Exterminate It! Antimalware

malpedia

Known threats:700,086 Last Update:March 16, 12:51

Testimonials

Just want to say that apparently your Exterminate It has worked like a charm. I was infected with a most troublesome Malware Trojan that kept replicating every time McAfee found, blocked and removed it... most annoying for several days... until Mr. Google led me to your door. What a God send!

With thanks,

Tom S.

MultiPlug- Registry Values List

This is a complete list of MultiPlug registry values collected by Exterminate It!. If you find any of these registry values on your PC, your computer is very likely to be infected with the MultiPlug - adware.

IMPORTANT: Because the registry is a core component of your Windows system, it is strongly recommended that you back up the registry before you begin deleting keys and values. For information about backing up the Windows registry, refer to the Registry Editor online help.
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\dowidoly]ImagePath=[%PROGRAM_FILES%]\34444335-1469048928-4D31-5A36-8CDCD47A5639\jnsbE017.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\zigipyro]ImagePath=[%LOCAL_APPDATA%]\631E3868-1468966145-E311-A968-201A06301BBE\qnsiD74.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\rijufoze]ImagePath=[%PROGRAM_FILES%]\631E3868-1468775934-E311-A968-201A06301BBE\hnsh2BA1.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\dowidoly]ImagePath=[%PROGRAM_FILES%]\631E3868-1468775934-E311-A968-201A06301BBE\jnsh1429.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\zigipyro]ImagePath=[%LOCAL_APPDATA%]\ED6722C8-1464172504-E111-8936-505054503030\qnsk980A.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\rijufoze]ImagePath=[%PROGRAM_FILES%]\ED6722C8-1464157943-E111-8936-505054503030\hnse781C.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\dowidoly]ImagePath=[%PROGRAM_FILES%]\ED6722C8-1464157943-E111-8936-505054503030\jnsp5D89.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\zigipyro]ImagePath=[%LOCAL_APPDATA%]\00D61D7E-1465387350-DF11-98F5-FD28CD7517E1\qnsx371B.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\rijufoze]ImagePath=[%PROGRAM_FILES%]\00D61D7E-1463044205-DF11-98F5-FD28CD7517E1\hnsk792A.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\dowidoly]ImagePath=[%PROGRAM_FILES%]\00D61D7E-1463044205-DF11-98F5-FD28CD7517E1\jnsp563D.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\rijufoze]ImagePath=[%PROGRAM_FILES%]\03AA02FC-1468783249-056E-0A06-760700080009\hnsr56E9.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\dowidoly]ImagePath=[%PROGRAM_FILES%]\03AA02FC-1468783249-056E-0A06-760700080009\jnsb3B6B.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\rijufoze]ImagePath=[%PROGRAM_FILES%]\032B0290-1468922026-05AC-8606-F30700080009\hnsnD029.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\dowidoly]ImagePath=[%PROGRAM_FILES%]\032B0290-1468922026-05AC-8606-F30700080009\jnswB3F4.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\quwuwige]ImagePath=[%PROGRAM_FILES%]\00000000-1448113897-0000-0000-1C6F654813E6\jnsy4024.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\fyxemevi]ImagePath=[%PROGRAM_FILES%]\00000000-1448113897-0000-0000-1C6F654813E6\hnsn664B.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\fugugefy]ImagePath=[%PROGRAM_FILES%]\00000000-1448113897-0000-0000-1C6F654813E6\knsq7783.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\rijufoze]ImagePath=[%PROGRAM_FILES%]\B6F59000-1468920691-0000-0000-000000000000\hnslBF11.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\dowidoly]ImagePath=[%PROGRAM_FILES%]\B6F59000-1468920691-0000-0000-000000000000\jnsg8D94.tmp
  • [HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]dutoauto="[%PROGRAM_FILES%]\sullenness\gimlet.exe"
  • [HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]interpee="[%PROGRAM_FILES%]\sapping\wool.exe"
  • [HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]rutoauto="[%PROGRAM_FILES%]\sullenness\wayside.exe"
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\rijufoze]ImagePath=[%PROGRAM_FILES%]\53168FD2-1468732326-11E4-B57F-68F728217627\hnskCF90.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\dowidoly]ImagePath=[%PROGRAM_FILES%]\53168FD2-1468732326-11E4-B57F-68F728217627\jnskA9C6.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\zigipyro]ImagePath=[%LOCAL_APPDATA%]\00000000-1468462618-0000-0000-902B3432199F\qnsu346C.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\zigipyro]ImagePath=[%LOCAL_APPDATA%]\B168805E-1468841918-11E1-8BBC-4885BF0CA0C6\qnskD958.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\rijufoze]ImagePath=[%PROGRAM_FILES%]\B168805E-1468602495-11E1-8BBC-4885BF0CA0C6\hnsr7A57.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\dowidoly]ImagePath=[%PROGRAM_FILES%]\B168805E-1468602495-11E1-8BBC-4885BF0CA0C6\jnsz5BFF.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\rocufyky]ImagePath=[%PROGRAM_FILES%]\03AA02FC-1460756966-0509-9006-660700080009\jnsyC724.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\rijufoze]ImagePath=[%PROGRAM_FILES%]\03AA02FC-1460756966-0509-9006-660700080009\hnsiDBCE.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\rijufoze]ImagePath=[%PROGRAM_FILES%]\324BB5C8-1466264115-11E0-959E-EE47791F6AB3\hnswA2A.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\dowidoly]ImagePath=[%PROGRAM_FILES%]\324BB5C8-1466264115-11E0-959E-EE47791F6AB3\jnsqF022.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\rijufoze]ImagePath=[%PROGRAM_FILES%]\F0D443AC-1467815675-2F8C-8C2B-9F1B3F9494C0\hnseF8D2.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\dowidoly]ImagePath=[%PROGRAM_FILES%]\F0D443AC-1467815675-2F8C-8C2B-9F1B3F9494C0\jnsuC256.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\zigipyro]ImagePath=[%LOCAL_APPDATA%]\6CA463A0-1468781802-11E1-A035-047D7B467F7B\qnsd1F01.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\rijufoze]ImagePath=[%PROGRAM_FILES%]\6CA463A0-1468770788-11E1-A035-047D7B467F7B\hnsh6D11.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\dowidoly]ImagePath=[%PROGRAM_FILES%]\6CA463A0-1468770788-11E1-A035-047D7B467F7B\jnsh50B9.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\rijufoze]ImagePath=[%PROGRAM_FILES%]\3B682200-1467626536-0820-1220-093215000000\hnsr406C.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\dowidoly]ImagePath=[%PROGRAM_FILES%]\3B682200-1467626536-0820-1220-093215000000\jnsm2A5B.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\rijufoze]ImagePath=[%PROGRAM_FILES%]\BD762580-1468560639-11DE-8A4E-78843C33A145\hnspE5FF.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\dowidoly]ImagePath=[%PROGRAM_FILES%]\BD762580-1468560639-11DE-8A4E-78843C33A145\jnsuCDBC.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\zigipyro]ImagePath=[%LOCAL_APPDATA%]\8D9F0DD3-1468398985-F243-7E2C-9C5C8ECF3127\qnsj79ED.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\rijufoze]ImagePath=[%PROGRAM_FILES%]\8D9F0DD3-1468230923-F243-7E2C-9C5C8ECF3127\hnsm869C.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\dowidoly]ImagePath=[%PROGRAM_FILES%]\8D9F0DD3-1468230923-F243-7E2C-9C5C8ECF3127\jnsh22D9.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\rijufoze]ImagePath=[%PROGRAM_FILES%]\1E000E80-1467766718-3500-0CFB-20CF3095800D\hnsdB29F.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\dowidoly]ImagePath=[%PROGRAM_FILES%]\1E000E80-1467766718-3500-0CFB-20CF3095800D\jnsi9DB6.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\zigipyro]ImagePath=[%LOCAL_APPDATA%]\00412F4E-1468559691-0000-0000-0000FFFFFFFF\qnsmA9C8.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\rijufoze]ImagePath=[%PROGRAM_FILES%]\00412F4E-1468379318-0000-0000-0000FFFFFFFF\hnsx217B.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\dowidoly]ImagePath=[%PROGRAM_FILES%]\00412F4E-1468379318-0000-0000-0000FFFFFFFF\jnsnDC11.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\rijufoze]ImagePath=[%PROGRAM_FILES%]\C0525B00-1468556980-81E3-36B6-E03F49D8B4FE\hnse7782.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\dowidoly]ImagePath=[%PROGRAM_FILES%]\C0525B00-1468556980-81E3-36B6-E03F49D8B4FE\jnse5F20.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\rijufoze]ImagePath=[%PROGRAM_FILES%]\00000000-1468558270-0000-0000-D8CB8ADE9BD5\hnsrC83F.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\dowidoly]ImagePath=[%PROGRAM_FILES%]\00000000-1468558270-0000-0000-D8CB8ADE9BD5\jnswAE5C.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\rijufoze]ImagePath=[%PROGRAM_FILES%]\F09E99A0-1468482114-11E3-AA61-A2AF361F1400\hnsj8B7B.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\dowidoly]ImagePath=[%PROGRAM_FILES%]\F09E99A0-1468482114-11E3-AA61-A2AF361F1400\jnsq6A16.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\zigipyro]ImagePath=[%LOCAL_APPDATA%]\E0C5229D-1468574240-DD11-A711-001F1608CDA9\qnsi8D4.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\dowidoly]ImagePath=[%PROGRAM_FILES%]\EA51B46F-1467123604-E311-BE93-F8A9636F2752\jnshF10F.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\rijufoze]ImagePath=[%PROGRAM_FILES%]\1C8FF647-1468377958-DA41-9BD3-0B72ED2CCFAA\hnsm3A4.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\zigipyro]ImagePath=[%LOCAL_APPDATA%]\1C8FF647-1468401708-DA41-9BD3-0B72ED2CCFAA\qnsi9714.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\dowidoly]ImagePath=[%PROGRAM_FILES%]\1C8FF647-1468377958-DA41-9BD3-0B72ED2CCFAA\jnstE155.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\zigipyro]ImagePath=[%LOCAL_APPDATA%]\92536CE0-1468432275-11D5-BDE3-001BFCEC3E66\qnsz41.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\tuzibiqo]ImagePath=[%LOCAL_APPDATA%]\0A5B7360-1429484419-11E1-9A38-047D7B2FDA68\insw4553.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\zigipyro]ImagePath=[%LOCAL_APPDATA%]\4C4C4544-1468526628-3910-804D-B6C04F545031\qnsy3150.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\rijufoze]ImagePath=[%PROGRAM_FILES%]\4C4C4544-1468513858-3910-804D-B6C04F545031\hnsrEEB5.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\dowidoly]ImagePath=[%PROGRAM_FILES%]\4C4C4544-1468513858-3910-804D-B6C04F545031\jnsh98D7.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\dowidoly]ImagePath=[%PROGRAM_FILES%]\3CB61BC2-1468529525-11E5-90AB-1C394716EE13\jnsbCB11.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\rijufoze]ImagePath=[%PROGRAM_FILES%]\4C4C4544-1468418442-5910-8030-CAC04F4D344A\hnsbE37F.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\dowidoly]ImagePath=[%PROGRAM_FILES%]\4C4C4544-1468418442-5910-8030-CAC04F4D344A\jnsaC75A.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\rijufoze]ImagePath=[%PROGRAM_FILES%]\DD77C980-1468304869-11E3-9885-ECA86BFF3C46\hnsiE120.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\dowidoly]ImagePath=[%PROGRAM_FILES%]\DD77C980-1468304869-11E3-9885-ECA86BFF3C46\jnss96B6.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\rijufoze]ImagePath=[%PROGRAM_FILES%]\859FF6E6-1468280368-11E3-9038-3C62E512DA00\hnsv54F7.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\dowidoly]ImagePath=[%PROGRAM_FILES%]\859FF6E6-1468280368-11E3-9038-3C62E512DA00\jnsv34F7.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\zigipyro]ImagePath=[%LOCAL_APPDATA%]\33444335-1468401807-5831-3930-7446A0875D25\qnsd165D.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\rijufoze]ImagePath=[%PROGRAM_FILES%]\33444335-1466295058-5831-3930-7446A0875D25\hnslCBC5.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\dowidoly]ImagePath=[%PROGRAM_FILES%]\33444335-1466295058-5831-3930-7446A0875D25\jnsh8E9B.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\rijufoze]ImagePath=[%PROGRAM_FILES%]\00000000-1468218401-0000-0000-000000000000\hnszAA95.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\dowidoly]ImagePath=[%PROGRAM_FILES%]\00000000-1468218401-0000-0000-000000000000\jnso8A56.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\zigipyro]ImagePath=[%LOCAL_APPDATA%]\00000000-1468359200-0000-0000-000000000000\qnsmA0D0.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\rijufoze]ImagePath=[%PROGRAM_FILES%]\00000000-1468301004-0000-0000-000000000000\hnse508E.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\dowidoly]ImagePath=[%PROGRAM_FILES%]\00000000-1468301004-0000-0000-000000000000\jnsb2C7B.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\zigipyro]ImagePath=[%LOCAL_APPDATA%]\051474E0-1468423127-11E0-8E26-089E014EE432\qnsxC163.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\rocufyky]ImagePath=[%PROGRAM_FILES%]\070799EF-1461486287-11DD-BBDA-0BB7EDF3001E\jnsi78F8.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\rijufoze]ImagePath=[%PROGRAM_FILES%]\070799EF-1461486287-11DD-BBDA-0BB7EDF3001E\hnstA1BF.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\zigipyro]ImagePath=[%LOCAL_APPDATA%]\6921D380-1467678128-81DF-3A5A-7071BCB212B9\qnsl4F59.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\rijufoze]ImagePath=[%PROGRAM_FILES%]\20023B65-1459616224-E011-956F-00266C9F229B\hnsb4F3.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\rijufoze]ImagePath=[%PROGRAM_FILES%]\4E435451-1468267328-3034-4731-14DAE9AE0122\hnsyE27A.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\dowidoly]ImagePath=[%PROGRAM_FILES%]\4E435451-1468267328-3034-4731-14DAE9AE0122\jnsnB6F5.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\zigipyro]ImagePath=[%LOCAL_APPDATA%]\051474E0-1468268463-11E0-8E26-089E014EE432\qnsc4D5A.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\rocufyky]ImagePath=[%PROGRAM_FILES%]\AACB08F4-1461345463-11DF-9127-70C059000041\jnsx2A9B.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\rijufoze]ImagePath=[%PROGRAM_FILES%]\AACB08F4-1461345463-11DF-9127-70C059000041\hnsx4261.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\zigipyro]ImagePath=[%LOCAL_APPDATA%]\A8DCCDD0-1466531920-11D5-BCA5-8E2903C55E8E\qnsrAF8D.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\rijufoze]ImagePath=[%PROGRAM_FILES%]\A8DCCDD0-1465468386-11D5-BCA5-8E2903C55E8E\hnsh9D11.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\dowidoly]ImagePath=[%PROGRAM_FILES%]\A8DCCDD0-1465468386-11D5-BCA5-8E2903C55E8E\jnst8793.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\rijufoze]ImagePath=[%PROGRAM_FILES%]\00000000-1468260448-0000-0000-448A5B4026C5\hnsiE120.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\dowidoly]ImagePath=[%PROGRAM_FILES%]\00000000-1468260448-0000-0000-448A5B4026C5\jnssC624.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\zigipyro]ImagePath=[%LOCAL_APPDATA%]\00000000-1468279369-0000-0000-448A5B4026C5\qnskF518.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\zigipyro]ImagePath=[%LOCAL_APPDATA%]\051474E0-1468245409-11E0-8E26-089E014EE432\qnsi8448.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\zigipyro]ImagePath=[%LOCAL_APPDATA%]\051474E0-1468252684-11E0-8E26-089E014EE432\qnsa85A4.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\rijufoze]ImagePath=[%PROGRAM_FILES%]\03DE0294-1468138565-05D2-3506-0C0700080009\hnsnA787.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\dowidoly]ImagePath=[%PROGRAM_FILES%]\03DE0294-1468138565-05D2-3506-0C0700080009\jnsi8D80.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\zigipyro]ImagePath=[%LOCAL_APPDATA%]\53585025-1468155393-3847-8138-382C4A8433CB\qnse39F2.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\rijufoze]ImagePath=[%PROGRAM_FILES%]\7D45DEB2-1468070957-E411-A961-68F7289EF276\hnsm77F2.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\dowidoly]ImagePath=[%PROGRAM_FILES%]\7D45DEB2-1468070957-E411-A961-68F7289EF276\jnsq5AB4.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\wucotusy]ImagePath=[%PROGRAM_FILES%]\4C4C4544-1451306945-5810-805A-B6C04F373132\hnsy5E8.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\zutuzuni]ImagePath=[%PROGRAM_FILES%]\4C4C4544-1451306945-5810-805A-B6C04F373132\jnsmE7FE.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\jufohycy]ImagePath=[%PROGRAM_FILES%]\34444335-1438346068-3335-5957-A02BB8563E3D\knszE100.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\hyverumu]ImagePath=[%PROGRAM_FILES%]\34444335-1438346068-3335-5957-A02BB8563E3D\jnsg57FD.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\comyninu]ImagePath=[%PROGRAM_FILES%]\34444335-1438346068-3335-5957-A02BB8563E3D\hnsr8A1C.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\zigipyro]ImagePath=[%LOCAL_APPDATA%]\00000000-1468269011-0000-0000-448A5B4026C5\qnso5AD0.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\zigipyro]ImagePath=[%LOCAL_APPDATA%]\03000200-1468233140-0500-0006-000700080009\qnsdAF.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\rijufoze]ImagePath=[%PROGRAM_FILES%]\03000200-1468250804-0500-0006-000700080009\hnsj4D8F.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\dowidoly]ImagePath=[%PROGRAM_FILES%]\03000200-1468250804-0500-0006-000700080009\jnsr2DFF.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\tygixyzy]ImagePath=[%LOCAL_APPDATA%]\03000200-1431787696-0500-0006-000700080009\cnseC0.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\zigipyro]ImagePath=[%LOCAL_APPDATA%]\0053B976-1468187918-E011-B499-1078D2B5A2EC\qnsvD29F.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\rijufoze]ImagePath=[%PROGRAM_FILES%]\0053B976-1468196833-E011-B499-1078D2B5A2EC\hnsz4FE9.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\dowidoly]ImagePath=[%PROGRAM_FILES%]\0053B976-1468196833-E011-B499-1078D2B5A2EC\jnsj3813.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\zutuzuni]ImagePath=[%PROGRAM_FILES%]\44C217DA-1455119075-E011-8946-505054503030\jnsd40A5.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\zigipyro]ImagePath=[%LOCAL_APPDATA%]\44C217DA-1455383879-E011-8946-505054503030\qnsbA355.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\wucotusy]ImagePath=[%PROGRAM_FILES%]\44C217DA-1455119075-E011-8946-505054503030\hnsg6DC2.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\zigipyro]ImagePath=[%LOCAL_APPDATA%]\29CC6A00-1468104413-11E1-9562-ECA86BF1181D\qnsh1211.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\rocufyky]ImagePath=[%PROGRAM_FILES%]\4C4C4544-1460696354-5610-8033-C2C04F543931\jnsu6880.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\rijufoze]ImagePath=[%PROGRAM_FILES%]\4C4C4544-1460696354-5610-8033-C2C04F543931\hnsu896A.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\wucotusy]ImagePath=[%PROGRAM_FILES%]\BCA8B78D-1456861047-E511-94E9-9457A5E9A031\hnsh1B65.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\rijufoze]ImagePath=[%PROGRAM_FILES%]\ACDB97A0-1468181792-81E5-28E9-DCFE072ECDF1\hnsmEC56.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\dowidoly]ImagePath=[%PROGRAM_FILES%]\ACDB97A0-1468181792-81E5-28E9-DCFE072ECDF1\jnsnD5FD.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\zigipyro]ImagePath=[%LOCAL_APPDATA%]\30464E43-1467971138-5433-4851-C80AA9EFCE19\qnss1ED8.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\rijufoze]ImagePath=[%PROGRAM_FILES%]\30464E43-1466956302-5433-4851-C80AA9EFCE19\hnss4718.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\dowidoly]ImagePath=[%PROGRAM_FILES%]\30464E43-1466956302-5433-4851-C80AA9EFCE19\jnssE680.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\rijufoze]ImagePath=[%PROGRAM_FILES%]\03000200-1468068327-0500-0006-000700080009\hnskC60.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\dowidoly]ImagePath=[%PROGRAM_FILES%]\03000200-1468068327-0500-0006-000700080009\jnsmF6A4.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\kinosugi]ImagePath=[%PROGRAM_FILES%]\BAE5D850-1438356472-81E4-2297-382C4A04D9C3\knstC6E2.tmpfs
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\zigipyro]ImagePath=[%LOCAL_APPDATA%]\37132DE2-1465186262-11E4-A961-68F7288CB2FB\qnss8586.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\rijufoze]ImagePath=[%PROGRAM_FILES%]\37132DE2-1465165050-11E4-A961-68F7288CB2FB\hnszD471.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\dowidoly]ImagePath=[%PROGRAM_FILES%]\37132DE2-1465165050-11E4-A961-68F7288CB2FB\jnsyABE8.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\rijufoze]ImagePath=[%PROGRAM_FILES%]\11DBA540-1467961776-11E1-8169-30F9EDD17E68\hnsf9339.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\rijufoze]ImagePath=[%PROGRAM_FILES%]\DE813939-1467110346-9BF9-B780-90E6BA519E45\hnsi2C9E.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\dowidoly]ImagePath=[%PROGRAM_FILES%]\DE813939-1467110346-9BF9-B780-90E6BA519E45\jnshDEE9.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\rijufoze]ImagePath=[%PROGRAM_FILES%]\2E9541C8-1466471885-DC40-B009-4C3C13009841\hnsd4905.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\dowidoly]ImagePath=[%PROGRAM_FILES%]\2E9541C8-1466471885-DC40-B009-4C3C13009841\jnsz3377.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\zigipyro]ImagePath=[%LOCAL_APPDATA%]\250C09E1-1467560837-11E5-9614-507B9DB5D507\qnsl661A.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\rijufoze]ImagePath=[%PROGRAM_FILES%]\250C09E1-1466852903-11E5-9614-507B9DB5D507\hnstB29B.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\dowidoly]ImagePath=[%PROGRAM_FILES%]\250C09E1-1466852903-11E5-9614-507B9DB5D507\jnsl91D2.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\rijufoze]ImagePath=[%PROGRAM_FILES%]\5E729F80-1466783802-81E1-3B3B-10BF482F207F\hnss34A8.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\dowidoly]ImagePath=[%PROGRAM_FILES%]\5E729F80-1466783802-81E1-3B3B-10BF482F207F\jnsc161E.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\rijufoze]ImagePath=[%PROGRAM_FILES%]\00000000-1467838155-0000-0000-D8CB8AEA5AD2\hnsf2F57.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\dowidoly]ImagePath=[%PROGRAM_FILES%]\00000000-1467838155-0000-0000-D8CB8AEA5AD2\jnsw190E.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\rijufoze]ImagePath=[%PROGRAM_FILES%]\03000200-1467074802-0500-0006-000700080009\hnsr10A5.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\dowidoly]ImagePath=[%PROGRAM_FILES%]\03000200-1467074802-0500-0006-000700080009\jnsmF872.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\zigipyro]ImagePath=[%LOCAL_APPDATA%]\380FBE00-1467819033-81E1-3B9B-3085A90511DC\qnsc168C.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\rijufoze]ImagePath=[%PROGRAM_FILES%]\380FBE00-1467541614-81E1-3B9B-3085A90511DC\hnswBC4A.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\dowidoly]ImagePath=[%PROGRAM_FILES%]\380FBE00-1467541614-81E1-3B9B-3085A90511DC\jnsm91FE.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\rijufoze]ImagePath=[%PROGRAM_FILES%]\950F450C-1466812884-11E3-B3F4-A0A975AD1800\hnssB2EE.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\dowidoly]ImagePath=[%PROGRAM_FILES%]\950F450C-1466812884-11E3-B3F4-A0A975AD1800\jnsc99C6.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\rijufoze]ImagePath=[%PROGRAM_FILES%]\C04181EF-1467736864-DF11-A114-C6B14C530173\hnsmC1EA.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\dowidoly]ImagePath=[%PROGRAM_FILES%]\C04181EF-1467736864-DF11-A114-C6B14C530173\jnsrAB2D.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\kufojeni]ImagePath=[%PROGRAM_FILES%]\00000000-1442591965-0000-0000-8C89A5086787\knsfF28.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\lehicewu]ImagePath=[%PROGRAM_FILES%]\00000000-1442591965-0000-0000-8C89A5086787\jnss236F.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\gyvixodu]ImagePath=[%PROGRAM_FILES%]\00000000-1442591965-0000-0000-8C89A5086787\hnsd507A.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\dipubibu]ImagePath=[%LOCAL_APPDATA%]\00000000-1442602846-0000-0000-8C89A5086787\snsd2259.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\lehicewu]ImagePath=[%PROGRAM_FILES%]\E406665E-1441901660-CC4B-8563-2C600C871F4C\jnsb294.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\gyvixodu]ImagePath=[%PROGRAM_FILES%]\E406665E-1441901660-CC4B-8563-2C600C871F4C\hnsr1C0A.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\rijufoze]ImagePath=[%PROGRAM_FILES%]\00000011-1466959782-0000-0000-74D02B22EEC0\hnsl8C35.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\dowidoly]ImagePath=[%PROGRAM_FILES%]\00000011-1466959782-0000-0000-74D02B22EEC0\jnss6BBA.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\zehygiqo]ImagePath=[%PROGRAM_FILES%]\C120B18B-1444625028-E543-8C30-7892F50138DD\jnsx120.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\lehyhoqy]ImagePath=[%PROGRAM_FILES%]\C120B18B-1444625028-E543-8C30-7892F50138DD\knsh10B.tmpfs
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\gyvixodu]ImagePath=[%PROGRAM_FILES%]\C120B18B-1444625028-E543-8C30-7892F50138DD\hnsi124.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\dipubibu]ImagePath=[%LOCAL_APPDATA%]\C120B18B-1444599874-E543-8C30-7892F50138DD\snsf144.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\gejekozo]ImagePath=[%PROGRAM_FILES%]\12860B80-1436875122-11E3-BF2E-A0D3C1340B8A\knst5CC.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\rijufoze]ImagePath=[%PROGRAM_FILES%]\42323039-1465444672-3232-4231-3236FFFFFFFF\hnsmA400.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\dowidoly]ImagePath=[%PROGRAM_FILES%]\42323039-1465444672-3232-4231-3236FFFFFFFF\jnst5CD3.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\totyseku]ImagePath=[%PROGRAM_FILES%]\B16E8EE0-1441139028-11DD-89C8-544249E32B57\hnso4D85.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\jimocoso]ImagePath=[%PROGRAM_FILES%]\B16E8EE0-1441139028-11DD-89C8-544249E32B57\jnsd2DE2.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\buzesylo]ImagePath=[%PROGRAM_FILES%]\B16E8EE0-1441139028-11DD-89C8-544249E32B57\knsiFDD7.tmpfs
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\rijufoze]ImagePath=[%PROGRAM_FILES%]\0053B976-1467496354-E011-B499-1078D2B5A2EC\hnsg7820.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\dowidoly]ImagePath=[%PROGRAM_FILES%]\0053B976-1467496354-E011-B499-1078D2B5A2EC\jnsr5F61.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\zigipyro]ImagePath=[%LOCAL_APPDATA%]\5291D958-1467574514-244C-A491-2C600C8EF70F\qnso340A.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\rijufoze]ImagePath=[%PROGRAM_FILES%]\00000000-1467501385-0000-0000-406186ACDA33\hnsbAA35.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\dowidoly]ImagePath=[%PROGRAM_FILES%]\00000000-1467501385-0000-0000-406186ACDA33\jnsr83DF.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\rijufoze]ImagePath=[%PROGRAM_FILES%]\3F80BDBC-1467318945-5112-E96C-300ED50DE178\hnsd52F5.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\dowidoly]ImagePath=[%PROGRAM_FILES%]\3F80BDBC-1467318945-5112-E96C-300ED50DE178\jnsd32F5.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\rijufoze]ImagePath=[%PROGRAM_FILES%]\03DE0294-1467466298-056D-3106-680700080009\hnsz733.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\dowidoly]ImagePath=[%PROGRAM_FILES%]\03DE0294-1467466298-056D-3106-680700080009\jnsuF25A.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\rijufoze]ImagePath=[%PROGRAM_FILES%]\00000000-1467230607-0000-0000-001FD0C80F57\hnss580E.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\dowidoly]ImagePath=[%PROGRAM_FILES%]\00000000-1467230607-0000-0000-001FD0C80F57\jnss2B90.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\wucotusy]ImagePath=[%PROGRAM_FILES%]\75CFF460-1451605297-11B2-8000-9771C8A41FC6\hnsbEA01.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\zutuzuni]ImagePath=[%PROGRAM_FILES%]\34444335-1456741588-3631-3435-6CC21760BEC7\jnshC5C1.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\wucotusy]ImagePath=[%PROGRAM_FILES%]\34444335-1456741588-3631-3435-6CC21760BEC7\hnsh176B.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\rijufoze]ImagePath=[%PROGRAM_FILES%]\30221842-1467386441-E011-B63F-00266CCC258A\hnso2E72.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\dowidoly]ImagePath=[%PROGRAM_FILES%]\30221842-1467386441-E011-B63F-00266CCC258A\jnsdA38F.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\zigipyro]ImagePath=[%LOCAL_APPDATA%]\4C4C4544-1467375856-5210-8035-B1C04F345931\qnsg324A.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\rijufoze]ImagePath=[%PROGRAM_FILES%]\4C4C4544-1467355876-5210-8035-B1C04F345931\hnsaD78E.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\dowidoly]ImagePath=[%PROGRAM_FILES%]\4C4C4544-1467355876-5210-8035-B1C04F345931\jnsuB76E.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\zigipyro]ImagePath=[%LOCAL_APPDATA%]\5261460B-1467405751-E411-A26A-5CB9017D7435\qnss5F70.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\rijufoze]ImagePath=[%PROGRAM_FILES%]\5261460B-1464441714-E411-A26A-5CB9017D7435\hnsrB261.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\dowidoly]ImagePath=[%PROGRAM_FILES%]\5261460B-1464441714-E411-A26A-5CB9017D7435\jnsl9943.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\rijufoze]ImagePath=[%PROGRAM_FILES%]\7E635C40-1467391574-11D5-88FC-14DAE99B1B03\hnsrCA99.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\dowidoly]ImagePath=[%PROGRAM_FILES%]\7E635C40-1467391574-11D5-88FC-14DAE99B1B03\jnsnA721.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\rijufoze]ImagePath=[%PROGRAM_FILES%]\051474E0-1467292385-11E0-8E26-089E014EE432\hnsb822D.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\dowidoly]ImagePath=[%PROGRAM_FILES%]\051474E0-1467292385-11E0-8E26-089E014EE432\jnsl66E3.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\rijufoze]ImagePath=[%PROGRAM_FILES%]\4C4C4544-1467239265-4A10-8058-C4C04F433332\hnsx5D2F.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\dowidoly]ImagePath=[%PROGRAM_FILES%]\4C4C4544-1467239265-4A10-8058-C4C04F433332\jnsn3F61.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\zigipyro]ImagePath=[%LOCAL_APPDATA%]\00000000-1467298159-0000-0000-6C626D5B78B6\qnsf6E.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\zigipyro]ImagePath=[%LOCAL_APPDATA%]\744D92C0-1467130863-11D5-9C8B-14DAE99A4A92\qnswA0E2.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\rijufoze]ImagePath=[%PROGRAM_FILES%]\744D92C0-1466163509-11D5-9C8B-14DAE99A4A92\hnsk3B9C.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\dowidoly]ImagePath=[%PROGRAM_FILES%]\744D92C0-1466163509-11D5-9C8B-14DAE99A4A92\jnsu1B8C.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\rocufyky]ImagePath=[%PROGRAM_FILES%]\E140A3D5-1460161102-2A46-9CEA-F15827D67A7E\jnsb2C37.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\rijufoze]ImagePath=[%PROGRAM_FILES%]\E140A3D5-1460161102-2A46-9CEA-F15827D67A7E\hnsk501C.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\zigipyro]ImagePath=[%LOCAL_APPDATA%]\03D40274-1464007599-05BF-4006-950700080009\qnsrB369.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\rocufyky]ImagePath=[%PROGRAM_FILES%]\03D40274-1462363474-05BF-4006-950700080009\jnsf56E7.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\rijufoze]ImagePath=[%PROGRAM_FILES%]\03D40274-1462363474-05BF-4006-950700080009\hnsp848D.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\rijufoze]ImagePath=[%PROGRAM_FILES%]\4C4C4544-1467153268-4810-8046-B7C04F5A3532\hnsi501E.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\dowidoly]ImagePath=[%PROGRAM_FILES%]\4C4C4544-1467153268-4810-8046-B7C04F5A3532\jnsz384F.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\wucotusy]ImagePath=[%PROGRAM_FILES%]\699F2CBD-1458898931-11E4-9F6E-68F728101714\hnsb5B83.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\gerocyni]ImagePath=[%PROGRAM_FILES%]\699F2CBD-1458898931-11E4-9F6E-68F728101714\jnso2212.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\zigipyro]ImagePath=[%LOCAL_APPDATA%]\4C4C4544-1467212010-5810-8054-B8C04F5A3732\qnsd7179.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\rijufoze]ImagePath=[%PROGRAM_FILES%]\4C4C4544-1467200944-5810-8054-B8C04F5A3732\hnscBA9A.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\dowidoly]ImagePath=[%PROGRAM_FILES%]\4C4C4544-1467200944-5810-8054-B8C04F5A3732\jnsr9AF7.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\rijufoze]ImagePath=[%PROGRAM_FILES%]\4C4C4544-1466888522-5A10-804E-C4C04F505931\hnsk7838.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\dowidoly]ImagePath=[%PROGRAM_FILES%]\4C4C4544-1466888522-5A10-804E-C4C04F505931\jnsp5E07.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\rijufoze]ImagePath=[%PROGRAM_FILES%]\DBD5EBC0-1467224064-11E4-BC47-14DDA953DF99\hnsxA5EF.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\dowidoly]ImagePath=[%PROGRAM_FILES%]\DBD5EBC0-1467224064-11E4-BC47-14DDA953DF99\jnsm8BAE.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\xevirywy]ImagePath=[%PROGRAM_FILES%]\7D3A95A0-1433037496-11E1-BD6C-30F9EDB4DE14\knstCDD4.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\temewely]ImagePath=[%APPDATA%]\7D3A95A0-1433037496-11E1-BD6C-30F9EDB4DE14\jnsq6FE1.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\hidekoqe]ImagePath=[%LOCAL_APPDATA%]\7D3A95A0-1445007217-11E1-BD6C-30F9EDB4DE14\qnsyF78A.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\cunivyzo]ImagePath=[%APPDATA%]\7D3A95A0-1433037496-11E1-BD6C-30F9EDB4DE14\hnsq85D3.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\zigipyro]ImagePath=[%LOCAL_APPDATA%]\2F06C600-1467210310-81E0-2929-14DAE9209197\qnscDCCE.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\rijufoze]ImagePath=[%PROGRAM_FILES%]\2F06C600-1465805386-81E0-2929-14DAE9209197\hnsi82B4.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\dowidoly]ImagePath=[%PROGRAM_FILES%]\2F06C600-1465805386-81E0-2929-14DAE9209197\jnsr6769.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\rijufoze]ImagePath=[%PROGRAM_FILES%]\B6A48570-1467045627-DE11-8C01-0026220B3899\hnsiD658.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\dowidoly]ImagePath=[%PROGRAM_FILES%]\B6A48570-1467045627-DE11-8C01-0026220B3899\jnst98BB.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\zigipyro]ImagePath=[%LOCAL_APPDATA%]\28AE1825-1467077412-3E4F-B269-086266D0019E\qnsq5060.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\zigipyro]ImagePath=[%LOCAL_APPDATA%]\EAF59000-1466358681-0000-0000-000000000000\qnshD53B.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\rijufoze]ImagePath=[%PROGRAM_FILES%]\EAF59000-1466336465-0000-0000-000000000000\hnsd58D3.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\dowidoly]ImagePath=[%PROGRAM_FILES%]\EAF59000-1466336465-0000-0000-000000000000\jnss3D74.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\rijufoze]ImagePath=[%PROGRAM_FILES%]\00000000-1464746573-0000-0000-406186C92BF0\hnsqF346.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\dowidoly]ImagePath=[%PROGRAM_FILES%]\00000000-1464746573-0000-0000-406186C92BF0\jnshDD99.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\zigipyro]ImagePath=[%LOCAL_APPDATA%]\4B40328F-1460821735-AF33-1FB1-43554672E59A\qnsrC551.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\rijufoze]ImagePath=[%PROGRAM_FILES%]\D4D32099-1467031173-11DB-BBDA-A443700D0017\hnsfC227.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\rijufoze]ImagePath=[%PROGRAM_FILES%]\387C8540-1467047740-11E3-A0AA-1CB72CDEF746\hnsy6D1A.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\dowidoly]ImagePath=[%PROGRAM_FILES%]\387C8540-1467047740-11E3-A0AA-1CB72CDEF746\jnsd524D.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\dowidoly]ImagePath=[%PROGRAM_FILES%]\0FC332B7-1466705110-0D44-B7AD-05AB1CA22CA1\jnsu51E.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\zigipyro]ImagePath=[%LOCAL_APPDATA%]\0FC332B7-1467123275-0D44-B7AD-05AB1CA22CA1\qnsd4481.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\rijufoze]ImagePath=[%PROGRAM_FILES%]\0FC332B7-1466705110-0D44-B7AD-05AB1CA22CA1\hnsm2F2E.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\rijufoze]ImagePath=[%PROGRAM_FILES%]\352E034A-1466780559-4746-95EF-3E4814C13ECE\hnsb3A63.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\dowidoly]ImagePath=[%PROGRAM_FILES%]\352E034A-1466780559-4746-95EF-3E4814C13ECE\jnsg18FC.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\zigipyro]ImagePath=[%LOCAL_APPDATA%]\A8614B40-1467061457-11DD-A6DB-001FC6DDD766\qnsz3CE9.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\rijufoze]ImagePath=[%PROGRAM_FILES%]\A8614B40-1467052316-11DD-A6DB-001FC6DDD766\hnshA339.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\dowidoly]ImagePath=[%PROGRAM_FILES%]\A8614B40-1467052316-11DD-A6DB-001FC6DDD766\jnsh8903.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\zigipyro]ImagePath=[%LOCAL_APPDATA%]\86C3280C-1466981908-11E3-BB6B-28D2443F70A4\qnsu5CC4.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\rijufoze]ImagePath=[%PROGRAM_FILES%]\4C4C4544-1466834926-3710-8056-B2C04F445231\hnsiA806.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\dowidoly]ImagePath=[%PROGRAM_FILES%]\4C4C4544-1466834926-3710-8056-B2C04F445231\jnsy7EF2.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\rijufoze]ImagePath=[%PROGRAM_FILES%]\9A78DA55-1466865710-E011-8B50-505054503030\hnsxA145.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\dowidoly]ImagePath=[%PROGRAM_FILES%]\9A78DA55-1466865710-E011-8B50-505054503030\jnss83E4.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\zigipyro]ImagePath=[%LOCAL_APPDATA%]\476D0100-1467036176-B150-D800-0016D3DBAB88\qnsqE5BA.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\rijufoze]ImagePath=[%PROGRAM_FILES%]\476D0100-1467061156-B150-D800-0016D3DBAB88\hnsgF9BE.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\dowidoly]ImagePath=[%PROGRAM_FILES%]\476D0100-1467061156-B150-D800-0016D3DBAB88\jnszDB57.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\rijufoze]ImagePath=[%PROGRAM_FILES%]\517F132A-1466742338-11E3-8303-138CBF0C6073\hnsxC8C1.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\dowidoly]ImagePath=[%PROGRAM_FILES%]\517F132A-1466742338-11E3-8303-138CBF0C6073\jnsd9D4D.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\dowidoly]ImagePath=[%PROGRAM_FILES%]\02705564-1465304055-11DD-9C85-6AD05F0640CF\jnspD673.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\zigipyro]ImagePath=[%LOCAL_APPDATA%]\C00D7854-1466897674-E111-92A8-E5D743D39504\qnsb87B9.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\rijufoze]ImagePath=[%PROGRAM_FILES%]\C00D7854-1466866966-E111-92A8-E5D743D39504\hnsiC898.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\dowidoly]ImagePath=[%PROGRAM_FILES%]\C00D7854-1466866966-E111-92A8-E5D743D39504\jnseA56E.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\rijufoze]ImagePath=[%PROGRAM_FILES%]\20354878-1466927215-DB11-807E-001DBA0087F1\hnsa9554.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\dowidoly]ImagePath=[%PROGRAM_FILES%]\20354878-1466927215-DB11-807E-001DBA0087F1\jnsp6B07.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\rijufoze]ImagePath=[%PROGRAM_FILES%]\DB0B4127-1466313300-11DD-BBD8-92E675F3001D\hnsg6050.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\dowidoly]ImagePath=[%PROGRAM_FILES%]\DB0B4127-1466313300-11DD-BBD8-92E675F3001D\jnsd3F49.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\dowidoly]ImagePath=[%PROGRAM_FILES%]\A46ADC24-1466838010-D54C-05BB-101F741D32CA\jnshB61.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\rijufoze]ImagePath=[%PROGRAM_FILES%]\A46ADC24-1466838010-D54C-05BB-101F741D32CA\hnsl20EF.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\rijufoze]ImagePath=[%PROGRAM_FILES%]\24EB5A00-1466107316-11E2-8265-30F9EDCAFA9A\hnsuE0A.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\dowidoly]ImagePath=[%PROGRAM_FILES%]\24EB5A00-1466107316-11E2-8265-30F9EDCAFA9A\jnstF407.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\zigipyro]ImagePath=[%LOCAL_APPDATA%]\03AA02FC-1466761975-0585-C606-0E0700080009\qnsh8171.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\xenyduje]ImagePath=[%LOCAL_APPDATA%]\50377221-1448796237-E011-BAB9-00266CD4824B\snsxDD.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\ryrojiry]ImagePath=[%PROGRAM_FILES%]\50377221-1448770975-E011-BAB9-00266CD4824B\hnsc730F.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\pupivyhi]ImagePath=[%PROGRAM_FILES%]\50377221-1448770975-E011-BAB9-00266CD4824B\jnss54F3.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\diqugile]ImagePath=[%PROGRAM_FILES%]\50377221-1448770975-E011-BAB9-00266CD4824B\knsm351D.tmpfs
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\rijufoze]ImagePath=[%PROGRAM_FILES%]\EE453095-1466738115-DE11-878F-001125509412\hnsa31B0.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\dowidoly]ImagePath=[%PROGRAM_FILES%]\EE453095-1466738115-DE11-878F-001125509412\jnsz153D.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\rijufoze]ImagePath=[%PROGRAM_FILES%]\8CEB47FF-1466764456-2047-AC5A-F7BEEEF507C5\hnskDE6E.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\dowidoly]ImagePath=[%PROGRAM_FILES%]\8CEB47FF-1466764456-2047-AC5A-F7BEEEF507C5\jnsdC18D.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\rocufyky]ImagePath=[%PROGRAM_FILES%]\8713876D-1461235606-E011-8A11-DC0EA105F056\jnsrC065.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\rijufoze]ImagePath=[%PROGRAM_FILES%]\8713876D-1461235606-E011-8A11-DC0EA105F056\hnsgDDB6.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\rijufoze]ImagePath=[%PROGRAM_FILES%]\4C4C4544-1464374330-5910-8054-C6C04F463032\hnsx5C29.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\dowidoly]ImagePath=[%PROGRAM_FILES%]\4C4C4544-1464374330-5910-8054-C6C04F463032\jnsc4398.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\rijufoze]ImagePath=[%PROGRAM_FILES%]\402AD179-1466413491-E111-8DFC-B15CE7355707\hnsf4B41.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\dowidoly]ImagePath=[%PROGRAM_FILES%]\402AD179-1466413491-E111-8DFC-B15CE7355707\jnsv2FE3.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\wucotusy]ImagePath=[%PROGRAM_FILES%]\BAD20500-1456225430-815C-2E0E-F46D04383677\hnse15A.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\zigipyro]ImagePath=[%LOCAL_APPDATA%]\F69B847B-1458398792-11E5-8B16-F0761CED2EAA\qnsp13A1.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\wucotusy]ImagePath=[%PROGRAM_FILES%]\F69B847B-1458378270-11E5-8B16-F0761CED2EAA\hnsg7F30.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\rowugoqo]ImagePath=[%LOCAL_APPDATA%]\F69B847B-1458398183-11E5-8B16-F0761CED2EAA\snsbC949.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\gerocyni]ImagePath=[%PROGRAM_FILES%]\F69B847B-1458378270-11E5-8B16-F0761CED2EAA\jnsq5032.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\zigipyro]ImagePath=[%LOCAL_APPDATA%]\9E51FBB3-1466584243-19A7-22C3-41F3A5A3D035\qnsh3B29.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\rijufoze]ImagePath=[%PROGRAM_FILES%]\B2581300-1465790425-11E2-87E8-3C077155C0ED\hnst235.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\rocufyky]ImagePath=[%PROGRAM_FILES%]\00000000-1460121680-0000-0000-448A5B44A023\jnsiB03A.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\rijufoze]ImagePath=[%PROGRAM_FILES%]\00000000-1460121680-0000-0000-448A5B44A023\hnswC6F0.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\rijufoze]ImagePath=[%PROGRAM_FILES%]\BABE9148-1462893270-511A-A109-3D92FE9A5621\hnszD7E5.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\muconivu]ImagePath=[%PROGRAM_FILES%]\BABE9148-1462893270-511A-A109-3D92FE9A5621\jnsjC147.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\rijufoze]ImagePath=[%PROGRAM_FILES%]\03000200-1466525930-0500-0006-000700080009\hnsa8A8C.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\dowidoly]ImagePath=[%PROGRAM_FILES%]\03000200-1466525930-0500-0006-000700080009\jnsl6E73.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\zigipyro]ImagePath=[%LOCAL_APPDATA%]\61BAFFFD-1466522851-E011-8687-B870F4652F0D\qnso7FF2.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\rijufoze]ImagePath=[%PROGRAM_FILES%]\61BAFFFD-1466508598-E011-8687-B870F4652F0D\hnsu3258.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\dowidoly]ImagePath=[%PROGRAM_FILES%]\61BAFFFD-1466508598-E011-8687-B870F4652F0D\jnsu1808.tmp
  • [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]autoauto="[%PROGRAM_FILES%]\vandalizing\whitelock.exe"
  • [HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]dutoauto="[%PROGRAM_FILES%]\vandalizing\diamondback.exe"
  • [HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]interpee="[%PROGRAM_FILES%]\judicial\starving.exe"
  • [HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]rutoauto="[%PROGRAM_FILES%]\vandalizing\whitelock.exe"
  • [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]interpee="[%PROGRAM_FILES%]\judicial\starving.exe"
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\zigipyro]ImagePath=[%LOCAL_APPDATA%]\1E2F4CEE-1466529506-E011-8F65-0013D4D9C9F6\qnsw172C.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\rijufoze]ImagePath=[%PROGRAM_FILES%]\1E2F4CEE-1466355109-E011-8F65-0013D4D9C9F6\hnss4DEC.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\dowidoly]ImagePath=[%PROGRAM_FILES%]\1E2F4CEE-1466355109-E011-8F65-0013D4D9C9F6\jnsm32AC.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\rijufoze]ImagePath=[%PROGRAM_FILES%]\00000000-1466251463-0000-0000-94DE80362644\hnsu3B3E.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\dowidoly]ImagePath=[%PROGRAM_FILES%]\00000000-1466251463-0000-0000-94DE80362644\jnsj23D5.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\zigipyro]ImagePath=[%LOCAL_APPDATA%]\17A395E0-1466422766-81E4-3F5E-086266DFA70B\qnsx456B.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\rijufoze]ImagePath=[%PROGRAM_FILES%]\17A395E0-1466174314-81E4-3F5E-086266DFA70B\hnsj501D.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\dowidoly]ImagePath=[%PROGRAM_FILES%]\17A395E0-1466174314-81E4-3F5E-086266DFA70B\jnst375D.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\rijufoze]ImagePath=[%PROGRAM_FILES%]\E07369D3-1465904643-E011-A423-B583B6DF9BA0\hnsdA8BD.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\dowidoly]ImagePath=[%PROGRAM_FILES%]\00000004-1463945016-8007-BF5A-A560000152D4\jnskE38.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\rijufoze]ImagePath=[%PROGRAM_FILES%]\00000004-1463945016-8007-BF5A-A560000152D4\hnsa29D0.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\rijufoze]ImagePath=[%PROGRAM_FILES%]\E5431C60-1463040229-11E1-8E8F-E840F2A66980\hnsrB3B.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\dowidoly]ImagePath=[%PROGRAM_FILES%]\E5431C60-1463040229-11E1-8E8F-E840F2A66980\jnswD97A.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\rijufoze]ImagePath=[%PROGRAM_FILES%]\26962A48-1465853797-5EE2-91B0-81B49115806A\hnsfA7B3.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\dowidoly]ImagePath=[%PROGRAM_FILES%]\26962A48-1465853797-5EE2-91B0-81B49115806A\jnsv8E0F.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\zigipyro]ImagePath=[%LOCAL_APPDATA%]\03000200-1466346654-0500-0006-000700080009\qnsfD13C.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\vuqorosi]ImagePath=[%PROGRAM_FILES%]\03000200-1444544812-0500-0006-000700080009\knsn43D8.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\budynuky]ImagePath=[%PROGRAM_FILES%]\03000200-1444544812-0500-0006-000700080009\knso85C6.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\zigipyro]ImagePath=[%LOCAL_APPDATA%]\D3E4FE20-1466013585-11E0-94F5-BCAEC555353F\qnsx77A1.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\rijufoze]ImagePath=[%PROGRAM_FILES%]\4C4C4544-1466329295-4210-8051-B5C04F515831\hnsp4FB.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\dowidoly]ImagePath=[%PROGRAM_FILES%]\4C4C4544-1466329295-4210-8051-B5C04F515831\jnsbC919.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\rijufoze]ImagePath=[%PROGRAM_FILES%]\2F81387A-1466350692-81AE-286D-C77C5A294EFB\hnsj6C91.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\dowidoly]ImagePath=[%PROGRAM_FILES%]\2F81387A-1466350692-81AE-286D-C77C5A294EFB\jnsd4D5B.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\zigipyro]ImagePath=[%LOCAL_APPDATA%]\815D49F6-1466323923-CB11-966F-D1A9252A4667\qnstC469.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\rijufoze]ImagePath=[%PROGRAM_FILES%]\815D49F6-1465875501-CB11-966F-D1A9252A4667\hnsa5082.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\dowidoly]ImagePath=[%PROGRAM_FILES%]\815D49F6-1465875501-CB11-966F-D1A9252A4667\jnsv1A73.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\zigipyro]ImagePath=[%LOCAL_APPDATA%]\BA53C5C0-1466256949-11D3-A536-9C5C8ED11638\qnso408A.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\dowidoly]ImagePath=[%PROGRAM_FILES%]\BA53C5C0-1466245983-11D3-A536-9C5C8ED11638\jnsyDCB8.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\zigipyro]ImagePath=[%LOCAL_APPDATA%]\848B97E0-1466373804-11D5-8804-14DAE96931B7\qnsjCD.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\rocufyky]ImagePath=[%PROGRAM_FILES%]\09948CA0-1459875745-11E5-ABA1-9C5C8E7B6367\jnsk5B0.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\rijufoze]ImagePath=[%PROGRAM_FILES%]\09948CA0-1459875745-11E5-ABA1-9C5C8E7B6367\hnsi1AD0.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\zigipyro]ImagePath=[%LOCAL_APPDATA%]\03000200-1466267271-0500-0006-000700080009\qnss470.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\zigipyro]ImagePath=[%LOCAL_APPDATA%]\051474E0-1466202502-11E0-8E26-089E014EE432\qnsdF3AB.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\rijufoze]ImagePath=[%PROGRAM_FILES%]\051474E0-1466212995-11E0-8E26-089E014EE432\hnshD3B3.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\dowidoly]ImagePath=[%PROGRAM_FILES%]\051474E0-1466212995-11E0-8E26-089E014EE432\jnsu9B2C.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\zigipyro]ImagePath=[%LOCAL_APPDATA%]\051474E0-1466241048-11E0-8E26-089E014EE432\qnsy26F4.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\rijufoze]ImagePath=[%PROGRAM_FILES%]\DFE11B36-1466166673-11DE-B473-D1A4BF0C7074\hnsm8DE.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\zigipyro]ImagePath=[%LOCAL_APPDATA%]\DFE11B36-1466256149-11DE-B473-D1A4BF0C7074\qnsn4693.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\dowidoly]ImagePath=[%PROGRAM_FILES%]\DFE11B36-1466166673-11DE-B473-D1A4BF0C7074\jnshE3DF.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\zigipyro]ImagePath=[%LOCAL_APPDATA%]\66094AC0-1466218817-11D3-AFBF-10C37BA259E9\qnsiBB7A.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\rijufoze]ImagePath=[%PROGRAM_FILES%]\66094AC0-1466211521-11D3-AFBF-10C37BA259E9\hnsx7BC7.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\dowidoly]ImagePath=[%PROGRAM_FILES%]\66094AC0-1466211521-11D3-AFBF-10C37BA259E9\jnst6687.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\rijufoze]ImagePath=[%PROGRAM_FILES%]\454495E2-1466192377-11E4-A818-28D244CC1786\hnsj6873.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\dowidoly]ImagePath=[%PROGRAM_FILES%]\454495E2-1466192377-11E4-A818-28D244CC1786\jnsk521A.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\rijufoze]ImagePath=[%PROGRAM_FILES%]\DCAB044C-1462789314-11E4-B0A7-9DB802A11200\hnsf7A57.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\nolunijo]ImagePath=[%PROGRAM_FILES%]\DCAB044C-1462789314-11E4-B0A7-9DB802A11200\jnsk60C2.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\zigipyro]ImagePath=[%LOCAL_APPDATA%]\432BB420-1466263843-11B2-8000-B8B732248AFD\qnse1BB.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\rijufoze]ImagePath=[%PROGRAM_FILES%]\FEFEFEFE-1466140024-FEFE-FEFE-FEFEFEFEFEFE\hnsg6450.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\dowidoly]ImagePath=[%PROGRAM_FILES%]\FEFEFEFE-1466140024-FEFE-FEFE-FEFEFEFEFEFE\jnsb4827.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\rijufoze]ImagePath=[%PROGRAM_FILES%]\1E8995EF-1465953376-DE11-B3B4-000EA6292A3D\hnsuC13E.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\dowidoly]ImagePath=[%PROGRAM_FILES%]\1E8995EF-1465953376-DE11-B3B4-000EA6292A3D\jnsuA44A.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\rijufoze]ImagePath=[%PROGRAM_FILES%]\C96BCF95-1466179304-E511-8B16-F0761CE5776D\hnskE89C.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\dowidoly]ImagePath=[%PROGRAM_FILES%]\C96BCF95-1466179304-E511-8B16-F0761CE5776D\jnskD2F8.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\rijufoze]ImagePath=[%PROGRAM_FILES%]\4C4C4544-1465824419-4E10-8058-C2C04F435431\hnsaA6FA.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\zigipyro]ImagePath=[%LOCAL_APPDATA%]\3D66A208-1466174110-11E3-96D0-448A5B21EB5A\qnsf43B3.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\rijufoze]ImagePath=[%PROGRAM_FILES%]\3D66A208-1465201148-11E3-96D0-448A5B21EB5A\hnss523C.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\dowidoly]ImagePath=[%PROGRAM_FILES%]\3D66A208-1465201148-11E3-96D0-448A5B21EB5A\jnsh37AD.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\rijufoze]ImagePath=[%PROGRAM_FILES%]\1D0A2DE0-1465456337-11E5-BA4C-507B9D14A235\hnst82EB.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\dowidoly]ImagePath=[%PROGRAM_FILES%]\1D0A2DE0-1465456337-11E5-BA4C-507B9D14A235\jnsi5B5C.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\zigipyro]ImagePath=[%LOCAL_APPDATA%]\03000200-1465557071-0500-0006-000700080009\qnstC82D.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\rijufoze]ImagePath=[%PROGRAM_FILES%]\C78FAF81-1464154737-11E0-BB96-B6D022F23C7B\hnsc9A64.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\dowidoly]ImagePath=[%PROGRAM_FILES%]\C78FAF81-1464154737-11E0-BB96-B6D022F23C7B\jnsl7FB5.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\dowidoly]ImagePath=[%PROGRAM_FILES%]\5E976BB2-1466100937-E411-AA1F-F0761C3B2445\jnsd7C01.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\zigipyro]ImagePath=[%LOCAL_APPDATA%]\00000000-1466180556-0000-0000-8C89A52BB46C\qnsc5072.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\rijufoze]ImagePath=[%PROGRAM_FILES%]\00000000-1466173190-0000-0000-8C89A52BB46C\hnsr53BD.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\dowidoly]ImagePath=[%PROGRAM_FILES%]\00000000-1466173190-0000-0000-8C89A52BB46C\jnsb1B9B.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\rijufoze]ImagePath=[%PROGRAM_FILES%]\3D192160-1466003454-11DD-B029-50465DA0BAF5\hnss6722.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\dowidoly]ImagePath=[%PROGRAM_FILES%]\3D192160-1466003454-11DD-B029-50465DA0BAF5\jnsb3D51.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\rijufoze]ImagePath=[%PROGRAM_FILES%]\6ED718A5-1466182961-E011-9BA2-B870F4071CC1\hnsdA627.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\dowidoly]ImagePath=[%PROGRAM_FILES%]\6ED718A5-1466182961-E011-9BA2-B870F4071CC1\jnsd800F.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\zigipyro]ImagePath=[%LOCAL_APPDATA%]\40A0FDAC-1465986634-E211-834C-C55D3B1C046D\qnseA0B0.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\rijufoze]ImagePath=[%PROGRAM_FILES%]\40A0FDAC-1464415291-E211-834C-C55D3B1C046D\hnstB875.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\dowidoly]ImagePath=[%PROGRAM_FILES%]\40A0FDAC-1464415291-E211-834C-C55D3B1C046D\jnsq97BC.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\rijufoze]ImagePath=[%PROGRAM_FILES%]\34443437-1465887509-3242-4141-3338FFFFFFFF\hnsn97AF.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\dowidoly]ImagePath=[%PROGRAM_FILES%]\34443437-1465887509-3242-4141-3338FFFFFFFF\jnsiD3F2.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\rijufoze]ImagePath=[%PROGRAM_FILES%]\237F7B00-1465531444-11DD-9443-3085A995DEFA\hnsm454E.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\dowidoly]ImagePath=[%PROGRAM_FILES%]\237F7B00-1465531444-11DD-9443-3085A995DEFA\jnsm1FD2.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\zigipyro]ImagePath=[%LOCAL_APPDATA%]\00F28202-1466069626-DE11-8C72-001DBAB3F064\qnssF900.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\rocufyky]ImagePath=[%APPDATA%]\00F28202-1465624821-DE11-8C72-001DBAB3F064\jnsl9878.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\rijufoze]ImagePath=[%APPDATA%]\00F28202-1465624821-DE11-8C72-001DBAB3F064\hnswF24D.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\zigipyro]ImagePath=[%LOCAL_APPDATA%]\9ADA6C00-1466072833-11E1-8533-ECA86B78FDC3\qnshF6BF.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\rijufoze]ImagePath=[%PROGRAM_FILES%]\9ADA6C00-1465981456-11E1-8533-ECA86B78FDC3\hnsi9C60.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\dowidoly]ImagePath=[%PROGRAM_FILES%]\9ADA6C00-1465981456-11E1-8533-ECA86B78FDC3\jnsi7C60.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\dowidoly]ImagePath=[%PROGRAM_FILES%]\03000200-1466147675-0500-0006-000700080009\jnspD719.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\zigipyro]ImagePath=[%LOCAL_APPDATA%]\8F73F6FE-1465938194-DB11-BDA1-00174221322B\qnsl186F.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\rijufoze]ImagePath=[%PROGRAM_FILES%]\8F73F6FE-1465913837-DB11-BDA1-00174221322B\hnsi9EA8.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\dowidoly]ImagePath=[%PROGRAM_FILES%]\8F73F6FE-1465913837-DB11-BDA1-00174221322B\jnss854C.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\zigipyro]ImagePath=[%LOCAL_APPDATA%]\CEDE08A2-1466036377-E511-BA79-68F728F3339D\qnsf7F23.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\rijufoze]ImagePath=[%PROGRAM_FILES%]\CEDE08A2-1466055214-E511-BA79-68F728F3339D\hnsb6EC9.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\dowidoly]ImagePath=[%PROGRAM_FILES%]\CEDE08A2-1466055214-E511-BA79-68F728F3339D\jnsu5062.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\rijufoze]ImagePath=[%PROGRAM_FILES%]\4C4C4544-1466095044-4E10-8032-C2C04F465731\hnsi389C.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\dowidoly]ImagePath=[%PROGRAM_FILES%]\4C4C4544-1466095044-4E10-8032-C2C04F465731\jnsmF4AC.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\rijufoze]ImagePath=[%PROGRAM_FILES%]\08B5B8E5-1465738815-DE11-8D6F-001CC0C13E9C\hnsu1848.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\dowidoly]ImagePath=[%PROGRAM_FILES%]\08B5B8E5-1465738815-DE11-8D6F-001CC0C13E9C\jnspFA4B.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\zigipyro]ImagePath=[%LOCAL_APPDATA%]\FA93B34B-1466028368-7E4D-076F-2C27D7AEDC11\qnsz6C1D.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\rijufoze]ImagePath=[%PROGRAM_FILES%]\FA93B34B-1465912448-7E4D-076F-2C27D7AEDC11\hnsr7E19.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\dowidoly]ImagePath=[%PROGRAM_FILES%]\FA93B34B-1465912448-7E4D-076F-2C27D7AEDC11\jnsi34BA.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\zigipyro]ImagePath=[%LOCAL_APPDATA%]\3969D2C9-1466105358-E411-85C7-F0761C7ED938\qnsa8814.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\rijufoze]ImagePath=[%PROGRAM_FILES%]\3969D2C9-1466083960-E411-85C7-F0761C7ED938\hnshAD37.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\dowidoly]ImagePath=[%PROGRAM_FILES%]\3969D2C9-1466083960-E411-85C7-F0761C7ED938\jnsg9028.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\zigipyro]ImagePath=[%LOCAL_APPDATA%]\75A646E0-1466087732-11E1-A1D2-30F9EDEEC9CF\qnseA03A.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\rijufoze]ImagePath=[%PROGRAM_FILES%]\75A646E0-1466105544-11E1-A1D2-30F9EDEEC9CF\hnsxF7CB.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\dowidoly]ImagePath=[%PROGRAM_FILES%]\75A646E0-1466105544-11E1-A1D2-30F9EDEEC9CF\jnsiE12E.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\dowidoly]ImagePath=[%PROGRAM_FILES%]\33444335-1466040111-5330-4244-A0481C045B7E\jnssCA62.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\rijufoze]ImagePath=[%PROGRAM_FILES%]\4B435451-1465827677-3052-4231-F46D0489548B\hnsh13EF.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\dowidoly]ImagePath=[%PROGRAM_FILES%]\4B435451-1465827677-3052-4231-F46D0489548B\jnskF5C6.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\rijufoze]ImagePath=[%PROGRAM_FILES%]\4C4C4544-1465924540-4E10-8056-B5C04F4C5631\hnssBD1A.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\dowidoly]ImagePath=[%PROGRAM_FILES%]\4C4C4544-1465924540-4E10-8056-B5C04F4C5631\jnsc9878.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\zigipyro]ImagePath=[%LOCAL_APPDATA%]\4C4C4544-1465984001-4A10-8042-C6C04F473132\qnsd71F.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\rijufoze]ImagePath=[%PROGRAM_FILES%]\4C4C4544-1465973697-4A10-8042-C6C04F473132\hnsb4773.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\dowidoly]ImagePath=[%PROGRAM_FILES%]\4C4C4544-1465973697-4A10-8042-C6C04F473132\jnsf2D41.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\rijufoze]ImagePath=[%PROGRAM_FILES%]\42323039-1465874586-4631-4646-4146FFFFFFFF\hnss9408.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\dowidoly]ImagePath=[%PROGRAM_FILES%]\42323039-1465874586-4631-4646-4146FFFFFFFF\jnsm7C70.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\zigipyro]ImagePath=[%LOCAL_APPDATA%]\476D0100-1466018448-B150-D800-0016D3DBAB88\qnsz7549.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\rijufoze]ImagePath=[%PROGRAM_FILES%]\476D0100-1465992250-B150-D800-0016D3DBAB88\hnseC7F6.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\dowidoly]ImagePath=[%PROGRAM_FILES%]\476D0100-1465992250-B150-D800-0016D3DBAB88\jnsfA2C9.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\rijufoze]ImagePath=[%PROGRAM_FILES%]\4C4C4544-1465900706-3910-8044-CAC04F4C3532\hnszB76B.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\dowidoly]ImagePath=[%PROGRAM_FILES%]\4C4C4544-1465900706-3910-8044-CAC04F4C3532\jnsn8C81.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\zigipyro]ImagePath=[%LOCAL_APPDATA%]\1A656765-1465997170-284E-BAB3-54A0508C7602\qnsh931B.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\zigipyro]ImagePath=[%LOCAL_APPDATA%]\1A656765-1466004580-284E-BAB3-54A0508C7602\qnsgA248.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\zigipyro]ImagePath=[%LOCAL_APPDATA%]\4B435451-1465894884-4533-4732-10BF4834BFEF\qnsz2DF.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\rijufoze]ImagePath=[%PROGRAM_FILES%]\4B435451-1465867757-4533-4732-10BF4834BFEF\hnsnECA1.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\dowidoly]ImagePath=[%PROGRAM_FILES%]\4B435451-1465867757-4533-4732-10BF4834BFEF\jnssCCC0.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\rijufoze]ImagePath=[%PROGRAM_FILES%]\03000200-1217631548-0500-0006-000700080009\hnsfC4B7.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\dowidoly]ImagePath=[%PROGRAM_FILES%]\03000200-1217631548-0500-0006-000700080009\jnsvA90B.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\zigipyro]ImagePath=[%LOCAL_APPDATA%]\EE3070BC-1465988501-11E5-8FC7-507B9D8A93CB\qnss900A.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\rijufoze]ImagePath=[%PROGRAM_FILES%]\EE3070BC-1464457635-11E5-8FC7-507B9D8A93CB\hnsy11F4.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\dowidoly]ImagePath=[%PROGRAM_FILES%]\EE3070BC-1464457635-11E5-8FC7-507B9D8A93CB\jnscF6D8.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\zigipyro]ImagePath=[%LOCAL_APPDATA%]\35444335-1465991873-5A30-3950-3CA82AA7EE9B\qnsiD35C.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\rijufoze]ImagePath=[%PROGRAM_FILES%]\35444335-1465892228-5A30-3950-3CA82AA7EE9B\hnsrBCF3.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\dowidoly]ImagePath=[%PROGRAM_FILES%]\35444335-1465892228-5A30-3950-3CA82AA7EE9B\jnsmA4A6.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\rijufoze]ImagePath=[%PROGRAM_FILES%]\4C4C4544-1466013214-4C10-804E-C7C04F4A334A\hnsj3BD3.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\dowidoly]ImagePath=[%PROGRAM_FILES%]\4C4C4544-1466013214-4C10-804E-C7C04F4A334A\jnsp24AF.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\zigipyro]ImagePath=[%LOCAL_APPDATA%]\4B435451-1465970619-5031-4832-10BF483176C8\qnsn52D7.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\rijufoze]ImagePath=[%PROGRAM_FILES%]\4B435451-1465988431-5031-4832-10BF483176C8\hnsgBA5A.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\dowidoly]ImagePath=[%PROGRAM_FILES%]\4B435451-1465988431-5031-4832-10BF483176C8\jnshA2C9.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\jiwizuqe]ImagePath=[%PROGRAM_FILES%]\144F7C00-1465162964-11D9-BEBB-C86000C600B6\znszF450.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\zigipyro]ImagePath=[%LOCAL_APPDATA%]\937B8236-1465897844-1430-874F-10C37B690079\qnsqAC18.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\dowidoly]ImagePath=[%PROGRAM_FILES%]\5076E080-1465798906-11E1-88A0-ECA86B71D318\jnsiBC3C.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\zutuzuni]ImagePath=[%PROGRAM_FILES%]\1E00FAC0-1454859828-6301-2C90-0022155A1D0F\jnsy4672.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\wucotusy]ImagePath=[%PROGRAM_FILES%]\1E00FAC0-1454859828-6301-2C90-0022155A1D0F\hnst5F9F.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\rijufoze]ImagePath=[%PROGRAM_FILES%]\1E00FAC0-1465794962-6301-2C90-0022155A1D0F\hnso78AC.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\dowidoly]ImagePath=[%PROGRAM_FILES%]\1E00FAC0-1465794962-6301-2C90-0022155A1D0F\jnse56E8.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\zigipyro]ImagePath=[%LOCAL_APPDATA%]\03D40274-1465904557-054D-C406-1C0700080009\qnsg6DF0.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\rijufoze]ImagePath=[%PROGRAM_FILES%]\03D40274-1465928872-054D-C406-1C0700080009\hnshDB81.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\dowidoly]ImagePath=[%PROGRAM_FILES%]\03D40274-1465928872-054D-C406-1C0700080009\jnslC065.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\rijufoze]ImagePath=[%PROGRAM_FILES%]\A0D28860-1465895762-11E3-9761-9C5C8E7A748B\hnsdE6DD.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\dowidoly]ImagePath=[%PROGRAM_FILES%]\A0D28860-1465895762-11E3-9761-9C5C8E7A748B\jnsgC9EC.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\rijufoze]ImagePath=[%PROGRAM_FILES%]\20569BBC-1461420050-DF11-B42F-00266C67D0BD\hnsxF0D7.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\dowidoly]ImagePath=[%PROGRAM_FILES%]\05E5E034-1465839708-11E1-AAA6-1212C9FB0A00\jnsa15C.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\rijufoze]ImagePath=[%PROGRAM_FILES%]\05E5E034-1465839708-11E1-AAA6-1212C9FB0A00\hnsm2030.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\rijufoze]ImagePath=[%PROGRAM_FILES%]\42C6C100-1465896560-81E2-34B4-60A44C024F7E\hnsuCB18.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\dowidoly]ImagePath=[%PROGRAM_FILES%]\42C6C100-1465896560-81E2-34B4-60A44C024F7E\jnswB4C0.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\rijufoze]ImagePath=[%PROGRAM_FILES%]\00000000-1465834691-0000-0000-D8CB8AECCAF5\hnsl8277.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\dowidoly]ImagePath=[%PROGRAM_FILES%]\00000000-1465834691-0000-0000-D8CB8AECCAF5\jnsb387B.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\rijufoze]ImagePath=[%PROGRAM_FILES%]\802C3DC6-1465856768-E011-8E60-C0FBAD62343C\hnstDECD.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\dowidoly]ImagePath=[%PROGRAM_FILES%]\802C3DC6-1465856768-E011-8E60-C0FBAD62343C\jnsyB3F4.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\jiwizuqe]ImagePath=[%PROGRAM_FILES%]\038D0240-1465738334-0513-BA06-DA0700080009\znsxABFE.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\rijufoze]ImagePath=[%PROGRAM_FILES%]\35444335-1465887980-4230-4B4D-D0BF9C835214\hnshA737.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\dowidoly]ImagePath=[%PROGRAM_FILES%]\35444335-1465887980-4230-4B4D-D0BF9C835214\jnsh8DD1.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\rijufoze]ImagePath=[%PROGRAM_FILES%]\02752400-1465823246-1D3E-B6F8-4FBDD45B850D\hnsh2077.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\zigipyro]ImagePath=[%LOCAL_APPDATA%]\EA03CE71-1465650165-11DD-BBDA-64319A150022\qnso284.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\zigipyro]ImagePath=[%LOCAL_APPDATA%]\1E00D6C0-1465784585-5700-C50D-C8600075C5B0\qnsy50FE.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\rijufoze]ImagePath=[%PROGRAM_FILES%]\1E00D6C0-1465773668-5700-C50D-C8600075C5B0\hnsiCD6E.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\dowidoly]ImagePath=[%PROGRAM_FILES%]\1E00D6C0-1465773668-5700-C50D-C8600075C5B0\jnsiB3D4.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\rijufoze]ImagePath=[%PROGRAM_FILES%]\3D869880-1465829493-81DF-32B2-20CF305FDA05\hnsfA6AD.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\dowidoly]ImagePath=[%PROGRAM_FILES%]\3D869880-1465829493-81DF-32B2-20CF305FDA05\jnsa89E8.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\zigipyro]ImagePath=[%LOCAL_APPDATA%]\4C4C4544-1465834248-3010-8037-B1C04F385731\qnswAD12.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\rijufoze]ImagePath=[%PROGRAM_FILES%]\4C4C4544-1465826534-3010-8037-B1C04F385731\hnsgD34C.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\dowidoly]ImagePath=[%PROGRAM_FILES%]\4C4C4544-1465826534-3010-8037-B1C04F385731\jnsbA181.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\zigipyro]ImagePath=[%LOCAL_APPDATA%]\45867B37-1465731041-E411-B2A0-ECB1D7BD3232\qnsqFBEC.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\rijufoze]ImagePath=[%PROGRAM_FILES%]\45867B37-1465708297-E411-B2A0-ECB1D7BD3232\hnseD422.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\dowidoly]ImagePath=[%PROGRAM_FILES%]\45867B37-1465708297-E411-B2A0-ECB1D7BD3232\jnsjB74D.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\rijufoze]ImagePath=[%PROGRAM_FILES%]\5C8238BF-1465832134-774C-BEFC-14DDA9BE957D\hnsk40E8.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\dowidoly]ImagePath=[%PROGRAM_FILES%]\5C8238BF-1465832134-774C-BEFC-14DDA9BE957D\jnsaE0FC.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\rijufoze]ImagePath=[%PROGRAM_FILES%]\00000000-1465700615-0000-0000-448A5B86FB72\hnslA183.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\dowidoly]ImagePath=[%PROGRAM_FILES%]\00000000-1465700615-0000-0000-448A5B86FB72\jnsm89A4.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\rijufoze]ImagePath=[%PROGRAM_FILES%]\4C4C4544-1465708586-5410-8046-C3C04F4D3532\hnsx4FEF.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\dowidoly]ImagePath=[%PROGRAM_FILES%]\4C4C4544-1465708586-5410-8046-C3C04F4D3532\jnsm364A.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\pyhisylo]ImagePath=[%PROGRAM_FILES%]\4C4C4544-1442729556-4E10-804A-B8C04F394631\knss557F.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\lehicewu]ImagePath=[%PROGRAM_FILES%]\4C4C4544-1442729556-4E10-804A-B8C04F394631\jnsd3D20.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\gyvixodu]ImagePath=[%PROGRAM_FILES%]\4C4C4544-1442729556-4E10-804A-B8C04F394631\hnsd7580.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\dipubibu]ImagePath=[%LOCAL_APPDATA%]\4C4C4544-1442758451-4E10-804A-B8C04F394631\snsy651C.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\rijufoze]ImagePath=[%PROGRAM_FILES%]\03000200-1464817846-0500-0006-000700080009\hnsy7690.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\dowidoly]ImagePath=[%PROGRAM_FILES%]\03000200-1464817846-0500-0006-000700080009\jnsr56A3.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\rijufoze]ImagePath=[%PROGRAM_FILES%]\08CFE120-1465761194-11DF-9677-20CF308B28B6\hnse3F4.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\dowidoly]ImagePath=[%PROGRAM_FILES%]\08CFE120-1465761194-11DF-9677-20CF308B28B6\jnsvED9B.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\zigipyro]ImagePath=[%LOCAL_APPDATA%]\00000000-1465745075-0000-0000-6CF0497BB9B3\qnsxF005.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\rijufoze]ImagePath=[%PROGRAM_FILES%]\00000000-1465737730-0000-0000-6CF0497BB9B3\hnswF186.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\dowidoly]ImagePath=[%PROGRAM_FILES%]\00000000-1465737730-0000-0000-6CF0497BB9B3\jnsdDC37.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\rijufoze]ImagePath=[%PROGRAM_FILES%]\33444335-1465667554-3835-5732-A0481C104AA9\hnsvBEFD.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\dowidoly]ImagePath=[%PROGRAM_FILES%]\33444335-1465667554-3835-5732-A0481C104AA9\jnsf91D3.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\zigipyro]ImagePath=[%LOCAL_APPDATA%]\00000000-1465705596-0000-0000-1C6F65D98ACC\qnsbEB49.tmp
  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\rijufoze]ImagePath=[%PROGRAM_FILES%]\00000000-1465690655-0000-0000-1C6F65D98ACC\hnsbDD7B.tmp