Jump to content


 


Register a free account to unlock additional features at BleepingComputer.com
Welcome to BleepingComputer, a free community where people like yourself come together to discuss and learn how to use their computers. Using the site is easy and fun. As a guest, you can browse and view the various discussions in the forums, but can not create a new topic or reply to an existing one unless you are logged in. Other benefits of registering an account are subscribing to topics and forums, creating a blog, and having no ads shown anywhere on the site.


Click here to Register a free account now! or read our Welcome Guide to learn how to use this site.

Photo

Help me please!


  • Please log in to reply
1 reply to this topic

#1 drew1014

drew1014

  • Members
  • 1 posts
  • OFFLINE
  •  
  • Local time:05:20 AM

Posted 08 March 2009 - 04:57 PM

Possible virus, definitely a mess.

Continuous balloons warning that "Your computer is infected!"

No access to Task Manager

Wallpaper has been taken over by virus warning messages.

I looked around and it appeared that running HijackThis was a place to start.

I'll paste the log file below. Please let me know what I need to do.

Thanks

Logfile of Trend Micro HijackThis v2.0.2
Scan saved at 4:37:12 PM, on 4/5/2009
Platform: Windows XP SP2 (WinNT 5.01.2600)
MSIE: Internet Explorer v7.00 (7.00.6000.16674)
Boot mode: Normal

Running processes:
C:\WINDOWS\System32\smss.exe
C:\WINDOWS\system32\winlogon.exe
C:\WINDOWS\system32\services.exe
C:\WINDOWS\system32\lsass.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\System32\svchost.exe
C:\Program Files\Lavasoft\Ad-Aware\aawservice.exe
C:\WINDOWS\system32\spoolsv.exe
C:\Program Files\Java\jre6\bin\jqs.exe
C:\WINDOWS\System32\svchost.exe
C:\Program Files\Common Files\Symantec Shared\CCPD-LC\symlcsvc.exe
C:\WINDOWS\AhnRpta.exe
C:\WINDOWS\System32\spool\DRIVERS\W32X86\3\E_S0EIC1.EXE
C:\WINDOWS\System32\spool\DRIVERS\W32X86\3\E_S4I2P1.EXE
C:\Program Files\Adobe\Photoshop Album Starter Edition\3.0\Apps\apdproxy.exe
C:\Program Files\QuickTime\qttask.exe
C:\Program Files\D-Link\Wireless G WUA-1340\AirGCFG.exe
C:\Program Files\ANI\ANIWZCS2 Service\WZCSLDR2.exe
C:\Program Files\Java\jre6\bin\jusched.exe
C:\WINDOWS\system32\rundll32.exe
C:\WINDOWS\system32\rundll32.exe
C:\DOCUME~1\default\LOCALS~1\Temp\winlognn.exe
C:\WINDOWS\system32\frmwrk32.exe
C:\PROGRA~1\MESSEN~1\msmsgs.exe
C:\WINDOWS\system32\ctfmon.exe
C:\Documents and Settings\default\Application Data\Google\Update\GoogleUpdate.exe
C:\Program Files\DNA\btdna.exe
C:\Program Files\Common Files\Microsoft Shared\Works Shared\wkcalrem.exe
C:\WINDOWS\System32\svchost.exe
C:\Program Files\Internet Explorer\IEXPLORE.EXE
C:\DOCUME~1\default\LOCALS~1\Temp\jc62xtgw5hc.exe
C:\Program Files\Spybot - Search & Destroy\SpybotSD.exe
C:\Program Files\Uniblue\RegistryBooster\RegistryBooster.exe
C:\WINDOWS\explorer.exe
C:\Documents and Settings\default\Application Data\Google\Chrome\Application\chrome.exe
C:\Documents and Settings\default\Application Data\Google\Chrome\Application\chrome.exe
C:\Documents and Settings\default\Application Data\Google\Chrome\Application\chrome.exe
C:\Documents and Settings\default\Application Data\Google\Chrome\Application\chrome.exe
C:\Program Files\Trend Micro\HijackThis\HijackThis.exe

R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = http://go.microsoft.com/fwlink/?LinkId=69157
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = http://go.microsoft.com/fwlink/?LinkId=54896
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Search Page = http://go.microsoft.com/fwlink/?LinkId=54896
R0 - HKLM\Software\Microsoft\Internet Explorer\Search,SearchAssistant = http://mini.google-find-it.com/
R1 - HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings,ProxyOverride = 127.0.0.1
O2 - BHO: (no name) - {2BED959F-006B-4FA0-B9FE-2CD1E5859812} - C:\WINDOWS\system32\FM20EN.dll
O2 - BHO: C:\WINDOWS\system32\hhs3ijndfd.dll - {C5BF49A2-94F3-42BD-F434-3604812C8955} - C:\WINDOWS\system32\hhs3ijndfd.dll
O3 - Toolbar: (no name) - {BFB5F154-9212-46F3-B547-AC6106030A54} - (no file)
O4 - HKLM\..\Run: [EPSON Stylus Photo 820 Series] C:\WINDOWS\System32\spool\DRIVERS\W32X86\3\E_S0EIC1.EXE /P29 "EPSON Stylus Photo 820 Series" /O5 "LPT1:" /M "Stylus Photo 820"
O4 - HKLM\..\Run: [EPSON PictureMate] C:\WINDOWS\System32\spool\DRIVERS\W32X86\3\E_S4I2P1.EXE /P17 "EPSON PictureMate" /O6 "USB001" /M "PictureMate"
O4 - HKLM\..\Run: [Adobe Photo Downloader] "C:\Program Files\Adobe\Photoshop Album Starter Edition\3.0\Apps\apdproxy.exe"
O4 - HKLM\..\Run: [QuickTime Task] "C:\Program Files\QuickTime\qttask.exe" -atboottime
O4 - HKLM\..\Run: [Microsoft Works Update Detection] C:\Program Files\Microsoft Works\WkDetect.exe
O4 - HKLM\..\Run: [Microsoft Works Portfolio] C:\Program Files\Microsoft Works\WksSb.exe /AllUsers
O4 - HKLM\..\Run: [D-Link Wireless G WUA-1340] C:\Program Files\D-Link\Wireless G WUA-1340\AirGCFG.exe
O4 - HKLM\..\Run: [ANIWZCS2Service] C:\Program Files\ANI\ANIWZCS2 Service\WZCSLDR2.exe
O4 - HKLM\..\Run: [SunJavaUpdateSched] "C:\Program Files\Java\jre6\bin\jusched.exe"
O4 - HKLM\..\Run: [07d00aa2] rundll32.exe "C:\WINDOWS\system32\brjqcwsc.dll",b
O4 - HKLM\..\Run: [Ijageriwes] rundll32.exe "C:\WINDOWS\Ejunufe.dll",e
O4 - HKLM\..\Run: [jsf8uiw3jnjgffght] C:\DOCUME~1\default\LOCALS~1\Temp\winlognn.exe
O4 - HKLM\..\Run: [Framework Windows] frmwrk32.exe
O4 - HKLM\..\Run: [Jrabowayecox] rundll32.exe "C:\WINDOWS\osikapawogepukog.dll",e
O4 - HKCU\..\Run: [MSMSGS] "C:\PROGRA~1\MESSEN~1\msmsgs.exe" /background
O4 - HKCU\..\Run: [ctfmon.exe] C:\WINDOWS\system32\ctfmon.exe
O4 - HKCU\..\Run: [ieupdate] "C:\WINDOWS\system32\ieupdates.exe"
O4 - HKCU\..\Run: [kava] C:\WINDOWS\system32\kavo.exe
O4 - HKCU\..\Run: [kamsoft] C:\WINDOWS\system32\kamsoft.exe
O4 - HKCU\..\Run: [Google Update] "C:\Documents and Settings\default\Application Data\Google\Update\GoogleUpdate.exe" /c
O4 - HKCU\..\Run: [vamsoft] C:\WINDOWS\system32\vamsoft.exe
O4 - HKCU\..\Run: [ertyuop] C:\WINDOWS\system32\rttrwq.exe
O4 - HKCU\..\Run: [cdoosoft] C:\WINDOWS\system32\olhrwef.exe
O4 - HKCU\..\Run: [BitTorrent DNA] "C:\Program Files\DNA\btdna.exe"
O4 - HKCU\..\Run: [jsf8uiw3jnjgffght] C:\DOCUME~1\default\LOCALS~1\Temp\winlognn.exe
O4 - HKCU\..\Run: [qoz3ndvvjl] C:\DOCUME~1\default\LOCALS~1\Temp\sf3mqmv.exe
O4 - HKCU\..\Run: [rw2d2expzs3qnymp3g38srkarcwt3lybwg8] C:\DOCUME~1\default\LOCALS~1\Temp\fgzdzmvq2s.exe
O4 - HKCU\..\Run: [u1qxm69sshir] C:\DOCUME~1\default\LOCALS~1\Temp\jewceu8.exe
O4 - HKCU\..\Run: [o0i8mgoruynzdw2r0dardik0p8jazurhqkpqen] C:\DOCUME~1\default\LOCALS~1\Temp\fse0t0dvbpbd0.exe
O4 - HKCU\..\Run: [diceor94ljjd51fwc43zq2wsdi3no8x3mr] C:\DOCUME~1\default\LOCALS~1\Temp\cdixu7936xk.exe
O4 - HKCU\..\Run: [t6juwnztz1mq2aoyvxc553y051dx3cgui] C:\DOCUME~1\default\LOCALS~1\Temp\ikz4f51hli.exe
O4 - HKCU\..\Run: [lo7z0t6tpwv5wa7c34j5oxbftqcw9xzgv] C:\DOCUME~1\default\LOCALS~1\Temp\l5khoxb.exe
O4 - HKCU\..\Run: [n6ixpb5otrlttzwvp6] C:\DOCUME~1\default\LOCALS~1\Temp\h9g19tcq6w.exe
O4 - HKCU\..\Run: [vzg86ijkcybbzusow6u3j1wkco5yiap5zqc] C:\DOCUME~1\default\LOCALS~1\Temp\vi5o4awzv7.exe
O4 - HKCU\..\Run: [c2abc5ofo8spnr6d7ikrlaudy4] C:\DOCUME~1\default\LOCALS~1\Temp\nce5qwdc8x.exe
O4 - HKCU\..\Run: [ivdi5m21fmav0ilviwxe84cdxuo5npvha8r6kc0vgc8] C:\DOCUME~1\default\LOCALS~1\Temp\w5q3trpdosw.exe
O4 - HKCU\..\Run: [iivdat90rdh] C:\DOCUME~1\default\LOCALS~1\Temp\gkfbzvjc67l.exe
O4 - HKCU\..\Run: [cz2kxxa4c4ybqey6mofv2fy354b1lna0elx6a9bseaj7c4ey] C:\DOCUME~1\default\LOCALS~1\Temp\fmqesp91a45.exe
O4 - HKCU\..\Run: [cykmx3bgzl9z7dxmsc7tc5jje2m4y3tcusybq97uevthg] C:\DOCUME~1\default\LOCALS~1\Temp\ws2witnce.exe
O4 - HKCU\..\Run: [b8dmbpi7gz5cdw56ozann77wsnfusul3xm5f3ssd] C:\DOCUME~1\default\LOCALS~1\Temp\yi6cgcd9rx.exe
O4 - HKCU\..\Run: [ojc1sq6lfv5pu] C:\DOCUME~1\default\LOCALS~1\Temp\hcz8zxjwcp.exe
O4 - HKCU\..\Run: [g394hiyjx0n1vqnlnbsuwc5gau3m] C:\DOCUME~1\default\LOCALS~1\Temp\rxiljw.exe
O4 - HKCU\..\Run: [o05capwkdbxkroglo003znu2981og05x85o0m] C:\DOCUME~1\default\LOCALS~1\Temp\golnfsn5j.exe
O4 - HKCU\..\Run: [wfd3eat2k7s] C:\DOCUME~1\default\LOCALS~1\Temp\mh79lp7.exe
O4 - HKCU\..\Run: [lwae645c3977dmry] C:\DOCUME~1\default\LOCALS~1\Temp\m6aojnq3nqw.exe
O4 - HKCU\..\Run: [b1po7hyeidchcg7y3ensanqfimy7ca9u] C:\DOCUME~1\default\LOCALS~1\Temp\hbzlhqo.exe
O4 - HKCU\..\Run: [f1yt79n6pjmwl5cyv5yl01cjx21pwiqp6z3e] C:\DOCUME~1\default\LOCALS~1\Temp\zu50atmlj68kg.exe
O4 - HKCU\..\Run: [nr7d08q7yttq4lnt0rs8au7rp7hxfciiavta8pbrsrjzcr4z40] C:\DOCUME~1\default\LOCALS~1\Temp\sowb4s.exe
O4 - HKCU\..\Run: [homizykfj20ec8dzvii3d28] C:\DOCUME~1\default\LOCALS~1\Temp\b1voedtdqlra.exe
O4 - HKCU\..\Run: [npxqjrd43s7e3bz3uprd5v6i85w] C:\DOCUME~1\default\LOCALS~1\Temp\taaoridy.exe
O4 - HKCU\..\Run: [uz7hck5njtbajo4yohw36ta1pozpvzrhjqb3ein] C:\DOCUME~1\default\LOCALS~1\Temp\y8wu29ujyr.exe
O4 - HKCU\..\Run: [u1h0u4wr154il] C:\DOCUME~1\default\LOCALS~1\Temp\axpx54z8v4jj.exe
O4 - HKCU\..\Run: [o87vo5lt8ju] C:\DOCUME~1\default\LOCALS~1\Temp\exl8qbnsk.exe
O4 - HKCU\..\Run: [xnhxnds4tni5gyj04t] C:\DOCUME~1\default\LOCALS~1\Temp\mxdguphbo71l.exe
O4 - HKCU\..\Run: [oumryaz0vbh] C:\DOCUME~1\default\LOCALS~1\Temp\on9ra44cmw.exe
O4 - HKCU\..\Run: [m6r07lp1vfxgo6igc25] C:\DOCUME~1\default\LOCALS~1\Temp\zixzxm.exe
O4 - HKCU\..\Run: [ldczaadahze1k9jr4hmbzpadh] C:\DOCUME~1\default\LOCALS~1\Temp\nz6zgfqa7t.exe
O4 - HKCU\..\Run: [tl5i0uvlu1x0yh1ul1chrxzbb48wvwpyajbvc8t] C:\DOCUME~1\default\LOCALS~1\Temp\fz889q.exe
O4 - HKCU\..\Run: [i08uzbvu6] C:\DOCUME~1\default\LOCALS~1\Temp\my4a2jucw3.exe
O4 - HKCU\..\Run: [q2cvl2mpct] C:\DOCUME~1\default\LOCALS~1\Temp\qfyougz5t.exe
O4 - HKCU\..\Run: [ouzxasdp9gw6n3wtg1o1n7ejg5pzsklfu5vbhbwz2p1r473y] C:\DOCUME~1\default\LOCALS~1\Temp\cnu00pn700i.exe
O4 - HKCU\..\Run: [hg81wtgo7mogm6vi5xxv4i29faaiurla45gxko] C:\DOCUME~1\default\LOCALS~1\Temp\vymmgoufv4cl.exe
O4 - HKCU\..\Run: [flyppnkzrq7682aq4336ui8ikbxx] C:\DOCUME~1\default\LOCALS~1\Temp\qe8a1643ew.exe
O4 - HKCU\..\Run: [avjja68fb7g2a4tds5sgiikivlirvnhr4lo] C:\DOCUME~1\default\LOCALS~1\Temp\lbrt85e.exe
O4 - HKCU\..\Run: [o8eu3ad6jacrk5d42eu4c76ef7eu] C:\DOCUME~1\default\LOCALS~1\Temp\gelj6qcm92.exe
O4 - HKCU\..\Run: [e0lkhyjqmq7adyll6yzxjciumkwzwgzybo27s7r2] C:\DOCUME~1\default\LOCALS~1\Temp\m5zbi2svn5kw.exe
O4 - HKCU\..\Run: [n1z2o32svz7txdwn9n5vqam9gi2gprmbjgblt1xam80] C:\DOCUME~1\default\LOCALS~1\Temp\yqf21r70tbt.exe
O4 - HKCU\..\Run: [pfwl9sdksm4zt7v] C:\DOCUME~1\default\LOCALS~1\Temp\w6562t3xr.exe
O4 - HKCU\..\Run: [nql35e354hoaruolma2pr2l1eg7sn9] C:\DOCUME~1\default\LOCALS~1\Temp\vip7nbj.exe
O4 - HKCU\..\Run: [vre0aqhc9b6bmelim8y1cw6akujdxp] C:\DOCUME~1\default\LOCALS~1\Temp\h6bi77x.exe
O4 - HKCU\..\Run: [wp0pjzqsgwdl3fld5d02cpanh0k80767adbh3klsiy] C:\DOCUME~1\default\LOCALS~1\Temp\giejspdmxdfo2.exe
O4 - HKCU\..\Run: [p9j2eheh8oiobgr9dklc8lc96huij4enqnke6rtn14] C:\DOCUME~1\default\LOCALS~1\Temp\r7hw8f89aqxj.exe
O4 - HKCU\..\Run: [sin0sz5rnm4pyushsw9rkvij] C:\DOCUME~1\default\LOCALS~1\Temp\kphvil78.exe
O4 - HKCU\..\Run: [clv9fvxz7kkig61ur7y0j25r9hkh5dy6eyc3ar6ier0kw0w8] C:\DOCUME~1\default\LOCALS~1\Temp\id4x723l0g1z.exe
O4 - HKCU\..\Run: [qzm43ih66svmzpomrvjy9of8dxl53d7ca86n9uu] C:\DOCUME~1\default\LOCALS~1\Temp\v306m92by0snn.exe
O4 - HKCU\..\Run: [r8trcbe9xun6gt3qelhgcjbprv1gij18w8] C:\DOCUME~1\default\LOCALS~1\Temp\iinhxj8zjzo.exe
O4 - HKCU\..\Run: [l9x78jvd1j3vzlamz0ie6ope1gtwdzqn79wi] C:\DOCUME~1\default\LOCALS~1\Temp\zo3y37rjj.exe
O4 - HKCU\..\Run: [ni244erpfo6ax9tir2ixebgl8hx5t6syoo760li50uiqzwccjt] C:\DOCUME~1\default\LOCALS~1\Temp\kjxd0q7t6cuyr.exe
O4 - HKCU\..\Run: [k6yal6xy9pco1wdr483b31s0xrgpfsptvngle91bcz5] C:\DOCUME~1\default\LOCALS~1\Temp\bpdu25vmlj0.exe
O4 - HKCU\..\Run: [hd4gyfmhifapy78aeo8j7zm5w94zaw18qvwvvf1b6rosv] C:\DOCUME~1\default\LOCALS~1\Temp\vsxltqjagfk.exe
O4 - HKCU\..\Run: [i775uktpfskelidfwa] C:\DOCUME~1\default\LOCALS~1\Temp\gna0mjl.exe
O4 - HKCU\..\Run: [wyva5r5me8f3] C:\DOCUME~1\default\LOCALS~1\Temp\i7kw4hpyk.exe
O4 - HKCU\..\Run: [amz3t84lufn1d] C:\DOCUME~1\default\LOCALS~1\Temp\pmmzel.exe
O4 - HKCU\..\Run: [alpu7wdh0v] C:\DOCUME~1\default\LOCALS~1\Temp\dsoy9ka.exe
O4 - HKCU\..\Run: [w46s5fxoxm03qge9rp5iyxvznndzpfaw4np5iwxwmzev70] C:\DOCUME~1\default\LOCALS~1\Temp\zsjp6q.exe
O4 - HKCU\..\Run: [sdebubfey7e34demf1jj9s] C:\DOCUME~1\default\LOCALS~1\Temp\ytn8utt.exe
O4 - HKCU\..\Run: [eg86alem3kfkmfot3pbufkdgpjzvluf9luxtaov23] C:\DOCUME~1\default\LOCALS~1\Temp\g5w7ql95y4q.exe
O4 - HKCU\..\Run: [ht40iva1git6797fg34pder2j9] C:\DOCUME~1\default\LOCALS~1\Temp\mmaey9wkr5.exe
O4 - HKCU\..\Run: [szpsovo7y4y] C:\DOCUME~1\default\LOCALS~1\Temp\kqgz70y.exe
O4 - HKCU\..\Run: [d33f4f8xno7wqx52ixcwn5p36uwj4vy3exi] C:\DOCUME~1\default\LOCALS~1\Temp\abtow9s6y.exe
O4 - HKCU\..\Run: [s3hdusmar7l6isu] C:\DOCUME~1\default\LOCALS~1\Temp\f9qug4iwv5jpa.exe
O4 - HKCU\..\Run: [yj81mz4y0icl9yu] C:\DOCUME~1\default\LOCALS~1\Temp\fdhtiq.exe
O4 - HKCU\..\Run: [bmgpzt7aeqbp34aiutq1sm] C:\DOCUME~1\default\LOCALS~1\Temp\tfxyejv9rwavz.exe
O4 - HKCU\..\Run: [drmfyghpuurp2gvus8gpp5izftpev18ffv1sqxe70im] C:\DOCUME~1\default\LOCALS~1\Temp\xvn6wyhj.exe
O4 - HKCU\..\Run: [m2hx2fspmf16f8zlg4kblg9vya5cc6u7xa] C:\DOCUME~1\default\LOCALS~1\Temp\dnkcff5hv.exe
O4 - HKCU\..\Run: [ogko3j81w8yfpq4tqalg0grjp3nyg1zk9pcg3] C:\DOCUME~1\default\LOCALS~1\Temp\up3kchdj.exe
O4 - HKCU\..\Run: [b3blybbmrb77t61eangiuaq7alyz] C:\DOCUME~1\default\LOCALS~1\Temp\jpu56uk8mi.exe
O4 - HKCU\..\Run: [zrf4k7atcvfpu8gyv3k44fjc3m1ebvtp0trm9b3gcrk6a2lnne] C:\DOCUME~1\default\LOCALS~1\Temp\herp0oqu.exe
O4 - HKCU\..\Run: [l8aybeyhmrzl6ll4ood7wegwby570oc38l8m8] C:\DOCUME~1\default\LOCALS~1\Temp\r0ucx5w.exe
O4 - HKCU\..\Run: [e07yroadid7rmymub2s01biigiviqdp] C:\DOCUME~1\default\LOCALS~1\Temp\cq00rvt.exe
O4 - HKCU\..\Run: [fi7rq5p6dj0ymt6fw3zevt56bu4dah] C:\DOCUME~1\default\LOCALS~1\Temp\xszrhxm0.exe
O4 - HKCU\..\Run: [ukmzjfo8o76vqeelvrlbqqt13t7n9uxk7pixxntmlg] C:\DOCUME~1\default\LOCALS~1\Temp\kl5fe3sl.exe
O4 - HKCU\..\Run: [r0a10enac7f4ym09w] C:\DOCUME~1\default\LOCALS~1\Temp\jqkd9oalvx.exe
O4 - HKCU\..\Run: [i7oyovw7svi7w40h0zvals4digqyicbp4yo] C:\DOCUME~1\default\LOCALS~1\Temp\zjjhdcnv.exe
O4 - HKCU\..\Run: [sp99sxenrrjhej8j5xp330suj8] C:\DOCUME~1\default\LOCALS~1\Temp\a07dcsvm811o.exe
O4 - HKCU\..\Run: [vkkvbxed2dtm0tw58] C:\DOCUME~1\default\LOCALS~1\Temp\krooykr6vc9.exe
O4 - HKCU\..\Run: [w6uhow12eogbcqbg1g] C:\DOCUME~1\default\LOCALS~1\Temp\sga2yh2f.exe
O4 - HKCU\..\Run: [q9sllc0on6rwpu5jagfo14mg10dd3323psl2wq1kinyq] C:\DOCUME~1\default\LOCALS~1\Temp\rygi0e1suz.exe
O4 - HKCU\..\Run: [b9t7mfmkmqt0awnzde0a358w49jzsjdciml] C:\DOCUME~1\default\LOCALS~1\Temp\iihdsyx5py.exe
O4 - HKCU\..\Run: [w5a071ku1t30y6xnsq8p4a0fw5mx22aey3] C:\DOCUME~1\default\LOCALS~1\Temp\lwtn4c4rf1.exe
O4 - HKCU\..\Run: [ef8at8uzn29zu3e4fmtlf] C:\DOCUME~1\default\LOCALS~1\Temp\dc6oi05jf.exe
O4 - HKCU\..\Run: [m6srssl62feafskqymn9aqhihkudvs2] C:\DOCUME~1\default\LOCALS~1\Temp\l36sn7wuhqp6m.exe
O4 - HKCU\..\Run: [ph508xuhf7dimu93ndfsd4wwyb78ori82n8ta25x3bipmv1jcd] C:\DOCUME~1\default\LOCALS~1\Temp\csoysj2ni.exe
O4 - HKCU\..\Run: [zaus67rfa3kmf3m0nm61i43qdemijmikw3c] C:\DOCUME~1\default\LOCALS~1\Temp\lxdzpk.exe
O4 - HKCU\..\Run: [wp1q94ilgh6zdge] C:\DOCUME~1\default\LOCALS~1\Temp\x6j6teiji.exe
O4 - HKCU\..\Run: [st94ddnnw8ecbwbfxkg6t56n52dy149jbahsk8rd2] C:\DOCUME~1\default\LOCALS~1\Temp\lcc7j1w.exe
O4 - HKCU\..\Run: [aof1s1609gxe555qnsfy3g6] C:\DOCUME~1\default\LOCALS~1\Temp\n57341pq.exe
O4 - HKCU\..\Run: [jeh1mrreywdqvn2u4j6kgzhc09ttcgx99] C:\DOCUME~1\default\LOCALS~1\Temp\r4n5b80ox.exe
O4 - HKCU\..\Run: [shzni7ovlz7xj2g3wokqfve2jl4but75l3tf2cl] C:\DOCUME~1\default\LOCALS~1\Temp\p1mcdug1.exe
O4 - HKCU\..\Run: [pzix557g5hs5i] C:\DOCUME~1\default\LOCALS~1\Temp\kh8hyv.exe
O4 - HKCU\..\Run: [ujkrhirnqgfbhe96g9rf3edma6ccylwxkfve39i] C:\DOCUME~1\default\LOCALS~1\Temp\jqi4lv4h0l.exe
O4 - HKCU\..\Run: [ibz0mdmo3dkozatm5psrzu4bbt6mxmb8dm92to0g3urhp] C:\DOCUME~1\default\LOCALS~1\Temp\p1h7zpg725wi.exe
O4 - HKCU\..\Run: [kgxtep0h6pdzxg] C:\DOCUME~1\default\LOCALS~1\Temp\nt2i0b996.exe
O4 - HKCU\..\Run: [k41rbr2uyykj16bmq6bd7m65zxtktrfvn] C:\DOCUME~1\default\LOCALS~1\Temp\b28q5iixfm4h0.exe
O4 - HKCU\..\Run: [mvbp4svvkqoo3aj5w] C:\DOCUME~1\default\LOCALS~1\Temp\o9projw1co0yp.exe
O4 - HKCU\..\Run: [okqpithonf652zcnygp8cwbra1z6c2k81sct1ba] C:\DOCUME~1\default\LOCALS~1\Temp\za5lfah1ahkym.exe
O4 - HKCU\..\Run: [c5zab976h9t0vto9dhb99719e4bj2] C:\DOCUME~1\default\LOCALS~1\Temp\jc5c19.exe
O4 - HKCU\..\Run: [r9s180n5yvw6oyvs55zykd1rh8hhhmtho9k] C:\DOCUME~1\default\LOCALS~1\Temp\kpoqvprste6r.exe
O4 - HKCU\..\Run: [da4s5hrb00sl2tq] C:\DOCUME~1\default\LOCALS~1\Temp\nks522zom4ld.exe
O4 - HKCU\..\Run: [t8rnyae9m8yxw8la16krso1] C:\DOCUME~1\default\LOCALS~1\Temp\jobsjltxeajv.exe
O4 - HKCU\..\Run: [ws00q06gwhovx82couo69bzytkand6yrfnbtcdbxyaxylcyuq] C:\DOCUME~1\default\LOCALS~1\Temp\dzr6gxgybqz.exe
O4 - HKCU\..\Run: [jhb32eas2vnieo8] C:\DOCUME~1\default\LOCALS~1\Temp\lbh5cpw.exe
O4 - HKCU\..\Run: [fz72fzz0lh0wd5gfm3vkqptcmztmqwdoa] C:\DOCUME~1\default\LOCALS~1\Temp\gm5jw2agtx0.exe
O4 - HKCU\..\Run: [d7x9u0sb53b5vyiz4zshpj] C:\DOCUME~1\default\LOCALS~1\Temp\ic1uthxha.exe
O4 - HKCU\..\Run: [onzn5j52og5mtk68e5ae1xtfq4c1] C:\DOCUME~1\default\LOCALS~1\Temp\f0wdz9jshhida.exe
O4 - HKCU\..\Run: [hhs6ckcm8ntq1e5r8j] C:\DOCUME~1\default\LOCALS~1\Temp\sl538y8.exe
O4 - HKCU\..\Run: [xk24d4aynp555xt8x40y74nwmxv1qfy5dnvoxg45acexaz8shy] C:\DOCUME~1\default\LOCALS~1\Temp\pxsvshtsu9j5.exe
O4 - HKCU\..\Run: [y9zgft6nmpcl1a36bb61wp] C:\DOCUME~1\default\LOCALS~1\Temp\lclne1zd.exe
O4 - HKCU\..\Run: [op6bweqv9n1okthgffo4231ysxy11cpxknsxr2r61s0l1j76u] C:\DOCUME~1\default\LOCALS~1\Temp\bc8knrud586s.exe
O4 - HKCU\..\Run: [u2ez8uzcxw8a42m9p] C:\DOCUME~1\default\LOCALS~1\Temp\fmerj420o42i.exe
O4 - HKCU\..\Run: [jwgylxrsqkc4tt5eo0d4upe8aj8wbtwhuefseu4j6] C:\DOCUME~1\default\LOCALS~1\Temp\ag8ywzjm.exe
O4 - HKCU\..\Run: [cgh3ezyb34cdqoy1] C:\DOCUME~1\default\LOCALS~1\Temp\wv1qzjp7nkmt.exe
O4 - HKCU\..\Run: [c4abaa5o0bvew72bw6j7dx0ywuwmt8vd419j6y] C:\DOCUME~1\default\LOCALS~1\Temp\zit27d7t.exe
O4 - HKCU\..\Run: [jor8flon3wh8s8uk4la8dlyflyka3hqvwza7qut] C:\DOCUME~1\default\LOCALS~1\Temp\ebk8l9nfwmdiy.exe
O4 - HKCU\..\Run: [ow3zdgeahd3w4] C:\DOCUME~1\default\LOCALS~1\Temp\yxktzropvqr43.exe
O4 - HKCU\..\Run: [xkffyroasskzy2fgpe77unfzognsvg3g59kel1rm9jxmceq1] C:\DOCUME~1\default\LOCALS~1\Temp\w2dcf8m.exe
O4 - HKCU\..\Run: [v3mzvkfce7afnlbafm8yvphn5kmasacvzqca] C:\DOCUME~1\default\LOCALS~1\Temp\snxf4d1.exe
O4 - HKCU\..\Run: [vgufhl1hoshkz] C:\DOCUME~1\default\LOCALS~1\Temp\ujksxcvdxq.exe
O4 - HKCU\..\Run: [l9yd3sfs5ve71gjwz0clzz5k1gz] C:\DOCUME~1\default\LOCALS~1\Temp\sxnahi4.exe
O4 - HKCU\..\Run: [do2wx8gq8lnvd1n5eopojn4xxt7avxnr1o2dv] C:\DOCUME~1\default\LOCALS~1\Temp\rtanahyr0d.exe
O4 - HKCU\..\Run: [e5kerxobmnxwytmroog3of1d6pd6obycjyhrlg4cabdrzm8la] C:\DOCUME~1\default\LOCALS~1\Temp\nl7dtbin2xo.exe
O4 - HKCU\..\Run: [oqoutvw4dmonhgkh6h958hbjm43f23pfjyfq] C:\DOCUME~1\default\LOCALS~1\Temp\l1tietsb2.exe
O4 - HKCU\..\Run: [s9u6s2pqmqxqpp0jt8tcz121bmhrq8fwomad7o21m10m2] C:\DOCUME~1\default\LOCALS~1\Temp\j0zdxhx6.exe
O4 - HKCU\..\Run: [uewljg9va0rqjcwcqb9q8hk2pb] C:\DOCUME~1\default\LOCALS~1\Temp\trz5juj.exe
O4 - HKCU\..\Run: [nb051zr414jbza76y4wzg24eeft8fpl9c4jnmdah8oa2i] C:\DOCUME~1\default\LOCALS~1\Temp\li0nam8ichee.exe
O4 - HKCU\..\Run: [k4rm0uqgpvwf1ayvqe40uykpqf15] C:\DOCUME~1\default\LOCALS~1\Temp\extwdnek.exe
O4 - HKCU\..\Run: [kw3sbsdmo0yb0l755g3d40v7fbcz21djv2q] C:\DOCUME~1\default\LOCALS~1\Temp\oxfk86w.exe
O4 - HKCU\..\Run: [ybqyx46v5789dytxsb7vb5dkw4j] C:\DOCUME~1\default\LOCALS~1\Temp\u8vnmh82c.exe
O4 - HKCU\..\Run: [jyyy8xq3lgiavnqxsaf76xuwvx6sqvkl28zi9jag33wg8] C:\DOCUME~1\default\LOCALS~1\Temp\s4a4m4yf4cy9q.exe
O4 - HKCU\..\Run: [wm3dio9542ikrvj1z31tirr9f1yc2ypf] C:\DOCUME~1\default\LOCALS~1\Temp\l03w8540l.exe
O4 - HKCU\..\Run: [g9q9hv10szx0f91fsh0d] C:\DOCUME~1\default\LOCALS~1\Temp\pxwo0p8.exe
O4 - HKCU\..\Run: [rhwwyluzkcwip0a4gb178zd4djf3an8l7vx4thiz5iwoh4i] C:\DOCUME~1\default\LOCALS~1\Temp\y805u3dpo5.exe
O4 - HKCU\..\Run: [ixlckl06dlhf7c] C:\DOCUME~1\default\LOCALS~1\Temp\hbbw05y166lg.exe
O4 - HKCU\..\Run: [rbtg5gb48h5hdrfgygxtrav98xlppb27vkmal5pigngjit] C:\DOCUME~1\default\LOCALS~1\Temp\d7453p4m.exe
O4 - HKCU\..\Run: [sdeikz0oxpm9q1avhap4ur6qu0rhc6z69dl46uo] C:\DOCUME~1\default\LOCALS~1\Temp\e2lvfqzlvy.exe
O4 - HKCU\..\Run: [c2qfytehnprxns4ktzomdh09iw3rmx4328lhx0jzcp7t9uzqej] C:\DOCUME~1\default\LOCALS~1\Temp\w4kqfb.exe
O4 - HKCU\..\Run: [a9h3cf82xq5vh2r36tn1zl4rynfwancfd0rzc0ah1vta5knq] C:\DOCUME~1\default\LOCALS~1\Temp\q7tih1rerc.exe
O4 - HKCU\..\Run: [kr94157fa] C:\DOCUME~1\default\LOCALS~1\Temp\ocm1xi6q467x.exe
O4 - HKCU\..\Run: [yd7yvxomvhvl2lynnufpkbf] C:\DOCUME~1\default\LOCALS~1\Temp\aid7xl.exe
O4 - HKCU\..\Run: [rjqgkeaq56x3p9tau] C:\DOCUME~1\default\LOCALS~1\Temp\tpg4m6.exe
O4 - HKCU\..\Run: [dqf5euh2t87lbeuuz0xme02ylddublh28r49x] C:\DOCUME~1\default\LOCALS~1\Temp\kbtt7ha.exe
O4 - HKCU\..\Run: [x9xdvglv1aprz9h18oq4qb82ll7] C:\DOCUME~1\default\LOCALS~1\Temp\aiw7w2s.exe
O4 - HKCU\..\Run: [cg8488m1pgtki866eluk573tvphwnzbp53oka9ohq3] C:\DOCUME~1\default\LOCALS~1\Temp\swka03kq0da.exe
O4 - HKCU\..\Run: [on2cwkj6gqunfc] C:\DOCUME~1\default\LOCALS~1\Temp\w6qhfgbd096.exe
O4 - HKCU\..\Run: [q3yboea3jisjrn] C:\DOCUME~1\default\LOCALS~1\Temp\yf53sarwdwh.exe
O4 - HKCU\..\Run: [nx1hbj5ftz] C:\DOCUME~1\default\LOCALS~1\Temp\q9e3xwp9qm8.exe
O4 - HKCU\..\Run: [u1qxrkczbqk6i92i6xd656dtlgx8fyxfk9dy] C:\DOCUME~1\default\LOCALS~1\Temp\ad87uibuv0.exe
O4 - HKCU\..\Run: [b75jyvavsojc] C:\DOCUME~1\default\LOCALS~1\Temp\mzlgrabi27l31.exe
O4 - HKCU\..\Run: [qpbyp2t3c9ejhhyre6np2zimqadq0znq1yggyjh0m1wnkb] C:\DOCUME~1\default\LOCALS~1\Temp\y0vtncl.exe
O4 - HKCU\..\Run: [h50xcqsdszdha0wg2a6reitgox21rog3ghiby] C:\DOCUME~1\default\LOCALS~1\Temp\yh8u7bg.exe
O4 - HKCU\..\Run: [sqihqa7e6xbf88nfq81k74onps18k33p8te3sks1n3eemi] C:\DOCUME~1\default\LOCALS~1\Temp\t5pr8k7dv310.exe
O4 - HKCU\..\Run: [fb3xzfem6vcyw1awa7o9gubpl2ftxmfd3xjh] C:\DOCUME~1\default\LOCALS~1\Temp\jnlaj613.exe
O4 - HKCU\..\Run: [a5fo1su8zehdb5zj2rdo38rmcqvfsdii2250kir] C:\DOCUME~1\default\LOCALS~1\Temp\z7wxs52j.exe
O4 - HKCU\..\Run: [vop8w5u2coo] C:\DOCUME~1\default\LOCALS~1\Temp\yvtf758.exe
O4 - HKCU\..\Run: [rr038pzrcw6zh] C:\DOCUME~1\default\LOCALS~1\Temp\omt3foezv6ps2.exe
O4 - HKCU\..\Run: [q6ze7o1bfmoz4e56fi88vc33xbwtflmpkl46x2] C:\DOCUME~1\default\LOCALS~1\Temp\kfs535po7rw.exe
O4 - HKCU\..\Run: [lux2aoo3yn8i] C:\DOCUME~1\default\LOCALS~1\Temp\fdf8d8w0.exe
O4 - HKCU\..\Run: [yiac24dpzyw5yljiaqo2j] C:\DOCUME~1\default\LOCALS~1\Temp\xz9ybtdmqff.exe
O4 - HKCU\..\Run: [j7jj12br0pdsf89gt5krd20re7uq07qa4ui2z6o44fnz6px] C:\DOCUME~1\default\LOCALS~1\Temp\th2aaf0.exe
O4 - HKCU\..\Run: [gniwrweq3zeo5plfrl0yv9q] C:\DOCUME~1\default\LOCALS~1\Temp\i2dbrloyec.exe
O4 - HKCU\..\Run: [vcjaacgbr9polse3ig9auo50xr41nxwljr79h91xbl30] C:\DOCUME~1\default\LOCALS~1\Temp\u422y5kp328r.exe
O4 - HKCU\..\Run: [ak88eu9vd5pq4t] C:\DOCUME~1\default\LOCALS~1\Temp\z6zo8yvdb3aw.exe
O4 - HKCU\..\Run: [pmhdl2ig7r7kn85dfly4b38dv9sbnj4xqws9] C:\DOCUME~1\default\LOCALS~1\Temp\kru23lmo0y.exe
O4 - HKCU\..\Run: [t3n44mxz4o9fgn7li0z592] C:\DOCUME~1\default\LOCALS~1\Temp\c510ozxn1.exe
O4 - HKCU\..\Run: [mrj2g6t8622eq9v76v1y6fmg6f99c2] C:\DOCUME~1\default\LOCALS~1\Temp\b6ew1bxw.exe
O4 - HKCU\..\Run: [x33heakfuf27] C:\DOCUME~1\default\LOCALS~1\Temp\dyxgs6nlnh.exe
O4 - HKCU\..\Run: [szwiwapx3sq6dt49hvfbe1mqn59olz51ifa8in2jf] C:\DOCUME~1\default\LOCALS~1\Temp\katwxpsyrsz.exe
O4 - HKCU\..\Run: [qxhsw1wfy3py06n5urw433hk92t4e93n2cr39] C:\DOCUME~1\default\LOCALS~1\Temp\u8sgtf39kpx.exe
O4 - HKCU\..\Run: [zl36ypfle1lkbombqep1k86aamd48ge10af0sa5qxhuabey] C:\DOCUME~1\default\LOCALS~1\Temp\eqoe657mv1.exe
O4 - HKCU\..\Run: [pe63g4v38sx0k175589us0vr8431elqlwslibku] C:\DOCUME~1\default\LOCALS~1\Temp\tpovqisw7n3.exe
O4 - HKCU\..\Run: [agigu9i9l8qub82sjke9e5ma2zasgz] C:\DOCUME~1\default\LOCALS~1\Temp\qq5g9oz.exe
O4 - HKCU\..\Run: [aoc6it0hxr7q9wl06lgjca7190xbqybhvtyhy5hfyt5u5sj] C:\DOCUME~1\default\LOCALS~1\Temp\pp5jwwk9.exe
O4 - HKCU\..\Run: [hywzts8yswd06hie8kbvz7vwzrjr7b8q58] C:\DOCUME~1\default\LOCALS~1\Temp\c8n98tg.exe
O4 - HKCU\..\Run: [siferih6udeqjsxj3x16sv] C:\DOCUME~1\default\LOCALS~1\Temp\s76vyj7w.exe
O4 - HKCU\..\Run: [ngel43mdq78oibc8bgfosx2i27sigpegpzh2gsb] C:\DOCUME~1\default\LOCALS~1\Temp\flp1fudv3c9c6.exe
O4 - HKCU\..\Run: [gea5gvptpz6p94] C:\DOCUME~1\default\LOCALS~1\Temp\g9zgf8j9xk.exe
O4 - HKCU\..\Run: [qm9i4907xujzxd355] C:\DOCUME~1\default\LOCALS~1\Temp\k55a8prz.exe
O4 - HKCU\..\Run: [h4g2x0jfdszvrhcuy9lclsbra5updo6cdwkn] C:\DOCUME~1\default\LOCALS~1\Temp\kk5p9x.exe
O4 - HKCU\..\Run: [e1f5hg4pscvitmj1ehzgit563nh3i3] C:\DOCUME~1\default\LOCALS~1\Temp\z6zuqm46sig1.exe
O4 - HKCU\..\Run: [cmtdno0ulwr4erxld28] C:\DOCUME~1\default\LOCALS~1\Temp\nslxc5q9.exe
O4 - HKCU\..\Run: [si3ea5l6xvtfowpc4urneqxpfrj5t] C:\DOCUME~1\default\LOCALS~1\Temp\pcvtb3bv4d.exe
O4 - HKCU\..\Run: [myazjzrwm2kdkfhtensh821d7em3kfvt] C:\DOCUME~1\default\LOCALS~1\Temp\cjymjsmw9rnax.exe
O4 - HKCU\..\Run: [uj7t2pp8o9vheefbwh927dyzb0gx69tp4n] C:\DOCUME~1\default\LOCALS~1\Temp\bevk86.exe
O4 - HKCU\..\Run: [aq5h7tfbjpct300ym834r409xjlolzfyvxn8tcmb4n] C:\DOCUME~1\default\LOCALS~1\Temp\kpymlim5.exe
O4 - HKCU\..\Run: [xao6nsbum4ybs5o0vm72bzlg3o1azt5n00s83vrtxjlvpefg0] C:\DOCUME~1\default\LOCALS~1\Temp\o6jzqkril.exe
O4 - HKCU\..\Run: [hxir1wm4rt7x] C:\DOCUME~1\default\LOCALS~1\Temp\bz6j74o5zy0m.exe
O4 - HKCU\..\Run: [rmwa79a00a5uvvw2v4885luajvohovzazgpwwwgl1zdm0296xa] C:\DOCUME~1\default\LOCALS~1\Temp\m0qj15ii.exe
O4 - HKCU\..\Run: [y8hkocf1aobkpu58ap4q0hyy97gq66me7u84cscmyy20xb] C:\DOCUME~1\default\LOCALS~1\Temp\byrzm8.exe
O4 - HKCU\..\Run: [st2s78x0qd10xqmjmp3kbux2toh] C:\DOCUME~1\default\LOCALS~1\Temp\qekm0cvgg.exe
O4 - HKCU\..\Run: [nwho7eqkugvdz] C:\DOCUME~1\default\LOCALS~1\Temp\ij7oojave6sn0.exe
O4 - HKCU\..\Run: [ma4hxchym0gqr0jlgwofd2adssozua29lqj] C:\DOCUME~1\default\LOCALS~1\Temp\ouaqivr.exe
O4 - HKCU\..\Run: [z80axma2k21mz56rpjiv9dny] C:\DOCUME~1\default\LOCALS~1\Temp\lr3fdd8k38.exe
O4 - HKCU\..\Run: [ziphj4u8uagn5ltq2cfm] C:\DOCUME~1\default\LOCALS~1\Temp\ti5i6b2l6v0dr.exe
O4 - HKCU\..\Run: [mb2k65hj1srk2vx4u63vut] C:\DOCUME~1\default\LOCALS~1\Temp\lqg1h47ug.exe
O4 - HKCU\..\Run: [mku1b3aop2ykfdryhhs6b4ae9so8k] C:\DOCUME~1\default\LOCALS~1\Temp\lno0ye3vpxi4.exe
O4 - HKCU\..\Run: [jje61xw68h0djwm9rk608a06tx8ti] C:\DOCUME~1\default\LOCALS~1\Temp\ncuwr6f7.exe
O4 - HKCU\..\Run: [xcfrog360q9v] C:\DOCUME~1\default\LOCALS~1\Temp\gj4qt6hh66krt.exe
O4 - HKCU\..\Run: [brdxxm5v1cn0j17820lb288cruhb6ia5rgyz9bkafpi] C:\DOCUME~1\default\LOCALS~1\Temp\fpx61l.exe
O4 - HKCU\..\Run: [z6h2gru8t5n2n0rq41jucdg7ja8dok8ko2ui] C:\DOCUME~1\default\LOCALS~1\Temp\g7aqzorl4qi5.exe
O4 - HKCU\..\Run: [ybmnj534n9p29] C:\DOCUME~1\default\LOCALS~1\Temp\gdbr2q5.exe
O4 - HKCU\..\Run: [jas6qd927qg1vfir6ims64voox08c9afqszqmzueyxe80jutfw] C:\DOCUME~1\default\LOCALS~1\Temp\ph2oo5oi.exe
O4 - HKCU\..\Run: [bae1m2wzm7mrlael] C:\DOCUME~1\default\LOCALS~1\Temp\rm700f77jjfsm.exe
O4 - HKCU\..\Run: [o2bmw4trz5tidhmh4npze3hp6jt5s6fh1nsbsvl2k75vrg8] C:\DOCUME~1\default\LOCALS~1\Temp\v8iwrd1u7n.exe
O4 - HKCU\..\Run: [buhx6g9eb8wqhpls151k1jia1wzlo2icdptmvlvaoduqy18ei] C:\DOCUME~1\default\LOCALS~1\Temp\oj0pvg7x.exe
O4 - HKCU\..\Run: [dou8cx5fkaa6n7u695g9k21b6rbrdatyn1eco4jt7b] C:\DOCUME~1\default\LOCALS~1\Temp\yk1yt8.exe
O4 - HKCU\..\Run: [fp87948ug55etorwo8gbxruj04] C:\DOCUME~1\default\LOCALS~1\Temp\hudwd3v.exe
O4 - HKCU\..\Run: [s72m34bd75eu4cyjjlomjvnyoggo4h4oyoo5l] C:\DOCUME~1\default\LOCALS~1\Temp\tciscndti4kr.exe
O4 - HKCU\..\Run: [pd900oq5e5] C:\DOCUME~1\default\LOCALS~1\Temp\ye5ru8d5uay.exe
O4 - HKCU\..\Run: [z8t0yvhypwl1ixk771f9gpngpmlvo1w2rpkj9a] C:\DOCUME~1\default\LOCALS~1\Temp\oiig0h7h9u2yp.exe
O4 - HKCU\..\Run: [hisvkvwyk1qvzvzxxcq9o9yfevy2hie06wb34ti1g2h3] C:\DOCUME~1\default\LOCALS~1\Temp\qjscifb.exe
O4 - HKCU\..\Run: [s4u1ib5khk8figc3p30rmg46] C:\DOCUME~1\default\LOCALS~1\Temp\gk58dy.exe
O4 - HKCU\..\Run: [itw2gorcbd79is4vlwgzea] C:\DOCUME~1\default\LOCALS~1\Temp\yp5q51e5nwj9e.exe
O4 - HKCU\..\Run: [psts0mmr1h0wt7rspdisa] C:\DOCUME~1\default\LOCALS~1\Temp\ghbdtcggvm4u.exe
O4 - HKCU\..\Run: [waytmvn23wd2rkqhj] C:\DOCUME~1\default\LOCALS~1\Temp\sj6tmb2i.exe
O4 - HKCU\..\Run: [n8lh8qirg8667hnmkvaqpzutterbr5m3wms12x8uha383] C:\DOCUME~1\default\LOCALS~1\Temp\u9tnev8gzbk.exe
O4 - HKCU\..\Run: [gpylr1j4mv9qsrbqk] C:\DOCUME~1\default\LOCALS~1\Temp\qtpc55.exe
O4 - HKCU\..\Run: [e55pfrnk8z969ync] C:\DOCUME~1\default\LOCALS~1\Temp\ibg7ucy.exe
O4 - HKCU\..\Run: [ab77mg6kav0ld5] C:\DOCUME~1\default\LOCALS~1\Temp\wl9l3qrqsrq3.exe
O4 - HKCU\..\Run: [lro8j7c449cj9n6hvhvwe] C:\DOCUME~1\default\LOCALS~1\Temp\az95tx649k07.exe
O4 - HKCU\..\Run: [tzavifl9o1ggk2jdjl4dc0cavr74m] C:\DOCUME~1\default\LOCALS~1\Temp\z7qcy9h.exe
O4 - HKCU\..\Run: [pgzv1te8w4tq] C:\DOCUME~1\default\LOCALS~1\Temp\vv5vau53.exe
O4 - HKCU\..\Run: [zxzsra2sq] C:\DOCUME~1\default\LOCALS~1\Temp\y0k0uzp.exe
O4 - HKCU\..\Run: [kcq9sz291] C:\DOCUME~1\default\LOCALS~1\Temp\kdj9oh54.exe
O4 - HKCU\..\Run: [r6zut33dasfphk6rx11ecvr1b61l4ejyog91ng82aer7h] C:\DOCUME~1\default\LOCALS~1\Temp\hhinqmor1mv.exe
O4 - HKCU\..\Run: [uonvbfs6z1m5llpi3at5wn] C:\DOCUME~1\default\LOCALS~1\Temp\b808x72sf.exe
O4 - HKCU\..\Run: [wnn9wulmnlhrds9my5yokrg4c20vkcxiu9293oyj7wbs8mnv] C:\DOCUME~1\default\LOCALS~1\Temp\euoece9fo.exe
O4 - HKCU\..\Run: [vj7lb0p1yxt0sumzz6cx9mq9hz] C:\DOCUME~1\default\LOCALS~1\Temp\dnhdl86g2x.exe
O4 - HKCU\..\Run: [zcjsf1yxa8hdv47stcos0vh5dm1anupthi2cc7wt] C:\DOCUME~1\default\LOCALS~1\Temp\yigdbu5er.exe
O4 - HKCU\..\Run: [nl9c0i21vj47mty7yns4y7ppyev988lnp6hvftxt4o9h69ipit] C:\DOCUME~1\default\LOCALS~1\Temp\ij9urpu4tn6.exe
O4 - HKCU\..\Run: [qci6ozrbiwua6z1umulm9fwfps570cf93u] C:\DOCUME~1\default\LOCALS~1\Temp\oksvvl.exe
O4 - HKCU\..\Run: [n63uxs3dzaagygw41sblloj3xzpqkvbsqtk0bbm] C:\DOCUME~1\default\LOCALS~1\Temp\e4bqx5.exe
O4 - HKCU\..\Run: [rqueux99ikx4e2crk3gp3g6ux8lmo0g4] C:\DOCUME~1\default\LOCALS~1\Temp\bkm9m8ffmz.exe
O4 - HKCU\..\Run: [oryzee8fal9fvc4tu2bd9ipw7a5cao2] C:\DOCUME~1\default\LOCALS~1\Temp\j5s0c66q.exe
O4 - HKCU\..\Run: [zkg6mq1u1coh2b5uti] C:\DOCUME~1\default\LOCALS~1\Temp\xk6m0pigcuclh.exe
O4 - HKCU\..\Run: [yjay9t97y76n14cp3r23tclqy] C:\DOCUME~1\default\LOCALS~1\Temp\srlusw1fuia.exe
O4 - HKCU\..\Run: [go2fhiiuxuy4x73xy] C:\DOCUME~1\default\LOCALS~1\Temp\c8w5mml.exe
O4 - HKCU\..\Run: [tolc8ssig6ua48dusvetksmdiwgijxq3exp2mrd] C:\DOCUME~1\default\LOCALS~1\Temp\e9a75ufb0lui9.exe
O4 - HKCU\..\Run: [a3d4sxeps2ugk1pu15xgbfurlcb8ak07lo1zynw] C:\DOCUME~1\default\LOCALS~1\Temp\re6v4s0g2l1u.exe
O4 - HKCU\..\Run: [b5ida8kmphvcpikjargds093d05zwi10t9lsj] C:\DOCUME~1\default\LOCALS~1\Temp\pddzmb03v5.exe
O4 - HKCU\..\Run: [m743hrzrn29v9d0jnu1v5bhci9hcohe9lie19x8qeeghj] C:\DOCUME~1\default\LOCALS~1\Temp\cnu6shjzn7ph.exe
O4 - HKCU\..\Run: [r1yq4vlacfbm13d2eoskqa14zt98khl8istndg7zsu] C:\DOCUME~1\default\LOCALS~1\Temp\fkawkfvbsu5r.exe
O4 - HKCU\..\Run: [f6iip77519jjyjg1slr9hlngi9enve2] C:\DOCUME~1\default\LOCALS~1\Temp\jgisfkkzu.exe
O4 - HKCU\..\Run: [h71szfjdx2b2cenza3vtlmx7o] C:\DOCUME~1\default\LOCALS~1\Temp\roqynmsoe.exe
O4 - HKCU\..\Run: [mbd9hwf1n7b0jut1juall1d703g8cszl5nmpt8b1] C:\DOCUME~1\default\LOCALS~1\Temp\a24v136242jfi.exe
O4 - HKCU\..\Run: [i7fnybdn75iv8rfiw] C:\DOCUME~1\default\LOCALS~1\Temp\jcjwm7.exe
O4 - HKCU\..\Run: [b9qkho6lmdm30jk0k7z0adrzouo7me] C:\DOCUME~1\default\LOCALS~1\Temp\b63whcf1.exe
O4 - HKCU\..\Run: [tx7n4fwv1m8b3re7jxzyqa54r] C:\DOCUME~1\default\LOCALS~1\Temp\mszbwr.exe
O4 - HKCU\..\Run: [z55r202zrh34r6jsxs85tpn5djp05xazpmjv5y] C:\DOCUME~1\default\LOCALS~1\Temp\iip5kh.exe
O4 - HKCU\..\Run: [otwfkal2tqbwkdo10v0xay4h6] C:\DOCUME~1\default\LOCALS~1\Temp\x3vssutpovn.exe
O4 - HKCU\..\Run: [oa3d8fa34pa4o1x9iyyfoaw8ktg21ue8gt54d2tqyddery] C:\DOCUME~1\default\LOCALS~1\Temp\jpch5n.exe
O4 - HKCU\..\Run: [n6mfc08aa5t5o0fr9m20xgmexitjy19bh7iy2di9] C:\DOCUME~1\default\LOCALS~1\Temp\deybm6ao5zksd.exe
O4 - HKCU\..\Run: [vt0p5i0aq] C:\DOCUME~1\default\LOCALS~1\Temp\g8rq4hidr8ne7.exe
O4 - HKCU\..\Run: [v8bb71z9w7003b8] C:\DOCUME~1\default\LOCALS~1\Temp\raea3y8l.exe
O4 - HKCU\..\Run: [jhkv9z883nd1nrc9ii] C:\DOCUME~1\default\LOCALS~1\Temp\r1du14.exe
O4 - HKCU\..\Run: [jwutas6l37o] C:\DOCUME~1\default\LOCALS~1\Temp\rv2amz.exe
O4 - HKCU\..\Run: [djn8nhrilib6j664hjsj8id4k91x3rp766xhz2awv] C:\DOCUME~1\default\LOCALS~1\Temp\oxuz6l9x.exe
O4 - HKCU\..\Run: [fcj2z5k82y9wkx4fd] C:\DOCUME~1\default\LOCALS~1\Temp\a9i4vp5jb1r.exe
O4 - HKCU\..\Run: [j7tppvw6bddk6b71i3qzdo] C:\DOCUME~1\default\LOCALS~1\Temp\c4rirlvze4w.exe
O4 - HKCU\..\Run: [qho1x1znn1cy60wxlbjmk12qdzpdqsxbq7j11lbv3m13uhp0] C:\DOCUME~1\default\LOCALS~1\Temp\cqhma1c74hkt.exe
O4 - HKCU\..\Run: [cmbni0zvyf6q84gvd6twv0qphc] C:\DOCUME~1\default\LOCALS~1\Temp\fcutqx5iaj.exe
O4 - HKCU\..\Run: [cp6pwsxorjb13p7dr22aba0ukzzfyrqg400p80vmyny8l] C:\DOCUME~1\default\LOCALS~1\Temp\l3ftxq7kda4.exe
O4 - HKCU\..\Run: [xnz8zfw6vr85dtbaklx87j6k3cfdm4ixx] C:\DOCUME~1\default\LOCALS~1\Temp\y4l7hy15.exe
O4 - HKCU\..\Run: [ag8lekfyqaghpztv4vu8zxgmohcn1jckqxaq] C:\DOCUME~1\default\LOCALS~1\Temp\rubkmk59.exe
O4 - HKCU\..\Run: [e2ts04mhsyvl11qg9e1xj5tlbukb1mzfaqo79si6lqjvnd4] C:\DOCUME~1\default\LOCALS~1\Temp\pennc3.exe
O4 - HKCU\..\Run: [dg0neultki0unlwi0r89ope85pa36a7mc0] C:\DOCUME~1\default\LOCALS~1\Temp\dc4dfj7vnz.exe
O4 - HKCU\..\Run: [ga8yzi1henf4lyfps894t2cj0] C:\DOCUME~1\default\LOCALS~1\Temp\wtca1bm9.exe
O4 - HKCU\..\Run: [qqm5vbx4kuwrbckgcy0iquws1b9uzt] C:\DOCUME~1\default\LOCALS~1\Temp\ly6wi0.exe
O4 - HKCU\..\Run: [jqs8oajsdb8jr3rj] C:\DOCUME~1\default\LOCALS~1\Temp\exmmbaf.exe
O4 - HKCU\..\Run: [n9yg5dz0razg70k3zxt0tz8c1ui1o23ukis66d0zqak5az2pb] C:\DOCUME~1\default\LOCALS~1\Temp\nxm3t3d.exe
O4 - HKCU\..\Run: [hi97rf5pzch4veeqprfp31z5ngucqrwsj72703] C:\DOCUME~1\default\LOCALS~1\Temp\acmb8qm3.exe
O4 - HKCU\..\Run: [fwx84bf9imh08acs1degxc3p8jlt818c7l4s5o1zoh] C:\DOCUME~1\default\LOCALS~1\Temp\cis711hw1kjj.exe
O4 - HKCU\..\Run: [tvvsg2bpvvg2udc09o9b3yiijupyfvnr7apr] C:\DOCUME~1\default\LOCALS~1\Temp\yscfq9.exe
O4 - HKCU\..\Run: [nzl1gso3cm4mcv] C:\DOCUME~1\default\LOCALS~1\Temp\wr2jrbxvtoj4.exe
O4 - HKCU\..\Run: [y5n16m8bf6ofuaijcku1urpt1fqhfg] C:\DOCUME~1\default\LOCALS~1\Temp\c7cp4mc.exe
O4 - HKCU\..\Run: [blycz1k1h9dpg082c0akbhqbtm] C:\DOCUME~1\default\LOCALS~1\Temp\peyicsnk5j.exe
O4 - HKCU\..\Run: [owluk32ojlt71fkxfiik1ejfu60h] C:\DOCUME~1\default\LOCALS~1\Temp\ed1lge7vnno.exe
O4 - HKCU\..\Run: [w6hvx1io8iveh] C:\DOCUME~1\default\LOCALS~1\Temp\ny358fg4ysc.exe
O4 - HKCU\..\Run: [s7xt2mr3mw84dvrcjpmpr8a9yxo28yii28] C:\DOCUME~1\default\LOCALS~1\Temp\obg2beh5r2z.exe
O4 - HKCU\..\Run: [tghgnjee0ah46mv20r4riiuejje] C:\DOCUME~1\default\LOCALS~1\Temp\poazeu161vq.exe
O4 - HKCU\..\Run: [wmajggcgq4k] C:\DOCUME~1\default\LOCALS~1\Temp\vfjn7k27srq.exe
O4 - HKCU\..\Run: [e09fcavu69dw7zvzt1jtkb2k3lw2b5iet3w42h5] C:\DOCUME~1\default\LOCALS~1\Temp\uazlwf4hl7fy.exe
O4 - HKCU\..\Run: [btodw7k48qojxis14pum6rg] C:\DOCUME~1\default\LOCALS~1\Temp\dfzmnp7t378.exe
O4 - HKCU\..\Run: [hyhhuur5vj2aamqscrroxhbsboixnhr594r9ffx32q9uad0d] C:\DOCUME~1\default\LOCALS~1\Temp\k0vub537086qg.exe
O4 - HKCU\..\Run: [h4yvb2newnxvhgviz] C:\DOCUME~1\default\LOCALS~1\Temp\mq25hkos3b531.exe
O4 - HKCU\..\Run: [zw4uty0n32amfpfjcati] C:\DOCUME~1\default\LOCALS~1\Temp\ri895v7kb1q5.exe
O4 - HKCU\..\Run: [xevj3k79vkupwoh6bu5n48wrr1hgtflwe437s0l] C:\DOCUME~1\default\LOCALS~1\Temp\m36yi1ie9.exe
O4 - HKCU\..\Run: [km29hlkteifadz7twoenk68j5todo1x9xby2548uufwsgxdl] C:\DOCUME~1\default\LOCALS~1\Temp\zoj47acq5bz.exe
O4 - HKCU\..\Run: [snqv9bkht42shnee5d6xv6ca] C:\DOCUME~1\default\LOCALS~1\Temp\xnq8pt847.exe
O4 - HKCU\..\Run: [vrhgdcd8uk] C:\DOCUME~1\default\LOCALS~1\Temp\hflq0p.exe
O4 - HKCU\..\Run: [p0jqbrt64eucwpn0n27vw40xc3exk6uf6b] C:\DOCUME~1\default\LOCALS~1\Temp\ii361mt65fwsl.exe
O4 - HKCU\..\Run: [qjtcd58rle2p8uc1b62let71j4ebidpg4v] C:\DOCUME~1\default\LOCALS~1\Temp\rt6pvhr.exe
O4 - HKCU\..\Run: [ewp2nvlzdzd6a711bmb7mdkmikv] C:\DOCUME~1\default\LOCALS~1\Temp\v3cwaui.exe
O4 - HKCU\..\Run: [kl5ol6wgn247ri7antav] C:\DOCUME~1\default\LOCALS~1\Temp\lwfgdj0svi11y.exe
O4 - HKCU\..\Run: [jj5cwoftfhafgsn70wg3q9rsmdbpn5yar] C:\DOCUME~1\default\LOCALS~1\Temp\y09529u.exe
O4 - HKCU\..\Run: [t35lq3dad9lekpijw9c1e2lslpj8s94tr] C:\DOCUME~1\default\LOCALS~1\Temp\kjd203e.exe
O4 - HKCU\..\Run: [tn3intfrkyybtakhsdh0yy1ldxv2v677uajwl] C:\DOCUME~1\default\LOCALS~1\Temp\yl1o6dpsadjt.exe
O4 - HKCU\..\Run: [k2bkurc1tg1cwpz8ok9bstthx] C:\DOCUME~1\default\LOCALS~1\Temp\hj93k29.exe
O4 - HKCU\..\Run: [jodc4aeaph9icpg5pey5ljsf3zrlw54lu] C:\DOCUME~1\default\LOCALS~1\Temp\nbjp7w2cg0s.exe
O4 - HKCU\..\Run: [z2dt2h14ykjjr7zx33wd8a] C:\DOCUME~1\default\LOCALS~1\Temp\spp3pxd5afps4.exe
O4 - HKCU\..\Run: [mp0danasgw] C:\DOCUME~1\default\LOCALS~1\Temp\ltl2kx9p.exe
O4 - HKCU\..\Run: [damch4oc2b1axyyhg] C:\DOCUME~1\default\LOCALS~1\Temp\ud5vt7272n5zn.exe
O4 - HKCU\..\Run: [tkthmhndpkchxictuwkhq74j6yuawb] C:\DOCUME~1\default\LOCALS~1\Temp\fclxlmcaw.exe
O4 - HKCU\..\Run: [s56620smxyb0owellve0tqe8w39n1mjscv5ipxnqs8bzd] C:\DOCUME~1\default\LOCALS~1\Temp\f1ocjkv8begot.exe
O4 - HKCU\..\Run: [nhvwmy8kyzzr9bh7eivfvjw7jmntw76rk11tq2no] C:\DOCUME~1\default\LOCALS~1\Temp\wc8phlk.exe
O4 - HKCU\..\Run: [bf14s2gu6nhzn0jgkdyvvqo9yj259wpzbsom2gtad5316w41] C:\DOCUME~1\default\LOCALS~1\Temp\cn7svfwjv.exe
O4 - HKCU\..\Run: [gzvye1zgxzb7bstsac] C:\DOCUME~1\default\LOCALS~1\Temp\qrl3toarr9y.exe
O4 - HKCU\..\Run: [la0v1yizx7zxnbth1saw3ikhjslfc1jfzigddz9jasax] C:\DOCUME~1\default\LOCALS~1\Temp\cnj6hrwt7b4j1.exe
O4 - HKCU\..\Run: [u19ukgm12oqbbat614k7cpeuogd9ucrh9udf9ukgxpd] C:\DOCUME~1\default\LOCALS~1\Temp\z1xbdzpzgl.exe
O4 - HKCU\..\Run: [flx6mw1mbhcd5yy0] C:\DOCUME~1\default\LOCALS~1\Temp\t9mjk92.exe
O4 - HKCU\..\Run: [igso29ens53ri] C:\DOCUME~1\default\LOCALS~1\Temp\er4miwohyc.exe
O4 - HKCU\..\Run: [u7c2nop5v02xnhrzfn7dqa3d] C:\DOCUME~1\default\LOCALS~1\Temp\qdubjkah.exe
O4 - HKCU\..\Run: [phyr6hvy088q] C:\DOCUME~1\default\LOCALS~1\Temp\rwmqfmq95.exe
O4 - HKCU\..\Run: [fv0rq0kyqv8dvkf04oacc5nnn8uh2miotor768xcr80cy4] C:\DOCUME~1\default\LOCALS~1\Temp\c05feb8.exe
O4 - HKCU\..\Run: [qygi1bxu43ficuhm4pi2knpykr5ubu4vllzyuddz6avia93cd] C:\DOCUME~1\default\LOCALS~1\Temp\hf3klkvx.exe
O4 - HKCU\..\Run: [nkor0w2ptobueq5p9qjjk4neysu2p38rxe2g0g52tf7ka82] C:\DOCUME~1\default\LOCALS~1\Temp\axgodlfjr.exe
O4 - HKCU\..\Run: [gns6fnvv7pfnow6eqt4j2de5g7ww5qo91yg] C:\DOCUME~1\default\LOCALS~1\Temp\wu0zxwmum6.exe
O4 - HKCU\..\Run: [pd7t8allzdbiwhv25mu5hsfodzb9kjv7radt6] C:\DOCUME~1\default\LOCALS~1\Temp\lt8xaqqkc.exe
O4 - HKCU\..\Run: [q0dlj5vy4dkz99m8w7npemf] C:\DOCUME~1\default\LOCALS~1\Temp\t4hnx6k80.exe
O4 - HKCU\..\Run: [wqok2n45xajnec7] C:\DOCUME~1\default\LOCALS~1\Temp\xa1v42ug5.exe
O4 - HKCU\..\Run: [miv4i2h580jwo9kgktxt7x2iyvk06s3518r1] C:\DOCUME~1\default\LOCALS~1\Temp\kvughlhyqn.exe
O4 - HKCU\..\Run: [pobn8c94vayeyojbruyv0yyixxu6oldwdk3] C:\DOCUME~1\default\LOCALS~1\Temp\csc5m2mw.exe
O4 - HKCU\..\Run: [zkett76zdak3kc1xyc5ts] C:\DOCUME~1\default\LOCALS~1\Temp\klp1h1.exe
O4 - HKCU\..\Run: [eppesrofj0fgx40gknlaazs3zx7vhgmne] C:\DOCUME~1\default\LOCALS~1\Temp\pk1zxwi.exe
O4 - HKCU\..\Run: [p3rx9p8w7tekhshtw0m3doqvs7qfw] C:\DOCUME~1\default\LOCALS~1\Temp\pro2jsl1chtvp.exe
O4 - HKCU\..\Run: [xw7w6pqtk6gsbh7o2bw6nsxygh6so8j44fzgc] C:\DOCUME~1\default\LOCALS~1\Temp\mijnkxr2ryms.exe
O4 - HKCU\..\Run: [wuq8j31e85v5u8jzl15voxqpars5j09mnglay81z7jkf] C:\DOCUME~1\default\LOCALS~1\Temp\ogx6bj4t0.exe
O4 - HKCU\..\Run: [hpj00o43g5c2vov8wcbu7fed6loh1kdjrly51lszlu0e7v] C:\DOCUME~1\default\LOCALS~1\Temp\c83ezqdh9h8gj.exe
O4 - HKCU\..\Run: [twe6rg9qdt5f8o962ma93l7aytv9aiv1uyq6fqi] C:\DOCUME~1\default\LOCALS~1\Temp\pxlt6gho9.exe
O4 - HKCU\..\Run: [ckau6oxez] C:\DOCUME~1\default\LOCALS~1\Temp\uv7zhbsd1vi.exe
O4 - HKCU\..\Run: [ud8onix546xkgwngpgktxzbo] C:\DOCUME~1\default\LOCALS~1\Temp\zewqvxk.exe
O4 - HKCU\..\Run: [qg97585kaspu5hnm3wphvu] C:\DOCUME~1\default\LOCALS~1\Temp\cs807br.exe
O4 - HKCU\..\Run: [q9jkwvyeveh1nq49yh3nx8y8odde3q] C:\DOCUME~1\default\LOCALS~1\Temp\m10aql2olhk.exe
O4 - HKCU\..\Run: [qr0pak5fgk5wqrc6shwiucnbuee] C:\DOCUME~1\default\LOCALS~1\Temp\b0tyynrm818.exe
O4 - HKCU\..\Run: [irnx6tfsto82h77idvd] C:\DOCUME~1\default\LOCALS~1\Temp\vfp2nr2zejk5.exe
O4 - HKCU\..\Run: [vhezako3hucrowsj87ti56u0av] C:\DOCUME~1\default\LOCALS~1\Temp\h5w7eu.exe
O4 - HKCU\..\Run: [lh0n109isurys8iy0fale2w] C:\DOCUME~1\default\LOCALS~1\Temp\a83x6h2srptmi.exe
O4 - HKCU\..\Run: [td6i8w6uslhyw5a6vjjrft3qhkhlepa7v9wlcj473jlina1] C:\DOCUME~1\default\LOCALS~1\Temp\ytjoqzfefvrn.exe
O4 - HKCU\..\Run: [xz3xj63nel4d0nyt6uh20pqv7gt20u] C:\DOCUME~1\default\LOCALS~1\Temp\yne034beyk4v1.exe
O4 - HKCU\..\Run: [pzqor3tjk] C:\DOCUME~1\default\LOCALS~1\Temp\fg1kjer3.exe
O4 - HKCU\..\Run: [wzokc0ah7dalwzrelqrn9gpt90d8i844yfjqcd] C:\DOCUME~1\default\LOCALS~1\Temp\dykb1q.exe
O4 - HKCU\..\Run: [jkbhhr7nyg17sml8l1ylyf5h0it] C:\DOCUME~1\default\LOCALS~1\Temp\k2zgk0bvt.exe
O4 - HKCU\..\Run: [z3617kdh8shce4kt1epw97axlkbn36ih8hffaamcy30] C:\DOCUME~1\default\LOCALS~1\Temp\t1igmkfqn8.exe
O4 - HKCU\..\Run: [mj0x7bybnfgsp1bla2pzn2yq7l2cwnt] C:\DOCUME~1\default\LOCALS~1\Temp\xm45ycs.exe
O4 - HKCU\..\Run: [hj7rp58ef3d2m33no6gzodb0z2t7zx] C:\DOCUME~1\default\LOCALS~1\Temp\xtio9i1qekbl.exe
O4 - HKCU\..\Run: [r0vqqpfde1fgirx] C:\DOCUME~1\default\LOCALS~1\Temp\bymbftel6vc1t.exe
O4 - HKCU\..\Run: [jnzaw65i3yuc08vueipvi20mgy] C:\DOCUME~1\default\LOCALS~1\Temp\jnnaprye3.exe
O4 - HKCU\..\Run: [z33fovrmb6fxnru8j2lrvevk8t9lsy] C:\DOCUME~1\default\LOCALS~1\Temp\wxxely9p0.exe
O4 - HKCU\..\Run: [s0pb79a1riowejnycfoxxtdbiy4ag64saxkv] C:\DOCUME~1\default\LOCALS~1\Temp\orheg3omin7.exe
O4 - HKCU\..\Run: [rv1zwjetb2sglu2nv9iqu1hbwa2mvi5] C:\DOCUME~1\default\LOCALS~1\Temp\df4z4a3.exe
O4 - HKCU\..\Run: [i476a16qh1buyj] C:\DOCUME~1\default\LOCALS~1\Temp\y13aovykgge.exe
O4 - HKCU\..\Run: [wk3g0z8i1i0en1wmmwij8hldvd79bj4u6hr] C:\DOCUME~1\default\LOCALS~1\Temp\ts3f2kyper4kd.exe
O4 - HKCU\..\Run: [uk83et2xt55pif7hpnml79t0d68ticd4b1wgpwrsvcyhx9d] C:\DOCUME~1\default\LOCALS~1\Temp\b4v7hqby.exe
O4 - HKCU\..\Run: [iauzs3kv7ulqkrdzvydaa1tt4ajm7aut1x] C:\DOCUME~1\default\LOCALS~1\Temp\ob0dqsfy.exe
O4 - HKCU\..\Run: [y10d3dowt8xw2z2ywf9jl71] C:\DOCUME~1\default\LOCALS~1\Temp\lfpvqdpbe6g4.exe
O4 - HKCU\..\Run: [xmy6bsjtm95msu5iiw4x7yq5w3nt7yfjqck0vcvb260j6ei] C:\DOCUME~1\default\LOCALS~1\Temp\s0x1nv7p.exe
O4 - HKCU\..\Run: [egd6xz0rao3nbntm2yzfephypunf] C:\DOCUME~1\default\LOCALS~1\Temp\nzzrpu.exe
O4 - HKCU\..\Run: [nfq4zhkimxhet0ojwv7g2h5mp6nlkdt00gj] C:\DOCUME~1\default\LOCALS~1\Temp\p09n7sx0.exe
O4 - HKCU\..\Run: [pajhh6he1npjj2x4mhc03x68m1wmjbnkk] C:\DOCUME~1\default\LOCALS~1\Temp\x055924gkc8.exe
O4 - HKCU\..\Run: [vogtrm7dxwusxqziziaqkerlnx1zzjqo9w57hb0yiojvn1s] C:\DOCUME~1\default\LOCALS~1\Temp\xmv9siloa6wa.exe
O4 - HKCU\..\Run: [r7eih1rv3msd6] C:\DOCUME~1\default\LOCALS~1\Temp\l7v5dsmapp4ir.exe
O4 - HKCU\..\Run: [f4v0vbgth0zcspglc4eo6tmo3wi0q6f9e5envnufcvlru2w8g] C:\DOCUME~1\default\LOCALS~1\Temp\j8afkn9n.exe
O4 - HKCU\..\Run: [rsp1hr7qkv57zub8vletdjhcxqclgks6i9tn] C:\DOCUME~1\default\LOCALS~1\Temp\m78o41eq.exe
O4 - HKCU\..\Run: [zfl4bo0pmvo18] C:\DOCUME~1\default\LOCALS~1\Temp\wxikm8il194dq.exe
O4 - HKCU\..\Run: [gnwxtb7xdog3cttl8aug221r8vve9ovvdn35] C:\DOCUME~1\default\LOCALS~1\Temp\zpwqo6.exe
O4 - HKCU\..\Run: [sheik7f40mln] C:\DOCUME~1\default\LOCALS~1\Temp\vqp5muco.exe
O4 - HKCU\..\Run: [lit66vblbqbj604mr2xjufk4m3ngd6opjjb6rrnw3ylq6lu] C:\DOCUME~1\default\LOCALS~1\Temp\sqb6hlt7f5pxo.exe
O4 - HKCU\..\Run: [li5m1lzewi7kiqym9v709md8pv8lmi7ebbp7g54is] C:\DOCUME~1\default\LOCALS~1\Temp\zog4jx336.exe
O4 - HKCU\..\Run: [yu0811h9h2z0ny5br] C:\DOCUME~1\default\LOCALS~1\Temp\j4j4otgy4g.exe
O4 - HKCU\..\Run: [um9azocp8cv] C:\DOCUME~1\default\LOCALS~1\Temp\uocvy7s2jeb0d.exe
O4 - HKCU\..\Run: [c9wckugeg18sa] C:\DOCUME~1\default\LOCALS~1\Temp\ijkeveo.exe
O4 - HKCU\..\Run: [t8lb7if5f8oqilm4g7pxc3o9cs7hjvtp363ds181werpabk] C:\DOCUME~1\default\LOCALS~1\Temp\i0gyfd2.exe
O4 - HKCU\..\Run: [qw8bm0vza6cfhrvyxft4z88fwt] C:\DOCUME~1\default\LOCALS~1\Temp\otb8lyb.exe
O4 - HKCU\..\Run: [y3sw4n5a8uyogsz7dp2xkadbu0mklmalam] C:\DOCUME~1\default\LOCALS~1\Temp\o7b27ubud.exe
O4 - HKCU\..\Run: [zjibzd1yd] C:\DOCUME~1\default\LOCALS~1\Temp\rjd1pr555.exe
O4 - HKCU\..\Run: [qr1qtnysmfyrr88nt7cpp8nuhca0sh] C:\DOCUME~1\default\LOCALS~1\Temp\xjjzhk5.exe
O4 - HKCU\..\Run: [b91wont7l3b30f7ll0kj] C:\DOCUME~1\default\LOCALS~1\Temp\aw0pmx.exe
O4 - HKCU\..\Run: [qbsx3b37evmmeb0ffg1eo7pbk4nupqtb36g8y] C:\DOCUME~1\default\LOCALS~1\Temp\hfamuqtdl.exe
O4 - HKCU\..\Run: [p888fxbfsersxzt9] C:\DOCUME~1\default\LOCALS~1\Temp\sg45i8exd.exe
O4 - HKCU\..\Run: [cxteejxib7jq1dz2d76mjjvdk] C:\DOCUME~1\default\LOCALS~1\Temp\rhalk5dt0dy.exe
O4 - HKCU\..\Run: [ymm3bdoaepr] C:\DOCUME~1\default\LOCALS~1\Temp\bdrkml4xt.exe
O4 - HKCU\..\Run: [oifr8xvdgz6eecrjbxhdvmjzgyyud1ri5q1yk0y] C:\DOCUME~1\default\LOCALS~1\Temp\iv4mfe0p4mdhs.exe
O4 - HKCU\..\Run: [nk5dvnrsj8knokym] C:\DOCUME~1\default\LOCALS~1\Temp\sbwt9l.exe
O4 - HKCU\..\Run: [dhgqu9pky49to1fygojm81e9] C:\DOCUME~1\default\LOCALS~1\Temp\mqtkboe.exe
O4 - HKCU\..\Run: [whccgbl6lcsb86l2g10k410z0t4e3b36furcyc4j2] C:\DOCUME~1\default\LOCALS~1\Temp\iqeljxm1gb.exe
O4 - HKCU\..\Run: [ufny9a9i40fbpks0pkp] C:\DOCUME~1\default\LOCALS~1\Temp\jylzgvdfbk4.exe
O4 - HKCU\..\Run: [ow1fq95sxptwtowde8fkj33ywmvsau5rin] C:\DOCUME~1\default\LOCALS~1\Temp\wgwg6cqq.exe
O4 - HKCU\..\Run: [le9wcdyhz7zkob3m21ewu97y4g3ac2cek9] C:\DOCUME~1\default\LOCALS~1\Temp\pnzdvx8n.exe
O4 - HKCU\..\Run: [a4s0gdagzkdig32tgyu3p2dhuoa77hycz] C:\DOCUME~1\default\LOCALS~1\Temp\ypmsf4vl.exe
O4 - HKCU\..\Run: [fvb1759nn] C:\DOCUME~1\default\LOCALS~1\Temp\zdybvltx4q.exe
O4 - HKCU\..\Run: [ai587hp7he] C:\DOCUME~1\default\LOCALS~1\Temp\k0qrew.exe
O4 - HKCU\..\Run: [rghjvfdmsx] C:\DOCUME~1\default\LOCALS~1\Temp\xppvepjz.exe
O4 - HKCU\..\Run: [t5bldhdpu4m83e9jzb19urz2p814upmxyo41qk0u] C:\DOCUME~1\default\LOCALS~1\Temp\hwchnx.exe
O4 - HKCU\..\Run: [i2qg8asxq0161zacnobpxp4xx9och5850k7rcr] C:\DOCUME~1\default\LOCALS~1\Temp\xpblrl06gdmb.exe
O4 - HKCU\..\Run: [r2i0qm1n9mr58s2lnp8k63sryda314sou075imx] C:\DOCUME~1\default\LOCALS~1\Temp\qperq0i68hn9.exe
O4 - HKCU\..\Run: [vz22dqeembemltiha2g50ispuka] C:\DOCUME~1\default\LOCALS~1\Temp\lzge4q0.exe
O4 - HKCU\..\Run: [t1gtp1egj9] C:\DOCUME~1\default\LOCALS~1\Temp\kzpvpvs.exe
O4 - HKCU\..\Run: [fdpzkwjwc8o5w2rvvd547xu9a69d5daep79b46] C:\DOCUME~1\default\LOCALS~1\Temp\ej56hwb.exe
O4 - HKCU\..\Run: [be9ric2kxyfret0z4hqk8v6kc20gtr] C:\DOCUME~1\default\LOCALS~1\Temp\kw92kcq1k.exe
O4 - HKCU\..\Run: [b6naxpsa49bxjo19247u0i5hjvom6jm1gq125y4h7pyqbs] C:\DOCUME~1\default\LOCALS~1\Temp\lype2qt09p2zn.exe
O4 - HKCU\..\Run: [onhh0gbepnez2j5o01y981strgz9wrjttw3] C:\DOCUME~1\default\LOCALS~1\Temp\hlkrqic6.exe
O4 - HKCU\..\Run: [rlwxlzzgpz5pjfzktswcnqdga8zk1vizz8ziaag0o425z8bp] C:\DOCUME~1\default\LOCALS~1\Temp\g3xr2x4uoj39.exe
O4 - HKCU\..\Run: [qers91pmu441a2elqvpbqb1j7grdvpjqterh34lfh8t7] C:\DOCUME~1\default\LOCALS~1\Temp\p0wclrzeusi4.exe
O4 - HKCU\..\Run: [uhxfed1wbis] C:\DOCUME~1\default\LOCALS~1\Temp\eu5tqwxr7i9v.exe
O4 - HKCU\..\Run: [q011ko7298jlh] C:\DOCUME~1\default\LOCALS~1\Temp\mdsqp36xq.exe
O4 - HKCU\..\Run: [wr53dj3kg9od7s6xlksr5xutaaibyaumdoi697j] C:\DOCUME~1\default\LOCALS~1\Temp\wa08xh69d4q.exe
O4 - HKCU\..\Run: [z2w519us25k7vaprp1] C:\DOCUME~1\default\LOCALS~1\Temp\fmtxw5bgt.exe
O4 - HKCU\..\Run: [d8iox4eor4o] C:\DOCUME~1\default\LOCALS~1\Temp\vf9if3a.exe
O4 - HKCU\..\Run: [rsu3gaqkrql2phrsw76keu5ucpjbh289kmn78cqt] C:\DOCUME~1\default\LOCALS~1\Temp\btc91oew77g.exe
O4 - HKCU\..\Run: [mkydnflvahu1m2uvn9crfb] C:\DOCUME~1\default\LOCALS~1\Temp\xsjw28.exe
O4 - HKCU\..\Run: [otv9s3xvw6ecc8a5gpvwkmyikyp5xby0x7q7ek] C:\DOCUME~1\default\LOCALS~1\Temp\acaf9mi9.exe
O4 - HKCU\..\Run: [dqza0y2gs] C:\DOCUME~1\default\LOCALS~1\Temp\ra76spfa6.exe
O4 - HKCU\..\Run: [j386izmveplj77p8j1czf1hvoroe9jyhqgx1tcr857y0q] C:\DOCUME~1\default\LOCALS~1\Temp\lcom34.exe
O4 - HKCU\..\Run: [i84r2q6q3zoo] C:\DOCUME~1\default\LOCALS~1\Temp\c77z7qssd.exe
O4 - HKCU\..\Run: [usrejdfah6vvgm] C:\DOCUME~1\default\LOCALS~1\Temp\tfenvq.exe
O4 - HKCU\..\Run: [ctbmjzig241ptmgb606g] C:\DOCUME~1\default\LOCALS~1\Temp\sxk3x68p.exe
O4 - HKCU\..\Run: [t71vb9o69g78q6o05280hfdun5ah6] C:\DOCUME~1\default\LOCALS~1\Temp\qq3fm0.exe
O4 - HKCU\..\Run: [hq9d4c5prv23ix0o] C:\DOCUME~1\default\LOCALS~1\Temp\z43q9pa0.exe
O4 - HKCU\..\Run: [xxxqpobkc66c7ixtzz9zh49b3hi] C:\DOCUME~1\default\LOCALS~1\Temp\as1ob2r.exe
O4 - HKCU\..\Run: [w77ccle0fq9f1kefvdsxg] C:\DOCUME~1\default\LOCALS~1\Temp\d11yo0mzcu.exe
O4 - HKCU\..\Run: [x3r04shtgql1] C:\DOCUME~1\default\LOCALS~1\Temp\aa0yi58.exe
O4 - HKCU\..\Run: [w6w90qae2] C:\DOCUME~1\default\LOCALS~1\Temp\d7c8u2f.exe
O4 - HKCU\..\Run: [w2qoti209adtzl9u6ys6b1eg47thu7xwunta5] C:\DOCUME~1\default\LOCALS~1\Temp\favtli5szb42y.exe
O4 - HKCU\..\Run: [om7mn38ez3qo] C:\DOCUME~1\default\LOCALS~1\Temp\r1gdv361798.exe
O4 - HKCU\..\Run: [k480oabqk] C:\DOCUME~1\default\LOCALS~1\Temp\jv6ee1gj8d4kc.exe
O4 - HKCU\..\Run: [v3kvs6z1hnx1b3s24e3aq] C:\DOCUME~1\default\LOCALS~1\Temp\pnc1lul30.exe
O4 - HKCU\..\Run: [ecbuiw2d0joimekk0omk8scd4ub8gf0juz2fjhcr2j] C:\DOCUME~1\default\LOCALS~1\Temp\iwfgcgyyq.exe
O4 - HKCU\..\Run: [likzb2xg8bd4abcgg7x11igg3jfe83uovu9xflyc28mr] C:\DOCUME~1\default\LOCALS~1\Temp\t5lo06qmzlcy4.exe
O4 - HKCU\..\Run: [vow8qspb1cyhwknrl6r7q4vg] C:\DOCUME~1\default\LOCALS~1\Temp\y4fl6gzcds.exe
O4 - HKCU\..\Run: [mi3xf3z5kk5yyq5n0n4hptq9ppvvub] C:\DOCUME~1\default\LOCALS~1\Temp\j5vf1xykwa.exe
O4 - HKCU\..\Run: [gbyly8t7q5vk] C:\DOCUME~1\default\LOCALS~1\Temp\vcf58o9d.exe
O4 - HKCU\..\Run: [ubewcn5ec0ej2jchb6joyfqg7vjnb9sq1] C:\DOCUME~1\default\LOCALS~1\Temp\ytme8g0.exe
O4 - HKCU\..\Run: [r8f7pqiyr7p9l41cjrnw0xqsgbsrryhahja613plr] C:\DOCUME~1\default\LOCALS~1\Temp\uevqhw.exe
O4 - HKCU\..\Run: [lyicymgrvan007bv71xkf9y7hg3aju5h5a9eew1ls2] C:\DOCUME~1\default\LOCALS~1\Temp\xbo0ta.exe
O4 - HKCU\..\Run: [xogm715of411f8sel4g39bdaa06] C:\DOCUME~1\default\LOCALS~1\Temp\dhaj84a.exe
O4 - HKCU\..\Run: [roq8np0jgcx6wzsqd9qp0borvkubo0] C:\DOCUME~1\default\LOCALS~1\Temp\pp6cedyi2.exe
O4 - HKCU\..\Run: [psxsor44lk9hyv21a6gpaxql4] C:\DOCUME~1\default\LOCALS~1\Temp\slgig9.exe
O4 - HKCU\..\Run: [ci4ys6y9xacd7jgig8sq] C:\DOCUME~1\default\LOCALS~1\Temp\gr906ws4w913.exe
O4 - HKCU\..\Run: [ovjc2uah06g1qz6nv3c] C:\DOCUME~1\default\LOCALS~1\Temp\arv6m4t.exe
O4 - HKCU\..\Run: [iu8b6i98gdf] C:\DOCUME~1\default\LOCALS~1\Temp\x8rq637.exe
O4 - HKCU\..\Run: [pkkfui2pvepxd6hlbo2un2eefvxbxxxosv1] C:\DOCUME~1\default\LOCALS~1\Temp\t5jnq89qfmuk.exe
O4 - HKCU\..\Run: [ltyois6o5f09ryhzt6026f6xi611bqfy5x2l9fcp] C:\DOCUME~1\default\LOCALS~1\Temp\vewyn4wrwb.exe
O4 - HKCU\..\Run: [agjzf6eli] C:\DOCUME~1\default\LOCALS~1\Temp\wkbuxk7seiv.exe
O4 - HKCU\..\Run: [a4pxyswxukswh00qjtqbejlgovrw62lr9spcz2fn3dakhk2] C:\DOCUME~1\default\LOCALS~1\Temp\is7n3t.exe
O4 - HKCU\..\Run: [xndhcwyxz39qvgpyrz62a93lpn9d1zh7x55] C:\DOCUME~1\default\LOCALS~1\Temp\vyeok9stncb8.exe
O4 - HKCU\..\Run: [bnzn58rm5eo] C:\DOCUME~1\default\LOCALS~1\Temp\g2rd9h8em1h.exe
O4 - HKCU\..\Run: [yqbhx34l41awq3ygvhsepykev6aalerv1ic27x59] C:\DOCUME~1\default\LOCALS~1\Temp\ii81cxgvlcd.exe
O4 - HKCU\..\Run: [zy53iw8yqu3sodw1] C:\DOCUME~1\default\LOCALS~1\Temp\md4mivdyxm51.exe
O4 - HKCU\..\Run: [yb5e860mjk5m5iqehzdufak5s8xp55c1ear0k8ikgkroi3p] C:\DOCUME~1\default\LOCALS~1\Temp\lo1qldmwbvuc.exe
O4 - HKCU\..\Run: [at8sra8lzfuj5hku51x8b79y7i4xjgowhtg] C:\DOCUME~1\default\LOCALS~1\Temp\g70llhrx.exe
O4 - HKCU\..\Run: [lkblvuymrsdopxk1] C:\DOCUME~1\default\LOCALS~1\Temp\eii1z9mzb12dk.exe
O4 - HKCU\..\Run: [cqcyp2j62jfj7rbdqs4a9pvr2nytx] C:\DOCUME~1\default\LOCALS~1\Temp\lhe3sliamz.exe
O4 - HKCU\..\Run: [gkmh7jou6mkbnzmz686g4v63vpwwh4j9oed9q] C:\DOCUME~1\default\LOCALS~1\Temp\qhevjrjefu6.exe
O4 - HKCU\..\Run: [hvku2v05qc16wwtnxq42lc1] C:\DOCUME~1\default\LOCALS~1\Temp\t60ayp2.exe
O4 - HKCU\..\Run: [qhejw1hfq6nw3cpg71] C:\DOCUME~1\default\LOCALS~1\Temp\gvx5iks.exe
O4 - HKCU\..\Run: [c2n2ricno5] C:\DOCUME~1\default\LOCALS~1\Temp\sn7tmasu.exe
O4 - HKCU\..\Run: [sa0enxfgrzs29drwqdmedwyvd7b93gyd7h3jckfo25m6fqx] C:\DOCUME~1\default\LOCALS~1\Temp\p8jrpenr6ga.exe
O4 - HKCU\..\Run: [q3husdd1eojdlimhg74k9y] C:\DOCUME~1\default\LOCALS~1\Temp\iybipdfpogwp.exe
O4 - HKCU\..\Run: [m1bdim6f5eeftyiyvved5ewnraqymqjlowd] C:\DOCUME~1\default\LOCALS~1\Temp\tx8kxgcoka8z.exe
O4 - HKCU\..\Run: [pvh1x2itcdxhhonkvo4fboc1] C:\DOCUME~1\default\LOCALS~1\Temp\og7b76q4.exe
O4 - HKCU\..\Run: [ragq1xx8isj41rbyaaz] C:\DOCUME~1\default\LOCALS~1\Temp\ylsnk5qw7nac5.exe
O4 - HKCU\..\Run: [ns7j8cgifm67h0yr7k8kfm6swnsdql6pmphk] C:\DOCUME~1\default\LOCALS~1\Temp\e1ra7x.exe
O4 - HKCU\..\Run: [i1rlofkf7nwlyuwwhts5g7qvvjwvytlzi3k1ha5d0t7bgq] C:\DOCUME~1\default\LOCALS~1\Temp\seo41owmavkdm.exe
O4 - HKCU\..\Run: [x9qz4xbir32pxp86hlvgd] C:\DOCUME~1\default\LOCALS~1\Temp\u4kfykjn8k7.exe
O4 - HKCU\..\Run: [bjw59trtsz160mdp3enny6clds2el5zetcleegtc6y9r56j] C:\DOCUME~1\default\LOCALS~1\Temp\b2sb700aa.exe
O4 - HKCU\..\Run: [nhirm7mzs1rtnyhif3o7qegm3wurtxia0juo4uwidpu994h] C:\DOCUME~1\default\LOCALS~1\Temp\i1ow0cwllsqx2.exe
O4 - HKCU\..\Run: [f6d2mmsvltclio51o4gwtj3o009hqjmhkpooyy] C:\DOCUME~1\default\LOCALS~1\Temp\mnuddn6q.exe
O4 - HKCU\..\Run: [esmf3fdy03r5soasysv81] C:\DOCUME~1\default\LOCALS~1\Temp\pknn61dt.exe
O4 - HKCU\..\Run: [bu8zk8tim2lns4y51xj38j7vqoi5709vxfif8] C:\DOCUME~1\default\LOCALS~1\Temp\v48ttn8mvd1.exe
O4 - HKCU\..\Run: [x50asfn9oe8w6f5p9jjjvwrpg575i6jfrk] C:\DOCUME~1\default\LOCALS~1\Temp\m25kcqmnspnr.exe
O4 - HKCU\..\Run: [shq8k3bl8yumwrql] C:\DOCUME~1\default\LOCALS~1\Temp\rim3unxsgi72.exe
O4 - HKCU\..\Run: [u8nxi56xnkyt5wnkalpqfbh2z6fcwgut0uny7qgtbqqx9] C:\DOCUME~1\default\LOCALS~1\Temp\fty5acpvs.exe
O4 - HKCU\..\Run: [kofevi11rww3xg0] C:\DOCUME~1\default\LOCALS~1\Temp\sg0qpxcoz2nsz.exe
O4 - HKCU\..\Run: [ut4juqoxr03vt9gn4z7bv3ib2fbksepak6y] C:\DOCUME~1\default\LOCALS~1\Temp\tujpy81p.exe
O4 - HKCU\..\Run: [kt6uu4blv32z67i6a5giaucsiy08r7mn5x] C:\DOCUME~1\default\LOCALS~1\Temp\cagqhb.exe
O4 - HKCU\..\Run: [zwy1ifofjkjo31idmruad7axwl287qgh9rzvnl8e1t4sp5t3k] C:\DOCUME~1\default\LOCALS~1\Temp\dw208ygf.exe
O4 - HKCU\..\Run: [nn85jpsrehcqa2zur106r84aifef63] C:\DOCUME~1\default\LOCALS~1\Temp\nbftge0v70k.exe
O4 - HKCU\..\Run: [ps8zg8aoh1442lufn31lmwtl0rnialmo3p344km9fnx89dh] C:\DOCUME~1\default\LOCALS~1\Temp\nadpgvxw.exe
O4 - HKCU\..\Run: [kizoalkng5zjrcagwro4ajc6ewt3p3xrl355o1hhj16o] C:\DOCUME~1\default\LOCALS~1\Temp\ze93650l50uyn.exe
O4 - HKCU\..\Run: [a5bnd40qr79rb3dpgkmk2bgx] C:\DOCUME~1\default\LOCALS~1\Temp\uf8wre2lm9jya.exe
O4 - HKCU\..\Run: [fm50yobptacez0o26viqr54zhlw8dytga7fg4] C:\DOCUME~1\default\LOCALS~1\Temp\p6smscphi7a4.exe
O4 - HKCU\..\Run: [ntkhvlup4u] C:\DOCUME~1\default\LOCALS~1\Temp\jvi05if7.exe
O4 - HKCU\..\Run: [f2tgtu4rj6n6cx51troc] C:\DOCUME~1\default\LOCALS~1\Temp\tcnu88.exe
O4 - HKCU\..\Run: [fpeodd4lencdwprlvyk23wh7fwacmw] C:\DOCUME~1\default\LOCALS~1\Temp\ecsapmk.exe
O4 - HKCU\..\Run: [puqe8x6vl8gz3o1sreoebf8116smt4] C:\DOCUME~1\default\LOCALS~1\Temp\k6c8t3a88.exe
O4 - HKCU\..\Run: [c7ytxppqw1b7iryar2p85adu] C:\DOCUME~1\default\LOCALS~1\Temp\p5jfzut.exe
O4 - HKCU\..\Run: [u5q17eombj83] C:\DOCUME~1\default\LOCALS~1\Temp\vgt1mo3htow.exe
O4 - HKCU\..\Run: [oj5hwrpxp2uck1ihx2eve6b9gtfh] C:\DOCUME~1\default\LOCALS~1\Temp\yfixht2whrrgj.exe
O4 - HKCU\..\Run: [wpu674we3huvyri2r4291t7lw18rwz3jt44wlrgldny6ep5aq] C:\DOCUME~1\default\LOCALS~1\Temp\yzzex2dio5j0.exe
O4 - HKCU\..\Run: [mbbxeck090o2sqz0nasj4sgo3xad] C:\DOCUME~1\default\LOCALS~1\Temp\qt6h7b6klyh.exe
O4 - HKCU\..\Run: [bo37mg6eeoknjt7aq05sym] C:\DOCUME~1\default\LOCALS~1\Temp\oqddaifhnl.exe
O4 - HKCU\..\Run: [fw204o3l5tv8] C:\DOCUME~1\default\LOCALS~1\Temp\xs2jhnl.exe
O4 - HKCU\..\Run: [d50rylz8ci0q64dqxa798u07uxgue1a2h5ximb] C:\DOCUME~1\default\LOCALS~1\Temp\ygdgm7rgqgs.exe
O4 - HKCU\..\Run: [k03bjzqqxgralk6kd] C:\DOCUME~1\default\LOCALS~1\Temp\ap8qexvt7t.exe
O4 - HKCU\..\Run: [s0uvputzv9wq4cgtxf148mzeuj8mc4] C:\DOCUME~1\default\LOCALS~1\Temp\ftpx1di6k.exe
O4 - HKCU\..\Run: [b1tw7vqxndto6w9] C:\DOCUME~1\default\LOCALS~1\Temp\iazocj0v.exe
O4 - HKCU\..\Run: [cqyj88cn6426g80griu0ed5jwz0tn43jo39qqn6ow] C:\DOCUME~1\default\LOCALS~1\Temp\f3ke3fwszz.exe
O4 - HKCU\..\Run: [v4m7cukygs84iurlk8noep1ra03q3ehwenmxjdv5pux2dtryrs] C:\DOCUME~1\default\LOCALS~1\Temp\ytxbnox.exe
O4 - HKCU\..\Run: [yp9mtqt7aw8r3gx7db1r7lpew04jlkilgqhi4luf30tgl] C:\DOCUME~1\default\LOCALS~1\Temp\qsf8708iz1tj.exe
O4 - HKCU\..\Run: [ns8afq3zaohyviv3j31ue8ocmbq1u2nzzmnuh9d] C:\DOCUME~1\default\LOCALS~1\Temp\ql4muf8g.exe
O4 - HKCU\..\Run: [zeurovq3uvhd6yrg41cp35579coc0dhn025soknrqg9px] C:\DOCUME~1\default\LOCALS~1\Temp\eznehm32ug28x.exe
O4 - HKCU\..\Run: [ycm6rqj58mp7wwo37] C:\DOCUME~1\default\LOCALS~1\Temp\lyqwlu.exe
O4 - HKCU\..\Run: [gs0grv92nkle2786eumypyf1scsz5nmf] C:\DOCUME~1\default\LOCALS~1\Temp\c3mfxvti.exe
O4 - HKCU\..\Run: [cmay5rnk83lo3ijcxe] C:\DOCUME~1\default\LOCALS~1\Temp\vf2wlgeu7.exe
O4 - HKCU\..\Run: [eukyblyjkr89mgvvuw0fp2] C:\DOCUME~1\default\LOCALS~1\Temp\s7c17h96wbkhe.exe
O4 - HKCU\..\Run: [fcc4wl9llijetalvt9kqwgl2cgzu191sa6ad09vx3sznp0r] C:\DOCUME~1\default\LOCALS~1\Temp\fb2n036ud6.exe
O4 - HKCU\..\Run: [c9yfy4s2ux4v85b5zpqrfb1wtacz231u1] C:\DOCUME~1\default\LOCALS~1\Temp\cu4gv1.exe
O4 - HKCU\..\Run: [ba0zzt8cqlc1xg3573i41yltryjomkghl3keqfsj3mwgbxnatm] C:\DOCUME~1\default\LOCALS~1\Temp\e3o75cspi.exe
O4 - HKCU\..\Run: [a8w34adet9gve3kh67fmu68hc5hzsu4bw6yaufy408tfq68h96] C:\DOCUME~1\default\LOCALS~1\Temp\e87avtx3.exe
O4 - HKCU\..\Run: [d130m08epmwaehsr0v9al0cm1cut34p2vzae8a05ptdgfetsrg] C:\DOCUME~1\default\LOCALS~1\Temp\pov563i4wx.exe
O4 - HKCU\..\Run: [pzchm8dyl8o8o9vbpomu94014inmc44nc7xy1i1kgjmo1s] C:\DOCUME~1\default\LOCALS~1\Temp\kkyyxzte.exe
O4 - HKCU\..\Run: [uxynsmxxbf5r00020ngc3p097fz1yes90ivona3fufkoqaj] C:\DOCUME~1\default\LOCALS~1\Temp\v53vnam3dv5.exe
O4 - HKCU\..\Run: [cf5ys78a0z9jqjx2tig9q2n2sfyxgc] C:\DOCUME~1\default\LOCALS~1\Temp\h0dx2ml4psvfb.exe
O4 - HKCU\..\Run: [fi4qftqt1zveyovhpwcn9s] C:\DOCUME~1\default\LOCALS~1\Temp\wivqm26avfmsp.exe
O4 - HKCU\..\Run: [lxw4991umt8zlloh5z1e8awayyd1wu] C:\DOCUME~1\default\LOCALS~1\Temp\dlhq3w9g.exe
O4 - HKCU\..\Run: [xchyqeugnp9p8dhc23] C:\DOCUME~1\default\LOCALS~1\Temp\nbt0gxx.exe
O4 - HKCU\..\Run: [c79i7beehy4du] C:\DOCUME~1\default\LOCALS~1\Temp\gmswpnfoc9o5.exe
O4 - HKCU\..\Run: [bz3pq4mz1pea2c7x84mp3tzho9aik4883p7pxqhp88sbmx21] C:\DOCUME~1\default\LOCALS~1\Temp\svgtjr4bvdve.exe
O4 - HKCU\..\Run: [anvsxxc24pmlqf9gpkbjvqr8qwlbmat9sspukslcykuisj8t] C:\DOCUME~1\default\LOCALS~1\Temp\wgpybk31u.exe
O4 - HKCU\..\Run: [x48dqmioqyc8yv6u0087to8] C:\DOCUME~1\default\LOCALS~1\Temp\tjwsf9.exe
O4 - HKCU\..\Run: [ons6787erk32jz93k0dvl2ogkq98vw2823b7uzbrbbg2uzw] C:\DOCUME~1\default\LOCALS~1\Temp\gnme8v41l3m.exe
O4 - HKCU\..\Run: [g1ia49mphbn4ww3akt8q54hekdx2kx6xi5n34ws] C:\DOCUME~1\default\LOCALS~1\Temp\qp3dxh.exe
O4 - HKCU\..\Run: [j7rbpnarxvuuysihf31hehang7kqhud3h6b] C:\DOCUME~1\default\LOCALS~1\Temp\d9c1ru2qbgti.exe
O4 - HKCU\..\Run: [osk9u7bz7lzrfv5819lr618piai50] C:\DOCUME~1\default\LOCALS~1\Temp\yrhzhlqzf.exe
O4 - HKCU\..\Run: [obzb4l8a3g0dqzltjauykjuc7zj8yq40h92nostz] C:\DOCUME~1\default\LOCALS~1\Temp\ys9zw2j.exe
O4 - HKCU\..\Run: [goscsgobpymi233qut7sghknevoa4ng3n3qfw3cp] C:\DOCUME~1\default\LOCALS~1\Temp\tta6coqr.exe
O4 - HKCU\..\Run: [nny8rrvq1j518qrkrk0hwhsttc3wjf9pdi5l32nhvnmz6y0d] C:\DOCUME~1\default\LOCALS~1\Temp\mptz87.exe
O4 - HKCU\..\Run: [tdoh3ait52lrnysza06dg1a] C:\DOCUME~1\default\LOCALS~1\Temp\myrhhwdhmyt.exe
O4 - HKCU\..\Run: [myqo2bxpcyy37a6e0r01rasrdk6rwy3k42t] C:\DOCUME~1\default\LOCALS~1\Temp\ih8mjka3.exe
O4 - HKCU\..\Run: [da9wgvwwppj6d] C:\DOCUME~1\default\LOCALS~1\Temp\xxe611.exe
O4 - HKCU\..\Run: [hjdecz4uyhw] C:\DOCUME~1\default\LOCALS~1\Temp\qeqnjg2mn.exe
O4 - HKCU\..\Run: [wfgojzogg5ygxw52jy0wdr1s5egn0jl96ny1pmtezomu] C:\DOCUME~1\default\LOCALS~1\Temp\q3n27e2.exe
O4 - HKCU\..\Run: [jae3vb1tm0dpmz0v6pob19qhmv5lu0vk01lzioiz8xhmquk17] C:\DOCUME~1\default\LOCALS~1\Temp\qii3ixl.exe
O4 - HKCU\..\Run: [aw0rr3gjncdze08] C:\DOCUME~1\default\LOCALS~1\Temp\sjbzhepo5.exe
O4 - HKCU\..\Run: [fuy1lkguuklaalk] C:\DOCUME~1\default\LOCALS~1\Temp\ivrg5ga0xv.exe
O4 - HKCU\..\Run: [tm44nuro45xw7gq5ixwif2dbus5pyfeoit00jje2442dy] C:\DOCUME~1\default\LOCALS~1\Temp\vdhftxraiyoj.exe
O4 - HKCU\..\Run: [mn9c5qvj5] C:\DOCUME~1\default\LOCALS~1\Temp\jlkk3p.exe
O4 - HKCU\..\Run: [o4012xp85laj92b6u4l596f82hn] C:\DOCUME~1\default\LOCALS~1\Temp\heckrv7.exe
O4 - HKCU\..\Run: [uufq2e6muqaw6cm1snz6wgve9uzf3e5fm6n39a2wv6x] C:\DOCUME~1\default\LOCALS~1\Temp\b3ivmsfbh5f.exe
O4 - HKCU\..\Run: [mn5mhej49gkupmqdo47ap62vajg51rl] C:\DOCUME~1\default\LOCALS~1\Temp\tmjw6ntp6px.exe
O4 - HKCU\..\Run: [izsyndq0bwmbtxpvy67zmuawkmjss] C:\DOCUME~1\default\LOCALS~1\Temp\dnuog3.exe
O4 - HKCU\..\Run: [jozair83as8ywbsrqa4rpm2hujkmewe841kgi7mv4eqh51mmpb] C:\DOCUME~1\default\LOCALS~1\Temp\usk7inf15h.exe
O4 - HKCU\..\Run: [pxc72yxej0gn8c9pw8ckyur] C:\DOCUME~1\default\LOCALS~1\Temp\i1qfnd.exe
O4 - HKCU\..\Run: [p1k5w0lur5qio1sx2wytirmxaxtnxb04] C:\DOCUME~1\default\LOCALS~1\Temp\m7j98wr.exe
O4 - HKCU\..\Run: [zqqbgtoid9] C:\DOCUME~1\default\LOCALS~1\Temp\aquyatgq2.exe
O4 - HKCU\..\Run: [ubwwhd8tsvhwl8i45zxlb574xf9b] C:\DOCUME~1\default\LOCALS~1\Temp\v534c3i1.exe
O4 - HKCU\..\Run: [wnrw6i6nu7vc7zjnvlz4zejc9g3p7z2y1aw3exs5q3cogr4] C:\DOCUME~1\default\LOCALS~1\Temp\xbg1yw.exe
O4 - HKCU\..\Run: [qtsybfaxl0srze23y] C:\DOCUME~1\default\LOCALS~1\Temp\z7nwtiq9xrai.exe
O4 - HKCU\..\Run: [hfse4mxz52xu1rqona4m99201bl74vu3p9mdfmin] C:\DOCUME~1\default\LOCALS~1\Temp\or4wagpn.exe
O4 - HKCU\..\Run: [vrxu8kj1gjowmcsbbh5uikgoaf5b142o125qs7i] C:\DOCUME~1\default\LOCALS~1\Temp\q8kepsdb.exe
O4 - HKCU\..\Run: [t99p8fzcj68t8wfp6hk3x3bx] C:\DOCUME~1\default\LOCALS~1\Temp\f64uae.exe
O4 - HKCU\..\Run: [verahqz4d4cg1qq] C:\DOCUME~1\default\LOCALS~1\Temp\gtt8fws.exe
O4 - HKCU\..\Run: [wual6qscu3idzo3mn9fehpo] C:\DOCUME~1\default\LOCALS~1\Temp\cyljpxia51i3.exe
O4 - HKCU\..\Run: [sjqw7ucbrudoumgrhnr4qvrru0gh6fiwfbnodlc1pvu1h54] C:\DOCUME~1\default\LOCALS~1\Temp\dc8heq.exe
O4 - HKCU\..\Run: [feovh2zty3lrz26sp2nhxvov5om53ico5aoyz] C:\DOCUME~1\default\LOCALS~1\Temp\mu8d07oy90.exe
O4 - HKCU\..\Run: [uhxbd3hqnhahl4j78yvioyzhgis2jv6] C:\DOCUME~1\default\LOCALS~1\Temp\lskfiiqw4w.exe
O4 - HKCU\..\Run: [jfnxny8cvkjwi7nuf1di] C:\DOCUME~1\default\LOCALS~1\Temp\w3wwh7287m.exe
O4 - HKCU\..\Run: [tbd8t4g2gnmg9vial] C:\DOCUME~1\default\LOCALS~1\Temp\cz41zm9ms.exe
O4 - HKCU\..\Run: [navos0a95ix0jy9t3] C:\DOCUME~1\default\LOCALS~1\Temp\sbxfrkga5r9st.exe
O4 - HKCU\..\Run: [t84hnaue8r86] C:\DOCUME~1\default\LOCALS~1\Temp\iy0y5jztogpdr.exe
O4 - HKCU\..\Run: [nxjqzjktqf8kksaw5pmf8x07p132] C:\DOCUME~1\default\LOCALS~1\Temp\p3172qil.exe
O4 - HKCU\..\Run: [jalwej5zwtk3e5qdrwlwqcf] C:\DOCUME~1\default\LOCALS~1\Temp\vvvw7tawt5ic.exe
O4 - HKCU\..\Run: [jhex30r5um9ye7n63h2bi8] C:\DOCUME~1\default\LOCALS~1\Temp\y2dnust.exe
O4 - HKCU\..\Run: [pa6pcbqhdfcto2pzu4a3fe9befo6j720ikc85ale7p9t] C:\DOCUME~1\default\LOCALS~1\Temp\zfw1o8wmrdpnx.exe
O4 - HKCU\..\Run: [zetyvupzgi1katd1rm31g] C:\DOCUME~1\default\LOCALS~1\Temp\mj9qdyq.exe
O4 - HKCU\..\Run: [vgrqism5cnqymzp5ahfbzkvei2536di7up8btfcn] C:\DOCUME~1\default\LOCALS~1\Temp\nm0nj7uio.exe
O4 - HKCU\..\Run: [kmq60xjlbcdpuapvdaevfgxgfm8gmehh] C:\DOCUME~1\default\LOCALS~1\Temp\g88leg.exe
O4 - HKCU\..\Run: [rfx3343y05octi7xyrvggxkmibh69ij698] C:\DOCUME~1\default\LOCALS~1\Temp\s1kwiphw0z.exe
O4 - HKCU\..\Run: [afidn6w30mw411m9g36oxnvta34cande3gso5ln6g7lg3b9e] C:\DOCUME~1\default\LOCALS~1\Temp\wr0othxu.exe
O4 - HKCU\..\Run: [o8ntr415s3n67c2npznndiid9k91v8ixlef65s518z112s9] C:\DOCUME~1\default\LOCALS~1\Temp\v8z68t4i.exe
O4 - HKCU\..\Run: [lunophzhd5xxd00g4eqtl] C:\DOCUME~1\default\LOCALS~1\Temp\cbj4lz.exe
O4 - HKCU\..\Run: [bh8d5wtta3x8bh7pvj19rz24v9kvngn8nb9hac] C:\DOCUME~1\default\LOCALS~1\Temp\bfdabiev.exe
O4 - HKCU\..\Run: [axq6ns02ns87] C:\DOCUME~1\default\LOCALS~1\Temp\e1qyre.exe
O4 - HKCU\..\Run: [o3d099q34tvs4j5ybmbdx2ci9u8ynwcj9y77nqj3u3] C:\DOCUME~1\default\LOCALS~1\Temp\eng2au5.exe
O4 - HKCU\..\Run: [u9qmgcbx247zvyoo8kqyk124qzxcj7b2g3n8w4146] C:\DOCUME~1\default\LOCALS~1\Temp\entieqr7px.exe
O4 - HKCU\..\Run: [o8358cncx67idzuyb08z8jwpopm2hlfx5z5mwfcbk] C:\DOCUME~1\default\LOCALS~1\Temp\l25pz29h4.exe
O4 - HKCU\..\Run: [i123r0uyhg7ckuneto2z68g8qmm35ixa268o02p] C:\DOCUME~1\default\LOCALS~1\Temp\rrtrz3z7j.exe
O4 - HKCU\..\Run: [nwgxzsemc70ad18g2dbqk3ua3os6u85m2arxuqhdedmvvn] C:\DOCUME~1\default\LOCALS~1\Temp\g20uqcss.exe
O4 - HKCU\..\Run: [awabdlgxep8006vdmfebleepuvhszz0ge3499838] C:\DOCUME~1\default\LOCALS~1\Temp\k7cy68g.exe
O4 - HKCU\..\Run: [xch20nbe5d6b5u6v1vnqio20sacvpklmrayrm7nd1] C:\DOCUME~1\default\LOCALS~1\Temp\r0ml1mt.exe
O4 - HKCU\..\Run: [la53lonkqrd9j] C:\DOCUME~1\default\LOCALS~1\Temp\mjwzaqdf2iszm.exe
O4 - HKCU\..\Run: [eu0158o5u03nvsm6dhmhy8rfisufkr6g362oov1rpn05qymmh] C:\DOCUME~1\default\LOCALS~1\Temp\ddluvl9i.exe
O4 - HKCU\..\Run: [ixbaalrnw4t8vc7znt0vgwyvw65g2wkm] C:\DOCUME~1\default\LOCALS~1\Temp\l5e1yjphehrh.exe
O4 - HKCU\..\Run: [f2pmjcv2z5gitxe9] C:\DOCUME~1\default\LOCALS~1\Temp\ztk5h9q.exe
O4 - HKCU\..\Run: [nyfimevbacogyotr4yquh4ng] C:\DOCUME~1\default\LOCALS~1\Temp\w3c5uqj627s7o.exe
O4 - HKCU\..\Run: [sa958bkf7jw1esm1x] C:\DOCUME~1\default\LOCALS~1\Temp\j2po5cdwe.exe
O4 - HKCU\..\Run: [kwytegcjcvlrhomfokq2sxd] C:\DOCUME~1\default\LOCALS~1\Temp\gx5uccugqkz4.exe
O4 - HKCU\..\Run: [vi1xs8p80trfqbaevzb07la8qfn3bn23gjxn36bih] C:\DOCUME~1\default\LOCALS~1\Temp\i07hvwsiccuac.exe
O4 - HKCU\..\Run: [g43kdtzuxhbbadxtun0b7z754at66fbr0x373u81lt9] C:\DOCUME~1\default\LOCALS~1\Temp\eocxgel8f.exe
O4 - HKCU\..\Run: [xc8zkr92y081uf7ydaht4eoid4kgbbl3vy7fxzd0a2wnm2ed] C:\DOCUME~1\default\LOCALS~1\Temp\k9a1bep8f.exe
O4 - HKCU\..\Run: [ddhl21r6uczpb2sy4ul34rl1jgy] C:\DOCUME~1\default\LOCALS~1\Temp\s1kv7q8cf3.exe
O4 - HKCU\..\Run: [r7a8s6sf49] C:\DOCUME~1\default\LOCALS~1\Temp\u1yqls.exe
O4 - HKCU\..\Run: [ihbft4dgv7roujohobn1obq9vzhev48hhj5r] C:\DOCUME~1\default\LOCALS~1\Temp\ltyrkk8u9v7.exe
O4 - HKCU\..\Run: [u6xyh80vzjy741ioq28selvn8cbmydxg00qhu0qvy] C:\DOCUME~1\default\LOCALS~1\Temp\vm590d.exe
O4 - HKCU\..\Run: [aliknfouh6dfs8jqaw2p3hdrnwmwmjxmf5b5eh7w] C:\DOCUME~1\default\LOCALS~1\Temp\wyqow8.exe
O4 - HKCU\..\Run: [p8mi618ey8z7dmj2iahl] C:\DOCUME~1\default\LOCALS~1\Temp\e4jl5gu.exe
O4 - HKCU\..\Run: [j578ndogcb8thx50p] C:\DOCUME~1\default\LOCALS~1\Temp\zh9ysz0dic.exe
O4 - HKCU\..\Run: [q30ma5eva9x49fx5rf79v] C:\DOCUME~1\default\LOCALS~1\Temp\bwd75c2x.exe
O4 - HKCU\..\Run: [grumqk2ehgdczz] C:\DOCUME~1\default\LOCALS~1\Temp\yi9ekf.exe
O4 - HKCU\..\Run: [dzf8ya1axi67] C:\DOCUME~1\default\LOCALS~1\Temp\mrqmy5nz5m9d.exe
O4 - HKCU\..\Run: [kmq6xbskn] C:\DOCUME~1\default\LOCALS~1\Temp\sltob0.exe
O4 - HKCU\..\Run: [lvdnjsn5tc9c] C:\DOCUME~1\default\LOCALS~1\Temp\ml64vk9c6.exe
O4 - HKCU\..\Run: [zajzq8uf0h90nltz0d8dh2gcvcaa] C:\DOCUME~1\default\LOCALS~1\Temp\aivst5e.exe
O4 - HKCU\..\Run: [anag50tt54lq4q] C:\DOCUME~1\default\LOCALS~1\Temp\e3ykak3oj5i.exe
O4 - HKCU\..\Run: [xugmi9iceujr11i5] C:\DOCUME~1\default\LOCALS~1\Temp\bnibi5acei2.exe
O4 - HKCU\..\Run: [z57xkb9i6egl4kjronla1ehviuu030wemqpshm0jjzpxd3z] C:\DOCUME~1\default\LOCALS~1\Temp\scfsoatdx.exe
O4 - HKCU\..\Run: [nzrb4dq1zf6r0fnpg5mn38qe3p0] C:\DOCUME~1\default\LOCALS~1\Temp\ogsfvclnuyy.exe
O4 - HKCU\..\Run: [msmtku0kd7cbv3h6rncx1q2q8m8f6u8clp5m23mw37rsg9qs] C:\DOCUME~1\default\LOCALS~1\Temp\uir8d82dzl.exe
O4 - HKCU\..\Run: [cjuo0u0yc8lvsuokdseg] C:\DOCUME~1\default\LOCALS~1\Temp\wj14v6nz1sr7.exe
O4 - HKCU\..\Run: [fmky3mcm2j70do1x744sbsn] C:\DOCUME~1\default\LOCALS~1\Temp\n8yl1up0ko.exe
O4 - HKCU\..\Run: [ne1woow74wd4qnql4ig6h7v6a] C:\DOCUME~1\default\LOCALS~1\Temp\xvnxo52lrt2.exe
O4 - HKCU\..\Run: [dmqqyl7vl59zqrj5qf8r] C:\DOCUME~1\default\LOCALS~1\Temp\eackdd6or3kmz.exe
O4 - HKCU\..\Run: [mbtvw7oygv7072rf] C:\DOCUME~1\default\LOCALS~1\Temp\c92oew22pwb.exe
O4 - HKCU\..\Run: [e4ogxuiu0j6ua74rosmqpz5mbysfxz9n19tm8qupxhw407d] C:\DOCUME~1\default\LOCALS~1\Temp\repq230.exe
O4 - HKCU\..\Run: [l0pv3l27espvte55bmgsas1yvbcrjyroi9pcz] C:\DOCUME~1\default\LOCALS~1\Temp\a89swyhzn.exe
O4 - HKCU\..\Run: [td7t4v59ljm80q274xg7e1pacameag6wwv94h2gns6rlin4le9] C:\DOCUME~1\default\LOCALS~1\Temp\jjcbqafynci.exe
O4 - HKCU\..\Run: [jmviqqddmvvl71d3gsivva9a8n6zc074] C:\DOCUME~1\default\LOCALS~1\Temp\ik9a4vgp46.exe
O4 - HKCU\..\Run: [why7oxewnsx33wedsdbsf3rcq] C:\DOCUME~1\default\LOCALS~1\Temp\rilffb4o27sff.exe
O4 - HKCU\..\Run: [awvy1hknkm4avilr] C:\DOCUME~1\default\LOCALS~1\Temp\g9de8q0coo.exe
O4 - HKCU\..\Run: [izxoigewfhtryiwnv1y9u1pyckk605dshky6x43kl8tas5] C:\DOCUME~1\default\LOCALS~1\Temp\xfavevyn.exe
O4 - HKCU\..\Run: [ac82ud0vnurqvcaa] C:\DOCUME~1\default\LOCALS~1\Temp\r4qtkj.exe
O4 - HKCU\..\Run: [lrwsmixxml56566r88bz] C:\DOCUME~1\default\LOCALS~1\Temp\ianaqo0pv4ma.exe
O4 - HKCU\..\Run: [m8rrzw5rx662u6d85vq4nvracaz] C:\DOCUME~1\default\LOCALS~1\Temp\s6hobgzonx2g.exe
O4 - HKCU\..\Run: [hkv1ccg27nf789ib1nzoplj8x3gcdze5e] C:\DOCUME~1\default\LOCALS~1\Temp\c76jvotuh.exe
O4 - HKCU\..\Run: [qognuvj73bu0zjhhf6fqhunz2qx68o34wf] C:\DOCUME~1\default\LOCALS~1\Temp\ss08ken26gp.exe
O4 - HKCU\..\Run: [e0zpqd0v91tbgvxm15olwapsf6dj81ex] C:\DOCUME~1\default\LOCALS~1\Temp\qrqclgjz4.exe
O4 - HKCU\..\Run: [x3x2uv8sy5736lwmi77] C:\DOCUME~1\default\LOCALS~1\Temp\vct0obdyopb.exe
O4 - HKCU\..\Run: [zka09idmieslgozutfbr0u9] C:\DOCUME~1\default\LOCALS~1\Temp\zxds5ql.exe
O4 - HKCU\..\Run: [mi3hh78o874fwpcwgw5wnm0] C:\DOCUME~1\default\LOCALS~1\Temp\tm66wr7j.exe
O4 - HKCU\..\Run: [xzwbhkcuep8jwlwa2fyerxd80ml0gxux05na60jwhkbimv6] C:\DOCUME~1\default\LOCALS~1\Temp\y6mf63l6ryv.exe
O4 - HKCU\..\Run: [dnyrjawivmuypllfx5ng4beqk] C:\DOCUME~1\default\LOCALS~1\Temp\lac1zp1u.exe
O4 - HKCU\..\Run: [drp7ezi65g7vwj1whyk] C:\DOCUME~1\default\LOCALS~1\Temp\fzsz5d.exe
O4 - HKCU\..\Run: [gg74ywfaq52t1a300fkgdp5s5vfa] C:\DOCUME~1\default\LOCALS~1\Temp\h02v4boy.exe
O4 - HKCU\..\Run: [brk8btyd3mvv1oz] C:\DOCUME~1\default\LOCALS~1\Temp\q89qj3rkmhuk.exe
O4 - HKCU\..\Run: [iu40rygjgi7c7iin20r] C:\DOCUME~1\default\LOCALS~1\Temp\yuvc4ty8.exe
O4 - HKCU\..\Run: [ig0k7aphhkjr8rxey7mlgniu66qzmcwkr8aunykqew05u9lk3k] C:\DOCUME~1\default\LOCALS~1\Temp\zio847lm8bhkr.exe
O4 - HKCU\..\Run: [jeh8ywzcat9x2xjc6laidld832fe0ke8ffm] C:\DOCUME~1\default\LOCALS~1\Temp\t74pac468qk.exe
O4 - HKCU\..\Run: [tzsw9i1cn24uiox6tyonl1s940dssuj27mrdbgvx9owh81th] C:\DOCUME~1\default\LOCALS~1\Temp\v8el9t89aeatl.exe
O4 - HKCU\..\Run: [wl0mqtx9mfj5sc5xki] C:\DOCUME~1\default\LOCALS~1\Temp\xsoh8rc.exe
O4 - HKCU\..\Run: [yp1f8ewogjjx5bnjxcx4vh2] C:\DOCUME~1\default\LOCALS~1\Temp\d3r0lmtuc.exe
O4 - HKCU\..\Run: [s634glrhnu] C:\DOCUME~1\default\LOCALS~1\Temp\uenygz.exe
O4 - HKCU\..\Run: [c0fvi20vs5yo3vkw9v67hvo7wlnuy1xb37ytmajk] C:\DOCUME~1\default\LOCALS~1\Temp\yz7qxeogay.exe
O4 - HKCU\..\Run: [rfmhbxay0873hfo2gf7oqxm9shn5p] C:\DOCUME~1\default\LOCALS~1\Temp\jajqw3j9d5.exe
O4 - HKCU\..\Run: [n7lra86z7hmhlis69768ohlpbubjvywi8d4lsp1axzr] C:\DOCUME~1\default\LOCALS~1\Temp\lutme14vfcxu.exe
O4 - HKCU\..\Run: [q56yud0450zunwb2ssmxyxq405latfsbtgashs] C:\DOCUME~1\default\LOCALS~1\Temp\ib06oj.exe
O4 - HKCU\..\Run: [yahynwnv8] C:\DOCUME~1\default\LOCALS~1\Temp\t6dl0ci8oh.exe
O4 - HKCU\..\Run: [mu3kfue28ho] C:\DOCUME~1\default\LOCALS~1\Temp\paqrqvail1e9.exe
O4 - HKCU\..\Run: [ogcyhbn2kpg8d9k2gxzdtzbar6xi3yk6eqkee1zkwo533vbbn] C:\DOCUME~1\default\LOCALS~1\Temp\m7jg2dr.exe
O4 - HKCU\..\Run: [iljnigk5dra2t7v7dnxeztw993hxjjsk] C:\DOCUME~1\default\LOCALS~1\Temp\ook0lw.exe
O4 - HKCU\..\Run: [mxhj1vy7glymmx0figuq5kxl23zwmdl0zs4l9z7cavt] C:\DOCUME~1\default\LOCALS~1\Temp\gm6zrndld4m.exe
O4 - HKCU\..\Run: [j1ghnb49vbmkska4f4kasv61nxy3y] C:\DOCUME~1\default\LOCALS~1\Temp\xfw9n3.exe
O4 - HKCU\..\Run: [l5v3rb8hv43fsqdxoc2yb0sciqfxxvzmr04rah111577c4v] C:\DOCUME~1\default\LOCALS~1\Temp\c3ictz1yl.exe
O4 - HKCU\..\Run: [yeh7t0a5jlbg9h1rnjd0xx] C:\DOCUME~1\default\LOCALS~1\Temp\i8ee4peu.exe
O4 - HKCU\..\Run: [xssz31n7nrg9cmjuzjlotmhs] C:\DOCUME~1\default\LOCALS~1\Temp\wlt1xx982bj8.exe
O4 - HKCU\..\Run: [fowdiumo6p0bge5t92wbq0f] C:\DOCUME~1\default\LOCALS~1\Temp\me8awkjz6dk.exe
O4 - HKCU\..\Run: [a8cs1czbzdlo5em6d1wvgzwffopb9p6o9yrtp14h6shxmxq] C:\DOCUME~1\default\LOCALS~1\Temp\qb85pqgl.exe
O4 - HKCU\..\Run: [q9adurfizqdltynz99d850xijqevjhs63cx2ikeh9ck3w2o] C:\DOCUME~1\default\LOCALS~1\Temp\zce2uir4mj7g.exe
O4 - HKCU\..\Run: [fj3ucv31817] C:\DOCUME~1\default\LOCALS~1\Temp\dt7293u9j8.exe
O4 - HKCU\..\Run: [dd3wp61plmf96xl7gxp7bquoeisbzoon60] C:\DOCUME~1\default\LOCALS~1\Temp\r43zd8.exe
O4 - HKCU\..\Run: [c5gwnq9o6c46u1f22v1qsp7cbjv2rx10ob07tvklm7xo] C:\DOCUME~1\default\LOCALS~1\Temp\tsfaz4z.exe
O4 - HKCU\..\Run: [s12ss0jrr9bmnshpzp0v04nb7aog] C:\DOCUME~1\default\LOCALS~1\Temp\h05mve.exe
O4 - HKCU\..\Run: [v9hcfgy6qqia9n1t76x1uk083f88fm8xh] C:\DOCUME~1\default\LOCALS~1\Temp\ddpvwdrv.exe
O4 - HKCU\..\Run: [sz2r4dyun2wmxq1fy8toy6w28] C:\DOCUME~1\default\LOCALS~1\Temp\hxf049y.exe
O4 - HKCU\..\Run: [z1kylwwvdr] C:\DOCUME~1\default\LOCALS~1\Temp\k88euqqmeyo1d.exe
O4 - HKCU\..\Run: [kykf43lmodals86j0d] C:\DOCUME~1\default\LOCALS~1\Temp\semiw23ke5qi.exe
O4 - HKCU\..\Run: [hqkvkqr82rx47ew2m8zh9y90r18o9xaswvr41gqj01q9ajjvw] C:\DOCUME~1\default\LOCALS~1\Temp\j9qkkfxwub.exe
O4 - HKCU\..\Run: [ehcnjzur0sfqwrga2551iljt0rip8vl29cxpvgh51w73u7bvyd] C:\DOCUME~1\default\LOCALS~1\Temp\mp6qm6.exe
O4 - HKCU\..\Run: [t3le5oi2cbhv4s7drdifp5ar8ls1c8] t3le5oi2cbhv4s7drdifp5ar8ls1c8b3chrxh49v57t.exe
O4 - HKCU\..\Run: [jkb07j8j1h9u021u6yp113dye4wdmej8o8uq3lo] jkb07j8j1h9u021u6yp113dye4wdmej8o8uq3lojy9whl.exe
O4 - HKCU\..\Run: [if3xrs6gvt8l0f62] if3xrs6gvt8l0f62mna43fb8jcxp.exe
O4 - HKCU\..\Run: [vjv0yb3dfefbslqgjsklyfat] C:\DOCUME~1\default\LOCALS~1\Temp\dnmd9vl.exe
O4 - HKCU\..\Run: [z2fzst9wj1r9l3bzkqpw5zjsz9w81mywww8y8hv5m6umg4fv] C:\DOCUME~1\default\LOCALS~1\Temp\ffw3rs.exe
O4 - HKCU\..\Run: [kseeblgfy9tp22ptgthyb0rn5ehd3nvbw40o] C:\DOCUME~1\default\LOCALS~1\Temp\lizslonsuu1.exe
O4 - HKCU\..\Run: [bhr1q30xl] C:\DOCUME~1\default\LOCALS~1\Temp\dcabshlkpo.exe
O4 - HKCU\..\Run: [tply8mtvajrdbdp] C:\DOCUME~1\default\LOCALS~1\Temp\hg6z9qba.exe
O4 - HKCU\..\Run: [qe97k6qcpvcq1lez9egf] C:\DOCUME~1\default\LOCALS~1\Temp\h4z8c08vyr5h.exe
O4 - HKCU\..\Run: [dbwe2l8q4kceq2flzkpzkrhwegnb9o8e9z84jmvzr08] C:\DOCUME~1\default\LOCALS~1\Temp\qrz2y4wj7.exe
O4 - HKCU\..\Run: [f9q7kxyapsz2t9zxn36vwu35u9xgjjwym] C:\DOCUME~1\default\LOCALS~1\Temp\na9i3ls9l7.exe
O4 - HKCU\..\Run: [qwc4aha3f0ji] C:\DOCUME~1\default\LOCALS~1\Temp\l9gml4o6.exe
O4 - HKCU\..\Run: [z99u5ackqig] C:\DOCUME~1\default\LOCALS~1\Temp\av7dtlvy.exe
O4 - HKCU\..\Run: [qs1kepu5gcmx0ufs5o6zyeq1lvg1r] C:\DOCUME~1\default\LOCALS~1\Temp\v2t8iorm4tp.exe
O4 - HKCU\..\Run: [zt9yjaco3h4c9f3xj] C:\DOCUME~1\default\LOCALS~1\Temp\af61qkgx.exe
O4 - HKCU\..\Run: [uqz4xwtmm8ez4rra4bju56lw5gnyzesg69woba6cfdkoi] C:\DOCUME~1\default\LOCALS~1\Temp\s9ns2b4jpe.exe
O4 - HKCU\..\Run: [pp2lrj5nllhuie88bh1s4i8gsc01y948nr6qcg7uvjdsmh] C:\DOCUME~1\default\LOCALS~1\Temp\rvtak0.exe
O4 - HKCU\..\Run: [rgmhmh5v3z6gcfmhh378nch0uq] C:\DOCUME~1\default\LOCALS~1\Temp\c76pdt2j8u.exe
O4 - HKCU\..\Run: [z6ud2mlf0z] C:\DOCUME~1\default\LOCALS~1\Temp\sqzhyqwakub.exe
O4 - HKCU\..\Run: [wvhzvzak1nz4muh8f2zt3pri0h2hx1md] C:\DOCUME~1\default\LOCALS~1\Temp\m3upuz2.exe
O4 - HKCU\..\Run: [aigxlvnmjveh4] C:\DOCUME~1\default\LOCALS~1\Temp\a03unfm7kb.exe
O4 - HKCU\..\Run: [rkzs5nw0t6pibmtcyx501qqt4rau5o8evdh] C:\DOCUME~1\default\LOCALS~1\Temp\ju5fxa0hg1i7q.exe
O4 - HKCU\..\Run: [tnzby2v0625w0l0yxdjz1bv9ajd5k] C:\DOCUME~1\default\LOCALS~1\Temp\ce66fi.exe
O4 - HKCU\..\Run: [me3md1mrve9qkf9jy0wy0a3stjsgnyl35yfqj8paqpurk17d] C:\DOCUME~1\default\LOCALS~1\Temp\nnxk4z.exe
O4 - HKCU\..\Run: [l2xtncmgxyiux] l2xtncmgxyiuxwy03hub5.exe
O4 - HKCU\..\Run: [ag58yx8v0j0z0x5tgyxu5y6gnvwj6okwo1xk] ag58yx8v0j0z0x5tgyxu5y6gnvwj6okwo1xkdgkll2rtw.exe
O4 - HKCU\..\Run: [e8eug1033yd06nom4q38bua360hk78wvn3tr77es6jwq2] C:\DOCUME~1\default\LOCALS~1\Temp\itxz3hswps.exe
O4 - HKCU\..\Run: [ew6i45wz21uyrm4ip9clsht7phb1fx8gat] C:\DOCUME~1\default\LOCALS~1\Temp\hiaghld6ye.exe
O4 - HKCU\..\Run: [i96rd811ncz3lkf4qfj5vtafa9fdw4qg315h2] C:\DOCUME~1\default\LOCALS~1\Temp\an47sjo612.exe
O4 - HKCU\..\Run: [g4x4vb1d090a97] C:\DOCUME~1\default\LOCALS~1\Temp\uw7moxk9mhe10.exe
O4 - HKCU\..\Run: [u0tf6qymntw] C:\DOCUME~1\default\LOCALS~1\Temp\pynupfxvrnc2.exe
O4 - HKCU\..\Run: [ls8rzhc52dwft0dyln7nne8lshra] C:\DOCUME~1\default\LOCALS~1\Temp\mkdh8vekh00wa.exe
O4 - HKCU\..\Run: [awcbhytaquqro8b9v5hpbdyqtsx34r5y451726g] C:\DOCUME~1\default\LOCALS~1\Temp\mu8yax.exe
O4 - HKCU\..\Run: [z9qwuqd6679llbsaogr2rrv0150bv] C:\DOCUME~1\default\LOCALS~1\Temp\xm02r7a.exe
O4 - HKCU\..\Run: [geencf2jsifmik1337notdfjj2z38f41590q9yxu4j] C:\DOCUME~1\default\LOCALS~1\Temp\ovrbxquvlte.exe
O4 - HKCU\..\Run: [ftydtwarblduqi17voceizkwcn4apb10fxo4vtrgc8bq7up0] C:\DOCUME~1\default\LOCALS~1\Temp\fko93vww4.exe
O4 - HKCU\..\Run: [vaopw5n1p317d4xuir] C:\DOCUME~1\default\LOCALS~1\Temp\aboiqy458g0.exe
O4 - HKCU\..\Run: [ghv9ij5cc3ffaq] C:\DOCUME~1\default\LOCALS~1\Temp\o0nsrkll6npyn.exe
O4 - HKCU\..\Run: [buzehn4r8y5wvl65datg1pue] C:\DOCUME~1\default\LOCALS~1\Temp\hzhi780f3tdv9.exe
O4 - HKCU\..\Run: [occjrw6fsyocexzdinwz1yo7prm5nhbzbky0n3a] C:\DOCUME~1\default\LOCALS~1\Temp\uugs9rj6a1.exe
O4 - HKCU\..\Run: [ciz64xfaoqrjkis] C:\DOCUME~1\default\LOCALS~1\Temp\u5muzoyu1.exe
O4 - HKCU\..\Run: [t3hjn4sp5bm5dg9ydo6pjlwpgjbnxhl6xbgsx66qui1g] C:\DOCUME~1\default\LOCALS~1\Temp\y1m4uisw6k.exe
O4 - HKCU\..\Run: [sab1zp7elcpskrxzu89yvmdqx1d8rpzntgc580] C:\DOCUME~1\default\LOCALS~1\Temp\x3wlrbzj.exe
O4 - HKCU\..\Run: [q04kempsb1dci4ncqntblggun7fw22o45d9pltr] C:\DOCUME~1\default\LOCALS~1\Temp\iyq0k414h2go.exe
O4 - HKCU\..\Run: [hxyxyh7q5bwvjaliqfk42jyqw] C:\DOCUME~1\default\LOCALS~1\Temp\m2z5cxjux.exe
O4 - HKCU\..\Run: [zaztdyak8kgmcnyzrd99hd9ivv0xbwu] C:\DOCUME~1\default\LOCALS~1\Temp\nksjnlqr.exe
O4 - HKCU\..\Run: [f1m295blsk75ml4kic9et19sfd1gflpcdi78r0rr8ac] C:\DOCUME~1\default\LOCALS~1\Temp\r1ztkvf2.exe
O4 - HKCU\..\Run: [p1ow7k30pd4hd7] C:\DOCUME~1\default\LOCALS~1\Temp\p60y0nrh0t28g.exe
O4 - HKCU\..\Run: [yrmyzml54inppjedd0chni887saja70i9zvwto7sv6g4] C:\DOCUME~1\default\LOCALS~1\Temp\n2w7hkqgp.exe
O4 - HKCU\..\Run: [tr2qsx7rkb9e3fbxt6012mi2] C:\DOCUME~1\default\LOCALS~1\Temp\wa3jdtcj1itlg.exe
O4 - HKCU\..\Run: [f4nhib0k0kqbls32gqvn9vxzczc9gr8h] C:\DOCUME~1\default\LOCALS~1\Temp\s4h9ls.exe
O4 - HKCU\..\Run: [msx73mf5ffdr7rs] C:\DOCUME~1\default\LOCALS~1\Temp\ywy15ir.exe
O4 - HKCU\..\Run: [fg43kut053fh3p8x6uzgum7y31vu8o4l1fu14ascvyatzbhe] C:\DOCUME~1\default\LOCALS~1\Temp\yehm8bep6oaz.exe
O4 - HKCU\..\Run: [d4bp3y2v9bhsb6d61mmq] C:\DOCUME~1\default\LOCALS~1\Temp\fysdj3.exe
O4 - HKCU\..\Run: [w2ec0ysuehuxwqk8] C:\DOCUME~1\default\LOCALS~1\Temp\w796e8ujf.exe
O4 - HKCU\..\Run: [h6ygrc33gcgozy5xqromq91qel1x2gcyo3] C:\DOCUME~1\default\LOCALS~1\Temp\nzva6an6a9.exe
O4 - HKCU\..\Run: [f4bn9mspms333ohbupia6003krfrwnh] C:\DOCUME~1\default\LOCALS~1\Temp\kmzwmt8.exe
O4 - HKCU\..\Run: [h0mvtghztqusz7rn0fi3yd6w2z66sb5e] C:\DOCUME~1\default\LOCALS~1\Temp\gej52viwts5w.exe
O4 - HKCU\..\Run: [uk1z1gt1cu5fe80qn8gjlhno2u4nmhyl5g7mpo9qq2x91p] C:\DOCUME~1\default\LOCALS~1\Temp\pe83u5ia6e.exe
O4 - HKCU\..\Run: [erk86mpd99517kuwke6iba2u7qg47pxii7abougkg8852ijy] C:\DOCUME~1\default\LOCALS~1\Temp\eq07gma65g9k.exe
O4 - HKCU\..\Run: [zkd9l3mkhpuroeq1yj1pyzzb2tw0ebrvxzhxcom2q] C:\DOCUME~1\default\LOCALS~1\Temp\y4j3kp.exe
O4 - HKCU\..\Run: [itcslzj9iao3xhltph9ouynm9adkbzobjxn52upn4vcffblqrg] C:\DOCUME~1\default\LOCALS~1\Temp\gtw0wr6s.exe
O4 - HKCU\..\Run: [bucxiz1yvz9fww3wa8xjf8ugpgw4zt714g038rmjci27g] C:\DOCUME~1\default\LOCALS~1\Temp\temq5gveqk.exe
O4 - HKCU\..\Run: [tklfyqm4psboylsegwxwtu] C:\DOCUME~1\default\LOCALS~1\Temp\obf39vketq.exe
O4 - HKCU\..\Run: [ivv43u5xz5bao31dipc99etbux9x0bka0gfyx2vlzf] C:\DOCUME~1\default\LOCALS~1\Temp\dbf5rkp.exe
O4 - HKCU\..\Run: [reqpb3w8esg6bnaldu9ba07] C:\DOCUME~1\default\LOCALS~1\Temp\miqzgztrqfi.exe
O4 - HKCU\..\Run: [p9aovwhr0qcwabhthqdjgg9ns517meh6s] C:\DOCUME~1\default\LOCALS~1\Temp\m2au5g7b.exe
O4 - HKCU\..\Run: [v3djcu9lw2z9wbm4e5mwht9ik4hb] C:\DOCUME~1\default\LOCALS~1\Temp\fy5ixuusm.exe
O4 - HKCU\..\Run: [z0ygfq440wze9z] C:\DOCUME~1\default\LOCALS~1\Temp\z4nqg8dk35jmf.exe
O4 - HKCU\..\Run: [ymfi9shbjvmjelhh] C:\DOCUME~1\default\LOCALS~1\Temp\q22fjhxe.exe
O4 - HKCU\..\Run: [tj6bvrhf7d7zattuvqo01qwm7mppc6zgp06lsvqy] C:\DOCUME~1\default\LOCALS~1\Temp\v05luc8mf4.exe
O4 - HKCU\..\Run: [f9thkuqd80u3exgsvkdqtbbho018ezpxjg] C:\DOCUME~1\default\LOCALS~1\Temp\k05b2gzy.exe
O4 - HKCU\..\Run: [ow6cb7oewwh4zgvm5434pmmvhuzhmcmcky] C:\DOCUME~1\default\LOCALS~1\Temp\q62uqt6aud8.exe
O4 - HKCU\..\Run: [n3qv6qjp02cylz9gu0fthyetlzmv68oojim6q] C:\DOCUME~1\default\LOCALS~1\Temp\g8rn00i8q1yo.exe
O4 - HKCU\..\Run: [w3l6nkdj078gf4qfdouocbu0symj5if2elyjzzc9] C:\DOCUME~1\default\LOCALS~1\Temp\ahx8g5hq.exe
O4 - HKCU\..\Run: [n0nv17t6sn9ufup9rbg5la2t8o1qpf6] C:\DOCUME~1\default\LOCALS~1\Temp\w4cqgjz8kj.exe
O4 - HKCU\..\Run: [wdc4mtlj2t1vduq1j6mno9zu3] C:\DOCUME~1\default\LOCALS~1\Temp\wne4bwnj0z7.exe
O4 - HKCU\..\Run: [uyvct01uhemg7k3] C:\DOCUME~1\default\LOCALS~1\Temp\wpredtwbug.exe
O4 - HKCU\..\Run: [si03dta33pgblj4cm34h25p37t] C:\DOCUME~1\default\LOCALS~1\Temp\tklvobqxanx.exe
O4 - HKCU\..\Run: [nkz1gqfjvfx93loojujrkissl35ba] C:\DOCUME~1\default\LOCALS~1\Temp\q7gfzntx.exe
O4 - HKCU\..\Run: [ynikil1elfjbxb1z] C:\DOCUME~1\default\LOCALS~1\Temp\iftp66wxwo.exe
O4 - HKCU\..\Run: [id15b73mhfnwrodl3ayqux5oi4x27n8hjxw0m8l8a63k3v] C:\DOCUME~1\default\LOCALS~1\Temp\viwd1erbc.exe
O4 - HKCU\..\Run: [k6ifvdncu9ryw5sdueeyfbfelzsygnei8sd3dvezy6e] C:\DOCUME~1\default\LOCALS~1\Temp\yfp6dsye2h.exe
O4 - HKCU\..\Run: [dw2tvf8xi43863rc5r] C:\DOCUME~1\default\LOCALS~1\Temp\zscafqiqk2.exe
O4 - HKCU\..\Run: [e3yp8jznv5rmml] C:\DOCUME~1\default\LOCALS~1\Temp\zcfmn7w.exe
O4 - HKCU\..\Run: [xuui6malohv5c7hatwi0d618xci5dpru] C:\DOCUME~1\default\LOCALS~1\Temp\stpiorbg0b03x.exe
O4 - HKCU\..\Run: [fpeo73gmr8jomv5ek801x5t61446yw70w] C:\DOCUME~1\default\LOCALS~1\Temp\elzpsh.exe
O4 - HKCU\..\Run: [vbdy2jpepbeuhlktvmtby2phepipz7p8qxzwex76ulgl8] C:\DOCUME~1\default\LOCALS~1\Temp\g5ibc20uq8q.exe
O4 - HKCU\..\Run: [nk3uzpwcp8] C:\DOCUME~1\default\LOCALS~1\Temp\dsmxs422.exe
O4 - HKCU\..\Run: [y5aix4wkrh7hqer21fg2gg] C:\DOCUME~1\default\LOCALS~1\Temp\m3n2zz3q0dgo.exe
O4 - HKCU\..\Run: [nl52vhb72ids3op6] C:\DOCUME~1\default\LOCALS~1\Temp\sp676rpm.exe
O4 - HKCU\..\Run: [a0vq57n0o1kvfvwnz2miuuiqzc9rouq8] C:\DOCUME~1\default\LOCALS~1\Temp\fbqf9x.exe
O4 - HKCU\..\Run: [fj4bwtpav4ic82] C:\DOCUME~1\default\LOCALS~1\Temp\h7ds2hhtv.exe
O4 - HKCU\..\Run: [unxc9u9qwhkwc] C:\DOCUME~1\default\LOCALS~1\Temp\i8n2pa2wnax.exe
O4 - HKCU\..\Run: [stzt3r1sb8s933nlxdxaavl5fhb1mph5k] C:\DOCUME~1\default\LOCALS~1\Temp\j46gj7k6x.exe
O4 - HKCU\..\Run: [rejdwcaikjs] C:\DOCUME~1\default\LOCALS~1\Temp\qa6zznp.exe
O4 - HKCU\..\Run: [rznl352ui26] C:\DOCUME~1\default\LOCALS~1\Temp\pmfhqwtc6x9.exe
O4 - HKCU\..\Run: [opjhjvlqscmttxin6] C:\DOCUME~1\default\LOCALS~1\Temp\i062b1pwqa8.exe
O4 - HKCU\..\Run: [arhwsgrqgwt3ih04oeh7uig74a0t0esbh3w9r9b39cjac7lkhh] C:\DOCUME~1\default\LOCALS~1\Temp\retgdukw3f.exe
O4 - HKCU\..\Run: [qdmed85jh] C:\DOCUME~1\default\LOCALS~1\Temp\mo7rfkq.exe
O4 - HKCU\..\Run: [ngmimsz5tc] C:\DOCUME~1\default\LOCALS~1\Temp\ddt8vpbaqeb.exe
O4 - HKCU\..\Run: [wkg9g06yy3z5waow5bvz6qn5q10] C:\DOCUME~1\default\LOCALS~1\Temp\wh16td4y.exe
O4 - HKCU\..\Run: [q8j4ceq2rkezcdpru9l5] C:\DOCUME~1\default\LOCALS~1\Temp\w1411uizidbq2.exe
O4 - HKCU\..\Run: [t6s3stqohk2oetcoboa6jwwgqttlp52m8bb1cl7edyz0] C:\DOCUME~1\default\LOCALS~1\Temp\lhnv02zq6hx.exe
O4 - HKCU\..\Run: [f2nsofba3hmtsk83] C:\DOCUME~1\default\LOCALS~1\Temp\hwgn3m5.exe
O4 - HKCU\..\Run: [tal9vl2ciws8mxpjk59nvhzfg649qdm2tz6qi0xbx] C:\DOCUME~1\default\LOCALS~1\Temp\souqdw0.exe
O4 - HKCU\..\Run: [tdw7p5boiatk5418edt271jaigmviu] C:\DOCUME~1\default\LOCALS~1\Temp\elnh735.exe
O4 - HKCU\..\Run: [uce6aujdrbq4aw8547d] C:\DOCUME~1\default\LOCALS~1\Temp\c61qu5.exe
O4 - HKCU\..\Run: [lwrb7gkqafgajmm6cwmwhvwjvlg6aki] C:\DOCUME~1\default\LOCALS~1\Temp\tvnorau5qw.exe
O4 - HKCU\..\Run: [x9t7dfti73jc6w71ujb8r5d3] C:\DOCUME~1\default\LOCALS~1\Temp\q7e8gd.exe
O4 - HKCU\..\Run: [vgg9ua0zabuy] C:\DOCUME~1\default\LOCALS~1\Temp\jp37y02k.exe
O4 - HKCU\..\Run: [wl5du3cx86i6mbte8] C:\DOCUME~1\default\LOCALS~1\Temp\sinaf6gh1zg.exe
O4 - HKCU\..\Run: [xwpmo4bbn6xg1kbgcs6orjjk9th68odudqyw] C:\DOCUME~1\default\LOCALS~1\Temp\pu0rueklo4fg.exe
O4 - HKCU\..\Run: [yi51nduv6iu1x5brqomyi] C:\DOCUME~1\default\LOCALS~1\Temp\nd85ztjw4q.exe
O4 - HKCU\..\Run: [ai8iukdzmi7hp1l6t1k6qivovldkemgd7akbmp3c218ub] C:\DOCUME~1\default\LOCALS~1\Temp\e2u3fy.exe
O4 - HKCU\..\Run: [hczujtmu65n1] C:\DOCUME~1\default\LOCALS~1\Temp\ww1o8asyifrjk.exe
O4 - HKCU\..\Run: [i26bchf6vto4jndzo5gesr] C:\DOCUME~1\default\LOCALS~1\Temp\vx74a7r.exe
O4 - HKCU\..\Run: [l5mht95iv1oifqzaquyfglzsm8eylm0mgrofru1g] C:\DOCUME~1\default\LOCALS~1\Temp\mhd199a.exe
O4 - HKCU\..\Run: [vitimd2ioxbbzhfg9xs3s0ailbii63wscbxa4mnfw] C:\DOCUME~1\default\LOCALS~1\Temp\h8jrntk.exe
O4 - HKCU\..\Run: [snp88o8iplpur71] C:\DOCUME~1\default\LOCALS~1\Temp\qvq210dxu7yub.exe
O4 - HKCU\..\Run: [ebwz4jr2d6noqhk290x7] C:\DOCUME~1\default\LOCALS~1\Temp\cbc9l866cvi.exe
O4 - HKCU\..\Run: [tahaqky4krk8v99viw2fs6rzoysa59jzlhdg8r2egt2xy3] C:\DOCUME~1\default\LOCALS~1\Temp\g1syh2ash2.exe
O4 - HKCU\..\Run: [hx0oukj2u6d80qowendxd9boyysd76wy8755r2] C:\DOCUME~1\default\LOCALS~1\Temp\dtrkd3o313kh.exe
O4 - HKCU\..\Run: [pa93touxow] C:\DOCUME~1\default\LOCALS~1\Temp\tj5xlxzb0zc.exe
O4 - HKCU\..\Run: [adanabtx6qwddal9c9ttpksaf8ve89189fk6tnx0a0y] C:\DOCUME~1\default\LOCALS~1\Temp\qbs3rx6.exe
O4 - HKCU\..\Run: [s0yha29e8igro78b7dlr36mco2ek] C:\DOCUME~1\default\LOCALS~1\Temp\kpmitix.exe
O4 - HKCU\..\Run: [z500foikjs6nju0oadr59skyk1gdfw8hy] C:\DOCUME~1\default\LOCALS~1\Temp\hvfh1fs8avwl3.exe
O4 - HKCU\..\Run: [ayz100is63d8tsuy55pzz728650cjijnsjfn4hro1x0f8] C:\DOCUME~1\default\LOCALS~1\Temp\e7vwg1dazhu.exe
O4 - HKCU\..\Run: [yrtkglrli2slil97vs4xxdo] C:\DOCUME~1\default\LOCALS~1\Temp\i4so8ybc.exe
O4 - HKCU\..\Run: [sihzby8iqteir2qf5d4r45phoyx2] C:\DOCUME~1\default\LOCALS~1\Temp\ncdr1pdxon.exe
O4 - HKCU\..\Run: [d0ugvc7rd3wtviax7olfsw] C:\DOCUME~1\default\LOCALS~1\Temp\dmtvodq7.exe
O4 - HKCU\..\Run: [ofroxl6l1dwvix4] C:\DOCUME~1\default\LOCALS~1\Temp\ziqjaqze27.exe
O4 - HKCU\..\Run: [bw5d9l4x2c4w9h66gbrc163yfy71a2cktu4kw] C:\DOCUME~1\default\LOCALS~1\Temp\ghml32.exe
O4 - HKCU\..\Run: [j7pmkftfxdgwppx2j51fi] C:\DOCUME~1\default\LOCALS~1\Temp\ebuhjo881yhew.exe
O4 - HKCU\..\Run: [bjp7ct78cy2wja9zzcr55b79vyk7etmvp1mcc9db] C:\DOCUME~1\default\LOCALS~1\Temp\pk0poehwa.exe
O4 - HKCU\..\Run: [pbmjvbc4yl7bi0iy9ogm4r1p6yhoeblychm] C:\DOCUME~1\default\LOCALS~1\Temp\refazj.exe
O4 - HKCU\..\Run: [jas0ka4xp1d5720sqhzeb9dtuizdykx7] C:\DOCUME~1\default\LOCALS~1\Temp\swk8gst4.exe
O4 - HKCU\..\Run: [l1kkuiarui3mcoek8m1in5qfbxz60] C:\DOCUME~1\default\LOCALS~1\Temp\r12ek6as.exe
O4 - HKCU\..\Run: [hqs01prjw477zlss9f8wga8te1wfy] C:\DOCUME~1\default\LOCALS~1\Temp\d9i74au.exe
O4 - HKCU\..\Run: [g2yratimoe9qmx1w7jnapfji3zr14lb] C:\DOCUME~1\default\LOCALS~1\Temp\bnokpxh.exe
O4 - HKCU\..\Run: [rrm4id5o81bqxmxuabjyqp0zljk] C:\DOCUME~1\default\LOCALS~1\Temp\capi0jvixer.exe
O4 - HKCU\..\Run: [a1leoemvosgf3cqq5xf] C:\DOCUME~1\default\LOCALS~1\Temp\h2z5l2nwcp8co.exe
O4 - HKCU\..\Run: [eybiu45emcj6dlgva9mygy75qrtp10vw4ogl1rs] C:\DOCUME~1\default\LOCALS~1\Temp\o1y7s9.exe
O4 - HKCU\..\Run: [k0ffgu64266fgqa08tnsc8s0tdmbk] C:\DOCUME~1\default\LOCALS~1\Temp\pz9n8yvv.exe
O4 - HKCU\..\Run: [sddm9iafb5h5bva4yhxxtkp5gtmonq91j] C:\DOCUME~1\default\LOCALS~1\Temp\gkf036y.exe
O4 - HKCU\..\Run: [mqvvo5h8h1lxwa5eth1uh9qpmb] C:\DOCUME~1\default\LOCALS~1\Temp\tn3zd9b5k.exe
O4 - HKCU\..\Run: [mon4jmsgni8] C:\DOCUME~1\default\LOCALS~1\Temp\lbbnxyn.exe
O4 - HKCU\..\Run: [r3nvdrtjz5l81uzrew70qsqtje0uya81bieeyj2hf] C:\DOCUME~1\default\LOCALS~1\Temp\bstl6u1p.exe
O4 - HKCU\..\Run: [up32pcl1wvcbj22xl6] C:\DOCUME~1\default\LOCALS~1\Temp\xn1te1z0.exe
O4 - HKCU\..\Run: [moj3zn2z5lyqhvirmxonlj7xee] C:\DOCUME~1\default\LOCALS~1\Temp\i1rou7n.exe
O4 - HKCU\..\Run: [kr6ta9uas90ozhq0l1zixhp6g8m585yjov874teo] C:\DOCUME~1\default\LOCALS~1\Temp\z1dl2m9xt9c4o.exe
O4 - HKCU\..\Run: [dbwlqll7mpcbg41fj1ch2mpjt2p5] C:\DOCUME~1\default\LOCALS~1\Temp\ohzonr.exe
O4 - HKCU\..\Run: [qwcgohyyhis] C:\DOCUME~1\default\LOCALS~1\Temp\v31igll1pv9u.exe
O4 - HKCU\..\Run: [pb72gyazrk8k9bxbb2aw10bfgj] C:\DOCUME~1\default\LOCALS~1\Temp\mopx3gu0iqk2n.exe
O4 - HKCU\..\Run: [guzuytld37du3zpxbql] C:\DOCUME~1\default\LOCALS~1\Temp\r7k5xlwrh1oc.exe
O4 - HKCU\..\Run: [in5g4o7fsgefxr774vz5ucwxq9xia33fadpte1q7d] C:\DOCUME~1\default\LOCALS~1\Temp\jgv3o5g0g.exe
O4 - HKCU\..\Run: [yqp5hbpdrr5vxitalf5ef] C:\DOCUME~1\default\LOCALS~1\Temp\zwb59gi.exe
O4 - HKCU\..\Run: [m2pg7t0ekty7itkqodyaml0rv7enj0c0t0tyy1m] C:\DOCUME~1\default\LOCALS~1\Temp\wzkw8i8r0fs2n.exe
O4 - HKCU\..\Run: [wvwayauu8xeyagan0dvlp7dgacwx7dk9wra] C:\DOCUME~1\default\LOCALS~1\Temp\ngcblfd4mpdg.exe
O4 - HKCU\..\Run: [pz2nqirezbge8v0qcmdzx7qjuqly3r47] C:\DOCUME~1\default\LOCALS~1\Temp\wdw8qs.exe
O4 - HKCU\..\Run: [ax0oct1rrr6xkkm0xhvy4yqab6] C:\DOCUME~1\default\LOCALS~1\Temp\j3vy2uhg6a31.exe
O4 - HKCU\..\Run: [atzo44n6kr4cxu6o52iafvp73ycskf6blcukgn] C:\DOCUME~1\default\LOCALS~1\Temp\w8f2vom0.exe
O4 - HKCU\..\Run: [yg4zo69ixfvz2gdx9p3740acorfymeaj5ix3pnj] C:\DOCUME~1\default\LOCALS~1\Temp\nvpwfrryjy.exe
O4 - HKCU\..\Run: [n4d21w5t4of4k0hmkl6a] C:\DOCUME~1\default\LOCALS~1\Temp\xrpra0wm.exe
O4 - HKCU\..\Run: [i3l65z4ebcsmmft1kl966] C:\DOCUME~1\default\LOCALS~1\Temp\bfja6k7b.exe
O4 - HKCU\..\Run: [qdahzpo4ptkm6q52vapl16rd9p8y1c6o4bywxhiuli] C:\DOCUME~1\default\LOCALS~1\Temp\eisz6w.exe
O4 - HKCU\..\Run: [oqyawq98fkhpynx0bbggag1qthl1b] C:\DOCUME~1\default\LOCALS~1\Temp\yitesnjsv.exe
O4 - HKCU\..\Run: [qil3w3zwz2nvg2ad9y0fgqdeoufy0xj] C:\DOCUME~1\default\LOCALS~1\Temp\gu2dofz4z2eli.exe
O4 - HKCU\..\Run: [x3d0vrp8sgt7dksp96h2gz67vrw0nroqq4pieksv0mtg7btivn] C:\DOCUME~1\default\LOCALS~1\Temp\s2wgpq.exe
O4 - HKCU\..\Run: [c3bucwdhnybdpwmkwu0g2m2k2ss] C:\DOCUME~1\default\LOCALS~1\Temp\g8pyfdz7o8sa.exe
O4 - HKCU\..\Run: [nn2zicbywo69p3ampekcrf7927vd176yjk28t] C:\DOCUME~1\default\LOCALS~1\Temp\vnkh76zz.exe
O4 - HKCU\..\Run: [b22jiq0f5qboylzptu236xzmw84sgcai4vp5jc] C:\DOCUME~1\default\LOCALS~1\Temp\w0mv1m.exe
O4 - HKCU\..\Run: [l92fzaspylp9yshk6j57qktebg97i4o4c] C:\DOCUME~1\default\LOCALS~1\Temp\uqbj0bsndw.exe
O4 - HKCU\..\Run: [dgjzhum98k9wyrjbzz2lxcgh9kvu9gfu] C:\DOCUME~1\default\LOCALS~1\Temp\j9hyteqz.exe
O4 - HKCU\..\Run: [vic2jo0kj6gkhtzb9sp7eqzm8afqajgqkqou0uu] C:\DOCUME~1\default\LOCALS~1\Temp\j3axswjk5bl.exe
O4 - HKCU\..\Run: [kixv37kd50h1ks10wyp1q8jm] C:\DOCUME~1\default\LOCALS~1\Temp\tt2qr2dk5b1r.exe
O4 - HKCU\..\Run: [rdp5no3wvxqxryktdecbkd03bjv1ood4g] C:\DOCUME~1\default\LOCALS~1\Temp\n8p37wu8j.exe
O4 - HKCU\..\Run: [cx27ehbiottc50hry] C:\DOCUME~1\default\LOCALS~1\Temp\jfmlmw0j.exe
O4 - HKCU\..\Run: [mjgsm4g9i68l3684na2fczu1249lop8jnw] C:\DOCUME~1\default\LOCALS~1\Temp\fvljbzfbzuvxf.exe
O4 - HKCU\..\Run: [bj8q25fex8flcoqlpqhqqcip728229e9yv9fo3k8ln6vv0cmh] C:\DOCUME~1\default\LOCALS~1\Temp\q4a8g67z8.exe
O4 - HKCU\..\Run: [yh15epw1fcfbyhk898ffmiduina0e6lcf1ml963rx772ulj5wi] C:\DOCUME~1\default\LOCALS~1\Temp\gheucl7n.exe
O4 - HKCU\..\Run: [skksejajbjm4dwqgdiyywi5y06] C:\DOCUME~1\default\LOCALS~1\Temp\msuxqwjwzl.exe
O4 - HKCU\..\Run: [wiol7ni1tn6aa5ygh5pevce70y9l] C:\DOCUME~1\default\LOCALS~1\Temp\g7vv6p4.exe
O4 - HKCU\..\Run: [vk0pv5vflkoqzdq] C:\DOCUME~1\default\LOCALS~1\Temp\gwhr4jgd6yw.exe
O4 - HKCU\..\Run: [trrxfe3hf6544vscg8foxbjkuzrjq7nplk09csmfs] C:\DOCUME~1\default\LOCALS~1\Temp\vkbq9m8.exe
O4 - HKCU\..\Run: [xph5yiikk099fwso8yer4geua5nh6bnvhfreot1pue] C:\DOCUME~1\default\LOCALS~1\Temp\y9x57kr4zso.exe
O4 - HKCU\..\Run: [h6t0uab1oftw5] C:\DOCUME~1\default\LOCALS~1\Temp\cwd2wz7rs5go.exe
O4 - HKCU\..\Run: [wusemk0jnnrhcwqvt40o9m0r4rteu3ybti785vpwph] C:\DOCUME~1\default\LOCALS~1\Temp\clghbxqp.exe
O4 - HKCU\..\Run: [uxwy6x9eaoe3] C:\DOCUME~1\default\LOCALS~1\Temp\jhovuw.exe
O4 - HKCU\..\Run: [e0jcqhthegi] C:\DOCUME~1\default\LOCALS~1\Temp\sftmhov.exe
O4 - HKCU\..\Run: [i1i1cu044j922kq4d824hmtk0uxachu1t8eki141bk] C:\DOCUME~1\default\LOCALS~1\Temp\yvbwz3uchwba.exe
O4 - HKCU\..\Run: [fc9oau5mnl4oq96f2jade7rp60xh5bk4xg1ft2y057ad4zwp] C:\DOCUME~1\default\LOCALS~1\Temp\fj4dzd.exe
O4 - HKCU\..\Run: [aq4a5m1ufx93] C:\DOCUME~1\default\LOCALS~1\Temp\bya2naz0vo2a7.exe
O4 - HKCU\..\Run: [d5u8tvvrzu54qc8xs03cyf9i40prkg2k3w8rj0jab0cq1] C:\DOCUME~1\default\LOCALS~1\Temp\ix6ngmvbp.exe
O4 - HKCU\..\Run: [uh5t3wf0l5pfbm3ad9m216trc3fqe817udglrfsmjaniq4vl] C:\DOCUME~1\default\LOCALS~1\Temp\kyn3xuru.exe
O4 - HKCU\..\Run: [gk9azb4rktgbo4e65940dul5n11816jxsuj] C:\DOCUME~1\default\LOCALS~1\Temp\wk68o0kjrc0r.exe
O4 - HKCU\..\Run: [p9dyfkikc7] C:\DOCUME~1\default\LOCALS~1\Temp\ek1f0x9vvoe.exe
O4 - HKCU\..\Run: [s8jfj79oyapcs0uspacfwrjix4rnhhbm80j1di42ibijg] C:\DOCUME~1\default\LOCALS~1\Temp\l3wlq7.exe
O4 - HKCU\..\Run: [enn938sl8laz0u] C:\DOCUME~1\default\LOCALS~1\Temp\bpk8pq.exe
O4 - HKCU\..\Run: [b5i1kiwszsb] C:\DOCUME~1\default\LOCALS~1\Temp\vstz7sh630pd.exe
O4 - HKCU\..\Run: [s0naomecfp6usqoi8xeskc12tkwoetvk5p] C:\DOCUME~1\default\LOCALS~1\Temp\l97gzppi3mwl.exe
O4 - HKCU\..\Run: [kok34rceo4dw74dbllk02qeohif8y6prpshd1592fd8pj7b] C:\DOCUME~1\default\LOCALS~1\Temp\ftnrr98gjyma.exe
O4 - HKCU\..\Run: [mr1mkjpontukvawhatm9aeagmlbaoblsy5kb314ytdr716] C:\DOCUME~1\default\LOCALS~1\Temp\ei9nmh2zyr34x.exe
O4 - HKCU\..\Run: [slru2gc358pnkz6i] C:\DOCUME~1\default\LOCALS~1\Temp\c6l6ly0.exe
O4 - HKCU\..\Run: [sza68ydnfimogtaaqh7f] C:\DOCUME~1\default\LOCALS~1\Temp\eju5k4dj53.exe
O4 - HKCU\..\Run: [m84rnk13gnyc78nsbgfzmdd6iae7zgur9u4ilc9q1o9numyji] C:\DOCUME~1\default\LOCALS~1\Temp\h2pi5ipjz.exe
O4 - HKCU\..\Run: [pzgp7av01o74c3qb0a] C:\DOCUME~1\default\LOCALS~1\Temp\e2clhx01.exe
O4 - HKCU\..\Run: [objfbo2k6qaircxv3l6dy8dvn3uabe7tt7jhu2] C:\DOCUME~1\default\LOCALS~1\Temp\mjl436lr02y5.exe
O4 - HKCU\..\Run: [mqza13w4ibnd7fp6qpi] C:\DOCUME~1\default\LOCALS~1\Temp\wwnix6hpa.exe
O4 - HKCU\..\Run: [qgllezp7zrrzytcii73sh6ju0kjk1bg9abkcke] C:\DOCUME~1\default\LOCALS~1\Temp\c7mlb0tfcsc.exe
O4 - HKCU\..\Run: [d9t50fl87dpcdinj0ckpmrmrim8m205pkmncdokw8r4ivwcys] C:\DOCUME~1\default\LOCALS~1\Temp\tzag37rl.exe
O4 - HKCU\..\Run: [ott2s4an7ru7kteqx8wbvvjsagqob854eojz2msh] C:\DOCUME~1\default\LOCALS~1\Temp\ej9tdyvl.exe
O4 - HKCU\..\Run: [rpk8s1knzuumccavzrnsxw1kr68jwip60rjxq71] C:\DOCUME~1\default\LOCALS~1\Temp\xn0cs0l5j0.exe
O4 - HKCU\..\Run: [d1cxwq04cpsnrl37n9x303x] C:\DOCUME~1\default\LOCALS~1\Temp\i7zasmxq6q.exe
O4 - HKCU\..\Run: [f6zzlxjli5a85augjerc13h33ykxv4ah0g3ise4k2wr3gvzls4] C:\DOCUME~1\default\LOCALS~1\Temp\sytirerc3wf.exe
O4 - HKCU\..\Run: [fd6hc5ocqd492veomct0] C:\DOCUME~1\default\LOCALS~1\Temp\ig61l04.exe
O4 - HKCU\..\Run: [ctuib13qql53l2rua33qd0ajb] C:\DOCUME~1\default\LOCALS~1\Temp\c0gn8f5ss15.exe
O4 - HKCU\..\Run: [df3q7bev7m56wzk1h3ghl1uqxc3dqu91d7tsv] C:\DOCUME~1\default\LOCALS~1\Temp\wsmtefv.exe
O4 - HKCU\..\Run: [g3v06ms692jp3m5dm2imo6gsd2wss0x2wcfpot] C:\DOCUME~1\default\LOCALS~1\Temp\d78g8d1h.exe
O4 - HKCU\..\Run: [c4b4jiagt5irfd222p] C:\DOCUME~1\default\LOCALS~1\Temp\hsh8g9sme7.exe
O4 - HKCU\..\Run: [q2hbd2pzvgt7chlsudxd5yf7dtokiwjd] C:\DOCUME~1\default\LOCALS~1\Temp\td07yxeq.exe
O4 - HKCU\..\Run: [c26pez466t73wx0vntynqyuc29wosc] C:\DOCUME~1\default\LOCALS~1\Temp\v3wivt.exe
O4 - HKCU\..\Run: [xnxsddi2immhnbqc5scwyiyo6o1a11ncr08dc8f8aoord] C:\DOCUME~1\default\LOCALS~1\Temp\zy1ijloc047n.exe
O4 - HKCU\..\Run: [yor9dr1zegg6qex8n3k3z1fzwlo7y2q7ao6nmy] C:\DOCUME~1\default\LOCALS~1\Temp\i3q0kctnw.exe
O4 - HKCU\..\Run: [mxmllajedi2un4l123bavnev6biojal3] C:\DOCUME~1\default\LOCALS~1\Temp\bc9zxlw.exe
O4 - HKCU\..\Run: [qle84jgrw1s60d2b4yfkv] C:\DOCUME~1\default\LOCALS~1\Temp\i02zev9j3.exe
O4 - HKCU\..\Run: [f36gddlvpwebbou8oxc1oy8l3z1qbhgcykx73y] C:\DOCUME~1\default\LOCALS~1\Temp\az2z60af6xqvj.exe
O4 - HKCU\..\Run: [t95by2sxt] C:\DOCUME~1\default\LOCALS~1\Temp\aooe4ytd2.exe
O4 - HKCU\..\Run: [vv6efusrhcwv2ed7y3n4ay9qehbtqnvigtiyv9] C:\DOCUME~1\default\LOCALS~1\Temp\pmr2a9n.exe
O4 - HKCU\..\Run: [iomfgwkpeeiq90e7rg339yue8okrpmpi5qsi8sp] C:\DOCUME~1\default\LOCALS~1\Temp\ftugiu5c.exe
O4 - HKCU\..\Run: [vw1sg570mab] C:\DOCUME~1\default\LOCALS~1\Temp\f9ia1sx1d.exe
O4 - HKCU\..\Run: [s0v4x0ay7vpmvqmb48mr4b9p] C:\DOCUME~1\default\LOCALS~1\Temp\sur0ahmnuo8.exe
O4 - HKCU\..\Run: [w9ey4mies8eqra48oqbx] C:\DOCUME~1\default\LOCALS~1\Temp\ngc7zshk0.exe
O4 - HKCU\..\Run: [xtn7tcyibjdxe7cjd] C:\DOCUME~1\default\LOCALS~1\Temp\d9bsmgu.exe
O4 - HKCU\..\Run: [dqcv6bvytnbe185jpzoqwa8pkf2] C:\DOCUME~1\default\LOCALS~1\Temp\pj514xn.exe
O4 - HKCU\..\Run: [oalt2gw5ecljiur2dfafmm1uladasm2l2m6n8301lxzc] C:\DOCUME~1\default\LOCALS~1\Temp\ql4u5bq33gr.exe
O4 - HKCU\..\Run: [s7xr3n425cr9he01q7] C:\DOCUME~1\default\LOCALS~1\Temp\s0wrroo9u5.exe
O4 - HKCU\..\Run: [s89sdzgoelm0w5r25ly8ga4phaazp79zv88qx] C:\DOCUME~1\default\LOCALS~1\Temp\p35i9qew.exe
O4 - HKCU\..\Run: [rvsepcoxwyh3dptmwspnj0s98dokvwm9puppc] C:\DOCUME~1\default\LOCALS~1\Temp\t1p8ra6hx.exe
O4 - HKCU\..\Run: [gp8bxiapvczm0] C:\DOCUME~1\default\LOCALS~1\Temp\dmyy0e56647.exe
O4 - HKCU\..\Run: [qc86aqo5rw5scc4qve7kae7e639y85ukotjyv3ldv53j8kh59r] C:\DOCUME~1\default\LOCALS~1\Temp\qxf738k5i.exe
O4 - HKCU\..\Run: [m3b0dwba38f970knk60tyggcz66xs] C:\DOCUME~1\default\LOCALS~1\Temp\fao78d1iv.exe
O4 - HKCU\..\Run: [eugq3nafvll447qddrzkjqloi8xecgat6qh6w71c] C:\DOCUME~1\default\LOCALS~1\Temp\y5s7lpcrbnh.exe
O4 - HKCU\..\Run: [vpb1k99mrompoa0yjxgpbozjfo9g5raeajwx2g4x2yrnbh] C:\DOCUME~1\default\LOCALS~1\Temp\i1b2gu6bq.exe
O4 - HKCU\..\Run: [gzrje6ctioxchlpv0y0qrjy9w4ux2l8s9qwn14m] C:\DOCUME~1\default\LOCALS~1\Temp\e72ttz4b5k.exe
O4 - HKCU\..\Run: [igip2m4bjxtnqsqnwztf3sv7orura] C:\DOCUME~1\default\LOCALS~1\Temp\l6yvms.exe
O4 - HKCU\..\Run: [uj1zbukozi58qcnyabymnns5bi5p21seaiqludnz] C:\DOCUME~1\default\LOCALS~1\Temp\zio46wvqcu.exe
O4 - HKCU\..\Run: [voxfi9f15hlyj1ta] C:\DOCUME~1\default\LOCALS~1\Temp\vu46ud6f.exe
O4 - HKCU\..\Run: [rvwxezxcz298jd5560liftatn9relojoe2ii] C:\DOCUME~1\default\LOCALS~1\Temp\sxnve137.exe
O4 - HKCU\..\Run: [f5sit2o3vpbpcyo876ate347xe64v6ouxmw3qr9psz57gq1y6] C:\DOCUME~1\default\LOCALS~1\Temp\u606bx.exe
O4 - HKCU\..\Run: [um3jssdk78oqrn581q8qwfv5nu2l2cyocx] C:\DOCUME~1\default\LOCALS~1\Temp\xhclt1p057tub.exe
O4 - HKCU\..\Run: [ak53kmyo8] C:\DOCUME~1\default\LOCALS~1\Temp\tasr7d8anpce.exe
O4 - HKCU\..\Run: [udv16kupqu3oyo41bzavxnvdjdt] C:\DOCUME~1\default\LOCALS~1\Temp\ebzmqd7.exe
O4 - HKCU\..\Run: [kyo4nm71u9xzu4jc8mveqcswwhamjouwprw] C:\DOCUME~1\default\LOCALS~1\Temp\nj2iplohpey.exe
O4 - HKCU\..\Run: [tpwpopc2xlfx660jvam444it95dmmbmkm] C:\DOCUME~1\default\LOCALS~1\Temp\desjrnl8.exe
O4 - HKCU\..\Run: [yb47ulueedbvttw8y2dk] C:\DOCUME~1\default\LOCALS~1\Temp\tdo2lsj7cqko.exe
O4 - HKCU\..\Run: [q1gt8i620an29d] C:\DOCUME~1\default\LOCALS~1\Temp\zokkbirvljz6v.exe
O4 - HKCU\..\Run: [vw41ucgz3x9cba3joncm2vmlby] C:\DOCUME~1\default\LOCALS~1\Temp\qudlim566v8.exe
O4 - HKCU\..\Run: [qitxfvh4eicx] C:\DOCUME~1\default\LOCALS~1\Temp\orolsrpelh.exe
O4 - HKCU\..\Run: [qve4hs2eoewapqyqyyn8ox7vq3jpefw] C:\DOCUME~1\default\LOCALS~1\Temp\bvxu1gxhly0k.exe
O4 - HKCU\..\Run: [trovwmin4pixaniki0tyh2ckqqt2qxr] C:\DOCUME~1\default\LOCALS~1\Temp\raehpswozn3.exe
O4 - HKCU\..\Run: [tbtbqtorubsv9i2ubzyevqfp4rq750a3rdal5soj6q61v] C:\DOCUME~1\default\LOCALS~1\Temp\aftj0iualm.exe
O4 - HKCU\..\Run: [uf8wmx6zt9w5ql5d7ahk] C:\DOCUME~1\default\LOCALS~1\Temp\esqucxhpv.exe
O4 - HKCU\..\Run: [o233h4z8hbpx1oiokpacdw25az9jncti3sy1] C:\DOCUME~1\default\LOCALS~1\Temp\eb9r7r50bd.exe
O4 - HKCU\..\Run: [x7x549a09bg5xjp2b50qxlt097pvpnlzd] C:\DOCUME~1\default\LOCALS~1\Temp\hxgazwtw9.exe
O4 - HKCU\..\Run: [pnnj6qp794wucek4vau6xno9wkan] C:\DOCUME~1\default\LOCALS~1\Temp\q0j3p6.exe
O4 - HKCU\..\Run: [mv7s9wrw9e2t0lt6v7yukrxo5ow0prtlssfqktc9k0t9vacn6e] C:\DOCUME~1\default\LOCALS~1\Temp\b7owswqi.exe
O4 - HKCU\..\Run: [nu1b25p5l2nioqq5jolo0f7fj2tszhjl0ouscg5] C:\DOCUME~1\default\LOCALS~1\Temp\oxgpr2kzl.exe
O4 - HKCU\..\Run: [d93v6ycdb9] C:\DOCUME~1\default\LOCALS~1\Temp\j7o78u785bfw5.exe
O4 - HKCU\..\Run: [g8x1dtlt2zewn] C:\DOCUME~1\default\LOCALS~1\Temp\p7kptmjg8atkq.exe
O4 - HKCU\..\Run: [dd62bzewglrazsbvf0brkyl5qa] C:\DOCUME~1\default\LOCALS~1\Temp\vaan1amz.exe
O4 - HKCU\..\Run: [hj89in7zd79rx8y2ipl823] C:\DOCUME~1\default\LOCALS~1\Temp\s2gc7ttlp7u0.exe
O4 - HKCU\..\Run: [paifjbkh9f2jhrg9jw8vbda7g44bnnk4v] C:\DOCUME~1\default\LOCALS~1\Temp\gejxnc5.exe
O4 - HKCU\..\Run: [f0ahg9aifvt8t8s1wrny4vra12u89j66f84b7s1k] C:\DOCUME~1\default\LOCALS~1\Temp\x99d1x0qf1j.exe
O4 - HKCU\..\Run: [zq5gfllyl0jfmo3zvgz] C:\DOCUME~1\default\LOCALS~1\Temp\bd0z0glfhdz.exe
O4 - HKCU\..\Run: [t0dqz2pqxjb6nx92u5ujuy9q6riq3u] C:\DOCUME~1\default\LOCALS~1\Temp\vgt7wdq.exe
O4 - HKCU\..\Run: [znowcrl25blb2zp5va8m2fhl1e0nqvdein0gpde] C:\DOCUME~1\default\LOCALS~1\Temp\kyd50d2yqw.exe
O4 - HKCU\..\Run: [t0191173du791n4ahcvxkuwth] C:\DOCUME~1\default\LOCALS~1\Temp\b1tgsxlw6pv.exe
O4 - HKCU\..\Run: [le36es0k3q] C:\DOCUME~1\default\LOCALS~1\Temp\zy7829nz.exe
O4 - HKCU\..\Run: [k1wtthl0zatp0s8pqxqnd7jlrpn8rboi] C:\DOCUME~1\default\LOCALS~1\Temp\zytmbh7.exe
O4 - HKCU\..\Run: [f953e7knd8n4hoj0htr6u] C:\DOCUME~1\default\LOCALS~1\Temp\mcyu0plk7tqb.exe
O4 - HKCU\..\Run: [uw0yckr7f07kjik6efjtnjclnc02p181tnemssdxck] C:\DOCUME~1\default\LOCALS~1\Temp\ekbnor.exe
O4 - HKCU\..\Run: [y3dst47c7btftz2dj8z] C:\DOCUME~1\default\LOCALS~1\Temp\txp35otbqvqz.exe
O4 - HKCU\..\Run: [sivmzb24n2jnvx46x56d1ea8qk88442xbr] C:\DOCUME~1\default\LOCALS~1\Temp\zel47gm0tul6.exe
O4 - HKCU\..\Run: [xfpvn2b4u0rqrm856y819gr9bpl3y767erx8dg1arod2n] C:\DOCUME~1\default\LOCALS~1\Temp\ghm5ql7.exe
O4 - HKCU\..\Run: [z5qex17v099effqjx128v36bxqfr] C:\DOCUME~1\default\LOCALS~1\Temp\i6ufe97rrdjr.exe
O4 - HKCU\..\Run: [cgco0s4ow1i6w4ntk8z8c7niem8] C:\DOCUME~1\default\LOCALS~1\Temp\uyuh3q.exe
O4 - HKCU\..\Run: [yq351mnximy4c1425ldj24mgtkksgfl9hecgduzyge] C:\DOCUME~1\default\LOCALS~1\Temp\sxnzd0irh0.exe
O4 - HKCU\..\Run: [gp4sgiyae8pgu63md1jftbrua7jm2e] C:\DOCUME~1\default\LOCALS~1\Temp\orz44si.exe
O4 - HKCU\..\Run: [rs9g2fhhjng8iyu9t3w88fp4vhty6ak] C:\DOCUME~1\default\LOCALS~1\Temp\vfs4ljvtb.exe
O4 - HKCU\..\Run: [qfe7d6asuq9o38s3iebyajmth] C:\DOCUME~1\default\LOCALS~1\Temp\f61m3znx.exe
O4 - HKCU\..\Run: [d0xo6k6cz] C:\DOCUME~1\default\LOCALS~1\Temp\i83tu3olxj0rr.exe
O4 - HKCU\..\Run: [e8v31366k42b70] C:\DOCUME~1\default\LOCALS~1\Temp\dnqsxg3.exe
O4 - HKCU\..\Run: [tyng8qop8qit0g7k4ngqp5zzyc1cy0awn] C:\DOCUME~1\default\LOCALS~1\Temp\nj9nsp.exe
O4 - HKCU\..\Run: [hdk56u1pgt] C:\DOCUME~1\default\LOCALS~1\Temp\h27fg3l.exe
O4 - HKCU\..\Run: [nhbsljw7id7efs6vw3cm8fda4s8qk5qp0v4] C:\DOCUME~1\default\LOCALS~1\Temp\fhm2sd8k0eqr.exe
O4 - HKCU\..\Run: [ajb1an2frh8b66pxu33dxu6mjclw6tpx4dmdvhkowrxfo3b7ol] C:\DOCUME~1\default\LOCALS~1\Temp\tjk6867fci1x.exe
O4 - HKCU\..\Run: [umeutwopi0x97kfbm2oy3zht] C:\DOCUME~1\default\LOCALS~1\Temp\itzsa6rug0.exe
O4 - HKCU\..\Run: [k0uq181yworx8f77lbpw7ks26h59h5r03q5lsz00nq09gsp8s] C:\DOCUME~1\default\LOCALS~1\Temp\acda71.exe
O4 - HKCU\..\Run: [dpauhxxv6fjx] C:\DOCUME~1\default\LOCALS~1\Temp\xz0wn3yirpk.exe
O4 - HKCU\..\Run: [jjfrlpkfgqapglpzjq2kh9517gai675tyuil] C:\DOCUME~1\default\LOCALS~1\Temp\ychskw0k.exe
O4 - HKCU\..\Run: [ricn4tlmfpbsivvz4smx1lgthzx8ho9plo] C:\DOCUME~1\default\LOCALS~1\Temp\g7qrg7gwtwea.exe
O4 - HKCU\..\Run: [lgebns2g2awaucywe18vd89pqzez6vhcztojxr09geuua] C:\DOCUME~1\default\LOCALS~1\Temp\pdqscra0hxcl.exe
O4 - HKCU\..\Run: [zjhf4pgjwtiiy79gpyb1wg9hrj0] C:\DOCUME~1\default\LOCALS~1\Temp\vo6vql.exe
O4 - HKCU\..\Run: [mlhx8413x8cva2aa3eb93kbwygzw9yyi8m0pjac34ii] C:\DOCUME~1\default\LOCALS~1\Temp\dfq5si11.exe
O4 - HKCU\..\Run: [zkabw01mb9nindtl4vtgb] C:\DOCUME~1\default\LOCALS~1\Temp\bnxj6gsy3.exe
O4 - HKCU\..\Run: [u5bojnzgv3m53r79o] C:\DOCUME~1\default\LOCALS~1\Temp\h3n1rknqvlv.exe
O4 - HKCU\..\Run: [izxwrvg7c1fbkygdwrzrw0mrl9w8s1v32x84qwwlwdup6ba] C:\DOCUME~1\default\LOCALS~1\Temp\bvtqxku.exe
O4 - HKCU\..\Run: [uflescyrfxzc1bwgwfzpxs7cvx7a756a0m] C:\DOCUME~1\default\LOCALS~1\Temp\ruoz68pi0y5n.exe
O4 - HKCU\..\Run: [kgebwh959qw8d8c1te] C:\DOCUME~1\default\LOCALS~1\Temp\r87ts4.exe
O4 - HKCU\..\Run: [xi351hfmx2zqqbdui] C:\DOCUME~1\default\LOCALS~1\Temp\p4a1h942n4pl.exe
O4 - HKCU\..\Run: [kr0c040qeyau853dugwbe00cxqhaygl81d7mgwbxfw2mfd7r4] C:\DOCUME~1\default\LOCALS~1\Temp\hv6bob.exe
O4 - HKCU\..\Run: [h4vxzfhmbqz86u] C:\DOCUME~1\default\LOCALS~1\Temp\pwry98qn60r.exe
O4 - HKCU\..\Run: [c3rx53466yql07k4fqem6ponu7uxnkuyzk] C:\DOCUME~1\default\LOCALS~1\Temp\okogo8wyz2.exe
O4 - HKCU\..\Run: [vdjvke90oca9oroat2mng6eomggj] C:\DOCUME~1\default\LOCALS~1\Temp\ksdhh5i.exe
O4 - HKCU\..\Run: [mifog8ulpgabpa9e3j3abxi81jdznt51iyr] C:\DOCUME~1\default\LOCALS~1\Temp\d4iyw7.exe
O4 - HKCU\..\Run: [t0p58w4ndegp8] C:\DOCUME~1\default\LOCALS~1\Temp\jx2g3u7f4g4l2.exe
O4 - HKCU\..\Run: [uqujlg0a58pzqjeupa7iu4rrqx9ut0mdt6dl0n5ja56] C:\DOCUME~1\default\LOCALS~1\Temp\qwyiw637y.exe
O4 - HKCU\..\Run: [mc7tvmpz0cb] C:\DOCUME~1\default\LOCALS~1\Temp\b42pvkka1a5.exe
O4 - HKCU\..\Run: [ubbeqc10gosj9di1qdel5auue2qgppeu10a7] C:\DOCUME~1\default\LOCALS~1\Temp\lhlkqal87.exe
O4 - HKCU\..\Run: [gt8zidm1ednku2] C:\DOCUME~1\default\LOCALS~1\Temp\t05je30asor.exe
O4 - HKCU\..\Run: [q8yizft69987cfqrzyiak9283cprf4d71dv] C:\DOCUME~1\default\LOCALS~1\Temp\c5ukwu52.exe
O4 - HKCU\..\Run: [s0qmgunp6lc65] C:\DOCUME~1\default\LOCALS~1\Temp\vp7p8e7yr3ca.exe
O4 - HKCU\..\Run: [qtnytnk384b1jgd85um] C:\DOCUME~1\default\LOCALS~1\Temp\b0nsmp.exe
O4 - HKCU\..\Run: [bvecbghujsshvcoqu5w6a5k1ge9qbxtsr] C:\DOCUME~1\default\LOCALS~1\Temp\jagb3csvlus.exe
O4 - HKCU\..\Run: [un31qgvv5lvndtnf6nfzl5i169pfzujnyydaop] C:\DOCUME~1\default\LOCALS~1\Temp\ubw5u3wv0nc.exe
O4 - HKCU\..\Run: [wxdzmmzhb95gghpaxmhnaxkgydppopll31gp9cqgptswj630] C:\DOCUME~1\default\LOCALS~1\Temp\anzbhm.exe
O4 - HKCU\..\Run: [l2gzmn4afzhoe4pikw3x2v7u1v4udgm2e] C:\DOCUME~1\default\LOCALS~1\Temp\i5gv9yz.exe
O4 - HKCU\..\Run: [oa31jezmatj50qfd0ujgpiar4f1pnggtz1r] C:\DOCUME~1\default\LOCALS~1\Temp\xp64h3io.exe
O4 - HKCU\..\Run: [zukhb3oia7krctlehar9mqigbk] C:\DOCUME~1\default\LOCALS~1\Temp\f9my8u3o.exe
O4 - HKCU\..\Run: [hil7v43nwb7dgxjb6xx5] C:\DOCUME~1\default\LOCALS~1\Temp\z7wokyan0.exe
O4 - HKCU\..\Run: [puxwk09edczxmjf0a9nwcd9dlu7nt9ousd] C:\DOCUME~1\default\LOCALS~1\Temp\fh4n7s0yik.exe
O4 - HKCU\..\Run: [x6jx5xo1o44yyr48ng4jzegafmajtbpp0ao0lv] C:\DOCUME~1\default\LOCALS~1\Temp\ln4fvc6549u9.exe
O4 - HKCU\..\Run: [fi7j3zqf24qe] C:\DOCUME~1\default\LOCALS~1\Temp\o6zsx7i5ucm.exe
O4 - HKCU\..\Run: [r2nbleq5xtezc19u3zmvha13gyvh] C:\DOCUME~1\default\LOCALS~1\Temp\mzj2u2di1d9cc.exe
O4 - HKCU\..\Run: [d6kimi5b9pt6jo029] C:\DOCUME~1\default\LOCALS~1\Temp\f0lyg2hs8b.exe
O4 - HKCU\..\Run: [fsbx76aix9jb5hxt2] C:\DOCUME~1\default\LOCALS~1\Temp\z3ueg27q.exe
O4 - HKCU\..\Run: [hz2r5yhrn5pep] C:\DOCUME~1\default\LOCALS~1\Temp\btqa3c.exe
O4 - HKCU\..\Run: [dzrle6x0ra7uoa] C:\DOCUME~1\default\LOCALS~1\Temp\iyqdtaxb4fk.exe
O4 - HKCU\..\Run: [dejx1plr9m7ojx386i541s08i3hum] C:\DOCUME~1\default\LOCALS~1\Temp\hr6yyr80g.exe
O4 - HKCU\..\Run: [lj49lofhm5udax] C:\DOCUME~1\default\LOCALS~1\Temp\tshdqn0.exe
O4 - HKCU\..\Run: [ds8pqwiffbh4kl5otld8k63k0tjyaa5nyrp236yhmvk] C:\DOCUME~1\default\LOCALS~1\Temp\ixdf2p.exe
O4 - HKCU\..\Run: [z8ul1vfbb87q44v42800z0txwd367jnz3] C:\DOCUME~1\default\LOCALS~1\Temp\ctm95p5.exe
O4 - HKCU\..\Run: [pjexkkgktnvdcnn6we5h2xnv2u21boojs6xh] C:\DOCUME~1\default\LOCALS~1\Temp\cl3j1n04k5.exe
O4 - HKCU\..\Run: [vldpd3v6ie33r6] C:\DOCUME~1\default\LOCALS~1\Temp\f6xamg3bsu.exe
O4 - HKCU\..\Run: [iod662jp1dwzakviwc2vqlao1ws8dfwdxveupm] C:\DOCUME~1\default\LOCALS~1\Temp\sa0gz1e.exe
O4 - HKCU\..\Run: [vvkrgc95weyx3z12ljyckclr902qrsny7ju7] C:\DOCUME~1\default\LOCALS~1\Temp\inxy9b.exe
O4 - HKCU\..\Run: [b320hho7zsmxpda374zakfrydthndt6lsgpz33v60kw7n2r2p] C:\DOCUME~1\default\LOCALS~1\Temp\kwnpa3m.exe
O4 - HKCU\..\Run: [p0zrz0qklsv4ytii7cinc48wmvuqus2f225p3idnjldl] C:\DOCUME~1\default\LOCALS~1\Temp\m0tq3bc.exe
O4 - HKCU\..\Run: [kraobda2do3g7oizgmf54tw475] C:\DOCUME~1\default\LOCALS~1\Temp\nom9jbvn5.exe
O4 - HKCU\..\Run: [sa03vhytq2r5697ui2zxbsk4e4hbspbwg] C:\DOCUME~1\default\LOCALS~1\Temp\hrzmzc.exe
O4 - HKCU\..\Run: [l59n389n8rghcu090sqk7lmb5y9n0ealcv] C:\DOCUME~1\default\LOCALS~1\Temp\eihawl6tn.exe
O4 - HKCU\..\Run: [gr1qz8yd7982s] C:\DOCUME~1\default\LOCALS~1\Temp\f7w7yve0mlmm5.exe
O4 - HKCU\..\Run: [gttto4qx7k5t0dwofw9pndpirltns8njn] C:\DOCUME~1\default\LOCALS~1\Temp\p3f2t4yfs0o.exe
O4 - HKCU\..\Run: [f18xvhjp2gxiajjmlzz6cayyjtlnv91ykoqgkpfep7lm] C:\DOCUME~1\default\LOCALS~1\Temp\z3sp85berllyw.exe
O4 - HKCU\..\Run: [db0ndku1q4exy2b4asik02o] C:\DOCUME~1\default\LOCALS~1\Temp\mdba9oks.exe
O4 - HKCU\..\Run: [yj3c0g1hw1aywd6ojh2uj5hy9bmjp] C:\DOCUME~1\default\LOCALS~1\Temp\s0s065.exe
O4 - HKCU\..\Run: [uarc4rbl3d1zcv6ra9yhwmm25xbglx0ily9] C:\DOCUME~1\default\LOCALS~1\Temp\dp7bol3usewlu.exe
O4 - HKCU\..\Run: [b3lai5uscv] C:\DOCUME~1\default\LOCALS~1\Temp\a3imrd.exe
O4 - HKCU\..\Run: [x4wdcivf2] C:\DOCUME~1\default\LOCALS~1\Temp\wtadrcl.exe
O4 - HKCU\..\Run: [n5trexkeif7b4g7qgqld03smkx4yh47rki4j9w7ue] C:\DOCUME~1\default\LOCALS~1\Temp\iqj5k2.exe
O4 - HKCU\..\Run: [rb0y6h16gmdykc4p] C:\DOCUME~1\default\LOCALS~1\Temp\shkvbke4.exe
O4 - HKCU\..\Run: [pgk4fpobqpgfbttl5cpxhp26utuefw1hwe98m4eq1nnvw3] C:\DOCUME~1\default\LOCALS~1\Temp\t483g7kpb.exe
O4 - HKCU\..\Run: [p6xf1sjac5] C:\DOCUME~1\default\LOCALS~1\Temp\omwdsxo.exe
O4 - HKCU\..\Run: [cz3zpzszk5jw75tyjfb662tg037pt7s4c275be5e] C:\DOCUME~1\default\LOCALS~1\Temp\nxll6162atb.exe
O4 - HKCU\..\Run: [lmlvikmli57rkklpovhtn47ivykpolbrb2qpkwh9thhwib4] C:\DOCUME~1\default\LOCALS~1\Temp\tlq06jtc.exe
O4 - HKCU\..\Run: [ynr80x0tm077evaiapsnh] C:\DOCUME~1\default\LOCALS~1\Temp\zju2t1cab9q.exe
O4 - HKCU\..\Run: [xpfk3wfyyhjgko1lr17six0fxv08qloxxeolud3d4e] C:\DOCUME~1\default\LOCALS~1\Temp\facorm.exe
O4 - HKCU\..\Run: [fmgmarwaj8jkiyu5] C:\DOCUME~1\default\LOCALS~1\Temp\sg0t7n774k.exe
O4 - HKCU\..\Run: [tb3qeiz40kkx097ij0fbrkrj8di5odgubt1] C:\DOCUME~1\default\LOCALS~1\Temp\wnp2nr48x2x.exe
O4 - HKCU\..\Run: [w906iovdeor1s4gob1wu5qy0zd39vhnnvikkbm47hehs] C:\DOCUME~1\default\LOCALS~1\Temp\qj2ggn.exe
O4 - HKCU\..\Run: [feu11te0b] C:\DOCUME~1\default\LOCALS~1\Temp\wo7eg5r0zn0.exe
O4 - HKCU\..\Run: [rnuly4gdagjxzglwjatwh872j8dfb] C:\DOCUME~1\default\LOCALS~1\Temp\ps3fwf.exe
O4 - HKCU\..\Run: [y1jxlwc8n9vdn8lkojd72fuqzygaf1t3tdff] C:\DOCUME~1\default\LOCALS~1\Temp\vtd1zo0aoo1v8.exe
O4 - HKCU\..\Run: [a526h35jgaqnchu80ob9hliefaagnel1as0lyoxrqpdxq] C:\DOCUME~1\default\LOCALS~1\Temp\mtveb9g6ussyt.exe
O4 - HKCU\..\Run: [cs0luzffpj5vz] C:\DOCUME~1\default\LOCALS~1\Temp\kvx0lzdq72.exe
O4 - HKCU\..\Run: [t7ugri6naq4w] C:\DOCUME~1\default\LOCALS~1\Temp\bix39i.exe
O4 - HKCU\..\Run: [eqr7qkio4eje2434ewx1g] C:\DOCUME~1\default\LOCALS~1\Temp\miwzk0n.exe
O4 - HKCU\..\Run: [q2de7c00pllfqo] C:\DOCUME~1\default\LOCALS~1\Temp\akthl3k44que.exe
O4 - HKCU\..\Run: [ytp9fqjnuhxrrrm6oq8e3cw6w5a2gbwryx9v0] C:\DOCUME~1\default\LOCALS~1\Temp\usipsdgnoq.exe
O4 - HKCU\..\Run: [jri8ui3g5rh7n1qklwj8pxi1qm] C:\DOCUME~1\default\LOCALS~1\Temp\swemolvy.exe
O4 - HKCU\..\Run: [smy7cxu56yfrk86lnpw8gfjjyp3byql08j56bg] C:\DOCUME~1\default\LOCALS~1\Temp\c0k9f1lj8h.exe
O4 - HKCU\..\Run: [xodr7sg14gl38f71mm7jdnfnj6isvx3] C:\DOCUME~1\default\LOCALS~1\Temp\l5maonwo.exe
O4 - HKCU\..\Run: [gigok2audxgbj5lwtfbz4l0e5ulwam6prz7hs] C:\DOCUME~1\default\LOCALS~1\Temp\c5ln0fl0h.exe
O4 - HKCU\..\Run: [qg3f8i81b5pagjqm3i7rx14zhd1g8a72cue5r13] C:\DOCUME~1\default\LOCALS~1\Temp\f6436u.exe
O4 - HKCU\..\Run: [ovae0c2vdpmvpmviwdebtp7mmq5q2x2ol2] C:\DOCUME~1\default\LOCALS~1\Temp\k96qpek.exe
O4 - HKCU\..\Run: [eow75c18747rrc6j6yfozojtc52cxig2y] C:\DOCUME~1\default\LOCALS~1\Temp\aulcqaa5b1.exe
O4 - HKCU\..\Run: [br7va7yxwav46fph] C:\DOCUME~1\default\LOCALS~1\Temp\rdk62li0kgy.exe
O4 - HKCU\..\Run: [ty19aosc9gny] C:\DOCUME~1\default\LOCALS~1\Temp\q10i0gwayd.exe
O4 - HKCU\..\Run: [yhupcn6w478puj34pqmj54thux0bb23qk5hgbmj] C:\DOCUME~1\default\LOCALS~1\Temp\k8uj1397j.exe
O4 - HKCU\..\Run: [e1miuicd8nryiyuotgojc37lyizmydsu82jvxiut3cuzeo66] C:\DOCUME~1\default\LOCALS~1\Temp\evmojbvec.exe
O4 - HKCU\..\Run: [c49vkdeufvdndva7wv598a] C:\DOCUME~1\default\LOCALS~1\Temp\vunkwdsnxdb.exe
O4 - HKCU\..\Run: [fpnac92p77taq8le43jj70hm6mh4m6y0grqn93yq9yln] C:\DOCUME~1\default\LOCALS~1\Temp\usf6khcki8h4.exe
O4 - HKCU\..\Run: [dluau3mbcu4lpo10yab6trqyxev3u13wi6ob38jl0g85v3h66r] C:\DOCUME~1\default\LOCALS~1\Temp\a8n6diiv7g2.exe
O4 - HKCU\..\Run: [bz12hlibxxd0kinkoylu8hiutoet] C:\DOCUME~1\default\LOCALS~1\Temp\jyg9uju.exe
O4 - HKCU\..\Run: [gy3v7rbiat9zmp4yyrwnp] C:\DOCUME~1\default\LOCALS~1\Temp\jsi506jy0i.exe
O4 - HKCU\..\Run: [onwgmrcsiw5] C:\DOCUME~1\default\LOCALS~1\Temp\gfcff5ctfh2x.exe
O4 - HKCU\..\Run: [juunsf97qabpu2u78ynmvkt] C:\DOCUME~1\default\LOCALS~1\Temp\rch4skr.exe
O4 - HKCU\..\Run: [pmj9ey15wv09fezmhxk1vrpk] C:\DOCUME~1\default\LOCALS~1\Temp\po8wm1y7bn.exe
O4 - HKCU\..\Run: [l4bnhla2t7550b3g6nfqsuosmxqvu0sxwbhqlvl692ettfj] C:\DOCUME~1\default\LOCALS~1\Temp\ipwwj26g6x0zx.exe
O4 - HKCU\..\Run: [jz53ksj6vxyy2h] C:\DOCUME~1\default\LOCALS~1\Temp\nrm1h3.exe
O4 - HKCU\..\Run: [o8varswk44fxj] C:\DOCUME~1\default\LOCALS~1\Temp\empez1qb6qs8t.exe
O4 - HKCU\..\Run: [l0mgldhbwkbkn9zw4xc7fug7tskcuodrisa1cjmo] C:\DOCUME~1\default\LOCALS~1\Temp\yc9tc8wy.exe
O4 - HKCU\..\Run: [mhm1tpdo152wv5hlmfbcwjgtv4ot7i7v3t1] C:\DOCUME~1\default\LOCALS~1\Temp\d41u9ri7253xb.exe
O4 - HKCU\..\Run: [zcbcnaa305nsz6n13vv4ljp622qms80cick2vmxgyeu2dx3977] C:\DOCUME~1\default\LOCALS~1\Temp\dpp2vnsu2f7.exe
O4 - HKCU\..\Run: [bw8zziez5l] C:\DOCUME~1\default\LOCALS~1\Temp\xxealeou.exe
O4 - HKCU\..\Run: [zgove8exjn90] C:\DOCUME~1\default\LOCALS~1\Temp\ggslhff0i7z.exe
O4 - HKCU\..\Run: [wotg3vxqkp80vwp0dby56y0wat06unikc2yt0g] C:\DOCUME~1\default\LOCALS~1\Temp\aohto6b0.exe
O4 - HKCU\..\Run: [y6kafmtrre14u1jl11635mc2] C:\DOCUME~1\default\LOCALS~1\Temp\qg8flof7ibbf.exe
O4 - HKCU\..\Run: [qadyhh97p6tc7a2vmud670i9gkzd1uewo4g] C:\DOCUME~1\default\LOCALS~1\Temp\y5n9k463a5v.exe
O4 - HKCU\..\Run: [mleiqxd442ulq7obk0b7l0qjih3tw] C:\DOCUME~1\default\LOCALS~1\Temp\rfff4xtqu7b6.exe
O4 - HKCU\..\Run: [rcxno9nldgzp9qlrmnkt1p1rbel8zt79bv6tor4uq] C:\DOCUME~1\default\LOCALS~1\Temp\ajwcvot3.exe
O4 - HKCU\..\Run: [rwjkdb2q3fvfum5lblmwmipkib62] C:\DOCUME~1\default\LOCALS~1\Temp\v3hzfpgk.exe
O4 - HKCU\..\Run: [ndgegzh2bi3the7jzyk726631ud4ah8ddlf] C:\DOCUME~1\default\LOCALS~1\Temp\nvbu1m.exe
O4 - HKCU\..\Run: [j8z7db06jyfbt3kddhpsofjgfeo] C:\DOCUME~1\default\LOCALS~1\Temp\ydnfnfmmgix2.exe
O4 - HKCU\..\Run: [gbs5j04bh4d3lx3x5jcea5sytgnb4rhg7yovv0yinoogyq99] C:\DOCUME~1\default\LOCALS~1\Temp\gzoe7v1x7xcc.exe
O4 - HKCU\..\Run: [yjcsuyfe3l] C:\DOCUME~1\default\LOCALS~1\Temp\von15rn.exe
O4 - HKCU\..\Run: [fwig4m7zfp6wc3x4k5z0ejans9ekpza4a4j4k0d69tuv] C:\DOCUME~1\default\LOCALS~1\Temp\etsz59tfc66k.exe
O4 - HKCU\..\Run: [h8v12i095zlemm6uxlzokg] C:\DOCUME~1\default\LOCALS~1\Temp\xvxn319eob91m.exe
O4 - HKCU\..\Run: [bfqn0voc2tth4pooprnuthihc4litpqw976ru1frc8exmoxwc3] C:\DOCUME~1\default\LOCALS~1\Temp\gx6vox1b9fk3.exe
O4 - HKCU\..\Run: [alctgbhfkqqvcj] C:\DOCUME~1\default\LOCALS~1\Temp\l4j3sgmq.exe
O4 - HKCU\..\Run: [onrh1z5ydzoroeb4l] C:\DOCUME~1\default\LOCALS~1\Temp\qsn855m50btg.exe
O4 - HKCU\..\Run: [pcleoi40wx2axjjxhjb1hyva7tllhwokzyh6xro] C:\DOCUME~1\default\LOCALS~1\Temp\kbc4fqyrdsrvy.exe
O4 - HKCU\..\Run: [wsdtpchu1z] C:\DOCUME~1\default\LOCALS~1\Temp\cutjytu4dbmsu.exe
O4 - HKCU\..\Run: [vtmkzaxl0dfqu7c0ts95fjrik9ezbb87hsu0bbcx4p1v0] C:\DOCUME~1\default\LOCALS~1\Temp\pqgddtej2zf.exe
O4 - HKCU\..\Run: [v38uznw0fvo4zr9q9xnm1e] C:\DOCUME~1\default\LOCALS~1\Temp\pvzxik56ha.exe
O4 - HKCU\..\Run: [subimvzcvw4ztqfoqeia0365hyrhjxw3as18y0iiei0n] C:\DOCUME~1\default\LOCALS~1\Temp\dtp0aq02640m.exe
O4 - HKCU\..\Run: [svle1c6blozcvsasu] C:\DOCUME~1\default\LOCALS~1\Temp\xhbwsjiid3fm.exe
O4 - HKCU\..\Run: [ytifeav116qvbgtyny999f7117ip0gsczicc7ujeh2j9x7te9] C:\DOCUME~1\default\LOCALS~1\Temp\bdenk8rqa5.exe
O4 - HKCU\..\Run: [rjdmlf4dvgfzz8zdpluhf5xyl0qj2ipgdypqj3ikz] C:\DOCUME~1\default\LOCALS~1\Temp\vldemnn47rd1.exe
O4 - HKCU\..\Run: [i8ohh7fsatwhl3fwmurmzbht7g7rpip3qp0hbg] C:\DOCUME~1\default\LOCALS~1\Temp\fs3a9gctabhl.exe
O4 - HKCU\..\Run: [lhqsz7oi6phtalsogqs] C:\DOCUME~1\default\LOCALS~1\Temp\soqlkqihva.exe
O4 - HKCU\..\Run: [l7o3h8vqxej7od6g63rvbepgwb8b5] C:\DOCUME~1\default\LOCALS~1\Temp\kq0ztul2.exe
O4 - HKCU\..\Run: [nj2pho2tmwsc7naz7p6sovyqu6p] C:\DOCUME~1\default\LOCALS~1\Temp\qscpwmo4ex.exe
O4 - HKCU\..\Run: [m103dwnfysh0tz6pliq1xp] C:\DOCUME~1\default\LOCALS~1\Temp\khm36nahznp.exe
O4 - HKCU\..\Run: [sufkeddx64acclcbeqn6mmi9i0fa6q5n0dzkq6qg0r] C:\DOCUME~1\default\LOCALS~1\Temp\tbpm0zrggrm2j.exe
O4 - HKCU\..\Run: [gzfp08fg2tdx59e4c775w124nleh6r8p7rruv8y3pd] C:\DOCUME~1\default\LOCALS~1\Temp\i59mvn6.exe
O4 - HKCU\..\Run: [jek5q1xc4p] C:\DOCUME~1\default\LOCALS~1\Temp\rgcopzntf.exe
O4 - HKCU\..\Run: [c6bsz0vn2uljbdb9l4049mu6pvsrh8ym1] C:\DOCUME~1\default\LOCALS~1\Temp\xaw7julsw32.exe
O4 - HKCU\..\Run: [o0vdznrsi1uwzpbhok] C:\DOCUME~1\default\LOCALS~1\Temp\y9z85q31fqh9.exe
O4 - HKCU\..\Run: [y8a52a4uw6ny79iz2qur9af9na0] C:\DOCUME~1\default\LOCALS~1\Temp\dizii6vssz.exe
O4 - HKCU\..\Run: [liijx15tckup] C:\DOCUME~1\default\LOCALS~1\Temp\eplu82pewd166.exe
O4 - HKCU\..\Run: [banbj47s28djiu46reep72m8ju3o78lsym1u486cux] C:\DOCUME~1\default\LOCALS~1\Temp\x7ltzpodn.exe
O4 - HKCU\..\Run: [ktboccw0440eygudhru53q163kaunp5tr6e5x4ps] C:\DOCUME~1\default\LOCALS~1\Temp\m15tuu3r5zr.exe
O4 - HKCU\..\Run: [s8smoc9ctk2d3n9h2jf6pwf3p6514f77] C:\DOCUME~1\default\LOCALS~1\Temp\c5iij3x3k42r2.exe
O4 - HKCU\..\Run: [jcgcg5pta15gdgjfe] C:\DOCUME~1\default\LOCALS~1\Temp\shyz75.exe
O4 - HKCU\..\Run: [df4576znhh] C:\DOCUME~1\default\LOCALS~1\Temp\f62xy8.exe
O4 - HKCU\..\Run: [swzqwqsqebfglma3uzuxd44likydwsy80dpihaexd2sz] C:\DOCUME~1\default\LOCALS~1\Temp\tcxr7qb0jvi.exe
O4 - HKCU\..\Run: [g3je7w020ld6] C:\DOCUME~1\default\LOCALS~1\Temp\yw577q7a2.exe
O4 - HKCU\..\Run: [i3d0ybz0ddf9y9cfv3apm1981528733zt3tlr6e] C:\DOCUME~1\default\LOCALS~1\Temp\x8cb7c1d8tg4.exe
O4 - HKCU\..\Run: [qf0b5pt71bxfe0bzzg9ujtocrt7b6q0i66xfdiivhv0gnum0l2] C:\DOCUME~1\default\LOCALS~1\Temp\v4ly9mmoi8h.exe
O4 - HKCU\..\Run: [jg03z1min0j0bgxt73wb5jb2yu0kikvu5698] C:\DOCUME~1\default\LOCALS~1\Temp\ts80ymz.exe
O4 - HKCU\..\Run: [b30bz5vl8] C:\DOCUME~1\default\LOCALS~1\Temp\q04rm6ib5in6.exe
O4 - HKCU\..\Run: [h99p8m1ytxuhq73gxx9zqtrc0] C:\DOCUME~1\default\LOCALS~1\Temp\lr4099.exe
O4 - HKCU\..\Run: [t2qsmphf1az19pcme84b] C:\DOCUME~1\default\LOCALS~1\Temp\s6078kdt7y.exe
O4 - HKCU\..\Run: [wlt7u3iq9tajftgy21bt] C:\DOCUME~1\default\LOCALS~1\Temp\ysqss826x4c.exe
O4 - HKCU\..\Run: [l8q8yw3046mo62rltctehr32iwams6ibvsj5lqj49] C:\DOCUME~1\default\LOCALS~1\Temp\gc48omiap3.exe
O4 - HKCU\..\Run: [ikbcxmz13g52rpyy2d9bnmjsjm8yu6h61bs6exe0d] C:\DOCUME~1\default\LOCALS~1\Temp\l8kv6yr5myx.exe
O4 - HKCU\..\Run: [qixy3wqwq6np] C:\DOCUME~1\default\LOCALS~1\Temp\qr5gt6mp.exe
O4 - HKCU\..\Run: [bpm1jq79o] C:\DOCUME~1\default\LOCALS~1\Temp\yiuz2m2g2ea.exe
O4 - HKCU\..\Run: [w5sasad9xs2wvysbczsdisyc3hc8up27nxe9] C:\DOCUME~1\default\LOCALS~1\Temp\pwe7b9qy7sah.exe
O4 - HKCU\..\Run: [rs75z6tbgpdzf8s9fvjjvr6qyyng4uhylynqytn620yg] C:\DOCUME~1\default\LOCALS~1\Temp\ey62aa5.exe
O4 - HKCU\..\Run: [zupdzc461j7mryi8vfwfiewwn8] C:\DOCUME~1\default\LOCALS~1\Temp\zllw8e603m349.exe
O4 - HKCU\..\Run: [gha9nexz06ytvyfdqxjj6s1hhwgb78] C:\DOCUME~1\default\LOCALS~1\Temp\d5h6g2rw.exe
O4 - HKCU\..\Run: [r5c4kwmvdhkx9qpat0] C:\DOCUME~1\default\LOCALS~1\Temp\dr373ebclel6.exe
O4 - HKCU\..\Run: [b89si2sgr5paohdm07fzsfd95dv0pn0eatlbh] C:\DOCUME~1\default\LOCALS~1\Temp\q7w4up6pak37s.exe
O4 - HKCU\..\Run: [sm01yvzk4b1tn3jyzrmhxqsx7grpawwqaeon9] C:\DOCUME~1\default\LOCALS~1\Temp\wmvi6mekhokqe.exe
O4 - HKCU\..\Run: [ticoizgtfz040s697f8qq] C:\DOCUME~1\default\LOCALS~1\Temp\jmrasm02ol.exe
O4 - HKCU\..\Run: [drgnjellrlbw968jmoyukpcefw] C:\DOCUME~1\default\LOCALS~1\Temp\e2idxbrevjeh.exe
O4 - HKCU\..\Run: [rnt5zjya8hr2r99ustdjgxpof1ovxeee3oqrqoaobc] C:\DOCUME~1\default\LOCALS~1\Temp\kavthm.exe
O4 - HKCU\..\Run: [j1dh1vmkrj8dgfssbnhdavzoetq4789k0je40go3k76stke] C:\DOCUME~1\default\LOCALS~1\Temp\jc5avfk2fj9e.exe
O4 - HKCU\..\Run: [rt4rttnpdnaa6l93ddlbl2pp0ko7dewgtp3uxbe0ojk2ql78] C:\DOCUME~1\default\LOCALS~1\Temp\gl871ijd.exe
O4 - HKCU\..\Run: [sdt2ybfutnvjjjdd2zdzy4ghm00lephe18yw2] C:\DOCUME~1\default\LOCALS~1\Temp\r9qjme6qrrq.exe
O4 - HKCU\..\Run: [lbylq6yjoik143na2rrq0ab94hnvdwjw5o77ihn88lz909] C:\DOCUME~1\default\LOCALS~1\Temp\kggwr0tdcu2.exe
O4 - HKCU\..\Run: [t2jbzezjftpoxjfa7pvoic] C:\DOCUME~1\default\LOCALS~1\Temp\qlyvbyue.exe
O4 - HKCU\..\Run: [u5tga2vd03sbutcirqw4zxu2l8wabkac26z4pmfd9priq2wfj6] C:\DOCUME~1\default\LOCALS~1\Temp\brevgt.exe
O4 - HKCU\..\Run: [dkrycpc7qa5sbih7vcok71rlr79063u0lz] C:\DOCUME~1\default\LOCALS~1\Temp\slaau64ei7j.exe
O4 - HKCU\..\Run: [imipdcpmiz] C:\DOCUME~1\default\LOCALS~1\Temp\y5k2ykda0z.exe
O4 - HKCU\..\Run: [lx56ixcvv2unyf0xvhf5mtxkib3degfdlvsalfus26y1o58g] C:\DOCUME~1\default\LOCALS~1\Temp\uv3vt7om.exe
O4 - HKCU\..\Run: [uey0c3ciiql9tzwd4pit56t8i] C:\DOCUME~1\default\LOCALS~1\Temp\xixlof3y8r.exe
O4 - HKCU\..\Run: [yk6ykfd2767ldj08o9sebztvgtnft4h3rx7fl3srlmlt] C:\DOCUME~1\default\LOCALS~1\Temp\twkblnljnq7y.exe
O4 - HKCU\..\Run: [yrn8iwt8a511j2oakhe86wwmlfhhz1e] C:\DOCUME~1\default\LOCALS~1\Temp\o9q7ubvbpn.exe
O4 - HKCU\..\Run: [g31qv6p5ftqi7usskjb8arshv60ceu] C:\DOCUME~1\default\LOCALS~1\Temp\wd7zy6.exe
O4 - HKCU\..\Run: [rv806vd6rcw395nb8855nfx2ieje0b7059] C:\DOCUME~1\default\LOCALS~1\Temp\nggmzt8.exe
O4 - HKCU\..\Run: [kawc7vv39w36rto51oi4kwnx43pqfz8] C:\DOCUME~1\default\LOCALS~1\Temp\pqrh041n01u.exe
O4 - HKCU\..\Run: [p0s69tt6661e5e884cbr371qfa2es6rawmpt6pyiuqrj9a] C:\DOCUME~1\default\LOCALS~1\Temp\wjekgv.exe
O4 - HKCU\..\Run: [ohq04tyhfi8cjongqi6iq07izzgwtdsw0xguvuir8u9] C:\DOCUME~1\default\LOCALS~1\Temp\woa1ap8l.exe
O4 - HKCU\..\Run: [b0qvqj1ot7xi0mwnixwk7tmuawpga2d6t6ue6cka2gs06ng7x] C:\DOCUME~1\default\LOCALS~1\Temp\t2tafp1mhxxyl.exe
O4 - HKCU\..\Run: [edx04eyjyj2949ushd5llqc8f8cyeknafzy44j3jo] C:\DOCUME~1\default\LOCALS~1\Temp\h8mb5tfx29p.exe
O4 - HKCU\..\Run: [a8pemry17hz6cuha9gdq9owacgchjh39jug05d6] C:\DOCUME~1\default\LOCALS~1\Temp\c018ce4w.exe
O4 - HKCU\..\Run: [peh5i2nsx2m3cmj4] C:\DOCUME~1\default\LOCALS~1\Temp\uikuloqw.exe
O4 - HKCU\..\Run: [j8c02rsgujp1ixcy8jz5gkhpt1skc01l11uestg1y5aa1wpnhp] C:\DOCUME~1\default\LOCALS~1\Temp\u2eclwf.exe
O4 - HKCU\..\Run: [yvmh36bl57ts3clkg0lznpt627nb982n] C:\DOCUME~1\default\LOCALS~1\Temp\wk2bxfjqdk51.exe
O4 - HKCU\..\Run: [a1qzbrcudnwsmati3676fp7s8lru7gwshkpji9vi0hkmh] C:\DOCUME~1\default\LOCALS~1\Temp\qqzs332rdk.exe
O4 - HKCU\..\Run: [c03gubx81t4u2pge2dedxwwe1hxpxrr18wd9s5b3] C:\DOCUME~1\default\LOCALS~1\Temp\sqrq8xx4.exe
O4 - HKCU\..\Run: [njeu04a8p8xt95g8qdv] C:\DOCUME~1\default\LOCALS~1\Temp\frnyyxgu7pv.exe
O4 - HKCU\..\Run: [q3qcdgs5671g5beuto2ds] C:\DOCUME~1\default\LOCALS~1\Temp\s9hke6.exe
O4 - HKCU\..\Run: [m65k40xu0i58ewc3asvy] C:\DOCUME~1\default\LOCALS~1\Temp\nr1w335q279nd.exe
O4 - HKCU\..\Run: [l7ghgro54ot8d1pqltgmgtbqdp] C:\DOCUME~1\default\LOCALS~1\Temp\v86z9blq.exe
O4 - HKCU\..\Run: [eli72kans2cftinsxuocqjnsblr] C:\DOCUME~1\default\LOCALS~1\Temp\wagb08.exe
O4 - HKCU\..\Run: [y6tid23uq2inzqyp0raist] C:\DOCUME~1\default\LOCALS~1\Temp\ztzp5dqo79.exe
O4 - HKCU\..\Run: [v905dboyn2hg4dt] C:\DOCUME~1\default\LOCALS~1\Temp\xsppx1eh.exe
O4 - HKCU\..\Run: [w062gkwaxa1b] C:\DOCUME~1\default\LOCALS~1\Temp\pxca48tfed34.exe
O4 - HKCU\..\Run: [pm74tl5n7t8mcj6] C:\DOCUME~1\default\LOCALS~1\Temp\e2zvs0h8.exe
O4 - HKCU\..\Run: [a6nj60hsuyh8rza] C:\DOCUME~1\default\LOCALS~1\Temp\ywoqda4g1mz.exe
O4 - HKCU\..\Run: [wx2xe5shwsgqissa0ax4ugvxcd0egnvp9j2sxv07vpx] C:\DOCUME~1\default\LOCALS~1\Temp\babjy793d3g2q.exe
O4 - HKCU\..\Run: [s1k9wvzdi2a64ofk6ns2fgjw75my5mdqqu1kxbe] C:\DOCUME~1\default\LOCALS~1\Temp\zd9m1c9tii8p.exe
O4 - HKCU\..\Run: [pxqs53i5nvpko43aqdoji7uvd1k1u6fpbtlm8kg0] C:\DOCUME~1\default\LOCALS~1\Temp\g1dmr534.exe
O4 - HKCU\..\Run: [s0amvs33e1i4n5cy1] C:\DOCUME~1\default\LOCALS~1\Temp\otf6jt8r9t.exe
O4 - HKCU\..\Run: [ipw8w39jauvsk0i55] C:\DOCUME~1\default\LOCALS~1\Temp\i4v7fff.exe
O4 - HKCU\..\Run: [ry4jxmcvkdmve4o2] C:\DOCUME~1\default\LOCALS~1\Temp\nvt7c9c2gp10y.exe
O4 - HKCU\..\Run: [nbg6w1lpzvjj7x5b1wefbkzey03] C:\DOCUME~1\default\LOCALS~1\Temp\qzujhz1pj.exe
O4 - HKCU\..\Run: [noh5q2xg1saraoh4h6i] C:\DOCUME~1\default\LOCALS~1\Temp\pm46tn.exe
O4 - HKCU\..\Run: [t8pglhppjin73ybjafl8zzmk1nmyips2y9iiatx] C:\DOCUME~1\default\LOCALS~1\Temp\horhn4o.exe
O4 - HKCU\..\Run: [tyobwu65qogxvfme3zj5pebbaipe0gsiy54agmpzo3uuej] C:\DOCUME~1\default\LOCALS~1\Temp\t7kevfpdu69gc.exe
O4 - HKCU\..\Run: [y245nbbsfytik526lip78lejcqnk79] C:\DOCUME~1\default\LOCALS~1\Temp\n0vla6jdib.exe
O4 - HKCU\..\Run: [u84icsio7d4ivw8jnr9vls] C:\DOCUME~1\default\LOCALS~1\Temp\qoxffek4fmyfg.exe
O4 - HKCU\..\Run: [c1vl5jgqclh] C:\DOCUME~1\default\LOCALS~1\Temp\vq53y9c.exe
O4 - HKCU\..\Run: [b5a4gv9l60m2viiu6i] C:\DOCUME~1\default\LOCALS~1\Temp\hsouvtnn7vc.exe
O4 - HKCU\..\Run: [wsjilw2yuw2ko06k7j2urkuxe5ah8] C:\DOCUME~1\default\LOCALS~1\Temp\hh24tgbz63w.exe
O4 - HKCU\..\Run: [rq3ztf9bj87pqu3cq5xxtn3n] C:\DOCUME~1\default\LOCALS~1\Temp\g3hmzh50tk.exe
O4 - HKCU\..\Run: [wnx4ztokzu1wp2xhypwtbqifagrne9] C:\DOCUME~1\default\LOCALS~1\Temp\wyp9q9.exe
O4 - HKCU\..\Run: [u7qhf9sz8ufb4b9] C:\DOCUME~1\default\LOCALS~1\Temp\va9abrthlxd8.exe
O4 - HKCU\..\Run: [ean2sz4nubehxm8dzx] C:\DOCUME~1\default\LOCALS~1\Temp\bcirem589o6tu.exe
O4 - HKCU\..\Run: [detpgqudvec39jpa] C:\DOCUME~1\default\LOCALS~1\Temp\bny9bkr0zi.exe
O4 - HKCU\..\Run: [rbbocl4zoq3] C:\DOCUME~1\default\LOCALS~1\Temp\sd6b5k.exe
O4 - HKCU\..\Run: [euufdkr6cu16y8ggqqtwr84demv5] C:\DOCUME~1\default\LOCALS~1\Temp\fsadrxwpu.exe
O4 - HKCU\..\Run: [n8opkumvzyw08gtl2ifxaqlgpl4c041w63w] C:\DOCUME~1\default\LOCALS~1\Temp\f8eywc215.exe
O4 - HKCU\..\Run: [jrqrbs0dgnq9l7pv9t0nw1zsm47w4zjtr] C:\DOCUME~1\default\LOCALS~1\Temp\mk4av091svcq6.exe
O4 - HKCU\..\Run: [hpvc1oe6kiexx5z6bkr23k] C:\DOCUME~1\default\LOCALS~1\Temp\nxhoyzal2ozhp.exe
O4 - HKCU\..\Run: [acx16t9o5a4rq7ebeb65fj8i59on1eiwo3nzeyg01anme3] C:\DOCUME~1\default\LOCALS~1\Temp\shxg8bop.exe
O4 - HKCU\..\Run: [lehemk67yp2xs2d842tj5bof6q7dk8t91mv1785lewezu7be] C:\DOCUME~1\default\LOCALS~1\Temp\h9yh6kygk70at.exe
O4 - HKCU\..\Run: [u723skfbfwy8hu7wgkntb19zcq5gzzdox] C:\DOCUME~1\default\LOCALS~1\Temp\ltijc4ew.exe
O4 - HKCU\..\Run: [a7ypjck9h3embxmc6l9yg71ldokhx] C:\DOCUME~1\default\LOCALS~1\Temp\l6un19pz.exe
O4 - HKCU\..\Run: [ktc0c5emrim8j6yblo278q7oyyi8bcb6faf] C:\DOCUME~1\default\LOCALS~1\Temp\lir7djxwq.exe
O4 - HKCU\..\Run: [ljmcq6efk7e4s3airdue3m5] C:\DOCUME~1\default\LOCALS~1\Temp\ywr840vy.exe
O4 - HKCU\..\Run: [nbtuojw7u7br5crk9hw9nf3vpj3thqzo0r5rsuhhxf02grbqej] C:\DOCUME~1\default\LOCALS~1\Temp\xfbh2v.exe
O4 - HKCU\..\Run: [sr9pkkyhmbw9nwcqoumk8t] C:\DOCUME~1\default\LOCALS~1\Temp\th4wnq5.exe
O4 - HKCU\..\Run: [w1qppza8y65e2p30eem6wz8jznaf5u1c3p3zxpi7p1e6etd] C:\DOCUME~1\default\LOCALS~1\Temp\ooqrct1y8m.exe
O4 - HKCU\..\Run: [max7qddw64drwp6m] C:\DOCUME~1\default\LOCALS~1\Temp\o2k478.exe
O4 - HKCU\..\Run: [n3varbpmyrovdb1p9c4g3exejkebtkco9] C:\DOCUME~1\default\LOCALS~1\Temp\nmwckn1xrwjl.exe
O4 - HKCU\..\Run: [gq5lhdte9gtephbnl0d0xmf] C:\DOCUME~1\default\LOCALS~1\Temp\wlfqyj8bj.exe
O4 - HKCU\..\Run: [pbvs7ve8dbref1ysnx6d76ghc0d6w7i31fgtqek] C:\DOCUME~1\default\LOCALS~1\Temp\xt5uxanzrv.exe
O4 - HKCU\..\Run: [h4bg8gu9w1ug1roa51t8dl12wfzgk5xnd25jd9p52yofh] C:\DOCUME~1\default\LOCALS~1\Temp\so4h3i.exe
O4 - HKCU\..\Run: [poihj6aiprpmvmb3hmqrvq55d1lzr24o5n7uwergkd] C:\DOCUME~1\default\LOCALS~1\Temp\xxxonxqlrq.exe
O4 - HKCU\..\Run: [zmxzmwy43wkchdu18itjjx2ncqpd7ngv2vhah44o] C:\DOCUME~1\default\LOCALS~1\Temp\n6bd5j78id.exe
O4 - HKCU\..\Run: [l2nf5g8bz2a2] C:\DOCUME~1\default\LOCALS~1\Temp\uukd8yo.exe
O4 - HKCU\..\Run: [wxjqiulo9sgndtdl2p2khz903d4ycybxzvmadermxdapp] C:\DOCUME~1\default\LOCALS~1\Temp\xca0s1yvg0h.exe
O4 - HKCU\..\Run: [qx953d2g8qd7zf1j73y4low4xg45jd96syzm0t9osho] C:\DOCUME~1\default\LOCALS~1\Temp\qhfem1j5.exe
O4 - HKCU\..\Run: [szpjn00b5kl6rdnui9pvn3gs6p] C:\DOCUME~1\default\LOCALS~1\Temp\q8oyfvdtfuq.exe
O4 - HKCU\..\Run: [w2k89ivirtz7zwixp3im0v19mk53j9s] C:\DOCUME~1\default\LOCALS~1\Temp\idbj32s.exe
O4 - HKCU\..\Run: [bct85ytx5mfsirjtbxk4snr3out2sp1ouev] C:\DOCUME~1\default\LOCALS~1\Temp\ic3fc2.exe
O4 - HKCU\..\Run: [xdsl3i1eyqwgnvubzruounabwjj47poijyh9oasi66t] C:\DOCUME~1\default\LOCALS~1\Temp\hd0eqnokcnp4p.exe
O4 - HKCU\..\Run: [vwa2ppuupk4knsuy3v4paopns94vjis5462kla6h9xp9] C:\DOCUME~1\default\LOCALS~1\Temp\r5vdij37hh.exe
O4 - HKCU\..\Run: [n40b58jodoocnqjy4c14cam2vb7vnyfjzshzzde7] C:\DOCUME~1\default\LOCALS~1\Temp\xr81hfwi.exe
O4 - HKCU\..\Run: [qoclzf1qu4gkbbznq8i8oydvzd2w1ft2ly] C:\DOCUME~1\default\LOCALS~1\Temp\t6rn98rr8s.exe
O4 - HKCU\..\Run: [wygv0a1uo6yibqw38yjmvi4qq7u1goug49mqssapekpfmmor] C:\DOCUME~1\default\LOCALS~1\Temp\ej6eijv30hc.exe
O4 - HKCU\..\Run: [j02gy456u8ncm0dr] C:\DOCUME~1\default\LOCALS~1\Temp\cku1e674cq5b.exe
O4 - HKCU\..\Run: [a8jjvyomdnfub] C:\DOCUME~1\default\LOCALS~1\Temp\np60o5.exe
O4 - HKCU\..\Run: [vfdr4avg7f4493xul87k5wzuw5p50tctpcn0xro4d6k] C:\DOCUME~1\default\LOCALS~1\Temp\x6rdd0n.exe
O4 - HKCU\..\Run: [x5uxw9wzoyx8eyn] C:\DOCUME~1\default\LOCALS~1\Temp\a2xl0lpucdk5u.exe
O4 - HKCU\..\Run: [wv2xu1j5hfmyjrmwd6wvwytvl71urqvxlmst7xh15pj5yymmi] C:\DOCUME~1\default\LOCALS~1\Temp\dwsewq.exe
O4 - HKCU\..\Run: [z47hsi9m22] C:\DOCUME~1\default\LOCALS~1\Temp\rt1jp6m4w.exe
O4 - HKCU\..\Run: [h3svllu128o25t5zve366ymidwq9z1283jqb6u1fq2nqzv] C:\DOCUME~1\default\LOCALS~1\Temp\ljfhb3.exe
O4 - HKCU\..\Run: [pow6c2oztvf920ez] C:\DOCUME~1\default\LOCALS~1\Temp\torx42c3.exe
O4 - HKCU\..\Run: [bpaqyd4ntuv3bv55q9clni] C:\DOCUME~1\default\LOCALS~1\Temp\b1s05pthfq.exe
O4 - HKCU\..\Run: [bpjt5ifhtkyxbo6dhfh2mevtk7] C:\DOCUME~1\default\LOCALS~1\Temp\tvs0mzt.exe
O4 - HKCU\..\Run: [nm6pn5o6zg5wqji7ackcbfkozwzmhu9oc9kc] C:\DOCUME~1\default\LOCALS~1\Temp\m0tb1ch.exe
O4 - HKCU\..\Run: [jewf5f6u1tmbkojdiu14f40ypc9djlm7zwc3] C:\DOCUME~1\default\LOCALS~1\Temp\sb0xab.exe
O4 - HKCU\..\Run: [xhyufq760vz1sa5ton5pxwm1fgy] C:\DOCUME~1\default\LOCALS~1\Temp\ouh2x8ndd20p.exe
O4 - HKCU\..\Run: [d8q7muputrb5w7a7g8icbrqvn045jll5lgso5s7uk4vgl9g] C:\DOCUME~1\default\LOCALS~1\Temp\ltpwsywfj.exe
O4 - HKCU\..\Run: [u0fqjasm8b7s] C:\DOCUME~1\default\LOCALS~1\Temp\ti7ljm.exe
O4 - HKCU\..\Run: [sha7d3us8h5rhfl1gokukmdq9vcs8b6i256d] C:\DOCUME~1\default\LOCALS~1\Temp\zkjb5ers.exe
O4 - HKCU\..\Run: [p1rjkt2dx6byvufbf303nuqo2ji8caj5] C:\DOCUME~1\default\LOCALS~1\Temp\yqfrro.exe
O4 - HKCU\..\Run: [buaj47055lqq59jnyoif8akqrxaul] C:\DOCUME~1\default\LOCALS~1\Temp\y6ytsfl.exe
O4 - HKCU\..\Run: [gxcsihlgj] C:\DOCUME~1\default\LOCALS~1\Temp\l2l43pr0yt6pp.exe
O4 - HKCU\..\Run: [l4zywt3wy44gcftwxmkkg4vzbqk95] C:\DOCUME~1\default\LOCALS~1\Temp\s0e78y0.exe
O4 - HKCU\..\Run: [syworilzu3dun0tk] C:\DOCUME~1\default\LOCALS~1\Temp\avn6lqgohvb.exe
O4 - HKCU\..\Run: [kem7b8h53fret09dgnw3v01nulfaralos0yp3yekkn20ddi] C:\DOCUME~1\default\LOCALS~1\Temp\qt0q56j26d.exe
O4 - HKCU\..\Run: [gu60isy9ncfosowbz4kexeqtz5vpz13s91a9dunsbk0htp80] C:\DOCUME~1\default\LOCALS~1\Temp\uuivm2obll6.exe
O4 - HKCU\..\Run: [dq732f7gd9eg5tnx5u06hhziuaa] C:\DOCUME~1\default\LOCALS~1\Temp\qsy35ng.exe
O4 - HKCU\..\Run: [ixrjjrojp5e12b263ds3vaq] C:\DOCUME~1\default\LOCALS~1\Temp\fz6a328ca1f.exe
O4 - HKCU\..\Run: [xeqy2sti4] C:\DOCUME~1\default\LOCALS~1\Temp\ht3inrcyba.exe
O4 - HKCU\..\Run: [kiv9nojzrjvnfmsaikwh2nm2wbek] C:\DOCUME~1\default\LOCALS~1\Temp\xmdm0yn9rq.exe
O4 - HKCU\..\Run: [ito73ho061luswus4qk7hmefj4j9gz8x8pd7l2yx7] C:\DOCUME~1\default\LOCALS~1\Temp\g2c57n.exe
O4 - HKCU\..\Run: [v2lcpsdqf1in1wpvf46oec3wysm] C:\DOCUME~1\default\LOCALS~1\Temp\rutdld2n7xuq.exe
O4 - HKCU\..\Run: [h943jltbvrfxr24cgmdvi1am4jby95g07g] C:\DOCUME~1\default\LOCALS~1\Temp\tvm9kb.exe
O4 - HKCU\..\Run: [rsgimljdp87x4i9g96aoqjxx6nz1i] C:\DOCUME~1\default\LOCALS~1\Temp\k2nveq.exe
O4 - HKCU\..\Run: [ke7l1jchiz6yaz26d5wt5buw] C:\DOCUME~1\default\LOCALS~1\Temp\siue2j3nyfu07.exe
O4 - HKCU\..\Run: [y1opgo6iv9ncsar7lompqrb95zoo0hzs5vrhtp4zbrzuaq4] C:\DOCUME~1\default\LOCALS~1\Temp\elm4xn5wn.exe
O4 - HKCU\..\Run: [j9msdw1h56k9lbqfmx1apek] C:\DOCUME~1\default\LOCALS~1\Temp\n43lfg3b5.exe
O4 - HKCU\..\Run: [dd5oyi2w1z94sz309lz3y2q826olrgoqoq8bgpshwkq5q7] C:\DOCUME~1\default\LOCALS~1\Temp\auvry05w5wc18.exe
O4 - HKCU\..\Run: [xtofe9ylqdb8qluvhpy90z34pl1t9] C:\DOCUME~1\default\LOCALS~1\Temp\fyh7ni0n.exe
O4 - HKCU\..\Run: [vk16eul49x51eeo2zk3w59q98le0tquqag94g64bcdpwi23s] C:\DOCUME~1\default\LOCALS~1\Temp\tbrpdawlrbc8j.exe
O4 - HKCU\..\Run: [yr3nhj8bxbj8gqj3m5k4kaczdsjz8] C:\DOCUME~1\default\LOCALS~1\Temp\a9yequ2zh.exe
O4 - HKCU\..\Run: [nfdi1q5i7nw6hlkf0yoc95p1dahj] C:\DOCUME~1\default\LOCALS~1\Temp\n5d3ktd1576.exe
O4 - HKCU\..\Run: [vb97x85ewr3u7m] C:\DOCUME~1\default\LOCALS~1\Temp\fwkwhve.exe
O4 - HKCU\..\Run: [sx83s84rr7bkytxh3bdt] C:\DOCUME~1\default\LOCALS~1\Temp\mbwm2q.exe
O4 - HKCU\..\Run: [zs31na17itletxbdr6] C:\DOCUME~1\default\LOCALS~1\Temp\jqp12vbqvdh.exe
O4 - HKCU\..\Run: [jklbmqptcwnm0571h1r91d7tlx5pdjkmyggd1rn] C:\DOCUME~1\default\LOCALS~1\Temp\puodmt9bhtp5l.exe
O4 - HKCU\..\Run: [b6d3ezycp7dts6csnlejocbymog4a7fydbnpwkp7vvb2kt2dy] C:\DOCUME~1\default\LOCALS~1\Temp\kp2k7zbjyvs.exe
O4 - HKCU\..\Run: [pbfktmq57atcq] C:\DOCUME~1\default\LOCALS~1\Temp\lw8s2cc75hr.exe
O4 - HKCU\..\Run: [effaa3t05vbp1d3b0koznm7cmu8pr8y6xmwiwi] C:\DOCUME~1\default\LOCALS~1\Temp\gjwps6x.exe
O4 - HKCU\..\Run: [tf1bjskcmulcla0id4ljp4gdccw7fmf8] C:\DOCUME~1\default\LOCALS~1\Temp\ifzqxlo8h2q.exe
O4 - HKCU\..\Run: [q8bwolik6il11us0l2hr6hf4d3gbmd] C:\DOCUME~1\default\LOCALS~1\Temp\b5qfqrvv95.exe
O4 - HKCU\..\Run: [ilfminjvecjrkrnqpisjejmldo16] C:\DOCUME~1\default\LOCALS~1\Temp\skdcpqol.exe
O4 - HKCU\..\Run: [sjwxcft7dzfxebalv4hrnfh1hvp8r4a1lnh4dyd0] C:\DOCUME~1\default\LOCALS~1\Temp\wmx465dai7ys.exe
O4 - HKCU\..\Run: [p4wicysoedfuad681argcy] C:\DOCUME~1\default\LOCALS~1\Temp\nbulcawuxd.exe
O4 - HKCU\..\Run: [ibrn93zfpr8kiw] C:\DOCUME~1\default\LOCALS~1\Temp\r7dvqnqw2ni.exe
O4 - HKCU\..\Run: [u93rbz7z0c3ufyzkbnff46d9bvpzqmy7a1] C:\DOCUME~1\default\LOCALS~1\Temp\s63z86ma0.exe
O4 - HKCU\..\Run: [gs2gybl8dzq6cu1txnvbou2q27k20b10lgfwx55h8tq8irks] C:\DOCUME~1\default\LOCALS~1\Temp\qmt3981.exe
O4 - HKCU\..\Run: [d0ammm34cuw4z89fu5trwg9llqg1uvjxjaantjsprv2dtvk] C:\DOCUME~1\default\LOCALS~1\Temp\dq69yyvjd.exe
O4 - HKCU\..\Run: [zjqt6gfny4ri9ge01qf] C:\DOCUME~1\default\LOCALS~1\Temp\wgdm3ki6y.exe
O4 - HKCU\..\Run: [vkgbpj5307ronxovvo8u] C:\DOCUME~1\default\LOCALS~1\Temp\axe0grw3yq.exe
O4 - HKCU\..\Run: [qhrttgw6pw6wsjtdtyx1kyffjda5ofhqv15hl8xopagb9w6ydv] C:\DOCUME~1\default\LOCALS~1\Temp\zczipi.exe
O4 - HKCU\..\Run: [a54dyq2o1dzgpmzmsqf84voq7l] C:\DOCUME~1\default\LOCALS~1\Temp\r3bdwioj.exe
O4 - HKCU\..\Run: [zpe5glekl2vpdfeynoe4psmofc2krt2hkivb7fdqp0tu57] C:\DOCUME~1\default\LOCALS~1\Temp\isckge.exe
O4 - HKCU\..\Run: [y13h31rt5l71a9i46vz87mr2nwubbtratm7inub9yx] C:\DOCUME~1\default\LOCALS~1\Temp\hwlhspzu.exe
O4 - HKCU\..\Run: [d81lka2bqmd2kr015byu00g6znr8] C:\DOCUME~1\default\LOCALS~1\Temp\lnbikswu08gsa.exe
O4 - HKCU\..\Run: [lp4yi8bl3ft9ktxdckqmj1fqk8qprnsfff3i] C:\DOCUME~1\default\LOCALS~1\Temp\nesugam.exe
O4 - HKCU\..\Run: [c6r4zjcmrrndberh6l1ei] C:\DOCUME~1\default\LOCALS~1\Temp\b01hd7rw.exe
O4 - HKCU\..\Run: [myhy76r5bty6jrlco49a1yyjsapjbaq] C:\DOCUME~1\default\LOCALS~1\Temp\wha40n36zxm6v.exe
O4 - HKCU\..\Run: [copl0v6sf5mrw] C:\DOCUME~1\default\LOCALS~1\Temp\p1zurc6dwmuv.exe
O4 - HKCU\..\Run: [zfn47y3e94] C:\DOCUME~1\default\LOCALS~1\Temp\qu9fsj.exe
O4 - HKCU\..\Run: [jb0m1jdymq8j9qlxoriyt17xv5b6] C:\DOCUME~1\default\LOCALS~1\Temp\e7xj93.exe
O4 - HKCU\..\Run: [oy7xtljszo34tmlg024n983wd8elsd0uh] C:\DOCUME~1\default\LOCALS~1\Temp\k4qpmee5i.exe
O4 - HKCU\..\Run: [lfxclxqmzsiq2tphvgxxcdg4td2oq] C:\DOCUME~1\default\LOCALS~1\Temp\tya8g9v4i2n.exe
O4 - HKCU\..\Run: [oofc3iwslw0swrcm6x80019bwd6u85woz3ag] C:\DOCUME~1\default\LOCALS~1\Temp\sph410j.exe
O4 - HKCU\..\Run: [couplf9s9wo71wio35cruqdepjjhkf3u4rvyelphlma] C:\DOCUME~1\default\LOCALS~1\Temp\twe3xi3s1.exe
O4 - HKCU\..\Run: [xjqk9zyzzyl7jv8h83fcly56a] C:\DOCUME~1\default\LOCALS~1\Temp\muk3og.exe
O4 - HKCU\..\Run: [cyh4jo0oo41y9jcs1bx9ly614td9d4l71ih4xxz8] C:\DOCUME~1\default\LOCALS~1\Temp\k2uk365.exe
O4 - HKCU\..\Run: [chw8kkozqu9sdgm2ox] C:\DOCUME~1\default\LOCALS~1\Temp\x82t4b667.exe
O4 - HKCU\..\Run: [zgmga0uv451y8uu51cecaufvufb3s] C:\DOCUME~1\default\LOCALS~1\Temp\e8r19bou3ukkr.exe
O4 - HKCU\..\Run: [fc9sbvhl3oko5xxkuxptk] C:\DOCUME~1\default\LOCALS~1\Temp\a095yj5gpiin.exe
O4 - HKCU\..\Run: [wje1w8o5urzzgdz2e0bs7ag3] C:\DOCUME~1\default\LOCALS~1\Temp\n0hcys.exe
O4 - HKCU\..\Run: [ny98ostgufrmmgq24lhdkn7leqtay4xo92wqlnzs] C:\DOCUME~1\default\LOCALS~1\Temp\e2txfyd5.exe
O4 - HKCU\..\Run: [dkh274f1p0wy8eznugcc3ad] C:\DOCUME~1\default\LOCALS~1\Temp\fplv28at7.exe
O4 - HKCU\..\Run: [lr64pstghwbs3933cvo4sr6zzibdhhyxz0jfz1ip1uitestol5] C:\DOCUME~1\default\LOCALS~1\Temp\o3vcjojhib6rl.exe
O4 - HKCU\..\Run: [cq00ce2tzcpebu11h5dx3o5ihlfytvjr] C:\DOCUME~1\default\LOCALS~1\Temp\ggf8f76ght.exe
O4 - HKCU\..\Run: [hf8twufn8oq1m1hwefanj5zy933g7ln4jwkil9tlmoghucn] C:\DOCUME~1\default\LOCALS~1\Temp\fyypim036wvj.exe
O4 - HKCU\..\Run: [lio4ckb1gv0796pq264e5] C:\DOCUME~1\default\LOCALS~1\Temp\ksekggr.exe
O4 - HKCU\..\Run: [ghoaxm5wbjou5bbysky9ecvmk31xv7pf3zr] C:\DOCUME~1\default\LOCALS~1\Temp\gw2qwzh3pgt.exe
O4 - HKCU\..\Run: [bee9lyvsgoekcvxd5xddyiyq02w4eanxro22uqsp3wk60a] C:\DOCUME~1\default\LOCALS~1\Temp\n61d1dwfi.exe
O4 - HKCU\..\Run: [rvwg0ekyzrx4bm9q1755rxpy4tfv6plmelemmk8s2n] C:\DOCUME~1\default\LOCALS~1\Temp\zda4iafh4.exe
O4 - HKCU\..\Run: [l2o3m9puyhmhvdov0s4iabolwsvnh0eevsjkxo4] C:\DOCUME~1\default\LOCALS~1\Temp\u9txvbs4rs.exe
O4 - HKCU\..\Run: [evs1mlxp3zsyle9494dfg] C:\DOCUME~1\default\LOCALS~1\Temp\ojer4tggs.exe
O4 - HKCU\..\Run: [rhl9swrh1orra7vhnc29dfczkxj7h742m9b1kyfjpcxfq9t] C:\DOCUME~1\default\LOCALS~1\Temp\yjplyj0uxyo3z.exe
O4 - HKCU\..\Run: [z232ff4b7xa4zk9c0vny] C:\DOCUME~1\default\LOCALS~1\Temp\sygyu0ftdzk.exe
O4 - HKCU\..\Run: [zgk8xkod9kkthrefo08v] C:\DOCUME~1\default\LOCALS~1\Temp\jgb2vg.exe
O4 - HKCU\..\Run: [kkdcdwdkwofsyqokdcml8lzlvq5oqmtkwkaoydjg5phlyr4n4] C:\DOCUME~1\default\LOCALS~1\Temp\hed5ncfyrqz.exe
O4 - HKCU\..\Run: [igwhhxnu2rp7tr4u1x1fa7j2a9dna0zozlj0uq95lgq] C:\DOCUME~1\default\LOCALS~1\Temp\z7g331igb.exe
O4 - HKCU\..\Run: [ss3nub1v8juzntpzdr0mvr10sb] C:\DOCUME~1\default\LOCALS~1\Temp\un33t7.exe
O4 - HKCU\..\Run: [hv2sk4g9ggrp91ybo5klrbhpgbmn52zag] C:\DOCUME~1\default\LOCALS~1\Temp\tu9119.exe
O4 - HKCU\..\Run: [gk4vijj3cd5u02eyy1r0zrlt] C:\DOCUME~1\default\LOCALS~1\Temp\dhpjibhey.exe
O4 - HKCU\..\Run: [b2ab0xk0i4rkwv] C:\DOCUME~1\default\LOCALS~1\Temp\ifi5n2tz.exe
O4 - HKCU\..\Run: [vkbisw84xk6jf3ytxaeu4tx5uukff] C:\DOCUME~1\default\LOCALS~1\Temp\dr7kzhs.exe
O4 - HKCU\..\Run: [yd70izolep98i0k97da6ianfnqulgcm6uzj] C:\DOCUME~1\default\LOCALS~1\Temp\b5ez25.exe
O4 - HKCU\..\Run: [etp0l10fwqduwpn2rn1psmeivh7iexsz938372lqk] C:\DOCUME~1\default\LOCALS~1\Temp\i8w0kyvd9t.exe
O4 - HKCU\..\Run: [ovofuhujhejlwzyff89ekok] C:\DOCUME~1\default\LOCALS~1\Temp\xz9pa4r.exe
O4 - HKCU\..\Run: [phwv5o14ibldqve1r8rh4yshdx8] C:\DOCUME~1\default\LOCALS~1\Temp\veq01o.exe
O4 - HKCU\..\Run: [gpi6mildbszele4ug2z1] C:\DOCUME~1\default\LOCALS~1\Temp\hbjrev.exe
O4 - HKCU\..\Run: [ntjvs7w0qt2srmsinm6fs6n1vny34utgqjjtpzbi] C:\DOCUME~1\default\LOCALS~1\Temp\nalzv34wczfwb.exe
O4 - HKCU\..\Run: [dd4pdgrprhs95wi4lqvy62mq42q1g2jywvadng92g3vm] C:\DOCUME~1\default\LOCALS~1\Temp\az13cdi.exe
O4 - HKCU\..\Run: [bch19c9c7pf2euvcvvgo7ucr8dzg48iu] C:\DOCUME~1\default\LOCALS~1\Temp\fn3nna53jhs.exe
O4 - HKCU\..\Run: [q8tsm171z6hb5ts1o6y36nk031bnis9kikax7tfxu1i5f489] C:\DOCUME~1\default\LOCALS~1\Temp\wzt31v0.exe
O4 - HKCU\..\Run: [tkirt5inzry0vvnacq] C:\DOCUME~1\default\LOCALS~1\Temp\e9zxu58.exe
O4 - HKCU\..\Run: [k0ai3zuaqrr5444ld] C:\DOCUME~1\default\LOCALS~1\Temp\y75roh.exe
O4 - HKCU\..\Run: [utqi2dmfsqd7sbxqdg8m0pbs] C:\DOCUME~1\default\LOCALS~1\Temp\ujr92jcjz.exe
O4 - HKCU\..\Run: [bakxc4fhux5q5i8j] C:\DOCUME~1\default\LOCALS~1\Temp\f60sqhj8xc1b.exe
O4 - HKCU\..\Run: [abcxzb5fzii46msodl6yx6kxuqkyhnkju] C:\DOCUME~1\default\LOCALS~1\Temp\iadailr7pj225.exe
O4 - HKCU\..\Run: [b9t9s56en6c6etzoqnaillf7r] C:\DOCUME~1\default\LOCALS~1\Temp\kuyk0rhquxy.exe
O4 - HKCU\..\Run: [nwl5hwm12jmswko5uoksjg65czg7gqg39wfro3m3xc11] C:\DOCUME~1\default\LOCALS~1\Temp\tu97nxcb.exe
O4 - HKCU\..\Run: [yjjp8zkpua2l6ah5zr8uu713zq4zx7dsij0jlq9n0v28jg] C:\DOCUME~1\default\LOCALS~1\Temp\bme55tkw3.exe
O4 - HKCU\..\Run: [hyjg9buaswy828bbjd] C:\DOCUME~1\default\LOCALS~1\Temp\aajbyg04.exe
O4 - HKCU\..\Run: [o8ruoo3xh2802bia6182e822a41j6k8we5yydjikr5yz] C:\DOCUME~1\default\LOCALS~1\Temp\cquvhid7wqc.exe
O4 - HKCU\..\Run: [taohxfcylre7vcc23ys0qjgpls83c6q6z] C:\DOCUME~1\default\LOCALS~1\Temp\mclwvj.exe
O4 - HKCU\..\Run: [v40jv6pg4p4hqpxno0m37ycpa] C:\DOCUME~1\default\LOCALS~1\Temp\m7fd61o.exe
O4 - HKCU\..\Run: [sd2omrstapu08uic1x] C:\DOCUME~1\default\LOCALS~1\Temp\fowu5hb12.exe
O4 - HKCU\..\Run: [ffoktgjs7breo3a351zfqfqqt7l13] C:\DOCUME~1\default\LOCALS~1\Temp\q0v7dxblw5lv.exe
O4 - HKCU\..\Run: [bye13bzj9ek55kppo0ij2z3ck66vvuy2rkjmvgi] C:\DOCUME~1\default\LOCALS~1\Temp\tpse6qvspity.exe
O4 - HKCU\..\Run: [aw6r18grgjzovtav51au94w1bn72smv4h8kx699bxfov8jnp] C:\DOCUME~1\default\LOCALS~1\Temp\fxoqcz.exe
O4 - HKCU\..\Run: [i4ccvych4ogzv] C:\DOCUME~1\default\LOCALS~1\Temp\zs1lmqu9e2y.exe
O4 - HKCU\..\Run: [pnutnwedfk2e] C:\DOCUME~1\default\LOCALS~1\Temp\ah8z0o469sr5.exe
O4 - HKCU\..\Run: [ozbz6nbba1lgdcc2neair571gpj4c8] C:\DOCUME~1\default\LOCALS~1\Temp\arrjsz.exe
O4 - HKCU\..\Run: [vu858u5yjhy6mgxqhmi8hzxmso] C:\DOCUME~1\default\LOCALS~1\Temp\fpd83utz.exe
O4 - HKCU\..\Run: [f2fxmgzn2e5582r2twivqio] C:\DOCUME~1\default\LOCALS~1\Temp\ip2q4c.exe
O4 - HKCU\..\Run: [plcbhofjdl8p7ai61jzkgt8a8e276d1z2kxq] C:\DOCUME~1\default\LOCALS~1\Temp\hy4xbt5bulzhu.exe
O4 - HKCU\..\Run: [q9eeqrtiuxrexx] C:\DOCUME~1\default\LOCALS~1\Temp\l2qblhgj1kemi.exe
O4 - HKCU\..\Run: [iwjt5gj4tnjsin375d5w5u0j1uiz] C:\DOCUME~1\default\LOCALS~1\Temp\zak0g3cc.exe
O4 - HKCU\..\Run: [xp6fvzs8yndm9f1wfz3f4otkfygcg3ldexzjvgq4] C:\DOCUME~1\default\LOCALS~1\Temp\h2ge9pfe.exe
O4 - HKCU\..\Run: [h2rmns2hcs] C:\DOCUME~1\default\LOCALS~1\Temp\rys6bgn14iqu.exe
O4 - HKCU\..\Run: [o6qxmjp3gqd61ugu2gn0em5r] C:\DOCUME~1\default\LOCALS~1\Temp\s7boovk.exe
O4 - HKCU\..\Run: [fu8vzrg1s8ov5nvpnshb7eyz4rhqowojkvy1x] C:\DOCUME~1\default\LOCALS~1\Temp\ljg5mx.exe
O4 - HKCU\..\Run: [kvo40zgzcomjrr7imuhlvjznqy06ofl9hhsou7qdi] C:\DOCUME~1\default\LOCALS~1\Temp\btmeatx9kx.exe
O4 - HKCU\..\Run: [m4p45q7gti93s7ts5a7lbtq4d18] C:\DOCUME~1\default\LOCALS~1\Temp\t82ycb65.exe
O4 - HKCU\..\Run: [dnow5q6c2uq5oh7xfzstv8ay59k8em] C:\DOCUME~1\default\LOCALS~1\Temp\gbdt71x.exe
O4 - HKCU\..\Run: [vo308g8di2xpffnrpkg6kvbq104] C:\DOCUME~1\default\LOCALS~1\Temp\dxsx0h.exe
O4 - HKCU\..\Run: [aqdws1duy0p37kpex] C:\DOCUME~1\default\LOCALS~1\Temp\e5uj9n1fys.exe
O4 - HKCU\..\Run: [zdnzb1azgm1zodes4j36wqwic1yb3agc3q219941] C:\DOCUME~1\default\LOCALS~1\Temp\ishwqewgt4pc.exe
O4 - HKCU\..\Run: [q7zhgw0vcjemwzqg7jts2v6e40toyy1qblen] C:\DOCUME~1\default\LOCALS~1\Temp\zp9hkx7bn8x1.exe
O4 - HKCU\..\Run: [uhoiqqyvx8ll] C:\DOCUME~1\default\LOCALS~1\Temp\zvjzsu2k93.exe
O4 - HKCU\..\Run: [mq7qf7bymhhlasj9b21ywgtns21feu3] C:\DOCUME~1\default\LOCALS~1\Temp\gk62rnyls.exe
O4 - HKCU\..\Run: [ddy4mnko7rnbmrawdqqp29e0zstut0xlwuec3z] C:\DOCUME~1\default\LOCALS~1\Temp\s6wrsbk.exe
O4 - HKCU\..\Run: [bu2bdmh32rou90maboubziem5] C:\DOCUME~1\default\LOCALS~1\Temp\c8ervv7nbpco.exe
O4 - HKCU\..\Run: [q96kq5h28d66rv7u3vzwzmub6] C:\DOCUME~1\default\LOCALS~1\Temp\l207k3c.exe
O4 - HKCU\..\Run: [pqtgsl24erlh7r1jvwkhei] C:\DOCUME~1\default\LOCALS~1\Temp\j7xbalwex.exe
O4 - HKCU\..\Run: [g9ep1w76omn578] C:\DOCUME~1\default\LOCALS~1\Temp\iumb2zjok4.exe
O4 - HKCU\..\Run: [hqd9mjsrsd57vn4u1fj] C:\DOCUME~1\default\LOCALS~1\Temp\wz799qk7n.exe
O4 - HKCU\..\Run: [a00qjsmfhbhh5uic7vzdsi3bjhcvm01z140q9i] C:\DOCUME~1\default\LOCALS~1\Temp\ukchkpz.exe
O4 - HKCU\..\Run: [ynm7grk2tm1ioafph9t9hadrxbsq532iz2] C:\DOCUME~1\default\LOCALS~1\Temp\v17v8wn7q1yj.exe
O4 - HKCU\..\Run: [rqus1qc1l1g9bx1vs06gz3761ivd5eb0gqreffvjqkw] C:\DOCUME~1\default\LOCALS~1\Temp\ytuifps8.exe
O4 - HKCU\..\Run: [xeqgocoqy] C:\DOCUME~1\default\LOCALS~1\Temp\gh9a0wt1vprvw.exe
O4 - HKCU\..\Run: [gqtbc7t9r8y0a3nzjxbxv648jwmfwye6juquybbbvi] C:\DOCUME~1\default\LOCALS~1\Temp\aqm0zecytg9.exe
O4 - HKCU\..\Run: [jglmrmmoe7kzj3u14s320n503gn8vr22xhubi6] C:\DOCUME~1\default\LOCALS~1\Temp\o4kvrgl6.exe
O4 - HKCU\..\Run: [whu56tqhlrokdwm9djkmvx3fspyflcohwdqgibw] C:\DOCUME~1\default\LOCALS~1\Temp\p67r2c.exe
O4 - HKCU\..\Run: [b56lt9bau1ayf36v2kvj] C:\DOCUME~1\default\LOCALS~1\Temp\xh87z6lvn6w6.exe
O4 - HKCU\..\Run: [rah3l239qedmmnezfm57j8kgebi83foumy] C:\DOCUME~1\default\LOCALS~1\Temp\f1r1nsl1d.exe
O4 - HKCU\..\Run: [glc47qtg4ro12hln4w5] C:\DOCUME~1\default\LOCALS~1\Temp\sjz2rzqwrsx.exe
O4 - HKCU\..\Run: [vmxnmsu8sn9118a9ktl8rs1d7ycveo8a1jp3prv849zopuu] C:\DOCUME~1\default\LOCALS~1\Temp\fqtd98z7.exe
O4 - HKCU\..\Run: [bihanguuyvon5aw37byww2zoq39j2kldjvnob010] C:\DOCUME~1\default\LOCALS~1\Temp\ydmgj30fso.exe
O4 - HKCU\..\Run: [v77ob3l9mq5eiv9bp46d8siappkkiqs2c9ux9c0xxgjexp7] C:\DOCUME~1\default\LOCALS~1\Temp\m05ijpmbpm.exe
O4 - HKCU\..\Run: [hsn7e9h0cs1iiy8dr1acpkabhbhmut0ttx] C:\DOCUME~1\default\LOCALS~1\Temp\jcsc0km0s0oi.exe
O4 - HKCU\..\Run: [zuzg8efue0bkbi4matrnvhj9] C:\DOCUME~1\default\LOCALS~1\Temp\kjr8rfu.exe
O4 - HKCU\..\Run: [ndcpay1kpjk0] C:\DOCUME~1\default\LOCALS~1\Temp\hai814cw.exe
O4 - HKCU\..\Run: [tr9n89e8043jv4] C:\DOCUME~1\default\LOCALS~1\Temp\feda1cgmvls.exe
O4 - HKCU\..\Run: [r51nxr2ieq5mcmhanmyjab3yj02m4hhlfuh07u76stn] C:\DOCUME~1\default\LOCALS~1\Temp\ljbtz27q7gshy.exe
O4 - HKCU\..\Run: [cdvow8i01o] C:\DOCUME~1\default\LOCALS~1\Temp\nr8viyh.exe
O4 - HKCU\..\Run: [fauaipfg00y01yb35ko0j8tzxf80zfvfag3p1t] C:\DOCUME~1\default\LOCALS~1\Temp\cfev2bx.exe
O4 - HKCU\..\Run: [mnsy2pm8zba6v4hheruu] C:\DOCUME~1\default\LOCALS~1\Temp\l6px7emr.exe
O4 - HKCU\..\Run: [mws09kadkgedc44pgtua1xn7dilbb22m3qlnjoox18a] C:\DOCUME~1\default\LOCALS~1\Temp\so3fwes3f.exe
O4 - HKCU\..\Run: [hdvhe4fq4hh56a8kmilceaaqwxlo4hu59zz2k7] C:\DOCUME~1\default\LOCALS~1\Temp\uu5csoip41e58.exe
O4 - HKCU\..\Run: [fmq49ut80xme7t5e6wye8ny8vz8witvfug45jyjl5sdy83] C:\DOCUME~1\default\LOCALS~1\Temp\w3g5uo8.exe
O4 - HKCU\..\Run: [jsxgscksb8tej42n5v6haevuzdmuqol9clwrana46] C:\DOCUME~1\default\LOCALS~1\Temp\ky6lr93w9wr.exe
O4 - HKCU\..\Run: [xbjtemodhynzlvjfxjulq63ena86hhb160cna1] C:\DOCUME~1\default\LOCALS~1\Temp\r522cd.exe
O4 - HKCU\..\Run: [kkvqjct6tywvs] C:\DOCUME~1\default\LOCALS~1\Temp\ansrqnqf.exe
O4 - HKCU\..\Run: [lttbgjwhjp3csb5zfn10kqv6p] C:\DOCUME~1\default\LOCALS~1\Temp\ett0ycdm5w7.exe
O4 - HKCU\..\Run: [b2gx2n1vmx7jn97lo7nvc0r6as47pztta02ao43ip2a964] C:\DOCUME~1\default\LOCALS~1\Temp\nnfgn1.exe
O4 - HKCU\..\Run: [cwig5k5q76g69ahv85smmp0y825tegfrj2sm] C:\DOCUME~1\default\LOCALS~1\Temp\f6z6e5tq.exe
O4 - HKCU\..\Run: [kcgew6wv2z9hsfttc5dkqlwmio1nwddfpuqwbjiy] C:\DOCUME~1\default\LOCALS~1\Temp\mgbq4due8.exe
O4 - HKCU\..\Run: [uytzc9ceak7cl99x0czuiibta9vcjd3sn] C:\DOCUME~1\default\LOCALS~1\Temp\s8wz5lt.exe
O4 - HKCU\..\Run: [iml6ztypkmk0tg] C:\DOCUME~1\default\LOCALS~1\Temp\s8yw0yyk.exe
O4 - HKCU\..\Run: [heqvs5uts4mkm6patbl9ckn] C:\DOCUME~1\default\LOCALS~1\Temp\xtdce3k.exe
O4 - HKCU\..\Run: [sy8yssl79sebbwhzj5etae5w8] C:\DOCUME~1\default\LOCALS~1\Temp\ng5c2j5b3pbwk.exe
O4 - HKCU\..\Run: [bpn142bvacbaqw2rfcmcnt1cdnrdk2sk2kkfib] C:\DOCUME~1\default\LOCALS~1\Temp\pqnnfn.exe
O4 - HKCU\..\Run: [q2o3bwecjbha5] C:\DOCUME~1\default\LOCALS~1\Temp\nb5sue.exe
O4 - HKCU\..\Run: [ph8txtax9d7iqcaxe8gj9vx0zg3l4sohkxklax202u] C:\DOCUME~1\default\LOCALS~1\Temp\pb4uxh4uq3sx.exe
O4 - HKCU\..\Run: [kmpmfzhdfmr7lxhztfncsz8u1axecwjhe57rru1iuy3kvqw] C:\DOCUME~1\default\LOCALS~1\Temp\u93gc8ivk.exe
O4 - HKCU\..\Run: [oic53hpv61gr3rxdpdva1h] C:\DOCUME~1\default\LOCALS~1\Temp\h1ngdlib.exe
O4 - HKCU\..\Run: [fkpwlhsy06y90j3jp63nnix5fr] C:\DOCUME~1\default\LOCALS~1\Temp\o59mpdvbxz6fg.exe
O4 - HKCU\..\Run: [r9x5mbisaoke21mhyitrzvrfqe] C:\DOCUME~1\default\LOCALS~1\Temp\k9xnxxhswrk.exe
O4 - HKCU\..\Run: [o468h72p65a71g6dw5kv29l41n6gd13j7w5br9tuo] C:\DOCUME~1\default\LOCALS~1\Temp\wpgrzwbh8.exe
O4 - HKCU\..\Run: [ffc2jsm9v8eufccomvm8mkr8yr] C:\DOCUME~1\default\LOCALS~1\Temp\nbetffo5wnfse.exe
O4 - HKCU\..\Run: [p6yunv13nb4ou7227pw49uvfukoeocgq8o5spe19nrdx] C:\DOCUME~1\default\LOCALS~1\Temp\mem7qdn.exe
O4 - HKCU\..\Run: [v4pqnvkeggksxr3rtw7inda50dnq9oabechxgf9nq0] C:\DOCUME~1\default\LOCALS~1\Temp\b1kk9qnzt81.exe
O4 - HKCU\..\Run: [jbvfc1g9jotamidaf58uusxhud0bv4ig6] C:\DOCUME~1\default\LOCALS~1\Temp\vlds5n.exe
O4 - HKCU\..\Run: [jkjkuzcd8jpj] C:\DOCUME~1\default\LOCALS~1\Temp\ody7jcg.exe
O4 - HKCU\..\Run: [ywn5bu35rmrqcoa5s0zem479j9bkj4ifo5x2mfy61z05k4l4e] C:\DOCUME~1\default\LOCALS~1\Temp\p1nn36hjy8vz.exe
O4 - HKCU\..\Run: [v96ftcamcysfhjubxz9i9x9jg] C:\DOCUME~1\default\LOCALS~1\Temp\xvexp9amr.exe
O4 - HKCU\..\Run: [sb3gt599j112plcibp8rkzoyzhi] C:\DOCUME~1\default\LOCALS~1\Temp\bajlcbo5.exe
O4 - HKCU\..\Run: [kdgyzobhuql4yyru3z3bqd0vrfa9iid] C:\DOCUME~1\default\LOCALS~1\Temp\zhd56g6ci7f3b.exe
O4 - HKCU\..\Run: [xi4hk56v76okuzc2olqoy9u19kwfdbazc0mc2cory1] C:\DOCUME~1\default\LOCALS~1\Temp\oll69ryzpyts.exe
O4 - HKCU\..\Run: [v478vunghficcdp] C:\DOCUME~1\default\LOCALS~1\Temp\wodppckupwkw2.exe
O4 - HKCU\..\Run: [blzkcpx3e51jw6kzo6kbxm6hngfzmri] C:\DOCUME~1\default\LOCALS~1\Temp\h2efmqu5d.exe
O4 - HKCU\..\Run: [dtdun4mlq8bif83bey36tyb4c330yrdpwqs3xf7uri8r71jsh6] C:\DOCUME~1\default\LOCALS~1\Temp\ji2rkms6.exe
O4 - HKCU\..\Run: [m4jo9uwzrlpoyiwg5ylnvgti0x3vy50] C:\DOCUME~1\default\LOCALS~1\Temp\qlsp79crm4x.exe
O4 - HKCU\..\Run: [v521v34b4loqonxsz2w9xp12zxjrlpdr] C:\DOCUME~1\default\LOCALS~1\Temp\wyknhuxrh9.exe
O4 - HKCU\..\Run: [qh4slru2a9nmz67x3v3brihx] C:\DOCUME~1\default\LOCALS~1\Temp\ytcf83s10s.exe
O4 - HKCU\..\Run: [t7uqa6vimjrtxnxy2lyuv3pi2nabwnj4081rf28cuysjtil3] C:\DOCUME~1\default\LOCALS~1\Temp\jt36uji7d8ld.exe
O4 - HKCU\..\Run: [kizoklofk9da3e1bv3bc5odsvaqel68bw4a67q3tgl] C:\DOCUME~1\default\LOCALS~1\Temp\zrvots46zwws.exe
O4 - HKCU\..\Run: [mgkzinjmv8yj85y6280inwln97rj4738l7] C:\DOCUME~1\default\LOCALS~1\Temp\t3yeid.exe
O4 - HKCU\..\Run: [l1kkypng9v8zligjuwxnzopj8q] C:\DOCUME~1\default\LOCALS~1\Temp\v9d8g0n27cdv3.exe
O4 - HKCU\..\Run: [hpmbe8fywoufqbxsv6ydt9weo8pqbifss] C:\DOCUME~1\default\LOCALS~1\Temp\hcdpqp4.exe
O4 - HKCU\..\Run: [t2cew5aaz3j] C:\DOCUME~1\default\LOCALS~1\Temp\jww2di6bg6pq.exe
O4 - HKCU\..\Run: [di2ceghelyqgo97ac] C:\DOCUME~1\default\LOCALS~1\Temp\dzmn4nntal.exe
O4 - HKCU\..\Run: [o02w3wk4ff1zpw01264faeqpwzhqtiru7rktkrz] C:\DOCUME~1\default\LOCALS~1\Temp\l5o1iq.exe
O4 - HKCU\..\Run: [f1ym53fvdx03bipvsllhq14nt] C:\DOCUME~1\default\LOCALS~1\Temp\pq71qge.exe
O4 - HKCU\..\Run: [rkw0y5pl1nr] C:\DOCUME~1\default\LOCALS~1\Temp\rlzc06s.exe
O4 - HKCU\..\Run: [hdm6hyi9xzf1zctmmrcvxc] C:\DOCUME~1\default\LOCALS~1\Temp\y45ve9ivxs1.exe
O4 - HKCU\..\Run: [t2in4yqocwu587xty3vr3lhz97fm4tnej1tiqwto] C:\DOCUME~1\default\LOCALS~1\Temp\yn1puz9.exe
O4 - HKCU\..\Run: [sqb2re18fplf13pdxitqj4ey2dv0jpmajgnn5vj] C:\DOCUME~1\default\LOCALS~1\Temp\a7plotyu84l9.exe
O4 - HKCU\..\Run: [dwajh60ut4m7qtqnn4226r4bw5yzzb4cgbyu9ub1o5lq1uood] C:\DOCUME~1\default\LOCALS~1\Temp\u74ymqrj.exe
O4 - HKCU\..\Run: [k3xk446aepg2k73hx2vs8qkud87hcq7] C:\DOCUME~1\default\LOCALS~1\Temp\m6ik5n.exe
O4 - HKCU\..\Run: [qji9nhomvfq] C:\DOCUME~1\default\LOCALS~1\Temp\oihfpvf2.exe
O4 - HKCU\..\Run: [tols7tdwut8ap] C:\DOCUME~1\default\LOCALS~1\Temp\up6m6gfr.exe
O4 - HKCU\..\Run: [f461r16aj6ra0i4dol7d6ghkmmufl] C:\DOCUME~1\default\LOCALS~1\Temp\ikll8b3.exe
O4 - HKCU\..\Run: [g135kppmzb7sswlg4iy1ys3xcogl8n9sobw350] C:\DOCUME~1\default\LOCALS~1\Temp\ffvo92d26in.exe
O4 - HKCU\..\Run: [qts0156hs8eqbszzemjhw3pcx56qjwesyhtbm0hyy] C:\DOCUME~1\default\LOCALS~1\Temp\ff45xx.exe
O4 - HKCU\..\Run: [q0ny6ro7co96j9lf2l6mv0lfbyzuu5r3igovh4veamyqai3sol] C:\DOCUME~1\default\LOCALS~1\Temp\l6wt8z.exe
O4 - HKCU\..\Run: [qpqsbfq76pawjdbde63bvbcjnj0mr3x4kx80zlz5sjdzp] C:\DOCUME~1\default\LOCALS~1\Temp\dyzi0mh7j1.exe
O4 - HKCU\..\Run: [noeqmhedopjmq29j5i0bt] C:\DOCUME~1\default\LOCALS~1\Temp\l4g4li00f.exe
O4 - HKCU\..\Run: [ratwu2nrvm1yp84l7km8zhlqfl7azvajcv6ccho7h] C:\DOCUME~1\default\LOCALS~1\Temp\q1bp5d66x36.exe
O4 - HKCU\..\Run: [evkxe419i4qcidajdn3f9phu3pc8l2pfdaaipkya8h2vef] C:\DOCUME~1\default\LOCALS~1\Temp\qi890f.exe
O4 - HKCU\..\Run: [xd21627yymyd257x29spbi2meaedl0yiuvxek2rd09lzbbybg] C:\DOCUME~1\default\LOCALS~1\Temp\ihxqusrj2so9o.exe
O4 - HKCU\..\Run: [n2pz38rnz96ev8pbb9z7tgu60gqqcj1x5h5] C:\DOCUME~1\default\LOCALS~1\Temp\iltrbgf7.exe
O4 - HKCU\..\Run: [cqzrbrph83w4z99ixzr6p041tu68gz5efkw6li2aw] C:\DOCUME~1\default\LOCALS~1\Temp\rtykm1kv6ky4a.exe
O4 - HKCU\..\Run: [te05lp4u9i1usghko5mkmsah141rft5737gffk1kmo2zeyszr] C:\DOCUME~1\default\LOCALS~1\Temp\n68ksbde0.exe
O4 - HKCU\..\Run: [syom5dmarke39uarjat3r2z4w02cn8qjd2b] C:\DOCUME~1\default\LOCALS~1\Temp\m1ui86y4.exe
O4 - HKCU\..\Run: [n5h1we52v1sns2] C:\DOCUME~1\default\LOCALS~1\Temp\sllfkuuon.exe
O4 - HKCU\..\Run: [yt9z1yshn7779djdkgq3118egiun6buv] C:\DOCUME~1\default\LOCALS~1\Temp\muy5jcd.exe
O4 - HKCU\..\Run: [qbstsm417p4oc6bntzqdkn5tzg1q767xt9tvncrapc4w] C:\DOCUME~1\default\LOCALS~1\Temp\lhyr78ze.exe
O4 - HKCU\..\Run: [z2jw9jcl68dw2rvzcbx5vl35c1tcql0on3tmiod91d] C:\DOCUME~1\default\LOCALS~1\Temp\b4durbh1rd8.exe
O4 - HKCU\..\Run: [zmdcshc3d47tyu9xu1ydwia4fz0srl] C:\DOCUME~1\default\LOCALS~1\Temp\ria1xugvbb5.exe
O4 - HKCU\..\Run: [gikj8rr67m42oatjn1mn3398ovvid4p2eh6stnec9] C:\DOCUME~1\default\LOCALS~1\Temp\nbx6va3euqd.exe
O4 - HKCU\..\Run: [su7oayqpmpfwmb4acl] C:\DOCUME~1\default\LOCALS~1\Temp\yd49u4425h5y.exe
O4 - HKCU\..\Run: [j6zr8q1yp6g9c84l74q959rk6yuh1pcrf9ruypucfel7] C:\DOCUME~1\default\LOCALS~1\Temp\cy9y6wy26.exe
O4 - HKCU\..\Run: [wfs9femawqmwmg1xjnp3bll77r] C:\DOCUME~1\default\LOCALS~1\Temp\gvv67acmi.exe
O4 - HKCU\..\Run: [ax6euxva4c8badavc] C:\DOCUME~1\default\LOCALS~1\Temp\imrqfk8f.exe
O4 - HKCU\..\Run: [askelvjna3xjxo5zr8xatvrd9hqd] C:\DOCUME~1\default\LOCALS~1\Temp\am1emgmpc3w.exe
O4 - HKCU\..\Run: [wqesjo8lg9ybea4648aibks6ognin5g3gz4co] C:\DOCUME~1\default\LOCALS~1\Temp\ih4a3l5dio.exe
O4 - HKCU\..\Run: [d5bbxyevdv1amru0p] C:\DOCUME~1\default\LOCALS~1\Temp\ee1q61pwmjt.exe
O4 - HKCU\..\Run: [xvx4csi7aedsg5f1vl] C:\DOCUME~1\default\LOCALS~1\Temp\em028cb6kv.exe
O4 - HKCU\..\Run: [myvf9gc7e8vbkappdt3ygdfidxuc0lm6za5dkxie9u] C:\DOCUME~1\default\LOCALS~1\Temp\hze17fhiqkne2.exe
O4 - HKCU\..\Run: [nbgecd4kbwekzrew2fya5less7wzmbhi9ib0t] C:\DOCUME~1\default\LOCALS~1\Temp\g0xeu827f1.exe
O4 - HKCU\..\Run: [g3ssdz3yuxipjpurqjxa79oxedpj] C:\DOCUME~1\default\LOCALS~1\Temp\uq7rox.exe
O4 - HKCU\..\Run: [m3981576swrepseg3ysjapcvbu75ebqatib] C:\DOCUME~1\default\LOCALS~1\Temp\f4cg1cqd6.exe
O4 - HKCU\..\Run: [p4wmf8c62nv7j2d1bn2yv1lo9vxtn8zkrj] C:\DOCUME~1\default\LOCALS~1\Temp\j31sruqc0.exe
O4 - HKCU\..\Run: [gp0fuuwgsk0q6zzjw2hxpzifjwxkhzag41thyt2hia438bn] C:\DOCUME~1\default\LOCALS~1\Temp\g03yr7o.exe
O4 - HKCU\..\Run: [qk9rf6mr6u5605z3pl5wtpdzbhai7eac81xh6jt] C:\DOCUME~1\default\LOCALS~1\Temp\js2gy5zff.exe
O4 - HKCU\..\Run: [wki6oakxv4ee375smxc2yrzk8p] C:\DOCUME~1\default\LOCALS~1\Temp\zyow7hnqe2.exe
O4 - HKCU\..\Run: [di2i61ov7y37rif23eehsvg58mqlxw7] C:\DOCUME~1\default\LOCALS~1\Temp\pfyrmtbb1n3h.exe
O4 - HKCU\..\Run: [we0mpbu2fzembx6lqdp5v6j3xaq8eckb89] C:\DOCUME~1\default\LOCALS~1\Temp\fm8p4w.exe
O4 - HKCU\..\Run: [b638lzv4kguhzbumqwfqk5lwz68pmlwb6iq] C:\DOCUME~1\default\LOCALS~1\Temp\bkc1x9eusly.exe
O4 - HKCU\..\Run: [cb52fp231jwzp8p3l1uvpginfpvj6hfmvm4y6vpp5ykzdt937] C:\DOCUME~1\default\LOCALS~1\Temp\vvvn757slt.exe
O4 - HKCU\..\Run: [su3tz6g6vrvc1nhqhr2] C:\DOCUME~1\default\LOCALS~1\Temp\v5y2t8w138e8s.exe
O4 - HKCU\..\Run: [uo9aq7jmd57novfece5uq0sbsu2kwz0ky0y1p5t2] C:\DOCUME~1\default\LOCALS~1\Temp\qab26kq0pqr6g.exe
O4 - HKCU\..\Run: [u3ai1o6t4t201g5ww6833mk7s7de8rolcqosz2vrr] C:\DOCUME~1\default\LOCALS~1\Temp\pjbiu240.exe
O4 - HKCU\..\Run: [ykogvey2m0l9xlqb0q5ki] C:\DOCUME~1\default\LOCALS~1\Temp\jrntggeo05.exe
O4 - HKCU\..\Run: [qu3h4al07e3khmip0tmlep4abyjpj2] C:\DOCUME~1\default\LOCALS~1\Temp\esk2ilb72q3.exe
O4 - HKCU\..\Run: [cbetcpuoj3p8ozil527ie6llaucc] C:\DOCUME~1\default\LOCALS~1\Temp\j4hlockuwb.exe
O4 - HKCU\..\Run: [y7y4ygf97yki4282nsa0yyw74otlf45j8a] C:\DOCUME~1\default\LOCALS~1\Temp\o1klmhc550.exe
O4 - HKCU\..\Run: [b3ua9e7lz52dqyygtoy7yjchf1c8bqd8y5r] C:\DOCUME~1\default\LOCALS~1\Temp\yjzgbk4td9.exe
O4 - HKCU\..\Run: [rqj995o9e2jfxy] C:\DOCUME~1\default\LOCALS~1\Temp\snal2m.exe
O4 - HKCU\..\Run: [xvupzijtgruig0amm5znf7diup3qvuaq94vqntesqu2ur56ak0] C:\DOCUME~1\default\LOCALS~1\Temp\s1afs8nn.exe
O4 - HKCU\..\Run: [gh2uv29v2bbu7mcos5b97qdfmxoagi21t8sa94p2cq9a6q21y] C:\DOCUME~1\default\LOCALS~1\Temp\bhkazpnkyp.exe
O4 - HKCU\..\Run: [oyozzljpb5im7dgyn7z2ayui] C:\DOCUME~1\default\LOCALS~1\Temp\tj35doo8eoq.exe
O4 - HKCU\..\Run: [f0mb4nhtqronuz1] C:\DOCUME~1\default\LOCALS~1\Temp\gdwb60.exe
O4 - HKCU\..\Run: [maspc1rgje1u09gky6gmdw4] C:\DOCUME~1\default\LOCALS~1\Temp\p7irv8fnx.exe
O4 - HKCU\..\Run: [b1b1m7ioz2nr31kb0ohf0e] C:\DOCUME~1\default\LOCALS~1\Temp\upi4a8fepha3.exe
O4 - HKCU\..\Run: [r41csw4rqzonxdawdbfhfyf3bwvs1qfznbtk73qeju5z1a] C:\DOCUME~1\default\LOCALS~1\Temp\monlq7.exe
O4 - HKCU\..\Run: [armr9ncl4591av4p0lwaxbgs] C:\DOCUME~1\default\LOCALS~1\Temp\uo1vqvks3ckn.exe
O4 - HKCU\..\Run: [m2z0w1tnypdik0qlgrwb] C:\DOCUME~1\default\LOCALS~1\Temp\awnk3kz3fo9i.exe
O4 - HKCU\..\Run: [bsdtu1mwh90kmj2gaxhdb4w988dzfz] C:\DOCUME~1\default\LOCALS~1\Temp\lvhlyp687.exe
O4 - HKCU\..\Run: [qd262skddanv2pht74bxdibrjwfo] C:\DOCUME~1\default\LOCALS~1\Temp\sot5og7w28.exe
O4 - HKCU\..\Run: [w8eo0blr1kicrymw73czkbmohr7pfbikwtenvz5oz6uq] C:\DOCUME~1\default\LOCALS~1\Temp\frs209v0ihmp.exe
O4 - HKCU\..\Run: [xs1kq8lkbw8cklimhs3y8rh] C:\DOCUME~1\default\LOCALS~1\Temp\s6uq6f.exe
O4 - HKCU\..\Run: [ywn03psk34oo37d0] C:\DOCUME~1\default\LOCALS~1\Temp\n9e82zoi6.exe
O4 - HKCU\..\Run: [uulq4qrz2r96vhvxidrccxf6xrrbllq529fw4nml578u] C:\DOCUME~1\default\LOCALS~1\Temp\zhnhcl.exe
O4 - HKCU\..\Run: [q2nkuepj33m5okr71a57z1qxu7ibxgo8scy9yjsb2fyk9j8] C:\DOCUME~1\default\LOCALS~1\Temp\bey4adebsk.exe
O4 - HKCU\..\Run: [ymo6jrv9hmkorvqg00d2] C:\DOCUME~1\default\LOCALS~1\Temp\jhgaf2.exe
O4 - HKCU\..\Run: [wonvff1dd18kalg3nz6ljq66] C:\DOCUME~1\default\LOCALS~1\Temp\dwgsxh4k.exe
O4 - HKCU\..\Run: [nlt810suq17nrdqmsadbuj9mruw4sh4mhrji4uorsweu0medd] C:\DOCUME~1\default\LOCALS~1\Temp\acvv17o8f.exe
O4 - HKCU\..\Run: [biooe2emgcwi8c1jrd5ruc2kweillq5qx7] C:\DOCUME~1\default\LOCALS~1\Temp\rsp85f6.exe
O4 - HKCU\..\Run: [na2qt6vfqzgbc9vtqa35bl23fuiqy985bfh4hazpmbk] C:\DOCUME~1\default\LOCALS~1\Temp\hli9hp05.exe
O4 - HKCU\..\Run: [oj22exqa8ggqvk15r8] C:\DOCUME~1\default\LOCALS~1\Temp\zm20aselunxsy.exe
O4 - HKCU\..\Run: [toxq1lj4suxqi99266k3kuct728] C:\DOCUME~1\default\LOCALS~1\Temp\tu783ovy5gxyq.exe
O4 - HKCU\..\Run: [bylnyrrv7cabi6f2fw0oq2k4lb6qr50sf87i1e3k4h] C:\DOCUME~1\default\LOCALS~1\Temp\c7i4cznkc.exe
O4 - HKCU\..\Run: [xgb67s0b2eqfio3i18iw2c4dm4wsgzyi] C:\DOCUME~1\default\LOCALS~1\Temp\m37cimy4.exe
O4 - HKCU\..\Run: [lvf3lb12n839sv2gz] C:\DOCUME~1\default\LOCALS~1\Temp\tn73frkb8eo.exe
O4 - HKCU\..\Run: [wixa2xn9f17uracqxnl7aqp1gm5bb009nk7tg41i] C:\DOCUME~1\default\LOCALS~1\Temp\zk9qgxg22.exe
O4 - HKCU\..\Run: [kgjm835q5w0jh4mbf1uuddco60z06iq9nrojjpy] C:\DOCUME~1\default\LOCALS~1\Temp\tmt36hl2n.exe
O4 - HKCU\..\Run: [plms1by0klqfmm8n] C:\DOCUME~1\default\LOCALS~1\Temp\w8f8rpvzg9.exe
O4 - HKCU\..\Run: [k1l9i2c3kcvbvrq27b70vs17xe] C:\DOCUME~1\default\LOCALS~1\Temp\tmz46ejs.exe
O4 - HKCU\..\Run: [wwy88cnz78pol7106s0y6euqx] C:\DOCUME~1\default\LOCALS~1\Temp\c0zyt30464.exe
O4 - HKCU\..\Run: [cve4xop949eciq] C:\DOCUME~1\default\LOCALS~1\Temp\t0tjyc5hm.exe
O4 - HKCU\..\Run: [zd52pmlucio7xwhpqrwutdbh7ntyzl81dzg2n37x9bzakprizp] C:\DOCUME~1\default\LOCALS~1\Temp\mivfkcs.exe
O4 - HKCU\..\Run: [i83mzq0za4ezpfp29va6pum7soowockr] C:\DOCUME~1\default\LOCALS~1\Temp\aj001qdh.exe
O4 - HKCU\..\Run: [xa4yaqdfy] C:\DOCUME~1\default\LOCALS~1\Temp\mwst1ts9or2d.exe
O4 - HKCU\..\Run: [i1ac377kxloim6ysjmiff30nmja55q] C:\DOCUME~1\default\LOCALS~1\Temp\n281lai.exe
O4 - HKCU\..\Run: [syineh0tjzysa0qompbtzqumkk5iwbj968z348iui7lnw] C:\DOCUME~1\default\LOCALS~1\Temp\xkag60ovsgiu.exe
O4 - HKCU\..\Run: [v3nsg8xsl6y39kdmq5j] C:\DOCUME~1\default\LOCALS~1\Temp\xffzn9.exe
O4 - HKCU\..\Run: [tr0ym2efv8v02] C:\DOCUME~1\default\LOCALS~1\Temp\sar0r5.exe
O4 - HKCU\..\Run: [cafzhjd8opg7xin50ians3wcl9x8r8v15p4cv33] C:\DOCUME~1\default\LOCALS~1\Temp\q2j531.exe
O4 - HKCU\..\Run: [plwds8cjzzal0jt1teh38bcmvth3rhe3] C:\DOCUME~1\default\LOCALS~1\Temp\pkwmfgqwnw.exe
O4 - HKCU\..\Run: [ksqxar38jm9oweprale8h] C:\DOCUME~1\default\LOCALS~1\Temp\bznpz7v0s.exe
O4 - HKCU\..\Run: [jl0jp4ewpxh25wxdq] C:\DOCUME~1\default\LOCALS~1\Temp\vwcyvo7020wg.exe
O4 - HKCU\..\Run: [ikfr1t6gr5gbz41bv1s31ndcg2jyt1ftqnnbsftro] C:\DOCUME~1\default\LOCALS~1\Temp\m1w8lfte.exe
O4 - HKCU\..\Run: [ma1c5lkbsgk12i2wu35b] C:\DOCUME~1\default\LOCALS~1\Temp\hi1gqj98q.exe
O4 - HKCU\..\Run: [gc4rm55hrwma3msp5kzwq6fpr4kq4aj45vtclzv] C:\DOCUME~1\default\LOCALS~1\Temp\xftn02i7u98om.exe
O4 - HKCU\..\Run: [xqhnjb98afjvx7zdhuc8igpnzw2m] C:\DOCUME~1\default\LOCALS~1\Temp\to8rbf3.exe
O4 - HKCU\..\Run: [ity8whpvaq2ig87fmd2yts03nwj5a01l6zyj57ri5zrunhzlpt] C:\DOCUME~1\default\LOCALS~1\Temp\su7ocwvqs.exe
O4 - HKCU\..\Run: [j7qh88w9dxtgddxf4] C:\DOCUME~1\default\LOCALS~1\Temp\okcvxr90c4gs5.exe
O4 - HKCU\..\Run: [kwhr7k6ex3i7hkeaz] C:\DOCUME~1\default\LOCALS~1\Temp\zdz6uv84i3.exe
O4 - HKCU\..\Run: [ghmi8ucsai747que51k0om25r8zdue6rwk0] C:\DOCUME~1\default\LOCALS~1\Temp\rc4naux7gn2a.exe
O4 - HKCU\..\Run: [d2ljv8xy2puhhoswdhot617jgom] C:\DOCUME~1\default\LOCALS~1\Temp\kyo7m3ggppp.exe
O4 - HKCU\..\Run: [rej0kozr9nk] C:\DOCUME~1\default\LOCALS~1\Temp\l5n3dy.exe
O4 - HKCU\..\Run: [rrxphew450bfevf0xhazw87opycwmo09q94jjq8b4] C:\DOCUME~1\default\LOCALS~1\Temp\ugsosa.exe
O4 - HKCU\..\Run: [wtvznbgce] C:\DOCUME~1\default\LOCALS~1\Temp\nnrilry0z.exe
O4 - HKCU\..\Run: [xaoavrji966g2a0h2sq05] C:\DOCUME~1\default\LOCALS~1\Temp\k11271l7xfk2.exe
O4 - HKCU\..\Run: [thivaoiae6ppc6d505yeyk9d3la8svimi0au] C:\DOCUME~1\default\LOCALS~1\Temp\zchm3o.exe
O4 - HKCU\..\Run: [tepqstuevk4x0b2rshjvpdoypjmfasw76v749tnc0z3ijcx] C:\DOCUME~1\default\LOCALS~1\Temp\wlavyb508e9n.exe
O4 - HKCU\..\Run: [cj6js38uxg9rcn7hdqkb252jdzoymoo7irycnm5zx2v] C:\DOCUME~1\default\LOCALS~1\Temp\oo38hng.exe
O4 - HKCU\..\Run: [aos0dl6n4klr5pblzo4kl11rfpbk1wasenp] C:\DOCUME~1\default\LOCALS~1\Temp\f83c115e.exe
O4 - HKCU\..\Run: [tvf3rzzygvu0a3cvixx3cule3exmy6qts811inr8v721gjl1qi] C:\DOCUME~1\default\LOCALS~1\Temp\b87k3jbfxs.exe
O4 - HKCU\..\Run: [xwokrh667f0uy4agksssa795np13yf2y4ngog612mbdp] C:\DOCUME~1\default\LOCALS~1\Temp\b37iza.exe
O4 - HKCU\..\Run: [vy4p8ad4s09v0gj5jxj0k1xtgofbjof2ky] C:\DOCUME~1\default\LOCALS~1\Temp\hq3opvhslg.exe
O4 - HKCU\..\Run: [qr9qdytdypu] C:\DOCUME~1\default\LOCALS~1\Temp\m7d38l19ocw3.exe
O4 - HKCU\..\Run: [z7yjl95kzxhvfaassmllgtx3cdklbn8bgtrpdrfsaljyt7cc] C:\DOCUME~1\default\LOCALS~1\Temp\mnijma5cr8l4.exe
O4 - HKCU\..\Run: [fera3mx0uv98z2zjiab11k0] C:\DOCUME~1\default\LOCALS~1\Temp\sv0te83.exe
O4 - HKCU\..\Run: [fvwus27dpyyp41y214j72hy7dgevi] C:\DOCUME~1\default\LOCALS~1\Temp\izffyb2npc.exe
O4 - HKCU\..\Run: [z86ek4uo3599gr86lrr96hii3s] C:\DOCUME~1\default\LOCALS~1\Temp\vbyayha4dfhbw.exe
O4 - HKCU\..\Run: [k1997otwk39w4ifga] C:\DOCUME~1\default\LOCALS~1\Temp\vud4e71rv.exe
O4 - HKCU\..\Run: [aiup9ltywq6b8vimxgpw45klv8z8wfjuu23jeohe22] C:\DOCUME~1\default\LOCALS~1\Temp\i8n8yjidx.exe
O4 - HKCU\..\Run: [i1pntmc1z9cnpzxt2ecyemyprsyuof8zy84mz37] C:\DOCUME~1\default\LOCALS~1\Temp\g2k9egqzi5p.exe
O4 - HKCU\..\Run: [zn9nxr9oma11h5oel9l3fr] C:\DOCUME~1\default\LOCALS~1\Temp\ri3h0fn.exe
O4 - HKCU\..\Run: [wcpwqns6ceeuqr48kc84fi] C:\DOCUME~1\default\LOCALS~1\Temp\famm9ii.exe
O4 - HKCU\..\Run: [wpxk9rvsjvg4m7abiceahbj3lxaxkea6ukwm9o7yqm] C:\DOCUME~1\default\LOCALS~1\Temp\we8f8zi.exe
O4 - HKCU\..\Run: [yluk38ps8h4a8jhinwva] C:\DOCUME~1\default\LOCALS~1\Temp\og17tg.exe
O4 - HKCU\..\Run: [n9pp006tn7u9go0phf7] C:\DOCUME~1\default\LOCALS~1\Temp\kiau72.exe
O4 - HKCU\..\Run: [ai8uum13bmmpt2ic4bm9is9f8fvs9huxst6iuxvq0k2] C:\DOCUME~1\default\LOCALS~1\Temp\qtmup9h2htd.exe
O4 - HKCU\..\Run: [kx66t7w0e6na7wzhiigwmhkqr] C:\DOCUME~1\default\LOCALS~1\Temp\jkhb92b4eg.exe
O4 - HKCU\..\Run: [ozkhbo81dbi3458ers6gett9jzr1erpe] C:\DOCUME~1\default\LOCALS~1\Temp\ercn307vn.exe
O4 - HKCU\..\Run: [zan9tk84vjef57pjfcdcpaaj6b] C:\DOCUME~1\default\LOCALS~1\Temp\jc62xtgw5hc.exe
O4 - HKCU\..\Run: [lb36qz6x7swexm] C:\DOCUME~1\default\LOCALS~1\Temp\hs5n37twq3gj.exe
O4 - HKUS\S-1-5-19\..\Run: [MSMSGS] C:\PROGRA~1\MESSEN~1\msmsgs.exe /background (User 'LOCAL SERVICE')
O4 - HKUS\S-1-5-20\..\Run: [MSMSGS] C:\PROGRA~1\MESSEN~1\msmsgs.exe /background (User 'NETWORK SERVICE')
O4 - HKUS\S-1-5-18\..\Run: [MSMSGS] C:\PROGRA~1\MESSEN~1\msmsgs.exe /background (User 'SYSTEM')
O4 - HKUS\S-1-5-18\..\RunOnce: [Printing Migration] rundll32.exe C:\WINDOWS\System32\spool\migrate.dll,ProcessWin9xNetworkPrinters (User 'SYSTEM')
O4 - HKUS\.DEFAULT\..\Run: [MSMSGS] C:\PROGRA~1\MESSEN~1\msmsgs.exe /background (User 'Default user')
O4 - HKUS\.DEFAULT\..\RunOnce: [Printing Migration] rundll32.exe C:\WINDOWS\System32\spool\migrate.dll,ProcessWin9xNetworkPrinters (User 'Default user')
O4 - Startup: PowerReg Scheduler.exe
O4 - Global Startup: UMAX VistaAccess.lnk = C:\VSTASCAN\vsaccess.exe
O4 - Global Startup: Microsoft Works Calendar Reminders.lnk = C:\Program Files\Common Files\Microsoft Shared\Works Shared\wkcalrem.exe
O4 - Global Startup: Microsoft Office.lnk = C:\Program Files\Microsoft Office\Office\OSA9.EXE
O4 - Global Startup: Adobe Reader Speed Launch.lnk = C:\Program Files\Adobe\Acrobat 7.0\Reader\reader_sl.exe
O7 - HKCU\Software\Microsoft\Windows\CurrentVersion\Policies\System, DisableRegedit=1
O8 - Extra context menu item: Add to Google Photos Screensa&ver - res://C:\WINDOWS\system32\GPhotos.scr/200
O9 - Extra button: (no name) - {e2e2dd38-d088-4134-82b7-f2ba38496583} - C:\WINDOWS\Network Diagnostic\xpnetdiag.exe
O9 - Extra 'Tools' menuitem: @xpsp3res.dll,-20001 - {e2e2dd38-d088-4134-82b7-f2ba38496583} - C:\WINDOWS\Network Diagnostic\xpnetdiag.exe
O9 - Extra button: Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe
O9 - Extra 'Tools' menuitem: Windows Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe
O9 - Extra button: Dell Home - {08DCFC6C-B6E4-480C-95A4-FC64F37B787E} - http://www.dellnet.com/ (file missing) (HKCU)
O16 - DPF: Yahoo! Poker - http://origin.games.yahoo.net/games/clients/y/pt3_x.cab
O16 - DPF: {3DCEC959-378A-4922-AD7E-FD5C925D927F} (Disney Online Games ActiveX Control) - http://disney.go.com/pirates/online/testAc...OnlineGames.cab
O16 - DPF: {6A344D34-5231-452A-8A57-D064AC9B7862} (Symantec Download Manager) - https://webdl.symantec.com/activex/symdlmgr.cab
O16 - DPF: {CB50428B-657F-47DF-9B32-671F82AA73F7} - http://www.photodex.com/pxplay.cab
O16 - DPF: {EF791A6B-FC12-4C68-99EF-FB9E207A39E6} (McFreeScan Class) - http://download.mcafee.com/molbin/iss-loc/...408/mcfscan.cab
O20 - AppInit_DLLs: rfhghi.dll
O20 - Winlogon Notify: crypt - crypts.dll (file missing)
O22 - SharedTaskScheduler: jgzfkj9w38rksndfi7r4 - {C5BF49A2-94F3-42BD-F434-3604812C8955} - C:\WINDOWS\system32\hhs3ijndfd.dll
O23 - Service: Lavasoft Ad-Aware Service (aawservice) - Lavasoft - C:\Program Files\Lavasoft\Ad-Aware\aawservice.exe
O23 - Service: ANIWZCSd Service (ANIWZCSdService) - Alpha Networks Inc. - C:\Program Files\ANI\ANIWZCS2 Service\ANIWZCSdS.exe
O23 - Service: Google Updater Service (gusvc) - Google - C:\Program Files\Google\Common\Google Updater\GoogleUpdaterService.exe
O23 - Service: Java Quick Starter (JavaQuickStarterService) - Sun Microsystems, Inc. - C:\Program Files\Java\jre6\bin\jqs.exe
O23 - Service: Norton LiveConnect Service - Unknown owner - C:\Program Files\Common Files\Symantec Shared\PIF\{B8E1DD85-8582-4c61-B58F-2F227FCA9A08}\PIFSvc.exe (file missing)
O23 - Service: Norton LiveConnect Service Ex (pifCore) - Unknown owner - C:\Program Files\Common Files\Symantec Shared\ccSvcHst.exe (file missing)
O23 - Service: Symantec Core LC - Unknown owner - C:\Program Files\Common Files\Symantec Shared\CCPD-LC\symlcsvc.exe

--
End of file - 167765 bytes

BC AdBot (Login to Remove)

 


#2 shelf life

shelf life

  • Malware Response Team
  • 2,680 posts
  • OFFLINE
  •  
  • Gender:Male
  • Location:@localhost
  • Local time:05:20 AM

Posted 14 March 2009 - 09:52 AM

hi,

your log is old if you still need help: We will use hjt first the boot into safe mode to check for some files.
to help show all files you can do this:

FOr XP: on the desktop double click my computer,at the top click on> tools>folder options>view> then select "show hidden files and folders", then UNcheck "hide protected operating system files " also UNcheck "hide extensions for known file types" click apply to all folders, apply then ok

next: hjt

start HJT, click the "Scan" button. check the items below, close any open windows, then click "Fixed checked"

O2 - BHO: C:\WINDOWS\system32\hhs3ijndfd.dll - {C5BF49A2-94F3-42BD-F434-3604812C8955} - C:\WINDOWS\system32\hhs3ijndfd.dll
O3 - Toolbar: (no name) - {BFB5F154-9212-46F3-B547-AC6106030A54} - (no file)
O4 - HKLM\..\Run: [07d00aa2] rundll32.exe "C:\WINDOWS\system32\brjqcwsc.dll",b
O4 - HKLM\..\Run: [Ijageriwes] rundll32.exe "C:\WINDOWS\Ejunufe.dll",e

O4 - HKLM\..\Run: [Framework Windows] frmwrk32.exe
O4 - HKLM\..\Run: [Jrabowayecox] rundll32.exe "C:\WINDOWS\osikapawogepukog.dll",e
O4 - HKCU\..\Run: [ieupdate] "C:\WINDOWS\system32\ieupdates.exe"
O4 - HKCU\..\Run: [kava] C:\WINDOWS\system32\kavo.exe
O4 - HKCU\..\Run: [kamsoft] C:\WINDOWS\system32\kamsoft.exe
O4 - HKCU\..\Run: [vamsoft] C:\WINDOWS\system32\vamsoft.exe
O4 - HKCU\..\Run: [ertyuop] C:\WINDOWS\system32\rttrwq.exe
O4 - HKCU\..\Run: [cdoosoft] C:\WINDOWS\system32\olhrwef.exe
O4 - HKCU\..\Run: [BitTorrent DNA] "C:\Program Files\DNA\btdna.exe"

next we will boot into safe mode. you might want to copy/paste the safe mode part into notepad and save it so you can read it in safe mode.

To reach safe mode you would tap the f8 key during a computer restart and chose the first option from the list: safe mode.
once at the safe mode desktop, navigate to:

C:/documents and settings/default(user)/local settings/Temp
inside the temp folder you should find a load of .exe
delete all of them

still in safe mode you can do this to:

still in safe mode:
Click Start>Run then type %temp%
Hit OK. Delete all the files you can.

click Start>Run then type %windir%\temp
hit ok. delete all the files you can

Empty your Temp folders. Go to Start > Run and type:cleanmgr. Windows will scan. When done check these 3 and press *ok* to remove:

Temporary Files
Temporary Internet Files
Recycle Bin

reboot computer normally and get a download:

Please download Malwarebytes' Anti-Malware (MBAM) to your desktop:

http://www.malwarebytes.org/mbam.php

* Double-click mbam-setup.exe and follow the prompts to install the program.
* Be sure a checkmark is placed next to Update Malwarebytes' Anti-Malware and Launch Malwarebytes' Anti-Malware, then click Finish.
* If an update is found, it will download and install the latest version.
* Once the program has loaded, select Perform FULL SCAN, then click Scan.
* When the scan is complete, click OK, then Show Results to view the results.
* Be sure that everything is checked, and click **Remove Selected.**
*A restart may be required to finish the clean up process*
* When completed, a log will open in Notepad. Please save it to a convenient location. The log can also be opened by going to Start > All Programs > Malwarebytes' Anti-Malware > Logs > log-date.txt

please post the MBAM log in reply

How Can I Reduce My Risk to Malware?





0 user(s) are reading this topic

0 members, 0 guests, 0 anonymous users