Exterminate It! Antimalware

malpedia

Known threats:699,742 Last Update:October 27, 11:19

Testimonials

Just want to say that apparently your Exterminate It has worked like a charm. I was infected with a most troublesome Malware Trojan that kept replicating every time McAfee found, blocked and removed it... most annoying for several days... until Mr. Google led me to your door. What a God send!

With thanks,

Tom S.

MultiPlug- Registry Values List

This is a complete list of MultiPlug registry values collected by Exterminate It!. If you find any of these registry values on your PC, your computer is very likely to be infected with the MultiPlug - adware.

IMPORTANT: Because the registry is a core component of your Windows system, it is strongly recommended that you back up the registry before you begin deleting keys and values. For information about backing up the Windows registry, refer to the Registry Editor online help.
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\loxypube]ImagePath=[%PROGRAM_FILES%]\BCAD4184-1478517516-A047-AF92-54A050B02D96\kns286B.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\xomekinu]ImagePath=[%PROGRAM_FILES%]\4C4C4544-1478416991-4310-8032-B9C04F425731\kns83C0.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\rysewihe]ImagePath=[%PROGRAM_FILES%]\376DE408-1478480002-661C-43CD-B3F64FB52E10\knsy5D94.tmpfs
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\rijufoze]ImagePath=[%PROGRAM_FILES%]\45279060-1469641143-11E2-84AA-ECA86BB43F6C\hnslD61B.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\dowidoly]ImagePath=[%PROGRAM_FILES%]\45279060-1469641143-11E2-84AA-ECA86BB43F6C\jnskBC66.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\zifotome]ImagePath=[%PROGRAM_FILES%]\E699C878-1478298472-4DB6-877B-D017C293E3E9\knsu388D.tmpfs
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\qyjekesi]ImagePath=[%PROGRAM_FILES%]\BA9E8960-1478408578-11E3-A73F-D017C2D00058\knsm4C5D.tmpfs
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\qyjekesi]ImagePath=[%PROGRAM_FILES%]\4826B366-1478359682-8E4C-95BA-813CAAB9ACC5\kns6DD1.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\zigipyro]ImagePath=[%LOCAL_APPDATA%]\0C608475-1478282302-E411-A26A-F0761CA3BD54\qnsb253.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\tutihuji]ImagePath=[%PROGRAM_FILES%]\0C608475-1478193268-E411-A26A-F0761CA3BD54\kns2315.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\nuryhefu]ImagePath=[%PROGRAM_FILES%]\131B9781-1478329239-11CB-B480-922D0E9D421B\knsB12.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\vilycyqu]ImagePath=[%PROGRAM_FILES%]\99344E76-1477420906-E611-B27E-EC8EB593D033\kns1F19.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\nyhyqidy]ImagePath=[%PROGRAM_FILES%]\1F87BC78-1478413547-11E5-8B16-F0761CE08A6C\knsc4E4D.tmpfs
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\vozutihy]ImagePath=[%PROGRAM_FILES%]\22521FB1-1477990942-11DD-BBDA-6433F0670022\kns94B2.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\zutuzuni]ImagePath=[%PROGRAM_FILES%]\4C4C4544-1454355137-3110-8059-C4C04F515231\jnsvB433.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\wucotusy]ImagePath=[%PROGRAM_FILES%]\4C4C4544-1454355137-3110-8059-C4C04F515231\hnslD30B.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\zigipyro]ImagePath=[%LOCAL_APPDATA%]\43DA3800-1478461866-81E1-27E7-3085A91D69F0\qnsy4D5E.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\pepejoro]ImagePath=[%PROGRAM_FILES%]\43DA3800-1478437718-81E1-27E7-3085A91D69F0\knsxFB16.tmpfs
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\zutuzuni]ImagePath=[%PROGRAM_FILES%]\FCB2D880-1453183141-11E1-82E8-ECA86B75BD90\jnstAFD3.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\wucotusy]ImagePath=[%PROGRAM_FILES%]\FCB2D880-1453183141-11E1-82E8-ECA86B75BD90\hnspDA11.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\tuqomidu]ImagePath=[%PROGRAM_FILES%]\D3DB6733-1473578611-E111-BFF8-5C9AD8598A40\kns4E76.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\wyfucuhe]ImagePath=[%PROGRAM_FILES%]\0C608475-1478193268-E411-A26A-F0761CA3BD54\kns5B6A.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\xytekyby]ImagePath=[%PROGRAM_FILES%]\0B6AACE1-1474052881-11E1-9809-476B8CB23DF6\knsn498B.tmpfs
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\vequryno]ImagePath=[%PROGRAM_FILES%]\80F7E765-1478282102-11E2-8C3B-50C6590080F8\kns8B80.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\pupicyxy]ImagePath=[%PROGRAM_FILES%]\00000000-1476339847-0000-0000-6C626DCD51ED\knsCFD.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\zigipyro]ImagePath=[%LOCAL_APPDATA%]\00000000-1476895878-0000-0000-6C626DCD51ED\qnswFC1C.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\peribeby]ImagePath=[%PROGRAM_FILES%]\D8B7B190-1478243446-81E2-21DE-7054D2C0C265\knscBF65.tmpfs
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\sodynyny]ImagePath=[%PROGRAM_FILES%]\7DD35AF6-1477906852-4B2A-967A-3EE9603955EB\kns25F0.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\zigipyro]ImagePath=[%LOCAL_APPDATA%]\7DD35AF6-1478267600-4B2A-967A-3EE9603955EB\qnsw8DD6.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\rifepevi]ImagePath=[%PROGRAM_FILES%]\187C4D94-1443166500-DFE8-F49F-C4346B44F7EB\knsx4F46.tmpfs
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\gyvixodu]ImagePath=[%PROGRAM_FILES%]\187C4D94-1443166500-DFE8-F49F-C4346B44F7EB\hnsw7FF3.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\zigipyro]ImagePath=[%LOCAL_APPDATA%]\4B11A7A0-1478257238-11E0-3890-6D99103C0D29\qnspD177.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\luzygyno]ImagePath=[%PROGRAM_FILES%]\4B11A7A0-1478231735-11E0-3890-6D99103C0D29\knsy1EE1.tmpfs
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\kufuwive]ImagePath=[%PROGRAM_FILES%]\364EE69C-1478063576-9CB1-2111-88AE1D8EC448\knsgD.tmpfs
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\penulube]ImagePath=[%PROGRAM_FILES%]\FFFFFFFF-1477399774-FFFF-FFFF-FFFFFFFFFFFF\knsi2959.tmpfs
  • [HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]dutoauto="[%PROGRAM_FILES%]\miscalculation\dissuasion.exe"
  • [HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]rutoauto="[%PROGRAM_FILES%]\miscalculation\capetown.exe"
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\jyjupece]ImagePath=[%APPDATA%]\82FD0F00-1431321847-11DD-8C3C-382C4ABB1589\nsy53D.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\nugilevu]ImagePath=[%APPDATA%]\82FD0F00-1431321847-11DD-8C3C-382C4ABB1589\jnswAF03.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\nydyhumo]ImagePath=[%PROGRAM_FILES%]\019D43B8-1478073800-11DD-B119-64D25F0620F9\knsc2F99.tmpfs
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\fyxityro]ImagePath=[%PROGRAM_FILES%]\41F72F37-1473169125-E411-A26A-480FCFB661CC\kns482.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\zipifujo]ImagePath=[%PROGRAM_FILES%]\41F72F37-1473169125-E411-A26A-480FCFB661CC\knsF8E1.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\vemeteby]ImagePath=[%PROGRAM_FILES%]\41F72F37-1473169125-E411-A26A-480FCFB661CC\kns9157.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\motukily]ImagePath=[%PROGRAM_FILES%]\41F72F37-1473169125-E411-A26A-480FCFB661CC\kns2840.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\cudyhuve]ImagePath=[%PROGRAM_FILES%]\41F72F37-1473169125-E411-A26A-480FCFB661CC\kns86DF.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\fekowige]ImagePath=[%PROGRAM_FILES%]\FFFFFFFF-1477901496-FFFF-FFFF-FFFFFFFFFFFF\kns8453.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\zemocozo]ImagePath=[%PROGRAM_FILES%]\A7DA65F6-1477680398-0144-9687-A4744E31AB89\knsdC578.tmpfs
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\rijufoze]ImagePath=[%PROGRAM_FILES%]\4C4C4544-1463839374-3810-8036-B3C04F585931\hnse3EBC.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\dowidoly]ImagePath=[%PROGRAM_FILES%]\4C4C4544-1463839374-3810-8036-B3C04F585931\jnso25AE.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\hikivywo]ImagePath=[%PROGRAM_FILES%]\B81BC289-1477980010-F03A-0AF1-382C4AE888E5\knsF094.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\totezeze]ImagePath=[%PROGRAM_FILES%]\89FDE51F-1477896600-11E5-90AB-1C39472320FE\knsA6C2.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\zigipyro]ImagePath=[%LOCAL_APPDATA%]\89FDE51F-1477919583-11E5-90AB-1C39472320FE\qnst32FB.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\vubidesi]ImagePath=[%PROGRAM_FILES%]\03000200-1477822568-0500-0006-000700080009\kns3E0B.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\zigipyro]ImagePath=[%LOCAL_APPDATA%]\03000200-1478011991-0500-0006-000700080009\qnsb757F.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\hocibune]ImagePath=[%PROGRAM_FILES%]\03D40274-1476709117-0545-F906-220700080009\kns9E48.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\zijokimu]ImagePath=[%PROGRAM_FILES%]\4C4C4544-1477950897-3310-8033-B7C04F374253\kns40C.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\zigipyro]ImagePath=[%LOCAL_APPDATA%]\4C4C4544-1477989545-3310-8033-B7C04F374253\qnsl10BB.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\kixibylu]ImagePath=[%PROGRAM_FILES%]\B81BC289-1477980010-F03A-0AF1-382C4AE888E5\kns1F1.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\motifipu]ImagePath=[%PROGRAM_FILES%]\4C4C4544-1476579960-5310-804B-B2C04F594B31\knss64F.tmpfs
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\nibucuxo]ImagePath=[%PROGRAM_FILES%]\06113CB9-1477419619-11DB-BBDA-BB42D5A60019\kns4D97.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\zigipyro]ImagePath=[%LOCAL_APPDATA%]\06113CB9-1477932042-11DB-BBDA-BB42D5A60019\qnsj8B9B.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\zigipyro]ImagePath=[%LOCAL_APPDATA%]\60C33C10-1477931429-DD11-A769-848FA896A64F\qnsxE7D1.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\wymucure]ImagePath=[%PROGRAM_FILES%]\60C33C10-1477906653-DD11-A769-848FA896A64F\knssDE33.tmpfs
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\zigipyro]ImagePath=[%LOCAL_APPDATA%]\60C33C10-1477936766-DD11-A769-848FA896A64F\qnsm8EAA.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\rogucemy]ImagePath=[%PROGRAM_FILES%]\4C4C4544-1477898021-4D10-804E-B2C04F585831\knsv44E6.tmpfs
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\rujemenu]ImagePath=[%PROGRAM_FILES%]\8E423170-1469987624-11E2-8D44-5453EDBC08EE\knsC8E0.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\pereboci]ImagePath=[%PROGRAM_FILES%]\8E423170-1469987624-11E2-8D44-5453EDBC08EE\kns3E28.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\rijufoze]ImagePath=[%PROGRAM_FILES%]\8E423170-1469987624-11E2-8D44-5453EDBC08EE\hnsk4970.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\moruxefo]ImagePath=[%APPDATA%]\24C5E98C-1428944998-DC42-A978-089E014CE6F8\jnsm75AD.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\hyverumu]ImagePath=[%PROGRAM_FILES%]\FE09771B-1439849289-11E4-A818-28D244D9DD0A\jnsh621C.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\comyninu]ImagePath=[%PROGRAM_FILES%]\FE09771B-1439849289-11E4-A818-28D244D9DD0A\hnsk8FD5.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\cebowone]ImagePath=[%PROGRAM_FILES%]\00000000-1477824825-0000-0000-6C626D80703B\knsAA56.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\bubyhyme]ImagePath=[%PROGRAM_FILES%]\253F91CA-1477826521-11E6-B4F4-C85B765B91FA\knsyA183.tmpfs
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\nimehygo]ImagePath=[%PROGRAM_FILES%]\03000200-1434179727-0500-0006-000700080009\knsy8709.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\jitisoli]ImagePath=[%PROGRAM_FILES%]\3FF50A0A-1477805506-9688-69AC-101F74158924\knsyE243.tmpfs
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\sudyfofi]ImagePath=[%LOCAL_APPDATA%]\4B435451-1430692966-3037-4532-50465D311B50\cnss6C2A.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\jowysejo]ImagePath=[%PROGRAM_FILES%]\4C4C4544-1476118770-4810-804D-B7C04F515231\knsc5E3B.tmpfs
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\fotucumi]ImagePath=[%PROGRAM_FILES%]\35444335-1477808553-5336-5A37-D0BF9C89EE50\kns5C9F.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\zigipyro]ImagePath=[%LOCAL_APPDATA%]\39464E43-1477764180-5A32-315A-00269E09B15C\qnsrA16F.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\luwebyje]ImagePath=[%PROGRAM_FILES%]\39464E43-1477749947-5A32-315A-00269E09B15C\knsbC886.tmpfs
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\wigyxepo]ImagePath=[%PROGRAM_FILES%]\01F058AA-1477724886-CB11-BA7D-B1FAEF8004C1\knsw4A7F.tmpfs
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\rijufoze]ImagePath=[%PROGRAM_FILES%]\03DE0294-1466071301-0507-9D06-010700080009\hnsc9F32.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\dowidoly]ImagePath=[%PROGRAM_FILES%]\03DE0294-1466071301-0507-9D06-010700080009\jnss8164.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\vuvyjeve]ImagePath=[%PROGRAM_FILES%]\E49A4700-1477542096-1013-92C5-FCBB7EECD82A\kns9D1B.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\syhydubu]ImagePath=[%PROGRAM_FILES%]\4C4C4544-1474739890-5810-8030-C7C04F485731\kns14B5.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\zigipyro]ImagePath=[%LOCAL_APPDATA%]\00000000-1477226861-0000-0000-001A4D9311B4\qnss34A.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\lezopoco]ImagePath=[%PROGRAM_FILES%]\00000000-1477216013-0000-0000-001A4D9311B4\knsc2187.tmpfs
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\zogybuku]ImagePath=[%PROGRAM_FILES%]\E29844E1-1477032595-11E1-875E-31AA13D8F2CB\kns4A5A.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\zigipyro]ImagePath=[%LOCAL_APPDATA%]\7CDEB551-1477744831-AC0B-A8F1-DA5064ACA912\qnsp4F91.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\decirole]ImagePath=[%PROGRAM_FILES%]\7CDEB551-1477738448-AC0B-A8F1-DA5064ACA912\knsqD667.tmpfs
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\fozocowo]ImagePath=[%PROGRAM_FILES%]\00000000-1473907072-0000-0000-D43D7EE23FD0\kns6F38.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\dituliwi]ImagePath=[%PROGRAM_FILES%]\4C4C4544-1477588537-3910-8052-B8C04F564232\knskA379.tmpfs
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\gipyjohi]ImagePath=[%PROGRAM_FILES%]\EEA21140-1477580699-81F5-2D48-E03F49DDDE96\knsoE241.tmpfs
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\zigipyro]ImagePath=[%LOCAL_APPDATA%]\14CFDF05-1477344510-5B5F-5744-0DB720E27CDA\qnsx3D25.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\zigipyro]ImagePath=[%LOCAL_APPDATA%]\01AC0263-1477571529-CB11-A424-A47894D55D53\qnsr87E9.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\deqewicu]ImagePath=[%PROGRAM_FILES%]\01AC0263-1477549899-CB11-A424-A47894D55D53\knsqA867.tmpfs
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\gopibeko]ImagePath=[%LOCAL_APPDATA%]\800EE6EF-1440632827-E111-8024-B05992031838\snsuCB8C.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\puxuzico]ImagePath=[%PROGRAM_FILES%]\16ED66E0-1477476323-11DD-9D6C-AC220B27977A\knsx77E4.tmpfs
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\suwozume]ImagePath=[%PROGRAM_FILES%]\2C95AF4F-1477515492-E211-87F5-208984500E35\kns2B84.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\jomedyfy]ImagePath=[%PROGRAM_FILES%]\14CFDF05-1467230895-5B5F-5744-0DB720E27CDA\knsA994.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\nenukone]ImagePath=[%PROGRAM_FILES%]\35453035-1477469087-4239-3334-3834FFFFFFFF\knstA17A.tmpfs
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\bopihefi]ImagePath=[%PROGRAM_FILES%]\35453035-1477471577-4239-3334-3834FFFFFFFF\knsb4266.tmpfs
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\rijufoze]ImagePath=[%PROGRAM_FILES%]\4C4C4544-1470158962-3310-8046-B4C04F503332\hnsj5987.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\dowidoly]ImagePath=[%PROGRAM_FILES%]\4C4C4544-1470158962-3310-8046-B4C04F503332\jnso2980.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\qocokecu]ImagePath=[%PROGRAM_FILES%]\CE82D42B-1477235103-11E0-B632-A0C45F0E6EF5\knsq3EF1.tmpfs
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\dujypyjo]ImagePath=[%PROGRAM_FILES%]\967F14A0-1477452716-81E3-290F-0C54A50C0AB1\kns2633.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\nenukone]ImagePath=[%PROGRAM_FILES%]\03AA02FC-1477453415-0599-3606-750700080009\kns4671.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\zigipyro]ImagePath=[%LOCAL_APPDATA%]\A829086C-1477487502-11E4-A26A-F0761CA39A4C\qnsq291A.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\deqewicu]ImagePath=[%PROGRAM_FILES%]\A829086C-1477512656-11E4-A26A-F0761CA39A4C\knsj73F6.tmpfs
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\zigipyro]ImagePath=[%LOCAL_APPDATA%]\A829086C-1477525283-11E4-A26A-F0761CA39A4C\qnsj52A7.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\zigipyro]ImagePath=[%LOCAL_APPDATA%]\4C4C4544-1466035196-3910-8058-C4C04F573631\qnsh1637.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\rijufoze]ImagePath=[%PROGRAM_FILES%]\4C4C4544-1465326998-3910-8058-C4C04F573631\hnsm699E.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\dowidoly]ImagePath=[%PROGRAM_FILES%]\4C4C4544-1465326998-3910-8058-C4C04F573631\jnsx44AF.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\jopusiri]ImagePath=[%PROGRAM_FILES%]\52768508-1477347586-E211-B1D3-B888E3B2287A\knsv2682.tmpfs
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\copofiti]ImagePath=[%PROGRAM_FILES%]\B923F2D4-1477271400-11E3-BE7E-28E34789E930\knsx4C9A.tmpfs
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\qezigizy]ImagePath=[%PROGRAM_FILES%]\4C4C4544-1476366969-4610-8058-B1C04F483232\knsA49C.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\zigipyro]ImagePath=[%LOCAL_APPDATA%]\4C4C4544-1477352586-4610-8058-B1C04F483232\qnslF0D9.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\xydoliwu]ImagePath=[%PROGRAM_FILES%]\227C14C0-1476387466-11DD-9A51-F07959633931\knsqE0A5.tmpfs
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\punegudo]ImagePath=[%PROGRAM_FILES%]\361B2928-1477409860-E511-B27E-705A0FB99139\knscB80B.tmpfs
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\toniqobe]ImagePath=[%PROGRAM_FILES%]\706D07E4-1447041490-3044-BA19-4CEF8E00F02C\hnsr2338.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\pyzeqewe]ImagePath=[%PROGRAM_FILES%]\706D07E4-1447041490-3044-BA19-4CEF8E00F02C\jnss2328.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\delyfiji]ImagePath=[%LOCAL_APPDATA%]\706D07E4-1447025345-3044-BA19-4CEF8E00F02C\snsc2354.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\rusexojo]ImagePath=[%PROGRAM_FILES%]\038D0240-1476958198-05E9-3D06-100700080009\kns33EA.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\tyriwixo]ImagePath=[%PROGRAM_FILES%]\03000200-1477299194-0500-0006-000700080009\knsvA4CE.tmpfs
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\hynetoho]ImagePath=[%PROGRAM_FILES%]\4C4C4544-1476184543-5710-8039-B9C04F323253\kns197F.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\zigipyro]ImagePath=[%LOCAL_APPDATA%]\4C4C4544-1477319486-5710-8039-B9C04F323253\qnsp7A51.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\hiwiwico]ImagePath=[%PROGRAM_FILES%]\849D0D00-1476427783-11D3-8A65-2C56DCD24808\kns62C.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\zigipyro]ImagePath=[%LOCAL_APPDATA%]\849D0D00-1477263523-11D3-8A65-2C56DCD24808\qnsm11D0.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\zigipyro]ImagePath=[%LOCAL_APPDATA%]\1375DBE0-1477161796-11E5-BA06-305A3A0832E6\qnso2C8.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\notogevu]ImagePath=[%PROGRAM_FILES%]\1375DBE0-1477152478-11E5-BA06-305A3A0832E6\knsn9704.tmpfs
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\zigipyro]ImagePath=[%LOCAL_APPDATA%]\64B3C303-1476797034-4342-B08E-C80AA9CE1552\qnsp15EF.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\nyfifosi]ImagePath=[%PROGRAM_FILES%]\64B3C303-1476787723-4342-B08E-C80AA9CE1552\knshF642.tmpfs
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\bemexyhi]ImagePath=[%PROGRAM_FILES%]\4C4C4544-1477255414-5210-8058-B3C04F36354A\knssD501.tmpfs
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\mezovyru]ImagePath=[%PROGRAM_FILES%]\BF232720-1477136193-11E3-96D0-9C5C8E85EEDD\knsE0D1.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\xudefijy]ImagePath=[%PROGRAM_FILES%]\03DE0294-1475142632-052A-8A06-1D0700080009\knsE3BB.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\rodeqypu]ImagePath=[%PROGRAM_FILES%]\E4EBA72A-1477172119-3249-90B3-2C600C7C5572\knsdB924.tmpfs
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\lezopoco]ImagePath=[%PROGRAM_FILES%]\7984FA70-1477218046-81E4-3A42-086266DEFE55\knskC835.tmpfs
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\pepybumo]ImagePath=[%PROGRAM_FILES%]\BBBBBBBB-1477205927-BBBB-BBBB-D43D7EEAAE73\knsDCDA.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\cenyveno]ImagePath=[%PROGRAM_FILES%]\BBBBBBBB-1477205927-BBBB-BBBB-D43D7EEAAE73\knsF9EE.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\zigipyro]ImagePath=[%LOCAL_APPDATA%]\BBBBBBBB-1477260296-BBBB-BBBB-D43D7EEAAE73\qnsl3583.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\wotytuti]ImagePath=[%PROGRAM_FILES%]\00062B87-1476209202-0709-FFFF-AC220B567D5F\kns50C0.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\hupizofu]ImagePath=[%PROGRAM_FILES%]\3C2E2520-1473502987-11DD-B4DE-08606E45B17B\kns1368.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\rijufoze]ImagePath=[%PROGRAM_FILES%]\39B56000-1467214842-11E2-8C80-0861A7892400\hnsgC2F0.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\dowidoly]ImagePath=[%PROGRAM_FILES%]\39B56000-1467214842-11E2-8C80-0861A7892400\jnsl9D45.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\rijufoze]ImagePath=[%PROGRAM_FILES%]\B24004C4-1469283513-11E2-9F0C-E6446F200F00\hnsn8183.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\dowidoly]ImagePath=[%PROGRAM_FILES%]\B24004C4-1469283513-11E2-9F0C-E6446F200F00\jnsx65B7.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\roqenufe]ImagePath=[%PROGRAM_FILES%]\D3AB0800-1449312307-81E1-2000-5404A64FAE57\jnsi5D55.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\nolusyci]ImagePath=[%PROGRAM_FILES%]\D3AB0800-1449312307-81E1-2000-5404A64FAE57\knsn45AA.tmpfs
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\zutuzuni]ImagePath=[%PROGRAM_FILES%]\5D6B240D-1452903883-2D35-1B32-B4B52F2C9BDC\jnsfD063.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\wucotusy]ImagePath=[%PROGRAM_FILES%]\5D6B240D-1452903883-2D35-1B32-B4B52F2C9BDC\hnsuECCA.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\rowugoqo]ImagePath=[%LOCAL_APPDATA%]\5D6B240D-1452918464-2D35-1B32-B4B52F2C9BDC\snsb7367.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\cevupyse]ImagePath=[%PROGRAM_FILES%]\46364331-1477134842-3435-3736-3734FFFFFFFF\knsa5A09.tmpfs
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\zigipyro]ImagePath=[%LOCAL_APPDATA%]\03000200-1477139169-0500-0006-000700080009\qnsrBF1D.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\jumywyle]ImagePath=[%PROGRAM_FILES%]\03000200-1477117524-0500-0006-000700080009\knsaAE31.tmpfs
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\buweqoje]ImagePath=[%PROGRAM_FILES%]\8275C233-1476950636-F846-9C5C-F0617B779454\kns14B2.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\zigipyro]ImagePath=[%LOCAL_APPDATA%]\8275C233-1477072805-F846-9C5C-F0617B779454\qnskAA24.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\qykocisu]ImagePath=[%PROGRAM_FILES%]\03000200-1474010430-0500-0006-000700080009\knsBF80.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\fijovoje]ImagePath=[%PROGRAM_FILES%]\AA8DF300-1476903198-81E2-2ACA-4C72B90E6DE8\knsiA2B1.tmpfs
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\deqefove]ImagePath=[%PROGRAM_FILES%]\4C4C4544-1476820664-5810-8042-C4C04F594E31\kns6CB6.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\rudymexe]ImagePath=[%PROGRAM_FILES%]\03000200-1476983757-0500-0006-000700080009\knsl811A.tmpfs
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\kisozuhe]ImagePath=[%PROGRAM_FILES%]\4C4C4544-1476995241-3210-8032-C7C04F393332\knsc10AD.tmpfs
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\fijovoje]ImagePath=[%PROGRAM_FILES%]\7E50E710-1475000297-11E4-B57F-68F728374E8F\kns19E4.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\zigipyro]ImagePath=[%LOCAL_APPDATA%]\7E50E710-1476994889-11E4-B57F-68F728374E8F\qnstC97F.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\rogohoru]ImagePath=[%PROGRAM_FILES%]\F17B34DE-1457206518-E411-B2A0-1458D00C1F1E\knsD8A.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\fujerevo]ImagePath=[%PROGRAM_FILES%]\F17B34DE-1472492106-E411-B2A0-1458D00C1F1E\knsD3D.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\tygefyhy]ImagePath=[%PROGRAM_FILES%]\F17B34DE-1472492106-E411-B2A0-1458D00C1F1E\knsA36D.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\fijovoje]ImagePath=[%PROGRAM_FILES%]\F17B34DE-1472492106-E411-B2A0-1458D00C1F1E\kns3247.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\cetudeve]ImagePath=[%PROGRAM_FILES%]\F17B34DE-1472492106-E411-B2A0-1458D00C1F1E\knsEA3B.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\wucotusy]ImagePath=[%PROGRAM_FILES%]\F17B34DE-1457206518-E411-B2A0-1458D00C1F1E\hnsbB07F.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\rijufoze]ImagePath=[%PROGRAM_FILES%]\F17B34DE-1472492106-E411-B2A0-1458D00C1F1E\hnscA19C.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\dowidoly]ImagePath=[%PROGRAM_FILES%]\F17B34DE-1472492106-E411-B2A0-1458D00C1F1E\jnsz411C.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\dojygici]ImagePath=[%PROGRAM_FILES%]\F17B34DE-1457206518-E411-B2A0-1458D00C1F1E\jnsu79EC.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\zigipyro]ImagePath=[%LOCAL_APPDATA%]\4C4C4544-1456926149-4E10-8054-C4C04F304E31\qnsiC32.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\zutuzuni]ImagePath=[%PROGRAM_FILES%]\4C4C4544-1456851416-4E10-8054-C4C04F304E31\jnsqFBA0.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\wucotusy]ImagePath=[%PROGRAM_FILES%]\4C4C4544-1456851416-4E10-8054-C4C04F304E31\hnsm6EEE.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\zipifujo]ImagePath=[%PROGRAM_FILES%]\4C4C4544-1476980693-4310-805A-B3C04F433332\knsv4B5E.tmpfs
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\bokuhepe]ImagePath=[%PROGRAM_FILES%]\0FE6DCCB-1476877095-3403-02D7-305A3A4B5C6A\knswDA85.tmpfs
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\fijovoje]ImagePath=[%PROGRAM_FILES%]\5E88F2E9-1476905331-FE9C-245E-D0C89CFE245E\knsb2B28.tmpfs
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\qykocisu]ImagePath=[%PROGRAM_FILES%]\49B9724C-1476816555-1220-0727-005425000000\knsE2E3.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\kiqidetu]ImagePath=[%PROGRAM_FILES%]\FFFFFFFF-1447164148-FFFF-FFFF-FFFFFFFFFFFF\jnss147.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\gilefywi]ImagePath=[%PROGRAM_FILES%]\FFFFFFFF-1447164148-FFFF-FFFF-FFFFFFFFFFFF\hnsv14F.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\zigipyro]ImagePath=[%LOCAL_APPDATA%]\B5DC02FF-1476745843-11E3-9381-871DA20FF0FF\qnse4510.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\zigipyro]ImagePath=[%LOCAL_APPDATA%]\07691080-1476527259-815C-20E0-7C05078637F5\qnsbA971.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\ginozitu]ImagePath=[%PROGRAM_FILES%]\7C629D72-1476451244-433A-C09B-7824AFBC217D\knsuA83.tmpfs
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\juwypyru]ImagePath=[%PROGRAM_FILES%]\4C4C4544-1476003539-0010-8000-80C04F000000\kns1862.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\tetobepu]ImagePath=[%PROGRAM_FILES%]\4D776038-1476728083-1220-0222-063623000000\knsc9C83.tmpfs
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\lykogejy]ImagePath=[%PROGRAM_FILES%]\33444335-1476657783-4A34-5443-7446A085787F\knsaD737.tmpfs
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\futyhuri]ImagePath=[%PROGRAM_FILES%]\C7A0A2C5-1475934921-DB4D-9E79-F890858FC77D\knsb6F3C.tmpfs
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\zotydutu]ImagePath=[%PROGRAM_FILES%]\4C4C4544-1476694080-5310-8052-B5C04F313032\knszBE6C.tmpfs
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\zigipyro]ImagePath=[%LOCAL_APPDATA%]\4C4C4544-1476722957-5310-8052-B5C04F313032\qnsfE827.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\cimurypu]ImagePath=[%PROGRAM_FILES%]\8801D31C-1476108041-11DD-1E8C-6D990E2C5D29\kns1064.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\zigipyro]ImagePath=[%LOCAL_APPDATA%]\03000200-1460960211-0500-0006-000700080009\qnsc2F8C.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\wucotusy]ImagePath=[%PROGRAM_FILES%]\03000200-1458051751-0500-0006-000700080009\hnsu60D8.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\gerocyni]ImagePath=[%PROGRAM_FILES%]\03000200-1458051751-0500-0006-000700080009\jnsf4387.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\kewobofy]ImagePath=[%PROGRAM_FILES%]\8B212E7F-1476631968-E111-9F1A-DC0EA168BC1F\knsz4B2A.tmpfs
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\cemoqige]ImagePath=[%PROGRAM_FILES%]\03000200-1476537928-0500-0006-000700080009\knsd1C8A.tmpfs
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\tinoroko]ImagePath=[%PROGRAM_FILES%]\034B2859-1476389356-DB11-B2DA-0016D48AC46D\knsm61E9.tmpfs
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\rocufyky]ImagePath=[%PROGRAM_FILES%]\E87DCC7F-1460978581-E311-8BBA-F8A9639D0041\jnse3378.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\rijufoze]ImagePath=[%PROGRAM_FILES%]\E87DCC7F-1460978581-E311-8BBA-F8A9639D0041\hnsw5134.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\tinoroko]ImagePath=[%PROGRAM_FILES%]\03000200-1475786945-0500-0006-000700080009\knsDBE0.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\ryrojiry]ImagePath=[%PROGRAM_FILES%]\DD812666-1448529807-8B81-B580-00235467791F\hnspA249.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\pupivyhi]ImagePath=[%PROGRAM_FILES%]\DD812666-1448529807-8B81-B580-00235467791F\jnsp88FD.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\dokiduke]ImagePath=[%PROGRAM_FILES%]\DD812666-1448529807-8B81-B580-00235467791F\knsp7082.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\wucotusy]ImagePath=[%PROGRAM_FILES%]\03000200-1454573095-0500-0006-000700080009\hnsi2CCC.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\regusyfi]ImagePath=[%PROGRAM_FILES%]\E03CFB69-1476576775-DE11-BBA9-001E33C8B377\knswDCF5.tmpfs
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\zigipyro]ImagePath=[%LOCAL_APPDATA%]\9F26F937-1476634654-B540-B994-A51066D046DA\qnsh90F3.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\nitiguxe]ImagePath=[%PROGRAM_FILES%]\9F26F937-1476605764-B540-B994-A51066D046DA\knsy3EE3.tmpfs
  • [HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]dutoauto="[%PROGRAM_FILES%]\arnaud\interscholastic.exe"
  • [HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]rutoauto="[%PROGRAM_FILES%]\arnaud\surfaced.exe"
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\zigipyro]ImagePath=[%LOCAL_APPDATA%]\A829086C-1476538722-11E4-A26A-F0761CA39A4C\qnse83EE.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\gyjyguwi]ImagePath=[%PROGRAM_FILES%]\A829086C-1476527853-11E4-A26A-F0761CA39A4C\knsf87EE.tmpfs
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\voterepo]ImagePath=[%PROGRAM_FILES%]\6404B200-1475729584-11E2-8668-089E01580DE2\knsBDDB.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\popecuxy]ImagePath=[%PROGRAM_FILES%]\D835E980-1476528052-81E1-3E9E-C860000F25EA\knsrC488.tmpfs
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\wyhufibi]ImagePath=[%PROGRAM_FILES%]\D835E980-1476528052-81E1-3E9E-C860000F25EA\kns8C5D.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\niduvubo]ImagePath=[%PROGRAM_FILES%]\0A67F716-1435011004-B94C-A6DD-089E01B8B2FE\knscBA2.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\zigipyro]ImagePath=[%LOCAL_APPDATA%]\0A67F716-1453163765-B94C-A6DD-089E01B8B2FE\qnsq60EE.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\zedepory]ImagePath=[%APPDATA%]\0A67F716-1435011004-B94C-A6DD-089E01B8B2FE\hnsw4393.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\kysykiti]ImagePath=[%LOCAL_APPDATA%]\0A67F716-1435036812-B94C-A6DD-089E01B8B2FE\snsp17AF.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\zigipyro]ImagePath=[%LOCAL_APPDATA%]\2F088FD9-1451421917-5D4F-A707-A91B095048E5\qnsyB40E.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\xowodofy]ImagePath=[%PROGRAM_FILES%]\2F088FD9-1448163877-5D4F-A707-A91B095048E5\knsw7231.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\myfitedi]ImagePath=[%PROGRAM_FILES%]\3A8C0DE0-1476398884-11DD-BCE6-3497F6278559\knsm4919.tmpfs
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\zigipyro]ImagePath=[%LOCAL_APPDATA%]\4C4C4544-1470175681-3110-804A-C6C04F525A31\qnsnD75F.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\rijufoze]ImagePath=[%PROGRAM_FILES%]\4C4C4544-1470092201-3110-804A-C6C04F525A31\hnsi7236.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\dowidoly]ImagePath=[%PROGRAM_FILES%]\4C4C4544-1470092201-3110-804A-C6C04F525A31\jnsj5A09.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\zujewufi]ImagePath=[%PROGRAM_FILES%]\86EACD05-1471024608-E111-8F3D-DC0EA1AE5C79\knsCE87.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\jugutefu]ImagePath=[%PROGRAM_FILES%]\86EACD05-1471024608-E111-8F3D-DC0EA1AE5C79\knsAE3E.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\hynetoho]ImagePath=[%PROGRAM_FILES%]\86EACD05-1471024608-E111-8F3D-DC0EA1AE5C79\knsED8B.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\rijufoze]ImagePath=[%PROGRAM_FILES%]\CED46058-1469706056-D911-A5AF-0030D3001E09\hnsg21D8.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\dowidoly]ImagePath=[%PROGRAM_FILES%]\CED46058-1469706056-D911-A5AF-0030D3001E09\jnsd752B.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\cicikomo]ImagePath=[%PROGRAM_FILES%]\80FFA3DE-1475951865-D311-8547-00262D4A967D\kns2892.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\muhexibo]ImagePath=[%PROGRAM_FILES%]\00000000-1476214500-0000-0000-1C6F6536D0BE\knsD91E.tmp
  • [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]autoauto="[%PROGRAM_FILES%]\neatest\favourably.exe"
  • [HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]dutoauto="[%PROGRAM_FILES%]\neatest\debts.exe"
  • [HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]rutoauto="[%PROGRAM_FILES%]\neatest\favourably.exe"
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\zigipyro]ImagePath=[%LOCAL_APPDATA%]\D0C36514-1476265521-9D5F-9CF4-EFBEADDEEFBE\qnsw936.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\myxuceto]ImagePath=[%PROGRAM_FILES%]\D0C36514-1476162689-9D5F-9CF4-EFBEADDEEFBE\kns2E81.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\luzojowe]ImagePath=[%PROGRAM_FILES%]\8801D31C-1476108041-11DD-1E8C-6D990E2C5D29\kns94B3.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\dowykovi]ImagePath=[%PROGRAM_FILES%]\E0FB2940-1476348065-E011-B327-C592B6440307\knsd19CE.tmpfs
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\tiqezesu]ImagePath=[%PROGRAM_FILES%]\0BEE1940-1473090994-11D9-B3C3-C86000C35EC3\kns3664.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\dixysusu]ImagePath=[%PROGRAM_FILES%]\0BEE1940-1473090994-11D9-B3C3-C86000C35EC3\kns438B.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\zigipyro]ImagePath=[%LOCAL_APPDATA%]\4C4C4544-1476230119-3110-804D-B3C04F4A5631\qnssA75E.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\wucotusy]ImagePath=[%PROGRAM_FILES%]\4C4C4544-1457897883-2010-8020-A0C04F202020\hnsj7EBD.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\gerocyni]ImagePath=[%PROGRAM_FILES%]\4C4C4544-1457897883-2010-8020-A0C04F202020\jnsd6363.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\rijufoze]ImagePath=[%PROGRAM_FILES%]\1F8D0D20-1462298402-11B2-8000-DC9C02A73BD6\hnsmC19C.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\zizusyju]ImagePath=[%PROGRAM_FILES%]\82BE45A4-1449956540-DF11-A807-88AA1D58C258\hnsl81DE.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\zigipyro]ImagePath=[%LOCAL_APPDATA%]\82BE45A4-1459894758-DF11-A807-88AA1D58C258\qnsdD441.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\woforemu]ImagePath=[%LOCAL_APPDATA%]\82BE45A4-1449963893-DF11-A807-88AA1D58C258\snsm677C.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\rizyqibe]ImagePath=[%PROGRAM_FILES%]\82BE45A4-1449956540-DF11-A807-88AA1D58C258\jnsb61EE.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\ligegiji]ImagePath=[%PROGRAM_FILES%]\82BE45A4-1449956540-DF11-A807-88AA1D58C258\knspB2D5.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\rijufoze]ImagePath=[%PROGRAM_FILES%]\1E824896-1469096491-A03E-9D79-60A44C5BC270\hnseF5FC.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\dowidoly]ImagePath=[%PROGRAM_FILES%]\1E824896-1469096491-A03E-9D79-60A44C5BC270\jnseDB78.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\rijufoze]ImagePath=[%PROGRAM_FILES%]\8BCE2A55-1470372450-B50D-000E-ABE0C065018D\hnsmA73A.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\dowidoly]ImagePath=[%PROGRAM_FILES%]\8BCE2A55-1470372450-B50D-000E-ABE0C065018D\jnsrF7D7.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\zigipyro]ImagePath=[%LOCAL_APPDATA%]\F7686241-1476104779-FDEC-DDA5-1C75089FEEF2\qnsr88B1.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\pegityre]ImagePath=[%PROGRAM_FILES%]\F7686241-1476079644-FDEC-DDA5-1C75089FEEF2\knsx5D55.tmpfs
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\zutuzuni]ImagePath=[%PROGRAM_FILES%]\00000000-1452921606-0000-0000-00241DF628A6\jnsm8476.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\wucotusy]ImagePath=[%PROGRAM_FILES%]\00000000-1452921606-0000-0000-00241DF628A6\hnsrAA11.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\rowugoqo]ImagePath=[%LOCAL_APPDATA%]\00000000-1452941491-0000-0000-00241DF628A6\snsy7A70.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\lihegubi]ImagePath=[%PROGRAM_FILES%]\4C4C4544-1476048940-3510-8053-C4C04F4D5231\knseD139.tmpfs
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\zigipyro]ImagePath=[%LOCAL_APPDATA%]\DE1CD63F-1475597440-9A49-A02C-1C872CA50316\qnsk712A.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\cidysisi]ImagePath=[%PROGRAM_FILES%]\DE1CD63F-1475571994-9A49-A02C-1C872CA50316\knszD2E6.tmpfs
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\tigeryji]ImagePath=[%LOCAL_APPDATA%]\172B0620-1426013641-11D5-A17E-14DAE99369B2\cnsb3E4B.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\rowywexi]ImagePath=[%PROGRAM_FILES%]\E7CF9340-1475869450-11DE-89C0-002618A6D310\kns624C.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\rikyremu]ImagePath=[%PROGRAM_FILES%]\D3DC9CC8-1440664935-1220-0110-143446000000\knsc6FBF.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\jimocoso]ImagePath=[%PROGRAM_FILES%]\D3DC9CC8-1440664935-1220-0110-143446000000\jnsjFD80.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\vehoqebo]ImagePath=[%PROGRAM_FILES%]\ABDAEF40-1475856689-11E3-B477-3497F6926FBE\knsoBC79.tmpfs
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\zequxyri]ImagePath=[%PROGRAM_FILES%]\AEFDFEA3-1475839269-DF11-B9C0-0011D8A46686\knszAFA2.tmpfs
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\hyverumu]ImagePath=[%PROGRAM_FILES%]\7C49FC1B-1439498042-9242-B0F2-C4544458C5DF\jnsk80ED.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\gypovige]ImagePath=[%PROGRAM_FILES%]\A962756A-1449608503-DE11-A660-002622B47738\knsi7.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\woforemu]ImagePath=[%LOCAL_APPDATA%]\A962756A-1449612244-DE11-A660-002622B47738\snsc9A8A.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\roqenufe]ImagePath=[%PROGRAM_FILES%]\A962756A-1449608503-DE11-A660-002622B47738\jnsl1C24.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\nyneryxo]ImagePath=[%PROGRAM_FILES%]\A962756A-1449608503-DE11-A660-002622B47738\hnsr6A46.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\hidekoqe]ImagePath=[%LOCAL_APPDATA%]\A962756A-1449666450-DE11-A660-002622B47738\qnsbCBE7.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\guzodobi]ImagePath=[%PROGRAM_FILES%]\234D2060-1475703468-11DD-A873-0862662D6FEE\knst81D9.tmpfs
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\zigipyro]ImagePath=[%LOCAL_APPDATA%]\02B29798-1475796796-11E2-AC02-000CD32B2700\qnsb9EA1.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\xuvuzyzy]ImagePath=[%PROGRAM_FILES%]\02B29798-1475787483-11E2-AC02-000CD32B2700\knsg93B0.tmpfs
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\zigipyro]ImagePath=[%LOCAL_APPDATA%]\35D4757A-1469193454-2B38-F0BD-7F942A9AF2C3\qnsrAC57.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\rijufoze]ImagePath=[%PROGRAM_FILES%]\35D4757A-1469096293-2B38-F0BD-7F942A9AF2C3\hnsp657D.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\dowidoly]ImagePath=[%PROGRAM_FILES%]\35D4757A-1469096293-2B38-F0BD-7F942A9AF2C3\jnsf47FD.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\nekunyji]ImagePath=[%PROGRAM_FILES%]\4C4C4544-1475633278-4210-804D-C3C04F594E31\knsv9773.tmpfs
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\vijugoku]ImagePath=[%PROGRAM_FILES%]\03000200-1475647778-0500-0006-000700080009\knst6532.tmpfs
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\hurilugo]ImagePath=[%PROGRAM_FILES%]\0801BB27-1475122792-1219-3426-E3FB2F9200D3\knsp2FD2.tmpfs
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\lomuposo]ImagePath=[%PROGRAM_FILES%]\416A2971-1475414512-E011-8F36-1C7508680F17\knsk11FD.tmpfs
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\rodokidi]ImagePath=[%PROGRAM_FILES%]\E34F3500-1475506427-1015-B900-DCC7290C42B6\knseF115.tmpfs
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\cenomiry]ImagePath=[%PROGRAM_FILES%]\45443439-1475665020-3144-3739-4141FFFFFFFF\knsq5DA0.tmpfs
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\rowugoqo]ImagePath=[%LOCAL_APPDATA%]\4CCD46BF-1460146481-E011-9CDA-0050BF20DC86\snsrEFCD.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\rocufyky]ImagePath=[%PROGRAM_FILES%]\4CCD46BF-1460126572-E011-9CDA-0050BF20DC86\jnsbDBBF.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\rijufoze]ImagePath=[%PROGRAM_FILES%]\4CCD46BF-1460126572-E011-9CDA-0050BF20DC86\hnsbF8B3.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\dowidoly]ImagePath=[%PROGRAM_FILES%]\206566B7-1471003307-E211-B8E5-28D2440CBB16\jnsu8146.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\nuzukymy]ImagePath=[%PROGRAM_FILES%]\3E82F9F2-1475497196-E211-BDCD-5C9AD86AD9A5\knsk964.tmpfs
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\soxyputi]ImagePath=[%PROGRAM_FILES%]\03000200-1471702253-0500-0006-000700080009\kns1E88.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\rijufoze]ImagePath=[%PROGRAM_FILES%]\03000200-1471702253-0500-0006-000700080009\hnsb2E01.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\dowidoly]ImagePath=[%PROGRAM_FILES%]\03000200-1471702253-0500-0006-000700080009\jnsq1325.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\soxyputi]ImagePath=[%PROGRAM_FILES%]\40181859-1475499244-DE11-BD68-C25A7FC13A5A\knsh567E.tmpfs
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\rygicygo]ImagePath=[%PROGRAM_FILES%]\6F0D0D80-1475254260-81E2-2686-4C72B9819C51\knsa3782.tmpfs
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\rocufyky]ImagePath=[%PROGRAM_FILES%]\6F0D0D80-1462032807-81E2-2686-4C72B9819C51\jnso611E.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\rijufoze]ImagePath=[%PROGRAM_FILES%]\6F0D0D80-1462032807-81E2-2686-4C72B9819C51\hnsg6F7E.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\nineluzy]ImagePath=[%PROGRAM_FILES%]\4B435451-1475291092-4E32-4631-5404A675B7F2\kns7A7E.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\zigipyro]ImagePath=[%LOCAL_APPDATA%]\F0BA5DA5-1475350214-11DE-81D0-B9F76E39C498\qnsj3F1.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\lomuposo]ImagePath=[%PROGRAM_FILES%]\F0BA5DA5-1473649296-11DE-81D0-B9F76E39C498\kns69B1.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\digisudo]ImagePath=[%PROGRAM_FILES%]\2519F120-1449174263-11DD-A865-0862662D1F83\hnsg1B2F.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\rijufoze]ImagePath=[%PROGRAM_FILES%]\03000200-1471356898-0500-0006-000700080009\hnsqBF6C.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\dowidoly]ImagePath=[%PROGRAM_FILES%]\03000200-1471356898-0500-0006-000700080009\jnsv9272.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\zutuzuni]ImagePath=[%PROGRAM_FILES%]\BBCC0631-1452044914-0E4E-8816-3A0B800CD7E7\jnsd7FCF.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\wucotusy]ImagePath=[%PROGRAM_FILES%]\BBCC0631-1452044914-0E4E-8816-3A0B800CD7E7\hnssA50C.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\rijufoze]ImagePath=[%PROGRAM_FILES%]\FFFFFFFF-1469383271-FFFF-FFFF-FFFFFFFFFFFF\hnsr4BF3.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\dowidoly]ImagePath=[%PROGRAM_FILES%]\FFFFFFFF-1469383271-FFFF-FFFF-FFFFFFFFFFFF\jnscDE80.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\hyvutuki]ImagePath=[%PROGRAM_FILES%]\DAD9BAD7-1474803353-1DC3-3DF3-B4B52F2E1339\kns6CC8.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\lozipesy]ImagePath=[%PROGRAM_FILES%]\77BE0160-1444981609-11D5-9345-00248C4BC0F3\jnso274.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\dijojyvi]ImagePath=[%PROGRAM_FILES%]\77BE0160-1444981609-11D5-9345-00248C4BC0F3\hnsf276.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\bikemyme]ImagePath=[%PROGRAM_FILES%]\77BE0160-1444981609-11D5-9345-00248C4BC0F3\knsw26A.tmpfs
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\hyvutuki]ImagePath=[%PROGRAM_FILES%]\518C9001-1473215740-11CB-9286-B50A129D318D\kns6A1A.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\zigipyro]ImagePath=[%LOCAL_APPDATA%]\518C9001-1475223319-11CB-9286-B50A129D318D\qnshD3F1.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\zigipyro]ImagePath=[%LOCAL_APPDATA%]\B196687A-1475151178-E211-9594-38607704F3BF\qnsw1650.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\kytumiwi]ImagePath=[%PROGRAM_FILES%]\B196687A-1475065495-E211-9594-38607704F3BF\knsc6BBF.tmpfs
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\biguvuhe]ImagePath=[%APPDATA%]\39464E43-1424964698-4739-3353-00269E7A888A\nsj676E.tmpfs
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\pyvemoje]ImagePath=[%APPDATA%]\39464E43-1424964698-4739-3353-00269E7A888A\jnso98EF.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\ricinoci]ImagePath=[%PROGRAM_FILES%]\1AF763E3-1475060372-DD11-B7C0-000EA670053B\knszE6C7.tmpfs
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\zigipyro]ImagePath=[%LOCAL_APPDATA%]\6E611E74-1474820405-11E1-BC63-CCC8720100A0\qnsvF85.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\kumoxudi]ImagePath=[%PROGRAM_FILES%]\6E611E74-1474800467-11E1-BC63-CCC8720100A0\knspF43B.tmpfs
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\kixuxozo]ImagePath=[%PROGRAM_FILES%]\8D4A265F-1448170353-B866-3AD7-E99163758B46\knsq7E72.tmpfs
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\hypubyjy]ImagePath=[%PROGRAM_FILES%]\8D4A265F-1448170353-B866-3AD7-E99163758B46\jnsf97D1.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\kytumiwi]ImagePath=[%PROGRAM_FILES%]\0E901E80-1475064321-815C-3C1C-7C0507DC3C6C\knsd2184.tmpfs
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\wucotusy]ImagePath=[%PROGRAM_FILES%]\4C4C4544-1457806065-4210-805A-B6C04F355131\hnsm32F6.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\rowugoqo]ImagePath=[%LOCAL_APPDATA%]\4C4C4544-1457777400-4210-805A-B6C04F355131\snsm9FEA.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\gerocyni]ImagePath=[%PROGRAM_FILES%]\4C4C4544-1458071618-4210-805A-B6C04F355131\jnsu42CA.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\dojygici]ImagePath=[%PROGRAM_FILES%]\4C4C4544-1457806065-4210-805A-B6C04F355131\jnsrDF97.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\rijufoze]ImagePath=[%PROGRAM_FILES%]\E8BEED23-1463405709-DF11-8840-001125509412\hnsmB464.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\hypixyje]ImagePath=[%APPDATA%]\CDFC3450-1427038905-11B2-8000-64456E4E6973\nssDD21.tmpfs
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\hisemodo]ImagePath=[%PROGRAM_FILES%]\09F7431A-1474904042-DF11-8B14-8C736E7E3D7D\knsABDA.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\suguvefi]ImagePath=[%PROGRAM_FILES%]\03000200-1474903553-0500-0006-000700080009\knsd9D5.tmpfs
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\hisemodo]ImagePath=[%PROGRAM_FILES%]\1C886580-1467397963-11E2-8AE4-30F9EDD44E2B\kns16C2.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\gonelumi]ImagePath=[%PROGRAM_FILES%]\1C886580-1467397963-11E2-8AE4-30F9EDD44E2B\kns6278.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\rijufoze]ImagePath=[%PROGRAM_FILES%]\1C886580-1467397963-11E2-8AE4-30F9EDD44E2B\hnsrC221.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\dowidoly]ImagePath=[%PROGRAM_FILES%]\1C886580-1467397963-11E2-8AE4-30F9EDD44E2B\jnszA3C9.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\vucegogo]ImagePath=[%PROGRAM_FILES%]\BC2C3120-1475006302-11DD-8980-544249E7924A\knsp5BCB.tmpfs
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\legypyqy]ImagePath=[%PROGRAM_FILES%]\71AB8747-1474988590-1141-ADC2-54AB3A84DF9C\knsb2EB8.tmpfs
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\xytekyby]ImagePath=[%PROGRAM_FILES%]\4C4C4544-1472843796-3110-8056-B8C04F5A4A31\knsAF98.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\zigipyro]ImagePath=[%LOCAL_APPDATA%]\155732E0-1473420042-2AEC-3A7E-203040506099\qnsg5C06.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\legypyqy]ImagePath=[%PROGRAM_FILES%]\00000000-1473787168-0000-0000-001A4D7527DE\knsD2BB.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\pujecodo]ImagePath=[%PROGRAM_FILES%]\46F763F0-1473625214-DC11-AEC1-000C6EFF7219\kns81ED.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\zigipyro]ImagePath=[%LOCAL_APPDATA%]\46F763F0-1474012584-DC11-AEC1-000C6EFF7219\qnsk3852.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\zigipyro]ImagePath=[%LOCAL_APPDATA%]\00000000-1473158227-0000-0807-060504030201\qnspC64F.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\zigipyro]ImagePath=[%LOCAL_APPDATA%]\03DE0294-1474742801-05AE-C706-FB0700080009\qnsoB3F6.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\zigipyro]ImagePath=[%LOCAL_APPDATA%]\097225B0-1474805147-0F18-4385-9CB654C64D2C\qnsjF35.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\xytekyby]ImagePath=[%PROGRAM_FILES%]\097225B0-1472255154-0F18-4385-9CB654C64D2C\kns3ED8.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\vexunyje]ImagePath=[%PROGRAM_FILES%]\097225B0-1472255154-0F18-4385-9CB654C64D2C\kns596F.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\sykomidu]ImagePath=[%PROGRAM_FILES%]\097225B0-1472255154-0F18-4385-9CB654C64D2C\kns6366.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\nyvuzutu]ImagePath=[%PROGRAM_FILES%]\097225B0-1472255154-0F18-4385-9CB654C64D2C\knsDC26.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\lyqezepy]ImagePath=[%PROGRAM_FILES%]\097225B0-1472255154-0F18-4385-9CB654C64D2C\kns1AF3.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\fyponisy]ImagePath=[%PROGRAM_FILES%]\097225B0-1472255154-0F18-4385-9CB654C64D2C\kns7C52.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\fojotugo]ImagePath=[%PROGRAM_FILES%]\097225B0-1472255154-0F18-4385-9CB654C64D2C\kns1830.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\cykunopo]ImagePath=[%PROGRAM_FILES%]\097225B0-1472255154-0F18-4385-9CB654C64D2C\kns129D.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\ciquhuby]ImagePath=[%PROGRAM_FILES%]\097225B0-1472255154-0F18-4385-9CB654C64D2C\kns755A.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\beluxefo]ImagePath=[%PROGRAM_FILES%]\097225B0-1472255154-0F18-4385-9CB654C64D2C\kns1E07.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\zigipyro]ImagePath=[%LOCAL_APPDATA%]\1F8A3D80-1474931850-11D9-B61B-14DAE9E17AF8\qnsc92FE.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\rijufoze]ImagePath=[%PROGRAM_FILES%]\1F8A3D80-1468207919-11D9-B61B-14DAE9E17AF8\hnshBA5B.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\dowidoly]ImagePath=[%PROGRAM_FILES%]\1F8A3D80-1468207919-11D9-B61B-14DAE9E17AF8\jnshA073.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\jinekejo]ImagePath=[%PROGRAM_FILES%]\032B0290-1474850331-05AD-F706-EF0700080009\knstC93E.tmpfs
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\dykimizi]ImagePath=[%PROGRAM_FILES%]\AD29AFBC-1474824944-11E0-9437-A4C25F06E088\knsBB9D.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\zudepycy]ImagePath=[%PROGRAM_FILES%]\533DDD38-1474824377-11DF-BC04-62D6E1802B3D\kns999F.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\bufuzetu]ImagePath=[%PROGRAM_FILES%]\F5B5B18B-1474656029-11E4-A961-68F7287785C1\knsF982.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\tedetosu]ImagePath=[%PROGRAM_FILES%]\237225FE-1474652073-6DEB-35C4-188CCA2903F4\kns3497.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\ryrojiry]ImagePath=[%PROGRAM_FILES%]\A82EB7E1-1448734204-E411-AA1F-F0761C3207A2\hnsx646.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\liriwugo]ImagePath=[%PROGRAM_FILES%]\A82EB7E1-1446553640-E411-AA1F-F0761C3207A2\jnsrFA18.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\fimixyce]ImagePath=[%PROGRAM_FILES%]\A82EB7E1-1446553640-E411-AA1F-F0761C3207A2\hnsw12B3.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\wyhesete]ImagePath=[%APPDATA%]\00B99F7D-1431933724-E111-A388-001083FDAEC0\hnspFE0E.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\wucotusy]ImagePath=[%PROGRAM_FILES%]\03000200-1452081020-0500-0006-000700080009\hnsb1C9.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\zutuzuni]ImagePath=[%PROGRAM_FILES%]\03000200-1452081020-0500-0006-000700080009\jnszE507.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\zifotyki]ImagePath=[%PROGRAM_FILES%]\C0F7D61D-1447600751-E111-8BA6-BD36ACFC9A57\hnss1F26.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\xekejeci]ImagePath=[%PROGRAM_FILES%]\C0F7D61D-1447600751-E111-8BA6-BD36ACFC9A57\knsvF62D.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\xegifemu]ImagePath=[%PROGRAM_FILES%]\C0F7D61D-1448726030-E111-8BA6-BD36ACFC9A57\knseEE3F.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\ryrojiry]ImagePath=[%PROGRAM_FILES%]\C0F7D61D-1448726030-E111-8BA6-BD36ACFC9A57\hnsdCE96.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\qyrytoke]ImagePath=[%PROGRAM_FILES%]\C0F7D61D-1447600751-E111-8BA6-BD36ACFC9A57\jnss68F0.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\pupivyhi]ImagePath=[%PROGRAM_FILES%]\C0F7D61D-1448726030-E111-8BA6-BD36ACFC9A57\jnsd96D2.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\rijufoze]ImagePath=[%PROGRAM_FILES%]\6F359F60-1469768264-11E2-8B6D-30F9EDCC75FE\hnszE3B7.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\dowidoly]ImagePath=[%PROGRAM_FILES%]\6F359F60-1469768264-11E2-8B6D-30F9EDCC75FE\jnsv723F.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\rijufoze]ImagePath=[%PROGRAM_FILES%]\872E8901-1472397154-11CB-B51F-A51BB1B2A9FF\hnsn5E87.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\dowidoly]ImagePath=[%PROGRAM_FILES%]\872E8901-1472397154-11CB-B51F-A51BB1B2A9FF\jnsn4710.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\tedetosu]ImagePath=[%PROGRAM_FILES%]\3E477C00-1474813247-81E2-2AEA-7C0507A38B10\knse458D.tmpfs
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\mydonipe]ImagePath=[%PROGRAM_FILES%]\82F09028-1474786125-11E5-B27E-1C3947AE9DCD\knsl4F12.tmpfs
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\zigipyro]ImagePath=[%LOCAL_APPDATA%]\00000000-1474751864-0000-0000-6CF04988AF89\qnsuEABC.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\kovewixe]ImagePath=[%PROGRAM_FILES%]\4D0D1E36-1451497040-FFFF-FFFF-FFFFFFFFFFFF\knsnBC97.tmpfs
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\rijufoze]ImagePath=[%PROGRAM_FILES%]\1CDC74BD-1472435600-DF45-9020-418C7989A069\hnsy8967.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\dowidoly]ImagePath=[%PROGRAM_FILES%]\1CDC74BD-1472435600-DF45-9020-418C7989A069\jnse70BE.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\rejejecy]ImagePath=[%PROGRAM_FILES%]\8DEFCC80-1474679510-81E2-2969-74D02B0CD8FE\knst985B.tmpfs
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\dowidoly]ImagePath=[%PROGRAM_FILES%]\03000200-1472102692-0500-0006-000700080009\jnsb10C.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\rijufoze]ImagePath=[%PROGRAM_FILES%]\03000200-1472102692-0500-0006-000700080009\hnsb23C9.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\netulome]ImagePath=[%PROGRAM_FILES%]\C4F59000-1474563301-0000-0000-000000000000\knsaB6F4.tmpfs
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\netulome]ImagePath=[%PROGRAM_FILES%]\0000C563-1474468291-0701-FFFF-60A44C71D4F7\kns6F24.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\zigipyro]ImagePath=[%LOCAL_APPDATA%]\0000C563-1474573237-0701-FFFF-60A44C71D4F7\qnsqE860.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\zigipyro]ImagePath=[%LOCAL_APPDATA%]\39313543-1474574401-3034-3830-453731314531\qnsaC352.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\wiworuti]ImagePath=[%PROGRAM_FILES%]\39313543-1474507494-3034-3830-453731314531\znsd53A0.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\rugeqyxu]ImagePath=[%PROGRAM_FILES%]\B6730A0F-1474442260-5488-8447-58600F703882\knsh4765.tmpfs
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\kudicucu]ImagePath=[%PROGRAM_FILES%]\33444335-1474287373-4B34-4637-38EAA7F1C74B\kns8390.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\zigipyro]ImagePath=[%LOCAL_APPDATA%]\33444335-1474459934-4B34-4637-38EAA7F1C74B\qnsv530B.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\byfinono]ImagePath=[%PROGRAM_FILES%]\4C4C4544-1474388786-5310-805A-B5C04F505231\knst5A61.tmpfs
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\wykukuto]ImagePath=[%PROGRAM_FILES%]\AEFFD800-1472033606-1015-99DF-BAFD5081857F\kns29C6.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\wefukytu]ImagePath=[%PROGRAM_FILES%]\AEFFD800-1472033606-1015-99DF-BAFD5081857F\kns14D6.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\kudicucu]ImagePath=[%PROGRAM_FILES%]\AEFFD800-1472033606-1015-99DF-BAFD5081857F\kns1FCA.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\butumege]ImagePath=[%PROGRAM_FILES%]\AEFFD800-1472033606-1015-99DF-BAFD5081857F\kns597A.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\rijufoze]ImagePath=[%PROGRAM_FILES%]\AEFFD800-1472033606-1015-99DF-BAFD5081857F\hnsz5305.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\dowidoly]ImagePath=[%PROGRAM_FILES%]\AEFFD800-1472033606-1015-99DF-BAFD5081857F\jnsu3B21.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\zigipyro]ImagePath=[%LOCAL_APPDATA%]\4C4C4544-1474472008-4310-804B-B3C04F465731\qnsi6DD2.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\rikojure]ImagePath=[%PROGRAM_FILES%]\4C4C4544-1474457877-4310-804B-B3C04F465731\knsr4790.tmpfs
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\zigipyro]ImagePath=[%LOCAL_APPDATA%]\7AB9F7CF-1474313073-E211-8991-505054503030\qnsuC156.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\tepyqube]ImagePath=[%PROGRAM_FILES%]\24A4FD0D-1473848304-11E5-BA4C-507B9D3683B2\knsFF12.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\fymutoze]ImagePath=[%PROGRAM_FILES%]\4D81630C-1473799411-11E4-A11A-F68155065F06\kns951F.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\zigipyro]ImagePath=[%LOCAL_APPDATA%]\C5D3D460-1474241227-11DD-8481-00248CB7693E\qnsd474F.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\xytekyby]ImagePath=[%PROGRAM_FILES%]\C5D3D460-1474230134-11DD-8481-00248CB7693E\knsmD510.tmpfs
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\xytekyby]ImagePath=[%PROGRAM_FILES%]\8098039F-1474249052-E211-9E62-BE0E5D88F504\knszC122.tmpfs
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\nyqevufi]ImagePath=[%PROGRAM_FILES%]\DE770B6F-1474309601-C675-6DAF-1B8E9C81720C\knsaEFF2.tmpfs
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\zizusyju]ImagePath=[%PROGRAM_FILES%]\262B8C07-1450251429-4C4E-B443-1E0C5338803D\hnsn57BB.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\gunokudy]ImagePath=[%PROGRAM_FILES%]\262B8C07-1450251429-4C4E-B443-1E0C5338803D\knsh2E23.tmpfs
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\woziseru]ImagePath=[%PROGRAM_FILES%]\893607E0-1471076945-11E4-9DF3-60029261B7B7\kns1714.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\tegyduti]ImagePath=[%PROGRAM_FILES%]\893607E0-1471076945-11E4-9DF3-60029261B7B7\kns587B.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\solutevy]ImagePath=[%PROGRAM_FILES%]\893607E0-1471076945-11E4-9DF3-60029261B7B7\kns34A2.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\qyvuqohu]ImagePath=[%PROGRAM_FILES%]\893607E0-1471076945-11E4-9DF3-60029261B7B7\kns1EDD.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\nyqevufi]ImagePath=[%PROGRAM_FILES%]\893607E0-1471076945-11E4-9DF3-60029261B7B7\kns43A3.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\nivevehe]ImagePath=[%PROGRAM_FILES%]\893607E0-1471076945-11E4-9DF3-60029261B7B7\knsEF40.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\hohihyly]ImagePath=[%PROGRAM_FILES%]\893607E0-1471076945-11E4-9DF3-60029261B7B7\knsBE2F.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\hidolyjy]ImagePath=[%PROGRAM_FILES%]\893607E0-1471076945-11E4-9DF3-60029261B7B7\kns7F35.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\dymihehy]ImagePath=[%PROGRAM_FILES%]\893607E0-1471076945-11E4-9DF3-60029261B7B7\kns9E31.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\doxyrety]ImagePath=[%PROGRAM_FILES%]\893607E0-1471076945-11E4-9DF3-60029261B7B7\kns3462.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\byvebiki]ImagePath=[%PROGRAM_FILES%]\893607E0-1471076945-11E4-9DF3-60029261B7B7\kns5F4F.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\zigipyro]ImagePath=[%LOCAL_APPDATA%]\6F5C9EA0-1473428831-11D5-8B31-5404A6CFAC05\qnsxCCA3.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\rocufyky]ImagePath=[%PROGRAM_FILES%]\6F5C9EA0-1462350280-11D5-8B31-5404A6CFAC05\jnsv4433.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\rijufoze]ImagePath=[%PROGRAM_FILES%]\6F5C9EA0-1462350280-11D5-8B31-5404A6CFAC05\hnsa7A90.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\dowidoly]ImagePath=[%PROGRAM_FILES%]\6F5C9EA0-1464164818-11D5-8B31-5404A6CFAC05\jnsh35DF.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\rijufoze]ImagePath=[%PROGRAM_FILES%]\03000200-1460631176-0500-0006-000700080009\hnsgE9C2.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\xytekyby]ImagePath=[%PROGRAM_FILES%]\03DE0294-1474204007-05E1-C106-4E0700080009\knsg9D04.tmpfs
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\rijufoze]ImagePath=[%PROGRAM_FILES%]\79E1FE03-1470481499-639E-2E6B-705AB618EEF8\hnsn30FD.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\dowidoly]ImagePath=[%PROGRAM_FILES%]\79E1FE03-1470481499-639E-2E6B-705AB618EEF8\jnsiCCEC.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\zigipyro]ImagePath=[%LOCAL_APPDATA%]\D7D1BBA9-1474276940-EB11-25FF-C55B957BB13F\qnsy414.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\xytekyby]ImagePath=[%PROGRAM_FILES%]\D7D1BBA9-1474219688-EB11-25FF-C55B957BB13F\knsk5B74.tmpfs
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\nyqevufi]ImagePath=[%PROGRAM_FILES%]\30464E43-1474306829-5039-4C47-60EB69687F5A\knsgA9E7.tmpfs
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\wucotusy]ImagePath=[%PROGRAM_FILES%]\21E98180-1459183511-11DF-A1F4-DD008F068041\hnsp5C5.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\zigipyro]ImagePath=[%LOCAL_APPDATA%]\21E98180-1470423766-11DF-A1F4-DD008F068041\qnsk2616.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\gerocyni]ImagePath=[%PROGRAM_FILES%]\21E98180-1459183511-11DF-A1F4-DD008F068041\jnsmF038.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\zigipyro]ImagePath=[%LOCAL_APPDATA%]\37464E43-1474223994-3133-5035-001B24E3A38E\qnss65B8.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\xytekyby]ImagePath=[%PROGRAM_FILES%]\37464E43-1474203904-3133-5035-001B24E3A38E\knsq7E47.tmpfs
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\jiwizuqe]ImagePath=[%PROGRAM_FILES%]\D9BAB90C-1474196917-DE11-BE54-002622F4EF69\znsz78DC.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\dowidoly]ImagePath=[%PROGRAM_FILES%]\00000000-1471776575-0000-0000-D8CB8A51CF27\jnsiD0B.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\rijufoze]ImagePath=[%PROGRAM_FILES%]\00000000-1471776575-0000-0000-D8CB8A51CF27\hnsi2176.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\xytekyby]ImagePath=[%PROGRAM_FILES%]\001A2132-1474045210-DF11-B06A-A3448489D19A\knsx393C.tmpfs
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\xytekyby]ImagePath=[%PROGRAM_FILES%]\4C4C4544-1474019849-5710-8051-C4C04F505831\knsu4CBD.tmpfs
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\xytekyby]ImagePath=[%PROGRAM_FILES%]\4C4C4544-1473905888-3210-805A-B3C04F423932\knsCBF.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\zigipyro]ImagePath=[%LOCAL_APPDATA%]\4C4C4544-1474129975-3210-805A-B3C04F423932\qnsg2BE.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\xytekyby]ImagePath=[%PROGRAM_FILES%]\00000000-1471776575-0000-0000-D8CB8A51CF27\knsAC86.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\roduwuqi]ImagePath=[%PROGRAM_FILES%]\00000000-1471776575-0000-0000-D8CB8A51CF27\kns3BF8.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\qybivuqo]ImagePath=[%PROGRAM_FILES%]\00000000-1471776575-0000-0000-D8CB8A51CF27\kns9926.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\zigipyro]ImagePath=[%LOCAL_APPDATA%]\00000000-1474083078-0000-0000-D8CB8A51CF27\qnsdC52F.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\wesiciku]ImagePath=[%PROGRAM_FILES%]\256DCF00-1438365518-11D9-9930-F46D04ECE121\knsm11C1.tmpfs
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\hyverumu]ImagePath=[%PROGRAM_FILES%]\256DCF00-1438365518-11D9-9930-F46D04ECE121\jnsm3879.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\comyninu]ImagePath=[%PROGRAM_FILES%]\256DCF00-1438365518-11D9-9930-F46D04ECE121\hnsx4DC0.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\rijufoze]ImagePath=[%PROGRAM_FILES%]\9E594063-1462528058-11DE-85A8-24A4BF0C4097\hnsuF30A.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\noliwefy]ImagePath=[%PROGRAM_FILES%]\9E594063-1462528058-11DE-85A8-24A4BF0C4097\jnskD848.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\zutuzuni]ImagePath=[%PROGRAM_FILES%]\8641CAB5-1456028544-11E3-AD99-28D2442C80D9\jnss3C8C.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\wucotusy]ImagePath=[%PROGRAM_FILES%]\8641CAB5-1456028544-11E3-AD99-28D2442C80D9\hnsf5C99.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\xytekyby]ImagePath=[%PROGRAM_FILES%]\548E708A-1473350910-E211-A335-001320E77720\kns5909.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\xytekyby]ImagePath=[%PROGRAM_FILES%]\00000000-1474096057-0000-0000-D43D7E044BC5\knscAE14.tmpfs
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\xytekyby]ImagePath=[%PROGRAM_FILES%]\933BE3A1-1474032562-B34E-B47E-18C570DA788F\knsz2EDE.tmpfs
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\xytekyby]ImagePath=[%PROGRAM_FILES%]\2F680DB5-1474038115-581A-8A34-1E705A3C6969\knsnC1C0.tmpfs
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\zigipyro]ImagePath=[%LOCAL_APPDATA%]\00000000-1472567090-0000-0000-001FD0E935A0\qnsrB453.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\zigipyro]ImagePath=[%LOCAL_APPDATA%]\A6A75089-1474038908-4B19-9F7D-1BF3FC5115A9\qnstE2B0.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\xytekyby]ImagePath=[%PROGRAM_FILES%]\A6A75089-1473960123-4B19-9F7D-1BF3FC5115A9\knsq2C59.tmpfs
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\mujifide]ImagePath=[%PROGRAM_FILES%]\03000200-1472661396-0500-0006-000700080009\kns4B6E.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\fizixote]ImagePath=[%PROGRAM_FILES%]\03000200-1472661396-0500-0006-000700080009\kns413C.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\fiwyjevi]ImagePath=[%PROGRAM_FILES%]\03000200-1473777951-0500-0006-000700080009\kns32A6.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\totyseku]ImagePath=[%PROGRAM_FILES%]\0095A900-1440947853-E011-9212-1078D2C93304\hnsw8F7D.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\jimocoso]ImagePath=[%PROGRAM_FILES%]\0095A900-1440947853-E011-9212-1078D2C93304\jnst6D3E.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\fukotiqe]ImagePath=[%PROGRAM_FILES%]\0095A900-1440947853-E011-9212-1078D2C93304\knsn4666.tmpfs
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\nuqiwyky]ImagePath=[%PROGRAM_FILES%]\00000000-1469418284-0000-0000-1C6F65EDA94F\kns4F0C.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\rijufoze]ImagePath=[%PROGRAM_FILES%]\00000000-1469418284-0000-0000-1C6F65EDA94F\hnsxA419.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\dowidoly]ImagePath=[%PROGRAM_FILES%]\00000000-1469418284-0000-0000-1C6F65EDA94F\jnsc646E.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\xytekyby]ImagePath=[%PROGRAM_FILES%]\A21A4E12-1473484383-103C-5628-00235A82ED96\kns155C.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\xytekyby]ImagePath=[%PROGRAM_FILES%]\2F449324-1473966406-11DF-9B01-82C0590000D8\knswD735.tmpfs
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\mezefufe]ImagePath=[%PROGRAM_FILES%]\6A0B07E0-1453760409-11DF-A5B1-60EB698031A5\knsFB2.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\vecutefe]ImagePath=[%PROGRAM_FILES%]\6A0B07E0-1453760409-11DF-A5B1-60EB698031A5\kns95BC.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\fymutoze]ImagePath=[%PROGRAM_FILES%]\6A0B07E0-1453760409-11DF-A5B1-60EB698031A5\kns6E9F.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\zutuzuni]ImagePath=[%PROGRAM_FILES%]\6A0B07E0-1453760409-11DF-A5B1-60EB698031A5\jnslC6F7.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\wucotusy]ImagePath=[%PROGRAM_FILES%]\6A0B07E0-1453760409-11DF-A5B1-60EB698031A5\hnsvE429.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\xytekyby]ImagePath=[%PROGRAM_FILES%]\4C4C4544-1473138936-4310-805A-C7C04F364253\kns5AC5.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\vexinovy]ImagePath=[%PROGRAM_FILES%]\4C4C4544-1473138936-4310-805A-C7C04F364253\knsC814.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\roduwuqi]ImagePath=[%PROGRAM_FILES%]\4C4C4544-1473138936-4310-805A-C7C04F364253\kns3979.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\vexinovy]ImagePath=[%PROGRAM_FILES%]\7D314C2A-1473795397-11E5-ABD7-08E9F481D402\knsvFB96.tmpfs
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\zigipyro]ImagePath=[%LOCAL_APPDATA%]\03000200-1473888931-0500-0006-000700080009\qnsi5B8A.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\roduwuqi]ImagePath=[%PROGRAM_FILES%]\03000200-1473863304-0500-0006-000700080009\knsqDCEC.tmpfs
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\denesexu]ImagePath=[%PROGRAM_FILES%]\BF2C7900-1473750039-1017-9FD7-CA0DDF2DCEAB\knsh2573.tmpfs
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\jiwizuqe]ImagePath=[%PROGRAM_FILES%]\42E32756-1473190541-B4C2-D24E-F079596718FE\znseA747.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\gyfykudu]ImagePath=[%PROGRAM_FILES%]\8ACC8D13-1473665374-11E4-A961-68F7289A06D3\knsb8920.tmpfs
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\zigipyro]ImagePath=[%LOCAL_APPDATA%]\4C4C4544-1473696075-0010-8000-80C04F000000\qnsr9573.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\subukupe]ImagePath=[%PROGRAM_FILES%]\4C4C4544-1473668575-0010-8000-80C04F000000\knsi6F36.tmpfs
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\fyfukyhi]ImagePath=[%PROGRAM_FILES%]\233D8416-1473693094-8941-9B95-FED475704061\knsk9897.tmpfs
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\zigipyro]ImagePath=[%LOCAL_APPDATA%]\35444335-1471127503-4335-4B52-524336324435\qnsr3D8B.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\rijufoze]ImagePath=[%PROGRAM_FILES%]\35444335-1470555646-4335-4B52-524336324435\hnsq61B4.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\dowidoly]ImagePath=[%PROGRAM_FILES%]\35444335-1470555646-4335-4B52-524336324435\jnsy29AA.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\zigipyro]ImagePath=[%LOCAL_APPDATA%]\8196E79F-1473704270-CB11-A1F3-F31B89B8958C\qnswF51A.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\fyfukyhi]ImagePath=[%PROGRAM_FILES%]\8196E79F-1473693789-CB11-A1F3-F31B89B8958C\knstA942.tmpfs
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\rijufoze]ImagePath=[%PROGRAM_FILES%]\00000000-1467030064-0000-0000-1C6F655B254C\hnss1A94.tmp