Exterminate It! Antimalware

malpedia

Known threats:700,086 Last Update:March 16, 12:51

Testimonials

Just want to say that apparently your Exterminate It has worked like a charm. I was infected with a most troublesome Malware Trojan that kept replicating every time McAfee found, blocked and removed it... most annoying for several days... until Mr. Google led me to your door. What a God send!

With thanks,

Tom S.

MultiPlug- Registry Values List

This is a complete list of MultiPlug registry values collected by Exterminate It!. If you find any of these registry values on your PC, your computer is very likely to be infected with the MultiPlug - adware.

IMPORTANT: Because the registry is a core component of your Windows system, it is strongly recommended that you back up the registry before you begin deleting keys and values. For information about backing up the Windows registry, refer to the Registry Editor online help.
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\zigipyro]ImagePath=[%LOCAL_APPDATA%]\4C4C4544-1452176990-3810-8038-B4C04F464258\qnsxD6C1.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\mypecomo]ImagePath=[%PROGRAM_FILES%]\4C4C4544-1447288346-3810-8038-B4C04F464258\knsnEF26.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\kiqidetu]ImagePath=[%PROGRAM_FILES%]\4C4C4544-1447288346-3810-8038-B4C04F464258\jnsfEBD5.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\gilefywi]ImagePath=[%PROGRAM_FILES%]\4C4C4544-1447288346-3810-8038-B4C04F464258\hnsa1660.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\pifipofo]ImagePath=[%PROGRAM_FILES%]\01740230-1443880396-E411-B2A0-3464A9773EC1\kns6F29.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\lehicewu]ImagePath=[%PROGRAM_FILES%]\01740230-1443880396-E411-B2A0-3464A9773EC1\jnszD603.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\gyvixodu]ImagePath=[%PROGRAM_FILES%]\01740230-1443880396-E411-B2A0-3464A9773EC1\hnspF0B1.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\rijufoze]ImagePath=[%PROGRAM_FILES%]\06026280-1468260025-1B1B-815E-098C19A79C86\hnsd3A8F.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\dowidoly]ImagePath=[%PROGRAM_FILES%]\06026280-1468260025-1B1B-815E-098C19A79C86\jnsvFFB7.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\zigipyro]ImagePath=[%LOCAL_APPDATA%]\D8303320-1480939023-11E3-BE74-28D24476E5BC\qnslE5ED.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\cotecici]ImagePath=[%PROGRAM_FILES%]\D8303320-1480909052-11E3-BE74-28D24476E5BC\knsiB55E.tmpfs
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\wywenefo]ImagePath=[%PROGRAM_FILES%]\C0EA0676-1480878277-E311-A012-008CFA994D49\knsf5C03.tmpfs
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\sonohome]ImagePath=[%PROGRAM_FILES%]\4C4C4544-1480630665-3610-8033-CAC04F505931\kns947B.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\zigipyro]ImagePath=[%LOCAL_APPDATA%]\2BDA7EE7-1480890008-11E4-9F6E-68F72810E2C5\qnszA1.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\mynemihy]ImagePath=[%PROGRAM_FILES%]\2BDA7EE7-1480867187-11E4-9F6E-68F72810E2C5\knsx34A1.tmpfs
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\xutohiji]ImagePath=[%PROGRAM_FILES%]\0418155C-1480872944-11E1-8F29-958A71D8B9E3\knsj15FD.tmpfs
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\dycemumo]ImagePath=[%PROGRAM_FILES%]\0418155C-1480875378-11E1-8F29-958A71D8B9E3\knso2BBC.tmpfs
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\kutuluke]ImagePath=[%PROGRAM_FILES%]\33444335-1480705315-3935-3430-D4C9EF696645\knsv5C95.tmpfs
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\xevyseju]ImagePath=[%PROGRAM_FILES%]\563EDB52-1480887121-E211-83C6-08606E898C3B\knsi650.tmpfs
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\zigipyro]ImagePath=[%LOCAL_APPDATA%]\563EDB52-1480912433-E211-83C6-08606E898C3B\qnsq9FB6.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\qeveteri]ImagePath=[%PROGRAM_FILES%]\BFAC2DE2-1480733266-E7EC-ABFC-3497F68F2FE2\knshAE7D.tmpfs
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\zigipyro]ImagePath=[%LOCAL_APPDATA%]\072B070A-1475085223-1307-0306-A08CFD4B284C\qnswEB3E.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\zigipyro]ImagePath=[%LOCAL_APPDATA%]\B3DCFA40-1458867719-11DF-9D74-20CF30B5BCC4\qnspAB.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\pujinohy]ImagePath=[%APPDATA%]\E6A1D675-1436675982-BA4E-B015-60EB699D475A\knsg21F.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\zejytose]ImagePath=[%PROGRAM_FILES%]\AD07430F-1437235045-7B21-FCF2-0019997F2AD8\jnssC8.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\vicoqudu]ImagePath=[%PROGRAM_FILES%]\AD07430F-1437235045-7B21-FCF2-0019997F2AD8\hnspCB.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\sipubiqo]ImagePath=[%APPDATA%]\AD07430F-1432385986-7B21-FCF2-0019997F2AD8\nsc10F.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\jigejuvo]ImagePath=[%PROGRAM_FILES%]\AD07430F-1437235045-7B21-FCF2-0019997F2AD8\knsfB3.tmpfs
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\hexylyti]ImagePath=[%PROGRAM_FILES%]\AD07430F-1437235045-7B21-FCF2-0019997F2AD8\knst81.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\kycykyqi]ImagePath=[%APPDATA%]\AD07430F-1432385986-7B21-FCF2-0019997F2AD8\hnsi24D.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\kunuboxo]ImagePath=[%PROGRAM_FILES%]\AD07430F-1437235045-7B21-FCF2-0019997F2AD8\knsj291.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\gicukyvy]ImagePath=[%APPDATA%]\AD07430F-1432385986-7B21-FCF2-0019997F2AD8\jnsp24B.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\cikovujo]ImagePath=[%PROGRAM_FILES%]\4C4C4544-1480707201-4A10-8053-C7C04F465731\knsn1B2F.tmpfs
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\xejopuxo]ImagePath=[%PROGRAM_FILES%]\4C4C4544-1480632100-3210-8032-C7C04F353432\knsd85B7.tmpfs
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\betebegi]ImagePath=[%PROGRAM_FILES%]\33444335-1479504211-5139-5344-A45D366DB54E\kns53BC.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\zigipyro]ImagePath=[%LOCAL_APPDATA%]\33444335-1480597376-5139-5344-A45D366DB54E\qnsk50F8.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\locyjozo]ImagePath=[%PROGRAM_FILES%]\00000000-1480586194-0000-0000-D43D7E26945D\knskC0C1.tmpfs
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\levuwiqy]ImagePath=[%PROGRAM_FILES%]\03D40274-1479922319-050D-2A06-7B0700080009\knshBDAA.tmpfs
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\hyhipyly]ImagePath=[%PROGRAM_FILES%]\04ABF2AE-1480514944-E211-A8BD-0013D4D9C9E8\knsyA52F.tmpfs
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\pyjojove]ImagePath=[%PROGRAM_FILES%]\11FF0122-1479920195-6E41-8105-089E01AF738B\kns591E.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\nyzotypo]ImagePath=[%PROGRAM_FILES%]\03000200-1480188063-0500-0006-000700080009\knsCC69.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\zigipyro]ImagePath=[%LOCAL_APPDATA%]\03000200-1480460160-0500-0006-000700080009\qnsv761D.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\zigipyro]ImagePath=[%LOCAL_APPDATA%]\6C32BA2A-1480516326-5FFD-8C18-2312B27F7B11\qnsk430.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\tojypiti]ImagePath=[%PROGRAM_FILES%]\6C32BA2A-1479134024-5FFD-8C18-2312B27F7B11\knsjE22E.tmpfs
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\bijokywu]ImagePath=[%PROGRAM_FILES%]\B23F169E-1480441371-5A10-BD31-68F0A68446A7\knsp1FC.tmpfs
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\ciledoro]ImagePath=[%PROGRAM_FILES%]\2FB418C0-1480498130-11B2-8000-98E3648B2584\knslD00.tmpfs
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\vubynyfi]ImagePath=[%PROGRAM_FILES%]\3CC034A0-1440448582-11E4-BE65-00238B5E7586\knswE7.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\fimevebo]ImagePath=[%PROGRAM_FILES%]\3CC034A0-1440448582-11E4-BE65-00238B5E7586\hnsjFCA.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\jimocoso]ImagePath=[%PROGRAM_FILES%]\3CC034A0-1440448582-11E4-BE65-00238B5E7586\jnstF314.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\gopibeko]ImagePath=[%LOCAL_APPDATA%]\3CC034A0-1440452390-11E4-BE65-00238B5E7586\snskEDBA.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\bejemexe]ImagePath=[%PROGRAM_FILES%]\03000200-1480336184-0500-0006-000700080009\kns9807.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\xezefiti]ImagePath=[%PROGRAM_FILES%]\4C4C4544-1480189776-4210-8051-C4C04F5A4431\knscF347.tmpfs
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\zigipyro]ImagePath=[%LOCAL_APPDATA%]\F6D3701E-1480348265-0344-B293-60EB69CAFC57\qnsl3719.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\gosotohi]ImagePath=[%PROGRAM_FILES%]\F6D3701E-1480321226-0344-B293-60EB69CAFC57\knsp2F30.tmpfs
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\gukynupe]ImagePath=[%PROGRAM_FILES%]\4C4C4544-1478290835-5910-8033-CAC04F424C31\knsED9A.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\hytyduhi]ImagePath=[%PROGRAM_FILES%]\DB8598F1-1479775384-11E5-97A7-41557301001E\kns6D82.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\zigipyro]ImagePath=[%LOCAL_APPDATA%]\B9A86695-1480252937-443E-ACF8-DFE90338F963\qnsoF616.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\guvuqigy]ImagePath=[%PROGRAM_FILES%]\B9A86695-1480225540-443E-ACF8-DFE90338F963\knscDABD.tmpfs
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\qedigiku]ImagePath=[%PROGRAM_FILES%]\4C4C4544-1480132947-3510-8033-B6C04F504E31\knsb3C1A.tmpfs
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\cenomiry]ImagePath=[%PROGRAM_FILES%]\03DE0294-1475600049-05CA-6606-110700080009\knsiA932.tmpfs
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\pevurusu]ImagePath=[%PROGRAM_FILES%]\00000000-1477653979-0000-0807-060504030201\knsr2ACC.tmpfs
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\fixywiqi]ImagePath=[%PROGRAM_FILES%]\03000200-1480260282-0500-0006-000700080009\kns4EB0.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\zigipyro]ImagePath=[%LOCAL_APPDATA%]\03000200-1480306955-0500-0006-000700080009\qnsf6F7B.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\nedusyto]ImagePath=[%PROGRAM_FILES%]\310BDDEF-1472151981-E011-A284-DC0EA132473F\kns490.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\rijufoze]ImagePath=[%PROGRAM_FILES%]\310BDDEF-1472151981-E011-A284-DC0EA132473F\hnsq92EF.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\dowidoly]ImagePath=[%PROGRAM_FILES%]\310BDDEF-1472151981-E011-A284-DC0EA132473F\jnsg5DAC.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\xuqeduty]ImagePath=[%PROGRAM_FILES%]\647A9E01-1458134800-11CB-83C0-95809A7FE4D3\kns8C3D.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\zigipyro]ImagePath=[%LOCAL_APPDATA%]\647A9E01-1480255741-11CB-83C0-95809A7FE4D3\qnsv382B.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\wucotusy]ImagePath=[%PROGRAM_FILES%]\647A9E01-1458134800-11CB-83C0-95809A7FE4D3\hnsd1833.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\gerocyni]ImagePath=[%PROGRAM_FILES%]\647A9E01-1458134800-11CB-83C0-95809A7FE4D3\jnsuE838.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\zidunuje]ImagePath=[%PROGRAM_FILES%]\4C4C4544-1480205576-5810-804C-C6C04F593332\knsl6AC4.tmpfs
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\podydosu]ImagePath=[%PROGRAM_FILES%]\4C4C4544-1480152713-4D10-8059-CAC04F334253\knsu1627.tmpfs
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\zigipyro]ImagePath=[%LOCAL_APPDATA%]\1D255021-1480110348-E011-BC4D-1C7508F5A408\qnsh3803.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\jixiryfi]ImagePath=[%PROGRAM_FILES%]\1D255021-1480104221-E011-BC4D-1C7508F5A408\knsk2301.tmpfs
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\dijojyvi]ImagePath=[%PROGRAM_FILES%]\6635DB79-1444656968-E211-8560-08606E8BBA03\hnsyF07.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\zucemeze]ImagePath=[%PROGRAM_FILES%]\6635DB79-1444656968-E211-8560-08606E8BBA03\jnssF1D9.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\zigipyro]ImagePath=[%LOCAL_APPDATA%]\6635DB79-1470081365-E211-8560-08606E8BBA03\qnsnC415.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\mihykuli]ImagePath=[%PROGRAM_FILES%]\6635DB79-1444656968-E211-8560-08606E8BBA03\knsfD34E.tmpfs
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\zigipyro]ImagePath=[%LOCAL_APPDATA%]\00000000-1480149421-0000-0000-1C6F65DCABB3\qnsi6AFC.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\tusidyge]ImagePath=[%PROGRAM_FILES%]\00000000-1480129564-0000-0000-1C6F65DCABB3\knsi3C33.tmpfs
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\kugynuqi]ImagePath=[%PROGRAM_FILES%]\4C4C4544-1480111002-3710-8048-B3C04F4C5431\kns6CDA.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\zigipyro]ImagePath=[%LOCAL_APPDATA%]\4C4C4544-1480116447-3710-8048-B3C04F4C5431\qnseA5D4.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\burygyxo]ImagePath=[%PROGRAM_FILES%]\4C4C4544-1480111002-3710-8048-B3C04F4C5431\knsn7758.tmpfs
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\coxujuxy]ImagePath=[%PROGRAM_FILES%]\30464E43-1476109773-4C39-4E4C-00269EDCD242\knsd8B24.tmpfs
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\podydosu]ImagePath=[%PROGRAM_FILES%]\00000000-1480151801-0000-0000-D43D7EF884CE\knscF1B3.tmpfs
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\verugipo]ImagePath=[%PROGRAM_FILES%]\20546ECC-1479748280-E211-A7AA-FFD9B00AB612\kns268E.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\wucotusy]ImagePath=[%PROGRAM_FILES%]\C07EDE81-1458537227-11CB-8D8D-BB5F3A1580CB\hnsr9C7F.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\gerocyni]ImagePath=[%PROGRAM_FILES%]\C07EDE81-1458537227-11CB-8D8D-BB5F3A1580CB\jnsw84D8.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\zoqeveli]ImagePath=[%PROGRAM_FILES%]\C3B247C0-1480094562-11D5-9AC6-382C4A8D61EE\knse8B9.tmpfs
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\zigipyro]ImagePath=[%LOCAL_APPDATA%]\C3B247C0-1480112212-11D5-9AC6-382C4A8D61EE\qnsi6D60.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\zypisymo]ImagePath=[%PROGRAM_FILES%]\2098CAF5-1479982713-E011-9157-F659B14548DF\knsE1D0.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\rilyjihy]ImagePath=[%PROGRAM_FILES%]\77B022BA-1479892414-11E4-9673-CE39E71CED08\kns94F7.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\zigipyro]ImagePath=[%LOCAL_APPDATA%]\77B022BA-1479952831-11E4-9673-CE39E71CED08\qnss1A18.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\nogisebe]ImagePath=[%PROGRAM_FILES%]\FC0B2AEA-1477919670-11E5-BA4C-507B9D47BBC3\knsA402.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\zyhepuny]ImagePath=[%PROGRAM_FILES%]\F4A02231-1480011702-4303-FC05-521286A7EDB8\knsaA493.tmpfs
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\cekycejy]ImagePath=[%PROGRAM_FILES%]\A912973C-1477553850-21E5-D635-9F5FB360989B\knsB61A.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\tyxusyje]ImagePath=[%PROGRAM_FILES%]\DDF10320-1479768628-11DC-A243-08606EF22CDE\knsf2DA.tmpfs
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\zigipyro]ImagePath=[%LOCAL_APPDATA%]\03000200-1465401082-0500-0006-000700080009\qnsvCE0.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\vyvidemi]ImagePath=[%PROGRAM_FILES%]\C73F8420-1479998735-81E3-35FD-54BEF78B9188\knsxDF5E.tmpfs
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\pegityre]ImagePath=[%PROGRAM_FILES%]\038D0240-1476079711-05DF-7706-CB0700080009\knsz1BC.tmpfs
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\lypiduny]ImagePath=[%PROGRAM_FILES%]\B9456E7F-1477886824-11E4-B101-5049280000FF\knse54CF.tmpfs
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\byvizowi]ImagePath=[%PROGRAM_FILES%]\4621AB11-1469035765-E111-AE3A-DC0EA14EF74E\kns9973.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\zigipyro]ImagePath=[%LOCAL_APPDATA%]\4621AB11-1479892205-E111-AE3A-DC0EA14EF74E\qnsh5FED.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\rijufoze]ImagePath=[%PROGRAM_FILES%]\4621AB11-1469035765-E111-AE3A-DC0EA14EF74E\hnscC8BE.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\dowidoly]ImagePath=[%PROGRAM_FILES%]\4621AB11-1469035765-E111-AE3A-DC0EA14EF74E\jnscA95A.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\zizusyju]ImagePath=[%PROGRAM_FILES%]\FFFFFFFF-1450363865-FFFF-FFFF-FFFFFFFFFFFF\hnsaD5B8.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\woforemu]ImagePath=[%LOCAL_APPDATA%]\FFFFFFFF-1450383874-FFFF-FFFF-FFFFFFFFFFFF\snsf5D81.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\rizyqibe]ImagePath=[%PROGRAM_FILES%]\FFFFFFFF-1450363865-FFFF-FFFF-FFFFFFFFFFFF\jnsgB274.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\qiruduzi]ImagePath=[%PROGRAM_FILES%]\FFFFFFFF-1450363865-FFFF-FFFF-FFFFFFFFFFFF\knso54EC.tmpfs
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\zigipyro]ImagePath=[%LOCAL_APPDATA%]\4C4C4544-1479917575-4210-8033-B7C04F575331\qnsl28F5.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\jetefepo]ImagePath=[%PROGRAM_FILES%]\4C4C4544-1479904692-4210-8033-B7C04F575331\knst44B2.tmpfs
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\nisecine]ImagePath=[%PROGRAM_FILES%]\03000200-1479827558-0500-0006-000700080009\knsg6011.tmpfs
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\cygupoly]ImagePath=[%PROGRAM_FILES%]\BBC06D60-1479831265-11DD-A026-001E6828FF6C\kns48D8.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\zigipyro]ImagePath=[%LOCAL_APPDATA%]\BBC06D60-1479923092-11DD-A026-001E6828FF6C\qnsv2BD7.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\tysewire]ImagePath=[%PROGRAM_FILES%]\849F238F-1479924975-11E5-BA4C-507B9D217A8E\knss96CD.tmpfs
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\mebijogu]ImagePath=[%PROGRAM_FILES%]\4C4C4544-1479795919-4710-8034-B1C04F364631\knsj20A2.tmpfs
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\feqymoze]ImagePath=[%PROGRAM_FILES%]\00000000-1479811401-0000-0000-448A5BD49D33\knsg6895.tmpfs
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\winequpe]ImagePath=[%PROGRAM_FILES%]\4C4C4544-1479833147-4E10-804E-B7C04F594E31\knsq2A6F.tmpfs
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\josukuve]ImagePath=[%PROGRAM_FILES%]\00000000-1479757484-0000-0000-00241DECBF04\knsu9F11.tmpfs
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\wucotusy]ImagePath=[%PROGRAM_FILES%]\00000011-1459304105-0000-0000-74D02B227B1E\hnsk188.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\gerocyni]ImagePath=[%PROGRAM_FILES%]\00000011-1459304105-0000-0000-74D02B227B1E\jnsfE11B.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\qymerojy]ImagePath=[%PROGRAM_FILES%]\144DC310-1479824532-11DF-ACBA-7F03BDDFBBB1\knsC601.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\zigipyro]ImagePath=[%LOCAL_APPDATA%]\4C4C4544-1479657841-4710-8039-B7C04F384631\qnsw1B6E.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\nuloqisy]ImagePath=[%PROGRAM_FILES%]\4C4C4544-1479680806-4710-8039-B7C04F384631\knsl882C.tmpfs
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\wugefymi]ImagePath=[%PROGRAM_FILES%]\D520EB28-1479492864-8D4C-9BE3-54AB3ABFED42\knshF1F4.tmpfs
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\tufykope]ImagePath=[%PROGRAM_FILES%]\0BA960D4-1479702622-11E5-829A-B46D83724830\knsz3924.tmpfs
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\veborije]ImagePath=[%PROGRAM_FILES%]\EB567F00-1477730935-11D9-98C2-F46D046E58A8\kns60BE.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\xividysi]ImagePath=[%PROGRAM_FILES%]\0000B3A0-1479540061-072F-FFFF-74D02B47FA86\kns2EF.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\buboseqi]ImagePath=[%PROGRAM_FILES%]\A17A2D65-1479725024-66BB-1BB4-2C56DC93C45C\knsq7969.tmpfs
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\zigipyro]ImagePath=[%LOCAL_APPDATA%]\00000000-1479752637-0000-0000-448A5B28B40F\qnss2A2A.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\hudenuzi]ImagePath=[%PROGRAM_FILES%]\00000000-1479743621-0000-0000-448A5B28B40F\knsf8584.tmpfs
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\pohuvubu]ImagePath=[%PROGRAM_FILES%]\32444335-1479644952-4733-4252-80C16E5BE041\kns539F.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\zigipyro]ImagePath=[%LOCAL_APPDATA%]\038D0240-1479768940-051A-7206-B70700080009\qnsa118E.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\qohezowu]ImagePath=[%PROGRAM_FILES%]\038D0240-1479759962-051A-7206-B70700080009\knsvF70E.tmpfs
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\zigipyro]ImagePath=[%LOCAL_APPDATA%]\4CD752E0-1479643474-11D5-88F8-E03F4917FC4D\qnsuD5EC.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\rureqiki]ImagePath=[%PROGRAM_FILES%]\4CD752E0-1479639846-11D5-88F8-E03F4917FC4D\knsj20C4.tmpfs
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\nybofupo]ImagePath=[%PROGRAM_FILES%]\644B6582-1479390217-E111-B972-5C9AD859915D\knsC193.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\fegyxehi]ImagePath=[%PROGRAM_FILES%]\31444335-1479739661-5432-4837-441EA1D83E71\knslE010.tmpfs
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\xubunocy]ImagePath=[%PROGRAM_FILES%]\03000200-1479635645-0500-0006-000700080009\knsE8E.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\jutumyri]ImagePath=[%PROGRAM_FILES%]\F29549E9-1479199918-11E3-BE7C-40F02FE7C5A1\kns766A.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\nuloqisy]ImagePath=[%PROGRAM_FILES%]\FFFFFFFF-1479678256-FFFF-FFFF-FFFFFFFFFFFF\knsbDCF0.tmpfs
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\xubunocy]ImagePath=[%PROGRAM_FILES%]\DDD1AAE8-1479661404-11E4-81A8-A07D642F0900\knsw2CF1.tmpfs
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\fikytyzy]ImagePath=[%PROGRAM_FILES%]\00000000-1479625492-0000-0000-001FD0C22371\knseD397.tmpfs
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\fikytyzy]ImagePath=[%PROGRAM_FILES%]\30613863-1479626967-6462-6338-0026221CC0EC\knsmB56F.tmpfs
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\zigipyro]ImagePath=[%LOCAL_APPDATA%]\95816B17-1478723835-5661-A30E-07077B7E2183\qnsh2C2F.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\wozisijo]ImagePath=[%PROGRAM_FILES%]\95816B17-1478610833-5661-A30E-07077B7E2183\knsv5ACE.tmpfs
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\zyvirigo]ImagePath=[%PROGRAM_FILES%]\CB01F180-1445555606-1013-98DF-A473DE0F4C2E\jnsmBC7B.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\dijojyvi]ImagePath=[%PROGRAM_FILES%]\CB01F180-1445555606-1013-98DF-A473DE0F4C2E\hnsw1259.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\pevypihe]ImagePath=[%PROGRAM_FILES%]\03AA02FC-1479552168-0554-7606-350700080009\knss3B05.tmpfs
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\qijekipe]ImagePath=[%PROGRAM_FILES%]\038D0240-1479483222-05FD-2D06-220700080009\knslC4B6.tmpfs
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\pybituso]ImagePath=[%PROGRAM_FILES%]\4C4C4544-1479218662-5110-8059-B2C04F4A4D31\knsl66F4.tmpfs
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\vebokyqu]ImagePath=[%PROGRAM_FILES%]\BD26FA30-1478773784-DF11-90FF-0023268FB84E\kns742C.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\rocufyky]ImagePath=[%PROGRAM_FILES%]\4C4C4544-1461994146-4D10-8038-B1C04F485731\jnsd3769.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\rijufoze]ImagePath=[%PROGRAM_FILES%]\4C4C4544-1461994146-4D10-8038-B1C04F485731\hnstA95F.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\dowidoly]ImagePath=[%PROGRAM_FILES%]\4C4C4544-1469521087-4D10-8038-B1C04F485731\jnss16E2.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\mipodito]ImagePath=[%PROGRAM_FILES%]\4C4C4544-1479369429-5110-804A-C8C04F375731\knsv73CC.tmpfs
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\zigipyro]ImagePath=[%LOCAL_APPDATA%]\03000200-1479170788-0500-0006-000700080009\qnskDA.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\ryzyvuge]ImagePath=[%PROGRAM_FILES%]\03000200-1479228268-0500-0006-000700080009\kns50BA.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\xumenicy]ImagePath=[%PROGRAM_FILES%]\0D20AF20-1479311194-11DD-8EFF-BCEE7B604C7D\knsgB647.tmpfs
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\mufymeci]ImagePath=[%PROGRAM_FILES%]\038D0240-1479180152-057B-2606-590700080009\knsgF50B.tmpfs
  • [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]autoauto="[%PROGRAM_FILES%]\guilder\reassembled.exe"
  • [HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]dutoauto="[%PROGRAM_FILES%]\guilder\lapsed.exe"
  • [HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]interpee="[%PROGRAM_FILES%]\Acronym\bsf.exe"
  • [HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]rutoauto="[%PROGRAM_FILES%]\guilder\reassembled.exe"
  • [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]interpee="[%PROGRAM_FILES%]\Acronym\bsf.exe"
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\cypyrovy]ImagePath=[%PROGRAM_FILES%]\4C4C4544-1479254160-4810-8035-CAC04F473232\knsyF397.tmpfs
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\kubysysu]ImagePath=[%PROGRAM_FILES%]\FFFFFFFF-1478880410-FFFF-FFFF-FFFFFFFFFFFF\kns171C.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\cofunejy]ImagePath=[%PROGRAM_FILES%]\285CCAB9-1479165742-11DD-9DDE-C8007F1950C2\knsl18D2.tmpfs
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\zoqyvoku]ImagePath=[%PROGRAM_FILES%]\00000000-1479234609-0000-0000-00242155A5D9\knsgE8FB.tmpfs
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\tojypiti]ImagePath=[%PROGRAM_FILES%]\03DE0294-1475142632-052A-8A06-1D0700080009\kns7D1A.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\wucotusy]ImagePath=[%PROGRAM_FILES%]\03000200-1458436312-0500-0006-000700080009\hnsjC8FB.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\zigipyro]ImagePath=[%LOCAL_APPDATA%]\00000000-1479079287-0000-0000-D43D7EC4DF84\qnsz543B.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\vukodygi]ImagePath=[%PROGRAM_FILES%]\4C4C4544-1478940763-4B10-8043-B8C04F4B3732\kns5C31.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\sogomuro]ImagePath=[%PROGRAM_FILES%]\B1ECD526-1476729828-537C-0582-A02BB824450B\knsn87BE.tmpfs
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\kezihybo]ImagePath=[%PROGRAM_FILES%]\FB9D059B-1479106420-DADB-EDB2-3B751F648A23\kns4416.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\kybyqury]ImagePath=[%PROGRAM_FILES%]\1EE2ACDF-1477501562-E411-A26A-F0761CA01E00\knsBE9F.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\qyjuceli]ImagePath=[%PROGRAM_FILES%]\48C96100-1479062878-11DD-9525-3085A98F4683\knsj4E26.tmpfs
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\bipimico]ImagePath=[%PROGRAM_FILES%]\5CE3BD5E-1477894647-E311-A96C-201A063B6AA9\knsp8C3A.tmpfs
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\zigipyro]ImagePath=[%LOCAL_APPDATA%]\11373C80-1478839255-8148-2C8C-386077BEADF2\qnsnBCD1.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\bibifeje]ImagePath=[%PROGRAM_FILES%]\11373C80-1478832004-8148-2C8C-386077BEADF2\knsxEF2C.tmpfs
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\nizosebo]ImagePath=[%PROGRAM_FILES%]\41313030-1453736894-4246-4433-4335FFFFFFFF\knsA0C5.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\zutuzuni]ImagePath=[%PROGRAM_FILES%]\41313030-1453736894-4246-4433-4335FFFFFFFF\jnsgBFF4.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\zigipyro]ImagePath=[%LOCAL_APPDATA%]\41313030-1478979366-4246-4433-4335FFFFFFFF\qnsb80B7.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\wucotusy]ImagePath=[%PROGRAM_FILES%]\41313030-1453736894-4246-4433-4335FFFFFFFF\hnsmD6F0.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\symiqoro]ImagePath=[%PROGRAM_FILES%]\35453035-1478955438-4335-3937-3945FFFFFFFF\kns8901.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\rijufoze]ImagePath=[%PROGRAM_FILES%]\4C4C4544-1470243451-4C10-8039-B7C04F345931\hnsgAB2A.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\dowidoly]ImagePath=[%PROGRAM_FILES%]\4C4C4544-1470243451-4C10-8039-B7C04F345931\jnse66CC.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\mujilugo]ImagePath=[%PROGRAM_FILES%]\D70DD1A2-1478449794-11E6-9614-507B9DFCDFC2\kns5099.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\kybunegi]ImagePath=[%PROGRAM_FILES%]\D70DD1A2-1478449794-11E6-9614-507B9DFCDFC2\knsdA774.tmpfs
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\dovufosy]ImagePath=[%PROGRAM_FILES%]\5083EFFF-1478718585-E311-A9FD-008CFA78DF8E\kns8EB2.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\fulecepo]ImagePath=[%PROGRAM_FILES%]\11604782-1478903474-E311-93F1-201A06F72BB2\kns4912.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\zigipyro]ImagePath=[%LOCAL_APPDATA%]\11604782-1478959380-E311-93F1-201A06F72BB2\qnsc6E20.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\dototimu]ImagePath=[%PROGRAM_FILES%]\03000200-1477741644-0500-0006-000700080009\knsA6C0.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\zigipyro]ImagePath=[%LOCAL_APPDATA%]\03000200-1478353684-0500-0006-000700080009\qnsb2DFD.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\zutuzuni]ImagePath=[%PROGRAM_FILES%]\990AA4E0-1454932227-11DF-B54C-E0CB4ED82326\jnspD1B.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\wucotusy]ImagePath=[%PROGRAM_FILES%]\990AA4E0-1454932227-11DF-B54C-E0CB4ED82326\hnsp22BF.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\rydygype]ImagePath=[%PROGRAM_FILES%]\95DFD938-1476973766-584E-B52A-2C600CD3F7AD\kns4F36.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\zigipyro]ImagePath=[%LOCAL_APPDATA%]\95DFD938-1478852780-584E-B52A-2C600CD3F7AD\qnslC55D.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\zigipyro]ImagePath=[%LOCAL_APPDATA%]\4C4C4544-1478804616-5010-8039-B6C04F4E334A\qnshE519.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\sycuzomy]ImagePath=[%PROGRAM_FILES%]\4C4C4544-1478793614-5010-8039-B6C04F4E334A\knsmDF7D.tmpfs
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\reqokehu]ImagePath=[%PROGRAM_FILES%]\4E3752A1-1476801894-EEBF-7266-08606E1280AD\kns722E.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\meguqysy]ImagePath=[%PROGRAM_FILES%]\34444335-1478188040-5330-304A-A02BB8515FB2\knsyB56F.tmpfs
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\rijufoze]ImagePath=[%PROGRAM_FILES%]\4C4C4544-1471344111-3910-8036-B2C04F4E3332\hnsm4D62.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\dowidoly]ImagePath=[%PROGRAM_FILES%]\4C4C4544-1471344111-3910-8036-B2C04F4E3332\jnsiD071.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\zigipyro]ImagePath=[%LOCAL_APPDATA%]\F0B1DA29-1452723882-5B40-B407-60A44C617781\qnsi7DAA.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\polefutu]ImagePath=[%PROGRAM_FILES%]\78657049-1478583339-0420-0000-C44100000000\knsuDA4A.tmpfs
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\fekowige]ImagePath=[%PROGRAM_FILES%]\4C4C4544-1478029806-3410-8039-B7C04F4B344A\knsxED88.tmpfs
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\qomuvihi]ImagePath=[%PROGRAM_FILES%]\D1FD35A3-1478807629-E511-B27E-705A0F620362\knsh2146.tmpfs
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\qunifomy]ImagePath=[%PROGRAM_FILES%]\76A9B100-1478730018-11DC-8008-D6AF6AC9FF72\knsg4769.tmpfs
  • [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]autoauto="[%PROGRAM_FILES%]\vig\whampoa.exe"
  • [HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]dutoauto="[%PROGRAM_FILES%]\vig\entreated.exe"
  • [HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]interpee="[%PROGRAM_FILES%]\Plausibly\gaddis.exe"
  • [HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]rutoauto="[%PROGRAM_FILES%]\vig\whampoa.exe"
  • [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]interpee="[%PROGRAM_FILES%]\Plausibly\gaddis.exe"
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\qomuvihi]ImagePath=[%PROGRAM_FILES%]\2AD542B9-1478810139-DF11-9CD1-0019998EFD55\knsuD2CB.tmpfs
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\zilexiky]ImagePath=[%PROGRAM_FILES%]\B8E92100-1478726483-81E0-2B8B-F46D044D07D7\knsx921C.tmpfs
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\wepiwonu]ImagePath=[%PROGRAM_FILES%]\370C1D74-1465038536-11DF-A847-69726B283D8E\kns3C46.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\qypehonu]ImagePath=[%PROGRAM_FILES%]\03D40274-1478708384-05B3-4606-350700080009\knsu2A8F.tmpfs
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\jipyfuxy]ImagePath=[%PROGRAM_FILES%]\019D43B8-1478073800-11DD-B119-64D25F0620F9\kns5CFF.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\jipyfuxy]ImagePath=[%PROGRAM_FILES%]\A28AF260-1478270587-11DF-8233-C80AA9EC91F9\kns32E6.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\zumeqyxu]ImagePath=[%PROGRAM_FILES%]\535C49C0-1478584371-11DD-B0EF-3085A9ADE42E\knsv4658.tmpfs
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\zigipyro]ImagePath=[%LOCAL_APPDATA%]\535C49C0-1478595216-11DD-B0EF-3085A9ADE42E\qnsaF76A.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\zigipyro]ImagePath=[%LOCAL_APPDATA%]\4C4C4544-1478609483-4410-8043-C7C04F593532\qnst1FD.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\finenedo]ImagePath=[%PROGRAM_FILES%]\4C4C4544-1476540966-4410-8043-C7C04F593532\kns8814.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\zumeqyxu]ImagePath=[%PROGRAM_FILES%]\4C4C4544-1478585441-5810-8033-B3C04F4E5431\knsm7C85.tmpfs
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\loxypube]ImagePath=[%PROGRAM_FILES%]\BCAD4184-1478517516-A047-AF92-54A050B02D96\kns286B.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\xomekinu]ImagePath=[%PROGRAM_FILES%]\4C4C4544-1478416991-4310-8032-B9C04F425731\kns83C0.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\rysewihe]ImagePath=[%PROGRAM_FILES%]\376DE408-1478480002-661C-43CD-B3F64FB52E10\knsy5D94.tmpfs
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\rijufoze]ImagePath=[%PROGRAM_FILES%]\45279060-1469641143-11E2-84AA-ECA86BB43F6C\hnslD61B.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\dowidoly]ImagePath=[%PROGRAM_FILES%]\45279060-1469641143-11E2-84AA-ECA86BB43F6C\jnskBC66.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\zifotome]ImagePath=[%PROGRAM_FILES%]\E699C878-1478298472-4DB6-877B-D017C293E3E9\knsu388D.tmpfs
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\qyjekesi]ImagePath=[%PROGRAM_FILES%]\BA9E8960-1478408578-11E3-A73F-D017C2D00058\knsm4C5D.tmpfs
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\qyjekesi]ImagePath=[%PROGRAM_FILES%]\4826B366-1478359682-8E4C-95BA-813CAAB9ACC5\kns6DD1.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\zigipyro]ImagePath=[%LOCAL_APPDATA%]\0C608475-1478282302-E411-A26A-F0761CA3BD54\qnsb253.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\tutihuji]ImagePath=[%PROGRAM_FILES%]\0C608475-1478193268-E411-A26A-F0761CA3BD54\kns2315.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\nuryhefu]ImagePath=[%PROGRAM_FILES%]\131B9781-1478329239-11CB-B480-922D0E9D421B\knsB12.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\vilycyqu]ImagePath=[%PROGRAM_FILES%]\99344E76-1477420906-E611-B27E-EC8EB593D033\kns1F19.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\nyhyqidy]ImagePath=[%PROGRAM_FILES%]\1F87BC78-1478413547-11E5-8B16-F0761CE08A6C\knsc4E4D.tmpfs
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\vozutihy]ImagePath=[%PROGRAM_FILES%]\22521FB1-1477990942-11DD-BBDA-6433F0670022\kns94B2.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\zutuzuni]ImagePath=[%PROGRAM_FILES%]\4C4C4544-1454355137-3110-8059-C4C04F515231\jnsvB433.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\wucotusy]ImagePath=[%PROGRAM_FILES%]\4C4C4544-1454355137-3110-8059-C4C04F515231\hnslD30B.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\zigipyro]ImagePath=[%LOCAL_APPDATA%]\43DA3800-1478461866-81E1-27E7-3085A91D69F0\qnsy4D5E.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\pepejoro]ImagePath=[%PROGRAM_FILES%]\43DA3800-1478437718-81E1-27E7-3085A91D69F0\knsxFB16.tmpfs
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\zutuzuni]ImagePath=[%PROGRAM_FILES%]\FCB2D880-1453183141-11E1-82E8-ECA86B75BD90\jnstAFD3.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\wucotusy]ImagePath=[%PROGRAM_FILES%]\FCB2D880-1453183141-11E1-82E8-ECA86B75BD90\hnspDA11.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\tuqomidu]ImagePath=[%PROGRAM_FILES%]\D3DB6733-1473578611-E111-BFF8-5C9AD8598A40\kns4E76.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\wyfucuhe]ImagePath=[%PROGRAM_FILES%]\0C608475-1478193268-E411-A26A-F0761CA3BD54\kns5B6A.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\xytekyby]ImagePath=[%PROGRAM_FILES%]\0B6AACE1-1474052881-11E1-9809-476B8CB23DF6\knsn498B.tmpfs
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\vequryno]ImagePath=[%PROGRAM_FILES%]\80F7E765-1478282102-11E2-8C3B-50C6590080F8\kns8B80.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\pupicyxy]ImagePath=[%PROGRAM_FILES%]\00000000-1476339847-0000-0000-6C626DCD51ED\knsCFD.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\zigipyro]ImagePath=[%LOCAL_APPDATA%]\00000000-1476895878-0000-0000-6C626DCD51ED\qnswFC1C.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\peribeby]ImagePath=[%PROGRAM_FILES%]\D8B7B190-1478243446-81E2-21DE-7054D2C0C265\knscBF65.tmpfs
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\sodynyny]ImagePath=[%PROGRAM_FILES%]\7DD35AF6-1477906852-4B2A-967A-3EE9603955EB\kns25F0.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\zigipyro]ImagePath=[%LOCAL_APPDATA%]\7DD35AF6-1478267600-4B2A-967A-3EE9603955EB\qnsw8DD6.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\rifepevi]ImagePath=[%PROGRAM_FILES%]\187C4D94-1443166500-DFE8-F49F-C4346B44F7EB\knsx4F46.tmpfs
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\gyvixodu]ImagePath=[%PROGRAM_FILES%]\187C4D94-1443166500-DFE8-F49F-C4346B44F7EB\hnsw7FF3.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\zigipyro]ImagePath=[%LOCAL_APPDATA%]\4B11A7A0-1478257238-11E0-3890-6D99103C0D29\qnspD177.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\luzygyno]ImagePath=[%PROGRAM_FILES%]\4B11A7A0-1478231735-11E0-3890-6D99103C0D29\knsy1EE1.tmpfs
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\kufuwive]ImagePath=[%PROGRAM_FILES%]\364EE69C-1478063576-9CB1-2111-88AE1D8EC448\knsgD.tmpfs
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\penulube]ImagePath=[%PROGRAM_FILES%]\FFFFFFFF-1477399774-FFFF-FFFF-FFFFFFFFFFFF\knsi2959.tmpfs
  • [HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]dutoauto="[%PROGRAM_FILES%]\miscalculation\dissuasion.exe"
  • [HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]rutoauto="[%PROGRAM_FILES%]\miscalculation\capetown.exe"
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\jyjupece]ImagePath=[%APPDATA%]\82FD0F00-1431321847-11DD-8C3C-382C4ABB1589\nsy53D.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\nugilevu]ImagePath=[%APPDATA%]\82FD0F00-1431321847-11DD-8C3C-382C4ABB1589\jnswAF03.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\nydyhumo]ImagePath=[%PROGRAM_FILES%]\019D43B8-1478073800-11DD-B119-64D25F0620F9\knsc2F99.tmpfs
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\fyxityro]ImagePath=[%PROGRAM_FILES%]\41F72F37-1473169125-E411-A26A-480FCFB661CC\kns482.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\zipifujo]ImagePath=[%PROGRAM_FILES%]\41F72F37-1473169125-E411-A26A-480FCFB661CC\knsF8E1.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\vemeteby]ImagePath=[%PROGRAM_FILES%]\41F72F37-1473169125-E411-A26A-480FCFB661CC\kns9157.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\motukily]ImagePath=[%PROGRAM_FILES%]\41F72F37-1473169125-E411-A26A-480FCFB661CC\kns2840.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\cudyhuve]ImagePath=[%PROGRAM_FILES%]\41F72F37-1473169125-E411-A26A-480FCFB661CC\kns86DF.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\fekowige]ImagePath=[%PROGRAM_FILES%]\FFFFFFFF-1477901496-FFFF-FFFF-FFFFFFFFFFFF\kns8453.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\zemocozo]ImagePath=[%PROGRAM_FILES%]\A7DA65F6-1477680398-0144-9687-A4744E31AB89\knsdC578.tmpfs
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\rijufoze]ImagePath=[%PROGRAM_FILES%]\4C4C4544-1463839374-3810-8036-B3C04F585931\hnse3EBC.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\dowidoly]ImagePath=[%PROGRAM_FILES%]\4C4C4544-1463839374-3810-8036-B3C04F585931\jnso25AE.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\hikivywo]ImagePath=[%PROGRAM_FILES%]\B81BC289-1477980010-F03A-0AF1-382C4AE888E5\knsF094.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\totezeze]ImagePath=[%PROGRAM_FILES%]\89FDE51F-1477896600-11E5-90AB-1C39472320FE\knsA6C2.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\zigipyro]ImagePath=[%LOCAL_APPDATA%]\89FDE51F-1477919583-11E5-90AB-1C39472320FE\qnst32FB.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\vubidesi]ImagePath=[%PROGRAM_FILES%]\03000200-1477822568-0500-0006-000700080009\kns3E0B.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\zigipyro]ImagePath=[%LOCAL_APPDATA%]\03000200-1478011991-0500-0006-000700080009\qnsb757F.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\hocibune]ImagePath=[%PROGRAM_FILES%]\03D40274-1476709117-0545-F906-220700080009\kns9E48.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\zijokimu]ImagePath=[%PROGRAM_FILES%]\4C4C4544-1477950897-3310-8033-B7C04F374253\kns40C.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\zigipyro]ImagePath=[%LOCAL_APPDATA%]\4C4C4544-1477989545-3310-8033-B7C04F374253\qnsl10BB.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\kixibylu]ImagePath=[%PROGRAM_FILES%]\B81BC289-1477980010-F03A-0AF1-382C4AE888E5\kns1F1.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\motifipu]ImagePath=[%PROGRAM_FILES%]\4C4C4544-1476579960-5310-804B-B2C04F594B31\knss64F.tmpfs
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\nibucuxo]ImagePath=[%PROGRAM_FILES%]\06113CB9-1477419619-11DB-BBDA-BB42D5A60019\kns4D97.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\zigipyro]ImagePath=[%LOCAL_APPDATA%]\06113CB9-1477932042-11DB-BBDA-BB42D5A60019\qnsj8B9B.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\zigipyro]ImagePath=[%LOCAL_APPDATA%]\60C33C10-1477931429-DD11-A769-848FA896A64F\qnsxE7D1.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\wymucure]ImagePath=[%PROGRAM_FILES%]\60C33C10-1477906653-DD11-A769-848FA896A64F\knssDE33.tmpfs
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\zigipyro]ImagePath=[%LOCAL_APPDATA%]\60C33C10-1477936766-DD11-A769-848FA896A64F\qnsm8EAA.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\rogucemy]ImagePath=[%PROGRAM_FILES%]\4C4C4544-1477898021-4D10-804E-B2C04F585831\knsv44E6.tmpfs
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\rujemenu]ImagePath=[%PROGRAM_FILES%]\8E423170-1469987624-11E2-8D44-5453EDBC08EE\knsC8E0.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\pereboci]ImagePath=[%PROGRAM_FILES%]\8E423170-1469987624-11E2-8D44-5453EDBC08EE\kns3E28.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\rijufoze]ImagePath=[%PROGRAM_FILES%]\8E423170-1469987624-11E2-8D44-5453EDBC08EE\hnsk4970.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\moruxefo]ImagePath=[%APPDATA%]\24C5E98C-1428944998-DC42-A978-089E014CE6F8\jnsm75AD.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\hyverumu]ImagePath=[%PROGRAM_FILES%]\FE09771B-1439849289-11E4-A818-28D244D9DD0A\jnsh621C.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\comyninu]ImagePath=[%PROGRAM_FILES%]\FE09771B-1439849289-11E4-A818-28D244D9DD0A\hnsk8FD5.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\cebowone]ImagePath=[%PROGRAM_FILES%]\00000000-1477824825-0000-0000-6C626D80703B\knsAA56.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\bubyhyme]ImagePath=[%PROGRAM_FILES%]\253F91CA-1477826521-11E6-B4F4-C85B765B91FA\knsyA183.tmpfs
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\nimehygo]ImagePath=[%PROGRAM_FILES%]\03000200-1434179727-0500-0006-000700080009\knsy8709.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\jitisoli]ImagePath=[%PROGRAM_FILES%]\3FF50A0A-1477805506-9688-69AC-101F74158924\knsyE243.tmpfs
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\sudyfofi]ImagePath=[%LOCAL_APPDATA%]\4B435451-1430692966-3037-4532-50465D311B50\cnss6C2A.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\jowysejo]ImagePath=[%PROGRAM_FILES%]\4C4C4544-1476118770-4810-804D-B7C04F515231\knsc5E3B.tmpfs
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\fotucumi]ImagePath=[%PROGRAM_FILES%]\35444335-1477808553-5336-5A37-D0BF9C89EE50\kns5C9F.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\zigipyro]ImagePath=[%LOCAL_APPDATA%]\39464E43-1477764180-5A32-315A-00269E09B15C\qnsrA16F.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\luwebyje]ImagePath=[%PROGRAM_FILES%]\39464E43-1477749947-5A32-315A-00269E09B15C\knsbC886.tmpfs
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\wigyxepo]ImagePath=[%PROGRAM_FILES%]\01F058AA-1477724886-CB11-BA7D-B1FAEF8004C1\knsw4A7F.tmpfs
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\rijufoze]ImagePath=[%PROGRAM_FILES%]\03DE0294-1466071301-0507-9D06-010700080009\hnsc9F32.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\dowidoly]ImagePath=[%PROGRAM_FILES%]\03DE0294-1466071301-0507-9D06-010700080009\jnss8164.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\vuvyjeve]ImagePath=[%PROGRAM_FILES%]\E49A4700-1477542096-1013-92C5-FCBB7EECD82A\kns9D1B.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\syhydubu]ImagePath=[%PROGRAM_FILES%]\4C4C4544-1474739890-5810-8030-C7C04F485731\kns14B5.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\zigipyro]ImagePath=[%LOCAL_APPDATA%]\00000000-1477226861-0000-0000-001A4D9311B4\qnss34A.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\lezopoco]ImagePath=[%PROGRAM_FILES%]\00000000-1477216013-0000-0000-001A4D9311B4\knsc2187.tmpfs
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\zogybuku]ImagePath=[%PROGRAM_FILES%]\E29844E1-1477032595-11E1-875E-31AA13D8F2CB\kns4A5A.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\zigipyro]ImagePath=[%LOCAL_APPDATA%]\7CDEB551-1477744831-AC0B-A8F1-DA5064ACA912\qnsp4F91.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\decirole]ImagePath=[%PROGRAM_FILES%]\7CDEB551-1477738448-AC0B-A8F1-DA5064ACA912\knsqD667.tmpfs
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\fozocowo]ImagePath=[%PROGRAM_FILES%]\00000000-1473907072-0000-0000-D43D7EE23FD0\kns6F38.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\dituliwi]ImagePath=[%PROGRAM_FILES%]\4C4C4544-1477588537-3910-8052-B8C04F564232\knskA379.tmpfs
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\gipyjohi]ImagePath=[%PROGRAM_FILES%]\EEA21140-1477580699-81F5-2D48-E03F49DDDE96\knsoE241.tmpfs
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\zigipyro]ImagePath=[%LOCAL_APPDATA%]\14CFDF05-1477344510-5B5F-5744-0DB720E27CDA\qnsx3D25.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\zigipyro]ImagePath=[%LOCAL_APPDATA%]\01AC0263-1477571529-CB11-A424-A47894D55D53\qnsr87E9.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\deqewicu]ImagePath=[%PROGRAM_FILES%]\01AC0263-1477549899-CB11-A424-A47894D55D53\knsqA867.tmpfs
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\gopibeko]ImagePath=[%LOCAL_APPDATA%]\800EE6EF-1440632827-E111-8024-B05992031838\snsuCB8C.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\puxuzico]ImagePath=[%PROGRAM_FILES%]\16ED66E0-1477476323-11DD-9D6C-AC220B27977A\knsx77E4.tmpfs
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\suwozume]ImagePath=[%PROGRAM_FILES%]\2C95AF4F-1477515492-E211-87F5-208984500E35\kns2B84.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\jomedyfy]ImagePath=[%PROGRAM_FILES%]\14CFDF05-1467230895-5B5F-5744-0DB720E27CDA\knsA994.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\nenukone]ImagePath=[%PROGRAM_FILES%]\35453035-1477469087-4239-3334-3834FFFFFFFF\knstA17A.tmpfs
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\bopihefi]ImagePath=[%PROGRAM_FILES%]\35453035-1477471577-4239-3334-3834FFFFFFFF\knsb4266.tmpfs
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\rijufoze]ImagePath=[%PROGRAM_FILES%]\4C4C4544-1470158962-3310-8046-B4C04F503332\hnsj5987.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\dowidoly]ImagePath=[%PROGRAM_FILES%]\4C4C4544-1470158962-3310-8046-B4C04F503332\jnso2980.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\qocokecu]ImagePath=[%PROGRAM_FILES%]\CE82D42B-1477235103-11E0-B632-A0C45F0E6EF5\knsq3EF1.tmpfs
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\dujypyjo]ImagePath=[%PROGRAM_FILES%]\967F14A0-1477452716-81E3-290F-0C54A50C0AB1\kns2633.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\nenukone]ImagePath=[%PROGRAM_FILES%]\03AA02FC-1477453415-0599-3606-750700080009\kns4671.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\zigipyro]ImagePath=[%LOCAL_APPDATA%]\A829086C-1477487502-11E4-A26A-F0761CA39A4C\qnsq291A.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\deqewicu]ImagePath=[%PROGRAM_FILES%]\A829086C-1477512656-11E4-A26A-F0761CA39A4C\knsj73F6.tmpfs
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\zigipyro]ImagePath=[%LOCAL_APPDATA%]\A829086C-1477525283-11E4-A26A-F0761CA39A4C\qnsj52A7.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\zigipyro]ImagePath=[%LOCAL_APPDATA%]\4C4C4544-1466035196-3910-8058-C4C04F573631\qnsh1637.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\rijufoze]ImagePath=[%PROGRAM_FILES%]\4C4C4544-1465326998-3910-8058-C4C04F573631\hnsm699E.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\dowidoly]ImagePath=[%PROGRAM_FILES%]\4C4C4544-1465326998-3910-8058-C4C04F573631\jnsx44AF.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\jopusiri]ImagePath=[%PROGRAM_FILES%]\52768508-1477347586-E211-B1D3-B888E3B2287A\knsv2682.tmpfs
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\copofiti]ImagePath=[%PROGRAM_FILES%]\B923F2D4-1477271400-11E3-BE7E-28E34789E930\knsx4C9A.tmpfs
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\qezigizy]ImagePath=[%PROGRAM_FILES%]\4C4C4544-1476366969-4610-8058-B1C04F483232\knsA49C.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\zigipyro]ImagePath=[%LOCAL_APPDATA%]\4C4C4544-1477352586-4610-8058-B1C04F483232\qnslF0D9.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\xydoliwu]ImagePath=[%PROGRAM_FILES%]\227C14C0-1476387466-11DD-9A51-F07959633931\knsqE0A5.tmpfs
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\punegudo]ImagePath=[%PROGRAM_FILES%]\361B2928-1477409860-E511-B27E-705A0FB99139\knscB80B.tmpfs
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\toniqobe]ImagePath=[%PROGRAM_FILES%]\706D07E4-1447041490-3044-BA19-4CEF8E00F02C\hnsr2338.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\pyzeqewe]ImagePath=[%PROGRAM_FILES%]\706D07E4-1447041490-3044-BA19-4CEF8E00F02C\jnss2328.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\delyfiji]ImagePath=[%LOCAL_APPDATA%]\706D07E4-1447025345-3044-BA19-4CEF8E00F02C\snsc2354.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\rusexojo]ImagePath=[%PROGRAM_FILES%]\038D0240-1476958198-05E9-3D06-100700080009\kns33EA.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\tyriwixo]ImagePath=[%PROGRAM_FILES%]\03000200-1477299194-0500-0006-000700080009\knsvA4CE.tmpfs
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\hynetoho]ImagePath=[%PROGRAM_FILES%]\4C4C4544-1476184543-5710-8039-B9C04F323253\kns197F.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\zigipyro]ImagePath=[%LOCAL_APPDATA%]\4C4C4544-1477319486-5710-8039-B9C04F323253\qnsp7A51.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\hiwiwico]ImagePath=[%PROGRAM_FILES%]\849D0D00-1476427783-11D3-8A65-2C56DCD24808\kns62C.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\zigipyro]ImagePath=[%LOCAL_APPDATA%]\849D0D00-1477263523-11D3-8A65-2C56DCD24808\qnsm11D0.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\zigipyro]ImagePath=[%LOCAL_APPDATA%]\1375DBE0-1477161796-11E5-BA06-305A3A0832E6\qnso2C8.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\notogevu]ImagePath=[%PROGRAM_FILES%]\1375DBE0-1477152478-11E5-BA06-305A3A0832E6\knsn9704.tmpfs
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\zigipyro]ImagePath=[%LOCAL_APPDATA%]\64B3C303-1476797034-4342-B08E-C80AA9CE1552\qnsp15EF.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\nyfifosi]ImagePath=[%PROGRAM_FILES%]\64B3C303-1476787723-4342-B08E-C80AA9CE1552\knshF642.tmpfs
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\bemexyhi]ImagePath=[%PROGRAM_FILES%]\4C4C4544-1477255414-5210-8058-B3C04F36354A\knssD501.tmpfs
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\mezovyru]ImagePath=[%PROGRAM_FILES%]\BF232720-1477136193-11E3-96D0-9C5C8E85EEDD\knsE0D1.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\xudefijy]ImagePath=[%PROGRAM_FILES%]\03DE0294-1475142632-052A-8A06-1D0700080009\knsE3BB.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\rodeqypu]ImagePath=[%PROGRAM_FILES%]\E4EBA72A-1477172119-3249-90B3-2C600C7C5572\knsdB924.tmpfs
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\lezopoco]ImagePath=[%PROGRAM_FILES%]\7984FA70-1477218046-81E4-3A42-086266DEFE55\knskC835.tmpfs
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\pepybumo]ImagePath=[%PROGRAM_FILES%]\BBBBBBBB-1477205927-BBBB-BBBB-D43D7EEAAE73\knsDCDA.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\cenyveno]ImagePath=[%PROGRAM_FILES%]\BBBBBBBB-1477205927-BBBB-BBBB-D43D7EEAAE73\knsF9EE.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\zigipyro]ImagePath=[%LOCAL_APPDATA%]\BBBBBBBB-1477260296-BBBB-BBBB-D43D7EEAAE73\qnsl3583.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\wotytuti]ImagePath=[%PROGRAM_FILES%]\00062B87-1476209202-0709-FFFF-AC220B567D5F\kns50C0.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\hupizofu]ImagePath=[%PROGRAM_FILES%]\3C2E2520-1473502987-11DD-B4DE-08606E45B17B\kns1368.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\rijufoze]ImagePath=[%PROGRAM_FILES%]\39B56000-1467214842-11E2-8C80-0861A7892400\hnsgC2F0.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\dowidoly]ImagePath=[%PROGRAM_FILES%]\39B56000-1467214842-11E2-8C80-0861A7892400\jnsl9D45.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\rijufoze]ImagePath=[%PROGRAM_FILES%]\B24004C4-1469283513-11E2-9F0C-E6446F200F00\hnsn8183.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\dowidoly]ImagePath=[%PROGRAM_FILES%]\B24004C4-1469283513-11E2-9F0C-E6446F200F00\jnsx65B7.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\roqenufe]ImagePath=[%PROGRAM_FILES%]\D3AB0800-1449312307-81E1-2000-5404A64FAE57\jnsi5D55.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\nolusyci]ImagePath=[%PROGRAM_FILES%]\D3AB0800-1449312307-81E1-2000-5404A64FAE57\knsn45AA.tmpfs
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\zutuzuni]ImagePath=[%PROGRAM_FILES%]\5D6B240D-1452903883-2D35-1B32-B4B52F2C9BDC\jnsfD063.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\wucotusy]ImagePath=[%PROGRAM_FILES%]\5D6B240D-1452903883-2D35-1B32-B4B52F2C9BDC\hnsuECCA.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\rowugoqo]ImagePath=[%LOCAL_APPDATA%]\5D6B240D-1452918464-2D35-1B32-B4B52F2C9BDC\snsb7367.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\cevupyse]ImagePath=[%PROGRAM_FILES%]\46364331-1477134842-3435-3736-3734FFFFFFFF\knsa5A09.tmpfs
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\zigipyro]ImagePath=[%LOCAL_APPDATA%]\03000200-1477139169-0500-0006-000700080009\qnsrBF1D.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\jumywyle]ImagePath=[%PROGRAM_FILES%]\03000200-1477117524-0500-0006-000700080009\knsaAE31.tmpfs
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\buweqoje]ImagePath=[%PROGRAM_FILES%]\8275C233-1476950636-F846-9C5C-F0617B779454\kns14B2.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\zigipyro]ImagePath=[%LOCAL_APPDATA%]\8275C233-1477072805-F846-9C5C-F0617B779454\qnskAA24.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\qykocisu]ImagePath=[%PROGRAM_FILES%]\03000200-1474010430-0500-0006-000700080009\knsBF80.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\fijovoje]ImagePath=[%PROGRAM_FILES%]\AA8DF300-1476903198-81E2-2ACA-4C72B90E6DE8\knsiA2B1.tmpfs
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\deqefove]ImagePath=[%PROGRAM_FILES%]\4C4C4544-1476820664-5810-8042-C4C04F594E31\kns6CB6.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\rudymexe]ImagePath=[%PROGRAM_FILES%]\03000200-1476983757-0500-0006-000700080009\knsl811A.tmpfs
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\kisozuhe]ImagePath=[%PROGRAM_FILES%]\4C4C4544-1476995241-3210-8032-C7C04F393332\knsc10AD.tmpfs
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\fijovoje]ImagePath=[%PROGRAM_FILES%]\7E50E710-1475000297-11E4-B57F-68F728374E8F\kns19E4.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\zigipyro]ImagePath=[%LOCAL_APPDATA%]\7E50E710-1476994889-11E4-B57F-68F728374E8F\qnstC97F.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\rogohoru]ImagePath=[%PROGRAM_FILES%]\F17B34DE-1457206518-E411-B2A0-1458D00C1F1E\knsD8A.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\fujerevo]ImagePath=[%PROGRAM_FILES%]\F17B34DE-1472492106-E411-B2A0-1458D00C1F1E\knsD3D.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\tygefyhy]ImagePath=[%PROGRAM_FILES%]\F17B34DE-1472492106-E411-B2A0-1458D00C1F1E\knsA36D.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\fijovoje]ImagePath=[%PROGRAM_FILES%]\F17B34DE-1472492106-E411-B2A0-1458D00C1F1E\kns3247.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\cetudeve]ImagePath=[%PROGRAM_FILES%]\F17B34DE-1472492106-E411-B2A0-1458D00C1F1E\knsEA3B.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\wucotusy]ImagePath=[%PROGRAM_FILES%]\F17B34DE-1457206518-E411-B2A0-1458D00C1F1E\hnsbB07F.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\rijufoze]ImagePath=[%PROGRAM_FILES%]\F17B34DE-1472492106-E411-B2A0-1458D00C1F1E\hnscA19C.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\dowidoly]ImagePath=[%PROGRAM_FILES%]\F17B34DE-1472492106-E411-B2A0-1458D00C1F1E\jnsz411C.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\dojygici]ImagePath=[%PROGRAM_FILES%]\F17B34DE-1457206518-E411-B2A0-1458D00C1F1E\jnsu79EC.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\zigipyro]ImagePath=[%LOCAL_APPDATA%]\4C4C4544-1456926149-4E10-8054-C4C04F304E31\qnsiC32.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\zutuzuni]ImagePath=[%PROGRAM_FILES%]\4C4C4544-1456851416-4E10-8054-C4C04F304E31\jnsqFBA0.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\wucotusy]ImagePath=[%PROGRAM_FILES%]\4C4C4544-1456851416-4E10-8054-C4C04F304E31\hnsm6EEE.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\zipifujo]ImagePath=[%PROGRAM_FILES%]\4C4C4544-1476980693-4310-805A-B3C04F433332\knsv4B5E.tmpfs
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\bokuhepe]ImagePath=[%PROGRAM_FILES%]\0FE6DCCB-1476877095-3403-02D7-305A3A4B5C6A\knswDA85.tmpfs
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\fijovoje]ImagePath=[%PROGRAM_FILES%]\5E88F2E9-1476905331-FE9C-245E-D0C89CFE245E\knsb2B28.tmpfs
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\qykocisu]ImagePath=[%PROGRAM_FILES%]\49B9724C-1476816555-1220-0727-005425000000\knsE2E3.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\kiqidetu]ImagePath=[%PROGRAM_FILES%]\FFFFFFFF-1447164148-FFFF-FFFF-FFFFFFFFFFFF\jnss147.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\gilefywi]ImagePath=[%PROGRAM_FILES%]\FFFFFFFF-1447164148-FFFF-FFFF-FFFFFFFFFFFF\hnsv14F.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\zigipyro]ImagePath=[%LOCAL_APPDATA%]\B5DC02FF-1476745843-11E3-9381-871DA20FF0FF\qnse4510.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\zigipyro]ImagePath=[%LOCAL_APPDATA%]\07691080-1476527259-815C-20E0-7C05078637F5\qnsbA971.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\ginozitu]ImagePath=[%PROGRAM_FILES%]\7C629D72-1476451244-433A-C09B-7824AFBC217D\knsuA83.tmpfs
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\juwypyru]ImagePath=[%PROGRAM_FILES%]\4C4C4544-1476003539-0010-8000-80C04F000000\kns1862.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\tetobepu]ImagePath=[%PROGRAM_FILES%]\4D776038-1476728083-1220-0222-063623000000\knsc9C83.tmpfs
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\lykogejy]ImagePath=[%PROGRAM_FILES%]\33444335-1476657783-4A34-5443-7446A085787F\knsaD737.tmpfs
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\futyhuri]ImagePath=[%PROGRAM_FILES%]\C7A0A2C5-1475934921-DB4D-9E79-F890858FC77D\knsb6F3C.tmpfs
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\zotydutu]ImagePath=[%PROGRAM_FILES%]\4C4C4544-1476694080-5310-8052-B5C04F313032\knszBE6C.tmpfs
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\zigipyro]ImagePath=[%LOCAL_APPDATA%]\4C4C4544-1476722957-5310-8052-B5C04F313032\qnsfE827.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\cimurypu]ImagePath=[%PROGRAM_FILES%]\8801D31C-1476108041-11DD-1E8C-6D990E2C5D29\kns1064.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\zigipyro]ImagePath=[%LOCAL_APPDATA%]\03000200-1460960211-0500-0006-000700080009\qnsc2F8C.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\wucotusy]ImagePath=[%PROGRAM_FILES%]\03000200-1458051751-0500-0006-000700080009\hnsu60D8.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\gerocyni]ImagePath=[%PROGRAM_FILES%]\03000200-1458051751-0500-0006-000700080009\jnsf4387.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\kewobofy]ImagePath=[%PROGRAM_FILES%]\8B212E7F-1476631968-E111-9F1A-DC0EA168BC1F\knsz4B2A.tmpfs
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\cemoqige]ImagePath=[%PROGRAM_FILES%]\03000200-1476537928-0500-0006-000700080009\knsd1C8A.tmpfs
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\tinoroko]ImagePath=[%PROGRAM_FILES%]\034B2859-1476389356-DB11-B2DA-0016D48AC46D\knsm61E9.tmpfs
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\rocufyky]ImagePath=[%PROGRAM_FILES%]\E87DCC7F-1460978581-E311-8BBA-F8A9639D0041\jnse3378.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\rijufoze]ImagePath=[%PROGRAM_FILES%]\E87DCC7F-1460978581-E311-8BBA-F8A9639D0041\hnsw5134.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\tinoroko]ImagePath=[%PROGRAM_FILES%]\03000200-1475786945-0500-0006-000700080009\knsDBE0.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\ryrojiry]ImagePath=[%PROGRAM_FILES%]\DD812666-1448529807-8B81-B580-00235467791F\hnspA249.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\pupivyhi]ImagePath=[%PROGRAM_FILES%]\DD812666-1448529807-8B81-B580-00235467791F\jnsp88FD.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\dokiduke]ImagePath=[%PROGRAM_FILES%]\DD812666-1448529807-8B81-B580-00235467791F\knsp7082.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\wucotusy]ImagePath=[%PROGRAM_FILES%]\03000200-1454573095-0500-0006-000700080009\hnsi2CCC.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\regusyfi]ImagePath=[%PROGRAM_FILES%]\E03CFB69-1476576775-DE11-BBA9-001E33C8B377\knswDCF5.tmpfs
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\zigipyro]ImagePath=[%LOCAL_APPDATA%]\9F26F937-1476634654-B540-B994-A51066D046DA\qnsh90F3.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\nitiguxe]ImagePath=[%PROGRAM_FILES%]\9F26F937-1476605764-B540-B994-A51066D046DA\knsy3EE3.tmpfs
  • [HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]dutoauto="[%PROGRAM_FILES%]\arnaud\interscholastic.exe"
  • [HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]rutoauto="[%PROGRAM_FILES%]\arnaud\surfaced.exe"
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\zigipyro]ImagePath=[%LOCAL_APPDATA%]\A829086C-1476538722-11E4-A26A-F0761CA39A4C\qnse83EE.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\gyjyguwi]ImagePath=[%PROGRAM_FILES%]\A829086C-1476527853-11E4-A26A-F0761CA39A4C\knsf87EE.tmpfs
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\voterepo]ImagePath=[%PROGRAM_FILES%]\6404B200-1475729584-11E2-8668-089E01580DE2\knsBDDB.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\popecuxy]ImagePath=[%PROGRAM_FILES%]\D835E980-1476528052-81E1-3E9E-C860000F25EA\knsrC488.tmpfs
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\wyhufibi]ImagePath=[%PROGRAM_FILES%]\D835E980-1476528052-81E1-3E9E-C860000F25EA\kns8C5D.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\niduvubo]ImagePath=[%PROGRAM_FILES%]\0A67F716-1435011004-B94C-A6DD-089E01B8B2FE\knscBA2.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\zigipyro]ImagePath=[%LOCAL_APPDATA%]\0A67F716-1453163765-B94C-A6DD-089E01B8B2FE\qnsq60EE.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\zedepory]ImagePath=[%APPDATA%]\0A67F716-1435011004-B94C-A6DD-089E01B8B2FE\hnsw4393.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\kysykiti]ImagePath=[%LOCAL_APPDATA%]\0A67F716-1435036812-B94C-A6DD-089E01B8B2FE\snsp17AF.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\zigipyro]ImagePath=[%LOCAL_APPDATA%]\2F088FD9-1451421917-5D4F-A707-A91B095048E5\qnsyB40E.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\xowodofy]ImagePath=[%PROGRAM_FILES%]\2F088FD9-1448163877-5D4F-A707-A91B095048E5\knsw7231.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\zigipyro]ImagePath=[%LOCAL_APPDATA%]\ADF22EE0-1454728356-11B2-8000-CCBC563BE5E1\qnspE59F.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\myfitedi]ImagePath=[%PROGRAM_FILES%]\3A8C0DE0-1476398884-11DD-BCE6-3497F6278559\knsm4919.tmpfs
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\zigipyro]ImagePath=[%LOCAL_APPDATA%]\4C4C4544-1470175681-3110-804A-C6C04F525A31\qnsnD75F.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\rijufoze]ImagePath=[%PROGRAM_FILES%]\4C4C4544-1470092201-3110-804A-C6C04F525A31\hnsi7236.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\dowidoly]ImagePath=[%PROGRAM_FILES%]\4C4C4544-1470092201-3110-804A-C6C04F525A31\jnsj5A09.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\zujewufi]ImagePath=[%PROGRAM_FILES%]\86EACD05-1471024608-E111-8F3D-DC0EA1AE5C79\knsCE87.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\jugutefu]ImagePath=[%PROGRAM_FILES%]\86EACD05-1471024608-E111-8F3D-DC0EA1AE5C79\knsAE3E.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\hynetoho]ImagePath=[%PROGRAM_FILES%]\86EACD05-1471024608-E111-8F3D-DC0EA1AE5C79\knsED8B.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\rijufoze]ImagePath=[%PROGRAM_FILES%]\CED46058-1469706056-D911-A5AF-0030D3001E09\hnsg21D8.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\dowidoly]ImagePath=[%PROGRAM_FILES%]\CED46058-1469706056-D911-A5AF-0030D3001E09\jnsd752B.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\cicikomo]ImagePath=[%PROGRAM_FILES%]\80FFA3DE-1475951865-D311-8547-00262D4A967D\kns2892.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\muhexibo]ImagePath=[%PROGRAM_FILES%]\00000000-1476214500-0000-0000-1C6F6536D0BE\knsD91E.tmp
  • [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]autoauto="[%PROGRAM_FILES%]\neatest\favourably.exe"
  • [HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]dutoauto="[%PROGRAM_FILES%]\neatest\debts.exe"
  • [HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]rutoauto="[%PROGRAM_FILES%]\neatest\favourably.exe"
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\zigipyro]ImagePath=[%LOCAL_APPDATA%]\D0C36514-1476265521-9D5F-9CF4-EFBEADDEEFBE\qnsw936.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\myxuceto]ImagePath=[%PROGRAM_FILES%]\D0C36514-1476162689-9D5F-9CF4-EFBEADDEEFBE\kns2E81.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\luzojowe]ImagePath=[%PROGRAM_FILES%]\8801D31C-1476108041-11DD-1E8C-6D990E2C5D29\kns94B3.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\dowykovi]ImagePath=[%PROGRAM_FILES%]\E0FB2940-1476348065-E011-B327-C592B6440307\knsd19CE.tmpfs
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\tiqezesu]ImagePath=[%PROGRAM_FILES%]\0BEE1940-1473090994-11D9-B3C3-C86000C35EC3\kns3664.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\dixysusu]ImagePath=[%PROGRAM_FILES%]\0BEE1940-1473090994-11D9-B3C3-C86000C35EC3\kns438B.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\zigipyro]ImagePath=[%LOCAL_APPDATA%]\4C4C4544-1476230119-3110-804D-B3C04F4A5631\qnssA75E.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\wucotusy]ImagePath=[%PROGRAM_FILES%]\4C4C4544-1457897883-2010-8020-A0C04F202020\hnsj7EBD.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\gerocyni]ImagePath=[%PROGRAM_FILES%]\4C4C4544-1457897883-2010-8020-A0C04F202020\jnsd6363.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\rijufoze]ImagePath=[%PROGRAM_FILES%]\1F8D0D20-1462298402-11B2-8000-DC9C02A73BD6\hnsmC19C.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\zizusyju]ImagePath=[%PROGRAM_FILES%]\82BE45A4-1449956540-DF11-A807-88AA1D58C258\hnsl81DE.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\zigipyro]ImagePath=[%LOCAL_APPDATA%]\82BE45A4-1459894758-DF11-A807-88AA1D58C258\qnsdD441.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\woforemu]ImagePath=[%LOCAL_APPDATA%]\82BE45A4-1449963893-DF11-A807-88AA1D58C258\snsm677C.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\rizyqibe]ImagePath=[%PROGRAM_FILES%]\82BE45A4-1449956540-DF11-A807-88AA1D58C258\jnsb61EE.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\ligegiji]ImagePath=[%PROGRAM_FILES%]\82BE45A4-1449956540-DF11-A807-88AA1D58C258\knspB2D5.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\rijufoze]ImagePath=[%PROGRAM_FILES%]\1E824896-1469096491-A03E-9D79-60A44C5BC270\hnseF5FC.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\dowidoly]ImagePath=[%PROGRAM_FILES%]\1E824896-1469096491-A03E-9D79-60A44C5BC270\jnseDB78.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\rijufoze]ImagePath=[%PROGRAM_FILES%]\8BCE2A55-1470372450-B50D-000E-ABE0C065018D\hnsmA73A.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\dowidoly]ImagePath=[%PROGRAM_FILES%]\8BCE2A55-1470372450-B50D-000E-ABE0C065018D\jnsrF7D7.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\zigipyro]ImagePath=[%LOCAL_APPDATA%]\F7686241-1476104779-FDEC-DDA5-1C75089FEEF2\qnsr88B1.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\pegityre]ImagePath=[%PROGRAM_FILES%]\F7686241-1476079644-FDEC-DDA5-1C75089FEEF2\knsx5D55.tmpfs
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\zutuzuni]ImagePath=[%PROGRAM_FILES%]\00000000-1452921606-0000-0000-00241DF628A6\jnsm8476.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\wucotusy]ImagePath=[%PROGRAM_FILES%]\00000000-1452921606-0000-0000-00241DF628A6\hnsrAA11.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\rowugoqo]ImagePath=[%LOCAL_APPDATA%]\00000000-1452941491-0000-0000-00241DF628A6\snsy7A70.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\lihegubi]ImagePath=[%PROGRAM_FILES%]\4C4C4544-1476048940-3510-8053-C4C04F4D5231\knseD139.tmpfs
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\zigipyro]ImagePath=[%LOCAL_APPDATA%]\DE1CD63F-1475597440-9A49-A02C-1C872CA50316\qnsk712A.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\cidysisi]ImagePath=[%PROGRAM_FILES%]\DE1CD63F-1475571994-9A49-A02C-1C872CA50316\knszD2E6.tmpfs
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\tigeryji]ImagePath=[%LOCAL_APPDATA%]\172B0620-1426013641-11D5-A17E-14DAE99369B2\cnsb3E4B.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\rowywexi]ImagePath=[%PROGRAM_FILES%]\E7CF9340-1475869450-11DE-89C0-002618A6D310\kns624C.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\rikyremu]ImagePath=[%PROGRAM_FILES%]\D3DC9CC8-1440664935-1220-0110-143446000000\knsc6FBF.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\jimocoso]ImagePath=[%PROGRAM_FILES%]\D3DC9CC8-1440664935-1220-0110-143446000000\jnsjFD80.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\vehoqebo]ImagePath=[%PROGRAM_FILES%]\ABDAEF40-1475856689-11E3-B477-3497F6926FBE\knsoBC79.tmpfs
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\zequxyri]ImagePath=[%PROGRAM_FILES%]\AEFDFEA3-1475839269-DF11-B9C0-0011D8A46686\knszAFA2.tmpfs
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\hyverumu]ImagePath=[%PROGRAM_FILES%]\7C49FC1B-1439498042-9242-B0F2-C4544458C5DF\jnsk80ED.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\gypovige]ImagePath=[%PROGRAM_FILES%]\A962756A-1449608503-DE11-A660-002622B47738\knsi7.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\woforemu]ImagePath=[%LOCAL_APPDATA%]\A962756A-1449612244-DE11-A660-002622B47738\snsc9A8A.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\roqenufe]ImagePath=[%PROGRAM_FILES%]\A962756A-1449608503-DE11-A660-002622B47738\jnsl1C24.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\nyneryxo]ImagePath=[%PROGRAM_FILES%]\A962756A-1449608503-DE11-A660-002622B47738\hnsr6A46.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\hidekoqe]ImagePath=[%LOCAL_APPDATA%]\A962756A-1449666450-DE11-A660-002622B47738\qnsbCBE7.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\guzodobi]ImagePath=[%PROGRAM_FILES%]\234D2060-1475703468-11DD-A873-0862662D6FEE\knst81D9.tmpfs