Exterminate It! Antimalware

malpedia

Known threats:699,443 Last Update:August 10, 12:54

Testimonials

Just want to say that apparently your Exterminate It has worked like a charm. I was infected with a most troublesome Malware Trojan that kept replicating every time McAfee found, blocked and removed it... most annoying for several days... until Mr. Google led me to your door. What a God send!

With thanks,

Tom S.

MultiPlug- Registry Values List

This is a complete list of MultiPlug registry values collected by Exterminate It!. If you find any of these registry values on your PC, your computer is very likely to be infected with the MultiPlug - adware.

IMPORTANT: Because the registry is a core component of your Windows system, it is strongly recommended that you back up the registry before you begin deleting keys and values. For information about backing up the Windows registry, refer to the Registry Editor online help.
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\dowidoly]ImagePath=[%PROGRAM_FILES%]\FE3769C4-1471980757-C088-5F7B-047D7BFADE5A\jnse7E46.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\tosybepu]ImagePath=[%PROGRAM_FILES%]\D32B7552-1473354841-DF4B-9F2D-54AB3A0EDA9E\knsm4197.tmpfs
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\zigipyro]ImagePath=[%LOCAL_APPDATA%]\E264BAA6-1473539066-E211-A333-208984EE8659\qnsv7F8B.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\hidolyjy]ImagePath=[%PROGRAM_FILES%]\03000200-1471096681-0500-0006-000700080009\kns8A56.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\cewesibo]ImagePath=[%PROGRAM_FILES%]\03000200-1471096681-0500-0006-000700080009\kns84ED.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\rijufoze]ImagePath=[%PROGRAM_FILES%]\03000200-1471096681-0500-0006-000700080009\hnsa8C30.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\dowidoly]ImagePath=[%PROGRAM_FILES%]\03000200-1471096681-0500-0006-000700080009\jnsk6C6F.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\rijufoze]ImagePath=[%PROGRAM_FILES%]\4C4C4544-1471780040-5610-8050-B5C04F353632\hnsvA2A7.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\dowidoly]ImagePath=[%PROGRAM_FILES%]\4C4C4544-1471780040-5610-8050-B5C04F353632\jnsa8913.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\zumuqedu]ImagePath=[%PROGRAM_FILES%]\269B2E40-1473454467-0216-4428-C7A1A9C4F557\knsb52F.tmpfs
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\zigipyro]ImagePath=[%LOCAL_APPDATA%]\269B2E40-1473473928-0216-4428-C7A1A9C4F557\qnsb2991.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\zigipyro]ImagePath=[%LOCAL_APPDATA%]\DB6E9CE9-1468974717-11E3-9537-4AC45F06A03E\qnsyE976.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\digelepo]ImagePath=[%PROGRAM_FILES%]\03000200-1473430556-0500-0006-000700080009\knsa600.tmpfs
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\zigipyro]ImagePath=[%LOCAL_APPDATA%]\03000200-1473458413-0500-0006-000700080009\qnsg430A.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\nekibygo]ImagePath=[%PROGRAM_FILES%]\21CAEF49-1473431200-7CEB-2E0D-2C56DC7670E8\knsd107B.tmpfs
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\zigipyro]ImagePath=[%LOCAL_APPDATA%]\21CAEF49-1473441227-7CEB-2E0D-2C56DC7670E8\qnsl121B.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\fyhodupi]ImagePath=[%PROGRAM_FILES%]\169052C0-1473245199-11DD-80CD-3085A941DD8D\kns5B3B.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\zylixumy]ImagePath=[%PROGRAM_FILES%]\169052C0-1473245199-11DD-80CD-3085A941DD8D\kns5F74.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\zigipyro]ImagePath=[%LOCAL_APPDATA%]\B79E5A80-1473067302-81E3-2DAD-74D02BEA4C89\qnsr4CBD.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\dowidoly]ImagePath=[%PROGRAM_FILES%]\41414346-1465997021-3442-3546-4646FFFFFFFF\jnsc7FC.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\cihoqupe]ImagePath=[%PROGRAM_FILES%]\007BBFE6-1473164564-E011-AE6C-1078D2D3A1D4\kns371A.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\pidewuhi]ImagePath=[%PROGRAM_FILES%]\1F22386B-1473236845-FF9C-7211-2D954A13C4EA\kns6E5E.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\miwufete]ImagePath=[%PROGRAM_FILES%]\1F22386B-1473236845-FF9C-7211-2D954A13C4EA\kns4F5D.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\zigipyro]ImagePath=[%LOCAL_APPDATA%]\1F22386B-1473294849-FF9C-7211-2D954A13C4EA\qnsw6E5E.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\koriqito]ImagePath=[%PROGRAM_FILES%]\1F22386B-1473236845-FF9C-7211-2D954A13C4EA\knsl2E9D.tmpfs
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\wirotuso]ImagePath=[%PROGRAM_FILES%]\5F2B1E9B-1473416078-E111-9D69-B888E35BBE1E\knsr9C4.tmpfs
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\rijufoze]ImagePath=[%PROGRAM_FILES%]\34444335-1470566517-5131-4B47-8CDCD48A0FE2\hnsdB7F5.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\dowidoly]ImagePath=[%PROGRAM_FILES%]\34444335-1470566517-5131-4B47-8CDCD48A0FE2\jnsr8143.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\cihoqupe]ImagePath=[%PROGRAM_FILES%]\4C4C4544-1473167270-3310-8035-C4C04F334253\kns4D5.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\koriqito]ImagePath=[%PROGRAM_FILES%]\4C4C4544-1473167270-3310-8035-C4C04F334253\knsE7A3.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\cihoqupe]ImagePath=[%PROGRAM_FILES%]\80B2EDE8-1473282740-DF11-B0BB-1078D28C358A\knspDFEC.tmpfs
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\zigipyro]ImagePath=[%LOCAL_APPDATA%]\0053B976-1473216966-E011-B499-1078D2B5A2EC\qnsj38E3.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\cihoqupe]ImagePath=[%PROGRAM_FILES%]\0053B976-1473227648-E011-B499-1078D2B5A2EC\knsy6C12.tmpfs
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\zigipyro]ImagePath=[%LOCAL_APPDATA%]\A3D569C6-1456412612-11E3-AD7D-2AA25B602500\qnsg5096.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\zigipyro]ImagePath=[%LOCAL_APPDATA%]\00000000-1473209095-0000-0000-000000000000\qnsm4FA6.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\koriqito]ImagePath=[%PROGRAM_FILES%]\00000000-1473235715-0000-0000-000000000000\knsa2BB5.tmpfs
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\gozenuqe]ImagePath=[%PROGRAM_FILES%]\00000000-1473233516-0000-0000-000000000000\knsbC45E.tmpfs
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\sopujeqi]ImagePath=[%PROGRAM_FILES%]\466A7004-1473197273-E511-B27E-705A0FC39763\knsoD888.tmpfs
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\rijufoze]ImagePath=[%PROGRAM_FILES%]\032B0290-1471814511-0552-2C06-8F0700080009\hnsl29C3.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\dowidoly]ImagePath=[%PROGRAM_FILES%]\032B0290-1471814511-0552-2C06-8F0700080009\jnsnFAF2.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\zigipyro]ImagePath=[%LOCAL_APPDATA%]\00000000-1473166483-0000-0000-6CF049AF89C1\qnsb61B1.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\rijufoze]ImagePath=[%PROGRAM_FILES%]\00000000-1472214831-0000-0000-6CF049AF89C1\hnso519D.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\dowidoly]ImagePath=[%PROGRAM_FILES%]\00000000-1472214831-0000-0000-6CF049AF89C1\jnsdE977.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\rijufoze]ImagePath=[%PROGRAM_FILES%]\03000200-1472415780-0500-0006-000700080009\hnsz4D05.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\dowidoly]ImagePath=[%PROGRAM_FILES%]\03000200-1472415780-0500-0006-000700080009\jnsi2EFD.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\lehicewu]ImagePath=[%PROGRAM_FILES%]\1BCE7000-1442399610-11E0-890D-E89A8F447CBE\jnst4CCE.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\gyvixodu]ImagePath=[%PROGRAM_FILES%]\1BCE7000-1442399610-11E0-890D-E89A8F447CBE\hnst70C4.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\gygycopo]ImagePath=[%PROGRAM_FILES%]\1BCE7000-1442399610-11E0-890D-E89A8F447CBE\knsy2A79.tmpfs
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\cyruwibi]ImagePath=[%PROGRAM_FILES%]\1BCE7000-1459215547-11E0-890D-E89A8F447CBE\znsi5F19.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\zigipyro]ImagePath=[%LOCAL_APPDATA%]\B8E54A80-1473087390-1016-9E7F-CD091116FAE2\qnsi27A.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\rijufoze]ImagePath=[%PROGRAM_FILES%]\3591B232-1471973246-11E6-9D90-B03981EE1900\hnsw154A.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\dowidoly]ImagePath=[%PROGRAM_FILES%]\3591B232-1471973246-11E6-9D90-B03981EE1900\jnscC9D9.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\soposuqy]ImagePath=[%PROGRAM_FILES%]\03DE0294-1440176653-0569-B706-300700080009\knsm533F.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\jimocoso]ImagePath=[%PROGRAM_FILES%]\03DE0294-1440176653-0569-B706-300700080009\jnss20E9.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\fimevebo]ImagePath=[%PROGRAM_FILES%]\03DE0294-1440176653-0569-B706-300700080009\hnsz717C.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\dowidoly]ImagePath=[%PROGRAM_FILES%]\255B30EC-1472632235-2682-665E-A15ADA04559B\jnsuFB87.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\himucyxe]ImagePath=[%PROGRAM_FILES%]\35444335-1445863588-5232-365A-3CA82AB9409A\jnshCB3E.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\rijufoze]ImagePath=[%PROGRAM_FILES%]\F2E27036-1467555579-5CB3-DD2E-2C27D7BC07F2\hnsy6CEC.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\dowidoly]ImagePath=[%PROGRAM_FILES%]\F2E27036-1467555579-5CB3-DD2E-2C27D7BC07F2\jnsi55B2.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\rijufoze]ImagePath=[%PROGRAM_FILES%]\2025FBF3-1471610658-11DE-837F-104967018060\hnsoAB82.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\dowidoly]ImagePath=[%PROGRAM_FILES%]\2025FBF3-1471610658-11DE-837F-104967018060\jnso2043.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\zigipyro]ImagePath=[%LOCAL_APPDATA%]\36444335-1472824173-3230-594D-A08CFD2C7C2D\qnsq5978.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\rijufoze]ImagePath=[%PROGRAM_FILES%]\36444335-1472124324-3230-594D-A08CFD2C7C2D\hnsi5E7A.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\dowidoly]ImagePath=[%PROGRAM_FILES%]\36444335-1472124324-3230-594D-A08CFD2C7C2D\jnsp3DB2.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\rijufoze]ImagePath=[%PROGRAM_FILES%]\0F3902D4-1472320774-E411-A26A-5CB901B39BD3\hnshD3AE.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\dowidoly]ImagePath=[%PROGRAM_FILES%]\0F3902D4-1472320774-E411-A26A-5CB901B39BD3\jnscBB14.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\zigipyro]ImagePath=[%LOCAL_APPDATA%]\4C4C4544-1472324457-3210-8033-B3C04F433332\qnsg6134.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\rijufoze]ImagePath=[%PROGRAM_FILES%]\4C4C4544-1472271730-3210-8033-B3C04F433332\hnsaF84F.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\dowidoly]ImagePath=[%PROGRAM_FILES%]\4C4C4544-1472271730-3210-8033-B3C04F433332\jnsyB52A.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\zigipyro]ImagePath=[%LOCAL_APPDATA%]\03000200-1472577571-0500-0006-000700080009\qnsl8FBB.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\rijufoze]ImagePath=[%PROGRAM_FILES%]\03000200-1472593753-0500-0006-000700080009\hnsp1284.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\dowidoly]ImagePath=[%PROGRAM_FILES%]\03000200-1472593753-0500-0006-000700080009\jnsuF854.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\rizyqibe]ImagePath=[%PROGRAM_FILES%]\9591277B-1449766127-11DF-BBDA-FEC62B4F000F\jnst4C0.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\zizusyju]ImagePath=[%PROGRAM_FILES%]\9591277B-1449766127-11DF-BBDA-FEC62B4F000F\hnsj2128.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\kucegyhu]ImagePath=[%PROGRAM_FILES%]\9591277B-1449766127-11DF-BBDA-FEC62B4F000F\knst2EA1.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\keneqiwe]ImagePath=[%PROGRAM_FILES%]\9591277B-1449766127-11DF-BBDA-FEC62B4F000F\knsuB5F2.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\hidekoqe]ImagePath=[%LOCAL_APPDATA%]\9591277B-1450689568-11DF-BBDA-FEC62B4F000F\qnsk628C.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\zutuzuni]ImagePath=[%PROGRAM_FILES%]\4C4C4544-1455992630-4710-8052-C6C04F465031\jnss500C.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\wucotusy]ImagePath=[%PROGRAM_FILES%]\4C4C4544-1455992630-4710-8052-C6C04F465031\hnsi6746.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\zigipyro]ImagePath=[%LOCAL_APPDATA%]\1D4F4E60-1472596345-11DE-8125-78843CE381BE\qnsr456B.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\dowidoly]ImagePath=[%PROGRAM_FILES%]\1D4F4E60-1470628233-11DE-8125-78843CE381BE\jnss347A.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\hyverumu]ImagePath=[%PROGRAM_FILES%]\C0C3CE24-1438068281-E111-8D66-814477257072\jnsk12C7.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\gikypodo]ImagePath=[%PROGRAM_FILES%]\C0C3CE24-1438068281-E111-8D66-814477257072\knspBD90.tmpfs
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\comyninu]ImagePath=[%PROGRAM_FILES%]\C0C3CE24-1438068281-E111-8D66-814477257072\hnsq4EEF.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\zigipyro]ImagePath=[%LOCAL_APPDATA%]\03D40274-1472605543-0502-9E06-120700080009\qnso5664.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\rijufoze]ImagePath=[%PROGRAM_FILES%]\03D40274-1470836782-0502-9E06-120700080009\hnsp8367.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\dowidoly]ImagePath=[%PROGRAM_FILES%]\03D40274-1470836782-0502-9E06-120700080009\jnsj6431.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\zigipyro]ImagePath=[%LOCAL_APPDATA%]\03000200-1472427881-0500-0006-000700080009\qnsb7EF1.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\rijufoze]ImagePath=[%PROGRAM_FILES%]\03000200-1472413970-0500-0006-000700080009\hnsaFFA9.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\dowidoly]ImagePath=[%PROGRAM_FILES%]\03000200-1472413970-0500-0006-000700080009\jnsaE094.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\rijufoze]ImagePath=[%PROGRAM_FILES%]\0DB41312-1472412437-E411-B57F-68F728296D8B\hnswB0D.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\dowidoly]ImagePath=[%PROGRAM_FILES%]\0DB41312-1472412437-E411-B57F-68F728296D8B\jnsbC259.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\zigipyro]ImagePath=[%LOCAL_APPDATA%]\0DB41312-1472524988-E411-B57F-68F728296D8B\qnsf9B97.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\rijufoze]ImagePath=[%PROGRAM_FILES%]\C0D7CCE6-1472431486-E011-8340-00266CA3CD71\hnsr39AF.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\dowidoly]ImagePath=[%PROGRAM_FILES%]\C0D7CCE6-1472431486-E011-8340-00266CA3CD71\jnsdF1B8.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\zigipyro]ImagePath=[%LOCAL_APPDATA%]\FFFFFFFF-1472565045-FFFF-FFFF-FFFFFFFFFFFF\qnsvD2F9.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\zigipyro]ImagePath=[%LOCAL_APPDATA%]\00000000-1472553312-0000-0000-902B34EBC186\qnsq14AA.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\rijufoze]ImagePath=[%PROGRAM_FILES%]\77AE5AD5-1470627488-5405-F12F-3A7564DDB911\hnsc9A7A.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\dowidoly]ImagePath=[%PROGRAM_FILES%]\77AE5AD5-1470627488-5405-F12F-3A7564DDB911\jnsj37C7.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\zigipyro]ImagePath=[%LOCAL_APPDATA%]\4C4C4544-1472427109-3410-8047-B1C04F564232\qnsfB91D.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\rijufoze]ImagePath=[%PROGRAM_FILES%]\4C4C4544-1472429859-3410-8047-B1C04F564232\hnsjB4C1.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\dowidoly]ImagePath=[%PROGRAM_FILES%]\4C4C4544-1472429859-3410-8047-B1C04F564232\jnsf9F34.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\rijufoze]ImagePath=[%PROGRAM_FILES%]\55C2D590-1472500685-684A-8473-30C11D7F00C3\hnsy4444.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\dowidoly]ImagePath=[%PROGRAM_FILES%]\55C2D590-1472500685-684A-8473-30C11D7F00C3\jnsp2DFC.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\zigipyro]ImagePath=[%LOCAL_APPDATA%]\4C4C4544-1472552695-5010-8057-B1C04F4D5431\qnsq5F9E.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\rijufoze]ImagePath=[%PROGRAM_FILES%]\4C4C4544-1472444171-5010-8057-B1C04F4D5431\hnsu7E32.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\dowidoly]ImagePath=[%PROGRAM_FILES%]\4C4C4544-1472444171-5010-8057-B1C04F4D5431\jnsc388D.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\qysemimo]ImagePath=[%PROGRAM_FILES%]\63303165-1451344608-6439-3036-705AB62F6B62\knsq2F4A.tmpfs
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\rijufoze]ImagePath=[%PROGRAM_FILES%]\FFFFFFFF-1471453206-FFFF-FFFF-FFFFFFFFFFFF\hnsmE7D0.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\dowidoly]ImagePath=[%PROGRAM_FILES%]\FFFFFFFF-1471453206-FFFF-FFFF-FFFFFFFFFFFF\jnscCA03.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\zigipyro]ImagePath=[%LOCAL_APPDATA%]\50A59F31-1472576528-E311-A96A-201A0639CF0D\qnsm8EAA.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\rijufoze]ImagePath=[%PROGRAM_FILES%]\50A59F31-1472392147-E311-A96A-201A0639CF0D\hnsh50C6.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\dowidoly]ImagePath=[%PROGRAM_FILES%]\50A59F31-1472392147-E311-A96A-201A0639CF0D\jnsc3624.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\rijufoze]ImagePath=[%PROGRAM_FILES%]\DDA66D40-1472519090-E411-A26A-5CB901F8C9AD\hnsn35AC.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\dowidoly]ImagePath=[%PROGRAM_FILES%]\DDA66D40-1472519090-E411-A26A-5CB901F8C9AD\jnskEEDE.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\zigipyro]ImagePath=[%LOCAL_APPDATA%]\0DB41312-1472513282-E411-B57F-68F728296D8B\qnsw6930.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\rijufoze]ImagePath=[%PROGRAM_FILES%]\03000200-1471875659-0500-0006-000700080009\hnsu60F6.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\dowidoly]ImagePath=[%PROGRAM_FILES%]\03000200-1471875659-0500-0006-000700080009\jnsj2CB6.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\zigipyro]ImagePath=[%LOCAL_APPDATA%]\03000200-1472400892-0500-0006-000700080009\qnsh77F.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\dowidoly]ImagePath=[%PROGRAM_FILES%]\57F146C0-1472484771-11B2-8000-A1C44AD44016\jnsfB9E1.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\zigipyro]ImagePath=[%LOCAL_APPDATA%]\4C4C4544-1472467377-5210-8035-B1C04F345931\qnsi3D02.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\rijufoze]ImagePath=[%PROGRAM_FILES%]\4C4C4544-1472447387-5210-8035-B1C04F345931\hnswD08C.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\dowidoly]ImagePath=[%PROGRAM_FILES%]\4C4C4544-1472447387-5210-8035-B1C04F345931\jnswAD33.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\zigipyro]ImagePath=[%LOCAL_APPDATA%]\00000000-1472463498-0000-0000-D43D7E2A0B9D\qnsmE36E.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\rijufoze]ImagePath=[%PROGRAM_FILES%]\1E006280-1472400588-AC01-6E0A-0023548A94EE\hnso6F5C.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\dowidoly]ImagePath=[%PROGRAM_FILES%]\1E006280-1472400588-AC01-6E0A-0023548A94EE\jnse5A17.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\rijufoze]ImagePath=[%PROGRAM_FILES%]\4C4C4544-1472407545-3510-8034-C7C04F58334A\hnst2FD.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\zigipyro]ImagePath=[%LOCAL_APPDATA%]\4C4C4544-1472422187-3510-8034-C7C04F58334A\qnsu953C.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\dowidoly]ImagePath=[%PROGRAM_FILES%]\4C4C4544-1472407545-3510-8034-C7C04F58334A\jnspEB9C.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\zigipyro]ImagePath=[%LOCAL_APPDATA%]\03000200-1472393622-0500-0006-000700080009\qnsk1E30.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\rijufoze]ImagePath=[%PROGRAM_FILES%]\00000011-1472398607-0000-0000-E03F49CFF163\hnsi8C51.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\dowidoly]ImagePath=[%PROGRAM_FILES%]\00000011-1472398607-0000-0000-E03F49CFF163\jnsd5CF7.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\zigipyro]ImagePath=[%LOCAL_APPDATA%]\50A59F31-1472415222-E311-A96A-201A0639CF0D\qnsr984B.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\zigipyro]ImagePath=[%LOCAL_APPDATA%]\D7E3CEA0-1472401812-11E0-8699-14DAE92CEAA8\qnssB78E.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\wucotusy]ImagePath=[%PROGRAM_FILES%]\D7E3CEA0-1458241021-11E0-8699-14DAE92CEAA8\hnsm5E44.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\rowugoqo]ImagePath=[%LOCAL_APPDATA%]\D7E3CEA0-1458252032-11E0-8699-14DAE92CEAA8\snsx37DF.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\gerocyni]ImagePath=[%PROGRAM_FILES%]\D7E3CEA0-1458241021-11E0-8699-14DAE92CEAA8\jnsh226B.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\sysenyfo]ImagePath=[%APPDATA%]\2DA24F80-1433487791-81E2-2C2C-E840F2D7DA53\nsqB2A5.tmpfs
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\cybusyro]ImagePath=[%APPDATA%]\2DA24F80-1433487791-81E2-2C2C-E840F2D7DA53\jnslE39A.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\zigipyro]ImagePath=[%LOCAL_APPDATA%]\D52FE2DE-1472308990-064F-9555-2539DE7E8A57\qnsgC142.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\rijufoze]ImagePath=[%PROGRAM_FILES%]\D52FE2DE-1472303579-064F-9555-2539DE7E8A57\hnsk5242.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\dowidoly]ImagePath=[%PROGRAM_FILES%]\D52FE2DE-1472303579-064F-9555-2539DE7E8A57\jnsw3C87.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\zigipyro]ImagePath=[%LOCAL_APPDATA%]\820252BA-1471877086-E411-85C7-F0761CC07C14\qnsgE0CE.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\rijufoze]ImagePath=[%PROGRAM_FILES%]\820252BA-1471885235-E411-85C7-F0761CC07C14\hnse3FCC.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\dowidoly]ImagePath=[%PROGRAM_FILES%]\820252BA-1471885235-E411-85C7-F0761CC07C14\jnsa2A8D.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\rijufoze]ImagePath=[%PROGRAM_FILES%]\03000200-1471522982-0500-0006-000700080009\hnsuF086.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\dowidoly]ImagePath=[%PROGRAM_FILES%]\03000200-1471522982-0500-0006-000700080009\jnsdE406.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\rijufoze]ImagePath=[%PROGRAM_FILES%]\2BD098ED-1472090019-E411-B2A0-3464A97CA6AA\hnsrC79C.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\dowidoly]ImagePath=[%PROGRAM_FILES%]\2BD098ED-1472090019-E411-B2A0-3464A97CA6AA\jnsuAAAC.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\zigipyro]ImagePath=[%LOCAL_APPDATA%]\4C4C4544-1472308880-3810-804E-B5C04F435231\qnsuD6E2.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\rijufoze]ImagePath=[%PROGRAM_FILES%]\4C4C4544-1472300955-3810-804E-B5C04F435231\hnseE6B3.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\dowidoly]ImagePath=[%PROGRAM_FILES%]\4C4C4544-1472300955-3810-804E-B5C04F435231\jnseCE86.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\rijufoze]ImagePath=[%PROGRAM_FILES%]\4C4C4544-1471595201-4E10-8047-B7C04F4A5131\hnscBFFE.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\dowidoly]ImagePath=[%PROGRAM_FILES%]\4C4C4544-1471595201-4E10-8047-B7C04F4A5131\jnsmA6D7.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\rijufoze]ImagePath=[%PROGRAM_FILES%]\4945244B-1472286603-4F44-8595-089E01E61688\hnsxEC37.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\dowidoly]ImagePath=[%PROGRAM_FILES%]\4945244B-1472286603-4F44-8595-089E01E61688\jnsnD6F2.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\rijufoze]ImagePath=[%PROGRAM_FILES%]\60422FFE-1464347352-DF11-9AD6-00266C551328\hnst80C5.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\rijufoze]ImagePath=[%PROGRAM_FILES%]\4C4C4544-1472205318-3510-8034-C7C04F58334A\hnso63C6.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\dowidoly]ImagePath=[%PROGRAM_FILES%]\4C4C4544-1472205318-3510-8034-C7C04F58334A\jnsh481E.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\zigipyro]ImagePath=[%LOCAL_APPDATA%]\30464336-1471216875-3531-3542-3631FFFFFFFF\qnst101.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\rijufoze]ImagePath=[%PROGRAM_FILES%]\4C4C4544-1472185935-4E10-8035-CAC04F433132\hnsl6BE0.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\dowidoly]ImagePath=[%PROGRAM_FILES%]\4C4C4544-1472185935-4E10-8035-CAC04F433132\jnsd49D1.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\rijufoze]ImagePath=[%PROGRAM_FILES%]\18484A00-1472247123-81E1-2A2A-3085A9140D6F\hnsq1BAA.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\dowidoly]ImagePath=[%PROGRAM_FILES%]\18484A00-1472247123-81E1-2A2A-3085A9140D6F\jnsfF4B8.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\rijufoze]ImagePath=[%PROGRAM_FILES%]\1D00935E-1471271643-E411-B57F-68F728209364\hnsh5F91.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\dowidoly]ImagePath=[%PROGRAM_FILES%]\1D00935E-1471271643-E411-B57F-68F728209364\jnsh392C.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\runiredu]ImagePath=[%PROGRAM_FILES%]\FD2B7685-1439770737-51EE-387A-40A8F00392A9\knshFF98.tmpfs
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\zigipyro]ImagePath=[%LOCAL_APPDATA%]\00000000-1472239934-0000-0000-D8CB8A51CF27\qnsgFF66.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\rijufoze]ImagePath=[%PROGRAM_FILES%]\4C4C4544-1471068275-5010-8044-B3C04F394E31\hnst2CB3.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\jimocoso]ImagePath=[%PROGRAM_FILES%]\3B29A50F-1441013049-E211-9E13-208984B4077B\jnsnA944.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\zigipyro]ImagePath=[%LOCAL_APPDATA%]\4C4C4544-1472118873-5110-804A-B6C04F444C31\qnsp9CA7.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\rijufoze]ImagePath=[%PROGRAM_FILES%]\4C4C4544-1472094470-5110-804A-B6C04F444C31\hnstC25A.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\dowidoly]ImagePath=[%PROGRAM_FILES%]\4C4C4544-1472094470-5110-804A-B6C04F444C31\jnsyA9B0.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\zigipyro]ImagePath=[%LOCAL_APPDATA%]\4C4C4544-1472134020-5310-8047-B3C04F425631\qnsy4D10.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\rijufoze]ImagePath=[%PROGRAM_FILES%]\4C4C4544-1471967407-5310-8047-B3C04F425631\hnsjA001.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\dowidoly]ImagePath=[%PROGRAM_FILES%]\4C4C4544-1471967407-5310-8047-B3C04F425631\jnsf893C.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\zigipyro]ImagePath=[%LOCAL_APPDATA%]\9FA6EC44-1472056897-11E2-B5CB-730888F71D00\qnsl8CA7.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\zigipyro]ImagePath=[%LOCAL_APPDATA%]\4C4C4544-1470453271-5810-8059-C6C04F594C31\qnsp9DA9.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\rijufoze]ImagePath=[%PROGRAM_FILES%]\4C4C4544-1466271320-5810-8059-C6C04F594C31\hnscFCE8.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\dowidoly]ImagePath=[%PROGRAM_FILES%]\4C4C4544-1466271320-5810-8059-C6C04F594C31\jnsh867F.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\rijufoze]ImagePath=[%PROGRAM_FILES%]\9CC22240-1472031372-11B2-8000-EFE9362FD081\hnsjE987.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\dowidoly]ImagePath=[%PROGRAM_FILES%]\9CC22240-1472031372-11B2-8000-EFE9362FD081\jnsoB981.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\rijufoze]ImagePath=[%PROGRAM_FILES%]\00000011-1471595084-0000-0000-E03F493397E7\hnst900D.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\dowidoly]ImagePath=[%PROGRAM_FILES%]\00000011-1471595084-0000-0000-E03F493397E7\jnsy74A5.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\rijufoze]ImagePath=[%PROGRAM_FILES%]\AC71FCD8-1472009021-9D42-A8A8-87C85F502783\hnst11B7.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\dowidoly]ImagePath=[%PROGRAM_FILES%]\AC71FCD8-1472009021-9D42-A8A8-87C85F502783\jnsdF7A6.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\rijufoze]ImagePath=[%PROGRAM_FILES%]\03000200-1471681761-0500-0006-000700080009\hnsc754E.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\dowidoly]ImagePath=[%PROGRAM_FILES%]\03000200-1471681761-0500-0006-000700080009\jnsc5A63.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\zigipyro]ImagePath=[%LOCAL_APPDATA%]\5E587142-1472061309-45BD-A79F-54EA5FBD3D97\qnsb137B.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\rijufoze]ImagePath=[%PROGRAM_FILES%]\5E587142-1471751915-45BD-A79F-54EA5FBD3D97\hnsnB9FD.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\dowidoly]ImagePath=[%PROGRAM_FILES%]\5E587142-1471751915-45BD-A79F-54EA5FBD3D97\jnss9C8D.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\zigipyro]ImagePath=[%LOCAL_APPDATA%]\FE155A8E-1472050717-8A11-0FD2-74D02BC78DB2\qnsk6AF8.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\rijufoze]ImagePath=[%PROGRAM_FILES%]\FE155A8E-1472006376-8A11-0FD2-74D02BC78DB2\hnsjEDC6.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\dowidoly]ImagePath=[%PROGRAM_FILES%]\FE155A8E-1472006376-8A11-0FD2-74D02BC78DB2\jnsjD2DB.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\rijufoze]ImagePath=[%PROGRAM_FILES%]\5D1CC6CA-1471961025-E511-A726-F0761CCC2A17\hnsmAB4D.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\dowidoly]ImagePath=[%PROGRAM_FILES%]\5D1CC6CA-1471961025-E511-A726-F0761CCC2A17\jnsg8342.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\rijufoze]ImagePath=[%PROGRAM_FILES%]\D66192B2-1471133991-4B4E-A09A-315BE7914CA4\hnsgBF96.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\dowidoly]ImagePath=[%PROGRAM_FILES%]\D66192B2-1471133991-4B4E-A09A-315BE7914CA4\jnsfA324.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\rijufoze]ImagePath=[%PROGRAM_FILES%]\1E15C6C0-1471684475-11DF-9BDF-485B39325E92\hnstBD41.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\dowidoly]ImagePath=[%PROGRAM_FILES%]\1E15C6C0-1471684475-11DF-9BDF-485B39325E92\jnsy89E1.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\rijufoze]ImagePath=[%PROGRAM_FILES%]\5C082708-1471992753-11E4-829F-D05349CBA2D6\hnszDE54.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\dowidoly]ImagePath=[%PROGRAM_FILES%]\5C082708-1471992753-11E4-829F-D05349CBA2D6\jnslC973.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\rijufoze]ImagePath=[%PROGRAM_FILES%]\03D40274-1471822935-0507-6706-700700080009\hnsm9BEF.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\dowidoly]ImagePath=[%PROGRAM_FILES%]\03D40274-1471822935-0507-6706-700700080009\jnsr702D.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\rijufoze]ImagePath=[%PROGRAM_FILES%]\00000000-1471899693-0000-0000-50E549433FBE\hnsc826.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\dowidoly]ImagePath=[%PROGRAM_FILES%]\00000000-1471899693-0000-0000-50E549433FBE\jnsuF365.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\zigipyro]ImagePath=[%LOCAL_APPDATA%]\1A6BDDC0-1471983651-55A0-2341-E221E46F16D7\qnsgA5D0.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\rijufoze]ImagePath=[%PROGRAM_FILES%]\1A6BDDC0-1471942581-55A0-2341-E221E46F16D7\hnsm10D0.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\dowidoly]ImagePath=[%PROGRAM_FILES%]\1A6BDDC0-1471942581-55A0-2341-E221E46F16D7\jnssF9FB.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\rijufoze]ImagePath=[%PROGRAM_FILES%]\D7783EEA-1471505869-0B4F-8092-089E0194815A\hnsiD886.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\dowidoly]ImagePath=[%PROGRAM_FILES%]\D7783EEA-1471505869-0B4F-8092-089E0194815A\jnsn2A38.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\zedepory]ImagePath=[%APPDATA%]\03000200-1434586980-0500-0006-000700080009\hnsuC51D.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\xoperoze]ImagePath=[%APPDATA%]\03000200-1434586980-0500-0006-000700080009\jnsf9B9C.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\toqebeli]ImagePath=[%APPDATA%]\03000200-1434586980-0500-0006-000700080009\knsf7448.tmpfs
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\rijufoze]ImagePath=[%PROGRAM_FILES%]\4C4C4544-1471802544-4B10-804B-B2C04F485831\hnsxEBCF.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\dowidoly]ImagePath=[%PROGRAM_FILES%]\4C4C4544-1471802544-4B10-804B-B2C04F485831\jnscD23B.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\dowidoly]ImagePath=[%PROGRAM_FILES%]\00000000-1471921690-0000-0000-000000000000\jnsa1A9.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\rijufoze]ImagePath=[%PROGRAM_FILES%]\00000000-1471921690-0000-0000-000000000000\hnsa16FE.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\zigipyro]ImagePath=[%LOCAL_APPDATA%]\0187CCCC-1471932636-CB11-9E75-AE02761CB045\qnsaA06C.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\rijufoze]ImagePath=[%PROGRAM_FILES%]\0187CCCC-1471920557-CB11-9E75-AE02761CB045\hnsg881A.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\dowidoly]ImagePath=[%PROGRAM_FILES%]\0187CCCC-1471920557-CB11-9E75-AE02761CB045\jnsu4331.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\rijufoze]ImagePath=[%PROGRAM_FILES%]\33444335-1471935224-5833-394C-D4C9EF66CCAB\hnsd8EA5.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\dowidoly]ImagePath=[%PROGRAM_FILES%]\33444335-1471935224-5833-394C-D4C9EF66CCAB\jnsd7866.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\zutuzuni]ImagePath=[%PROGRAM_FILES%]\B333BE80-1452773094-11DD-896F-5442490BE3D3\jnsy10F2.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\wucotusy]ImagePath=[%PROGRAM_FILES%]\B333BE80-1452773094-11DD-896F-5442490BE3D3\hnsi2992.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\rowugoqo]ImagePath=[%LOCAL_APPDATA%]\B333BE80-1452792988-11DD-896F-5442490BE3D3\snstF23D.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\rijufoze]ImagePath=[%PROGRAM_FILES%]\7C43D990-1471853317-11E1-975A-30F9EDAD89A3\hnsqFE0C.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\dowidoly]ImagePath=[%PROGRAM_FILES%]\7C43D990-1471853317-11E1-975A-30F9EDAD89A3\jnsbE242.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\zigipyro]ImagePath=[%LOCAL_APPDATA%]\C6A3211B-1471963064-E511-A26A-308D99C30A3F\qnsm2DC8.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\rijufoze]ImagePath=[%PROGRAM_FILES%]\C6A3211B-1471943058-E511-A26A-308D99C30A3F\hnst6B91.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\dowidoly]ImagePath=[%PROGRAM_FILES%]\C6A3211B-1471943058-E511-A26A-308D99C30A3F\jnss5009.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\dowidoly]ImagePath=[%PROGRAM_FILES%]\4C4C4544-1470130248-5110-805A-B9C04F575731\jnsbF9F.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\rijufoze]ImagePath=[%PROGRAM_FILES%]\4C4C4544-1470130248-5110-805A-B9C04F575731\hnsq2C06.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\zigipyro]ImagePath=[%LOCAL_APPDATA%]\D600692B-1471732289-11DE-BBDA-649E427AD485\qnssA3FA.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\dowidoly]ImagePath=[%PROGRAM_FILES%]\A5B65C94-1471589348-2746-BE0A-5E5F477CFA40\jnsvFCA.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\zigipyro]ImagePath=[%LOCAL_APPDATA%]\A5B65C94-1471718278-2746-BE0A-5E5F477CFA40\qnsm2FE8.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\rijufoze]ImagePath=[%PROGRAM_FILES%]\A5B65C94-1471589348-2746-BE0A-5E5F477CFA40\hnsa4626.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\zigipyro]ImagePath=[%LOCAL_APPDATA%]\716A7967-1471869700-11E4-A26A-F0761C6E41AE\qnsg77C0.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\rijufoze]ImagePath=[%PROGRAM_FILES%]\716A7967-1463715112-11E4-A26A-F0761C6E41AE\hnsjE1ED.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\dowidoly]ImagePath=[%PROGRAM_FILES%]\716A7967-1463715112-11E4-A26A-F0761C6E41AE\jnsoC1BE.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\zigipyro]ImagePath=[%LOCAL_APPDATA%]\BEBFD4ED-1469902924-D44F-AED9-F079598B42AD\qnsp9865.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\rijufoze]ImagePath=[%PROGRAM_FILES%]\BEBFD4ED-1469873994-D44F-AED9-F079598B42AD\hnsyF266.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\dowidoly]ImagePath=[%PROGRAM_FILES%]\BEBFD4ED-1469873994-D44F-AED9-F079598B42AD\jnsrD5D3.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\rijufoze]ImagePath=[%PROGRAM_FILES%]\B4FC94C0-1471774680-11E3-8E54-D017C2CECBFF\hnso862.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\dowidoly]ImagePath=[%PROGRAM_FILES%]\B4FC94C0-1471774680-11E3-8E54-D017C2CECBFF\jnsnED28.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\rijufoze]ImagePath=[%PROGRAM_FILES%]\6AD3147F-1471758986-11E3-A9BE-28D2445F03C1\hnsi92DA.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\dowidoly]ImagePath=[%PROGRAM_FILES%]\6AD3147F-1471758986-11E3-A9BE-28D2445F03C1\jnsg369F.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\pugucizu]ImagePath=[%PROGRAM_FILES%]\D47414EC-1445487380-FE52-DD59-086266311088\knsi467.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\xoxufewe]ImagePath=[%APPDATA%]\37AD1352-1430889871-5BF5-7A1A-AC220B2BDCCC\jnsn36CE.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\xibixetu]ImagePath=[%PROGRAM_FILES%]\D47414EC-1445487380-FE52-DD59-086266311088\jnsm2FAF.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\vyvotubo]ImagePath=[%PROGRAM_FILES%]\37AD1352-1430889871-5BF5-7A1A-AC220B2BDCCC\knsjADE2.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\dijojyvi]ImagePath=[%PROGRAM_FILES%]\D47414EC-1445487380-FE52-DD59-086266311088\hnsy4C13.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\wucotusy]ImagePath=[%PROGRAM_FILES%]\4C4C4544-1453830967-4710-8053-C6C04F36334A\hnsmF0A8.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\rijufoze]ImagePath=[%PROGRAM_FILES%]\52ED1C12-1471777454-1008-9031-B54E85CF97DB\hnsfB85.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\dowidoly]ImagePath=[%PROGRAM_FILES%]\52ED1C12-1471777454-1008-9031-B54E85CF97DB\jnseEF61.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\zigipyro]ImagePath=[%LOCAL_APPDATA%]\BF33C180-1471783400-11DD-8F00-AC220B2B66B9\qnsg980C.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\rijufoze]ImagePath=[%PROGRAM_FILES%]\BF33C180-1471798764-11DD-8F00-AC220B2B66B9\hnsnEBB5.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\dowidoly]ImagePath=[%PROGRAM_FILES%]\BF33C180-1471798764-11DD-8F00-AC220B2B66B9\jnsnD21C.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\zigipyro]ImagePath=[%LOCAL_APPDATA%]\BF33C180-1471785110-11DD-8F00-AC220B2B66B9\qnsmAC96.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\dowidoly]ImagePath=[%PROGRAM_FILES%]\03000200-1466005841-0500-0006-000700080009\jnstB05B.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\zigipyro]ImagePath=[%LOCAL_APPDATA%]\03DE0294-1471742503-0553-F606-430700080009\qnsq7AAE.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\rijufoze]ImagePath=[%PROGRAM_FILES%]\03DE0294-1471729879-0553-F606-430700080009\hnsoEEE8.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\dowidoly]ImagePath=[%PROGRAM_FILES%]\03DE0294-1471729879-0553-F606-430700080009\jnszD7B0.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\dowidoly]ImagePath=[%PROGRAM_FILES%]\1A73E245-1471601004-E011-B2CF-000EA670053B\jnsn7038.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\zigipyro]ImagePath=[%LOCAL_APPDATA%]\63E7B42A-1471755081-1B75-AC1A-91371B871679\qnsgEE74.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\rijufoze]ImagePath=[%PROGRAM_FILES%]\63E7B42A-1471774955-1B75-AC1A-91371B871679\hnsyC198.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\dowidoly]ImagePath=[%PROGRAM_FILES%]\63E7B42A-1471774955-1B75-AC1A-91371B871679\jnsz78C6.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\zigipyro]ImagePath=[%LOCAL_APPDATA%]\A0411CCF-1469929770-DD11-93F6-9F193C0D8AD1\qnsm98A8.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\rijufoze]ImagePath=[%PROGRAM_FILES%]\A0411CCF-1469828112-DD11-93F6-9F193C0D8AD1\hnsvFD83.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\rijufoze]ImagePath=[%PROGRAM_FILES%]\03000200-1471705938-0500-0006-000700080009\hnsj8B1B.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\dowidoly]ImagePath=[%PROGRAM_FILES%]\03000200-1471705938-0500-0006-000700080009\jnsj704A.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\zigipyro]ImagePath=[%LOCAL_APPDATA%]\03E9C142-1469377049-E311-B737-A01D48095F5F\qnstE16F.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\rijufoze]ImagePath=[%PROGRAM_FILES%]\03E9C142-1469350628-E311-B737-A01D48095F5F\hnsy8844.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\dowidoly]ImagePath=[%PROGRAM_FILES%]\03E9C142-1469350628-E311-B737-A01D48095F5F\jnsp676B.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\rijufoze]ImagePath=[%PROGRAM_FILES%]\32444335-1470036441-5036-4B4A-84349786F0F5\hnsl5E5B.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\dowidoly]ImagePath=[%PROGRAM_FILES%]\32444335-1470036441-5036-4B4A-84349786F0F5\jnsj40FD.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\rocufyky]ImagePath=[%PROGRAM_FILES%]\4C4C4544-1460512100-5910-8054-C7C04F465231\jnsy5FA4.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\rijufoze]ImagePath=[%PROGRAM_FILES%]\4C4C4544-1460512100-5910-8054-C7C04F465231\hnso7B22.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\rijufoze]ImagePath=[%PROGRAM_FILES%]\D600692B-1471644547-11DE-BBDA-649E427AD485\hnsi61E.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\zigipyro]ImagePath=[%LOCAL_APPDATA%]\D600692B-1471654372-11DE-BBDA-649E427AD485\qnsv9321.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\dowidoly]ImagePath=[%PROGRAM_FILES%]\D600692B-1471644547-11DE-BBDA-649E427AD485\jnspCCDC.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\zigipyro]ImagePath=[%LOCAL_APPDATA%]\03000200-1471704342-0500-0006-000700080009\qnsk39B.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\rijufoze]ImagePath=[%PROGRAM_FILES%]\4C4C4544-1471708964-5310-8030-B9C04F585731\hnss65A2.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\dowidoly]ImagePath=[%PROGRAM_FILES%]\4C4C4544-1471708964-5310-8030-B9C04F585731\jnsc503D.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\rijufoze]ImagePath=[%PROGRAM_FILES%]\0E8E760E-1471725698-11DD-BBD8-85386AF90021\hnsz9E0B.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\dowidoly]ImagePath=[%PROGRAM_FILES%]\0E8E760E-1471725698-11DD-BBD8-85386AF90021\jnse5FB3.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\rijufoze]ImagePath=[%PROGRAM_FILES%]\4C4C4544-1471641767-5910-8052-C3C04F363132\hnsxEAF.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\zigipyro]ImagePath=[%LOCAL_APPDATA%]\4C4C4544-1471724149-5910-8052-C3C04F363132\qnsw34C8.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\dowidoly]ImagePath=[%PROGRAM_FILES%]\4C4C4544-1471641767-5910-8052-C3C04F363132\jnsxEEB0.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\rijufoze]ImagePath=[%PROGRAM_FILES%]\4C4C4544-1471559729-5210-8051-B4C04F424331\hnsfF38B.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\dowidoly]ImagePath=[%PROGRAM_FILES%]\4C4C4544-1471559729-5210-8051-B4C04F424331\jnskDD6B.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\rijufoze]ImagePath=[%PROGRAM_FILES%]\47E3C63C-1471434730-2B45-2FCF-101F740B2589\hnsy7C6.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\zigipyro]ImagePath=[%LOCAL_APPDATA%]\47E3C63C-1471631129-2B45-2FCF-101F740B2589\qnswA620.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\dowidoly]ImagePath=[%PROGRAM_FILES%]\47E3C63C-1471434730-2B45-2FCF-101F740B2589\jnsnC604.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\dowidoly]ImagePath=[%PROGRAM_FILES%]\36444335-1471561883-3732-4D4C-4C3736314435\jnsgA3D.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\rijufoze]ImagePath=[%PROGRAM_FILES%]\36444335-1471561883-3732-4D4C-4C3736314435\hnsr2519.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\dowidoly]ImagePath=[%PROGRAM_FILES%]\DFC3E960-1471525691-11E2-8FB3-30F9EDA57475\jnsmAD5.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\rijufoze]ImagePath=[%PROGRAM_FILES%]\DFC3E960-1471525691-11E2-8FB3-30F9EDA57475\hnsm202A.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\zigipyro]ImagePath=[%LOCAL_APPDATA%]\8A030AB4-1471611884-11DE-BBDA-811D88D40024\qnsi3A.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\zutuzuni]ImagePath=[%PROGRAM_FILES%]\75202500-1454832813-11D5-AE12-F46D04DD65C3\jnsf550B.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\wucotusy]ImagePath=[%PROGRAM_FILES%]\75202500-1454832813-11D5-AE12-F46D04DD65C3\hnsf7C0D.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\rijufoze]ImagePath=[%PROGRAM_FILES%]\39464E43-1471437910-3730-5A4B-00238B732D47\hnsoB60E.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\dowidoly]ImagePath=[%PROGRAM_FILES%]\39464E43-1471437910-3730-5A4B-00238B732D47\jnsd1108.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\rijufoze]ImagePath=[%PROGRAM_FILES%]\02F3F327-1471464007-0B0D-AE74-38EAA7FC98A4\hnssAC9E.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\dowidoly]ImagePath=[%PROGRAM_FILES%]\02F3F327-1471464007-0B0D-AE74-38EAA7FC98A4\jnsi7B6B.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\zigipyro]ImagePath=[%LOCAL_APPDATA%]\A2AEB5E0-1471091850-544B-AD03-BA7EFC693273\qnsr84DF.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\rijufoze]ImagePath=[%PROGRAM_FILES%]\A2AEB5E0-1469619033-544B-AD03-BA7EFC693273\hnsrA2A5.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\dowidoly]ImagePath=[%PROGRAM_FILES%]\A2AEB5E0-1469619033-544B-AD03-BA7EFC693273\jnsj82B7.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\rijufoze]ImagePath=[%PROGRAM_FILES%]\63650E71-1471548335-E311-9021-201A06A30A67\hnse3C20.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\dowidoly]ImagePath=[%PROGRAM_FILES%]\63650E71-1471548335-E311-9021-201A06A30A67\jnsk23C5.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\rijufoze]ImagePath=[%PROGRAM_FILES%]\89A1B3D0-1471107325-11E4-A26A-F0761CAEFA3E\hnsq8F8A.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\dowidoly]ImagePath=[%PROGRAM_FILES%]\89A1B3D0-1471107325-11E4-A26A-F0761CAEFA3E\jnsq78FD.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\zigipyro]ImagePath=[%LOCAL_APPDATA%]\5C4606FA-1471531620-453A-B299-7B088C63BB9B\qnsw7B2A.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\rijufoze]ImagePath=[%PROGRAM_FILES%]\5C4606FA-1470979362-453A-B299-7B088C63BB9B\hnst20FB.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\dowidoly]ImagePath=[%PROGRAM_FILES%]\5C4606FA-1470979362-453A-B299-7B088C63BB9B\jnse986A.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\zigipyro]ImagePath=[%LOCAL_APPDATA%]\803897B8-1471519388-E211-A021-BAC51027DE1C\qnsu57CE.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\zigipyro]ImagePath=[%LOCAL_APPDATA%]\617448EE-1471479239-71B2-E04D-D02788DC3BAD\qnsb3D21.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\rijufoze]ImagePath=[%PROGRAM_FILES%]\617448EE-1471448971-71B2-E04D-D02788DC3BAD\hnsb4DC3.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\dowidoly]ImagePath=[%PROGRAM_FILES%]\617448EE-1471448971-71B2-E04D-D02788DC3BAD\jnsb364C.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\rijufoze]ImagePath=[%PROGRAM_FILES%]\4C4C4544-1471334743-5110-8042-B8C04F4A3153\hnss7038.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\dowidoly]ImagePath=[%PROGRAM_FILES%]\4C4C4544-1471334743-5110-8042-B8C04F4A3153\jnsc5815.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\zigipyro]ImagePath=[%LOCAL_APPDATA%]\03000200-1466701075-0500-0006-000700080009\qnsb7B87.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\rijufoze]ImagePath=[%PROGRAM_FILES%]\03000200-1466657965-0500-0006-000700080009\hnswEE5C.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\dowidoly]ImagePath=[%PROGRAM_FILES%]\03000200-1466657965-0500-0006-000700080009\jnscBBE6.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\zigipyro]ImagePath=[%LOCAL_APPDATA%]\03000200-1471368797-0500-0006-000700080009\qnse3D.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\zigipyro]ImagePath=[%LOCAL_APPDATA%]\03000200-1471436273-0500-0006-000700080009\qnswC6.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\rijufoze]ImagePath=[%PROGRAM_FILES%]\03000200-1470708325-0500-0006-000700080009\hnsq1E6.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\dowidoly]ImagePath=[%PROGRAM_FILES%]\03000200-1470708325-0500-0006-000700080009\jnsgE022.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\rijufoze]ImagePath=[%PROGRAM_FILES%]\68556F0A-1471419010-E211-9312-208984F3BED9\hnst41ED.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\dowidoly]ImagePath=[%PROGRAM_FILES%]\68556F0A-1471419010-E211-9312-208984F3BED9\jnsy2859.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\rijufoze]ImagePath=[%PROGRAM_FILES%]\A84D6A81-1471466326-11CB-9EEE-F8223818A428\hnssD0BE.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\dowidoly]ImagePath=[%PROGRAM_FILES%]\A84D6A81-1471466326-11CB-9EEE-F8223818A428\jnsh9A90.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\zigipyro]ImagePath=[%LOCAL_APPDATA%]\1E00B5A0-1471423618-DD00-865C-20CF303B54C7\qnsvC779.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\dowidoly]ImagePath=[%PROGRAM_FILES%]\1E00B5A0-1471437149-DD00-865C-20CF303B54C7\jnst72EA.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\rijufoze]ImagePath=[%PROGRAM_FILES%]\38464E43-1471352823-4B31-4C4A-00238B1BA053\hnslC347.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\dowidoly]ImagePath=[%PROGRAM_FILES%]\38464E43-1471352823-4B31-4C4A-00238B1BA053\jnslAA98.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\zigipyro]ImagePath=[%LOCAL_APPDATA%]\B8E54A80-1471423754-1016-9E7F-CD091116FAE2\qnsgB6.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\zigipyro]ImagePath=[%LOCAL_APPDATA%]\0FA6A7BF-1471447120-E411-B2A0-1458D0CA48B6\qnsz17DF.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\rijufoze]ImagePath=[%PROGRAM_FILES%]\0FA6A7BF-1471339553-E411-B2A0-1458D0CA48B6\hnsr5D05.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\dowidoly]ImagePath=[%PROGRAM_FILES%]\0FA6A7BF-1471339553-E411-B2A0-1458D0CA48B6\jnsk91FD.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\rijufoze]ImagePath=[%PROGRAM_FILES%]\032B0290-1471108063-05FC-8E06-F70700080009\hnsm3FEE.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\dowidoly]ImagePath=[%PROGRAM_FILES%]\032B0290-1471108063-05FC-8E06-F70700080009\jnsc194B.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\zigipyro]ImagePath=[%LOCAL_APPDATA%]\D64ADC4D-1471458309-E411-B2A0-1458D011940B\qnsu2D06.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\rijufoze]ImagePath=[%PROGRAM_FILES%]\D64ADC4D-1468925062-E411-B2A0-1458D011940B\hnsv450F.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\dowidoly]ImagePath=[%PROGRAM_FILES%]\D64ADC4D-1468925062-E411-B2A0-1458D011940B\jnsuCF22.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\zigipyro]ImagePath=[%LOCAL_APPDATA%]\30613863-1462453019-6462-6338-00235ADD1111\qnshDA59.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\rocufyky]ImagePath=[%PROGRAM_FILES%]\30613863-1462363842-6462-6338-00235ADD1111\jnsiAC3C.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\rijufoze]ImagePath=[%PROGRAM_FILES%]\30613863-1462363842-6462-6338-00235ADD1111\hnstCB91.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\rijufoze]ImagePath=[%PROGRAM_FILES%]\0000A623-1471352258-1A15-FFFF-E03F49BB78F3\hnsr3E81.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\dowidoly]ImagePath=[%PROGRAM_FILES%]\0000A623-1471352258-1A15-FFFF-E03F49BB78F3\jnst29B0.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\rijufoze]ImagePath=[%PROGRAM_FILES%]\73D27810-1471370520-1020-1202-151841000000\hnswC362.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\dowidoly]ImagePath=[%PROGRAM_FILES%]\73D27810-1471370520-1020-1202-151841000000\jnslA886.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\zigipyro]ImagePath=[%LOCAL_APPDATA%]\45408860-1471383808-11DD-91AE-1C872C5DA25A\qnsb6411.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\rijufoze]ImagePath=[%PROGRAM_FILES%]\45408860-1471352791-11DD-91AE-1C872C5DA25A\hnsc95A2.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\dowidoly]ImagePath=[%PROGRAM_FILES%]\45408860-1471352791-11DD-91AE-1C872C5DA25A\jnsc7507.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\rijufoze]ImagePath=[%PROGRAM_FILES%]\8C4DAFB4-1471218479-E311-A2DB-F8A9639762C7\hnsnB9A1.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\dowidoly]ImagePath=[%PROGRAM_FILES%]\8C4DAFB4-1471218479-E311-A2DB-F8A9639762C7\jnsk8CD3.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\gerocyni]ImagePath=[%PROGRAM_FILES%]\508F2249-1459298511-E311-A973-201A06958F8F\jnsp105.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\wucotusy]ImagePath=[%PROGRAM_FILES%]\508F2249-1459298511-E311-A973-201A06958F8F\hnsj8029.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\rowugoqo]ImagePath=[%LOCAL_APPDATA%]\508F2249-1459305875-E311-A973-201A06958F8F\snsz2405.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\rijufoze]ImagePath=[%PROGRAM_FILES%]\33444335-1463381907-3236-334C-A0D3C15D2551\hnszFC55.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\rijufoze]ImagePath=[%PROGRAM_FILES%]\D8FE6035-1467350340-37E0-5E8E-10604B49338B\hnsq14B6.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\dowidoly]ImagePath=[%PROGRAM_FILES%]\D8FE6035-1467350340-37E0-5E8E-10604B49338B\jnsxA5ED.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\zigipyro]ImagePath=[%LOCAL_APPDATA%]\03D40274-1471221462-05B2-8906-BE0700080009\qnsl2681.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\zigipyro]ImagePath=[%LOCAL_APPDATA%]\AA0CC1A1-1471303124-11E2-9A5E-060959836D87\qnso3F2E.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\rijufoze]ImagePath=[%PROGRAM_FILES%]\AA0CC1A1-1471105250-11E2-9A5E-060959836D87\hnskB880.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\dowidoly]ImagePath=[%PROGRAM_FILES%]\AA0CC1A1-1471105250-11E2-9A5E-060959836D87\jnsy9BCF.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\zigipyro]ImagePath=[%LOCAL_APPDATA%]\4C4C4544-1461680528-4710-8032-B2C04F5A5031\qnsg14CA.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\rocufyky]ImagePath=[%PROGRAM_FILES%]\4C4C4544-1461673101-4710-8032-B2C04F5A5031\jnspFEB9.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\rijufoze]ImagePath=[%PROGRAM_FILES%]\4C4C4544-1461673101-4710-8032-B2C04F5A5031\hnsp31EB.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\zigipyro]ImagePath=[%LOCAL_APPDATA%]\40D7F1BA-1471281988-E011-B978-8A00052D2F64\qnsm40DC.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\rijufoze]ImagePath=[%PROGRAM_FILES%]\40D7F1BA-1471273501-E011-B978-8A00052D2F64\hnspC303.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\dowidoly]ImagePath=[%PROGRAM_FILES%]\40D7F1BA-1471273501-E011-B978-8A00052D2F64\jnsbAD86.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\rijufoze]ImagePath=[%PROGRAM_FILES%]\1B4B0656-1471008396-22BE-D49F-536D0BAC7698\hnsi4342.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\zigipyro]ImagePath=[%LOCAL_APPDATA%]\426FB080-1471083406-E211-958D-208984BC971E\qnsz5EBB.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\rijufoze]ImagePath=[%PROGRAM_FILES%]\426FB080-1471007978-E211-958D-208984BC971E\hnsgA5C2.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\dowidoly]ImagePath=[%PROGRAM_FILES%]\426FB080-1471007978-E211-958D-208984BC971E\jnsj7A4B.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\rijufoze]ImagePath=[%PROGRAM_FILES%]\F3181A00-1471221491-1016-87B4-88891C6AE86E\hnsqC2E.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\dowidoly]ImagePath=[%PROGRAM_FILES%]\F3181A00-1471221491-1016-87B4-88891C6AE86E\jnsnF6A2.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\toniqobe]ImagePath=[%PROGRAM_FILES%]\22A547A0-1447056150-11DD-93DA-1CB72CAEA2BB\hnsgDD47.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\pyzeqewe]ImagePath=[%PROGRAM_FILES%]\22A547A0-1447056150-11DD-93DA-1CB72CAEA2BB\jnsbBEAE.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\linuniwe]ImagePath=[%PROGRAM_FILES%]\22A547A0-1447056150-11DD-93DA-1CB72CAEA2BB\knsfEE44.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\zigipyro]ImagePath=[%LOCAL_APPDATA%]\4C4C4544-1471276366-5110-8051-B2C04F5A4E31\qnso2FE2.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\rijufoze]ImagePath=[%PROGRAM_FILES%]\4C4C4544-1471014469-5110-8051-B2C04F5A4E31\hnsw6DB6.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\dowidoly]ImagePath=[%PROGRAM_FILES%]\4C4C4544-1471014469-5110-8051-B2C04F5A4E31\jnsn57BB.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\rijufoze]ImagePath=[%PROGRAM_FILES%]\00000000-1470557015-0000-0000-6CF049C60745\hnsj3AA9.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\dowidoly]ImagePath=[%PROGRAM_FILES%]\00000000-1470557015-0000-0000-6CF049C60745\jnsj1D19.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\rijufoze]ImagePath=[%PROGRAM_FILES%]\00E49210-1464436230-DE11-AA41-9DFE963530B7\hnsd25B9.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\dowidoly]ImagePath=[%PROGRAM_FILES%]\00E49210-1464436230-DE11-AA41-9DFE963530B7\jnsh947F.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\kygyhosy]ImagePath=[%APPDATA%]\E64C4821-1430455563-E211-80EF-B888E3B388AA\jnsn5BC0.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\dowidoly]ImagePath=[%PROGRAM_FILES%]\2408BE9E-1467311219-E511-90AB-DC4A3E156B22\jnspF8B.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\rijufoze]ImagePath=[%PROGRAM_FILES%]\2408BE9E-1467311219-E511-90AB-DC4A3E156B22\hnsl43BD.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\zutuzuni]ImagePath=[%PROGRAM_FILES%]\1E003A80-1452903351-4100-61BC-BCAEC57C9724\jnsnA759.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\wucotusy]ImagePath=[%PROGRAM_FILES%]\1E003A80-1452903351-4100-61BC-BCAEC57C9724\hnsnBED1.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\zigipyro]ImagePath=[%LOCAL_APPDATA%]\B0A52460-1453152739-11DD-85AF-544249FED5E7\qnsi8BFC.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\gihebene]ImagePath=[%PROGRAM_FILES%]\B0A52460-1446024045-11DD-85AF-544249FED5E7\jnsk364D.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\wozifomi]ImagePath=[%PROGRAM_FILES%]\ED392B80-1443878373-1014-90C3-DA27D58EA333\knsnC63.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\mucohozi]ImagePath=[%PROGRAM_FILES%]\ED392B80-1443878373-1014-90C3-DA27D58EA333\knsk10C2.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\lehicewu]ImagePath=[%PROGRAM_FILES%]\ED392B80-1443878373-1014-90C3-DA27D58EA333\jnsx16C1.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\rijufoze]ImagePath=[%PROGRAM_FILES%]\AF5C15E0-1470077571-11E0-B731-BCAEC5974331\hnsd2CE3.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\dowidoly]ImagePath=[%PROGRAM_FILES%]\AF5C15E0-1470077571-11E0-B731-BCAEC5974331\jnsy1448.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\zigipyro]ImagePath=[%LOCAL_APPDATA%]\87603F90-1471029434-11E3-AEED-78843C3656E4\qnsnC95D.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\rijufoze]ImagePath=[%PROGRAM_FILES%]\87603F90-1470966941-11E3-AEED-78843C3656E4\hnsdDF71.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\dowidoly]ImagePath=[%PROGRAM_FILES%]\87603F90-1470966941-11E3-AEED-78843C3656E4\jnsbC177.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\zigipyro]ImagePath=[%LOCAL_APPDATA%]\0B10F622-1471079657-8721-1A2B-38DF9EA723ED\qnszCFF5.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\rijufoze]ImagePath=[%PROGRAM_FILES%]\0B10F622-1471092133-8721-1A2B-38DF9EA723ED\hnsnFE89.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\dowidoly]ImagePath=[%PROGRAM_FILES%]\0B10F622-1471092133-8721-1A2B-38DF9EA723ED\jnsnE7AE.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\zigipyro]ImagePath=[%LOCAL_APPDATA%]\AFC99700-1470148758-8146-25A5-90E6BA7D0770\qnsh472F.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\rijufoze]ImagePath=[%PROGRAM_FILES%]\AFC99700-1470118140-8146-25A5-90E6BA7D0770\hnsb10A5.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\dowidoly]ImagePath=[%PROGRAM_FILES%]\AFC99700-1470118140-8146-25A5-90E6BA7D0770\jnsbEA3F.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\rijufoze]ImagePath=[%PROGRAM_FILES%]\1439235F-1465879672-E011-8B41-505054503030\hnsy13E0.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\dowidoly]ImagePath=[%PROGRAM_FILES%]\1439235F-1465879672-E011-8B41-505054503030\jnsoF0E4.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\zigipyro]ImagePath=[%LOCAL_APPDATA%]\9633ED2F-1471043986-0648-83F6-AC9E1740D739\qnse6260.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\rijufoze]ImagePath=[%PROGRAM_FILES%]\9633ED2F-1471018412-0648-83F6-AC9E1740D739\hnsl9599.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\dowidoly]ImagePath=[%PROGRAM_FILES%]\9633ED2F-1471018412-0648-83F6-AC9E1740D739\jnsr4B5F.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\dowidoly]ImagePath=[%PROGRAM_FILES%]\4C4C4544-1470938123-5A10-804A-B1C04F4B4232\jnsv90E1.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\zigipyro]ImagePath=[%LOCAL_APPDATA%]\0F311000-1469665619-11D5-9F4D-AC220B25E9D8\qnseD8FC.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\rijufoze]ImagePath=[%PROGRAM_FILES%]\0F311000-1469404450-11D5-9F4D-AC220B25E9D8\hnsr583F.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\dowidoly]ImagePath=[%PROGRAM_FILES%]\0F311000-1469404450-11D5-9F4D-AC220B25E9D8\jnsw4308.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\zigipyro]ImagePath=[%LOCAL_APPDATA%]\03000200-1471014039-0500-0006-000700080009\qnsgD8A4.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\rijufoze]ImagePath=[%PROGRAM_FILES%]\032B0290-1470878632-057F-5F06-D20700080009\hnsk5D44.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\dowidoly]ImagePath=[%PROGRAM_FILES%]\032B0290-1470878632-057F-5F06-D20700080009\jnsr2D59.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\zigipyro]ImagePath=[%LOCAL_APPDATA%]\939AD494-1470992725-CFA5-27CE-7824AF8F4842\qnsr697D.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\rijufoze]ImagePath=[%PROGRAM_FILES%]\939AD494-1470963331-CFA5-27CE-7824AF8F4842\hnsn13C1.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\dowidoly]ImagePath=[%PROGRAM_FILES%]\939AD494-1470963331-CFA5-27CE-7824AF8F4842\jnsxCC63.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\rijufoze]ImagePath=[%PROGRAM_FILES%]\4C4C4544-1468910773-3510-8033-B9C04F533153\hnsy68BE.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\dowidoly]ImagePath=[%PROGRAM_FILES%]\4C4C4544-1468910773-3510-8033-B9C04F533153\jnss29D8.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\rijufoze]ImagePath=[%PROGRAM_FILES%]\4C4C4544-1470916784-5410-8050-B8C04F423632\hnsyA05A.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\dowidoly]ImagePath=[%PROGRAM_FILES%]\4C4C4544-1470916784-5410-8050-B8C04F423632\jnsa7F72.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\rijufoze]ImagePath=[%PROGRAM_FILES%]\00000000-1470911422-0000-0000-00241DFB5514\hnsrCAB1.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\dowidoly]ImagePath=[%PROGRAM_FILES%]\00000000-1470911422-0000-0000-00241DFB5514\jnszABBD.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\zigipyro]ImagePath=[%LOCAL_APPDATA%]\800C1BE0-1470917309-E011-8F03-1078D2EA15B6\qnshD673.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\rijufoze]ImagePath=[%PROGRAM_FILES%]\800C1BE0-1470908360-E011-8F03-1078D2EA15B6\hnss2972.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\dowidoly]ImagePath=[%PROGRAM_FILES%]\800C1BE0-1470908360-E011-8F03-1078D2EA15B6\jnsy1046.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\zigipyro]ImagePath=[%LOCAL_APPDATA%]\70AA52E5-1470919661-DE11-BBA9-001E33C9BCC0\qnsxF91F.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\wucotusy]ImagePath=[%PROGRAM_FILES%]\70AA52E5-1457057800-DE11-BBA9-001E33C9BCC0\hnsa4980.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\gerocyni]ImagePath=[%PROGRAM_FILES%]\70AA52E5-1459087958-DE11-BBA9-001E33C9BCC0\jnsv3E97.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\rijufoze]ImagePath=[%PROGRAM_FILES%]\EBA82E18-1470917414-5BC0-93C6-CDBF6010BBFA\hnsnE05D.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\dowidoly]ImagePath=[%PROGRAM_FILES%]\EBA82E18-1470917414-5BC0-93C6-CDBF6010BBFA\jnsyC820.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\jiwizuqe]ImagePath=[%PROGRAM_FILES%]\841CB973-1469989678-9B46-A7A1-C45444689D19\znszE3C8.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\rijufoze]ImagePath=[%PROGRAM_FILES%]\4C4C4544-1470862293-4610-8037-B9C04F39344A\hnsx8789.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\dowidoly]ImagePath=[%PROGRAM_FILES%]\4C4C4544-1470862293-4610-8037-B9C04F39344A\jnst71FB.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\rijufoze]ImagePath=[%PROGRAM_FILES%]\FD002FC4-1467197529-11E2-ADBD-AEFB43AF733E\hnsg4156.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\dowidoly]ImagePath=[%PROGRAM_FILES%]\FD002FC4-1467197529-11E2-ADBD-AEFB43AF733E\jnsl2481.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\zigipyro]ImagePath=[%LOCAL_APPDATA%]\91FA0794-1470948161-9F4F-879E-089E0106ABA0\qnsk25FC.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\rijufoze]ImagePath=[%PROGRAM_FILES%]\91FA0794-1470919157-9F4F-879E-089E0106ABA0\hnsy5584.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\dowidoly]ImagePath=[%PROGRAM_FILES%]\91FA0794-1470919157-9F4F-879E-089E0106ABA0\jnsj3AF1.tmp
  • [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]autoauto=24664918.bat
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\zigipyro]ImagePath=[%LOCAL_APPDATA%]\527EBE92-1470932511-DF11-A847-0019997BC68B\qnsq38B0.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\rijufoze]ImagePath=[%PROGRAM_FILES%]\30464E43-1470905294-5344-4E43-C80AA9B87F61\hnsw8A1A.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\dowidoly]ImagePath=[%PROGRAM_FILES%]\30464E43-1470905294-5344-4E43-C80AA9B87F61\jnsg6662.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\zigipyro]ImagePath=[%LOCAL_APPDATA%]\4C4C4544-1470893609-3810-8030-B2C04F465331\qnspF4FB.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\rijufoze]ImagePath=[%PROGRAM_FILES%]\4C4C4544-1470916642-3810-8030-B2C04F465331\hnsx3D7F.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\dowidoly]ImagePath=[%PROGRAM_FILES%]\4C4C4544-1470916642-3810-8030-B2C04F465331\jnsrBA59.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\rijufoze]ImagePath=[%PROGRAM_FILES%]\50227D80-1470920146-11B2-8000-CDB2EE5096DA\hnsu300.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\dowidoly]ImagePath=[%PROGRAM_FILES%]\50227D80-1470920146-11B2-8000-CDB2EE5096DA\jnskA70A.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\rijufoze]ImagePath=[%PROGRAM_FILES%]\A829086C-1470756547-11E4-A26A-F0761CA39A4C\hnsmC364.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\dowidoly]ImagePath=[%PROGRAM_FILES%]\A829086C-1470756547-11E4-A26A-F0761CA39A4C\jnsxAA8B.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\zigipyro]ImagePath=[%LOCAL_APPDATA%]\A829086C-1470837167-11E4-A26A-F0761CA39A4C\qnsxE091.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\rijufoze]ImagePath=[%PROGRAM_FILES%]\4C4C4544-1470745036-5A10-8033-C8C04F344631\hnsc7EEC.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\dowidoly]ImagePath=[%PROGRAM_FILES%]\4C4C4544-1470745036-5A10-8033-C8C04F344631\jnss6256.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\zejytose]ImagePath=[%PROGRAM_FILES%]\00000000-1437273788-0000-0000-8C89A52DA8F3\jnsd534C.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\vicoqudu]ImagePath=[%PROGRAM_FILES%]\00000000-1437273788-0000-0000-8C89A52DA8F3\hnsoE35D.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\gopibeko]ImagePath=[%LOCAL_APPDATA%]\00000000-1437248706-0000-0000-8C89A52DA8F3\snse26B4.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\denesovy]ImagePath=[%PROGRAM_FILES%]\00000000-1437273788-0000-0000-8C89A52DA8F3\knsv8B2A.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\rijufoze]ImagePath=[%PROGRAM_FILES%]\C0BCF198-1470760605-E011-97ED-B181B0E41F51\hnsz74DB.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\dowidoly]ImagePath=[%PROGRAM_FILES%]\C0BCF198-1470760605-E011-97ED-B181B0E41F51\jnsu4156.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\vyzykoso]ImagePath=[%APPDATA%]\00000000-1436345470-0000-0000-6C626D7EAA0C\knspEDE2.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\zigipyro]ImagePath=[%LOCAL_APPDATA%]\81B12C30-1470843953-46C2-D638-A666F28282E6\qnsf13BB.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\konureno]ImagePath=[%LOCAL_APPDATA%]\50D6D760-1428437478-11DD-AB9B-50465D049F77\cnsoFC7C.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\zigipyro]ImagePath=[%LOCAL_APPDATA%]\B8E54A80-1470843370-1016-9E7F-CD091116FAE2\qnsw5D.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\vugynuxu]ImagePath=[%PROGRAM_FILES%]\03DE0294-1447008555-05CE-A206-D10700080009\knsh5932.tmpfs
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\toniqobe]ImagePath=[%PROGRAM_FILES%]\03DE0294-1447008555-05CE-A206-D10700080009\hnscAE1D.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\pyzeqewe]ImagePath=[%PROGRAM_FILES%]\03DE0294-1447008555-05CE-A206-D10700080009\jnsm8B4F.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\rijufoze]ImagePath=[%PROGRAM_FILES%]\032B0290-1470748110-050B-ED06-DA0700080009\hnst2E79.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\dowidoly]ImagePath=[%PROGRAM_FILES%]\032B0290-1470748110-050B-ED06-DA0700080009\jnso181A.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\rijufoze]ImagePath=[%PROGRAM_FILES%]\4C4C4544-1470721826-5610-8037-B2C04F4E334A\hnsf7E65.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\dowidoly]ImagePath=[%PROGRAM_FILES%]\4C4C4544-1470721826-5610-8037-B2C04F4E334A\jnsp446F.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\zigipyro]ImagePath=[%LOCAL_APPDATA%]\E5765B7D-1470739502-11E4-A961-68F7286FDF37\qnsu8ED4.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\rijufoze]ImagePath=[%PROGRAM_FILES%]\E5765B7D-1468833606-11E4-A961-68F7286FDF37\hnsh5F0D.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\dowidoly]ImagePath=[%PROGRAM_FILES%]\E5765B7D-1468833606-11E4-A961-68F7286FDF37\jnsc44EC.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\rocufyky]ImagePath=[%PROGRAM_FILES%]\69E9BF80-1461641429-11E0-B555-BCAEC55D7DCF\jnsk78F8.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\rijufoze]ImagePath=[%PROGRAM_FILES%]\69E9BF80-1461641429-11E0-B555-BCAEC55D7DCF\hnsv91E7.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\dowidoly]ImagePath=[%PROGRAM_FILES%]\81B12C30-1470676697-46C2-D638-A666F28282E6\jnsyA40.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\rijufoze]ImagePath=[%PROGRAM_FILES%]\81B12C30-1470676697-46C2-D638-A666F28282E6\hnsx2135.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\zizusyju]ImagePath=[%PROGRAM_FILES%]\03000200-1450482016-0500-0006-000700080009\hnsq1D4.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\woforemu]ImagePath=[%LOCAL_APPDATA%]\03000200-1450507360-0500-0006-000700080009\snsa1FF.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\rizyqibe]ImagePath=[%PROGRAM_FILES%]\03000200-1450482016-0500-0006-000700080009\jnsz1D2.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\hidekoqe]ImagePath=[%LOCAL_APPDATA%]\03000200-1450509292-0500-0006-000700080009\qnsb341.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\bujebuby]ImagePath=[%PROGRAM_FILES%]\03000200-1450482016-0500-0006-000700080009\knsi1C6.tmpfs
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\zigipyro]ImagePath=[%LOCAL_APPDATA%]\4C4C4544-1470617859-3210-8043-CAC04F503732\qnstE845.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\rijufoze]ImagePath=[%PROGRAM_FILES%]\4C4C4544-1470635737-3210-8043-CAC04F503732\hnsk3BCE.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\dowidoly]ImagePath=[%PROGRAM_FILES%]\4C4C4544-1470635737-3210-8043-CAC04F503732\jnsc26BE.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\rijufoze]ImagePath=[%PROGRAM_FILES%]\FBF81404-1470482452-11E0-BBDA-24315EC80023\hnss88A4.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\dowidoly]ImagePath=[%PROGRAM_FILES%]\FBF81404-1470482452-11E0-BBDA-24315EC80023\jnsh2C5F.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\dowidoly]ImagePath=[%PROGRAM_FILES%]\00000000-1470669017-0000-0000-50E54938C099\jnsn245.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\rijufoze]ImagePath=[%PROGRAM_FILES%]\00000000-1470669017-0000-0000-50E54938C099\hnsg1794.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\rijufoze]ImagePath=[%PROGRAM_FILES%]\CD1EBE20-1470581868-11D7-950A-0016360E3891\hnsgF0DA.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\dowidoly]ImagePath=[%PROGRAM_FILES%]\CD1EBE20-1470581868-11D7-950A-0016360E3891\jnsnD011.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\zigipyro]ImagePath=[%LOCAL_APPDATA%]\CD1EBE20-1470615329-11D7-950A-0016360E3891\qnsfC555.tmp