Code : PbO50GqtjC29wHM2eZn/KQ5YRI8142BPHPGLS+r8PJvMGAB6n7oRyw==
[00-PROCESS]**763t10 -/- C:\RECYCLER\S-1-5-21-0243556031-888888379-781863308-83109\763t10.exe
[00-PROCESS]**763ta1 -/- C:\RECYCLER\S-1-5-21-0243556031-888888379-781863308-135672\763ta1.exe
[00-PROCESS]**763ta2 -/- C:\RECYCLER\S-1-5-21-0243556031-888888379-781863308-235672\763ta2.exe
[00-PROCESS]**763ta3 -/- C:\RECYCLER\S-1-5-21-0243556031-888888379-781863308-335672\763ta3.exe
[00-PROCESS]**763ta4 -/- C:\RECYCLER\S-1-5-21-0243556031-888888379-781863308-435672\763ta4.exe
[00-PROCESS]**763ta5 -/- C:\RECYCLER\S-1-5-21-0243556031-888888379-781863308-535672\763ta5.exe
[00-PROCESS]**763ta6 -/- C:\RECYCLER\S-1-5-21-0243556031-888888379-781863308-635672\763ta6.exe
[00-PROCESS]**763ta7 -/- C:\RECYCLER\S-1-5-21-0243556031-888888379-781863308-635672\763ta7.exe
[00-PROCESS]**763ta9 -/- C:\RECYCLER\S-1-5-21-0243556031-888888379-781863308-835679\763ta9.exe
[00-PROCESS]**763tac -/- C:\RECYCLER\S-1-5-21-0243556031-888888379-781863308-735672\763tac.exe
[00-PROCESS]**alg -/- C:\Windows\System32\alg.exe
[00-PROCESS]**b71821 -/- C:\RECYCLER\S-1-5-21-0243556031-888888379-781863308-711831\b71821.exe
[00-PROCESS]**b764511 -/- C:\RECYCLER\S-1-5-21-0243556031-888888379-781863308-715231\b764511.exe
[00-PROCESS]**b764512 -/- C:\RECYCLER\S-1-5-21-0243556031-888888379-781863308-765231\b764512.exe
[00-PROCESS]**b764521 -/- C:\RECYCLER\S-1-5-21-0243556031-888888379-781863308-712231\b764521.exe
[00-PROCESS]**b981 -/- C:\RECYCLER\S-1-5-21-0243556031-888888379-781863308-98831\b981.exe
[00-PROCESS]**bc24512 -/- C:\RECYCLER\S-1-5-21-0243556031-888888379-781863308-835231\bc24512.exe
[00-PROCESS]**bc64512 -/- C:\RECYCLER\S-1-5-21-0243556031-888888379-781863308-865231\bc64512.exe
[00-PROCESS]**bce4512 -/- C:\RECYCLER\S-1-5-21-0243556031-888888379-781863308-845231\bce4512.exe
[00-PROCESS]**bce4r12 -/- C:\RECYCLER\S-1-5-21-0243556031-888888379-781863308-843231\bce4r12.exe
[00-PROCESS]**bcerr12 -/- C:\RECYCLER\S-1-5-21-0243556031-888888379-781863308-823261\bcerr12.exe
[00-PROCESS]**BitGuard -/- C:\ProgramData\BitGuard\2.6.1673.238\{c16c1ccb-7046-4e5c-a2f3-533ad2fec8e8}\BitGuard.exe
[00-PROCESS]**btef1 -/- C:\RECYCLER\S-1-5-21-0243556031-888888379-781863308-33831\btef1.exe
[00-PROCESS]**ccc217 -/- C:\RECYCLER\S-1-5-21-0243556031-888888379-781863308-849119\ccc217.exe
[00-PROCESS]**Cykkkm -/- C:\Users\Administrator\AppData\Roaming\Microsoft\Cykkkm.exe
[00-PROCESS]**dllhost -/- C:\Windows\system32\dllhost.exe
[00-PROCESS]**dqklonee -/- C:\RECYCLER\S-1-5-21-0243556031-888888379-781863308-92171\dqklonee.exe
[00-PROCESS]**Dwm -/- C:\Windows\system32\Dwm.exe
[00-PROCESS]**dwqw217 -/- C:\RECYCLER\S-1-5-21-0243556031-888888379-781863308-839119\dwqw217.exe
[00-PROCESS]**Explorer -/- C:\Windows\Explorer.EXE
[00-PROCESS]**f008 -/- c:\Users\Administrator\appdata\roaming\f008.exe
[00-PROCESS]**fjpar10 -/- C:\RECYCLER\S-1-5-21-0243556031-888888379-781863308-85609\fjpar10.exe
[00-PROCESS]**fjpar11 -/- C:\RECYCLER\S-1-5-21-0243556031-888888379-781863308-89609\fjpar11.exe
[00-PROCESS]**fjpark1 -/- C:\RECYCLER\S-1-5-21-0243556031-888888379-781863308-82502\fjpark1.exe
[00-PROCESS]**fjpark2 -/- C:\RECYCLER\S-1-5-21-0243556031-888888379-781863308-82503\fjpark2.exe
[00-PROCESS]**fjpark3 -/- C:\RECYCLER\S-1-5-21-0243556031-888888379-781863308-82504\fjpark3.exe
[00-PROCESS]**fjpark4 -/- C:\RECYCLER\S-1-5-21-0243556031-888888379-781863308-82505\fjpark4.exe
[00-PROCESS]**fjpark5 -/- C:\RECYCLER\S-1-5-21-0243556031-888888379-781863308-82506\fjpark5.exe
[00-PROCESS]**fjpark6 -/- C:\RECYCLER\S-1-5-21-0243556031-888888379-781863308-82507\fjpark6.exe
[00-PROCESS]**fjpark7 -/- C:\RECYCLER\S-1-5-21-0243556031-888888379-781863308-82508\fjpark7.exe
[00-PROCESS]**fjpark8 -/- C:\RECYCLER\S-1-5-21-0243556031-888888379-781863308-82509\fjpark8.exe
[00-PROCESS]**fjpark8 -/- C:\RECYCLER\S-1-5-21-0243556031-888888379-781863308-85509\fjpark8.exe
[00-PROCESS]**fjpdqz -/- C:\RECYCLER\S-1-5-21-0243556031-888888379-781863308-11609\fjpdqz.exe
[00-PROCESS]**FlashPlayerUpdateService -/- C:\Windows\system32\Macromed\Flash\FlashPlayerUpdateService.exe
[00-PROCESS]**fsssvc -/- C:\Program Files\Windows Live\Family Safety\fsssvc.exe
[00-PROCESS]**fxssvc -/- C:\Windows\system32\fxssvc.exe
[00-PROCESS]**Fzkkkp -/- C:\Users\Administrator\AppData\Roaming\Microsoft\Fzkkkp.exe
[00-PROCESS]**GoogleCrashHandler -/- C:\Users\Administrator\AppData\Local\Google\Update\1.3.21.153\GoogleCrashHandler.exe
[00-PROCESS]**GoogleUpdate -/- C:\Program Files\Google\Update\GoogleUpdate.exe
[00-PROCESS]**GoogleUpdate -/- C:\Users\Administrator\AppData\Local\Google\Update\GoogleUpdate.exe
[00-PROCESS]**h1o88ba -/- C:\RECYCLER\S-1-5-21-0243556031-888888379-781863308-198175\h1o88ba.exe
[00-PROCESS]**h1oba -/- C:\RECYCLER\S-1-5-21-0243556031-888888379-781863308-111715\h1oba.exe
[00-PROCESS]**h881lla1 -/- C:\RECYCLER\S-1-5-21-0243556031-888888379-781863308-145751\h881lla1.exe
[00-PROCESS]**hdjojoba -/- C:\RECYCLER\S-1-5-21-0243556031-888888379-781863308-756715\hdjojoba.exe
[00-PROCESS]**hkcmd -/- C:\Windows\system32\hkcmd.exe
[00-PROCESS]**hyalla1 -/- C:\RECYCLER\S-1-5-21-0243556031-888888379-781863308-1981751\hyalla1.exe
[00-PROCESS]**IgfxExt -/- C:\Windows\system32\IgfxExt.exe
[00-PROCESS]**igfxsrvc -/- C:\Windows\system32\igfxsrvc.exe
[00-PROCESS]**igfxtray -/- C:\Windows\system32\igfxtray.exe
[00-PROCESS]**inetb123 -/- c:\recycler\s-1-5-21-0243556031-888888379-781863308-121921\inetb123.exe
[00-PROCESS]**infocard -/- C:\Windows\Microsoft.NET\Framework\v3.0\Windows Communication Foundation\infocard.exe
[00-PROCESS]**locator -/- C:\Windows\system32\locator.exe
[00-PROCESS]**lsass -/- C:\Windows\system32\lsass.exe
[00-PROCESS]**mscorsvw -/- C:\Windows\Microsoft.NET\Framework\v2.0.50727\mscorsvw.exe
[00-PROCESS]**mscorsvw -/- C:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe
[00-PROCESS]**msdtc -/- C:\Windows\System32\msdtc.exe
[00-PROCESS]**msiexec -/- C:\Windows\system32\msiexec.exe
[00-PROCESS]**mspaint -/- C:\Windows\system32\mspaint.exe
[00-PROCESS]**notepad -/- C:\Windows\system32\notepad.exe
[00-PROCESS]**ODSERV -/- C:\Program Files\Common Files\Microsoft Shared\OFFICE12\ODSERV.EXE
[00-PROCESS]**OSE -/- C:\Program Files\Common Files\Microsoft Shared\Source Engine\OSE.EXE
[00-PROCESS]**peacewme -/- C:\RECYCLER\S-1-5-21-0243556031-888888379-781863308-73591\peacewme.exe
[00-PROCESS]**peacewme1 -/- C:\RECYCLER\S-1-5-21-0243556031-888888379-781863308-71591\peacewme1.exe
[00-PROCESS]**PresentationFontCache -/- C:\Windows\Microsoft.Net\Framework\v3.0\WPF\PresentationFontCache.exe
[00-PROCESS]**realsched -/- c:\program files\real\realplayer\Update\realsched.exe
[00-PROCESS]**recordingmanager -/- C:\Program Files\RealNetworks\RealDownloader\recordingmanager.exe
[00-PROCESS]**rndlresolversvc -/- C:\Program Files\RealNetworks\RealDownloader\rndlresolversvc.exe
[00-PROCESS]**s1sh10 -/- C:\RECYCLER\S-1-5-21-0243556031-888888379-781863308-87892\s1sh10.exe
[00-PROCESS]**s222h10 -/- C:\RECYCLER\S-1-5-21-0243556031-888888379-781863308-22892\s222h10.exe
[00-PROCESS]**SalaatTime -/- C:\Program Files\Salaat Time\SalaatTime.exe
[00-PROCESS]**SearchIndexer -/- C:\Windows\system32\SearchIndexer.exe
[00-PROCESS]**Skype -/- C:\Program Files\Skype\Phone\Skype.exe
[00-PROCESS]**SMSvcHost -/- C:\Windows\Microsoft.NET\Framework\v3.0\Windows Communication Foundation\SMSvcHost.exe
[00-PROCESS]**snmptrap -/- C:\Windows\System32\snmptrap.exe
[00-PROCESS]**spoolsv -/- C:\Windows\System32\spoolsv.exe
[00-PROCESS]**sppsvc -/- C:\Windows\system32\sppsvc.exe
[00-PROCESS]**svchost -/- C:\Windows\system32\svchost.exe
[00-PROCESS]**sxsh10 -/- C:\RECYCLER\S-1-5-21-0243556031-888888379-781863308-87891\sxsh10.exe
[00-PROCESS]**sxshin1 -/- C:\RECYCLER\S-1-5-21-0243556031-888888379-781863308-81140\sxshin1.exe
[00-PROCESS]**sxshin1 -/- C:\RECYCLER\S-1-5-21-0243556031-888888379-781863308-81240\sxshin1.exe
[00-PROCESS]**sxshin3 -/- C:\RECYCLER\S-1-5-21-0243556031-888888379-781863308-81340\sxshin3.exe
[00-PROCESS]**sxshin4 -/- C:\RECYCLER\S-1-5-21-0243556031-888888379-781863308-81350\sxshin4.exe
[00-PROCESS]**sxshin5 -/- C:\RECYCLER\S-1-5-21-0243556031-888888379-781863308-81650\sxshin5.exe
[00-PROCESS]**sxshin6 -/- C:\RECYCLER\S-1-5-21-0243556031-888888379-781863308-86650\sxshin6.exe
[00-PROCESS]**sxshin7 -/- C:\RECYCLER\S-1-5-21-0243556031-888888379-781863308-87650\sxshin7.exe
[00-PROCESS]**sxshin8 -/- C:\RECYCLER\S-1-5-21-0243556031-888888379-781863308-87850\sxshin8.exe
[00-PROCESS]**taskhost -/- C:\Windows\system32\taskhost.exe
[00-PROCESS]**tcdail -/- C:\RECYCLER\S-1-5-21-0243556031-888888379-781863308-119559\tcdail.exe
[00-PROCESS]**tcdail -/- C:\RECYCLER\S-1-5-21-0243556031-888888379-781863308-13559\tcdail.exe
[00-PROCESS]**tgmail -/- C:\RECYCLER\S-1-5-21-0243556031-888888379-781863308-1974419\tgmail.exe
[00-PROCESS]**tl246 -/- C:\RECYCLER\S-1-5-21-0243556031-888888379-781863308-842109\tl246.exe
[00-PROCESS]**tprepl -/- C:\RECYCLER\S-1-5-21-0243556031-888888379-781863308-129551\tprepl.exe
[00-PROCESS]**TrustedInstaller -/- C:\Windows\servicing\TrustedInstaller.exe
[00-PROCESS]**UI0Detect -/- C:\Windows\system32\UI0Detect.exe
[00-PROCESS]**Updater -/- C:\Program Files\Skype\Updater\Updater.exe
[00-PROCESS]**UpdaterService -/- C:\Program Files\SoftwareUpdater\UpdaterService.exe
[00-PROCESS]**vds -/- C:\Windows\System32\vds.exe
[00-PROCESS]**vssvc -/- C:\Windows\system32\vssvc.exe
[00-PROCESS]**wbengine -/- C:\Windows\system32\wbengine.exe
[00-PROCESS]**WerFault -/- C:\Windows\system32\WerFault.exe
[00-PROCESS]**WLIDSVC -/- C:\Program Files\Common Files\Microsoft Shared\Windows Live\WLIDSVC.EXE
[00-PROCESS]**WmiApSrv -/- C:\Windows\system32\wbem\WmiApSrv.exe
[00-PROCESS]**wmpnetwk -/- C:\Program Files\Windows Media Player\wmpnetwk.exe
[00-PROCESS]**wnhost -/- C:\RECYCLER\wnhost.exe
[01-HKCUREG]**763t10 -/- C:\RECYCLER\S-1-5-21-0243556031-888888379-781863308-83109\763t10.exe
[01-HKCUREG]**763ta1 -/- C:\RECYCLER\S-1-5-21-0243556031-888888379-781863308-135672\763ta1.exe
[01-HKCUREG]**763ta2 -/- C:\RECYCLER\S-1-5-21-0243556031-888888379-781863308-235672\763ta2.exe
[01-HKCUREG]**763ta3 -/- C:\RECYCLER\S-1-5-21-0243556031-888888379-781863308-335672\763ta3.exe
[01-HKCUREG]**763ta4 -/- C:\RECYCLER\S-1-5-21-0243556031-888888379-781863308-435672\763ta4.exe
[01-HKCUREG]**763ta5 -/- C:\RECYCLER\S-1-5-21-0243556031-888888379-781863308-535672\763ta5.exe
[01-HKCUREG]**763ta6 -/- C:\RECYCLER\S-1-5-21-0243556031-888888379-781863308-635672\763ta6.exe
[01-HKCUREG]**763ta7 -/- C:\RECYCLER\S-1-5-21-0243556031-888888379-781863308-635672\763ta7.exe
[01-HKCUREG]**763ta9 -/- C:\RECYCLER\S-1-5-21-0243556031-888888379-781863308-835679\763ta9.exe
[01-HKCUREG]**763tac -/- C:\RECYCLER\S-1-5-21-0243556031-888888379-781863308-735672\763tac.exe
[01-HKCUREG]**b18521 -/- C:\RECYCLER\S-1-5-21-0243556031-888888379-781863308-711831\b71821.exe
[01-HKCUREG]**b764511 -/- C:\RECYCLER\S-1-5-21-0243556031-888888379-781863308-715231\b764511.exe
[01-HKCUREG]**b764512 -/- C:\RECYCLER\S-1-5-21-0243556031-888888379-781863308-765231\b764512.exe
[01-HKCUREG]**b764521 -/- C:\RECYCLER\S-1-5-21-0243556031-888888379-781863308-712231\b764521.exe
[01-HKCUREG]**b98521 -/- C:\RECYCLER\S-1-5-21-0243556031-888888379-781863308-98831\b981.exe
[01-HKCUREG]**bc24512 -/- C:\RECYCLER\S-1-5-21-0243556031-888888379-781863308-835231\bc24512.exe
[01-HKCUREG]**bc64512 -/- C:\RECYCLER\S-1-5-21-0243556031-888888379-781863308-865231\bc64512.exe
[01-HKCUREG]**bce4512 -/- C:\RECYCLER\S-1-5-21-0243556031-888888379-781863308-845231\bce4512.exe
[01-HKCUREG]**bce4r12 -/- C:\RECYCLER\S-1-5-21-0243556031-888888379-781863308-843231\bce4r12.exe
[01-HKCUREG]**bcerr12 -/- C:\RECYCLER\S-1-5-21-0243556031-888888379-781863308-823261\bcerr12.exe
[01-HKCUREG]**btef21 -/- C:\RECYCLER\S-1-5-21-0243556031-888888379-781863308-33831\btef1.exe
[01-HKCUREG]**cccw217 -/- C:\RECYCLER\S-1-5-21-0243556031-888888379-781863308-849119\ccc217.exe
[01-HKCUREG]**Cykkkm -/- C:\Users\Administrator\AppData\Roaming\Microsoft\Cykkkm.exe
[01-HKCUREG]**dqklonee -/- C:\RECYCLER\S-1-5-21-0243556031-888888379-781863308-92171\dqklonee.exe
[01-HKCUREG]**dwqw217 -/- C:\RECYCLER\S-1-5-21-0243556031-888888379-781863308-839119\dwqw217.exe
[01-HKCUREG]**fjpar10 -/- C:\RECYCLER\S-1-5-21-0243556031-888888379-781863308-85609\fjpar10.exe
[01-HKCUREG]**fjpar11 -/- C:\RECYCLER\S-1-5-21-0243556031-888888379-781863308-89609\fjpar11.exe
[01-HKCUREG]**fjpark1 -/- C:\RECYCLER\S-1-5-21-0243556031-888888379-781863308-82502\fjpark1.exe
[01-HKCUREG]**fjpark2 -/- C:\RECYCLER\S-1-5-21-0243556031-888888379-781863308-82503\fjpark2.exe
[01-HKCUREG]**fjpark3 -/- C:\RECYCLER\S-1-5-21-0243556031-888888379-781863308-82504\fjpark3.exe
[01-HKCUREG]**fjpark4 -/- C:\RECYCLER\S-1-5-21-0243556031-888888379-781863308-82505\fjpark4.exe
[01-HKCUREG]**fjpark5 -/- C:\RECYCLER\S-1-5-21-0243556031-888888379-781863308-82506\fjpark5.exe
[01-HKCUREG]**fjpark6 -/- C:\RECYCLER\S-1-5-21-0243556031-888888379-781863308-82507\fjpark6.exe
[01-HKCUREG]**fjpark7 -/- C:\RECYCLER\S-1-5-21-0243556031-888888379-781863308-82508\fjpark7.exe
[01-HKCUREG]**fjpark8 -/- C:\RECYCLER\S-1-5-21-0243556031-888888379-781863308-82509\fjpark8.exe
[01-HKCUREG]**fjpark9 -/- C:\RECYCLER\S-1-5-21-0243556031-888888379-781863308-85509\fjpark8.exe
[01-HKCUREG]**fjpdqz -/- C:\RECYCLER\S-1-5-21-0243556031-888888379-781863308-11609\fjpdqz.exe
[01-HKCUREG]**Fykkkp -/- C:\Users\Administrator\AppData\Roaming\Microsoft\Fykkkp.exe
[01-HKCUREG]**Fzkkkp -/- C:\Users\Administrator\AppData\Roaming\Microsoft\Fzkkkp.exe
[01-HKCUREG]**Google Update -/- C:\Users\Administrator\AppData\Local\Google\Update\GoogleUpdate.exe /c
[01-HKCUREG]**h1dlj88oba -/- C:\RECYCLER\S-1-5-21-0243556031-888888379-781863308-198175\h1o88ba.exe
[01-HKCUREG]**h1dljoba -/- C:\RECYCLER\S-1-5-21-0243556031-888888379-781863308-111715\h1oba.exe
[01-HKCUREG]**h881la1 -/- C:\RECYCLER\S-1-5-21-0243556031-888888379-781863308-145751\h881lla1.exe
[01-HKCUREG]**hdjojoba -/- C:\RECYCLER\S-1-5-21-0243556031-888888379-781863308-756715\hdjojoba.exe
[01-HKCUREG]**HotKeysCmds -/- C:\Windows\system32\hkcmd.exe
[01-HKCUREG]**hyalla1 -/- C:\RECYCLER\S-1-5-21-0243556031-888888379-781863308-1981751\hyalla1.exe
[01-HKCUREG]**Hzkkkr -/- C:\Users\Administrator\AppData\Roaming\Microsoft\Hzkkkr.exe
[01-HKCUREG]**IgfxExt -/- C:\Windows\system32\IgfxExt.exe /RegServer
[01-HKCUREG]**IgfxTray -/- C:\Windows\system32\igfxtray.exe
[01-HKCUREG]**inetb123 -/- C:\RECYCLER\S-1-5-21-0243556031-888888379-781863308-121921\inetb123.exe
[01-HKCUREG]**Iykkks -/- C:\Users\Administrator\AppData\Roaming\Microsoft\Iykkks.exe
[01-HKCUREG]**Jykkkt -/- C:\Users\Administrator\AppData\Roaming\Microsoft\Jykkkt.exe
[01-HKCUREG]**MSNetDKNowiz -/- C:\Users\Administrator\AppData\Roaming\9192.exe
[01-HKCUREG]**MSNetTKNowiz -/- c:\Users\Administrator\appdata\roaming\f008.exe
[01-HKCUREG]**peacewme -/- C:\RECYCLER\S-1-5-21-0243556031-888888379-781863308-73591\peacewme.exe
[01-HKCUREG]**peacewme1 -/- C:\RECYCLER\S-1-5-21-0243556031-888888379-781863308-71591\peacewme1.exe
[01-HKCUREG]**Pykkkz -/- C:\Users\Administrator\AppData\Roaming\Microsoft\Pykkkz.exe
[01-HKCUREG]**SalaatTime -/- C:\Program Files\Salaat Time\SalaatTime.exe
[01-HKCUREG]**Screen Saver Pro 3.1 -/- C:\Users\Administrator\AppData\Roaming\ScreenSaverPro.scr
[01-HKCUREG]**Skype -/- C:\Program Files\Skype\Phone\Skype.exe /minimized /regrun
[01-HKCUREG]**tcdail1 -/- C:\RECYCLER\S-1-5-21-0243556031-888888379-781863308-13559\tcdail.exe
[01-HKCUREG]**tgmail1 -/- C:\RECYCLER\S-1-5-21-0243556031-888888379-781863308-1974419\tgmail.exe
[01-HKCUREG]**TkBellExe -/- c:\program files\real\realplayer\Update\realsched.exe -osboot
[01-HKCUREG]**tl4617 -/- C:\RECYCLER\S-1-5-21-0243556031-888888379-781863308-842109\tl246.exe
[01-HKCUREG]**tsexta -/- C:\RECYCLER\S-1-5-21-0243556031-888888379-781863308-119559\tcdail.exe
[01-HKCUREG]**tsfffa -/- C:\RECYCLER\S-1-5-21-0243556031-888888379-781863308-129551\tprepl.exe
[01-HKCUREG]**Uykkke -/- C:\Users\Administrator\AppData\Roaming\Microsoft\Uykkke.exe
[01-HKCUREG]**Windows Firewall DNS Manager -/- C:\RECYCLER\wnhost.exe
[01-HKCUREG]**x1h2n9 -/- C:\RECYCLER\S-1-5-21-0243556031-888888379-781863308-87892\s1sh10.exe
[01-HKCUREG]**x222n9 -/- C:\RECYCLER\S-1-5-21-0243556031-888888379-781863308-22892\s222h10.exe
[01-HKCUREG]**xsh2n1 -/- C:\RECYCLER\S-1-5-21-0243556031-888888379-781863308-81240\sxshin1.exe
[01-HKCUREG]**xsh2n3 -/- C:\RECYCLER\S-1-5-21-0243556031-888888379-781863308-81340\sxshin3.exe
[01-HKCUREG]**xsh2n4 -/- C:\RECYCLER\S-1-5-21-0243556031-888888379-781863308-81350\sxshin4.exe
[01-HKCUREG]**xsh2n5 -/- C:\RECYCLER\S-1-5-21-0243556031-888888379-781863308-81650\sxshin5.exe
[01-HKCUREG]**xsh2n6 -/- C:\RECYCLER\S-1-5-21-0243556031-888888379-781863308-86650\sxshin6.exe
[01-HKCUREG]**xsh2n7 -/- C:\RECYCLER\S-1-5-21-0243556031-888888379-781863308-87650\sxshin7.exe
[01-HKCUREG]**xsh2n8 -/- C:\RECYCLER\S-1-5-21-0243556031-888888379-781863308-87850\sxshin8.exe
[01-HKCUREG]**xsh2n9 -/- C:\RECYCLER\S-1-5-21-0243556031-888888379-781863308-87891\sxsh10.exe
[01-HKCUREG]**xshin1 -/- C:\RECYCLER\S-1-5-21-0243556031-888888379-781863308-81140\sxshin1.exe
[02-HKLMREG]**763t10 -/- C:\RECYCLER\S-1-5-21-0243556031-888888379-781863308-83109\763t10.exe
[02-HKLMREG]**763ta1 -/- C:\RECYCLER\S-1-5-21-0243556031-888888379-781863308-135672\763ta1.exe
[02-HKLMREG]**763ta2 -/- C:\RECYCLER\S-1-5-21-0243556031-888888379-781863308-235672\763ta2.exe
[02-HKLMREG]**763ta3 -/- C:\RECYCLER\S-1-5-21-0243556031-888888379-781863308-335672\763ta3.exe
[02-HKLMREG]**763ta4 -/- C:\RECYCLER\S-1-5-21-0243556031-888888379-781863308-435672\763ta4.exe
[02-HKLMREG]**763ta5 -/- C:\RECYCLER\S-1-5-21-0243556031-888888379-781863308-535672\763ta5.exe
[02-HKLMREG]**763ta6 -/- C:\RECYCLER\S-1-5-21-0243556031-888888379-781863308-635672\763ta6.exe
[02-HKLMREG]**763ta7 -/- C:\RECYCLER\S-1-5-21-0243556031-888888379-781863308-635672\763ta7.exe
[02-HKLMREG]**763ta9 -/- C:\RECYCLER\S-1-5-21-0243556031-888888379-781863308-835679\763ta9.exe
[02-HKLMREG]**763tac -/- C:\RECYCLER\S-1-5-21-0243556031-888888379-781863308-735672\763tac.exe
[02-HKLMREG]**b18521 -/- C:\RECYCLER\S-1-5-21-0243556031-888888379-781863308-711831\b71821.exe
[02-HKLMREG]**b764511 -/- C:\RECYCLER\S-1-5-21-0243556031-888888379-781863308-715231\b764511.exe
[02-HKLMREG]**b764512 -/- C:\RECYCLER\S-1-5-21-0243556031-888888379-781863308-765231\b764512.exe
[02-HKLMREG]**b764521 -/- C:\RECYCLER\S-1-5-21-0243556031-888888379-781863308-712231\b764521.exe
[02-HKLMREG]**b98521 -/- C:\RECYCLER\S-1-5-21-0243556031-888888379-781863308-98831\b981.exe
[02-HKLMREG]**bc24512 -/- C:\RECYCLER\S-1-5-21-0243556031-888888379-781863308-835231\bc24512.exe
[02-HKLMREG]**bc64512 -/- C:\RECYCLER\S-1-5-21-0243556031-888888379-781863308-865231\bc64512.exe
[02-HKLMREG]**bce4512 -/- C:\RECYCLER\S-1-5-21-0243556031-888888379-781863308-845231\bce4512.exe
[02-HKLMREG]**bce4r12 -/- C:\RECYCLER\S-1-5-21-0243556031-888888379-781863308-843231\bce4r12.exe
[02-HKLMREG]**bcerr12 -/- C:\RECYCLER\S-1-5-21-0243556031-888888379-781863308-823261\bcerr12.exe
[02-HKLMREG]**btef21 -/- C:\RECYCLER\S-1-5-21-0243556031-888888379-781863308-33831\btef1.exe
[02-HKLMREG]**cccw217 -/- C:\RECYCLER\S-1-5-21-0243556031-888888379-781863308-849119\ccc217.exe
[02-HKLMREG]**Cykkkm -/- C:\Users\Administrator\AppData\Roaming\Microsoft\Cykkkm.exe
[02-HKLMREG]**dqklonee -/- C:\RECYCLER\S-1-5-21-0243556031-888888379-781863308-92171\dqklonee.exe
[02-HKLMREG]**dwqw217 -/- C:\RECYCLER\S-1-5-21-0243556031-888888379-781863308-839119\dwqw217.exe
[02-HKLMREG]**fjpar10 -/- C:\RECYCLER\S-1-5-21-0243556031-888888379-781863308-85609\fjpar10.exe
[02-HKLMREG]**fjpar11 -/- C:\RECYCLER\S-1-5-21-0243556031-888888379-781863308-89609\fjpar11.exe
[02-HKLMREG]**fjpark1 -/- C:\RECYCLER\S-1-5-21-0243556031-888888379-781863308-82502\fjpark1.exe
[02-HKLMREG]**fjpark2 -/- C:\RECYCLER\S-1-5-21-0243556031-888888379-781863308-82503\fjpark2.exe
[02-HKLMREG]**fjpark3 -/- C:\RECYCLER\S-1-5-21-0243556031-888888379-781863308-82504\fjpark3.exe
[02-HKLMREG]**fjpark4 -/- C:\RECYCLER\S-1-5-21-0243556031-888888379-781863308-82505\fjpark4.exe
[02-HKLMREG]**fjpark5 -/- C:\RECYCLER\S-1-5-21-0243556031-888888379-781863308-82506\fjpark5.exe
[02-HKLMREG]**fjpark6 -/- C:\RECYCLER\S-1-5-21-0243556031-888888379-781863308-82507\fjpark6.exe
[02-HKLMREG]**fjpark7 -/- C:\RECYCLER\S-1-5-21-0243556031-888888379-781863308-82508\fjpark7.exe
[02-HKLMREG]**fjpark8 -/- C:\RECYCLER\S-1-5-21-0243556031-888888379-781863308-82509\fjpark8.exe
[02-HKLMREG]**fjpark9 -/- C:\RECYCLER\S-1-5-21-0243556031-888888379-781863308-85509\fjpark8.exe
[02-HKLMREG]**fjpdqz -/- C:\RECYCLER\S-1-5-21-0243556031-888888379-781863308-11609\fjpdqz.exe
[02-HKLMREG]**Fykkkp -/- C:\Users\Administrator\AppData\Roaming\Microsoft\Fykkkp.exe
[02-HKLMREG]**Fzkkkp -/- C:\Users\Administrator\AppData\Roaming\Microsoft\Fzkkkp.exe
[02-HKLMREG]**Google Update -/- C:\Users\Administrator\AppData\Local\Google\Update\GoogleUpdate.exe /c
[02-HKLMREG]**h1dlj88oba -/- C:\RECYCLER\S-1-5-21-0243556031-888888379-781863308-198175\h1o88ba.exe
[02-HKLMREG]**h1dljoba -/- C:\RECYCLER\S-1-5-21-0243556031-888888379-781863308-111715\h1oba.exe
[02-HKLMREG]**h881la1 -/- C:\RECYCLER\S-1-5-21-0243556031-888888379-781863308-145751\h881lla1.exe
[02-HKLMREG]**hdjojoba -/- C:\RECYCLER\S-1-5-21-0243556031-888888379-781863308-756715\hdjojoba.exe
[02-HKLMREG]**HotKeysCmds -/- C:\Windows\system32\hkcmd.exe
[02-HKLMREG]**hyalla1 -/- C:\RECYCLER\S-1-5-21-0243556031-888888379-781863308-1981751\hyalla1.exe
[02-HKLMREG]**Hzkkkr -/- C:\Users\Administrator\AppData\Roaming\Microsoft\Hzkkkr.exe
[02-HKLMREG]**IgfxExt -/- C:\Windows\system32\IgfxExt.exe /RegServer
[02-HKLMREG]**IgfxTray -/- C:\Windows\system32\igfxtray.exe
[02-HKLMREG]**inetb123 -/- C:\RECYCLER\S-1-5-21-0243556031-888888379-781863308-121921\inetb123.exe
[02-HKLMREG]**Iykkks -/- C:\Users\Administrator\AppData\Roaming\Microsoft\Iykkks.exe
[02-HKLMREG]**Jykkkt -/- C:\Users\Administrator\AppData\Roaming\Microsoft\Jykkkt.exe
[02-HKLMREG]**MSNetDKNowiz -/- C:\Users\Administrator\AppData\Roaming\9192.exe
[02-HKLMREG]**MSNetTKNowiz -/- c:\Users\Administrator\appdata\roaming\f008.exe
[02-HKLMREG]**peacewme -/- C:\RECYCLER\S-1-5-21-0243556031-888888379-781863308-73591\peacewme.exe
[02-HKLMREG]**peacewme1 -/- C:\RECYCLER\S-1-5-21-0243556031-888888379-781863308-71591\peacewme1.exe
[02-HKLMREG]**Pykkkz -/- C:\Users\Administrator\AppData\Roaming\Microsoft\Pykkkz.exe
[02-HKLMREG]**SalaatTime -/- C:\Program Files\Salaat Time\SalaatTime.exe
[02-HKLMREG]**Screen Saver Pro 3.1 -/- C:\Users\Administrator\AppData\Roaming\ScreenSaverPro.scr
[02-HKLMREG]**Skype -/- C:\Program Files\Skype\Phone\Skype.exe /minimized /regrun
[02-HKLMREG]**tcdail1 -/- C:\RECYCLER\S-1-5-21-0243556031-888888379-781863308-13559\tcdail.exe
[02-HKLMREG]**tgmail1 -/- C:\RECYCLER\S-1-5-21-0243556031-888888379-781863308-1974419\tgmail.exe
[02-HKLMREG]**TkBellExe -/- c:\program files\real\realplayer\Update\realsched.exe -osboot
[02-HKLMREG]**tl4617 -/- C:\RECYCLER\S-1-5-21-0243556031-888888379-781863308-842109\tl246.exe
[02-HKLMREG]**tsexta -/- C:\RECYCLER\S-1-5-21-0243556031-888888379-781863308-119559\tcdail.exe
[02-HKLMREG]**tsfffa -/- C:\RECYCLER\S-1-5-21-0243556031-888888379-781863308-129551\tprepl.exe
[02-HKLMREG]**Uykkke -/- C:\Users\Administrator\AppData\Roaming\Microsoft\Uykkke.exe
[02-HKLMREG]**Windows Firewall DNS Manager -/- C:\RECYCLER\wnhost.exe
[02-HKLMREG]**x1h2n9 -/- C:\RECYCLER\S-1-5-21-0243556031-888888379-781863308-87892\s1sh10.exe
[02-HKLMREG]**x222n9 -/- C:\RECYCLER\S-1-5-21-0243556031-888888379-781863308-22892\s222h10.exe
[02-HKLMREG]**xsh2n1 -/- C:\RECYCLER\S-1-5-21-0243556031-888888379-781863308-81240\sxshin1.exe
[02-HKLMREG]**xsh2n3 -/- C:\RECYCLER\S-1-5-21-0243556031-888888379-781863308-81340\sxshin3.exe
[02-HKLMREG]**xsh2n4 -/- C:\RECYCLER\S-1-5-21-0243556031-888888379-781863308-81350\sxshin4.exe
[02-HKLMREG]**xsh2n5 -/- C:\RECYCLER\S-1-5-21-0243556031-888888379-781863308-81650\sxshin5.exe
[02-HKLMREG]**xsh2n6 -/- C:\RECYCLER\S-1-5-21-0243556031-888888379-781863308-86650\sxshin6.exe
[02-HKLMREG]**xsh2n7 -/- C:\RECYCLER\S-1-5-21-0243556031-888888379-781863308-87650\sxshin7.exe
[02-HKLMREG]**xsh2n8 -/- C:\RECYCLER\S-1-5-21-0243556031-888888379-781863308-87850\sxshin8.exe
[02-HKLMREG]**xsh2n9 -/- C:\RECYCLER\S-1-5-21-0243556031-888888379-781863308-87891\sxsh10.exe
[02-HKLMREG]**xshin1 -/- C:\RECYCLER\S-1-5-21-0243556031-888888379-781863308-81140\sxshin1.exe
[03-BHOCLSD]**Deals Plugin Extension -/- C:\Program Files\Deals Plugin Extension\Deals Plugin Extension.dll -/- {11111111-1111-1111-1111-110211181106}
[03-BHOCLSD]**IDM integration (IDMIEHlprObj Class) -/- C:\Program Files\Internet Download Manager\IDMIECC.dll -/- {0055C089-8582-441B-A0BF-17B458C2A3A8}
[03-BHOCLSD]**RealNetworks Download and Record Plugin for Internet Explorer -/- C:\ProgramData\RealNetworks\RealDownloader\BrowserPlugins\IE\rndlbrowserrecordplugin.dll -/- {3049C3E9-B461-4BC5-8870-4C09146192CA}
[03-BHOCLSD]**Windows Live ID Sign-in Helper -/- C:\Program Files\Common Files\Microsoft Shared\Windows Live\WindowsLiveLogin.dll -/- {9030D464-4C02-4ABF-8ECC-5164760863C6}
[04-TOOLBAR]**N.A -/- N.A -/- 10
[05-SERVICE]**AdobeFlashPlayerUpdateSvc -/- Adobe Flash Player Update Service -/- C:\Windows\system32\Macromed\Flash\FlashPlayerUpdateService.exe
[05-SERVICE]**BitGuard -/- BitGuard -/- C:\ProgramData\BitGuard\2.6.1673.238\{c16c1ccb-7046-4e5c-a2f3-533ad2fec8e8}\BitGuard.exe
[05-SERVICE]**fsssvc -/- Windows Live Family Safety Service -/- C:\Program Files\Windows Live\Family Safety\fsssvc.exe
[05-SERVICE]**gupdate -/- Servizio Google Update (gupdate) -/- C:\Program Files\Google\Update\GoogleUpdate.exe
[05-SERVICE]**gupdatem -/- Servizio Google Update (gupdatem) -/- C:\Program Files\Google\Update\GoogleUpdate.exe
[05-SERVICE]**lmhosts -/- Assistance NetBIOS sur TCP/IP -/- C:\Windows\system32\svchost.exe -/- C:\Windows\System32\lltdsvc.dll
[05-SERVICE]**NlaSvc -/- Connaissance des emplacements réseau -/- C:\Windows\System32\svchost.exe
[05-SERVICE]**nsi -/- Service Interface du magasin réseau -/- C:\Windows\system32\svchost.exe
[05-SERVICE]**odserv -/- Microsoft Office Diagnostics Service -/- C:\Program Files\Common Files\Microsoft Shared\OFFICE12\ODSERV.EXE
[05-SERVICE]**ose -/- Office Source Engine -/- C:\Program Files\Common Files\Microsoft Shared\Source Engine\OSE.EXE
[05-SERVICE]**RealNetworks Downloader Resolver Service -/- RealNetworks Downloader Resolver Service -/- C:\Program Files\RealNetworks\RealDownloader\rndlresolversvc.exe
[05-SERVICE]**SkypeUpdate -/- Skype Updater -/- C:\Program Files\Skype\Updater\Updater.exe
[05-SERVICE]**SrvUpdater -/- Software Updater -/- C:\Program Files\SoftwareUpdater\UpdaterService.exe
[05-SERVICE]**wlidsvc -/- Windows Live ID Sign-in Assistant -/- C:\Program Files\Common Files\Microsoft Shared\Windows Live\WLIDSVC.EXE