Blog

  • Mozilla And Firefox Vulnerable To Old Frame Injection Trick

    Something old is new again. Reports by Danish security firm Secunia indicate both Mozilla and Firefox browsers are susceptible to a flaw first discovered in 1998. A malicious coder could use the vulnerability to spoof a legitimate web site, and gather personal information from users tricked into visiting and interacting with the spoofed site.

    read more | digg story

  • Digg to your Blogharbor/Blogware sites (and possibly other web based blogging tools):

    Digg is one of the best online applications for getting readers to your articles or pointing out other usefull web sites and news to hundreds of users instantly.  It is the next Slashdot… only much better.

     

    If you have been registered with digg.com for sometime, you should  realize the power of clicking a button and instantly sending digg entries directly to your blog.

     

    Clicking the “blog” link after reading a great post on digg is a win-win-win action.  It boosts the digg posters ratings sending more readers his way, gives interested traffic to the site of interest and posts free instant content to your site.

     

    However, digg seems partial to only Typepad, Live Journal, WordPress, Blogger and Moveable Type.  If you have blogware, Blogharbor or others web based blogging tools you may have felt left out of being able to use this powerful feature.

     

    Here are the steps to sending content directly to your blog even if you don’t have Typepad, Blogger, Moveable Type, or Live Journal.  It definitely works with Blogware/Blogharbor, but may also work for other webbased blog apps.

     

    DIGG Entries to your Bloghargor/Blogware Site:

     

    If you are familiar with digg.com skip to step 3:

     

    1)                  Assuming you are already a registered user of digg.com, Login and Goto your profile by clicking “my profile” Located in the upper right hand corner of the site.

     

    2)                  Once you are in your profile click “Edit Profile” in upper Right hand corner just below the digg menu bar.

     

    3)                  Go to the “blog preferences” where you’ll see type of blog, blog username, blog password and url of blog

     

    Select “WordPress”  under type of blog

    Enter your username & password

    And enter the full URL of your blog

     

    Digg will automatically recognize blogharbor based blogs as Blogware.

     

    Your last step is the hit “Submit” and check the link.

     

     

    “You digg?”  

    — Marty McSuperFly, Black to the Future

     

     

  • Microsoft: SP2 makes Windows 15 times safer

    Computers running Windows XP Service Pack 2 are 15 times less likely than those running XP or XP SP1 to be infected by some of the most dangerous forms of malware, according to a Microsoft security guru. Jason Garms, who heads the company's anti-malware product team, said Tuesday that this improvement had been revealed by an internal…

    read more | digg story

  • The Ten Commandments of PC Security

    Here's 10 PC Security Commandments to fight off nasty viruses, worms, and Trojan horses by following these simple rules.

    read more | digg story

  • The ISO Network Management Model

     


    Network Management Systems

     

    The rumor on how Disney uses Network Management.

    When the temperature
    rises on the park grounds at Disneyland all the prices of the beverage
    vending machines automatically goes up by 10% to fully capitalize on
    consumer demand.  I believe that is an old Information Technology rumor to explain how network management works… at least I hope it is a rumor.

     

    Why Network Management is important.

    More and more organizations depend on their networks.  Business’ the depend heavily on the status of their networks must have network management tools as they grow.  If
    a network dependent business such as ebay, Google, Yahoo and many
    others go down for even a few minutes, they can loose literally
    hundreds of thousands of dollars in sales and even a small piece of
    their customer’s confidence which could in turn affect the value of
    their stock.  When every second of network time counts the system must be monitored continuously.  The most cost effective way to do this is to use an automated network management tool. 

     

    Network Management Standards

    The International
    Organization for Standards (ISO) addresses the five major functional
    area of the Network Management Model as performance management,
    accounting management, configuration management, fault management and
    security management.

     

    Performance Management

    Performance
    management is monitoring, assessing, and adjusting the available
    bandwidth and network resource usage in order make a network run more
    efficiently.  Performance management is a
    very important part of the network management model particularly to the
    business and/or organization that wants to streamline their network's
    performance. 

     

    An example might be a
    business that has an administrative office who works from 9-5 and
    requires steady use of the network all day.  Everyday at right after lunch the network seems to slow down to a halt and slows down the production considerably.  Using a program like Solar Winds might show an increase in actual nodes and data flowing on the network in the afternoon.  Solar Winds
    would actually help an Network Managers pinpoint the group of new nodes
    and find that the reason for the after lunch network performance slow
    down is due to a group of contracted programmers who come in everyday
    at 1pm to do work.  After identifying the performance issues, System Administrators would then be able to balance the usage of bandwidth.  Devices from companies such as Orbital Data and Cisco even support Performance monitoring over Wide Area Networks connection.

     

    Accounting Management

    Accounting management monitors and assesses the usage of data and/or resources for the purpose of billing.  This aspect of the network management is by Internet Service Providers to bill customers for the resources they use. 

     

    Configuration Management

    The configuration
    side of network management is for tracking the hardware and software
    versions on the network to identify their effects on the network's
    operation.  An example of this is
    Microsoft’s System Management Server (SMS) which has the capability to
    monitor, manage and track every piece of software and hardware on a
    given network.  Configuration management
    tools are great for establishing assurance for business owner who know
    the importance of maintaining control of the networks baseline.

     

    Fault Management

    Fault Management is what most people think of when they think of network management.  The
    purpose of this area of network management is to detect, log and alert
    the system administrators of problems that might effect the systems
    operations.  An organization such as Tivoli,
    HP Openview or WhatupGold could be used to actually page the Network
    Manager when a particular node or section of the network goes down.

     

    Security Management

    Security Management
    deals with controlling access to resources and even alerting the proper
    authorities when certain resources are accessed.  In
    the same way that a network manager can be paged or emailed when a
    resource goes down, network management systems can be used to send
    messages when certain files, servers or routers is accesses.  Intrusion detection systems such as Symantec’s Intruder Alert have this security management capability.

     

    There are many products that support some or even all of these areas of network management.  What
    most network management systems have in common is their use of
    protocols such as Simple Network Management Protocols (SNMP), SNMPv3,
    and Common Management Information Protocol (CMIP). There are a variety
    of Network Management tools ranging from Intuit's Network Management
    Software to IBM's Tivoli, Fidelia's Helix to AdventNet.  Maybe
    your network management solution does not include a system that
    increases vending machine prices as the heat rises, but you can
    definitely find what you need among these and other excellent tools on
    the market.

     

      

    References:

     

    Cisco. Network Management Basics. Cisco.com. Feb 2002

                http://www.cisco.com/

     

    RFC 1157. Simple Network Management Protocol.

                http://www.faqs.org/rfcs/rfc1157.html

     

    Wikipedia. Network Management. Wikipedia.org.

    http://en.wikipedia.org/wiki/Network_management

     

    ITPRC. Network Management. Itprc.com

    http://www.itprc.com/nms.htm

     

     
  • TWIT:Macintost goes to Intel, Episode 8 Outline

    With
    Leo Laporte, Patrick Norton (Chairman of the board of SlamDance
    Industries), Robert Heron (PC Mag and famous lab rat), Kevin Rose,
    David Prager (rectal web server installer), Roger Chang (GameSpot),
    John C. Dvorack

     

    Recorded on June 5th 05.

    Contact the TWIT SHOW

    Skype handle: thisweekintech

    (206) 339-TWIT through K7 (Seattle)

    Questions@thisweekintech.com

    Download TWIT:

    Leo’s .Zip Twit cast at

    http://Leoville-downloads.com/twit

    BitTorrent site: http://Twit.tv/hi-b

     

    Intro.

    Getting the TWIT Cast

    Best to get it on BitTorrents

    Get Azereus (http://azureus.sourceforge.net/)

    (YOU WILL NOT GET SUED FOR DOWNLOADING TWIT Cast from BITTORRENTS)

     Deployed service men and women (behind Websense and all other types of filth) download Leo’s .Zip Twit cast at http://Leoville-downloads.com/twit

    High Quality BitTorrent site:http://Twit.tv/hi-b

    Big media companies will put out Twit for free. 

     

    ITEM #1 MACINTEL

    Macintosh going to Intel chip (according to the Wall Street Journal)

    Leo predicts the demise of Macintosh.  Steve Job is falling on his sword

    1)      All software has to be rewritten

    2)      Why x86?

    3)      Osborn effect.  Many Mac products will be obsolete

    John C. Dvorack says this trend will last 10 years.  Dvorack: It will be the one of the biggest benefits of Macintosh (offers other very interesting insight into the move)

    Patrick – Bigger Market goes to bigger MHZ Numbers.  Great if it makes a cheaper MAC but don’t believe its going to happen

    Kevin – Excited about the move.  Apple engineering is excellent.  Now he can game on a Mac.  Thumbs UP.

    Heron – First stage of Mac creating competition for Windows.  Thumbs down for hard ware

    Roger
    – With all the 3-d rendering and content creation tools Mac will be
    able to retain their fan base by keeping the look and feel of the Mac
    on an x86.  Thumbs up for Software Thumbs down for hardware

    Is this good for Microsoft?

     

    ITEM #2 WiMAX

    Patrick Norton talked with Intel– WiMax is still  mostly hype

     

    “WiMax is a microwave replacement for cable or DSL distribution of Broadband” at about 1Mb

     

    Fix WiMax test will start this summer 2005, roll out will begin late 2006, and finally mobile Wireless

     

    ITEM #3 ICANN has approved the XXX domain

    The redlight district of the Internet

    Really being done with .edu ..gov

    Will make it easier to filter

    Twit.XXX?

    MOBI – cell phone content specific (format)

     

    ITEM #4 Roger on New Games

    A bit slow during the summer

    Everyone waiting on the new 360 stuff

    Next generation of consoles usually causes a dip

     

    ITEM #5 More MacIntel

    Roger waiting for Final Cut Pro and compositing /video shaping software

     

     

     

    Contacting the TWIT SHOW

    Skype handle: thisweekintech

    (206) 339-TWIT through K7 (Seattle)

    Questions@thisweekintech.com

    Leo@Thisweekintech.com
    Dan@Thisweekintech.com
    Yoshi@Thisweekintech.com

    Kevin@Thisweekintech.com

    Robert@Thisweekintech.com

    Download TWIT:

    Leo’s .Zip Twit cast at http://Leoville-downloads.com/twit

    BitTorrent site: http://Twit.tv/hi-b

  • TWIT Episode 7 Outline

    TWIT Episode 5

     

     

    With Leo Laporte, Patrick Norton, Robert Heron, Kevin Rose,Dan Huard, Yoshi

     

    Contacting the TWIT SHOW

    Skype handle: thisweekintech

    (206) 339-TWIT through K7 (Seattle)

    Questions@thisweekintech.com

     

     

    Intro.

    Robert’s 1080P High Definition

     

    ITEM #1 Patrick Going for Darwin Award

    Patrick blows his power supply

    http://badcaps.net – badcapacitors in mother boards

     

     

    ITEM #2 Leo’s Tablet PC

    Leo hooked on the 1024 X 768 Tablet PC [Pentium M]

    T Series from IBM

    TWIT’s experience with lap tops

     

    ITEM #3 $15 DSL for 1 year?

    One of Leo’s sponsors

    What ever happened to Verio? Bought by a Japanese company

    Cable Modem vs. DSL

     

    ITEM #4 SYSTM BREAKS A NUKES A SERVER

    Prolexic, anti DDOSservice, cache content to assist with bandwidthissues

    60,000 downloads on bittorrents (approx. 6 Terabytes of datadownloaded)

    800+ People in IRC

    Kevinrose.com goes to Typepad

    Who (from TechTV) is still at G4?

     

    ITEM #5 Trailer for Batman Begins

    Kick ass models of the car for Batman

    Highly anticipated movie

     

    ITEM #6 Hacker Blackmail

    Encrypt companies’ files and force them to pay $200 to dodecrypt

    Phishing and Spam

    Viagra blinding people

    Bill Gates invested in Cialis

     

    ITEM #7 Bittorrents

    Systm will continue on Bittorrents

    Azureus kicksass

    Trackers make it easier for the MPAA to find the Bittorent

    2600’s legal battles overDCSS links

    IPhantomfull anonymity by filtering all traffic (works like a proxy)

     

    ITEM #8 YOSHI on SFX

    Will run Special FX

    TWIT action figures? What’s up, Jinx?

                Yoshi with Kung Fu grip

     

    ITEM #9 LONGHORN ANNOUNCEMENTS

    Taken out file system and other features

    No more “my” (i.e. My Computer, My Network)

    Will release in 2007

    Robert Heron on ROLLER COASTER TYCOON

     

    ITEM #10 PENTIUM D (dual core)

    Pentium D moving to desktop

    AMDX2 Dual core 64 (chip is great on the benchmark tests)

    End of the line for Intel?

    Veritech

    Lenovo (ChineseGovernment) take over of IBM Personal Computer Division

     

    ITEM #11 MPAA trying to catch pirates

    10 surveillance camera on the streets of L.A. to catch DVDpirates

    Hi jacking surveillance cameras?  What would the FCC say?

     

    Review of Star Wars Episode III

     

    ITEM #12 Canada Call for Help

    Kevin Rose presented his surveillance camera spy device

     

     

     

    Contacting the TWIT SHOW

    Skype handle: thisweekintech

    (206) 339-TWIT through K7 (Seattle)

    Questions@thisweekintech.com

    Leo@Thisweekintech.com
    Dan@Thisweekintech.com
    Yoshi@Thisweekintech.com

    Kevin@Thisweekintech.com

    Robert@Thisweekintech.com

     

               

    An Air Port Security Scanner that can see through myclothes…

     

     

     

     

     

     

     

     

     

     

     

     

     

     

     

  • What a Virus looks like on Hijackthis

    My buddy got some crazy virus that nuked his system.  Hijackthis
    could remove all this, but I've decided to wipe his system and start
    from scratch.

    Typically, you should not use Hijackthis unless you know what you are doing.  Here is a tutorial on Hijackthis.

    But if you have this kind of situation, you could easily see which items to delete.

    /Start of LOG/

    Logfile of HijackThis v1.97.7
    Scan saved at 9:24:24 PM, on 6/4/2005
    Platform: Windows XP SP2 (WinNT 5.01.2600)
    MSIE: Internet Explorer v6.00 SP2 (6.00.2900.2180)

    Running processes:
    C:\WINDOWS\System32\smss.exe
    C:\WINDOWS\system32\winlogon.exe
    C:\WINDOWS\system32\services.exe
    C:\WINDOWS\system32\lsass.exe
    C:\WINDOWS\system32\svchost.exe
    C:\WINDOWS\system32\svchost.exe
    C:\WINDOWS\Explorer.EXE
    C:\Documents and Settingsxxxxxxx\Desktop\HijackThis.exe

    R1 – HKCU\Software\Microsoft\Internet Explorer\Main,Search Bar = http://w-find.com/sp.htm
    R1 – HKCU\Software\Microsoft\Internet Explorer\Main,Search Page = http://w-find.com/index.htm
    R0 – HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = http://w-find.com/index.htm
    R1 – HKCU\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = http://www.dell4me.com/myway
    R0 – HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = http://www.dell4me.com/myway
    R1 – HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = http://www.dell4me.com/myway
    R0 – HKLM\Software\Microsoft\Internet Explorer\Search,CustomizeSearch =
    R0 – HKLM\Software\Microsoft\Internet Explorer\Search,SearchAssistant = http://www.websearch.com/ie.aspx?tb_id=50141
    R1 – HKCU\Software\Microsoft\Internet Explorer\SearchURL,(Default) = http://w-find.com/index.htm
    R1 – HKCU\Software\Microsoft\Internet Explorer\Main,Start Page_bak = http://www.windowws.cc/hp.htm?id=632
    R1 – HKLM\Software\Microsoft\Internet Explorer\Main,SearchAssistant = http://www.websearch.com/ie.aspx?tb_id=50141
    R3 – URLSearchHook: (no name) – {87766247-311C-43B4-8499-3D5FEC94A183} – C:\PROGRA~1\COMMON~1\WinTools\WToolsB.dll
    O2 – BHO: (no name) – {01F44A8A-8C97-4325-A378-76E68DC4AB2E} – C:\WINDOWS\systb.dll
    O2 – BHO: (no name) – {02478D38-C3F9-4efb-9B51-7695ECA05670} – C:\PROGRA~1\Yahoo!\COMPAN~1\Installs\cpn\ycomp5_5_7_0.dll
    O2 – BHO: (no name) – {12EE7A5E-0674-42f9-A76A-000000004D00} – C:\WINDOWS\System32\stlb2.dll
    O2 – BHO: (no name) – {7CD20E91-1F31-41da-8379-479EA31DF969} – c:\Program Files\XML\XML.dll
    O2 – BHO: (no name) – {87766247-311C-43B4-8499-3D5FEC94A183} – C:\PROGRA~1\COMMON~1\WinTools\WToolsB.dll
    O2 – BHO: (no name) – {AA58ED58-01DD-4d91-8333-CF10577473F7} – c:\program files\google\googletoolbar2.dll
    O2 – BHO: (no name) – {CD231011-8FD9-8B23-D73B-F94DF3F378BF} – C:\WINDOWS\System32\bglncgy.dll
    O3 – Toolbar: McAfee VirusScan – {BA52B914-B692-46c4-B683-905236F6F655} – c:\progra~1\mcafee.com\vso\mcvsshl.dll
    O3 – Toolbar: &Google – {2318C2B1-4965-11d4-9B18-009027A5CD4F} – c:\program files\google\googletoolbar2.dll
    O3 – Toolbar: &Yahoo! Companion –
    {EF99BD32-C1FB-11D2-892F-0090271D4F88} –
    C:\PROGRA~1\Yahoo!\COMPAN~1\Installs\cpn\ycomp5_5_7_0.dll
    O3 – Toolbar: Search – {12EE7A5E-0674-42f9-A76B-000000004D00} – C:\WINDOWS\System32\stlb2.dll
    O3 – Toolbar: (no name) – {BDF6CE3D-F5C5-4462-9814-3C8EAC330CA8} – (no file)
    O3 – Toolbar: (no name) – {2CDE1A7D-A478-4291-BF31-E1B4C16F92EB} – (no file)
    O3 – Toolbar: AOL Toolbar – {4982D40A-C53B-4615-B15B-B5B5E98D167C} – C:\Program Files\AOL Toolbar\toolbar.dll
    O4 – HKLM\..\Run: [HotKeysCmds] C:\WINDOWS\System32\hkcmd.exe
    O4 – HKLM\..\Run: [IntelMeM] C:\Program Files\Intel\Modem Event Monitor\IntelMEM.exe
    O4 – HKLM\..\Run: [dla] C:\WINDOWS\system32\dla\tfswctrl.exe
    O4 – HKLM\..\Run: [PCMService] “C:\Program Files\Dell\Media Experience\PCMService.exe”
    O4 – HKLM\..\Run: [mmtask] c:\Program Files\MusicMatch\MusicMatch Jukebox\mmtask.exe
    O4 – HKLM\..\Run: [DwlClient] C:\Program Files\Common Files\Dell\EUSW\Support.exe
    O4 – HKLM\..\Run: [Dell AIO Printer A940] “C:\Program Files\Dell AIO Printer A940\dlbabmgr.exe”
    O4 – HKLM\..\Run: [eynvcahimk] C:\WINDOWS\System32\hvrpyxes.exe
    O4 – HKLM\..\Run: [TkBellExe] “C:\Program Files\Common Files\Real\Update_OB\realsched.exe” -osboot
    O4 – HKLM\..\Run: [{12EE7A5E-0674-42f9-A76B-000000004D00}] rundll32.exe stlb2.dll,DllRunMain
    O4 – HKLM\..\Run: [A70F6A1D-0195-42a2-934C-D8AC0F7C08EB] rundll32.exe E6F1873B.DLL,D9EBC318C
    O4 – HKLM\..\Run: [P2P Networking] C:\WINDOWS\System32\P2P Networking\P2P Networking.exe /AUTOSTART
    O4 – HKLM\..\Run: [Spyware remover] C:\WINDOWS\Remove_spyware.exe
    O4 – HKLM\..\Run: [Breg] “C:\Program Files\Common Files\Java\breg.exe”
    O4 – HKLM\..\Run: [Dvx] C:\WINDOWS\System32\wsxsvc\wsxsvc.exe
    O4 – HKLM\..\Run: [vmss] C:\WINDOWS\System32\vmss\vmss.exe
    O4 – HKLM\..\Run: [98D0CE0C16B1] rundll32.exe D0CE0C16B1,D0CE0C16B1
    O4 – HKLM\..\Run: [QuickTime Task] “C:\Program Files\QuickTime\qttask.exe” -atboottime
    O4 – HKLM\..\Run: [AOL Spyware Protection] “C:\PROGRA~1\COMMON~1\AOL\AOLSPY~1\AOLSP Scheduler.exe”
    O4 – HKLM\..\Run: [AOLDialer] C:\Program Files\Common Files\AOL\ACS\AOLDial.exe
    O4 – HKLM\..\Run: [Pure Networks Port Magic] “C:\PROGRA~1\PURENE~1\PORTMA~1\PortAOL.exe” -Run
    O4 – HKLM\..\Run: [Agent Messenger] C:\WINDOWS\system32\netaimsg.exe
    O4 – HKLM\..\Run: [Windows Task Manager] c:\windows\system32\taskmg.exe
    O4 – HKLM\..\Run: [Player Explorer] C:\WINDOWS\system32\upnpfgnt.exe
    O4 – HKLM\..\Run: [WinTools] C:\PROGRA~1\COMMON~1\WinTools\WToolsA.exe
    O4 – HKLM\..\Run: [BTV] C:\Program Files\BTV\btv.exe
    O4 – HKCU\..\Run: [jopa] C:\WINDOWS\System32\sysstartup.exe
    O4 – HKCU\..\Run: [uninstal] regsvr32 /u /s image.dll
    O4 – HKCU\..\Run: [PopUpStopperFreeEdition] “D:\Pop-Up Stopper Free Edition\PSFree.exe”
    O4 – HKCU\..\Run: [Yahoo! Pager] C:\Program Files\Yahoo!\Messenger\ypager.exe -quiet
    O4 – HKCU\..\Run: [MSMSGS] “C:\Program Files\Messenger\msmsgs.exe” /background
    O4 – HKCU\..\Run: [Aida] C:\Documents and Settings\xxxxxxs\Application Data\eetu.exe
    O4 – HKCU\..\Run: [Codm] C:\WINDOWS\System32\w?auclt.exe
    O4 – HKCU\..\Run: [kvuiulm] c:\windows\okmkbem.exe
    O4 – HKCU\..\Run: [WindowsFY] c:\wp.exe
    O4 – HKCU\..\Run: [ihitlwq] c:\windows\okmkbem.exe
    O4 – HKCU\..\Run: [ldbxlgl] c:\windows\okmkbem.exe
    O4 – HKCU\..\Run: [udlehdl] c:\windows\okmkbem.exe
    O4 – HKCU\..\Run: [uoedtft] c:\windows\okmkbem.exe
    O4 – HKCU\..\Run: [evlalkp] c:\windows\okmkbem.exe
    O4 – HKCU\..\Run: [sjjrwjx] c:\windows\okmkbem.exe
    O4 – HKCU\..\Run: [pdtvhkd] c:\windows\okmkbem.exe
    O4 – HKCU\..\Run: [fwrgrct] c:\windows\okmkbem.exe
    O4 – HKCU\..\Run: [qsdyslc] c:\windows\okmkbem.exe
    O4 – HKCU\..\Run: [aaybuvj] c:\windows\okmkbem.exe
    O4 – HKCU\..\Run: [jgyjpix] c:\windows\okmkbem.exe
    O4 – HKCU\..\Run: [hygmbrw] c:\windows\okmkbem.exe
    O4 – HKCU\..\Run: [wehewbp] c:\windows\okmkbem.exe
    O4 – HKCU\..\Run: [vnlvrxc] c:\windows\okmkbem.exe
    O4 – HKCU\..\Run: [floooap] c:\windows\okmkbem.exe
    O4 – HKCU\..\Run: [mgkfpbv] c:\windows\okmkbem.exe
    O4 – HKCU\..\Run: [lvnkqvy] c:\windows\okmkbem.exe
    O4 – HKCU\..\Run: [dteaidf] c:\windows\okmkbem.exe
    O4 – HKCU\..\Run: [drijnnm] c:\windows\okmkbem.exe
    O4 – HKCU\..\Run: [obpitds] c:\windows\okmkbem.exe
    O4 – HKCU\..\Run: [degnopr] c:\windows\okmkbem.exe
    O4 – HKCU\..\Run: [etmmtmy] c:\windows\okmkbem.exe
    O4 – HKCU\..\Run: [okjvkgo] c:\windows\okmkbem.exe
    O4 – HKCU\..\Run: [jvnjngk] c:\windows\okmkbem.exe
    O4 – HKCU\..\Run: [ltwqurd] c:\windows\okmkbem.exe
    O4 – HKCU\..\Run: [awbftdt] c:\windows\okmkbem.exe
    O4 – HKCU\..\Run: [dbmfpju] c:\windows\okmkbem.exe
    O4 – HKCU\..\Run: [ktxcwmm] c:\windows\okmkbem.exe
    O4 – HKCU\..\Run: [owdsokp] c:\windows\okmkbem.exe
    O4 – HKCU\..\Run: [ijsxppm] c:\windows\okmkbem.exe
    O4 – HKCU\..\Run: [khgqnff] c:\windows\okmkbem.exe
    O4 – HKCU\..\Run: [rdeutao] c:\windows\okmkbem.exe
    O4 – HKCU\..\Run: [vwavbpq] c:\windows\okmkbem.exe
    O4 – HKCU\..\Run: [bvcisnp] c:\windows\okmkbem.exe
    O4 – HKCU\..\Run: [krfhhud] c:\windows\okmkbem.exe
    O4 – HKCU\..\Run: [fqhbquo] c:\windows\okmkbem.exe
    O4 – HKCU\..\Run: [mpeaawe] c:\windows\okmkbem.exe
    O4 – HKCU\..\Run: [cpjvnrk] c:\windows\okmkbem.exe
    O4 – HKCU\..\Run: [nbdcjki] c:\windows\okmkbem.exe
    O4 – HKCU\..\Run: [wbdpftr] c:\windows\okmkbem.exe
    O4 – HKCU\..\Run: [huyxlgq] c:\windows\okmkbem.exe
    O4 – HKCU\..\Run: [xfvpwve] c:\windows\okmkbem.exe
    O4 – HKCU\..\Run: [xudynof] c:\windows\okmkbem.exe
    O4 – HKCU\..\Run: [cookxmu] c:\windows\okmkbem.exe
    O4 – HKCU\..\Run: [ktugikh] c:\windows\okmkbem.exe
    O4 – HKCU\..\Run: [kuujywh] c:\windows\okmkbem.exe
    O4 – HKCU\..\Run: [nmulcxe] c:\windows\okmkbem.exe
    O4 – HKCU\..\Run: [hdqobjn] c:\windows\okmkbem.exe
    O4 – HKCU\..\Run: [xmfhghh] c:\windows\okmkbem.exe
    O4 – HKCU\..\Run: [loynujq] c:\windows\okmkbem.exe
    O4 – HKCU\..\Run: [ngqvcpm] c:\windows\okmkbem.exe
    O4 – HKCU\..\Run: [wcafafj] c:\windows\okmkbem.exe
    O4 – HKCU\..\Run: [ngybekx] c:\windows\okmkbem.exe
    O4 – HKCU\..\Run: [nflyebn] c:\windows\okmkbem.exe
    O4 – HKCU\..\Run: [cexbnmt] c:\windows\okmkbem.exe
    O4 – HKCU\..\Run: [tjqmdtc] c:\windows\okmkbem.exe
    O4 – HKCU\..\Run: [gclcxju] c:\windows\okmkbem.exe
    O4 – HKCU\..\Run: [qkdaadd] c:\windows\okmkbem.exe
    O4 – HKCU\..\Run: [dtcplqx] c:\windows\okmkbem.exe
    O4 – HKCU\..\Run: [cenlmwq] c:\windows\okmkbem.exe
    O4 – HKCU\..\Run: [hctoghc] c:\windows\okmkbem.exe
    O4 – HKCU\..\Run: [tetmkwj] c:\windows\okmkbem.exe
    O4 – HKCU\..\Run: [ukwngco] c:\windows\okmkbem.exe
    O4 – HKCU\..\Run: [xgnbnhs] c:\windows\okmkbem.exe
    O4 – HKCU\..\Run: [iaubefo] c:\windows\okmkbem.exe
    O4 – HKCU\..\Run: [tjelaxm] c:\windows\okmkbem.exe
    O4 – HKCU\..\Run: [ntnfsua] c:\windows\okmkbem.exe
    O4 – HKCU\..\Run: [yjryqrm] c:\windows\okmkbem.exe
    O4 – HKCU\..\Run: [roqprox] c:\windows\okmkbem.exe
    O4 – HKCU\..\Run: [tbjgxuv] c:\windows\okmkbem.exe
    O4 – HKCU\..\Run: [fgxmmlq] c:\windows\okmkbem.exe
    O4 – HKCU\..\Run: [duktyme] c:\windows\okmkbem.exe
    O4 – HKCU\..\Run: [paqptny] c:\windows\okmkbem.exe
    O4 – HKCU\..\Run: [gaxmgil] c:\windows\okmkbem.exe
    O4 – HKCU\..\Run: [llvnurx] c:\windows\okmkbem.exe
    O4 – HKCU\..\Run: [ksnnbba] c:\windows\okmkbem.exe
    O4 – HKCU\..\Run: [finrqqq] c:\windows\okmkbem.exe
    O4 – HKCU\..\Run: [iexwvbv] c:\windows\okmkbem.exe
    O4 – HKCU\..\Run: [unesfss] c:\windows\okmkbem.exe
    O4 – HKCU\..\Run: [kqucmfm] c:\windows\okmkbem.exe
    O4 – HKCU\..\Run: [aasuvbm] c:\windows\okmkbem.exe
    O4 – HKCU\..\Run: [tyigbro] c:\windows\okmkbem.exe
    O4 – HKCU\..\Run: [ruvtfnj] c:\windows\okmkbem.exe
    O4 – HKCU\..\Run: [dustsso] c:\windows\okmkbem.exe
    O4 – HKCU\..\Run: [sfmxoan] c:\windows\okmkbem.exe
    O4 – HKCU\..\Run: [lxdkiod] c:\windows\okmkbem.exe
    O4 – HKCU\..\Run: [axmhbny] c:\windows\okmkbem.exe
    O4 – HKCU\..\Run: [ntykqoy] c:\windows\okmkbem.exe
    O4 – HKCU\..\Run: [xhcgrls] c:\windows\okmkbem.exe
    O4 – HKCU\..\Run: [ewlfvcg] c:\windows\okmkbem.exe
    O4 – HKCU\..\Run: [wodegxo] c:\windows\okmkbem.exe
    O4 – HKCU\..\Run: [jqmfgqb] c:\windows\okmkbem.exe
    O4 – HKCU\..\Run: [phaacfy] c:\windows\okmkbem.exe
    O4 – HKCU\..\Run: [hruikce] c:\windows\okmkbem.exe
    O4 – HKCU\..\Run: [gsqfkdg] c:\windows\okmkbem.exe
    O4 – HKCU\..\Run: [vtqvlxi] c:\windows\okmkbem.exe
    O4 – HKCU\..\Run: [didjsoi] c:\windows\okmkbem.exe
    O4 – HKCU\..\Run: [lkjiwkq] c:\windows\okmkbem.exe
    O4 – HKCU\..\Run: [qgaevdk] c:\windows\okmkbem.exe
    O4 – HKCU\..\Run: [gwphpcm] c:\windows\okmkbem.exe
    O4 – HKCU\..\Run: [qawkari] c:\windows\okmkbem.exe
    O4 – HKCU\..\Run: [hwwlcdj] c:\windows\okmkbem.exe
    O4 – HKCU\..\Run: [vdhsiex] c:\windows\okmkbem.exe
    O4 – HKCU\..\Run: [ptfpivo] c:\windows\okmkbem.exe
    O4 – HKCU\..\Run: [xwnbqda] c:\windows\okmkbem.exe
    O4 – HKCU\..\Run: [yefukgv] c:\windows\okmkbem.exe
    O4 – HKCU\..\Run: [odvirvi] c:\windows\okmkbem.exe
    O4 – HKCU\..\Run: [momgenh] c:\windows\okmkbem.exe
    O4 – HKCU\..\Run: [cyhbibe] c:\windows\okmkbem.exe
    O4 – HKCU\..\Run: [bxhylxw] c:\windows\okmkbem.exe
    O4 – HKCU\..\Run: [dargpwa] c:\windows\okmkbem.exe
    O4 – HKCU\..\Run: [piorfib] c:\windows\okmkbem.exe
    O4 – HKCU\..\Run: [cbkwjxo] c:\windows\okmkbem.exe
    O4 – HKCU\..\Run: [cwiirbq] c:\windows\okmkbem.exe
    O4 – HKCU\..\Run: [efpidhi] c:\windows\okmkbem.exe
    O4 – HKCU\..\Run: [nicjvuh] c:\windows\okmkbem.exe
    O4 – HKCU\..\Run: [qeqrjtc] c:\windows\okmkbem.exe
    O4 – HKCU\..\Run: [jgcnhnu] c:\windows\okmkbem.exe
    O4 – HKCU\..\Run: [jcegqaa] c:\windows\okmkbem.exe
    O4 – HKCU\..\Run: [jpgxlll] c:\windows\okmkbem.exe
    O4 – HKCU\..\Run: [sbdeysx] c:\windows\okmkbem.exe
    O4 – HKCU\..\Run: [nfaxuxu] c:\windows\okmkbem.exe
    O4 – HKCU\..\Run: [yjfbhfb] c:\windows\okmkbem.exe
    O4 – HKCU\..\Run: [niasywm] c:\windows\okmkbem.exe
    O4 – HKCU\..\Run: [lrsqmlt] c:\windows\okmkbem.exe
    O4 – HKCU\..\Run: [ihkdpsy] c:\windows\okmkbem.exe
    O4 – HKCU\..\Run: [tstkruc] c:\windows\okmkbem.exe
    O4 – HKCU\..\Run: [fghdvqt] c:\windows\okmkbem.exe
    O4 – HKCU\..\Run: [onitrla] c:\windows\okmkbem.exe
    O4 – HKCU\..\Run: [evqcwvu] c:\windows\okmkbem.exe
    O4 – HKCU\..\Run: [kcjlwvo] c:\windows\okmkbem.exe
    O4 – HKCU\..\Run: [iehhjej] c:\windows\okmkbem.exe
    O4 – HKCU\..\Run: [ebsujqx] c:\windows\okmkbem.exe
    O4 – HKCU\..\Run: [bnkdecb] c:\windows\okmkbem.exe
    O4 – HKCU\..\Run: [leiopbx] c:\windows\okmkbem.exe
    O4 – HKCU\..\Run: [akkaqph] c:\windows\okmkbem.exe
    O4 – HKCU\..\Run: [pgcfbuv] c:\windows\okmkbem.exe
    O4 – HKCU\..\Run: [aotqbna] c:\windows\okmkbem.exe
    O4 – HKCU\..\Run: [vtrpkar] c:\windows\okmkbem.exe
    O4 – HKCU\..\Run: [mbqxedq] c:\windows\okmkbem.exe
    O4 – HKCU\..\Run: [vxauuxk] c:\windows\okmkbem.exe
    O4 – HKCU\..\Run: [akliuxo] c:\windows\okmkbem.exe
    O4 – HKCU\..\Run: [pjpqyyu] c:\windows\okmkbem.exe
    O4 – HKCU\..\Run: [nstdois] c:\windows\okmkbem.exe
    O4 – HKCU\..\Run: [lisptsp] c:\windows\okmkbem.exe
    O4 – HKCU\..\Run: [kbxvgjo] c:\windows\okmkbem.exe
    O4 – HKCU\..\Run: [pmmvbys] c:\windows\okmkbem.exe
    O4 – HKCU\..\Run: [hrkkfqj] c:\windows\okmkbem.exe
    O4 – HKCU\..\Run: [aijvxyc] c:\windows\okmkbem.exe
    O4 – HKCU\..\Run: [umuxfju] c:\windows\okmkbem.exe
    O4 – HKCU\..\Run: [gcdrblp] c:\windows\okmkbem.exe
    O4 – HKCU\..\Run: [blgxvya] c:\windows\okmkbem.exe
    O4 – HKCU\..\Run: [cdyvsbk] c:\windows\okmkbem.exe
    O4 – HKCU\..\Run: [tcuglpm] c:\windows\okmkbem.exe
    O4 – HKCU\..\Run: [bcyosoo] c:\windows\okmkbem.exe
    O4 – HKCU\..\Run: [rfjjmvx] c:\windows\okmkbem.exe
    O4 – HKCU\..\Run: [qmwvxia] c:\windows\okmkbem.exe
    O4 – HKCU\..\Run: [ifaldfa] c:\windows\okmkbem.exe
    O4 – HKCU\..\Run: [luhyvsu] c:\windows\okmkbem.exe
    O4 – HKCU\..\Run: [qfgtacl] c:\windows\okmkbem.exe
    O4 – HKCU\..\Run: [xhvhbqp] c:\windows\okmkbem.exe
    O4 – HKCU\..\Run: [ulcxqgp] c:\windows\okmkbem.exe
    O4 – HKCU\..\Run: [jgfgabs] c:\windows\okmkbem.exe
    O4 – HKCU\..\Run: [jiakscc] c:\windows\okmkbem.exe
    O4 – HKCU\..\Run: [dwbigqf] c:\windows\okmkbem.exe
    O4 – HKCU\..\Run: [nemvfdd] c:\windows\okmkbem.exe
    O4 – HKCU\..\Run: [dtgubqj] c:\windows\okmkbem.exe
    O4 – HKCU\..\Run: [dhrvfkt] c:\windows\okmkbem.exe
    O4 – HKCU\..\Run: [yrqcykm] c:\windows\okmkbem.exe
    O4 – HKCU\..\Run: [kxpfqbo] c:\windows\okmkbem.exe
    O4 – HKCU\..\Run: [vibqdhg] c:\windows\okmkbem.exe
    O4 – HKCU\..\Run: [qiiwxaw] c:\windows\okmkbem.exe
    O4 – HKCU\..\Run: [kjokoqv] c:\windows\okmkbem.exe
    O4 – HKCU\..\Run: [rwwnbma] c:\windows\okmkbem.exe
    O4 – HKCU\..\Run: [hbbscpw] c:\windows\okmkbem.exe
    O4 – HKCU\..\Run: [xkejxxu] c:\windows\okmkbem.exe
    O4 – HKCU\..\Run: [lmbxbho] c:\windows\okmkbem.exe
    O4 – HKCU\..\Run: [phfyiow] c:\windows\okmkbem.exe
    O4 – HKCU\..\Run: [nnfneqt] c:\windows\okmkbem.exe
    O4 – HKCU\..\Run: [qwwfoms] c:\windows\okmkbem.exe
    O4 – HKCU\..\Run: [twnwtwc] c:\windows\okmkbem.exe
    O4 – HKCU\..\Run: [fxveelg] c:\windows\okmkbem.exe
    O4 – HKCU\..\Run: [sknjykp] c:\windows\okmkbem.exe
    O4 – HKCU\..\Run: [futhexy] c:\windows\okmkbem.exe
    O4 – HKCU\..\Run: [gdcfadg] c:\windows\okmkbem.exe
    O4 – HKCU\..\Run: [tkwhlaw] c:\windows\okmkbem.exe
    O4 – HKCU\..\Run: [qsdxuam] c:\windows\okmkbem.exe
    O4 – HKCU\..\Run: [eiwnqrg] c:\windows\okmkbem.exe
    O4 – HKCU\..\Run: [aujfvdh] c:\windows\okmkbem.exe
    O4 – HKCU\..\Run: [tuexcyk] c:\windows\okmkbem.exe
    O4 – HKCU\..\Run: [jkknokf] c:\windows\okmkbem.exe
    O4 – HKCU\..\Run: [xggojyu] c:\windows\okmkbem.exe
    O4 – HKCU\..\Run: [qgbwsye] c:\windows\okmkbem.exe
    O4 – HKCU\..\Run: [jbrvsmq] c:\windows\okmkbem.exe
    O4 – HKCU\..\Run: [eqfvksf] c:\windows\okmkbem.exe
    O4 – HKCU\..\Run: [pkcyoco] c:\windows\okmkbem.exe
    O4 – HKCU\..\Run: [jsumdct] c:\windows\okmkbem.exe
    O4 – HKCU\..\Run: [efqhiqs] c:\windows\okmkbem.exe
    O4 – HKCU\..\Run: [yjecjob] c:\windows\okmkbem.exe
    O4 – HKCU\..\Run: [obwajwi] c:\windows\okmkbem.exe
    O4 – HKCU\..\Run: [iwpqisa] c:\windows\okmkbem.exe
    O4 – HKCU\..\Run: [bdrowuf] c:\windows\okmkbem.exe
    O4 – HKCU\..\Run: [esqqdsi] c:\windows\okmkbem.exe
    O4 – HKCU\..\Run: [fjtofia] c:\windows\okmkbem.exe
    O4 – HKCU\..\Run: [nkxjbka] c:\windows\okmkbem.exe
    O4 – HKCU\..\Run: [nreegbj] c:\windows\okmkbem.exe
    O4 – HKCU\..\Run: [gkdfphb] c:\windows\okmkbem.exe
    O4 – HKCU\..\Run: [mymgott] c:\windows\okmkbem.exe
    O4 – HKCU\..\Run: [lftuejl] c:\windows\okmkbem.exe
    O4 – HKCU\..\Run: [sldtooi] c:\windows\okmkbem.exe
    O4 – HKCU\..\Run: [ogjqsjt] c:\windows\okmkbem.exe
    O4 – HKCU\..\Run: [ucvevlg] c:\windows\okmkbem.exe
    O4 – HKCU\..\Run: [qachhwo] c:\windows\okmkbem.exe
    O4 – HKCU\..\Run: [avswfhh] c:\windows\okmkbem.exe
    O4 – HKCU\..\Run: [xkmydkr] c:\windows\okmkbem.exe
    O4 – HKCU\..\Run: [qhowtxt] c:\windows\okmkbem.exe
    O4 – HKCU\..\Run: [qsugrvk] c:\windows\okmkbem.exe
    O4 – HKCU\..\Run: [nxhficq] c:\windows\okmkbem.exe
    O4 – HKCU\..\Run: [jdhjsqb] c:\windows\okmkbem.exe
    O4 – HKCU\..\Run: [cuunhoj] c:\windows\okmkbem.exe
    O4 – HKCU\..\Run: [jwbfsfa] c:\windows\okmkbem.exe
    O4 – HKCU\..\Run: [dkleokh] c:\windows\okmkbem.exe
    O4 – HKCU\..\Run: [rxgvolb] c:\windows\okmkbem.exe
    O4 – HKCU\..\Run: [sxdleyf] c:\windows\okmkbem.exe
    O4 – HKCU\..\Run: [aejosgr] c:\windows\okmkbem.exe
    O4 – HKCU\..\Run: [tllbsnq] c:\windows\okmkbem.exe
    O4 – HKCU\..\Run: [ieamjyh] c:\windows\okmkbem.exe
    O4 – HKCU\..\Run: [glskshq] c:\windows\okmkbem.exe
    O4 – HKCU\..\Run: [qrvtlfc] c:\windows\okmkbem.exe
    O4 – HKCU\..\Run: [mxjaody] c:\windows\okmkbem.exe
    O4 – HKCU\..\Run: [bkfghjt] c:\windows\okmkbem.exe
    O4 – HKCU\..\Run: [deshmuk] c:\windows\okmkbem.exe
    O4 – HKCU\..\Run: [bolycoi] c:\windows\okmkbem.exe
    O4 – HKCU\..\Run: [xwduhro] c:\windows\okmkbem.exe
    O4 – HKCU\..\Run: [kwavoie] c:\windows\okmkbem.exe
    O4 – HKCU\..\Run: [ihggwiu] c:\windows\okmkbem.exe
    O4 – HKCU\..\Run: [chwfspm] c:\windows\okmkbem.exe
    O4 – HKCU\..\Run: [ycuxlyu] c:\windows\okmkbem.exe
    O4 – HKCU\..\Run: [qybugob] c:\windows\okmkbem.exe
    O4 – HKCU\..\Run: [ywopwoy] c:\windows\okmkbem.exe
    O4 – HKCU\..\Run: [sfhhatj] c:\windows\okmkbem.exe
    O4 – HKCU\..\Run: [rgtjmin] c:\windows\okmkbem.exe
    O4 – HKCU\..\Run: [hoqjwey] c:\windows\okmkbem.exe
    O4 – HKCU\..\Run: [agnpvrw] c:\windows\okmkbem.exe
    O4 – HKCU\..\Run: [owwnafc] c:\windows\okmkbem.exe
    O4 – HKCU\..\Run: [rqytlgb] c:\windows\okmkbem.exe
    O4 – HKCU\..\Run: [xofifcs] c:\windows\okmkbem.exe
    O4 – HKCU\..\Run: [allpyqt] c:\windows\okmkbem.exe
    O4 – HKCU\..\Run: [nqoauax] c:\windows\okmkbem.exe
    O4 – HKCU\..\Run: [alacrtm] c:\windows\okmkbem.exe
    O4 – HKCU\..\Run: [tgbdsnm] c:\windows\okmkbem.exe
    O4 – HKCU\..\Run: [rrktfrd] c:\windows\okmkbem.exe
    O4 – HKCU\..\Run: [owvhbvu] c:\windows\okmkbem.exe
    O4 – HKCU\..\Run: [ufitpyu] c:\windows\okmkbem.exe
    O4 – HKCU\..\Run: [kvarokd] c:\windows\okmkbem.exe
    O4 – HKCU\..\Run: [ttphutb] c:\windows\okmkbem.exe
    O4 – HKCU\..\Run: [ireiyhg] c:\windows\okmkbem.exe
    O4 – HKCU\..\Run: [aklpggf] c:\windows\okmkbem.exe
    O4 – HKCU\..\Run: [mufkbvf] c:\windows\okmkbem.exe
    O4 – HKCU\..\Run: [mmhaawh] c:\windows\okmkbem.exe
    O4 – HKCU\..\Run: [wadpriq] c:\windows\okmkbem.exe
    O4 – HKCU\..\Run: [wogqbxb] c:\windows\okmkbem.exe
    O4 – HKCU\..\Run: [lhoylnh] c:\windows\okmkbem.exe
    O4 – HKCU\..\Run: [lfbpwul] c:\windows\okmkbem.exe
    O4 – HKCU\..\Run: [lklygro] c:\windows\okmkbem.exe
    O4 – HKCU\..\Run: [ycwcmqh] c:\windows\okmkbem.exe
    O4 – HKCU\..\Run: [dswmqfb] c:\windows\okmkbem.exe
    O4 – HKCU\..\Run: [gdbktdh] c:\windows\okmkbem.exe
    O4 – HKCU\..\Run: [wflkbms] c:\windows\okmkbem.exe
    O4 – HKCU\..\Run: [olhiutm] c:\windows\okmkbem.exe
    O4 – HKCU\..\Run: [mdxisbq] c:\windows\okmkbem.exe
    O4 – HKCU\..\Run: [ateieau] c:\windows\okmkbem.exe
    O4 – HKCU\..\Run: [rdaipjh] c:\windows\okmkbem.exe
    O4 – HKCU\..\Run: [lodxstd] c:\windows\okmkbem.exe
    O4 – HKCU\..\Run: [hlsywdq] c:\windows\okmkbem.exe
    O4 – HKCU\..\Run: [klgyklm] c:\windows\okmkbem.exe
    O4 – HKCU\..\Run: [irvekfd] c:\windows\okmkbem.exe
    O4 – HKCU\..\Run: [rncixts] c:\windows\okmkbem.exe
    O4 – HKCU\..\Run: [uhtdxxk] c:\windows\okmkbem.exe
    O4 – HKCU\..\Run: [audgduj] c:\windows\okmkbem.exe
    O4 – HKCU\..\Run: [hnsmgjv] c:\windows\okmkbem.exe
    O4 – HKCU\..\Run: [etcbcaa] c:\windows\okmkbem.exe
    O4 – HKCU\..\Run: [mbemyqd] c:\windows\okmkbem.exe
    O4 – HKCU\..\Run: [fyyqhgm] c:\windows\okmkbem.exe
    O4 – HKCU\..\Run: [lapygid] c:\windows\okmkbem.exe
    O4 – HKCU\..\Run: [jqikhce] c:\windows\okmkbem.exe
    O4 – HKCU\..\Run: [qotugtf] c:\windows\okmkbem.exe
    O4 – HKCU\..\Run: [timwoas] c:\windows\okmkbem.exe
    O4 – HKCU\..\Run: [ylwdkvu] c:\windows\okmkbem.exe
    O4 – HKCU\..\Run: [bsrrvpy] c:\windows\okmkbem.exe
    O4 – HKCU\..\Run: [fknurjg] c:\windows\okmkbem.exe
    O4 – HKCU\..\Run: [oqyehci] c:\windows\okmkbem.exe
    O4 – HKCU\..\Run: [wvmohsb] c:\windows\okmkbem.exe
    O4 – HKCU\..\Run: [vnsuvob] c:\windows\okmkbem.exe
    O4 – HKCU\..\Run: [hlkaqri] c:\windows\okmkbem.exe
    O4 – HKCU\..\Run: [itnuwnt] c:\windows\okmkbem.exe
    O4 – HKCU\..\Run: [vbdqsyr] c:\windows\okmkbem.exe
    O4 – HKCU\..\Run: [fnambpa] c:\windows\okmkbem.exe
    O4 – HKCU\..\Run: [yfwvpjh] c:\windows\okmkbem.exe
    O4 – HKCU\..\Run: [dwkhsxg] c:\windows\okmkbem.exe
    O4 – HKCU\..\Run: [uhllmjh] c:\windows\okmkbem.exe
    O4 – HKCU\..\Run: [ryfckun] c:\windows\okmkbem.exe
    O4 – HKCU\..\Run: [wgwmtfq] c:\windows\okmkbem.exe
    O4 – HKCU\..\Run: [jdbiusr] c:\windows\okmkbem.exe
    O4 – HKCU\..\Run: [prixxwg] c:\windows\okmkbem.exe
    O4 – HKCU\..\Run: [yegnuut] c:\windows\okmkbem.exe
    O4 – HKCU\..\Run: [duesxgd] c:\windows\okmkbem.exe
    O4 – HKCU\..\Run: [ftfoiwx] c:\windows\okmkbem.exe
    O4 – HKCU\..\Run: [tpvpvdg] c:\windows\okmkbem.exe
    O4 – HKCU\..\Run: [mvpguik] c:\windows\okmkbem.exe
    O4 – HKCU\..\Run: [pajdamo] c:\windows\okmkbem.exe
    O4 – HKCU\..\Run: [jxksocb] c:\windows\okmkbem.exe
    O4 – HKCU\..\Run: [fcsqatf] c:\windows\okmkbem.exe
    O4 – HKCU\..\Run: [xsnferv] c:\windows\okmkbem.exe
    O4 – HKCU\..\Run: [blfqrdg] c:\windows\okmkbem.exe
    O4 – HKCU\..\Run: [uttliji] c:\windows\okmkbem.exe
    O4 – HKCU\..\Run: [vjistyn] c:\windows\okmkbem.exe
    O4 – HKCU\..\Run: [exartel] c:\windows\okmkbem.exe
    O4 – HKCU\..\Run: [mntxieb] c:\windows\okmkbem.exe
    O4 – HKCU\..\Run: [ldnfvkr] c:\windows\okmkbem.exe
    O4 – HKCU\..\Run: [gfwabuk] c:\windows\okmkbem.exe
    O4 – HKCU\..\Run: [uhejcoq] c:\windows\okmkbem.exe
    O4 – HKCU\..\Run: [canylqr] c:\windows\okmkbem.exe
    O4 – HKCU\..\Run: [rwbhjbr] c:\windows\okmkbem.exe
    O4 – HKCU\..\Run: [mjvdstt] c:\windows\okmkbem.exe
    O4 – HKCU\..\Run: [vbkdbjf] c:\windows\okmkbem.exe
    O4 – HKCU\..\Run: [qjudnit] c:\windows\okmkbem.exe
    O4 – HKCU\..\Run: [jibtvsv] c:\windows\okmkbem.exe
    O4 – HKCU\..\Run: [qeuanft] c:\windows\okmkbem.exe
    O4 – HKCU\..\Run: [nynennj] c:\windows\okmkbem.exe
    O4 – HKCU\..\Run: [lfpeqxc] c:\windows\okmkbem.exe
    O4 – HKCU\..\Run: [hsrjowq] c:\windows\okmkbem.exe
    O4 – HKCU\..\Run: [qsuumpq] c:\windows\okmkbem.exe
    O4 – HKCU\..\Run: [ucathpb] c:\windows\okmkbem.exe
    O4 – HKCU\..\Run: [ywdacru] c:\windows\okmkbem.exe
    O4 – HKCU\..\Run: [toykbla] c:\windows\okmkbem.exe
    O4 – HKCU\..\Run: [vnpcweg] c:\windows\okmkbem.exe
    O4 – HKCU\..\Run: [gwchjjc] c:\windows\okmkbem.exe
    O4 – HKCU\..\Run: [kprwgqp] c:\windows\okmkbem.exe
    O4 – HKCU\..\Run: [rgttnde] c:\windows\okmkbem.exe
    O4 – HKCU\..\Run: [suujwjy] c:\windows\okmkbem.exe
    O4 – HKCU\..\Run: [nwbdchg] c:\windows\okmkbem.exe
    O4 – HKCU\..\Run: [medbdjx] c:\windows\okmkbem.exe
    O4 – HKCU\..\Run: [ujbwpdc] c:\windows\okmkbem.exe
    O4 – HKCU\..\Run: [raxlaay] c:\windows\okmkbem.exe
    O4 – HKCU\..\Run: [idjrmtq] c:\windows\okmkbem.exe
    O4 – HKCU\..\Run: [civwcac] c:\windows\okmkbem.exe
    O4 – HKCU\..\Run: [tcbpfgn] c:\windows\okmkbem.exe
    O4 – HKCU\..\Run: [ofucdbo] c:\windows\okmkbem.exe
    O4 – HKCU\..\Run: [tjvecsu] c:\windows\okmkbem.exe
    O4 – HKCU\..\Run: [bdbuncl] c:\windows\okmkbem.exe
    O4 – HKCU\..\Run: [munaypg] c:\windows\okmkbem.exe
    O4 – HKCU\..\Run: [nopyvwc] c:\windows\okmkbem.exe
    O4 – HKCU\..\Run: [hvxspau] c:\windows\okmkbem.exe
    O4 – HKCU\..\Run: [rlydpru] c:\windows\okmkbem.exe
    O4 – HKCU\..\Run: [bjvrcxh] c:\windows\okmkbem.exe
    O4 – HKCU\..\Run: [mudtmsj] c:\windows\okmkbem.exe
    O4 – HKCU\..\Run: [iltgsvo] c:\windows\okmkbem.exe
    O4 – HKCU\..\Run: [okybvbh] c:\windows\okmkbem.exe
    O4 – HKCU\..\Run: [jnhjbba] c:\windows\okmkbem.exe
    O4 – HKCU\..\Run: [dnwanet] c:\windows\okmkbem.exe
    O4 – HKCU\..\Run: [xglgogb] c:\windows\okmkbem.exe
    O4 – HKCU\..\Run: [fsupywt] c:\windows\okmkbem.exe
    O4 – HKCU\..\Run: [upcxegk] c:\windows\okmkbem.exe
    O4 – HKCU\..\Run: [gtkankk] c:\windows\okmkbem.exe
    O4 – HKCU\..\Run: [kahanmh] c:\windows\okmkbem.exe
    O4 – HKCU\..\Run: [tjtqjyw] c:\windows\okmkbem.exe
    O4 – HKCU\..\Run: [wpslive] c:\windows\okmkbem.exe
    O4 – HKCU\..\Run: [sjitmbj] c:\windows\okmkbem.exe
    O4 – HKCU\..\Run: [fmtiakt] c:\windows\okmkbem.exe
    O4 – HKCU\..\Run: [srxpbjk] c:\windows\okmkbem.exe
    O4 – HKCU\..\Run: [axdytlc] c:\windows\okmkbem.exe
    O4 – HKCU\..\Run: [bmpaxdu] c:\windows\okmkbem.exe
    O4 – HKCU\..\Run: [iyypxdl] c:\windows\okmkbem.exe
    O4 – HKCU\..\Run: [mffqbch] c:\windows\okmkbem.exe
    O4 – HKCU\..\Run: [brvqppy] c:\windows\okmkbem.exe
    O4 – HKCU\..\Run: [axtyhwg] c:\windows\okmkbem.exe
    O4 – HKCU\..\Run: [gspppec] c:\windows\okmkbem.exe
    O4 – HKCU\..\Run: [frskkiw] c:\windows\okmkbem.exe
    O4 – HKCU\..\Run: [fbdlrca] c:\windows\okmkbem.exe
    O4 – HKCU\..\Run: [nqamsxr] c:\windows\okmkbem.exe
    O4 – HKCU\..\Run: [niknick] c:\windows\okmkbem.exe
    O4 – HKCU\..\Run: [jvveode] c:\windows\okmkbem.exe
    O4 – HKCU\..\Run: [pwggfiw] c:\windows\okmkbem.exe
    O4 – HKCU\..\Run: [dgkxsyv] c:\windows\okmkbem.exe
    O4 – HKCU\..\Run: [lfyyawd] c:\windows\okmkbem.exe
    O4 – HKCU\..\Run: [prkniow] c:\windows\okmkbem.exe
    O4 – HKCU\..\Run: [wbqtiya] c:\windows\okmkbem.exe
    O4 – HKCU\..\Run: [ugfyyxi] c:\windows\okmkbem.exe
    O4 – HKCU\..\Run: [tbisakj] c:\windows\okmkbem.exe
    O4 – HKCU\..\Run: [daanikr] c:\windows\okmkbem.exe
    O4 – HKCU\..\Run: [awclxer] c:\windows\okmkbem.exe
    O4 – HKCU\..\Run: [qrusuqt] c:\windows\okmkbem.exe
    O4 – HKCU\..\Run: [jeuurur] c:\windows\okmkbem.exe
    O4 – HKCU\..\Run: [uqbnujo] c:\windows\okmkbem.exe
    O4 – HKCU\..\Run: [apwkidi] c:\windows\okmkbem.exe
    O4 – HKCU\..\Run: [lmenbeb] c:\windows\okmkbem.exe
    O4 – HKCU\..\Run: [ycnkhxi] c:\windows\okmkbem.exe
    O4 – HKCU\..\Run: [kdyejqr] c:\windows\okmkbem.exe
    O4 – HKCU\..\Run: [lucixop] c:\windows\okmkbem.exe
    O4 – HKCU\..\Run: [pvuargo] c:\windows\okmkbem.exe
    O4 – HKCU\..\Run: [uufthvk] c:\windows\okmkbem.exe
    O4 – HKCU\..\Run: [qcnfnlu] c:\windows\okmkbem.exe
    O4 – HKCU\..\Run: [jwpnwyo] c:\windows\okmkbem.exe
    O4 – HKCU\..\Run: [nuexmug] c:\windows\okmkbem.exe
    O4 – HKCU\..\Run: [gkugkgd] c:\windows\okmkbem.exe
    O4 – HKCU\..\Run: [rmtqmfl] c:\windows\okmkbem.exe
    O4 – HKCU\..\Run: [tlouwgc] c:\windows\okmkbem.exe
    O4 – HKCU\..\Run: [nnpctey] c:\windows\okmkbem.exe
    O4 – HKCU\..\Run: [rkiceuv] c:\windows\okmkbem.exe
    O4 – HKCU\..\Run: [xjmmvea] c:\windows\okmkbem.exe
    O4 – HKCU\..\Run: [lqgjrbq] c:\windows\okmkbem.exe
    O4 – HKCU\..\Run: [lytmbwl] c:\windows\okmkbem.exe
    O4 – HKCU\..\Run: [ycejosk] c:\windows\okmkbem.exe
    O4 – HKCU\..\Run: [ocgsevy] c:\windows\okmkbem.exe
    O4 – HKCU\..\Run: [nwltygx] c:\windows\okmkbem.exe
    O4 – HKCU\..\Run: [jxrxrus] c:\windows\okmkbem.exe
    O4 – HKCU\..\Run: [gfjeudh] c:\windows\okmkbem.exe
    O4 – HKCU\..\Run: [krojvje] c:\windows\okmkbem.exe
    O4 – HKCU\..\Run: [jbqwvhs] c:\windows\okmkbem.exe
    O4 – HKCU\..\Run: [fyygrqe] c:\windows\okmkbem.exe
    O4 – HKCU\..\Run: [pdpfxlr] c:\windows\okmkbem.exe
    O4 – HKCU\..\Run: [mpdhpxt] c:\windows\okmkbem.exe
    O4 – HKCU\..\Run: [axexsth] c:\windows\okmkbem.exe
    O4 – HKCU\..\Run: [nkxcfms] c:\windows\okmkbem.exe
    O4 – HKCU\..\Run: [unqyobx] c:\windows\okmkbem.exe
    O4 – HKCU\..\Run: [uwacjit] c:\windows\okmkbem.exe
    O4 – HKCU\..\Run: [bujdvsk] c:\windows\okmkbem.exe
    O4 – HKCU\..\Run: [ddywnec] c:\windows\okmkbem.exe
    O4 – HKCU\..\Run: [xogooji] c:\windows\okmkbem.exe
    O4 – HKCU\..\Run: [xrwgshx] c:\windows\okmkbem.exe
    O4 – HKCU\..\Run: [etuxeiq] c:\windows\okmkbem.exe
    O4 – HKCU\..\Run: [uqmukqw] c:\windows\okmkbem.exe
    O4 – HKCU\..\Run: [aqnttps] c:\windows\okmkbem.exe
    O4 – HKCU\..\Run: [tqcxwxb] c:\windows\okmkbem.exe
    O4 – HKCU\..\Run: [aemutwn] c:\windows\okmkbem.exe
    O4 – HKCU\..\Run: [bxjqypw] c:\windows\okmkbem.exe
    O4 – HKCU\..\Run: [vmesock] c:\windows\okmkbem.exe
    O4 – HKCU\..\Run: [fnxvche] c:\windows\okmkbem.exe
    O4 – HKCU\..\Run: [reyhust] c:\windows\okmkbem.exe
    O4 – HKCU\..\Run: [pnvxktf] c:\windows\okmkbem.exe
    O4 – HKCU\..\Run: [pwnfrqm] c:\windows\okmkbem.exe
    O4 – HKCU\..\Run: [wkuioor] c:\windows\okmkbem.exe
    O4 – HKCU\..\Run: [pyqsaij] c:\windows\okmkbem.exe
    O4 – HKCU\..\Run: [hgbnogk] c:\windows\okmkbem.exe
    O4 – HKCU\..\Run: [nxshxcy] c:\windows\okmkbem.exe
    O4 – HKCU\..\Run: [sglhatq] c:\windows\okmkbem.exe
    O4 – HKCU\..\Run: [ykwkoau] c:\windows\okmkbem.exe
    O4 – HKCU\..\Run: [phwyqft] c:\windows\okmkbem.exe
    O4 – HKCU\..\Run: [ppclpqw] c:\windows\okmkbem.exe
    O4 – HKCU\..\Run: [siayjcx] c:\windows\okmkbem.exe
    O4 – HKCU\..\Run: [sjelncj] c:\windows\okmkbem.exe
    O4 – HKCU\..\Run: [ocicbel] c:\windows\okmkbem.exe
    O4 – HKCU\..\Run: [iaehpls] c:\windows\okmkbem.exe
    O4 – HKCU\..\Run: [rrkbmeh] c:\windows\okmkbem.exe
    O4 – HKCU\..\Run: [bgipumf] c:\windows\okmkbem.exe
    O4 – HKCU\..\Run: [cjrcums] c:\windows\okmkbem.exe
    O4 – HKCU\..\Run: [fcxvrxk] c:\windows\okmkbem.exe
    O4 – HKCU\..\Run: [vkjovwr] c:\windows\okmkbem.exe
    O4 – HKCU\..\Run: [dgulqgm] c:\windows\okmkbem.exe
    O4 – HKCU\..\Run: [bvrnkrb] c:\windows\okmkbem.exe
    O4 – HKCU\..\Run: [svyemgl] c:\windows\okmkbem.exe
    O4 – HKCU\..\Run: [ljqrfkl] c:\windows\okmkbem.exe
    O4 – HKCU\..\Run: [tyrckts] c:\windows\okmkbem.exe
    O4 – HKCU\..\Run: [rmtcpbj] c:\windows\okmkbem.exe
    O4 – HKCU\..\Run: [uuribqh] c:\windows\okmkbem.exe
    O4 – HKCU\..\Run: [qjjyiwl] c:\windows\okmkbem.exe
    O4 – HKCU\..\Run: [evaefjv] c:\windows\okmkbem.exe
    O4 – HKCU\..\Run: [lccrvxf] c:\windows\okmkbem.exe
    O4 – HKCU\..\Run: [nnoqncm] c:\windows\okmkbem.exe
    O4 – HKCU\..\Run: [dswxpve] c:\windows\okmkbem.exe
    O4 – HKCU\..\Run: [olvwrrm] c:\windows\okmkbem.exe
    O4 – HKCU\..\Run: [npxjejy] c:\windows\okmkbem.exe
    O4 – HKCU\..\Run: [yaeduos] c:\windows\okmkbem.exe
    O4 – HKCU\..\Run: [qqigvoe] c:\windows\okmkbem.exe
    O4 – HKCU\..\Run: [xarwmdb] c:\windows\okmkbem.exe
    O4 – HKCU\..\Run: [ursdrgb] c:\windows\okmkbem.exe
    O4 – HKCU\..\Run: [rfnxloe] c:\windows\okmkbem.exe
    O4 – HKCU\..\Run: [wuooumy] c:\windows\okmkbem.exe
    O4 – HKCU\..\Run: [qyjbiix] c:\windows\okmkbem.exe
    O4 – HKCU\..\Run: [faiapay] c:\windows\okmkbem.exe
    O4 – HKCU\..\Run: [offwbjp] c:\windows\okmkbem.exe
    O4 – HKCU\..\Run: [dolncum] c:\windows\okmkbem.exe
    O4 – HKCU\..\Run: [fdmsfnv] c:\windows\okmkbem.exe
    O4 – HKCU\..\Run: [rueyovr] c:\windows\okmkbem.exe
    O4 – HKCU\..\Run: [janqcuq] c:\windows\okmkbem.exe
    O4 – HKCU\..\Run: [vobqpsa] c:\windows\okmkbem.exe
    O4 – HKCU\..\Run: [wjjkncu] c:\windows\okmkbem.exe
    O4 – HKCU\..\Run: [sflslkt] c:\windows\okmkbem.exe
    O4 – HKCU\..\Run: [nssprkt] c:\windows\okmkbem.exe
    O4 – HKCU\..\Run: [ldrelco] c:\windows\okmkbem.exe
    O4 – HKCU\..\Run: [mymtnvm] c:\windows\okmkbem.exe
    O4 – HKCU\..\Run: [cuhyfam] c:\windows\okmkbem.exe
    O4 – HKCU\..\Run: [vegsexu] c:\windows\okmkbem.exe
    O4 – HKCU\..\Run: [bqkgnoa] c:\windows\okmkbem.exe
    O4 – HKCU\..\Run: [xamrapg] c:\windows\okmkbem.exe
    O4 – HKCU\..\Run: [oaawhea] c:\windows\okmkbem.exe
    O4 – HKCU\..\Run: [dbtrtvu] c:\windows\okmkbem.exe
    O4 – HKCU\..\Run: [xdwpdkf] c:\windows\okmkbem.exe
    O4 – HKCU\..\Run: [axkycpl] c:\windows\okmkbem.exe
    O4 – HKCU\..\Run: [nkhnpbs] c:\windows\okmkbem.exe
    O4 – HKCU\..\Run: [uumoirm] c:\windows\okmkbem.exe
    O4 – HKCU\..\Run: [mmsqtnh] c:\windows\okmkbem.exe
    O4 – HKCU\..\Run: [buyovup] c:\windows\okmkbem.exe
    O4 – HKCU\..\Run: [rkflyvh] c:\windows\okmkbem.exe
    O4 – HKCU\..\Run: [spjydoe] c:\windows\okmkbem.exe
    O4 – HKCU\..\Run: [tcrkvfs] c:\windows\okmkbem.exe
    O4 – HKCU\..\Run: [pxpfyoo] c:\windows\okmkbem.exe
    O4 – HKCU\..\Run: [vmstygw] c:\windows\okmkbem.exe
    O4 – HKCU\..\Run: [xdewgpg] c:\windows\okmkbem.exe
    O4 – HKCU\..\Run: [efthhnr] c:\windows\okmkbem.exe
    O4 – HKCU\..\Run: [fdroovr] c:\windows\okmkbem.exe
    O4 – HKCU\..\Run: [ltmcnyi] c:\windows\okmkbem.exe
    O4 – HKCU\..\Run: [avsqqhc] c:\windows\okmkbem.exe
    O4 – HKCU\..\Run: [einhfob] c:\windows\okmkbem.exe
    O4 – HKCU\..\Run: [yivesub] c:\windows\okmkbem.exe
    O4 – HKCU\..\Run: [khkjryk] c:\windows\okmkbem.exe
    O4 – HKCU\..\Run: [ekevnyn] c:\windows\okmkbem.exe
    O4 – HKCU\..\Run: [audssdr] c:\windows\okmkbem.exe
    O4 – HKCU\..\Run: [fvadffo] c:\windows\okmkbem.exe
    O4 – HKCU\..\Run: [sqpafdw] c:\windows\okmkbem.exe
    O4 – HKCU\..\Run: [sgbheks] c:\windows\okmkbem.exe
    O4 – HKCU\..\Run: [haselyr] c:\windows\okmkbem.exe
    O4 – HKCU\..\Run: [ibrlirh] c:\windows\okmkbem.exe
    O4 – HKCU\..\Run: [cgprinw] c:\windows\okmkbem.exe
    O4 – HKCU\..\Run: [tvoyqxp] c:\windows\okmkbem.exe
    O4 – HKCU\..\Run: [uyipjjj] c:\windows\okmkbem.exe
    O4 – HKCU\..\Run: [jlyphnp] c:\windows\okmkbem.exe
    O4 – HKCU\..\Run: [twrfkxw] c:\windows\okmkbem.exe
    O4 – HKCU\..\Run: [xhsxkex] c:\windows\okmkbem.exe
    O4 – HKCU\..\Run: [ewkbklq] c:\windows\okmkbem.exe
    O4 – HKCU\..\Run: [snbpftf] c:\windows\okmkbem.exe
    O4 – HKCU\..\Run: [dcuqrga] c:\windows\okmkbem.exe
    O4 – HKCU\..\Run: [bqmedhn] c:\windows\okmkbem.exe
    O4 – HKCU\..\Run: [lgqtgtg] c:\windows\okmkbem.exe
    O4 – HKCU\..\Run: [vvddpuo] c:\windows\okmkbem.exe
    O4 – HKCU\..\Run: [jpdevyf] c:\windows\okmkbem.exe
    O4 – HKCU\..\Run: [vlcvenm] c:\windows\okmkbem.exe
    O4 – HKCU\..\Run: [wpnbvpr] c:\windows\okmkbem.exe
    O4 – HKCU\..\Run: [wrqchvw] c:\windows\okmkbem.exe
    O4 – HKCU\..\Run: [gvwyuol] c:\windows\okmkbem.exe
    O4 – HKCU\..\Run: [qdculqh] c:\windows\okmkbem.exe
    O4 – HKCU\..\Run: [ruefelp] c:\windows\okmkbem.exe
    O4 – HKCU\..\Run: [llovqhm] c:\windows\okmkbem.exe
    O4 – HKCU\..\Run: [rfsdixx] c:\windows\okmkbem.exe
    O4 – HKCU\..\Run: [xiqvbga] c:\windows\okmkbem.exe
    O4 – HKCU\..\Run: [movnaly] c:\windows\okmkbem.exe
    O4 – HKCU\..\Run: [fbocwdu] c:\windows\okmkbem.exe
    O4 – HKCU\..\Run: [psyuvvc] c:\windows\okmkbem.exe
    O4 – HKCU\..\Run: [gnqnxjo] c:\windows\okmkbem.exe
    O4 – HKCU\..\Run: [gswbmxe] c:\windows\okmkbem.exe
    O4 – HKCU\..\Run: [rhcsfmu] c:\windows\okmkbem.exe
    O4 – HKCU\..\Run: [kioxykd] c:\windows\okmkbem.exe
    O4 – HKCU\..\Run: [tjxcruv] c:\windows\okmkbem.exe
    O4 – HKCU\..\Run: [vwbuyph] c:\windows\okmkbem.exe
    O4 – HKCU\..\Run: [vnqvvyu] c:\windows\okmkbem.exe
    O4 – HKCU\..\Run: [vhoeglu] c:\windows\okmkbem.exe
    O4 – HKCU\..\Run: [xemlaqx] c:\windows\okmkbem.exe
    O4 – HKCU\..\Run: [utonkih] c:\windows\okmkbem.exe
    O4 – HKCU\..\Run: [uuxrnee] c:\windows\okmkbem.exe
    O4 – HKCU\..\Run: [qvcaxby] c:\windows\okmkbem.exe
    O4 – HKCU\..\Run: [ffpdrnh] c:\windows\okmkbem.exe
    O4 – HKCU\..\Run: [ynmolec] c:\windows\okmkbem.exe
    O4 – HKCU\..\Run: [oqeljaa] c:\windows\okmkbem.exe
    O4 – HKCU\..\Run: [ciooovn] c:\windows\okmkbem.exe
    O4 – HKCU\..\Run: [ujccyiv] c:\windows\okmkbem.exe
    O4 – HKCU\..\Run: [bltbtfw] c:\windows\okmkbem.exe
    O4 – HKCU\..\Run: [sbblkir] c:\windows\okmkbem.exe
    O4 – HKCU\..\Run: [xxbnsos] c:\windows\okmkbem.exe
    O4 – HKCU\..\Run: [hjjvnji] c:\windows\okmkbem.exe
    O4 – HKCU\..\Run: [pdmmyth] c:\windows\okmkbem.exe
    O4 – HKCU\..\Run: [ykcvgev] c:\windows\okmkbem.exe
    O4 – HKCU\..\Run: [vwdeqmi] c:\windows\okmkbem.exe
    O4 – HKCU\..\Run: [ikwgbcl] c:\windows\okmkbem.exe
    O4 – HKCU\..\Run: [mdycdum] c:\windows\okmkbem.exe
    O4 – HKCU\..\Run: [bmurxir] c:\windows\okmkbem.exe
    O4 – HKCU\..\Run: [hclfars] c:\windows\okmkbem.exe
    O4 – HKCU\..\Run: [hkaptfy] c:\windows\okmkbem.exe
    O4 – HKCU\..\Run: [qedkpml] c:\windows\okmkbem.exe
    O4 – HKCU\..\Run: [fiwwoqd] c:\windows\okmkbem.exe
    O4 – HKCU\..\Run: [cirunsi] c:\windows\okmkbem.exe
    O4 – HKCU\..\Run: [bqmhlkw] c:\windows\okmkbem.exe
    O4 – HKCU\..\Run: [rukkrqd] c:\windows\okmkbem.exe
    O4 – HKCU\..\Run: [cfiavrx] c:\windows\okmkbem.exe
    O4 – HKCU\..\Run: [extlrbl] c:\windows\okmkbem.exe
    O4 – HKCU\..\Run: [pakcupu] c:\windows\okmkbem.exe
    O4 – HKCU\..\Run: [uuiigbr] c:\windows\okmkbem.exe
    O4 – HKCU\..\Run: [hlqixwy] c:\windows\okmkbem.exe
    O4 – HKCU\..\Run: [gecykes] c:\windows\okmkbem.exe
    O4 – HKCU\..\Run: [tmnujla] c:\windows\okmkbem.exe
    O4 – HKCU\..\Run: [ekftlyn] c:\windows\okmkbem.exe
    O4 – HKCU\..\Run: [yreuegj] c:\windows\okmkbem.exe
    O4 – HKCU\..\Run: [nnsitjh] c:\windows\okmkbem.exe
    O4 – HKCU\..\Run: [wrmkbvm] c:\windows\okmkbem.exe
    O4 – HKCU\..\Run: [vbuklor] c:\windows\okmkbem.exe
    O4 – HKCU\..\Run: [tiaumou] c:\windows\okmkbem.exe
    O4 – HKCU\..\Run: [himsreu] c:\windows\okmkbem.exe
    O4 – HKCU\..\Run: [ngtwxfm] c:\windows\okmkbem.exe
    O4 – HKCU\..\Run: [jngebkw] c:\windows\okmkbem.exe
    O4 – HKCU\..\Run: [ibnklcl] c:\windows\okmkbem.exe
    O4 – HKCU\..\Run: [rbimolv] c:\windows\okmkbem.exe
    O4 – HKCU\..\Run: [bdgcvcj] c:\windows\okmkbem.exe
    O4 – HKCU\..\Run: [lqgxmtt] c:\windows\okmkbem.exe
    O4 – HKCU\..\Run: [bcfwrsk] c:\windows\okmkbem.exe
    O4 – HKCU\..\Run: [mvjwahy] c:\windows\okmkbem.exe
    O4 – HKCU\..\Run: [lhbxekx] c:\windows\okmkbem.exe
    O4 – HKCU\..\Run: [qmhqwdc] c:\windows\okmkbem.exe
    O4 – HKCU\..\Run: [ruebspt] c:\windows\okmkbem.exe
    O4 – HKCU\..\Run: [nabgnbu] c:\windows\okmkbem.exe
    O4 – HKCU\..\Run: [byvamdp] c:\windows\okmkbem.exe
    O4 – HKCU\..\Run: [fbxghtt] c:\windows\okmkbem.exe
    O4 – HKCU\..\Run: [dfcxoov] c:\windows\okmkbem.exe
    O4 – HKCU\..\Run: [rfmufao] c:\windows\okmkbem.exe
    O4 – HKCU\..\Run: [acetenq] c:\windows\okmkbem.exe
    O4 – HKCU\..\Run: [kmwmawk] c:\windows\okmkbem.exe
    O4 – HKCU\..\Run: [ddmvkkj] c:\windows\okmkbem.exe
    O4 – HKCU\..\Run: [ieopjvw] c:\windows\okmkbem.exe
    O4 – HKCU\..\Run: [fwljfrh] c:\windows\okmkbem.exe
    O4 – HKCU\..\Run: [rpfynjd] c:\windows\okmkbem.exe
    O4 – HKCU\..\Run: [uwyhmpp] c:\windows\okmkbem.exe
    O4 – HKCU\..\Run: [dabnhwf] c:\windows\okmkbem.exe
    O4 – HKCU\..\Run: [ubfquww] c:\windows\okmkbem.exe
    O4 – HKCU\..\Run: [yklcdwx] c:\windows\okmkbem.exe
    O4 – HKCU\..\Run: [npjulkp] c:\windows\okmkbem.exe
    O4 – HKCU\..\Run: [tpwdxsw] c:\windows\okmkbem.exe
    O4 – HKCU\..\Run: [ymhxfcg] c:\windows\okmkbem.exe
    O4 – HKCU\..\Run: [mibupsv] c:\windows\okmkbem.exe
    O4 – HKCU\..\Run: [mswdjpk] c:\windows\okmkbem.exe
    O4 – HKCU\..\Run: [nelrnmk] c:\windows\okmkbem.exe
    O4 – HKCU\..\Run: [podedkq] c:\windows\okmkbem.exe
    O4 – HKCU\..\Run: [nwgwuvd] c:\windows\okmkbem.exe
    O4 – HKCU\..\Run: [liivese] c:\windows\okmkbem.exe
    O4 – HKCU\..\Run: [bplbikq] c:\windows\okmkbem.exe
    O4 – HKCU\..\Run: [aossrne] c:\windows\okmkbem.exe
    O4 – HKCU\..\Run: [aakoopm] c:\windows\okmkbem.exe
    O4 – HKCU\..\Run: [iuiomqj] c:\windows\okmkbem.exe
    O4 – HKCU\..\Run: [awmqihw] c:\windows\okmkbem.exe
    O4 – HKCU\..\Run: [mdcixau] c:\windows\okmkbem.exe
    O4 – HKCU\..\Run: [hkhpebe] c:\windows\okmkbem.exe
    O4 – HKCU\..\Run: [cylsjvb] c:\windows\okmkbem.exe
    O4 – HKCU\..\Run: [urxhvte] c:\windows\okmkbem.exe
    O4 – HKCU\..\Run: [eteerxp] c:\windows\okmkbem.exe
    O4 – HKCU\..\Run: [tfagfig] c:\windows\okmkbem.exe
    O4 – HKCU\..\Run: [fulosaw] c:\windows\okmkbem.exe
    O4 – HKCU\..\Run: [gphiixk] c:\windows\okmkbem.exe
    O4 – HKCU\..\Run: [pehodea] c:\windows\okmkbem.exe
    O4 – HKCU\..\Run: [nelcdft] c:\windows\okmkbem.exe
    O4 – HKCU\..\Run: [mrkdikn] c:\windows\okmkbem.exe
    O4 – HKCU\..\Run: [esjiyqn] c:\windows\okmkbem.exe
    O4 – HKCU\..\Run: [nuddjyw] c:\windows\okmkbem.exe
    O4 – HKCU\..\Run: [chiyaow] c:\windows\okmkbem.exe
    O4 – HKCU\..\Run: [rxxbghr] c:\windows\okmkbem.exe
    O4 – HKCU\..\Run: [gaiijas] c:\windows\okmkbem.exe
    O4 – HKCU\..\Run: [lfapkhu] c:\windows\okmkbem.exe
    O4 – HKCU\..\Run: [gdlefqf] c:\windows\okmkbem.exe
    O4 – HKCU\..\Run: [gdjptjh] c:\windows\okmkbem.exe
    O4 – HKCU\..\Run: [qucjjvt] c:\windows\okmkbem.exe
    O4 – HKCU\..\Run: [jmduree] c:\windows\okmkbem.exe
    O4 – HKCU\..\Run: [kivadrs] c:\windows\okmkbem.exe
    O4 – HKCU\..\Run: [ytbsuhu] c:\windows\okmkbem.exe
    O4 – HKCU\..\Run: [pdiwncv] c:\windows\okmkbem.exe
    O4 – HKCU\..\Run: [ospppjm] c:\windows\okmkbem.exe
    O4 – HKCU\..\Run: [oawasei] c:\windows\okmkbem.exe
    O4 – HKCU\..\Run: [smgrvyi] c:\windows\okmkbem.exe
    O4 – HKCU\..\Run: [ghtfygd] c:\windows\okmkbem.exe
    O4 – HKCU\..\Run: [emvvpqm] c:\windows\okmkbem.exe
    O4 – HKCU\..\Run: [xfrsllq] c:\windows\okmkbem.exe
    O4 – HKCU\..\Run: [cprgmds] c:\windows\okmkbem.exe
    O4 – HKCU\..\Run: [gekwbvr] c:\windows\okmkbem.exe
    O4 – HKCU\..\Run: [vfofkih] c:\windows\okmkbem.exe
    O4 – HKCU\..\Run: [mhctrbo] c:\windows\okmkbem.exe
    O4 – HKCU\..\Run: [ankperx] c:\windows\okmkbem.exe
    O4 – HKCU\..\Run: [lumhwtv] c:\windows\okmkbem.exe
    O4 – HKCU\..\Run: [ppagbnq] c:\windows\okmkbem.exe
    O4 – HKCU\..\Run: [xnxrped] c:\windows\okmkbem.exe
    O4 – HKCU\..\Run: [qdgfxfd] c:\windows\okmkbem.exe
    O4 – HKCU\..\Run: [pqauivi] c:\windows\okmkbem.exe
    O4 – HKCU\..\Run: [ifihktd] c:\windows\okmkbem.exe
    O4 – HKCU\..\Run: [bhfwtdy] c:\windows\okmkbem.exe
    O4 – HKCU\..\Run: [wjtsvht] c:\windows\okmkbem.exe
    O4 – HKCU\..\Run: [cgorkfi] c:\windows\okmkbem.exe
    O4 – HKCU\..\Run: [nqlkxlh] c:\windows\okmkbem.exe
    O4 – HKCU\..\Run: [qskovth] c:\windows\okmkbem.exe
    O4 – HKCU\..\Run: [cnsaddb] c:\windows\okmkbem.exe
    O4 – HKCU\..\Run: [njvwcuw] c:\windows\okmkbem.exe
    O4 – HKCU\..\Run: [egnggcv] c:\windows\okmkbem.exe
    O4 – HKCU\..\Run: [dajujud] c:\windows\okmkbem.exe
    O4 – HKCU\..\Run: [tuycktt] c:\windows\okmkbem.exe
    O4 – HKCU\..\Run: [otqdbpy] c:\windows\okmkbem.exe
    O4 – HKCU\..\Run: [ckydbyx] c:\windows\okmkbem.exe
    O4 – HKCU\..\Run: [fyuffmr] c:\windows\okmkbem.exe
    O4 – HKCU\..\Run: [kptyrtw] c:\windows\okmkbem.exe
    O4 – HKCU\..\Run: [kjbueip] c:\windows\okmkbem.exe
    O4 – HKCU\..\Run: [wxuumle] c:\windows\okmkbem.exe
    O4 – HKCU\..\Run: [pgieovg] c:\windows\okmkbem.exe
    O4 – HKCU\..\Run: [wcbsulh] c:\windows\okmkbem.exe
    O4 – HKCU\..\Run: [rusymth] c:\windows\okmkbem.exe
    O4 – HKCU\..\Run: [nqpofkw] c:\windows\okmkbem.exe
    O4 – HKCU\..\Run: [sdrojgo] c:\windows\okmkbem.exe
    O4 – HKCU\..\Run: [lonilji] c:\windows\okmkbem.exe
    O4 – HKCU\..\Run: [awadpeu] c:\windows\okmkbem.exe
    O4 – HKCU\..\Run: [buycqtl] c:\windows\okmkbem.exe
    O4 – HKCU\..\Run: [iovvesa] c:\windows\okmkbem.exe
    O4 – HKCU\..\Run: [dyuonvw] c:\windows\okmkbem.exe
    O4 – HKCU\..\Run: [sadgqsv] c:\windows\okmkbem.exe
    O4 – HKCU\..\Run: [ihkicuh] c:\windows\okmkbem.exe
    O4 – HKCU\..\Run: [hyitrls] c:\windows\okmkbem.exe
    O4 – HKCU\..\Run: [qgsexil] c:\windows\okmkbem.exe
    O4 – HKCU\..\Run: [oolusav] c:\windows\okmkbem.exe
    O4 – HKCU\..\Run: [oltpesd] c:\windows\okmkbem.exe
    O4 – HKCU\..\Run: [dhjqrgu] c:\windows\okmkbem.exe
    O4 – HKCU\..\Run: [atlljtn] c:\windows\okmkbem.exe
    O4 – HKCU\..\Run: [jkoprki] c:\windows\okmkbem.exe
    O4 – HKCU\..\Run: [fdkjlyd] c:\windows\okmkbem.exe
    O4 – HKCU\..\Run: [vwaajyn] c:\windows\okmkbem.exe
    O4 – HKCU\..\Run: [fvrnxhp] c:\windows\okmkbem.exe
    O4 – HKCU\..\Run: [tgmqxne] c:\windows\okmkbem.exe
    O4 – HKCU\..\Run: [lmfgltf] c:\windows\okmkbem.exe
    O4 – HKCU\..\Run: [rnhshvn] c:\windows\okmkbem.exe
    O4 – HKCU\..\Run: [wfwatim] c:\windows\okmkbem.exe
    O4 – HKCU\..\Run: [veyiwtm] c:\windows\okmkbem.exe
    O4 – HKCU\..\Run: [bbwaxme] c:\windows\okmkbem.exe
    O4 – HKCU\..\Run: [mdpscfx] c:\windows\okmkbem.exe
    O4 – HKCU\..\Run: [agiguhm] c:\windows\okmkbem.exe
    O4 – HKCU\..\Run: [tamawmh] c:\windows\okmkbem.exe
    O4 – HKCU\..\Run: [guplslb] c:\windows\ipguxxe.exe
    O4 – HKCU\..\Run: [exfvvcu] c:\windows\ipguxxe.exe
    O4 – HKCU\..\Run: [gjsvicr] c:\windows\chpwubt.exe
    O4 – HKCU\..\Run: [xuattvf] c:\windows\chpwubt.exe
    O4 – HKCU\..\Run: [cbcbvbt] c:\windows\chpwubt.exe
    O4 – HKCU\..\Run: [medyuru] c:\windows\jtdbcma.exe
    O4 – HKCU\..\Run: [ywrropi] c:\windows\jtdbcma.exe
    O4 – HKCU\..\Run: [phwmjhj] c:\windows\jtdbcma.exe
    O4 – HKCU\..\Run: [tmmlkil] c:\windows\jtdbcma.exe
    O4 – HKCU\..\Run: [bvpuhqe] c:\windows\jtdbcma.exe
    O4 – HKCU\..\Run: [dhgehnm] c:\windows\jtdbcma.exe
    O4 – HKCU\..\Run: [giavqsy] c:\windows\jtdbcma.exe
    O4 – HKCU\..\Run: [cnesvmg] c:\windows\jtdbcma.exe
    O4 – HKCU\..\Run: [bnrwbsh] c:\windows\jtdbcma.exe
    O4 – HKCU\..\Run: [rhhcepp] c:\windows\jtdbcma.exe
    O4 – HKCU\..\Run: [tfltpbw] c:\windows\jtdbcma.exe
    O4 – HKCU\..\Run: [uttxdjo] c:\windows\jtdbcma.exe
    O4 – HKCU\..\Run: [qfiktri] c:\windows\jtdbcma.exe
    O4 – HKCU\..\Run: [lcxdata] c:\windows\gcqsicu.exe
    O4 – HKCU\..\Run: [nwtyjkl] c:\windows\gcqsicu.exe
    O4 – HKCU\..\Run: [bjaqhdl] c:\windows\gcqsicu.exe
    O4 – HKCU\..\Run: [ovbqyrt] c:\windows\gcqsicu.exe
    O4 – HKCU\..\Run: [ikgluiu] c:\windows\gcqsicu.exe
    O4 – HKCU\..\Run: [cksccpd] c:\windows\gcqsicu.exe
    O4 – HKCU\..\Run: [jesopvx] c:\windows\gcqsicu.exe
    O4 – HKCU\..\Run: [ogdeiuj] c:\windows\gcqsicu.exe
    O4 – HKCU\..\Run: [wahujun] c:\windows\gcqsicu.exe
    O4 – HKCU\..\Run: [iwtdynl] c:\windows\gcqsicu.exe
    O4 – HKCU\..\Run: [bdtumco] c:\windows\gcqsicu.exe
    O4 – HKCU\..\Run: [vuyktxe] c:\windows\gcqsicu.exe
    O4 – HKCU\..\Run: [qccmkxd] c:\windows\gcqsicu.exe
    O4 – HKCU\..\Run: [giyxhoy] c:\windows\gcqsicu.exe
    O4 – HKCU\..\Run: [pkeecxg] c:\windows\gcqsicu.exe
    O4 – HKCU\..\Run: [jevxkrf] c:\windows\gcqsicu.exe
    O4 – HKCU\..\Run: [sjmedaj] c:\windows\gcqsicu.exe
    O4 – HKCU\..\Run: [remjeun] c:\windows\gcqsicu.exe
    O4 – HKCU\..\Run: [wqpdaku] c:\windows\gcqsicu.exe
    O4 – HKCU\..\Run: [dxfyxhs] c:\windows\gcqsicu.exe
    O4 – HKCU\..\Run: [hdnootd] c:\windows\gcqsicu.exe
    O4 – HKCU\..\Run: [pbdsvvt] c:\windows\gcqsicu.exe
    O4 – HKCU\..\Run: [hwvjvku] c:\windows\gcqsicu.exe
    O4 – HKCU\..\Run: [jlpysml] c:\windows\gcqsicu.exe
    O4 – HKCU\..\Run: [lanqljk] c:\windows\gcqsicu.exe
    O4 – HKCU\..\Run: [fyddyww] c:\windows\gcqsicu.exe
    O4 – HKCU\..\Run: [uptfyva] c:\windows\gcqsicu.exe
    O4 – HKCU\..\Run: [mviwdor] c:\windows\gcqsicu.exe
    O4 – HKCU\..\Run: [raljsiv] c:\windows\gcqsicu.exe
    O4 – HKCU\..\Run: [cesanmh] c:\windows\gcqsicu.exe
    O4 – HKCU\..\Run: [kpqwbgj] c:\windows\gcqsicu.exe
    O4 – HKCU\..\Run: [qwbsles] c:\windows\gcqsicu.exe
    O4 – HKCU\..\Run: [vjrtnim] c:\windows\gcqsicu.exe
    O4 – HKCU\..\Run: [nawohpj] c:\windows\gcqsicu.exe
    O4 – HKCU\..\Run: [xvfeack] c:\windows\gcqsicu.exe
    O4 – HKCU\..\Run: [oynykip] c:\windows\gcqsicu.exe
    O4 – HKCU\..\Run: [nrvpkkk] c:\windows\gcqsicu.exe
    O4 – HKCU\..\Run: [owcdwob] c:\windows\gcqsicu.exe
    O4 – HKCU\..\Run: [qqcuiie] c:\windows\gcqsicu.exe
    O4 – HKCU\..\Run: [xbgxajv] c:\windows\gcqsicu.exe
    O4 – HKCU\..\Run: [cojxpqk] c:\windows\gcqsicu.exe
    O4 – HKCU\..\Run: [jhvrwwp] c:\windows\gcqsicu.exe
    O4 – HKCU\..\Run: [ejptiss] c:\windows\gcqsicu.exe
    O4 – HKCU\..\Run: [mphhctd] c:\windows\gcqsicu.exe
    O4 – HKCU\..\Run: [xwccegt] c:\windows\gcqsicu.exe
    O4 – HKCU\..\Run: [dqpfgif] c:\windows\gcqsicu.exe
    O4 – HKCU\..\Run: [qjkvblx] c:\windows\gcqsicu.exe
    O4 – HKCU\..\Run: [jmsnfhx] c:\windows\gcqsicu.exe
    O4 – HKCU\..\Run: [qjeqcmx] c:\windows\gcqsicu.exe
    O4 – HKCU\..\Run: [ohdfguv] c:\windows\gcqsicu.exe
    O4 – HKCU\..\Run: [fehdufd] c:\windows\gcqsicu.exe
    O4 – HKCU\..\Run: [baogxqf] c:\windows\gcqsicu.exe
    O4 – HKCU\..\Run: [fwonqny] c:\windows\gcqsicu.exe
    O4 – HKCU\..\Run: [vjncugr] c:\windows\gcqsicu.exe
    O4 – HKCU\..\Run: [udqfbeu] c:\windows\gcqsicu.exe
    O4 – HKCU\..\Run: [tqkuctd] c:\windows\gcqsicu.exe
    O4 – HKCU\..\Run: [hexmklr] c:\windows\gcqsicu.exe
    O4 – HKCU\..\Run: [yusqspb] c:\windows\gcqsicu.exe
    O4 – HKCU\..\Run: [qojyuvg] c:\windows\gcqsicu.exe
    O4 – HKCU\..\Run: [phxmwlv] c:\windows\gcqsicu.exe
    O4 – HKCU\..\Run: [esaqoex] c:\windows\gcqsicu.exe
    O4 – HKCU\..\Run: [whekrua] c:\windows\gcqsicu.exe
    O4 – HKCU\..\Run: [inkpsci] c:\windows\gcqsicu.exe
    O4 – HKCU\..\Run: [pvtgdka] c:\windows\gcqsicu.exe
    O4 – HKCU\..\Run: [fxrxclk] c:\windows\gcqsicu.exe
    O4 – HKCU\..\Run: [pcogoqy] c:\windows\gcqsicu.exe
    O4 – HKCU\..\Run: [xwomhye] c:\windows\gcqsicu.exe
    O4 – HKCU\..\Run: [clewifl] c:\windows\gcqsicu.exe
    O4 – HKCU\..\Run: [uxhhtqm] c:\windows\gcqsicu.exe
    O4 – HKCU\..\Run: [ncqorsn] c:\windows\gcqsicu.exe
    O4 – HKCU\..\Run: [ifchcrq] c:\windows\gcqsicu.exe
    O4 – HKCU\..\Run: [tgqqbhd] c:\windows\gcqsicu.exe
    O4 – HKCU\..\Run: [ukqnrvq] c:\windows\gcqsicu.exe
    O4 – HKCU\..\Run: [nsrbuky] c:\windows\gcqsicu.exe
    O4 – HKCU\..\Run: [grkmvpj] c:\windows\gcqsicu.exe
    O4 – HKCU\..\Run: [ykroxrm] c:\windows\gcqsicu.exe
    O4 – HKCU\..\Run: [mtmhcrl] c:\windows\gcqsicu.exe
    O4 – HKCU\..\Run: [dvfsmuf] c:\windows\gcqsicu.exe
    O4 – HKCU\..\Run: [qctxsfe] c:\windows\gcqsicu.exe
    O4 – HKCU\..\Run: [uykayfj] c:\windows\gcqsicu.exe
    O4 – HKCU\..\Run: [xwhvwja] c:\windows\gcqsicu.exe
    O4 – HKCU\..\Run: [uswvgoe] c:\windows\gcqsicu.exe
    O4 – HKCU\..\Run: [rqaeovw] c:\windows\gcqsicu.exe
    O4 – HKCU\..\Run: [jwiargq] c:\windows\gcqsicu.exe
    O4 – HKCU\..\Run: [ydwjnnr] c:\windows\gcqsicu.exe
    O4 – HKCU\..\Run: [byxvqas] c:\windows\gcqsicu.exe
    O4 – HKCU\..\Run: [bcfvwxx] c:\windows\gcqsicu.exe
    O4 – HKCU\..\Run: [wyvrhru] c:\windows\gcqsicu.exe
    O4 – HKCU\..\Run: [phgllex] c:\windows\gcqsicu.exe
    O4 – HKCU\..\Run: [qmbepwi] c:\windows\gcqsicu.exe
    O4 – HKCU\..\Run: [cmhhfod] c:\windows\gcqsicu.exe
    O4 – HKCU\..\Run: [xqhvwwv] c:\windows\gcqsicu.exe
    O4 – HKCU\..\Run: [fnakcrv] c:\windows\gcqsicu.exe
    O4 – HKCU\..\Run: [viwomln] c:\windows\gcqsicu.exe
    O4 – HKCU\..\Run: [bivtfwh] c:\windows\gcqsicu.exe
    O4 – HKCU\..\Run: [qdfgsss] c:\windows\gcqsicu.exe
    O4 – HKCU\..\Run: [jgixfsw] c:\windows\gcqsicu.exe
    O4 – HKCU\..\Run: [kuxkjhy] c:\windows\gcqsicu.exe
    O4 – HKCU\..\Run: [efudypa] c:\windows\gcqsicu.exe
    O4 – HKCU\..\Run: [wficghg] c:\windows\gcqsicu.exe
    O4 – HKCU\..\Run: [odmhxeq] c:\windows\gcqsicu.exe
    O4 – HKCU\..\Run: [aecjejs] c:\windows\gcqsicu.exe
    O4 – HKCU\..\Run: [bcybcee] c:\windows\gcqsicu.exe
    O4 – HKCU\..\Run: [kgdmjbp] c:\windows\gcqsicu.exe
    O4 – HKCU\..\Run: [yapxbaj] c:\windows\gcqsicu.exe
    O4 – HKCU\..\Run: [juhpwvh] c:\windows\gcqsicu.exe
    O4 – HKCU\..\Run: [nwwnuqu] c:\windows\gcqsicu.exe
    O4 – HKCU\..\Run: [bbpwrrd] c:\windows\gcqsicu.exe
    O4 – HKCU\..\Run: [uthvfit] c:\windows\gcqsicu.exe
    O4 – HKCU\..\Run: [gblmsdc] c:\windows\gcqsicu.exe
    O4 – HKCU\..\Run: [ftklkpu] c:\windows\gcqsicu.exe
    O4 – HKCU\..\Run: [axuopbb] c:\windows\gcqsicu.exe
    O4 – HKCU\..\Run: [mkiaygr] c:\windows\gcqsicu.exe
    O4 – HKCU\..\Run: [ycvqitf] c:\windows\gcqsicu.exe
    O4 – HKCU\..\Run: [mtltdgk] c:\windows\gcqsicu.exe
    O4 – HKCU\..\Run: [vnsvoba] c:\windows\gcqsicu.exe
    O4 – HKCU\..\Run: [vvmxfvs] c:\windows\gcqsicu.exe
    O4 – HKCU\..\Run: [haywyid] c:\windows\gcqsicu.exe
    O4 – HKCU\..\Run: [qxshpab] c:\windows\gcqsicu.exe
    O4 – HKCU\..\Run: [wtvuery] c:\windows\gcqsicu.exe
    O4 – HKCU\..\Run: [ixywbed] c:\windows\gcqsicu.exe
    O4 – HKCU\..\Run: [tpgerki] c:\windows\gcqsicu.exe
    O4 – HKCU\..\Run: [gegsxwa] c:\windows\gcqsicu.exe
    O4 – HKCU\..\Run: [gvupmxq] c:\windows\gcqsicu.exe
    O4 – HKCU\..\Run: [cljmhye] c:\windows\gcqsicu.exe
    O4 – HKCU\..\Run: [wlnjooc] c:\windows\gcqsicu.exe
    O4 – HKCU\..\Run: [effkubb] c:\windows\gcqsicu.exe
    O4 – HKCU\..\Run: [bdgwdql] c:\windows\gcqsicu.exe
    O4 – HKCU\..\Run: [hvddkvb] c:\windows\gcqsicu.exe
    O4 – HKCU\..\Run: [irbnuga] c:\windows\gcqsicu.exe
    O4 – HKCU\..\Run: [upqqvxh] c:\windows\gcqsicu.exe
    O4 – HKCU\..\Run: [tdigloy] c:\windows\gcqsicu.exe
    O4 – HKCU\..\Run: [filkwdn] c:\windows\gcqsicu.exe
    O4 – HKCU\..\Run: [aewkarv] c:\windows\gcqsicu.exe
    O4 – HKCU\..\Run: [lmxeqgo] c:\windows\gcqsicu.exe
    O4 – HKCU\..\Run: [dknruft] c:\windows\gcqsicu.exe
    O4 – HKCU\..\Run: [lvslhsp] c:\windows\gcqsicu.exe
    O4 – HKCU\..\Run: [jduvhxf] c:\windows\gcqsicu.exe
    O4 – HKCU\..\Run: [cssmbql] c:\windows\gcqsicu.exe
    O4 – HKCU\..\Run: [nliastb] c:\windows\gcqsicu.exe
    O4 – HKCU\..\Run: [evlomgg] c:\windows\gcqsicu.exe
    O4 – HKCU\..\Run: [niwioqc] c:\windows\gcqsicu.exe
    O4 – HKCU\..\Run: [brnlhbq] c:\windows\gcqsicu.exe
    O4 – HKCU\..\Run: [ftsiygk] c:\windows\gcqsicu.exe
    O4 – HKCU\..\Run: [fktnxsb] c:\windows\gcqsicu.exe
    O4 – HKCU\..\Run: [oycdqfr] c:\windows\gcqsicu.exe
    O4 – HKCU\..\Run: [shiogfb] c:\windows\gcqsicu.exe
    O4 – HKCU\..\Run: [hremxbh] c:\windows\gcqsicu.exe
    O4 – HKCU\..\Run: [iagasru] c:\windows\gcqsicu.exe
    O4 – HKCU\..\Run: [ongelmc] c:\windows\gcqsicu.exe
    O4 – HKCU\..\Run: [gxkpnvy] c:\windows\gcqsicu.exe
    O4 – HKCU\..\Run: [djdiqia] c:\windows\gcqsicu.exe
    O4 – HKCU\..\Run: [ipnctbl] c:\windows\gcqsicu.exe
    O4 – HKCU\..\Run: [utibeyv] c:\windows\gcqsicu.exe
    O4 – HKCU\..\Run: [ghxuupe] c:\windows\gcqsicu.exe
    O4 – HKCU\..\Run: [irulcof] c:\windows\gcqsicu.exe
    O4 – HKCU\..\Run: [ilapfcm] c:\windows\gcqsicu.exe
    O4 – HKCU\..\Run: [espsomv] c:\windows\gcqsicu.exe
    O4 – HKCU\..\Run: [ilrouvm] c:\windows\gcqsicu.exe
    O4 – HKCU\..\Run: [derjfro] c:\windows\gcqsicu.exe
    O4 – HKCU\..\Run: [vdnugjx] c:\windows\gcqsicu.exe
    O4 – HKCU\..\Run: [ylyyaiv] c:\windows\gcqsicu.exe
    O4 – HKCU\..\Run: [astpqti] c:\windows\gcqsicu.exe
    O4 – HKCU\..\Run: [lbnbjbn] c:\windows\gcqsicu.exe
    O4 – HKCU\..\Run: [dmbkroq] c:\windows\gcqsicu.exe
    O4 – HKCU\..\Run: [ngrqtae] c:\windows\gcqsicu.exe
    O4 – HKCU\..\Run: [eqesafr] c:\windows\gcqsicu.exe
    O4 – HKCU\..\Run: [ecsjiec] c:\windows\gcqsicu.exe
    O4 – HKCU\..\Run: [fkkkwrm] c:\windows\gcqsicu.exe
    O4 – HKCU\..\Run: [chifdkm] c:\windows\gcqsicu.exe
    O4 – HKCU\..\Run: [dvrwgon] c:\windows\gcqsicu.exe
    O4 – HKCU\..\Run: [elenlxg] c:\windows\gcqsicu.exe
    O4 – HKCU\..\Run: [cawiapo] c:\windows\gcqsicu.exe
    O4 – HKCU\..\Run: [avcfrnl] c:\windows\gcqsicu.exe
    O4 – HKCU\..\Run: [sbkarwo] c:\windows\gcqsicu.exe
    O4 – HKCU\..\Run: [rvyoagw] c:\windows\gcqsicu.exe
    O4 – HKCU\..\Run: [bkarhle] c:\windows\gcqsicu.exe
    O4 – HKCU\..\Run: [dasrioi] c:\windows\gcqsicu.exe
    O4 – HKCU\..\Run: [pajcrqd] c:\windows\gcqsicu.exe
    O4 – HKCU\..\Run: [liypggk] c:\windows\gcqsicu.exe
    O4 – HKCU\..\Run: [upfkcck] c:\windows\gcqsicu.exe
    O4 – HKCU\..\Run: [wrgostt] c:\windows\gcqsicu.exe
    O4 – HKCU\..\Run: [ninwxun] c:\windows\gcqsicu.exe
    O4 – HKCU\..\Run: [ufqmqbl] c:\windows\gcqsicu.exe
    O4 – HKCU\..\Run: [nsljdlx] c:\windows\gcqsicu.exe
    O4 – HKCU\..\Run: [ipmffho] c:\windows\gcqsicu.exe
    O4 – HKCU\..\Run: [iqceoqa] c:\windows\gcqsicu.exe
    O4 – HKCU\..\Run: [xbpcbsm] c:\windows\gcqsicu.exe
    O4 – HKCU\..\Run: [gnaqvfk] c:\windows\gcqsicu.exe
    O4 – HKCU\..\Run: [pgupekc] c:\windows\gcqsicu.exe
    O4 – HKCU\..\Run: [ehmhlti] c:\windows\gcqsicu.exe
    O4 – HKCU\..\Run: [cqlvwin] c:\windows\gcqsicu.exe
    O4 – HKCU\..\Run: [xragfwp] c:\windows\gcqsicu.exe
    O4 – HKCU\..\Run: [vqufffe] c:\windows\gcqsicu.exe
    O4 – HKCU\..\Run: [wkwoebn] c:\windows\gcqsicu.exe
    O4 – HKCU\..\Run: [tvgeksy] c:\windows\gcqsicu.exe
    O4 – HKCU\..\Run: [soidjrq] c:\windows\gcqsicu.exe
    O4 – HKCU\..\Run: [qmcafmv] c:\windows\gcqsicu.exe
    O4 – HKCU\..\Run: [xvxsllj] c:\windows\gcqsicu.exe
    O4 – HKCU\..\Run: [uqmstna] c:\windows\gcqsicu.exe
    O4 – HKCU\..\Run: [bfdcjkc] c:\windows\gcqsicu.exe
    O4 – HKCU\..\Run: [aywbpau] c:\windows\gcqsicu.exe
    O4 – HKCU\..\Run: [tcmhgfk] c:\windows\gcqsicu.exe
    O4 – HKCU\..\Run: [sxnfhdp] c:\windows\gcqsicu.exe
    O4 – HKCU\..\Run: [wgpvtng] c:\windows\gcqsicu.exe
    O4 – HKCU\..\Run: [rspcrbi] c:\windows\gcqsicu.exe
    O4 – HKCU\..\Run: [xeeevlj] c:\windows\gcqsicu.exe
    O4 – HKCU\..\Run: [sojkpqy] c:\windows\gcqsicu.exe
    O4 – HKCU\..\Run: [wvosnye] c:\windows\gcqsicu.exe
    O4 – HKCU\..\Run: [ftusnqu] c:\windows\gcqsicu.exe
    O4 – HKCU\..\Run: [gphvfky] c:\windows\gcqsicu.exe
    O4 – HKCU\..\Run: [dhlwwqj] c:\windows\gcqsicu.exe
    O4 – HKCU\..\Run: [prhxhef] c:\windows\gcqsicu.exe
    O4 – HKCU\..\Run: [horclim] c:\windows\gcqsicu.exe
    O4 – HKCU\..\Run: [dkgdbfn] c:\windows\gcqsicu.exe
    O4 – HKCU\..\Run: [gpdkbjt] c:\windows\gcqsicu.exe
    O4 – HKCU\..\Run: [tveaqyq] c:\windows\gcqsicu.exe
    O4 – HKCU\..\Run: [vtscxde] c:\windows\gcqsicu.exe
    O4 – HKCU\..\Run: [oxkgavu] c:\windows\gcqsicu.exe
    O4 – HKCU\..\Run: [wuofvml] c:\windows\gcqsicu.exe
    O4 – HKCU\..\Run: [grfkfln] c:\windows\gcqsicu.exe
    O4 – HKCU\..\Run: [gfpyapy] c:\windows\gcqsicu.exe
    O4 – HKCU\..\Run: [kxvqycn] c:\windows\gcqsicu.exe
    O4 – HKCU\..\Run: [hwgodcv] c:\windows\gcqsicu.exe
    O4 – HKCU\..\Run: [lyasvce] c:\windows\gcqsicu.exe
    O4 – HKCU\..\Run: [mxqrmqs] c:\windows\gcqsicu.exe
    O4 – HKCU\..\Run: [ojsbend] c:\windows\gcqsicu.exe
    O4 – HKCU\..\Run: [mkvhaoe] c:\windows\gcqsicu.exe
    O4 – HKCU\..\Run: [kpgkxod] c:\windows\gcqsicu.exe
    O4 – HKCU\..\Run: [jcrkwlc] c:\windows\gcqsicu.exe
    O4 – HKCU\..\Run: [hikghjm] c:\windows\gcqsicu.exe
    O4 – HKCU\..\Run: [jmrycra] c:\windows\gcqsicu.exe
    O4 – HKCU\..\Run: [xtkuhpm] c:\windows\gcqsicu.exe
    O4 – HKCU\..\Run: [ssovvmw] c:\windows\gcqsicu.exe
    O4 – HKCU\..\Run: [detgulm] c:\windows\gcqsicu.exe
    O4 – HKCU\..\Run: [ysrqpkd] c:\windows\gcqsicu.exe
    O4 – HKCU\..\Run: [yonaudw] c:\windows\gcqsicu.exe
    O4 – HKCU\..\Run: [obcwgly] c:\windows\gcqsicu.exe
    O4 – HKCU\..\Run: [hfdycdx] c:\windows\gcqsicu.exe
    O4 – HKCU\..\Run: [pguaqvd] c:\windows\gcqsicu.exe
    O4 – HKCU\..\Run: [oiwbfad] c:\windows\gcqsicu.exe
    O4 – HKCU\..\Run: [gylslev] c:\windows\gcqsicu.exe
    O4 – HKCU\..\Run: [uutlpjx] c:\windows\gcqsicu.exe
    O4 – HKCU\..\Run: [bkyagfc] c:\windows\gcqsicu.exe
    O4 – HKCU\..\Run: [ffmjlcs] c:\windows\gcqsicu.exe
    O4 – HKCU\..\Run: [ujbqglj] c:\windows\gcqsicu.exe
    O4 – HKCU\..\Run: [ritkdlw] c:\windows\gcqsicu.exe
    O4 – HKCU\..\Run: [symhtti] c:\windows\gcqsicu.exe
    O4 – HKCU\..\Run: [akcjvfs] c:\windows\gcqsicu.exe
    O4 – HKCU\..\Run: [vueelfk] c:\windows\gcqsicu.exe
    O4 – HKCU\..\Run: [dxpswcy] c:\windows\gcqsicu.exe
    O4 – HKCU\..\Run: [wwakutb] c:\windows\gcqsicu.exe
    O4 – HKCU\..\Run: [twpqkwj] c:\windows\gcqsicu.exe
    O4 – HKCU\..\Run: [drqrthr] c:\windows\gcqsicu.exe
    O4 – HKCU\..\Run: [prxrsgw] c:\windows\gcqsicu.exe
    O4 – HKCU\..\Run: [xiaqsjy] c:\windows\gcqsicu.exe
    O4 – HKCU\..\Run: [hlyqrot] c:\windows\gcqsicu.exe
    O4 – HKCU\..\Run: [jxpuakf] c:\windows\gcqsicu.exe
    O4 – HKCU\..\Run: [hhaqken] c:\windows\gcqsicu.exe
    O4 – HKCU\..\Run: [iopcmod] c:\windows\gcqsicu.exe
    O4 – HKCU\..\Run: [npryjip] c:\windows\gcqsicu.exe
    O4 – HKCU\..\Run: [rbatmbe] c:\windows\gcqsicu.exe
    O4 – HKCU\..\Run: [xhuisht] c:\windows\gcqsicu.exe
    O4 – HKCU\..\Run: [cxehefn] c:\windows\gcqsicu.exe
    O4 – HKCU\..\Run: [tmqvevt] c:\windows\gcqsicu.exe
    O4 – HKCU\..\Run: [rfnbapm] c:\windows\gcqsicu.exe
    O4 – HKCU\..\Run: [kthirdb] c:\windows\gcqsicu.exe
    O4 – HKCU\..\Run: [ssyovst] c:\windows\gcqsicu.exe
    O4 – HKCU\..\Run: [sxrndmc] c:\windows\gcqsicu.exe
    O4 – HKCU\..\Run: [rxcmbyp] c:\windows\gcqsicu.exe
    O4 – HKCU\..\Run: [mkkmqia] c:\windows\gcqsicu.exe
    O4 – HKCU\..\Run: [pgcpbju] c:\windows\gcqsicu.exe
    O4 – HKCU\..\Run: [bgkwucc] c:\windows\gcqsicu.exe
    O4 – HKCU\..\Run: [vdsbdve] c:\windows\gcqsicu.exe
    O4 – HKCU\..\Run: [lknkrkj] c:\windows\gcqsicu.exe
    O4 – HKCU\..\Run: [aovrsxo] c:\windows\gcqsicu.exe
    O4 – HKCU\..\Run: [aesnmyo] c:\windows\gcqsicu.exe
    O4 – HKCU\..\Run: [lcycujq] c:\windows\gcqsicu.exe
    O4 – HKCU\..\Run: [vkivnwj] c:\windows\gcqsicu.exe
    O4 – HKCU\..\Run: [mpnhqsr] c:\windows\gcqsicu.exe
    O4 – HKCU\..\Run: [dysrhuf] c:\windows\gcqsicu.exe
    O4 – HKCU\..\Run: [xkwuyga] c:\windows\gcqsicu.exe
    O4 – HKCU\..\Run: [djkbyft] c:\windows\gcqsicu.exe
    O4 – HKCU\..\Run: [tbhljpg] c:\windows\gcqsicu.exe
    O4 – HKCU\..\Run: [eeffjro] c:\windows\gcqsicu.exe
    O4 – HKCU\..\Run: [htnrarn] c:\windows\gcqsicu.exe
    O4 – HKCU\..\Run: [lsylxnf] c:\windows\gcqsicu.exe
    O4 – HKCU\..\Run: [hhohpti] c:\windows\gcqsicu.exe
    O4 – HKCU\..\Run: [jrkggxk] c:\windows\gcqsicu.exe
    O4 – HKCU\..\Run: [beryxei] c:\windows\gcqsicu.exe
    O4 – HKCU\..\Run: [calwsub] c:\windows\gcqsicu.exe
    O4 – HKCU\..\Run: [dfxghtu] c:\windows\gcqsicu.exe
    O4 – HKCU\..\Run: [nnsrtbr] c:\windows\gcqsicu.exe
    O4 – HKCU\..\Run: [qpqcrpf] c:\windows\gcqsicu.exe
    O4 – HKCU\..\Run: [naibdpe] c:\windows\gcqsicu.exe
    O4 – HKCU\..\Run: [fjsuvnc] c:\windows\gcqsicu.exe
    O4 – HKCU\..\Run: [kyinmsa] c:\windows\gcqsicu.exe
    O4 – HKCU\..\Run: [mbtbfbf] c:\windows\gcqsicu.exe
    O4 – HKCU\..\Run: [sstcrel] c:\windows\gcqsicu.exe
    O4 – HKCU\..\Run: [ruuqjcn] c:\windows\gcqsicu.exe
    O4 – HKCU\..\Run: [qjyhtsl] c:\windows\gcqsicu.exe
    O4 – HKCU\..\Run: [dngwrvk] c:\windows\gcqsicu.exe
    O4 – HKCU\..\Run: [ecguvin] c:\windows\gcqsicu.exe
    O4 – HKCU\..\Run: [yycirsl] c:\windows\gcqsicu.exe
    O4 – HKCU\..\Run: [ecpnxvf] c:\windows\gcqsicu.exe
    O4 – HKCU\..\Run: [nxrfulm] c:\windows\gcqsicu.exe
    O4 – HKCU\..\Run: [gdgiejo] c:\windows\gcqsicu.exe
    O4 – HKCU\..\Run: [upknsvs] c:\windows\gcqsicu.exe
    O4 – HKCU\..\Run: [inagmwh] c:\windows\gcqsicu.exe
    O4 – HKCU\..\Run: [gxaltin] c:\windows\gcqsicu.exe
    O4 – HKCU\..\Run: [hvdklxv] c:\windows\gcqsicu.exe
    O4 – HKCU\..\Run: [uxcpqtg] c:\windows\gcqsicu.exe
    O4 – HKCU\..\Run: [ayohkkg] c:\windows\gcqsicu.exe
    O4 – HKCU\..\Run: [odymqbp] c:\windows\gcqsicu.exe
    O4 – HKCU\..\Run: [tamvbdo] c:\windows\gcqsicu.exe
    O4 – HKCU\..\Run: [igraxya] c:\windows\gcqsicu.exe
    O4 – HKCU\..\Run: [wmxveyr] c:\windows\gcqsicu.exe
    O4 – HKCU\..\Run: [squxlcp] c:\windows\gcqsicu.exe
    O4 – HKCU\..\Run: [piebwji] c:\windows\gcqsicu.exe
    O4 – HKCU\..\Run: [rdrqsrk] c:\windows\gcqsicu.exe
    O4 – HKCU\..\Run: [octuaug] c:\windows\gcqsicu.exe
    O4 – HKCU\..\Run: [cjcqktt] c:\windows\gcqsicu.exe
    O4 – HKCU\..\Run: [fesiuhb] c:\windows\gcqsicu.exe
    O4 – HKCU\..\Run: [peclvdf] c:\windows\gcqsicu.exe
    O4 – HKCU\..\Run: [ujfjdxy] c:\windows\gcqsicu.exe
    O4 – HKCU\..\Run: [htgfbhm] c:\windows\gcqsicu.exe
    O4 – HKCU\..\Run: [ssflrql] c:\windows\gcqsicu.exe
    O4 – HKCU\..\Run: [bfgsddb] c:\windows\gcqsicu.exe
    O4 – HKCU\..\Run: [tqweuxh] c:\windows\gcqsicu.exe
    O4 – HKCU\..\Run: [pulgppw] c:\windows\gcqsicu.exe
    O4 – HKCU\..\Run: [gswbnly] c:\windows\gcqsicu.exe
    O4 – HKCU\..\Run: [rvkoolh] c:\windows\gcqsicu.exe
    O4 – HKCU\..\Run: [avjbsam] c:\windows\gcqsicu.exe
    O4 – HKCU\..\Run: [vxbyvip] c:\windows\gcqsicu.exe
    O4 – HKCU\..\Run: [ylvxwog] c:\windows\gcqsicu.exe
    O4 – HKCU\..\Run: [ytojlko] c:\windows\gcqsicu.exe
    O4 – HKCU\..\Run: [wkxjaym] c:\windows\gcqsicu.exe
    O4 – HKCU\..\Run: [txmoprn] c:\windows\gcqsicu.exe
    O4 – HKCU\..\Run: [lsssucw] c:\windows\gcqsicu.exe
    O4 – HKCU\..\Run: [fmagqwn] c:\windows\gcqsicu.exe
    O4 – HKCU\..\Run: [qigilyn] c:\windows\gcqsicu.exe
    O4 – HKCU\..\Run: [fauptog] c:\windows\gcqsicu.exe
    O4 – HKCU\..\Run: [pwjefwe] c:\windows\gcqsicu.exe
    O4 – HKCU\..\Run: [aialqjn] c:\windows\gcqsicu.exe
    O4 – HKCU\..\Run: [oxanuov] c:\windows\gcqsicu.exe
    O4 – HKCU\..\Run: [hpmpoiy] c:\windows\gcqsicu.exe
    O4 – HKCU\..\Run: [foopwrr] c:\windows\gcqsicu.exe
    O4 – HKCU\..\Run: [ghpswwh] c:\windows\gcqsicu.exe
    O4 – HKCU\..\Run: [hvtkuui] c:\windows\gcqsicu.exe
    O4 – HKCU\..\Run: [ljbjrrf] c:\windows\gcqsicu.exe
    O4 – HKCU\..\Run: [ssslvdd] c:\windows\gcqsicu.exe
    O4 – HKCU\..\Run: [jfgxwsq] c:\windows\gcqsicu.exe
    O4 – HKCU\..\Run: [telsouh] c:\windows\gcqsicu.exe
    O4 – HKCU\..\Run: [xduhnwh] c:\windows\gcqsicu.exe
    O4 – HKCU\..\Run: [spnnmnu] c:\windows\gcqsicu.exe
    O4 – HKCU\..\Run: [ojmjmpf] c:\windows\gcqsicu.exe
    O4 – HKCU\..\Run: [tcetlab] c:\windows\gcqsicu.exe
    O4 – HKCU\..\Run: [qtjdike] c:\windows\gcqsicu.exe
    O4 – HKCU\..\Run: [drqprvm] c:\windows\gcqsicu.exe
    O4 – HKCU\..\Run: [wsnguoy] c:\windows\gcqsicu.exe
    O4 – HKCU\..\Run: [syubqat] c:\windows\gcqsicu.exe
    O4 – HKCU\..\Run: [oepeiad] c:\windows\gcqsicu.exe
    O4 – HKCU\..\Run: [cmjtbta] c:\windows\gcqsicu.exe
    O4 – HKCU\..\Run: [mqfavvc] c:\windows\gcqsicu.exe
    O4 – HKCU\..\Run: [hivqbkw] c:\windows\gcqsicu.exe
    O4 – HKCU\..\Run: [vgerdql] c:\windows\gcqsicu.exe
    O4 – HKCU\..\Run: [nrlxckb] c:\windows\gcqsicu.exe
    O4 – HKCU\..\Run: [walxhvo] c:\windows\gcqsicu.exe
    O4 – HKCU\..\Run: [crwqpac] c:\windows\gcqsicu.exe
    O4 – HKCU\..\Run: [dueoqjy] c:\windows\gcqsicu.exe
    O4 – HKCU\..\Run: [dxpdlnr] c:\windows\gcqsicu.exe
    O4 – HKCU\..\Run: [xyaovby] c:\windows\gcqsicu.exe
    O4 – HKCU\..\Run: [inknkiw] c:\windows\gcqsicu.exe
    O4 – HKCU\..\Run: [kkwmljy] c:\windows\gcqsicu.exe
    O4 – HKCU\..\Run: [nthfbdd] c:\windows\gcqsicu.exe
    O4 – HKCU\..\Run: [hcdxnbx] c:\windows\gcqsicu.exe
    O4 – HKCU\..\Run: [shnqyye] c:\windows\gcqsicu.exe
    O4 – HKCU\..\Run: [pmoqxuu] c:\windows\gcqsicu.exe
    O4 – HKCU\..\Run: [ntkygsm] c:\windows\gcqsicu.exe
    O4 – HKCU\..\Run: [jcjhqhb] c:\windows\gcqsicu.exe
    O4 – HKCU\..\Run: [tgqsiic] c:\windows\gcqsicu.exe
    O4 – HKCU\..\Run: [ncxvltn] c:\windows\gcqsicu.exe
    O4 – HKCU\..\Run: [kexuddk] c:\windows\gcqsicu.exe
    O4 – HKCU\..\Run: [pxdicgn] c:\windows\gcqsicu.exe
    O4 – HKCU\..\Run: [xmafjnr] c:\windows\gcqsicu.exe
    O4 – HKCU\..\Run: [daxhnho] c:\windows\gcqsicu.exe
    O4 – HKCU\..\Run: [vaqcnir] c:\windows\gcqsicu.exe
    O4 – HKCU\..\Run: [tqjspgu] c:\windows\gcqsicu.exe
    O4 – HKCU\..\Run: [ttoruln] c:\windows\gcqsicu.exe
    O4 – HKCU\..\Run: [qposcen] c:\windows\gcqsicu.exe
    O4 – HKCU\..\Run: [kcvolnc] c:\windows\gcqsicu.exe
    O4 – HKCU\..\Run: [yjlnwig] c:\windows\gcqsicu.exe
    O4 – HKCU\..\Run: [gnomnpl] c:\windows\gcqsicu.exe
    O4 – HKCU\..\Run: [wrjdpas] c:\windows\gcqsicu.exe
    O4 – HKCU\..\Run: [luyvyax] c:\windows\gcqsicu.exe
    O4 – HKCU\..\Run: [wdnpqhv] c:\windows\gcqsicu.exe
    O4 – HKCU\..\Run: [vwjvtce] c:\windows\gcqsicu.exe
    O4 – HKCU\..\Run: [gqdygbb] c:\windows\gcqsicu.exe
    O4 – HKCU\..\Run: [ndgvsft] c:\windows\gcqsicu.exe
    O4 – HKCU\..\Run: [abnfbpy] c:\windows\gcqsicu.exe
    O4 – HKCU\..\Run: [qjwqgob] c:\windows\gcqsicu.exe
    O4 – HKCU\..\Run: [cduqdem] c:\windows\gcqsicu.exe
    O4 – HKCU\..\Run: [llpevlg] c:\windows\gcqsicu.exe
    O4 – HKCU\..\Run: [uarcuky] c:\windows\gcqsicu.exe
    O4 – HKCU\..\Run: [tdmqjcv] c:\windows\gcqsicu.exe
    O4 – HKCU\..\Run: [ugvbmxy] c:\windows\gcqsicu.exe
    O4 – HKCU\..\Run: [ptcogbo] c:\windows\gcqsicu.exe
    O4 – HKCU\..\Run: [yqhhfgx] c:\windows\gcqsicu.exe
    O4 – HKCU\..\Run: [ippylef] c:\windows\gcqsicu.exe
    O4 – HKCU\..\Run: [cigywgv] c:\windows\gcqsicu.exe
    O4 – HKCU\..\Run: [xjqkxeh] c:\windows\gcqsicu.exe
    O4 – HKCU\..\Run: [kmhjofh] c:\windows\gcqsicu.exe
    O4 – HKCU\..\Run: [srnntqn] c:\windows\gcqsicu.exe
    O4 – HKCU\..\Run: [yxxjiot] c:\windows\gcqsicu.exe
    O4 – HKCU\..\Run: [ivwcxua] c:\windows\gcqsicu.exe
    O4 – HKCU\..\Run: [rqcyevn] c:\windows\gcqsicu.exe
    O4 – HKCU\..\Run: [wlupapm] c:\windows\gcqsicu.exe
    O4 – HKCU\..\Run: [grpbnsi] c:\windows\gcqsicu.exe
    O4 – HKCU\..\Run: [sdsmrpb] c:\windows\gcqsicu.exe
    O4 – HKCU\..\Run: [awedray] c:\windows\gcqsicu.exe
    O4 – HKCU\..\Run: [ghiaeix] c:\windows\gcqsicu.exe
    O4 – HKCU\..\Run: [lmlybvr] c:\windows\gcqsicu.exe
    O4 – HKCU\..\Run: [fgaifbc] c:\windows\gcqsicu.exe
    O4 – HKCU\..\Run: [oltsevi] c:\windows\gcqsicu.exe
    O4 – HKCU\..\Run: [etptyik] c:\windows\gcqsicu.exe
    O4 – HKCU\..\Run: [cbtqnii] c:\windows\gcqsicu.exe
    O4 – HKCU\..\Run: [lkhuccy] c:\windows\gcqsicu.exe
    O4 – HKCU\..\Run: [oeqdhsn] c:\windows\gcqsicu.exe
    O4 – HKCU\..\Run: [clvmxdw] c:\windows\gcqsicu.exe
    O4 – HKCU\..\Run: [yeosttr] c:\windows\gcqsicu.exe
    O4 – HKCU\..\Run: [oxmtbig] c:\windows\gcqsicu.exe
    O4 – HKCU\..\Run: [phphree] c:\windows\gcqsicu.exe
    O4 – HKCU\..\Run: [maktmhm] c:\windows\gcqsicu.exe
    O4 – HKCU\..\Run: [fomgdww] c:\windows\gcqsicu.exe
    O4 – HKCU\..\Run: [pclisuy] c:\windows\gcqsicu.exe
    O4 – HKCU\..\Run: [pjknvvn] c:\windows\gcqsicu.exe
    O4 – HKCU\..\Run: [jdkokkc] c:\windows\gcqsicu.exe
    O4 – HKCU\..\Run: [lqifmmk] c:\windows\gcqsicu.exe
    O4 – HKCU\..\Run: [odyhdaj] c:\windows\gcqsicu.exe
    O4 – HKCU\..\Run: [ijhrola] c:\windows\gcqsicu.exe
    O4 – HKCU\..\Run: [ijsusve] c:\windows\gcqsicu.exe
    O4 – HKCU\..\Run: [euqbnjs] c:\windows\gcqsicu.exe
    O4 – HKCU\..\Run: [odamrvl] c:\windows\gcqsicu.exe
    O4 – HKCU\..\Run: [fjsrbqw] c:\windows\gcqsicu.exe
    O4 – HKCU\..\Run: [pdjrcwg] c:\windows\gcqsicu.exe
    O4 – HKCU\..\Run: [tyrvyhd] c:\windows\gcqsicu.exe
    O4 – HKCU\..\Run: [edwjplu] c:\windows\gcqsicu.exe
    O4 – HKCU\..\Run: [wsacbyc] c:\windows\gcqsicu.exe
    O4 – HKCU\..\Run: [opkfxqu] c:\windows\gcqsicu.exe
    O4 – HKCU\..\Run: [ttwcqwh] c:\windows\gcqsicu.exe
    O4 – HKCU\..\Run: [lrnhtff] c:\windows\gcqsicu.exe
    O4 – HKCU\..\Run: [bwehbxq] c:\windows\gcqsicu.exe
    O4 – HKCU\..\Run: [oskloux] c:\windows\gcqsicu.exe
    O4 – HKCU\..\Run: [ylptupx] c:\windows\gcqsicu.exe
    O4 – HKCU\..\Run: [fikbftj] c:\windows\gcqsicu.exe
    O4 – HKCU\..\Run: [yjkcpqt] c:\windows\gcqsicu.exe
    O4 – HKCU\..\Run: [ldkgmuu] c:\windows\gcqsicu.exe
    O4 – HKCU\..\Run: [tuxdfrr] c:\windows\gcqsicu.exe
    O4 – HKCU\..\Run: [fbeffun] c:\windows\gcqsicu.exe
    O4 – HKCU\..\Run: [kpxegdc] c:\windows\gcqsicu.exe
    O4 – HKCU\..\Run: [kaijmqs] c:\windows\gcqsicu.exe
    O4 – HKCU\..\Run: [dabwkbo] c:\windows\gcqsicu.exe
    O4 – HKCU\..\Run: [ikhsjdh] c:\windows\gcqsicu.exe
    O4 – HKCU\..\Run: [xbolbar] c:\windows\gcqsicu.exe
    O4 – HKCU\..\Run: [mbwfuum] c:\windows\gcqsicu.exe
    O4 – HKCU\..\Run: [arjtwfu] c:\windows\gcqsicu.exe
    O4 – HKCU\..\Run: [rovfwke] c:\windows\gcqsicu.exe
    O4 – HKCU\..\Run: [cbnoklp] c:\windows\gcqsicu.exe
    O4 – HKCU\..\Run: [nneamif] c:\windows\gcqsicu.exe
    O4 – HKCU\..\Run: [jtvwdhm] c:\windows\gcqsicu.exe
    O4 – HKCU\..\Run: [abdlwji] c:\windows\gcqsicu.exe
    O4 – HKCU\..\Run: [ppahnfp] c:\windows\gcqsicu.exe
    O4 – HKCU\..\Run: [oahljob] c:\windows\gcqsicu.exe
    O4 – HKCU\..\Run: [mmuhbxf] c:\windows\gcqsicu.exe
    O4 – HKCU\..\Run: [nugviph] c:\windows\gcqsicu.exe
    O4 – HKCU\..\Run: [npywoow] c:\windows\gcqsicu.exe
    O4 – HKCU\..\Run: [toeyjfu] c:\windows\gcqsicu.exe
    O4 – HKCU\..\Run: [cggfopx] c:\windows\lrqtamy.exe
    O4 – HKCU\..\Run: [hguudev] c:\windows\lrqtamy.exe
    O4 – HKCU\..\Run: [pglcuew] c:\windows\lrqtamy.exe
    O4 – HKCU\..\Run: [ulnfhtg] c:\windows\lrqtamy.exe
    O4 – HKCU\..\Run: [gnqhomg] c:\windows\lrqtamy.exe
    O4 – HKCU\..\Run: [nbgyjqt] c:\windows\lrqtamy.exe
    O4 – HKCU\..\Run: [senvqks] c:\windows\lrqtamy.exe
    O4 – HKCU\..\Run: [ipdloot] c:\windows\lrqtamy.exe
    O4 – HKCU\..\Run: [qndetsw] c:\windows\lrqtamy.exe
    O4 – HKCU\..\Run: [sohcrec] c:\windows\lrqtamy.exe
    O4 – HKCU\..\Run: [gigaysm] c:\windows\lrqtamy.exe
    O4 – HKCU\..\Run: [tdnafbu] c:\windows\lrqtamy.exe
    O4 – HKCU\..\Run: [qhmfpym] c:\windows\lrqtamy.exe
    O4 – HKCU\..\Run: [bihvyoj] c:\windows\lrqtamy.exe
    O4 – HKCU\..\Run: [mwmgcmq] c:\windows\lrqtamy.exe
    O4 – HKCU\..\Run: [tludahs] c:\windows\lrqtamy.exe
    O4 – HKCU\..\Run: [oijsxnp] c:\windows\lrqtamy.exe
    O4 – HKCU\..\Run: [byerlqg] c:\windows\lrqtamy.exe
    O4 – HKCU\..\Run: [qgbhmbm] c:\windows\lrqtamy.exe
    O4 – HKCU\..\Run: [vkmnsxg] c:\windows\lrqtamy.exe
    O4 – HKCU\..\Run: [wdqbfge] c:\windows\lrqtamy.exe
    O4 – HKCU\..\Run: [rafcipw] c:\windows\lrqtamy.exe
    O4 – HKCU\..\Run: [bqexnqf] c:\windows\lrqtamy.exe
    O4 – HKCU\..\Run: [kceohaw] c:\windows\lrqtamy.exe
    O4 – HKCU\..\Run: [qvavelx] c:\windows\hsdsuns.exe
    O4 – HKCU\..\Run: [dbgcqre] c:\windows\hsdsuns.exe
    O4 – HKCU\..\Run: [dsqupin] c:\windows\hsdsuns.exe
    O4 – HKCU\..\Run: [xrilnyd] c:\windows\hsdsuns.exe
    O4 – HKCU\..\Run: [tyogiee] c:\windows\hsdsuns.exe
    O4 – HKCU\..\Run: [aixeftq] c:\windows\hsdsuns.exe
    O4 – HKCU\..\Run: [gvhxsdr] c:\windows\hsdsuns.exe
    O4 – HKCU\..\Run: [vdipwvs] c:\windows\hsdsuns.exe
    O4 – HKCU\..\Run: [pboqjtq] c:\windows\hsdsuns.exe
    O4 – HKCU\..\Run: [gnougho] c:\windows\hsdsuns.exe
    O4 – HKCU\..\Run: [sneybux] c:\windows\hsdsuns.exe
    O4 – HKCU\..\Run: [gckrdvy] c:\windows\hsdsuns.exe
    O4 – HKCU\..\Run: [rbhnakd] c:\windows\hsdsuns.exe
    O4 – HKCU\..\Run: [xhrewpj] c:\windows\hsdsuns.exe
    O4 – HKCU\..\Run: [bdvkjbv] c:\windows\hsdsuns.exe
    O4 – HKCU\..\Run: [whdormp] c:\windows\hsdsuns.exe
    O4 – HKCU\..\Run: [puqbgtq] c:\windows\hsdsuns.exe
    O4 – HKCU\..\Run: [ssiakbt] c:\windows\hsdsuns.exe
    O4 – HKCU\..\Run: [ivintks] c:\windows\hsdsuns.exe
    O4 – HKCU\..\Run: [gcxptem] c:\windows\hsdsuns.exe
    O4 – HKCU\..\Run: [yfbnpwy] c:\windows\hsdsuns.exe
    O4 – HKCU\..\Run: [gdqfpxj] c:\windows\hsdsuns.exe
    O4 – HKCU\..\Run: [ksaxwjx] c:\windows\hsdsuns.exe
    O4 – HKCU\..\Run: [rqttqib] c:\windows\hsdsuns.exe
    O4 – HKCU\..\Run: [wtxtgal] c:\windows\hsdsuns.exe
    O4 – HKCU\..\Run: [aavdqlg] c:\windows\hsdsuns.exe
    O4 – HKCU\..\Run: [drdyfcq] c:\windows\hsdsuns.exe
    O4 – HKCU\..\Run: [uuwlrfi] c:\windows\hsdsuns.exe
    O4 – HKCU\..\Run: [yvondts] c:\windows\hsdsuns.exe
    O4 – HKCU\..\Run: [wxqersx] c:\windows\hsdsuns.exe
    O4 – HKCU\..\Run: [jgqgcns] c:\windows\hsdsuns.exe
    O4 – HKCU\..\Run: [mxmpqai] c:\windows\hsdsuns.exe
    O4 – HKCU\..\Run: [nntaixf] c:\windows\hsdsuns.exe
    O4 – HKCU\..\Run: [bncarqr] c:\windows\hsdsuns.exe
    O4 – HKCU\..\Run: [msuvafg] c:\windows\hsdsuns.exe
    O4 – HKCU\..\Run: [cyghvox] c:\windows\hsdsuns.exe
    O4 – HKCU\..\Run: [wnkgchy] c:\windows\hsdsuns.exe
    O4 – HKCU\..\Run: [jmdfvto] c:\windows\hsdsuns.exe
    O4 – HKCU\..\Run: [hywduie] c:\windows\hsdsuns.exe
    O4 – HKCU\..\Run: [pfjfjkk] c:\windows\hsdsuns.exe
    O4 – HKCU\..\Run: [lagndui] c:\windows\hsdsuns.exe
    O4 – HKCU\..\Run: [jkjpqlw] c:\windows\hsdsuns.exe
    O4 – HKCU\..\Run: [hiutumc] c:\windows\hsdsuns.exe
    O4 – HKCU\..\Run: [cmwxeui] c:\windows\hsdsuns.exe
    O4 – HKCU\..\Run: [vurxqkq] c:\windows\hsdsuns.exe
    O4 – HKCU\..\Run: [srutbla] c:\windows\hsdsuns.exe
    O4 – HKCU\..\Run: [vsylaxy] c:\windows\hsdsuns.exe
    O4 – HKCU\..\Run: [nwomjmb] c:\windows\hsdsuns.exe
    O4 – HKCU\..\Run: [ieeptxv] c:\windows\hsdsuns.exe
    O4 – HKCU\..\Run: [dolivgy] c:\windows\hsdsuns.exe
    O4 – HKCU\..\Run: [okufjcr] c:\windows\hsdsuns.exe
    O4 – HKCU\..\Run: [dupwhtk] c:\windows\hsdsuns.exe
    O4 – HKCU\..\Run: [rpgimcf] c:\windows\hsdsuns.exe
    O4 – HKCU\..\Run: [rdaoqse] c:\windows\hsdsuns.exe
    O4 – HKCU\..\Run: [dblyuww] c:\windows\hsdsuns.exe
    O4 – HKCU\..\Run: [qvefxio] c:\windows\hsdsuns.exe
    O4 – HKCU\..\Run: [rcaybjd] c:\windows\hsdsuns.exe
    O4 – HKCU\..\Run: [ayprdfe] c:\windows\hsdsuns.exe
    O4 – HKCU\..\Run: [uoovnlm] c:\windows\hsdsuns.exe
    O4 – HKCU\..\Run: [krgmtip] c:\windows\hsdsuns.exe
    O4 – HKCU\..\Run: [dtttxbo] c:\windows\hsdsuns.exe
    O4 – HKCU\..\Run: [lklmhhe] c:\windows\hsdsuns.exe
    O4 – HKCU\..\Run: [lcxpgfo] c:\windows\hsdsuns.exe
    O4 – HKCU\..\Run: [pgeuged] c:\windows\hsdsuns.exe
    O4 – HKCU\..\Run: [ybwygcb] c:\windows\hsdsuns.exe
    O4 – HKCU\..\Run: [ginonyx] c:\windows\hsdsuns.exe
    O4 – HKCU\..\Run: [uaegfox] c:\windows\hsdsuns.exe
    O4 – HKCU\..\Run: [jimvvod] c:\windows\hsdsuns.exe
    O4 – HKCU\..\Run: [sllbubb] c:\windows\hsdsuns.exe
    O4 – HKCU\..\Run: [uahuxkh] c:\windows\hsdsuns.exe
    O4 – HKCU\..\Run: [nrkfofs] c:\windows\hsdsuns.exe
    O4 – HKCU\..\Run: [btnliln] c:\windows\hsdsuns.exe
    O4 – HKCU\..\Run: [jmtjibw] c:\windows\hsdsuns.exe
    O4 – HKCU\..\Run: [thiakxy] c:\windows\hsdsuns.exe
    O4 – HKCU\..\Run: [pqwbjrj] c:\windows\hsdsuns.exe
    O4 – HKCU\..\Run: [jhcvusx] c:\windows\hsdsuns.exe
    O4 – HKCU\..\Run: [uuhloqk] c:\windows\hsdsuns.exe
    O4 – HKCU\..\Run: [fgdawad] c:\windows\hsdsuns.exe
    O4 – HKCU\..\Run: [ihwqyqx] c:\windows\hsdsuns.exe
    O4 – HKCU\..\Run: [qkefbph] c:\windows\hsdsuns.exe
    O4 – HKCU\..\Run: [wwemrym] c:\windows\hsdsuns.exe
    O4 – HKCU\..\Run: [ykpkncd] c:\windows\hsdsuns.exe
    O4 – HKCU\..\Run: [qyewcnd] c:\windows\hsdsuns.exe
    O4 – HKCU\..\Run: [xmqcodp] c:\windows\hsdsuns.exe
    O4 – HKCU\..\Run: [qfatgiy] c:\windows\hsdsuns.exe
    O4 – HKCU\..\Run: [pkbvuqi] c:\windows\hsdsuns.exe
    O4 – HKCU\..\Run: [gysuwqs] c:\windows\hsdsuns.exe
    O4 – HKCU\..\Run: [goyuyjp] c:\windows\hsdsuns.exe
    O4 – HKCU\..\Run: [kalelnb] c:\windows\hsdsuns.exe
    O4 – HKCU\..\Run: [vdlkxcm] c:\windows\hsdsuns.exe
    O4 – HKCU\..\Run: [seqjmdm] c:\windows\hsdsuns.exe
    O4 – HKCU\..\Run: [siuyygl] c:\windows\hsdsuns.exe
    O4 – HKCU\..\Run: [egakkmj] c:\windows\hsdsuns.exe
    O4 – HKCU\..\Run: [ooohrov] c:\windows\hsdsuns.exe
    O4 – HKCU\..\Run: [xklpstp] c:\windows\hsdsuns.exe
    O4 – HKCU\..\Run: [tattqok] c:\windows\hsdsuns.exe
    O4 – HKCU\..\Run: [ppptgig] c:\windows\hsdsuns.exe
    O4 – HKCU\..\Run: [atjxyej] c:\windows\hsdsuns.exe
    O4 – HKCU\..\Run: [xaegtaq] c:\windows\hsdsuns.exe
    O4 – HKCU\..\Run: [imcprtm] c:\windows\hsdsuns.exe
    O4 – HKCU\..\Run: [iljghht] c:\windows\hsdsuns.exe
    O4 – HKCU\..\Run: [etsrtpu] c:\windows\hsdsuns.exe
    O4 – HKCU\..\Run: [jbsaawb] c:\windows\hsdsuns.exe
    O4 – HKCU\..\Run: [cyijkch] c:\windows\hsdsuns.exe
    O4 – HKCU\..\Run: [brgegtf] c:\windows\hsdsuns.exe
    O4 – HKCU\..\Run: [qnhdkhf] c:\windows\hsdsuns.exe
    O4 – HKCU\..\Run: [pyvehyv] c:\windows\hsdsuns.exe
    O4 – HKCU\..\Run: [odbxejm] c:\windows\hsdsuns.exe
    O4 – HKCU\..\Run: [trvpoyu] c:\windows\hsdsuns.exe
    O4 – HKCU\..\Run: [exxnsgp] c:\windows\hsdsuns.exe
    O4 – HKCU\..\Run: [wumwgik] c:\windows\hsdsuns.exe
    O4 – HKCU\..\Run: [ixlqjbp] c:\windows\hsdsuns.exe
    O4 – HKCU\..\Run: [aiwshfm] c:\windows\hsdsuns.exe
    O4 – HKCU\..\Run: [mopkgas] c:\windows\hsdsuns.exe
    O4 – HKCU\..\Run: [obwukie] c:\windows\hsdsuns.exe
    O4 – HKCU\..\Run: [fsdrsbu] c:\windows\hsdsuns.exe
    O4 – HKCU\..\Run: [yuajpnn] c:\windows\hsdsuns.exe
    O4 – HKCU\..\Run: [uvbrmqr] c:\windows\hsdsuns.exe
    O4 – HKCU\..\Run: [elwgfuc] c:\windows\hsdsuns.exe
    O4 – HKCU\..\Run: [nysmmrj] c:\windows\hsdsuns.exe
    O4 – HKCU\..\Run: [rtojswe] c:\windows\hsdsuns.exe
    O4 – HKCU\..\Run: [vugmwnt] c:\windows\hsdsuns.exe
    O4 – HKCU\..\Run: [ubuwnsr] c:\windows\hsdsuns.exe
    O4 – HKCU\..\Run: [fgrgmtp] c:\windows\hsdsuns.exe
    O4 – HKCU\..\Run: [hybaixk] c:\windows\hsdsuns.exe
    O4 – HKCU\..\Run: [afkginw] c:\windows\hsdsuns.exe
    O4 – HKCU\..\Run: [eeebojk] c:\windows\hsdsuns.exe
    O4 – HKCU\..\Run: [xjvkoji] c:\windows\hsdsuns.exe
    O4 – HKCU\..\Run: [ckcmnxr] c:\windows\hsdsuns.exe
    O4 – HKCU\..\Run: [qfmiasl] c:\windows\hsdsuns.exe
    O4 – HKCU\..\Run: [thgefdm] c:\windows\hsdsuns.exe
    O4 – HKCU\..\Run: [nyexlur] c:\windows\hsdsuns.exe
    O4 – HKCU\..\Run: [whvkgxm] c:\windows\hsdsuns.exe
    O4 – HKCU\..\Run: [epvmvjc] c:\windows\hsdsuns.exe
    O4 – HKCU\..\Run: [fxwhenp] c:\windows\hsdsuns.exe
    O4 – HKCU\..\Run: [vvlugpw] c:\windows\hsdsuns.exe
    O4 – HKCU\..\Run: [cuybfjb] c:\windows\hsdsuns.exe
    O4 – HKCU\..\Run: [inceoac] c:\windows\hsdsuns.exe
    O4 – HKCU\..\Run: [ftcjcao] c:\windows\hsdsuns.exe
    O4 – HKCU\..\Run: [fowpklq] c:\windows\hsdsuns.exe
    O4 – HKCU\..\Run: [ufbyjhd] c:\windows\hsdsuns.exe
    O4 – HKCU\..\Run: [inpbael] c:\windows\hsdsuns.exe
    O4 – HKCU\..\Run: [xiuxwdx] c:\windows\hsdsuns.exe
    O4 – HKCU\..\Run: [npatybe] c:\windows\hsdsuns.exe
    O4 – HKCU\..\Run: [gpmlvbp] c:\windows\hsdsuns.exe
    O4 – HKCU\..\Run: [akhmaoe] c:\windows\hsdsuns.exe
    O4 – HKCU\..\Run: [ddlhvev] c:\windows\hsdsuns.exe
    O4 – HKCU\..\Run: [leccxer] c:\windows\hsdsuns.exe
    O4 – HKCU\..\Run: [udysjof] c:\windows\hsdsuns.exe
    O4 – HKCU\..\Run: [biivbrh] c:\windows\hsdsuns.exe
    O4 – HKCU\..\Run: [hnubtko] c:\windows\hsdsuns.exe
    O4 – HKCU\..\Run: [mdbebnc] c:\windows\hsdsuns.exe
    O4 – HKCU\..\Run: [eplqevf] c:\windows\hsdsuns.exe
    O4 – HKCU\..\Run: [gltbydk] c:\windows\hsdsuns.exe
    O4 – HKCU\..\Run: [wqnrfvf] c:\windows\hsdsuns.exe
    O4 – HKCU\..\Run: [keawmps] c:\windows\hsdsuns.exe
    O4 – HKCU\..\Run: [ospcmgc] c:\windows\hsdsuns.exe
    O4 – HKCU\..\Run: [oggaofg] c:\windows\hsdsuns.exe
    O4 – HKCU\..\Run: [okartco] c:\windows\hsdsuns.exe
    O4 – HKCU\..\Run: [fjbrowc] c:\windows\hsdsuns.exe
    O4 – HKCU\..\Run: [btoeljf] c:\windows\hsdsuns.exe
    O4 – HKCU\..\Run: [jcrxlcq] c:\windows\hsdsuns.exe
    O4 – HKCU\..\Run: [hhwiboo] c:\windows\hsdsuns.exe
    O4 – HKCU\..\Run: [klvgjml] c:\windows\hsdsuns.exe
    O4 – HKCU\..\Run: [otrbmtn] c:\windows\hsdsuns.exe
    O4 – HKCU\..\Run: [plxwmra] c:\windows\hsdsuns.exe
    O4 – HKCU\..\Run: [lkuvcec] c:\windows\hsdsuns.exe
    O4 – HKCU\..\Run: [hpksmhm] c:\windows\hsdsuns.exe
    O4 – HKCU\..\Run: [dedalfh] c:\windows\hsdsuns.exe
    O4 – HKCU\..\Run: [bqoiuoc] c:\windows\hsdsuns.exe
    O4 – HKCU\..\Run: [hnebhjr] c:\windows\hsdsuns.exe
    O4 – HKCU\..\Run: [virgqse] c:\windows\hsdsuns.exe
    O4 – HKCU\..\Run: [cdqdtjs] c:\windows\hsdsuns.exe
    O4 – HKCU\..\Run: [mxlgcuo] c:\windows\hsdsuns.exe
    O4 – HKCU\..\Run: [utspxcd] c:\windows\hsdsuns.exe
    O4 – HKCU\..\Run: [inllowg] c:\windows\hsdsuns.exe
    O4 – HKCU\..\Run: [ibepqwr] c:\windows\hsdsuns.exe
    O4 – HKCU\..\Run: [sjmvrey] c:\windows\hsdsuns.exe
    O4 – HKCU\..\Run: [gqhqyqh] c:\windows\hsdsuns.exe
    O4 – HKCU\..\Run: [ejrshjy] c:\windows\hsdsuns.exe
    O4 – HKCU\..\Run: [iwpihgk] c:\windows\hsdsuns.exe
    O4 – HKCU\..\Run: [drhywuc] c:\windows\hsdsuns.exe
    O4 – HKCU\..\Run: [aelcnqr] c:\windows\hsdsuns.exe
    O4 – HKCU\..\Run: [efnujcx] c:\windows\hsdsuns.exe
    O4 – HKCU\..\Run: [lukcbsc] c:\windows\hsdsuns.exe
    O4 – HKCU\..\Run: [jjxichv] c:\windows\hsdsuns.exe
    O4 – HKCU\..\Run: [xmhbcce] c:\windows\hsdsuns.exe
    O4 – HKCU\..\Run: [wqvfbno] c:\windows\hsdsuns.exe
    O4 – HKCU\..\Run: [egjfpjs] c:\windows\hsdsuns.exe
    O4 – HKCU\..\Run: [ammgvnx] c:\windows\hsdsuns.exe
    O4 – HKCU\..\Run: [obaiicr] c:\windows\hsdsuns.exe
    O4 – HKCU\..\Run: [ofwnjjy] c:\windows\hsdsuns.exe
    O4 – HKCU\..\Run: [ewhwexp] c:\windows\hsdsuns.exe
    O4 – HKCU\..\Run: [lruvhuk] c:\windows\hsdsuns.exe
    O4 – HKCU\..\Run: [hmnauyx] c:\windows\hsdsuns.exe
    O4 – HKCU\..\Run: [podbmom] c:\windows\hsdsuns.exe
    O4 – HKCU\..\Run: [mnnttsf] c:\windows\hsdsuns.exe
    O4 – HKCU\..\Run: [fcjpeoq] c:\windows\hsdsuns.exe
    O4 – HKCU\..\Run: [mmmntaa] c:\windows\hsdsuns.exe
    O4 – HKCU\..\Run: [lhtbuik] c:\windows\hsdsuns.exe
    O4 – HKCU\..\Run: [vaxdgrt] c:\windows\hsdsuns.exe
    O4 – HKCU\..\Run: [dfotylp] c:\windows\hsdsuns.exe
    O4 – HKCU\..\Run: [sumklsf] c:\windows\hsdsuns.exe
    O4 – HKCU\..\Run: [axojcyt] c:\windows\hsdsuns.exe
    O4 – HKCU\..\Run: [vehpnfy] c:\windows\hsdsuns.exe
    O4 – HKCU\..\Run: [kbvtjda] c:\windows\hsdsuns.exe
    O4 – HKCU\..\Run: [adgsiko] c:\windows\hsdsuns.exe
    O4 – HKCU\..\Run: [tujqsuy] c:\windows\hsdsuns.exe
    O4 – HKCU\..\Run: [wwejxbp] c:\windows\hsdsuns.exe
    O4 – HKCU\..\Run: [atbrdjo] c:\windows\hsdsuns.exe
    O4 – HKCU\..\Run: [wevfgip] c:\windows\hsdsuns.exe
    O4 – HKCU\..\Run: [wyyaagk] c:\windows\hsdsuns.exe
    O4 – HKCU\..\Run: [rvptell] c:\windows\hsdsuns.exe
    O4 – HKCU\..\Run: [tvgrlya] c:\windows\hsdsuns.exe
    O4 – HKCU\..\Run: [sjvcpqb] c:\windows\hsdsuns.exe
    O4 – HKCU\..\Run: [oisicqe] c:\windows\hsdsuns.exe
    O4 – HKCU\..\Run: [iedebop] c:\windows\msjbcol.exe
    O4 – HKCU\..\Run: [ckjppwv] c:\windows\msjbcol.exe
    O4 – HKCU\..\Run: [aiorfxn] c:\windows\msjbcol.exe
    O4 – HKCU\..\Run: [whsinuy] c:\windows\msjbcol.exe
    O4 – HKCU\..\Run: [gpwgapw] c:\windows\msjbcol.exe
    O4 – HKCU\..\Run: [gxgwpwn] c:\windows\msjbcol.exe
    O4 – HKCU\..\Run: [dlmgmpl] c:\windows\msjbcol.exe
    O4 – HKCU\..\Run: [gyrqsyn] c:\windows\msjbcol.exe
    O4 – HKCU\..\Run: [fplbufc] c:\windows\msjbcol.exe
    O4 – HKCU\..\Run: [mjryppq] c:\windows\msjbcol.exe
    O4 – HKCU\..\Run: [nljeghd] c:\windows\msjbcol.exe
    O4 – HKCU\..\Run: [madpwbh] c:\windows\msjbcol.exe
    O4 – HKCU\..\Run: [wxpwdwe] c:\windows\msjbcol.exe
    O4 – HKCU\..\Run: [pssybof] c:\windows\msjbcol.exe
    O4 – HKCU\..\Run: [ujmbvio] c:\windows\msjbcol.exe
    O4 – HKCU\..\Run: [onfalcw] c:\windows\msjbcol.exe
    O4 – HKCU\..\Run: [ffkfuln] c:\windows\msjbcol.exe
    O4 – HKCU\..\Run: [laxdjfe] c:\windows\msjbcol.exe
    O4 – HKCU\..\Run: [ilfdrio] c:\windows\msjbcol.exe
    O4 – HKCU\..\Run: [ikpviht] c:\windows\msjbcol.exe
    O4 – HKCU\..\Run: [lsmopbs] c:\windows\msjbcol.exe
    O4 – HKCU\..\Run: [pqsdxib] c:\windows\msjbcol.exe
    O4 – HKCU\..\Run: [gsckhcf] c:\windows\msjbcol.exe
    O4 – HKCU\..\Run: [nwisrop] c:\windows\msjbcol.exe
    O4 – HKCU\..\Run: [gvnajrr] c:\windows\msjbcol.exe
    O4 – HKCU\..\Run: [sjvevyg] c:\windows\msjbcol.exe
    O4 – HKCU\..\Run: [lxpyyyc] c:\windows\msjbcol.exe
    O4 – HKCU\..\Run: [ultvemq] c:\windows\msjbcol.exe
    O4 – HKCU\..\Run: [fwvduxe] c:\windows\msjbcol.exe
    O4 – HKCU\..\Run: [cyrhcco] c:\windows\msjbcol.exe
    O4 – HKCU\..\Run: [nxkyaxb] c:\windows\msjbcol.exe
    O4 – HKCU\..\Run: [lfgfoui] c:\windows\msjbcol.exe
    O4 – HKCU\..\Run: [gspfmph] c:\windows\msjbcol.exe
    O4 – HKCU\..\Run: [usaihen] c:\windows\msjbcol.exe
    O4 – HKCU\..\Run: [nnvxoxk] c:\windows\msjbcol.exe
    O4 – HKCU\..\Run: [mwpxudm] c:\windows\msjbcol.exe
    O4 – HKCU\..\Run: [epkqtnx] c:\windows\msjbcol.exe
    O4 – HKCU\..\Run: [pjaktxy] c:\windows\msjbcol.exe
    O4 – HKCU\..\Run: [efjbmsk] c:\windows\msjbcol.exe
    O4 – HKCU\..\Run: [pimibry] c:\windows\msjbcol.exe
    O4 – HKCU\..\Run: [yqqvsde] c:\windows\msjbcol.exe
    O4 – HKCU\..\Run: [vocvjbj] c:\windows\msjbcol.exe
    O4 – HKCU\..\Run: [lsydgns] c:\windows\msjbcol.exe
    O4 – HKCU\..\Run: [cfvdkba] c:\windows\msjbcol.exe
    O4 – HKCU\..\Run: [jqbqedq] c:\windows\msjbcol.exe
    O4 – HKCU\..\Run: [kqdnoti] c:\windows\msjbcol.exe
    O4 – HKCU\..\Run: [avqxdvw] c:\windows\msjbcol.exe
    O4 – HKCU\..\Run: [qugqcpq] c:\windows\msjbcol.exe
    O4 – HKCU\..\Run: [btyijic] c:\windows\msjbcol.exe
    O4 – HKCU\..\Run: [pmvaery] c:\windows\msjbcol.exe
    O4 – HKCU\..\Run: [obukvwt] c:\windows\msjbcol.exe
    O4 – HKCU\..\Run: [mnoycpg] c:\windows\msjbcol.exe
    O4 – HKCU\..\Run: [odxwheu] c:\windows\msjbcol.exe
    O4 – HKCU\..\Run: [gvmtlkl] c:\windows\msjbcol.exe
    O4 – HKCU\..\Run: [icqrrnv] c:\windows\msjbcol.exe
    O4 – HKCU\..\Run: [fvdfkku] c:\windows\msjbcol.exe
    O4 – HKCU\..\Run: [drchhmx] c:\windows\msjbcol.exe
    O4 – HKCU\..\Run: [ljyibgg] c:\windows\msjbcol.exe
    O4 – HKCU\..\Run: [oxvmitv] c:\windows\msjbcol.exe
    O4 – HKCU\..\Run: [qskouon] c:\windows\msjbcol.exe
    O4 – HKCU\..\Run: [promdfa] c:\windows\msjbcol.exe
    O4 – HKCU\..\Run: [pdojvuv] c:\windows\msjbcol.exe
    O4 – HKCU\..\Run: [ucqexpa] c:\windows\msjbcol.exe
    O4 – HKCU\..\Run: [bmhrtge] c:\windows\msjbcol.exe
    O4 – HKCU\..\Run: [nnwtacl] c:\windows\msjbcol.exe
    O4 – HKCU\..\Run: [kieextx] c:\windows\msjbcol.exe
    O4 – HKCU\..\Run: [osmxupr] c:\windows\msjbcol.exe
    O4 – HKCU\..\Run: [tjoqlem] c:\windows\msjbcol.exe
    O4 – HKCU\..\Run: [bkpwhev] c:\windows\msjbcol.exe
    O4 – HKCU\..\Run: [qyvonqw] c:\windows\msjbcol.exe
    O4 – HKCU\..\Run: [lymctrq] c:\windows\msjbcol.exe
    O4 – HKCU\..\Run: [gikiqyq] c:\windows\msjbcol.exe
    O4 – HKCU\..\Run: [rwlequn] c:\windows\msjbcol.exe
    O4 – HKCU\..\Run: [foefahk] c:\windows\msjbcol.exe
    O4 – HKCU\..\Run: [auudoqp] c:\windows\msjbcol.exe
    O4 – HKCU\..\Run: [bqslsdv] c:\windows\msjbcol.exe
    O4 – HKCU\..\Run: [mtbvxcx] c:\windows\msjbcol.exe
    O4 – HKCU\..\Run: [bxutrsr] c:\windows\msjbcol.exe
    O4 – HKCU\..\Run: [stbahbp] c:\windows\msjbcol.exe
    O4 – HKCU\..\Run: [tsrwoqm] c:\windows\msjbcol.exe
    O4 – HKCU\..\Run: [tredcpb] c:\windows\msjbcol.exe
    O4 – HKCU\..\Run: [dqtcwty] c:\windows\msjbcol.exe
    O4 – HKCU\..\Run: [wmrgatk] c:\windows\msjbcol.exe
    O4 – HKCU\..\Run: [ypcvkou] c:\windows\msjbcol.exe
    O4 – HKCU\..\Run: [htemaew] c:\windows\msjbcol.exe
    O4 – HKCU\..\Run: [gwyjvsb] c:\windows\msjbcol.exe
    O4 – HKCU\..\Run: [mnrhtrd] c:\windows\msjbcol.exe
    O4 – HKCU\..\Run: [yuuvvxe] c:\windows\msjbcol.exe
    O4 – HKCU\..\Run: [xjpsrnv] c:\windows\msjbcol.exe
    O4 – HKCU\..\Run: [eerlqdo] c:\windows\msjbcol.exe
    O4 – HKCU\..\Run: [jatjqmk] c:\windows\msjbcol.exe
    O4 – HKCU\..\Run: [awigxdr] c:\windows\msjbcol.exe
    O4 – HKCU\..\Run: [uulgaxi] c:\windows\msjbcol.exe
    O4 – HKCU\..\Run: [hwwwbip] c:\windows\msjbcol.exe
    O4 – HKCU\..\Run: [xgucnhc] c:\windows\msjbcol.exe
    O4 – HKCU\..\Run: [dhaetwl] c:\windows\msjbcol.exe
    O4 – HKCU\..\Run: [dxrgpww] c:\windows\msjbcol.exe
    O4 – HKCU\..\Run: [wcsepgy] c:\windows\msjbcol.exe
    O4 – HKCU\..\Run: [eokiefl] c:\windows\msjbcol.exe
    O4 – HKCU\..\Run: [yvrssud] c:\windows\msjbcol.exe
    O4 – HKCU\..\Run: [fuqvbyx] c:\windows\msjbcol.exe
    O4 – HKCU\..\Run: [udbxnct] c:\windows\msjbcol.exe
    O4 – HKCU\..\Run: [quinbgu] c:\windows\msjbcol.exe
    O4 – HKCU\..\Run: [vqaijbi] c:\windows\msjbcol.exe
    O4 – HKCU\..\Run: [hpojnfa] c:\windows\msjbcol.exe
    O4 – HKCU\..\Run: [nksdoyr] c:\windows\msjbcol.exe
    O4 – HKCU\..\Run: [ihuukvw] c:\windows\msjbcol.exe
    O4 – HKCU\..\Run: [powufdb] c:\windows\msjbcol.exe
    O4 – HKCU\..\Run: [pcvjyei] c:\windows\msjbcol.exe
    O4 – HKCU\..\Run: [cbcfcpr] c:\windows\msjbcol.exe
    O4 – HKCU\..\Run: [qecjbqe] c:\windows\msjbcol.exe
    O4 – HKCU\..\Run: [sbbntlc] c:\windows\msjbcol.exe
    O4 – HKCU\..\Run: [fiqcvfe] c:\windows\msjbcol.exe
    O4 – HKCU\..\Run: [amlgtbb] c:\windows\msjbcol.exe
    O4 – HKCU\..\Run: [iivjjdo] c:\windows\msjbcol.exe
    O4 – HKCU\..\Run: [yugsocp] c:\windows\msjbcol.exe
    O4 – HKCU\..\Run: [ykihfoh] c:\windows\msjbcol.exe
    O4 – HKCU\..\Run: [ehmjuig] c:\windows\msjbcol.exe
    O4 – HKCU\..\Run: [jcqigho] c:\windows\msjbcol.exe
    O4 – HKCU\..\Run: [olxmvli] c:\windows\msjbcol.exe
    O4 – HKCU\..\Run: [ogrsoti] c:\windows\msjbcol.exe
    O4 – HKCU\..\Run: [vtsqsgc] c:\windows\msjbcol.exe
    O4 – HKCU\..\Run: [ythhclw] c:\windows\msjbcol.exe
    O4 – HKCU\..\Run: [dcmdvbf] c:\windows\msjbcol.exe
    O4 – HKCU\..\Run: [fbqhvmk] c:\windows\msjbcol.exe
    O4 – HKCU\..\Run: [orxjhuf] c:\windows\msjbcol.exe
    O4 – HKCU\..\Run: [nkixpsu] c:\windows\msjbcol.exe
    O4 – HKCU\..\Run: [jiwkkyu] c:\windows\msjbcol.exe
    O4 – HKCU\..\Run: [wepyhbk] c:\windows\msjbcol.exe
    O4 – HKCU\..\Run: [eymilfp] c:\windows\msjbcol.exe
    O4 – HKCU\..\Run: [montvws] c:\windows\msjbcol.exe
    O4 – HKCU\..\Run: [joxldwp] c:\windows\msjbcol.exe
    O4 – HKCU\..\Run: [brsloim] c:\windows\msjbcol.exe
    O4 – HKCU\..\Run: [oiyaijy] c:\windows\msjbcol.exe
    O4 – HKCU\..\Run: [ivfmeck] c:\windows\msjbcol.exe
    O4 – HKCU\..\Run: [eatfdjq] c:\windows\msjbcol.exe
    O4 – HKCU\..\Run: [qfpujik] c:\windows\msjbcol.exe
    O4 – HKCU\..\Run: [vamofqf] c:\windows\msjbcol.exe
    O4 – HKCU\..\Run: [nsuvbin] c:\windows\msjbcol.exe
    O4 – HKCU\..\Run: [bdjnfxs] c:\windows\msjbcol.exe
    O4 – HKCU\..\Run: [dlodsue] c:\windows\msjbcol.exe
    O4 – HKCU\..\Run: [bkfiilt] c:\windows\msjbcol.exe
    O4 – HKCU\..\Run: [jdfedif] c:\windows\msjbcol.exe
    O4 – HKCU\..\Run: [fmwipke] c:\windows\msjbcol.exe
    O4 – HKCU\..\Run: [gaensdh] c:\windows\msjbcol.exe
    O4 – HKCU\..\Run: [gxrqvcf] c:\windows\msjbcol.exe
    O4 – HKCU\..\Run: [beeiefg] c:\windows\msjbcol.exe
    O4 – HKCU\..\Run: [tjdvyxv] c:\windows\msjbcol.exe
    O4 – HKCU\..\Run: [bypekuh] c:\windows\msjbcol.exe
    O4 – HKCU\..\Run: [lljjxio] c:\windows\msjbcol.exe
    O4 – HKCU\..\Run: [nwwawbr] c:\windows\msjbcol.exe
    O4 – HKCU\..\Run: [umauiiy] c:\windows\msjbcol.exe
    O4 – HKCU\..\Run: [vqcswfc] c:\windows\msjbcol.exe
    O4 – HKCU\..\Run: [mcywldt] c:\windows\msjbcol.exe
    O4 – HKCU\..\Run: [muivxth] c:\windows\msjbcol.exe
    O4 – HKCU\..\Run: [foamadj] c:\windows\msjbcol.exe
    O4 – HKCU\..\Run: [eglmejo] c:\windows\msjbcol.exe
    O4 – HKCU\..\Run: [aaahfhd] c:\windows\msjbcol.exe
    O4 – HKCU\..\Run: [gsqtwpu] c:\windows\msjbcol.exe
    O4 – HKCU\..\Run: [niofpwy] c:\windows\msjbcol.exe
    O4 – HKCU\..\Run: [qqjlcmv] c:\windows\msjbcol.exe
    O4 – HKCU\..\Run: [iyfrogt] c:\windows\msjbcol.exe
    O4 – HKCU\..\Run: [qjtxdxp] c:\windows\msjbcol.exe
    O4 – HKCU\..\Run: [dtlcwfd] c:\windows\msjbcol.exe
    O4 – HKCU\..\Run: [wvyohtu] c:\windows\msjbcol.exe
    O4 – HKCU\..\Run: [mbvhpoy] c:\windows\msjbcol.exe
    O4 – HKCU\..\Run: [eerdtxy] c:\windows\msjbcol.exe
    O4 – HKCU\..\Run: [ydirtfh] c:\windows\msjbcol.exe
    O4 – HKCU\..\Run: [pygxecn] c:\windows\msjbcol.exe
    O4 – HKCU\..\Run: [ciipbwu] c:\windows\msjbcol.exe
    O4 – HKCU\..\Run: [rsvwrhr] c:\windows\msjbcol.exe
    O4 – HKCU\..\Run: [opfvdhd] c:\windows\msjbcol.exe
    O4 – HKCU\..\Run: [kskbtns] c:\windows\msjbcol.exe
    O4 – HKCU\..\Run: [ioorbjj] c:\windows\msjbcol.exe
    O4 – HKCU\..\Run: [ltvoivg] c:\windows\msjbcol.exe
    O4 – HKCU\..\Run: [ytsbwvi] c:\windows\msjbcol.exe
    O4 – HKCU\..\Run: [rcjvqif] c:\windows\msjbcol.exe
    O4 – HKCU\..\Run: [uyifhmj] c:\windows\msjbcol.exe
    O4 – HKCU\..\Run: [eppusfn] c:\windows\msjbcol.exe
    O4 – HKCU\..\Run: [pmtoyxq] c:\windows\msjbcol.exe
    O4 – HKCU\..\Run: [ugeacig] c:\windows\msjbcol.exe
    O4 – HKCU\..\Run: [pvvvttj] c:\windows\msjbcol.exe
    O4 – HKCU\..\Run: [qywkkrc] c:\windows\msjbcol.exe
    O4 – HKCU\..\Run: [kqqpcxt] c:\windows\msjbcol.exe
    O4 – HKCU\..\Run: [rwlcqua] c:\windows\msjbcol.exe
    O4 – HKCU\..\Run: [dddfxjn] c:\windows\msjbcol.exe
    O4 – HKCU\..\Run: [bruslrq] c:\windows\msjbcol.exe
    O4 – HKCU\..\Run: [moxpsfh] c:\windows\msjbcol.exe
    O4 – HKCU\..\Run: [chwulbd] c:\windows\msjbcol.exe
    O4 – HKCU\..\Run: [bilfkwu] c:\windows\msjbcol.exe
    O4 – HKCU\..\Run: [qfftdqn] c:\windows\msjbcol.exe
    O4 – HKCU\..\Run: [ianhfyo] c:\windows\msjbcol.exe
    O4 – HKCU\..\Run: [hrqaxey] c:\windows\msjbcol.exe
    O4 – HKCU\..\Run: [ibsgcwj] c:\windows\msjbcol.exe
    O4 – HKCU\..\Run: [sodlgmc] c:\windows\msjbcol.exe
    O4 – HKCU\..\Run: [ppfxmpv] c:\windows\msjbcol.exe
    O4 – HKCU\..\Run: [eeqcttf] c:\windows\msjbcol.exe
    O4 – HKCU\..\Run: [asbiytf] c:\windows\msjbcol.exe
    O4 – HKCU\..\Run: [svcqqnc] c:\windows\msjbcol.exe
    O4 – HKCU\..\Run: [atfodww] c:\windows\msjbcol.exe
    O4 – HKCU\..\Run: [bhgdxle] c:\windows\msjbcol.exe
    O4 – HKCU\..\Run: [ihbgfhm] c:\windows\msjbcol.exe
    O4 – HKCU\..\Run: [xwunpai] c:\windows\msjbcol.exe
    O4 – HKCU\..\Run: [ldmbgcj] c:\windows\msjbcol.exe
    O4 – HKCU\..\Run: [troymti] c:\windows\msjbcol.exe
    O4 – HKCU\..\Run: [mwkuwkx] c:\windows\msjbcol.exe
    O4 – HKCU\..\Run: [peltivv] c:\windows\msjbcol.exe
    O4 – HKCU\..\Run: [tnfmndh] c:\windows\msjbcol.exe
    O4 – HKCU\..\Run: [mxwmqts] c:\windows\msjbcol.exe
    O4 – HKCU\..\Run: [soebeuk] c:\windows\msjbcol.exe
    O4 – HKCU\..\Run: [tfbmfjm] c:\windows\msjbcol.exe
    O4 – HKCU\..\Run: [sjfdyyh] c:\windows\msjbcol.exe
    O4 – HKCU\..\Run: [qbfsspk] c:\windows\msjbcol.exe
    O4 – HKCU\..\Run: [dxhiasd] c:\windows\msjbcol.exe
    O4 – HKCU\..\Run: [imbtpwi] c:\windows\msjbcol.exe
    O4 – HKCU\..\Run: [bpksank] c:\windows\msjbcol.exe
    O4 – HKCU\..\Run: [ximgvlv] c:\windows\msjbcol.exe
    O4 – HKCU\..\Run: [sucpgpi] c:\windows\msjbcol.exe
    O4 – HKCU\..\Run: [uaspulc] c:\windows\msjbcol.exe
    O4 – HKCU\..\Run: [ggiskee] c:\windows\msjbcol.exe
    O4 – HKCU\..\Run: [hxhcgyi] c:\windows\msjbcol.exe
    O4 – HKCU\..\Run: [fcnqnrp] c:\windows\msjbcol.exe
    O4 – HKCU\..\Run: [kaldcop] c:\windows\msjbcol.exe
    O4 – HKCU\..\Run: [obimcmh] c:\windows\msjbcol.exe
    O4 – HKCU\..\Run: [rpcbvco] c:\windows\msjbcol.exe
    O4 – HKCU\..\Run: [deubdui] c:\windows\msjbcol.exe
    O4 – HKCU\..\Run: [wslxkug] c:\windows\msjbcol.exe
    O4 – HKCU\..\Run: [xiigfax] c:\windows\msjbcol.exe
    O4 – HKCU\..\Run: [elvalsy] c:\windows\msjbcol.exe
    O4 – HKCU\..\Run: [qvuqabb] c:\windows\msjbcol.exe
    O4 – HKCU\..\Run: [qxwdoni] c:\windows\msjbcol.exe
    O4 – HKCU\..\Run: [aoyoctf] c:\windows\msjbcol.exe
    O4 – HKCU\..\Run: [vlfupkd] c:\windows\msjbcol.exe
    O4 – HKCU\..\Run: [nxlmtmd] c:\windows\msjbcol.exe
    O4 – HKCU\..\Run: [ktpmapo] c:\windows\msjbcol.exe
    O4 – HKCU\..\Run: [waflber] c:\windows\msjbcol.exe
    O4 – HKCU\..\Run: [qffulag] c:\windows\msjbcol.exe
    O4 – HKCU\..\Run: [axbflrw] c:\windows\msjbcol.exe
    O4 – HKCU\..\Run: [jjkuwdo] c:\windows\msjbcol.exe
    O4 – HKCU\..\Run: [inujjnr] c:\windows\msjbcol.exe
    O4 – HKCU\..\Run: [lumusjr] c:\windows\msjbcol.exe
    O4 – HKCU\..\Run: [yracqrh] c:\windows\msjbcol.exe
    O4 – HKCU\..\Run: [anmywwd] c:\windows\msjbcol.exe
    O4 – HKCU\..\Run: [jgmthww] c:\windows\msjbcol.exe
    O4 – HKCU\..\Run: [xgwgudd] c:\windows\msjbcol.exe
    O4 – HKCU\..\Run: [meaigjf] c:\windows\msjbcol.exe
    O4 – HKCU\..\Run: [elvedjx] c:\windows\msjbcol.exe
    O4 – HKCU\..\Run: [oeuvano] c:\windows\msjbcol.exe
    O4 – HKCU\..\Run: [mhuomek] c:\windows\msjbcol.exe
    O4 – HKCU\..\Run: [gdpeojc] c:\windows\msjbcol.exe
    O4 – HKCU\..\Run: [uixbigq] c:\windows\msjbcol.exe
    O4 – HKCU\..\Run: [rvfejuf] c:\windows\msjbcol.exe
    O4 – HKCU\..\Run: [ebsfyon] c:\windows\msjbcol.exe
    O4 – HKCU\..\Run: [ysodesb] c:\windows\msjbcol.exe
    O4 – HKCU\..\Run: [cetxmco] c:\windows\msjbcol.exe
    O4 – HKCU\..\Run: [wfpncvv] c:\windows\msjbcol.exe
    O4 – HKCU\..\Run: [rulauem] c:\windows\msjbcol.exe
    O4 – HKCU\..\Run: [tgidunp] c:\windows\msjbcol.exe
    O4 – HKCU\..\Run: [gkrcwbe] c:\windows\msjbcol.exe
    O4 – HKCU\..\Run: [kevhmdo] c:\windows\msjbcol.exe
    O4 – HKCU\..\Run: [ioucvdl] c:\windows\msjbcol.exe
    O4 – HKCU\..\Run: [wvnsjna] c:\windows\msjbcol.exe
    O4 – HKCU\..\Run: [onnsfrf] c:\windows\msjbcol.exe
    O4 – HKCU\..\Run: [rgenoew] c:\windows\msjbcol.exe
    O4 – HKCU\..\Run: [vtvjfwg] c:\windows\msjbcol.exe
    O4 – HKCU\..\Run: [qehjvar] c:\windows\msjbcol.exe
    O4 – HKCU\..\Run: [fyfjejk] c:\windows\msjbcol.exe
    O4 – HKCU\..\Run: [ejmguif] c:\windows\msjbcol.exe
    O4 – HKCU\..\Run: [jdmmcqv] c:\windows\msjbcol.exe
    O4 – HKCU\..\Run: [jcukjip] c:\windows\msjbcol.exe
    O4 – HKCU\..\Run: [jnfxtix] c:\windows\msjbcol.exe
    O4 – HKCU\..\Run: [kncnglh] c:\windows\msjbcol.exe
    O4 – HKCU\..\Run: [mdtfvdu] c:\windows\msjbcol.exe
    O4 – HKCU\..\Run: [mgqkuqx] c:\windows\msjbcol.exe
    O4 – HKCU\..\Run: [aftyyyo] c:\windows\msjbcol.exe
    O4 – HKCU\..\Run: [tistilp] c:\windows\msjbcol.exe
    O4 – HKCU\..\Run: [brkkwhr] c:\windows\msjbcol.exe
    O4 – HKCU\..\Run: [fbhkdrd] c:\windows\msjbcol.exe
    O4 – HKCU\..\Run: [tyrtuvl] c:\windows\msjbcol.exe
    O4 – HKCU\..\Run: [pxluwfx] c:\windows\msjbcol.exe
    O4 – HKCU\..\Run: [dcelowm] c:\windows\msjbcol.exe
    O4 – HKCU\..\Run: [rbmwahr] c:\windows\msjbcol.exe
    O4 – HKCU\..\Run: [fhjtfhi] c:\windows\msjbcol.exe
    O4 – HKCU\..\Run: [dnqeaan] c:\windows\msjbcol.exe
    O4 – HKCU\..\Run: [ehewijp] c:\windows\uccvyei.exe
    O4 – HKCU\..\Run: [dlnlyjc] c:\windows\qwnwyge.exe
    O4 – HKCU\..\Run: [puwppwt] c:\windows\qwnwyge.exe
    O4 – HKCU\..\Run: [feiveyw] c:\windows\qwnwyge.exe
    O4 – HKCU\..\Run: [tqwtyma] c:\windows\qwnwyge.exe
    O4 – HKCU\..\Run: [bhxvswd] c:\windows\qwnwyge.exe
    O4 – HKCU\..\Run: [apstbai] c:\windows\qwnwyge.exe
    O4 – HKCU\..\Run: [iutjckf] c:\windows\qwnwyge.exe
    O4 – HKCU\..\Run: [brcxhqi] c:\windows\qwnwyge.exe
    O4 – HKCU\..\Run: [yrpniak] c:\windows\qwnwyge.exe
    O4 – HKCU\..\Run: [lgsdxqw] c:\windows\qwnwyge.exe
    O4 – HKCU\..\Run: [oelkuhu] c:\windows\qwnwyge.exe
    O4 – HKCU\..\Run: [oarownw] c:\windows\qwnwyge.exe
    O4 – HKCU\..\Run: [lejggea] c:\windows\qwnwyge.exe
    O4 – HKCU\..\Run: [woilpxj] c:\windows\qwnwyge.exe
    O4 – HKCU\..\Run: [viajivo] c:\windows\qwnwyge.exe
    O4 – HKCU\..\Run: [qsacjaw] c:\windows\qwnwyge.exe
    O4 – HKCU\..\Run: [jwglcik] c:\windows\qwnwyge.exe
    O4 – HKCU\..\Run: [tarnxqk] c:\windows\qwnwyge.exe
    O4 – HKCU\..\Run: [awfndjx] c:\windows\qwnwyge.exe
    O4 – HKCU\..\Run: [eajtlrd] c:\windows\qwnwyge.exe
    O4 – HKCU\..\Run: [dtlntex] c:\windows\qwnwyge.exe
    O4 – HKCU\..\Run: [hjgrpif] c:\windows\qwnwyge.exe
    O4 – HKCU\..\Run: [ccrjwhm] c:\windows\qwnwyge.exe
    O4 – HKCU\..\Run: [wwuegsw] c:\windows\qwnwyge.exe
    O4 – HKCU\..\Run: [vdrmrtl] c:\windows\qwnwyge.exe
    O4 – HKCU\..\Run: [kwmifec] c:\windows\qwnwyge.exe
    O4 – HKCU\..\Run: [iqofayx] c:\windows\qwnwyge.exe
    O4 – HKCU\..\Run: [khnokag] c:\windows\qwnwyge.exe
    O4 – HKCU\..\Run: [ouegxti] c:\windows\qwnwyge.exe
    O4 – HKCU\..\Run: [idkdjxh] c:\windows\qwnwyge.exe
    O4 – HKCU\..\Run: [fqpetnt] c:\windows\atstuup.exe
    O4 – HKCU\..\Run: [biybvkx] c:\windows\atstuup.exe
    O4 – HKCU\..\Run: [cdcnsvj] c:\windows\atstuup.exe
    O4 – HKCU\..\Run: [trdtohp] c:\windows\atstuup.exe
    O4 – HKCU\..\Run: [delpdsc] c:\windows\atstuup.exe
    O4 – HKCU\..\Run: [wwgpvpm] c:\windows\atstuup.exe
    O4 – HKCU\..\Run: [rwntuhw] c:\windows\atstuup.exe
    O4 – HKCU\..\Run: [mjdmvli] c:\windows\atstuup.exe
    O4 – HKCU\..\Run: [mgiduky] c:\windows\atstuup.exe
    O4 – HKCU\..\Run: [mpnxveh] c:\windows\atstuup.exe
    O4 – HKCU\..\Run: [blsbjfy] c:\windows\atstuup.exe
    O4 – HKCU\..\Run: [aeadfck] c:\windows\atstuup.exe
    O4 – HKCU\..\Run: [fwlklsl] c:\windows\atstuup.exe
    O4 – HKCU\..\Run: [wfpqxcm] c:\windows\atstuup.exe
    O4 – HKCU\..\Run: [ndxapbn] c:\windows\atstuup.exe
    O4 – HKCU\..\Run: [egocret] c:\windows\atstuup.exe
    O4 – HKCU\..\Run: [yprftnh] c:\windows\atstuup.exe
    O4 – HKCU\..\Run: [xlbelrx] c:\windows\atstuup.exe
    O4 – HKCU\..\Run: [odyxksm] c:\windows\atstuup.exe
    O4 – HKCU\..\Run: [qtglwnt] c:\windows\atstuup.exe
    O4 – HKCU\..\Run: [cgihich] c:\windows\atstuup.exe
    O4 – HKCU\..\Run: [hyerysm] c:\windows\atstuup.exe
    O4 – HKCU\..\Run: [vhnusnx] c:\windows\atstuup.exe
    O4 – HKCU\..\Run: [tlthinl] c:\windows\atstuup.exe
    O4 – HKCU\..\Run: [mmewmus] c:\windows\atstuup.exe
    O4 – HKCU\..\Run: [fuwlfqp] c:\windows\atstuup.exe
    O4 – HKCU\..\Run: [arspeqt] c:\windows\atstuup.exe
    O4 – HKCU\..\Run: [ojmwauf] c:\windows\atstuup.exe
    O4 – HKCU\..\Run: [ntgtjva] c:\windows\atstuup.exe
    O4 – HKCU\..\Run: [sguwdrq] c:\windows\atstuup.exe
    O4 – HKCU\..\Run: [rjomcxd] c:\windows\atstuup.exe
    O4 – HKCU\..\Run: [ppsrryb] c:\windows\atstuup.exe
    O4 – HKCU\..\Run: [escmwwt] c:\windows\atstuup.exe
    O4 – HKCU\..\Run: [ikxxpei] c:\windows\atstuup.exe
    O4 – HKCU\..\Run: [mbfunmp] c:\windows\atstuup.exe
    O4 – HKCU\..\Run: [dajtmeb] c:\windows\atstuup.exe
    O4 – HKCU\..\Run: [rbflksp] c:\windows\atstuup.exe
    O4 – HKCU\..\Run: [awvbpoh] c:\windows\atstuup.exe
    O4 – HKCU\..\Run: [xtpodnc] c:\windows\atstuup.exe
    O4 – HKCU\..\Run: [ssivcxx] c:\windows\atstuup.exe
    O4 – HKCU\..\Run: [qbmebbj] c:\windows\atstuup.exe
    O4 – HKCU\..\Run: [hpmlavk] c:\windows\atstuup.exe
    O4 – HKCU\..\Run: [fpumcxu] c:\windows\atstuup.exe
    O4 – HKCU\..\Run: [lyrmnsh] c:\windows\atstuup.exe
    O4 – HKCU\..\Run: [altnicp] c:\windows\atstuup.exe
    O4 – HKCU\..\Run: [bjglllf] c:\windows\atstuup.exe
    O4 – HKCU\..\Run: [jkldaxa] c:\windows\atstuup.exe
    O4 – HKCU\..\Run: [svnkftg] c:\windows\atstuup.exe
    O4 – HKCU\..\Run: [vcewgib] c:\windows\atstuup.exe
    O4 – HKCU\..\Run: [lnojosj] c:\windows\atstuup.exe
    O4 – HKCU\..\Run: [dhfcavf] c:\windows\atstuup.exe
    O4 – HKCU\..\Run: [gtcmuot] c:\windows\atstuup.exe
    O4 – HKCU\..\Run: [llmfeda] c:\windows\atstuup.exe
    O4 – HKCU\..\Run: [xwjaoug] c:\windows\atstuup.exe
    O4 – HKCU\..\Run: [tpfjmuv] c:\windows\atstuup.exe
    O4 – HKCU\..\Run: [xiideta] c:\windows\atstuup.exe
    O4 – HKCU\..\Run: [dnskumv] c:\windows\atstuup.exe
    O4 – HKCU\..\Run: [dbnplgc] c:\windows\atstuup.exe
    O4 – HKCU\..\Run: [dkkheip] c:\windows\atstuup.exe
    O4 – HKCU\..\Run: [vyiiisa] c:\windows\atstuup.exe
    O4 – HKCU\..\Run: [hknldrj] c:\windows\atstuup.exe
    O4 – HKCU\..\Run: [vjeftqq] c:\windows\atstuup.exe
    O4 – HKCU\..\Run: [peexadu] c:\windows\atstuup.exe
    O4 – HKCU\..\Run: [gqsvkgx] c:\windows\atstuup.exe
    O4 – HKCU\..\Run: [gynlgxh] c:\windows\atstuup.exe
    O4 – HKCU\..\Run: [wohsqkp] c:\windows\atstuup.exe
    O4 – HKCU\..\Run: [arpcbrw] c:\windows\atstuup.exe
    O4 – HKCU\..\Run: [inennfl] c:\windows\atstuup.exe
    O4 – HKCU\..\Run: [gqvangr] c:\windows\atstuup.exe
    O4 – HKCU\..\Run: [ekbetjx] c:\windows\atstuup.exe
    O4 – HKCU\..\Run: [ljbrobx] c:\windows\atstuup.exe
    O4 – HKCU\..\Run: [hprkujk] c:\windows\atstuup.exe
    O4 – HKCU\..\Run: [iyqjgul] c:\windows\atstuup.exe
    O4 – HKCU\..\Run: [kjiudoh] c:\windows\atstuup.exe
    O4 – HKCU\..\Run: [ljjvtkx] c:\windows\atstuup.exe
    O4 – HKCU\..\Run: [gniwfxd] c:\windows\atstuup.exe
    O4 – HKCU\..\Run: [jkhnvbo] c:\windows\atstuup.exe
    O4 – HKCU\..\Run: [iiamevs] c:\windows\atstuup.exe
    O4 – HKCU\..\Run: [qwpawwj] c:\windows\atstuup.exe
    O4 – HKCU\..\Run: [fchvpit] c:\windows\atstuup.exe
    O4 – HKCU\..\Run: [waanpyv] c:\windows\atstuup.exe
    O4 – HKCU\..\Run: [lioopot] c:\windows\atstuup.exe
    O4 – HKCU\..\Run: [ydjgcfp] c:\windows\atstuup.exe
    O4 – HKCU\..\Run: [xepcpvx] c:\windows\atstuup.exe
    O4 – HKCU\..\Run: [dyhmrbc] c:\windows\atstuup.exe
    O4 – HKCU\..\Run: [aelkljd] c:\windows\atstuup.exe
    O4 – HKCU\..\Run: [kvbkigh] c:\windows\atstuup.exe
    O4 – HKCU\..\Run: [wgmfngx] c:\windows\atstuup.exe
    O4 – HKCU\..\Run: [wngyfxq] c:\windows\atstuup.exe
    O4 – HKCU\..\Run: [ydngutx] c:\windows\atstuup.exe
    O4 – HKCU\..\Run: [bcqhkyu] c:\windows\atstuup.exe
    O4 – HKCU\..\Run: [hbuahsm] c:\windows\atstuup.exe
    O4 – HKCU\..\Run: [kmecvxu] c:\windows\atstuup.exe
    O4 – HKCU\..\Run: [xqkrauj] c:\windows\atstuup.exe
    O4 – HKCU\..\Run: [wwuuvwu] c:\windows\atstuup.exe
    O4 – HKCU\..\Run: [vjkpngt] c:\windows\atstuup.exe
    O4 – HKCU\..\Run: [oytrexj] c:\windows\atstuup.exe
    O4 – HKCU\..\Run: [cberivx] c:\windows\atstuup.exe
    O4 – HKCU\..\Run: [avnhuum] c:\windows\atstuup.exe
    O4 – HKCU\..\Run: [wssohlf] c:\windows\atstuup.exe
    O4 – HKCU\..\Run: [lcxmfyw] c:\windows\atstuup.exe
    O4 – HKCU\..\Run: [bektcha] c:\windows\atstuup.exe
    O4 – HKCU\..\Run: [ebmnbre] c:\windows\atstuup.exe
    O4 – HKCU\..\Run: [ebcgcit] c:\windows\atstuup.exe
    O4 – HKCU\..\Run: [qqtkqyf] c:\windows\atstuup.exe
    O4 – HKCU\..\Run: [adahoce] c:\windows\atstuup.exe
    O4 – HKCU\..\Run: [cloyxco] c:\windows\atstuup.exe
    O4 – HKCU\..\Run: [wfftwth] c:\windows\atstuup.exe
    O4 – HKCU\..\Run: [wvkpshx] c:\windows\atstuup.exe
    O4 – HKCU\..\Run: [kwkowot] c:\windows\atstuup.exe
    O4 – HKCU\..\Run: [evcbfxm] c:\windows\atstuup.exe
    O4 – HKCU\..\Run: [qypkalf] c:\windows\atstuup.exe
    O4 – HKCU\..\Run: [gxetcqt] c:\windows\atstuup.exe
    O4 – HKCU\..\Run: [dbbcydi] c:\windows\atstuup.exe
    O4 – HKCU\..\Run: [lkogdga] c:\windows\atstuup.exe
    O4 – HKCU\..\Run: [fnbryjq] c:\windows\atstuup.exe
    O4 – HKCU\..\Run: [tvffrob] c:\windows\atstuup.exe
    O4 – HKCU\..\Run: [foxqltu] c:\windows\atstuup.exe
    O4 – HKCU\..\Run: [rhuifwa] c:\windows\atstuup.exe
    O4 – HKCU\..\Run: [proypwb] c:\windows\ekcypuo.exe
    O4 – HKCU\..\Run: [qkqcqmn] c:\windows\ekcypuo.exe
    O4 – HKCU\..\Run: [ttrtmjt] c:\windows\ekcypuo.exe
    O4 – HKCU\..\Run: [ehxnujd] c:\windows\ekcypuo.exe
    O4 – HKCU\..\Run: [ixdnmam] c:\windows\ekcypuo.exe
    O4 – HKCU\..\Run: [epyedal] c:\windows\ekcypuo.exe
    O4 – HKCU\..\Run: [vbnrvts] c:\windows\ekcypuo.exe
    O4 – HKCU\..\Run: [pkokard] c:\windows\ekcypuo.exe
    O4 – HKCU\..\Run: [owmtysw] c:\windows\ekcypuo.exe
    O4 – HKCU\..\Run: [eincsrx] c:\windows\ekcypuo.exe
    O4 – HKCU\..\Run: [tckfqcw] c:\windows\ekcypuo.exe
    O4 – HKCU\..\Run: [rbkevwl] c:\windows\ekcypuo.exe
    O4 – HKCU\..\Run: [ksmcltt] c:\windows\ekcypuo.exe
    O4 – HKCU\..\Run: [vcoyyik] c:\windows\ekcypuo.exe
    O4 – HKCU\..\Run: [eieiwqy] c:\windows\ekcypuo.exe
    O4 – HKCU\..\Run: [kkntnye] c:\windows\ekcypuo.exe
    O4 – HKCU\..\Run: [jydncgn] c:\windows\ekcypuo.exe
    O4 – HKCU\..\Run: [cpncmbh] c:\windows\upecvdm.exe
    O4 – HKCU\..\Run: [gdhqcic] c:\windows\lkwsmpu.exe
    O4 – HKCU\..\Run: [oqxkget] c:\windows\lkwsmpu.exe
    O4 – HKCU\..\Run: [xyamgit] c:\windows\lkwsmpu.exe
    O4 – HKCU\..\Run: [qutcrmm] c:\windows\lkwsmpu.exe
    O4 – HKCU\..\Run: [rbodsti] c:\windows\lkwsmpu.exe
    O4 – HKCU\..\Run: [xgncogi] c:\windows\lkwsmpu.exe
    O4 – HKCU\..\Run: [sqvhaij] c:\windows\lkwsmpu.exe
    O4 – HKCU\..\Run: [bcrqotx] c:\windows\lkwsmpu.exe
    O4 – HKCU\..\Run: [fankfht] c:\windows\lkwsmpu.exe
    O4 – HKCU\..\Run: [boihysk] c:\windows\lkwsmpu.exe
    O4 – HKCU\..\Run: [dmacmhr] c:\windows\lkwsmpu.exe
    O4 – HKCU\..\Run: [egojeqb] c:\windows\lkwsmpu.exe
    O4 – HKCU\..\Run: [ovitiha] c:\windows\utjmblv.exe
    O4 – HKCU\..\Run: [rejuyxp] c:\windows\utjmblv.exe
    O4 – HKCU\..\Run: [ysxcqee] c:\windows\utjmblv.exe
    O4 – HKCU\..\Run: [exeestx] c:\windows\lqkfxiy.exe
    O4 – HKCU\..\Run: [jodrwlm] c:\windows\lqkfxiy.exe
    O4 – HKCU\..\Run: [awdgxyp] c:\windows\poaytgh.exe
    O4 – HKCU\..\Run: [bhvkope] c:\windows\fdrruwd.exe
    O4 – HKCU\..\Run: [tpiryic] c:\windows\ulxpfpd.exe
    O4 – HKCU\..\Run: [hjihjoc] c:\windows\fdrruwd.exe
    O4 – HKCU\..\Run: [udxjapq] c:\windows\fdrruwd.exe
    O4 – HKCU\..\Run: [eoyulvu] c:\windows\fdrruwd.exe
    O4 – HKCU\..\Run: [awaewme] c:\windows\fdrruwd.exe
    O4 – HKCU\..\Run: [ncwlfcf] c:\windows\fdrruwd.exe
    O4 – HKCU\..\Run: [ipkavnn] c:\windows\fdrruwd.exe
    O4 – HKCU\..\Run: [aigidvv] c:\windows\fdrruwd.exe
    O4 – HKCU\..\Run: [bbjruue] c:\windows\fdrruwd.exe
    O4 – HKCU\..\Run: [mlmlpqw] c:\windows\fdrruwd.exe
    O4 – HKCU\..\Run: [aidmpda] c:\windows\fdrruwd.exe
    O4 – HKCU\..\Run: [cufmhtu] c:\windows\fdrruwd.exe
    O4 – HKCU\..\Run: [htlsumk] c:\windows\fdrruwd.exe
    O4 – HKCU\..\RunOnce: [Srv32 spool service] C:\WINDOWS\System32\spoolsrv32.exe
    O4 – Global Startup: America Online 9.0 Tray Icon.lnk = C:\Program Files\America Online 9.0\aoltray.exe
    O4 – Global Startup: Microsoft Office.lnk = C:\Program Files\Microsoft Office\Office\OSA9.EXE
    O4 – Global Startup: winlogin.exe
    O8 – Extra context menu item: &AOL Toolbar search – res://C:\Program Files\AOL Toolbar\toolbar.dll/SEARCH.HTML
    O8 – Extra context menu item: &Google Search – res://C:\Program Files\Google\GoogleToolbar2.dll/cmsearch.html
    O8 – Extra context menu item: Backward &Links – res://C:\Program Files\Google\GoogleToolbar2.dll/cmbacklinks.html
    O8 – Extra context menu item: Cac&hed Snapshot of Page – res://C:\Program Files\Google\GoogleToolbar2.dll/cmcache.html
    O8 – Extra context menu item: Si&milar Pages – res://C:\Program Files\Google\GoogleToolbar2.dll/cmsimilar.html
    O8 – Extra context menu item: Translate into English – res://C:\Program Files\Google\GoogleToolbar2.dll/cmtrans.html
    O9 – Extra 'Tools' menuitem: Sun Java Console (HKLM)
    O9 – Extra button: Messenger (HKLM)
    O9 – Extra 'Tools' menuitem: Yahoo! Messenger (HKLM)
    O9 – Extra button: AOL Toolbar (HKLM)
    O9 – Extra 'Tools' menuitem: AOL Toolbar (HKLM)
    O9 – Extra button: Microsoft AntiSpyware helper (HKLM)
    O9 – Extra 'Tools' menuitem: Microsoft AntiSpyware helper (HKLM)
    O9 – Extra button: Real.com (HKLM)
    O9 – Extra button: Messenger (HKLM)
    O9 – Extra 'Tools' menuitem: Windows Messenger (HKLM)
    O9 – Extra button: Microsoft AntiSpyware helper (HKCU)
    O9 – Extra 'Tools' menuitem: Microsoft AntiSpyware helper (HKCU)
    O10 – Unknown file in Winsock LSP: c:\windows\system32\flsmngr.dll
    O10 – Unknown file in Winsock LSP: c:\windows\system32\flsmngr.dll
    O10 – Unknown file in Winsock LSP: c:\windows\system32\flsmngr.dll
    O16 – DPF: {1D6711C8-7154-40BB-8380-3DEA45B69CBF} (Web P2P Installer) –
    O16 – DPF: {4A3CF76B-EC7A-405D-A67D-8DC6B52AB35B} (QDiagAOLCCUpdateObj Class) – http://aolcc.aol.com/computercheckup/qdiagcc.cab

    /End of Log/

  • Google Hacking Part 1

    I love Google.  It is changing the entire Internet for
    the better.  The only problem is that their search engine is TOO
    effective. 

    If  webmasters, security professionals and even home computer
    users aren't careful in securing their websites they could end up
    posting more information than they bargained for. 

    Here is an examples [ copy and paste the code in your browser ]:

    http://www.google.ca/search?q=inurl:password+intitle:index-of&num=100&hl=en&lr=&output=search
    Results 1 – 100 of about 4,030 for inurl:password intitle:index-of

    If you look through the websites you will actually see usernames and passwords.

    There are many groups on the Internet that find web site vulerabilites as a
    hobby. 
    They are called Google Dorks:
    www.ihackgoogle.com
    http://jn0x00.com
    http://linuxweblog.com/node/147

    With google hacking ALL roads lead to Johnny Long – iHackgoogle.com

    Google Hacking Documents:
    Hacking Primer
    Google Honey Pot
    Google Hacking

    Another cool  site I  found among Mr. Longs  Links:
    Google Cooking
    http://www.researchbuzz.org/cookin_with_google.shtml

  • Office of Homeland Security on the REAL threat… Copyright infringement

    I was on Bruce Shnieder's blog and read something that really disturbed
    me.  The Department of Homeland Security going after people
    pirating copies of Star Wars Episode III.  I'm sure that Mr. Lucas
    is happy about this, but what about the sleeper agents ready to
    detonate a dirty bomb in the middle of Time Square.

    When I first heard that there would be a department of HomeLand
    Security I was pretty excited about it.  I even wanted to work for
    them.  Hearing stories like this have changed my mind. 

    It seems phenomenally stupid that they would be tasked to hunt down pirates.  But when you think about it the DHS actually consumed over 10 other massive agencies
    that still have duties to preform.  Perhaps during the initial
    design of the DHS more focus should have been put on agressively
    hunting down terrorists and keeping out people entering the country
    illegally.  It threat level Yellow, Elevated which is a
    “Signifigant Risk of Terroist Attack” copyright infringement should be
    the least of our conscerns.