Exterminate It! Antimalware

malpedia

Known threats:700,086 Last Update:March 16, 12:51

Testimonials

Just want to say that apparently your Exterminate It has worked like a charm. I was infected with a most troublesome Malware Trojan that kept replicating every time McAfee found, blocked and removed it... most annoying for several days... until Mr. Google led me to your door. What a God send!

With thanks,

Tom S.

MultiPlug- Registry Values List

This is a complete list of MultiPlug registry values collected by Exterminate It!. If you find any of these registry values on your PC, your computer is very likely to be infected with the MultiPlug - adware.

IMPORTANT: Because the registry is a core component of your Windows system, it is strongly recommended that you back up the registry before you begin deleting keys and values. For information about backing up the Windows registry, refer to the Registry Editor online help.
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\rijufoze]ImagePath=[%PROGRAM_FILES%]\03E9C142-1469350628-E311-B737-A01D48095F5F\hnsy8844.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\dowidoly]ImagePath=[%PROGRAM_FILES%]\03E9C142-1469350628-E311-B737-A01D48095F5F\jnsp676B.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\rijufoze]ImagePath=[%PROGRAM_FILES%]\32444335-1470036441-5036-4B4A-84349786F0F5\hnsl5E5B.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\dowidoly]ImagePath=[%PROGRAM_FILES%]\32444335-1470036441-5036-4B4A-84349786F0F5\jnsj40FD.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\rocufyky]ImagePath=[%PROGRAM_FILES%]\4C4C4544-1460512100-5910-8054-C7C04F465231\jnsy5FA4.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\rijufoze]ImagePath=[%PROGRAM_FILES%]\4C4C4544-1460512100-5910-8054-C7C04F465231\hnso7B22.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\rijufoze]ImagePath=[%PROGRAM_FILES%]\D600692B-1471644547-11DE-BBDA-649E427AD485\hnsi61E.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\zigipyro]ImagePath=[%LOCAL_APPDATA%]\D600692B-1471654372-11DE-BBDA-649E427AD485\qnsv9321.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\dowidoly]ImagePath=[%PROGRAM_FILES%]\D600692B-1471644547-11DE-BBDA-649E427AD485\jnspCCDC.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\zigipyro]ImagePath=[%LOCAL_APPDATA%]\03000200-1471704342-0500-0006-000700080009\qnsk39B.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\rijufoze]ImagePath=[%PROGRAM_FILES%]\4C4C4544-1471708964-5310-8030-B9C04F585731\hnss65A2.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\dowidoly]ImagePath=[%PROGRAM_FILES%]\4C4C4544-1471708964-5310-8030-B9C04F585731\jnsc503D.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\rijufoze]ImagePath=[%PROGRAM_FILES%]\0E8E760E-1471725698-11DD-BBD8-85386AF90021\hnsz9E0B.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\dowidoly]ImagePath=[%PROGRAM_FILES%]\0E8E760E-1471725698-11DD-BBD8-85386AF90021\jnse5FB3.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\rijufoze]ImagePath=[%PROGRAM_FILES%]\4C4C4544-1471641767-5910-8052-C3C04F363132\hnsxEAF.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\zigipyro]ImagePath=[%LOCAL_APPDATA%]\4C4C4544-1471724149-5910-8052-C3C04F363132\qnsw34C8.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\dowidoly]ImagePath=[%PROGRAM_FILES%]\4C4C4544-1471641767-5910-8052-C3C04F363132\jnsxEEB0.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\rijufoze]ImagePath=[%PROGRAM_FILES%]\4C4C4544-1471559729-5210-8051-B4C04F424331\hnsfF38B.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\dowidoly]ImagePath=[%PROGRAM_FILES%]\4C4C4544-1471559729-5210-8051-B4C04F424331\jnskDD6B.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\rijufoze]ImagePath=[%PROGRAM_FILES%]\47E3C63C-1471434730-2B45-2FCF-101F740B2589\hnsy7C6.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\zigipyro]ImagePath=[%LOCAL_APPDATA%]\47E3C63C-1471631129-2B45-2FCF-101F740B2589\qnswA620.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\dowidoly]ImagePath=[%PROGRAM_FILES%]\47E3C63C-1471434730-2B45-2FCF-101F740B2589\jnsnC604.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\dowidoly]ImagePath=[%PROGRAM_FILES%]\36444335-1471561883-3732-4D4C-4C3736314435\jnsgA3D.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\rijufoze]ImagePath=[%PROGRAM_FILES%]\36444335-1471561883-3732-4D4C-4C3736314435\hnsr2519.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\dowidoly]ImagePath=[%PROGRAM_FILES%]\DFC3E960-1471525691-11E2-8FB3-30F9EDA57475\jnsmAD5.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\rijufoze]ImagePath=[%PROGRAM_FILES%]\DFC3E960-1471525691-11E2-8FB3-30F9EDA57475\hnsm202A.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\zigipyro]ImagePath=[%LOCAL_APPDATA%]\8A030AB4-1471611884-11DE-BBDA-811D88D40024\qnsi3A.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\zutuzuni]ImagePath=[%PROGRAM_FILES%]\75202500-1454832813-11D5-AE12-F46D04DD65C3\jnsf550B.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\wucotusy]ImagePath=[%PROGRAM_FILES%]\75202500-1454832813-11D5-AE12-F46D04DD65C3\hnsf7C0D.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\rijufoze]ImagePath=[%PROGRAM_FILES%]\39464E43-1471437910-3730-5A4B-00238B732D47\hnsoB60E.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\dowidoly]ImagePath=[%PROGRAM_FILES%]\39464E43-1471437910-3730-5A4B-00238B732D47\jnsd1108.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\rijufoze]ImagePath=[%PROGRAM_FILES%]\02F3F327-1471464007-0B0D-AE74-38EAA7FC98A4\hnssAC9E.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\dowidoly]ImagePath=[%PROGRAM_FILES%]\02F3F327-1471464007-0B0D-AE74-38EAA7FC98A4\jnsi7B6B.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\zigipyro]ImagePath=[%LOCAL_APPDATA%]\A2AEB5E0-1471091850-544B-AD03-BA7EFC693273\qnsr84DF.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\rijufoze]ImagePath=[%PROGRAM_FILES%]\A2AEB5E0-1469619033-544B-AD03-BA7EFC693273\hnsrA2A5.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\dowidoly]ImagePath=[%PROGRAM_FILES%]\A2AEB5E0-1469619033-544B-AD03-BA7EFC693273\jnsj82B7.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\rijufoze]ImagePath=[%PROGRAM_FILES%]\63650E71-1471548335-E311-9021-201A06A30A67\hnse3C20.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\dowidoly]ImagePath=[%PROGRAM_FILES%]\63650E71-1471548335-E311-9021-201A06A30A67\jnsk23C5.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\rijufoze]ImagePath=[%PROGRAM_FILES%]\89A1B3D0-1471107325-11E4-A26A-F0761CAEFA3E\hnsq8F8A.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\dowidoly]ImagePath=[%PROGRAM_FILES%]\89A1B3D0-1471107325-11E4-A26A-F0761CAEFA3E\jnsq78FD.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\zigipyro]ImagePath=[%LOCAL_APPDATA%]\5C4606FA-1471531620-453A-B299-7B088C63BB9B\qnsw7B2A.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\rijufoze]ImagePath=[%PROGRAM_FILES%]\5C4606FA-1470979362-453A-B299-7B088C63BB9B\hnst20FB.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\dowidoly]ImagePath=[%PROGRAM_FILES%]\5C4606FA-1470979362-453A-B299-7B088C63BB9B\jnse986A.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\zigipyro]ImagePath=[%LOCAL_APPDATA%]\803897B8-1471519388-E211-A021-BAC51027DE1C\qnsu57CE.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\zigipyro]ImagePath=[%LOCAL_APPDATA%]\617448EE-1471479239-71B2-E04D-D02788DC3BAD\qnsb3D21.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\rijufoze]ImagePath=[%PROGRAM_FILES%]\617448EE-1471448971-71B2-E04D-D02788DC3BAD\hnsb4DC3.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\dowidoly]ImagePath=[%PROGRAM_FILES%]\617448EE-1471448971-71B2-E04D-D02788DC3BAD\jnsb364C.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\rijufoze]ImagePath=[%PROGRAM_FILES%]\4C4C4544-1471334743-5110-8042-B8C04F4A3153\hnss7038.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\dowidoly]ImagePath=[%PROGRAM_FILES%]\4C4C4544-1471334743-5110-8042-B8C04F4A3153\jnsc5815.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\zigipyro]ImagePath=[%LOCAL_APPDATA%]\03000200-1466701075-0500-0006-000700080009\qnsb7B87.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\rijufoze]ImagePath=[%PROGRAM_FILES%]\03000200-1466657965-0500-0006-000700080009\hnswEE5C.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\dowidoly]ImagePath=[%PROGRAM_FILES%]\03000200-1466657965-0500-0006-000700080009\jnscBBE6.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\zigipyro]ImagePath=[%LOCAL_APPDATA%]\03000200-1471368797-0500-0006-000700080009\qnse3D.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\zigipyro]ImagePath=[%LOCAL_APPDATA%]\03000200-1471436273-0500-0006-000700080009\qnswC6.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\rijufoze]ImagePath=[%PROGRAM_FILES%]\03000200-1470708325-0500-0006-000700080009\hnsq1E6.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\dowidoly]ImagePath=[%PROGRAM_FILES%]\03000200-1470708325-0500-0006-000700080009\jnsgE022.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\rijufoze]ImagePath=[%PROGRAM_FILES%]\68556F0A-1471419010-E211-9312-208984F3BED9\hnst41ED.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\dowidoly]ImagePath=[%PROGRAM_FILES%]\68556F0A-1471419010-E211-9312-208984F3BED9\jnsy2859.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\rijufoze]ImagePath=[%PROGRAM_FILES%]\A84D6A81-1471466326-11CB-9EEE-F8223818A428\hnssD0BE.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\dowidoly]ImagePath=[%PROGRAM_FILES%]\A84D6A81-1471466326-11CB-9EEE-F8223818A428\jnsh9A90.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\zigipyro]ImagePath=[%LOCAL_APPDATA%]\1E00B5A0-1471423618-DD00-865C-20CF303B54C7\qnsvC779.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\dowidoly]ImagePath=[%PROGRAM_FILES%]\1E00B5A0-1471437149-DD00-865C-20CF303B54C7\jnst72EA.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\rijufoze]ImagePath=[%PROGRAM_FILES%]\38464E43-1471352823-4B31-4C4A-00238B1BA053\hnslC347.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\dowidoly]ImagePath=[%PROGRAM_FILES%]\38464E43-1471352823-4B31-4C4A-00238B1BA053\jnslAA98.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\zigipyro]ImagePath=[%LOCAL_APPDATA%]\B8E54A80-1471423754-1016-9E7F-CD091116FAE2\qnsgB6.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\zigipyro]ImagePath=[%LOCAL_APPDATA%]\0FA6A7BF-1471447120-E411-B2A0-1458D0CA48B6\qnsz17DF.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\rijufoze]ImagePath=[%PROGRAM_FILES%]\0FA6A7BF-1471339553-E411-B2A0-1458D0CA48B6\hnsr5D05.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\dowidoly]ImagePath=[%PROGRAM_FILES%]\0FA6A7BF-1471339553-E411-B2A0-1458D0CA48B6\jnsk91FD.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\rijufoze]ImagePath=[%PROGRAM_FILES%]\032B0290-1471108063-05FC-8E06-F70700080009\hnsm3FEE.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\dowidoly]ImagePath=[%PROGRAM_FILES%]\032B0290-1471108063-05FC-8E06-F70700080009\jnsc194B.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\zigipyro]ImagePath=[%LOCAL_APPDATA%]\D64ADC4D-1471458309-E411-B2A0-1458D011940B\qnsu2D06.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\rijufoze]ImagePath=[%PROGRAM_FILES%]\D64ADC4D-1468925062-E411-B2A0-1458D011940B\hnsv450F.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\dowidoly]ImagePath=[%PROGRAM_FILES%]\D64ADC4D-1468925062-E411-B2A0-1458D011940B\jnsuCF22.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\zigipyro]ImagePath=[%LOCAL_APPDATA%]\30613863-1462453019-6462-6338-00235ADD1111\qnshDA59.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\rocufyky]ImagePath=[%PROGRAM_FILES%]\30613863-1462363842-6462-6338-00235ADD1111\jnsiAC3C.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\rijufoze]ImagePath=[%PROGRAM_FILES%]\30613863-1462363842-6462-6338-00235ADD1111\hnstCB91.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\rijufoze]ImagePath=[%PROGRAM_FILES%]\0000A623-1471352258-1A15-FFFF-E03F49BB78F3\hnsr3E81.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\dowidoly]ImagePath=[%PROGRAM_FILES%]\0000A623-1471352258-1A15-FFFF-E03F49BB78F3\jnst29B0.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\rijufoze]ImagePath=[%PROGRAM_FILES%]\73D27810-1471370520-1020-1202-151841000000\hnswC362.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\dowidoly]ImagePath=[%PROGRAM_FILES%]\73D27810-1471370520-1020-1202-151841000000\jnslA886.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\zigipyro]ImagePath=[%LOCAL_APPDATA%]\45408860-1471383808-11DD-91AE-1C872C5DA25A\qnsb6411.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\rijufoze]ImagePath=[%PROGRAM_FILES%]\45408860-1471352791-11DD-91AE-1C872C5DA25A\hnsc95A2.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\dowidoly]ImagePath=[%PROGRAM_FILES%]\45408860-1471352791-11DD-91AE-1C872C5DA25A\jnsc7507.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\rijufoze]ImagePath=[%PROGRAM_FILES%]\8C4DAFB4-1471218479-E311-A2DB-F8A9639762C7\hnsnB9A1.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\dowidoly]ImagePath=[%PROGRAM_FILES%]\8C4DAFB4-1471218479-E311-A2DB-F8A9639762C7\jnsk8CD3.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\gerocyni]ImagePath=[%PROGRAM_FILES%]\508F2249-1459298511-E311-A973-201A06958F8F\jnsp105.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\wucotusy]ImagePath=[%PROGRAM_FILES%]\508F2249-1459298511-E311-A973-201A06958F8F\hnsj8029.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\rowugoqo]ImagePath=[%LOCAL_APPDATA%]\508F2249-1459305875-E311-A973-201A06958F8F\snsz2405.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\rijufoze]ImagePath=[%PROGRAM_FILES%]\33444335-1463381907-3236-334C-A0D3C15D2551\hnszFC55.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\rijufoze]ImagePath=[%PROGRAM_FILES%]\D8FE6035-1467350340-37E0-5E8E-10604B49338B\hnsq14B6.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\dowidoly]ImagePath=[%PROGRAM_FILES%]\D8FE6035-1467350340-37E0-5E8E-10604B49338B\jnsxA5ED.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\zigipyro]ImagePath=[%LOCAL_APPDATA%]\03D40274-1471221462-05B2-8906-BE0700080009\qnsl2681.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\zigipyro]ImagePath=[%LOCAL_APPDATA%]\AA0CC1A1-1471303124-11E2-9A5E-060959836D87\qnso3F2E.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\rijufoze]ImagePath=[%PROGRAM_FILES%]\AA0CC1A1-1471105250-11E2-9A5E-060959836D87\hnskB880.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\dowidoly]ImagePath=[%PROGRAM_FILES%]\AA0CC1A1-1471105250-11E2-9A5E-060959836D87\jnsy9BCF.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\zigipyro]ImagePath=[%LOCAL_APPDATA%]\4C4C4544-1461680528-4710-8032-B2C04F5A5031\qnsg14CA.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\rocufyky]ImagePath=[%PROGRAM_FILES%]\4C4C4544-1461673101-4710-8032-B2C04F5A5031\jnspFEB9.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\rijufoze]ImagePath=[%PROGRAM_FILES%]\4C4C4544-1461673101-4710-8032-B2C04F5A5031\hnsp31EB.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\zigipyro]ImagePath=[%LOCAL_APPDATA%]\40D7F1BA-1471281988-E011-B978-8A00052D2F64\qnsm40DC.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\rijufoze]ImagePath=[%PROGRAM_FILES%]\40D7F1BA-1471273501-E011-B978-8A00052D2F64\hnspC303.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\dowidoly]ImagePath=[%PROGRAM_FILES%]\40D7F1BA-1471273501-E011-B978-8A00052D2F64\jnsbAD86.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\rijufoze]ImagePath=[%PROGRAM_FILES%]\1B4B0656-1471008396-22BE-D49F-536D0BAC7698\hnsi4342.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\zigipyro]ImagePath=[%LOCAL_APPDATA%]\426FB080-1471083406-E211-958D-208984BC971E\qnsz5EBB.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\rijufoze]ImagePath=[%PROGRAM_FILES%]\426FB080-1471007978-E211-958D-208984BC971E\hnsgA5C2.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\dowidoly]ImagePath=[%PROGRAM_FILES%]\426FB080-1471007978-E211-958D-208984BC971E\jnsj7A4B.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\rijufoze]ImagePath=[%PROGRAM_FILES%]\F3181A00-1471221491-1016-87B4-88891C6AE86E\hnsqC2E.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\dowidoly]ImagePath=[%PROGRAM_FILES%]\F3181A00-1471221491-1016-87B4-88891C6AE86E\jnsnF6A2.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\toniqobe]ImagePath=[%PROGRAM_FILES%]\22A547A0-1447056150-11DD-93DA-1CB72CAEA2BB\hnsgDD47.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\pyzeqewe]ImagePath=[%PROGRAM_FILES%]\22A547A0-1447056150-11DD-93DA-1CB72CAEA2BB\jnsbBEAE.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\linuniwe]ImagePath=[%PROGRAM_FILES%]\22A547A0-1447056150-11DD-93DA-1CB72CAEA2BB\knsfEE44.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\zigipyro]ImagePath=[%LOCAL_APPDATA%]\4C4C4544-1471276366-5110-8051-B2C04F5A4E31\qnso2FE2.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\rijufoze]ImagePath=[%PROGRAM_FILES%]\4C4C4544-1471014469-5110-8051-B2C04F5A4E31\hnsw6DB6.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\dowidoly]ImagePath=[%PROGRAM_FILES%]\4C4C4544-1471014469-5110-8051-B2C04F5A4E31\jnsn57BB.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\rijufoze]ImagePath=[%PROGRAM_FILES%]\00000000-1470557015-0000-0000-6CF049C60745\hnsj3AA9.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\dowidoly]ImagePath=[%PROGRAM_FILES%]\00000000-1470557015-0000-0000-6CF049C60745\jnsj1D19.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\rijufoze]ImagePath=[%PROGRAM_FILES%]\00E49210-1464436230-DE11-AA41-9DFE963530B7\hnsd25B9.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\dowidoly]ImagePath=[%PROGRAM_FILES%]\00E49210-1464436230-DE11-AA41-9DFE963530B7\jnsh947F.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\kygyhosy]ImagePath=[%APPDATA%]\E64C4821-1430455563-E211-80EF-B888E3B388AA\jnsn5BC0.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\dowidoly]ImagePath=[%PROGRAM_FILES%]\2408BE9E-1467311219-E511-90AB-DC4A3E156B22\jnspF8B.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\rijufoze]ImagePath=[%PROGRAM_FILES%]\2408BE9E-1467311219-E511-90AB-DC4A3E156B22\hnsl43BD.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\zutuzuni]ImagePath=[%PROGRAM_FILES%]\1E003A80-1452903351-4100-61BC-BCAEC57C9724\jnsnA759.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\wucotusy]ImagePath=[%PROGRAM_FILES%]\1E003A80-1452903351-4100-61BC-BCAEC57C9724\hnsnBED1.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\zigipyro]ImagePath=[%LOCAL_APPDATA%]\B0A52460-1453152739-11DD-85AF-544249FED5E7\qnsi8BFC.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\gihebene]ImagePath=[%PROGRAM_FILES%]\B0A52460-1446024045-11DD-85AF-544249FED5E7\jnsk364D.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\wozifomi]ImagePath=[%PROGRAM_FILES%]\ED392B80-1443878373-1014-90C3-DA27D58EA333\knsnC63.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\mucohozi]ImagePath=[%PROGRAM_FILES%]\ED392B80-1443878373-1014-90C3-DA27D58EA333\knsk10C2.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\lehicewu]ImagePath=[%PROGRAM_FILES%]\ED392B80-1443878373-1014-90C3-DA27D58EA333\jnsx16C1.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\rijufoze]ImagePath=[%PROGRAM_FILES%]\AF5C15E0-1470077571-11E0-B731-BCAEC5974331\hnsd2CE3.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\dowidoly]ImagePath=[%PROGRAM_FILES%]\AF5C15E0-1470077571-11E0-B731-BCAEC5974331\jnsy1448.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\zigipyro]ImagePath=[%LOCAL_APPDATA%]\87603F90-1471029434-11E3-AEED-78843C3656E4\qnsnC95D.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\rijufoze]ImagePath=[%PROGRAM_FILES%]\87603F90-1470966941-11E3-AEED-78843C3656E4\hnsdDF71.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\dowidoly]ImagePath=[%PROGRAM_FILES%]\87603F90-1470966941-11E3-AEED-78843C3656E4\jnsbC177.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\zigipyro]ImagePath=[%LOCAL_APPDATA%]\0B10F622-1471079657-8721-1A2B-38DF9EA723ED\qnszCFF5.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\rijufoze]ImagePath=[%PROGRAM_FILES%]\0B10F622-1471092133-8721-1A2B-38DF9EA723ED\hnsnFE89.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\dowidoly]ImagePath=[%PROGRAM_FILES%]\0B10F622-1471092133-8721-1A2B-38DF9EA723ED\jnsnE7AE.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\zigipyro]ImagePath=[%LOCAL_APPDATA%]\AFC99700-1470148758-8146-25A5-90E6BA7D0770\qnsh472F.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\rijufoze]ImagePath=[%PROGRAM_FILES%]\AFC99700-1470118140-8146-25A5-90E6BA7D0770\hnsb10A5.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\dowidoly]ImagePath=[%PROGRAM_FILES%]\AFC99700-1470118140-8146-25A5-90E6BA7D0770\jnsbEA3F.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\rijufoze]ImagePath=[%PROGRAM_FILES%]\1439235F-1465879672-E011-8B41-505054503030\hnsy13E0.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\dowidoly]ImagePath=[%PROGRAM_FILES%]\1439235F-1465879672-E011-8B41-505054503030\jnsoF0E4.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\zigipyro]ImagePath=[%LOCAL_APPDATA%]\9633ED2F-1471043986-0648-83F6-AC9E1740D739\qnse6260.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\rijufoze]ImagePath=[%PROGRAM_FILES%]\9633ED2F-1471018412-0648-83F6-AC9E1740D739\hnsl9599.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\dowidoly]ImagePath=[%PROGRAM_FILES%]\9633ED2F-1471018412-0648-83F6-AC9E1740D739\jnsr4B5F.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\dowidoly]ImagePath=[%PROGRAM_FILES%]\4C4C4544-1470938123-5A10-804A-B1C04F4B4232\jnsv90E1.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\zigipyro]ImagePath=[%LOCAL_APPDATA%]\0F311000-1469665619-11D5-9F4D-AC220B25E9D8\qnseD8FC.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\rijufoze]ImagePath=[%PROGRAM_FILES%]\0F311000-1469404450-11D5-9F4D-AC220B25E9D8\hnsr583F.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\dowidoly]ImagePath=[%PROGRAM_FILES%]\0F311000-1469404450-11D5-9F4D-AC220B25E9D8\jnsw4308.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\zigipyro]ImagePath=[%LOCAL_APPDATA%]\03000200-1471014039-0500-0006-000700080009\qnsgD8A4.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\rijufoze]ImagePath=[%PROGRAM_FILES%]\032B0290-1470878632-057F-5F06-D20700080009\hnsk5D44.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\dowidoly]ImagePath=[%PROGRAM_FILES%]\032B0290-1470878632-057F-5F06-D20700080009\jnsr2D59.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\zigipyro]ImagePath=[%LOCAL_APPDATA%]\939AD494-1470992725-CFA5-27CE-7824AF8F4842\qnsr697D.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\rijufoze]ImagePath=[%PROGRAM_FILES%]\939AD494-1470963331-CFA5-27CE-7824AF8F4842\hnsn13C1.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\dowidoly]ImagePath=[%PROGRAM_FILES%]\939AD494-1470963331-CFA5-27CE-7824AF8F4842\jnsxCC63.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\rijufoze]ImagePath=[%PROGRAM_FILES%]\4C4C4544-1468910773-3510-8033-B9C04F533153\hnsy68BE.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\dowidoly]ImagePath=[%PROGRAM_FILES%]\4C4C4544-1468910773-3510-8033-B9C04F533153\jnss29D8.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\rijufoze]ImagePath=[%PROGRAM_FILES%]\4C4C4544-1470916784-5410-8050-B8C04F423632\hnsyA05A.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\dowidoly]ImagePath=[%PROGRAM_FILES%]\4C4C4544-1470916784-5410-8050-B8C04F423632\jnsa7F72.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\rijufoze]ImagePath=[%PROGRAM_FILES%]\00000000-1470911422-0000-0000-00241DFB5514\hnsrCAB1.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\dowidoly]ImagePath=[%PROGRAM_FILES%]\00000000-1470911422-0000-0000-00241DFB5514\jnszABBD.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\zigipyro]ImagePath=[%LOCAL_APPDATA%]\800C1BE0-1470917309-E011-8F03-1078D2EA15B6\qnshD673.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\rijufoze]ImagePath=[%PROGRAM_FILES%]\800C1BE0-1470908360-E011-8F03-1078D2EA15B6\hnss2972.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\dowidoly]ImagePath=[%PROGRAM_FILES%]\800C1BE0-1470908360-E011-8F03-1078D2EA15B6\jnsy1046.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\zigipyro]ImagePath=[%LOCAL_APPDATA%]\70AA52E5-1470919661-DE11-BBA9-001E33C9BCC0\qnsxF91F.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\wucotusy]ImagePath=[%PROGRAM_FILES%]\70AA52E5-1457057800-DE11-BBA9-001E33C9BCC0\hnsa4980.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\gerocyni]ImagePath=[%PROGRAM_FILES%]\70AA52E5-1459087958-DE11-BBA9-001E33C9BCC0\jnsv3E97.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\rijufoze]ImagePath=[%PROGRAM_FILES%]\EBA82E18-1470917414-5BC0-93C6-CDBF6010BBFA\hnsnE05D.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\dowidoly]ImagePath=[%PROGRAM_FILES%]\EBA82E18-1470917414-5BC0-93C6-CDBF6010BBFA\jnsyC820.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\jiwizuqe]ImagePath=[%PROGRAM_FILES%]\841CB973-1469989678-9B46-A7A1-C45444689D19\znszE3C8.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\rijufoze]ImagePath=[%PROGRAM_FILES%]\4C4C4544-1470862293-4610-8037-B9C04F39344A\hnsx8789.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\dowidoly]ImagePath=[%PROGRAM_FILES%]\4C4C4544-1470862293-4610-8037-B9C04F39344A\jnst71FB.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\rijufoze]ImagePath=[%PROGRAM_FILES%]\FD002FC4-1467197529-11E2-ADBD-AEFB43AF733E\hnsg4156.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\dowidoly]ImagePath=[%PROGRAM_FILES%]\FD002FC4-1467197529-11E2-ADBD-AEFB43AF733E\jnsl2481.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\zigipyro]ImagePath=[%LOCAL_APPDATA%]\91FA0794-1470948161-9F4F-879E-089E0106ABA0\qnsk25FC.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\rijufoze]ImagePath=[%PROGRAM_FILES%]\91FA0794-1470919157-9F4F-879E-089E0106ABA0\hnsy5584.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\dowidoly]ImagePath=[%PROGRAM_FILES%]\91FA0794-1470919157-9F4F-879E-089E0106ABA0\jnsj3AF1.tmp
  • [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]autoauto=24664918.bat
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\zigipyro]ImagePath=[%LOCAL_APPDATA%]\527EBE92-1470932511-DF11-A847-0019997BC68B\qnsq38B0.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\rijufoze]ImagePath=[%PROGRAM_FILES%]\30464E43-1470905294-5344-4E43-C80AA9B87F61\hnsw8A1A.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\dowidoly]ImagePath=[%PROGRAM_FILES%]\30464E43-1470905294-5344-4E43-C80AA9B87F61\jnsg6662.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\zigipyro]ImagePath=[%LOCAL_APPDATA%]\4C4C4544-1470893609-3810-8030-B2C04F465331\qnspF4FB.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\rijufoze]ImagePath=[%PROGRAM_FILES%]\4C4C4544-1470916642-3810-8030-B2C04F465331\hnsx3D7F.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\dowidoly]ImagePath=[%PROGRAM_FILES%]\4C4C4544-1470916642-3810-8030-B2C04F465331\jnsrBA59.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\rijufoze]ImagePath=[%PROGRAM_FILES%]\50227D80-1470920146-11B2-8000-CDB2EE5096DA\hnsu300.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\dowidoly]ImagePath=[%PROGRAM_FILES%]\50227D80-1470920146-11B2-8000-CDB2EE5096DA\jnskA70A.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\rijufoze]ImagePath=[%PROGRAM_FILES%]\A829086C-1470756547-11E4-A26A-F0761CA39A4C\hnsmC364.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\dowidoly]ImagePath=[%PROGRAM_FILES%]\A829086C-1470756547-11E4-A26A-F0761CA39A4C\jnsxAA8B.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\zigipyro]ImagePath=[%LOCAL_APPDATA%]\A829086C-1470837167-11E4-A26A-F0761CA39A4C\qnsxE091.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\rijufoze]ImagePath=[%PROGRAM_FILES%]\4C4C4544-1470745036-5A10-8033-C8C04F344631\hnsc7EEC.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\dowidoly]ImagePath=[%PROGRAM_FILES%]\4C4C4544-1470745036-5A10-8033-C8C04F344631\jnss6256.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\zejytose]ImagePath=[%PROGRAM_FILES%]\00000000-1437273788-0000-0000-8C89A52DA8F3\jnsd534C.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\vicoqudu]ImagePath=[%PROGRAM_FILES%]\00000000-1437273788-0000-0000-8C89A52DA8F3\hnsoE35D.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\gopibeko]ImagePath=[%LOCAL_APPDATA%]\00000000-1437248706-0000-0000-8C89A52DA8F3\snse26B4.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\denesovy]ImagePath=[%PROGRAM_FILES%]\00000000-1437273788-0000-0000-8C89A52DA8F3\knsv8B2A.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\rijufoze]ImagePath=[%PROGRAM_FILES%]\C0BCF198-1470760605-E011-97ED-B181B0E41F51\hnsz74DB.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\dowidoly]ImagePath=[%PROGRAM_FILES%]\C0BCF198-1470760605-E011-97ED-B181B0E41F51\jnsu4156.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\vyzykoso]ImagePath=[%APPDATA%]\00000000-1436345470-0000-0000-6C626D7EAA0C\knspEDE2.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\zigipyro]ImagePath=[%LOCAL_APPDATA%]\81B12C30-1470843953-46C2-D638-A666F28282E6\qnsf13BB.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\konureno]ImagePath=[%LOCAL_APPDATA%]\50D6D760-1428437478-11DD-AB9B-50465D049F77\cnsoFC7C.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\zigipyro]ImagePath=[%LOCAL_APPDATA%]\B8E54A80-1470843370-1016-9E7F-CD091116FAE2\qnsw5D.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\vugynuxu]ImagePath=[%PROGRAM_FILES%]\03DE0294-1447008555-05CE-A206-D10700080009\knsh5932.tmpfs
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\toniqobe]ImagePath=[%PROGRAM_FILES%]\03DE0294-1447008555-05CE-A206-D10700080009\hnscAE1D.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\pyzeqewe]ImagePath=[%PROGRAM_FILES%]\03DE0294-1447008555-05CE-A206-D10700080009\jnsm8B4F.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\rijufoze]ImagePath=[%PROGRAM_FILES%]\032B0290-1470748110-050B-ED06-DA0700080009\hnst2E79.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\dowidoly]ImagePath=[%PROGRAM_FILES%]\032B0290-1470748110-050B-ED06-DA0700080009\jnso181A.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\rijufoze]ImagePath=[%PROGRAM_FILES%]\4C4C4544-1470721826-5610-8037-B2C04F4E334A\hnsf7E65.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\dowidoly]ImagePath=[%PROGRAM_FILES%]\4C4C4544-1470721826-5610-8037-B2C04F4E334A\jnsp446F.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\zigipyro]ImagePath=[%LOCAL_APPDATA%]\E5765B7D-1470739502-11E4-A961-68F7286FDF37\qnsu8ED4.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\rijufoze]ImagePath=[%PROGRAM_FILES%]\E5765B7D-1468833606-11E4-A961-68F7286FDF37\hnsh5F0D.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\dowidoly]ImagePath=[%PROGRAM_FILES%]\E5765B7D-1468833606-11E4-A961-68F7286FDF37\jnsc44EC.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\rocufyky]ImagePath=[%PROGRAM_FILES%]\69E9BF80-1461641429-11E0-B555-BCAEC55D7DCF\jnsk78F8.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\rijufoze]ImagePath=[%PROGRAM_FILES%]\69E9BF80-1461641429-11E0-B555-BCAEC55D7DCF\hnsv91E7.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\dowidoly]ImagePath=[%PROGRAM_FILES%]\81B12C30-1470676697-46C2-D638-A666F28282E6\jnsyA40.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\rijufoze]ImagePath=[%PROGRAM_FILES%]\81B12C30-1470676697-46C2-D638-A666F28282E6\hnsx2135.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\zizusyju]ImagePath=[%PROGRAM_FILES%]\03000200-1450482016-0500-0006-000700080009\hnsq1D4.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\woforemu]ImagePath=[%LOCAL_APPDATA%]\03000200-1450507360-0500-0006-000700080009\snsa1FF.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\rizyqibe]ImagePath=[%PROGRAM_FILES%]\03000200-1450482016-0500-0006-000700080009\jnsz1D2.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\hidekoqe]ImagePath=[%LOCAL_APPDATA%]\03000200-1450509292-0500-0006-000700080009\qnsb341.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\bujebuby]ImagePath=[%PROGRAM_FILES%]\03000200-1450482016-0500-0006-000700080009\knsi1C6.tmpfs
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\zigipyro]ImagePath=[%LOCAL_APPDATA%]\4C4C4544-1470617859-3210-8043-CAC04F503732\qnstE845.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\rijufoze]ImagePath=[%PROGRAM_FILES%]\4C4C4544-1470635737-3210-8043-CAC04F503732\hnsk3BCE.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\dowidoly]ImagePath=[%PROGRAM_FILES%]\4C4C4544-1470635737-3210-8043-CAC04F503732\jnsc26BE.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\rijufoze]ImagePath=[%PROGRAM_FILES%]\FBF81404-1470482452-11E0-BBDA-24315EC80023\hnss88A4.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\dowidoly]ImagePath=[%PROGRAM_FILES%]\FBF81404-1470482452-11E0-BBDA-24315EC80023\jnsh2C5F.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\dowidoly]ImagePath=[%PROGRAM_FILES%]\00000000-1470669017-0000-0000-50E54938C099\jnsn245.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\rijufoze]ImagePath=[%PROGRAM_FILES%]\00000000-1470669017-0000-0000-50E54938C099\hnsg1794.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\rijufoze]ImagePath=[%PROGRAM_FILES%]\CD1EBE20-1470581868-11D7-950A-0016360E3891\hnsgF0DA.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\dowidoly]ImagePath=[%PROGRAM_FILES%]\CD1EBE20-1470581868-11D7-950A-0016360E3891\jnsnD011.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\zigipyro]ImagePath=[%LOCAL_APPDATA%]\CD1EBE20-1470615329-11D7-950A-0016360E3891\qnsfC555.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\zigipyro]ImagePath=[%LOCAL_APPDATA%]\111B167F-1470658935-11E4-BC0E-4022BD12F8FF\qnsj3981.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\rijufoze]ImagePath=[%PROGRAM_FILES%]\111B167F-1470227449-11E4-BC0E-4022BD12F8FF\hnsx3E07.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\dowidoly]ImagePath=[%PROGRAM_FILES%]\111B167F-1470227449-11E4-BC0E-4022BD12F8FF\jnswBCEE.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\rijufoze]ImagePath=[%PROGRAM_FILES%]\4C4C4544-1470490950-3510-8053-C4C04F344253\hnspD427.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\dowidoly]ImagePath=[%PROGRAM_FILES%]\4C4C4544-1470490950-3510-8053-C4C04F344253\jnseB860.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\vohyqiki]ImagePath=[%PROGRAM_FILES%]\EA647900-1449570637-81E3-2686-D850E6001EC7\knsc3957.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\rijufoze]ImagePath=[%PROGRAM_FILES%]\34444335-1470159429-4232-4838-8CDCD47A01E9\hnspA245.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\dowidoly]ImagePath=[%PROGRAM_FILES%]\34444335-1470159429-4232-4838-8CDCD47A01E9\jnsn844B.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\rijufoze]ImagePath=[%PROGRAM_FILES%]\393D1C80-1470456231-11D5-A740-20CF30DF7660\hnsa124C.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\dowidoly]ImagePath=[%PROGRAM_FILES%]\393D1C80-1470456231-11D5-A740-20CF30DF7660\jnsqF2AA.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\dowidoly]ImagePath=[%PROGRAM_FILES%]\00000000-1470586930-0000-0000-50E5498447F0\jnsw56E.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\rijufoze]ImagePath=[%PROGRAM_FILES%]\00000000-1470586930-0000-0000-50E5498447F0\hnsw212A.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\rijufoze]ImagePath=[%PROGRAM_FILES%]\15C0C783-1470557465-E511-8B16-9457A5AB4269\hnskAAE0.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\dowidoly]ImagePath=[%PROGRAM_FILES%]\15C0C783-1470557465-E511-8B16-9457A5AB4269\jnst8E0F.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\zigipyro]ImagePath=[%LOCAL_APPDATA%]\CD1EBE20-1470594649-11D7-950A-0016360E3891\qnsf4E95.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\rijufoze]ImagePath=[%PROGRAM_FILES%]\4C4C4544-1470525305-5110-8046-B3C04F5A5131\hnsr66FF.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\dowidoly]ImagePath=[%PROGRAM_FILES%]\4C4C4544-1470525305-5110-8046-B3C04F5A5131\jnsh4A1B.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\rijufoze]ImagePath=[%PROGRAM_FILES%]\9B65F53D-1466433328-E011-A924-B870F42F0EFD\hnsm89B8.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\dowidoly]ImagePath=[%PROGRAM_FILES%]\9B65F53D-1466433328-E011-A924-B870F42F0EFD\jnsk6A86.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\ruqoweki]ImagePath=[%PROGRAM_FILES%]\37464E43-1450940227-4D34-4653-001B24D077F3\knsy163A.tmpfs
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\zigipyro]ImagePath=[%LOCAL_APPDATA%]\AEA7271E-1470566489-11E4-A961-68F72880441E\qnsl9BA9.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\rijufoze]ImagePath=[%PROGRAM_FILES%]\AEA7271E-1470558298-11E4-A961-68F72880441E\hnsoC274.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\dowidoly]ImagePath=[%PROGRAM_FILES%]\AEA7271E-1470558298-11E4-A961-68F72880441E\jnscA4D8.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\zigipyro]ImagePath=[%LOCAL_APPDATA%]\406A681F-1470527127-DF11-AE8A-7071BC428102\qnsr118F.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\rijufoze]ImagePath=[%PROGRAM_FILES%]\406A681F-1470506599-DF11-AE8A-7071BC428102\hnsjD29D.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\dowidoly]ImagePath=[%PROGRAM_FILES%]\406A681F-1470506599-DF11-AE8A-7071BC428102\jnsy8324.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\wejukeme]ImagePath=[%PROGRAM_FILES%]\4C4C4544-1443705861-3510-8036-B1C04F4D5231\knsz5B35.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\lehicewu]ImagePath=[%PROGRAM_FILES%]\4C4C4544-1443705861-3510-8036-B1C04F4D5231\jnsvADFC.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\gyvixodu]ImagePath=[%PROGRAM_FILES%]\4C4C4544-1443705861-3510-8036-B1C04F4D5231\hnsl2188.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\zigipyro]ImagePath=[%LOCAL_APPDATA%]\D7A60000-1459468383-7B4A-8507-17BC8C800726\qnsr5C25.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\zigipyro]ImagePath=[%LOCAL_APPDATA%]\4C4C4544-1470441435-5410-8034-B9C04F355131\qnsf238B.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\rijufoze]ImagePath=[%PROGRAM_FILES%]\4C4C4544-1470413586-5410-8034-B9C04F355131\hnsoD5FE.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\dowidoly]ImagePath=[%PROGRAM_FILES%]\4C4C4544-1470413586-5410-8034-B9C04F355131\jnsvC013.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\rijufoze]ImagePath=[%PROGRAM_FILES%]\4C4C4544-1470412420-4C10-804B-B2C04F325931\hnsg4DA.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\dowidoly]ImagePath=[%PROGRAM_FILES%]\4C4C4544-1470412420-4C10-804B-B2C04F325931\jnscECDC.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\rijufoze]ImagePath=[%PROGRAM_FILES%]\B677D281-1470401436-11CB-8C9A-C5570E205158\hnsdFCF1.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\dowidoly]ImagePath=[%PROGRAM_FILES%]\B677D281-1470401436-11CB-8C9A-C5570E205158\jnsfCE6D.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\zigipyro]ImagePath=[%LOCAL_APPDATA%]\3AD0CBC5-1465817560-E011-BB4B-000EA68F73AD\qnsv675B.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\zigipyro]ImagePath=[%LOCAL_APPDATA%]\80785F81-1470328958-11CB-B624-837BB69C96DA\qnsm8E8.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\rijufoze]ImagePath=[%PROGRAM_FILES%]\80785F81-1470259277-11CB-B624-837BB69C96DA\hnsu7300.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\dowidoly]ImagePath=[%PROGRAM_FILES%]\80785F81-1470259277-11CB-B624-837BB69C96DA\jnsj588B.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\dowidoly]ImagePath=[%PROGRAM_FILES%]\E136F4E9-1470236576-E411-B2A0-1458D00A839C\jnsc44.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\rijufoze]ImagePath=[%PROGRAM_FILES%]\E136F4E9-1470236576-E411-B2A0-1458D00A839C\hnsw3C94.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\zigipyro]ImagePath=[%LOCAL_APPDATA%]\00000000-1470310134-0000-0000-D43D7ED81A63\qnsg696.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\rijufoze]ImagePath=[%PROGRAM_FILES%]\00000000-1469796879-0000-0000-D43D7ED81A63\hnsk4784.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\dowidoly]ImagePath=[%PROGRAM_FILES%]\00000000-1469796879-0000-0000-D43D7ED81A63\jnsa2DE0.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\rijufoze]ImagePath=[%PROGRAM_FILES%]\01264251-1470140784-1F40-5201-D017C294D0CC\hnsjCCA5.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\dowidoly]ImagePath=[%PROGRAM_FILES%]\01264251-1470140784-1F40-5201-D017C294D0CC\jnssB022.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\zigipyro]ImagePath=[%LOCAL_APPDATA%]\A879D1F2-1470165020-E511-A726-F0761CC53ADB\qnsk5278.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\rijufoze]ImagePath=[%PROGRAM_FILES%]\A879D1F2-1469053101-E511-A726-F0761CC53ADB\hnsc8126.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\dowidoly]ImagePath=[%PROGRAM_FILES%]\A879D1F2-1469053101-E511-A726-F0761CC53ADB\jnsx5D5F.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\rijufoze]ImagePath=[%PROGRAM_FILES%]\31324138-1469789860-3032-3546-383931314531\hnszBB5B.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\dowidoly]ImagePath=[%PROGRAM_FILES%]\31324138-1469789860-3032-3546-383931314531\jnso9F94.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\zigipyro]ImagePath=[%LOCAL_APPDATA%]\31324138-1469879087-3032-3546-383931314531\qnsk4CD0.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\rijufoze]ImagePath=[%PROGRAM_FILES%]\858E73A1-1470202977-4968-DE21-382C4ABC3E99\hnslD245.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\dowidoly]ImagePath=[%PROGRAM_FILES%]\858E73A1-1470202977-4968-DE21-382C4ABC3E99\jnsaAF96.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\zigipyro]ImagePath=[%LOCAL_APPDATA%]\4C4C4544-1470234497-3510-8050-CAC04F333332\qnsk8776.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\rijufoze]ImagePath=[%PROGRAM_FILES%]\4C4C4544-1470137457-3510-8050-CAC04F333332\hnsw86E2.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\dowidoly]ImagePath=[%PROGRAM_FILES%]\4C4C4544-1470137457-3510-8050-CAC04F333332\jnse65CC.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\rijufoze]ImagePath=[%PROGRAM_FILES%]\E222961F-1469836468-F011-91A4-6CBCF4F5684E\hnsd89E7.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\dowidoly]ImagePath=[%PROGRAM_FILES%]\E222961F-1469836468-F011-91A4-6CBCF4F5684E\jnsx7061.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\rijufoze]ImagePath=[%PROGRAM_FILES%]\588856A0-1470145991-11B2-8000-E714A378A677\hnsl6AE5.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\dowidoly]ImagePath=[%PROGRAM_FILES%]\588856A0-1470145991-11B2-8000-E714A378A677\jnsf4D35.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\rijufoze]ImagePath=[%PROGRAM_FILES%]\E8B428F9-1470205502-AD4D-A13B-27D02B339029\hnsp838F.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\dowidoly]ImagePath=[%PROGRAM_FILES%]\E8B428F9-1470205502-AD4D-A13B-27D02B339029\jnsg551A.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\rijufoze]ImagePath=[%PROGRAM_FILES%]\4C4C4544-1465045732-3910-804B-B7C04F4E5031\hnspFC13.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\dowidoly]ImagePath=[%PROGRAM_FILES%]\4C4C4544-1465045732-3910-804B-B7C04F4E5031\jnskE2A8.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\rijufoze]ImagePath=[%PROGRAM_FILES%]\6C63CAF7-1469705194-DF11-AF83-00270E035F08\hnsc15E6.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\dowidoly]ImagePath=[%PROGRAM_FILES%]\6C63CAF7-1469705194-DF11-AF83-00270E035F08\jnssFA3A.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\zigipyro]ImagePath=[%LOCAL_APPDATA%]\33444335-1470236187-4637-3547-A0481C02F11F\qnsz66C3.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\dowidoly]ImagePath=[%PROGRAM_FILES%]\70C355EC-1469425082-E011-A409-00266CC914DC\jnsc1E4.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\zigipyro]ImagePath=[%LOCAL_APPDATA%]\598426EF-1470153352-E211-A286-2089842813B2\qnsf5983.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\rijufoze]ImagePath=[%PROGRAM_FILES%]\598426EF-1470142366-E211-A286-2089842813B2\hnsrEF1B.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\dowidoly]ImagePath=[%PROGRAM_FILES%]\598426EF-1470142366-E211-A286-2089842813B2\jnskD1EC.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\rijufoze]ImagePath=[%PROGRAM_FILES%]\03AA02FC-1470139404-0522-8706-8E0700080009\hnswC90.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\dowidoly]ImagePath=[%PROGRAM_FILES%]\03AA02FC-1470139404-0522-8706-8E0700080009\jnsdF78F.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\rijufoze]ImagePath=[%PROGRAM_FILES%]\195FBA20-1470070276-11DD-A332-002354B77662\hnsx32D5.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\dowidoly]ImagePath=[%PROGRAM_FILES%]\195FBA20-1470070276-11DD-A332-002354B77662\jnss165E.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\dowidoly]ImagePath=[%PROGRAM_FILES%]\4C4C4544-1470087385-4E10-8035-B1C04F383332\jnssF06.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\rijufoze]ImagePath=[%PROGRAM_FILES%]\4C4C4544-1470087385-4E10-8035-B1C04F383332\hnsc26D6.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\rijufoze]ImagePath=[%PROGRAM_FILES%]\A4049784-1469988660-E511-8B16-9457A5B08EB9\hnseED80.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\rijufoze]ImagePath=[%PROGRAM_FILES%]\E94F3607-1470106323-DB11-A299-000C6E0802C5\hnsfA6B7.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\dowidoly]ImagePath=[%PROGRAM_FILES%]\E94F3607-1470106323-DB11-A299-000C6E0802C5\jnsj8979.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\totyseku]ImagePath=[%PROGRAM_FILES%]\7C042139-1440714817-11DC-BBDA-FE9A95DF000F\hnsk1675.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\jimocoso]ImagePath=[%PROGRAM_FILES%]\7C042139-1440714817-11DC-BBDA-FE9A95DF000F\jnsfF7DC.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\dowidoly]ImagePath=[%PROGRAM_FILES%]\4C4C4544-1470073123-4410-804A-C3C04F354E31\jnsv1883.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\rijufoze]ImagePath=[%PROGRAM_FILES%]\4902BCDA-1469810116-D443-B0DD-A1EE9BD5B21B\hnsg6FC0.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\dowidoly]ImagePath=[%PROGRAM_FILES%]\4902BCDA-1469810116-D443-B0DD-A1EE9BD5B21B\jnss1C4E.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\zigipyro]ImagePath=[%LOCAL_APPDATA%]\4C4C4544-1470091268-3010-8046-B3C04F465631\qnsc65D6.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\rijufoze]ImagePath=[%PROGRAM_FILES%]\4C4C4544-1470053154-3010-8046-B3C04F465631\hnsx7C5F.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\dowidoly]ImagePath=[%PROGRAM_FILES%]\4C4C4544-1470053154-3010-8046-B3C04F465631\jnss61BC.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\zigipyro]ImagePath=[%LOCAL_APPDATA%]\31324138-1470005937-3032-3546-383931314531\qnsp1BCD.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\rijufoze]ImagePath=[%PROGRAM_FILES%]\6369BDF3-1469259610-DF11-A658-88AE1DCE505F\hnspE65.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\zigipyro]ImagePath=[%LOCAL_APPDATA%]\6369BDF3-1469998007-DF11-A658-88AE1DCE505F\qnsc7550.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\dowidoly]ImagePath=[%PROGRAM_FILES%]\6369BDF3-1469259610-DF11-A658-88AE1DCE505F\jnsfB74F.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\rijufoze]ImagePath=[%PROGRAM_FILES%]\20408A7E-1469676528-E111-AF62-90599BA98A89\hnss702.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\dowidoly]ImagePath=[%PROGRAM_FILES%]\20408A7E-1469676528-E111-AF62-90599BA98A89\jnseD90A.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\rijufoze]ImagePath=[%PROGRAM_FILES%]\BB599EE0-1469965777-11DD-84A4-5442490BA952\hnsz34DD.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\dowidoly]ImagePath=[%PROGRAM_FILES%]\BB599EE0-1469965777-11DD-84A4-5442490BA952\jnsj1993.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\rijufoze]ImagePath=[%PROGRAM_FILES%]\0A619AFE-1468064526-DC11-9A0A-00112550A0B2\hnss7FA0.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\dowidoly]ImagePath=[%PROGRAM_FILES%]\0A619AFE-1468064526-DC11-9A0A-00112550A0B2\jnsn5CC3.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\rijufoze]ImagePath=[%PROGRAM_FILES%]\C7E6D65C-1469867182-6E08-EC6D-A5DFCB070829\hnsk62DE.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\dowidoly]ImagePath=[%PROGRAM_FILES%]\C7E6D65C-1469867182-6E08-EC6D-A5DFCB070829\jnse4270.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\zigipyro]ImagePath=[%LOCAL_APPDATA%]\31324138-1469886375-3032-3546-383931314531\qnse86C0.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\dowidoly]ImagePath=[%PROGRAM_FILES%]\0013128F-1469977773-8019-FFFF-14DAE95EE8E5\jnsuA6BA.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\rijufoze]ImagePath=[%PROGRAM_FILES%]\7B07E739-1469928654-9D0C-2ABA-BB6E9CA8ABDD\hnsyD7F6.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\dowidoly]ImagePath=[%PROGRAM_FILES%]\7B07E739-1469928654-9D0C-2ABA-BB6E9CA8ABDD\jnsnBE1D.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\rijufoze]ImagePath=[%PROGRAM_FILES%]\38464E43-1469912414-3230-5659-001E68AB4A4B\hnskC47A.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\dowidoly]ImagePath=[%PROGRAM_FILES%]\38464E43-1469912414-3230-5659-001E68AB4A4B\jnskAA44.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\zigipyro]ImagePath=[%LOCAL_APPDATA%]\00000000-1469984858-0000-0000-D8CB8A9F2EAB\qnsyDBE2.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\rijufoze]ImagePath=[%PROGRAM_FILES%]\00000000-1469977550-0000-0000-D8CB8A9F2EAB\hnsl70E9.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\dowidoly]ImagePath=[%PROGRAM_FILES%]\00000000-1469977550-0000-0000-D8CB8A9F2EAB\jnsh5ABF.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\dowidoly]ImagePath=[%PROGRAM_FILES%]\A2FEB19A-1466046688-1943-93C5-38A448E7FF01\jnsfAB83.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\totyseku]ImagePath=[%PROGRAM_FILES%]\51FD5E48-1441648728-11E0-91B3-5FD40026BCC1\hnsz67D8.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\zigipyro]ImagePath=[%LOCAL_APPDATA%]\6ACDF261-1469880653-11E1-9161-07E705440A5F\qnsnDD75.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\rijufoze]ImagePath=[%PROGRAM_FILES%]\6ACDF261-1468267406-11E1-9161-07E705440A5F\hnsxC7D7.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\dowidoly]ImagePath=[%PROGRAM_FILES%]\6ACDF261-1468267406-11E1-9161-07E705440A5F\jnsi9706.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\rijufoze]ImagePath=[%PROGRAM_FILES%]\35444335-1469876436-5133-5048-D0BF9C892D58\hnsgE1B0.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\dowidoly]ImagePath=[%PROGRAM_FILES%]\35444335-1469876436-5133-5048-D0BF9C892D58\jnsgC7AE.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\dowidoly]ImagePath=[%PROGRAM_FILES%]\A2A57DA4-1469876191-F740-B3BD-089E0195E51B\jnsdD27.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\zigipyro]ImagePath=[%LOCAL_APPDATA%]\A2A57DA4-1469887833-F740-B3BD-089E0195E51B\qnstA147.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\rijufoze]ImagePath=[%PROGRAM_FILES%]\A2A57DA4-1469876191-F740-B3BD-089E0195E51B\hnss3E2C.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\rijufoze]ImagePath=[%PROGRAM_FILES%]\03000200-1469629264-0500-0006-000700080009\hnswE274.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\dowidoly]ImagePath=[%PROGRAM_FILES%]\03000200-1469629264-0500-0006-000700080009\jnsbBF87.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\rijufoze]ImagePath=[%PROGRAM_FILES%]\03DE0294-1469709600-0573-9806-670700080009\hnst8D3B.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\dowidoly]ImagePath=[%PROGRAM_FILES%]\03DE0294-1469709600-0573-9806-670700080009\jnss6500.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\zigipyro]ImagePath=[%LOCAL_APPDATA%]\03000200-1469807779-0500-0006-000700080009\qnsg3B30.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\rijufoze]ImagePath=[%PROGRAM_FILES%]\03000200-1469797939-0500-0006-000700080009\hnsa3BCC.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\dowidoly]ImagePath=[%PROGRAM_FILES%]\03000200-1469797939-0500-0006-000700080009\jnsp2241.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\rijufoze]ImagePath=[%PROGRAM_FILES%]\48BBFCB0-1467899740-CB61-CE6A-F07959689A86\hnsm6EE6.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\dowidoly]ImagePath=[%PROGRAM_FILES%]\48BBFCB0-1467899740-CB61-CE6A-F07959689A86\jnsr5467.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\rijufoze]ImagePath=[%PROGRAM_FILES%]\E2B5CD4E-1469794060-11E6-B27E-1C3947C5EFEC\hnse4316.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\dowidoly]ImagePath=[%PROGRAM_FILES%]\E2B5CD4E-1469794060-11E6-B27E-1C3947C5EFEC\jnsw223E.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\jiwizuqe]ImagePath=[%PROGRAM_FILES%]\1AD1CD00-1469800130-11DD-AA6B-08606EC6F4F2\znsd977A.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\rijufoze]ImagePath=[%PROGRAM_FILES%]\03D40274-1469791987-05C3-5906-F00700080009\hnsi4B96.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\dowidoly]ImagePath=[%PROGRAM_FILES%]\03D40274-1469791987-05C3-5906-F00700080009\jnsn2F5D.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\rijufoze]ImagePath=[%PROGRAM_FILES%]\98F4D846-1469792115-128C-94D3-3367B27081F8\hnsn41AD.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\dowidoly]ImagePath=[%PROGRAM_FILES%]\98F4D846-1469792115-128C-94D3-3367B27081F8\jnsy2970.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\zigipyro]ImagePath=[%LOCAL_APPDATA%]\4C4C4544-1469224872-0010-8000-80C04F000000\qnst8B47.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\rijufoze]ImagePath=[%PROGRAM_FILES%]\4C4C4544-1469215219-0010-8000-80C04F000000\hnsj8AF9.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\dowidoly]ImagePath=[%PROGRAM_FILES%]\4C4C4544-1469215219-0010-8000-80C04F000000\jnsz6CDD.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\rijufoze]ImagePath=[%PROGRAM_FILES%]\F12A3180-1469606019-11DF-97F6-BC2BF99672F1\hnsuCEB6.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\dowidoly]ImagePath=[%PROGRAM_FILES%]\F12A3180-1469606019-11DF-97F6-BC2BF99672F1\jnseB644.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\zutuzuni]ImagePath=[%PROGRAM_FILES%]\76C8BD8B-1454597964-119D-B11D-6AAC997816F3\jnsl84D7.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\wucotusy]ImagePath=[%PROGRAM_FILES%]\76C8BD8B-1454597964-119D-B11D-6AAC997816F3\hnsv9D91.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\suromiku]ImagePath=[%PROGRAM_FILES%]\805E58D7-1450794404-0AAA-8FCE-E03F4955E86B\knsm8DD6.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\zigipyro]ImagePath=[%LOCAL_APPDATA%]\447C9081-1468671910-DB11-88EE-0007E9747DB3\qnso7AFA.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\rijufoze]ImagePath=[%PROGRAM_FILES%]\447C9081-1467901204-DB11-88EE-0007E9747DB3\hnszE535.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\dowidoly]ImagePath=[%PROGRAM_FILES%]\447C9081-1467901204-DB11-88EE-0007E9747DB3\jnshAC8F.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\rijufoze]ImagePath=[%PROGRAM_FILES%]\4C4C4544-1469535963-4210-804E-B5C04F513153\hnsg5E7A.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\dowidoly]ImagePath=[%PROGRAM_FILES%]\4C4C4544-1469535963-4210-804E-B5C04F513153\jnsy3E8C.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\rijufoze]ImagePath=[%PROGRAM_FILES%]\00000011-1464882464-0000-0000-BCEE7B51285B\hnse454.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\dowidoly]ImagePath=[%PROGRAM_FILES%]\00000011-1464882464-0000-0000-BCEE7B51285B\jnsoE8D6.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\zigipyro]ImagePath=[%LOCAL_APPDATA%]\97D62BA0-1469634339-11B2-8000-F5A44B0EE852\qnsfAB.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\zigipyro]ImagePath=[%LOCAL_APPDATA%]\40736400-1469634152-DE11-906D-002622DCC6C3\qnst87.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\rijufoze]ImagePath=[%PROGRAM_FILES%]\00C21DDF-1464968247-3854-F9F3-4E45435F4349\hnsc775E.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\dowidoly]ImagePath=[%PROGRAM_FILES%]\00C21DDF-1464968247-3854-F9F3-4E45435F4349\jnsw61E8.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\rijufoze]ImagePath=[%PROGRAM_FILES%]\4C4C4544-1468917065-3310-8039-B2C04F435231\hnsa430C.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\dowidoly]ImagePath=[%PROGRAM_FILES%]\4C4C4544-1468917065-3310-8039-B2C04F435231\jnsh624F.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\wucotusy]ImagePath=[%PROGRAM_FILES%]\94800900-1458755953-1012-A9DF-9A0331506FFB\hnsz3381.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\dowidoly]ImagePath=[%PROGRAM_FILES%]\4C4C4544-1469493722-4410-8034-C3C04F333132\jnsj7BF3.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\zigipyro]ImagePath=[%LOCAL_APPDATA%]\41313030-1469613176-3839-4242-3334FFFFFFFF\qnst101E.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\zigipyro]ImagePath=[%LOCAL_APPDATA%]\03000200-1469619339-0500-0006-000700080009\qnsvABBD.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\rijufoze]ImagePath=[%PROGRAM_FILES%]\03000200-1469563364-0500-0006-000700080009\hnsr6831.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\dowidoly]ImagePath=[%PROGRAM_FILES%]\03000200-1469563364-0500-0006-000700080009\jnst3B81.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\rijufoze]ImagePath=[%PROGRAM_FILES%]\038D0240-1469484327-05BD-C106-6B0700080009\hnsgF0C0.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\dowidoly]ImagePath=[%PROGRAM_FILES%]\038D0240-1469484327-05BD-C106-6B0700080009\jnscD9FA.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\rijufoze]ImagePath=[%PROGRAM_FILES%]\9A549080-1469090092-11E1-A0DD-ECA86B7AEBAF\hnsu4F0C.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\dowidoly]ImagePath=[%PROGRAM_FILES%]\9A549080-1469090092-11E1-A0DD-ECA86B7AEBAF\jnsk2DE4.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\rijufoze]ImagePath=[%PROGRAM_FILES%]\322DE980-1469388188-11DC-A551-1C872C586799\hnspB30B.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\dowidoly]ImagePath=[%PROGRAM_FILES%]\322DE980-1469388188-11DC-A551-1C872C586799\jnsq9CB2.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\rijufoze]ImagePath=[%PROGRAM_FILES%]\6017A0F1-1469485661-E411-B0B0-008CFA879EC4\hnsc38F2.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\dowidoly]ImagePath=[%PROGRAM_FILES%]\6017A0F1-1469485661-E411-B0B0-008CFA879EC4\jnsx1FBB.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\zigipyro]ImagePath=[%LOCAL_APPDATA%]\00000000-1469415522-0000-0000-6CF049AD47C2\qnsn3D6F.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\rijufoze]ImagePath=[%PROGRAM_FILES%]\00000000-1469403046-0000-0000-6CF049AD47C2\hnsoC96A.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\dowidoly]ImagePath=[%PROGRAM_FILES%]\00000000-1469403046-0000-0000-6CF049AD47C2\jnse5DEA.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\zigipyro]ImagePath=[%LOCAL_APPDATA%]\4C4C4544-1469498950-5010-8039-B9C04F4E5231\qnsyAE4A.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\rijufoze]ImagePath=[%PROGRAM_FILES%]\4C4C4544-1469389542-5010-8039-B9C04F4E5231\hnseED2E.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\dowidoly]ImagePath=[%PROGRAM_FILES%]\4C4C4544-1469389542-5010-8039-B9C04F4E5231\jnstCC05.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\rijufoze]ImagePath=[%PROGRAM_FILES%]\038D0240-1469536553-05E0-1706-9D0700080009\hnst85ED.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\dowidoly]ImagePath=[%PROGRAM_FILES%]\038D0240-1469536553-05E0-1706-9D0700080009\jnsy6DAA.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\zigipyro]ImagePath=[%LOCAL_APPDATA%]\B10A3102-1469555090-E111-B794-10604BD7CB28\qnsjB1FF.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\rijufoze]ImagePath=[%PROGRAM_FILES%]\B10A3102-1469487130-E111-B794-10604BD7CB28\hnseE12E.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\dowidoly]ImagePath=[%PROGRAM_FILES%]\B10A3102-1469487130-E111-B794-10604BD7CB28\jnszC7F7.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\dowidoly]ImagePath=[%PROGRAM_FILES%]\110B0F00-1463894478-11DB-BFA1-001E68427AFC\jnsw20DA.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\rijufoze]ImagePath=[%PROGRAM_FILES%]\72284AF9-1469310300-11E5-BA4C-507B9D60F4B1\hnst9A9B.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\dowidoly]ImagePath=[%PROGRAM_FILES%]\72284AF9-1469310300-11E5-BA4C-507B9D60F4B1\jnst7F61.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\rijufoze]ImagePath=[%PROGRAM_FILES%]\95B312A0-1468976845-11D5-B964-90E6BAD9C6D8\hnsf3812.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\dowidoly]ImagePath=[%PROGRAM_FILES%]\95B312A0-1468976845-11D5-B964-90E6BAD9C6D8\jnsfB470.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\rijufoze]ImagePath=[%PROGRAM_FILES%]\B3C1D70C-1468612201-11E4-B2FB-7013CF171500\hnsy3394.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\dowidoly]ImagePath=[%PROGRAM_FILES%]\B3C1D70C-1468612201-11E4-B2FB-7013CF171500\jnsp1E35.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\zigipyro]ImagePath=[%LOCAL_APPDATA%]\ABA14BBD-1460647947-E411-A26A-308D99246A66\qnsbE61F.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\rijufoze]ImagePath=[%PROGRAM_FILES%]\4C4C4544-1468660936-4E10-804D-B5C04F353332\hnslA0F9.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\dowidoly]ImagePath=[%PROGRAM_FILES%]\4C4C4544-1468660936-4E10-804D-B5C04F353332\jnsv881F.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\rijufoze]ImagePath=[%PROGRAM_FILES%]\83344784-1465957529-1159-ECE6-08606EF4275C\hnsr823D.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\dowidoly]ImagePath=[%PROGRAM_FILES%]\83344784-1465957529-1159-ECE6-08606EF4275C\jnsm6614.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\dowidoly]ImagePath=[%PROGRAM_FILES%]\4C4C4544-1469462637-3610-8039-CAC04F4D334A\jnsj1DB.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\rijufoze]ImagePath=[%PROGRAM_FILES%]\ABD98889-1469264453-1219-2330-E3431CE20A77\hnsmD8B6.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\dowidoly]ImagePath=[%PROGRAM_FILES%]\ABD98889-1469264453-1219-2330-E3431CE20A77\jnsgBB06.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\zigipyro]ImagePath=[%LOCAL_APPDATA%]\EF6C84C0-1469350391-11DD-8053-60A44CAEBF86\qnsfF10D.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\rijufoze]ImagePath=[%PROGRAM_FILES%]\EF6C84C0-1469260662-11DD-8053-60A44CAEBF86\hnsv528D.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\dowidoly]ImagePath=[%PROGRAM_FILES%]\EF6C84C0-1469260662-11DD-8053-60A44CAEBF86\jnsa30D8.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\rijufoze]ImagePath=[%PROGRAM_FILES%]\DC3A58B2-1469258997-5A41-9BEF-DC1B7A0ECA47\hnscDA0C.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\dowidoly]ImagePath=[%PROGRAM_FILES%]\DC3A58B2-1469258997-5A41-9BEF-DC1B7A0ECA47\jnsjACDF.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\rijufoze]ImagePath=[%PROGRAM_FILES%]\4C4C4544-1469297222-3510-804B-B2C04F465231\hnsl7E89.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\dowidoly]ImagePath=[%PROGRAM_FILES%]\4C4C4544-1469297222-3510-804B-B2C04F465231\jnsn36EF.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\rijufoze]ImagePath=[%PROGRAM_FILES%]\DE18ECBB-1468136786-594A-2E43-0862664B5796\hnsg58C8.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\dowidoly]ImagePath=[%PROGRAM_FILES%]\DE18ECBB-1468136786-594A-2E43-0862664B5796\jnsk3B3C.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\zigipyro]ImagePath=[%LOCAL_APPDATA%]\34443437-1469234292-3437-3830-3139FFFFFFFF\qnsrF5FF.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\rijufoze]ImagePath=[%PROGRAM_FILES%]\34443437-1469093606-3437-3830-3139FFFFFFFF\hnsyEAD4.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\dowidoly]ImagePath=[%PROGRAM_FILES%]\34443437-1469093606-3437-3830-3139FFFFFFFF\jnstC6BF.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\zigipyro]ImagePath=[%LOCAL_APPDATA%]\3C546F0A-1469239944-E211-9312-208984F3BDAD\qnsaB97C.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\rijufoze]ImagePath=[%PROGRAM_FILES%]\3C546F0A-1469214464-E211-9312-208984F3BDAD\hnskF234.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\dowidoly]ImagePath=[%PROGRAM_FILES%]\3C546F0A-1469214464-E211-9312-208984F3BDAD\jnshD301.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\rijufoze]ImagePath=[%PROGRAM_FILES%]\A2960510-1469374351-81E3-3D1A-202564377F6F\hnskE20.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\zigipyro]ImagePath=[%LOCAL_APPDATA%]\A2960510-1469378117-81E3-3D1A-202564377F6F\qnsw4B6E.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\dowidoly]ImagePath=[%PROGRAM_FILES%]\A2960510-1469374351-81E3-3D1A-202564377F6F\jnswF76A.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\zigipyro]ImagePath=[%LOCAL_APPDATA%]\4C4C4544-1468829767-3710-8057-B8C04F545831\qnsj9CCB.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\rijufoze]ImagePath=[%PROGRAM_FILES%]\4C4C4544-1468804415-3710-8057-B8C04F545831\hnszA2EF.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\dowidoly]ImagePath=[%PROGRAM_FILES%]\4C4C4544-1468804415-3710-8057-B8C04F545831\jnsn84B7.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\rijufoze]ImagePath=[%PROGRAM_FILES%]\D70BF4DF-1468690558-11E0-8034-5488BF0CA076\hnso317A.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\dowidoly]ImagePath=[%PROGRAM_FILES%]\D70BF4DF-1468690558-11E0-8034-5488BF0CA076\jnss1304.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\rijufoze]ImagePath=[%PROGRAM_FILES%]\57805B25-1469299947-C547-925A-54AB3A4B478B\hnsj12E1.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\dowidoly]ImagePath=[%PROGRAM_FILES%]\57805B25-1469299947-C547-925A-54AB3A4B478B\jnsfFC69.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\rijufoze]ImagePath=[%PROGRAM_FILES%]\03000200-1469229090-0500-0006-000700080009\hnsfCBFF.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\dowidoly]ImagePath=[%PROGRAM_FILES%]\03000200-1469229090-0500-0006-000700080009\jnskB2B8.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\rijufoze]ImagePath=[%PROGRAM_FILES%]\F17A0601-1469283942-11CB-9052-9871C97423BB\hnsd5183.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\dowidoly]ImagePath=[%PROGRAM_FILES%]\F17A0601-1469283942-11CB-9052-9871C97423BB\jnsk3BE6.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\rijufoze]ImagePath=[%PROGRAM_FILES%]\0CB310CC-1466301893-513C-BF8F-305A3A9E9390\hnso8022.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\dowidoly]ImagePath=[%PROGRAM_FILES%]\0CB310CC-1466301893-513C-BF8F-305A3A9E9390\jnsf5075.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\rocufyky]ImagePath=[%PROGRAM_FILES%]\605CFA74-1462341950-DF11-8FC1-F7F2FEB9947D\jnsqDC66.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\rijufoze]ImagePath=[%PROGRAM_FILES%]\605CFA74-1462341950-DF11-8FC1-F7F2FEB9947D\hnsfF53F.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\zigipyro]ImagePath=[%LOCAL_APPDATA%]\4C4C4544-1469222885-5A10-8038-B7C04F57344A\qnso3882.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\rijufoze]ImagePath=[%PROGRAM_FILES%]\4C4C4544-1469202163-5A10-8038-B7C04F57344A\hnsl88C5.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\dowidoly]ImagePath=[%PROGRAM_FILES%]\4C4C4544-1469202163-5A10-8038-B7C04F57344A\jnsg7302.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\rijufoze]ImagePath=[%PROGRAM_FILES%]\4C4C4544-1469159918-4B10-805A-B3C04F314831\hnsm7FE2.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\dowidoly]ImagePath=[%PROGRAM_FILES%]\4C4C4544-1469159918-4B10-805A-B3C04F314831\jnsj5FC5.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\zigipyro]ImagePath=[%LOCAL_APPDATA%]\00000000-1469174091-0000-0000-6C626DC20CD4\qnsyF16A.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\rijufoze]ImagePath=[%PROGRAM_FILES%]\00000000-1469168368-0000-0000-6C626DC20CD4\hnstA521.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\zigipyro]ImagePath=[%LOCAL_APPDATA%]\09502E09-1469020096-846F-DA7E-AC9E17B7DE53\qnsz5CD7.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\rijufoze]ImagePath=[%PROGRAM_FILES%]\09502E09-1469009094-846F-DA7E-AC9E17B7DE53\hnst9C57.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\dowidoly]ImagePath=[%PROGRAM_FILES%]\09502E09-1469009094-846F-DA7E-AC9E17B7DE53\jnso7EF6.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\rijufoze]ImagePath=[%PROGRAM_FILES%]\4A5E3E34-1468822317-B644-A4E9-DCBD8D43DA4B\hnst704B.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\dowidoly]ImagePath=[%PROGRAM_FILES%]\4A5E3E34-1468822317-B644-A4E9-DCBD8D43DA4B\jnss5426.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\zigipyro]ImagePath=[%LOCAL_APPDATA%]\33444335-1469099826-5033-4651-A0481C0B0F58\qnsd7603.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\rijufoze]ImagePath=[%PROGRAM_FILES%]\33444335-1469123520-5033-4651-A0481C0B0F58\hnsd36FF.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\dowidoly]ImagePath=[%PROGRAM_FILES%]\33444335-1469123520-5033-4651-A0481C0B0F58\jnsl180B.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\rijufoze]ImagePath=[%PROGRAM_FILES%]\4C4C4544-1465481993-5710-8030-CAC04F363132\hnsd7853.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\dowidoly]ImagePath=[%PROGRAM_FILES%]\4C4C4544-1465481993-5710-8030-CAC04F363132\jnsn4F6D.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\zigipyro]ImagePath=[%LOCAL_APPDATA%]\00000000-1469135901-0000-0000-00241DD552F8\qnspBC8F.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\rijufoze]ImagePath=[%PROGRAM_FILES%]\00000000-1469124936-0000-0000-00241DD552F8\hnsz7257.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\dowidoly]ImagePath=[%PROGRAM_FILES%]\00000000-1469124936-0000-0000-00241DD552F8\jnsj5D3F.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\poderidi]ImagePath=[%PROGRAM_FILES%]\FFFFFFFF-1441795358-FFFF-FFFF-FFFFFFFFFFFF\knst52B6.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\noxecuny]ImagePath=[%PROGRAM_FILES%]\FFFFFFFF-1441795358-FFFF-FFFF-FFFFFFFFFFFF\hnsaE3AB.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\lehicewu]ImagePath=[%PROGRAM_FILES%]\FFFFFFFF-1441795358-FFFF-FFFF-FFFFFFFFFFFF\jnskB681.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\fycuwoco]ImagePath=[%LOCAL_APPDATA%]\FFFFFFFF-1441824233-FFFF-FFFF-FFFFFFFFFFFF\snsg71B8.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\rijufoze]ImagePath=[%PROGRAM_FILES%]\0C0CC900-1468969995-11DE-BBD8-D17FF69978E7\hnsbEED3.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\dowidoly]ImagePath=[%PROGRAM_FILES%]\0C0CC900-1468969995-11DE-BBD8-D17FF69978E7\jnsg1BCA.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\dowidoly]ImagePath=[%PROGRAM_FILES%]\68C1A900-1464785072-8149-3C7C-3085A9095C4F\jnst59B.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\zigipyro]ImagePath=[%LOCAL_APPDATA%]\68C1A900-1464860316-8149-3C7C-3085A9095C4F\qnsyB6F4.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\rijufoze]ImagePath=[%PROGRAM_FILES%]\68C1A900-1464785072-8149-3C7C-3085A9095C4F\hnst2157.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\zigipyro]ImagePath=[%LOCAL_APPDATA%]\4C4C4544-1469032560-4210-804A-C2C04F34334A\qnse2630.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\rijufoze]ImagePath=[%PROGRAM_FILES%]\4C4C4544-1464539824-4210-804A-C2C04F34334A\hnsmD7A8.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\dowidoly]ImagePath=[%PROGRAM_FILES%]\4C4C4544-1464539824-4210-804A-C2C04F34334A\jnsjA9A1.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\rijufoze]ImagePath=[%PROGRAM_FILES%]\31B8890A-1468395540-E411-B2A0-ECB1D7D819D0\hnstB8FD.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\dowidoly]ImagePath=[%PROGRAM_FILES%]\31B8890A-1468395540-E411-B2A0-ECB1D7D819D0\jnskA1CA.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\zutuzuni]ImagePath=[%PROGRAM_FILES%]\1F0028C0-1452130830-0D00-EF8B-F46D0404BF6C\jnsw26D6.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\zigipyro]ImagePath=[%LOCAL_APPDATA%]\1F0028C0-1457165233-0D00-EF8B-F46D0404BF6C\qnss55D8.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\wucotusy]ImagePath=[%PROGRAM_FILES%]\1F0028C0-1452130830-0D00-EF8B-F46D0404BF6C\hnsl404B.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\rowugoqo]ImagePath=[%LOCAL_APPDATA%]\1F0028C0-1452159693-0D00-EF8B-F46D0404BF6C\snspEDD1.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\rijufoze]ImagePath=[%PROGRAM_FILES%]\34444335-1469048928-4D31-5A36-8CDCD47A5639\hnsfFF3.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\zigipyro]ImagePath=[%LOCAL_APPDATA%]\34444335-1469056421-4D31-5A36-8CDCD47A5639\qnsi1A9E.tmp