Trojan.AgentMB.ICXB8387276

Trojan.AgentMB.ICXB8387276 is the latest malware running rampant online.

Trojan.AgentMB.ICXB8387276 is a Trojan horse that may make use of Rootkit techniques in order to hide itself within the infiltrated computer system.

Trojan.AgentMB.ICXB8387276 is believed to cause the following damage to any infected system: Trojan.AgentMB.ICXB8387276 will open a back door on the compromised computer. The system’s performance is downgraded as the application overwrites the Master Boot Record (MBR) may degrade performance. This nefarious application is also capable of system instability, as a result.

Being a malicious backdoor Trojan that runs in the background and allows remote access to the compromised system, Trojan.AgentMB.ICXB8387276 should not be taken lightly? As a malware application, Trojan.AgentMB.ICXB8387276 tends to disguise itself within the system, so as not to be detected as easily.

This is not a new way to deceive computer users and gain a purchase of the full version of Trojan.AgentMB.ICXB8387276; however Trojan.AgentMB.ICXB8387276 makes uses of additional misleading tactics as well.

Properties of this dubious infection, Trojan.AgentMB.ICXB8387276, include the following:

• Allows remote user connection
• Connects itself to the internet
• Hides from the user
• Stays resident in background

The best thing to do would be to remove this Trojan as soon as it has been detected on any given computer system. Good luck!

Download Spyware Removal Tool to Remove* Trojan.AgentMB.ICXB8387276

Quick & tested solution for Trojan.AgentMB.ICXB8387276 removal.
100% Free Scan for Windows

How to manually remove Trojan.AgentMB.ICXB8387276

Files associated with Trojan.AgentMB.ICXB8387276 infection:

nvvsvc.exe
sysfnx.exe
TfoQAsn4.exe
freereg.exe
winlogin.exe
zxpkktwt.exe
hnjhepnj.exe, twain_32.exe
8086983.exe
osidfjklsdw.exe
ccodr.exe
MNl2fg.dll
iecompat32.dll
gabpath.exe
1793357.exe
kl.exe
B2e61bdMX2oiZ.exe
firefox.exe
SUE_PD.sys
2252500.exe
54.tmp.exe
yybc.exe
clcl16.exe
1mes8hd6.exe
servises.exe
purdrh.exe
tbcdyhdzjpa.exe
autorun.exe
CbEvtSvc.exe
ytaeuj.exe
jnbvog.exe
__c00F296D.dat
JavaRuntime.00.exe
sysload32vh.dll
trial-reset.exe
crss.exe
WinPatrol.exe
svehost.exe
JavaUpdate.exe
262634_3872_1508_3588.19169.tmp
NOD-UE.exe
Dll.dll
ixervhy.exe
addpn.exe
dd.dll
qxepvqt.exe
bbafgfbj.dll
arpl.exe
wuauclt.exe
ppaeuah.exe
podmena.sys
driver.sys
iexplorer.exe
fd.dll
ip_fw.sys
nvcoi.exe
lgjklyrm.exe
0a5f00962.tmp
d.tmp
updatenf.dll
StartupMgr.exe
mail.exe
xsl27629.dll
SYSDLL.exe
worsock.dll
trialiis.dll
14578.exe
kanyd.exe
MsndkHelper.exe
explorer.exe
QoS.dll
iwaludeje.dll
AUTOPLAY.EXE
baw7.tmp
WgaLogon.dll
DesktopTool.exe
sysaiei.exe
MetDDE.exe
SHDOCVW.dll
userinig.exe
userinic.exe
iSecurity.cpl
md.dll
jhxm32.dll
~tmpv.exe
tmp100031.exe
HPIEAddOn.dll
testabd.dll
1[2].exe
035B777F.exe, BEDC10ED.exe
tpsaxyd.exe
msncache.dll
NewSecpol[1].exe, secpol.exe
get_wabs[1].exe
fsmgmt.dll
Packer[1].dll
winsys32_061230.dll
svchost_32.exe
xmvi.dll
wincsycc.exe
aaxiao.exe
aq[1].exe
prnet.tmp
digifast.exe
pidle.exe
SYS32DLL.exe
sjg9s8guigjs.dll
dll32.exe
nkolxecj.dll
pm_proc2.exe
promo.exe
msnm.exe
userload.exe
mmmrhacw.dll
tzqaplu13.exe
pp2.exe
svcnost.exe
mscheck2.exe
hgcheck.exe
scvhost32.exe
systeminit.exe
GetModule36.exe
crypts.dll
Owner.exe
Tierlir.exe,TT[1].exe
agemtctl.exe,TTzwd.exe,3Tzw.exe
4.tmp.exe
oqarib.dll
new26[1].exe
1[1].exe
ayscjcts.exe
TubePlayer[1].ver.6.exe
TubePlayer.ver.6.exe
cogad.exe
torbjne.exe
msword98.exe
tcxYF.exe
tlahidonokecikot.dll
oxuvewuc.dll
_adA.exe
FreeApp.exe
bok6835v.exe
mssrv32.exe
hnetcfg32.dll
d3dx9_2832.dll
CDDBUIRoxio32.dll
vmitla1.exe
2d6smh6a.exe
8[1].exe,_ad9.exe
moomqojucfqbs.dll
yiklrfqsko.dll
_ad9.exe
8[1].exe
jfkrgotvbl.dll
rtenazot.dll
GetModule31.exe
sysmgr.exe
eventlog32.dll
dlcccomm32.dll
dsound32.dll
mokyquij.exe
winlogun.exe
winhlp.exe
1F5.tmp.exe
r3gk0iax.exe
mshpc.dll
mrcmgr.exe
scerpt.dll
default[1].exe
wininet.exe,1[2].exe
svshost.dll
Twain.exe
f4f.exe
winrop32.dll
ctfmon.exe
cbsj0jry.exe
~tmpt.exe
naomf.exe
putmuk3110[1].exe,1132935139.exe
ccsx[1].exe,Trojan.Generic
10411[1].exe
GetPack24.exe
r4gA16WQ.dll
~tmpi.exe
lol.exe
8.exe
_A00F1A0D83.exe
lsivs.exe
bndmss.exe
p7ex40uo.exe
pwakdnwqmdesytpg.dll
vlc.exe
~tmpc.exe
d.exe
idxuctiadbjqbvlt.dll
wintipgrd.exe
GetModule26.exe
GetModule25.exe
GetModule24.exe
GetModule23.exe
GetPack22.exe
winsystem.exe
mspsmon.exe
67xv511g.exe
LSYSTI~1.DLL
mjc.exe
Mjcore.dll
VKNT.EXE
a.exe
UnknownSetup.dll
SrvAlrt.dll
MonCheck.dll
BootRom.dll
AvpKbd.dll
drvcd.dll
lobkavuboo.dll
__c0091c40.dat
tarowata.dll
lawawafi.dll
burolage.dll
tuvUoPIc.dll
rs32net.exe
LcodecPlus[1].v.1.exe
csrss5.dll
sysftp[1].exe,820233103.exe,809353461.exe,sysftpd[1].exe
ajas.exe
sysftpd[1].exe
809353461.exe
820233103.exe
sysftp[1].exe
install[1].exe
pep.exe
setupapi.dll
SayTimeMain.exe
zumie.dll
wlcstd32.dll
11002[1].exe
10901[1].exe
Facegame.exe
wicstd32.dll
services.exe
ezcron.dll
80353.exe
39942.exe
cpuserv.dll
5448b7f2.exe
xSiyUgc.exe
1370e162.exe
lsass.exe
E7Cx1XQ.exe
svchost.exe
alg.exe
iovtvnfa.exe
csrss.exe
SysteM.exe
~tmpa.exe
~tmpd.exe
PCFreeMon.exe
hcasfg.exe
molocha.exe
Counter.exe
soundmix.exe
taskmon.exe
ktgmhs.exe
bGb.exe
BTNRENC.EXE
bpvol.dll
tiobdfkehemjx.dll
IviUdf.sys
9.tmp
2.tmp
cftmon.exe
w32main2.exe
XSBMON.EXE
MDM.EXE
FixCamera.exe
spools.exe
winlogon.exe
cdcw.exe
DNTUS26.EXE
cluhtj.exe
WMFMRNV.EXE
windmh32.dll
mbssm32.exe
svzip.exe
teste2_p[1].exe
q6[1].exe
q3[1].exe
accessv.exe
baracudanew[1].exe
svc.exe
avto[1].exe
runsql.exe
teste4_p[1].exe
sv.exe
teste3_p[1].exe
ahuiz.exe
spywaredetect[1].exe
q7[1].exe
svw.exe
avto1[1].exe
q2[1].exe
load[1].exe
goo[1].exe
svx.exe
avto2[1].exe
svhoster.exe
teste1_p[1].exe
q1[1].exe
pinnew[1].exe
msnmsg.exe

Trojan.AgentMB.ICXB8387276 DLL's to remove:

MNl2fg.dll
iecompat32.dll
sysload32vh.dll
Dll.dll
dd.dll
bbafgfbj.dll
fd.dll
updatenf.dll
xsl27629.dll
worsock.dll
trialiis.dll
QoS.dll
iwaludeje.dll
WgaLogon.dll
SHDOCVW.dll
md.dll
jhxm32.dll
HPIEAddOn.dll
testabd.dll
msncache.dll
fsmgmt.dll
Packer[1].dll
winsys32_061230.dll
xmvi.dll
sjg9s8guigjs.dll
nkolxecj.dll
mmmrhacw.dll
crypts.dll
oqarib.dll
tlahidonokecikot.dll
oxuvewuc.dll
hnetcfg32.dll
d3dx9_2832.dll
CDDBUIRoxio32.dll
moomqojucfqbs.dll
yiklrfqsko.dll
jfkrgotvbl.dll
rtenazot.dll
eventlog32.dll
dlcccomm32.dll
dsound32.dll
mshpc.dll
scerpt.dll
svshost.dll
winrop32.dll
r4gA16WQ.dll
pwakdnwqmdesytpg.dll
idxuctiadbjqbvlt.dll
Mjcore.dll
UnknownSetup.dll
SrvAlrt.dll
MonCheck.dll
BootRom.dll
AvpKbd.dll
drvcd.dll
lobkavuboo.dll
tarowata.dll
lawawafi.dll
burolage.dll
tuvUoPIc.dll
csrss5.dll
setupapi.dll
zumie.dll
wlcstd32.dll
wicstd32.dll
ezcron.dll
cpuserv.dll
bpvol.dll
tiobdfkehemjx.dll
windmh32.dll

Trojan.AgentMB.ICXB8387276 processes to kill:

nvvsvc.exe
sysfnx.exe
TfoQAsn4.exe
freereg.exe
winlogin.exe
zxpkktwt.exe
hnjhepnj.exe, twain_32.exe
8086983.exe
osidfjklsdw.exe
ccodr.exe
gabpath.exe
1793357.exe
kl.exe
B2e61bdMX2oiZ.exe
firefox.exe
2252500.exe
54.tmp.exe
yybc.exe
clcl16.exe
1mes8hd6.exe
servises.exe
purdrh.exe
tbcdyhdzjpa.exe
autorun.exe
CbEvtSvc.exe
ytaeuj.exe
jnbvog.exe
JavaRuntime.00.exe
trial-reset.exe
crss.exe
WinPatrol.exe
svehost.exe
JavaUpdate.exe
NOD-UE.exe
ixervhy.exe
addpn.exe
qxepvqt.exe
arpl.exe
wuauclt.exe
ppaeuah.exe
iexplorer.exe
nvcoi.exe
lgjklyrm.exe
StartupMgr.exe
mail.exe
SYSDLL.exe
14578.exe
kanyd.exe
MsndkHelper.exe
explorer.exe
DesktopTool.exe
sysaiei.exe
MetDDE.exe
userinig.exe
userinic.exe
~tmpv.exe
tmp100031.exe
1[2].exe
035B777F.exe, BEDC10ED.exe
tpsaxyd.exe
NewSecpol[1].exe, secpol.exe
get_wabs[1].exe
svchost_32.exe
wincsycc.exe
aaxiao.exe
aq[1].exe
digifast.exe
pidle.exe
SYS32DLL.exe
dll32.exe
pm_proc2.exe
promo.exe
msnm.exe
userload.exe
tzqaplu13.exe
pp2.exe
svcnost.exe
mscheck2.exe
hgcheck.exe
scvhost32.exe
systeminit.exe
GetModule36.exe
Owner.exe
Tierlir.exe,TT[1].exe
agemtctl.exe,TTzwd.exe,3Tzw.exe
4.tmp.exe
new26[1].exe
1[1].exe
ayscjcts.exe
TubePlayer[1].ver.6.exe
TubePlayer.ver.6.exe
cogad.exe
torbjne.exe
msword98.exe
tcxYF.exe
_adA.exe
FreeApp.exe
bok6835v.exe
mssrv32.exe
vmitla1.exe
2d6smh6a.exe
8[1].exe,_ad9.exe
_ad9.exe
8[1].exe
GetModule31.exe
sysmgr.exe
mokyquij.exe
winlogun.exe
winhlp.exe
1F5.tmp.exe
r3gk0iax.exe
mrcmgr.exe
default[1].exe
wininet.exe,1[2].exe
Twain.exe
f4f.exe
ctfmon.exe
cbsj0jry.exe
~tmpt.exe
naomf.exe
putmuk3110[1].exe,1132935139.exe
10411[1].exe
GetPack24.exe
~tmpi.exe
lol.exe
8.exe
_A00F1A0D83.exe
lsivs.exe
bndmss.exe
p7ex40uo.exe
vlc.exe
~tmpc.exe
d.exe
wintipgrd.exe
GetModule26.exe
GetModule25.exe
GetModule24.exe
GetModule23.exe
GetPack22.exe
winsystem.exe
mspsmon.exe
67xv511g.exe
mjc.exe
a.exe
rs32net.exe
LcodecPlus[1].v.1.exe
sysftp[1].exe,820233103.exe,809353461.exe,sysftpd[1].exe
ajas.exe
sysftpd[1].exe
809353461.exe
820233103.exe
sysftp[1].exe
install[1].exe
pep.exe
SayTimeMain.exe
11002[1].exe
10901[1].exe
Facegame.exe
services.exe
80353.exe
39942.exe
5448b7f2.exe
xSiyUgc.exe
1370e162.exe
lsass.exe
E7Cx1XQ.exe
svchost.exe
alg.exe
iovtvnfa.exe
csrss.exe
SysteM.exe
~tmpa.exe
~tmpd.exe
PCFreeMon.exe
hcasfg.exe
molocha.exe
Counter.exe
soundmix.exe
taskmon.exe
ktgmhs.exe
bGb.exe
cftmon.exe
w32main2.exe
FixCamera.exe
spools.exe
winlogon.exe
cdcw.exe
cluhtj.exe
mbssm32.exe
svzip.exe
teste2_p[1].exe
q6[1].exe
q3[1].exe
accessv.exe
baracudanew[1].exe
svc.exe
avto[1].exe
runsql.exe
teste4_p[1].exe
sv.exe
teste3_p[1].exe
ahuiz.exe
spywaredetect[1].exe
q7[1].exe
svw.exe
avto1[1].exe
q2[1].exe
load[1].exe
goo[1].exe
svx.exe
avto2[1].exe
svhoster.exe
teste1_p[1].exe
q1[1].exe
pinnew[1].exe
msnmsg.exe

Remove Trojan.AgentMB.ICXB8387276 registry entries:

HKEY_CURRENT_USER\SOFTWARE\MICROSOFT\WINDOWS\CURRENTVERSION\RUN\ aplmntmsg
HKEY_CURRENT_USER\SOFTWARE\MICROSOFT\WINDOWS\CURRENTVERSION\RUN\ Facegame
HKEY_CURRENT_USER\SOFTWARE\MICROSOFT\WINDOWS\CURRENTVERSION\RUN\ molocha
HKEY_CURRENT_USER\SOFTWARE\MICROSOFT\WINDOWS\CURRENTVERSION\RUN\ MSFox
HKEY_CURRENT_USER\SOFTWARE\MICROSOFT\WINDOWS\CURRENTVERSION\RUN\ pep
HKEY_CURRENT_USER\SOFTWARE\MICROSOFT\WINDOWS\CURRENTVERSION\RUN\ solo
HKEY_CURRENT_USER\SOFTWARE\MICROSOFT\WINDOWS\CURRENTVERSION\RUN\ Twain
HKEY_CURRENT_USER\SOFTWARE\MICROSOFT\WINDOWS\CURRENTVERSION\RUN\ WheresJames Startup Manager
HKEY_LOCAL_MACHINESOFTWAREMICROSOFTWINDOWSCURRENTVERSIONRUN 1mes8hd6
HKEY_LOCAL_MACHINESOFTWAREMICROSOFTWINDOWSCURRENTVERSIONRUN clcl16
HKEY_LOCAL_MACHINESOFTWAREMICROSOFTWINDOWSCURRENTVERSIONRUN Msnmsg
HKEY_LOCAL_MACHINESOFTWAREMICROSOFTWINDOWSCURRENTVERSIONRUN servises
HKEY_LOCAL_MACHINESOFTWAREMICROSOFTWINDOWSCURRENTVERSIONRUN yybc
HKEY_LOCAL_MACHINE\SOFTWARE\MICROSOFT\WINDOWSNT\CURRENTVERSION\WINDOWS\APPINIT_DLLS\ AppInit_DLLs
HKEY_LOCAL_MACHINE\SOFTWARE\MICROSOFT\WINDOWSNT\CURRENTVERSION\WINLOGON\NOTIFY\Software\Microsoft\Windows NT\CurrentVersion\Winlogon\Notify\bbafgfbj
HKEY_LOCAL_MACHINE\SOFTWARE\MICROSOFT\WINDOWSNT\CURRENTVERSION\WINLOGON\NOTIFY\SOFTWARE\MICROSOFT\WINDOWS NT\CURRENTVERSION\WINLOGON\NOTIFY\UpdateNf
HKEY_LOCAL_MACHINE\SOFTWARE\MICROSOFT\WINDOWSNT\CURRENTVERSION\WINLOGON\NOTIFY\Software\Microsoft\Windows NT\CurrentVersion\Winlogon\Notify\windmh32
HKEY_LOCAL_MACHINE\SOFTWARE\MICROSOFT\WINDOWSNT\CURRENTVERSION\WINLOGON\NOTIFY\Software\Microsoft\Windows NT\CurrentVersion\Winlogon\Notify\winrop32
HKEY_LOCAL_MACHINE\SOFTWARE\MICROSOFT\WINDOWSNT\CURRENTVERSION\WINLOGON\NOTIFY\SOFTWARE\MICROSOFT\WINDOWS NT\CURRENTVERSION\WINLOGON\NOTIFY\__c00F296D
HKEY_LOCAL_MACHINE\SOFTWARE\MICROSOFT\WINDOWSNT\CURRENTVERSION\WINLOGON\USERINIT\ userinit
HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{5A5B6916-ED71-4531-8018-E792DD44156E}
HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{D34F5D71-99E4-4D96-91CA-F4104F69B8AE}
HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Explorer\Browser HelperObjects\{1004AAA2-63BB-0B45-B808-334D15814302}
HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Explorer\Browser HelperObjects\{25B8D58C-B0CB-46b0-BA64-05B3804E4E86}
HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Explorer\Browser HelperObjects\{7BF9F344-72CF-344A-9D1B-3B7D25C37D34}
HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Explorer\Browser HelperObjects\{85280030-0911-00E7-8467-99ca3230262a}
HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Explorer\Browser HelperObjects\{99C6D1BB-7555-474C-91DA-D8FB62A9CC75}
HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Explorer\SharedTaskScheduler\{25B8D58C-B0CB-46b0-BA64-05B3804E4E86}
HKEY_LOCAL_MACHINE\SOFTWARE\MICROSOFT\WINDOWS\CURRENTVERSION\RUN\ ajas
HKEY_LOCAL_MACHINE\SOFTWARE\MICROSOFT\WINDOWS\CURRENTVERSION\RUN\ Application Layer Gateway
HKEY_LOCAL_MACHINE\SOFTWARE\MICROSOFT\WINDOWS\CURRENTVERSION\RUN\ autoload
HKEY_LOCAL_MACHINE\SOFTWARE\MICROSOFT\WINDOWS\CURRENTVERSION\RUN\ AutoPlay
HKEY_LOCAL_MACHINE\SOFTWARE\MICROSOFT\WINDOWS\CURRENTVERSION\RUN\ cdcw
HKEY_LOCAL_MACHINE\SOFTWARE\MICROSOFT\WINDOWS\CURRENTVERSION\RUN\ cftmon
HKEY_LOCAL_MACHINE\SOFTWARE\MICROSOFT\WINDOWS\CURRENTVERSION\RUN\ ComSpec Research Srv
HKEY_LOCAL_MACHINE\SOFTWARE\MICROSOFT\WINDOWS\CURRENTVERSION\RUN\ Counter
HKEY_LOCAL_MACHINE\SOFTWARE\MICROSOFT\WINDOWS\CURRENTVERSION\RUN\ csrss
HKEY_LOCAL_MACHINE\SOFTWARE\MICROSOFT\WINDOWS\CURRENTVERSION\RUN\ Desktop Tool 4
HKEY_LOCAL_MACHINE\SOFTWARE\MICROSOFT\WINDOWS\CURRENTVERSION\RUN\ Drver
HKEY_LOCAL_MACHINE\SOFTWARE\MICROSOFT\WINDOWS\CURRENTVERSION\RUN\ Explorer
HKEY_LOCAL_MACHINE\SOFTWARE\MICROSOFT\WINDOWS\CURRENTVERSION\RUN\ FixCamera
HKEY_LOCAL_MACHINE\SOFTWARE\MICROSOFT\WINDOWS\CURRENTVERSION\RUN\ HKLM
HKEY_LOCAL_MACHINE\SOFTWARE\MICROSOFT\WINDOWS\CURRENTVERSION\RUN\ Host Process
HKEY_LOCAL_MACHINE\SOFTWARE\MICROSOFT\WINDOWS\CURRENTVERSION\RUN\ Intel system tool
HKEY_LOCAL_MACHINE\SOFTWARE\MICROSOFT\WINDOWS\CURRENTVERSION\RUN\ Internet
HKEY_LOCAL_MACHINE\SOFTWARE\MICROSOFT\WINDOWS\CURRENTVERSION\RUN\ Java Update
HKEY_LOCAL_MACHINE\SOFTWARE\MICROSOFT\WINDOWS\CURRENTVERSION\RUN\ JavaUpdate
HKEY_LOCAL_MACHINE\SOFTWARE\MICROSOFT\WINDOWS\CURRENTVERSION\RUN\ Kernel32
HKEY_LOCAL_MACHINE\SOFTWARE\MICROSOFT\WINDOWS\CURRENTVERSION\RUN\ Microsoft Help
HKEY_LOCAL_MACHINE\SOFTWARE\MICROSOFT\WINDOWS\CURRENTVERSION\RUN\ MSMSGNER
HKEY_LOCAL_MACHINE\SOFTWARE\MICROSOFT\WINDOWS\CURRENTVERSION\RUN\ MsndkHelper.exe
HKEY_LOCAL_MACHINE\SOFTWARE\MICROSOFT\WINDOWS\CURRENTVERSION\RUN\ Msnmsg
HKEY_LOCAL_MACHINE\SOFTWARE\MICROSOFT\WINDOWS\CURRENTVERSION\RUN\ mspsmon
HKEY_LOCAL_MACHINE\SOFTWARE\MICROSOFT\WINDOWS\CURRENTVERSION\RUN\ msvtt
HKEY_LOCAL_MACHINE\SOFTWARE\MICROSOFT\WINDOWS\CURRENTVERSION\RUN\ msword98
HKEY_LOCAL_MACHINE\SOFTWARE\MICROSOFT\WINDOWS\CURRENTVERSION\RUN\ NOD-UE
HKEY_LOCAL_MACHINE\SOFTWARE\MICROSOFT\WINDOWS\CURRENTVERSION\RUN\ ntuser
HKEY_LOCAL_MACHINE\SOFTWARE\MICROSOFT\WINDOWS\CURRENTVERSION\RUN\ PCFree
HKEY_LOCAL_MACHINE\SOFTWARE\MICROSOFT\WINDOWS\CURRENTVERSION\RUN\ promo.exe
HKEY_LOCAL_MACHINE\SOFTWARE\MICROSOFT\WINDOWS\CURRENTVERSION\RUN\ Soltek
HKEY_LOCAL_MACHINE\SOFTWARE\MICROSOFT\WINDOWS\CURRENTVERSION\RUN\ soundmix
HKEY_LOCAL_MACHINE\SOFTWARE\MICROSOFT\WINDOWS\CURRENTVERSION\RUN\ stgclean
HKEY_LOCAL_MACHINE\SOFTWARE\MICROSOFT\WINDOWS\CURRENTVERSION\RUN\ SVCHOST
HKEY_LOCAL_MACHINE\SOFTWARE\MICROSOFT\WINDOWS\CURRENTVERSION\RUN\ svchost.exe
HKEY_LOCAL_MACHINE\SOFTWARE\MICROSOFT\WINDOWS\CURRENTVERSION\RUN\ taskmon
HKEY_LOCAL_MACHINE\SOFTWARE\MICROSOFT\WINDOWS\CURRENTVERSION\RUN\ Trial-Reset
HKEY_LOCAL_MACHINE\SOFTWARE\MICROSOFT\WINDOWS\CURRENTVERSION\RUN\ Vietkey
HKEY_LOCAL_MACHINE\SOFTWARE\MICROSOFT\WINDOWS\CURRENTVERSION\RUN\ wejyt
HKEY_LOCAL_MACHINE\SOFTWARE\MICROSOFT\WINDOWS\CURRENTVERSION\RUN\ windows
HKEY_LOCAL_MACHINE\SOFTWARE\MICROSOFT\WINDOWS\CURRENTVERSION\RUN\ WinPatrol
HKEY_LOCAL_MACHINE\SOFTWARE\MICROSOFT\WINDOWS\CURRENTVERSION\RUN\ winsystem
HKEY_LOCAL_MACHINE\SOFTWARE\MICROSOFT\WINDOWS\CURRENTVERSION\RUN\ WMDM PMSP Service Data = C:\WINDOWS\system32\cssrss.exe1cName = soundmix
HKEY_LOCAL_MACHINE\SOFTWARE\MICROSOFT\WINDOWS\CURRENTVERSION\RUN\ wrna3ls
HKEY_LOCAL_MACHINE\SOFTWARE\MICROSOFT\WINDOWS\CURRENTVERSION\RUN\ XSB
HKEY_LOCAL_MACHINE\SOFTWARE\MICROSOFT\WINDOWS\CURRENTVERSION\RUN\ahiodwx
HKEY_LOCAL_MACHINE\SOFTWARE\MICROSOFT\WINDOWS\CURRENTVERSION\RUN\bGb.exe
HKEY_LOCAL_MACHINE\SOFTWARE\MICROSOFT\WINDOWS\CURRENTVERSION\RUN\BTNRENC
HKEY_LOCAL_MACHINE\SOFTWARE\MICROSOFT\WINDOWS\CURRENTVERSION\RUN\cluhtj
HKEY_LOCAL_MACHINE\SOFTWARE\MICROSOFT\WINDOWS\CURRENTVERSION\RUN\gwiz
HKEY_LOCAL_MACHINE\SOFTWARE\MICROSOFT\WINDOWS\CURRENTVERSION\RUN\mbssm32
HKEY_LOCAL_MACHINE\SOFTWARE\MICROSOFT\WINDOWS\CURRENTVERSION\RUN\tcxYF.exe
HKEY_LOCAL_MACHINE\SOFTWARE\MICROSOFT\WINDOWS\CURRENTVERSION\RUN\WMFMRNV
HKEY_LOCAL_MACHINE\SOFTWARE\MICROSOFT\WINDOWS\CURRENTVERSION\RUN\woerom
HKEY_LOCAL_MACHINE\SOFTWARE\MICROSOFT\WINDOWS\CURRENTVERSION\RUN\xlggarxl
HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\CbEvtSvc
HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\DameWare NT Utilities 2.6
HKEY_LOCAL_MACHINE\System\CurrentControlSet\Services\driverdrv
HKEY_LOCAL_MACHINE\System\CurrentControlSet\Services\ip_fw
HKEY_LOCAL_MACHINE\System\CurrentControlSet\Services\iviudf
HKEY_LOCAL_MACHINE\System\CurrentControlSet\Services\navigator
HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\Network DDE
HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\Network Security Service (NSS)
HKEY_LOCAL_MACHINE\System\CurrentControlSet\Services\podmenadrv
HKEY_LOCAL_MACHINE\SYSTEM\CURRENTCONTROLSET\SERVICES\WINSOCK2\PARAMETERS\SYSTEM\CurrentControlSet\Services\WinSock2\Parameters\Protocol_Catalog9\Catalog_Entries\000000000004
HKEY_LOCAL_MACHINE\SYSTEM\CURRENTCONTROLSET\SERVICES\WINSOCK2\PARAMETERS\SYSTEM\CurrentControlSet\Services\WinSock2\Parameters\Protocol_Catalog9\Catalog_Entries\000000000017
HKEY_LOCAL_MACHINE\SYSTEM\CURRENTCONTROLSET\SERVICES\WINSOCK2\PARAMETERS\SYSTEM\CurrentControlSet\Services\WinSock2\Parameters\Protocol_Catalog9\Catalog_Entries\000000000035
HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\Zumie Search Service
Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{5348C01C-0CAC-DFC1-C2B5-A17C8F346C5B}
Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{87741EBD-E13E-D9AF-B762-A1704A84CEC0}
Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{B2B5A41F-C7C9-65D2-71C9-C1D494AA4D7B}
MICROSOFT\WINDOWS\CURRENTVERSION\RUN\Cognac
Microsoft\Windows\CurrentVersion\Run\IEUpdate
MICROSOFT\WINDOWS\CURRENTVERSION\RUN\mspsmon
Microsoft\Windows\CurrentVersion\Run\net64
Microsoft\Windows\CurrentVersion\Run\netc
Microsoft\Windows\CurrentVersion\Run\netsv32
Microsoft\Windows\CurrentVersion\Run\netw
Microsoft\Windows\CurrentVersion\Run\netx
Microsoft\Windows\CurrentVersion\Run\netzip
Microsoft\Windows\CurrentVersion\Run\runsql
MICROSOFT\WINDOWS\CURRENTVERSION\RUN\systemz
Microsoft\Windows\CurrentVersion\Run\UpdateWin
Microsoft\Windows\CurrentVersion\Run\uwfsvhbssoldbasmo
RUNNING PROGRAM2252500.exe
RUNNING PROGRAM54.tmp.exe
RUNNING PROGRAM\14578.exe
RUNNING PROGRAM\2.tmp
RUNNING PROGRAM\9.tmp
RUNNING PROGRAM\baw7.tmp
RUNNING PROGRAM\explorer.exe
RUNNING PROGRAM\iovtvnfa.exe
RUNNING PROGRAM\purdrh.exe
RUNNING PROGRAM\SayTimeMain.exe
RUNNING PROGRAM\SYSDLL.exe
RUNNING PROGRAM\tmp100031.exe
RUNNING PROGRAM\winlogon.exe
RUNNING PROGRAM\~tmpa.exe
RUNNING PROGRAM\~tmpc.exe
RUNNING PROGRAM\~tmpd.exe
RUNNING PROGRAM\~tmpv.exe
Software\Microsoft\Windows\CurrentVersion\RunServices\IEUpdate
Software\Microsoft\Windows\CurrentVersion\RunServices\UpdateWin
SOFTWARE\Microsoft\Windows\CurrentVersion\ShellServiceObjectDelayLoad "SysRun"
{5348C01C-0CAC-DFC1-C2B5-A17C8F346C5B}
{B2B5A41F-C7C9-65D2-71C9-C1D494AA4D7B}

Post comment — WE NEED YOUR OPINION!