» » » » Mengatasi Windows yang terkena Malware dan Adware Elex dan Hijack

Minggu, Maret 26, 2017 0 , ,
A+ A-
Sebenarnya postingan ini masih berhubungan dengan postingan admin yang sebelumnya yaitu Mengatasi pesan error Windows winscv.vbs code 80070002 dimana dalam beberapa waktu terakhir, admin merasakan performa komputer admin jauh menurun, dan rasanya semakin berat dan lambat. Apalagi jika bekerja dengan jaringan internet dan membuka browser. Admin penasaran dan coba untuk uninstall satu persatu aplikasi yang jarang terpakai. Nah, saat itulah admin menemukan beberapa program yang admin tidak merasa pernah menginstall aplikasi tersebut. Meski sudah di uninstall tetap saja performa tidak berubah, jika masuk ke Task Manager komputer, penggunaan RAM hampir tidak pernah dibawah 50%, padahal saat itu admin tidak menjalankan program apapun. Dan juga kipas terdengar seolah-olah bekerja sangat berat.


Satu hal lagi yang pasti, setiap browser di buka, homepage juga berubah menjadi startpageing123.com. Sudah berulang kali admin mengembalikan ke setting browser ke default setting, tapi masih saja tidak ada perubahan. Selain itu jika kita buka program files, maka akan ada folder-folder aneh yang entah dari mana munculnya. Saat dihapus, maka akan ada peringatan kalau file sedang digunakan oleh salah satu program atau servis.


Setelah browsing beberapa kali, admin baru mengetahui kalau komputer admin terkena Malware dan Adware. Malware dan Adware memang merupakan program sejenis virus yang merusak system windows dikomputer. Penyebabnya adalah admin secara sembarangan install software gratisan untuk sekedar coba-coba. Yahhh, namanya juga masih belajar. Jadi penasaran masih agak tinggi. heee...

Sebenarnya tidak hanya freeware dengan reputasi yang antah berantah saja, bahkan software populer seperti Skpe juga memiliki opsi untuk mengubah homepage browser ke Bing saat proses instalasi. Dan jika kamu tidak teliti menghilangkan centang saat proses instalasi, maka homepage browser kamu bakal berubah.

Penyebab lainnya adalah lalai dan kurang teliti saat browsing, sehingga tanpa sengaja mendownload (dan menjalankan) adware tersebut. Jika kamu perhatikan, banyak situs file hosting memiliki iklan yang mirip tombol download. Terkadang tanpa sadar kamu memencet tombol download yang salah dan menjalankannya. Ini bisa menjadi salah satu sumber penyebab browser hijack juga.

Jika komputer belum terkena cara Ada beberapa cara yang bisa kamu lakukan untuk mencegah Browser Hijack, Download freeware dari sumber yang aman dan terpercaya, Teliti ketika menginstall freeware, pastikan menghilangkan centang atau mematikan opsi instalasi adware, toolbar, dan semacamnya, Teliti ketika browsing, terutama saat download. Jangan sampai mendownload dan menjalankan file yang salah.

Ok, lalu bagaimana cara mengatasi Windows yang terkena Malware dan Adware ini. Mungkin ini bakal jadi postingan terpanjang admin karena untuk mengatasinya lumayan membosankan. Jauh lebih lama dari pada Install ulang OS. Untuk mengatasinya diperlukan lebih dari satu software anti malware dan anti virus.

Untuk sedikit tahu saja, biasanya Malware dan Adware tidak hanya menyerang dan bersarang salam satu folder, file, dan registry. Tapi sangat banyak. Untuk sedikit daftarnya bisa dilihat di list dibawah ini.

Folder
[%PROGRAM_FILES_COMMON%]\Services\iThemes.dll
[%SYSTEM%]\Tasks\Milimili
[%APPDATA%]\Firefox\Firefox\Profiles\eql760ut.default\Extensions\@H99KV4DO-UCCF-9PFO-9ZLK-8RRP4FVOKD9O.xpi
[%SYSTEM%]\Tasks\Rekationthuberph Engine
[%APPDATA%]\Firefox\Firefox\Profiles\G78cvG2U.default\Extensions\@DA3566E2-F709-11E5-8E87-A604BC8E7F8B.xpi
[%APPDATA%]\Firefox\Firefox\Profiles\G78cvG2U.default\Extensions\@H99KV4DO-UCCF-9PFO-9ZLK-8RRP4FVOKD9O.xpi
[%APPDATA%]\Firefox\Firefox\Profiles\a2arwJK7.default\Extensions\@DA3566E2-F709-11E5-8E87-A604BC8E7F8B.xpi
[%APPDATA%]\Firefox\Firefox\Profiles\a2arwJK7.default\Extensions\@H99KV4DO-UCCF-9PFO-9ZLK-8RRP4FVOKD9O.xpi
[%SYSTEM%]\Tasks\Gezoyplumuck Engine
[%APPDATA%]\Firefox\Firefox\Profiles\vl2yi2g1.default\Extensions\@DA3566E2-F709-11E5-8E87-A604BC8E7F8B.xpi
[%APPDATA%]\Firefox\Firefox\Profiles\vl2yi2g1.default\Extensions\@H99KV4DO-UCCF-9PFO-9ZLK-8RRP4FVOKD9O.xpi
[%WINDOWS%]\Joberphlusisp
[%SYSTEM_DRIVE%]\local64spl.dll.ini
[%APPDATA%]\Firefox\Firefox\Profiles\rvp3cps7.default\Extensions\@H99KV4DO-UCCF-9PFO-9ZLK-8RRP4FVOKD9O.xpi
[%APPDATA%]\Firefox\Firefox\Profiles\11qgf06k.default\searchPlugins\amisites.xml
[%APPDATA%]\Firefox\Firefox\Profiles\11qgf06k.default\Extensions\@H99KV4DO-UCCF-9PFO-9ZLK-8RRP4FVOKD9O.xpi
[%APPDATA%]\Firefox\Firefox\Profiles\73obp8ka.default\Extensions\@DA3566E2-F709-11E5-8E87-A604BC8E7F8B.xpi
[%APPDATA%]\Firefox\Firefox\Profiles\73obp8ka.default\Extensions\@H99KV4DO-UCCF-9PFO-9ZLK-8RRP4FVOKD9O.xpi
[%APPDATA%]\Firefox\Firefox\Profiles\lmsvj6dg.default-1487870368928\Extensions\@DA3566E2-F709-11E5-8E87-A604BC8E7F8B.xpi
[%APPDATA%]\Firefox\Firefox\Profiles\lmsvj6dg.default-1487870368928\Extensions\@H99KV4DO-UCCF-9PFO-9ZLK-8RRP4FVOKD9O.xpi
[%APPDATA%]\Firefox\Firefox\Profiles\9rnz6tsd.default\Extensions\@DA3566E2-F709-11E5-8E87-A604BC8E7F8B.xpi
[%APPDATA%]\Firefox\Firefox\Profiles\9rnz6tsd.default\Extensions\@H99KV4DO-UCCF-9PFO-9ZLK-8RRP4FVOKD9O.xpi
[%WINDOWS%]\Tasks\Febole Log.job
[%APPDATA%]\Firefox\Firefox\Profiles\1ad5kk0p.default\Extensions\@DA3566E2-F709-11E5-8E87-A604BC8E7F8B.xpi
[%APPDATA%]\Firefox\Firefox\Profiles\1ad5kk0p.default\Extensions\@H99KV4DO-UCCF-9PFO-9ZLK-8RRP4FVOKD9O.xpi
[%APPDATA%]\Firefox\Firefox\Profiles\uxs1dkhr.default\Extensions\@DA3566E2-F709-11E5-8E87-A604BC8E7F8B.xpi
[%APPDATA%]\Firefox\Firefox\Profiles\uxs1dkhr.default\Extensions\@H99KV4DO-UCCF-9PFO-9ZLK-8RRP4FVOKD9O.xpi
[%APPDATA%]\RandomDelJiheReg.exe
[%SYSTEM%]\Tasks\Fakthertuverge Controls
[%APPDATA%]\Microsoft\Internet Explorer\Quick Launch\User Pinned\StartMenu\qksee.lnk
[%SYSTEM%]\Tasks\Bozoty Agent
[%SYSTEM%]\Tasks\Vdeghcosily
[%APPDATA%]\Firefox\Firefox\Profiles\b7jyz3nx.default-1458921168851\Extensions\@DA3566E2-F709-11E5-8E87-A604BC8E7F8B.xpi
[%APPDATA%]\Firefox\Firefox\Profiles\b7jyz3nx.default-1458921168851\Extensions\@H99KV4DO-UCCF-9PFO-9ZLK-8RRP4FVOKD9O.xpi
[%APPDATA%]\Firefox\Firefox\Profiles\io1b1ltt.default\Extensions\@H99KV4DO-UCCF-9PFO-9ZLK-8RRP4FVOKD9O.xpi
[%SYSTEM%]\Tasks\Herwocult Community
[%APPDATA%]\Firefox\Firefox\Profiles\yww94c2v.default-1402750809311\Extensions\@DA3566E2-F709-11E5-8E87-A604BC8E7F8B.xpi
[%APPDATA%]\Firefox\Firefox\Profiles\yww94c2v.default-1402750809311\Extensions\@H99KV4DO-UCCF-9PFO-9ZLK-8RRP4FVOKD9O.xpi
[%APPDATA%]\Firefox\Firefox\Profiles\rfttoa19.default\Extensions\@DA3566E2-F709-11E5-8E87-A604BC8E7F8B.xpi
[%APPDATA%]\Firefox\Firefox\Profiles\rfttoa19.default\Extensions\@H99KV4DO-UCCF-9PFO-9ZLK-8RRP4FVOKD9O.xpi
[%SYSTEM%]\Tasks\Dravsynlether Core
[%PROGRAM_FILES%]\Mozilla Firefox\browser\features\googletestNT@mozillaonline.com
[%APPDATA%]\Firefox\Firefox\Profiles\31p23djz.default\Extensions\@DA3566E2-F709-11E5-8E87-A604BC8E7F8B.xpi
[%APPDATA%]\Firefox\Firefox\Profiles\31p23djz.default\Extensions\@H99KV4DO-UCCF-9PFO-9ZLK-8RRP4FVOKD9O.xpi
[%APPDATA%]\Firefox\Firefox\Profiles\e7fglm9v.default\Extensions\@H99KV4DO-UCCF-9PFO-9ZLK-8RRP4FVOKD9O.xpi
[%SYSTEM%]\Tasks\593286f744878eeb98ec740963a24c35
[%PROGRAM_FILES%]\Mozilla Firefox\browser\features\local32spl.dll
[%APPDATA%]\Firefox\Firefox\Profiles\74k7xpvt.default\Extensions\@DA3566E2-F709-11E5-8E87-A604BC8E7F8B.xpi
[%APPDATA%]\Firefox\Firefox\Profiles\74k7xpvt.default\Extensions\@H99KV4DO-UCCF-9PFO-9ZLK-8RRP4FVOKD9O.xpi
[%APPDATA%]\Firefox\Firefox\Profiles\wn6i3b0u.default\Extensions\@H99KV4DO-UCCF-9PFO-9ZLK-8RRP4FVOKD9O.xpi
[%APPDATA%]\Firefox\Firefox\Profiles\csh8an2z.default\Extensions\@DA3566E2-F709-11E5-8E87-A604BC8E7F8B.xpi
[%APPDATA%]\Firefox\Firefox\Profiles\csh8an2z.default\Extensions\@H99KV4DO-UCCF-9PFO-9ZLK-8RRP4FVOKD9O.xpi
[%APPDATA%]\Firefox\Firefox\Profiles\5m4qsue7.default\Extensions\@DA3566E2-F709-11E5-8E87-A604BC8E7F8B.xpi
[%APPDATA%]\Firefox\Firefox\Profiles\5m4qsue7.default\Extensions\@H99KV4DO-UCCF-9PFO-9ZLK-8RRP4FVOKD9O.xpi
[%APPDATA%]\Firefox\Firefox\Profiles\l8uyi1vg.default\Extensions\@H99KV4DO-UCCF-9PFO-9ZLK-8RRP4FVOKD9O.xpi
[%SYSTEM%]\Tasks\Buqaghghnet Builder
[%APPDATA%]\Firefox\Firefox\Profiles\848uryqu.default\Extensions\@H99KV4DO-UCCF-9PFO-9ZLK-8RRP4FVOKD9O.xpi
[%APPDATA%]\Firefox\Firefox\Profiles\7lz7fzd7.default\Extensions\@DA3566E2-F709-11E5-8E87-A604BC8E7F8B.xpi
[%APPDATA%]\Firefox\Firefox\Profiles\7lz7fzd7.default\Extensions\@H99KV4DO-UCCF-9PFO-9ZLK-8RRP4FVOKD9O.xpi
[%SYSTEM%]\Tasks\Shertesh Monitor
[%APPDATA%]\Firefox\Firefox\Profiles\6yfy9wt0.default\Extensions\@H99KV4DO-UCCF-9PFO-9ZLK-8RRP4FVOKD9O.xpi
[%WINDOWS%]\Tasks\Thoveent Engine.job
[%APPDATA%]\Firefox\Firefox\Profiles\64tehuak.default\Extensions\@H99KV4DO-UCCF-9PFO-9ZLK-8RRP4FVOKD9O.xpi
[%APPDATA%]\Firefox\Firefox\Profiles\jtj8sv7j.default\Extensions\@H99KV4DO-UCCF-9PFO-9ZLK-8RRP4FVOKD9O.xpi
[%APPDATA%]\Firefox\Firefox\Profiles\8o5ualdv.default-1486465378096\Extensions\@DA3566E2-F709-11E5-8E87-A604BC8E7F8B.xpi
[%APPDATA%]\Firefox\Firefox\Profiles\8o5ualdv.default-1486465378096\Extensions\@H99KV4DO-UCCF-9PFO-9ZLK-8RRP4FVOKD9O.xpi
[%APPDATA%]\Firefox\Firefox\Profiles\avbkijc8.default\Extensions\@H99KV4DO-UCCF-9PFO-9ZLK-8RRP4FVOKD9O.xpi
[%APPDATA%]\Firefox\Firefox\Profiles\7dd08856.default\Extensions\@DA3566E2-F709-11E5-8E87-A604BC8E7F8B.xpi
[%APPDATA%]\Firefox\Firefox\Profiles\7dd08856.default\Extensions\@H99KV4DO-UCCF-9PFO-9ZLK-8RRP4FVOKD9O.xpi
[%SYSTEM%]\Tasks\Domory Host
[%SYSTEM%]\Tasks\ChelfNotify Task
[%SYSTEM%]\Tasks\vreXjvXBrowserUpdateCore
[%SYSTEM%]\Tasks\vreXjvXBrowserUpdateUA
[%SYSTEM%]\Tasks\vreXjvXCheckTask
[%APPDATA%]\Firefox\Firefox\Profiles\41A66E7E5EE1\Extensions\@DA3566E2-F709-11E5-8E87-A604BC8E7F8B.xpi
[%APPDATA%]\Firefox\Firefox\Profiles\41A66E7E5EE1\Extensions\@H99KV4DO-UCCF-9PFO-9ZLK-8RRP4FVOKD9O.xpi
[%APPDATA%]\Firefox\Firefox\Profiles\CCACCBF1-7AB4-4CF5-B32D-668C686A539F\Extensions\@E9438230-A7DF-4D1F-8F2D-CA1D0F0F7924.xpi
[%APPDATA%]\Firefox\Firefox\Profiles\41A66E7E5EE1\Extensions\@E9438230-A7DF-4D1F-8F2D-CA1D0F0F7924.xpi
[%APPDATA%]\Firefox\Firefox\Profiles\gjwi35am.default\Extensions\@DA3566E2-F709-11E5-8E87-A604BC8E7F8B.xpi
[%APPDATA%]\Firefox\Firefox\Profiles\gjwi35am.default\Extensions\@H99KV4DO-UCCF-9PFO-9ZLK-8RRP4FVOKD9O.xpi
[%APPDATA%]\Firefox\Firefox\Profiles\60ofosoa.default\Extensions\@DA3566E2-F709-11E5-8E87-A604BC8E7F8B.xpi
[%APPDATA%]\Firefox\Firefox\Profiles\60ofosoa.default\Extensions\@H99KV4DO-UCCF-9PFO-9ZLK-8RRP4FVOKD9O.xpi
[%WINDOWS%]\Tasks\Gherotyreiferdom Engine.job
[%APPDATA%]\Firefox\Firefox\Profiles\71nm9ny5.default\Extensions\@H99KV4DO-UCCF-9PFO-9ZLK-8RRP4FVOKD9O.xpi
[%APPDATA%]\Firefox\Firefox\Profiles\7bjhg4n5.default\Extensions\@DA3566E2-F709-11E5-8E87-A604BC8E7F8B.xpi
[%APPDATA%]\Firefox\Firefox\Profiles\7bjhg4n5.default\Extensions\@H99KV4DO-UCCF-9PFO-9ZLK-8RRP4FVOKD9O.xpi
[%APPDATA%]\Firefox\Firefox\Profiles\12pi2wkf.default\Extensions\@DA3566E2-F709-11E5-8E87-A604BC8E7F8B.xpi
[%APPDATA%]\Firefox\Firefox\Profiles\12pi2wkf.default\Extensions\@H99KV4DO-UCCF-9PFO-9ZLK-8RRP4FVOKD9O.xpi
[%APPDATA%]\Firefox\Firefox\Profiles\12tu032f.default\Extensions\@H99KV4DO-UCCF-9PFO-9ZLK-8RRP4FVOKD9O.xpi
[%APPDATA%]\Firefox\Firefox\Profiles\19s5mdot.default\Extensions\@DA3566E2-F709-11E5-8E87-A604BC8E7F8B.xpi
[%APPDATA%]\Firefox\Firefox\Profiles\19s5mdot.default\Extensions\@H99KV4DO-UCCF-9PFO-9ZLK-8RRP4FVOKD9O.xpi
[%APPDATA%]\Firefox\Firefox\Profiles\woen9n6h.default\Extensions\@DA3566E2-F709-11E5-8E87-A604BC8E7F8B.xpi
[%APPDATA%]\Firefox\Firefox\Profiles\woen9n6h.default\Extensions\@H99KV4DO-UCCF-9PFO-9ZLK-8RRP4FVOKD9O.xpi
[%APPDATA%]\Firefox\Firefox\Profiles\98h9x2ol.default\Extensions\@H99KV4DO-UCCF-9PFO-9ZLK-8RRP4FVOKD9O.xpi
[%APPDATA%]\Firefox\Firefox\Profiles\7jbu9z0k.default\Extensions\@DA3566E2-F709-11E5-8E87-A604BC8E7F8B.xpi
[%APPDATA%]\Firefox\Firefox\Profiles\7jbu9z0k.default\Extensions\@H99KV4DO-UCCF-9PFO-9ZLK-8RRP4FVOKD9O.xpi
[%APPDATA%]\Firefox\Firefox\Profiles\if7p0zk4.default\Extensions\@H99KV4DO-UCCF-9PFO-9ZLK-8RRP4FVOKD9O.xpi
[%APPDATA%]\Firefox\Firefox\Profiles\h1chnvah.default\Extensions\@H99KV4DO-UCCF-9PFO-9ZLK-8RRP4FVOKD9O.xpi
[%APPDATA%]\Firefox\Firefox\Profiles\qebde32a.default\Extensions\@H99KV4DO-UCCF-9PFO-9ZLK-8RRP4FVOKD9O.xpi
[%APPDATA%]\Firefox\Firefox\Profiles\lgjanph3.default\Extensions\@H99KV4DO-UCCF-9PFO-9ZLK-8RRP4FVOKD9O.xpi
File
[%LOCAL_APPDATA%]\Ckerjikghoguied
[%LOCAL_APPDATA%]\kemgadeojglibflomicgnfeopkdfflnk
[%APPDATA%]\WinZiper
[%PROGRAM_FILES%]\WinArcher
[%PROGRAM_FILES%]\Ujettequther
[%PROGRAM_FILES%]\Gubed
[%PROGRAM_FILES%]\Strersp
[%LOCAL_APPDATA%]\Laqile
[%PROGRAM_FILES%]\MIO
[%LOCAL_APPDATA%]\Faqose
[%APPDATA%]\Vvuckchvosh
[%APPDATA%]\WinSAPSvc
[%PROGRAM_FILES%]\Gub
[%LOCAL_APPDATA%]\Qiluse
[%PROGRAM_FILES%]\Anugertainzerwuch
[%PROGRAM_FILES%]\amuleCexx
[%PROGRAM_FILES%]\Gherwaspanasution
[%PROGRAM_FILES%]\bilibili
[%APPDATA%]\Ghagather
[%APPDATA%]\Kyubey
[%PROGRAMS%]\amuleC
[%PROGRAM_FILES%]\amulell
[%LOCAL_APPDATA%]\FindIp
[%PROGRAM_FILES%]\Gezoyplumuck Engine
[%PROGRAM_FILES%]\Gevuward Core
[%PROGRAM_FILES%]\Qejisyfank
[%PROGRAM_FILES%]\Qebele Reports
[%PROGRAM_FILES%]\Plenerle Manager
[%PROGRAM_FILES%]\Wqophphisasp Cloud
[%PROGRAM_FILES%]\Vehotherdreguty
[%PROGRAM_FILES%]\Anamipy Manager
[%LOCAL_APPDATA%]\Rwaght
[%PROGRAM_FILES%]\Rekationthuberph Engine
[%PROGRAM_FILES%]\Tutpydosergh Center
[%LOCAL_APPDATA%]\Prermerward
[%PROGRAM_FILES%]\Jneghktasp Manager
[%PROGRAM_FILES%]\Stikodom Schedule
[%PROGRAM_FILES%]\Nevusygerwersh
[%PROGRAM_FILES%]\qksee
[%PROGRAM_FILES%]\SoSoIm_3
[%PROGRAM_FILES%]\SoSoIm_4
[%PROGRAM_FILES%]\SoSoIm_5
[%PROGRAM_FILES%]\SoSoIm_6
[%LOCAL_APPDATA%]\grientjerhipythojuse
[%LOCAL_APPDATA%]\fwoshdrauspliition
[%LOCAL_APPDATA%]\arukudomerbrystomither
[%LOCAL_APPDATA%]\Stemogeputs
[%PROGRAM_FILES%]\Anerdusygolution
[%PROGRAM_FILES%]\Vemiing
[%APPDATA%]\cgjcf
[%APPDATA%]\setup1
[%PROGRAM_FILES%]\amuleC1
[%PROGRAM_FILES%]\Maoha
[%PROGRAM_FILES%]\f09er35s
[%LOCAL_APPDATA%]\Google\Chrome\User Data\Default\Extensions\ghfmhofojkkfdnlfefhkckbflohgiicn
[%PROGRAM_FILES%]\Dceried Host
[%LOCAL_APPDATA%]\Himergh
[%PROGRAM_FILES%]\Rewity
[%PROGRAM_FILES%]\Program Files (x86)_
[%PROGRAM_FILES%]\Anosaph Nodifier
[%PROGRAM_FILES%]\cvbs0
[%SYSTEM_DRIVE%]\Wsis32
[%PROGRAM_FILES%]\Ckesaspkiris Module
[%PROGRAM_FILES%]\Lerbely System
[%APPDATA%]\Jipelegernise
[%LOCAL_APPDATA%]\Ltishclufiied
[%PROGRAM_FILES%]\Febole Log
[%PROFILE_TEMP%]\00029687
[%APPDATA%]\Qugotfakiward
[%PROFILE_TEMP%]\00030634
[%PROGRAM_FILES%]\Htaphareose Reports
[%PROGRAM_FILES%]\Netiing System
[%PROGRAM_FILES%]\Plotekaresagh Cloud
[%PROGRAM_FILES%]\uvconvrx_00000000
[%PROGRAM_FILES%]\uvconvrx_00000001
[%PROGRAM_FILES%]\uvconvrx_00000002
[%APPDATA%]\beibe
[%PROGRAM_FILES%]\Gubed_WMI
[%PROGRAM_FILES%]\Atikationbogot System
[%PROGRAM_FILES%]\Coitoy Manager
[%APPDATA%]\Domety
[%LOCAL_APPDATA%]\Verfockwua
[%PROGRAM_FILES%]\Anidation
[%APPDATA%]\Zrshfcit
[%APPDATA%]\Grjelyckojule
[%APPDATA%]\Thertsparimoly
[%PROGRAM_FILES%]\Coerersp Client
[%PROGRAM_FILES%]\cvbs5
[%PROGRAM_FILES%]\cvbs6
[%PROGRAM_FILES%]\cvbs7
[%PROGRAM_FILES%]\cvbs8
[%PROGRAM_FILES%]\cvbs9
[%PROGRAM_FILES%]\cvbsA
[%PROGRAM_FILES%]\cvbsB
[%PROGRAM_FILES%]\cvbsC
[%PROGRAM_FILES%]\cvbsD
[%PROGRAM_FILES%]\cvbsE
[%PROGRAM_FILES%]\cvbsF
[%PROGRAM_FILES%]\uvconvrx_00000003
[%PROGRAM_FILES%]\uvconvrx_00000004
[%PROGRAM_FILES%]\uvconvrx_00000005
[%PROGRAM_FILES%]\uvconvrx_00000006
[%PROGRAM_FILES%]\uvconvrx_00000007
[%PROGRAM_FILES%]\uvconvrx_00000008
[%PROGRAM_FILES%]\uvconvrx_00000009

Registry
HKEY_LOCAL_MACHINE\SOFTWARE\{84416237-6490-494D-9AD6-4994DD978971}
HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\EventLog\Application\WinSnare
HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\Archer
HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\WinSAPSvc
HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\iThemes5
HKEY_LOCAL_MACHINE\SOFTWARE\qkseeSvc
HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\EventLog\Application\qkseeService
HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\ed2kidle
HKEY_CURRENT_USER\Software\Maoha
HKEY_LOCAL_MACHINE\SOFTWARE\Maoha
HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\GubedZL
HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\gubed_wmi
HKEY_LOCAL_MACHINE\SOFTWARE\WinArcher
HKEY_LOCAL_MACHINE\SOFTWARE\jhdbca
HKEY_USERS\.DEFAULT\Software\jhdbca
HKEY_LOCAL_MACHINE\SOFTWARE\UvConv
HKEY_LOCAL_MACHINE\SOFTWARE\jhtrsq
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tree\Milimili
HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\GubZL
HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\bilibili
HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\Kyubey
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tasks\{5E3F1903-56E2-4DE6-97B8-FB61CA3FDF63}
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tree\Rekationthuberph Engine
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tasks\{A439398F-127F-44D6-91E7-8E0568BE70B9}
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tasks\{1F889F66-D39F-4633-9B9E-DB7FD515D0AD}
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tasks\{74E1F9A9-46A1-481D-8373-05EB3E0DA8BE}
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tree\Gezoyplumuck Engine
HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\CfHelper66
HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\CfHelper55
HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\CfHelper44
HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\CfHelper33
HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\JoropygrosakDebuger
HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SoSoIm6
HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SoSoIm5
HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SoSoIm4
HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SoSoIm3
HKEY_LOCAL_MACHINE\SOFTWARE\WinSaberSvc
HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\Convxxxx
HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\IhPul
HKEY_LOCAL_MACHINE\System\CurrentControlSet\Services\Apple_Cfg
HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\Apps_Cfg
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tasks\{4CF7CB4B-8975-415F-B0CF-AEF144C0C7DB}
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tasks\{ECBA9D9D-9B13-46BD-8FBE-E127EB0FD80C}
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tasks\{35D0554F-7ED1-4BEF-8BEC-4F474869354F}
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tasks\{C4EEC6DA-03AB-4B13-AC98-D0EFF1FF158C}
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tree\Fakthertuverge Controls
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tasks\{3F830339-4B19-469E-8213-91A6FC14E96A}
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tasks\{6CE4180A-E34B-409A-B2AD-A0582E973DBE}
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tree\Bozoty Agent
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tree\Vdeghcosily
HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\Sezght
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tasks\{DD98E518-E6B9-46AD-B157-0CD56C3BBD28}
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tasks\{FDD16505-0178-469F-8F4E-D05A831C3DD8}
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tasks\{A193DA10-C334-4461-A7BE-8CFE0D6AC917}
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tasks\{2C70D365-56AC-45D9-85BB-73364AF15EB8}
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tree\Herwocult Community
HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\AppleSrv
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tree\Dravsynlether Core
HKEY_CURRENT_USER\SOFTWARE\Mozilla\Firefox\{EB52F1AB-3C2B-424F-9794-833C687025CF}
HKEY_LOCAL_MACHINE\SOFTWARE\Mozilla\Firefox\{EB52F1AB-3C2B-424F-9794-833C687025CF}
HKEY_CLASSES_ROOT\CLSID\{98c066ab-d735-4339-9e52-a34875141b56}
HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\MSCFG_SVR
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tasks\{3F514BCE-9F78-4225-8ECF-C0F31E6C2E7E}
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tree\593286f744878eeb98ec740963a24c35
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tasks\{CF1A556F-014E-49BE-9167-E1CE602AA47C}
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tasks\{8AB3FD13-D926-4650-8C19-55C4AFA64B69}
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tree\Tamisthivicult Mapper
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tasks\{D1B0D92D-3C4A-47BD-A748-77A1FC0A50A1}
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tasks\{A11BFB3D-5DD6-4B15-9AFD-CB9B4A88EEA9}
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tasks\{9F1723D9-7918-4BEC-B195-BA032D1C1BEE}
HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\UvConverter
HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\Shuviing
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tree\Buqaghghnet Builder
HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\Atizotionstesa
HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\Kafophsupeing
HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\Pettckirertain
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tasks\{8B77ACED-85E1-45FE-BD1B-0A33E904BDC8}
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tree\Shertesh Monitor
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tasks\{0631250F-69EE-4FED-A92F-0E5513F19A31}
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tasks\{2D952B5C-6C98-4B6D-AB2A-0C4CBA47F791}
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tasks\{3A9E2DE9-BC78-4EFA-BE5E-30B1ADC9F215}
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tasks\{0F578387-F063-49E7-B18A-7D40CC68266A}
HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\Lusspgerkaward
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tasks\{8FD341C4-B7F6-40C4-9E4C-A60DCBC16818}
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tasks\{8FCF01CB-05DE-4FCA-8901-86737E2B2482}
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tasks\{7603E1B9-0F17-444E-BCA2-6CAE72E65B86}
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tree\Domory Host
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tree\ChelfNotify Task
HKEY_CLASSES_ROOT\CLSID\{6710c780-e20e-4c49-a87d-321850ed3d7c}
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tree\vreXjvXCheckTask
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tree\vreXjvXBrowserUpdateUA
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tree\vreXjvXBrowserUpdateCore
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tasks\{A354CF09-7353-4405-8E2F-AA505759D24E}
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\{54A54A73-D8CF-4EBF-BEA7-AD6507ACE4C5}
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tasks\{0E481B2F-3E69-4C1D-B092-2713BBCA8758}
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tasks\{E6EF95DE-59C1-409F-9BBF-A9117361E202}
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tasks\{5CBE0C47-5BD1-485D-B2CF-3C448E9887F2}
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tasks\{B99B88E1-B377-446D-B28C-D11F06387B68}
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tasks\{584A613D-71F9-40B3-8747-F8E1EE9E5A37}
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tasks\{F007AFDC-B532-4FC3-A890-FA08F76C5B76}
HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\Plveiedolerpy
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tasks\{AEC2010F-4384-471F-801E-FB3E22CD36A6}
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tasks\{2B2AF42B-F53C-488A-BB96-48ADE66D4374}
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tree\Nopury Engine
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tasks\{3D00EC70-723F-48E1-9D90-59E6B3ACB9EF}
HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\Undp66
HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\Undp55
HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\Coofele
HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\Grimaght
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tasks\{008573D3-2085-436C-87D8-C978C34CA2F0}
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tree\Cergerch Core
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tasks\{AA0F1AF2-F118-4625-A599-29F67BD73EF6}
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tree\Steerwardpriboly Builder
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tasks\{8A3FA285-89E2-411C-8824-957F1CEEACEE}
HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\Stenugh
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tasks\{8F171C65-D31F-4453-A003-FC76547B25FE}
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tasks\{755F2160-6398-41DC-8FC1-FBB579781DA2}
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tasks\{A2CC4C14-F44F-47C0-9D5C-37B38DC1FABF}
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tasks\{D825192B-8A2B-4E14-83CC-679E46137DDB}
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tree\Atoceriedhaserent Mapper
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tasks\{9566C97F-C8FF-4269-ADEF-D2B665068CA9}
HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\Coerlasy
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tasks\{8772F4F5-5195-4F7C-B7B7-34FC761DFC00}
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tasks\{A7407054-3D22-4BD7-9DDD-5D41A73B03DD}
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tree\Plocersp Log
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tasks\{87375360-4D13-469F-AE39-1348204C4294}
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tree\Atevotionpherjety Provider
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tree\Grotersp Mapper
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tree\Thoveent Engine
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tree\Thuckwiwse
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tree\Nimasy Engine
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tasks\{90521EB0-4C0D-437A-9071-72AF80A31601}
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tasks\{75028F16-C2EF-45C6-BC0A-AF807EF9ADA5}
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tasks\{C922D734-C793-4D2A-ADD8-6D5AB1DD0507}
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tasks\{2B6606EC-DEA3-44A7-88E9-2F2F49A8A101}
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tasks\{72709CE6-C0DC-42FF-BCFE-6F868B26A07A}
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tasks\{7C2EA49A-FA8A-4D50-8D95-C1534D41FB20}
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tasks\{9B5CC5F4-3F0E-4F25-B49A-CFC5EC8FBC80}
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tasks\{47D777CB-6042-45D0-A584-BD5FC87096B9}
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tasks\{F6DAB095-12C7-4973-B0C7-8107D7EA9CB7}
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tasks\{67491C44-5153-46DE-8D4B-1C38AA50126E}
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tasks\{2ED9382D-2207-4BAB-B426-0980C2881C58}
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tasks\{93E01901-DAD9-4FD3-92C0-F7ED51C5E038}
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tasks\{0C1A28DE-5573-4F21-82E5-AA2F237BFA6D}
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tasks\{691AC34F-74B6-4DD9-843A-2FFDE7527A4E}
HKEY_CLASSES_ROOT\CLSID\{7ad1c0f5-07a2-40e5-8608-c6eaa0ff362f}
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tasks\{7618D651-74F7-439F-ABBE-4196C6FBF37B}
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tasks\{C727B4DA-AF43-43B6-A791-7E397D392DD6}
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tasks\{C79C82E4-471D-4A9E-BADC-8948D8325679}
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tree\Regientthoferied Controls
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tasks\{57E37A3D-384E-4967-AA34-4E9CD353FA71}
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tasks\{9480E817-B125-40A1-9377-016FF3288FE6}
HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\Riqole
HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\AritispLauncher
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tasks\{195C674E-F3B5-4A52-B141-D127D09D694A}
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tree\Nabsthenoly Core
HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\Dalidom
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tasks\{041D5B35-AB38-43D1-90C2-98866F4654BE}
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tasks\{F9A5585A-3F3F-4B81-928E-45BC0FD58DAC}
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tasks\{AA6F6613-E3CC-4FCC-A74B-92AF8A967EA5}
HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\Anubophatuvot
HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\Juhisprezory
HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\Protecultsakt
HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\Dwadom
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tasks\{54099178-C077-42AB-BD72-306107FB9604}
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tree\Shiwot Cache
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tasks\{BF8E45D0-2EC4-4AAC-A149-3986733D12F4}
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tasks\{89170A80-E740-4011-B73D-7BB01E5DB664}
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tree\Stoboght System
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tasks\{396FCD5A-772B-4144-9108-514B79F3CB6E}
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tasks\{3D5523C0-5A3D-46A1-A0D2-0A45E4EBFFD1}
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tree\Mohgezovuse Renew
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tasks\{52B4ABF8-3FB2-4140-AB4A-226ACB2C8CAE}
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tree\Phualeweary Community
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tasks\{2414B196-CFE9-46FC-9CB8-23EC9A67C8B9}
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tasks\{04F374EC-EB3F-4593-B81C-2B9EA188D0BD}
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tasks\{8593FB86-8BE2-4DD3-AB92-48E4576EE75C}
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tasks\{7B9F7AF9-C1B5-454E-AFCC-75FAA94E022D}
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tasks\{EC1289C8-3E36-4BDB-A3A8-096C0E2C8119}
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tasks\{77F213D1-9B83-4B35-B956-AC61916FEDF1}
HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\Coewotatubeied
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tasks\{FF9807E7-424D-4BEB-A744-35BEA2721348}
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tasks\{04035516-F459-4F06-BA03-75F926FC9C2D}
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tasks\{827AC0D0-5747-4866-A244-17EFDD6EB48B}
HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\CkasotyshanuchControls
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tasks\{4A263EF5-631C-47ED-BB28-C6ED49C23B01}
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tree\Wawpychqudom Builder
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tasks\{A58A951D-D21A-40E7-80F7-32728CC7F4E1}
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tasks\{8D442827-56F6-4DEA-89F9-8898E0D71021}
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tree\Khagetheputain Renew
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tasks\{81D98872-9B8A-4FBA-98F2-DE75DD4E68E2}
HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\ThjmonitorTerkaystazerch.exe
HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\Liqoingsuqush
HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\Lufgerodupy
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tree\Docertain Core
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tree\Caboward Reports
HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\Ghanathergersich
HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\Lizertfilagh
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tasks\{7C7655A5-AA8F-4772-88DD-70A38501E3D0}
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tasks\{ED8F63B0-29AA-44D1-B4A8-8DA2840D6493}
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tasks\{E32CEA27-AFA5-4B16-97E1-45CCF5C1C5E0}
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tasks\{213AE9E1-153A-4A8E-8730-8725440108B7}
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tasks\{8C53D88C-BC61-45F1-95D3-9C6E4F59F7FD}
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tasks\{70E37128-0A17-4A71-B720-D49E18C2FD25}
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tasks\{E4AC06A6-9E5A-4D17-A2BA-87B0FA1DC6B4}
HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\Reigsy
HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\Ckemghrajock
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tasks\{0C4552AE-956B-4564-B5B9-22789679ECF8}
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tree\Gagerty Schedule
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tasks\{887E42B3-3395-4A18-8EBF-EDA83D6881EB}
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tasks\{9D084D99-5E94-4F77-BD18-4B4AB8C585B9}
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tasks\{FDE073DA-E4D5-43E2-AE4E-5D62ADC06C3B}
HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\Hsatain
HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\StejusendfQrp.exe
HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\Bisawardtusocult
HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\Mogileghekpy
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tasks\{A7FE14FC-BA85-44E7-BFE0-F5CBB4041CDB}
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tree\Sherset Community
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tasks\{2D6D612D-FE40-43BF-8C61-740C7AF3EE0E}
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tasks\{9191F1C3-B927-425E-A8A3-90C20D19D541}
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tree\Rersipy Client
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tasks\{881E3AC7-A3E7-4107-BE77-61120DD0B5AA}
HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\Graercultmhege
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tasks\{B28F79EE-9D33-4B4B-935D-9F982CA8E2AF}
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tree\Atikationbogot System
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tasks\{3C24C907-ACA7-4B0D-AA34-C95D55E239AE}
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tasks\{0F04E416-6724-47D5-8AAA-1BA03BE97453}
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tree\Motorola Device Manager Engine
HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SherdewardcoosentConfiguration
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tasks\{DD9C6EFD-AB62-4C32-A5CF-6627DEA6FC3D}
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tasks\{169104D8-1534-4CCC-8189-8A904A13B1DA}
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tree\Semughdabuck Builder
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tasks\{5EFC58DC-2F32-436A-AD29-7BE828F3A0B8}
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tasks\{B7C77D3C-5650-47FE-B2A7-79C6684B4911}
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tree\Gherotyreiferdom Engine
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tasks\{C120982F-910E-48BF-A55A-826DEA6AA03A}
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tasks\{91E79FB4-70D6-44D2-A77B-0B874A75BBE4}
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tasks\{5A98C6A1-EBE9-4612-9893-9CDAB7380C5E}
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tasks\{57CA6420-60DD-4142-AE1B-A9A56C0EEECA}
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tasks\{9C6D8A91-0C97-4408-ABE0-D05AA65750BB}
HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\TCPnP6
HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\TCPnP4
HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\KsationSchedule
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tree\Sheusyjerly Core
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tasks\{48CED598-7BEE-4192-A412-2A884360591C}
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tasks\{9DEB7C4B-0BD8-45ED-ADC2-29184EBE7207}
HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\tekuingModulersd.exe
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tasks\{211B09AC-331B-473E-9897-C003312F99DB}
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tasks\{BD291E13-654C-488C-A894-A5105FB6B12C}
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tasks\{22E009E8-1BFA-4AE4-AA66-139A1073D9A6}
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tasks\{9DD21F6B-8881-4EE6-934C-0F3077987ED7}
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tasks\{F6CC3C9B-47DA-4B53-8B54-5DC6A2F44761}
HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\Coigertionsherwesh
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tasks\{8DAD69B1-3CE1-4B6D-AEC7-144ECD94B984}
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tasks\{136D894D-AB71-49BD-8A22-0092B7613D78}
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tasks\{2D84DA18-F960-43D0-9B0B-0CEBFF7DB035}
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tree\httpmainhmruproinexsm
HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\Sizaphftcult
HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\CHNGTSvc
HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\Grerzuied
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tasks\{DC4033A1-2584-4BCC-A5DC-ED1F92FECA0F}
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tasks\{4FE74B97-6E58-43C2-A0C1-116CF40C04D6}
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tasks\{0C5DE57E-8EC9-40ED-ADD3-024C8D3E939A}
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tasks\{F11923E5-9680-4E96-ACFD-C2FEBB55D858}
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tasks\{75E5CB2B-B498-481B-9D8C-AFBEE7A69F2A}
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tasks\{2C49CB1D-D9C4-4513-8124-65C300410B96}
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tree\SwiftSearch Auto Updater 1.10.0.25 Core
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tree\PhraseProfessor Auto Updater 1.10.0.24 Core
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tasks\{4CF8B72F-565B-4ABD-80A6-90F1408B103A}
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tree\Sterberph Controls
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tasks\{7D87E6CD-81C2-4070-9083-86F0E21DA10F}
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tasks\{E804C2E0-6D31-47E1-A0DA-A6D070A9D67C}
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tree\83e152111fd6b517f518a125eb81ca37
HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\Aterzetpegesh
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tasks\{86D01052-5422-4B7C-9C15-E2FF5B171DE9}
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tasks\{FF4B1962-3767-41EE-BBB1-734303B921B6}
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tree\Ghupigh Mapper
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tasks\{F92C6FFA-4E45-46CB-87DF-B22D9F9D5241}
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tasks\{D5B25D51-1804-4F8D-94D1-47F5F332C127}
HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\Atokuse
HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\Timcultgrrocult
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tasks\{7AAA656C-5EC5-40C6-A347-07B311C7087A}
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tasks\{1EA4B62A-B4CB-43AA-8283-51BE64CC20BC}
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tree\Qiaseferdusp Engine
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tasks\{468BB687-CFF0-474B-86E8-6E079E2AD3BD}
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tasks\{BB85C0FD-01A1-4EF2-BB55-E8F4AEF85BB3}
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tasks\{2C30AE99-0B38-4D2B-94F7-AE8336DD1C45}
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tree\Phezash Engine
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tasks\{B91C460C-521A-4DB6-9FBE-431548301261}
HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\AnofotionCollector
HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\UvConv
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tasks\{E2B2FA45-E5C7-4C56-9B1A-39FB692E64E6}
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tasks\{71354E6C-9E76-4EC1-85B6-BE3259799719}
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tree\Atterryanehuch Cloud
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tasks\{D5E6781C-98E8-45CC-A8F8-CAD0C4BEAF14}
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tree\Ghuzerck Provider
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tasks\{12AE0664-BCB0-4C89-8C9F-44B2D37DCE55}
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tasks\{A2409899-2E92-47F4-A4F2-38F6B7817EAE}
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tasks\{81358AC8-F52F-4006-9A6E-05F0C784735B}
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tree\Plsesh Community
HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\Majution
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tasks\{4C8F4D4B-FA21-4CB7-A806-5F094AA0406D}
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tasks\{5D2427F3-352E-47E0-B24B-8522F6244261}
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tasks\{058E0ED2-9C77-4EA3-9582-1E8B5D02BDB4}
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tree\Namudomvinerght Reports
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tasks\{53BC58FD-D701-4DEA-9857-12A49211BBE4}
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tasks\{B4486940-931F-40CD-85B6-15FD938B1D94}
HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\PholdomCenter
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tasks\{0FECFBCA-31EE-4932-A0D0-3B57E2478838}
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tasks\{D05453E1-C2A3-4282-823C-CD4B721947F1}
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tasks\{7F89EC5D-7E14-48CC-AEC2-424705CBC2DF}
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tasks\{3B831A40-DDA0-4CBC-A3BB-C9E6E6BB701F}
HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\FastCompress
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tasks\{50E41388-91AE-4633-9180-95482BB1255C}
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tree\Verizon Wireless Upgrade Assistant Update Engine
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tasks\{4A338BDC-D661-4054-918F-EB9AAA276296}
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tree\f9c38018558b45909ae7861f48cbcb4c
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tasks\{248A0CD5-662D-4DD4-92DC-8CFC575EB561}
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tasks\{9FCF7DE0-7597-4333-A850-481046EBBBE3}
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tree\b2929b72a96a471893ecaa9c51368bae
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tree\Resage Builder
HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\UDPnP66
HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\UDPnP55
HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\UDPnP44
HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\UDPnP33
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tasks\{33EF6A62-1837-4C00-B5D3-68C551651273}
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tasks\{AA3B1E50-E9B4-49A3-B459-EED915CDC736}
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tasks\{89151A03-57C5-48CC-B659-258BB9997F73}
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tasks\{375CAA46-552B-4EA2-8227-E4D7FA5F906F}
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tasks\{4AC89FDE-D889-43DD-951F-1340659E5C8B}
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tasks\{308457E5-A241-4106-BCEB-C40EB0FB090B}
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tasks\{5819D549-6E47-4288-9DB1-4D36DB10CFB7}
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tree\Kugosh Log
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tasks\{42CA0A96-B5EA-41D0-907F-30C1127F4616}
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tree\Readaleanernert Client
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tasks\{254B198C-3A1B-4D3C-9BCB-A467DC8113F9}
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tree\Thanaent Log
HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\Cercither
HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\Arakosatuhph
HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\Coedele
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tree\Chegasp Community
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tasks\{59730969-EF75-4F32-B745-78E4646AA09F}
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tree\27a733fd5d10000e60c454f54e143862
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tasks\{CB6A4A6E-066C-492F-813D-B1D634420107}
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tasks\{08610AAE-BB26-4DF4-B40A-52D10046F726}
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tasks\{0C44A043-0C9D-4DA0-8A34-01DD16C325DB}
HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\Uktain
HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\ZipProtect
HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\Terykajuph
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tree\WordSurfer Auto Updater 1.10.0.19 Core
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tasks\{0C40B6AF-6BF9-4B53-8EDF-3207B3D5FF3B}
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tree\Famuther Community
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tasks\{0B1A4174-85B0-4FA8-9AB3-2B9748E4A5A6}
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tasks\{13AB0F01-65EC-430F-8ED8-F9558E9891B6}
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tasks\{FF95B32E-57BE-4F45-A5BC-1031A5C86DA7}
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tree\Ckerbulemahitain Provider
HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\Chuzalywesige
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tasks\{E977746C-45B7-4F36-AD8F-005110CA5BBD}
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tasks\{1EB29FC3-C217-4402-8B5B-A11FFB81453C}
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tree\Ghmersevversp Monitor
HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\Mosusypososy
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tree\84dfcb870e53030f6ecbb58e72455ebd
HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\Tipuly
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tasks\{60510CF9-2B62-4DFB-84F4-4E43EDA4CF28}
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tree\Quvity Renew
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tasks\{DDF68C7A-AAE3-48D5-89CD-05AC7C73CD12}
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tasks\{89F2D93C-3DCE-436C-9908-1E63F2D5B6FD}
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tasks\{436DD9C9-96BD-4EB9-926E-BB822C24A105}
HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\ctsAgentsht.exe
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tasks\{99886CD6-DB00-4374-B48C-DBDA00AEA11B}
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tree\Dahashhecech Reports
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tasks\{F383C4CB-D657-40B2-AB2E-1A22F9260B5D}
HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\Ploige
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tasks\{8A42075A-52C8-4181-9D07-9FBEBDF836BF}
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tree\Mlerckanogpy Builder
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tasks\{CCB0456F-5506-4DDC-8237-72CB31786B9C}
HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\Qerfishmapacult
HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\Aterserly
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tasks\{02109A4D-4715-4BA7-A50A-2541BFC7209F}
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tasks\{0DF9A6CE-0285-400F-843A-DDA70215429E}
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tasks\{46519BAF-5C79-41D0-8564-4811C20FA1A0}
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tasks\{C2C5605B-5DFF-49FE-807E-7967CD86A7AE}
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tree\Stunalesizipy System
HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\Praguspplirok
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tree\2e7ca50926ef48ff171432427d5bb458
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tasks\{FA5D78F3-BBEB-469F-AD65-3D1256C761F9}
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tasks\{165B0FED-D6B5-40DC-86C0-DC0E030BC8EF}
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tasks\{ECE0DC93-1024-4285-906E-AA59AEC145E9}
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tasks\{95336B03-9C40-457D-B755-D355B8D02A01}
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tree\Lcerryzecoing Mapper
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tasks\{92096603-4151-4765-AEA6-72C10CB702B5}
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tree\Pludusp Renew
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tasks\{3D72A9A6-9F01-4393-80B8-5788A9CCCD52}
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tree\Fergergh Controls
HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\Reabergeghererent
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tasks\{21DC928C-6704-4A70-B97C-59075E5FC8DA}
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tree\Jotughsteqoge Controls
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tasks\{3C160EAF-B3A0-4FCC-A554-058F56FC0807}
HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\Pderry
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tree\Rakeryomary Monitor
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tasks\{9DB0B4A6-76ED-42C2-AEEE-C4F05000BE40}
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tree\Thujoscoats Monitor
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tasks\{BFD0C78F-11C1-4954-AECE-D85B90D50D3C}
HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\Anqbuilderrts.exe
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tasks\{9E782F2C-C7B0-4506-A17C-B22ECF15C109}
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tasks\{4DCFCC87-7397-456E-9F31-69DF0425D0A2}
HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\Reopithejatain
HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\TCPnP5
HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\TCPnP3
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tree\Anaqeght Builder
HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\Clsikthelersy
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tree\Horishghelodom Agent
HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\Stecos
HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\Necagh
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tasks\{F9C7AB50-BD4F-4292-A644-25F66B9D218D}
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tasks\{98981E95-D9B7-4BD2-9BC6-51E2933AB6FD}
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tasks\{3A3B1B5C-7E46-44B2-9ED8-54609C8B99F2}
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tasks\{013EB2C8-1685-4E07-8659-D7829CE4812F}
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tasks\{03BC464D-A0B4-47F5-98F4-2C8F2151CD40}
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tasks\{05A4FE3E-799E-464F-A0D2-5F920CE1E259}
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tree\Prerhasynukedom Renew
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tasks\{96511422-1238-4520-BE2D-65EEFF702103}
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tree\Vtation Controls
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tasks\{149CEE01-6908-4A85-B1D6-E6A20EFB3034}
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tasks\{C3CABB6B-65E4-4897-81C2-85A7F90721C8}
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tree\Wakoshqiqa Helper
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tasks\{E6D004D9-4B4C-4367-B4CF-892CC30A18BF}
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tree\Prhodommufeward Provider
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tasks\{B3394DAF-C1A8-49BC-844B-25E022AB0FF4}
HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\CleberchponushConfiguration
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tree\Cleberchponush Configuration
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tasks\{B84E247E-9038-489D-AE38-AA032017AD37}
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tasks\{8C71E3F4-9F41-4698-9393-DFEAE8DDD7BB}
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tasks\{D975DC12-A2BB-4659-BD03-62B1447CF4EA}
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tasks\{9A3621D5-27CD-406F-AB9A-E5199D086D49}
HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\Uwiseferesy
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tasks\{C098C173-BAAA-4736-AF68-28D1590FEF21}
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tree\Bivoiedberraght Client
HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\Ghujoght
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tasks\{1188FBFB-960E-4B22-8A8F-88E9B2A8A5D2}
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tree\Food Builder
HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\Memukplersk
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tasks\{577818A4-0521-4DF7-88CC-4965CB1BE56B}
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tree\Anerferck Engine
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tasks\{3737D355-BC60-4675-92BA-0A9281CAAD77}
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tree\811b75f1da9ca1826db1da0652e8e05d
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tasks\{E9F288F5-09CB-463E-8E75-9A565B4B8FD8}
HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\TDataSvr
HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\Rercale
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tasks\{6F7E1498-FC23-4546-88EF-B357C7E72A5D}
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tree\Atelegrerberght Controls
HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\ghmMntIfuspvboge.exe
HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\Herkakpruketain
HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\Pimashanpuk
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tasks\{2CEE2DE4-A227-49DE-9B85-F86C9A8495DD}
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tasks\{FF8DB66C-9158-4323-81DB-69C965849C8A}
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tasks\{FEDFE3BA-7A94-4083-8D96-9AAB03C0BC05}
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tasks\{FE99D0E4-CCAE-4A0F-A126-0A6FC6DAE98F}
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tasks\{F9339694-315A-49A7-A587-2337F2A83B5E}
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tasks\{F7E9AB6F-B222-425C-86E8-E8623F97C571}
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tasks\{F7E82D3C-AB2B-4A2D-88A7-81B6164CCF6C}
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tasks\{F78F0958-1981-4560-BB12-9286D1D0558F}
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tasks\{F789C22C-322B-4FDB-888E-F70D72349595}
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tasks\{F415367E-BE5C-4DC5-A0E1-5A12FC2A5FEF}
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tasks\{F2C06B2A-8659-461C-9CC3-621BAD44B047}
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tasks\{F0971611-E19A-4CF1-A267-FC2036DE6BCA}
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tasks\{EFC278CD-CC71-439E-8140-865FA8DA7FF6}
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tasks\{EF99DABA-52DD-400F-B37C-10AC14752589}
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tasks\{EF1B8C3C-700F-4E42-B610-3BE98372158E}
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tasks\{EED87429-9BAC-46AC-BAA7-E9DD8194FD75}
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tasks\{EE644D1E-88E0-4C82-A1E4-6A090A947C83}
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tasks\{EC876D60-65C2-447F-BD1D-804E52F5E702}
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tasks\{EC637AA7-CDEE-47BF-9258-59DB9B770E57}
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tasks\{EBD7ED45-403D-4C3F-B8AF-074ED1613523}
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tasks\{EAB37C24-77B3-40DB-B9F8-B65D77F127B3}
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tasks\{EA4E768E-2459-447A-89D2-872B74E98485}
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tasks\{E7BF7CEB-2498-46F2-A896-C1690DC855EC}
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tasks\{E7967673-4AD1-4F36-9730-C4FE4DC9DF2D}
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tasks\{E6891AD2-DA62-4871-99B5-31E9766D9854}
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tasks\{E6563BDE-1195-440A-99E1-215D42104D3E}
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tasks\{E2EFFA74-B134-4436-851C-CC1FFD1751A4}
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tasks\{E28D6B84-E684-41BB-BE70-AA4FEA2EE976}
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tasks\{DFF8B02C-0FE4-450D-8637-F013375E1748}
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tasks\{DF9F0611-6F21-4A3B-A93F-ED3F5A23A65D}
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tasks\{DEF1EDBD-BE4D-495A-83E3-D894428D80BF}
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tasks\{DD73453D-A5BA-4AF0-B810-02F8BDAE9C6E}
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tasks\{DD148C62-AAFD-4F4E-A5A8-51E613C4FBB1}
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tasks\{DC6FA234-5364-4F95-A45F-1A5819E3C621}
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tasks\{DBC0F7FD-20DA-452C-8B7F-DC1E67D9C274}
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tasks\{D6FBA3E5-46A2-43A7-AE23-EE2785C438E9}
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tasks\{D5838C75-7729-4626-89D1-E97CB0C97015}
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tasks\{D5184147-AA15-4F26-B68E-9136545EAB0F}
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tasks\{D0E64683-86ED-4846-ACE9-65E1D68CFDA4}
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tasks\{D0BE9469-3EE5-444F-AA7A-CF13D187CE4A}
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tasks\{CF63910E-7EE7-4316-A793-5634D154ECAB}
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tasks\{CECA38E9-1547-46FA-AF2C-0B4BB2B2126A}
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tasks\{CD6C90DC-19EA-42AD-B83B-B506036226FB}
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tasks\{CBC253E6-3EBF-4A29-B357-8891CBAE6A97}
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tasks\{CB438CF0-3236-46BC-AE5D-730AE0C3ABA6}
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tasks\{CA9915B9-CA17-45B4-9B43-9AB992C6925D}

Untuk cara pertama mengatasinya, adalah dengan Adware Cleaner.
1. Anda bisa download langsung ke situsnya melalui link https://toolslib.net/downloads/viewdownload/1-adwcleaner/.
2. Software ini berukuran sangat kecil kisaran 3 MB saja. Bersifat semi portable. Kamu bisa langsung menjalankannya dengan meng-klik kanan dan run as administrator.
3. Kemudian scan dan tunggu program mencari Folder, File dan Registry yang diduga Malware dan Adware.
4. Setelah selesai klik Clean dan tunggu sampai selesai.



Prosesnya akan memakan waktu yang agak lama, tergantung berapa lama adware atau malware sudah bersarang dikomputer. Jika sudah terlalu lama, maka bisa dipastikan malware sudah beranak pinak dan akan memakan waktu yang sangat lama. Namun jika setelah beberapa jam proses penghapusan Adware tidak berjalan, maka cara ini tidak lagi berguna untuk anda. Namun kita masih bisa mencobanya dengan cara kedua yaitu dengan menjalankan program di mode Safe Mode.


Cara kedua:
1. Restart komputer/laptop anda.
2. Sebelum logo booting windows berjalan, tekan F8 beberapa kali.
3. Pilih Safe Mode dan Tekan Enter.
4. Ulangi langkah diatas.

Dalam kasus yang saya alami, parahnya lagi komputer sudah tidak bisa lagi masuk mode safe mode. Maka untuk mengatasinya saya coba langkah ke tiga.

1. Download dan install program Malwarebytes Anti Malware Premium.
2. Hubungkan komputer dengan internet.
3. Jalankan dan program akan secara otomatis scanning dan memperbaiki system registry yang diduga terkena Malware dan Adware.
4. Hapus semua file yang masuk ke kategory di Quarantine.
5. Restart komputer jika ada permintaan restart dari program.


Ingat dan perhatikan. Saat di scan dengan program Adware Cleaner,  Malware dan Adware yang terdeteksi lebih dari 100 Folder, File dan Registry. Jika yang terdeteksi oleh  Malwarebytes Anti Malware Premium kurang dari itu, berarti masih ada Malware yang tersisa. Untuk itu kita harus coba untuk kembali dan mengulangi cara yang ke dua yaitu menjalankan Adware Cleaner di Mode Safe Mode. 

Setelah program Adware claner berhasil dijalankan di safe mode, admin coba restart komputer saya dan Boooommmmm.... Komputer saya malah jadi blue screen. hanya bisa masuk Safe Mode. Wahhhh.... Apalagi neh....

Karena diperingatan menyuruh saya untuk uninstall program terakhir yang admin install, maka saya pun uninstall program Malwarebytes Anti Malware Premium. Prosesnya pun harus dengan cara paksaan yaitu dengan menggunakan Revo Uninstaller karena sudah berjam-jam aplikasi uninstall tidak berjalan dan unresponding. Karena bosan menunggu akhirnya saya tinggal tidur. Paginya saat saya cek proses uninstall sudah selesai. dan saya coba tes performa komputer sudah kembali lancar jaya.

Share to:

Posting Komentar

Mohon maaf bila admin tidak bisa langsung membalas atau pun langsung berkunjung kembali ke blog sahabat blogger yang telah berkunjung ke sini. Kalian bisa meninggalkan komentar yang layak dengan menggunakan Nama dan URL blog sobat. Saya mengaktifkan filter dan comment moderator full sehingga setiap komentar pasti saya baca dan jika memang itu saya rasa harus dijawab, pasti saya akan memenuhinya.

Hanya komentar yang memang saya anggap pantas yang akan diterbitkan. Sekalipun itu kritikan atau ejekan, jika memang itu layak untuk di bahas.

Langganan: Posting Komentar (Atom)
 
Top