Trojan.AVKill.35092

Technical Information

To ensure autorun and distribution:

Modifies the following registry keys:

[<HKCU>\Software\Microsoft\Windows\CurrentVersion\Run] 'xu0voekwd5d' = '<Current directory>\as0vg0yaotk.exe'
[<HKCU>\Software\Microsoft\Windows\CurrentVersion\Run] 'qhd1ff2q24x' = '<Current directory>\ycdergb0o2f.exe'
[<HKCU>\Software\Microsoft\Windows\CurrentVersion\Run] 'gkiuitpvuey' = '<Current directory>\hpdejkudb30.exe'
[<HKCU>\Software\Microsoft\Windows\CurrentVersion\Run] 'ug4c1h54tnz' = '<Current directory>\y2ria1p531t.exe'
[<HKCU>\Software\Microsoft\Windows\CurrentVersion\Run] 'bpvmn3txujy' = '<Current directory>\vm4rwpx0145.exe'
[<HKCU>\Software\Microsoft\Windows\CurrentVersion\Run] 'zdxmvw2ts1y' = '<Current directory>\zdxfhnkeerr.exe'
[<HKCU>\Software\Microsoft\Windows\CurrentVersion\Run] 'wgvvdcpxj5z' = '<Current directory>\vypnut.bat'
[<HKCU>\Software\Microsoft\Windows\CurrentVersion\Run] 'crjalvqb3ou' = '<Current directory>\42ozuvwpja1.exe'
[<HKCU>\Software\Microsoft\Windows\CurrentVersion\Run] 'p4pp3grjqjb' = '<Current directory>\gfpq0dk5uiz.exe'
[<HKCU>\Software\Microsoft\Windows\CurrentVersion\Run] '451hjdh22y4' = '<Current directory>\ubyop4bwbyk.exe'
[<HKCU>\Software\Microsoft\Windows\CurrentVersion\Run] 'vnvldw00m0k' = '<Current directory>\zcuh1rm3nip.exe'
[<HKCU>\Software\Microsoft\Windows\CurrentVersion\Run] 'evknaj0tlcx' = '<Current directory>\j4lcxfy3q15.exe'
[<HKCU>\Software\Microsoft\Windows\CurrentVersion\Run] 'ork2g5qgwnr' = '<Current directory>\kil1xylbhvp.exe'
[<HKCU>\Software\Microsoft\Windows\CurrentVersion\Run] 'adpcumziqj2' = '<Current directory>\y2so1myambg.exe'
[<HKCU>\Software\Microsoft\Windows\CurrentVersion\Run] 'f2z0auytfky' = '<Current directory>\bni0bspohdu.exe'
[<HKCU>\Software\Microsoft\Windows\CurrentVersion\Run] 'uzrqunmm41f' = '<Current directory>\vikawrggmcd.exe'
[<HKCU>\Software\Microsoft\Windows\CurrentVersion\Run] 't1qpw1r1aek' = '<Current directory>\aosx2zudktx.exe'
[<HKCU>\Software\Microsoft\Windows\CurrentVersion\Run] 'yj334hw35nt' = '<Current directory>\2wj4fhggvbs.exe'
[<HKCU>\Software\Microsoft\Windows\CurrentVersion\Run] 'dm5xfpkd1zb' = '<Current directory>\5jmmrwxc2ak.exe'
[<HKCU>\Software\Microsoft\Windows\CurrentVersion\Run] 'iziu1sb2ss2' = '<Current directory>\4bez5bymeg3.exe'
[<HKCU>\Software\Microsoft\Windows\CurrentVersion\Run] 'nhyxrnlxhj1' = '<Current directory>\4e5zsurye0f.exe'
[<HKCU>\Software\Microsoft\Windows\CurrentVersion\Run] '1egvqgof3ms' = '<Current directory>\nfpp43q4aky.exe'
[<HKCU>\Software\Microsoft\Windows\CurrentVersion\Run] 'q1nbmgd3crc' = '<Current directory>\ksx24qvcksg.exe'
[<HKCU>\Software\Microsoft\Windows\CurrentVersion\Run] 'htgp2cg0ipz' = '<Current directory>\sztkrg5wvip.exe'
[<HKCU>\Software\Microsoft\Windows\CurrentVersion\Run] 'c0hsg1vldak' = '<Current directory>\mlz00j22cex.exe'
[<HKCU>\Software\Microsoft\Windows\CurrentVersion\Run] 'sqxqtvhz5i5' = '<Current directory>\a2fm0wtiedq.exe'
[<HKCU>\Software\Microsoft\Windows\CurrentVersion\Run] 'jcbmtzr24tm' = '<Current directory>\dnqvpa0xeib.exe'
[<HKCU>\Software\Microsoft\Windows\CurrentVersion\Run] 'fhokcyaeq02' = '<Current directory>\42mvcheyzvp.exe'
[<HKCU>\Software\Microsoft\Windows\CurrentVersion\Run] '4ujmthwbio5' = '<Current directory>\ak2uyqbffg0.exe'
[<HKCU>\Software\Microsoft\Windows\CurrentVersion\Run] 'aw1xwkuvusz' = '<Current directory>\ias3ulpoc2t.exe'
[<HKCU>\Software\Microsoft\Windows\CurrentVersion\Run] 'jblcmfokx5w' = '<Current directory>\h153mr0hfef.exe'
[<HKCU>\Software\Microsoft\Windows\CurrentVersion\Run] 'gxm5fmrmsfj' = '<Current directory>\cqe00r1suqu.exe'
[<HKCU>\Software\Microsoft\Windows\CurrentVersion\Run] '31ywdx50yng' = '<Current directory>\thkrf4at5dg.exe'
[<HKCU>\Software\Microsoft\Windows\CurrentVersion\Run] 'q5rq2fgb2xf' = '<Current directory>\ca3pxx1vj3i.exe'
[<HKCU>\Software\Microsoft\Windows\CurrentVersion\Run] 'nbzskszpmp2' = '<Current directory>\vzq3povykfr.exe'
[<HKCU>\Software\Microsoft\Windows\CurrentVersion\Run] 'd0toum5vths' = '<Current directory>\pmn3sghagtb.exe'
[<HKCU>\Software\Microsoft\Windows\CurrentVersion\Run] 'ehvki2e2ihx' = '<Current directory>\sfxbcr53qmm.exe'
[<HKCU>\Software\Microsoft\Windows\CurrentVersion\Run] '34mxmkm5vzt' = '<Current directory>\id5xjlcsp44.exe'
[<HKCU>\Software\Microsoft\Windows\CurrentVersion\Run] 'cvtvxs2tr01' = '<Current directory>\abypvnj2g0s.exe'
[<HKCU>\Software\Microsoft\Windows\CurrentVersion\Run] 'i4t5iyvophu' = '<Current directory>\h04nzuemac2.exe'
[<HKCU>\Software\Microsoft\Windows\CurrentVersion\Run] '3xjvxxs413t' = '<Current directory>\le3gdkflelu.exe'
[<HKCU>\Software\Microsoft\Windows\CurrentVersion\Run] 'kl44k4zfegr' = '<Current directory>\tlyzgcd0pvr.exe'
[<HKCU>\Software\Microsoft\Windows\CurrentVersion\Run] 'kupaebbvioa' = '<Current directory>\4ccim03v3tf.exe'
[<HKCU>\Software\Microsoft\Windows\CurrentVersion\Run] 'pxiroz4uyoh' = '<Current directory>\gajlv4gvern.exe'
[<HKCU>\Software\Microsoft\Windows\CurrentVersion\Run] 'ahjtldlrt5u' = '<Current directory>\ifyeiaxbsvp.exe'
[<HKCU>\Software\Microsoft\Windows\CurrentVersion\Run] 'cy3azf21bou' = '<Current directory>\z01wh02dlki.exe'
[<HKCU>\Software\Microsoft\Windows\CurrentVersion\Run] 'xbsc0hxmilw' = '<Current directory>\35zc5oke2g0.exe'
[<HKCU>\Software\Microsoft\Windows\CurrentVersion\Run] '5leuqihycer' = '<Current directory>\zfd3ymk3vtm.exe'
[<HKCU>\Software\Microsoft\Windows\CurrentVersion\Run] '0clhwlcoi4v' = '<Current directory>\rmgwtiakse3.exe'
[<HKCU>\Software\Microsoft\Windows\CurrentVersion\Run] 'jf5k33lsvz4' = '<Current directory>\n0nib1rikg1.exe'
[<HKCU>\Software\Microsoft\Windows\CurrentVersion\Run] '0iir43qtxgt' = '<Current directory>\oawcx1vynxg.exe'
[<HKCU>\Software\Microsoft\Windows\CurrentVersion\Run] 'ksokdb2vgie' = '<Current directory>\nvsatg1lpte.exe'
[<HKCU>\Software\Microsoft\Windows\CurrentVersion\Run] '3ecvidovf5b' = '<Current directory>\1scezljlqcq.exe'
[<HKCU>\Software\Microsoft\Windows\CurrentVersion\Run] 'hjmm4drurgt' = '<Current directory>\rdwb2qbcxhc.exe'
[<HKCU>\Software\Microsoft\Windows\CurrentVersion\Run] 'sujcohlrew1' = '<Current directory>\sholjhmrybr.exe'
[<HKCU>\Software\Microsoft\Windows\CurrentVersion\Run] 'c4amumqkjk0' = '<Current directory>\ooh044awoku.exe'
[<HKCU>\Software\Microsoft\Windows\CurrentVersion\Run] '3iv1pl2srnk' = '<Current directory>\vypnut.bat'
[<HKCU>\Software\Microsoft\Windows\CurrentVersion\Run] 'h3aoiechs3s' = '<Current directory>\tviyxql31ps.exe'
[<HKCU>\Software\Microsoft\Windows\CurrentVersion\Run] '2lh04jjbxqr' = '<Current directory>\nltquymyrdx.exe'
[<HKCU>\Software\Microsoft\Windows\CurrentVersion\Run] 'kpcjei1ts4u' = '<Current directory>\ylf2qwcligu.exe'
[<HKCU>\Software\Microsoft\Windows\CurrentVersion\Run] '1xoafvt2kh3' = '<Current directory>\xcztyto1irt.exe'
[<HKCU>\Software\Microsoft\Windows\CurrentVersion\Run] 'm0bu3g2r3hb' = '<Current directory>\bbx5z4ivryh.exe'
[<HKCU>\Software\Microsoft\Windows\CurrentVersion\Run] 'can3v4o4ean' = '<Current directory>\mkllknfygfj.exe'
[<HKCU>\Software\Microsoft\Windows\CurrentVersion\Run] 'owxssykvrch' = '<Current directory>\20opkwzty3g.exe'
[<HKCU>\Software\Microsoft\Windows\CurrentVersion\Run] '4mrxs2thl3y' = '<Current directory>\ssrnxiznabh.exe'
[<HKCU>\Software\Microsoft\Windows\CurrentVersion\Run] 'bby0grpxwns' = '<Current directory>\thcetmh3khv.exe'
[<HKCU>\Software\Microsoft\Windows\CurrentVersion\Run] 'qs0xeuhbumq' = '<Current directory>\4fnipbnr5lk.exe'
[<HKCU>\Software\Microsoft\Windows\CurrentVersion\Run] 'f2ln2cqfpyx' = '<Current directory>\kja3bohylnk.exe'
[<HKCU>\Software\Microsoft\Windows\CurrentVersion\Run] 'nc4uyj1pxay' = '<Current directory>\agujankxpxh.exe'
[<HKCU>\Software\Microsoft\Windows\CurrentVersion\Run] 'zywzx1az1da' = '<Current directory>\jytutykfs3v.exe'
[<HKCU>\Software\Microsoft\Windows\CurrentVersion\Run] 'uyfmr0bwnoh' = '<Current directory>\swbigkoxdc1.exe'
[<HKCU>\Software\Microsoft\Windows\CurrentVersion\Run] 'orv55ohdlig' = '<Current directory>\zugyynizc25.exe'
[<HKCU>\Software\Microsoft\Windows\CurrentVersion\Run] '2vqkqxlzdbn' = '<Current directory>\o3gg3roc1tm.exe'
[<HKCU>\Software\Microsoft\Windows\CurrentVersion\Run] '3tc0r1zucoc' = '<Current directory>\vypnut.bat'
[<HKCU>\Software\Microsoft\Windows\CurrentVersion\Run] 'x1smuzo4dal' = '<Current directory>\tus5w1rbkhm.exe'
[<HKCU>\Software\Microsoft\Windows\CurrentVersion\Run] '3excgdowvt5' = '<Current directory>\kbr1widrgah.exe'
[<HKCU>\Software\Microsoft\Windows\CurrentVersion\Run] 'lijhl3ycud4' = '<Current directory>\4tqp0vdcvw3.exe'
[<HKCU>\Software\Microsoft\Windows\CurrentVersion\Run] 'oevxlri5q3m' = '<Current directory>\nfi4h02ebo3.exe'
[<HKCU>\Software\Microsoft\Windows\CurrentVersion\Run] 'frmsyxrxu22' = '<Current directory>\ylv2bmgc3u3.exe'
[<HKCU>\Software\Microsoft\Windows\CurrentVersion\Run] '3fec1gggedd' = '<Current directory>\0y1vvd1ghos.exe'
[<HKCU>\Software\Microsoft\Windows\CurrentVersion\Run] 'hkihjyyq4eb' = '<Current directory>\otd5xzgyybm.exe'
[<HKCU>\Software\Microsoft\Windows\CurrentVersion\Run] 'x4vvaihqgam' = '<Current directory>\gv23pzl2eoe.exe'
[<HKCU>\Software\Microsoft\Windows\CurrentVersion\Run] '14ci3xyu2ca' = '<Current directory>\ezut1xbe00u.exe'
[<HKCU>\Software\Microsoft\Windows\CurrentVersion\Run] '0wjippyjqri' = '<Current directory>\lpiodxuer54.exe'
[<HKCU>\Software\Microsoft\Windows\CurrentVersion\Run] 'bddh2vbrlrh' = '<Current directory>\b2xn1rys3e4.exe'
[<HKCU>\Software\Microsoft\Windows\CurrentVersion\Run] 'ihd2dt2hvdd' = '<Current directory>\n3rvjpbof1s.exe'
[<HKCU>\Software\Microsoft\Windows\CurrentVersion\Run] 'ur3jwyt2xfp' = '<Current directory>\rvmohcimoyn.exe'
[<HKCU>\Software\Microsoft\Windows\CurrentVersion\Run] 'zbh2qf1biwc' = '<Current directory>\brpqitnlzfy.exe'
[<HKCU>\Software\Microsoft\Windows\CurrentVersion\Run] 'nd0tu1e0sup' = '<Current directory>\vypnut.bat'
[<HKCU>\Software\Microsoft\Windows\CurrentVersion\Run] 'vtrjn4eweg2' = '<Current directory>\kuia05psmcw.exe'
[<HKCU>\Software\Microsoft\Windows\CurrentVersion\Run] 'mvzjgmxtbda' = '<Current directory>\gkulhea0acv.exe'
[<HKCU>\Software\Microsoft\Windows\CurrentVersion\Run] 'ado5i1jjads' = '<Current directory>\n2fuj5pl0b4.exe'
[<HKCU>\Software\Microsoft\Windows\CurrentVersion\Run] 'l4m1vgmi51a' = '<Current directory>\tuat1gzhxh5.exe'
[<HKCU>\Software\Microsoft\Windows\CurrentVersion\Run] 'ekulfzemr20' = '<Current directory>\earlxvzp1fp.exe'
[<HKCU>\Software\Microsoft\Windows\CurrentVersion\Run] 'yramue3wslw' = '<Current directory>\ibt5qspnad2.exe'
[<HKCU>\Software\Microsoft\Windows\CurrentVersion\Run] 'qor5ktrdxna' = '<Current directory>\vypnut.bat'
[<HKCU>\Software\Microsoft\Windows\CurrentVersion\Run] 'knhv35bb2bn' = '<Current directory>\vypnut.bat'
[<HKCU>\Software\Microsoft\Windows\CurrentVersion\Run] '2eiekn3rtyg' = '<Current directory>\vypnut.bat'
[<HKCU>\Software\Microsoft\Windows\CurrentVersion\Run] 'bxvyqfjzrow' = '<Current directory>\vmrn1asa3lr.exe'
[<HKCU>\Software\Microsoft\Windows\CurrentVersion\Run] 'nqzuwm0iovm' = '<Current directory>\g4enukiv5mp.exe'
[<HKCU>\Software\Microsoft\Windows\CurrentVersion\Run] 'wwslbd1vfmq' = '<Current directory>\32udoaetiuc.exe'
[<HKCU>\Software\Microsoft\Windows\CurrentVersion\Run] 'xyrl0odsulg' = '<Current directory>\mjldsaa1hs5.exe'
[<HKCU>\Software\Microsoft\Windows\CurrentVersion\Run] 'ashthjz4owy' = '<Current directory>\hnw3aw5fjoc.exe'
[<HKCU>\Software\Microsoft\Windows\CurrentVersion\Run] 'piepfo5535t' = '<Current directory>\vypnut.bat'
[<HKCU>\Software\Microsoft\Windows\CurrentVersion\Run] 'cs2wesxpkf4' = '<Current directory>\ktvehywlofu.exe'
[<HKCU>\Software\Microsoft\Windows\CurrentVersion\Run] 'wlygtsqdj1s' = '<Current directory>\vypnut.bat'
[<HKCU>\Software\Microsoft\Windows\CurrentVersion\Run] 'vnntlvxoqe4' = '<Current directory>\2htrtn2pepe.exe'
[<HKCU>\Software\Microsoft\Windows\CurrentVersion\Run] 'ynlgtlcbd1z' = '<Current directory>\f10v5vebnuv.exe'
[<HKCU>\Software\Microsoft\Windows\CurrentVersion\Run] '2eamyi1rlbx' = '<Current directory>\jrsu3yvjk2s.exe'
[<HKCU>\Software\Microsoft\Windows\CurrentVersion\Run] 'clpaqvwg0k2' = '<Current directory>\ictpmv3rndq.exe'
[<HKCU>\Software\Microsoft\Windows\CurrentVersion\Run] 'w4r5qpuk1nj' = '<Current directory>\vypnut.bat'
[<HKCU>\Software\Microsoft\Windows\CurrentVersion\Run] 'zvnjopfvcbb' = '<Current directory>\xvmfjfyhqxe.exe'
[<HKCU>\Software\Microsoft\Windows\CurrentVersion\Run] 'cmqrd15mnm1' = '<Current directory>\12uvxxzbvlx.exe'
[<HKCU>\Software\Microsoft\Windows\CurrentVersion\Run] 'mg5g02in3vp' = '<Current directory>\2ehg3orru0k.exe'
[<HKCU>\Software\Microsoft\Windows\CurrentVersion\Run] 'matkvc4xo3c' = '<Current directory>\omzj2achtff.exe'
[<HKCU>\Software\Microsoft\Windows\CurrentVersion\Run] 'ixb5yzidt5z' = '<Current directory>\w4hl32yjqry.exe'
[<HKCU>\Software\Microsoft\Windows\CurrentVersion\Run] 'yy54fcz2myu' = '<Current directory>\vypnut.bat'
[<HKCU>\Software\Microsoft\Windows\CurrentVersion\Run] 'a1vysjpjllh' = '<Current directory>\45p1m11t0ds.exe'
[<HKCU>\Software\Microsoft\Windows\CurrentVersion\Run] 'mz1gehmtl5d' = '<Current directory>\n20y5qnaymk.exe'
[<HKCU>\Software\Microsoft\Windows\CurrentVersion\Run] 'suvsbdi2q1q' = '<Current directory>\qdgrpbtkkwh.exe'
[<HKCU>\Software\Microsoft\Windows\CurrentVersion\Run] 'rakeudxhqwl' = '<Current directory>\bycfqdv4pmi.exe'
[<HKCU>\Software\Microsoft\Windows\CurrentVersion\Run] 'drgznpdrd1y' = '<Current directory>\vypnut.bat'
[<HKCU>\Software\Microsoft\Windows\CurrentVersion\Run] '4vlz2kysyab' = '<Current directory>\yxezhswdtic.exe'
[<HKCU>\Software\Microsoft\Windows\CurrentVersion\Run] 'fwgcjxclewc' = '<Current directory>\vypnut.bat'
[<HKCU>\Software\Microsoft\Windows\CurrentVersion\Run] 'wa5qdsvijdo' = '<Current directory>\m1bciyyxpdg.exe'
[<HKCU>\Software\Microsoft\Windows\CurrentVersion\Run] 'jxupd0k45kp' = '<Current directory>\rldnlw2534d.exe'
[<HKCU>\Software\Microsoft\Windows\CurrentVersion\Run] 'hola5rsaj5r' = '<Current directory>\f2wyupxecta.exe'
[<HKCU>\Software\Microsoft\Windows\CurrentVersion\Run] 'as5b3r5lh52' = '<Current directory>\s3if24zijff.exe'
[<HKCU>\Software\Microsoft\Windows\CurrentVersion\Run] 'hg0frl3xckd' = '<Current directory>\03xck1cj05c.exe'
[<HKCU>\Software\Microsoft\Windows\CurrentVersion\Run] '5iwa13z2us0' = '<Current directory>\vypnut.bat'
[<HKCU>\Software\Microsoft\Windows\CurrentVersion\Run] 'g1mdudjh31d' = '<Current directory>\vypnut.bat'
[<HKCU>\Software\Microsoft\Windows\CurrentVersion\Run] 'hsmp2obe3ol' = '<Current directory>\vypnut.bat'
[<HKCU>\Software\Microsoft\Windows\CurrentVersion\Run] 'b4hq5b0a22c' = '<Current directory>\cxc5meqh0n1.exe'
[<HKCU>\Software\Microsoft\Windows\CurrentVersion\Run] '3imr5vwwtls' = '<Current directory>\pqxlplj3esk.exe'
[<HKCU>\Software\Microsoft\Windows\CurrentVersion\Run] 'rbgrb2dm0sr' = '<Current directory>\23yh1yn3c4s.exe'
[<HKCU>\Software\Microsoft\Windows\CurrentVersion\Run] 'bh00w32in0o' = '<Current directory>\j1dqvs1dcoc.exe'
[<HKCU>\Software\Microsoft\Windows\CurrentVersion\Run] 'qwoljef45ti' = '<Current directory>\uwucan0ydcb.exe'
[<HKCU>\Software\Microsoft\Windows\CurrentVersion\Run] 'u5fh2a2vjc0' = '<Current directory>\kktmz11hfqz.exe'
[<HKCU>\Software\Microsoft\Windows\CurrentVersion\Run] 'hwgyvuerko1' = '<Current directory>\2er2k3z3fi0.exe'
[<HKCU>\Software\Microsoft\Windows\CurrentVersion\Run] 'ahul4wiluaa' = '<Current directory>\kjlu3t30ny2.exe'
[<HKCU>\Software\Microsoft\Windows\CurrentVersion\Run] 'uttbvamihe0' = '<Current directory>\wdjkchzd2ll.exe'
[<HKCU>\Software\Microsoft\Windows\CurrentVersion\Run] 'lsyci2muvps' = '<Current directory>\xth43tnliwj.exe'
[<HKCU>\Software\Microsoft\Windows\CurrentVersion\Run] 'kvx2c4i4fjp' = '<Current directory>\vypnut.bat'
[<HKCU>\Software\Microsoft\Windows\CurrentVersion\Run] '2jceokgoz3a' = '<Current directory>\s2kxgwitihs.exe'
[<HKCU>\Software\Microsoft\Windows\CurrentVersion\Run] 'c0euibo53xg' = '<Current directory>\sjmblqa5czy.exe'
[<HKCU>\Software\Microsoft\Windows\CurrentVersion\Run] 'eiesgyahrqt' = '<Current directory>\qquyswl30nf.exe'
[<HKCU>\Software\Microsoft\Windows\CurrentVersion\Run] '2zenshrupx5' = '<Current directory>\mnqhoark4ig.exe'
[<HKCU>\Software\Microsoft\Windows\CurrentVersion\Run] 'rqt44p0zstd' = '<Current directory>\ibwnj2vzyvh.exe'
[<HKCU>\Software\Microsoft\Windows\CurrentVersion\Run] 'mhzl5hhfecx' = '<Current directory>\vypnut.bat'
[<HKCU>\Software\Microsoft\Windows\CurrentVersion\Run] 'fzjvzl4ffey' = '<Current directory>\uge5rora4be.exe'
[<HKCU>\Software\Microsoft\Windows\CurrentVersion\Run] 'rwwvz12ddi5' = '<Current directory>\d5bhba205xx.exe'
[<HKCU>\Software\Microsoft\Windows\CurrentVersion\Run] '2orcnbzsfzm' = '<Current directory>\vfwdvzatpqr.exe'
[<HKCU>\Software\Microsoft\Windows\CurrentVersion\Run] 'kxu2pjrrmft' = '<Current directory>\s5u3lb1dg1x.exe'
[<HKCU>\Software\Microsoft\Windows\CurrentVersion\Run] 'ljkxakhkfye' = '<Current directory>\tvpfv3ixanl.exe'
[<HKCU>\Software\Microsoft\Windows\CurrentVersion\Run] 'eowwupdgpfd' = '<Current directory>\0ysxp1maogi.exe'
[<HKCU>\Software\Microsoft\Windows\CurrentVersion\Run] 'ijol4ubx1jw' = '<Current directory>\vxrpqh4m3bw.exe'
[<HKCU>\Software\Microsoft\Windows\CurrentVersion\Run] 'hlg1syxlv55' = '<Current directory>\c4xwjz4g5xe.exe'
[<HKCU>\Software\Microsoft\Windows\CurrentVersion\Run] 'yydkdbwvks3' = '<Current directory>\gsyhomeg5sv.exe'
[<HKCU>\Software\Microsoft\Windows\CurrentVersion\Run] 'nowfn5jdwtr' = '<Current directory>\bed1cdsqbw2.exe'
[<HKCU>\Software\Microsoft\Windows\CurrentVersion\Run] '0gzjhwlyrw5' = '<Current directory>\pelwbrpqgmg.exe'
[<HKCU>\Software\Microsoft\Windows\CurrentVersion\Run] '4vezlgyywhq' = '<Current directory>\awrj1eesa02.exe'
[<HKCU>\Software\Microsoft\Windows\CurrentVersion\Run] 'xic2vxmpfpt' = '<Current directory>\bpygwbmkoru.exe'
[<HKCU>\Software\Microsoft\Windows\CurrentVersion\Run] '4qhbqtu4p0z' = '<Current directory>\avsjupkux2t.exe'
[<HKCU>\Software\Microsoft\Windows\CurrentVersion\Run] '4li5o0w11xn' = '<Current directory>\xmngbxgcy02.exe'
[<HKCU>\Software\Microsoft\Windows\CurrentVersion\Run] 'zkjxggrzp3c' = '<Current directory>\vypnut.bat'
[<HKCU>\Software\Microsoft\Windows\CurrentVersion\Run] 'snh3y4wtwuj' = '<Current directory>\2d4ohpoufwd.exe'
[<HKCU>\Software\Microsoft\Windows\CurrentVersion\Run] '2gtqdtet0ck' = '<Current directory>\h2o1xlpalue.exe'
[<HKCU>\Software\Microsoft\Windows\CurrentVersion\Run] 'd3x0fewvglp' = '<Current directory>\zxufufcfude.exe'
[<HKCU>\Software\Microsoft\Windows\CurrentVersion\Run] 'ilpax4vikyg' = '<Current directory>\vypnut.bat'
[<HKCU>\Software\Microsoft\Windows\CurrentVersion\Run] 'xugcnxwincy' = '<Current directory>\drcx35px3cu.exe'
[<HKCU>\Software\Microsoft\Windows\CurrentVersion\Run] 'ekumndbnn3f' = '<Current directory>\wn1s1toeci3.exe'
[<HKCU>\Software\Microsoft\Windows\CurrentVersion\Run] 'hkhd2wo5ttw' = '<Current directory>\5u0imeueunf.exe'
[<HKCU>\Software\Microsoft\Windows\CurrentVersion\Run] '3ey55ufocf0' = '<Current directory>\ahu4vjeln3k.exe'
[<HKCU>\Software\Microsoft\Windows\CurrentVersion\Run] '0ecatzqjah2' = '<Current directory>\dsrgf01mkxs.exe'
[<HKCU>\Software\Microsoft\Windows\CurrentVersion\Run] 'gb234i3gcad' = '<Current directory>\3wxqjj0f3ua.exe'
[<HKCU>\Software\Microsoft\Windows\CurrentVersion\Run] 'jetnm4aw5av' = '<Current directory>\5njkrazeakg.exe'
[<HKCU>\Software\Microsoft\Windows\CurrentVersion\Run] 'qnl0zpv54zd' = '<Current directory>\3rrg5u1yml3.exe'
[<HKCU>\Software\Microsoft\Windows\CurrentVersion\Run] 'sckmy3c5eul' = '<Current directory>\40ah4gpklci.exe'
[<HKCU>\Software\Microsoft\Windows\CurrentVersion\Run] 'ylkeqmw0rlk' = '<Current directory>\jmsu5kbqmpv.exe'
[<HKCU>\Software\Microsoft\Windows\CurrentVersion\Run] '1mvmue5m0wa' = '<Current directory>\2qavpvuavtm.exe'
[<HKCU>\Software\Microsoft\Windows\CurrentVersion\Run] 'ulzbjlzdgwq' = '<Current directory>\x3sut2delqn.exe'
[<HKCU>\Software\Microsoft\Windows\CurrentVersion\Run] 'pqbrv5gweea' = '<Current directory>\doparo1qrol.exe'
[<HKCU>\Software\Microsoft\Windows\CurrentVersion\Run] 'yq0objqzxy0' = '<Current directory>\1up0mr4qqoy.exe'
[<HKCU>\Software\Microsoft\Windows\CurrentVersion\Run] 'qnpmvsdgmgi' = '<Current directory>\vypnut.bat'
[<HKCU>\Software\Microsoft\Windows\CurrentVersion\Run] '0u5hdfoy14h' = '<Current directory>\schuz0q4omy.exe'
[<HKCU>\Software\Microsoft\Windows\CurrentVersion\Run] 'xiwx3grfypc' = '<Current directory>\1orbw3geopu.exe'
[<HKCU>\Software\Microsoft\Windows\CurrentVersion\Run] 'oxkpjzdpzwz' = '<Current directory>\h4b0aqbszcu.exe'
[<HKCU>\Software\Microsoft\Windows\CurrentVersion\Run] 'pdohsscd3y5' = '<Current directory>\y0pjtf2ggvp.exe'
[<HKCU>\Software\Microsoft\Windows\CurrentVersion\Run] '0rws4ijdbdx' = '<Current directory>\wnhn0zkawce.exe'
[<HKCU>\Software\Microsoft\Windows\CurrentVersion\Run] 'xong3rwa4fr' = '<Current directory>\l22dqrjqjcz.exe'
[<HKCU>\Software\Microsoft\Windows\CurrentVersion\Run] 'kwokjs3ugts' = '<Current directory>\b3cjei5g0or.exe'
[<HKCU>\Software\Microsoft\Windows\CurrentVersion\Run] 'ar1vtaoufwf' = '<Current directory>\u5kceoisk5c.exe'
[<HKCU>\Software\Microsoft\Windows\CurrentVersion\Run] 'a4rywipxexa' = '<Current directory>\wi1oznyzvl5.exe'
[<HKCU>\Software\Microsoft\Windows\CurrentVersion\Run] 'tz2zhloxtbi' = '<Current directory>\kmthwajl0m0.exe'
[<HKCU>\Software\Microsoft\Windows\CurrentVersion\Run] 'bnjvpzpog1n' = '<Current directory>\05gfhqgtpnb.exe'
[<HKCU>\Software\Microsoft\Windows\CurrentVersion\Run] 'yx4zfvrapj2' = '<Current directory>\npohk4xt3g5.exe'
[<HKCU>\Software\Microsoft\Windows\CurrentVersion\Run] 'lsgnw1bze3v' = '<Current directory>\vv44sq0kcoz.exe'
[<HKCU>\Software\Microsoft\Windows\CurrentVersion\Run] 'b1cuctxfjrs' = '<Current directory>\os5nl22rywl.exe'
[<HKCU>\Software\Microsoft\Windows\CurrentVersion\Run] 'kq1mw332kft' = '<Current directory>\kbx12pk42wi.exe'
[<HKCU>\Software\Microsoft\Windows\CurrentVersion\Run] '1szcooymnwz' = '<Current directory>\sma1icpt5nq.exe'
[<HKCU>\Software\Microsoft\Windows\CurrentVersion\Run] 'tcfdqvr54ta' = '<Current directory>\ozi5hlbmgx2.exe'
[<HKCU>\Software\Microsoft\Windows\CurrentVersion\Run] 'ukxke2kawtr' = '<Current directory>\m4qpose2adq.exe'
[<HKCU>\Software\Microsoft\Windows\CurrentVersion\Run] 'mvg5gnhbaj3' = '<Current directory>\rdfoj4otagm.exe'
[<HKCU>\Software\Microsoft\Windows\CurrentVersion\Run] '4bhohdhjblk' = '<Current directory>\iipcxhwasvl.exe'
[<HKCU>\Software\Microsoft\Windows\CurrentVersion\Run] 'begz2pfagv0' = '<Current directory>\e3eij3wvf1e.exe'
[<HKCU>\Software\Microsoft\Windows\CurrentVersion\Run] 'nqelq3xpmvg' = '<Current directory>\tdcxc4zb3bg.exe'
[<HKCU>\Software\Microsoft\Windows\CurrentVersion\Run] 'ebsbr2qmqpr' = '<Current directory>\gdc12cxf0er.exe'
[<HKCU>\Software\Microsoft\Windows\CurrentVersion\Run] 'r4uxnomxii1' = '<Current directory>\dabu0djejff.exe'
[<HKCU>\Software\Microsoft\Windows\CurrentVersion\Run] 'vgicyfslezf' = '<Current directory>\prczcypuocp.exe'
[<HKCU>\Software\Microsoft\Windows\CurrentVersion\Run] '3yxrdamsyx5' = '<Current directory>\jwqn554f0tg.exe'
[<HKCU>\Software\Microsoft\Windows\CurrentVersion\Run] 'ci0db2joqfd' = '<Current directory>\ig2c3fynr0e.exe'
[<HKCU>\Software\Microsoft\Windows\CurrentVersion\Run] 'gq2gagdql1a' = '<Current directory>\pjnjkiqxlup.exe'
[<HKCU>\Software\Microsoft\Windows\CurrentVersion\Run] 'r5j0lnx533s' = '<Current directory>\oilwjqwf3zv.exe'
[<HKCU>\Software\Microsoft\Windows\CurrentVersion\Run] 'makhjipjamo' = '<Current directory>\t1ejgzj4ixv.exe'
[<HKCU>\Software\Microsoft\Windows\CurrentVersion\Run] 'qlgitx4qxim' = '<Current directory>\vypnut.bat'
[<HKCU>\Software\Microsoft\Windows\CurrentVersion\Run] 'a2t3iyatgl0' = '<Current directory>\kfelrho3bsz.exe'
[<HKCU>\Software\Microsoft\Windows\CurrentVersion\Run] 'z2yxmxohvrm' = '<Current directory>\zgzo5tdaar0.exe'
[<HKCU>\Software\Microsoft\Windows\CurrentVersion\Run] 'xncfrnnplp1' = '<Current directory>\xguencvpghr.exe'
[<HKCU>\Software\Microsoft\Windows\CurrentVersion\Run] 'zabrvha14le' = '<Current directory>\njs0hxv03lx.exe'
[<HKCU>\Software\Microsoft\Windows\CurrentVersion\Run] '4n0wha5fzie' = '<Current directory>\mgwu5kosu3o.exe'
[<HKCU>\Software\Microsoft\Windows\CurrentVersion\Run] 'gtxrmceshto' = '<Current directory>\4idzhzup4xg.exe'
[<HKCU>\Software\Microsoft\Windows\CurrentVersion\Run] 'ihc2bvklehy' = '<Current directory>\iciobqpz4uz.exe'
[<HKCU>\Software\Microsoft\Windows\CurrentVersion\Run] 'bxhrghjym0h' = '<Current directory>\bbcmu1ywr4v.exe'
[<HKCU>\Software\Microsoft\Windows\CurrentVersion\Run] 'b5fx3glzy5g' = '<Current directory>\wwa5ib4fjfp.exe'
[<HKCU>\Software\Microsoft\Windows\CurrentVersion\Run] 'd3qooiy2eun' = '<Current directory>\3ksliutvbvk.exe'
[<HKCU>\Software\Microsoft\Windows\CurrentVersion\Run] 'thcbihegelu' = '<Current directory>\rvhdqfalric.exe'
[<HKCU>\Software\Microsoft\Windows\CurrentVersion\Run] 'viladhbqygd' = '<Current directory>\t212a2caxwc.exe'
[<HKCU>\Software\Microsoft\Windows\CurrentVersion\Run] '2kkqb3h55ze' = '<Current directory>\prozymiun2j.exe'
[<HKCU>\Software\Microsoft\Windows\CurrentVersion\Run] 'bnggmn0zh0b' = '<Current directory>\xanrknuz111.exe'
[<HKCU>\Software\Microsoft\Windows\CurrentVersion\Run] 'bipr5cm3kdy' = '<Current directory>\o50cdjwiptx.exe'
[<HKCU>\Software\Microsoft\Windows\CurrentVersion\Run] 'lj3zruclcus' = '<Current directory>\jzwwlc3gqsv.exe'
[<HKCU>\Software\Microsoft\Windows\CurrentVersion\Run] 'qpytvwrtyqs' = '<Current directory>\vypnut.bat'
[<HKCU>\Software\Microsoft\Windows\CurrentVersion\Run] 'gkkm1zg3y0u' = '<Current directory>\rqsx0f24ip3.exe'
[<HKCU>\Software\Microsoft\Windows\CurrentVersion\Run] 'hggvrydbskj' = '<Current directory>\zcislbftgrx.exe'
[<HKCU>\Software\Microsoft\Windows\CurrentVersion\Run] 'hug5ubgv0z3' = '<Current directory>\3mqg4jqcov0.exe'
[<HKCU>\Software\Microsoft\Windows\CurrentVersion\Run] 'nqxrxrwloja' = '<Current directory>\kqel2y1l55d.exe'
[<HKCU>\Software\Microsoft\Windows\CurrentVersion\Run] 'ywbmcyshh5t' = '<Current directory>\kt5yjrqymk1.exe'
[<HKCU>\Software\Microsoft\Windows\CurrentVersion\Run] 'hwixu0pc4zi' = '<Current directory>\a2yeisf4tfw.exe'
[<HKCU>\Software\Microsoft\Windows\CurrentVersion\Run] 'z3dynk4n1ei' = '<Current directory>\5n32s4vxwn3.exe'
[<HKCU>\Software\Microsoft\Windows\CurrentVersion\Run] 'y2tpj0n342q' = '<Current directory>\rezaxmygar0.exe'
[<HKCU>\Software\Microsoft\Windows\CurrentVersion\Run] 'cmjmmjbpusr' = '<Current directory>\ki5s143ei1r.exe'
[<HKCU>\Software\Microsoft\Windows\CurrentVersion\Run] '1lfmddw4jty' = '<Current directory>\jhgn2walq4q.exe'
[<HKCU>\Software\Microsoft\Windows\CurrentVersion\Run] 'tre3uhunlum' = '<Current directory>\sxwwfboldeb.exe'
[<HKCU>\Software\Microsoft\Windows\CurrentVersion\Run] 'opera' = '<Full path to virus>'
[<HKCU>\Software\Microsoft\Windows\CurrentVersion\Run] '1sdivd5ojjn' = '<Current directory>\zmenit.bat'
[<HKCU>\Software\Microsoft\Windows\CurrentVersion\Run] 'cnsdlgh4pam' = '<Current directory>\vypnut.bat'
[<HKCU>\Software\Microsoft\Windows\CurrentVersion\Run] 'ychs41wluzu' = '<Current directory>\vypnut.bat'
[<HKCU>\Software\Microsoft\Windows\CurrentVersion\Run] 'jej33om3oz5' = '<Current directory>\jtnblbfhal3.exe'
[<HKCU>\Software\Microsoft\Windows\CurrentVersion\Run] 'yb5k53fznaw' = '<Current directory>\hrxgjo31a0i.exe'
[<HKCU>\Software\Microsoft\Windows\CurrentVersion\Run] 'bcgsijaavg2' = '<Current directory>\hqvcj2brxnr.exe'
[<HKCU>\Software\Microsoft\Windows\CurrentVersion\Run] 'cu25iknglpr' = '<Current directory>\zoc343tose1.exe'
[<HKCU>\Software\Microsoft\Windows\CurrentVersion\Run] '2hzch0wejsr' = '<Current directory>\yr1pltyymmy.exe'
[<HKCU>\Software\Microsoft\Windows\CurrentVersion\Run] 'xtrvvidyjb5' = '<Current directory>\h0jpiyc5rmi.exe'
[<HKCU>\Software\Microsoft\Windows\CurrentVersion\Run] '32tlt3jvzxu' = '<Current directory>\2csgywtbb5q.exe'
[<HKCU>\Software\Microsoft\Windows\CurrentVersion\Run] 'rlgs5jyr2gw' = '<Current directory>\dr5p2r5y2i2.exe'
[<HKCU>\Software\Microsoft\Windows\CurrentVersion\Run] 'oqurui1a04t' = '<Current directory>\ickrukqdj5j.exe'
[<HKCU>\Software\Microsoft\Windows\CurrentVersion\Run] 'q5cogjqinhw' = '<Current directory>\wg3b2m3b5ba.exe'
[<HKCU>\Software\Microsoft\Windows\CurrentVersion\Run] 'yiyp4s5tfsn' = '<Current directory>\yhma2vxrsc5.exe'
[<HKCU>\Software\Microsoft\Windows\CurrentVersion\Run] 'oya15yoj4fz' = '<Current directory>\crxiszwy040.exe'
[<HKCU>\Software\Microsoft\Windows\CurrentVersion\Run] 'wknoulpcbhy' = '<Current directory>\j4qvxwivupr.exe'
[<HKCU>\Software\Microsoft\Windows\CurrentVersion\Run] 'xe2byifs442' = '<Current directory>\5zzzhi3vyyq.exe'
[<HKCU>\Software\Microsoft\Windows\CurrentVersion\Run] 'phcnfzoqri0' = '<Current directory>\04d4af5oduy.exe'
[<HKCU>\Software\Microsoft\Windows\CurrentVersion\Run] '54fo3dpbsbt' = '<Current directory>\w2d0bxtku2g.exe'
[<HKCU>\Software\Microsoft\Windows\CurrentVersion\Run] 'atwhizrolcf' = '<Current directory>\0a3ymqsdf4i.exe'
[<HKCU>\Software\Microsoft\Windows\CurrentVersion\Run] '3slcwed0auh' = '<Current directory>\35gp1tbsnk1.exe'
[<HKCU>\Software\Microsoft\Windows\CurrentVersion\Run] 'ulzzq4zgavv' = '<Current directory>\fqkb1bbagnj.exe'
[<HKCU>\Software\Microsoft\Windows\CurrentVersion\Run] 'ag3djwdlwsd' = '<Current directory>\csrjlrniwnv.exe'
[<HKCU>\Software\Microsoft\Windows\CurrentVersion\Run] 'zcjvk1ompac' = '<Current directory>\tiy1m0nyqct.exe'
[<HKCU>\Software\Microsoft\Windows\CurrentVersion\Run] 'jyswjsrhyh4' = '<Current directory>\yv5bpych1mv.exe'
[<HKCU>\Software\Microsoft\Windows\CurrentVersion\Run] 'hnogyuyced5' = '<Current directory>\vypnut.bat'
[<HKCU>\Software\Microsoft\Windows\CurrentVersion\Run] 'yzxqu0gcdaf' = '<Current directory>\s5f0y4vfwdl.exe'
[<HKCU>\Software\Microsoft\Windows\CurrentVersion\Run] 'bfufb0vvuyr' = '<Current directory>\hihi2xpebgt.exe'
[<HKCU>\Software\Microsoft\Windows\CurrentVersion\Run] 'rcx1rvlcc0i' = '<Current directory>\smvmzoggtf0.exe'
[<HKCU>\Software\Microsoft\Windows\CurrentVersion\Run] 'mmgfpoi52hw' = '<Current directory>\xt45mrhncyb.exe'
[<HKCU>\Software\Microsoft\Windows\CurrentVersion\Run] 'ypebtdhqy43' = '<Current directory>\0gfd41yacov.exe'
[<HKCU>\Software\Microsoft\Windows\CurrentVersion\Run] '5xoe4hl102c' = '<Current directory>\rca1wb5pvtt.exe'
[<HKCU>\Software\Microsoft\Windows\CurrentVersion\Run] 'cwkol3t2kwk' = '<Current directory>\hiyvirnrtj5.exe'
[<HKCU>\Software\Microsoft\Windows\CurrentVersion\Run] 'irn43xyuyp4' = '<Current directory>\cgyyt4xt1zj.exe'
[<HKCU>\Software\Microsoft\Windows\CurrentVersion\Run] '43vdzlb3iei' = '<Current directory>\vypnut.bat'
[<HKCU>\Software\Microsoft\Windows\CurrentVersion\Run] 'cn4cuyqos2j' = '<Current directory>\5tp05mh2wpr.exe'
[<HKCU>\Software\Microsoft\Windows\CurrentVersion\Run] 'kaeypdtc0ye' = '<Current directory>\mwep22tnt4l.exe'
[<HKCU>\Software\Microsoft\Windows\CurrentVersion\Run] 'za4kxjcxvk5' = '<Current directory>\hkpfv0a5c22.exe'
[<HKCU>\Software\Microsoft\Windows\CurrentVersion\Run] '1kufxgobnsm' = '<Current directory>\szjfb14uk0w.exe'
[<HKCU>\Software\Microsoft\Windows\CurrentVersion\Run] 'ls5dwhasfw3' = '<Current directory>\vatkcubbpp4.exe'
[<HKCU>\Software\Microsoft\Windows\CurrentVersion\Run] 'tvk4iaggdmn' = '<Current directory>\lwisqofx3rk.exe'
[<HKCU>\Software\Microsoft\Windows\CurrentVersion\Run] 'kg20fmwyxtw' = '<Current directory>\avs3eap0ogl.exe'
[<HKCU>\Software\Microsoft\Windows\CurrentVersion\Run] 'lcbpb4zjfup' = '<Current directory>\vypnut.bat'
[<HKCU>\Software\Microsoft\Windows\CurrentVersion\Run] 'zt3wn2hdupm' = '<Current directory>\xissngaan2l.exe'
[<HKCU>\Software\Microsoft\Windows\CurrentVersion\Run] 'oefpb1uiuly' = '<Current directory>\3eroospunbl.exe'
[<HKCU>\Software\Microsoft\Windows\CurrentVersion\Run] 'wgcxnc5u4it' = '<Current directory>\12holquttxr.exe'
[<HKCU>\Software\Microsoft\Windows\CurrentVersion\Run] 'y51lfwkewky' = '<Current directory>\njfnzgmqy0h.exe'
[<HKCU>\Software\Microsoft\Windows\CurrentVersion\Run] 'egjj0lns1zt' = '<Current directory>\s5clr1fhu33.exe'
[<HKCU>\Software\Microsoft\Windows\CurrentVersion\Run] 'yg4t5pszjz1' = '<Current directory>\j42tkkwbrnz.exe'
[<HKCU>\Software\Microsoft\Windows\CurrentVersion\Run] '54vfedstpgq' = '<Current directory>\vypnut.bat'
[<HKCU>\Software\Microsoft\Windows\CurrentVersion\Run] 'bihzgjesapt' = '<Current directory>\42rcxbqswge.exe'
[<HKCU>\Software\Microsoft\Windows\CurrentVersion\Run] 'n3votp3roaf' = '<Current directory>\ypd0m1znpy3.exe'
[<HKCU>\Software\Microsoft\Windows\CurrentVersion\Run] 'l2whjzadquf' = '<Current directory>\roxd4o2x41t.exe'
[<HKCU>\Software\Microsoft\Windows\CurrentVersion\Run] '2zbcjs1hdhk' = '<Current directory>\crsfth4wn5z.exe'
[<HKCU>\Software\Microsoft\Windows\CurrentVersion\Run] 'lagtkkqffhh' = '<Current directory>\ftyzze2asxk.exe'
[<HKCU>\Software\Microsoft\Windows\CurrentVersion\Run] 'zamevdn0rmm' = '<Current directory>\bgf3azdccen.exe'
[<HKCU>\Software\Microsoft\Windows\CurrentVersion\Run] 'zxrzauvzoyv' = '<Current directory>\rs45kucmie3.exe'
[<HKCU>\Software\Microsoft\Windows\CurrentVersion\Run] 'x341qowepna' = '<Current directory>\vypnut.bat'
[<HKCU>\Software\Microsoft\Windows\CurrentVersion\Run] '5xi4m1fanuz' = '<Current directory>\vypnut.bat'
[<HKCU>\Software\Microsoft\Windows\CurrentVersion\Run] '5ndk40h2oy0' = '<Current directory>\05tcuv1hnkc.exe'
[<HKCU>\Software\Microsoft\Windows\CurrentVersion\Run] 'olcv0aputn5' = '<Current directory>\fpoubkpn0w2.exe'
[<HKCU>\Software\Microsoft\Windows\CurrentVersion\Run] 'o51o2qq2dgp' = '<Current directory>\vxkbel1cubq.exe'
[<HKCU>\Software\Microsoft\Windows\CurrentVersion\Run] '1vptwkkhknx' = '<Current directory>\mefqa2dldro.exe'
[<HKCU>\Software\Microsoft\Windows\CurrentVersion\Run] 'uz3cnmrz11k' = '<Current directory>\myoqltpx1cn.exe'
[<HKCU>\Software\Microsoft\Windows\CurrentVersion\Run] 'd5mwts15omw' = '<Current directory>\1axjjl54res.exe'
[<HKCU>\Software\Microsoft\Windows\CurrentVersion\Run] 'imq0tikbsxl' = '<Current directory>\n3ixnp1yrec.exe'
[<HKCU>\Software\Microsoft\Windows\CurrentVersion\Run] 'vezax2jmtgk' = '<Current directory>\yddqpysnsjc.exe'
[<HKCU>\Software\Microsoft\Windows\CurrentVersion\Run] 'l1ju0uo24fo' = '<Current directory>\b0irifkp5gl.exe'
[<HKCU>\Software\Microsoft\Windows\CurrentVersion\Run] 'pswiamgnu1x' = '<Current directory>\u4kjfpancef.exe'
[<HKCU>\Software\Microsoft\Windows\CurrentVersion\Run] '0w0wpelgrgd' = '<Current directory>\cccssqs4qui.exe'
[<HKCU>\Software\Microsoft\Windows\CurrentVersion\Run] 'gx2hvfe15wx' = '<Current directory>\uhw4onw4jx5.exe'
[<HKCU>\Software\Microsoft\Windows\CurrentVersion\Run] 'v5l5v2wrmgd' = '<Current directory>\h3ruexjz4az.exe'
[<HKCU>\Software\Microsoft\Windows\CurrentVersion\Run] 's34sq2bjfzp' = '<Current directory>\vypnut.bat'
[<HKCU>\Software\Microsoft\Windows\CurrentVersion\Run] 'i3iesmielg5' = '<Current directory>\wpnbmqwraih.exe'
[<HKCU>\Software\Microsoft\Windows\CurrentVersion\Run] 'rryqj0x5biy' = '<Current directory>\jgo2uhqjgsu.exe'
[<HKCU>\Software\Microsoft\Windows\CurrentVersion\Run] 'euigyqignof' = '<Current directory>\4t23quqjd5b.exe'
[<HKCU>\Software\Microsoft\Windows\CurrentVersion\Run] 'lk0huvfipra' = '<Current directory>\vojm4xvdjzf.exe'
[<HKCU>\Software\Microsoft\Windows\CurrentVersion\Run] 'wnsclpfid1f' = '<Current directory>\dwdfqruzkor.exe'
[<HKCU>\Software\Microsoft\Windows\CurrentVersion\Run] 'b3ozfkpqhyb' = '<Current directory>\bdokcasojmi.exe'
[<HKCU>\Software\Microsoft\Windows\CurrentVersion\Run] 'xdyki0ulmla' = '<Current directory>\t3azpvkerqw.exe'
[<HKCU>\Software\Microsoft\Windows\CurrentVersion\Run] '2ubuvadexh0' = '<Current directory>\pbejkz3uask.exe'
[<HKCU>\Software\Microsoft\Windows\CurrentVersion\Run] '1kjde0xbpne' = '<Current directory>\mrhde10wnlu.exe'
[<HKCU>\Software\Microsoft\Windows\CurrentVersion\Run] 'uu4wqgsy3om' = '<Current directory>\icjqpw4hw5h.exe'
[<HKCU>\Software\Microsoft\Windows\CurrentVersion\Run] 'ro5ouzq2cxh' = '<Current directory>\h1qiiiulu4d.exe'
[<HKCU>\Software\Microsoft\Windows\CurrentVersion\Run] 'q44u4yly4s0' = '<Current directory>\perbrbhfr1v.exe'
[<HKCU>\Software\Microsoft\Windows\CurrentVersion\Run] '1zm5jztkfga' = '<Current directory>\m44eqad01sn.exe'
[<HKCU>\Software\Microsoft\Windows\CurrentVersion\Run] 'vc2ia5bwvd5' = '<Current directory>\ub3elip3yii.exe'
[<HKCU>\Software\Microsoft\Windows\CurrentVersion\Run] 'zqww3fpdg24' = '<Current directory>\lt3jcdrhnc4.exe'
[<HKCU>\Software\Microsoft\Windows\CurrentVersion\Run] 'scutbd0c3ws' = '<Current directory>\4yrmbq3wrwu.exe'
[<HKCU>\Software\Microsoft\Windows\CurrentVersion\Run] 'audfxyfbomy' = '<Current directory>\h2fflvlzlso.exe'
[<HKCU>\Software\Microsoft\Windows\CurrentVersion\Run] 'mj0wdt4hxez' = '<Current directory>\4zigaebsm32.exe'
[<HKCU>\Software\Microsoft\Windows\CurrentVersion\Run] '44gaqjaoklf' = '<Current directory>\q1clwc3yd4r.exe'
[<HKCU>\Software\Microsoft\Windows\CurrentVersion\Run] 'flxfr4watmw' = '<Current directory>\lew5vh1hq0z.exe'
[<HKCU>\Software\Microsoft\Windows\CurrentVersion\Run] 'hpmi23ejk5p' = '<Current directory>\yrxd3lfrqol.exe'
[<HKCU>\Software\Microsoft\Windows\CurrentVersion\Run] 'wirjizssd5c' = '<Current directory>\0w1dsepstwq.exe'
[<HKCU>\Software\Microsoft\Windows\CurrentVersion\Run] '3wsljyre0rs' = '<Current directory>\5qwhjionz0k.exe'
[<HKCU>\Software\Microsoft\Windows\CurrentVersion\Run] '42z2ykgmf2y' = '<Current directory>\pzhvkpayv0b.exe'
[<HKCU>\Software\Microsoft\Windows\CurrentVersion\Run] 'ez1dyilrls2' = '<Current directory>\0hu5cw4htmy.exe'
[<HKCU>\Software\Microsoft\Windows\CurrentVersion\Run] 'nje2om14fci' = '<Current directory>\arbnjh1ni5i.exe'
[<HKCU>\Software\Microsoft\Windows\CurrentVersion\Run] '0sz2bgh5jkr' = '<Current directory>\vdev1jnhtsi.exe'
[<HKCU>\Software\Microsoft\Windows\CurrentVersion\Run] 'bz3znvmcpcy' = '<Current directory>\tvy5kpgpwe2.exe'
[<HKCU>\Software\Microsoft\Windows\CurrentVersion\Run] 'lpxx10ht4nk' = '<Current directory>\3pmwpxey4ka.exe'
[<HKCU>\Software\Microsoft\Windows\CurrentVersion\Run] '2i1iaum5sps' = '<Current directory>\l3d4pxqgdxd.exe'
[<HKCU>\Software\Microsoft\Windows\CurrentVersion\Run] 'en4e10qr05u' = '<Current directory>\kptfgrb42oa.exe'
[<HKCU>\Software\Microsoft\Windows\CurrentVersion\Run] 'bklygdcxs1k' = '<Current directory>\23rcydlzigt.exe'
[<HKCU>\Software\Microsoft\Windows\CurrentVersion\Run] 'ws3f5e4w0hj' = '<Current directory>\1tyzga2zpsr.exe'
[<HKCU>\Software\Microsoft\Windows\CurrentVersion\Run] 'bufktliwzde' = '<Current directory>\zi1dtnbkctl.exe'
[<HKCU>\Software\Microsoft\Windows\CurrentVersion\Run] 'wj2ju35twgw' = '<Current directory>\e1qmv3kw3wc.exe'
[<HKCU>\Software\Microsoft\Windows\CurrentVersion\Run] 'geeymxksqqu' = '<Current directory>\sazwwklyhfr.exe'
[<HKCU>\Software\Microsoft\Windows\CurrentVersion\Run] 'a3ljx1x0nls' = '<Current directory>\11tldvvbrl5.exe'
[<HKCU>\Software\Microsoft\Windows\CurrentVersion\Run] 'eg4zxn3krkc' = '<Current directory>\pkhnvjgm5cj.exe'
[<HKCU>\Software\Microsoft\Windows\CurrentVersion\Run] 'slqnof1wfgl' = '<Current directory>\2htethozzaw.exe'
[<HKCU>\Software\Microsoft\Windows\CurrentVersion\Run] 'xsjgimfecwe' = '<Current directory>\vypnut.bat'
[<HKCU>\Software\Microsoft\Windows\CurrentVersion\Run] '3wwwi1xxbot' = '<Current directory>\b2ool12wzad.exe'
[<HKCU>\Software\Microsoft\Windows\CurrentVersion\Run] 'zhglss15wlv' = '<Current directory>\eaeorayxjtg.exe'
[<HKCU>\Software\Microsoft\Windows\CurrentVersion\Run] 'czcexcjwfly' = '<Current directory>\buhkx5huyfk.exe'
[<HKCU>\Software\Microsoft\Windows\CurrentVersion\Run] 'qmcsniwwbrl' = '<Current directory>\upilygrvgvf.exe'
[<HKCU>\Software\Microsoft\Windows\CurrentVersion\Run] 'elziq355odw' = '<Current directory>\upijr2rucnm.exe'
[<HKCU>\Software\Microsoft\Windows\CurrentVersion\Run] 'xohlrmnimvp' = '<Current directory>\jivtxer2ekj.exe'
[<HKCU>\Software\Microsoft\Windows\CurrentVersion\Run] 'z1i5yhucdwr' = '<Current directory>\3cpxnhxp0rm.exe'
[<HKCU>\Software\Microsoft\Windows\CurrentVersion\Run] 'ieye4swdqdw' = '<Current directory>\cnalqsob42e.exe'

Malicious functions:

Executes the following:

'<SYSTEM32>\cmd.exe' /c ""<Current directory>\createuser.bat" "
'<SYSTEM32>\net1.exe' user /add jesyo3chssb fajpxo4yt2f
'<SYSTEM32>\net1.exe' user %USERNAME% h2mq5dct04f
'<SYSTEM32>\shutdown.exe' /s /t 30
'<SYSTEM32>\cmd.exe' /c ""<Current directory>\zmenit.bat" "

Terminates or attempts to terminate

the following user processes:

nod32.exe

Attempts to shut down the Windows operating system.

Modifies file system :

Creates the following files:

<Current directory>\4bez5bymeg3.exe
<Current directory>\2wj4fhggvbs.exe
<Current directory>\nfpp43q4aky.exe
<Current directory>\aosx2zudktx.exe
<Current directory>\4e5zsurye0f.exe
<Current directory>\hpdejkudb30.exe
<Current directory>\as0vg0yaotk.exe
<Current directory>\vm4rwpx0145.exe
<Current directory>\5jmmrwxc2ak.exe
<Current directory>\y2ria1p531t.exe
<Current directory>\4tqp0vdcvw3.exe
<Current directory>\z01wh02dlki.exe
<Current directory>\kbr1widrgah.exe
<Current directory>\0y1vvd1ghos.exe
<Current directory>\nfi4h02ebo3.exe
<Current directory>\j4lcxfy3q15.exe
<Current directory>\kil1xylbhvp.exe
<Current directory>\y2so1myambg.exe
<Current directory>\bni0bspohdu.exe
<Current directory>\vikawrggmcd.exe
<Current directory>\ycdergb0o2f.exe
<Current directory>\ifyeiaxbsvp.exe
<Current directory>\4ccim03v3tf.exe
<Current directory>\gajlv4gvern.exe
<Current directory>\pmn3sghagtb.exe
<Current directory>\h04nzuemac2.exe
<Current directory>\42mvcheyzvp.exe
<Current directory>\a2fm0wtiedq.exe
<Current directory>\dnqvpa0xeib.exe
<Current directory>\le3gdkflelu.exe
<Current directory>\tlyzgcd0pvr.exe
<Current directory>\gfpq0dk5uiz.exe
<Current directory>\42ozuvwpja1.exe
<Current directory>\zcuh1rm3nip.exe
<Current directory>\zdxfhnkeerr.exe
<Current directory>\ubyop4bwbyk.exe
<Current directory>\sfxbcr53qmm.exe
<Current directory>\vzq3povykfr.exe
<Current directory>\abypvnj2g0s.exe
<Current directory>\ksx24qvcksg.exe
<Current directory>\id5xjlcsp44.exe
<Current directory>\ylv2bmgc3u3.exe
<Current directory>\20opkwzty3g.exe
<Current directory>\ssrnxiznabh.exe
<Current directory>\thcetmh3khv.exe
<Current directory>\4fnipbnr5lk.exe
<Current directory>\kja3bohylnk.exe
<Current directory>\35zc5oke2g0.exe
<Current directory>\zfd3ymk3vtm.exe
<Current directory>\rmgwtiakse3.exe
<Current directory>\n0nib1rikg1.exe
<Current directory>\oawcx1vynxg.exe
<Current directory>\1up0mr4qqoy.exe
<Current directory>\xcztyto1irt.exe
<Current directory>\fpoubkpn0w2.exe
<Current directory>\vxkbel1cubq.exe
<Current directory>\05tcuv1hnkc.exe
<Current directory>\nltquymyrdx.exe
<Current directory>\mkllknfygfj.exe
<Current directory>\tviyxql31ps.exe
<Current directory>\bbx5z4ivryh.exe
<Current directory>\ylf2qwcligu.exe
<Current directory>\nvsatg1lpte.exe
<Current directory>\rvmohcimoyn.exe
<Current directory>\brpqitnlzfy.exe
<Current directory>\gkulhea0acv.exe
<Current directory>\n3rvjpbof1s.exe
<Current directory>\kuia05psmcw.exe
<Current directory>\swbigkoxdc1.exe
<Current directory>\tus5w1rbkhm.exe
<Current directory>\jytutykfs3v.exe
<Current directory>\o3gg3roc1tm.exe
<Current directory>\zugyynizc25.exe
<Current directory>\rdwb2qbcxhc.exe
<Current directory>\agujankxpxh.exe
<Current directory>\1scezljlqcq.exe
<Current directory>\ooh044awoku.exe
<Current directory>\sholjhmrybr.exe
<Current directory>\otd5xzgyybm.exe
<Current directory>\gv23pzl2eoe.exe
<Current directory>\ezut1xbe00u.exe
<Current directory>\lpiodxuer54.exe
<Current directory>\b2xn1rys3e4.exe
<Current directory>\sztkrg5wvip.exe
<Current directory>\12uvxxzbvlx.exe
<Current directory>\jrsu3yvjk2s.exe
<Current directory>\xvmfjfyhqxe.exe
<Current directory>\hnw3aw5fjoc.exe
<Current directory>\f10v5vebnuv.exe
<Current directory>\n2fuj5pl0b4.exe
<Current directory>\tuat1gzhxh5.exe
<Current directory>\earlxvzp1fp.exe
<Current directory>\ictpmv3rndq.exe
<Current directory>\ibt5qspnad2.exe
<Current directory>\drcx35px3cu.exe
<Current directory>\wn1s1toeci3.exe
<Current directory>\2d4ohpoufwd.exe
<Current directory>\awrj1eesa02.exe
<Current directory>\bpygwbmkoru.exe
<Current directory>\2htrtn2pepe.exe
<Current directory>\ktvehywlofu.exe
<Current directory>\uwucan0ydcb.exe
<Current directory>\h2o1xlpalue.exe
<Current directory>\zxufufcfude.exe
<Current directory>\32udoaetiuc.exe
<Current directory>\n20y5qnaymk.exe
<Current directory>\omzj2achtff.exe
<Current directory>\45p1m11t0ds.exe
<Current directory>\pqxlplj3esk.exe
<Current directory>\cxc5meqh0n1.exe
<Current directory>\yxezhswdtic.exe
<Current directory>\bycfqdv4pmi.exe
<Current directory>\m1bciyyxpdg.exe
<Current directory>\w4hl32yjqry.exe
<Current directory>\qdgrpbtkkwh.exe
<Current directory>\2ehg3orru0k.exe
<Current directory>\03xck1cj05c.exe
<Current directory>\vmrn1asa3lr.exe
<Current directory>\mjldsaa1hs5.exe
<Current directory>\g4enukiv5mp.exe
<Current directory>\23yh1yn3c4s.exe
<Current directory>\j1dqvs1dcoc.exe
<Current directory>\f2wyupxecta.exe
<Current directory>\s3if24zijff.exe
<Current directory>\rldnlw2534d.exe
<Current directory>\avsjupkux2t.exe
<Current directory>\bed1cdsqbw2.exe
<Current directory>\c4xwjz4g5xe.exe
<Current directory>\gsyhomeg5sv.exe
<Current directory>\uge5rora4be.exe
<Current directory>\tvpfv3ixanl.exe
<Current directory>\xth43tnliwj.exe
<Current directory>\kjlu3t30ny2.exe
<Current directory>\wdjkchzd2ll.exe
<Current directory>\0ysxp1maogi.exe
<Current directory>\vxrpqh4m3bw.exe
<Current directory>\ca3pxx1vj3i.exe
<Current directory>\cqe00r1suqu.exe
<Current directory>\thkrf4at5dg.exe
<Current directory>\mlz00j22cex.exe
<Current directory>\ak2uyqbffg0.exe
<Current directory>\s5u3lb1dg1x.exe
<Current directory>\d5bhba205xx.exe
<Current directory>\vfwdvzatpqr.exe
<Current directory>\ias3ulpoc2t.exe
<Current directory>\h153mr0hfef.exe
<Current directory>\kktmz11hfqz.exe
<Current directory>\3rrg5u1yml3.exe
<Current directory>\x3sut2delqn.exe
<Current directory>\ahu4vjeln3k.exe
<Current directory>\dsrgf01mkxs.exe
<Current directory>\5u0imeueunf.exe
<Current directory>\jmsu5kbqmpv.exe
<Current directory>\xmngbxgcy02.exe
<Current directory>\40ah4gpklci.exe
<Current directory>\doparo1qrol.exe
<Current directory>\2qavpvuavtm.exe
<Current directory>\qquyswl30nf.exe
C:\System Volume Information\_restore{E7F0F64C-F7E5-4319-8757-E9A20C1C4E14}\fifo.log
<Current directory>\ibwnj2vzyvh.exe
<Current directory>\2er2k3z3fi0.exe
<Current directory>\mnqhoark4ig.exe
<Current directory>\3wxqjj0f3ua.exe
<Current directory>\5njkrazeakg.exe
<Current directory>\pelwbrpqgmg.exe
<Current directory>\s2kxgwitihs.exe
<Current directory>\sjmblqa5czy.exe
<Current directory>\y0pjtf2ggvp.exe
<Current directory>\1orbw3geopu.exe
<Current directory>\h4b0aqbszcu.exe
<Current directory>\ozi5hlbmgx2.exe
<Current directory>\m4qpose2adq.exe
<Current directory>\kmthwajl0m0.exe
<Current directory>\u5kceoisk5c.exe
<Current directory>\wi1oznyzvl5.exe
<Current directory>\schuz0q4omy.exe
<Current directory>\wnhn0zkawce.exe
<Current directory>\vv44sq0kcoz.exe
<Current directory>\05gfhqgtpnb.exe
<Current directory>\kbx12pk42wi.exe
<Current directory>\xanrknuz111.exe
<Current directory>\os5nl22rywl.exe
<Current directory>\e3eij3wvf1e.exe
<Current directory>\rdfoj4otagm.exe
<Current directory>\iipcxhwasvl.exe
<Current directory>\npohk4xt3g5.exe
<Current directory>\sma1icpt5nq.exe
<Current directory>\l22dqrjqjcz.exe
<Current directory>\jwqn554f0tg.exe
<Current directory>\ig2c3fynr0e.exe
<Current directory>\3ksliutvbvk.exe
<Current directory>\rvhdqfalric.exe
<Current directory>\wwa5ib4fjfp.exe
<Current directory>\pjnjkiqxlup.exe
<Current directory>\kfelrho3bsz.exe
<Current directory>\dabu0djejff.exe
<Current directory>\prczcypuocp.exe
<Current directory>\gdc12cxf0er.exe
<Current directory>\iciobqpz4uz.exe
<Current directory>\mgwu5kosu3o.exe
<Current directory>\4idzhzup4xg.exe
<Current directory>\b3cjei5g0or.exe
<Current directory>\tdcxc4zb3bg.exe
<Current directory>\t212a2caxwc.exe
<Current directory>\prozymiun2j.exe
<Current directory>\bbcmu1ywr4v.exe
<Current directory>\xguencvpghr.exe
<Current directory>\njs0hxv03lx.exe
<Current directory>\j4qvxwivupr.exe
<Current directory>\jzwwlc3gqsv.exe
<Current directory>\3mqg4jqcov0.exe
<Current directory>\o50cdjwiptx.exe
<Current directory>\rqsx0f24ip3.exe
<Current directory>\zcislbftgrx.exe
<Current directory>\kqel2y1l55d.exe
<Current directory>\kt5yjrqymk1.exe
<Current directory>\a2yeisf4tfw.exe
<Current directory>\5n32s4vxwn3.exe
<Current directory>\rezaxmygar0.exe
<Current directory>\ki5s143ei1r.exe
<Current directory>\jhgn2walq4q.exe
<Current directory>\sxwwfboldeb.exe
<Current directory>\zmenit.bat
<Current directory>\createuser.bat
<Current directory>\hrxgjo31a0i.exe
<Current directory>\jtnblbfhal3.exe
<Current directory>\zoc343tose1.exe
<Current directory>\vypnut.bat
<Current directory>\hqvcj2brxnr.exe
<Current directory>\yr1pltyymmy.exe
<Current directory>\h0jpiyc5rmi.exe
<Current directory>\2csgywtbb5q.exe
<Current directory>\dr5p2r5y2i2.exe
<Current directory>\ickrukqdj5j.exe
<Current directory>\wg3b2m3b5ba.exe
<Current directory>\5zzzhi3vyyq.exe
<Current directory>\crxiszwy040.exe
<Current directory>\w2d0bxtku2g.exe
<Current directory>\yhma2vxrsc5.exe
<Current directory>\04d4af5oduy.exe
<Current directory>\0a3ymqsdf4i.exe
<Current directory>\35gp1tbsnk1.exe
<Current directory>\fqkb1bbagnj.exe
<Current directory>\csrjlrniwnv.exe
<Current directory>\tiy1m0nyqct.exe
<Current directory>\hihi2xpebgt.exe
<Current directory>\s5f0y4vfwdl.exe
<Current directory>\xt45mrhncyb.exe
<Current directory>\yv5bpych1mv.exe
<Current directory>\smvmzoggtf0.exe
<Current directory>\zgzo5tdaar0.exe
<Current directory>\j42tkkwbrnz.exe
<Current directory>\cgyyt4xt1zj.exe
<Current directory>\s5clr1fhu33.exe
<Current directory>\42rcxbqswge.exe
<Current directory>\ypd0m1znpy3.exe
<Current directory>\5tp05mh2wpr.exe
<Current directory>\vatkcubbpp4.exe
<Current directory>\rca1wb5pvtt.exe
<Current directory>\hiyvirnrtj5.exe
<Current directory>\0gfd41yacov.exe
<Current directory>\zi1dtnbkctl.exe
<Current directory>\4t23quqjd5b.exe
<Current directory>\1tyzga2zpsr.exe
<Current directory>\11tldvvbrl5.exe
<Current directory>\e1qmv3kw3wc.exe
<Current directory>\avs3eap0ogl.exe
<Current directory>\njfnzgmqy0h.exe
<Current directory>\xissngaan2l.exe
<Current directory>\3eroospunbl.exe
<Current directory>\12holquttxr.exe
<Current directory>\lwisqofx3rk.exe
<Current directory>\h3ruexjz4az.exe
<Current directory>\rs45kucmie3.exe
<Current directory>\uhw4onw4jx5.exe
<Current directory>\wpnbmqwraih.exe
<Current directory>\jgo2uhqjgsu.exe
<Current directory>\mefqa2dldro.exe
<Current directory>\myoqltpx1cn.exe
<Current directory>\ftyzze2asxk.exe
<Current directory>\bgf3azdccen.exe
<Current directory>\crsfth4wn5z.exe
<Current directory>\roxd4o2x41t.exe
<Current directory>\b0irifkp5gl.exe
<Current directory>\hkpfv0a5c22.exe
<Current directory>\szjfb14uk0w.exe
<Current directory>\mwep22tnt4l.exe
<Current directory>\n3ixnp1yrec.exe
<Current directory>\cccssqs4qui.exe
<Current directory>\1axjjl54res.exe
<Current directory>\u4kjfpancef.exe
<Current directory>\yddqpysnsjc.exe
<Current directory>\sazwwklyhfr.exe
<Current directory>\t3azpvkerqw.exe
<Current directory>\pbejkz3uask.exe
<Current directory>\0w1dsepstwq.exe
<Current directory>\5qwhjionz0k.exe
<Current directory>\yrxd3lfrqol.exe
<Current directory>\mrhde10wnlu.exe
<Current directory>\m44eqad01sn.exe
<Current directory>\dwdfqruzkor.exe
<Current directory>\bdokcasojmi.exe
<Current directory>\vojm4xvdjzf.exe
<Current directory>\q1clwc3yd4r.exe
<Current directory>\h2fflvlzlso.exe
<Current directory>\4zigaebsm32.exe
<Current directory>\oilwjqwf3zv.exe
<Current directory>\t1ejgzj4ixv.exe
<Current directory>\pzhvkpayv0b.exe
<Current directory>\0hu5cw4htmy.exe
<Current directory>\lew5vh1hq0z.exe
<Current directory>\lt3jcdrhnc4.exe
<Current directory>\4yrmbq3wrwu.exe
<Current directory>\ub3elip3yii.exe
<Current directory>\upijr2rucnm.exe
<Current directory>\l3d4pxqgdxd.exe
<Current directory>\upilygrvgvf.exe
<Current directory>\cnalqsob42e.exe
<Current directory>\jivtxer2ekj.exe
<Current directory>\tvy5kpgpwe2.exe
<Current directory>\23rcydlzigt.exe
<Current directory>\vdev1jnhtsi.exe
<Current directory>\kptfgrb42oa.exe
<Current directory>\3pmwpxey4ka.exe
<Current directory>\arbnjh1ni5i.exe
<Current directory>\b2ool12wzad.exe
<Current directory>\h1qiiiulu4d.exe
<Current directory>\perbrbhfr1v.exe
<Current directory>\icjqpw4hw5h.exe
<Current directory>\buhkx5huyfk.exe
<Current directory>\3cpxnhxp0rm.exe
<Current directory>\2htethozzaw.exe
<Current directory>\eaeorayxjtg.exe
<Current directory>\pkhnvjgm5cj.exe

Sets the 'hidden' attribute to the following files:

<Current directory>\4bez5bymeg3.exe
<Current directory>\2wj4fhggvbs.exe
<Current directory>\nfpp43q4aky.exe
<Current directory>\aosx2zudktx.exe
<Current directory>\4e5zsurye0f.exe
<Current directory>\hpdejkudb30.exe
<Current directory>\as0vg0yaotk.exe
<Current directory>\vm4rwpx0145.exe
<Current directory>\5jmmrwxc2ak.exe
<Current directory>\y2ria1p531t.exe
<Current directory>\4tqp0vdcvw3.exe
<Current directory>\z01wh02dlki.exe
<Current directory>\kbr1widrgah.exe
<Current directory>\0y1vvd1ghos.exe
<Current directory>\nfi4h02ebo3.exe
<Current directory>\j4lcxfy3q15.exe
<Current directory>\kil1xylbhvp.exe
<Current directory>\y2so1myambg.exe
<Current directory>\bni0bspohdu.exe
<Current directory>\vikawrggmcd.exe
<Current directory>\ycdergb0o2f.exe
<Current directory>\ifyeiaxbsvp.exe
<Current directory>\4ccim03v3tf.exe
<Current directory>\gajlv4gvern.exe
<Current directory>\pmn3sghagtb.exe
<Current directory>\h04nzuemac2.exe
<Current directory>\42mvcheyzvp.exe
<Current directory>\a2fm0wtiedq.exe
<Current directory>\dnqvpa0xeib.exe
<Current directory>\le3gdkflelu.exe
<Current directory>\tlyzgcd0pvr.exe
<Current directory>\gfpq0dk5uiz.exe
<Current directory>\42ozuvwpja1.exe
<Current directory>\zcuh1rm3nip.exe
<Current directory>\zdxfhnkeerr.exe
<Current directory>\ubyop4bwbyk.exe
<Current directory>\sfxbcr53qmm.exe
<Current directory>\vzq3povykfr.exe
<Current directory>\abypvnj2g0s.exe
<Current directory>\ksx24qvcksg.exe
<Current directory>\id5xjlcsp44.exe
<Current directory>\ylv2bmgc3u3.exe
<Current directory>\20opkwzty3g.exe
<Current directory>\ssrnxiznabh.exe
<Current directory>\thcetmh3khv.exe
<Current directory>\4fnipbnr5lk.exe
<Current directory>\kja3bohylnk.exe
<Current directory>\35zc5oke2g0.exe
<Current directory>\zfd3ymk3vtm.exe
<Current directory>\rmgwtiakse3.exe
<Current directory>\n0nib1rikg1.exe
<Current directory>\oawcx1vynxg.exe
<Current directory>\1up0mr4qqoy.exe
<Current directory>\xcztyto1irt.exe
<Current directory>\fpoubkpn0w2.exe
<Current directory>\vxkbel1cubq.exe
<Current directory>\05tcuv1hnkc.exe
<Current directory>\nltquymyrdx.exe
<Current directory>\mkllknfygfj.exe
<Current directory>\tviyxql31ps.exe
<Current directory>\bbx5z4ivryh.exe
<Current directory>\ylf2qwcligu.exe
<Current directory>\nvsatg1lpte.exe
<Current directory>\rvmohcimoyn.exe
<Current directory>\brpqitnlzfy.exe
<Current directory>\gkulhea0acv.exe
<Current directory>\n3rvjpbof1s.exe
<Current directory>\kuia05psmcw.exe
<Current directory>\swbigkoxdc1.exe
<Current directory>\tus5w1rbkhm.exe
<Current directory>\jytutykfs3v.exe
<Current directory>\o3gg3roc1tm.exe
<Current directory>\zugyynizc25.exe
<Current directory>\rdwb2qbcxhc.exe
<Current directory>\agujankxpxh.exe
<Current directory>\1scezljlqcq.exe
<Current directory>\ooh044awoku.exe
<Current directory>\sholjhmrybr.exe
<Current directory>\otd5xzgyybm.exe
<Current directory>\gv23pzl2eoe.exe
<Current directory>\ezut1xbe00u.exe
<Current directory>\lpiodxuer54.exe
<Current directory>\b2xn1rys3e4.exe
<Current directory>\12uvxxzbvlx.exe
<Current directory>\jrsu3yvjk2s.exe
<Current directory>\xvmfjfyhqxe.exe
<Current directory>\hnw3aw5fjoc.exe
<Current directory>\f10v5vebnuv.exe
<Current directory>\n2fuj5pl0b4.exe
<Current directory>\tuat1gzhxh5.exe
<Current directory>\earlxvzp1fp.exe
<Current directory>\ictpmv3rndq.exe
<Current directory>\ibt5qspnad2.exe
<Current directory>\drcx35px3cu.exe
<Current directory>\wn1s1toeci3.exe
<Current directory>\2d4ohpoufwd.exe
<Current directory>\awrj1eesa02.exe
<Current directory>\bpygwbmkoru.exe
<Current directory>\2htrtn2pepe.exe
<Current directory>\ktvehywlofu.exe
<Current directory>\uwucan0ydcb.exe
<Current directory>\h2o1xlpalue.exe
<Current directory>\zxufufcfude.exe
<Current directory>\32udoaetiuc.exe
<Current directory>\n20y5qnaymk.exe
<Current directory>\omzj2achtff.exe
<Current directory>\45p1m11t0ds.exe
<Current directory>\pqxlplj3esk.exe
<Current directory>\cxc5meqh0n1.exe
<Current directory>\yxezhswdtic.exe
<Current directory>\bycfqdv4pmi.exe
<Current directory>\m1bciyyxpdg.exe
<Current directory>\w4hl32yjqry.exe
<Current directory>\qdgrpbtkkwh.exe
<Current directory>\2ehg3orru0k.exe
<Current directory>\03xck1cj05c.exe
<Current directory>\vmrn1asa3lr.exe
<Current directory>\mjldsaa1hs5.exe
<Current directory>\g4enukiv5mp.exe
<Current directory>\23yh1yn3c4s.exe
<Current directory>\j1dqvs1dcoc.exe
<Current directory>\f2wyupxecta.exe
<Current directory>\s3if24zijff.exe
<Current directory>\rldnlw2534d.exe
<Current directory>\avsjupkux2t.exe
<Current directory>\gsyhomeg5sv.exe
<Current directory>\bed1cdsqbw2.exe
<Current directory>\tvpfv3ixanl.exe
<Current directory>\d5bhba205xx.exe
<Current directory>\uge5rora4be.exe
<Current directory>\wdjkchzd2ll.exe
<Current directory>\xth43tnliwj.exe
<Current directory>\vxrpqh4m3bw.exe
<Current directory>\c4xwjz4g5xe.exe
<Current directory>\0ysxp1maogi.exe
<Current directory>\thkrf4at5dg.exe
<Current directory>\ca3pxx1vj3i.exe
<Current directory>\ak2uyqbffg0.exe
<Current directory>\sztkrg5wvip.exe
<Current directory>\mlz00j22cex.exe
<Current directory>\vfwdvzatpqr.exe
<Current directory>\s5u3lb1dg1x.exe
<Current directory>\h153mr0hfef.exe
<Current directory>\cqe00r1suqu.exe
<Current directory>\ias3ulpoc2t.exe
<Current directory>\kjlu3t30ny2.exe
<Current directory>\3rrg5u1yml3.exe
<Current directory>\x3sut2delqn.exe
<Current directory>\ahu4vjeln3k.exe
<Current directory>\dsrgf01mkxs.exe
<Current directory>\5u0imeueunf.exe
<Current directory>\jmsu5kbqmpv.exe
<Current directory>\xmngbxgcy02.exe
<Current directory>\40ah4gpklci.exe
<Current directory>\doparo1qrol.exe
<Current directory>\2qavpvuavtm.exe
<Current directory>\ibwnj2vzyvh.exe
<Current directory>\qquyswl30nf.exe
<Current directory>\mnqhoark4ig.exe
<Current directory>\kktmz11hfqz.exe
<Current directory>\2er2k3z3fi0.exe
<Current directory>\3wxqjj0f3ua.exe
<Current directory>\5njkrazeakg.exe
<Current directory>\pelwbrpqgmg.exe
<Current directory>\s2kxgwitihs.exe
<Current directory>\sjmblqa5czy.exe
<Current directory>\1orbw3geopu.exe
<Current directory>\schuz0q4omy.exe
<Current directory>\y0pjtf2ggvp.exe
<Current directory>\m4qpose2adq.exe
<Current directory>\h4b0aqbszcu.exe
<Current directory>\u5kceoisk5c.exe
<Current directory>\l22dqrjqjcz.exe
<Current directory>\kmthwajl0m0.exe
<Current directory>\wnhn0zkawce.exe
<Current directory>\wi1oznyzvl5.exe
<Current directory>\05gfhqgtpnb.exe
<Current directory>\npohk4xt3g5.exe
<Current directory>\vv44sq0kcoz.exe
<Current directory>\os5nl22rywl.exe
<Current directory>\kbx12pk42wi.exe
<Current directory>\rdfoj4otagm.exe
<Current directory>\ozi5hlbmgx2.exe
<Current directory>\e3eij3wvf1e.exe
<Current directory>\sma1icpt5nq.exe
<Current directory>\iipcxhwasvl.exe
<Current directory>\b3cjei5g0or.exe
<Current directory>\ig2c3fynr0e.exe
<Current directory>\prczcypuocp.exe
<Current directory>\jwqn554f0tg.exe
<Current directory>\wwa5ib4fjfp.exe
<Current directory>\3ksliutvbvk.exe
<Current directory>\kfelrho3bsz.exe
<Current directory>\zgzo5tdaar0.exe
<Current directory>\pjnjkiqxlup.exe
<Current directory>\gdc12cxf0er.exe
<Current directory>\dabu0djejff.exe
<Current directory>\mgwu5kosu3o.exe
<Current directory>\xguencvpghr.exe
<Current directory>\iciobqpz4uz.exe
<Current directory>\tdcxc4zb3bg.exe
<Current directory>\4idzhzup4xg.exe
<Current directory>\prozymiun2j.exe
<Current directory>\rvhdqfalric.exe
<Current directory>\t212a2caxwc.exe
<Current directory>\njs0hxv03lx.exe
<Current directory>\bbcmu1ywr4v.exe
<Current directory>\xanrknuz111.exe
<Current directory>\3mqg4jqcov0.exe
<Current directory>\5n32s4vxwn3.exe
<Current directory>\jzwwlc3gqsv.exe
<Current directory>\zcislbftgrx.exe
<Current directory>\o50cdjwiptx.exe
<Current directory>\kt5yjrqymk1.exe
<Current directory>\yr1pltyymmy.exe
<Current directory>\kqel2y1l55d.exe
<Current directory>\rezaxmygar0.exe
<Current directory>\a2yeisf4tfw.exe
<Current directory>\jhgn2walq4q.exe
<Current directory>\vypnut.bat
<Current directory>\ki5s143ei1r.exe
<Current directory>\zmenit.bat
<Current directory>\sxwwfboldeb.exe
<Current directory>\jtnblbfhal3.exe
<Current directory>\rqsx0f24ip3.exe
<Current directory>\hrxgjo31a0i.exe
<Current directory>\hqvcj2brxnr.exe
<Current directory>\zoc343tose1.exe
<Current directory>\csrjlrniwnv.exe
<Current directory>\2csgywtbb5q.exe
<Current directory>\yhma2vxrsc5.exe
<Current directory>\h0jpiyc5rmi.exe
<Current directory>\wg3b2m3b5ba.exe
<Current directory>\dr5p2r5y2i2.exe
<Current directory>\crxiszwy040.exe
<Current directory>\j4qvxwivupr.exe
<Current directory>\5zzzhi3vyyq.exe
<Current directory>\04d4af5oduy.exe
<Current directory>\w2d0bxtku2g.exe
<Current directory>\35gp1tbsnk1.exe
<Current directory>\yv5bpych1mv.exe
<Current directory>\0a3ymqsdf4i.exe
<Current directory>\tiy1m0nyqct.exe
<Current directory>\fqkb1bbagnj.exe
<Current directory>\s5f0y4vfwdl.exe
<Current directory>\ickrukqdj5j.exe
<Current directory>\hihi2xpebgt.exe
<Current directory>\smvmzoggtf0.exe
<Current directory>\xt45mrhncyb.exe
<Current directory>\j42tkkwbrnz.exe
<Current directory>\cgyyt4xt1zj.exe
<Current directory>\s5clr1fhu33.exe
<Current directory>\42rcxbqswge.exe
<Current directory>\ypd0m1znpy3.exe
<Current directory>\5tp05mh2wpr.exe
<Current directory>\vatkcubbpp4.exe
<Current directory>\rca1wb5pvtt.exe
<Current directory>\hiyvirnrtj5.exe
<Current directory>\0gfd41yacov.exe
<Current directory>\zi1dtnbkctl.exe
<Current directory>\4t23quqjd5b.exe
<Current directory>\1tyzga2zpsr.exe
<Current directory>\11tldvvbrl5.exe
<Current directory>\e1qmv3kw3wc.exe
<Current directory>\avs3eap0ogl.exe
<Current directory>\njfnzgmqy0h.exe
<Current directory>\xissngaan2l.exe
<Current directory>\3eroospunbl.exe
<Current directory>\12holquttxr.exe
<Current directory>\lwisqofx3rk.exe
<Current directory>\h3ruexjz4az.exe
<Current directory>\rs45kucmie3.exe
<Current directory>\uhw4onw4jx5.exe
<Current directory>\wpnbmqwraih.exe
<Current directory>\jgo2uhqjgsu.exe
<Current directory>\mefqa2dldro.exe
<Current directory>\myoqltpx1cn.exe
<Current directory>\ftyzze2asxk.exe
<Current directory>\bgf3azdccen.exe
<Current directory>\crsfth4wn5z.exe
<Current directory>\roxd4o2x41t.exe
<Current directory>\b0irifkp5gl.exe
<Current directory>\hkpfv0a5c22.exe
<Current directory>\szjfb14uk0w.exe
<Current directory>\mwep22tnt4l.exe
<Current directory>\n3ixnp1yrec.exe
<Current directory>\cccssqs4qui.exe
<Current directory>\1axjjl54res.exe
<Current directory>\u4kjfpancef.exe
<Current directory>\yddqpysnsjc.exe
<Current directory>\sazwwklyhfr.exe
<Current directory>\t3azpvkerqw.exe
<Current directory>\pbejkz3uask.exe
<Current directory>\0w1dsepstwq.exe
<Current directory>\5qwhjionz0k.exe
<Current directory>\yrxd3lfrqol.exe
<Current directory>\mrhde10wnlu.exe
<Current directory>\m44eqad01sn.exe
<Current directory>\dwdfqruzkor.exe
<Current directory>\bdokcasojmi.exe
<Current directory>\vojm4xvdjzf.exe
<Current directory>\q1clwc3yd4r.exe
<Current directory>\h2fflvlzlso.exe
<Current directory>\4zigaebsm32.exe
<Current directory>\oilwjqwf3zv.exe
<Current directory>\t1ejgzj4ixv.exe
<Current directory>\pzhvkpayv0b.exe
<Current directory>\0hu5cw4htmy.exe
<Current directory>\lew5vh1hq0z.exe
<Current directory>\lt3jcdrhnc4.exe
<Current directory>\4yrmbq3wrwu.exe
<Current directory>\ub3elip3yii.exe
<Current directory>\upijr2rucnm.exe
<Current directory>\l3d4pxqgdxd.exe
<Current directory>\upilygrvgvf.exe
<Current directory>\cnalqsob42e.exe
<Current directory>\jivtxer2ekj.exe
<Current directory>\tvy5kpgpwe2.exe
<Current directory>\23rcydlzigt.exe
<Current directory>\vdev1jnhtsi.exe
<Current directory>\kptfgrb42oa.exe
<Current directory>\3pmwpxey4ka.exe
<Current directory>\arbnjh1ni5i.exe
<Current directory>\b2ool12wzad.exe
<Current directory>\h1qiiiulu4d.exe
<Current directory>\perbrbhfr1v.exe
<Current directory>\icjqpw4hw5h.exe
<Current directory>\buhkx5huyfk.exe
<Current directory>\3cpxnhxp0rm.exe
<Current directory>\2htethozzaw.exe
<Current directory>\eaeorayxjtg.exe
<Current directory>\pkhnvjgm5cj.exe

Deletes the following files:

<Current directory>\os5nl22rywl.exe
<Current directory>\kfelrho3bsz.exe
<DRIVERS>\etc\hosts
<Current directory>\createuser.bat

Deletes itself.

Miscellaneous:

Searches for the following windows:

ClassName: 'Shell_TrayWnd' WindowName: '(null)'
ClassName: 'Indicator' WindowName: '(null)'

Технологии

Термины

Обучение и просвещение

Мифы

Technical Information

Рекомендации по лечению

Демо бесплатно на 14 дней