0F3\qnsi6C6.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\xenyduje]ImagePath=[%LOCAL_APPDATA%]\245ED2DA-1448580120-E011-885E-00235A6AA0F3\snsx694F.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\ryrojiry]ImagePath=[%PROGRAM_FILES%]\245ED2DA-1448587213-E011-885E-00235A6AA0F3\hnsh4B82.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\pupivyhi]ImagePath=[%PROGRAM_FILES%]\245ED2DA-1448587213-E011-885E-00235A6AA0F3\jnsx315C.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\husicofe]ImagePath=[%PROGRAM_FILES%]\245ED2DA-1448587213-E011-885E-00235A6AA0F3\knsuFC05.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\tygobygu]ImagePath=[%PROGRAM_FILES%]\A82A6EDB-1448785733-11E4-8283-54EE75286FB7\knsv7CDE.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\ryrojiry]ImagePath=[%PROGRAM_FILES%]\A82A6EDB-1448785733-11E4-8283-54EE75286FB7\hnsdCD7E.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\pupivyhi]ImagePath=[%PROGRAM_FILES%]\A82A6EDB-1448785733-11E4-8283-54EE75286FB7\jnszB83E.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\nytyzesu]ImagePath=[%PROGRAM_FILES%]\57C075D0-1448399512-81E2-2076-54BEF7038E59\knsv954.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\mycynoso]ImagePath=[%PROGRAM_FILES%]\57C075D0-1448399512-81E2-2076-54BEF7038E59\hnsxFC61.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\lutynyke]ImagePath=[%PROGRAM_FILES%]\57C075D0-1448399512-81E2-2076-54BEF7038E59\jnsmE220.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\hidekoqe]ImagePath=[%LOCAL_APPDATA%]\57C075D0-1448819975-81E2-2076-54BEF7038E59\qnsv1933.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\dovujolo]ImagePath=[%PROGRAM_FILES%]\25AF7FEE-1448169866-374E-5F29-E03F49B668CD\hnsbB9A3.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\xenyduje]ImagePath=[%LOCAL_APPDATA%]\78AF5765-1448751910-4C47-866B-3CEC1FA50612\snsf6A77.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\ryrojiry]ImagePath=[%PROGRAM_FILES%]\78AF5765-1448632193-4C47-866B-3CEC1FA50612\hnsn601C.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\pupivyhi]ImagePath=[%PROGRAM_FILES%]\78AF5765-1448726571-4C47-866B-3CEC1FA50612\jnsp9F98.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\nytyzesu]ImagePath=[%PROGRAM_FILES%]\78AF5765-1448726571-4C47-866B-3CEC1FA50612\knsk7FC3.tmpfs
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\hidekoqe]ImagePath=[%LOCAL_APPDATA%]\78AF5765-1448764410-4C47-866B-3CEC1FA50612\qnsyE8DA.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\lozuzoco]ImagePath=[%PROGRAM_FILES%]\6E77FC40-1448248088-11DD-9A64-3085A9AE870E\knsoD51.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\zupipehe]ImagePath=[%PROGRAM_FILES%]\6E77FC40-1448248088-11DD-9A64-3085A9AE870E\jnsv4EAA.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\fytyrujo]ImagePath=[%PROGRAM_FILES%]\6E77FC40-1448248088-11DD-9A64-3085A9AE870E\hnsg6799.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\xenyduje]ImagePath=[%LOCAL_APPDATA%]\00000000-1448751458-0000-0000-1C6F655B2E34\snsb36A5.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\sowokije]ImagePath=[%APPDATA%]\05790928-1432382287-11D9-A927-36346D55913A\nsr6E90.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\kycykyqi]ImagePath=[%APPDATA%]\05790928-1432382287-11D9-A927-36346D55913A\hnsi81F7.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\jebixevu]ImagePath=[%APPDATA%]\05790928-1432382287-11D9-A927-36346D55913A\jnsg63BE.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\ryrojiry]ImagePath=[%PROGRAM_FILES%]\8C165D64-1448628097-11E1-BF55-6EC25F06209E\hnsw9087.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\woqeheju]ImagePath=[%PROGRAM_FILES%]\32444335-1448802289-4630-4D42-80C16E54221D\knsn3E74.tmpfs
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\ryrojiry]ImagePath=[%PROGRAM_FILES%]\32444335-1448802289-4630-4D42-80C16E54221D\hnss8107.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\pupivyhi]ImagePath=[%PROGRAM_FILES%]\32444335-1448802289-4630-4D42-80C16E54221D\jnsy608B.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\ryrojiry]ImagePath=[%PROGRAM_FILES%]\03AA02FC-1448779177-0570-6006-D30700080009\hnsq48BD.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\pupivyhi]ImagePath=[%PROGRAM_FILES%]\03AA02FC-1448779177-0570-6006-D30700080009\jnsl31F6.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\hebiquvu]ImagePath=[%PROGRAM_FILES%]\03AA02FC-1448779177-0570-6006-D30700080009\knsw18CB.tmpfs
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\birofeko]ImagePath=[%PROGRAM_FILES%]\5AF365F6-1448703820-11DB-1088-6D990C247929\knsrCDE.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\ryrojiry]ImagePath=[%PROGRAM_FILES%]\5AF365F6-1448703820-11DB-1088-6D990C247929\hnsb8D6C.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\pupivyhi]ImagePath=[%PROGRAM_FILES%]\5AF365F6-1448703820-11DB-1088-6D990C247929\jnsa73B7.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\hidekoqe]ImagePath=[%LOCAL_APPDATA%]\03000200-1448804327-0500-0006-000700080009\qnsrE835.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\cipizebe]ImagePath=[%PROGRAM_FILES%]\03000200-1448125692-0500-0006-000700080009\knsf5637.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\ryrojiry]ImagePath=[%PROGRAM_FILES%]\63B75705-1448793830-DF11-9DFB-1C75086F89BB\hnsxD9C8.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\pupivyhi]ImagePath=[%PROGRAM_FILES%]\63B75705-1448793830-DF11-9DFB-1C75086F89BB\jnshBE98.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\mixipeku]ImagePath=[%PROGRAM_FILES%]\63B75705-1448793830-DF11-9DFB-1C75086F89BB\knscA3A3.tmpfs
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\xenyduje]ImagePath=[%LOCAL_APPDATA%]\4CE8F352-1448800832-5D46-A9C3-EB37EE934979\snss3C98.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\wocojili]ImagePath=[%PROGRAM_FILES%]\4CE8F352-1448797171-5D46-A9C3-EB37EE934979\knsd8092.tmpfs
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\ryrojiry]ImagePath=[%PROGRAM_FILES%]\4CE8F352-1448797171-5D46-A9C3-EB37EE934979\hnsoB3EF.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\pupivyhi]ImagePath=[%PROGRAM_FILES%]\4CE8F352-1448797171-5D46-A9C3-EB37EE934979\jnsy9B15.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\lohynoni]ImagePath=[%PROGRAM_FILES%]\4CE8F352-1448797171-5D46-A9C3-EB37EE934979\knsz6A5E.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\ryrojiry]ImagePath=[%PROGRAM_FILES%]\B812D100-1448656251-11D5-AD4B-0018F3681488\hnsj5080.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\pupivyhi]ImagePath=[%PROGRAM_FILES%]\B812D100-1448656251-11D5-AD4B-0018F3681488\jnsk3A27.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\nexykude]ImagePath=[%PROGRAM_FILES%]\B812D100-1448656251-11D5-AD4B-0018F3681488\knsq22FF.tmpfs
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\hidekoqe]ImagePath=[%LOCAL_APPDATA%]\B812D100-1448647871-11D5-AD4B-0018F3681488\qnslCF65.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\hidekoqe]ImagePath=[%LOCAL_APPDATA%]\20BABD7F-1448716909-11E4-9D50-90B5B20AF0FF\qnsoE4C4.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\ryrojiry]ImagePath=[%PROGRAM_FILES%]\00000000-1448711411-0000-0000-00241D52C0EA\hnsa9A6D.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\pupivyhi]ImagePath=[%PROGRAM_FILES%]\00000000-1448711411-0000-0000-00241D52C0EA\jnsk7703.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\pujonuzu]ImagePath=[%PROGRAM_FILES%]\00000000-1448711411-0000-0000-00241D52C0EA\knsa5589.tmpfs
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\fimevebo]ImagePath=[%PROGRAM_FILES%]\4E435451-1440267804-3046-4131-5404A67D234B\hnsf33E.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\nywiwymu]ImagePath=[%PROGRAM_FILES%]\4E435451-1440267804-3046-4131-5404A67D234B\knsvC482.tmpfs
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\jimocoso]ImagePath=[%PROGRAM_FILES%]\4E435451-1440267804-3046-4131-5404A67D234B\jnslEDBA.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\wuwuwytu]ImagePath=[%PROGRAM_FILES%]\3A8D394F-1446926553-2115-A30B-4C9696E6EA27\hnsxFD14.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\vyqimoce]ImagePath=[%PROGRAM_FILES%]\3A8D394F-1446926553-2115-A30B-4C9696E6EA27\jnsiE489.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\tefixebo]ImagePath=[%PROGRAM_FILES%]\3A8D394F-1446926553-2115-A30B-4C9696E6EA27\knsg58E7.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\xenyduje]ImagePath=[%LOCAL_APPDATA%]\1314478F-1448713280-F7C8-4C52-00238BB5C9AC\snskF4.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\ryrojiry]ImagePath=[%PROGRAM_FILES%]\1314478F-1448687964-F7C8-4C52-00238BB5C9AC\hnslC6.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\pyrereqy]ImagePath=[%PROGRAM_FILES%]\1314478F-1448687964-F7C8-4C52-00238BB5C9AC\knslB6.tmpfs
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\pupivyhi]ImagePath=[%PROGRAM_FILES%]\1314478F-1448687964-F7C8-4C52-00238BB5C9AC\jnsoC3.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\pupivyhi]ImagePath=[%PROGRAM_FILES%]\4C4C4544-1448607909-4B10-8043-C6C04F4A344A\jnst5F6.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\xowodofy]ImagePath=[%PROGRAM_FILES%]\4C4C4544-1448607909-4B10-8043-C6C04F4A344A\knsyE96B.tmpfs
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\xenyduje]ImagePath=[%LOCAL_APPDATA%]\4C4C4544-1448607987-4B10-8043-C6C04F4A344A\snsoEA00.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\wokemezu]ImagePath=[%PROGRAM_FILES%]\311EC940-1448622683-11DD-A8CA-002215DBD498\knsr358C.tmpfs
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\sycizyhy]ImagePath=[%PROGRAM_FILES%]\DC482C80-1448198922-1018-89F7-86F2AE83A022\hnsdCC.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\xohiboxi]ImagePath=[%PROGRAM_FILES%]\DC482C80-1448198922-1018-89F7-86F2AE83A022\knssD409.tmpfs
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\woxojuvu]ImagePath=[%PROGRAM_FILES%]\DC482C80-1448198922-1018-89F7-86F2AE83A022\jnssEC21.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\hidekoqe]ImagePath=[%LOCAL_APPDATA%]\DC482C80-1448181528-1018-89F7-86F2AE83A022\qnsmCDBC.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\fexynetu]ImagePath=[%LOCAL_APPDATA%]\DC482C80-1448180979-1018-89F7-86F2AE83A022\snsi6BCE.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\zeperehu]ImagePath=[%PROGRAM_FILES%]\00000011-1447867411-0000-0000-E03F49C59A17\knsr7191.tmpfs
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\xowijysy]ImagePath=[%LOCAL_APPDATA%]\00000011-1447892714-0000-0000-E03F49C59A17\snscC534.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\myfejozi]ImagePath=[%PROGRAM_FILES%]\00000011-1447867411-0000-0000-E03F49C59A17\jnsrE511.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\bykesute]ImagePath=[%PROGRAM_FILES%]\00000011-1447867411-0000-0000-E03F49C59A17\hnsm40F8.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\vymecuvu]ImagePath=[%PROGRAM_FILES%]\70E7CA00-1448129522-1FE6-9B7A-2D560E803CD2\knsa94B0.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\hewynibu]ImagePath=[%PROGRAM_FILES%]\70E7CA00-1448129522-1FE6-9B7A-2D560E803CD2\hnsg8278.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\fopyzyle]ImagePath=[%PROGRAM_FILES%]\70E7CA00-1448129522-1FE6-9B7A-2D560E803CD2\jnsn624B.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\pupivyhi]ImagePath=[%PROGRAM_FILES%]\34323030-1448625494-4136-3135-3537FFFFFFFF\jnsh11A.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\xenyduje]ImagePath=[%LOCAL_APPDATA%]\E39569E0-1448627027-1120-0917-083117000000\snss747C.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\zupeqyry]ImagePath=[%LOCAL_APPDATA%]\4C4C4544-1446569644-3110-8034-B5C04F324253\snsbB6F5.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\vuvidivi]ImagePath=[%LOCAL_APPDATA%]\4C4C4544-1448473114-3110-8034-B5C04F324253\snsa69BC.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\mucifyfy]ImagePath=[%PROGRAM_FILES%]\4C4C4544-1448453259-3110-8034-B5C04F324253\jnsfC7D1.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\mipowesy]ImagePath=[%PROGRAM_FILES%]\4C4C4544-1448453259-3110-8034-B5C04F324253\knsqAACA.tmpfs
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\fimixyce]ImagePath=[%PROGRAM_FILES%]\4C4C4544-1446549796-3110-8034-B5C04F324253\hnsl4E24.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\cuzihece]ImagePath=[%PROGRAM_FILES%]\4C4C4544-1448453259-3110-8034-B5C04F324253\hnsqECF0.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\xenyduje]ImagePath=[%LOCAL_APPDATA%]\578F8A1B-1448572478-9D42-9919-866F30D1B1FA\snsr2ABD.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\ryrojiry]ImagePath=[%PROGRAM_FILES%]\578F8A1B-1448565209-9D42-9919-866F30D1B1FA\hnse8B31.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\pupivyhi]ImagePath=[%PROGRAM_FILES%]\578F8A1B-1448565209-9D42-9919-866F30D1B1FA\jnsa73CF.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\huhifyzu]ImagePath=[%PROGRAM_FILES%]\578F8A1B-1448565209-9D42-9919-866F30D1B1FA\knse5861.tmpfs
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\cofejoti]ImagePath=[%APPDATA%]\C8081C18-1431745987-11DF-967B-E24A4AAB83DE\nsu8987.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\qirorejo]ImagePath=[%APPDATA%]\C8081C18-1431745987-11DF-967B-E24A4AAB83DE\hnsu665D.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\kuwyrezy]ImagePath=[%APPDATA%]\C8081C18-1431745987-11DF-967B-E24A4AAB83DE\jnsj3B26.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\kekypomu]ImagePath=[%PROGRAM_FILES%]\1B5BFA80-1448504074-0000-0000-000000000000\knsk25D8.tmpfs
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\fyjehivu]ImagePath=[%PROGRAM_FILES%]\1B5BFA80-1448504074-0000-0000-000000000000\jnsz41F5.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\ryrojiry]ImagePath=[%PROGRAM_FILES%]\405D6068-1448537921-E111-B20E-00266C212FE4\hnshA29.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\hidinibu]ImagePath=[%PROGRAM_FILES%]\80086B52-1447440529-E111-88CD-AFE942BF1666\hnsj32F.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\vykusuce]ImagePath=[%PROGRAM_FILES%]\80086B52-1447440529-E111-88CD-AFE942BF1666\knsdC04D.tmpfs
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\vehivijy]ImagePath=[%PROGRAM_FILES%]\80086B52-1447440529-E111-88CD-AFE942BF1666\jnsdE225.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\jybezile]ImagePath=[%LOCAL_APPDATA%]\80086B52-1447411777-E111-88CD-AFE942BF1666\snst696F.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\hidekoqe]ImagePath=[%LOCAL_APPDATA%]\80086B52-1448469608-E111-88CD-AFE942BF1666\qnsv890F.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\cuzihece]ImagePath=[%PROGRAM_FILES%]\03000200-1448434191-0500-0006-000700080009\hnsf735.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\munoficy]ImagePath=[%PROGRAM_FILES%]\03000200-1448434191-0500-0006-000700080009\knsc9B34.tmpfs
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\judywefi]ImagePath=[%PROGRAM_FILES%]\DBF59000-1448519143-0000-0000-000000000000\jnsq935A.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\gujejudu]ImagePath=[%PROGRAM_FILES%]\DBF59000-1448519143-0000-0000-000000000000\hnslF163.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\nysyfepi]ImagePath=[%PROGRAM_FILES%]\1072059C-1448460082-E011-9559-B870F4614D11\knsgBB2D.tmpfs
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\mucifyfy]ImagePath=[%PROGRAM_FILES%]\1072059C-1448460082-E011-9559-B870F4614D11\jnslD316.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\cuzihece]ImagePath=[%PROGRAM_FILES%]\1072059C-1448460082-E011-9559-B870F4614D11\hnsqED1D.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\dujiwucy]ImagePath=[%PROGRAM_FILES%]\1072059C-1448460082-E011-9559-B870F4614D11\knsu75F6.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\qupeguce]ImagePath=[%PROGRAM_FILES%]\1E00D6C0-1448456325-2F00-FEB4-BCAEC5BC64D8\knsp4F07.tmpfs
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\cuzihece]ImagePath=[%PROGRAM_FILES%]\1E00D6C0-1448456325-2F00-FEB4-BCAEC5BC64D8\hnsv919B.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\xolepyqo]ImagePath=[%PROGRAM_FILES%]\26384680-1448463487-81E0-34B4-BCAEC5642FE9\knso71BA.tmpfs
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\mucifyfy]ImagePath=[%PROGRAM_FILES%]\26384680-1448463487-81E0-34B4-BCAEC5642FE9\jnsr9FC5.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\cuzihece]ImagePath=[%PROGRAM_FILES%]\26384680-1448463487-81E0-34B4-BCAEC5642FE9\hnswB9E6.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\xezymore]ImagePath=[%PROGRAM_FILES%]\35354136-1448323348-3036-3034-464131314531\hnsy2BA.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\mifyqoli]ImagePath=[%PROGRAM_FILES%]\35354136-1448323348-3036-3034-464131314531\knsdC45B.tmpfs
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\hifyviro]ImagePath=[%PROGRAM_FILES%]\35354136-1448323348-3036-3034-464131314531\jnstDCD1.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\tetymoji]ImagePath=[%PROGRAM_FILES%]\26FA4588-1448317184-E411-85C7-F0761C91559C\hnsoC2F7.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\pozihemu]ImagePath=[%LOCAL_APPDATA%]\26FA4588-1448320864-E411-85C7-F0761C91559C\snsr3C2F.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\bykesute]ImagePath=[%PROGRAM_FILES%]\34444335-1447856797-3435-585A-8CDCD48595FF\hnss82E8.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\xeroduse]ImagePath=[%PROGRAM_FILES%]\03AA02FC-1446215184-054F-A006-640700080009\hnsyE01D.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\rufuwehu]ImagePath=[%LOCAL_APPDATA%]\03AA02FC-1446235061-054F-A006-640700080009\snso614E.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\pyxuxivo]ImagePath=[%PROGRAM_FILES%]\03AA02FC-1446215184-054F-A006-640700080009\jnssAAF7.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\muxecute]ImagePath=[%PROGRAM_FILES%]\03AA02FC-1446215184-054F-A006-640700080009\knstC416.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\soqydolo]ImagePath=[%PROGRAM_FILES%]\FFFFFFFF-1448337849-FFFF-FFFF-FFFFFFFFFFFF\hnsvFB1F.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\nyvegomo]ImagePath=[%LOCAL_APPDATA%]\FFFFFFFF-1448323488-FFFF-FFFF-FFFFFFFFFFFF\snsg5EF0.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\midupyqy]ImagePath=[%PROGRAM_FILES%]\FFFFFFFF-1448337849-FFFF-FFFF-FFFFFFFFFFFF\jnsgE34A.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\bipecome]ImagePath=[%PROGRAM_FILES%]\FFFFFFFF-1448337849-FFFF-FFFF-FFFFFFFFFFFF\knsvCB8F.tmpfs
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\bypedeny]ImagePath=[%PROGRAM_FILES%]\365220D1-1447081494-D776-E55F-203040506099\hnsa543B.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\xuwotowy]ImagePath=[%PROGRAM_FILES%]\6856F81D-1445617838-11E4-82A0-D05349E83B92\knstEF14.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\xuwotowy]ImagePath=[%PROGRAM_FILES%]\03000200-1447082285-0500-0006-000700080009\knsg8DF.tmpfs
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\ryjeqyju]ImagePath=[%PROGRAM_FILES%]\03000200-1447082285-0500-0006-000700080009\jnsg2367.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\bypedeny]ImagePath=[%PROGRAM_FILES%]\03000200-1447082285-0500-0006-000700080009\hnsl3B4C.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\pokorugi]ImagePath=[%PROGRAM_FILES%]\D9749700-1446404548-81E0-2040-14DAE91ABE5F\jnsa167.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\qymylofy]ImagePath=[%PROGRAM_FILES%]\D9749700-1446404548-81E0-2040-14DAE91ABE5F\hnsq1A74.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\bypoduge]ImagePath=[%LOCAL_APPDATA%]\D9749700-1446411815-81E0-2040-14DAE91ABE5F\snsvD6C1.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\xezymore]ImagePath=[%PROGRAM_FILES%]\880F8C8B-1448327746-E411-A26A-480FCFDE2154\hnsu1B80.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\momytyby]ImagePath=[%PROGRAM_FILES%]\880F8C8B-1448327746-E411-A26A-480FCFDE2154\knsxD6B9.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\totyseku]ImagePath=[%PROGRAM_FILES%]\4C4C4544-1441394526-3810-804D-C8C04F333132\hnst8A16.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\jimocoso]ImagePath=[%PROGRAM_FILES%]\4C4C4544-1441394526-3810-804D-C8C04F333132\jnsj3E46.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\zypirupy]ImagePath=[%PROGRAM_FILES%]\DC1A70A9-1448059750-DE11-9374-000EA68F7260\knsv8625.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\tesepylo]ImagePath=[%PROGRAM_FILES%]\DC1A70A9-1448059750-DE11-9374-000EA68F7260\jnsqA2EC.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\kobohixu]ImagePath=[%PROGRAM_FILES%]\DC1A70A9-1448059750-DE11-9374-000EA68F7260\hnsvBCF3.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\xywufewi]ImagePath=[%PROGRAM_FILES%]\B3199B11-1445775753-E011-B40D-1C75087BCA17\knsuAE53.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\hosysogy]ImagePath=[%PROGRAM_FILES%]\B3199B11-1445775753-E011-B40D-1C75087BCA17\jnsxB97E.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\dijojyvi]ImagePath=[%PROGRAM_FILES%]\B3199B11-1445775753-E011-B40D-1C75087BCA17\hnssDCB9.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\xezymore]ImagePath=[%PROGRAM_FILES%]\E7728080-1448327801-11D5-A881-D850E6BAFF3E\hnsk9FC.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\xunyjujo]ImagePath=[%LOCAL_APPDATA%]\E7728080-1448335039-11D5-A881-D850E6BAFF3E\snsv652B.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\muzusumi]ImagePath=[%PROGRAM_FILES%]\E7728080-1448327801-11D5-A881-D850E6BAFF3E\knswDC4C.tmpfs
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\hifyviro]ImagePath=[%PROGRAM_FILES%]\E7728080-1448327801-11D5-A881-D850E6BAFF3E\jnsgF420.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\sulyfyfe]ImagePath=[%PROGRAM_FILES%]\FEFEFEFE-1448240118-FEFE-FEFE-FEFEFEFEFEFE\hnsl73F5.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\siteloce]ImagePath=[%LOCAL_APPDATA%]\FEFEFEFE-1448233067-FEFE-FEFE-FEFEFEFEFEFE\snsn696B.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\fosoxihy]ImagePath=[%PROGRAM_FILES%]\FEFEFEFE-1448240118-FEFE-FEFE-FEFEFEFEFEFE\jnsj5733.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\dunogexe]ImagePath=[%PROGRAM_FILES%]\FEFEFEFE-1448240118-FEFE-FEFE-FEFEFEFEFEFE\knsl350F.tmpfs
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\tydomybi]ImagePath=[%APPDATA%]\5C217A40-1427899806-11E1-A125-386077D93723\nsq29B7.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\qolisyce]ImagePath=[%PROGRAM_FILES%]\4C4C4544-1448209243-5010-8059-C3C04F435631\hnsa518C.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\logifuci]ImagePath=[%PROGRAM_FILES%]\4C4C4544-1448209243-5010-8059-C3C04F435631\knsu107E.tmpfs
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\bebofixu]ImagePath=[%LOCAL_APPDATA%]\4C4C4544-1448238202-5010-8059-C3C04F435631\snsv677B.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\xeqywyby]ImagePath=[%PROGRAM_FILES%]\1E00F380-1448278301-AE00-7740-90E6BA3BBB3C\jnst9F7F.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\kunitile]ImagePath=[%PROGRAM_FILES%]\1E00F380-1448278301-AE00-7740-90E6BA3BBB3C\hnsyB716.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\hidekoqe]ImagePath=[%LOCAL_APPDATA%]\57636E80-1448118402-81DF-28C8-20CF30323D08\qnsiFA18.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\fyxemevi]ImagePath=[%PROGRAM_FILES%]\57636E80-1448113734-81DF-28C8-20CF30323D08\hnsb6125.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\lehicewu]ImagePath=[%PROGRAM_FILES%]\409905B9-1441929654-DF11-954D-00266C7CEA89\jnsi7AFB.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\gyvixodu]ImagePath=[%PROGRAM_FILES%]\409905B9-1441929654-DF11-954D-00266C7CEA89\hnsm92AB.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\dolywydy]ImagePath=[%PROGRAM_FILES%]\409905B9-1441929654-DF11-954D-00266C7CEA89\knsy398B.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\zyrymydi]ImagePath=[%LOCAL_APPDATA%]\F0F5581C-1448179329-5246-A694-64FC0D8F9D51\snslB06D.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\xosityvu]ImagePath=[%PROGRAM_FILES%]\F0F5581C-1448179279-5246-A694-64FC0D8F9D51\jnsj116D.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\wihyjyby]ImagePath=[%PROGRAM_FILES%]\F0F5581C-1448179279-5246-A694-64FC0D8F9D51\hnsz2C69.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\qefykuxy]ImagePath=[%PROGRAM_FILES%]\F0F5581C-1448179279-5246-A694-64FC0D8F9D51\knstF841.tmpfs
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\hidekoqe]ImagePath=[%LOCAL_APPDATA%]\F0F5581C-1448180735-5246-A694-64FC0D8F9D51\qnsf2653.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\pyzeqewe]ImagePath=[%PROGRAM_FILES%]\6AD8FB59-1447003996-4541-1B4F-D9AB1B57AA2B\jnsr157C.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\hidekoqe]ImagePath=[%LOCAL_APPDATA%]\6AD8FB59-1448123547-4541-1B4F-D9AB1B57AA2B\qnsjD6E7.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\zybutiwy]ImagePath=[%PROGRAM_FILES%]\2272141D-1448207933-480F-4E1D-7CA4086C46BF\jnsz70AD.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\qolisyce]ImagePath=[%PROGRAM_FILES%]\2272141D-1448207933-480F-4E1D-7CA4086C46BF\hnso889C.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\logifuci]ImagePath=[%PROGRAM_FILES%]\2272141D-1448207933-480F-4E1D-7CA4086C46BF\knsn5493.tmpfs
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\hidekoqe]ImagePath=[%LOCAL_APPDATA%]\2272141D-1448233812-480F-4E1D-7CA4086C46BF\qnsw9472.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\bebofixu]ImagePath=[%LOCAL_APPDATA%]\2272141D-1448233181-480F-4E1D-7CA4086C46BF\snsfF30D.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\hidekoqe]ImagePath=[%LOCAL_APPDATA%]\2272141D-1448235072-480F-4E1D-7CA4086C46BF\qnskCE52.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\hyverumu]ImagePath=[%PROGRAM_FILES%]\476D0100-1439861829-44F0-5600-0016D3DBAA82\jnsuAB95.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\gopibeko]ImagePath=[%LOCAL_APPDATA%]\476D0100-1439890742-44F0-5600-0016D3DBAA82\snspCD79.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\gilefywi]ImagePath=[%PROGRAM_FILES%]\476D0100-1447192361-B150-D800-0016D3DBAB88\hnscA4ED.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\comyninu]ImagePath=[%PROGRAM_FILES%]\476D0100-1439861829-44F0-5600-0016D3DBAA82\hnszD832.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\cewejyfy]ImagePath=[%PROGRAM_FILES%]\476D0100-1439861829-44F0-5600-0016D3DBAA82\knseAF49.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\xoduzeni]ImagePath=[%PROGRAM_FILES%]\20593110-1448138904-DD11-9E85-8F6FA932BF48\jnsm4F54.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\hypubyjy]ImagePath=[%PROGRAM_FILES%]\F019D148-1448172603-E311-B737-A01D48130E6E\jnsz6B49.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\hylopyvo]ImagePath=[%PROGRAM_FILES%]\F019D148-1448172603-E311-B737-A01D48130E6E\knsy500A.tmpfs
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\gebopove]ImagePath=[%LOCAL_APPDATA%]\F019D148-1448176248-E311-B737-A01D48130E6E\snsfEC23.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\dovujolo]ImagePath=[%PROGRAM_FILES%]\F019D148-1448172603-E311-B737-A01D48130E6E\hnsz84FD.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\qumuruju]ImagePath=[%PROGRAM_FILES%]\306F7CFA-1448119285-DC11-A70E-00A0D1C8BCC3\hnsnAB69.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\lesuvizo]ImagePath=[%PROGRAM_FILES%]\306F7CFA-1448119285-DC11-A70E-00A0D1C8BCC3\knsu704C.tmpfs
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\difiruso]ImagePath=[%PROGRAM_FILES%]\306F7CFA-1448119285-DC11-A70E-00A0D1C8BCC3\jnsf8B2D.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\woxojuvu]ImagePath=[%PROGRAM_FILES%]\4D866220-1448193064-11E2-86F9-089E014BD2EB\jnsr4421.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\wevoqeto]ImagePath=[%PROGRAM_FILES%]\4D866220-1448193064-11E2-86F9-089E014BD2EB\knsm266E.tmpfs
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\sycizyhy]ImagePath=[%PROGRAM_FILES%]\4D866220-1448193064-11E2-86F9-089E014BD2EB\hnsr5E09.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\hidekoqe]ImagePath=[%LOCAL_APPDATA%]\4D866220-1448223094-11E2-86F9-089E014BD2EB\qnsnF411.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\fexynetu]ImagePath=[%LOCAL_APPDATA%]\4D866220-1448218351-11E2-86F9-089E014BD2EB\snsm33BE.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\zijikige]ImagePath=[%PROGRAM_FILES%]\2F10EA00-1447791438-11B2-8000-D7861BD9C4B8\knso463E.tmpfs
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\bykesute]ImagePath=[%PROGRAM_FILES%]\2F10EA00-1447791438-11B2-8000-D7861BD9C4B8\hnse3758.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\deboqedi]ImagePath=[%PROGRAM_FILES%]\923B4BE1-1444390579-11E2-AFFA-857E8D764884\knsgE334.tmpfs
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\vyjyguci]ImagePath=[%PROGRAM_FILES%]\3210AC00-1448077025-11D9-94EA-E03F496E0D11\knshB894.tmpfs
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\kiluhugo]ImagePath=[%PROGRAM_FILES%]\3210AC00-1448077025-11D9-94EA-E03F496E0D11\hnspE450.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\jepuxeqo]ImagePath=[%LOCAL_APPDATA%]\3210AC00-1448048280-11D9-94EA-E03F496E0D11\snsc44FE.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\fupysije]ImagePath=[%PROGRAM_FILES%]\3210AC00-1448077025-11D9-94EA-E03F496E0D11\jnslCFAC.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\kiluhugo]ImagePath=[%PROGRAM_FILES%]\5D6D2A54-1448081707-FC48-BFDA-E89A8FC60D13\hnshE823.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\josuceci]ImagePath=[%PROGRAM_FILES%]\5D6D2A54-1448081707-FC48-BFDA-E89A8FC60D13\knsyB9F6.tmpfs
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\fupysije]ImagePath=[%PROGRAM_FILES%]\5D6D2A54-1448081707-FC48-BFDA-E89A8FC60D13\jnsyD228.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\tesepylo]ImagePath=[%PROGRAM_FILES%]\7D91CBDE-1448058539-E011-AE6D-8C736EA34AC8\jnseC61C.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\pibepimy]ImagePath=[%PROGRAM_FILES%]\7D91CBDE-1448058539-E011-AE6D-8C736EA34AC8\knsuA8D8.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\kobohixu]ImagePath=[%PROGRAM_FILES%]\7D91CBDE-1448058539-E011-AE6D-8C736EA34AC8\hnsuDCBA.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\hidekoqe]ImagePath=[%LOCAL_APPDATA%]\7D91CBDE-1448111077-E011-AE6D-8C736EA34AC8\qnsr22A1.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\zedepory]ImagePath=[%APPDATA%]\9D3C11C3-1434725911-4B4F-94AA-089E01CB5F9C\hnsi15A9.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\xoperoze]ImagePath=[%APPDATA%]\9D3C11C3-1434725911-4B4F-94AA-089E01CB5F9C\jnsgF899.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\wiqiquxi]ImagePath=[%PROGRAM_FILES%]\9D3C11C3-1434725911-4B4F-94AA-089E01CB5F9C\knsvDE97.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\hidekoqe]ImagePath=[%LOCAL_APPDATA%]\9D3C11C3-1448065728-4B4F-94AA-089E01CB5F9C\qnslA51F.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\vyfokeno]ImagePath=[%PROGRAM_FILES%]\FFFFFFFF-1442045429-FFFF-FFFF-FFFFFFFFFFFF\knsyEBED.tmpfs
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\lehicewu]ImagePath=[%PROGRAM_FILES%]\FFFFFFFF-1442045429-FFFF-FFFF-FFFFFFFFFFFF\jnsc26F9.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\gyvixodu]ImagePath=[%PROGRAM_FILES%]\FFFFFFFF-1442045429-FFFF-FFFF-FFFFFFFFFFFF\hnsi43D9.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\bykesute]ImagePath=[%PROGRAM_FILES%]\34444335-1448034903-4A32-3951-A01D48E35895\hnsc514.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\xowijysy]ImagePath=[%LOCAL_APPDATA%]\34444335-1448052994-4A32-3951-A01D48E35895\snsiBBA6.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\sulyripu]ImagePath=[%PROGRAM_FILES%]\34444335-1448034903-4A32-3951-A01D48E35895\knsm6B6C.tmpfs
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\myfejozi]ImagePath=[%PROGRAM_FILES%]\34444335-1448034903-4A32-3951-A01D48E35895\jnsr8F37.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\vigovety]ImagePath=[%PROGRAM_FILES%]\066F3546-1443225517-E211-879E-2CD444932319\knsk5D53.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\rovosywy]ImagePath=[%PROGRAM_FILES%]\066F3546-1443225517-E211-879E-2CD444932319\knsm12D7.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\muxesowy]ImagePath=[%PROGRAM_FILES%]\066F3546-1443225517-E211-879E-2CD444932319\knsmEAD3.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\lehicewu]ImagePath=[%PROGRAM_FILES%]\066F3546-1443225517-E211-879E-2CD444932319\jnst2EEE.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\gyvixodu]ImagePath=[%PROGRAM_FILES%]\066F3546-1443225517-E211-879E-2CD444932319\hnss4595.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\kiqidetu]ImagePath=[%PROGRAM_FILES%]\03DE0294-1447278628-0576-3506-AF0700080009\jnsa39C6.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\husyviqy]ImagePath=[%PROGRAM_FILES%]\03DE0294-1447278628-0576-3506-AF0700080009\knssC6E6.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\gilefywi]ImagePath=[%PROGRAM_FILES%]\03DE0294-1447278628-0576-3506-AF0700080009\hnsf5B1D.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\rivumysy]ImagePath=[%LOCAL_APPDATA%]\29D88AA0-1448079399-11DD-AC93-BCEE7B5D8679\snsr4A8D.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\quwuwige]ImagePath=[%PROGRAM_FILES%]\29D88AA0-1448108157-11DD-AC93-BCEE7B5D8679\jnsgD4C0.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\pibepimy]ImagePath=[%PROGRAM_FILES%]\29D88AA0-1448108157-11DD-AC93-BCEE7B5D8679\knslBCFB.tmpfs
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\hidekoqe]ImagePath=[%LOCAL_APPDATA%]\29D88AA0-1448080027-11DD-AC93-BCEE7B5D8679\qnszE395.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\fyxemevi]ImagePath=[%PROGRAM_FILES%]\29D88AA0-1448108157-11DD-AC93-BCEE7B5D8679\hnszEAAB.tmp