Exterminate It! Antimalware

malpedia

Known threats:699,742 Last Update:November 20, 22:46

Testimonials

Just want to say that apparently your Exterminate It has worked like a charm. I was infected with a most troublesome Malware Trojan that kept replicating every time McAfee found, blocked and removed it... most annoying for several days... until Mr. Google led me to your door. What a God send!

With thanks,

Tom S.

MultiPlug- Registry Values List

This is a complete list of MultiPlug registry values collected by Exterminate It!. If you find any of these registry values on your PC, your computer is very likely to be infected with the MultiPlug - adware.

IMPORTANT: Because the registry is a core component of your Windows system, it is strongly recommended that you back up the registry before you begin deleting keys and values. For information about backing up the Windows registry, refer to the Registry Editor online help.
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\sijehuco]ImagePath=[%PROGRAM_FILES%]\FC44DB40-1434644166-11D9-BC2F-74D02B29F7B3\knseCF63.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\lisosovy]ImagePath=[%PROGRAM_FILES%]\FC44DB40-1434644166-11D9-BC2F-74D02B29F7B3\knsmD299.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\pefosupi]ImagePath=[%PROGRAM_FILES%]\4C4C4544-1438943484-3510-8050-C2C04F4A5231\knsf910.tmpfs
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\hyverumu]ImagePath=[%PROGRAM_FILES%]\4C4C4544-1438943484-3510-8050-C2C04F4A5231\jnsa35C1.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\comyninu]ImagePath=[%PROGRAM_FILES%]\4C4C4544-1438943484-3510-8050-C2C04F4A5231\hnsa5573.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\hyverumu]ImagePath=[%PROGRAM_FILES%]\03D40274-1438859734-0581-6F06-E90700080009\jnsu5A.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\comyninu]ImagePath=[%PROGRAM_FILES%]\03D40274-1438859734-0581-6F06-E90700080009\hnsv60.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\hyverumu]ImagePath=[%PROGRAM_FILES%]\34443437-1439135729-3335-3734-3642FFFFFFFF\jnsw30EF.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\hivikewe]ImagePath=[%PROGRAM_FILES%]\34443437-1439135729-3335-3734-3642FFFFFFFF\knsl10FA.tmpfs
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\comyninu]ImagePath=[%PROGRAM_FILES%]\34443437-1439135729-3335-3734-3642FFFFFFFF\hnsm5939.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\comyninu]ImagePath=[%PROGRAM_FILES%]\6F643FC0-1438847644-11D5-80FA-00248C083038\hnse32F.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\xepopycy]ImagePath=[%PROGRAM_FILES%]\6F643FC0-1438847644-11D5-80FA-00248C083038\knspD0D2.tmpfs
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\hyverumu]ImagePath=[%PROGRAM_FILES%]\6F643FC0-1438847644-11D5-80FA-00248C083038\jnspED2E.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\sicubehy]ImagePath=[%PROGRAM_FILES%]\585AD690-1439208556-11E2-9CBA-018E7E392A00\knsrDE5A.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\hyverumu]ImagePath=[%PROGRAM_FILES%]\585AD690-1439208556-11E2-9CBA-018E7E392A00\jnspD450.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\gopibeko]ImagePath=[%LOCAL_APPDATA%]\585AD690-1439197855-11E2-9CBA-018E7E392A00\snsyA80E.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\comyninu]ImagePath=[%PROGRAM_FILES%]\585AD690-1439208556-11E2-9CBA-018E7E392A00\hnsp1EAA.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\synocufe]ImagePath=[%PROGRAM_FILES%]\585AD690-1439241576-11E2-9CBA-018E7E392A00\knsqF171.tmpfs
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\lydeteku]ImagePath=[%APPDATA%]\4C4C4544-1430866816-4C10-8059-C6C04F384B31\nsg398F.tmpfs
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\zepyxizo]ImagePath=[%LOCAL_APPDATA%]\4C4C4544-1430856421-4C10-8059-C6C04F384B31\cnsj3891.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\xoxufewe]ImagePath=[%APPDATA%]\4C4C4544-1430866816-4C10-8059-C6C04F384B31\jnsr7E62.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\vomukenu]ImagePath=[%LOCAL_APPDATA%]\4C4C4544-1430856437-4C10-8059-C6C04F384B31\snsz6BCF.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\qygynece]ImagePath=[%LOCAL_APPDATA%]\D74317C0-1428788771-11E2-ACF5-78843C3AF463\insz9B16.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\jokydeki]ImagePath=[%LOCAL_APPDATA%]\30464E43-1434988201-5236-3433-6431505DF1B5\cnsj3CB.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\nisowysy]ImagePath=[%PROGRAM_FILES%]\26E83A00-1439107646-11D9-86EF-14DAE9ECC81D\knsr63.tmpfs
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\hyverumu]ImagePath=[%PROGRAM_FILES%]\26E83A00-1439107646-11D9-86EF-14DAE9ECC81D\jnsj6D.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\gopibeko]ImagePath=[%LOCAL_APPDATA%]\26E83A00-1439132909-11D9-86EF-14DAE9ECC81D\snsjA1.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\comyninu]ImagePath=[%PROGRAM_FILES%]\26E83A00-1439107646-11D9-86EF-14DAE9ECC81D\hnso7B.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\nodizeni]ImagePath=[%PROGRAM_FILES%]\03000200-1438920031-0500-0006-000700080009\knsb4C42.tmpfs
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\hyverumu]ImagePath=[%PROGRAM_FILES%]\03000200-1438920031-0500-0006-000700080009\jnsg70A9.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\comyninu]ImagePath=[%PROGRAM_FILES%]\03000200-1438920031-0500-0006-000700080009\hnsb9480.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\hyverumu]ImagePath=[%PROGRAM_FILES%]\295DD133-1438506137-11DF-81D0-B9F76E3900DB\jnsf498.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\sypifyjy]ImagePath=[%PROGRAM_FILES%]\295DD133-1438506137-11DF-81D0-B9F76E3900DB\knsjB1F0.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\comyninu]ImagePath=[%PROGRAM_FILES%]\295DD133-1438506137-11DF-81D0-B9F76E3900DB\hnsk2A33.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\comyninu]ImagePath=[%PROGRAM_FILES%]\A400ED62-1438990101-5C71-C88F-2C27D7B2C9D0\hnsj85A.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\vilikehy]ImagePath=[%PROGRAM_FILES%]\A400ED62-1438990101-5C71-C88F-2C27D7B2C9D0\knsjD792.tmpfs
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\hyverumu]ImagePath=[%PROGRAM_FILES%]\A400ED62-1438990101-5C71-C88F-2C27D7B2C9D0\jnszF056.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\gopibeko]ImagePath=[%LOCAL_APPDATA%]\A400ED62-1438972168-5C71-C88F-2C27D7B2C9D0\snszCFED.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\sosytono]ImagePath=[%PROGRAM_FILES%]\A400ED62-1438990101-5C71-C88F-2C27D7B2C9D0\knsl7B36.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\zysomyhi]ImagePath=[%PROGRAM_FILES%]\30464E43-1438951039-3931-4338-00269EF7EE0C\knse7D61.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\hyverumu]ImagePath=[%PROGRAM_FILES%]\30464E43-1438951039-3931-4338-00269EF7EE0C\jnsr29DE.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\comyninu]ImagePath=[%PROGRAM_FILES%]\30464E43-1438951039-3931-4338-00269EF7EE0C\hnsx4316.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\hyverumu]ImagePath=[%PROGRAM_FILES%]\30463441-1439057537-3043-3536-393031314531\jnszFAC.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\zefekefo]ImagePath=[%PROGRAM_FILES%]\30463441-1439057537-3043-3536-393031314531\knsnF25A.tmpfs
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\comyninu]ImagePath=[%PROGRAM_FILES%]\30463441-1439057537-3043-3536-393031314531\hnsi2643.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\fibiwugy]ImagePath=[%PROGRAM_FILES%]\032B0290-1438892306-05F5-2206-890700080009\knsu42DD.tmpfs
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\hunewijo]ImagePath=[%PROGRAM_FILES%]\032B0290-1438892306-05F5-2206-890700080009\knseB0B3.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\rykyrybu]ImagePath=[%PROGRAM_FILES%]\E2D02120-1438956357-81E4-33E0-086266DD46BE\knseCE41.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\hyverumu]ImagePath=[%PROGRAM_FILES%]\E2D02120-1438956357-81E4-33E0-086266DD46BE\jnss6E99.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\comyninu]ImagePath=[%PROGRAM_FILES%]\E2D02120-1438956357-81E4-33E0-086266DD46BE\hnst9500.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\hyverumu]ImagePath=[%PROGRAM_FILES%]\03D40274-1438958640-05B0-4506-F90700080009\jnsi37D7.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\dywenube]ImagePath=[%PROGRAM_FILES%]\03D40274-1438958640-05B0-4506-F90700080009\knsc1FED.tmpfs
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\comyninu]ImagePath=[%PROGRAM_FILES%]\03D40274-1438958640-05B0-4506-F90700080009\hnsd4D5C.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\tebomuju]ImagePath=[%PROGRAM_FILES%]\4C4C4544-1438257729-5610-8030-B3C04F575131\knsh6546.tmpfs
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\hyverumu]ImagePath=[%PROGRAM_FILES%]\4C4C4544-1438257729-5610-8030-B3C04F575131\jnsh86D0.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\vypybyki]ImagePath=[%PROGRAM_FILES%]\9E0365E0-1438841111-11E1-B1DE-E840F25F1E43\knsh3558.tmpfs
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\comyninu]ImagePath=[%PROGRAM_FILES%]\4C4C4544-1438617540-5410-8048-C3C04F434331\hnsp510.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\porigufi]ImagePath=[%PROGRAM_FILES%]\4C4C4544-1438617540-5410-8048-C3C04F434331\knspCF1A.tmpfs
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\hyverumu]ImagePath=[%PROGRAM_FILES%]\4C4C4544-1438617540-5410-8048-C3C04F434331\jnspED98.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\gopibeko]ImagePath=[%LOCAL_APPDATA%]\4C4C4544-1438606848-5410-8048-C3C04F434331\snsg5DAC.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\zedepory]ImagePath=[%APPDATA%]\1075719C-1434963677-7E12-56F6-DEB8E678F490\hnse1049.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\xoperoze]ImagePath=[%APPDATA%]\1075719C-1434963677-7E12-56F6-DEB8E678F490\jnsjF104.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\serolexe]ImagePath=[%PROGRAM_FILES%]\1075719C-1434963677-7E12-56F6-DEB8E678F490\knskEA69.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\xoridyju]ImagePath=[%PROGRAM_FILES%]\0BD2356D-1438889944-E111-9A4C-10604BD9679F\knscA0E9.tmpfs
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\hyverumu]ImagePath=[%PROGRAM_FILES%]\0BD2356D-1438889944-E111-9A4C-10604BD9679F\jnsxBFE4.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\comyninu]ImagePath=[%PROGRAM_FILES%]\0BD2356D-1438889944-E111-9A4C-10604BD9679F\hnsxDEFA.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\zyqobyfo]ImagePath=[%PROGRAM_FILES%]\085BFA80-1438907986-0000-0000-000000000000\knsm8CA3.tmpfs
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\hyverumu]ImagePath=[%PROGRAM_FILES%]\085BFA80-1438907986-0000-0000-000000000000\jnsiA8FB.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\gopibeko]ImagePath=[%LOCAL_APPDATA%]\085BFA80-1438936850-0000-0000-000000000000\snsg5664.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\comyninu]ImagePath=[%PROGRAM_FILES%]\085BFA80-1438907986-0000-0000-000000000000\hnsrBF44.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\ligyroju]ImagePath=[%PROGRAM_FILES%]\815FBF33-1438620424-CB11-BA65-B0D4BC72FC80\knsp7FA8.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\nitequsy]ImagePath=[%PROGRAM_FILES%]\03000200-1438774879-0500-0006-000700080009\knse6F65.tmpfs
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\hyverumu]ImagePath=[%PROGRAM_FILES%]\03000200-1438774879-0500-0006-000700080009\jnst9A22.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\gopibeko]ImagePath=[%LOCAL_APPDATA%]\03000200-1438802664-0500-0006-000700080009\snskB4A8.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\comyninu]ImagePath=[%PROGRAM_FILES%]\03000200-1438774879-0500-0006-000700080009\hnsoBCC1.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\lynyqone]ImagePath=[%PROGRAM_FILES%]\FFFFFFFF-1438812397-FFFF-FFFF-FFFFFFFFFFFF\knsi92C9.tmpfs
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\hyverumu]ImagePath=[%PROGRAM_FILES%]\FFFFFFFF-1438812397-FFFF-FFFF-FFFFFFFFFFFF\jnsxAABC.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\comyninu]ImagePath=[%PROGRAM_FILES%]\FFFFFFFF-1438812397-FFFF-FFFF-FFFFFFFFFFFF\hnsgC069.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\jokydeki]ImagePath=[%LOCAL_APPDATA%]\31464E43-1434555893-5A32-4B52-2C27D7D0F6F5\cnshD827.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\zejytose]ImagePath=[%PROGRAM_FILES%]\4C4C4544-1437097596-5810-8057-B9C04F4D5131\jnsa5B29.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\vicoqudu]ImagePath=[%PROGRAM_FILES%]\4C4C4544-1437097596-5810-8057-B9C04F4D5131\hnsv73BA.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\sirekyqo]ImagePath=[%PROGRAM_FILES%]\4C4C4544-1437097596-5810-8057-B9C04F4D5131\knsoAF8D.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\gopibeko]ImagePath=[%LOCAL_APPDATA%]\4C4C4544-1437091701-5810-8057-B9C04F4D5131\snslDA59.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\gopibeko]ImagePath=[%LOCAL_APPDATA%]\593E780E-1438806219-11E1-B525-26C45F064003\snsi7B0.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\comyninu]ImagePath=[%PROGRAM_FILES%]\593E780E-1438780921-11E1-B525-26C45F064003\hnsn494.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\xisuluhy]ImagePath=[%PROGRAM_FILES%]\593E780E-1438780921-11E1-B525-26C45F064003\knsxB19C.tmpfs
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\hyverumu]ImagePath=[%PROGRAM_FILES%]\593E780E-1438780921-11E1-B525-26C45F064003\jnsmDE7B.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\keqemyjy]ImagePath=[%APPDATA%]\A30B3E01-1425130251-11CB-8C2C-B78584C740AF\nsx9326.tmpfs
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\jutewygi]ImagePath=[%APPDATA%]\A30B3E01-1425130251-11CB-8C2C-B78584C740AF\jnsxC0E0.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\rubyziby]ImagePath=[%LOCAL_APPDATA%]\03000200-1431877207-0500-0006-000700080009\cnszEEC5.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\pedifevi]ImagePath=[%PROGRAM_FILES%]\4C4C4544-1437824566-5210-8050-B6C04F445031\knsdDA7A.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\comyninu]ImagePath=[%PROGRAM_FILES%]\4C4C4544-1437824566-5210-8050-B6C04F445031\hnsgD95F.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\mirodizu]ImagePath=[%PROGRAM_FILES%]\03000200-1438803136-0500-0006-000700080009\knsl4CC6.tmpfs
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\wivijuji]ImagePath=[%APPDATA%]\AA72651C-1430629364-11E4-A4E5-DC60CC940C00\jnsl8B5E.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\lenyboje]ImagePath=[%APPDATA%]\AA72651C-1430629364-11E4-A4E5-DC60CC940C00\knsk39EF.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\jedenowi]ImagePath=[%PROGRAM_FILES%]\AA72651C-1430629364-11E4-A4E5-DC60CC940C00\knscB3F8.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\lozycegu]ImagePath=[%APPDATA%]\03000200-1432805000-0500-0006-000700080009\nst158D.tmpfs
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\rinizisu]ImagePath=[%APPDATA%]\03000200-1432805000-0500-0006-000700080009\hnsb159D.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\pogifipi]ImagePath=[%APPDATA%]\03000200-1432805000-0500-0006-000700080009\jnsr159A.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\kibizixi]ImagePath=[%PROGRAM_FILES%]\30464E43-1438617463-4632-3737-60EB694A2172\knsa3F89.tmpfs
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\hyverumu]ImagePath=[%PROGRAM_FILES%]\30464E43-1438617463-4632-3737-60EB694A2172\jnsf5ACC.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\gopibeko]ImagePath=[%LOCAL_APPDATA%]\30464E43-1438628324-4632-3737-60EB694A2172\snsa120C.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\comyninu]ImagePath=[%PROGRAM_FILES%]\30464E43-1438617463-4632-3737-60EB694A2172\hnsp7282.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\hyverumu]ImagePath=[%PROGRAM_FILES%]\4C4C4544-1438705356-5110-8054-B5C04F525A31\jnsuF2D.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\nesezine]ImagePath=[%PROGRAM_FILES%]\4C4C4544-1438705356-5110-8054-B5C04F525A31\knsgECF9.tmpfs
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\comyninu]ImagePath=[%PROGRAM_FILES%]\4C4C4544-1438705356-5110-8054-B5C04F525A31\hnso2603.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\xepozotu]ImagePath=[%APPDATA%]\F21EF9A0-1432921373-11E0-9474-E89A8F049FA4\hnsiAABD.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\cipydijo]ImagePath=[%APPDATA%]\F21EF9A0-1432921373-11E0-9474-E89A8F049FA4\jnsx41FA.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\mypywegu]ImagePath=[%PROGRAM_FILES%]\1C8F5E00-1438791998-11E1-AC9E-E0A9A9AA042B\knsg7E1D.tmpfs
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\hyverumu]ImagePath=[%PROGRAM_FILES%]\1C8F5E00-1438791998-11E1-AC9E-E0A9A9AA042B\jnsg998F.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\gopibeko]ImagePath=[%LOCAL_APPDATA%]\1C8F5E00-1438799255-11E1-AC9E-E0A9A9AA042B\snsr3B3D.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\comyninu]ImagePath=[%PROGRAM_FILES%]\1C8F5E00-1438791998-11E1-AC9E-E0A9A9AA042B\hnsbB1D2.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\jepiqygo]ImagePath=[%PROGRAM_FILES%]\03000200-1438698478-0500-0006-000700080009\knsxCC.tmpfs
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\hyverumu]ImagePath=[%PROGRAM_FILES%]\03000200-1438698478-0500-0006-000700080009\jnssD9.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\comyninu]ImagePath=[%PROGRAM_FILES%]\03000200-1438698478-0500-0006-000700080009\hnspE6.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\gopibeko]ImagePath=[%LOCAL_APPDATA%]\03000200-1438687730-0500-0006-000700080009\snsj100.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\gojikoly]ImagePath=[%PROGRAM_FILES%]\03000200-1438698478-0500-0006-000700080009\knsz100.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\vybynyli]ImagePath=[%PROGRAM_FILES%]\FFFFFFFF-1438753874-FFFF-FFFF-FFFFFFFFFFFF\knsuBC27.tmpfs
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\hyverumu]ImagePath=[%PROGRAM_FILES%]\FFFFFFFF-1438753874-FFFF-FFFF-FFFFFFFFFFFF\jnskD671.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\comyninu]ImagePath=[%PROGRAM_FILES%]\FFFFFFFF-1438753874-FFFF-FFFF-FFFFFFFFFFFF\hnszEDAA.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\gopibeko]ImagePath=[%LOCAL_APPDATA%]\00000000-1438784733-0000-0000-00241D20DB7A\snsf515.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\hyverumu]ImagePath=[%PROGRAM_FILES%]\00000000-1438759466-0000-0000-00241D20DB7A\jnsk34D9.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\comyninu]ImagePath=[%PROGRAM_FILES%]\00000000-1438759466-0000-0000-00241D20DB7A\hnsu4EB1.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\bovohyhu]ImagePath=[%PROGRAM_FILES%]\00000000-1438759466-0000-0000-00241D20DB7A\knsf1810.tmpfs
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\zejytose]ImagePath=[%PROGRAM_FILES%]\4C4C4544-1437181268-5210-8030-C4C04F335631\jnsuB3D7.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\vicoqudu]ImagePath=[%PROGRAM_FILES%]\4C4C4544-1437181268-5210-8030-C4C04F335631\hnsmD319.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\fujypoze]ImagePath=[%PROGRAM_FILES%]\4C4C4544-1437181268-5210-8030-C4C04F335631\knsa781F.tmpfs
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\nujijime]ImagePath=[%PROGRAM_FILES%]\31464E43-1438643266-3738-5957-984BE1B13CCA\knsi8899.tmpfs
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\hyverumu]ImagePath=[%PROGRAM_FILES%]\00000011-1438527075-0000-0000-08606E9429F5\jnsm245.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\zygoqutu]ImagePath=[%PROGRAM_FILES%]\00000011-1438527075-0000-0000-08606E9429F5\knso6F19.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\comyninu]ImagePath=[%PROGRAM_FILES%]\00000011-1438527075-0000-0000-08606E9429F5\hnsr1A78.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\comyninu]ImagePath=[%PROGRAM_FILES%]\4C4C4544-1438425045-4D10-804D-CAC04F444C31\hnsf7E.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\xixusyfi]ImagePath=[%PROGRAM_FILES%]\4C4C4544-1438425045-4D10-804D-CAC04F444C31\knsvD0B0.tmpfs
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\hyverumu]ImagePath=[%PROGRAM_FILES%]\4C4C4544-1438425045-4D10-804D-CAC04F444C31\jnsqE993.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\wyhedimo]ImagePath=[%PROGRAM_FILES%]\4C4C4544-1438655337-5810-8056-B5C04F513032\knsf831E.tmpfs
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\hyverumu]ImagePath=[%PROGRAM_FILES%]\4C4C4544-1438655337-5810-8056-B5C04F513032\jnskC7D1.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\gopibeko]ImagePath=[%LOCAL_APPDATA%]\4C4C4544-1438680585-5810-8056-B5C04F513032\snsf3111.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\comyninu]ImagePath=[%PROGRAM_FILES%]\4C4C4544-1438655337-5810-8056-B5C04F513032\hnskDEAD.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\hyverumu]ImagePath=[%PROGRAM_FILES%]\538208C0-1438619496-11E1-A646-047D7BA72B5C\jnst9FF6.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\comyninu]ImagePath=[%PROGRAM_FILES%]\538208C0-1438619496-11E1-A646-047D7BA72B5C\hnsyC765.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\comyninu]ImagePath=[%PROGRAM_FILES%]\99F5C60E-1438317518-11DE-BBDA-0517F71518A9\hnss348F.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\sivuwezy]ImagePath=[%APPDATA%]\00000000-1435556844-0000-0000-00241D8D87F6\knsf45C.tmpfs
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\zejytose]ImagePath=[%PROGRAM_FILES%]\206411A1-1437202457-E011-B8A2-981086C50217\jnsq221F.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\vicoqudu]ImagePath=[%PROGRAM_FILES%]\206411A1-1437202457-E011-B8A2-981086C50217\hnsq3DDB.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\gesequsy]ImagePath=[%PROGRAM_FILES%]\206411A1-1437202457-E011-B8A2-981086C50217\knsc8D61.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\nisytesi]ImagePath=[%PROGRAM_FILES%]\6FCC3108-1438103610-494F-AB15-12038F7826B5\knsyF5B7.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\hyverumu]ImagePath=[%PROGRAM_FILES%]\6FCC3108-1438103610-494F-AB15-12038F7826B5\jnsk6FFF.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\comyninu]ImagePath=[%PROGRAM_FILES%]\6FCC3108-1438103610-494F-AB15-12038F7826B5\hnseA0D5.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\zygoqutu]ImagePath=[%PROGRAM_FILES%]\34B76EC0-1438592704-11DE-8516-F0BF9767F8B8\knsc2D6D.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\hyverumu]ImagePath=[%PROGRAM_FILES%]\34B76EC0-1438592704-11DE-8516-F0BF9767F8B8\jnsi2637.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\comyninu]ImagePath=[%PROGRAM_FILES%]\34B76EC0-1438592704-11DE-8516-F0BF9767F8B8\hnsk50E3.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\mygowoho]ImagePath=[%PROGRAM_FILES%]\34F05780-1438703238-81DF-2A6A-485B3940B958\knsvEDE0.tmpfs
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\comyninu]ImagePath=[%PROGRAM_FILES%]\34F05780-1438703238-81DF-2A6A-485B3940B958\hnsg31CB.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\vicoqudu]ImagePath=[%APPDATA%]\FCF50F01-1435323272-11CB-83D0-EC4120F7606D\hnse803B.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\gyseriru]ImagePath=[%PROGRAM_FILES%]\FCF50F01-1435323272-11CB-83D0-EC4120F7606D\knsu1E84.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\budomyjo]ImagePath=[%PROGRAM_FILES%]\766E4FE0-1438609888-11D5-8439-BCAEC56A2DB7\knsz159C.tmpfs
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\vicoqudu]ImagePath=[%APPDATA%]\4C656706-1435310869-E311-9803-F8A963BEFA0E\hnseADEF.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\sojihemu]ImagePath=[%APPDATA%]\190DA180-1431281762-81E0-2707-BCAEC55A1FBF\jnsa3E27.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\nisytesi]ImagePath=[%PROGRAM_FILES%]\190DA180-1431281762-81E0-2707-BCAEC55A1FBF\knsn16DC.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\hyverumu]ImagePath=[%PROGRAM_FILES%]\4C4C4544-1438555272-5A10-8050-C7C04F425931\jnsj118.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\silyguku]ImagePath=[%PROGRAM_FILES%]\4C4C4544-1438555272-5A10-8050-C7C04F425931\knspDD3E.tmpfs
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\comyninu]ImagePath=[%PROGRAM_FILES%]\4C4C4544-1438555272-5A10-8050-C7C04F425931\hnsx186A.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\porigufi]ImagePath=[%PROGRAM_FILES%]\1E009760-1438585647-7601-AC01-0022159F2774\knsh6A50.tmpfs
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\hyverumu]ImagePath=[%PROGRAM_FILES%]\1E009760-1438585647-7601-AC01-0022159F2774\jnszA2AC.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\comyninu]ImagePath=[%PROGRAM_FILES%]\1E009760-1438585647-7601-AC01-0022159F2774\hnssB897.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\hyverumu]ImagePath=[%PROGRAM_FILES%]\A5A89C9E-1438628300-11E1-9720-D084BF0CB012\jnstE40A.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\fehoripy]ImagePath=[%PROGRAM_FILES%]\A5A89C9E-1438628300-11E1-9720-D084BF0CB012\knsjC8A8.tmpfs
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\xubifixy]ImagePath=[%PROGRAM_FILES%]\4C4C4544-1438542455-5A10-8036-B7C04F344A31\knswA9C1.tmpfs
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\hyverumu]ImagePath=[%PROGRAM_FILES%]\4C4C4544-1438542455-5A10-8036-B7C04F344A31\jnshF680.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\comyninu]ImagePath=[%PROGRAM_FILES%]\4C4C4544-1438542455-5A10-8036-B7C04F344A31\hnsh198C.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\hyverumu]ImagePath=[%PROGRAM_FILES%]\13647FC0-1438368991-11D9-B24B-14DAE99C9DE9\jnsa9B15.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\genogine]ImagePath=[%PROGRAM_FILES%]\13647FC0-1438368991-11D9-B24B-14DAE99C9DE9\knsa70B5.tmpfs
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\comyninu]ImagePath=[%PROGRAM_FILES%]\13647FC0-1438368991-11D9-B24B-14DAE99C9DE9\hnsaC091.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\zejytose]ImagePath=[%PROGRAM_FILES%]\4DF0F780-1437221373-11B2-8000-DA697284507C\jnst7F96.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\vicoqudu]ImagePath=[%PROGRAM_FILES%]\4DF0F780-1437221373-11B2-8000-DA697284507C\hnst9930.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\cukytygu]ImagePath=[%PROGRAM_FILES%]\4DF0F780-1437221373-11B2-8000-DA697284507C\knsp5DC6.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\hefubucu]ImagePath=[%PROGRAM_FILES%]\4C26AC33-1437110224-E211-B9D2-2089840BE487\knsmCDB5.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\xixusyfi]ImagePath=[%PROGRAM_FILES%]\4C4C4544-1438425735-4B10-8043-C3C04F4E4831\knsmCE8F.tmpfs
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\comyninu]ImagePath=[%PROGRAM_FILES%]\4C4C4544-1438425735-4B10-8043-C3C04F4E4831\hnsn3A64.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\qulowoky]ImagePath=[%PROGRAM_FILES%]\4C4C4544-1438451034-4710-8056-B4C04F4E3232\knsh3AEE.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\comyninu]ImagePath=[%PROGRAM_FILES%]\80ACFF42-1438428967-D311-A752-F80F411170CC\hnssE4E1.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\comyninu]ImagePath=[%PROGRAM_FILES%]\1D467680-1438374726-11DD-82BA-7824AF430A38\hnswB179.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\gopibeko]ImagePath=[%LOCAL_APPDATA%]\9A4566C0-1437905084-11DF-BC26-20CF3024FA46\snsrF0B7.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\lynyxysy]ImagePath=[%APPDATA%]\4C4C4544-1424677417-5910-8051-B4C04F335831\nsxFE64.tmpfs
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\tufoteqy]ImagePath=[%PROGRAM_FILES%]\4C4C4544-1438186313-4610-8044-C6C04F33324A\knsl4D8E.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\hyverumu]ImagePath=[%PROGRAM_FILES%]\4C4C4544-1438186313-4610-8044-C6C04F33324A\jnsd9C30.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\comyninu]ImagePath=[%PROGRAM_FILES%]\4C4C4544-1438186313-4610-8044-C6C04F33324A\hnsnB5BA.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\gohujeru]ImagePath=[%PROGRAM_FILES%]\15693F80-1438416899-8149-27E7-C860003B6000\knsy6E9B.tmpfs
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\zedepory]ImagePath=[%APPDATA%]\34443437-1434567790-4235-3835-3532FFFFFFFF\hnsl3C10.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\xoperoze]ImagePath=[%APPDATA%]\34443437-1434567790-4235-3835-3532FFFFFFFF\jnsx250C.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\nukuzeli]ImagePath=[%APPDATA%]\34443437-1434567790-4235-3835-3532FFFFFFFF\knsc516D.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\xixusyfi]ImagePath=[%PROGRAM_FILES%]\00000000-1438426892-0000-0000-1C6F65D858A5\knsoE5F9.tmpfs
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\comyninu]ImagePath=[%PROGRAM_FILES%]\00000000-1438426892-0000-0000-1C6F65D858A5\hnsu3559.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\zejytose]ImagePath=[%APPDATA%]\DA0D59B9-1436851805-5EE8-B2E8-4F939CD52D73\jnsn5502.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\vicoqudu]ImagePath=[%APPDATA%]\DA0D59B9-1436851805-5EE8-B2E8-4F939CD52D73\hnss7179.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\mirejudu]ImagePath=[%APPDATA%]\DA0D59B9-1436851805-5EE8-B2E8-4F939CD52D73\knsn8530.tmpfs
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\gopibeko]ImagePath=[%LOCAL_APPDATA%]\DA0D59B9-1436833855-5EE8-B2E8-4F939CD52D73\snsc38FC.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\gopibeko]ImagePath=[%LOCAL_APPDATA%]\6771C900-1438248704-81E3-35B5-AC220B0BD233\snstA31F.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\gopibeko]ImagePath=[%LOCAL_APPDATA%]\00000000-1437921242-0000-0000-1C6F65D88413\snslC777.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\diwimoce]ImagePath=[%PROGRAM_FILES%]\00000000-1437895994-0000-0000-1C6F65D88413\knsl1CDE.tmpfs
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\comyninu]ImagePath=[%PROGRAM_FILES%]\00000000-1437895994-0000-0000-1C6F65D88413\hnsg5DAD.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\nejevobo]ImagePath=[%PROGRAM_FILES%]\34444335-1432868266-4A38-434E-6CC21762CC42\knsg527F.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\fogynomy]ImagePath=[%APPDATA%]\DCB521C0-1434390527-11DF-9CC2-485B393072B6\nsy3A63.tmpfs
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\zedepory]ImagePath=[%APPDATA%]\DCB521C0-1434390527-11DF-9CC2-485B393072B6\hnso7FF3.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\xoperoze]ImagePath=[%APPDATA%]\DCB521C0-1434390527-11DF-9CC2-485B393072B6\jnsy65FB.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\rivupesi]ImagePath=[%APPDATA%]\D9F60100-1431871649-11E4-9296-F06E478E3D00\hnst67E0.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\zemilymi]ImagePath=[%APPDATA%]\4C4C4544-1425802658-4210-8042-B1C04F445431\nskE193.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\nytybemi]ImagePath=[%APPDATA%]\4C4C4544-1425802658-4210-8042-B1C04F445431\jnsz85F0.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\dugudufu]ImagePath=[%PROGRAM_FILES%]\295C7CB8-1438265969-11E4-B3FA-4D365D9C1500\knsoCB47.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\comyninu]ImagePath=[%PROGRAM_FILES%]\295C7CB8-1438265969-11E4-B3FA-4D365D9C1500\hnsvD4BC.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\zemofori]ImagePath=[%PROGRAM_FILES%]\03000200-1438164359-0500-0006-000700080009\knsk4D2.tmpfs
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\hyverumu]ImagePath=[%PROGRAM_FILES%]\03000200-1438164359-0500-0006-000700080009\jnsm4E1.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\gopibeko]ImagePath=[%LOCAL_APPDATA%]\03000200-1438189613-0500-0006-000700080009\snst50E.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\comyninu]ImagePath=[%PROGRAM_FILES%]\03000200-1438164359-0500-0006-000700080009\hnsl4E4.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\sivuwezy]ImagePath=[%APPDATA%]\02C2E7BF-1435617992-1376-ED4D-0E9122C60E22\knsx15C.tmpfs
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\zejytose]ImagePath=[%APPDATA%]\02C2E7BF-1435617992-1376-ED4D-0E9122C60E22\jnsh3962.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\vicoqudu]ImagePath=[%APPDATA%]\02C2E7BF-1435617992-1376-ED4D-0E9122C60E22\hnsc5415.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\comyninu]ImagePath=[%PROGRAM_FILES%]\B0D8E977-1438071540-E411-800B-008CFA8A95E3\hnsw887F.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\qehihuku]ImagePath=[%PROGRAM_FILES%]\4C4C4544-1437617813-5110-8033-B2C04F593531\knss2737.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\hyverumu]ImagePath=[%PROGRAM_FILES%]\4C4C4544-1437617813-5110-8033-B2C04F593531\jnsy9F27.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\telyduny]ImagePath=[%PROGRAM_FILES%]\38464E43-1438222229-3931-5959-001E680C150B\knsbF2FE.tmpfs
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\hyverumu]ImagePath=[%PROGRAM_FILES%]\38464E43-1438222229-3931-5959-001E680C150B\jnsw20E7.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\comyninu]ImagePath=[%PROGRAM_FILES%]\38464E43-1438222229-3931-5959-001E680C150B\hnsm4625.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\qoziliny]ImagePath=[%APPDATA%]\2D63F8C1-1430120820-11E0-A1F2-CAFDB2F6FBFB\jnsmC2E1.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\zedepory]ImagePath=[%APPDATA%]\ADF0B96B-1434015172-A7F3-2A9F-18B317B2DECB\hnscF955.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\xoperoze]ImagePath=[%APPDATA%]\ADF0B96B-1434015172-A7F3-2A9F-18B317B2DECB\jnsfCCF4.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\wyheqiru]ImagePath=[%PROGRAM_FILES%]\ADF0B96B-1434015172-A7F3-2A9F-18B317B2DECB\knsfB68A.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\kysykiti]ImagePath=[%LOCAL_APPDATA%]\ADF0B96B-1434040631-A7F3-2A9F-18B317B2DECB\snsyE988.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\wecinene]ImagePath=[%PROGRAM_FILES%]\ADF0B96B-1434015172-A7F3-2A9F-18B317B2DECB\knsh3352.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\comyninu]ImagePath=[%PROGRAM_FILES%]\03000200-1438189662-0500-0006-000700080009\hnsvF282.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\telyduny]ImagePath=[%PROGRAM_FILES%]\ABBE553E-1438200423-11E4-9F6E-68F7280109EE\knsq440F.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\hyverumu]ImagePath=[%PROGRAM_FILES%]\ABBE553E-1438200423-11E4-9F6E-68F7280109EE\jnscEB9B.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\gopibeko]ImagePath=[%LOCAL_APPDATA%]\ABBE553E-1438225704-11E4-9F6E-68F7280109EE\snsdDB59.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\comyninu]ImagePath=[%PROGRAM_FILES%]\ABBE553E-1438200423-11E4-9F6E-68F7280109EE\hnsx1404.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\didinozi]ImagePath=[%PROGRAM_FILES%]\C0ED9DAD-1431115987-E111-9340-00266C2AF806\knsz2A86.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\qibelywi]ImagePath=[%PROGRAM_FILES%]\4C4C4544-1438244285-5710-8051-CAC04F58334A\knskB07.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\hyverumu]ImagePath=[%PROGRAM_FILES%]\4C4C4544-1438244285-5710-8051-CAC04F58334A\jnsaC705.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\comyninu]ImagePath=[%PROGRAM_FILES%]\4C4C4544-1438244285-5710-8051-CAC04F58334A\hnsfE59E.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\hyverumu]ImagePath=[%PROGRAM_FILES%]\4C4C4544-1438228601-4A10-804E-B3C04F483232\jnsg6F8D.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\corugoso]ImagePath=[%PROGRAM_FILES%]\4C4C4544-1438228601-4A10-804E-B3C04F483232\knspCD52.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\comyninu]ImagePath=[%PROGRAM_FILES%]\4C4C4544-1438228601-4A10-804E-B3C04F483232\hnsq8895.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\diquleqi]ImagePath=[%PROGRAM_FILES%]\4C4C4544-1438207297-4610-804E-B5C04F325631\knsz7B90.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\comyninu]ImagePath=[%PROGRAM_FILES%]\4C4C4544-1438207297-4610-804E-B5C04F325631\hnsoFC1B.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\rugobybe]ImagePath=[%PROGRAM_FILES%]\352D3CC0-1438186180-11DD-83C5-60A44C62F7C0\knsp3162.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\comyninu]ImagePath=[%PROGRAM_FILES%]\352D3CC0-1438186180-11DD-83C5-60A44C62F7C0\hnslED4A.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\jufexigu]ImagePath=[%PROGRAM_FILES%]\4C4C4544-1438189594-5610-8059-B4C04F5A3153\knsu7443.tmpfs
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\comyninu]ImagePath=[%PROGRAM_FILES%]\4C4C4544-1438189594-5610-8059-B4C04F5A3153\hnskC7D7.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\zedepory]ImagePath=[%APPDATA%]\1763250B-1435179036-9A4C-DD0E-382C4A7241E0\hnsuED3D.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\xoperoze]ImagePath=[%APPDATA%]\1763250B-1435179036-9A4C-DD0E-382C4A7241E0\jnspD6DE.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\wuhebigy]ImagePath=[%APPDATA%]\1763250B-1435179036-9A4C-DD0E-382C4A7241E0\knsuBF33.tmpfs
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\zegunuwe]ImagePath=[%PROGRAM_FILES%]\B0E87E0B-1438162972-11E3-9302-28D244656145\knsu8BC9.tmpfs
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\hyverumu]ImagePath=[%PROGRAM_FILES%]\B0E87E0B-1438162972-11E3-9302-28D244656145\jnsu1775.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\comyninu]ImagePath=[%PROGRAM_FILES%]\B0E87E0B-1438162972-11E3-9302-28D244656145\hnse55F7.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\hyverumu]ImagePath=[%PROGRAM_FILES%]\34444335-1438009042-4D33-3857-3863BB92506F\jnsl824.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\qyzowuqe]ImagePath=[%PROGRAM_FILES%]\34444335-1438009042-4D33-3857-3863BB92506F\knsy906D.tmpfs
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\comyninu]ImagePath=[%PROGRAM_FILES%]\34444335-1438009042-4D33-3857-3863BB92506F\hnsw557B.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\zivegibu]ImagePath=[%PROGRAM_FILES%]\2ACC1D9C-1427317286-11DE-A599-FD5A7268C0B5\knsh9408.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\tozycyfo]ImagePath=[%LOCAL_APPDATA%]\2ACC1D9C-1427302934-11DE-A599-FD5A7268C0B5\snso53C0.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\nyzizeve]ImagePath=[%APPDATA%]\2ACC1D9C-1427317286-11DE-A599-FD5A7268C0B5\jnsyD4AF.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\hyverumu]ImagePath=[%PROGRAM_FILES%]\CAECDAE3-1438190690-11DB-07A4-66990C325D29\jnsv1DB.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\fididomo]ImagePath=[%PROGRAM_FILES%]\CAECDAE3-1438190690-11DB-07A4-66990C325D29\knsi1CA.tmpfs
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\comyninu]ImagePath=[%PROGRAM_FILES%]\CAECDAE3-1438190690-11DB-07A4-66990C325D29\hnsh1E2.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\gykoruqo]ImagePath=[%APPDATA%]\28FAFDE0-1432299115-11B2-8000-E884FA69D117\hnsv4C7C.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\bivycegi]ImagePath=[%PROGRAM_FILES%]\28FAFDE0-1432299115-11B2-8000-E884FA69D117\knst85A0.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\comyninu]ImagePath=[%PROGRAM_FILES%]\BAF192A3-1437908058-6A46-B05E-80AC28A708AC\hnsy8953.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\vicoqudu]ImagePath=[%APPDATA%]\03253506-1435911465-2D9C-129A-9361EE907E4F\hnswA62F.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\hyverumu]ImagePath=[%PROGRAM_FILES%]\CA147F20-1437504003-11D5-80F7-BCAEC59C90F1\jnsr9358.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\cidydofy]ImagePath=[%PROGRAM_FILES%]\CA147F20-1437504003-11D5-80F7-BCAEC59C90F1\knsr4504.tmpfs
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\comyninu]ImagePath=[%PROGRAM_FILES%]\2A347080-1437748171-1407-AA71-27F79387EB06\hnstB8E2.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\xotoquny]ImagePath=[%PROGRAM_FILES%]\2A347080-1437748171-1407-AA71-27F79387EB06\knsq22CD.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\zedepory]ImagePath=[%APPDATA%]\C08C8430-1433725979-E011-B6B2-00266CCEC67D\hnshED0E.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\xoperoze]ImagePath=[%APPDATA%]\C08C8430-1433725979-E011-B6B2-00266CCEC67D\jnsb318A.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\kevefori]ImagePath=[%PROGRAM_FILES%]\C08C8430-1433725979-E011-B6B2-00266CCEC67D\knspB66F.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\xykorofo]ImagePath=[%PROGRAM_FILES%]\4C4C4544-1438025573-5A10-8050-B2C04F534C31\knsk833.tmpfs
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\hyverumu]ImagePath=[%PROGRAM_FILES%]\4C4C4544-1438025573-5A10-8050-B2C04F534C31\jnsv584C.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\comyninu]ImagePath=[%PROGRAM_FILES%]\4C4C4544-1438025573-5A10-8050-B2C04F534C31\hnsf70EC.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\cosisysu]ImagePath=[%PROGRAM_FILES%]\4C4C4544-1438089064-4A10-8048-C7C04F4E344A\knszDE6A.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\comyninu]ImagePath=[%PROGRAM_FILES%]\4C4C4544-1438089064-4A10-8048-C7C04F4E344A\hnst90AC.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\syteluri]ImagePath=[%PROGRAM_FILES%]\07290713-1438146818-1105-1830-A2C851D2A3D0\knsp9712.tmpfs
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\hyverumu]ImagePath=[%PROGRAM_FILES%]\07290713-1438146818-1105-1830-A2C851D2A3D0\jnsaD8F3.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\comyninu]ImagePath=[%PROGRAM_FILES%]\07290713-1438146818-1105-1830-A2C851D2A3D0\hnsrF576.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\cihituxo]ImagePath=[%PROGRAM_FILES%]\07290713-1438146818-1105-1830-A2C851D2A3D0\knsv89A8.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\vuliteto]ImagePath=[%PROGRAM_FILES%]\03000200-1437808316-0500-0006-000700080009\knsj5AB8.tmpfs
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\hyverumu]ImagePath=[%PROGRAM_FILES%]\03000200-1437808316-0500-0006-000700080009\jnsjA564.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\gopibeko]ImagePath=[%LOCAL_APPDATA%]\03000200-1437828179-0500-0006-000700080009\snsz3621.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\comyninu]ImagePath=[%PROGRAM_FILES%]\03000200-1437808316-0500-0006-000700080009\hnszEAA0.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\tulusydo]ImagePath=[%LOCAL_APPDATA%]\03000200-1428514072-0500-0006-000700080009\snshF37D.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\fogezyny]ImagePath=[%APPDATA%]\03000200-1428488824-0500-0006-000700080009\jnsw7C29.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\fihemycy]ImagePath=[%PROGRAM_FILES%]\03000200-1428488824-0500-0006-000700080009\knsp87D0.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\vicoqudu]ImagePath=[%PROGRAM_FILES%]\D0471990-1437516083-C9CE-D264-0C54A518E260\hnskB03F.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\popihyfi]ImagePath=[%PROGRAM_FILES%]\D0471990-1437516083-C9CE-D264-0C54A518E260\knsvFBDA.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\hyverumu]ImagePath=[%PROGRAM_FILES%]\D0471990-1437516083-C9CE-D264-0C54A518E260\jnsg9A63.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\gopibeko]ImagePath=[%LOCAL_APPDATA%]\D0471990-1437501732-C9CE-D264-0C54A518E260\snsrF40F.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\zejytose]ImagePath=[%APPDATA%]\FFFFFFFF-1436271629-FFFF-FFFF-FFFFFFFFFFFF\jnslE3D0.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\vicoqudu]ImagePath=[%APPDATA%]\FFFFFFFF-1436271629-FFFF-FFFF-FFFFFFFFFFFF\hnsj10CE.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\jybivehe]ImagePath=[%APPDATA%]\FFFFFFFF-1436271629-FFFF-FFFF-FFFFFFFFFFFF\knsrBFF6.tmpfs
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\ponicyby]ImagePath=[%PROGRAM_FILES%]\02A2B21E-1437816566-E111-B6EB-000EA68F75B9\knsc36AF.tmpfs
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\hyverumu]ImagePath=[%PROGRAM_FILES%]\02A2B21E-1437816566-E111-B6EB-000EA68F75B9\jnss6FBF.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\comyninu]ImagePath=[%PROGRAM_FILES%]\02A2B21E-1437816566-E111-B6EB-000EA68F75B9\hnsc9099.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\tyduhygi]ImagePath=[%PROGRAM_FILES%]\C66521A0-1437966472-8D34-8624-9B02305B21A8\knsu2B9B.tmpfs
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\hyverumu]ImagePath=[%PROGRAM_FILES%]\C66521A0-1437966472-8D34-8624-9B02305B21A8\jnsa4817.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\comyninu]ImagePath=[%PROGRAM_FILES%]\C66521A0-1437966472-8D34-8624-9B02305B21A8\hnsk5EE3.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\syteluri]ImagePath=[%PROGRAM_FILES%]\2A347080-1437748171-1407-AA71-27F79387EB06\knsvC06.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\hyverumu]ImagePath=[%PROGRAM_FILES%]\4C4C4544-1437976065-4C10-8044-B6C04F333132\jnsjC64.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\jyvowydu]ImagePath=[%PROGRAM_FILES%]\4C4C4544-1437976065-4C10-8044-B6C04F333132\knsnA6A8.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\comyninu]ImagePath=[%PROGRAM_FILES%]\4C4C4544-1437976065-4C10-8044-B6C04F333132\hnse2647.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\comyninu]ImagePath=[%PROGRAM_FILES%]\03000200-1437974380-0500-0006-000700080009\hnsgE6EF.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\jesuhogo]ImagePath=[%PROGRAM_FILES%]\E0B4B586-1438007198-11E4-B57F-68F72828C7E3\knsl7958.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\hyverumu]ImagePath=[%PROGRAM_FILES%]\E0B4B586-1438007198-11E4-B57F-68F72828C7E3\jnst6DB6.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\gopibeko]ImagePath=[%LOCAL_APPDATA%]\E0B4B586-1438014459-11E4-B57F-68F72828C7E3\snsvD8B7.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\comyninu]ImagePath=[%PROGRAM_FILES%]\E0B4B586-1438007198-11E4-B57F-68F72828C7E3\hnsm8E31.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\hyverumu]ImagePath=[%PROGRAM_FILES%]\4C4C4544-1437912147-3710-804D-CAC04F465231\jnsi7925.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\comyninu]ImagePath=[%PROGRAM_FILES%]\4C4C4544-1437912147-3710-804D-CAC04F465231\hnsi9973.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\comyninu]ImagePath=[%PROGRAM_FILES%]\DDD57F01-1437765037-11CB-895B-C89CF80237A5\hnsvB20.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\kogekixy]ImagePath=[%PROGRAM_FILES%]\DDD57F01-1437765037-11CB-895B-C89CF80237A5\knslDF48.tmpfs
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\hyverumu]ImagePath=[%PROGRAM_FILES%]\DDD57F01-1437765037-11CB-895B-C89CF80237A5\jnsaF4B1.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\hyverumu]ImagePath=[%PROGRAM_FILES%]\00000000-1438007890-0000-0000-001A4D458B82\jnsn8A34.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\gopibeko]ImagePath=[%LOCAL_APPDATA%]\00000000-1438018738-0000-0000-001A4D458B82\snsd25E9.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\dedenofi]ImagePath=[%PROGRAM_FILES%]\00000000-1438007890-0000-0000-001A4D458B82\knsx720C.tmpfs
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\comyninu]ImagePath=[%PROGRAM_FILES%]\00000000-1438007890-0000-0000-001A4D458B82\hnsi9F6B.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\lutixume]ImagePath=[%APPDATA%]\FCB2D880-1432968886-11E1-82E8-ECA86B75BC3B\hnsmE245.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\comyninu]ImagePath=[%PROGRAM_FILES%]\FFFFFFFF-1437685290-FFFF-FFFF-FFFFFFFFFFFF\hnsn1BD6.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\hyverumu]ImagePath=[%PROGRAM_FILES%]\AF2D359C-1437954107-11E4-932C-D7C71D7924C8\jnsn71B2.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\zedepory]ImagePath=[%APPDATA%]\12673000-1434970822-0000-0807-060504030201\hnsr569.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\xoperoze]ImagePath=[%APPDATA%]\12673000-1434970822-0000-0807-060504030201\jnss55B.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\cymosuhi]ImagePath=[%APPDATA%]\12673000-1434970822-0000-0807-060504030201\knsu551.tmpfs
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\comyninu]ImagePath=[%PROGRAM_FILES%]\4C4C4544-1437923724-3110-8039-C6C04F52344A\hnsb65C.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\tehudeti]ImagePath=[%PROGRAM_FILES%]\4C4C4544-1437923724-3110-8039-C6C04F52344A\knsgB567.tmpfs
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\hyverumu]ImagePath=[%PROGRAM_FILES%]\4C4C4544-1437923724-3110-8039-C6C04F52344A\jnslEF70.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\wusobifo]ImagePath=[%PROGRAM_FILES%]\65083F2D-1437790647-E011-8963-DC0EA1944BF2\knst967A.tmpfs
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\hyverumu]ImagePath=[%PROGRAM_FILES%]\65083F2D-1437790647-E011-8963-DC0EA1944BF2\jnsnAE8C.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\comyninu]ImagePath=[%PROGRAM_FILES%]\65083F2D-1437790647-E011-8963-DC0EA1944BF2\hnsxC6F8.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\pidobedu]ImagePath=[%PROGRAM_FILES%]\F5404FBB-1437883424-E011-B7F3-00235A701008\knso62D3.tmpfs
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\hyverumu]ImagePath=[%PROGRAM_FILES%]\F5404FBB-1437883424-E011-B7F3-00235A701008\jnsj937A.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\comyninu]ImagePath=[%PROGRAM_FILES%]\F5404FBB-1437883424-E011-B7F3-00235A701008\hnsuB58D.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\comyninu]ImagePath=[%PROGRAM_FILES%]\03000200-1437817501-0500-0006-000700080009\hnsl6D06.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\wulypoqe]ImagePath=[%PROGRAM_FILES%]\4C4C4544-1437783172-4710-8043-CAC04F43334A\knsm213F.tmpfs
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\comyninu]ImagePath=[%PROGRAM_FILES%]\4C4C4544-1437783172-4710-8043-CAC04F43334A\hnsx5468.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\zexikife]ImagePath=[%PROGRAM_FILES%]\0AF34500-1436733683-81E2-2B6B-4C72B90E5E1C\knsyB18F.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\zejytose]ImagePath=[%APPDATA%]\0AF34500-1436733683-81E2-2B6B-4C72B90E5E1C\jnswFDB1.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\vicoqudu]ImagePath=[%APPDATA%]\0AF34500-1436733683-81E2-2B6B-4C72B90E5E1C\hnsb1B12.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\kogekixy]ImagePath=[%PROGRAM_FILES%]\0AF34500-1436733683-81E2-2B6B-4C72B90E5E1C\knsp2150.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\jugyzeco]ImagePath=[%PROGRAM_FILES%]\0AF34500-1436733683-81E2-2B6B-4C72B90E5E1C\knsv9E3E.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\gopibeko]ImagePath=[%LOCAL_APPDATA%]\0AF34500-1436708565-81E2-2B6B-4C72B90E5E1C\snsbE247.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\bymomore]ImagePath=[%PROGRAM_FILES%]\0AF34500-1436733683-81E2-2B6B-4C72B90E5E1C\knsa3CD7.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\byduvumu]ImagePath=[%PROGRAM_FILES%]\0AF34500-1436733683-81E2-2B6B-4C72B90E5E1C\knsvCC2A.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\pezehomi]ImagePath=[%PROGRAM_FILES%]\B41331EA-1437649594-DF11-97A6-88AE1DF882A5\knsm2583.tmpfs
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\hyverumu]ImagePath=[%PROGRAM_FILES%]\B41331EA-1437649594-DF11-97A6-88AE1DF882A5\jnsc8B5D.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\gopibeko]ImagePath=[%LOCAL_APPDATA%]\B41331EA-1437656898-DF11-97A6-88AE1DF882A5\snsi9742.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\comyninu]ImagePath=[%PROGRAM_FILES%]\B41331EA-1437649594-DF11-97A6-88AE1DF882A5\hnsxDDD2.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\gopibeko]ImagePath=[%LOCAL_APPDATA%]\03000200-1437774277-0500-0006-000700080009\snsvC563.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\zejytose]ImagePath=[%APPDATA%]\03D40274-1435591979-0554-CD06-6B0700080009\jnsl4730.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\vigiryni]ImagePath=[%PROGRAM_FILES%]\03D40274-1435591979-0554-CD06-6B0700080009\knshC96A.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\vicoqudu]ImagePath=[%APPDATA%]\03D40274-1435591979-0554-CD06-6B0700080009\hnsg5CB5.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\kogidohe]ImagePath=[%APPDATA%]\12072B63-1429844993-C306-0909-288023C10233\jnsiC6D7.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\byhededo]ImagePath=[%PROGRAM_FILES%]\12072B63-1429844993-C306-0909-288023C10233\knsn6932.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\zejytose]ImagePath=[%APPDATA%]\33444335-1435936312-4D30-5656-A45D36667C07\jnsu6B59.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\vicoqudu]ImagePath=[%APPDATA%]\33444335-1435936312-4D30-5656-A45D36667C07\hnsq86C3.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\jonepove]ImagePath=[%APPDATA%]\33444335-1435936312-4D30-5656-A45D36667C07\knst431A.tmpfs
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\gopibeko]ImagePath=[%LOCAL_APPDATA%]\33444335-1435947322-4D30-5656-A45D36667C07\snsq2914.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\jymutori]ImagePath=[%PROGRAM_FILES%]\54EFBD5B-1437599075-E011-B188-DC0EA11146CA\knsj400.tmpfs
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\hyverumu]ImagePath=[%PROGRAM_FILES%]\54EFBD5B-1437599075-E011-B188-DC0EA11146CA\jnse3C93.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\gopibeko]ImagePath=[%LOCAL_APPDATA%]\54EFBD5B-1437584739-E011-B188-DC0EA11146CA\snszCC37.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\comyninu]ImagePath=[%PROGRAM_FILES%]\54EFBD5B-1437599075-E011-B188-DC0EA11146CA\hnsy56A9.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\gybebowe]ImagePath=[%PROGRAM_FILES%]\54EFBD5B-1437599075-E011-B188-DC0EA11146CA\knsb6E90.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\dyxyheri]ImagePath=[%APPDATA%]\52749C60-1431910968-DF11-A92A-88AE1DFF1487\hnslF19A.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\hyverumu]ImagePath=[%PROGRAM_FILES%]\4003FADD-1437586614-DE11-BBA9-00266C3891B0\jnsm8BBF.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\comyninu]ImagePath=[%PROGRAM_FILES%]\4003FADD-1437586614-DE11-BBA9-00266C3891B0\hnswB0DD.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\zejytose]ImagePath=[%PROGRAM_FILES%]\4C4C4544-1437292351-5010-8031-C2C04F373032\jnsuC3FF.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\vicoqudu]ImagePath=[%PROGRAM_FILES%]\4C4C4544-1437292351-5010-8031-C2C04F373032\hnseE43D.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\gopibeko]ImagePath=[%LOCAL_APPDATA%]\4C4C4544-1437317643-5010-8031-C2C04F373032\snsuB84E.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\cyqozicy]ImagePath=[%PROGRAM_FILES%]\4C4C4544-1437292351-5010-8031-C2C04F373032\knsq299F.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\hyverumu]ImagePath=[%PROGRAM_FILES%]\32444335-1437519396-3330-4C5A-80C16E46EA9F\jnsyEF1F.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\zejytose]ImagePath=[%APPDATA%]\BB9D63F2-1435848634-C09E-FA9E-9F4D0D009FDA\jnsm4B25.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\vicoqudu]ImagePath=[%APPDATA%]\BB9D63F2-1435848634-C09E-FA9E-9F4D0D009FDA\hnsh658A.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\gopibeko]ImagePath=[%LOCAL_APPDATA%]\BB9D63F2-1435838076-C09E-FA9E-9F4D0D009FDA\snss9F20.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\ducesuvy]ImagePath=[%APPDATA%]\DDFFC97D-1425480655-49E8-43A9-2554230A1A7D\nsf1270.tmpfs
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\sikenyhu]ImagePath=[%APPDATA%]\00000000-1425979509-0000-0000-1C6F657CC6C3\nsn6F.tmpfs
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\jixudoto]ImagePath=[%LOCAL_APPDATA%]\00000000-1425999377-0000-0000-1C6F657CC6C3\snsfA3.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\hycewyxo]ImagePath=[%APPDATA%]\00000000-1425979509-0000-0000-1C6F657CC6C3\jnsu7E.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\wucedury]ImagePath=[%APPDATA%]\A07DC233-1437325046-D711-BBDE-9AA60DED1393\knsz6B.tmpfs
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\zejytose]ImagePath=[%PROGRAM_FILES%]\A3FF73F2-1437391138-11E4-9F6E-68F728057114\jnssF5B.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\vodovyfe]ImagePath=[%PROGRAM_FILES%]\A3FF73F2-1437391138-11E4-9F6E-68F728057114\knssE43D.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\vicoqudu]ImagePath=[%PROGRAM_FILES%]\A3FF73F2-1437391138-11E4-9F6E-68F728057114\hnsh26FC.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\zejytose]ImagePath=[%PROGRAM_FILES%]\65AD0F80-1437373003-11DE-84DC-00248CB7BC94\jnsa78F9.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\vicoqudu]ImagePath=[%PROGRAM_FILES%]\65AD0F80-1437373003-11DE-84DC-00248CB7BC94\hnsp981E.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\fovyzofi]ImagePath=[%PROGRAM_FILES%]\65AD0F80-1437373003-11DE-84DC-00248CB7BC94\knsj330E.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\zejytose]ImagePath=[%PROGRAM_FILES%]\00000000-1437363981-0000-0000-001A4DF084F2\jnslA700.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\vicoqudu]ImagePath=[%PROGRAM_FILES%]\00000000-1437363981-0000-0000-001A4DF084F2\hnsvC140.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\pemigiwe]ImagePath=[%PROGRAM_FILES%]\00000000-1437363981-0000-0000-001A4DF084F2\knsj1846.tmpfs
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\fuhofyho]ImagePath=[%APPDATA%]\6E9B3380-1431185365-81E1-38B8-3085A906D8F1\nsh1DA8.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\zejytose]ImagePath=[%APPDATA%]\6E9B3380-1436019264-81E1-38B8-3085A906D8F1\jnse1B63.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\vicoqudu]ImagePath=[%APPDATA%]\6E9B3380-1436019264-81E1-38B8-3085A906D8F1\hnsd3258.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\gybywive]ImagePath=[%APPDATA%]\6E9B3380-1436019264-81E1-38B8-3085A906D8F1\knsz4F96.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\kiwovedi]ImagePath=[%PROGRAM_FILES%]\2D1CB600-1435001042-1013-9378-B4213AF79E83\knsn6CE2.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\zejytose]ImagePath=[%APPDATA%]\5E2E15E0-1436925211-11E2-9F73-089E015AA1D2\jnsgB0E9.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\vicoqudu]ImagePath=[%APPDATA%]\5E2E15E0-1436925211-11E2-9F73-089E015AA1D2\hnshDAF8.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\gopibeko]ImagePath=[%LOCAL_APPDATA%]\5E2E15E0-1436914480-11E2-9F73-089E015AA1D2\snst3713.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\zejytose]ImagePath=[%PROGRAM_FILES%]\9713F700-1437078576-81F5-3E34-54A050018797\jnsyAA63.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\vicoqudu]ImagePath=[%PROGRAM_FILES%]\9713F700-1437078576-81F5-3E34-54A050018797\hnsnC3D8.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\gygumifi]ImagePath=[%PROGRAM_FILES%]\9713F700-1437078576-81F5-3E34-54A050018797\knsv8A0E.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\zejytose]ImagePath=[%PROGRAM_FILES%]\03000200-1437243228-0500-0006-000700080009\jnswA5A9.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\vugoxylu]ImagePath=[%PROGRAM_FILES%]\03000200-1437243228-0500-0006-000700080009\knsw8BF1.tmpfs
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\vicoqudu]ImagePath=[%PROGRAM_FILES%]\03000200-1437243228-0500-0006-000700080009\hnsqBBE3.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\zejytose]ImagePath=[%PROGRAM_FILES%]\6B098270-1436967414-4746-8F48-2C40D91E2DA0\jnsbDACA.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\vicoqudu]ImagePath=[%PROGRAM_FILES%]\6B098270-1436967414-4746-8F48-2C40D91E2DA0\hnsvF23C.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\fysugehy]ImagePath=[%PROGRAM_FILES%]\6B098270-1436967414-4746-8F48-2C40D91E2DA0\knsz5D3A.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\zejytose]ImagePath=[%APPDATA%]\33444335-1436103250-3431-3337-A0D3C1581173\jnsv792.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\vicoqudu]ImagePath=[%APPDATA%]\33444335-1436103250-3431-3337-A0D3C1581173\hnst27DE.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\byduvumu]ImagePath=[%PROGRAM_FILES%]\33444335-1436103250-3431-3337-A0D3C1581173\knslBDDE.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\vicoqudu]ImagePath=[%APPDATA%]\0002C734-1436449672-DE11-B59E-DCBC7B75B31C\hnsjB36A.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\zejytose]ImagePath=[%PROGRAM_FILES%]\4C4C4544-1437118944-4810-8032-C2C04F4B3153\jnsbAA66.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\vicoqudu]ImagePath=[%PROGRAM_FILES%]\4C4C4544-1437118944-4810-8032-C2C04F4B3153\hnslC3A2.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\lowekoxu]ImagePath=[%PROGRAM_FILES%]\4C4C4544-1437118944-4810-8032-C2C04F4B3153\knsl8B8A.tmpfs
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\zejytose]ImagePath=[%PROGRAM_FILES%]\03000200-1437006362-0500-0006-000700080009\jnsfA9AE.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\vicoqudu]ImagePath=[%PROGRAM_FILES%]\03000200-1437006362-0500-0006-000700080009\hnspC2B6.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\pulywunu]ImagePath=[%PROGRAM_FILES%]\03000200-1437006362-0500-0006-000700080009\knspBF86.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\gopibeko]ImagePath=[%LOCAL_APPDATA%]\03000200-1437257682-0500-0006-000700080009\snsf47D7.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\zejytose]ImagePath=[%APPDATA%]\2D1CB600-1435770609-1013-9378-B4213AF79E83\jnsm9205.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\zedepory]ImagePath=[%APPDATA%]\2D1CB600-1435001042-1013-9378-B4213AF79E83\hnsmD0FF.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\xoperoze]ImagePath=[%APPDATA%]\2D1CB600-1435001042-1013-9378-B4213AF79E83\jnshB8CC.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\vicoqudu]ImagePath=[%APPDATA%]\2D1CB600-1435770609-1013-9378-B4213AF79E83\hnsmA7F7.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\pihojuxe]ImagePath=[%PROGRAM_FILES%]\2D1CB600-1435001042-1013-9378-B4213AF79E83\knsfF6B0.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\ruwujyfe]ImagePath=[%PROGRAM_FILES%]\03000200-1437153739-0500-0006-000700080009\knsp1D44.tmpfs
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\xitesoqu]ImagePath=[%PROGRAM_FILES%]\5E56F300-1437067492-81E0-30D0-5404A611032E\knsi54F.tmpfs
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\zejytose]ImagePath=[%PROGRAM_FILES%]\5E56F300-1437067492-81E0-30D0-5404A611032E\jnsd2312.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\vicoqudu]ImagePath=[%PROGRAM_FILES%]\5E56F300-1437067492-81E0-30D0-5404A611032E\hnsd3A8A.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\kysykiti]ImagePath=[%LOCAL_APPDATA%]\33444335-1433788199-3733-3458-7446A0839DCB\snsbF525.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\xitesoqu]ImagePath=[%PROGRAM_FILES%]\4C4C4544-1436861455-4D10-8047-C7C04F383132\knsqB457.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\fefupumy]ImagePath=[%PROGRAM_FILES%]\4C4C4544-1436861455-4D10-8047-C7C04F383132\knso9CA3.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\ryvikiju]ImagePath=[%APPDATA%]\4D3C934D-1436535997-D9D5-73C1-A01D48679D7E\knscF457.tmpfs
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\zejytose]ImagePath=[%PROGRAM_FILES%]\2B6B5FA0-1436946184-11DD-9CB2-74D02B9E5E8C\jnsc4427.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\vicoqudu]ImagePath=[%PROGRAM_FILES%]\2B6B5FA0-1436946184-11DD-9CB2-74D02B9E5E8C\hnsx631E.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\sujyrive]ImagePath=[%PROGRAM_FILES%]\2B6B5FA0-1436946184-11DD-9CB2-74D02B9E5E8C\knsvEF26.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\wuwiposy]ImagePath=[%APPDATA%]\4C4C4544-1436688698-3410-8033-C4C04F364253\knsgC5F1.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\jyvoluwy]ImagePath=[%APPDATA%]\4C4C4544-1436688698-3410-8033-C4C04F364253\knsnFE04.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\jutiselo]ImagePath=[%PROGRAM_FILES%]\4C4C4544-1436688698-3410-8033-C4C04F364253\knsgF9F6.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\vicoqudu]ImagePath=[%APPDATA%]\03000200-1436907395-0500-0006-000700080009\hnsiD67.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\zejytose]ImagePath=[%APPDATA%]\03000200-1436907395-0500-0006-000700080009\jnsxF1A0.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\fedefoqe]ImagePath=[%APPDATA%]\03000200-1436907395-0500-0006-000700080009\knsrCA2C.tmpfs
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\lutixume]ImagePath=[%APPDATA%]\4C4C4544-1432970824-4810-8037-B8C04F575331\hnsx9454.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\cyxyjudu]ImagePath=[%APPDATA%]\4C4C4544-1432970824-4810-8037-B8C04F575331\jnsc21E1.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\pusetufy]ImagePath=[%APPDATA%]\0079C823-1430243724-2544-9FA1-089E01AE31E0\jnsq6FF7.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\munumewu]ImagePath=[%LOCAL_APPDATA%]\0079C823-1430247536-2544-9FA1-089E01AE31E0\snsq6954.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\relibily]ImagePath=[%LOCAL_APPDATA%]\1FF4A881-1436891005-11CB-8138-C20EEEA5591D\cnsiD2F6.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\vicoqudu]ImagePath=[%APPDATA%]\4B435451-1436600766-4E32-4231-14DAE95CF656\hnszC28A.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\nokuzefo]ImagePath=[%APPDATA%]\4B435451-1436600766-4E32-4231-14DAE95CF656\knsf5AE.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\nylixoxo]ImagePath=[%APPDATA%]\8BD3DA91-1436717810-E011-8DD5-B870F4D5B757\knsdB48.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\zejytose]ImagePath=[%APPDATA%]\8BD3DA91-1436717810-E011-8DD5-B870F4D5B757\jnss40C7.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\vicoqudu]ImagePath=[%APPDATA%]\B0DEBD38-1436488260-E311-940D-F8A9637B3F65\hnsi17B1.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\tuleniwe]ImagePath=[%APPDATA%]\24C028C0-1431996052-E211-9E12-2089846146D7\jnsj13C.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\potozoce]ImagePath=[%APPDATA%]\24C028C0-1431996052-E211-9E12-2089846146D7\nswEA1B.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\nusizymo]ImagePath=[%LOCAL_APPDATA%]\24C028C0-1431981825-E211-9E12-2089846146D7\cnse7C24.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\nupyloti]ImagePath=[%LOCAL_APPDATA%]\24C028C0-1431981843-E211-9E12-2089846146D7\snseBB4E.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\hodufije]ImagePath=[%APPDATA%]\24C028C0-1431996052-E211-9E12-2089846146D7\hnso18ED.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\behypipe]ImagePath=[%APPDATA%]\8BD3DA91-1436717810-E011-8DD5-B870F4D5B757\knsx9D10.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\vicoqudu]ImagePath=[%APPDATA%]\00000000-1436840154-0000-0000-50E549E50D39\hnswD78B.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\nobeqyno]ImagePath=[%APPDATA%]\00000000-1436840154-0000-0000-50E549E50D39\knsr217E.tmpfs
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\bohihozy]ImagePath=[%APPDATA%]\00000000-1426327362-0000-0000-50E549E50D39\jnsh6344.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\pequsymo]ImagePath=[%APPDATA%]\4B435451-1436600766-4E32-4231-14DAE95CF656\knseDAD3.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\zejytose]ImagePath=[%APPDATA%]\E64818D2-1436513463-5646-B591-54A050A8BE45\jnsc3419.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\vicoqudu]ImagePath=[%APPDATA%]\E64818D2-1436513463-5646-B591-54A050A8BE45\hnsn4F2A.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\qygitipu]ImagePath=[%APPDATA%]\E64818D2-1436513463-5646-B591-54A050A8BE45\knsh1A9A.tmpfs
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\lupucylu]ImagePath=[%APPDATA%]\AF1C5200-1431728973-1012-B489-E0B0F4C2CE63\nsgF81D.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\tygixyzy]ImagePath=[%LOCAL_APPDATA%]\AF1C5200-1431714818-1012-B489-E0B0F4C2CE63\cnsgA92E.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\tuwyqecy]ImagePath=[%APPDATA%]\AF1C5200-1431728973-1012-B489-E0B0F4C2CE63\hnsp4432.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\nowecele]ImagePath=[%APPDATA%]\AF1C5200-1431728973-1012-B489-E0B0F4C2CE63\jnsz1E58.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\jefusocu]ImagePath=[%LOCAL_APPDATA%]\AF1C5200-1431714850-1012-B489-E0B0F4C2CE63\snsbD931.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\zedepory]ImagePath=[%APPDATA%]\011E9830-1434303024-D911-A7DC-000423B09DF7\hnsfF376.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\xoperoze]ImagePath=[%APPDATA%]\011E9830-1434303024-D911-A7DC-000423B09DF7\jnsfDA5E.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\netykilu]ImagePath=[%APPDATA%]\011E9830-1434303024-D911-A7DC-000423B09DF7\knsy3349.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\zejytose]ImagePath=[%APPDATA%]\11111111-1436758456-1111-1111-111111111111\jnscD7DB.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\vicoqudu]ImagePath=[%APPDATA%]\11111111-1436758456-1111-1111-111111111111\hnsmEE73.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\doriheze]ImagePath=[%APPDATA%]\11111111-1436758456-1111-1111-111111111111\knshBDF4.tmpfs
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\siniqolo]ImagePath=[%APPDATA%]\1AE166CD-1426519644-DE11-9904-00235A37A494\jnsh9414.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\cehytike]ImagePath=[%APPDATA%]\1AE166CD-1426519644-DE11-9904-00235A37A494\knsu8EA3.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\zejytose]ImagePath=[%APPDATA%]\03000200-1436717570-0500-0006-000700080009\jnsf7BD4.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\kuhikoro]ImagePath=[%APPDATA%]\72683B5C-1436796867-1269-5D99-693E0C33696A\knsyF911.tmpfs
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\vicoqudu]ImagePath=[%APPDATA%]\BFE5E4CD-1436771406-7880-395F-74D02BE95369\hnsw61F.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\zejytose]ImagePath=[%APPDATA%]\BFE5E4CD-1436771406-7880-395F-74D02BE95369\jnseE6DD.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\wysusuzy]ImagePath=[%APPDATA%]\BFE5E4CD-1436771406-7880-395F-74D02BE95369\knskAAD7.tmpfs
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\gopibeko]ImagePath=[%LOCAL_APPDATA%]\BFE5E4CD-1436757067-7880-395F-74D02BE95369\snsa81C8.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\zejytose]ImagePath=[%APPDATA%]\42F41774-1436777405-11DF-8AF7-1FA47CDC07F4\jnsj30C0.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\vicoqudu]ImagePath=[%APPDATA%]\42F41774-1436777405-11DF-8AF7-1FA47CDC07F4\hnsi4803.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\nucybyku]ImagePath=[%APPDATA%]\42F41774-1436777405-11DF-8AF7-1FA47CDC07F4\knsp7DDC.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\rekomylo]ImagePath=[%APPDATA%]\9311C480-1436711131-81DF-3E5E-E0CB4EFDF101\knss9BDD.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\sivuwezy]ImagePath=[%APPDATA%]\334FCFB4-1435550595-11DF-A8D8-13B8488A486C\knsuF743.tmpfs
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\zejytose]ImagePath=[%APPDATA%]\B014D183-1436510532-E411-B2A0-F0761C0C235A\jnssD3BD.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\vicoqudu]ImagePath=[%APPDATA%]\B014D183-1436510532-E411-B2A0-F0761C0C235A\hnshEAC2.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\gyxobome]ImagePath=[%APPDATA%]\B014D183-1436510532-E411-B2A0-F0761C0C235A\knscC18D.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\vicoqudu]ImagePath=[%APPDATA%]\03000200-1436717570-0500-0006-000700080009\hnsu9751.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\pimirole]ImagePath=[%APPDATA%]\03000200-1436717570-0500-0006-000700080009\knsf508A.tmpfs
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\gopibeko]ImagePath=[%LOCAL_APPDATA%]\03000200-1436706819-0500-0006-000700080009\snspFFA5.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\zedepory]ImagePath=[%APPDATA%]\260C8E80-1434874698-11DD-89B8-74D02B922B55\hnsu34D7.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\qinolyky]ImagePath=[%APPDATA%]\00000000-1428854126-0000-0000-0016E6D8516E\nsq9081.tmpfs
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\ginefoqo]ImagePath=[%APPDATA%]\00000000-1429210942-0000-0000-0016E6D8516E\nseC08B.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\zywijuly]ImagePath=[%APPDATA%]\00000000-1428854126-0000-0000-0016E6D8516E\jnslC3E6.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\sycoboxy]ImagePath=[%LOCAL_APPDATA%]\00000000-1429214777-0000-0000-0016E6D8516E\snsyA68E.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\poxuwyvy]ImagePath=[%APPDATA%]\00000000-1429210942-0000-0000-0016E6D8516E\jnss52E1.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\vicoqudu]ImagePath=[%APPDATA%]\9311C480-1436711131-81DF-3E5E-E0CB4EFDF101\hnss753.tmp