Exterminate It! Antimalware

malpedia

Known threats:700,086 Last Update:March 16, 12:51

Testimonials

Just want to say that apparently your Exterminate It has worked like a charm. I was infected with a most troublesome Malware Trojan that kept replicating every time McAfee found, blocked and removed it... most annoying for several days... until Mr. Google led me to your door. What a God send!

With thanks,

Tom S.

MultiPlug- Registry Values List

This is a complete list of MultiPlug registry values collected by Exterminate It!. If you find any of these registry values on your PC, your computer is very likely to be infected with the MultiPlug - adware.

IMPORTANT: Because the registry is a core component of your Windows system, it is strongly recommended that you back up the registry before you begin deleting keys and values. For information about backing up the Windows registry, refer to the Registry Editor online help.
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\zigipyro]ImagePath=[%LOCAL_APPDATA%]\02B29798-1475796796-11E2-AC02-000CD32B2700\qnsb9EA1.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\xuvuzyzy]ImagePath=[%PROGRAM_FILES%]\02B29798-1475787483-11E2-AC02-000CD32B2700\knsg93B0.tmpfs
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\zigipyro]ImagePath=[%LOCAL_APPDATA%]\35D4757A-1469193454-2B38-F0BD-7F942A9AF2C3\qnsrAC57.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\rijufoze]ImagePath=[%PROGRAM_FILES%]\35D4757A-1469096293-2B38-F0BD-7F942A9AF2C3\hnsp657D.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\dowidoly]ImagePath=[%PROGRAM_FILES%]\35D4757A-1469096293-2B38-F0BD-7F942A9AF2C3\jnsf47FD.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\nekunyji]ImagePath=[%PROGRAM_FILES%]\4C4C4544-1475633278-4210-804D-C3C04F594E31\knsv9773.tmpfs
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\vijugoku]ImagePath=[%PROGRAM_FILES%]\03000200-1475647778-0500-0006-000700080009\knst6532.tmpfs
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\hurilugo]ImagePath=[%PROGRAM_FILES%]\0801BB27-1475122792-1219-3426-E3FB2F9200D3\knsp2FD2.tmpfs
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\lomuposo]ImagePath=[%PROGRAM_FILES%]\416A2971-1475414512-E011-8F36-1C7508680F17\knsk11FD.tmpfs
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\rodokidi]ImagePath=[%PROGRAM_FILES%]\E34F3500-1475506427-1015-B900-DCC7290C42B6\knseF115.tmpfs
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\cenomiry]ImagePath=[%PROGRAM_FILES%]\45443439-1475665020-3144-3739-4141FFFFFFFF\knsq5DA0.tmpfs
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\rowugoqo]ImagePath=[%LOCAL_APPDATA%]\4CCD46BF-1460146481-E011-9CDA-0050BF20DC86\snsrEFCD.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\rocufyky]ImagePath=[%PROGRAM_FILES%]\4CCD46BF-1460126572-E011-9CDA-0050BF20DC86\jnsbDBBF.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\rijufoze]ImagePath=[%PROGRAM_FILES%]\4CCD46BF-1460126572-E011-9CDA-0050BF20DC86\hnsbF8B3.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\dowidoly]ImagePath=[%PROGRAM_FILES%]\206566B7-1471003307-E211-B8E5-28D2440CBB16\jnsu8146.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\nuzukymy]ImagePath=[%PROGRAM_FILES%]\3E82F9F2-1475497196-E211-BDCD-5C9AD86AD9A5\knsk964.tmpfs
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\soxyputi]ImagePath=[%PROGRAM_FILES%]\03000200-1471702253-0500-0006-000700080009\kns1E88.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\rijufoze]ImagePath=[%PROGRAM_FILES%]\03000200-1471702253-0500-0006-000700080009\hnsb2E01.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\dowidoly]ImagePath=[%PROGRAM_FILES%]\03000200-1471702253-0500-0006-000700080009\jnsq1325.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\soxyputi]ImagePath=[%PROGRAM_FILES%]\40181859-1475499244-DE11-BD68-C25A7FC13A5A\knsh567E.tmpfs
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\rygicygo]ImagePath=[%PROGRAM_FILES%]\6F0D0D80-1475254260-81E2-2686-4C72B9819C51\knsa3782.tmpfs
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\rocufyky]ImagePath=[%PROGRAM_FILES%]\6F0D0D80-1462032807-81E2-2686-4C72B9819C51\jnso611E.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\rijufoze]ImagePath=[%PROGRAM_FILES%]\6F0D0D80-1462032807-81E2-2686-4C72B9819C51\hnsg6F7E.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\nineluzy]ImagePath=[%PROGRAM_FILES%]\4B435451-1475291092-4E32-4631-5404A675B7F2\kns7A7E.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\zigipyro]ImagePath=[%LOCAL_APPDATA%]\F0BA5DA5-1475350214-11DE-81D0-B9F76E39C498\qnsj3F1.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\lomuposo]ImagePath=[%PROGRAM_FILES%]\F0BA5DA5-1473649296-11DE-81D0-B9F76E39C498\kns69B1.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\digisudo]ImagePath=[%PROGRAM_FILES%]\2519F120-1449174263-11DD-A865-0862662D1F83\hnsg1B2F.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\rijufoze]ImagePath=[%PROGRAM_FILES%]\03000200-1471356898-0500-0006-000700080009\hnsqBF6C.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\dowidoly]ImagePath=[%PROGRAM_FILES%]\03000200-1471356898-0500-0006-000700080009\jnsv9272.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\zutuzuni]ImagePath=[%PROGRAM_FILES%]\BBCC0631-1452044914-0E4E-8816-3A0B800CD7E7\jnsd7FCF.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\wucotusy]ImagePath=[%PROGRAM_FILES%]\BBCC0631-1452044914-0E4E-8816-3A0B800CD7E7\hnssA50C.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\rijufoze]ImagePath=[%PROGRAM_FILES%]\FFFFFFFF-1469383271-FFFF-FFFF-FFFFFFFFFFFF\hnsr4BF3.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\dowidoly]ImagePath=[%PROGRAM_FILES%]\FFFFFFFF-1469383271-FFFF-FFFF-FFFFFFFFFFFF\jnscDE80.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\hyvutuki]ImagePath=[%PROGRAM_FILES%]\DAD9BAD7-1474803353-1DC3-3DF3-B4B52F2E1339\kns6CC8.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\lozipesy]ImagePath=[%PROGRAM_FILES%]\77BE0160-1444981609-11D5-9345-00248C4BC0F3\jnso274.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\dijojyvi]ImagePath=[%PROGRAM_FILES%]\77BE0160-1444981609-11D5-9345-00248C4BC0F3\hnsf276.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\bikemyme]ImagePath=[%PROGRAM_FILES%]\77BE0160-1444981609-11D5-9345-00248C4BC0F3\knsw26A.tmpfs
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\hyvutuki]ImagePath=[%PROGRAM_FILES%]\518C9001-1473215740-11CB-9286-B50A129D318D\kns6A1A.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\zigipyro]ImagePath=[%LOCAL_APPDATA%]\518C9001-1475223319-11CB-9286-B50A129D318D\qnshD3F1.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\zigipyro]ImagePath=[%LOCAL_APPDATA%]\B196687A-1475151178-E211-9594-38607704F3BF\qnsw1650.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\kytumiwi]ImagePath=[%PROGRAM_FILES%]\B196687A-1475065495-E211-9594-38607704F3BF\knsc6BBF.tmpfs
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\biguvuhe]ImagePath=[%APPDATA%]\39464E43-1424964698-4739-3353-00269E7A888A\nsj676E.tmpfs
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\pyvemoje]ImagePath=[%APPDATA%]\39464E43-1424964698-4739-3353-00269E7A888A\jnso98EF.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\ricinoci]ImagePath=[%PROGRAM_FILES%]\1AF763E3-1475060372-DD11-B7C0-000EA670053B\knszE6C7.tmpfs
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\zigipyro]ImagePath=[%LOCAL_APPDATA%]\6E611E74-1474820405-11E1-BC63-CCC8720100A0\qnsvF85.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\kumoxudi]ImagePath=[%PROGRAM_FILES%]\6E611E74-1474800467-11E1-BC63-CCC8720100A0\knspF43B.tmpfs
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\kixuxozo]ImagePath=[%PROGRAM_FILES%]\8D4A265F-1448170353-B866-3AD7-E99163758B46\knsq7E72.tmpfs
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\hypubyjy]ImagePath=[%PROGRAM_FILES%]\8D4A265F-1448170353-B866-3AD7-E99163758B46\jnsf97D1.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\kytumiwi]ImagePath=[%PROGRAM_FILES%]\0E901E80-1475064321-815C-3C1C-7C0507DC3C6C\knsd2184.tmpfs
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\wucotusy]ImagePath=[%PROGRAM_FILES%]\4C4C4544-1457806065-4210-805A-B6C04F355131\hnsm32F6.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\rowugoqo]ImagePath=[%LOCAL_APPDATA%]\4C4C4544-1457777400-4210-805A-B6C04F355131\snsm9FEA.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\gerocyni]ImagePath=[%PROGRAM_FILES%]\4C4C4544-1458071618-4210-805A-B6C04F355131\jnsu42CA.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\dojygici]ImagePath=[%PROGRAM_FILES%]\4C4C4544-1457806065-4210-805A-B6C04F355131\jnsrDF97.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\rijufoze]ImagePath=[%PROGRAM_FILES%]\E8BEED23-1463405709-DF11-8840-001125509412\hnsmB464.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\hypixyje]ImagePath=[%APPDATA%]\CDFC3450-1427038905-11B2-8000-64456E4E6973\nssDD21.tmpfs
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\hisemodo]ImagePath=[%PROGRAM_FILES%]\09F7431A-1474904042-DF11-8B14-8C736E7E3D7D\knsABDA.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\suguvefi]ImagePath=[%PROGRAM_FILES%]\03000200-1474903553-0500-0006-000700080009\knsd9D5.tmpfs
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\hisemodo]ImagePath=[%PROGRAM_FILES%]\1C886580-1467397963-11E2-8AE4-30F9EDD44E2B\kns16C2.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\gonelumi]ImagePath=[%PROGRAM_FILES%]\1C886580-1467397963-11E2-8AE4-30F9EDD44E2B\kns6278.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\rijufoze]ImagePath=[%PROGRAM_FILES%]\1C886580-1467397963-11E2-8AE4-30F9EDD44E2B\hnsrC221.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\dowidoly]ImagePath=[%PROGRAM_FILES%]\1C886580-1467397963-11E2-8AE4-30F9EDD44E2B\jnszA3C9.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\vucegogo]ImagePath=[%PROGRAM_FILES%]\BC2C3120-1475006302-11DD-8980-544249E7924A\knsp5BCB.tmpfs
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\legypyqy]ImagePath=[%PROGRAM_FILES%]\71AB8747-1474988590-1141-ADC2-54AB3A84DF9C\knsb2EB8.tmpfs
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\xytekyby]ImagePath=[%PROGRAM_FILES%]\4C4C4544-1472843796-3110-8056-B8C04F5A4A31\knsAF98.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\zigipyro]ImagePath=[%LOCAL_APPDATA%]\155732E0-1473420042-2AEC-3A7E-203040506099\qnsg5C06.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\legypyqy]ImagePath=[%PROGRAM_FILES%]\00000000-1473787168-0000-0000-001A4D7527DE\knsD2BB.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\pujecodo]ImagePath=[%PROGRAM_FILES%]\46F763F0-1473625214-DC11-AEC1-000C6EFF7219\kns81ED.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\zigipyro]ImagePath=[%LOCAL_APPDATA%]\46F763F0-1474012584-DC11-AEC1-000C6EFF7219\qnsk3852.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\zigipyro]ImagePath=[%LOCAL_APPDATA%]\00000000-1473158227-0000-0807-060504030201\qnspC64F.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\zigipyro]ImagePath=[%LOCAL_APPDATA%]\03DE0294-1474742801-05AE-C706-FB0700080009\qnsoB3F6.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\zigipyro]ImagePath=[%LOCAL_APPDATA%]\097225B0-1474805147-0F18-4385-9CB654C64D2C\qnsjF35.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\xytekyby]ImagePath=[%PROGRAM_FILES%]\097225B0-1472255154-0F18-4385-9CB654C64D2C\kns3ED8.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\vexunyje]ImagePath=[%PROGRAM_FILES%]\097225B0-1472255154-0F18-4385-9CB654C64D2C\kns596F.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\sykomidu]ImagePath=[%PROGRAM_FILES%]\097225B0-1472255154-0F18-4385-9CB654C64D2C\kns6366.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\nyvuzutu]ImagePath=[%PROGRAM_FILES%]\097225B0-1472255154-0F18-4385-9CB654C64D2C\knsDC26.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\lyqezepy]ImagePath=[%PROGRAM_FILES%]\097225B0-1472255154-0F18-4385-9CB654C64D2C\kns1AF3.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\fyponisy]ImagePath=[%PROGRAM_FILES%]\097225B0-1472255154-0F18-4385-9CB654C64D2C\kns7C52.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\fojotugo]ImagePath=[%PROGRAM_FILES%]\097225B0-1472255154-0F18-4385-9CB654C64D2C\kns1830.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\cykunopo]ImagePath=[%PROGRAM_FILES%]\097225B0-1472255154-0F18-4385-9CB654C64D2C\kns129D.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\ciquhuby]ImagePath=[%PROGRAM_FILES%]\097225B0-1472255154-0F18-4385-9CB654C64D2C\kns755A.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\beluxefo]ImagePath=[%PROGRAM_FILES%]\097225B0-1472255154-0F18-4385-9CB654C64D2C\kns1E07.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\zigipyro]ImagePath=[%LOCAL_APPDATA%]\1F8A3D80-1474931850-11D9-B61B-14DAE9E17AF8\qnsc92FE.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\rijufoze]ImagePath=[%PROGRAM_FILES%]\1F8A3D80-1468207919-11D9-B61B-14DAE9E17AF8\hnshBA5B.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\dowidoly]ImagePath=[%PROGRAM_FILES%]\1F8A3D80-1468207919-11D9-B61B-14DAE9E17AF8\jnshA073.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\jinekejo]ImagePath=[%PROGRAM_FILES%]\032B0290-1474850331-05AD-F706-EF0700080009\knstC93E.tmpfs
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\dykimizi]ImagePath=[%PROGRAM_FILES%]\AD29AFBC-1474824944-11E0-9437-A4C25F06E088\knsBB9D.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\zudepycy]ImagePath=[%PROGRAM_FILES%]\533DDD38-1474824377-11DF-BC04-62D6E1802B3D\kns999F.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\bufuzetu]ImagePath=[%PROGRAM_FILES%]\F5B5B18B-1474656029-11E4-A961-68F7287785C1\knsF982.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\tedetosu]ImagePath=[%PROGRAM_FILES%]\237225FE-1474652073-6DEB-35C4-188CCA2903F4\kns3497.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\ryrojiry]ImagePath=[%PROGRAM_FILES%]\A82EB7E1-1448734204-E411-AA1F-F0761C3207A2\hnsx646.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\liriwugo]ImagePath=[%PROGRAM_FILES%]\A82EB7E1-1446553640-E411-AA1F-F0761C3207A2\jnsrFA18.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\fimixyce]ImagePath=[%PROGRAM_FILES%]\A82EB7E1-1446553640-E411-AA1F-F0761C3207A2\hnsw12B3.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\wyhesete]ImagePath=[%APPDATA%]\00B99F7D-1431933724-E111-A388-001083FDAEC0\hnspFE0E.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\wucotusy]ImagePath=[%PROGRAM_FILES%]\03000200-1452081020-0500-0006-000700080009\hnsb1C9.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\zutuzuni]ImagePath=[%PROGRAM_FILES%]\03000200-1452081020-0500-0006-000700080009\jnszE507.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\zifotyki]ImagePath=[%PROGRAM_FILES%]\C0F7D61D-1447600751-E111-8BA6-BD36ACFC9A57\hnss1F26.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\xekejeci]ImagePath=[%PROGRAM_FILES%]\C0F7D61D-1447600751-E111-8BA6-BD36ACFC9A57\knsvF62D.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\xegifemu]ImagePath=[%PROGRAM_FILES%]\C0F7D61D-1448726030-E111-8BA6-BD36ACFC9A57\knseEE3F.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\ryrojiry]ImagePath=[%PROGRAM_FILES%]\C0F7D61D-1448726030-E111-8BA6-BD36ACFC9A57\hnsdCE96.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\qyrytoke]ImagePath=[%PROGRAM_FILES%]\C0F7D61D-1447600751-E111-8BA6-BD36ACFC9A57\jnss68F0.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\pupivyhi]ImagePath=[%PROGRAM_FILES%]\C0F7D61D-1448726030-E111-8BA6-BD36ACFC9A57\jnsd96D2.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\rijufoze]ImagePath=[%PROGRAM_FILES%]\6F359F60-1469768264-11E2-8B6D-30F9EDCC75FE\hnszE3B7.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\dowidoly]ImagePath=[%PROGRAM_FILES%]\6F359F60-1469768264-11E2-8B6D-30F9EDCC75FE\jnsv723F.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\rijufoze]ImagePath=[%PROGRAM_FILES%]\872E8901-1472397154-11CB-B51F-A51BB1B2A9FF\hnsn5E87.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\dowidoly]ImagePath=[%PROGRAM_FILES%]\872E8901-1472397154-11CB-B51F-A51BB1B2A9FF\jnsn4710.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\tedetosu]ImagePath=[%PROGRAM_FILES%]\3E477C00-1474813247-81E2-2AEA-7C0507A38B10\knse458D.tmpfs
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\mydonipe]ImagePath=[%PROGRAM_FILES%]\82F09028-1474786125-11E5-B27E-1C3947AE9DCD\knsl4F12.tmpfs
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\zigipyro]ImagePath=[%LOCAL_APPDATA%]\00000000-1474751864-0000-0000-6CF04988AF89\qnsuEABC.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\kovewixe]ImagePath=[%PROGRAM_FILES%]\4D0D1E36-1451497040-FFFF-FFFF-FFFFFFFFFFFF\knsnBC97.tmpfs
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\rijufoze]ImagePath=[%PROGRAM_FILES%]\1CDC74BD-1472435600-DF45-9020-418C7989A069\hnsy8967.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\dowidoly]ImagePath=[%PROGRAM_FILES%]\1CDC74BD-1472435600-DF45-9020-418C7989A069\jnse70BE.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\rejejecy]ImagePath=[%PROGRAM_FILES%]\8DEFCC80-1474679510-81E2-2969-74D02B0CD8FE\knst985B.tmpfs
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\dowidoly]ImagePath=[%PROGRAM_FILES%]\03000200-1472102692-0500-0006-000700080009\jnsb10C.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\rijufoze]ImagePath=[%PROGRAM_FILES%]\03000200-1472102692-0500-0006-000700080009\hnsb23C9.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\netulome]ImagePath=[%PROGRAM_FILES%]\C4F59000-1474563301-0000-0000-000000000000\knsaB6F4.tmpfs
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\netulome]ImagePath=[%PROGRAM_FILES%]\0000C563-1474468291-0701-FFFF-60A44C71D4F7\kns6F24.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\zigipyro]ImagePath=[%LOCAL_APPDATA%]\0000C563-1474573237-0701-FFFF-60A44C71D4F7\qnsqE860.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\zigipyro]ImagePath=[%LOCAL_APPDATA%]\39313543-1474574401-3034-3830-453731314531\qnsaC352.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\wiworuti]ImagePath=[%PROGRAM_FILES%]\39313543-1474507494-3034-3830-453731314531\znsd53A0.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\rugeqyxu]ImagePath=[%PROGRAM_FILES%]\B6730A0F-1474442260-5488-8447-58600F703882\knsh4765.tmpfs
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\kudicucu]ImagePath=[%PROGRAM_FILES%]\33444335-1474287373-4B34-4637-38EAA7F1C74B\kns8390.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\zigipyro]ImagePath=[%LOCAL_APPDATA%]\33444335-1474459934-4B34-4637-38EAA7F1C74B\qnsv530B.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\byfinono]ImagePath=[%PROGRAM_FILES%]\4C4C4544-1474388786-5310-805A-B5C04F505231\knst5A61.tmpfs
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\wykukuto]ImagePath=[%PROGRAM_FILES%]\AEFFD800-1472033606-1015-99DF-BAFD5081857F\kns29C6.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\wefukytu]ImagePath=[%PROGRAM_FILES%]\AEFFD800-1472033606-1015-99DF-BAFD5081857F\kns14D6.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\kudicucu]ImagePath=[%PROGRAM_FILES%]\AEFFD800-1472033606-1015-99DF-BAFD5081857F\kns1FCA.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\butumege]ImagePath=[%PROGRAM_FILES%]\AEFFD800-1472033606-1015-99DF-BAFD5081857F\kns597A.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\rijufoze]ImagePath=[%PROGRAM_FILES%]\AEFFD800-1472033606-1015-99DF-BAFD5081857F\hnsz5305.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\dowidoly]ImagePath=[%PROGRAM_FILES%]\AEFFD800-1472033606-1015-99DF-BAFD5081857F\jnsu3B21.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\zigipyro]ImagePath=[%LOCAL_APPDATA%]\4C4C4544-1474472008-4310-804B-B3C04F465731\qnsi6DD2.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\rikojure]ImagePath=[%PROGRAM_FILES%]\4C4C4544-1474457877-4310-804B-B3C04F465731\knsr4790.tmpfs
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\zigipyro]ImagePath=[%LOCAL_APPDATA%]\7AB9F7CF-1474313073-E211-8991-505054503030\qnsuC156.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\tepyqube]ImagePath=[%PROGRAM_FILES%]\24A4FD0D-1473848304-11E5-BA4C-507B9D3683B2\knsFF12.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\fymutoze]ImagePath=[%PROGRAM_FILES%]\4D81630C-1473799411-11E4-A11A-F68155065F06\kns951F.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\zigipyro]ImagePath=[%LOCAL_APPDATA%]\C5D3D460-1474241227-11DD-8481-00248CB7693E\qnsd474F.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\xytekyby]ImagePath=[%PROGRAM_FILES%]\C5D3D460-1474230134-11DD-8481-00248CB7693E\knsmD510.tmpfs
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\xytekyby]ImagePath=[%PROGRAM_FILES%]\8098039F-1474249052-E211-9E62-BE0E5D88F504\knszC122.tmpfs
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\nyqevufi]ImagePath=[%PROGRAM_FILES%]\DE770B6F-1474309601-C675-6DAF-1B8E9C81720C\knsaEFF2.tmpfs
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\zizusyju]ImagePath=[%PROGRAM_FILES%]\262B8C07-1450251429-4C4E-B443-1E0C5338803D\hnsn57BB.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\gunokudy]ImagePath=[%PROGRAM_FILES%]\262B8C07-1450251429-4C4E-B443-1E0C5338803D\knsh2E23.tmpfs
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\woziseru]ImagePath=[%PROGRAM_FILES%]\893607E0-1471076945-11E4-9DF3-60029261B7B7\kns1714.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\tegyduti]ImagePath=[%PROGRAM_FILES%]\893607E0-1471076945-11E4-9DF3-60029261B7B7\kns587B.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\solutevy]ImagePath=[%PROGRAM_FILES%]\893607E0-1471076945-11E4-9DF3-60029261B7B7\kns34A2.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\qyvuqohu]ImagePath=[%PROGRAM_FILES%]\893607E0-1471076945-11E4-9DF3-60029261B7B7\kns1EDD.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\nyqevufi]ImagePath=[%PROGRAM_FILES%]\893607E0-1471076945-11E4-9DF3-60029261B7B7\kns43A3.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\nivevehe]ImagePath=[%PROGRAM_FILES%]\893607E0-1471076945-11E4-9DF3-60029261B7B7\knsEF40.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\hohihyly]ImagePath=[%PROGRAM_FILES%]\893607E0-1471076945-11E4-9DF3-60029261B7B7\knsBE2F.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\hidolyjy]ImagePath=[%PROGRAM_FILES%]\893607E0-1471076945-11E4-9DF3-60029261B7B7\kns7F35.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\dymihehy]ImagePath=[%PROGRAM_FILES%]\893607E0-1471076945-11E4-9DF3-60029261B7B7\kns9E31.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\doxyrety]ImagePath=[%PROGRAM_FILES%]\893607E0-1471076945-11E4-9DF3-60029261B7B7\kns3462.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\byvebiki]ImagePath=[%PROGRAM_FILES%]\893607E0-1471076945-11E4-9DF3-60029261B7B7\kns5F4F.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\zigipyro]ImagePath=[%LOCAL_APPDATA%]\6F5C9EA0-1473428831-11D5-8B31-5404A6CFAC05\qnsxCCA3.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\rocufyky]ImagePath=[%PROGRAM_FILES%]\6F5C9EA0-1462350280-11D5-8B31-5404A6CFAC05\jnsv4433.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\rijufoze]ImagePath=[%PROGRAM_FILES%]\6F5C9EA0-1462350280-11D5-8B31-5404A6CFAC05\hnsa7A90.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\dowidoly]ImagePath=[%PROGRAM_FILES%]\6F5C9EA0-1464164818-11D5-8B31-5404A6CFAC05\jnsh35DF.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\rijufoze]ImagePath=[%PROGRAM_FILES%]\03000200-1460631176-0500-0006-000700080009\hnsgE9C2.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\xytekyby]ImagePath=[%PROGRAM_FILES%]\03DE0294-1474204007-05E1-C106-4E0700080009\knsg9D04.tmpfs
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\rijufoze]ImagePath=[%PROGRAM_FILES%]\79E1FE03-1470481499-639E-2E6B-705AB618EEF8\hnsn30FD.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\dowidoly]ImagePath=[%PROGRAM_FILES%]\79E1FE03-1470481499-639E-2E6B-705AB618EEF8\jnsiCCEC.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\zigipyro]ImagePath=[%LOCAL_APPDATA%]\D7D1BBA9-1474276940-EB11-25FF-C55B957BB13F\qnsy414.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\xytekyby]ImagePath=[%PROGRAM_FILES%]\D7D1BBA9-1474219688-EB11-25FF-C55B957BB13F\knsk5B74.tmpfs
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\nyqevufi]ImagePath=[%PROGRAM_FILES%]\30464E43-1474306829-5039-4C47-60EB69687F5A\knsgA9E7.tmpfs
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\wucotusy]ImagePath=[%PROGRAM_FILES%]\21E98180-1459183511-11DF-A1F4-DD008F068041\hnsp5C5.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\zigipyro]ImagePath=[%LOCAL_APPDATA%]\21E98180-1470423766-11DF-A1F4-DD008F068041\qnsk2616.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\gerocyni]ImagePath=[%PROGRAM_FILES%]\21E98180-1459183511-11DF-A1F4-DD008F068041\jnsmF038.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\zigipyro]ImagePath=[%LOCAL_APPDATA%]\37464E43-1474223994-3133-5035-001B24E3A38E\qnss65B8.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\xytekyby]ImagePath=[%PROGRAM_FILES%]\37464E43-1474203904-3133-5035-001B24E3A38E\knsq7E47.tmpfs
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\jiwizuqe]ImagePath=[%PROGRAM_FILES%]\D9BAB90C-1474196917-DE11-BE54-002622F4EF69\znsz78DC.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\dowidoly]ImagePath=[%PROGRAM_FILES%]\00000000-1471776575-0000-0000-D8CB8A51CF27\jnsiD0B.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\rijufoze]ImagePath=[%PROGRAM_FILES%]\00000000-1471776575-0000-0000-D8CB8A51CF27\hnsi2176.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\xytekyby]ImagePath=[%PROGRAM_FILES%]\001A2132-1474045210-DF11-B06A-A3448489D19A\knsx393C.tmpfs
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\xytekyby]ImagePath=[%PROGRAM_FILES%]\4C4C4544-1474019849-5710-8051-C4C04F505831\knsu4CBD.tmpfs
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\xytekyby]ImagePath=[%PROGRAM_FILES%]\4C4C4544-1473905888-3210-805A-B3C04F423932\knsCBF.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\zigipyro]ImagePath=[%LOCAL_APPDATA%]\4C4C4544-1474129975-3210-805A-B3C04F423932\qnsg2BE.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\xytekyby]ImagePath=[%PROGRAM_FILES%]\00000000-1471776575-0000-0000-D8CB8A51CF27\knsAC86.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\roduwuqi]ImagePath=[%PROGRAM_FILES%]\00000000-1471776575-0000-0000-D8CB8A51CF27\kns3BF8.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\qybivuqo]ImagePath=[%PROGRAM_FILES%]\00000000-1471776575-0000-0000-D8CB8A51CF27\kns9926.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\zigipyro]ImagePath=[%LOCAL_APPDATA%]\00000000-1474083078-0000-0000-D8CB8A51CF27\qnsdC52F.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\wesiciku]ImagePath=[%PROGRAM_FILES%]\256DCF00-1438365518-11D9-9930-F46D04ECE121\knsm11C1.tmpfs
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\hyverumu]ImagePath=[%PROGRAM_FILES%]\256DCF00-1438365518-11D9-9930-F46D04ECE121\jnsm3879.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\comyninu]ImagePath=[%PROGRAM_FILES%]\256DCF00-1438365518-11D9-9930-F46D04ECE121\hnsx4DC0.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\rijufoze]ImagePath=[%PROGRAM_FILES%]\9E594063-1462528058-11DE-85A8-24A4BF0C4097\hnsuF30A.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\noliwefy]ImagePath=[%PROGRAM_FILES%]\9E594063-1462528058-11DE-85A8-24A4BF0C4097\jnskD848.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\zutuzuni]ImagePath=[%PROGRAM_FILES%]\8641CAB5-1456028544-11E3-AD99-28D2442C80D9\jnss3C8C.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\wucotusy]ImagePath=[%PROGRAM_FILES%]\8641CAB5-1456028544-11E3-AD99-28D2442C80D9\hnsf5C99.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\xytekyby]ImagePath=[%PROGRAM_FILES%]\548E708A-1473350910-E211-A335-001320E77720\kns5909.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\xytekyby]ImagePath=[%PROGRAM_FILES%]\00000000-1474096057-0000-0000-D43D7E044BC5\knscAE14.tmpfs
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\xytekyby]ImagePath=[%PROGRAM_FILES%]\933BE3A1-1474032562-B34E-B47E-18C570DA788F\knsz2EDE.tmpfs
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\xytekyby]ImagePath=[%PROGRAM_FILES%]\2F680DB5-1474038115-581A-8A34-1E705A3C6969\knsnC1C0.tmpfs
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\zigipyro]ImagePath=[%LOCAL_APPDATA%]\00000000-1472567090-0000-0000-001FD0E935A0\qnsrB453.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\zigipyro]ImagePath=[%LOCAL_APPDATA%]\A6A75089-1474038908-4B19-9F7D-1BF3FC5115A9\qnstE2B0.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\xytekyby]ImagePath=[%PROGRAM_FILES%]\A6A75089-1473960123-4B19-9F7D-1BF3FC5115A9\knsq2C59.tmpfs
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\mujifide]ImagePath=[%PROGRAM_FILES%]\03000200-1472661396-0500-0006-000700080009\kns4B6E.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\fizixote]ImagePath=[%PROGRAM_FILES%]\03000200-1472661396-0500-0006-000700080009\kns413C.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\fiwyjevi]ImagePath=[%PROGRAM_FILES%]\03000200-1473777951-0500-0006-000700080009\kns32A6.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\totyseku]ImagePath=[%PROGRAM_FILES%]\0095A900-1440947853-E011-9212-1078D2C93304\hnsw8F7D.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\jimocoso]ImagePath=[%PROGRAM_FILES%]\0095A900-1440947853-E011-9212-1078D2C93304\jnst6D3E.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\fukotiqe]ImagePath=[%PROGRAM_FILES%]\0095A900-1440947853-E011-9212-1078D2C93304\knsn4666.tmpfs
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\nuqiwyky]ImagePath=[%PROGRAM_FILES%]\00000000-1469418284-0000-0000-1C6F65EDA94F\kns4F0C.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\rijufoze]ImagePath=[%PROGRAM_FILES%]\00000000-1469418284-0000-0000-1C6F65EDA94F\hnsxA419.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\dowidoly]ImagePath=[%PROGRAM_FILES%]\00000000-1469418284-0000-0000-1C6F65EDA94F\jnsc646E.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\xytekyby]ImagePath=[%PROGRAM_FILES%]\A21A4E12-1473484383-103C-5628-00235A82ED96\kns155C.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\xytekyby]ImagePath=[%PROGRAM_FILES%]\2F449324-1473966406-11DF-9B01-82C0590000D8\knswD735.tmpfs
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\mezefufe]ImagePath=[%PROGRAM_FILES%]\6A0B07E0-1453760409-11DF-A5B1-60EB698031A5\knsFB2.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\vecutefe]ImagePath=[%PROGRAM_FILES%]\6A0B07E0-1453760409-11DF-A5B1-60EB698031A5\kns95BC.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\fymutoze]ImagePath=[%PROGRAM_FILES%]\6A0B07E0-1453760409-11DF-A5B1-60EB698031A5\kns6E9F.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\zutuzuni]ImagePath=[%PROGRAM_FILES%]\6A0B07E0-1453760409-11DF-A5B1-60EB698031A5\jnslC6F7.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\wucotusy]ImagePath=[%PROGRAM_FILES%]\6A0B07E0-1453760409-11DF-A5B1-60EB698031A5\hnsvE429.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\xytekyby]ImagePath=[%PROGRAM_FILES%]\4C4C4544-1473138936-4310-805A-C7C04F364253\kns5AC5.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\vexinovy]ImagePath=[%PROGRAM_FILES%]\4C4C4544-1473138936-4310-805A-C7C04F364253\knsC814.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\roduwuqi]ImagePath=[%PROGRAM_FILES%]\4C4C4544-1473138936-4310-805A-C7C04F364253\kns3979.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\vexinovy]ImagePath=[%PROGRAM_FILES%]\7D314C2A-1473795397-11E5-ABD7-08E9F481D402\knsvFB96.tmpfs
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\zigipyro]ImagePath=[%LOCAL_APPDATA%]\03000200-1473888931-0500-0006-000700080009\qnsi5B8A.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\roduwuqi]ImagePath=[%PROGRAM_FILES%]\03000200-1473863304-0500-0006-000700080009\knsqDCEC.tmpfs
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\denesexu]ImagePath=[%PROGRAM_FILES%]\BF2C7900-1473750039-1017-9FD7-CA0DDF2DCEAB\knsh2573.tmpfs
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\jiwizuqe]ImagePath=[%PROGRAM_FILES%]\42E32756-1473190541-B4C2-D24E-F079596718FE\znseA747.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\gyfykudu]ImagePath=[%PROGRAM_FILES%]\8ACC8D13-1473665374-11E4-A961-68F7289A06D3\knsb8920.tmpfs
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\zigipyro]ImagePath=[%LOCAL_APPDATA%]\4C4C4544-1473696075-0010-8000-80C04F000000\qnsr9573.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\subukupe]ImagePath=[%PROGRAM_FILES%]\4C4C4544-1473668575-0010-8000-80C04F000000\knsi6F36.tmpfs
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\fyfukyhi]ImagePath=[%PROGRAM_FILES%]\233D8416-1473693094-8941-9B95-FED475704061\knsk9897.tmpfs
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\zigipyro]ImagePath=[%LOCAL_APPDATA%]\35444335-1471127503-4335-4B52-524336324435\qnsr3D8B.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\rijufoze]ImagePath=[%PROGRAM_FILES%]\35444335-1470555646-4335-4B52-524336324435\hnsq61B4.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\dowidoly]ImagePath=[%PROGRAM_FILES%]\35444335-1470555646-4335-4B52-524336324435\jnsy29AA.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\zigipyro]ImagePath=[%LOCAL_APPDATA%]\8196E79F-1473704270-CB11-A1F3-F31B89B8958C\qnswF51A.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\fyfukyhi]ImagePath=[%PROGRAM_FILES%]\8196E79F-1473693789-CB11-A1F3-F31B89B8958C\knstA942.tmpfs
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\rijufoze]ImagePath=[%PROGRAM_FILES%]\00000000-1467030064-0000-0000-1C6F655B254C\hnss1A94.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\dowidoly]ImagePath=[%PROGRAM_FILES%]\00000000-1467030064-0000-0000-1C6F655B254C\jnsxFA65.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\rijufoze]ImagePath=[%PROGRAM_FILES%]\FE3769C4-1471980757-C088-5F7B-047D7BFADE5A\hnsj9A6E.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\dowidoly]ImagePath=[%PROGRAM_FILES%]\FE3769C4-1471980757-C088-5F7B-047D7BFADE5A\jnse7E46.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\tosybepu]ImagePath=[%PROGRAM_FILES%]\D32B7552-1473354841-DF4B-9F2D-54AB3A0EDA9E\knsm4197.tmpfs
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\zigipyro]ImagePath=[%LOCAL_APPDATA%]\E264BAA6-1473539066-E211-A333-208984EE8659\qnsv7F8B.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\hidolyjy]ImagePath=[%PROGRAM_FILES%]\03000200-1471096681-0500-0006-000700080009\kns8A56.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\cewesibo]ImagePath=[%PROGRAM_FILES%]\03000200-1471096681-0500-0006-000700080009\kns84ED.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\rijufoze]ImagePath=[%PROGRAM_FILES%]\03000200-1471096681-0500-0006-000700080009\hnsa8C30.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\dowidoly]ImagePath=[%PROGRAM_FILES%]\03000200-1471096681-0500-0006-000700080009\jnsk6C6F.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\rijufoze]ImagePath=[%PROGRAM_FILES%]\4C4C4544-1471780040-5610-8050-B5C04F353632\hnsvA2A7.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\dowidoly]ImagePath=[%PROGRAM_FILES%]\4C4C4544-1471780040-5610-8050-B5C04F353632\jnsa8913.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\zumuqedu]ImagePath=[%PROGRAM_FILES%]\269B2E40-1473454467-0216-4428-C7A1A9C4F557\knsb52F.tmpfs
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\zigipyro]ImagePath=[%LOCAL_APPDATA%]\269B2E40-1473473928-0216-4428-C7A1A9C4F557\qnsb2991.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\zigipyro]ImagePath=[%LOCAL_APPDATA%]\DB6E9CE9-1468974717-11E3-9537-4AC45F06A03E\qnsyE976.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\digelepo]ImagePath=[%PROGRAM_FILES%]\03000200-1473430556-0500-0006-000700080009\knsa600.tmpfs
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\zigipyro]ImagePath=[%LOCAL_APPDATA%]\03000200-1473458413-0500-0006-000700080009\qnsg430A.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\nekibygo]ImagePath=[%PROGRAM_FILES%]\21CAEF49-1473431200-7CEB-2E0D-2C56DC7670E8\knsd107B.tmpfs
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\zigipyro]ImagePath=[%LOCAL_APPDATA%]\21CAEF49-1473441227-7CEB-2E0D-2C56DC7670E8\qnsl121B.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\fyhodupi]ImagePath=[%PROGRAM_FILES%]\169052C0-1473245199-11DD-80CD-3085A941DD8D\kns5B3B.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\zylixumy]ImagePath=[%PROGRAM_FILES%]\169052C0-1473245199-11DD-80CD-3085A941DD8D\kns5F74.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\zigipyro]ImagePath=[%LOCAL_APPDATA%]\B79E5A80-1473067302-81E3-2DAD-74D02BEA4C89\qnsr4CBD.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\dowidoly]ImagePath=[%PROGRAM_FILES%]\41414346-1465997021-3442-3546-4646FFFFFFFF\jnsc7FC.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\cihoqupe]ImagePath=[%PROGRAM_FILES%]\007BBFE6-1473164564-E011-AE6C-1078D2D3A1D4\kns371A.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\pidewuhi]ImagePath=[%PROGRAM_FILES%]\1F22386B-1473236845-FF9C-7211-2D954A13C4EA\kns6E5E.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\miwufete]ImagePath=[%PROGRAM_FILES%]\1F22386B-1473236845-FF9C-7211-2D954A13C4EA\kns4F5D.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\zigipyro]ImagePath=[%LOCAL_APPDATA%]\1F22386B-1473294849-FF9C-7211-2D954A13C4EA\qnsw6E5E.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\koriqito]ImagePath=[%PROGRAM_FILES%]\1F22386B-1473236845-FF9C-7211-2D954A13C4EA\knsl2E9D.tmpfs
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\wirotuso]ImagePath=[%PROGRAM_FILES%]\5F2B1E9B-1473416078-E111-9D69-B888E35BBE1E\knsr9C4.tmpfs
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\rijufoze]ImagePath=[%PROGRAM_FILES%]\34444335-1470566517-5131-4B47-8CDCD48A0FE2\hnsdB7F5.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\dowidoly]ImagePath=[%PROGRAM_FILES%]\34444335-1470566517-5131-4B47-8CDCD48A0FE2\jnsr8143.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\cihoqupe]ImagePath=[%PROGRAM_FILES%]\4C4C4544-1473167270-3310-8035-C4C04F334253\kns4D5.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\koriqito]ImagePath=[%PROGRAM_FILES%]\4C4C4544-1473167270-3310-8035-C4C04F334253\knsE7A3.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\cihoqupe]ImagePath=[%PROGRAM_FILES%]\80B2EDE8-1473282740-DF11-B0BB-1078D28C358A\knspDFEC.tmpfs
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\zigipyro]ImagePath=[%LOCAL_APPDATA%]\0053B976-1473216966-E011-B499-1078D2B5A2EC\qnsj38E3.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\cihoqupe]ImagePath=[%PROGRAM_FILES%]\0053B976-1473227648-E011-B499-1078D2B5A2EC\knsy6C12.tmpfs
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\zigipyro]ImagePath=[%LOCAL_APPDATA%]\A3D569C6-1456412612-11E3-AD7D-2AA25B602500\qnsg5096.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\zigipyro]ImagePath=[%LOCAL_APPDATA%]\00000000-1473209095-0000-0000-000000000000\qnsm4FA6.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\koriqito]ImagePath=[%PROGRAM_FILES%]\00000000-1473235715-0000-0000-000000000000\knsa2BB5.tmpfs
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\gozenuqe]ImagePath=[%PROGRAM_FILES%]\00000000-1473233516-0000-0000-000000000000\knsbC45E.tmpfs
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\sopujeqi]ImagePath=[%PROGRAM_FILES%]\466A7004-1473197273-E511-B27E-705A0FC39763\knsoD888.tmpfs
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\rijufoze]ImagePath=[%PROGRAM_FILES%]\032B0290-1471814511-0552-2C06-8F0700080009\hnsl29C3.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\dowidoly]ImagePath=[%PROGRAM_FILES%]\032B0290-1471814511-0552-2C06-8F0700080009\jnsnFAF2.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\zigipyro]ImagePath=[%LOCAL_APPDATA%]\00000000-1473166483-0000-0000-6CF049AF89C1\qnsb61B1.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\rijufoze]ImagePath=[%PROGRAM_FILES%]\00000000-1472214831-0000-0000-6CF049AF89C1\hnso519D.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\dowidoly]ImagePath=[%PROGRAM_FILES%]\00000000-1472214831-0000-0000-6CF049AF89C1\jnsdE977.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\rijufoze]ImagePath=[%PROGRAM_FILES%]\03000200-1472415780-0500-0006-000700080009\hnsz4D05.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\dowidoly]ImagePath=[%PROGRAM_FILES%]\03000200-1472415780-0500-0006-000700080009\jnsi2EFD.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\lehicewu]ImagePath=[%PROGRAM_FILES%]\1BCE7000-1442399610-11E0-890D-E89A8F447CBE\jnst4CCE.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\gyvixodu]ImagePath=[%PROGRAM_FILES%]\1BCE7000-1442399610-11E0-890D-E89A8F447CBE\hnst70C4.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\gygycopo]ImagePath=[%PROGRAM_FILES%]\1BCE7000-1442399610-11E0-890D-E89A8F447CBE\knsy2A79.tmpfs
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\cyruwibi]ImagePath=[%PROGRAM_FILES%]\1BCE7000-1459215547-11E0-890D-E89A8F447CBE\znsi5F19.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\zigipyro]ImagePath=[%LOCAL_APPDATA%]\B8E54A80-1473087390-1016-9E7F-CD091116FAE2\qnsi27A.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\rijufoze]ImagePath=[%PROGRAM_FILES%]\3591B232-1471973246-11E6-9D90-B03981EE1900\hnsw154A.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\dowidoly]ImagePath=[%PROGRAM_FILES%]\3591B232-1471973246-11E6-9D90-B03981EE1900\jnscC9D9.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\soposuqy]ImagePath=[%PROGRAM_FILES%]\03DE0294-1440176653-0569-B706-300700080009\knsm533F.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\jimocoso]ImagePath=[%PROGRAM_FILES%]\03DE0294-1440176653-0569-B706-300700080009\jnss20E9.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\fimevebo]ImagePath=[%PROGRAM_FILES%]\03DE0294-1440176653-0569-B706-300700080009\hnsz717C.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\dowidoly]ImagePath=[%PROGRAM_FILES%]\255B30EC-1472632235-2682-665E-A15ADA04559B\jnsuFB87.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\himucyxe]ImagePath=[%PROGRAM_FILES%]\35444335-1445863588-5232-365A-3CA82AB9409A\jnshCB3E.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\rijufoze]ImagePath=[%PROGRAM_FILES%]\F2E27036-1467555579-5CB3-DD2E-2C27D7BC07F2\hnsy6CEC.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\dowidoly]ImagePath=[%PROGRAM_FILES%]\F2E27036-1467555579-5CB3-DD2E-2C27D7BC07F2\jnsi55B2.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\rijufoze]ImagePath=[%PROGRAM_FILES%]\2025FBF3-1471610658-11DE-837F-104967018060\hnsoAB82.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\dowidoly]ImagePath=[%PROGRAM_FILES%]\2025FBF3-1471610658-11DE-837F-104967018060\jnso2043.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\zigipyro]ImagePath=[%LOCAL_APPDATA%]\36444335-1472824173-3230-594D-A08CFD2C7C2D\qnsq5978.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\rijufoze]ImagePath=[%PROGRAM_FILES%]\36444335-1472124324-3230-594D-A08CFD2C7C2D\hnsi5E7A.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\dowidoly]ImagePath=[%PROGRAM_FILES%]\36444335-1472124324-3230-594D-A08CFD2C7C2D\jnsp3DB2.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\rijufoze]ImagePath=[%PROGRAM_FILES%]\0F3902D4-1472320774-E411-A26A-5CB901B39BD3\hnshD3AE.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\dowidoly]ImagePath=[%PROGRAM_FILES%]\0F3902D4-1472320774-E411-A26A-5CB901B39BD3\jnscBB14.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\zigipyro]ImagePath=[%LOCAL_APPDATA%]\4C4C4544-1472324457-3210-8033-B3C04F433332\qnsg6134.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\rijufoze]ImagePath=[%PROGRAM_FILES%]\4C4C4544-1472271730-3210-8033-B3C04F433332\hnsaF84F.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\dowidoly]ImagePath=[%PROGRAM_FILES%]\4C4C4544-1472271730-3210-8033-B3C04F433332\jnsyB52A.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\zigipyro]ImagePath=[%LOCAL_APPDATA%]\03000200-1472577571-0500-0006-000700080009\qnsl8FBB.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\rijufoze]ImagePath=[%PROGRAM_FILES%]\03000200-1472593753-0500-0006-000700080009\hnsp1284.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\dowidoly]ImagePath=[%PROGRAM_FILES%]\03000200-1472593753-0500-0006-000700080009\jnsuF854.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\rizyqibe]ImagePath=[%PROGRAM_FILES%]\9591277B-1449766127-11DF-BBDA-FEC62B4F000F\jnst4C0.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\zizusyju]ImagePath=[%PROGRAM_FILES%]\9591277B-1449766127-11DF-BBDA-FEC62B4F000F\hnsj2128.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\kucegyhu]ImagePath=[%PROGRAM_FILES%]\9591277B-1449766127-11DF-BBDA-FEC62B4F000F\knst2EA1.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\keneqiwe]ImagePath=[%PROGRAM_FILES%]\9591277B-1449766127-11DF-BBDA-FEC62B4F000F\knsuB5F2.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\hidekoqe]ImagePath=[%LOCAL_APPDATA%]\9591277B-1450689568-11DF-BBDA-FEC62B4F000F\qnsk628C.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\zutuzuni]ImagePath=[%PROGRAM_FILES%]\4C4C4544-1455992630-4710-8052-C6C04F465031\jnss500C.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\wucotusy]ImagePath=[%PROGRAM_FILES%]\4C4C4544-1455992630-4710-8052-C6C04F465031\hnsi6746.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\zigipyro]ImagePath=[%LOCAL_APPDATA%]\1D4F4E60-1472596345-11DE-8125-78843CE381BE\qnsr456B.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\dowidoly]ImagePath=[%PROGRAM_FILES%]\1D4F4E60-1470628233-11DE-8125-78843CE381BE\jnss347A.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\hyverumu]ImagePath=[%PROGRAM_FILES%]\C0C3CE24-1438068281-E111-8D66-814477257072\jnsk12C7.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\gikypodo]ImagePath=[%PROGRAM_FILES%]\C0C3CE24-1438068281-E111-8D66-814477257072\knspBD90.tmpfs
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\comyninu]ImagePath=[%PROGRAM_FILES%]\C0C3CE24-1438068281-E111-8D66-814477257072\hnsq4EEF.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\zigipyro]ImagePath=[%LOCAL_APPDATA%]\03D40274-1472605543-0502-9E06-120700080009\qnso5664.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\rijufoze]ImagePath=[%PROGRAM_FILES%]\03D40274-1470836782-0502-9E06-120700080009\hnsp8367.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\dowidoly]ImagePath=[%PROGRAM_FILES%]\03D40274-1470836782-0502-9E06-120700080009\jnsj6431.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\zigipyro]ImagePath=[%LOCAL_APPDATA%]\03000200-1472427881-0500-0006-000700080009\qnsb7EF1.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\rijufoze]ImagePath=[%PROGRAM_FILES%]\03000200-1472413970-0500-0006-000700080009\hnsaFFA9.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\dowidoly]ImagePath=[%PROGRAM_FILES%]\03000200-1472413970-0500-0006-000700080009\jnsaE094.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\rijufoze]ImagePath=[%PROGRAM_FILES%]\0DB41312-1472412437-E411-B57F-68F728296D8B\hnswB0D.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\dowidoly]ImagePath=[%PROGRAM_FILES%]\0DB41312-1472412437-E411-B57F-68F728296D8B\jnsbC259.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\zigipyro]ImagePath=[%LOCAL_APPDATA%]\0DB41312-1472524988-E411-B57F-68F728296D8B\qnsf9B97.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\rijufoze]ImagePath=[%PROGRAM_FILES%]\C0D7CCE6-1472431486-E011-8340-00266CA3CD71\hnsr39AF.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\dowidoly]ImagePath=[%PROGRAM_FILES%]\C0D7CCE6-1472431486-E011-8340-00266CA3CD71\jnsdF1B8.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\zigipyro]ImagePath=[%LOCAL_APPDATA%]\FFFFFFFF-1472565045-FFFF-FFFF-FFFFFFFFFFFF\qnsvD2F9.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\zigipyro]ImagePath=[%LOCAL_APPDATA%]\00000000-1472553312-0000-0000-902B34EBC186\qnsq14AA.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\rijufoze]ImagePath=[%PROGRAM_FILES%]\77AE5AD5-1470627488-5405-F12F-3A7564DDB911\hnsc9A7A.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\dowidoly]ImagePath=[%PROGRAM_FILES%]\77AE5AD5-1470627488-5405-F12F-3A7564DDB911\jnsj37C7.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\zigipyro]ImagePath=[%LOCAL_APPDATA%]\4C4C4544-1472427109-3410-8047-B1C04F564232\qnsfB91D.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\rijufoze]ImagePath=[%PROGRAM_FILES%]\4C4C4544-1472429859-3410-8047-B1C04F564232\hnsjB4C1.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\dowidoly]ImagePath=[%PROGRAM_FILES%]\4C4C4544-1472429859-3410-8047-B1C04F564232\jnsf9F34.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\rijufoze]ImagePath=[%PROGRAM_FILES%]\55C2D590-1472500685-684A-8473-30C11D7F00C3\hnsy4444.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\dowidoly]ImagePath=[%PROGRAM_FILES%]\55C2D590-1472500685-684A-8473-30C11D7F00C3\jnsp2DFC.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\zigipyro]ImagePath=[%LOCAL_APPDATA%]\4C4C4544-1472552695-5010-8057-B1C04F4D5431\qnsq5F9E.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\rijufoze]ImagePath=[%PROGRAM_FILES%]\4C4C4544-1472444171-5010-8057-B1C04F4D5431\hnsu7E32.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\dowidoly]ImagePath=[%PROGRAM_FILES%]\4C4C4544-1472444171-5010-8057-B1C04F4D5431\jnsc388D.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\qysemimo]ImagePath=[%PROGRAM_FILES%]\63303165-1451344608-6439-3036-705AB62F6B62\knsq2F4A.tmpfs
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\rijufoze]ImagePath=[%PROGRAM_FILES%]\FFFFFFFF-1471453206-FFFF-FFFF-FFFFFFFFFFFF\hnsmE7D0.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\dowidoly]ImagePath=[%PROGRAM_FILES%]\FFFFFFFF-1471453206-FFFF-FFFF-FFFFFFFFFFFF\jnscCA03.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\zigipyro]ImagePath=[%LOCAL_APPDATA%]\50A59F31-1472576528-E311-A96A-201A0639CF0D\qnsm8EAA.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\rijufoze]ImagePath=[%PROGRAM_FILES%]\50A59F31-1472392147-E311-A96A-201A0639CF0D\hnsh50C6.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\dowidoly]ImagePath=[%PROGRAM_FILES%]\50A59F31-1472392147-E311-A96A-201A0639CF0D\jnsc3624.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\rijufoze]ImagePath=[%PROGRAM_FILES%]\DDA66D40-1472519090-E411-A26A-5CB901F8C9AD\hnsn35AC.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\dowidoly]ImagePath=[%PROGRAM_FILES%]\DDA66D40-1472519090-E411-A26A-5CB901F8C9AD\jnskEEDE.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\zigipyro]ImagePath=[%LOCAL_APPDATA%]\0DB41312-1472513282-E411-B57F-68F728296D8B\qnsw6930.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\rijufoze]ImagePath=[%PROGRAM_FILES%]\03000200-1471875659-0500-0006-000700080009\hnsu60F6.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\dowidoly]ImagePath=[%PROGRAM_FILES%]\03000200-1471875659-0500-0006-000700080009\jnsj2CB6.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\zigipyro]ImagePath=[%LOCAL_APPDATA%]\03000200-1472400892-0500-0006-000700080009\qnsh77F.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\dowidoly]ImagePath=[%PROGRAM_FILES%]\57F146C0-1472484771-11B2-8000-A1C44AD44016\jnsfB9E1.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\zigipyro]ImagePath=[%LOCAL_APPDATA%]\4C4C4544-1472467377-5210-8035-B1C04F345931\qnsi3D02.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\rijufoze]ImagePath=[%PROGRAM_FILES%]\4C4C4544-1472447387-5210-8035-B1C04F345931\hnswD08C.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\dowidoly]ImagePath=[%PROGRAM_FILES%]\4C4C4544-1472447387-5210-8035-B1C04F345931\jnswAD33.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\zigipyro]ImagePath=[%LOCAL_APPDATA%]\00000000-1472463498-0000-0000-D43D7E2A0B9D\qnsmE36E.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\rijufoze]ImagePath=[%PROGRAM_FILES%]\1E006280-1472400588-AC01-6E0A-0023548A94EE\hnso6F5C.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\dowidoly]ImagePath=[%PROGRAM_FILES%]\1E006280-1472400588-AC01-6E0A-0023548A94EE\jnse5A17.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\rijufoze]ImagePath=[%PROGRAM_FILES%]\4C4C4544-1472407545-3510-8034-C7C04F58334A\hnst2FD.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\zigipyro]ImagePath=[%LOCAL_APPDATA%]\4C4C4544-1472422187-3510-8034-C7C04F58334A\qnsu953C.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\dowidoly]ImagePath=[%PROGRAM_FILES%]\4C4C4544-1472407545-3510-8034-C7C04F58334A\jnspEB9C.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\zigipyro]ImagePath=[%LOCAL_APPDATA%]\03000200-1472393622-0500-0006-000700080009\qnsk1E30.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\rijufoze]ImagePath=[%PROGRAM_FILES%]\00000011-1472398607-0000-0000-E03F49CFF163\hnsi8C51.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\dowidoly]ImagePath=[%PROGRAM_FILES%]\00000011-1472398607-0000-0000-E03F49CFF163\jnsd5CF7.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\zigipyro]ImagePath=[%LOCAL_APPDATA%]\50A59F31-1472415222-E311-A96A-201A0639CF0D\qnsr984B.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\zigipyro]ImagePath=[%LOCAL_APPDATA%]\D7E3CEA0-1472401812-11E0-8699-14DAE92CEAA8\qnssB78E.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\wucotusy]ImagePath=[%PROGRAM_FILES%]\D7E3CEA0-1458241021-11E0-8699-14DAE92CEAA8\hnsm5E44.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\rowugoqo]ImagePath=[%LOCAL_APPDATA%]\D7E3CEA0-1458252032-11E0-8699-14DAE92CEAA8\snsx37DF.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\gerocyni]ImagePath=[%PROGRAM_FILES%]\D7E3CEA0-1458241021-11E0-8699-14DAE92CEAA8\jnsh226B.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\sysenyfo]ImagePath=[%APPDATA%]\2DA24F80-1433487791-81E2-2C2C-E840F2D7DA53\nsqB2A5.tmpfs
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\cybusyro]ImagePath=[%APPDATA%]\2DA24F80-1433487791-81E2-2C2C-E840F2D7DA53\jnslE39A.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\zigipyro]ImagePath=[%LOCAL_APPDATA%]\D52FE2DE-1472308990-064F-9555-2539DE7E8A57\qnsgC142.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\rijufoze]ImagePath=[%PROGRAM_FILES%]\D52FE2DE-1472303579-064F-9555-2539DE7E8A57\hnsk5242.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\dowidoly]ImagePath=[%PROGRAM_FILES%]\D52FE2DE-1472303579-064F-9555-2539DE7E8A57\jnsw3C87.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\zigipyro]ImagePath=[%LOCAL_APPDATA%]\820252BA-1471877086-E411-85C7-F0761CC07C14\qnsgE0CE.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\rijufoze]ImagePath=[%PROGRAM_FILES%]\820252BA-1471885235-E411-85C7-F0761CC07C14\hnse3FCC.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\dowidoly]ImagePath=[%PROGRAM_FILES%]\820252BA-1471885235-E411-85C7-F0761CC07C14\jnsa2A8D.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\rijufoze]ImagePath=[%PROGRAM_FILES%]\03000200-1471522982-0500-0006-000700080009\hnsuF086.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\dowidoly]ImagePath=[%PROGRAM_FILES%]\03000200-1471522982-0500-0006-000700080009\jnsdE406.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\rijufoze]ImagePath=[%PROGRAM_FILES%]\2BD098ED-1472090019-E411-B2A0-3464A97CA6AA\hnsrC79C.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\dowidoly]ImagePath=[%PROGRAM_FILES%]\2BD098ED-1472090019-E411-B2A0-3464A97CA6AA\jnsuAAAC.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\zigipyro]ImagePath=[%LOCAL_APPDATA%]\4C4C4544-1472308880-3810-804E-B5C04F435231\qnsuD6E2.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\rijufoze]ImagePath=[%PROGRAM_FILES%]\4C4C4544-1472300955-3810-804E-B5C04F435231\hnseE6B3.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\dowidoly]ImagePath=[%PROGRAM_FILES%]\4C4C4544-1472300955-3810-804E-B5C04F435231\jnseCE86.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\rijufoze]ImagePath=[%PROGRAM_FILES%]\4C4C4544-1471595201-4E10-8047-B7C04F4A5131\hnscBFFE.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\dowidoly]ImagePath=[%PROGRAM_FILES%]\4C4C4544-1471595201-4E10-8047-B7C04F4A5131\jnsmA6D7.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\rijufoze]ImagePath=[%PROGRAM_FILES%]\4945244B-1472286603-4F44-8595-089E01E61688\hnsxEC37.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\dowidoly]ImagePath=[%PROGRAM_FILES%]\4945244B-1472286603-4F44-8595-089E01E61688\jnsnD6F2.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\rijufoze]ImagePath=[%PROGRAM_FILES%]\60422FFE-1464347352-DF11-9AD6-00266C551328\hnst80C5.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\rijufoze]ImagePath=[%PROGRAM_FILES%]\4C4C4544-1472205318-3510-8034-C7C04F58334A\hnso63C6.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\dowidoly]ImagePath=[%PROGRAM_FILES%]\4C4C4544-1472205318-3510-8034-C7C04F58334A\jnsh481E.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\zigipyro]ImagePath=[%LOCAL_APPDATA%]\30464336-1471216875-3531-3542-3631FFFFFFFF\qnst101.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\rijufoze]ImagePath=[%PROGRAM_FILES%]\4C4C4544-1472185935-4E10-8035-CAC04F433132\hnsl6BE0.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\dowidoly]ImagePath=[%PROGRAM_FILES%]\4C4C4544-1472185935-4E10-8035-CAC04F433132\jnsd49D1.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\rijufoze]ImagePath=[%PROGRAM_FILES%]\18484A00-1472247123-81E1-2A2A-3085A9140D6F\hnsq1BAA.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\dowidoly]ImagePath=[%PROGRAM_FILES%]\18484A00-1472247123-81E1-2A2A-3085A9140D6F\jnsfF4B8.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\rijufoze]ImagePath=[%PROGRAM_FILES%]\1D00935E-1471271643-E411-B57F-68F728209364\hnsh5F91.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\dowidoly]ImagePath=[%PROGRAM_FILES%]\1D00935E-1471271643-E411-B57F-68F728209364\jnsh392C.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\runiredu]ImagePath=[%PROGRAM_FILES%]\FD2B7685-1439770737-51EE-387A-40A8F00392A9\knshFF98.tmpfs
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\zigipyro]ImagePath=[%LOCAL_APPDATA%]\00000000-1472239934-0000-0000-D8CB8A51CF27\qnsgFF66.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\rijufoze]ImagePath=[%PROGRAM_FILES%]\4C4C4544-1471068275-5010-8044-B3C04F394E31\hnst2CB3.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\jimocoso]ImagePath=[%PROGRAM_FILES%]\3B29A50F-1441013049-E211-9E13-208984B4077B\jnsnA944.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\zigipyro]ImagePath=[%LOCAL_APPDATA%]\4C4C4544-1472118873-5110-804A-B6C04F444C31\qnsp9CA7.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\rijufoze]ImagePath=[%PROGRAM_FILES%]\4C4C4544-1472094470-5110-804A-B6C04F444C31\hnstC25A.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\dowidoly]ImagePath=[%PROGRAM_FILES%]\4C4C4544-1472094470-5110-804A-B6C04F444C31\jnsyA9B0.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\zigipyro]ImagePath=[%LOCAL_APPDATA%]\4C4C4544-1472134020-5310-8047-B3C04F425631\qnsy4D10.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\rijufoze]ImagePath=[%PROGRAM_FILES%]\4C4C4544-1471967407-5310-8047-B3C04F425631\hnsjA001.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\dowidoly]ImagePath=[%PROGRAM_FILES%]\4C4C4544-1471967407-5310-8047-B3C04F425631\jnsf893C.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\zigipyro]ImagePath=[%LOCAL_APPDATA%]\9FA6EC44-1472056897-11E2-B5CB-730888F71D00\qnsl8CA7.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\zigipyro]ImagePath=[%LOCAL_APPDATA%]\4C4C4544-1470453271-5810-8059-C6C04F594C31\qnsp9DA9.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\rijufoze]ImagePath=[%PROGRAM_FILES%]\4C4C4544-1466271320-5810-8059-C6C04F594C31\hnscFCE8.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\dowidoly]ImagePath=[%PROGRAM_FILES%]\4C4C4544-1466271320-5810-8059-C6C04F594C31\jnsh867F.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\rijufoze]ImagePath=[%PROGRAM_FILES%]\9CC22240-1472031372-11B2-8000-EFE9362FD081\hnsjE987.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\dowidoly]ImagePath=[%PROGRAM_FILES%]\9CC22240-1472031372-11B2-8000-EFE9362FD081\jnsoB981.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\rijufoze]ImagePath=[%PROGRAM_FILES%]\00000011-1471595084-0000-0000-E03F493397E7\hnst900D.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\dowidoly]ImagePath=[%PROGRAM_FILES%]\00000011-1471595084-0000-0000-E03F493397E7\jnsy74A5.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\rijufoze]ImagePath=[%PROGRAM_FILES%]\AC71FCD8-1472009021-9D42-A8A8-87C85F502783\hnst11B7.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\dowidoly]ImagePath=[%PROGRAM_FILES%]\AC71FCD8-1472009021-9D42-A8A8-87C85F502783\jnsdF7A6.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\rijufoze]ImagePath=[%PROGRAM_FILES%]\03000200-1471681761-0500-0006-000700080009\hnsc754E.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\dowidoly]ImagePath=[%PROGRAM_FILES%]\03000200-1471681761-0500-0006-000700080009\jnsc5A63.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\zigipyro]ImagePath=[%LOCAL_APPDATA%]\5E587142-1472061309-45BD-A79F-54EA5FBD3D97\qnsb137B.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\rijufoze]ImagePath=[%PROGRAM_FILES%]\5E587142-1471751915-45BD-A79F-54EA5FBD3D97\hnsnB9FD.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\dowidoly]ImagePath=[%PROGRAM_FILES%]\5E587142-1471751915-45BD-A79F-54EA5FBD3D97\jnss9C8D.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\zigipyro]ImagePath=[%LOCAL_APPDATA%]\FE155A8E-1472050717-8A11-0FD2-74D02BC78DB2\qnsk6AF8.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\rijufoze]ImagePath=[%PROGRAM_FILES%]\FE155A8E-1472006376-8A11-0FD2-74D02BC78DB2\hnsjEDC6.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\dowidoly]ImagePath=[%PROGRAM_FILES%]\FE155A8E-1472006376-8A11-0FD2-74D02BC78DB2\jnsjD2DB.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\rijufoze]ImagePath=[%PROGRAM_FILES%]\5D1CC6CA-1471961025-E511-A726-F0761CCC2A17\hnsmAB4D.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\dowidoly]ImagePath=[%PROGRAM_FILES%]\5D1CC6CA-1471961025-E511-A726-F0761CCC2A17\jnsg8342.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\rijufoze]ImagePath=[%PROGRAM_FILES%]\D66192B2-1471133991-4B4E-A09A-315BE7914CA4\hnsgBF96.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\dowidoly]ImagePath=[%PROGRAM_FILES%]\D66192B2-1471133991-4B4E-A09A-315BE7914CA4\jnsfA324.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\rijufoze]ImagePath=[%PROGRAM_FILES%]\1E15C6C0-1471684475-11DF-9BDF-485B39325E92\hnstBD41.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\dowidoly]ImagePath=[%PROGRAM_FILES%]\1E15C6C0-1471684475-11DF-9BDF-485B39325E92\jnsy89E1.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\rijufoze]ImagePath=[%PROGRAM_FILES%]\5C082708-1471992753-11E4-829F-D05349CBA2D6\hnszDE54.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\dowidoly]ImagePath=[%PROGRAM_FILES%]\5C082708-1471992753-11E4-829F-D05349CBA2D6\jnslC973.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\rijufoze]ImagePath=[%PROGRAM_FILES%]\03D40274-1471822935-0507-6706-700700080009\hnsm9BEF.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\dowidoly]ImagePath=[%PROGRAM_FILES%]\03D40274-1471822935-0507-6706-700700080009\jnsr702D.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\rijufoze]ImagePath=[%PROGRAM_FILES%]\00000000-1471899693-0000-0000-50E549433FBE\hnsc826.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\dowidoly]ImagePath=[%PROGRAM_FILES%]\00000000-1471899693-0000-0000-50E549433FBE\jnsuF365.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\zigipyro]ImagePath=[%LOCAL_APPDATA%]\1A6BDDC0-1471983651-55A0-2341-E221E46F16D7\qnsgA5D0.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\rijufoze]ImagePath=[%PROGRAM_FILES%]\1A6BDDC0-1471942581-55A0-2341-E221E46F16D7\hnsm10D0.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\dowidoly]ImagePath=[%PROGRAM_FILES%]\1A6BDDC0-1471942581-55A0-2341-E221E46F16D7\jnssF9FB.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\rijufoze]ImagePath=[%PROGRAM_FILES%]\D7783EEA-1471505869-0B4F-8092-089E0194815A\hnsiD886.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\dowidoly]ImagePath=[%PROGRAM_FILES%]\D7783EEA-1471505869-0B4F-8092-089E0194815A\jnsn2A38.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\zedepory]ImagePath=[%APPDATA%]\03000200-1434586980-0500-0006-000700080009\hnsuC51D.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\xoperoze]ImagePath=[%APPDATA%]\03000200-1434586980-0500-0006-000700080009\jnsf9B9C.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\toqebeli]ImagePath=[%APPDATA%]\03000200-1434586980-0500-0006-000700080009\knsf7448.tmpfs
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\rijufoze]ImagePath=[%PROGRAM_FILES%]\4C4C4544-1471802544-4B10-804B-B2C04F485831\hnsxEBCF.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\dowidoly]ImagePath=[%PROGRAM_FILES%]\4C4C4544-1471802544-4B10-804B-B2C04F485831\jnscD23B.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\dowidoly]ImagePath=[%PROGRAM_FILES%]\00000000-1471921690-0000-0000-000000000000\jnsa1A9.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\rijufoze]ImagePath=[%PROGRAM_FILES%]\00000000-1471921690-0000-0000-000000000000\hnsa16FE.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\zigipyro]ImagePath=[%LOCAL_APPDATA%]\0187CCCC-1471932636-CB11-9E75-AE02761CB045\qnsaA06C.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\rijufoze]ImagePath=[%PROGRAM_FILES%]\0187CCCC-1471920557-CB11-9E75-AE02761CB045\hnsg881A.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\dowidoly]ImagePath=[%PROGRAM_FILES%]\0187CCCC-1471920557-CB11-9E75-AE02761CB045\jnsu4331.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\rijufoze]ImagePath=[%PROGRAM_FILES%]\33444335-1471935224-5833-394C-D4C9EF66CCAB\hnsd8EA5.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\dowidoly]ImagePath=[%PROGRAM_FILES%]\33444335-1471935224-5833-394C-D4C9EF66CCAB\jnsd7866.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\zutuzuni]ImagePath=[%PROGRAM_FILES%]\B333BE80-1452773094-11DD-896F-5442490BE3D3\jnsy10F2.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\wucotusy]ImagePath=[%PROGRAM_FILES%]\B333BE80-1452773094-11DD-896F-5442490BE3D3\hnsi2992.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\rowugoqo]ImagePath=[%LOCAL_APPDATA%]\B333BE80-1452792988-11DD-896F-5442490BE3D3\snstF23D.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\rijufoze]ImagePath=[%PROGRAM_FILES%]\7C43D990-1471853317-11E1-975A-30F9EDAD89A3\hnsqFE0C.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\dowidoly]ImagePath=[%PROGRAM_FILES%]\7C43D990-1471853317-11E1-975A-30F9EDAD89A3\jnsbE242.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\zigipyro]ImagePath=[%LOCAL_APPDATA%]\C6A3211B-1471963064-E511-A26A-308D99C30A3F\qnsm2DC8.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\rijufoze]ImagePath=[%PROGRAM_FILES%]\C6A3211B-1471943058-E511-A26A-308D99C30A3F\hnst6B91.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\dowidoly]ImagePath=[%PROGRAM_FILES%]\C6A3211B-1471943058-E511-A26A-308D99C30A3F\jnss5009.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\dowidoly]ImagePath=[%PROGRAM_FILES%]\4C4C4544-1470130248-5110-805A-B9C04F575731\jnsbF9F.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\rijufoze]ImagePath=[%PROGRAM_FILES%]\4C4C4544-1470130248-5110-805A-B9C04F575731\hnsq2C06.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\zigipyro]ImagePath=[%LOCAL_APPDATA%]\D600692B-1471732289-11DE-BBDA-649E427AD485\qnssA3FA.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\dowidoly]ImagePath=[%PROGRAM_FILES%]\A5B65C94-1471589348-2746-BE0A-5E5F477CFA40\jnsvFCA.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\zigipyro]ImagePath=[%LOCAL_APPDATA%]\A5B65C94-1471718278-2746-BE0A-5E5F477CFA40\qnsm2FE8.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\rijufoze]ImagePath=[%PROGRAM_FILES%]\A5B65C94-1471589348-2746-BE0A-5E5F477CFA40\hnsa4626.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\zigipyro]ImagePath=[%LOCAL_APPDATA%]\716A7967-1471869700-11E4-A26A-F0761C6E41AE\qnsg77C0.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\rijufoze]ImagePath=[%PROGRAM_FILES%]\716A7967-1463715112-11E4-A26A-F0761C6E41AE\hnsjE1ED.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\dowidoly]ImagePath=[%PROGRAM_FILES%]\716A7967-1463715112-11E4-A26A-F0761C6E41AE\jnsoC1BE.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\zigipyro]ImagePath=[%LOCAL_APPDATA%]\BEBFD4ED-1469902924-D44F-AED9-F079598B42AD\qnsp9865.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\rijufoze]ImagePath=[%PROGRAM_FILES%]\BEBFD4ED-1469873994-D44F-AED9-F079598B42AD\hnsyF266.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\dowidoly]ImagePath=[%PROGRAM_FILES%]\BEBFD4ED-1469873994-D44F-AED9-F079598B42AD\jnsrD5D3.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\rijufoze]ImagePath=[%PROGRAM_FILES%]\B4FC94C0-1471774680-11E3-8E54-D017C2CECBFF\hnso862.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\dowidoly]ImagePath=[%PROGRAM_FILES%]\B4FC94C0-1471774680-11E3-8E54-D017C2CECBFF\jnsnED28.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\rijufoze]ImagePath=[%PROGRAM_FILES%]\6AD3147F-1471758986-11E3-A9BE-28D2445F03C1\hnsi92DA.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\dowidoly]ImagePath=[%PROGRAM_FILES%]\6AD3147F-1471758986-11E3-A9BE-28D2445F03C1\jnsg369F.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\pugucizu]ImagePath=[%PROGRAM_FILES%]\D47414EC-1445487380-FE52-DD59-086266311088\knsi467.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\xoxufewe]ImagePath=[%APPDATA%]\37AD1352-1430889871-5BF5-7A1A-AC220B2BDCCC\jnsn36CE.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\xibixetu]ImagePath=[%PROGRAM_FILES%]\D47414EC-1445487380-FE52-DD59-086266311088\jnsm2FAF.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\vyvotubo]ImagePath=[%PROGRAM_FILES%]\37AD1352-1430889871-5BF5-7A1A-AC220B2BDCCC\knsjADE2.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\dijojyvi]ImagePath=[%PROGRAM_FILES%]\D47414EC-1445487380-FE52-DD59-086266311088\hnsy4C13.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\wucotusy]ImagePath=[%PROGRAM_FILES%]\4C4C4544-1453830967-4710-8053-C6C04F36334A\hnsmF0A8.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\rijufoze]ImagePath=[%PROGRAM_FILES%]\52ED1C12-1471777454-1008-9031-B54E85CF97DB\hnsfB85.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\dowidoly]ImagePath=[%PROGRAM_FILES%]\52ED1C12-1471777454-1008-9031-B54E85CF97DB\jnseEF61.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\zigipyro]ImagePath=[%LOCAL_APPDATA%]\BF33C180-1471783400-11DD-8F00-AC220B2B66B9\qnsg980C.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\rijufoze]ImagePath=[%PROGRAM_FILES%]\BF33C180-1471798764-11DD-8F00-AC220B2B66B9\hnsnEBB5.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\dowidoly]ImagePath=[%PROGRAM_FILES%]\BF33C180-1471798764-11DD-8F00-AC220B2B66B9\jnsnD21C.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\zigipyro]ImagePath=[%LOCAL_APPDATA%]\BF33C180-1471785110-11DD-8F00-AC220B2B66B9\qnsmAC96.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\dowidoly]ImagePath=[%PROGRAM_FILES%]\03000200-1466005841-0500-0006-000700080009\jnstB05B.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\zigipyro]ImagePath=[%LOCAL_APPDATA%]\03DE0294-1471742503-0553-F606-430700080009\qnsq7AAE.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\rijufoze]ImagePath=[%PROGRAM_FILES%]\03DE0294-1471729879-0553-F606-430700080009\hnsoEEE8.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\dowidoly]ImagePath=[%PROGRAM_FILES%]\03DE0294-1471729879-0553-F606-430700080009\jnszD7B0.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\dowidoly]ImagePath=[%PROGRAM_FILES%]\1A73E245-1471601004-E011-B2CF-000EA670053B\jnsn7038.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\zigipyro]ImagePath=[%LOCAL_APPDATA%]\63E7B42A-1471755081-1B75-AC1A-91371B871679\qnsgEE74.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\rijufoze]ImagePath=[%PROGRAM_FILES%]\63E7B42A-1471774955-1B75-AC1A-91371B871679\hnsyC198.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\dowidoly]ImagePath=[%PROGRAM_FILES%]\63E7B42A-1471774955-1B75-AC1A-91371B871679\jnsz78C6.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\zigipyro]ImagePath=[%LOCAL_APPDATA%]\A0411CCF-1469929770-DD11-93F6-9F193C0D8AD1\qnsm98A8.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\rijufoze]ImagePath=[%PROGRAM_FILES%]\A0411CCF-1469828112-DD11-93F6-9F193C0D8AD1\hnsvFD83.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\rijufoze]ImagePath=[%PROGRAM_FILES%]\03000200-1471705938-0500-0006-000700080009\hnsj8B1B.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\dowidoly]ImagePath=[%PROGRAM_FILES%]\03000200-1471705938-0500-0006-000700080009\jnsj704A.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\zigipyro]ImagePath=[%LOCAL_APPDATA%]\03E9C142-1469377049-E311-B737-A01D48095F5F\qnstE16F.tmp