Technical Information
- [<HKLM>\SOFTWARE\Microsoft\Windows\CurrentVersion\Run] '30717' = '<Full path to file>'
- [<HKLM>\SOFTWARE\Microsoft\Windows\CurrentVersion\Run] '21086' = '<Full path to file>'
- [<HKLM>\SOFTWARE\Microsoft\Windows\CurrentVersion\Run] '31349' = '<Full path to file>'
- [<HKLM>\SOFTWARE\Microsoft\Windows\CurrentVersion\Run] '29954' = '<Full path to file>'
- [<HKLM>\SOFTWARE\Microsoft\Windows\CurrentVersion\Run] '20861' = '<Full path to file>'
- [<HKLM>\SOFTWARE\Microsoft\Windows\CurrentVersion\Run] '19915' = '<Full path to file>'
- [<HKLM>\SOFTWARE\Microsoft\Windows\CurrentVersion\Run] '27749' = '<Full path to file>'
- [<HKLM>\SOFTWARE\Microsoft\Windows\CurrentVersion\Run] '12495' = '<Full path to file>'
- [<HKLM>\SOFTWARE\Microsoft\Windows\CurrentVersion\Run] '25881' = '<Full path to file>'
- [<HKLM>\SOFTWARE\Microsoft\Windows\CurrentVersion\Run] '25994' = '<Full path to file>'
- [<HKLM>\SOFTWARE\Microsoft\Windows\CurrentVersion\Run] '5915' = '<Full path to file>'
- [<HKLM>\SOFTWARE\Microsoft\Windows\CurrentVersion\Run] '30763' = '<Full path to file>'
- [<HKLM>\SOFTWARE\Microsoft\Windows\CurrentVersion\Run] '24682' = '<Full path to file>'
- [<HKLM>\SOFTWARE\Microsoft\Windows\CurrentVersion\Run] '2957' = '<Full path to file>'
- [<HKLM>\SOFTWARE\Microsoft\Windows\CurrentVersion\Run] '9818' = '<Full path to file>'
- [<HKLM>\SOFTWARE\Microsoft\Windows\CurrentVersion\Run] '3266' = '<Full path to file>'
- [<HKLM>\SOFTWARE\Microsoft\Windows\CurrentVersion\Run] '28114' = '<Full path to file>'
- [<HKLM>\SOFTWARE\Microsoft\Windows\CurrentVersion\Run] '22397' = '<Full path to file>'
- [<HKLM>\SOFTWARE\Microsoft\Windows\CurrentVersion\Run] '6194' = '<Full path to file>'
- [<HKLM>\SOFTWARE\Microsoft\Windows\CurrentVersion\Run] '19023' = '<Full path to file>'
- [<HKLM>\SOFTWARE\Microsoft\Windows\CurrentVersion\Run] '16594' = '<Full path to file>'
- [<HKLM>\SOFTWARE\Microsoft\Windows\CurrentVersion\Run] '31628' = '<Full path to file>'
- [<HKLM>\SOFTWARE\Microsoft\Windows\CurrentVersion\Run] '24404' = '<Full path to file>'
- [<HKLM>\SOFTWARE\Microsoft\Windows\CurrentVersion\Run] '12218' = '<Full path to file>'
- [<HKLM>\SOFTWARE\Microsoft\Windows\CurrentVersion\Run] '30038' = '<Full path to file>'
- [<HKLM>\SOFTWARE\Microsoft\Windows\CurrentVersion\Run] '11046' = '<Full path to file>'
- [<HKLM>\SOFTWARE\Microsoft\Windows\CurrentVersion\Run] '9904' = '<Full path to file>'
- [<HKLM>\SOFTWARE\Microsoft\Windows\CurrentVersion\Run] '4355' = '<Full path to file>'
- [<HKLM>\SOFTWARE\Microsoft\Windows\CurrentVersion\Run] '13892' = '<Full path to file>'
- [<HKLM>\SOFTWARE\Microsoft\Windows\CurrentVersion\Run] '24741' = '<Full path to file>'
- [<HKLM>\SOFTWARE\Microsoft\Windows\CurrentVersion\Run] '4215' = '<Full path to file>'
- [<HKLM>\SOFTWARE\Microsoft\Windows\CurrentVersion\Run] '31266' = '<Full path to file>'
- [<HKLM>\SOFTWARE\Microsoft\Windows\CurrentVersion\Run] '2458' = '<Full path to file>'
- [<HKLM>\SOFTWARE\Microsoft\Windows\CurrentVersion\Run] '25549' = '<Full path to file>'
- [<HKLM>\SOFTWARE\Microsoft\Windows\CurrentVersion\Run] '17267' = '<Full path to file>'
- [<HKLM>\SOFTWARE\Microsoft\Windows\CurrentVersion\Run] '10658' = '<Full path to file>'
- [<HKLM>\SOFTWARE\Microsoft\Windows\CurrentVersion\Run] '28335' = '<Full path to file>'
- [<HKLM>\SOFTWARE\Microsoft\Windows\CurrentVersion\Run] '21506' = '<Full path to file>'
- [<HKLM>\SOFTWARE\Microsoft\Windows\CurrentVersion\Run] '10375' = '<Full path to file>'
- [<HKLM>\SOFTWARE\Microsoft\Windows\CurrentVersion\Run] '1313' = '<Full path to file>'
- [<HKLM>\SOFTWARE\Microsoft\Windows\CurrentVersion\Run] '19243' = '<Full path to file>'
- [<HKLM>\SOFTWARE\Microsoft\Windows\CurrentVersion\Run] '25769' = '<Full path to file>'
- [<HKLM>\SOFTWARE\Microsoft\Windows\CurrentVersion\Run] '30597' = '<Full path to file>'
- [<HKLM>\SOFTWARE\Microsoft\Windows\CurrentVersion\Run] '7809' = '<Full path to file>'
- [<HKLM>\SOFTWARE\Microsoft\Windows\CurrentVersion\Run] '26970' = '<Full path to file>'
- [<HKLM>\SOFTWARE\Microsoft\Windows\CurrentVersion\Run] '26663' = '<Full path to file>'
- [<HKLM>\SOFTWARE\Microsoft\Windows\CurrentVersion\Run] '28643' = '<Full path to file>'
- [<HKLM>\SOFTWARE\Microsoft\Windows\CurrentVersion\Run] '6724' = '<Full path to file>'
- [<HKLM>\SOFTWARE\Microsoft\Windows\CurrentVersion\Run] '14226' = '<Full path to file>'
- [<HKLM>\SOFTWARE\Microsoft\Windows\CurrentVersion\Run] '26275' = '<Full path to file>'
- [<HKLM>\SOFTWARE\Microsoft\Windows\CurrentVersion\Run] '11269' = '<Full path to file>'
- [<HKLM>\SOFTWARE\Microsoft\Windows\CurrentVersion\Run] '13251' = '<Full path to file>'
- [<HKLM>\SOFTWARE\Microsoft\Windows\CurrentVersion\Run] '10489' = '<Full path to file>'
- [<HKLM>\SOFTWARE\Microsoft\Windows\CurrentVersion\Run] '27892' = '<Full path to file>'
- [<HKLM>\SOFTWARE\Microsoft\Windows\CurrentVersion\Run] '31852' = '<Full path to file>'
- [<HKLM>\SOFTWARE\Microsoft\Windows\CurrentVersion\Run] '22175' = '<Full path to file>'
- [<HKLM>\SOFTWARE\Microsoft\Windows\CurrentVersion\Run] '7283' = '<Full path to file>'
- [<HKLM>\SOFTWARE\Microsoft\Windows\CurrentVersion\Run] '28394' = '<Full path to file>'
- [<HKLM>\SOFTWARE\Microsoft\Windows\CurrentVersion\Run] '1929' = '<Full path to file>'
- [<HKLM>\SOFTWARE\Microsoft\Windows\CurrentVersion\Run] '26052' = '<Full path to file>'
- [<HKLM>\SOFTWARE\Microsoft\Windows\CurrentVersion\Run] '26132' = '<Full path to file>'
- [<HKLM>\SOFTWARE\Microsoft\Windows\CurrentVersion\Run] '7309' = '<Full path to file>'
- [<HKLM>\SOFTWARE\Microsoft\Windows\CurrentVersion\Run] '10767' = '<Full path to file>'
- [<HKLM>\SOFTWARE\Microsoft\Windows\CurrentVersion\Run] '29565' = '<Full path to file>'
- [<HKLM>\SOFTWARE\Microsoft\Windows\CurrentVersion\Run] '11020' = '<Full path to file>'
- [<HKLM>\SOFTWARE\Microsoft\Windows\CurrentVersion\Run] '1090' = '<Full path to file>'
- [<HKLM>\SOFTWARE\Microsoft\Windows\CurrentVersion\Run] '2178' = '<Full path to file>'
- [<HKLM>\SOFTWARE\Microsoft\Windows\CurrentVersion\Run] '24458' = '<Full path to file>'
- [<HKLM>\SOFTWARE\Microsoft\Windows\CurrentVersion\Run] '5302' = '<Full path to file>'
- [<HKLM>\SOFTWARE\Microsoft\Windows\CurrentVersion\Run] '13221' = '<Full path to file>'
- [<HKLM>\SOFTWARE\Microsoft\Windows\CurrentVersion\Run] '31795' = '<Full path to file>'
- [<HKLM>\SOFTWARE\Microsoft\Windows\CurrentVersion\Run] '26803' = '<Full path to file>'
- [<HKLM>\SOFTWARE\Microsoft\Windows\CurrentVersion\Run] '2318' = '<Full path to file>'
- [<HKLM>\SOFTWARE\Microsoft\Windows\CurrentVersion\Run] '31124' = '<Full path to file>'
- [<HKLM>\SOFTWARE\Microsoft\Windows\CurrentVersion\Run] '13166' = '<Full path to file>'
- [<HKLM>\SOFTWARE\Microsoft\Windows\CurrentVersion\Run] '8619' = '<Full path to file>'
- [<HKLM>\SOFTWARE\Microsoft\Windows\CurrentVersion\Run] '3407' = '<Full path to file>'
- [<HKLM>\SOFTWARE\Microsoft\Windows\CurrentVersion\Run] '17406' = '<Full path to file>'
- [<HKLM>\SOFTWARE\Microsoft\Windows\CurrentVersion\Run] '11689' = '<Full path to file>'
- [<HKLM>\SOFTWARE\Microsoft\Windows\CurrentVersion\Run] '10518' = '<Full path to file>'
- [<HKLM>\SOFTWARE\Microsoft\Windows\CurrentVersion\Run] '28113' = '<Full path to file>'
- [<HKLM>\SOFTWARE\Microsoft\Windows\CurrentVersion\Run] '23151' = '<Full path to file>'
- [<HKLM>\SOFTWARE\Microsoft\Windows\CurrentVersion\Run] '19191' = '<Full path to file>'
- [<HKLM>\SOFTWARE\Microsoft\Windows\CurrentVersion\Run] '23736' = '<Full path to file>'
- [<HKLM>\SOFTWARE\Microsoft\Windows\CurrentVersion\Run] '3797' = '<Full path to file>'
- [<HKLM>\SOFTWARE\Microsoft\Windows\CurrentVersion\Run] '22342' = '<Full path to file>'
- [<HKLM>\SOFTWARE\Microsoft\Windows\CurrentVersion\Run] '18968' = '<Full path to file>'
- [<HKLM>\SOFTWARE\Microsoft\Windows\CurrentVersion\Run] '20403' = '<Full path to file>'
- [<HKLM>\SOFTWARE\Microsoft\Windows\CurrentVersion\Run] '29816' = '<Full path to file>'
- [<HKLM>\SOFTWARE\Microsoft\Windows\CurrentVersion\Run] '26442' = '<Full path to file>'
- [<HKLM>\SOFTWARE\Microsoft\Windows\CurrentVersion\Run] '23067' = '<Full path to file>'
- [<HKLM>\SOFTWARE\Microsoft\Windows\CurrentVersion\Run] '12442' = '<Full path to file>'
- [<HKLM>\SOFTWARE\Microsoft\Windows\CurrentVersion\Run] '25270' = '<Full path to file>'
- [<HKLM>\SOFTWARE\Microsoft\Windows\CurrentVersion\Run] '17350' = '<Full path to file>'
- [<HKLM>\SOFTWARE\Microsoft\Windows\CurrentVersion\Run] '21896' = '<Full path to file>'
- [<HKLM>\SOFTWARE\Microsoft\Windows\CurrentVersion\Run] '30179' = '<Full path to file>'
- [<HKLM>\SOFTWARE\Microsoft\Windows\CurrentVersion\Run] '32159' = '<Full path to file>'
- [<HKLM>\SOFTWARE\Microsoft\Windows\CurrentVersion\Run] '28503' = '<Full path to file>'
- [<HKLM>\SOFTWARE\Microsoft\Windows\CurrentVersion\Run] '12219' = '<Full path to file>'
- [<HKLM>\SOFTWARE\Microsoft\Windows\CurrentVersion\Run] '15147' = '<Full path to file>'
- [<HKLM>\SOFTWARE\Microsoft\Windows\CurrentVersion\Run] '6865' = '<Full path to file>'
- [<HKLM>\SOFTWARE\Microsoft\Windows\CurrentVersion\Run] '4884' = '<Full path to file>'
- [<HKLM>\SOFTWARE\Microsoft\Windows\CurrentVersion\Run] '31936' = '<Full path to file>'
- [<HKLM>\SOFTWARE\Microsoft\Windows\CurrentVersion\Run] '21366' = '<Full path to file>'
- [<HKLM>\SOFTWARE\Microsoft\Windows\CurrentVersion\Run] '394' = '<Full path to file>'
- [<HKLM>\SOFTWARE\Microsoft\Windows\CurrentVersion\Run] '12861' = '<Full path to file>'
- [<HKLM>\SOFTWARE\Microsoft\Windows\CurrentVersion\Run] '16458' = '<Full path to file>'
- [<HKLM>\SOFTWARE\Microsoft\Windows\CurrentVersion\Run] '28478' = '<Full path to file>'
- [<HKLM>\SOFTWARE\Microsoft\Windows\CurrentVersion\Run] '16652' = '<Full path to file>'
- [<HKLM>\SOFTWARE\Microsoft\Windows\CurrentVersion\Run] '22955' = '<Full path to file>'
- [<HKLM>\SOFTWARE\Microsoft\Windows\CurrentVersion\Run] '15258' = '<Full path to file>'
- [<HKLM>\SOFTWARE\Microsoft\Windows\CurrentVersion\Run] '15844' = '<Full path to file>'
- [<HKLM>\SOFTWARE\Microsoft\Windows\CurrentVersion\Run] '11884' = '<Full path to file>'
- [<HKLM>\SOFTWARE\Microsoft\Windows\CurrentVersion\Run] '2207' = '<Full path to file>'
- [<HKLM>\SOFTWARE\Microsoft\Windows\CurrentVersion\Run] '31015' = '<Full path to file>'
- [<HKLM>\SOFTWARE\Microsoft\Windows\CurrentVersion\Run] '2792' = '<Full path to file>'
- [<HKLM>\SOFTWARE\Microsoft\Windows\CurrentVersion\Run] '21338' = '<Full path to file>'
- [<HKLM>\SOFTWARE\Microsoft\Windows\CurrentVersion\Run] '15621' = '<Full path to file>'
- [<HKLM>\SOFTWARE\Microsoft\Windows\CurrentVersion\Run] '17963' = '<Full path to file>'
- [<HKLM>\SOFTWARE\Microsoft\Windows\CurrentVersion\Run] '18549' = '<Full path to file>'
- [<HKLM>\SOFTWARE\Microsoft\Windows\CurrentVersion\Run] '28812' = '<Full path to file>'
- [<HKLM>\SOFTWARE\Microsoft\Windows\CurrentVersion\Run] '25075' = '<Full path to file>'
- [<HKLM>\SOFTWARE\Microsoft\Windows\CurrentVersion\Run] '15398' = '<Full path to file>'
- [<HKLM>\SOFTWARE\Microsoft\Windows\CurrentVersion\Run] '9458' = '<Full path to file>'
- [<HKLM>\SOFTWARE\Microsoft\Windows\CurrentVersion\Run] '20306' = '<Full path to file>'
- [<HKLM>\SOFTWARE\Microsoft\Windows\CurrentVersion\Run] '5721' = '<Full path to file>'
- [<HKLM>\SOFTWARE\Microsoft\Windows\CurrentVersion\Run] '2346' = '<Full path to file>'
- [<HKLM>\SOFTWARE\Microsoft\Windows\CurrentVersion\Run] '24852' = '<Full path to file>'
- [<HKLM>\SOFTWARE\Microsoft\Windows\CurrentVersion\Run] '8649' = '<Full path to file>'
- [<HKLM>\SOFTWARE\Microsoft\Windows\CurrentVersion\Run] '8620' = '<Full path to file>'
- [<HKLM>\SOFTWARE\Microsoft\Windows\CurrentVersion\Run] '25325' = '<Full path to file>'
- [<HKLM>\SOFTWARE\Microsoft\Windows\CurrentVersion\Run] '20194' = '<Full path to file>'
- [<HKLM>\SOFTWARE\Microsoft\Windows\CurrentVersion\Run] '5469' = '<Full path to file>'
- [<HKLM>\SOFTWARE\Microsoft\Windows\CurrentVersion\Run] '21477' = '<Full path to file>'
- [<HKLM>\SOFTWARE\Microsoft\Windows\CurrentVersion\Run] '10740' = '<Full path to file>'
- [<HKLM>\SOFTWARE\Microsoft\Windows\CurrentVersion\Run] '3405' = '<Full path to file>'
- [<HKLM>\SOFTWARE\Microsoft\Windows\CurrentVersion\Run] '11688' = '<Full path to file>'
- [<HKLM>\SOFTWARE\Microsoft\Windows\CurrentVersion\Run] '22536' = '<Full path to file>'
- [<HKLM>\SOFTWARE\Microsoft\Windows\CurrentVersion\Run] '12859' = '<Full path to file>'
- [<HKLM>\SOFTWARE\Microsoft\Windows\CurrentVersion\Run] '617' = '<Full path to file>'
- [<HKLM>\SOFTWARE\Microsoft\Windows\CurrentVersion\Run] '23708' = '<Full path to file>'
- [<HKLM>\SOFTWARE\Microsoft\Windows\CurrentVersion\Run] '14031' = '<Full path to file>'
- [<HKLM>\SOFTWARE\Microsoft\Windows\CurrentVersion\Run] '4354' = '<Full path to file>'
- [<HKLM>\SOFTWARE\Microsoft\Windows\CurrentVersion\Run] '4633' = '<Full path to file>'
- [<HKLM>\SOFTWARE\Microsoft\Windows\CurrentVersion\Run] '15175' = '<Full path to file>'
- [<HKLM>\SOFTWARE\Microsoft\Windows\CurrentVersion\Run] '13082' = '<Full path to file>'
- [<HKLM>\SOFTWARE\Microsoft\Windows\CurrentVersion\Run] '5916' = '<Full path to file>'
- [<HKLM>\SOFTWARE\Microsoft\Windows\CurrentVersion\Run] '3181' = '<Full path to file>'
- [<HKLM>\SOFTWARE\Microsoft\Windows\CurrentVersion\Run] '19860' = '<Full path to file>'
- [<HKLM>\SOFTWARE\Microsoft\Windows\CurrentVersion\Run] '8761' = '<Full path to file>'
- [<HKLM>\SOFTWARE\Microsoft\Windows\CurrentVersion\Run] '32157' = '<Full path to file>'
- [<HKLM>\SOFTWARE\Microsoft\Windows\CurrentVersion\Run] '26525' = '<Full path to file>'
- [<HKLM>\SOFTWARE\Microsoft\Windows\CurrentVersion\Run] '8175' = '<Full path to file>'
- [<HKLM>\SOFTWARE\Microsoft\Windows\CurrentVersion\Run] '17263' = '<Full path to file>'
- [<HKLM>\SOFTWARE\Microsoft\Windows\CurrentVersion\Run] '16346' = '<Full path to file>'
- [<HKLM>\SOFTWARE\Microsoft\Windows\CurrentVersion\Run] '30987' = '<Full path to file>'
- [<HKLM>\SOFTWARE\Microsoft\Windows\CurrentVersion\Run] '19300' = '<Full path to file>'
- [<HKLM>\SOFTWARE\Microsoft\Windows\CurrentVersion\Run] '841' = '<Full path to file>'
- [<HKLM>\SOFTWARE\Microsoft\Windows\CurrentVersion\Run] '13668' = '<Full path to file>'
- [<HKLM>\SOFTWARE\Microsoft\Windows\CurrentVersion\Run] '4801' = '<Full path to file>'
- [<HKLM>\SOFTWARE\Microsoft\Windows\CurrentVersion\Run] '27780' = '<Full path to file>'
- [<HKLM>\SOFTWARE\Microsoft\Windows\CurrentVersion\Run] '22649' = '<Full path to file>'
- [<HKLM>\SOFTWARE\Microsoft\Windows\CurrentVersion\Run] '20725' = '<Full path to file>'
- [<HKLM>\SOFTWARE\Microsoft\Windows\CurrentVersion\Run] '8482' = '<Full path to file>'
- [<HKLM>\SOFTWARE\Microsoft\Windows\CurrentVersion\Run] '15008' = '<Full path to file>'
- [<HKLM>\SOFTWARE\Microsoft\Windows\CurrentVersion\Run] '17936' = '<Full path to file>'
- [<HKLM>\SOFTWARE\Microsoft\Windows\CurrentVersion\Run] '9653' = '<Full path to file>'
- [<HKLM>\SOFTWARE\Microsoft\Windows\CurrentVersion\Run] '10239' = '<Full path to file>'
- [<HKLM>\SOFTWARE\Microsoft\Windows\CurrentVersion\Run] '1956' = '<Full path to file>'
- [<HKLM>\SOFTWARE\Microsoft\Windows\CurrentVersion\Run] '13167' = '<Full path to file>'
- [<HKLM>\SOFTWARE\Microsoft\Windows\CurrentVersion\Run] '10825' = '<Full path to file>'
- [<HKLM>\SOFTWARE\Microsoft\Windows\CurrentVersion\Run] '27975' = '<Full path to file>'
- [<HKLM>\SOFTWARE\Microsoft\Windows\CurrentVersion\Run] '11410' = '<Full path to file>'
- [<HKLM>\SOFTWARE\Microsoft\Windows\CurrentVersion\Run] '31934' = '<Full path to file>'
- [<HKLM>\SOFTWARE\Microsoft\Windows\CurrentVersion\Run] '20278' = '<Full path to file>'
- [<HKLM>\SOFTWARE\Microsoft\Windows\CurrentVersion\Run] '14924' = '<Full path to file>'
- [<HKLM>\SOFTWARE\Microsoft\Windows\CurrentVersion\Run] '12944' = '<Full path to file>'
- [<HKLM>\SOFTWARE\Microsoft\Windows\CurrentVersion\Run] '11187' = '<Full path to file>'
- [<HKLM>\SOFTWARE\Microsoft\Windows\CurrentVersion\Run] '6335' = '<Full path to file>'
- [<HKLM>\SOFTWARE\Microsoft\Windows\CurrentVersion\Run] '26358' = '<Full path to file>'
- [<HKLM>\SOFTWARE\Microsoft\Windows\CurrentVersion\Run] '8398' = '<Full path to file>'
- [<HKLM>\SOFTWARE\Microsoft\Windows\CurrentVersion\Run] '11829' = '<Full path to file>'
- [<HKLM>\SOFTWARE\Microsoft\Windows\CurrentVersion\Run] '19972' = '<Full path to file>'
- [<HKLM>\SOFTWARE\Microsoft\Windows\CurrentVersion\Run] '23932' = '<Full path to file>'
- [<HKLM>\SOFTWARE\Microsoft\Windows\CurrentVersion\Run] '3518' = '<Full path to file>'
- [<HKLM>\SOFTWARE\Microsoft\Windows\CurrentVersion\Run] '16179' = '<Full path to file>'
- [<HKLM>\SOFTWARE\Microsoft\Windows\CurrentVersion\Run] '10183' = '<Full path to file>'
- [<HKLM>\SOFTWARE\Microsoft\Windows\CurrentVersion\Run] '7896' = '<Full path to file>'
- [<HKLM>\SOFTWARE\Microsoft\Windows\CurrentVersion\Run] '32074' = '<Full path to file>'
- [<HKLM>\SOFTWARE\Microsoft\Windows\CurrentVersion\Run] '2486' = '<Full path to file>'
- [<HKLM>\SOFTWARE\Microsoft\Windows\CurrentVersion\Run] '27557' = '<Full path to file>'
- [<HKLM>\SOFTWARE\Microsoft\Windows\CurrentVersion\Run] '17294' = '<Full path to file>'
- [<HKLM>\SOFTWARE\Microsoft\Windows\CurrentVersion\Run] '28142' = '<Full path to file>'
- [<HKLM>\SOFTWARE\Microsoft\Windows\CurrentVersion\Run] '9597' = '<Full path to file>'
- [<HKLM>\SOFTWARE\Microsoft\Windows\CurrentVersion\Run] '24768' = '<Full path to file>'
- [<HKLM>\SOFTWARE\Microsoft\Windows\CurrentVersion\Run] '31071' = '<Full path to file>'
- [<HKLM>\SOFTWARE\Microsoft\Windows\CurrentVersion\Run] '2848' = '<Full path to file>'
- [<HKLM>\SOFTWARE\Microsoft\Windows\CurrentVersion\Run] '13111' = '<Full path to file>'
- [<HKLM>\SOFTWARE\Microsoft\Windows\CurrentVersion\Run] '9374' = '<Full path to file>'
- [<HKLM>\SOFTWARE\Microsoft\Windows\CurrentVersion\Run] '13697' = '<Full path to file>'
- [<HKLM>\SOFTWARE\Microsoft\Windows\CurrentVersion\Run] '9737' = '<Full path to file>'
- [<HKLM>\SOFTWARE\Microsoft\Windows\CurrentVersion\Run] '14282' = '<Full path to file>'
- [<HKLM>\SOFTWARE\Microsoft\Windows\CurrentVersion\Run] '2040' = '<Full path to file>'
- [<HKLM>\SOFTWARE\Microsoft\Windows\CurrentVersion\Run] '645' = '<Full path to file>'
- [<HKLM>\SOFTWARE\Microsoft\Windows\CurrentVersion\Run] '31433' = '<Full path to file>'
- [<HKLM>\SOFTWARE\Microsoft\Windows\CurrentVersion\Run] '19776' = '<Full path to file>'
- [<HKLM>\SOFTWARE\Microsoft\Windows\CurrentVersion\Run] '9514' = '<Full path to file>'
- [<HKLM>\SOFTWARE\Microsoft\Windows\CurrentVersion\Run] '30625' = '<Full path to file>'
- [<HKLM>\SOFTWARE\Microsoft\Windows\CurrentVersion\Run] '28645' = '<Full path to file>'
- [<HKLM>\SOFTWARE\Microsoft\Windows\CurrentVersion\Run] '20948' = '<Full path to file>'
- [<HKLM>\SOFTWARE\Microsoft\Windows\CurrentVersion\Run] '28868' = '<Full path to file>'
- [<HKLM>\SOFTWARE\Microsoft\Windows\CurrentVersion\Run] '21533' = '<Full path to file>'
- [<HKLM>\SOFTWARE\Microsoft\Windows\CurrentVersion\Run] '6948' = '<Full path to file>'
- [<HKLM>\SOFTWARE\Microsoft\Windows\CurrentVersion\Run] '23428' = '<Full path to file>'
- [<HKLM>\SYSTEM\ControlSet001\Services\SharedAccess\Parameters\FirewallPolicy\StandardProfile] 'EnableFirewall' = '00000000'
- %WINDIR%\XXInstall\ps.exe
- C:\lsass.exe
- %ALLUSERSPROFILE%\Application Data\Microsoft\Dr Watson\user.dmp
- <Full path to file>
- '19#.#41.169.8':3128
- '83.##6.143.132':3128
- '14#.#23.168.168':3128
- '85.##.185.143':3128
- '59.##3.155.205':3128
- '11#.#02.184.240':3128
- '89.##3.148.31':3128
- '19#.#06.186.17':3128
- '11#.#7.7.151':3128
- '12#.#68.213.133':3128
- '95.##6.132.79':3128
- '21#.#2.242.130':3128
- '14#.#27.180.200':3128
- '82.##2.0.141':3128
- '82.##8.148.6':3128
- '81.##6.224.25':3128
- '85.#t207':0
- '20#.#6.171.5':3128
- '12#.#3.105.87':3128
- '11#.#59.83.95':3128
- '11#.#55.3.189':3128
- '95.##.184.217':3128
- '89.##5.21.227':3128
- '11#.#34.30.140':3128
- '19#.#05.222.20':3128
- '12#.#68.99.211':3128
- '12#.#33.206.123':3128
- '18#.#58.3.133':3128
- '19#.#07.115.91':3128
- '21#.#5.80.208':3128
- '11#.#4.55.66':3128
- '88.##5.164.219':3128
- '22#.#0.47.136':3128
- '41.##0.11.88':3128
- '58.#8.34.59':3128
- '12#.#60.167.200':3128
- '21#.#07.204.205':3128
- '91.##2.146.35':3128
- '89.##5.21.229':3128
- '21#.#16.162.1':3128
- '11#.#34.28.12':3128
- '89.##7.75.85':3128
- '59.##8.61.156':3128
- '93.##4.201.226':3128
- '95.##.128.175':3128
- '20#.#0.121.199':3128
- '22#.#65.120.116':3128
- '59.#5.21.75':3128
- '61.#.20.9':3128
- '83.##0.228.151':3128
- '11#.#97.4.42':3128
- '21#.#4.68.214':3128
- '60.##.129.136':3128
- '89.##5.11.156':3128
- '14#.#17.69.132':3128
- '59.##.128.180':3128
- '22#.#21.70.244':3128
- '21#.#11.228.71':3128
- '19#.#78.102.65':3128
- '20#.#67.215.225':3128
- '11#.#34.30.64':3128
- '85.#1.153.1':3128
- '11#.#2.199.225':3128
- '22#.#65.9.203':3128
- '12#.#68.7.25':3128
- '20#.#60.148.167':3128
- '19#.#17.50.8':3128
- '20#.#08.151.226':3128
- '22#.#65.120.91':3128
- '19#.#46.106.12':3128
- '95.##.133.222':3128
- '14#.#24.5.127':3128
- '12#.#43.239.200':3128
- '19#.#06.184.63':3128
- '41.##0.158.38':3128
- '20#.#54.245.125':3128
- '19#.#48.146.122':3128
- '19#.#17.203.6':3128
- '11#.47.8.40':3128
- '12#.#68.30.220':3128
- '21#.#50.170.26':3128
- '89.##3.142.181':3128
- '21#.#0.232.183':3128
- '59.##.18.183':3128
- '11#.#9.179.121':3128
- '12#.#57.20.183':3128
- '18#.#27.129.97':3128
- '89.##5.10.162':3128
- '95.##6.131.89':3128
- '20#.#53.206.21':3128
- '85.##5.205.250':3128
- '83.#6.84.5':3128
- '22#.#52.0.163':3128
- '13#.#32.249.191':3128
- '89.##5.26.221':3128
- '89.##5.15.183':3128
- '10#.#4.130.190':3128
- '20#.#1.51.74':3128
- '88.##0.143.38':3128
- '12#.#31.186.81':3128
- '19#.#17.100.239':3128
- '61.##.240.63':3128
- '12#.#31.186.241':3128
- '78.##.185.170':3128
- '95.##6.131.174':3128
- '19#.#69.218.149':3128
- '19#.#17.139.53':3128
- '81.##.115.138':3128
- '11#.#17.231.109':3128
- '82.##3.221.63':3128
- '19#.#19.167.114':3128
- '89.##5.16.143':3128
- '20#.#3.233.211':3128
- '21#.#29.158.83':3128
- '62.##3.38.134':3128
- '11#.#7.248.5':3128
- '11#.#7.20.143':3128
- '11#.#34.29.93':3128
- '89.##5.246.91':3128
- '83.##.81.250':3128
- '83.##5.1.131':3128
- '82.##2.103.247':3128
- '95.##.181.210':3128
- '12#.#68.61.254':3128
- '59.##.210.80':3128
- '11#.#41.40.47':3128
- '88.##3.179.180':3128
- '82.##9.181.50':3128
- '14#.#15.73.142':3128
- '93.##3.67.210':3128
- '94.##9.185.44':3128
- '18#.#5.159.151':3128
- '20#.#03.160.98':3128
- '11#.#4.24.192':3128
- '19#.#6.84.58':3128
- '11#.#41.40.19':3128
- '78.##.124.174':3128
- '93.##4.80.225':3128
- '21#.#58.95.136':3128
- '11#.#7.9.125':3128
- '88.##6.79.53':3128
- '82.##9.127.108':3128
- '93.##.14.187':3128
- '21#.#09.162.104':3128
- '19#.#78.114.229':3128
- '41.##3.25.20':3128
- '41.##1.165.132':3128
- '95.##.157.15':3128
- '59.##.200.52':3128
- '85.##0.242.90':3128
- '41.##0.163.21':3128
- '14#.#08.141.130':3128
- '20#.#34.18.157':3128
- '11#.#92.139.154':3128
- '12#.#45.92.210':3128
- '78.##9.201.238':3128
- '95.##6.163.128':3128
- '82.##6.163.238':3128
- '16#.#46.210.174':3128
- '95.##.139.191':3128
- '11#.#34.29.91':3128
- '21#.#28.216.119':3128
- '11#.#86.29.18':3128
- '18#.#58.11.246':3128
- '81.##.224.52':3128
- '14#.#20.85.105':3128
- '19#.#17.61.104':3128
- '79.#.186.199':3128
- '19#.#48.69.120':3128
- '95.##6.195.246':3128
- '89.##5.8.208':3128
- '88.##3.125.206':3128
- '67.##0.65.27':3128
- '82.##1.37.107':3128
- '12#.#45.119.109':3128
- '18#.#6.72.22':3128
- '86.##.112.93':3128
- '89.##3.203.165':3128
- '19#.#17.97.218':3128
- '11#.#17.186.231':3128
- '21#.#74.143.206':3128
- '19#.#4.164.157':3128
- '12#.#42.82.246':3128
- '81.##.192.93':3128
- '21#.#1.195.185':3128
- '18#.#2.97.32':3128
- '95.##.132.212':3128
- '19#.#78.73.114':3128
- '11#.#59.81.154':3128
- '19#.#33.141.53':3128
- '21#.#0.226.48':3128
- '77.##0.218.213':3128
- '89.##8.102.246':3128
- '11#.#97.4.136':3128
- '11#.#41.40.164':3128
- '11#.#58.92.75':3128
- '77.##.176.147':3128
- '89.##5.21.236':3128
- '21#.#42.212.31':3128
- '89.##5.44.119':3128
- '82.##5.60.11':3128
- '11#.#58.95.112':3128
- '11#.#1.227.148':3128
- '11#.#4.131.59':3128
- '81.##.224.236':3128
- '12#.#68.4.96':3128
- '12#.#04.17.18':3128
- '59.##1.100.191':3128
- '41.##0.10.155':3128
- '11#.#7.9.198':3128
- '59.#4.74.7':3128
- '85.##7.158.138':3128
- '59.##8.153.121':3128
- '11#.#98.167.99':3128
- '11#.#05.144.151':3128
- '19#.#17.51.210':3128
- '19#.#.147.59':3128
- '95.##6.129.220':3128
- '22#.#18.110.238':3128
- '20#.#37.228.52':3128
- '88.##8.204.30':3128
- '59.##.190.60':3128
- '22#.#65.120.96':3128
- '20#.68.50.2':3128
- '59.##1.64.115':3128
- '19#.#17.25.99':3128
- '95.##.154.46':3128
- '89.##5.23.181':3128
- '19#.0.69.33':3128
- '16#.#6.228.56':3128
- '18#.#58.3.100':3128
- '87.##8.19.66':3128
- '11#.40.1.13':3128
- '82.##7.100.20':3128
- '61.##.110.22':3128
- '88.##5.71.68':3128
- '18#.#58.8.190':3128
- '77.##.173.135':3128
- '11#.#34.29.177':3128
- '95.##.150.109':3128
- '11#.#32.246.128':3128
- '41.##4.158.76':3128
- '11#.#17.227.164':3128
- '41.##0.18.235':3128
- '20#.#0.29.245':3128
- '24.##2.201.196':3128
- '78.##4.134.7':3128
- '21#.#4.213.104':3128
- '12#.#23.155.167':3128
- '86.##.125.152':3128
- '19#.#17.45.181':3128
- '24.##.62.190':3128
- '20#.#49.82.184':3128
- '19#.#33.137.187':3128
- '11#.#92.139.142':3128
- '89.##.88.140':3128
- '88.##5.169.190':3128
- '21#.#35.175.244':3128
- '11#.#33.65.99':3128
- '59.##.40.186':3128
- '86.##5.240.217':3128
- '59.##.228.138':3128
- '18#.#9.68.85':3128
- '95.##.169.67':3128
- '11#.#7.108.140':3128
- '20#.#09.60.66':3128
- '12#.#36.22.172':3128
- '12#.#2.55.239':3128
- '20#.#77.215.190':3128
- '11#.#62.187.58':3128
- '61.#7.38.28':3128
- '93.##3.194.136':3128
- '10.#.1.254':3128
- '89.##8.93.24':3128
- '20#.#7.198.45':3128
- '19#.#48.146.31':3128
- '20#.#66.18.32':3128
- '18#.#58.10.6':3128
- '22#.#41.102.175':3128
- '19#.#48.35.199':3128
- '81.##1.192.103':3128
- '19#.#.103.42':3128
- '22#.#9.252.37':3128
- '15#.#07.61.35':3128
- '11#.#55.69.23':3128
- '95.##6.209.146':3128
- '89.##2.110.12':3128
- '18#.#93.208.52':3128
- '95.##.131.119':3128
- '59.#8.192.9':3128
- '18#.#58.11.113':3128
- '11#.#10.166.163':3128
- '12#.#68.217.244':3128
- '58.#48.5.2':3128
- '11#.#93.46.246':3128
- '11#.#34.137.115':3128
- '22#.#04.2.156':3128
- '89.##2.145.50':3128
- http://19#.#41.169.8/+28388.html
- http://19#.#05.222.20/+28388.html
- http://11#.#34.29.93/+28388.html
- http://89.##5.246.91/+28388.html
- http://20#.#3.233.211/+28388.html
- http://83.##.81.250/+28388.html
- http://82.##2.103.247/+28388.html
- http://95.##.181.210/+28388.html
- http://12#.#68.61.254/+28388.html
- http://59.##.210.80/+28388.html
- http://11#.#41.40.47/+28388.html
- http://19#.#06.184.63/+28388.html
- http://85.##5.205.250/+28388.html
- http://21#.#07.204.205/+28388.html
- http://12#.#3.105.87/+28388.html
- http://11#.#59.83.95/+28388.html
- http://11#.#55.3.189/+28388.html
- http://95.##.184.217/+28388.html
- http://11#.#7.20.143/+28388.html
- http://89.##5.21.227/+28388.html
- http://62.##3.38.134/+28388.html
- http://21#.#29.158.83/+28388.html
- http://19#.#78.114.229/+28388.html
- http://78.##.124.174/+28388.html
- http://93.##4.80.225/+28388.html
- http://21#.#58.95.136/+28388.html
- http://11#.#7.9.125/+28388.html
- http://88.##6.79.53/+28388.html
- http://82.##9.127.108/+28388.html
- http://93.##.14.187/+28388.html
- http://21#.#09.162.104/+28388.html
- http://41.##3.25.20/+28388.html
- http://83.##6.143.132/+28388.html
- http://93.##3.67.210/+28388.html
- http://94.##9.185.44/+28388.html
- http://82.##9.181.50/+28388.html
- http://88.##3.179.180/+28388.html
- http://89.##5.16.143/+28388.html
- http://18#.#5.159.151/+28388.html
- http://11#.#7.248.5/+28388.html
- http://11#.#34.30.140/+28388.html
- http://12#.#68.99.211/+28388.html
- http://12#.#33.206.123/+28388.html
- http://14#.#27.180.200/+28388.html
- http://41.##0.11.88/+28388.html
- http://14#.#24.5.127/+28388.html
- http://59.##.128.180/+28388.html
- http://91.##2.146.35/+28388.html
- http://14#.#17.69.132/+28388.html
- http://19#.#78.102.65/+28388.html
- http://21#.#11.228.71/+28388.html
- http://20#.#67.215.225/+28388.html
- http://11#.#34.30.64/+28388.html
- http://85.#1.153.1/+28388.html
- http://11#.#2.199.225/+28388.html
- http://22#.#65.9.203/+28388.html
- http://12#.#68.7.25/+28388.html
- http://20#.#60.148.167/+28388.html
- http://19#.#17.50.8/+28388.html
- http://20#.#08.151.226/+28388.html
- http://82.##2.0.141/+28388.html
- http://21#.#2.242.130/+28388.html
- http://19#.#07.115.91/+28388.html
- http://12#.#68.213.133/+28388.html
- http://18#.#58.3.133/+28388.html
- http://95.##6.132.79/+28388.html
- http://21#.#5.80.208/+28388.html
- http://11#.#4.55.66/+28388.html
- http://88.##5.164.219/+28388.html
- http://22#.#0.47.136/+28388.html
- http://12#.#60.167.200/+28388.html
- http://20#.#6.171.5/+28388.html
- http://22#.#65.120.91/+28388.html
- http://19#.#06.186.17/+28388.html
- http://11#.#7.7.151/+28388.html
- http://14#.#23.168.168/+28388.html
- http://85.##.185.143/+28388.html
- http://59.##3.155.205/+28388.html
- http://11#.#02.184.240/+28388.html
- http://89.##3.148.31/+28388.html
- http://81.##6.224.25/+28388.html
- http://58.#8.34.59/+28388.html
- http://11#.#41.40.19/+28388.html
- http://82.##8.148.6/+28388.html
- http://19#.#6.84.58/+28388.html
- http://20#.#54.245.125/+28388.html
- http://88.##5.164.219/+6144.html
- http://12#.#31.186.81/+6144.html
- http://11#.#1.227.148/+6144.html
- http://11#.#59.81.154/+6144.html
- http://77.##.173.135/+6144.html
- http://11#.40.1.13/+6144.html
- http://77.##.176.147/+6144.html
- http://61.##.240.63/+6144.html
- http://59.##1.100.191/+6144.html
- http://11#.#97.4.42/+6144.html
- http://20#.#08.151.226/+6144.html
- http://12#.#2.55.239/+6144.html
- http://89.##2.145.50/+6144.html
- http://11#.#7.9.125/+6144.html
- http://11#.#41.40.164/+6144.html
- http://85.#1.153.1/+6144.html
- http://21#.#50.170.26/+6144.html
- http://12#.#68.4.96/+6144.html
- http://21#.#4.213.104/+6144.html
- http://22#.#65.120.116/+6144.html
- http://59.##.200.52/+6144.html
- http://21#.#35.175.244/+6144.html
- http://21#.#09.162.104/+6144.html
- http://12#.#45.92.210/+6144.html
- http://82.##5.60.11/+6144.html
- http://19#.#33.137.187/+6144.html
- http://95.##.139.191/+6144.html
- http://11#.#34.29.93/+6144.html
- http://94.##9.185.44/+6144.html
- http://89.##.88.140/+6144.html
- http://95.##.132.212/+6144.html
- http://89.##5.23.181/+6144.html
- http://78.##.124.174/+6144.html
- http://86.##.125.152/+6144.html
- http://18#.#9.68.85/+6144.html
- http://11#.#2.199.225/+6144.html
- http://89.##5.11.156/+6144.html
- http://11#.#7.9.198/+6144.html
- http://79.#.186.199/+6144.html
- http://14#.#27.180.200/+6144.html
- http://89.##2.145.50/+28388.html
- http://77.##.173.135/+28388.html
- http://41.##0.158.38/+28388.html
- http://19#.#17.203.6/+28388.html
- http://11#.47.8.40/+28388.html
- http://12#.#68.30.220/+28388.html
- http://21#.#0.232.183/+28388.html
- http://95.##6.131.89/+28388.html
- http://20#.#53.206.21/+28388.html
- http://59.##.18.183/+28388.html
- http://11#.#9.179.121/+28388.html
- http://12#.#57.20.183/+28388.html
- http://18#.#27.129.97/+28388.html
- http://89.##5.10.162/+28388.html
- http://19#.#17.139.53/+28388.html
- http://41.##1.165.132/+28388.html
- http://81.##.115.138/+28388.html
- http://82.##3.221.63/+28388.html
- http://19#.#19.167.114/+28388.html
- http://21#.#50.170.26/+28388.html
- http://89.##3.142.181/+28388.html
- http://11#.#4.131.59/+28388.html
- http://12#.#31.186.81/+28388.html
- http://88.##0.143.38/+28388.html
- http://22#.#65.120.96/+28388.html
- http://22#.#52.0.163/+28388.html
- http://13#.#32.249.191/+28388.html
- http://89.##5.26.221/+28388.html
- http://89.##5.15.183/+28388.html
- http://10#.#4.130.190/+28388.html
- http://20#.#1.51.74/+28388.html
- http://20#.#03.160.98/+28388.html
- http://11#.#4.24.192/+28388.html
- http://19#.#48.146.122/+28388.html
- http://61.##.240.63/+28388.html
- http://12#.#31.186.241/+28388.html
- http://78.##.185.170/+28388.html
- http://95.##6.131.174/+28388.html
- http://19#.#69.218.149/+28388.html
- http://83.#6.84.5/+28388.html
- http://11#.#17.231.109/+28388.html
- http://19#.#17.100.239/+28388.html
- http://19#.#46.106.12/+28388.html
- http://95.##.133.222/+28388.html
- http://89.##5.11.156/+28388.html
- http://95.##.139.191/+28388.html
- http://21#.#74.143.206/+28388.html
- http://19#.#4.164.157/+28388.html
- http://12#.#42.82.246/+28388.html
- http://14#.#20.85.105/+28388.html
- http://95.##6.163.128/+28388.html
- http://16#.#46.210.174/+28388.html
- http://82.##6.163.238/+28388.html
- http://87.##8.19.66/+28388.html
- http://20#.#34.18.157/+28388.html
- http://14#.#08.141.130/+28388.html
- http://11#.#92.139.154/+28388.html
- http://12#.#45.92.210/+28388.html
- http://78.##9.201.238/+28388.html
- http://41.##0.163.21/+28388.html
- http://81.##.192.93/+28388.html
- http://81.##.224.52/+28388.html
- http://89.##3.203.165/+28388.html
- http://11#.#17.186.231/+28388.html
- http://18#.#6.72.22/+28388.html
- http://11#.#34.29.91/+28388.html
- http://89.##8.93.24/+28388.html
- http://20#.#7.198.45/+28388.html
- http://19#.#48.146.31/+28388.html
- http://20#.#66.18.32/+28388.html
- http://22#.#41.102.175/+28388.html
- http://59.##1.64.115/+28388.html
- http://18#.#9.68.85/+28388.html
- http://20#.68.50.2/+28388.html
- http://19#.#17.61.104/+28388.html
- http://95.##.169.67/+28388.html
- http://95.##6.195.246/+28388.html
- http://89.##5.8.208/+28388.html
- http://88.##3.125.206/+28388.html
- http://67.##0.65.27/+28388.html
- http://82.##1.37.107/+28388.html
- http://12#.#45.119.109/+28388.html
- http://86.##.112.93/+28388.html
- http://61.#7.38.28/+28388.html
- http://21#.#28.216.119/+28388.html
- http://11#.#86.29.18/+28388.html
- http://81.##.224.236/+28388.html
- http://19#.#78.73.114/+28388.html
- http://11#.#41.40.164/+28388.html
- http://77.##.176.147/+28388.html
- http://11#.#58.92.75/+28388.html
- http://12#.#04.17.18/+28388.html
- http://11#.#59.81.154/+28388.html
- http://19#.#33.141.53/+28388.html
- http://21#.#0.226.48/+28388.html
- http://77.##0.218.213/+28388.html
- http://11#.#97.4.136/+28388.html
- http://89.##5.21.236/+28388.html
- http://21#.#42.212.31/+28388.html
- http://89.##5.44.119/+28388.html
- http://82.##5.60.11/+28388.html
- http://11#.#58.95.112/+28388.html
- http://59.##.190.60/+28388.html
- http://20#.#37.228.52/+28388.html
- http://22#.#18.110.238/+28388.html
- http://89.##8.102.246/+28388.html
- http://95.##.132.212/+28388.html
- http://18#.#2.97.32/+28388.html
- http://18#.#58.11.246/+28388.html
- http://79.#.186.199/+28388.html
- http://21#.#1.195.185/+28388.html
- http://19#.#48.69.120/+28388.html
- http://59.##1.100.191/+28388.html
- http://11#.#7.9.198/+28388.html
- http://41.##0.10.155/+28388.html
- http://10.#.1.254/+28388.html
- http://11#.#1.227.148/+28388.html
- http://59.#4.74.7/+28388.html
- http://11#.#98.167.99/+28388.html
- http://11#.#05.144.151/+28388.html
- http://19#.#17.51.210/+28388.html
- http://19#.#.147.59/+28388.html
- http://95.##6.129.220/+28388.html
- http://88.##8.204.30/+28388.html
- http://12#.#68.4.96/+28388.html
- http://85.##7.158.138/+28388.html
- http://59.##8.153.121/+28388.html
- http://19#.#17.97.218/+28388.html
- http://11#.#62.187.58/+28388.html
- http://20#.#0.29.245/+28388.html
- http://85.##0.242.90/+28388.html
- http://24.##2.201.196/+28388.html
- http://78.##4.134.7/+28388.html
- http://21#.#4.213.104/+28388.html
- http://12#.#23.155.167/+28388.html
- http://86.##.125.152/+28388.html
- http://19#.#17.45.181/+28388.html
- http://24.##.62.190/+28388.html
- http://20#.#49.82.184/+28388.html
- http://19#.#33.137.187/+28388.html
- http://11#.#92.139.142/+28388.html
- http://89.##.88.140/+28388.html
- http://88.##5.169.190/+28388.html
- http://21#.#35.175.244/+28388.html
- http://41.##0.18.235/+28388.html
- http://11#.#32.246.128/+28388.html
- http://19#.#17.25.99/+28388.html
- http://59.##.200.52/+28388.html
- http://95.##.157.15/+28388.html
- http://95.##.128.175/+28388.html
- http://89.##5.21.229/+28388.html
- http://93.##4.201.226/+28388.html
- http://22#.#65.120.116/+28388.html
- http://20#.#0.121.199/+28388.html
- http://22#.#21.70.244/+28388.html
- http://21#.#16.162.1/+28388.html
- http://89.##7.75.85/+28388.html
- http://11#.#34.28.12/+28388.html
- http://59.##8.61.156/+28388.html
- http://41.##4.158.76/+28388.html
- http://95.##.150.109/+28388.html
- http://20#.#77.215.190/+28388.html
- http://60.##.129.136/+28388.html
- http://59.#5.21.75/+28388.html
- http://61.#.20.9/+28388.html
- http://83.##0.228.151/+28388.html
- http://11#.#97.4.42/+28388.html
- http://21#.#4.68.214/+28388.html
- http://83.##5.1.131/+28388.html
- http://14#.#15.73.142/+28388.html
- http://61.#.20.9/+6144.html
- http://20#.#66.18.32/+6144.html
- http://19#.0.69.33/+28388.html
- http://11#.#10.166.163/+28388.html
- http://12#.#68.217.244/+28388.html
- http://58.#48.5.2/+28388.html
- http://11#.#93.46.246/+28388.html
- http://11#.#34.137.115/+28388.html
- http://81.##1.192.103/+28388.html
- http://22#.#04.2.156/+28388.html
- http://19#.#48.35.199/+28388.html
- http://12#.#43.239.200/+28388.html
- http://18#.#58.10.6/+28388.html
- http://93.##3.194.136/+28388.html
- http://22#.#9.252.37/+28388.html
- http://11#.#7.108.140/+28388.html
- http://20#.#09.60.66/+28388.html
- http://12#.#36.22.172/+28388.html
- http://12#.#2.55.239/+28388.html
- http://59.#8.192.9/+28388.html
- http://95.##.131.119/+28388.html
- http://18#.#58.11.113/+28388.html
- http://18#.#93.208.52/+28388.html
- http://16#.#6.228.56/+28388.html
- http://89.##2.110.12/+28388.html
- http://18#.#58.3.100/+28388.html
- http://11#.40.1.13/+28388.html
- http://59.##.40.186/+28388.html
- http://82.##7.100.20/+28388.html
- http://61.##.110.22/+28388.html
- http://88.##5.71.68/+28388.html
- http://18#.#58.8.190/+28388.html
- http://95.##.154.46/+28388.html
- http://89.##5.23.181/+28388.html
- http://11#.#33.65.99/+28388.html
- http://11#.#17.227.164/+28388.html
- http://86.##5.240.217/+28388.html
- http://59.##.228.138/+28388.html
- http://19#.#.103.42/+28388.html
- http://15#.#07.61.35/+28388.html
- http://11#.#55.69.23/+28388.html
- http://95.##6.209.146/+28388.html
- http://11#.#34.29.177/+28388.html
- http://89.##5.16.143/+6144.html
- DNS ASK 85.#t207
- 'C:\lsass.exe' exe <Full path to file>
- '<Full path to file>' force
- '%WINDIR%\XXInstall\ps.exe' exe <Full path to file>