Exterminate It! Antimalware

malpedia

Known threats:700,086 Last Update:March 16, 12:51

Testimonials

Just want to say that apparently your Exterminate It has worked like a charm. I was infected with a most troublesome Malware Trojan that kept replicating every time McAfee found, blocked and removed it... most annoying for several days... until Mr. Google led me to your door. What a God send!

With thanks,

Tom S.

MultiPlug- Registry Values List

This is a complete list of MultiPlug registry values collected by Exterminate It!. If you find any of these registry values on your PC, your computer is very likely to be infected with the MultiPlug - adware.

IMPORTANT: Because the registry is a core component of your Windows system, it is strongly recommended that you back up the registry before you begin deleting keys and values. For information about backing up the Windows registry, refer to the Registry Editor online help.
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\cobomiku]ImagePath=[%PROGRAM_FILES%]\C050DE17-1440039628-D311-9F6C-00262D2CE9A2\hnshB530.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\zefuqezy]ImagePath=[%PROGRAM_FILES%]\A054ECF3-1439927610-E011-A898-00266CDDD657\knszF87C.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\hyverumu]ImagePath=[%PROGRAM_FILES%]\A054ECF3-1439927610-E011-A898-00266CDDD657\jnsdDFE2.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\gopibeko]ImagePath=[%LOCAL_APPDATA%]\A054ECF3-1439909668-E011-A898-00266CDDD657\snso7512.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\comyninu]ImagePath=[%PROGRAM_FILES%]\A054ECF3-1439927610-E011-A898-00266CDDD657\hnsdF7F6.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\hyverumu]ImagePath=[%PROGRAM_FILES%]\3952B340-1439990200-11DF-AB2F-485B39F60737\jnsv56C.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\jybiqyqo]ImagePath=[%PROGRAM_FILES%]\3952B340-1439990200-11DF-AB2F-485B39F60737\hnsq2379.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\hyverumu]ImagePath=[%PROGRAM_FILES%]\AB3C8387-1439910429-E111-A8F5-3085A972B001\jnsoB895.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\gojicije]ImagePath=[%PROGRAM_FILES%]\AB3C8387-1439910429-E111-A8F5-3085A972B001\knsk95B5.tmpfs
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\comyninu]ImagePath=[%PROGRAM_FILES%]\AB3C8387-1439910429-E111-A8F5-3085A972B001\hnsnCEA0.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\sumiryhi]ImagePath=[%PROGRAM_FILES%]\4B435451-1440073301-3031-4931-14DAE9A9B317\knsmE7AD.tmpfs
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\kefowydy]ImagePath=[%PROGRAM_FILES%]\4B435451-1440073301-3031-4931-14DAE9A9B317\hnsp2D98.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\hyverumu]ImagePath=[%PROGRAM_FILES%]\4B435451-1440073301-3031-4931-14DAE9A9B317\jnsv1626.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\hyverumu]ImagePath=[%PROGRAM_FILES%]\EEAEF30B-1439410696-EE0A-E000-EB9434A8E6DE\jnspDF0.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\gopibeko]ImagePath=[%LOCAL_APPDATA%]\EEAEF30B-1439417936-EE0A-E000-EB9434A8E6DE\snsg772C.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\comyninu]ImagePath=[%PROGRAM_FILES%]\EEAEF30B-1439410696-EE0A-E000-EB9434A8E6DE\hnsj24C6.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\qihylyti]ImagePath=[%PROGRAM_FILES%]\46313030-1440013888-3535-3342-3232FFFFFFFF\knsh9850.tmpfs
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\hyverumu]ImagePath=[%PROGRAM_FILES%]\46313030-1440013888-3535-3342-3232FFFFFFFF\jnsmC899.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\cobomiku]ImagePath=[%PROGRAM_FILES%]\46313030-1440013888-3535-3342-3232FFFFFFFF\hnshF3C0.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\logobuki]ImagePath=[%PROGRAM_FILES%]\00000000-1438826664-0000-0000-000000000000\knsxFC42.tmpfs
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\hyverumu]ImagePath=[%PROGRAM_FILES%]\00000000-1438826664-0000-0000-000000000000\jnss2329.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\cobomiku]ImagePath=[%PROGRAM_FILES%]\E8D1399E-1440120307-DF11-9425-705AB6555C40\hnsfFF08.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\tucydypi]ImagePath=[%PROGRAM_FILES%]\89108BC1-1439731035-11E1-B308-B4DC15BAC48C\knsq587B.tmpfs
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\hyverumu]ImagePath=[%PROGRAM_FILES%]\89108BC1-1439731035-11E1-B308-B4DC15BAC48C\jnsf829C.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\hyverumu]ImagePath=[%PROGRAM_FILES%]\39464E43-1439807372-4D35-4251-00269E744A8D\jnss9F4F.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\fegysehe]ImagePath=[%PROGRAM_FILES%]\39464E43-1439807372-4D35-4251-00269E744A8D\knsa59F3.tmpfs
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\comyninu]ImagePath=[%PROGRAM_FILES%]\39464E43-1439807372-4D35-4251-00269E744A8D\hnsiB913.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\hyverumu]ImagePath=[%PROGRAM_FILES%]\C44DE380-1439932604-1016-A787-C28EA6DA101C\jnsiD9B5.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\comyninu]ImagePath=[%PROGRAM_FILES%]\C44DE380-1439932604-1016-A787-C28EA6DA101C\hnscF211.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\rycymozu]ImagePath=[%PROGRAM_FILES%]\96E6B055-1440035707-E011-A394-B870F4035742\knsa12EF.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\hyverumu]ImagePath=[%PROGRAM_FILES%]\415E16E0-1439886374-81F5-2E42-382C4A264404\jnst765C.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\dypybuby]ImagePath=[%PROGRAM_FILES%]\415E16E0-1439886374-81F5-2E42-382C4A264404\knszF0A6.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\comyninu]ImagePath=[%PROGRAM_FILES%]\415E16E0-1439886374-81F5-2E42-382C4A264404\hnslAEB4.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\rocegevy]ImagePath=[%PROGRAM_FILES%]\59FCC4A0-1439001773-11B2-8000-A924C9EBA888\knsk40D1.tmpfs
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\jotiviwo]ImagePath=[%PROGRAM_FILES%]\59FCC4A0-1439483474-11B2-8000-A924C9EBA888\knsy5A2D.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\hyverumu]ImagePath=[%PROGRAM_FILES%]\59FCC4A0-1439001773-11B2-8000-A924C9EBA888\jnsf5C24.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\comyninu]ImagePath=[%PROGRAM_FILES%]\59FCC4A0-1439001773-11B2-8000-A924C9EBA888\hnsp76E6.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\pukumufo]ImagePath=[%PROGRAM_FILES%]\05294B80-1439968230-11E0-A550-3860779FB361\knspAA02.tmpfs
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\hyverumu]ImagePath=[%PROGRAM_FILES%]\05294B80-1439968230-11E0-A550-3860779FB361\jnsdCBE8.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\comyninu]ImagePath=[%PROGRAM_FILES%]\05294B80-1439968230-11E0-A550-3860779FB361\hnsrE29E.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\rycymozu]ImagePath=[%PROGRAM_FILES%]\201A1CBC-1439994093-E011-AB8A-B8A4F052355D\knsi8DDD.tmpfs
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\jybiqyqo]ImagePath=[%PROGRAM_FILES%]\201A1CBC-1439994093-E011-AB8A-B8A4F052355D\hnsnD946.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\qidyvowo]ImagePath=[%PROGRAM_FILES%]\4C4C4544-1439367940-4410-8058-B9C04F4D5031\knsu508B.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\hyverumu]ImagePath=[%PROGRAM_FILES%]\4C4C4544-1439367940-4410-8058-B9C04F4D5031\jnsx1D0C.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\comyninu]ImagePath=[%PROGRAM_FILES%]\4C4C4544-1439367940-4410-8058-B9C04F4D5031\hnsu7A13.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\hyverumu]ImagePath=[%PROGRAM_FILES%]\2C8B77A0-1439637848-11B2-8000-FD6A0420108F\jnsc7EB.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\pukumufo]ImagePath=[%PROGRAM_FILES%]\2C8B77A0-1439637848-11B2-8000-FD6A0420108F\knsp9660.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\comyninu]ImagePath=[%PROGRAM_FILES%]\2C8B77A0-1439637848-11B2-8000-FD6A0420108F\hnsh254C.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\tobywimy]ImagePath=[%PROGRAM_FILES%]\45793397-1439983225-90A4-41A7-38607773884D\knseCF89.tmpfs
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\hyverumu]ImagePath=[%PROGRAM_FILES%]\011FB6B7-1439911885-CB11-A994-B464BC3B5214\jnss6B9B.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\gopibeko]ImagePath=[%LOCAL_APPDATA%]\011FB6B7-1439901141-CB11-A994-B464BC3B5214\snsy1516.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\gojicije]ImagePath=[%PROGRAM_FILES%]\011FB6B7-1439911885-CB11-A994-B464BC3B5214\knsi4BF5.tmpfs
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\comyninu]ImagePath=[%PROGRAM_FILES%]\011FB6B7-1439911885-CB11-A994-B464BC3B5214\hnsx85F0.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\zejytose]ImagePath=[%APPDATA%]\877844BE-1436930782-C995-AB4B-0797A31FC553\jnsyDD55.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\vicoqudu]ImagePath=[%APPDATA%]\877844BE-1436930782-C995-AB4B-0797A31FC553\hnsy190F.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\popihyfi]ImagePath=[%PROGRAM_FILES%]\877844BE-1436930782-C995-AB4B-0797A31FC553\knseE95F.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\lynyqone]ImagePath=[%PROGRAM_FILES%]\4C4C4544-1438812571-4B10-8054-B6C04F343032\knsk130B.tmpfs
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\hyverumu]ImagePath=[%PROGRAM_FILES%]\4C4C4544-1438812571-4B10-8054-B6C04F343032\jnsl4934.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\comyninu]ImagePath=[%PROGRAM_FILES%]\4C4C4544-1438812571-4B10-8054-B6C04F343032\hnsr9708.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\hobynujo]ImagePath=[%PROGRAM_FILES%]\6EBB187F-1438169940-11E3-9C3E-08D0DC0BF0FF\knscB4F.tmpfs
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\hyverumu]ImagePath=[%PROGRAM_FILES%]\6EBB187F-1438169940-11E3-9C3E-08D0DC0BF0FF\jnsn31F8.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\comyninu]ImagePath=[%PROGRAM_FILES%]\6EBB187F-1438169940-11E3-9C3E-08D0DC0BF0FF\hnsx4FC6.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\hyverumu]ImagePath=[%PROGRAM_FILES%]\03000200-1439806550-0500-0006-000700080009\jnsy477B.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\fivebomy]ImagePath=[%PROGRAM_FILES%]\03000200-1439806550-0500-0006-000700080009\knsy263F.tmpfs
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\comyninu]ImagePath=[%PROGRAM_FILES%]\03000200-1439806550-0500-0006-000700080009\hnso5DCB.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\hyverumu]ImagePath=[%PROGRAM_FILES%]\CFA2DD00-1439793079-11DD-979D-086266827E4E\jnsa56B9.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\gopibeko]ImagePath=[%LOCAL_APPDATA%]\CFA2DD00-1439812925-11DD-979D-086266827E4E\snsqD2BE.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\fegysehe]ImagePath=[%PROGRAM_FILES%]\CFA2DD00-1439793079-11DD-979D-086266827E4E\knso9817.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\comyninu]ImagePath=[%PROGRAM_FILES%]\CFA2DD00-1439793079-11DD-979D-086266827E4E\hnsv7514.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\mizonite]ImagePath=[%PROGRAM_FILES%]\5CC3E290-1439883696-11E1-9FE9-30F9EDB658A8\knsq7011.tmpfs
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\hyverumu]ImagePath=[%PROGRAM_FILES%]\5CC3E290-1439883696-11E1-9FE9-30F9EDB658A8\jnsbBEA4.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\gopibeko]ImagePath=[%LOCAL_APPDATA%]\5CC3E290-1439909024-11E1-9FE9-30F9EDB658A8\snsc6226.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\comyninu]ImagePath=[%PROGRAM_FILES%]\5CC3E290-1439883696-11E1-9FE9-30F9EDB658A8\hnsgE6FD.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\hyverumu]ImagePath=[%PROGRAM_FILES%]\DA5335D7-1439834585-0785-374C-75B602AC6798\jnsq31B.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\rusocuze]ImagePath=[%PROGRAM_FILES%]\DA5335D7-1439834585-0785-374C-75B602AC6798\knsqD429.tmpfs
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\comyninu]ImagePath=[%PROGRAM_FILES%]\DA5335D7-1439834585-0785-374C-75B602AC6798\hnsb2F8A.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\hyverumu]ImagePath=[%PROGRAM_FILES%]\C4B5FDC0-1439519681-11E4-AF6C-6002922C8D5F\jnst4FFA.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\gopibeko]ImagePath=[%LOCAL_APPDATA%]\C4B5FDC0-1439544926-11E4-AF6C-6002922C8D5F\snsaC6E2.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\fysyfoxe]ImagePath=[%PROGRAM_FILES%]\C4B5FDC0-1439519681-11E4-AF6C-6002922C8D5F\knsp2D1A.tmpfs
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\comyninu]ImagePath=[%PROGRAM_FILES%]\C4B5FDC0-1439519681-11E4-AF6C-6002922C8D5F\hnsc66DF.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\hyverumu]ImagePath=[%PROGRAM_FILES%]\2BC7C593-1439838900-DE11-8146-002622EC0569\jnss7A19.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\gopibeko]ImagePath=[%LOCAL_APPDATA%]\2BC7C593-1439824548-DE11-8146-002622EC0569\snsrDD2B.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\comyninu]ImagePath=[%PROGRAM_FILES%]\2BC7C593-1439838900-DE11-8146-002622EC0569\hnsx917C.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\buculuho]ImagePath=[%PROGRAM_FILES%]\2BC7C593-1439838900-DE11-8146-002622EC0569\knsx2E06.tmpfs
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\comyninu]ImagePath=[%PROGRAM_FILES%]\B5D57B80-1439660167-815C-29E9-BCAEC50743B3\hnso1CC.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\rexesine]ImagePath=[%PROGRAM_FILES%]\B5D57B80-1439660167-815C-29E9-BCAEC50743B3\knsyB96F.tmpfs
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\semumuxi]ImagePath=[%PROGRAM_FILES%]\1F0BA620-1437895122-11DD-90A6-3085A9B1F131\knsl6A70.tmpfs
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\comyninu]ImagePath=[%PROGRAM_FILES%]\1F0BA620-1437895122-11DD-90A6-3085A9B1F131\hnsq9B57.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\vicoqudu]ImagePath=[%APPDATA%]\99696A7F-1436714174-11E5-BD2F-F05A850AF0FF\hnsv2E66.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\hyverumu]ImagePath=[%PROGRAM_FILES%]\FFFFFFFF-1439790889-FFFF-FFFF-FFFFFFFFFFFF\jnsu21D1.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\comyninu]ImagePath=[%PROGRAM_FILES%]\FFFFFFFF-1439790889-FFFF-FFFF-FFFFFFFFFFFF\hnsf3718.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\cibumolo]ImagePath=[%PROGRAM_FILES%]\FFFFFFFF-1439790889-FFFF-FFFF-FFFFFFFFFFFF\knskFF1F.tmpfs
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\zorucody]ImagePath=[%APPDATA%]\4C4C4544-1428665332-3310-8052-B2C04F595831\knsf8B2A.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\kipilyqy]ImagePath=[%APPDATA%]\4C4C4544-1428665332-3310-8052-B2C04F595831\jnsh427C.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\hyverumu]ImagePath=[%PROGRAM_FILES%]\D5D7C4A4-1439784741-11E2-96F9-D405B45CE018\jnst9886.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\fegysehe]ImagePath=[%PROGRAM_FILES%]\D5D7C4A4-1439784741-11E2-96F9-D405B45CE018\knsyE3A9.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\comyninu]ImagePath=[%PROGRAM_FILES%]\D5D7C4A4-1439784741-11E2-96F9-D405B45CE018\hnsyAFCF.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\hyverumu]ImagePath=[%PROGRAM_FILES%]\4C4C4544-1438061770-5810-8052-B9C04F483332\jnssB09B.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\fehybixu]ImagePath=[%PROGRAM_FILES%]\4C4C4544-1438061770-5810-8052-B9C04F483332\knszC8A6.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\comyninu]ImagePath=[%PROGRAM_FILES%]\4C4C4544-1438061770-5810-8052-B9C04F483332\hnscCC47.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\gopibeko]ImagePath=[%LOCAL_APPDATA%]\03AA02FC-1439738216-052A-7306-1C0700080009\snsr19B9.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\comyninu]ImagePath=[%PROGRAM_FILES%]\03AA02FC-1439730973-052A-7306-1C0700080009\hnsrA738.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\juwyzywy]ImagePath=[%PROGRAM_FILES%]\DB2D5BCE-1439374966-11E0-9F82-08086701E06B\knsi64F3.tmpfs
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\hyverumu]ImagePath=[%PROGRAM_FILES%]\DB2D5BCE-1439374966-11E0-9F82-08086701E06B\jnsd7FF8.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\gopibeko]ImagePath=[%LOCAL_APPDATA%]\DB2D5BCE-1439386003-11E0-9F82-08086701E06B\snsaFE5E.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\comyninu]ImagePath=[%PROGRAM_FILES%]\DB2D5BCE-1439374966-11E0-9F82-08086701E06B\hnst9BC4.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\jodekezu]ImagePath=[%APPDATA%]\E6EADCFE-1433433532-AC4C-3BC2-7824AF40475D\jnsvFD8.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\timuneqi]ImagePath=[%APPDATA%]\E6EADCFE-1433433532-AC4C-3BC2-7824AF40475D\hnsk2AB9.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\jozusopy]ImagePath=[%PROGRAM_FILES%]\E6EADCFE-1433433532-AC4C-3BC2-7824AF40475D\knse3D88.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\jitidime]ImagePath=[%PROGRAM_FILES%]\E6EADCFE-1439710501-AC4C-3BC2-7824AF40475D\knsa9085.tmpfs
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\hyverumu]ImagePath=[%PROGRAM_FILES%]\E6EADCFE-1439710501-AC4C-3BC2-7824AF40475D\jnsfB75C.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\comyninu]ImagePath=[%PROGRAM_FILES%]\E6EADCFE-1439710501-AC4C-3BC2-7824AF40475D\hnsqCE77.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\juwyzywy]ImagePath=[%PROGRAM_FILES%]\772C4BE0-1439370006-11B2-8000-9AD374446449\knsx65A4.tmpfs
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\hyverumu]ImagePath=[%PROGRAM_FILES%]\772C4BE0-1439370006-11B2-8000-9AD374446449\jnsx82EA.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\comyninu]ImagePath=[%PROGRAM_FILES%]\772C4BE0-1439370006-11B2-8000-9AD374446449\hnss9ADF.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\hyverumu]ImagePath=[%PROGRAM_FILES%]\4C4C4544-1439459520-3410-8037-C8C04F434431\jnsm49CD.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\comyninu]ImagePath=[%PROGRAM_FILES%]\4C4C4544-1439459520-3410-8037-C8C04F434431\hnsw87E7.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\buwucyfi]ImagePath=[%PROGRAM_FILES%]\4C4C4544-1439459520-3410-8037-C8C04F434431\knsk9651.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\pizegyhy]ImagePath=[%APPDATA%]\F7A4CF00-1425396994-11E1-8B48-4C72B957AC6F\nslDCD0.tmpfs
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\cehufofi]ImagePath=[%APPDATA%]\F7A4CF00-1425396994-11E1-8B48-4C72B957AC6F\jnsgE13.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\hyverumu]ImagePath=[%PROGRAM_FILES%]\4C4C4544-1438355550-3810-8048-C3C04F4B5831\jnso4C1.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\nyziviwy]ImagePath=[%PROGRAM_FILES%]\4C4C4544-1438355550-3810-8048-C3C04F4B5831\knsyA7DD.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\gopibeko]ImagePath=[%LOCAL_APPDATA%]\4C4C4544-1438375422-3810-8048-C3C04F4B5831\snsx7F05.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\qowideqi]ImagePath=[%PROGRAM_FILES%]\0F019E08-1437891797-FFFF-FFFF-60A44C7726F1\knsz5C0.tmpfs
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\comyninu]ImagePath=[%PROGRAM_FILES%]\0F019E08-1437891797-FFFF-FFFF-60A44C7726F1\hnsoF87.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\hyverumu]ImagePath=[%PROGRAM_FILES%]\0F019E08-1437891797-FFFF-FFFF-60A44C7726F1\jnsrF0C2.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\zedepory]ImagePath=[%APPDATA%]\C68BCB00-1434964069-81E0-2343-F46D0425BF9E\hnswE83F.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\xoperoze]ImagePath=[%APPDATA%]\C68BCB00-1434964069-81E0-2343-F46D0425BF9E\jnscD1D1.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\jewubiti]ImagePath=[%APPDATA%]\C68BCB00-1434964069-81E0-2343-F46D0425BF9E\knse539D.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\gopibeko]ImagePath=[%LOCAL_APPDATA%]\E6EADCFE-1439724949-AC4C-3BC2-7824AF40475D\snsl3851.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\sybomoro]ImagePath=[%PROGRAM_FILES%]\E9431ED0-1439447042-81E4-39DB-AC9E17E5E7DA\knsvF74.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\hyverumu]ImagePath=[%PROGRAM_FILES%]\E9431ED0-1439447042-81E4-39DB-AC9E17E5E7DA\jnse270F.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\comyninu]ImagePath=[%PROGRAM_FILES%]\E9431ED0-1439447042-81E4-39DB-AC9E17E5E7DA\hnsh3D38.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\jigozide]ImagePath=[%PROGRAM_FILES%]\03000200-1439740854-0500-0006-000700080009\knsi923B.tmpfs
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\komivycy]ImagePath=[%PROGRAM_FILES%]\8E871A80-1439622065-11DC-96C2-00238B3A24A8\knsjF80E.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\hyverumu]ImagePath=[%PROGRAM_FILES%]\8E871A80-1439622065-11DC-96C2-00238B3A24A8\jnsh2F1E.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\comyninu]ImagePath=[%PROGRAM_FILES%]\8E871A80-1439622065-11DC-96C2-00238B3A24A8\hnsx5066.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\jitidime]ImagePath=[%PROGRAM_FILES%]\9A30EE64-1439710202-11E1-A1C5-99F0BC2835DA\knsa67FF.tmpfs
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\hyverumu]ImagePath=[%PROGRAM_FILES%]\9A30EE64-1439710202-11E1-A1C5-99F0BC2835DA\jnsg8C19.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\comyninu]ImagePath=[%PROGRAM_FILES%]\9A30EE64-1439710202-11E1-A1C5-99F0BC2835DA\hnsaB08B.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\hyverumu]ImagePath=[%PROGRAM_FILES%]\8D243840-1439618269-11DE-897D-00269E7FFD17\jnsm9A7.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\sylukobi]ImagePath=[%PROGRAM_FILES%]\8D243840-1439618269-11DE-897D-00269E7FFD17\knsi8D0F.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\comyninu]ImagePath=[%PROGRAM_FILES%]\8D243840-1439618269-11DE-897D-00269E7FFD17\hnsm2223.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\hotyzyvo]ImagePath=[%PROGRAM_FILES%]\4C4C4544-1439628713-3710-8035-C7C04F52344A\knsx5614.tmpfs
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\comyninu]ImagePath=[%PROGRAM_FILES%]\4C4C4544-1439628713-3710-8035-C7C04F52344A\hnsnA1BC.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\zedepory]ImagePath=[%APPDATA%]\60FF96DC-1435099635-DF11-9807-00266C973076\hnsyC1D3.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\xoperoze]ImagePath=[%APPDATA%]\60FF96DC-1435099635-DF11-9807-00266C973076\jnsdA4FE.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\tuliveke]ImagePath=[%APPDATA%]\60FF96DC-1435099635-DF11-9807-00266C973076\knszED84.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\comyninu]ImagePath=[%PROGRAM_FILES%]\080F4BC7-1439645482-E011-92CA-1C75086AE123\hnstBB8.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\rexesine]ImagePath=[%PROGRAM_FILES%]\080F4BC7-1439645482-E011-92CA-1C75086AE123\knstC24E.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\hyverumu]ImagePath=[%PROGRAM_FILES%]\080F4BC7-1439645482-E011-92CA-1C75086AE123\jnszB604.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\gopibeko]ImagePath=[%LOCAL_APPDATA%]\080F4BC7-1439620366-E011-92CA-1C75086AE123\snsd70DB.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\komivycy]ImagePath=[%PROGRAM_FILES%]\080F4BC7-1439645482-E011-92CA-1C75086AE123\knsfB20C.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\hyverumu]ImagePath=[%PROGRAM_FILES%]\7D3F2360-1439535448-11DD-80BF-F0795965D75C\jnsb89FE.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\fisugivu]ImagePath=[%PROGRAM_FILES%]\7D3F2360-1439535448-11DD-80BF-F0795965D75C\knsb70AE.tmpfs
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\comyninu]ImagePath=[%PROGRAM_FILES%]\7D3F2360-1439535448-11DD-80BF-F0795965D75C\hnsrA000.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\byligipu]ImagePath=[%PROGRAM_FILES%]\03000200-1439129824-0500-0006-000700080009\knseD61D.tmpfs
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\hyverumu]ImagePath=[%PROGRAM_FILES%]\3AF9D4D1-1439585490-11E1-AD70-66C25F06E04B\jnsbA914.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\fomeduze]ImagePath=[%PROGRAM_FILES%]\3AF9D4D1-1439585490-11E1-AD70-66C25F06E04B\knsh66C4.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\comyninu]ImagePath=[%PROGRAM_FILES%]\3AF9D4D1-1439585490-11E1-AD70-66C25F06E04B\hnsnECC6.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\rexesine]ImagePath=[%PROGRAM_FILES%]\DB0D8CE8-1439564110-DE11-A9D9-002622A56B98\knsd2356.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\hyverumu]ImagePath=[%PROGRAM_FILES%]\DB0D8CE8-1439564110-DE11-A9D9-002622A56B98\jnsuE06F.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\comyninu]ImagePath=[%PROGRAM_FILES%]\DB0D8CE8-1439564110-DE11-A9D9-002622A56B98\hnsuFD63.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\ginyzeri]ImagePath=[%PROGRAM_FILES%]\DB0D8CE8-1439564110-DE11-A9D9-002622A56B98\knsx45C6.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\xudefusi]ImagePath=[%PROGRAM_FILES%]\7A2CEEDC-1439569994-11E4-B60D-ED298D935A6A\knsuD5F.tmpfs
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\hyverumu]ImagePath=[%PROGRAM_FILES%]\7A2CEEDC-1439569994-11E4-B60D-ED298D935A6A\jnsv3466.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\comyninu]ImagePath=[%PROGRAM_FILES%]\7A2CEEDC-1439569994-11E4-B60D-ED298D935A6A\hnsd49C4.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\wuticedi]ImagePath=[%PROGRAM_FILES%]\CC841188-1439489441-4885-9146-85741E3F85A4\knsfFDD2.tmpfs
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\hyverumu]ImagePath=[%PROGRAM_FILES%]\CC841188-1439489441-4885-9146-85741E3F85A4\jnsq247B.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\gopibeko]ImagePath=[%LOCAL_APPDATA%]\CC841188-1439471481-4885-9146-85741E3F85A4\snsq8A9A.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\comyninu]ImagePath=[%PROGRAM_FILES%]\CC841188-1439489441-4885-9146-85741E3F85A4\hnsf3B32.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\zedepory]ImagePath=[%APPDATA%]\03D40274-1434094695-050E-2F06-3F0700080009\hnso5393.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\xoperoze]ImagePath=[%APPDATA%]\03D40274-1434094695-050E-2F06-3F0700080009\jnso3D05.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\nuxodeme]ImagePath=[%APPDATA%]\03D40274-1434094695-050E-2F06-3F0700080009\knsuA985.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\kysykiti]ImagePath=[%LOCAL_APPDATA%]\03D40274-1434120079-050E-2F06-3F0700080009\snspCCF7.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\zicepodi]ImagePath=[%PROGRAM_FILES%]\4080F1F5-1439438239-E211-A895-A7D92310856A\knsj6B4A.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\hyverumu]ImagePath=[%PROGRAM_FILES%]\4080F1F5-1439438239-E211-A895-A7D92310856A\jnsm563B.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\comyninu]ImagePath=[%PROGRAM_FILES%]\4080F1F5-1439438239-E211-A895-A7D92310856A\hnsr6F72.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\gopibeko]ImagePath=[%LOCAL_APPDATA%]\7D3F2360-1439560689-11DD-80BF-F0795965D75C\snsw27A.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\zevoseri]ImagePath=[%PROGRAM_FILES%]\13C57DA1-1439560069-11E1-91BD-EA596451EEBE\knsz3626.tmpfs
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\xudefusi]ImagePath=[%PROGRAM_FILES%]\C81CCFE7-1439568265-C583-9338-14DDA9539B31\knsq5ACB.tmpfs
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\hyverumu]ImagePath=[%PROGRAM_FILES%]\C81CCFE7-1439568265-C583-9338-14DDA9539B31\jnsb7510.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\comyninu]ImagePath=[%PROGRAM_FILES%]\C81CCFE7-1439568265-C583-9338-14DDA9539B31\hnsk8BA7.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\xudefusi]ImagePath=[%PROGRAM_FILES%]\F8577942-1439569745-E1FB-EA7C-D0278817611A\knso7545.tmpfs
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\zedepory]ImagePath=[%APPDATA%]\DCA0C424-1434337340-11DE-B426-88499C508C65\hnsg4099.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\xoperoze]ImagePath=[%APPDATA%]\DCA0C424-1434337340-11DE-B426-88499C508C65\jnsb2B24.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\kysykiti]ImagePath=[%LOCAL_APPDATA%]\DCA0C424-1434319513-11DE-B426-88499C508C65\snsmA20A.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\binukymy]ImagePath=[%APPDATA%]\DCA0C424-1434337340-11DE-B426-88499C508C65\knspF18A.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\hyverumu]ImagePath=[%PROGRAM_FILES%]\B90B3987-1439258909-0BD4-D4CC-BEA0D1CF2C02\jnsb4576.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\comyninu]ImagePath=[%PROGRAM_FILES%]\B90B3987-1439258909-0BD4-D4CC-BEA0D1CF2C02\hnst6506.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\binorose]ImagePath=[%PROGRAM_FILES%]\B90B3987-1439258909-0BD4-D4CC-BEA0D1CF2C02\knsv5322.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\notedije]ImagePath=[%PROGRAM_FILES%]\3BC18281-1439386978-11CB-8B6C-90AD9B4F7AAD\knsoF773.tmpfs
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\hyverumu]ImagePath=[%PROGRAM_FILES%]\3BC18281-1439386978-11CB-8B6C-90AD9B4F7AAD\jnsu4413.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\gopibeko]ImagePath=[%LOCAL_APPDATA%]\3BC18281-1439433958-11CB-8B6C-90AD9B4F7AAD\snsa9A8E.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\comyninu]ImagePath=[%PROGRAM_FILES%]\3BC18281-1439386978-11CB-8B6C-90AD9B4F7AAD\hnspB628.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\pyrybere]ImagePath=[%PROGRAM_FILES%]\4C4C4544-1438403162-4D10-804C-B6C04F344A31\knskC9BF.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\hyverumu]ImagePath=[%PROGRAM_FILES%]\4C4C4544-1438403162-4D10-804C-B6C04F344A31\jnsq8721.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\comyninu]ImagePath=[%PROGRAM_FILES%]\4C4C4544-1438403162-4D10-804C-B6C04F344A31\hnsqA28F.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\wuticedi]ImagePath=[%PROGRAM_FILES%]\CB1AAF20-1439489253-81E4-25B8-382C4A30A78D\knsa8251.tmpfs
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\hyverumu]ImagePath=[%PROGRAM_FILES%]\CB1AAF20-1439489253-81E4-25B8-382C4A30A78D\jnshAB9A.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\gopibeko]ImagePath=[%LOCAL_APPDATA%]\CB1AAF20-1439496499-81E4-25B8-382C4A30A78D\snsj15FF.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\comyninu]ImagePath=[%PROGRAM_FILES%]\CB1AAF20-1439489253-81E4-25B8-382C4A30A78D\hnsbC3A8.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\rocegevy]ImagePath=[%PROGRAM_FILES%]\607A3465-1437408939-DE11-B42D-D7987E4A86A1\knsh42C2.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\lozoqehe]ImagePath=[%PROGRAM_FILES%]\A1DC5043-1439392637-7B4D-4D39-7824AF83653F\knsg6597.tmpfs
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\juwyzywy]ImagePath=[%PROGRAM_FILES%]\03000200-1439187289-0500-0006-000700080009\knsq8A01.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\hyverumu]ImagePath=[%PROGRAM_FILES%]\03000200-1439187289-0500-0006-000700080009\jnsc8F91.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\comyninu]ImagePath=[%PROGRAM_FILES%]\03000200-1439187289-0500-0006-000700080009\hnscAAB1.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\bopomopy]ImagePath=[%PROGRAM_FILES%]\A2C178D9-1439258812-11E1-872C-52E12F0340B9\knskD7E1.tmpfs
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\vurocyhy]ImagePath=[%PROGRAM_FILES%]\00000000-1439406397-0000-0000-50E5495E3BDD\knsv5B52.tmpfs
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\hyverumu]ImagePath=[%PROGRAM_FILES%]\00000000-1439406397-0000-0000-50E5495E3BDD\jnsl72DE.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\comyninu]ImagePath=[%PROGRAM_FILES%]\00000000-1439406397-0000-0000-50E5495E3BDD\hnsq88EF.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\sumutode]ImagePath=[%PROGRAM_FILES%]\D8C81992-1438402121-1295-8E23-75844BFB649A\knsv9368.tmpfs
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\hyverumu]ImagePath=[%PROGRAM_FILES%]\D8C81992-1438402121-1295-8E23-75844BFB649A\jnsq2A6F.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\comyninu]ImagePath=[%PROGRAM_FILES%]\D8C81992-1438402121-1295-8E23-75844BFB649A\hnsgE9D9.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\qilibyni]ImagePath=[%APPDATA%]\1CED179D-1433068426-E211-A273-B888E39A9BF9\hnsl5A60.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\comyninu]ImagePath=[%PROGRAM_FILES%]\4C4C4544-1439225071-5310-804B-B3C04F485031\hnszE7F4.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\zejytose]ImagePath=[%PROGRAM_FILES%]\607A3465-1437408939-DE11-B42D-D7987E4A86A1\jnsk1BF9.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\vicoqudu]ImagePath=[%PROGRAM_FILES%]\607A3465-1437408939-DE11-B42D-D7987E4A86A1\hnsk33BF.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\comyninu]ImagePath=[%PROGRAM_FILES%]\4C4C4544-1438001076-3910-805A-C6C04F323253\hnsvEDBC.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\ryroguso]ImagePath=[%PROGRAM_FILES%]\E913CD64-1438436047-E311-B2A0-6CC217E820DF\knsoE9C1.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\hyverumu]ImagePath=[%PROGRAM_FILES%]\E913CD64-1438436047-E311-B2A0-6CC217E820DF\jnsk9A47.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\comyninu]ImagePath=[%PROGRAM_FILES%]\E913CD64-1438436047-E311-B2A0-6CC217E820DF\hnsyB061.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\synocufe]ImagePath=[%PROGRAM_FILES%]\5CE2A480-1439241280-11DD-936C-C86000C64B02\knsp2750.tmpfs
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\hyverumu]ImagePath=[%PROGRAM_FILES%]\5CE2A480-1439241280-11DD-936C-C86000C64B02\jnse4B59.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\gopibeko]ImagePath=[%LOCAL_APPDATA%]\5CE2A480-1439216121-11DD-936C-C86000C64B02\snstBC17.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\comyninu]ImagePath=[%PROGRAM_FILES%]\5CE2A480-1439241280-11DD-936C-C86000C64B02\hnse650D.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\vicoqudu]ImagePath=[%PROGRAM_FILES%]\401537CA-1437514750-E211-974C-008CFA6834CC\hnsy1955.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\cefomono]ImagePath=[%PROGRAM_FILES%]\414DE000-1439282978-FFFF-FFFF-FFFFFFFFFFFF\knsi395.tmpfs
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\xoxufewe]ImagePath=[%APPDATA%]\00000000-1430856626-0000-0000-000000000000\jnseD644.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\xopobepe]ImagePath=[%PROGRAM_FILES%]\18C7EBCB-1438601524-4D6F-B50A-6D811F191311\knst21C2.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\hyverumu]ImagePath=[%PROGRAM_FILES%]\18C7EBCB-1438601524-4D6F-B50A-6D811F191311\jnsw75A5.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\comyninu]ImagePath=[%PROGRAM_FILES%]\18C7EBCB-1438601524-4D6F-B50A-6D811F191311\hnsl8E30.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\zedepory]ImagePath=[%APPDATA%]\FC44DB40-1434644166-11D9-BC2F-74D02B29F7B3\hnsl915E.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\sijehuco]ImagePath=[%PROGRAM_FILES%]\FC44DB40-1434644166-11D9-BC2F-74D02B29F7B3\knseCF63.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\lisosovy]ImagePath=[%PROGRAM_FILES%]\FC44DB40-1434644166-11D9-BC2F-74D02B29F7B3\knsmD299.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\pefosupi]ImagePath=[%PROGRAM_FILES%]\4C4C4544-1438943484-3510-8050-C2C04F4A5231\knsf910.tmpfs
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\hyverumu]ImagePath=[%PROGRAM_FILES%]\4C4C4544-1438943484-3510-8050-C2C04F4A5231\jnsa35C1.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\comyninu]ImagePath=[%PROGRAM_FILES%]\4C4C4544-1438943484-3510-8050-C2C04F4A5231\hnsa5573.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\hyverumu]ImagePath=[%PROGRAM_FILES%]\03D40274-1438859734-0581-6F06-E90700080009\jnsu5A.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\comyninu]ImagePath=[%PROGRAM_FILES%]\03D40274-1438859734-0581-6F06-E90700080009\hnsv60.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\hyverumu]ImagePath=[%PROGRAM_FILES%]\34443437-1439135729-3335-3734-3642FFFFFFFF\jnsw30EF.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\hivikewe]ImagePath=[%PROGRAM_FILES%]\34443437-1439135729-3335-3734-3642FFFFFFFF\knsl10FA.tmpfs
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\comyninu]ImagePath=[%PROGRAM_FILES%]\34443437-1439135729-3335-3734-3642FFFFFFFF\hnsm5939.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\comyninu]ImagePath=[%PROGRAM_FILES%]\6F643FC0-1438847644-11D5-80FA-00248C083038\hnse32F.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\xepopycy]ImagePath=[%PROGRAM_FILES%]\6F643FC0-1438847644-11D5-80FA-00248C083038\knspD0D2.tmpfs
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\hyverumu]ImagePath=[%PROGRAM_FILES%]\6F643FC0-1438847644-11D5-80FA-00248C083038\jnspED2E.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\sicubehy]ImagePath=[%PROGRAM_FILES%]\585AD690-1439208556-11E2-9CBA-018E7E392A00\knsrDE5A.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\hyverumu]ImagePath=[%PROGRAM_FILES%]\585AD690-1439208556-11E2-9CBA-018E7E392A00\jnspD450.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\gopibeko]ImagePath=[%LOCAL_APPDATA%]\585AD690-1439197855-11E2-9CBA-018E7E392A00\snsyA80E.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\comyninu]ImagePath=[%PROGRAM_FILES%]\585AD690-1439208556-11E2-9CBA-018E7E392A00\hnsp1EAA.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\synocufe]ImagePath=[%PROGRAM_FILES%]\585AD690-1439241576-11E2-9CBA-018E7E392A00\knsqF171.tmpfs
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\lydeteku]ImagePath=[%APPDATA%]\4C4C4544-1430866816-4C10-8059-C6C04F384B31\nsg398F.tmpfs
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\zepyxizo]ImagePath=[%LOCAL_APPDATA%]\4C4C4544-1430856421-4C10-8059-C6C04F384B31\cnsj3891.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\xoxufewe]ImagePath=[%APPDATA%]\4C4C4544-1430866816-4C10-8059-C6C04F384B31\jnsr7E62.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\vomukenu]ImagePath=[%LOCAL_APPDATA%]\4C4C4544-1430856437-4C10-8059-C6C04F384B31\snsz6BCF.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\qygynece]ImagePath=[%LOCAL_APPDATA%]\D74317C0-1428788771-11E2-ACF5-78843C3AF463\insz9B16.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\jokydeki]ImagePath=[%LOCAL_APPDATA%]\30464E43-1434988201-5236-3433-6431505DF1B5\cnsj3CB.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\nisowysy]ImagePath=[%PROGRAM_FILES%]\26E83A00-1439107646-11D9-86EF-14DAE9ECC81D\knsr63.tmpfs
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\hyverumu]ImagePath=[%PROGRAM_FILES%]\26E83A00-1439107646-11D9-86EF-14DAE9ECC81D\jnsj6D.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\gopibeko]ImagePath=[%LOCAL_APPDATA%]\26E83A00-1439132909-11D9-86EF-14DAE9ECC81D\snsjA1.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\comyninu]ImagePath=[%PROGRAM_FILES%]\26E83A00-1439107646-11D9-86EF-14DAE9ECC81D\hnso7B.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\nodizeni]ImagePath=[%PROGRAM_FILES%]\03000200-1438920031-0500-0006-000700080009\knsb4C42.tmpfs
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\hyverumu]ImagePath=[%PROGRAM_FILES%]\03000200-1438920031-0500-0006-000700080009\jnsg70A9.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\comyninu]ImagePath=[%PROGRAM_FILES%]\03000200-1438920031-0500-0006-000700080009\hnsb9480.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\hyverumu]ImagePath=[%PROGRAM_FILES%]\295DD133-1438506137-11DF-81D0-B9F76E3900DB\jnsf498.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\sypifyjy]ImagePath=[%PROGRAM_FILES%]\295DD133-1438506137-11DF-81D0-B9F76E3900DB\knsjB1F0.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\comyninu]ImagePath=[%PROGRAM_FILES%]\295DD133-1438506137-11DF-81D0-B9F76E3900DB\hnsk2A33.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\comyninu]ImagePath=[%PROGRAM_FILES%]\A400ED62-1438990101-5C71-C88F-2C27D7B2C9D0\hnsj85A.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\vilikehy]ImagePath=[%PROGRAM_FILES%]\A400ED62-1438990101-5C71-C88F-2C27D7B2C9D0\knsjD792.tmpfs
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\hyverumu]ImagePath=[%PROGRAM_FILES%]\A400ED62-1438990101-5C71-C88F-2C27D7B2C9D0\jnszF056.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\gopibeko]ImagePath=[%LOCAL_APPDATA%]\A400ED62-1438972168-5C71-C88F-2C27D7B2C9D0\snszCFED.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\sosytono]ImagePath=[%PROGRAM_FILES%]\A400ED62-1438990101-5C71-C88F-2C27D7B2C9D0\knsl7B36.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\zysomyhi]ImagePath=[%PROGRAM_FILES%]\30464E43-1438951039-3931-4338-00269EF7EE0C\knse7D61.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\hyverumu]ImagePath=[%PROGRAM_FILES%]\30464E43-1438951039-3931-4338-00269EF7EE0C\jnsr29DE.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\comyninu]ImagePath=[%PROGRAM_FILES%]\30464E43-1438951039-3931-4338-00269EF7EE0C\hnsx4316.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\hyverumu]ImagePath=[%PROGRAM_FILES%]\30463441-1439057537-3043-3536-393031314531\jnszFAC.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\zefekefo]ImagePath=[%PROGRAM_FILES%]\30463441-1439057537-3043-3536-393031314531\knsnF25A.tmpfs
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\comyninu]ImagePath=[%PROGRAM_FILES%]\30463441-1439057537-3043-3536-393031314531\hnsi2643.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\fibiwugy]ImagePath=[%PROGRAM_FILES%]\032B0290-1438892306-05F5-2206-890700080009\knsu42DD.tmpfs
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\hunewijo]ImagePath=[%PROGRAM_FILES%]\032B0290-1438892306-05F5-2206-890700080009\knseB0B3.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\rykyrybu]ImagePath=[%PROGRAM_FILES%]\E2D02120-1438956357-81E4-33E0-086266DD46BE\knseCE41.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\hyverumu]ImagePath=[%PROGRAM_FILES%]\E2D02120-1438956357-81E4-33E0-086266DD46BE\jnss6E99.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\comyninu]ImagePath=[%PROGRAM_FILES%]\E2D02120-1438956357-81E4-33E0-086266DD46BE\hnst9500.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\hyverumu]ImagePath=[%PROGRAM_FILES%]\03D40274-1438958640-05B0-4506-F90700080009\jnsi37D7.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\dywenube]ImagePath=[%PROGRAM_FILES%]\03D40274-1438958640-05B0-4506-F90700080009\knsc1FED.tmpfs
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\comyninu]ImagePath=[%PROGRAM_FILES%]\03D40274-1438958640-05B0-4506-F90700080009\hnsd4D5C.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\tebomuju]ImagePath=[%PROGRAM_FILES%]\4C4C4544-1438257729-5610-8030-B3C04F575131\knsh6546.tmpfs
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\hyverumu]ImagePath=[%PROGRAM_FILES%]\4C4C4544-1438257729-5610-8030-B3C04F575131\jnsh86D0.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\vypybyki]ImagePath=[%PROGRAM_FILES%]\9E0365E0-1438841111-11E1-B1DE-E840F25F1E43\knsh3558.tmpfs
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\comyninu]ImagePath=[%PROGRAM_FILES%]\4C4C4544-1438617540-5410-8048-C3C04F434331\hnsp510.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\porigufi]ImagePath=[%PROGRAM_FILES%]\4C4C4544-1438617540-5410-8048-C3C04F434331\knspCF1A.tmpfs
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\hyverumu]ImagePath=[%PROGRAM_FILES%]\4C4C4544-1438617540-5410-8048-C3C04F434331\jnspED98.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\gopibeko]ImagePath=[%LOCAL_APPDATA%]\4C4C4544-1438606848-5410-8048-C3C04F434331\snsg5DAC.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\zedepory]ImagePath=[%APPDATA%]\1075719C-1434963677-7E12-56F6-DEB8E678F490\hnse1049.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\xoperoze]ImagePath=[%APPDATA%]\1075719C-1434963677-7E12-56F6-DEB8E678F490\jnsjF104.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\serolexe]ImagePath=[%PROGRAM_FILES%]\1075719C-1434963677-7E12-56F6-DEB8E678F490\knskEA69.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\xoridyju]ImagePath=[%PROGRAM_FILES%]\0BD2356D-1438889944-E111-9A4C-10604BD9679F\knscA0E9.tmpfs
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\hyverumu]ImagePath=[%PROGRAM_FILES%]\0BD2356D-1438889944-E111-9A4C-10604BD9679F\jnsxBFE4.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\comyninu]ImagePath=[%PROGRAM_FILES%]\0BD2356D-1438889944-E111-9A4C-10604BD9679F\hnsxDEFA.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\zyqobyfo]ImagePath=[%PROGRAM_FILES%]\085BFA80-1438907986-0000-0000-000000000000\knsm8CA3.tmpfs
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\hyverumu]ImagePath=[%PROGRAM_FILES%]\085BFA80-1438907986-0000-0000-000000000000\jnsiA8FB.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\gopibeko]ImagePath=[%LOCAL_APPDATA%]\085BFA80-1438936850-0000-0000-000000000000\snsg5664.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\comyninu]ImagePath=[%PROGRAM_FILES%]\085BFA80-1438907986-0000-0000-000000000000\hnsrBF44.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\ligyroju]ImagePath=[%PROGRAM_FILES%]\815FBF33-1438620424-CB11-BA65-B0D4BC72FC80\knsp7FA8.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\nitequsy]ImagePath=[%PROGRAM_FILES%]\03000200-1438774879-0500-0006-000700080009\knse6F65.tmpfs
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\hyverumu]ImagePath=[%PROGRAM_FILES%]\03000200-1438774879-0500-0006-000700080009\jnst9A22.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\gopibeko]ImagePath=[%LOCAL_APPDATA%]\03000200-1438802664-0500-0006-000700080009\snskB4A8.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\comyninu]ImagePath=[%PROGRAM_FILES%]\03000200-1438774879-0500-0006-000700080009\hnsoBCC1.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\lynyqone]ImagePath=[%PROGRAM_FILES%]\FFFFFFFF-1438812397-FFFF-FFFF-FFFFFFFFFFFF\knsi92C9.tmpfs
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\hyverumu]ImagePath=[%PROGRAM_FILES%]\FFFFFFFF-1438812397-FFFF-FFFF-FFFFFFFFFFFF\jnsxAABC.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\comyninu]ImagePath=[%PROGRAM_FILES%]\FFFFFFFF-1438812397-FFFF-FFFF-FFFFFFFFFFFF\hnsgC069.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\jokydeki]ImagePath=[%LOCAL_APPDATA%]\31464E43-1434555893-5A32-4B52-2C27D7D0F6F5\cnshD827.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\zejytose]ImagePath=[%PROGRAM_FILES%]\4C4C4544-1437097596-5810-8057-B9C04F4D5131\jnsa5B29.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\vicoqudu]ImagePath=[%PROGRAM_FILES%]\4C4C4544-1437097596-5810-8057-B9C04F4D5131\hnsv73BA.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\sirekyqo]ImagePath=[%PROGRAM_FILES%]\4C4C4544-1437097596-5810-8057-B9C04F4D5131\knsoAF8D.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\gopibeko]ImagePath=[%LOCAL_APPDATA%]\4C4C4544-1437091701-5810-8057-B9C04F4D5131\snslDA59.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\gopibeko]ImagePath=[%LOCAL_APPDATA%]\593E780E-1438806219-11E1-B525-26C45F064003\snsi7B0.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\comyninu]ImagePath=[%PROGRAM_FILES%]\593E780E-1438780921-11E1-B525-26C45F064003\hnsn494.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\xisuluhy]ImagePath=[%PROGRAM_FILES%]\593E780E-1438780921-11E1-B525-26C45F064003\knsxB19C.tmpfs
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\hyverumu]ImagePath=[%PROGRAM_FILES%]\593E780E-1438780921-11E1-B525-26C45F064003\jnsmDE7B.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\keqemyjy]ImagePath=[%APPDATA%]\A30B3E01-1425130251-11CB-8C2C-B78584C740AF\nsx9326.tmpfs
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\jutewygi]ImagePath=[%APPDATA%]\A30B3E01-1425130251-11CB-8C2C-B78584C740AF\jnsxC0E0.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\rubyziby]ImagePath=[%LOCAL_APPDATA%]\03000200-1431877207-0500-0006-000700080009\cnszEEC5.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\pedifevi]ImagePath=[%PROGRAM_FILES%]\4C4C4544-1437824566-5210-8050-B6C04F445031\knsdDA7A.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\comyninu]ImagePath=[%PROGRAM_FILES%]\4C4C4544-1437824566-5210-8050-B6C04F445031\hnsgD95F.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\mirodizu]ImagePath=[%PROGRAM_FILES%]\03000200-1438803136-0500-0006-000700080009\knsl4CC6.tmpfs
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\wivijuji]ImagePath=[%APPDATA%]\AA72651C-1430629364-11E4-A4E5-DC60CC940C00\jnsl8B5E.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\lenyboje]ImagePath=[%APPDATA%]\AA72651C-1430629364-11E4-A4E5-DC60CC940C00\knsk39EF.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\jedenowi]ImagePath=[%PROGRAM_FILES%]\AA72651C-1430629364-11E4-A4E5-DC60CC940C00\knscB3F8.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\lozycegu]ImagePath=[%APPDATA%]\03000200-1432805000-0500-0006-000700080009\nst158D.tmpfs
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\rinizisu]ImagePath=[%APPDATA%]\03000200-1432805000-0500-0006-000700080009\hnsb159D.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\pogifipi]ImagePath=[%APPDATA%]\03000200-1432805000-0500-0006-000700080009\jnsr159A.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\kibizixi]ImagePath=[%PROGRAM_FILES%]\30464E43-1438617463-4632-3737-60EB694A2172\knsa3F89.tmpfs
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\hyverumu]ImagePath=[%PROGRAM_FILES%]\30464E43-1438617463-4632-3737-60EB694A2172\jnsf5ACC.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\gopibeko]ImagePath=[%LOCAL_APPDATA%]\30464E43-1438628324-4632-3737-60EB694A2172\snsa120C.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\comyninu]ImagePath=[%PROGRAM_FILES%]\30464E43-1438617463-4632-3737-60EB694A2172\hnsp7282.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\hyverumu]ImagePath=[%PROGRAM_FILES%]\4C4C4544-1438705356-5110-8054-B5C04F525A31\jnsuF2D.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\nesezine]ImagePath=[%PROGRAM_FILES%]\4C4C4544-1438705356-5110-8054-B5C04F525A31\knsgECF9.tmpfs
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\comyninu]ImagePath=[%PROGRAM_FILES%]\4C4C4544-1438705356-5110-8054-B5C04F525A31\hnso2603.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\xepozotu]ImagePath=[%APPDATA%]\F21EF9A0-1432921373-11E0-9474-E89A8F049FA4\hnsiAABD.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\cipydijo]ImagePath=[%APPDATA%]\F21EF9A0-1432921373-11E0-9474-E89A8F049FA4\jnsx41FA.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\mypywegu]ImagePath=[%PROGRAM_FILES%]\1C8F5E00-1438791998-11E1-AC9E-E0A9A9AA042B\knsg7E1D.tmpfs
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\hyverumu]ImagePath=[%PROGRAM_FILES%]\1C8F5E00-1438791998-11E1-AC9E-E0A9A9AA042B\jnsg998F.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\gopibeko]ImagePath=[%LOCAL_APPDATA%]\1C8F5E00-1438799255-11E1-AC9E-E0A9A9AA042B\snsr3B3D.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\comyninu]ImagePath=[%PROGRAM_FILES%]\1C8F5E00-1438791998-11E1-AC9E-E0A9A9AA042B\hnsbB1D2.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\jepiqygo]ImagePath=[%PROGRAM_FILES%]\03000200-1438698478-0500-0006-000700080009\knsxCC.tmpfs
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\hyverumu]ImagePath=[%PROGRAM_FILES%]\03000200-1438698478-0500-0006-000700080009\jnssD9.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\comyninu]ImagePath=[%PROGRAM_FILES%]\03000200-1438698478-0500-0006-000700080009\hnspE6.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\gopibeko]ImagePath=[%LOCAL_APPDATA%]\03000200-1438687730-0500-0006-000700080009\snsj100.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\gojikoly]ImagePath=[%PROGRAM_FILES%]\03000200-1438698478-0500-0006-000700080009\knsz100.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\vybynyli]ImagePath=[%PROGRAM_FILES%]\FFFFFFFF-1438753874-FFFF-FFFF-FFFFFFFFFFFF\knsuBC27.tmpfs
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\hyverumu]ImagePath=[%PROGRAM_FILES%]\FFFFFFFF-1438753874-FFFF-FFFF-FFFFFFFFFFFF\jnskD671.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\comyninu]ImagePath=[%PROGRAM_FILES%]\FFFFFFFF-1438753874-FFFF-FFFF-FFFFFFFFFFFF\hnszEDAA.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\gopibeko]ImagePath=[%LOCAL_APPDATA%]\00000000-1438784733-0000-0000-00241D20DB7A\snsf515.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\hyverumu]ImagePath=[%PROGRAM_FILES%]\00000000-1438759466-0000-0000-00241D20DB7A\jnsk34D9.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\comyninu]ImagePath=[%PROGRAM_FILES%]\00000000-1438759466-0000-0000-00241D20DB7A\hnsu4EB1.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\bovohyhu]ImagePath=[%PROGRAM_FILES%]\00000000-1438759466-0000-0000-00241D20DB7A\knsf1810.tmpfs
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\zejytose]ImagePath=[%PROGRAM_FILES%]\4C4C4544-1437181268-5210-8030-C4C04F335631\jnsuB3D7.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\vicoqudu]ImagePath=[%PROGRAM_FILES%]\4C4C4544-1437181268-5210-8030-C4C04F335631\hnsmD319.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\fujypoze]ImagePath=[%PROGRAM_FILES%]\4C4C4544-1437181268-5210-8030-C4C04F335631\knsa781F.tmpfs
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\nujijime]ImagePath=[%PROGRAM_FILES%]\31464E43-1438643266-3738-5957-984BE1B13CCA\knsi8899.tmpfs
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\hyverumu]ImagePath=[%PROGRAM_FILES%]\00000011-1438527075-0000-0000-08606E9429F5\jnsm245.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\zygoqutu]ImagePath=[%PROGRAM_FILES%]\00000011-1438527075-0000-0000-08606E9429F5\knso6F19.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\comyninu]ImagePath=[%PROGRAM_FILES%]\00000011-1438527075-0000-0000-08606E9429F5\hnsr1A78.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\comyninu]ImagePath=[%PROGRAM_FILES%]\4C4C4544-1438425045-4D10-804D-CAC04F444C31\hnsf7E.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\xixusyfi]ImagePath=[%PROGRAM_FILES%]\4C4C4544-1438425045-4D10-804D-CAC04F444C31\knsvD0B0.tmpfs
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\hyverumu]ImagePath=[%PROGRAM_FILES%]\4C4C4544-1438425045-4D10-804D-CAC04F444C31\jnsqE993.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\wyhedimo]ImagePath=[%PROGRAM_FILES%]\4C4C4544-1438655337-5810-8056-B5C04F513032\knsf831E.tmpfs
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\hyverumu]ImagePath=[%PROGRAM_FILES%]\4C4C4544-1438655337-5810-8056-B5C04F513032\jnskC7D1.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\gopibeko]ImagePath=[%LOCAL_APPDATA%]\4C4C4544-1438680585-5810-8056-B5C04F513032\snsf3111.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\comyninu]ImagePath=[%PROGRAM_FILES%]\4C4C4544-1438655337-5810-8056-B5C04F513032\hnskDEAD.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\hyverumu]ImagePath=[%PROGRAM_FILES%]\538208C0-1438619496-11E1-A646-047D7BA72B5C\jnst9FF6.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\comyninu]ImagePath=[%PROGRAM_FILES%]\538208C0-1438619496-11E1-A646-047D7BA72B5C\hnsyC765.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\comyninu]ImagePath=[%PROGRAM_FILES%]\99F5C60E-1438317518-11DE-BBDA-0517F71518A9\hnss348F.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\sivuwezy]ImagePath=[%APPDATA%]\00000000-1435556844-0000-0000-00241D8D87F6\knsf45C.tmpfs
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\zejytose]ImagePath=[%PROGRAM_FILES%]\206411A1-1437202457-E011-B8A2-981086C50217\jnsq221F.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\vicoqudu]ImagePath=[%PROGRAM_FILES%]\206411A1-1437202457-E011-B8A2-981086C50217\hnsq3DDB.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\gesequsy]ImagePath=[%PROGRAM_FILES%]\206411A1-1437202457-E011-B8A2-981086C50217\knsc8D61.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\nisytesi]ImagePath=[%PROGRAM_FILES%]\6FCC3108-1438103610-494F-AB15-12038F7826B5\knsyF5B7.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\hyverumu]ImagePath=[%PROGRAM_FILES%]\6FCC3108-1438103610-494F-AB15-12038F7826B5\jnsk6FFF.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\comyninu]ImagePath=[%PROGRAM_FILES%]\6FCC3108-1438103610-494F-AB15-12038F7826B5\hnseA0D5.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\zygoqutu]ImagePath=[%PROGRAM_FILES%]\34B76EC0-1438592704-11DE-8516-F0BF9767F8B8\knsc2D6D.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\hyverumu]ImagePath=[%PROGRAM_FILES%]\34B76EC0-1438592704-11DE-8516-F0BF9767F8B8\jnsi2637.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\comyninu]ImagePath=[%PROGRAM_FILES%]\34B76EC0-1438592704-11DE-8516-F0BF9767F8B8\hnsk50E3.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\mygowoho]ImagePath=[%PROGRAM_FILES%]\34F05780-1438703238-81DF-2A6A-485B3940B958\knsvEDE0.tmpfs
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\comyninu]ImagePath=[%PROGRAM_FILES%]\34F05780-1438703238-81DF-2A6A-485B3940B958\hnsg31CB.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\vicoqudu]ImagePath=[%APPDATA%]\FCF50F01-1435323272-11CB-83D0-EC4120F7606D\hnse803B.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\gyseriru]ImagePath=[%PROGRAM_FILES%]\FCF50F01-1435323272-11CB-83D0-EC4120F7606D\knsu1E84.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\budomyjo]ImagePath=[%PROGRAM_FILES%]\766E4FE0-1438609888-11D5-8439-BCAEC56A2DB7\knsz159C.tmpfs
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\vicoqudu]ImagePath=[%APPDATA%]\4C656706-1435310869-E311-9803-F8A963BEFA0E\hnseADEF.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\sojihemu]ImagePath=[%APPDATA%]\190DA180-1431281762-81E0-2707-BCAEC55A1FBF\jnsa3E27.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\nisytesi]ImagePath=[%PROGRAM_FILES%]\190DA180-1431281762-81E0-2707-BCAEC55A1FBF\knsn16DC.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\hyverumu]ImagePath=[%PROGRAM_FILES%]\4C4C4544-1438555272-5A10-8050-C7C04F425931\jnsj118.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\silyguku]ImagePath=[%PROGRAM_FILES%]\4C4C4544-1438555272-5A10-8050-C7C04F425931\knspDD3E.tmpfs
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\comyninu]ImagePath=[%PROGRAM_FILES%]\4C4C4544-1438555272-5A10-8050-C7C04F425931\hnsx186A.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\porigufi]ImagePath=[%PROGRAM_FILES%]\1E009760-1438585647-7601-AC01-0022159F2774\knsh6A50.tmpfs
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\hyverumu]ImagePath=[%PROGRAM_FILES%]\1E009760-1438585647-7601-AC01-0022159F2774\jnszA2AC.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\comyninu]ImagePath=[%PROGRAM_FILES%]\1E009760-1438585647-7601-AC01-0022159F2774\hnssB897.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\hyverumu]ImagePath=[%PROGRAM_FILES%]\A5A89C9E-1438628300-11E1-9720-D084BF0CB012\jnstE40A.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\fehoripy]ImagePath=[%PROGRAM_FILES%]\A5A89C9E-1438628300-11E1-9720-D084BF0CB012\knsjC8A8.tmpfs
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\xubifixy]ImagePath=[%PROGRAM_FILES%]\4C4C4544-1438542455-5A10-8036-B7C04F344A31\knswA9C1.tmpfs
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\hyverumu]ImagePath=[%PROGRAM_FILES%]\4C4C4544-1438542455-5A10-8036-B7C04F344A31\jnshF680.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\comyninu]ImagePath=[%PROGRAM_FILES%]\4C4C4544-1438542455-5A10-8036-B7C04F344A31\hnsh198C.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\hyverumu]ImagePath=[%PROGRAM_FILES%]\13647FC0-1438368991-11D9-B24B-14DAE99C9DE9\jnsa9B15.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\genogine]ImagePath=[%PROGRAM_FILES%]\13647FC0-1438368991-11D9-B24B-14DAE99C9DE9\knsa70B5.tmpfs
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\comyninu]ImagePath=[%PROGRAM_FILES%]\13647FC0-1438368991-11D9-B24B-14DAE99C9DE9\hnsaC091.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\zejytose]ImagePath=[%PROGRAM_FILES%]\4DF0F780-1437221373-11B2-8000-DA697284507C\jnst7F96.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\vicoqudu]ImagePath=[%PROGRAM_FILES%]\4DF0F780-1437221373-11B2-8000-DA697284507C\hnst9930.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\cukytygu]ImagePath=[%PROGRAM_FILES%]\4DF0F780-1437221373-11B2-8000-DA697284507C\knsp5DC6.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\hefubucu]ImagePath=[%PROGRAM_FILES%]\4C26AC33-1437110224-E211-B9D2-2089840BE487\knsmCDB5.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\xixusyfi]ImagePath=[%PROGRAM_FILES%]\4C4C4544-1438425735-4B10-8043-C3C04F4E4831\knsmCE8F.tmpfs
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\comyninu]ImagePath=[%PROGRAM_FILES%]\4C4C4544-1438425735-4B10-8043-C3C04F4E4831\hnsn3A64.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\qulowoky]ImagePath=[%PROGRAM_FILES%]\4C4C4544-1438451034-4710-8056-B4C04F4E3232\knsh3AEE.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\comyninu]ImagePath=[%PROGRAM_FILES%]\80ACFF42-1438428967-D311-A752-F80F411170CC\hnssE4E1.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\comyninu]ImagePath=[%PROGRAM_FILES%]\1D467680-1438374726-11DD-82BA-7824AF430A38\hnswB179.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\gopibeko]ImagePath=[%LOCAL_APPDATA%]\9A4566C0-1437905084-11DF-BC26-20CF3024FA46\snsrF0B7.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\lynyxysy]ImagePath=[%APPDATA%]\4C4C4544-1424677417-5910-8051-B4C04F335831\nsxFE64.tmpfs
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\tufoteqy]ImagePath=[%PROGRAM_FILES%]\4C4C4544-1438186313-4610-8044-C6C04F33324A\knsl4D8E.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\hyverumu]ImagePath=[%PROGRAM_FILES%]\4C4C4544-1438186313-4610-8044-C6C04F33324A\jnsd9C30.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\comyninu]ImagePath=[%PROGRAM_FILES%]\4C4C4544-1438186313-4610-8044-C6C04F33324A\hnsnB5BA.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\gohujeru]ImagePath=[%PROGRAM_FILES%]\15693F80-1438416899-8149-27E7-C860003B6000\knsy6E9B.tmpfs
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\zedepory]ImagePath=[%APPDATA%]\34443437-1434567790-4235-3835-3532FFFFFFFF\hnsl3C10.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\xoperoze]ImagePath=[%APPDATA%]\34443437-1434567790-4235-3835-3532FFFFFFFF\jnsx250C.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\nukuzeli]ImagePath=[%APPDATA%]\34443437-1434567790-4235-3835-3532FFFFFFFF\knsc516D.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\xixusyfi]ImagePath=[%PROGRAM_FILES%]\00000000-1438426892-0000-0000-1C6F65D858A5\knsoE5F9.tmpfs
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\comyninu]ImagePath=[%PROGRAM_FILES%]\00000000-1438426892-0000-0000-1C6F65D858A5\hnsu3559.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\zejytose]ImagePath=[%APPDATA%]\DA0D59B9-1436851805-5EE8-B2E8-4F939CD52D73\jnsn5502.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\vicoqudu]ImagePath=[%APPDATA%]\DA0D59B9-1436851805-5EE8-B2E8-4F939CD52D73\hnss7179.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\mirejudu]ImagePath=[%APPDATA%]\DA0D59B9-1436851805-5EE8-B2E8-4F939CD52D73\knsn8530.tmpfs
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\gopibeko]ImagePath=[%LOCAL_APPDATA%]\DA0D59B9-1436833855-5EE8-B2E8-4F939CD52D73\snsc38FC.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\gopibeko]ImagePath=[%LOCAL_APPDATA%]\6771C900-1438248704-81E3-35B5-AC220B0BD233\snstA31F.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\gopibeko]ImagePath=[%LOCAL_APPDATA%]\00000000-1437921242-0000-0000-1C6F65D88413\snslC777.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\diwimoce]ImagePath=[%PROGRAM_FILES%]\00000000-1437895994-0000-0000-1C6F65D88413\knsl1CDE.tmpfs
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\comyninu]ImagePath=[%PROGRAM_FILES%]\00000000-1437895994-0000-0000-1C6F65D88413\hnsg5DAD.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\nejevobo]ImagePath=[%PROGRAM_FILES%]\34444335-1432868266-4A38-434E-6CC21762CC42\knsg527F.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\fogynomy]ImagePath=[%APPDATA%]\DCB521C0-1434390527-11DF-9CC2-485B393072B6\nsy3A63.tmpfs
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\zedepory]ImagePath=[%APPDATA%]\DCB521C0-1434390527-11DF-9CC2-485B393072B6\hnso7FF3.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\xoperoze]ImagePath=[%APPDATA%]\DCB521C0-1434390527-11DF-9CC2-485B393072B6\jnsy65FB.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\rivupesi]ImagePath=[%APPDATA%]\D9F60100-1431871649-11E4-9296-F06E478E3D00\hnst67E0.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\zemilymi]ImagePath=[%APPDATA%]\4C4C4544-1425802658-4210-8042-B1C04F445431\nskE193.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\nytybemi]ImagePath=[%APPDATA%]\4C4C4544-1425802658-4210-8042-B1C04F445431\jnsz85F0.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\dugudufu]ImagePath=[%PROGRAM_FILES%]\295C7CB8-1438265969-11E4-B3FA-4D365D9C1500\knsoCB47.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\comyninu]ImagePath=[%PROGRAM_FILES%]\295C7CB8-1438265969-11E4-B3FA-4D365D9C1500\hnsvD4BC.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\zemofori]ImagePath=[%PROGRAM_FILES%]\03000200-1438164359-0500-0006-000700080009\knsk4D2.tmpfs
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\hyverumu]ImagePath=[%PROGRAM_FILES%]\03000200-1438164359-0500-0006-000700080009\jnsm4E1.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\gopibeko]ImagePath=[%LOCAL_APPDATA%]\03000200-1438189613-0500-0006-000700080009\snst50E.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\comyninu]ImagePath=[%PROGRAM_FILES%]\03000200-1438164359-0500-0006-000700080009\hnsl4E4.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\sivuwezy]ImagePath=[%APPDATA%]\02C2E7BF-1435617992-1376-ED4D-0E9122C60E22\knsx15C.tmpfs
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\zejytose]ImagePath=[%APPDATA%]\02C2E7BF-1435617992-1376-ED4D-0E9122C60E22\jnsh3962.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\vicoqudu]ImagePath=[%APPDATA%]\02C2E7BF-1435617992-1376-ED4D-0E9122C60E22\hnsc5415.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\comyninu]ImagePath=[%PROGRAM_FILES%]\B0D8E977-1438071540-E411-800B-008CFA8A95E3\hnsw887F.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\qehihuku]ImagePath=[%PROGRAM_FILES%]\4C4C4544-1437617813-5110-8033-B2C04F593531\knss2737.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\hyverumu]ImagePath=[%PROGRAM_FILES%]\4C4C4544-1437617813-5110-8033-B2C04F593531\jnsy9F27.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\telyduny]ImagePath=[%PROGRAM_FILES%]\38464E43-1438222229-3931-5959-001E680C150B\knsbF2FE.tmpfs
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\hyverumu]ImagePath=[%PROGRAM_FILES%]\38464E43-1438222229-3931-5959-001E680C150B\jnsw20E7.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\comyninu]ImagePath=[%PROGRAM_FILES%]\38464E43-1438222229-3931-5959-001E680C150B\hnsm4625.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\qoziliny]ImagePath=[%APPDATA%]\2D63F8C1-1430120820-11E0-A1F2-CAFDB2F6FBFB\jnsmC2E1.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\zedepory]ImagePath=[%APPDATA%]\ADF0B96B-1434015172-A7F3-2A9F-18B317B2DECB\hnscF955.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\xoperoze]ImagePath=[%APPDATA%]\ADF0B96B-1434015172-A7F3-2A9F-18B317B2DECB\jnsfCCF4.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\wyheqiru]ImagePath=[%PROGRAM_FILES%]\ADF0B96B-1434015172-A7F3-2A9F-18B317B2DECB\knsfB68A.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\kysykiti]ImagePath=[%LOCAL_APPDATA%]\ADF0B96B-1434040631-A7F3-2A9F-18B317B2DECB\snsyE988.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\wecinene]ImagePath=[%PROGRAM_FILES%]\ADF0B96B-1434015172-A7F3-2A9F-18B317B2DECB\knsh3352.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\comyninu]ImagePath=[%PROGRAM_FILES%]\03000200-1438189662-0500-0006-000700080009\hnsvF282.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\telyduny]ImagePath=[%PROGRAM_FILES%]\ABBE553E-1438200423-11E4-9F6E-68F7280109EE\knsq440F.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\hyverumu]ImagePath=[%PROGRAM_FILES%]\ABBE553E-1438200423-11E4-9F6E-68F7280109EE\jnscEB9B.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\gopibeko]ImagePath=[%LOCAL_APPDATA%]\ABBE553E-1438225704-11E4-9F6E-68F7280109EE\snsdDB59.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\comyninu]ImagePath=[%PROGRAM_FILES%]\ABBE553E-1438200423-11E4-9F6E-68F7280109EE\hnsx1404.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\didinozi]ImagePath=[%PROGRAM_FILES%]\C0ED9DAD-1431115987-E111-9340-00266C2AF806\knsz2A86.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\qibelywi]ImagePath=[%PROGRAM_FILES%]\4C4C4544-1438244285-5710-8051-CAC04F58334A\knskB07.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\hyverumu]ImagePath=[%PROGRAM_FILES%]\4C4C4544-1438244285-5710-8051-CAC04F58334A\jnsaC705.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\comyninu]ImagePath=[%PROGRAM_FILES%]\4C4C4544-1438244285-5710-8051-CAC04F58334A\hnsfE59E.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\hyverumu]ImagePath=[%PROGRAM_FILES%]\4C4C4544-1438228601-4A10-804E-B3C04F483232\jnsg6F8D.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\corugoso]ImagePath=[%PROGRAM_FILES%]\4C4C4544-1438228601-4A10-804E-B3C04F483232\knspCD52.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\comyninu]ImagePath=[%PROGRAM_FILES%]\4C4C4544-1438228601-4A10-804E-B3C04F483232\hnsq8895.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\diquleqi]ImagePath=[%PROGRAM_FILES%]\4C4C4544-1438207297-4610-804E-B5C04F325631\knsz7B90.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\comyninu]ImagePath=[%PROGRAM_FILES%]\4C4C4544-1438207297-4610-804E-B5C04F325631\hnsoFC1B.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\rugobybe]ImagePath=[%PROGRAM_FILES%]\352D3CC0-1438186180-11DD-83C5-60A44C62F7C0\knsp3162.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\comyninu]ImagePath=[%PROGRAM_FILES%]\352D3CC0-1438186180-11DD-83C5-60A44C62F7C0\hnslED4A.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\jufexigu]ImagePath=[%PROGRAM_FILES%]\4C4C4544-1438189594-5610-8059-B4C04F5A3153\knsu7443.tmpfs
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\comyninu]ImagePath=[%PROGRAM_FILES%]\4C4C4544-1438189594-5610-8059-B4C04F5A3153\hnskC7D7.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\zedepory]ImagePath=[%APPDATA%]\1763250B-1435179036-9A4C-DD0E-382C4A7241E0\hnsuED3D.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\xoperoze]ImagePath=[%APPDATA%]\1763250B-1435179036-9A4C-DD0E-382C4A7241E0\jnspD6DE.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\wuhebigy]ImagePath=[%APPDATA%]\1763250B-1435179036-9A4C-DD0E-382C4A7241E0\knsuBF33.tmpfs
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\zegunuwe]ImagePath=[%PROGRAM_FILES%]\B0E87E0B-1438162972-11E3-9302-28D244656145\knsu8BC9.tmpfs
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\hyverumu]ImagePath=[%PROGRAM_FILES%]\B0E87E0B-1438162972-11E3-9302-28D244656145\jnsu1775.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\comyninu]ImagePath=[%PROGRAM_FILES%]\B0E87E0B-1438162972-11E3-9302-28D244656145\hnse55F7.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\hyverumu]ImagePath=[%PROGRAM_FILES%]\34444335-1438009042-4D33-3857-3863BB92506F\jnsl824.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\qyzowuqe]ImagePath=[%PROGRAM_FILES%]\34444335-1438009042-4D33-3857-3863BB92506F\knsy906D.tmpfs
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\comyninu]ImagePath=[%PROGRAM_FILES%]\34444335-1438009042-4D33-3857-3863BB92506F\hnsw557B.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\zivegibu]ImagePath=[%PROGRAM_FILES%]\2ACC1D9C-1427317286-11DE-A599-FD5A7268C0B5\knsh9408.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\tozycyfo]ImagePath=[%LOCAL_APPDATA%]\2ACC1D9C-1427302934-11DE-A599-FD5A7268C0B5\snso53C0.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\nyzizeve]ImagePath=[%APPDATA%]\2ACC1D9C-1427317286-11DE-A599-FD5A7268C0B5\jnsyD4AF.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\hyverumu]ImagePath=[%PROGRAM_FILES%]\CAECDAE3-1438190690-11DB-07A4-66990C325D29\jnsv1DB.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\fididomo]ImagePath=[%PROGRAM_FILES%]\CAECDAE3-1438190690-11DB-07A4-66990C325D29\knsi1CA.tmpfs
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\comyninu]ImagePath=[%PROGRAM_FILES%]\CAECDAE3-1438190690-11DB-07A4-66990C325D29\hnsh1E2.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\gykoruqo]ImagePath=[%APPDATA%]\28FAFDE0-1432299115-11B2-8000-E884FA69D117\hnsv4C7C.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\bivycegi]ImagePath=[%PROGRAM_FILES%]\28FAFDE0-1432299115-11B2-8000-E884FA69D117\knst85A0.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\comyninu]ImagePath=[%PROGRAM_FILES%]\BAF192A3-1437908058-6A46-B05E-80AC28A708AC\hnsy8953.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\vicoqudu]ImagePath=[%APPDATA%]\03253506-1435911465-2D9C-129A-9361EE907E4F\hnswA62F.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\hyverumu]ImagePath=[%PROGRAM_FILES%]\CA147F20-1437504003-11D5-80F7-BCAEC59C90F1\jnsr9358.tmp