Exterminate It! Antimalware

malpedia

Known threats:699,742 Last Update:October 27, 11:19

Testimonials

Just want to say that apparently your Exterminate It has worked like a charm. I was infected with a most troublesome Malware Trojan that kept replicating every time McAfee found, blocked and removed it... most annoying for several days... until Mr. Google led me to your door. What a God send!

With thanks,

Tom S.

MultiPlug- Registry Values List

This is a complete list of MultiPlug registry values collected by Exterminate It!. If you find any of these registry values on your PC, your computer is very likely to be infected with the MultiPlug - adware.

IMPORTANT: Because the registry is a core component of your Windows system, it is strongly recommended that you back up the registry before you begin deleting keys and values. For information about backing up the Windows registry, refer to the Registry Editor online help.
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\zigipyro]ImagePath=[%LOCAL_APPDATA%]\00000011-1483610370-0000-0000-50465D9B6A9E\qnsiAFFE.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\nyqigopo]ImagePath=[%PROGRAM_FILES%]\8FCC2DCC-1483368148-11E6-8D30-5C2C09521C00\knsrBEE7.tmpfs
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\zigipyro]ImagePath=[%LOCAL_APPDATA%]\611931A1-1483387304-A845-8550-49F86AEDACEA\qnsc4134.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\tocyfori]ImagePath=[%PROGRAM_FILES%]\CC29F313-1483436008-11DF-8B22-6EC0590080CF\knsD49E.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\hyverumu]ImagePath=[%PROGRAM_FILES%]\03000200-1437981140-0500-0006-000700080009\jnsv1BC.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\wunizyko]ImagePath=[%PROGRAM_FILES%]\03000200-1437981140-0500-0006-000700080009\knss4F65.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\gopibeko]ImagePath=[%LOCAL_APPDATA%]\03000200-1438000993-0500-0006-000700080009\snsk97F4.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\comyninu]ImagePath=[%PROGRAM_FILES%]\03000200-1437981140-0500-0006-000700080009\hnsn2014.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\hepiwope]ImagePath=[%PROGRAM_FILES%]\00000000-1483351463-0000-0000-1C6F65E1FA89\knsgEFD0.tmpfs
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\zigipyro]ImagePath=[%LOCAL_APPDATA%]\15AFCA0D-1483558903-E311-B064-F8A963716139\qnsr48AB.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\zigipyro]ImagePath=[%LOCAL_APPDATA%]\03000200-1483563141-0500-0006-000700080009\qnsq25A4.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\cyfemeze]ImagePath=[%PROGRAM_FILES%]\543C9E1A-1476190074-11E3-B767-A088BF0C60DA\kns5F2A.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\jymibike]ImagePath=[%PROGRAM_FILES%]\CA6CBF51-1477509259-11E4-A26A-F0761C698918\kns9227.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\zigipyro]ImagePath=[%LOCAL_APPDATA%]\CA6CBF51-1478091789-11E4-A26A-F0761C698918\qnsi4CB2.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\josojosi]ImagePath=[%PROGRAM_FILES%]\42314331-1483401028-3134-3935-4134FFFFFFFF\knsvF421.tmpfs
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\guwulutu]ImagePath=[%PROGRAM_FILES%]\36367E75-1482572464-11E5-8B16-F0761CF1480E\kns3EBC.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\boxexycu]ImagePath=[%PROGRAM_FILES%]\4C4C4544-1483421011-4310-8043-B7C04F574E31\knsv8B17.tmpfs
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\sikyheko]ImagePath=[%PROGRAM_FILES%]\D87F6850-1483141712-11E2-AFF6-3C077165FEE2\kns6A77.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\myfejozi]ImagePath=[%PROGRAM_FILES%]\D87F6850-1447869919-11E2-AFF6-3C077165FEE2\jnsqCA9A.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\jopesucu]ImagePath=[%PROGRAM_FILES%]\4C4C4544-1474754285-4710-8050-B7C04F5A4E31\kns79A8.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\rijufoze]ImagePath=[%PROGRAM_FILES%]\4C4C4544-1472595375-4710-8050-B7C04F5A4E31\hnsv8E89.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\dowidoly]ImagePath=[%PROGRAM_FILES%]\4C4C4544-1472595375-4710-8050-B7C04F5A4E31\jnsg7563.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\zoribuni]ImagePath=[%PROGRAM_FILES%]\31A0F328-1481350852-1015-8CA1-71C0FE7BE7D4\kns9F27.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\wesewozo]ImagePath=[%PROGRAM_FILES%]\34444335-1483347313-4C34-4458-6CC217789594\kns59C5.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\lukibicy]ImagePath=[%PROGRAM_FILES%]\34444335-1483347313-4C34-4458-6CC217789594\kns93CC.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\pehujiti]ImagePath=[%PROGRAM_FILES%]\4C4C4544-1478423452-5710-8051-B6C04F424232\knsi220F.tmpfs
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\risebice]ImagePath=[%PROGRAM_FILES%]\00000000-1483315913-0000-0000-D43D7EE2612D\kns474C.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\goculofe]ImagePath=[%PROGRAM_FILES%]\4C4C4544-1483357831-4410-8050-C7C04F595031\kns495F.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\busynecu]ImagePath=[%PROGRAM_FILES%]\4C4C4544-1483346018-3910-804A-B6C04F583532\kns6926.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\dowidoly]ImagePath=[%PROGRAM_FILES%]\03000200-1469085067-0500-0006-000700080009\jnsgCD4.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\rijufoze]ImagePath=[%PROGRAM_FILES%]\03000200-1469085067-0500-0006-000700080009\hnsm29C4.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\zigipyro]ImagePath=[%LOCAL_APPDATA%]\F5ECD029-1455928891-E311-83BA-201A06DE3AD9\qnsxB09B.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\nykelozy]ImagePath=[%LOCAL_APPDATA%]\F5ECD029-1431530789-E311-83BA-201A06DE3AD9\snsh1345.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\buwomyre]ImagePath=[%APPDATA%]\F5ECD029-1431523245-E311-83BA-201A06DE3AD9\jnsc75ED.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\zigipyro]ImagePath=[%LOCAL_APPDATA%]\B0227647-1483400710-DF11-BBA9-00266C47490F\qnsgAAC.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\gykyxilo]ImagePath=[%PROGRAM_FILES%]\B0227647-1482333534-DF11-BBA9-00266C47490F\knsf873D.tmpfs
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\lehicewu]ImagePath=[%PROGRAM_FILES%]\03000200-1443936052-0500-0006-000700080009\jnssADBC.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\gyvixodu]ImagePath=[%PROGRAM_FILES%]\03000200-1443936052-0500-0006-000700080009\hnsnC69B.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\gimydydi]ImagePath=[%PROGRAM_FILES%]\03000200-1443936052-0500-0006-000700080009\knsd8B39.tmpfs
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\dipubibu]ImagePath=[%LOCAL_APPDATA%]\03000200-1443964900-0500-0006-000700080009\snsi3332.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\roduwuqi]ImagePath=[%PROGRAM_FILES%]\03000200-1472490777-0500-0006-000700080009\kns54E5.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\rijufoze]ImagePath=[%PROGRAM_FILES%]\03000200-1472490777-0500-0006-000700080009\hnsr4E14.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\dowidoly]ImagePath=[%PROGRAM_FILES%]\03000200-1472490777-0500-0006-000700080009\jnsg317E.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\qowiluze]ImagePath=[%PROGRAM_FILES%]\31444335-1483112485-3533-3251-441EA1DA0AE1\knsvEB33.tmpfs
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\jesogenu]ImagePath=[%PROGRAM_FILES%]\30BD3360-1482555151-11E1-883C-78843CF84BF8\knsnB2F.tmpfs
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\coqicuvo]ImagePath=[%PROGRAM_FILES%]\C693E624-1483174309-11E2-AC0B-44E22C000030\knsj36DF.tmpfs
  • [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]autoauto="[%PROGRAM_FILES%]\ghat\archaeological.exe"
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\rijufoze]ImagePath=[%PROGRAM_FILES%]\31444A20-1466446170-11B2-8000-80EB99C00C30\hnsb7235.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\bicibehy]ImagePath=[%PROGRAM_FILES%]\4C4C4544-1482925158-3910-8043-C2C04F365131\kns4184.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\zigipyro]ImagePath=[%LOCAL_APPDATA%]\B4636ADE-1483114677-11E2-85CA-C537CAA01E00\qnsw173A.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\fopimufo]ImagePath=[%PROGRAM_FILES%]\B4636ADE-1482966508-11E2-85CA-C537CAA01E00\knsaA328.tmpfs
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\qimucexi]ImagePath=[%PROGRAM_FILES%]\FB4A0853-1482139017-11DE-A04F-20C9083990D3\kns51A3.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\viqysuho]ImagePath=[%PROGRAM_FILES%]\1E008F60-1450891218-D600-4FB1-485B395F04DB\knsy5324.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\hikikohu]ImagePath=[%PROGRAM_FILES%]\03000200-1483041456-0500-0006-000700080009\knsE33B.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\zigipyro]ImagePath=[%LOCAL_APPDATA%]\03000200-1483118355-0500-0006-000700080009\qnsm2454.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\tygijufi]ImagePath=[%PROGRAM_FILES%]\E8251C00-1480757562-0820-0603-181459000000\kns3181.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\zigipyro]ImagePath=[%LOCAL_APPDATA%]\E8251C00-1483093755-0820-0603-181459000000\qnsg6A68.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\bifoqixy]ImagePath=[%PROGRAM_FILES%]\E8251C00-1483073806-0820-0603-181459000000\knsz2DD9.tmpfs
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\zigipyro]ImagePath=[%LOCAL_APPDATA%]\D32B8702-1483109554-E111-AC78-DC0EA1B646D3\qnskB84.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\tikonitu]ImagePath=[%PROGRAM_FILES%]\D32B8702-1454065368-E111-AC78-DC0EA1B646D3\kns21AE.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\rijifivo]ImagePath=[%PROGRAM_FILES%]\40CAD771-1444802844-E111-9F0D-97E6C9DC269B\knskD512.tmpfs
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\dipubibu]ImagePath=[%LOCAL_APPDATA%]\40CAD771-1444828151-E111-9F0D-97E6C9DC269B\snsl32D3.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\hynyruqe]ImagePath=[%PROGRAM_FILES%]\4E435451-1483119406-3034-4532-50465D3E203E\knsF886.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\borikyho]ImagePath=[%PROGRAM_FILES%]\4C4C4544-1481437530-3410-8038-C2C04F564232\kns7F1C.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\fozewehe]ImagePath=[%PROGRAM_FILES%]\31A0F328-1481350852-1015-8CA1-71C0FE7BE7D4\kns9D86.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\woziriqy]ImagePath=[%PROGRAM_FILES%]\4C4C4544-1481219607-3310-8035-B1C04F475731\knsd9CFB.tmpfs
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\zigipyro]ImagePath=[%LOCAL_APPDATA%]\2AECEF80-1483023656-11DF-AEAA-D31E727A5A33\qnsrDA1B.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\ticepivo]ImagePath=[%PROGRAM_FILES%]\2AECEF80-1482993297-11DF-AEAA-D31E727A5A33\knsyE3EE.tmpfs
  • [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]autoauto="[%PROGRAM_FILES%]\unstuck\ipanema.exe"
  • [HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]rutoauto="[%PROGRAM_FILES%]\unstuck\ipanema.exe"
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\wucotusy]ImagePath=[%PROGRAM_FILES%]\03AA02FC-1457631702-057F-F706-9D0700080009\hnst85CF.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\dojygici]ImagePath=[%PROGRAM_FILES%]\03AA02FC-1457631702-057F-F706-9D0700080009\jnsl6545.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\dowidoly]ImagePath=[%PROGRAM_FILES%]\832FD6BD-1468781860-E111-8512-B888E352A789\jnsyE6B6.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\celohoky]ImagePath=[%PROGRAM_FILES%]\96C00055-1483003923-8645-B6DC-889EE6AC1464\knsyAE20.tmpfs
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\tejygoky]ImagePath=[%PROGRAM_FILES%]\03000200-1475743812-0500-0006-000700080009\kns3D4F.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\jusyvypo]ImagePath=[%PROGRAM_FILES%]\00000000-1482894827-0000-0000-002421B9DF08\kns32EF.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\rijufoze]ImagePath=[%PROGRAM_FILES%]\5151970A-1463694324-11E4-B57F-68F7281ECF58\hnsfA1B1.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\dowidoly]ImagePath=[%PROGRAM_FILES%]\5151970A-1463694324-11E4-B57F-68F7281ECF58\jnsu86D4.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\fewyxygo]ImagePath=[%PROGRAM_FILES%]\1CDAC2FA-1482953157-4649-ABE3-864F5CBE70D9\knsD433.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\rizusone]ImagePath=[%PROGRAM_FILES%]\1B357A81-1482418776-11E1-BC4B-DDEB060BF75E\kns1F83.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\zigipyro]ImagePath=[%LOCAL_APPDATA%]\4C4C4544-1478697178-4310-8053-B8C04F4C5431\qnsw2ABC.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\zigipyro]ImagePath=[%LOCAL_APPDATA%]\7C6E0305-1482943123-4446-9AB4-A47D6C9315D9\qnsg1EE6.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\bucicymi]ImagePath=[%PROGRAM_FILES%]\7C6E0305-1482943030-4446-9AB4-A47D6C9315D9\knsb87AF.tmpfs
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\xumenicy]ImagePath=[%PROGRAM_FILES%]\FFFFFFFF-1479313074-FFFF-FFFF-FFFFFFFFFFFF\knsd5CAE.tmpfs
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\robynure]ImagePath=[%PROGRAM_FILES%]\336CB580-1481530776-4248-482C-22510A9209D0\knsbB3FD.tmpfs
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\hifutujo]ImagePath=[%PROGRAM_FILES%]\1F004F40-1482884155-0A00-A6D0-BCAEC5445A0A\knsf9DBF.tmpfs
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\dynynihi]ImagePath=[%PROGRAM_FILES%]\2F9C1100-1482885899-11DD-8675-74D02B36821E\kns45A0.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\kicibesu]ImagePath=[%PROGRAM_FILES%]\00000000-1482894827-0000-0000-002421B9DF08\knsy40F4.tmpfs
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\cyzuboru]ImagePath=[%PROGRAM_FILES%]\18EA9736-1482950692-11E6-8EC0-EC4E17C13201\knstFF39.tmpfs
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\zigipyro]ImagePath=[%LOCAL_APPDATA%]\12345678-1482843362-5678-90AB-CDDEEFAABBCC\qnseB646.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\toriqulo]ImagePath=[%PROGRAM_FILES%]\12345678-1482818088-5678-90AB-CDDEEFAABBCC\knso9302.tmpfs
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\roviveku]ImagePath=[%PROGRAM_FILES%]\22A74000-1482779884-0000-0000-000000000000\knsp8099.tmpfs
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\fefefigu]ImagePath=[%PROGRAM_FILES%]\30A483E6-1478277000-E211-9AB1-008CFA2ABDDC\knsl456E.tmpfs
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\cuwyginy]ImagePath=[%PROGRAM_FILES%]\7BD648C0-1482407198-11D5-8657-5404A69B344C\knsA512.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\zigipyro]ImagePath=[%LOCAL_APPDATA%]\4C4C4544-1482486361-4E10-804E-C2C04F443032\qnst687B.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\rijufoze]ImagePath=[%PROGRAM_FILES%]\4C4C4544-1471703485-4E10-804E-C2C04F443032\hnsu7F10.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\dowidoly]ImagePath=[%PROGRAM_FILES%]\4C4C4544-1471703485-4E10-804E-C2C04F443032\jnsd54F2.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\xopoloxy]ImagePath=[%PROGRAM_FILES%]\28B4B287-1482698049-11DE-B787-5D136A79F2E3\knsF539.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\sylekovi]ImagePath=[%PROGRAM_FILES%]\00000000-1482574634-0000-0000-1C6F65EEE8B0\knsE7A2.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\dozozomo]ImagePath=[%PROGRAM_FILES%]\8801D31C-1476108041-11DD-1E8C-6D990E2C5D29\kns10B2.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\syhenily]ImagePath=[%PROGRAM_FILES%]\4C4C4544-1482373002-4E10-804E-C7C04F513232\knsa9A3A.tmpfs
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\wizuqoco]ImagePath=[%PROGRAM_FILES%]\00000000-1481901494-0000-0000-000000000000\kns1852.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\rucudohe]ImagePath=[%PROGRAM_FILES%]\3B254A80-1482075771-81E0-3797-14DAE9D04BA9\kns502E.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\zigipyro]ImagePath=[%LOCAL_APPDATA%]\4C4C4544-1482607499-4310-8059-B4C04F515831\qnsm2312.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\nycyhywe]ImagePath=[%PROGRAM_FILES%]\4C4C4544-1482606653-4310-8059-B4C04F515831\knsdE6BE.tmpfs
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\gerobyke]ImagePath=[%PROGRAM_FILES%]\EA9FFF23-1482575900-AE02-9375-F832E4CC964C\knsd4091.tmpfs
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\myvibode]ImagePath=[%PROGRAM_FILES%]\6816B0BE-1482580906-4E58-8067-8C340CB13AA3\knsi7694.tmpfs
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\hoxokusu]ImagePath=[%PROGRAM_FILES%]\031B021C-1482366702-0537-8F06-2E0700080009\knsu3BD8.tmpfs
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\kuquhuce]ImagePath=[%PROGRAM_FILES%]\D31D3C20-1482568709-11E0-86AA-BCAEC54EAACC\knsxFE37.tmpfs
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\comyninu]ImagePath=[%PROGRAM_FILES%]\1CDA11A0-1437716840-11D9-8364-F46D04665F11\hnseE409.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\wywymeqo]ImagePath=[%PROGRAM_FILES%]\04048707-1477272685-DF11-AC18-8C736EA3806B\kns58E7.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\tudetire]ImagePath=[%PROGRAM_FILES%]\04048707-1477272685-DF11-AC18-8C736EA3806B\kns75F6.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\zigipyro]ImagePath=[%LOCAL_APPDATA%]\D2DB4AA8-1482493026-E011-890E-505054503030\qnssCEF4.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\xuqyviqo]ImagePath=[%PROGRAM_FILES%]\D2DB4AA8-1482469597-E011-890E-505054503030\knsr7719.tmpfs
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\ridipere]ImagePath=[%PROGRAM_FILES%]\03000200-1482235124-0500-0006-000700080009\knszE51F.tmpfs
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\jetudosu]ImagePath=[%PROGRAM_FILES%]\03000200-1482445064-0500-0006-000700080009\knsvA5AE.tmpfs
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\dufizisi]ImagePath=[%PROGRAM_FILES%]\4C4C4544-1482359354-3710-8039-B3C04F4E5931\kns652.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\dijojyvi]ImagePath=[%PROGRAM_FILES%]\88251C00-1445934410-0820-0224-145425000000\hnsd6CA0.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\ziqusuce]ImagePath=[%PROGRAM_FILES%]\E84AF480-1440270954-11E3-A648-A0D3C1058A26\knsm11A.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\soposuqy]ImagePath=[%PROGRAM_FILES%]\E84AF480-1440270954-11E3-A648-A0D3C1058A26\knsl1E0.tmpfs
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\nyrohode]ImagePath=[%PROGRAM_FILES%]\E84AF480-1440270954-11E3-A648-A0D3C1058A26\knse220.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\jimocoso]ImagePath=[%PROGRAM_FILES%]\E84AF480-1440270954-11E3-A648-A0D3C1058A26\jnsx1F6.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\fimevebo]ImagePath=[%PROGRAM_FILES%]\E84AF480-1440270954-11E3-A648-A0D3C1058A26\hnsp1F8.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\dylojixo]ImagePath=[%PROGRAM_FILES%]\E84AF480-1440270954-11E3-A648-A0D3C1058A26\knse2BC.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\bufykiwi]ImagePath=[%PROGRAM_FILES%]\E84AF480-1440270954-11E3-A648-A0D3C1058A26\knsw164.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\letuhuko]ImagePath=[%PROGRAM_FILES%]\A8DB46BD-1482080194-11E2-9742-69C45F060069\knst63E9.tmpfs
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\qibipyku]ImagePath=[%PROGRAM_FILES%]\F523F1E0-1482172876-11D5-9C0C-90E6BAC14979\kns10B4.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\hesetuky]ImagePath=[%PROGRAM_FILES%]\00000000-1482257836-0000-0000-6C626D3F0983\knsx93EB.tmpfs
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\sinereku]ImagePath=[%PROGRAM_FILES%]\4E435451-1482278298-3032-4732-50465D3E1309\knst9391.tmpfs
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\rutuvobu]ImagePath=[%PROGRAM_FILES%]\98F19BD5-1482235862-11DE-BBDA-DE5E78001CC1\knsuEE42.tmpfs
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\hesetuky]ImagePath=[%PROGRAM_FILES%]\59300289-1482250617-D10E-0A29-448A5B3FDDC4\kns3806.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\rijufoze]ImagePath=[%PROGRAM_FILES%]\4C4C4544-1469352297-5210-8046-B1C04F435431\hnsa5168.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\dowidoly]ImagePath=[%PROGRAM_FILES%]\4C4C4544-1469352297-5210-8046-B1C04F435431\jnsv3ABB.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\bowymomi]ImagePath=[%PROGRAM_FILES%]\1CAE469A-1482272091-E411-85C7-F0761C80AAE8\kns36E7.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\velevuze]ImagePath=[%PROGRAM_FILES%]\40CCB380-1481936021-11DD-858C-3085A98E3186\knsd1F72.tmpfs
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\hemovywi]ImagePath=[%PROGRAM_FILES%]\3ECABB40-1482206711-11D5-96B8-485B39F7F1CB\knsvAE61.tmpfs
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\wilybugy]ImagePath=[%PROGRAM_FILES%]\00000000-1482197109-0000-0000-D8CB8A5E77C8\knszFA7.tmpfs
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\PURECEWE]ImagePath=[%PROGRAM_FILES%]\6685284C-1482124030-11E0-8DA0-6D991031C129\kns4B30.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\KYJYBYJU]ImagePath=[%PROGRAM_FILES%]\6685284C-1482124030-11E0-8DA0-6D991031C129\knsAA7A.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\mipelisu]ImagePath=[%PROGRAM_FILES%]\038D0240-1482203020-05AD-CD06-940700080009\knsf93CD.tmpfs
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\resefeso]ImagePath=[%PROGRAM_FILES%]\BFCB4070-1482169271-BDE6-6630-992AF2E20A66\knsf4535.tmpfs
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\rijufoze]ImagePath=[%PROGRAM_FILES%]\54CA83FC-1471966863-8D4A-BEF2-764BBAF7E399\hnsvB9C7.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\dowidoly]ImagePath=[%PROGRAM_FILES%]\54CA83FC-1471966863-8D4A-BEF2-764BBAF7E399\jnst7606.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\dyrytury]ImagePath=[%PROGRAM_FILES%]\FFFFFFFF-1481986817-FFFF-FFFF-FFFFFFFFFFFF\knsCF5C.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\buvuzezo]ImagePath=[%PROGRAM_FILES%]\FFFFFFFF-1478901085-FFFF-FFFF-FFFFFFFFFFFF\knsjFB06.tmpfs
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\hofufony]ImagePath=[%PROGRAM_FILES%]\38464E43-1480416402-3133-5053-001E68BA5DA4\knsE23A.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\berogupe]ImagePath=[%APPDATA%]\4C4C4544-1426877273-4710-8058-B4C04F325631\jnsf2AA8.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\zutuzuni]ImagePath=[%PROGRAM_FILES%]\E59CC9D4-1455939231-E511-8B16-B05ADA571F2F\jnsp8667.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\wucotusy]ImagePath=[%PROGRAM_FILES%]\E59CC9D4-1455939231-E511-8B16-B05ADA571F2F\hnshA471.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\wicysogi]ImagePath=[%PROGRAM_FILES%]\33444335-1482148864-4E35-4C56-A0D3C167144E\kns4315.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\gokocifi]ImagePath=[%PROGRAM_FILES%]\038D0240-1475265477-0563-5406-750700080009\kns534F.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\jynujymi]ImagePath=[%PROGRAM_FILES%]\D972836C-1482046850-E111-951F-4D8F09EBC54A\kns5CFE.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\ficufonu]ImagePath=[%PROGRAM_FILES%]\D972836C-1482046850-E111-951F-4D8F09EBC54A\kns5869.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\nurizovo]ImagePath=[%PROGRAM_FILES%]\C91BAF14-1482042208-E411-B2A0-1458D011783D\knsx958.tmpfs
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\kelopevo]ImagePath=[%PROGRAM_FILES%]\00000000-1481881998-0000-0000-448A5B69C9D3\kns99F3.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\bivigiqo]ImagePath=[%PROGRAM_FILES%]\34ACA580-1482036319-11DF-ADFA-20CF30B53CAB\knszA347.tmpfs
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\ficufonu]ImagePath=[%PROGRAM_FILES%]\D37A8654-1482056235-0F49-924A-F17A42578149\knsv3B47.tmpfs
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\roqutytu]ImagePath=[%PROGRAM_FILES%]\80F0CCD1-1482039538-E011-AE8C-C89CDCBC2C6D\knsjBB93.tmpfs
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\zigipyro]ImagePath=[%LOCAL_APPDATA%]\82CA7B18-1461406716-AC41-A056-089E01D5DD82\qnsu9F7C.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\rocufyky]ImagePath=[%PROGRAM_FILES%]\82CA7B18-1461377614-AC41-A056-089E01D5DD82\jnsy4BD0.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\rijufoze]ImagePath=[%PROGRAM_FILES%]\82CA7B18-1461377614-AC41-A056-089E01D5DD82\hnstA547.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\lyvedici]ImagePath=[%PROGRAM_FILES%]\7CCF7D7F-1481989300-11E6-B4F4-C85B766BB93D\knstBBC5.tmpfs
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\sipijyly]ImagePath=[%PROGRAM_FILES%]\03000200-1481697132-0500-0006-000700080009\knsq9BAC.tmpfs
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\vuxizeqe]ImagePath=[%PROGRAM_FILES%]\1E1E9B6B-1481841606-DC11-9E58-0013D4D9C940\kns445A.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\velevuze]ImagePath=[%PROGRAM_FILES%]\D8434543-1481935726-11E5-89C6-641C677E3FAB\knsc14AA.tmpfs
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\lehicewu]ImagePath=[%PROGRAM_FILES%]\7374E600-1442131945-11D5-B18E-20CF30823C68\jnst27E8.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\gyvixodu]ImagePath=[%PROGRAM_FILES%]\7374E600-1442131945-11D5-B18E-20CF30823C68\hnsn3E70.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\wygipiru]ImagePath=[%PROGRAM_FILES%]\F64A52B0-1482007329-81E3-33A4-54BEF7603F63\knsc28D6.tmpfs
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\duqewisy]ImagePath=[%PROGRAM_FILES%]\F64A52B0-1481920936-81E3-33A4-54BEF7603F63\knsg6096.tmpfs
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\hyverumu]ImagePath=[%PROGRAM_FILES%]\4C4C4544-1439392113-5A10-8030-B4C04F4A5731\jnsl71BC.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\cudyrybu]ImagePath=[%PROGRAM_FILES%]\4C4C4544-1439392113-5A10-8030-B4C04F4A5731\knsy442F.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\comyninu]ImagePath=[%PROGRAM_FILES%]\4C4C4544-1439392113-5A10-8030-B4C04F4A5731\hnsq8E81.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\zigipyro]ImagePath=[%LOCAL_APPDATA%]\A0528300-1481902661-81E2-2464-AC220B0D330D\qnseA7CE.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\qosibilo]ImagePath=[%PROGRAM_FILES%]\A0528300-1481893643-81E2-2464-AC220B0D330D\knsqF1E2.tmpfs
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\zigipyro]ImagePath=[%LOCAL_APPDATA%]\30464E43-1466439390-3538-4652-60EB693C46D7\qnsc8A08.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\dycemumo]ImagePath=[%PROGRAM_FILES%]\6921A6A0-1480875861-11DD-842B-7824AF45AF21\knsh5BCF.tmpfs
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\dojygici]ImagePath=[%PROGRAM_FILES%]\03000200-1457111713-0500-0006-000700080009\jnsfEA1.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\zigipyro]ImagePath=[%LOCAL_APPDATA%]\03000200-1458992129-0500-0006-000700080009\qnskDCFA.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\wucotusy]ImagePath=[%PROGRAM_FILES%]\03000200-1457111713-0500-0006-000700080009\hnsq2742.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\rijufoze]ImagePath=[%PROGRAM_FILES%]\463A85BC-1459573036-E211-A8C6-0013D4D9C9E8\hnslA33.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\rowugoqo]ImagePath=[%LOCAL_APPDATA%]\463A85BC-1459592919-E211-A8C6-0013D4D9C9E8\snsvF927.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\rocufyky]ImagePath=[%PROGRAM_FILES%]\463A85BC-1459573036-E211-A8C6-0013D4D9C9E8\jnslE3CD.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\citevebo]ImagePath=[%PROGRAM_FILES%]\03000200-1447441116-0500-0006-000700080009\jnsc3AA6.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\lifoteqe]ImagePath=[%PROGRAM_FILES%]\80179E4E-1481845829-DD11-A85A-1078D2CA07C3\knsf8E13.tmpfs
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\rijufoze]ImagePath=[%PROGRAM_FILES%]\2411AAE0-1468918922-11B2-8000-C0634FF00FE9\hnsb40FB.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\dowidoly]ImagePath=[%PROGRAM_FILES%]\2411AAE0-1468918922-11B2-8000-C0634FF00FE9\jnsp24E5.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\cemoqige]ImagePath=[%PROGRAM_FILES%]\33444335-1476536356-4733-3042-A0481C02C3ED\knsl5F68.tmpfs
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\xexyxohy]ImagePath=[%PROGRAM_FILES%]\7D08E429-1481820683-0243-9870-F079598110C2\knsu36F2.tmpfs
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\gymonime]ImagePath=[%PROGRAM_FILES%]\8C681382-1481641130-E611-B27E-EC8EB5959A2A\kns5CFD.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\zigipyro]ImagePath=[%LOCAL_APPDATA%]\8C681382-1481790523-E611-B27E-EC8EB5959A2A\qnsoAD4A.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\qymylofy]ImagePath=[%PROGRAM_FILES%]\03000200-1446404908-0500-0006-000700080009\hnsvBCBC.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\pokorugi]ImagePath=[%PROGRAM_FILES%]\03000200-1446404908-0500-0006-000700080009\jnsvA322.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\tobixiku]ImagePath=[%PROGRAM_FILES%]\4C4C4544-1481491495-4810-8044-B4C04F5A3232\knsw1421.tmpfs
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\zigipyro]ImagePath=[%LOCAL_APPDATA%]\00000000-1480019679-0000-0000-D8CB8A1D9AD6\qnsz436D.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\lememuny]ImagePath=[%PROGRAM_FILES%]\00000000-1479990834-0000-0000-D8CB8A1D9AD6\knse8B97.tmpfs
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\nujilope]ImagePath=[%PROGRAM_FILES%]\311D759F-1481821969-11E5-8299-ACE0102A60FE\knsg93EE.tmpfs
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\gokehuqo]ImagePath=[%PROGRAM_FILES%]\00000000-1480956178-0000-0000-50E5492B4CFA\kns74E2.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\rijufoze]ImagePath=[%PROGRAM_FILES%]\CF1277F8-1469115341-5E2E-9BE0-AE32630504D6\hnsb60A9.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\dowidoly]ImagePath=[%PROGRAM_FILES%]\CF1277F8-1469115341-5E2E-9BE0-AE32630504D6\jnse40FA.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\wucotusy]ImagePath=[%PROGRAM_FILES%]\00000000-1458578750-0000-0000-50E5493BE46E\hnsg84AC.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\rowugoqo]ImagePath=[%LOCAL_APPDATA%]\00000000-1458586047-0000-0000-50E5493BE46E\snsmE1E8.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\gerocyni]ImagePath=[%PROGRAM_FILES%]\00000000-1458578750-0000-0000-50E5493BE46E\jnsb6E9B.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\zigipyro]ImagePath=[%LOCAL_APPDATA%]\03000200-1481732987-0500-0006-000700080009\qnsmA102.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\pinyqopu]ImagePath=[%PROGRAM_FILES%]\03000200-1481729173-0500-0006-000700080009\knsf58ED.tmpfs
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\detupegu]ImagePath=[%PROGRAM_FILES%]\A4150F92-1477454825-11E2-9426-E488B300C047\kns3949.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\zigipyro]ImagePath=[%LOCAL_APPDATA%]\A4150F92-1481716796-11E2-9426-E488B300C047\qnsm8726.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\zumedomi]ImagePath=[%PROGRAM_FILES%]\971B21D7-1481604459-1555-6AB3-339CDC009B3B\knsf95C1.tmpfs
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\zigipyro]ImagePath=[%LOCAL_APPDATA%]\82716ACC-1481597705-4840-B910-626FA209CCCA\qnsw7EF6.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\vegomeqe]ImagePath=[%PROGRAM_FILES%]\82716ACC-1481619157-4840-B910-626FA209CCCA\knsfCE11.tmpfs
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\sebiwumo]ImagePath=[%PROGRAM_FILES%]\9C8ACBD8-1478881022-1520-1016-192327000000\knsz8195.tmpfs
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\ryjoxuze]ImagePath=[%PROGRAM_FILES%]\E218662A-1481632436-E611-B27E-A08CFD8270DA\knst54CF.tmpfs
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\zigipyro]ImagePath=[%LOCAL_APPDATA%]\7CCB7A90-1481146630-E311-A96A-201A063A408B\qnsd65E7.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\zutuzuni]ImagePath=[%PROGRAM_FILES%]\33444335-1453582115-5A35-5A4B-A0481C1B7B28\jnsi67E8.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\zigipyro]ImagePath=[%LOCAL_APPDATA%]\33444335-1457285587-5A35-5A4B-A0481C1B7B28\qnst2287.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\wucotusy]ImagePath=[%PROGRAM_FILES%]\33444335-1453582115-5A35-5A4B-A0481C1B7B28\hnsn8C99.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\zigipyro]ImagePath=[%LOCAL_APPDATA%]\00000000-1453050464-0000-0000-1C6F6566641E\qnszE64B.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\nypudubi]ImagePath=[%PROGRAM_FILES%]\C99933FA-1481056103-DF11-A3E1-705AB627EFAD\kns5C31.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\jewicybo]ImagePath=[%PROGRAM_FILES%]\A2A8A500-1480834750-DC11-B98C-00E0188501F7\knshABE1.tmpfs
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\toniqobe]ImagePath=[%PROGRAM_FILES%]\00000000-1447042991-0000-0000-D43D7ED73976\hnsy925.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\pyzeqewe]ImagePath=[%PROGRAM_FILES%]\00000000-1447042991-0000-0000-D43D7ED73976\jnsiE8C7.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\kopufyti]ImagePath=[%PROGRAM_FILES%]\00000000-1447042991-0000-0000-D43D7ED73976\knsa83AC.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\dodytexy]ImagePath=[%PROGRAM_FILES%]\4C4C4544-1481332258-5810-8031-B2C04F34354A\znsnE074.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\nokecuwo]ImagePath=[%PROGRAM_FILES%]\1C262B13-1481313791-DD11-A2DA-001EEC23EDA3\kns39F5.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\zigipyro]ImagePath=[%LOCAL_APPDATA%]\1C262B13-1481401814-DD11-A2DA-001EEC23EDA3\qnsg75EC.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\vymirogy]ImagePath=[%PROGRAM_FILES%]\0A314FF2-1481384076-BB43-BB60-54AB3A047D56\knsk7310.tmpfs
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\roxuqeny]ImagePath=[%PROGRAM_FILES%]\65B1BAC8-1481396104-11DE-8582-59D7F04BAFB0\knsy7DF0.tmpfs
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\qimidoxe]ImagePath=[%PROGRAM_FILES%]\323A5692-1481212592-3B29-000D-FECC5E0B6D00\knsl6C65.tmpfs
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\qedukiqu]ImagePath=[%PROGRAM_FILES%]\30464E43-1481378737-4E34-4632-64315056A877\knsB30B.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\bokuhepe]ImagePath=[%PROGRAM_FILES%]\30464E43-1476798191-3332-4A47-78ACC05CD7DC\kns5F9E.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\wufytuno]ImagePath=[%PROGRAM_FILES%]\30464E43-1476718098-3332-4A47-78ACC05CD7DC\knsoE6CB.tmpfs
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\zigipyro]ImagePath=[%LOCAL_APPDATA%]\03000200-1481218959-0500-0006-000700080009\qnsq3408.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\tivojidu]ImagePath=[%PROGRAM_FILES%]\03000200-1481215397-0500-0006-000700080009\knsp9AD7.tmpfs
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\zigipyro]ImagePath=[%LOCAL_APPDATA%]\33444335-1478454708-3139-3156-A0481C229950\qnsq9070.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\wibejoxe]ImagePath=[%PROGRAM_FILES%]\33444335-1478434711-3139-3156-A0481C229950\knsu8863.tmpfs
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\zigipyro]ImagePath=[%LOCAL_APPDATA%]\675517FA-1456699374-E411-A961-68F728BF8FD0\qnskE960.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\jyjyveny]ImagePath=[%PROGRAM_FILES%]\8F2E09A9-1481293894-E311-9AE7-201A0626D9A5\knsh4D2D.tmpfs
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\ludyniru]ImagePath=[%PROGRAM_FILES%]\4C4C4544-1481315526-5610-804A-CAC04F52344A\knsb765F.tmpfs
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\zuwinuni]ImagePath=[%PROGRAM_FILES%]\1E00F420-1479483786-AA00-54A4-90E6BA21AF99\kns2B78.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\zigipyro]ImagePath=[%LOCAL_APPDATA%]\1E00F420-1481303808-AA00-54A4-90E6BA21AF99\qnsnE5D.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\vukunidu]ImagePath=[%PROGRAM_FILES%]\1E00F420-1479483786-AA00-54A4-90E6BA21AF99\kns1180.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\qimidoxe]ImagePath=[%PROGRAM_FILES%]\35444335-1480522749-5730-4D4E-D0BF9C9E291D\kns4BB3.tmp
  • [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]interpee="[%PROGRAM_FILES%]\Signified\campy.exe"
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\hunylyri]ImagePath=[%PROGRAM_FILES%]\4C4C4544-1481139345-4E10-8035-C6C04F574232\knsmD562.tmpfs
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\bunynoci]ImagePath=[%PROGRAM_FILES%]\E16249DC-1481117950-11E6-914E-C9B0E60260BC\knsqEDF2.tmpfs
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\buzupuzu]ImagePath=[%PROGRAM_FILES%]\27132E90-1479414483-CA50-4F3B-2C27D7AA3FCC\knsD73D.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\zigipyro]ImagePath=[%LOCAL_APPDATA%]\27132E90-1479822199-CA50-4F3B-2C27D7AA3FCC\qnsb14AD.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\zigipyro]ImagePath=[%LOCAL_APPDATA%]\00000000-1463783436-0000-0807-060504030201\qnsyCC46.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\rijufoze]ImagePath=[%PROGRAM_FILES%]\00000000-1463761514-0000-0807-060504030201\hnst10BD.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\dowidoly]ImagePath=[%PROGRAM_FILES%]\00000000-1463761514-0000-0807-060504030201\jnslBD1D.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\qimidoxe]ImagePath=[%PROGRAM_FILES%]\D94E0FA8-1480773458-E411-AA1F-F0761C3B8094\knsD724.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\jicijesu]ImagePath=[%PROGRAM_FILES%]\D94E0FA8-1480773458-E411-AA1F-F0761C3B8094\kns96C4.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\zigipyro]ImagePath=[%LOCAL_APPDATA%]\35444335-1481202572-4637-5452-B05ADAD34D12\qnsp7A3.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\qimidoxe]ImagePath=[%PROGRAM_FILES%]\35444335-1481199380-4637-5452-B05ADAD34D12\knsB4A5.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\wytomedo]ImagePath=[%PROGRAM_FILES%]\35444335-1481183424-4637-5452-B05ADAD34D12\knsd496C.tmpfs
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\mycizihu]ImagePath=[%PROGRAM_FILES%]\35444335-1481222365-4637-5452-B05ADAD34D12\knsu758A.tmpfs
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\dofyliky]ImagePath=[%PROGRAM_FILES%]\35444335-1481196919-4637-5452-B05ADAD34D12\knsxD7EB.tmpfs
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\zigipyro]ImagePath=[%LOCAL_APPDATA%]\0C659BE6-1481072624-DD11-AF41-00199938C51C\qnspD3FB.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\jefopyle]ImagePath=[%PROGRAM_FILES%]\0C659BE6-1481066801-DD11-AF41-00199938C51C\knst135D.tmpfs
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\zigipyro]ImagePath=[%LOCAL_APPDATA%]\934C83A0-1481077911-81E2-375F-7C0507276D2F\qnsz8031.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\mijibowy]ImagePath=[%PROGRAM_FILES%]\44057A77-1428643917-29CB-3FC7-5838841B4152\kns568C.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\vukizote]ImagePath=[%APPDATA%]\44057A77-1428643917-29CB-3FC7-5838841B4152\jnse90C9.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\cucokojo]ImagePath=[%PROGRAM_FILES%]\3CDAD402-1481104485-4647-B2AC-63096C87E12B\knsw42BE.tmpfs
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\cotecici]ImagePath=[%PROGRAM_FILES%]\765AC6DD-1480921991-11DE-BBDA-B30E91690025\knsp5F23.tmpfs
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\tepygehe]ImagePath=[%PROGRAM_FILES%]\03AA02FC-1480352921-05B5-2E06-810700080009\kns2AEC.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\vikevewy]ImagePath=[%PROGRAM_FILES%]\4C4C4544-1480986500-3610-8032-B7C04F515831\kns4095.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\zigipyro]ImagePath=[%LOCAL_APPDATA%]\4C4C4544-1469113270-3410-8053-C6C04F595A31\qnsk7014.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\rijufoze]ImagePath=[%PROGRAM_FILES%]\4C4C4544-1469085989-3410-8053-C6C04F595A31\hnsd8EBB.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\dowidoly]ImagePath=[%PROGRAM_FILES%]\4C4C4544-1469085989-3410-8053-C6C04F595A31\jnsn4EFB.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\kybyqury]ImagePath=[%PROGRAM_FILES%]\FFFFFFFF-1479139882-FFFF-FFFF-FFFFFFFFFFFF\knsgB1D5.tmpfs
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\fyqosewu]ImagePath=[%PROGRAM_FILES%]\8DFF7EDA-1481043536-B2F6-7CD8-F832E4BD1E9E\knsv4DB1.tmpfs
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\fibujone]ImagePath=[%PROGRAM_FILES%]\FCB2D880-1480681919-11E1-82E8-ECA86B73EE25\kns7AF7.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\cuqisiqe]ImagePath=[%PROGRAM_FILES%]\4C4C4544-1481028550-3910-8051-B8C04F343132\znsaBDCD.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\kolutyjo]ImagePath=[%PROGRAM_FILES%]\4C4C4544-1480986500-3610-8032-B7C04F515831\kns68BE.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\mojevepi]ImagePath=[%PROGRAM_FILES%]\4C4C4544-1480986500-3610-8032-B7C04F515831\kns7A68.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\nobiceqy]ImagePath=[%PROGRAM_FILES%]\4C4C4544-1480986500-3610-8032-B7C04F515831\kns50D8.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\zigipyro]ImagePath=[%LOCAL_APPDATA%]\4C4C4544-1452176990-3810-8038-B4C04F464258\qnsxD6C1.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\mypecomo]ImagePath=[%PROGRAM_FILES%]\4C4C4544-1447288346-3810-8038-B4C04F464258\knsnEF26.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\kiqidetu]ImagePath=[%PROGRAM_FILES%]\4C4C4544-1447288346-3810-8038-B4C04F464258\jnsfEBD5.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\gilefywi]ImagePath=[%PROGRAM_FILES%]\4C4C4544-1447288346-3810-8038-B4C04F464258\hnsa1660.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\pifipofo]ImagePath=[%PROGRAM_FILES%]\01740230-1443880396-E411-B2A0-3464A9773EC1\kns6F29.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\lehicewu]ImagePath=[%PROGRAM_FILES%]\01740230-1443880396-E411-B2A0-3464A9773EC1\jnszD603.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\gyvixodu]ImagePath=[%PROGRAM_FILES%]\01740230-1443880396-E411-B2A0-3464A9773EC1\hnspF0B1.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\rijufoze]ImagePath=[%PROGRAM_FILES%]\06026280-1468260025-1B1B-815E-098C19A79C86\hnsd3A8F.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\dowidoly]ImagePath=[%PROGRAM_FILES%]\06026280-1468260025-1B1B-815E-098C19A79C86\jnsvFFB7.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\zigipyro]ImagePath=[%LOCAL_APPDATA%]\D8303320-1480939023-11E3-BE74-28D24476E5BC\qnslE5ED.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\cotecici]ImagePath=[%PROGRAM_FILES%]\D8303320-1480909052-11E3-BE74-28D24476E5BC\knsiB55E.tmpfs
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\wywenefo]ImagePath=[%PROGRAM_FILES%]\C0EA0676-1480878277-E311-A012-008CFA994D49\knsf5C03.tmpfs
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\sonohome]ImagePath=[%PROGRAM_FILES%]\4C4C4544-1480630665-3610-8033-CAC04F505931\kns947B.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\zigipyro]ImagePath=[%LOCAL_APPDATA%]\2BDA7EE7-1480890008-11E4-9F6E-68F72810E2C5\qnszA1.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\mynemihy]ImagePath=[%PROGRAM_FILES%]\2BDA7EE7-1480867187-11E4-9F6E-68F72810E2C5\knsx34A1.tmpfs
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\xutohiji]ImagePath=[%PROGRAM_FILES%]\0418155C-1480872944-11E1-8F29-958A71D8B9E3\knsj15FD.tmpfs
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\dycemumo]ImagePath=[%PROGRAM_FILES%]\0418155C-1480875378-11E1-8F29-958A71D8B9E3\knso2BBC.tmpfs
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\kutuluke]ImagePath=[%PROGRAM_FILES%]\33444335-1480705315-3935-3430-D4C9EF696645\knsv5C95.tmpfs
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\xevyseju]ImagePath=[%PROGRAM_FILES%]\563EDB52-1480887121-E211-83C6-08606E898C3B\knsi650.tmpfs
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\zigipyro]ImagePath=[%LOCAL_APPDATA%]\563EDB52-1480912433-E211-83C6-08606E898C3B\qnsq9FB6.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\qeveteri]ImagePath=[%PROGRAM_FILES%]\BFAC2DE2-1480733266-E7EC-ABFC-3497F68F2FE2\knshAE7D.tmpfs
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\zigipyro]ImagePath=[%LOCAL_APPDATA%]\072B070A-1475085223-1307-0306-A08CFD4B284C\qnswEB3E.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\zigipyro]ImagePath=[%LOCAL_APPDATA%]\B3DCFA40-1458867719-11DF-9D74-20CF30B5BCC4\qnspAB.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\pujinohy]ImagePath=[%APPDATA%]\E6A1D675-1436675982-BA4E-B015-60EB699D475A\knsg21F.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\zejytose]ImagePath=[%PROGRAM_FILES%]\AD07430F-1437235045-7B21-FCF2-0019997F2AD8\jnssC8.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\vicoqudu]ImagePath=[%PROGRAM_FILES%]\AD07430F-1437235045-7B21-FCF2-0019997F2AD8\hnspCB.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\sipubiqo]ImagePath=[%APPDATA%]\AD07430F-1432385986-7B21-FCF2-0019997F2AD8\nsc10F.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\jigejuvo]ImagePath=[%PROGRAM_FILES%]\AD07430F-1437235045-7B21-FCF2-0019997F2AD8\knsfB3.tmpfs
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\hexylyti]ImagePath=[%PROGRAM_FILES%]\AD07430F-1437235045-7B21-FCF2-0019997F2AD8\knst81.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\kycykyqi]ImagePath=[%APPDATA%]\AD07430F-1432385986-7B21-FCF2-0019997F2AD8\hnsi24D.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\kunuboxo]ImagePath=[%PROGRAM_FILES%]\AD07430F-1437235045-7B21-FCF2-0019997F2AD8\knsj291.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\gicukyvy]ImagePath=[%APPDATA%]\AD07430F-1432385986-7B21-FCF2-0019997F2AD8\jnsp24B.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\cikovujo]ImagePath=[%PROGRAM_FILES%]\4C4C4544-1480707201-4A10-8053-C7C04F465731\knsn1B2F.tmpfs
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\xejopuxo]ImagePath=[%PROGRAM_FILES%]\4C4C4544-1480632100-3210-8032-C7C04F353432\knsd85B7.tmpfs
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\betebegi]ImagePath=[%PROGRAM_FILES%]\33444335-1479504211-5139-5344-A45D366DB54E\kns53BC.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\zigipyro]ImagePath=[%LOCAL_APPDATA%]\33444335-1480597376-5139-5344-A45D366DB54E\qnsk50F8.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\locyjozo]ImagePath=[%PROGRAM_FILES%]\00000000-1480586194-0000-0000-D43D7E26945D\knskC0C1.tmpfs
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\levuwiqy]ImagePath=[%PROGRAM_FILES%]\03D40274-1479922319-050D-2A06-7B0700080009\knshBDAA.tmpfs
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\hyhipyly]ImagePath=[%PROGRAM_FILES%]\04ABF2AE-1480514944-E211-A8BD-0013D4D9C9E8\knsyA52F.tmpfs
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\pyjojove]ImagePath=[%PROGRAM_FILES%]\11FF0122-1479920195-6E41-8105-089E01AF738B\kns591E.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\nyzotypo]ImagePath=[%PROGRAM_FILES%]\03000200-1480188063-0500-0006-000700080009\knsCC69.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\zigipyro]ImagePath=[%LOCAL_APPDATA%]\03000200-1480460160-0500-0006-000700080009\qnsv761D.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\zigipyro]ImagePath=[%LOCAL_APPDATA%]\6C32BA2A-1480516326-5FFD-8C18-2312B27F7B11\qnsk430.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\tojypiti]ImagePath=[%PROGRAM_FILES%]\6C32BA2A-1479134024-5FFD-8C18-2312B27F7B11\knsjE22E.tmpfs
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\bijokywu]ImagePath=[%PROGRAM_FILES%]\B23F169E-1480441371-5A10-BD31-68F0A68446A7\knsp1FC.tmpfs
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\ciledoro]ImagePath=[%PROGRAM_FILES%]\2FB418C0-1480498130-11B2-8000-98E3648B2584\knslD00.tmpfs
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\vubynyfi]ImagePath=[%PROGRAM_FILES%]\3CC034A0-1440448582-11E4-BE65-00238B5E7586\knswE7.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\fimevebo]ImagePath=[%PROGRAM_FILES%]\3CC034A0-1440448582-11E4-BE65-00238B5E7586\hnsjFCA.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\jimocoso]ImagePath=[%PROGRAM_FILES%]\3CC034A0-1440448582-11E4-BE65-00238B5E7586\jnstF314.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\gopibeko]ImagePath=[%LOCAL_APPDATA%]\3CC034A0-1440452390-11E4-BE65-00238B5E7586\snskEDBA.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\bejemexe]ImagePath=[%PROGRAM_FILES%]\03000200-1480336184-0500-0006-000700080009\kns9807.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\xezefiti]ImagePath=[%PROGRAM_FILES%]\4C4C4544-1480189776-4210-8051-C4C04F5A4431\knscF347.tmpfs
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\zigipyro]ImagePath=[%LOCAL_APPDATA%]\F6D3701E-1480348265-0344-B293-60EB69CAFC57\qnsl3719.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\gosotohi]ImagePath=[%PROGRAM_FILES%]\F6D3701E-1480321226-0344-B293-60EB69CAFC57\knsp2F30.tmpfs
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\gukynupe]ImagePath=[%PROGRAM_FILES%]\4C4C4544-1478290835-5910-8033-CAC04F424C31\knsED9A.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\hytyduhi]ImagePath=[%PROGRAM_FILES%]\DB8598F1-1479775384-11E5-97A7-41557301001E\kns6D82.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\zigipyro]ImagePath=[%LOCAL_APPDATA%]\B9A86695-1480252937-443E-ACF8-DFE90338F963\qnsoF616.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\guvuqigy]ImagePath=[%PROGRAM_FILES%]\B9A86695-1480225540-443E-ACF8-DFE90338F963\knscDABD.tmpfs
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\qedigiku]ImagePath=[%PROGRAM_FILES%]\4C4C4544-1480132947-3510-8033-B6C04F504E31\knsb3C1A.tmpfs
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\cenomiry]ImagePath=[%PROGRAM_FILES%]\03DE0294-1475600049-05CA-6606-110700080009\knsiA932.tmpfs
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\pevurusu]ImagePath=[%PROGRAM_FILES%]\00000000-1477653979-0000-0807-060504030201\knsr2ACC.tmpfs
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\fixywiqi]ImagePath=[%PROGRAM_FILES%]\03000200-1480260282-0500-0006-000700080009\kns4EB0.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\zigipyro]ImagePath=[%LOCAL_APPDATA%]\03000200-1480306955-0500-0006-000700080009\qnsf6F7B.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\nedusyto]ImagePath=[%PROGRAM_FILES%]\310BDDEF-1472151981-E011-A284-DC0EA132473F\kns490.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\rijufoze]ImagePath=[%PROGRAM_FILES%]\310BDDEF-1472151981-E011-A284-DC0EA132473F\hnsq92EF.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\dowidoly]ImagePath=[%PROGRAM_FILES%]\310BDDEF-1472151981-E011-A284-DC0EA132473F\jnsg5DAC.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\xuqeduty]ImagePath=[%PROGRAM_FILES%]\647A9E01-1458134800-11CB-83C0-95809A7FE4D3\kns8C3D.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\zigipyro]ImagePath=[%LOCAL_APPDATA%]\647A9E01-1480255741-11CB-83C0-95809A7FE4D3\qnsv382B.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\wucotusy]ImagePath=[%PROGRAM_FILES%]\647A9E01-1458134800-11CB-83C0-95809A7FE4D3\hnsd1833.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\gerocyni]ImagePath=[%PROGRAM_FILES%]\647A9E01-1458134800-11CB-83C0-95809A7FE4D3\jnsuE838.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\zidunuje]ImagePath=[%PROGRAM_FILES%]\4C4C4544-1480205576-5810-804C-C6C04F593332\knsl6AC4.tmpfs
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\podydosu]ImagePath=[%PROGRAM_FILES%]\4C4C4544-1480152713-4D10-8059-CAC04F334253\knsu1627.tmpfs
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\zigipyro]ImagePath=[%LOCAL_APPDATA%]\1D255021-1480110348-E011-BC4D-1C7508F5A408\qnsh3803.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\jixiryfi]ImagePath=[%PROGRAM_FILES%]\1D255021-1480104221-E011-BC4D-1C7508F5A408\knsk2301.tmpfs
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\dijojyvi]ImagePath=[%PROGRAM_FILES%]\6635DB79-1444656968-E211-8560-08606E8BBA03\hnsyF07.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\zucemeze]ImagePath=[%PROGRAM_FILES%]\6635DB79-1444656968-E211-8560-08606E8BBA03\jnssF1D9.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\zigipyro]ImagePath=[%LOCAL_APPDATA%]\6635DB79-1470081365-E211-8560-08606E8BBA03\qnsnC415.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\mihykuli]ImagePath=[%PROGRAM_FILES%]\6635DB79-1444656968-E211-8560-08606E8BBA03\knsfD34E.tmpfs
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\zigipyro]ImagePath=[%LOCAL_APPDATA%]\00000000-1480149421-0000-0000-1C6F65DCABB3\qnsi6AFC.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\tusidyge]ImagePath=[%PROGRAM_FILES%]\00000000-1480129564-0000-0000-1C6F65DCABB3\knsi3C33.tmpfs
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\kugynuqi]ImagePath=[%PROGRAM_FILES%]\4C4C4544-1480111002-3710-8048-B3C04F4C5431\kns6CDA.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\zigipyro]ImagePath=[%LOCAL_APPDATA%]\4C4C4544-1480116447-3710-8048-B3C04F4C5431\qnseA5D4.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\burygyxo]ImagePath=[%PROGRAM_FILES%]\4C4C4544-1480111002-3710-8048-B3C04F4C5431\knsn7758.tmpfs
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\coxujuxy]ImagePath=[%PROGRAM_FILES%]\30464E43-1476109773-4C39-4E4C-00269EDCD242\knsd8B24.tmpfs
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\podydosu]ImagePath=[%PROGRAM_FILES%]\00000000-1480151801-0000-0000-D43D7EF884CE\knscF1B3.tmpfs
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\verugipo]ImagePath=[%PROGRAM_FILES%]\20546ECC-1479748280-E211-A7AA-FFD9B00AB612\kns268E.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\wucotusy]ImagePath=[%PROGRAM_FILES%]\C07EDE81-1458537227-11CB-8D8D-BB5F3A1580CB\hnsr9C7F.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\gerocyni]ImagePath=[%PROGRAM_FILES%]\C07EDE81-1458537227-11CB-8D8D-BB5F3A1580CB\jnsw84D8.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\zoqeveli]ImagePath=[%PROGRAM_FILES%]\C3B247C0-1480094562-11D5-9AC6-382C4A8D61EE\knse8B9.tmpfs
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\zigipyro]ImagePath=[%LOCAL_APPDATA%]\C3B247C0-1480112212-11D5-9AC6-382C4A8D61EE\qnsi6D60.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\zypisymo]ImagePath=[%PROGRAM_FILES%]\2098CAF5-1479982713-E011-9157-F659B14548DF\knsE1D0.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\rilyjihy]ImagePath=[%PROGRAM_FILES%]\77B022BA-1479892414-11E4-9673-CE39E71CED08\kns94F7.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\zigipyro]ImagePath=[%LOCAL_APPDATA%]\77B022BA-1479952831-11E4-9673-CE39E71CED08\qnss1A18.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\nogisebe]ImagePath=[%PROGRAM_FILES%]\FC0B2AEA-1477919670-11E5-BA4C-507B9D47BBC3\knsA402.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\zyhepuny]ImagePath=[%PROGRAM_FILES%]\F4A02231-1480011702-4303-FC05-521286A7EDB8\knsaA493.tmpfs
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\cekycejy]ImagePath=[%PROGRAM_FILES%]\A912973C-1477553850-21E5-D635-9F5FB360989B\knsB61A.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\tyxusyje]ImagePath=[%PROGRAM_FILES%]\DDF10320-1479768628-11DC-A243-08606EF22CDE\knsf2DA.tmpfs
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\zigipyro]ImagePath=[%LOCAL_APPDATA%]\03000200-1465401082-0500-0006-000700080009\qnsvCE0.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\vyvidemi]ImagePath=[%PROGRAM_FILES%]\C73F8420-1479998735-81E3-35FD-54BEF78B9188\knsxDF5E.tmpfs
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\pegityre]ImagePath=[%PROGRAM_FILES%]\038D0240-1476079711-05DF-7706-CB0700080009\knsz1BC.tmpfs
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\lypiduny]ImagePath=[%PROGRAM_FILES%]\B9456E7F-1477886824-11E4-B101-5049280000FF\knse54CF.tmpfs
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\byvizowi]ImagePath=[%PROGRAM_FILES%]\4621AB11-1469035765-E111-AE3A-DC0EA14EF74E\kns9973.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\zigipyro]ImagePath=[%LOCAL_APPDATA%]\4621AB11-1479892205-E111-AE3A-DC0EA14EF74E\qnsh5FED.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\rijufoze]ImagePath=[%PROGRAM_FILES%]\4621AB11-1469035765-E111-AE3A-DC0EA14EF74E\hnscC8BE.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\dowidoly]ImagePath=[%PROGRAM_FILES%]\4621AB11-1469035765-E111-AE3A-DC0EA14EF74E\jnscA95A.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\zizusyju]ImagePath=[%PROGRAM_FILES%]\FFFFFFFF-1450363865-FFFF-FFFF-FFFFFFFFFFFF\hnsaD5B8.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\woforemu]ImagePath=[%LOCAL_APPDATA%]\FFFFFFFF-1450383874-FFFF-FFFF-FFFFFFFFFFFF\snsf5D81.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\rizyqibe]ImagePath=[%PROGRAM_FILES%]\FFFFFFFF-1450363865-FFFF-FFFF-FFFFFFFFFFFF\jnsgB274.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\qiruduzi]ImagePath=[%PROGRAM_FILES%]\FFFFFFFF-1450363865-FFFF-FFFF-FFFFFFFFFFFF\knso54EC.tmpfs
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\zigipyro]ImagePath=[%LOCAL_APPDATA%]\4C4C4544-1479917575-4210-8033-B7C04F575331\qnsl28F5.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\jetefepo]ImagePath=[%PROGRAM_FILES%]\4C4C4544-1479904692-4210-8033-B7C04F575331\knst44B2.tmpfs
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\nisecine]ImagePath=[%PROGRAM_FILES%]\03000200-1479827558-0500-0006-000700080009\knsg6011.tmpfs
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\cygupoly]ImagePath=[%PROGRAM_FILES%]\BBC06D60-1479831265-11DD-A026-001E6828FF6C\kns48D8.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\zigipyro]ImagePath=[%LOCAL_APPDATA%]\BBC06D60-1479923092-11DD-A026-001E6828FF6C\qnsv2BD7.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\tysewire]ImagePath=[%PROGRAM_FILES%]\849F238F-1479924975-11E5-BA4C-507B9D217A8E\knss96CD.tmpfs
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\mebijogu]ImagePath=[%PROGRAM_FILES%]\4C4C4544-1479795919-4710-8034-B1C04F364631\knsj20A2.tmpfs
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\feqymoze]ImagePath=[%PROGRAM_FILES%]\00000000-1479811401-0000-0000-448A5BD49D33\knsg6895.tmpfs
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\winequpe]ImagePath=[%PROGRAM_FILES%]\4C4C4544-1479833147-4E10-804E-B7C04F594E31\knsq2A6F.tmpfs
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\josukuve]ImagePath=[%PROGRAM_FILES%]\00000000-1479757484-0000-0000-00241DECBF04\knsu9F11.tmpfs
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\wucotusy]ImagePath=[%PROGRAM_FILES%]\00000011-1459304105-0000-0000-74D02B227B1E\hnsk188.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\gerocyni]ImagePath=[%PROGRAM_FILES%]\00000011-1459304105-0000-0000-74D02B227B1E\jnsfE11B.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\qymerojy]ImagePath=[%PROGRAM_FILES%]\144DC310-1479824532-11DF-ACBA-7F03BDDFBBB1\knsC601.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\zigipyro]ImagePath=[%LOCAL_APPDATA%]\4C4C4544-1479657841-4710-8039-B7C04F384631\qnsw1B6E.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\nuloqisy]ImagePath=[%PROGRAM_FILES%]\4C4C4544-1479680806-4710-8039-B7C04F384631\knsl882C.tmpfs
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\wugefymi]ImagePath=[%PROGRAM_FILES%]\D520EB28-1479492864-8D4C-9BE3-54AB3ABFED42\knshF1F4.tmpfs
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\tufykope]ImagePath=[%PROGRAM_FILES%]\0BA960D4-1479702622-11E5-829A-B46D83724830\knsz3924.tmpfs
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\veborije]ImagePath=[%PROGRAM_FILES%]\EB567F00-1477730935-11D9-98C2-F46D046E58A8\kns60BE.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\xividysi]ImagePath=[%PROGRAM_FILES%]\0000B3A0-1479540061-072F-FFFF-74D02B47FA86\kns2EF.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\buboseqi]ImagePath=[%PROGRAM_FILES%]\A17A2D65-1479725024-66BB-1BB4-2C56DC93C45C\knsq7969.tmpfs
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\zigipyro]ImagePath=[%LOCAL_APPDATA%]\00000000-1479752637-0000-0000-448A5B28B40F\qnss2A2A.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\hudenuzi]ImagePath=[%PROGRAM_FILES%]\00000000-1479743621-0000-0000-448A5B28B40F\knsf8584.tmpfs
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\pohuvubu]ImagePath=[%PROGRAM_FILES%]\32444335-1479644952-4733-4252-80C16E5BE041\kns539F.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\zigipyro]ImagePath=[%LOCAL_APPDATA%]\038D0240-1479768940-051A-7206-B70700080009\qnsa118E.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\qohezowu]ImagePath=[%PROGRAM_FILES%]\038D0240-1479759962-051A-7206-B70700080009\knsvF70E.tmpfs
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\zigipyro]ImagePath=[%LOCAL_APPDATA%]\4CD752E0-1479643474-11D5-88F8-E03F4917FC4D\qnsuD5EC.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\rureqiki]ImagePath=[%PROGRAM_FILES%]\4CD752E0-1479639846-11D5-88F8-E03F4917FC4D\knsj20C4.tmpfs
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\nybofupo]ImagePath=[%PROGRAM_FILES%]\644B6582-1479390217-E111-B972-5C9AD859915D\knsC193.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\fegyxehi]ImagePath=[%PROGRAM_FILES%]\31444335-1479739661-5432-4837-441EA1D83E71\knslE010.tmpfs
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\xubunocy]ImagePath=[%PROGRAM_FILES%]\03000200-1479635645-0500-0006-000700080009\knsE8E.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\jutumyri]ImagePath=[%PROGRAM_FILES%]\F29549E9-1479199918-11E3-BE7C-40F02FE7C5A1\kns766A.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\nuloqisy]ImagePath=[%PROGRAM_FILES%]\FFFFFFFF-1479678256-FFFF-FFFF-FFFFFFFFFFFF\knsbDCF0.tmpfs
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\xubunocy]ImagePath=[%PROGRAM_FILES%]\DDD1AAE8-1479661404-11E4-81A8-A07D642F0900\knsw2CF1.tmpfs
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\fikytyzy]ImagePath=[%PROGRAM_FILES%]\00000000-1479625492-0000-0000-001FD0C22371\knseD397.tmpfs
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\fikytyzy]ImagePath=[%PROGRAM_FILES%]\30613863-1479626967-6462-6338-0026221CC0EC\knsmB56F.tmpfs
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\zigipyro]ImagePath=[%LOCAL_APPDATA%]\95816B17-1478723835-5661-A30E-07077B7E2183\qnsh2C2F.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\wozisijo]ImagePath=[%PROGRAM_FILES%]\95816B17-1478610833-5661-A30E-07077B7E2183\knsv5ACE.tmpfs
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\zyvirigo]ImagePath=[%PROGRAM_FILES%]\CB01F180-1445555606-1013-98DF-A473DE0F4C2E\jnsmBC7B.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\dijojyvi]ImagePath=[%PROGRAM_FILES%]\CB01F180-1445555606-1013-98DF-A473DE0F4C2E\hnsw1259.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\pevypihe]ImagePath=[%PROGRAM_FILES%]\03AA02FC-1479552168-0554-7606-350700080009\knss3B05.tmpfs
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\qijekipe]ImagePath=[%PROGRAM_FILES%]\038D0240-1479483222-05FD-2D06-220700080009\knslC4B6.tmpfs
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\pybituso]ImagePath=[%PROGRAM_FILES%]\4C4C4544-1479218662-5110-8059-B2C04F4A4D31\knsl66F4.tmpfs
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\vebokyqu]ImagePath=[%PROGRAM_FILES%]\BD26FA30-1478773784-DF11-90FF-0023268FB84E\kns742C.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\rocufyky]ImagePath=[%PROGRAM_FILES%]\4C4C4544-1461994146-4D10-8038-B1C04F485731\jnsd3769.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\rijufoze]ImagePath=[%PROGRAM_FILES%]\4C4C4544-1461994146-4D10-8038-B1C04F485731\hnstA95F.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\dowidoly]ImagePath=[%PROGRAM_FILES%]\4C4C4544-1469521087-4D10-8038-B1C04F485731\jnss16E2.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\mipodito]ImagePath=[%PROGRAM_FILES%]\4C4C4544-1479369429-5110-804A-C8C04F375731\knsv73CC.tmpfs
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\zigipyro]ImagePath=[%LOCAL_APPDATA%]\03000200-1479170788-0500-0006-000700080009\qnskDA.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\ryzyvuge]ImagePath=[%PROGRAM_FILES%]\03000200-1479228268-0500-0006-000700080009\kns50BA.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\xumenicy]ImagePath=[%PROGRAM_FILES%]\0D20AF20-1479311194-11DD-8EFF-BCEE7B604C7D\knsgB647.tmpfs
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\mufymeci]ImagePath=[%PROGRAM_FILES%]\038D0240-1479180152-057B-2606-590700080009\knsgF50B.tmpfs
  • [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]autoauto="[%PROGRAM_FILES%]\guilder\reassembled.exe"
  • [HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]dutoauto="[%PROGRAM_FILES%]\guilder\lapsed.exe"
  • [HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]interpee="[%PROGRAM_FILES%]\Acronym\bsf.exe"
  • [HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]rutoauto="[%PROGRAM_FILES%]\guilder\reassembled.exe"
  • [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]interpee="[%PROGRAM_FILES%]\Acronym\bsf.exe"
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\cypyrovy]ImagePath=[%PROGRAM_FILES%]\4C4C4544-1479254160-4810-8035-CAC04F473232\knsyF397.tmpfs
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\kubysysu]ImagePath=[%PROGRAM_FILES%]\FFFFFFFF-1478880410-FFFF-FFFF-FFFFFFFFFFFF\kns171C.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\cofunejy]ImagePath=[%PROGRAM_FILES%]\285CCAB9-1479165742-11DD-9DDE-C8007F1950C2\knsl18D2.tmpfs
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\zoqyvoku]ImagePath=[%PROGRAM_FILES%]\00000000-1479234609-0000-0000-00242155A5D9\knsgE8FB.tmpfs
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\tojypiti]ImagePath=[%PROGRAM_FILES%]\03DE0294-1475142632-052A-8A06-1D0700080009\kns7D1A.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\wucotusy]ImagePath=[%PROGRAM_FILES%]\03000200-1458436312-0500-0006-000700080009\hnsjC8FB.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\zigipyro]ImagePath=[%LOCAL_APPDATA%]\00000000-1479079287-0000-0000-D43D7EC4DF84\qnsz543B.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\vukodygi]ImagePath=[%PROGRAM_FILES%]\4C4C4544-1478940763-4B10-8043-B8C04F4B3732\kns5C31.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\sogomuro]ImagePath=[%PROGRAM_FILES%]\B1ECD526-1476729828-537C-0582-A02BB824450B\knsn87BE.tmpfs
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\kezihybo]ImagePath=[%PROGRAM_FILES%]\FB9D059B-1479106420-DADB-EDB2-3B751F648A23\kns4416.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\kybyqury]ImagePath=[%PROGRAM_FILES%]\1EE2ACDF-1477501562-E411-A26A-F0761CA01E00\knsBE9F.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\qyjuceli]ImagePath=[%PROGRAM_FILES%]\48C96100-1479062878-11DD-9525-3085A98F4683\knsj4E26.tmpfs
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\bipimico]ImagePath=[%PROGRAM_FILES%]\5CE3BD5E-1477894647-E311-A96C-201A063B6AA9\knsp8C3A.tmpfs
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\zigipyro]ImagePath=[%LOCAL_APPDATA%]\11373C80-1478839255-8148-2C8C-386077BEADF2\qnsnBCD1.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\bibifeje]ImagePath=[%PROGRAM_FILES%]\11373C80-1478832004-8148-2C8C-386077BEADF2\knsxEF2C.tmpfs
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\nizosebo]ImagePath=[%PROGRAM_FILES%]\41313030-1453736894-4246-4433-4335FFFFFFFF\knsA0C5.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\zutuzuni]ImagePath=[%PROGRAM_FILES%]\41313030-1453736894-4246-4433-4335FFFFFFFF\jnsgBFF4.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\zigipyro]ImagePath=[%LOCAL_APPDATA%]\41313030-1478979366-4246-4433-4335FFFFFFFF\qnsb80B7.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\wucotusy]ImagePath=[%PROGRAM_FILES%]\41313030-1453736894-4246-4433-4335FFFFFFFF\hnsmD6F0.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\symiqoro]ImagePath=[%PROGRAM_FILES%]\35453035-1478955438-4335-3937-3945FFFFFFFF\kns8901.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\rijufoze]ImagePath=[%PROGRAM_FILES%]\4C4C4544-1470243451-4C10-8039-B7C04F345931\hnsgAB2A.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\dowidoly]ImagePath=[%PROGRAM_FILES%]\4C4C4544-1470243451-4C10-8039-B7C04F345931\jnse66CC.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\mujilugo]ImagePath=[%PROGRAM_FILES%]\D70DD1A2-1478449794-11E6-9614-507B9DFCDFC2\kns5099.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\kybunegi]ImagePath=[%PROGRAM_FILES%]\D70DD1A2-1478449794-11E6-9614-507B9DFCDFC2\knsdA774.tmpfs
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\dovufosy]ImagePath=[%PROGRAM_FILES%]\5083EFFF-1478718585-E311-A9FD-008CFA78DF8E\kns8EB2.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\fulecepo]ImagePath=[%PROGRAM_FILES%]\11604782-1478903474-E311-93F1-201A06F72BB2\kns4912.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\zigipyro]ImagePath=[%LOCAL_APPDATA%]\11604782-1478959380-E311-93F1-201A06F72BB2\qnsc6E20.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\dototimu]ImagePath=[%PROGRAM_FILES%]\03000200-1477741644-0500-0006-000700080009\knsA6C0.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\zigipyro]ImagePath=[%LOCAL_APPDATA%]\03000200-1478353684-0500-0006-000700080009\qnsb2DFD.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\zutuzuni]ImagePath=[%PROGRAM_FILES%]\990AA4E0-1454932227-11DF-B54C-E0CB4ED82326\jnspD1B.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\wucotusy]ImagePath=[%PROGRAM_FILES%]\990AA4E0-1454932227-11DF-B54C-E0CB4ED82326\hnsp22BF.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\rydygype]ImagePath=[%PROGRAM_FILES%]\95DFD938-1476973766-584E-B52A-2C600CD3F7AD\kns4F36.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\zigipyro]ImagePath=[%LOCAL_APPDATA%]\95DFD938-1478852780-584E-B52A-2C600CD3F7AD\qnslC55D.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\zigipyro]ImagePath=[%LOCAL_APPDATA%]\4C4C4544-1478804616-5010-8039-B6C04F4E334A\qnshE519.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\sycuzomy]ImagePath=[%PROGRAM_FILES%]\4C4C4544-1478793614-5010-8039-B6C04F4E334A\knsmDF7D.tmpfs
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\reqokehu]ImagePath=[%PROGRAM_FILES%]\4E3752A1-1476801894-EEBF-7266-08606E1280AD\kns722E.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\meguqysy]ImagePath=[%PROGRAM_FILES%]\34444335-1478188040-5330-304A-A02BB8515FB2\knsyB56F.tmpfs
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\rijufoze]ImagePath=[%PROGRAM_FILES%]\4C4C4544-1471344111-3910-8036-B2C04F4E3332\hnsm4D62.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\dowidoly]ImagePath=[%PROGRAM_FILES%]\4C4C4544-1471344111-3910-8036-B2C04F4E3332\jnsiD071.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\zigipyro]ImagePath=[%LOCAL_APPDATA%]\F0B1DA29-1452723882-5B40-B407-60A44C617781\qnsi7DAA.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\polefutu]ImagePath=[%PROGRAM_FILES%]\78657049-1478583339-0420-0000-C44100000000\knsuDA4A.tmpfs
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\fekowige]ImagePath=[%PROGRAM_FILES%]\4C4C4544-1478029806-3410-8039-B7C04F4B344A\knsxED88.tmpfs
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\qomuvihi]ImagePath=[%PROGRAM_FILES%]\D1FD35A3-1478807629-E511-B27E-705A0F620362\knsh2146.tmpfs
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\qunifomy]ImagePath=[%PROGRAM_FILES%]\76A9B100-1478730018-11DC-8008-D6AF6AC9FF72\knsg4769.tmpfs
  • [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]autoauto="[%PROGRAM_FILES%]\vig\whampoa.exe"
  • [HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]dutoauto="[%PROGRAM_FILES%]\vig\entreated.exe"
  • [HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]interpee="[%PROGRAM_FILES%]\Plausibly\gaddis.exe"
  • [HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]rutoauto="[%PROGRAM_FILES%]\vig\whampoa.exe"
  • [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]interpee="[%PROGRAM_FILES%]\Plausibly\gaddis.exe"
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\qomuvihi]ImagePath=[%PROGRAM_FILES%]\2AD542B9-1478810139-DF11-9CD1-0019998EFD55\knsuD2CB.tmpfs
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\zilexiky]ImagePath=[%PROGRAM_FILES%]\B8E92100-1478726483-81E0-2B8B-F46D044D07D7\knsx921C.tmpfs
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\wepiwonu]ImagePath=[%PROGRAM_FILES%]\370C1D74-1465038536-11DF-A847-69726B283D8E\kns3C46.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\qypehonu]ImagePath=[%PROGRAM_FILES%]\03D40274-1478708384-05B3-4606-350700080009\knsu2A8F.tmpfs
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\jipyfuxy]ImagePath=[%PROGRAM_FILES%]\019D43B8-1478073800-11DD-B119-64D25F0620F9\kns5CFF.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\jipyfuxy]ImagePath=[%PROGRAM_FILES%]\A28AF260-1478270587-11DF-8233-C80AA9EC91F9\kns32E6.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\zumeqyxu]ImagePath=[%PROGRAM_FILES%]\535C49C0-1478584371-11DD-B0EF-3085A9ADE42E\knsv4658.tmpfs
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\zigipyro]ImagePath=[%LOCAL_APPDATA%]\535C49C0-1478595216-11DD-B0EF-3085A9ADE42E\qnsaF76A.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\zigipyro]ImagePath=[%LOCAL_APPDATA%]\4C4C4544-1478609483-4410-8043-C7C04F593532\qnst1FD.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\finenedo]ImagePath=[%PROGRAM_FILES%]\4C4C4544-1476540966-4410-8043-C7C04F593532\kns8814.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\zumeqyxu]ImagePath=[%PROGRAM_FILES%]\4C4C4544-1478585441-5810-8033-B3C04F4E5431\knsm7C85.tmpfs