What the Tech?! Free tech support Archive
This is a read-only archive. No new posts or registrations. Privacy Page
Spyware / Malware / Virus Removal

PING.exe, multiple instances of svchost, gibberish processes

2 min read

This thread's last reply is from . Advice, software, and links below may be out of date — treat specific steps and download links with caution.

Looking for the outcome? Ask AI

Post #1
Thanks for reading guys, I have had the Google redirect problem, I don't any more and I'm not exactly sure why, and now I have noticed PING.exe running and bloating all the way up to 2GB of memory, also TrustedInstaller.exe running along with a bunch of gibberish processes like 183hf983hf83hf.exe. I've tried everything I can think of, I'm running Windows 7 and Firefox, here are my logs. Thanks!

OTL logfile created on: 10/9/2011 12:10:24 PM - Run 1
OTL by OldTimer - Version 3.2.29.1 Folder = C:\Users\hamsandwich\Desktop
64bit- Ultimate Edition (Version = 6.1.7600) - Type = NTWorkstation
Internet Explorer (Version = 8.0.7600.16385)
Locale: 00000409 | Country: United States | Language: ENU | Date Format: M/d/yyyy

2.00 Gb Total Physical Memory | 0.76 Gb Available Physical Memory | 38.20% Memory free
4.00 Gb Paging File | 2.85 Gb Available in Paging File | 71.35% Paging File free
Paging file location(s): ?:\pagefile.sys [binary data]

%SystemDrive% = C: | %SystemRoot% = C:\Windows | %ProgramFiles% = C:\Program Files (x86)
Drive C: | 70.34 Gb Total Space | 0.65 Gb Free Space | 0.92% Space Free | Partition Type: NTFS
Drive D: | 4.09 Gb Total Space | 0.86 Gb Free Space | 20.97% Space Free | Partition Type: NTFS

Computer Name: HAMSANDWICH-PC | User Name: hamsandwich | Logged in as Administrator.
Boot Mode: SafeMode with Networking | Scan Mode: Current user | Include 64bit Scans
Company Name Whitelist: Off | Skip Microsoft Files: Off | No Company Name Whitelist: On | File Age = 30 Days

========== Processes (SafeList) ==========

PRC - C:\Windows\SysWOW64\pUVelIuD2FGEfTU.exe ()
PRC - C:\Windows\SysWOW64\id8ZYkeBPc.exe ()
PRC - C:\Users\hamsandwich\Desktop\OTL.exe (OldTimer Tools)
PRC - C:\Windows\Temp\DX476C.tmp.exe ()
PRC - C:\Windows\SysWOW64\PING.EXE (Microsoft Corporation)


========== Modules (No Company Name) ==========


========== Win32 Services (SafeList) ==========

SRV:64bit: - (AMD FUEL Service) – C:\Program Files\ATI Technologies\ATI.ACE\Fuel\Fuel.Service.exe (Advanced Micro Devices, Inc.)
SRV:64bit: - (AMD External Events Utility) – C:\Windows\SysNative\atiesrxx.exe (AMD)
SRV:64bit: - (WinDefend) – C:\Program Files\Windows Defender\MpSvc.dll (Microsoft Corporation)
SRV:64bit: - (AppMgmt) – C:\Windows\SysNative\appmgmts.dll (Microsoft Corporation)
SRV - (PnkBstrA) – C:\Windows\SysWOW64\PnkBstrA.exe ()
SRV - (clr_optimization_v4.0.30319_32) – C:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe (Microsoft Corporation)
SRV - (clr_optimization_v2.0.50727_32) – C:\Windows\Microsoft.NET\Framework\v2.0.50727\mscorsvw.exe (Microsoft Corporation)
SRV - (SBSDWSCService) – C:\Program Files (x86)\Spybot - Search & Destroy\SDWinSec.exe (Safer Networking Ltd.)


========== Driver Services (SafeList) ==========

DRV:64bit: - (atikmdag) – C:\Windows\SysNative\drivers\atikmdag.sys (ATI Technologies Inc.)
DRV:64bit: - (amdkmdag) – C:\Windows\SysNative\drivers\atikmdag.sys (ATI Technologies Inc.)
DRV:64bit: - (amdkmdap) – C:\Windows\SysNative\drivers\atikmpag.sys (Advanced Micro Devices, Inc.)
DRV:64bit: - (AtiHDAudioService) – C:\Windows\SysNative\drivers\AtihdW76.sys (Advanced Micro Devices)
DRV:64bit: - (RimUsb) – C:\Windows\SysNative\drivers\RimUsb_AMD64.sys (Research In Motion Limited)
DRV:64bit: - (sptd) – C:\Windows\SysNative\drivers\sptd.sys (Duplex Secure Ltd.)
DRV:64bit: - (RSUSBSTOR) – C:\Windows\SysNative\drivers\RtsUStor.sys (Realtek Semiconductor Corp.)
DRV:64bit: - (WmVirHid) – C:\Windows\SysNative\drivers\WmVirHid.sys (Logitech Inc.)
DRV:64bit: - (WmBEnum) – C:\Windows\SysNative\drivers\WmBEnum.sys (Logitech Inc.)
DRV:64bit: - (WmXlCore) – C:\Windows\SysNative\drivers\WmXlCore.sys (Logitech Inc.)
DRV:64bit: - (WmFilter) – C:\Windows\SysNative\drivers\WmFilter.sys (Logitech Inc.)
DRV:64bit: - (amdiox64) – C:\Windows\SysNative\drivers\amdiox64.sys (Advanced Micro Devices)
DRV:64bit: - (amdsata) – C:\Windows\SysNative\drivers\amdsata.sys (Advanced Micro Devices)
DRV:64bit: - (amdxata) – C:\Windows\SysNative\drivers\amdxata.sys (Advanced Micro Devices)
DRV:64bit: - (amdsbs) – C:\Windows\SysNative\drivers\amdsbs.sys (AMD Technologies Inc.)
DRV:64bit: - (LSI_SAS2) – C:\Windows\SysNative\drivers\lsi_sas2.sys (LSI Corporation)
DRV:64bit: - (HpSAMD) – C:\Windows\SysNative\drivers\HpSAMD.sys (Hewlett-Packard Company)
DRV:64bit: - (stexstor) – C:\Windows\SysNative\drivers\stexstor.sys (Promise Technology)
DRV:64bit: - (xnacc) – C:\Windows\SysNative\drivers\xnacc.sys (Microsoft Corporation)
DRV:64bit: - (VST64_DPV) – C:\Windows\SysNative\drivers\VSTDPV6.SYS (Conexant Systems, Inc.)
DRV:64bit: - (winachsf) – C:\Windows\SysNative\drivers\VSTCNXT6.SYS (Conexant Systems, Inc.)
DRV:64bit: - (VST64HWBS2) – C:\Windows\SysNative\drivers\VSTBS26.SYS (Conexant Systems, Inc.)
DRV:64bit: - (NVENETFD) – C:\Windows\SysNative\drivers\nvm62x64.sys (NVIDIA Corporation)
DRV:64bit: - (ebdrv) – C:\Windows\SysNative\drivers\evbda.sys (Broadcom Corporation)
DRV:64bit: - (b06bdrv) – C:\Windows\SysNative\drivers\bxvbda.sys (Broadcom Corporation)
DRV:64bit: - (b57nd60a) – C:\Windows\SysNative\drivers\b57nd60a.sys (Broadcom Corporation)
DRV:64bit: - (hcw85cir) – C:\Windows\SysNative\drivers\hcw85cir.sys (Hauppauge Computer Works, Inc.)
DRV:64bit: - (GEARAspiWDM) – C:\Windows\SysNative\drivers\GEARAspiWDM.sys (GEAR Software Inc.)
DRV:64bit: - (xusb21) – C:\Windows\SysNative\drivers\xusb21.sys (Microsoft Corporation)
DRV - (WIMMount) – C:\Windows\SysWOW64\drivers\wimmount.sys (Microsoft Corporation)


========== Standard Registry (SafeList) ==========


========== Internet Explorer ==========

IE - HKLM\SOFTWARE\Microsoft\Internet Explorer\Main,Local Page = C:\Windows\SysWOW64\blank.htm

IE - HKCU\SOFTWARE\Microsoft\Internet Explorer\Main,Start Page = http://www.daemon-search.com/startpage
IE - HKCU\SOFTWARE\Microsoft\Internet Explorer\Main,Start Page Redirect Cache = http://www.msn.com/
IE - HKCU\SOFTWARE\Microsoft\Internet Explorer\Main,Start Page Redirect Cache AcceptLangs = en-us
IE - HKCU\SOFTWARE\Microsoft\Internet Explorer\Main,Start Page Redirect Cache_TIMESTAMP = 60 00 B6 85 69 41 CB 01 [binary data]
IE - HKCU\SOFTWARE\Microsoft\Internet Explorer\Main,Start Page Restore = http://www.daemon-search.com/startpage
IE - HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings: "ProxyEnable" = 1
IE - HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings: "ProxyOverride" = *.local
IE - HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings: "ProxyServer" = http=127.0.0.1:55071

========== FireFox ==========

FF - prefs.js..browser.startup.homepage: "google.com"
FF - prefs.js..network.proxy.type: 0

FF:64bit: - HKLM\Software\MozillaPlugins\@microsoft.com/GENUINE: disabled File not found
FF - HKLM\Software\MozillaPlugins\@adobe.com/FlashPlayer: C:\Windows\SysWOW64\Macromed\Flash\NPSWF32.dll ()
FF - HKLM\Software\MozillaPlugins\@Apple.com/iTunes,version=: File not found
FF - HKLM\Software\MozillaPlugins\@Apple.com/iTunes,version=1.0: C:\Program Files (x86)\iTunes\Mozilla Plugins\npitunes.dll ()
FF - HKLM\Software\MozillaPlugins\@java.com/JavaPlugin: C:\Program Files (x86)\Java\jre6\bin\new_plugin\npjp2.dll (Sun Microsystems, Inc.)
FF - HKLM\Software\MozillaPlugins\@microsoft.com/GENUINE: disabled File not found
FF - HKLM\Software\MozillaPlugins\@Microsoft.com/NpCtrl,version=1.0: c:\Program Files (x86)\Microsoft Silverlight\4.0.50917.0\npctrl.dll ( Microsoft Corporation)
FF - HKLM\Software\MozillaPlugins\@nexon.net/NxGame: C:\ProgramData\NexonUS\NGM\npNxGameUS.dll File not found
FF - HKLM\Software\MozillaPlugins\@pandonetworks.com/PandoWebPlugin: C:\Program Files (x86)\Pando Networks\Media Booster\npPandoWebPlugin.dll File not found
FF - HKLM\Software\MozillaPlugins\@RIM.com/WebSLLauncher,version=1.0: C:\Program Files (x86)\Common Files\Research In Motion\BBWebSLLauncher\NPWebSLLauncher.dll ()

FF - HKEY_LOCAL_MACHINE\software\mozilla\Mozilla Firefox 6.0.2\extensions\\Components: C:\Program Files (x86)\Mozilla Firefox\components [2011/09/26 12:44:47 | 000,000,000 | —D | M]
FF - HKEY_LOCAL_MACHINE\software\mozilla\Mozilla Firefox 6.0.2\extensions\\Plugins: C:\Program Files (x86)\Mozilla Firefox\plugins [2011/05/05 19:40:32 | 000,000,000 | —D | M]

[2011/10/08 10:29:23 | 000,000,000 | —D | M] (No name found) – C:\Users\hamsandwich\AppData\Roaming\Mozilla\Extensions
[2010/11/22 14:00:30 | 000,000,000 | —D | M] (No name found) – C:\Program Files (x86)\Mozilla Firefox\extensions
[2010/09/02 16:50:07 | 000,000,000 | —D | M] (Java Console) – C:\Program Files (x86)\Mozilla Firefox\extensions\{CAFEEFAC-0016-0000-0021-ABCDEFFEDCBA}
[2010/11/22 14:00:30 | 000,000,000 | —D | M] (Kaspersky URL Advisor) – C:\Program Files (x86)\Mozilla Firefox\extensions\[removed]
[2011/09/26 12:44:46 | 000,134,104 | —- | M] (Mozilla Foundation) – C:\Program Files (x86)\mozilla firefox\components\browsercomps.dll
[2010/09/02 16:49:57 | 000,423,656 | —- | M] (Sun Microsystems, Inc.) – C:\Program Files (x86)\mozilla firefox\plugins\npdeployJava1.dll
[2011/09/26 12:44:41 | 000,002,252 | —- | M] () – C:\Program Files (x86)\mozilla firefox\searchplugins\bing.xml
[2011/10/05 06:30:14 | 000,002,223 | —- | M] () – C:\Program Files (x86)\mozilla firefox\searchplugins\websearch.xml

O1 HOSTS File: ([2011/09/23 16:19:27 | 000,437,695 | R— | M]) - C:\Windows\SysNative\drivers\etc\hosts
O1 - Hosts: 127.0.0.1 www.007guard.com
O1 - Hosts: 127.0.0.1 007guard.com
O1 - Hosts: 127.0.0.1 008i.com
O1 - Hosts: 127.0.0.1 www.008k.com
O1 - Hosts: 127.0.0.1 008k.com
O1 - Hosts: 127.0.0.1 www.00hq.com
O1 - Hosts: 127.0.0.1 00hq.com
O1 - Hosts: 127.0.0.1 010402.com
O1 - Hosts: 127.0.0.1 www.032439.com
O1 - Hosts: 127.0.0.1 032439.com
O1 - Hosts: 127.0.0.1 www.0scan.com
O1 - Hosts: 127.0.0.1 0scan.com
O1 - Hosts: 127.0.0.1 1000gratisproben.com
O1 - Hosts: 127.0.0.1 www.1000gratisproben.com
O1 - Hosts: 127.0.0.1 1001namen.com
O1 - Hosts: 127.0.0.1 www.1001namen.com
O1 - Hosts: 127.0.0.1 100888290cs.com
O1 - Hosts: 127.0.0.1 www.100888290cs.com
O1 - Hosts: 127.0.0.1 www.100sexlinks.com
O1 - Hosts: 127.0.0.1 100sexlinks.com
O1 - Hosts: 127.0.0.1 10sek.com
O1 - Hosts: 127.0.0.1 www.10sek.com
O1 - Hosts: 127.0.0.1 www.1-2005-search.com
O1 - Hosts: 127.0.0.1 1-2005-search.com
O1 - Hosts: 127.0.0.1 123fporn.info
O1 - Hosts: 15052 more lines…
O2 - BHO: (no name) - {02478D38-C3F9-4efb-9B51-7695ECA05670} - No CLSID value found.
O2 - BHO: (AVG Safe Search) - {3CA2F312-6F6E-4B53-A66E-4E65E497C8C0} - C:\Program Files (x86)\AVG\AVG8\avgssie.dll File not found
O2 - BHO: (Spybot-S&D IE Protection) - {53707962-6F74-2D53-2644-206D7942484F} - C:\Program Files (x86)\Spybot - Search & Destroy\SDHelper.dll (Safer Networking Limited)
O2 - BHO: (no name) - {9D425283-D487-4337-BAB6-AB8354A81457} - No CLSID value found.
O3 - HKLM\..\Toolbar: (no name) - {9D425283-D487-4337-BAB6-AB8354A81457} - No CLSID value found.
O3 - HKCU\..\Toolbar\WebBrowser: (no name) - {9D425283-D487-4337-BAB6-AB8354A81457} - No CLSID value found.
O4:64bit: - HKLM..\Run: [Start WingMan Profiler] C:\Program Files\Logitech\Gaming Software\LWEMon.exe (Logitech Inc.)
O4 - HKLM..\Run: [a11ibbD3on4aH6W8234A] C:\Windows\SysWOW64\CkkIIVrrONt.exe ()
O4 - HKLM..\Run: [A2obF4pmGQERTwe8234A] C:\Windows\SysWOW64\ltzPNycA1.exe ()
O4 - HKLM..\Run: [a33pnGG5aQH6f8234A] C:\Windows\SysWOW64\tCCkIBrzxA0uS2b.exe ()
O4 - HKLM..\Run: [a3m5Q6W8R9XjCkB8234A] C:\Windows\SysWOW64\S8R9TwUeIrPyAuS.exe ()
O4 - HKLM..\Run: [A444amH5sWJ7E8g8234A] C:\Windows\SysWOW64\IccSS1ivvDon.exe ()
O4 - HKLM..\Run: [a4m5W77dEL8234A] C:\Windows\SysWOW64\owUeOtPyAi2.exe ()
O4 - HKLM..\Run: [A55aaQH6dWK7RLg8234A] C:\Windows\SysWOW64\mOOONNyxA0vSib3.exe ()
O4 - HKLM..\Run: [A66ssWK7E9Tq8234A] C:\Windows\SysWOW64\axxxA00ucS2iD3n.exe ()
O4 - HKLM..\Run: [a77ffEL8gTZqY8234A] C:\Windows\SysWOW64\q111ibD3on4aH6W.exe ()
O4 - HKLM..\Run: [AaaaQHH6sWKfL9T8234A] C:\Windows\SysWOW64\uxAA00u22bDp.exe ()
O4 - HKLM..\Run: [abbDD3ppnG4QHsW8234A] C:\Windows\SysWOW64\XVVVrrzONtxAuc2.exe ()
O4 - HKLM..\Run: [abFF33pnG5aQ6dK8234A] C:\Windows\SysWOW64\JONNyyxA0uvS.exe ()
O4 - HKLM..\Run: [adEELL8gqhXwkVl8234A] C:\Windows\SysWOW64\fBBttS113nFaH5W.exe ()
O4 - HKLM..\Run: [aDGHKLZCrtuio8234A] C:\Windows\SysWOW64\aQ6WfLgXjCkVzNx.exe ()
O4 - HKLM..\Run: [AeeelIIBtzPyc1u8234A] C:\Windows\SysWOW64\t555ssQJ7dEKgR9.exe ()
O4 - HKLM..\Run: [AEgZhwUeBz0c8234A] C:\Windows\SysWOW64\hwUrBx0c1DoFaHs.exe ()
O4 - HKLM..\Run: [aeIzNc1v2b8234A] C:\Windows\SysWOW64\yAiDn4m5QdKgZhX.exe ()
O4 - HKLM..\Run: [aFF44pmH5QJRYXj8234A] C:\Windows\SysWOW64\dZqqhXXwelOtz1v.exe ()
O4 - HKLM..\Run: [AFsfUr2QTN2Qgu48234A] C:\Windows\SysWOW64\r99hhYXwjUVeIBz.exe ()
O4 - HKLM..\Run: [AGG44ammH8234A] C:\Windows\SysWOW64\JZjCIrOt0cS1bDo.exe ()
O4 - HKLM..\Run: [AGG55aQQH6dK7RL8234A] C:\Windows\SysWOW64\TrOyyxAA0uv2bFp.exe ()
O4 - HKLM..\Run: [AgggTXXqjYCIztx8234A] C:\Windows\SysWOW64\vGG55aQH6dWK7.exe ()
O4 - HKLM..\Run: [AGsJd8R9TwClBzN8234A] C:\Windows\SysWOW64\j8ZhXjVItPy1v2b.exe ()
O4 - HKLM..\Run: [AHdKR9TqY8234A] C:\Windows\SysWOW64\bjjjUkIBrOyAv2b.exe ()
O4 - HKLM..\Run: [aHHH6ssWJ7fL88234A] C:\Windows\SysWOW64\loonnG44a.exe ()
O4 - HKLM..\Run: [aiDn4m5JdKg9Y8234A] C:\Windows\SysWOW64\VdLRqYwUlBz0.exe ()
O4 - HKLM..\Run: [AIrA2pQdf9XCkzN8234A] C:\Windows\SysWOW64\GPy1voFm5Jd8Rhw.exe ()
O4 - HKLM..\Run: [aJdEK88gRZ9hX8234A] C:\Windows\SysWOW64\tzzzP00ycA1iD2n.exe ()
O4 - HKLM..\Run: [aJW8LhqUeBzyAv28234A] C:\Windows\SysWOW64\g8RhXUeBzx1voFm.exe ()
O4 - HKLM..\Run: [aLgqYkrBxy8234A] C:\Windows\SysWOW64\I9YwVlt0ciDn4Hs.exe ()
O4 - HKLM..\Run: [allltPu1b3n46Jf8234A] C:\Windows\SysWOW64\CffEEL9ggZqjYw.exe ()
O4 - HKLM..\Run: [an4HsJdLRqYwU8234A] C:\Windows\SysWOW64\y7EgZhCkVOtPySv.exe ()
O4 - HKLM..\Run: [an5HdKR9XjeIzNx8234A] C:\Windows\SysWOW64\BaJW8LhqUeBzyAv.exe ()
O4 - HKLM..\Run: [andRhwUlt0ci2Fm8234A] C:\Windows\SysWOW64\G7LgqYkVOt0ci.exe ()
O4 - HKLM..\Run: [annGG5aHdW8234A] C:\Windows\SysWOW64\YONNNyxA0uvSib3.exe ()
O4 - HKLM..\Run: [aoobbF3pmG5QJ8234A] C:\Windows\SysWOW64\lAAA1uvvS.exe ()
O4 - HKLM..\Run: [AOOONtxAA0cS8234A] C:\Windows\SysWOW64\C3naHdKfLTqYekV.exe ()
O4 - HKLM..\Run: [AOy0vi33pn5aQ6d8234A] C:\Windows\SysWOW64\KpGa6W8RhXjCk.exe ()
O4 - HKLM..\Run: [Ap4Hsf9qCVxu8234A] C:\Windows\SysWOW64\bgqYCekrz0c.exe ()
O4 - HKLM..\Run: [appnG55aQH8234A] C:\Windows\SysWOW64\XOOONyyxA0uv2iF.exe ()
O4 - HKLM..\Run: [aqjYCwkIVl8234A] C:\Windows\SysWOW64\xpnG4aQH6W7E9T.exe ()
O4 - HKLM..\Run: [ARRRZUrzzP1pfU18234A] C:\Windows\SysWOW64\D444mmG5sJ6.exe ()
O4 - HKLM..\Run: [aTTZZjjYwIVNx8234A] C:\Windows\SysWOW64\d0ciiG4QHsWK.exe ()
O4 - HKLM..\Run: [aubDonG4aHsJfLg8234A] C:\Windows\SysWOW64\B2D3pG6sW7qVl.exe ()
O4 - HKLM..\Run: [aun7ZjwIlN8234A] C:\Windows\SysWOW64\zhqUkBOxv2bpGQ9.exe ()
O4 - HKLM..\Run: [aUUCCellIBzPNxA8234A] C:\Windows\SysWOW64\YJJ66dEKKfRZhTw.exe ()
O4 - HKLM..\Run: [aVVrrlOOBtP0y8234A] C:\Windows\SysWOW64\mSbnmsJE8gTqhCk.exe ()
O4 - HKLM..\Run: [aVzx0c2psKE9TPu8234A] C:\Windows\SysWOW64\naHdKfTqY.exe ()
O4 - HKLM..\Run: [AW7R9XjCkVzt8234A] C:\Windows\SysWOW64\bIrNx0v2FpG.exe ()
O4 - HKLM..\Run: [awwwjUUCelIrz8234A] C:\Windows\SysWOW64\YssQQJ6ddK8fR9T.exe ()
O4 - HKLM..\Run: [awwwjUUVelIBzPy8234A] C:\Windows\SysWOW64\sJJJ7ddEK8gZ9Y.exe ()
O4 - HKLM..\Run: [awwwkIIVrlOtx0u8234A] C:\Windows\SysWOW64\qsssWKK7fELgTqj.exe ()
O4 - HKLM..\Run: [AXjCIrPyAuSo8234A] C:\Windows\SysWOW64\YzNc1v2FpGsJdKf.exe ()
O4 - HKLM..\Run: [aXjCkVzNx08234A] C:\Windows\SysWOW64\HzNx0v2b3n5Q6W7.exe ()
O4 - HKLM..\Run: [AyuuvS2ob3pG8234A] C:\Windows\SysWOW64\QZZZ9hhTXwjClBr.exe ()
O4 - HKLM..\Run: [ayyycAA1ivDFpH58234A] C:\Windows\SysWOW64\sXXXwkkUVelBtP.exe ()
O4 - HKLM..\Run: [aZYwIrOx0c8234A] C:\Windows\SysWOW64\HzNx0SiDp4Q6W7L.exe ()
O4 - HKLM..\Run: [B1Do4msJf88234A] C:\Windows\SysWOW64\GQQQHsKEgTCIVNx.exe ()
O4 - HKLM..\Run: [B1uvD2obFpGsJ8234A] C:\Windows\SysWOW64\a1Do45Jd8ZYwUeI.exe ()
O4 - HKLM..\Run: [b1v2b4msJ6EK8RZ8234A] C:\Windows\SysWOW64\lpHsJE8RhXjVltP.exe ()
O4 - HKLM..\Run: [b444pmmH5sQJdE8234A] C:\Windows\SysWOW64\SVltzPP0ycAiv2o.exe ()
O4 - HKLM..\Run: [b999hTTXwjU8234A] C:\Windows\SysWOW64\eo4m5ssQJ6dK8f.exe ()
O4 - HKLM..\Run: [BaaQQH66dW8234A] C:\Windows\SysWOW64\UBzNx0viFpG.exe ()
O4 - HKLM..\Run: [bAb4fZCPsgky5sJ8234A] C:\Windows\SysWOW64\IERePuo5EebKqxG.exe ()
O4 - HKLM..\Run: [BaHdKfLgXj8234A] C:\Windows\SysWOW64\ZR9TjCkBzNx0v2b.exe ()
O4 - HKLM..\Run: [bAv2b4GsJEKfZ9T8234A] C:\Windows\SysWOW64\fZZZ9hhYjUeBz.exe ()
O4 - HKLM..\Run: [BAvbF3pnGaHdKfL8234A] C:\Windows\SysWOW64\mAuoFmadKR9XCIr.exe ()
O4 - HKLM..\Run: [bCCCelIBrzPyxAv8234A] C:\Windows\SysWOW64\RddEEKffRZ9TXj.exe ()
O4 - HKLM..\Run: [bcccS11ivD3oF4m8234A] C:\Windows\SysWOW64\kggTTZqhYCw.exe ()
O4 - HKLM..\Run: [BCCCwkIrOx01D348234A] C:\Windows\SysWOW64\CD33pnG4aQ6sK7L.exe ()
O4 - HKLM..\Run: [bCCeekIIBrONyA8234A] C:\Windows\SysWOW64\RJJ6dWWK8fL9hXj.exe ()
O4 - HKLM..\Run: [bDDD2oonF4p8234A] C:\Windows\SysWOW64\fkUUVVelOBtzPyA.exe ()
O4 - HKLM..\Run: [BDo4m5W7LZhwU8234A] C:\Windows\SysWOW64\bYYYCwwkUVrBt0c.exe ()
O4 - HKLM..\Run: [BEgZhCkrBxy1Do48234A] C:\Windows\SysWOW64\ykVzNuSDp67E9VW.exe ()
O4 - HKLM..\Run: [BffEEL88gTZhY8234A] C:\Windows\SysWOW64\uHH66sWJJ.exe ()
O4 - HKLM..\Run: [BFpGs6E8R9TjC8234A] C:\Windows\SysWOW64\AZhwUeItNc1v.exe ()
O4 - HKLM..\Run: [bGaHs7E9TqC8234A] C:\Windows\SysWOW64\HjeIrOt0c2b.exe ()
O4 - HKLM..\Run: [bGmWfZCkrOxcvoa8234A] C:\Windows\SysWOW64\gfETqjYwIlNx0Si.exe ()
O4 - HKLM..\Run: [bHH55JdKg9YwUe8234A] C:\Windows\SysWOW64\dzzzP0yycA1vDon.exe ()
O4 - HKLM..\Run: [BjetN1Dbm5QEf9w8234A] C:\Windows\SysWOW64\SeBPcvoFHQ789.exe ()
O4 - HKLM..\Run: [BJfLgZhwUrOtP8234A] C:\Windows\SysWOW64\LqYkVOtPuSiDn4m.exe ()
O4 - HKLM..\Run: [BJJ77dEK8g8234A] C:\Windows\SysWOW64\z11iivD2onF4mHs.exe ()
O4 - HKLM..\Run: [BjVlBPyAuD8234A] C:\Windows\SysWOW64\o44ppmHHQ7d8R9.exe ()
O4 - HKLM..\Run: [bkkkIVVrlON8234A] C:\Windows\SysWOW64\LWWWK77fEL9TZqY.exe ()
O4 - HKLM..\Run: [bmG5sQJ6dKfZhX8234A] C:\Windows\SysWOW64\QQdgZhwVIzyAv2b.exe ()
O4 - HKLM..\Run: [BnnGG4aaQHsKf9T8234A] C:\Windows\SysWOW64\YAA00uccS2bD3.exe ()
O4 - HKLM..\Run: [BnnnG44aQH6W7fL8234A] C:\Windows\SysWOW64\NtttxAA0ucSib3.exe ()
O4 - HKLM..\Run: [bnnnG4amH6sJ7E88234A] C:\Windows\SysWOW64\VVVVrlONtxPuciD.exe ()
O4 - HKLM..\Run: [bp5Q6E8R9TwUeIr8234A] C:\Windows\SysWOW64\lKgZhXjeItPyAuD.exe ()
O4 - HKLM..\Run: [bPP00ycSS1vD3n8234A] C:\Windows\SysWOW64\aHH66sWWJ7fL8.exe ()
O4 - HKLM..\Run: [BPPNNyccA1u2bFp8234A] C:\Windows\SysWOW64\NhhYYXwjjUelIt.exe ()
O4 - HKLM..\Run: [bQ6KfLTjeIztAu28234A] C:\Windows\SysWOW64\lhqUIrOx0Sb3.exe ()
O4 - HKLM..\Run: [bQQHH6ssWK7ELg8234A] C:\Windows\SysWOW64\hD333pnG4.exe ()
O4 - HKLM..\Run: [BrrzOONtxA0uS2b8234A] C:\Windows\SysWOW64\QqqjjYCCekI.exe ()
O4 - HKLM..\Run: [BS22iibF3pnG5Q68234A] C:\Windows\SysWOW64\dTqCkIIBrzONxAu.exe ()
O4 - HKLM..\Run: [BSi3n4HsKf8234A] C:\Windows\SysWOW64\jfLTqCkVzt.exe ()
O4 - HKLM..\Run: [bssWWJ7ddE8RqXU8234A] C:\Windows\SysWOW64\tvvDD3onnFamH.exe ()
O4 - HKLM..\Run: [BsWJ7fEL8TqYw8234A] C:\Windows\SysWOW64\UrlONtxP0c1GaH.exe ()
O4 - HKLM..\Run: [Bu1Dna6JEgqCUlt8234A] C:\Windows\SysWOW64\ysWK7fEL9TqYwIr.exe ()
O4 - HKLM..\Run: [Buucc2iibD3nG8234A] C:\Windows\SysWOW64\K9ggTXqjjCekIrO.exe ()
O4 - HKLM..\Run: [bUUUVrlOBtxPyS18234A] C:\Windows\SysWOW64\EsfEEL88TZqYC.exe ()
O4 - HKLM..\Run: [BUUUVVrlOBtx0yS8234A] C:\Windows\SysWOW64\YLLL8ggTZqhYw.exe ()
O4 - HKLM..\Run: [BuuvvD22ob4pm5Q8234A] C:\Windows\SysWOW64\YllIIBttzPNcA.exe ()
O4 - HKLM..\Run: [bvvvD22obF4mG5Q8234A] C:\Windows\SysWOW64\ZKgZhwUeItzPNc1.exe ()
O4 - HKLM..\Run: [BvvvS22ibF8234A] C:\Windows\SysWOW64\zUCCeekIBrzONx0.exe ()
O4 - HKLM..\Run: [BXjVItPc1voFp8234A] C:\Windows\SysWOW64\cAiDo4m5JdKR.exe ()
O4 - HKLM..\Run: [bXXqjYYekIVrNtA8234A] C:\Windows\SysWOW64\oaQQdWK7fRL.exe ()
O4 - HKLM..\Run: [c111ibbD3on4aH68234A] C:\Windows\SysWOW64\CjjjYCCwkIVlOxP.exe ()
O4 - HKLM..\Run: [C1uuvvD2obF4mGs8234A] C:\Windows\SysWOW64\SYYXXwjUVelIzPy.exe ()
O4 - HKLM..\Run: [c222obbF48234A] C:\Windows\SysWOW64\o8g99hYYlBPNc1v.exe ()
O4 - HKLM..\Run: [C3n4HsJfLTqYwU8234A] C:\Windows\SysWOW64\Qs7E9TqCkVOtPuS.exe ()
O4 - HKLM..\Run: [C3n4m5JdLgZYwUe8234A] C:\Windows\SysWOW64\ZgggZhYYkVlBxyS.exe ()
O4 - HKLM..\Run: [C555Q6W8LTqUCr8234A] C:\Windows\SysWOW64\rGGdEKR9XIrzNx1.exe ()
O4 - HKLM..\Run: [c666ddEfRZ9hXwU8234A] C:\Windows\SysWOW64\KeBzNAuDo4m5Q.exe ()
O4 - HKLM..\Run: [c6KEgqCkV8234A] C:\Windows\SysWOW64\p7RgqCIrOxuSi3G.exe ()
O4 - HKLM..\Run: [c99gTTZqj8234A] C:\Windows\SysWOW64\unnnG44aQH6sK7E.exe ()
O4 - HKLM..\Run: [cAAA1iivD8234A] C:\Windows\SysWOW64\WYYYXwwUUVlOBzP.exe ()
O4 - HKLM..\Run: [caammH6ssJ7fE8T8234A] C:\Windows\SysWOW64\I111ibbD3onG.exe ()
O4 - HKLM..\Run: [CaQQJJWK8fR8234A] C:\Windows\SysWOW64\kxAAA1uvS2oF3pG.exe ()
O4 - HKLM..\Run: [CBBrzzPNyxAv2b58234A] C:\Windows\SysWOW64\HJJJ6dEK8fR9hTw.exe ()
O4 - HKLM..\Run: [CcccS11ibD3nGam8234A] C:\Windows\SysWOW64\kYYCCwkkIVlONxP.exe ()
O4 - HKLM..\Run: [CcccS11ibD3oG4m8234A] C:\Windows\SysWOW64\kYYCCwkkIVrONxP.exe ()
O4 - HKLM..\Run: [cCkBOy0viFn58234A] C:\Windows\SysWOW64\yrNx1So3maJW8Rh.exe ()
O4 - HKLM..\Run: [CCUrOxy1v3naHsJ8234A] C:\Windows\SysWOW64\aoGa6W7E8Z.exe ()
O4 - HKLM..\Run: [CDD33onnG4mH6WJ8234A] C:\Windows\SysWOW64\klONNtccS1i.exe ()
O4 - HKLM..\Run: [CdddWKK7fRL8234A] C:\Windows\SysWOW64\kvSSS2ibF3pnGaH.exe ()
O4 - HKLM..\Run: [CddWWK7ffL9gTqY8234A] C:\Windows\SysWOW64\USSS2iibF3pn5aH.exe ()
O4 - HKLM..\Run: [cdEL8gRZqYwUeOt8234A] C:\Windows\SysWOW64\q0ycS1ivDoFaHsJ.exe ()
O4 - HKLM..\Run: [CdLRqYkezyAvoFm8234A] C:\Windows\SysWOW64\hTqYwVlBP1v3na5.exe ()
O4 - HKLM..\Run: [cdWWKK8fRL9hXqU8234A] C:\Windows\SysWOW64\v22oobpmG5aQ6.exe ()
O4 - HKLM..\Run: [Cf9TqYeIzNx0ci8234A] C:\Windows\SysWOW64\y000uvvS2F3n5Q6.exe ()
O4 - HKLM..\Run: [cgZYwUrOtPy18234A] C:\Windows\SysWOW64\IfE9TqlSiD4m6Jf.exe ()
O4 - HKLM..\Run: [CibD3pnG4Hs8234A] C:\Windows\SysWOW64\HqjYCekIVztAuS.exe ()
O4 - HKLM..\Run: [cItPc1v2npHsJd88234A] C:\Windows\SysWOW64\EoFp5Q7E8ZhXj.exe ()
O4 - HKLM..\Run: [CLLL9gXXqIztxuS8234A] C:\Windows\SysWOW64\boJTBAaRCyb.exe ()
O4 - HKLM..\Run: [cllOOBttzyA1oFp8234A] C:\Windows\SysWOW64\lZZZqhwVV.exe ()
O4 - HKLM..\Run: [cm5W7EgZhXkV8234A] C:\Windows\SysWOW64\oYwUrOt0c1v.exe ()
O4 - HKLM..\Run: [cn4m5JdLgZhX8234A] C:\Windows\SysWOW64\f467EZhCkrOtPyS.exe ()
O4 - HKLM..\Run: [cNNNtxxP08234A] C:\Windows\SysWOW64\J999gTTZqjYCkIr.exe ()
O4 - HKLM..\Run: [CppmHsQJ7dEK8R98234A] C:\Windows\SysWOW64\XkkUUVOtzycAivo.exe ()
O4 - HKLM..\Run: [CppmmH55sQJdE8R8234A] C:\Windows\SysWOW64\p111iivD2onF.exe ()
O4 - HKLM..\Run: [CQ6KR9TjCkr8234A] C:\Windows\SysWOW64\OUlBPyAv2b.exe ()
O4 - HKLM..\Run: [CQ7EgZYwVlB8234A] C:\Windows\SysWOW64\hLgqYkVOt0ciDn4.exe ()
O4 - HKLM..\Run: [cqUeIrOx0v2bpGa8234A] C:\Windows\SysWOW64\h3m5Q6WfL.exe ()
O4 - HKLM..\Run: [CR9XUkrOxu2bp5H8234A] C:\Windows\SysWOW64\XTjUCIzy1vo3ma6.exe ()
O4 - HKLM..\Run: [Cs7E8TqYwUrOtPy8234A] C:\Windows\SysWOW64\WZjCkVlNx0SiDoG.exe ()
O4 - HKLM..\Run: [cttxxP0ucS1iD3n8234A] C:\Windows\SysWOW64\W9ggTZZqj.exe ()
O4 - HKLM..\Run: [CTXXwwUCelIBzPy8234A] C:\Windows\SysWOW64\KPPNN2G5sQJ6ER9.exe ()
O4 - HKLM..\Run: [cUlBzy1voFp5Q6E8234A] C:\Windows\SysWOW64\A0ciDn4m5Q7EgZh.exe ()
O4 - HKLM..\Run: [cUVVeelOBtzP8234A] C:\Windows\SysWOW64\ZhhhYXXwk.exe ()
O4 - HKLM..\Run: [cvSSS2ibF3pnGaH8234A] C:\Windows\SysWOW64\IrrrzOONyxAu.exe ()
O4 - HKLM..\Run: [cWd8ZqhYXkVl8234A] C:\Windows\SysWOW64\Vs7LThwVOxySvo4.exe ()
O4 - HKLM..\Run: [cWfLTqYkVzNAuSb8234A] C:\Windows\SysWOW64\xTjCIrOy0v2b3Ga.exe ()
O4 - HKLM..\Run: [CwwjjUVeIBzPNc8234A] C:\Windows\SysWOW64\UQQQJ77dEK8gZ9Y.exe ()
O4 - HKLM..\Run: [cXjeItzPN8234A] C:\Windows\SysWOW64\wtPy1v2npHs7E8R.exe ()
O4 - HKLM..\Run: [CXXXUCeekIr8234A] C:\Windows\SysWOW64\HF3ppmG5aQJdW8.exe ()
O4 - HKLM..\Run: [CYeIrNx0c2DpGQ8234A] C:\Windows\SysWOW64\cnnnGG5aQH6W7Lg.exe ()
O4 - HKLM..\Run: [CyyyD3oFgRhXkVl8234A] C:\Windows\SysWOW64\vTTZqqhYCwkVl.exe ()
O4 - HKLM..\Run: [cZZqqjYYCwkV8234A] C:\Windows\SysWOW64\snnnG44aQH6sK7E.exe ()
O4 - HKLM..\Run: [D1ibD3onGaHsJfL8234A] C:\Windows\SysWOW64\EYCwkIVrlNx0c.exe ()
O4 - HKLM..\Run: [D5a6W7RgXjeIzNx8234A] C:\Windows\SysWOW64\sQdKf9TjCIrNxui.exe ()
O4 - HKLM..\Run: [D5Jd8RhXUeBzNAv8234A] C:\Windows\SysWOW64\efZTwUlBPy1v2F.exe ()
O4 - HKLM..\Run: [d5W7LgZhXkVlBz08234A] C:\Windows\SysWOW64\fycccS1ivD3nF.exe ()
O4 - HKLM..\Run: [d999hTTXq8234A] C:\Windows\SysWOW64\IpmmGG5aQJ6dK8R.exe ()
O4 - HKLM..\Run: [D9ZjCkNx0c13na8234A] C:\Windows\SysWOW64\OWWK7fR9XqVAcpQ.exe ()
O4 - HKLM..\Run: [DaHsKfLgZjCkVl8234A] C:\Windows\SysWOW64\SRTjCkVzNx0c2b3.exe ()
O4 - HKLM..\Run: [DaQQQH6dWK78234A] C:\Windows\SysWOW64\VzNNyxA0uvSibpG.exe ()
O4 - HKLM..\Run: [db3n5Q6W7R9TqYe8234A] C:\Windows\SysWOW64\DW8R9TqUeIrOyA.exe ()
O4 - HKLM..\Run: [Db3ppmG5aQJ8234A] C:\Windows\SysWOW64\OJdKR9TwClBzNAu.exe ()
O4 - HKLM..\Run: [DbbDD3oonG4mHsW8234A] C:\Windows\SysWOW64\WkkkIVrrlOtxPuc.exe ()
O4 - HKLM..\Run: [dbpGQd8RhwUlrNx8234A] C:\Windows\SysWOW64\IelIBtzPNc1v.exe ()
O4 - HKLM..\Run: [DcA1ivD2oFpHsJd8234A] C:\Windows\SysWOW64\zUVelOBtz0.exe ()
O4 - HKLM..\Run: [dCCCeekIVrzOtx08234A] C:\Windows\SysWOW64\vHdKfLgXqj.exe ()
O4 - HKLM..\Run: [DDDD3oonG4aHsW78234A] C:\Windows\SysWOW64\ygTZqYwIVltx0S1.exe ()
O4 - HKLM..\Run: [DelIBrzPy1m5KfL8234A] C:\Windows\SysWOW64\wmG5sQJ6dKR9TwU.exe ()
O4 - HKLM..\Run: [dFFF4pGsQ8234A] C:\Windows\SysWOW64\IBBttzPPNyA1uD2.exe ()
O4 - HKLM..\Run: [DFpGsJE8R9T8234A] C:\Windows\SysWOW64\kdKgZhwUeItPc1v.exe ()
O4 - HKLM..\Run: [DHHHsWJ77E8TZhC8234A] C:\Windows\SysWOW64\nuuccS1ibD34.exe ()
O4 - HKLM..\Run: [DiiivD2onFm8234A] C:\Windows\SysWOW64\R7E8RqhYYwUVBtA.exe ()
O4 - HKLM..\Run: [djClBPyAuSb3m5Q8234A] C:\Windows\SysWOW64\KPc1v2bpGsJd8R9.exe ()
O4 - HKLM..\Run: [DjjjYCCwkIV8234A] C:\Windows\SysWOW64\oQHH66sWK7fELgZ.exe ()
O4 - HKLM..\Run: [DjUUekIBrzNyA0v8234A] C:\Windows\SysWOW64\fxA11S22bma6WfR.exe ()
O4 - HKLM..\Run: [djVVeelIBtzPyc18234A] C:\Windows\SysWOW64\Fc1v2n4m5Q7E8Rh.exe ()
O4 - HKLM..\Run: [dL9gTZjwrOtP8234A] C:\Windows\SysWOW64\x9jeVOAcSiDGaHf.exe ()
O4 - HKLM..\Run: [DlllOBtxP0y8234A] C:\Windows\SysWOW64\LffEEL88gTZhYwk.exe ()
O4 - HKLM..\Run: [DmH6sWJ7LgZhCkV8234A] C:\Windows\SysWOW64\HCwkVrlONx0c1b3.exe ()
O4 - HKLM..\Run: [dn5HH6ddWKfR8234A] C:\Windows\SysWOW64\xGWfLhXjCkBzy0b.exe ()
O4 - HKLM..\Run: [dNNNtxxA0ucS8234A] C:\Windows\SysWOW64\I99ggTXXqjYekVr.exe ()
O4 - HKLM..\Run: [DobbpmmG5aQJdW8234A] C:\Windows\SysWOW64\hyyxA1uv2.exe ()
O4 - HKLM..\Run: [doobbF44p8234A] C:\Windows\SysWOW64\ceItPycA1uvD.exe ()
O4 - HKLM..\Run: [dpGa6W7R9TqYeIr8234A] C:\Windows\SysWOW64\cIrOyAuSi.exe ()
O4 - HKLM..\Run: [DppmQQJK8R9YjVI8234A] C:\Windows\SysWOW64\OgZhwUeOz0ciDoF.exe ()
O4 - HKLM..\Run: [dPPu1iDn4HVlBDF8234A] C:\Windows\SysWOW64\D99ggTqjYCwIrlt.exe ()
O4 - HKLM..\Run: [dqCkrOx0Sb3G8234A] C:\Windows\SysWOW64\YkrOx0Si3Ga6WfL.exe ()
O4 - HKLM..\Run: [dQQHHKK7fEL98234A] C:\Windows\SysWOW64\ct00uccS2ibDpn4.exe ()
O4 - HKLM..\Run: [DrNxuSb3GasKEgZ8234A] C:\Windows\SysWOW64\HyAviFn5Hd7RTqC.exe ()
O4 - HKLM..\Run: [drOx0c2DpGQ68234A] C:\Windows\SysWOW64\iSiFpGQ6W7RgXjC.exe ()
O4 - HKLM..\Run: [dRRZZqhYXwkU8234A] C:\Windows\SysWOW64\c777dEEL8.exe ()
O4 - HKLM..\Run: [dssQQJ77d8234A] C:\Windows\SysWOW64\VAAA11ivD2on4pH.exe ()
O4 - HKLM..\Run: [dTqYkVlNxuSiDo48234A] C:\Windows\SysWOW64\ub3naHsJf.exe ()
O4 - HKLM..\Run: [dUkBNAu2bnaH8234A] C:\Windows\SysWOW64\oXUlrPxup5JW89.exe ()
O4 - HKLM..\Run: [duuucSS2ib3nGaQ8234A] C:\Windows\SysWOW64\pkkkIVVrzONx.exe ()
O4 - HKLM..\Run: [DUUUVrrlOBtP0cS8234A] C:\Windows\SysWOW64\mnaH6sWfELgTZhY.exe ()
O4 - HKLM..\Run: [dWfLgXjeIrOx8234A] C:\Windows\SysWOW64\NIrNxuiFpGQ.exe ()
O4 - HKLM..\Run: [DWfLgZjCkVlNx0c8234A] C:\Windows\SysWOW64\fYeIrNx0c2b3n4Q.exe ()
O4 - HKLM..\Run: [dxu2b3GHW79T8234A] C:\Windows\SysWOW64\xAv2FmaJd8LTjeB.exe ()
O4 - HKLM..\Run: [dxxxuSbFnaHK8234A] C:\Windows\SysWOW64\QKK8fLhTqjCIrO.exe ()
O4 - HKLM..\Run: [DYCCekkIrONtA028234A] C:\Windows\SysWOW64\n66d7RRL9gTq.exe ()
O4 - HKLM..\Run: [dYIlPci3na6W7LT8234A] C:\Windows\SysWOW64\kfgqCIr2Dn4HWfL.exe ()
O4 - HKLM..\Run: [dyyycAA1i2nmQ7K8234A] C:\Windows\SysWOW64\GeellOBtzP.exe ()
O4 - HKLM..\Run: [DZ99hhTXwjCeIzN8234A] C:\Windows\SysWOW64\z5ssQQJ6dEK8f.exe ()
O4 - HKLM..\Run: [DzyAuSi3n5Q8234A] C:\Windows\SysWOW64\c1SoFp5Q6KfLTqU.exe ()
O4 - HKLM..\Run: [E000yccS1ivnFmE8234A] C:\Windows\SysWOW64\CibbDD3onG4aH6.exe ()
O4 - HKLM..\Run: [E111uvvD2obFpm58234A] C:\Windows\SysWOW64\peeelIIBtzPN.exe ()
O4 - HKLM..\Run: [e1voFp5Q6E8ZhXj8234A] C:\Windows\SysWOW64\IpHs7KXjVlBz.exe ()
O4 - HKLM..\Run: [E22oobFF4p8234A] C:\Windows\SysWOW64\BellIIBtzPNyA1v.exe ()
O4 - HKLM..\Run: [E33ppG55aH8234A] C:\Windows\SysWOW64\zLhXjCkBzyAuS2b.exe ()
O4 - HKLM..\Run: [e33ppnG44aH6sKf8234A] C:\Windows\SysWOW64\FzzzOONtxA0cS2b.exe ()
O4 - HKLM..\Run: [E3Fms7LRhwVOzy18234A] C:\Windows\SysWOW64\Gbo4HWf8ZYkrBPc.exe ()
O4 - HKLM..\Run: [e44aQH6sWK78234A] C:\Windows\SysWOW64\KOOONttA0uS2iDp.exe ()
O4 - HKLM..\Run: [E6fRRL99gT8234A] C:\Windows\SysWOW64\gvvvS22ibF3nGaQ.exe ()
O4 - HKLM..\Run: [E777fEEL8gTZhYw8234A] C:\Windows\SysWOW64\uc1bbD3onG4am6W.exe ()
O4 - HKLM..\Run: [E777fEL8gT8234A] C:\Windows\SysWOW64\BibbDD3onG4aH6W.exe ()
O4 - HKLM..\Run: [e7fELTZqCkVlNx08234A] C:\Windows\SysWOW64\KS2ibD3pn4Q6W.exe ()
O4 - HKLM..\Run: [E7RgXYeVzt8234A] C:\Windows\SysWOW64\hII0uFnaQ.exe ()
O4 - HKLM..\Run: [E9TqUeBN0S8234A] C:\Windows\SysWOW64\FBzNx1v2b3maJdK.exe ()
O4 - HKLM..\Run: [E9UeN0iaLI8234A] C:\Windows\SysWOW64\NzzPNNyxAuSFm5J.exe ()
O4 - HKLM..\Run: [eAuSoFpGaJdKfLh8234A] C:\Windows\SysWOW64\iByuopsdfhwClBz.exe ()
O4 - HKLM..\Run: [eBBttzPNycAuv2b8234A] C:\Windows\SysWOW64\O999hhYXwjUel.exe ()
O4 - HKLM..\Run: [EBrrzzPNyx8234A] C:\Windows\SysWOW64\rb4m5QdKfZhwUel.exe ()
O4 - HKLM..\Run: [EBrzPyx1u3maJ8234A] C:\Windows\SysWOW64\pUVelIuD2FGEfTU.exe ()
O4 - HKLM..\Run: [EcuomsE8R9TwU8234A] C:\Windows\SysWOW64\tHQdKRhjVB.exe ()
O4 - HKLM..\Run: [edEK8g9hXjeBzyA8234A] C:\Windows\SysWOW64\K1uvD2obFpHsJ.exe ()
O4 - HKLM..\Run: [EE8R9TwUeI8234A] C:\Windows\SysWOW64\rjeItPyAuDoFpGs.exe ()
O4 - HKLM..\Run: [EF5789wt14JfX8234A] C:\Windows\SysWOW64\kc3asdRXezc.exe ()
O4 - HKLM..\Run: [eFF33pnGGaQH6W78234A] C:\Windows\SysWOW64\xhhhTXXqjUCkrOy.exe ()
O4 - HKLM..\Run: [EGG44amH6sWJ78234A] C:\Windows\SysWOW64\W7E9ZjCwkINt0c1.exe ()
O4 - HKLM..\Run: [egggTTXqjYCkIrO8234A] C:\Windows\SysWOW64\XXUIrNxu23GaWfR.exe ()
O4 - HKLM..\Run: [eGHW7E8TqYw8234A] C:\Windows\SysWOW64\eW7E9TqYkVlNx0c.exe ()
O4 - HKLM..\Run: [EIIBzPNx1S2oF3m8234A] C:\Windows\SysWOW64\iQQJJEK8fRZhTwe.exe ()
O4 - HKLM..\Run: [EiQRzciipWgTqjC8234A] C:\Windows\SysWOW64\qdYPpEwtApfCzSQ.exe ()
O4 - HKLM..\Run: [eiWjtpsql3JTUx8234A] C:\Windows\SysWOW64\UhhTTXqjCekIzNx.exe ()
O4 - HKLM..\Run: [EJ77ffEL8TZhCwU8234A] C:\Windows\SysWOW64\D0uucSSib3nG4m6.exe ()
O4 - HKLM..\Run: [eJdKR9YwVlB8234A] C:\Windows\SysWOW64\kZhXUeOz0c1Do4m.exe ()
O4 - HKLM..\Run: [ejVItPyAu2b8234A] C:\Windows\SysWOW64\V0AiDoFp5Q7E8Rh.exe ()
O4 - HKLM..\Run: [EjYYCwkkIVONx0c8234A] C:\Windows\SysWOW64\aiibD3G4aQH6WKf.exe ()
O4 - HKLM..\Run: [em5aQJ6dW8R9Tq8234A] C:\Windows\SysWOW64\w89XUlzPNx1v2b3.exe ()
O4 - HKLM..\Run: [EnaQHsKf9TqYwIO8234A] C:\Windows\SysWOW64\ZxxAA0uucSi3.exe ()
O4 - HKLM..\Run: [EnnGGaQQ6dW7fLg8234A] C:\Windows\SysWOW64\au5hXqkrzNyx0vS.exe ()
O4 - HKLM..\Run: [ENNxA11uvS8234A] C:\Windows\SysWOW64\OZ99hhTXwjUClBz.exe ()
O4 - HKLM..\Run: [enpHQ7EgZhXjeIt8234A] C:\Windows\SysWOW64\wYwVlBzyAi.exe ()
O4 - HKLM..\Run: [eoFpGaJdKfL8234A] C:\Windows\SysWOW64\xZhXjClBzNx.exe ()
O4 - HKLM..\Run: [eoonF44mH5sQKgR8234A] C:\Windows\SysWOW64\KVVelOBBtz0Av.exe ()
O4 - HKLM..\Run: [EoonnG44amHW7Lg8234A] C:\Windows\SysWOW64\config\systemprofile\AppData\Roaming\sqjjYYCwkIVrONx\H000uucS1ib.exe ()
O4 - HKLM..\Run: [EPciDo4m6J8234A] C:\Windows\SysWOW64\aW7EgZjwIl.exe ()
O4 - HKLM..\Run: [EpmmH557dEK8RZh8234A] C:\Windows\SysWOW64\WlO0ivD2n.exe ()
O4 - HKLM..\Run: [ePy1voFm5JEgqY8234A] C:\Windows\SysWOW64\o4Hs7EgZYkV.exe ()
O4 - HKLM..\Run: [eqUkBzNAuSi8234A] C:\Windows\SysWOW64\VPyAu2b3m5JdKfL.exe ()
O4 - HKLM..\Run: [erOtAc2b3n48234A] C:\Windows\SysWOW64\xGQ6W7RgXjC.exe ()
O4 - HKLM..\Run: [eSb3n4QsKfL8234A] C:\Windows\SysWOW64\VaHW7R9TqCkVzNA.exe ()
O4 - HKLM..\Run: [EsQQJdEKR9TwUeI8234A] C:\Windows\SysWOW64\fAAA1uuvD2oF4mG.exe ()
O4 - HKLM..\Run: [eTTTZqqhYCwkVrO8234A] C:\Windows\SysWOW64\gsWWJJ7fEL8.exe ()
O4 - HKLM..\Run: [euDoFp5Q6E8RhXj8234A] C:\Windows\SysWOW64\ljjjUVVeItzN.exe ()
O4 - HKLM..\Run: [eUeBzONyxA0uS2b8234A] C:\Windows\SysWOW64\RAuSb3m5Q6W8R9.exe ()
O4 - HKLM..\Run: [eUlBz0c1v2n4m5Q8234A] C:\Windows\SysWOW64\rJ77ddELgRqY.exe ()
O4 - HKLM..\Run: [EVOxu2bpGaHW7E98234A] C:\Windows\SysWOW64\yBzx0SbpaHdf9Tq.exe ()
O4 - HKLM..\Run: [EvvSS2bpGQ6KfLT8234A] C:\Windows\SysWOW64\fCCCeekIBrzNy.exe ()
O4 - HKLM..\Run: [ewUeOx0c1v3FaH8234A] C:\Windows\SysWOW64\UPySiDn4m5W7LgZ.exe ()
O4 - HKLM..\Run: [ewwjjUCelIBrPN8234A] C:\Windows\SysWOW64\bssQQJ6dEK8fZ9T.exe ()
O4 - HKLM..\Run: [Ex0v2FpGaH8234A] C:\Windows\SysWOW64\QW8R9TqUkBz.exe ()
O4 - HKLM..\Run: [Ex0viFpGaHW7R8234A] C:\Windows\SysWOW64\b3m5QdKfLhqUeIr.exe ()
O4 - HKLM..\Run: [ExxAA0uucS2bDpn8234A] C:\Windows\SysWOW64\BqYeIrzOOt.exe ()
O4 - HKLM..\Run: [exxAAuvS2iFp5Q68234A] C:\Windows\SysWOW64\ohTTXqqjUCe.exe ()
O4 - HKLM..\Run: [exxxA00uvS2iF38234A] C:\Windows\SysWOW64\C9TXXqjUUCkIBzN.exe ()
O4 - HKLM..\Run: [EzPP0yAAivD2HQd8234A] C:\Windows\SysWOW64\idEL8gRZqhYXUeO.exe ()
O4 - HKLM..\Run: [ezzPP0yycA1vDon8234A] C:\Windows\SysWOW64\CLgRRZqhYXwUVlB.exe ()
O4 - HKLM..\Run: [EzzzPNyycAuvDob8234A] C:\Windows\SysWOW64\sJE8RZ9hYXwjUeI.exe ()
O4 - HKLM..\Run: [F1voFpG5a8234A] C:\Windows\SysWOW64\h5Q6E8ZhXjClBzN.exe ()
O4 - HKLM..\Run: [F333pmmG58234A] C:\Windows\SysWOW64\config\systemprofile\AppData\Roaming\vXXXjjUCel\RIIBBrzzPNyA1v.exe ()
O4 - HKLM..\Run: [F4m5Q7EgZhXjVlB8234A] C:\Windows\SysWOW64\GtttzPP0ycA12.exe ()
O4 - HKLM..\Run: [F4Q6WfLgZjwIrOt8234A] C:\Windows\SysWOW64\XTqYeVzNx0SiD.exe ()
O4 - HKLM..\Run: [faQQH6ddWK7RL8234A] C:\Windows\SysWOW64\jeIzNx0v2Fpn5.exe ()
O4 - HKLM..\Run: [FCCeekIIB8234A] C:\Windows\SysWOW64\p666dWWK8fR9hXq.exe ()
O4 - HKLM..\Run: [FCeeeIIBr8234A] C:\Windows\SysWOW64\p66ddWK8fRL9TXj.exe ()
O4 - HKLM..\Run: [FCkrOtAuSb3n8234A] C:\Windows\SysWOW64\DNx0v2FpGaHW7R9.exe ()
O4 - HKLM..\Run: [FClBzNx1v2Fp8234A] C:\Windows\SysWOW64\N1v2b4m5Q6E8RhX.exe ()
O4 - HKLM..\Run: [fdddEEK8gRZ9Y8234A] C:\Windows\SysWOW64\OvvvD2oonF4mHsQ.exe ()
O4 - HKLM..\Run: [FdEEKffZ9hTwjCl8234A] C:\Windows\SysWOW64\zwVIBzNAuDb4pG5.exe ()
O4 - HKLM..\Run: [FdEEKK8gR8234A] C:\Windows\SysWOW64\mDDD2oonF4pm5sJ.exe ()
O4 - HKLM..\Run: [FdKR9YjVl8234A] C:\Windows\SysWOW64\lYwUlBz0ciDoFp5.exe ()
O4 - HKLM..\Run: [FfLTqCkrOx0Si3n8234A] C:\Windows\SysWOW64\TIrNxuSb3ma6.exe ()
O4 - HKLM..\Run: [fFms7KRhwV8234A] C:\Windows\SysWOW64\Am5JE8RYwUlt0Ai.exe ()
O4 - HKLM..\Run: [FGaHW7E9T8234A] C:\Windows\SysWOW64\weIzNx0c2b.exe ()
O4 - HKLM..\Run: [FHEhUBP0ycAiDn48234A] C:\Windows\SysWOW64\BCNcDm7qUt.exe ()
O4 - HKLM..\Run: [FHHH66dWK7fLTjC8234A] C:\Windows\SysWOW64\hXjCkBzy0b3n.exe ()
O4 - HKLM..\Run: [fhXjVlBzNc8234A] C:\Windows\SysWOW64\ntPy1v2n4m5Q7E8.exe ()
O4 - HKLM..\Run: [fiDo4m5W7EgZh8234A] C:\Windows\SysWOW64\Nf8TqYwUlBx.exe ()
O4 - HKLM..\Run: [FjwIrOx0c1DoGaH8234A] C:\Windows\SysWOW64\IpGaHW7Eg.exe ()
O4 - HKLM..\Run: [FK88fRZ9hwUClBP8234A] C:\Windows\SysWOW64\uzzNyycA1vDobp5.exe ()
O4 - HKLM..\Run: [FkBzNA0uvS2iF3n8234A] C:\Windows\SysWOW64\l5JdKf9Tq.exe ()
O4 - HKLM..\Run: [FkrOx0SiFnG58234A] C:\Windows\SysWOW64\by1voFpGQ6WfLhq.exe ()
O4 - HKLM..\Run: [FlBz0ciDoFp58234A] C:\Windows\SysWOW64\O1v3n4msJdLgqYw.exe ()
O4 - HKLM..\Run: [flIIBzzNx1S2oFp8234A] C:\Windows\SysWOW64\vQQJJEK8fRZhTwj.exe ()
O4 - HKLM..\Run: [fm5Q6WfLhXjeI8234A] C:\Windows\SysWOW64\oKf9TwUeBzNx1So.exe ()
O4 - HKLM..\Run: [fmJ8hl1b5d9jI8234A] C:\Windows\SysWOW64\XRZqhYXwkVlty.exe ()
O4 - HKLM..\Run: [fNAvo3GQdKfLh8234A] C:\Windows\SysWOW64\HPc1Dbp5JEf9XUl.exe ()
O4 - HKLM..\Run: [FnnFF4amm5sW8234A] C:\Windows\SysWOW64\diiivvD3o.exe ()
O4 - HKLM..\Run: [Fo4msJE8RhXj8234A] C:\Windows\SysWOW64\rs7E8RhXjVItPc1.exe ()
O4 - HKLM..\Run: [fobbFFpm568RUeI8234A] C:\Windows\SysWOW64\zKK8RZ9hXUeBPc1.exe ()
O4 - HKLM..\Run: [fp5Q6WRTYV8234A] C:\Windows\SysWOW64\FfLhXjCIrOyAuSi.exe ()
O4 - HKLM..\Run: [FPySiDn4m5Jd8234A] C:\Windows\SysWOW64\P3n4msJfLgqYwUl.exe ()
O4 - HKLM..\Run: [FQ6E8R9Tw8234A] C:\Windows\SysWOW64\NhXUeItPyAuDoFp.exe ()
O4 - HKLM..\Run: [FqCkVOt0c8234A] C:\Windows\SysWOW64\iIrNxuSb3Ga6W7L.exe ()
O4 - HKLM..\Run: [FqCkVOx0Sb3G8234A] C:\Windows\SysWOW64\rzNxu2bpGaHdKfL.exe ()
O4 - HKLM..\Run: [frOtP0ycc1ivDoF8234A] C:\Windows\SysWOW64\pSiDoGaHsJE8TqY.exe ()
O4 - HKLM..\Run: [FTqYekIVr8234A] C:\Windows\SysWOW64\SSiFpGa6W7.exe ()
O4 - HKLM..\Run: [fTXqCkBzyAu2b8234A] C:\Windows\SysWOW64\OGGG5aaJ6dWKfR9.exe ()
O4 - HKLM..\Run: [Fv3naHsJ7dE8gZq8234A] C:\Windows\SysWOW64\X7E8ZhCkrOtPy.exe ()
O4 - HKLM..\Run: [FVltPuSi38234A] C:\Windows\SysWOW64\zc2b3naHsKE9TqY.exe ()
O4 - HKLM..\Run: [Fx0v2bpGaHd7R9T8234A] C:\Windows\SysWOW64\I8LhXjCIr.exe ()
O4 - HKLM..\Run: [fxAAA0uvS2ibpG58234A] C:\Windows\SysWOW64\NXXXqjjUCekBrON.exe ()
O4 - HKLM..\Run: [fXXjUCCIBOy0v2i8234A] C:\Windows\SysWOW64\ny1vS2FG5a6d8Rh.exe ()
O4 - HKLM..\Run: [Fy1v2b4GsJdK8234A] C:\Windows\SysWOW64\OFpHQ7E8RhXjVlt.exe ()
O4 - HKLM..\Run: [fYjVlBzNAu2bpGQ8234A] C:\Windows\SysWOW64\LBPyAiDn4m5JdKg.exe ()
O4 - HKLM..\Run: [fYwVlBPySi3n48234A] C:\Windows\SysWOW64\VlNxuSboGm6JfLg.exe ()
O4 - HKLM..\Run: [fYXwjVlIBzNc18234A] C:\Windows\SysWOW64\Q2onF4pmHsJdKZ.exe ()
O4 - HKLM..\Run: [FZ9hTXwjUeIrPyA8234A] C:\Windows\SysWOW64\kvD2obF4pGsJdKf.exe ()
O4 - HKLM..\Run: [fzyA11vSb3pGa8234A] C:\Windows\SysWOW64\V1Do4msJd8RhXUe.exe ()
O4 - HKLM..\Run: [g1ivD3onFm5W7E88234A] C:\Windows\SysWOW64\YVrOBtxP0c.exe ()
O4 - HKLM..\Run: [G2FpGa6W7LgXYeI8234A] C:\Windows\SysWOW64\N6W8R9XjCkrOyA.exe ()
O4 - HKLM..\Run: [G3GaHs7E8ZhCkVl8234A] C:\Windows\SysWOW64\XE9TjCkVOtPuS.exe ()
O4 - HKLM..\Run: [g4amH6sWJfLgZh8234A] C:\Windows\SysWOW64\ErNAvi3nHW.exe ()
O4 - HKLM..\Run: [G4m6J7ffE88234A] C:\Windows\SysWOW64\EHs7E9TjCkV0SiD.exe ()
O4 - HKLM..\Run: [G4msQJJ7EKYwj8234A] C:\Windows\SysWOW64\tJE8RhXkeOt0c1v.exe ()
O4 - HKLM..\Run: [G66sWWK7fEL9TZj8234A] C:\Windows\SysWOW64\JVztAu2iib3pG4Q.exe ()
O4 - HKLM..\Run: [G9qwNui46JE8TqY8234A] C:\Windows\SysWOW64\rc2b3GaHs.exe ()
O4 - HKLM..\Run: [GAu2b3m5Qd8234A] C:\Windows\SysWOW64\TZZ99hTTXwjCeIr.exe ()
O4 - HKLM..\Run: [gAv2bpGQ6Kf9TjC8234A] C:\Windows\SysWOW64\DIP1omJ8hXjeIz.exe ()
O4 - HKLM..\Run: [Gb3mJ89jkzAS38234A] C:\Windows\SysWOW64\OhhTTXwwjUClIrP.exe ()
O4 - HKLM..\Run: [GbbF3pm5a6W8fLh8234A] C:\Windows\SysWOW64\glrPNyx1uvS.exe ()
O4 - HKLM..\Run: [GccAA1iivD2nFm58234A] C:\Windows\SysWOW64\HwwwkUVeelBtz0.exe ()
O4 - HKLM..\Run: [gCCCwkIrOx01D348234A] C:\Windows\SysWOW64\P66ssWKK7Ej.exe ()
O4 - HKLM..\Run: [gciDoF44am5sW7d8234A] C:\Windows\SysWOW64\p4HsJfLTqYwUrBx.exe ()
O4 - HKLM..\Run: [gcuDoFp5Q6E8RhX8234A] C:\Windows\SysWOW64\EKg9YwUeBz.exe ()
O4 - HKLM..\Run: [gDDD3oonG4aH6W8234A] C:\Windows\SysWOW64\i000ucSS1i.exe ()
O4 - HKLM..\Run: [GDoGaHs7E8ThCkV8234A] C:\Windows\SysWOW64\NqqjjYCwkVlOt0c.exe ()
O4 - HKLM..\Run: [GEEKK8ggRZhYXjU8234A] C:\Windows\SysWOW64\gv2npHssQJ7.exe ()
O4 - HKLM..\Run: [gfLgqYeIzNx0c2D8234A] C:\Windows\SysWOW64\LUeIzNx0SiFn5Q6.exe ()
O4 - HKLM..\Run: [gggTqjeIrOt8234A] C:\Windows\SysWOW64\qGGG5aaQH6dW7fL.exe ()
O4 - HKLM..\Run: [GhhhYCCwkUVrO8234A] C:\Windows\SysWOW64\ammmH66sWJ7ELgT.exe ()
O4 - HKLM..\Run: [GhhhYXXwjUVlI8234A] C:\Windows\SysWOW64\amHH55sQJ7dE8gZ.exe ()
O4 - HKLM..\Run: [GhXjClBzNxuSo8234A] C:\Windows\SysWOW64\PBzNc1v2b4m5Q6K.exe ()
O4 - HKLM..\Run: [gIVrlONtxuSDnaH8234A] C:\Windows\SysWOW64\jG4aQH6sW7E9TjC.exe ()
O4 - HKLM..\Run: [gJJJ7ffE8TqYUlt8234A] C:\Windows\SysWOW64\fTjCzxiHXOc6Zt1.exe ()
O4 - HKLM..\Run: [GkeOt0c1vo8234A] C:\Windows\SysWOW64\tPySv3n4HsJE8Rh.exe ()
O4 - HKLM..\Run: [Gl0SDoFaHW7EgqX8234A] C:\Windows\SysWOW64\tSbo46JfLTqYw.exe ()
O4 - HKLM..\Run: [gL99ggTXqjYCkI8234A] C:\Windows\SysWOW64\i66ddWK7fR.exe ()
O4 - HKLM..\Run: [glllIBBrzPNyA128234A] C:\Windows\SysWOW64\NKKK8fRRZ9TXjC.exe ()
O4 - HKLM..\Run: [Gm5Jd8RhTXwjUeI8234A] C:\Windows\SysWOW64\rwwjjUVeelBNcu2.exe ()
O4 - HKLM..\Run: [GnnnG44aQH8234A] C:\Windows\SysWOW64\OVzNx0ucS2ib3.exe ()
O4 - HKLM..\Run: [godYOimRVcFEXBA8234A] C:\Windows\SysWOW64\Httxx0DD36T.exe ()
O4 - HKLM..\Run: [GonF4amH5W7E8Rq8234A] C:\Windows\SysWOW64\rYCwkUVrlBx0c1v.exe ()
O4 - HKLM..\Run: [GpGQ6KRhqUerOyu8234A] C:\Windows\SysWOW64\i9hTXwjUClBPy1v.exe ()
O4 - HKLM..\Run: [gpppnGG5aQH8234A] C:\Windows\SysWOW64\xhXjCIrOy0uvSiF.exe ()
O4 - HKLM..\Run: [GqjCeIVVzxuc2b38234A] C:\Windows\SysWOW64\O3pp5aaQ6dWKfLg.exe ()
O4 - HKLM..\Run: [GrOx0c2b3n8234A] C:\Windows\SysWOW64\DQ6W7R9TqYe.exe ()
O4 - HKLM..\Run: [GRZ99hXweBNx1vS8234A] C:\Windows\SysWOW64\PeelIBtzycAvoFp.exe ()
O4 - HKLM..\Run: [gRZZ99hTXwjUelB8234A] C:\Windows\SysWOW64\q444pmmG5sQ6dE8.exe ()
O4 - HKLM..\Run: [GVltNAvoFm5JE8234A] C:\Windows\SysWOW64\wYXVOzy1DnmsEgh.exe ()
O4 - HKLM..\Run: [gvoFGaJK8R9TqU8234A] C:\Windows\SysWOW64\BobbF4GsJKRhwCB.exe ()
O4 - HKLM..\Run: [GVrlOBtxPySv38234A] C:\Windows\SysWOW64\lmH6sWJ7fLgZhCk.exe ()
O4 - HKLM..\Run: [GW7R9TqCkVzNx8234A] C:\Windows\SysWOW64\PqUeIrOyAu2b3n5.exe ()
O4 - HKLM..\Run: [gYwVlBxySiDo4m8234A] C:\Windows\SysWOW64\ROxuSiDn4msJfLg.exe ()
O4 - HKLM..\Run: [GyyxxA0uuS2bFpG8234A] C:\Windows\SysWOW64\cjjUUCekIBrz.exe ()
O4 - HKLM..\Run: [GyyxxA0uuv2bFpG8234A] C:\Windows\SysWOW64\RLL99hTTjUCkIrz.exe ()
O4 - HKLM..\Run: [GZTwUeBzzNyAu8234A] C:\Windows\SysWOW64\xeItNc1voFp5Q6E.exe ()
O4 - HKLM..\Run: [GzzOONtxxAucSiD8234A] C:\Windows\SysWOW64\PFpGaHW7R9TqCkV.exe ()
O4 - HKLM..\Run: [GZZqqhYYCwkVrOB8234A] C:\Windows\SysWOW64\a444ammH6sW7fL8.exe ()
O4 - HKLM..\Run: [h1iiivD3onF4mHs8234A] C:\Windows\SysWOW64\UVVVrllOBtxPyc.exe ()
O4 - HKLM..\Run: [h22iibFF38234A] C:\Windows\SysWOW64\xCCeekIBBrONyA.exe ()
O4 - HKLM..\Run: [H333onnG4aH6W78234A] C:\Windows\SysWOW64\XVVrrlONtxP0cSi.exe ()
O4 - HKLM..\Run: [h3n4msJfLgqYwUr8234A] C:\Windows\SysWOW64\aW7E9ZjCkVltPuS.exe ()
O4 - HKLM..\Run: [H5aQH6dWKR9TqY8234A] C:\Windows\SysWOW64\RJ6dWK8fRkBzAuS.exe ()
O4 - HKLM..\Run: [h6ddWWK8f8234A] C:\Windows\SysWOW64\aTwUeBzNx1SoFpG.exe ()
O4 - HKLM..\Run: [H888fRRZ9hT8234A] C:\Windows\SysWOW64\sobbFF4pmG5sJ6E.exe ()
O4 - HKLM..\Run: [h9TjClBzNAuSoFp8234A] C:\Windows\SysWOW64\HtNc1v2bpGsJdK.exe ()
O4 - HKLM..\Run: [h9YjVltPcuDb45Q8234A] C:\Windows\SysWOW64\DYwVltPc1voFHs7.exe ()
O4 - HKLM..\Run: [HammsJfLgqYwUr8234A] C:\Windows\SysWOW64\QPPP0uucS1ib3oG.exe ()
O4 - HKLM..\Run: [hAu2Fp5Q68234A] C:\Windows\SysWOW64\N2b35JWfLTqUeBz.exe ()
O4 - HKLM..\Run: [hb4GQd8ZTjeBPxu8234A] C:\Windows\SysWOW64\TH55sdKRZ9XltPc.exe ()
O4 - HKLM..\Run: [hbbDD3pnnGaQHsK8234A] C:\Windows\SysWOW64\pCkVrzzONtx0uc2.exe ()
O4 - HKLM..\Run: [HCwkVrlONx0c1b38234A] C:\Windows\SysWOW64\b3pnGaQ6sKfLgZj.exe ()
O4 - HKLM..\Run: [hd7RgXqjYkVz8234A] C:\Windows\SysWOW64\DkBOx0SiFn5.exe ()
O4 - HKLM..\Run: [HE9TqYkVlNPuSi8234A] C:\Windows\SysWOW64\drOx0ci3n4Qs.exe ()
O4 - HKLM..\Run: [hf9TjCIzyAuS8234A] C:\Windows\SysWOW64\OXUlBPyAu2bpGQd.exe ()
O4 - HKLM..\Run: [HGGG5aaQH6d8234A] C:\Windows\SysWOW64\sNNyyxAA0uv2iF3.exe ()
O4 - HKLM..\Run: [HgTTXXqjYCekVr8234A] C:\Windows\SysWOW64\WGG55aQQH6dK7RL.exe ()
O4 - HKLM..\Run: [hgTZqjYCwVlNx0c8234A] C:\Windows\SysWOW64\GnaQH6sWKE.exe ()
O4 - HKLM..\Run: [HgXjeIIVrzO8234A] C:\Windows\SysWOW64\o0SiFpGaHdK.exe ()
O4 - HKLM..\Run: [hhXkVVelOBtz0yA8234A] C:\Windows\SysWOW64\p3n4m5W7E.exe ()
O4 - HKLM..\Run: [HJJ77EEL8gRZhXw8234A] C:\Windows\SysWOW64\ttttxPP0ycS1vDo.exe ()
O4 - HKLM..\Run: [HKK8R9XjCkB8234A] C:\Windows\SysWOW64\XSSS2oobF3pm5ad.exe ()
O4 - HKLM..\Run: [HkVlNPuSiDo8234A] C:\Windows\SysWOW64\A0c2b3GaHsKE9Tq.exe ()
O4 - HKLM..\Run: [HlOOBBtxP0yciDn8234A] C:\Windows\SysWOW64\igTTZZqhYCwkV.exe ()
O4 - HKLM..\Run: [HmmG5QJ6dK8fL9T8234A] C:\Windows\SysWOW64\PlllIBNyxA1uSoF.exe ()
O4 - HKLM..\Run: [HnnnGG5aQH6dfR8234A] C:\Windows\SysWOW64\PkIBrzOxA0uv2iF.exe ()
O4 - HKLM..\Run: [Ho4m5QdKfZTwUe8234A] C:\Windows\SysWOW64\Wg9YwUeBzNc1.exe ()
O4 - HKLM..\Run: [hOOBttxP08234A] C:\Windows\SysWOW64\yfffELL8gTZhYw.exe ()
O4 - HKLM..\Run: [HOONyyAA0uS8234A] C:\Windows\SysWOW64\jfffRLL9hTXjUek.exe ()
O4 - HKLM..\Run: [HOOONttxA0u8234A] C:\Windows\SysWOW64\cb3Gad7R9TqCeIV.exe ()
O4 - HKLM..\Run: [HOtPyS1ivD38234A] C:\Windows\SysWOW64\o4msJfLgZhC.exe ()
O4 - HKLM..\Run: [HQQQJ7dKjePAFms8234A] C:\Windows\SysWOW64\ivDD2oonF4.exe ()
O4 - HKLM..\Run: [HrlllOBtxP0ySiD8234A] C:\Windows\SysWOW64\vgggTZZqhYCkU.exe ()
O4 - HKLM..\Run: [HrPy1v2FpGQ6Kf98234A] C:\Windows\SysWOW64\y1DoFm5QdKfZTwU.exe ()
O4 - HKLM..\Run: [HrrzzPNyyx1uvo8234A] C:\Windows\SysWOW64\V456Kf9XCelI.exe ()
O4 - HKLM..\Run: [HsKfEL99gTZjYwk8234A] C:\Windows\SysWOW64\kjCkVOtAuSiDpGa.exe ()
O4 - HKLM..\Run: [HSS11ibD3on4aH8234A] C:\Windows\SysWOW64\sCCwwkkVrlOtxPu.exe ()
O4 - HKLM..\Run: [HtttzzP0ycA1vDo8234A] C:\Windows\SysWOW64\YLLL8ggRZqhYw.exe ()
O4 - HKLM..\Run: [HtxxPP0ycS1v3n8234A] C:\Windows\SysWOW64\zJJJ7fLgTZqYkUl.exe ()
O4 - HKLM..\Run: [hTXXqqjYC8234A] C:\Windows\SysWOW64\AGG55aQQH6dK7RL.exe ()
O4 - HKLM..\Run: [htzzPPNycA1uD248234A] C:\Windows\SysWOW64\WXXwwjUUVelB.exe ()
O4 - HKLM..\Run: [hTZZZqhYCwkUVlB8234A] C:\Windows\SysWOW64\WsssWJJ7fELg.exe ()
O4 - HKLM..\Run: [huSi3n4Hs7E88234A] C:\Windows\SysWOW64\gDn4QsKf9TqCkrO.exe ()
O4 - HKLM..\Run: [hVlBPySiDn4m8234A] C:\Windows\SysWOW64\SDn4HJE8ZY.exe ()
O4 - HKLM..\Run: [HvSS22obF3pGa6W8234A] C:\Windows\SysWOW64\V55sJYtvQ6ZCzyA.exe ()
O4 - HKLM..\Run: [hvvDD2onnFpmHsJ8234A] C:\Windows\SysWOW64\ivvvDD3oHEqUtc1.exe ()
O4 - HKLM..\Run: [hwIlNx0ciDoGaHs8234A] C:\Windows\SysWOW64\XAuSi3n4Q6WfLgZ.exe ()
O4 - HKLM..\Run: [hWJ7dELRZhXk8234A] C:\Windows\SysWOW64\LtxP0yc1iDoFaH.exe ()
O4 - HKLM..\Run: [HWWWJ7fEL9g8234A] C:\Windows\SysWOW64\zttxxP0cion4m.exe ()
O4 - HKLM..\Run: [HxA1uvS2oFpGaJd8234A] C:\Windows\SysWOW64\EQJ6dEKf9TwUeBz.exe ()
O4 - HKLM..\Run: [hXjCkIIVrzONxAu8234A] C:\Windows\SysWOW64\szNx0v2b3n5QdKf.exe ()
O4 - HKLM..\Run: [hxy1voFm5JEh8234A] C:\Windows\SysWOW64\Sa6WfLTqCV.exe ()
O4 - HKLM..\Run: [Hy1v2Fm5JKR8234A] C:\Windows\SysWOW64\Zi2Fm5Jd8RhXjeI.exe ()
O4 - HKLM..\Run: [HZZZqqjYrlONxP8234A] C:\Windows\SysWOW64\lTqjjIrzONtA0c2.exe ()
O4 - HKLM..\Run: [I3GaHW7LTqCkrOx8234A] C:\Windows\SysWOW64\LKf9XjCIrOtAu2.exe ()
O4 - HKLM..\Run: [i3pmG5aQJd8234A] C:\Windows\SysWOW64\Ys6KRhwCIzy1v2b.exe ()
O4 - HKLM..\Run: [I4GsJdKR9TwClBz8234A] C:\Windows\SysWOW64\GRhXjVltPyAu2.exe ()
O4 - HKLM..\Run: [i4HWLjkrNPuSi348234A] C:\Windows\SysWOW64\bipaHd79XYIztA2.exe ()
O4 - HKLM..\Run: [I5JEf9XUlrNAvo38234A] C:\Windows\SysWOW64\nRZ9hYjUeBPy1Db.exe ()
O4 - HKLM..\Run: [i66ddWK7fR8234A] C:\Windows\SysWOW64\dvvvS22ibF3pG5Q.exe ()
O4 - HKLM..\Run: [i6Kf9qwVlN0c1Dn8234A] C:\Windows\SysWOW64\mjYCekIVrOx0c23.exe ()
O4 - HKLM..\Run: [i6KR9XjekIVtA0i8234A] C:\Windows\SysWOW64\fUeIrOx0viFpG.exe ()
O4 - HKLM..\Run: [I8fRL9TXqUeIrOx8234A] C:\Windows\SysWOW64\OF3pmG5aQ6.exe ()
O4 - HKLM..\Run: [i8gRRZ99hY8234A] C:\Windows\SysWOW64\OymLkPccAio45sJ.exe ()
O4 - HKLM..\Run: [IAu2b3naHsKfLTq8234A] C:\Windows\SysWOW64\Ga6W7R9TjCkVz.exe ()
O4 - HKLM..\Run: [iBBBrzzONyx0u8234A] C:\Windows\SysWOW64\hjjUUCekk.exe ()
O4 - HKLM..\Run: [IbDD3o46sW7f8234A] C:\Windows\SysWOW64\q99gTTZqYkrl.exe ()
O4 - HKLM..\Run: [ibDD3oonG4aHsJf8234A] C:\Windows\SysWOW64\ztxxPP0ucS.exe ()
O4 - HKLM..\Run: [IF44ppmH5sQJ8234A] C:\Windows\SysWOW64\dkkVeelOBtzPycD.exe ()
O4 - HKLM..\Run: [IgqXUlt0Avo4HQd8234A] C:\Windows\SysWOW64\olt0ci3Fm5J.exe ()
O4 - HKLM..\Run: [IiibbD33onGam6W8234A] C:\Windows\SysWOW64\TONNttxP0ucS.exe ()
O4 - HKLM..\Run: [iKf9TwUlBzNxu8234A] C:\Windows\SysWOW64\kccAA1uvDoF4m5Q.exe ()
O4 - HKLM..\Run: [IKRhXUIPy8234A] C:\Windows\SysWOW64\Aty1v2Fms.exe ()
O4 - HKLM..\Run: [ilBzNcuDoF8234A] C:\Windows\SysWOW64\e1v2n4msJdKg9Yw.exe ()
O4 - HKLM..\Run: [InnnF44am8234A] C:\Windows\SysWOW64\oETqhhYrOBtx0yi.exe ()
O4 - HKLM..\Run: [ionnG4mHWJ7ELgZ8234A] C:\Windows\SysWOW64\blOOONtxP0c.exe ()
O4 - HKLM..\Run: [IPPP0yycA8234A] C:\Windows\SysWOW64\iZhXwkUUVelBt.exe ()
O4 - HKLM..\Run: [IqertuSiD8234A] C:\Windows\SysWOW64\D6W8LhjkzxvFGHK.exe ()
O4 - HKLM..\Run: [IUCCeelIBrzPNx18234A] C:\Windows\SysWOW64\rJ66ddEK8fRZhTw.exe ()
O4 - HKLM..\Run: [IuSi3n4m6JfL8234A] C:\Windows\SysWOW64\RGaHs7E9TqCkVlN.exe ()
O4 - HKLM..\Run: [iVzNx0SiDp4Q6Wf8234A] C:\Windows\SysWOW64\fi3n5Q6KfLgXY.exe ()
O4 - HKLM..\Run: [IWd8RhwVOzy1Dnp8234A] C:\Windows\SysWOW64\LqCUlt0Svo4.exe ()
O4 - HKLM..\Run: [IxxxA00uvS2iF3n8234A] C:\Windows\SysWOW64\zXqqjUCkIBrzN.exe ()
O4 - HKLM..\Run: [IYYXXwjUUVlIBzP8234A] C:\Windows\SysWOW64\aEEKK8gRZ9.exe ()
O4 - HKLM..\Run: [IZZZ9hhTXwjClBz8234A] C:\Windows\SysWOW64\WDD22obFFpmGsQ6.exe ()
O4 - HKLM..\Run: [j00ucSS1bD3nGam8234A] C:\Windows\SysWOW64\VwkkkIVlONtx.exe ()
O4 - HKLM..\Run: [J1uuvvD2o8234A] C:\Windows\SysWOW64\WjjjUVVelIBzPyc.exe ()
O4 - HKLM..\Run: [J3ppnnG4aQH6WKE8234A] C:\Windows\SysWOW64\oNNNtxxA0ucSib.exe ()
O4 - HKLM..\Run: [j66dEKK8fRZ9T8234A] C:\Windows\SysWOW64\TzzPPyyc1uD2oFp.exe ()
O4 - HKLM..\Run: [j9TqUkBzNxuSi8234A] C:\Windows\SysWOW64\ry1v2b3GaJdK.exe ()
O4 - HKLM..\Run: [J9TwUlBzNAuS8234A] C:\Windows\SysWOW64\vItPyAu2b4m5JdK.exe ()
O4 - HKLM..\Run: [JaammH6ssJ7fE8T8234A] C:\Windows\SysWOW64\r111ibbD3on4.exe ()
O4 - HKLM..\Run: [JAu2b3n4H8234A] C:\Windows\SysWOW64\DpGQ6W7R9XjCkVO.exe ()
O4 - HKLM..\Run: [jbbbD33pnG8234A] C:\Windows\SysWOW64\SIIVVrzzONxA0cS.exe ()
O4 - HKLM..\Run: [jD2onF4pHsJdK8234A] C:\Windows\SysWOW64\id8ZYkeBPc.exe ()
O4 - HKLM..\Run: [jDoFp5Q6E8R9TwU8234A] C:\Windows\SysWOW64\W7KZXUVltPyA.exe ()
O4 - HKLM..\Run: [JgggTZZqjYCwIVl8234A] C:\Windows\SysWOW64\nQH66sWWK7EL.exe ()
O4 - HKLM..\Run: [JgXjCIrOt8234A] C:\Windows\SysWOW64\tv2bpGaHW7.exe ()
O4 - HKLM..\Run: [jiDoFa5W7E8234A] C:\Windows\SysWOW64\NLgZhwUrOt0.exe ()
O4 - HKLM..\Run: [jIIVVlOONtx0cSi8234A] C:\Windows\SysWOW64\D3nQHW7fELgZqYw.exe ()
O4 - HKLM..\Run: [jJdLgZYwUeOz08234A] C:\Windows\SysWOW64\bkVlBPySiDo.exe ()
O4 - HKLM..\Run: [jjjjUCCelI8234A] C:\Windows\SysWOW64\SQQJJ6dEK8fRZhX.exe ()
O4 - HKLM..\Run: [JjjjYYCekIVrONx8234A] C:\Windows\SysWOW64\FKK77fRRL9gX.exe ()
O4 - HKLM..\Run: [JkkkIVrllOtxPuS8234A] C:\Windows\SysWOW64\G4Q6WK7fEL9gZqY.exe ()
O4 - HKLM..\Run: [jkrOtAc2b3GaH8234A] C:\Windows\SysWOW64\rb3GaHd7R9Tj.exe ()
O4 - HKLM..\Run: [JmmHH6ssWJfE8234A] C:\Windows\SysWOW64\q3oonnG4a.exe ()
O4 - HKLM..\Run: [jQ6W8R9TjC8234A] C:\Windows\SysWOW64\JTwUeIrPyAv2b3m.exe ()
O4 - HKLM..\Run: [jQHH66sWK78234A] C:\Windows\SysWOW64\w00uucSS2ib3pG4.exe ()
O4 - HKLM..\Run: [jR9TwClBzyAuS8234A] C:\Windows\SysWOW64\rPyAu2b4msJd.exe ()
O4 - HKLM..\Run: [JS1bD3onGm6W7E88234A] C:\Windows\SysWOW64\L7ELgZqjYkVlNxu.exe ()
O4 - HKLM..\Run: [JSiFpGQ6W7RgXjC8234A] C:\Windows\SysWOW64\pK88f9hTqUeIzNx.exe ()
O4 - HKLM..\Run: [jSoobF6fRL9hXqU8234A] C:\Windows\SysWOW64\HTISsYtnJVQRIv.exe ()
O4 - HKLM..\Run: [JSS2ibF3p8234A] C:\Windows\SysWOW64\EeeekIIBrzONxAu.exe ()
O4 - HKLM..\Run: [jtPy1v3n4H5WJ8234A] C:\Windows\SysWOW64\sDoGm6W7E8ZhCkV.exe ()
O4 - HKLM..\Run: [jTTXXqjjYCkIVzN8234A] C:\Windows\SysWOW64\T2iibbF3pnG5QHd.exe ()
O4 - HKLM..\Run: [juuucS1ibD3oG4m8234A] C:\Windows\SysWOW64\LrrrllONtxP.exe ()
O4 - HKLM..\Run: [JuvvD2ob4pm5sJK8234A] C:\Windows\SysWOW64\UXXwwjUUVeIBzPy.exe ()
O4 - HKLM..\Run: [JwUlBPy1v8234A] C:\Windows\SysWOW64\utPyAu2b4msJd8R.exe ()
O4 - HKLM..\Run: [jwwwkUUVelOBzPy8234A] C:\Windows\SysWOW64\eWWWJJdEL8gZqY.exe ()
O4 - HKLM..\Run: [JxxAA1uuvoFpGaJ8234A] C:\Windows\SysWOW64\dTTXXwjjUelIBzN.exe ()
O4 - HKLM..\Run: [JxySva5W7LgqYwU8234A] C:\Windows\SysWOW64\IGmsJE8ZhwUl.exe ()
O4 - HKLM..\Run: [jyAuSo3m5Q6Wf8234A] C:\Windows\SysWOW64\lsJd8R9TwClB.exe ()
O4 - HKLM..\Run: [JYeVzt0Sbp4H8234A] C:\Windows\SysWOW64\wONyxASbFp5HWf9.exe ()
O4 - HKLM..\Run: [JzzzP00ycA1vDon8234A] C:\Windows\SysWOW64\FXwwkkUVelOB.exe ()
O4 - HKLM..\Run: [k0c1DoGa6W7EgZ8234A] C:\Windows\SysWOW64\NssWWfLgZjwIrO.exe ()
O4 - HKLM..\Run: [K444aQH6sW8234A] C:\Windows\SysWOW64\kNx00uccS1iD3n.exe ()
O4 - HKLM..\Run: [K6ddEKK8fXUeIBz8234A] C:\Windows\SysWOW64\fuvvD2ob4pmGs.exe ()
O4 - HKLM..\Run: [K6Zjlx2aKhCrAbp8234A] C:\Windows\SysWOW64\leB0in5E9VBu.exe ()
O4 - HKLM..\Run: [k777ddEK8gR8234A] C:\Windows\SysWOW64\QAiD2oonF4pm5s.exe ()
O4 - HKLM..\Run: [K7dEK8gRZhXjVlB8234A] C:\Windows\SysWOW64\LD2onF4pm5Q.exe ()
O4 - HKLM..\Run: [k8ggRRZ9hYXwUVl8234A] C:\Windows\SysWOW64\O4ppmmH5sQ.exe ()
O4 - HKLM..\Run: [KAA1ivvD2on4pH58234A] C:\Windows\SysWOW64\GellOBBtzP.exe ()
O4 - HKLM..\Run: [KaaQQH66dW8234A] C:\Windows\SysWOW64\INNyyxA0uvS2bpG.exe ()
O4 - HKLM..\Run: [kaHfjIt0Sbo4HWf8234A] C:\Windows\SysWOW64\F9gTZqjYCkzN0Sb.exe ()
O4 - HKLM..\Run: [kaQQHdK7fRLXjYe8234A] C:\Windows\SysWOW64\KeBxvF5dRqIyv.exe ()
O4 - HKLM..\Run: [kBzyAv2Fp5QdKR98234A] C:\Windows\SysWOW64\U1voFm5Jd8R9Xj.exe ()
O4 - HKLM..\Run: [KCwwkkIVrlOtxPu8234A] C:\Windows\SysWOW64\I6W7E99gTZqY.exe ()
O4 - HKLM..\Run: [KeBz0c1v2n4m5Q78234A] C:\Windows\SysWOW64\D1i3n4am5JdLZYw.exe ()
O4 - HKLM..\Run: [KGsLjINuD48234A] C:\Windows\SysWOW64\Vv3QKgCrA.exe ()
O4 - HKLM..\Run: [kIBrzPNyx1v2b3m8234A] C:\Windows\SysWOW64\P5QJ6dEK8R9TwUe.exe ()
O4 - HKLM..\Run: [kIIIBBzPNyxAuv8234A] C:\Windows\SysWOW64\J6ddEK8fRZ9hXjU.exe ()
O4 - HKLM..\Run: [KjjjUUCelI8234A] C:\Windows\SysWOW64\fQQJJ6ddEK8RZhT.exe ()
O4 - HKLM..\Run: [KjjUUCekkIrON8234A] C:\Windows\SysWOW64\I55aaQJ6dWK8R9h.exe ()
O4 - HKLM..\Run: [kjjUUCIrzNyx1u8234A] C:\Windows\SysWOW64\T88fRRZhT.exe ()
O4 - HKLM..\Run: [KKK77fEL9gTqj8234A] C:\Windows\SysWOW64\VSS22ibD3pnG4Q6.exe ()
O4 - HKLM..\Run: [kKK88fRLL9TXqUk8234A] C:\Windows\SysWOW64\B33ppmGG5aJ6d.exe ()
O4 - HKLM..\Run: [kKK88RZ9hTwjCl8234A] C:\Windows\SysWOW64\hNyycAuD2ob4p5Q.exe ()
O4 - HKLM..\Run: [KKKK8899hYlBPyA8234A] C:\Windows\SysWOW64\BD22oonF4mHQ7.exe ()
O4 - HKLM..\Run: [kL9gTqCkIVt0uSi8234A] C:\Windows\SysWOW64\B4aaQHHsWK.exe ()
O4 - HKLM..\Run: [klBz0ciDoFp5Q7E8234A] C:\Windows\SysWOW64\bvDD3n4HsJdLRqY.exe ()
O4 - HKLM..\Run: [klONNtccS1i8234A] C:\Windows\SysWOW64\Eb3n4Q6W7E9TqYk.exe ()
O4 - HKLM..\Run: [klOONttxP0cSib38234A] C:\Windows\SysWOW64\w4WK7EL9gTZqYCI.exe ()
O4 - HKLM..\Run: [kn4m5Q7E8R9XjVl8234A] C:\Windows\SysWOW64\XXUeOtPyAi.exe ()
O4 - HKLM..\Run: [KnGG44aQH68234A] C:\Windows\SysWOW64\dTeN3XIVzOAuc2b.exe ()
O4 - HKLM..\Run: [knnGG4aamH6WJf88234A] C:\Windows\SysWOW64\TuuuccS1ibD3.exe ()
O4 - HKLM..\Run: [KNxuSiDn4Q6WfE98234A] C:\Windows\SysWOW64\Db3naHdKf9TqYeI.exe ()
O4 - HKLM..\Run: [KooonFpH5sJdE8234A] C:\Windows\SysWOW64\Z9YwUlBzP1vD.exe ()
O4 - HKLM..\Run: [KP00ycAA1iD2n8234A] C:\Windows\SysWOW64\Q7E8RhXwkUVlBt.exe ()
O4 - HKLM..\Run: [KpmG5aQJ6W8R9Tq8234A] C:\Windows\SysWOW64\uUCelIBrzNx1v2b.exe ()
O4 - HKLM..\Run: [kQJJRttzPNyA1v28234A] C:\Windows\SysWOW64\lRzo44pH5.exe ()
O4 - HKLM..\Run: [KqqYCwwkUVrBtPy8234A] C:\Windows\SysWOW64\S333onnGmHsWfLg.exe ()
O4 - HKLM..\Run: [KRhwCIzy1Sbp58234A] C:\Windows\SysWOW64\ZDnpJKgZhjec4Gs.exe ()
O4 - HKLM..\Run: [ktPy1v3n4Hs8234A] C:\Windows\SysWOW64\UiDoGm6W7E8ZhCk.exe ()
O4 - HKLM..\Run: [Kv2Fm5Qd8Z8234A] C:\Windows\SysWOW64\Y3na5Wd8ZhwVOt0.exe ()
O4 - HKLM..\Run: [KVrrllONtxPuc1b8234A] C:\Windows\SysWOW64\LEELL9ggTZqYCk.exe ()
O4 - HKLM..\Run: [kVzNAuSiDpGaWKL8234A] C:\Windows\SysWOW64\fBO0v23aWL.exe ()
O4 - HKLM..\Run: [KwkIVrrlONx0c1b8234A] C:\Windows\SysWOW64\fsssWK7E9TZqY.exe ()
O4 - HKLM..\Run: [kwkkUUVrlOtxPyc8234A] C:\Windows\SysWOW64\rWWWJ77fEL8gZqY.exe ()
O4 - HKLM..\Run: [KwUlBz0c1DoFpHQ8234A] C:\Windows\SysWOW64\un4m5JdLg.exe ()
O4 - HKLM..\Run: [kWWKK7ffRL98234A] C:\Windows\SysWOW64\Yx0SiFpnG5aH6.exe ()
O4 - HKLM..\Run: [KwwkkIVrlO8234A] C:\Windows\SysWOW64\lQQQH66sWK7fL9T.exe ()
O4 - HKLM..\Run: [KwwwjUVllBzNy8234A] C:\Windows\SysWOW64\wppm5sQJ7dK8gZh.exe ()
O4 - HKLM..\Run: [KXUeBzyAv28234A] C:\Windows\SysWOW64\YUlBPy1voFp5Qd8.exe ()
O4 - HKLM..\Run: [KxxAA0uuvSibFpn8234A] C:\Windows\SysWOW64\xkkIIBrrzOy.exe ()
O4 - HKLM..\Run: [KYkVzNx0ci8234A] C:\Windows\SysWOW64\zAuSiFpGaHW7R9T.exe ()
O4 - HKLM..\Run: [kyyxxA0u2Fpn5Hd8234A] C:\Windows\SysWOW64\PJJJ6W8LTjCkBrO.exe ()
O4 - HKLM..\Run: [kYYYCeekIVrzNtA8234A] C:\Windows\SysWOW64\DHH66dWWK7RL9TX.exe ()
O4 - HKLM..\Run: [kYYYXwwkUVelBz8234A] C:\Windows\SysWOW64\ZEELL8gRZ.exe ()
O4 - HKLM..\Run: [kZZqqhYXXwU8234A] C:\Windows\SysWOW64\D444ammH5sWJdE8.exe ()
O4 - HKLM..\Run: [L2b3GaHdKR98234A] C:\Windows\SysWOW64\DhhTTXqUekBOyA.exe ()
O4 - HKLM..\Run: [L2Fm5QdKR9YUlBz8234A] C:\Windows\SysWOW64\FH5sWJ7dgqXUlzc.exe ()
O4 - HKLM..\Run: [L3naHW7EgqY8234A] C:\Windows\SysWOW64\d4Hs7EgZYwVOt0c.exe ()
O4 - HKLM..\Run: [l5Q6KK8fR8234A] C:\Windows\SysWOW64\jlBzNAuSoF.exe ()
O4 - HKLM..\Run: [l77gTZZqj8234A] C:\Windows\SysWOW64\d0cii3G4QHsW.exe ()
O4 - HKLM..\Run: [L7LgqYkrNAci3G8234A] C:\Windows\SysWOW64\WhqUkBOyAu2bpGQ.exe ()
O4 - HKLM..\Run: [l88gYXwjUVeIBzN8234A] C:\Windows\SysWOW64\CAAA1iD2onF4mHs.exe ()
O4 - HKLM..\Run: [L8R9YjVItPy1voF8234A] C:\Windows\SysWOW64\dqXkeOt0ci2nm5J.exe ()
O4 - HKLM..\Run: [L9hXjeIrPy1v2Fp8234A] C:\Windows\SysWOW64\HsssQQJ6dEK.exe ()
O4 - HKLM..\Run: [LaHsJd8RqYwUeBz8234A] C:\Windows\SysWOW64\iUlBx0c1v3.exe ()
O4 - HKLM..\Run: [lc1Do4m5Q6E88234A] C:\Windows\SysWOW64\LpHsJdKgZhXUeIt.exe ()
O4 - HKLM..\Run: [lccSS1iivD3nFam8234A] C:\Windows\SysWOW64\zwwkkUVVlBtP0.exe ()
O4 - HKLM..\Run: [LDD33nnF4am8234A] C:\Windows\SysWOW64\gVVVrlOBBtP0cSi.exe ()
O4 - HKLM..\Run: [LDpa67LZCIOxci38234A] C:\Windows\SysWOW64\CGQ6Kf9TjCIrNxu.exe ()
O4 - HKLM..\Run: [LeekkIBBrzOyx0u8234A] C:\Windows\SysWOW64\OdKfLTqjjU.exe ()
O4 - HKLM..\Run: [leellOBttz0yA1v8234A] C:\Windows\SysWOW64\EJdEEL8gRZqhYwU.exe ()
O4 - HKLM..\Run: [leOz0c1voFpHs7d8234A] C:\Windows\SysWOW64\mDoFa5W7E8ZhX.exe ()
O4 - HKLM..\Run: [lGsJd8R9TwCl8234A] C:\Windows\SysWOW64\fgZhXjeItPy1v2b.exe ()
O4 - HKLM..\Run: [LgZYwUeBz0c8234A] C:\Windows\SysWOW64\DSSS1iv3nF4HW7.exe ()
O4 - HKLM..\Run: [LiibD3pnG4aHsKE8234A] C:\Windows\SysWOW64\rjjjYCekIVzOtAu.exe ()
O4 - HKLM..\Run: [LiiibFF3pnG8234A] C:\Windows\SysWOW64\gkkIIBrzzNyxAuS.exe ()
O4 - HKLM..\Run: [LjCkNSi3n5Q6Kf8234A] C:\Windows\SysWOW64\h1voFp5QdKf9.exe ()
O4 - HKLM..\Run: [LKfLgZjCkVl8234A] C:\Windows\SysWOW64\xCkVzNx0c2b3n4Q.exe ()
O4 - HKLM..\Run: [LKK88fRZ9hTXwUe8234A] C:\Windows\SysWOW64\ummmG55sQJ6d.exe ()
O4 - HKLM..\Run: [llBPSv3FmsJEgZY8234A] C:\Windows\SysWOW64\srNPuiDnmsJEgqC.exe ()
O4 - HKLM..\Run: [lllOOBttx8234A] C:\Windows\SysWOW64\FELL88gTZqhYwkV.exe ()
O4 - HKLM..\Run: [LllOOBtzzPycAiv8234A] C:\Windows\SysWOW64\mRRZZqhhYXkUV.exe ()
O4 - HKLM..\Run: [llNubDonGaHsJfL8234A] C:\Windows\SysWOW64\lu2D3pG6sKfq.exe ()
O4 - HKLM..\Run: [LmHH6ssWJ7fL8gZ8234A] C:\Windows\SysWOW64\iVVrrlONtP0c1D4.exe ()
O4 - HKLM..\Run: [LomLwBcn5LhVtyv8234A] C:\Windows\SysWOW64\IztAi347gZjCIOt.exe ()
O4 - HKLM..\Run: [lONtuSipGQsLqCI8234A] C:\Windows\SysWOW64\ypnaH6dWKf9TqC.exe ()
O4 - HKLM..\Run: [LP00ySF4EvmEXc8234A] C:\Windows\SysWOW64\I88ggTZqqYCwUVl.exe ()
O4 - HKLM..\Run: [LQJ6dEK8fZhXjCl8234A] C:\Windows\SysWOW64\CVeIzycA1v2b4m5.exe ()
O4 - HKLM..\Run: [lqqYCwwIrNPu1Hf8234A] C:\Windows\SysWOW64\jiibDG4aQH6sK79.exe ()
O4 - HKLM..\Run: [LrNx0c2b3GasKf8234A] C:\Windows\SysWOW64\bv2b3naHdKR9XjC.exe ()
O4 - HKLM..\Run: [LRZ9hYXwjVlBzN8234A] C:\Windows\SysWOW64\bivD2onF4m5Q7E8.exe ()
O4 - HKLM..\Run: [lS22iibF3pnGQ6d8234A] C:\Windows\SysWOW64\teeekIIBrzOyx0u.exe ()
O4 - HKLM..\Run: [lSSS1iibD3on8234A] C:\Windows\SysWOW64\R6W7LgZjCIrOtP0.exe ()
O4 - HKLM..\Run: [LttxAA0ucS28234A] C:\Windows\SysWOW64\sdKR9TjCkVO.exe ()
O4 - HKLM..\Run: [lUeOtPP0ycAi8234A] C:\Windows\SysWOW64\g0c1DoFa5W7E8Zh.exe ()
O4 - HKLM..\Run: [LVelIBtzPyAuDoF8234A] C:\Windows\SysWOW64\m8gRZ9hYXj.exe ()
O4 - HKLM..\Run: [lW7EgqCkVOtPy1v8234A] C:\Windows\SysWOW64\fjCIrNxuSb3Ga.exe ()
O4 - HKLM..\Run: [LwkrOxuDon48234A] C:\Windows\SysWOW64\zQHH66sKK7EL9TY.exe ()
O4 - HKLM..\Run: [LwVlBzPNycA8234A] C:\Windows\SysWOW64\FPyAi2n4m5JdKgZ.exe ()
O4 - HKLM..\Run: [LwVltPc1DoGmHsJ8234A] C:\Windows\SysWOW64\ox0SiDn4Hs7EgZ.exe ()
O4 - HKLM..\Run: [Lx0v2b3n5Hd7R9X8234A] C:\Windows\SysWOW64\C55aaJdKfLTqUeI.exe ()
O4 - HKLM..\Run: [lYA37kcnG4sLgZh8234A] C:\Windows\SysWOW64\o22oFmQTro69Iv.exe ()
O4 - HKLM..\Run: [lyyyxAA0uvS28234A] C:\Windows\SysWOW64\FhhTTXqqjUekIrz.exe ()
O4 - HKLM..\Run: [m1DoFpGQ6E8RhXj8234A] C:\Windows\SysWOW64\ueeellIBtzPc.exe ()
O4 - HKLM..\Run: [m3onF4amHsJdLgZ8234A] C:\Windows\SysWOW64\DhYCwkUVrOtPySi.exe ()
O4 - HKLM..\Run: [m5Q6KfZhXUeIrNx8234A] C:\Windows\SysWOW64\rItNc1voF.exe ()
O4 - HKLM..\Run: [m5ssQQJ7dEK8R8234A] C:\Windows\SysWOW64\OnnnF44pmH.exe ()
O4 - HKLM..\Run: [m66dd8R9TjClBPy8234A] C:\Windows\SysWOW64\XAA11uvvD2oF4mG.exe ()
O4 - HKLM..\Run: [m777dEEL8g8234A] C:\Windows\SysWOW64\XivvDD3onF4aH5W.exe ()
O4 - HKLM..\Run: [mcAA11ivD28234A] C:\Windows\SysWOW64\aXXXwkkUVelBtP0.exe ()
O4 - HKLM..\Run: [mccSS1ivD3on4aH8234A] C:\Windows\SysWOW64\WJ77fEEL8gTZClB.exe ()
O4 - HKLM..\Run: [mciDoFp5Q7E8RhX8234A] C:\Windows\SysWOW64\r8ZhXkVOt.exe ()
O4 - HKLM..\Run: [mcSi3G4amHsJELg8234A] C:\Windows\SysWOW64\JkkIIVtxP.exe ()
O4 - HKLM..\Run: [mhhhYCCwkUVrO8234A] C:\Windows\SysWOW64\ammmH66sWJ7fL8T.exe ()
O4 - HKLM..\Run: [mIryAvo3GJdKL8234A] C:\Windows\SysWOW64\tmGG55sQJ6dKZhX.exe ()
O4 - HKLM..\Run: [mJdKfZhXjClBzNx8234A] C:\Windows\SysWOW64\qYwVlBzNc1v2b4m.exe ()
O4 - HKLM..\Run: [mjerAbW8Lh8234A] C:\Windows\SysWOW64\K2b45JE8R9.exe ()
O4 - HKLM..\Run: [mKKgZhwUltyA28234A] C:\Windows\SysWOW64\NyyycAA1uvDob4p.exe ()
O4 - HKLM..\Run: [mmmHH5QQ7dE8gR98234A] C:\Windows\SysWOW64\viiivD2onF.exe ()
O4 - HKLM..\Run: [mnm5WdLgZhXUe8234A] C:\Windows\SysWOW64\x7EgZhCkVOtPySv.exe ()
O4 - HKLM..\Run: [mppnnG44aQHsW7f8234A] C:\Windows\SysWOW64\euuccS22ibD.exe ()
O4 - HKLM..\Run: [mQQQH66sWK8234A] C:\Windows\SysWOW64\OtAuSiibD3pG4.exe ()
O4 - HKLM..\Run: [msJd8RZ9hXjVlBz8234A] C:\Windows\SysWOW64\zBPyAvD2oF.exe ()
O4 - HKLM..\Run: [mSSS1iibD38234A] C:\Windows\SysWOW64\XCCwwkIVrlONtPu.exe ()
O4 - HKLM..\Run: [mvDD22onF48234A] C:\Windows\SysWOW64\sVVVellOBtz0yA1.exe ()
O4 - HKLM..\Run: [mVOt0SiDn48234A] C:\Windows\SysWOW64\Lx0Si3naHW7LgqY.exe ()
O4 - HKLM..\Run: [mVVrrlONtx0S13n8234A] C:\Windows\SysWOW64\xiDn4Q6Wf9TqYk.exe ()
O4 - HKLM..\Run: [mVzNAuSiDn4Q6Wf8234A] C:\Windows\SysWOW64\muSiFn5QdKfLTqY.exe ()
O4 - HKLM..\Run: [mwwwjjUCelIBzPy8234A] C:\Windows\SysWOW64\uddEEK8fRZ9h.exe ()
O4 - HKLM..\Run: [mzzzPNNycA1uD2b8234A] C:\Windows\SysWOW64\iYYYXwwjUVelB.exe ()
O4 - HKLM..\Run: [n1v3n4m5WdLg8234A] C:\Windows\SysWOW64\JE8TqYwUrBx0.exe ()
O4 - HKLM..\Run: [n2iFna6KRgqCIzt8234A] C:\Windows\SysWOW64\uBrzONyxA.exe ()
O4 - HKLM..\Run: [n2n4m5JdKgZY8234A] C:\Windows\SysWOW64\zs7E8RqXkVlBPyA.exe ()
O4 - HKLM..\Run: [N55sdEgZqzyAiD8234A] C:\Windows\SysWOW64\jG46LLqhklByDon.exe ()
O4 - HKLM..\Run: [n5Q6W7LgXjCIrOt8234A] C:\Windows\SysWOW64\zfLhXUeIrOx0v2F.exe ()
O4 - HKLM..\Run: [Nb3GaHs7EZkrOx08234A] C:\Windows\SysWOW64\VXjeIztAu.exe ()
O4 - HKLM..\Run: [nbF45sQJK9Xlzy18234A] C:\Windows\SysWOW64\CgRZ9hYXwUeItPy.exe ()
O4 - HKLM..\Run: [nc1v2npHs7E8R9Y8234A] C:\Windows\SysWOW64\dvo4HWdLRhwUlBz.exe ()
O4 - HKLM..\Run: [NcAAiDoFpmHsJ7E8234A] C:\Windows\SysWOW64\wJJJ7E8RqYXkVlB.exe ()
O4 - HKLM..\Run: [ndEK8gRZ9YwU8234A] C:\Windows\SysWOW64\r0ycA1ivDoFpHsJ.exe ()
O4 - HKLM..\Run: [NE8R9TwUeIr8234A] C:\Windows\SysWOW64\ktPyAuDoFpG.exe ()
O4 - HKLM..\Run: [nee0bD3pn4QHsW78234A] C:\Windows\SysWOW64\GXwNyF5WKCzNyvi.exe ()
O4 - HKLM..\Run: [NekIVrzONxc2b38234A] C:\Windows\SysWOW64\EG5aQH6dW7R9TqY.exe ()
O4 - HKLM..\Run: [nf9CSnWEYVyD5ER8234A] C:\Windows\SysWOW64\I00uucS2ib3pGQ6.exe ()
O4 - HKLM..\Run: [nFm5JEf9TjeBzy18234A] C:\Windows\SysWOW64\omH5sQJEKgBPcu.exe ()
O4 - HKLM..\Run: [NGG4Hs7EgZY8234A] C:\Windows\SysWOW64\trrrzOONtxA0c2i.exe ()
O4 - HKLM..\Run: [Ni3n4Q6WK7fLgTq8234A] C:\Windows\SysWOW64\fTqCkVzNAu.exe ()
O4 - HKLM..\Run: [niGW9CND68234A] C:\Windows\SysWOW64\qF33pmm5aQJdLhC.exe ()
O4 - HKLM..\Run: [NjCIPyASbpaWRTC8234A] C:\Windows\SysWOW64\U2obF4pmGsJdKfZ.exe ()
O4 - HKLM..\Run: [NjCkBzNAuSiFpGa8234A] C:\Windows\SysWOW64\PaaaQ6WWfLh.exe ()
O4 - HKLM..\Run: [NJJ77dEK8R9XjV8234A] C:\Windows\SysWOW64\GcAA11ivD2on4pH.exe ()
O4 - HKLM..\Run: [nJJ77fEEL8TZYCk8234A] C:\Windows\SysWOW64\aiibbD33on4am.exe ()
O4 - HKLM..\Run: [NJL6W7LgXqCkIr8234A] C:\Windows\SysWOW64\aWJJ7EwkUVeAmKj.exe ()
O4 - HKLM..\Run: [nLhXUeIrOy0v8234A] C:\Windows\SysWOW64\zlBzyAuSoFm5Q6W.exe ()
O4 - HKLM..\Run: [NltNAvo4GQd8234A] C:\Windows\SysWOW64\DB0AiDn4msJEg9X.exe ()
O4 - HKLM..\Run: [NP00yA1iDoFpHs8234A] C:\Windows\SysWOW64\WUVVeelOB.exe ()
O4 - HKLM..\Run: [NppnnGG5aQHdW7f8234A] C:\Windows\SysWOW64\s000uvvS2ib.exe ()
O4 - HKLM..\Run: [NSiDn4Q6WfLgZYw8234A] C:\Windows\SysWOW64\R5HdKf9TqYeVzNx.exe ()
O4 - HKLM..\Run: [nTqUeIrNx0v2b3n8234A] C:\Windows\SysWOW64\m8hwUBN12356W8R.exe ()
O4 - HKLM..\Run: [nv23GQd8LTqUerN8234A] C:\Windows\SysWOW64\XJ6dEK8fR9TUlzy.exe ()
O4 - HKLM..\Run: [NVeellOBtzP8234A] C:\Windows\SysWOW64\PdddELL8gRZhYwk.exe ()
O4 - HKLM..\Run: [nvvvD22obF4m8234A] C:\Windows\SysWOW64\ZUUVVelIBtzPNc1.exe ()
O4 - HKLM..\Run: [nW7LgXjCk8234A] C:\Windows\SysWOW64\TvvvS22ibF3pGaH.exe ()
O4 - HKLM..\Run: [nWTV16qSn7Yt2QJ8234A] C:\Windows\SysWOW64\frrzS5fjIApW9IA.exe ()
O4 - HKLM..\Run: [nx0v2bnQW8234A] C:\Windows\SysWOW64\PpGQ6W8R9TqjeIr.exe ()
O4 - HKLM..\Run: [nXUeBOy0viFnaHW8234A] C:\Windows\SysWOW64\zrzPNyxAvFp56Kf.exe ()
O4 - HKLM..\Run: [nXwelIIBz8234A] C:\Windows\SysWOW64\PPyyc1iv2p5sJdK.exe ()
O4 - HKLM..\Run: [NxxAA0uucS2bDpn8234A] C:\Windows\SysWOW64\deeekIIVrzON.exe ()
O4 - HKLM..\Run: [nyA1uuvS28234A] C:\Windows\SysWOW64\zb4m5JdKf9TwUlB.exe ()
O4 - HKLM..\Run: [nYYwkkIVlOtP8234A] C:\Windows\SysWOW64\B444QH6sWK7ELgZ.exe ()
O4 - HKLM..\Run: [nZ99hhTwUeIrPy18234A] C:\Windows\SysWOW64\j66ddEKK8f.exe ()
O4 - HKLM..\Run: [O0c1D2onF4pm58234A] C:\Windows\SysWOW64\ODo4m5WdLgZhXUe.exe ()
O4 - HKLM..\Run: [O2b3Ga6WfL8234A] C:\Windows\SysWOW64\lpGQ6Kf9TjCIrNx.exe ()
O4 - HKLM..\Run: [o4HsJd8RqYwUlBz8234A] C:\Windows\SysWOW64\rE8ThCkVltPySv3.exe ()
O4 - HKLM..\Run: [o5Q7E8RhXjVlBzN8234A] C:\Windows\SysWOW64\lqYwUeOtPy1v2n4.exe ()
O4 - HKLM..\Run: [o5sWJ7dELgZhXkV8234A] C:\Windows\SysWOW64\JOBtxP0yc1v3n4m.exe ()
O4 - HKLM..\Run: [o5WdLRqXkeOt0c18234A] C:\Windows\SysWOW64\bLTqCkrOt0c1v3F.exe ()
O4 - HKLM..\Run: [o8RhXjVIBtz8234A] C:\Windows\SysWOW64\QPc1v2FpHsJ.exe ()
O4 - HKLM..\Run: [oA1v2npHsJdKgZh8234A] C:\Windows\SysWOW64\SR9YwUeIzN.exe ()
O4 - HKLM..\Run: [oa7EgZYIrNxuSb38234A] C:\Windows\SysWOW64\h9gTXqjYkVOtAci.exe ()
O4 - HKLM..\Run: [Ob3m5JdKfLhXj8234A] C:\Windows\SysWOW64\R6E8R9TwUlBzNx1.exe ()
O4 - HKLM..\Run: [OBBBtzzP0yc1iv28234A] C:\Windows\SysWOW64\oL88ggRZhYXwUVl.exe ()
O4 - HKLM..\Run: [oCClBrPPNyAv2bF8234A] C:\Windows\SysWOW64\fhhhYXVIA2F5EZj.exe ()
O4 - HKLM..\Run: [oCIrlOtP0SiDo48234A] C:\Windows\SysWOW64\NA0ucS2ibpg.exe ()
O4 - HKLM..\Run: [oD3pnG4aQ6W79Tj8234A] C:\Windows\SysWOW64\iXqjYCekIrOtAuS.exe ()
O4 - HKLM..\Run: [OeekIBBrzONxAuS8234A] C:\Windows\SysWOW64\SPy1v2b3m5Q6KRh.exe ()
O4 - HKLM..\Run: [OFFF3ppmG58234A] C:\Windows\SysWOW64\tBBrrzPPNyA1uSo.exe ()
O4 - HKLM..\Run: [OGQd7LTYeVztuSb8234A] C:\Windows\SysWOW64\Qn5HKR9XjkVzx0i.exe ()
O4 - HKLM..\Run: [ogZYwUeBz0AiDo8234A] C:\Windows\SysWOW64\Zx0c1DoFa5W7.exe ()
O4 - HKLM..\Run: [OH6WW7fELgTZjCk8234A] C:\Windows\SysWOW64\nxxAA0ucS2ib3nG.exe ()
O4 - HKLM..\Run: [OhYCklOBPc1v3n48234A] C:\Windows\SysWOW64\ccS1ibD3oGaHsJf.exe ()
O4 - HKLM..\Run: [oiF3pnnG5aQ6dK78234A] C:\Windows\SysWOW64\z6KfLhXjCkBzNx0.exe ()
O4 - HKLM..\Run: [oIrNxuSb3GQ8234A] C:\Windows\SysWOW64\CzNAuSb3Ga6WfLT.exe ()
O4 - HKLM..\Run: [oJJ77dEK8gRZhYw8234A] C:\Windows\SysWOW64\ZiiivDD2onF4mHs.exe ()
O4 - HKLM..\Run: [OJJJ7ddE8gRZh8234A] C:\Windows\SysWOW64\fxxPySS1iD3oFam.exe ()
O4 - HKLM..\Run: [ojllBP2eBzy8234A] C:\Windows\SysWOW64\lmmH5sQQ7EK8R9X.exe ()
O4 - HKLM..\Run: [oKKE9gqYwIl8234A] C:\Windows\SysWOW64\R22iibDD3pn4aHs.exe ()
O4 - HKLM..\Run: [OkkUVVl0yA1i2np8234A] C:\Windows\SysWOW64\P77ddEL88RZ.exe ()
O4 - HKLM..\Run: [OlBx0ciDoFm5W7E8234A] C:\Windows\SysWOW64\gc1Do4m6W7LgZhw.exe ()
O4 - HKLM..\Run: [olOOBBtPyc1DoFp8234A] C:\Windows\SysWOW64\ZLLL8ggRZqhXwUV.exe ()
O4 - HKLM..\Run: [Om5Q6W8LhX8234A] C:\Windows\SysWOW64\R8R9TwUeBzNx1So.exe ()
O4 - HKLM..\Run: [Om6Jf8ThCU8234A] C:\Windows\SysWOW64\SsKE9ZjwIlNPu1b.exe ()
O4 - HKLM..\Run: [on4HsJd8RqXwV08234A] C:\Windows\SysWOW64\ZTqYwUrBPySi.exe ()
O4 - HKLM..\Run: [ONx1voFpGQ8234A] C:\Windows\SysWOW64\wJdKfZTwUe.exe ()
O4 - HKLM..\Run: [oo4m6W7LgZhwUrO8234A] C:\Windows\SysWOW64\rKfLTqYwIlNx0ci.exe ()
O4 - HKLM..\Run: [oOBtxP0yc1v3n48234A] C:\Windows\SysWOW64\SsWJ7fEL8TqYwUr.exe ()
O4 - HKLM..\Run: [OoFp5Q6KfZTwUeB8234A] C:\Windows\SysWOW64\BsJE8R9XjVItNc1.exe ()
O4 - HKLM..\Run: [opHsJdKgZhX8234A] C:\Windows\SysWOW64\PgZhXkVlBz0c1v2.exe ()
O4 - HKLM..\Run: [OpppmHH5sQJ7EKg8234A] C:\Windows\SysWOW64\qAivD22on.exe ()
O4 - HKLM..\Run: [oQ6WfLgXjCIrOt8234A] C:\Windows\SysWOW64\ZUkBzNx0SiFp.exe ()
O4 - HKLM..\Run: [ORwynQUu4ECfuFn8234A] C:\Windows\SysWOW64\mVVrrlOOBtPyciD.exe ()
O4 - HKLM..\Run: [OSbpGa6WfLTje8234A] C:\Windows\SysWOW64\UffRRL9TqjeBzy.exe ()
O4 - HKLM..\Run: [OsWWWK7fEL9gTqY8234A] C:\Windows\SysWOW64\xSSS2iibD3pn4aH.exe ()
O4 - HKLM..\Run: [OtPyAuvD2o8234A] C:\Windows\SysWOW64\TDoFpHsJdKgZhwU.exe ()
O4 - HKLM..\Run: [OUeItPc1Db4ms8234A] C:\Windows\SysWOW64\cv2FpHs7E8Rh.exe ()
O4 - HKLM..\Run: [ov2bpGQ6Kf9TjCI8234A] C:\Windows\SysWOW64\TQQJJ6dKR9TjCIz.exe ()
O4 - HKLM..\Run: [oVaIb7EgqYUrBx08234A] C:\Windows\SysWOW64\lxv2b3GJfey2.exe ()
O4 - HKLM..\Run: [ovoFpHsJE8R9Yj8234A] C:\Windows\SysWOW64\IhhhYXXwkUelBtc.exe ()
O4 - HKLM..\Run: [owjUCelIBzNx1v28234A] C:\Windows\SysWOW64\GdEK8fRZ9T.exe ()
O4 - HKLM..\Run: [oxycc1ivFm5sW7E8234A] C:\Windows\SysWOW64\GYYCCwkkUVrOB.exe ()
O4 - HKLM..\Run: [oyxxAA1uvS2oF358234A] C:\Windows\SysWOW64\GjUUCCelIBrzN.exe ()
O4 - HKLM..\Run: [oYYYCeekIVrOt0c8234A] C:\Windows\SysWOW64\mWWKK7fRL9gTX.exe ()
O4 - HKLM..\Run: [oZlc2mJ8TIApdUS8234A] C:\Windows\SysWOW64\L4pmH5sWJdLgZz2.exe ()
O4 - HKLM..\Run: [ozxxA1uvS2ob3p8234A] C:\Windows\SysWOW64\WPycAvob4p569wU.exe ()
O4 - HKLM..\Run: [p000yAvD2onF4Hs8234A] C:\Windows\SysWOW64\aYYXXwkUVeOBt.exe ()
O4 - HKLM..\Run: [p11uuvSS28234A] C:\Windows\SysWOW64\TwjjUUCelIBrPNx.exe ()
O4 - HKLM..\Run: [p1vS2oob3pmG8234A] C:\Windows\SysWOW64\F88ffRRZhTXjClz.exe ()
O4 - HKLM..\Run: [p2oobF3p5a6W8fL8234A] C:\Windows\SysWOW64\t6Kf9TjClrPNx1v.exe ()
O4 - HKLM..\Run: [p333nnF4amH58234A] C:\Windows\SysWOW64\gVVVrlOBBtP0cSi.exe ()
O4 - HKLM..\Run: [P3ppnnG4aQHsKfL8234A] C:\Windows\SysWOW64\yrzzOONtx0uS2i.exe ()
O4 - HKLM..\Run: [p4HsKfLgqYwIrNx8234A] C:\Windows\SysWOW64\rVOtAuSi3.exe ()
O4 - HKLM..\Run: [P4msJE8ZhwUlBP8234A] C:\Windows\SysWOW64\QgqYkVOtPc1.exe ()
O4 - HKLM..\Run: [P5aaQHH6dWK7RL8234A] C:\Windows\SysWOW64\RBrrrzONyxAuv2b.exe ()
O4 - HKLM..\Run: [P66ddWKK8fL9hXq8234A] C:\Windows\SysWOW64\w22oobF3pmG5a.exe ()
O4 - HKLM..\Run: [P6WfgeNSaKZOt0c8234A] C:\Windows\SysWOW64\BzNx0SiFpG.exe ()
O4 - HKLM..\Run: [P8ggTTZqhYCwUV8234A] C:\Windows\SysWOW64\cnnnG44amH6WJfE.exe ()
O4 - HKLM..\Run: [p99hhTqqjUCk8234A] C:\Windows\SysWOW64\Tpppmm5aQJ6WK8R.exe ()
O4 - HKLM..\Run: [P9hTXwjUClPyAuS8234A] C:\Windows\SysWOW64\ec1uvD2ob4m5Q6E.exe ()
O4 - HKLM..\Run: [PbbFF4ppmG5QJd8234A] C:\Windows\SysWOW64\EA111uvD2o.exe ()
O4 - HKLM..\Run: [PBrrzzPNyxA1vS8234A] C:\Windows\SysWOW64\y88ffRZZ9hXwjCe.exe ()
O4 - HKLM..\Run: [PBtzNycA1v2b4m58234A] C:\Windows\SysWOW64\I5sQJ7dK8R9YjVl.exe ()
O4 - HKLM..\Run: [PCCCwkkIVrlNxuS8234A] C:\Windows\SysWOW64\wKKK7ffEL9gZq.exe ()
O4 - HKLM..\Run: [peOtPy1v2n4msJd8234A] C:\Windows\SysWOW64\jDoFa5W7E8ZhX.exe ()
O4 - HKLM..\Run: [PfEELTqjYCwkVrO8234A] C:\Windows\SysWOW64\OyG9Nibb3pGaQ6W.exe ()
O4 - HKLM..\Run: [PggTTZqhYCwkUr8234A] C:\Windows\SysWOW64\ynGG44amH6sW7fL.exe ()
O4 - HKLM..\Run: [PgRZhYXwjVBzNc18234A] C:\Windows\SysWOW64\fo4pmH5QdK.exe ()
O4 - HKLM..\Run: [Pi3n4Q6KfLgZYw8234A] C:\Windows\SysWOW64\NQ6W7RgXjCkVNxu.exe ()
O4 - HKLM..\Run: [PItNAuDbp5JEf9T8234A] C:\Windows\SysWOW64\HvD2onF4pHJ8Zhw.exe ()
O4 - HKLM..\Run: [PjCkVlNx0c1b3n48234A] C:\Windows\SysWOW64\HAu2b3n4Q6W7E9.exe ()
O4 - HKLM..\Run: [pJdLgXUOt0cv8234A] C:\Windows\SysWOW64\eWfgZYkrOty1Dna.exe ()
O4 - HKLM..\Run: [PJf8TqYwVlBx0c8234A] C:\Windows\SysWOW64\PZjCkVOtPuSi3n4.exe ()
O4 - HKLM..\Run: [PkO25K9YOucS3n48234A] C:\Windows\SysWOW64\KRR9TjUCIx0Sp.exe ()
O4 - HKLM..\Run: [plrPx1voFm5QdKf8234A] C:\Windows\SysWOW64\hDo4m5JdKR9X.exe ()
O4 - HKLM..\Run: [PmmH6sWJ7fL8TqY8234A] C:\Windows\SysWOW64\yPPP0uccS1iD3n.exe ()
O4 - HKLM..\Run: [pNNyyA1uvS2bFp58234A] C:\Windows\SysWOW64\WQQK8fRZTXwUClr.exe ()
O4 - HKLM..\Run: [PONtxAA0uS2ib38234A] C:\Windows\SysWOW64\NSSS2i99gTXjYeV.exe ()
O4 - HKLM..\Run: [POONNtxP0ucSib8234A] C:\Windows\SysWOW64\ECCwkkIVrl.exe ()
O4 - HKLM..\Run: [PppnGaQ6WKf9Tj8234A] C:\Windows\SysWOW64\lXXXqYkIzNtA0cb.exe ()
O4 - HKLM..\Run: [pQJKf9qUNx0v2b38234A] C:\Windows\SysWOW64\kJEfhUlryu2b3m5.exe ()
O4 - HKLM..\Run: [pqqjjYCee8234A] C:\Windows\SysWOW64\XQQQH66dWK7fL9T.exe ()
O4 - HKLM..\Run: [pqqqhYYCwkUV8234A] C:\Windows\SysWOW64\PtPuSiDoGaHs7E8.exe ()
O4 - HKLM..\Run: [PS11v5sJgO4EKY8234A] C:\Windows\SysWOW64\fggTZqhYCwUrlBx.exe ()
O4 - HKLM..\Run: [Ps7E8qCUlt08234A] C:\Windows\SysWOW64\W6KLgqCIlN0ciDn.exe ()
O4 - HKLM..\Run: [pSiDp4Q6W7LgZjC8234A] C:\Windows\SysWOW64\j6KfLgqYeIrNx.exe ()
O4 - HKLM..\Run: [PTTTZqqjYCwIlNt8234A] C:\Windows\SysWOW64\jHHH6ssWK7fE9.exe ()
O4 - HKLM..\Run: [PtxP0ucS1b3n4m68234A] C:\Windows\SysWOW64\XnaHsKf9ZwIrO.exe ()
O4 - HKLM..\Run: [pUCCeekIBrzO8234A] C:\Windows\SysWOW64\IhhhTXXqj.exe ()
O4 - HKLM..\Run: [PUUUVeelIBtzNyA8234A] C:\Windows\SysWOW64\wEKK88gRZ9hYw.exe ()
O4 - HKLM..\Run: [PvD33onF4am5J7E8234A] C:\Windows\SysWOW64\gqqCkkUVrlBtxyS.exe ()
O4 - HKLM..\Run: [PXjeIBrNyxuS2bp8234A] C:\Windows\SysWOW64\VoFm5JdKf.exe ()
O4 - HKLM..\Run: [PxuSb3Ga6W7LgqY8234A] C:\Windows\SysWOW64\SaQ6WKK7f9TjCIr.exe ()
O4 - HKLM..\Run: [PxxPP0uucSi8234A] C:\Windows\SysWOW64\D6WfLgZjCIr.exe ()
O4 - HKLM..\Run: [pYYekrzONtxAuSb8234A] C:\Windows\SysWOW64\CSS23nG5aQH6WKf.exe ()
O4 - HKLM..\Run: [pYYXXkUVelOz8234A] C:\Windows\SysWOW64\tPySi3n4m5JdLgq.exe ()
O4 - HKLM..\Run: [pzNAuDoFm5Q68234A] C:\Windows\SysWOW64\Cm5JdKg9YwU.exe ()
O4 - HKLM..\Run: [PzPPNNy1u2b3ma8234A] C:\Windows\SysWOW64\KCCCeelIBr.exe ()
O4 - HKLM..\Run: [pZZ99hXwUeIr8234A] C:\Windows\SysWOW64\ZpppmmG5sQJ6EKf.exe ()
O4 - HKLM..\Run: [q0yS1i3na8234A] C:\Windows\SysWOW64\cqqhhYCwwkVrlBx.exe ()
O4 - HKLM..\Run: [q2npHsJdKR9YwUe8234A] C:\Windows\SysWOW64\YsJRhXkVOtPy1.exe ()
O4 - HKLM..\Run: [Q2obFF4pmG5QJd8234A] C:\Windows\SysWOW64\zyyycA11uv.exe ()
O4 - HKLM..\Run: [Q55aaQJJ6WK8RLh8234A] C:\Windows\SysWOW64\K111uvvS2ob3p.exe ()
O4 - HKLM..\Run: [QA0uv2ibF3pn5Q68234A] C:\Windows\SysWOW64\E66dKfLTXqUkBzO.exe ()
O4 - HKLM..\Run: [QAAA1iivD2F8234A] C:\Windows\SysWOW64\CXXwwkUUVeOBtPy.exe ()
O4 - HKLM..\Run: [QaHdKfLgXjCkVzN8234A] C:\Windows\SysWOW64\UXjCkVzNx0v2b3.exe ()
O4 - HKLM..\Run: [qaHsJE8TqYkV8234A] C:\Windows\SysWOW64\h7LgqYkVltPuSi3.exe ()
O4 - HKLM..\Run: [QAuDb4m5QdKfZhw8234A] C:\Windows\SysWOW64\n8R9YwVlB.exe ()
O4 - HKLM..\Run: [qAuSiFpGaHd78234A] C:\Windows\SysWOW64\QGaJdKfLhXjCkBz.exe ()
O4 - HKLM..\Run: [qb3GaJdKf8234A] C:\Windows\SysWOW64\BXjClrPyAu.exe ()
O4 - HKLM..\Run: [QbpGQ6Kf9Xj8234A] C:\Windows\SysWOW64\HaJdKR9XjCkrOy0.exe ()
O4 - HKLM..\Run: [QCIrNxu2bF3pGa8234A] C:\Windows\SysWOW64\Uv2Fp5QdKRh.exe ()
O4 - HKLM..\Run: [QcSSS2ibD3pnGaH8234A] C:\Windows\SysWOW64\FrrrzOONtxA0.exe ()
O4 - HKLM..\Run: [QdddEKK8gRZhYX8234A] C:\Windows\SysWOW64\CvvDD2oonFpmHsJ.exe ()
O4 - HKLM..\Run: [QdEEKK8gRZ9hXw8234A] C:\Windows\SysWOW64\dDD22oonF4pH5QJ.exe ()
O4 - HKLM..\Run: [qdKgZhXjUVelBtP8234A] C:\Windows\SysWOW64\swVlBz0c1v2n4m5.exe ()
O4 - HKLM..\Run: [qDoGaHW7E8ThCkV8234A] C:\Windows\SysWOW64\ifLgZYwIrOx0c.exe ()
O4 - HKLM..\Run: [qE8RhXkVOt0c8234A] C:\Windows\SysWOW64\TCUrOt0c1voFaHs.exe ()
O4 - HKLM..\Run: [qE8ZYwUlz0ciDoF8234A] C:\Windows\SysWOW64\QUrBx0c1voFaHs.exe ()
O4 - HKLM..\Run: [QEE8gZqhYXU8234A] C:\Windows\SysWOW64\xyyySi3onF4mHs.exe ()
O4 - HKLM..\Run: [qeekkIVVrzOtx0u8234A] C:\Windows\SysWOW64\wffRRL99gTXjY.exe ()
O4 - HKLM..\Run: [qFFF4aamH8234A] C:\Windows\SysWOW64\cBtttxP0ycS1iDo.exe ()
O4 - HKLM..\Run: [QGG4aQH6sWKfL9T8234A] C:\Windows\SysWOW64\wN2GdLjkx0ui3.exe ()
O4 - HKLM..\Run: [qgTTXXqjY8234A] C:\Windows\SysWOW64\SGG55aQQH6dK7RL.exe ()
O4 - HKLM..\Run: [qhCkVlBPy8234A] C:\Windows\SysWOW64\NVOtPu1b3naHsJf.exe ()
O4 - HKLM..\Run: [QHHH6ssWJ7fEgZ8234A] C:\Windows\SysWOW64\YP00uuS11iD3oG4.exe ()
O4 - HKLM..\Run: [QIVrzOONx0S8234A] C:\Windows\SysWOW64\s777fRRL9gTXjCe.exe ()
O4 - HKLM..\Run: [QIVVrlOONtP0cSi8234A] C:\Windows\SysWOW64\FaaHH6sWKELgTqY.exe ()
O4 - HKLM..\Run: [QJJ66K8f9TjClB8234A] C:\Windows\SysWOW64\z4ppmmG5sQ.exe ()
O4 - HKLM..\Run: [qLgqYXwwkUVlOtz8234A] C:\Windows\SysWOW64\urBx0Si3naHW.exe ()
O4 - HKLM..\Run: [qLL99gTqYCekVrO8234A] C:\Windows\SysWOW64\SpppnGG5aQH6WKf.exe ()
O4 - HKLM..\Run: [QNNNttxA0uc2iD38234A] C:\Windows\SysWOW64\yFn5HKf9TjYCkVr.exe ()
O4 - HKLM..\Run: [Qo4msJE8ZhX8234A] C:\Windows\SysWOW64\lnaHW7EgZYwVltP.exe ()
O4 - HKLM..\Run: [qONyA0uSi8234A] C:\Windows\SysWOW64\cL999hTXqjUCkIr.exe ()
O4 - HKLM..\Run: [QOt0c1voFpHQ7Eg8234A] C:\Windows\SysWOW64\mHsJEgZhXk.exe ()
O4 - HKLM..\Run: [qppnGaQ6WKf9Tjw8234A] C:\Windows\SysWOW64\lXXXqYkIzNtA0cb.exe ()
O4 - HKLM..\Run: [qqCru2Fna6Kf9XY8234A] C:\Windows\SysWOW64\qBNv2mJ8R.exe ()
O4 - HKLM..\Run: [QQQQdKfZhXe8234A] C:\Windows\SysWOW64\QgRRZlIBtNcuopG.exe ()
O4 - HKLM..\Run: [qTjCkVzNx0c28234A] C:\Windows\SysWOW64\mbbFF3pn5aQHd7f.exe ()
O4 - HKLM..\Run: [Qv2FpG55aQ68234A] C:\Windows\SysWOW64\c5Q6KfZhXjeIrPy.exe ()
O4 - HKLM..\Run: [qvn4ms7dEL8RZhY8234A] C:\Windows\SysWOW64\tGm67EgqCklt0.exe ()
O4 - HKLM..\Run: [qvvDD2onF8234A] C:\Windows\SysWOW64\aYXXwkUVelBt0.exe ()
O4 - HKLM..\Run: [qVVeelOOBtP0yA18234A] C:\Windows\SysWOW64\AdddELL8gRZqYXk.exe ()
O4 - HKLM..\Run: [QvvvS22obF38234A] C:\Windows\SysWOW64\nhXjClrPNyxA.exe ()
O4 - HKLM..\Run: [qW7E8RqYw8234A] C:\Windows\SysWOW64\NOtPySiDoFa.exe ()
O4 - HKLM..\Run: [QWJ7dEL8gZhXkV8234A] C:\Windows\SysWOW64\FBtxP0ycSiDoFaH.exe ()
O4 - HKLM..\Run: [QwjjjUVelIB8234A] C:\Windows\SysWOW64\wiDoFm5Q7K8gZ9Y.exe ()
O4 - HKLM..\Run: [qWWWJ77fEL8g8234A] C:\Windows\SysWOW64\cSS11ibbD3oG4mH.exe ()
O4 - HKLM..\Run: [QxxxAA1uvS2bFp8234A] C:\Windows\SysWOW64\tllIIBrzPN.exe ()
O4 - HKLM..\Run: [QzP0ycA1iDoFpH8234A] C:\Windows\SysWOW64\FwkUVelOB.exe ()
O4 - HKLM..\Run: [qZqjYCwkI8234A] C:\Windows\SysWOW64\giD3na6W7Lg.exe ()
O4 - HKLM..\Run: [R0ciDna5W7LgZYw8234A] C:\Windows\SysWOW64\EDoGmsJEgqYwUrO.exe ()
O4 - HKLM..\Run: [r0ciDo4m68234A] C:\Windows\SysWOW64\SWfLgqYwIl.exe ()
O4 - HKLM..\Run: [r0ycA1ivDoFpHsJ8234A] C:\Windows\SysWOW64\ZHWd8ZYkUeOt.exe ()
O4 - HKLM..\Run: [R6ssWWJ7fEL8234A] C:\Windows\SysWOW64\Z6YDkc1i3n4a.exe ()
O4 - HKLM..\Run: [R777fEL9gTZYwI8234A] C:\Windows\SysWOW64\jOt0cS2ibD3pn.exe ()
O4 - HKLM..\Run: [r7ffRRL9gTXq8234A] C:\Windows\SysWOW64\OjCIrOyAv2b3naH.exe ()
O4 - HKLM..\Run: [R7LgqXUlt0AiDo8234A] C:\Windows\SysWOW64\HWf8ZYkrBPci3Fm.exe ()
O4 - HKLM..\Run: [r88ggRhhYXwUVlt8234A] C:\Windows\SysWOW64\LDDD3oonF4am5W7.exe ()
O4 - HKLM..\Run: [R9ggTZZjYCwkVlO8234A] C:\Windows\SysWOW64\httxAA0uS2ib3pG.exe ()
O4 - HKLM..\Run: [rAA00uvSSib3GaQ8234A] C:\Windows\SysWOW64\UffRRL99TXqUCkB.exe ()
O4 - HKLM..\Run: [RaQQH6sKLTYwrO18234A] C:\Windows\SysWOW64\VWWLXjCIzOxuS2D.exe ()
O4 - HKLM..\Run: [rb3m5JdKf9TqUkB8234A] C:\Windows\SysWOW64\gdKR9TwClBzyAu.exe ()
O4 - HKLM..\Run: [rbbbD33oG46WJfL8234A] C:\Windows\SysWOW64\qNNNtxxP0uc1.exe ()
O4 - HKLM..\Run: [rBPyAuSb38234A] C:\Windows\SysWOW64\Bv2FpGsJE8R9TjC.exe ()
O4 - HKLM..\Run: [RddERhYXXjUVetN8234A] C:\Windows\SysWOW64\jlllOBzP1D2opHs.exe ()
O4 - HKLM..\Run: [ReIrPyAuSoFpGQ68234A] C:\Windows\SysWOW64\tuDoFpGsJdKfZhX.exe ()
O4 - HKLM..\Run: [ReIzNAuSb3G8234A] C:\Windows\SysWOW64\ESo3maJd8RhXU.exe ()
O4 - HKLM..\Run: [rFaHs7E8R8234A] C:\Windows\SysWOW64\wCkVltPc1v.exe ()
O4 - HKLM..\Run: [RfLTUeIrOx0v2b38234A] C:\Windows\SysWOW64\ElzyAuSo3m5Q6.exe ()
O4 - HKLM..\Run: [RGG55sQJ6dE8fZh8234A] C:\Windows\SysWOW64\EVVelBtzPNyAv2F.exe ()
O4 - HKLM..\Run: [rGGdEKR9XIrzNx18234A] C:\Windows\SysWOW64\Y5Qd8gRZXjeIzyu.exe ()
O4 - HKLM..\Run: [rJ7dELgZq8234A] C:\Windows\SysWOW64\wxycSivDo4.exe ()
O4 - HKLM..\Run: [rK7L9gTqwrNci3G8234A] C:\Windows\SysWOW64\jtxA0ucS2b3n4Q6.exe ()
O4 - HKLM..\Run: [rKKK7ffEL9TZ8234A] C:\Windows\SysWOW64\n222ibbD3nG4aHs.exe ()
O4 - HKLM..\Run: [rKKKRZ9hXjeItPy8234A] C:\Windows\SysWOW64\qppmmH55sQJd.exe ()
O4 - HKLM..\Run: [rlBz0AiDo4m58234A] C:\Windows\SysWOW64\VmHH55sWJ7dE8qw.exe ()
O4 - HKLM..\Run: [rLL88gRRZqXk8234A] C:\Windows\SysWOW64\FooonnF4amH5WJd.exe ()
O4 - HKLM..\Run: [rm5dfTUBN8234A] C:\Windows\SysWOW64\wjVltPyAv2.exe ()
O4 - HKLM..\Run: [Rm5JJ6ddWK88234A] C:\Windows\SysWOW64\f6EfZhwUlBPy1vo.exe ()
O4 - HKLM..\Run: [rmmHH5sWJ8234A] C:\Windows\SysWOW64\ZhCkrOtPy1vD3n4.exe ()
O4 - HKLM..\Run: [rn44a6JfL8234A] C:\Windows\SysWOW64\cYwIrNx0c.exe ()
O4 - HKLM..\Run: [rNASb3na6W798234A] C:\Windows\SysWOW64\J0Si3n5HWf9TjeV.exe ()
O4 - HKLM..\Run: [rNtxP00cS3onm6W8234A] C:\Windows\SysWOW64\ma6WfLTZqCkVl.exe ()
O4 - HKLM..\Run: [Roo3m5aaJdKfL98234A] C:\Windows\SysWOW64\qRhXjClBzNx1.exe ()
O4 - HKLM..\Run: [roobbF3ppG5a8234A] C:\Windows\SysWOW64\chXUeIzNAuvS.exe ()
O4 - HKLM..\Run: [ROOONttxA0uc2iD8234A] C:\Windows\SysWOW64\NLLL9ggTXqjCeIV.exe ()
O4 - HKLM..\Run: [ROz0c1v2FpHsJE8234A] C:\Windows\SysWOW64\JZZZqhXkU.exe ()
O4 - HKLM..\Run: [RPNycA1uv2b4m5Q8234A] C:\Windows\SysWOW64\idEK8gRZ9YwUeIt.exe ()
O4 - HKLM..\Run: [RQ6W7RgXjCkrOx8234A] C:\Windows\SysWOW64\bIIBBrzzyA0viFp.exe ()
O4 - HKLM..\Run: [RQdKR9hXerO8234A] C:\Windows\SysWOW64\Ef9TwUlBzNA1Sb3.exe ()
O4 - HKLM..\Run: [rRBF9IzNtxc2b3n8234A] C:\Windows\SysWOW64\ApJjcp8IA.exe ()
O4 - HKLM..\Run: [RrrrOtx013G8234A] C:\Windows\SysWOW64\zKKfEE99gTZjYwk.exe ()
O4 - HKLM..\Run: [RRRZqhYXwUV8234A] C:\Windows\SysWOW64\E7rogS1vD45sJ7E.exe ()
O4 - HKLM..\Run: [ru2Dna6WfLTj8234A] C:\Windows\SysWOW64\aHWf9XjCVO.exe ()
O4 - HKLM..\Run: [RUlBPy1voFp5QdK8234A] C:\Windows\SysWOW64\L0ciDo4msJE8Zh.exe ()
O4 - HKLM..\Run: [Rv3FaHsJd8RqYwV8234A] C:\Windows\SysWOW64\KZhCUrOtPc.exe ()
O4 - HKLM..\Run: [RVltPyAv2n48234A] C:\Windows\SysWOW64\oySv3n4msJd8RqY.exe ()
O4 - HKLM..\Run: [rVVrrlOBtxP0ySi8234A] C:\Windows\SysWOW64\xLLL88gTZqhYwk.exe ()
O4 - HKLM..\Run: [rW7LgXYeVOtu8234A] C:\Windows\SysWOW64\IzzzONNxx0uSbpG.exe ()
O4 - HKLM..\Run: [rycS1ivD3n4m5W78234A] C:\Windows\SysWOW64\yCwkUVrlOtP.exe ()
O4 - HKLM..\Run: [ryyxxA1uvS2oF3m8234A] C:\Windows\SysWOW64\nhTTTXwjUCelIrP.exe ()
O4 - HKLM..\Run: [rZhwUeOz0c1v2n48234A] C:\Windows\SysWOW64\d3naHsJdL.exe ()
O4 - HKLM..\Run: [rZhwUlBPx1SoFma8234A] C:\Windows\SysWOW64\D9XjVByAuDoFpG.exe ()
O4 - HKLM..\Run: [rZYwIlNxu8234A] C:\Windows\SysWOW64\cSi3Ga6Kf.exe ()
O4 - HKLM..\Run: [RzzOONNtxA08234A] C:\Windows\SysWOW64\gLLL99gTXqjYekV.exe ()
O4 - HKLM..\Run: [Rzzy1D2o4pGQ68R8234A] C:\Windows\SysWOW64\KJJ77EK8YXjUVlI.exe ()
O4 - HKLM..\Run: [s11iivD22oF4pHs8234A] C:\Windows\SysWOW64\l7E8RqYwUeOtP0c.exe ()
O4 - HKLM..\Run: [s22ooFm5sQ78234A] C:\Windows\SysWOW64\yXwwkUVelOBzPy.exe ()
O4 - HKLM..\Run: [S2b3n5HdKfkVzNA8234A] C:\Windows\SysWOW64\Ua6KR9TjCkBzNA.exe ()
O4 - HKLM..\Run: [s2iip4Q6WfLgZY8234A] C:\Windows\SysWOW64\ngggTXXqjYCeIVz.exe ()
O4 - HKLM..\Run: [S4aQH6sWKf9TqYw8234A] C:\Windows\SysWOW64\xCekIVrzOtAuSiD.exe ()
O4 - HKLM..\Run: [S55ssWJ7dEL8g8234A] C:\Windows\SysWOW64\ToonnF44a.exe ()
O4 - HKLM..\Run: [S66RLL9gTXqjCeI8234A] C:\Windows\SysWOW64\YNNyyxA0uF.exe ()
O4 - HKLM..\Run: [S777fELgTjwIrOt8234A] C:\Windows\SysWOW64\DDD33pnnG4QH6W.exe ()
O4 - HKLM..\Run: [S77ffRLL9gTqjCe8234A] C:\Windows\SysWOW64\jv2bbF3pnG5aQ6W.exe ()
O4 - HKLM..\Run: [s88ggRZZqYwkVe8234A] C:\Windows\SysWOW64\HS11iivD3onFHsd.exe ()
O4 - HKLM..\Run: [S9gTXYezNu8234A] C:\Windows\SysWOW64\cXqUezONyAu2bn6.exe ()
O4 - HKLM..\Run: [S9hhTCCekzNxb8234A] C:\Windows\SysWOW64\Y2oobbF3pmG5Q6W.exe ()
O4 - HKLM..\Run: [sA111vvD2n4HJdR8234A] C:\Windows\SysWOW64\JHsJdLRqYwUlBzy.exe ()
O4 - HKLM..\Run: [Sb3m5Q6W8R9TqUe8234A] C:\Windows\SysWOW64\dE8R9TwUeIrPyAu.exe ()
O4 - HKLM..\Run: [sBBBtzzPNycAuD8234A] C:\Windows\SysWOW64\BHs7EgZYXwjUe.exe ()
O4 - HKLM..\Run: [sbDn4ammH6WJ7E8234A] C:\Windows\SysWOW64\bi3naH7gYkVOtPc.exe ()
O4 - HKLM..\Run: [sCwwkIIVtx0cSi38234A] C:\Windows\SysWOW64\U6ssWK7fEL9gqj.exe ()
O4 - HKLM..\Run: [SFFF4aamH5sW7dL8234A] C:\Windows\SysWOW64\z000yccS1ivDo.exe ()
O4 - HKLM..\Run: [SfZZ9hhTXwjUelB8234A] C:\Windows\SysWOW64\j1v2b4m5Q6.exe ()
O4 - HKLM..\Run: [SGG55aQHH6WK7R98234A] C:\Windows\SysWOW64\byyyxAA0uvS2bFp.exe ()
O4 - HKLM..\Run: [ShCkVlBPyS8234A] C:\Windows\SysWOW64\fx0c1b3n4m6WfLg.exe ()
O4 - HKLM..\Run: [SiDoGaHsJf8234A] C:\Windows\SysWOW64\f6WfLgZjCkVlNx0.exe ()
O4 - HKLM..\Run: [siivvD3oon4am58234A] C:\Windows\SysWOW64\iciDn4HsgqYkVlt.exe ()
O4 - HKLM..\Run: [SIIVVrzzONtA0cS8234A] C:\Windows\SysWOW64\YWWWKK7fRL9TXjY.exe ()
O4 - HKLM..\Run: [sJJJ7ddEK8gZ9Y8234A] C:\Windows\SysWOW64\FF44ppmH5.exe ()
O4 - HKLM..\Run: [sjjjUVVeIBzPNc8234A] C:\Windows\SysWOW64\tRRZZ9hhYX.exe ()
O4 - HKLM..\Run: [SKKK8fRZ9hTXj8234A] C:\Windows\SysWOW64\i222obbF4pm5sJ6.exe ()
O4 - HKLM..\Run: [SlIIBBrzPNyxA8234A] C:\Windows\SysWOW64\ZXXwwjUUC.exe ()
O4 - HKLM..\Run: [SllIIBrrzPyxAuS8234A] C:\Windows\SysWOW64\vKKK88fRZ9hTwjC.exe ()
O4 - HKLM..\Run: [sm5JdKfRL9TUkB8234A] C:\Windows\SysWOW64\Qd8RhXjeIrPy1v2.exe ()
O4 - HKLM..\Run: [sNAv2Fna6KR8234A] C:\Windows\SysWOW64\I5JWf9XUk.exe ()
O4 - HKLM..\Run: [sobbFF4pmG5sJ6E8234A] C:\Windows\SysWOW64\UIIBBtzzPNyA1vD.exe ()
O4 - HKLM..\Run: [sobF4pmG5Q6E8R8234A] C:\Windows\SysWOW64\GXwjUVelItPyAuD.exe ()
O4 - HKLM..\Run: [soFaHs7E8RqXkV8234A] C:\Windows\SysWOW64\OLgZhwUrOt0c1.exe ()
O4 - HKLM..\Run: [SoFp5Q6WfLhXjeI8234A] C:\Windows\SysWOW64\IJdKR9TwUeBzNx1.exe ()
O4 - HKLM..\Run: [SoG6WfLqYkVOt8234A] C:\Windows\SysWOW64\hqqqYwkkIVlNxuS.exe ()
O4 - HKLM..\Run: [sqCUlBPciDn4HW8234A] C:\Windows\SysWOW64\ex0SboGms7E.exe ()
O4 - HKLM..\Run: [sqjjYYCwkIVrONx8234A] C:\Windows\SysWOW64\nKKK7ffEL9gZ.exe ()
O4 - HKLM..\Run: [SQQJJ6dEEKfRZhX8234A] C:\Windows\SysWOW64\K111uvvD2obFpm5.exe ()
O4 - HKLM..\Run: [StartCCC] C:\Program Files (x86)\ATI Technologies\ATI.ACE\Core-Static\CLIStart.exe (Advanced Micro Devices, Inc.)
O4 - HKLM..\Run: [sWWJJ7dEE8gRZhX8234A] C:\Windows\SysWOW64\US11iivD3on4am5.exe ()
O4 - HKLM..\Run: [SWWWKK8fRL9hXqU8234A] C:\Windows\SysWOW64\NppmmG55aQJ.exe ()
O4 - HKLM..\Run: [sx0c1DoGaHW7E88234A] C:\Windows\SysWOW64\VQ6WfLgZjwIr.exe ()
O4 - HKLM..\Run: [SXUeItNA1v8234A] C:\Windows\SysWOW64\TXUlt0Av2FmsJEg.exe ()
O4 - HKLM..\Run: [SYCwkUVrlBx0c1v8234A] C:\Windows\SysWOW64\b6sWJ7fELgZ.exe ()
O4 - HKLM..\Run: [T1v33F4mH5sJ8234A] C:\Windows\SysWOW64\tZZqqYYCwkUrlBP.exe ()
O4 - HKLM..\Run: [t1v3n4m5W7E8RqY8234A] C:\Windows\SysWOW64\DfffELLTZYwUrOt.exe ()
O4 - HKLM..\Run: [t1voFm5Jdf9XCIz8234A] C:\Windows\SysWOW64\NHQ7KZYwVlP.exe ()
O4 - HKLM..\Run: [T2F5Qdg9YUltNAu8234A] C:\Windows\SysWOW64\XcvoFHWEgqYVlzc.exe ()
O4 - HKLM..\Run: [T4HWfL8gZ8234A] C:\Windows\SysWOW64\rQ6KEgqCkrNxu1D.exe ()
O4 - HKLM..\Run: [T4m5W7EgZhXUeOt8234A] C:\Windows\SysWOW64\nUrOx0ciD.exe ()
O4 - HKLM..\Run: [t55aQJJ6dK8RLhT8234A] C:\Windows\SysWOW64\BBBrrzNNyx1v2b3.exe ()
O4 - HKLM..\Run: [T66RLL9gTXqjCeI8234A] C:\Windows\SysWOW64\qNNyyxA0u.exe ()
O4 - HKLM..\Run: [t7E8R9XjVlBPyAu8234A] C:\Windows\SysWOW64\NhXkeOtPy1v2npH.exe ()
O4 - HKLM..\Run: [T7fEgTTZqjYk8234A] C:\Windows\SysWOW64\GuuccS2ib3pG4Qs.exe ()
O4 - HKLM..\Run: [t888ggRZ9hXwjVl8234A] C:\Windows\SysWOW64\m22onF4pm5sJd.exe ()
O4 - HKLM..\Run: [t999hTTXqjUCkrO8234A] C:\Windows\SysWOW64\AQQJJ6ddWKfR.exe ()
O4 - HKLM..\Run: [T9XUlBPNNyA18234A] C:\Windows\SysWOW64\vqwUlt0cv2FmsJE.exe ()
O4 - HKLM..\Run: [ta5W7E8ZhXkVltP8234A] C:\Windows\SysWOW64\AccSS1ivvDoF.exe ()
O4 - HKLM..\Run: [tE8R9TjClB8234A] C:\Windows\SysWOW64\NXjeItPyAv2b4Gs.exe ()
O4 - HKLM..\Run: [TeekIBBrzOx0Sbp8234A] C:\Windows\SysWOW64\LmGG55aJdKfLhXU.exe ()
O4 - HKLM..\Run: [teekIIBrzO8234A] C:\Windows\SysWOW64\p666dWK8fRL9TXj.exe ()
O4 - HKLM..\Run: [teekkIVVrz8234A] C:\Windows\SysWOW64\mdWWKK7fRL9gXqY.exe ()
O4 - HKLM..\Run: [TFFF3pmGGaQ68234A] C:\Windows\SysWOW64\FCCeelIBzNyA1vS.exe ()
O4 - HKLM..\Run: [TFFpGG5Qg8234A] C:\Windows\SysWOW64\madWWK8RLhqezy0.exe ()
O4 - HKLM..\Run: [tFm5Q7EgZh8234A] C:\Windows\SysWOW64\DYwUlBz0c1D.exe ()
O4 - HKLM..\Run: [TGGG5aQH68234A] C:\Windows\SysWOW64\trrrzON0uv2bF.exe ()
O4 - HKLM..\Run: [tHH66sWWJ7EL8TZ8234A] C:\Windows\SysWOW64\gx0c1b3nG4a.exe ()
O4 - HKLM..\Run: [TiibbD33pn4a8234A] C:\Windows\SysWOW64\VgqYeIrOx0cS.exe ()
O4 - HKLM..\Run: [tiibD3pnG4aH6Kf8234A] C:\Windows\SysWOW64\wOOxxA0uS2.exe ()
O4 - HKLM..\Run: [TIIIBttzcA1uv2F8234A] C:\Windows\SysWOW64\qKK88gRRZ9YXwUV.exe ()
O4 - HKLM..\Run: [TIrOyAuSi8234A] C:\Windows\SysWOW64\HvoFpGaJdKfLhXj.exe ()
O4 - HKLM..\Run: [tItPc1voFpGs68234A] C:\Windows\SysWOW64\P1voFpHsJE8RhXj.exe ()
O4 - HKLM..\Run: [TlOBtzP0y1v2n4m8234A] C:\Windows\SysWOW64\o5sWJ7dELgZhXkV.exe ()
O4 - HKLM..\Run: [tn5HdKfLTqYeI8234A] C:\Windows\SysWOW64\N8R9TjCkBOyAuSi.exe ()
O4 - HKLM..\Run: [TNNtxxA0uc2bDpG8234A] C:\Windows\SysWOW64\F7fRL9gTTqjYCkV.exe ()
O4 - HKLM..\Run: [tNx1SoFpGa6W88234A] C:\Windows\SysWOW64\J5JdKfZTwUeI.exe ()
O4 - HKLM..\Run: [TONNttxP0ucS8234A] C:\Windows\SysWOW64\P99ggTZZqjYwkVr.exe ()
O4 - HKLM..\Run: [TONyxA0uv2b3n5Q8234A] C:\Windows\SysWOW64\L6dWK8fRLhXUeIr.exe ()
O4 - HKLM..\Run: [TooonGG4amHsW7f8234A] C:\Windows\SysWOW64\qllOONtxP0ucSiD.exe ()
O4 - HKLM..\Run: [tqqqjYYCekIVzOx8234A] C:\Windows\SysWOW64\yHH66dWWK7fL9T.exe ()
O4 - HKLM..\Run: [TqUCCekIIBzONx08234A] C:\Windows\SysWOW64\mPyAu2b3m5QdKfL.exe ()
O4 - HKLM..\Run: [tqUeIzNxuSiFn5Q8234A] C:\Windows\SysWOW64\Xx1v2bpGa6W8L.exe ()
O4 - HKLM..\Run: [TrPy1v2b38234A] C:\Windows\SysWOW64\EsJd8R9TwU.exe ()
O4 - HKLM..\Run: [tRRZZqhYXw8234A] C:\Windows\SysWOW64\XBBtxvF4amHsW7d.exe ()
O4 - HKLM..\Run: [trt0Svo4HWd8Z8234A] C:\Windows\SysWOW64\TcGa6sJf8.exe ()
O4 - HKLM..\Run: [ts7EgqYlc1Do48234A] C:\Windows\SysWOW64\XYwVltu1Do.exe ()
O4 - HKLM..\Run: [tsJd8R9YjV8234A] C:\Windows\SysWOW64\ORqXkVlBPyAv2n4.exe ()
O4 - HKLM..\Run: [tUlltPyivD3oF8234A] C:\Windows\SysWOW64\zcb3n4Hs7ELghYw.exe ()
O4 - HKLM..\Run: [tuSiDp4Q6W8234A] C:\Windows\SysWOW64\Nn5HdKfLTqYeVzN.exe ()
O4 - HKLM..\Run: [tUUCeBzNx1SoFpG8234A] C:\Windows\SysWOW64\cEEKK8fRZ9hw.exe ()
O4 - HKLM..\Run: [twIlNPc1boGmsJE8234A] C:\Windows\SysWOW64\rxSbpGQ6WfLT.exe ()
O4 - HKLM..\Run: [TwVltPc1Do4msJK8234A] C:\Windows\SysWOW64\DUrBxySD4msJE8Z.exe ()
O4 - HKLM..\Run: [TxxxP00S1ib3oG48234A] C:\Windows\SysWOW64\nffEELgZqjYCkIr.exe ()
O4 - HKLM..\Run: [tyAiDn4m5Q8234A] C:\Windows\SysWOW64\TaHsJdLgqYwUeOt.exe ()
O4 - HKLM..\Run: [tySiDoFaHsJdLgZ8234A] C:\Windows\SysWOW64\sHsJfLgZhCkVlB.exe ()
O4 - HKLM..\Run: [tYYYXwwjUe8234A] C:\Windows\SysWOW64\sttzy1iv2F4pH5Q.exe ()
O4 - HKLM..\Run: [u0ciDoFp5Q7E8Zh8234A] C:\Windows\SysWOW64\qLgZYwUeO.exe ()
O4 - HKLM..\Run: [U333onF4mH5JE8Z8234A] C:\Windows\SysWOW64\QqhhYCwkUVrOt0S.exe ()
O4 - HKLM..\Run: [u3on4m5W78234A] C:\Windows\SysWOW64\cW7E8ZhCkVlB0Si.exe ()
O4 - HKLM..\Run: [u44aaQHH6sW7fL98234A] C:\Windows\SysWOW64\oA00uucS2ibD3n.exe ()
O4 - HKLM..\Run: [U44ppmHsQJ7EKgR8234A] C:\Windows\SysWOW64\XkkUUVOtzycAivo.exe ()
O4 - HKLM..\Run: [U7E8R9YwUeBzNc18234A] C:\Windows\SysWOW64\e4msd8XVB012FpH.exe ()
O4 - HKLM..\Run: [U7RgXjeVzNAuSiD8234A] C:\Windows\SysWOW64\FekBNNy0v2b3GaH.exe ()
O4 - HKLM..\Run: [U7YkVOtuibDon4a8234A] C:\Windows\SysWOW64\PIIVVrNxAc2Dn4Q.exe ()
O4 - HKLM..\Run: [UaHW7LRhwVO8234A] C:\Windows\SysWOW64\jWJJJfgqCUlBPy1.exe ()
O4 - HKLM..\Run: [ub4m5Q6KfZhwUeI8234A] C:\Windows\SysWOW64\PhhhYXXwjUlBPyu.exe ()
O4 - HKLM..\Run: [UbFF3m5aJdKR9Tq8234A] C:\Windows\SysWOW64\DUUUCeelIBzNAu.exe ()
O4 - HKLM..\Run: [uBzzyAvbF6d8LTX8234A] C:\Windows\SysWOW64\V1v2Fp5QdKRh.exe ()
O4 - HKLM..\Run: [ucA1uvD2oFpGsJd8234A] C:\Windows\SysWOW64\mnpHs7KRhXjlBzN.exe ()
O4 - HKLM..\Run: [UClBzyAuSo3m5Q68234A] C:\Windows\SysWOW64\dy1v2bpGsJdKR9T.exe ()
O4 - HKLM..\Run: [UdEKK8fRZ9h8234A] C:\Windows\SysWOW64\shwVBzzNc1uDoFp.exe ()
O4 - HKLM..\Run: [UDo4m5JdKfZ8234A] C:\Windows\SysWOW64\CHs7E8ZhXjeIzNc.exe ()
O4 - HKLM..\Run: [uDpGa6Wfg8234A] C:\Windows\SysWOW64\tXjeIrOt0c.exe ()
O4 - HKLM..\Run: [uEEKK8ggRZ9Y8234A] C:\Windows\SysWOW64\WDD22onnF4mH5QJ.exe ()
O4 - HKLM..\Run: [UekkIIBrzONyx08234A] C:\Windows\SysWOW64\GTTTXXqjUC.exe ()
O4 - HKLM..\Run: [uellIIBtzPcA1v28234A] C:\Windows\SysWOW64\YQQQJ77dE8gR9Xj.exe ()
O4 - HKLM..\Run: [uF44m5ssW7dE8234A] C:\Windows\SysWOW64\AkkkUVVrlOBtySi.exe ()
O4 - HKLM..\Run: [ugRZqYXwk8234A] C:\Windows\SysWOW64\dBx0ycSiDnaHWdL.exe ()
O4 - HKLM..\Run: [ugXjeIrOt8234A] C:\Windows\SysWOW64\tSiFpGQ6W7.exe ()
O4 - HKLM..\Run: [uHsJdELL8gZqhXw8234A] C:\Windows\SysWOW64\qlBPySi3n.exe ()
O4 - HKLM..\Run: [UHsJE8R9YjV8234A] C:\Windows\SysWOW64\EgZhwUeOtPc1v2n.exe ()
O4 - HKLM..\Run: [ujUVttPyA1uvoFp8234A] C:\Windows\SysWOW64\hLgZhXUelBtioJR.exe ()
O4 - HKLM..\Run: [ukBzyAuSi3n5Q6K8234A] C:\Windows\SysWOW64\W66dKf9Tq.exe ()
O4 - HKLM..\Run: [UKETZqjYCkV8234A] C:\Windows\SysWOW64\YqYeVzNAc2b3GaH.exe ()
O4 - HKLM..\Run: [un4msJdLRqYwUlB8234A] C:\Windows\SysWOW64\hUVVrBx0S.exe ()
O4 - HKLM..\Run: [unG4aQH6sKf9TqY8234A] C:\Windows\SysWOW64\xCekIVrzOtAuSiD.exe ()
O4 - HKLM..\Run: [unnGG4amHsWJELg8234A] C:\Windows\SysWOW64\YVVrlONNtP0ucib.exe ()
O4 - HKLM..\Run: [UnnnF44amH5sJ7E8234A] C:\Windows\SysWOW64\ulBPySiD3.exe ()
O4 - HKLM..\Run: [UPNNcAAuvD2b4GQ8234A] C:\Windows\SysWOW64\XddEEK8gR9YXjVl.exe ()
O4 - HKLM..\Run: [uPP00yccAivDoFp8234A] C:\Windows\SysWOW64\WZZhhwUUVeOB.exe ()
O4 - HKLM..\Run: [uqCekIVrzNx08234A] C:\Windows\SysWOW64\GuvS2F3pn56KR.exe ()
O4 - HKLM..\Run: [uQQJJ6ddEKfR8234A] C:\Windows\SysWOW64\K111uvvD2obFpm5.exe ()
O4 - HKLM..\Run: [urrllOBttP0yc1v8234A] C:\Windows\SysWOW64\h7E8TqCkV.exe ()
O4 - HKLM..\Run: [URRRZ99hYXwUVl8234A] C:\Windows\SysWOW64\hcccA1vD2on4pHs.exe ()
O4 - HKLM..\Run: [urrrzPPNyxAuvoF8234A] C:\Windows\SysWOW64\rTTXXwjUUClI.exe ()
O4 - HKLM..\Run: [UrzzPPNyxA1uS28234A] C:\Windows\SysWOW64\lRRZZ9hhTXwUClI.exe ()
O4 - HKLM..\Run: [USS22ibFF3nG5Q68234A] C:\Windows\SysWOW64\sXUUCCkIBrzNyA0.exe ()
O4 - HKLM..\Run: [UVlBzzP0c1ivDoF8234A] C:\Windows\SysWOW64\tBx0c1DoFm5JdYw.exe ()
O4 - HKLM..\Run: [UvvSS3pnG5aH6WK8234A] C:\Windows\SysWOW64\LzzzONNyxA0.exe ()
O4 - HKLM..\Run: [UVVVrllOBtx0yc8234A] C:\Windows\SysWOW64\mqqhhYCCwk.exe ()
O4 - HKLM..\Run: [uWWK8RRL9TCkSFp8234A] C:\Windows\SysWOW64\jAA11uvS2ob3pG5.exe ()
O4 - HKLM..\Run: [UwwwkkIVrlONxPu8234A] C:\Windows\SysWOW64\i6W7fEL9gTZqY.exe ()
O4 - HKLM..\Run: [ux0v2FpGaHdKfLg8234A] C:\Windows\SysWOW64\HoFp5Q6Kf9TjCIr.exe ()
O4 - HKLM..\Run: [uxuSiDo4mJZVyaE8234A] C:\Windows\SysWOW64\G2b3Q6W7LgqYwVl.exe ()
O4 - HKLM..\Run: [UXwNyF5WKCzNyvi8234A] C:\Windows\SysWOW64\Z78RhXUeltzNcpK.exe ()
O4 - HKLM..\Run: [uyAiDo4m5Q7E8234A] C:\Windows\SysWOW64\wFaHW7EgZhXkVlB.exe ()
O4 - HKLM..\Run: [UyxAuvS2oFpGaJd8234A] C:\Windows\SysWOW64\fjUCelIBrP.exe ()
O4 - HKLM..\Run: [UYYCw0oWqUz8234A] C:\Windows\SysWOW64\HccSS1ib3onGaH.exe ()
O4 - HKLM..\Run: [UZqqjYCwkIVrON8234A] C:\Windows\SysWOW64\z0c2b3naHsKfL.exe ()
O4 - HKLM..\Run: [uZqqjYYCw8234A] C:\Windows\SysWOW64\KaaQQH66sWKfE9g.exe ()
O4 - HKLM..\Run: [UZraH55LYXwUVlt8234A] C:\Windows\SysWOW64\XyAipHLjVtbaLVu.exe ()
O4 - HKLM..\Run: [UzzOONyyxA0vSi8234A] C:\Windows\SysWOW64\mUUCCekkIB.exe ()
O4 - HKLM..\Run: [UzzzONNtxA08234A] C:\Windows\SysWOW64\eRRLL9gTXqjYCkV.exe ()
O4 - HKLM..\Run: [V00c1iDo4m5W8234A] C:\Windows\SysWOW64\DTTZZqhhYCwUVlO.exe ()
O4 - HKLM..\Run: [v00uucS11iD3o8234A] C:\Windows\SysWOW64\xE9TqYkIVrlOtx.exe ()
O4 - HKLM..\Run: [V00yycS11iD3oF48234A] C:\Windows\SysWOW64\zsJE8TqYwVlBx.exe ()
O4 - HKLM..\Run: [V159y4fC1aReNGg8234A] C:\Windows\SysWOW64\j0yyccS1iv3oFas.exe ()
O4 - HKLM..\Run: [V2bQ7EZktxP0Sib8234A] C:\Windows\SysWOW64\WTjeIrOt0.exe ()
O4 - HKLM..\Run: [V33ppmGG5aJ6dK88234A] C:\Windows\SysWOW64\EdKR9TwClBzNAuS.exe ()
O4 - HKLM..\Run: [v4Hs7LTqCUlt0Sv8234A] C:\Windows\SysWOW64\RL9gTZYCwIlt0Sb.exe ()
O4 - HKLM..\Run: [V4msJf8ThwUlBPc8234A] C:\Windows\SysWOW64\ks7E9TjwVlNPu1b.exe ()
O4 - HKLM..\Run: [V666dWWK7fR98234A] C:\Windows\SysWOW64\e00uuvSS2ib3pGa.exe ()
O4 - HKLM..\Run: [v7E9TjCkVlNx0c18234A] C:\Windows\SysWOW64\FbbbDD3pnGaH.exe ()
O4 - HKLM..\Run: [v8BBrzzAuv2F3mG8234A] C:\Windows\SysWOW64\cTVuinWYPElvWU2.exe ()
O4 - HKLM..\Run: [v8YjeItNcDo4GsJ8234A] C:\Windows\SysWOW64\agZqhelOB05Q7.exe ()
O4 - HKLM..\Run: [V9hhYYXwjUVeIBz8234A] C:\Windows\SysWOW64\lpmmH5ssQJ7EKgR.exe ()
O4 - HKLM..\Run: [VAiDoFm5JdKg9Yw8234A] C:\Windows\SysWOW64\ims7E8ZhXUeBz.exe ()
O4 - HKLM..\Run: [vBBttPc1v28234A] C:\Windows\SysWOW64\dEEKK8ggRZ9YXjU.exe ()
O4 - HKLM..\Run: [VboGm6WfLTqC8234A] C:\Windows\SysWOW64\U4QsKE9ZjCIrNx0.exe ()
O4 - HKLM..\Run: [vc1DoFp5Q6KfZhw8234A] C:\Windows\SysWOW64\fHs7E8R9XjVIt.exe ()
O4 - HKLM..\Run: [vCkkIBBrzONxA8234A] C:\Windows\SysWOW64\kx1v2FpGaJW8R9T.exe ()
O4 - HKLM..\Run: [vDoGm6W7EgZhCUr8234A] C:\Windows\SysWOW64\qjwIrOx0c.exe ()
O4 - HKLM..\Run: [vdWWKK8fRL9hTqU8234A] C:\Windows\SysWOW64\iSSS2oobF3pm5aJ.exe ()
O4 - HKLM..\Run: [VeBOx0Sb3Ga6W7R8234A] C:\Windows\SysWOW64\FSo3Ga6W8RhX.exe ()
O4 - HKLM..\Run: [VeBzNcuDoFpGQ6E8234A] C:\Windows\SysWOW64\JsJdKgZYw.exe ()
O4 - HKLM..\Run: [VEfZTwClrPx1SbF8234A] C:\Windows\SysWOW64\oUeBzyAu2ms.exe ()
O4 - HKLM..\Run: [VF44ppmG58234A] C:\Windows\SysWOW64\DllIIBttzPycAu.exe ()
O4 - HKLM..\Run: [vFm5Jd8R9XUeBzN8234A] C:\Windows\SysWOW64\H5Jd8RhXUeBzyAv.exe ()
O4 - HKLM..\Run: [vGGG5aJ6dWfR9TX8234A] C:\Windows\SysWOW64\SRVzDsRVvd.exe ()
O4 - HKLM..\Run: [vgRRZZ9hYXwjVeI8234A] C:\Windows\SysWOW64\b44ppmH55QJ7EK.exe ()
O4 - HKLM..\Run: [VhhYYXwwkUel8234A] C:\Windows\SysWOW64\uL888gRZq.exe ()
O4 - HKLM..\Run: [VhXkeOtPyAv2n4m8234A] C:\Windows\SysWOW64\t0ciDoFa5W7E8.exe ()
O4 - HKLM..\Run: [VhYYYCkkUVrOBxP8234A] C:\Windows\SysWOW64\OHHH6ssWJ7fE8gZ.exe ()
O4 - HKLM..\Run: [vhYYYCwkUVrlOtP8234A] C:\Windows\SysWOW64\oHHH6ssWJ7fL8TZ.exe ()
O4 - HKLM..\Run: [vibbG55aQH6WK8234A] C:\Windows\SysWOW64\Z8RRLeIONyx0.exe ()
O4 - HKLM..\Run: [VIBzPuD2oFp5Q6d8234A] C:\Windows\SysWOW64\IcnWqliJw.exe ()
O4 - HKLM..\Run: [ViDD3pnGaH679Tq8234A] C:\Windows\SysWOW64\vkkkIrzNA0.exe ()
O4 - HKLM..\Run: [vJJ66dEEK8RZ9TX8234A] C:\Windows\SysWOW64\NFF44pmmG5s.exe ()
O4 - HKLM..\Run: [VJJJ7ddLLgRZqYw8234A] C:\Windows\SysWOW64\g333onF4mH5.exe ()
O4 - HKLM..\Run: [vjjUCCekIBrzNx08234A] C:\Windows\SysWOW64\UmmG5JJdWK8R9hX.exe ()
O4 - HKLM..\Run: [VKK88gRZ98234A] C:\Windows\SysWOW64\OooonFF4pmHsQJd.exe ()
O4 - HKLM..\Run: [Vm5W7E8RqYwU8234A] C:\Windows\SysWOW64\hwUrOtPySiDo.exe ()
O4 - HKLM..\Run: [vmsJEgqwrOPci8234A] C:\Windows\SysWOW64\TGQ67E9qYwrOx01.exe ()
O4 - HKLM..\Run: [vnnnF44H5JdLg8234A] C:\Windows\SysWOW64\KOOBBtxPP0cS1v3.exe ()
O4 - HKLM..\Run: [vNNNyA0uSib3pGa8234A] C:\Windows\SysWOW64\WL9hTXqCekBr.exe ()
O4 - HKLM..\Run: [VNNNyuu2b8234A] C:\Windows\SysWOW64\l9hhTTXqjUCeIBz.exe ()
O4 - HKLM..\Run: [vo4m5Jd8RjU5a6K8234A] C:\Windows\SysWOW64\kJE8ZhXjeItNc1.exe ()
O4 - HKLM..\Run: [VobbFF4pm5sQ6dK8234A] C:\Windows\SysWOW64\gtttzPyA1uv.exe ()
O4 - HKLM..\Run: [VoGaHsJfLTqhCwU8234A] C:\Windows\SysWOW64\WCkVltPuS.exe ()
O4 - HKLM..\Run: [VONNttxA0ucSib38234A] C:\Windows\SysWOW64\Fn5QdKfLgqYekVr.exe ()
O4 - HKLM..\Run: [vpGQ6Kf9XjeIztA8234A] C:\Windows\SysWOW64\gm5Jd8RhXUeBzy0.exe ()
O4 - HKLM..\Run: [vpmmmH5sQJ7dE8R8234A] C:\Windows\SysWOW64\roHEqUtcA1iD2nF.exe ()
O4 - HKLM..\Run: [VPNNyAuvSbGWRTj8234A] C:\Windows\SysWOW64\fTXXwjjUCelIr.exe ()
O4 - HKLM..\Run: [vRCybHfjzA4fVrN8234A] C:\Windows\SysWOW64\rsEfhXeIy.exe ()
O4 - HKLM..\Run: [vrNx0v2FpGaHd7R8234A] C:\Windows\SysWOW64\p3ppm5Q6KfLhXje.exe ()
O4 - HKLM..\Run: [VrOx0c1DoGaH8234A] C:\Windows\SysWOW64\WciDpGa6W7EgZjC.exe ()
O4 - HKLM..\Run: [vSS11ibbD3oG4mH8234A] C:\Windows\SysWOW64\NOOONttxP0u.exe ()
O4 - HKLM..\Run: [VSS22ibF3pnGaHW8234A] C:\Windows\SysWOW64\WhhTXXUekIBzOyx.exe ()
O4 - HKLM..\Run: [vSSS2iibnGaQHdK8234A] C:\Windows\SysWOW64\CqqqjUCekIBrNxA.exe ()
O4 - HKLM..\Run: [VTCIzt0Sbp4HWf98234A] C:\Windows\SysWOW64\GhXCIzNxu2Fnad7.exe ()
O4 - HKLM..\Run: [vtPcA1ivDoFpH8234A] C:\Windows\SysWOW64\Ff8ZYwVOtciDo4m.exe ()
O4 - HKLM..\Run: [vTTTXUeIrPx1v2b8234A] C:\Windows\SysWOW64\PJJJ6ddEK8f.exe ()
O4 - HKLM..\Run: [vUeItPyAuD8234A] C:\Windows\SysWOW64\Bc1DoFpHsJdKgZh.exe ()
O4 - HKLM..\Run: [vUUUCeekIBrON8234A] C:\Windows\SysWOW64\KJJ66dWWK8fL9TX.exe ()
O4 - HKLM..\Run: [vuuvvS22ib8234A] C:\Windows\SysWOW64\yRhXUeNNyxA.exe ()
O4 - HKLM..\Run: [VVltPyAv2bpGsJE8234A] C:\Windows\SysWOW64\WHsJd8R9Y.exe ()
O4 - HKLM..\Run: [VVrzOtxA0c2b3n48234A] C:\Windows\SysWOW64\WQH6dWK7fLgXjCk.exe ()
O4 - HKLM..\Run: [VWETUOxci8234A] C:\Windows\SysWOW64\dTZqjYCkIrOtPuS.exe ()
O4 - HKLM..\Run: [VXkVOtPyAv2n4Hs8234A] C:\Windows\SysWOW64\JFaHW7E8R.exe ()
O4 - HKLM..\Run: [vXXXjUUCel8234A] C:\Windows\SysWOW64\WGG55sQQJ6dK8RZ.exe ()
O4 - HKLM..\Run: [Vz0ci2np5QdKR9Y8234A] C:\Windows\SysWOW64\t4HsJdLgZYwUe.exe ()
O4 - HKLM..\Run: [w1boGaHs7E8Tq8234A] C:\Windows\SysWOW64\j4Q6KfLgZjwIrOt.exe ()
O4 - HKLM..\Run: [W33oonG4amH6WJf8234A] C:\Windows\SysWOW64\PGa6WTwIrOt0c1b.exe ()
O4 - HKLM..\Run: [w3m5JdKf9TqUe8234A] C:\Windows\SysWOW64\Gm5Q6KRXeIrNx1S.exe ()
O4 - HKLM..\Run: [w3oonnF4amH5W7d8234A] C:\Windows\SysWOW64\XiEr147qlOBPS1v.exe ()
O4 - HKLM..\Run: [w444pmmG5sQ6dKf8234A] C:\Windows\SysWOW64\ePPPNyycA1uD2b.exe ()
O4 - HKLM..\Run: [w4GQdfRZTj8234A] C:\Windows\SysWOW64\q7EE8Z9XwjetNcu.exe ()
O4 - HKLM..\Run: [w555sQQ6Kf8234A] C:\Windows\SysWOW64\JzzzPNyyA1uv2oF.exe ()
O4 - HKLM..\Run: [W55aaQJdR9XjeBO8234A] C:\Windows\SysWOW64\dAAA1u2pm.exe ()
O4 - HKLM..\Run: [W6sWEL8gTqYwUrO8234A] C:\Windows\SysWOW64\fIltP0ucSin4m.exe ()
O4 - HKLM..\Run: [w77ffEL8gT8234A] C:\Windows\SysWOW64\DbbbD33onG4aH6W.exe ()
O4 - HKLM..\Run: [w8R9TwClBzyAu8234A] C:\Windows\SysWOW64\FtPyAu2b4m5J.exe ()
O4 - HKLM..\Run: [w9hTXwjUCl8234A] C:\Windows\SysWOW64\sobF4pmG5Q6E8R.exe ()
O4 - HKLM..\Run: [W9ySFp5Lh8234A] C:\Windows\SysWOW64\kobbFF4pmGQ6dK.exe ()
O4 - HKLM..\Run: [WaHWdL8gRqYwUeO8234A] C:\Windows\SysWOW64\mYCwkUVrlBx0ciD.exe ()
O4 - HKLM..\Run: [WAvi3GQd7LTjeVz8234A] C:\Windows\SysWOW64\bNASbp5JWf9XUkr.exe ()
O4 - HKLM..\Run: [WBttxx0yS1vDoFm8234A] C:\Windows\SysWOW64\NG44a6sJ7LZCkVr.exe ()
O4 - HKLM..\Run: [wDDD2oonF4pH58234A] C:\Windows\SysWOW64\vVVeelOBBzP0yAi.exe ()
O4 - HKLM..\Run: [weellOBBtzPyc8234A] C:\Windows\SysWOW64\vdEELL8gRZqhXwU.exe ()
O4 - HKLM..\Run: [wF4m5W7dEL8234A] C:\Windows\SysWOW64\w7E8ZhCkVlB0Si3.exe ()
O4 - HKLM..\Run: [WFF44pmG5sQJ6E88234A] C:\Windows\SysWOW64\ftttzPPNycAuvDo.exe ()
O4 - HKLM..\Run: [WG44ammH6sWJfE88234A] C:\Windows\SysWOW64\ukVlNx0Si.exe ()
O4 - HKLM..\Run: [wGGG5aaQH6dK7fL8234A] C:\Windows\SysWOW64\exxxA00uvS2bFp.exe ()
O4 - HKLM..\Run: [WgqYeIzNx8234A] C:\Windows\SysWOW64\iIrNx0viFp5Q6W7.exe ()
O4 - HKLM..\Run: [WgTTTZqjYCek8234A] C:\Windows\SysWOW64\q777fEEL9.exe ()
O4 - HKLM..\Run: [wHH66W79XYeVzu28234A] C:\Windows\SysWOW64\YzzOONyxx0uv2bp.exe ()
O4 - HKLM..\Run: [wi3n5QdKfLTqY8234A] C:\Windows\SysWOW64\UQ6KfLTqUeIzNx0.exe ()
O4 - HKLM..\Run: [WIIIVrrlONtx0uS8234A] C:\Windows\SysWOW64\jKfLTqjYCw.exe ()
O4 - HKLM..\Run: [WjjjUVVelIBzPyc8234A] C:\Windows\SysWOW64\ZFp5QJ77dE8gR9h.exe ()
O4 - HKLM..\Run: [wKEgqCIlt0Sbo8234A] C:\Windows\SysWOW64\rVzNAuSiDpGa.exe ()
O4 - HKLM..\Run: [WKfLTqjYCkIVzOt8234A] C:\Windows\SysWOW64\BIrNx0SiFpGaH.exe ()
O4 - HKLM..\Run: [WKK77fRRL9gXqYC8234A] C:\Windows\SysWOW64\nppnnG5aaH6d.exe ()
O4 - HKLM..\Run: [wL8gTZqhYwUrOtP8234A] C:\Windows\SysWOW64\TcS1ibD3oGaHsJf.exe ()
O4 - HKLM..\Run: [WlllONNtxP0cSib8234A] C:\Windows\SysWOW64\nZqqjjYCwkIV.exe ()
O4 - HKLM..\Run: [wltNAvo4GQd8Z8234A] C:\Windows\SysWOW64\fVOzy1Dnp5JEg9X.exe ()
O4 - HKLM..\Run: [wm5JK8ffRZhwUCl8234A] C:\Windows\SysWOW64\QBBttzNyyA1vDoF.exe ()
O4 - HKLM..\Run: [WonF4amH5W7ERhX8234A] C:\Windows\SysWOW64\IrlOBtxP0c1v.exe ()
O4 - HKLM..\Run: [wpGaJd8R9TqUk8234A] C:\Windows\SysWOW64\CEfZhXjeIrPyAv2.exe ()
O4 - HKLM..\Run: [WqqYYCeekIrzOt08234A] C:\Windows\SysWOW64\kGG55aH66dK7fLg.exe ()
O4 - HKLM..\Run: [WqUeIrOyA8234A] C:\Windows\SysWOW64\eNx1v2b3GaJdKfL.exe ()
O4 - HKLM..\Run: [wqYeVzt0uS8234A] C:\Windows\SysWOW64\pjeBOxu2FnaHd7R.exe ()
O4 - HKLM..\Run: [WR9XjCkBOyAuSb38234A] C:\Windows\SysWOW64\cv2bpGaJd.exe ()
O4 - HKLM..\Run: [WrNxuSiDn4msJET8234A] C:\Windows\SysWOW64\ei3n4Q6KfgZ.exe ()
O4 - HKLM..\Run: [WrrrlOONtxPucSi8234A] C:\Windows\SysWOW64\Db3GaHsKfLgZjCI.exe ()
O4 - HKLM..\Run: [WssQQJ66dEKfR9T8234A] C:\Windows\SysWOW64\nD222obF4pmG.exe ()
O4 - HKLM..\Run: [WssWWK7fEL9TZjC8234A] C:\Windows\SysWOW64\eA00ucSSibDnGaH.exe ()
O4 - HKLM..\Run: [wt0ciDn4HsJE8Rh8234A] C:\Windows\SysWOW64\n0ci345W7LgZYwV.exe ()
O4 - HKLM..\Run: [wuccSS2ibD3pG8234A] C:\Windows\SysWOW64\ZzzzONNtx.exe ()
O4 - HKLM..\Run: [WuDoFpGQ6E8RhXj8234A] C:\Windows\SysWOW64\BJdKg9YwUeIzN.exe ()
O4 - HKLM..\Run: [WUlBzNAuSo3m8234A] C:\Windows\SysWOW64\RoFp5Q6EfZh.exe ()
O4 - HKLM..\Run: [wv2bpGaJd88234A] C:\Windows\SysWOW64\QhhhTXwwjeIrPy.exe ()
O4 - HKLM..\Run: [Wx0c1boGaHs7E8T8234A] C:\Windows\SysWOW64\cfLgZjwIr.exe ()
O4 - HKLM..\Run: [WxP0ycS1iDoFaHs8234A] C:\Windows\SysWOW64\y7fEL8gTZhCkVlB.exe ()
O4 - HKLM..\Run: [wxxPPSGa6ZhOD8234A] C:\Windows\SysWOW64\QEELL9gTZjYCkVr.exe ()
O4 - HKLM..\Run: [WYCCwkkIV8234A] C:\Windows\SysWOW64\f666sWWK7fELgTq.exe ()
O4 - HKLM..\Run: [wZ9hYXjUVlBzN8234A] C:\Windows\SysWOW64\hivD2onF4m5Q7Kg.exe ()
O4 - HKLM..\Run: [WZhXkVlBz0c18234A] C:\Windows\SysWOW64\eBx0c1v3n4m5W7E.exe ()
O4 - HKLM..\Run: [x2obF4m5sJd8234A] C:\Windows\SysWOW64\HeellIBtzPNyA1v.exe ()
O4 - HKLM..\Run: [X444pmmG5sQ6d8R8234A] C:\Windows\SysWOW64\jtttzPPNycAuv2o.exe ()
O4 - HKLM..\Run: [x44ppmG5sJ6dKf8234A] C:\Windows\SysWOW64\KEYVIBBtPyA1v2o.exe ()
O4 - HKLM..\Run: [x555aQQH6dWKfR8234A] C:\Windows\SysWOW64\diiibFF3p.exe ()
O4 - HKLM..\Run: [X66ddEK88f8234A] C:\Windows\SysWOW64\JwUeIPy1v2bpm5s.exe ()
O4 - HKLM..\Run: [X777fEEL8g8234A] C:\Windows\SysWOW64\kltPuSiDnG4aH6W.exe ()
O4 - HKLM..\Run: [x999hYYXwjUelBt8234A] C:\Windows\SysWOW64\HpmmHH5sQJ7dK8R.exe ()
O4 - HKLM..\Run: [X99hhTXwwU8234A] C:\Windows\SysWOW64\mo4m5Q66dEKfR.exe ()
O4 - HKLM..\Run: [xa6KRhqCkBzNx0v8234A] C:\Windows\SysWOW64\WhTXwjelIzyASoF.exe ()
O4 - HKLM..\Run: [xBPyAiDoFpHsJdK8234A] C:\Windows\SysWOW64\ZdLgZhXkV.exe ()
O4 - HKLM..\Run: [xBz0AiDo4m5Q7Kg8234A] C:\Windows\SysWOW64\q1DoFa5W7EgZhXU.exe ()
O4 - HKLM..\Run: [XCwkkUrOBPcom8234A] C:\Windows\SysWOW64\q666sWJ7fEL8TZh.exe ()
O4 - HKLM..\Run: [xDD33nnG4am6sJ8234A] C:\Windows\SysWOW64\akkVVrlONtP0cSi.exe ()
O4 - HKLM..\Run: [xDGHsKfLgZjwVlN8234A] C:\Windows\SysWOW64\ekzASFGH79qerx.exe ()
O4 - HKLM..\Run: [xE9TqYwVV0Sb3n48234A] C:\Windows\SysWOW64\YkVzNxuSiDpGaHs.exe ()
O4 - HKLM..\Run: [xeekIN0iasKfgjV8234A] C:\Windows\SysWOW64\b2ibF33GQd7fLgT.exe ()
O4 - HKLM..\Run: [xeekkIVrrzNtx0c8234A] C:\Windows\SysWOW64\jAuSb3n5Q6KfLgX.exe ()
O4 - HKLM..\Run: [xfLgZjCkVlNx0c18234A] C:\Windows\SysWOW64\pcccS22ibD3nGaH.exe ()
O4 - HKLM..\Run: [xGGG5aQQ6dW8234A] C:\Windows\SysWOW64\YRRRZ9hClPNxuS3.exe ()
O4 - HKLM..\Run: [XHW7R9TjCk8234A] C:\Windows\SysWOW64\GrrrzyxAv2b3G.exe ()
O4 - HKLM..\Run: [XhwUrOtPySiDoFa8234A] C:\Windows\SysWOW64\Y9TqYwIrNx0c1oG.exe ()
O4 - HKLM..\Run: [XiDoF4pmH5QJ7E88234A] C:\Windows\SysWOW64\PXwwkVlBzyc.exe ()
O4 - HKLM..\Run: [XIzNx0ciDpGaH8234A] C:\Windows\SysWOW64\HuSb3n5Q6KfLgXY.exe ()
O4 - HKLM..\Run: [XjCIrPx1v28234A] C:\Windows\SysWOW64\SyyycuDFm5QdKR9.exe ()
O4 - HKLM..\Run: [XLLL88gTZqhrlP08234A] C:\Windows\SysWOW64\EGG44amH6sWJ7.exe ()
O4 - HKLM..\Run: [XlOOtxxP0y8234A] C:\Windows\SysWOW64\jEELL8ggTZhYCUV.exe ()
O4 - HKLM..\Run: [xnG44aaH6sW7fL8234A] C:\Windows\SysWOW64\OkzOOtxxA0cS2b3.exe ()
O4 - HKLM..\Run: [xPP00ucS1ib8234A] C:\Windows\SysWOW64\TLL99gTTZqjCIrN.exe ()
O4 - HKLM..\Run: [xPx11uvS2obF3m8234A] C:\Windows\SysWOW64\Km5Q6KfZhXjeI.exe ()
O4 - HKLM..\Run: [xPyAv2n4m5J8234A] C:\Windows\SysWOW64\eW7E8RhXkVl.exe ()
O4 - HKLM..\Run: [XQJfRL9hTqUeIrN8234A] C:\Windows\SysWOW64\pBrzPNyxAuSoFpG.exe ()
O4 - HKLM..\Run: [xQJJ66dEK8fR9h8234A] C:\Windows\SysWOW64\u11uuvDD2ob4pG5.exe ()
O4 - HKLM..\Run: [xQQQJ66dEK8RZh8234A] C:\Windows\SysWOW64\fFFF4ppmG5.exe ()
O4 - HKLM..\Run: [xrOtAuSb3n4HsKf8234A] C:\Windows\SysWOW64\C2bpGaHd7R9TqC.exe ()
O4 - HKLM..\Run: [xRRRL99gTXqjCe8234A] C:\Windows\SysWOW64\RS22iibF3pnG5Q6.exe ()
O4 - HKLM..\Run: [xTTTXqqjYCkVrN8234A] C:\Windows\SysWOW64\HGG55aQQH6WK7RL.exe ()
O4 - HKLM..\Run: [XTTTZqqjYCwkVrO8234A] C:\Windows\SysWOW64\dQQHH6KK7fE9.exe ()
O4 - HKLM..\Run: [xvSibbFpnG5aH6W8234A] C:\Windows\SysWOW64\AkIBrrzNNxA0.exe ()
O4 - HKLM..\Run: [xYYYXwwjUVelBtP8234A] C:\Windows\SysWOW64\UdEEKK8gRZ9.exe ()
O4 - HKLM..\Run: [XzzOtAuSDaHsKE98234A] C:\Windows\SysWOW64\WTTqjYYCekIV.exe ()
O4 - HKLM..\Run: [y3naHsJE8Th8234A] C:\Windows\SysWOW64\PsKfLTqYwVlNxuS.exe ()
O4 - HKLM..\Run: [Y5JdKf9TwC8234A] C:\Windows\SysWOW64\yBttzzPNyc1vo4.exe ()
O4 - HKLM..\Run: [y6CiEryamHsW7E8234A] C:\Windows\SysWOW64\fhCP26jNbKTrS.exe ()
O4 - HKLM..\Run: [Y9TwUelBrzNAuSo8234A] C:\Windows\SysWOW64\QIzNc1voFpGsJdK.exe ()
O4 - HKLM..\Run: [YaHW7RgXjeIrOx08234A] C:\Windows\SysWOW64\QR9XjCkBzNAuSi3.exe ()
O4 - HKLM..\Run: [yAuDo4m5Q6EfZhX8234A] C:\Windows\SysWOW64\ApHsJd8R9YwUlBz.exe ()
O4 - HKLM..\Run: [yBrrPyAuSb3m5Q68234A] C:\Windows\SysWOW64\kTTXXwjjUeI.exe ()
O4 - HKLM..\Run: [yBzNc11uvD2oF4m8234A] C:\Windows\SysWOW64\OQ7E8R9YwU.exe ()
O4 - HKLM..\Run: [Yc1DoFaHW7LgZ8234A] C:\Windows\SysWOW64\QaHsJfLTqYwUrBx.exe ()
O4 - HKLM..\Run: [yClrPyAu2b3m5J68234A] C:\Windows\SysWOW64\AyAv2bpGsJd8R9T.exe ()
O4 - HKLM..\Run: [yeIrOy0Si3n5Qd8234A] C:\Windows\SysWOW64\dv2b3GaJW8R9.exe ()
O4 - HKLM..\Run: [ygggTXXqjYCIztx8234A] C:\Windows\SysWOW64\vGG55aQH6dWK7.exe ()
O4 - HKLM..\Run: [YGsJdKf9TwUeB8234A] C:\Windows\SysWOW64\IXjVltPyAu2b.exe ()
O4 - HKLM..\Run: [ygZ99hYYXwj8234A] C:\Windows\SysWOW64\wVOtPyAv2n4m5Jd.exe ()
O4 - HKLM..\Run: [yH55ssQJ7dE8234A] C:\Windows\SysWOW64\HyyycAA1ivDon4p.exe ()
O4 - HKLM..\Run: [yhCkVlBPySi8234A] C:\Windows\SysWOW64\qOx0c1b3GaHsJE8.exe ()
O4 - HKLM..\Run: [yhTTXXqjUCekBrO8234A] C:\Windows\SysWOW64\appmmG5aQJ6Kf.exe ()
O4 - HKLM..\Run: [yhwVD5ZNJeS8234A] C:\Windows\SysWOW64\fHHHsWJ7LqXVBz0.exe ()
O4 - HKLM..\Run: [yhXUeIzy1v2FpGa8234A] C:\Windows\SysWOW64\Fu2Fm5QdK.exe ()
O4 - HKLM..\Run: [yIrOx0v2b3GaHd78234A] C:\Windows\SysWOW64\tx1SoFpGa6W8RhX.exe ()
O4 - HKLM..\Run: [YjCIrOt0c2b3naH8234A] C:\Windows\SysWOW64\LibbFF3n5a6W7R9.exe ()
O4 - HKLM..\Run: [YkeBPy1Dn48234A] C:\Windows\SysWOW64\Es7LThwUltS348Z.exe ()
O4 - HKLM..\Run: [ykIVrlOx0ciDna8234A] C:\Windows\SysWOW64\O4aQH6sWKfLgZjC.exe ()
O4 - HKLM..\Run: [ykkIIVrrtxP0cSi8234A] C:\Windows\SysWOW64\rnGGGWKEg.exe ()
O4 - HKLM..\Run: [ykUVlzy1iDoFpHs8234A] C:\Windows\SysWOW64\DonF4amH5W7E8qY.exe ()
O4 - HKLM..\Run: [ylGfzyAuSiFGQdK8234A] C:\Windows\SysWOW64\suvvD22bF4m5Q6K.exe ()
O4 - HKLM..\Run: [Ym5W7EgZhX8234A] C:\Windows\SysWOW64\W8TqYwUlBx0ciDo.exe ()
O4 - HKLM..\Run: [Yn4HsJd8Rq8234A] C:\Windows\SysWOW64\aJE8TqCkVlBPySi.exe ()
O4 - HKLM..\Run: [yNA0uv23GQ6KRgq8234A] C:\Windows\SysWOW64\XRL9hTXqjCkBz.exe ()
O4 - HKLM..\Run: [yONNttxP0ucSib38234A] C:\Windows\SysWOW64\J999gTTZqjYCkIr.exe ()
O4 - HKLM..\Run: [yOtPc1b3naH8234A] C:\Windows\SysWOW64\P2bpGaHW7EgZjCk.exe ()
O4 - HKLM..\Run: [Yp4QsKEgZjwIr8234A] C:\Windows\SysWOW64\sW7RgXjCIrOx0c2.exe ()
O4 - HKLM..\Run: [YpGQ6W8LhXjCy8234A] C:\Windows\SysWOW64\X6E8RhXUeBzNxuS.exe ()
O4 - HKLM..\Run: [YQJJ6dEK8f8234A] C:\Windows\SysWOW64\wAA1uuvD2ob4pG5.exe ()
O4 - HKLM..\Run: [yRZZqhYXwUV8234A] C:\Windows\SysWOW64\AVVrrP3onF4mHsJ.exe ()
O4 - HKLM..\Run: [YSb3Ga6W7L8234A] C:\Windows\SysWOW64\If9XUkBOx.exe ()
O4 - HKLM..\Run: [YSi3naHW7RgXYeV8234A] C:\Windows\SysWOW64\h3Ga6WfLTqUkBOy.exe ()
O4 - HKLM..\Run: [ysJE8RhXjClBPN8234A] C:\Windows\SysWOW64\ygZwUeIzNc1v2b4.exe ()
O4 - HKLM..\Run: [yssWJ7dL8gRZhX8234A] C:\Windows\SysWOW64\QcSS11ivD3on4aH.exe ()
O4 - HKLM..\Run: [YsWWJJ7fEL8TZhY8234A] C:\Program Files (x86)\Internet Explorer\plugins\iexplore.exe File not found
O4 - HKLM..\Run: [ytP0ucibDoGHLq8234A] C:\Windows\SysWOW64\RN0c2DGaQ6WfLYI.exe ()
O4 - HKLM..\Run: [yTXXXwjCeIrPyA8234A] C:\Windows\SysWOW64\J555sQQJ6dE8fZ9.exe ()
O4 - HKLM..\Run: [yUUCCekIIrzONx8234A] C:\Windows\SysWOW64\QJJ66dWWK8fL9Tq.exe ()
O4 - HKLM..\Run: [YUVVrllOBtx0c1D8234A] C:\Windows\SysWOW64\config\systemprofile\AppData\Roaming\rbbbD33oG4m6sJf\fLL88gTZqhYCk.exe ()
O4 - HKLM..\Run: [YUVVrlOOBtx0c1i8234A] C:\Windows\SysWOW64\k77ffEL8gTZhYw.exe ()
O4 - HKLM..\Run: [YVVVrllOBtxPy8234A] C:\Windows\SysWOW64\sSiDo4m6W7LgZhC.exe ()
O4 - HKLM..\Run: [yW7E8ThCkVltPyS8234A] C:\Windows\SysWOW64\qZjwIrOt0c1b3Ga.exe ()
O4 - HKLM..\Run: [YYYYCwwlOxPyc8234A] C:\Windows\SysWOW64\HG44am6sW7fELgZ.exe ()
O4 - HKLM..\Run: [yZhwUlBPy1v8234A] C:\Windows\SysWOW64\LYwIlNPc1Do4msJ.exe ()
O4 - HKLM..\Run: [yZhXkVlBBtP0yAi8234A] C:\Windows\SysWOW64\Ov3n4m5W7L.exe ()
O4 - HKLM..\Run: [yzOONNyxA0vSb3n8234A] C:\Windows\SysWOW64\HLLL9hTTXqjCeIB.exe ()
O4 - HKLM..\Run: [yzy0vi3na6KfLgX8234A] C:\Windows\SysWOW64\LyAvo3GQd8LTjC.exe ()
O4 - HKLM..\Run: [z22oobFpmJ6dK8R8234A] C:\Windows\SysWOW64\BYYXjUVIBzPNcAu.exe ()
O4 - HKLM..\Run: [z3GQd7LTjeVOxuS8234A] C:\Windows\SysWOW64\e9hTXqjUCkBzyAv.exe ()
O4 - HKLM..\Run: [z88ggTZZqhCwkVl8234A] C:\Windows\SysWOW64\JxuSiDo4mH6sJ7E.exe ()
O4 - HKLM..\Run: [z8R9YjVlBzyAu8234A] C:\Windows\SysWOW64\NwUeOz0c1voFm5Q.exe ()
O4 - HKLM..\Run: [z8ZhwUeBPy1voFm8234A] C:\Windows\SysWOW64\Ydg9XUltNAvFp5Q.exe ()
O4 - HKLM..\Run: [z999gTXjjYekV8234A] C:\Windows\SysWOW64\zXUeyopQ8evi3nH.exe ()
O4 - HKLM..\Run: [Z999hhTXqUeBzNx8234A] C:\Windows\SysWOW64\JQQQJ66dWK8R.exe ()
O4 - HKLM..\Run: [Za5W7E8RqXkV8234A] C:\Windows\SysWOW64\H8TqYwUrBx0c1Do.exe ()
O4 - HKLM..\Run: [zAv2Fp5Q7Kg9XUe8234A] C:\Windows\SysWOW64\DoFm5JdLRqXkeOz.exe ()
O4 - HKLM..\Run: [zBzNAuSiFpGaH8234A] C:\Windows\SysWOW64\lmmmG55Q6KfLhXj.exe ()
O4 - HKLM..\Run: [ZccSS1ivD3on4aH8234A] C:\Windows\SysWOW64\WJJ7ffEL8gTZClB.exe ()
O4 - HKLM..\Run: [ZCkrOx0SiDn4Hs78234A] C:\Windows\SysWOW64\AuSb3Ga6W7Lg.exe ()
O4 - HKLM..\Run: [zDpGQ6W7E98234A] C:\Windows\SysWOW64\XKfLgXjCkVOtAuS.exe ()
O4 - HKLM..\Run: [ZEgZjCwkkVrlOtP8234A] C:\Windows\SysWOW64\FSiDpGaHW.exe ()
O4 - HKLM..\Run: [ZF333G5aQJdK8R98234A] C:\Windows\SysWOW64\QNyyxA1uvSo.exe ()
O4 - HKLM..\Run: [ZFps6Kf9TwUl8234A] C:\Windows\SysWOW64\dXUeIBttPNyv.exe ()
O4 - HKLM..\Run: [ZggTTZqqYCwUVBc8234A] C:\Windows\SysWOW64\yOxuDon4aH6WJf.exe ()
O4 - HKLM..\Run: [ZhhhYXXwkUVl8234A] C:\Windows\SysWOW64\dDoFaHW7E8gZ.exe ()
O4 - HKLM..\Run: [ZHJERXVty8234A] C:\Windows\SysWOW64\Fy1DFmsd8hXePcv.exe ()
O4 - HKLM..\Run: [ZJJ66dEKKfRZ9Tw8234A] C:\Windows\SysWOW64\jeItNc1voFpGs.exe ()
O4 - HKLM..\Run: [ZJJ77fELL8TZ8234A] C:\Windows\SysWOW64\lmmmHH6sW.exe ()
O4 - HKLM..\Run: [ZLLL9ggTXqjCekV8234A] C:\Windows\SysWOW64\JaQQHH6dWK7f.exe ()
O4 - HKLM..\Run: [zoFaHsJdL8gRqhX8234A] C:\Windows\SysWOW64\fCkVlBx0c1.exe ()
O4 - HKLM..\Run: [zoobbFF4pmGsQ6d8234A] C:\Windows\SysWOW64\xBBttzPPNyA1uD.exe ()
O4 - HKLM..\Run: [zOOONyxxA0iFGaQ8234A] C:\Windows\SysWOW64\JmGG5aaQ6dWK8Re.exe ()
O4 - HKLM..\Run: [ZppmmG5aQ8234A] C:\Windows\SysWOW64\PBBrrzPNNxA1v2.exe ()
O4 - HKLM..\Run: [ZPy1v2n4HsJdKg98234A] C:\Windows\SysWOW64\rE8RhXkVl.exe ()
O4 - HKLM..\Run: [zRgXjeVOxu2b3n48234A] C:\Windows\SysWOW64\lAu2b3GQd.exe ()
O4 - HKLM..\Run: [zRRZZ9hhYXwUelB8234A] C:\Windows\SysWOW64\y44ppmH5sQJ7EK.exe ()
O4 - HKLM..\Run: [ZRRZZqhhYXwUVlO8234A] C:\Windows\SysWOW64\hFFF4aamH5sW7dL.exe ()
O4 - HKLM..\Run: [zs7KRYUltPNc18234A] C:\Windows\SysWOW64\qn4mHsdRXVB01Dn.exe ()
O4 - HKLM..\Run: [ZSb3GmWf88234A] C:\Windows\SysWOW64\RbD34aQs7ETCIOt.exe ()
O4 - HKLM..\Run: [zsKfLTqYkVlNPuS8234A] C:\Windows\SysWOW64\mCkVztAuSiDn4.exe ()
O4 - HKLM..\Run: [zSoFpGa6W8R9X8234A] C:\Windows\SysWOW64\cKf9TwUeIrNx.exe ()
O4 - HKLM..\Run: [zSS11ibD3onGam68234A] C:\Windows\SysWOW64\uKKK7fELgqCkVt0.exe ()
O4 - HKLM..\Run: [zssWJJ7fEL8TZhC8234A] C:\Windows\SysWOW64\GccSSiibD3on4.exe ()
O4 - HKLM..\Run: [ZWJJ77dELgZhwUe8234A] C:\Windows\SysWOW64\T11iivDD3on4aH5.exe ()
O4 - HKLM..\Run: [zwVVellIBtzPyc18234A] C:\Windows\SysWOW64\U222onn4H5sJE8Z.exe ()
O4 - HKLM..\Run: [zXjCkBOyAuSb38234A] C:\Windows\SysWOW64\lIzNx1v2FpGaJW8.exe ()
O4 - HKLM..\Run: [zxuSo3maJW8234A] C:\Windows\SysWOW64\D2bpGQ6Kf9TwClr.exe ()
O4 - HKLM..\Run: [zYCCwwkIVr8234A] C:\Windows\SysWOW64\y666sWWK7fE9gZq.exe ()
O4 - HKLM..\Run: [ZzNx1v2b38234A] C:\Windows\SysWOW64\n2b4m5Q6E8R9TwU.exe ()
O4 - HKLM..\Run: [ZzNx1v2FpGaJW8R8234A] C:\Windows\SysWOW64\nJd8ZhXUe.exe ()
O4 - HKLM..\Run: [ZzyAv2Fp5QdK8234A] C:\Windows\SysWOW64\zdddELL8gRZhYkV.exe ()
O4 - HKLM..\Run: [zZYkrBxy1vo4m8234A] C:\Windows\SysWOW64\YgqCVlNu1bo46W7.exe ()
O4 - HKCU..\Run: [SpybotSD TeaTimer] C:\Program Files (x86)\Spybot - Search & Destroy\TeaTimer.exe (Safer-Networking Ltd.)
O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoActiveDesktop = 1
O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoActiveDesktopChanges = 1
O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer\Run: Policies = C:\Users\hamsandwich\AppData\Roaming\spynet\server.exe (PpOo5mfo)
O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\System: ConsentPromptBehaviorUser = 3
O7 - HKCU\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer\Run: Policies = C:\Users\hamsandwich\AppData\Roaming\spynet\server.exe (PpOo5mfo)
O9 - Extra 'Tools' menuitem : Spybot - Search & Destroy Configuration - {DFB852A3-47F8-48C4-A200-58CAB36FD2A2} - C:\Program Files (x86)\Spybot - Search & Destroy\SDHelper.dll (Safer Networking Limited)
O10:64bit: - NameSpace_Catalog5\Catalog_Entries\000000000009 [] - C:\Program Files (x86)\Bonjour\mdnsNSP.dll (Apple Inc.)
O10:64bit: - Protocol_Catalog9\Catalog_Entries\000000000001 - mmswsock.dll File not found
O10:64bit: - Protocol_Catalog9\Catalog_Entries\000000000002 - mmswsock.dll File not found
O10:64bit: - Protocol_Catalog9\Catalog_Entries\000000000003 - mmswsock.dll File not found
O10:64bit: - Protocol_Catalog9\Catalog_Entries\000000000004 - mmswsock.dll File not found
O10:64bit: - Protocol_Catalog9\Catalog_Entries\000000000005 - mmswsock.dll File not found
O10:64bit: - Protocol_Catalog9\Catalog_Entries\000000000006 - mmswsock.dll File not found
O10:64bit: - Protocol_Catalog9\Catalog_Entries\000000000007 - mmswsock.dll File not found
O10:64bit: - Protocol_Catalog9\Catalog_Entries\000000000008 - mmswsock.dll File not found
O10:64bit: - Protocol_Catalog9\Catalog_Entries\000000000009 - mmswsock.dll File not found
O10:64bit: - Protocol_Catalog9\Catalog_Entries\000000000010 - mmswsock.dll File not found
O10 - NameSpace_Catalog5\Catalog_Entries\000000000009 [] - C:\Program Files (x86)\Bonjour\mdnsNSP.dll (Apple Inc.)
O10 - Protocol_Catalog9\Catalog_Entries\000000000001 - C:\Program Files (x86)\Bonjour\mdnsNSP.dll File not found
O10 - Protocol_Catalog9\Catalog_Entries\000000000002 - C:\Program Files (x86)\Bonjour\mdnsNSP.dll File not found
O10 - Protocol_Catalog9\Catalog_Entries\000000000003 - C:\Program Files (x86)\Bonjour\mdnsNSP.dll File not found
O10 - Protocol_Catalog9\Catalog_Entries\000000000004 - C:\Program Files (x86)\Bonjour\mdnsNSP.dll File not found
O10 - Protocol_Catalog9\Catalog_Entries\000000000005 - C:\Program Files (x86)\Bonjour\mdnsNSP.dll File not found
O10 - Protocol_Catalog9\Catalog_Entries\000000000006 - C:\Program Files (x86)\Bonjour\mdnsNSP.dll File not found
O10 - Protocol_Catalog9\Catalog_Entries\000000000007 - C:\Program Files (x86)\Bonjour\mdnsNSP.dll File not found
O10 - Protocol_Catalog9\Catalog_Entries\000000000008 - C:\Program Files (x86)\Bonjour\mdnsNSP.dll File not found
O10 - Protocol_Catalog9\Catalog_Entries\000000000009 - C:\Program Files (x86)\Bonjour\mdnsNSP.dll File not found
O10 - Protocol_Catalog9\Catalog_Entries\000000000010 - C:\Program Files (x86)\Bonjour\mdnsNSP.dll File not found
O1364bit: - gopher Prefix: missing
O13 - gopher Prefix: missing
O16 - DPF: {8AD9C840-044E-11D1-B3E9-00805F499D93} http://java.sun.com/update/1.6.0/jinstall-…indows-i586.cab (Java Plug-in 1.6.0_21)
O16 - DPF: {CAFEEFAC-0016-0000-0021-ABCDEFFEDCBA} http://java.sun.com/update/1.6.0/jinstall-…indows-i586.cab (Java Plug-in 1.6.0_21)
O16 - DPF: {CAFEEFAC-FFFF-FFFF-FFFF-ABCDEFFEDCBA} http://java.sun.com/update/1.6.0/jinstall-…indows-i586.cab (Java Plug-in 1.6.0_21)
O16 - DPF: {E2883E8F-472F-4FB0-9522-AC9BF37916A7} http://platformdl.adobe.com/NOS/getPlusPlus/1.6/gp.cab (Reg Error: Key error.)
O17 - HKLM\System\CCS\Services\Tcpip\Parameters: DhcpNameServer = 192.168.1.254
O17 - HKLM\System\CCS\Services\Tcpip\Parameters\Interfaces\{51EC7F87-D233-4B48-8500-3CA3A5C44A22}: DhcpNameServer = 192.168.1.254
O18:64bit: - Protocol\Handler\linkscanner - No CLSID value found
O18 - Protocol\Handler\linkscanner {F274614C-63F8-47D5-A4D1-FBDDE494F8D1} - C:\Program Files (x86)\AVG\AVG8\avgpp.dll File not found
O20:64bit: - HKLM Winlogon: Shell - (explorer.exe) - C:\Windows\explorer.exe (Microsoft Corporation)
O20:64bit: - HKLM Winlogon: UserInit - (C:\Windows\system32\userinit.exe) - C:\Windows\SysNative\userinit.exe (Microsoft Corporation)
O20:64bit: - HKLM Winlogon: VMApplet - (SystemPropertiesPerformance.exe) - C:\Windows\SysNative\SystemPropertiesPerformance.exe (Microsoft Corporation)
O20:64bit: - HKLM Winlogon: VMApplet - (/pagefile) - File not found
O20 - HKLM Winlogon: Shell - (explorer.exe) -C:\Windows\SysWow64\explorer.exe (Microsoft Corporation)
O20 - HKLM Winlogon: UserInit - (userinit.exe) -C:\Windows\SysWow64\userinit.exe (Microsoft Corporation)
O20 - HKLM Winlogon: VMApplet - (/pagefile) - File not found
O21:64bit: - SSODL: WebCheck - {E6FB5E20-DE35-11CF-9C87-00AA005127ED} - No CLSID value found.
O21 - SSODL: WebCheck - {E6FB5E20-DE35-11CF-9C87-00AA005127ED} - No CLSID value found.
O32 - HKLM CDRom: AutoRun - 1
O33 - MountPoints2\{e6f9707d-adbc-11df-9379-001e90189972}\Shell - "" = AutoRun
O33 - MountPoints2\{e6f9707d-adbc-11df-9379-001e90189972}\Shell\AutoRun\command - "" = J:\Setup.exe
O34 - HKLM BootExecute: (autocheck autochk *)
O35:64bit: - HKLM\..comfile [open] – "%1" %*
O35:64bit: - HKLM\..exefile [open] – "%1" %*
O35 - HKLM\..comfile [open] – "%1" %*
O35 - HKLM\..exefile [open] – "%1" %*
O37:64bit: - HKLM\…com [@ = comfile] – "%1" %*
O37:64bit: - HKLM\…exe [@ = exefile] – "%1" %*
O37 - HKLM\…com [@ = comfile] – "%1" %*
O37 - HKLM\…exe [@ = exefile] – "%1" %*

NetSvcs:64bit: AppMgmt - C:\Windows\SysNative\appmgmts.dll (Microsoft Corporation)

Drivers32:64bit: msacm.l3acm - C:\Windows\System32\l3codeca.acm (Fraunhofer Institut Integrierte Schaltungen IIS)
Drivers32: msacm.l3acm - C:\Windows\SysWOW64\l3codeca.acm (Fraunhofer Institut Integrierte Schaltungen IIS)
Drivers32: vidc.cvid - C:\Windows\SysWow64\iccvid.dll (Radius Inc.)
Drivers32: vidc.VP60 - C:\Windows\SysWOW64\vp6vfw.dll (On2.com)
Drivers32: vidc.VP61 - C:\Windows\SysWOW64\vp6vfw.dll (On2.com)

CREATERESTOREPOINT
Error creating restore point.

========== Files/Folders - Created Within 30 Days ==========

[2011/10/09 12:04:47 | 000,582,656 | —- | C] (OldTimer Tools) – C:\Users\hamsandwich\Desktop\OTL.exe
[2011/10/09 11:48:32 | 000,000,000 | —D | C] – C:\Users\hamsandwich\Desktop\GooredFix Backups
[2011/10/09 11:46:34 | 001,558,320 | —- | C] (Kaspersky Lab ZAO) – C:\Users\hamsandwich\Desktop\TDSSKiller.exe
[2011/10/09 11:46:23 | 000,000,000 | —D | C] – C:\Users\hamsandwich\AppData\Roaming\WinRAR
[2011/10/08 11:15:38 | 000,000,000 | —D | C] – C:\Users\hamsandwich\AppData\Roaming\uTorrent
[2011/10/08 10:43:45 | 000,000,000 | —D | C] – C:\Users\hamsandwich\AppData\Roaming\Macromedia
[2011/10/08 10:31:20 | 000,000,000 | —D | C] – C:\Windows\pss
[2011/10/08 10:29:18 | 000,000,000 | —D | C] – C:\Users\hamsandwich\AppData\Roaming\Mozilla
[2011/10/07 15:24:11 | 000,000,000 | —D | C] – C:\Users\hamsandwich\AppData\Roaming\Adobe
[2011/10/05 18:13:20 | 000,000,000 | —D | C] – C:\ProgramData\WSTB
[2011/10/05 17:04:04 | 000,000,000 | —D | C] – C:\Windows\system64
[2011/09/24 22:35:05 | 000,000,000 | —D | C] – C:\Program Files (x86)\NVIDIA Corporation
[2011/09/24 13:51:23 | 000,000,000 | —D | C] – C:\Program Files (x86)\2K Games
[2011/09/21 10:22:55 | 000,000,000 | —D | C] – C:\ProgramData\ATI
[2011/09/21 10:22:22 | 000,000,000 | —D | C] – C:\Program Files (x86)\AMD APP
[2011/09/21 10:22:07 | 000,000,000 | —D | C] – C:\ProgramData\Microsoft\Windows\Start Menu\Programs\AMD VISION Engine Control Center
[4 C:\Windows\SysWow64\*.tmp files -> C:\Windows\SysWow64\*.tmp -> ]
[2 C:\Windows\*.tmp files -> C:\Windows\*.tmp -> ]

========== Files - Modified Within 30 Days ==========

[2011/10/09 12:24:27 | 003,042,304 | —- | M] () – C:\Windows\SysWow64\YZZ9hhCeelBrPNx.exe
[2011/10/09 12:24:27 | 003,042,304 | —- | M] () – C:\Windows\SysWow64\UmGGsQQJdEKfZhw.exe
[2011/10/09 12:24:18 | 003,042,304 | —- | M] () – C:\Windows\SysWow64\SJ66dWK8fR9TXjU.exe
[2011/10/09 12:24:01 | 003,042,304 | —- | M] () – C:\Windows\SysWow64\WmHH6ssJ7.exe
[2011/10/09 12:23:57 | 003,042,304 | —- | M] () – C:\Windows\SysWow64\S1DFaHsJdL.exe
[2011/10/09 12:23:50 | 003,042,304 | —- | M] () – C:\Windows\SysWow64\T0SpaH6sK7fE.exe
[2011/10/09 12:23:48 | 003,042,304 | —- | M] () – C:\Windows\SysWow64\rv2b4m5JdKfZ.exe
[2011/10/09 12:23:44 | 003,042,304 | —- | M] () – C:\Windows\SysWow64\qIBBrzPNuvSo3m5.exe
[2011/10/09 12:23:36 | 003,042,304 | —- | M] () – C:\Windows\SysWow64\tiDpGaHsKf.exe
[2011/10/09 12:23:31 | 003,042,304 | —- | M] () – C:\Windows\SysWow64\U3334aQsWK7.exe
[2011/10/09 12:23:24 | 003,042,304 | —- | M] () – C:\Windows\SysWow64\NBBttzNycD2.exe
[2011/10/09 12:23:13 | 003,042,304 | —- | M] () – C:\Windows\SysWow64\sA44pm7dEK8gZ9V.exe
[2011/10/09 12:23:05 | 003,042,304 | —- | M] () – C:\Windows\SysWow64\vUCCeekIxv2ibpn.exe
[2011/10/09 12:22:59 | 003,042,304 | —- | M] () – C:\Windows\SysWow64\Qtzzi2nmsQJdEgZ.exe
[2011/10/09 12:22:59 | 003,042,304 | —- | M] () – C:\Windows\SysWow64\oW7EgZhXkVOz0yA.exe
[2011/10/09 12:22:51 | 003,042,304 | —- | M] () – C:\Windows\SysWow64\WyAv2Fm5Q6W8R9T.exe
[2011/10/09 12:22:36 | 003,042,304 | —- | M] () – C:\Windows\SysWow64\qQdKhqzA357R.exe
[2011/10/09 12:22:28 | 003,042,304 | —- | M] () – C:\Windows\SysWow64\RGG46sWJ7TqYwUV.exe
[2011/10/09 12:22:18 | 003,042,304 | —- | M] () – C:\Windows\SysWow64\VXjeIrOtAuSi3n4.exe
[2011/10/09 12:22:18 | 003,042,304 | —- | M] () – C:\Windows\SysWow64\VCCwkIIrlONuSib.exe
[2011/10/09 12:22:17 | 003,042,304 | —- | M] () – C:\Windows\SysWow64\kBzNx0v2b3n.exe
[2011/10/09 12:22:07 | 003,042,304 | —- | M] () – C:\Windows\SysWow64\x3n5QdKfLgXYeIr.exe
[2011/10/09 12:22:03 | 003,042,304 | —- | M] () – C:\Windows\SysWow64\o79qertcbnQWLgZ.exe
[2011/10/09 12:21:57 | 003,042,304 | —- | M] () – C:\Windows\SysWow64\tfffRZ9jUCeIBzP.exe
[2011/10/09 12:21:57 | 003,042,304 | —- | M] () – C:\Windows\SysWow64\PjjjUCCekIBNAuS.exe
[2011/10/09 12:21:55 | 003,042,304 | —- | M] () – C:\Windows\SysWow64\ic1tPc1v2F.exe
[2011/10/09 12:21:47 | 003,042,304 | —- | M] () – C:\Windows\SysWow64\pllIIyxAA1vS2b3.exe
[2011/10/09 12:21:47 | 003,042,304 | —- | M] () – C:\Windows\SysWow6LS\x00\x00\x00\x00
Post #2
Hi JDNichols,

:welcome:

My name is Tomk. I would be glad to take a look at your log and help you with solving any malware problems. Logs can take a while to research, so please be patient and I'd be grateful if you would note the following:

  • I will be working on your Malware issues, this may or may not, solve other issues you have with your machine.
  • The fixes are specific to your problem and should only be used for the issues on this machine.
  • Please continue to review my answers until I tell you your machine appears to be clear. Absence of symptoms does not mean that everything is clear.
  • It's often worth reading through these instructions and printing them for ease of reference.
  • If you don't know or understand something, please don't hesitate to say or ask!! It's better to be sure and safe than sorry.
  • Please reply to this thread. Do not start a new topic.

Yeppers… some "garbage" has ahold of you.

Download ComboFix from one of these locations:

Link 1
Link 2

* IMPORTANT !!! Save ComboFix.exe to your Desktop


  • Disable your AntiVirus and AntiSpyware applications, usually via a right click on the System Tray icon. They may otherwise interfere with our tools. If you have difficulty properly disabling your protective programs, refer to this link –> http://forums.whatthetech.com/How_Disable_…ams_t96260.html

  • Double click on ComboFix.exe & follow the prompts.

  • As part of it's process, ComboFix will check to see if the Microsoft Windows Recovery Console is installed. With malware infections being as they are today, it's strongly recommended to have this pre-installed on your machine before doing any malware removal. It will allow you to boot up into a special recovery/repair mode that will allow us to more easily help you should your computer have a problem after an attempted removal of malware.

  • Follow the prompts to allow ComboFix to download and install the Microsoft Windows Recovery Console, and when prompted, agree to the End-User License Agreement to install the Microsoft Windows Recovery Console.

**Please note: If the Microsoft Windows Recovery Console is already installed, ComboFix will continue it's malware removal procedures.


[external image: Posted Image]



Once the Microsoft Windows Recovery Console is installed using ComboFix, you should see the following message:

[external image: Posted Image]


Click on Yes, to continue scanning for malware.

When finished, it shall produce a log for you. Please include the C:\ComboFix.txt in your next reply.


Notes:

1. Do not mouse-click Combofix's window while it is running. That may cause it to stall.
2. Do not "re-run" Combofix. If you have a problem, reply back for further instructions.
3. ComboFix may reset a number of Internet Explorer's settings, including making I-E the default browser.
4. Combofix prevents autorun of ALL CD, floppy and USB devices to assist with malware removal & increase security. If this is an issue or makes it difficult for you – please tell your helper.
5. CF disconnects your machine from the internet. The connection is automatically restored before CF completes its run. If CF runs into difficulty and terminates prematurely, the connection can be manually restored by restarting your machine.

Ask AI

AI can make mistakes. Check the cited posts. Archived advice can be out-of-date

Don't include personal information. Questions and selected public posts go to OpenAI. About Ask AI