Exterminate It! Antimalware

malpedia

Known threats:699,443 Last Update:August 10, 12:54

Testimonials

Just want to say that apparently your Exterminate It has worked like a charm. I was infected with a most troublesome Malware Trojan that kept replicating every time McAfee found, blocked and removed it... most annoying for several days... until Mr. Google led me to your door. What a God send!

With thanks,

Tom S.

MultiPlug- Registry Values List

This is a complete list of MultiPlug registry values collected by Exterminate It!. If you find any of these registry values on your PC, your computer is very likely to be infected with the MultiPlug - adware.

IMPORTANT: Because the registry is a core component of your Windows system, it is strongly recommended that you back up the registry before you begin deleting keys and values. For information about backing up the Windows registry, refer to the Registry Editor online help.
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\kitecudi]ImagePath=[%LOCAL_APPDATA%]\22515B40-1429019718-11DD-96D2-74D02BCD6C9C\insxBAAA.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\gofiwudy]ImagePath=[%LOCAL_APPDATA%]\22515B40-1429018798-11DD-96D2-74D02BCD6C9C\snseC256.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\solomero]ImagePath=[%APPDATA%]\4C4C4544-1429193898-5910-8042-B5C04F46324A\nsl50A.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\poxuwyvy]ImagePath=[%APPDATA%]\4C4C4544-1429193898-5910-8042-B5C04F46324A\jnssD175.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\ronevulo]ImagePath=[%APPDATA%]\ECAC7F50-1428180261-1F44-9C3E-1B0BC29020FC\nspB84.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\xyhigysy]ImagePath=[%APPDATA%]\ECAC7F50-1428180261-1F44-9C3E-1B0BC29020FC\jnse5BD3.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\feqiluwe]ImagePath=[%APPDATA%]\80E0264D-1429139235-EA44-AB17-C80AA9743EB8\nsg5859.tmpfs
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\poxuwyvy]ImagePath=[%APPDATA%]\80E0264D-1429139235-EA44-AB17-C80AA9743EB8\jnsg9D89.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\bytegenu]ImagePath=[%LOCAL_APPDATA%]\80E0264D-1429125098-EA44-AB17-C80AA9743EB8\snsn24B5.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\vyvyvuky]ImagePath=[%APPDATA%]\4C4C4544-1425934820-5110-8043-C2C04F563132\nspE564.tmpfs
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\sexegudu]ImagePath=[%APPDATA%]\4C4C4544-1425934820-5110-8043-C2C04F563132\jnsr1D14.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\feqiluwe]ImagePath=[%APPDATA%]\A00DC3CC-1429143722-E211-8351-008CFA3F2A5B\nsbD720.tmpfs
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\neqexepi]ImagePath=[%LOCAL_APPDATA%]\A00DC3CC-1429125953-E211-8351-008CFA3F2A5B\cnsd2DA9.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\bytegenu]ImagePath=[%LOCAL_APPDATA%]\A00DC3CC-1429125964-E211-8351-008CFA3F2A5B\snse562E.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\zuxunivi]ImagePath=[%APPDATA%]\8CFDFC85-1429002236-0C41-9756-54A05038C363\nstDADA.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\vujofilo]ImagePath=[%LOCAL_APPDATA%]\8CFDFC85-1429013230-0C41-9756-54A05038C363\cnst1E23.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\moruxefo]ImagePath=[%APPDATA%]\8CFDFC85-1429002236-0C41-9756-54A05038C363\jnsk7323.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\kitecudi]ImagePath=[%LOCAL_APPDATA%]\8CFDFC85-1429020318-0C41-9756-54A05038C363\insz4A68.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\gofiwudy]ImagePath=[%LOCAL_APPDATA%]\8CFDFC85-1429013248-0C41-9756-54A05038C363\snss5A8E.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\qipokuzu]ImagePath=[%LOCAL_APPDATA%]\03000200-1429191367-0500-0006-000700080009\cnsx21A7.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\feqiluwe]ImagePath=[%APPDATA%]\03000200-1429189271-0500-0006-000700080009\nsuE307.tmpfs
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\poxuwyvy]ImagePath=[%APPDATA%]\03000200-1429189271-0500-0006-000700080009\jnsz42D8.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\gimifuge]ImagePath=[%APPDATA%]\CEF28623-1428839093-43EE-6E57-001EEC59B422\nse3697.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\tigefyzy]ImagePath=[%APPDATA%]\CEF28623-1428839093-43EE-6E57-001EEC59B422\jnsj2BE2.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\vukizote]ImagePath=[%APPDATA%]\7432965A-1428634914-BB42-A469-047D7B281403\jnso401B.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\qosyfike]ImagePath=[%APPDATA%]\BD644585-1428813572-DF11-B2A9-705AB6AEE296\nsx6302.tmpfs
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\wiqocyzy]ImagePath=[%LOCAL_APPDATA%]\BD644585-1428795838-DF11-B2A9-705AB6AEE296\snst397B.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\fekeluwu]ImagePath=[%APPDATA%]\BD644585-1428813572-DF11-B2A9-705AB6AEE296\jnscBB83.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\zuxunivi]ImagePath=[%APPDATA%]\6FB8F8F3-1429064668-E111-854A-DC0EA1B8F802\nsj23CE.tmpfs
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\vymyrohy]ImagePath=[%LOCAL_APPDATA%]\6FB8F8F3-1429050555-E111-854A-DC0EA1B8F802\cnsw7C26.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\moruxefo]ImagePath=[%APPDATA%]\6FB8F8F3-1429064668-E111-854A-DC0EA1B8F802\jnse7E33.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\poxuwyvy]ImagePath=[%APPDATA%]\03000200-1429131648-0500-0006-000700080009\jnsqC21.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\jefewity]ImagePath=[%APPDATA%]\03000200-1429131648-0500-0006-000700080009\nsbD61E.tmpfs
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\bytegenu]ImagePath=[%LOCAL_APPDATA%]\03000200-1429142667-0500-0006-000700080009\snsx503.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\neqexepi]ImagePath=[%LOCAL_APPDATA%]\03000200-1429142650-0500-0006-000700080009\cnsmC602.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\benyhuse]ImagePath=[%APPDATA%]\930A553B-1427820040-37D0-35DE-7824AFA0DF7A\nsh1648.tmpfs
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\nypikyjy]ImagePath=[%APPDATA%]\930A553B-1427820040-37D0-35DE-7824AFA0DF7A\jnsh4894.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\ronevulo]ImagePath=[%APPDATA%]\F86AEA12-1429008691-11E4-9F6E-28D244EFB1BB\nsu8F61.tmpfs
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\moruxefo]ImagePath=[%APPDATA%]\F86AEA12-1429008691-11E4-9F6E-28D244EFB1BB\jnsqC3E5.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\gofiwudy]ImagePath=[%LOCAL_APPDATA%]\F86AEA12-1429016107-11E4-9F6E-28D244EFB1BB\snstC447.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\ronevulo]ImagePath=[%APPDATA%]\44313030-1429008793-3945-4535-30387DE9E508\nsrEA2A.tmpfs
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\vujofilo]ImagePath=[%LOCAL_APPDATA%]\44313030-1429019861-3945-4535-30387DE9E508\cnsj7F05.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\moruxefo]ImagePath=[%APPDATA%]\44313030-1429008793-3945-4535-30387DE9E508\jnss3AA1.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\kitecudi]ImagePath=[%LOCAL_APPDATA%]\44313030-1429020781-3945-4535-30387DE9E508\insjA5A6.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\gofiwudy]ImagePath=[%LOCAL_APPDATA%]\44313030-1429019882-3945-4535-30387DE9E508\snsoC7F4.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\benyhuse]ImagePath=[%APPDATA%]\24DFEAD1-1427799758-6644-848A-54A0508C807C\nsb22E2.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\xijofycy]ImagePath=[%LOCAL_APPDATA%]\81F9930E-1428878676-CB11-B62A-C2BFD7E84691\cnsxA97.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\nefyloji]ImagePath=[%APPDATA%]\81F9930E-1428903617-CB11-B62A-C2BFD7E84691\nsb40E8.tmpfs
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\gulimixo]ImagePath=[%APPDATA%]\81F9930E-1428903617-CB11-B62A-C2BFD7E84691\jnswBC35.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\xoxovere]ImagePath=[%APPDATA%]\A0AB19F6-1426485649-E111-AF8E-00266C16AC8B\nsaD683.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\merohihi]ImagePath=[%LOCAL_APPDATA%]\A26C2887-1426933654-11E3-9302-28D244636D21\cnsh96F.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\sonunevo]ImagePath=[%LOCAL_APPDATA%]\A26C2887-1426954714-11E3-9302-28D244636D21\inseBFD5.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\rurufyri]ImagePath=[%LOCAL_APPDATA%]\A26C2887-1426933669-11E3-9302-28D244636D21\snsm3ABE.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\jumosegy]ImagePath=[%APPDATA%]\A26C2887-1426904645-11E3-9302-28D244636D21\jnsk3CCD.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\ronevulo]ImagePath=[%APPDATA%]\EBCF8AD2-1428849822-11DE-A3A8-90924703C0D8\nsz61F8.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\xunopyky]ImagePath=[%APPDATA%]\EBCF8AD2-1428849822-11DE-A3A8-90924703C0D8\jnspAB72.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\dihitily]ImagePath=[%APPDATA%]\03D40274-1424950281-0528-FC06-E10700080009\nsrB836.tmpfs
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\lynebero]ImagePath=[%APPDATA%]\03D40274-1424950281-0528-FC06-E10700080009\jnsgEF23.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\bizijewi]ImagePath=[%LOCAL_APPDATA%]\03D40274-1424950367-0528-FC06-E10700080009\snscC9BC.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\ronevulo]ImagePath=[%APPDATA%]\66A34A50-1428365352-81E0-2D9C-3860776C8767\nse56D1.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\pylywusy]ImagePath=[%APPDATA%]\66A34A50-1428365352-81E0-2D9C-3860776C8767\jnslC3DC.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\nemifexy]ImagePath=[%APPDATA%]\00000000-1427394002-0000-0000-8C89A565487F\nsa60D.tmpfs
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\nefyloji]ImagePath=[%APPDATA%]\285E5855-1428870529-8F40-9261-5872E635CD3D\nsz68D4.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\gulimixo]ImagePath=[%APPDATA%]\285E5855-1428870529-8F40-9261-5872E635CD3D\jnsdBC8A.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\gybixonu]ImagePath=[%APPDATA%]\A0AB19F6-1426485649-E111-AF8E-00266C16AC8B\nsd5238.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\sybemypy]ImagePath=[%LOCAL_APPDATA%]\A0AB19F6-1426526082-E111-AF8E-00266C16AC8B\insx3CF8.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\mycenoli]ImagePath=[%LOCAL_APPDATA%]\A0AB19F6-1426525468-E111-AF8E-00266C16AC8B\snstE131.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\hilewevy]ImagePath=[%APPDATA%]\A0AB19F6-1426485649-E111-AF8E-00266C16AC8B\jnsxDECE.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\dicysupu]ImagePath=[%LOCAL_APPDATA%]\A0AB19F6-1426525453-E111-AF8E-00266C16AC8B\cnsjA933.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\nefyloji]ImagePath=[%APPDATA%]\A0AB19F6-1426485649-E111-AF8E-00266C16AC8B\nsfC118.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\rehywyle]ImagePath=[%LOCAL_APPDATA%]\00000000-1428666522-0000-0000-00241D330305\insfB0BC.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\kyruwyki]ImagePath=[%LOCAL_APPDATA%]\00000000-1428665593-0000-0000-00241D330305\cnszD369.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\kowuqydi]ImagePath=[%LOCAL_APPDATA%]\00000000-1428665618-0000-0000-00241D330305\snszF365.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\kipilyqy]ImagePath=[%APPDATA%]\00000000-1428658063-0000-0000-00241D330305\jnsh97EA.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\hypixyje]ImagePath=[%APPDATA%]\B8EC8AC6-1427017031-DF11-9D9B-001CC0C13E9C\nskA61.tmpfs
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\zytuvido]ImagePath=[%APPDATA%]\B8EC8AC6-1427017031-DF11-9D9B-001CC0C13E9C\jnsk3D49.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\zifumoqo]ImagePath=[%APPDATA%]\58435451-1426421131-3051-4532-3085A97D87D1\nslF9D6.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\wiqocyzy]ImagePath=[%LOCAL_APPDATA%]\8790CBDB-1428842334-563F-7941-60A44C37CE36\snsq926.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\qosyfike]ImagePath=[%APPDATA%]\8790CBDB-1428813181-563F-7941-60A44C37CE36\nsj69F2.tmpfs
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\fekeluwu]ImagePath=[%APPDATA%]\8790CBDB-1428813181-563F-7941-60A44C37CE36\jnstC6D6.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\fecuvygy]ImagePath=[%LOCAL_APPDATA%]\8790CBDB-1428842307-563F-7941-60A44C37CE36\cnsqBFBA.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\duwyhuse]ImagePath=[%APPDATA%]\03000200-1425784090-0500-0006-000700080009\jnsk9839.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\fenycegu]ImagePath=[%APPDATA%]\03000200-1424278570-0500-0006-000700080009\nsa120.tmpfs
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\cudugury]ImagePath=[%APPDATA%]\03000200-1424278570-0500-0006-000700080009\jnsr135.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\gumydove]ImagePath=[%APPDATA%]\4C4C4544-1428456494-5110-8031-B8C04F534A31\nseF081.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\myxoqure]ImagePath=[%LOCAL_APPDATA%]\4C4C4544-1428589565-5110-8031-B8C04F534A31\inskB92F.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\fogezyny]ImagePath=[%APPDATA%]\4C4C4544-1428456494-5110-8031-B8C04F534A31\jnseA107.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\gekofyze]ImagePath=[%LOCAL_APPDATA%]\8790CBDB-1428571283-563F-7941-60A44C37CE36\insd522.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\cikukidy]ImagePath=[%APPDATA%]\8790CBDB-1427958770-563F-7941-60A44C37CE36\nspFAD2.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\qisygowe]ImagePath=[%APPDATA%]\8790CBDB-1427958770-563F-7941-60A44C37CE36\jnst3AB4.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\rijedubu]ImagePath=[%APPDATA%]\FFFFFFFF-1427458721-FFFF-FFFF-FFFFFFFFFFFF\jnse938F.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\pylywusy]ImagePath=[%APPDATA%]\FFFFFFFF-1428331805-FFFF-FFFF-FFFFFFFFFFFF\jnst81EC.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\jezyseko]ImagePath=[%APPDATA%]\C34E7AE0-1428747953-11DD-AD88-00238BE541AD\jnsy8A47.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\hypixyje]ImagePath=[%APPDATA%]\03000200-1427043922-0500-0006-000700080009\nsp24E.tmpfs
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\zytuvido]ImagePath=[%APPDATA%]\03000200-1427043922-0500-0006-000700080009\jnsb25E.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\lusiloxu]ImagePath=[%APPDATA%]\39464E43-1428334036-4832-3052-00269E4FCEA6\nsdD746.tmpfs
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\xeluquze]ImagePath=[%APPDATA%]\D26DD891-1428498865-E411-BB44-F8A963DCD528\nsp9CE2.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\tulusydo]ImagePath=[%LOCAL_APPDATA%]\D26DD891-1428509890-E411-BB44-F8A963DCD528\snss768A.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\fenesufi]ImagePath=[%LOCAL_APPDATA%]\D26DD891-1428628970-E411-BB44-F8A963DCD528\insy7CBF.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\rutywoge]ImagePath=[%APPDATA%]\26C361BE-1428579270-07A1-77D5-199D11862806\nsm766D.tmpfs
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\fogezyny]ImagePath=[%APPDATA%]\26C361BE-1428579270-07A1-77D5-199D11862806\jnsaA553.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\segybysy]ImagePath=[%LOCAL_APPDATA%]\03000200-1428609120-0500-0006-000700080009\insmD1E9.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\xecujepe]ImagePath=[%APPDATA%]\9C270960-1428597054-81E3-3BAA-202564425AD4\nsk483F.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\tylewuwo]ImagePath=[%LOCAL_APPDATA%]\9C270960-1428604478-81E3-3BAA-202564425AD4\cnsv8B8B.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\kowuqydi]ImagePath=[%LOCAL_APPDATA%]\9C270960-1428604499-81E3-3BAA-202564425AD4\snsjC6CD.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\tyjirito]ImagePath=[%APPDATA%]\7CABA37A-1428290381-E411-B57F-68F7282F04BA\nsh99EE.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\xyhigysy]ImagePath=[%APPDATA%]\7CABA37A-1428290381-E411-B57F-68F7282F04BA\jnsr2F7A.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\rutywoge]ImagePath=[%APPDATA%]\FBD9B098-1427188810-11DD-910F-F273E5334E1F\nsaC09D.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\xuhejygu]ImagePath=[%APPDATA%]\FBD9B098-1427188810-11DD-910F-F273E5334E1F\jnsd5EC2.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\myxoqure]ImagePath=[%LOCAL_APPDATA%]\FBD9B098-1428597340-11DD-910F-F273E5334E1F\instD674.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\sygydese]ImagePath=[%APPDATA%]\47BA6320-1427899979-11DE-83D1-00248C46DF39\nsh157C.tmpfs
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\dulixyti]ImagePath=[%APPDATA%]\03000200-1428565266-0500-0006-000700080009\nswA695.tmpfs
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\fogezyny]ImagePath=[%APPDATA%]\03000200-1428565266-0500-0006-000700080009\jnsgD799.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\cicifiso]ImagePath=[%APPDATA%]\33444335-1428141470-5430-4852-A0D3C16841D0\nsxD6E4.tmpfs
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\xyhigysy]ImagePath=[%APPDATA%]\33444335-1428141470-5430-4852-A0D3C16841D0\jnsh1606.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\fydidoce]ImagePath=[%APPDATA%]\032B0290-1428528539-05D4-B706-1B0700080009\nsf9BEC.tmpfs
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\fogezyny]ImagePath=[%APPDATA%]\032B0290-1428528539-05D4-B706-1B0700080009\jnsaD47F.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\wuweleqo]ImagePath=[%APPDATA%]\E24DB13A-1427329063-E111-8FD3-DC0EA1B0FE0C\nslB0F8.tmpfs
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\niwojeru]ImagePath=[%APPDATA%]\E24DB13A-1427329063-E111-8FD3-DC0EA1B0FE0C\jnsgE6CD.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\kybenuhi]ImagePath=[%APPDATA%]\263034E0-1427330935-11DF-AF6A-485B39F6D562\nss4B53.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\cydufyti]ImagePath=[%APPDATA%]\263034E0-1427330935-11DF-AF6A-485B39F6D562\jnst1AEE.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\zujyqele]ImagePath=[%APPDATA%]\4C4C4544-1427478405-4710-8059-C7C04F515831\jnsc8B55.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\zucovehu]ImagePath=[%APPDATA%]\2C7AAEC0-1428383934-11B2-8000-C3AFB80B94A4\nseE875.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\woqyguze]ImagePath=[%APPDATA%]\03000200-1428449328-0500-0006-000700080009\nseE0DB.tmpfs
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\fogezyny]ImagePath=[%APPDATA%]\03000200-1428449328-0500-0006-000700080009\jnse13A9.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\tulusydo]ImagePath=[%LOCAL_APPDATA%]\03000200-1428424345-0500-0006-000700080009\snsn22B1.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\keruhofe]ImagePath=[%LOCAL_APPDATA%]\03000200-1428424326-0500-0006-000700080009\cnsaDDCA.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\jizipyli]ImagePath=[%APPDATA%]\4C4C4544-1428423613-5A10-8038-B4C04F514E31\nskEF9.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\fogezyny]ImagePath=[%APPDATA%]\4C4C4544-1428423613-5A10-8038-B4C04F514E31\jnsw9431.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\konureno]ImagePath=[%LOCAL_APPDATA%]\032B0290-1428422226-055F-1306-2E0700080009\cnsvAECF.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\fywobony]ImagePath=[%APPDATA%]\032B0290-1427532482-055F-1306-2E0700080009\jnsq86ED.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\fogezyny]ImagePath=[%APPDATA%]\032B0290-1428411196-055F-1306-2E0700080009\jnsk807B.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\zucovehu]ImagePath=[%APPDATA%]\4C4C4544-1428238565-3310-804C-B8C04F423132\nsuC15D.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\dexusize]ImagePath=[%APPDATA%]\2C7AAEC0-1428383934-11B2-8000-C3AFB80B94A4\nsw73E3.tmpfs
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\tudonyru]ImagePath=[%LOCAL_APPDATA%]\2C7AAEC0-1428424636-11B2-8000-C3AFB80B94A4\inssCBD9.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\pylywusy]ImagePath=[%APPDATA%]\2C7AAEC0-1428383934-11B2-8000-C3AFB80B94A4\jnsmBE51.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\risuxyko]ImagePath=[%APPDATA%]\4C4C4544-1428343694-5310-8059-B1C04F334731\nsq40B.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\zucovehu]ImagePath=[%APPDATA%]\00000000-1427823855-0000-0000-001FD08D3B16\nsp3EFE.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\nypikyjy]ImagePath=[%APPDATA%]\00000000-1427823855-0000-0000-001FD08D3B16\jnsn5AE2.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\xyhigysy]ImagePath=[%APPDATA%]\F9B5BEA4-1428298079-11DC-8A28-CA3021E248DB\jnsm9475.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\cicifiso]ImagePath=[%APPDATA%]\77184FC1-1428180066-E211-87F5-2089844C73DE\nsu842F.tmpfs
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\xyhigysy]ImagePath=[%APPDATA%]\77184FC1-1428180066-E211-87F5-2089844C73DE\jnseB603.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\nicorygo]ImagePath=[%APPDATA%]\03000200-1428256637-0500-0006-000700080009\nsj689C.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\xyhigysy]ImagePath=[%APPDATA%]\03000200-1428256637-0500-0006-000700080009\jnsy32C9.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\xyhigysy]ImagePath=[%APPDATA%]\00CFA21A-1428097992-E111-802C-B01D13075531\jnseF99D.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\cicifiso]ImagePath=[%APPDATA%]\00CFA21A-1428097992-E111-802C-B01D13075531\nsf84D6.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\zofigohe]ImagePath=[%LOCAL_APPDATA%]\1A616C60-1427828131-6441-8563-8C1E69FA51E0\snsw6A6C.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\heroxize]ImagePath=[%LOCAL_APPDATA%]\1A616C60-1427828089-6441-8563-8C1E69FA51E0\cnsiEF62.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\bugubove]ImagePath=[%APPDATA%]\1A616C60-1427845766-6441-8563-8C1E69FA51E0\jnsw19FB.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\cicifiso]ImagePath=[%APPDATA%]\7331B8FA-1428134479-11DE-B3DA-93497F19788C\nsi75A5.tmpfs
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\xyhigysy]ImagePath=[%APPDATA%]\7331B8FA-1428134479-11DE-B3DA-93497F19788C\jnssBA29.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\cicifiso]ImagePath=[%APPDATA%]\03000200-1426581326-0500-0006-000700080009\nsqD7AD.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\xugopubo]ImagePath=[%APPDATA%]\00000000-1426739820-0000-0000-448A5B9EBEAA\jnsf8D66.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\kezotoby]ImagePath=[%LOCAL_APPDATA%]\00000000-1426740368-0000-0000-448A5B9EBEAA\insyB489.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\wekitube]ImagePath=[%APPDATA%]\1F0048A0-1424615681-0400-7EF7-20CF3070466E\jnsb6A4.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\heqidihi]ImagePath=[%APPDATA%]\207EDEB4-1427553876-DF11-A498-00266C949E37\nsj835C.tmpfs
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\gemuvyre]ImagePath=[%APPDATA%]\207EDEB4-1427553876-DF11-A498-00266C949E37\jnszBF78.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\cicifiso]ImagePath=[%APPDATA%]\39464E43-1428132726-5232-3050-00238BAFF465\nsxD1AA.tmpfs
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\xyhigysy]ImagePath=[%APPDATA%]\39464E43-1428132726-5232-3050-00238BAFF465\jnsc65E3.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\xuhejygu]ImagePath=[%APPDATA%]\5345D2D7-1427130750-11DF-BBD8-D1C73DD778E7\jnsx61BE.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\jecefube]ImagePath=[%APPDATA%]\4C4C4544-1428074961-4610-8039-B2C04F47324A\nsp78C.tmpfs
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\xyhigysy]ImagePath=[%APPDATA%]\4C4C4544-1428074961-4610-8039-B2C04F47324A\jnsa793.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\cicifiso]ImagePath=[%APPDATA%]\00CFA21A-1428097992-E111-802C-B01D13075531\nsf1F00.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\cicifiso]ImagePath=[%APPDATA%]\03000200-1427470776-0500-0006-000700080009\nsy813F.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\wyvuceby]ImagePath=[%APPDATA%]\32443043-1427181012-3030-3439-323231314531\nsu90C5.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\sygydese]ImagePath=[%APPDATA%]\41BA8D90-1427906828-81F5-33A5-7824AF1D891E\nstA7D8.tmpfs
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\sutyjipe]ImagePath=[%APPDATA%]\41BA8D90-1427906828-81F5-33A5-7824AF1D891E\jnspDBC0.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\woxuqydy]ImagePath=[%APPDATA%]\1F00FFC0-1424547909-0600-9DCB-BCAEC51634D8\nsc8B67.tmpfs
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\xykucoke]ImagePath=[%APPDATA%]\1F00FFC0-1424547909-0600-9DCB-BCAEC51634D8\jnscBD65.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\benyhuse]ImagePath=[%APPDATA%]\4C4C4544-1426566734-5310-8054-C7C04F505031\nszEF7A.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\hycetuje]ImagePath=[%APPDATA%]\4C4C4544-1426566734-5310-8054-C7C04F505031\jnso7CCD.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\fereqolu]ImagePath=[%APPDATA%]\FA1D137D-1427768914-A968-0E81-0E81A33B5930\jnseA19.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\vydojico]ImagePath=[%LOCAL_APPDATA%]\03000200-1427897729-0500-0006-000700080009\snsn86D3.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\jujyguwy]ImagePath=[%LOCAL_APPDATA%]\03000200-1427897714-0500-0006-000700080009\cnsx614B.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\gyzepide]ImagePath=[%APPDATA%]\FA1D137D-1427768914-A968-0E81-0E81A33B5930\nseDA75.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\lybupepu]ImagePath=[%APPDATA%]\3A96F5F6-1427665830-E311-9024-201A0659D464\nsm2559.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\tobereze]ImagePath=[%APPDATA%]\3A96F5F6-1427665830-E311-9024-201A0659D464\jnsz6B74.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\kofinujo]ImagePath=[%APPDATA%]\3A96F5F6-1427665830-E311-9024-201A0659D464\nsn908A.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\zizygedi]ImagePath=[%APPDATA%]\2C6E04BE-1427976396-3112-8B14-8C736EBB5D30\nsd4062.tmpfs
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\zurytype]ImagePath=[%LOCAL_APPDATA%]\2C6E04BE-1427983810-3112-8B14-8C736EBB5D30\snsa6588.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\nixikubi]ImagePath=[%APPDATA%]\2C6E04BE-1427976396-3112-8B14-8C736EBB5D30\jnsg6DD1.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\gikiwyle]ImagePath=[%LOCAL_APPDATA%]\2C6E04BE-1427983791-3112-8B14-8C736EBB5D30\cnse219C.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\qetocury]ImagePath=[%LOCAL_APPDATA%]\2C6E04BE-1427989970-3112-8B14-8C736EBB5D30\insu6533.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\xuhejygu]ImagePath=[%APPDATA%]\B68186C1-1427281104-E011-A678-00E04CA04AED\jnsf5F8.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\lomemuwe]ImagePath=[%APPDATA%]\B68186C1-1427281104-E011-A678-00E04CA04AED\nsk4499.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\todufesi]ImagePath=[%LOCAL_APPDATA%]\B68186C1-1427301161-E011-A678-00E04CA04AED\cnsw4B94.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\rebebicu]ImagePath=[%LOCAL_APPDATA%]\B68186C1-1427301181-E011-A678-00E04CA04AED\snsr91D5.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\dynizogu]ImagePath=[%LOCAL_APPDATA%]\B68186C1-1427327481-E011-A678-00E04CA04AED\inscCDAD.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\puroquby]ImagePath=[%LOCAL_APPDATA%]\4C4C4544-1427869428-4E10-8050-CAC04F365A31\inssE505.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\gupigiby]ImagePath=[%APPDATA%]\7F5B9467-1423989635-8C46-AE0F-089E01B679F8\nso4535.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\hypesomo]ImagePath=[%APPDATA%]\3018569B-1426492878-DF11-8A1F-88AE1DA862B7\nsq53B1.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\qulyripy]ImagePath=[%APPDATA%]\00000000-1427844248-0000-0000-50E549A61A18\nsz84B4.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\bugubove]ImagePath=[%APPDATA%]\00000000-1427844248-0000-0000-50E549A61A18\jnsv1B0E.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\gedylipi]ImagePath=[%APPDATA%]\FA1D137D-1427768914-A968-0E81-0E81A33B5930\nsmDD37.tmpfs
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\vyvyvuky]ImagePath=[%APPDATA%]\408394C1-1425918506-E111-86B2-00266C251CA1\nsxF6AA.tmpfs
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\sexegudu]ImagePath=[%APPDATA%]\408394C1-1425918506-E111-86B2-00266C251CA1\jnsn286A.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\zehepefy]ImagePath=[%APPDATA%]\472EEAE0-1427354477-11DD-BD0C-74D02BC699A1\jnsg3F43.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\siniqolo]ImagePath=[%APPDATA%]\472EEAE0-1426494485-11DD-BD0C-74D02BC699A1\jnsx4090.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\qulyripy]ImagePath=[%APPDATA%]\4C4C4544-1427856489-4E10-8050-CAC04F365A31\nsn794C.tmpfs
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\vydojico]ImagePath=[%LOCAL_APPDATA%]\4C4C4544-1427831522-4E10-8050-CAC04F365A31\snspD2DF.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\puroquby]ImagePath=[%LOCAL_APPDATA%]\4C4C4544-1427832276-4E10-8050-CAC04F365A31\insf60A4.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\mydumonu]ImagePath=[%LOCAL_APPDATA%]\4C4C4544-1427831502-4E10-8050-CAC04F365A31\cnsrA3C3.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\bugubove]ImagePath=[%APPDATA%]\4C4C4544-1427856489-4E10-8050-CAC04F365A31\jnsiC7CF.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\ryfuwufy]ImagePath=[%APPDATA%]\4C4C4544-1427094379-5910-804B-B3C04F475A31\nsf1EC0.tmpfs
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\xuhejygu]ImagePath=[%APPDATA%]\4C4C4544-1427094379-5910-804B-B3C04F475A31\jnsf37B2.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\qulyripy]ImagePath=[%APPDATA%]\4C4C4544-1427783861-3510-8058-B8C04F433253\nso8A61.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\menogoty]ImagePath=[%APPDATA%]\4C4C4544-1427783861-3510-8058-B8C04F433253\jnscD357.tmp