Jump to content

Welcome to Geeks to Go - Register now for FREE

Need help with your computer or device? Want to learn new tech skills? You're in the right place!
Geeks to Go is a friendly community of tech experts who can solve any problem you have. Just create a free account and post your question. Our volunteers will reply quickly and guide you through the steps. Don't let tech troubles stop you. Join Geeks to Go now and get the support you need!

How it Works Create Account
Photo

Friends Comp has been HiJacked[RESOLVED]

Started by Doubletap , Apr 16 2005 09:06 AM

  • This topic is locked This topic is locked

#1
Doubletap
Posted 16 April 2005 - 09:06 AM

Doubletap

    New Member

  • Member
  • Pip
  • 7 posts
Hey all. I am new to these forums and I guess I can thank my friend. :tazz: He called me saying he thought he had a virus and that his computer was acting oddly. I have tried countless tools in detecting and removing this and have had no luck. While searching for the answer to my quandry I found these forums and the HiJack This software! Excellent stuff indeed. ;) While I am someone technically proficient I thought I would run the HiJackThis log by you all so I can be sure I don't screw up his computer. TIA for any help.

DT



Logfile of HijackThis v1.99.1
Scan saved at 10:02:03 AM, on 4/16/2005
Platform: Windows XP SP2 (WinNT 5.01.2600)
MSIE: Internet Explorer v6.00 SP2 (6.00.2900.2180)

Running processes:
C:\WINDOWS\System32\smss.exe
C:\WINDOWS\system32\winlogon.exe
C:\WINDOWS\system32\services.exe
C:\WINDOWS\system32\lsass.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\System32\svchost.exe
C:\WINDOWS\system32\spoolsv.exe
C:\WINDOWS\Explorer.EXE
C:\windows\system\hpsysdrv.exe
C:\HP\KBD\KBD.EXE
C:\WINDOWS\system32\ctfmon.exe
C:\PROGRA~1\HELPAN~1\Pavilion\XPHWWBF4Duet\plugin\bin\PCHButton.exe
C:\WINDOWS\DvzCommon\DvzMsgr.exe
C:\Program Files\HP\Digital Imaging\bin\hpqtra08.exe
C:\Program Files\Kodak\Kodak EasyShare software\bin\EasyShare.exe
C:\Program Files\Kodak\KODAK Software Updater\7288971\Program\Kodak Software Updater.exe
C:\Program Files\interMute\SpySubtract\SpySub.exe
C:\Program Files\Updates from HP\309731\Program\Updates from HP.exe
C:\Program Files\Palm\HOTSYNC.EXE
C:\Program Files\interMute\SpamSubtract\SpamSub.exe
C:\Program Files\Common Files\Microsoft Shared\Works Shared\WkCalRem.exe
C:\PROGRA~1\COMMON~1\AOL\ACS\acsd.exe
C:\WINDOWS\system32\cmdtel.exe
C:\WINDOWS\system32\drivers\KodakCCS.exe
C:\Program Files\Common Files\Microsoft Shared\VS7DEBUG\MDM.EXE
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\wanmpsvc.exe
C:\Program Files\Internet Explorer\iexplore.exe
C:\Program Files\Internet Explorer\iexplore.exe
C:\Program Files\Internet Explorer\iexplore.exe
C:\Program Files\Internet Explorer\iexplore.exe
C:\DOCUME~1\HP_Owner\LOCALS~1\Temp\Temporary Directory 2 for hijackthis[1].zip\HijackThis.exe

R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = http://ie.redirect.h...lion&pf=desktop
R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = http://ie.redirect.h...lion&pf=desktop
R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Search Bar = http://w-find.com/sp.htm
R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Search Page = http://w-find.com/index.htm
R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = http://w-find.com/index.htm
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = http://ie.redirect.h...lion&pf=desktop
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = http://ie.redirect.h...lion&pf=desktop
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Search Bar = http://ie.redirect.h...lion&pf=desktop
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Search Page = http://ie.redirect.h...lion&pf=desktop
R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = http://ie.redirect.h...lion&pf=desktop
R0 - HKLM\Software\Microsoft\Internet Explorer\Search,SearchAssistant = http://w-find.com/sp.htm
R1 - HKCU\Software\Microsoft\Internet Explorer\SearchURL,(Default) = http://w-find.com/index.htm
O2 - BHO: AcroIEHlprObj Class - {06849E9F-C8D7-4D59-B87D-784B7D6BE0B3} - C:\Program Files\Adobe\Acrobat 6.0\Reader\ActiveX\AcroIEHelper.dll
O2 - BHO: Shareaza Web Download Hook - {0EEDB912-C5FA-486F-8334-57288578C627} - C:\Program Files\Etomi\Plugins\RazaWebHook.dll
O2 - BHO: (no name) - {53707962-6F74-2D53-2644-206D7942484F} - C:\Program Files\Spybot - Search & Destroy\SDHelper.dll
O2 - BHO: (no name) - {549B5CA7-4A86-11D7-A4DF-000874180BB3} - (no file)
O2 - BHO: Web assistant - {9ECB9560-04F9-4bbc-943D-298DDF1699E1} - c:\Program Files\Common Files\Symantec Shared\AdBlocking\NISShExt.dll
O2 - BHO: Google Toolbar Helper - {AA58ED58-01DD-4d91-8333-CF10577473F7} - c:\program files\google\googletoolbar1.dll
O2 - BHO: NAV Helper - {BDF3E430-B101-42AD-A544-FADC6B084872} - c:\Program Files\Norton AntiVirus\NavShExt.dll
O2 - BHO: (no name) - {FDD3B846-8D59-4ffb-8758-209B6AD74ACC} - (no file)
O3 - Toolbar: HP view - {B2847E28-5D7D-4DEB-8B67-05D28BCF79F5} - c:\Program Files\HP\Digital Imaging\bin\HPDTLK02.dll
O3 - Toolbar: Norton AntiVirus - {42CDD1BF-3FFB-4238-8AD1-7859DF00B1D6} - c:\Program Files\Norton AntiVirus\NavShExt.dll
O3 - Toolbar: &Google - {2318C2B1-4965-11d4-9B18-009027A5CD4F} - c:\program files\google\googletoolbar1.dll
O4 - HKLM\..\Run: [hpsysdrv] c:\windows\system\hpsysdrv.exe
O4 - HKLM\..\Run: [KBD] C:\HP\KBD\KBD.EXE
O4 - HKLM\..\Run: [Recguard] C:\WINDOWS\SMINST\RECGUARD.EXE
O4 - HKLM\..\Run: [PS2] C:\WINDOWS\system32\ps2.exe
O4 - HKCU\..\Run: [ubvreaa] c:\windows\acnatww.exe
O4 - HKCU\..\Run: [ctfmon.exe] C:\WINDOWS\system32\ctfmon.exe
O4 - HKCU\..\Run: [jhmyybb] c:\windows\wqeiyuu.exe
O4 - HKCU\..\Run: [Acme.PCHButton] C:\PROGRA~1\HELPAN~1\Pavilion\XPHWWBF4Duet\plugin\bin\PCHButton.exe
O4 - HKCU\..\Run: [ivtoegn] c:\windows\wqeiyuu.exe
O4 - HKCU\..\Run: [irgorid] c:\windows\wqeiyuu.exe
O4 - HKCU\..\Run: [gcqoyau] c:\windows\wqeiyuu.exe
O4 - HKCU\..\Run: [lpalftl] c:\windows\wqeiyuu.exe
O4 - HKCU\..\Run: [iagqyxu] c:\windows\wqeiyuu.exe
O4 - HKCU\..\Run: [ofcelwd] c:\windows\wqeiyuu.exe
O4 - HKCU\..\Run: [ubrkraj] c:\windows\wqeiyuu.exe
O4 - HKCU\..\Run: [fufanvh] c:\windows\wqeiyuu.exe
O4 - HKCU\..\Run: [tqhwuat] c:\windows\wqeiyuu.exe
O4 - HKCU\..\Run: [kuefawr] c:\windows\wqeiyuu.exe
O4 - HKCU\..\Run: [tqpbqol] c:\windows\wqeiyuu.exe
O4 - HKCU\..\Run: [ldluaax] c:\windows\knqqymf.exe
O4 - HKCU\..\Run: [csyrbdw] c:\windows\knqqymf.exe
O4 - HKCU\..\Run: [waforko] c:\windows\knqqymf.exe
O4 - HKCU\..\Run: [sfcxtiv] c:\windows\rmyuvhm.exe
O4 - HKCU\..\Run: [qgaoaui] c:\windows\puhavuq.exe
O4 - HKCU\..\Run: [immnicq] c:\windows\puhavuq.exe
O4 - HKCU\..\Run: [tfimpkh] c:\windows\puhavuq.exe
O4 - HKCU\..\Run: [gqyvbmf] c:\windows\puhavuq.exe
O4 - HKCU\..\Run: [cpxqwsp] c:\windows\puhavuq.exe
O4 - HKCU\..\Run: [kxpqrni] c:\windows\puhavuq.exe
O4 - HKCU\..\Run: [gaocghp] c:\windows\puhavuq.exe
O4 - HKCU\..\Run: [hsfpqqm] c:\windows\puhavuq.exe
O4 - HKCU\..\Run: [mqlfibm] c:\windows\puhavuq.exe
O4 - HKCU\..\Run: [tjiksiu] c:\windows\puhavuq.exe
O4 - HKCU\..\Run: [uwoqnpt] c:\windows\puhavuq.exe
O4 - HKCU\..\Run: [vtwqthq] c:\windows\puhavuq.exe
O4 - HKCU\..\Run: [rvllkpf] c:\windows\puhavuq.exe
O4 - HKCU\..\Run: [ivpinoq] c:\windows\puhavuq.exe
O4 - HKCU\..\Run: [eqoqghp] c:\windows\puhavuq.exe
O4 - HKCU\..\Run: [oowghmn] c:\windows\puhavuq.exe
O4 - HKCU\..\Run: [yrcqsvv] c:\windows\puhavuq.exe
O4 - HKCU\..\Run: [khecydd] c:\windows\puhavuq.exe
O4 - HKCU\..\Run: [oinvmkt] c:\windows\puhavuq.exe
O4 - HKCU\..\Run: [bjxnxdi] c:\windows\puhavuq.exe
O4 - HKCU\..\Run: [lxoowaj] c:\windows\puhavuq.exe
O4 - HKCU\..\Run: [dwkwbth] c:\windows\puhavuq.exe
O4 - HKCU\..\Run: [jfwawks] c:\windows\puhavuq.exe
O4 - HKCU\..\Run: [pemyvgk] c:\windows\puhavuq.exe
O4 - HKCU\..\Run: [oscfuim] c:\windows\puhavuq.exe
O4 - HKCU\..\Run: [acmgmlt] c:\windows\puhavuq.exe
O4 - HKCU\..\Run: [jaqlifs] c:\windows\puhavuq.exe
O4 - HKCU\..\Run: [lanicyf] c:\windows\puhavuq.exe
O4 - HKCU\..\Run: [ltaqjcq] c:\windows\puhavuq.exe
O4 - HKCU\..\Run: [bwdtyjw] c:\windows\puhavuq.exe
O4 - HKCU\..\Run: [khjtfqq] c:\windows\puhavuq.exe
O4 - HKCU\..\Run: [evsexxi] c:\windows\puhavuq.exe
O4 - HKCU\..\Run: [ipkooya] c:\windows\puhavuq.exe
O4 - HKCU\..\Run: [pxorsij] c:\windows\puhavuq.exe
O4 - HKCU\..\Run: [okwquhc] c:\windows\puhavuq.exe
O4 - HKCU\..\Run: [hdepkhg] c:\windows\puhavuq.exe
O4 - HKCU\..\Run: [dtkyedh] c:\windows\puhavuq.exe
O4 - HKCU\..\Run: [mvnqxtn] c:\windows\puhavuq.exe
O4 - HKCU\..\Run: [uukkyxf] c:\windows\puhavuq.exe
O4 - HKCU\..\Run: [pqmarbl] c:\windows\puhavuq.exe
O4 - HKCU\..\Run: [ymrpsif] c:\windows\kkwvgco.exe
O4 - HKCU\..\Run: [qwauwof] c:\windows\kkwvgco.exe
O4 - HKCU\..\Run: [phfdndg] c:\windows\kkwvgco.exe
O4 - HKCU\..\Run: [gamlqny] c:\windows\kkwvgco.exe
O4 - HKCU\..\Run: [wnumhaa] c:\windows\hxspypt.exe
O4 - HKCU\..\Run: [mqxbmjt] c:\windows\hxspypt.exe
O4 - HKCU\..\Run: [jvredtl] c:\windows\hxspypt.exe
O4 - HKCU\..\Run: [avfrpad] c:\windows\hxspypt.exe
O4 - HKCU\..\Run: [mbjcmel] c:\windows\hxspypt.exe
O4 - HKCU\..\Run: [cspwfgh] c:\windows\hxspypt.exe
O4 - HKCU\..\Run: [wbwbhlq] c:\windows\hxspypt.exe
O4 - HKCU\..\Run: [bfxgvyf] c:\windows\hxspypt.exe
O4 - HKCU\..\Run: [qiqfjqm] c:\windows\hxspypt.exe
O4 - HKCU\..\Run: [tvunvbl] c:\windows\hxspypt.exe
O4 - HKCU\..\Run: [rqxlhbe] c:\windows\hxspypt.exe
O4 - HKCU\..\Run: [wveywkv] c:\windows\hxspypt.exe
O4 - HKCU\..\Run: [ncrwxdd] c:\windows\hxspypt.exe
O4 - HKCU\..\Run: [tbqrdst] c:\windows\hxspypt.exe
O4 - HKCU\..\Run: [kheqntf] c:\windows\hxspypt.exe
O4 - HKCU\..\Run: [qoggqfw] c:\windows\hxspypt.exe
O4 - HKCU\..\Run: [hdyxlub] c:\windows\hxspypt.exe
O4 - HKCU\..\Run: [oituttr] c:\windows\hxspypt.exe
O4 - HKCU\..\Run: [hqspftm] c:\windows\hxspypt.exe
O4 - HKCU\..\Run: [alrmvqf] c:\windows\hxspypt.exe
O4 - HKCU\..\Run: [rdbxlcy] c:\windows\hxspypt.exe
O4 - HKCU\..\Run: [edpotht] c:\windows\bnbmlta.exe
O4 - HKCU\..\Run: [agfibtf] c:\windows\bnbmlta.exe
O4 - HKCU\..\Run: [iufjybh] c:\windows\bnbmlta.exe
O4 - HKCU\..\Run: [unsqwro] c:\windows\bnbmlta.exe
O4 - HKCU\..\Run: [gcjmljm] c:\windows\bnbmlta.exe
O4 - HKCU\..\Run: [mqtktbp] c:\windows\bnbmlta.exe
O4 - HKCU\..\Run: [nvacmox] c:\windows\bnbmlta.exe
O4 - HKCU\..\Run: [dujklqe] c:\windows\bnbmlta.exe
O4 - HKCU\..\Run: [eqytqpg] c:\windows\bnbmlta.exe
O4 - HKCU\..\Run: [xotbwop] c:\windows\bnbmlta.exe
O4 - HKCU\..\Run: [afdkgbi] c:\windows\bnbmlta.exe
O4 - HKCU\..\Run: [bhsbnso] c:\windows\bnbmlta.exe
O4 - HKCU\..\Run: [fimgwcg] c:\windows\bnbmlta.exe
O4 - HKCU\..\Run: [ncrcxig] c:\windows\bnbmlta.exe
O4 - HKCU\..\Run: [ekasvru] c:\windows\bnbmlta.exe
O4 - HKCU\..\Run: [rpntxre] c:\windows\bnbmlta.exe
O4 - HKCU\..\Run: [vauuirt] c:\windows\feisilb.exe
O4 - HKCU\..\Run: [hqntxrf] c:\windows\feisilb.exe
O4 - HKCU\..\Run: [fxycrlx] c:\windows\feisilb.exe
O4 - HKCU\..\Run: [dbbaooh] c:\windows\feisilb.exe
O4 - Startup: HotSync Manager.lnk = C:\Program Files\Palm\HOTSYNC.EXE
O4 - Startup: HP Organize.lnk = ?
O4 - Startup: SpamSubtract.lnk = C:\Program Files\interMute\SpamSubtract\SpamSub.exe
O4 - Startup: WKCALREM.LNK = C:\Program Files\Common Files\Microsoft Shared\Works Shared\WkCalRem.exe
O4 - Global Startup: America Online 9.0 Tray Icon.lnk = C:\Program Files\America Online 9.0\aoltray.exe
O4 - Global Startup: DataViz Messenger.lnk = C:\WINDOWS\DvzCommon\DvzMsgr.exe
O4 - Global Startup: HP Digital Imaging Monitor.lnk = C:\Program Files\HP\Digital Imaging\bin\hpqtra08.exe
O4 - Global Startup: Kodak EasyShare software.lnk = C:\Program Files\Kodak\Kodak EasyShare software\bin\EasyShare.exe
O4 - Global Startup: Kodak software updater.lnk = C:\Program Files\Kodak\KODAK Software Updater\7288971\Program\Kodak Software Updater.exe
O4 - Global Startup: Quicken Scheduled Updates.lnk = C:\Program Files\Quicken\bagent.exe
O4 - Global Startup: SpySubtract.lnk = C:\Program Files\interMute\SpySubtract\SpySub.exe
O4 - Global Startup: Updates from HP.lnk = C:\Program Files\Updates from HP\309731\Program\Updates from HP.exe
O8 - Extra context menu item: &Google Search - res://c:\program files\google\GoogleToolbar1.dll/cmsearch.html
O8 - Extra context menu item: Add To HP Organize... - C:\PROGRA~1\HEWLET~1\HPORGA~1\bin\core.hp.main\SendTo.html
O8 - Extra context menu item: Backward Links - res://c:\program files\google\GoogleToolbar1.dll/cmbacklinks.html
O8 - Extra context menu item: Cached Snapshot of Page - res://c:\program files\google\GoogleToolbar1.dll/cmcache.html
O8 - Extra context menu item: Download with &Etomi - res://C:\Program Files\Etomi\Plugins\RazaWebHook.dll/3000
O8 - Extra context menu item: E&xport to Microsoft Excel - res://C:\PROGRA~1\MI1933~1\OFFICE11\EXCEL.EXE/3000
O8 - Extra context menu item: Similar Pages - res://c:\program files\google\GoogleToolbar1.dll/cmsimilar.html
O8 - Extra context menu item: Translate into English - res://c:\program files\google\GoogleToolbar1.dll/cmtrans.html
O9 - Extra button: (no name) - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Program Files\Java\j2re1.4.2_03\bin\npjpi142_03.dll
O9 - Extra 'Tools' menuitem: Sun Java Console - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Program Files\Java\j2re1.4.2_03\bin\npjpi142_03.dll
O9 - Extra button: Research - {92780B25-18CC-41C8-B9BE-3C9C571A8263} - C:\PROGRA~1\MI1933~1\OFFICE11\REFIEBAR.DLL
O9 - Extra button: Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe
O9 - Extra 'Tools' menuitem: Windows Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe
O16 - DPF: {2B96D5CC-C5B5-49A5-A69D-CC0A30F9028C} (MiniBugTransporterX Class) - http://wdownload.wea...Transporter.cab?
O20 - Winlogon Notify: igfxcui - C:\WINDOWS\SYSTEM32\igfxsrvc.dll
O23 - Service: Trace network connections (ACCRA) - Unknown owner - C:\WINDOWS\system32\mocih.exe (file missing)
O23 - Service: AOL Connectivity Service (AOL ACS) - America Online, Inc. - C:\PROGRA~1\COMMON~1\AOL\ACS\acsd.exe
O23 - Service: iPod Service (iPodService) - Apple Computer, Inc. - C:\Program Files\iPod\bin\iPodService.exe
O23 - Service: Loading Outpost Connections (KDE) - Unknown owner - C:\WINDOWS\system32\cmdtel.exe
O23 - Service: Kodak Camera Connection Software (KodakCCS) - Eastman Kodak Company - C:\WINDOWS\system32\drivers\KodakCCS.exe
O23 - Service: Pml Driver HPZ12 - HP - C:\WINDOWS\system32\HPZipm12.exe
O23 - Service: WAN Miniport (ATW) Service (WANMiniportService) - America Online, Inc. - C:\WINDOWS\wanmpsvc.exe
  • 0

Advertisements

#2
Doubletap
Posted 16 April 2005 - 11:32 AM

Doubletap

    New Member

  • Topic Starter
  • Member
  • Pip
  • 7 posts
Bump? Any help? Please? Thanks. :tazz:
  • 0

#3
Guest_thatman_*
Posted 16 April 2005 - 11:57 AM

Guest_thatman_*
  • Guest
Hi Doubletap

You have a large amount of malware please follow the fix in this link below.
CalamityJane has a fix here:

When you have completed that part of the fix.

Post a new HJT.Log and any information you have back into this thread.

Kc :tazz:
  • 0

#4
Doubletap
Posted 16 April 2005 - 12:27 PM

Doubletap

    New Member

  • Topic Starter
  • Member
  • Pip
  • 7 posts
Roger that ThatMan! I'll check it out! :tazz: THANKS!!!

DT
  • 0

#5
Doubletap
Posted 17 April 2005 - 06:42 PM

Doubletap

    New Member

  • Topic Starter
  • Member
  • Pip
  • 7 posts
OK, I have apparently cleaned the machine but for whatever reason, it is now running slow as a snail. It also appears that the virus keeps reinstalling it self because I will run a clean scan and then it pops back up again. I have tried to install the Microsoft Spyware but can't get it to install. I ran SpyBot and it says the machine is clean. Any more help would be greatly appreciated. I am trying to get this machine back to him by tomorrow. Thanks.
  • 0

#6
Guest_thatman_*
Posted 21 April 2005 - 09:58 AM

Guest_thatman_*
  • Guest
Hi Doubletap

If you have sorted this problem please let me know

I will close this topic on 21 April 2005

Kc :tazz:
  • 0

#7
Doubletap
Posted 21 April 2005 - 01:11 PM

Doubletap

    New Member

  • Topic Starter
  • Member
  • Pip
  • 7 posts
:tazz: Unfortunately I haven't had any luck fixing it. My friend has decided to save as much data as possible and reformat. I told him he will have to be sure to scan anything he saves before putting it on his computer or he could reinfect himself. If anyone has any suggestions I'd much appreciate it. Unfortunately this is one of the tougher virii I have encountered. It seems to have shut down just about every type of fix I can find. The KAV seems to scan and find one or two instances of different virii, cleans it, then is infected again. I dloaded and installed the Microsoft Spyware and double click to install it and nothing happens. ;) I am not completely computer ignorant but this one has me stumped. Thanks again for your help and any other help you may be able to provide.
  • 0

#8
Guest_thatman_*
Posted 21 April 2005 - 01:17 PM

Guest_thatman_*
  • Guest
Hi Doubletap

Post a new HJT.Log
Lets see what is left over from the virus scan

Kc :tazz:
  • 0

#9
Doubletap
Posted 21 April 2005 - 06:47 PM

Doubletap

    New Member

  • Topic Starter
  • Member
  • Pip
  • 7 posts
Hey ThatMan, thanks for your persistance. :tazz: Here is the current log after a scan and a clean bill of health.

Logfile of HijackThis v1.99.1
Scan saved at 7:01:49 PM, on 4/21/2005
Platform: Windows XP SP2 (WinNT 5.01.2600)
MSIE: Internet Explorer v6.00 SP2 (6.00.2900.2180)

Running processes:
C:\WINDOWS\System32\smss.exe
C:\WINDOWS\system32\winlogon.exe
C:\WINDOWS\system32\services.exe
C:\WINDOWS\system32\lsass.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\System32\svchost.exe
C:\WINDOWS\Explorer.EXE
C:\WINDOWS\system32\spoolsv.exe
C:\windows\system\hpsysdrv.exe
C:\HP\KBD\KBD.EXE
C:\windows\acnatww.exe
C:\WINDOWS\system32\ctfmon.exe
C:\PROGRA~1\HELPAN~1\Pavilion\XPHWWBF4Duet\plugin\bin\PCHButton.exe
C:\PROGRA~1\COMMON~1\AOL\ACS\acsd.exe
C:\WINDOWS\system32\drivers\KodakCCS.exe
C:\Program Files\Common Files\Microsoft Shared\VS7DEBUG\MDM.EXE
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\wanmpsvc.exe
C:\windows\kkdwfpn.exe
C:\windows\kkdwfpn.exe
C:\windows\kkdwfpn.exe
C:\windows\kkdwfpn.exe
C:\WINDOWS\DvzCommon\DvzMsgr.exe
C:\Program Files\HP\Digital Imaging\bin\hpqtra08.exe
C:\Program Files\Kodak\Kodak EasyShare software\bin\EasyShare.exe
C:\Program Files\Kodak\KODAK Software Updater\7288971\Program\Kodak Software Updater.exe
C:\Program Files\interMute\SpySubtract\SpySub.exe
C:\Program Files\Palm\HOTSYNC.EXE
C:\Program Files\interMute\SpamSubtract\SpamSub.exe
C:\Program Files\Common Files\Microsoft Shared\Works Shared\WkCalRem.exe
C:\DOCUME~1\HP_Owner\LOCALS~1\Temp\Temporary Directory 1 for hijackthis.zip\HijackThis.exe

R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = http://ie.redirect.h...lion&pf=desktop
R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = http://ie.redirect.h...lion&pf=desktop
R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Search Bar = http://w-find.com/sp.htm
R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Search Page = http://w-find.com/index.htm
R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = http://w-find.com/index.htm
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = http://ie.redirect.h...lion&pf=desktop
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = http://ie.redirect.h...lion&pf=desktop
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Search Bar = http://ie.redirect.h...lion&pf=desktop
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Search Page = http://ie.redirect.h...lion&pf=desktop
R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = http://ie.redirect.h...lion&pf=desktop
R0 - HKLM\Software\Microsoft\Internet Explorer\Search,SearchAssistant = http://w-find.com/sp.htm
R1 - HKCU\Software\Microsoft\Internet Explorer\SearchURL,(Default) = http://w-find.com/index.htm
O2 - BHO: AcroIEHlprObj Class - {06849E9F-C8D7-4D59-B87D-784B7D6BE0B3} - C:\Program Files\Adobe\Acrobat 6.0\Reader\ActiveX\AcroIEHelper.dll
O2 - BHO: Shareaza Web Download Hook - {0EEDB912-C5FA-486F-8334-57288578C627} - C:\Program Files\Etomi\Plugins\RazaWebHook.dll
O2 - BHO: (no name) - {53707962-6F74-2D53-2644-206D7942484F} - C:\Program Files\Spybot - Search & Destroy\SDHelper.dll
O2 - BHO: (no name) - {549B5CA7-4A86-11D7-A4DF-000874180BB3} - (no file)
O2 - BHO: Web assistant - {9ECB9560-04F9-4bbc-943D-298DDF1699E1} - c:\Program Files\Common Files\Symantec Shared\AdBlocking\NISShExt.dll
O2 - BHO: Google Toolbar Helper - {AA58ED58-01DD-4d91-8333-CF10577473F7} - c:\program files\google\googletoolbar1.dll
O2 - BHO: NAV Helper - {BDF3E430-B101-42AD-A544-FADC6B084872} - c:\Program Files\Norton AntiVirus\NavShExt.dll
O2 - BHO: (no name) - {FDD3B846-8D59-4ffb-8758-209B6AD74ACC} - (no file)
O3 - Toolbar: HP view - {B2847E28-5D7D-4DEB-8B67-05D28BCF79F5} - c:\Program Files\HP\Digital Imaging\bin\HPDTLK02.dll
O3 - Toolbar: Norton AntiVirus - {42CDD1BF-3FFB-4238-8AD1-7859DF00B1D6} - c:\Program Files\Norton AntiVirus\NavShExt.dll
O3 - Toolbar: &Google - {2318C2B1-4965-11d4-9B18-009027A5CD4F} - c:\program files\google\googletoolbar1.dll
O4 - HKLM\..\Run: [hpsysdrv] c:\windows\system\hpsysdrv.exe
O4 - HKLM\..\Run: [KBD] C:\HP\KBD\KBD.EXE
O4 - HKLM\..\Run: [Recguard] C:\WINDOWS\SMINST\RECGUARD.EXE
O4 - HKLM\..\Run: [PS2] C:\WINDOWS\system32\ps2.exe
O4 - HKCU\..\Run: [ubvreaa] c:\windows\acnatww.exe
O4 - HKCU\..\Run: [ctfmon.exe] C:\WINDOWS\system32\ctfmon.exe
O4 - HKCU\..\Run: [jhmyybb] c:\windows\wqeiyuu.exe
O4 - HKCU\..\Run: [Acme.PCHButton] C:\PROGRA~1\HELPAN~1\Pavilion\XPHWWBF4Duet\plugin\bin\PCHButton.exe
O4 - HKCU\..\Run: [ivtoegn] c:\windows\wqeiyuu.exe
O4 - HKCU\..\Run: [irgorid] c:\windows\wqeiyuu.exe
O4 - HKCU\..\Run: [gcqoyau] c:\windows\wqeiyuu.exe
O4 - HKCU\..\Run: [lpalftl] c:\windows\wqeiyuu.exe
O4 - HKCU\..\Run: [iagqyxu] c:\windows\wqeiyuu.exe
O4 - HKCU\..\Run: [ofcelwd] c:\windows\wqeiyuu.exe
O4 - HKCU\..\Run: [ubrkraj] c:\windows\wqeiyuu.exe
O4 - HKCU\..\Run: [fufanvh] c:\windows\wqeiyuu.exe
O4 - HKCU\..\Run: [tqhwuat] c:\windows\wqeiyuu.exe
O4 - HKCU\..\Run: [kuefawr] c:\windows\wqeiyuu.exe
O4 - HKCU\..\Run: [tqpbqol] c:\windows\wqeiyuu.exe
O4 - HKCU\..\Run: [ldluaax] c:\windows\knqqymf.exe
O4 - HKCU\..\Run: [csyrbdw] c:\windows\knqqymf.exe
O4 - HKCU\..\Run: [waforko] c:\windows\knqqymf.exe
O4 - HKCU\..\Run: [sfcxtiv] c:\windows\rmyuvhm.exe
O4 - HKCU\..\Run: [qgaoaui] c:\windows\puhavuq.exe
O4 - HKCU\..\Run: [immnicq] c:\windows\puhavuq.exe
O4 - HKCU\..\Run: [tfimpkh] c:\windows\puhavuq.exe
O4 - HKCU\..\Run: [gqyvbmf] c:\windows\puhavuq.exe
O4 - HKCU\..\Run: [cpxqwsp] c:\windows\puhavuq.exe
O4 - HKCU\..\Run: [kxpqrni] c:\windows\puhavuq.exe
O4 - HKCU\..\Run: [gaocghp] c:\windows\puhavuq.exe
O4 - HKCU\..\Run: [hsfpqqm] c:\windows\puhavuq.exe
O4 - HKCU\..\Run: [mqlfibm] c:\windows\puhavuq.exe
O4 - HKCU\..\Run: [tjiksiu] c:\windows\puhavuq.exe
O4 - HKCU\..\Run: [uwoqnpt] c:\windows\puhavuq.exe
O4 - HKCU\..\Run: [vtwqthq] c:\windows\puhavuq.exe
O4 - HKCU\..\Run: [rvllkpf] c:\windows\puhavuq.exe
O4 - HKCU\..\Run: [ivpinoq] c:\windows\puhavuq.exe
O4 - HKCU\..\Run: [eqoqghp] c:\windows\puhavuq.exe
O4 - HKCU\..\Run: [oowghmn] c:\windows\puhavuq.exe
O4 - HKCU\..\Run: [yrcqsvv] c:\windows\puhavuq.exe
O4 - HKCU\..\Run: [khecydd] c:\windows\puhavuq.exe
O4 - HKCU\..\Run: [oinvmkt] c:\windows\puhavuq.exe
O4 - HKCU\..\Run: [bjxnxdi] c:\windows\puhavuq.exe
O4 - HKCU\..\Run: [lxoowaj] c:\windows\puhavuq.exe
O4 - HKCU\..\Run: [dwkwbth] c:\windows\puhavuq.exe
O4 - HKCU\..\Run: [jfwawks] c:\windows\puhavuq.exe
O4 - HKCU\..\Run: [pemyvgk] c:\windows\puhavuq.exe
O4 - HKCU\..\Run: [oscfuim] c:\windows\puhavuq.exe
O4 - HKCU\..\Run: [acmgmlt] c:\windows\puhavuq.exe
O4 - HKCU\..\Run: [jaqlifs] c:\windows\puhavuq.exe
O4 - HKCU\..\Run: [lanicyf] c:\windows\puhavuq.exe
O4 - HKCU\..\Run: [ltaqjcq] c:\windows\puhavuq.exe
O4 - HKCU\..\Run: [bwdtyjw] c:\windows\puhavuq.exe
O4 - HKCU\..\Run: [khjtfqq] c:\windows\puhavuq.exe
O4 - HKCU\..\Run: [evsexxi] c:\windows\puhavuq.exe
O4 - HKCU\..\Run: [ipkooya] c:\windows\puhavuq.exe
O4 - HKCU\..\Run: [pxorsij] c:\windows\puhavuq.exe
O4 - HKCU\..\Run: [okwquhc] c:\windows\puhavuq.exe
O4 - HKCU\..\Run: [hdepkhg] c:\windows\puhavuq.exe
O4 - HKCU\..\Run: [dtkyedh] c:\windows\puhavuq.exe
O4 - HKCU\..\Run: [mvnqxtn] c:\windows\puhavuq.exe
O4 - HKCU\..\Run: [uukkyxf] c:\windows\puhavuq.exe
O4 - HKCU\..\Run: [pqmarbl] c:\windows\puhavuq.exe
O4 - HKCU\..\Run: [ymrpsif] c:\windows\kkwvgco.exe
O4 - HKCU\..\Run: [qwauwof] c:\windows\kkwvgco.exe
O4 - HKCU\..\Run: [phfdndg] c:\windows\kkwvgco.exe
O4 - HKCU\..\Run: [gamlqny] c:\windows\kkwvgco.exe
O4 - HKCU\..\Run: [wnumhaa] c:\windows\hxspypt.exe
O4 - HKCU\..\Run: [mqxbmjt] c:\windows\hxspypt.exe
O4 - HKCU\..\Run: [jvredtl] c:\windows\hxspypt.exe
O4 - HKCU\..\Run: [avfrpad] c:\windows\hxspypt.exe
O4 - HKCU\..\Run: [mbjcmel] c:\windows\hxspypt.exe
O4 - HKCU\..\Run: [cspwfgh] c:\windows\hxspypt.exe
O4 - HKCU\..\Run: [wbwbhlq] c:\windows\hxspypt.exe
O4 - HKCU\..\Run: [bfxgvyf] c:\windows\hxspypt.exe
O4 - HKCU\..\Run: [qiqfjqm] c:\windows\hxspypt.exe
O4 - HKCU\..\Run: [tvunvbl] c:\windows\hxspypt.exe
O4 - HKCU\..\Run: [rqxlhbe] c:\windows\hxspypt.exe
O4 - HKCU\..\Run: [wveywkv] c:\windows\hxspypt.exe
O4 - HKCU\..\Run: [ncrwxdd] c:\windows\hxspypt.exe
O4 - HKCU\..\Run: [tbqrdst] c:\windows\hxspypt.exe
O4 - HKCU\..\Run: [kheqntf] c:\windows\hxspypt.exe
O4 - HKCU\..\Run: [qoggqfw] c:\windows\hxspypt.exe
O4 - HKCU\..\Run: [hdyxlub] c:\windows\hxspypt.exe
O4 - HKCU\..\Run: [oituttr] c:\windows\hxspypt.exe
O4 - HKCU\..\Run: [hqspftm] c:\windows\hxspypt.exe
O4 - HKCU\..\Run: [alrmvqf] c:\windows\hxspypt.exe
O4 - HKCU\..\Run: [rdbxlcy] c:\windows\hxspypt.exe
O4 - HKCU\..\Run: [edpotht] c:\windows\bnbmlta.exe
O4 - HKCU\..\Run: [agfibtf] c:\windows\bnbmlta.exe
O4 - HKCU\..\Run: [iufjybh] c:\windows\bnbmlta.exe
O4 - HKCU\..\Run: [unsqwro] c:\windows\bnbmlta.exe
O4 - HKCU\..\Run: [gcjmljm] c:\windows\bnbmlta.exe
O4 - HKCU\..\Run: [mqtktbp] c:\windows\bnbmlta.exe
O4 - HKCU\..\Run: [nvacmox] c:\windows\bnbmlta.exe
O4 - HKCU\..\Run: [dujklqe] c:\windows\bnbmlta.exe
O4 - HKCU\..\Run: [eqytqpg] c:\windows\bnbmlta.exe
O4 - HKCU\..\Run: [xotbwop] c:\windows\bnbmlta.exe
O4 - HKCU\..\Run: [afdkgbi] c:\windows\bnbmlta.exe
O4 - HKCU\..\Run: [bhsbnso] c:\windows\bnbmlta.exe
O4 - HKCU\..\Run: [fimgwcg] c:\windows\bnbmlta.exe
O4 - HKCU\..\Run: [ncrcxig] c:\windows\bnbmlta.exe
O4 - HKCU\..\Run: [ekasvru] c:\windows\bnbmlta.exe
O4 - HKCU\..\Run: [rpntxre] c:\windows\bnbmlta.exe
O4 - HKCU\..\Run: [vauuirt] c:\windows\feisilb.exe
O4 - HKCU\..\Run: [hqntxrf] c:\windows\feisilb.exe
O4 - HKCU\..\Run: [fxycrlx] c:\windows\feisilb.exe
O4 - HKCU\..\Run: [dbbaooh] c:\windows\feisilb.exe
O4 - HKCU\..\Run: [qvuwbhc] c:\windows\reilprd.exe
O4 - HKCU\..\Run: [sfqkbkn] c:\windows\reilprd.exe
O4 - HKCU\..\Run: [dtbvpyy] c:\windows\reilprd.exe
O4 - HKCU\..\Run: [pxjdepg] c:\windows\reilprd.exe
O4 - HKCU\..\Run: [pawrokf] c:\windows\reilprd.exe
O4 - HKCU\..\Run: [ciwagba] c:\windows\reilprd.exe
O4 - HKCU\..\Run: [xrudumn] c:\windows\reilprd.exe
O4 - HKCU\..\Run: [ggdlqbt] c:\windows\reilprd.exe
O4 - HKCU\..\Run: [wjlwaav] c:\windows\reilprd.exe
O4 - HKCU\..\Run: [ylgbcxv] c:\windows\reilprd.exe
O4 - HKCU\..\Run: [qvpnibn] c:\windows\reilprd.exe
O4 - HKCU\..\Run: [sdpnbtj] c:\windows\reilprd.exe
O4 - HKCU\..\Run: [mvhibhp] c:\windows\reilprd.exe
O4 - HKCU\..\Run: [qsrshal] c:\windows\reilprd.exe
O4 - HKCU\..\Run: [siqufbc] c:\windows\reilprd.exe
O4 - HKCU\..\Run: [mulgiep] c:\windows\reilprd.exe
O4 - HKCU\..\Run: [dseytdl] c:\windows\reilprd.exe
O4 - HKCU\..\Run: [rnfdcue] c:\windows\reilprd.exe
O4 - HKCU\..\Run: [ddwrdpx] c:\windows\reilprd.exe
O4 - HKCU\..\Run: [qlcwpwv] c:\windows\reilprd.exe
O4 - HKCU\..\Run: [ownoigl] c:\windows\reilprd.exe
O4 - HKCU\..\Run: [fkellgu] c:\windows\fyocfrw.exe
O4 - HKCU\..\Run: [ehjjhkf] c:\windows\fyocfrw.exe
O4 - HKCU\..\Run: [bqlyhib] c:\windows\fyocfrw.exe
O4 - HKCU\..\Run: [cslaipl] c:\windows\fyocfrw.exe
O4 - HKCU\..\Run: [jnwgrxq] c:\windows\fyocfrw.exe
O4 - HKCU\..\Run: [oryvbae] c:\windows\fyocfrw.exe
O4 - HKCU\..\Run: [fwkwfby] c:\windows\fyocfrw.exe
O4 - HKCU\..\Run: [psdgsxd] c:\windows\jmjrdoi.exe
O4 - HKCU\..\Run: [memunjj] c:\windows\jmjrdoi.exe
O4 - HKCU\..\Run: [hioxxeq] c:\windows\jmjrdoi.exe
O4 - HKCU\..\Run: [jkhhssf] c:\windows\jmjrdoi.exe
O4 - HKCU\..\Run: [jostxjk] c:\windows\jmjrdoi.exe
O4 - HKCU\..\Run: [proinvl] c:\windows\jmjrdoi.exe
O4 - HKCU\..\Run: [kdfegnn] c:\windows\jmjrdoi.exe
O4 - HKCU\..\Run: [xnfmnsv] c:\windows\jmjrdoi.exe
O4 - HKCU\..\Run: [xjmhtas] c:\windows\jmjrdoi.exe
O4 - HKCU\..\Run: [gmjmhwe] c:\windows\jmjrdoi.exe
O4 - HKCU\..\Run: [erlsvvg] c:\windows\jmjrdoi.exe
O4 - HKCU\..\Run: [wukmujc] c:\windows\jmjrdoi.exe
O4 - HKCU\..\Run: [ylanxdu] c:\windows\jmjrdoi.exe
O4 - HKCU\..\Run: [oyhlidf] c:\windows\jmjrdoi.exe
O4 - HKCU\..\Run: [twbdrtq] c:\windows\jmjrdoi.exe
O4 - HKCU\..\Run: [qstnyre] c:\windows\jmjrdoi.exe
O4 - HKCU\..\Run: [ktajwor] c:\windows\jmjrdoi.exe
O4 - HKCU\..\Run: [iktrmdq] c:\windows\jmjrdoi.exe
O4 - HKCU\..\Run: [kvavonk] c:\windows\jmjrdoi.exe
O4 - HKCU\..\Run: [eqttfhr] c:\windows\jmjrdoi.exe
O4 - HKCU\..\Run: [wfmoerl] c:\windows\jmjrdoi.exe
O4 - HKCU\..\Run: [gehvamt] c:\windows\jmjrdoi.exe
O4 - HKCU\..\Run: [vfmbqbp] c:\windows\jmjrdoi.exe
O4 - HKCU\..\Run: [sckudjk] c:\windows\jmjrdoi.exe
O4 - HKCU\..\Run: [ipljwtj] c:\windows\jmjrdoi.exe
O4 - HKCU\..\Run: [mpijjce] c:\windows\jmjrdoi.exe
O4 - HKCU\..\Run: [tcqfwdb] c:\windows\jmjrdoi.exe
O4 - HKCU\..\Run: [iuaibxj] c:\windows\jmjrdoi.exe
O4 - HKCU\..\Run: [iabgfbp] c:\windows\jmjrdoi.exe
O4 - HKCU\..\Run: [csdfjdk] c:\windows\jmjrdoi.exe
O4 - HKCU\..\Run: [fmtwlsx] c:\windows\jmjrdoi.exe
O4 - HKCU\..\Run: [yblymao] c:\windows\jmjrdoi.exe
O4 - HKCU\..\Run: [kvhlrxm] c:\windows\jmjrdoi.exe
O4 - HKCU\..\Run: [lvylwng] c:\windows\jmjrdoi.exe
O4 - HKCU\..\Run: [yjyiecx] c:\windows\jmjrdoi.exe
O4 - HKCU\..\Run: [erstrxd] c:\windows\jmjrdoi.exe
O4 - HKCU\..\Run: [tffxtgb] c:\windows\jmjrdoi.exe
O4 - HKCU\..\Run: [qetecak] c:\windows\jmjrdoi.exe
O4 - HKCU\..\Run: [cwhixwc] c:\windows\jmjrdoi.exe
O4 - HKCU\..\Run: [mnecvid] c:\windows\jmjrdoi.exe
O4 - HKCU\..\Run: [mwpvfkf] c:\windows\jmjrdoi.exe
O4 - HKCU\..\Run: [bvevvep] c:\windows\jmjrdoi.exe
O4 - HKCU\..\Run: [iooofmt] c:\windows\jmjrdoi.exe
O4 - HKCU\..\Run: [vigdslp] c:\windows\jmjrdoi.exe
O4 - HKCU\..\Run: [aqdimms] c:\windows\jmjrdoi.exe
O4 - HKCU\..\Run: [mdnimxi] c:\windows\jmjrdoi.exe
O4 - HKCU\..\Run: [omntlcm] c:\windows\jmjrdoi.exe
O4 - HKCU\..\Run: [bdqrdgk] c:\windows\jmjrdoi.exe
O4 - HKCU\..\Run: [sjcdiob] c:\windows\jmjrdoi.exe
O4 - HKCU\..\Run: [bnritmy] c:\windows\jmjrdoi.exe
O4 - HKCU\..\Run: [ckjxkyc] c:\windows\jmjrdoi.exe
O4 - HKCU\..\Run: [diawetd] c:\windows\jmjrdoi.exe
O4 - HKCU\..\Run: [diohawg] c:\windows\jmjrdoi.exe
O4 - HKCU\..\Run: [efdftps] c:\windows\jmjrdoi.exe
O4 - HKCU\..\Run: [jcdhunj] c:\windows\jmjrdoi.exe
O4 - HKCU\..\Run: [wyatsce] c:\windows\jmjrdoi.exe
O4 - HKCU\..\Run: [ohexyyy] c:\windows\jmjrdoi.exe
O4 - HKCU\..\Run: [hwsrxuj] c:\windows\jmjrdoi.exe
O4 - HKCU\..\Run: [djgbpsi] c:\windows\jmjrdoi.exe
O4 - HKCU\..\Run: [huebbqo] c:\windows\jmjrdoi.exe
O4 - HKCU\..\Run: [krbwbuj] c:\windows\jmjrdoi.exe
O4 - HKCU\..\Run: [gftkumk] c:\windows\jmjrdoi.exe
O4 - HKCU\..\Run: [bkvtlyv] c:\windows\jmjrdoi.exe
O4 - HKCU\..\Run: [usbsclx] c:\windows\jmjrdoi.exe
O4 - HKCU\..\Run: [ryugcee] c:\windows\jmjrdoi.exe
O4 - HKCU\..\Run: [qxvrjgv] c:\windows\jmjrdoi.exe
O4 - HKCU\..\Run: [dujieov] c:\windows\jmjrdoi.exe
O4 - HKCU\..\Run: [covyxdm] c:\windows\jmjrdoi.exe
O4 - HKCU\..\Run: [knoihqk] c:\windows\jmjrdoi.exe
O4 - HKCU\..\Run: [iywijwh] c:\windows\jmjrdoi.exe
O4 - HKCU\..\Run: [axrpfsa] c:\windows\jmjrdoi.exe
O4 - HKCU\..\Run: [crqndhv] c:\windows\jmjrdoi.exe
O4 - HKCU\..\Run: [bcrdpwl] c:\windows\jmjrdoi.exe
O4 - HKCU\..\Run: [wtaaxtq] c:\windows\jmjrdoi.exe
O4 - HKCU\..\Run: [pxyxaww] c:\windows\jmjrdoi.exe
O4 - HKCU\..\Run: [uwbokod] c:\windows\jmjrdoi.exe
O4 - HKCU\..\Run: [yuvdkuy] c:\windows\jmjrdoi.exe
O4 - HKCU\..\Run: [yiljvxj] c:\windows\jmjrdoi.exe
O4 - HKCU\..\Run: [iaqbmss] c:\windows\jmjrdoi.exe
O4 - HKCU\..\Run: [ntlkvwr] c:\windows\jmjrdoi.exe
O4 - HKCU\..\Run: [vobxotv] c:\windows\jmjrdoi.exe
O4 - HKCU\..\Run: [wpoidfe] c:\windows\jmjrdoi.exe
O4 - HKCU\..\Run: [srkqnon] c:\windows\jmjrdoi.exe
O4 - HKCU\..\Run: [hsqdmqh] c:\windows\jmjrdoi.exe
O4 - HKCU\..\Run: [faiyfuc] c:\windows\jmjrdoi.exe
O4 - HKCU\..\Run: [wjsxlox] c:\windows\jmjrdoi.exe
O4 - HKCU\..\Run: [uuybhlw] c:\windows\jmjrdoi.exe
O4 - HKCU\..\Run: [kibgpwv] c:\windows\jmjrdoi.exe
O4 - HKCU\..\Run: [quvexsv] c:\windows\jmjrdoi.exe
O4 - HKCU\..\Run: [prgekev] c:\windows\jmjrdoi.exe
O4 - HKCU\..\Run: [nxfysfv] c:\windows\jmjrdoi.exe
O4 - HKCU\..\Run: [umlljkm] c:\windows\jmjrdoi.exe
O4 - HKCU\..\Run: [mvwsjif] c:\windows\jmjrdoi.exe
O4 - HKCU\..\Run: [qbkifqg] c:\windows\jmjrdoi.exe
O4 - HKCU\..\Run: [diydaxd] c:\windows\jmjrdoi.exe
O4 - HKCU\..\Run: [omygbek] c:\windows\jmjrdoi.exe
O4 - HKCU\..\Run: [ckqoqqi] c:\windows\jmjrdoi.exe
O4 - HKCU\..\Run: [vlfcvdk] c:\windows\jmjrdoi.exe
O4 - HKCU\..\Run: [sibcyws] c:\windows\jmjrdoi.exe
O4 - HKCU\..\Run: [ghcspfv] c:\windows\jmjrdoi.exe
O4 - HKCU\..\Run: [ljhkrae] c:\windows\jmjrdoi.exe
O4 - HKCU\..\Run: [wpovvrt] c:\windows\jmjrdoi.exe
O4 - HKCU\..\Run: [qjerovc] c:\windows\jmjrdoi.exe
O4 - HKCU\..\Run: [jtndbaa] c:\windows\jmjrdoi.exe
O4 - HKCU\..\Run: [hirculn] c:\windows\jmjrdoi.exe
O4 - HKCU\..\Run: [ogaqiip] c:\windows\jmjrdoi.exe
O4 - HKCU\..\Run: [vityghx] c:\windows\jmjrdoi.exe
O4 - HKCU\..\Run: [wtdqxrc] c:\windows\jmjrdoi.exe
O4 - HKCU\..\Run: [yxsjyqc] c:\windows\jmjrdoi.exe
O4 - HKCU\..\Run: [iersvge] c:\windows\jmjrdoi.exe
O4 - HKCU\..\Run: [mpesllg] c:\windows\jmjrdoi.exe
O4 - HKCU\..\Run: [qjybsbb] c:\windows\jmjrdoi.exe
O4 - HKCU\..\Run: [mvuukge] c:\windows\jmjrdoi.exe
O4 - HKCU\..\Run: [romgnxk] c:\windows\jmjrdoi.exe
O4 - HKCU\..\Run: [fhigaqe] c:\windows\jmjrdoi.exe
O4 - HKCU\..\Run: [rccijwr] c:\windows\jmjrdoi.exe
O4 - HKCU\..\Run: [ggdcybq] c:\windows\jmjrdoi.exe
O4 - HKCU\..\Run: [qdqcond] c:\windows\jmjrdoi.exe
O4 - HKCU\..\Run: [qmtyqmy] c:\windows\jmjrdoi.exe
O4 - HKCU\..\Run: [ubmondm] c:\windows\jmjrdoi.exe
O4 - HKCU\..\Run: [gqmcnde] c:\windows\jmjrdoi.exe
O4 - HKCU\..\Run: [ecaitvv] c:\windows\jmjrdoi.exe
O4 - HKCU\..\Run: [wjseiva] c:\windows\jmjrdoi.exe
O4 - HKCU\..\Run: [ycfkedq] c:\windows\jmjrdoi.exe
O4 - HKCU\..\Run: [sjdfmdu] c:\windows\jmjrdoi.exe
O4 - HKCU\..\Run: [ntrdyqq] c:\windows\jmjrdoi.exe
O4 - HKCU\..\Run: [ujvtrjo] c:\windows\jmjrdoi.exe
O4 - HKCU\..\Run: [sdcubox] c:\windows\jmjrdoi.exe
O4 - HKCU\..\Run: [kpvlfib] c:\windows\jmjrdoi.exe
O4 - HKCU\..\Run: [xkfgive] c:\windows\jmjrdoi.exe
O4 - HKCU\..\Run: [pmhvphx] c:\windows\jmjrdoi.exe
O4 - HKCU\..\Run: [qetvybq] c:\windows\jmjrdoi.exe
O4 - HKCU\..\Run: [bqvrjxx] c:\windows\jmjrdoi.exe
O4 - HKCU\..\Run: [rpkwxoq] c:\windows\jmjrdoi.exe
O4 - HKCU\..\Run: [ijmjoaf] c:\windows\jmjrdoi.exe
O4 - HKCU\..\Run: [unrhixp] c:\windows\jmjrdoi.exe
O4 - HKCU\..\Run: [ybrqoep] c:\windows\jmjrdoi.exe
O4 - HKCU\..\Run: [xhghcnr] c:\windows\jmjrdoi.exe
O4 - HKCU\..\Run: [bmixyyh] c:\windows\jmjrdoi.exe
O4 - HKCU\..\Run: [eewfnrb] c:\windows\jmjrdoi.exe
O4 - HKCU\..\Run: [guenmnt] c:\windows\jmjrdoi.exe
O4 - HKCU\..\Run: [vdwlyaj] c:\windows\jmjrdoi.exe
O4 - HKCU\..\Run: [nkvmuaw] c:\windows\jmjrdoi.exe
O4 - HKCU\..\Run: [ysdwmcm] c:\windows\jmjrdoi.exe
O4 - HKCU\..\Run: [iokqqyc] c:\windows\jmjrdoi.exe
O4 - HKCU\..\Run: [footuhy] c:\windows\jmjrdoi.exe
O4 - HKCU\..\Run: [nxjxwmi] c:\windows\jmjrdoi.exe
O4 - HKCU\..\Run: [kspjyit] c:\windows\jmjrdoi.exe
O4 - HKCU\..\Run: [mvocqbn] c:\windows\jmjrdoi.exe
O4 - HKCU\..\Run: [uaotmpd] c:\windows\jmjrdoi.exe
O4 - HKCU\..\Run: [iihtllo] c:\windows\jmjrdoi.exe
O4 - HKCU\..\Run: [ruddchb] c:\windows\jmjrdoi.exe
O4 - HKCU\..\Run: [ddbopeb] c:\windows\jmjrdoi.exe
O4 - HKCU\..\Run: [tccvxlp] c:\windows\jmjrdoi.exe
O4 - HKCU\..\Run: [ejcxlxe] c:\windows\jmjrdoi.exe
O4 - HKCU\..\Run: [uxutqqm] c:\windows\jmjrdoi.exe
O4 - HKCU\..\Run: [idevssr] c:\windows\jmjrdoi.exe
O4 - HKCU\..\Run: [gvfunsi] c:\windows\jmjrdoi.exe
O4 - HKCU\..\Run: [nsgjcad] c:\windows\jmjrdoi.exe
O4 - HKCU\..\Run: [vkgutcm] c:\windows\jmjrdoi.exe
O4 - HKCU\..\Run: [fyitoim] c:\windows\jmjrdoi.exe
O4 - HKCU\..\Run: [pwysraj] c:\windows\jmjrdoi.exe
O4 - HKCU\..\Run: [uagtfcv] c:\windows\jmjrdoi.exe
O4 - HKCU\..\Run: [kkhgeok] c:\windows\jmjrdoi.exe
O4 - HKCU\..\Run: [litnqxh] c:\windows\jmjrdoi.exe
O4 - HKCU\..\Run: [ambmbqq] c:\windows\jmjrdoi.exe
O4 - HKCU\..\Run: [objgtag] c:\windows\jmjrdoi.exe
O4 - HKCU\..\Run: [atahpkp] c:\windows\jmjrdoi.exe
O4 - HKCU\..\Run: [rqpurbu] c:\windows\jmjrdoi.exe
O4 - HKCU\..\Run: [tyxocxe] c:\windows\jmjrdoi.exe
O4 - HKCU\..\Run: [dyuaggi] c:\windows\jmjrdoi.exe
O4 - HKCU\..\Run: [plrcklk] c:\windows\jmjrdoi.exe
O4 - HKCU\..\Run: [xksbgyo] c:\windows\jmjrdoi.exe
O4 - HKCU\..\Run: [vsrqpkt] c:\windows\jmjrdoi.exe
O4 - HKCU\..\Run: [uokcdgn] c:\windows\jmjrdoi.exe
O4 - HKCU\..\Run: [cqtiukx] c:\windows\jmjrdoi.exe
O4 - HKCU\..\Run: [beukcyt] c:\windows\jmjrdoi.exe
O4 - HKCU\..\Run: [hnajyyc] c:\windows\jmjrdoi.exe
O4 - HKCU\..\Run: [oguxfij] c:\windows\jmjrdoi.exe
O4 - HKCU\..\Run: [lxqbnwc] c:\windows\jmjrdoi.exe
O4 - HKCU\..\Run: [ctclnjh] c:\windows\jmjrdoi.exe
O4 - HKCU\..\Run: [pncbqyo] c:\windows\jmjrdoi.exe
O4 - HKCU\..\Run: [gkgegdn] c:\windows\jmjrdoi.exe
O4 - HKCU\..\Run: [olueyrn] c:\windows\jmjrdoi.exe
O4 - HKCU\..\Run: [wropywo] c:\windows\jmjrdoi.exe
O4 - HKCU\..\Run: [hrpgtpi] c:\windows\jmjrdoi.exe
O4 - HKCU\..\Run: [gomkesr] c:\windows\jmjrdoi.exe
O4 - HKCU\..\Run: [kfpjywn] c:\windows\jmjrdoi.exe
O4 - HKCU\..\Run: [lbpcjqo] c:\windows\jmjrdoi.exe
O4 - HKCU\..\Run: [cvpniac] c:\windows\jmjrdoi.exe
O4 - HKCU\..\Run: [smwpssp] c:\windows\jmjrdoi.exe
O4 - HKCU\..\Run: [ndinwcc] c:\windows\jmjrdoi.exe
O4 - HKCU\..\Run: [fvdnnps] c:\windows\jmjrdoi.exe
O4 - HKCU\..\Run: [tvoevif] c:\windows\jmjrdoi.exe
O4 - HKCU\..\Run: [emfdtnw] c:\windows\jmjrdoi.exe
O4 - HKCU\..\Run: [niyqjrp] c:\windows\jmjrdoi.exe
O4 - HKCU\..\Run: [ufnmsmw] c:\windows\jmjrdoi.exe
O4 - HKCU\..\Run: [eucspcm] c:\windows\jmjrdoi.exe
O4 - HKCU\..\Run: [uoodtob] c:\windows\jmjrdoi.exe
O4 - HKCU\..\Run: [mfimovb] c:\windows\jmjrdoi.exe
O4 - HKCU\..\Run: [enlmacf] c:\windows\jmjrdoi.exe
O4 - HKCU\..\Run: [whcahhg] c:\windows\jmjrdoi.exe
O4 - HKCU\..\Run: [anllejk] c:\windows\jmjrdoi.exe
O4 - HKCU\..\Run: [jvwcrwt] c:\windows\jmjrdoi.exe
O4 - HKCU\..\Run: [hpvjpmd] c:\windows\jmjrdoi.exe
O4 - HKCU\..\Run: [qnqjfpc] c:\windows\jmjrdoi.exe
O4 - HKCU\..\Run: [ugpeyvb] c:\windows\jmjrdoi.exe
O4 - HKCU\..\Run: [lvtqjll] c:\windows\jmjrdoi.exe
O4 - HKCU\..\Run: [hyadnhi] c:\windows\jmjrdoi.exe
O4 - HKCU\..\Run: [mrtauod] c:\windows\kkdwfpn.exe
O4 - HKCU\..\Run: [mujayak] c:\windows\kkdwfpn.exe
O4 - HKCU\..\Run: [riombdr] c:\windows\kkdwfpn.exe
O4 - HKCU\..\Run: [fjkmjgu] c:\windows\kkdwfpn.exe
O4 - HKCU\..\Run: [fophrie] c:\windows\kkdwfpn.exe
O4 - HKCU\..\Run: [rhafikv] c:\windows\kkdwfpn.exe
O4 - HKCU\..\Run: [ghdjpsb] c:\windows\kkdwfpn.exe
O4 - HKCU\..\Run: [hvbvcvs] c:\windows\kkdwfpn.exe
O4 - HKCU\..\Run: [vkgmwgd] c:\windows\kkdwfpn.exe
O4 - HKCU\..\Run: [xdwqwqc] c:\windows\kkdwfpn.exe
O4 - HKCU\..\Run: [ljrcptd] c:\windows\kkdwfpn.exe
O4 - HKCU\..\Run: [wkamota] c:\windows\kkdwfpn.exe
O4 - HKCU\..\Run: [upcuovr] c:\windows\kkdwfpn.exe
O4 - HKCU\..\Run: [yomnedr] c:\windows\kkdwfpn.exe
O4 - HKCU\..\Run: [puxueaf] c:\windows\kkdwfpn.exe
O4 - HKCU\..\Run: [oguqjhr] c:\windows\kkdwfpn.exe
O4 - HKCU\..\Run: [kxvyexu] c:\windows\kkdwfpn.exe
O4 - HKCU\..\Run: [roixjao] c:\windows\kkdwfpn.exe
O4 - HKCU\..\Run: [pxvyvmj] c:\windows\kkdwfpn.exe
O4 - HKCU\..\Run: [hgmpmwh] c:\windows\kkdwfpn.exe
O4 - HKCU\..\Run: [gtovvrq] c:\windows\kkdwfpn.exe
O4 - HKCU\..\Run: [lucgyha] c:\windows\kkdwfpn.exe
O4 - HKCU\..\Run: [ijqxgxj] c:\windows\kkdwfpn.exe
O4 - HKCU\..\Run: [tgskwpn] c:\windows\kkdwfpn.exe
O4 - HKCU\..\Run: [rlibuyo] c:\windows\kkdwfpn.exe
O4 - HKCU\..\Run: [sajdyyk] c:\windows\kkdwfpn.exe
O4 - HKCU\..\Run: [hcqverp] c:\windows\kkdwfpn.exe
O4 - HKCU\..\Run: [afrntck] c:\windows\kkdwfpn.exe
O4 - HKCU\..\Run: [jfjtxmx] c:\windows\kkdwfpn.exe
O4 - HKCU\..\Run: [idwwnkp] c:\windows\kkdwfpn.exe
O4 - HKCU\..\Run: [usgcfya] c:\windows\kkdwfpn.exe
O4 - HKCU\..\Run: [qhargtc] c:\windows\kkdwfpn.exe
O4 - HKCU\..\Run: [lpakxwe] c:\windows\kkdwfpn.exe
O4 - HKCU\..\Run: [bkckcfi] c:\windows\kkdwfpn.exe
O4 - HKCU\..\Run: [osvggfx] c:\windows\kkdwfpn.exe
O4 - HKCU\..\Run: [jeojmdu] c:\windows\kkdwfpn.exe
O4 - HKCU\..\Run: [gmmgdas] c:\windows\kkdwfpn.exe
O4 - HKCU\..\Run: [xtjuhtn] c:\windows\kkdwfpn.exe
O4 - HKCU\..\Run: [cktkvci] c:\windows\kkdwfpn.exe
O4 - HKCU\..\Run: [kfqpixw] c:\windows\kkdwfpn.exe
O4 - HKCU\..\Run: [pixbqfv] c:\windows\kkdwfpn.exe
O4 - HKCU\..\Run: [stxavfe] c:\windows\kkdwfpn.exe
O4 - HKCU\..\Run: [dmhinri] c:\windows\kkdwfpn.exe
O4 - HKCU\..\Run: [apurugo] c:\windows\kkdwfpn.exe
O4 - HKCU\..\Run: [ijlaxes] c:\windows\kkdwfpn.exe
O4 - HKCU\..\Run: [manlmpa] c:\windows\kkdwfpn.exe
O4 - HKCU\..\Run: [dukrmun] c:\windows\kkdwfpn.exe
O4 - HKCU\..\Run: [tpqshsb] c:\windows\kkdwfpn.exe
O4 - HKCU\..\Run: [nwtddoe] c:\windows\kkdwfpn.exe
O4 - HKCU\..\Run: [uerxdhv] c:\windows\kkdwfpn.exe
O4 - HKCU\..\Run: [owxbudq] c:\windows\kkdwfpn.exe
O4 - HKCU\..\Run: [epbnhvj] c:\windows\kkdwfpn.exe
O4 - HKCU\..\Run: [gdmcqww] c:\windows\kkdwfpn.exe
O4 - HKCU\..\Run: [jgocgvh] c:\windows\kkdwfpn.exe
O4 - HKCU\..\Run: [oakkair] c:\windows\kkdwfpn.exe
O4 - HKCU\..\Run: [ynucnyj] c:\windows\kkdwfpn.exe
O4 - HKCU\..\Run: [svuynsd] c:\windows\kkdwfpn.exe
O4 - HKCU\..\Run: [iurhnop] c:\windows\kkdwfpn.exe
O4 - HKCU\..\Run: [ejaxlgr] c:\windows\kkdwfpn.exe
O4 - HKCU\..\Run: [qtujrsp] c:\windows\kkdwfpn.exe
O4 - HKCU\..\Run: [yemsuds] c:\windows\kkdwfpn.exe
O4 - HKCU\..\Run: [uyfbgjv] c:\windows\kkdwfpn.exe
O4 - HKCU\..\Run: [weisths] c:\windows\kkdwfpn.exe
O4 - HKCU\..\Run: [uqucrxh] c:\windows\kkdwfpn.exe
O4 - HKCU\..\Run: [acydbmb] c:\windows\kkdwfpn.exe
O4 - HKCU\..\Run: [iwnbocq] c:\windows\kkdwfpn.exe
O4 - HKCU\..\Run: [aasiiia] c:\windows\kkdwfpn.exe
O4 - HKCU\..\Run: [qimecag] c:\windows\kkdwfpn.exe
O4 - HKCU\..\Run: [pkyhtyx] c:\windows\kkdwfpn.exe
O4 - HKCU\..\Run: [fsmodsg] c:\windows\kkdwfpn.exe
O4 - HKCU\..\Run: [fatpqbn] c:\windows\kkdwfpn.exe
O4 - HKCU\..\Run: [mfiqrcu] c:\windows\kkdwfpn.exe
O4 - HKCU\..\Run: [lxukwrr] c:\windows\kkdwfpn.exe
O4 - HKCU\..\Run: [yuefjpk] c:\windows\kkdwfpn.exe
O4 - HKCU\..\Run: [vwngvdf] c:\windows\kkdwfpn.exe
O4 - HKCU\..\Run: [ablhuew] c:\windows\kkdwfpn.exe
O4 - HKCU\..\Run: [rwclbqu] c:\windows\kkdwfpn.exe
O4 - HKCU\..\Run: [wbwtdmg] c:\windows\kkdwfpn.exe
O4 - HKCU\..\Run: [nhkpblt] c:\windows\kkdwfpn.exe
O4 - HKCU\..\Run: [vbtetis] c:\windows\kkdwfpn.exe
O4 - HKCU\..\Run: [jwptghe] c:\windows\kkdwfpn.exe
O4 - HKCU\..\Run: [ixcrwtk] c:\windows\kkdwfpn.exe
O4 - HKCU\..\Run: [jvajwdr] c:\windows\kkdwfpn.exe
O4 - HKCU\..\Run: [aguojxw] c:\windows\kkdwfpn.exe
O4 - HKCU\..\Run: [wfoycjv] c:\windows\kkdwfpn.exe
O4 - HKCU\..\Run: [fshwjvs] c:\windows\kkdwfpn.exe
O4 - HKCU\..\Run: [olecwxc] c:\windows\kkdwfpn.exe
O4 - HKCU\..\Run: [fopljvh] c:\windows\kkdwfpn.exe
O4 - HKCU\..\Run: [kwfkjic] c:\windows\kkdwfpn.exe
O4 - HKCU\..\Run: [msciwcj] c:\windows\kkdwfpn.exe
O4 - HKCU\..\Run: [vmvcwht] c:\windows\kkdwfpn.exe
O4 - HKCU\..\Run: [lyrhrmb] c:\windows\kkdwfpn.exe
O4 - HKCU\..\Run: [gcwxjkd] c:\windows\kkdwfpn.exe
O4 - HKCU\..\Run: [omxxsar] c:\windows\kkdwfpn.exe
O4 - HKCU\..\Run: [vwcaoob] c:\windows\kkdwfpn.exe
O4 - HKCU\..\Run: [isctfen] c:\windows\kkdwfpn.exe
O4 - HKCU\..\Run: [kdcpmxh] c:\windows\kkdwfpn.exe
O4 - HKCU\..\Run: [quhyutd] c:\windows\kkdwfpn.exe
O4 - HKCU\..\Run: [mjxouer] c:\windows\kkdwfpn.exe
O4 - HKCU\..\Run: [qqcgvfb] c:\windows\kkdwfpn.exe
O4 - HKCU\..\Run: [xsdmlgx] c:\windows\kkdwfpn.exe
O4 - HKCU\..\Run: [iekauxg] c:\windows\kkdwfpn.exe
O4 - HKCU\..\Run: [oridcxa] c:\windows\kkdwfpn.exe
O4 - HKCU\..\Run: [pdjuidb] c:\windows\kkdwfpn.exe
O4 - HKCU\..\Run: [mejbwge] c:\windows\kkdwfpn.exe
O4 - HKCU\..\Run: [xtikwyp] c:\windows\kkdwfpn.exe
O4 - HKCU\..\Run: [cueobxn] c:\windows\kkdwfpn.exe
O4 - HKCU\..\Run: [mlupgwy] c:\windows\kkdwfpn.exe
O4 - HKCU\..\Run: [ooydthb] c:\windows\kkdwfpn.exe
O4 - HKCU\..\Run: [ystcyjs] c:\windows\kkdwfpn.exe
O4 - HKCU\..\Run: [txeuveg] c:\windows\kkdwfpn.exe
O4 - HKCU\..\Run: [vvmuxyd] c:\windows\kkdwfpn.exe
O4 - HKCU\..\Run: [cxwluoj] c:\windows\kkdwfpn.exe
O4 - HKCU\..\Run: [nidiery] c:\windows\kkdwfpn.exe
O4 - HKCU\..\Run: [jwtqqhh] c:\windows\kkdwfpn.exe
O4 - HKCU\..\Run: [hyqbmps] c:\windows\kkdwfpn.exe
O4 - HKCU\..\Run: [vktlxdq] c:\windows\kkdwfpn.exe
O4 - HKCU\..\Run: [uekeixo] c:\windows\kkdwfpn.exe
O4 - HKCU\..\Run: [gidfwca] c:\windows\kkdwfpn.exe
O4 - HKCU\..\Run: [mqmjocr] c:\windows\kkdwfpn.exe
O4 - HKCU\..\Run: [vnaupgb] c:\windows\kkdwfpn.exe
O4 - HKCU\..\Run: [oidkkpl] c:\windows\kkdwfpn.exe
O4 - HKCU\..\Run: [sryyaou] c:\windows\kkdwfpn.exe
O4 - HKCU\..\Run: [xngqnut] c:\windows\kkdwfpn.exe
O4 - HKCU\..\Run: [wjoilkg] c:\windows\kkdwfpn.exe
O4 - HKCU\..\Run: [kpecwbi] c:\windows\kkdwfpn.exe
O4 - HKCU\..\Run: [ooserbh] c:\windows\kkdwfpn.exe
O4 - HKCU\..\Run: [ivdobkh] c:\windows\kkdwfpn.exe
O4 - HKCU\..\Run: [sovinrp] c:\windows\kkdwfpn.exe
O4 - HKCU\..\Run: [hpaifkl] c:\windows\kkdwfpn.exe
O4 - HKCU\..\Run: [jxfofox] c:\windows\kkdwfpn.exe
O4 - HKCU\..\Run: [vxdymef] c:\windows\kkdwfpn.exe
O4 - HKCU\..\Run: [xwwswuu] c:\windows\kkdwfpn.exe
O4 - HKCU\..\Run: [ddgtgas] c:\windows\kkdwfpn.exe
O4 - HKCU\..\Run: [bdsefxd] c:\windows\kkdwfpn.exe
O4 - HKCU\..\Run: [ufexkbb] c:\windows\kkdwfpn.exe
O4 - HKCU\..\Run: [xxckxky] c:\windows\kkdwfpn.exe
O4 - HKCU\..\Run: [xdxpumn] c:\windows\kkdwfpn.exe
O4 - HKCU\..\Run: [fhyysvg] c:\windows\kkdwfpn.exe
O4 - HKCU\..\Run: [xotbvvu] c:\windows\kkdwfpn.exe
O4 - HKCU\..\Run: [qtdyvdp] c:\windows\kkdwfpn.exe
O4 - HKCU\..\Run: [mbfaxxp] c:\windows\kkdwfpn.exe
O4 - HKCU\..\Run: [siymagj] c:\windows\kkdwfpn.exe
O4 - HKCU\..\Run: [vhfmynv] c:\windows\kkdwfpn.exe
O4 - HKCU\..\Run: [wtbpeyl] c:\windows\kkdwfpn.exe
O4 - HKCU\..\Run: [rxlwich] c:\windows\kkdwfpn.exe
O4 - HKCU\..\Run: [agaopji] c:\windows\kkdwfpn.exe
O4 - HKCU\..\Run: [omkiigy] c:\windows\kkdwfpn.exe
O4 - HKCU\..\Run: [ucdmygk] c:\windows\kkdwfpn.exe
O4 - HKCU\..\Run: [yrbobra] c:\windows\kkdwfpn.exe
O4 - HKCU\..\Run: [ngnadbs] c:\windows\kkdwfpn.exe
O4 - HKCU\..\Run: [vcuqiqe] c:\windows\kkdwfpn.exe
O4 - HKCU\..\Run: [iqtsoap] c:\windows\kkdwfpn.exe
O4 - HKCU\..\Run: [udlopjp] c:\windows\kkdwfpn.exe
O4 - HKCU\..\Run: [gbdikuq] c:\windows\kkdwfpn.exe
O4 - HKCU\..\Run: [sfitvbs] c:\windows\kkdwfpn.exe
O4 - HKCU\..\Run: [oilwtcg] c:\windows\kkdwfpn.exe
O4 - HKCU\..\Run: [cjceqbb] c:\windows\kkdwfpn.exe
O4 - HKCU\..\Run: [bwmkdbv] c:\windows\kkdwfpn.exe
O4 - HKCU\..\Run: [ufihjnb] c:\windows\kkdwfpn.exe
O4 - HKCU\..\Run: [gjutmio] c:\windows\kkdwfpn.exe
O4 - HKCU\..\Run: [pwhdgek] c:\windows\kkdwfpn.exe
O4 - HKCU\..\Run: [dvhcehn] c:\windows\kkdwfpn.exe
O4 - HKCU\..\Run: [vworqis] c:\windows\kkdwfpn.exe
O4 - HKCU\..\Run: [hgibyrr] c:\windows\kkdwfpn.exe
O4 - HKCU\..\Run: [jqelkpy] c:\windows\kkdwfpn.exe
O4 - HKCU\..\Run: [pyeabkh] c:\windows\kkdwfpn.exe
O4 - HKCU\..\Run: [dtcudri] c:\windows\kkdwfpn.exe
O4 - HKCU\..\Run: [ydlxjqs] c:\windows\kkdwfpn.exe
O4 - HKCU\..\Run: [hmqypgv] c:\windows\kkdwfpn.exe
O4 - HKCU\..\Run: [soqflqe] c:\windows\kkdwfpn.exe
O4 - HKCU\..\Run: [xgexhmj] c:\windows\kkdwfpn.exe
O4 - HKCU\..\Run: [pwnaeeo] c:\windows\kkdwfpn.exe
O4 - HKCU\..\Run: [ibjcxuf] c:\windows\kkdwfpn.exe
O4 - HKCU\..\Run: [kebvnyl] c:\windows\kkdwfpn.exe
O4 - HKCU\..\Run: [vqgacxi] c:\windows\kkdwfpn.exe
O4 - HKCU\..\Run: [xkqqoyx] c:\windows\kkdwfpn.exe
O4 - HKCU\..\Run: [egpmvfc] c:\windows\kkdwfpn.exe
O4 - HKCU\..\Run: [talvjer] c:\windows\kkdwfpn.exe
O4 - HKCU\..\Run: [kpytmfn] c:\windows\kkdwfpn.exe
O4 - HKCU\..\Run: [lrpaarf] c:\windows\kkdwfpn.exe
O4 - HKCU\..\Run: [mfgqkui] c:\windows\kkdwfpn.exe
O4 - HKCU\..\Run: [jxpqpcq] c:\windows\kkdwfpn.exe
O4 - HKCU\..\Run: [kcxdvjd] c:\windows\kkdwfpn.exe
O4 - HKCU\..\Run: [ycwnnek] c:\windows\kkdwfpn.exe
O4 - HKCU\..\Run: [oqrwvlo] c:\windows\kkdwfpn.exe
O4 - HKCU\..\Run: [usavoud] c:\windows\kkdwfpn.exe
O4 - HKCU\..\Run: [iutyhpw] c:\windows\kkdwfpn.exe
O4 - HKCU\..\Run: [ylpofmf] c:\windows\kkdwfpn.exe
O4 - HKCU\..\Run: [mvtrwsb] c:\windows\kkdwfpn.exe
O4 - HKCU\..\Run: [dlqxyuc] c:\windows\kkdwfpn.exe
O4 - HKCU\..\Run: [vcbvilj] c:\windows\kkdwfpn.exe
O4 - HKCU\..\Run: [dikirit] c:\windows\kkdwfpn.exe
O4 - HKCU\..\Run: [udtniet] c:\windows\kkdwfpn.exe
O4 - HKCU\..\Run: [fgyudcj] c:\windows\kkdwfpn.exe
O4 - HKCU\..\Run: [fifraaq] c:\windows\kkdwfpn.exe
O4 - HKCU\..\Run: [qfjilyr] c:\windows\kkdwfpn.exe
O4 - HKCU\..\Run: [vsfpfke] c:\windows\kkdwfpn.exe
O4 - HKCU\..\Run: [ewytrov] c:\windows\kkdwfpn.exe
O4 - HKCU\..\Run: [rcmjraj] c:\windows\kkdwfpn.exe
O4 - HKCU\..\Run: [spadloa] c:\windows\kkdwfpn.exe
O4 - HKCU\..\Run: [ghboqli] c:\windows\kkdwfpn.exe
O4 - HKCU\..\Run: [ysyxsce] c:\windows\kkdwfpn.exe
O4 - HKCU\..\Run: [afwnfcq] c:\windows\kkdwfpn.exe
O4 - HKCU\..\Run: [difcllc] c:\windows\kkdwfpn.exe
O4 - HKCU\..\Run: [ftixxqs] c:\windows\kkdwfpn.exe
O4 - HKCU\..\Run: [rdpclow] c:\windows\kkdwfpn.exe
O4 - HKCU\..\Run: [xeaglcc] c:\windows\kkdwfpn.exe
O4 - HKCU\..\Run: [ksdcjdn] c:\windows\kkdwfpn.exe
O4 - HKCU\..\Run: [fuheced] c:\windows\kkdwfpn.exe
O4 - HKCU\..\Run: [aiufmkg] c:\windows\kkdwfpn.exe
O4 - HKCU\..\Run: [jcfqsym] c:\windows\kkdwfpn.exe
O4 - HKCU\..\Run: [lpfbwnf] c:\windows\kkdwfpn.exe
O4 - HKCU\..\Run: [evfbjxt] c:\windows\kkdwfpn.exe
O4 - HKCU\..\Run: [qxqjkme] c:\windows\kkdwfpn.exe
O4 - HKCU\..\Run: [eagqgec] c:\windows\kkdwfpn.exe
O4 - HKCU\..\Run: [xvxrvgc] c:\windows\kkdwfpn.exe
O4 - HKCU\..\Run: [cjlmpab] c:\windows\kkdwfpn.exe
O4 - HKCU\..\Run: [wxkgcje] c:\windows\kkdwfpn.exe
O4 - HKCU\..\Run: [icmopwh] c:\windows\kkdwfpn.exe
O4 - HKCU\..\Run: [tcajorh] c:\windows\kkdwfpn.exe
O4 - HKCU\..\Run: [jbigqrp] c:\windows\kkdwfpn.exe
O4 - HKCU\..\Run: [uxkxgpi] c:\windows\kkdwfpn.exe
O4 - HKCU\..\Run: [muradbq] c:\windows\kkdwfpn.exe
O4 - HKCU\..\Run: [mkdnkgw] c:\windows\kkdwfpn.exe
O4 - HKCU\..\Run: [hvaowof] c:\windows\kkdwfpn.exe
O4 - HKCU\..\Run: [ahymtti] c:\windows\kkdwfpn.exe
O4 - HKCU\..\Run: [lbyhhqw] c:\windows\kkdwfpn.exe
O4 - HKCU\..\Run: [reanepy] c:\windows\kkdwfpn.exe
O4 - HKCU\..\Run: [lkovobq] c:\windows\kkdwfpn.exe
O4 - HKCU\..\Run: [rlisesd] c:\windows\kkdwfpn.exe
O4 - HKCU\..\Run: [ljuihuq] c:\windows\kkdwfpn.exe
O4 - HKCU\..\Run: [lhekoql] c:\windows\kkdwfpn.exe
O4 - HKCU\..\Run: [ecullft] c:\windows\kkdwfpn.exe
O4 - HKCU\..\Run: [lyqxdxe] c:\windows\kkdwfpn.exe
O4 - HKCU\..\Run: [ugugier] c:\windows\kkdwfpn.exe
O4 - HKCU\..\Run: [wnchnaf] c:\windows\kkdwfpn.exe
O4 - HKCU\..\Run: [begdvdj] c:\windows\kkdwfpn.exe
O4 - HKCU\..\Run: [nuwkwjc] c:\windows\kkdwfpn.exe
O4 - HKCU\..\Run: [edvbfwo] c:\windows\kkdwfpn.exe
O4 - HKCU\..\Run: [loajvyu] c:\windows\kkdwfpn.exe
O4 - HKCU\..\Run: [ecbcoce] c:\windows\kkdwfpn.exe
O4 - HKCU\..\Run: [fjvjmxv] c:\windows\kkdwfpn.exe
O4 - HKCU\..\Run: [bryjrvt] c:\windows\kkdwfpn.exe
O4 - HKCU\..\Run: [lgwmksm] c:\windows\kkdwfpn.exe
O4 - HKCU\..\Run: [voahvso] c:\windows\kkdwfpn.exe
O4 - HKCU\..\Run: [javjomp] c:\windows\kkdwfpn.exe
O4 - HKCU\..\Run: [facbtyo] c:\windows\kkdwfpn.exe
O4 - HKCU\..\Run: [lsjrtsf] c:\windows\kkdwfpn.exe
O4 - HKCU\..\Run: [swjkggv] c:\windows\kkdwfpn.exe
O4 - HKCU\..\Run: [wtbgngo] c:\windows\kkdwfpn.exe
O4 - HKCU\..\Run: [gviylix] c:\windows\kkdwfpn.exe
O4 - HKCU\..\Run: [rrqeppn] c:\windows\kkdwfpn.exe
O4 - HKCU\..\Run: [nywlsoy] c:\windows\kkdwfpn.exe
O4 - HKCU\..\Run: [axbrbra] c:\windows\kkdwfpn.exe
O4 - HKCU\..\Run: [uppqxgl] c:\windows\kkdwfpn.exe
O4 - HKCU\..\Run: [onntyqm] c:\windows\kkdwfpn.exe
O4 - HKCU\..\Run: [hpsiinm] c:\windows\kkdwfpn.exe
O4 - HKCU\..\Run: [xdaunbh] c:\windows\kkdwfpn.exe
O4 - HKCU\..\Run: [dtswcpl] c:\windows\kkdwfpn.exe
O4 - HKCU\..\Run: [dngrxqo] c:\windows\kkdwfpn.exe
O4 - HKCU\..\Run: [wsisleo] c:\windows\kkdwfpn.exe
O4 - HKCU\..\Run: [bjlcoeo] c:\windows\kkdwfpn.exe
O4 - HKCU\..\Run: [nyipabr] c:\windows\kkdwfpn.exe
O4 - HKCU\..\Run: [hclgxlr] c:\windows\kkdwfpn.exe
O4 - HKCU\..\Run: [ilnrjrv] c:\windows\kkdwfpn.exe
O4 - HKCU\..\Run: [okkvgay] c:\windows\kkdwfpn.exe
O4 - HKCU\..\Run: [tetkibk] c:\windows\kkdwfpn.exe
O4 - HKCU\..\Run: [pvfmfvd] c:\windows\kkdwfpn.exe
O4 - HKCU\..\Run: [nifgqvm] c:\windows\kkdwfpn.exe
O4 - HKCU\..\Run: [uvecupi] c:\windows\kkdwfpn.exe
O4 - HKCU\..\Run: [ovegpeh] c:\windows\kkdwfpn.exe
O4 - HKCU\..\Run: [iwtyhyj] c:\windows\kkdwfpn.exe
O4 - HKCU\..\Run: [irogqdw] c:\windows\kkdwfpn.exe
O4 - HKCU\..\Run: [thhaylj] c:\windows\kkdwfpn.exe
O4 - HKCU\..\Run: [wfdfbhk] c:\windows\kkdwfpn.exe
O4 - HKCU\..\Run: [fyriijf] c:\windows\kkdwfpn.exe
O4 - HKCU\..\Run: [gltyuux] c:\windows\kkdwfpn.exe
O4 - HKCU\..\Run: [krmweki] c:\windows\kkdwfpn.exe
O4 - HKCU\..\Run: [pmweorb] c:\windows\kkdwfpn.exe
O4 - HKCU\..\Run: [qrqaqel] c:\windows\kkdwfpn.exe
O4 - HKCU\..\Run: [trathgq] c:\windows\kkdwfpn.exe
O4 - HKCU\..\Run: [fjrolff] c:\windows\kkdwfpn.exe
O4 - HKCU\..\Run: [ruelmhs] c:\windows\kkdwfpn.exe
O4 - HKCU\..\Run: [ipmadjd] c:\windows\kkdwfpn.exe
O4 - HKCU\..\Run: [upowebi] c:\windows\kkdwfpn.exe
O4 - HKCU\..\Run: [qeuilkl] c:\windows\kkdwfpn.exe
O4 - HKCU\..\Run: [vtdoxxg] c:\windows\kkdwfpn.exe
O4 - HKCU\..\Run: [nnboqyf] c:\windows\kkdwfpn.exe
O4 - HKCU\..\Run: [ewlxdfj] c:\windows\kkdwfpn.exe
O4 - HKCU\..\Run: [lxumbsc] c:\windows\kkdwfpn.exe
O4 - HKCU\..\Run: [uhhuejj] c:\windows\kkdwfpn.exe
O4 - HKCU\..\Run: [pscsmdq] c:\windows\kkdwfpn.exe
O4 - HKCU\..\Run: [yqpwskf] c:\windows\kkdwfpn.exe
O4 - HKCU\..\Run: [ghqbwdm] c:\windows\kkdwfpn.exe
O4 - HKCU\..\Run: [yclbdqx] c:\windows\kkdwfpn.exe
O4 - HKCU\..\Run: [lxkdwli] c:\windows\kkdwfpn.exe
O4 - HKCU\..\Run: [cuukvai] c:\windows\kkdwfpn.exe
O4 - HKCU\..\Run: [tfblpbl] c:\windows\kkdwfpn.exe
O4 - HKCU\..\Run: [nqriuev] c:\windows\kkdwfpn.exe
O4 - HKCU\..\Run: [wsnsiaw] c:\windows\kkdwfpn.exe
O4 - HKCU\..\Run: [nhjwfmf] c:\windows\kkdwfpn.exe
O4 - HKCU\..\Run: [nxrhjpb] c:\windows\kkdwfpn.exe
O4 - HKCU\..\Run: [gnhqtxt] c:\windows\kkdwfpn.exe
O4 - HKCU\..\Run: [eowibsw] c:\windows\kkdwfpn.exe
O4 - HKCU\..\Run: [abkutlc] c:\windows\kkdwfpn.exe
O4 - HKCU\..\Run: [dgxwksr] c:\windows\kkdwfpn.exe
O4 - HKCU\..\Run: [olnnmrj] c:\windows\kkdwfpn.exe
O4 - HKCU\..\Run: [jfonmll] c:\windows\kkdwfpn.exe
O4 - HKCU\..\Run: [glprevd] c:\windows\kkdwfpn.exe
O4 - HKCU\..\Run: [rsucgmt] c:\windows\kkdwfpn.exe
O4 - HKCU\..\Run: [jpxvtdy] c:\windows\kkdwfpn.exe
O4 - HKCU\..\Run: [tpibtcj] c:\windows\kkdwfpn.exe
O4 - HKCU\..\Run: [nhbqcfg] c:\windows\kkdwfpn.exe
O4 - HKCU\..\Run: [iwbwjaa] c:\windows\kkdwfpn.exe
O4 - HKCU\..\Run: [euvkket] c:\windows\kkdwfpn.exe
O4 - HKCU\..\Run: [lgovyxd] c:\windows\kkdwfpn.exe
O4 - HKCU\..\Run: [aclcvty] c:\windows\kkdwfpn.exe
O4 - HKCU\..\Run: [qhwdkyb] c:\windows\kkdwfpn.exe
O4 - HKCU\..\Run: [qnqqiyn] c:\windows\kkdwfpn.exe
O4 - HKCU\..\Run: [njejttq] c:\windows\kkdwfpn.exe
O4 - HKCU\..\Run: [fgvlrso] c:\windows\kkdwfpn.exe
O4 - HKCU\..\Run: [auefvpp] c:\windows\kkdwfpn.exe
O4 - HKCU\..\Run: [cknjegp] c:\windows\kkdwfpn.exe
O4 - HKCU\..\Run: [udnorbi] c:\windows\kkdwfpn.exe
O4 - HKCU\..\Run: [ognviku] c:\windows\kkdwfpn.exe
O4 - HKCU\..\Run: [dvdufwg] c:\windows\kkdwfpn.exe
O4 - HKCU\..\Run: [ubnktmy] c:\windows\kkdwfpn.exe
O4 - HKCU\..\Run: [bqlmsey] c:\windows\kkdwfpn.exe
O4 - HKCU\..\Run: [qtgsijy] c:\windows\kkdwfpn.exe
O4 - HKCU\..\Run: [lnhksum] c:\windows\kkdwfpn.exe
O4 - HKCU\..\Run: [pojioxy] c:\windows\kkdwfpn.exe
O4 - HKCU\..\Run: [lmcwpmr] c:\windows\kkdwfpn.exe
O4 - HKCU\..\Run: [uaupmrv] c:\windows\kkdwfpn.exe
O4 - HKCU\..\Run: [orrfoop] c:\windows\kkdwfpn.exe
O4 - HKCU\..\Run: [fmocxal] c:\windows\kkdwfpn.exe
O4 - HKCU\..\Run: [enwxjsx] c:\windows\kkdwfpn.exe
O4 - HKCU\..\Run: [mtgujfm] c:\windows\kkdwfpn.exe
O4 - HKCU\..\Run: [rjlrlpp] c:\windows\kkdwfpn.exe
O4 - HKCU\..\Run: [odcqrkp] c:\windows\kkdwfpn.exe
O4 - HKCU\..\Run: [oiobsyi] c:\windows\kkdwfpn.exe
O4 - HKCU\..\Run: [qqpbuml] c:\windows\kkdwfpn.exe
O4 - HKCU\..\Run: [esafwag] c:\windows\kkdwfpn.exe
O4 - HKCU\..\Run: [osqwqhx] c:\windows\kkdwfpn.exe
O4 - HKCU\..\Run: [xjwjlap] c:\windows\kkdwfpn.exe
O4 - HKCU\..\Run: [hfcdcgj] c:\windows\kkdwfpn.exe
O4 - HKCU\..\Run: [rmvwvlu] c:\windows\kkdwfpn.exe
O4 - HKCU\..\Run: [gohcwja] c:\windows\kkdwfpn.exe
O4 - HKCU\..\Run: [qavoyir] c:\windows\kkdwfpn.exe
O4 - HKCU\..\Run: [wissrjd] c:\windows\kkdwfpn.exe
O4 - HKCU\..\Run: [yvogcre] c:\windows\kkdwfpn.exe
O4 - HKCU\..\Run: [hgnqght] c:\windows\kkdwfpn.exe
O4 - HKCU\..\Run: [uwkpqol] c:\windows\kkdwfpn.exe
O4 - HKCU\..\Run: [sfmymgv] c:\windows\kkdwfpn.exe
O4 - HKCU\..\Run: [axusmks] c:\windows\kkdwfpn.exe
O4 - HKCU\..\Run: [lvjwtre] c:\windows\kkdwfpn.exe
O4 - HKCU\..\Run: [lcngjlr] c:\windows\kkdwfpn.exe
O4 - HKCU\..\Run: [lnfggvp] c:\windows\kkdwfpn.exe
O4 - HKCU\..\Run: [rsdoqsg] c:\windows\kkdwfpn.exe
O4 - HKCU\..\Run: [ddxpeke] c:\windows\kkdwfpn.exe
O4 - HKCU\..\Run: [ifcuudf] c:\windows\kkdwfpn.exe
O4 - HKCU\..\Run: [kunqgwm] c:\windows\kkdwfpn.exe
O4 - HKCU\..\Run: [blwlfdy] c:\windows\kkdwfpn.exe
O4 - HKCU\..\Run: [oqsufrt] c:\windows\kkdwfpn.exe
O4 - HKCU\..\Run: [apvxyio] c:\windows\kkdwfpn.exe
O4 - HKCU\..\Run: [goqbjdp] c:\windows\kkdwfpn.exe
O4 - HKCU\..\Run: [vtjcmuj] c:\windows\kkdwfpn.exe
O4 - HKCU\..\Run: [makkfiw] c:\windows\kkdwfpn.exe
O4 - HKCU\..\Run: [mpgfpmd] c:\windows\kkdwfpn.exe
O4 - HKCU\..\Run: [ciqjwnv] c:\windows\kkdwfpn.exe
O4 - HKCU\..\Run: [ytqcouc] c:\windows\kkdwfpn.exe
O4 - HKCU\..\Run: [lbrxjwf] c:\windows\kkdwfpn.exe
O4 - HKCU\..\Run: [otputay] c:\windows\kkdwfpn.exe
O4 - HKCU\..\Run: [fayprjb] c:\windows\kkdwfpn.exe
O4 - HKCU\..\Run: [tjjlcfd] c:\windows\kkdwfpn.exe
O4 - HKCU\..\Run: [gbjeiah] c:\windows\kkdwfpn.exe
O4 - HKCU\..\Run: [jwuiylu] c:\windows\kkdwfpn.exe
O4 - HKCU\..\Run: [jashtns] c:\windows\kkdwfpn.exe
O4 - HKCU\..\Run: [qivjmil] c:\windows\kkdwfpn.exe
O4 - HKCU\..\Run: [mwhwphk] c:\windows\kkdwfpn.exe
O4 - HKCU\..\Run: [rhifvpy] c:\windows\kkdwfpn.exe
O4 - HKCU\..\Run: [hlliqnb] c:\windows\kkdwfpn.exe
O4 - HKCU\..\Run: [mpcxmtd] c:\windows\kkdwfpn.exe
O4 - HKCU\..\Run: [tdemwum] c:\windows\kkdwfpn.exe
O4 - HKCU\..\Run: [lbguoxf] c:\windows\kkdwfpn.exe
O4 - HKCU\..\Run: [ygbpvxy] c:\windows\kkdwfpn.exe
O4 - HKCU\..\Run: [vkmsmyg] c:\windows\kkdwfpn.exe
O4 - HKCU\..\Run: [nlqtqcb] c:\windows\kkdwfpn.exe
O4 - HKCU\..\Run: [fcdqgjx] c:\windows\kkdwfpn.exe
O4 - HKCU\..\Run: [kmtpjiv] c:\windows\kkdwfpn.exe
O4 - HKCU\..\Run: [umwpexv] c:\windows\kkdwfpn.exe
O4 - HKCU\..\Run: [yobllkd] c:\windows\kkdwfpn.exe
O4 - HKCU\..\Run: [llwnixs] c:\windows\kkdwfpn.exe
O4 - HKCU\..\Run: [qmeiarq] c:\windows\kkdwfpn.exe
O4 - HKCU\..\Run: [afnhpst] c:\windows\kkdwfpn.exe
O4 - HKCU\..\Run: [yqqblwh] c:\windows\kkdwfpn.exe
O4 - HKCU\..\Run: [ekuwcor] c:\windows\kkdwfpn.exe
O4 - HKCU\..\Run: [oybsvks] c:\windows\kkdwfpn.exe
O4 - HKCU\..\Run: [ivbddpq] c:\windows\kkdwfpn.exe
O4 - HKCU\..\Run: [gielttn] c:\windows\kkdwfpn.exe
O4 - HKCU\..\Run: [htmqcnd] c:\windows\kkdwfpn.exe
O4 - HKCU\..\Run: [cggntow] c:\windows\kkdwfpn.exe
O4 - HKCU\..\Run: [hqfvjey] c:\windows\kkdwfpn.exe
O4 - HKCU\..\Run: [uycrdnd] c:\windows\kkdwfpn.exe
O4 - HKCU\..\Run: [yxsvlnn] c:\windows\kkdwfpn.exe
O4 - HKCU\..\Run: [tpsyteg] c:\windows\kkdwfpn.exe
O4 - HKCU\..\Run: [kgcbxlt] c:\windows\kkdwfpn.exe
O4 - HKCU\..\Run: [nxmnafq] c:\windows\kkdwfpn.exe
O4 - HKCU\..\Run: [fcnkpxo] c:\windows\kkdwfpn.exe
O4 - HKCU\..\Run: [cepgmec] c:\windows\kkdwfpn.exe
O4 - HKCU\..\Run: [snvauiu] c:\windows\kkdwfpn.exe
O4 - HKCU\..\Run: [kntdgia] c:\windows\kkdwfpn.exe
O4 - HKCU\..\Run: [fmaslta] c:\windows\kkdwfpn.exe
O4 - HKCU\..\Run: [yjsnpvy] c:\windows\kkdwfpn.exe
O4 - HKCU\..\Run: [eerjqoi] c:\windows\kkdwfpn.exe
O4 - HKCU\..\Run: [glwymke] c:\windows\kkdwfpn.exe
O4 - HKCU\..\Run: [srfiwho] c:\windows\kkdwfpn.exe
O4 - HKCU\..\Run: [ixcjiwq] c:\windows\kkdwfpn.exe
O4 - HKCU\..\Run: [bmwxmad] c:\windows\kkdwfpn.exe
O4 - HKCU\..\Run: [twfgnuf] c:\windows\kkdwfpn.exe
O4 - HKCU\..\Run: [slhufuc] c:\windows\kkdwfpn.exe
O4 - HKCU\..\Run: [gfhoqot] c:\windows\kkdwfpn.exe
O4 - HKCU\..\Run: [lwqbvsk] c:\windows\kkdwfpn.exe
O4 - HKCU\..\Run: [jqgsuhg] c:\windows\kkdwfpn.exe
O4 - HKCU\..\Run: [
  • 0

#10
Guest_thatman_*
Posted 22 April 2005 - 02:29 AM

Guest_thatman_*
  • Guest
Hi Doubletap

Please read through the instructions before you start (you may want to print this out).

Download Pocket Killbox and unzip it; save it to your Desktop.

Download the CCleaner unzip the file to install.
Open the ccleaner.
Place a check by everything in the Applications tab.
Place a check by Internet Explorer, Windows explorer, and System in the Windows tab.
Now click on Run Cleaner

You are running HijackThis from its zipped archive; please create a new folder for it and unzip the program into it. It is very important you do this before anything else!

Please set your system to show all files; please see here if you're unsure how to do this.

Press Control-Alt-Del to enter the Task Manager.
Click on the Processes tab and end the following processes:
C:\windows\acnatww.exe
C:\windows\kkdwfpn.exe
c:\windows\wqeiyuu.exe
c:\windows\acnatww.exe
c:\windows\knqqymf.exe
c:\windows\rmyuvhm.exe
c:\windows\puhavuq.exe
c:\windows\kkwvgco.exe
c:\windows\hxspypt.exe
c:\windows\bnbmlta.exe
c:\windows\feisilb.exe
c:\windows\reilprd.exe
c:\windows\fyocfrw.exe
c:\windows\jmjrdoi.exe
c:\windows\kkdwfpn.exe

Exit the Task Manager when finished.

Please go offline, close all browsers and any open Windows, making sure that only HijackThis is open. Scan and when it finishes, put an X in the boxes, only next to these following items:
R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = http://ie.redirect.h...lion&pf=desktop
R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = http://ie.redirect.h...lion&pf=desktop
R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Search Bar = http://w-find.com/sp.htm
R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Search Page = http://w-find.com/index.htm
R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = http://w-find.com/index.htm
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = http://ie.redirect.h...lion&pf=desktop
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = http://ie.redirect.h...lion&pf=desktop
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Search Bar = http://ie.redirect.h...lion&pf=desktop
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Search Page = http://ie.redirect.h...lion&pf=desktop
R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = http://ie.redirect.h...lion&pf=desktop
R0 - HKLM\Software\Microsoft\Internet Explorer\Search,SearchAssistant = http://w-find.com/sp.htm
R1 - HKCU\Software\Microsoft\Internet Explorer\SearchURL,(Default) = http://w-find.com/index.htm
O2 - BHO: (no name) - {549B5CA7-4A86-11D7-A4DF-000874180BB3} - (no file)
O2 - BHO: (no name) - {FDD3B846-8D59-4ffb-8758-209B6AD74ACC} - (no file)
O4 - HKCU\..\Run: [ubvreaa] c:\windows\acnatww.exe
O4 - HKCU\..\Run: [jhmyybb] c:\windows\wqeiyuu.exe
O4 - HKCU\..\Run: [ivtoegn] c:\windows\wqeiyuu.exe
O4 - HKCU\..\Run: [irgorid] c:\windows\wqeiyuu.exe
O4 - HKCU\..\Run: [gcqoyau] c:\windows\wqeiyuu.exe
O4 - HKCU\..\Run: [lpalftl] c:\windows\wqeiyuu.exe
O4 - HKCU\..\Run: [iagqyxu] c:\windows\wqeiyuu.exe
O4 - HKCU\..\Run: [ofcelwd] c:\windows\wqeiyuu.exe
O4 - HKCU\..\Run: [ubrkraj] c:\windows\wqeiyuu.exe
O4 - HKCU\..\Run: [fufanvh] c:\windows\wqeiyuu.exe
O4 - HKCU\..\Run: [tqhwuat] c:\windows\wqeiyuu.exe
O4 - HKCU\..\Run: [kuefawr] c:\windows\wqeiyuu.exe
O4 - HKCU\..\Run: [tqpbqol] c:\windows\wqeiyuu.exe
O4 - HKCU\..\Run: [ldluaax] c:\windows\knqqymf.exe
O4 - HKCU\..\Run: [csyrbdw] c:\windows\knqqymf.exe
O4 - HKCU\..\Run: [waforko] c:\windows\knqqymf.exe
O4 - HKCU\..\Run: [sfcxtiv] c:\windows\rmyuvhm.exe
O4 - HKCU\..\Run: [qgaoaui] c:\windows\puhavuq.exe
O4 - HKCU\..\Run: [immnicq] c:\windows\puhavuq.exe
O4 - HKCU\..\Run: [tfimpkh] c:\windows\puhavuq.exe
O4 - HKCU\..\Run: [gqyvbmf] c:\windows\puhavuq.exe
O4 - HKCU\..\Run: [cpxqwsp] c:\windows\puhavuq.exe
O4 - HKCU\..\Run: [kxpqrni] c:\windows\puhavuq.exe
O4 - HKCU\..\Run: [gaocghp] c:\windows\puhavuq.exe
O4 - HKCU\..\Run: [hsfpqqm] c:\windows\puhavuq.exe
O4 - HKCU\..\Run: [mqlfibm] c:\windows\puhavuq.exe
O4 - HKCU\..\Run: [tjiksiu] c:\windows\puhavuq.exe
O4 - HKCU\..\Run: [uwoqnpt] c:\windows\puhavuq.exe
O4 - HKCU\..\Run: [vtwqthq] c:\windows\puhavuq.exe
O4 - HKCU\..\Run: [rvllkpf] c:\windows\puhavuq.exe
O4 - HKCU\..\Run: [ivpinoq] c:\windows\puhavuq.exe
O4 - HKCU\..\Run: [oowghmn] c:\windows\puhavuq.exe
O4 - HKCU\..\Run: [yrcqsvv] c:\windows\puhavuq.exe
O4 - HKCU\..\Run: [khecydd] c:\windows\puhavuq.exe
O4 - HKCU\..\Run: [oinvmkt] c:\windows\puhavuq.exe
O4 - HKCU\..\Run: [bjxnxdi] c:\windows\puhavuq.exe
O4 - HKCU\..\Run: [lxoowaj] c:\windows\puhavuq.exe
O4 - HKCU\..\Run: [dwkwbth] c:\windows\puhavuq.exe
O4 - HKCU\..\Run: [jfwawks] c:\windows\puhavuq.exe
O4 - HKCU\..\Run: [pemyvgk] c:\windows\puhavuq.exe
O4 - HKCU\..\Run: [oscfuim] c:\windows\puhavuq.exe
O4 - HKCU\..\Run: [acmgmlt] c:\windows\puhavuq.exe
O4 - HKCU\..\Run: [jaqlifs] c:\windows\puhavuq.exe
O4 - HKCU\..\Run: [lanicyf] c:\windows\puhavuq.exe
O4 - HKCU\..\Run: [ltaqjcq] c:\windows\puhavuq.exe
O4 - HKCU\..\Run: [bwdtyjw] c:\windows\puhavuq.exe
O4 - HKCU\..\Run: [khjtfqq] c:\windows\puhavuq.exe
O4 - HKCU\..\Run: [evsexxi] c:\windows\puhavuq.exe
O4 - HKCU\..\Run: [ipkooya] c:\windows\puhavuq.exe
O4 - HKCU\..\Run: [pxorsij] c:\windows\puhavuq.exe
O4 - HKCU\..\Run: [okwquhc] c:\windows\puhavuq.exe
O4 - HKCU\..\Run: [hdepkhg] c:\windows\puhavuq.exe
O4 - HKCU\..\Run: [dtkyedh] c:\windows\puhavuq.exe
O4 - HKCU\..\Run: [mvnqxtn] c:\windows\puhavuq.exe
O4 - HKCU\..\Run: [uukkyxf] c:\windows\puhavuq.exe
O4 - HKCU\..\Run: [pqmarbl] c:\windows\puhavuq.exe
O4 - HKCU\..\Run: [ymrpsif] c:\windows\kkwvgco.exe
O4 - HKCU\..\Run: [qwauwof] c:\windows\kkwvgco.exe
O4 - HKCU\..\Run: [phfdndg] c:\windows\kkwvgco.exe
O4 - HKCU\..\Run: [gamlqny] c:\windows\kkwvgco.exe
O4 - HKCU\..\Run: [wnumhaa] c:\windows\hxspypt.exe
O4 - HKCU\..\Run: [mqxbmjt] c:\windows\hxspypt.exe
O4 - HKCU\..\Run: [jvredtl] c:\windows\hxspypt.exe
O4 - HKCU\..\Run: [avfrpad] c:\windows\hxspypt.exe
O4 - HKCU\..\Run: [mbjcmel] c:\windows\hxspypt.exe
O4 - HKCU\..\Run: [cspwfgh] c:\windows\hxspypt.exe
O4 - HKCU\..\Run: [wbwbhlq] c:\windows\hxspypt.exe
O4 - HKCU\..\Run: [bfxgvyf] c:\windows\hxspypt.exe
O4 - HKCU\..\Run: [qiqfjqm] c:\windows\hxspypt.exe
O4 - HKCU\..\Run: [tvunvbl] c:\windows\hxspypt.exe
O4 - HKCU\..\Run: [rqxlhbe] c:\windows\hxspypt.exe
O4 - HKCU\..\Run: [wveywkv] c:\windows\hxspypt.exe
O4 - HKCU\..\Run: [ncrwxdd] c:\windows\hxspypt.exe
O4 - HKCU\..\Run: [tbqrdst] c:\windows\hxspypt.exe
O4 - HKCU\..\Run: [kheqntf] c:\windows\hxspypt.exe
O4 - HKCU\..\Run: [qoggqfw] c:\windows\hxspypt.exe
O4 - HKCU\..\Run: [hdyxlub] c:\windows\hxspypt.exe
O4 - HKCU\..\Run: [oituttr] c:\windows\hxspypt.exe
O4 - HKCU\..\Run: [hqspftm] c:\windows\hxspypt.exe
O4 - HKCU\..\Run: [alrmvqf] c:\windows\hxspypt.exe
O4 - HKCU\..\Run: [rdbxlcy] c:\windows\hxspypt.exe
O4 - HKCU\..\Run: [edpotht] c:\windows\bnbmlta.exe
O4 - HKCU\..\Run: [agfibtf] c:\windows\bnbmlta.exe
O4 - HKCU\..\Run: [iufjybh] c:\windows\bnbmlta.exe
O4 - HKCU\..\Run: [unsqwro] c:\windows\bnbmlta.exe
O4 - HKCU\..\Run: [gcjmljm] c:\windows\bnbmlta.exe
O4 - HKCU\..\Run: [mqtktbp] c:\windows\bnbmlta.exe
O4 - HKCU\..\Run: [nvacmox] c:\windows\bnbmlta.exe
O4 - HKCU\..\Run: [dujklqe] c:\windows\bnbmlta.exe
O4 - HKCU\..\Run: [eqytqpg] c:\windows\bnbmlta.exe
O4 - HKCU\..\Run: [xotbwop] c:\windows\bnbmlta.exe
O4 - HKCU\..\Run: [afdkgbi] c:\windows\bnbmlta.exe
O4 - HKCU\..\Run: [bhsbnso] c:\windows\bnbmlta.exe
O4 - HKCU\..\Run: [fimgwcg] c:\windows\bnbmlta.exe
O4 - HKCU\..\Run: [ncrcxig] c:\windows\bnbmlta.exe
O4 - HKCU\..\Run: [ekasvru] c:\windows\bnbmlta.exe
O4 - HKCU\..\Run: [rpntxre] c:\windows\bnbmlta.exe
O4 - HKCU\..\Run: [vauuirt] c:\windows\feisilb.exe
O4 - HKCU\..\Run: [hqntxrf] c:\windows\feisilb.exe
O4 - HKCU\..\Run: [fxycrlx] c:\windows\feisilb.exe
O4 - HKCU\..\Run: [dbbaooh] c:\windows\feisilb.exe
O4 - HKCU\..\Run: [qvuwbhc] c:\windows\reilprd.exe
O4 - HKCU\..\Run: [sfqkbkn] c:\windows\reilprd.exe
O4 - HKCU\..\Run: [dtbvpyy] c:\windows\reilprd.exe
O4 - HKCU\..\Run: [pxjdepg] c:\windows\reilprd.exe
O4 - HKCU\..\Run: [pawrokf] c:\windows\reilprd.exe
O4 - HKCU\..\Run: [ciwagba] c:\windows\reilprd.exe
O4 - HKCU\..\Run: [xrudumn] c:\windows\reilprd.exe
O4 - HKCU\..\Run: [ggdlqbt] c:\windows\reilprd.exe
O4 - HKCU\..\Run: [wjlwaav] c:\windows\reilprd.exe
O4 - HKCU\..\Run: [ylgbcxv] c:\windows\reilprd.exe
O4 - HKCU\..\Run: [qvpnibn] c:\windows\reilprd.exe
O4 - HKCU\..\Run: [sdpnbtj] c:\windows\reilprd.exe
O4 - HKCU\..\Run: [mvhibhp] c:\windows\reilprd.exe
O4 - HKCU\..\Run: [qsrshal] c:\windows\reilprd.exe
O4 - HKCU\..\Run: [siqufbc] c:\windows\reilprd.exe
O4 - HKCU\..\Run: [mulgiep] c:\windows\reilprd.exe
O4 - HKCU\..\Run: [dseytdl] c:\windows\reilprd.exe
O4 - HKCU\..\Run: [rnfdcue] c:\windows\reilprd.exe
O4 - HKCU\..\Run: [ddwrdpx] c:\windows\reilprd.exe
O4 - HKCU\..\Run: [qlcwpwv] c:\windows\reilprd.exe
O4 - HKCU\..\Run: [ownoigl] c:\windows\reilprd.exe
O4 - HKCU\..\Run: [fkellgu] c:\windows\fyocfrw.exe
O4 - HKCU\..\Run: [ehjjhkf] c:\windows\fyocfrw.exe
O4 - HKCU\..\Run: [bqlyhib] c:\windows\fyocfrw.exe
O4 - HKCU\..\Run: [cslaipl] c:\windows\fyocfrw.exe
O4 - HKCU\..\Run: [jnwgrxq] c:\windows\fyocfrw.exe
O4 - HKCU\..\Run: [oryvbae] c:\windows\fyocfrw.exe
O4 - HKCU\..\Run: [fwkwfby] c:\windows\fyocfrw.exe
O4 - HKCU\..\Run: [psdgsxd] c:\windows\jmjrdoi.exe
O4 - HKCU\..\Run: [memunjj] c:\windows\jmjrdoi.exe
O4 - HKCU\..\Run: [hioxxeq] c:\windows\jmjrdoi.exe
O4 - HKCU\..\Run: [jkhhssf] c:\windows\jmjrdoi.exe
O4 - HKCU\..\Run: [jostxjk] c:\windows\jmjrdoi.exe
O4 - HKCU\..\Run: [proinvl] c:\windows\jmjrdoi.exe
O4 - HKCU\..\Run: [kdfegnn] c:\windows\jmjrdoi.exe
O4 - HKCU\..\Run: [xnfmnsv] c:\windows\jmjrdoi.exe
O4 - HKCU\..\Run: [xjmhtas] c:\windows\jmjrdoi.exe
O4 - HKCU\..\Run: [gmjmhwe] c:\windows\jmjrdoi.exe
O4 - HKCU\..\Run: [erlsvvg] c:\windows\jmjrdoi.exe
O4 - HKCU\..\Run: [wukmujc] c:\windows\jmjrdoi.exe
O4 - HKCU\..\Run: [ylanxdu] c:\windows\jmjrdoi.exe
O4 - HKCU\..\Run: [oyhlidf] c:\windows\jmjrdoi.exe
O4 - HKCU\..\Run: [twbdrtq] c:\windows\jmjrdoi.exe
O4 - HKCU\..\Run: [qstnyre] c:\windows\jmjrdoi.exe
O4 - HKCU\..\Run: [ktajwor] c:\windows\jmjrdoi.exe
O4 - HKCU\..\Run: [iktrmdq] c:\windows\jmjrdoi.exe
O4 - HKCU\..\Run: [kvavonk] c:\windows\jmjrdoi.exe
O4 - HKCU\..\Run: [eqttfhr] c:\windows\jmjrdoi.exe
O4 - HKCU\..\Run: [wfmoerl] c:\windows\jmjrdoi.exe
O4 - HKCU\..\Run: [gehvamt] c:\windows\jmjrdoi.exe
O4 - HKCU\..\Run: [vfmbqbp] c:\windows\jmjrdoi.exe
O4 - HKCU\..\Run: [sckudjk] c:\windows\jmjrdoi.exe
O4 - HKCU\..\Run: [ipljwtj] c:\windows\jmjrdoi.exe
O4 - HKCU\..\Run: [mpijjce] c:\windows\jmjrdoi.exe
O4 - HKCU\..\Run: [tcqfwdb] c:\windows\jmjrdoi.exe
O4 - HKCU\..\Run: [iuaibxj] c:\windows\jmjrdoi.exe
O4 - HKCU\..\Run: [iabgfbp] c:\windows\jmjrdoi.exe
O4 - HKCU\..\Run: [csdfjdk] c:\windows\jmjrdoi.exe
O4 - HKCU\..\Run: [fmtwlsx] c:\windows\jmjrdoi.exe
O4 - HKCU\..\Run: [yblymao] c:\windows\jmjrdoi.exe
O4 - HKCU\..\Run: [kvhlrxm] c:\windows\jmjrdoi.exe
O4 - HKCU\..\Run: [lvylwng] c:\windows\jmjrdoi.exe
O4 - HKCU\..\Run: [yjyiecx] c:\windows\jmjrdoi.exe
O4 - HKCU\..\Run: [erstrxd] c:\windows\jmjrdoi.exe
O4 - HKCU\..\Run: [tffxtgb] c:\windows\jmjrdoi.exe
O4 - HKCU\..\Run: [qetecak] c:\windows\jmjrdoi.exe
O4 - HKCU\..\Run: [cwhixwc] c:\windows\jmjrdoi.exe
O4 - HKCU\..\Run: [mnecvid] c:\windows\jmjrdoi.exe
O4 - HKCU\..\Run: [mwpvfkf] c:\windows\jmjrdoi.exe
O4 - HKCU\..\Run: [bvevvep] c:\windows\jmjrdoi.exe
O4 - HKCU\..\Run: [iooofmt] c:\windows\jmjrdoi.exe
O4 - HKCU\..\Run: [vigdslp] c:\windows\jmjrdoi.exe
O4 - HKCU\..\Run: [aqdimms] c:\windows\jmjrdoi.exe
O4 - HKCU\..\Run: [mdnimxi] c:\windows\jmjrdoi.exe
O4 - HKCU\..\Run: [omntlcm] c:\windows\jmjrdoi.exe
O4 - HKCU\..\Run: [bdqrdgk] c:\windows\jmjrdoi.exe
O4 - HKCU\..\Run: [sjcdiob] c:\windows\jmjrdoi.exe
O4 - HKCU\..\Run: [bnritmy] c:\windows\jmjrdoi.exe
O4 - HKCU\..\Run: [ckjxkyc] c:\windows\jmjrdoi.exe
O4 - HKCU\..\Run: [diawetd] c:\windows\jmjrdoi.exe
O4 - HKCU\..\Run: [diohawg] c:\windows\jmjrdoi.exe
O4 - HKCU\..\Run: [efdftps] c:\windows\jmjrdoi.exe
O4 - HKCU\..\Run: [jcdhunj] c:\windows\jmjrdoi.exe
O4 - HKCU\..\Run: [wyatsce] c:\windows\jmjrdoi.exe
O4 - HKCU\..\Run: [ohexyyy] c:\windows\jmjrdoi.exe
O4 - HKCU\..\Run: [hwsrxuj] c:\windows\jmjrdoi.exe
O4 - HKCU\..\Run: [djgbpsi] c:\windows\jmjrdoi.exe
O4 - HKCU\..\Run: [huebbqo] c:\windows\jmjrdoi.exe
O4 - HKCU\..\Run: [krbwbuj] c:\windows\jmjrdoi.exe
O4 - HKCU\..\Run: [gftkumk] c:\windows\jmjrdoi.exe
O4 - HKCU\..\Run: [bkvtlyv] c:\windows\jmjrdoi.exe
O4 - HKCU\..\Run: [usbsclx] c:\windows\jmjrdoi.exe
O4 - HKCU\..\Run: [ryugcee] c:\windows\jmjrdoi.exe
O4 - HKCU\..\Run: [qxvrjgv] c:\windows\jmjrdoi.exe
O4 - HKCU\..\Run: [dujieov] c:\windows\jmjrdoi.exe
O4 - HKCU\..\Run: [covyxdm] c:\windows\jmjrdoi.exe
O4 - HKCU\..\Run: [knoihqk] c:\windows\jmjrdoi.exe
O4 - HKCU\..\Run: [iywijwh] c:\windows\jmjrdoi.exe
O4 - HKCU\..\Run: [axrpfsa] c:\windows\jmjrdoi.exe
O4 - HKCU\..\Run: [crqndhv] c:\windows\jmjrdoi.exe
O4 - HKCU\..\Run: [bcrdpwl] c:\windows\jmjrdoi.exe
O4 - HKCU\..\Run: [wtaaxtq] c:\windows\jmjrdoi.exe
O4 - HKCU\..\Run: [pxyxaww] c:\windows\jmjrdoi.exe
O4 - HKCU\..\Run: [uwbokod] c:\windows\jmjrdoi.exe
O4 - HKCU\..\Run: [yuvdkuy] c:\windows\jmjrdoi.exe
O4 - HKCU\..\Run: [yiljvxj] c:\windows\jmjrdoi.exe
O4 - HKCU\..\Run: [iaqbmss] c:\windows\jmjrdoi.exe
O4 - HKCU\..\Run: [ntlkvwr] c:\windows\jmjrdoi.exe
O4 - HKCU\..\Run: [vobxotv] c:\windows\jmjrdoi.exe
O4 - HKCU\..\Run: [wpoidfe] c:\windows\jmjrdoi.exe
O4 - HKCU\..\Run: [srkqnon] c:\windows\jmjrdoi.exe
O4 - HKCU\..\Run: [hsqdmqh] c:\windows\jmjrdoi.exe
O4 - HKCU\..\Run: [faiyfuc] c:\windows\jmjrdoi.exe
O4 - HKCU\..\Run: [wjsxlox] c:\windows\jmjrdoi.exe
O4 - HKCU\..\Run: [uuybhlw] c:\windows\jmjrdoi.exe
O4 - HKCU\..\Run: [kibgpwv] c:\windows\jmjrdoi.exe
O4 - HKCU\..\Run: [quvexsv] c:\windows\jmjrdoi.exe
O4 - HKCU\..\Run: [prgekev] c:\windows\jmjrdoi.exe
O4 - HKCU\..\Run: [nxfysfv] c:\windows\jmjrdoi.exe
O4 - HKCU\..\Run: [umlljkm] c:\windows\jmjrdoi.exe
O4 - HKCU\..\Run: [mvwsjif] c:\windows\jmjrdoi.exe
O4 - HKCU\..\Run: [qbkifqg] c:\windows\jmjrdoi.exe
O4 - HKCU\..\Run: [diydaxd] c:\windows\jmjrdoi.exe
O4 - HKCU\..\Run: [omygbek] c:\windows\jmjrdoi.exe
O4 - HKCU\..\Run: [ckqoqqi] c:\windows\jmjrdoi.exe
O4 - HKCU\..\Run: [vlfcvdk] c:\windows\jmjrdoi.exe
O4 - HKCU\..\Run: [sibcyws] c:\windows\jmjrdoi.exe
O4 - HKCU\..\Run: [ghcspfv] c:\windows\jmjrdoi.exe
O4 - HKCU\..\Run: [ljhkrae] c:\windows\jmjrdoi.exe
O4 - HKCU\..\Run: [wpovvrt] c:\windows\jmjrdoi.exe
O4 - HKCU\..\Run: [qjerovc] c:\windows\jmjrdoi.exe
O4 - HKCU\..\Run: [jtndbaa] c:\windows\jmjrdoi.exe
O4 - HKCU\..\Run: [hirculn] c:\windows\jmjrdoi.exe
O4 - HKCU\..\Run: [ogaqiip] c:\windows\jmjrdoi.exe
O4 - HKCU\..\Run: [vityghx] c:\windows\jmjrdoi.exe
O4 - HKCU\..\Run: [wtdqxrc] c:\windows\jmjrdoi.exe
O4 - HKCU\..\Run: [yxsjyqc] c:\windows\jmjrdoi.exe
O4 - HKCU\..\Run: [iersvge] c:\windows\jmjrdoi.exe
O4 - HKCU\..\Run: [mpesllg] c:\windows\jmjrdoi.exe
O4 - HKCU\..\Run: [qjybsbb] c:\windows\jmjrdoi.exe
O4 - HKCU\..\Run: [mvuukge] c:\windows\jmjrdoi.exe
O4 - HKCU\..\Run: [romgnxk] c:\windows\jmjrdoi.exe
O4 - HKCU\..\Run: [fhigaqe] c:\windows\jmjrdoi.exe
O4 - HKCU\..\Run: [rccijwr] c:\windows\jmjrdoi.exe
O4 - HKCU\..\Run: [ggdcybq] c:\windows\jmjrdoi.exe
O4 - HKCU\..\Run: [qdqcond] c:\windows\jmjrdoi.exe
O4 - HKCU\..\Run: [qmtyqmy] c:\windows\jmjrdoi.exe
O4 - HKCU\..\Run: [ubmondm] c:\windows\jmjrdoi.exe
O4 - HKCU\..\Run: [gqmcnde] c:\windows\jmjrdoi.exe
O4 - HKCU\..\Run: [ecaitvv] c:\windows\jmjrdoi.exe
O4 - HKCU\..\Run: [wjseiva] c:\windows\jmjrdoi.exe
O4 - HKCU\..\Run: [ycfkedq] c:\windows\jmjrdoi.exe
O4 - HKCU\..\Run: [sjdfmdu] c:\windows\jmjrdoi.exe
O4 - HKCU\..\Run: [ntrdyqq] c:\windows\jmjrdoi.exe
O4 - HKCU\..\Run: [ujvtrjo] c:\windows\jmjrdoi.exe
O4 - HKCU\..\Run: [sdcubox] c:\windows\jmjrdoi.exe
O4 - HKCU\..\Run: [kpvlfib] c:\windows\jmjrdoi.exe
O4 - HKCU\..\Run: [xkfgive] c:\windows\jmjrdoi.exe
O4 - HKCU\..\Run: [pmhvphx] c:\windows\jmjrdoi.exe
O4 - HKCU\..\Run: [qetvybq] c:\windows\jmjrdoi.exe
O4 - HKCU\..\Run: [bqvrjxx] c:\windows\jmjrdoi.exe
O4 - HKCU\..\Run: [rpkwxoq] c:\windows\jmjrdoi.exe
O4 - HKCU\..\Run: [ijmjoaf] c:\windows\jmjrdoi.exe
O4 - HKCU\..\Run: [unrhixp] c:\windows\jmjrdoi.exe
O4 - HKCU\..\Run: [ybrqoep] c:\windows\jmjrdoi.exe
O4 - HKCU\..\Run: [xhghcnr] c:\windows\jmjrdoi.exe
O4 - HKCU\..\Run: [bmixyyh] c:\windows\jmjrdoi.exe
O4 - HKCU\..\Run: [eewfnrb] c:\windows\jmjrdoi.exe
O4 - HKCU\..\Run: [guenmnt] c:\windows\jmjrdoi.exe
O4 - HKCU\..\Run: [vdwlyaj] c:\windows\jmjrdoi.exe
O4 - HKCU\..\Run: [nkvmuaw] c:\windows\jmjrdoi.exe
O4 - HKCU\..\Run: [ysdwmcm] c:\windows\jmjrdoi.exe
O4 - HKCU\..\Run: [iokqqyc] c:\windows\jmjrdoi.exe
O4 - HKCU\..\Run: [footuhy] c:\windows\jmjrdoi.exe
O4 - HKCU\..\Run: [nxjxwmi] c:\windows\jmjrdoi.exe
O4 - HKCU\..\Run: [kspjyit] c:\windows\jmjrdoi.exe
O4 - HKCU\..\Run: [mvocqbn] c:\windows\jmjrdoi.exe
O4 - HKCU\..\Run: [uaotmpd] c:\windows\jmjrdoi.exe
O4 - HKCU\..\Run: [iihtllo] c:\windows\jmjrdoi.exe
O4 - HKCU\..\Run: [ruddchb] c:\windows\jmjrdoi.exe
O4 - HKCU\..\Run: [ddbopeb] c:\windows\jmjrdoi.exe
O4 - HKCU\..\Run: [tccvxlp] c:\windows\jmjrdoi.exe
O4 - HKCU\..\Run: [ejcxlxe] c:\windows\jmjrdoi.exe
O4 - HKCU\..\Run: [uxutqqm] c:\windows\jmjrdoi.exe
O4 - HKCU\..\Run: [idevssr] c:\windows\jmjrdoi.exe
O4 - HKCU\..\Run: [gvfunsi] c:\windows\jmjrdoi.exe
O4 - HKCU\..\Run: [nsgjcad] c:\windows\jmjrdoi.exe
O4 - HKCU\..\Run: [vkgutcm] c:\windows\jmjrdoi.exe
O4 - HKCU\..\Run: [fyitoim] c:\windows\jmjrdoi.exe
O4 - HKCU\..\Run: [uagtfcv] c:\windows\jmjrdoi.exe
O4 - HKCU\..\Run: [kkhgeok] c:\windows\jmjrdoi.exe
O4 - HKCU\..\Run: [litnqxh] c:\windows\jmjrdoi.exe
O4 - HKCU\..\Run: [ambmbqq] c:\windows\jmjrdoi.exe
O4 - HKCU\..\Run: [objgtag] c:\windows\jmjrdoi.exe
O4 - HKCU\..\Run: [atahpkp] c:\windows\jmjrdoi.exe
O4 - HKCU\..\Run: [rqpurbu] c:\windows\jmjrdoi.exe
O4 - HKCU\..\Run: [tyxocxe] c:\windows\jmjrdoi.exe
O4 - HKCU\..\Run: [dyuaggi] c:\windows\jmjrdoi.exe
O4 - HKCU\..\Run: [plrcklk] c:\windows\jmjrdoi.exe
O4 - HKCU\..\Run: [xksbgyo] c:\windows\jmjrdoi.exe
O4 - HKCU\..\Run: [vsrqpkt] c:\windows\jmjrdoi.exe
O4 - HKCU\..\Run: [uokcdgn] c:\windows\jmjrdoi.exe
O4 - HKCU\..\Run: [cqtiukx] c:\windows\jmjrdoi.exe
O4 - HKCU\..\Run: [beukcyt] c:\windows\jmjrdoi.exe
O4 - HKCU\..\Run: [hnajyyc] c:\windows\jmjrdoi.exe
O4 - HKCU\..\Run: [oguxfij] c:\windows\jmjrdoi.exe
O4 - HKCU\..\Run: [lxqbnwc] c:\windows\jmjrdoi.exe
O4 - HKCU\..\Run: [ctclnjh] c:\windows\jmjrdoi.exe
O4 - HKCU\..\Run: [pncbqyo] c:\windows\jmjrdoi.exe
O4 - HKCU\..\Run: [gkgegdn] c:\windows\jmjrdoi.exe
O4 - HKCU\..\Run: [olueyrn] c:\windows\jmjrdoi.exe
O4 - HKCU\..\Run: [wropywo] c:\windows\jmjrdoi.exe
O4 - HKCU\..\Run: [hrpgtpi] c:\windows\jmjrdoi.exe
O4 - HKCU\..\Run: [gomkesr] c:\windows\jmjrdoi.exe
O4 - HKCU\..\Run: [kfpjywn] c:\windows\jmjrdoi.exe
O4 - HKCU\..\Run: [lbpcjqo] c:\windows\jmjrdoi.exe
O4 - HKCU\..\Run: [cvpniac] c:\windows\jmjrdoi.exe
O4 - HKCU\..\Run: [smwpssp] c:\windows\jmjrdoi.exe
O4 - HKCU\..\Run: [ndinwcc] c:\windows\jmjrdoi.exe
O4 - HKCU\..\Run: [fvdnnps] c:\windows\jmjrdoi.exe
O4 - HKCU\..\Run: [tvoevif] c:\windows\jmjrdoi.exe
O4 - HKCU\..\Run: [emfdtnw] c:\windows\jmjrdoi.exe
O4 - HKCU\..\Run: [niyqjrp] c:\windows\jmjrdoi.exe
O4 - HKCU\..\Run: [ufnmsmw] c:\windows\jmjrdoi.exe
O4 - HKCU\..\Run: [eucspcm] c:\windows\jmjrdoi.exe
O4 - HKCU\..\Run: [uoodtob] c:\windows\jmjrdoi.exe
O4 - HKCU\..\Run: [mfimovb] c:\windows\jmjrdoi.exe
O4 - HKCU\..\Run: [enlmacf] c:\windows\jmjrdoi.exe
O4 - HKCU\..\Run: [whcahhg] c:\windows\jmjrdoi.exe
O4 - HKCU\..\Run: [anllejk] c:\windows\jmjrdoi.exe
O4 - HKCU\..\Run: [jvwcrwt] c:\windows\jmjrdoi.exe
O4 - HKCU\..\Run: [hpvjpmd] c:\windows\jmjrdoi.exe
O4 - HKCU\..\Run: [qnqjfpc] c:\windows\jmjrdoi.exe
O4 - HKCU\..\Run: [ugpeyvb] c:\windows\jmjrdoi.exe
O4 - HKCU\..\Run: [lvtqjll] c:\windows\jmjrdoi.exe
O4 - HKCU\..\Run: [hyadnhi] c:\windows\jmjrdoi.exe
O4 - HKCU\..\Run: [mrtauod] c:\windows\kkdwfpn.exe
O4 - HKCU\..\Run: [mujayak] c:\windows\kkdwfpn.exe
O4 - HKCU\..\Run: [riombdr] c:\windows\kkdwfpn.exe
O4 - HKCU\..\Run: [fjkmjgu] c:\windows\kkdwfpn.exe
O4 - HKCU\..\Run: [fophrie] c:\windows\kkdwfpn.exe
O4 - HKCU\..\Run: [rhafikv] c:\windows\kkdwfpn.exe
O4 - HKCU\..\Run: [ghdjpsb] c:\windows\kkdwfpn.exe
O4 - HKCU\..\Run: [hvbvcvs] c:\windows\kkdwfpn.exe
O4 - HKCU\..\Run: [vkgmwgd] c:\windows\kkdwfpn.exe
O4 - HKCU\..\Run: [xdwqwqc] c:\windows\kkdwfpn.exe
O4 - HKCU\..\Run: [ljrcptd] c:\windows\kkdwfpn.exe
O4 - HKCU\..\Run: [wkamota] c:\windows\kkdwfpn.exe
O4 - HKCU\..\Run: [upcuovr] c:\windows\kkdwfpn.exe
O4 - HKCU\..\Run: [yomnedr] c:\windows\kkdwfpn.exe
O4 - HKCU\..\Run: [puxueaf] c:\windows\kkdwfpn.exe
O4 - HKCU\..\Run: [oguqjhr] c:\windows\kkdwfpn.exe
O4 - HKCU\..\Run: [kxvyexu] c:\windows\kkdwfpn.exe
O4 - HKCU\..\Run: [roixjao] c:\windows\kkdwfpn.exe
O4 - HKCU\..\Run: [pxvyvmj] c:\windows\kkdwfpn.exe
O4 - HKCU\..\Run: [hgmpmwh] c:\windows\kkdwfpn.exe
O4 - HKCU\..\Run: [gtovvrq] c:\windows\kkdwfpn.exe
O4 - HKCU\..\Run: [lucgyha] c:\windows\kkdwfpn.exe
O4 - HKCU\..\Run: [ijqxgxj] c:\windows\kkdwfpn.exe
O4 - HKCU\..\Run: [tgskwpn] c:\windows\kkdwfpn.exe
O4 - HKCU\..\Run: [rlibuyo] c:\windows\kkdwfpn.exe
O4 - HKCU\..\Run: [sajdyyk] c:\windows\kkdwfpn.exe
O4 - HKCU\..\Run: [hcqverp] c:\windows\kkdwfpn.exe
O4 - HKCU\..\Run: [afrntck] c:\windows\kkdwfpn.exe
O4 - HKCU\..\Run: [jfjtxmx] c:\windows\kkdwfpn.exe
O4 - HKCU\..\Run: [idwwnkp] c:\windows\kkdwfpn.exe
O4 - HKCU\..\Run: [usgcfya] c:\windows\kkdwfpn.exe
O4 - HKCU\..\Run: [qhargtc] c:\windows\kkdwfpn.exe
O4 - HKCU\..\Run: [lpakxwe] c:\windows\kkdwfpn.exe
O4 - HKCU\..\Run: [bkckcfi] c:\windows\kkdwfpn.exe
O4 - HKCU\..\Run: [osvggfx] c:\windows\kkdwfpn.exe
O4 - HKCU\..\Run: [jeojmdu] c:\windows\kkdwfpn.exe
O4 - HKCU\..\Run: [gmmgdas] c:\windows\kkdwfpn.exe
O4 - HKCU\..\Run: [xtjuhtn] c:\windows\kkdwfpn.exe
O4 - HKCU\..\Run: [cktkvci] c:\windows\kkdwfpn.exe
O4 - HKCU\..\Run: [kfqpixw] c:\windows\kkdwfpn.exe
O4 - HKCU\..\Run: [pixbqfv] c:\windows\kkdwfpn.exe
O4 - HKCU\..\Run: [stxavfe] c:\windows\kkdwfpn.exe
O4 - HKCU\..\Run: [dmhinri] c:\windows\kkdwfpn.exe
O4 - HKCU\..\Run: [apurugo] c:\windows\kkdwfpn.exe
O4 - HKCU\..\Run: [ijlaxes] c:\windows\kkdwfpn.exe
O4 - HKCU\..\Run: [manlmpa] c:\windows\kkdwfpn.exe
O4 - HKCU\..\Run: [dukrmun] c:\windows\kkdwfpn.exe
O4 - HKCU\..\Run: [tpqshsb] c:\windows\kkdwfpn.exe
O4 - HKCU\..\Run: [nwtddoe] c:\windows\kkdwfpn.exe
O4 - HKCU\..\Run: [uerxdhv] c:\windows\kkdwfpn.exe
O4 - HKCU\..\Run: [owxbudq] c:\windows\kkdwfpn.exe
O4 - HKCU\..\Run: [epbnhvj] c:\windows\kkdwfpn.exe
O4 - HKCU\..\Run: [gdmcqww] c:\windows\kkdwfpn.exe
O4 - HKCU\..\Run: [jgocgvh] c:\windows\kkdwfpn.exe
O4 - HKCU\..\Run: [oakkair] c:\windows\kkdwfpn.exe
O4 - HKCU\..\Run: [ynucnyj] c:\windows\kkdwfpn.exe
O4 - HKCU\..\Run: [svuynsd] c:\windows\kkdwfpn.exe
O4 - HKCU\..\Run: [iurhnop] c:\windows\kkdwfpn.exe
O4 - HKCU\..\Run: [ejaxlgr] c:\windows\kkdwfpn.exe
O4 - HKCU\..\Run: [qtujrsp] c:\windows\kkdwfpn.exe
O4 - HKCU\..\Run: [yemsuds] c:\windows\kkdwfpn.exe
O4 - HKCU\..\Run: [uyfbgjv] c:\windows\kkdwfpn.exe
O4 - HKCU\..\Run: [weisths] c:\windows\kkdwfpn.exe
O4 - HKCU\..\Run: [uqucrxh] c:\windows\kkdwfpn.exe
O4 - HKCU\..\Run: [acydbmb] c:\windows\kkdwfpn.exe
O4 - HKCU\..\Run: [iwnbocq] c:\windows\kkdwfpn.exe
O4 - HKCU\..\Run: [aasiiia] c:\windows\kkdwfpn.exe
O4 - HKCU\..\Run: [qimecag] c:\windows\kkdwfpn.exe
O4 - HKCU\..\Run: [pkyhtyx] c:\windows\kkdwfpn.exe
O4 - HKCU\..\Run: [fsmodsg] c:\windows\kkdwfpn.exe
O4 - HKCU\..\Run: [fatpqbn] c:\windows\kkdwfpn.exe
O4 - HKCU\..\Run: [mfiqrcu] c:\windows\kkdwfpn.exe
O4 - HKCU\..\Run: [lxukwrr] c:\windows\kkdwfpn.exe
O4 - HKCU\..\Run: [yuefjpk] c:\windows\kkdwfpn.exe
O4 - HKCU\..\Run: [vwngvdf] c:\windows\kkdwfpn.exe
O4 - HKCU\..\Run: [ablhuew] c:\windows\kkdwfpn.exe
O4 - HKCU\..\Run: [rwclbqu] c:\windows\kkdwfpn.exe
O4 - HKCU\..\Run: [wbwtdmg] c:\windows\kkdwfpn.exe
O4 - HKCU\..\Run: [nhkpblt] c:\windows\kkdwfpn.exe
O4 - HKCU\..\Run: [vbtetis] c:\windows\kkdwfpn.exe
O4 - HKCU\..\Run: [jwptghe] c:\windows\kkdwfpn.exe
O4 - HKCU\..\Run: [ixcrwtk] c:\windows\kkdwfpn.exe
O4 - HKCU\..\Run: [jvajwdr] c:\windows\kkdwfpn.exe
O4 - HKCU\..\Run: [aguojxw] c:\windows\kkdwfpn.exe
O4 - HKCU\..\Run: [wfoycjv] c:\windows\kkdwfpn.exe
O4 - HKCU\..\Run: [fshwjvs] c:\windows\kkdwfpn.exe
O4 - HKCU\..\Run: [olecwxc] c:\windows\kkdwfpn.exe
O4 - HKCU\..\Run: [fopljvh] c:\windows\kkdwfpn.exe
O4 - HKCU\..\Run: [kwfkjic] c:\windows\kkdwfpn.exe
O4 - HKCU\..\Run: [msciwcj] c:\windows\kkdwfpn.exe
O4 - HKCU\..\Run: [vmvcwht] c:\windows\kkdwfpn.exe
O4 - HKCU\..\Run: [lyrhrmb] c:\windows\kkdwfpn.exe
O4 - HKCU\..\Run: [gcwxjkd] c:\windows\kkdwfpn.exe
O4 - HKCU\..\Run: [omxxsar] c:\windows\kkdwfpn.exe
O4 - HKCU\..\Run: [vwcaoob] c:\windows\kkdwfpn.exe
O4 - HKCU\..\Run: [isctfen] c:\windows\kkdwfpn.exe
O4 - HKCU\..\Run: [kdcpmxh] c:\windows\kkdwfpn.exe
O4 - HKCU\..\Run: [quhyutd] c:\windows\kkdwfpn.exe
O4 - HKCU\..\Run: [mjxouer] c:\windows\kkdwfpn.exe
O4 - HKCU\..\Run: [qqcgvfb] c:\windows\kkdwfpn.exe
O4 - HKCU\..\Run: [xsdmlgx] c:\windows\kkdwfpn.exe
O4 - HKCU\..\Run: [iekauxg] c:\windows\kkdwfpn.exe
O4 - HKCU\..\Run: [oridcxa] c:\windows\kkdwfpn.exe
O4 - HKCU\..\Run: [pdjuidb] c:\windows\kkdwfpn.exe
O4 - HKCU\..\Run: [mejbwge] c:\windows\kkdwfpn.exe
O4 - HKCU\..\Run: [xtikwyp] c:\windows\kkdwfpn.exe
O4 - HKCU\..\Run: [cueobxn] c:\windows\kkdwfpn.exe
O4 - HKCU\..\Run: [mlupgwy] c:\windows\kkdwfpn.exe
O4 - HKCU\..\Run: [ooydthb] c:\windows\kkdwfpn.exe
O4 - HKCU\..\Run: [ystcyjs] c:\windows\kkdwfpn.exe
O4 - HKCU\..\Run: [txeuveg] c:\windows\kkdwfpn.exe
O4 - HKCU\..\Run: [vvmuxyd] c:\windows\kkdwfpn.exe
O4 - HKCU\..\Run: [cxwluoj] c:\windows\kkdwfpn.exe
O4 - HKCU\..\Run: [nidiery] c:\windows\kkdwfpn.exe
O4 - HKCU\..\Run: [jwtqqhh] c:\windows\kkdwfpn.exe
O4 - HKCU\..\Run: [hyqbmps] c:\windows\kkdwfpn.exe
O4 - HKCU\..\Run: [vktlxdq] c:\windows\kkdwfpn.exe
O4 - HKCU\..\Run: [uekeixo] c:\windows\kkdwfpn.exe
O4 - HKCU\..\Run: [gidfwca] c:\windows\kkdwfpn.exe
O4 - HKCU\..\Run: [mqmjocr] c:\windows\kkdwfpn.exe
O4 - HKCU\..\Run: [vnaupgb] c:\windows\kkdwfpn.exe
O4 - HKCU\..\Run: [oidkkpl] c:\windows\kkdwfpn.exe
O4 - HKCU\..\Run: [sryyaou] c:\windows\kkdwfpn.exe
O4 - HKCU\..\Run: [xngqnut] c:\windows\kkdwfpn.exe
O4 - HKCU\..\Run: [wjoilkg] c:\windows\kkdwfpn.exe
O4 - HKCU\..\Run: [kpecwbi] c:\windows\kkdwfpn.exe
O4 - HKCU\..\Run: [ooserbh] c:\windows\kkdwfpn.exe
O4 - HKCU\..\Run: [ivdobkh] c:\windows\kkdwfpn.exe
O4 - HKCU\..\Run: [sovinrp] c:\windows\kkdwfpn.exe
O4 - HKCU\..\Run: [hpaifkl] c:\windows\kkdwfpn.exe
O4 - HKCU\..\Run: [jxfofox] c:\windows\kkdwfpn.exe
O4 - HKCU\..\Run: [vxdymef] c:\windows\kkdwfpn.exe
O4 - HKCU\..\Run: [xwwswuu] c:\windows\kkdwfpn.exe
O4 - HKCU\..\Run: [ddgtgas] c:\windows\kkdwfpn.exe
O4 - HKCU\..\Run: [bdsefxd] c:\windows\kkdwfpn.exe
O4 - HKCU\..\Run: [ufexkbb] c:\windows\kkdwfpn.exe
O4 - HKCU\..\Run: [xxckxky] c:\windows\kkdwfpn.exe
O4 - HKCU\..\Run: [xdxpumn] c:\windows\kkdwfpn.exe
O4 - HKCU\..\Run: [fhyysvg] c:\windows\kkdwfpn.exe
O4 - HKCU\..\Run: [xotbvvu] c:\windows\kkdwfpn.exe
O4 - HKCU\..\Run: [qtdyvdp] c:\windows\kkdwfpn.exe
O4 - HKCU\..\Run: [mbfaxxp] c:\windows\kkdwfpn.exe
O4 - HKCU\..\Run: [siymagj] c:\windows\kkdwfpn.exe
O4 - HKCU\..\Run: [vhfmynv] c:\windows\kkdwfpn.exe
O4 - HKCU\..\Run: [wtbpeyl] c:\windows\kkdwfpn.exe
O4 - HKCU\..\Run: [rxlwich] c:\windows\kkdwfpn.exe
O4 - HKCU\..\Run: [agaopji] c:\windows\kkdwfpn.exe
O4 - HKCU\..\Run: [omkiigy] c:\windows\kkdwfpn.exe
O4 - HKCU\..\Run: [ucdmygk] c:\windows\kkdwfpn.exe
O4 - HKCU\..\Run: [yrbobra] c:\windows\kkdwfpn.exe
O4 - HKCU\..\Run: [ngnadbs] c:\windows\kkdwfpn.exe
Click on Fix Checked when finished and exit HijackThis.

Reboot into Safe Mode: please see here if you are not sure how to do this.

Using Windows Explorer, locate the following files/folders, and delete them:
C:\windows\acnatww.exe
C:\windows\kkdwfpn.exe
c:\windows\wqeiyuu.exe
c:\windows\acnatww.exe
c:\windows\knqqymf.exe
c:\windows\rmyuvhm.exe
c:\windows\puhavuq.exe
c:\windows\kkwvgco.exe
c:\windows\hxspypt.exe
c:\windows\bnbmlta.exe
c:\windows\feisilb.exe
c:\windows\reilprd.exe
c:\windows\fyocfrw.exe
c:\windows\jmjrdoi.exe
c:\windows\kkdwfpn.exe
Exit Explorer.

Run killbox and click the radio button that says Delete a file on reboot. For each of the files you could not delete, paste them one at a time into the full path of file to delete box and click the red circle with a white cross in it.
The program will ask you if you want to reboot; say No each time until the last one has been pasted in whereupon you should answer Yes. Let the system reboot.
C:\windows\acnatww.exe
C:\windows\kkdwfpn.exe
c:\windows\wqeiyuu.exe
c:\windows\acnatww.exe
c:\windows\knqqymf.exe
c:\windows\rmyuvhm.exe
c:\windows\puhavuq.exe
c:\windows\kkwvgco.exe
c:\windows\hxspypt.exe
c:\windows\bnbmlta.exe
c:\windows\feisilb.exe
c:\windows\reilprd.exe
c:\windows\fyocfrw.exe
c:\windows\jmjrdoi.exe
c:\windows\kkdwfpn.exe[//color]
End of killboxfile's

Reboot as normal.

Please run the following free, online virus scans.http://www.pandasoft.../start_corp.asp[color=RED]Please post the logs From Panda virus scan and HJT.logWe will need them to remove previous infections that have left files on your system.

Kc :tazz:
  • 0

#11
Doubletap
Posted 23 April 2005 - 11:39 AM

Doubletap

    New Member

  • Topic Starter
  • Member
  • Pip
  • 7 posts
Hey ThatMan, thanks for your help, problem has been solved though not the way I wanted it. :tazz: Thanks again for all your help. ;) Mark this one resolved.
  • 0

#12
Guest_thatman_*
Posted 23 April 2005 - 01:05 PM

Guest_thatman_*
  • Guest
Since this issue appears to be resolved ... this Topic has been closed. Glad we could help. :tazz:

If your the topic starter, and need this topic reopened, please contact a staff member with the address of the thread.

Everyone else please begin a New Topic.
  • 0
Back to Virus, Spyware, Malware Removal · Next Unread Topic →




Similar Topics

0 user(s) are reading this topic

0 members, 0 guests, 0 anonymous users

  1. Geeks to Go Community
  2. → Security
  3. → Virus, Spyware, Malware Removal

As Featured On:

Microsoft Yahoo BBC MSN PC Magazine Washington Post HP