Elamb Cybersecurity

Category: Malware/Malware Removal

How to get rid of SpySheriff:

“I have a malware infection on my laptop, i go into safe mode and look into
the files and the virus file comes up as spysheriff with an icon.”

How do i get rid of it?
Is it easy to get rid of?
How did i come accross it?

*******************************************************

How to get rid of it?

Check out my site:

http://elamb.blogharbor.com/hacked/removespysheriff.htm

If you have already, try this:

http://www.bleepingcomputer.com/forums/How_to_remove_SpySheriff_Winstallexe_Spysheriffexe-t22402.html

The Easiest Way to get rid of it:
Another way you may be able to remove it is to do a system restore:

http://www.elamb.org/hacked/systemerror384.htm

This is what I had to do because I had stuff going on even in Safe Mode.

How did I get it?
I was surfing some serial/crack/warez sites. They are absolutely
INFESTED with malware. Some porn sites are bad, but warez sites seem to
be the worst.

On way to Prevent it is to use FireFox:
See top of this blog.

February 10, 2006
Detected Spyware! System error #384

This is a bogus error screen that replaces your browser's home page. The message Reads:

Detected Spyware! System error #384

Your IP address is XX.XXX.XX.XX. Using this address a remote computer has gained access to your computer and probably is collecting the information about the sites you've visited and the files contained in the folder Temporary Internet Files. Attention! Ask for help of install the software for deleting secret information about the sites you visited.

You computer is full of evidences!

More than likely, this message is just the tip of the iceberg. Using simple intrusion detection tools you will see that your system has scores of viruses, trojans, worms and other malware installed on it. The message is trying to get you to purchase some scamware.

How to remove the “Detected Spyware! System error #384” message and all the malware on your system?

There are actually a few relatively easy ways for removing this malware:

USE FREE (LEGITIMATE) ANTI-SPYWARE

PERFORM A SYSTEM RESTORE

COMPLETELY RE-INSTALL WINDOWS (self explanatory, and complete overkill unless you have rootkit on your system or something crazy like that.)

READ MORE HERE…

February 5, 2006
Warning! Spyware detected on your computer!

LOOK, MA. NO SECURITY!

Ever get one of these bad boys!?

Warning! Spyware detected on your computer!
Install an antivirus or spyware remover to clean your computer
View the list of top spyware removers here.

Take a guess where this link on my desktop leads.

February 2, 2006
"Windows has detected spyware infection!"

Want to know how to get rid of the “Windows has detected spyware infection!“

“Your computer is infected! [tag]Windows has detected spyware infection[/tag]!
It is recommended to use special antispyware tools to prevent data loss Windows
will now download the most up to date antispyware for you.
Click here to protect your computer from [tag]spyware[/tag]!”

Here is how to delete that annoying “computer is infected” message.

If your seeing this message your system really is infected with some [tag]malware[/tag] (virus, trojan, spyware) and that message you see is a part of the malware. This type of malware typically is trying to get you to purchase a product to clean your system. When you click on the link they provide, it takes you to the very source of the malware on your system. It is supposed to look like some of the Window system messages you can get about updates. DON’T fall for it.

DO NOT GIVE THESE PEOPLE YOUR CREDIT CARD INFORMATION!

This page will give your more information on what it is and how to get rid of it.

December 13, 2005
Spy Sheriff Removal

I was doing some testing on my Windows XP system surfing about some
sites of “ill repute” with IE6 and got hit with something called Spy
Sheriff.

Spy Sheriff is like a watered down version of PS Guard or Smithfaud. Like PS
Guard, Spy Sheriff claims to want to remove all the malware it infects
you system with. Both of these horrible bits of malicious code
are what I like to call scareware. The get loaded on to your
system along with about 100 other viruses, worms and trojans and take
over you desktop with a message like “Spyware Infection”. The
application then “scans” your system. And tells you that you must
activate the Spy Sheriff or PS Guard in order to clean your
system. When attempt to remove Spy Sheriff using Add/Remove programs, it simply adds itself again once you reboot.

In the background, all the malware they loaded on your system are
collecting data and send status report to a parts of the world.
The scareware will usually make sure you know this to convince you to
buy their product. DO NOT GIVE THEM YOUR CREDIT CARD INFO!

Here is how to remove Spy Sheriff.

December 8, 2005
PS Guard Removal

PS Guard is viscious scareware that loads itself each time you attempt
to unistall it. It is malware that claims to be malware
remover. It disables your Task Manager, informs you that your
system is infected and doesn't allow you to exit from it while it scans
your computer for viruses.

Removing PS Guard
it is a bit tricky. Adaware and Hijack this will do nothing to
remove it. Noahdfear over at GeekstoGo.com wrote a sweet little
script to remove it called smitrem. It does the trick in removing PS Guard.

I picked it up at some Russian warez site on my Honeypot sytem.

October 17, 2005
5 Simple ways to keep your computer secure and virus free

These simple tips will help you stay virus and spyware free, even if you're connected to the internet 24 hours a day.

1. Protect yourself

Good protection on the Internet these days consists of 3 components: anti-virus software, anti-spyware software and a firewall.

Good virus protection doesn't need to cost you a fortune. You can get excellent free anti-virus software at www.grisoft.com. Even the professional version of their software is very affordable.

For spyware protection, go to www.lavasoft.de and download Ad-Aware SE Personal, also free. This will zap the most common spyware and adware found on the Internet.

As for a firewall, Windows XP ships with a decent enough firewall. Just make sure it is always enabled. Alternatively you can visit a site like www.download.com and search for Zone Alarm, which has an excellent free version.

The most important thing to keep in mind is that you need to keep your anti-virus software up to date. An anti-virus program that uses definitions that are months old is just about useless.

Update your anti-virus and anti-spyware software at least once a week.

2. Stop opening every attachment you receive.

Most of the devastating worms and viruses of recent times were distributed via email. These viruses feed on the curiosity and also the ignorance of a huge number of email users. People will get an email from fakename@weirdsuspiciousdomain and they'll just open whatever file is attached to it.

If you don't know the sender, don't open the attachment – just delete it. It doesn't matter if the subject promises you'll see Britney Spears dancing nude on the kitchen table, just delete it.

If the email is from someone you know, always scan any attachments first before downloading or opening them.

If every email user in the world followed these simple guidelines the distribution of viruses via email will grind to a halt.

3. Stay clear of pornographic and illegal software sites

*I know, I know… Why on earth go on the Internet if you can't have your porn and download it too?! There are safe Porn sites but we will not address those in this blog… sorry.. Fark has some pretty good links to decent smutt.*

If you want to pick up viruses and spyware quickly, visit some pornographic web sites. One wrong click on a subtle little pop-up or security warning window (which you'll run into often on these type of sites) and you'll have infested yourself with trojan horses, spyware, dialers and other unfavorable software that could leave your computer wide open to further attacks.

The same goes for web sites distributing software, serial codes and cracks illegally (warez).

Simply put – keep out of the dark side of the web and the odds of keeping your computer clean shifts decidedly in your favor.

4. Watch out what you download

Spyware is embedded in a lot of software on the Internet – especially those related to ripping, converting and playing music and videos. That free MP3 player or DVD Ripper you just downloaded may have installed a bunch of harmful spyware without you even knowing about it.

5. Keep yourself informed

Major anti-virus software developers like Symantec and Grisoft updates their sites regularly with the latest virus alerts. Visit these sites frequently to keep yourself aware of what threats are doing the rounds and how to avoid them.

Using these simple and software I have kept my computer virus-free for the past 3 years. It's not rocket science. Just stay alert, use some common sense and you too can stay bug free while still enjoying your Internet experience.

Tips on Broadband Security –>

http://elamb.blogharbor.com/blog/BroadbandInternetSecurity

Get rid of Trojans Smithfraud/HWclock.exe

August 2, 2005
Insecurity at Black Hat: antivirus vulnerabilities

This is the reason I manually remove many of the viruses that I've gotten. For one thing they sometimes don't recognize the virus and until the anti virus software creators update the signature file and for another thing experts are warning that the popularity of antivirus software could turn the defensive measure into a security risk.

read more | digg story

July 27, 2005
Finding Anit Virus, Anti Spyware Resources

The whole arena of spyware intrusion is extremely fluid with the
spyware writers trying to outsmart everyone, and the software
protection writers diligently working to keep up with the hundreds of
new worms and viruses appearing nearly every day.

Fortunately, there are generous individuals and organizations who
have the facilities to review the work of the Anti-spyware developers
and make the results available for all of us everyday users of the
Internet.

The challenge for us is to know where to go for these results and
recommendations, and to know which of the anti-spyware and anti-virus
programs to use on our computers.

There are many web masters, newsletter, and Blog publishers who
constantly monitor the results published by the anti-spyware reviewers.
Most of them pass these information alerts on to their readers and
subscribers, often offering suggestions and advice based on their own
personal experiences and expertise.

A real benefit for us is that most of the top rated anti-spyware
and anti-virus programs are free, or available in Trial or Demo
versions.

All we need do is find out where to get them. But first, we need to find the reviewers who post the alerts.

If subscribing to newsletters and Blogs isn't your usual surfing
activity, you can do a search for security alert newsletters or
security alert blogs. For example, do a Yahoo search for “security
alert newsletter” (use the quotation marks to get the most appropriate
search results). Do the same for a Yahoo or Google search on “virus alert blog”. (Blogs are web logs).

Investigate the first and second pages of the search results and
select three or four of the listings as a starting point. Many
newsletters are published on a monthly schedule and may not contain the
most current information. Some are published weekly. They may be better
choices.

Blogs are usually much more current since Blog authors often post
their information every couple of days – some even on a daily basis.

Blogs are riding a major wave of popularity. For the serious
searchers of current information, this is a great benefit. There aren't
as many Blog sites as web sites yet, so it's often much easier to find
the information you're looking for.

Many Blog authors make their publications available for RSS (Real
Simple Syndication) readers. If you have added a RSS reader to your
browser, you can get up-to-the-minute alerts presented to you
automatically. You don't need to go looking for them.

Many updated browsers, like Netscape 8 and Firefox include this
feature as part of their package. Expect the newest Internet Explorer
to have a RSS Reader, too.

Don't be overwhelmed by all of the information you get. After doing
these searches and reviews once or twice, it will be a simple task to
select what you need to keep yourself current.

For starters, it is generally accepted practice to select and use
at least two anti-spyware programs. Choose from among the two or three
that receive the highest recommendations and ratings from the
newsletter and Blog authors. Be especially watchful for and select one
of those programs that provides 'Real Time' monitoring. (Which means
that they monitor and catch any incoming bugs that may try to infect
your machine while you are online).

Downloading instructions are nearly always present with the
reviews. If not, you'll find sites like c|net.com to be a good source
for download links.

Just don't forget to check for and update your security software. The spyware writers won't give you a break if you do.

July 24, 2005
What a Virus looks like on Hijackthis

My buddy got some crazy virus that nuked his system. Hijackthis
could remove all this, but I've decided to wipe his system and start
from scratch.

Typically, you should not use Hijackthis unless you know what you are doing. Here is a tutorial on Hijackthis.

But if you have this kind of situation, you could easily see which items to delete.

/Start of LOG/

Logfile of HijackThis v1.97.7
Scan saved at 9:24:24 PM, on 6/4/2005
Platform: Windows XP SP2 (WinNT 5.01.2600)
MSIE: Internet Explorer v6.00 SP2 (6.00.2900.2180)

Running processes:
C:\WINDOWS\System32\smss.exe
C:\WINDOWS\system32\winlogon.exe
C:\WINDOWS\system32\services.exe
C:\WINDOWS\system32\lsass.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\Explorer.EXE
C:\Documents and Settingsxxxxxxx\Desktop\HijackThis.exe

R1 – HKCU\Software\Microsoft\Internet Explorer\Main,Search Bar = http://w-find.com/sp.htm
R1 – HKCU\Software\Microsoft\Internet Explorer\Main,Search Page = http://w-find.com/index.htm
R0 – HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = http://w-find.com/index.htm
R1 – HKCU\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = http://www.dell4me.com/myway
R0 – HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = http://www.dell4me.com/myway
R1 – HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = http://www.dell4me.com/myway
R0 – HKLM\Software\Microsoft\Internet Explorer\Search,CustomizeSearch =
R0 – HKLM\Software\Microsoft\Internet Explorer\Search,SearchAssistant = http://www.websearch.com/ie.aspx?tb_id=50141
R1 – HKCU\Software\Microsoft\Internet Explorer\SearchURL,(Default) = http://w-find.com/index.htm
R1 – HKCU\Software\Microsoft\Internet Explorer\Main,Start Page_bak = http://www.windowws.cc/hp.htm?id=632
R1 – HKLM\Software\Microsoft\Internet Explorer\Main,SearchAssistant = http://www.websearch.com/ie.aspx?tb_id=50141
R3 – URLSearchHook: (no name) – {87766247-311C-43B4-8499-3D5FEC94A183} – C:\PROGRA~1\COMMON~1\WinTools\WToolsB.dll
O2 – BHO: (no name) – {01F44A8A-8C97-4325-A378-76E68DC4AB2E} – C:\WINDOWS\systb.dll
O2 – BHO: (no name) – {02478D38-C3F9-4efb-9B51-7695ECA05670} – C:\PROGRA~1\Yahoo!\COMPAN~1\Installs\cpn\ycomp5_5_7_0.dll
O2 – BHO: (no name) – {12EE7A5E-0674-42f9-A76A-000000004D00} – C:\WINDOWS\System32\stlb2.dll
O2 – BHO: (no name) – {7CD20E91-1F31-41da-8379-479EA31DF969} – c:\Program Files\XML\XML.dll
O2 – BHO: (no name) – {87766247-311C-43B4-8499-3D5FEC94A183} – C:\PROGRA~1\COMMON~1\WinTools\WToolsB.dll
O2 – BHO: (no name) – {AA58ED58-01DD-4d91-8333-CF10577473F7} – c:\program files\google\googletoolbar2.dll
O2 – BHO: (no name) – {CD231011-8FD9-8B23-D73B-F94DF3F378BF} – C:\WINDOWS\System32\bglncgy.dll
O3 – Toolbar: McAfee VirusScan – {BA52B914-B692-46c4-B683-905236F6F655} – c:\progra~1\mcafee.com\vso\mcvsshl.dll
O3 – Toolbar: &Google – {2318C2B1-4965-11d4-9B18-009027A5CD4F} – c:\program files\google\googletoolbar2.dll
O3 – Toolbar: &Yahoo! Companion –
{EF99BD32-C1FB-11D2-892F-0090271D4F88} –
C:\PROGRA~1\Yahoo!\COMPAN~1\Installs\cpn\ycomp5_5_7_0.dll
O3 – Toolbar: Search – {12EE7A5E-0674-42f9-A76B-000000004D00} – C:\WINDOWS\System32\stlb2.dll
O3 – Toolbar: (no name) – {BDF6CE3D-F5C5-4462-9814-3C8EAC330CA8} – (no file)
O3 – Toolbar: (no name) – {2CDE1A7D-A478-4291-BF31-E1B4C16F92EB} – (no file)
O3 – Toolbar: AOL Toolbar – {4982D40A-C53B-4615-B15B-B5B5E98D167C} – C:\Program Files\AOL Toolbar\toolbar.dll
O4 – HKLM\..\Run: [HotKeysCmds] C:\WINDOWS\System32\hkcmd.exe
O4 – HKLM\..\Run: [IntelMeM] C:\Program Files\Intel\Modem Event Monitor\IntelMEM.exe
O4 – HKLM\..\Run: [dla] C:\WINDOWS\system32\dla\tfswctrl.exe
O4 – HKLM\..\Run: [PCMService] “C:\Program Files\Dell\Media Experience\PCMService.exe”
O4 – HKLM\..\Run: [mmtask] c:\Program Files\MusicMatch\MusicMatch Jukebox\mmtask.exe
O4 – HKLM\..\Run: [DwlClient] C:\Program Files\Common Files\Dell\EUSW\Support.exe
O4 – HKLM\..\Run: [Dell AIO Printer A940] “C:\Program Files\Dell AIO Printer A940\dlbabmgr.exe”
O4 – HKLM\..\Run: [eynvcahimk] C:\WINDOWS\System32\hvrpyxes.exe
O4 – HKLM\..\Run: [TkBellExe] “C:\Program Files\Common Files\Real\Update_OB\realsched.exe” -osboot
O4 – HKLM\..\Run: [{12EE7A5E-0674-42f9-A76B-000000004D00}] rundll32.exe stlb2.dll,DllRunMain
O4 – HKLM\..\Run: [A70F6A1D-0195-42a2-934C-D8AC0F7C08EB] rundll32.exe E6F1873B.DLL,D9EBC318C
O4 – HKLM\..\Run: [P2P Networking] C:\WINDOWS\System32\P2P Networking\P2P Networking.exe /AUTOSTART
O4 – HKLM\..\Run: [Spyware remover] C:\WINDOWS\Remove_spyware.exe
O4 – HKLM\..\Run: [Breg] “C:\Program Files\Common Files\Java\breg.exe”
O4 – HKLM\..\Run: [Dvx] C:\WINDOWS\System32\wsxsvc\wsxsvc.exe
O4 – HKLM\..\Run: [vmss] C:\WINDOWS\System32\vmss\vmss.exe
O4 – HKLM\..\Run: [98D0CE0C16B1] rundll32.exe D0CE0C16B1,D0CE0C16B1
O4 – HKLM\..\Run: [QuickTime Task] “C:\Program Files\QuickTime\qttask.exe” -atboottime
O4 – HKLM\..\Run: [AOL Spyware Protection] “C:\PROGRA~1\COMMON~1\AOL\AOLSPY~1\AOLSP Scheduler.exe”
O4 – HKLM\..\Run: [AOLDialer] C:\Program Files\Common Files\AOL\ACS\AOLDial.exe
O4 – HKLM\..\Run: [Pure Networks Port Magic] “C:\PROGRA~1\PURENE~1\PORTMA~1\PortAOL.exe” -Run
O4 – HKLM\..\Run: [Agent Messenger] C:\WINDOWS\system32\netaimsg.exe
O4 – HKLM\..\Run: [Windows Task Manager] c:\windows\system32\taskmg.exe
O4 – HKLM\..\Run: [Player Explorer] C:\WINDOWS\system32\upnpfgnt.exe
O4 – HKLM\..\Run: [WinTools] C:\PROGRA~1\COMMON~1\WinTools\WToolsA.exe
O4 – HKLM\..\Run: [BTV] C:\Program Files\BTV\btv.exe
O4 – HKCU\..\Run: [jopa] C:\WINDOWS\System32\sysstartup.exe
O4 – HKCU\..\Run: [uninstal] regsvr32 /u /s image.dll
O4 – HKCU\..\Run: [PopUpStopperFreeEdition] “D:\Pop-Up Stopper Free Edition\PSFree.exe”
O4 – HKCU\..\Run: [Yahoo! Pager] C:\Program Files\Yahoo!\Messenger\ypager.exe -quiet
O4 – HKCU\..\Run: [MSMSGS] “C:\Program Files\Messenger\msmsgs.exe” /background
O4 – HKCU\..\Run: [Aida] C:\Documents and Settings\xxxxxxs\Application Data\eetu.exe
O4 – HKCU\..\Run: [Codm] C:\WINDOWS\System32\w?auclt.exe
O4 – HKCU\..\Run: [kvuiulm] c:\windows\okmkbem.exe
O4 – HKCU\..\Run: [WindowsFY] c:\wp.exe
O4 – HKCU\..\Run: [ihitlwq] c:\windows\okmkbem.exe
O4 – HKCU\..\Run: [ldbxlgl] c:\windows\okmkbem.exe
O4 – HKCU\..\Run: [udlehdl] c:\windows\okmkbem.exe
O4 – HKCU\..\Run: [uoedtft] c:\windows\okmkbem.exe
O4 – HKCU\..\Run: [evlalkp] c:\windows\okmkbem.exe
O4 – HKCU\..\Run: [sjjrwjx] c:\windows\okmkbem.exe
O4 – HKCU\..\Run: [pdtvhkd] c:\windows\okmkbem.exe
O4 – HKCU\..\Run: [fwrgrct] c:\windows\okmkbem.exe
O4 – HKCU\..\Run: [qsdyslc] c:\windows\okmkbem.exe
O4 – HKCU\..\Run: [aaybuvj] c:\windows\okmkbem.exe
O4 – HKCU\..\Run: [jgyjpix] c:\windows\okmkbem.exe
O4 – HKCU\..\Run: [hygmbrw] c:\windows\okmkbem.exe
O4 – HKCU\..\Run: [wehewbp] c:\windows\okmkbem.exe
O4 – HKCU\..\Run: [vnlvrxc] c:\windows\okmkbem.exe
O4 – HKCU\..\Run: [floooap] c:\windows\okmkbem.exe
O4 – HKCU\..\Run: [mgkfpbv] c:\windows\okmkbem.exe
O4 – HKCU\..\Run: [lvnkqvy] c:\windows\okmkbem.exe
O4 – HKCU\..\Run: [dteaidf] c:\windows\okmkbem.exe
O4 – HKCU\..\Run: [drijnnm] c:\windows\okmkbem.exe
O4 – HKCU\..\Run: [obpitds] c:\windows\okmkbem.exe
O4 – HKCU\..\Run: [degnopr] c:\windows\okmkbem.exe
O4 – HKCU\..\Run: [etmmtmy] c:\windows\okmkbem.exe
O4 – HKCU\..\Run: [okjvkgo] c:\windows\okmkbem.exe
O4 – HKCU\..\Run: [jvnjngk] c:\windows\okmkbem.exe
O4 – HKCU\..\Run: [ltwqurd] c:\windows\okmkbem.exe
O4 – HKCU\..\Run: [awbftdt] c:\windows\okmkbem.exe
O4 – HKCU\..\Run: [dbmfpju] c:\windows\okmkbem.exe
O4 – HKCU\..\Run: [ktxcwmm] c:\windows\okmkbem.exe
O4 – HKCU\..\Run: [owdsokp] c:\windows\okmkbem.exe
O4 – HKCU\..\Run: [ijsxppm] c:\windows\okmkbem.exe
O4 – HKCU\..\Run: [khgqnff] c:\windows\okmkbem.exe
O4 – HKCU\..\Run: [rdeutao] c:\windows\okmkbem.exe
O4 – HKCU\..\Run: [vwavbpq] c:\windows\okmkbem.exe
O4 – HKCU\..\Run: [bvcisnp] c:\windows\okmkbem.exe
O4 – HKCU\..\Run: [krfhhud] c:\windows\okmkbem.exe
O4 – HKCU\..\Run: [fqhbquo] c:\windows\okmkbem.exe
O4 – HKCU\..\Run: [mpeaawe] c:\windows\okmkbem.exe
O4 – HKCU\..\Run: [cpjvnrk] c:\windows\okmkbem.exe
O4 – HKCU\..\Run: [nbdcjki] c:\windows\okmkbem.exe
O4 – HKCU\..\Run: [wbdpftr] c:\windows\okmkbem.exe
O4 – HKCU\..\Run: [huyxlgq] c:\windows\okmkbem.exe
O4 – HKCU\..\Run: [xfvpwve] c:\windows\okmkbem.exe
O4 – HKCU\..\Run: [xudynof] c:\windows\okmkbem.exe
O4 – HKCU\..\Run: [cookxmu] c:\windows\okmkbem.exe
O4 – HKCU\..\Run: [ktugikh] c:\windows\okmkbem.exe
O4 – HKCU\..\Run: [kuujywh] c:\windows\okmkbem.exe
O4 – HKCU\..\Run: [nmulcxe] c:\windows\okmkbem.exe
O4 – HKCU\..\Run: [hdqobjn] c:\windows\okmkbem.exe
O4 – HKCU\..\Run: [xmfhghh] c:\windows\okmkbem.exe
O4 – HKCU\..\Run: [loynujq] c:\windows\okmkbem.exe
O4 – HKCU\..\Run: [ngqvcpm] c:\windows\okmkbem.exe
O4 – HKCU\..\Run: [wcafafj] c:\windows\okmkbem.exe
O4 – HKCU\..\Run: [ngybekx] c:\windows\okmkbem.exe
O4 – HKCU\..\Run: [nflyebn] c:\windows\okmkbem.exe
O4 – HKCU\..\Run: [cexbnmt] c:\windows\okmkbem.exe
O4 – HKCU\..\Run: [tjqmdtc] c:\windows\okmkbem.exe
O4 – HKCU\..\Run: [gclcxju] c:\windows\okmkbem.exe
O4 – HKCU\..\Run: [qkdaadd] c:\windows\okmkbem.exe
O4 – HKCU\..\Run: [dtcplqx] c:\windows\okmkbem.exe
O4 – HKCU\..\Run: [cenlmwq] c:\windows\okmkbem.exe
O4 – HKCU\..\Run: [hctoghc] c:\windows\okmkbem.exe
O4 – HKCU\..\Run: [tetmkwj] c:\windows\okmkbem.exe
O4 – HKCU\..\Run: [ukwngco] c:\windows\okmkbem.exe
O4 – HKCU\..\Run: [xgnbnhs] c:\windows\okmkbem.exe
O4 – HKCU\..\Run: [iaubefo] c:\windows\okmkbem.exe
O4 – HKCU\..\Run: [tjelaxm] c:\windows\okmkbem.exe
O4 – HKCU\..\Run: [ntnfsua] c:\windows\okmkbem.exe
O4 – HKCU\..\Run: [yjryqrm] c:\windows\okmkbem.exe
O4 – HKCU\..\Run: [roqprox] c:\windows\okmkbem.exe
O4 – HKCU\..\Run: [tbjgxuv] c:\windows\okmkbem.exe
O4 – HKCU\..\Run: [fgxmmlq] c:\windows\okmkbem.exe
O4 – HKCU\..\Run: [duktyme] c:\windows\okmkbem.exe
O4 – HKCU\..\Run: [paqptny] c:\windows\okmkbem.exe
O4 – HKCU\..\Run: [gaxmgil] c:\windows\okmkbem.exe
O4 – HKCU\..\Run: [llvnurx] c:\windows\okmkbem.exe
O4 – HKCU\..\Run: [ksnnbba] c:\windows\okmkbem.exe
O4 – HKCU\..\Run: [finrqqq] c:\windows\okmkbem.exe
O4 – HKCU\..\Run: [iexwvbv] c:\windows\okmkbem.exe
O4 – HKCU\..\Run: [unesfss] c:\windows\okmkbem.exe
O4 – HKCU\..\Run: [kqucmfm] c:\windows\okmkbem.exe
O4 – HKCU\..\Run: [aasuvbm] c:\windows\okmkbem.exe
O4 – HKCU\..\Run: [tyigbro] c:\windows\okmkbem.exe
O4 – HKCU\..\Run: [ruvtfnj] c:\windows\okmkbem.exe
O4 – HKCU\..\Run: [dustsso] c:\windows\okmkbem.exe
O4 – HKCU\..\Run: [sfmxoan] c:\windows\okmkbem.exe
O4 – HKCU\..\Run: [lxdkiod] c:\windows\okmkbem.exe
O4 – HKCU\..\Run: [axmhbny] c:\windows\okmkbem.exe
O4 – HKCU\..\Run: [ntykqoy] c:\windows\okmkbem.exe
O4 – HKCU\..\Run: [xhcgrls] c:\windows\okmkbem.exe
O4 – HKCU\..\Run: [ewlfvcg] c:\windows\okmkbem.exe
O4 – HKCU\..\Run: [wodegxo] c:\windows\okmkbem.exe
O4 – HKCU\..\Run: [jqmfgqb] c:\windows\okmkbem.exe
O4 – HKCU\..\Run: [phaacfy] c:\windows\okmkbem.exe
O4 – HKCU\..\Run: [hruikce] c:\windows\okmkbem.exe
O4 – HKCU\..\Run: [gsqfkdg] c:\windows\okmkbem.exe
O4 – HKCU\..\Run: [vtqvlxi] c:\windows\okmkbem.exe
O4 – HKCU\..\Run: [didjsoi] c:\windows\okmkbem.exe
O4 – HKCU\..\Run: [lkjiwkq] c:\windows\okmkbem.exe
O4 – HKCU\..\Run: [qgaevdk] c:\windows\okmkbem.exe
O4 – HKCU\..\Run: [gwphpcm] c:\windows\okmkbem.exe
O4 – HKCU\..\Run: [qawkari] c:\windows\okmkbem.exe
O4 – HKCU\..\Run: [hwwlcdj] c:\windows\okmkbem.exe
O4 – HKCU\..\Run: [vdhsiex] c:\windows\okmkbem.exe
O4 – HKCU\..\Run: [ptfpivo] c:\windows\okmkbem.exe
O4 – HKCU\..\Run: [xwnbqda] c:\windows\okmkbem.exe
O4 – HKCU\..\Run: [yefukgv] c:\windows\okmkbem.exe
O4 – HKCU\..\Run: [odvirvi] c:\windows\okmkbem.exe
O4 – HKCU\..\Run: [momgenh] c:\windows\okmkbem.exe
O4 – HKCU\..\Run: [cyhbibe] c:\windows\okmkbem.exe
O4 – HKCU\..\Run: [bxhylxw] c:\windows\okmkbem.exe
O4 – HKCU\..\Run: [dargpwa] c:\windows\okmkbem.exe
O4 – HKCU\..\Run: [piorfib] c:\windows\okmkbem.exe
O4 – HKCU\..\Run: [cbkwjxo] c:\windows\okmkbem.exe
O4 – HKCU\..\Run: [cwiirbq] c:\windows\okmkbem.exe
O4 – HKCU\..\Run: [efpidhi] c:\windows\okmkbem.exe
O4 – HKCU\..\Run: [nicjvuh] c:\windows\okmkbem.exe
O4 – HKCU\..\Run: [qeqrjtc] c:\windows\okmkbem.exe
O4 – HKCU\..\Run: [jgcnhnu] c:\windows\okmkbem.exe
O4 – HKCU\..\Run: [jcegqaa] c:\windows\okmkbem.exe
O4 – HKCU\..\Run: [jpgxlll] c:\windows\okmkbem.exe
O4 – HKCU\..\Run: [sbdeysx] c:\windows\okmkbem.exe
O4 – HKCU\..\Run: [nfaxuxu] c:\windows\okmkbem.exe
O4 – HKCU\..\Run: [yjfbhfb] c:\windows\okmkbem.exe
O4 – HKCU\..\Run: [niasywm] c:\windows\okmkbem.exe
O4 – HKCU\..\Run: [lrsqmlt] c:\windows\okmkbem.exe
O4 – HKCU\..\Run: [ihkdpsy] c:\windows\okmkbem.exe
O4 – HKCU\..\Run: [tstkruc] c:\windows\okmkbem.exe
O4 – HKCU\..\Run: [fghdvqt] c:\windows\okmkbem.exe
O4 – HKCU\..\Run: [onitrla] c:\windows\okmkbem.exe
O4 – HKCU\..\Run: [evqcwvu] c:\windows\okmkbem.exe
O4 – HKCU\..\Run: [kcjlwvo] c:\windows\okmkbem.exe
O4 – HKCU\..\Run: [iehhjej] c:\windows\okmkbem.exe
O4 – HKCU\..\Run: [ebsujqx] c:\windows\okmkbem.exe
O4 – HKCU\..\Run: [bnkdecb] c:\windows\okmkbem.exe
O4 – HKCU\..\Run: [leiopbx] c:\windows\okmkbem.exe
O4 – HKCU\..\Run: [akkaqph] c:\windows\okmkbem.exe
O4 – HKCU\..\Run: [pgcfbuv] c:\windows\okmkbem.exe
O4 – HKCU\..\Run: [aotqbna] c:\windows\okmkbem.exe
O4 – HKCU\..\Run: [vtrpkar] c:\windows\okmkbem.exe
O4 – HKCU\..\Run: [mbqxedq] c:\windows\okmkbem.exe
O4 – HKCU\..\Run: [vxauuxk] c:\windows\okmkbem.exe
O4 – HKCU\..\Run: [akliuxo] c:\windows\okmkbem.exe
O4 – HKCU\..\Run: [pjpqyyu] c:\windows\okmkbem.exe
O4 – HKCU\..\Run: [nstdois] c:\windows\okmkbem.exe
O4 – HKCU\..\Run: [lisptsp] c:\windows\okmkbem.exe
O4 – HKCU\..\Run: [kbxvgjo] c:\windows\okmkbem.exe
O4 – HKCU\..\Run: [pmmvbys] c:\windows\okmkbem.exe
O4 – HKCU\..\Run: [hrkkfqj] c:\windows\okmkbem.exe
O4 – HKCU\..\Run: [aijvxyc] c:\windows\okmkbem.exe
O4 – HKCU\..\Run: [umuxfju] c:\windows\okmkbem.exe
O4 – HKCU\..\Run: [gcdrblp] c:\windows\okmkbem.exe
O4 – HKCU\..\Run: [blgxvya] c:\windows\okmkbem.exe
O4 – HKCU\..\Run: [cdyvsbk] c:\windows\okmkbem.exe
O4 – HKCU\..\Run: [tcuglpm] c:\windows\okmkbem.exe
O4 – HKCU\..\Run: [bcyosoo] c:\windows\okmkbem.exe
O4 – HKCU\..\Run: [rfjjmvx] c:\windows\okmkbem.exe
O4 – HKCU\..\Run: [qmwvxia] c:\windows\okmkbem.exe
O4 – HKCU\..\Run: [ifaldfa] c:\windows\okmkbem.exe
O4 – HKCU\..\Run: [luhyvsu] c:\windows\okmkbem.exe
O4 – HKCU\..\Run: [qfgtacl] c:\windows\okmkbem.exe
O4 – HKCU\..\Run: [xhvhbqp] c:\windows\okmkbem.exe
O4 – HKCU\..\Run: [ulcxqgp] c:\windows\okmkbem.exe
O4 – HKCU\..\Run: [jgfgabs] c:\windows\okmkbem.exe
O4 – HKCU\..\Run: [jiakscc] c:\windows\okmkbem.exe
O4 – HKCU\..\Run: [dwbigqf] c:\windows\okmkbem.exe
O4 – HKCU\..\Run: [nemvfdd] c:\windows\okmkbem.exe
O4 – HKCU\..\Run: [dtgubqj] c:\windows\okmkbem.exe
O4 – HKCU\..\Run: [dhrvfkt] c:\windows\okmkbem.exe
O4 – HKCU\..\Run: [yrqcykm] c:\windows\okmkbem.exe
O4 – HKCU\..\Run: [kxpfqbo] c:\windows\okmkbem.exe
O4 – HKCU\..\Run: [vibqdhg] c:\windows\okmkbem.exe
O4 – HKCU\..\Run: [qiiwxaw] c:\windows\okmkbem.exe
O4 – HKCU\..\Run: [kjokoqv] c:\windows\okmkbem.exe
O4 – HKCU\..\Run: [rwwnbma] c:\windows\okmkbem.exe
O4 – HKCU\..\Run: [hbbscpw] c:\windows\okmkbem.exe
O4 – HKCU\..\Run: [xkejxxu] c:\windows\okmkbem.exe
O4 – HKCU\..\Run: [lmbxbho] c:\windows\okmkbem.exe
O4 – HKCU\..\Run: [phfyiow] c:\windows\okmkbem.exe
O4 – HKCU\..\Run: [nnfneqt] c:\windows\okmkbem.exe
O4 – HKCU\..\Run: [qwwfoms] c:\windows\okmkbem.exe
O4 – HKCU\..\Run: [twnwtwc] c:\windows\okmkbem.exe
O4 – HKCU\..\Run: [fxveelg] c:\windows\okmkbem.exe
O4 – HKCU\..\Run: [sknjykp] c:\windows\okmkbem.exe
O4 – HKCU\..\Run: [futhexy] c:\windows\okmkbem.exe
O4 – HKCU\..\Run: [gdcfadg] c:\windows\okmkbem.exe
O4 – HKCU\..\Run: [tkwhlaw] c:\windows\okmkbem.exe
O4 – HKCU\..\Run: [qsdxuam] c:\windows\okmkbem.exe
O4 – HKCU\..\Run: [eiwnqrg] c:\windows\okmkbem.exe
O4 – HKCU\..\Run: [aujfvdh] c:\windows\okmkbem.exe
O4 – HKCU\..\Run: [tuexcyk] c:\windows\okmkbem.exe
O4 – HKCU\..\Run: [jkknokf] c:\windows\okmkbem.exe
O4 – HKCU\..\Run: [xggojyu] c:\windows\okmkbem.exe
O4 – HKCU\..\Run: [qgbwsye] c:\windows\okmkbem.exe
O4 – HKCU\..\Run: [jbrvsmq] c:\windows\okmkbem.exe
O4 – HKCU\..\Run: [eqfvksf] c:\windows\okmkbem.exe
O4 – HKCU\..\Run: [pkcyoco] c:\windows\okmkbem.exe
O4 – HKCU\..\Run: [jsumdct] c:\windows\okmkbem.exe
O4 – HKCU\..\Run: [efqhiqs] c:\windows\okmkbem.exe
O4 – HKCU\..\Run: [yjecjob] c:\windows\okmkbem.exe
O4 – HKCU\..\Run: [obwajwi] c:\windows\okmkbem.exe
O4 – HKCU\..\Run: [iwpqisa] c:\windows\okmkbem.exe
O4 – HKCU\..\Run: [bdrowuf] c:\windows\okmkbem.exe
O4 – HKCU\..\Run: [esqqdsi] c:\windows\okmkbem.exe
O4 – HKCU\..\Run: [fjtofia] c:\windows\okmkbem.exe
O4 – HKCU\..\Run: [nkxjbka] c:\windows\okmkbem.exe
O4 – HKCU\..\Run: [nreegbj] c:\windows\okmkbem.exe
O4 – HKCU\..\Run: [gkdfphb] c:\windows\okmkbem.exe
O4 – HKCU\..\Run: [mymgott] c:\windows\okmkbem.exe
O4 – HKCU\..\Run: [lftuejl] c:\windows\okmkbem.exe
O4 – HKCU\..\Run: [sldtooi] c:\windows\okmkbem.exe
O4 – HKCU\..\Run: [ogjqsjt] c:\windows\okmkbem.exe
O4 – HKCU\..\Run: [ucvevlg] c:\windows\okmkbem.exe
O4 – HKCU\..\Run: [qachhwo] c:\windows\okmkbem.exe
O4 – HKCU\..\Run: [avswfhh] c:\windows\okmkbem.exe
O4 – HKCU\..\Run: [xkmydkr] c:\windows\okmkbem.exe
O4 – HKCU\..\Run: [qhowtxt] c:\windows\okmkbem.exe
O4 – HKCU\..\Run: [qsugrvk] c:\windows\okmkbem.exe
O4 – HKCU\..\Run: [nxhficq] c:\windows\okmkbem.exe
O4 – HKCU\..\Run: [jdhjsqb] c:\windows\okmkbem.exe
O4 – HKCU\..\Run: [cuunhoj] c:\windows\okmkbem.exe
O4 – HKCU\..\Run: [jwbfsfa] c:\windows\okmkbem.exe
O4 – HKCU\..\Run: [dkleokh] c:\windows\okmkbem.exe
O4 – HKCU\..\Run: [rxgvolb] c:\windows\okmkbem.exe
O4 – HKCU\..\Run: [sxdleyf] c:\windows\okmkbem.exe
O4 – HKCU\..\Run: [aejosgr] c:\windows\okmkbem.exe
O4 – HKCU\..\Run: [tllbsnq] c:\windows\okmkbem.exe
O4 – HKCU\..\Run: [ieamjyh] c:\windows\okmkbem.exe
O4 – HKCU\..\Run: [glskshq] c:\windows\okmkbem.exe
O4 – HKCU\..\Run: [qrvtlfc] c:\windows\okmkbem.exe
O4 – HKCU\..\Run: [mxjaody] c:\windows\okmkbem.exe
O4 – HKCU\..\Run: [bkfghjt] c:\windows\okmkbem.exe
O4 – HKCU\..\Run: [deshmuk] c:\windows\okmkbem.exe
O4 – HKCU\..\Run: [bolycoi] c:\windows\okmkbem.exe
O4 – HKCU\..\Run: [xwduhro] c:\windows\okmkbem.exe
O4 – HKCU\..\Run: [kwavoie] c:\windows\okmkbem.exe
O4 – HKCU\..\Run: [ihggwiu] c:\windows\okmkbem.exe
O4 – HKCU\..\Run: [chwfspm] c:\windows\okmkbem.exe
O4 – HKCU\..\Run: [ycuxlyu] c:\windows\okmkbem.exe
O4 – HKCU\..\Run: [qybugob] c:\windows\okmkbem.exe
O4 – HKCU\..\Run: [ywopwoy] c:\windows\okmkbem.exe
O4 – HKCU\..\Run: [sfhhatj] c:\windows\okmkbem.exe
O4 – HKCU\..\Run: [rgtjmin] c:\windows\okmkbem.exe
O4 – HKCU\..\Run: [hoqjwey] c:\windows\okmkbem.exe
O4 – HKCU\..\Run: [agnpvrw] c:\windows\okmkbem.exe
O4 – HKCU\..\Run: [owwnafc] c:\windows\okmkbem.exe
O4 – HKCU\..\Run: [rqytlgb] c:\windows\okmkbem.exe
O4 – HKCU\..\Run: [xofifcs] c:\windows\okmkbem.exe
O4 – HKCU\..\Run: [allpyqt] c:\windows\okmkbem.exe
O4 – HKCU\..\Run: [nqoauax] c:\windows\okmkbem.exe
O4 – HKCU\..\Run: [alacrtm] c:\windows\okmkbem.exe
O4 – HKCU\..\Run: [tgbdsnm] c:\windows\okmkbem.exe
O4 – HKCU\..\Run: [rrktfrd] c:\windows\okmkbem.exe
O4 – HKCU\..\Run: [owvhbvu] c:\windows\okmkbem.exe
O4 – HKCU\..\Run: [ufitpyu] c:\windows\okmkbem.exe
O4 – HKCU\..\Run: [kvarokd] c:\windows\okmkbem.exe
O4 – HKCU\..\Run: [ttphutb] c:\windows\okmkbem.exe
O4 – HKCU\..\Run: [ireiyhg] c:\windows\okmkbem.exe
O4 – HKCU\..\Run: [aklpggf] c:\windows\okmkbem.exe
O4 – HKCU\..\Run: [mufkbvf] c:\windows\okmkbem.exe
O4 – HKCU\..\Run: [mmhaawh] c:\windows\okmkbem.exe
O4 – HKCU\..\Run: [wadpriq] c:\windows\okmkbem.exe
O4 – HKCU\..\Run: [wogqbxb] c:\windows\okmkbem.exe
O4 – HKCU\..\Run: [lhoylnh] c:\windows\okmkbem.exe
O4 – HKCU\..\Run: [lfbpwul] c:\windows\okmkbem.exe
O4 – HKCU\..\Run: [lklygro] c:\windows\okmkbem.exe
O4 – HKCU\..\Run: [ycwcmqh] c:\windows\okmkbem.exe
O4 – HKCU\..\Run: [dswmqfb] c:\windows\okmkbem.exe
O4 – HKCU\..\Run: [gdbktdh] c:\windows\okmkbem.exe
O4 – HKCU\..\Run: [wflkbms] c:\windows\okmkbem.exe
O4 – HKCU\..\Run: [olhiutm] c:\windows\okmkbem.exe
O4 – HKCU\..\Run: [mdxisbq] c:\windows\okmkbem.exe
O4 – HKCU\..\Run: [ateieau] c:\windows\okmkbem.exe
O4 – HKCU\..\Run: [rdaipjh] c:\windows\okmkbem.exe
O4 – HKCU\..\Run: [lodxstd] c:\windows\okmkbem.exe
O4 – HKCU\..\Run: [hlsywdq] c:\windows\okmkbem.exe
O4 – HKCU\..\Run: [klgyklm] c:\windows\okmkbem.exe
O4 – HKCU\..\Run: [irvekfd] c:\windows\okmkbem.exe
O4 – HKCU\..\Run: [rncixts] c:\windows\okmkbem.exe
O4 – HKCU\..\Run: [uhtdxxk] c:\windows\okmkbem.exe
O4 – HKCU\..\Run: [audgduj] c:\windows\okmkbem.exe
O4 – HKCU\..\Run: [hnsmgjv] c:\windows\okmkbem.exe
O4 – HKCU\..\Run: [etcbcaa] c:\windows\okmkbem.exe
O4 – HKCU\..\Run: [mbemyqd] c:\windows\okmkbem.exe
O4 – HKCU\..\Run: [fyyqhgm] c:\windows\okmkbem.exe
O4 – HKCU\..\Run: [lapygid] c:\windows\okmkbem.exe
O4 – HKCU\..\Run: [jqikhce] c:\windows\okmkbem.exe
O4 – HKCU\..\Run: [qotugtf] c:\windows\okmkbem.exe
O4 – HKCU\..\Run: [timwoas] c:\windows\okmkbem.exe
O4 – HKCU\..\Run: [ylwdkvu] c:\windows\okmkbem.exe
O4 – HKCU\..\Run: [bsrrvpy] c:\windows\okmkbem.exe
O4 – HKCU\..\Run: [fknurjg] c:\windows\okmkbem.exe
O4 – HKCU\..\Run: [oqyehci] c:\windows\okmkbem.exe
O4 – HKCU\..\Run: [wvmohsb] c:\windows\okmkbem.exe
O4 – HKCU\..\Run: [vnsuvob] c:\windows\okmkbem.exe
O4 – HKCU\..\Run: [hlkaqri] c:\windows\okmkbem.exe
O4 – HKCU\..\Run: [itnuwnt] c:\windows\okmkbem.exe
O4 – HKCU\..\Run: [vbdqsyr] c:\windows\okmkbem.exe
O4 – HKCU\..\Run: [fnambpa] c:\windows\okmkbem.exe
O4 – HKCU\..\Run: [yfwvpjh] c:\windows\okmkbem.exe
O4 – HKCU\..\Run: [dwkhsxg] c:\windows\okmkbem.exe
O4 – HKCU\..\Run: [uhllmjh] c:\windows\okmkbem.exe
O4 – HKCU\..\Run: [ryfckun] c:\windows\okmkbem.exe
O4 – HKCU\..\Run: [wgwmtfq] c:\windows\okmkbem.exe
O4 – HKCU\..\Run: [jdbiusr] c:\windows\okmkbem.exe
O4 – HKCU\..\Run: [prixxwg] c:\windows\okmkbem.exe
O4 – HKCU\..\Run: [yegnuut] c:\windows\okmkbem.exe
O4 – HKCU\..\Run: [duesxgd] c:\windows\okmkbem.exe
O4 – HKCU\..\Run: [ftfoiwx] c:\windows\okmkbem.exe
O4 – HKCU\..\Run: [tpvpvdg] c:\windows\okmkbem.exe
O4 – HKCU\..\Run: [mvpguik] c:\windows\okmkbem.exe
O4 – HKCU\..\Run: [pajdamo] c:\windows\okmkbem.exe
O4 – HKCU\..\Run: [jxksocb] c:\windows\okmkbem.exe
O4 – HKCU\..\Run: [fcsqatf] c:\windows\okmkbem.exe
O4 – HKCU\..\Run: [xsnferv] c:\windows\okmkbem.exe
O4 – HKCU\..\Run: [blfqrdg] c:\windows\okmkbem.exe
O4 – HKCU\..\Run: [uttliji] c:\windows\okmkbem.exe
O4 – HKCU\..\Run: [vjistyn] c:\windows\okmkbem.exe
O4 – HKCU\..\Run: [exartel] c:\windows\okmkbem.exe
O4 – HKCU\..\Run: [mntxieb] c:\windows\okmkbem.exe
O4 – HKCU\..\Run: [ldnfvkr] c:\windows\okmkbem.exe
O4 – HKCU\..\Run: [gfwabuk] c:\windows\okmkbem.exe
O4 – HKCU\..\Run: [uhejcoq] c:\windows\okmkbem.exe
O4 – HKCU\..\Run: [canylqr] c:\windows\okmkbem.exe
O4 – HKCU\..\Run: [rwbhjbr] c:\windows\okmkbem.exe
O4 – HKCU\..\Run: [mjvdstt] c:\windows\okmkbem.exe
O4 – HKCU\..\Run: [vbkdbjf] c:\windows\okmkbem.exe
O4 – HKCU\..\Run: [qjudnit] c:\windows\okmkbem.exe
O4 – HKCU\..\Run: [jibtvsv] c:\windows\okmkbem.exe
O4 – HKCU\..\Run: [qeuanft] c:\windows\okmkbem.exe
O4 – HKCU\..\Run: [nynennj] c:\windows\okmkbem.exe
O4 – HKCU\..\Run: [lfpeqxc] c:\windows\okmkbem.exe
O4 – HKCU\..\Run: [hsrjowq] c:\windows\okmkbem.exe
O4 – HKCU\..\Run: [qsuumpq] c:\windows\okmkbem.exe
O4 – HKCU\..\Run: [ucathpb] c:\windows\okmkbem.exe
O4 – HKCU\..\Run: [ywdacru] c:\windows\okmkbem.exe
O4 – HKCU\..\Run: [toykbla] c:\windows\okmkbem.exe
O4 – HKCU\..\Run: [vnpcweg] c:\windows\okmkbem.exe
O4 – HKCU\..\Run: [gwchjjc] c:\windows\okmkbem.exe
O4 – HKCU\..\Run: [kprwgqp] c:\windows\okmkbem.exe
O4 – HKCU\..\Run: [rgttnde] c:\windows\okmkbem.exe
O4 – HKCU\..\Run: [suujwjy] c:\windows\okmkbem.exe
O4 – HKCU\..\Run: [nwbdchg] c:\windows\okmkbem.exe
O4 – HKCU\..\Run: [medbdjx] c:\windows\okmkbem.exe
O4 – HKCU\..\Run: [ujbwpdc] c:\windows\okmkbem.exe
O4 – HKCU\..\Run: [raxlaay] c:\windows\okmkbem.exe
O4 – HKCU\..\Run: [idjrmtq] c:\windows\okmkbem.exe
O4 – HKCU\..\Run: [civwcac] c:\windows\okmkbem.exe
O4 – HKCU\..\Run: [tcbpfgn] c:\windows\okmkbem.exe
O4 – HKCU\..\Run: [ofucdbo] c:\windows\okmkbem.exe
O4 – HKCU\..\Run: [tjvecsu] c:\windows\okmkbem.exe
O4 – HKCU\..\Run: [bdbuncl] c:\windows\okmkbem.exe
O4 – HKCU\..\Run: [munaypg] c:\windows\okmkbem.exe
O4 – HKCU\..\Run: [nopyvwc] c:\windows\okmkbem.exe
O4 – HKCU\..\Run: [hvxspau] c:\windows\okmkbem.exe
O4 – HKCU\..\Run: [rlydpru] c:\windows\okmkbem.exe
O4 – HKCU\..\Run: [bjvrcxh] c:\windows\okmkbem.exe
O4 – HKCU\..\Run: [mudtmsj] c:\windows\okmkbem.exe
O4 – HKCU\..\Run: [iltgsvo] c:\windows\okmkbem.exe
O4 – HKCU\..\Run: [okybvbh] c:\windows\okmkbem.exe
O4 – HKCU\..\Run: [jnhjbba] c:\windows\okmkbem.exe
O4 – HKCU\..\Run: [dnwanet] c:\windows\okmkbem.exe
O4 – HKCU\..\Run: [xglgogb] c:\windows\okmkbem.exe
O4 – HKCU\..\Run: [fsupywt] c:\windows\okmkbem.exe
O4 – HKCU\..\Run: [upcxegk] c:\windows\okmkbem.exe
O4 – HKCU\..\Run: [gtkankk] c:\windows\okmkbem.exe
O4 – HKCU\..\Run: [kahanmh] c:\windows\okmkbem.exe
O4 – HKCU\..\Run: [tjtqjyw] c:\windows\okmkbem.exe
O4 – HKCU\..\Run: [wpslive] c:\windows\okmkbem.exe
O4 – HKCU\..\Run: [sjitmbj] c:\windows\okmkbem.exe
O4 – HKCU\..\Run: [fmtiakt] c:\windows\okmkbem.exe
O4 – HKCU\..\Run: [srxpbjk] c:\windows\okmkbem.exe
O4 – HKCU\..\Run: [axdytlc] c:\windows\okmkbem.exe
O4 – HKCU\..\Run: [bmpaxdu] c:\windows\okmkbem.exe
O4 – HKCU\..\Run: [iyypxdl] c:\windows\okmkbem.exe
O4 – HKCU\..\Run: [mffqbch] c:\windows\okmkbem.exe
O4 – HKCU\..\Run: [brvqppy] c:\windows\okmkbem.exe
O4 – HKCU\..\Run: [axtyhwg] c:\windows\okmkbem.exe
O4 – HKCU\..\Run: [gspppec] c:\windows\okmkbem.exe
O4 – HKCU\..\Run: [frskkiw] c:\windows\okmkbem.exe
O4 – HKCU\..\Run: [fbdlrca] c:\windows\okmkbem.exe
O4 – HKCU\..\Run: [nqamsxr] c:\windows\okmkbem.exe
O4 – HKCU\..\Run: [niknick] c:\windows\okmkbem.exe
O4 – HKCU\..\Run: [jvveode] c:\windows\okmkbem.exe
O4 – HKCU\..\Run: [pwggfiw] c:\windows\okmkbem.exe
O4 – HKCU\..\Run: [dgkxsyv] c:\windows\okmkbem.exe
O4 – HKCU\..\Run: [lfyyawd] c:\windows\okmkbem.exe
O4 – HKCU\..\Run: [prkniow] c:\windows\okmkbem.exe
O4 – HKCU\..\Run: [wbqtiya] c:\windows\okmkbem.exe
O4 – HKCU\..\Run: [ugfyyxi] c:\windows\okmkbem.exe
O4 – HKCU\..\Run: [tbisakj] c:\windows\okmkbem.exe
O4 – HKCU\..\Run: [daanikr] c:\windows\okmkbem.exe
O4 – HKCU\..\Run: [awclxer] c:\windows\okmkbem.exe
O4 – HKCU\..\Run: [qrusuqt] c:\windows\okmkbem.exe
O4 – HKCU\..\Run: [jeuurur] c:\windows\okmkbem.exe
O4 – HKCU\..\Run: [uqbnujo] c:\windows\okmkbem.exe
O4 – HKCU\..\Run: [apwkidi] c:\windows\okmkbem.exe
O4 – HKCU\..\Run: [lmenbeb] c:\windows\okmkbem.exe
O4 – HKCU\..\Run: [ycnkhxi] c:\windows\okmkbem.exe
O4 – HKCU\..\Run: [kdyejqr] c:\windows\okmkbem.exe
O4 – HKCU\..\Run: [lucixop] c:\windows\okmkbem.exe
O4 – HKCU\..\Run: [pvuargo] c:\windows\okmkbem.exe
O4 – HKCU\..\Run: [uufthvk] c:\windows\okmkbem.exe
O4 – HKCU\..\Run: [qcnfnlu] c:\windows\okmkbem.exe
O4 – HKCU\..\Run: [jwpnwyo] c:\windows\okmkbem.exe
O4 – HKCU\..\Run: [nuexmug] c:\windows\okmkbem.exe
O4 – HKCU\..\Run: [gkugkgd] c:\windows\okmkbem.exe
O4 – HKCU\..\Run: [rmtqmfl] c:\windows\okmkbem.exe
O4 – HKCU\..\Run: [tlouwgc] c:\windows\okmkbem.exe
O4 – HKCU\..\Run: [nnpctey] c:\windows\okmkbem.exe
O4 – HKCU\..\Run: [rkiceuv] c:\windows\okmkbem.exe
O4 – HKCU\..\Run: [xjmmvea] c:\windows\okmkbem.exe
O4 – HKCU\..\Run: [lqgjrbq] c:\windows\okmkbem.exe
O4 – HKCU\..\Run: [lytmbwl] c:\windows\okmkbem.exe
O4 – HKCU\..\Run: [ycejosk] c:\windows\okmkbem.exe
O4 – HKCU\..\Run: [ocgsevy] c:\windows\okmkbem.exe
O4 – HKCU\..\Run: [nwltygx] c:\windows\okmkbem.exe
O4 – HKCU\..\Run: [jxrxrus] c:\windows\okmkbem.exe
O4 – HKCU\..\Run: [gfjeudh] c:\windows\okmkbem.exe
O4 – HKCU\..\Run: [krojvje] c:\windows\okmkbem.exe
O4 – HKCU\..\Run: [jbqwvhs] c:\windows\okmkbem.exe
O4 – HKCU\..\Run: [fyygrqe] c:\windows\okmkbem.exe
O4 – HKCU\..\Run: [pdpfxlr] c:\windows\okmkbem.exe
O4 – HKCU\..\Run: [mpdhpxt] c:\windows\okmkbem.exe
O4 – HKCU\..\Run: [axexsth] c:\windows\okmkbem.exe
O4 – HKCU\..\Run: [nkxcfms] c:\windows\okmkbem.exe
O4 – HKCU\..\Run: [unqyobx] c:\windows\okmkbem.exe
O4 – HKCU\..\Run: [uwacjit] c:\windows\okmkbem.exe
O4 – HKCU\..\Run: [bujdvsk] c:\windows\okmkbem.exe
O4 – HKCU\..\Run: [ddywnec] c:\windows\okmkbem.exe
O4 – HKCU\..\Run: [xogooji] c:\windows\okmkbem.exe
O4 – HKCU\..\Run: [xrwgshx] c:\windows\okmkbem.exe
O4 – HKCU\..\Run: [etuxeiq] c:\windows\okmkbem.exe
O4 – HKCU\..\Run: [uqmukqw] c:\windows\okmkbem.exe
O4 – HKCU\..\Run: [aqnttps] c:\windows\okmkbem.exe
O4 – HKCU\..\Run: [tqcxwxb] c:\windows\okmkbem.exe
O4 – HKCU\..\Run: [aemutwn] c:\windows\okmkbem.exe
O4 – HKCU\..\Run: [bxjqypw] c:\windows\okmkbem.exe
O4 – HKCU\..\Run: [vmesock] c:\windows\okmkbem.exe
O4 – HKCU\..\Run: [fnxvche] c:\windows\okmkbem.exe
O4 – HKCU\..\Run: [reyhust] c:\windows\okmkbem.exe
O4 – HKCU\..\Run: [pnvxktf] c:\windows\okmkbem.exe
O4 – HKCU\..\Run: [pwnfrqm] c:\windows\okmkbem.exe
O4 – HKCU\..\Run: [wkuioor] c:\windows\okmkbem.exe
O4 – HKCU\..\Run: [pyqsaij] c:\windows\okmkbem.exe
O4 – HKCU\..\Run: [hgbnogk] c:\windows\okmkbem.exe
O4 – HKCU\..\Run: [nxshxcy] c:\windows\okmkbem.exe
O4 – HKCU\..\Run: [sglhatq] c:\windows\okmkbem.exe
O4 – HKCU\..\Run: [ykwkoau] c:\windows\okmkbem.exe
O4 – HKCU\..\Run: [phwyqft] c:\windows\okmkbem.exe
O4 – HKCU\..\Run: [ppclpqw] c:\windows\okmkbem.exe
O4 – HKCU\..\Run: [siayjcx] c:\windows\okmkbem.exe
O4 – HKCU\..\Run: [sjelncj] c:\windows\okmkbem.exe
O4 – HKCU\..\Run: [ocicbel] c:\windows\okmkbem.exe
O4 – HKCU\..\Run: [iaehpls] c:\windows\okmkbem.exe
O4 – HKCU\..\Run: [rrkbmeh] c:\windows\okmkbem.exe
O4 – HKCU\..\Run: [bgipumf] c:\windows\okmkbem.exe
O4 – HKCU\..\Run: [cjrcums] c:\windows\okmkbem.exe
O4 – HKCU\..\Run: [fcxvrxk] c:\windows\okmkbem.exe
O4 – HKCU\..\Run: [vkjovwr] c:\windows\okmkbem.exe
O4 – HKCU\..\Run: [dgulqgm] c:\windows\okmkbem.exe
O4 – HKCU\..\Run: [bvrnkrb] c:\windows\okmkbem.exe
O4 – HKCU\..\Run: [svyemgl] c:\windows\okmkbem.exe
O4 – HKCU\..\Run: [ljqrfkl] c:\windows\okmkbem.exe
O4 – HKCU\..\Run: [tyrckts] c:\windows\okmkbem.exe
O4 – HKCU\..\Run: [rmtcpbj] c:\windows\okmkbem.exe
O4 – HKCU\..\Run: [uuribqh] c:\windows\okmkbem.exe
O4 – HKCU\..\Run: [qjjyiwl] c:\windows\okmkbem.exe
O4 – HKCU\..\Run: [evaefjv] c:\windows\okmkbem.exe
O4 – HKCU\..\Run: [lccrvxf] c:\windows\okmkbem.exe
O4 – HKCU\..\Run: [nnoqncm] c:\windows\okmkbem.exe
O4 – HKCU\..\Run: [dswxpve] c:\windows\okmkbem.exe
O4 – HKCU\..\Run: [olvwrrm] c:\windows\okmkbem.exe
O4 – HKCU\..\Run: [npxjejy] c:\windows\okmkbem.exe
O4 – HKCU\..\Run: [yaeduos] c:\windows\okmkbem.exe
O4 – HKCU\..\Run: [qqigvoe] c:\windows\okmkbem.exe
O4 – HKCU\..\Run: [xarwmdb] c:\windows\okmkbem.exe
O4 – HKCU\..\Run: [ursdrgb] c:\windows\okmkbem.exe
O4 – HKCU\..\Run: [rfnxloe] c:\windows\okmkbem.exe
O4 – HKCU\..\Run: [wuooumy] c:\windows\okmkbem.exe
O4 – HKCU\..\Run: [qyjbiix] c:\windows\okmkbem.exe
O4 – HKCU\..\Run: [faiapay] c:\windows\okmkbem.exe
O4 – HKCU\..\Run: [offwbjp] c:\windows\okmkbem.exe
O4 – HKCU\..\Run: [dolncum] c:\windows\okmkbem.exe
O4 – HKCU\..\Run: [fdmsfnv] c:\windows\okmkbem.exe
O4 – HKCU\..\Run: [rueyovr] c:\windows\okmkbem.exe
O4 – HKCU\..\Run: [janqcuq] c:\windows\okmkbem.exe
O4 – HKCU\..\Run: [vobqpsa] c:\windows\okmkbem.exe
O4 – HKCU\..\Run: [wjjkncu] c:\windows\okmkbem.exe
O4 – HKCU\..\Run: [sflslkt] c:\windows\okmkbem.exe
O4 – HKCU\..\Run: [nssprkt] c:\windows\okmkbem.exe
O4 – HKCU\..\Run: [ldrelco] c:\windows\okmkbem.exe
O4 – HKCU\..\Run: [mymtnvm] c:\windows\okmkbem.exe
O4 – HKCU\..\Run: [cuhyfam] c:\windows\okmkbem.exe
O4 – HKCU\..\Run: [vegsexu] c:\windows\okmkbem.exe
O4 – HKCU\..\Run: [bqkgnoa] c:\windows\okmkbem.exe
O4 – HKCU\..\Run: [xamrapg] c:\windows\okmkbem.exe
O4 – HKCU\..\Run: [oaawhea] c:\windows\okmkbem.exe
O4 – HKCU\..\Run: [dbtrtvu] c:\windows\okmkbem.exe
O4 – HKCU\..\Run: [xdwpdkf] c:\windows\okmkbem.exe
O4 – HKCU\..\Run: [axkycpl] c:\windows\okmkbem.exe
O4 – HKCU\..\Run: [nkhnpbs] c:\windows\okmkbem.exe
O4 – HKCU\..\Run: [uumoirm] c:\windows\okmkbem.exe
O4 – HKCU\..\Run: [mmsqtnh] c:\windows\okmkbem.exe
O4 – HKCU\..\Run: [buyovup] c:\windows\okmkbem.exe
O4 – HKCU\..\Run: [rkflyvh] c:\windows\okmkbem.exe
O4 – HKCU\..\Run: [spjydoe] c:\windows\okmkbem.exe
O4 – HKCU\..\Run: [tcrkvfs] c:\windows\okmkbem.exe
O4 – HKCU\..\Run: [pxpfyoo] c:\windows\okmkbem.exe
O4 – HKCU\..\Run: [vmstygw] c:\windows\okmkbem.exe
O4 – HKCU\..\Run: [xdewgpg] c:\windows\okmkbem.exe
O4 – HKCU\..\Run: [efthhnr] c:\windows\okmkbem.exe
O4 – HKCU\..\Run: [fdroovr] c:\windows\okmkbem.exe
O4 – HKCU\..\Run: [ltmcnyi] c:\windows\okmkbem.exe
O4 – HKCU\..\Run: [avsqqhc] c:\windows\okmkbem.exe
O4 – HKCU\..\Run: [einhfob] c:\windows\okmkbem.exe
O4 – HKCU\..\Run: [yivesub] c:\windows\okmkbem.exe
O4 – HKCU\..\Run: [khkjryk] c:\windows\okmkbem.exe
O4 – HKCU\..\Run: [ekevnyn] c:\windows\okmkbem.exe
O4 – HKCU\..\Run: [audssdr] c:\windows\okmkbem.exe
O4 – HKCU\..\Run: [fvadffo] c:\windows\okmkbem.exe
O4 – HKCU\..\Run: [sqpafdw] c:\windows\okmkbem.exe
O4 – HKCU\..\Run: [sgbheks] c:\windows\okmkbem.exe
O4 – HKCU\..\Run: [haselyr] c:\windows\okmkbem.exe
O4 – HKCU\..\Run: [ibrlirh] c:\windows\okmkbem.exe
O4 – HKCU\..\Run: [cgprinw] c:\windows\okmkbem.exe
O4 – HKCU\..\Run: [tvoyqxp] c:\windows\okmkbem.exe
O4 – HKCU\..\Run: [uyipjjj] c:\windows\okmkbem.exe
O4 – HKCU\..\Run: [jlyphnp] c:\windows\okmkbem.exe
O4 – HKCU\..\Run: [twrfkxw] c:\windows\okmkbem.exe
O4 – HKCU\..\Run: [xhsxkex] c:\windows\okmkbem.exe
O4 – HKCU\..\Run: [ewkbklq] c:\windows\okmkbem.exe
O4 – HKCU\..\Run: [snbpftf] c:\windows\okmkbem.exe
O4 – HKCU\..\Run: [dcuqrga] c:\windows\okmkbem.exe
O4 – HKCU\..\Run: [bqmedhn] c:\windows\okmkbem.exe
O4 – HKCU\..\Run: [lgqtgtg] c:\windows\okmkbem.exe
O4 – HKCU\..\Run: [vvddpuo] c:\windows\okmkbem.exe
O4 – HKCU\..\Run: [jpdevyf] c:\windows\okmkbem.exe
O4 – HKCU\..\Run: [vlcvenm] c:\windows\okmkbem.exe
O4 – HKCU\..\Run: [wpnbvpr] c:\windows\okmkbem.exe
O4 – HKCU\..\Run: [wrqchvw] c:\windows\okmkbem.exe
O4 – HKCU\..\Run: [gvwyuol] c:\windows\okmkbem.exe
O4 – HKCU\..\Run: [qdculqh] c:\windows\okmkbem.exe
O4 – HKCU\..\Run: [ruefelp] c:\windows\okmkbem.exe
O4 – HKCU\..\Run: [llovqhm] c:\windows\okmkbem.exe
O4 – HKCU\..\Run: [rfsdixx] c:\windows\okmkbem.exe
O4 – HKCU\..\Run: [xiqvbga] c:\windows\okmkbem.exe
O4 – HKCU\..\Run: [movnaly] c:\windows\okmkbem.exe
O4 – HKCU\..\Run: [fbocwdu] c:\windows\okmkbem.exe
O4 – HKCU\..\Run: [psyuvvc] c:\windows\okmkbem.exe
O4 – HKCU\..\Run: [gnqnxjo] c:\windows\okmkbem.exe
O4 – HKCU\..\Run: [gswbmxe] c:\windows\okmkbem.exe
O4 – HKCU\..\Run: [rhcsfmu] c:\windows\okmkbem.exe
O4 – HKCU\..\Run: [kioxykd] c:\windows\okmkbem.exe
O4 – HKCU\..\Run: [tjxcruv] c:\windows\okmkbem.exe
O4 – HKCU\..\Run: [vwbuyph] c:\windows\okmkbem.exe
O4 – HKCU\..\Run: [vnqvvyu] c:\windows\okmkbem.exe
O4 – HKCU\..\Run: [vhoeglu] c:\windows\okmkbem.exe
O4 – HKCU\..\Run: [xemlaqx] c:\windows\okmkbem.exe
O4 – HKCU\..\Run: [utonkih] c:\windows\okmkbem.exe
O4 – HKCU\..\Run: [uuxrnee] c:\windows\okmkbem.exe
O4 – HKCU\..\Run: [qvcaxby] c:\windows\okmkbem.exe
O4 – HKCU\..\Run: [ffpdrnh] c:\windows\okmkbem.exe
O4 – HKCU\..\Run: [ynmolec] c:\windows\okmkbem.exe
O4 – HKCU\..\Run: [oqeljaa] c:\windows\okmkbem.exe
O4 – HKCU\..\Run: [ciooovn] c:\windows\okmkbem.exe
O4 – HKCU\..\Run: [ujccyiv] c:\windows\okmkbem.exe
O4 – HKCU\..\Run: [bltbtfw] c:\windows\okmkbem.exe
O4 – HKCU\..\Run: [sbblkir] c:\windows\okmkbem.exe
O4 – HKCU\..\Run: [xxbnsos] c:\windows\okmkbem.exe
O4 – HKCU\..\Run: [hjjvnji] c:\windows\okmkbem.exe
O4 – HKCU\..\Run: [pdmmyth] c:\windows\okmkbem.exe
O4 – HKCU\..\Run: [ykcvgev] c:\windows\okmkbem.exe
O4 – HKCU\..\Run: [vwdeqmi] c:\windows\okmkbem.exe
O4 – HKCU\..\Run: [ikwgbcl] c:\windows\okmkbem.exe
O4 – HKCU\..\Run: [mdycdum] c:\windows\okmkbem.exe
O4 – HKCU\..\Run: [bmurxir] c:\windows\okmkbem.exe
O4 – HKCU\..\Run: [hclfars] c:\windows\okmkbem.exe
O4 – HKCU\..\Run: [hkaptfy] c:\windows\okmkbem.exe
O4 – HKCU\..\Run: [qedkpml] c:\windows\okmkbem.exe
O4 – HKCU\..\Run: [fiwwoqd] c:\windows\okmkbem.exe
O4 – HKCU\..\Run: [cirunsi] c:\windows\okmkbem.exe
O4 – HKCU\..\Run: [bqmhlkw] c:\windows\okmkbem.exe
O4 – HKCU\..\Run: [rukkrqd] c:\windows\okmkbem.exe
O4 – HKCU\..\Run: [cfiavrx] c:\windows\okmkbem.exe
O4 – HKCU\..\Run: [extlrbl] c:\windows\okmkbem.exe
O4 – HKCU\..\Run: [pakcupu] c:\windows\okmkbem.exe
O4 – HKCU\..\Run: [uuiigbr] c:\windows\okmkbem.exe
O4 – HKCU\..\Run: [hlqixwy] c:\windows\okmkbem.exe
O4 – HKCU\..\Run: [gecykes] c:\windows\okmkbem.exe
O4 – HKCU\..\Run: [tmnujla] c:\windows\okmkbem.exe
O4 – HKCU\..\Run: [ekftlyn] c:\windows\okmkbem.exe
O4 – HKCU\..\Run: [yreuegj] c:\windows\okmkbem.exe
O4 – HKCU\..\Run: [nnsitjh] c:\windows\okmkbem.exe
O4 – HKCU\..\Run: [wrmkbvm] c:\windows\okmkbem.exe
O4 – HKCU\..\Run: [vbuklor] c:\windows\okmkbem.exe
O4 – HKCU\..\Run: [tiaumou] c:\windows\okmkbem.exe
O4 – HKCU\..\Run: [himsreu] c:\windows\okmkbem.exe
O4 – HKCU\..\Run: [ngtwxfm] c:\windows\okmkbem.exe
O4 – HKCU\..\Run: [jngebkw] c:\windows\okmkbem.exe
O4 – HKCU\..\Run: [ibnklcl] c:\windows\okmkbem.exe
O4 – HKCU\..\Run: [rbimolv] c:\windows\okmkbem.exe
O4 – HKCU\..\Run: [bdgcvcj] c:\windows\okmkbem.exe
O4 – HKCU\..\Run: [lqgxmtt] c:\windows\okmkbem.exe
O4 – HKCU\..\Run: [bcfwrsk] c:\windows\okmkbem.exe
O4 – HKCU\..\Run: [mvjwahy] c:\windows\okmkbem.exe
O4 – HKCU\..\Run: [lhbxekx] c:\windows\okmkbem.exe
O4 – HKCU\..\Run: [qmhqwdc] c:\windows\okmkbem.exe
O4 – HKCU\..\Run: [ruebspt] c:\windows\okmkbem.exe
O4 – HKCU\..\Run: [nabgnbu] c:\windows\okmkbem.exe
O4 – HKCU\..\Run: [byvamdp] c:\windows\okmkbem.exe
O4 – HKCU\..\Run: [fbxghtt] c:\windows\okmkbem.exe
O4 – HKCU\..\Run: [dfcxoov] c:\windows\okmkbem.exe
O4 – HKCU\..\Run: [rfmufao] c:\windows\okmkbem.exe
O4 – HKCU\..\Run: [acetenq] c:\windows\okmkbem.exe
O4 – HKCU\..\Run: [kmwmawk] c:\windows\okmkbem.exe
O4 – HKCU\..\Run: [ddmvkkj] c:\windows\okmkbem.exe
O4 – HKCU\..\Run: [ieopjvw] c:\windows\okmkbem.exe
O4 – HKCU\..\Run: [fwljfrh] c:\windows\okmkbem.exe
O4 – HKCU\..\Run: [rpfynjd] c:\windows\okmkbem.exe
O4 – HKCU\..\Run: [uwyhmpp] c:\windows\okmkbem.exe
O4 – HKCU\..\Run: [dabnhwf] c:\windows\okmkbem.exe
O4 – HKCU\..\Run: [ubfquww] c:\windows\okmkbem.exe
O4 – HKCU\..\Run: [yklcdwx] c:\windows\okmkbem.exe
O4 – HKCU\..\Run: [npjulkp] c:\windows\okmkbem.exe
O4 – HKCU\..\Run: [tpwdxsw] c:\windows\okmkbem.exe
O4 – HKCU\..\Run: [ymhxfcg] c:\windows\okmkbem.exe
O4 – HKCU\..\Run: [mibupsv] c:\windows\okmkbem.exe
O4 – HKCU\..\Run: [mswdjpk] c:\windows\okmkbem.exe
O4 – HKCU\..\Run: [nelrnmk] c:\windows\okmkbem.exe
O4 – HKCU\..\Run: [podedkq] c:\windows\okmkbem.exe
O4 – HKCU\..\Run: [nwgwuvd] c:\windows\okmkbem.exe
O4 – HKCU\..\Run: [liivese] c:\windows\okmkbem.exe
O4 – HKCU\..\Run: [bplbikq] c:\windows\okmkbem.exe
O4 – HKCU\..\Run: [aossrne] c:\windows\okmkbem.exe
O4 – HKCU\..\Run: [aakoopm] c:\windows\okmkbem.exe
O4 – HKCU\..\Run: [iuiomqj] c:\windows\okmkbem.exe
O4 – HKCU\..\Run: [awmqihw] c:\windows\okmkbem.exe
O4 – HKCU\..\Run: [mdcixau] c:\windows\okmkbem.exe
O4 – HKCU\..\Run: [hkhpebe] c:\windows\okmkbem.exe
O4 – HKCU\..\Run: [cylsjvb] c:\windows\okmkbem.exe
O4 – HKCU\..\Run: [urxhvte] c:\windows\okmkbem.exe
O4 – HKCU\..\Run: [eteerxp] c:\windows\okmkbem.exe
O4 – HKCU\..\Run: [tfagfig] c:\windows\okmkbem.exe
O4 – HKCU\..\Run: [fulosaw] c:\windows\okmkbem.exe
O4 – HKCU\..\Run: [gphiixk] c:\windows\okmkbem.exe
O4 – HKCU\..\Run: [pehodea] c:\windows\okmkbem.exe
O4 – HKCU\..\Run: [nelcdft] c:\windows\okmkbem.exe
O4 – HKCU\..\Run: [mrkdikn] c:\windows\okmkbem.exe
O4 – HKCU\..\Run: [esjiyqn] c:\windows\okmkbem.exe
O4 – HKCU\..\Run: [nuddjyw] c:\windows\okmkbem.exe
O4 – HKCU\..\Run: [chiyaow] c:\windows\okmkbem.exe
O4 – HKCU\..\Run: [rxxbghr] c:\windows\okmkbem.exe
O4 – HKCU\..\Run: [gaiijas] c:\windows\okmkbem.exe
O4 – HKCU\..\Run: [lfapkhu] c:\windows\okmkbem.exe
O4 – HKCU\..\Run: [gdlefqf] c:\windows\okmkbem.exe
O4 – HKCU\..\Run: [gdjptjh] c:\windows\okmkbem.exe
O4 – HKCU\..\Run: [qucjjvt] c:\windows\okmkbem.exe
O4 – HKCU\..\Run: [jmduree] c:\windows\okmkbem.exe
O4 – HKCU\..\Run: [kivadrs] c:\windows\okmkbem.exe
O4 – HKCU\..\Run: [ytbsuhu] c:\windows\okmkbem.exe
O4 – HKCU\..\Run: [pdiwncv] c:\windows\okmkbem.exe
O4 – HKCU\..\Run: [ospppjm] c:\windows\okmkbem.exe
O4 – HKCU\..\Run: [oawasei] c:\windows\okmkbem.exe
O4 – HKCU\..\Run: [smgrvyi] c:\windows\okmkbem.exe
O4 – HKCU\..\Run: [ghtfygd] c:\windows\okmkbem.exe
O4 – HKCU\..\Run: [emvvpqm] c:\windows\okmkbem.exe
O4 – HKCU\..\Run: [xfrsllq] c:\windows\okmkbem.exe
O4 – HKCU\..\Run: [cprgmds] c:\windows\okmkbem.exe
O4 – HKCU\..\Run: [gekwbvr] c:\windows\okmkbem.exe
O4 – HKCU\..\Run: [vfofkih] c:\windows\okmkbem.exe
O4 – HKCU\..\Run: [mhctrbo] c:\windows\okmkbem.exe
O4 – HKCU\..\Run: [ankperx] c:\windows\okmkbem.exe
O4 – HKCU\..\Run: [lumhwtv] c:\windows\okmkbem.exe
O4 – HKCU\..\Run: [ppagbnq] c:\windows\okmkbem.exe
O4 – HKCU\..\Run: [xnxrped] c:\windows\okmkbem.exe
O4 – HKCU\..\Run: [qdgfxfd] c:\windows\okmkbem.exe
O4 – HKCU\..\Run: [pqauivi] c:\windows\okmkbem.exe
O4 – HKCU\..\Run: [ifihktd] c:\windows\okmkbem.exe
O4 – HKCU\..\Run: [bhfwtdy] c:\windows\okmkbem.exe
O4 – HKCU\..\Run: [wjtsvht] c:\windows\okmkbem.exe
O4 – HKCU\..\Run: [cgorkfi] c:\windows\okmkbem.exe
O4 – HKCU\..\Run: [nqlkxlh] c:\windows\okmkbem.exe
O4 – HKCU\..\Run: [qskovth] c:\windows\okmkbem.exe
O4 – HKCU\..\Run: [cnsaddb] c:\windows\okmkbem.exe
O4 – HKCU\..\Run: [njvwcuw] c:\windows\okmkbem.exe
O4 – HKCU\..\Run: [egnggcv] c:\windows\okmkbem.exe
O4 – HKCU\..\Run: [dajujud] c:\windows\okmkbem.exe
O4 – HKCU\..\Run: [tuycktt] c:\windows\okmkbem.exe
O4 – HKCU\..\Run: [otqdbpy] c:\windows\okmkbem.exe
O4 – HKCU\..\Run: [ckydbyx] c:\windows\okmkbem.exe
O4 – HKCU\..\Run: [fyuffmr] c:\windows\okmkbem.exe
O4 – HKCU\..\Run: [kptyrtw] c:\windows\okmkbem.exe
O4 – HKCU\..\Run: [kjbueip] c:\windows\okmkbem.exe
O4 – HKCU\..\Run: [wxuumle] c:\windows\okmkbem.exe
O4 – HKCU\..\Run: [pgieovg] c:\windows\okmkbem.exe
O4 – HKCU\..\Run: [wcbsulh] c:\windows\okmkbem.exe
O4 – HKCU\..\Run: [rusymth] c:\windows\okmkbem.exe
O4 – HKCU\..\Run: [nqpofkw] c:\windows\okmkbem.exe
O4 – HKCU\..\Run: [sdrojgo] c:\windows\okmkbem.exe
O4 – HKCU\..\Run: [lonilji] c:\windows\okmkbem.exe
O4 – HKCU\..\Run: [awadpeu] c:\windows\okmkbem.exe
O4 – HKCU\..\Run: [buycqtl] c:\windows\okmkbem.exe
O4 – HKCU\..\Run: [iovvesa] c:\windows\okmkbem.exe
O4 – HKCU\..\Run: [dyuonvw] c:\windows\okmkbem.exe
O4 – HKCU\..\Run: [sadgqsv] c:\windows\okmkbem.exe
O4 – HKCU\..\Run: [ihkicuh] c:\windows\okmkbem.exe
O4 – HKCU\..\Run: [hyitrls] c:\windows\okmkbem.exe
O4 – HKCU\..\Run: [qgsexil] c:\windows\okmkbem.exe
O4 – HKCU\..\Run: [oolusav] c:\windows\okmkbem.exe
O4 – HKCU\..\Run: [oltpesd] c:\windows\okmkbem.exe
O4 – HKCU\..\Run: [dhjqrgu] c:\windows\okmkbem.exe
O4 – HKCU\..\Run: [atlljtn] c:\windows\okmkbem.exe
O4 – HKCU\..\Run: [jkoprki] c:\windows\okmkbem.exe
O4 – HKCU\..\Run: [fdkjlyd] c:\windows\okmkbem.exe
O4 – HKCU\..\Run: [vwaajyn] c:\windows\okmkbem.exe
O4 – HKCU\..\Run: [fvrnxhp] c:\windows\okmkbem.exe
O4 – HKCU\..\Run: [tgmqxne] c:\windows\okmkbem.exe
O4 – HKCU\..\Run: [lmfgltf] c:\windows\okmkbem.exe
O4 – HKCU\..\Run: [rnhshvn] c:\windows\okmkbem.exe
O4 – HKCU\..\Run: [wfwatim] c:\windows\okmkbem.exe
O4 – HKCU\..\Run: [veyiwtm] c:\windows\okmkbem.exe
O4 – HKCU\..\Run: [bbwaxme] c:\windows\okmkbem.exe
O4 – HKCU\..\Run: [mdpscfx] c:\windows\okmkbem.exe
O4 – HKCU\..\Run: [agiguhm] c:\windows\okmkbem.exe
O4 – HKCU\..\Run: [tamawmh] c:\windows\okmkbem.exe
O4 – HKCU\..\Run: [guplslb] c:\windows\ipguxxe.exe
O4 – HKCU\..\Run: [exfvvcu] c:\windows\ipguxxe.exe
O4 – HKCU\..\Run: [gjsvicr] c:\windows\chpwubt.exe
O4 – HKCU\..\Run: [xuattvf] c:\windows\chpwubt.exe
O4 – HKCU\..\Run: [cbcbvbt] c:\windows\chpwubt.exe
O4 – HKCU\..\Run: [medyuru] c:\windows\jtdbcma.exe
O4 – HKCU\..\Run: [ywrropi] c:\windows\jtdbcma.exe
O4 – HKCU\..\Run: [phwmjhj] c:\windows\jtdbcma.exe
O4 – HKCU\..\Run: [tmmlkil] c:\windows\jtdbcma.exe
O4 – HKCU\..\Run: [bvpuhqe] c:\windows\jtdbcma.exe
O4 – HKCU\..\Run: [dhgehnm] c:\windows\jtdbcma.exe
O4 – HKCU\..\Run: [giavqsy] c:\windows\jtdbcma.exe
O4 – HKCU\..\Run: [cnesvmg] c:\windows\jtdbcma.exe
O4 – HKCU\..\Run: [bnrwbsh] c:\windows\jtdbcma.exe
O4 – HKCU\..\Run: [rhhcepp] c:\windows\jtdbcma.exe
O4 – HKCU\..\Run: [tfltpbw] c:\windows\jtdbcma.exe
O4 – HKCU\..\Run: [uttxdjo] c:\windows\jtdbcma.exe
O4 – HKCU\..\Run: [qfiktri] c:\windows\jtdbcma.exe
O4 – HKCU\..\Run: [lcxdata] c:\windows\gcqsicu.exe
O4 – HKCU\..\Run: [nwtyjkl] c:\windows\gcqsicu.exe
O4 – HKCU\..\Run: [bjaqhdl] c:\windows\gcqsicu.exe
O4 – HKCU\..\Run: [ovbqyrt] c:\windows\gcqsicu.exe
O4 – HKCU\..\Run: [ikgluiu] c:\windows\gcqsicu.exe
O4 – HKCU\..\Run: [cksccpd] c:\windows\gcqsicu.exe
O4 – HKCU\..\Run: [jesopvx] c:\windows\gcqsicu.exe
O4 – HKCU\..\Run: [ogdeiuj] c:\windows\gcqsicu.exe
O4 – HKCU\..\Run: [wahujun] c:\windows\gcqsicu.exe
O4 – HKCU\..\Run: [iwtdynl] c:\windows\gcqsicu.exe
O4 – HKCU\..\Run: [bdtumco] c:\windows\gcqsicu.exe
O4 – HKCU\..\Run: [vuyktxe] c:\windows\gcqsicu.exe
O4 – HKCU\..\Run: [qccmkxd] c:\windows\gcqsicu.exe
O4 – HKCU\..\Run: [giyxhoy] c:\windows\gcqsicu.exe
O4 – HKCU\..\Run: [pkeecxg] c:\windows\gcqsicu.exe
O4 – HKCU\..\Run: [jevxkrf] c:\windows\gcqsicu.exe
O4 – HKCU\..\Run: [sjmedaj] c:\windows\gcqsicu.exe
O4 – HKCU\..\Run: [remjeun] c:\windows\gcqsicu.exe
O4 – HKCU\..\Run: [wqpdaku] c:\windows\gcqsicu.exe
O4 – HKCU\..\Run: [dxfyxhs] c:\windows\gcqsicu.exe
O4 – HKCU\..\Run: [hdnootd] c:\windows\gcqsicu.exe
O4 – HKCU\..\Run: [pbdsvvt] c:\windows\gcqsicu.exe
O4 – HKCU\..\Run: [hwvjvku] c:\windows\gcqsicu.exe
O4 – HKCU\..\Run: [jlpysml] c:\windows\gcqsicu.exe
O4 – HKCU\..\Run: [lanqljk] c:\windows\gcqsicu.exe
O4 – HKCU\..\Run: [fyddyww] c:\windows\gcqsicu.exe
O4 – HKCU\..\Run: [uptfyva] c:\windows\gcqsicu.exe
O4 – HKCU\..\Run: [mviwdor] c:\windows\gcqsicu.exe
O4 – HKCU\..\Run: [raljsiv] c:\windows\gcqsicu.exe
O4 – HKCU\..\Run: [cesanmh] c:\windows\gcqsicu.exe
O4 – HKCU\..\Run: [kpqwbgj] c:\windows\gcqsicu.exe
O4 – HKCU\..\Run: [qwbsles] c:\windows\gcqsicu.exe
O4 – HKCU\..\Run: [vjrtnim] c:\windows\gcqsicu.exe
O4 – HKCU\..\Run: [nawohpj] c:\windows\gcqsicu.exe
O4 – HKCU\..\Run: [xvfeack] c:\windows\gcqsicu.exe
O4 – HKCU\..\Run: [oynykip] c:\windows\gcqsicu.exe
O4 – HKCU\..\Run: [nrvpkkk] c:\windows\gcqsicu.exe
O4 – HKCU\..\Run: [owcdwob] c:\windows\gcqsicu.exe
O4 – HKCU\..\Run: [qqcuiie] c:\windows\gcqsicu.exe
O4 – HKCU\..\Run: [xbgxajv] c:\windows\gcqsicu.exe
O4 – HKCU\..\Run: [cojxpqk] c:\windows\gcqsicu.exe
O4 – HKCU\..\Run: [jhvrwwp] c:\windows\gcqsicu.exe
O4 – HKCU\..\Run: [ejptiss] c:\windows\gcqsicu.exe
O4 – HKCU\..\Run: [mphhctd] c:\windows\gcqsicu.exe
O4 – HKCU\..\Run: [xwccegt] c:\windows\gcqsicu.exe
O4 – HKCU\..\Run: [dqpfgif] c:\windows\gcqsicu.exe
O4 – HKCU\..\Run: [qjkvblx] c:\windows\gcqsicu.exe
O4 – HKCU\..\Run: [jmsnfhx] c:\windows\gcqsicu.exe
O4 – HKCU\..\Run: [qjeqcmx] c:\windows\gcqsicu.exe
O4 – HKCU\..\Run: [ohdfguv] c:\windows\gcqsicu.exe
O4 – HKCU\..\Run: [fehdufd] c:\windows\gcqsicu.exe
O4 – HKCU\..\Run: [baogxqf] c:\windows\gcqsicu.exe
O4 – HKCU\..\Run: [fwonqny] c:\windows\gcqsicu.exe
O4 – HKCU\..\Run: [vjncugr] c:\windows\gcqsicu.exe
O4 – HKCU\..\Run: [udqfbeu] c:\windows\gcqsicu.exe
O4 – HKCU\..\Run: [tqkuctd] c:\windows\gcqsicu.exe
O4 – HKCU\..\Run: [hexmklr] c:\windows\gcqsicu.exe
O4 – HKCU\..\Run: [yusqspb] c:\windows\gcqsicu.exe
O4 – HKCU\..\Run: [qojyuvg] c:\windows\gcqsicu.exe
O4 – HKCU\..\Run: [phxmwlv] c:\windows\gcqsicu.exe
O4 – HKCU\..\Run: [esaqoex] c:\windows\gcqsicu.exe
O4 – HKCU\..\Run: [whekrua] c:\windows\gcqsicu.exe
O4 – HKCU\..\Run: [inkpsci] c:\windows\gcqsicu.exe
O4 – HKCU\..\Run: [pvtgdka] c:\windows\gcqsicu.exe
O4 – HKCU\..\Run: [fxrxclk] c:\windows\gcqsicu.exe
O4 – HKCU\..\Run: [pcogoqy] c:\windows\gcqsicu.exe
O4 – HKCU\..\Run: [xwomhye] c:\windows\gcqsicu.exe
O4 – HKCU\..\Run: [clewifl] c:\windows\gcqsicu.exe
O4 – HKCU\..\Run: [uxhhtqm] c:\windows\gcqsicu.exe
O4 – HKCU\..\Run: [ncqorsn] c:\windows\gcqsicu.exe
O4 – HKCU\..\Run: [ifchcrq] c:\windows\gcqsicu.exe
O4 – HKCU\..\Run: [tgqqbhd] c:\windows\gcqsicu.exe
O4 – HKCU\..\Run: [ukqnrvq] c:\windows\gcqsicu.exe
O4 – HKCU\..\Run: [nsrbuky] c:\windows\gcqsicu.exe
O4 – HKCU\..\Run: [grkmvpj] c:\windows\gcqsicu.exe
O4 – HKCU\..\Run: [ykroxrm] c:\windows\gcqsicu.exe
O4 – HKCU\..\Run: [mtmhcrl] c:\windows\gcqsicu.exe
O4 – HKCU\..\Run: [dvfsmuf] c:\windows\gcqsicu.exe
O4 – HKCU\..\Run: [qctxsfe] c:\windows\gcqsicu.exe
O4 – HKCU\..\Run: [uykayfj] c:\windows\gcqsicu.exe
O4 – HKCU\..\Run: [xwhvwja] c:\windows\gcqsicu.exe
O4 – HKCU\..\Run: [uswvgoe] c:\windows\gcqsicu.exe
O4 – HKCU\..\Run: [rqaeovw] c:\windows\gcqsicu.exe
O4 – HKCU\..\Run: [jwiargq] c:\windows\gcqsicu.exe
O4 – HKCU\..\Run: [ydwjnnr] c:\windows\gcqsicu.exe
O4 – HKCU\..\Run: [byxvqas] c:\windows\gcqsicu.exe
O4 – HKCU\..\Run: [bcfvwxx] c:\windows\gcqsicu.exe
O4 – HKCU\..\Run: [wyvrhru] c:\windows\gcqsicu.exe
O4 – HKCU\..\Run: [phgllex] c:\windows\gcqsicu.exe
O4 – HKCU\..\Run: [qmbepwi] c:\windows\gcqsicu.exe
O4 – HKCU\..\Run: [cmhhfod] c:\windows\gcqsicu.exe
O4 – HKCU\..\Run: [xqhvwwv] c:\windows\gcqsicu.exe
O4 – HKCU\..\Run: [fnakcrv] c:\windows\gcqsicu.exe
O4 – HKCU\..\Run: [viwomln] c:\windows\gcqsicu.exe
O4 – HKCU\..\Run: [bivtfwh] c:\windows\gcqsicu.exe
O4 – HKCU\..\Run: [qdfgsss] c:\windows\gcqsicu.exe
O4 – HKCU\..\Run: [jgixfsw] c:\windows\gcqsicu.exe
O4 – HKCU\..\Run: [kuxkjhy] c:\windows\gcqsicu.exe
O4 – HKCU\..\Run: [efudypa] c:\windows\gcqsicu.exe
O4 – HKCU\..\Run: [wficghg] c:\windows\gcqsicu.exe
O4 – HKCU\..\Run: [odmhxeq] c:\windows\gcqsicu.exe
O4 – HKCU\..\Run: [aecjejs] c:\windows\gcqsicu.exe
O4 – HKCU\..\Run: [bcybcee] c:\windows\gcqsicu.exe
O4 – HKCU\..\Run: [kgdmjbp] c:\windows\gcqsicu.exe
O4 – HKCU\..\Run: [yapxbaj] c:\windows\gcqsicu.exe
O4 – HKCU\..\Run: [juhpwvh] c:\windows\gcqsicu.exe
O4 – HKCU\..\Run: [nwwnuqu] c:\windows\gcqsicu.exe
O4 – HKCU\..\Run: [bbpwrrd] c:\windows\gcqsicu.exe
O4 – HKCU\..\Run: [uthvfit] c:\windows\gcqsicu.exe
O4 – HKCU\..\Run: [gblmsdc] c:\windows\gcqsicu.exe
O4 – HKCU\..\Run: [ftklkpu] c:\windows\gcqsicu.exe
O4 – HKCU\..\Run: [axuopbb] c:\windows\gcqsicu.exe
O4 – HKCU\..\Run: [mkiaygr] c:\windows\gcqsicu.exe
O4 – HKCU\..\Run: [ycvqitf] c:\windows\gcqsicu.exe
O4 – HKCU\..\Run: [mtltdgk] c:\windows\gcqsicu.exe
O4 – HKCU\..\Run: [vnsvoba] c:\windows\gcqsicu.exe
O4 – HKCU\..\Run: [vvmxfvs] c:\windows\gcqsicu.exe
O4 – HKCU\..\Run: [haywyid] c:\windows\gcqsicu.exe
O4 – HKCU\..\Run: [qxshpab] c:\windows\gcqsicu.exe
O4 – HKCU\..\Run: [wtvuery] c:\windows\gcqsicu.exe
O4 – HKCU\..\Run: [ixywbed] c:\windows\gcqsicu.exe
O4 – HKCU\..\Run: [tpgerki] c:\windows\gcqsicu.exe
O4 – HKCU\..\Run: [gegsxwa] c:\windows\gcqsicu.exe
O4 – HKCU\..\Run: [gvupmxq] c:\windows\gcqsicu.exe
O4 – HKCU\..\Run: [cljmhye] c:\windows\gcqsicu.exe
O4 – HKCU\..\Run: [wlnjooc] c:\windows\gcqsicu.exe
O4 – HKCU\..\Run: [effkubb] c:\windows\gcqsicu.exe
O4 – HKCU\..\Run: [bdgwdql] c:\windows\gcqsicu.exe
O4 – HKCU\..\Run: [hvddkvb] c:\windows\gcqsicu.exe
O4 – HKCU\..\Run: [irbnuga] c:\windows\gcqsicu.exe
O4 – HKCU\..\Run: [upqqvxh] c:\windows\gcqsicu.exe
O4 – HKCU\..\Run: [tdigloy] c:\windows\gcqsicu.exe
O4 – HKCU\..\Run: [filkwdn] c:\windows\gcqsicu.exe
O4 – HKCU\..\Run: [aewkarv] c:\windows\gcqsicu.exe
O4 – HKCU\..\Run: [lmxeqgo] c:\windows\gcqsicu.exe
O4 – HKCU\..\Run: [dknruft] c:\windows\gcqsicu.exe
O4 – HKCU\..\Run: [lvslhsp] c:\windows\gcqsicu.exe
O4 – HKCU\..\Run: [jduvhxf] c:\windows\gcqsicu.exe
O4 – HKCU\..\Run: [cssmbql] c:\windows\gcqsicu.exe
O4 – HKCU\..\Run: [nliastb] c:\windows\gcqsicu.exe
O4 – HKCU\..\Run: [evlomgg] c:\windows\gcqsicu.exe
O4 – HKCU\..\Run: [niwioqc] c:\windows\gcqsicu.exe
O4 – HKCU\..\Run: [brnlhbq] c:\windows\gcqsicu.exe
O4 – HKCU\..\Run: [ftsiygk] c:\windows\gcqsicu.exe
O4 – HKCU\..\Run: [fktnxsb] c:\windows\gcqsicu.exe
O4 – HKCU\..\Run: [oycdqfr] c:\windows\gcqsicu.exe
O4 – HKCU\..\Run: [shiogfb] c:\windows\gcqsicu.exe
O4 – HKCU\..\Run: [hremxbh] c:\windows\gcqsicu.exe
O4 – HKCU\..\Run: [iagasru] c:\windows\gcqsicu.exe
O4 – HKCU\..\Run: [ongelmc] c:\windows\gcqsicu.exe
O4 – HKCU\..\Run: [gxkpnvy] c:\windows\gcqsicu.exe
O4 – HKCU\..\Run: [djdiqia] c:\windows\gcqsicu.exe
O4 – HKCU\..\Run: [ipnctbl] c:\windows\gcqsicu.exe
O4 – HKCU\..\Run: [utibeyv] c:\windows\gcqsicu.exe
O4 – HKCU\..\Run: [ghxuupe] c:\windows\gcqsicu.exe
O4 – HKCU\..\Run: [irulcof] c:\windows\gcqsicu.exe
O4 – HKCU\..\Run: [ilapfcm] c:\windows\gcqsicu.exe
O4 – HKCU\..\Run: [espsomv] c:\windows\gcqsicu.exe
O4 – HKCU\..\Run: [ilrouvm] c:\windows\gcqsicu.exe
O4 – HKCU\..\Run: [derjfro] c:\windows\gcqsicu.exe
O4 – HKCU\..\Run: [vdnugjx] c:\windows\gcqsicu.exe
O4 – HKCU\..\Run: [ylyyaiv] c:\windows\gcqsicu.exe
O4 – HKCU\..\Run: [astpqti] c:\windows\gcqsicu.exe
O4 – HKCU\..\Run: [lbnbjbn] c:\windows\gcqsicu.exe
O4 – HKCU\..\Run: [dmbkroq] c:\windows\gcqsicu.exe
O4 – HKCU\..\Run: [ngrqtae] c:\windows\gcqsicu.exe
O4 – HKCU\..\Run: [eqesafr] c:\windows\gcqsicu.exe
O4 – HKCU\..\Run: [ecsjiec] c:\windows\gcqsicu.exe
O4 – HKCU\..\Run: [fkkkwrm] c:\windows\gcqsicu.exe
O4 – HKCU\..\Run: [chifdkm] c:\windows\gcqsicu.exe
O4 – HKCU\..\Run: [dvrwgon] c:\windows\gcqsicu.exe
O4 – HKCU\..\Run: [elenlxg] c:\windows\gcqsicu.exe
O4 – HKCU\..\Run: [cawiapo] c:\windows\gcqsicu.exe
O4 – HKCU\..\Run: [avcfrnl] c:\windows\gcqsicu.exe
O4 – HKCU\..\Run: [sbkarwo] c:\windows\gcqsicu.exe
O4 – HKCU\..\Run: [rvyoagw] c:\windows\gcqsicu.exe
O4 – HKCU\..\Run: [bkarhle] c:\windows\gcqsicu.exe
O4 – HKCU\..\Run: [dasrioi] c:\windows\gcqsicu.exe
O4 – HKCU\..\Run: [pajcrqd] c:\windows\gcqsicu.exe
O4 – HKCU\..\Run: [liypggk] c:\windows\gcqsicu.exe
O4 – HKCU\..\Run: [upfkcck] c:\windows\gcqsicu.exe
O4 – HKCU\..\Run: [wrgostt] c:\windows\gcqsicu.exe
O4 – HKCU\..\Run: [ninwxun] c:\windows\gcqsicu.exe
O4 – HKCU\..\Run: [ufqmqbl] c:\windows\gcqsicu.exe
O4 – HKCU\..\Run: [nsljdlx] c:\windows\gcqsicu.exe
O4 – HKCU\..\Run: [ipmffho] c:\windows\gcqsicu.exe
O4 – HKCU\..\Run: [iqceoqa] c:\windows\gcqsicu.exe
O4 – HKCU\..\Run: [xbpcbsm] c:\windows\gcqsicu.exe
O4 – HKCU\..\Run: [gnaqvfk] c:\windows\gcqsicu.exe
O4 – HKCU\..\Run: [pgupekc] c:\windows\gcqsicu.exe
O4 – HKCU\..\Run: [ehmhlti] c:\windows\gcqsicu.exe
O4 – HKCU\..\Run: [cqlvwin] c:\windows\gcqsicu.exe
O4 – HKCU\..\Run: [xragfwp] c:\windows\gcqsicu.exe
O4 – HKCU\..\Run: [vqufffe] c:\windows\gcqsicu.exe
O4 – HKCU\..\Run: [wkwoebn] c:\windows\gcqsicu.exe
O4 – HKCU\..\Run: [tvgeksy] c:\windows\gcqsicu.exe
O4 – HKCU\..\Run: [soidjrq] c:\windows\gcqsicu.exe
O4 – HKCU\..\Run: [qmcafmv] c:\windows\gcqsicu.exe
O4 – HKCU\..\Run: [xvxsllj] c:\windows\gcqsicu.exe
O4 – HKCU\..\Run: [uqmstna] c:\windows\gcqsicu.exe
O4 – HKCU\..\Run: [bfdcjkc] c:\windows\gcqsicu.exe
O4 – HKCU\..\Run: [aywbpau] c:\windows\gcqsicu.exe
O4 – HKCU\..\Run: [tcmhgfk] c:\windows\gcqsicu.exe
O4 – HKCU\..\Run: [sxnfhdp] c:\windows\gcqsicu.exe
O4 – HKCU\..\Run: [wgpvtng] c:\windows\gcqsicu.exe
O4 – HKCU\..\Run: [rspcrbi] c:\windows\gcqsicu.exe
O4 – HKCU\..\Run: [xeeevlj] c:\windows\gcqsicu.exe
O4 – HKCU\..\Run: [sojkpqy] c:\windows\gcqsicu.exe
O4 – HKCU\..\Run: [wvosnye] c:\windows\gcqsicu.exe
O4 – HKCU\..\Run: [ftusnqu] c:\windows\gcqsicu.exe
O4 – HKCU\..\Run: [gphvfky] c:\windows\gcqsicu.exe
O4 – HKCU\..\Run: [dhlwwqj] c:\windows\gcqsicu.exe
O4 – HKCU\..\Run: [prhxhef] c:\windows\gcqsicu.exe
O4 – HKCU\..\Run: [horclim] c:\windows\gcqsicu.exe
O4 – HKCU\..\Run: [dkgdbfn] c:\windows\gcqsicu.exe
O4 – HKCU\..\Run: [gpdkbjt] c:\windows\gcqsicu.exe
O4 – HKCU\..\Run: [tveaqyq] c:\windows\gcqsicu.exe
O4 – HKCU\..\Run: [vtscxde] c:\windows\gcqsicu.exe
O4 – HKCU\..\Run: [oxkgavu] c:\windows\gcqsicu.exe
O4 – HKCU\..\Run: [wuofvml] c:\windows\gcqsicu.exe
O4 – HKCU\..\Run: [grfkfln] c:\windows\gcqsicu.exe
O4 – HKCU\..\Run: [gfpyapy] c:\windows\gcqsicu.exe
O4 – HKCU\..\Run: [kxvqycn] c:\windows\gcqsicu.exe
O4 – HKCU\..\Run: [hwgodcv] c:\windows\gcqsicu.exe
O4 – HKCU\..\Run: [lyasvce] c:\windows\gcqsicu.exe
O4 – HKCU\..\Run: [mxqrmqs] c:\windows\gcqsicu.exe
O4 – HKCU\..\Run: [ojsbend] c:\windows\gcqsicu.exe
O4 – HKCU\..\Run: [mkvhaoe] c:\windows\gcqsicu.exe
O4 – HKCU\..\Run: [kpgkxod] c:\windows\gcqsicu.exe
O4 – HKCU\..\Run: [jcrkwlc] c:\windows\gcqsicu.exe
O4 – HKCU\..\Run: [hikghjm] c:\windows\gcqsicu.exe
O4 – HKCU\..\Run: [jmrycra] c:\windows\gcqsicu.exe
O4 – HKCU\..\Run: [xtkuhpm] c:\windows\gcqsicu.exe
O4 – HKCU\..\Run: [ssovvmw] c:\windows\gcqsicu.exe
O4 – HKCU\..\Run: [detgulm] c:\windows\gcqsicu.exe
O4 – HKCU\..\Run: [ysrqpkd] c:\windows\gcqsicu.exe
O4 – HKCU\..\Run: [yonaudw] c:\windows\gcqsicu.exe
O4 – HKCU\..\Run: [obcwgly] c:\windows\gcqsicu.exe
O4 – HKCU\..\Run: [hfdycdx] c:\windows\gcqsicu.exe
O4 – HKCU\..\Run: [pguaqvd] c:\windows\gcqsicu.exe
O4 – HKCU\..\Run: [oiwbfad] c:\windows\gcqsicu.exe
O4 – HKCU\..\Run: [gylslev] c:\windows\gcqsicu.exe
O4 – HKCU\..\Run: [uutlpjx] c:\windows\gcqsicu.exe
O4 – HKCU\..\Run: [bkyagfc] c:\windows\gcqsicu.exe
O4 – HKCU\..\Run: [ffmjlcs] c:\windows\gcqsicu.exe
O4 – HKCU\..\Run: [ujbqglj] c:\windows\gcqsicu.exe
O4 – HKCU\..\Run: [ritkdlw] c:\windows\gcqsicu.exe
O4 – HKCU\..\Run: [symhtti] c:\windows\gcqsicu.exe
O4 – HKCU\..\Run: [akcjvfs] c:\windows\gcqsicu.exe
O4 – HKCU\..\Run: [vueelfk] c:\windows\gcqsicu.exe
O4 – HKCU\..\Run: [dxpswcy] c:\windows\gcqsicu.exe
O4 – HKCU\..\Run: [wwakutb] c:\windows\gcqsicu.exe
O4 – HKCU\..\Run: [twpqkwj] c:\windows\gcqsicu.exe
O4 – HKCU\..\Run: [drqrthr] c:\windows\gcqsicu.exe
O4 – HKCU\..\Run: [prxrsgw] c:\windows\gcqsicu.exe
O4 – HKCU\..\Run: [xiaqsjy] c:\windows\gcqsicu.exe
O4 – HKCU\..\Run: [hlyqrot] c:\windows\gcqsicu.exe
O4 – HKCU\..\Run: [jxpuakf] c:\windows\gcqsicu.exe
O4 – HKCU\..\Run: [hhaqken] c:\windows\gcqsicu.exe
O4 – HKCU\..\Run: [iopcmod] c:\windows\gcqsicu.exe
O4 – HKCU\..\Run: [npryjip] c:\windows\gcqsicu.exe
O4 – HKCU\..\Run: [rbatmbe] c:\windows\gcqsicu.exe
O4 – HKCU\..\Run: [xhuisht] c:\windows\gcqsicu.exe
O4 – HKCU\..\Run: [cxehefn] c:\windows\gcqsicu.exe
O4 – HKCU\..\Run: [tmqvevt] c:\windows\gcqsicu.exe
O4 – HKCU\..\Run: [rfnbapm] c:\windows\gcqsicu.exe
O4 – HKCU\..\Run: [kthirdb] c:\windows\gcqsicu.exe
O4 – HKCU\..\Run: [ssyovst] c:\windows\gcqsicu.exe
O4 – HKCU\..\Run: [sxrndmc] c:\windows\gcqsicu.exe
O4 – HKCU\..\Run: [rxcmbyp] c:\windows\gcqsicu.exe
O4 – HKCU\..\Run: [mkkmqia] c:\windows\gcqsicu.exe
O4 – HKCU\..\Run: [pgcpbju] c:\windows\gcqsicu.exe
O4 – HKCU\..\Run: [bgkwucc] c:\windows\gcqsicu.exe
O4 – HKCU\..\Run: [vdsbdve] c:\windows\gcqsicu.exe
O4 – HKCU\..\Run: [lknkrkj] c:\windows\gcqsicu.exe
O4 – HKCU\..\Run: [aovrsxo] c:\windows\gcqsicu.exe
O4 – HKCU\..\Run: [aesnmyo] c:\windows\gcqsicu.exe
O4 – HKCU\..\Run: [lcycujq] c:\windows\gcqsicu.exe
O4 – HKCU\..\Run: [vkivnwj] c:\windows\gcqsicu.exe
O4 – HKCU\..\Run: [mpnhqsr] c:\windows\gcqsicu.exe
O4 – HKCU\..\Run: [dysrhuf] c:\windows\gcqsicu.exe
O4 – HKCU\..\Run: [xkwuyga] c:\windows\gcqsicu.exe
O4 – HKCU\..\Run: [djkbyft] c:\windows\gcqsicu.exe
O4 – HKCU\..\Run: [tbhljpg] c:\windows\gcqsicu.exe
O4 – HKCU\..\Run: [eeffjro] c:\windows\gcqsicu.exe
O4 – HKCU\..\Run: [htnrarn] c:\windows\gcqsicu.exe
O4 – HKCU\..\Run: [lsylxnf] c:\windows\gcqsicu.exe
O4 – HKCU\..\Run: [hhohpti] c:\windows\gcqsicu.exe
O4 – HKCU\..\Run: [jrkggxk] c:\windows\gcqsicu.exe
O4 – HKCU\..\Run: [beryxei] c:\windows\gcqsicu.exe
O4 – HKCU\..\Run: [calwsub] c:\windows\gcqsicu.exe
O4 – HKCU\..\Run: [dfxghtu] c:\windows\gcqsicu.exe
O4 – HKCU\..\Run: [nnsrtbr] c:\windows\gcqsicu.exe
O4 – HKCU\..\Run: [qpqcrpf] c:\windows\gcqsicu.exe
O4 – HKCU\..\Run: [naibdpe] c:\windows\gcqsicu.exe
O4 – HKCU\..\Run: [fjsuvnc] c:\windows\gcqsicu.exe
O4 – HKCU\..\Run: [kyinmsa] c:\windows\gcqsicu.exe
O4 – HKCU\..\Run: [mbtbfbf] c:\windows\gcqsicu.exe
O4 – HKCU\..\Run: [sstcrel] c:\windows\gcqsicu.exe
O4 – HKCU\..\Run: [ruuqjcn] c:\windows\gcqsicu.exe
O4 – HKCU\..\Run: [qjyhtsl] c:\windows\gcqsicu.exe
O4 – HKCU\..\Run: [dngwrvk] c:\windows\gcqsicu.exe
O4 – HKCU\..\Run: [ecguvin] c:\windows\gcqsicu.exe
O4 – HKCU\..\Run: [yycirsl] c:\windows\gcqsicu.exe
O4 – HKCU\..\Run: [ecpnxvf] c:\windows\gcqsicu.exe
O4 – HKCU\..\Run: [nxrfulm] c:\windows\gcqsicu.exe
O4 – HKCU\..\Run: [gdgiejo] c:\windows\gcqsicu.exe
O4 – HKCU\..\Run: [upknsvs] c:\windows\gcqsicu.exe
O4 – HKCU\..\Run: [inagmwh] c:\windows\gcqsicu.exe
O4 – HKCU\..\Run: [gxaltin] c:\windows\gcqsicu.exe
O4 – HKCU\..\Run: [hvdklxv] c:\windows\gcqsicu.exe
O4 – HKCU\..\Run: [uxcpqtg] c:\windows\gcqsicu.exe
O4 – HKCU\..\Run: [ayohkkg] c:\windows\gcqsicu.exe
O4 – HKCU\..\Run: [odymqbp] c:\windows\gcqsicu.exe
O4 – HKCU\..\Run: [tamvbdo] c:\windows\gcqsicu.exe
O4 – HKCU\..\Run: [igraxya] c:\windows\gcqsicu.exe
O4 – HKCU\..\Run: [wmxveyr] c:\windows\gcqsicu.exe
O4 – HKCU\..\Run: [squxlcp] c:\windows\gcqsicu.exe
O4 – HKCU\..\Run: [piebwji] c:\windows\gcqsicu.exe
O4 – HKCU\..\Run: [rdrqsrk] c:\windows\gcqsicu.exe
O4 – HKCU\..\Run: [octuaug] c:\windows\gcqsicu.exe
O4 – HKCU\..\Run: [cjcqktt] c:\windows\gcqsicu.exe
O4 – HKCU\..\Run: [fesiuhb] c:\windows\gcqsicu.exe
O4 – HKCU\..\Run: [peclvdf] c:\windows\gcqsicu.exe
O4 – HKCU\..\Run: [ujfjdxy] c:\windows\gcqsicu.exe
O4 – HKCU\..\Run: [htgfbhm] c:\windows\gcqsicu.exe
O4 – HKCU\..\Run: [ssflrql] c:\windows\gcqsicu.exe
O4 – HKCU\..\Run: [bfgsddb] c:\windows\gcqsicu.exe
O4 – HKCU\..\Run: [tqweuxh] c:\windows\gcqsicu.exe
O4 – HKCU\..\Run: [pulgppw] c:\windows\gcqsicu.exe
O4 – HKCU\..\Run: [gswbnly] c:\windows\gcqsicu.exe
O4 – HKCU\..\Run: [rvkoolh] c:\windows\gcqsicu.exe
O4 – HKCU\..\Run: [avjbsam] c:\windows\gcqsicu.exe
O4 – HKCU\..\Run: [vxbyvip] c:\windows\gcqsicu.exe
O4 – HKCU\..\Run: [ylvxwog] c:\windows\gcqsicu.exe
O4 – HKCU\..\Run: [ytojlko] c:\windows\gcqsicu.exe
O4 – HKCU\..\Run: [wkxjaym] c:\windows\gcqsicu.exe
O4 – HKCU\..\Run: [txmoprn] c:\windows\gcqsicu.exe
O4 – HKCU\..\Run: [lsssucw] c:\windows\gcqsicu.exe
O4 – HKCU\..\Run: [fmagqwn] c:\windows\gcqsicu.exe
O4 – HKCU\..\Run: [qigilyn] c:\windows\gcqsicu.exe
O4 – HKCU\..\Run: [fauptog] c:\windows\gcqsicu.exe
O4 – HKCU\..\Run: [pwjefwe] c:\windows\gcqsicu.exe
O4 – HKCU\..\Run: [aialqjn] c:\windows\gcqsicu.exe
O4 – HKCU\..\Run: [oxanuov] c:\windows\gcqsicu.exe
O4 – HKCU\..\Run: [hpmpoiy] c:\windows\gcqsicu.exe
O4 – HKCU\..\Run: [foopwrr] c:\windows\gcqsicu.exe
O4 – HKCU\..\Run: [ghpswwh] c:\windows\gcqsicu.exe
O4 – HKCU\..\Run: [hvtkuui] c:\windows\gcqsicu.exe
O4 – HKCU\..\Run: [ljbjrrf] c:\windows\gcqsicu.exe
O4 – HKCU\..\Run: [ssslvdd] c:\windows\gcqsicu.exe
O4 – HKCU\..\Run: [jfgxwsq] c:\windows\gcqsicu.exe
O4 – HKCU\..\Run: [telsouh] c:\windows\gcqsicu.exe
O4 – HKCU\..\Run: [xduhnwh] c:\windows\gcqsicu.exe
O4 – HKCU\..\Run: [spnnmnu] c:\windows\gcqsicu.exe
O4 – HKCU\..\Run: [ojmjmpf] c:\windows\gcqsicu.exe
O4 – HKCU\..\Run: [tcetlab] c:\windows\gcqsicu.exe
O4 – HKCU\..\Run: [qtjdike] c:\windows\gcqsicu.exe
O4 – HKCU\..\Run: [drqprvm] c:\windows\gcqsicu.exe
O4 – HKCU\..\Run: [wsnguoy] c:\windows\gcqsicu.exe
O4 – HKCU\..\Run: [syubqat] c:\windows\gcqsicu.exe
O4 – HKCU\..\Run: [oepeiad] c:\windows\gcqsicu.exe
O4 – HKCU\..\Run: [cmjtbta] c:\windows\gcqsicu.exe
O4 – HKCU\..\Run: [mqfavvc] c:\windows\gcqsicu.exe
O4 – HKCU\..\Run: [hivqbkw] c:\windows\gcqsicu.exe
O4 – HKCU\..\Run: [vgerdql] c:\windows\gcqsicu.exe
O4 – HKCU\..\Run: [nrlxckb] c:\windows\gcqsicu.exe
O4 – HKCU\..\Run: [walxhvo] c:\windows\gcqsicu.exe
O4 – HKCU\..\Run: [crwqpac] c:\windows\gcqsicu.exe
O4 – HKCU\..\Run: [dueoqjy] c:\windows\gcqsicu.exe
O4 – HKCU\..\Run: [dxpdlnr] c:\windows\gcqsicu.exe
O4 – HKCU\..\Run: [xyaovby] c:\windows\gcqsicu.exe
O4 – HKCU\..\Run: [inknkiw] c:\windows\gcqsicu.exe
O4 – HKCU\..\Run: [kkwmljy] c:\windows\gcqsicu.exe
O4 – HKCU\..\Run: [nthfbdd] c:\windows\gcqsicu.exe
O4 – HKCU\..\Run: [hcdxnbx] c:\windows\gcqsicu.exe
O4 – HKCU\..\Run: [shnqyye] c:\windows\gcqsicu.exe
O4 – HKCU\..\Run: [pmoqxuu] c:\windows\gcqsicu.exe
O4 – HKCU\..\Run: [ntkygsm] c:\windows\gcqsicu.exe
O4 – HKCU\..\Run: [jcjhqhb] c:\windows\gcqsicu.exe
O4 – HKCU\..\Run: [tgqsiic] c:\windows\gcqsicu.exe
O4 – HKCU\..\Run: [ncxvltn] c:\windows\gcqsicu.exe
O4 – HKCU\..\Run: [kexuddk] c:\windows\gcqsicu.exe
O4 – HKCU\..\Run: [pxdicgn] c:\windows\gcqsicu.exe
O4 – HKCU\..\Run: [xmafjnr] c:\windows\gcqsicu.exe
O4 – HKCU\..\Run: [daxhnho] c:\windows\gcqsicu.exe
O4 – HKCU\..\Run: [vaqcnir] c:\windows\gcqsicu.exe
O4 – HKCU\..\Run: [tqjspgu] c:\windows\gcqsicu.exe
O4 – HKCU\..\Run: [ttoruln] c:\windows\gcqsicu.exe
O4 – HKCU\..\Run: [qposcen] c:\windows\gcqsicu.exe
O4 – HKCU\..\Run: [kcvolnc] c:\windows\gcqsicu.exe
O4 – HKCU\..\Run: [yjlnwig] c:\windows\gcqsicu.exe
O4 – HKCU\..\Run: [gnomnpl] c:\windows\gcqsicu.exe
O4 – HKCU\..\Run: [wrjdpas] c:\windows\gcqsicu.exe
O4 – HKCU\..\Run: [luyvyax] c:\windows\gcqsicu.exe
O4 – HKCU\..\Run: [wdnpqhv] c:\windows\gcqsicu.exe
O4 – HKCU\..\Run: [vwjvtce] c:\windows\gcqsicu.exe
O4 – HKCU\..\Run: [gqdygbb] c:\windows\gcqsicu.exe
O4 – HKCU\..\Run: [ndgvsft] c:\windows\gcqsicu.exe
O4 – HKCU\..\Run: [abnfbpy] c:\windows\gcqsicu.exe
O4 – HKCU\..\Run: [qjwqgob] c:\windows\gcqsicu.exe
O4 – HKCU\..\Run: [cduqdem] c:\windows\gcqsicu.exe
O4 – HKCU\..\Run: [llpevlg] c:\windows\gcqsicu.exe
O4 – HKCU\..\Run: [uarcuky] c:\windows\gcqsicu.exe
O4 – HKCU\..\Run: [tdmqjcv] c:\windows\gcqsicu.exe
O4 – HKCU\..\Run: [ugvbmxy] c:\windows\gcqsicu.exe
O4 – HKCU\..\Run: [ptcogbo] c:\windows\gcqsicu.exe
O4 – HKCU\..\Run: [yqhhfgx] c:\windows\gcqsicu.exe
O4 – HKCU\..\Run: [ippylef] c:\windows\gcqsicu.exe
O4 – HKCU\..\Run: [cigywgv] c:\windows\gcqsicu.exe
O4 – HKCU\..\Run: [xjqkxeh] c:\windows\gcqsicu.exe
O4 – HKCU\..\Run: [kmhjofh] c:\windows\gcqsicu.exe
O4 – HKCU\..\Run: [srnntqn] c:\windows\gcqsicu.exe
O4 – HKCU\..\Run: [yxxjiot] c:\windows\gcqsicu.exe
O4 – HKCU\..\Run: [ivwcxua] c:\windows\gcqsicu.exe
O4 – HKCU\..\Run: [rqcyevn] c:\windows\gcqsicu.exe
O4 – HKCU\..\Run: [wlupapm] c:\windows\gcqsicu.exe
O4 – HKCU\..\Run: [grpbnsi] c:\windows\gcqsicu.exe
O4 – HKCU\..\Run: [sdsmrpb] c:\windows\gcqsicu.exe
O4 – HKCU\..\Run: [awedray] c:\windows\gcqsicu.exe
O4 – HKCU\..\Run: [ghiaeix] c:\windows\gcqsicu.exe
O4 – HKCU\..\Run: [lmlybvr] c:\windows\gcqsicu.exe
O4 – HKCU\..\Run: [fgaifbc] c:\windows\gcqsicu.exe
O4 – HKCU\..\Run: [oltsevi] c:\windows\gcqsicu.exe
O4 – HKCU\..\Run: [etptyik] c:\windows\gcqsicu.exe
O4 – HKCU\..\Run: [cbtqnii] c:\windows\gcqsicu.exe
O4 – HKCU\..\Run: [lkhuccy] c:\windows\gcqsicu.exe
O4 – HKCU\..\Run: [oeqdhsn] c:\windows\gcqsicu.exe
O4 – HKCU\..\Run: [clvmxdw] c:\windows\gcqsicu.exe
O4 – HKCU\..\Run: [yeosttr] c:\windows\gcqsicu.exe
O4 – HKCU\..\Run: [oxmtbig] c:\windows\gcqsicu.exe
O4 – HKCU\..\Run: [phphree] c:\windows\gcqsicu.exe
O4 – HKCU\..\Run: [maktmhm] c:\windows\gcqsicu.exe
O4 – HKCU\..\Run: [fomgdww] c:\windows\gcqsicu.exe
O4 – HKCU\..\Run: [pclisuy] c:\windows\gcqsicu.exe
O4 – HKCU\..\Run: [pjknvvn] c:\windows\gcqsicu.exe
O4 – HKCU\..\Run: [jdkokkc] c:\windows\gcqsicu.exe
O4 – HKCU\..\Run: [lqifmmk] c:\windows\gcqsicu.exe
O4 – HKCU\..\Run: [odyhdaj] c:\windows\gcqsicu.exe
O4 – HKCU\..\Run: [ijhrola] c:\windows\gcqsicu.exe
O4 – HKCU\..\Run: [ijsusve] c:\windows\gcqsicu.exe
O4 – HKCU\..\Run: [euqbnjs] c:\windows\gcqsicu.exe
O4 – HKCU\..\Run: [odamrvl] c:\windows\gcqsicu.exe
O4 – HKCU\..\Run: [fjsrbqw] c:\windows\gcqsicu.exe
O4 – HKCU\..\Run: [pdjrcwg] c:\windows\gcqsicu.exe
O4 – HKCU\..\Run: [tyrvyhd] c:\windows\gcqsicu.exe
O4 – HKCU\..\Run: [edwjplu] c:\windows\gcqsicu.exe
O4 – HKCU\..\Run: [wsacbyc] c:\windows\gcqsicu.exe
O4 – HKCU\..\Run: [opkfxqu] c:\windows\gcqsicu.exe
O4 – HKCU\..\Run: [ttwcqwh] c:\windows\gcqsicu.exe
O4 – HKCU\..\Run: [lrnhtff] c:\windows\gcqsicu.exe
O4 – HKCU\..\Run: [bwehbxq] c:\windows\gcqsicu.exe
O4 – HKCU\..\Run: [oskloux] c:\windows\gcqsicu.exe
O4 – HKCU\..\Run: [ylptupx] c:\windows\gcqsicu.exe
O4 – HKCU\..\Run: [fikbftj] c:\windows\gcqsicu.exe
O4 – HKCU\..\Run: [yjkcpqt] c:\windows\gcqsicu.exe
O4 – HKCU\..\Run: [ldkgmuu] c:\windows\gcqsicu.exe
O4 – HKCU\..\Run: [tuxdfrr] c:\windows\gcqsicu.exe
O4 – HKCU\..\Run: [fbeffun] c:\windows\gcqsicu.exe
O4 – HKCU\..\Run: [kpxegdc] c:\windows\gcqsicu.exe
O4 – HKCU\..\Run: [kaijmqs] c:\windows\gcqsicu.exe
O4 – HKCU\..\Run: [dabwkbo] c:\windows\gcqsicu.exe
O4 – HKCU\..\Run: [ikhsjdh] c:\windows\gcqsicu.exe
O4 – HKCU\..\Run: [xbolbar] c:\windows\gcqsicu.exe
O4 – HKCU\..\Run: [mbwfuum] c:\windows\gcqsicu.exe
O4 – HKCU\..\Run: [arjtwfu] c:\windows\gcqsicu.exe
O4 – HKCU\..\Run: [rovfwke] c:\windows\gcqsicu.exe
O4 – HKCU\..\Run: [cbnoklp] c:\windows\gcqsicu.exe
O4 – HKCU\..\Run: [nneamif] c:\windows\gcqsicu.exe
O4 – HKCU\..\Run: [jtvwdhm] c:\windows\gcqsicu.exe
O4 – HKCU\..\Run: [abdlwji] c:\windows\gcqsicu.exe
O4 – HKCU\..\Run: [ppahnfp] c:\windows\gcqsicu.exe
O4 – HKCU\..\Run: [oahljob] c:\windows\gcqsicu.exe
O4 – HKCU\..\Run: [mmuhbxf] c:\windows\gcqsicu.exe
O4 – HKCU\..\Run: [nugviph] c:\windows\gcqsicu.exe
O4 – HKCU\..\Run: [npywoow] c:\windows\gcqsicu.exe
O4 – HKCU\..\Run: [toeyjfu] c:\windows\gcqsicu.exe
O4 – HKCU\..\Run: [cggfopx] c:\windows\lrqtamy.exe
O4 – HKCU\..\Run: [hguudev] c:\windows\lrqtamy.exe
O4 – HKCU\..\Run: [pglcuew] c:\windows\lrqtamy.exe
O4 – HKCU\..\Run: [ulnfhtg] c:\windows\lrqtamy.exe
O4 – HKCU\..\Run: [gnqhomg] c:\windows\lrqtamy.exe
O4 – HKCU\..\Run: [nbgyjqt] c:\windows\lrqtamy.exe
O4 – HKCU\..\Run: [senvqks] c:\windows\lrqtamy.exe
O4 – HKCU\..\Run: [ipdloot] c:\windows\lrqtamy.exe
O4 – HKCU\..\Run: [qndetsw] c:\windows\lrqtamy.exe
O4 – HKCU\..\Run: [sohcrec] c:\windows\lrqtamy.exe
O4 – HKCU\..\Run: [gigaysm] c:\windows\lrqtamy.exe
O4 – HKCU\..\Run: [tdnafbu] c:\windows\lrqtamy.exe
O4 – HKCU\..\Run: [qhmfpym] c:\windows\lrqtamy.exe
O4 – HKCU\..\Run: [bihvyoj] c:\windows\lrqtamy.exe
O4 – HKCU\..\Run: [mwmgcmq] c:\windows\lrqtamy.exe
O4 – HKCU\..\Run: [tludahs] c:\windows\lrqtamy.exe
O4 – HKCU\..\Run: [oijsxnp] c:\windows\lrqtamy.exe
O4 – HKCU\..\Run: [byerlqg] c:\windows\lrqtamy.exe
O4 – HKCU\..\Run: [qgbhmbm] c:\windows\lrqtamy.exe
O4 – HKCU\..\Run: [vkmnsxg] c:\windows\lrqtamy.exe
O4 – HKCU\..\Run: [wdqbfge] c:\windows\lrqtamy.exe
O4 – HKCU\..\Run: [rafcipw] c:\windows\lrqtamy.exe
O4 – HKCU\..\Run: [bqexnqf] c:\windows\lrqtamy.exe
O4 – HKCU\..\Run: [kceohaw] c:\windows\lrqtamy.exe
O4 – HKCU\..\Run: [qvavelx] c:\windows\hsdsuns.exe
O4 – HKCU\..\Run: [dbgcqre] c:\windows\hsdsuns.exe
O4 – HKCU\..\Run: [dsqupin] c:\windows\hsdsuns.exe
O4 – HKCU\..\Run: [xrilnyd] c:\windows\hsdsuns.exe
O4 – HKCU\..\Run: [tyogiee] c:\windows\hsdsuns.exe
O4 – HKCU\..\Run: [aixeftq] c:\windows\hsdsuns.exe
O4 – HKCU\..\Run: [gvhxsdr] c:\windows\hsdsuns.exe
O4 – HKCU\..\Run: [vdipwvs] c:\windows\hsdsuns.exe
O4 – HKCU\..\Run: [pboqjtq] c:\windows\hsdsuns.exe
O4 – HKCU\..\Run: [gnougho] c:\windows\hsdsuns.exe
O4 – HKCU\..\Run: [sneybux] c:\windows\hsdsuns.exe
O4 – HKCU\..\Run: [gckrdvy] c:\windows\hsdsuns.exe
O4 – HKCU\..\Run: [rbhnakd] c:\windows\hsdsuns.exe
O4 – HKCU\..\Run: [xhrewpj] c:\windows\hsdsuns.exe
O4 – HKCU\..\Run: [bdvkjbv] c:\windows\hsdsuns.exe
O4 – HKCU\..\Run: [whdormp] c:\windows\hsdsuns.exe
O4 – HKCU\..\Run: [puqbgtq] c:\windows\hsdsuns.exe
O4 – HKCU\..\Run: [ssiakbt] c:\windows\hsdsuns.exe
O4 – HKCU\..\Run: [ivintks] c:\windows\hsdsuns.exe
O4 – HKCU\..\Run: [gcxptem] c:\windows\hsdsuns.exe
O4 – HKCU\..\Run: [yfbnpwy] c:\windows\hsdsuns.exe
O4 – HKCU\..\Run: [gdqfpxj] c:\windows\hsdsuns.exe
O4 – HKCU\..\Run: [ksaxwjx] c:\windows\hsdsuns.exe
O4 – HKCU\..\Run: [rqttqib] c:\windows\hsdsuns.exe
O4 – HKCU\..\Run: [wtxtgal] c:\windows\hsdsuns.exe
O4 – HKCU\..\Run: [aavdqlg] c:\windows\hsdsuns.exe
O4 – HKCU\..\Run: [drdyfcq] c:\windows\hsdsuns.exe
O4 – HKCU\..\Run: [uuwlrfi] c:\windows\hsdsuns.exe
O4 – HKCU\..\Run: [yvondts] c:\windows\hsdsuns.exe
O4 – HKCU\..\Run: [wxqersx] c:\windows\hsdsuns.exe
O4 – HKCU\..\Run: [jgqgcns] c:\windows\hsdsuns.exe
O4 – HKCU\..\Run: [mxmpqai] c:\windows\hsdsuns.exe
O4 – HKCU\..\Run: [nntaixf] c:\windows\hsdsuns.exe
O4 – HKCU\..\Run: [bncarqr] c:\windows\hsdsuns.exe
O4 – HKCU\..\Run: [msuvafg] c:\windows\hsdsuns.exe
O4 – HKCU\..\Run: [cyghvox] c:\windows\hsdsuns.exe
O4 – HKCU\..\Run: [wnkgchy] c:\windows\hsdsuns.exe
O4 – HKCU\..\Run: [jmdfvto] c:\windows\hsdsuns.exe
O4 – HKCU\..\Run: [hywduie] c:\windows\hsdsuns.exe
O4 – HKCU\..\Run: [pfjfjkk] c:\windows\hsdsuns.exe
O4 – HKCU\..\Run: [lagndui] c:\windows\hsdsuns.exe
O4 – HKCU\..\Run: [jkjpqlw] c:\windows\hsdsuns.exe
O4 – HKCU\..\Run: [hiutumc] c:\windows\hsdsuns.exe
O4 – HKCU\..\Run: [cmwxeui] c:\windows\hsdsuns.exe
O4 – HKCU\..\Run: [vurxqkq] c:\windows\hsdsuns.exe
O4 – HKCU\..\Run: [srutbla] c:\windows\hsdsuns.exe
O4 – HKCU\..\Run: [vsylaxy] c:\windows\hsdsuns.exe
O4 – HKCU\..\Run: [nwomjmb] c:\windows\hsdsuns.exe
O4 – HKCU\..\Run: [ieeptxv] c:\windows\hsdsuns.exe
O4 – HKCU\..\Run: [dolivgy] c:\windows\hsdsuns.exe
O4 – HKCU\..\Run: [okufjcr] c:\windows\hsdsuns.exe
O4 – HKCU\..\Run: [dupwhtk] c:\windows\hsdsuns.exe
O4 – HKCU\..\Run: [rpgimcf] c:\windows\hsdsuns.exe
O4 – HKCU\..\Run: [rdaoqse] c:\windows\hsdsuns.exe
O4 – HKCU\..\Run: [dblyuww] c:\windows\hsdsuns.exe
O4 – HKCU\..\Run: [qvefxio] c:\windows\hsdsuns.exe
O4 – HKCU\..\Run: [rcaybjd] c:\windows\hsdsuns.exe
O4 – HKCU\..\Run: [ayprdfe] c:\windows\hsdsuns.exe
O4 – HKCU\..\Run: [uoovnlm] c:\windows\hsdsuns.exe
O4 – HKCU\..\Run: [krgmtip] c:\windows\hsdsuns.exe
O4 – HKCU\..\Run: [dtttxbo] c:\windows\hsdsuns.exe
O4 – HKCU\..\Run: [lklmhhe] c:\windows\hsdsuns.exe
O4 – HKCU\..\Run: [lcxpgfo] c:\windows\hsdsuns.exe
O4 – HKCU\..\Run: [pgeuged] c:\windows\hsdsuns.exe
O4 – HKCU\..\Run: [ybwygcb] c:\windows\hsdsuns.exe
O4 – HKCU\..\Run: [ginonyx] c:\windows\hsdsuns.exe
O4 – HKCU\..\Run: [uaegfox] c:\windows\hsdsuns.exe
O4 – HKCU\..\Run: [jimvvod] c:\windows\hsdsuns.exe
O4 – HKCU\..\Run: [sllbubb] c:\windows\hsdsuns.exe
O4 – HKCU\..\Run: [uahuxkh] c:\windows\hsdsuns.exe
O4 – HKCU\..\Run: [nrkfofs] c:\windows\hsdsuns.exe
O4 – HKCU\..\Run: [btnliln] c:\windows\hsdsuns.exe
O4 – HKCU\..\Run: [jmtjibw] c:\windows\hsdsuns.exe
O4 – HKCU\..\Run: [thiakxy] c:\windows\hsdsuns.exe
O4 – HKCU\..\Run: [pqwbjrj] c:\windows\hsdsuns.exe
O4 – HKCU\..\Run: [jhcvusx] c:\windows\hsdsuns.exe
O4 – HKCU\..\Run: [uuhloqk] c:\windows\hsdsuns.exe
O4 – HKCU\..\Run: [fgdawad] c:\windows\hsdsuns.exe
O4 – HKCU\..\Run: [ihwqyqx] c:\windows\hsdsuns.exe
O4 – HKCU\..\Run: [qkefbph] c:\windows\hsdsuns.exe
O4 – HKCU\..\Run: [wwemrym] c:\windows\hsdsuns.exe
O4 – HKCU\..\Run: [ykpkncd] c:\windows\hsdsuns.exe
O4 – HKCU\..\Run: [qyewcnd] c:\windows\hsdsuns.exe
O4 – HKCU\..\Run: [xmqcodp] c:\windows\hsdsuns.exe
O4 – HKCU\..\Run: [qfatgiy] c:\windows\hsdsuns.exe
O4 – HKCU\..\Run: [pkbvuqi] c:\windows\hsdsuns.exe
O4 – HKCU\..\Run: [gysuwqs] c:\windows\hsdsuns.exe
O4 – HKCU\..\Run: [goyuyjp] c:\windows\hsdsuns.exe
O4 – HKCU\..\Run: [kalelnb] c:\windows\hsdsuns.exe
O4 – HKCU\..\Run: [vdlkxcm] c:\windows\hsdsuns.exe
O4 – HKCU\..\Run: [seqjmdm] c:\windows\hsdsuns.exe
O4 – HKCU\..\Run: [siuyygl] c:\windows\hsdsuns.exe
O4 – HKCU\..\Run: [egakkmj] c:\windows\hsdsuns.exe
O4 – HKCU\..\Run: [ooohrov] c:\windows\hsdsuns.exe
O4 – HKCU\..\Run: [xklpstp] c:\windows\hsdsuns.exe
O4 – HKCU\..\Run: [tattqok] c:\windows\hsdsuns.exe
O4 – HKCU\..\Run: [ppptgig] c:\windows\hsdsuns.exe
O4 – HKCU\..\Run: [atjxyej] c:\windows\hsdsuns.exe
O4 – HKCU\..\Run: [xaegtaq] c:\windows\hsdsuns.exe
O4 – HKCU\..\Run: [imcprtm] c:\windows\hsdsuns.exe
O4 – HKCU\..\Run: [iljghht] c:\windows\hsdsuns.exe
O4 – HKCU\..\Run: [etsrtpu] c:\windows\hsdsuns.exe
O4 – HKCU\..\Run: [jbsaawb] c:\windows\hsdsuns.exe
O4 – HKCU\..\Run: [cyijkch] c:\windows\hsdsuns.exe
O4 – HKCU\..\Run: [brgegtf] c:\windows\hsdsuns.exe
O4 – HKCU\..\Run: [qnhdkhf] c:\windows\hsdsuns.exe
O4 – HKCU\..\Run: [pyvehyv] c:\windows\hsdsuns.exe
O4 – HKCU\..\Run: [odbxejm] c:\windows\hsdsuns.exe
O4 – HKCU\..\Run: [trvpoyu] c:\windows\hsdsuns.exe
O4 – HKCU\..\Run: [exxnsgp] c:\windows\hsdsuns.exe
O4 – HKCU\..\Run: [wumwgik] c:\windows\hsdsuns.exe
O4 – HKCU\..\Run: [ixlqjbp] c:\windows\hsdsuns.exe
O4 – HKCU\..\Run: [aiwshfm] c:\windows\hsdsuns.exe
O4 – HKCU\..\Run: [mopkgas] c:\windows\hsdsuns.exe
O4 – HKCU\..\Run: [obwukie] c:\windows\hsdsuns.exe
O4 – HKCU\..\Run: [fsdrsbu] c:\windows\hsdsuns.exe
O4 – HKCU\..\Run: [yuajpnn] c:\windows\hsdsuns.exe
O4 – HKCU\..\Run: [uvbrmqr] c:\windows\hsdsuns.exe
O4 – HKCU\..\Run: [elwgfuc] c:\windows\hsdsuns.exe
O4 – HKCU\..\Run: [nysmmrj] c:\windows\hsdsuns.exe
O4 – HKCU\..\Run: [rtojswe] c:\windows\hsdsuns.exe
O4 – HKCU\..\Run: [vugmwnt] c:\windows\hsdsuns.exe
O4 – HKCU\..\Run: [ubuwnsr] c:\windows\hsdsuns.exe
O4 – HKCU\..\Run: [fgrgmtp] c:\windows\hsdsuns.exe
O4 – HKCU\..\Run: [hybaixk] c:\windows\hsdsuns.exe
O4 – HKCU\..\Run: [afkginw] c:\windows\hsdsuns.exe
O4 – HKCU\..\Run: [eeebojk] c:\windows\hsdsuns.exe
O4 – HKCU\..\Run: [xjvkoji] c:\windows\hsdsuns.exe
O4 – HKCU\..\Run: [ckcmnxr] c:\windows\hsdsuns.exe
O4 – HKCU\..\Run: [qfmiasl] c:\windows\hsdsuns.exe
O4 – HKCU\..\Run: [thgefdm] c:\windows\hsdsuns.exe
O4 – HKCU\..\Run: [nyexlur] c:\windows\hsdsuns.exe
O4 – HKCU\..\Run: [whvkgxm] c:\windows\hsdsuns.exe
O4 – HKCU\..\Run: [epvmvjc] c:\windows\hsdsuns.exe
O4 – HKCU\..\Run: [fxwhenp] c:\windows\hsdsuns.exe
O4 – HKCU\..\Run: [vvlugpw] c:\windows\hsdsuns.exe
O4 – HKCU\..\Run: [cuybfjb] c:\windows\hsdsuns.exe
O4 – HKCU\..\Run: [inceoac] c:\windows\hsdsuns.exe
O4 – HKCU\..\Run: [ftcjcao] c:\windows\hsdsuns.exe
O4 – HKCU\..\Run: [fowpklq] c:\windows\hsdsuns.exe
O4 – HKCU\..\Run: [ufbyjhd] c:\windows\hsdsuns.exe
O4 – HKCU\..\Run: [inpbael] c:\windows\hsdsuns.exe
O4 – HKCU\..\Run: [xiuxwdx] c:\windows\hsdsuns.exe
O4 – HKCU\..\Run: [npatybe] c:\windows\hsdsuns.exe
O4 – HKCU\..\Run: [gpmlvbp] c:\windows\hsdsuns.exe
O4 – HKCU\..\Run: [akhmaoe] c:\windows\hsdsuns.exe
O4 – HKCU\..\Run: [ddlhvev] c:\windows\hsdsuns.exe
O4 – HKCU\..\Run: [leccxer] c:\windows\hsdsuns.exe
O4 – HKCU\..\Run: [udysjof] c:\windows\hsdsuns.exe
O4 – HKCU\..\Run: [biivbrh] c:\windows\hsdsuns.exe
O4 – HKCU\..\Run: [hnubtko] c:\windows\hsdsuns.exe
O4 – HKCU\..\Run: [mdbebnc] c:\windows\hsdsuns.exe
O4 – HKCU\..\Run: [eplqevf] c:\windows\hsdsuns.exe
O4 – HKCU\..\Run: [gltbydk] c:\windows\hsdsuns.exe
O4 – HKCU\..\Run: [wqnrfvf] c:\windows\hsdsuns.exe
O4 – HKCU\..\Run: [keawmps] c:\windows\hsdsuns.exe
O4 – HKCU\..\Run: [ospcmgc] c:\windows\hsdsuns.exe
O4 – HKCU\..\Run: [oggaofg] c:\windows\hsdsuns.exe
O4 – HKCU\..\Run: [okartco] c:\windows\hsdsuns.exe
O4 – HKCU\..\Run: [fjbrowc] c:\windows\hsdsuns.exe
O4 – HKCU\..\Run: [btoeljf] c:\windows\hsdsuns.exe
O4 – HKCU\..\Run: [jcrxlcq] c:\windows\hsdsuns.exe
O4 – HKCU\..\Run: [hhwiboo] c:\windows\hsdsuns.exe
O4 – HKCU\..\Run: [klvgjml] c:\windows\hsdsuns.exe
O4 – HKCU\..\Run: [otrbmtn] c:\windows\hsdsuns.exe
O4 – HKCU\..\Run: [plxwmra] c:\windows\hsdsuns.exe
O4 – HKCU\..\Run: [lkuvcec] c:\windows\hsdsuns.exe
O4 – HKCU\..\Run: [hpksmhm] c:\windows\hsdsuns.exe
O4 – HKCU\..\Run: [dedalfh] c:\windows\hsdsuns.exe
O4 – HKCU\..\Run: [bqoiuoc] c:\windows\hsdsuns.exe
O4 – HKCU\..\Run: [hnebhjr] c:\windows\hsdsuns.exe
O4 – HKCU\..\Run: [virgqse] c:\windows\hsdsuns.exe
O4 – HKCU\..\Run: [cdqdtjs] c:\windows\hsdsuns.exe
O4 – HKCU\..\Run: [mxlgcuo] c:\windows\hsdsuns.exe
O4 – HKCU\..\Run: [utspxcd] c:\windows\hsdsuns.exe
O4 – HKCU\..\Run: [inllowg] c:\windows\hsdsuns.exe
O4 – HKCU\..\Run: [ibepqwr] c:\windows\hsdsuns.exe
O4 – HKCU\..\Run: [sjmvrey] c:\windows\hsdsuns.exe
O4 – HKCU\..\Run: [gqhqyqh] c:\windows\hsdsuns.exe
O4 – HKCU\..\Run: [ejrshjy] c:\windows\hsdsuns.exe
O4 – HKCU\..\Run: [iwpihgk] c:\windows\hsdsuns.exe
O4 – HKCU\..\Run: [drhywuc] c:\windows\hsdsuns.exe
O4 – HKCU\..\Run: [aelcnqr] c:\windows\hsdsuns.exe
O4 – HKCU\..\Run: [efnujcx] c:\windows\hsdsuns.exe
O4 – HKCU\..\Run: [lukcbsc] c:\windows\hsdsuns.exe
O4 – HKCU\..\Run: [jjxichv] c:\windows\hsdsuns.exe
O4 – HKCU\..\Run: [xmhbcce] c:\windows\hsdsuns.exe
O4 – HKCU\..\Run: [wqvfbno] c:\windows\hsdsuns.exe
O4 – HKCU\..\Run: [egjfpjs] c:\windows\hsdsuns.exe
O4 – HKCU\..\Run: [ammgvnx] c:\windows\hsdsuns.exe
O4 – HKCU\..\Run: [obaiicr] c:\windows\hsdsuns.exe
O4 – HKCU\..\Run: [ofwnjjy] c:\windows\hsdsuns.exe
O4 – HKCU\..\Run: [ewhwexp] c:\windows\hsdsuns.exe
O4 – HKCU\..\Run: [lruvhuk] c:\windows\hsdsuns.exe
O4 – HKCU\..\Run: [hmnauyx] c:\windows\hsdsuns.exe
O4 – HKCU\..\Run: [podbmom] c:\windows\hsdsuns.exe
O4 – HKCU\..\Run: [mnnttsf] c:\windows\hsdsuns.exe
O4 – HKCU\..\Run: [fcjpeoq] c:\windows\hsdsuns.exe
O4 – HKCU\..\Run: [mmmntaa] c:\windows\hsdsuns.exe
O4 – HKCU\..\Run: [lhtbuik] c:\windows\hsdsuns.exe
O4 – HKCU\..\Run: [vaxdgrt] c:\windows\hsdsuns.exe
O4 – HKCU\..\Run: [dfotylp] c:\windows\hsdsuns.exe
O4 – HKCU\..\Run: [sumklsf] c:\windows\hsdsuns.exe
O4 – HKCU\..\Run: [axojcyt] c:\windows\hsdsuns.exe
O4 – HKCU\..\Run: [vehpnfy] c:\windows\hsdsuns.exe
O4 – HKCU\..\Run: [kbvtjda] c:\windows\hsdsuns.exe
O4 – HKCU\..\Run: [adgsiko] c:\windows\hsdsuns.exe
O4 – HKCU\..\Run: [tujqsuy] c:\windows\hsdsuns.exe
O4 – HKCU\..\Run: [wwejxbp] c:\windows\hsdsuns.exe
O4 – HKCU\..\Run: [atbrdjo] c:\windows\hsdsuns.exe
O4 – HKCU\..\Run: [wevfgip] c:\windows\hsdsuns.exe
O4 – HKCU\..\Run: [wyyaagk] c:\windows\hsdsuns.exe
O4 – HKCU\..\Run: [rvptell] c:\windows\hsdsuns.exe
O4 – HKCU\..\Run: [tvgrlya] c:\windows\hsdsuns.exe
O4 – HKCU\..\Run: [sjvcpqb] c:\windows\hsdsuns.exe
O4 – HKCU\..\Run: [oisicqe] c:\windows\hsdsuns.exe
O4 – HKCU\..\Run: [iedebop] c:\windows\msjbcol.exe
O4 – HKCU\..\Run: [ckjppwv] c:\windows\msjbcol.exe
O4 – HKCU\..\Run: [aiorfxn] c:\windows\msjbcol.exe
O4 – HKCU\..\Run: [whsinuy] c:\windows\msjbcol.exe
O4 – HKCU\..\Run: [gpwgapw] c:\windows\msjbcol.exe
O4 – HKCU\..\Run: [gxgwpwn] c:\windows\msjbcol.exe
O4 – HKCU\..\Run: [dlmgmpl] c:\windows\msjbcol.exe
O4 – HKCU\..\Run: [gyrqsyn] c:\windows\msjbcol.exe
O4 – HKCU\..\Run: [fplbufc] c:\windows\msjbcol.exe
O4 – HKCU\..\Run: [mjryppq] c:\windows\msjbcol.exe
O4 – HKCU\..\Run: [nljeghd] c:\windows\msjbcol.exe
O4 – HKCU\..\Run: [madpwbh] c:\windows\msjbcol.exe
O4 – HKCU\..\Run: [wxpwdwe] c:\windows\msjbcol.exe
O4 – HKCU\..\Run: [pssybof] c:\windows\msjbcol.exe
O4 – HKCU\..\Run: [ujmbvio] c:\windows\msjbcol.exe
O4 – HKCU\..\Run: [onfalcw] c:\windows\msjbcol.exe
O4 – HKCU\..\Run: [ffkfuln] c:\windows\msjbcol.exe
O4 – HKCU\..\Run: [laxdjfe] c:\windows\msjbcol.exe
O4 – HKCU\..\Run: [ilfdrio] c:\windows\msjbcol.exe
O4 – HKCU\..\Run: [ikpviht] c:\windows\msjbcol.exe
O4 – HKCU\..\Run: [lsmopbs] c:\windows\msjbcol.exe
O4 – HKCU\..\Run: [pqsdxib] c:\windows\msjbcol.exe
O4 – HKCU\..\Run: [gsckhcf] c:\windows\msjbcol.exe
O4 – HKCU\..\Run: [nwisrop] c:\windows\msjbcol.exe
O4 – HKCU\..\Run: [gvnajrr] c:\windows\msjbcol.exe
O4 – HKCU\..\Run: [sjvevyg] c:\windows\msjbcol.exe
O4 – HKCU\..\Run: [lxpyyyc] c:\windows\msjbcol.exe
O4 – HKCU\..\Run: [ultvemq] c:\windows\msjbcol.exe
O4 – HKCU\..\Run: [fwvduxe] c:\windows\msjbcol.exe
O4 – HKCU\..\Run: [cyrhcco] c:\windows\msjbcol.exe
O4 – HKCU\..\Run: [nxkyaxb] c:\windows\msjbcol.exe
O4 – HKCU\..\Run: [lfgfoui] c:\windows\msjbcol.exe
O4 – HKCU\..\Run: [gspfmph] c:\windows\msjbcol.exe
O4 – HKCU\..\Run: [usaihen] c:\windows\msjbcol.exe
O4 – HKCU\..\Run: [nnvxoxk] c:\windows\msjbcol.exe
O4 – HKCU\..\Run: [mwpxudm] c:\windows\msjbcol.exe
O4 – HKCU\..\Run: [epkqtnx] c:\windows\msjbcol.exe
O4 – HKCU\..\Run: [pjaktxy] c:\windows\msjbcol.exe
O4 – HKCU\..\Run: [efjbmsk] c:\windows\msjbcol.exe
O4 – HKCU\..\Run: [pimibry] c:\windows\msjbcol.exe
O4 – HKCU\..\Run: [yqqvsde] c:\windows\msjbcol.exe
O4 – HKCU\..\Run: [vocvjbj] c:\windows\msjbcol.exe
O4 – HKCU\..\Run: [lsydgns] c:\windows\msjbcol.exe
O4 – HKCU\..\Run: [cfvdkba] c:\windows\msjbcol.exe
O4 – HKCU\..\Run: [jqbqedq] c:\windows\msjbcol.exe
O4 – HKCU\..\Run: [kqdnoti] c:\windows\msjbcol.exe
O4 – HKCU\..\Run: [avqxdvw] c:\windows\msjbcol.exe
O4 – HKCU\..\Run: [qugqcpq] c:\windows\msjbcol.exe
O4 – HKCU\..\Run: [btyijic] c:\windows\msjbcol.exe
O4 – HKCU\..\Run: [pmvaery] c:\windows\msjbcol.exe
O4 – HKCU\..\Run: [obukvwt] c:\windows\msjbcol.exe
O4 – HKCU\..\Run: [mnoycpg] c:\windows\msjbcol.exe
O4 – HKCU\..\Run: [odxwheu] c:\windows\msjbcol.exe
O4 – HKCU\..\Run: [gvmtlkl] c:\windows\msjbcol.exe
O4 – HKCU\..\Run: [icqrrnv] c:\windows\msjbcol.exe
O4 – HKCU\..\Run: [fvdfkku] c:\windows\msjbcol.exe
O4 – HKCU\..\Run: [drchhmx] c:\windows\msjbcol.exe
O4 – HKCU\..\Run: [ljyibgg] c:\windows\msjbcol.exe
O4 – HKCU\..\Run: [oxvmitv] c:\windows\msjbcol.exe
O4 – HKCU\..\Run: [qskouon] c:\windows\msjbcol.exe
O4 – HKCU\..\Run: [promdfa] c:\windows\msjbcol.exe
O4 – HKCU\..\Run: [pdojvuv] c:\windows\msjbcol.exe
O4 – HKCU\..\Run: [ucqexpa] c:\windows\msjbcol.exe
O4 – HKCU\..\Run: [bmhrtge] c:\windows\msjbcol.exe
O4 – HKCU\..\Run: [nnwtacl] c:\windows\msjbcol.exe
O4 – HKCU\..\Run: [kieextx] c:\windows\msjbcol.exe
O4 – HKCU\..\Run: [osmxupr] c:\windows\msjbcol.exe
O4 – HKCU\..\Run: [tjoqlem] c:\windows\msjbcol.exe
O4 – HKCU\..\Run: [bkpwhev] c:\windows\msjbcol.exe
O4 – HKCU\..\Run: [qyvonqw] c:\windows\msjbcol.exe
O4 – HKCU\..\Run: [lymctrq] c:\windows\msjbcol.exe
O4 – HKCU\..\Run: [gikiqyq] c:\windows\msjbcol.exe
O4 – HKCU\..\Run: [rwlequn] c:\windows\msjbcol.exe
O4 – HKCU\..\Run: [foefahk] c:\windows\msjbcol.exe
O4 – HKCU\..\Run: [auudoqp] c:\windows\msjbcol.exe
O4 – HKCU\..\Run: [bqslsdv] c:\windows\msjbcol.exe
O4 – HKCU\..\Run: [mtbvxcx] c:\windows\msjbcol.exe
O4 – HKCU\..\Run: [bxutrsr] c:\windows\msjbcol.exe
O4 – HKCU\..\Run: [stbahbp] c:\windows\msjbcol.exe
O4 – HKCU\..\Run: [tsrwoqm] c:\windows\msjbcol.exe
O4 – HKCU\..\Run: [tredcpb] c:\windows\msjbcol.exe
O4 – HKCU\..\Run: [dqtcwty] c:\windows\msjbcol.exe
O4 – HKCU\..\Run: [wmrgatk] c:\windows\msjbcol.exe
O4 – HKCU\..\Run: [ypcvkou] c:\windows\msjbcol.exe
O4 – HKCU\..\Run: [htemaew] c:\windows\msjbcol.exe
O4 – HKCU\..\Run: [gwyjvsb] c:\windows\msjbcol.exe
O4 – HKCU\..\Run: [mnrhtrd] c:\windows\msjbcol.exe
O4 – HKCU\..\Run: [yuuvvxe] c:\windows\msjbcol.exe
O4 – HKCU\..\Run: [xjpsrnv] c:\windows\msjbcol.exe
O4 – HKCU\..\Run: [eerlqdo] c:\windows\msjbcol.exe
O4 – HKCU\..\Run: [jatjqmk] c:\windows\msjbcol.exe
O4 – HKCU\..\Run: [awigxdr] c:\windows\msjbcol.exe
O4 – HKCU\..\Run: [uulgaxi] c:\windows\msjbcol.exe
O4 – HKCU\..\Run: [hwwwbip] c:\windows\msjbcol.exe
O4 – HKCU\..\Run: [xgucnhc] c:\windows\msjbcol.exe
O4 – HKCU\..\Run: [dhaetwl] c:\windows\msjbcol.exe
O4 – HKCU\..\Run: [dxrgpww] c:\windows\msjbcol.exe
O4 – HKCU\..\Run: [wcsepgy] c:\windows\msjbcol.exe
O4 – HKCU\..\Run: [eokiefl] c:\windows\msjbcol.exe
O4 – HKCU\..\Run: [yvrssud] c:\windows\msjbcol.exe
O4 – HKCU\..\Run: [fuqvbyx] c:\windows\msjbcol.exe
O4 – HKCU\..\Run: [udbxnct] c:\windows\msjbcol.exe
O4 – HKCU\..\Run: [quinbgu] c:\windows\msjbcol.exe
O4 – HKCU\..\Run: [vqaijbi] c:\windows\msjbcol.exe
O4 – HKCU\..\Run: [hpojnfa] c:\windows\msjbcol.exe
O4 – HKCU\..\Run: [nksdoyr] c:\windows\msjbcol.exe
O4 – HKCU\..\Run: [ihuukvw] c:\windows\msjbcol.exe
O4 – HKCU\..\Run: [powufdb] c:\windows\msjbcol.exe
O4 – HKCU\..\Run: [pcvjyei] c:\windows\msjbcol.exe
O4 – HKCU\..\Run: [cbcfcpr] c:\windows\msjbcol.exe
O4 – HKCU\..\Run: [qecjbqe] c:\windows\msjbcol.exe
O4 – HKCU\..\Run: [sbbntlc] c:\windows\msjbcol.exe
O4 – HKCU\..\Run: [fiqcvfe] c:\windows\msjbcol.exe
O4 – HKCU\..\Run: [amlgtbb] c:\windows\msjbcol.exe
O4 – HKCU\..\Run: [iivjjdo] c:\windows\msjbcol.exe
O4 – HKCU\..\Run: [yugsocp] c:\windows\msjbcol.exe
O4 – HKCU\..\Run: [ykihfoh] c:\windows\msjbcol.exe
O4 – HKCU\..\Run: [ehmjuig] c:\windows\msjbcol.exe
O4 – HKCU\..\Run: [jcqigho] c:\windows\msjbcol.exe
O4 – HKCU\..\Run: [olxmvli] c:\windows\msjbcol.exe
O4 – HKCU\..\Run: [ogrsoti] c:\windows\msjbcol.exe
O4 – HKCU\..\Run: [vtsqsgc] c:\windows\msjbcol.exe
O4 – HKCU\..\Run: [ythhclw] c:\windows\msjbcol.exe
O4 – HKCU\..\Run: [dcmdvbf] c:\windows\msjbcol.exe
O4 – HKCU\..\Run: [fbqhvmk] c:\windows\msjbcol.exe
O4 – HKCU\..\Run: [orxjhuf] c:\windows\msjbcol.exe
O4 – HKCU\..\Run: [nkixpsu] c:\windows\msjbcol.exe
O4 – HKCU\..\Run: [jiwkkyu] c:\windows\msjbcol.exe
O4 – HKCU\..\Run: [wepyhbk] c:\windows\msjbcol.exe
O4 – HKCU\..\Run: [eymilfp] c:\windows\msjbcol.exe
O4 – HKCU\..\Run: [montvws] c:\windows\msjbcol.exe
O4 – HKCU\..\Run: [joxldwp] c:\windows\msjbcol.exe
O4 – HKCU\..\Run: [brsloim] c:\windows\msjbcol.exe
O4 – HKCU\..\Run: [oiyaijy] c:\windows\msjbcol.exe
O4 – HKCU\..\Run: [ivfmeck] c:\windows\msjbcol.exe
O4 – HKCU\..\Run: [eatfdjq] c:\windows\msjbcol.exe
O4 – HKCU\..\Run: [qfpujik] c:\windows\msjbcol.exe
O4 – HKCU\..\Run: [vamofqf] c:\windows\msjbcol.exe
O4 – HKCU\..\Run: [nsuvbin] c:\windows\msjbcol.exe
O4 – HKCU\..\Run: [bdjnfxs] c:\windows\msjbcol.exe
O4 – HKCU\..\Run: [dlodsue] c:\windows\msjbcol.exe
O4 – HKCU\..\Run: [bkfiilt] c:\windows\msjbcol.exe
O4 – HKCU\..\Run: [jdfedif] c:\windows\msjbcol.exe
O4 – HKCU\..\Run: [fmwipke] c:\windows\msjbcol.exe
O4 – HKCU\..\Run: [gaensdh] c:\windows\msjbcol.exe
O4 – HKCU\..\Run: [gxrqvcf] c:\windows\msjbcol.exe
O4 – HKCU\..\Run: [beeiefg] c:\windows\msjbcol.exe
O4 – HKCU\..\Run: [tjdvyxv] c:\windows\msjbcol.exe
O4 – HKCU\..\Run: [bypekuh] c:\windows\msjbcol.exe
O4 – HKCU\..\Run: [lljjxio] c:\windows\msjbcol.exe
O4 – HKCU\..\Run: [nwwawbr] c:\windows\msjbcol.exe
O4 – HKCU\..\Run: [umauiiy] c:\windows\msjbcol.exe
O4 – HKCU\..\Run: [vqcswfc] c:\windows\msjbcol.exe
O4 – HKCU\..\Run: [mcywldt] c:\windows\msjbcol.exe
O4 – HKCU\..\Run: [muivxth] c:\windows\msjbcol.exe
O4 – HKCU\..\Run: [foamadj] c:\windows\msjbcol.exe
O4 – HKCU\..\Run: [eglmejo] c:\windows\msjbcol.exe
O4 – HKCU\..\Run: [aaahfhd] c:\windows\msjbcol.exe
O4 – HKCU\..\Run: [gsqtwpu] c:\windows\msjbcol.exe
O4 – HKCU\..\Run: [niofpwy] c:\windows\msjbcol.exe
O4 – HKCU\..\Run: [qqjlcmv] c:\windows\msjbcol.exe
O4 – HKCU\..\Run: [iyfrogt] c:\windows\msjbcol.exe
O4 – HKCU\..\Run: [qjtxdxp] c:\windows\msjbcol.exe
O4 – HKCU\..\Run: [dtlcwfd] c:\windows\msjbcol.exe
O4 – HKCU\..\Run: [wvyohtu] c:\windows\msjbcol.exe
O4 – HKCU\..\Run: [mbvhpoy] c:\windows\msjbcol.exe
O4 – HKCU\..\Run: [eerdtxy] c:\windows\msjbcol.exe
O4 – HKCU\..\Run: [ydirtfh] c:\windows\msjbcol.exe
O4 – HKCU\..\Run: [pygxecn] c:\windows\msjbcol.exe
O4 – HKCU\..\Run: [ciipbwu] c:\windows\msjbcol.exe
O4 – HKCU\..\Run: [rsvwrhr] c:\windows\msjbcol.exe
O4 – HKCU\..\Run: [opfvdhd] c:\windows\msjbcol.exe
O4 – HKCU\..\Run: [kskbtns] c:\windows\msjbcol.exe
O4 – HKCU\..\Run: [ioorbjj] c:\windows\msjbcol.exe
O4 – HKCU\..\Run: [ltvoivg] c:\windows\msjbcol.exe
O4 – HKCU\..\Run: [ytsbwvi] c:\windows\msjbcol.exe
O4 – HKCU\..\Run: [rcjvqif] c:\windows\msjbcol.exe
O4 – HKCU\..\Run: [uyifhmj] c:\windows\msjbcol.exe
O4 – HKCU\..\Run: [eppusfn] c:\windows\msjbcol.exe
O4 – HKCU\..\Run: [pmtoyxq] c:\windows\msjbcol.exe
O4 – HKCU\..\Run: [ugeacig] c:\windows\msjbcol.exe
O4 – HKCU\..\Run: [pvvvttj] c:\windows\msjbcol.exe
O4 – HKCU\..\Run: [qywkkrc] c:\windows\msjbcol.exe
O4 – HKCU\..\Run: [kqqpcxt] c:\windows\msjbcol.exe
O4 – HKCU\..\Run: [rwlcqua] c:\windows\msjbcol.exe
O4 – HKCU\..\Run: [dddfxjn] c:\windows\msjbcol.exe
O4 – HKCU\..\Run: [bruslrq] c:\windows\msjbcol.exe
O4 – HKCU\..\Run: [moxpsfh] c:\windows\msjbcol.exe
O4 – HKCU\..\Run: [chwulbd] c:\windows\msjbcol.exe
O4 – HKCU\..\Run: [bilfkwu] c:\windows\msjbcol.exe
O4 – HKCU\..\Run: [qfftdqn] c:\windows\msjbcol.exe
O4 – HKCU\..\Run: [ianhfyo] c:\windows\msjbcol.exe
O4 – HKCU\..\Run: [hrqaxey] c:\windows\msjbcol.exe
O4 – HKCU\..\Run: [ibsgcwj] c:\windows\msjbcol.exe
O4 – HKCU\..\Run: [sodlgmc] c:\windows\msjbcol.exe
O4 – HKCU\..\Run: [ppfxmpv] c:\windows\msjbcol.exe
O4 – HKCU\..\Run: [eeqcttf] c:\windows\msjbcol.exe
O4 – HKCU\..\Run: [asbiytf] c:\windows\msjbcol.exe
O4 – HKCU\..\Run: [svcqqnc] c:\windows\msjbcol.exe
O4 – HKCU\..\Run: [atfodww] c:\windows\msjbcol.exe
O4 – HKCU\..\Run: [bhgdxle] c:\windows\msjbcol.exe
O4 – HKCU\..\Run: [ihbgfhm] c:\windows\msjbcol.exe
O4 – HKCU\..\Run: [xwunpai] c:\windows\msjbcol.exe
O4 – HKCU\..\Run: [ldmbgcj] c:\windows\msjbcol.exe
O4 – HKCU\..\Run: [troymti] c:\windows\msjbcol.exe
O4 – HKCU\..\Run: [mwkuwkx] c:\windows\msjbcol.exe
O4 – HKCU\..\Run: [peltivv] c:\windows\msjbcol.exe
O4 – HKCU\..\Run: [tnfmndh] c:\windows\msjbcol.exe
O4 – HKCU\..\Run: [mxwmqts] c:\windows\msjbcol.exe
O4 – HKCU\..\Run: [soebeuk] c:\windows\msjbcol.exe
O4 – HKCU\..\Run: [tfbmfjm] c:\windows\msjbcol.exe
O4 – HKCU\..\Run: [sjfdyyh] c:\windows\msjbcol.exe
O4 – HKCU\..\Run: [qbfsspk] c:\windows\msjbcol.exe
O4 – HKCU\..\Run: [dxhiasd] c:\windows\msjbcol.exe
O4 – HKCU\..\Run: [imbtpwi] c:\windows\msjbcol.exe
O4 – HKCU\..\Run: [bpksank] c:\windows\msjbcol.exe
O4 – HKCU\..\Run: [ximgvlv] c:\windows\msjbcol.exe
O4 – HKCU\..\Run: [sucpgpi] c:\windows\msjbcol.exe
O4 – HKCU\..\Run: [uaspulc] c:\windows\msjbcol.exe
O4 – HKCU\..\Run: [ggiskee] c:\windows\msjbcol.exe
O4 – HKCU\..\Run: [hxhcgyi] c:\windows\msjbcol.exe
O4 – HKCU\..\Run: [fcnqnrp] c:\windows\msjbcol.exe
O4 – HKCU\..\Run: [kaldcop] c:\windows\msjbcol.exe
O4 – HKCU\..\Run: [obimcmh] c:\windows\msjbcol.exe
O4 – HKCU\..\Run: [rpcbvco] c:\windows\msjbcol.exe
O4 – HKCU\..\Run: [deubdui] c:\windows\msjbcol.exe
O4 – HKCU\..\Run: [wslxkug] c:\windows\msjbcol.exe
O4 – HKCU\..\Run: [xiigfax] c:\windows\msjbcol.exe
O4 – HKCU\..\Run: [elvalsy] c:\windows\msjbcol.exe
O4 – HKCU\..\Run: [qvuqabb] c:\windows\msjbcol.exe
O4 – HKCU\..\Run: [qxwdoni] c:\windows\msjbcol.exe
O4 – HKCU\..\Run: [aoyoctf] c:\windows\msjbcol.exe
O4 – HKCU\..\Run: [vlfupkd] c:\windows\msjbcol.exe
O4 – HKCU\..\Run: [nxlmtmd] c:\windows\msjbcol.exe
O4 – HKCU\..\Run: [ktpmapo] c:\windows\msjbcol.exe
O4 – HKCU\..\Run: [waflber] c:\windows\msjbcol.exe
O4 – HKCU\..\Run: [qffulag] c:\windows\msjbcol.exe
O4 – HKCU\..\Run: [axbflrw] c:\windows\msjbcol.exe
O4 – HKCU\..\Run: [jjkuwdo] c:\windows\msjbcol.exe
O4 – HKCU\..\Run: [inujjnr] c:\windows\msjbcol.exe
O4 – HKCU\..\Run: [lumusjr] c:\windows\msjbcol.exe
O4 – HKCU\..\Run: [yracqrh] c:\windows\msjbcol.exe
O4 – HKCU\..\Run: [anmywwd] c:\windows\msjbcol.exe
O4 – HKCU\..\Run: [jgmthww] c:\windows\msjbcol.exe
O4 – HKCU\..\Run: [xgwgudd] c:\windows\msjbcol.exe
O4 – HKCU\..\Run: [meaigjf] c:\windows\msjbcol.exe
O4 – HKCU\..\Run: [elvedjx] c:\windows\msjbcol.exe
O4 – HKCU\..\Run: [oeuvano] c:\windows\msjbcol.exe
O4 – HKCU\..\Run: [mhuomek] c:\windows\msjbcol.exe
O4 – HKCU\..\Run: [gdpeojc] c:\windows\msjbcol.exe
O4 – HKCU\..\Run: [uixbigq] c:\windows\msjbcol.exe
O4 – HKCU\..\Run: [rvfejuf] c:\windows\msjbcol.exe
O4 – HKCU\..\Run: [ebsfyon] c:\windows\msjbcol.exe
O4 – HKCU\..\Run: [ysodesb] c:\windows\msjbcol.exe
O4 – HKCU\..\Run: [cetxmco] c:\windows\msjbcol.exe
O4 – HKCU\..\Run: [wfpncvv] c:\windows\msjbcol.exe
O4 – HKCU\..\Run: [rulauem] c:\windows\msjbcol.exe
O4 – HKCU\..\Run: [tgidunp] c:\windows\msjbcol.exe
O4 – HKCU\..\Run: [gkrcwbe] c:\windows\msjbcol.exe
O4 – HKCU\..\Run: [kevhmdo] c:\windows\msjbcol.exe
O4 – HKCU\..\Run: [ioucvdl] c:\windows\msjbcol.exe
O4 – HKCU\..\Run: [wvnsjna] c:\windows\msjbcol.exe
O4 – HKCU\..\Run: [onnsfrf] c:\windows\msjbcol.exe
O4 – HKCU\..\Run: [rgenoew] c:\windows\msjbcol.exe
O4 – HKCU\..\Run: [vtvjfwg] c:\windows\msjbcol.exe
O4 – HKCU\..\Run: [qehjvar] c:\windows\msjbcol.exe
O4 – HKCU\..\Run: [fyfjejk] c:\windows\msjbcol.exe
O4 – HKCU\..\Run: [ejmguif] c:\windows\msjbcol.exe
O4 – HKCU\..\Run: [jdmmcqv] c:\windows\msjbcol.exe
O4 – HKCU\..\Run: [jcukjip] c:\windows\msjbcol.exe
O4 – HKCU\..\Run: [jnfxtix] c:\windows\msjbcol.exe
O4 – HKCU\..\Run: [kncnglh] c:\windows\msjbcol.exe
O4 – HKCU\..\Run: [mdtfvdu] c:\windows\msjbcol.exe
O4 – HKCU\..\Run: [mgqkuqx] c:\windows\msjbcol.exe
O4 – HKCU\..\Run: [aftyyyo] c:\windows\msjbcol.exe
O4 – HKCU\..\Run: [tistilp] c:\windows\msjbcol.exe
O4 – HKCU\..\Run: [brkkwhr] c:\windows\msjbcol.exe
O4 – HKCU\..\Run: [fbhkdrd] c:\windows\msjbcol.exe
O4 – HKCU\..\Run: [tyrtuvl] c:\windows\msjbcol.exe
O4 – HKCU\..\Run: [pxluwfx] c:\windows\msjbcol.exe
O4 – HKCU\..\Run: [dcelowm] c:\windows\msjbcol.exe
O4 – HKCU\..\Run: [rbmwahr] c:\windows\msjbcol.exe
O4 – HKCU\..\Run: [fhjtfhi] c:\windows\msjbcol.exe
O4 – HKCU\..\Run: [dnqeaan] c:\windows\msjbcol.exe
O4 – HKCU\..\Run: [ehewijp] c:\windows\uccvyei.exe
O4 – HKCU\..\Run: [dlnlyjc] c:\windows\qwnwyge.exe
O4 – HKCU\..\Run: [puwppwt] c:\windows\qwnwyge.exe
O4 – HKCU\..\Run: [feiveyw] c:\windows\qwnwyge.exe
O4 – HKCU\..\Run: [tqwtyma] c:\windows\qwnwyge.exe
O4 – HKCU\..\Run: [bhxvswd] c:\windows\qwnwyge.exe
O4 – HKCU\..\Run: [apstbai] c:\windows\qwnwyge.exe
O4 – HKCU\..\Run: [iutjckf] c:\windows\qwnwyge.exe
O4 – HKCU\..\Run: [brcxhqi] c:\windows\qwnwyge.exe
O4 – HKCU\..\Run: [yrpniak] c:\windows\qwnwyge.exe
O4 – HKCU\..\Run: [lgsdxqw] c:\windows\qwnwyge.exe
O4 – HKCU\..\Run: [oelkuhu] c:\windows\qwnwyge.exe
O4 – HKCU\..\Run: [oarownw] c:\windows\qwnwyge.exe
O4 – HKCU\..\Run: [lejggea] c:\windows\qwnwyge.exe
O4 – HKCU\..\Run: [woilpxj] c:\windows\qwnwyge.exe
O4 – HKCU\..\Run: [viajivo] c:\windows\qwnwyge.exe
O4 – HKCU\..\Run: [qsacjaw] c:\windows\qwnwyge.exe
O4 – HKCU\..\Run: [jwglcik] c:\windows\qwnwyge.exe
O4 – HKCU\..\Run: [tarnxqk] c:\windows\qwnwyge.exe
O4 – HKCU\..\Run: [awfndjx] c:\windows\qwnwyge.exe
O4 – HKCU\..\Run: [eajtlrd] c:\windows\qwnwyge.exe
O4 – HKCU\..\Run: [dtlntex] c:\windows\qwnwyge.exe
O4 – HKCU\..\Run: [hjgrpif] c:\windows\qwnwyge.exe
O4 – HKCU\..\Run: [ccrjwhm] c:\windows\qwnwyge.exe
O4 – HKCU\..\Run: [wwuegsw] c:\windows\qwnwyge.exe
O4 – HKCU\..\Run: [vdrmrtl] c:\windows\qwnwyge.exe
O4 – HKCU\..\Run: [kwmifec] c:\windows\qwnwyge.exe
O4 – HKCU\..\Run: [iqofayx] c:\windows\qwnwyge.exe
O4 – HKCU\..\Run: [khnokag] c:\windows\qwnwyge.exe
O4 – HKCU\..\Run: [ouegxti] c:\windows\qwnwyge.exe
O4 – HKCU\..\Run: [idkdjxh] c:\windows\qwnwyge.exe
O4 – HKCU\..\Run: [fqpetnt] c:\windows\atstuup.exe
O4 – HKCU\..\Run: [biybvkx] c:\windows\atstuup.exe
O4 – HKCU\..\Run: [cdcnsvj] c:\windows\atstuup.exe
O4 – HKCU\..\Run: [trdtohp] c:\windows\atstuup.exe
O4 – HKCU\..\Run: [delpdsc] c:\windows\atstuup.exe
O4 – HKCU\..\Run: [wwgpvpm] c:\windows\atstuup.exe
O4 – HKCU\..\Run: [rwntuhw] c:\windows\atstuup.exe
O4 – HKCU\..\Run: [mjdmvli] c:\windows\atstuup.exe
O4 – HKCU\..\Run: [mgiduky] c:\windows\atstuup.exe
O4 – HKCU\..\Run: [mpnxveh] c:\windows\atstuup.exe
O4 – HKCU\..\Run: [blsbjfy] c:\windows\atstuup.exe
O4 – HKCU\..\Run: [aeadfck] c:\windows\atstuup.exe
O4 – HKCU\..\Run: [fwlklsl] c:\windows\atstuup.exe
O4 – HKCU\..\Run: [wfpqxcm] c:\windows\atstuup.exe
O4 – HKCU\..\Run: [ndxapbn] c:\windows\atstuup.exe
O4 – HKCU\..\Run: [egocret] c:\windows\atstuup.exe
O4 – HKCU\..\Run: [yprftnh] c:\windows\atstuup.exe
O4 – HKCU\..\Run: [xlbelrx] c:\windows\atstuup.exe
O4 – HKCU\..\Run: [odyxksm] c:\windows\atstuup.exe
O4 – HKCU\..\Run: [qtglwnt] c:\windows\atstuup.exe
O4 – HKCU\..\Run: [cgihich] c:\windows\atstuup.exe
O4 – HKCU\..\Run: [hyerysm] c:\windows\atstuup.exe
O4 – HKCU\..\Run: [vhnusnx] c:\windows\atstuup.exe
O4 – HKCU\..\Run: [tlthinl] c:\windows\atstuup.exe
O4 – HKCU\..\Run: [mmewmus] c:\windows\atstuup.exe
O4 – HKCU\..\Run: [fuwlfqp] c:\windows\atstuup.exe
O4 – HKCU\..\Run: [arspeqt] c:\windows\atstuup.exe
O4 – HKCU\..\Run: [ojmwauf] c:\windows\atstuup.exe
O4 – HKCU\..\Run: [ntgtjva] c:\windows\atstuup.exe
O4 – HKCU\..\Run: [sguwdrq] c:\windows\atstuup.exe
O4 – HKCU\..\Run: [rjomcxd] c:\windows\atstuup.exe
O4 – HKCU\..\Run: [ppsrryb] c:\windows\atstuup.exe
O4 – HKCU\..\Run: [escmwwt] c:\windows\atstuup.exe
O4 – HKCU\..\Run: [ikxxpei] c:\windows\atstuup.exe
O4 – HKCU\..\Run: [mbfunmp] c:\windows\atstuup.exe
O4 – HKCU\..\Run: [dajtmeb] c:\windows\atstuup.exe
O4 – HKCU\..\Run: [rbflksp] c:\windows\atstuup.exe
O4 – HKCU\..\Run: [awvbpoh] c:\windows\atstuup.exe
O4 – HKCU\..\Run: [xtpodnc] c:\windows\atstuup.exe
O4 – HKCU\..\Run: [ssivcxx] c:\windows\atstuup.exe
O4 – HKCU\..\Run: [qbmebbj] c:\windows\atstuup.exe
O4 – HKCU\..\Run: [hpmlavk] c:\windows\atstuup.exe
O4 – HKCU\..\Run: [fpumcxu] c:\windows\atstuup.exe
O4 – HKCU\..\Run: [lyrmnsh] c:\windows\atstuup.exe
O4 – HKCU\..\Run: [altnicp] c:\windows\atstuup.exe
O4 – HKCU\..\Run: [bjglllf] c:\windows\atstuup.exe
O4 – HKCU\..\Run: [jkldaxa] c:\windows\atstuup.exe
O4 – HKCU\..\Run: [svnkftg] c:\windows\atstuup.exe
O4 – HKCU\..\Run: [vcewgib] c:\windows\atstuup.exe
O4 – HKCU\..\Run: [lnojosj] c:\windows\atstuup.exe
O4 – HKCU\..\Run: [dhfcavf] c:\windows\atstuup.exe
O4 – HKCU\..\Run: [gtcmuot] c:\windows\atstuup.exe
O4 – HKCU\..\Run: [llmfeda] c:\windows\atstuup.exe
O4 – HKCU\..\Run: [xwjaoug] c:\windows\atstuup.exe
O4 – HKCU\..\Run: [tpfjmuv] c:\windows\atstuup.exe
O4 – HKCU\..\Run: [xiideta] c:\windows\atstuup.exe
O4 – HKCU\..\Run: [dnskumv] c:\windows\atstuup.exe
O4 – HKCU\..\Run: [dbnplgc] c:\windows\atstuup.exe
O4 – HKCU\..\Run: [dkkheip] c:\windows\atstuup.exe
O4 – HKCU\..\Run: [vyiiisa] c:\windows\atstuup.exe
O4 – HKCU\..\Run: [hknldrj] c:\windows\atstuup.exe
O4 – HKCU\..\Run: [vjeftqq] c:\windows\atstuup.exe
O4 – HKCU\..\Run: [peexadu] c:\windows\atstuup.exe
O4 – HKCU\..\Run: [gqsvkgx] c:\windows\atstuup.exe
O4 – HKCU\..\Run: [gynlgxh] c:\windows\atstuup.exe
O4 – HKCU\..\Run: [wohsqkp] c:\windows\atstuup.exe
O4 – HKCU\..\Run: [arpcbrw] c:\windows\atstuup.exe
O4 – HKCU\..\Run: [inennfl] c:\windows\atstuup.exe
O4 – HKCU\..\Run: [gqvangr] c:\windows\atstuup.exe
O4 – HKCU\..\Run: [ekbetjx] c:\windows\atstuup.exe
O4 – HKCU\..\Run: [ljbrobx] c:\windows\atstuup.exe
O4 – HKCU\..\Run: [hprkujk] c:\windows\atstuup.exe
O4 – HKCU\..\Run: [iyqjgul] c:\windows\atstuup.exe
O4 – HKCU\..\Run: [kjiudoh] c:\windows\atstuup.exe
O4 – HKCU\..\Run: [ljjvtkx] c:\windows\atstuup.exe
O4 – HKCU\..\Run: [gniwfxd] c:\windows\atstuup.exe
O4 – HKCU\..\Run: [jkhnvbo] c:\windows\atstuup.exe
O4 – HKCU\..\Run: [iiamevs] c:\windows\atstuup.exe
O4 – HKCU\..\Run: [qwpawwj] c:\windows\atstuup.exe
O4 – HKCU\..\Run: [fchvpit] c:\windows\atstuup.exe
O4 – HKCU\..\Run: [waanpyv] c:\windows\atstuup.exe
O4 – HKCU\..\Run: [lioopot] c:\windows\atstuup.exe
O4 – HKCU\..\Run: [ydjgcfp] c:\windows\atstuup.exe
O4 – HKCU\..\Run: [xepcpvx] c:\windows\atstuup.exe
O4 – HKCU\..\Run: [dyhmrbc] c:\windows\atstuup.exe
O4 – HKCU\..\Run: [aelkljd] c:\windows\atstuup.exe
O4 – HKCU\..\Run: [kvbkigh] c:\windows\atstuup.exe
O4 – HKCU\..\Run: [wgmfngx] c:\windows\atstuup.exe
O4 – HKCU\..\Run: [wngyfxq] c:\windows\atstuup.exe
O4 – HKCU\..\Run: [ydngutx] c:\windows\atstuup.exe
O4 – HKCU\..\Run: [bcqhkyu] c:\windows\atstuup.exe
O4 – HKCU\..\Run: [hbuahsm] c:\windows\atstuup.exe
O4 – HKCU\..\Run: [kmecvxu] c:\windows\atstuup.exe
O4 – HKCU\..\Run: [xqkrauj] c:\windows\atstuup.exe
O4 – HKCU\..\Run: [wwuuvwu] c:\windows\atstuup.exe
O4 – HKCU\..\Run: [vjkpngt] c:\windows\atstuup.exe
O4 – HKCU\..\Run: [oytrexj] c:\windows\atstuup.exe
O4 – HKCU\..\Run: [cberivx] c:\windows\atstuup.exe
O4 – HKCU\..\Run: [avnhuum] c:\windows\atstuup.exe
O4 – HKCU\..\Run: [wssohlf] c:\windows\atstuup.exe
O4 – HKCU\..\Run: [lcxmfyw] c:\windows\atstuup.exe
O4 – HKCU\..\Run: [bektcha] c:\windows\atstuup.exe
O4 – HKCU\..\Run: [ebmnbre] c:\windows\atstuup.exe
O4 – HKCU\..\Run: [ebcgcit] c:\windows\atstuup.exe
O4 – HKCU\..\Run: [qqtkqyf] c:\windows\atstuup.exe
O4 – HKCU\..\Run: [adahoce] c:\windows\atstuup.exe
O4 – HKCU\..\Run: [cloyxco] c:\windows\atstuup.exe
O4 – HKCU\..\Run: [wfftwth] c:\windows\atstuup.exe
O4 – HKCU\..\Run: [wvkpshx] c:\windows\atstuup.exe
O4 – HKCU\..\Run: [kwkowot] c:\windows\atstuup.exe
O4 – HKCU\..\Run: [evcbfxm] c:\windows\atstuup.exe
O4 – HKCU\..\Run: [qypkalf] c:\windows\atstuup.exe
O4 – HKCU\..\Run: [gxetcqt] c:\windows\atstuup.exe
O4 – HKCU\..\Run: [dbbcydi] c:\windows\atstuup.exe
O4 – HKCU\..\Run: [lkogdga] c:\windows\atstuup.exe
O4 – HKCU\..\Run: [fnbryjq] c:\windows\atstuup.exe
O4 – HKCU\..\Run: [tvffrob] c:\windows\atstuup.exe
O4 – HKCU\..\Run: [foxqltu] c:\windows\atstuup.exe
O4 – HKCU\..\Run: [rhuifwa] c:\windows\atstuup.exe
O4 – HKCU\..\Run: [proypwb] c:\windows\ekcypuo.exe
O4 – HKCU\..\Run: [qkqcqmn] c:\windows\ekcypuo.exe
O4 – HKCU\..\Run: [ttrtmjt] c:\windows\ekcypuo.exe
O4 – HKCU\..\Run: [ehxnujd] c:\windows\ekcypuo.exe
O4 – HKCU\..\Run: [ixdnmam] c:\windows\ekcypuo.exe
O4 – HKCU\..\Run: [epyedal] c:\windows\ekcypuo.exe
O4 – HKCU\..\Run: [vbnrvts] c:\windows\ekcypuo.exe
O4 – HKCU\..\Run: [pkokard] c:\windows\ekcypuo.exe
O4 – HKCU\..\Run: [owmtysw] c:\windows\ekcypuo.exe
O4 – HKCU\..\Run: [eincsrx] c:\windows\ekcypuo.exe
O4 – HKCU\..\Run: [tckfqcw] c:\windows\ekcypuo.exe
O4 – HKCU\..\Run: [rbkevwl] c:\windows\ekcypuo.exe
O4 – HKCU\..\Run: [ksmcltt] c:\windows\ekcypuo.exe
O4 – HKCU\..\Run: [vcoyyik] c:\windows\ekcypuo.exe
O4 – HKCU\..\Run: [eieiwqy] c:\windows\ekcypuo.exe
O4 – HKCU\..\Run: [kkntnye] c:\windows\ekcypuo.exe
O4 – HKCU\..\Run: [jydncgn] c:\windows\ekcypuo.exe
O4 – HKCU\..\Run: [cpncmbh] c:\windows\upecvdm.exe
O4 – HKCU\..\Run: [gdhqcic] c:\windows\lkwsmpu.exe
O4 – HKCU\..\Run: [oqxkget] c:\windows\lkwsmpu.exe
O4 – HKCU\..\Run: [xyamgit] c:\windows\lkwsmpu.exe
O4 – HKCU\..\Run: [qutcrmm] c:\windows\lkwsmpu.exe
O4 – HKCU\..\Run: [rbodsti] c:\windows\lkwsmpu.exe
O4 – HKCU\..\Run: [xgncogi] c:\windows\lkwsmpu.exe
O4 – HKCU\..\Run: [sqvhaij] c:\windows\lkwsmpu.exe
O4 – HKCU\..\Run: [bcrqotx] c:\windows\lkwsmpu.exe
O4 – HKCU\..\Run: [fankfht] c:\windows\lkwsmpu.exe
O4 – HKCU\..\Run: [boihysk] c:\windows\lkwsmpu.exe
O4 – HKCU\..\Run: [dmacmhr] c:\windows\lkwsmpu.exe
O4 – HKCU\..\Run: [egojeqb] c:\windows\lkwsmpu.exe
O4 – HKCU\..\Run: [ovitiha] c:\windows\utjmblv.exe
O4 – HKCU\..\Run: [rejuyxp] c:\windows\utjmblv.exe
O4 – HKCU\..\Run: [ysxcqee] c:\windows\utjmblv.exe
O4 – HKCU\..\Run: [exeestx] c:\windows\lqkfxiy.exe
O4 – HKCU\..\Run: [jodrwlm] c:\windows\lqkfxiy.exe
O4 – HKCU\..\Run: [awdgxyp] c:\windows\poaytgh.exe
O4 – HKCU\..\Run: [bhvkope] c:\windows\fdrruwd.exe
O4 – HKCU\..\Run: [tpiryic] c:\windows\ulxpfpd.exe
O4 – HKCU\..\Run: [hjihjoc] c:\windows\fdrruwd.exe
O4 – HKCU\..\Run: [udxjapq] c:\windows\fdrruwd.exe
O4 – HKCU\..\Run: [eoyulvu] c:\windows\fdrruwd.exe
O4 – HKCU\..\Run: [awaewme] c:\windows\fdrruwd.exe
O4 – HKCU\..\Run: [ncwlfcf] c:\windows\fdrruwd.exe
O4 – HKCU\..\Run: [ipkavnn] c:\windows\fdrruwd.exe
O4 – HKCU\..\Run: [aigidvv] c:\windows\fdrruwd.exe
O4 – HKCU\..\Run: [bbjruue] c:\windows\fdrruwd.exe
O4 – HKCU\..\Run: [mlmlpqw] c:\windows\fdrruwd.exe
O4 – HKCU\..\Run: [aidmpda] c:\windows\fdrruwd.exe
O4 – HKCU\..\Run: [cufmhtu] c:\windows\fdrruwd.exe
O4 – HKCU\..\Run: [htlsumk] c:\windows\fdrruwd.exe
O4 – HKCU\..\RunOnce: [Srv32 spool service] C:\WINDOWS\System32\spoolsrv32.exe
O4 – Global Startup: America Online 9.0 Tray Icon.lnk = C:\Program Files\America Online 9.0\aoltray.exe
O4 – Global Startup: Microsoft Office.lnk = C:\Program Files\Microsoft Office\Office\OSA9.EXE
O4 – Global Startup: winlogin.exe
O8 – Extra context menu item: &AOL Toolbar search – res://C:\Program Files\AOL Toolbar\toolbar.dll/SEARCH.HTML
O8 – Extra context menu item: &Google Search – res://C:\Program Files\Google\GoogleToolbar2.dll/cmsearch.html
O8 – Extra context menu item: Backward &Links – res://C:\Program Files\Google\GoogleToolbar2.dll/cmbacklinks.html
O8 – Extra context menu item: Cac&hed Snapshot of Page – res://C:\Program Files\Google\GoogleToolbar2.dll/cmcache.html
O8 – Extra context menu item: Si&milar Pages – res://C:\Program Files\Google\GoogleToolbar2.dll/cmsimilar.html
O8 – Extra context menu item: Translate into English – res://C:\Program Files\Google\GoogleToolbar2.dll/cmtrans.html
O9 – Extra 'Tools' menuitem: Sun Java Console (HKLM)
O9 – Extra button: Messenger (HKLM)
O9 – Extra 'Tools' menuitem: Yahoo! Messenger (HKLM)
O9 – Extra button: AOL Toolbar (HKLM)
O9 – Extra 'Tools' menuitem: AOL Toolbar (HKLM)
O9 – Extra button: Microsoft AntiSpyware helper (HKLM)
O9 – Extra 'Tools' menuitem: Microsoft AntiSpyware helper (HKLM)
O9 – Extra button: Real.com (HKLM)
O9 – Extra button: Messenger (HKLM)
O9 – Extra 'Tools' menuitem: Windows Messenger (HKLM)
O9 – Extra button: Microsoft AntiSpyware helper (HKCU)
O9 – Extra 'Tools' menuitem: Microsoft AntiSpyware helper (HKCU)
O10 – Unknown file in Winsock LSP: c:\windows\system32\flsmngr.dll
O10 – Unknown file in Winsock LSP: c:\windows\system32\flsmngr.dll
O10 – Unknown file in Winsock LSP: c:\windows\system32\flsmngr.dll
O16 – DPF: {1D6711C8-7154-40BB-8380-3DEA45B69CBF} (Web P2P Installer) –
O16 – DPF: {4A3CF76B-EC7A-405D-A67D-8DC6B52AB35B} (QDiagAOLCCUpdateObj Class) – http://aolcc.aol.com/computercheckup/qdiagcc.cab

/End of Log/

June 5, 2005