Exterminate It! Antimalware

malpedia

Known threats:699,742 Last Update:November 20, 22:46

Testimonials

Just want to say that apparently your Exterminate It has worked like a charm. I was infected with a most troublesome Malware Trojan that kept replicating every time McAfee found, blocked and removed it... most annoying for several days... until Mr. Google led me to your door. What a God send!

With thanks,

Tom S.

MultiPlug- Registry Values List

This is a complete list of MultiPlug registry values collected by Exterminate It!. If you find any of these registry values on your PC, your computer is very likely to be infected with the MultiPlug - adware.

IMPORTANT: Because the registry is a core component of your Windows system, it is strongly recommended that you back up the registry before you begin deleting keys and values. For information about backing up the Windows registry, refer to the Registry Editor online help.
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\xoduzeni]ImagePath=[%PROGRAM_FILES%]\791ACD00-1448141207-11E5-8104-14DDA9DC57F9\jnsl6153.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\gidisyky]ImagePath=[%PROGRAM_FILES%]\791ACD00-1448141207-11E5-8104-14DDA9DC57F9\hnsv76E7.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\gebepemi]ImagePath=[%PROGRAM_FILES%]\791ACD00-1448141207-11E5-8104-14DDA9DC57F9\knsk493A.tmpfs
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\noxecuny]ImagePath=[%PROGRAM_FILES%]\E3E1A680-1441740124-1000-85BD-00C09FC0841E\hnsg2867.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\fycuwoco]ImagePath=[%LOCAL_APPDATA%]\E3E1A680-1441747432-1000-85BD-00C09FC0841E\snsd6A87.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\lozoqilu]ImagePath=[%PROGRAM_FILES%]\53CCD48E-1448120507-E111-8E14-5C9AD85EC032\knsb4B.tmpfs
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\zymydymu]ImagePath=[%LOCAL_APPDATA%]\53CCD48E-1448127754-E111-8E14-5C9AD85EC032\snswAC98.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\qumuruju]ImagePath=[%PROGRAM_FILES%]\53CCD48E-1448120507-E111-8E14-5C9AD85EC032\hnsg2D8A.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\difiruso]ImagePath=[%PROGRAM_FILES%]\53CCD48E-1448120507-E111-8E14-5C9AD85EC032\jnsl17B7.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\totyseku]ImagePath=[%PROGRAM_FILES%]\8D8A89B3-1440661360-11DD-BBDA-7D4EB9130023\hnseA40D.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\jimocoso]ImagePath=[%PROGRAM_FILES%]\8D8A89B3-1440661360-11DD-BBDA-7D4EB9130023\jnsj8CB4.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\xowijysy]ImagePath=[%LOCAL_APPDATA%]\00000000-1448028776-0000-0000-001FD0E8CE56\snsj84CB.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\tedivudo]ImagePath=[%PROGRAM_FILES%]\00000000-1448008930-0000-0000-001FD0E8CE56\knseE3D4.tmpfs
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\myfejozi]ImagePath=[%PROGRAM_FILES%]\00000000-1448008930-0000-0000-001FD0E8CE56\jnstFF07.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\hidekoqe]ImagePath=[%LOCAL_APPDATA%]\00000000-1448029589-0000-0000-001FD0E8CE56\qnso253E.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\bykesute]ImagePath=[%PROGRAM_FILES%]\00000000-1448008930-0000-0000-001FD0E8CE56\hnso16AE.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\piromemi]ImagePath=[%PROGRAM_FILES%]\00B7F0EB-1447447780-E411-8070-B05D36145119\hnsnAB51.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\jevyxymi]ImagePath=[%PROGRAM_FILES%]\00B7F0EB-1447513467-E411-8070-B05D36145119\knsdB487.tmpfs
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\cupeqijo]ImagePath=[%PROGRAM_FILES%]\00B7F0EB-1447447780-E411-8070-B05D36145119\knsw672C.tmpfs
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\citevebo]ImagePath=[%PROGRAM_FILES%]\00B7F0EB-1447447780-E411-8070-B05D36145119\jnse8940.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\qyqimibu]ImagePath=[%PROGRAM_FILES%]\1A1BB2CA-1447964973-E111-8182-2CD44491B1FB\knsmFFB8.tmpfs
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\myfejozi]ImagePath=[%PROGRAM_FILES%]\1A1BB2CA-1447964973-E111-8182-2CD44491B1FB\jnsm1838.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\bykesute]ImagePath=[%PROGRAM_FILES%]\1A1BB2CA-1447964973-E111-8182-2CD44491B1FB\hnsq3036.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\qebovulo]ImagePath=[%LOCAL_APPDATA%]\4C4C4544-1447509117-5110-8054-B8C04F374253\snsv4481.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\piromemi]ImagePath=[%PROGRAM_FILES%]\4C4C4544-1447489230-5110-8054-B8C04F374253\hnsf5EC5.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\nykivobu]ImagePath=[%PROGRAM_FILES%]\4C4C4544-1447489230-5110-8054-B8C04F374253\knsu5A0E.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\mulicuti]ImagePath=[%PROGRAM_FILES%]\4C4C4544-1447489230-5110-8054-B8C04F374253\knsa26BE.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\foqoqege]ImagePath=[%PROGRAM_FILES%]\4C4C4544-1447489230-5110-8054-B8C04F374253\knskF9B4.tmpfs
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\citevebo]ImagePath=[%PROGRAM_FILES%]\4C4C4544-1447489230-5110-8054-B8C04F374253\jnsu41E0.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\xejofity]ImagePath=[%PROGRAM_FILES%]\F7686241-1447974845-FDEC-DDA5-1C75084BE0A5\knsgE1D0.tmpfs
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\bykesute]ImagePath=[%PROGRAM_FILES%]\F7686241-1447974845-FDEC-DDA5-1C75084BE0A5\hnsw1170.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\qugenyly]ImagePath=[%PROGRAM_FILES%]\3BE6B080-1441977781-11DC-815A-00238B752350\knss4AD.tmpfs
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\lehicewu]ImagePath=[%PROGRAM_FILES%]\3BE6B080-1441977781-11DC-815A-00238B752350\jnsg4BC.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\gyvixodu]ImagePath=[%PROGRAM_FILES%]\3BE6B080-1441977781-11DC-815A-00238B752350\hnsm4BE.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\dipubibu]ImagePath=[%LOCAL_APPDATA%]\3BE6B080-1441988661-11DC-815A-00238B752350\snst4E9.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\byqywizu]ImagePath=[%PROGRAM_FILES%]\7111EECB-1447981938-E411-85C7-F0761C8DB39A\knso5A88.tmpfs
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\bykesute]ImagePath=[%PROGRAM_FILES%]\7111EECB-1447981938-E411-85C7-F0761C8DB39A\hnstBEED.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\segusefe]ImagePath=[%PROGRAM_FILES%]\F4D678E0-1445894745-11E2-B12B-772BD80F1F00\jnsl161C.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\hojyqivu]ImagePath=[%PROGRAM_FILES%]\4C4C4544-1447977062-5A10-8037-B3C04F343032\knso50CE.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\bykesute]ImagePath=[%PROGRAM_FILES%]\4C4C4544-1447977062-5A10-8037-B3C04F343032\hnsvED9F.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\sulyripu]ImagePath=[%PROGRAM_FILES%]\03000200-1448034853-0500-0006-000700080009\knsg72A6.tmpfs
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\bykesute]ImagePath=[%PROGRAM_FILES%]\03000200-1448034853-0500-0006-000700080009\hnsbD160.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\xupyhidi]ImagePath=[%APPDATA%]\EECAF3D0-1430808258-EA45-AEC1-E437C8689F13\nsi24B5.tmpfs
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\kiqidetu]ImagePath=[%PROGRAM_FILES%]\EECAF3D0-1447193277-EA45-AEC1-E437C8689F13\jnsf6BA.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\rowemony]ImagePath=[%PROGRAM_FILES%]\EECAF3D0-1447193277-EA45-AEC1-E437C8689F13\knspEBBA.tmpfs
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\pyvyhewi]ImagePath=[%APPDATA%]\EECAF3D0-1430808258-EA45-AEC1-E437C8689F13\jnss5689.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\hidekoqe]ImagePath=[%LOCAL_APPDATA%]\EECAF3D0-1447346987-EA45-AEC1-E437C8689F13\qnst7923.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\guqilome]ImagePath=[%LOCAL_APPDATA%]\EECAF3D0-1447171725-EA45-AEC1-E437C8689F13\snse9CE2.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\gilefywi]ImagePath=[%PROGRAM_FILES%]\EECAF3D0-1447193277-EA45-AEC1-E437C8689F13\hnsn265A.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\bykesute]ImagePath=[%PROGRAM_FILES%]\46EE3F4E-1447879566-EE47-AFBC-F08A8F54AA73\hnsdE71.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\myfejozi]ImagePath=[%PROGRAM_FILES%]\46EE3F4E-1447879566-EE47-AFBC-F08A8F54AA73\jnsjF7E9.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\pudeciji]ImagePath=[%PROGRAM_FILES%]\28298958-1447570072-11DC-4B9C-6699100A3129\knsc630.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\wyzizyto]ImagePath=[%LOCAL_APPDATA%]\28298958-1447588179-11DC-4B9C-6699100A3129\snsnFFD1.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\cypelipi]ImagePath=[%PROGRAM_FILES%]\28298958-1447570072-11DC-4B9C-6699100A3129\hnsn5BA7.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\kiqidetu]ImagePath=[%PROGRAM_FILES%]\E0BB3531-1447299005-3145-B9C6-089E01657AAA\jnsj973.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\widykuse]ImagePath=[%PROGRAM_FILES%]\E0BB3531-1447299005-3145-B9C6-089E01657AAA\knsk8938.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\qedicymy]ImagePath=[%PROGRAM_FILES%]\33444335-1447922080-5A30-3848-A45D366FD6A4\knsz81BD.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\bykesute]ImagePath=[%PROGRAM_FILES%]\33444335-1447922080-5A30-3848-A45D366FD6A4\hnsrA1E7.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\wudynefy]ImagePath=[%PROGRAM_FILES%]\4C4C4544-1447954194-3910-8048-B2C04F535831\knst1C8D.tmpfs
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\myfejozi]ImagePath=[%PROGRAM_FILES%]\4C4C4544-1447954194-3910-8048-B2C04F535831\jnse354C.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\bykesute]ImagePath=[%PROGRAM_FILES%]\4C4C4544-1447954194-3910-8048-B2C04F535831\hnsf52A9.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\dojycijo]ImagePath=[%PROGRAM_FILES%]\20F3B16B-1446955023-E111-B1A6-95D0CA088414\hnsi24CD.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\qybisoly]ImagePath=[%LOCAL_APPDATA%]\3C38639D-1428323691-E111-82A4-001A9239FA9B\cnsl5383.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\nisyquwe]ImagePath=[%LOCAL_APPDATA%]\3C38639D-1428325039-E111-82A4-001A9239FA9B\inszD56E.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\vihinosu]ImagePath=[%PROGRAM_FILES%]\03000200-1446137426-0500-0006-000700080009\jnsf9194.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\ninefyci]ImagePath=[%PROGRAM_FILES%]\03000200-1446137426-0500-0006-000700080009\hnsaAB5D.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\mobusyku]ImagePath=[%PROGRAM_FILES%]\03000200-1446137426-0500-0006-000700080009\knsf770C.tmpfs
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\hidekoqe]ImagePath=[%LOCAL_APPDATA%]\03000200-1446145899-0500-0006-000700080009\qnsu48D4.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\xowijysy]ImagePath=[%LOCAL_APPDATA%]\4C4C4544-1447803324-5010-804A-B3C04F30354A\snsr871B.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\myfejozi]ImagePath=[%PROGRAM_FILES%]\4C4C4544-1447803248-5010-804A-B3C04F30354A\jnsg94B0.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\giqinino]ImagePath=[%PROGRAM_FILES%]\4C4C4544-1447803248-5010-804A-B3C04F30354A\knsw746E.tmpfs
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\myfejozi]ImagePath=[%PROGRAM_FILES%]\00968716-1447752436-E011-85F2-841BBD3ABDA0\jnsbB6CD.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\hidekoqe]ImagePath=[%LOCAL_APPDATA%]\00968716-1447843876-E011-85F2-841BBD3ABDA0\qnsfCF3B.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\cogosicu]ImagePath=[%PROGRAM_FILES%]\00968716-1447752436-E011-85F2-841BBD3ABDA0\knsg77BA.tmpfs
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\bykesute]ImagePath=[%PROGRAM_FILES%]\00968716-1447752436-E011-85F2-841BBD3ABDA0\hnsvDC29.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\piromemi]ImagePath=[%PROGRAM_FILES%]\A7081F9B-1447485266-E511-8B16-9457A5029F7B\hnseE834.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\gyduvogy]ImagePath=[%PROGRAM_FILES%]\3E5092B0-1447786313-B625-764A-705AB6267C52\knsdD555.tmpfs
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\bykesute]ImagePath=[%PROGRAM_FILES%]\3E5092B0-1447786313-B625-764A-705AB6267C52\hnsy3586.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\comobocu]ImagePath=[%PROGRAM_FILES%]\58434351-1437118505-3031-4732-50465D9A9045\knsq98D.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\zejytose]ImagePath=[%PROGRAM_FILES%]\58434351-1437118505-3031-4732-50465D9A9045\jnss8887.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\vicoqudu]ImagePath=[%PROGRAM_FILES%]\58434351-1437118505-3031-4732-50465D9A9045\hnsrA018.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\qevyhete]ImagePath=[%PROGRAM_FILES%]\FFFFFFFF-1447885672-FFFF-FFFF-FFFFFFFFFFFF\knsz7C1D.tmpfs
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\bykesute]ImagePath=[%PROGRAM_FILES%]\FFFFFFFF-1447885672-FFFF-FFFF-FFFFFFFFFFFF\hnsuBE72.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\cibykyqi]ImagePath=[%PROGRAM_FILES%]\00A7F354-1442345605-DD11-80A2-001A80F75440\knso40E3.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\sehiceqy]ImagePath=[%PROGRAM_FILES%]\34444335-1446379928-4232-4436-8CDCD48735CB\knsl5DC6.tmpfs
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\qymylofy]ImagePath=[%PROGRAM_FILES%]\34444335-1446379928-4232-4436-8CDCD48735CB\hnsb9F2C.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\pokorugi]ImagePath=[%PROGRAM_FILES%]\34444335-1446379928-4232-4436-8CDCD48735CB\jnsl84CC.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\zeneqehe]ImagePath=[%APPDATA%]\2BD1F009-1432315044-9610-9011-009C0289734B\hnsn6B32.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\xowijysy]ImagePath=[%LOCAL_APPDATA%]\006E3C53-1447803251-E211-80C1-B06D24169484\snsqEA9E.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\myfejozi]ImagePath=[%PROGRAM_FILES%]\006E3C53-1447792377-E211-80C1-B06D24169484\jnsv45C1.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\mojehimo]ImagePath=[%PROGRAM_FILES%]\006E3C53-1447792377-E211-80C1-B06D24169484\knslEC9F.tmpfs
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\hidekoqe]ImagePath=[%LOCAL_APPDATA%]\006E3C53-1447803966-E211-80C1-B06D24169484\qnsvE0B5.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\bykesute]ImagePath=[%PROGRAM_FILES%]\006E3C53-1447792377-E211-80C1-B06D24169484\hnsj6707.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\togyvume]ImagePath=[%PROGRAM_FILES%]\00000000-1446449599-0000-0000-8C89A5C4EC54\knstC1AE.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\xuzuzusu]ImagePath=[%PROGRAM_FILES%]\00000000-1447613536-0000-0000-448A5BD412FA\hnsvE6E7.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\xeriretu]ImagePath=[%PROGRAM_FILES%]\00000000-1447613536-0000-0000-448A5BD412FA\jnsqCF36.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\juwyviki]ImagePath=[%PROGRAM_FILES%]\5EA63BF8-1446073125-11DE-BD99-49D259008043\jnsg9D1.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\pybuhoni]ImagePath=[%PROGRAM_FILES%]\5EA63BF8-1446073125-11DE-BD99-49D259008043\knssBF75.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\fofinine]ImagePath=[%PROGRAM_FILES%]\5EA63BF8-1446073125-11DE-BD99-49D259008043\hnsw285B.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\jypezuru]ImagePath=[%PROGRAM_FILES%]\00000000-1447097648-0000-0000-8C89A57E2D46\hnsjF22C.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\buqurizi]ImagePath=[%PROGRAM_FILES%]\00000000-1447097648-0000-0000-8C89A57E2D46\knsjAA8A.tmpfs
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\vesusoju]ImagePath=[%PROGRAM_FILES%]\1D9A62E0-1447585648-11DD-9483-10BF48722E95\knsj306D.tmpfs
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\qufudupy]ImagePath=[%PROGRAM_FILES%]\1D9A62E0-1447585648-11DD-9483-10BF48722E95\hnsk5BBA.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\cuseseci]ImagePath=[%PROGRAM_FILES%]\1D9A62E0-1447585648-11DD-9483-10BF48722E95\jnsj46FF.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\vuxifyti]ImagePath=[%PROGRAM_FILES%]\9A991E81-1447679180-11CB-A2F8-E5086748D10D\hnst8101.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\pywifozu]ImagePath=[%PROGRAM_FILES%]\9A991E81-1447679180-11CB-A2F8-E5086748D10D\jnsa14A8.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\lezuqucy]ImagePath=[%PROGRAM_FILES%]\9A991E81-1447679180-11CB-A2F8-E5086748D10D\knsa9DE0.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\hidekoqe]ImagePath=[%LOCAL_APPDATA%]\1F004F40-1447639416-0A00-A6D0-BCAEC5445A0A\qnsrFE0F.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\fosukuby]ImagePath=[%PROGRAM_FILES%]\1F004F40-1447629522-0A00-A6D0-BCAEC5445A0A\jnsmCE56.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\cucolygo]ImagePath=[%PROGRAM_FILES%]\1F004F40-1447629522-0A00-A6D0-BCAEC5445A0A\knsrB795.tmpfs
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\bupevixo]ImagePath=[%PROGRAM_FILES%]\1F004F40-1447629522-0A00-A6D0-BCAEC5445A0A\hnsmE496.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\rowemony]ImagePath=[%PROGRAM_FILES%]\92E53800-1447191456-81E1-34F4-3085A9181DE0\knsmB65D.tmpfs
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\kiqidetu]ImagePath=[%PROGRAM_FILES%]\92E53800-1447191456-81E1-34F4-3085A9181DE0\jnsgE3F7.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\hidekoqe]ImagePath=[%LOCAL_APPDATA%]\92E53800-1447199312-81E1-34F4-3085A9181DE0\qnsl9A7D.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\gilefywi]ImagePath=[%PROGRAM_FILES%]\92E53800-1447191456-81E1-34F4-3085A9181DE0\hnswF9AB.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\gilefywi]ImagePath=[%PROGRAM_FILES%]\4C4C4544-1447169983-4610-8043-C2C04F4B3232\hnsc86CB.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\beluvuhy]ImagePath=[%PROGRAM_FILES%]\97F26218-1447440070-E411-9F6E-68F72818D918\knsb9FF.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\piromemi]ImagePath=[%PROGRAM_FILES%]\97F26218-1447440070-E411-9F6E-68F72818D918\hnsgB7F2.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\zysylisi]ImagePath=[%PROGRAM_FILES%]\00000000-1446601242-0000-0000-1C6F65E33322\knsm1AA.tmpfs
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\zemyjemo]ImagePath=[%PROGRAM_FILES%]\00000000-1446601242-0000-0000-1C6F65E33322\jnsz1C3.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\xesikubo]ImagePath=[%PROGRAM_FILES%]\00000000-1446601242-0000-0000-1C6F65E33322\knsl54E.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\rynemeqi]ImagePath=[%PROGRAM_FILES%]\00000000-1446601242-0000-0000-1C6F65E33322\knse3F2.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\liqynumy]ImagePath=[%LOCAL_APPDATA%]\00000000-1446626486-0000-0000-1C6F65E33322\snso1E8.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\joryhiru]ImagePath=[%PROGRAM_FILES%]\00000000-1446601242-0000-0000-1C6F65E33322\knst1F0.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\hidekoqe]ImagePath=[%LOCAL_APPDATA%]\00000000-1447225419-0000-0000-1C6F65E33322\qnsi180.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\guwigyry]ImagePath=[%PROGRAM_FILES%]\00000000-1446601242-0000-0000-1C6F65E33322\hnse1C8.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\kiqidetu]ImagePath=[%PROGRAM_FILES%]\00000000-1447330108-0000-0000-0021857632D7\jnsf734B.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\gilefywi]ImagePath=[%PROGRAM_FILES%]\00000000-1447330108-0000-0000-0021857632D7\hnsj8975.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\ciwihuve]ImagePath=[%PROGRAM_FILES%]\00000000-1447330108-0000-0000-0021857632D7\knsu1B42.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\qufudupy]ImagePath=[%PROGRAM_FILES%]\D3406238-1447591786-4F48-A7DD-8A42F7062146\hnsf3537.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\nidorece]ImagePath=[%PROGRAM_FILES%]\D3406238-1447591786-4F48-A7DD-8A42F7062146\knsfE77D.tmpfs
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\qufudupy]ImagePath=[%PROGRAM_FILES%]\03000200-1447648078-0500-0006-000700080009\hnslFC7B.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\ligocebi]ImagePath=[%PROGRAM_FILES%]\03000200-1447648078-0500-0006-000700080009\knsb7403.tmpfs
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\cuseseci]ImagePath=[%PROGRAM_FILES%]\03000200-1447648078-0500-0006-000700080009\jnsvA1EB.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\ceqyvuwu]ImagePath=[%LOCAL_APPDATA%]\03000200-1447619389-0500-0006-000700080009\snswBE24.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\hidekoqe]ImagePath=[%LOCAL_APPDATA%]\03000200-1447621195-0500-0006-000700080009\qnsc3778.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\qufudupy]ImagePath=[%PROGRAM_FILES%]\71140C62-1447590627-2D12-8B14-8C736EB93BB9\hnsnC5FF.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\nidorece]ImagePath=[%PROGRAM_FILES%]\71140C62-1447590627-2D12-8B14-8C736EB93BB9\knsx84B3.tmpfs
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\cuseseci]ImagePath=[%PROGRAM_FILES%]\71140C62-1447590627-2D12-8B14-8C736EB93BB9\jnssAAFE.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\zifotyki]ImagePath=[%PROGRAM_FILES%]\4C4C4544-1447594678-3510-8039-B5C04F393632\hnsm666E.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\tijucipu]ImagePath=[%PROGRAM_FILES%]\4C4C4544-1447594678-3510-8039-B5C04F393632\knsu2074.tmpfs
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\qyrytoke]ImagePath=[%PROGRAM_FILES%]\4C4C4544-1447594678-3510-8039-B5C04F393632\jnsn422B.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\xekobowo]ImagePath=[%PROGRAM_FILES%]\4C4C4544-1447594678-3510-8039-B5C04F393632\knsiDE6C.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\qukowizo]ImagePath=[%PROGRAM_FILES%]\43B9649B-1447578788-084C-B17B-047D7BCC1379\jnsw3468.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\liteseku]ImagePath=[%PROGRAM_FILES%]\43B9649B-1447578788-084C-B17B-047D7BCC1379\knsrADE5.tmpfs
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\feqyrutu]ImagePath=[%PROGRAM_FILES%]\43B9649B-1447578788-084C-B17B-047D7BCC1379\hnsh6FC5.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\hidekoqe]ImagePath=[%LOCAL_APPDATA%]\43B9649B-1447586025-084C-B17B-047D7BCC1379\qnsn846D.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\pokorugi]ImagePath=[%PROGRAM_FILES%]\47B33469-1446398443-11E0-B623-8884BF0C5087\jnsl4B6.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\qymylofy]ImagePath=[%PROGRAM_FILES%]\47B33469-1446398443-11E0-B623-8884BF0C5087\hnsv19FC.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\jofoqyze]ImagePath=[%PROGRAM_FILES%]\47B33469-1446398443-11E0-B623-8884BF0C5087\knsu16D5.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\bypoduge]ImagePath=[%LOCAL_APPDATA%]\47B33469-1446380519-11E0-B623-8884BF0C5087\snsgCE8C.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\vicoqudu]ImagePath=[%PROGRAM_FILES%]\9B1A5CA9-1437077425-1D45-942A-54A0504D9564\hnskBE1F.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\gilefywi]ImagePath=[%PROGRAM_FILES%]\AE698754-1447327347-11E3-9673-CE39E79CB301\hnsp2C7.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\wetyceto]ImagePath=[%PROGRAM_FILES%]\AE698754-1447327347-11E3-9673-CE39E79CB301\knsoCD6C.tmpfs
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\piromemi]ImagePath=[%PROGRAM_FILES%]\FD523378-1447401335-11DC-819D-7BAF9D3B24E6\hnsnE0EF.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\mewobewy]ImagePath=[%PROGRAM_FILES%]\FD523378-1447401335-11DC-819D-7BAF9D3B24E6\knss81F6.tmpfs
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\citevebo]ImagePath=[%PROGRAM_FILES%]\FD523378-1447401335-11DC-819D-7BAF9D3B24E6\jnscBEDC.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\nopuxufy]ImagePath=[%PROGRAM_FILES%]\00000000-1447506700-0000-0000-00241D117AF3\knseEE.tmpfs
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\wybomojo]ImagePath=[%PROGRAM_FILES%]\00000000-1447506700-0000-0000-00241D117AF3\knsb162.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\piromemi]ImagePath=[%PROGRAM_FILES%]\00000000-1447506700-0000-0000-00241D117AF3\hnsj109.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\citevebo]ImagePath=[%PROGRAM_FILES%]\00000000-1447506700-0000-0000-00241D117AF3\jnsh107.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\kiqidetu]ImagePath=[%PROGRAM_FILES%]\20D6FB6E-1447231787-DB11-8564-001DBA71FF7A\jnsrBAC4.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\jonyxuki]ImagePath=[%PROGRAM_FILES%]\20D6FB6E-1447231787-DB11-8564-001DBA71FF7A\knsn7F6A.tmpfs
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\gilefywi]ImagePath=[%PROGRAM_FILES%]\20D6FB6E-1447231787-DB11-8564-001DBA71FF7A\hnsvDED8.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\piromemi]ImagePath=[%PROGRAM_FILES%]\D8E41704-1447454574-11DF-90BA-31A09ACE9A12\hnsy8CA2.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\jopofuvu]ImagePath=[%PROGRAM_FILES%]\D8E41704-1447454574-11DF-90BA-31A09ACE9A12\knsi3D52.tmpfs
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\citevebo]ImagePath=[%PROGRAM_FILES%]\D8E41704-1447454574-11DF-90BA-31A09ACE9A12\jnss6310.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\zekobumu]ImagePath=[%PROGRAM_FILES%]\21C37320-1440573762-11DD-BF83-74D02B285887\knssFDB9.tmpfs
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\jimocoso]ImagePath=[%PROGRAM_FILES%]\21C37320-1440573762-11DD-BF83-74D02B285887\jnsx2D66.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\fimevebo]ImagePath=[%PROGRAM_FILES%]\21C37320-1440573762-11DD-BF83-74D02B285887\hnsn4896.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\xipojyqy]ImagePath=[%LOCAL_APPDATA%]\F2BCDB3B-1446213327-4C09-7C2D-A02BB8259E42\snsw44E.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\wokocugu]ImagePath=[%PROGRAM_FILES%]\F2BCDB3B-1446206047-4C09-7C2D-A02BB8259E42\hnsx87DA.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\topuheje]ImagePath=[%PROGRAM_FILES%]\F2BCDB3B-1446206047-4C09-7C2D-A02BB8259E42\knsi82C4.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\qidizefo]ImagePath=[%PROGRAM_FILES%]\F2BCDB3B-1446206047-4C09-7C2D-A02BB8259E42\jnsu5A21.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\hidekoqe]ImagePath=[%LOCAL_APPDATA%]\F2BCDB3B-1447504069-4C09-7C2D-A02BB8259E42\qnsvB17D.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\piromemi]ImagePath=[%PROGRAM_FILES%]\03000200-1447496189-0500-0006-000700080009\hnso888E.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\nykivobu]ImagePath=[%PROGRAM_FILES%]\03000200-1447496189-0500-0006-000700080009\knsg5C84.tmpfs
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\vuzudohy]ImagePath=[%PROGRAM_FILES%]\1A739B81-1446564765-11CB-8824-B354AE7283C6\jnsl7BE.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\qebovulo]ImagePath=[%LOCAL_APPDATA%]\1A739B81-1447460082-11CB-8824-B354AE7283C6\snseCAFC.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\posikeju]ImagePath=[%PROGRAM_FILES%]\1A739B81-1446564765-11CB-8824-B354AE7283C6\hnsq203F.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\piromemi]ImagePath=[%PROGRAM_FILES%]\1A739B81-1447452664-11CB-8824-B354AE7283C6\hnsi64EA.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\juqoqimu]ImagePath=[%PROGRAM_FILES%]\1A739B81-1447452664-11CB-8824-B354AE7283C6\knsg22EC.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\hidekoqe]ImagePath=[%LOCAL_APPDATA%]\1A739B81-1447460775-11CB-8824-B354AE7283C6\qnst673B.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\cutumuty]ImagePath=[%PROGRAM_FILES%]\1A739B81-1447452664-11CB-8824-B354AE7283C6\knshA7B3.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\citevebo]ImagePath=[%PROGRAM_FILES%]\1A739B81-1447452664-11CB-8824-B354AE7283C6\jnsd2395.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\zyvirigo]ImagePath=[%PROGRAM_FILES%]\A0B22400-1445552743-11E4-AFD8-A0D3C124DE30\jnsuB569.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\redewudu]ImagePath=[%PROGRAM_FILES%]\A0B22400-1445552743-11E4-AFD8-A0D3C124DE30\knscBC80.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\dijojyvi]ImagePath=[%PROGRAM_FILES%]\A0B22400-1445552743-11E4-AFD8-A0D3C124DE30\hnsaD193.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\vicoqudu]ImagePath=[%PROGRAM_FILES%]\E8EA6A60-1437494058-11DD-97C5-00238B9D50AA\hnsa86DD.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\hyverumu]ImagePath=[%PROGRAM_FILES%]\E8EA6A60-1437494058-11DD-97C5-00238B9D50AA\jnsk471D.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\bicuziwy]ImagePath=[%PROGRAM_FILES%]\E8EA6A60-1437494058-11DD-97C5-00238B9D50AA\knsaE26D.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\pubywiwu]ImagePath=[%PROGRAM_FILES%]\4C4C4544-1447517794-3710-8030-C2C04F563332\knsi8FAA.tmpfs
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\piromemi]ImagePath=[%PROGRAM_FILES%]\4C4C4544-1447517794-3710-8030-C2C04F563332\hnstC3A3.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\vugefyde]ImagePath=[%PROGRAM_FILES%]\03000200-1446743462-0500-0006-000700080009\knsnF0A0.tmpfs
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\quxoxoju]ImagePath=[%PROGRAM_FILES%]\03000200-1447083861-0500-0006-000700080009\hnswD09D.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\lehicewu]ImagePath=[%PROGRAM_FILES%]\B1BC2541-1442164587-67F4-179C-6A62B647DC27\jnsrCE40.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\gyvixodu]ImagePath=[%PROGRAM_FILES%]\B1BC2541-1442164587-67F4-179C-6A62B647DC27\hnspE3AE.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\gygycopo]ImagePath=[%PROGRAM_FILES%]\B1BC2541-1442164587-67F4-179C-6A62B647DC27\knse7993.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\ligybude]ImagePath=[%PROGRAM_FILES%]\00000000-1447330108-0000-0000-0021857632D7\knssCB2.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\gytihoke]ImagePath=[%APPDATA%]\E0673816-1434776819-DD11-B848-C4232AD9EA2C\knsdBA4C.tmpfs
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\hyverumu]ImagePath=[%PROGRAM_FILES%]\A0E2CF40-1439424976-11DD-9242-60A44C592463\jnsoC35D.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\cyxebymi]ImagePath=[%PROGRAM_FILES%]\A0E2CF40-1439424976-11DD-9242-60A44C592463\knszA82A.tmpfs
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\comyninu]ImagePath=[%PROGRAM_FILES%]\A0E2CF40-1439424976-11DD-9242-60A44C592463\hnsjDC3C.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\kiqidetu]ImagePath=[%PROGRAM_FILES%]\4C4C4544-1447342970-4E10-805A-B2C04F38334A\jnsn62.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\guqilome]ImagePath=[%LOCAL_APPDATA%]\4C4C4544-1447346620-4E10-805A-B2C04F38334A\snsx92.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\gilefywi]ImagePath=[%PROGRAM_FILES%]\4C4C4544-1447342970-4E10-805A-B2C04F38334A\hnsh70.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\hidekoqe]ImagePath=[%LOCAL_APPDATA%]\4C4C4544-1447347198-4E10-805A-B2C04F38334A\qnsl135.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\pokorugi]ImagePath=[%PROGRAM_FILES%]\38423338-1446279316-3032-3632-443231314531\jnsx80C2.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\kepepolu]ImagePath=[%PROGRAM_FILES%]\38423338-1446279316-3032-3632-443231314531\knsh689A.tmpfs
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\hidekoqe]ImagePath=[%LOCAL_APPDATA%]\38423338-1446287146-3032-3632-443231314531\qnsgFD34.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\binorose]ImagePath=[%PROGRAM_FILES%]\427A52F8-1439461604-11DC-BBDA-FE78785B000F\knsq3CA3.tmpfs
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\piromemi]ImagePath=[%PROGRAM_FILES%]\03AA02FC-1447404911-0576-2706-190700080009\hnsk7BD6.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\nocelizu]ImagePath=[%PROGRAM_FILES%]\03AA02FC-1447404911-0576-2706-190700080009\knsu4228.tmpfs
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\citevebo]ImagePath=[%PROGRAM_FILES%]\03AA02FC-1447404911-0576-2706-190700080009\jnsj61ED.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\xeroduse]ImagePath=[%PROGRAM_FILES%]\00000000-1446219912-0000-0000-001FD064C476\hnsuA33F.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\pyxuxivo]ImagePath=[%PROGRAM_FILES%]\00000000-1446219912-0000-0000-001FD064C476\jnsu8CB1.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\jevefyhy]ImagePath=[%PROGRAM_FILES%]\00000000-1446219912-0000-0000-001FD064C476\knsj751A.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\cezucihy]ImagePath=[%PROGRAM_FILES%]\880589F0-1447439829-81F5-3FBC-BCEE7B14B067\knslBED.tmpfs
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\qebovulo]ImagePath=[%LOCAL_APPDATA%]\880589F0-1447443469-81F5-3FBC-BCEE7B14B067\snsd9D67.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\piromemi]ImagePath=[%PROGRAM_FILES%]\880589F0-1447439829-81F5-3FBC-BCEE7B14B067\hnsk3BB0.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\citevebo]ImagePath=[%PROGRAM_FILES%]\880589F0-1447439829-81F5-3FBC-BCEE7B14B067\jnsr2529.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\widumipe]ImagePath=[%PROGRAM_FILES%]\234DE000-1443134153-FFFF-FFFF-FFFFFFFFFFFF\knsi2A27.tmpfs
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\lehicewu]ImagePath=[%PROGRAM_FILES%]\234DE000-1443134153-FFFF-FFFF-FFFFFFFFFFFF\jnsn4A4A.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\gyvixodu]ImagePath=[%PROGRAM_FILES%]\234DE000-1443134153-FFFF-FFFF-FFFFFFFFFFFF\hnsn6912.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\piromemi]ImagePath=[%PROGRAM_FILES%]\038D0240-1447417349-0521-3B06-6C0700080009\hnsp9C41.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\lomebimi]ImagePath=[%PROGRAM_FILES%]\038D0240-1447417349-0521-3B06-6C0700080009\knsf62B3.tmpfs
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\citevebo]ImagePath=[%PROGRAM_FILES%]\038D0240-1447417349-0521-3B06-6C0700080009\jnsu80F2.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\kopufyti]ImagePath=[%PROGRAM_FILES%]\3091FC80-1447207956-11E1-A79A-9C8E99F3ABAE\knss1D88.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\kiqidetu]ImagePath=[%PROGRAM_FILES%]\3091FC80-1447207956-11E1-A79A-9C8E99F3ABAE\jnss80D1.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\gilefywi]ImagePath=[%PROGRAM_FILES%]\3091FC80-1447207956-11E1-A79A-9C8E99F3ABAE\hnsc998B.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\piqexugy]ImagePath=[%PROGRAM_FILES%]\110050A0-1447275314-7901-40D9-00E018BFC099\knsdE5FB.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\kiqidetu]ImagePath=[%PROGRAM_FILES%]\110050A0-1447275314-7901-40D9-00E018BFC099\jnsoE0BE.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\gilefywi]ImagePath=[%PROGRAM_FILES%]\110050A0-1447275314-7901-40D9-00E018BFC099\hnsdF671.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\fipufuwu]ImagePath=[%PROGRAM_FILES%]\7AB0C94B-1446735855-11E3-9302-28D244653895\hnsbF76C.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\kixeqecu]ImagePath=[%PROGRAM_FILES%]\58435451-1447267173-3031-4732-3085A97F2A06\knsu9CA8.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\kiqidetu]ImagePath=[%PROGRAM_FILES%]\58435451-1447267173-3031-4732-3085A97F2A06\jnsiB2BE.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\gilefywi]ImagePath=[%PROGRAM_FILES%]\58435451-1447267173-3031-4732-3085A97F2A06\hnstD129.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\tudyxibo]ImagePath=[%PROGRAM_FILES%]\03000200-1447203804-0500-0006-000700080009\knsj614.tmpfs
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\kiqidetu]ImagePath=[%PROGRAM_FILES%]\03000200-1447203804-0500-0006-000700080009\jnst1F20.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\gilefywi]ImagePath=[%PROGRAM_FILES%]\03000200-1447203804-0500-0006-000700080009\hnsa3C01.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\xujimojy]ImagePath=[%PROGRAM_FILES%]\00000011-1447094741-0000-0000-BCEE7BB389C4\knsh7816.tmpfs
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\wilomefe]ImagePath=[%PROGRAM_FILES%]\00000011-1447094741-0000-0000-BCEE7BB389C4\jnsh9AD8.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\jypezuru]ImagePath=[%PROGRAM_FILES%]\00000011-1447094741-0000-0000-BCEE7BB389C4\hnshBA8A.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\kiqidetu]ImagePath=[%PROGRAM_FILES%]\B1B00780-1447338143-1012-A630-A969794EB523\jnsbF3F.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\riciforu]ImagePath=[%PROGRAM_FILES%]\B1B00780-1447338143-1012-A630-A969794EB523\knsbEC2F.tmpfs
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\hidekoqe]ImagePath=[%LOCAL_APPDATA%]\B1B00780-1447325987-1012-A630-A969794EB523\qnsu1BDE.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\guqilome]ImagePath=[%LOCAL_APPDATA%]\B1B00780-1447323794-1012-A630-A969794EB523\snsgA364.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\gilefywi]ImagePath=[%PROGRAM_FILES%]\B1B00780-1447338143-1012-A630-A969794EB523\hnsw3670.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\kiqidetu]ImagePath=[%PROGRAM_FILES%]\8D543E2C-1447170583-11DD-B0CC-AF26CFFF06E4\jnsj77E6.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\hidekoqe]ImagePath=[%LOCAL_APPDATA%]\8D543E2C-1447335156-11DD-B0CC-AF26CFFF06E4\qnsk3D14.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\tecocure]ImagePath=[%PROGRAM_FILES%]\4C4C4544-1447279039-3810-8031-B7C04F50344A\knsd1BFD.tmpfs
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\kiqidetu]ImagePath=[%PROGRAM_FILES%]\4C4C4544-1447279039-3810-8031-B7C04F50344A\jnsy3DB6.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\gilefywi]ImagePath=[%PROGRAM_FILES%]\4C4C4544-1447279039-3810-8031-B7C04F50344A\hnsd5BB3.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\gilefywi]ImagePath=[%PROGRAM_FILES%]\FFFFFFFF-1447337222-FFFF-FFFF-FFFFFFFFFFFF\hnsh6D9.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\xyfovoty]ImagePath=[%PROGRAM_FILES%]\FFFFFFFF-1447337222-FFFF-FFFF-FFFFFFFFFFFF\knsrCBA5.tmpfs
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\kiqidetu]ImagePath=[%PROGRAM_FILES%]\FFFFFFFF-1447337222-FFFF-FFFF-FFFFFFFFFFFF\jnssE6CA.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\kiqidetu]ImagePath=[%PROGRAM_FILES%]\175BFA80-1447279802-0000-0000-000000000000\jnsv68C3.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\hopycity]ImagePath=[%PROGRAM_FILES%]\175BFA80-1447279802-0000-0000-000000000000\knss4806.tmpfs
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\gilefywi]ImagePath=[%PROGRAM_FILES%]\175BFA80-1447279802-0000-0000-000000000000\hnsj7E41.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\hidekoqe]ImagePath=[%LOCAL_APPDATA%]\4C4C4544-1447317339-3010-8038-C3C04F353032\qnsm6578.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\gilefywi]ImagePath=[%PROGRAM_FILES%]\3418BB80-1447178084-81E1-20A0-C8600001CEF4\hnsm169D.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\ninefyci]ImagePath=[%PROGRAM_FILES%]\C405F12C-1446188390-BF46-AFE4-8C1B9850ACF9\hnsaF49.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\punoripe]ImagePath=[%PROGRAM_FILES%]\00000000-1445875515-0000-0000-001FD05BA47F\knsxBD65.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\himucyxe]ImagePath=[%PROGRAM_FILES%]\00000000-1445875515-0000-0000-001FD05BA47F\jnsu4CEB.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\hidekoqe]ImagePath=[%LOCAL_APPDATA%]\00000000-1447262782-0000-0000-001FD05BA47F\qnsrF539.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\nyhylycu]ImagePath=[%PROGRAM_FILES%]\9663E5EE-1447250240-DD11-9B2B-000EA68F7260\knsrF3DD.tmpfs
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\kiqidetu]ImagePath=[%PROGRAM_FILES%]\9663E5EE-1447250240-DD11-9B2B-000EA68F7260\jnsh1307.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\gilefywi]ImagePath=[%PROGRAM_FILES%]\9663E5EE-1447250240-DD11-9B2B-000EA68F7260\hnsm2FCC.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\nyhylycu]ImagePath=[%PROGRAM_FILES%]\40D2AB52-1444979872-E211-BDAD-FD5E57CD675D\knsn1E19.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\nelofegu]ImagePath=[%PROGRAM_FILES%]\03D40274-1447205989-0566-3306-A10700080009\knsf78B0.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\kiqidetu]ImagePath=[%PROGRAM_FILES%]\03D40274-1447205989-0566-3306-A10700080009\jnsoDE9F.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\hidekoqe]ImagePath=[%LOCAL_APPDATA%]\03D40274-1447259744-0566-3306-A10700080009\qnsfC48B.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\guqilome]ImagePath=[%LOCAL_APPDATA%]\03D40274-1447234858-0566-3306-A10700080009\snsv61EB.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\gilefywi]ImagePath=[%PROGRAM_FILES%]\03D40274-1447205989-0566-3306-A10700080009\hnswFF29.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\totyseku]ImagePath=[%PROGRAM_FILES%]\40157272-1441458752-E211-8446-208984DAEF6D\hnst64D0.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\jimocoso]ImagePath=[%PROGRAM_FILES%]\40157272-1441458752-E211-8446-208984DAEF6D\jnsi4A41.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\fupugeco]ImagePath=[%PROGRAM_FILES%]\40157272-1441458752-E211-8446-208984DAEF6D\knsqCAAD.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\hidekoqe]ImagePath=[%LOCAL_APPDATA%]\4B435451-1447144164-5031-4A32-50465D3B35A2\qnsmC43A.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\fihucune]ImagePath=[%PROGRAM_FILES%]\4B435451-1447034380-5031-4A32-50465D3B35A2\knsfDAFE.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\dijekehy]ImagePath=[%APPDATA%]\4C4C4544-1429968981-4310-8032-B4C04F31324A\jnsx7F.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\vopiwiti]ImagePath=[%PROGRAM_FILES%]\4C4C4544-1429968981-4310-8032-B4C04F31324A\knsx335.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\xoxoceji]ImagePath=[%PROGRAM_FILES%]\7C22D668-1445404516-C946-878A-C45444985569\knspC910.tmpfs
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\mywimyfo]ImagePath=[%PROGRAM_FILES%]\7C22D668-1445404516-C946-878A-C45444985569\jnscE9BD.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\dijojyvi]ImagePath=[%PROGRAM_FILES%]\7C22D668-1445404516-C946-878A-C45444985569\hnsc2939.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\vyqimoce]ImagePath=[%PROGRAM_FILES%]\48A7CF40-1446925892-11DD-BF17-C86000E22D07\jnsx6.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\wuwuwytu]ImagePath=[%PROGRAM_FILES%]\48A7CF40-1446925892-11DD-BF17-C86000E22D07\hnsx1646.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\pidifybu]ImagePath=[%PROGRAM_FILES%]\4C4C4544-1447176049-3910-805A-C3C04F343332\knsx5D7A.tmpfs
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\guqilome]ImagePath=[%LOCAL_APPDATA%]\4C4C4544-1447176089-3910-805A-C3C04F343332\snsoED6E.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\gilefywi]ImagePath=[%PROGRAM_FILES%]\4C4C4544-1447176049-3910-805A-C3C04F343332\hnsp958A.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\punutume]ImagePath=[%PROGRAM_FILES%]\03000200-1446772519-0500-0006-000700080009\jnso1CC5.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\newemiti]ImagePath=[%PROGRAM_FILES%]\03000200-1446772519-0500-0006-000700080009\knsu93D1.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\fipufuwu]ImagePath=[%PROGRAM_FILES%]\03000200-1446772519-0500-0006-000700080009\hnsy3F73.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\fejoloky]ImagePath=[%APPDATA%]\44B0435E-1429403118-1341-9685-047D7BDEA3AB\jnst8296.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\soziqoce]ImagePath=[%PROGRAM_FILES%]\1C9A2DD0-1446714840-DC11-8593-0011110F083F\jnsr113.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\kofotodu]ImagePath=[%PROGRAM_FILES%]\1C9A2DD0-1446714840-DC11-8593-0011110F083F\hnsq115.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\juvexuci]ImagePath=[%LOCAL_APPDATA%]\1C9A2DD0-1446718495-DC11-8593-0011110F083F\snso142.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\hidekoqe]ImagePath=[%LOCAL_APPDATA%]\1C9A2DD0-1446823866-DC11-8593-0011110F083F\qnsx41D.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\liqefosi]ImagePath=[%PROGRAM_FILES%]\D2AD16A4-1439310715-11E0-AB08-F309607E2740\knsz25B6.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\xizozeko]ImagePath=[%PROGRAM_FILES%]\03000200-1447064488-0500-0006-000700080009\knsh86F4.tmpfs
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\xixisejy]ImagePath=[%LOCAL_APPDATA%]\4148C2AA-1432210207-C167-E848-D027889CA0E6\snsqE39C.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\wojefybe]ImagePath=[%PROGRAM_FILES%]\1D606720-1446748402-11DD-BB6B-7824AF41AA09\knsb26AA.tmpfs
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\fipufuwu]ImagePath=[%PROGRAM_FILES%]\1D606720-1446748402-11DD-BB6B-7824AF41AA09\hnsw7271.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\toniqobe]ImagePath=[%PROGRAM_FILES%]\095DD699-1447048342-3DD7-35A6-B65615F98C0D\hnsmB9CF.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\pyzeqewe]ImagePath=[%PROGRAM_FILES%]\095DD699-1447048342-3DD7-35A6-B65615F98C0D\jnswA10F.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\mepedygo]ImagePath=[%PROGRAM_FILES%]\095DD699-1447048342-3DD7-35A6-B65615F98C0D\knsb7596.tmpfs
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\dijojyvi]ImagePath=[%PROGRAM_FILES%]\5DBAEA4A-1444791609-57D3-5F7B-1A297095DBD6\hnsu22FE.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\dymivopo]ImagePath=[%PROGRAM_FILES%]\5DBAEA4A-1444791609-57D3-5F7B-1A297095DBD6\jnsuDF6.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\zoqisido]ImagePath=[%PROGRAM_FILES%]\03000200-1445153761-0500-0006-000700080009\knsyA15.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\myqityze]ImagePath=[%PROGRAM_FILES%]\03000200-1445153761-0500-0006-000700080009\jnsz3CC0.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\dijojyvi]ImagePath=[%PROGRAM_FILES%]\03000200-1445153761-0500-0006-000700080009\hnsp5684.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\xeroduse]ImagePath=[%PROGRAM_FILES%]\23717D90-1446215550-3E6F-19C0-60029236EE73\hnsy1D37.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\hidekoqe]ImagePath=[%LOCAL_APPDATA%]\23717D90-1446734526-3E6F-19C0-60029236EE73\qnsxEBD3.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\vihinosu]ImagePath=[%PROGRAM_FILES%]\69E824AF-1446140940-ED4B-B5B5-01415D959649\jnsh3752.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\ruzumufi]ImagePath=[%PROGRAM_FILES%]\69E824AF-1446140940-ED4B-B5B5-01415D959649\knsv182C.tmpfs
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\ninefyci]ImagePath=[%PROGRAM_FILES%]\69E824AF-1446140940-ED4B-B5B5-01415D959649\hnsr4E38.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\hidekoqe]ImagePath=[%LOCAL_APPDATA%]\69000160-1446938238-4393-0CF1-50465DB4AD69\qnszDD57.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\hidekoqe]ImagePath=[%LOCAL_APPDATA%]\69000160-1447014412-4393-0CF1-50465DB4AD69\qnsz5AB3.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\nypunury]ImagePath=[%PROGRAM_FILES%]\253CE480-1446906221-11DF-AAB3-E0CB4EECFF54\hnsnAF5A.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\nojivoki]ImagePath=[%PROGRAM_FILES%]\253CE480-1446906221-11DF-AAB3-E0CB4EECFF54\knspAEF8.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\lukiryze]ImagePath=[%PROGRAM_FILES%]\253CE480-1446906221-11DF-AAB3-E0CB4EECFF54\jnsc97F1.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\nykijogy]ImagePath=[%PROGRAM_FILES%]\2E5D592D-1446019175-E111-8929-505054503030\jnskFF6B.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\huhuwyru]ImagePath=[%PROGRAM_FILES%]\2E5D592D-1446019175-E111-8929-505054503030\knsuDA7D.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\dijojyvi]ImagePath=[%PROGRAM_FILES%]\2E5D592D-1446019175-E111-8929-505054503030\hnse168F.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\hyxyvifo]ImagePath=[%PROGRAM_FILES%]\4C4C4544-1441647782-5410-8046-B7C04F505031\knshDA66.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\gupigiby]ImagePath=[%APPDATA%]\00000000-1423968309-0000-0000-6C626D9217A5\nsj93B4.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\wyroxowe]ImagePath=[%PROGRAM_FILES%]\85F7EA6C-1446109871-E211-83C6-B888E3FC252B\jnsz1D76.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\qyxidufo]ImagePath=[%LOCAL_APPDATA%]\85F7EA6C-1446129823-E211-83C6-B888E3FC252B\snsjE6AF.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\fofinine]ImagePath=[%PROGRAM_FILES%]\85F7EA6C-1446109871-E211-83C6-B888E3FC252B\hnsv3B50.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\dyviripi]ImagePath=[%PROGRAM_FILES%]\85F7EA6C-1446109871-E211-83C6-B888E3FC252B\knsuD497.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\wyfupeky]ImagePath=[%PROGRAM_FILES%]\DD6CA73F-1446717936-E011-9F76-B870F4F923F5\knst14F2.tmpfs
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\wivysytu]ImagePath=[%PROGRAM_FILES%]\DD6CA73F-1446717936-E011-9F76-B870F4F923F5\jnst2D0A.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\dyguniny]ImagePath=[%PROGRAM_FILES%]\DD6CA73F-1446717936-E011-9F76-B870F4F923F5\hnsz431C.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\gyvixodu]ImagePath=[%PROGRAM_FILES%]\36FDCC40-1443501719-11E1-86B5-F0BF9703978A\hnscEA27.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\butyviwo]ImagePath=[%PROGRAM_FILES%]\36FDCC40-1443501719-11E1-86B5-F0BF9703978A\knspB7DE.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\lehicewu]ImagePath=[%PROGRAM_FILES%]\4C4C4544-1441973087-3910-8059-CAC04F383132\jnsi22FD.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\gyvixodu]ImagePath=[%PROGRAM_FILES%]\4C4C4544-1441973087-3910-8059-CAC04F383132\hnsx4AAA.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\biwyvege]ImagePath=[%PROGRAM_FILES%]\4C4C4544-1441973087-3910-8059-CAC04F383132\knsuC551.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\hemepysi]ImagePath=[%PROGRAM_FILES%]\001313CC-1446411070-8019-FFFF-F46D04BA93B9\knsv98C2.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\zedepory]ImagePath=[%APPDATA%]\15FB8DC0-1434842517-11E1-8D39-30F9EDD68317\hnshF3B0.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\xoperoze]ImagePath=[%APPDATA%]\15FB8DC0-1434842517-11E1-8D39-30F9EDD68317\jnsb3A4E.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\wejiryho]ImagePath=[%PROGRAM_FILES%]\15FB8DC0-1434842517-11E1-8D39-30F9EDD68317\knss2F07.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\mozutigo]ImagePath=[%PROGRAM_FILES%]\15FB8DC0-1434842517-11E1-8D39-30F9EDD68317\knso6A5D.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\vyverybu]ImagePath=[%PROGRAM_FILES%]\A0F93EF0-1446742037-DF11-8A81-DE3B705AF256\knsw8ABB.tmpfs
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\wululynu]ImagePath=[%LOCAL_APPDATA%]\34323030-1446829796-4437-3633-4644FFFFFFFF\snsv5539.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\punutume]ImagePath=[%PROGRAM_FILES%]\34323030-1446826149-4437-3633-4644FFFFFFFF\jnssDD37.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\fipufuwu]ImagePath=[%PROGRAM_FILES%]\34323030-1446826149-4437-3633-4644FFFFFFFF\hnsrF2F4.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\dybosuwu]ImagePath=[%PROGRAM_FILES%]\4C4C4544-1446060670-5810-8059-CAC04F48324A\hnsiC1E1.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\pivuruci]ImagePath=[%PROGRAM_FILES%]\03000200-1444121930-0500-0006-000700080009\knsp29A.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\lehicewu]ImagePath=[%PROGRAM_FILES%]\03000200-1444121930-0500-0006-000700080009\jnsbA177.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\hidekoqe]ImagePath=[%LOCAL_APPDATA%]\03000200-1446798809-0500-0006-000700080009\qnsc95AC.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\gyvixodu]ImagePath=[%PROGRAM_FILES%]\03000200-1444121930-0500-0006-000700080009\hnsbC2FD.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\lukiwivu]ImagePath=[%PROGRAM_FILES%]\03000200-1444121930-0500-0006-000700080009\knsa440F.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\hidekoqe]ImagePath=[%LOCAL_APPDATA%]\03000200-1446813306-0500-0006-000700080009\qnsrC0E5.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\dipubibu]ImagePath=[%LOCAL_APPDATA%]\03000200-1443902743-0500-0006-000700080009\snshE60F.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\zejytose]ImagePath=[%APPDATA%]\03000200-1435344774-0500-0006-000700080009\jnse9763.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\jocycuvy]ImagePath=[%APPDATA%]\03000200-1435344774-0500-0006-000700080009\knso7971.tmpfs
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\gyvixodu]ImagePath=[%PROGRAM_FILES%]\03AA02FC-1444430219-055B-8F06-460700080009\hnsq527C.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\dijojyvi]ImagePath=[%PROGRAM_FILES%]\03AA02FC-1445658709-055B-8F06-460700080009\hnss9ECF.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\kozorive]ImagePath=[%LOCAL_APPDATA%]\00000000-1446047049-0000-0000-94DE80DF53F3\snsrEB9B.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\fywonigo]ImagePath=[%PROGRAM_FILES%]\00000000-1446072013-0000-0000-94DE80DF53F3\hnsv7208.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\jilohylu]ImagePath=[%PROGRAM_FILES%]\242F4CD1-1446574142-E011-9FC3-B870F4D2AEA7\hnsvDF6.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\ziremuxy]ImagePath=[%LOCAL_APPDATA%]\242F4CD1-1446585024-E011-9FC3-B870F4D2AEA7\snsf28F5.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\hidekoqe]ImagePath=[%LOCAL_APPDATA%]\242F4CD1-1446751459-E011-9FC3-B870F4D2AEA7\qnsn603B.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\gyduxuzy]ImagePath=[%PROGRAM_FILES%]\242F4CD1-1446574142-E011-9FC3-B870F4D2AEA7\jnsp8F14.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\bekotopy]ImagePath=[%PROGRAM_FILES%]\242F4CD1-1446574142-E011-9FC3-B870F4D2AEA7\knse9D55.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\qymylofy]ImagePath=[%PROGRAM_FILES%]\1915C520-1446418962-11DD-B895-10C37B4C99C8\hnsxE58E.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\vezytyzu]ImagePath=[%PROGRAM_FILES%]\00000000-1445681199-0000-0000-8C89A56978EE\knspB70A.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\jecoludu]ImagePath=[%LOCAL_APPDATA%]\00000000-1445688445-0000-0000-8C89A56978EE\snsdB629.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\hidekoqe]ImagePath=[%LOCAL_APPDATA%]\00000000-1446587484-0000-0000-8C89A56978EE\qnsnF4EB.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\dijojyvi]ImagePath=[%PROGRAM_FILES%]\00000000-1445681199-0000-0000-8C89A56978EE\hnsi3C77.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\burifosy]ImagePath=[%PROGRAM_FILES%]\00000000-1445681199-0000-0000-8C89A56978EE\jnsd2492.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\dymivopo]ImagePath=[%PROGRAM_FILES%]\836630DA-1444793290-11E0-B64E-22097F1930F3\jnsrF97.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\gizyvoji]ImagePath=[%PROGRAM_FILES%]\836630DA-1444793290-11E0-B64E-22097F1930F3\knsbE8CF.tmpfs
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\dijojyvi]ImagePath=[%PROGRAM_FILES%]\836630DA-1444793290-11E0-B64E-22097F1930F3\hnsx29B9.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\lehicewu]ImagePath=[%PROGRAM_FILES%]\56EC234D-1443986457-6543-BD4E-AC9E1799A433\jnsoFEF4.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\jibejylu]ImagePath=[%PROGRAM_FILES%]\56EC234D-1443986457-6543-BD4E-AC9E1799A433\knsa8A26.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\gyvixodu]ImagePath=[%PROGRAM_FILES%]\56EC234D-1443986457-6543-BD4E-AC9E1799A433\hnsa34BC.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\qexulyge]ImagePath=[%PROGRAM_FILES%]\FFFFFFFF-1445085173-FFFF-FFFF-FFFFFFFFFFFF\knsgD3.tmpfs
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\mypenety]ImagePath=[%PROGRAM_FILES%]\FFFFFFFF-1445085173-FFFF-FFFF-FFFFFFFFFFFF\knsx80.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\jozuvepi]ImagePath=[%PROGRAM_FILES%]\FFFFFFFF-1445085173-FFFF-FFFF-FFFFFFFFFFFF\knsjC0.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\xogivuti]ImagePath=[%LOCAL_APPDATA%]\FFFFFFFF-1445060056-FFFF-FFFF-FFFFFFFFFFFF\snsa107.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\wybehery]ImagePath=[%PROGRAM_FILES%]\FFFFFFFF-1445085173-FFFF-FFFF-FFFFFFFFFFFF\knsr48E.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\vihinosu]ImagePath=[%PROGRAM_FILES%]\01076C7A-1446187213-CB11-8946-D62F3A563942\jnsr5C1A.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\ninefyci]ImagePath=[%PROGRAM_FILES%]\01076C7A-1446187213-CB11-8946-D62F3A563942\hnsr790E.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\kopytevo]ImagePath=[%PROGRAM_FILES%]\01076C7A-1446187213-CB11-8946-D62F3A563942\knsw3755.tmpfs
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\pyhegoge]ImagePath=[%PROGRAM_FILES%]\4C4C4544-1443868540-5A10-8058-B3C04F443032\knslC9A4.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\hidekoqe]ImagePath=[%LOCAL_APPDATA%]\4C4C4544-1446571007-5A10-8058-B3C04F443032\qnstC851.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\nozuwosu]ImagePath=[%PROGRAM_FILES%]\DC1250D0-1445263336-6ED6-B834-4E6EFE8E60CE\jnsm4EF.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\hefykoto]ImagePath=[%PROGRAM_FILES%]\DC1250D0-1445263336-6ED6-B834-4E6EFE8E60CE\knsxC9BE.tmpfs
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\gefojewy]ImagePath=[%LOCAL_APPDATA%]\DC1250D0-1445274187-6ED6-B834-4E6EFE8E60CE\snss83C2.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\vegesegy]ImagePath=[%PROGRAM_FILES%]\03AA02FC-1444016788-05F2-E306-630700080009\knsz4A33.tmpfs
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\zigyqeri]ImagePath=[%PROGRAM_FILES%]\34443437-1446604741-3437-3830-3835FFFFFFFF\hnsn87FA.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\zebohifo]ImagePath=[%PROGRAM_FILES%]\34443437-1446604741-3437-3830-3835FFFFFFFF\knsi51E5.tmpfs
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\nogevuxe]ImagePath=[%PROGRAM_FILES%]\34443437-1446604741-3437-3830-3835FFFFFFFF\jnsi7237.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\qyxidufo]ImagePath=[%LOCAL_APPDATA%]\00000000-1446119550-0000-0000-001D7DAC5C44\snscE9.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\qugywotu]ImagePath=[%PROGRAM_FILES%]\00000000-1446112304-0000-0000-001D7DAC5C44\knsr94.tmpfs
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\fofinine]ImagePath=[%PROGRAM_FILES%]\00000000-1446112304-0000-0000-001D7DAC5C44\hnsaC0.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\hidekoqe]ImagePath=[%LOCAL_APPDATA%]\00000000-1446308106-0000-0000-001D7DAC5C44\qnsc1E4.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\xiqonocy]ImagePath=[%PROGRAM_FILES%]\45FA61DB-1446465524-11DC-BBDA-788F18D8001B\hnsn8D34.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\vefevyni]ImagePath=[%PROGRAM_FILES%]\45FA61DB-1446465524-11DC-BBDA-788F18D8001B\jnsd735C.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\fujuhole]ImagePath=[%PROGRAM_FILES%]\45FA61DB-1446465524-11DC-BBDA-788F18D8001B\knseDC79.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\kywyvevu]ImagePath=[%PROGRAM_FILES%]\669B3FF2-1446396497-11DE-8440-72D05F0600E1\knsvB112.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\hidekoqe]ImagePath=[%LOCAL_APPDATA%]\669B3FF2-1446462920-11DE-8440-72D05F0600E1\qnsw3126.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\bypoduge]ImagePath=[%LOCAL_APPDATA%]\669B3FF2-1446421774-11DE-8440-72D05F0600E1\snstCB7F.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\totyseku]ImagePath=[%PROGRAM_FILES%]\A5F1E7C5-1441147055-478D-7FF9-54A0507C61F6\hnsuEE61.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\mikicefy]ImagePath=[%PROGRAM_FILES%]\A5F1E7C5-1441147055-478D-7FF9-54A0507C61F6\knsi91A3.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\jimocoso]ImagePath=[%PROGRAM_FILES%]\A5F1E7C5-1441147055-478D-7FF9-54A0507C61F6\jnsvD7BA.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\hidekoqe]ImagePath=[%LOCAL_APPDATA%]\A5F1E7C5-1446575212-478D-7FF9-54A0507C61F6\qnszA6E3.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\tepigelu]ImagePath=[%PROGRAM_FILES%]\BB836C80-1445180901-81E2-3A1A-3085A9273060\knsd8FDE.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\qymylofy]ImagePath=[%PROGRAM_FILES%]\03D40274-1446322563-0557-2806-B60700080009\hnsoBEFB.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\pokorugi]ImagePath=[%PROGRAM_FILES%]\03D40274-1446322563-0557-2806-B60700080009\jnstAA12.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\goziteqe]ImagePath=[%PROGRAM_FILES%]\03D40274-1446322563-0557-2806-B60700080009\knso8F6B.tmpfs
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\hidekoqe]ImagePath=[%LOCAL_APPDATA%]\BC8394BF-1446525802-11DF-BBDA-DE66E66C1CC1\qnscC126.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\dybytigo]ImagePath=[%PROGRAM_FILES%]\BC8394BF-1446238713-11DF-BBDA-DE66E66C1CC1\knsfDE60.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\lehicewu]ImagePath=[%PROGRAM_FILES%]\8BAAE186-1442778417-11E3-A1E5-D9E6C803C0E3\jnsx3714.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\gyvixodu]ImagePath=[%PROGRAM_FILES%]\8BAAE186-1442778417-11E3-A1E5-D9E6C803C0E3\hnsh4EE4.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\qudozino]ImagePath=[%PROGRAM_FILES%]\D3FF3600-1446005466-81E1-2CEC-3085A910B0C4\knsnAA4E.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\ticopuwy]ImagePath=[%PROGRAM_FILES%]\4C4C4544-1446364232-4D10-804D-B4C04F59324A\knsy734D.tmpfs
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\lehicewu]ImagePath=[%PROGRAM_FILES%]\38400F81-1442587512-11CB-93CF-92FA0595C4C3\jnslC540.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\gyvixodu]ImagePath=[%PROGRAM_FILES%]\38400F81-1442587512-11CB-93CF-92FA0595C4C3\hnsmDD55.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\cedisire]ImagePath=[%PROGRAM_FILES%]\38400F81-1442587512-11CB-93CF-92FA0595C4C3\knskFFBD.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\pokorugi]ImagePath=[%PROGRAM_FILES%]\20F0E0E0-1446261029-11DD-AD1F-54A050509190\jnsa72BB.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\nilykycu]ImagePath=[%PROGRAM_FILES%]\20F0E0E0-1446261029-11DD-AD1F-54A050509190\knso8535.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\memovoty]ImagePath=[%PROGRAM_FILES%]\00000000-1445721301-0000-0000-50E549388D50\jnsg11E3.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\lilobymo]ImagePath=[%PROGRAM_FILES%]\00000000-1445721301-0000-0000-50E549388D50\knspF55C.tmpfs
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\dijojyvi]ImagePath=[%PROGRAM_FILES%]\00000000-1445721301-0000-0000-50E549388D50\hnsa2A8D.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\vevixyfe]ImagePath=[%PROGRAM_FILES%]\35453035-1446401292-3335-4432-4143FFFFFFFF\knsw8103.tmpfs
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\xuvivejy]ImagePath=[%PROGRAM_FILES%]\00000000-1446311380-0000-0000-D8CB8A5002E6\knsu23DD.tmpfs
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\pokorugi]ImagePath=[%PROGRAM_FILES%]\00000000-1446311380-0000-0000-D8CB8A5002E6\jnsl41EA.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\qymylofy]ImagePath=[%PROGRAM_FILES%]\00000000-1446392877-0000-0000-6C626D073DC6\hnsk2C65.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\pokorugi]ImagePath=[%PROGRAM_FILES%]\00000000-1446392877-0000-0000-6C626D073DC6\jnsa171F.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\dugihemu]ImagePath=[%PROGRAM_FILES%]\00000000-1446392877-0000-0000-6C626D073DC6\knsuFDFD.tmpfs
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\mikipyju]ImagePath=[%PROGRAM_FILES%]\1E006B00-1443440302-C500-1304-E0CB4E49BD19\knsk7F77.tmpfs
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\lehicewu]ImagePath=[%PROGRAM_FILES%]\1E006B00-1443440302-C500-1304-E0CB4E49BD19\jnsfAE98.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\gyvixodu]ImagePath=[%PROGRAM_FILES%]\1E006B00-1443440302-C500-1304-E0CB4E49BD19\hnspF49E.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\zyvirigo]ImagePath=[%PROGRAM_FILES%]\75433B3B-1445572329-11E1-9673-CE39E75C8D09\jnsxA968.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\fujimumu]ImagePath=[%PROGRAM_FILES%]\75433B3B-1445572329-11E1-9673-CE39E75C8D09\knsf3FD8.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\dijojyvi]ImagePath=[%PROGRAM_FILES%]\75433B3B-1445572329-11E1-9673-CE39E75C8D09\hnsmC0A1.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\pycusotu]ImagePath=[%PROGRAM_FILES%]\75433B3B-1445572329-11E1-9673-CE39E75C8D09\knsz65F0.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\totonyry]ImagePath=[%PROGRAM_FILES%]\75433B3B-1445572329-11E1-9673-CE39E75C8D09\knsnEB8A.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\qymylofy]ImagePath=[%PROGRAM_FILES%]\00000000-1446311620-0000-0000-448A5BF0D227\hnssFA1F.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\pokorugi]ImagePath=[%PROGRAM_FILES%]\00000000-1446311620-0000-0000-448A5BF0D227\jnseE4A1.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\dugihemu]ImagePath=[%PROGRAM_FILES%]\00000000-1446311620-0000-0000-448A5BF0D227\knsd9986.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\qymylofy]ImagePath=[%PROGRAM_FILES%]\523354F0-1446249987-E411-B8B9-1458D0C32434\hnsf1858.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\zizyziko]ImagePath=[%PROGRAM_FILES%]\9BE7C2A0-1444736740-11DD-9B24-54A0505206ED\knsn3594.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\zehygiqo]ImagePath=[%PROGRAM_FILES%]\9BE7C2A0-1444736740-11DD-9B24-54A0505206ED\jnsfE393.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\gyvixodu]ImagePath=[%PROGRAM_FILES%]\9BE7C2A0-1444736740-11DD-9B24-54A0505206ED\hnsjF96F.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\kywyvevu]ImagePath=[%PROGRAM_FILES%]\9BE7C2A0-1444736740-11DD-9B24-54A0505206ED\knsaAEC9.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\zehygiqo]ImagePath=[%PROGRAM_FILES%]\32444335-1444497373-4C30-5857-80C16E4F0D3A\jnsv8F83.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\vezytyzu]ImagePath=[%PROGRAM_FILES%]\32444335-1444497373-4C30-5857-80C16E4F0D3A\knsz330C.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\hidekoqe]ImagePath=[%LOCAL_APPDATA%]\32444335-1446250735-4C30-5857-80C16E4F0D3A\qnsyD126.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\rezyqosi]ImagePath=[%PROGRAM_FILES%]\00000000-1446272846-0000-0000-D43D7EE3AAF1\knsi97A7.tmpfs
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\qymylofy]ImagePath=[%PROGRAM_FILES%]\00000000-1446272846-0000-0000-D43D7EE3AAF1\hnsdD25E.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\hidekoqe]ImagePath=[%LOCAL_APPDATA%]\00000000-1446454060-0000-0000-D43D7EE3AAF1\qnss827A.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\segusefe]ImagePath=[%PROGRAM_FILES%]\69EC2728-1445910804-E111-BC78-DC0EA142D7D9\jnseB72F.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\kywyvevu]ImagePath=[%PROGRAM_FILES%]\69EC2728-1445910804-E111-BC78-DC0EA142D7D9\knsi6645.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\hidekoqe]ImagePath=[%LOCAL_APPDATA%]\69EC2728-1446485179-E111-BC78-DC0EA142D7D9\qnse68A4.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\fowihisi]ImagePath=[%LOCAL_APPDATA%]\69EC2728-1445921701-E111-BC78-DC0EA142D7D9\snszDD57.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\dijojyvi]ImagePath=[%PROGRAM_FILES%]\69EC2728-1445910804-E111-BC78-DC0EA142D7D9\hnszE2A4.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\mikicefy]ImagePath=[%PROGRAM_FILES%]\69EC2728-1445910804-E111-BC78-DC0EA142D7D9\knsk1F1F.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\qymylofy]ImagePath=[%PROGRAM_FILES%]\22E1CF5A-1446363772-A2E1-5C09-E1CE1932E1FA\hnsq35B1.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\pokorugi]ImagePath=[%PROGRAM_FILES%]\22E1CF5A-1446363772-A2E1-5C09-E1CE1932E1FA\jnsg1DAD.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\kywyvevu]ImagePath=[%PROGRAM_FILES%]\22E1CF5A-1446363772-A2E1-5C09-E1CE1932E1FA\knsl1086.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\hidekoqe]ImagePath=[%LOCAL_APPDATA%]\22E1CF5A-1446476941-A2E1-5C09-E1CE1932E1FA\qnsdA075.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\bypoduge]ImagePath=[%LOCAL_APPDATA%]\22E1CF5A-1446389017-A2E1-5C09-E1CE1932E1FA\snslA41D.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\jofoqyze]ImagePath=[%PROGRAM_FILES%]\976C28E7-1446382912-11E2-9673-CE39E75CD809\knsr967A.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\segusefe]ImagePath=[%PROGRAM_FILES%]\03000200-1445928945-0500-0006-000700080009\jnsr2B72.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\dipubibu]ImagePath=[%LOCAL_APPDATA%]\4C4C4544-1442513845-3510-804C-C4C04F4D4B31\snsn7E69.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\hicefepi]ImagePath=[%PROGRAM_FILES%]\8BAAE186-1442778417-11E3-A1E5-D9E6C803C0E3\knsrB364.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\hidekoqe]ImagePath=[%LOCAL_APPDATA%]\D3FF3600-1446145758-81E1-2CEC-3085A910B0C4\qnss6672.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\vihinosu]ImagePath=[%PROGRAM_FILES%]\4C4C4544-1446137910-5910-8054-C3C04F595031\jnskD17B.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\ninefyci]ImagePath=[%PROGRAM_FILES%]\4C4C4544-1446137910-5910-8054-C3C04F595031\hnsqFA23.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\mobusyku]ImagePath=[%PROGRAM_FILES%]\4C4C4544-1446137910-5910-8054-C3C04F595031\knsaA24B.tmpfs
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\zovolyjy]ImagePath=[%PROGRAM_FILES%]\30464E43-1446358665-3533-4D4C-00269EE6700A\knshB3B0.tmpfs
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\qymylofy]ImagePath=[%PROGRAM_FILES%]\30464E43-1446358665-3533-4D4C-00269EE6700A\hnsmFE2F.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\pokorugi]ImagePath=[%PROGRAM_FILES%]\30464E43-1446358665-3533-4D4C-00269EE6700A\jnsmE0ED.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\hidekoqe]ImagePath=[%LOCAL_APPDATA%]\30464E43-1446460314-3533-4D4C-00269EE6700A\qnsh58DB.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\xiqonocy]ImagePath=[%PROGRAM_FILES%]\03000200-1446470050-0500-0006-000700080009\hnsm3ED1.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\vefevyni]ImagePath=[%PROGRAM_FILES%]\03000200-1446470050-0500-0006-000700080009\jnsm15FB.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\lehekygi]ImagePath=[%LOCAL_APPDATA%]\03000200-1446473709-0500-0006-000700080009\snsmCB86.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\fujimumu]ImagePath=[%PROGRAM_FILES%]\03000200-1446470050-0500-0006-000700080009\knshEE88.tmpfs
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\qymylofy]ImagePath=[%PROGRAM_FILES%]\84A8940C-1446299961-D137-C974-300ED50F5116\hnsf9EA0.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\xybipowi]ImagePath=[%PROGRAM_FILES%]\E0E59CB3-1445013184-E211-B888-208984758EB7\knsf2FF6.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\muxesowy]ImagePath=[%PROGRAM_FILES%]\34323030-1442704434-3632-4632-3032FFFFFFFF\knsz3EA2.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\lehicewu]ImagePath=[%PROGRAM_FILES%]\34323030-1442704434-3632-4632-3032FFFFFFFF\jnseF339.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\hidekoqe]ImagePath=[%LOCAL_APPDATA%]\34323030-1446418744-3632-4632-3032FFFFFFFF\qnswCA52.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\dijojyvi]ImagePath=[%PROGRAM_FILES%]\4C4C4544-1445922080-4310-804D-CAC04F4D5631\hnsr742.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\segusefe]ImagePath=[%PROGRAM_FILES%]\4C4C4544-1445922080-4310-804D-CAC04F4D5631\jnshEEA2.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\kisubuni]ImagePath=[%PROGRAM_FILES%]\4C4C4544-1445922080-4310-804D-CAC04F4D5631\knsy868F.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\woneqixu]ImagePath=[%PROGRAM_FILES%]\00000011-1443542148-0000-0000-7824AF70F86F\knsxAAA4.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\qymylofy]ImagePath=[%PROGRAM_FILES%]\35453035-1446401292-3335-4432-4143FFFFFFFF\hnswB3ED.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\pokorugi]ImagePath=[%PROGRAM_FILES%]\35453035-1446401292-3335-4432-4143FFFFFFFF\jnsr9BBA.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\qymylofy]ImagePath=[%PROGRAM_FILES%]\A63BE880-1446366599-81E2-2AAA-4C72B959860C\hnsz999C.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\qisibeji]ImagePath=[%PROGRAM_FILES%]\A63BE880-1446366599-81E2-2AAA-4C72B959860C\knst54E6.tmpfs
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\pokorugi]ImagePath=[%PROGRAM_FILES%]\A63BE880-1446366599-81E2-2AAA-4C72B959860C\jnsj74FA.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\bypoduge]ImagePath=[%LOCAL_APPDATA%]\A63BE880-1446370251-81E2-2AAA-4C72B959860C\snsj12C1.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\dijojyvi]ImagePath=[%PROGRAM_FILES%]\9D8478CD-1445974122-E211-83C6-B888E3CC9622\hnsnE6.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\woneqixu]ImagePath=[%PROGRAM_FILES%]\9D8478CD-1445974122-E211-83C6-B888E3CC9622\knsi6A11.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\wenuvisi]ImagePath=[%PROGRAM_FILES%]\9D8478CD-1445974122-E211-83C6-B888E3CC9622\jnsuEAAD.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\hidekoqe]ImagePath=[%LOCAL_APPDATA%]\9D8478CD-1446230488-E211-83C6-B888E3CC9622\qnsqB36C.tmp