Trojan Horse Generic.xfv/xks Clicker.fr Downloader.Agent.FBD

My AVG Free Addition has located some Trojan Horses and I have no idea how to get rid of them.

Any help is appreciated…thanks!

Here is my HijackThis log:

Logfile of HijackThis v1.99.1
Scan saved at 12:35:59 PM, on 9/11/2006
Platform: Windows XP SP1 (WinNT 5.01.2600)
MSIE: Internet Explorer v6.00 SP1 (6.00.2800.1106)

Running processes:
C:\WINDOWS\System32\smss.exe
C:\WINDOWS\system32\winlogon.exe
C:\WINDOWS\system32\services.exe
C:\WINDOWS\system32\lsass.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\System32\svchost.exe
C:\WINDOWS\Explorer.EXE
C:\WINDOWS\system32\spoolsv.exe
C:\WINDOWS\System32\hkcmd.exe
C:\WINDOWS\BCMSMMSG.exe
C:\Program Files\Common Files\Real\Update_OB\realsched.exe
C:\Program Files\Google\Gmail Notifier\G001-1.0.25.0\gnotify.exe
C:\PROGRA~1\Grisoft\AVGFRE~1\avgcc.exe
C:\PROGRA~1\Grisoft\AVGFRE~1\avgemc.exe
C:\Program Files\Roxio\Easy CD Creator 5\DirectCD\DirectCD.exe
C:\Program Files\iTunes\iTunesHelper.exe
C:\Program Files\QuickTime\qttask.exe
C:\Program Files\Support.com\bin\tgcmd.exe
C:\Program Files\FinePixViewer\QuickDCF.exe
C:\PROGRA~1\Grisoft\AVGFRE~1\avgamsvr.exe
C:\PROGRA~1\Grisoft\AVGFRE~1\avgupsvc.exe
C:\WINDOWS\System32\svchost.exe
C:\Program Files\Internet Explorer\iexplore.exe
C:\Program Files\iPod\bin\iPodService.exe
C:\WINDOWS\System32\wuauclt.exe
C:\Program Files\Internet Explorer\iexplore.exe
C:\Program Files\Internet Explorer\iexplore.exe
C:\HijackThis\HijackThis.exe

R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = http://google.com
R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = http://google.com
R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Window Title = Microsoft Internet Explorer presented by Comcast
R1 - HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings,ProxyServer = :0
R3 - Default URLSearchHook is missing
O2 - BHO: Google Toolbar Helper - {AA58ED58-01DD-4d91-8333-CF10577473F7} - c:\program files\google\googletoolbar1.dll
O3 - Toolbar: &Radio - {8E718888-423F-11D2-876E-00A0C9082467} - C:\WINDOWS\System32\msdxm.ocx
O3 - Toolbar: &Google - {2318C2B1-4965-11d4-9B18-009027A5CD4F} - c:\program files\google\googletoolbar1.dll
O4 - HKLM\..\Run: [IgfxTray] C:\WINDOWS\System32\igfxtray.exe
O4 - HKLM\..\Run: [HotKeysCmds] C:\WINDOWS\System32\hkcmd.exe
O4 - HKLM\..\Run: [BCMSMMSG] BCMSMMSG.exe
O4 - HKLM\..\Run: [TkBellExe] "C:\Program Files\Common Files\Real\Update_OB\realsched.exe" -osboot
O4 - HKLM\..\Run: [{0228e555-4f9c-4e35-a3ec-b109a192b4c2}] C:\Program Files\Google\Gmail Notifier\G001-1.0.25.0\gnotify.exe
O4 - HKLM\..\Run: [AVG7_CC] C:\PROGRA~1\Grisoft\AVGFRE~1\avgcc.exe /STARTUP
O4 - HKLM\..\Run: [AVG7_EMC] C:\PROGRA~1\Grisoft\AVGFRE~1\avgemc.exe
O4 - HKLM\..\Run: [AdaptecDirectCD] C:\Program Files\Roxio\Easy CD Creator 5\DirectCD\DirectCD.exe
O4 - HKLM\..\Run: [iTunesHelper] "C:\Program Files\iTunes\iTunesHelper.exe"
O4 - HKLM\..\Run: [QuickTime Task] "C:\Program Files\QuickTime\qttask.exe" -atboottime
O4 - HKLM\..\Run: [tgcmd] C:\Program Files\Support.com\bin\tgcmd.exe /server /startmonitor /deaf
O4 - HKLM\..\Run: [REGSHAVE] C:\Program Files\REGSHAVE\REGSHAVE.EXE /AUTORUN
O4 - HKLM\..\Run: [nygbe.exe] C:\WINDOWS\System32\nygbe.exe
O4 - HKCU\..\Run: [MsnMsgr] "C:\Program Files\MSN Messenger\MsnMsgr.Exe" /background
O4 - Global Startup: Adobe Reader Speed Launch.lnk = C:\Program Files\Adobe\Acrobat 7.0\Reader\reader_sl.exe
O4 - Global Startup: Exif Launcher.lnk = ?
O8 - Extra context menu item: &Google Search - res://c:\program files\google\GoogleToolbar1.dll/cmsearch.html
O8 - Extra context menu item: &Translate English Word - res://c:\program files\google\GoogleToolbar1.dll/cmwordtrans.html
O8 - Extra context menu item: Backward Links - res://c:\program files\google\GoogleToolbar1.dll/cmbacklinks.html
O8 - Extra context menu item: Cached Snapshot of Page - res://c:\program files\google\GoogleToolbar1.dll/cmcache.html
O8 - Extra context menu item: E&xport to Microsoft Excel - res://C:\PROGRA~1\MICROS~2\OFFICE11\EXCEL.EXE/3000
O8 - Extra context menu item: Similar Pages - res://c:\program files\google\GoogleToolbar1.dll/cmsimilar.html
O8 - Extra context menu item: Translate Page into English - res://c:\program files\google\GoogleToolbar1.dll/cmtrans.html
O9 - Extra button: Research - {92780B25-18CC-41C8-B9BE-3C9C571A8263} - C:\PROGRA~1\MICROS~2\OFFICE11\REFIEBAR.DLL
O9 - Extra button: Real.com - {CD67F990-D8E9-11d2-98FE-00C0F0318AFE} - C:\WINDOWS\System32\shdocvw.dll
O9 - Extra button: Microsoft AntiSpyware helper - {226DA26B-68D9-4930-A6E1-1D659C7A54AB} - (no file) (HKCU)
O9 - Extra 'Tools' menuitem: Microsoft AntiSpyware helper - {226DA26B-68D9-4930-A6E1-1D659C7A54AB} - (no file) (HKCU)
O12 - Plugin for .mid: C:\Program Files\Internet Explorer\PLUGINS\npqtplugin2.dll
O12 - Plugin for .wav: C:\Program Files\Internet Explorer\PLUGINS\npqtplugin2.dll
O16 - DPF: ppctlcab - http://www.pestscan.com/scanner/ppctlcab.cab
O16 - DPF: Yahoo! Literati - http://download.games.yahoo.com/games/clients/y/tt3_x.cab
O16 - DPF: {1239CC52-59EF-4DFA-8C61-90FFA846DF7E} (Musicnotes Viewer) - http://www.musicnotes.com/download/mnviewer.cab
O16 - DPF: {2FC9A21E-2069-4E47-8235-36318989DB13} - http://www.pestscan.com/scanner/axscanner.cab
O16 - DPF: {62475759-9E84-458E-A1AB-5D2C442ADFDE} - http://a1540.g.akamai.net/7/1540/52/200404…meInstaller.exe
O16 - DPF: {74D05D43-3236-11D4-BDCD-00C04F9A3B61} - http://a840.g.akamai.net/7/840/537/2004061…all/xscan53.cab
O16 - DPF: {A8683C98-5341-421B-B23C-8514C05354F1} (FujifilmUploader Class) - http://photo.walmart.com/photo/uploads/Fuj…ploadClient.cab
O17 - HKLM\System\CCS\Services\Tcpip\..\{C8227739-23DC-4A46-B902-599390D67C93}: NameServer = 85.255.115.69,85.255.112.128
O17 - HKLM\System\CS1\Services\Tcpip\Parameters: NameServer = 85.255.115.69 85.255.112.128
O17 - HKLM\System\CS1\Services\Tcpip\..\{61820C7F-1F2D-4EC6-AC52-4AA4C5CE956B}: NameServer = 85.255.115.69,85.255.112.128
O17 - HKLM\System\CS2\Services\Tcpip\Parameters: NameServer = 85.255.115.69 85.255.112.128
O17 - HKLM\System\CCS\Services\Tcpip\Parameters: NameServer = 85.255.115.69 85.255.112.128
O20 - Winlogon Notify: igfxcui - C:\WINDOWS\SYSTEM32\igfxsrvc.dll
O23 - Service: AVG7 Alert Manager Server (Avg7Alrt) - GRISOFT, s.r.o. - C:\PROGRA~1\Grisoft\AVGFRE~1\avgamsvr.exe
O23 - Service: AVG7 Update Service (Avg7UpdSvc) - GRISOFT, s.r.o. - C:\PROGRA~1\Grisoft\AVGFRE~1\avgupsvc.exe
O23 - Service: InstallDriver Table Manager (IDriverT) - Macrovision Corporation - C:\Program Files\Common Files\InstallShield\Driver\11\Intel 32\IDriverT.exe
O23 - Service: iPodService - Apple Computer, Inc. - C:\Program Files\iPod\bin\iPodService.exe
O23 - Service: McAfee.com McShield (McShield) - Unknown owner - c:\PROGRA~1\mcafee.com\vso\mcshield.exe
O23 - Service: McAfee.com VirusScan Online Realtime Engine (MCVSRte) - Mcafee.com Corporation - c:\PROGRA~1\mcafee.com\vso\mcvsrte.exe

Thanks Micah!

Logfile of HijackThis v1.99.1
Scan saved at 4:45:35 PM, on 9/11/2006
Platform: Windows XP SP1 (WinNT 5.01.2600)
MSIE: Internet Explorer v6.00 SP1 (6.00.2800.1106)

Running processes:
C:\WINDOWS\System32\smss.exe
C:\WINDOWS\system32\winlogon.exe
C:\WINDOWS\system32\services.exe
C:\WINDOWS\system32\lsass.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\System32\svchost.exe
C:\WINDOWS\Explorer.EXE
C:\WINDOWS\system32\spoolsv.exe
C:\PROGRA~1\Grisoft\AVGFRE~1\avgamsvr.exe
C:\PROGRA~1\Grisoft\AVGFRE~1\avgupsvc.exe
C:\WINDOWS\System32\svchost.exe
C:\WINDOWS\System32\wuauclt.exe
C:\WINDOWS\System32\hkcmd.exe
C:\WINDOWS\BCMSMMSG.exe
C:\Program Files\Common Files\Real\Update_OB\realsched.exe
C:\Program Files\Google\Gmail Notifier\G001-1.0.25.0\gnotify.exe
C:\PROGRA~1\Grisoft\AVGFRE~1\avgcc.exe
C:\PROGRA~1\Grisoft\AVGFRE~1\avgemc.exe
C:\WINDOWS\System32\wuauclt.exe
C:\Program Files\Roxio\Easy CD Creator 5\DirectCD\DirectCD.exe
C:\Program Files\iTunes\iTunesHelper.exe
C:\Program Files\QuickTime\qttask.exe
C:\Program Files\iPod\bin\iPodService.exe
C:\Program Files\Support.com\bin\tgcmd.exe
C:\Program Files\Adobe\Acrobat 7.0\Reader\reader_sl.exe
C:\Program Files\FinePixViewer\QuickDCF.exe
C:\HijackThis\HijackThis.exe

R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = http://google.com
R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Window Title = Microsoft Internet Explorer presented by Comcast
O2 - BHO: Google Toolbar Helper - {AA58ED58-01DD-4d91-8333-CF10577473F7} - c:\program files\google\googletoolbar1.dll
O3 - Toolbar: &Radio - {8E718888-423F-11D2-876E-00A0C9082467} - C:\WINDOWS\System32\msdxm.ocx
O3 - Toolbar: &Google - {2318C2B1-4965-11d4-9B18-009027A5CD4F} - c:\program files\google\googletoolbar1.dll
O4 - HKLM\..\Run: [IgfxTray] C:\WINDOWS\System32\igfxtray.exe
O4 - HKLM\..\Run: [HotKeysCmds] C:\WINDOWS\System32\hkcmd.exe
O4 - HKLM\..\Run: [BCMSMMSG] BCMSMMSG.exe
O4 - HKLM\..\Run: [TkBellExe] "C:\Program Files\Common Files\Real\Update_OB\realsched.exe" -osboot
O4 - HKLM\..\Run: [{0228e555-4f9c-4e35-a3ec-b109a192b4c2}] C:\Program Files\Google\Gmail Notifier\G001-1.0.25.0\gnotify.exe
O4 - HKLM\..\Run: [AVG7_CC] C:\PROGRA~1\Grisoft\AVGFRE~1\avgcc.exe /STARTUP
O4 - HKLM\..\Run: [AVG7_EMC] C:\PROGRA~1\Grisoft\AVGFRE~1\avgemc.exe
O4 - HKLM\..\Run: [AdaptecDirectCD] C:\Program Files\Roxio\Easy CD Creator 5\DirectCD\DirectCD.exe
O4 - HKLM\..\Run: [iTunesHelper] "C:\Program Files\iTunes\iTunesHelper.exe"
O4 - HKLM\..\Run: [QuickTime Task] "C:\Program Files\QuickTime\qttask.exe" -atboottime
O4 - HKLM\..\Run: [tgcmd] C:\Program Files\Support.com\bin\tgcmd.exe /server /startmonitor /deaf
O4 - HKLM\..\Run: [REGSHAVE] C:\Program Files\REGSHAVE\REGSHAVE.EXE /AUTORUN
O4 - HKCU\..\Run: [MsnMsgr] "C:\Program Files\MSN Messenger\MsnMsgr.Exe" /background
O4 - Global Startup: Adobe Reader Speed Launch.lnk = C:\Program Files\Adobe\Acrobat 7.0\Reader\reader_sl.exe
O4 - Global Startup: Exif Launcher.lnk = ?
O8 - Extra context menu item: &Google Search - res://c:\program files\google\GoogleToolbar1.dll/cmsearch.html
O8 - Extra context menu item: &Translate English Word - res://c:\program files\google\GoogleToolbar1.dll/cmwordtrans.html
O8 - Extra context menu item: Backward Links - res://c:\program files\google\GoogleToolbar1.dll/cmbacklinks.html
O8 - Extra context menu item: Cached Snapshot of Page - res://c:\program files\google\GoogleToolbar1.dll/cmcache.html
O8 - Extra context menu item: E&xport to Microsoft Excel - res://C:\PROGRA~1\MICROS~2\OFFICE11\EXCEL.EXE/3000
O8 - Extra context menu item: Similar Pages - res://c:\program files\google\GoogleToolbar1.dll/cmsimilar.html
O8 - Extra context menu item: Translate Page into English - res://c:\program files\google\GoogleToolbar1.dll/cmtrans.html
O9 - Extra button: Research - {92780B25-18CC-41C8-B9BE-3C9C571A8263} - C:\PROGRA~1\MICROS~2\OFFICE11\REFIEBAR.DLL
O9 - Extra button: Real.com - {CD67F990-D8E9-11d2-98FE-00C0F0318AFE} - C:\WINDOWS\System32\shdocvw.dll
O9 - Extra button: Microsoft AntiSpyware helper - {226DA26B-68D9-4930-A6E1-1D659C7A54AB} - (no file) (HKCU)
O9 - Extra 'Tools' menuitem: Microsoft AntiSpyware helper - {226DA26B-68D9-4930-A6E1-1D659C7A54AB} - (no file) (HKCU)
O12 - Plugin for .mid: C:\Program Files\Internet Explorer\PLUGINS\npqtplugin2.dll
O12 - Plugin for .wav: C:\Program Files\Internet Explorer\PLUGINS\npqtplugin2.dll
O16 - DPF: ppctlcab - http://www.pestscan.com/scanner/ppctlcab.cab
O16 - DPF: Yahoo! Literati - http://download.games.yahoo.com/games/clients/y/tt3_x.cab
O16 - DPF: {1239CC52-59EF-4DFA-8C61-90FFA846DF7E} (Musicnotes Viewer) - http://www.musicnotes.com/download/mnviewer.cab
O16 - DPF: {2FC9A21E-2069-4E47-8235-36318989DB13} - http://www.pestscan.com/scanner/axscanner.cab
O16 - DPF: {62475759-9E84-458E-A1AB-5D2C442ADFDE} - http://a1540.g.akamai.net/7/1540/52/200404…meInstaller.exe
O16 - DPF: {74D05D43-3236-11D4-BDCD-00C04F9A3B61} - http://a840.g.akamai.net/7/840/537/2004061…all/xscan53.cab
O16 - DPF: {A8683C98-5341-421B-B23C-8514C05354F1} (FujifilmUploader Class) - http://photo.walmart.com/photo/uploads/Fuj…ploadClient.cab
O20 - Winlogon Notify: igfxcui - C:\WINDOWS\SYSTEM32\igfxsrvc.dll
O23 - Service: AVG7 Alert Manager Server (Avg7Alrt) - GRISOFT, s.r.o. - C:\PROGRA~1\Grisoft\AVGFRE~1\avgamsvr.exe
O23 - Service: AVG7 Update Service (Avg7UpdSvc) - GRISOFT, s.r.o. - C:\PROGRA~1\Grisoft\AVGFRE~1\avgupsvc.exe
O23 - Service: InstallDriver Table Manager (IDriverT) - Macrovision Corporation - C:\Program Files\Common Files\InstallShield\Driver\11\Intel 32\IDriverT.exe
O23 - Service: iPodService - Apple Computer, Inc. - C:\Program Files\iPod\bin\iPodService.exe
O23 - Service: McAfee.com McShield (McShield) - Unknown owner - c:\PROGRA~1\mcafee.com\vso\mcshield.exe
O23 - Service: McAfee.com VirusScan Online Realtime Engine (MCVSRte) - Mcafee.com Corporation - c:\PROGRA~1\mcafee.com\vso\mcvsrte.exe



Here are the contents of the fixwareout:


Fixwareout ver 1.003
Last edited 8/11/2006
Post this report in the forums please

Reg Entries that were deleted
…

Microsoft ® Windows Script Host Version 5.6
Random Runs removed from HKLM
…

PLEASE NOTE, There WILL be LEGITIMATE FILES LISTED. IF YOU ARE UNSURE OF WHAT IT IS LEAVE THEM ALONE.

»»»»» Searching by size/names…

»»»»»
Search five digit cs, dm and jb files.
This WILL/CAN also list Legit Files, Submit them at Virustotal

Other suspects.
Directory of C:\WINDOWS\system32
{A2326CCA-0BA2-411E-A487-ED762676E04A}.exe
{D3097935-4AEF-43C6-8289-4DB6F354F47B}.exe
{A4ABD911-88F3-4688-A853-975959E45EC5}.exe
{6C59BB23-0E5D-4434-A1E1-917293E72B95}.exe
{6D594446-65FB-447B-BDC0-1E31B80B83C2}.exe
{72A4B75E-1621-46FC-B321-ADD8E515CE54}.exe
{AA19F64A-7830-4B50-93C7-B727BFF27FF0}.exe
{3A44E041-2F55-4802-8B79-8551124A7E52}.exe
{A1AFDCF2-2CD1-41C0-A526-4459F1053DB6}.exe
{3718A30A-3AEC-4D97-9F30-68F8EDA59026}.exe
{B97FED63-D0EE-4E13-8196-D11D14707003}.exe
{A6DB352D-FCDD-45F7-BECE-DB1435796366}.exe
{147CE388-D3BC-4428-AE5E-1FF044CAAE2B}.exe
{64A8F1C6-21CB-4FC1-8E2E-46EE153666F7}.exe
{E9554B51-0A97-4A83-83AA-D1FAB6D9BF5C}.exe
{B53BAF0D-A29C-43C9-ADCC-46613E34350F}.exe
{D205CF9A-7D07-47F9-AC70-3427656B218A}.exe
{6AF9419C-32A1-4869-8B6F-312630176968}.exe
{75458863-AE01-45C9-B274-0FFBAEAAE670}.exe
{2F0C79A1-9B27-4B35-B5F4-5A20DAE092F8}.exe
{BDAFFC34-0B2F-427E-86CA-0DA281140594}.exe
{5B36237A-8B77-4453-A293-768557496AD3}.exe
{ED0F5C3D-A519-425A-99EE-3ADD8B974EBC}.exe
{3EE9592A-55BF-474B-BE16-E432782B654B}.exe
{861693E8-AC5D-414A-A780-6C9BC8E9B3BC}.exe
{62097873-10DF-4481-8749-BC14070D948F}.exe
{7C651EE3-5495-4998-B122-D4C89E881304}.exe
{BDFE7729-C3F9-47C2-8BF0-05E91D775A11}.exe
{AE082ADC-91D7-4C74-BC34-AE4F56254945}.exe
{685D984E-39EB-430A-93FF-21F9F976E09B}.exe
{937A54AA-E3B7-4B27-9857-C45F7D0D118D}.exe
{DCACC769-A3F0-428D-9366-D2961A8A066D}.exe
{95E0D556-DD64-45DE-B9F4-B5AB323B15F8}.exe
{788BE86C-9F86-43CB-A69C-38E1A4183876}.exe
{023944B6-0451-4673-A2E3-39A5AC9A926A}.exe
{4EDDBEA2-2FBC-431D-914E-002865F8C728}.exe
{B52A09E5-C07B-4EDA-97F1-DFD5208FC22A}.exe
{4F52F1F3-90AA-4F9B-B7A8-C2617FD98A9A}.exe
{8DA69774-02B1-4105-84E3-B31A47B72693}.exe
{A887870F-CF85-4153-8CB7-3ED41F4DDF50}.exe
{174816D3-0012-4F08-9746-26009B7E7A8C}.exe
{38B1981D-6C1E-43A4-B9EC-514F7D4A62AC}.exe
{EB1E8E5B-B060-47D5-9EC8-C342CBAFE2E6}.exe
{C0AD2C24-231B-406D-B37D-E09F0B565A4D}.exe
{DCD36F07-A34E-4C0B-AF21-9E8D966BC228}.exe
{324100E4-9E9C-4133-B725-6A9226738735}.exe
{D9812605-240F-4A7B-B460-26546D581194}.exe
{3CB25183-4D89-499F-BA0D-7B69E7DA3C88}.exe
{F2871A65-D073-45ED-B02A-0BBE3650B4F3}.exe
{EC85192A-9A96-4649-AB3F-82D52E7A8A8D}.exe
{9D903912-53B5-46FF-9725-82835DFFCFE7}.exe
{0C82BA74-DFE3-4750-863F-791787BD87A2}.exe
{5ECE786C-4004-4839-B7FE-507BC3171771}.exe
{82DC4AFD-172E-496C-8A61-6F0E9F08C738}.exe
{F502CAC3-335D-4306-B888-7FBC49186169}.exe
{89FE5B87-D0B1-41AD-AA48-AB0D59FE1079}.exe
{CED9DC12-AF3C-4DE7-B090-EAF754E98E59}.exe
{921E69AE-BCA4-402C-B885-9E67D11C0D22}.exe
{0EC094D4-2A64-4E80-B379-ED6CB937C181}.exe
{0DB064BD-972A-4CCC-BB6F-4E6F48B43AC1}.exe
{4E8F9BF4-0ADC-4BE0-9206-323A353F9585}.exe
{79F589D7-9985-4044-A218-C4E93431BF25}.exe
{282B9AB2-D162-4335-812A-5059C58AF153}.exe
{92BB025C-A10B-4529-BBEE-12371D9227CD}.exe
{AABD7A91-A743-4567-96CF-08DFF0D6C964}.exe
{871DBF32-DEE4-4035-BC68-7F13B21E4F30}.exe
{C27BA4DC-2FC1-455E-B13C-059BF11757B9}.exe
{3369D9D1-613D-4393-BFEB-A65ADC5FAFA5}.exe
{D691919B-AD41-4367-A37B-CBC81F1CFA44}.exe
{04AB6F94-AC31-450E-B3EF-F7D7B72F93D4}.exe
{ADCA03C9-CB96-40FB-A11D-1E96C0C1AC25}.exe
{B2E81EE4-7502-40E0-B7B7-668850E4599E}.exe
{ED841FBA-31A7-484D-B09F-AD8642B51A44}.exe
{4CB16F6C-43ED-4400-B78A-77BE24EF785E}.exe
{2FE3D397-514B-4BAE-99E2-0E111AB952B0}.exe
{9A0F3EDE-605C-46E1-A904-DD44515EEC15}.exe
{362ACB80-0ACA-4035-8630-2C7D2E9FFEE6}.exe
{C093827B-D2D9-4C01-8523-03A700FF7190}.exe
{DBFB8D31-2CBE-407B-BEE7-8CA277F6F693}.exe
{E4ABAEF7-7FF8-4124-8BD0-2AD4189F9785}.exe
{95A8E27B-D9A2-44BB-9885-40164625D338}.exe
{09483EF3-EC60-49E7-8C18-D901A534802A}.exe
{B68C163C-E41F-4632-BDA0-F4544104D6C5}.exe
{8E5F4384-BB22-4245-BEE8-2C5D84E152F0}.exe
{B7DD50D8-6495-490F-926E-8526527BD34A}.exe
{86975F05-4B89-4DFE-A736-6C7A3A0275BE}.exe
{E411B4CF-F69C-476B-9A04-4E92A6615B67}.exe
{05C53CF9-DC01-4F32-847A-834EAA833A38}.exe
{37063C90-1DF8-4F9E-A9D5-8CE58CA68857}.exe
{4675614D-25A3-4130-9466-C240E5F49CBF}.exe
{381A7D9E-B346-48BD-ABE4-D5945CFE8743}.exe
{4CF92B2D-C425-4A81-8487-14B997C177DC}.exe
{A82DEB5E-AB2E-4144-ACA9-8C1C82B714CA}.exe
{C193029C-6B07-4F82-8CAF-D2D9D8E56FD8}.exe
{7873EA19-E8F2-4AFC-B4BA-283A5C925A19}.exe
{6DE6110E-1D7F-4AA0-903B-97337D4CDC8C}.exe
{E4627217-F199-4FE3-AA79-943E87E12ABB}.exe
{CD90697D-F86D-4379-9B81-92F6AF357DF6}.exe
{AD292BAA-0D1F-4EBE-A0ED-5685C381A417}.exe
{1D655C97-8B85-4418-9249-C8DD67051345}.exe
{F2A47563-9AA2-4CA7-AE28-769F5974E729}.exe
{ACB1C717-798A-4FC2-9F02-1A443B4A2FD4}.exe
{AD807D73-94CA-45D3-9253-B0A5CE715583}.exe
{61DC3C79-1652-459C-9268-770F5A1B1193}.exe
{E5440EBC-05CC-477E-AF6A-F23070D2C118}.exe
{92E9E791-ACAC-43D1-B53D-1A04E7922D3D}.exe
{69D1C918-F201-47F4-B1D8-F3178B1B11DC}.exe
{1195DDD1-6715-49DB-93E9-FD724072E0E7}.exe
{E09059A2-0B3B-4AE8-A68C-3893881CC248}.exe
{5800DF50-7742-466D-A1DC-F35275D00F65}.exe
{C5369D97-D329-49A8-B083-741BA9144646}.exe
{6E2968D5-79C2-42EA-8991-0B792C48B808}.exe
{FAE0841A-D2BF-4FD4-9435-A18E44C5A344}.exe
{E2DCC3A1-5829-4744-B047-7A8A92DA3A7A}.exe
{3EDA61B1-2942-4DE7-9929-FE7CAED6A53B}.exe
{E42B3CEC-1590-4008-B5D3-23E7CA0B57CA}.exe
{F4EDCA00-E25F-4165-8B7C-D9D92906A2FC}.exe
{87EDB6EC-AE5D-4B32-BC85-C08D05048568}.exe
{8ED0E054-3A00-4C0F-83B5-563C8C0F38F3}.exe
{278BFD70-3A69-46D9-B821-5B00949932A4}.exe
{E9306495-3C4D-4200-9A0C-77A3981FE465}.exe
{3D12F697-BE7A-4FB2-9720-A2E84740979C}.exe
{EBD9A6AA-2E3A-471A-A6B6-DBAA880696D8}.exe
{F361F58C-9F80-4912-A43F-B92200B747F1}.exe
{644200B0-81CC-40CD-B8DF-D2A2740952C4}.exe
{EE1D71D2-1F48-43A3-BD7F-7A63A05B1BFE}.exe
{3BA75ABD-D060-4618-8286-FB138F3A0582}.exe
{930E0F16-AB46-46BF-B832-0B43B2AA508D}.exe
{75A556AA-9E12-4E3A-BD12-408E0E043AED}.exe
{630F0D3F-74AA-4208-AE98-C150F5CB9330}.exe
{3A28B9B0-1C78-4727-8F3A-7C8A774486D0}.exe
{C1E73B89-27FC-4217-BD82-38FE5EA7182E}.exe
{D8B681FC-7708-47A9-8812-2BFB3F809707}.exe
{239C4739-8817-450C-B18C-BD003EBE2E68}.exe
{F7530B00-7126-46F5-AB02-9F46E44CA10A}.exe
{BE7069DB-AB33-4BF5-A4A5-55308B9BDF3E}.exe
{9BB50025-FC19-41A3-BEB4-B74952E61165}.exe
{569EB633-FEE4-450C-BAC8-47D7FC45C07F}.exe
{0A806DD7-470A-4DF1-BFA7-78524980305C}.exe
{D7264A74-3CDC-4BA4-93AE-7F556D00249E}.exe
{444DE268-359A-46FC-8D67-C4379D8BE46F}.exe
{A803735D-EAC3-4F90-A0CD-0C5EBA511099}.exe
{9958A766-B3E8-4399-A6BB-5B2747837F8E}.exe
{01EB0F97-7D7E-4B21-8385-1389EB8FA781}.exe
{D4142235-8363-4360-AB49-A79F9B0CD0B6}.exe
{96C4E97C-A1CC-490E-90CE-83AB34B7AB53}.exe
{93DCA7BA-6254-4176-A140-EF0D01D8A989}.exe
{452035D8-38B5-43F1-AA14-DC4B3AA54DAB}.exe
{9227137C-4DC6-4A69-88F9-EDF65A5BABC7}.exe
{F5A74FC2-2855-40DC-9EDC-318694D454CE}.exe
{80CB750B-D691-4AC0-996B-100EC2D945AE}.exe
{2E60679D-6642-4A8A-A782-889AA08AB5BA}.exe
{EDC2F94C-DBBA-484D-90BE-DC54AB58A81D}.exe
{BF5CFB33-0755-4FFD-B29D-BA3D0851FAFF}.exe
{49A317C1-4DCD-437E-87E6-C24123F3CB62}.exe
{B24340D8-B518-4DB6-882B-22B14E9DEB7C}.exe
{11C577B4-E68B-446B-8031-FC376DFFB2ED}.exe
{A9BE5F74-E3BC-405E-B16E-04B50E05119A}.exe
{0D0B1F35-1EE5-4F3B-BD17-0BBC7F352330}.exe
{84C33A8B-CFE3-40C5-96CD-406A3C042B3D}.exe
{DB15A167-A49A-4B88-8F05-9A2F2EAD3938}.exe
{64FDBA13-0C58-46BC-AA76-CA4A784CF64F}.exe
{1B32EE95-DC23-415E-B507-03FCC09C690F}.exe
{CAD0B475-47CB-4500-B025-AC27973BB6D4}.exe
{E9D02FA5-8FCB-476D-AC1F-57CF271B063F}.exe
{E098A15C-ED1A-4F65-9D2B-A9D664CA5270}.exe
{C48FD2BD-7E9B-408F-B6A4-E9543C2F6D43}.exe
{4E908248-40FF-4851-BA9F-55764874FFEC}.exe
{0B54205A-5923-42EA-A8D5-C2FF8AB34427}.exe
{AF849BA7-4413-4429-85AC-1BFCAC1A9D52}.exe
{DFA1F576-332D-47FB-9977-F4F6C75DD812}.exe
{AF5BA8BA-66BE-43E4-B6A9-CAD890AA6E57}.exe
{03698086-492E-497E-A48C-F930CC96786F}.exe
{BE0DDFB4-7F22-4E13-82C9-AC8140B62BCC}.exe
{90447168-3715-45F4-B560-88067654DFF7}.exe
{1C0294E9-D0BB-4B2C-A8CD-A351117DEDE1}.exe
{AD334F17-7EC0-47E7-AAFA-9EB9544ADDAF}.exe
{262905E6-A3CB-47A7-842A-9EF6F8DD4753}.exe
{CB363075-AC1B-4F69-9DAC-F606ADFDD395}.exe
{AD6AB6B7-965E-4BCB-AB30-A7170D221AA1}.exe
{EBD42CB0-4595-4731-81AE-A2447D262A7A}.exe
{223A3B92-5B96-4CD9-9848-59BBBA1A4BF6}.exe
{FBB7155D-6854-49DD-9154-0EAD82020CC6}.exe
{8A1E1B9A-E6CF-4D98-A030-F095E46DD9DB}.exe
{8E3B8160-96F4-4BB1-9BEA-CC3B51205832}.exe
{ED0DDC5C-5F8D-44E5-842B-C5BF867837B8}.exe
{55F03D22-7657-4919-A102-ACFCB2B24B08}.exe
{B050C811-89D6-4515-8815-6CB9A215CECC}.exe
{FB112EA9-AC49-43AA-AAE4-CC20DABF4A00}.exe
{2A0C8274-EA92-43DD-A86E-4A98A361D9B2}.exe
{DC65A893-F8C5-4C23-ABEC-9511A0D3F6FA}.exe
{09E1F3ED-C4D0-4105-BCED-AAA35804A81F}.exe
{B898AD86-98EF-4B30-8933-87E478B578B2}.exe
{B689DB08-4DE0-4E68-B922-D3228FE9F31E}.exe
{5F6DB3F5-759C-4FE9-AF38-5561C30D92F8}.exe
{B4E21D02-DC7A-45F5-8AD5-6D87DBB877F1}.exe
{B05A8723-FBF7-4B5F-9115-CC490F73E2C4}.exe
{A3B70444-26AD-4FD9-9F63-AC42471A025D}.exe
{412226E7-0AF6-4F2B-B851-48D48E7CF3DD}.exe
{70637903-FD72-4194-BC7E-35D221A59614}.exe
{8D8819ED-BFC5-4AC7-91E5-CF0A4A3BAC43}.exe
{609C1F9A-F44D-41C5-8C5B-AF7E927EA31C}.exe
{3D292CA6-8897-451E-A83B-6A1F5A581743}.exe
{A42F7AE7-E0F6-4C5B-9165-BCB6D08D6962}.exe
{B74AEC40-5D34-411B-89E4-E32548A7D8C0}.exe
{E59C10BB-E683-483F-9F84-0B2BA3791675}.exe
{38E06D28-FCA5-497F-87AB-5EF1F3ECCBD7}.exe
{2E5EB839-18BD-44E8-89AB-80266B7E74F4}.exe
{FACEA751-8172-4D57-A7B1-E5556496CFD1}.exe
{1F48C1AF-3BFC-4CFC-AF55-5700FB8C902D}.exe
{0E4E4D1C-8BC4-4E00-BC4A-177B7362A8D2}.exe
{0FF10CE2-5749-4766-8B94-78E65F2E8378}.exe
{A2088BCF-F9B8-49A5-A3AC-5585F19B19A2}.exe
{DFF5FFB5-9AB6-470C-AF62-77F6B24A440A}.exe
{67BECB65-0CF2-4B35-85E3-8AFAEB4073BC}.exe
{9AACD7AA-3290-421A-998A-0B8779082B06}.exe
{4D8AA0C2-0794-4556-922C-EE36810F2C2C}.exe
{9A33B7D8-58AB-402A-9480-58AB4CC191FE}.exe
{0AA5D46E-AEA1-48E2-A0E8-4AF3D95A2F8B}.exe
{85DA9DCB-7F3D-4165-BA49-A3D7D1E8C1D6}.exe
{303877DC-FD88-4CDA-B8DE-CF24AF11CD59}.exe
{F10D2BE4-2C9F-4083-97F9-9BCE195E7ED5}.exe
{485999BE-714D-46BC-B3D1-01D219DEB5F0}.exe
{DEA04950-46AC-4874-B23F-2F81DBD5AE9D}.exe
{A82CBF52-36BA-41AD-8889-0AFFDDBA8A6B}.exe
{F3B4FCFB-CB6A-4899-9357-C2CF63D994F9}.exe
{BB58ABA2-D547-4655-856C-BAD81EAF3E53}.exe
{014D73F7-2693-495F-88B8-6A26911B425B}.exe
{CC8C76CF-DEE0-42AE-A8F6-C38D7DDA54EA}.exe
{A85EEAC9-EA62-4A45-9403-D106DC80DC60}.exe
{9B88352D-E5CF-4C7F-A7D5-6D3C9E90A139}.exe
{EB363CE7-2549-4899-92CC-62C6316B3660}.exe
{771A541E-824F-46A3-BC0D-77A028D3ABE5}.exe
{CEC4B30D-F61B-48C7-AE51-F0E5B42DF9B3}.exe
{6AD9CB56-F87A-4C99-9308-F0A14520B5C8}.exe
{E3353EA4-10D5-42F4-9D33-DACBC856A734}.exe
{FD21C2D7-7126-4D3D-8F98-34E74610F991}.exe
{404B73B7-816B-45F3-A4EC-4D2C5D476F7B}.exe
{409F9399-2DAC-4484-9439-DE86269796DD}.exe
{83F26FAD-89C8-4911-8609-19750AD11F11}.exe
{ECD5271D-63E5-416C-AF54-63EB74A215DA}.exe
{380AEF25-7D21-4604-B3C7-36E8DEDD91EC}.exe
{B964357C-D34A-4FCB-8220-93573FC00621}.exe
{6101FFE7-FC41-4EA8-97EA-711C83AFF424}.exe
{AB37A3F5-C723-45DE-AC43-E5CBC5E0DFFD}.exe
{C9EBFD94-2421-4172-B7C2-801588700B1C}.exe
{11262FF8-CFAA-4D8C-AD1A-39CA6ECA26F7}.exe
{7105F3D7-8999-4FEB-818A-2D44B5419235}.exe
{B49CE084-E9FF-461B-9377-358E7296DF53}.exe
{31035B7D-80C8-453A-BE37-E5BE033F8636}.exe
{934C7B3C-3AAD-4BB5-B4C4-D645558A0BFA}.exe
{686B59FE-EEBB-4708-8907-DB7072B2154F}.exe
{97A35E29-CCDB-4E57-9F14-AE26BA0CFA94}.exe
{AB142B6E-8223-4248-9C1F-12F9CCAF4D84}.exe
{42C43643-BEED-4D13-BF08-B8D564BD610B}.exe
{E09F518B-9434-4C04-8B01-D35FC07C0B2A}.exe
{E4D0DB96-90D6-44D8-B180-566F6F3C8C9D}.exe
{BD6B0711-2795-4239-A12F-300293E528EC}.exe
{5A356619-6C95-47FF-9B2E-23D1C6E09BCE}.exe
{68485A05-A410-4F90-8FEC-F1228568DD2E}.exe
{4B806417-D927-43AD-AE38-7DCC701A8458}.exe
{CB3DD5B6-4063-4C37-97F6-45160651670C}.exe
{4A5529DA-DD9F-4763-888E-BEC00C106B38}.exe
{31643293-66C2-41CE-81DD-EB5204B15060}.exe
{92D685F0-3092-4930-8466-6B974F3EA370}.exe
{D477AC40-427D-4A5E-BE9D-B73FF41A3BE9}.exe
{215A957A-23DC-412F-9020-47C9B7CCD696}.exe
{78998A4C-0537-49C2-881A-A1961F4ED955}.exe
{DB7F1952-F8AB-44F3-900A-BB4B6561C692}.exe
{31334A16-C535-4886-82B6-CC03EF5215CE}.exe
{F7141591-0E71-4D85-9F66-6D2ABF7B62FA}.exe
{56AAB363-F961-4041-AF3A-1D9226B8393E}.exe
{6A9B2532-C2D6-4C28-B216-EDB2E110DF34}.exe
{FF5998C8-2C1D-44A0-897F-3855FF57E14C}.exe
{AF2AAAA6-ADE0-4416-966C-0B3CE9F9C63E}.exe
{237B9446-9BBD-4E93-B3A8-D254EE1C4F79}.exe
{234E74C2-A02D-4A11-B17E-BC6AB962C934}.exe
{8A6E200A-DF88-415A-9B5A-8397E61801FB}.exe
{94446670-5B73-4216-8000-BB2AF45CD575}.exe
{72A988A4-1CB5-4F5B-95D8-FBDD1E9BAD8A}.exe
{576B1735-45EF-45BD-8995-1834C34C24DB}.exe
{0063A54F-E521-4ABF-BE29-02D2C2102382}.exe
{660F930A-01F4-46ED-A2E8-5E0474608217}.exe
{4F94EB42-5D99-41C7-A500-83B88AE6EABA}.exe
{F78316EC-BDEC-4743-950B-B38A2E9CEDA5}.exe
{D466A3AC-60CA-4477-9159-9BE4AC9C8E9F}.exe
{43CF7BA5-CFD7-44AC-B04B-3C2C70E52503}.exe
{3B19E1A3-0E05-4AE7-A77A-58034CD50711}.exe
{B1460E8C-7C85-41CD-820F-7211B38C473E}.exe
{82A456B4-9CFD-4009-A13B-43380668B483}.exe
{7FFD6D43-864E-46AF-90D4-1C6BA9EE8C02}.exe
{5DED8698-D438-40D4-8E8F-2F9606034800}.exe
{174F1816-B587-43EA-B319-DAC697B5D98F}.exe
{280FA13D-C350-45AA-8DF6-3BDE050568D2}.exe
{4D19FDB0-9656-4DFD-AAF5-470218789EC3}.exe
{290B462D-B751-4591-972A-8BB8ACFC2414}.exe
{ADABBB2D-C0CC-494A-9136-29C586974568}.exe
{7276DD13-2FD1-4573-B172-49C1D8A9CE26}.exe
{9022A474-B415-414E-8431-35A66C6FD337}.exe
{B6C228B1-D992-4D52-AA8E-AFA8E51314CF}.exe
{A91986D9-109C-4C95-A37B-4F6F293CA3CE}.exe
{08FFFB5A-83AE-488F-AC9B-AB6FA744BFEF}.exe
{6E698958-E431-476D-83E0-EF87682A66F4}.exe
{22A72B5E-F337-49E7-B06D-C99F317B1591}.exe
{FBA79E85-7BFC-46CD-811C-86CFA210C676}.exe
{0152FD87-E51C-4656-A3E7-3331F1BEC51F}.exe
{1803146E-BA03-4AF9-BD4E-5726942ADA3E}.exe
{BCBFA6C9-A7A0-46EE-BC49-73EE9A6AF572}.exe
{C0431263-6723-49D0-BF63-401C848617D2}.exe
{6FAFBFEC-109C-43FD-A26B-CD640FA14CE4}.exe
{8BF58C2D-F416-4685-A985-D14EE2CD9A75}.exe
{62F3F453-8607-47BE-BBF7-38F476058109}.exe
{3F2B2358-7799-4B9F-B4D4-2B96386D785A}.exe
{40FD0432-B69D-42D6-9069-C9676A7FA4AA}.exe
{F3FFCE2C-E806-42F6-AB2E-61AECAFBF92A}.exe
{0643CE84-E867-4ADF-9C4A-E41D5D555D07}.exe
{86936617-49F3-4FD4-99C5-4D35BEF40FAD}.exe
{79CF3215-B924-47A6-ACC6-622F872733E9}.exe
{28D4494C-5E87-4E52-A052-CEDD99D8C5C1}.exe
{83CAE08A-49B3-49FC-9271-E9BF61DE99A8}.exe
{BCAC55F6-DB05-49A6-A306-A1EB6162628C}.exe
{75CD6F5F-3680-425E-A322-1E7B6D974B84}.exe
{D2FA55AA-68C5-4C56-82C0-D4D0B1E65AF8}.exe
{25AD580E-7014-429A-BEB2-A357745DB71C}.exe
{FB35E9C5-5655-4C5E-81A5-E025FE5417AA}.exe
{9A8E0BDE-AA88-46A0-8FA9-5FF9928FD64B}.exe
{211AFBDD-228F-4066-9BB8-A04BCB5BEC93}.exe
{0DDEB38F-5947-4A64-B2A0-6A93C33B8F13}.exe
{8360DE40-3283-4AE2-A29F-DFCE68369823}.exe
{A0A20D20-62A3-4BD7-9C75-5A592FCD34AC}.exe
{B25C7B2A-BE7F-435D-9D37-006D58603A9A}.exe
{B019ED19-BADE-48D8-8B02-0F50FC9197CE}.exe
{85021232-7662-4B82-8B02-6E27349892D3}.exe
{11167658-FBDA-4D2C-91F4-2405B3DD52D3}.exe
{5891C969-B467-42E0-B8C6-1CA6045BCAFC}.exe
{75573D1E-0353-4FD7-A54C-AFEED4880AA6}.exe
{379CD300-A2E7-4B8E-A4D9-6B825CFB88CE}.exe
{30DD0014-C2B4-49C5-9E39-48E8E0D3C08C}.exe
{1CADAEFA-ADF5-4FDD-A3F2-6823A25CEDD1}.exe
{CF13A0C4-6D75-4FA8-9348-C61EFBB437F4}.exe
{8A5BA4AF-58AF-41D1-A12A-9A51EA24AA37}.exe
{BCC2DDA5-312D-41BC-B693-9E2D4E717B62}.exe
{43468F64-2104-4783-A703-FCBE4E93A9AD}.exe
{081095CC-A786-4AA4-A8B4-C9750B9F99A4}.exe
{250D32A0-2564-445E-A978-292F4855AAB8}.exe
{4167CE14-5F63-488A-89DB-EE3C1763C12B}.exe
{9CDF4FAA-2ACA-4642-B608-A9EBD0FDCB0C}.exe
{1AB7BC10-1699-4878-8258-C848C1C2B96A}.exe
{CB817C34-9FC3-458A-ABA1-D7F829C77662}.exe
{6759763C-BED0-44D0-AA37-53A07B7E286D}.exe
{182BFB26-BD92-4F8E-B70A-0BF10E109A2D}.exe
{7AA5755D-55B0-4B58-909D-F9B855AD680B}.exe
{87BEC384-6F3B-4C76-9998-89026376CC3A}.exe
{946DD32B-79A4-42C7-9C32-49A50D5ADB60}.exe
{C0983F7C-5451-40B9-B06E-D1A5835DC47A}.exe
{9F2B7E21-39EC-47E2-89C6-80C364E5F0EC}.exe
{1887B566-9DEC-4B6B-B386-FC3C716B7D8E}.exe
{23020FFF-C2A1-4731-ADDD-1D5C80AA7429}.exe
{44CAFCA0-8CA3-425F-8D7B-ED8E99114624}.exe
{99DE0EBD-67F8-4F8B-9C65-B3A69FD0236C}.exe
{BCD778E5-7413-4542-8E01-1486E8885716}.exe
{82CCE5CC-66F6-40AD-BDBE-5DD1D7B1EAB5}.exe
{932ED7E3-81BE-457A-9204-F6E86028B78F}.exe
{BEA10217-3DF0-45D2-883D-A350D307D35F}.exe
{C441EF15-240D-4C3A-876D-BD5721F90A03}.exe
{4264C0EC-B101-44B0-9DC8-ACD64E64AEEC}.exe
{BDF4F6BC-EE1F-404A-BA38-504B350574F7}.exe
{CEB1476A-A610-4A9E-8F11-D6255A7027B7}.exe
{CEA6256D-2565-4A61-AA25-EEB90D4F0CEF}.exe
{A5C9E889-A37F-4046-89EA-4787E28EB770}.exe
{C761CF2C-9204-4E30-B1C7-B4C99616C88B}.exe
{4C3CA89B-ABDC-4774-847A-3279ED4BE35F}.exe
{3DA48A9F-6D44-40E1-8323-27FA095D8C13}.exe
{1D765F7B-5D11-4044-B6E3-666983ED777C}.exe
{F4E5CF59-F934-4E1C-ABBA-77C56F7FE0AF}.exe
{2275A499-CF63-4A68-B97D-070895AF1128}.exe
{2BDF866B-168F-45AB-9586-0D54518DBD15}.exe
{B0381994-C865-4C18-B1B3-3FF3E24A40F8}.exe
{4B2F2B2D-A6C1-4A99-9998-41018E569564}.exe
{1697679E-65FF-49AE-9981-10A9EEB45ECA}.exe
{B6951CCB-5CDD-45EB-B9D4-63E8625BCE12}.exe
{A39D9B29-9B26-49AC-9F63-9CD6544D8332}.exe
{3C9426F8-625C-43C3-B9EB-E87515CCE33F}.exe
{42F0837B-3CDC-47C3-B450-39835ECBBFC2}.exe
{D0DD3CB5-3895-4797-8C49-5E5572928B3C}.exe
{9E56385A-28E0-4BB5-A6FD-EC76835B2A65}.exe
{222BE08C-5519-4F7D-92BA-FE0F7874B12D}.exe

»»»»» Misc files.

»»»»» Checking for older varients covered by the Rem3 tool.

Copy the text in the following quote box into Notepad:

attrib -r -s -h C:\WINDOWS\system32\{A2326CCA-0BA2-411E-A487-ED762676E04A}.exe
attrib -r -s -h C:\WINDOWS\system32\{D3097935-4AEF-43C6-8289-4DB6F354F47B}.exe
attrib -r -s -h C:\WINDOWS\system32\{A4ABD911-88F3-4688-A853-975959E45EC5}.exe
attrib -r -s -h C:\WINDOWS\system32\{6C59BB23-0E5D-4434-A1E1-917293E72B95}.exe
attrib -r -s -h C:\WINDOWS\system32\{6D594446-65FB-447B-BDC0-1E31B80B83C2}.exe
attrib -r -s -h C:\WINDOWS\system32\{72A4B75E-1621-46FC-B321-ADD8E515CE54}.exe
attrib -r -s -h C:\WINDOWS\system32\{AA19F64A-7830-4B50-93C7-B727BFF27FF0}.exe
attrib -r -s -h C:\WINDOWS\system32\{3A44E041-2F55-4802-8B79-8551124A7E52}.exe
attrib -r -s -h C:\WINDOWS\system32\{A1AFDCF2-2CD1-41C0-A526-4459F1053DB6}.exe
attrib -r -s -h C:\WINDOWS\system32\{3718A30A-3AEC-4D97-9F30-68F8EDA59026}.exe
attrib -r -s -h C:\WINDOWS\system32\{B97FED63-D0EE-4E13-8196-D11D14707003}.exe
attrib -r -s -h C:\WINDOWS\system32\{A6DB352D-FCDD-45F7-BECE-DB1435796366}.exe
attrib -r -s -h C:\WINDOWS\system32\{147CE388-D3BC-4428-AE5E-1FF044CAAE2B}.exe
attrib -r -s -h C:\WINDOWS\system32\{64A8F1C6-21CB-4FC1-8E2E-46EE153666F7}.exe
attrib -r -s -h C:\WINDOWS\system32\{E9554B51-0A97-4A83-83AA-D1FAB6D9BF5C}.exe
attrib -r -s -h C:\WINDOWS\system32\{B53BAF0D-A29C-43C9-ADCC-46613E34350F}.exe
attrib -r -s -h C:\WINDOWS\system32\{D205CF9A-7D07-47F9-AC70-3427656B218A}.exe
attrib -r -s -h C:\WINDOWS\system32\{6AF9419C-32A1-4869-8B6F-312630176968}.exe
attrib -r -s -h C:\WINDOWS\system32\{75458863-AE01-45C9-B274-0FFBAEAAE670}.exe
attrib -r -s -h C:\WINDOWS\system32\{2F0C79A1-9B27-4B35-B5F4-5A20DAE092F8}.exe
attrib -r -s -h C:\WINDOWS\system32\{BDAFFC34-0B2F-427E-86CA-0DA281140594}.exe
attrib -r -s -h C:\WINDOWS\system32\{5B36237A-8B77-4453-A293-768557496AD3}.exe
attrib -r -s -h C:\WINDOWS\system32\{ED0F5C3D-A519-425A-99EE-3ADD8B974EBC}.exe
attrib -r -s -h C:\WINDOWS\system32\{3EE9592A-55BF-474B-BE16-E432782B654B}.exe
attrib -r -s -h C:\WINDOWS\system32\{861693E8-AC5D-414A-A780-6C9BC8E9B3BC}.exe
attrib -r -s -h C:\WINDOWS\system32\{62097873-10DF-4481-8749-BC14070D948F}.exe
attrib -r -s -h C:\WINDOWS\system32\{7C651EE3-5495-4998-B122-D4C89E881304}.exe
attrib -r -s -h C:\WINDOWS\system32\{BDFE7729-C3F9-47C2-8BF0-05E91D775A11}.exe
attrib -r -s -h C:\WINDOWS\system32\{AE082ADC-91D7-4C74-BC34-AE4F56254945}.exe
attrib -r -s -h C:\WINDOWS\system32\{685D984E-39EB-430A-93FF-21F9F976E09B}.exe
attrib -r -s -h C:\WINDOWS\system32\{937A54AA-E3B7-4B27-9857-C45F7D0D118D}.exe
attrib -r -s -h C:\WINDOWS\system32\{DCACC769-A3F0-428D-9366-D2961A8A066D}.exe
attrib -r -s -h C:\WINDOWS\system32\{95E0D556-DD64-45DE-B9F4-B5AB323B15F8}.exe
attrib -r -s -h C:\WINDOWS\system32\{788BE86C-9F86-43CB-A69C-38E1A4183876}.exe
attrib -r -s -h C:\WINDOWS\system32\{023944B6-0451-4673-A2E3-39A5AC9A926A}.exe
attrib -r -s -h C:\WINDOWS\system32\{4EDDBEA2-2FBC-431D-914E-002865F8C728}.exe
attrib -r -s -h C:\WINDOWS\system32\{B52A09E5-C07B-4EDA-97F1-DFD5208FC22A}.exe
attrib -r -s -h C:\WINDOWS\system32\{4F52F1F3-90AA-4F9B-B7A8-C2617FD98A9A}.exe
attrib -r -s -h C:\WINDOWS\system32\{8DA69774-02B1-4105-84E3-B31A47B72693}.exe
attrib -r -s -h C:\WINDOWS\system32\{A887870F-CF85-4153-8CB7-3ED41F4DDF50}.exe
attrib -r -s -h C:\WINDOWS\system32\{174816D3-0012-4F08-9746-26009B7E7A8C}.exe
attrib -r -s -h C:\WINDOWS\system32\{38B1981D-6C1E-43A4-B9EC-514F7D4A62AC}.exe
attrib -r -s -h C:\WINDOWS\system32\{EB1E8E5B-B060-47D5-9EC8-C342CBAFE2E6}.exe
attrib -r -s -h C:\WINDOWS\system32\{C0AD2C24-231B-406D-B37D-E09F0B565A4D}.exe
attrib -r -s -h C:\WINDOWS\system32\{DCD36F07-A34E-4C0B-AF21-9E8D966BC228}.exe
attrib -r -s -h C:\WINDOWS\system32\{324100E4-9E9C-4133-B725-6A9226738735}.exe
attrib -r -s -h C:\WINDOWS\system32\{D9812605-240F-4A7B-B460-26546D581194}.exe
attrib -r -s -h C:\WINDOWS\system32\{3CB25183-4D89-499F-BA0D-7B69E7DA3C88}.exe
attrib -r -s -h C:\WINDOWS\system32\{F2871A65-D073-45ED-B02A-0BBE3650B4F3}.exe
attrib -r -s -h C:\WINDOWS\system32\{EC85192A-9A96-4649-AB3F-82D52E7A8A8D}.exe
attrib -r -s -h C:\WINDOWS\system32\{9D903912-53B5-46FF-9725-82835DFFCFE7}.exe
attrib -r -s -h C:\WINDOWS\system32\{0C82BA74-DFE3-4750-863F-791787BD87A2}.exe
attrib -r -s -h C:\WINDOWS\system32\{5ECE786C-4004-4839-B7FE-507BC3171771}.exe
attrib -r -s -h C:\WINDOWS\system32\{82DC4AFD-172E-496C-8A61-6F0E9F08C738}.exe
attrib -r -s -h C:\WINDOWS\system32\{F502CAC3-335D-4306-B888-7FBC49186169}.exe
attrib -r -s -h C:\WINDOWS\system32\{89FE5B87-D0B1-41AD-AA48-AB0D59FE1079}.exe
attrib -r -s -h C:\WINDOWS\system32\{CED9DC12-AF3C-4DE7-B090-EAF754E98E59}.exe
attrib -r -s -h C:\WINDOWS\system32\{921E69AE-BCA4-402C-B885-9E67D11C0D22}.exe
attrib -r -s -h C:\WINDOWS\system32\{0EC094D4-2A64-4E80-B379-ED6CB937C181}.exe
attrib -r -s -h C:\WINDOWS\system32\{0DB064BD-972A-4CCC-BB6F-4E6F48B43AC1}.exe
attrib -r -s -h C:\WINDOWS\system32\{4E8F9BF4-0ADC-4BE0-9206-323A353F9585}.exe
attrib -r -s -h C:\WINDOWS\system32\{79F589D7-9985-4044-A218-C4E93431BF25}.exe
attrib -r -s -h C:\WINDOWS\system32\{282B9AB2-D162-4335-812A-5059C58AF153}.exe
attrib -r -s -h C:\WINDOWS\system32\{92BB025C-A10B-4529-BBEE-12371D9227CD}.exe
attrib -r -s -h C:\WINDOWS\system32\{AABD7A91-A743-4567-96CF-08DFF0D6C964}.exe
attrib -r -s -h C:\WINDOWS\system32\{871DBF32-DEE4-4035-BC68-7F13B21E4F30}.exe
attrib -r -s -h C:\WINDOWS\system32\{C27BA4DC-2FC1-455E-B13C-059BF11757B9}.exe
attrib -r -s -h C:\WINDOWS\system32\{3369D9D1-613D-4393-BFEB-A65ADC5FAFA5}.exe
attrib -r -s -h C:\WINDOWS\system32\{D691919B-AD41-4367-A37B-CBC81F1CFA44}.exe
attrib -r -s -h C:\WINDOWS\system32\{04AB6F94-AC31-450E-B3EF-F7D7B72F93D4}.exe
attrib -r -s -h C:\WINDOWS\system32\{ADCA03C9-CB96-40FB-A11D-1E96C0C1AC25}.exe
attrib -r -s -h C:\WINDOWS\system32\{B2E81EE4-7502-40E0-B7B7-668850E4599E}.exe
attrib -r -s -h C:\WINDOWS\system32\{ED841FBA-31A7-484D-B09F-AD8642B51A44}.exe
attrib -r -s -h C:\WINDOWS\system32\{4CB16F6C-43ED-4400-B78A-77BE24EF785E}.exe
attrib -r -s -h C:\WINDOWS\system32\{2FE3D397-514B-4BAE-99E2-0E111AB952B0}.exe
attrib -r -s -h C:\WINDOWS\system32\{9A0F3EDE-605C-46E1-A904-DD44515EEC15}.exe
attrib -r -s -h C:\WINDOWS\system32\{362ACB80-0ACA-4035-8630-2C7D2E9FFEE6}.exe
attrib -r -s -h C:\WINDOWS\system32\{C093827B-D2D9-4C01-8523-03A700FF7190}.exe
attrib -r -s -h C:\WINDOWS\system32\{DBFB8D31-2CBE-407B-BEE7-8CA277F6F693}.exe
attrib -r -s -h C:\WINDOWS\system32\{E4ABAEF7-7FF8-4124-8BD0-2AD4189F9785}.exe
attrib -r -s -h C:\WINDOWS\system32\{95A8E27B-D9A2-44BB-9885-40164625D338}.exe
attrib -r -s -h C:\WINDOWS\system32\{09483EF3-EC60-49E7-8C18-D901A534802A}.exe
attrib -r -s -h C:\WINDOWS\system32\{B68C163C-E41F-4632-BDA0-F4544104D6C5}.exe
attrib -r -s -h C:\WINDOWS\system32\{8E5F4384-BB22-4245-BEE8-2C5D84E152F0}.exe
attrib -r -s -h C:\WINDOWS\system32\{B7DD50D8-6495-490F-926E-8526527BD34A}.exe
attrib -r -s -h C:\WINDOWS\system32\{86975F05-4B89-4DFE-A736-6C7A3A0275BE}.exe
attrib -r -s -h C:\WINDOWS\system32\{E411B4CF-F69C-476B-9A04-4E92A6615B67}.exe
attrib -r -s -h C:\WINDOWS\system32\{05C53CF9-DC01-4F32-847A-834EAA833A38}.exe
attrib -r -s -h C:\WINDOWS\system32\{37063C90-1DF8-4F9E-A9D5-8CE58CA68857}.exe
attrib -r -s -h C:\WINDOWS\system32\{4675614D-25A3-4130-9466-C240E5F49CBF}.exe
attrib -r -s -h C:\WINDOWS\system32\{381A7D9E-B346-48BD-ABE4-D5945CFE8743}.exe
attrib -r -s -h C:\WINDOWS\system32\{4CF92B2D-C425-4A81-8487-14B997C177DC}.exe
attrib -r -s -h C:\WINDOWS\system32\{A82DEB5E-AB2E-4144-ACA9-8C1C82B714CA}.exe
attrib -r -s -h C:\WINDOWS\system32\{C193029C-6B07-4F82-8CAF-D2D9D8E56FD8}.exe
attrib -r -s -h C:\WINDOWS\system32\{7873EA19-E8F2-4AFC-B4BA-283A5C925A19}.exe
attrib -r -s -h C:\WINDOWS\system32\{6DE6110E-1D7F-4AA0-903B-97337D4CDC8C}.exe
attrib -r -s -h C:\WINDOWS\system32\{E4627217-F199-4FE3-AA79-943E87E12ABB}.exe
attrib -r -s -h C:\WINDOWS\system32\{CD90697D-F86D-4379-9B81-92F6AF357DF6}.exe
attrib -r -s -h C:\WINDOWS\system32\{AD292BAA-0D1F-4EBE-A0ED-5685C381A417}.exe
attrib -r -s -h C:\WINDOWS\system32\{1D655C97-8B85-4418-9249-C8DD67051345}.exe
attrib -r -s -h C:\WINDOWS\system32\{F2A47563-9AA2-4CA7-AE28-769F5974E729}.exe
attrib -r -s -h C:\WINDOWS\system32\{ACB1C717-798A-4FC2-9F02-1A443B4A2FD4}.exe
attrib -r -s -h C:\WINDOWS\system32\{AD807D73-94CA-45D3-9253-B0A5CE715583}.exe
attrib -r -s -h C:\WINDOWS\system32\{61DC3C79-1652-459C-9268-770F5A1B1193}.exe
attrib -r -s -h C:\WINDOWS\system32\{E5440EBC-05CC-477E-AF6A-F23070D2C118}.exe
attrib -r -s -h C:\WINDOWS\system32\{92E9E791-ACAC-43D1-B53D-1A04E7922D3D}.exe
attrib -r -s -h C:\WINDOWS\system32\{69D1C918-F201-47F4-B1D8-F3178B1B11DC}.exe
attrib -r -s -h C:\WINDOWS\system32\{1195DDD1-6715-49DB-93E9-FD724072E0E7}.exe
attrib -r -s -h C:\WINDOWS\system32\{E09059A2-0B3B-4AE8-A68C-3893881CC248}.exe
attrib -r -s -h C:\WINDOWS\system32\{5800DF50-7742-466D-A1DC-F35275D00F65}.exe
attrib -r -s -h C:\WINDOWS\system32\{C5369D97-D329-49A8-B083-741BA9144646}.exe
attrib -r -s -h C:\WINDOWS\system32\{6E2968D5-79C2-42EA-8991-0B792C48B808}.exe
attrib -r -s -h C:\WINDOWS\system32\{FAE0841A-D2BF-4FD4-9435-A18E44C5A344}.exe
attrib -r -s -h C:\WINDOWS\system32\{E2DCC3A1-5829-4744-B047-7A8A92DA3A7A}.exe
attrib -r -s -h C:\WINDOWS\system32\{3EDA61B1-2942-4DE7-9929-FE7CAED6A53B}.exe
attrib -r -s -h C:\WINDOWS\system32\{E42B3CEC-1590-4008-B5D3-23E7CA0B57CA}.exe
attrib -r -s -h C:\WINDOWS\system32\{F4EDCA00-E25F-4165-8B7C-D9D92906A2FC}.exe
attrib -r -s -h C:\WINDOWS\system32\{87EDB6EC-AE5D-4B32-BC85-C08D05048568}.exe
attrib -r -s -h C:\WINDOWS\system32\{8ED0E054-3A00-4C0F-83B5-563C8C0F38F3}.exe
attrib -r -s -h C:\WINDOWS\system32\{278BFD70-3A69-46D9-B821-5B00949932A4}.exe
attrib -r -s -h C:\WINDOWS\system32\{E9306495-3C4D-4200-9A0C-77A3981FE465}.exe
attrib -r -s -h C:\WINDOWS\system32\{3D12F697-BE7A-4FB2-9720-A2E84740979C}.exe
attrib -r -s -h C:\WINDOWS\system32\{EBD9A6AA-2E3A-471A-A6B6-DBAA880696D8}.exe
attrib -r -s -h C:\WINDOWS\system32\{F361F58C-9F80-4912-A43F-B92200B747F1}.exe
attrib -r -s -h C:\WINDOWS\system32\{644200B0-81CC-40CD-B8DF-D2A2740952C4}.exe
attrib -r -s -h C:\WINDOWS\system32\{EE1D71D2-1F48-43A3-BD7F-7A63A05B1BFE}.exe
attrib -r -s -h C:\WINDOWS\system32\{3BA75ABD-D060-4618-8286-FB138F3A0582}.exe
attrib -r -s -h C:\WINDOWS\system32\{930E0F16-AB46-46BF-B832-0B43B2AA508D}.exe
attrib -r -s -h C:\WINDOWS\system32\{75A556AA-9E12-4E3A-BD12-408E0E043AED}.exe
attrib -r -s -h C:\WINDOWS\system32\{630F0D3F-74AA-4208-AE98-C150F5CB9330}.exe
attrib -r -s -h C:\WINDOWS\system32\{3A28B9B0-1C78-4727-8F3A-7C8A774486D0}.exe
attrib -r -s -h C:\WINDOWS\system32\{C1E73B89-27FC-4217-BD82-38FE5EA7182E}.exe
attrib -r -s -h C:\WINDOWS\system32\{D8B681FC-7708-47A9-8812-2BFB3F809707}.exe
attrib -r -s -h C:\WINDOWS\system32\{239C4739-8817-450C-B18C-BD003EBE2E68}.exe
attrib -r -s -h C:\WINDOWS\system32\{F7530B00-7126-46F5-AB02-9F46E44CA10A}.exe
attrib -r -s -h C:\WINDOWS\system32\{BE7069DB-AB33-4BF5-A4A5-55308B9BDF3E}.exe
attrib -r -s -h C:\WINDOWS\system32\{9BB50025-FC19-41A3-BEB4-B74952E61165}.exe
attrib -r -s -h C:\WINDOWS\system32\{569EB633-FEE4-450C-BAC8-47D7FC45C07F}.exe
attrib -r -s -h C:\WINDOWS\system32\{0A806DD7-470A-4DF1-BFA7-78524980305C}.exe
attrib -r -s -h C:\WINDOWS\system32\{D7264A74-3CDC-4BA4-93AE-7F556D00249E}.exe
attrib -r -s -h C:\WINDOWS\system32\{444DE268-359A-46FC-8D67-C4379D8BE46F}.exe
attrib -r -s -h C:\WINDOWS\system32\{A803735D-EAC3-4F90-A0CD-0C5EBA511099}.exe
attrib -r -s -h C:\WINDOWS\system32\{9958A766-B3E8-4399-A6BB-5B2747837F8E}.exe
attrib -r -s -h C:\WINDOWS\system32\{01EB0F97-7D7E-4B21-8385-1389EB8FA781}.exe
attrib -r -s -h C:\WINDOWS\system32\{D4142235-8363-4360-AB49-A79F9B0CD0B6}.exe
attrib -r -s -h C:\WINDOWS\system32\{96C4E97C-A1CC-490E-90CE-83AB34B7AB53}.exe
attrib -r -s -h C:\WINDOWS\system32\{93DCA7BA-6254-4176-A140-EF0D01D8A989}.exe
attrib -r -s -h C:\WINDOWS\system32\{452035D8-38B5-43F1-AA14-DC4B3AA54DAB}.exe
attrib -r -s -h C:\WINDOWS\system32\{9227137C-4DC6-4A69-88F9-EDF65A5BABC7}.exe
attrib -r -s -h C:\WINDOWS\system32\{F5A74FC2-2855-40DC-9EDC-318694D454CE}.exe
attrib -r -s -h C:\WINDOWS\system32\{80CB750B-D691-4AC0-996B-100EC2D945AE}.exe
attrib -r -s -h C:\WINDOWS\system32\{2E60679D-6642-4A8A-A782-889AA08AB5BA}.exe
attrib -r -s -h C:\WINDOWS\system32\{EDC2F94C-DBBA-484D-90BE-DC54AB58A81D}.exe
attrib -r -s -h C:\WINDOWS\system32\{BF5CFB33-0755-4FFD-B29D-BA3D0851FAFF}.exe
attrib -r -s -h C:\WINDOWS\system32\{49A317C1-4DCD-437E-87E6-C24123F3CB62}.exe
attrib -r -s -h C:\WINDOWS\system32\{B24340D8-B518-4DB6-882B-22B14E9DEB7C}.exe
attrib -r -s -h C:\WINDOWS\system32\{11C577B4-E68B-446B-8031-FC376DFFB2ED}.exe
attrib -r -s -h C:\WINDOWS\system32\{A9BE5F74-E3BC-405E-B16E-04B50E05119A}.exe
attrib -r -s -h C:\WINDOWS\system32\{0D0B1F35-1EE5-4F3B-BD17-0BBC7F352330}.exe
attrib -r -s -h C:\WINDOWS\system32\{84C33A8B-CFE3-40C5-96CD-406A3C042B3D}.exe
attrib -r -s -h C:\WINDOWS\system32\{DB15A167-A49A-4B88-8F05-9A2F2EAD3938}.exe
attrib -r -s -h C:\WINDOWS\system32\{64FDBA13-0C58-46BC-AA76-CA4A784CF64F}.exe
attrib -r -s -h C:\WINDOWS\system32\{1B32EE95-DC23-415E-B507-03FCC09C690F}.exe
attrib -r -s -h C:\WINDOWS\system32\{CAD0B475-47CB-4500-B025-AC27973BB6D4}.exe
attrib -r -s -h C:\WINDOWS\system32\{E9D02FA5-8FCB-476D-AC1F-57CF271B063F}.exe
attrib -r -s -h C:\WINDOWS\system32\{E098A15C-ED1A-4F65-9D2B-A9D664CA5270}.exe
attrib -r -s -h C:\WINDOWS\system32\{C48FD2BD-7E9B-408F-B6A4-E9543C2F6D43}.exe
attrib -r -s -h C:\WINDOWS\system32\{4E908248-40FF-4851-BA9F-55764874FFEC}.exe
attrib -r -s -h C:\WINDOWS\system32\{0B54205A-5923-42EA-A8D5-C2FF8AB34427}.exe
attrib -r -s -h C:\WINDOWS\system32\{AF849BA7-4413-4429-85AC-1BFCAC1A9D52}.exe
attrib -r -s -h C:\WINDOWS\system32\{DFA1F576-332D-47FB-9977-F4F6C75DD812}.exe
attrib -r -s -h C:\WINDOWS\system32\{AF5BA8BA-66BE-43E4-B6A9-CAD890AA6E57}.exe
attrib -r -s -h C:\WINDOWS\system32\{03698086-492E-497E-A48C-F930CC96786F}.exe
attrib -r -s -h C:\WINDOWS\system32\{BE0DDFB4-7F22-4E13-82C9-AC8140B62BCC}.exe
attrib -r -s -h C:\WINDOWS\system32\{90447168-3715-45F4-B560-88067654DFF7}.exe
attrib -r -s -h C:\WINDOWS\system32\{1C0294E9-D0BB-4B2C-A8CD-A351117DEDE1}.exe
attrib -r -s -h C:\WINDOWS\system32\{AD334F17-7EC0-47E7-AAFA-9EB9544ADDAF}.exe
attrib -r -s -h C:\WINDOWS\system32\{262905E6-A3CB-47A7-842A-9EF6F8DD4753}.exe
attrib -r -s -h C:\WINDOWS\system32\{CB363075-AC1B-4F69-9DAC-F606ADFDD395}.exe
attrib -r -s -h C:\WINDOWS\system32\{AD6AB6B7-965E-4BCB-AB30-A7170D221AA1}.exe
attrib -r -s -h C:\WINDOWS\system32\{EBD42CB0-4595-4731-81AE-A2447D262A7A}.exe
attrib -r -s -h C:\WINDOWS\system32\{223A3B92-5B96-4CD9-9848-59BBBA1A4BF6}.exe
attrib -r -s -h C:\WINDOWS\system32\{FBB7155D-6854-49DD-9154-0EAD82020CC6}.exe
attrib -r -s -h C:\WINDOWS\system32\{8A1E1B9A-E6CF-4D98-A030-F095E46DD9DB}.exe
attrib -r -s -h C:\WINDOWS\system32\{8E3B8160-96F4-4BB1-9BEA-CC3B51205832}.exe
attrib -r -s -h C:\WINDOWS\system32\{ED0DDC5C-5F8D-44E5-842B-C5BF867837B8}.exe
attrib -r -s -h C:\WINDOWS\system32\{55F03D22-7657-4919-A102-ACFCB2B24B08}.exe
attrib -r -s -h C:\WINDOWS\system32\{B050C811-89D6-4515-8815-6CB9A215CECC}.exe
attrib -r -s -h C:\WINDOWS\system32\{FB112EA9-AC49-43AA-AAE4-CC20DABF4A00}.exe
attrib -r -s -h C:\WINDOWS\system32\{2A0C8274-EA92-43DD-A86E-4A98A361D9B2}.exe
attrib -r -s -h C:\WINDOWS\system32\{DC65A893-F8C5-4C23-ABEC-9511A0D3F6FA}.exe
attrib -r -s -h C:\WINDOWS\system32\{09E1F3ED-C4D0-4105-BCED-AAA35804A81F}.exe
attrib -r -s -h C:\WINDOWS\system32\{B898AD86-98EF-4B30-8933-87E478B578B2}.exe
attrib -r -s -h C:\WINDOWS\system32\{B689DB08-4DE0-4E68-B922-D3228FE9F31E}.exe
attrib -r -s -h C:\WINDOWS\system32\{5F6DB3F5-759C-4FE9-AF38-5561C30D92F8}.exe
attrib -r -s -h C:\WINDOWS\system32\{B4E21D02-DC7A-45F5-8AD5-6D87DBB877F1}.exe
attrib -r -s -h C:\WINDOWS\system32\{B05A8723-FBF7-4B5F-9115-CC490F73E2C4}.exe
attrib -r -s -h C:\WINDOWS\system32\{A3B70444-26AD-4FD9-9F63-AC42471A025D}.exe
attrib -r -s -h C:\WINDOWS\system32\{412226E7-0AF6-4F2B-B851-48D48E7CF3DD}.exe
attrib -r -s -h C:\WINDOWS\system32\{70637903-FD72-4194-BC7E-35D221A59614}.exe
attrib -r -s -h C:\WINDOWS\system32\{8D8819ED-BFC5-4AC7-91E5-CF0A4A3BAC43}.exe
attrib -r -s -h C:\WINDOWS\system32\{609C1F9A-F44D-41C5-8C5B-AF7E927EA31C}.exe
attrib -r -s -h C:\WINDOWS\system32\{3D292CA6-8897-451E-A83B-6A1F5A581743}.exe
attrib -r -s -h C:\WINDOWS\system32\{A42F7AE7-E0F6-4C5B-9165-BCB6D08D6962}.exe
attrib -r -s -h C:\WINDOWS\system32\{B74AEC40-5D34-411B-89E4-E32548A7D8C0}.exe
attrib -r -s -h C:\WINDOWS\system32\{E59C10BB-E683-483F-9F84-0B2BA3791675}.exe
attrib -r -s -h C:\WINDOWS\system32\{38E06D28-FCA5-497F-87AB-5EF1F3ECCBD7}.exe
attrib -r -s -h C:\WINDOWS\system32\{2E5EB839-18BD-44E8-89AB-80266B7E74F4}.exe
attrib -r -s -h C:\WINDOWS\system32\{FACEA751-8172-4D57-A7B1-E5556496CFD1}.exe
attrib -r -s -h C:\WINDOWS\system32\{1F48C1AF-3BFC-4CFC-AF55-5700FB8C902D}.exe
attrib -r -s -h C:\WINDOWS\system32\{0E4E4D1C-8BC4-4E00-BC4A-177B7362A8D2}.exe
attrib -r -s -h C:\WINDOWS\system32\{0FF10CE2-5749-4766-8B94-78E65F2E8378}.exe
attrib -r -s -h C:\WINDOWS\system32\{A2088BCF-F9B8-49A5-A3AC-5585F19B19A2}.exe
attrib -r -s -h C:\WINDOWS\system32\{DFF5FFB5-9AB6-470C-AF62-77F6B24A440A}.exe
attrib -r -s -h C:\WINDOWS\system32\{67BECB65-0CF2-4B35-85E3-8AFAEB4073BC}.exe
attrib -r -s -h C:\WINDOWS\system32\{9AACD7AA-3290-421A-998A-0B8779082B06}.exe
attrib -r -s -h C:\WINDOWS\system32\{4D8AA0C2-0794-4556-922C-EE36810F2C2C}.exe
attrib -r -s -h C:\WINDOWS\system32\{9A33B7D8-58AB-402A-9480-58AB4CC191FE}.exe
attrib -r -s -h C:\WINDOWS\system32\{0AA5D46E-AEA1-48E2-A0E8-4AF3D95A2F8B}.exe
attrib -r -s -h C:\WINDOWS\system32\{85DA9DCB-7F3D-4165-BA49-A3D7D1E8C1D6}.exe
attrib -r -s -h C:\WINDOWS\system32\{303877DC-FD88-4CDA-B8DE-CF24AF11CD59}.exe
attrib -r -s -h C:\WINDOWS\system32\{F10D2BE4-2C9F-4083-97F9-9BCE195E7ED5}.exe
attrib -r -s -h C:\WINDOWS\system32\{485999BE-714D-46BC-B3D1-01D219DEB5F0}.exe
attrib -r -s -h C:\WINDOWS\system32\{DEA04950-46AC-4874-B23F-2F81DBD5AE9D}.exe
attrib -r -s -h C:\WINDOWS\system32\{A82CBF52-36BA-41AD-8889-0AFFDDBA8A6B}.exe
attrib -r -s -h C:\WINDOWS\system32\{F3B4FCFB-CB6A-4899-9357-C2CF63D994F9}.exe
attrib -r -s -h C:\WINDOWS\system32\{BB58ABA2-D547-4655-856C-BAD81EAF3E53}.exe
attrib -r -s -h C:\WINDOWS\system32\{014D73F7-2693-495F-88B8-6A26911B425B}.exe
attrib -r -s -h C:\WINDOWS\system32\{CC8C76CF-DEE0-42AE-A8F6-C38D7DDA54EA}.exe
attrib -r -s -h C:\WINDOWS\system32\{A85EEAC9-EA62-4A45-9403-D106DC80DC60}.exe
attrib -r -s -h C:\WINDOWS\system32\{9B88352D-E5CF-4C7F-A7D5-6D3C9E90A139}.exe
attrib -r -s -h C:\WINDOWS\system32\{EB363CE7-2549-4899-92CC-62C6316B3660}.exe
attrib -r -s -h C:\WINDOWS\system32\{771A541E-824F-46A3-BC0D-77A028D3ABE5}.exe
attrib -r -s -h C:\WINDOWS\system32\{CEC4B30D-F61B-48C7-AE51-F0E5B42DF9B3}.exe
attrib -r -s -h C:\WINDOWS\system32\{6AD9CB56-F87A-4C99-9308-F0A14520B5C8}.exe
attrib -r -s -h C:\WINDOWS\system32\{E3353EA4-10D5-42F4-9D33-DACBC856A734}.exe
attrib -r -s -h C:\WINDOWS\system32\{FD21C2D7-7126-4D3D-8F98-34E74610F991}.exe
attrib -r -s -h C:\WINDOWS\system32\{404B73B7-816B-45F3-A4EC-4D2C5D476F7B}.exe
attrib -r -s -h C:\WINDOWS\system32\{409F9399-2DAC-4484-9439-DE86269796DD}.exe
attrib -r -s -h C:\WINDOWS\system32\{83F26FAD-89C8-4911-8609-19750AD11F11}.exe
attrib -r -s -h C:\WINDOWS\system32\{ECD5271D-63E5-416C-AF54-63EB74A215DA}.exe
attrib -r -s -h C:\WINDOWS\system32\{380AEF25-7D21-4604-B3C7-36E8DEDD91EC}.exe
attrib -r -s -h C:\WINDOWS\system32\{B964357C-D34A-4FCB-8220-93573FC00621}.exe
attrib -r -s -h C:\WINDOWS\system32\{6101FFE7-FC41-4EA8-97EA-711C83AFF424}.exe
attrib -r -s -h C:\WINDOWS\system32\{AB37A3F5-C723-45DE-AC43-E5CBC5E0DFFD}.exe
attrib -r -s -h C:\WINDOWS\system32\{C9EBFD94-2421-4172-B7C2-801588700B1C}.exe
attrib -r -s -h C:\WINDOWS\system32\{11262FF8-CFAA-4D8C-AD1A-39CA6ECA26F7}.exe
attrib -r -s -h C:\WINDOWS\system32\{7105F3D7-8999-4FEB-818A-2D44B5419235}.exe
attrib -r -s -h C:\WINDOWS\system32\{B49CE084-E9FF-461B-9377-358E7296DF53}.exe
attrib -r -s -h C:\WINDOWS\system32\{31035B7D-80C8-453A-BE37-E5BE033F8636}.exe
attrib -r -s -h C:\WINDOWS\system32\{934C7B3C-3AAD-4BB5-B4C4-D645558A0BFA}.exe
attrib -r -s -h C:\WINDOWS\system32\{686B59FE-EEBB-4708-8907-DB7072B2154F}.exe
attrib -r -s -h C:\WINDOWS\system32\{97A35E29-CCDB-4E57-9F14-AE26BA0CFA94}.exe
attrib -r -s -h C:\WINDOWS\system32\{AB142B6E-8223-4248-9C1F-12F9CCAF4D84}.exe
attrib -r -s -h C:\WINDOWS\system32\{42C43643-BEED-4D13-BF08-B8D564BD610B}.exe
attrib -r -s -h C:\WINDOWS\system32\{E09F518B-9434-4C04-8B01-D35FC07C0B2A}.exe
attrib -r -s -h C:\WINDOWS\system32\{E4D0DB96-90D6-44D8-B180-566F6F3C8C9D}.exe
attrib -r -s -h C:\WINDOWS\system32\{BD6B0711-2795-4239-A12F-300293E528EC}.exe
attrib -r -s -h C:\WINDOWS\system32\{5A356619-6C95-47FF-9B2E-23D1C6E09BCE}.exe
attrib -r -s -h C:\WINDOWS\system32\{68485A05-A410-4F90-8FEC-F1228568DD2E}.exe
attrib -r -s -h C:\WINDOWS\system32\{4B806417-D927-43AD-AE38-7DCC701A8458}.exe
attrib -r -s -h C:\WINDOWS\system32\{CB3DD5B6-4063-4C37-97F6-45160651670C}.exe
attrib -r -s -h C:\WINDOWS\system32\{4A5529DA-DD9F-4763-888E-BEC00C106B38}.exe
attrib -r -s -h C:\WINDOWS\system32\{31643293-66C2-41CE-81DD-EB5204B15060}.exe
attrib -r -s -h C:\WINDOWS\system32\{92D685F0-3092-4930-8466-6B974F3EA370}.exe
attrib -r -s -h C:\WINDOWS\system32\{D477AC40-427D-4A5E-BE9D-B73FF41A3BE9}.exe
attrib -r -s -h C:\WINDOWS\system32\{215A957A-23DC-412F-9020-47C9B7CCD696}.exe
attrib -r -s -h C:\WINDOWS\system32\{78998A4C-0537-49C2-881A-A1961F4ED955}.exe
attrib -r -s -h C:\WINDOWS\system32\{DB7F1952-F8AB-44F3-900A-BB4B6561C692}.exe
attrib -r -s -h C:\WINDOWS\system32\{31334A16-C535-4886-82B6-CC03EF5215CE}.exe
attrib -r -s -h C:\WINDOWS\system32\{F7141591-0E71-4D85-9F66-6D2ABF7B62FA}.exe
attrib -r -s -h C:\WINDOWS\system32\{56AAB363-F961-4041-AF3A-1D9226B8393E}.exe
attrib -r -s -h C:\WINDOWS\system32\{6A9B2532-C2D6-4C28-B216-EDB2E110DF34}.exe
attrib -r -s -h C:\WINDOWS\system32\{FF5998C8-2C1D-44A0-897F-3855FF57E14C}.exe
attrib -r -s -h C:\WINDOWS\system32\{AF2AAAA6-ADE0-4416-966C-0B3CE9F9C63E}.exe
attrib -r -s -h C:\WINDOWS\system32\{237B9446-9BBD-4E93-B3A8-D254EE1C4F79}.exe
attrib -r -s -h C:\WINDOWS\system32\{234E74C2-A02D-4A11-B17E-BC6AB962C934}.exe
attrib -r -s -h C:\WINDOWS\system32\{8A6E200A-DF88-415A-9B5A-8397E61801FB}.exe
attrib -r -s -h C:\WINDOWS\system32\{94446670-5B73-4216-8000-BB2AF45CD575}.exe
attrib -r -s -h C:\WINDOWS\system32\{72A988A4-1CB5-4F5B-95D8-FBDD1E9BAD8A}.exe
attrib -r -s -h C:\WINDOWS\system32\{576B1735-45EF-45BD-8995-1834C34C24DB}.exe
attrib -r -s -h C:\WINDOWS\system32\{0063A54F-E521-4ABF-BE29-02D2C2102382}.exe
attrib -r -s -h C:\WINDOWS\system32\{660F930A-01F4-46ED-A2E8-5E0474608217}.exe
attrib -r -s -h C:\WINDOWS\system32\{4F94EB42-5D99-41C7-A500-83B88AE6EABA}.exe
attrib -r -s -h C:\WINDOWS\system32\{F78316EC-BDEC-4743-950B-B38A2E9CEDA5}.exe
attrib -r -s -h C:\WINDOWS\system32\{D466A3AC-60CA-4477-9159-9BE4AC9C8E9F}.exe
attrib -r -s -h C:\WINDOWS\system32\{43CF7BA5-CFD7-44AC-B04B-3C2C70E52503}.exe
attrib -r -s -h C:\WINDOWS\system32\{3B19E1A3-0E05-4AE7-A77A-58034CD50711}.exe
attrib -r -s -h C:\WINDOWS\system32\{B1460E8C-7C85-41CD-820F-7211B38C473E}.exe
attrib -r -s -h C:\WINDOWS\system32\{82A456B4-9CFD-4009-A13B-43380668B483}.exe
attrib -r -s -h C:\WINDOWS\system32\{7FFD6D43-864E-46AF-90D4-1C6BA9EE8C02}.exe
attrib -r -s -h C:\WINDOWS\system32\{5DED8698-D438-40D4-8E8F-2F9606034800}.exe
attrib -r -s -h C:\WINDOWS\system32\{174F1816-B587-43EA-B319-DAC697B5D98F}.exe
attrib -r -s -h C:\WINDOWS\system32\{280FA13D-C350-45AA-8DF6-3BDE050568D2}.exe
attrib -r -s -h C:\WINDOWS\system32\{4D19FDB0-9656-4DFD-AAF5-470218789EC3}.exe
attrib -r -s -h C:\WINDOWS\system32\{290B462D-B751-4591-972A-8BB8ACFC2414}.exe
attrib -r -s -h C:\WINDOWS\system32\{ADABBB2D-C0CC-494A-9136-29C586974568}.exe
attrib -r -s -h C:\WINDOWS\system32\{7276DD13-2FD1-4573-B172-49C1D8A9CE26}.exe
attrib -r -s -h C:\WINDOWS\system32\{9022A474-B415-414E-8431-35A66C6FD337}.exe
attrib -r -s -h C:\WINDOWS\system32\{B6C228B1-D992-4D52-AA8E-AFA8E51314CF}.exe
attrib -r -s -h C:\WINDOWS\system32\{A91986D9-109C-4C95-A37B-4F6F293CA3CE}.exe
attrib -r -s -h C:\WINDOWS\system32\{08FFFB5A-83AE-488F-AC9B-AB6FA744BFEF}.exe
attrib -r -s -h C:\WINDOWS\system32\{6E698958-E431-476D-83E0-EF87682A66F4}.exe
attrib -r -s -h C:\WINDOWS\system32\{22A72B5E-F337-49E7-B06D-C99F317B1591}.exe
attrib -r -s -h C:\WINDOWS\system32\{FBA79E85-7BFC-46CD-811C-86CFA210C676}.exe
attrib -r -s -h C:\WINDOWS\system32\{0152FD87-E51C-4656-A3E7-3331F1BEC51F}.exe
attrib -r -s -h C:\WINDOWS\system32\{1803146E-BA03-4AF9-BD4E-5726942ADA3E}.exe
attrib -r -s -h C:\WINDOWS\system32\{BCBFA6C9-A7A0-46EE-BC49-73EE9A6AF572}.exe
attrib -r -s -h C:\WINDOWS\system32\{C0431263-6723-49D0-BF63-401C848617D2}.exe
attrib -r -s -h C:\WINDOWS\system32\{6FAFBFEC-109C-43FD-A26B-CD640FA14CE4}.exe
attrib -r -s -h C:\WINDOWS\system32\{8BF58C2D-F416-4685-A985-D14EE2CD9A75}.exe
attrib -r -s -h C:\WINDOWS\system32\{62F3F453-8607-47BE-BBF7-38F476058109}.exe
attrib -r -s -h C:\WINDOWS\system32\{3F2B2358-7799-4B9F-B4D4-2B96386D785A}.exe
attrib -r -s -h C:\WINDOWS\system32\{40FD0432-B69D-42D6-9069-C9676A7FA4AA}.exe
attrib -r -s -h C:\WINDOWS\system32\{F3FFCE2C-E806-42F6-AB2E-61AECAFBF92A}.exe
attrib -r -s -h C:\WINDOWS\system32\{0643CE84-E867-4ADF-9C4A-E41D5D555D07}.exe
attrib -r -s -h C:\WINDOWS\system32\{86936617-49F3-4FD4-99C5-4D35BEF40FAD}.exe
attrib -r -s -h C:\WINDOWS\system32\{79CF3215-B924-47A6-ACC6-622F872733E9}.exe
attrib -r -s -h C:\WINDOWS\system32\{28D4494C-5E87-4E52-A052-CEDD99D8C5C1}.exe
attrib -r -s -h C:\WINDOWS\system32\{83CAE08A-49B3-49FC-9271-E9BF61DE99A8}.exe
attrib -r -s -h C:\WINDOWS\system32\{BCAC55F6-DB05-49A6-A306-A1EB6162628C}.exe
attrib -r -s -h C:\WINDOWS\system32\{75CD6F5F-3680-425E-A322-1E7B6D974B84}.exe
attrib -r -s -h C:\WINDOWS\system32\{D2FA55AA-68C5-4C56-82C0-D4D0B1E65AF8}.exe
attrib -r -s -h C:\WINDOWS\system32\{25AD580E-7014-429A-BEB2-A357745DB71C}.exe
attrib -r -s -h C:\WINDOWS\system32\{FB35E9C5-5655-4C5E-81A5-E025FE5417AA}.exe
attrib -r -s -h C:\WINDOWS\system32\{9A8E0BDE-AA88-46A0-8FA9-5FF9928FD64B}.exe
attrib -r -s -h C:\WINDOWS\system32\{211AFBDD-228F-4066-9BB8-A04BCB5BEC93}.exe
attrib -r -s -h C:\WINDOWS\system32\{0DDEB38F-5947-4A64-B2A0-6A93C33B8F13}.exe
attrib -r -s -h C:\WINDOWS\system32\{8360DE40-3283-4AE2-A29F-DFCE68369823}.exe
attrib -r -s -h C:\WINDOWS\system32\{A0A20D20-62A3-4BD7-9C75-5A592FCD34AC}.exe
attrib -r -s -h C:\WINDOWS\system32\{B25C7B2A-BE7F-435D-9D37-006D58603A9A}.exe
attrib -r -s -h C:\WINDOWS\system32\{B019ED19-BADE-48D8-8B02-0F50FC9197CE}.exe
attrib -r -s -h C:\WINDOWS\system32\{85021232-7662-4B82-8B02-6E27349892D3}.exe
attrib -r -s -h C:\WINDOWS\system32\{11167658-FBDA-4D2C-91F4-2405B3DD52D3}.exe
attrib -r -s -h C:\WINDOWS\system32\{5891C969-B467-42E0-B8C6-1CA6045BCAFC}.exe
attrib -r -s -h C:\WINDOWS\system32\{75573D1E-0353-4FD7-A54C-AFEED4880AA6}.exe
attrib -r -s -h C:\WINDOWS\system32\{379CD300-A2E7-4B8E-A4D9-6B825CFB88CE}.exe
attrib -r -s -h C:\WINDOWS\system32\{30DD0014-C2B4-49C5-9E39-48E8E0D3C08C}.exe
attrib -r -s -h C:\WINDOWS\system32\{1CADAEFA-ADF5-4FDD-A3F2-6823A25CEDD1}.exe
attrib -r -s -h C:\WINDOWS\system32\{CF13A0C4-6D75-4FA8-9348-C61EFBB437F4}.exe
attrib -r -s -h C:\WINDOWS\system32\{8A5BA4AF-58AF-41D1-A12A-9A51EA24AA37}.exe
attrib -r -s -h C:\WINDOWS\system32\{BCC2DDA5-312D-41BC-B693-9E2D4E717B62}.exe
attrib -r -s -h C:\WINDOWS\system32\{43468F64-2104-4783-A703-FCBE4E93A9AD}.exe
attrib -r -s -h C:\WINDOWS\system32\{081095CC-A786-4AA4-A8B4-C9750B9F99A4}.exe
attrib -r -s -h C:\WINDOWS\system32\{250D32A0-2564-445E-A978-292F4855AAB8}.exe
attrib -r -s -h C:\WINDOWS\system32\{4167CE14-5F63-488A-89DB-EE3C1763C12B}.exe
attrib -r -s -h C:\WINDOWS\system32\{9CDF4FAA-2ACA-4642-B608-A9EBD0FDCB0C}.exe
attrib -r -s -h C:\WINDOWS\system32\{1AB7BC10-1699-4878-8258-C848C1C2B96A}.exe
attrib -r -s -h C:\WINDOWS\system32\{CB817C34-9FC3-458A-ABA1-D7F829C77662}.exe
attrib -r -s -h C:\WINDOWS\system32\{6759763C-BED0-44D0-AA37-53A07B7E286D}.exe
attrib -r -s -h C:\WINDOWS\system32\{182BFB26-BD92-4F8E-B70A-0BF10E109A2D}.exe
attrib -r -s -h C:\WINDOWS\system32\{7AA5755D-55B0-4B58-909D-F9B855AD680B}.exe
attrib -r -s -h C:\WINDOWS\system32\{87BEC384-6F3B-4C76-9998-89026376CC3A}.exe
attrib -r -s -h C:\WINDOWS\system32\{946DD32B-79A4-42C7-9C32-49A50D5ADB60}.exe
attrib -r -s -h C:\WINDOWS\system32\{C0983F7C-5451-40B9-B06E-D1A5835DC47A}.exe
attrib -r -s -h C:\WINDOWS\system32\{9F2B7E21-39EC-47E2-89C6-80C364E5F0EC}.exe
attrib -r -s -h C:\WINDOWS\system32\{1887B566-9DEC-4B6B-B386-FC3C716B7D8E}.exe
attrib -r -s -h C:\WINDOWS\system32\{23020FFF-C2A1-4731-ADDD-1D5C80AA7429}.exe
attrib -r -s -h C:\WINDOWS\system32\{44CAFCA0-8CA3-425F-8D7B-ED8E99114624}.exe
attrib -r -s -h C:\WINDOWS\system32\{99DE0EBD-67F8-4F8B-9C65-B3A69FD0236C}.exe
attrib -r -s -h C:\WINDOWS\system32\{BCD778E5-7413-4542-8E01-1486E8885716}.exe
attrib -r -s -h C:\WINDOWS\system32\{82CCE5CC-66F6-40AD-BDBE-5DD1D7B1EAB5}.exe
attrib -r -s -h C:\WINDOWS\system32\{932ED7E3-81BE-457A-9204-F6E86028B78F}.exe
attrib -r -s -h C:\WINDOWS\system32\{BEA10217-3DF0-45D2-883D-A350D307D35F}.exe
attrib -r -s -h C:\WINDOWS\system32\{C441EF15-240D-4C3A-876D-BD5721F90A03}.exe
attrib -r -s -h C:\WINDOWS\system32\{4264C0EC-B101-44B0-9DC8-ACD64E64AEEC}.exe
attrib -r -s -h C:\WINDOWS\system32\{BDF4F6BC-EE1F-404A-BA38-504B350574F7}.exe
attrib -r -s -h C:\WINDOWS\system32\{CEB1476A-A610-4A9E-8F11-D6255A7027B7}.exe
attrib -r -s -h C:\WINDOWS\system32\{CEA6256D-2565-4A61-AA25-EEB90D4F0CEF}.exe
attrib -r -s -h C:\WINDOWS\system32\{A5C9E889-A37F-4046-89EA-4787E28EB770}.exe
attrib -r -s -h C:\WINDOWS\system32\{C761CF2C-9204-4E30-B1C7-B4C99616C88B}.exe
attrib -r -s -h C:\WINDOWS\system32\{4C3CA89B-ABDC-4774-847A-3279ED4BE35F}.exe
attrib -r -s -h C:\WINDOWS\system32\{3DA48A9F-6D44-40E1-8323-27FA095D8C13}.exe
attrib -r -s -h C:\WINDOWS\system32\{1D765F7B-5D11-4044-B6E3-666983ED777C}.exe
attrib -r -s -h C:\WINDOWS\system32\{F4E5CF59-F934-4E1C-ABBA-77C56F7FE0AF}.exe
attrib -r -s -h C:\WINDOWS\system32\{2275A499-CF63-4A68-B97D-070895AF1128}.exe
attrib -r -s -h C:\WINDOWS\system32\{2BDF866B-168F-45AB-9586-0D54518DBD15}.exe
attrib -r -s -h C:\WINDOWS\system32\{B0381994-C865-4C18-B1B3-3FF3E24A40F8}.exe
attrib -r -s -h C:\WINDOWS\system32\{4B2F2B2D-A6C1-4A99-9998-41018E569564}.exe
attrib -r -s -h C:\WINDOWS\system32\{1697679E-65FF-49AE-9981-10A9EEB45ECA}.exe
attrib -r -s -h C:\WINDOWS\system32\{B6951CCB-5CDD-45EB-B9D4-63E8625BCE12}.exe
attrib -r -s -h C:\WINDOWS\system32\{A39D9B29-9B26-49AC-9F63-9CD6544D8332}.exe
attrib -r -s -h C:\WINDOWS\system32\{3C9426F8-625C-43C3-B9EB-E87515CCE33F}.exe
attrib -r -s -h C:\WINDOWS\system32\{42F0837B-3CDC-47C3-B450-39835ECBBFC2}.exe
attrib -r -s -h C:\WINDOWS\system32\{D0DD3CB5-3895-4797-8C49-5E5572928B3C}.exe
attrib -r -s -h C:\WINDOWS\system32\{9E56385A-28E0-4BB5-A6FD-EC76835B2A65}.exe
attrib -r -s -h C:\WINDOWS\system32\{222BE08C-5519-4F7D-92BA-FE0F7874B12D}.exe

Save it to your desktop as ff.bat

More in next post.

Copy the text in the following quote box into Notepad:

del C:\WINDOWS\system32\{A2326CCA-0BA2-411E-A487-ED762676E04A}.exe
del C:\WINDOWS\system32\{D3097935-4AEF-43C6-8289-4DB6F354F47B}.exe
del C:\WINDOWS\system32\{A4ABD911-88F3-4688-A853-975959E45EC5}.exe
del C:\WINDOWS\system32\{6C59BB23-0E5D-4434-A1E1-917293E72B95}.exe
del C:\WINDOWS\system32\{6D594446-65FB-447B-BDC0-1E31B80B83C2}.exe
del C:\WINDOWS\system32\{72A4B75E-1621-46FC-B321-ADD8E515CE54}.exe
del C:\WINDOWS\system32\{AA19F64A-7830-4B50-93C7-B727BFF27FF0}.exe
del C:\WINDOWS\system32\{3A44E041-2F55-4802-8B79-8551124A7E52}.exe
del C:\WINDOWS\system32\{A1AFDCF2-2CD1-41C0-A526-4459F1053DB6}.exe
del C:\WINDOWS\system32\{3718A30A-3AEC-4D97-9F30-68F8EDA59026}.exe
del C:\WINDOWS\system32\{B97FED63-D0EE-4E13-8196-D11D14707003}.exe
del C:\WINDOWS\system32\{A6DB352D-FCDD-45F7-BECE-DB1435796366}.exe
del C:\WINDOWS\system32\{147CE388-D3BC-4428-AE5E-1FF044CAAE2B}.exe
del C:\WINDOWS\system32\{64A8F1C6-21CB-4FC1-8E2E-46EE153666F7}.exe
del C:\WINDOWS\system32\{E9554B51-0A97-4A83-83AA-D1FAB6D9BF5C}.exe
del C:\WINDOWS\system32\{B53BAF0D-A29C-43C9-ADCC-46613E34350F}.exe
del C:\WINDOWS\system32\{D205CF9A-7D07-47F9-AC70-3427656B218A}.exe
del C:\WINDOWS\system32\{6AF9419C-32A1-4869-8B6F-312630176968}.exe
del C:\WINDOWS\system32\{75458863-AE01-45C9-B274-0FFBAEAAE670}.exe
del C:\WINDOWS\system32\{2F0C79A1-9B27-4B35-B5F4-5A20DAE092F8}.exe
del C:\WINDOWS\system32\{BDAFFC34-0B2F-427E-86CA-0DA281140594}.exe
del C:\WINDOWS\system32\{5B36237A-8B77-4453-A293-768557496AD3}.exe
del C:\WINDOWS\system32\{ED0F5C3D-A519-425A-99EE-3ADD8B974EBC}.exe
del C:\WINDOWS\system32\{3EE9592A-55BF-474B-BE16-E432782B654B}.exe
del C:\WINDOWS\system32\{861693E8-AC5D-414A-A780-6C9BC8E9B3BC}.exe
del C:\WINDOWS\system32\{62097873-10DF-4481-8749-BC14070D948F}.exe
del C:\WINDOWS\system32\{7C651EE3-5495-4998-B122-D4C89E881304}.exe
del C:\WINDOWS\system32\{BDFE7729-C3F9-47C2-8BF0-05E91D775A11}.exe
del C:\WINDOWS\system32\{AE082ADC-91D7-4C74-BC34-AE4F56254945}.exe
del C:\WINDOWS\system32\{685D984E-39EB-430A-93FF-21F9F976E09B}.exe
del C:\WINDOWS\system32\{937A54AA-E3B7-4B27-9857-C45F7D0D118D}.exe
del C:\WINDOWS\system32\{DCACC769-A3F0-428D-9366-D2961A8A066D}.exe
del C:\WINDOWS\system32\{95E0D556-DD64-45DE-B9F4-B5AB323B15F8}.exe
del C:\WINDOWS\system32\{788BE86C-9F86-43CB-A69C-38E1A4183876}.exe
del C:\WINDOWS\system32\{023944B6-0451-4673-A2E3-39A5AC9A926A}.exe
del C:\WINDOWS\system32\{4EDDBEA2-2FBC-431D-914E-002865F8C728}.exe
del C:\WINDOWS\system32\{B52A09E5-C07B-4EDA-97F1-DFD5208FC22A}.exe
del C:\WINDOWS\system32\{4F52F1F3-90AA-4F9B-B7A8-C2617FD98A9A}.exe
del C:\WINDOWS\system32\{8DA69774-02B1-4105-84E3-B31A47B72693}.exe
del C:\WINDOWS\system32\{A887870F-CF85-4153-8CB7-3ED41F4DDF50}.exe
del C:\WINDOWS\system32\{174816D3-0012-4F08-9746-26009B7E7A8C}.exe
del C:\WINDOWS\system32\{38B1981D-6C1E-43A4-B9EC-514F7D4A62AC}.exe
del C:\WINDOWS\system32\{EB1E8E5B-B060-47D5-9EC8-C342CBAFE2E6}.exe
del C:\WINDOWS\system32\{C0AD2C24-231B-406D-B37D-E09F0B565A4D}.exe
del C:\WINDOWS\system32\{DCD36F07-A34E-4C0B-AF21-9E8D966BC228}.exe
del C:\WINDOWS\system32\{324100E4-9E9C-4133-B725-6A9226738735}.exe
del C:\WINDOWS\system32\{D9812605-240F-4A7B-B460-26546D581194}.exe
del C:\WINDOWS\system32\{3CB25183-4D89-499F-BA0D-7B69E7DA3C88}.exe
del C:\WINDOWS\system32\{F2871A65-D073-45ED-B02A-0BBE3650B4F3}.exe
del C:\WINDOWS\system32\{EC85192A-9A96-4649-AB3F-82D52E7A8A8D}.exe
del C:\WINDOWS\system32\{9D903912-53B5-46FF-9725-82835DFFCFE7}.exe
del C:\WINDOWS\system32\{0C82BA74-DFE3-4750-863F-791787BD87A2}.exe
del C:\WINDOWS\system32\{5ECE786C-4004-4839-B7FE-507BC3171771}.exe
del C:\WINDOWS\system32\{82DC4AFD-172E-496C-8A61-6F0E9F08C738}.exe
del C:\WINDOWS\system32\{F502CAC3-335D-4306-B888-7FBC49186169}.exe
del C:\WINDOWS\system32\{89FE5B87-D0B1-41AD-AA48-AB0D59FE1079}.exe
del C:\WINDOWS\system32\{CED9DC12-AF3C-4DE7-B090-EAF754E98E59}.exe
del C:\WINDOWS\system32\{921E69AE-BCA4-402C-B885-9E67D11C0D22}.exe
del C:\WINDOWS\system32\{0EC094D4-2A64-4E80-B379-ED6CB937C181}.exe
del C:\WINDOWS\system32\{0DB064BD-972A-4CCC-BB6F-4E6F48B43AC1}.exe
del C:\WINDOWS\system32\{4E8F9BF4-0ADC-4BE0-9206-323A353F9585}.exe
del C:\WINDOWS\system32\{79F589D7-9985-4044-A218-C4E93431BF25}.exe
del C:\WINDOWS\system32\{282B9AB2-D162-4335-812A-5059C58AF153}.exe
del C:\WINDOWS\system32\{92BB025C-A10B-4529-BBEE-12371D9227CD}.exe
del C:\WINDOWS\system32\{AABD7A91-A743-4567-96CF-08DFF0D6C964}.exe
del C:\WINDOWS\system32\{871DBF32-DEE4-4035-BC68-7F13B21E4F30}.exe
del C:\WINDOWS\system32\{C27BA4DC-2FC1-455E-B13C-059BF11757B9}.exe
del C:\WINDOWS\system32\{3369D9D1-613D-4393-BFEB-A65ADC5FAFA5}.exe
del C:\WINDOWS\system32\{D691919B-AD41-4367-A37B-CBC81F1CFA44}.exe
del C:\WINDOWS\system32\{04AB6F94-AC31-450E-B3EF-F7D7B72F93D4}.exe
del C:\WINDOWS\system32\{ADCA03C9-CB96-40FB-A11D-1E96C0C1AC25}.exe
del C:\WINDOWS\system32\{B2E81EE4-7502-40E0-B7B7-668850E4599E}.exe
del C:\WINDOWS\system32\{ED841FBA-31A7-484D-B09F-AD8642B51A44}.exe
del C:\WINDOWS\system32\{4CB16F6C-43ED-4400-B78A-77BE24EF785E}.exe
del C:\WINDOWS\system32\{2FE3D397-514B-4BAE-99E2-0E111AB952B0}.exe
del C:\WINDOWS\system32\{9A0F3EDE-605C-46E1-A904-DD44515EEC15}.exe
del C:\WINDOWS\system32\{362ACB80-0ACA-4035-8630-2C7D2E9FFEE6}.exe
del C:\WINDOWS\system32\{C093827B-D2D9-4C01-8523-03A700FF7190}.exe
del C:\WINDOWS\system32\{DBFB8D31-2CBE-407B-BEE7-8CA277F6F693}.exe
del C:\WINDOWS\system32\{E4ABAEF7-7FF8-4124-8BD0-2AD4189F9785}.exe
del C:\WINDOWS\system32\{95A8E27B-D9A2-44BB-9885-40164625D338}.exe
del C:\WINDOWS\system32\{09483EF3-EC60-49E7-8C18-D901A534802A}.exe
del C:\WINDOWS\system32\{B68C163C-E41F-4632-BDA0-F4544104D6C5}.exe
del C:\WINDOWS\system32\{8E5F4384-BB22-4245-BEE8-2C5D84E152F0}.exe
del C:\WINDOWS\system32\{B7DD50D8-6495-490F-926E-8526527BD34A}.exe
del C:\WINDOWS\system32\{86975F05-4B89-4DFE-A736-6C7A3A0275BE}.exe
del C:\WINDOWS\system32\{E411B4CF-F69C-476B-9A04-4E92A6615B67}.exe
del C:\WINDOWS\system32\{05C53CF9-DC01-4F32-847A-834EAA833A38}.exe
del C:\WINDOWS\system32\{37063C90-1DF8-4F9E-A9D5-8CE58CA68857}.exe
del C:\WINDOWS\system32\{4675614D-25A3-4130-9466-C240E5F49CBF}.exe
del C:\WINDOWS\system32\{381A7D9E-B346-48BD-ABE4-D5945CFE8743}.exe
del C:\WINDOWS\system32\{4CF92B2D-C425-4A81-8487-14B997C177DC}.exe
del C:\WINDOWS\system32\{A82DEB5E-AB2E-4144-ACA9-8C1C82B714CA}.exe
del C:\WINDOWS\system32\{C193029C-6B07-4F82-8CAF-D2D9D8E56FD8}.exe
del C:\WINDOWS\system32\{7873EA19-E8F2-4AFC-B4BA-283A5C925A19}.exe
del C:\WINDOWS\system32\{6DE6110E-1D7F-4AA0-903B-97337D4CDC8C}.exe
del C:\WINDOWS\system32\{E4627217-F199-4FE3-AA79-943E87E12ABB}.exe
del C:\WINDOWS\system32\{CD90697D-F86D-4379-9B81-92F6AF357DF6}.exe
del C:\WINDOWS\system32\{AD292BAA-0D1F-4EBE-A0ED-5685C381A417}.exe
del C:\WINDOWS\system32\{1D655C97-8B85-4418-9249-C8DD67051345}.exe
del C:\WINDOWS\system32\{F2A47563-9AA2-4CA7-AE28-769F5974E729}.exe
del C:\WINDOWS\system32\{ACB1C717-798A-4FC2-9F02-1A443B4A2FD4}.exe
del C:\WINDOWS\system32\{AD807D73-94CA-45D3-9253-B0A5CE715583}.exe
del C:\WINDOWS\system32\{61DC3C79-1652-459C-9268-770F5A1B1193}.exe
del C:\WINDOWS\system32\{E5440EBC-05CC-477E-AF6A-F23070D2C118}.exe
del C:\WINDOWS\system32\{92E9E791-ACAC-43D1-B53D-1A04E7922D3D}.exe
del C:\WINDOWS\system32\{69D1C918-F201-47F4-B1D8-F3178B1B11DC}.exe
del C:\WINDOWS\system32\{1195DDD1-6715-49DB-93E9-FD724072E0E7}.exe
del C:\WINDOWS\system32\{E09059A2-0B3B-4AE8-A68C-3893881CC248}.exe
del C:\WINDOWS\system32\{5800DF50-7742-466D-A1DC-F35275D00F65}.exe
del C:\WINDOWS\system32\{C5369D97-D329-49A8-B083-741BA9144646}.exe
del C:\WINDOWS\system32\{6E2968D5-79C2-42EA-8991-0B792C48B808}.exe
del C:\WINDOWS\system32\{FAE0841A-D2BF-4FD4-9435-A18E44C5A344}.exe
del C:\WINDOWS\system32\{E2DCC3A1-5829-4744-B047-7A8A92DA3A7A}.exe
del C:\WINDOWS\system32\{3EDA61B1-2942-4DE7-9929-FE7CAED6A53B}.exe
del C:\WINDOWS\system32\{E42B3CEC-1590-4008-B5D3-23E7CA0B57CA}.exe
del C:\WINDOWS\system32\{F4EDCA00-E25F-4165-8B7C-D9D92906A2FC}.exe
del C:\WINDOWS\system32\{87EDB6EC-AE5D-4B32-BC85-C08D05048568}.exe
del C:\WINDOWS\system32\{8ED0E054-3A00-4C0F-83B5-563C8C0F38F3}.exe
del C:\WINDOWS\system32\{278BFD70-3A69-46D9-B821-5B00949932A4}.exe
del C:\WINDOWS\system32\{E9306495-3C4D-4200-9A0C-77A3981FE465}.exe
del C:\WINDOWS\system32\{3D12F697-BE7A-4FB2-9720-A2E84740979C}.exe
del C:\WINDOWS\system32\{EBD9A6AA-2E3A-471A-A6B6-DBAA880696D8}.exe
del C:\WINDOWS\system32\{F361F58C-9F80-4912-A43F-B92200B747F1}.exe
del C:\WINDOWS\system32\{644200B0-81CC-40CD-B8DF-D2A2740952C4}.exe
del C:\WINDOWS\system32\{EE1D71D2-1F48-43A3-BD7F-7A63A05B1BFE}.exe
del C:\WINDOWS\system32\{3BA75ABD-D060-4618-8286-FB138F3A0582}.exe
del C:\WINDOWS\system32\{930E0F16-AB46-46BF-B832-0B43B2AA508D}.exe
del C:\WINDOWS\system32\{75A556AA-9E12-4E3A-BD12-408E0E043AED}.exe
del C:\WINDOWS\system32\{630F0D3F-74AA-4208-AE98-C150F5CB9330}.exe
del C:\WINDOWS\system32\{3A28B9B0-1C78-4727-8F3A-7C8A774486D0}.exe
del C:\WINDOWS\system32\{C1E73B89-27FC-4217-BD82-38FE5EA7182E}.exe
del C:\WINDOWS\system32\{D8B681FC-7708-47A9-8812-2BFB3F809707}.exe
del C:\WINDOWS\system32\{239C4739-8817-450C-B18C-BD003EBE2E68}.exe
del C:\WINDOWS\system32\{F7530B00-7126-46F5-AB02-9F46E44CA10A}.exe
del C:\WINDOWS\system32\{BE7069DB-AB33-4BF5-A4A5-55308B9BDF3E}.exe
del C:\WINDOWS\system32\{9BB50025-FC19-41A3-BEB4-B74952E61165}.exe
del C:\WINDOWS\system32\{569EB633-FEE4-450C-BAC8-47D7FC45C07F}.exe
del C:\WINDOWS\system32\{0A806DD7-470A-4DF1-BFA7-78524980305C}.exe
del C:\WINDOWS\system32\{D7264A74-3CDC-4BA4-93AE-7F556D00249E}.exe
del C:\WINDOWS\system32\{444DE268-359A-46FC-8D67-C4379D8BE46F}.exe
del C:\WINDOWS\system32\{A803735D-EAC3-4F90-A0CD-0C5EBA511099}.exe
del C:\WINDOWS\system32\{9958A766-B3E8-4399-A6BB-5B2747837F8E}.exe
del C:\WINDOWS\system32\{01EB0F97-7D7E-4B21-8385-1389EB8FA781}.exe
del C:\WINDOWS\system32\{D4142235-8363-4360-AB49-A79F9B0CD0B6}.exe
del C:\WINDOWS\system32\{96C4E97C-A1CC-490E-90CE-83AB34B7AB53}.exe
del C:\WINDOWS\system32\{93DCA7BA-6254-4176-A140-EF0D01D8A989}.exe
del C:\WINDOWS\system32\{452035D8-38B5-43F1-AA14-DC4B3AA54DAB}.exe
del C:\WINDOWS\system32\{9227137C-4DC6-4A69-88F9-EDF65A5BABC7}.exe
del C:\WINDOWS\system32\{F5A74FC2-2855-40DC-9EDC-318694D454CE}.exe
del C:\WINDOWS\system32\{80CB750B-D691-4AC0-996B-100EC2D945AE}.exe
del C:\WINDOWS\system32\{2E60679D-6642-4A8A-A782-889AA08AB5BA}.exe
del C:\WINDOWS\system32\{EDC2F94C-DBBA-484D-90BE-DC54AB58A81D}.exe
del C:\WINDOWS\system32\{BF5CFB33-0755-4FFD-B29D-BA3D0851FAFF}.exe
del C:\WINDOWS\system32\{49A317C1-4DCD-437E-87E6-C24123F3CB62}.exe
del C:\WINDOWS\system32\{B24340D8-B518-4DB6-882B-22B14E9DEB7C}.exe
del C:\WINDOWS\system32\{11C577B4-E68B-446B-8031-FC376DFFB2ED}.exe
del C:\WINDOWS\system32\{A9BE5F74-E3BC-405E-B16E-04B50E05119A}.exe
del C:\WINDOWS\system32\{0D0B1F35-1EE5-4F3B-BD17-0BBC7F352330}.exe
del C:\WINDOWS\system32\{84C33A8B-CFE3-40C5-96CD-406A3C042B3D}.exe
del C:\WINDOWS\system32\{DB15A167-A49A-4B88-8F05-9A2F2EAD3938}.exe
del C:\WINDOWS\system32\{64FDBA13-0C58-46BC-AA76-CA4A784CF64F}.exe
del C:\WINDOWS\system32\{1B32EE95-DC23-415E-B507-03FCC09C690F}.exe
del C:\WINDOWS\system32\{CAD0B475-47CB-4500-B025-AC27973BB6D4}.exe
del C:\WINDOWS\system32\{E9D02FA5-8FCB-476D-AC1F-57CF271B063F}.exe
del C:\WINDOWS\system32\{E098A15C-ED1A-4F65-9D2B-A9D664CA5270}.exe
del C:\WINDOWS\system32\{C48FD2BD-7E9B-408F-B6A4-E9543C2F6D43}.exe
del C:\WINDOWS\system32\{4E908248-40FF-4851-BA9F-55764874FFEC}.exe
del C:\WINDOWS\system32\{0B54205A-5923-42EA-A8D5-C2FF8AB34427}.exe
del C:\WINDOWS\system32\{AF849BA7-4413-4429-85AC-1BFCAC1A9D52}.exe
del C:\WINDOWS\system32\{DFA1F576-332D-47FB-9977-F4F6C75DD812}.exe
del C:\WINDOWS\system32\{AF5BA8BA-66BE-43E4-B6A9-CAD890AA6E57}.exe
del C:\WINDOWS\system32\{03698086-492E-497E-A48C-F930CC96786F}.exe
del C:\WINDOWS\system32\{BE0DDFB4-7F22-4E13-82C9-AC8140B62BCC}.exe
del C:\WINDOWS\system32\{90447168-3715-45F4-B560-88067654DFF7}.exe
del C:\WINDOWS\system32\{1C0294E9-D0BB-4B2C-A8CD-A351117DEDE1}.exe
del C:\WINDOWS\system32\{AD334F17-7EC0-47E7-AAFA-9EB9544ADDAF}.exe
del C:\WINDOWS\system32\{262905E6-A3CB-47A7-842A-9EF6F8DD4753}.exe
del C:\WINDOWS\system32\{CB363075-AC1B-4F69-9DAC-F606ADFDD395}.exe
del C:\WINDOWS\system32\{AD6AB6B7-965E-4BCB-AB30-A7170D221AA1}.exe
del C:\WINDOWS\system32\{EBD42CB0-4595-4731-81AE-A2447D262A7A}.exe
del C:\WINDOWS\system32\{223A3B92-5B96-4CD9-9848-59BBBA1A4BF6}.exe
del C:\WINDOWS\system32\{FBB7155D-6854-49DD-9154-0EAD82020CC6}.exe
del C:\WINDOWS\system32\{8A1E1B9A-E6CF-4D98-A030-F095E46DD9DB}.exe
del C:\WINDOWS\system32\{8E3B8160-96F4-4BB1-9BEA-CC3B51205832}.exe
del C:\WINDOWS\system32\{ED0DDC5C-5F8D-44E5-842B-C5BF867837B8}.exe
del C:\WINDOWS\system32\{55F03D22-7657-4919-A102-ACFCB2B24B08}.exe
del C:\WINDOWS\system32\{B050C811-89D6-4515-8815-6CB9A215CECC}.exe
del C:\WINDOWS\system32\{FB112EA9-AC49-43AA-AAE4-CC20DABF4A00}.exe
del C:\WINDOWS\system32\{2A0C8274-EA92-43DD-A86E-4A98A361D9B2}.exe
del C:\WINDOWS\system32\{DC65A893-F8C5-4C23-ABEC-9511A0D3F6FA}.exe
del C:\WINDOWS\system32\{09E1F3ED-C4D0-4105-BCED-AAA35804A81F}.exe
del C:\WINDOWS\system32\{B898AD86-98EF-4B30-8933-87E478B578B2}.exe
del C:\WINDOWS\system32\{B689DB08-4DE0-4E68-B922-D3228FE9F31E}.exe
del C:\WINDOWS\system32\{5F6DB3F5-759C-4FE9-AF38-5561C30D92F8}.exe
del C:\WINDOWS\system32\{B4E21D02-DC7A-45F5-8AD5-6D87DBB877F1}.exe
del C:\WINDOWS\system32\{B05A8723-FBF7-4B5F-9115-CC490F73E2C4}.exe
del C:\WINDOWS\system32\{A3B70444-26AD-4FD9-9F63-AC42471A025D}.exe
del C:\WINDOWS\system32\{412226E7-0AF6-4F2B-B851-48D48E7CF3DD}.exe
del C:\WINDOWS\system32\{70637903-FD72-4194-BC7E-35D221A59614}.exe
del C:\WINDOWS\system32\{8D8819ED-BFC5-4AC7-91E5-CF0A4A3BAC43}.exe
del C:\WINDOWS\system32\{609C1F9A-F44D-41C5-8C5B-AF7E927EA31C}.exe
del C:\WINDOWS\system32\{3D292CA6-8897-451E-A83B-6A1F5A581743}.exe
del C:\WINDOWS\system32\{A42F7AE7-E0F6-4C5B-9165-BCB6D08D6962}.exe
del C:\WINDOWS\system32\{B74AEC40-5D34-411B-89E4-E32548A7D8C0}.exe
del C:\WINDOWS\system32\{E59C10BB-E683-483F-9F84-0B2BA3791675}.exe
del C:\WINDOWS\system32\{38E06D28-FCA5-497F-87AB-5EF1F3ECCBD7}.exe
del C:\WINDOWS\system32\{2E5EB839-18BD-44E8-89AB-80266B7E74F4}.exe
del C:\WINDOWS\system32\{FACEA751-8172-4D57-A7B1-E5556496CFD1}.exe
del C:\WINDOWS\system32\{1F48C1AF-3BFC-4CFC-AF55-5700FB8C902D}.exe
del C:\WINDOWS\system32\{0E4E4D1C-8BC4-4E00-BC4A-177B7362A8D2}.exe
del C:\WINDOWS\system32\{0FF10CE2-5749-4766-8B94-78E65F2E8378}.exe
del C:\WINDOWS\system32\{A2088BCF-F9B8-49A5-A3AC-5585F19B19A2}.exe
del C:\WINDOWS\system32\{DFF5FFB5-9AB6-470C-AF62-77F6B24A440A}.exe
del C:\WINDOWS\system32\{67BECB65-0CF2-4B35-85E3-8AFAEB4073BC}.exe
del C:\WINDOWS\system32\{9AACD7AA-3290-421A-998A-0B8779082B06}.exe
del C:\WINDOWS\system32\{4D8AA0C2-0794-4556-922C-EE36810F2C2C}.exe
del C:\WINDOWS\system32\{9A33B7D8-58AB-402A-9480-58AB4CC191FE}.exe
del C:\WINDOWS\system32\{0AA5D46E-AEA1-48E2-A0E8-4AF3D95A2F8B}.exe
del C:\WINDOWS\system32\{85DA9DCB-7F3D-4165-BA49-A3D7D1E8C1D6}.exe
del C:\WINDOWS\system32\{303877DC-FD88-4CDA-B8DE-CF24AF11CD59}.exe
del C:\WINDOWS\system32\{F10D2BE4-2C9F-4083-97F9-9BCE195E7ED5}.exe
del C:\WINDOWS\system32\{485999BE-714D-46BC-B3D1-01D219DEB5F0}.exe
del C:\WINDOWS\system32\{DEA04950-46AC-4874-B23F-2F81DBD5AE9D}.exe
del C:\WINDOWS\system32\{A82CBF52-36BA-41AD-8889-0AFFDDBA8A6B}.exe
del C:\WINDOWS\system32\{F3B4FCFB-CB6A-4899-9357-C2CF63D994F9}.exe
del C:\WINDOWS\system32\{BB58ABA2-D547-4655-856C-BAD81EAF3E53}.exe
del C:\WINDOWS\system32\{014D73F7-2693-495F-88B8-6A26911B425B}.exe
del C:\WINDOWS\system32\{CC8C76CF-DEE0-42AE-A8F6-C38D7DDA54EA}.exe
del C:\WINDOWS\system32\{A85EEAC9-EA62-4A45-9403-D106DC80DC60}.exe
del C:\WINDOWS\system32\{9B88352D-E5CF-4C7F-A7D5-6D3C9E90A139}.exe
del C:\WINDOWS\system32\{EB363CE7-2549-4899-92CC-62C6316B3660}.exe
del C:\WINDOWS\system32\{771A541E-824F-46A3-BC0D-77A028D3ABE5}.exe
del C:\WINDOWS\system32\{CEC4B30D-F61B-48C7-AE51-F0E5B42DF9B3}.exe
del C:\WINDOWS\system32\{6AD9CB56-F87A-4C99-9308-F0A14520B5C8}.exe
del C:\WINDOWS\system32\{E3353EA4-10D5-42F4-9D33-DACBC856A734}.exe
del C:\WINDOWS\system32\{FD21C2D7-7126-4D3D-8F98-34E74610F991}.exe
del C:\WINDOWS\system32\{404B73B7-816B-45F3-A4EC-4D2C5D476F7B}.exe
del C:\WINDOWS\system32\{409F9399-2DAC-4484-9439-DE86269796DD}.exe
del C:\WINDOWS\system32\{83F26FAD-89C8-4911-8609-19750AD11F11}.exe
del C:\WINDOWS\system32\{ECD5271D-63E5-416C-AF54-63EB74A215DA}.exe
del C:\WINDOWS\system32\{380AEF25-7D21-4604-B3C7-36E8DEDD91EC}.exe
del C:\WINDOWS\system32\{B964357C-D34A-4FCB-8220-93573FC00621}.exe
del C:\WINDOWS\system32\{6101FFE7-FC41-4EA8-97EA-711C83AFF424}.exe
del C:\WINDOWS\system32\{AB37A3F5-C723-45DE-AC43-E5CBC5E0DFFD}.exe
del C:\WINDOWS\system32\{C9EBFD94-2421-4172-B7C2-801588700B1C}.exe
del C:\WINDOWS\system32\{11262FF8-CFAA-4D8C-AD1A-39CA6ECA26F7}.exe
del C:\WINDOWS\system32\{7105F3D7-8999-4FEB-818A-2D44B5419235}.exe
del C:\WINDOWS\system32\{B49CE084-E9FF-461B-9377-358E7296DF53}.exe
del C:\WINDOWS\system32\{31035B7D-80C8-453A-BE37-E5BE033F8636}.exe
del C:\WINDOWS\system32\{934C7B3C-3AAD-4BB5-B4C4-D645558A0BFA}.exe
del C:\WINDOWS\system32\{686B59FE-EEBB-4708-8907-DB7072B2154F}.exe
del C:\WINDOWS\system32\{97A35E29-CCDB-4E57-9F14-AE26BA0CFA94}.exe
del C:\WINDOWS\system32\{AB142B6E-8223-4248-9C1F-12F9CCAF4D84}.exe
del C:\WINDOWS\system32\{42C43643-BEED-4D13-BF08-B8D564BD610B}.exe
del C:\WINDOWS\system32\{E09F518B-9434-4C04-8B01-D35FC07C0B2A}.exe
del C:\WINDOWS\system32\{E4D0DB96-90D6-44D8-B180-566F6F3C8C9D}.exe
del C:\WINDOWS\system32\{BD6B0711-2795-4239-A12F-300293E528EC}.exe
del C:\WINDOWS\system32\{5A356619-6C95-47FF-9B2E-23D1C6E09BCE}.exe
del C:\WINDOWS\system32\{68485A05-A410-4F90-8FEC-F1228568DD2E}.exe
del C:\WINDOWS\system32\{4B806417-D927-43AD-AE38-7DCC701A8458}.exe
del C:\WINDOWS\system32\{CB3DD5B6-4063-4C37-97F6-45160651670C}.exe
del C:\WINDOWS\system32\{4A5529DA-DD9F-4763-888E-BEC00C106B38}.exe
del C:\WINDOWS\system32\{31643293-66C2-41CE-81DD-EB5204B15060}.exe
del C:\WINDOWS\system32\{92D685F0-3092-4930-8466-6B974F3EA370}.exe
del C:\WINDOWS\system32\{D477AC40-427D-4A5E-BE9D-B73FF41A3BE9}.exe
del C:\WINDOWS\system32\{215A957A-23DC-412F-9020-47C9B7CCD696}.exe
del C:\WINDOWS\system32\{78998A4C-0537-49C2-881A-A1961F4ED955}.exe
del C:\WINDOWS\system32\{DB7F1952-F8AB-44F3-900A-BB4B6561C692}.exe
del C:\WINDOWS\system32\{31334A16-C535-4886-82B6-CC03EF5215CE}.exe
del C:\WINDOWS\system32\{F7141591-0E71-4D85-9F66-6D2ABF7B62FA}.exe
del C:\WINDOWS\system32\{56AAB363-F961-4041-AF3A-1D9226B8393E}.exe
del C:\WINDOWS\system32\{6A9B2532-C2D6-4C28-B216-EDB2E110DF34}.exe
del C:\WINDOWS\system32\{FF5998C8-2C1D-44A0-897F-3855FF57E14C}.exe
del C:\WINDOWS\system32\{AF2AAAA6-ADE0-4416-966C-0B3CE9F9C63E}.exe
del C:\WINDOWS\system32\{237B9446-9BBD-4E93-B3A8-D254EE1C4F79}.exe
del C:\WINDOWS\system32\{234E74C2-A02D-4A11-B17E-BC6AB962C934}.exe
del C:\WINDOWS\system32\{8A6E200A-DF88-415A-9B5A-8397E61801FB}.exe
del C:\WINDOWS\system32\{94446670-5B73-4216-8000-BB2AF45CD575}.exe
del C:\WINDOWS\system32\{72A988A4-1CB5-4F5B-95D8-FBDD1E9BAD8A}.exe
del C:\WINDOWS\system32\{576B1735-45EF-45BD-8995-1834C34C24DB}.exe
del C:\WINDOWS\system32\{0063A54F-E521-4ABF-BE29-02D2C2102382}.exe
del C:\WINDOWS\system32\{660F930A-01F4-46ED-A2E8-5E0474608217}.exe
del C:\WINDOWS\system32\{4F94EB42-5D99-41C7-A500-83B88AE6EABA}.exe
del C:\WINDOWS\system32\{F78316EC-BDEC-4743-950B-B38A2E9CEDA5}.exe
del C:\WINDOWS\system32\{D466A3AC-60CA-4477-9159-9BE4AC9C8E9F}.exe
del C:\WINDOWS\system32\{43CF7BA5-CFD7-44AC-B04B-3C2C70E52503}.exe
del C:\WINDOWS\system32\{3B19E1A3-0E05-4AE7-A77A-58034CD50711}.exe
del C:\WINDOWS\system32\{B1460E8C-7C85-41CD-820F-7211B38C473E}.exe
del C:\WINDOWS\system32\{82A456B4-9CFD-4009-A13B-43380668B483}.exe
del C:\WINDOWS\system32\{7FFD6D43-864E-46AF-90D4-1C6BA9EE8C02}.exe
del C:\WINDOWS\system32\{5DED8698-D438-40D4-8E8F-2F9606034800}.exe
del C:\WINDOWS\system32\{174F1816-B587-43EA-B319-DAC697B5D98F}.exe
del C:\WINDOWS\system32\{280FA13D-C350-45AA-8DF6-3BDE050568D2}.exe
del C:\WINDOWS\system32\{4D19FDB0-9656-4DFD-AAF5-470218789EC3}.exe
del C:\WINDOWS\system32\{290B462D-B751-4591-972A-8BB8ACFC2414}.exe
del C:\WINDOWS\system32\{ADABBB2D-C0CC-494A-9136-29C586974568}.exe
del C:\WINDOWS\system32\{7276DD13-2FD1-4573-B172-49C1D8A9CE26}.exe
del C:\WINDOWS\system32\{9022A474-B415-414E-8431-35A66C6FD337}.exe
del C:\WINDOWS\system32\{B6C228B1-D992-4D52-AA8E-AFA8E51314CF}.exe
del C:\WINDOWS\system32\{A91986D9-109C-4C95-A37B-4F6F293CA3CE}.exe
del C:\WINDOWS\system32\{08FFFB5A-83AE-488F-AC9B-AB6FA744BFEF}.exe
del C:\WINDOWS\system32\{6E698958-E431-476D-83E0-EF87682A66F4}.exe
del C:\WINDOWS\system32\{22A72B5E-F337-49E7-B06D-C99F317B1591}.exe
del C:\WINDOWS\system32\{FBA79E85-7BFC-46CD-811C-86CFA210C676}.exe
del C:\WINDOWS\system32\{0152FD87-E51C-4656-A3E7-3331F1BEC51F}.exe
del C:\WINDOWS\system32\{1803146E-BA03-4AF9-BD4E-5726942ADA3E}.exe
del C:\WINDOWS\system32\{BCBFA6C9-A7A0-46EE-BC49-73EE9A6AF572}.exe
del C:\WINDOWS\system32\{C0431263-6723-49D0-BF63-401C848617D2}.exe
del C:\WINDOWS\system32\{6FAFBFEC-109C-43FD-A26B-CD640FA14CE4}.exe
del C:\WINDOWS\system32\{8BF58C2D-F416-4685-A985-D14EE2CD9A75}.exe
del C:\WINDOWS\system32\{62F3F453-8607-47BE-BBF7-38F476058109}.exe
del C:\WINDOWS\system32\{3F2B2358-7799-4B9F-B4D4-2B96386D785A}.exe
del C:\WINDOWS\system32\{40FD0432-B69D-42D6-9069-C9676A7FA4AA}.exe
del C:\WINDOWS\system32\{F3FFCE2C-E806-42F6-AB2E-61AECAFBF92A}.exe
del C:\WINDOWS\system32\{0643CE84-E867-4ADF-9C4A-E41D5D555D07}.exe
del C:\WINDOWS\system32\{86936617-49F3-4FD4-99C5-4D35BEF40FAD}.exe
del C:\WINDOWS\system32\{79CF3215-B924-47A6-ACC6-622F872733E9}.exe
del C:\WINDOWS\system32\{28D4494C-5E87-4E52-A052-CEDD99D8C5C1}.exe
del C:\WINDOWS\system32\{83CAE08A-49B3-49FC-9271-E9BF61DE99A8}.exe
del C:\WINDOWS\system32\{BCAC55F6-DB05-49A6-A306-A1EB6162628C}.exe
del C:\WINDOWS\system32\{75CD6F5F-3680-425E-A322-1E7B6D974B84}.exe
del C:\WINDOWS\system32\{D2FA55AA-68C5-4C56-82C0-D4D0B1E65AF8}.exe
del C:\WINDOWS\system32\{25AD580E-7014-429A-BEB2-A357745DB71C}.exe
del C:\WINDOWS\system32\{FB35E9C5-5655-4C5E-81A5-E025FE5417AA}.exe
del C:\WINDOWS\system32\{9A8E0BDE-AA88-46A0-8FA9-5FF9928FD64B}.exe
del C:\WINDOWS\system32\{211AFBDD-228F-4066-9BB8-A04BCB5BEC93}.exe
del C:\WINDOWS\system32\{0DDEB38F-5947-4A64-B2A0-6A93C33B8F13}.exe
del C:\WINDOWS\system32\{8360DE40-3283-4AE2-A29F-DFCE68369823}.exe
del C:\WINDOWS\system32\{A0A20D20-62A3-4BD7-9C75-5A592FCD34AC}.exe
del C:\WINDOWS\system32\{B25C7B2A-BE7F-435D-9D37-006D58603A9A}.exe
del C:\WINDOWS\system32\{B019ED19-BADE-48D8-8B02-0F50FC9197CE}.exe
del C:\WINDOWS\system32\{85021232-7662-4B82-8B02-6E27349892D3}.exe
del C:\WINDOWS\system32\{11167658-FBDA-4D2C-91F4-2405B3DD52D3}.exe
del C:\WINDOWS\system32\{5891C969-B467-42E0-B8C6-1CA6045BCAFC}.exe
del C:\WINDOWS\system32\{75573D1E-0353-4FD7-A54C-AFEED4880AA6}.exe
del C:\WINDOWS\system32\{379CD300-A2E7-4B8E-A4D9-6B825CFB88CE}.exe
del C:\WINDOWS\system32\{30DD0014-C2B4-49C5-9E39-48E8E0D3C08C}.exe
del C:\WINDOWS\system32\{1CADAEFA-ADF5-4FDD-A3F2-6823A25CEDD1}.exe
del C:\WINDOWS\system32\{CF13A0C4-6D75-4FA8-9348-C61EFBB437F4}.exe
del C:\WINDOWS\system32\{8A5BA4AF-58AF-41D1-A12A-9A51EA24AA37}.exe
del C:\WINDOWS\system32\{BCC2DDA5-312D-41BC-B693-9E2D4E717B62}.exe
del C:\WINDOWS\system32\{43468F64-2104-4783-A703-FCBE4E93A9AD}.exe
del C:\WINDOWS\system32\{081095CC-A786-4AA4-A8B4-C9750B9F99A4}.exe
del C:\WINDOWS\system32\{250D32A0-2564-445E-A978-292F4855AAB8}.exe
del C:\WINDOWS\system32\{4167CE14-5F63-488A-89DB-EE3C1763C12B}.exe
del C:\WINDOWS\system32\{9CDF4FAA-2ACA-4642-B608-A9EBD0FDCB0C}.exe
del C:\WINDOWS\system32\{1AB7BC10-1699-4878-8258-C848C1C2B96A}.exe
del C:\WINDOWS\system32\{CB817C34-9FC3-458A-ABA1-D7F829C77662}.exe
del C:\WINDOWS\system32\{6759763C-BED0-44D0-AA37-53A07B7E286D}.exe
del C:\WINDOWS\system32\{182BFB26-BD92-4F8E-B70A-0BF10E109A2D}.exe
del C:\WINDOWS\system32\{7AA5755D-55B0-4B58-909D-F9B855AD680B}.exe
del C:\WINDOWS\system32\{87BEC384-6F3B-4C76-9998-89026376CC3A}.exe
del C:\WINDOWS\system32\{946DD32B-79A4-42C7-9C32-49A50D5ADB60}.exe
del C:\WINDOWS\system32\{C0983F7C-5451-40B9-B06E-D1A5835DC47A}.exe
del C:\WINDOWS\system32\{9F2B7E21-39EC-47E2-89C6-80C364E5F0EC}.exe
del C:\WINDOWS\system32\{1887B566-9DEC-4B6B-B386-FC3C716B7D8E}.exe
del C:\WINDOWS\system32\{23020FFF-C2A1-4731-ADDD-1D5C80AA7429}.exe
del C:\WINDOWS\system32\{44CAFCA0-8CA3-425F-8D7B-ED8E99114624}.exe
del C:\WINDOWS\system32\{99DE0EBD-67F8-4F8B-9C65-B3A69FD0236C}.exe
del C:\WINDOWS\system32\{BCD778E5-7413-4542-8E01-1486E8885716}.exe
del C:\WINDOWS\system32\{82CCE5CC-66F6-40AD-BDBE-5DD1D7B1EAB5}.exe
del C:\WINDOWS\system32\{932ED7E3-81BE-457A-9204-F6E86028B78F}.exe
del C:\WINDOWS\system32\{BEA10217-3DF0-45D2-883D-A350D307D35F}.exe
del C:\WINDOWS\system32\{C441EF15-240D-4C3A-876D-BD5721F90A03}.exe
del C:\WINDOWS\system32\{4264C0EC-B101-44B0-9DC8-ACD64E64AEEC}.exe
del C:\WINDOWS\system32\{BDF4F6BC-EE1F-404A-BA38-504B350574F7}.exe
del C:\WINDOWS\system32\{CEB1476A-A610-4A9E-8F11-D6255A7027B7}.exe
del C:\WINDOWS\system32\{CEA6256D-2565-4A61-AA25-EEB90D4F0CEF}.exe
del C:\WINDOWS\system32\{A5C9E889-A37F-4046-89EA-4787E28EB770}.exe
del C:\WINDOWS\system32\{C761CF2C-9204-4E30-B1C7-B4C99616C88B}.exe
del C:\WINDOWS\system32\{4C3CA89B-ABDC-4774-847A-3279ED4BE35F}.exe
del C:\WINDOWS\system32\{3DA48A9F-6D44-40E1-8323-27FA095D8C13}.exe
del C:\WINDOWS\system32\{1D765F7B-5D11-4044-B6E3-666983ED777C}.exe
del C:\WINDOWS\system32\{F4E5CF59-F934-4E1C-ABBA-77C56F7FE0AF}.exe
del C:\WINDOWS\system32\{2275A499-CF63-4A68-B97D-070895AF1128}.exe
del C:\WINDOWS\system32\{2BDF866B-168F-45AB-9586-0D54518DBD15}.exe
del C:\WINDOWS\system32\{B0381994-C865-4C18-B1B3-3FF3E24A40F8}.exe
del C:\WINDOWS\system32\{4B2F2B2D-A6C1-4A99-9998-41018E569564}.exe
del C:\WINDOWS\system32\{1697679E-65FF-49AE-9981-10A9EEB45ECA}.exe
del C:\WINDOWS\system32\{B6951CCB-5CDD-45EB-B9D4-63E8625BCE12}.exe
del C:\WINDOWS\system32\{A39D9B29-9B26-49AC-9F63-9CD6544D8332}.exe
del C:\WINDOWS\system32\{3C9426F8-625C-43C3-B9EB-E87515CCE33F}.exe
del C:\WINDOWS\system32\{42F0837B-3CDC-47C3-B450-39835ECBBFC2}.exe
del C:\WINDOWS\system32\{D0DD3CB5-3895-4797-8C49-5E5572928B3C}.exe
del C:\WINDOWS\system32\{9E56385A-28E0-4BB5-A6FD-EC76835B2A65}.exe
del C:\WINDOWS\system32\{222BE08C-5519-4F7D-92BA-FE0F7874B12D}.exe

Save it to your desktop as ff2.bat

Browse to your desktop and double-click ff.bat, then double-click ff2.bat,

Browse to c:\fixwareout and double-click Fixit.bat

This will start Fixwareout again.

After the reboot, post:

1. The fixwareout report

2. A new HijackThis! log

Into this thread.

Sounds good!

Logfile of HijackThis v1.99.1
Scan saved at 5:41:24 PM, on 9/11/2006
Platform: Windows XP SP1 (WinNT 5.01.2600)
MSIE: Internet Explorer v6.00 SP1 (6.00.2800.1106)

Running processes:
C:\WINDOWS\System32\smss.exe
C:\WINDOWS\system32\winlogon.exe
C:\WINDOWS\system32\services.exe
C:\WINDOWS\system32\lsass.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\System32\svchost.exe
C:\WINDOWS\Explorer.EXE
C:\WINDOWS\system32\spoolsv.exe
C:\PROGRA~1\Grisoft\AVGFRE~1\avgamsvr.exe
C:\PROGRA~1\Grisoft\AVGFRE~1\avgupsvc.exe
C:\WINDOWS\System32\svchost.exe
C:\WINDOWS\System32\wuauclt.exe
C:\WINDOWS\System32\hkcmd.exe
C:\WINDOWS\BCMSMMSG.exe
C:\WINDOWS\System32\wuauclt.exe
C:\Program Files\Common Files\Real\Update_OB\realsched.exe
C:\Program Files\Google\Gmail Notifier\G001-1.0.25.0\gnotify.exe
C:\PROGRA~1\Grisoft\AVGFRE~1\avgcc.exe
C:\PROGRA~1\Grisoft\AVGFRE~1\avgemc.exe
C:\Program Files\Roxio\Easy CD Creator 5\DirectCD\DirectCD.exe
C:\Program Files\iTunes\iTunesHelper.exe
C:\Program Files\QuickTime\qttask.exe
C:\Program Files\iPod\bin\iPodService.exe
C:\Program Files\Support.com\bin\tgcmd.exe
C:\Program Files\Adobe\Acrobat 7.0\Reader\reader_sl.exe
C:\Program Files\FinePixViewer\QuickDCF.exe
C:\Program Files\Internet Explorer\iexplore.exe
C:\HijackThis\HijackThis.exe

R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = http://google.com
R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Window Title = Microsoft Internet Explorer presented by Comcast
O2 - BHO: Google Toolbar Helper - {AA58ED58-01DD-4d91-8333-CF10577473F7} - c:\program files\google\googletoolbar1.dll
O3 - Toolbar: &Radio - {8E718888-423F-11D2-876E-00A0C9082467} - C:\WINDOWS\System32\msdxm.ocx
O3 - Toolbar: &Google - {2318C2B1-4965-11d4-9B18-009027A5CD4F} - c:\program files\google\googletoolbar1.dll
O4 - HKLM\..\Run: [IgfxTray] C:\WINDOWS\System32\igfxtray.exe
O4 - HKLM\..\Run: [HotKeysCmds] C:\WINDOWS\System32\hkcmd.exe
O4 - HKLM\..\Run: [BCMSMMSG] BCMSMMSG.exe
O4 - HKLM\..\Run: [TkBellExe] "C:\Program Files\Common Files\Real\Update_OB\realsched.exe" -osboot
O4 - HKLM\..\Run: [{0228e555-4f9c-4e35-a3ec-b109a192b4c2}] C:\Program Files\Google\Gmail Notifier\G001-1.0.25.0\gnotify.exe
O4 - HKLM\..\Run: [AVG7_CC] C:\PROGRA~1\Grisoft\AVGFRE~1\avgcc.exe /STARTUP
O4 - HKLM\..\Run: [AVG7_EMC] C:\PROGRA~1\Grisoft\AVGFRE~1\avgemc.exe
O4 - HKLM\..\Run: [AdaptecDirectCD] C:\Program Files\Roxio\Easy CD Creator 5\DirectCD\DirectCD.exe
O4 - HKLM\..\Run: [iTunesHelper] "C:\Program Files\iTunes\iTunesHelper.exe"
O4 - HKLM\..\Run: [QuickTime Task] "C:\Program Files\QuickTime\qttask.exe" -atboottime
O4 - HKLM\..\Run: [tgcmd] C:\Program Files\Support.com\bin\tgcmd.exe /server /startmonitor /deaf
O4 - HKLM\..\Run: [REGSHAVE] C:\Program Files\REGSHAVE\REGSHAVE.EXE /AUTORUN
O4 - HKCU\..\Run: [MsnMsgr] "C:\Program Files\MSN Messenger\MsnMsgr.Exe" /background
O4 - Global Startup: Adobe Reader Speed Launch.lnk = C:\Program Files\Adobe\Acrobat 7.0\Reader\reader_sl.exe
O4 - Global Startup: Exif Launcher.lnk = ?
O8 - Extra context menu item: &Google Search - res://c:\program files\google\GoogleToolbar1.dll/cmsearch.html
O8 - Extra context menu item: &Translate English Word - res://c:\program files\google\GoogleToolbar1.dll/cmwordtrans.html
O8 - Extra context menu item: Backward Links - res://c:\program files\google\GoogleToolbar1.dll/cmbacklinks.html
O8 - Extra context menu item: Cached Snapshot of Page - res://c:\program files\google\GoogleToolbar1.dll/cmcache.html
O8 - Extra context menu item: E&xport to Microsoft Excel - res://C:\PROGRA~1\MICROS~2\OFFICE11\EXCEL.EXE/3000
O8 - Extra context menu item: Similar Pages - res://c:\program files\google\GoogleToolbar1.dll/cmsimilar.html
O8 - Extra context menu item: Translate Page into English - res://c:\program files\google\GoogleToolbar1.dll/cmtrans.html
O9 - Extra button: Research - {92780B25-18CC-41C8-B9BE-3C9C571A8263} - C:\PROGRA~1\MICROS~2\OFFICE11\REFIEBAR.DLL
O9 - Extra button: Real.com - {CD67F990-D8E9-11d2-98FE-00C0F0318AFE} - C:\WINDOWS\System32\shdocvw.dll
O9 - Extra button: Microsoft AntiSpyware helper - {226DA26B-68D9-4930-A6E1-1D659C7A54AB} - (no file) (HKCU)
O9 - Extra 'Tools' menuitem: Microsoft AntiSpyware helper - {226DA26B-68D9-4930-A6E1-1D659C7A54AB} - (no file) (HKCU)
O12 - Plugin for .mid: C:\Program Files\Internet Explorer\PLUGINS\npqtplugin2.dll
O12 - Plugin for .wav: C:\Program Files\Internet Explorer\PLUGINS\npqtplugin2.dll
O16 - DPF: ppctlcab - http://www.pestscan.com/scanner/ppctlcab.cab
O16 - DPF: Yahoo! Literati - http://download.games.yahoo.com/games/clients/y/tt3_x.cab
O16 - DPF: {1239CC52-59EF-4DFA-8C61-90FFA846DF7E} (Musicnotes Viewer) - http://www.musicnotes.com/download/mnviewer.cab
O16 - DPF: {2FC9A21E-2069-4E47-8235-36318989DB13} - http://www.pestscan.com/scanner/axscanner.cab
O16 - DPF: {62475759-9E84-458E-A1AB-5D2C442ADFDE} - http://a1540.g.akamai.net/7/1540/52/200404…meInstaller.exe
O16 - DPF: {74D05D43-3236-11D4-BDCD-00C04F9A3B61} - http://a840.g.akamai.net/7/840/537/2004061…all/xscan53.cab
O16 - DPF: {A8683C98-5341-421B-B23C-8514C05354F1} (FujifilmUploader Class) - http://photo.walmart.com/photo/uploads/Fuj…ploadClient.cab
O20 - Winlogon Notify: igfxcui - C:\WINDOWS\SYSTEM32\igfxsrvc.dll
O23 - Service: AVG7 Alert Manager Server (Avg7Alrt) - GRISOFT, s.r.o. - C:\PROGRA~1\Grisoft\AVGFRE~1\avgamsvr.exe
O23 - Service: AVG7 Update Service (Avg7UpdSvc) - GRISOFT, s.r.o. - C:\PROGRA~1\Grisoft\AVGFRE~1\avgupsvc.exe
O23 - Service: InstallDriver Table Manager (IDriverT) - Macrovision Corporation - C:\Program Files\Common Files\InstallShield\Driver\11\Intel 32\IDriverT.exe
O23 - Service: iPodService - Apple Computer, Inc. - C:\Program Files\iPod\bin\iPodService.exe
O23 - Service: McAfee.com McShield (McShield) - Unknown owner - c:\PROGRA~1\mcafee.com\vso\mcshield.exe
O23 - Service: McAfee.com VirusScan Online Realtime Engine (MCVSRte) - Mcafee.com Corporation - c:\PROGRA~1\mcafee.com\vso\mcvsrte.exe



Fixwareout ver 1.003
Last edited 8/11/2006
Post this report in the forums please

Reg Entries that were deleted
…

Microsoft ® Windows Script Host Version 5.6
Random Runs removed from HKLM
…

PLEASE NOTE, There WILL be LEGITIMATE FILES LISTED. IF YOU ARE UNSURE OF WHAT IT IS LEAVE THEM ALONE.

»»»»» Searching by size/names…

»»»»»
Search five digit cs, dm and jb files.
This WILL/CAN also list Legit Files, Submit them at Virustotal

Other suspects.
Directory of C:\WINDOWS\system32

»»»»» Misc files.

»»»»» Checking for older varients covered by the Rem3 tool.