logo elektroda
logo elektroda
X
logo elektroda
REKLAMA
REKLAMA
Adblock/uBlockOrigin/AdGuard mogą powodować znikanie niektórych postów z powodu nowej reguły.

komp wolno chodzi, a wcześniej chodził lepiej...

Daevon 21 Kwi 2005 12:51 1878 21
REKLAMA
  • #1 1424634
    Daevon
    Poziom 11  
    Sprzęt: Amd 300 mHz, 128 RAM, Geforce2, sieciówka Realtek EW-7126, OS win98SE

    Problem polega na tym, że przed podłączeniem do neta komputer śmigał nieźle, gry chodziły ok itd. Po podłączeniu do neta strasznie zwolnił. Nie pomaga format dysku, a co za tym idzie reinstalacja systemu też nic nie daje. Dysk mam czysty-żadnych śmieci w autostarcie, wiec nie tu tkwi problem. I tylko mi nie mówcie, żebym zmienił kompa, bo nie mam narazie kasy, a może da się coś z tym zrobić bez wydawania hajsu. Zdaję sobie sprawę, że stałe łącze może spowolnić kompa, ale żeby aż tak... Przykład: kiedyś grałem w medala AA na sieci i śmigało płynnie, a teraz przy podłaczeniu do neta mam 8 klatek. A jeśli chodzi o skanery antywirusowe i firewall to mam Avasta, i Kerio Personal Firewall.
  • REKLAMA
  • #2 1424638
    budzik88
    Poziom 18  
    a w tym czasie nic czasami nie sciagasz??
  • REKLAMA
  • #3 1424648
    Daevon
    Poziom 11  
    Nie, nic nie ściągam..
  • REKLAMA
  • #4 1424693
    Radzious
    Poziom 28  
    wklej log na elektrodzie z hijackthis i ci powiem. Mozesz miec duzo progów działających w tle.
  • #5 1424735
    Daevon
    Poziom 11  
    FAKTYCZNIE TROCHĘ TEGO JEST

    Logfile of HijackThis v1.99.1
    Scan saved at 13:35:24, on 05-04-21
    Platform: Windows 98 SE (Win9x 4.10.2222A)
    MSIE: Internet Explorer v5.00 (5.00.2614.3500)

    Running processes:
    C:\WINDOWS\SYSTEM\KERNEL32.DLL
    C:\WINDOWS\SYSTEM\MSGSRV32.EXE
    C:\WINDOWS\SYSTEM\MPREXE.EXE
    C:\WINDOWS\SYSTEM\MSTASK.EXE
    C:\PROGRAM FILES\KERIO\PERSONAL FIREWALL\PERSFW.EXE
    C:\WINDOWS\SYSTEM\mmtask.tsk
    C:\PROGRAM FILES\ALWIL SOFTWARE\AVAST4\ASHSERV.EXE
    C:\WINDOWS\SYSTEM\SPOOLSRV32.EXE
    C:\WINDOWS\EXPLORER.EXE
    C:\WINDOWS\SYSTEM\RPCSS.EXE
    C:\WINDOWS\TASKMON.EXE
    C:\WINDOWS\SYSTEM\INTERNAT.EXE
    C:\WINDOWS\SYSTEM\SYSTRAY.EXE
    C:\PROGRAM FILES\ALWIL SOFTWARE\AVAST4\ASHWEBSV.EXE
    C:\PROGRAM FILES\MEDIA ACCESS\MEDIAACCK.EXE
    C:\WINDOWS\SYSTEM\DDHELP.EXE
    C:\PROGRAM FILES\ALWIL SOFTWARE\AVAST4\ASHMAISV.EXE
    C:\PROGRAM FILES\MEDIA ACCESS\MEDIAACCESS.EXE
    C:\PROGRAM FILES\REALTEK\RTL8180\RTLWAKE.EXE
    C:\PROGRAM FILES\GADU-GADU\GG.EXE
    C:\PROGRAM FILES\DAP\DAP.EXE
    C:\PROGRAM FILES\INTERNET EXPLORER\IEXPLORE.EXE
    C:\WINDOWS\SYSTEM\PSTORES.EXE
    C:\PROGRAM FILES\INTERNET EXPLORER\IEXPLORE.EXE
    C:\PROGRAM FILES\HT\HIJACKTHIS.EXE

    R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Search Bar = http://wind-find.com/sp.htm
    R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Search Page = http://wind-find.com/index.htm
    R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = http://www.hotoffers.info/271/
    R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = http://www.eu.microsoft.com/poland/
    R0 - HKLM\Software\Microsoft\Internet Explorer\Search,SearchAssistant = http://wind-find.com/sp.htm
    R1 - HKCU\Software\Microsoft\Internet Explorer\SearchURL,(Default) = http://wind-find.com/index.htm
    R0 - HKCU\Software\Microsoft\Internet Explorer\Toolbar,LinksFolderName = Łącza
    O2 - BHO: AcroIEHlprObj Class - {06849E9F-C8D7-4D59-B87D-784B7D6BE0B3} - C:\PROGRAM FILES\ADOBE\ACROBAT 5.0\READER\ACTIVEX\ACROIEHELPER.OCX
    O3 - Toolbar: &Radio - {8E718888-423F-11D2-876E-00A0C9082467} - C:\WINDOWS\SYSTEM\MSDXM.OCX
    O3 - Toolbar: FlashGet Bar - {E0E899AB-F487-11D5-8D29-0050BA6940E3} - C:\PROGRAM FILES\FLASHGET\FGIEBAR.DLL
    O3 - Toolbar: DAP Bar - {62999427-33FC-4baf-9C9C-BCE6BD127F08} - C:\PROGRAM FILES\DAP\DAPIEBAR.DLL
    O4 - HKLM\..\Run: [ScanRegistry] C:\WINDOWS\scanregw.exe /autorun
    O4 - HKLM\..\Run: [TaskMonitor] C:\WINDOWS\taskmon.exe
    O4 - HKLM\..\Run: [internat.exe] internat.exe
    O4 - HKLM\..\Run: [SystemTray] SysTray.Exe
    O4 - HKLM\..\Run: [LoadPowerProfile] Rundll32.exe powrprof.dll,LoadCurrentPwrScheme
    O4 - HKLM\..\Run: [NvCplDaemon] RUNDLL32.EXE C:\WINDOWS\SYSTEM\NvCpl.dll,NvStartup
    O4 - HKLM\..\Run: [nwiz] nwiz.exe /install
    O4 - HKLM\..\Run: [avast! Web Scanner] C:\PROGRA~1\ALWILS~1\AVAST4\ashWebSv.exe
    O4 - HKLM\..\Run: [Security iGuard] C:\PROGRAM FILES\SECURITY IGUARD\SECURITY IGUARD.EXE
    O4 - HKLM\..\Run: [Media Access] C:\PROGRAM FILES\MEDIA ACCESS\MediaAccK.exe
    O4 - HKLM\..\Run: [ashMaiSv] C:\PROGRA~1\ALWILS~1\AVAST4\ashmaisv.exe
    O4 - HKLM\..\RunServices: [LoadPowerProfile] Rundll32.exe powrprof.dll,LoadCurrentPwrScheme
    O4 - HKLM\..\RunServices: [SchedulingAgent] C:\WINDOWS\SYSTEM\mstask.exe
    O4 - HKLM\..\RunServices: [PersFw] "C:\Program Files\Kerio\Personal Firewall\persfw.exe" /hide
    O4 - HKLM\..\RunServices: [avast!] C:\Program Files\Alwil Software\Avast4\ashServ.exe
    O4 - HKLM\..\RunServices: [Srv32 spool service] C:\WINDOWS\System\spoolsrv32.exe
    O4 - HKCU\..\Run: [Komunikator] C:\PROGRAM FILES\TLEN.PL\TLEN.EXE
    O4 - HKCU\..\Run: [mwuaddm] c:\windows\xfsctck.exe
    O4 - HKCU\..\Run: [tsedwto] c:\windows\xfsctck.exe
    O4 - HKCU\..\Run: [pksmiuu] c:\windows\xfsctck.exe
    O4 - HKCU\..\Run: [lkcbnqc] c:\windows\xfsctck.exe
    O4 - HKCU\..\Run: [wiimbvt] c:\windows\xfsctck.exe
    O4 - HKCU\..\Run: [ydaeajj] c:\windows\xfsctck.exe
    O4 - HKCU\..\Run: [ghrlyea] c:\windows\xfsctck.exe
    O4 - HKCU\..\Run: [wagwrad] c:\windows\xfsctck.exe
    O4 - HKCU\..\Run: [tymaoux] c:\windows\xfsctck.exe
    O4 - HKCU\..\Run: [ycyapim] c:\windows\xfsctck.exe
    O4 - HKCU\..\Run: [xvvsyfd] c:\windows\xfsctck.exe
    O4 - HKCU\..\Run: [vihlwsk] c:\windows\xfsctck.exe
    O4 - HKCU\..\Run: [lmvqkod] c:\windows\xfsctck.exe
    O4 - HKCU\..\Run: [ewuqmts] c:\windows\xfsctck.exe
    O4 - HKCU\..\Run: [ekymojj] c:\windows\xfsctck.exe
    O4 - HKCU\..\Run: [yaecbpg] c:\windows\xfsctck.exe
    O4 - HKCU\..\Run: [ilbeynl] c:\windows\xfsctck.exe
    O4 - HKCU\..\Run: [fmmgnpi] c:\windows\xfsctck.exe
    O4 - HKCU\..\Run: [fxoytja] c:\windows\xfsctck.exe
    O4 - HKCU\..\Run: [btkarml] c:\windows\xfsctck.exe
    O4 - HKCU\..\Run: [wbgmstl] c:\windows\xfsctck.exe
    O4 - HKCU\..\Run: [ykascop] c:\windows\xfsctck.exe
    O4 - HKCU\..\Run: [uestrei] c:\windows\xfsctck.exe
    O4 - HKCU\..\Run: [kktwkwo] c:\windows\xfsctck.exe
    O4 - HKCU\..\Run: [ygageyx] c:\windows\xfsctck.exe
    O4 - HKCU\..\Run: [vtxcahr] c:\windows\xfsctck.exe
    O4 - HKCU\..\Run: [wkqgosf] c:\windows\xfsctck.exe
    O4 - HKCU\..\Run: [wubdvax] c:\windows\xfsctck.exe
    O4 - HKCU\..\Run: [vnvbfls] c:\windows\xfsctck.exe
    O4 - HKCU\..\Run: [xbcwuwf] c:\windows\xfsctck.exe
    O4 - HKCU\..\Run: [iqifddr] c:\windows\xfsctck.exe
    O4 - HKCU\..\Run: [bqpnbvd] c:\windows\xfsctck.exe
    O4 - HKCU\..\Run: [qxacccf] c:\windows\xfsctck.exe
    O4 - HKCU\..\Run: [ffkpbhy] c:\windows\xfsctck.exe
    O4 - HKCU\..\Run: [iflcrmx] c:\windows\xfsctck.exe
    O4 - HKCU\..\Run: [pnglpvv] c:\windows\xfsctck.exe
    O4 - HKCU\..\Run: [haejycc] c:\windows\xfsctck.exe
    O4 - HKCU\..\Run: [smkgjwo] c:\windows\xfsctck.exe
    O4 - HKCU\..\Run: [qbukitq] c:\windows\xfsctck.exe
    O4 - HKCU\..\Run: [hvtorei] c:\windows\xfsctck.exe
    O4 - HKCU\..\Run: [trylsgb] c:\windows\xfsctck.exe
    O4 - HKCU\..\Run: [tlaqqqe] c:\windows\xfsctck.exe
    O4 - HKCU\..\Run: [qkdkdvw] c:\windows\xfsctck.exe
    O4 - HKCU\..\Run: [euoymhi] c:\windows\xfsctck.exe
    O4 - HKCU\..\Run: [lhyojml] c:\windows\xfsctck.exe
    O4 - HKCU\..\Run: [cugujxg] c:\windows\xfsctck.exe
    O4 - HKCU\..\Run: [puvihku] c:\windows\xfsctck.exe
    O4 - HKCU\..\Run: [ygqvhfq] c:\windows\xfsctck.exe
    O4 - HKCU\..\Run: [ntpcbrq] c:\windows\tbdvfin.exe
    O4 - HKCU\..\Run: [tscbjuv] c:\windows\tbdvfin.exe
    O4 - HKCU\..\Run: [jifjnkk] c:\windows\vaffywp.exe
    O4 - HKCU\..\Run: [isnptnb] c:\windows\vaffywp.exe
    O4 - HKCU\..\Run: [pamryig] c:\windows\vaffywp.exe
    O4 - HKCU\..\Run: [tliijag] c:\windows\vaffywp.exe
    O4 - HKCU\..\Run: [ciarcwd] c:\windows\vaffywp.exe
    O4 - HKCU\..\Run: [plehpsc] c:\windows\vaffywp.exe
    O4 - HKCU\..\Run: [arqohds] c:\windows\vaffywp.exe
    O4 - HKCU\..\Run: [ymildvn] c:\windows\vaffywp.exe
    O4 - HKCU\..\Run: [gdmwike] c:\windows\vaffywp.exe
    O4 - HKCU\..\Run: [oeimswf] c:\windows\vaffywp.exe
    O4 - HKCU\..\Run: [ibfwvca] c:\windows\vaffywp.exe
    O4 - HKCU\..\Run: [uxwtxbx] c:\windows\srskdgw.exe
    O4 - HKCU\..\Run: [bxokpuv] c:\windows\srskdgw.exe
    O4 - HKCU\..\Run: [uktbcms] c:\windows\srskdgw.exe
    O4 - HKCU\..\Run: [rjotcxc] c:\windows\srskdgw.exe
    O4 - HKCU\..\Run: [qkhnyme] c:\windows\srskdgw.exe
    O4 - HKCU\..\Run: [yhbjrds] c:\windows\srskdgw.exe
    O4 - HKCU\..\Run: [fjkphem] c:\windows\srskdgw.exe
    O4 - HKCU\..\Run: [qtkrxij] c:\windows\srskdgw.exe
    O4 - HKCU\..\Run: [etfqsle] c:\windows\srskdgw.exe
    O4 - HKCU\..\Run: [oakjmjf] c:\windows\srskdgw.exe
    O4 - HKCU\..\Run: [ecrrwpm] c:\windows\srskdgw.exe
    O4 - HKCU\..\Run: [jqgatyj] c:\windows\srskdgw.exe
    O4 - HKCU\..\Run: [dkmuhvh] c:\windows\srskdgw.exe
    O4 - HKCU\..\Run: [illcnln] c:\windows\srskdgw.exe
    O4 - HKCU\..\Run: [qyofluc] c:\windows\srskdgw.exe
    O4 - HKCU\..\Run: [hubomdo] c:\windows\srskdgw.exe
    O4 - HKCU\..\Run: [icininn] c:\windows\srskdgw.exe
    O4 - HKCU\..\Run: [kiqiare] c:\windows\srskdgw.exe
    O4 - HKCU\..\Run: [gwemfpt] c:\windows\srskdgw.exe
    O4 - HKCU\..\Run: [lbplbmn] c:\windows\srskdgw.exe
    O4 - HKCU\..\Run: [nmvqjxc] c:\windows\srskdgw.exe
    O4 - HKCU\..\Run: [njlhshf] c:\windows\srskdgw.exe
    O4 - HKCU\..\Run: [ygercgi] c:\windows\srskdgw.exe
    O4 - HKCU\..\Run: [mdafodb] c:\windows\srskdgw.exe
    O4 - HKCU\..\Run: [mwjdouu] c:\windows\srskdgw.exe
    O4 - HKCU\..\Run: [yawobay] c:\windows\srskdgw.exe
    O4 - HKCU\..\Run: [fhdwtgn] c:\windows\srskdgw.exe
    O4 - HKCU\..\Run: [qhaxbby] c:\windows\srskdgw.exe
    O4 - HKCU\..\Run: [ubxqryo] c:\windows\srskdgw.exe
    O4 - HKCU\..\Run: [mayoraf] c:\windows\srskdgw.exe
    O4 - HKCU\..\Run: [safgjvh] c:\windows\srskdgw.exe
    O4 - HKCU\..\Run: [lcqmnxd] c:\windows\srskdgw.exe
    O4 - HKCU\..\Run: [uptlaxu] c:\windows\srskdgw.exe
    O4 - HKCU\..\Run: [igxmvjr] c:\windows\srskdgw.exe
    O4 - HKCU\..\Run: [ntgfnxi] c:\windows\srskdgw.exe
    O4 - HKCU\..\Run: [wwktvti] c:\windows\srskdgw.exe
    O4 - HKCU\..\Run: [ryptjnu] c:\windows\srskdgw.exe
    O4 - HKCU\..\Run: [ykypayq] c:\windows\srskdgw.exe
    O4 - HKCU\..\Run: [wxntkol] c:\windows\srskdgw.exe
    O4 - HKCU\..\Run: [itvtqoj] c:\windows\srskdgw.exe
    O4 - HKCU\..\Run: [gafwxui] c:\windows\srskdgw.exe
    O4 - HKCU\..\Run: [folnbyd] c:\windows\srskdgw.exe
    O4 - HKCU\..\Run: [eryontd] c:\windows\srskdgw.exe
    O4 - HKCU\..\Run: [hcdvidq] c:\windows\srskdgw.exe
    O4 - HKCU\..\Run: [yqwigkw] c:\windows\srskdgw.exe
    O4 - HKCU\..\Run: [eykevnm] c:\windows\srskdgw.exe
    O4 - HKCU\..\Run: [uqscqev] c:\windows\srskdgw.exe
    O4 - HKCU\..\Run: [obcxaoo] c:\windows\srskdgw.exe
    O4 - HKCU\..\Run: [snsddnh] c:\windows\srskdgw.exe
    O4 - HKCU\..\Run: [aqdfrsv] c:\windows\srskdgw.exe
    O4 - HKCU\..\Run: [jmnwxqn] c:\windows\srskdgw.exe
    O4 - HKCU\..\Run: [ascqicb] c:\windows\srskdgw.exe
    O4 - HKCU\..\Run: [duewrmx] c:\windows\srskdgw.exe
    O4 - HKCU\..\Run: [beiaryl] c:\windows\srskdgw.exe
    O4 - HKCU\..\Run: [gtevpda] c:\windows\srskdgw.exe
    O4 - HKCU\..\Run: [qkgoptu] c:\windows\srskdgw.exe
    O4 - HKCU\..\Run: [aumeckl] c:\windows\srskdgw.exe
    O4 - HKCU\..\Run: [qhtdesf] c:\windows\srskdgw.exe
    O4 - HKCU\..\Run: [vlwbccm] c:\windows\srskdgw.exe
    O4 - HKCU\..\Run: [lmuhpca] c:\windows\srskdgw.exe
    O4 - HKCU\..\Run: [rsblsxa] c:\windows\srskdgw.exe
    O4 - HKCU\..\Run: [esrcilb] c:\windows\srskdgw.exe
    O4 - HKCU\..\Run: [iuxlwmy] c:\windows\srskdgw.exe
    O4 - HKCU\..\Run: [ibttkrm] c:\windows\srskdgw.exe
    O4 - HKCU\..\Run: [tfykywt] c:\windows\srskdgw.exe
    O4 - HKCU\..\Run: [vqdyiwi] c:\windows\srskdgw.exe
    O4 - HKCU\..\Run: [rwuqmhq] c:\windows\srskdgw.exe
    O4 - HKCU\..\Run: [bqfjqai] c:\windows\srskdgw.exe
    O4 - HKCU\..\Run: [bdkedch] c:\windows\srskdgw.exe
    O4 - HKCU\..\Run: [tpnjcel] c:\windows\srskdgw.exe
    O4 - HKCU\..\Run: [ohwgiei] c:\windows\srskdgw.exe
    O4 - HKCU\..\Run: [iwqfecf] c:\windows\srskdgw.exe
    O4 - HKCU\..\Run: [ohammtb] c:\windows\srskdgw.exe
    O4 - HKCU\..\Run: [vyyojdb] c:\windows\srskdgw.exe
    O4 - HKCU\..\Run: [iyucsfb] c:\windows\srskdgw.exe
    O4 - HKCU\..\Run: [lgsdbdx] c:\windows\srskdgw.exe
    O4 - HKCU\..\Run: [kdjsenw] c:\windows\srskdgw.exe
    O4 - HKCU\..\Run: [rwvvpgr] c:\windows\srskdgw.exe
    O4 - HKCU\..\Run: [wrtiurf] c:\windows\srskdgw.exe
    O4 - HKCU\..\Run: [poieohu] c:\windows\srskdgw.exe
    O4 - HKCU\..\Run: [uhokbwh] c:\windows\srskdgw.exe
    O4 - HKCU\..\Run: [osdrwgb] c:\windows\srskdgw.exe
    O4 - HKCU\..\Run: [rwdrnng] c:\windows\srskdgw.exe
    O4 - HKCU\..\Run: [lyjkdhd] c:\windows\srskdgw.exe
    O4 - HKCU\..\Run: [xjjauyy] c:\windows\srskdgw.exe
    O4 - HKCU\..\Run: [kyttxto] c:\windows\srskdgw.exe
    O4 - HKCU\..\Run: [xgnhppw] c:\windows\yyrkasm.exe
    O4 - HKCU\..\Run: [cljhgpv] c:\windows\yyrkasm.exe
    O4 - HKCU\..\Run: [velojrw] c:\windows\yyrkasm.exe
    O4 - HKCU\..\Run: [pkcmojs] c:\windows\yyrkasm.exe
    O4 - HKCU\..\Run: [rkvgjdk] c:\windows\yyrkasm.exe
    O4 - HKCU\..\Run: [gboghdq] c:\windows\yyrkasm.exe
    O4 - HKCU\..\Run: [tmwmyfv] c:\windows\yyrkasm.exe
    O4 - HKCU\..\Run: [hkcixsi] c:\windows\yyrkasm.exe
    O4 - HKCU\..\Run: [sjfjmac] c:\windows\yyrkasm.exe
    O4 - HKCU\..\Run: [cukpyka] c:\windows\yyrkasm.exe
    O4 - HKCU\..\Run: [lrxxiax] c:\windows\yyrkasm.exe
    O4 - HKCU\..\Run: [lxkscen] c:\windows\yyrkasm.exe
    O4 - HKCU\..\Run: [pfdogkv] c:\windows\yyrkasm.exe
    O4 - HKCU\..\Run: [cewhxei] c:\windows\yyrkasm.exe
    O4 - HKCU\..\Run: [jnxupmi] c:\windows\yyrkasm.exe
    O4 - HKCU\..\Run: [eloclrr] c:\windows\yyrkasm.exe
    O4 - HKCU\..\Run: [klhhrnt] c:\windows\yyrkasm.exe
    O4 - HKCU\..\Run: [cewvqjv] c:\windows\yyrkasm.exe
    O4 - HKCU\..\Run: [qibagtd] c:\windows\yyrkasm.exe
    O4 - HKCU\..\Run: [vpbejrm] c:\windows\yyrkasm.exe
    O4 - HKCU\..\Run: [jbjbmou] c:\windows\ogioigl.exe
    O4 - HKCU\..\Run: [pboajxq] c:\windows\ogioigl.exe
    O4 - HKCU\..\Run: [asecfia] c:\windows\ogioigl.exe
    O4 - HKCU\..\Run: [dmdthid] c:\windows\ogioigl.exe
    O4 - HKCU\..\Run: [mtbmidf] c:\windows\ogioigl.exe
    O4 - HKCU\..\Run: [wjkympq] c:\windows\ogioigl.exe
    O4 - HKCU\..\Run: [totqqtp] c:\windows\ogioigl.exe
    O4 - HKCU\..\Run: [yimmara] c:\windows\ogioigl.exe
    O4 - HKCU\..\Run: [lfjnnkv] c:\windows\ogioigl.exe
    O4 - HKCU\..\Run: [sivikxv] c:\windows\ogioigl.exe
    O4 - HKCU\..\Run: [kokpgpi] c:\windows\ogioigl.exe
    O4 - HKCU\..\Run: [cpsfuqt] c:\windows\ogioigl.exe
    O4 - HKCU\..\Run: [wgvecbd] c:\windows\ogioigl.exe
    O4 - HKCU\..\Run: [cxnwgtb] c:\windows\ogioigl.exe
    O4 - HKCU\..\Run: [ifsptjn] c:\windows\ogioigl.exe
    O4 - HKCU\..\Run: [lhhkwbx] c:\windows\ogioigl.exe
    O4 - HKCU\..\Run: [rotmnky] c:\windows\ogioigl.exe
    O4 - HKCU\..\Run: [cyhwmgh] c:\windows\ogioigl.exe
    O4 - HKCU\..\Run: [hpmluqr] c:\windows\ogioigl.exe
    O4 - HKCU\..\Run: [vsopuyh] c:\windows\ogioigl.exe
    O4 - HKCU\..\Run: [dhrumfa] c:\windows\ogioigl.exe
    O4 - HKCU\..\Run: [bgsgckc] c:\windows\ogioigl.exe
    O4 - HKCU\..\Run: [ebwgpsv] c:\windows\ogioigl.exe
    O4 - HKCU\..\Run: [nimqoco] c:\windows\ogioigl.exe
    O4 - HKCU\..\Run: [qqvwvei] c:\windows\ogioigl.exe
    O4 - HKCU\..\Run: [hvqshxe] c:\windows\ogioigl.exe
    O4 - HKCU\..\Run: [fwbsghe] c:\windows\ogioigl.exe
    O4 - HKCU\..\Run: [mjvukqt] c:\windows\ogioigl.exe
    O4 - HKCU\..\Run: [uuoeswq] c:\windows\ogioigl.exe
    O4 - HKCU\..\Run: [hymfmqp] c:\windows\ogioigl.exe
    O4 - HKCU\..\Run: [selghcd] c:\windows\ogioigl.exe
    O4 - HKCU\..\Run: [cmsctyk] c:\windows\ogioigl.exe
    O4 - HKCU\..\Run: [kiuvgfw] c:\windows\ogioigl.exe
    O4 - HKCU\..\Run: [jsptmpj] c:\windows\ogioigl.exe
    O4 - HKCU\..\Run: [bfifvqd] c:\windows\ogioigl.exe
    O4 - HKCU\..\Run: [dobfifh] c:\windows\ogioigl.exe
    O4 - HKCU\..\Run: [dgyassd] c:\windows\suqdqfu.exe
    O4 - HKCU\..\Run: [strbbjc] c:\windows\suqdqfu.exe
    O4 - HKCU\..\Run: [newpgga] c:\windows\suqdqfu.exe
    O4 - HKCU\..\Run: [yrkyewr] c:\windows\igphfei.exe
    O4 - HKCU\..\Run: [sfbcayx] c:\windows\igphfei.exe
    O4 - HKCU\..\Run: [joiutxw] c:\windows\igphfei.exe
    O4 - HKCU\..\Run: [lhsubfh] c:\windows\igphfei.exe
    O4 - HKCU\..\Run: [arnfdrd] c:\windows\rfwcndr.exe
    O4 - HKCU\..\Run: [vuiiksd] c:\windows\rfwcndr.exe
    O4 - HKCU\..\Run: [pclfrkg] c:\windows\rfwcndr.exe
    O4 - HKCU\..\Run: [hcxcoik] c:\windows\rfwcndr.exe
    O4 - HKCU\..\Run: [ykwojnh] c:\windows\rfwcndr.exe
    O4 - HKCU\..\Run: [psuhtat] c:\windows\rfwcndr.exe
    O4 - HKCU\..\Run: [wlcjjql] c:\windows\rfwcndr.exe
    O4 - HKCU\..\Run: [dnemjjc] c:\windows\rfwcndr.exe
    O4 - HKCU\..\Run: [wocrixx] c:\windows\rfwcndr.exe
    O4 - HKCU\..\Run: [nwuysin] c:\windows\rfwcndr.exe
    O4 - HKCU\..\Run: [owcmpvb] c:\windows\rfwcndr.exe
    O4 - HKCU\..\Run: [cfltend] c:\windows\rfwcndr.exe
    O4 - HKCU\..\Run: [ntytgon] c:\windows\rfwcndr.exe
    O4 - HKCU\..\Run: [bxhauap] c:\windows\rfwcndr.exe
    O4 - HKCU\..\Run: [ptoeheq] c:\windows\rfwcndr.exe
    O4 - HKCU\..\Run: [cvgnqve] c:\windows\rfwcndr.exe
    O4 - HKCU\..\Run: [aqmpwxt] c:\windows\rfwcndr.exe
    O4 - HKCU\..\Run: [yoawnrl] c:\windows\rfwcndr.exe
    O4 - HKCU\..\Run: [taomxtk] c:\windows\rfwcndr.exe
    O4 - HKCU\..\Run: [tmhohce] c:\windows\rfwcndr.exe
    O4 - HKCU\..\Run: [abqebng] c:\windows\rfwcndr.exe
    O4 - HKCU\..\Run: [yxtoylo] c:\windows\rfwcndr.exe
    O4 - HKCU\..\Run: [hmfojwy] c:\windows\rfwcndr.exe
    O4 - HKCU\..\Run: [trskvdb] c:\windows\rfwcndr.exe
    O4 - HKCU\..\Run: [gekixdo] c:\windows\rfwcndr.exe
    O4 - HKCU\..\Run: [dtdgbyq] c:\windows\rfwcndr.exe
    O4 - HKCU\..\Run: [cvpddak] c:\windows\rfwcndr.exe
    O4 - HKCU\..\Run: [iqdgqyv] c:\windows\rfwcndr.exe
    O4 - HKCU\..\Run: [dwrmpui] c:\windows\rfwcndr.exe
    O4 - HKCU\..\Run: [enlwdqg] c:\windows\rfwcndr.exe
    O4 - HKCU\..\Run: [lbrlsbe] c:\windows\rfwcndr.exe
    O4 - HKCU\..\Run: [pjelbcn] c:\windows\rfwcndr.exe
    O4 - HKCU\..\Run: [ttfjnfu] c:\windows\rfwcndr.exe
    O4 - HKCU\..\Run: [bpvdiya] c:\windows\rfwcndr.exe
    O4 - HKCU\..\Run: [fkfwity] c:\windows\rfwcndr.exe
    O4 - HKCU\..\Run: [fxsfbma] c:\windows\rfwcndr.exe
    O4 - HKCU\..\Run: [xjmovte] c:\windows\rfwcndr.exe
    O4 - HKCU\..\Run: [koytapk] c:\windows\rfwcndr.exe
    O4 - HKCU\..\Run: [itroynu] c:\windows\rfwcndr.exe
    O4 - HKCU\..\Run: [ppvlmxb] c:\windows\rfwcndr.exe
    O4 - HKCU\..\Run: [yjvlxuf] c:\windows\rfwcndr.exe
    O4 - HKCU\..\Run: [vfepdnr] c:\windows\rfwcndr.exe
    O4 - HKCU\..\Run: [lrkbeyv] c:\windows\rfwcndr.exe
    O4 - HKCU\..\Run: [ldpeqff] c:\windows\rfwcndr.exe
    O4 - HKCU\..\Run: [rtdprvm] c:\windows\rfwcndr.exe
    O4 - HKCU\..\Run: [mxhbwhw] c:\windows\rfwcndr.exe
    O4 - HKCU\..\Run: [morkwjs] c:\windows\htgtonw.exe
    O4 - HKCU\..\Run: [apsxouu] c:\windows\htgtonw.exe
    O4 - HKCU\..\Run: [whiwnyu] c:\windows\htgtonw.exe
    O4 - HKCU\..\Run: [pjrgskw] c:\windows\htgtonw.exe
    O4 - HKCU\..\Run: [abhjtfe] c:\windows\htgtonw.exe
    O4 - HKCU\..\Run: [csrrgrq] c:\windows\htgtonw.exe
    O4 - HKCU\..\Run: [fkjnywq] c:\windows\htgtonw.exe
    O4 - HKCU\..\Run: [wqhitwp] c:\windows\htgtonw.exe
    O4 - HKCU\..\Run: [qncpjjx] c:\windows\htgtonw.exe
    O4 - HKCU\..\Run: [wihxrbo] c:\windows\fhlffmm.exe
    O4 - HKCU\..\Run: [tmigmfs] c:\windows\bwfbmsd.exe
    O4 - HKCU\..\Run: [xoolhyu] c:\windows\bwfbmsd.exe
    O4 - HKCU\..\Run: [ffqgomx] c:\windows\bwfbmsd.exe
    O4 - HKCU\..\Run: [iqfusqn] c:\windows\bwfbmsd.exe
    O4 - HKCU\..\Run: [onndkgg] c:\windows\bwfbmsd.exe
    O4 - HKCU\..\Run: [jhxmehd] c:\windows\bwfbmsd.exe
    O4 - HKCU\..\Run: [xvcxrcx] c:\windows\bwfbmsd.exe
    O4 - HKCU\..\Run: [xsqcrle] c:\windows\bwfbmsd.exe
    O4 - HKCU\..\Run: [udlgpvd] c:\windows\bwfbmsd.exe
    O4 - HKCU\..\Run: [vyohiku] c:\windows\bwfbmsd.exe
    O4 - HKCU\..\Run: [bxcxsrr] c:\windows\bwfbmsd.exe
    O4 - HKCU\..\Run: [tfpkosh] c:\windows\bwfbmsd.exe
    O4 - HKCU\..\Run: [prnukhn] c:\windows\bwfbmsd.exe
    O4 - HKCU\..\Run: [cauddff] c:\windows\bwfbmsd.exe
    O4 - HKCU\..\Run: [sqwdsmq] c:\windows\bwfbmsd.exe
    O4 - HKCU\..\Run: [torspfb] c:\windows\bwfbmsd.exe
    O4 - HKCU\..\Run: [ootxafk] c:\windows\bwfbmsd.exe
    O4 - HKCU\..\Run: [nmrglyp] c:\windows\bwfbmsd.exe
    O4 - HKCU\..\Run: [qdqrant] c:\windows\bwfbmsd.exe
    O4 - HKCU\..\Run: [ykumovr] c:\windows\bwfbmsd.exe
    O4 - HKCU\..\Run: [ppevkht] c:\windows\bwfbmsd.exe
    O4 - HKCU\..\Run: [juewobr] c:\windows\bwfbmsd.exe
    O4 - HKCU\..\Run: [surveau] c:\windows\bwfbmsd.exe
    O4 - HKCU\..\Run: [nyqxmof] c:\windows\bwfbmsd.exe
    O4 - HKCU\..\Run: [vdhghwf] c:\windows\bwfbmsd.exe
    O4 - HKCU\..\Run: [jnqrcox] c:\windows\bwfbmsd.exe
    O4 - HKCU\..\Run: [aiykbkt] c:\windows\bwfbmsd.exe
    O4 - HKCU\..\Run: [ubaatvk] c:\windows\bwfbmsd.exe
    O4 - HKCU\..\Run: [ognhcwj] c:\windows\bwfbmsd.exe
    O4 - HKCU\..\Run: [uaopxbb] c:\windows\bwfbmsd.exe
    O4 - HKCU\..\Run: [vdstqun] c:\windows\bwfbmsd.exe
    O4 - HKCU\..\Run: [ckitbnu] c:\windows\bwfbmsd.exe
    O4 - HKCU\..\Run: [jwqvuch] c:\windows\bwfbmsd.exe
    O4 - HKCU\..\Run: [mbligfl] c:\windows\bwfbmsd.exe
    O4 - HKCU\..\Run: [qerbaua] c:\windows\bwfbmsd.exe
    O4 - HKCU\..\Run: [suephip] c:\windows\bwfbmsd.exe
    O4 - HKCU\..\Run: [rgducea] c:\windows\bwfbmsd.exe
    O4 - HKCU\..\Run: [spvjips] c:\windows\bwfbmsd.exe
    O4 - HKCU\..\Run: [upmnfau] c:\windows\bwfbmsd.exe
    O4 - HKCU\..\Run: [uikgjsn] c:\windows\bwfbmsd.exe
    O4 - HKCU\..\Run: [douyygu] c:\windows\bwfbmsd.exe
    O4 - HKCU\..\Run: [bligqgy] c:\windows\bwfbmsd.exe
    O4 - HKCU\..\Run: [smjpiyo] c:\windows\bwfbmsd.exe
    O4 - HKCU\..\Run: [ljaajnx] c:\windows\bwfbmsd.exe
    O4 - HKCU\..\Run: [fwcpapt] c:\windows\bwfbmsd.exe
    O4 - HKCU\..\Run: [lwerojh] c:\windows\bwfbmsd.exe
    O4 - HKCU\..\Run: [ulibirk] c:\windows\bwfbmsd.exe
    O4 - HKCU\..\Run: [jdgblnn] c:\windows\bwfbmsd.exe
    O4 - HKCU\..\Run: [hpljakd] c:\windows\bwfbmsd.exe
    O4 - HKCU\..\Run: [bntuocf] c:\windows\bwfbmsd.exe
    O4 - HKCU\..\Run: [eirfyhj] c:\windows\bwfbmsd.exe
    O4 - HKCU\..\Run: [dkcmnjp] c:\windows\bwfbmsd.exe
    O4 - HKCU\..\Run: [ohxnegu] c:\windows\bwfbmsd.exe
    O4 - HKCU\..\Run: [esxjydf] c:\windows\bwfbmsd.exe
    O4 - HKCU\..\Run: [tbpeuvu] c:\windows\bwfbmsd.exe
    O4 - HKCU\..\Run: [wexsnbo] c:\windows\bwfbmsd.exe
    O4 - HKCU\..\Run: [beoiyav] c:\windows\bwfbmsd.exe
    O4 - HKCU\..\Run: [hnntaly] c:\windows\bwfbmsd.exe
    O4 - HKCU\..\Run: [jyiydyy] c:\windows\bwfbmsd.exe
    O4 - HKCU\..\Run: [ilrkgpi] c:\windows\bwfbmsd.exe
    O4 - HKCU\..\Run: [lvamjog] c:\windows\kribvlh.exe
    O4 - HKCU\..\Run: [cunqjce] c:\windows\kribvlh.exe
    O4 - HKCU\..\Run: [jlfnjcu] c:\windows\kribvlh.exe
    O4 - HKCU\..\Run: [nkmoqgt] c:\windows\kribvlh.exe
    O4 - HKCU\..\Run: [woagqwm] c:\windows\kribvlh.exe
    O4 - HKCU\..\Run: [mpvmcvc] c:\windows\kribvlh.exe
    O4 - HKCU\..\Run: [uqdumqf] c:\windows\kribvlh.exe
    O4 - HKCU\..\Run: [nsjahxs] c:\windows\kribvlh.exe
    O4 - HKCU\..\Run: [nygqrvb] c:\windows\kribvlh.exe
    O4 - HKCU\..\Run: [fwlbjmu] c:\windows\kribvlh.exe
    O4 - HKCU\..\Run: [rjdcvgl] c:\windows\kribvlh.exe
    O4 - HKCU\..\Run: [asqbodh] c:\windows\kribvlh.exe
    O4 - HKCU\..\Run: [bhfnupl] c:\windows\kribvlh.exe
    O4 - HKCU\..\Run: [oovsylb] c:\windows\kribvlh.exe
    O4 - HKCU\..\Run: [khunyty] c:\windows\kribvlh.exe
    O4 - HKCU\..\Run: [nqdcbij] c:\windows\kribvlh.exe
    O4 - HKCU\..\Run: [mybqxfw] c:\windows\kribvlh.exe
    O4 - HKCU\..\Run: [hvwqmbx] c:\windows\kribvlh.exe
    O4 - HKCU\..\Run: [bqyguor] c:\windows\kribvlh.exe
    O4 - HKCU\..\Run: [sqwcdeq] c:\windows\kribvlh.exe
    O4 - HKCU\..\Run: [vcqycut] c:\windows\kribvlh.exe
    O4 - HKCU\..\Run: [cjqisas] c:\windows\kribvlh.exe
    O4 - HKCU\..\Run: [vdmdaox] c:\windows\kribvlh.exe
    O4 - HKCU\..\Run: [wxilwoo] c:\windows\kribvlh.exe
    O4 - HKCU\..\Run: [lmlsptx] c:\windows\kribvlh.exe
    O4 - HKCU\..\Run: [wnmoekb] c:\windows\kribvlh.exe
    O4 - HKCU\..\Run: [qjknhrh] c:\windows\kribvlh.exe
    O4 - HKCU\..\Run: [haakcdi] c:\windows\kribvlh.exe
    O4 - HKCU\..\Run: [luntubo] c:\windows\kribvlh.exe
    O4 - HKCU\..\Run: [nkyukyn] c:\windows\kribvlh.exe
    O4 - HKCU\..\Run: [gxuvduq] c:\windows\kribvlh.exe
    O4 - HKCU\..\Run: [tsqxcap] c:\windows\kribvlh.exe
    O4 - HKCU\..\Run: [ewknjca] c:\windows\kribvlh.exe
    O4 - HKCU\..\Run: [wepfrgy] c:\windows\kribvlh.exe
    O4 - HKCU\..\Run: [uqqjydc] c:\windows\kribvlh.exe
    O4 - HKCU\..\Run: [anxitks] c:\windows\kribvlh.exe
    O4 - HKCU\..\Run: [pucoqgu] c:\windows\kribvlh.exe
    O4 - HKCU\..\Run: [qeexeuf] c:\windows\kribvlh.exe
    O4 - HKCU\..\Run: [nsuvtfv] c:\windows\kribvlh.exe
    O4 - HKCU\..\Run: [eusalpm] c:\windows\kribvlh.exe
    O4 - HKCU\..\Run: [ucufhwn] c:\windows\kribvlh.exe
    O4 - HKCU\..\Run: [kfeemja] c:\windows\kribvlh.exe
    O4 - HKCU\..\Run: [tucgihe] c:\windows\kribvlh.exe
    O4 - HKCU\..\Run: [curyybd] c:\windows\kribvlh.exe
    O4 - HKCU\..\Run: [myhllpx] c:\windows\kribvlh.exe
    O4 - HKCU\..\Run: [lqgqdca] c:\windows\kribvlh.exe
    O4 - HKCU\..\Run: [tlyiyhj] c:\windows\kribvlh.exe
    O4 - HKCU\..\Run: [wxlvivg] c:\windows\kribvlh.exe
    O4 - HKCU\..\Run: [dnjjnio] c:\windows\kribvlh.exe
    O4 - HKCU\..\Run: [vothxpt] c:\windows\kribvlh.exe
    O4 - HKCU\..\Run: [ubsmqfr] c:\windows\kribvlh.exe
    O4 - HKCU\..\Run: [kcldbor] c:\windows\kribvlh.exe
    O4 - HKCU\..\Run: [uvdyirc] c:\windows\kribvlh.exe
    O4 - HKCU\..\Run: [fcxcmkm] c:\windows\kribvlh.exe
    O4 - HKCU\..\Run: [ygejrhf] c:\windows\kribvlh.exe
    O4 - HKCU\..\Run: [nfmefxb] c:\windows\fvpjlqm.exe
    O4 - HKCU\..\Run: [qfpktak] c:\windows\fvpjlqm.exe
    O4 - HKCU\..\Run: [ihblkni] c:\windows\fvpjlqm.exe
    O4 - HKCU\..\Run: [yjixhei] c:\windows\fvpjlqm.exe
    O4 - HKCU\..\Run: [tpyvcxa] c:\windows\fvpjlqm.exe
    O4 - HKCU\..\Run: [tgxjbpk] c:\windows\fvpjlqm.exe
    O4 - HKCU\..\Run: [uejekwj] c:\windows\fvpjlqm.exe
    O4 - HKCU\..\Run: [epywxjn] c:\windows\fvpjlqm.exe
    O4 - HKCU\..\Run: [ralscmk] c:\windows\fvpjlqm.exe
    O4 - HKCU\..\Run: [diyduin] c:\windows\fvpjlqm.exe
    O4 - HKCU\..\Run: [dmsnvrl] c:\windows\fvpjlqm.exe
    O4 - HKCU\..\Run: [kjcikdn] c:\windows\fvpjlqm.exe
    O4 - HKCU\..\Run: [llmgmnq] c:\windows\fvpjlqm.exe
    O4 - HKCU\..\Run: [nycqnou] c:\windows\fvpjlqm.exe
    O4 - HKCU\..\Run: [bubvpes] c:\windows\fvpjlqm.exe
    O4 - HKCU\..\Run: [kiinqbb] c:\windows\tmsrqfw.exe
    O4 - HKCU\..\Run: [okahjst] c:\windows\rkopuww.exe
    O4 - HKCU\..\Run: [yuupolx] c:\windows\ynvwsck.exe
    O4 - HKCU\..\Run: [wvborob] c:\windows\ynvwsck.exe
    O4 - HKCU\..\Run: [fcmqvbr] c:\windows\ynvwsck.exe
    O4 - HKCU\..\Run: [jkhtfkj] c:\windows\ynvwsck.exe
    O4 - HKCU\..\Run: [msvkbij] c:\windows\ynvwsck.exe
    O4 - HKCU\..\Run: [llvesjf] c:\windows\ynvwsck.exe
    O4 - HKCU\..\Run: [lerdaeu] c:\windows\uwoxeyv.exe
    O4 - HKCU\..\RunServices: [Komunikator] C:\PROGRAM FILES\TLEN.PL\TLEN.EXE
    O4 - HKCU\..\RunServices: [mwuaddm] c:\windows\xfsctck.exe
    O4 - HKCU\..\RunServices: [tsedwto] c:\windows\xfsctck.exe
    O4 - HKCU\..\RunServices: [pksmiuu] c:\windows\xfsctck.exe
    O4 - HKCU\..\RunServices: [lkcbnqc] c:\windows\xfsctck.exe
    O4 - HKCU\..\RunServices: [wiimbvt] c:\windows\xfsctck.exe
    O4 - HKCU\..\RunServices: [ydaeajj] c:\windows\xfsctck.exe
    O4 - HKCU\..\RunServices: [ghrlyea] c:\windows\xfsctck.exe
    O4 - HKCU\..\RunServices: [wagwrad] c:\windows\xfsctck.exe
    O4 - HKCU\..\RunServices: [tymaoux] c:\windows\xfsctck.exe
    O4 - HKCU\..\RunServices: [ycyapim] c:\windows\xfsctck.exe
    O4 - HKCU\..\RunServices: [xvvsyfd] c:\windows\xfsctck.exe
    O4 - HKCU\..\RunServices: [vihlwsk] c:\windows\xfsctck.exe
    O4 - HKCU\..\RunServices: [lmvqkod] c:\windows\xfsctck.exe
    O4 - HKCU\..\RunServices: [ewuqmts] c:\windows\xfsctck.exe
    O4 - HKCU\..\RunServices: [ekymojj] c:\windows\xfsctck.exe
    O4 - HKCU\..\RunServices: [yaecbpg] c:\windows\xfsctck.exe
    O4 - HKCU\..\RunServices: [ilbeynl] c:\windows\xfsctck.exe
    O4 - HKCU\..\RunServices: [fmmgnpi] c:\windows\xfsctck.exe
    O4 - HKCU\..\RunServices: [fxoytja] c:\windows\xfsctck.exe
    O4 - HKCU\..\RunServices: [btkarml] c:\windows\xfsctck.exe
    O4 - HKCU\..\RunServices: [wbgmstl] c:\windows\xfsctck.exe
    O4 - HKCU\..\RunServices: [ykascop] c:\windows\xfsctck.exe
    O4 - HKCU\..\RunServices: [uestrei] c:\windows\xfsctck.exe
    O4 - HKCU\..\RunServices: [kktwkwo] c:\windows\xfsctck.exe
    O4 - HKCU\..\RunServices: [ygageyx] c:\windows\xfsctck.exe
    O4 - HKCU\..\RunServices: [vtxcahr] c:\windows\xfsctck.exe
    O4 - HKCU\..\RunServices: [wkqgosf] c:\windows\xfsctck.exe
    O4 - HKCU\..\RunServices: [wubdvax] c:\windows\xfsctck.exe
    O4 - HKCU\..\RunServices: [vnvbfls] c:\windows\xfsctck.exe
    O4 - HKCU\..\RunServices: [xbcwuwf] c:\windows\xfsctck.exe
    O4 - HKCU\..\RunServices: [iqifddr] c:\windows\xfsctck.exe
    O4 - HKCU\..\RunServices: [bqpnbvd] c:\windows\xfsctck.exe
    O4 - HKCU\..\RunServices: [qxacccf] c:\windows\xfsctck.exe
    O4 - HKCU\..\RunServices: [ffkpbhy] c:\windows\xfsctck.exe
    O4 - HKCU\..\RunServices: [iflcrmx] c:\windows\xfsctck.exe
    O4 - HKCU\..\RunServices: [pnglpvv] c:\windows\xfsctck.exe
    O4 - HKCU\..\RunServices: [haejycc] c:\windows\xfsctck.exe
    O4 - HKCU\..\RunServices: [smkgjwo] c:\windows\xfsctck.exe
    O4 - HKCU\..\RunServices: [qbukitq] c:\windows\xfsctck.exe
    O4 - HKCU\..\RunServices: [hvtorei] c:\windows\xfsctck.exe
    O4 - HKCU\..\RunServices: [trylsgb] c:\windows\xfsctck.exe
    O4 - HKCU\..\RunServices: [tlaqqqe] c:\windows\xfsctck.exe
    O4 - HKCU\..\RunServices: [qkdkdvw] c:\windows\xfsctck.exe
    O4 - HKCU\..\RunServices: [euoymhi] c:\windows\xfsctck.exe
    O4 - HKCU\..\RunServices: [lhyojml] c:\windows\xfsctck.exe
    O4 - HKCU\..\RunServices: [cugujxg] c:\windows\xfsctck.exe
    O4 - HKCU\..\RunServices: [puvihku] c:\windows\xfsctck.exe
    O4 - HKCU\..\RunServices: [ygqvhfq] c:\windows\xfsctck.exe
    O4 - HKCU\..\RunServices: [ntpcbrq] c:\windows\tbdvfin.exe
    O4 - HKCU\..\RunServices: [tscbjuv] c:\windows\tbdvfin.exe
    O4 - HKCU\..\RunServices: [jifjnkk] c:\windows\vaffywp.exe
    O4 - HKCU\..\RunServices: [isnptnb] c:\windows\vaffywp.exe
    O4 - HKCU\..\RunServices: [pamryig] c:\windows\vaffywp.exe
    O4 - HKCU\..\RunServices: [tliijag] c:\windows\vaffywp.exe
    O4 - HKCU\..\RunServices: [ciarcwd] c:\windows\vaffywp.exe
    O4 - HKCU\..\RunServices: [plehpsc] c:\windows\vaffywp.exe
    O4 - HKCU\..\RunServices: [arqohds] c:\windows\vaffywp.exe
    O4 - HKCU\..\RunServices: [ymildvn] c:\windows\vaffywp.exe
    O4 - HKCU\..\RunServices: [gdmwike] c:\windows\vaffywp.exe
    O4 - HKCU\..\RunServices: [oeimswf] c:\windows\vaffywp.exe
    O4 - HKCU\..\RunServices: [ibfwvca] c:\windows\vaffywp.exe
    O4 - HKCU\..\RunServices: [uxwtxbx] c:\windows\srskdgw.exe
    O4 - HKCU\..\RunServices: [bxokpuv] c:\windows\srskdgw.exe
    O4 - HKCU\..\RunServices: [uktbcms] c:\windows\srskdgw.exe
    O4 - HKCU\..\RunServices: [rjotcxc] c:\windows\srskdgw.exe
    O4 - HKCU\..\RunServices: [qkhnyme] c:\windows\srskdgw.exe
    O4 - HKCU\..\RunServices: [yhbjrds] c:\windows\srskdgw.exe
    O4 - HKCU\..\RunServices: [fjkphem] c:\windows\srskdgw.exe
    O4 - HKCU\..\RunServices: [qtkrxij] c:\windows\srskdgw.exe
    O4 - HKCU\..\RunServices: [etfqsle] c:\windows\srskdgw.exe
    O4 - HKCU\..\RunServices: [oakjmjf] c:\windows\srskdgw.exe
    O4 - HKCU\..\RunServices: [ecrrwpm] c:\windows\srskdgw.exe
    O4 - HKCU\..\RunServices: [jqgatyj] c:\windows\srskdgw.exe
    O4 - HKCU\..\RunServices: [dkmuhvh] c:\windows\srskdgw.exe
    O4 - HKCU\..\RunServices: [illcnln] c:\windows\srskdgw.exe
    O4 - HKCU\..\RunServices: [qyofluc] c:\windows\srskdgw.exe
    O4 - HKCU\..\RunServices: [hubomdo] c:\windows\srskdgw.exe
    O4 - HKCU\..\RunServices: [icininn] c:\windows\srskdgw.exe
    O4 - HKCU\..\RunServices: [kiqiare] c:\windows\srskdgw.exe
    O4 - HKCU\..\RunServices: [gwemfpt] c:\windows\srskdgw.exe
    O4 - HKCU\..\RunServices: [lbplbmn] c:\windows\srskdgw.exe
    O4 - HKCU\..\RunServices: [nmvqjxc] c:\windows\srskdgw.exe
    O4 - HKCU\..\RunServices: [njlhshf] c:\windows\srskdgw.exe
    O4 - HKCU\..\RunServices: [ygercgi] c:\windows\srskdgw.exe
    O4 - HKCU\..\RunServices: [mdafodb] c:\windows\srskdgw.exe
    O4 - HKCU\..\RunServices: [mwjdouu] c:\windows\srskdgw.exe
    O4 - HKCU\..\RunServices: [yawobay] c:\windows\srskdgw.exe
    O4 - HKCU\..\RunServices: [fhdwtgn] c:\windows\srskdgw.exe
    O4 - HKCU\..\RunServices: [qhaxbby] c:\windows\srskdgw.exe
    O4 - HKCU\..\RunServices: [ubxqryo] c:\windows\srskdgw.exe
    O4 - HKCU\..\RunServices: [mayoraf] c:\windows\srskdgw.exe
    O4 - HKCU\..\RunServices: [safgjvh] c:\windows\srskdgw.exe
    O4 - HKCU\..\RunServices: [lcqmnxd] c:\windows\srskdgw.exe
    O4 - HKCU\..\RunServices: [uptlaxu] c:\windows\srskdgw.exe
    O4 - HKCU\..\RunServices: [igxmvjr] c:\windows\srskdgw.exe
    O4 - HKCU\..\RunServices: [ntgfnxi] c:\windows\srskdgw.exe
    O4 - HKCU\..\RunServices: [wwktvti] c:\windows\srskdgw.exe
    O4 - HKCU\..\RunServices: [ryptjnu] c:\windows\srskdgw.exe
    O4 - HKCU\..\RunServices: [ykypayq] c:\windows\srskdgw.exe
    O4 - HKCU\..\RunServices: [wxntkol] c:\windows\srskdgw.exe
    O4 - HKCU\..\RunServices: [itvtqoj] c:\windows\srskdgw.exe
    O4 - HKCU\..\RunServices: [gafwxui] c:\windows\srskdgw.exe
    O4 - HKCU\..\RunServices: [folnbyd] c:\windows\srskdgw.exe
    O4 - HKCU\..\RunServices: [eryontd] c:\windows\srskdgw.exe
    O4 - HKCU\..\RunServices: [hcdvidq] c:\windows\srskdgw.exe
    O4 - HKCU\..\RunServices: [yqwigkw] c:\windows\srskdgw.exe
    O4 - HKCU\..\RunServices: [eykevnm] c:\windows\srskdgw.exe
    O4 - HKCU\..\RunServices: [uqscqev] c:\windows\srskdgw.exe
    O4 - HKCU\..\RunServices: [obcxaoo] c:\windows\srskdgw.exe
    O4 - HKCU\..\RunServices: [snsddnh] c:\windows\srskdgw.exe
    O4 - HKCU\..\RunServices: [aqdfrsv] c:\windows\srskdgw.exe
    O4 - HKCU\..\RunServices: [jmnwxqn] c:\windows\srskdgw.exe
    O4 - HKCU\..\RunServices: [ascqicb] c:\windows\srskdgw.exe
    O4 - HKCU\..\RunServices: [duewrmx] c:\windows\srskdgw.exe
    O4 - HKCU\..\RunServices: [beiaryl] c:\windows\srskdgw.exe
    O4 - HKCU\..\RunServices: [gtevpda] c:\windows\srskdgw.exe
    O4 - HKCU\..\RunServices: [qkgoptu] c:\windows\srskdgw.exe
    O4 - HKCU\..\RunServices: [aumeckl] c:\windows\srskdgw.exe
    O4 - HKCU\..\RunServices: [qhtdesf] c:\windows\srskdgw.exe
    O4 - HKCU\..\RunServices: [vlwbccm] c:\windows\srskdgw.exe
    O4 - HKCU\..\RunServices: [lmuhpca] c:\windows\srskdgw.exe
    O4 - HKCU\..\RunServices: [rsblsxa] c:\windows\srskdgw.exe
    O4 - HKCU\..\RunServices: [esrcilb] c:\windows\srskdgw.exe
    O4 - HKCU\..\RunServices: [iuxlwmy] c:\windows\srskdgw.exe
    O4 - HKCU\..\RunServices: [ibttkrm] c:\windows\srskdgw.exe
    O4 - HKCU\..\RunServices: [tfykywt] c:\windows\srskdgw.exe
    O4 - HKCU\..\RunServices: [vqdyiwi] c:\windows\srskdgw.exe
    O4 - HKCU\..\RunServices: [rwuqmhq] c:\windows\srskdgw.exe
    O4 - HKCU\..\RunServices: [bqfjqai] c:\windows\srskdgw.exe
    O4 - HKCU\..\RunServices: [bdkedch] c:\windows\srskdgw.exe
    O4 - HKCU\..\RunServices: [tpnjcel] c:\windows\srskdgw.exe
    O4 - HKCU\..\RunServices: [ohwgiei] c:\windows\srskdgw.exe
    O4 - HKCU\..\RunServices: [iwqfecf] c:\windows\srskdgw.exe
    O4 - HKCU\..\RunServices: [ohammtb] c:\windows\srskdgw.exe
    O4 - HKCU\..\RunServices: [vyyojdb] c:\windows\srskdgw.exe
    O4 - HKCU\..\RunServices: [iyucsfb] c:\windows\srskdgw.exe
    O4 - HKCU\..\RunServices: [lgsdbdx] c:\windows\srskdgw.exe
    O4 - HKCU\..\RunServices: [kdjsenw] c:\windows\srskdgw.exe
    O4 - HKCU\..\RunServices: [rwvvpgr] c:\windows\srskdgw.exe
    O4 - HKCU\..\RunServices: [wrtiurf] c:\windows\srskdgw.exe
    O4 - HKCU\..\RunServices: [poieohu] c:\windows\srskdgw.exe
    O4 - HKCU\..\RunServices: [uhokbwh] c:\windows\srskdgw.exe
    O4 - HKCU\..\RunServices: [osdrwgb] c:\windows\srskdgw.exe
    O4 - HKCU\..\RunServices: [rwdrnng] c:\windows\srskdgw.exe
    O4 - HKCU\..\RunServices: [lyjkdhd] c:\windows\srskdgw.exe
    O4 - HKCU\..\RunServices: [xjjauyy] c:\windows\srskdgw.exe
    O4 - HKCU\..\RunServices: [kyttxto] c:\windows\srskdgw.exe
    O4 - HKCU\..\RunServices: [xgnhppw] c:\windows\yyrkasm.exe
    O4 - HKCU\..\RunServices: [cljhgpv] c:\windows\yyrkasm.exe
    O4 - HKCU\..\RunServices: [velojrw] c:\windows\yyrkasm.exe
    O4 - HKCU\..\RunServices: [pkcmojs] c:\windows\yyrkasm.exe
    O4 - HKCU\..\RunServices: [rkvgjdk] c:\windows\yyrkasm.exe
    O4 - HKCU\..\RunServices: [gboghdq] c:\windows\yyrkasm.exe
    O4 - HKCU\..\RunServices: [tmwmyfv] c:\windows\yyrkasm.exe
    O4 - HKCU\..\RunServices: [hkcixsi] c:\windows\yyrkasm.exe
    O4 - HKCU\..\RunServices: [sjfjmac] c:\windows\yyrkasm.exe
    O4 - HKCU\..\RunServices: [cukpyka] c:\windows\yyrkasm.exe
    O4 - HKCU\..\RunServices: [lrxxiax] c:\windows\yyrkasm.exe
    O4 - HKCU\..\RunServices: [lxkscen] c:\windows\yyrkasm.exe
    O4 - HKCU\..\RunServices: [pfdogkv] c:\windows\yyrkasm.exe
    O4 - HKCU\..\RunServices: [cewhxei] c:\windows\yyrkasm.exe
    O4 - HKCU\..\RunServices: [jnxupmi] c:\windows\yyrkasm.exe
    O4 - HKCU\..\RunServices: [eloclrr] c:\windows\yyrkasm.exe
    O4 - HKCU\..\RunServices: [klhhrnt] c:\windows\yyrkasm.exe
    O4 - HKCU\..\RunServices: [cewvqjv] c:\windows\yyrkasm.exe
    O4 - HKCU\..\RunServices: [qibagtd] c:\windows\yyrkasm.exe
    O4 - HKCU\..\RunServices: [vpbejrm] c:\windows\yyrkasm.exe
    O4 - HKCU\..\RunServices: [jbjbmou] c:\windows\ogioigl.exe
    O4 - HKCU\..\RunServices: [pboajxq] c:\windows\ogioigl.exe
    O4 - HKCU\..\RunServices: [asecfia] c:\windows\ogioigl.exe
    O4 - HKCU\..\RunServices: [dmdthid] c:\windows\ogioigl.exe
    O4 - HKCU\..\RunServices: [mtbmidf] c:\windows\ogioigl.exe
    O4 - HKCU\..\RunServices: [wjkympq] c:\windows\ogioigl.exe
    O4 - HKCU\..\RunServices: [totqqtp] c:\windows\ogioigl.exe
    O4 - HKCU\..\RunServices: [yimmara] c:\windows\ogioigl.exe
    O4 - HKCU\..\RunServices: [lfjnnkv] c:\windows\ogioigl.exe
    O4 - HKCU\..\RunServices: [sivikxv] c:\windows\ogioigl.exe
    O4 - HKCU\..\RunServices: [kokpgpi] c:\windows\ogioigl.exe
    O4 - HKCU\..\RunServices: [cpsfuqt] c:\windows\ogioigl.exe
    O4 - HKCU\..\RunServices: [wgvecbd] c:\windows\ogioigl.exe
    O4 - HKCU\..\RunServices: [cxnwgtb] c:\windows\ogioigl.exe
    O4 - HKCU\..\RunServices: [ifsptjn] c:\windows\ogioigl.exe
    O4 - HKCU\..\RunServices: [lhhkwbx] c:\windows\ogioigl.exe
    O4 - HKCU\..\RunServices: [rotmnky] c:\windows\ogioigl.exe
    O4 - HKCU\..\RunServices: [cyhwmgh] c:\windows\ogioigl.exe
    O4 - HKCU\..\RunServices: [hpmluqr] c:\windows\ogioigl.exe
    O4 - HKCU\..\RunServices: [vsopuyh] c:\windows\ogioigl.exe
    O4 - HKCU\..\RunServices: [dhrumfa] c:\windows\ogioigl.exe
    O4 - HKCU\..\RunServices: [bgsgckc] c:\windows\ogioigl.exe
    O4 - HKCU\..\RunServices: [ebwgpsv] c:\windows\ogioigl.exe
    O4 - HKCU\..\RunServices: [nimqoco] c:\windows\ogioigl.exe
    O4 - HKCU\..\RunServices: [qqvwvei] c:\windows\ogioigl.exe
    O4 - HKCU\..\RunServices: [hvqshxe] c:\windows\ogioigl.exe
    O4 - HKCU\..\RunServices: [fwbsghe] c:\windows\ogioigl.exe
    O4 - HKCU\..\RunServices: [mjvukqt] c:\windows\ogioigl.exe
    O4 - HKCU\..\RunServices: [uuoeswq] c:\windows\ogioigl.exe
    O4 - HKCU\..\RunServices: [hymfmqp] c:\windows\ogioigl.exe
    O4 - HKCU\..\RunServices: [selghcd] c:\windows\ogioigl.exe
    O4 - HKCU\..\RunServices: [cmsctyk] c:\windows\ogioigl.exe
    O4 - HKCU\..\RunServices: [kiuvgfw] c:\windows\ogioigl.exe
    O4 - HKCU\..\RunServices: [jsptmpj] c:\windows\ogioigl.exe
    O4 - HKCU\..\RunServices: [bfifvqd] c:\windows\ogioigl.exe
    O4 - HKCU\..\RunServices: [dobfifh] c:\windows\ogioigl.exe
    O4 - HKCU\..\RunServices: [dgyassd] c:\windows\suqdqfu.exe
    O4 - HKCU\..\RunServices: [strbbjc] c:\windows\suqdqfu.exe
    O4 - HKCU\..\RunServices: [newpgga] c:\windows\suqdqfu.exe
    O4 - HKCU\..\RunServices: [yrkyewr] c:\windows\igphfei.exe
    O4 - HKCU\..\RunServices: [sfbcayx] c:\windows\igphfei.exe
    O4 - HKCU\..\RunServices: [joiutxw] c:\windows\igphfei.exe
    O4 - HKCU\..\RunServices: [lhsubfh] c:\windows\igphfei.exe
    O4 - HKCU\..\RunServices: [arnfdrd] c:\windows\rfwcndr.exe
    O4 - HKCU\..\RunServices: [vuiiksd] c:\windows\rfwcndr.exe
    O4 - HKCU\..\RunServices: [pclfrkg] c:\windows\rfwcndr.exe
    O4 - HKCU\..\RunServices: [hcxcoik] c:\windows\rfwcndr.exe
    O4 - HKCU\..\RunServices: [ykwojnh] c:\windows\rfwcndr.exe
    O4 - HKCU\..\RunServices: [psuhtat] c:\windows\rfwcndr.exe
    O4 - HKCU\..\RunServices: [wlcjjql] c:\windows\rfwcndr.exe
    O4 - HKCU\..\RunServices: [dnemjjc] c:\windows\rfwcndr.exe
    O4 - HKCU\..\RunServices: [wocrixx] c:\windows\rfwcndr.exe
    O4 - HKCU\..\RunServices: [nwuysin] c:\windows\rfwcndr.exe
    O4 - HKCU\..\RunServices: [owcmpvb] c:\windows\rfwcndr.exe
    O4 - HKCU\..\RunServices: [cfltend] c:\windows\rfwcndr.exe
    O4 - HKCU\..\RunServices: [ntytgon] c:\windows\rfwcndr.exe
    O4 - HKCU\..\RunServices: [bxhauap] c:\windows\rfwcndr.exe
    O4 - HKCU\..\RunServices: [ptoeheq] c:\windows\rfwcndr.exe
    O4 - HKCU\..\RunServices: [cvgnqve] c:\windows\rfwcndr.exe
    O4 - HKCU\..\RunServices: [aqmpwxt] c:\windows\rfwcndr.exe
    O4 - HKCU\..\RunServices: [yoawnrl] c:\windows\rfwcndr.exe
    O4 - HKCU\..\RunServices: [taomxtk] c:\windows\rfwcndr.exe
    O4 - HKCU\..\RunServices: [tmhohce] c:\windows\rfwcndr.exe
    O4 - HKCU\..\RunServices: [abqebng] c:\windows\rfwcndr.exe
    O4 - HKCU\..\RunServices: [yxtoylo] c:\windows\rfwcndr.exe
    O4 - HKCU\..\RunServices: [hmfojwy] c:\windows\rfwcndr.exe
    O4 - HKCU\..\RunServices: [trskvdb] c:\windows\rfwcndr.exe
    O4 - HKCU\..\RunServices: [gekixdo] c:\windows\rfwcndr.exe
    O4 - HKCU\..\RunServices: [dtdgbyq] c:\windows\rfwcndr.exe
    O4 - HKCU\..\RunServices: [cvpddak] c:\windows\rfwcndr.exe
    O4 - HKCU\..\RunServices: [iqdgqyv] c:\windows\rfwcndr.exe
    O4 - HKCU\..\RunServices: [dwrmpui] c:\windows\rfwcndr.exe
    O4 - HKCU\..\RunServices: [enlwdqg] c:\windows\rfwcndr.exe
    O4 - HKCU\..\RunServices: [lbrlsbe] c:\windows\rfwcndr.exe
    O4 - HKCU\..\RunServices: [pjelbcn] c:\windows\rfwcndr.exe
    O4 - HKCU\..\RunServices: [ttfjnfu] c:\windows\rfwcndr.exe
    O4 - HKCU\..\RunServices: [bpvdiya] c:\windows\rfwcndr.exe
    O4 - HKCU\..\RunServices: [fkfwity] c:\windows\rfwcndr.exe
    O4 - HKCU\..\RunServices: [fxsfbma] c:\windows\rfwcndr.exe
    O4 - HKCU\..\RunServices: [xjmovte] c:\windows\rfwcndr.exe
    O4 - HKCU\..\RunServices: [koytapk] c:\windows\rfwcndr.exe
    O4 - HKCU\..\RunServices: [itroynu] c:\windows\rfwcndr.exe
    O4 - HKCU\..\RunServices: [ppvlmxb] c:\windows\rfwcndr.exe
    O4 - HKCU\..\RunServices: [yjvlxuf] c:\windows\rfwcndr.exe
    O4 - HKCU\..\RunServices: [vfepdnr] c:\windows\rfwcndr.exe
    O4 - HKCU\..\RunServices: [lrkbeyv] c:\windows\rfwcndr.exe
    O4 - HKCU\..\RunServices: [ldpeqff] c:\windows\rfwcndr.exe
    O4 - HKCU\..\RunServices: [rtdprvm] c:\windows\rfwcndr.exe
    O4 - HKCU\..\RunServices: [mxhbwhw] c:\windows\rfwcndr.exe
    O4 - HKCU\..\RunServices: [morkwjs] c:\windows\htgtonw.exe
    O4 - HKCU\..\RunServices: [apsxouu] c:\windows\htgtonw.exe
    O4 - HKCU\..\RunServices: [whiwnyu] c:\windows\htgtonw.exe
    O4 - HKCU\..\RunServices: [pjrgskw] c:\windows\htgtonw.exe
    O4 - HKCU\..\RunServices: [abhjtfe] c:\windows\htgtonw.exe
    O4 - HKCU\..\RunServices: [csrrgrq] c:\windows\htgtonw.exe
    O4 - HKCU\..\RunServices: [fkjnywq] c:\windows\htgtonw.exe
    O4 - HKCU\..\RunServices: [wqhitwp] c:\windows\htgtonw.exe
    O4 - HKCU\..\RunServices: [qncpjjx] c:\windows\htgtonw.exe
    O4 - HKCU\..\RunServices: [wihxrbo] c:\windows\fhlffmm.exe
    O4 - HKCU\..\RunServices: [tmigmfs] c:\windows\bwfbmsd.exe
    O4 - HKCU\..\RunServices: [xoolhyu] c:\windows\bwfbmsd.exe
    O4 - HKCU\..\RunServices: [ffqgomx] c:\windows\bwfbmsd.exe
    O4 - HKCU\..\RunServices: [iqfusqn] c:\windows\bwfbmsd.exe
    O4 - HKCU\..\RunServices: [onndkgg] c:\windows\bwfbmsd.exe
    O4 - HKCU\..\RunServices: [jhxmehd] c:\windows\bwfbmsd.exe
    O4 - HKCU\..\RunServices: [xvcxrcx] c:\windows\bwfbmsd.exe
    O4 - HKCU\..\RunServices: [xsqcrle] c:\windows\bwfbmsd.exe
    O4 - HKCU\..\RunServices: [udlgpvd] c:\windows\bwfbmsd.exe
    O4 - HKCU\..\RunServices: [vyohiku] c:\windows\bwfbmsd.exe
    O4 - HKCU\..\RunServices: [bxcxsrr] c:\windows\bwfbmsd.exe
    O4 - HKCU\..\RunServices: [tfpkosh] c:\windows\bwfbmsd.exe
    O4 - HKCU\..\RunServices: [prnukhn] c:\windows\bwfbmsd.exe
    O4 - HKCU\..\RunServices: [cauddff] c:\windows\bwfbmsd.exe
    O4 - HKCU\..\RunServices: [sqwdsmq] c:\windows\bwfbmsd.exe
    O4 - HKCU\..\RunServices: [torspfb] c:\windows\bwfbmsd.exe
    O4 - HKCU\..\RunServices: [ootxafk] c:\windows\bwfbmsd.exe
    O4 - HKCU\..\RunServices: [nmrglyp] c:\windows\bwfbmsd.exe
    O4 - HKCU\..\RunServices: [qdqrant] c:\windows\bwfbmsd.exe
    O4 - HKCU\..\RunServices: [ykumovr] c:\windows\bwfbmsd.exe
    O4 - HKCU\..\RunServices: [ppevkht] c:\windows\bwfbmsd.exe
    O4 - HKCU\..\RunServices: [juewobr] c:\windows\bwfbmsd.exe
    O4 - HKCU\..\RunServices: [surveau] c:\windows\bwfbmsd.exe
    O4 - HKCU\..\RunServices: [nyqxmof] c:\windows\bwfbmsd.exe
    O4 - HKCU\..\RunServices: [vdhghwf] c:\windows\bwfbmsd.exe
    O4 - HKCU\..\RunServices: [jnqrcox] c:\windows\bwfbmsd.exe
    O4 - HKCU\..\RunServices: [aiykbkt] c:\windows\bwfbmsd.exe
    O4 - HKCU\..\RunServices: [ubaatvk] c:\windows\bwfbmsd.exe
    O4 - HKCU\..\RunServices: [ognhcwj] c:\windows\bwfbmsd.exe
    O4 - HKCU\..\RunServices: [uaopxbb] c:\windows\bwfbmsd.exe
    O4 - HKCU\..\RunServices: [vdstqun] c:\windows\bwfbmsd.exe
    O4 - HKCU\..\RunServices: [ckitbnu] c:\windows\bwfbmsd.exe
    O4 - HKCU\..\RunServices: [jwqvuch] c:\windows\bwfbmsd.exe
    O4 - HKCU\..\RunServices: [mbligfl] c:\windows\bwfbmsd.exe
    O4 - HKCU\..\RunServices: [qerbaua] c:\windows\bwfbmsd.exe
    O4 - HKCU\..\RunServices: [suephip] c:\windows\bwfbmsd.exe
    O4 - HKCU\..\RunServices: [rgducea] c:\windows\bwfbmsd.exe
    O4 - HKCU\..\RunServices: [spvjips] c:\windows\bwfbmsd.exe
    O4 - HKCU\..\RunServices: [upmnfau] c:\windows\bwfbmsd.exe
    O4 - HKCU\..\RunServices: [uikgjsn] c:\windows\bwfbmsd.exe
    O4 - HKCU\..\RunServices: [douyygu] c:\windows\bwfbmsd.exe
    O4 - HKCU\..\RunServices: [bligqgy] c:\windows\bwfbmsd.exe
    O4 - HKCU\..\RunServices: [smjpiyo] c:\windows\bwfbmsd.exe
    O4 - HKCU\..\RunServices: [ljaajnx] c:\windows\bwfbmsd.exe
    O4 - HKCU\..\RunServices: [fwcpapt] c:\windows\bwfbmsd.exe
    O4 - HKCU\..\RunServices: [lwerojh] c:\windows\bwfbmsd.exe
    O4 - HKCU\..\RunServices: [ulibirk] c:\windows\bwfbmsd.exe
    O4 - HKCU\..\RunServices: [jdgblnn] c:\windows\bwfbmsd.exe
    O4 - HKCU\..\RunServices: [hpljakd] c:\windows\bwfbmsd.exe
    O4 - HKCU\..\RunServices: [bntuocf] c:\windows\bwfbmsd.exe
    O4 - HKCU\..\RunServices: [eirfyhj] c:\windows\bwfbmsd.exe
    O4 - HKCU\..\RunServices: [dkcmnjp] c:\windows\bwfbmsd.exe
    O4 - HKCU\..\RunServices: [ohxnegu] c:\windows\bwfbmsd.exe
    O4 - HKCU\..\RunServices: [esxjydf] c:\windows\bwfbmsd.exe
    O4 - HKCU\..\RunServices: [tbpeuvu] c:\windows\bwfbmsd.exe
    O4 - HKCU\..\RunServices: [wexsnbo] c:\windows\bwfbmsd.exe
    O4 - HKCU\..\RunServices: [beoiyav] c:\windows\bwfbmsd.exe
    O4 - HKCU\..\RunServices: [hnntaly] c:\windows\bwfbmsd.exe
    O4 - HKCU\..\RunServices: [jyiydyy] c:\windows\bwfbmsd.exe
    O4 - HKCU\..\RunServices: [ilrkgpi] c:\windows\bwfbmsd.exe
    O4 - HKCU\..\RunServices: [lvamjog] c:\windows\kribvlh.exe
    O4 - HKCU\..\RunServices: [cunqjce] c:\windows\kribvlh.exe
    O4 - HKCU\..\RunServices: [jlfnjcu] c:\windows\kribvlh.exe
    O4 - HKCU\..\RunServices: [nkmoqgt] c:\windows\kribvlh.exe
    O4 - HKCU\..\RunServices: [woagqwm] c:\windows\kribvlh.exe
    O4 - HKCU\..\RunServices: [mpvmcvc] c:\windows\kribvlh.exe
    O4 - HKCU\..\RunServices: [uqdumqf] c:\windows\kribvlh.exe
    O4 - HKCU\..\RunServices: [nsjahxs] c:\windows\kribvlh.exe
    O4 - HKCU\..\RunServices: [nygqrvb] c:\windows\kribvlh.exe
    O4 - HKCU\..\RunServices: [fwlbjmu] c:\windows\kribvlh.exe
    O4 - HKCU\..\RunServices: [rjdcvgl] c:\windows\kribvlh.exe
    O4 - HKCU\..\RunServices: [asqbodh] c:\windows\kribvlh.exe
    O4 - HKCU\..\RunServices: [bhfnupl] c:\windows\kribvlh.exe
    O4 - HKCU\..\RunServices: [oovsylb] c:\windows\kribvlh.exe
    O4 - HKCU\..\RunServices: [khunyty] c:\windows\kribvlh.exe
    O4 - HKCU\..\RunServices: [nqdcbij] c:\windows\kribvlh.exe
    O4 - HKCU\..\RunServices: [mybqxfw] c:\windows\kribvlh.exe
    O4 - HKCU\..\RunServices: [hvwqmbx] c:\windows\kribvlh.exe
    O4 - HKCU\..\RunServices: [bqyguor] c:\windows\kribvlh.exe
    O4 - HKCU\..\RunServices: [sqwcdeq] c:\windows\kribvlh.exe
    O4 - HKCU\..\RunServices: [vcqycut] c:\windows\kribvlh.exe
    O4 - HKCU\..\RunServices: [cjqisas] c:\windows\kribvlh.exe
    O4 - HKCU\..\RunServices: [vdmdaox] c:\windows\kribvlh.exe
    O4 - HKCU\..\RunServices: [wxilwoo] c:\windows\kribvlh.exe
    O4 - HKCU\..\RunServices: [lmlsptx] c:\windows\kribvlh.exe
    O4 - HKCU\..\RunServices: [wnmoekb] c:\windows\kribvlh.exe
    O4 - HKCU\..\RunServices: [qjknhrh] c:\windows\kribvlh.exe
    O4 - HKCU\..\RunServices: [haakcdi] c:\windows\kribvlh.exe
    O4 - HKCU\..\RunServices: [luntubo] c:\windows\kribvlh.exe
    O4 - HKCU\..\RunServices: [nkyukyn] c:\windows\kribvlh.exe
    O4 - HKCU\..\RunServices: [gxuvduq] c:\windows\kribvlh.exe
    O4 - HKCU\..\RunServices: [tsqxcap] c:\windows\kribvlh.exe
    O4 - HKCU\..\RunServices: [ewknjca] c:\windows\kribvlh.exe
    O4 - HKCU\..\RunServices: [wepfrgy] c:\windows\kribvlh.exe
    O4 - HKCU\..\RunServices: [uqqjydc] c:\windows\kribvlh.exe
    O4 - HKCU\..\RunServices: [anxitks] c:\windows\kribvlh.exe
    O4 - HKCU\..\RunServices: [pucoqgu] c:\windows\kribvlh.exe
    O4 - HKCU\..\RunServices: [qeexeuf] c:\windows\kribvlh.exe
    O4 - HKCU\..\RunServices: [nsuvtfv] c:\windows\kribvlh.exe
    O4 - HKCU\..\RunServices: [eusalpm] c:\windows\kribvlh.exe
    O4 - HKCU\..\RunServices: [ucufhwn] c:\windows\kribvlh.exe
    O4 - HKCU\..\RunServices: [kfeemja] c:\windows\kribvlh.exe
    O4 - HKCU\..\RunServices: [tucgihe] c:\windows\kribvlh.exe
    O4 - HKCU\..\RunServices: [curyybd] c:\windows\kribvlh.exe
    O4 - HKCU\..\RunServices: [myhllpx] c:\windows\kribvlh.exe
    O4 - HKCU\..\RunServices: [lqgqdca] c:\windows\kribvlh.exe
    O4 - HKCU\..\RunServices: [tlyiyhj] c:\windows\kribvlh.exe
    O4 - HKCU\..\RunServices: [wxlvivg] c:\windows\kribvlh.exe
    O4 - HKCU\..\RunServices: [dnjjnio] c:\windows\kribvlh.exe
    O4 - HKCU\..\RunServices: [vothxpt] c:\windows\kribvlh.exe
    O4 - HKCU\..\RunServices: [ubsmqfr] c:\windows\kribvlh.exe
    O4 - HKCU\..\RunServices: [kcldbor] c:\windows\kribvlh.exe
    O4 - HKCU\..\RunServices: [uvdyirc] c:\windows\kribvlh.exe
    O4 - HKCU\..\RunServices: [fcxcmkm] c:\windows\kribvlh.exe
    O4 - HKCU\..\RunServices: [ygejrhf] c:\windows\kribvlh.exe
    O4 - HKCU\..\RunServices: [nfmefxb] c:\windows\fvpjlqm.exe
    O4 - HKCU\..\RunServices: [qfpktak] c:\windows\fvpjlqm.exe
    O4 - HKCU\..\RunServices: [ihblkni] c:\windows\fvpjlqm.exe
    O4 - HKCU\..\RunServices: [yjixhei] c:\windows\fvpjlqm.exe
    O4 - HKCU\..\RunServices: [tpyvcxa] c:\windows\fvpjlqm.exe
    O4 - HKCU\..\RunServices: [tgxjbpk] c:\windows\fvpjlqm.exe
    O4 - HKCU\..\RunServices: [uejekwj] c:\windows\fvpjlqm.exe
    O4 - HKCU\..\RunServices: [epywxjn] c:\windows\fvpjlqm.exe
    O4 - HKCU\..\RunServices: [ralscmk] c:\windows\fvpjlqm.exe
    O4 - HKCU\..\RunServices: [diyduin] c:\windows\fvpjlqm.exe
    O4 - HKCU\..\RunServices: [dmsnvrl] c:\windows\fvpjlqm.exe
    O4 - HKCU\..\RunServices: [kjcikdn] c:\windows\fvpjlqm.exe
    O4 - HKCU\..\RunServices: [llmgmnq] c:\windows\fvpjlqm.exe
    O4 - HKCU\..\RunServices: [nycqnou] c:\windows\fvpjlqm.exe
    O4 - HKCU\..\RunServices: [bubvpes] c:\windows\fvpjlqm.exe
    O4 - HKCU\..\RunServices: [kiinqbb] c:\windows\tmsrqfw.exe
    O4 - HKCU\..\RunServices: [okahjst] c:\windows\rkopuww.exe
    O4 - HKCU\..\RunServices: [yuupolx] c:\windows\ynvwsck.exe
    O4 - HKCU\..\RunServices: [wvborob] c:\windows\ynvwsck.exe
    O4 - HKCU\..\RunServices: [fcmqvbr] c:\windows\ynvwsck.exe
    O4 - HKCU\..\RunServices: [jkhtfkj] c:\windows\ynvwsck.exe
    O4 - HKCU\..\RunServices: [msvkbij] c:\windows\ynvwsck.exe
    O4 - HKCU\..\RunServices: [llvesjf] c:\windows\ynvwsck.exe
    O4 - HKCU\..\RunServices: [lerdaeu] c:\windows\uwoxeyv.exe
    O4 - HKCU\..\RunOnce: [Komunikator] C:\PROGRAM FILES\TLEN.PL\TLEN.EXE
    O4 - HKCU\..\RunOnce: [mwuaddm] c:\windows\xfsctck.exe
    O4 - HKCU\..\RunOnce: [tsedwto] c:\windows\xfsctck.exe
    O4 - HKCU\..\RunOnce: [pksmiuu] c:\windows\xfsctck.exe
    O4 - HKCU\..\RunOnce: [lkcbnqc] c:\windows\xfsctck.exe
    O4 - HKCU\..\RunOnce: [wiimbvt] c:\windows\xfsctck.exe
    O4 - HKCU\..\RunOnce: [ydaeajj] c:\windows\xfsctck.exe
    O4 - HKCU\..\RunOnce: [ghrlyea] c:\windows\xfsctck.exe
    O4 - HKCU\..\RunOnce: [wagwrad] c:\windows\xfsctck.exe
    O4 - HKCU\..\RunOnce: [tymaoux] c:\windows\xfsctck.exe
    O4 - HKCU\..\RunOnce: [ycyapim] c:\windows\xfsctck.exe
    O4 - HKCU\..\RunOnce: [xvvsyfd] c:\windows\xfsctck.exe
    O4 - HKCU\..\RunOnce: [vihlwsk] c:\windows\xfsctck.exe
    O4 - HKCU\..\RunOnce: [lmvqkod] c:\windows\xfsctck.exe
    O4 - HKCU\..\RunOnce: [ewuqmts] c:\windows\xfsctck.exe
    O4 - HKCU\..\RunOnce: [ekymojj] c:\windows\xfsctck.exe
    O4 - HKCU\..\RunOnce: [yaecbpg] c:\windows\xfsctck.exe
    O4 - HKCU\..\RunOnce: [ilbeynl] c:\windows\xfsctck.exe
    O4 - HKCU\..\RunOnce: [fmmgnpi] c:\windows\xfsctck.exe
    O4 - HKCU\..\RunOnce: [fxoytja] c:\windows\xfsctck.exe
    O4 - HKCU\..\RunOnce: [btkarml] c:\windows\xfsctck.exe
    O4 - HKCU\..\RunOnce: [wbgmstl] c:\windows\xfsctck.exe
    O4 - HKCU\..\RunOnce: [ykascop] c:\windows\xfsctck.exe
    O4 - HKCU\..\RunOnce: [uestrei] c:\windows\xfsctck.exe
    O4 - HKCU\..\RunOnce: [kktwkwo] c:\windows\xfsctck.exe
    O4 - HKCU\..\RunOnce: [ygageyx] c:\windows\xfsctck.exe
    O4 - HKCU\..\RunOnce: [vtxcahr] c:\windows\xfsctck.exe
    O4 - HKCU\..\RunOnce: [wkqgosf] c:\windows\xfsctck.exe
    O4 - HKCU\..\RunOnce: [wubdvax] c:\windows\xfsctck.exe
    O4 - HKCU\..\RunOnce: [vnvbfls] c:\windows\xfsctck.exe
    O4 - HKCU\..\RunOnce: [xbcwuwf] c:\windows\xfsctck.exe
    O4 - HKCU\..\RunOnce: [iqifddr] c:\windows\xfsctck.exe
    O4 - HKCU\..\RunOnce: [bqpnbvd] c:\windows\xfsctck.exe
    O4 - HKCU\..\RunOnce: [qxacccf] c:\windows\xfsctck.exe
    O4 - HKCU\..\RunOnce: [ffkpbhy] c:\windows\xfsctck.exe
    O4 - HKCU\..\RunOnce: [iflcrmx] c:\windows\xfsctck.exe
    O4 - HKCU\..\RunOnce: [pnglpvv] c:\windows\xfsctck.exe
    O4 - HKCU\..\RunOnce: [haejycc] c:\windows\xfsctck.exe
    O4 - HKCU\..\RunOnce: [smkgjwo] c:\windows\xfsctck.exe
    O4 - HKCU\..\RunOnce: [qbukitq] c:\windows\xfsctck.exe
    O4 - HKCU\..\RunOnce: [hvtorei] c:\windows\xfsctck.exe
    O4 - HKCU\..\RunOnce: [trylsgb] c:\windows\xfsctck.exe
    O4 - HKCU\..\RunOnce: [tlaqqqe] c:\windows\xfsctck.exe
    O4 - HKCU\..\RunOnce: [qkdkdvw] c:\windows\xfsctck.exe
    O4 - HKCU\..\RunOnce: [euoymhi] c:\windows\xfsctck.exe
    O4 - HKCU\..\RunOnce: [lhyojml] c:\windows\xfsctck.exe
    O4 - HKCU\..\RunOnce: [cugujxg] c:\windows\xfsctck.exe
    O4 - HKCU\..\RunOnce: [puvihku] c:\windows\xfsctck.exe
    O4 - HKCU\..\RunOnce: [ygqvhfq] c:\windows\xfsctck.exe
    O4 - HKCU\..\RunOnce: [ntpcbrq] c:\windows\tbdvfin.exe
    O4 - HKCU\..\RunOnce: [tscbjuv] c:\windows\tbdvfin.exe
    O4 - HKCU\..\RunOnce: [jifjnkk] c:\windows\vaffywp.exe
    O4 - HKCU\..\RunOnce: [isnptnb] c:\windows\vaffywp.exe
    O4 - HKCU\..\RunOnce: [pamryig] c:\windows\vaffywp.exe
    O4 - HKCU\..\RunOnce: [tliijag] c:\windows\vaffywp.exe
    O4 - HKCU\..\RunOnce: [ciarcwd] c:\windows\vaffywp.exe
    O4 - HKCU\..\RunOnce: [plehpsc] c:\windows\vaffywp.exe
    O4 - HKCU\..\RunOnce: [arqohds] c:\windows\vaffywp.exe
    O4 - HKCU\..\RunOnce: [ymildvn] c:\windows\vaffywp.exe
    O4 - HKCU\..\RunOnce: [gdmwike] c:\windows\vaffywp.exe
    O4 - HKCU\..\RunOnce: [oeimswf] c:\windows\vaffywp.exe
    O4 - HKCU\..\RunOnce: [ibfwvca] c:\windows\vaffywp.exe
    O4 - HKCU\..\RunOnce: [uxwtxbx] c:\windows\srskdgw.exe
    O4 - HKCU\..\RunOnce: [bxokpuv] c:\windows\srskdgw.exe
    O4 - HKCU\..\RunOnce: [uktbcms] c:\windows\srskdgw.exe
    O4 - HKCU\..\RunOnce: [rjotcxc] c:\windows\srskdgw.exe
    O4 - HKCU\..\RunOnce: [qkhnyme] c:\windows\srskdgw.exe
    O4 - HKCU\..\RunOnce: [yhbjrds] c:\windows\srskdgw.exe
    O4 - HKCU\..\RunOnce: [fjkphem] c:\windows\srskdgw.exe
    O4 - HKCU\..\RunOnce: [qtkrxij] c:\windows\srskdgw.exe
    O4 - HKCU\..\RunOnce: [etfqsle] c:\windows\srskdgw.exe
    O4 - HKCU\..\RunOnce: [oakjmjf] c:\windows\srskdgw.exe
    O4 - HKCU\..\RunOnce: [ecrrwpm] c:\windows\srskdgw.exe
    O4 - HKCU\..\RunOnce: [jqgatyj] c:\windows\srskdgw.exe
    O4 - HKCU\..\RunOnce: [dkmuhvh] c:\windows\srskdgw.exe
    O4 - HKCU\..\RunOnce: [illcnln] c:\windows\srskdgw.exe
    O4 - HKCU\..\RunOnce: [qyofluc] c:\windows\srskdgw.exe
    O4 - HKCU\..\RunOnce: [hubomdo] c:\windows\srskdgw.exe
    O4 - HKCU\..\RunOnce: [icininn] c:\windows\srskdgw.exe
    O4 - HKCU\..\RunOnce: [kiqiare] c:\windows\srskdgw.exe
    O4 - HKCU\..\RunOnce: [gwemfpt] c:\windows\srskdgw.exe
    O4 - HKCU\..\RunOnce: [lbplbmn] c:\windows\srskdgw.exe
    O4 - HKCU\..\RunOnce: [nmvqjxc] c:\windows\srskdgw.exe
    O4 - HKCU\..\RunOnce: [njlhshf] c:\windows\srskdgw.exe
    O4 - HKCU\..\RunOnce: [ygercgi] c:\windows\srskdgw.exe
    O4 - HKCU\..\RunOnce: [mdafodb] c:\windows\srskdgw.exe
    O4 - HKCU\..\RunOnce: [mwjdouu] c:\windows\srskdgw.exe
    O4 - HKCU\..\RunOnce: [yawobay] c:\windows\srskdgw.exe
    O4 - HKCU\..\RunOnce: [fhdwtgn] c:\windows\srskdgw.exe
    O4 - HKCU\..\RunOnce: [qhaxbby] c:\windows\srskdgw.exe
    O4 - HKCU\..\RunOnce: [ubxqryo] c:\windows\srskdgw.exe
    O4 - HKCU\..\RunOnce: [mayoraf] c:\windows\srskdgw.exe
    O4 - HKCU\..\RunOnce: [safgjvh] c:\windows\srskdgw.exe
    O4 - HKCU\..\RunOnce: [lcqmnxd] c:\windows\srskdgw.exe
    O4 - HKCU\..\RunOnce: [uptlaxu] c:\windows\srskdgw.exe
    O4 - HKCU\..\RunOnce: [igxmvjr] c:\windows\srskdgw.exe
    O4 - HKCU\..\RunOnce: [ntgfnxi] c:\windows\srskdgw.exe
    O4 - HKCU\..\RunOnce: [wwktvti] c:\windows\srskdgw.exe
    O4 - HKCU\..\RunOnce: [ryptjnu] c:\windows\srskdgw.exe
    O4 - HKCU\..\RunOnce: [ykypayq] c:\windows\srskdgw.exe
    O4 - HKCU\..\RunOnce: [wxntkol] c:\windows\srskdgw.exe
    O4 - HKCU\..\RunOnce: [itvtqoj] c:\windows\srskdgw.exe
    O4 - HKCU\..\RunOnce: [gafwxui] c:\windows\srskdgw.exe
    O4 - HKCU\..\RunOnce: [folnbyd] c:\windows\srskdgw.exe
    O4 - HKCU\..\RunOnce: [eryontd] c:\windows\srskdgw.exe
    O4 - HKCU\..\RunOnce: [hcdvidq] c:\windows\srskdgw.exe
    O4 - HKCU\..\RunOnce: [yqwigkw] c:\windows\srskdgw.exe
    O4 - HKCU\..\RunOnce: [eykevnm] c:\windows\srskdgw.exe
    O4 - HKCU\..\RunOnce: [uqscqev] c:\windows\srskdgw.exe
    O4 - HKCU\..\RunOnce: [obcxaoo] c:\windows\srskdgw.exe
    O4 - HKCU\..\RunOnce: [snsddnh] c:\windows\srskdgw.exe
    O4 - HKCU\..\RunOnce: [aqdfrsv] c:\windows\srskdgw.exe
    O4 - HKCU\..\RunOnce: [jmnwxqn] c:\windows\srskdgw.exe
    O4 - HKCU\..\RunOnce: [ascqicb] c:\windows\srskdgw.exe
    O4 - HKCU\..\RunOnce: [duewrmx] c:\windows\srskdgw.exe
    O4 - HKCU\..\RunOnce: [beiaryl] c:\windows\srskdgw.exe
    O4 - HKCU\..\RunOnce: [gtevpda] c:\windows\srskdgw.exe
    O4 - HKCU\..\RunOnce: [qkgoptu] c:\windows\srskdgw.exe
    O4 - HKCU\..\RunOnce: [aumeckl] c:\windows\srskdgw.exe
    O4 - HKCU\..\RunOnce: [qhtdesf] c:\windows\srskdgw.exe
    O4 - HKCU\..\RunOnce: [vlwbccm] c:\windows\srskdgw.exe
    O4 - HKCU\..\RunOnce: [lmuhpca] c:\windows\srskdgw.exe
    O4 - HKCU\..\RunOnce: [rsblsxa] c:\windows\srskdgw.exe
    O4 - HKCU\..\RunOnce: [esrcilb] c:\windows\srskdgw.exe
    O4 - HKCU\..\RunOnce: [iuxlwmy] c:\windows\srskdgw.exe
    O4 - HKCU\..\RunOnce: [ibttkrm] c:\windows\srskdgw.exe
    O4 - HKCU\..\RunOnce: [tfykywt] c:\windows\srskdgw.exe
    O4 - HKCU\..\RunOnce: [vqdyiwi] c:\windows\srskdgw.exe
    O4 - HKCU\..\RunOnce: [rwuqmhq] c:\windows\srskdgw.exe
    O4 - HKCU\..\RunOnce: [bqfjqai] c:\windows\srskdgw.exe
    O4 - HKCU\..\RunOnce: [bdkedch] c:\windows\srskdgw.exe
    O4 - HKCU\..\RunOnce: [tpnjcel] c:\windows\srskdgw.exe
    O4 - HKCU\..\RunOnce: [ohwgiei] c:\windows\srskdgw.exe
    O4 - HKCU\..\RunOnce: [iwqfecf] c:\windows\srskdgw.exe
    O4 - HKCU\..\RunOnce: [ohammtb] c:\windows\srskdgw.exe
    O4 - HKCU\..\RunOnce: [vyyojdb] c:\windows\srskdgw.exe
    O4 - HKCU\..\RunOnce: [iyucsfb] c:\windows\srskdgw.exe
    O4 - HKCU\..\RunOnce: [lgsdbdx] c:\windows\srskdgw.exe
    O4 - HKCU\..\RunOnce: [kdjsenw] c:\windows\srskdgw.exe
    O4 - HKCU\..\RunOnce: [rwvvpgr] c:\windows\srskdgw.exe
    O4 - HKCU\..\RunOnce: [wrtiurf] c:\windows\srskdgw.exe
    O4 - HKCU\..\RunOnce: [poieohu] c:\windows\srskdgw.exe
    O4 - HKCU\..\RunOnce: [uhokbwh] c:\windows\srskdgw.exe
    O4 - HKCU\..\RunOnce: [osdrwgb] c:\windows\srskdgw.exe
    O4 - HKCU\..\RunOnce: [rwdrnng] c:\windows\srskdgw.exe
    O4 - HKCU\..\RunOnce: [lyjkdhd] c:\windows\srskdgw.exe
    O4 - HKCU\..\RunOnce: [xjjauyy] c:\windows\srskdgw.exe
    O4 - HKCU\..\RunOnce: [kyttxto] c:\windows\srskdgw.exe
    O4 - HKCU\..\RunOnce: [xgnhppw] c:\windows\yyrkasm.exe
    O4 - HKCU\..\RunOnce: [cljhgpv] c:\windows\yyrkasm.exe
    O4 - HKCU\..\RunOnce: [velojrw] c:\windows\yyrkasm.exe
    O4 - HKCU\..\RunOnce: [pkcmojs] c:\windows\yyrkasm.exe
    O4 - HKCU\..\RunOnce: [rkvgjdk] c:\windows\yyrkasm.exe
    O4 - HKCU\..\RunOnce: [gboghdq] c:\windows\yyrkasm.exe
    O4 - HKCU\..\RunOnce: [tmwmyfv] c:\windows\yyrkasm.exe
    O4 - HKCU\..\RunOnce: [hkcixsi] c:\windows\yyrkasm.exe
    O4 - HKCU\..\RunOnce: [sjfjmac] c:\windows\yyrkasm.exe
    O4 - HKCU\..\RunOnce: [cukpyka] c:\windows\yyrkasm.exe
    O4 - HKCU\..\RunOnce: [lrxxiax] c:\windows\yyrkasm.exe
    O4 - HKCU\..\RunOnce: [lxkscen] c:\windows\yyrkasm.exe
    O4 - HKCU\..\RunOnce: [pfdogkv] c:\windows\yyrkasm.exe
    O4 - HKCU\..\RunOnce: [cewhxei] c:\windows\yyrkasm.exe
    O4 - HKCU\..\RunOnce: [jnxupmi] c:\windows\yyrkasm.exe
    O4 - HKCU\..\RunOnce: [eloclrr] c:\windows\yyrkasm.exe
    O4 - HKCU\..\RunOnce: [klhhrnt] c:\windows\yyrkasm.exe
    O4 - HKCU\..\RunOnce: [cewvqjv] c:\windows\yyrkasm.exe
    O4 - HKCU\..\RunOnce: [qibagtd] c:\windows\yyrkasm.exe
    O4 - HKCU\..\RunOnce: [vpbejrm] c:\windows\yyrkasm.exe
    O4 - HKCU\..\RunOnce: [jbjbmou] c:\windows\ogioigl.exe
    O4 - HKCU\..\RunOnce: [pboajxq] c:\windows\ogioigl.exe
    O4 - HKCU\..\RunOnce: [asecfia] c:\windows\ogioigl.exe
    O4 - HKCU\..\RunOnce: [dmdthid] c:\windows\ogioigl.exe
    O4 - HKCU\..\RunOnce: [mtbmidf] c:\windows\ogioigl.exe
    O4 - HKCU\..\RunOnce: [wjkympq] c:\windows\ogioigl.exe
    O4 - HKCU\..\RunOnce: [totqqtp] c:\windows\ogioigl.exe
    O4 - HKCU\..\RunOnce: [yimmara] c:\windows\ogioigl.exe
    O4 - HKCU\..\RunOnce: [lfjnnkv] c:\windows\ogioigl.exe
    O4 - HKCU\..\RunOnce: [sivikxv] c:\windows\ogioigl.exe
    O4 - HKCU\..\RunOnce: [kokpgpi] c:\windows\ogioigl.exe
    O4 - HKCU\..\RunOnce: [cpsfuqt] c:\windows\ogioigl.exe
    O4 - HKCU\..\RunOnce: [wgvecbd] c:\windows\ogioigl.exe
    O4 - HKCU\..\RunOnce: [cxnwgtb] c:\windows\ogioigl.exe
    O4 - HKCU\..\RunOnce: [ifsptjn] c:\windows\ogioigl.exe
    O4 - HKCU\..\RunOnce: [lhhkwbx] c:\windows\ogioigl.exe
    O4 - HKCU\..\RunOnce: [rotmnky] c:\windows\ogioigl.exe
    O4 - HKCU\..\RunOnce: [cyhwmgh] c:\windows\ogioigl.exe
    O4 - HKCU\..\RunOnce: [hpmluqr] c:\windows\ogioigl.exe
    O4 - HKCU\..\RunOnce: [vsopuyh] c:\windows\ogioigl.exe
    O4 - HKCU\..\RunOnce: [dhrumfa] c:\windows\ogioigl.exe
    O4 - HKCU\..\RunOnce: [bgsgckc] c:\windows\ogioigl.exe
    O4 - HKCU\..\RunOnce: [ebwgpsv] c:\windows\ogioigl.exe
    O4 - HKCU\..\RunOnce: [nimqoco] c:\windows\ogioigl.exe
    O4 - HKCU\..\RunOnce: [qqvwvei] c:\windows\ogioigl.exe
    O4 - HKCU\..\RunOnce: [hvqshxe] c:\windows\ogioigl.exe
    O4 - HKCU\..\RunOnce: [fwbsghe] c:\windows\ogioigl.exe
    O4 - HKCU\..\RunOnce: [mjvukqt] c:\windows\ogioigl.exe
    O4 - HKCU\..\RunOnce: [uuoeswq] c:\windows\ogioigl.exe
    O4 - HKCU\..\RunOnce: [hymfmqp] c:\windows\ogioigl.exe
    O4 - HKCU\..\RunOnce: [selghcd] c:\windows\ogioigl.exe
    O4 - HKCU\..\RunOnce: [cmsctyk] c:\windows\ogioigl.exe
    O4 - HKCU\..\RunOnce: [kiuvgfw] c:\windows\ogioigl.exe
    O4 - HKCU\..\RunOnce: [jsptmpj] c:\windows\ogioigl.exe
    O4 - HKCU\..\RunOnce: [bfifvqd] c:\windows\ogioigl.exe
    O4 - HKCU\..\RunOnce: [dobfifh] c:\windows\ogioigl.exe
    O4 - HKCU\..\RunOnce: [dgyassd] c:\windows\suqdqfu.exe
    O4 - HKCU\..\RunOnce: [strbbjc] c:\windows\suqdqfu.exe
    O4 - HKCU\..\RunOnce: [newpgga] c:\windows\suqdqfu.exe
    O4 - HKCU\..\RunOnce: [yrkyewr] c:\windows\igphfei.exe
    O4 - HKCU\..\RunOnce: [sfbcayx] c:\windows\igphfei.exe
    O4 - HKCU\..\RunOnce: [joiutxw] c:\windows\igphfei.exe
    O4 - HKCU\..\RunOnce: [lhsubfh] c:\windows\igphfei.exe
    O4 - HKCU\..\RunOnce: [arnfdrd] c:\windows\rfwcndr.exe
    O4 - HKCU\..\RunOnce: [vuiiksd] c:\windows\rfwcndr.exe
    O4 - HKCU\..\RunOnce: [pclfrkg] c:\windows\rfwcndr.exe
    O4 - HKCU\..\RunOnce: [hcxcoik] c:\windows\rfwcndr.exe
    O4 - HKCU\..\RunOnce: [ykwojnh] c:\windows\rfwcndr.exe
    O4 - HKCU\..\RunOnce: [psuhtat] c:\windows\rfwcndr.exe
    O4 - HKCU\..\RunOnce: [wlcjjql] c:\windows\rfwcndr.exe
    O4 - HKCU\..\RunOnce: [dnemjjc] c:\windows\rfwcndr.exe
    O4 - HKCU\..\RunOnce: [wocrixx] c:\windows\rfwcndr.exe
    O4 - HKCU\..\RunOnce: [nwuysin] c:\windows\rfwcndr.exe
    O4 - HKCU\..\RunOnce: [owcmpvb] c:\windows\rfwcndr.exe
    O4 - HKCU\..\RunOnce: [cfltend] c:\windows\rfwcndr.exe
    O4 - HKCU\..\RunOnce: [ntytgon] c:\windows\rfwcndr.exe
    O4 - HKCU\..\RunOnce: [bxhauap] c:\windows\rfwcndr.exe
    O4 - HKCU\..\RunOnce: [ptoeheq] c:\windows\rfwcndr.exe
    O4 - HKCU\..\RunOnce: [cvgnqve] c:\windows\rfwcndr.exe
    O4 - HKCU\..\RunOnce: [aqmpwxt] c:\windows\rfwcndr.exe
    O4 - HKCU\..\RunOnce: [yoawnrl] c:\windows\rfwcndr.exe
    O4 - HKCU\..\RunOnce: [taomxtk] c:\windows\rfwcndr.exe
    O4 - HKCU\..\RunOnce: [tmhohce] c:\windows\rfwcndr.exe
    O4 - HKCU\..\RunOnce: [abqebng] c:\windows\rfwcndr.exe
    O4 - HKCU\..\RunOnce: [yxtoylo] c:\windows\rfwcndr.exe
    O4 - HKCU\..\RunOnce: [hmfojwy] c:\windows\rfwcndr.exe
    O4 - HKCU\..\RunOnce: [trskvdb] c:\windows\rfwcndr.exe
    O4 - HKCU\..\RunOnce: [gekixdo] c:\windows\rfwcndr.exe
    O4 - HKCU\..\RunOnce: [dtdgbyq] c:\windows\rfwcndr.exe
    O4 - HKCU\..\RunOnce: [cvpddak] c:\windows\rfwcndr.exe
    O4 - HKCU\..\RunOnce: [iqdgqyv] c:\windows\rfwcndr.exe
    O4 - HKCU\..\RunOnce: [dwrmpui] c:\windows\rfwcndr.exe
    O4 - HKCU\..\RunOnce: [enlwdqg] c:\windows\rfwcndr.exe
    O4 - HKCU\..\RunOnce: [lbrlsbe] c:\windows\rfwcndr.exe
    O4 - HKCU\..\RunOnce: [pjelbcn] c:\windows\rfwcndr.exe
    O4 - HKCU\..\RunOnce: [ttfjnfu] c:\windows\rfwcndr.exe
    O4 - HKCU\..\RunOnce: [bpvdiya] c:\windows\rfwcndr.exe
    O4 - HKCU\..\RunOnce: [fkfwity] c:\windows\rfwcndr.exe
    O4 - HKCU\..\RunOnce: [fxsfbma] c:\windows\rfwcndr.exe
    O4 - HKCU\..\RunOnce: [xjmovte] c:\windows\rfwcndr.exe
    O4 - HKCU\..\RunOnce: [koytapk] c:\windows\rfwcndr.exe
    O4 - HKCU\..\RunOnce: [itroynu] c:\windows\rfwcndr.exe
    O4 - HKCU\..\RunOnce: [ppvlmxb] c:\windows\rfwcndr.exe
    O4 - HKCU\..\RunOnce: [yjvlxuf] c:\windows\rfwcndr.exe
    O4 - HKCU\..\RunOnce: [vfepdnr] c:\windows\rfwcndr.exe
    O4 - HKCU\..\RunOnce: [lrkbeyv] c:\windows\rfwcndr.exe
    O4 - HKCU\..\RunOnce: [ldpeqff] c:\windows\rfwcndr.exe
    O4 - HKCU\..\RunOnce: [rtdprvm] c:\windows\rfwcndr.exe
    O4 - HKCU\..\RunOnce: [mxhbwhw] c:\windows\rfwcndr.exe
    O4 - HKCU\..\RunOnce: [morkwjs] c:\windows\htgtonw.exe
    O4 - HKCU\..\RunOnce: [apsxouu] c:\windows\htgtonw.exe
    O4 - HKCU\..\RunOnce: [whiwnyu] c:\windows\htgtonw.exe
    O4 - HKCU\..\RunOnce: [pjrgskw] c:\windows\htgtonw.exe
    O4 - HKCU\..\RunOnce: [abhjtfe] c:\windows\htgtonw.exe
    O4 - HKCU\..\RunOnce: [csrrgrq] c:\windows\htgtonw.exe
    O4 - HKCU\..\RunOnce: [fkjnywq] c:\windows\htgtonw.exe
    O4 - HKCU\..\RunOnce: [wqhitwp] c:\windows\htgtonw.exe
    O4 - HKCU\..\RunOnce: [qncpjjx] c:\windows\htgtonw.exe
    O4 - HKCU\..\RunOnce: [wihxrbo] c:\windows\fhlffmm.exe
    O4 - HKCU\..\RunOnce: [tmigmfs] c:\windows\bwfbmsd.exe
    O4 - HKCU\..\RunOnce: [xoolhyu] c:\windows\bwfbmsd.exe
    O4 - HKCU\..\RunOnce: [ffqgomx] c:\windows\bwfbmsd.exe
    O4 - HKCU\..\RunOnce: [iqfusqn] c:\windows\bwfbmsd.exe
    O4 - HKCU\..\RunOnce: [onndkgg] c:\windows\bwfbmsd.exe
    O4 - HKCU\..\RunOnce: [jhxmehd] c:\windows\bwfbmsd.exe
    O4 - HKCU\..\RunOnce: [xvcxrcx] c:\windows\bwfbmsd.exe
    O4 - HKCU\..\RunOnce: [xsqcrle] c:\windows\bwfbmsd.exe
    O4 - HKCU\..\RunOnce: [udlgpvd] c:\windows\bwfbmsd.exe
    O4 - HKCU\..\RunOnce: [vyohiku] c:\windows\bwfbmsd.exe
    O4 - HKCU\..\RunOnce: [bxcxsrr] c:\windows\bwfbmsd.exe
    O4 - HKCU\..\RunOnce: [tfpkosh] c:\windows\bwfbmsd.exe
    O4 - HKCU\..\RunOnce: [prnukhn] c:\windows\bwfbmsd.exe
    O4 - HKCU\..\RunOnce: [cauddff] c:\windows\bwfbmsd.exe
    O4 - HKCU\..\RunOnce: [sqwdsmq] c:\windows\bwfbmsd.exe
    O4 - HKCU\..\RunOnce: [torspfb] c:\windows\bwfbmsd.exe
    O4 - HKCU\..\RunOnce: [ootxafk] c:\windows\bwfbmsd.exe
    O4 - HKCU\..\RunOnce: [nmrglyp] c:\windows\bwfbmsd.exe
    O4 - HKCU\..\RunOnce: [qdqrant] c:\windows\bwfbmsd.exe
    O4 - HKCU\..\RunOnce: [ykumovr] c:\windows\bwfbmsd.exe
    O4 - HKCU\..\RunOnce: [ppevkht] c:\windows\bwfbmsd.exe
    O4 - HKCU\..\RunOnce: [juewobr] c:\windows\bwfbmsd.exe
    O4 - HKCU\..\RunOnce: [surveau] c:\windows\bwfbmsd.exe
    O4 - HKCU\..\RunOnce: [nyqxmof] c:\windows\bwfbmsd.exe
    O4 - HKCU\..\RunOnce: [vdhghwf] c:\windows\bwfbmsd.exe
    O4 - HKCU\..\RunOnce: [jnqrcox] c:\windows\bwfbmsd.exe
    O4 - HKCU\..\RunOnce: [aiykbkt] c:\windows\bwfbmsd.exe
    O4 - HKCU\..\RunOnce: [ubaatvk] c:\windows\bwfbmsd.exe
    O4 - HKCU\..\RunOnce: [ognhcwj] c:\windows\b
  • REKLAMA
  • Pomocny post
    #6 1424821
    md
    Poziom 41  
    Jesteś wielki. Tak zabagnionego systemu nie widzi się na codzień. Zacznij od uruchomienia skanera on line: http://skaner.mks.com.pl/
    Użyj programu CWShredder i np. Ad Aware SE Personal.
    Usuń to:
    C:\PROGRAM FILES\MEDIA ACCESS\MEDIAACCK.EXE
    C:\PROGRAM FILES\MEDIA ACCESS\MEDIAACCESS.EXE
    O4 - HKCU\..\Run: [mwuaddm] c:\windows\xfsctck.exe
    O4 - HKCU\..\Run: [tsedwto] c:\windows\xfsctck.exe
    O4 - HKCU\..\Run: [pksmiuu] c:\windows\xfsctck.exe
    O4 - HKCU\..\Run: [lkcbnqc] c:\windows\xfsctck.exe
    O4 - HKCU\..\Run: [wiimbvt] c:\windows\xfsctck.exe
    O4 - HKCU\..\Run: [ydaeajj] c:\windows\xfsctck.exe
    O4 - HKCU\..\Run: [ghrlyea] c:\windows\xfsctck.exe
    O4 - HKCU\..\Run: [wagwrad] c:\windows\xfsctck.exe
    O4 - HKCU\..\Run: [tymaoux] c:\windows\xfsctck.exe
    O4 - HKCU\..\Run: [ycyapim] c:\windows\xfsctck.exe
    O4 - HKCU\..\Run: [xvvsyfd] c:\windows\xfsctck.exe
    O4 - HKCU\..\Run: [vihlwsk] c:\windows\xfsctck.exe
    O4 - HKCU\..\Run: [lmvqkod] c:\windows\xfsctck.exe
    O4 - HKCU\..\Run: [ewuqmts] c:\windows\xfsctck.exe
    O4 - HKCU\..\Run: [ekymojj] c:\windows\xfsctck.exe
    O4 - HKCU\..\Run: [yaecbpg] c:\windows\xfsctck.exe
    O4 - HKCU\..\Run: [ilbeynl] c:\windows\xfsctck.exe
    O4 - HKCU\..\Run: [fmmgnpi] c:\windows\xfsctck.exe
    O4 - HKCU\..\Run: [fxoytja] c:\windows\xfsctck.exe
    O4 - HKCU\..\Run: [btkarml] c:\windows\xfsctck.exe
    O4 - HKCU\..\Run: [wbgmstl] c:\windows\xfsctck.exe
    O4 - HKCU\..\Run: [ykascop] c:\windows\xfsctck.exe
    O4 - HKCU\..\Run: [uestrei] c:\windows\xfsctck.exe
    O4 - HKCU\..\Run: [kktwkwo] c:\windows\xfsctck.exe
    O4 - HKCU\..\Run: [ygageyx] c:\windows\xfsctck.exe
    O4 - HKCU\..\Run: [vtxcahr] c:\windows\xfsctck.exe
    O4 - HKCU\..\Run: [wkqgosf] c:\windows\xfsctck.exe
    O4 - HKCU\..\Run: [wubdvax] c:\windows\xfsctck.exe
    O4 - HKCU\..\Run: [vnvbfls] c:\windows\xfsctck.exe
    O4 - HKCU\..\Run: [xbcwuwf] c:\windows\xfsctck.exe
    O4 - HKCU\..\Run: [iqifddr] c:\windows\xfsctck.exe
    O4 - HKCU\..\Run: [bqpnbvd] c:\windows\xfsctck.exe
    O4 - HKCU\..\Run: [qxacccf] c:\windows\xfsctck.exe
    O4 - HKCU\..\Run: [ffkpbhy] c:\windows\xfsctck.exe
    O4 - HKCU\..\Run: [iflcrmx] c:\windows\xfsctck.exe
    O4 - HKCU\..\Run: [pnglpvv] c:\windows\xfsctck.exe
    O4 - HKCU\..\Run: [haejycc] c:\windows\xfsctck.exe
    O4 - HKCU\..\Run: [smkgjwo] c:\windows\xfsctck.exe
    O4 - HKCU\..\Run: [qbukitq] c:\windows\xfsctck.exe
    O4 - HKCU\..\Run: [hvtorei] c:\windows\xfsctck.exe
    O4 - HKCU\..\Run: [trylsgb] c:\windows\xfsctck.exe
    O4 - HKCU\..\Run: [tlaqqqe] c:\windows\xfsctck.exe
    O4 - HKCU\..\Run: [qkdkdvw] c:\windows\xfsctck.exe
    O4 - HKCU\..\Run: [euoymhi] c:\windows\xfsctck.exe
    O4 - HKCU\..\Run: [lhyojml] c:\windows\xfsctck.exe
    O4 - HKCU\..\Run: [cugujxg] c:\windows\xfsctck.exe
    O4 - HKCU\..\Run: [puvihku] c:\windows\xfsctck.exe
    O4 - HKCU\..\Run: [ygqvhfq] c:\windows\xfsctck.exe
    O4 - HKCU\..\Run: [ntpcbrq] c:\windows\tbdvfin.exe
    O4 - HKCU\..\Run: [tscbjuv] c:\windows\tbdvfin.exe
    O4 - HKCU\..\Run: [jifjnkk] c:\windows\vaffywp.exe
    O4 - HKCU\..\Run: [isnptnb] c:\windows\vaffywp.exe
    O4 - HKCU\..\Run: [pamryig] c:\windows\vaffywp.exe
    O4 - HKCU\..\Run: [tliijag] c:\windows\vaffywp.exe
    O4 - HKCU\..\Run: [ciarcwd] c:\windows\vaffywp.exe
    O4 - HKCU\..\Run: [plehpsc] c:\windows\vaffywp.exe
    O4 - HKCU\..\Run: [arqohds] c:\windows\vaffywp.exe
    O4 - HKCU\..\Run: [ymildvn] c:\windows\vaffywp.exe
    O4 - HKCU\..\Run: [gdmwike] c:\windows\vaffywp.exe
    O4 - HKCU\..\Run: [oeimswf] c:\windows\vaffywp.exe
    O4 - HKCU\..\Run: [ibfwvca] c:\windows\vaffywp.exe
    O4 - HKCU\..\Run: [uxwtxbx] c:\windows\srskdgw.exe
    O4 - HKCU\..\Run: [bxokpuv] c:\windows\srskdgw.exe
    O4 - HKCU\..\Run: [uktbcms] c:\windows\srskdgw.exe
    O4 - HKCU\..\Run: [rjotcxc] c:\windows\srskdgw.exe
    O4 - HKCU\..\Run: [qkhnyme] c:\windows\srskdgw.exe
    O4 - HKCU\..\Run: [yhbjrds] c:\windows\srskdgw.exe
    O4 - HKCU\..\Run: [fjkphem] c:\windows\srskdgw.exe
    O4 - HKCU\..\Run: [qtkrxij] c:\windows\srskdgw.exe
    O4 - HKCU\..\Run: [etfqsle] c:\windows\srskdgw.exe
    O4 - HKCU\..\Run: [oakjmjf] c:\windows\srskdgw.exe
    O4 - HKCU\..\Run: [ecrrwpm] c:\windows\srskdgw.exe
    O4 - HKCU\..\Run: [jqgatyj] c:\windows\srskdgw.exe
    O4 - HKCU\..\Run: [dkmuhvh] c:\windows\srskdgw.exe
    O4 - HKCU\..\Run: [illcnln] c:\windows\srskdgw.exe
    O4 - HKCU\..\Run: [qyofluc] c:\windows\srskdgw.exe
    O4 - HKCU\..\Run: [hubomdo] c:\windows\srskdgw.exe
    O4 - HKCU\..\Run: [icininn] c:\windows\srskdgw.exe
    O4 - HKCU\..\Run: [kiqiare] c:\windows\srskdgw.exe
    O4 - HKCU\..\Run: [gwemfpt] c:\windows\srskdgw.exe
    O4 - HKCU\..\Run: [lbplbmn] c:\windows\srskdgw.exe
    O4 - HKCU\..\Run: [nmvqjxc] c:\windows\srskdgw.exe
    O4 - HKCU\..\Run: [njlhshf] c:\windows\srskdgw.exe
    O4 - HKCU\..\Run: [ygercgi] c:\windows\srskdgw.exe
    O4 - HKCU\..\Run: [mdafodb] c:\windows\srskdgw.exe
    O4 - HKCU\..\Run: [mwjdouu] c:\windows\srskdgw.exe
    O4 - HKCU\..\Run: [yawobay] c:\windows\srskdgw.exe
    O4 - HKCU\..\Run: [fhdwtgn] c:\windows\srskdgw.exe
    O4 - HKCU\..\Run: [qhaxbby] c:\windows\srskdgw.exe
    O4 - HKCU\..\Run: [ubxqryo] c:\windows\srskdgw.exe
    O4 - HKCU\..\Run: [mayoraf] c:\windows\srskdgw.exe
    O4 - HKCU\..\Run: [safgjvh] c:\windows\srskdgw.exe
    O4 - HKCU\..\Run: [lcqmnxd] c:\windows\srskdgw.exe
    O4 - HKCU\..\Run: [uptlaxu] c:\windows\srskdgw.exe
    O4 - HKCU\..\Run: [igxmvjr] c:\windows\srskdgw.exe
    O4 - HKCU\..\Run: [ntgfnxi] c:\windows\srskdgw.exe
    O4 - HKCU\..\Run: [wwktvti] c:\windows\srskdgw.exe
    O4 - HKCU\..\Run: [ryptjnu] c:\windows\srskdgw.exe
    O4 - HKCU\..\Run: [ykypayq] c:\windows\srskdgw.exe
    O4 - HKCU\..\Run: [wxntkol] c:\windows\srskdgw.exe
    O4 - HKCU\..\Run: [itvtqoj] c:\windows\srskdgw.exe
    O4 - HKCU\..\Run: [gafwxui] c:\windows\srskdgw.exe
    O4 - HKCU\..\Run: [folnbyd] c:\windows\srskdgw.exe
    O4 - HKCU\..\Run: [eryontd] c:\windows\srskdgw.exe
    O4 - HKCU\..\Run: [hcdvidq] c:\windows\srskdgw.exe
    O4 - HKCU\..\Run: [yqwigkw] c:\windows\srskdgw.exe
    O4 - HKCU\..\Run: [eykevnm] c:\windows\srskdgw.exe
    O4 - HKCU\..\Run: [uqscqev] c:\windows\srskdgw.exe
    O4 - HKCU\..\Run: [obcxaoo] c:\windows\srskdgw.exe
    O4 - HKCU\..\Run: [snsddnh] c:\windows\srskdgw.exe
    O4 - HKCU\..\Run: [aqdfrsv] c:\windows\srskdgw.exe
    O4 - HKCU\..\Run: [jmnwxqn] c:\windows\srskdgw.exe
    O4 - HKCU\..\Run: [ascqicb] c:\windows\srskdgw.exe
    O4 - HKCU\..\Run: [duewrmx] c:\windows\srskdgw.exe
    O4 - HKCU\..\Run: [beiaryl] c:\windows\srskdgw.exe
    O4 - HKCU\..\Run: [gtevpda] c:\windows\srskdgw.exe
    O4 - HKCU\..\Run: [qkgoptu] c:\windows\srskdgw.exe
    O4 - HKCU\..\Run: [aumeckl] c:\windows\srskdgw.exe
    O4 - HKCU\..\Run: [qhtdesf] c:\windows\srskdgw.exe
    O4 - HKCU\..\Run: [vlwbccm] c:\windows\srskdgw.exe
    O4 - HKCU\..\Run: [lmuhpca] c:\windows\srskdgw.exe
    O4 - HKCU\..\Run: [rsblsxa] c:\windows\srskdgw.exe
    O4 - HKCU\..\Run: [esrcilb] c:\windows\srskdgw.exe
    O4 - HKCU\..\Run: [iuxlwmy] c:\windows\srskdgw.exe
    O4 - HKCU\..\Run: [ibttkrm] c:\windows\srskdgw.exe
    O4 - HKCU\..\Run: [tfykywt] c:\windows\srskdgw.exe
    O4 - HKCU\..\Run: [vqdyiwi] c:\windows\srskdgw.exe
    O4 - HKCU\..\Run: [rwuqmhq] c:\windows\srskdgw.exe
    O4 - HKCU\..\Run: [bqfjqai] c:\windows\srskdgw.exe
    O4 - HKCU\..\Run: [bdkedch] c:\windows\srskdgw.exe
    O4 - HKCU\..\Run: [tpnjcel] c:\windows\srskdgw.exe
    O4 - HKCU\..\Run: [ohwgiei] c:\windows\srskdgw.exe
    O4 - HKCU\..\Run: [iwqfecf] c:\windows\srskdgw.exe
    O4 - HKCU\..\Run: [ohammtb] c:\windows\srskdgw.exe
    O4 - HKCU\..\Run: [vyyojdb] c:\windows\srskdgw.exe
    O4 - HKCU\..\Run: [iyucsfb] c:\windows\srskdgw.exe
    O4 - HKCU\..\Run: [lgsdbdx] c:\windows\srskdgw.exe
    O4 - HKCU\..\Run: [kdjsenw] c:\windows\srskdgw.exe
    O4 - HKCU\..\Run: [rwvvpgr] c:\windows\srskdgw.exe
    O4 - HKCU\..\Run: [wrtiurf] c:\windows\srskdgw.exe
    O4 - HKCU\..\Run: [poieohu] c:\windows\srskdgw.exe
    O4 - HKCU\..\Run: [uhokbwh] c:\windows\srskdgw.exe
    O4 - HKCU\..\Run: [osdrwgb] c:\windows\srskdgw.exe
    O4 - HKCU\..\Run: [rwdrnng] c:\windows\srskdgw.exe
    O4 - HKCU\..\Run: [lyjkdhd] c:\windows\srskdgw.exe
    O4 - HKCU\..\Run: [xjjauyy] c:\windows\srskdgw.exe
    O4 - HKCU\..\Run: [kyttxto] c:\windows\srskdgw.exe
    O4 - HKCU\..\Run: [xgnhppw] c:\windows\yyrkasm.exe
    O4 - HKCU\..\Run: [cljhgpv] c:\windows\yyrkasm.exe
    O4 - HKCU\..\Run: [velojrw] c:\windows\yyrkasm.exe
    O4 - HKCU\..\Run: [pkcmojs] c:\windows\yyrkasm.exe
    O4 - HKCU\..\Run: [rkvgjdk] c:\windows\yyrkasm.exe
    O4 - HKCU\..\Run: [gboghdq] c:\windows\yyrkasm.exe
    O4 - HKCU\..\Run: [tmwmyfv] c:\windows\yyrkasm.exe
    O4 - HKCU\..\Run: [hkcixsi] c:\windows\yyrkasm.exe
    O4 - HKCU\..\Run: [sjfjmac] c:\windows\yyrkasm.exe
    O4 - HKCU\..\Run: [cukpyka] c:\windows\yyrkasm.exe
    O4 - HKCU\..\Run: [lrxxiax] c:\windows\yyrkasm.exe
    O4 - HKCU\..\Run: [lxkscen] c:\windows\yyrkasm.exe
    O4 - HKCU\..\Run: [pfdogkv] c:\windows\yyrkasm.exe
    O4 - HKCU\..\Run: [cewhxei] c:\windows\yyrkasm.exe
    O4 - HKCU\..\Run: [jnxupmi] c:\windows\yyrkasm.exe
    O4 - HKCU\..\Run: [eloclrr] c:\windows\yyrkasm.exe
    O4 - HKCU\..\Run: [klhhrnt] c:\windows\yyrkasm.exe
    O4 - HKCU\..\Run: [cewvqjv] c:\windows\yyrkasm.exe
    O4 - HKCU\..\Run: [qibagtd] c:\windows\yyrkasm.exe
    O4 - HKCU\..\Run: [vpbejrm] c:\windows\yyrkasm.exe
    O4 - HKCU\..\Run: [jbjbmou] c:\windows\ogioigl.exe
    O4 - HKCU\..\Run: [pboajxq] c:\windows\ogioigl.exe
    O4 - HKCU\..\Run: [asecfia] c:\windows\ogioigl.exe
    O4 - HKCU\..\Run: [dmdthid] c:\windows\ogioigl.exe
    O4 - HKCU\..\Run: [mtbmidf] c:\windows\ogioigl.exe
    O4 - HKCU\..\Run: [wjkympq] c:\windows\ogioigl.exe
    O4 - HKCU\..\Run: [totqqtp] c:\windows\ogioigl.exe
    O4 - HKCU\..\Run: [yimmara] c:\windows\ogioigl.exe
    O4 - HKCU\..\Run: [lfjnnkv] c:\windows\ogioigl.exe
    O4 - HKCU\..\Run: [sivikxv] c:\windows\ogioigl.exe
    O4 - HKCU\..\Run: [kokpgpi] c:\windows\ogioigl.exe
    O4 - HKCU\..\Run: [cpsfuqt] c:\windows\ogioigl.exe
    O4 - HKCU\..\Run: [wgvecbd] c:\windows\ogioigl.exe
    O4 - HKCU\..\Run: [cxnwgtb] c:\windows\ogioigl.exe
    O4 - HKCU\..\Run: [ifsptjn] c:\windows\ogioigl.exe
    O4 - HKCU\..\Run: [lhhkwbx] c:\windows\ogioigl.exe
    O4 - HKCU\..\Run: [rotmnky] c:\windows\ogioigl.exe
    O4 - HKCU\..\Run: [cyhwmgh] c:\windows\ogioigl.exe
    O4 - HKCU\..\Run: [hpmluqr] c:\windows\ogioigl.exe
    O4 - HKCU\..\Run: [vsopuyh] c:\windows\ogioigl.exe
    O4 - HKCU\..\Run: [dhrumfa] c:\windows\ogioigl.exe
    O4 - HKCU\..\Run: [bgsgckc] c:\windows\ogioigl.exe
    O4 - HKCU\..\Run: [ebwgpsv] c:\windows\ogioigl.exe
    O4 - HKCU\..\Run: [nimqoco] c:\windows\ogioigl.exe
    O4 - HKCU\..\Run: [qqvwvei] c:\windows\ogioigl.exe
    O4 - HKCU\..\Run: [hvqshxe] c:\windows\ogioigl.exe
    O4 - HKCU\..\Run: [fwbsghe] c:\windows\ogioigl.exe
    O4 - HKCU\..\Run: [mjvukqt] c:\windows\ogioigl.exe
    O4 - HKCU\..\Run: [uuoeswq] c:\windows\ogioigl.exe
    O4 - HKCU\..\Run: [hymfmqp] c:\windows\ogioigl.exe
    O4 - HKCU\..\Run: [selghcd] c:\windows\ogioigl.exe
    O4 - HKCU\..\Run: [cmsctyk] c:\windows\ogioigl.exe
    O4 - HKCU\..\Run: [kiuvgfw] c:\windows\ogioigl.exe
    O4 - HKCU\..\Run: [jsptmpj] c:\windows\ogioigl.exe
    O4 - HKCU\..\Run: [bfifvqd] c:\windows\ogioigl.exe
    O4 - HKCU\..\Run: [dobfifh] c:\windows\ogioigl.exe
    O4 - HKCU\..\Run: [dgyassd] c:\windows\suqdqfu.exe
    O4 - HKCU\..\Run: [strbbjc] c:\windows\suqdqfu.exe
    O4 - HKCU\..\Run: [newpgga] c:\windows\suqdqfu.exe
    O4 - HKCU\..\Run: [yrkyewr] c:\windows\igphfei.exe
    O4 - HKCU\..\Run: [sfbcayx] c:\windows\igphfei.exe
    O4 - HKCU\..\Run: [joiutxw] c:\windows\igphfei.exe
    O4 - HKCU\..\Run: [lhsubfh] c:\windows\igphfei.exe
    O4 - HKCU\..\Run: [arnfdrd] c:\windows\rfwcndr.exe
    O4 - HKCU\..\Run: [vuiiksd] c:\windows\rfwcndr.exe
    O4 - HKCU\..\Run: [pclfrkg] c:\windows\rfwcndr.exe
    O4 - HKCU\..\Run: [hcxcoik] c:\windows\rfwcndr.exe
    O4 - HKCU\..\Run: [ykwojnh] c:\windows\rfwcndr.exe
    O4 - HKCU\..\Run: [psuhtat] c:\windows\rfwcndr.exe
    O4 - HKCU\..\Run: [wlcjjql] c:\windows\rfwcndr.exe
    O4 - HKCU\..\Run: [dnemjjc] c:\windows\rfwcndr.exe
    O4 - HKCU\..\Run: [wocrixx] c:\windows\rfwcndr.exe
    O4 - HKCU\..\Run: [nwuysin] c:\windows\rfwcndr.exe
    O4 - HKCU\..\Run: [owcmpvb] c:\windows\rfwcndr.exe
    O4 - HKCU\..\Run: [cfltend] c:\windows\rfwcndr.exe
    O4 - HKCU\..\Run: [ntytgon] c:\windows\rfwcndr.exe
    O4 - HKCU\..\Run: [bxhauap] c:\windows\rfwcndr.exe
    O4 - HKCU\..\Run: [ptoeheq] c:\windows\rfwcndr.exe
    O4 - HKCU\..\Run: [cvgnqve] c:\windows\rfwcndr.exe
    O4 - HKCU\..\Run: [aqmpwxt] c:\windows\rfwcndr.exe
    O4 - HKCU\..\Run: [yoawnrl] c:\windows\rfwcndr.exe
    O4 - HKCU\..\Run: [taomxtk] c:\windows\rfwcndr.exe
    O4 - HKCU\..\Run: [tmhohce] c:\windows\rfwcndr.exe
    O4 - HKCU\..\Run: [abqebng] c:\windows\rfwcndr.exe
    O4 - HKCU\..\Run: [yxtoylo] c:\windows\rfwcndr.exe
    O4 - HKCU\..\Run: [hmfojwy] c:\windows\rfwcndr.exe
    O4 - HKCU\..\Run: [trskvdb] c:\windows\rfwcndr.exe
    O4 - HKCU\..\Run: [gekixdo] c:\windows\rfwcndr.exe
    O4 - HKCU\..\Run: [dtdgbyq] c:\windows\rfwcndr.exe
    O4 - HKCU\..\Run: [cvpddak] c:\windows\rfwcndr.exe
    O4 - HKCU\..\Run: [iqdgqyv] c:\windows\rfwcndr.exe
    O4 - HKCU\..\Run: [dwrmpui] c:\windows\rfwcndr.exe
    O4 - HKCU\..\Run: [enlwdqg] c:\windows\rfwcndr.exe
    O4 - HKCU\..\Run: [lbrlsbe] c:\windows\rfwcndr.exe
    O4 - HKCU\..\Run: [pjelbcn] c:\windows\rfwcndr.exe
    O4 - HKCU\..\Run: [ttfjnfu] c:\windows\rfwcndr.exe
    O4 - HKCU\..\Run: [bpvdiya] c:\windows\rfwcndr.exe
    O4 - HKCU\..\Run: [fkfwity] c:\windows\rfwcndr.exe
    O4 - HKCU\..\Run: [fxsfbma] c:\windows\rfwcndr.exe
    O4 - HKCU\..\Run: [xjmovte] c:\windows\rfwcndr.exe
    O4 - HKCU\..\Run: [koytapk] c:\windows\rfwcndr.exe
    O4 - HKCU\..\Run: [itroynu] c:\windows\rfwcndr.exe
    O4 - HKCU\..\Run: [ppvlmxb] c:\windows\rfwcndr.exe
    O4 - HKCU\..\Run: [yjvlxuf] c:\windows\rfwcndr.exe
    O4 - HKCU\..\Run: [vfepdnr] c:\windows\rfwcndr.exe
    O4 - HKCU\..\Run: [lrkbeyv] c:\windows\rfwcndr.exe
    O4 - HKCU\..\Run: [ldpeqff] c:\windows\rfwcndr.exe
    O4 - HKCU\..\Run: [rtdprvm] c:\windows\rfwcndr.exe
    O4 - HKCU\..\Run: [mxhbwhw] c:\windows\rfwcndr.exe
    O4 - HKCU\..\Run: [morkwjs] c:\windows\htgtonw.exe
    O4 - HKCU\..\Run: [apsxouu] c:\windows\htgtonw.exe
    O4 - HKCU\..\Run: [whiwnyu] c:\windows\htgtonw.exe
    O4 - HKCU\..\Run: [pjrgskw] c:\windows\htgtonw.exe
    O4 - HKCU\..\Run: [abhjtfe] c:\windows\htgtonw.exe
    O4 - HKCU\..\Run: [csrrgrq] c:\windows\htgtonw.exe
    O4 - HKCU\..\Run: [fkjnywq] c:\windows\htgtonw.exe
    O4 - HKCU\..\Run: [wqhitwp] c:\windows\htgtonw.exe
    O4 - HKCU\..\Run: [qncpjjx] c:\windows\htgtonw.exe
    O4 - HKCU\..\Run: [wihxrbo] c:\windows\fhlffmm.exe
    O4 - HKCU\..\Run: [tmigmfs] c:\windows\bwfbmsd.exe
    O4 - HKCU\..\Run: [xoolhyu] c:\windows\bwfbmsd.exe
    O4 - HKCU\..\Run: [ffqgomx] c:\windows\bwfbmsd.exe
    O4 - HKCU\..\Run: [iqfusqn] c:\windows\bwfbmsd.exe
    O4 - HKCU\..\Run: [onndkgg] c:\windows\bwfbmsd.exe
    O4 - HKCU\..\Run: [jhxmehd] c:\windows\bwfbmsd.exe
    O4 - HKCU\..\Run: [xvcxrcx] c:\windows\bwfbmsd.exe
    O4 - HKCU\..\Run: [xsqcrle] c:\windows\bwfbmsd.exe
    O4 - HKCU\..\Run: [udlgpvd] c:\windows\bwfbmsd.exe
    O4 - HKCU\..\Run: [vyohiku] c:\windows\bwfbmsd.exe
    O4 - HKCU\..\Run: [bxcxsrr] c:\windows\bwfbmsd.exe
    O4 - HKCU\..\Run: [tfpkosh] c:\windows\bwfbmsd.exe
    O4 - HKCU\..\Run: [prnukhn] c:\windows\bwfbmsd.exe
    O4 - HKCU\..\Run: [cauddff] c:\windows\bwfbmsd.exe
    O4 - HKCU\..\Run: [sqwdsmq] c:\windows\bwfbmsd.exe
    O4 - HKCU\..\Run: [torspfb] c:\windows\bwfbmsd.exe
    O4 - HKCU\..\Run: [ootxafk] c:\windows\bwfbmsd.exe
    O4 - HKCU\..\Run: [nmrglyp] c:\windows\bwfbmsd.exe
    O4 - HKCU\..\Run: [qdqrant] c:\windows\bwfbmsd.exe
    O4 - HKCU\..\Run: [ykumovr] c:\windows\bwfbmsd.exe
    O4 - HKCU\..\Run: [ppevkht] c:\windows\bwfbmsd.exe
    O4 - HKCU\..\Run: [juewobr] c:\windows\bwfbmsd.exe
    O4 - HKCU\..\Run: [surveau] c:\windows\bwfbmsd.exe
    O4 - HKCU\..\Run: [nyqxmof] c:\windows\bwfbmsd.exe
    O4 - HKCU\..\Run: [vdhghwf] c:\windows\bwfbmsd.exe
    O4 - HKCU\..\Run: [jnqrcox] c:\windows\bwfbmsd.exe
    O4 - HKCU\..\Run: [aiykbkt] c:\windows\bwfbmsd.exe
    O4 - HKCU\..\Run: [ubaatvk] c:\windows\bwfbmsd.exe
    O4 - HKCU\..\Run: [ognhcwj] c:\windows\bwfbmsd.exe
    O4 - HKCU\..\Run: [uaopxbb] c:\windows\bwfbmsd.exe
    O4 - HKCU\..\Run: [vdstqun] c:\windows\bwfbmsd.exe
    O4 - HKCU\..\Run: [ckitbnu] c:\windows\bwfbmsd.exe
    O4 - HKCU\..\Run: [jwqvuch] c:\windows\bwfbmsd.exe
    O4 - HKCU\..\Run: [mbligfl] c:\windows\bwfbmsd.exe
    O4 - HKCU\..\Run: [qerbaua] c:\windows\bwfbmsd.exe
    O4 - HKCU\..\Run: [suephip] c:\windows\bwfbmsd.exe
    O4 - HKCU\..\Run: [rgducea] c:\windows\bwfbmsd.exe
    O4 - HKCU\..\Run: [spvjips] c:\windows\bwfbmsd.exe
    O4 - HKCU\..\Run: [upmnfau] c:\windows\bwfbmsd.exe
    O4 - HKCU\..\Run: [uikgjsn] c:\windows\bwfbmsd.exe
    O4 - HKCU\..\Run: [douyygu] c:\windows\bwfbmsd.exe
    O4 - HKCU\..\Run: [bligqgy] c:\windows\bwfbmsd.exe
    O4 - HKCU\..\Run: [smjpiyo] c:\windows\bwfbmsd.exe
    O4 - HKCU\..\Run: [ljaajnx] c:\windows\bwfbmsd.exe
    O4 - HKCU\..\Run: [fwcpapt] c:\windows\bwfbmsd.exe
    O4 - HKCU\..\Run: [lwerojh] c:\windows\bwfbmsd.exe
    O4 - HKCU\..\Run: [ulibirk] c:\windows\bwfbmsd.exe
    O4 - HKCU\..\Run: [jdgblnn] c:\windows\bwfbmsd.exe
    O4 - HKCU\..\Run: [hpljakd] c:\windows\bwfbmsd.exe
    O4 - HKCU\..\Run: [bntuocf] c:\windows\bwfbmsd.exe
    O4 - HKCU\..\Run: [eirfyhj] c:\windows\bwfbmsd.exe
    O4 - HKCU\..\Run: [dkcmnjp] c:\windows\bwfbmsd.exe
    O4 - HKCU\..\Run: [ohxnegu] c:\windows\bwfbmsd.exe
    O4 - HKCU\..\Run: [esxjydf] c:\windows\bwfbmsd.exe
    O4 - HKCU\..\Run: [tbpeuvu] c:\windows\bwfbmsd.exe
    O4 - HKCU\..\Run: [wexsnbo] c:\windows\bwfbmsd.exe
    O4 - HKCU\..\Run: [beoiyav] c:\windows\bwfbmsd.exe
    O4 - HKCU\..\Run: [hnntaly] c:\windows\bwfbmsd.exe
    O4 - HKCU\..\Run: [jyiydyy] c:\windows\bwfbmsd.exe
    O4 - HKCU\..\Run: [ilrkgpi] c:\windows\bwfbmsd.exe
    O4 - HKCU\..\Run: [lvamjog] c:\windows\kribvlh.exe
    O4 - HKCU\..\Run: [cunqjce] c:\windows\kribvlh.exe
    O4 - HKCU\..\Run: [jlfnjcu] c:\windows\kribvlh.exe
    O4 - HKCU\..\Run: [nkmoqgt] c:\windows\kribvlh.exe
    O4 - HKCU\..\Run: [woagqwm] c:\windows\kribvlh.exe
    O4 - HKCU\..\Run: [mpvmcvc] c:\windows\kribvlh.exe
    O4 - HKCU\..\Run: [uqdumqf] c:\windows\kribvlh.exe
    O4 - HKCU\..\Run: [nsjahxs] c:\windows\kribvlh.exe
    O4 - HKCU\..\Run: [nygqrvb] c:\windows\kribvlh.exe
    O4 - HKCU\..\Run: [fwlbjmu] c:\windows\kribvlh.exe
    O4 - HKCU\..\Run: [rjdcvgl] c:\windows\kribvlh.exe
    O4 - HKCU\..\Run: [asqbodh] c:\windows\kribvlh.exe
    O4 - HKCU\..\Run: [bhfnupl] c:\windows\kribvlh.exe
    O4 - HKCU\..\Run: [oovsylb] c:\windows\kribvlh.exe
    O4 - HKCU\..\Run: [khunyty] c:\windows\kribvlh.exe
    O4 - HKCU\..\Run: [nqdcbij] c:\windows\kribvlh.exe
    O4 - HKCU\..\Run: [mybqxfw] c:\windows\kribvlh.exe
    O4 - HKCU\..\Run: [hvwqmbx] c:\windows\kribvlh.exe
    O4 - HKCU\..\Run: [bqyguor] c:\windows\kribvlh.exe
    O4 - HKCU\..\Run: [sqwcdeq] c:\windows\kribvlh.exe
    O4 - HKCU\..\Run: [vcqycut] c:\windows\kribvlh.exe
    O4 - HKCU\..\Run: [cjqisas] c:\windows\kribvlh.exe
    O4 - HKCU\..\Run: [vdmdaox] c:\windows\kribvlh.exe
    O4 - HKCU\..\Run: [wxilwoo] c:\windows\kribvlh.exe
    O4 - HKCU\..\Run: [lmlsptx] c:\windows\kribvlh.exe
    O4 - HKCU\..\Run: [wnmoekb] c:\windows\kribvlh.exe
    O4 - HKCU\..\Run: [qjknhrh] c:\windows\kribvlh.exe
    O4 - HKCU\..\Run: [haakcdi] c:\windows\kribvlh.exe
    O4 - HKCU\..\Run: [luntubo] c:\windows\kribvlh.exe
    O4 - HKCU\..\Run: [nkyukyn] c:\windows\kribvlh.exe
    O4 - HKCU\..\Run: [gxuvduq] c:\windows\kribvlh.exe
    O4 - HKCU\..\Run: [tsqxcap] c:\windows\kribvlh.exe
    O4 - HKCU\..\Run: [ewknjca] c:\windows\kribvlh.exe
    O4 - HKCU\..\Run: [wepfrgy] c:\windows\kribvlh.exe
    O4 - HKCU\..\Run: [uqqjydc] c:\windows\kribvlh.exe
    O4 - HKCU\..\Run: [anxitks] c:\windows\kribvlh.exe
    O4 - HKCU\..\Run: [pucoqgu] c:\windows\kribvlh.exe
    O4 - HKCU\..\Run: [qeexeuf] c:\windows\kribvlh.exe
    O4 - HKCU\..\Run: [nsuvtfv] c:\windows\kribvlh.exe
    O4 - HKCU\..\Run: [eusalpm] c:\windows\kribvlh.exe
    O4 - HKCU\..\Run: [ucufhwn] c:\windows\kribvlh.exe
    O4 - HKCU\..\Run: [kfeemja] c:\windows\kribvlh.exe
    O4 - HKCU\..\Run: [tucgihe] c:\windows\kribvlh.exe
    O4 - HKCU\..\Run: [curyybd] c:\windows\kribvlh.exe
    O4 - HKCU\..\Run: [myhllpx] c:\windows\kribvlh.exe
    O4 - HKCU\..\Run: [lqgqdca] c:\windows\kribvlh.exe
    O4 - HKCU\..\Run: [tlyiyhj] c:\windows\kribvlh.exe
    O4 - HKCU\..\Run: [wxlvivg] c:\windows\kribvlh.exe
    O4 - HKCU\..\Run: [dnjjnio] c:\windows\kribvlh.exe
    O4 - HKCU\..\Run: [vothxpt] c:\windows\kribvlh.exe
    O4 - HKCU\..\Run: [ubsmqfr] c:\windows\kribvlh.exe
    O4 - HKCU\..\Run: [kcldbor] c:\windows\kribvlh.exe
    O4 - HKCU\..\Run: [uvdyirc] c:\windows\kribvlh.exe
    O4 - HKCU\..\Run: [fcxcmkm] c:\windows\kribvlh.exe
    O4 - HKCU\..\Run: [ygejrhf] c:\windows\kribvlh.exe
    O4 - HKCU\..\Run: [nfmefxb] c:\windows\fvpjlqm.exe
    O4 - HKCU\..\Run: [qfpktak] c:\windows\fvpjlqm.exe
    O4 - HKCU\..\Run: [ihblkni] c:\windows\fvpjlqm.exe
    O4 - HKCU\..\Run: [yjixhei] c:\windows\fvpjlqm.exe
    O4 - HKCU\..\Run: [tpyvcxa] c:\windows\fvpjlqm.exe
    O4 - HKCU\..\Run: [tgxjbpk] c:\windows\fvpjlqm.exe
    O4 - HKCU\..\Run: [uejekwj] c:\windows\fvpjlqm.exe
    O4 - HKCU\..\Run: [epywxjn] c:\windows\fvpjlqm.exe
    O4 - HKCU\..\Run: [ralscmk] c:\windows\fvpjlqm.exe
    O4 - HKCU\..\Run: [diyduin] c:\windows\fvpjlqm.exe
    O4 - HKCU\..\Run: [dmsnvrl] c:\windows\fvpjlqm.exe
    O4 - HKCU\..\Run: [kjcikdn] c:\windows\fvpjlqm.exe
    O4 - HKCU\..\Run: [llmgmnq] c:\windows\fvpjlqm.exe
    O4 - HKCU\..\Run: [nycqnou] c:\windows\fvpjlqm.exe
    O4 - HKCU\..\Run: [bubvpes] c:\windows\fvpjlqm.exe
    O4 - HKCU\..\Run: [kiinqbb] c:\windows\tmsrqfw.exe
    O4 - HKCU\..\Run: [okahjst] c:\windows\rkopuww.exe
    O4 - HKCU\..\Run: [yuupolx] c:\windows\ynvwsck.exe
    O4 - HKCU\..\Run: [wvborob] c:\windows\ynvwsck.exe
    O4 - HKCU\..\Run: [fcmqvbr] c:\windows\ynvwsck.exe
    O4 - HKCU\..\Run: [jkhtfkj] c:\windows\ynvwsck.exe
    O4 - HKCU\..\Run: [msvkbij] c:\windows\ynvwsck.exe
    O4 - HKCU\..\Run: [llvesjf] c:\windows\ynvwsck.exe
    O4 - HKCU\..\Run: [lerdaeu] c:\windows\uwoxeyv.exe
    O4 - HKCU\..\RunServices: [Komunikator] C:\PROGRAM FILES\TLEN.PL\TLEN.EXE
    O4 - HKCU\..\RunServices: [mwuaddm] c:\windows\xfsctck.exe
    O4 - HKCU\..\RunServices: [tsedwto] c:\windows\xfsctck.exe
    O4 - HKCU\..\RunServices: [pksmiuu] c:\windows\xfsctck.exe
    O4 - HKCU\..\RunServices: [lkcbnqc] c:\windows\xfsctck.exe
    O4 - HKCU\..\RunServices: [wiimbvt] c:\windows\xfsctck.exe
    O4 - HKCU\..\RunServices: [ydaeajj] c:\windows\xfsctck.exe
    O4 - HKCU\..\RunServices: [ghrlyea] c:\windows\xfsctck.exe
    O4 - HKCU\..\RunServices: [wagwrad] c:\windows\xfsctck.exe
    O4 - HKCU\..\RunServices: [tymaoux] c:\windows\xfsctck.exe
    O4 - HKCU\..\RunServices: [ycyapim] c:\windows\xfsctck.exe
    O4 - HKCU\..\RunServices: [xvvsyfd] c:\windows\xfsctck.exe
    O4 - HKCU\..\RunServices: [vihlwsk] c:\windows\xfsctck.exe
    O4 - HKCU\..\RunServices: [lmvqkod] c:\windows\xfsctck.exe
    O4 - HKCU\..\RunServices: [ewuqmts] c:\windows\xfsctck.exe
    O4 - HKCU\..\RunServices: [ekymojj] c:\windows\xfsctck.exe
    O4 - HKCU\..\RunServices: [yaecbpg] c:\windows\xfsctck.exe
    O4 - HKCU\..\RunServices: [ilbeynl] c:\windows\xfsctck.exe
    O4 - HKCU\..\RunServices: [fmmgnpi] c:\windows\xfsctck.exe
    O4 - HKCU\..\RunServices: [fxoytja] c:\windows\xfsctck.exe
    O4 - HKCU\..\RunServices: [btkarml] c:\windows\xfsctck.exe
    O4 - HKCU\..\RunServices: [wbgmstl] c:\windows\xfsctck.exe
    O4 - HKCU\..\RunServices: [ykascop] c:\windows\xfsctck.exe
    O4 - HKCU\..\RunServices: [uestrei] c:\windows\xfsctck.exe
    O4 - HKCU\..\RunServices: [kktwkwo] c:\windows\xfsctck.exe
    O4 - HKCU\..\RunServices: [ygageyx] c:\windows\xfsctck.exe
    O4 - HKCU\..\RunServices: [vtxcahr] c:\windows\xfsctck.exe
    O4 - HKCU\..\RunServices: [wkqgosf] c:\windows\xfsctck.exe
    O4 - HKCU\..\RunServices: [wubdvax] c:\windows\xfsctck.exe
    O4 - HKCU\..\RunServices: [vnvbfls] c:\windows\xfsctck.exe
    O4 - HKCU\..\RunServices: [xbcwuwf] c:\windows\xfsctck.exe
    O4 - HKCU\..\RunServices: [iqifddr] c:\windows\xfsctck.exe
    O4 - HKCU\..\RunServices: [bqpnbvd] c:\windows\xfsctck.exe
    O4 - HKCU\..\RunServices: [qxacccf] c:\windows\xfsctck.exe
    O4 - HKCU\..\RunServices: [ffkpbhy] c:\windows\xfsctck.exe
    O4 - HKCU\..\RunServices: [iflcrmx] c:\windows\xfsctck.exe
    O4 - HKCU\..\RunServices: [pnglpvv] c:\windows\xfsctck.exe
    O4 - HKCU\..\RunServices: [haejycc] c:\windows\xfsctck.exe
    O4 - HKCU\..\RunServices: [smkgjwo] c:\windows\xfsctck.exe
    O4 - HKCU\..\RunServices: [qbukitq] c:\windows\xfsctck.exe
    O4 - HKCU\..\RunServices: [hvtorei] c:\windows\xfsctck.exe
    O4 - HKCU\..\RunServices: [trylsgb] c:\windows\xfsctck.exe
    O4 - HKCU\..\RunServices: [tlaqqqe] c:\windows\xfsctck.exe
    O4 - HKCU\..\RunServices: [qkdkdvw] c:\windows\xfsctck.exe
    O4 - HKCU\..\RunServices: [euoymhi] c:\windows\xfsctck.exe
    O4 - HKCU\..\RunServices: [lhyojml] c:\windows\xfsctck.exe
    O4 - HKCU\..\RunServices: [cugujxg] c:\windows\xfsctck.exe
    O4 - HKCU\..\RunServices: [puvihku] c:\windows\xfsctck.exe
    O4 - HKCU\..\RunServices: [ygqvhfq] c:\windows\xfsctck.exe
    O4 - HKCU\..\RunServices: [ntpcbrq] c:\windows\tbdvfin.exe
    O4 - HKCU\..\RunServices: [tscbjuv] c:\windows\tbdvfin.exe
    O4 - HKCU\..\RunServices: [jifjnkk] c:\windows\vaffywp.exe
    O4 - HKCU\..\RunServices: [isnptnb] c:\windows\vaffywp.exe
    O4 - HKCU\..\RunServices: [pamryig] c:\windows\vaffywp.exe
    O4 - HKCU\..\RunServices: [tliijag] c:\windows\vaffywp.exe
    O4 - HKCU\..\RunServices: [ciarcwd] c:\windows\vaffywp.exe
    O4 - HKCU\..\RunServices: [plehpsc] c:\windows\vaffywp.exe
    O4 - HKCU\..\RunServices: [arqohds] c:\windows\vaffywp.exe
    O4 - HKCU\..\RunServices: [ymildvn] c:\windows\vaffywp.exe
    O4 - HKCU\..\RunServices: [gdmwike] c:\windows\vaffywp.exe
    O4 - HKCU\..\RunServices: [oeimswf] c:\windows\vaffywp.exe
    O4 - HKCU\..\RunServices: [ibfwvca] c:\windows\vaffywp.exe
    O4 - HKCU\..\RunServices: [uxwtxbx] c:\windows\srskdgw.exe
    O4 - HKCU\..\RunServices: [bxokpuv] c:\windows\srskdgw.exe
    O4 - HKCU\..\RunServices: [uktbcms] c:\windows\srskdgw.exe
    O4 - HKCU\..\RunServices: [rjotcxc] c:\windows\srskdgw.exe
    O4 - HKCU\..\RunServices: [qkhnyme] c:\windows\srskdgw.exe
    O4 - HKCU\..\RunServices: [yhbjrds] c:\windows\srskdgw.exe
    O4 - HKCU\..\RunServices: [fjkphem] c:\windows\srskdgw.exe
    O4 - HKCU\..\RunServices: [qtkrxij] c:\windows\srskdgw.exe
    O4 - HKCU\..\RunServices: [etfqsle] c:\windows\srskdgw.exe
    O4 - HKCU\..\RunServices: [oakjmjf] c:\windows\srskdgw.exe
    O4 - HKCU\..\RunServices: [ecrrwpm] c:\windows\srskdgw.exe
    O4 - HKCU\..\RunServices: [jqgatyj] c:\windows\srskdgw.exe
    O4 - HKCU\..\RunServices: [dkmuhvh] c:\windows\srskdgw.exe
    O4 - HKCU\..\RunServices: [illcnln] c:\windows\srskdgw.exe
    O4 - HKCU\..\RunServices: [qyofluc] c:\windows\srskdgw.exe
    O4 - HKCU\..\RunServices: [hubomdo] c:\windows\srskdgw.exe
    O4 - HKCU\..\RunServices: [icininn] c:\windows\srskdgw.exe
    O4 - HKCU\..\RunServices: [kiqiare] c:\windows\srskdgw.exe
    O4 - HKCU\..\RunServices: [gwemfpt] c:\windows\srskdgw.exe
    O4 - HKCU\..\RunServices: [lbplbmn] c:\windows\srskdgw.exe
    O4 - HKCU\..\RunServices: [nmvqjxc] c:\windows\srskdgw.exe
    O4 - HKCU\..\RunServices: [njlhshf] c:\windows\srskdgw.exe
    O4 - HKCU\..\RunServices: [ygercgi] c:\windows\srskdgw.exe
    O4 - HKCU\..\RunServices: [mdafodb] c:\windows\srskdgw.exe
    O4 - HKCU\..\RunServices: [mwjdouu] c:\windows\srskdgw.exe
    O4 - HKCU\..\RunServices: [yawobay] c:\windows\srskdgw.exe
    O4 - HKCU\..\RunServices: [fhdwtgn] c:\windows\srskdgw.exe
    O4 - HKCU\..\RunServices: [qhaxbby] c:\windows\srskdgw.exe
    O4 - HKCU\..\RunServices: [ubxqryo] c:\windows\srskdgw.exe
    O4 - HKCU\..\RunServices: [mayoraf] c:\windows\srskdgw.exe
    O4 - HKCU\..\RunServices: [safgjvh] c:\windows\srskdgw.exe
    O4 - HKCU\..\RunServices: [lcqmnxd] c:\windows\srskdgw.exe
    O4 - HKCU\..\RunServices: [uptlaxu] c:\windows\srskdgw.exe
    O4 - HKCU\..\RunServices: [igxmvjr] c:\windows\srskdgw.exe
    O4 - HKCU\..\RunServices: [ntgfnxi] c:\windows\srskdgw.exe
    O4 - HKCU\..\RunServices: [wwktvti] c:\windows\srskdgw.exe
    O4 - HKCU\..\RunServices: [ryptjnu] c:\windows\srskdgw.exe
    O4 - HKCU\..\RunServices: [ykypayq] c:\windows\srskdgw.exe
    O4 - HKCU\..\RunServices: [wxntkol] c:\windows\srskdgw.exe
    O4 - HKCU\..\RunServices: [itvtqoj] c:\windows\srskdgw.exe
    O4 - HKCU\..\RunServices: [gafwxui] c:\windows\srskdgw.exe
    O4 - HKCU\..\RunServices: [folnbyd] c:\windows\srskdgw.exe
    O4 - HKCU\..\RunServices: [eryontd] c:\windows\srskdgw.exe
    O4 - HKCU\..\RunServices: [hcdvidq] c:\windows\srskdgw.exe
    O4 - HKCU\..\RunServices: [yqwigkw] c:\windows\srskdgw.exe
    O4 - HKCU\..\RunServices: [eykevnm] c:\windows\srskdgw.exe
    O4 - HKCU\..\RunServices: [uqscqev] c:\windows\srskdgw.exe
    O4 - HKCU\..\RunServices: [obcxaoo] c:\windows\srskdgw.exe
    O4 - HKCU\..\RunServices: [snsddnh] c:\windows\srskdgw.exe
    O4 - HKCU\..\RunServices: [aqdfrsv] c:\windows\srskdgw.exe
    O4 - HKCU\..\RunServices: [jmnwxqn] c:\windows\srskdgw.exe
    O4 - HKCU\..\RunServices: [ascqicb] c:\windows\srskdgw.exe
    O4 - HKCU\..\RunServices: [duewrmx] c:\windows\srskdgw.exe
    O4 - HKCU\..\RunServices: [beiaryl] c:\windows\srskdgw.exe
    O4 - HKCU\..\RunServices: [gtevpda] c:\windows\srskdgw.exe
    O4 - HKCU\..\RunServices: [qkgoptu] c:\windows\srskdgw.exe
    O4 - HKCU\..\RunServices: [aumeckl] c:\windows\srskdgw.exe
    O4 - HKCU\..\RunServices: [qhtdesf] c:\windows\srskdgw.exe
    O4 - HKCU\..\RunServices: [vlwbccm] c:\windows\srskdgw.exe
    O4 - HKCU\..\RunServices: [lmuhpca] c:\windows\srskdgw.exe
    O4 - HKCU\..\RunServices: [rsblsxa] c:\windows\srskdgw.exe
    O4 - HKCU\..\RunServices: [esrcilb] c:\windows\srskdgw.exe
    O4 - HKCU\..\RunServices: [iuxlwmy] c:\windows\srskdgw.exe
    O4 - HKCU\..\RunServices: [ibttkrm] c:\windows\srskdgw.exe
    O4 - HKCU\..\RunServices: [tfykywt] c:\windows\srskdgw.exe
    O4 - HKCU\..\RunServices: [vqdyiwi] c:\windows\srskdgw.exe
    O4 - HKCU\..\RunServices: [rwuqmhq] c:\windows\srskdgw.exe
    O4 - HKCU\..\RunServices: [bqfjqai] c:\windows\srskdgw.exe
    O4 - HKCU\..\RunServices: [bdkedch] c:\windows\srskdgw.exe
    O4 - HKCU\..\RunServices: [tpnjcel] c:\windows\srskdgw.exe
    O4 - HKCU\..\RunServices: [ohwgiei] c:\windows\srskdgw.exe
    O4 - HKCU\..\RunServices: [iwqfecf] c:\windows\srskdgw.exe
    O4 - HKCU\..\RunServices: [ohammtb] c:\windows\srskdgw.exe
    O4 - HKCU\..\RunServices: [vyyojdb] c:\windows\srskdgw.exe
    O4 - HKCU\..\RunServices: [iyucsfb] c:\windows\srskdgw.exe
    O4 - HKCU\..\RunServices: [lgsdbdx] c:\windows\srskdgw.exe
    O4 - HKCU\..\RunServices: [kdjsenw] c:\windows\srskdgw.exe
    O4 - HKCU\..\RunServices: [rwvvpgr] c:\windows\srskdgw.exe
    O4 - HKCU\..\RunServices: [wrtiurf] c:\windows\srskdgw.exe
    O4 - HKCU\..\RunServices: [poieohu] c:\windows\srskdgw.exe
    O4 - HKCU\..\RunServices: [uhokbwh] c:\windows\srskdgw.exe
    O4 - HKCU\..\RunServices: [osdrwgb] c:\windows\srskdgw.exe
    O4 - HKCU\..\RunServices: [rwdrnng] c:\windows\srskdgw.exe
    O4 - HKCU\..\RunServices: [lyjkdhd] c:\windows\srskdgw.exe
    O4 - HKCU\..\RunServices: [xjjauyy] c:\windows\srskdgw.exe
    O4 - HKCU\..\RunServices: [kyttxto] c:\windows\srskdgw.exe
    O4 - HKCU\..\RunServices: [xgnhppw] c:\windows\yyrkasm.exe
    O4 - HKCU\..\RunServices: [cljhgpv] c:\windows\yyrkasm.exe
    O4 - HKCU\..\RunServices: [velojrw] c:\windows\yyrkasm.exe
    O4 - HKCU\..\RunServices: [pkcmojs] c:\windows\yyrkasm.exe
    O4 - HKCU\..\RunServices: [rkvgjdk] c:\windows\yyrkasm.exe
    O4 - HKCU\..\RunServices: [gboghdq] c:\windows\yyrkasm.exe
    O4 - HKCU\..\RunServices: [tmwmyfv] c:\windows\yyrkasm.exe
    O4 - HKCU\..\RunServices: [hkcixsi] c:\windows\yyrkasm.exe
    O4 - HKCU\..\RunServices: [sjfjmac] c:\windows\yyrkasm.exe
    O4 - HKCU\..\RunServices: [cukpyka] c:\windows\yyrkasm.exe
    O4 - HKCU\..\RunServices: [lrxxiax] c:\windows\yyrkasm.exe
    O4 - HKCU\..\RunServices: [lxkscen] c:\windows\yyrkasm.exe
    O4 - HKCU\..\RunServices: [pfdogkv] c:\windows\yyrkasm.exe
    O4 - HKCU\..\RunServices: [cewhxei] c:\windows\yyrkasm.exe
    O4 - HKCU\..\RunServices: [jnxupmi] c:\windows\yyrkasm.exe
    O4 - HKCU\..\RunServices: [eloclrr] c:\windows\yyrkasm.exe
    O4 - HKCU\..\RunServices: [klhhrnt] c:\windows\yyrkasm.exe
    O4 - HKCU\..\RunServices: [cewvqjv] c:\windows\yyrkasm.exe
    O4 - HKCU\..\RunServices: [qibagtd] c:\windows\yyrkasm.exe
    O4 - HKCU\..\RunServices: [vpbejrm] c:\windows\yyrkasm.exe
    O4 - HKCU\..\RunServices: [jbjbmou] c:\windows\ogioigl.exe
    O4 - HKCU\..\RunServices: [pboajxq] c:\windows\ogioigl.exe
    O4 - HKCU\..\RunServices: [asecfia] c:\windows\ogioigl.exe
    O4 - HKCU\..\RunServices: [dmdthid] c:\windows\ogioigl.exe
    O4 - HKCU\..\RunServices: [mtbmidf] c:\windows\ogioigl.exe
    O4 - HKCU\..\RunServices: [wjkympq] c:\windows\ogioigl.exe
    O4 - HKCU\..\RunServices: [totqqtp] c:\windows\ogioigl.exe
    O4 - HKCU\..\RunServices: [yimmara] c:\windows\ogioigl.exe
    O4 - HKCU\..\RunServices: [lfjnnkv] c:\windows\ogioigl.exe
    O4 - HKCU\..\RunServices: [sivikxv] c:\windows\ogioigl.exe
    O4 - HKCU\..\RunServices: [kokpgpi] c:\windows\ogioigl.exe
    O4 - HKCU\..\RunServices: [cpsfuqt] c:\windows\ogioigl.exe
    O4 - HKCU\..\RunServices: [wgvecbd] c:\windows\ogioigl.exe
    O4 - HKCU\..\RunServices: [cxnwgtb] c:\windows\ogioigl.exe
    O4 - HKCU\..\RunServices: [ifsptjn] c:\windows\ogioigl.exe
    O4 - HKCU\..\RunServices: [lhhkwbx] c:\windows\ogioigl.exe
    O4 - HKCU\..\RunServices: [rotmnky] c:\windows\ogioigl.exe
    O4 - HKCU\..\RunServices: [cyhwmgh] c:\windows\ogioigl.exe
    O4 - HKCU\..\RunServices: [hpmluqr] c:\windows\ogioigl.exe
    O4 - HKCU\..\RunServices: [vsopuyh] c:\windows\ogioigl.exe
    O4 - HKCU\..\RunServices: [dhrumfa] c:\windows\ogioigl.exe
    O4 - HKCU\..\RunServices: [bgsgckc] c:\windows\ogioigl.exe
    O4 - HKCU\..\RunServices: [ebwgpsv] c:\windows\ogioigl.exe
    O4 - HKCU\..\RunServices: [nimqoco] c:\windows\ogioigl.exe
    O4 - HKCU\..\RunServices: [qqvwvei] c:\windows\ogioigl.exe
    O4 - HKCU\..\RunServices: [hvqshxe] c:\windows\ogioigl.exe
    O4 - HKCU\..\RunServices: [fwbsghe] c:\windows\ogioigl.exe
    O4 - HKCU\..\RunServices: [mjvukqt] c:\windows\ogioigl.exe
    O4 - HKCU\..\RunServices: [uuoeswq] c:\windows\ogioigl.exe
    O4 - HKCU\..\RunServices: [hymfmqp] c:\windows\ogioigl.exe
    O4 - HKCU\..\RunServices: [selghcd] c:\windows\ogioigl.exe
    O4 - HKCU\..\RunServices: [cmsctyk] c:\windows\ogioigl.exe
    O4 - HKCU\..\RunServices: [kiuvgfw] c:\windows\ogioigl.exe
    O4 - HKCU\..\RunServices: [jsptmpj] c:\windows\ogioigl.exe
    O4 - HKCU\..\RunServices: [bfifvqd] c:\windows\ogioigl.exe
    O4 - HKCU\..\RunServices: [dobfifh] c:\windows\ogioigl.exe
    O4 - HKCU\..\RunServices: [dgyassd] c:\windows\suqdqfu.exe
    O4 - HKCU\..\RunServices: [strbbjc] c:\windows\suqdqfu.exe
    O4 - HKCU\..\RunServices: [newpgga] c:\windows\suqdqfu.exe
    O4 - HKCU\..\RunServices: [yrkyewr] c:\windows\igphfei.exe
    O4 - HKCU\..\RunServices: [sfbcayx] c:\windows\igphfei.exe
    O4 - HKCU\..\RunServices: [joiutxw] c:\windows\igphfei.exe
    O4 - HKCU\..\RunServices: [lhsubfh] c:\windows\igphfei.exe
    O4 - HKCU\..\RunServices: [arnfdrd] c:\windows\rfwcndr.exe
    O4 - HKCU\..\RunServices: [vuiiksd] c:\windows\rfwcndr.exe
    O4 - HKCU\..\RunServices: [pclfrkg] c:\windows\rfwcndr.exe
    O4 - HKCU\..\RunServices: [hcxcoik] c:\windows\rfwcndr.exe
    O4 - HKCU\..\RunServices: [ykwojnh] c:\windows\rfwcndr.exe
    O4 - HKCU\..\RunServices: [psuhtat] c:\windows\rfwcndr.exe
    O4 - HKCU\..\RunServices: [wlcjjql] c:\windows\rfwcndr.exe
    O4 - HKCU\..\RunServices: [dnemjjc] c:\windows\rfwcndr.exe
    O4 - HKCU\..\RunServices: [wocrixx] c:\windows\rfwcndr.exe
    O4 - HKCU\..\RunServices: [nwuysin] c:\windows\rfwcndr.exe
    O4 - HKCU\..\RunServices: [owcmpvb] c:\windows\rfwcndr.exe
    O4 - HKCU\..\RunServices: [cfltend] c:\windows\rfwcndr.exe
    O4 - HKCU\..\RunServices: [ntytgon] c:\windows\rfwcndr.exe
    O4 - HKCU\..\RunServices: [bxhauap] c:\windows\rfwcndr.exe
    O4 - HKCU\..\RunServices: [ptoeheq] c:\windows\rfwcndr.exe
    O4 - HKCU\..\RunServices: [cvgnqve] c:\windows\rfwcndr.exe
    O4 - HKCU\..\RunServices: [aqmpwxt] c:\windows\rfwcndr.exe
    O4 - HKCU\..\RunServices: [yoawnrl] c:\windows\rfwcndr.exe
    O4 - HKCU\..\RunServices: [taomxtk] c:\windows\rfwcndr.exe
    O4 - HKCU\..\RunServices: [tmhohce] c:\windows\rfwcndr.exe
    O4 - HKCU\..\RunServices: [abqebng] c:\windows\rfwcndr.exe
    O4 - HKCU\..\RunServices: [yxtoylo] c:\windows\rfwcndr.exe
    O4 - HKCU\..\RunServices: [hmfojwy] c:\windows\rfwcndr.exe
    O4 - HKCU\..\RunServices: [trskvdb] c:\windows\rfwcndr.exe
    O4 - HKCU\..\RunServices: [gekixdo] c:\windows\rfwcndr.exe
    O4 - HKCU\..\RunServices: [dtdgbyq] c:\windows\rfwcndr.exe
    O4 - HKCU\..\RunServices: [cvpddak] c:\windows\rfwcndr.exe
    O4 - HKCU\..\RunServices: [iqdgqyv] c:\windows\rfwcndr.exe
    O4 - HKCU\..\RunServices: [dwrmpui] c:\windows\rfwcndr.exe
    O4 - HKCU\..\RunServices: [enlwdqg] c:\windows\rfwcndr.exe
    O4 - HKCU\..\RunServices: [lbrlsbe] c:\windows\rfwcndr.exe
    O4 - HKCU\..\RunServices: [pjelbcn] c:\windows\rfwcndr.exe
    O4 - HKCU\..\RunServices: [ttfjnfu] c:\windows\rfwcndr.exe
    O4 - HKCU\..\RunServices: [bpvdiya] c:\windows\rfwcndr.exe
    O4 - HKCU\..\RunServices: [fkfwity] c:\windows\rfwcndr.exe
    O4 - HKCU\..\RunServices: [fxsfbma] c:\windows\rfwcndr.exe
    O4 - HKCU\..\RunServices: [xjmovte] c:\windows\rfwcndr.exe
    O4 - HKCU\..\RunServices: [koytapk] c:\windows\rfwcndr.exe
    O4 - HKCU\..\RunServices: [itroynu] c:\windows\rfwcndr.exe
    O4 - HKCU\..\RunServices: [ppvlmxb] c:\windows\rfwcndr.exe
    O4 - HKCU\..\RunServices: [yjvlxuf] c:\windows\rfwcndr.exe
    O4 - HKCU\..\RunServices: [vfepdnr] c:\windows\rfwcndr.exe
    O4 - HKCU\..\RunServices: [lrkbeyv] c:\windows\rfwcndr.exe
    O4 - HKCU\..\RunServices: [ldpeqff] c:\windows\rfwcndr.exe
    O4 - HKCU\..\RunServices: [rtdprvm] c:\windows\rfwcndr.exe
    O4 - HKCU\..\RunServices: [mxhbwhw] c:\windows\rfwcndr.exe
    O4 - HKCU\..\RunServices: [morkwjs] c:\windows\htgtonw.exe
    O4 - HKCU\..\RunServices: [apsxouu] c:\windows\htgtonw.exe
    O4 - HKCU\..\RunServices: [whiwnyu] c:\windows\htgtonw.exe
    O4 - HKCU\..\RunServices: [pjrgskw] c:\windows\htgtonw.exe
    O4 - HKCU\..\RunServices: [abhjtfe] c:\windows\htgtonw.exe
    O4 - HKCU\..\RunServices: [csrrgrq] c:\windows\htgtonw.exe
    O4 - HKCU\..\RunServices: [fkjnywq] c:\windows\htgtonw.exe
    O4 - HKCU\..\RunServices: [wqhitwp] c:\windows\htgtonw.exe
    O4 - HKCU\..\RunServices: [qncpjjx] c:\windows\htgtonw.exe
    O4 - HKCU\..\RunServices: [wihxrbo] c:\windows\fhlffmm.exe
    O4 - HKCU\..\RunServices: [tmigmfs] c:\windows\bwfbmsd.exe
    O4 - HKCU\..\RunServices: [xoolhyu] c:\windows\bwfbmsd.exe
    O4 - HKCU\..\RunServices: [ffqgomx] c:\windows\bwfbmsd.exe
    O4 - HKCU\..\RunServices: [iqfusqn] c:\windows\bwfbmsd.exe
    O4 - HKCU\..\RunServices: [onndkgg] c:\windows\bwfbmsd.exe
    O4 - HKCU\..\RunServices: [jhxmehd] c:\windows\bwfbmsd.exe
    O4 - HKCU\..\RunServices: [xvcxrcx] c:\windows\bwfbmsd.exe
    O4 - HKCU\..\RunServices: [xsqcrle] c:\windows\bwfbmsd.exe
    O4 - HKCU\..\RunServices: [udlgpvd] c:\windows\bwfbmsd.exe
    O4 - HKCU\..\RunServices: [vyohiku] c:\windows\bwfbmsd.exe
    O4 - HKCU\..\RunServices: [bxcxsrr] c:\windows\bwfbmsd.exe
    O4 - HKCU\..\RunServices: [tfpkosh] c:\windows\bwfbmsd.exe
    O4 - HKCU\..\RunServices: [prnukhn] c:\windows\bwfbmsd.exe
    O4 - HKCU\..\RunServices: [cauddff] c:\windows\bwfbmsd.exe
    O4 - HKCU\..\RunServices: [sqwdsmq] c:\windows\bwfbmsd.exe
    O4 - HKCU\..\RunServices: [torspfb] c:\windows\bwfbmsd.exe
    O4 - HKCU\..\RunServices: [ootxafk] c:\windows\bwfbmsd.exe
    O4 - HKCU\..\RunServices: [nmrglyp] c:\windows\bwfbmsd.exe
    O4 - HKCU\..\RunServices: [qdqrant] c:\windows\bwfbmsd.exe
    O4 - HKCU\..\RunServices: [ykumovr] c:\windows\bwfbmsd.exe
    O4 - HKCU\..\RunServices: [ppevkht] c:\windows\bwfbmsd.exe
    O4 - HKCU\..\RunServices: [juewobr] c:\windows\bwfbmsd.exe
    O4 - HKCU\..\RunServices: [surveau] c:\windows\bwfbmsd.exe
    O4 - HKCU\..\RunServices: [nyqxmof] c:\windows\bwfbmsd.exe
    O4 - HKCU\..\RunServices: [vdhghwf] c:\windows\bwfbmsd.exe
    O4 - HKCU\..\RunServices: [jnqrcox] c:\windows\bwfbmsd.exe
    O4 - HKCU\..\RunServices: [aiykbkt] c:\windows\bwfbmsd.exe
    O4 - HKCU\..\RunServices: [ubaatvk] c:\windows\bwfbmsd.exe
    O4 - HKCU\..\RunServices: [ognhcwj] c:\windows\bwfbmsd.exe
    O4 - HKCU\..\RunServices: [uaopxbb] c:\windows\bwfbmsd.exe
    O4 - HKCU\..\RunServices: [vdstqun] c:\windows\bwfbmsd.exe
    O4 - HKCU\..\RunServices: [ckitbnu] c:\windows\bwfbmsd.exe
    O4 - HKCU\..\RunServices: [jwqvuch] c:\windows\bwfbmsd.exe
    O4 - HKCU\..\RunServices: [mbligfl] c:\windows\bwfbmsd.exe
    O4 - HKCU\..\RunServices: [qerbaua] c:\windows\bwfbmsd.exe
    O4 - HKCU\..\RunServices: [suephip] c:\windows\bwfbmsd.exe
    O4 - HKCU\..\RunServices: [rgducea] c:\windows\bwfbmsd.exe
    O4 - HKCU\..\RunServices: [spvjips] c:\windows\bwfbmsd.exe
    O4 - HKCU\..\RunServices: [upmnfau] c:\windows\bwfbmsd.exe
    O4 - HKCU\..\RunServices: [uikgjsn] c:\windows\bwfbmsd.exe
    O4 - HKCU\..\RunServices: [douyygu] c:\windows\bwfbmsd.exe
    O4 - HKCU\..\RunServices: [bligqgy] c:\windows\bwfbmsd.exe
    O4 - HKCU\..\RunServices: [smjpiyo] c:\windows\bwfbmsd.exe
    O4 - HKCU\..\RunServices: [ljaajnx] c:\windows\bwfbmsd.exe
    O4 - HKCU\..\RunServices: [fwcpapt] c:\windows\bwfbmsd.exe
    O4 - HKCU\..\RunServices: [lwerojh] c:\windows\bwfbmsd.exe
    O4 - HKCU\..\RunServices: [ulibirk] c:\windows\bwfbmsd.exe
    O4 - HKCU\..\RunServices: [jdgblnn] c:\windows\bwfbmsd.exe
    O4 - HKCU\..\RunServices: [hpljakd] c:\windows\bwfbmsd.exe
    O4 - HKCU\..\RunServices: [bntuocf] c:\windows\bwfbmsd.exe
    O4 - HKCU\..\RunServices: [eirfyhj] c:\windows\bwfbmsd.exe
    O4 - HKCU\..\RunServices: [dkcmnjp] c:\windows\bwfbmsd.exe
    O4 - HKCU\..\RunServices: [ohxnegu] c:\windows\bwfbmsd.exe
    O4 - HKCU\..\RunServices: [esxjydf] c:\windows\bwfbmsd.exe
    O4 - HKCU\..\RunServices: [tbpeuvu] c:\windows\bwfbmsd.exe
    O4 - HKCU\..\RunServices: [wexsnbo] c:\windows\bwfbmsd.exe
    O4 - HKCU\..\RunServices: [beoiyav] c:\windows\bwfbmsd.exe
    O4 - HKCU\..\RunServices: [hnntaly] c:\windows\bwfbmsd.exe
    O4 - HKCU\..\RunServices: [jyiydyy] c:\windows\bwfbmsd.exe
    O4 - HKCU\..\RunServices: [ilrkgpi] c:\windows\bwfbmsd.exe
    O4 - HKCU\..\RunServices: [lvamjog] c:\windows\kribvlh.exe
    O4 - HKCU\..\RunServices: [cunqjce] c:\windows\kribvlh.exe
    O4 - HKCU\..\RunServices: [jlfnjcu] c:\windows\kribvlh.exe
    O4 - HKCU\..\RunServices: [nkmoqgt] c:\windows\kribvlh.exe
    O4 - HKCU\..\RunServices: [woagqwm] c:\windows\kribvlh.exe
    O4 - HKCU\..\RunServices: [mpvmcvc] c:\windows\kribvlh.exe
    O4 - HKCU\..\RunServices: [uqdumqf] c:\windows\kribvlh.exe
    O4 - HKCU\..\RunServices: [nsjahxs] c:\windows\kribvlh.exe
    O4 - HKCU\..\RunServices: [nygqrvb] c:\windows\kribvlh.exe
    O4 - HKCU\..\RunServices: [fwlbjmu] c:\windows\kribvlh.exe
    O4 - HKCU\..\RunServices: [rjdcvgl] c:\windows\kribvlh.exe
    O4 - HKCU\..\RunServices: [asqbodh] c:\windows\kribvlh.exe
    O4 - HKCU\..\RunServices: [bhfnupl] c:\windows\kribvlh.exe
    O4 - HKCU\..\RunServices: [oovsylb] c:\windows\kribvlh.exe
    O4 - HKCU\..\RunServices: [khunyty] c:\windows\kribvlh.exe
    O4 - HKCU\..\RunServices: [nqdcbij] c:\windows\kribvlh.exe
    O4 - HKCU\..\RunServices: [mybqxfw] c:\windows\kribvlh.exe
    O4 - HKCU\..\RunServices: [hvwqmbx] c:\windows\kribvlh.exe
    O4 - HKCU\..\RunServices: [bqyguor] c:\windows\kribvlh.exe
    O4 - HKCU\..\RunServices: [sqwcdeq] c:\windows\kribvlh.exe
    O4 - HKCU\..\RunServices: [vcqycut] c:\windows\kribvlh.exe
    O4 - HKCU\..\RunServices: [cjqisas] c:\windows\kribvlh.exe
    O4 - HKCU\..\RunServices: [vdmdaox] c:\windows\kribvlh.exe
    O4 - HKCU\..\RunServices: [wxilwoo] c:\windows\kribvlh.exe
    O4 - HKCU\..\RunServices: [lmlsptx] c:\windows\kribvlh.exe
    O4 - HKCU\..\RunServices: [wnmoekb] c:\windows\kribvlh.exe
    O4 - HKCU\..\RunServices: [qjknhrh] c:\windows\kribvlh.exe
    O4 - HKCU\..\RunServices: [haakcdi] c:\windows\kribvlh.exe
    O4 - HKCU\..\RunServices: [luntubo] c:\windows\kribvlh.exe
    O4 - HKCU\..\RunServices: [nkyukyn] c:\windows\kribvlh.exe
    O4 - HKCU\..\RunServices: [gxuvduq] c:\windows\kribvlh.exe
    O4 - HKCU\..\RunServices: [tsqxcap] c:\windows\kribvlh.exe
    O4 - HKCU\..\RunServices: [ewknjca] c:\windows\kribvlh.exe
    O4 - HKCU\..\RunServices: [wepfrgy] c:\windows\kribvlh.exe
    O4 - HKCU\..\RunServices: [uqqjydc] c:\windows\kribvlh.exe
    O4 - HKCU\..\RunServices: [anxitks] c:\windows\kribvlh.exe
    O4 - HKCU\..\RunServices: [pucoqgu] c:\windows\kribvlh.exe
    O4 - HKCU\..\RunServices: [qeexeuf] c:\windows\kribvlh.exe
    O4 - HKCU\..\RunServices: [nsuvtfv] c:\windows\kribvlh.exe
    O4 - HKCU\..\RunServices: [eusalpm] c:\windows\kribvlh.exe
    O4 - HKCU\..\RunServices: [ucufhwn] c:\windows\kribvlh.exe
    O4 - HKCU\..\RunServices: [kfeemja] c:\windows\kribvlh.exe
    O4 - HKCU\..\RunServices: [tucgihe] c:\windows\kribvlh.exe
    O4 - HKCU\..\RunServices: [curyybd] c:\windows\kribvlh.exe
    O4 - HKCU\..\RunServices: [myhllpx] c:\windows\kribvlh.exe
    O4 - HKCU\..\RunServices: [lqgqdca] c:\windows\kribvlh.exe
    O4 - HKCU\..\RunServices: [tlyiyhj] c:\windows\kribvlh.exe
    O4 - HKCU\..\RunServices: [wxlvivg] c:\windows\kribvlh.exe
    O4 - HKCU\..\RunServices: [dnjjnio] c:\windows\kribvlh.exe
    O4 - HKCU\..\RunServices: [vothxpt] c:\windows\kribvlh.exe
    O4 - HKCU\..\RunServices: [ubsmqfr] c:\windows\kribvlh.exe
    O4 - HKCU\..\RunServices: [kcldbor] c:\windows\kribvlh.exe
    O4 - HKCU\..\RunServices: [uvdyirc] c:\windows\kribvlh.exe
    O4 - HKCU\..\RunServices: [fcxcmkm] c:\windows\kribvlh.exe
    O4 - HKCU\..\RunServices: [ygejrhf] c:\windows\kribvlh.exe
    O4 - HKCU\..\RunServices: [nfmefxb] c:\windows\fvpjlqm.exe
    O4 - HKCU\..\RunServices: [qfpktak] c:\windows\fvpjlqm.exe
    O4 - HKCU\..\RunServices: [ihblkni] c:\windows\fvpjlqm.exe
    O4 - HKCU\..\RunServices: [yjixhei] c:\windows\fvpjlqm.exe
    O4 - HKCU\..\RunServices: [tpyvcxa] c:\windows\fvpjlqm.exe
    O4 - HKCU\..\RunServices: [tgxjbpk] c:\windows\fvpjlqm.exe
    O4 - HKCU\..\RunServices: [uejekwj] c:\windows\fvpjlqm.exe
    O4 - HKCU\..\RunServices: [epywxjn] c:\windows\fvpjlqm.exe
    O4 - HKCU\..\RunServices: [ralscmk] c:\windows\fvpjlqm.exe
    O4 - HKCU\..\RunServices: [diyduin] c:\windows\fvpjlqm.exe
    O4 - HKCU\..\RunServices: [dmsnvrl] c:\windows\fvpjlqm.exe
    O4 - HKCU\..\RunServices: [kjcikdn] c:\windows\fvpjlqm.exe
    O4 - HKCU\..\RunServices: [llmgmnq] c:\windows\fvpjlqm.exe
    O4 - HKCU\..\RunServices: [nycqnou] c:\windows\fvpjlqm.exe
    O4 - HKCU\..\RunServices: [bubvpes] c:\windows\fvpjlqm.exe
    O4 - HKCU\..\RunServices: [kiinqbb] c:\windows\tmsrqfw.exe
    O4 - HKCU\..\RunServices: [okahjst] c:\windows\rkopuww.exe
    O4 - HKCU\..\RunServices: [yuupolx] c:\windows\ynvwsck.exe
    O4 - HKCU\..\RunServices: [wvborob] c:\windows\ynvwsck.exe
    O4 - HKCU\..\RunServices: [fcmqvbr] c:\windows\ynvwsck.exe
    O4 - HKCU\..\RunServices: [jkhtfkj] c:\windows\ynvwsck.exe
    O4 - HKCU\..\RunServices: [msvkbij] c:\windows\ynvwsck.exe
    O4 - HKCU\..\RunServices: [llvesjf] c:\windows\ynvwsck.exe
    O4 - HKCU\..\RunServices: [lerdaeu] c:\windows\uwoxeyv.exe
    O4 - HKCU\..\RunOnce: [mwuaddm] c:\windows\xfsctck.exe
    O4 - HKCU\..\RunOnce: [tsedwto] c:\windows\xfsctck.exe
    O4 - HKCU\..\RunOnce: [pksmiuu] c:\windows\xfsctck.exe
    O4 - HKCU\..\RunOnce: [lkcbnqc] c:\windows\xfsctck.exe
    O4 - HKCU\..\RunOnce: [wiimbvt] c:\windows\xfsctck.exe
    O4 - HKCU\..\RunOnce: [ydaeajj] c:\windows\xfsctck.exe
    O4 - HKCU\..\RunOnce: [ghrlyea] c:\windows\xfsctck.exe
    O4 - HKCU\..\RunOnce: [wagwrad] c:\windows\xfsctck.exe
    O4 - HKCU\..\RunOnce: [tymaoux] c:\windows\xfsctck.exe
    O4 - HKCU\..\RunOnce: [ycyapim] c:\windows\xfsctck.exe
    O4 - HKCU\..\RunOnce: [xvvsyfd] c:\windows\xfsctck.exe
    O4 - HKCU\..\RunOnce: [vihlwsk] c:\windows\xfsctck.exe
    O4 - HKCU\..\RunOnce: [lmvqkod] c:\windows\xfsctck.exe
    O4 - HKCU\..\RunOnce: [ewuqmts] c:\windows\xfsctck.exe
    O4 - HKCU\..\RunOnce: [ekymojj] c:\windows\xfsctck.exe
    O4 - HKCU\..\RunOnce: [yaecbpg] c:\windows\xfsctck.exe
    O4 - HKCU\..\RunOnce: [ilbeynl] c:\windows\xfsctck.exe
    O4 - HKCU\..\RunOnce: [fmmgnpi] c:\windows\xfsctck.exe
    O4 - HKCU\..\RunOnce: [fxoytja] c:\windows\xfsctck.exe
    O4 - HKCU\..\RunOnce: [btkarml] c:\windows\xfsctck.exe
    O4 - HKCU\..\RunOnce: [wbgmstl] c:\windows\xfsctck.exe
    O4 - HKCU\..\RunOnce: [ykascop] c:\windows\xfsctck.exe
    O4 - HKCU\..\RunOnce: [uestrei] c:\windows\xfsctck.exe
    O4 - HKCU\..\RunOnce: [kktwkwo] c:\windows\xfsctck.exe
    O4 - HKCU\..\RunOnce: [ygageyx] c:\windows\xfsctck.exe
    O4 - HKCU\..\RunOnce: [vtxcahr] c:\windows\xfsctck.exe
    O4 - HKCU\..\RunOnce: [wkqgosf] c:\windows\xfsctck.exe
    O4 - HKCU\..\RunOnce: [wubdvax] c:\windows\xfsctck.exe
    O4 - HKCU\..\RunOnce: [vnvbfls] c:\windows\xfsctck.exe
    O4 - HKCU\..\RunOnce: [xbcwuwf] c:\windows\xfsctck.exe
    O4 - HKCU\..\RunOnce: [iqifddr] c:\windows\xfsctck.exe
    O4 - HKCU\..\RunOnce: [bqpnbvd] c:\windows\xfsctck.exe
    O4 - HKCU\..\RunOnce: [qxacccf] c:\windows\xfsctck.exe
    O4 - HKCU\..\RunOnce: [ffkpbhy] c:\windows\xfsctck.exe
    O4 - HKCU\..\RunOnce: [iflcrmx] c:\windows\xfsctck.exe
    O4 - HKCU\..\RunOnce: [pnglpvv] c:\windows\xfsctck.exe
    O4 - HKCU\..\RunOnce: [haejycc] c:\windows\xfsctck.exe
    O4 - HKCU\..\RunOnce: [smkgjwo] c:\windows\xfsctck.exe
    O4 - HKCU\..\RunOnce: [qbukitq] c:\windows\xfsctck.exe
    O4 - HKCU\..\RunOnce: [hvtorei] c:\windows\xfsctck.exe
    O4 - HKCU\..\RunOnce: [trylsgb] c:\windows\xfsctck.exe
    O4 - HKCU\..\RunOnce: [tlaqqqe] c:\windows\xfsctck.exe
    O4 - HKCU\..\RunOnce: [qkdkdvw] c:\windows\xfsctck.exe
    O4 - HKCU\..\RunOnce: [euoymhi] c:\windows\xfsctck.exe
    O4 - HKCU\..\RunOnce: [lhyojml] c:\windows\xfsctck.exe
    O4 - HKCU\..\RunOnce: [cugujxg] c:\windows\xfsctck.exe
    O4 - HKCU\..\RunOnce: [puvihku] c:\windows\xfsctck.exe
    O4 - HKCU\..\RunOnce: [ygqvhfq] c:\windows\xfsctck.exe
    O4 - HKCU\..\RunOnce: [ntpcbrq] c:\windows\tbdvfin.exe
    O4 - HKCU\..\RunOnce: [tscbjuv] c:\windows\tbdvfin.exe
    O4 - HKCU\..\RunOnce: [jifjnkk] c:\windows\vaffywp.exe
    O4 - HKCU\..\RunOnce: [isnptnb] c:\windows\vaffywp.exe
    O4 - HKCU\..\RunOnce: [pamryig] c:\windows\vaffywp.exe
    O4 - HKCU\..\RunOnce: [tliijag] c:\windows\vaffywp.exe
    O4 - HKCU\..\RunOnce: [ciarcwd] c:\windows\vaffywp.exe
    O4 - HKCU\..\RunOnce: [plehpsc] c:\windows\vaffywp.exe
    O4 - HKCU\..\RunOnce: [arqohds] c:\windows\vaffywp.exe
    O4 - HKCU\..\RunOnce: [ymildvn] c:\windows\vaffywp.exe
    O4 - HKCU\..\RunOnce: [gdmwike] c:\windows\vaffywp.exe
    O4 - HKCU\..\RunOnce: [oeimswf] c:\windows\vaffywp.exe
    O4 - HKCU\..\RunOnce: [ibfwvca] c:\windows\vaffywp.exe
    O4 - HKCU\..\RunOnce: [uxwtxbx] c:\windows\srskdgw.exe
    O4 - HKCU\..\RunOnce: [bxokpuv] c:\windows\srskdgw.exe
    O4 - HKCU\..\RunOnce: [uktbcms] c:\windows\srskdgw.exe
    O4 - HKCU\..\RunOnce: [rjotcxc] c:\windows\srskdgw.exe
    O4 - HKCU\..\RunOnce: [qkhnyme] c:\windows\srskdgw.exe
    O4 - HKCU\..\RunOnce: [yhbjrds] c:\windows\srskdgw.exe
    O4 - HKCU\..\RunOnce: [fjkphem] c:\windows\srskdgw.exe
    O4 - HKCU\..\RunOnce: [qtkrxij] c:\windows\srskdgw.exe
    O4 - HKCU\..\RunOnce: [etfqsle] c:\windows\srskdgw.exe
    O4 - HKCU\..\RunOnce: [oakjmjf] c:\windows\srskdgw.exe
    O4 - HKCU\..\RunOnce: [ecrrwpm] c:\windows\srskdgw.exe
    O4 - HKCU\..\RunOnce: [jqgatyj] c:\windows\srskdgw.exe
    O4 - HKCU\..\RunOnce: [dkmuhvh] c:\windows\srskdgw.exe
    O4 - HKCU\..\RunOnce: [illcnln] c:\windows\srskdgw.exe
    O4 - HKCU\..\RunOnce: [qyofluc] c:\windows\srskdgw.exe
    O4 - HKCU\..\RunOnce: [hubomdo] c:\windows\srskdgw.exe
    O4 - HKCU\..\RunOnce: [icininn] c:\windows\srskdgw.exe
    O4 - HKCU\..\RunOnce: [kiqiare] c:\windows\srskdgw.exe
    O4 - HKCU\..\RunOnce: [gwemfpt] c:\windows\srskdgw.exe
    O4 - HKCU\..\RunOnce: [lbplbmn] c:\windows\srskdgw.exe
    O4 - HKCU\..\RunOnce: [nmvqjxc] c:\windows\srskdgw.exe
    O4 - HKCU\..\RunOnce: [njlhshf] c:\windows\srskdgw.exe
    O4 - HKCU\..\RunOnce: [ygercgi] c:\windows\srskdgw.exe
    O4 - HKCU\..\RunOnce: [mdafodb] c:\windows\srskdgw.exe
    O4 - HKCU\..\RunOnce: [mwjdouu] c:\windows\srskdgw.exe
    O4 - HKCU\..\RunOnce: [yawobay] c:\windows\srskdgw.exe
    O4 - HKCU\..\RunOnce: [fhdwtgn] c:\windows\srskdgw.exe
    O4 - HKCU\..\RunOnce: [qhaxbby] c:\windows\srskdgw.exe
    O4 - HKCU\..\RunOnce: [ubxqryo] c:\windows\srskdgw.exe
    O4 - HKCU\..\RunOnce: [mayoraf] c:\windows\srskdgw.exe
    O4 - HKCU\..\RunOnce: [safgjvh] c:\windows\srskdgw.exe
    O4 - HKCU\..\RunOnce: [lcqmnxd] c:\windows\srskdgw.exe
    O4 - HKCU\..\RunOnce: [uptlaxu] c:\windows\srskdgw.exe
    O4 - HKCU\..\RunOnce: [igxmvjr] c:\windows\srskdgw.exe
    O4 - HKCU\..\RunOnce: [ntgfnxi] c:\windows\srskdgw.exe
    O4 - HKCU\..\RunOnce: [wwktvti] c:\windows\srskdgw.exe
    O4 - HKCU\..\RunOnce: [ryptjnu] c:\windows\srskdgw.exe
    O4 - HKCU\..\RunOnce: [ykypayq] c:\windows\srskdgw.exe
    O4 - HKCU\..\RunOnce: [wxntkol] c:\windows\srskdgw.exe
    O4 - HKCU\..\RunOnce: [itvtqoj] c:\windows\srskdgw.exe
    O4 - HKCU\..\RunOnce: [gafwxui] c:\windows\srskdgw.exe
    O4 - HKCU\..\RunOnce: [folnbyd] c:\windows\srskdgw.exe
    O4 - HKCU\..\RunOnce: [eryontd] c:\windows\srskdgw.exe
    O4 - HKCU\..\RunOnce: [hcdvidq] c:\windows\srskdgw.exe
    O4 - HKCU\..\RunOnce: [yqwigkw] c:\windows\srskdgw.exe
    O4 - HKCU\..\RunOnce: [eykevnm] c:\windows\srskdgw.exe
    O4 - HKCU\..\RunOnce: [uqscqev] c:\windows\srskdgw.exe
    O4 - HKCU\..\RunOnce: [obcxaoo] c:\windows\srskdgw.exe
    O4 - HKCU\..\RunOnce: [snsddnh] c:\windows\srskdgw.exe
    O4 - HKCU\..\RunOnce: [aqdfrsv] c:\windows\srskdgw.exe
    O4 - HKCU\..\RunOnce: [jmnwxqn] c:\windows\srskdgw.exe
    O4 - HKCU\..\RunOnce: [ascqicb] c:\windows\srskdgw.exe
    O4 - HKCU\..\RunOnce: [duewrmx] c:\windows\srskdgw.exe
    O4 - HKCU\..\RunOnce: [beiaryl] c:\windows\srskdgw.exe
    O4 - HKCU\..\RunOnce: [gtevpda] c:\windows\srskdgw.exe
    O4 - HKCU\..\RunOnce: [qkgoptu] c:\windows\srskdgw.exe
    O4 - HKCU\..\RunOnce: [aumeckl] c:\windows\srskdgw.exe
    O4 - HKCU\..\RunOnce: [qhtdesf] c:\windows\srskdgw.exe
    O4 - HKCU\..\RunOnce: [vlwbccm] c:\windows\srskdgw.exe
    O4 - HKCU\..\RunOnce: [lmuhpca] c:\windows\srskdgw.exe
    O4 - HKCU\..\RunOnce: [rsblsxa] c:\windows\srskdgw.exe
    O4 - HKCU\..\RunOnce: [esrcilb] c:\windows\srskdgw.exe
    O4 - HKCU\..\RunOnce: [iuxlwmy] c:\windows\srskdgw.exe
    O4 - HKCU\..\RunOnce: [ibttkrm] c:\windows\srskdgw.exe
    O4 - HKCU\..\RunOnce: [tfykywt] c:\windows\srskdgw.exe
    O4 - HKCU\..\RunOnce: [vqdyiwi] c:\windows\srskdgw.exe
    O4 - HKCU\..\RunOnce: [rwuqmhq] c:\windows\srskdgw.exe
    O4 - HKCU\..\RunOnce: [bqfjqai] c:\windows\srskdgw.exe
    O4 - HKCU\..\RunOnce: [bdkedch] c:\windows\srskdgw.exe
    O4 - HKCU\..\RunOnce: [tpnjcel] c:\windows\srskdgw.exe
    O4 - HKCU\..\RunOnce: [ohwgiei] c:\windows\srskdgw.exe
    O4 - HKCU\..\RunOnce: [iwqfecf] c:\windows\srskdgw.exe
    O4 - HKCU\..\RunOnce: [ohammtb] c:\windows\srskdgw.exe
    O4 - HKCU\..\RunOnce: [vyyojdb] c:\windows\srskdgw.exe
    O4 - HKCU\..\RunOnce: [iyucsfb] c:\windows\srskdgw.exe
    O4 - HKCU\..\RunOnce: [lgsdbdx] c:\windows\srskdgw.exe
    O4 - HKCU\..\RunOnce: [kdjsenw] c:\windows\srskdgw.exe
    O4 - HKCU\..\RunOnce: [rwvvpgr] c:\windows\srskdgw.exe
    O4 - HKCU\..\RunOnce: [wrtiurf] c:\windows\srskdgw.exe
    O4 - HKCU\..\RunOnce: [poieohu] c:\windows\srskdgw.exe
    O4 - HKCU\..\RunOnce: [uhokbwh] c:\windows\srskdgw.exe
    O4 - HKCU\..\RunOnce: [osdrwgb] c:\windows\srskdgw.exe
    O4 - HKCU\..\RunOnce: [rwdrnng] c:\windows\srskdgw.exe
    O4 - HKCU\..\RunOnce: [lyjkdhd] c:\windows\srskdgw.exe
    O4 - HKCU\..\RunOnce: [xjjauyy] c:\windows\srskdgw.exe
    O4 - HKCU\..\RunOnce: [kyttxto] c:\windows\srskdgw.exe
    O4 - HKCU\..\RunOnce: [xgnhppw] c:\windows\yyrkasm.exe
    O4 - HKCU\..\RunOnce: [cljhgpv] c:\windows\yyrkasm.exe
    O4 - HKCU\..\RunOnce: [velojrw] c:\windows\yyrkasm.exe
    O4 - HKCU\..\RunOnce: [pkcmojs] c:\windows\yyrkasm.exe
    O4 - HKCU\..\RunOnce: [rkvgjdk] c:\windows\yyrkasm.exe
    O4 - HKCU\..\RunOnce: [gboghdq] c:\windows\yyrkasm.exe
    O4 - HKCU\..\RunOnce: [tmwmyfv] c:\windows\yyrkasm.exe
    O4 - HKCU\..\RunOnce: [hkcixsi] c:\windows\yyrkasm.exe
    O4 - HKCU\..\RunOnce: [sjfjmac] c:\windows\yyrkasm.exe
    O4 - HKCU\..\RunOnce: [cukpyka] c:\windows\yyrkasm.exe
    O4 - HKCU\..\RunOnce: [lrxxiax] c:\windows\yyrkasm.exe
    O4 - HKCU\..\RunOnce: [lxkscen] c:\windows\yyrkasm.exe
    O4 - HKCU\..\RunOnce: [pfdogkv] c:\windows\yyrkasm.exe
    O4 - HKCU\..\RunOnce: [cewhxei] c:\windows\yyrkasm.exe
    O4 - HKCU\..\RunOnce: [jnxupmi] c:\windows\yyrkasm.exe
    O4 - HKCU\..\RunOnce: [eloclrr] c:\windows\yyrkasm.exe
    O4 - HKCU\..\RunOnce: [klhhrnt] c:\windows\yyrkasm.exe
    O4 - HKCU\..\RunOnce: [cewvqjv] c:\windows\yyrkasm.exe
    O4 - HKCU\..\RunOnce: [qibagtd] c:\windows\yyrkasm.exe
    O4 - HKCU\..\RunOnce: [vpbejrm] c:\windows\yyrkasm.exe
    O4 - HKCU\..\RunOnce: [jbjbmou] c:\windows\ogioigl.exe
    O4 - HKCU\..\RunOnce: [pboajxq] c:\windows\ogioigl.exe
    O4 - HKCU\..\RunOnce: [asecfia] c:\windows\ogioigl.exe
    O4 - HKCU\..\RunOnce: [dmdthid] c:\windows\ogioigl.exe
    O4 - HKCU\..\RunOnce: [mtbmidf] c:\windows\ogioigl.exe
    O4 - HKCU\..\RunOnce: [wjkympq] c:\windows\ogioigl.exe
    O4 - HKCU\..\RunOnce: [totqqtp] c:\windows\ogioigl.exe
    O4 - HKCU\..\RunOnce: [yimmara] c:\windows\ogioigl.exe
    O4 - HKCU\..\RunOnce: [lfjnnkv] c:\windows\ogioigl.exe
    O4 - HKCU\..\RunOnce: [sivikxv] c:\windows\ogioigl.exe
    O4 - HKCU\..\RunOnce: [kokpgpi] c:\windows\ogioigl.exe
    O4 - HKCU\..\RunOnce: [cpsfuqt] c:\windows\ogioigl.exe
    O4 - HKCU\..\RunOnce: [wgvecbd] c:\windows\ogioigl.exe
    O4 - HKCU\..\RunOnce: [cxnwgtb] c:\windows\ogioigl.exe
    O4 - HKCU\..\RunOnce: [ifsptjn] c:\windows\ogioigl.exe
    O4 - HKCU\..\RunOnce: [lhhkwbx] c:\windows\ogioigl.exe
    O4 - HKCU\..\RunOnce: [rotmnky] c:\windows\ogioigl.exe
    O4 - HKCU\..\RunOnce: [cyhwmgh] c:\windows\ogioigl.exe
    O4 - HKCU\..\RunOnce: [hpmluqr] c:\windows\ogioigl.exe
    O4 - HKCU\..\RunOnce: [vsopuyh] c:\windows\ogioigl.exe
    O4 - HKCU\..\RunOnce: [dhrumfa] c:\windows\ogioigl.exe
    O4 - HKCU\..\RunOnce: [bgsgckc] c:\windows\ogioigl.exe
    O4 - HKCU\..\RunOnce: [ebwgpsv] c:\windows\ogioigl.exe
    O4 - HKCU\..\RunOnce: [nimqoco] c:\windows\ogioigl.exe
    O4 - HKCU\..\RunOnce: [qqvwvei] c:\windows\ogioigl.exe
    O4 - HKCU\..\RunOnce: [hvqshxe] c:\windows\ogioigl.exe
    O4 - HKCU\..\RunOnce: [fwbsghe] c:\windows\ogioigl.exe
    O4 - HKCU\..\RunOnce: [mjvukqt] c:\windows\ogioigl.exe
    O4 - HKCU\..\RunOnce: [uuoeswq] c:\windows\ogioigl.exe
    O4 - HKCU\..\RunOnce: [hymfmqp] c:\windows\ogioigl.exe
    O4 - HKCU\..\RunOnce: [selghcd] c:\windows\ogioigl.exe
    O4 - HKCU\..\RunOnce: [cmsctyk] c:\windows\ogioigl.exe
    O4 - HKCU\..\RunOnce: [kiuvgfw] c:\windows\ogioigl.exe
    O4 - HKCU\..\RunOnce: [jsptmpj] c:\windows\ogioigl.exe
    O4 - HKCU\..\RunOnce: [bfifvqd] c:\windows\ogioigl.exe
    O4 - HKCU\..\RunOnce: [dobfifh] c:\windows\ogioigl.exe
    O4 - HKCU\..\RunOnce: [dgyassd] c:\windows\suqdqfu.exe
    O4 - HKCU\..\RunOnce: [strbbjc] c:\windows\suqdqfu.exe
    O4 - HKCU\..\RunOnce: [newpgga] c:\windows\suqdqfu.exe
    O4 - HKCU\..\RunOnce: [yrkyewr] c:\windows\igphfei.exe
    O4 - HKCU\..\RunOnce: [sfbcayx] c:\windows\igphfei.exe
    O4 - HKCU\..\RunOnce: [joiutxw] c:\windows\igphfei.exe
    O4 - HKCU\..\RunOnce: [lhsubfh] c:\windows\igphfei.exe
    O4 - HKCU\..\RunOnce: [arnfdrd] c:\windows\rfwcndr.exe
    O4 - HKCU\..\RunOnce: [vuiiksd] c:\windows\rfwcndr.exe
    O4 - HKCU\..\RunOnce: [pclfrkg] c:\windows\rfwcndr.exe
    O4 - HKCU\..\RunOnce: [hcxcoik] c:\windows\rfwcndr.exe
    O4 - HKCU\..\RunOnce: [ykwojnh] c:\windows\rfwcndr.exe
    O4 - HKCU\..\RunOnce: [psuhtat] c:\windows\rfwcndr.exe
    O4 - HKCU\..\RunOnce: [wlcjjql] c:\windows\rfwcndr.exe
    O4 - HKCU\..\RunOnce: [dnemjjc] c:\windows\rfwcndr.exe
    O4 - HKCU\..\RunOnce: [wocrixx] c:\windows\rfwcndr.exe
    O4 - HKCU\..\RunOnce: [nwuysin] c:\windows\rfwcndr.exe
    O4 - HKCU\..\RunOnce: [owcmpvb] c:\windows\rfwcndr.exe
    O4 - HKCU\..\RunOnce: [cfltend] c:\windows\rfwcndr.exe
    O4 - HKCU\..\RunOnce: [ntytgon] c:\windows\rfwcndr.exe
    O4 - HKCU\..\RunOnce: [bxhauap] c:\windows\rfwcndr.exe
    O4 - HKCU\..\RunOnce: [ptoeheq] c:\windows\rfwcndr.exe
    O4 - HKCU\..\RunOnce: [cvgnqve] c:\windows\rfwcndr.exe
    O4 - HKCU\..\RunOnce: [aqmpwxt] c:\windows\rfwcndr.exe
    O4 - HKCU\..\RunOnce: [yoawnrl] c:\windows\rfwcndr.exe
    O4 - HKCU\..\RunOnce: [taomxtk] c:\windows\rfwcndr.exe
    O4 - HKCU\..\RunOnce: [tmhohce] c:\windows\rfwcndr.exe
    O4 - HKCU\..\RunOnce: [abqebng] c:\windows\rfwcndr.exe
    O4 - HKCU\..\RunOnce: [yxtoylo] c:\windows\rfwcndr.exe
    O4 - HKCU\..\RunOnce: [hmfojwy] c:\windows\rfwcndr.exe
    O4 - HKCU\..\RunOnce: [trskvdb] c:\windows\rfwcndr.exe
    O4 - HKCU\..\RunOnce: [gekixdo] c:\windows\rfwcndr.exe
    O4 - HKCU\..\RunOnce: [dtdgbyq] c:\windows\rfwcndr.exe
    O4 - HKCU\..\RunOnce: [cvpddak] c:\windows\rfwcndr.exe
    O4 - HKCU\..\RunOnce: [iqdgqyv] c:\windows\rfwcndr.exe
    O4 - HKCU\..\RunOnce: [dwrmpui] c:\windows\rfwcndr.exe
    O4 - HKCU\..\RunOnce: [enlwdqg] c:\windows\rfwcndr.exe
    O4 - HKCU\..\RunOnce: [lbrlsbe] c:\windows\rfwcndr.exe
    O4 - HKCU\..\RunOnce: [pjelbcn] c:\windows\rfwcndr.exe
    O4 - HKCU\..\RunOnce: [ttfjnfu] c:\windows\rfwcndr.exe
    O4 - HKCU\..\RunOnce: [bpvdiya] c:\windows\rfwcndr.exe
    O4 - HKCU\..\RunOnce: [fkfwity] c:\windows\rfwcndr.exe
    O4 - HKCU\..\RunOnce: [fxsfbma] c:\windows\rfwcndr.exe
    O4 - HKCU\..\RunOnce: [xjmovte] c:\windows\rfwcndr.exe
    O4 - HKCU\..\RunOnce: [koytapk] c:\windows\rfwcndr.exe
    O4 - HKCU\..\RunOnce: [itroynu] c:\windows\rfwcndr.exe
    O4 - HKCU\..\RunOnce: [ppvlmxb] c:\windows\rfwcndr.exe
    O4 - HKCU\..\RunOnce: [yjvlxuf] c:\windows\rfwcndr.exe
    O4 - HKCU\..\RunOnce: [vfepdnr] c:\windows\rfwcndr.exe
    O4 - HKCU\..\RunOnce: [lrkbeyv] c:\windows\rfwcndr.exe
    O4 - HKCU\..\RunOnce: [ldpeqff] c:\windows\rfwcndr.exe
    O4 - HKCU\..\RunOnce: [rtdprvm] c:\windows\rfwcndr.exe
    O4 - HKCU\..\RunOnce: [mxhbwhw] c:\windows\rfwcndr.exe
    O4 - HKCU\..\RunOnce: [morkwjs] c:\windows\htgtonw.exe
    O4 - HKCU\..\RunOnce: [apsxouu] c:\windows\htgtonw.exe
    O4 - HKCU\..\RunOnce: [whiwnyu] c:\windows\htgtonw.exe
    O4 - HKCU\..\RunOnce: [pjrgskw] c:\windows\htgtonw.exe
    O4 - HKCU\..\RunOnce: [abhjtfe] c:\windows\htgtonw.exe
    O4 - HKCU\..\RunOnce: [csrrgrq] c:\windows\htgtonw.exe
    O4 - HKCU\..\RunOnce: [fkjnywq] c:\windows\htgtonw.exe
    O4 - HKCU\..\RunOnce: [wqhitwp] c:\windows\htgtonw.exe
    O4 - HKCU\..\RunOnce: [qncpjjx] c:\windows\htgtonw.exe
    O4 - HKCU\..\RunOnce: [wihxrbo] c:\windows\fhlffmm.exe
    O4 - HKCU\..\RunOnce: [tmigmfs] c:\windows\bwfbmsd.exe
    O4 - HKCU\..\RunOnce: [xoolhyu] c:\windows\bwfbmsd.exe
    O4 - HKCU\..\RunOnce: [ffqgomx] c:\windows\bwfbmsd.exe
    O4 - HKCU\..\RunOnce: [iqfusqn] c:\windows\bwfbmsd.exe
    O4 - HKCU\..\RunOnce: [onndkgg] c:\windows\bwfbmsd.exe
    O4 - HKCU\..\RunOnce: [jhxmehd] c:\windows\bwfbmsd.exe
    O4 - HKCU\..\RunOnce: [xvcxrcx] c:\windows\bwfbmsd.exe
    O4 - HKCU\..\RunOnce: [xsqcrle] c:\windows\bwfbmsd.exe
    O4 - HKCU\..\RunOnce: [udlgpvd] c:\windows\bwfbmsd.exe
    O4 - HKCU\..\RunOnce: [vyohiku] c:\windows\bwfbmsd.exe
    O4 - HKCU\..\RunOnce: [bxcxsrr] c:\windows\bwfbmsd.exe
    O4 - HKCU\..\RunOnce: [tfpkosh] c:\windows\bwfbmsd.exe
    O4 - HKCU\..\RunOnce: [prnukhn] c:\windows\bwfbmsd.exe
    O4 - HKCU\..\RunOnce: [cauddff] c:\windows\bwfbmsd.exe
    O4 - HKCU\..\RunOnce: [sqwdsmq] c:\windows\bwfbmsd.exe
    O4 - HKCU\..\RunOnce: [torspfb] c:\windows\bwfbmsd.exe
    O4 - HKCU\..\RunOnce: [ootxafk] c:\windows\bwfbmsd.exe
    O4 - HKCU\..\RunOnce: [nmrglyp] c:\windows\bwfbmsd.exe
    O4 - HKCU\..\RunOnce: [qdqrant] c:\windows\bwfbmsd.exe
    O4 - HKCU\..\RunOnce: [ykumovr] c:\windows\bwfbmsd.exe
    O4 - HKCU\..\RunOnce: [ppevkht] c:\windows\bwfbmsd.exe
    O4 - HKCU\..\RunOnce: [juewobr] c:\windows\bwfbmsd.exe
    O4 - HKCU\..\RunOnce: [surveau] c:\windows\bwfbmsd.exe
    O4 - HKCU\..\RunOnce: [nyqxmof] c:\windows\bwfbmsd.exe
    O4 - HKCU\..\RunOnce: [vdhghwf] c:\windows\bwfbmsd.exe
    O4 - HKCU\..\RunOnce: [jnqrcox] c:\windows\bwfbmsd.exe
    O4 - HKCU\..\RunOnce: [aiykbkt] c:\windows\bwfbmsd.exe
    O4 - HKCU\..\RunOnce: [ubaatvk] c:\windows\bwfbmsd.exe
    O4 - HKCU\..\RunOnce: [ognhcwj] c:\windows\b

    Proponuję też usunąć Fashget-a i wszelkie ToolBary.
    Jeżeli już musisz używać IE, to zainstaluj IE 6.0 i łaty do niego
  • #7 1424837
    Daevon
    Poziom 11  
    jeszcze jedno: bo ja używam Mozilli, ale pytanie, czy można całkiem usunąć przegladarkę explorer bez szkody dla innych programów?
  • #8 1424926
    Radzious
    Poziom 28  
    mozna usunąc
    PS. niezła sieczke masz
  • #9 1424976
    Daevon
    Poziom 11  
    teraz już wiem, ale dziwne, skąd tyle tego się nabrało skoro niedawno robiłem formata... ale tej sieczki juz nie ma, właśnie wszystko wywaliłem, ale gr tak samo chodzą, może przybyło 2 klatki .....
  • #10 1425233
    Hanibal
    Poziom 12  
    Radzious napisał:
    mozna usunąc

    Nie można usunąć IE, bo jest wbudowany w jądro
  • #11 1425423
    md
    Poziom 41  
    Daevon napisał:
    ale tej sieczki juz nie ma, właśnie wszystko wywaliłem, ale gr tak samo chodzą, może przybyło 2 klatki .....

    NIe jestem pewien, że nie masz sieczki, skoro brak poprawy. Użyj jeszcze raz Hijackthis i sprawdź log.
  • #12 1425523
    Daevon
    Poziom 11  
    Logfile of HijackThis v1.99.1
    Scan saved at 19:04:43, on 05-04-21
    Platform: Windows 98 SE (Win9x 4.10.2222A)
    MSIE: Internet Explorer v5.00 (5.00.2614.3500)

    Running processes:
    C:\WINDOWS\SYSTEM\KERNEL32.DLL
    C:\WINDOWS\SYSTEM\MSGSRV32.EXE
    C:\WINDOWS\SYSTEM\MPREXE.EXE
    C:\WINDOWS\SYSTEM\MSTASK.EXE
    C:\WINDOWS\SYSTEM\mmtask.tsk
    C:\PROGRAM FILES\KERIO\PERSONAL FIREWALL\PERSFW.EXE
    C:\PROGRAM FILES\ALWIL SOFTWARE\AVAST4\ASHSERV.EXE
    C:\WINDOWS\SYSTEM\SPOOLSRV32.EXE
    C:\WINDOWS\EXPLORER.EXE
    C:\WINDOWS\SYSTEM\RPCSS.EXE
    C:\WINDOWS\TASKMON.EXE
    C:\WINDOWS\SYSTEM\SYSTRAY.EXE
    C:\PROGRAM FILES\ALWIL SOFTWARE\AVAST4\ASHWEBSV.EXE
    C:\WINDOWS\SYSTEM\DDHELP.EXE
    C:\PROGRAM FILES\REALTEK\RTL8180\RTLWAKE.EXE
    C:\PROGRAM FILES\GADU-GADU\GG.EXE
    C:\PROGRAM FILES\HT\HIJACKTHIS.EXE

    R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Search Bar = http://wind-find.com/sp.htm
    R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Search Page = http://wind-find.com/index.htm
    R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = http://www.hotoffers.info/271/
    R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = http://www.eu.microsoft.com/poland/
    R0 - HKLM\Software\Microsoft\Internet Explorer\Search,SearchAssistant = http://wind-find.com/sp.htm
    R1 - HKCU\Software\Microsoft\Internet Explorer\SearchURL,(Default) = http://wind-find.com/index.htm
    R0 - HKCU\Software\Microsoft\Internet Explorer\Toolbar,LinksFolderName = Łącza
    O2 - BHO: AcroIEHlprObj Class - {06849E9F-C8D7-4D59-B87D-784B7D6BE0B3} - C:\PROGRAM FILES\ADOBE\ACROBAT 5.0\READER\ACTIVEX\ACROIEHELPER.OCX
    O3 - Toolbar: &Radio - {8E718888-423F-11D2-876E-00A0C9082467} - C:\WINDOWS\SYSTEM\MSDXM.OCX
    O3 - Toolbar: FlashGet Bar - {E0E899AB-F487-11D5-8D29-0050BA6940E3} - C:\PROGRAM FILES\FLASHGET\FGIEBAR.DLL
    O3 - Toolbar: DAP Bar - {62999427-33FC-4baf-9C9C-BCE6BD127F08} - C:\PROGRAM FILES\DAP\DAPIEBAR.DLL
    O4 - HKLM\..\Run: [ScanRegistry] C:\WINDOWS\scanregw.exe /autorun
    O4 - HKLM\..\Run: [TaskMonitor] C:\WINDOWS\taskmon.exe
    O4 - HKLM\..\Run: [SystemTray] SysTray.Exe
    O4 - HKLM\..\Run: [LoadPowerProfile] Rundll32.exe powrprof.dll,LoadCurrentPwrScheme
    O4 - HKLM\..\Run: [NvCplDaemon] RUNDLL32.EXE C:\WINDOWS\SYSTEM\NvCpl.dll,NvStartup
    O4 - HKLM\..\Run: [nwiz] nwiz.exe /install
    O4 - HKLM\..\Run: [avast! Web Scanner] C:\PROGRA~1\ALWILS~1\AVAST4\ashWebSv.exe
    O4 - HKLM\..\Run: [Security iGuard] C:\PROGRAM FILES\SECURITY IGUARD\SECURITY IGUARD.EXE
    O4 - HKLM\..\Run: [ashMaiSv] C:\PROGRA~1\ALWILS~1\AVAST4\ashmaisv.exe
    O4 - HKLM\..\RunServices: [LoadPowerProfile] Rundll32.exe powrprof.dll,LoadCurrentPwrScheme
    O4 - HKLM\..\RunServices: [SchedulingAgent] C:\WINDOWS\SYSTEM\mstask.exe
    O4 - HKLM\..\RunServices: [PersFw] "C:\Program Files\Kerio\Personal Firewall\persfw.exe" /hide
    O4 - HKLM\..\RunServices: [avast!] C:\Program Files\Alwil Software\Avast4\ashServ.exe
    O4 - HKLM\..\RunServices: [Srv32 spool service] C:\WINDOWS\System\spoolsrv32.exe
    O4 - Startup: RtlWake.lnk = C:\Program Files\Realtek\Rtl8180\RtlWake.exe
    O14 - IERESET.INF: SEARCH_PAGE_URL=
    O14 - IERESET.INF: START_PAGE_URL=
    O16 - DPF: {15AD6789-CDB4-47E1-A9DA-992EE8E6BAD6} - http://static.windupdates.com/cab/6247971CanadaInc/ie/bridge-c6.cab
    O16 - DPF: {D8A8A7F1-53EF-41F2-B44D-F3E2E595DC27} - ms-its:mhtml:file://C:\MAIN.MHT!http://69.50.163.254/331//main.chm::/update.exe
    O16 - DPF: {C81B5180-AFD1-41A3-97E1-99E8D254DB98} (CSS Web Installer Class) - http://www.commandondemand.com/eval/cod/cabs/cssweb.cab
    O17 - HKLM\System\CCS\Services\VxD\MSTCP: NameServer = 194.204.152.34,194.204.159.1
    O21 - SSODL: OLE Module - {0656A137-B161-CADD-9777-E37A75727E78} - C:\WINDOWS\SYSTEM\thun32.dll

    TO JEST PO "WYWALENIU" TEGO CO MIAŁEM WYWALIĆ. MAM WYWALIĆ COŚ JESZCZE STĄD?
  • #13 1425620
    childmaker
    Poziom 35  
    Wszystko robisz w awaryjnym!!!!!!
    Cytat:
    O4 - HKLM\..\RunServices: [Srv32 spool service] C:\WINDOWS\System\spoolsrv32.exe
    fałszywa tapeta, link jak usunąćhttp://www.searchengines.pl/phpbb203/index.php?showtopic=31936&st=0&p=121498&#entry121498

    Do usuniecia w hijacku:
    Cytat:
    R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Search Bar = http://wind-find.com/sp.htm
    R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Search Page = http://wind-find.com/index.htm
    R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = http://www.hotoffers.info/271/
    R0 - HKLM\Software\Microsoft\Internet Explorer\Search,SearchAssistant = http://wind-find.com/sp.htm
    R1 - HKCU\Software\Microsoft\Internet Explorer\SearchURL,(Default) = http://wind-find.com/index.htm
    O14 - IERESET.INF: SEARCH_PAGE_URL=
    O14 - IERESET.INF: START_PAGE_URL=
    O16 - DPF: {15AD6789-CDB4-47E1-A9DA-992EE8E6BAD6} - http://static.windupdates.com/cab/6247971CanadaInc/ie/bridge-c6.cab
    O16 - DPF: {D8A8A7F1-53EF-41F2-B44D-F3E2E595DC27} - ms-its:mhtml:file://C:\MAIN.MHT!http://69.50.163.254/331//main.chm::/update.exe
    O16 - DPF: {C81B5180-AFD1-41A3-97E1-99E8D254DB98} (CSS Web Installer Class) - http://www.commandondemand.com/eval/cod/cabs/cssweb.cab


    Wpis
    Cytat:
    O21 - SSODL: OLE Module - {0656A137-B161-CADD-9777-E37A75727E78} - C:\WINDOWS\SYSTEM\thun32.dll
    usuwasz na podstawie tego linka http://www.searchengines.pl/phpbb203/index.php?showtopic=15989#24
  • #14 1425633
    Radzious
    Poziom 28  
    wklej do notatnika to i uruchom(*.reg)

    REGEDIT4

    [HKEY_LOCAL_MACHINE\Software\Microsoft\Internet Explorer\Search]
    "SearchAssistant"="http://ie.search.msn.com/{SUB_RFC1766}/srchasst/srchasst.htm"
    "CustomizeSearch"="http://ie.search.msn.com/{SUB_RFC1766}/srchasst/srchcust.htm"
    "Default_Search_URL"="http://www.microsoft.com/isapi/redir.dll?prd=ie&ar=iesearch"

    [HKEY_LOCAL_MACHINE\Software\Microsoft\Internet Explorer\Main]
    "Default_Search_URL"="http://www.microsoft.com/isapi/redir.dll?prd=ie&ar=iesearch"
    "Search Page"="http://www.microsoft.com/isapi/redir.dll?prd=ie&ar=iesearch"

    [HKEY_USERS\.DEFAULT\Software\Microsoft\Internet Explorer\Main]
    "Search Page"="http://www.microsoft.com/isapi/redir.dll?prd=ie&ar=iesearch"
    "Search Bar"="Search Bar"="http://search.msn.com/intl/searchpane/en-au/prov2.htm"

    [HKEY_CURRENT_USER\Software\Microsoft\Internet Explorer\SearchUrl]
    ""="http://home.microsoft.com/access/autosearch.asp?p=%s"

    [HKEY_CURRENT_USER\Software\Microsoft\Internet Explorer\main]
    "Search Page"="http://www.microsoft.com/isapi/redir.dll?prd=ie&ar=iesearch"
    "Search Bar"="http://search.msn.com/spbasic.htm"
    "Use Custom Search URL"= dword:00000000

    [-HKEY_CURRENT_USER\Software\Microsoft\Internet Explorer\URLSearchHooks]

    [HKEY_CURRENT_USER\Software\Microsoft\Internet Explorer\URLSearchHooks]
    "{CFBFAE00-17A6-11D0-99CB-00C04FD64497}"=""

    [-HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\URL]

    [HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\URL]

    [HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\URL\DefaultPrefix]
    @="http://"

    [HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\URL\Prefixes]
    "ftp"="ftp://"
    "gopher"="gopher://"
    "home"="http://"
    "mosaic"="http://"
    "www"="http://"

    tam gdzie jest log do flasgeta pozbądz sie ich

    tolbary wszystkie skasuj i zobacz czy jest poprawa

    to na złom
    R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Search Bar = http://wind-find.com/sp.htm
    R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Search Page = http://wind-find.com/index.htm
    R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = http://www.hotoffers.info/271/
    R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = http://www.eu.microsoft.com/poland/
    R0 - HKLM\Software\Microsoft\Internet Explorer\Search,SearchAssistant = http://wind-find.com/sp.htm
    R1 - HKCU\Software\Microsoft\Internet Explorer\SearchURL,(Default) = http://wind-find.com/index.htm

    zobacz jakie masz zuzycie procka i ile zasobów wolnychpamięci

    wez jeszcze pod dosem wpisz taką komende

    scanreg /fix

    Powodzenia
  • #15 1425688
    childmaker
    Poziom 35  
    Radzious napisał:
    .......
    tam gdzie jest log do flasgeta pozbądz się ich

    tolbary wszystkie skasuj i zobacz czy jest poprawa........

    a niby po co jak to są prawidłowe wpisy??????

    Jezeli już analizujesz loga to staraj się robic to dokładnie bo pomijasz to co najgorsze.
  • #16 1425755
    Daevon
    Poziom 11  
    no to jak z tym flashgetem i toolbarami?
  • #17 1425760
    childmaker
    Poziom 35  
    Daevon napisał:
    no to jak z tym flashgetem i toolbarami?
    Cytat:
    Szkodliwe:
    ______________________

    O3 - Toolbar: rzillcgthjx - {5996aaf3-5c08-44a9-ac12-1843fd03df0a} - C:\WINDOWS\APPLICATION DATA\CKSTPRLLNQUL.DLL


    Prawidłowe:
    ______________________

    O3 - Toolbar: &Radio - {8E718888-423F-11D2-876E-00A0C9082467} - C:\WINDOWS\System32\msdxm.ocx
    O3 - Toolbar: Norton AntiVirus - {42CDD1BF-3FFB-4238-8AD1-7859DF00B1D6} - C:\Program Files\Norton SystemWorks\Norton AntiVirus\NavShExt.dll
    O3 - Toolbar: FlashGet Bar - {E0E899AB-F487-11D5-8D29-0050BA6940E3} - D:\PROGRA~1\FLASHGET\fgiebar.dll
    O3 - Toolbar: DAP Bar - {62999427-33FC-4baf-9C9C-BCE6BD127F08} - D:\Program Files\DAP\DAPIEBar.dll
    O3 - Toolbar: &Yahoo! Companion - {EF99BD32-C1FB-11D2-892F-0090271D4F88} - C:\PROGRAM FILES\YAHOO!\COMPANION\YCOMP5_0_2_4.DLL
    O3 - Toolbar: Popup Eliminator - {86BCA93E-457B-4054-AFB0-E428DA1563E1} - C:\PROGRAM FILES\POPUP ELIMINATOR\PETOOLBAR401.DLL


    I jeszcze pytanie dotyczące tego
    Cytat:
    O17 - HKLM\System\CCS\Services\VxD\MSTCP: NameServer = 194.204.152.34,194.204.159.1
    Czy to są adresy Twojego dostawcy internetu?
  • #18 1426022
    md
    Poziom 41  
    194.204.152.34,194.204.159.1 - to serwery TPSA, więc bezpieczne
    Co do Flashget-a - po przygodach z trojanami warto usunąć flashget i wszelkie download akceleratory, bo do nich najczęściej podwieszają się adware. Po wyczyszczeniu systemu z robali, można ponownie zainstalować niektóre programy, ale na czas walki z wirusami, najlepiej odinstalować zbędne programy i wodotryski w stylu BHO, Extra Button, Extra Menu itp.
    Poczytaj np. tutaj: http://www3.ca.com/securityadvisor/pest/pest.aspx?id=453077947
  • #19 1426030
    Radzious
    Poziom 28  
    childmaker napisał:
    Radzious napisał:
    .......
    tam gdzie jest log do flasgeta pozbądz się ich

    tolbary wszystkie skasuj i zobacz czy jest poprawa........

    a niby po co jak to są prawidłowe wpisy??????




    czy ja powiedziałem że sa nie prawidłowe na złom i tyle

    Jezeli już analizujesz loga to staraj się robic to dokładnie bo pomijasz to co najgorsze.


    Jesli analizuje to wyrzucam to co wiem a nie tego czego niewiem.

    Ps. Deavon chce aby mu komp chodził szybciej dlatego pozbycie się zbednych rzeczy z pamieci na dobre wyjdzie
  • #20 1427099
    Daevon
    Poziom 11  
    wywaliłem spool'a, ale thun32.dll jużnie mogę (zrobiłem tak jak było napisane na tej stronce, czyli w trybie awaryjnym wywaliłem wpis w hijack'u i potem ręcznie usunąłem tego DLL, ale jedyne co się zmieniło, to wpis w hijacku: teraz na końcu jest (file missing)) w dodatku ten chrzaniony hotoffers, też nie idzie go wywalić... ten thun32.dll chyba jest połaczony z tym hotoffers... mam 22% (mało nie?) wolnej pamięci Ram i procek jak nie ruszam myszką - 0% hehe a jak poruszę to do 10%. Co do flasha i DAP - odinstalowałem to.

    Dodano po 11 [minuty]:

    hmm teraz komp pochodzi 15 minut i mam 0% wolnej pamięci ram i na 98% zajętego procka.... CO JEST?
  • Pomocny post
    #21 1428016
    Radzious
    Poziom 28  
    zrób format sprzeta i od nowa wszystko tak jest najprościej. w innym wypadku pozbadz sie systraja nwiz, mstaska(to ci powinno pare mega dać. Pamięci masz za moło
    wpisz jeszce takie coś w pliku system.ini

    [386Enh]
    LocalLoadHigh=1

    i taki klucz załóz:
    [HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Explorer]
    "AlwaysUnloadDLL"="1"

    Powinno pomóc ale nie jestem pewien
  • #22 1428294
    Daevon
    Poziom 11  
    usunąłem w koncu tego thun32.dll i hotoffers i jest dobrze. DZIEKI LUDZIE!! macie w tych głowach poukładane hehe
REKLAMA