API tools faq
paste
Advertisement
Guest User

Help please

a guest
Oct 4th, 2011
263
0
Never
Add comment
Not a member of Pastebin yet? Sign Up, it unlocks many cool features!
text 110.76 KB | None | 0 0
raw download clone embed print report
  1. Logfile of Trend Micro HijackThis v2.0.4
  2. Scan saved at 10:25:03 AM, on 10/4/2011
  3. Platform: Windows 7 (WinNT 6.00.3504)
  4. MSIE: Internet Explorer v8.00 (8.00.7600.16839)
  5. Boot mode: Normal
  6.  
  7. Running processes:
  8. C:\Program Files (x86)\Common Files\LightScribe\LightScribeControlPanel.exe
  9. C:\Program Files (x86)\Hewlett-Packard\HP Advisor\HPAdvisor.exe
  10. C:\Program Files (x86)\Google\GoogleToolbarNotifier\GoogleToolbarNotifier.exe
  11. C:\Program Files (x86)\HP\Digital Imaging\bin\hpqtra08.exe
  12. C:\Program Files (x86)\Microsoft Office\Office12\ONENOTEM.EXE
  13. C:\Program Files (x86)\OpenOffice.org 3\program\soffice.exe
  14. C:\Program Files (x86)\Hewlett-Packard\HP Quick Launch Buttons\QLBCtrl.exe
  15. C:\Program Files (x86)\HP\HP Software Update\hpwuschd2.exe
  16. C:\Program Files (x86)\iTunes\iTunesHelper.exe
  17. C:\Program Files (x86)\OpenOffice.org 3\program\soffice.bin
  18. C:\Program Files (x86)\HP\Digital Imaging\bin\hpqSTE08.exe
  19. C:\Program Files (x86)\Hewlett-Packard\Shared\hpqToaster.exe
  20. C:\Program Files (x86)\HP\Digital Imaging\bin\hpqbam08.exe
  21. C:\Program Files (x86)\HP\Digital Imaging\bin\hpqgpc01.exe
  22. c:\Program Files (x86)\Hewlett-Packard\TouchSmart\Media\Kernel\CLML\CLMLSvc.exe
  23. C:\Program Files (x86)\Mozilla Firefox\firefox.exe
  24. C:\Program Files (x86)\Mozilla Firefox\plugin-container.exe
  25. C:\Program Files (x86)\Mozilla Firefox\plugin-container.exe
  26. C:\Program Files (x86)\TeamViewer\Version6\TeamViewer.exe
  27. C:\Users\Stace\Desktop\HijackThis.exe
  28.  
  29. R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = http://g.msn.com/HPNOT/1
  30. R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = http://search.conduit.com?SearchSource=10&ctid=CT2269050
  31. R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = http://g.msn.com/HPNOT/1
  32. R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = http://go.microsoft.com/fwlink/?LinkId=54896
  33. R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Search Page = http://go.microsoft.com/fwlink/?LinkId=54896
  34. R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = http://g.msn.com/HPNOT/1
  35. R0 - HKLM\Software\Microsoft\Internet Explorer\Search,SearchAssistant =
  36. R0 - HKLM\Software\Microsoft\Internet Explorer\Search,CustomizeSearch =
  37. R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Local Page = C:\Windows\SysWOW64\blank.htm
  38. R1 - HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings,ProxyOverride = *.local
  39. R0 - HKCU\Software\Microsoft\Internet Explorer\Toolbar,LinksFolderName =
  40. R3 - URLSearchHook: UrlSearchHook Class - {00000000-6E41-4FD3-8538-502F5495E5FC} - C:\Program Files (x86)\Ask.com\GenericAskToolbar.dll
  41. R3 - URLSearchHook: DVDVideoSoftTB Toolbar - {872b5b88-9db5-4310-bdd0-ac189557e5f5} - C:\Program Files (x86)\DVDVideoSoftTB\prxtbDVDV.dll
  42. F2 - REG:system.ini: UserInit=userinit.exe
  43. O2 - BHO: (no name) - {02F569E3-AAFF-4D31-A51C-B24C355CFCE2} - C:\Windows\SysWow64\api-ms-win-core-memory-l1-1-032.dll
  44. O2 - BHO: HP Print Enhancer - {0347C33E-8762-4905-BF09-768834316C61} - C:\Program Files (x86)\HP\Digital Imaging\Smart Web Printing\hpswp_printenhancer.dll
  45. O2 - BHO: AcroIEHelperStub - {18DF081C-E8AD-4283-A596-FA578C2EBDC3} - C:\Program Files (x86)\Common Files\Adobe\Acrobat\ActiveX\AcroIEHelperShim.dll
  46. O2 - BHO: Conduit Engine - {30F9B915-B755-4826-820B-08FBA6BD249D} - C:\Program Files (x86)\ConduitEngine\prxConduitEngine.dll
  47. O2 - BHO: (no name) - {5C255C8A-E604-49b4-9D64-90988571CECB} - (no file)
  48. O2 - BHO: DVDVideoSoftTB - {872b5b88-9db5-4310-bdd0-ac189557e5f5} - C:\Program Files (x86)\DVDVideoSoftTB\prxtbDVDV.dll
  49. O2 - BHO: Windows Live Sign-in Helper - {9030D464-4C02-4ABF-8ECC-5164760863C6} - C:\Program Files (x86)\Common Files\Microsoft Shared\Windows Live\WindowsLiveLogin.dll
  50. O2 - BHO: Google Toolbar Helper - {AA58ED58-01DD-4d91-8333-CF10577473F7} - C:\Program Files (x86)\Google\Google Toolbar\GoogleToolbar_32.dll
  51. O2 - BHO: SkypeIEPluginBHO - {AE805869-2E5C-4ED4-8F7B-F1F7851A4497} - C:\Program Files (x86)\Skype\Toolbars\Internet Explorer\skypeieplugin.dll
  52. O2 - BHO: Google Toolbar Notifier BHO - {AF69DE43-7D58-4638-B6FA-CE66B5AD205D} - C:\Program Files (x86)\Google\GoogleToolbarNotifier\5.7.6406.1642\swg.dll
  53. O2 - BHO: Microsoft Live Search Toolbar Helper - {d2ce3e00-f94a-4740-988e-03dc2f38c34f} - c:\Program Files (x86)\MSN\Toolbar\3.0.0566.0\msneshellx.dll
  54. O2 - BHO: Ask Toolbar BHO - {D4027C7F-154A-4066-A1AD-4243D8127440} - C:\Program Files (x86)\Ask.com\GenericAskToolbar.dll
  55. O2 - BHO: Java(tm) Plug-In 2 SSV Helper - {DBC80044-A445-435b-BC74-9C25C1C588A9} - C:\Program Files (x86)\Java\jre6\bin\jp2ssv.dll
  56. O2 - BHO: HP Smart BHO Class - {FFFFFFFF-CF4E-4F2B-BDC2-0E72E116A856} - C:\Program Files (x86)\HP\Digital Imaging\Smart Web Printing\hpswp_BHO.dll
  57. O3 - Toolbar: Microsoft Live Search Toolbar - {1E61ED7C-7CB8-49d6-B9E9-AB4C880C8414} - c:\Program Files (x86)\MSN\Toolbar\3.0.0566.0\msneshellx.dll
  58. O3 - Toolbar: DVDVideoSoftTB Toolbar - {872b5b88-9db5-4310-bdd0-ac189557e5f5} - C:\Program Files (x86)\DVDVideoSoftTB\prxtbDVDV.dll
  59. O3 - Toolbar: Ask Toolbar - {D4027C7F-154A-4066-A1AD-4243D8127440} - C:\Program Files (x86)\Ask.com\GenericAskToolbar.dll
  60. O3 - Toolbar: Conduit Engine - {30F9B915-B755-4826-820B-08FBA6BD249D} - C:\Program Files (x86)\ConduitEngine\prxConduitEngine.dll
  61. O3 - Toolbar: Google Toolbar - {2318C2B1-4965-11d4-9B18-009027A5CD4F} - C:\Program Files (x86)\Google\Google Toolbar\GoogleToolbar_32.dll
  62. O4 - HKLM\..\Run: [StartCCC] "C:\Program Files (x86)\ATI Technologies\ATI.ACE\Core-Static\CLIStart.exe" MSRun
  63. O4 - HKLM\..\Run: [HPCam_Menu] "c:\Program Files (x86)\Hewlett-Packard\Media\Webcam\MUITransfer\MUIStartMenu.exe" "c:\Program Files (x86)\Hewlett-Packard\Media\Webcam" UpdateWithCreateOnce "Software\Hewlett-Packard\Media\Webcam"
  64. O4 - HKLM\..\Run: [QlbCtrl.exe] C:\Program Files (x86)\Hewlett-Packard\HP Quick Launch Buttons\QlbCtrl.exe /Start
  65. O4 - HKLM\..\Run: [NortonOnlineBackupReminder] "C:\Program Files (x86)\Symantec\Norton Online Backup\Activation\NobuActivation.exe" UNATTENDED
  66. O4 - HKLM\..\Run: [Adobe Reader Speed Launcher] "C:\Program Files (x86)\Adobe\Reader 9.0\Reader\Reader_sl.exe"
  67. O4 - HKLM\..\Run: [WirelessAssistant] C:\Program Files (x86)\Hewlett-Packard\HP Wireless Assistant\HPWAMain.exe
  68. O4 - HKLM\..\Run: [HP Software Update] C:\Program Files (x86)\Hp\HP Software Update\HPWuSchd2.exe
  69. O4 - HKLM\..\Run: [SunJavaUpdateSched] "C:\Program Files (x86)\Common Files\Java\Java Update\jusched.exe"
  70. O4 - HKLM\..\Run: [AppleSyncNotifier] C:\Program Files (x86)\Common Files\Apple\Mobile Device Support\AppleSyncNotifier.exe
  71. O4 - HKLM\..\Run: [QuickTime Task] "C:\Program Files (x86)\QuickTime\QTTask.exe" -atboottime
  72. O4 - HKLM\..\Run: [iTunesHelper] "C:\Program Files (x86)\iTunes\iTunesHelper.exe"
  73. O4 - HKLM\..\Run: [FBtzP0ycA8234A] C:\Windows\system32\B7dEL8gRZhXkV.exe
  74. O4 - HKLM\..\Run: [B0uvS2ibFpGaHdK8234A] C:\Windows\system32\UK8fRL9hTqUeIrO.exe
  75. O4 - HKLM\..\Run: [VbF4pmG5sJdKfZh8234A] C:\Windows\system32\CYXwjUVelBzNc1v.exe
  76. O4 - HKLM\..\Run: [PJ7dEL8gRqYwUeO8234A] C:\Windows\system32\IBtxP0ycSiDoFaH.exe
  77. O4 - HKLM\..\Run: [kuS1ibD3oGaHsJ8234A] C:\Windows\system32\TEL9gTZqjCkVlNx.exe
  78. O4 - HKLM\..\Run: [cIVrzONtx0c2b3n8234A] C:\Windows\system32\P5aQH6dWKfLgXjC.exe
  79. O4 - HKLM\..\Run: [YuvS2ibF3n5Q68234A] C:\Windows\system32\ZRL9hTXqjCkBzNx.exe
  80. O4 - HKLM\..\Run: [WyxA1uvS2b3m5Q68234A] C:\Windows\system32\mdEK8fRZ9TwUeIr.exe
  81. O4 - HKLM\..\Run: [qwjUVelIBzNu2bp8234A] C:\Windows\system32\gnF4pmH5sJdKgZh.exe
  82. O4 - HKLM\..\Run: [XxP0ycS1iDoFaHs8234A] C:\Windows\system32\n7dEL8gRZhXkVlB.exe
  83. O4 - HKLM\..\Run: [yycS1ivD3n4m5gZ8234A] C:\Windows\system32\sYCwkUVrlBx.exe
  84. O4 - HKLM\..\Run: [KdWK7fRL9TqYeIr8234A] C:\Windows\system32\yONyxA0uv2b3naH.exe
  85. O4 - HKLM\..\Run: [b5aQJdW8fTqUeIr8234A] C:\Windows\system32\SlIBrzPNyAuSoFp.exe
  86. O4 - HKLM\..\Run: [fhTXwjUCeIrPyAu8234A] C:\Windows\system32\WvD2obF4pGsJdKf.exe
  87. O4 - HKLM\..\Run: [JD3onF4am5W7E8R8234A] C:\Windows\system32\xhYCwkUVrOtPySi.exe
  88. O4 - HKLM\..\Run: [SnG4aQH6sKfLgZj8234A] C:\Windows\system32\jekIVrzONx0c2b3.exe
  89. O4 - HKLM\..\Run: [G8fRL9hTXjCkBzN8234A] C:\Windows\system32\lA1uvS2ob3m5Q6W.exe
  90. O4 - HKLM\..\Run: [w2obF4pmGsJdKfZ8234A] C:\Windows\system32\hhYXwjUVeItNc1v.exe
  91. O4 - HKLM\..\Run: [Y5sWJ7dELgZYw8234A] C:\Windows\system32\aOBtxP0yc1v3n4m.exe
  92. O4 - HKLM\..\Run: [lgTqjYCwkVlNx0c8234A] C:\Windows\system32\wucS2ibD3n4Q6W7.exe
  93. O4 - HKLM\..\Run: [W5aQHdWK7R9TqYe8234A] C:\Windows\system32\yIBrzONyx0v2b3n.exe
  94. O4 - HKLM\..\Run: [XpnG5aQH6W7R9Tq8234A] C:\Windows\system32\LjUCekIBrOyAu2F.exe
  95. O4 - HKLM\..\Run: [CYCwkUVrOtPySio8234A] C:\Windows\system32\SamH6sWJ7E8Tq.exe
  96. O4 - HKLM\..\Run: [KJ7fEL8gTqYwUrO8234A] C:\Windows\system32\f1ibD3onGa.exe
  97. O4 - HKLM\..\Run: [FH6ssWKK78234A] C:\Windows\system32\p00uucS2ibD3pGa.exe
  98. O4 - HKLM\..\Run: [GvvD2obbFpmGs8234A] C:\Windows\system32\gXXwwjUUVelBtPN.exe
  99. O4 - HKLM\..\Run: [pUUUVrrlOBtx0yS8234A] C:\Windows\system32\uZZqqhYCw.exe
  100. O4 - HKLM\..\Run: [nVVrrzOONtA08234A] C:\Windows\system32\IjYYCCekI.exe
  101. O4 - HKLM\..\Run: [qyyyxA1uvS2b8234A] C:\Windows\system32\y99hhTXwwjCeIBz.exe
  102. O4 - HKLM\..\Run: [lpppmHH5sQJ7EKg8234A] C:\Windows\system32\bBttzzP0ycA1vDo.exe
  103. O4 - HKLM\..\Run: [SnnGG4ammH8234A] C:\Windows\system32\bNNNtxxP0ucSib3.exe
  104. O4 - HKLM\..\Run: [Z222ibbF3pG5H6W8234A] C:\Windows\system32\JzzOONyxxAuv.exe
  105. O4 - HKLM\..\Run: [qG55sQQJ6E8fZ9X8234A] C:\Windows\system32\geeelBPPNyc1uD2.exe
  106. O4 - HKLM\..\Run: [CFFHH5ssJ7dE8gZ8234A] C:\Windows\system32\kBBttzP0cA1iDo.exe
  107. O4 - HKLM\..\Run: [QTTZZqjYCwkVrO8234A] C:\Windows\system32\zK777fEL9g.exe
  108. O4 - HKLM\..\Run: [eWK88fRL9TXqUCk8234A] C:\Windows\system32\toobbF3pmGaJ6.exe
  109. O4 - HKLM\..\Run: [gpppmHHsQJ78234A] C:\Windows\system32\PzzzP00ycA1vDon.exe
  110. O4 - HKLM\..\Run: [wjjYYCwwkIrlOtx8234A] C:\Windows\system32\e6ssWWK7fEL9TZ.exe
  111. O4 - HKLM\..\Run: [rNyyxxA0u8234A] C:\Windows\system32\n9hhTTXqjUCeIBz.exe
  112. O4 - HKLM\..\Run: [slIIBBtzPNyc1uD8234A] C:\Windows\system32\b999hYYXwjU.exe
  113. O4 - HKLM\..\Run: [zYXXwwjUVelItzy8234A] C:\Windows\system32\GH55ssQJ7dEKgR9.exe
  114. O4 - HKLM\..\Run: [ycccA1iivD2npm58234A] C:\Windows\system32\kellOOBtzP0.exe
  115. O4 - HKLM\..\Run: [OsssWKK7fELgTqj8234A] C:\Windows\system32\xSS2iibD3pnGaQ.exe
  116. O4 - HKLM\..\Run: [JGGG5aQJ6dW8fL98234A] C:\Windows\system32\tvvSS2obbF.exe
  117. O4 - HKLM\..\Run: [J22oobF4pmG5sJd8234A] C:\Windows\system32\FzzPPNycA1uv.exe
  118. O4 - HKLM\..\Run: [lvvvDD2on8234A] C:\Windows\system32\owkkUUVeOtP0yA.exe
  119. O4 - HKLM\..\Run: [ucSS11ibD3onGaH8234A] C:\Windows\system32\YZZqqjYYCwkVlN0.exe
  120. O4 - HKLM\..\Run: [gNNNyyxA0uv8234A] C:\Windows\system32\P99hhTXXqjCekBr.exe
  121. O4 - HKLM\..\Run: [zZ99hhYXwjUVe8234A] C:\Windows\system32\WddEEK8gR.exe
  122. O4 - HKLM\..\Run: [A333onnF48234A] C:\Windows\system32\urrrlOOBtxPycSi.exe
  123. O4 - HKLM\..\Run: [ujCCwwkIlOtxuc18234A] C:\Windows\system32\hnnGG4aaQs7fLgZ.exe
  124. O4 - HKLM\..\Run: [Coo3pmm5aQ68234A] C:\Windows\system32\yjjUUCeIBrzNx1.exe
  125. O4 - HKLM\..\Run: [tBBttzPNNy8234A] C:\Windows\system32\m8ggRRZ9hYXwjVl.exe
  126. O4 - HKLM\..\Run: [jYCCwkkUVrlOtx08234A] C:\Windows\system32\RffEEL8gTZq.exe
  127. O4 - HKLM\..\Run: [xXXqqjYYCek8234A] C:\Windows\system32\mGGG5aQH6dK7fLg.exe
  128. O4 - HKLM\..\Run: [JBBBrzzPNyxA8234A] C:\Windows\system32\d888fRRZ9hTwjUe.exe
  129. O4 - HKLM\..\Run: [QOOBBtzPycA1vDo8234A] C:\Windows\system32\s88ggRZqhYXwUV.exe
  130. O4 - HKLM\..\Run: [gIIVVrlONtxPuSi8234A] C:\Windows\system32\rssWWK7fEL9gZjw.exe
  131. O4 - HKLM\..\Run: [b333ppnG5aQHdW78234A] C:\Windows\system32\LrrzzONNyxAuv2.exe
  132. O4 - HKLM\..\Run: [O55ssQJ6dEfRZhX8234A] C:\Windows\system32\PAAA1uuvD2oF4m.exe
  133. O4 - HKLM\..\Run: [hiiibDD3onG48234A] C:\Windows\system32\xwwkkIVVrlOtx0u.exe
  134. O4 - HKLM\..\Run: [xeekkBrONyxAuv8234A] C:\Windows\system32\V9hhTTXqj.exe
  135. O4 - HKLM\..\Run: [ODDD2obbF4pG5QJ8234A] C:\Windows\system32\NIIBBtzPNyc.exe
  136. O4 - HKLM\..\Run: [IDD33onnF4aH5WJ8234A] C:\Windows\system32\aPP00yccS1.exe
  137. O4 - HKLM\..\Run: [AnnG4aamH8234A] C:\Windows\system32\QrrllONtxP0uS1.exe
  138. O4 - HKLM\..\Run: [o55aaQJJ6dK8234A] C:\Windows\system32\fNNyyxAA1uv2oFp.exe
  139. O4 - HKLM\..\Run: [UzzzP00ycA18234A] C:\Windows\system32\v8ggRRZqhYXwUVl.exe
  140. O4 - HKLM\..\Run: [WDDD33onF8234A] C:\Windows\system32\UUVVrllOBtxPyc.exe
  141. O4 - HKLM\..\Run: [GqqjYCekVrzNtA08234A] C:\Windows\system32\HHHH6ddWK7fL9g.exe
  142. O4 - HKLM\..\Run: [FyxxAA0uvS2iF3n8234A] C:\Windows\system32\qCCeekIIBrzN.exe
  143. O4 - HKLM\..\Run: [PjjjUCCkIzONx08234A] C:\Windows\system32\RppmmG5aQJ6dK9T.exe
  144. O4 - HKLM\..\Run: [f444pmmH5sQ7d8234A] C:\Windows\system32\cvvvD22on.exe
  145. O4 - HKLM\..\Run: [ISSS1iivD3oF4mH8234A] C:\Windows\system32\DYYCCwkUVrlOtP0.exe
  146. O4 - HKLM\..\Run: [OfLCkUVrOBtP0c18234A] C:\Windows\system32\ifff9TwciD3nGaH.exe
  147. O4 - HKLM\..\Run: [lssJLTqYCtxPcSa8234A] C:\Windows\system32\wrrrlOONtPu1iDo.exe
  148. O4 - HKLM\..\Run: [zS11iibD3onGH8234A] C:\Windows\system32\pjjjCCwkIVrONx0.exe
  149. O4 - HKLM\..\Run: [u555aQQJ6dWKfR98234A] C:\Windows\system32\sNyyxx11uvSob3p.exe
  150. O4 - HKLM\..\Run: [t999hhTXqj8234A] C:\Windows\system32\RbbFF3pmG5aJdW.exe
  151. O4 - HKLM\..\Run: [TIIIVrrzpWfLgqY8234A] C:\Windows\system32\oaaQQH6WK7fR9gX.exe
  152. O4 - HKLM\..\Run: [xSSS2ibn5aQ6fg8234A] C:\Windows\system32\fNNNyxxA0u.exe
  153. O4 - HKLM\..\Run: [bDDpnG44aQ6sK78234A] C:\Windows\system32\eXXqqjYCCeIVzNt.exe
  154. O4 - HKLM\..\Run: [xhhhYXXwtyAFQd98234A] C:\Windows\system32\laaHWfCBSn5JLgZ.exe
  155. O4 - HKLM\..\Run: [QiiDF44amH5sJ7E8234A] C:\Windows\system32\kWWfLL8gTZqVOty.exe
  156. O4 - HKLM\..\Run: [uPPP0ycAivD2n4m8234A] C:\Windows\system32\fWWJJ7dERYwUVlt.exe
  157. O4 - HKLM\..\Run: [fzzPPNycA1uv2oF8234A] C:\Windows\system32\x444pmmHJgRYwI.exe
  158. O4 - HKLM\..\Run: [PuubsdK8fRZhTB18234A] C:\Windows\system32\UoQZwUeIzNy.exe
  159. O4 - HKLM\..\Run: [K1uuS22b3JW8LTk8234A] C:\Windows\system32\UTTXXjzPNyx.exe
  160. O4 - HKLM\..\Run: [OxxA0uvS2ibF3n58234A] C:\Windows\system32\H55aW99hTXqUeBz.exe
  161. O4 - HKLM\..\Run: [lyccAAuvD2oF4m58234A] C:\Windows\system32\YVeelBttPN.exe
  162. O4 - HKLM\..\Run: [l00yycA1ivD2oFp8234A] C:\Windows\system32\TUUVVellOBtP.exe
  163. O4 - HKLM\..\Run: [SUUrrlOtxPyiDoF8234A] C:\Windows\system32\b77fELTqhYw.exe
  164. O4 - HKLM\..\Run: [lL99gTTXj8234A] C:\Windows\system32\nFF33pnG5aQHWKf.exe
  165. O4 - HKLM\..\Run: [JG55aaQJ68234A] C:\Windows\system32\dNNNyxA1uvS2bFp.exe
  166. O4 - HKLM\..\Run: [ETTXXwjjUC8234A] C:\Windows\system32\BGGG5ssQJ6dKfR9.exe
  167. O4 - HKLM\..\Run: [FjjjUCCelIBzNx18234A] C:\Windows\system32\ZssQQJ66dEKfR9h.exe
  168. O4 - HKLM\..\Run: [liivDD2onF4mHsJ8234A] C:\Windows\system32\OeellOBttP0yA.exe
  169. O4 - HKLM\..\Run: [RSS22ibF3pn5aH68234A] C:\Windows\system32\aVVVrzzONtx0u.exe
  170. O4 - HKLM\..\Run: [uCCeelIIBrzNyA18234A] C:\Windows\system32\F888fRRZ9Twj.exe
  171. O4 - HKLM\..\Run: [cPPNyccA1uv2oFp8234A] C:\Windows\system32\QRZZ99hYXwUVlIt.exe
  172. O4 - HKLM\..\Run: [YnnGG4sWJ7fL8TZ8234A] C:\Windows\system32\kNttPP0ucS1iD3.exe
  173. O4 - HKLM\..\Run: [RUUUkIBrrzNyx0v8234A] C:\Windows\system32\TddWK88RL9hq.exe
  174. O4 - HKLM\..\Run: [vmmm5ssQJ7EKgR98234A] C:\Windows\system32\rA11ivD2onF4.exe
  175. O4 - HKLM\..\Run: [annGGHH6sWJfE8234A] C:\Windows\system32\PVVrrlONxP0uSib.exe
  176. O4 - HKLM\..\Run: [IG44aQH6sWK7ELg8234A] C:\Windows\system32\OxA00ucS2ibDp.exe
  177. O4 - HKLM\..\Run: [RF33ppnG5aQ8234A] C:\Windows\system32\lkkIIBONNyA0vSi.exe
  178. O4 - HKLM\..\Run: [USS22obbF3m8234A] C:\Windows\system32\iwjjjUCelIBzPyA.exe
  179. O4 - HKLM\..\Run: [GD22obbpmG5QJ6E8234A] C:\Windows\system32\RjUUVellIBzNyAu.exe
  180. O4 - HKLM\..\Run: [hH555sWJ7dELgRq8234A] C:\Windows\system32\mrrllOBBtycSiDo.exe
  181. O4 - HKLM\..\Run: [xtttxA00ucSib3p8234A] C:\Windows\system32\R7ffRRL9gTXjYeI.exe
  182. O4 - HKLM\..\Run: [UUCellBBzPy8234A] C:\Windows\system32\vssQQJ66dKRZ9Tw.exe
  183. O4 - HKLM\..\Run: [UdddELL8gRZhXk8234A] C:\Windows\system32\aaaamH5sWJ.exe
  184. O4 - HKLM\..\Run: [I33ppnG4aQH6sKf8234A] C:\Windows\system32\gtxxxAucS2i.exe
  185. O4 - HKLM\..\Run: [xddWWK88fRLhTeB8234A] C:\Windows\system32\SoobbF33mG5aQ.exe
  186. O4 - HKLM\..\Run: [wFFppmH5sQ8234A] C:\Windows\system32\ullOOBtzz0ycAiD.exe
  187. O4 - HKLM\..\Run: [mUUVVrlOOtxP0c18234A] C:\Windows\system32\DggTTZqqhYw.exe
  188. O4 - HKLM\..\Run: [IqqjjYCee8234A] C:\Windows\system32\raaQQH66dWKfR9g.exe
  189. O4 - HKLM\..\Run: [KD22oonF4p8234A] C:\Windows\system32\fVVeelOBBzP0yAi.exe
  190. O4 - HKLM\..\Run: [XaaQQHH6sWKfE8234A] C:\Windows\system32\AzOONxxA0uc2iD3.exe
  191. O4 - HKLM\..\Run: [c66ddWK88fL98234A] C:\Windows\system32\W111uvvS2obFpm5.exe
  192. O4 - HKLM\..\Run: [XIIBBttzPNcA1vD8234A] C:\Windows\system32\dRZZZ9hYXwjU.exe
  193. O4 - HKLM\..\Run: [NVVrrlOOBtx0yS8234A] C:\Windows\system32\WZZqqhYCw.exe
  194. O4 - HKLM\..\Run: [aNNNtxxA0ucSi8234A] C:\Windows\system32\PfffRRL9gTXqYCk.exe
  195. O4 - HKLM\..\Run: [FGGG5aaQJ6dK8RL8234A] C:\Windows\system32\BBBBrzNyxA1uv2b.exe
  196. O4 - HKLM\..\Run: [ftxxPP0ycS1iD3n8234A] C:\Windows\system32\ZhhYYCwwkUVl.exe
  197. O4 - HKLM\..\Run: [mCCeekIVrO8234A] C:\Windows\system32\THHH6ddWK7RL9Xj.exe
  198. O4 - HKLM\..\Run: [VTTXXwjjUClIBzP8234A] C:\Windows\system32\Z66ddEK8fRZ9.exe
  199. O4 - HKLM\..\Run: [PSS11vDonF4am58234A] C:\Windows\system32\dOOBBtxx0.exe
  200. O4 - HKLM\..\Run: [hVVVrzzONtx0uS28234A] C:\Windows\system32\dggTTXqqjYCk.exe
  201. O4 - HKLM\..\Run: [KXXwwjUCCl8234A] C:\Windows\system32\f55sQJJ6dEKfR9h.exe
  202. O4 - HKLM\..\Run: [qgggRZZqhYXkUeO8234A] C:\Windows\system32\VHHH5ssWJ7dE.exe
  203. O4 - HKLM\..\Run: [UQQQH66sWK7EL9T8234A] C:\Windows\system32\eAAA0uuc2ib3pG.exe
  204. O4 - HKLM\..\Run: [EbFFF3pmG5aQ68234A] C:\Windows\system32\ejjjUCelIBrPN1v.exe
  205. O4 - HKLM\..\Run: [dy1DFH5sW8234A] C:\Windows\system32\DTTZZqhYYwkVrO.exe
  206. O4 - HKLM\..\Run: [lffRRL9gTXqjCkV8234A] C:\Windows\system32\wyyA0uv2FpGaHdK.exe
  207. O4 - HKLM\..\Run: [BddEEK8gRZ9hYwU8234A] C:\Windows\system32\QppmmH5sQJ7.exe
  208. O4 - HKLM\..\Run: [ErrrlOOttP0yS1v8234A] C:\Windows\system32\RLL88gTTZqhCwU.exe
  209. O4 - HKLM\..\Run: [xjYYCekkIVrONx8234A] C:\Windows\system32\ELLL9ggTXq.exe
  210. O4 - HKLM\..\Run: [EdEEKK8gRZ9XwjV8234A] C:\Windows\system32\R2oonnF4pmH5QJ.exe
  211. O4 - HKLM\..\Run: [DwwkkIVVrlOtx08234A] C:\Windows\system32\YggTTZqjYC.exe
  212. O4 - HKLM\..\Run: [LcccS2ibD3p4aQ8234A] C:\Windows\system32\gYYYCeekIVrzNtA.exe
  213. O4 - HKLM\..\Run: [BjUUUCelIBrzPyA8234A] C:\Windows\system32\QfffRZZ9hTX.exe
  214. O4 - HKLM\..\Run: [oycc1v2ob4pmsJ8234A] C:\Windows\system32\YHJ7dEZwjUeIt.exe
  215. O4 - HKLM\..\Run: [sonnFF4pmH5sJEK8234A] C:\Windows\system32\RUOBBtzzP0yA1vD.exe
  216. O4 - HKLM\..\Run: [Jam6sW7E8ThCkUO8234A] C:\Windows\system32\nwkVrlNtx0cSib3.exe
  217. O4 - HKLM\..\Run: [mn4H55sQJ7dgZ8234A] C:\Windows\system32\qkkUVVelOBzPyAi.exe
  218. O4 - HKLM\..\Run: [pD3onaHsW8234A] C:\Windows\system32\qEL9TqYkIlNxuSi.exe
  219. O4 - HKLM\..\Run: [noonG4ammHsW8234A] C:\Windows\system32\gkIIVVrlONtx0c1.exe
  220. O4 - HKLM\..\Run: [dSS22ibF3pnG5Q68234A] C:\Windows\system32\RIIIBrrzONyx0u.exe
  221. O4 - HKLM\..\Run: [OEEEKK8gRZ9hXwU8234A] C:\Windows\system32\smmmH55sQJ7.exe
  222. O4 - HKLM\..\Run: [nAAA0uucS2iD3nG8234A] C:\Windows\system32\AkkkIIVrzONt.exe
  223. O4 - HKLM\..\Run: [qIIIBtzzP8234A] C:\Windows\system32\cKKK8ggRZhYXwUe.exe
  224. O4 - HKLM\..\Run: [u6sWWK7fEL9g8234A] C:\Windows\system32\TGGG4aaQH.exe
  225. O4 - HKLM\..\Run: [ZibbFF3pnG5a8234A] C:\Windows\system32\YIIBBrzzONyA0vS.exe
  226. O4 - HKLM\..\Run: [UQQJJ6dEE8fTXj8234A] C:\Windows\system32\l111uuvD2obFpm5.exe
  227. O4 - HKLM\..\Run: [CTTZZqhhYwUrOtP8234A] C:\Windows\system32\EHH66sWWJ7fL8.exe
  228. O4 - HKLM\..\Run: [DTTTXqqjUCeIBzO8234A] C:\Windows\system32\FaaQQ6WKfRL9.exe
  229. O4 - HKLM\..\Run: [X888gRRZ9hYwj8234A] C:\Windows\system32\rQQQJ77dE.exe
  230. O4 - HKLM\..\Run: [s444ammH6sW7fL88234A] C:\Windows\system32\UttxxP00uc1ib3o.exe
  231. O4 - HKLM\..\Run: [txxxA00ucS2iD3n8234A] C:\Windows\system32\S999hTTXqj.exe
  232. O4 - HKLM\..\Run: [RZZ99hTTXwUCeIB8234A] C:\Windows\system32\gpppmGG5sQJ6EKf.exe
  233. O4 - HKLM\..\Run: [SHHH66sWK78234A] C:\Windows\system32\i00uucS22iD3pGa.exe
  234. O4 - HKLM\..\Run: [ERRRZZ9hYXwjVeI8234A] C:\Windows\system32\aHHH5ssQJ7dE8.exe
  235. O4 - HKLM\..\Run: [UsssWKK7fELgTq8234A] C:\Windows\system32\v000uccbD3pn4aH.exe
  236. O4 - HKLM\..\Run: [RFF33pmGG5QJ6W88234A] C:\Windows\system32\aNNyyxA1uvS2o.exe
  237. O4 - HKLM\..\Run: [YELL88gTZqhYCkV8234A] C:\Windows\system32\omHH66sWJ7f.exe
  238. O4 - HKLM\..\Run: [tddWWK77fR8234A] C:\Windows\system32\GSSS2iibF3pn5aH.exe
  239. O4 - HKLM\..\Run: [ahYYYXwkUVelOtP8234A] C:\Windows\system32\KWWWJ7dEL8gRq.exe
  240. O4 - HKLM\..\Run: [qbFF33pnG5aQ6dK8234A] C:\Windows\system32\kzzzONNyxA0vSi.exe
  241. O4 - HKLM\..\Run: [G00yycA11iD2oF48234A] C:\Windows\system32\BRRZZXXwkUVlOBz.exe
  242. O4 - HKLM\..\Run: [OddWWK7fRL9gTqY8234A] C:\Windows\system32\spppnGG5aQH.exe
  243. O4 - HKLM\..\Run: [jUVVeelOBtzP08234A] C:\Windows\system32\e77ddELL8gRqhXw.exe
  244. O4 - HKLM\..\Run: [KyxxAA0uvS2iF3n8234A] C:\Windows\system32\oqqqjUUCekIBzO.exe
  245. O4 - HKLM\..\Run: [FxxxP00ycS1vDon8234A] C:\Windows\system32\GqqqhYYCwkUrB.exe
  246. O4 - HKLM\..\Run: [cGGG55aQJ6dW8fL8234A] C:\Windows\system32\luuvvS2oob3p.exe
  247. O4 - HKLM\..\Run: [vBBBttxP0ycSiv38234A] C:\Windows\system32\ogggTZZqhYwUVl.exe
  248. O4 - HKLM\..\Run: [rBBBONNyxAuv2iF8234A] C:\Windows\system32\tRRLL9hTXjUCk.exe
  249. O4 - HKLM\..\Run: [atzzzP0cA1iDosJ8234A] C:\Windows\system32\sZZZqhYYXwkVlO.exe
  250. O4 - HKLM\..\Run: [KooonG44aH8234A] C:\Windows\system32\z9TqCIrOxPucSiD.exe
  251. O4 - HKLM\..\Run: [J666dWWK8fRLhTq8234A] C:\Windows\system32\wyyxx1uSbF3pm5Q.exe
  252. O4 - HKLM\..\Run: [qDDD2b4pmGsJd8f8234A] C:\Windows\system32\pXwwjUUVeItzyA1.exe
  253. O4 - HKLM\..\Run: [IZZZqqhYCwkV8234A] C:\Windows\system32\PSiDn4HsJf8.exe
  254. O4 - HKLM\..\Run: [hONNtxxA0ucSib38234A] C:\Windows\system32\nTTTXXqjUCek.exe
  255. O4 - HKLM\..\Run: [OtttxPP0ycS1vDo8234A] C:\Windows\system32\xTZZqqhYCwkUrl.exe
  256. O4 - HKLM\..\Run: [bEELL8ggTZqYCk8234A] C:\Windows\system32\jHHH6ssWJ7.exe
  257. O4 - HKLM\..\Run: [JTTZZqjYC8234A] C:\Windows\system32\dGGG4aaQH6sW7fL.exe
  258. O4 - HKLM\..\Run: [lWKKK8fRL9IBrOy8234A] C:\Windows\system32\CmmmG55aQJ6.exe
  259. O4 - HKLM\..\Run: [ZZ999hYXwjUVeIt8234A] C:\Windows\system32\TpppmHH5sQJdE8g.exe
  260. O4 - HKLM\..\Run: [TvDD34adE8234A] C:\Windows\system32\AkkkUVVrlOBxP0c.exe
  261. O4 - HKLM\..\Run: [d88gTZqYCwkU8234A] C:\Windows\system32\l3oonnG4amH6WJf.exe
  262. O4 - HKLM\..\Run: [B33nF44JdhXtP8234A] C:\Windows\system32\jTZZZqhYCwkUr.exe
  263. O4 - HKLM\..\Run: [aVellOBBtz0vnFm8234A] C:\Windows\system32\kP00uucS1ibDon.exe
  264. O4 - HKLM\..\Run: [KHH5JKgXjVPyc1u8234A] C:\Windows\system32\zmH55WdEXwVlAD4.exe
  265. O4 - HKLM\..\Run: [kkUUVVrlOBt8234A] C:\Windows\system32\vssWWJ77fE8gTqC.exe
  266. O4 - HKLM\..\Run: [pggTTZqqh8234A] C:\Windows\system32\zbbDD3oonG4fL.exe
  267. O4 - HKLM\..\Run: [v3oonnF4amH5W8234A] C:\Windows\system32\illOOBttxP0cSiv.exe
  268. O4 - HKLM\..\Run: [wHHH5ssQJdE8gZ98234A] C:\Windows\system32\uP00yycA1iv2oFp.exe
  269. O4 - HKLM\..\Run: [pDpfRZwUerzNx1u8234A] C:\Windows\system32\KppsJ79UUelNc.exe
  270. O4 - HKLM\..\Run: [BRqhXwwklOtzA8234A] C:\Windows\system32\WWWWJ7EL8.exe
  271. O4 - HKLM\..\Run: [WiibbD3pnG4a8234A] C:\Windows\system32\IekkIIVrzONxAuc.exe
  272. O4 - HKLM\..\Run: [KzzzPNNy12opG688234A] C:\Windows\system32\XmmmG5ss68R9hXw.exe
  273. O4 - HKLM\..\Run: [F0yyccAiiv2on4m8234A] C:\Windows\system32\fgRRZZqhwkVlOtz.exe
  274. O4 - HKLM\..\Run: [IoonFF4amHsW8234A] C:\Windows\system32\FrrlOOBtxPycSiD.exe
  275. O4 - HKLM\..\Run: [FLL9ggqjjCkVrON8234A] C:\Windows\system32\GnnG5aaQH6WK7.exe
  276. O4 - HKLM\..\Run: [K8ffRZZ9hTXwUCl8234A] C:\Windows\system32\x55ssQJJ6dE.exe
  277. O4 - HKLM\..\Run: [HlOOBtxxP0cS1v38234A] C:\Windows\system32\igTTZZqhYCwkV.exe
  278. O4 - HKLM\..\Run: [A22iibF3pnGa8234A] C:\Windows\system32\pAAA0uuvS.exe
  279. O4 - HKLM\..\Run: [IUUCeelrz8234A] C:\Windows\system32\rJJ6ddEK8fRZhTw.exe
  280. O4 - HKLM\..\Run: [pRZZqqhYXkUelBt8234A] C:\Windows\system32\TFF44amH5sWJdL8.exe
  281. O4 - HKLM\..\Run: [xOOONttxA0cSibp8234A] C:\Windows\system32\yLL99gTXqjYekV.exe
  282. O4 - HKLM\..\Run: [CjjjUCClIBzPNx8234A] C:\Windows\system32\cssQQJ6ddE8fZhT.exe
  283. O4 - HKLM\..\Run: [DcccA11uvD2bFp8234A] C:\Windows\system32\oYYXXwjUVelIBzN.exe
  284. O4 - HKLM\..\Run: [k11vvD3onF48234A] C:\Windows\system32\iCCCwkkUVrlBtP0.exe
  285. O4 - HKLM\..\Run: [sXXXqjYCCkI8234A] C:\Windows\system32\qnnnG55aQ6WK7R9.exe
  286. O4 - HKLM\..\Run: [r888gRRZ9hYwjVe8234A] C:\Windows\system32\x44ppmHJ7dE.exe
  287. O4 - HKLM\..\Run: [t11iivD33nF4m8234A] C:\Windows\system32\VtttxP0yc.exe
  288. O4 - HKLM\..\Run: [Q44aaQH66sK7fL8234A] C:\Windows\system32\ziibbD3pnG.exe
  289. O4 - HKLM\..\Run: [XmmGG5aaQJ8234A] C:\Windows\system32\PrrzzPNNyx1uv2.exe
  290. O4 - HKLM\..\Run: [YCeekkIBrz8234A] C:\Windows\system32\kddWWK88fRLhTqj.exe
  291. O4 - HKLM\..\Run: [UGGG5ssQ6E89hUe8234A] C:\Windows\system32\eDD22onF4pmHJcF.exe
  292. O4 - HKLM\..\Run: [TUUUVVelI8234A] C:\Windows\system32\qJJ77dEKK8RZ9Yw.exe
  293. O4 - HKLM\..\Run: [iTTZqhYYCwkVrOB8234A] C:\Windows\system32\K444ammH6sWJfE8.exe
  294. O4 - HKLM\..\Run: [XRRL9hTXqj8234A] C:\Windows\system32\AobbF3pmG5QJdW8.exe
  295. O4 - HKLM\..\Run: [cOOBBtzzP0yA1vD8234A] C:\Windows\system32\SRRZqYkUVe.exe
  296. O4 - HKLM\..\Run: [XDDD3pnnG48234A] C:\Windows\system32\jVVVrzzNtxA0uSi.exe
  297. O4 - HKLM\..\Run: [HdddEKK8fR9hTwU8234A] C:\Windows\system32\PyccAA1uvD2oF4m.exe
  298. O4 - HKLM\..\Run: [LgTTZZqhYCwkrlB8234A] C:\Windows\system32\Z44amH6sWfEL.exe
  299. O4 - HKLM\..\Run: [Z55aaQH6d8234A] C:\Windows\system32\OONNyyAuvS2bn.exe
  300. O4 - HKLM\..\Run: [UJJ77dEK8gR8234A] C:\Windows\system32\vcAAivD2onF4mHs.exe
  301. O4 - HKLM\..\Run: [cccSS1ibD3nG8234A] C:\Windows\system32\YTTZZYCwkIrONx0.exe
  302. O4 - HKLM\..\Run: [aqqqjUUCeIBzO8234A] C:\Windows\system32\AmG55aQJ6WK8RLh.exe
  303. O4 - HKLM\..\Run: [ZOBBtzPP0yA1v2o8234A] C:\Windows\system32\JqhhYYXwkUVl.exe
  304. O4 - HKLM\..\Run: [NHHHssWJ7fE8234A] C:\Windows\system32\GxxxP0uS1ib3oG4.exe
  305. O4 - HKLM\..\Run: [FxxAuvS2obF38234A] C:\Windows\system32\ZhTTXwjjUCeIBzP.exe
  306. O4 - HKLM\..\Run: [JvvD33onF4aH5W78234A] C:\Windows\system32\FBBBtxPPy.exe
  307. O4 - HKLM\..\Run: [jCCeeIVrzNx0uS28234A] C:\Windows\system32\S666dWWK7fR9gTq.exe
  308. O4 - HKLM\..\Run: [qUCCeelIrPNx8234A] C:\Windows\system32\nhhhTXXwj.exe
  309. O4 - HKLM\..\Run: [TellOBBtz8234A] C:\Windows\system32\knnF4asWJ7dL8Rq.exe
  310. O4 - HKLM\..\Run: [ZuuccS2iiD3pG4Q8234A] C:\Windows\system32\vrzzONNxA0.exe
  311. O4 - HKLM\..\Run: [SzzPNNyxA1uv2bF8234A] C:\Windows\system32\bZZ99hTwjUCeIB.exe
  312. O4 - HKLM\..\Run: [qvvvD33onF4m8234A] C:\Windows\system32\p000yycS1.exe
  313. O4 - HKLM\..\Run: [lssKK7fEgTZqYCk8234A] C:\Windows\system32\hDD3naQH6.exe
  314. O4 - HKLM\..\Run: [Y4ppmGG5sQ6dK8R8234A] C:\Windows\system32\UPPNNycA1uvDob.exe
  315. O4 - HKLM\..\Run: [YPPP00ycS18234A] C:\Windows\system32\wZZqqhYYCwkVrOB.exe
  316. O4 - HKLM\..\Run: [kmmHH6sWW7f8234A] C:\Windows\system32\DPP0uucS1ibDon4.exe
  317. O4 - HKLM\..\Run: [x99ggTXXqjYekV8234A] C:\Windows\system32\aFF3nG55aQHdW7f.exe
  318. O4 - HKLM\..\Run: [GpppmGG5sQJdE8f8234A] C:\Windows\system32\TBBBtzPPNc1uD2b.exe
  319. O4 - HKLM\..\Run: [wG44aamH6sWfE8g8234A] C:\Windows\system32\RS11iibD3on.exe
  320. O4 - HKLM\..\Run: [oibbFF3pnGaQ6dK8234A] C:\Windows\system32\ZIIIBrrzONyA0uS.exe
  321. O4 - HKLM\..\Run: [wcAA1uvD2obFpGs8234A] C:\Windows\system32\QZ99hhYXwjVlIzP.exe
  322. O4 - HKLM\..\Run: [i666sWJJ7L8234A] C:\Windows\system32\d00uucS11iD3nGa.exe
  323. O4 - HKLM\..\Run: [gddWWK88fR98234A] C:\Windows\system32\FAAA1uvobF3mGaJ.exe
  324. O4 - HKLM\..\Run: [S55sWd8ggZqhXwU8234A] C:\Windows\system32\nkkUUOxxP0Siv3m.exe
  325. O4 - HKLM\..\Run: [w9gTXqqjYC8234A] C:\Windows\system32\SnnnG55aQH6dK7R.exe
  326. O4 - HKLM\..\Run: [mbbF4ppmGs8234A] C:\Windows\system32\heelIBtzPNyA1v2.exe
  327. O4 - HKLM\..\Run: [Zyy1ivD2o4pm8234A] C:\Windows\system32\nL88ggRZqYXkVeB.exe
  328. O4 - HKLM\..\Run: [nnnGG4aQH6sK7EL8234A] C:\Windows\system32\c00uucS2ibD3.exe
  329. O4 - HKLM\..\Run: [QXwwjjUeBzPxAu8234A] C:\Windows\system32\n2bbF4GsQJE8fZh.exe
  330. O4 - HKLM\..\Run: [zWWJ77fEL8ZqYwU8234A] C:\Windows\system32\xiibbD3ooG4aH6.exe
  331. O4 - HKLM\..\Run: [B77RL9TXjCIVrON8234A] C:\Windows\system32\ouvvS22ibFpn5HW.exe
  332. O4 - HKLM\..\Run: [iuuuvD22obFpGsJ8234A] C:\Windows\system32\w999hYjUeIBzPyc.exe
  333. O4 - HKLM\..\Run: [l6sWWJ7fEL8g8234A] C:\Windows\system32\KxxxP0uucSib3na.exe
  334. O4 - HKLM\..\Run: [WyyyxAA1uvSo8234A] C:\Windows\system32\AfRRZZ9hwUCeIrz.exe
  335. O4 - HKLM\..\Run: [FVVVellBBPciD2n8234A] C:\Windows\system32\yL88gqhYXwk.exe
  336. O4 - HKLM\..\Run: [dsWWKK7fEL9gZqC8234A] C:\Windows\system32\pD33ppnG4aQ6.exe
  337. O4 - HKLM\..\Run: [NlIBzPPNxA1vS28234A] C:\Windows\system32\E5ssQQJ6dEK8R9h.exe
  338. O4 - HKLM\..\Run: [j44aamHH5s8234A] C:\Windows\system32\StttxPP0ycSiv3o.exe
  339. O4 - HKLM\..\Run: [hKK77fRLLgTXqYe8234A] C:\Windows\system32\pA00uS2ibF3nGaH.exe
  340. O4 - HKLM\..\Run: [BhYYXXwjUVelBtP8234A] C:\Windows\system32\hsQQJ7EK8gRZ.exe
  341. O4 - HKLM\..\Run: [c888gTZZqYCw8234A] C:\Windows\system32\YiiibD33onGm6sJ.exe
  342. O4 - HKLM\..\Run: [B66dWWK7fRL9TXj8234A] C:\Windows\system32\TiFF3ppnG5aQ.exe
  343. O4 - HKLM\..\Run: [S55sQQJ6EK8RZ8234A] C:\Windows\system32\YBBzzNycAuD2oFp.exe
  344. O4 - HKLM\..\Run: [EjjYCCwkIVrONx08234A] C:\Windows\system32\BQQsWK77fE9gT.exe
  345. O4 - HKLM\..\Run: [twwCeeIIBPNyA1v8234A] C:\Windows\system32\GQQJ6dEKKRZhT.exe
  346. O4 - HKLM\..\Run: [RyyycSS1ivDon48234A] C:\Windows\system32\PqqhhCwkUVrlBtP.exe
  347. O4 - HKLM\..\Run: [BrrrzOONyx8234A] C:\Windows\system32\FK88fRRL9hTXjUe.exe
  348. O4 - HKLM\..\Run: [g9hhYXXwjUelIt8234A] C:\Windows\system32\PpppmH5ssJ7dKgR.exe
  349. O4 - HKLM\..\Run: [GttxuccS1iDn4m68234A] C:\Windows\system32\HZqqjjYCwkIVlO.exe
  350. O4 - HKLM\..\Run: [ahhTXqqjUC8234A] C:\Windows\system32\hppmmG55aQ6dK8R.exe
  351. O4 - HKLM\..\Run: [fkUUUVelOBt0y8234A] C:\Windows\system32\cZqqhhYXw.exe
  352. O4 - HKLM\..\Run: [RfffELL9gTZjYwI8234A] C:\Windows\system32\OibbD33pnG4QHsK.exe
  353. O4 - HKLM\..\Run: [pddEEK88fRZhTwj8234A] C:\Windows\system32\guuuvDD2ob4pG5Q.exe
  354. O4 - HKLM\..\Run: [OSS11ivDD3nF4m58234A] C:\Windows\system32\FCCCwwkUVlOBxPy.exe
  355. O4 - HKLM\..\Run: [lNNyyxA1uS2b8234A] C:\Windows\system32\F99hhTXwjUCeIBz.exe
  356. O4 - HKLM\..\Run: [WCwkkUVlOtxPc1v8234A] C:\Windows\system32\EWWWJ7ffE8gqh.exe
  357. O4 - HKLM\..\Run: [n3ppnGG5aH6dW7R8234A] C:\Windows\system32\cxxAA0uvvSib.exe
  358. O4 - HKLM\..\Run: [t222onnF4pm5s7E8234A] C:\Windows\system32\kPPP0yccA1v.exe
  359. O4 - HKLM\..\Run: [T7ffELL9g8234A] C:\Windows\system32\qiibbD33pnGaH6W.exe
  360. O4 - HKLM\..\Run: [GCeellIBrzPNxAu8234A] C:\Windows\system32\a6dddEK8fRZ9TXj.exe
  361. O4 - HKLM\..\Run: [ZggRRZ9hYXwUVlB8234A] C:\Windows\system32\NoonnF44pH5sJ7E.exe
  362. O4 - HKLM\..\Run: [lammH5dEL8ZqYwV8234A] C:\Windows\system32\drrllOBtx0yS13n.exe
  363. O4 - HKLM\..\Run: [DttxxP0ycS18234A] C:\Windows\system32\VfL8gTTqhYCwkVl.exe
  364. O4 - HKLM\..\Run: [zjUUCCekIBrzNxA8234A] C:\Windows\system32\S22oobF3pm5aJdK.exe
  365. O4 - HKLM\..\Run: [m1iivD22oF8234A] C:\Windows\system32\TXXXwkUVelOtz0c.exe
  366. O4 - HKLM\..\Run: [ktxxPP0ucSibDon8234A] C:\Windows\system32\b999gZZqjYCwIrl.exe
  367. O4 - HKLM\..\Run: [zQQJJ6ddWK8RL8234A] C:\Windows\system32\W33ppmG5a.exe
  368. O4 - HKLM\..\Run: [chhhYXXjUeBzNc18234A] C:\Windows\system32\yUVVeelOBtzyAv2.exe
  369. O4 - HKLM\..\Run: [CttxPP0uS1DnGaW8234A] C:\Windows\system32\e9ggTZjYCwkVrO.exe
  370. O4 - HKLM\..\Run: [u33ppmG5aQJ6W8R8234A] C:\Windows\system32\UIIrrzPNyxA1v2b.exe
  371. O4 - HKLM\..\Run: [Rmm55sWJJdELgRq8234A] C:\Windows\system32\rBttxP0ycSiv3oF.exe
  372. O4 - HKLM\..\Run: [g00uucSSibD3nGa8234A] C:\Windows\system32\YCCCekkIVrzNt.exe
  373. O4 - HKLM\..\Run: [EJJJ7dEEKgRZhYw8234A] C:\Windows\system32\p22ooFF4pmHs.exe
  374. O4 - HKLM\..\Run: [LQQQH6ssWKfELgZ8234A] C:\Windows\system32\BxxAA0ucS2ib3pG.exe
  375. O4 - HKLM\..\Run: [IyyccA1uvD2b4pG8234A] C:\Windows\system32\iRRZ99hYXwUVeIt.exe
  376. O4 - HKLM\..\Run: [fttxxP0ucSiD3n48234A] C:\Windows\system32\QCwwkkIVrlO.exe
  377. O4 - HKLM\..\Run: [eLL99hTXqjCeIBO8234A] C:\Windows\system32\zG55aQJ6WK.exe
  378. O4 - HKLM\..\Run: [aqqhYXXwUVeOBz08234A] C:\Windows\system32\NF44amH5sWJ7ELg.exe
  379. O4 - HKLM\..\Run: [HsWWK77fL9gZqYC8234A] C:\Windows\system32\ZfRRLgTqjYCkIrO.exe
  380. O4 - HKLM\..\Run: [G999hTXwwUCeI8234A] C:\Windows\system32\IdEEK88RR.exe
  381. O4 - HKLM\..\Run: [x88TZqYCwUV8234A] C:\Windows\system32\Q333onG4amH6WJf.exe
  382. O4 - HKLM\..\Run: [jXXXqjjYCe8234A] C:\Windows\system32\cGGG5aQH6dW7fL9.exe
  383. O4 - HKLM\..\Run: [bwjIBttzPyc8234A] C:\Windows\system32\LssQQJ7ddE8gZ9Y.exe
  384. O4 - HKLM\..\Run: [j4aaamH6sW8234A] C:\Windows\system32\uOONNtxxP0cSiDn.exe
  385. O4 - HKLM\..\Run: [vllIIBtzPNyc18234A] C:\Windows\system32\YQQJJ78gRZ9YwjV.exe
  386. O4 - HKLM\..\Run: [clllOBBtx8234A] C:\Windows\system32\WEELL8ggTqhYCkV.exe
  387. O4 - HKLM\..\Run: [GAAA0uvS2ibFp8234A] C:\Windows\system32\ZTTXXqjUCekBrOy.exe
  388. O4 - HKLM\..\Run: [lgggRZZ9hYwj8234A] C:\Windows\system32\diiivD2onF4mHsJ.exe
  389. O4 - HKLM\..\Run: [AYYCCwkkIVlONx08234A] C:\Windows\system32\N33pnG4aQH6sK7E.exe
  390. O4 - HKLM\..\Run: [BGdK9TqjUCkIr8234A] C:\Windows\system32\lsssdKZXUeIzNAu.exe
  391. O4 - HKLM\..\Run: [n88ggRZqhYXwkVl8234A] C:\Windows\system32\mF44aamH5sW7d.exe
  392. O4 - HKLM\..\Run: [c3ppnn5aQHdW8234A] C:\Windows\system32\ZSSS2iibF.exe
  393. O4 - HKLM\..\Run: [TeelItzPNyc18234A] C:\Windows\system32\VFFsQQdK89XU.exe
  394. O4 - HKLM\..\Run: [G11ibD33nGmfLgZ8234A] C:\Windows\system32\OZjjYwkIVrlNt0c.exe
  395. O4 - HKLM\..\Run: [crrrzOyA08234A] C:\Windows\system32\VobbmG5a6dW8fLh.exe
  396. O4 - HKLM\..\Run: [jDD3oonF4am5sJd8234A] C:\Windows\system32\TqqqhYCCwUrlBPy.exe
  397. O4 - HKLM\..\Run: [xxxAA0uvS2i8234A] C:\Windows\system32\gffRR99hXqjUek.exe
  398. O4 - HKLM\..\Run: [bvDDD2onF4mQgw8234A] C:\Windows\system32\IYYYXwwUVelBtP0.exe
  399. O4 - HKLM\..\Run: [EkkIIVrlONtxPuS8234A] C:\Windows\system32\spnnG4aaQHsW7E9.exe
  400. O4 - HKLM\..\Run: [JxxAA1uvS2ob3pG8234A] C:\Windows\system32\wRZZwIBzPN.exe
  401. O4 - HKLM\..\Run: [emmHH5sWJ7EL8R8234A] C:\Windows\system32\CrrllOBttP0yS1v.exe
  402. O4 - HKLM\..\Run: [DAA00ucS2ibDpn48234A] C:\Windows\system32\zCeekIIVrz.exe
  403. O4 - HKLM\..\Run: [INNyyc1uvDob4mG8234A] C:\Windows\system32\TjjjUUVel.exe
  404. O4 - HKLM\..\Run: [cBBtxPP0y8234A] C:\Windows\system32\CfffELL8gTZhYw.exe
  405. O4 - HKLM\..\Run: [ckIBBrzONyx0uSF8234A] C:\Windows\system32\JWKK88fRL9hT.exe
  406. O4 - HKLM\..\Run: [v8gggRZqhY8234A] C:\Windows\system32\onnnF44amH5WJ7E.exe
  407. O4 - HKLM\..\Run: [TWWKK7fE9gZqYkI8234A] C:\Windows\system32\UVrzzONtxA0cSiD.exe
  408. O4 - HKLM\..\Run: [jIIBrrzPNx1vS8234A] C:\Windows\system32\XsssQJJ6dEKfR9h.exe
  409. O4 - HKLM\..\Run: [NDD22nnF4pH5QJd8234A] C:\Windows\system32\LYYXXwkkUeOBz0A.exe
  410. O4 - HKLM\..\Run: [k44aQHHsWK7fL9T8234A] C:\Windows\system32\bNNtxAA0uc2.exe
  411. O4 - HKLM\..\Run: [vNNyxAAuvS2oFpm8234A] C:\Windows\system32\eobF4ssQd9TXwUe.exe
  412. O4 - HKLM\..\Run: [ZccSS1ivv8234A] C:\Windows\system32\zZZZqYYCwUVrO.exe
  413. O4 - HKLM\..\Run: [PffEE9gTZqYCwIV8234A] C:\Windows\system32\DggTTXqqjYCkIrN.exe
  414. O4 - HKLM\..\Run: [RCeeBBrzPNyA13J8234A] C:\Windows\system32\zQQQJ66dK8fRZ.exe
  415. O4 - HKLM\..\Run: [eYYXwwkUVelOtz08234A] C:\Windows\system32\GS11ivonF4m5W7d.exe
  416. O4 - HKLM\..\Run: [mekkIIBrzNyAbaH8234A] C:\Windows\system32\OaQQJJ6dWK8fL9X.exe
  417. O4 - HKLM\..\Run: [X2ooFF4pmHER98234A] C:\Windows\system32\FyccAA1vD.exe
  418. O4 - HKLM\..\Run: [xVVrlOOxPub3oG8234A] C:\Windows\system32\ZHH66sWWK7EL9Tq.exe
  419. O4 - HKLM\..\Run: [ZJ66ddWK8fL9TXj8234A] C:\Windows\system32\zyyyxA1uuS2oF3m.exe
  420. O4 - HKLM\..\Run: [EggRZYYwUVlyc1v8234A] C:\Windows\system32\ZaammH5sWJ7E.exe
  421. O4 - HKLM\..\Run: [u2ibb3ppnGaQ6sK8234A] C:\Windows\system32\t999gTTYIVONx0c.exe
  422. O4 - HKLM\..\Run: [kvvDD2oobFpG5Q68234A] C:\Windows\system32\OlllIBBtzP.exe
  423. O4 - HKLM\..\Run: [a9hYjeNFmG5QdKf8234A] C:\Windows\system32\qWWW7dLgZhYOyv2.exe
  424. O4 - HKLM\..\Run: [pUVelOOBtPyc1vD8234A] C:\Windows\system32\cwwkkUVrlOBx0SF.exe
  425. O4 - HKLM\..\Run: [JnGG44aQH6sW7fL8234A] C:\Windows\system32\AkIIVrzONtxAuc2.exe
  426. O4 - HKLM\..\Run: [zvvvD2obF4mGsQ68234A] C:\Windows\system32\cYYXXwjUUVlBtPN.exe
  427. O4 - HKLM\..\Run: [RssWW7fE8gTZhC8234A] C:\Windows\system32\UIIIVrrx1ibD3n.exe
  428. O4 - HKLM\..\Run: [IQQHH6dWW8234A] C:\Windows\system32\xCCekyuSS2bFpn5.exe
  429. O4 - HKLM\..\Run: [a11iiDD2onFpm5s8234A] C:\Windows\system32\bOOOtzzP0yc.exe
  430. O4 - HKLM\..\Run: [c333onG4amH6WJf8234A] C:\Windows\system32\JrrrllNttP0uc1b.exe
  431. O4 - HKLM\..\Run: [fuvvS2ibpnGaH6W8234A] C:\Windows\system32\koF3GG5QdWK8L9.exe
  432. O4 - HKLM\..\Run: [yzPPPNycA1uvDo8234A] C:\Windows\system32\FsQQ7dK8g9YXwUe.exe
  433. O4 - HKLM\..\Run: [gEEL8gTZqCwkVr8234A] C:\Windows\system32\tiiibDD3onGam6s.exe
  434. O4 - HKLM\..\Run: [dAA00uvS2iF38234A] C:\Windows\system32\aK88fRLXqjeIr.exe
  435. O4 - HKLM\..\Run: [roobF4pmmGKf8234A] C:\Windows\system32\nlllIBttzPycAuD.exe
  436. O4 - HKLM\..\Run: [eG44aHsWJ7fLThC8234A] C:\Windows\system32\EIrrlNtxPuSbD.exe
  437. O4 - HKLM\..\Run: [CeuuvS2iFucSbDp8234A] C:\Windows\system32\BbF3ppmG5QJ68RX.exe
  438. O4 - HKLM\..\Run: [EhXUeIrOy0v2bpG8234A] C:\Windows\system32\KClBPyAu2b3mQ.exe
  439. O4 - HKLM\..\Run: [gqqjjUCeBrz8234A] C:\Windows\system32\x55aQJJ6dWKfR9T.exe
  440. O4 - HKLM\..\Run: [LzzzP00ycA1vDoF8234A] C:\Windows\system32\HXXwwkUVVlO.exe
  441. O4 - HKLM\..\Run: [JWWKK7fEL9gTqjC8234A] C:\Windows\system32\CcSS2iib3pnG4Q6.exe
  442. O4 - HKLM\..\Run: [smmmG55sQJ68234A] C:\Windows\system32\jzzzPNccA1vD2b4.exe
  443. O4 - HKLM\..\Run: [jVrrllONtP1b38234A] C:\Windows\system32\S77fELL9gTZqYCk.exe
  444. O4 - HKLM\..\Run: [m66dK8fRL9hXj8234A] C:\Windows\system32\hAAAuvvS2ob3pGQ.exe
  445. O4 - HKLM\..\Run: [Z44aamH6s8234A] C:\Windows\system32\htttxPP0ucS1b3n.exe
  446. O4 - HKLM\..\Run: [jXqqjjUCekIBrOy8234A] C:\Windows\system32\T3G5aQQJ6dW8RLh.exe
  447. O4 - HKLM\..\Run: [rUUUVelBtzPyc1i8234A] C:\Windows\system32\tddELL8gRZhYw.exe
  448. O4 - HKLM\..\Run: [hgggTZZCkIrl8234A] C:\Windows\system32\IuuucSDpn4aH.exe
  449. O4 - HKLM\..\Run: [rfffRLTjCkrOx0S8234A] C:\Windows\system32\TlrzPNyxA1SoF3m.exe
  450. O4 - HKLM\..\Run: [kBttzPPNyA18234A] C:\Windows\system32\U11iv22oF4pH5Q7.exe
  451. O4 - HKLM\..\Run: [SCCwwkVVrlNtx0c8234A] C:\Windows\system32\saaaQssWK7E.exe
  452. O4 - HKLM\..\Run: [QQJJ66dWK8fR9Tq8234A] C:\Windows\system32\TEEK8ffRZ9hTwUe.exe
  453. O4 - HKLM\..\Run: [UkkkUVelOzPyivo8234A] C:\Windows\system32\B7ELL8gqhY.exe
  454. O4 - HKLM\..\Run: [BD33ppnG4aQH68234A] C:\Windows\system32\iuuucSS2ib.exe
  455. O4 - HKLM\..\Run: [HFF4pmH5sQ7dKg8234A] C:\Windows\system32\qVeelOBtzyc1iDo.exe
  456. O4 - HKLM\..\Run: [sNtxxP0ccSib3oG8234A] C:\Windows\system32\qEELLggTZjYCkIr.exe
  457. O4 - HKLM\..\Run: [BAA11vS22bF3pGa8234A] C:\Windows\system32\b9hhTXwjUClIBzN.exe
  458. O4 - HKLM\..\Run: [f111i2onF4pH5Q78234A] C:\Windows\system32\WggRRZhhXwUOtPy.exe
  459. O4 - HKLM\..\Run: [oD33oonG46sW788234A] C:\Windows\system32\w0uuccS1ib.exe
  460. O4 - HKLM\..\Run: [OKK8RRhTXUekBzO8234A] C:\Windows\system32\L111uvS2ob3.exe
  461. O4 - HKLM\..\Run: [JsssQ7dEKgZYXjV8234A] C:\Windows\system32\yOBtzP0y1vDoFpm.exe
  462. O4 - HKLM\..\Run: [AZZZqqYCIVlONPc8234A] C:\Windows\system32\JGaQH66sWKLg.exe
  463. O4 - HKLM\..\Run: [qIzA0uSQH6sWELg8234A] C:\Windows\system32\O2p5W8qCBx0vi3n.exe
  464. O4 - HKLM\..\Run: [NccAA1vvD24mGsQ8234A] C:\Windows\system32\F9hhYYXwjUVe.exe
  465. O4 - HKLM\..\Run: [CEIIVrlOONxPuSa8234A] C:\Windows\system32\zzzzONNxxAucSi3.exe
  466. O4 - HKLM\..\Run: [XBBrzzONxA8234A] C:\Windows\system32\SooobF3m5QdKfLh.exe
  467. O4 - HKLM\..\Run: [lUUVVelIPNyAu2b8234A] C:\Windows\system32\XkkUUVellBAiDH7.exe
  468. O4 - HKLM\..\Run: [qnnnG44amH6WJfE8234A] C:\Windows\system32\eZZqqjYYCwkVrt.exe
  469. O4 - HKLM\..\Run: [ORL9TXqqjYCkVNA8234A] C:\Windows\system32\TKK88fRL9hTqUeN.exe
  470. O4 - HKLM\..\Run: [mwwwjUUCelIrPNx8234A] C:\Windows\system32\OppmsJJ6dEKfR9T.exe
  471. O4 - HKLM\..\Run: [YBttzyc1iopmsJd8234A] C:\Windows\system32\mJJ7dELL8gqhwUe.exe
  472. O4 - HKLM\..\Run: [KYCCwwkIVr8234A] C:\Windows\system32\Snn4aQH6EL9gZ.exe
  473. O4 - HKLM\..\Run: [SSS22ibF3G6d7fL8234A] C:\Windows\system32\LddWffR9hTqUIB.exe
  474. O4 - HKLM\..\Run: [veeelOBtzP0A1v28234A] C:\Windows\system32\ecSS1iD4amJgRq.exe
  475. O4 - HKLM\..\Run: [qHH6s7EELCwOxDG8234A] C:\Windows\system32\XggTTqekIVrOt.exe
  476. O4 - HKLM\..\Run: [D999hTTXqjUCkIO8234A] C:\Windows\system32\A2bbF33pm5QJW8R.exe
  477. O4 - HKLM\..\Run: [q44ppmG56dRjIrz8234A] C:\Windows\system32\tHKKgYXwjUBzPyu.exe
  478. O4 - HKLM\..\Run: [dBttzzP0ycAiv2n8234A] C:\Windows\system32\boFm5EqkUVl.exe
  479. O4 - HKLM\..\Run: [VeekkIONtuSi8234A] C:\Windows\system32\lddWWK7ffR9gXqY.exe
  480. O4 - HKLM\..\Run: [f888ffRZhTXwUCl8234A] C:\Windows\system32\nVVeelc2mQ6d.exe
  481. O4 - HKLM\..\Run: [KkkUUVrOBtx0SDn8234A] C:\Windows\system32\gibbD33amH6sqhC.exe
  482. O4 - HKLM\..\Run: [yGG55aQH6dW7fL98234A] C:\Windows\system32\S000uvvS2ibFp.exe
  483. O4 - HKLM\..\Run: [SzzPP0ycc18234A] C:\Windows\system32\iRZZqhhYXwkVelB.exe
  484. O4 - HKLM\..\Run: [rL99hTTXqjUCkIr8234A] C:\Windows\system32\GppmmG55aQJdW8f.exe
  485. O4 - HKLM\..\Run: [n44ppmH5sQJ7dKg8234A] C:\Windows\system32\lVVeelOBzyA1v2n.exe
  486. O4 - HKLM\..\Run: [kAuccS22bD38234A] C:\Windows\system32\DXXqqjYYCeIVrON.exe
  487. O4 - HKLM\..\Run: [QdEEKK8gRZ98234A] C:\Windows\system32\dDDD2oonF4pm5sJ.exe
  488. O4 - HKLM\..\Run: [JoonnG44amHsW7E8234A] C:\Windows\system32\dllOONtxP0uc1iD.exe
  489. O4 - HKLM\..\Run: [XbbFF3ppnK8234A] C:\Windows\system32\qkIIBrrzONyA0v2.exe
  490. O4 - HKLM\..\Run: [xVVVellIBtz8234A] C:\Windows\system32\mJJ77dEK8gRZhYw.exe
  491. O4 - HKLM\..\Run: [TS11i48grlOxPyc8234A] C:\Windows\system32\sVrrllONtx0.exe
  492. O4 - HKLM\..\Run: [TkIyS2ibF3pnGaH8234A] C:\Windows\system32\U8ffRRL9hTXqUC.exe
  493. O4 - HKLM\..\Run: [V4ppmmH5sQJ7EKg8234A] C:\Windows\system32\pAAA11ivD2on.exe
  494. O4 - HKLM\..\Run: [n1iiibD3o8234A] C:\Windows\system32\akkkIIVrlONtP0c.exe
  495. O4 - HKLM\..\Run: [BjjjUUCelI8234A] C:\Windows\system32\zQQQJ66dEK8fZ9T.exe
  496. O4 - HKLM\..\Run: [aCCwwkUUVl8234A] C:\Windows\system32\Y6sssWJ7fEL8gZh.exe
  497. O4 - HKLM\..\Run: [ouuccS22ibDpn48234A] C:\Windows\system32\wzOONNtxA0.exe
  498. O4 - HKLM\..\Run: [UTTXXwjUCelIBz8234A] C:\Windows\system32\mKK88fRZZh.exe
  499. O4 - HKLM\..\Run: [qVVVrllOBtxPyc18234A] C:\Windows\system32\VgTTZZqhYCwk.exe
  500. O4 - HKLM\..\Run: [KqqqjYYCek8234A] C:\Windows\system32\faaaQHH6dWKfR9g.exe
  501. O4 - HKLM\..\Run: [XellIIBtzPNyA8234A] C:\Windows\system32\tYYYXwwjUV.exe
  502. O4 - HKLM\..\Run: [mcccS11ibD3nGam8234A] C:\Windows\system32\iIIIVrrlONtx0.exe
  503. O4 - HKLM\..\Run: [K888fRRL9hTXjUe8234A] C:\Windows\system32\foobbF3ppm5aQ6W.exe
  504. O4 - HKLM\..\Run: [hJ77ddEK88234A] C:\Windows\system32\wiiivDD2onF4mHs.exe
  505. O4 - HKLM\..\Run: [O999gTTXqjYCk8234A] C:\Windows\system32\JWWKK7ffR.exe
  506. O4 - HKLM\..\Run: [Uz1uFG5aQJ68fLh8234A] C:\Windows\system32\eRRZZ9hhTXwUClI.exe
  507. O4 - HKLM\..\Run: [b1iivvD2onF4mHs8234A] C:\Windows\system32\AOOBBtzzP0yA.exe
  508. O4 - HKLM\..\Run: [aammHH6sWJ7fL8q8234A] C:\Windows\system32\JcccS11ibD3n.exe
  509. O4 - HKLM\..\Run: [dLLL9ggTXqrzOx08234A] C:\Windows\system32\KeeekIIBrzONxAG.exe
  510. O4 - HKLM\..\Run: [c222obbF4pmGsQ68234A] C:\Windows\system32\WVeellIBtzPN.exe
  511. O4 - HKLM\..\Run: [wnnnF4aamH5WJdE8234A] C:\Windows\system32\QVVVrllOBtx0yS1.exe
  512. O4 - HKLM\..\Run: [qGGG4aQQHsWK7Eg8234A] C:\Windows\system32\mVVrzONxA0uc2iD.exe
  513. O4 - HKLM\..\Run: [OfRRLL9gTX8234A] C:\Windows\system32\VrvibF33pn5a.exe
  514. O4 - HKLM\..\Run: [AzzOONA0u2ip8234A] C:\Windows\system32\FxxxA11uvS2oFpm.exe
  515. O4 - HKLM\..\Run: [r22ibF3pG5aH6W78234A] C:\Windows\system32\l55aaQJ6dWKfRTX.exe
  516. O4 - HKLM\..\Run: [KUUVVelIBvbFmdK8234A] C:\Windows\system32\DyyycAA1iv2n4mH.exe
  517. O4 - HKLM\..\Run: [RvvvDoFpmH5QdEY8234A] C:\Windows\system32\qddL8ZZqhYXkUel.exe
  518. O4 - HKLM\..\Run: [y1vD33nF4amHsE8234A] C:\Windows\system32\PTTTZqqhYCwUVlO.exe
  519. O4 - HKLM\..\Run: [RAA00ucS2bD3pGa8234A] C:\Windows\system32\PaH66dK9gXqjCeI.exe
  520. O4 - HKLM\..\Run: [PsQQJdEK8fRZ9Tw8234A] C:\Windows\system32\keeelIIBtzPyc1u.exe
  521. O4 - HKLM\..\Run: [K1iivvD2o4amWJE8234A] C:\Windows\system32\QL88gRRZqhYwkVe.exe
  522. O4 - HKLM\..\Run: [CllOtxS1ioG4mHW8234A] C:\Windows\system32\ILLL9ggTZ.exe
  523. O4 - HKLM\..\Run: [sOONNyxAAuv2iF8234A] C:\Windows\system32\ZQQJJ6dWW8fR9TX.exe
  524. O4 - HKLM\..\Run: [TAA11uvob8234A] C:\Windows\system32\c5ssQQJ6dE8fZ9X.exe
  525. O4 - HKLM\..\Run: [OllOOBtxP0yS1vD8234A] C:\Windows\system32\qgggTZZqhYCk.exe
  526. O4 - HKLM\..\Run: [ZxxAA0ucc2iD3nG8234A] C:\Windows\system32\xnnGG5adWKfLgX.exe
  527. O4 - HKLM\..\Run: [oibb3pnG5QHdK78234A] C:\Windows\system32\UF33ppmGQJdKXje.exe
  528. O4 - HKLM\..\Run: [VzzzPNyyA1uv2oF8234A] C:\Windows\system32\YsssQJJ6dE8fR9T.exe
  529. O4 - HKLM\..\Run: [vLLL8ggRZqOBzPA8234A] C:\Windows\system32\WD333onF4aH5sJd.exe
  530. O4 - HKLM\..\Run: [tVVVrzzONtiQHsK8234A] C:\Windows\system32\J33p5aQHH6WKfTC.exe
  531. O4 - HKLM\..\Run: [UXwwjUUCelB8234A] C:\Windows\system32\J4ppmGG5sQdEfZh.exe
  532. O4 - HKLM\..\Run: [XccAA1iivD2nFpm8234A] C:\Windows\system32\rSSSivvD3o4H5WJ.exe
  533. O4 - HKLM\..\Run: [n999gqYwrlNtPuc8234A] C:\Windows\system32\vuuccS2ibD3pGQ6.exe
  534. O4 - HKLM\..\Run: [VbbFF3pmG5aQ6dK8234A] C:\Windows\system32\h9TXwjUClIrzPyA.exe
  535. O4 - HKLM\..\Run: [BtttzP00ycAiv2n8234A] C:\Windows\system32\jW7dEL8RqhYwkVl.exe
  536. O4 - HKLM\..\Run: [RrrrzOONtxAuc2b8234A] C:\Windows\system32\agggTXXqjY.exe
  537. O4 - HKLM\..\Run: [hGsJE8R9TXwj8234A] C:\Windows\system32\lYYYXwwjUVeI.exe
  538. O4 - HKLM\..\Run: [uJJ77dELLgRZ8234A] C:\Windows\system32\AxPP0ycSS1vD3n4.exe
  539. O4 - HKLM\..\Run: [OGG44aQH6sWKfE98234A] C:\Windows\system32\ldKK77RRLgTX.exe
  540. O4 - HKLM\..\Run: [ZppmmH55sQ7dE8g8234A] C:\Windows\system32\qtzzP00yc.exe
  541. O4 - HKLM\..\Run: [kffEEL8ggZqYCkr8234A] C:\Windows\system32\eDDD3nGG4H6.exe
  542. O4 - HKLM\..\Run: [offRRL9hTqjCekB8234A] C:\Windows\system32\ZF33pmmG5aQ6.exe
  543. O4 - HKLM\..\Run: [GmHH55sQJ78234A] C:\Windows\system32\NOOBBtzP0ycA1v.exe
  544. O4 - HKLM\..\Run: [jaaQH66sWK8234A] C:\Windows\system32\HONNttxA0ucSib.exe
  545. O4 - HKLM\..\Run: [eBBrONy0u2iFpG58234A] C:\Windows\system32\b888fRRL9TX.exe
  546. O4 - HKLM\..\Run: [bssQQJ6ddK8fRh8234A] C:\Windows\system32\VPPNNyccA1vDob4.exe
  547. O4 - HKLM\..\Run: [fYYYCwkkUVlBtPy8234A] C:\Windows\system32\YiibbD3oG4aHsJ7.exe
  548. O4 - HKLM\..\Run: [CllttxP0uciDGam8234A] C:\Windows\system32\UCkVOt0ciDp4aHW.exe
  549. O4 - HKLM\..\Run: [cdEEK88fR9hTwjC8234A] C:\Windows\system32\lF44ppmG5sQ6.exe
  550. O4 - HKLM\..\Run: [mFF44pmH5sQJdKg8234A] C:\Windows\system32\FwkkUVelOBPyAiD.exe
  551. O4 - HKLM\..\Run: [BPP00yccS1vDon48234A] C:\Windows\system32\YCCCwkUUVrlBt.exe
  552. O4 - HKLM\..\Run: [pS22iibD3pnG6W78234A] C:\Windows\system32\wSSS2ibF3pn5aHd.exe
  553. O4 - HKLM\..\Run: [yrzzPNy1uS2FGaJ8234A] C:\Windows\system32\UoobbF44pm5sQ6E.exe
  554. O4 - HKLM\..\Run: [kXwwkUVVelOtz08234A] C:\Windows\system32\sFF44a5sWJ7dLgZ.exe
  555. O4 - HKLM\..\Run: [O44mmH6sWJ8234A] C:\Windows\system32\lWWKK7fE9gTZjYw.exe
  556. O4 - HKLM\..\Run: [uQQJJ6ddRXUe8234A] C:\Windows\system32\YNNNyxxA1uv2oFp.exe
  557. O4 - HKLM\..\Run: [aH5ssQJ7dEKgR9h8234A] C:\Windows\system32\Y000yccA1iv2o.exe
  558. O4 - HKLM\..\Run: [YYYYCwkIVrlNx0c8234A] C:\Windows\system32\lSS22ibD3pnGaH6.exe
  559. O4 - HKLM\..\Run: [cssQQJ6ddK8fR9T8234A] C:\Windows\system32\XPPNNyccA1uD2bF.exe
  560. O4 - HKLM\..\Run: [wvvDD3ooF4mHsdE8234A] C:\Windows\system32\vUUVVllOBtPyc.exe
  561. O4 - HKLM\..\Run: [IOONNtxAuS2D8234A] C:\Windows\system32\WWWKK7fRL9gTqjC.exe
  562. O4 - HKLM\..\Run: [vffRRZ9hTXwjC8234A] C:\Windows\system32\yyyccA1uv2obpG.exe
  563. O4 - HKLM\..\Run: [B888ggTZqhYwk8234A] C:\Windows\system32\zooonGG4amHsWJf.exe
  564. O4 - HKLM\..\Run: [dOONNtxA0ucSib38234A] C:\Windows\system32\uWKKRRL9gTXjYeI.exe
  565. O4 - HKLM\..\Run: [uGG55aQQJ8234A] C:\Windows\system32\g55ssJ66EK8fZ9.exe
  566. O4 - HKLM\..\Run: [GdddELL8gRZhY8234A] C:\Windows\system32\KOBBtxxP0yS1v.exe
  567. O4 - HKLM\..\Run: [IQQQH66sW7fL9Tq8234A] C:\Windows\system32\PCCeekIIVrzNtA0.exe
  568. O4 - HKLM\..\Run: [qKKK8ggRZ8234A] C:\Windows\system32\gvvvDnF4pmH.exe
  569. O4 - HKLM\..\Run: [AonnG4amHsWJ8234A] C:\Windows\system32\sIIVVrlONtx0uS1.exe
  570. O4 - HKLM\..\Run: [K66ddWKK7fLTq8234A] C:\Windows\system32\oGaQJ66dWKfL9T.exe
  571. O4 - HKLM\..\Run: [pIBBtzPPN8234A] C:\Windows\system32\zJ777dEK8gR9h.exe
  572. O4 - HKLM\..\Run: [RrrrlOBtxP1iD3n8234A] C:\Windows\system32\O7ffEE8ggZ.exe
  573. O4 - HKLM\..\Run: [dAA00uvS28234A] C:\Windows\system32\S99hTXXqjUCeI.exe
  574. O4 - HKLM\..\Run: [EUUUVelIPNcA18234A] C:\Windows\system32\vmmH5sQQJ7dK8RZ.exe
  575. O4 - HKLM\..\Run: [yTZZqhYwwUVrlBx8234A] C:\Windows\system32\WxxxP0uucS3oGam.exe
  576. O4 - HKLM\..\Run: [ZpaaIrrONtA0uSi8234A] C:\Windows\system32\xffRLhhTXjUekBz.exe
  577. O4 - HKLM\..\Run: [kmmmG55aQJ6W8f8234A] C:\Windows\system32\hUUUCeIIBrPyA1v.exe
  578. O4 - HKLM\..\Run: [BBBtzP0ycA8234A] C:\Windows\system32\FEELL8gRZqhXkUe.exe
  579. O4 - HKLM\..\Run: [dnnGG4amH6sW7fL8234A] C:\Windows\system32\p000uccS1.exe
  580. O4 - HKLM\..\Run: [QWWWK8fRRLhTXjC8234A] C:\Windows\system32\UvvvS2oobF3.exe
  581. O4 - HKLM\..\Run: [zHH5ssQJ7dE8g8234A] C:\Windows\system32\VlOOBBtzP0cAivo.exe
  582. O4 - HKLM\..\Run: [cggTTZqhYCwkVlO8234A] C:\Windows\system32\N11ibD33nG4aH6W.exe
  583. O4 - HKLM\..\Run: [uGG55QHH6dK7f9T8234A] C:\Windows\system32\EXXXqjUCekIBzOy.exe
  584. O4 - HKLM\..\Run: [YtzzzPNycAuvDoF8234A] C:\Windows\system32\C999hYYXwjU.exe
  585. O4 - HKLM\..\Run: [mD33oonG4m8234A] C:\Windows\system32\zYYYCwkkVrONx.exe
  586. O4 - HKLM\..\Run: [tRRLL9gTXqjCeIr8234A] C:\Windows\system32\IuvvS2iib3pn5Q6.exe
  587. O4 - HKLM\..\Run: [YQQJJ7ddEK8R9hX8234A] C:\Windows\system32\ScccA1iivDoF4.exe
  588. O4 - HKLM\..\Run: [y0ucS1iibDonGam8234A] C:\Windows\system32\TgTTZqjYwkIV.exe
  589. O4 - HKLM\..\Run: [SeekkIBrzONxA8234A] C:\Windows\system32\sQQJJ6dWWKfR9hX.exe
  590. O4 - HKLM\..\Run: [i222onnF4pm5sJ78234A] C:\Windows\system32\VUUVVellOBzP.exe
  591. O4 - HKLM\..\Run: [UkkkIVrlOtx0uSi8234A] C:\Windows\system32\v66ssWKK7fL9g.exe
  592. O4 - HKLM\..\Run: [aiiibF3pnG5QH8234A] C:\Windows\system32\xjjUCekIrzOyAuS.exe
  593. O4 - HKLM\..\Run: [Q11iivD2onF8234A] C:\Windows\system32\CwkkUUVelOBtP0c.exe
  594. O4 - HKLM\..\Run: [eSSS2iibD3n8234A] C:\Windows\system32\KjjYCCekIrzNtAu.exe
  595. O4 - HKLM\..\Run: [IAobbF44p8234A] C:\Windows\system32\zwwjjUUVelItzNy.exe
  596. O4 - HKLM\..\Run: [G1iibbD3on8234A] C:\Windows\system32\TYYCwkVVrlOtx0c.exe
  597. O4 - HKLM\..\Run: [JwwjjUCelIBrPNx8234A] C:\Windows\system32\OfffRZZ9hT.exe
  598. O4 - HKLM\..\Run: [LbDD3oonG4a8234A] C:\Windows\system32\IwkkIVVrlONP0c1.exe
  599. O4 - HKLM\..\Run: [kCCeekIIBrO8234A] C:\Windows\system32\D6ddWWK8fRL9TXj.exe
  600. O4 - HKLM\..\Run: [H88ggRZqqhXwUVl8234A] C:\Windows\system32\i44aamH5sW7dE.exe
  601. O4 - HKLM\..\Run: [VgTTXXqjYCekVrO8234A] C:\Windows\system32\gaaaQHH6dWK7RL.exe
  602. O4 - HKLM\..\Run: [n9hhYYXwUVeBtPy8234A] C:\Windows\system32\QHHH5ssQJ7dK8R.exe
  603. O4 - HKLM\..\Run: [hxxPP0ucS1ibDoG8234A] C:\Windows\system32\ATZZqqjYCwkIrlN.exe
  604. O4 - HKLM\..\Run: [zeellIBrrP8234A] C:\Windows\system32\GddEEK88RZ9hXwU.exe
  605. O4 - HKLM\..\Run: [UmmH5sWJ7dE8gZq8234A] C:\Windows\system32\dLggZqhYVlSv3n4.exe
  606. O4 - HKLM\..\Run: [G33ppnG4aQHsW7L8234A] C:\Windows\system32\NeekIIrzONtA0c2.exe
  607. O4 - HKLM\..\Run: [ZBBBrzzPNyxAuv28234A] C:\Windows\system32\bQQQJJ6dEK8fZhT.exe
  608. O4 - HKLM\..\Run: [ZkIIIVrlONtP0cS8234A] C:\Windows\system32\rmHHHssWJ7fL9gZ.exe
  609. O4 - HKLM\..\Run: [vKK88fZZhTXBzNx8234A] C:\Windows\system32\oooobbF4pmGQJd.exe
  610. O4 - HKLM\..\Run: [ntxxPP0ycS1iD3n8234A] C:\Windows\system32\BLL8TZZqhYwkVrO.exe
  611. O4 - HKLM\..\Run: [GBBrzOOyyA0v2b38234A] C:\Windows\system32\OJJddWK8fRL9TXj.exe
  612. O4 - HKLM\..\Run: [S5ssQJ7dEK8gR8234A] C:\Windows\system32\jOBBtzPP0yc1iD2.exe
  613. O4 - HKLM\..\Run: [fHH6sWWK7fE9g8234A] C:\Windows\system32\WrrrzOONtx0uS2b.exe
  614. O4 - HKLM\..\Run: [RmmmG5QQdfR8234A] C:\Windows\system32\DIBBtzzNNcA1v2.exe
  615. O4 - HKLM\..\Run: [zkUUUVelOBtz0y28234A] C:\Windows\system32\x777dEEL8gR.exe
  616. O4 - HKLM\..\Run: [j66sWJJfEL8gZhY8234A] C:\Windows\system32\yPPPuc1iiD3oG4m.exe
  617. O4 - HKLM\..\Run: [frzzOOyxA0uv28234A] C:\Windows\system32\KJJJ6ddWK8RXjUe.exe
  618. O4 - HKLM\..\Run: [fUUVVelOBt8234A] C:\Windows\system32\D5ssWJJ7dEL8RZ.exe
  619. O4 - HKLM\..\Run: [XdddWKK8fRLhTqj8234A] C:\Windows\system32\GyxxAA1uvS2oF3m.exe
  620. O4 - HKLM\..\Run: [hvvD2onF4pm5Q7E8234A] C:\Windows\system32\eLL88ZqhYwkVeOt.exe
  621. O4 - HKLM\..\Run: [hivvDD2onF4p5sJ8234A] C:\Windows\system32\EVOtPySv3nmdZUz.exe
  622. O4 - HKLM\..\Run: [XlOONNtxcS8234A] C:\Windows\system32\A77ffEL99gZqjCk.exe
  623. O4 - HKLM\..\Run: [FUUUCrNxA0vS2F38234A] C:\Windows\system32\JzNx1SoFp.exe
  624. O4 - HKLM\..\Run: [G2oonnF4pmH5Q8234A] C:\Windows\system32\zYXXwUVelOtzPyA.exe
  625. O4 - HKLM\..\Run: [HOONNtxP0ucS1b38234A] C:\Windows\system32\zsWWK7fELgTqYwk.exe
  626. O4 - HKLM\..\Run: [dmmGG5aaQJ6W8234A] C:\Windows\system32\wrrzzPNNyx1uSob.exe
  627. O4 - HKLM\..\Run: [wttzP00ycAivD8234A] C:\Windows\system32\TJJ77dEEL8RZqYX.exe
  628. O4 - HKLM\..\Run: [v44aaQH66dK7f9T8234A] C:\Windows\system32\oxxAA0ucS2ib3p.exe
  629. O4 - HKLM\..\Run: [V999hhYXwjUelPc8234A] C:\Windows\system32\r444pmHH5sQ7d8g.exe
  630. O4 - HKLM\..\Run: [nZZZqjYYCwIVrOt8234A] C:\Windows\system32\iS22iibD3pn4Q6W.exe
  631. O4 - HKLM\..\Run: [GRZZ9XwjUPu2b8234A] C:\Windows\system32\bccAA1uvD2ob4p.exe
  632. O4 - HKLM\..\Run: [bwwkUVVrlOBxPyS8234A] C:\Windows\system32\nJ77fEE8g.exe
  633. O4 - HKLM\..\Run: [gvv22ibF3pn8234A] C:\Windows\system32\bTTqqjUUCkIBzO.exe
  634. O4 - HKLM\..\Run: [OUUVelIIBtzNy8234A] C:\Windows\system32\o5ssQJJ7dEK8RZh.exe
  635. O4 - HKLM\..\Run: [dammHH6sWJgT8234A] C:\Windows\system32\SOOONttxP0cS1b3.exe
  636. O4 - HKLM\..\Run: [pkkIIBrzO8234A] C:\Windows\system32\y111uvS2oFGa6W8.exe
  637. O4 - HKLM\..\Run: [APPNNycA18234A] C:\Windows\system32\HRRZZ9hYXwjUel.exe
  638. O4 - HKLM\..\Run: [Q44amH6sWJ78gZh8234A] C:\Windows\system32\ouuu1iibD3n.exe
  639. O4 - HKLM\..\Run: [CyyyxAA1uvSobFp8234A] C:\Windows\system32\khhhTXwwjUC.exe
  640. O4 - HKLM\..\Run: [qVVrllOBtxP0c1v8234A] C:\Windows\system32\gammH6sWfEgTqhC.exe
  641. O4 - HKLM\..\Run: [p666ddWK7fRLgXq8234A] C:\Windows\system32\NAA0uvS2ibFpn5a.exe
  642. O4 - HKLM\..\Run: [tYXXwjjUVelBtPy8234A] C:\Windows\system32\u11iivD2nF4mHsQ.exe
  643. O4 - HKLM\..\Run: [TVrrllOBtx0ySiD8234A] C:\Windows\system32\PJ77ffE88TZ.exe
  644. O4 - HKLM\..\Run: [hffRRL99g8234A] C:\Windows\system32\vBBBrzONyx0uS2b.exe
  645. O4 - HKLM\..\Run: [wzzzPNNycA1vDoF8234A] C:\Windows\system32\e9hhYYXwjUV.exe
  646. O4 - HKLM\..\Run: [h444aamH58234A] C:\Windows\system32\GlOBBtxPP0cSi.exe
  647. O4 - HKLM\..\Run: [B99ggTZqqYCwk8234A] C:\Windows\system32\WSS22ibD3pn4aHs.exe
  648. O4 - HKLM\..\Run: [AXXXwjjUCelBrPy8234A] C:\Windows\system32\gbbbF4pmG5sJ6Ef.exe
  649. O4 - HKLM\..\Run: [SWWWJ77fEL8TZhY8234A] C:\Windows\system32\qNttxxP0ucSib3n.exe
  650. O4 - HKLM\..\Run: [bIrrOOyA0uS2bF8234A] C:\Windows\system32\waaaQJ6dK8fR9TX.exe
  651. O4 - HKLM\..\Run: [UJ77ddKK8RZ9Yw8234A] C:\Windows\system32\QP00yccA1iD2oF4.exe
  652. O4 - HKLM\..\Run: [mP00uccS1ib3o8234A] C:\Windows\system32\EssWK77EL9gZq.exe
  653. O4 - HKLM\..\Run: [P6ddWWK7fRLgTqj8234A] C:\Windows\system32\SkkIIBrrOu3nGaQ.exe
  654. O4 - HKLM\..\Run: [W77d8gg9hYXjUlB8234A] C:\Windows\system32\BVVVelOOBtP0Fps.exe
  655. O4 - HKLM\..\Run: [IIVVrllONtxPuc18234A] C:\Windows\system32\vssWWK7fELgTZjC.exe
  656. O4 - HKLM\..\Run: [pTTTXqqjUCekBrO8234A] C:\Windows\system32\aaaaQJJ6dW8fL.exe
  657. O4 - HKLM\..\Run: [GRRRZqqhYXwUVlO8234A] C:\Windows\system32\Q44aamHHsW7.exe
  658. O4 - HKLM\..\Run: [V77ffEL9gTZq8234A] C:\Windows\system32\liibbD3pnG4aQ6W.exe
  659. O4 - HKLM\..\Run: [jhhhYXXwjUVlItz8234A] C:\Windows\system32\VQQJJ7dEK.exe
  660. O4 - HKLM\..\Run: [caammH6sWJ7fL8T8234A] C:\Windows\system32\ojjjYItxP0uS1bD.exe
  661. O4 - HKLM\..\Run: [ndWWKK8fRL9hXqU8234A] C:\Windows\system32\ZvvSS2obbFpm.exe
  662. O4 - HKLM\..\Run: [f111ivvD2on4pH58234A] C:\Windows\system32\NkkUVVelOBtz0y.exe
  663. O4 - HKLM\..\Run: [RAAAuucS2ibDpn48234A] C:\Windows\system32\aCCCekkIVrzOt.exe
  664. O4 - HKLM\..\Run: [HlllIIBrzPN8234A] C:\Windows\system32\z55ssQJJdK8fZ.exe
  665. O4 - HKLM\..\Run: [VOOBBtxxP0yS8234A] C:\Windows\system32\DfEEEL8gTZqhYwU.exe
  666. O4 - HKLM\..\Run: [LBBBrzOyxA08234A] C:\Windows\system32\BKKK8ffRL9hXqUC.exe
  667. O4 - HKLM\..\Run: [l222onnF4pmHsQ78234A] C:\Windows\system32\PBBttzP00yA.exe
  668. O4 - HKLM\..\Run: [TbbD33nnGaQHsKf8234A] C:\Windows\system32\V999gTTXqjCekrO.exe
  669. O4 - HKLM\..\Run: [D11uuvD2obF8234A] C:\Windows\system32\C999hTXXwUCeIB.exe
  670. O4 - HKLM\..\Run: [eP00uucS1ibDoG48234A] C:\Windows\system32\E9ggTTZqjYkIV.exe
  671. O4 - HKLM\..\Run: [jaaaQH66dW7fR8234A] C:\Windows\system32\HOONNyxA0uv2iF3.exe
  672. O4 - HKLM\..\Run: [zdEEKK8gRZ9hXwV8234A] C:\Windows\system32\p11iivD2on4pH5Q.exe
  673. O4 - HKLM\..\Run: [gCwwkkIVrlNtx0c8234A] C:\Windows\system32\FaQQHsWWK79g.exe
  674. O4 - HKLM\..\Run: [UrzzPNyxA1u8234A] C:\Windows\system32\D88ffRZ9hTXwUel.exe
  675. O4 - HKLM\..\Run: [OfffELL8gTZhYwU8234A] C:\Windows\system32\oSSS1iibD3oG4mH.exe
  676. O4 - HKLM\..\Run: [trrrzxxA0u8234A] C:\Windows\system32\zuvS22obF3mGaQh.exe
  677. O4 - HKLM\..\Run: [vHHH5ssQJ7dE8gZ8234A] C:\Windows\system32\WP00A1iivD2n.exe
  678. O4 - HKLM\..\Run: [KYYCCwkkIVlONx08234A] C:\Windows\system32\u3ppnnQH6sKfE9g.exe
  679. O4 - HKLM\..\Run: [QrzzPPNyxA1vSoF8234A] C:\Windows\system32\CfffRZZ9hTX.exe
  680. O4 - HKLM\..\Run: [GWWJ77fEL8gTqYC8234A] C:\Windows\system32\gcSS1ibbD3nG4m6.exe
  681. O4 - HKLM\..\Run: [pmmGG5aQJ6dW8fL8234A] C:\Windows\system32\ZNNNyxxA1uvSob3.exe
  682. O4 - HKLM\..\Run: [dWJ77dEL8gRqhXk8234A] C:\Windows\system32\LDDD3oonF4a.exe
  683. O4 - HKLM\..\Run: [vEELL9ggTZjYCkV8234A] C:\Windows\system32\FnnGG4aaH.exe
  684. O4 - HKLM\..\Run: [hJ6hIBBrz8234A] C:\Windows\system32\ovDD2oobF4pG5QJ.exe
  685. O4 - HKLM\..\Run: [ywwkkUVelOtzPyc8234A] C:\Windows\system32\SdEEL88gRZ.exe
  686. O4 - HKLM\..\Run: [ZRLL99gTXqjC8234A] C:\Windows\system32\hFFF3ppnG5QH6W7.exe
  687. O4 - HKLM\..\Run: [LRRZZ9hTXwjUClB8234A] C:\Windows\system32\oeItPy1v2b4pG5Q.exe
  688. O4 - HKLM\..\Run: [CCCCwkUVVlO8234A] C:\Windows\system32\c44ammH6sWJfE8g.exe
  689. O4 - HKLM\..\Run: [EKK77fRRL9gXqYC8234A] C:\Windows\system32\vA00uvvS2ibFpn5.exe
  690. O4 - HKLM\..\Run: [n777dEKK8gR9XwU8234A] C:\Windows\system32\QllOOzA1iD2oFp.exe
  691. O4 - HKLM\..\Run: [hTTTZqqjYCwkVrO8234A] C:\Windows\system32\G33ppnG4aQH6WKf.exe
  692. O4 - HKLM\..\Run: [sZ999hTXwjUCeI8234A] C:\Windows\system32\LAAA1uuvD2bFm5.exe
  693. O4 - HKLM\..\Run: [bWWJ7ddEL8gZqhX8234A] C:\Windows\system32\kxP00yccS1vDon4.exe
  694. O4 - HKLM\..\Run: [Z7TqjYCCekVrONA8234A] C:\Windows\system32\cekkIBrzONyx0uS.exe
  695. O4 - HKLM\..\Run: [bxxA0uvvS2b8234A] C:\Windows\system32\RhTTXqqjUCkIBzN.exe
  696. O4 - HKLM\..\Run: [TAAAivDD2nFp8234A] C:\Windows\system32\GZZZqhhYXwkVeOt.exe
  697. O4 - HKLM\..\Run: [HQQHH6sWWKf9gZq8234A] C:\Windows\system32\ucccS22ibD3n.exe
  698. O4 - HKLM\..\Run: [l11uuv2ooF4p8234A] C:\Windows\system32\KhYYXXwjUVelBzP.exe
  699. O4 - HKLM\..\Run: [rZqqjjYCwkIVlOt8234A] C:\Windows\system32\jWWKK7ffEL.exe
  700. O4 - HKLM\..\Run: [tQJJ6ddWK8fL9Tq8234A] C:\Windows\system32\ueeelIIBzPNxAuS.exe
  701. O4 - HKLM\..\Run: [rggTTZqqh8234A] C:\Windows\system32\ooonnG44aH6sJ7.exe
  702. O4 - HKLM\..\Run: [frrrzOONyxAuv2i8234A] C:\Windows\system32\jmmG5aaQJdK8RLh.exe
  703. O4 - HKLM\..\Run: [APPP0yycA1iD2nF8234A] C:\Windows\system32\XL88ggZZYXkUelB.exe
  704. O4 - HKLM\..\Run: [ollONNtxP0u8234A] C:\Windows\system32\Q4aaQHH6sgq.exe
  705. O4 - HKLM\..\Run: [Q55aaQJJ6dK8fL98234A] C:\Windows\system32\mKKK8ffRZ9hTwjC.exe
  706. O4 - HKLM\..\Run: [pdddEK88RZ9hXwU8234A] C:\Windows\system32\guuuvD2obF4pG5Q.exe
  707. O4 - HKLM\..\Run: [xgggRZqqYXwkUeO8234A] C:\Windows\system32\D0yyivDoam5sJdL.exe
  708. O4 - HKLM\..\Run: [ommHHssW7fLgTqC8234A] C:\Windows\system32\NZqqjjYCwkIrOt.exe
  709. O4 - HKLM\..\Run: [ssssWKK7fL98234A] C:\Windows\system32\cxxxA00ucS2iDpn.exe
  710. O4 - HKLM\..\Run: [wrzzPNyxA1uS2bp8234A] C:\Windows\system32\qsQQJEEKfR9hXjC.exe
  711. O4 - HKLM\..\Run: [rpmGG5sQJ6dE8fZ8234A] C:\Windows\system32\SwwjUVelIBNyA1v.exe
  712. O4 - HKLM\..\Run: [AXwwjjUVe8234A] C:\Windows\system32\u555sQQJ7dEKgR9.exe
  713. O4 - HKLM\..\Run: [pTTwUVrlOBx0yS18234A] C:\Windows\system32\mmmmH66sW7.exe
  714. O4 - HKLM\..\Run: [XUVVVrlOBt8234A] C:\Windows\system32\FIIVt1n6WJ78Tqh.exe
  715. O4 - HKLM\..\Run: [tfEEL99gTZ8234A] C:\Windows\system32\WLL99gTXqjYeIrN.exe
  716. O4 - HKLM\..\Run: [WHH66sWWK8234A] C:\Windows\system32\ZkIIrOA2i.exe
  717. O4 - HKLM\..\Run: [pIIBBrzPNy1uS2b8234A] C:\Windows\system32\afffRZZ9hTXwU.exe
  718. O4 - HKLM\..\Run: [c99hhYXwjelItzN8234A] C:\Windows\system32\CnnFF4pmH5sQJdK.exe
  719. O4 - HKLM\..\Run: [KP1ivDD2nF4m5Q78234A] C:\Windows\system32\Dom57RZqhYkUeO.exe
  720. O4 - HKLM\..\Run: [QnnnF44pmH5QJd8234A] C:\Windows\system32\EZZhYXwkUtP1v.exe
  721. O4 - HKLM\..\Run: [UssWWJ7fELgZqY8234A] C:\Windows\system32\zkkkIVVrlNPuc.exe
  722. O4 - HKLM\..\Run: [CTwNucSS1iD8234A] C:\Windows\system32\mSS22ibD3pnGa.exe
  723. O4 - HKLM\..\Run: [ZCeekIVrzONxAuc8234A] C:\Windows\system32\zKKK8fRL9hXqUCk.exe
  724. O4 - HKLM\..\Run: [OKK88fRhTXqjCz08234A] C:\Windows\system32\nvv33pmaaJ6d.exe
  725. O4 - HKLM\..\Run: [bvvvD2obF4pm5Q8234A] C:\Windows\system32\nPP00yA1iD2nFdZ.exe
  726. O4 - HKLM\..\Run: [eppmHH5QJ7d8234A] C:\Windows\system32\T44WJ7ddRwBPyc1.exe
  727. O4 - HKLM\..\Run: [GEL88gTZqhYkV8234A] C:\Windows\system32\OccS1iibDonGam6.exe
  728. O4 - HKLM\..\Run: [YIVVrllONtx0u8234A] C:\Windows\system32\GHH6ssWK7fE9gTq.exe
  729. O4 - HKLM\..\Run: [L1iibbD3onG4mHs8234A] C:\Windows\system32\ZxA0uQH6s.exe
  730. O4 - HKLM\..\Run: [ggTTqCekVrzNtAc8234A] C:\Windows\system32\ESS22bFF3n5aHdK.exe
  731. O4 - HKLM\..\Run: [NdWK8ffLNAi3n5Q8234A] C:\Windows\system32\G111uvS2oF.exe
  732. O4 - HKLM\..\Run: [KNNNyccA1u8234A] C:\Windows\system32\QJJEZZ9YXwj.exe
  733. O4 - HKLM\..\Run: [T66ssWJ7fEL8TZh8234A] C:\Windows\system32\KllOONttx0uSiDo.exe
  734. O4 - HKLM\..\Run: [PrrzzONNtA0uS28234A] C:\Windows\system32\fHH6dd7fRL9gXqY.exe
  735. O4 - HKLM\..\Run: [pEEKK8fRZ9hTwUC8234A] C:\Windows\system32\lA11uvvD2ob4pG5.exe
  736. O4 - HKLM\..\Run: [AfffEL8gTZqhCkU8234A] C:\Windows\system32\V444amHH6.exe
  737. O4 - HKLM\..\Run: [q666dWK88fL98234A] C:\Windows\system32\TPPNNxAuvS2bpma.exe
  738. O4 - HKLM\..\Run: [wD22onnF4pm5sQ78234A] C:\Windows\system32\BttzzP0ycA.exe
  739. O4 - HKLM\..\Run: [EbbbD3ppG4aQ6WK8234A] C:\Windows\system32\JXXqqjYCekVrzNx.exe
  740. O4 - HKLM\..\Run: [xAA11uvvbF3mGaQ8234A] C:\Windows\system32\mTTXXwjUCelIr.exe
  741. O4 - HKLM\..\Run: [haaamHH5sWJ7E8g8234A] C:\Windows\system32\EUVrlOBBxP0yS1v.exe
  742. O4 - HKLM\..\Run: [ZRRLL9ggTXjYCkI8234A] C:\Windows\system32\T33ppG55aQHd.exe
  743. O4 - HKLM\..\Run: [qttzzP00ycAiv2o8234A] C:\Windows\system32\Z77ddEL8gRZqYXk.exe
  744. O4 - HKLM\..\Run: [suuucS11ib3on48234A] C:\Windows\system32\nEELL9gTZqjYwkV.exe
  745. O4 - HKLM\..\Run: [oLL99TXqjUC8234A] C:\Windows\system32\vAAAuuvS2ob35.exe
  746. O4 - HKLM\..\Run: [U77ddEK8gRZ9hXj8234A] C:\Windows\system32\sXwwBAivD2oF4m.exe
  747. O4 - HKLM\..\Run: [A111ibbD3onGam68234A] C:\Windows\system32\TqqjYCCwk.exe
  748. O4 - HKLM\..\Run: [WddWKK8fRL9hXqU8234A] C:\Windows\system32\HPNNyxxA1vSobFp.exe
  749. O4 - HKLM\..\Run: [RXXXwwjUVelItzN8234A] C:\Windows\system32\CvD22onF4mHsQ7E.exe
  750. O4 - HKLM\..\Run: [GVVVrllOBtx0yS18234A] C:\Windows\system32\BjIVrPi4W8TZh.exe
  751. O4 - HKLM\..\Run: [pXXqjjUCekIB8234A] C:\Windows\system32\DbFF3pmmG5dW8f.exe
  752. O4 - HKLM\..\Run: [UkUVellOBzP0cA8234A] C:\Windows\system32\c55sWJJ7dELgRqh.exe
  753. O4 - HKLM\..\Run: [OF33pnG55a8234A] C:\Windows\system32\jTTXqqUCek.exe
  754. O4 - HKLM\..\Run: [GgRRZ99hYXwUVz18234A] C:\Windows\system32\YycvD244pmHsQ7d.exe
  755. O4 - HKLM\..\Run: [DwwkkIVrlONtP0c8234A] C:\Windows\system32\L666sWWK7fELgZ.exe
  756. O4 - HKLM\..\Run: [eyxxA11uvS2oF38234A] C:\Windows\system32\sfRRZZ9hTXwjClI.exe
  757. O4 - HKLM\..\Run: [QRRZZqhYXwkUel8234A] C:\Windows\system32\LvDD3onFmH5J7d.exe
  758. O4 - HKLM\..\Run: [ZCCCekIVrzONxAu8234A] C:\Windows\system32\bnnnG55aQHdWKfR.exe
  759. O4 - HKLM\..\Run: [bmGG55sQJ6dE8fZ8234A] C:\Windows\system32\SVIBBtzPNyc1uD2.exe
  760. O4 - HKLM\..\Run: [HJJ77fEL8gTZhYw8234A] C:\Windows\system32\KbbDD3onnGamH.exe
  761. O4 - HKLM\..\Run: [N00uvS22ibFpn5a8234A] C:\Windows\system32\mXXqqjUCek.exe
  762. O4 - HKLM\..\Run: [cJJJ7ddEK8gZ9YX8234A] C:\Windows\system32\hP00yyAivD2on4m.exe
  763. O4 - HKLM\..\Run: [xTXXqjYCekVrztA8234A] C:\Windows\system32\v00uvv2ibF3nGaH.exe
  764. O4 - HKLM\..\Run: [httzzPNycA1u8234A] C:\Windows\system32\LJJJ7dE88RZ9Yw.exe
  765. O4 - HKLM\..\Run: [pQQHH6sWWKfE8234A] C:\Windows\system32\BttxAA0uc2ib3pG.exe
  766. O4 - HKLM\..\Run: [ifTXwwjUCelBrNu8234A] C:\Windows\system32\cA11uuvDobFpG5Q.exe
  767. O4 - HKLM\..\Run: [ZxxPP0yycSiv8234A] C:\Windows\system32\bfELL8gTTZhCkU.exe
  768. O4 - HKLM\..\Run: [A2ndLgYCekIr8234A] C:\Windows\system32\KQ6W8RhXek.exe
  769. O4 - HKLM\..\Run: [qnnF44pm5sQ7dKg8234A] C:\Windows\system32\jzP00ycA1i.exe
  770. O4 - HKLM\..\Run: [WppnnG44aQ6sK7E8234A] C:\Windows\system32\wIIVVrzzONxA0c2.exe
  771. O4 - HKLM\..\Run: [GUCCeelIBrzPyx18234A] C:\Windows\system32\lppmm55sQJdE8fZ.exe
  772. O4 - HKLM\..\Run: [ACwwkkUVrlBtx0y8234A] C:\Windows\system32\fLL8ggTZqh.exe
  773. O4 - HKLM\..\Run: [AWKK77fRL9gTqYC8234A] C:\Windows\system32\eFF33pnnG5a.exe
  774. O4 - HKLM\..\Run: [hXXwkkUVe8234A] C:\Windows\system32\BD3onnF4am.exe
  775. O4 - HKLM\..\Run: [n4aaQH6sW8234A] C:\Windows\system32\PLL9ggTqjYCkVNt.exe
  776. O4 - HKLM\..\Run: [ZyyxxA1uvS2o8234A] C:\Windows\system32\F888fRZZ9hXwjCl.exe
  777. O4 - HKLM\..\Run: [JdEELL8gR8234A] C:\Windows\system32\kS11ivDD3nFam5.exe
  778. O4 - HKLM\..\Run: [EuuuvSS2ib3pn8234A] C:\Windows\system32\DhTXXqjUCekIrzN.exe
  779. O4 - HKLM\..\Run: [xzzPPNcA1uv2oF48234A] C:\Windows\system32\mwwwVVlOBtP0c1o.exe
  780. O4 - HKLM\..\Run: [sGG44ammHsWJfE8234A] C:\Windows\system32\ArrlONNtxPucSib.exe
  781. O4 - HKLM\..\Run: [WxxPPcS1b8234A] C:\Windows\system32\wL99gTZqjYwkV.exe
  782. O4 - HKLM\..\Run: [aiDpGaHsKE9YlPu8234A] C:\Windows\system32\EffRR9gXqYeIrNx.exe
  783. O4 - HKLM\..\Run: [ZuvvSS2ibFnGHRT8234A] C:\Windows\system32\j6ddWK8fRL9TXjC.exe
  784. O4 - HKLM\..\Run: [Vb33a8TeNSFpHdf8234A] C:\Windows\system32\zfZhXjCIrPyAu.exe
  785. O4 - HKLM\..\Run: [NaaaQJJ6d8fL9Xj8234A] C:\Windows\system32\gfRRZZ9hTXwjUlI.exe
  786. O4 - HKLM\..\Run: [KoobF3mG5Q6dWfL8234A] C:\Windows\system32\EIIBBrzPPNxA1.exe
  787. O4 - HKLM\..\Run: [QmQQJ6dEK8fZ9Tw8234A] C:\Windows\system32\k999hYwjUeIBzP.exe
  788. O4 - HKLM\..\Run: [p7ddEKK8RZ9h8234A] C:\Windows\system32\btzzPPycAv2on4.exe
  789. O4 - HKLM\..\Run: [AsWWJJ7dEL8RqYw8234A] C:\Windows\system32\OllOBtxP0yc1iDo.exe
  790. O4 - HKLM\..\Run: [XZqqjYkIrlOuoHE8234A] C:\Windows\system32\E66sWKfELg.exe
  791. O4 - HKLM\..\Run: [ZkkIIVrzONxA8234A] C:\Windows\system32\tQHH6dWK7fRLgXj.exe
  792. O4 - HKLM\..\Run: [nxAA0uv2i8234A] C:\Windows\system32\SwUlBzNx1v2FGW9.exe
  793. O4 - HKLM\..\Run: [d1uvvS2obFmGa6W8234A] C:\Windows\system32\rsQQJ6dEK8R9TwU.exe
  794. O4 - HKLM\..\Run: [tjjUVelIBtzPyc18234A] C:\Windows\system32\SEEKK8gRZ9.exe
  795. O4 - HKLM\..\Run: [blOBtzPP0cA8234A] C:\Windows\system32\cmmm5sWJ7dL8.exe
  796. O4 - HKLM\..\Run: [V44aamH66WJ7ETY8234A] C:\Windows\system32\g0uuccS1ibD.exe
  797. O4 - HKLM\..\Run: [grrzzONNtxAuc28234A] C:\Windows\system32\o66dWWK7fR9gXjC.exe
  798. O4 - HKLM\..\Run: [o3pnnG5aQH68234A] C:\Windows\system32\K6WfLhXUeIrOy0v.exe
  799. O4 - HKLM\..\Run: [d22iibF33nG58234A] C:\Windows\system32\a99jUzONyxAuv.exe
  800. O4 - HKLM\..\Run: [KAA11uvS2oFpG5Q8234A] C:\Windows\system32\TJJ66dE8RZ9TXUl.exe
  801. O4 - HKLM\..\Run: [KA22obb4pmGs8ZT8234A] C:\Windows\system32\pZZ99hYYXwUl.exe
  802. O4 - HKLM\..\Run: [GEEL8ggRZqhXwUe8234A] C:\Windows\system32\cF44ammHs.exe
  803. O4 - HKLM\..\Run: [AJJ78ggRhYXw8234A] C:\Windows\system32\QyDm7RwUBc1D2n4.exe
  804. O4 - HKLM\..\Run: [hjjUUCekIBzONx08234A] C:\Windows\system32\HPPPNyyxA1v.exe
  805. O4 - HKLM\..\Run: [ZXwwjjUCelIrzNx8234A] C:\Windows\system32\w1v2FpG5dEKfR9h.exe
  806. O4 - HKLM\..\Run: [GjjUCellIBzPyxu8234A] C:\Windows\system32\XsQQJ6dK8fRZh.exe
  807. O4 - HKLM\..\Run: [B5E9CCelIBrPN8234A] C:\Windows\system32\GRZZZ9hjBA.exe
  808. O4 - HKLM\..\Run: [uvvvD22ob4pm8234A] C:\Windows\system32\a4ppH5sQJdE8gZ9.exe
  809. O4 - HKLM\..\Run: [UbF44pmG5sQJ6E88234A] C:\Windows\system32\lBttzzPNy.exe
  810. O4 - HKLM\..\Run: [EuvvS2obb3pm58234A] C:\Windows\system32\OZZZ9hYXwjUelBz.exe
  811. O4 - HKLM\..\Run: [fVlBtzPPNyc1uD28234A] C:\Windows\system32\ZVz0c1v2F.exe
  812. O4 - HKLM\..\Run: [oPP00ycc1ivDon48234A] C:\Windows\system32\znnF4aamH5WJ7E8.exe
  813. O4 - HKLM\..\Run: [IL88gRZZqhXk8234A] C:\Windows\system32\J11ivDD3onF4mHs.exe
  814. O4 - HKLM\..\Run: [c444ammH6sWJ8234A] C:\Windows\system32\tCClOtxPucSib.exe
  815. O4 - HKLM\..\Run: [hBBrzzOuFaQ68234A] C:\Windows\system32\xKKK8ffRL9hTqjC.exe
  816. O4 - HKLM\..\Run: [X9hhYYXwjUVlItz8234A] C:\Windows\system32\KQ77ddK8gR.exe
  817. O4 - HKLM\..\Run: [OggTTZqhYC8234A] C:\Windows\system32\gVOtPcS1ibD3G6W.exe
  818. O4 - HKLM\..\Run: [pAA0uccS2ib3pG48234A] C:\Windows\system32\PGGaaQHdWK7R9k.exe
  819. O4 - HKLM\..\Run: [SRRRZ99hTXwUClI8234A] C:\Windows\system32\OGG55sQQJ6.exe
  820. O4 - HKLM\..\Run: [b11iiDD3on48234A] C:\Windows\system32\uggTTZqwkVrl.exe
  821. O4 - HKLM\..\Run: [qwwkIIVrl8234A] C:\Windows\system32\inG44H6W7fE9gjY.exe
  822. O4 - HKLM\..\Run: [dUCCellIB8234A] C:\Windows\system32\S55ssJEE8fRZh.exe
  823. O4 - HKLM\..\Run: [ennFFp7EK8R9hYw8234A] C:\Windows\system32\tUlOBtzzP0cA1vD.exe
  824. O4 - HKLM\..\Run: [lxxPP0ucc1ib3n48234A] C:\Windows\system32\yQHH6WWK7fE9gZj.exe
  825. O4 - HKLM\..\Run: [eyxAA0uuib3pHK78234A] C:\Windows\system32\qddWKL9hTXqjCeO.exe
  826. O4 - HKLM\..\Run: [kIIIBrzPNyx1vGa8234A] C:\Windows\system32\Y5ssQJ66dE8fR9T.exe
  827. O4 - HKLM\..\Run: [QJ77L8gqhYwelBz8234A] C:\Windows\system32\CDDD33onF4a.exe
  828. O4 - HKLM\..\Run: [NDD33onnG4aHsJf8234A] C:\Windows\system32\jOOONttxP0uS1.exe
  829. O4 - HKLM\..\Run: [cRRZZ9hhTXjUelB8234A] C:\Windows\system32\JFFF4ppmG5sQ6d8.exe
  830. O4 - HKLM\..\Run: [b00ycSSiiDn8234A] C:\Windows\system32\ennGG4amH7fLCkl.exe
  831. O4 - HKLM\..\Run: [bYYCCekIVrzNtx8234A] C:\Windows\system32\Q22iFppnGaQHdW.exe
  832. O4 - HKLM\..\Run: [KRZ99hYYje8234A] C:\Windows\system32\viivvD2onF4pH.exe
  833. O4 - HKLM\..\Run: [BttxxP00ucSib3o8234A] C:\Windows\system32\CsssWK77fE9gqYw.exe
  834. O4 - HKLM\..\Run: [CdddWKfLL9TXqUe8234A] C:\Windows\system32\KJJ66dEK8fRZjeP.exe
  835. O4 - HKLM\..\Run: [iJJ77dEL8gRqhXw8234A] C:\Windows\system32\E11iivDD3oF4a5s.exe
  836. O4 - HKLM\..\Run: [GvvvS2iibF3nGaH8234A] C:\Windows\system32\mCCCeekIBrzNy.exe
  837. O4 - HKLM\..\Run: [BYYXXwlzPNyAuv28234A] C:\Windows\system32\PAAAivv2opm5QE8.exe
  838. O4 - HKLM\..\Run: [F0uuucS1ibDo4m68234A] C:\Windows\system32\kE99gTTZqjYCkIr.exe
  839. O4 - HKLM\..\Run: [wwjjUUVelIBtPNc8234A] C:\Windows\system32\SQQJJ6dEK8RZ9.exe
  840. O4 - HKLM\..\Run: [IffEELgTZqhC8234A] C:\Windows\system32\s0uuc1iiD3o4aH.exe
  841. O4 - HKLM\..\Run: [BSSS2oobF3pm5QJ8234A] C:\Windows\system32\szzzPNNyA1u.exe
  842. O4 - HKLM\..\Run: [HDD3oonF4amHsW78234A] C:\Windows\system32\KYYCCwkkUrlOxPy.exe
  843. O4 - HKLM\..\Run: [mbbbD3ppG4aH68234A] C:\Windows\system32\OYYCCeIIrzNtx0c.exe
  844. O4 - HKLM\..\Run: [cDDD2oobF4m58234A] C:\Windows\system32\hYXXwjjUVelBtPy.exe
  845. O4 - HKLM\..\Run: [UibbD33onG48234A] C:\Windows\system32\QqjjYCwkVrlNx0.exe
  846. O4 - HKLM\..\Run: [ANNNyxxA1uv2oFp8234A] C:\Windows\system32\N888fRZ9hTXjUeI.exe
  847. O4 - HKLM\..\Run: [crlOOBtxP0ycSiD8234A] C:\Windows\system32\XWJJ77fEL8gZqYC.exe
  848. O4 - HKLM\..\Run: [hS22iibF38234A] C:\Windows\system32\yjUUCekIIBzONx.exe
  849. O4 - HKLM\..\Run: [BpppmHH5sQ7dE8234A] C:\Windows\system32\dUVVelOBtzP0cAi.exe
  850. O4 - HKLM\..\Run: [PA00uucS2bD3nGa8234A] C:\Windows\system32\IK77fE9TXjYCkVr.exe
  851. O4 - HKLM\..\Run: [KUUVVelIBt8234A] C:\Windows\system32\VQJJ77dEK8gR9hX.exe
  852. O4 - HKLM\..\Run: [U9ggTTZqjYCkIrN8234A] C:\Windows\system32\OxxxA00ucSiGaQ6.exe
  853. O4 - HKLM\..\Run: [LJJ66dWWK8R8234A] C:\Windows\system32\BAA11uvS2ob3pGa.exe
  854. O4 - HKLM\..\Run: [mccSS1iivD3nFaH8234A] C:\Windows\system32\r88ggTZqYCwkVrO.exe
  855. O4 - HKLM\..\Run: [US2b5KKfL9TXjYe8234A] C:\Windows\system32\JXXXqjjUCekIrOy.exe
  856. O4 - HKLM\..\Run: [rEEEK88gR9hY8234A] C:\Windows\system32\HOOBtzP0ycA.exe
  857. O4 - HKLM\..\Run: [PibbD3ppGaQ6WKf8234A] C:\Windows\system32\u77fRTXqjYrONxA.exe
  858. O4 - HKLM\..\Run: [sobbFppmGsJ8R9h8234A] C:\Windows\system32\RZ99hYYXjUVeIBz.exe
  859. O4 - HKLM\..\Run: [V8ggTZZqhYCk8234A] C:\Windows\system32\dwkrlONcon4aHsW.exe
  860. O4 - HKLM\..\Run: [VWWWK88RL8234A] C:\Windows\system32\DuuuvS2bF3pG5Q.exe
  861. O4 - HKLM\..\Run: [eaaamHH5sWJdEhV8234A] C:\Windows\system32\CrllOOBtxP0yS1v.exe
  862. O4 - HKLM\..\Run: [LaQQJJ6dWK8fL9T8234A] C:\Windows\system32\X111uvvS2ob3p.exe
  863. O4 - HKLM\..\Run: [foonnF4amH5sJdE8234A] C:\Windows\system32\rVVVrrlOBtxPyc1.exe
  864. O4 - HKLM\..\Run: [DIIIVrrzONxA0c28234A] C:\Windows\system32\fiibbpnnGaQ6W.exe
  865. O4 - HKLM\..\Run: [ScAA11uvD2ob4pG8234A] C:\Windows\system32\iYYXXwjjUVeIB.exe
  866. O4 - HKLM\..\Run: [BYYYwkONNtP0u8234A] C:\Windows\system32\KnnnG44aQH6WKfL.exe
  867. O4 - HKLM\..\Run: [eXqqjUUCekIBzNy8234A] C:\Windows\system32\b55aaQJ6dWKfR9.exe
  868. O4 - HKLM\..\Run: [BZZZXwwjUClBr8234A] C:\Windows\system32\cYYXXjjUVeIBtPy.exe
  869. O4 - HKLM\..\Run: [EUUUCeekIBrzNx28234A] C:\Windows\system32\sNx1voFpGa8R9hX.exe
  870. O4 - HKLM\..\Run: [cpmmGaQQJ6WK8RL8234A] C:\Windows\system32\zjjUzPNyxA1u2oF.exe
  871. O4 - HKLM\..\Run: [LmmHH5ssQJ7EKg8234A] C:\Windows\system32\SDD22onFF4.exe
  872. O4 - HKLM\..\Run: [uxxP00ycS1iv8234A] C:\Windows\system32\Y888gTZqhYwkVlB.exe
  873. O4 - HKLM\..\Run: [EbD33pnn4aH6s8234A] C:\Windows\system32\IkIIVrzONtx0uS2.exe
  874. O4 - HKLM\..\Run: [VyyxxA0uvS2b3p58234A] C:\Windows\system32\nLL9hTTXqjUekBz.exe
  875. O4 - HKLM\..\Run: [WobF3GG5aQ6d8234A] C:\Windows\system32\SE8ZhXjClBzNx1S.exe
  876. O4 - HKLM\..\Run: [rDD22obF4pmGsJ68234A] C:\Windows\system32\EwwwjUVVlIBtPN1.exe
  877. O4 - HKLM\..\Run: [I222oobF4pm5sJ68234A] C:\Windows\system32\GEEKKggRZ9hUtyA.exe
  878. O4 - HKLM\..\Run: [tEL8RZZhYwUVOPy8234A] C:\Windows\system32\TUVVlOOBtP0yS1v.exe
  879. O4 - HKLM\..\Run: [SSvvD3onF48234A] C:\Windows\system32\kbbbD33onG4a7Tw.exe
  880. O4 - HKLM\..\Run: [QjYYCwwkIrl8234A] C:\Windows\system32\PnnGG4aaQH6WKf.exe
  881. O4 - HKLM\..\Run: [WnnGG5H6LjVAiG48234A] C:\Windows\system32\dOOONyyxAuv2.exe
  882. O4 - HKLM\..\Run: [PvvSS2iibFpn5QH8234A] C:\Windows\system32\VL99TTqjUCkIrOy.exe
  883. O4 - HKLM\..\Run: [I5Q899hTXqjUekr8234A] C:\Windows\system32\VZjBA1uvS.exe
  884. O4 - HKLM\..\Run: [qK88RLL9T8234A] C:\Windows\system32\bwjjUVeeIBtPc1v.exe
  885. O4 - HKLM\..\Run: [dJ66dEK8fZjBNyA8234A] C:\Windows\system32\aBBttzNycA1uD2b.exe
  886. O4 - HKLM\..\Run: [tFFF4ppmH5QJg8234A] C:\Windows\system32\C5J7dYkelBtzPyA.exe
  887. O4 - HKLM\..\Run: [ghYYXwwjUVI8234A] C:\Windows\system32\W44aamH55WJ7dLg.exe
  888. O4 - HKLM\..\Run: [PivDD3onF4mHsJd8234A] C:\Windows\system32\RhhYCwkkUlOBx0y.exe
  889. O4 - HKLM\..\Run: [vHHH6ssWK7fL9Tq8234A] C:\Windows\system32\WxxAA0ucS2ib.exe
  890. O4 - HKLM\..\Run: [LH66dW7ff9TXjY8234A] C:\Windows\system32\WIBrrzONyxA0v2i.exe
  891. O4 - HKLM\..\Run: [AQQKheONyx0vSi38234A] C:\Windows\system32\OIIIBrzPyx1S2pG.exe
  892. O4 - HKLM\..\Run: [pvD22bF4pm5sJdK8234A] C:\Windows\system32\rhYYXXUtz.exe
  893. O4 - HKLM\..\Run: [TkkUUVellOPyc1i8234A] C:\Windows\system32\FmmmH55sWJ7dLgR.exe
  894. O4 - HKLM\..\Run: [uCwkUlOBtx0yS1v8234A] C:\Windows\system32\XmmmHJ7fEL.exe
  895. O4 - HKLM\..\Run: [vWWWJ77EL8gTqhC8234A] C:\Windows\system32\tllONtxP0uS1bDn.exe
  896. O4 - HKLM\..\Run: [lD33onnG4m6W8234A] C:\Windows\system32\ATZZqjjCkIrl.exe
  897. O4 - HKLM\..\Run: [j7fffRL9gqjYekV8234A] C:\Windows\system32\RGG55aQQ6dW.exe
  898. O4 - HKLM\..\Run: [XqqeekIBrzONx8234A] C:\Windows\system32\G33ppmGG5aJ6dKf.exe
  899. O4 - HKLM\..\Run: [rkUUVeelOBtP0cA8234A] C:\Windows\system32\c3oonmWWJ7dLgRh.exe
  900. O4 - HKLM\..\Run: [ZkkkIVVrzONxAuc8234A] C:\Windows\system32\FaaQQH6dK7fR9gX.exe
  901. O4 - HKLM\..\Run: [eXXwwjUVelIBzPy8234A] C:\Windows\system32\mBc2onFF4pm5Q.exe
  902. O4 - HKLM\..\Run: [JfffL9ggTZjYwkV8234A] C:\Windows\system32\AuccSiib3pnGaQ6.exe
  903. O4 - HKLM\..\Run: [hmmmG5sQJdEK8234A] C:\Windows\system32\xzzzPNyyc1uD2bF.exe
  904. O4 - HKLM\..\Run: [D66ssWJ7fELgTq8234A] C:\Windows\system32\jNNtxPP0uSib3nG.exe
  905. O4 - HKLM\..\Run: [R666dWKK8fR9TX8234A] C:\Windows\system32\P111uvvSobF3mGa.exe
  906. O4 - HKLM\..\Run: [dZZqqhYXwkUelBt8234A] C:\Windows\system32\TyyccS1ivDon4m5.exe
  907. O4 - HKLM\..\Run: [LRRLL9ggTXqYCkV8234A] C:\Windows\system32\yaaQQH66dWK.exe
  908. O4 - HKLM\..\Run: [FKKK8ggRZ9hYwUe8234A] C:\Windows\system32\lAAA1iivD2n4pHs.exe
  909. O4 - HKLM\..\Run: [tWWK7ffEL9gZY8234A] C:\Windows\system32\uVrzOONtc3Ga.exe
  910. O4 - HKLM\..\Run: [YdEE8NyxA1vSo8234A] C:\Windows\system32\HAA11uvDDoF4pGs.exe
  911. O4 - HKLM\..\Run: [k00yycA11iD2oF48234A] C:\Windows\system32\ehhXwwkUVelOtz.exe
  912. O4 - HKLM\..\Run: [r666dWWK7fLgTjC8234A] C:\Windows\system32\o0uuvSS2ibFpn5a.exe
  913. O4 - HKLM\..\Run: [ZRRZZ9hTXwjUelB8234A] C:\Windows\system32\z22oobFFpmG5Q6d.exe
  914. O4 - HKLM\..\Run: [O666sWWJ7fE8g8234A] C:\Windows\system32\F0uuucS1ibDon4a.exe
  915. O4 - HKLM\..\Run: [uG55aaQH6dW7fR98234A] C:\Windows\system32\xeeekIrzONyAu2i.exe
  916. O4 - HKLM\..\Run: [YtttzPNycA1D2F48234A] C:\Windows\system32\XivvD2onF4mHs7E.exe
  917. O4 - HKLM\..\Run: [ZiiibDD3onG48234A] C:\Windows\system32\zYCCwkIIVlONxPc.exe
  918. O4 - HKLM\..\Run: [PhhTTXwjjCelIr8234A] C:\Windows\system32\RooobFF4pmG5QJd.exe
  919. O4 - HKLM\..\Run: [E666sWWJ7fELgZq8234A] C:\Windows\system32\kPP00uccS1b.exe
  920. O4 - HKLM\..\Run: [geekIrzONyx0vSi8234A] C:\Windows\system32\vllIzumJ6K8fL9T.exe
  921. O4 - HKLM\..\Run: [UzzPP0ycA1iv2oF8234A] C:\Windows\system32\BhhYYXwkUVelB.exe
  922. O4 - HKLM\..\Run: [nxA0ucS2bD3n4QH8234A] C:\Windows\system32\QH66dWW7fR9TqYe.exe
  923. O4 - HKLM\..\Run: [chhYYXwkUVeO8234A] C:\Windows\system32\JmmmH5ssWJdELgZ.exe
  924. O4 - HKLM\..\Run: [TdddWK77fR9gTqY8234A] C:\Windows\system32\Y22iibF33nGaQ.exe
  925. O4 - HKLM\..\Run: [s111ivvDonF8234A] C:\Windows\system32\yZZqqhYXwkUVlB.exe
  926. O4 - HKLM\..\Run: [dqqjjYCekIVrzNx8234A] C:\Windows\system32\X222bbF3pn5aHdW.exe
  927. O4 - HKLM\..\Run: [HF4ppmG5sQJ6EK8234A] C:\Windows\system32\ohYYXXwjUVelBt.exe
  928. O4 - HKLM\..\Run: [TuuccS1ib8234A] C:\Windows\system32\qjjjYCwwkIVlOtx.exe
  929. O4 - HKLM\..\Run: [XTTTXwjjUClIB8234A] C:\Windows\system32\AppmmG5sQJ6dK8R.exe
  930. O4 - HKLM\..\Run: [X8ggTTZqhC8234A] C:\Windows\system32\cbbbD3oon4amHsJ.exe
  931. O4 - HKLM\..\Run: [U22oobF3pG5aJ68234A] C:\Windows\system32\SCCeelIIrzPNxAu.exe
  932. O4 - HKLM\..\Run: [cxPP0yycS8234A] C:\Windows\system32\a88ggTZZqhCwU.exe
  933. O4 - HKLM\..\Run: [BXqqjUUCekIrzNy8234A] C:\Windows\system32\z55aaQJ6dWK8fLh.exe
  934. O4 - HKLM\..\Run: [I888gRYkUVOt8234A] C:\Windows\system32\CSSS1ivDnF4aHs.exe
  935. O4 - HKLM\..\Run: [GCCCekkIVrzOt8234A] C:\Windows\system32\UkkOxuuv3Qd7fLg.exe
  936. O4 - HKLM\..\Run: [n99hYYXwj8234A] C:\Windows\system32\gF44pmmH5sQJdE.exe
  937. O4 - HKLM\..\Run: [SaaaQH6sWK7fE9T8234A] C:\Windows\system32\CzzzONNtxAucSiD.exe
  938. O4 - HKLM\..\Run: [RsQQQJ6dEKfZ9hw8234A] C:\Windows\system32\iBttzPPNA1uDob4.exe
  939. O4 - HKLM\..\Run: [TxxPP0ucS1ib3o48234A] C:\Windows\system32\YqjjYCCwkIVrO.exe
  940. O4 - HKLM\..\Run: [SAA1uvS2obFpmaJ8234A] C:\Windows\system32\oQQJJ6KK8Z9TwjC.exe
  941. O4 - HKLM\..\Run: [rdddELL8gRZhYwk8234A] C:\Windows\system32\RSSS1ivDD3nF4mH.exe
  942. O4 - HKLM\..\Run: [FQQQH6dWK7fLgTq8234A] C:\Windows\system32\IzzOONyxxAuvSiF.exe
  943. O4 - HKLM\..\Run: [qA11iivD2nF4mHs8234A] C:\Windows\system32\ekkUUVellBtzPy.exe
  944. O4 - HKLM\..\Run: [LIrONtxxu3G4H68234A] C:\Windows\system32\lHHH6ddWK7fR9gq.exe
  945. O4 - HKLM\..\Run: [uGGG5ssQJ6dK8234A] C:\Windows\system32\dPPNNyccA1vD2bF.exe
  946. O4 - HKLM\..\Run: [qwkkIIVrlONt8234A] C:\Windows\system32\QQQHH6sWK7fE9gZ.exe
  947. O4 - HKLM\..\Run: [TonnF44pmH5Q8234A] C:\Windows\system32\GkkUUVellOtzPyc.exe
  948. O4 - HKLM\..\Run: [LsWWK77fEL9TZqY8234A] C:\Windows\system32\rxA0ucS2ibDpn4a.exe
  949. O4 - HKLM\..\Run: [HuuvvD2ooF4pm5Q8234A] C:\Windows\system32\CwjjUllIBtzPyc.exe
  950. O4 - HKLM\..\Run: [QxPPP0ucS1ioG4m8234A] C:\Windows\system32\sZZqjYYCwIl.exe
  951. O4 - HKLM\..\Run: [B111uvvS23m5aJ68234A] C:\Windows\system32\P6668fRRZXjeIrz.exe
  952. O4 - HKLM\..\Run: [sRRRZqhYYwkUeOt8234A] C:\Windows\system32\vrycS11iv3oF4H5.exe
  953. O4 - HKLM\..\Run: [mkkkIVVrzO8234A] C:\Windows\system32\YdWWKK7fRLgTXjC.exe
  954. O4 - HKLM\..\Run: [OgRRZZ9hYXwUVlB8234A] C:\Windows\system32\NpmmHH5sQJ7.exe
  955. O4 - HKLM\..\Run: [QWJJ77ZYUVr8234A] C:\Windows\system32\YccSS1iibD3nGam.exe
  956. O4 - HKLM\..\Run: [mWWK7ffR9TXqYeI8234A] C:\Windows\system32\RRRRL9TrAvSb3n.exe
  957. O4 - HKLM\..\Run: [ERRRZ99hYX8234A] C:\Windows\system32\BFF44pmmH5QJ7EK.exe
  958. O4 - HKLM\..\Run: [OtxA00ucS2ib3nG8234A] C:\Windows\system32\H5aQH6dKfR9gXYC.exe
  959. O4 - HKLM\..\Run: [ZuuvS22obFpG5Q68234A] C:\Windows\system32\XCCeelrzPN.exe
  960. O4 - HKLM\..\Run: [gttxx00cvDoF4H8234A] C:\Windows\system32\UHssWJfELgTqCk.exe
  961. O4 - HKLM\..\Run: [TBBBrzzONxA08234A] C:\Windows\system32\tdWWKK8fRL9hXqU.exe
  962. O4 - HKLM\..\Run: [PsWWJ77dELgRZh8234A] C:\Windows\system32\BOBBxPPcS1vDon4.exe
  963. O4 - HKLM\..\Run: [iK77fRRL9gXqjCe8234A] C:\Windows\system32\tppnnG55aQ.exe
  964. O4 - HKLM\..\Run: [DJJ77dEKgRZhYw8234A] C:\Windows\system32\UPP00yccAiD2nFp.exe
  965. O4 - HKLM\..\Run: [v44aaQH6sW8234A] C:\Windows\system32\UrrONtxA0ucS2b.exe
  966. O4 - HKLM\..\Run: [r444pmmGs8234A] C:\Windows\system32\EllIBPNycA1uD.exe
  967. O4 - HKLM\..\Run: [c99ggTZqjYCwIVl8234A] C:\Windows\system32\unnGG4aaQHsW.exe
  968. O4 - HKLM\..\Run: [cKKK8fRhTwjCeIr8234A] C:\Windows\system32\SbbFF4pG5s.exe
  969. O4 - HKLM\..\Run: [AsssWKK7fELgTqY8234A] C:\Windows\system32\lbDD33pnG.exe
  970. O4 - HKLM\..\Run: [IuuvDD2obF4pG5Q8234A] C:\Windows\system32\rjjjUVVelItz.exe
  971. O4 - HKLM\..\Run: [sIIIVrrlOtxPuc8234A] C:\Windows\system32\xH66ssWK7fELgTq.exe
  972. O4 - HKLM\..\Run: [pxxxA11uv2obFpG8234A] C:\Windows\system32\KddEEK8fRZ9hTwU.exe
  973. O4 - HKLM\..\Run: [c0yyccSivD3oF4m8234A] C:\Windows\system32\T8ggTZZqhYCkUrl.exe
  974. O4 - HKLM\..\Run: [HBrrzzONyA0uS28234A] C:\Windows\system32\TWWK8fRL9hTXjUe.exe
  975. O4 - HKLM\..\Run: [RhhYXXwkUVelBtP8234A] C:\Windows\system32\PaammH5sWJ7dL8.exe
  976. O4 - HKLM\..\Run: [Z9gTXqjYCekIrzN8234A] C:\Windows\system32\hpppaQHH6dW7.exe
  977. O4 - HKLM\..\Run: [T2oonnF4p8234A] C:\Windows\system32\qeeelOBBtzPyc1i.exe
  978. O4 - HKLM\..\Run: [AjYYkIVVrzNt8234A] C:\Windows\system32\NFFF3pnnG5QHdW.exe
  979. O4 - HKLM\..\Run: [IssQQJ77dEKgR9h8234A] C:\Windows\system32\DyccAA1ivD2on4m.exe
  980. O4 - HKLM\..\Run: [U999gTZqqjCwkVl8234A] C:\Windows\system32\JVVrrzONtxA0cSi.exe
  981. O4 - HKLM\..\Run: [BnnFF4ppmH5QJ8234A] C:\Windows\system32\rlOOBBtzP0ycAiD.exe
  982. O4 - HKLM\..\Run: [vAA00ucS2ib3pn48234A] C:\Windows\system32\KXXXqqjYCekIr.exe
  983. O4 - HKLM\..\Run: [KgggRZZ9hY8234A] C:\Windows\system32\U22oonF4pmH5QJ.exe
  984. O4 - HKLM\..\Run: [n3ppnGG4aQH6W7E8234A] C:\Windows\system32\DjjjkIIVrzNtAuc.exe
  985. O4 - HKLM\..\Run: [fcAA11uvD28234A] C:\Windows\system32\OYYYXwwjUVlIBzN.exe
  986. O4 - HKLM\..\Run: [N444aQQH6WKfgZq8234A] C:\Windows\system32\wAAA0uucS2iD3.exe
  987. O4 - HKLM\..\Run: [IhYYXXwjUVelBzN8234A] C:\Windows\system32\TJ777dEK8gRZ.exe
  988. O4 - HKLM\..\Run: [S777fELL9gZqj8234A] C:\Windows\system32\scccS2iib3pnGaH.exe
  989. O4 - HKLM\..\Run: [WyyccA1uvD2oF4m8234A] C:\Windows\system32\wRRRZ9hYYwjVeIB.exe
  990. O4 - HKLM\..\Run: [r0uuccS1ibDon4m8234A] C:\Windows\system32\f9gggTZqjYCkIrO.exe
  991. O4 - HKLM\..\Run: [nRZZ99hTXwjUelB8234A] C:\Windows\system32\mGQ66dEEK8.exe
  992. O4 - HKLM\..\Run: [kaammH6sWJ78234A] C:\Windows\system32\iNNNtxxP0uc1ib3.exe
  993. O4 - HKLM\..\Run: [lzzPPNyxA1uv2oF8234A] C:\Windows\system32\o88ffRZ9hTXwjCl.exe
  994. O4 - HKLM\..\Run: [YTTTZqqjYCwIVNx8234A] C:\Windows\system32\j44aaHH6sWK7E.exe
  995. O4 - HKLM\..\Run: [J99hhTXXjUCelBz8234A] C:\Windows\system32\V44ppmGG5sJd.exe
  996. O4 - HKLM\..\Run: [v88gTZZqhYwUVlB8234A] C:\Windows\system32\j111ibD3onGam6W.exe
  997. O4 - HKLM\..\Run: [Y5aaQQJ6dWK8R8234A] C:\Windows\system32\cPPPNyyxA1uS2bF.exe
  998. O4 - HKLM\..\Run: [UtxxPP0ycS1von48234A] C:\Windows\system32\TssW7ffELgTZhwU.exe
  999. O4 - HKLM\..\Run: [BH66ddWK7fRLg8234A] C:\Windows\system32\VBrrzzO0uvSib3n.exe
  1000. O4 - HKLM\..\Run: [rnFF4ppmH8234A] C:\Windows\system32\VkkUUVelOzP0.exe
  1001. O4 - HKLM\..\Run: [XttxxA0ucS2bD3n8234A] C:\Windows\system32\pWKK7ffRL9gTqje.exe
  1002. O4 - HKLM\..\Run: [AZZ99hTTwjCeIBz8234A] C:\Windows\system32\k5ssQQJ6dEK.exe
  1003. O4 - HKLM\..\Run: [rVBBtPNycA1u8234A] C:\Windows\system32\swwkkUVelOBAo5E.exe
  1004. O4 - HKLM\..\Run: [BUVVrllOBt8234A] C:\Windows\system32\FsssWJJ7fELgTqh.exe
  1005. O4 - HKLM\..\Run: [KQQJJ6dWK88234A] C:\Windows\system32\R111uuvS2obFpm5.exe
  1006. O4 - HKLM\..\Run: [ahYYXwwjUVeIt8234A] C:\Windows\system32\F222onnF4pH5QJd.exe
  1007. O4 - HKLM\..\Run: [nyyc1ivFmW7gRqX8234A] C:\Windows\system32\eEEEL88gYCwkUrO.exe
  1008. O4 - HKLM\..\Run: [kjYCCwkIVrlNtP08234A] C:\Windows\system32\zSS2ibDD3pG46sK.exe
  1009. O4 - HKLM\..\Run: [jjjjUCCekIBzO8234A] C:\Windows\system32\u55aaQJ6dWK8R9T.exe
  1010. O4 - HKLM\..\Run: [VG55sXwjU8234A] C:\Windows\system32\qwwjjeltb.exe
  1011. O4 - HKLM\..\Run: [uccA11ivD8234A] C:\Windows\system32\CqqhhYXwkUVeOt.exe
  1012. O4 - HKLM\..\Run: [pP0uucSS1bD3oGa8234A] C:\Windows\system32\QYCCwkkIVrl.exe
  1013. O4 - HKLM\..\Run: [dpmGG5aaQJ6WKfR8234A] C:\Windows\system32\rRRZTwUeIrPNx1u.exe
  1014. O4 - HKLM\..\Run: [vYXXwjelIBtzN8234A] C:\Windows\system32\KHHH5sQQ7dEKgR9.exe
  1015. O4 - HKLM\..\Run: [kkkUVVrlOBt8234A] C:\Windows\system32\DWWJ7ffEL8gTqhC.exe
  1016. O4 - HKLM\..\Run: [fLL9gTTXqjYeIVz8234A] C:\Windows\system32\X55aaQH6dW.exe
  1017. O4 - HKLM\..\Run: [WzzPPNyxxAuvSoF8234A] C:\Windows\system32\fZZ99hTTXwjCe.exe
  1018. O4 - HKLM\..\Run: [hllOOBttzPA1vDo8234A] C:\Windows\system32\AEELL8gRZqhYXkV.exe
  1019. O4 - HKLM\..\Run: [bCCCwkIVrlONxPu8234A] C:\Windows\system32\EHH6sWWK7fE9g.exe
  1020. O4 - HKLM\..\Run: [OBBrrzOONxAuS2b8234A] C:\Windows\system32\zfffRLL9hTqjU.exe
  1021. O4 - HKLM\..\Run: [QwwwjBPNycAuv28234A] C:\Windows\system32\CsssQQJ7dEK8RZh.exe
  1022. O4 - HKLM\..\Run: [dG4a6ssWJ8234A] C:\Windows\system32\HkkIVlNtxco.exe
  1023. O4 - HKLM\..\Run: [jDQ7ffL9gT8234A] C:\Windows\system32\gLgqYeIrONt.exe
  1024. O4 - HKLM\..\Run: [LqjjCCwkIVOtP08234A] C:\Windows\system32\KVVrzzONuS2aQ6W.exe
  1025. O4 - HKLM\..\Run: [e33ppnG4aQHsW7L8234A] C:\Windows\system32\FzzzONNtxA0c.exe
  1026. O4 - HKLM\..\Run: [ZF3ppnG5QH6d8234A] C:\Windows\system32\KqqjjCekIBzOy.exe
  1027. O4 - HKLM\..\Run: [wF33pmG5aQJ6dKf8234A] C:\Windows\system32\tsJdKR9TwU.exe
  1028. O4 - HKLM\..\Run: [nvDD22oF4pm58234A] C:\Windows\system32\I0yyccA1i.exe
  1029. O4 - HKLM\..\Run: [AttxxPucS1ib3nG8234A] C:\Windows\system32\eqjjYYCwkIV.exe
  1030. O4 - HKLM\..\Run: [B99hTTXqjCekBzy8234A] C:\Windows\system32\xNyyx1FF3pG5QJ.exe
  1031. O4 - HKLM\..\Run: [jBttzPNycvDob4m8234A] C:\Windows\system32\kRRZZ9hYYXj.exe
  1032. O4 - HKLM\..\Run: [TnFFF4amH8234A] C:\Windows\system32\PlllOBttx0ySvD.exe
  1033. O4 - HKLM\..\Run: [gpnnG4aQQHsWKEL8234A] C:\Windows\system32\hNNNtxxA0uc2.exe
  1034. O4 - HKLM\..\Run: [p5aaQQJ6WK8fR9T8234A] C:\Windows\system32\cSSS2oobF3pG.exe
  1035. O4 - HKLM\..\Run: [iYYXXwjUeIBzNyA8234A] C:\Windows\system32\knF4ppmHJ7d.exe
  1036. O4 - HKLM\..\Run: [AyyycS1ivD3o8234A] C:\Windows\system32\PffEEL8gTZwUlO.exe
  1037. O4 - HKLM\..\Run: [opnnG4QQH6sK7E8234A] C:\Windows\system32\eeeekIIVrzONxAu.exe
  1038. O4 - HKLM\..\Run: [UccAA1uvD2ob4pG8234A] C:\Windows\system32\eYYXXwjjUVeIBz.exe
  1039. O4 - HKLM\..\Run: [RjjjYCCekIrzOt8234A] C:\Windows\system32\i33ppnGG5aH6dKf.exe
  1040. O4 - HKLM\..\Run: [AUUUVeelIBtPNc18234A] C:\Windows\system32\N444pmmH5QJ7E8Z.exe
  1041. O4 - HKLM\..\Run: [tNttxxP0ucS1bDo8234A] C:\Windows\system32\xZqqjjYCwkI.exe
  1042. O4 - HKLM\..\Run: [PBBrzzPNyxA1vSb8234A] C:\Windows\system32\L6dEKK8fRZhTwjC.exe
  1043. O4 - HKLM\..\Run: [PkkUVrrlOBtx0y8234A] C:\Windows\system32\f444ammH6sJ7fLg.exe
  1044. O4 - HKLM\..\Run: [j666dWWK8fR9hXq8234A] C:\Windows\system32\kSS22obbF3pG5Q.exe
  1045. O4 - HKLM\..\Run: [jmmmH55sWJ7dL8R8234A] C:\Windows\system32\f11iivD33n.exe
  1046. O4 - HKLM\..\Run: [kONNNAuuv2ibFpG8234A] C:\Windows\system32\zhhTTXqjUCkIr.exe
  1047. O4 - HKLM\..\Run: [EFpHsJdgRZhYX8234A] C:\Windows\system32\vkkUUVeelOz0c1v.exe
  1048. O4 - HKLM\..\Run: [rHH6sWJ7fELg8234A] C:\Windows\system32\s66sW7fL9gqYIOx.exe
  1049. O4 - HKLM\..\Run: [SwwjjUCCel8234A] C:\Windows\system32\issQQJ6ddK8fR9T.exe
  1050. O4 - HKLM\..\Run: [RJJJ7fEEL8gZhCk8234A] C:\Windows\system32\oxPP00ucS1iDoGa.exe
  1051. O4 - HKLM\..\Run: [svvvD22obF4mGsJ8234A] C:\Windows\system32\wwwwjUUVBtzcA.exe
  1052. O4 - HKLM\..\Run: [ammHH6sWJfE8g8234A] C:\Windows\system32\UqjjYCCwkVr.exe
  1053. O4 - HKLM\..\Run: [HppmmG55aQ68234A] C:\Windows\system32\hIIIBBrzPNyx1uS.exe
  1054. O4 - HKLM\..\Run: [DtxxP00ycSivDoF8234A] C:\Windows\system32\dELL88gTZqhCwkV.exe
  1055. O4 - HKLM\..\Run: [FfRRLL9hTXqjCeI8234A] C:\Windows\system32\ypppmGG5aQJ6WK.exe
  1056. O4 - HKLM\..\Run: [K5ssWWJ7dEL8RZh8234A] C:\Windows\system32\B00ycSS1ivDon4m.exe
  1057. O4 - HKLM\..\Run: [d33ppnGG5aH68234A] C:\Windows\system32\vekkIIBzONyx0uS.exe
  1058. O4 - HKLM\..\Run: [BeeelOBtzP0yAiv8234A] C:\Windows\system32\T88gRqqYX.exe
  1059. O4 - HKLM\..\Run: [eTTXqqjYCeI8234A] C:\Windows\system32\W33ppnGG5aH6dKf.exe
  1060. O4 - HKLM\..\Run: [jcAA1ivvD28234A] C:\Windows\system32\wXXXwkkUVelBtP0.exe
  1061. O4 - HKLM\..\Run: [ODDD3ppnGaQH68234A] C:\Windows\system32\EYYYCeekIVrONx0.exe
  1062. O4 - HKLM\..\Run: [IQJ6dEKK8fZ9TXj8234A] C:\Windows\system32\AVVelIBtzPyc1v2.exe
  1063. O4 - HKLM\..\Run: [ennGG4aQH6sWKf8234A] C:\Windows\system32\ozzzOONtxA0uS2b.exe
  1064. O4 - HKLM\..\Run: [dffRRZ9hTXwjCeI8234A] C:\Windows\system32\g44ppmG5sQJ6dK.exe
  1065. O4 - HKLM\..\Run: [caammH66sW7fL8T8234A] C:\Windows\system32\lSS1iibD3.exe
  1066. O4 - HKLM\..\Run: [ZvvS22obF8234A] C:\Windows\system32\PwwjjUCelIBrPy.exe
  1067. O4 - HKLM\..\Run: [elllOBBtxP0cSiv8234A] C:\Windows\system32\WJJ77fELLgTZqYw.exe
  1068. O4 - HKLM\..\Run: [pOONNyxAAuvS2b38234A] C:\Windows\system32\QTTXXqjjCek.exe
  1069. O4 - HKLM\..\Run: [WsssQJJ7dK8gZ9Y8234A] C:\Windows\system32\nDD22onn4.exe
  1070. O4 - HKLM\..\Run: [g777fEL9gZqjCIr8234A] C:\Windows\system32\LAAA0ccSib3pGaQ.exe
  1071. O4 - HKLM\..\Run: [rSSS2oobF3pm5aJ8234A] C:\Windows\system32\GellIIBrzP.exe
  1072. O4 - HKLM\..\Run: [HLL88gRZZqYXwU8234A] C:\Windows\system32\hiiDD3on4am5sW7.exe
  1073. O4 - HKLM\..\Run: [tCCCeekIVrzOtx08234A] C:\Windows\system32\InnGG5aaQHdWKfR.exe
  1074. O4 - HKLM\..\Run: [iBttzPP0yA1vDo48234A] C:\Windows\system32\VELL88gRZqYX.exe
  1075. O4 - HKLM\..\Run: [ikkIIVrrzONxAuS8234A] C:\Windows\system32\LKKK7ffL9gT.exe
  1076. O4 - HKLM\..\Run: [LbbF44pmG5sQ6d8234A] C:\Windows\system32\DjUUVelIIBzPNc1.exe
  1077. O4 - HKLM\..\Run: [uONNtxxP0uS1bDo8234A] C:\Windows\system32\K99ggTZZqjCwk.exe
  1078. O4 - HKLM\..\Run: [ueeIIBrzPyxAuv28234A] C:\Windows\system32\b88ffRZ9hTX.exe
  1079. O4 - HKLM\..\Run: [qonnFF4pm8234A] C:\Windows\system32\yeellOBtzP0yA1.exe
  1080. O4 - HKLM\..\Run: [bGG4aaQH6sW8234A] C:\Windows\system32\UVrrzzONtxA0cS.exe
  1081. O4 - HKLM\..\Run: [pXwjjUCelIBzPyA8234A] C:\Windows\system32\XsQQJ66dEK8RZ.exe
  1082. O4 - HKLM\..\Run: [kJ77fEELgTZqYC8234A] C:\Windows\system32\TnnGG4amH.exe
  1083. O4 - HKLM\..\Run: [CqqUUCekIBzNyA08234A] C:\Windows\system32\kaQQJ6ddK8f.exe
  1084. O4 - HKLM\..\Run: [CRRRZqqhYXwkVeO8234A] C:\Windows\system32\fmmHH5sWW7.exe
  1085. O4 - HKLM\..\Run: [nhhTTXqjUCeIrzN8234A] C:\Windows\system32\lobbF3pmG5aJ6WK.exe
  1086. O4 - HKLM\..\Run: [acccAA1ivD2oF8234A] C:\Windows\system32\tggRRZqhhXwkUeO.exe
  1087. O4 - HKLM\..\Run: [SuucS2ibD3pGa8234A] C:\Windows\system32\qRRRL9gTXqjYekr.exe
  1088. O4 - HKLM\..\Run: [tbbbF44pmG5QJdK8234A] C:\Windows\system32\BjjUUVelIBtPNc1.exe
  1089. O4 - HKLM\..\Run: [GS11iibD3onGa8234A] C:\Windows\system32\OTTZZjYCwIVrlNx.exe
  1090. O4 - HKLM\..\Run: [lhhTXqqjUCeI8234A] C:\Windows\system32\SUUUCeelIBzPNxA.exe
  1091. O4 - HKLM\..\Run: [jeeelBBtzP0yA1v8234A] C:\Windows\system32\BggRRZqhYw.exe
  1092. O4 - HKLM\..\Run: [GggTXXqjYC8234A] C:\Windows\system32\T33ppnGG5aH6dKf.exe
  1093. O4 - HKLM\..\Run: [T44pmGG5sQJd8234A] C:\Windows\system32\zIIIBttzPNyc1uD.exe
  1094. O4 - HKLM\..\Run: [wmmHH6sWJ7fE88234A] C:\Windows\system32\qIIIVVrlONtx0uS.exe
  1095. O4 - HKLM\..\Run: [C9hhTXXqjUCkIrz8234A] C:\Windows\system32\VGG55aQJ6dWK.exe
  1096. O4 - HKLM\..\Run: [uBBttxP0ycS18234A] C:\Windows\system32\j77ffELL8gTqYCk.exe
  1097. O4 - HKLM\..\Run: [ZAA00uvvS2iF3nG8234A] C:\Windows\system32\hXqqjjUCekIBzOy.exe
  1098. O4 - HKLM\..\Run: [pzPP00ycA1iv8234A] C:\Windows\system32\hgggRZqhYwkUVlB.exe
  1099. O4 - HKLM\..\Run: [yOONNtxA0uc8234A] C:\Windows\system32\XffRRL99gTqjYeI.exe
  1100. O4 - HKLM\..\Run: [spppmG55sJ6EKfR8234A] C:\Windows\system32\mUUVVelIBtzNyAu.exe
  1101. O4 - HKLM\..\Run: [aJJ7ddEK8gRZhjV8234A] C:\Windows\system32\VVeelOOBtzP0cAi.exe
  1102. O4 - HKLM\..\Run: [RsssWJ7fEL88234A] C:\Windows\system32\SWWKK7ffELgTqjC.exe
  1103. O4 - HKLM\..\Run: [EL99ggTZqjYwkVr8234A] C:\Windows\system32\FIIVVrzzOtA0uSi.exe
  1104. O4 - HKLM\..\Run: [o5ssQQJdEKgZYXk8234A] C:\Windows\system32\DwwwkUUVrlO.exe
  1105. O4 - HKLM\..\Run: [RvDD22onF4pm5s8234A] C:\Windows\system32\hVVVellOBtzPyA1.exe
  1106. O4 - HKLM\..\Run: [GSSiibDpnG4Q6W78234A] C:\Windows\system32\bRRRL99gTIVztAu.exe
  1107. O4 - HKLM\..\Run: [l555sWWJ7dE8gRq8234A] C:\Windows\system32\eLL99gTTXqjCeIV.exe
  1108. O4 - HKLM\..\Run: [T44ppmHH5sJ7dK88234A] C:\Windows\system32\hzzzPP0ycA1iD2n.exe
  1109. O4 - HKLM\..\Run: [z2oonnF4pmH5QJd8234A] C:\Windows\system32\UddEL8ggRZqYXkU.exe
  1110. O4 - HKLM\..\Run: [rFF33pnG5aQ6dK78234A] C:\Windows\system32\X000uvv2ib.exe
  1111. O4 - HKLM\..\Run: [ummGG5aaQ8234A] C:\Windows\system32\JNNNyyxA1uvSob3.exe
  1112. O4 - HKLM\..\Run: [G777dEEL8gRZh8234A] C:\Windows\system32\VmmHH5sWW.exe
  1113. O4 - HKLM\..\Run: [XIIVVrzzONxA0cS8234A] C:\Windows\system32\CffRRL99gTqjYe.exe
  1114. O4 - HKLM\..\Run: [hKKK8ffRZ8234A] C:\Windows\system32\cDDD2oobF4m5sJ6.exe
  1115. O4 - HKLM\..\Run: [n11iivDD38234A] C:\Windows\system32\ZwkkUUVrlOBtP0c.exe
  1116. O4 - HKLM\..\Run: [y1uuvvS2obF3mGa8234A] C:\Windows\system32\QwjjUCelIBrPNx.exe
  1117. O4 - HKLM\..\Run: [J777ddEL8gRZhYw8234A] C:\Windows\system32\FnnFF4aamH5W.exe
  1118. O4 - HKLM\..\Run: [gHHH66sWK7f8234A] C:\Windows\system32\P000uucS2ibDpn4.exe
  1119. O4 - HKLM\..\Run: [ywjjUUCelIBrzNx8234A] C:\Windows\system32\SddEEK8ffR9hT.exe
  1120. O4 - HKLM\..\Run: [xkkUUVeelOBzPyc8234A] C:\Windows\system32\HWWJJ7ddEL8RZhX.exe
  1121. O4 - HKLM\..\Run: [TuuuccS2i8234A] C:\Windows\system32\qjjYYCeekIrzOtx.exe
  1122. O4 - HKLM\..\Run: [vzPPNNyxA1uv2oF8234A] C:\Windows\system32\d88fRRZ9hTXjUeB.exe
  1123. O4 - HKLM\..\Run: [JRRRZZqhYXwkVeO8234A] C:\Windows\system32\F55ssWJJ7dL8.exe
  1124. O4 - HKLM\..\Run: [F66ssWKK78234A] C:\Windows\system32\puuccS2ibD3pn4Q.exe
  1125. O4 - HKLM\..\Run: [qFFF3ppmG5aQ6dK8234A] C:\Windows\system32\cBrrrzPNyxA1uSo.exe
  1126. O4 - HKLM\..\Run: [CyyycSS1ivD3nFa8234A] C:\Windows\system32\fwkkUUVrlOBtP.exe
  1127. O4 - HKLM\..\Run: [Na6W7LgqYCwIlNx8234A] C:\Windows\system32\nrrrzOONxui3.exe
  1128. O4 - HKLM\..\Run: [WNyyxAA0uvSib3p8234A] C:\Windows\system32\LXXXqjjUCekIrz.exe
  1129. O4 - HKLM\..\Run: [U66ddEKKfRZ9Tw8234A] C:\Windows\system32\vA11uuvD2obFpm5.exe
  1130. O4 - HKLM\..\Run: [RnnnF44amH5sJ7E8234A] C:\Windows\system32\XxxPP0yycS1vD.exe
  1131. O4 - HKLM\..\Run: [wibbDD3pnG4aH8234A] C:\Windows\system32\aAAA0uucS2.exe
  1132. O4 - HKLM\..\Run: [nFF44pmGGsQJ6E88234A] C:\Windows\system32\wAA11uvvD2.exe
  1133. O4 - HKLM\..\Run: [x333onnG4amHsW8234A] C:\Windows\system32\fuuucSS1ib.exe
  1134. O4 - HKLM\..\Run: [zJ66ddWK8fRL9Tq8234A] C:\Windows\system32\q222obbF3pmG.exe
  1135. O4 - HKLM\..\Run: [uELL88gRZqhYwkV8234A] C:\Windows\system32\bnnnF44amH5sJ7.exe
  1136. O4 - HKLM\..\Run: [JJJJ6ddWK8fR9hX8234A] C:\Windows\system32\FooobFF3pmG5.exe
  1137. O4 - HKLM\..\Run: [bccSS1ivv3onFaH8234A] C:\Windows\system32\pCCCwkkUVrlOtx0.exe
  1138. O4 - HKLM\..\Run: [tqqjjUCCekIrz8234A] C:\Windows\system32\a55aaQJ66dK8fLh.exe
  1139. O4 - HKLM\..\Run: [XIIBBtzzPNyA18234A] C:\Windows\system32\jKKK8ggRZ9hYwUV.exe
  1140. O4 - HKLM\..\Run: [BiivvD3oon4aH5W8234A] C:\Windows\system32\QttxxP0ycS1.exe
  1141. O4 - HKLM\..\Run: [fbbbD33pnGH7E8234A] C:\Windows\system32\uA00ucS22.exe
  1142. O4 - HKLM\..\Run: [cAA00uccS2iD8234A] C:\Windows\system32\uqqqjYYCekIVzOt.exe
  1143. O4 - HKLM\..\Run: [wzzOONyyxA0vSib8234A] C:\Windows\system32\vRRRLL9hTXqjCeI.exe
  1144. O4 - HKLM\..\Run: [UeellIBBrzPyx1u8234A] C:\Windows\system32\fffRRZ99hTXjU.exe
  1145. O4 - HKLM\..\Run: [nVeeelOBtzP08234A] C:\Windows\system32\Z7ddEEL8gRZqYXk.exe
  1146. O4 - HKLM\..\Run: [R444ammH6sWJfE88234A] C:\Windows\system32\X00uucS11iD3o.exe
  1147. O4 - HKLM\..\Run: [xWWWK77fRL9gXqY8234A] C:\Windows\system32\SbFFF3pnG5aQH.exe
  1148. O4 - HKLM\..\Run: [cooobbF4p8234A] C:\Windows\system32\JlllIBBtzPNyA1v.exe
  1149. O4 - HKLM\..\Run: [JYYYXwwkUVeOBzP8234A] C:\Windows\system32\F77ddELL8gZq.exe
  1150. O4 - HKLM\..\Run: [VeellOBtz8234A] C:\Windows\system32\ldEELL8gRZqhXwU.exe
  1151. O4 - HKLM\..\Run: [YiibbD33onGam8234A] C:\Windows\system32\wkIIIVrlONtxPuS.exe
  1152. O4 - HKLM\..\Run: [ZKKK7ffRL9gXqYC8234A] C:\Windows\system32\JppnnG55aQHd.exe
  1153. O4 - HKLM\..\Run: [NNyyccA1uvD8234A] C:\Windows\system32\AhhhYXXwjUVeIBz.exe
  1154. O4 - HKLM\..\Run: [v33oonFF4aH5s8234A] C:\Windows\system32\KrlllOBtxP0yc1v.exe
  1155. O4 - HKLM\..\Run: [k11iibDD3on4aH68234A] C:\Windows\system32\DwwkkIVVrlOtx0u.exe
  1156. O4 - HKLM\..\Run: [XggTTZqqjYCkIrl8234A] C:\Windows\system32\C444aQQH6sW7fE.exe
  1157. O4 - HKLM\..\Run: [PDD33ppnG4aH6W8234A] C:\Windows\system32\E000uccS2i.exe
  1158. O4 - HKLM\..\Run: [NQQQH66dWK78234A] C:\Windows\system32\txAAA0uvS2ibFpG.exe
  1159. O4 - HKLM\..\Run: [WAA11uvSS8234A] C:\Windows\system32\VXXwwjUCCeIBrPy.exe
  1160. O4 - HKLM\..\Run: [jVVVellIBt8234A] C:\Windows\system32\S777dEEK8gR9hYw.exe
  1161. O4 - HKLM\..\Run: [mHH55sWWJ7dL8RZ8234A] C:\Windows\system32\eDDD3oonF4a.exe
  1162. O4 - HKLM\..\Run: [JwwwkUUVrlOBxPy8234A] C:\Windows\system32\FEELL8ggTZqY.exe
  1163. O4 - HKLM\..\Run: [AiibbD3pn8234A] C:\Windows\system32\ukIIVVrzONtx0uS.exe
  1164. O4 - HKLM\..\Run: [zdddWKK8fRLhT8234A] C:\Windows\system32\WGG55aQQJ.exe
  1165. O4 - HKLM\..\Run: [VPPPNyyxA1uv2oF8234A] C:\Windows\system32\ZwwjjUCCelIr.exe
  1166. O4 - HKLM\..\Run: [gsssWJJ7dELgRq8234A] C:\Windows\system32\innnF44amH.exe
  1167. O4 - HKLM\..\Run: [rbbbD33onG4aH6W8234A] C:\Windows\system32\XPPP00ucS1.exe
  1168. O4 - HKLM\..\Run: [f6sssWK7fEL9g8234A] C:\Windows\system32\cnGG44aQH.exe
  1169. O4 - HKLM\..\Run: [EddEEK88fR8234A] C:\Windows\system32\BvvDD2oobFpmGsQ.exe
  1170. O4 - HKLM\..\Run: [DXXwwjUVVeIBtPy8234A] C:\Windows\system32\nsssQQJ7dEK8RZh.exe
  1171. O4 - HKLM\..\Run: [bssWWJ77fEL8234A] C:\Windows\system32\LcSS11ibD3on4aH.exe
  1172. O4 - HKLM\..\Run: [uLL99hTTXqjCeIB8234A] C:\Windows\system32\PJJJ6ddWK8f.exe
  1173. O4 - HKLM\..\Run: [CnFF44pmH5sQJdK8234A] C:\Windows\system32\oyyccA1iiv2.exe
  1174. O4 - HKLM\..\Run: [cEEELL9gT8234A] C:\Windows\system32\JDDD3ppnG4aH6sK.exe
  1175. O4 - HKLM\..\Run: [xjjUUCCelIBzPy8234A] C:\Windows\system32\HQQJ66dEK8fR9hX.exe
  1176. O4 - HKLM\..\Run: [vDD33onnF48234A] C:\Windows\system32\KVVrrlOBBxP0ySi.exe
  1177. O4 - HKLM\..\Run: [kdddWWK7fRL9TXj8234A] C:\Windows\system32\R333pnnG5aQ.exe
  1178. O4 - HKLM\..\Run: [pmmHH5sQQ8234A] C:\Windows\system32\ZNNNyycA1uvDon4.exe
  1179. O4 - HKLM\..\Run: [vVVVrllONtx0uS18234A] C:\Windows\system32\offEEL9ggZqjYw.exe
  1180. O4 - HKLM\..\Run: [cAA11uvvS2oF8234A] C:\Windows\system32\QTXXwwjUCelIrzN.exe
  1181. O4 - HKLM\..\Run: [NgggRRZqhYX8234A] C:\Windows\system32\xnnnF44amH5WJ7E.exe
  1182. O4 - HKLM\..\Run: [prrrzOONtxAuc2i8234A] C:\Windows\system32\uTTXXqjYYCkI.exe
  1183. O4 - HKLM\..\Run: [RfffRZZ9hTwjUeI8234A] C:\Windows\system32\XpmmGG5sQJ6dK.exe
  1184. O4 - HKLM\..\Run: [UrllOONtxP0uS1b8234A] C:\Windows\system32\LZZqqjYYCwI.exe
  1185. O4 - HKLM\..\Run: [wfffRLL9hTjUekB8234A] C:\Windows\system32\OmmmG55aQJ6WK.exe
  1186. O4 - HKLM\..\Run: [SFF44pmmH5QJ7EK8234A] C:\Windows\system32\DzPP00ycA1iv2o.exe
  1187. O4 - HKLM\..\Run: [YIVVrrlONtxPuc18234A] C:\Windows\system32\CEEEL99gTZqjCw.exe
  1188. O4 - HKLM\..\Run: [C66ddEKK8fR8234A] C:\Windows\system32\e11uuvDD2oF4pG5.exe
  1189. O4 - HKLM\..\Run: [JYYCCwkkIVlONx08234A] C:\Windows\system32\F7ffEEL9gTZq.exe
  1190. O4 - HKLM\..\Run: [XXqqqjUCekIBr8234A] C:\Windows\system32\YaaQQJ66dWKfR9h.exe
  1191. O4 - HKLM\..\Run: [sJJJ7ddEK8gR9hX8234A] C:\Windows\system32\oonnFF4pmH5.exe
  1192. O4 - HKLM\..\Run: [FGG4aamH68234A] C:\Windows\system32\ElllONNtxPuS1.exe
  1193. O4 - HKLM\..\Run: [QQJJ66dWK8f8234A] C:\Windows\system32\d111uvvS2obFpm5.exe
  1194. O4 - HKLM\..\Run: [hyccAA1ivD2o8234A] C:\Windows\system32\nOBBttzP0.exe
  1195. O4 - HKLM\..\Run: [wsssWKK7fELgTqj8234A] C:\Windows\system32\DSS22ibbD3nG4Q.exe
  1196. O4 - HKLM\..\Run: [QAA11uvSS2bF3mG8234A] C:\Windows\system32\dwwwjUUCelIrzPy.exe
  1197. O4 - HKLM\..\Run: [cvD22o4pmH78gly8234A] C:\Windows\system32\veeelOBBtzPyc.exe
  1198. O4 - HKLM\..\Run: [rgTTZZqjYCwkIrO8234A] C:\Windows\system32\qHH66sWKK7EL.exe
  1199. O4 - HKLM\..\Run: [kDDD2oobF4mGsJd8234A] C:\Windows\system32\ujjjUVVelItzNyA.exe
  1200. O4 - HKLM\..\Run: [VBBBtxxP0ycSiv38234A] C:\Windows\system32\NTTZZqhYYCkUVl.exe
  1201. O4 - HKLM\..\Run: [IgTTXXqjY8234A] C:\Windows\system32\FpnnnG5aQH6dW7R.exe
  1202. O4 - HKLM\..\Run: [QEEEK8ffZ9hXwUC8234A] C:\Windows\system32\b44ppmGG5sQ.exe
  1203. O4 - HKLM\..\Run: [TvDD33onF4am5sJ8234A] C:\Windows\system32\WBBttxP0ycSi.exe
  1204. O4 - HKLM\..\Run: [ixxAA0ucc28234A] C:\Windows\system32\ETTXXqjjYCeIVzO.exe
  1205. O4 - HKLM\..\Run: [n66ddEK88RZ9hXj8234A] C:\Windows\system32\H222obbF4pmGsQ.exe
  1206. O4 - HKLM\..\Run: [yoonnF44a5s8234A] C:\Windows\system32\NwkkUUVrlOBtP0.exe
  1207. O4 - HKLM\..\Run: [fS22iibD3pGasW78234A] C:\Windows\system32\DqqjjYCCIVrzOt0.exe
  1208. O4 - HKLM\..\Run: [VOONNyxA1uvSo5a8234A] C:\Windows\system32\gTTTXqqjUCekBr.exe
  1209. O4 - HKLM\..\Run: [pBzPNycA1uv28234A] C:\Windows\system32\z77dEKgRZ9YXwUe.exe
  1210. O4 - HKLM\..\Run: [x00yc1ivD3o8234A] C:\Windows\system32\ZgTTZqqhYCkUVlt.exe
  1211. O4 - HKLM\..\Run: [Yx00uvvS2n8234A] C:\Windows\system32\ZK8ffRL9hTXI.exe
  1212. O4 - HKLM\..\Run: [Q4pmmsQ78Z9UeIt8234A] C:\Windows\system32\DAA11ivvD2o.exe
  1213. O4 - HKLM\..\Run: [CkVVrrlOBtP8234A] C:\Windows\system32\S66ssWJ7EL8TZhC.exe
  1214. O4 - HKLM\..\Run: [rIBBrzzONyx08234A] C:\Windows\system32\fJJ6WK8fRLhXqUC.exe
  1215. O4 - HKLM\..\Run: [TlBttPP0yc1i8234A] C:\Windows\system32\PdEEL88gRZqYXkU.exe
  1216. O4 - HKLM\..\Run: [NjjYCCekIVrzNtA8234A] C:\Windows\system32\PHHH6ddWK7R9gX.exe
  1217. O4 - HKLM\..\Run: [DKK88gRZ9hYXwUe8234A] C:\Windows\system32\x4mmH5sQJ7d.exe
  1218. O4 - HKLM\..\Run: [ZYYCCwkkUVrONxP8234A] C:\Windows\system32\J77ffEL8gTZq.exe
  1219. O4 - HKLM\..\Run: [nv223pnGa8234A] C:\Windows\system32\RjUUCekIIBzNyA.exe
  1220. O4 - HKLM\..\Run: [KzzP00ycA1vDon48234A] C:\Windows\system32\phhYYXwkkUel.exe
  1221. O4 - HKLM\..\Run: [KxxPP0ccS1iD3nG8234A] C:\Windows\system32\VggTqqjYCwkIrlN.exe
  1222. O4 - HKLM\..\Run: [JxxAA0uvS2iF8234A] C:\Windows\system32\VhTXXqjUCekIrzN.exe
  1223. O4 - HKLM\..\Run: [IHH55QJJ7dKgR9Y8234A] C:\Windows\system32\heeelOOBzP0c1iD.exe
  1224. O4 - HKLM\..\Run: [CL99ggZqjYC8234A] C:\Windows\system32\SbbDD3pnn4aQ6W7.exe
  1225. O4 - HKLM\..\Run: [OTXwwjUCelIBr8234A] C:\Windows\system32\npppmGG5sQ6dK8R.exe
  1226. O4 - HKLM\..\Run: [KF44aamH5sW7d8234A] C:\Windows\system32\fBBtxxP0ycS1vDo.exe
  1227. O4 - HKLM\..\Run: [ckkkIVrzONtA8234A] C:\Windows\system32\WddWWK7ffR9gXqY.exe
  1228. O4 - HKLM\..\Run: [g88ggRZZ9hXwUVl8234A] C:\Windows\system32\Y4ppmmH5sQJ7E.exe
  1229. O4 - HKLM\..\Run: [eXXqqjCekrONtA08234A] C:\Windows\system32\b55aaQHdWK7fLg.exe
  1230. O4 - HKLM\..\Run: [GUUVVelIBt8234A] C:\Windows\system32\TssQJJ7dK8RZhYw.exe
  1231. O4 - HKLM\..\Run: [GqqqjYYCwkVrlNx8234A] C:\Windows\system32\QQHH66sWK7fE9g.exe
  1232. O4 - HKLM\..\Run: [cnGG5aQH6dWKfR98234A] C:\Windows\system32\l0uuvvS2ibF3.exe
  1233. O4 - HKLM\..\Run: [FwjjUUVelItzPyA8234A] C:\Windows\system32\uDD22oF4pH5QERh.exe
  1234. O4 - HKLM\..\Run: [JhYYCCwkU8234A] C:\Windows\system32\VammH6sWJ7fELgZ.exe
  1235. O4 - HKLM\..\Run: [kxAA00uvS2ib3pG8234A] C:\Windows\system32\bhTTXqqjUCeIBzN.exe
  1236. O4 - HKLM\..\Run: [rQQQJ7dEKghw8234A] C:\Windows\system32\pcccA11ivD2nFpm.exe
  1237. O4 - HKLM\..\Run: [ssssQJJ6dEK8234A] C:\Windows\system32\jyyycA11uv2oF4m.exe
  1238. O4 - HKLM\..\Run: [LrrOONtxP0c1iD38234A] C:\Windows\system32\OKK77fEL9gqjC.exe
  1239. O4 - HKLM\..\Run: [WAA11uvSS2bF8234A] C:\Windows\system32\khTTXwwjUClIBPN.exe
  1240. O4 - HKLM\..\Run: [TDDD3oonF4aH5s78234A] C:\Windows\system32\KxxxP00cSi.exe
  1241. O4 - HKLM\..\Run: [S333pnGGaQH6WKR8234A] C:\Windows\system32\KBBrrzONyxAuv2b.exe
  1242. O4 - HKLM\..\Run: [xQQQJ77dK8gZ9Yw8234A] C:\Windows\system32\u1iivoon4pm5.exe
  1243. O4 - HKLM\..\Run: [fGGG4amH6sWJf8234A] C:\Windows\system32\lONNtxxP0uc1iD3.exe
  1244. O4 - HKLM\..\Run: [RVVrrONtx0uS2b38234A] C:\Windows\system32\zWK7ffRL9gTqY.exe
  1245. O4 - HKLM\..\Run: [EoobbF3ppm5aQ8234A] C:\Windows\system32\AAAA1uuvS.exe
  1246. O4 - HKLM\..\Run: [JssWWJ77dELgRqh8234A] C:\Windows\system32\eqqqhhYCwkUVlO.exe
  1247. O4 - HKLM\..\Run: [hiibbD33on4am6s8234A] C:\Windows\system32\dONNNtxP0ucS.exe
  1248. O4 - HKLM\..\Run: [BnnGG5aaQHdWK8234A] C:\Windows\system32\oIIBrrzONyA0uSi.exe
  1249. O4 - HKLM\..\Run: [DA11uuvS2obFpm8234A] C:\Windows\system32\YBBBrzzPNy.exe
  1250. O4 - HKLM\..\Run: [illlIBBtzPNyA1v8234A] C:\Windows\system32\z999hYYXwj.exe
  1251. O4 - HKLM\..\Run: [t77ddELL8gZqh8234A] C:\Windows\system32\mivvDD3onF4am5W.exe
  1252. O4 - HKLM\..\Run: [dammHH5sWJ7d8234A] C:\Windows\system32\A333oonF4.exe
  1253. O4 - HKLM\..\Run: [bnnGG4aamH6WJfL8234A] C:\Windows\system32\LOONNtxxP0cS1b3.exe
  1254. O4 - HKLM\..\Run: [nkkIIVrrzOtx8234A] C:\Windows\system32\TdWWKK7fRL9gXqY.exe
  1255. O4 - HKLM\..\Run: [cRLL99hTX8234A] C:\Windows\system32\u333pnnG5aQHdW7.exe
  1256. O4 - HKLM\..\Run: [FekkIIBrzONyA0v8234A] C:\Windows\system32\qLLL9hhTXqjU.exe
  1257. O4 - HKLM\..\Run: [fbbbF33pnG5aH6W8234A] C:\Windows\system32\OIIBBrzzONyA0vS.exe
  1258. O4 - HKLM\..\Run: [Y666ddWK7f8234A] C:\Windows\system32\wuuuvSS2ibF3nGa.exe
  1259. O4 - HKLM\..\Run: [ouvvSS2obF3pG5Q8234A] C:\Windows\system32\ZUUUCeelIBrzNyA.exe
  1260. O4 - HKLM\..\Run: [jP00yycA1ivDon48234A] C:\Windows\system32\RkkUUVeelOt.exe
  1261. O4 - HKLM\..\Run: [GYYCCwkkUVrOBxP8234A] C:\Windows\system32\kEEEL88gTZq.exe
  1262. O4 - HKLM\..\Run: [oIIIVrrlONt8234A] C:\Windows\system32\fWWKK7ffELgTqjC.exe
  1263. O4 - HKLM\..\Run: [voobbF33pmGaQ6d8234A] C:\Windows\system32\KllIIBrrzPyxAuS.exe
  1264. O4 - HKLM\..\Run: [GpmmmG5sQJ8234A] C:\Windows\system32\azPPNNycA1uv2oF.exe
  1265. O4 - HKLM\..\Run: [B000yccA1i8234A] C:\Windows\system32\zqqhhYXXwkUelBt.exe
  1266. O4 - HKLM\..\Run: [fucccS1ibD3on4m8234A] C:\Windows\system32\gCCwwkIVVrONtP.exe
  1267. O4 - HKLM\..\Run: [XaQQHH6dWK8234A] C:\Windows\system32\jxxAA0uvvSibFpG.exe
  1268. O4 - HKLM\..\Run: [fVVVellIBtzNyA18234A] C:\Windows\system32\O777dEEK8Z9hX.exe
  1269. O4 - HKLM\..\Run: [GZZZqhhYCwkVr8234A] C:\Windows\system32\a44aamHH6sW7fL8.exe
  1270. O4 - HKLM\..\Run: [fRRLL9gTTXjYCkV8234A] C:\Windows\system32\gpnnnG5aQH6dW7.exe
  1271. O4 - HKLM\..\Run: [YTTTXXwjUCelBrP8234A] C:\Windows\system32\LddEEK88fR9.exe
  1272. O4 - HKLM\..\Run: [LmmmH55sQJ7dK88234A] C:\Windows\system32\SDDD2oonF4.exe
  1273. O4 - HKLM\..\Run: [FL88ggRZqhYX8234A] C:\Windows\system32\p33oonFF4aH5sJ7.exe
  1274. O4 - HKLM\..\Run: [lgggTTZqj8234A] C:\Windows\system32\nppnnG44aQHsW7f.exe
  1275. O4 - HKLM\..\Run: [C22oobFpmG5QJdK8234A] C:\Windows\system32\wCCCeIBrzPNyA.exe
  1276. O4 - HKLM\..\Run: [hvvvD22onF4pH5Q8234A] C:\Windows\system32\dBBBtzzP0yc1.exe
  1277. O4 - HKLM\..\Run: [mLL88gTTZq8234A] C:\Windows\system32\X333onnG4amHsW7.exe
  1278. O4 - HKLM\..\Run: [hxxxP00yc8234A] C:\Windows\system32\ATTZZqhhYCkUVlO.exe
  1279. O4 - HKLM\..\Run: [u22iibDD38234A] C:\Windows\system32\WeekkIVrzONtx0c.exe
  1280. O4 - HKLM\..\Run: [lPPNNyccA1uD2bF8234A] C:\Windows\system32\XUUVVelIIB.exe
  1281. O4 - HKLM\..\Run: [L11iivD33oF4aH8234A] C:\Windows\system32\NCCwwkUVrlOBxPy.exe
  1282. O4 - HKLM\..\Run: [xnnnG44aQHsW7f8234A] C:\Windows\system32\RkkIIVrrzNtA0cb.exe
  1283. O4 - HKLM\..\Run: [JddWWK8fRL9hTqU8234A] C:\Windows\system32\zpmmmG5aQJ.exe
  1284. O4 - HKLM\..\Run: [hAAA1iivD2n4psQ8234A] C:\Windows\system32\HqqhhYXXwkUelBt.exe
  1285. O4 - HKLM\..\Run: [lvvDD3oon8234A] C:\Windows\system32\FUVVVrlOBtxP0c1.exe
  1286. O4 - HKLM\..\Run: [UXXqqjYCCeIVrON8234A] C:\Windows\system32\e555aHHdWK7fL9.exe
  1287. O4 - HKLM\..\Run: [uvvSS2oobFpmGaQ8234A] C:\Windows\system32\qhhhTXwjjClINx1.exe
  1288. O4 - HKLM\..\Run: [xpppmHH5sQJ8234A] C:\Windows\system32\aBBttzPPNyc1uD2.exe
  1289. O4 - HKLM\..\Run: [eOOOBBtxP0yS1iD8234A] C:\Windows\system32\D888ggTZqhYCkU.exe
  1290. O4 - HKLM\..\Run: [eggTTXqqjYC8234A] C:\Windows\system32\oppnnG5aQH6dW7R.exe
  1291. O4 - HKLM\..\Run: [bppnnG5aaH6dW7R8234A] C:\Windows\system32\GyyyxA0uuv2ib.exe
  1292. O4 - HKLM\..\Run: [cRRRZ99hT8234A] C:\Windows\system32\JFFF4ppmG5sQ6dK.exe
  1293. O4 - HKLM\..\Run: [IssWWJ7ddE8gRqY8234A] C:\Windows\system32\zSSS1iivD3oF4aH.exe
  1294. O4 - HKLM\..\Run: [jUUCCekkIBrOy8234A] C:\Windows\system32\n99hhTXqq.exe
  1295. O4 - HKLM\..\Run: [B111ivvD3o8234A] C:\Windows\system32\PkkkUUVrlOBtP0c.exe
  1296. O4 - HKLM\..\Run: [wvDDD2onF48234A] C:\Windows\system32\DVVVellOBtzPyc1.exe
  1297. O4 - HKLM\..\Run: [fttxxA0ucS2ib3n8234A] C:\Windows\system32\QCCeekIIVrz.exe
  1298. O4 - HKLM\..\Run: [l999hTTXwjUClIr8234A] C:\Windows\system32\hQQJJ6ddEKfR.exe
  1299. O4 - HKLM\..\Run: [t33oonG4amH6WJf8234A] C:\Windows\system32\yONNttxP0ucSib.exe
  1300. O4 - HKLM\..\Run: [JEEK88fZZ9TXwUe8234A] C:\Windows\system32\F44ppmGGsQJ6.exe
  1301. O4 - HKLM\..\Run: [lmmmH55sW8234A] C:\Windows\system32\nxxPP0ycS1iD3nF.exe
  1302. O4 - HKLM\..\Run: [h222ibbD3pnGaH68234A] C:\Windows\system32\xCCeekIIVrzNtA0.exe
  1303. O4 - HKLM\..\Run: [p888ffRL9hXqUCk8234A] C:\Windows\system32\aF33ppmG5aQJ6.exe
  1304. O4 - HKLM\..\Run: [FRRZZ9hhYXjUVlI8234A] C:\Windows\system32\A55sQQJ7dEK8.exe
  1305. O4 - HKLM\..\Run: [QrrrzOONtxA0c28234A] C:\Windows\system32\zjjjYCCekI.exe
  1306. O4 - HKCU\..\Run: [LightScribe Control Panel] C:\Program Files (x86)\Common Files\LightScribe\LightScribeControlPanel.exe -hidden
  1307. O4 - HKCU\..\Run: [HPADVISOR] C:\Program Files (x86)\Hewlett-Packard\HP Advisor\HPAdvisor.exe view=DOCKVIEW
  1308. O4 - HKCU\..\Run: [swg] "C:\Program Files (x86)\Google\GoogleToolbarNotifier\GoogleToolbarNotifier.exe"
  1309. O4 - HKCU\..\Run: [Sidebar] C:\Program Files\Windows Sidebar\sidebar.exe /autoRun
  1310. O4 - Startup: Advanced Registry Optimizer.lnk = C:\Program Files (x86)\Advanced Registry Optimizer\ARO.exe
  1311. O4 - Startup: OneNote 2007 Screen Clipper and Launcher.lnk = C:\Program Files (x86)\Microsoft Office\Office12\ONENOTEM.EXE
  1312. O4 - Startup: OpenOffice.org 3.2.lnk = C:\Program Files (x86)\OpenOffice.org 3\program\quickstart.exe
  1313. O4 - Global Startup: HP Digital Imaging Monitor.lnk = C:\Program Files (x86)\HP\Digital Imaging\bin\hpqtra08.exe
  1314. O8 - Extra context menu item: Add to Google Photos Screensa&ver - res://C:\Windows\system32\GPhotos.scr/200
  1315. O8 - Extra context menu item: E&xport to Microsoft Excel - res://C:\PROGRA~2\MICROS~4\Office12\EXCEL.EXE/3000
  1316. O8 - Extra context menu item: Free YouTube Download - C:\Users\Stace\AppData\Roaming\DVDVideoSoftIEHelpers\freeyoutubedownload.htm
  1317. O8 - Extra context menu item: Free YouTube to Mp3 Converter - C:\Users\Stace\AppData\Roaming\DVDVideoSoftIEHelpers\freeyoutubetomp3converter.htm
  1318. O8 - Extra context menu item: Google Sidewiki... - res://C:\Program Files (x86)\Google\Google Toolbar\Component\GoogleToolbarDynamic_mui_en_7461B1589E8B4FB7.dll/cmsidewiki.html
  1319. O9 - Extra button: Blog This - {219C3416-8CB2-491a-A3C7-D9FCDDC9D600} - C:\Program Files (x86)\Windows Live\Writer\WriterBrowserExtension.dll
  1320. O9 - Extra 'Tools' menuitem: &Blog This in Windows Live Writer - {219C3416-8CB2-491a-A3C7-D9FCDDC9D600} - C:\Program Files (x86)\Windows Live\Writer\WriterBrowserExtension.dll
  1321. O9 - Extra button: Send to OneNote - {2670000A-7350-4f3c-8081-5663EE0C6C49} - C:\PROGRA~2\MICROS~4\Office12\ONBttnIE.dll
  1322. O9 - Extra 'Tools' menuitem: S&end to OneNote - {2670000A-7350-4f3c-8081-5663EE0C6C49} - C:\PROGRA~2\MICROS~4\Office12\ONBttnIE.dll
  1323. O9 - Extra button: Skype Plug-In - {898EA8C8-E7FF-479B-8935-AEC46303B9E5} - C:\Program Files (x86)\Skype\Toolbars\Internet Explorer\skypeieplugin.dll
  1324. O9 - Extra 'Tools' menuitem: Skype Plug-In - {898EA8C8-E7FF-479B-8935-AEC46303B9E5} - C:\Program Files (x86)\Skype\Toolbars\Internet Explorer\skypeieplugin.dll
  1325. O9 - Extra button: Research - {92780B25-18CC-41C8-B9BE-3C9C571A8263} - C:\PROGRA~2\MICROS~4\Office12\REFIEBAR.DLL
  1326. O9 - Extra button: Show or hide HP Smart Web Printing - {DDE87865-83C5-48c4-8357-2F5B1AA84522} - C:\Program Files (x86)\HP\Digital Imaging\Smart Web Printing\hpswp_BHO.dll
  1327. O16 - DPF: {8100D56A-5661-482C-BEE8-AFECE305D968} (Facebook Photo Uploader 5 Control) - http://upload.facebook.com/controls/2009.07.28_v5.5.8.1/FacebookPhotoUploader55.cab
  1328. O16 - DPF: {C345E174-3E87-4F41-A01C-B066A90A49B4} (WRC Class) - http://trial.trymicrosoftoffice.com/trialoaa/buymsoffice_assets/framework/microsoft/wrc32.ocx
  1329. O18 - Protocol: skype-ie-addon-data - {91774881-D725-4E58-B298-07617B9B86A8} - C:\Program Files (x86)\Skype\Toolbars\Internet Explorer\skypeieplugin.dll
  1330. O18 - Protocol: skype4com - {FFC8B962-9B40-4DFF-9458-1830C7DD7F5D} - C:\PROGRA~2\COMMON~1\Skype\SKYPE4~1.DLL
  1331. O20 - AppInit_DLLs: C:\ProgramData\imm3232.dll
  1332. O23 - Service: Andrea ST Filters Service (AESTFilters) - Andrea Electronics Corporation - C:\Windows\System32\DriverStore\FileRepository\stwrt64.inf_amd64_neutral_14e7194c26fb7998\AESTSr64.exe
  1333. O23 - Service: @%SystemRoot%\system32\Alg.exe,-112 (ALG) - Unknown owner - C:\Windows\System32\alg.exe (file missing)
  1334. O23 - Service: AMD External Events Utility - Unknown owner - C:\Windows\system32\atiesrxx.exe (file missing)
  1335. O23 - Service: Apple Mobile Device - Apple Inc. - C:\Program Files (x86)\Common Files\Apple\Mobile Device Support\AppleMobileDeviceService.exe
  1336. O23 - Service: Bonjour Service - Apple Inc. - C:\Program Files (x86)\Bonjour\mDNSResponder.exe
  1337. O23 - Service: Com4QLBEx - Hewlett-Packard Development Company, L.P. - C:\Program Files (x86)\Hewlett-Packard\HP Quick Launch Buttons\Com4QLBEx.exe
  1338. O23 - Service: DeviceVM Meta Data Export Service (DvmMDES) - DeviceVM, Inc. - C:\SPLASH.SYS\config\DVMExportService.exe
  1339. O23 - Service: @%SystemRoot%\system32\efssvc.dll,-100 (EFS) - Unknown owner - C:\Windows\System32\lsass.exe (file missing)
  1340. O23 - Service: @%systemroot%\system32\fxsresm.dll,-118 (Fax) - Unknown owner - C:\Windows\system32\fxssvc.exe (file missing)
  1341. O23 - Service: Windows Presentation Foundation Font Cache 3.0.0.0 (FontCache3.0.0.032) - Unknown owner - c:\windows\system32\wpdshserviceobj32.exe
  1342. O23 - Service: GameConsoleService - WildTangent, Inc. - C:\Program Files (x86)\HP Games\HP Game Console\GameConsoleService.exe
  1343. O23 - Service: Google Update Service (gupdate) (gupdate) - Google Inc. - C:\Program Files (x86)\Google\Update\GoogleUpdate.exe
  1344. O23 - Service: Google Update Service (gupdatem) (gupdatem) - Google Inc. - C:\Program Files (x86)\Google\Update\GoogleUpdate.exe
  1345. O23 - Service: Google Software Updater (gusvc) - Google - C:\Program Files (x86)\Google\Common\Google Updater\GoogleUpdaterService.exe
  1346. O23 - Service: HP Health Check Service - Hewlett-Packard - C:\Program Files (x86)\Hewlett-Packard\HP Health Check\hphc_service.exe
  1347. O23 - Service: hpqwmiex - Hewlett-Packard Development Company, L.P. - C:\Program Files (x86)\Hewlett-Packard\Shared\hpqwmiex.exe
  1348. O23 - Service: HP Service (hpsrv) - Unknown owner - C:\Windows\system32\Hpservice.exe (file missing)
  1349. O23 - Service: iPod Service - Apple Inc. - C:\Program Files\iPod\bin\iPodService.exe
  1350. O23 - Service: @keyiso.dll,-100 (KeyIso) - Unknown owner - C:\Windows\system32\lsass.exe (file missing)
  1351. O23 - Service: LightScribeService Direct Disc Labeling Service (LightScribeService) - Hewlett-Packard Company - C:\Program Files (x86)\Common Files\LightScribe\LSSrvc.exe
  1352. O23 - Service: @comres.dll,-2797 (MSDTC) - Unknown owner - C:\Windows\System32\msdtc.exe (file missing)
  1353. O23 - Service: @%SystemRoot%\System32\netlogon.dll,-102 (Netlogon) - Unknown owner - C:\Windows\system32\lsass.exe (file missing)
  1354. O23 - Service: @%systemroot%\system32\psbase.dll,-300 (ProtectedStorage) - Unknown owner - C:\Windows\system32\lsass.exe (file missing)
  1355. O23 - Service: Cyberlink RichVideo Service(CRVS) (RichVideo) - Unknown owner - C:\Program Files (x86)\CyberLink\Shared files\RichVideo.exe
  1356. O23 - Service: @%systemroot%\system32\Locator.exe,-2 (RpcLocator) - Unknown owner - C:\Windows\system32\locator.exe (file missing)
  1357. O23 - Service: @%SystemRoot%\system32\samsrv.dll,-1 (SamSs) - Unknown owner - C:\Windows\system32\lsass.exe (file missing)
  1358. O23 - Service: Trend Micro Central Control Component (SfCtlCom) - Trend Micro Inc. - C:\Program Files\Trend Micro\Internet Security\SfCtlCom.exe
  1359. O23 - Service: @%SystemRoot%\system32\snmptrap.exe,-3 (SNMPTRAP) - Unknown owner - C:\Windows\System32\snmptrap.exe (file missing)
  1360. O23 - Service: @%systemroot%\system32\spoolsv.exe,-1 (Spooler) - Unknown owner - C:\Windows\System32\spoolsv.exe (file missing)
  1361. O23 - Service: @%SystemRoot%\system32\sppsvc.exe,-101 (sppsvc) - Unknown owner - C:\Windows\system32\sppsvc.exe (file missing)
  1362. O23 - Service: Audio Service (STacSV) - IDT, Inc. - C:\Windows\System32\DriverStore\FileRepository\stwrt64.inf_amd64_neutral_14e7194c26fb7998\STacSV64.exe
  1363. O23 - Service: TeamViewer 6 (TeamViewer6) - TeamViewer GmbH - C:\Program Files (x86)\TeamViewer\Version6\TeamViewer_Service.exe
  1364. O23 - Service: Trend Micro Unauthorized Change Prevention Service (TMBMServer) - Trend Micro Inc. - C:\Program Files\Trend Micro\BM\TMBMSRV.exe
  1365. O23 - Service: Trend Micro Proxy Service (TmProxy) - Trend Micro Inc. - C:\Program Files\Trend Micro\Internet Security\TmProxy.exe
  1366. O23 - Service: @%SystemRoot%\system32\ui0detect.exe,-101 (UI0Detect) - Unknown owner - C:\Windows\system32\UI0Detect.exe (file missing)
  1367. O23 - Service: @%SystemRoot%\system32\vaultsvc.dll,-1003 (VaultSvc) - Unknown owner - C:\Windows\system32\lsass.exe (file missing)
  1368. O23 - Service: @%SystemRoot%\system32\vds.exe,-100 (vds) - Unknown owner - C:\Windows\System32\vds.exe (file missing)
  1369. O23 - Service: @%systemroot%\system32\vssvc.exe,-102 (VSS) - Unknown owner - C:\Windows\system32\vssvc.exe (file missing)
  1370. O23 - Service: @%SystemRoot%\system32\Wat\WatUX.exe,-601 (WatAdminSvc) - Unknown owner - C:\Windows\system32\Wat\WatAdminSvc.exe (file missing)
  1371. O23 - Service: @%systemroot%\system32\wbengine.exe,-104 (wbengine) - Unknown owner - C:\Windows\system32\wbengine.exe (file missing)
  1372. O23 - Service: @%Systemroot%\system32\wbem\wmiapsrv.exe,-110 (wmiApSrv) - Unknown owner - C:\Windows\system32\wbem\WmiApSrv.exe (file missing)
  1373. O23 - Service: @%PROGRAMFILES%\Windows Media Player\wmpnetwk.exe,-101 (WMPNetworkSvc) - Unknown owner - C:\Program Files (x86)\Windows Media Player\wmpnetwk.exe (file missing)
  1374.  
  1375. --
  1376. End of file - 113412 bytes
  1377.  
  1378.  
Advertisement
Add Comment
Please, Sign In to add comment
Advertisement
Public Pastes
Advertisement
We use cookies for various purposes including analytics. By continuing to use Pastebin, you agree to our use of cookies as described in the Cookies Policy.  OK, I Understand
Not a member of Pastebin yet?
Sign Up, it unlocks many cool features!