1. This site uses cookies. By continuing to use this site, you are agreeing to our use of cookies. Learn More.

Help! Virus, Trojan, Can't use my computer!

Discussion in 'Windows - Virus and spyware problems' started by Troonus, Feb 24, 2009.

  1. Troonus

    Troonus Member

    Joined:
    Feb 24, 2009
    Messages:
    13
    Likes Received:
    0
    Trophy Points:
    11
    I downloaded a new antivirus and when I did I got a package of trojans. I ran spyware doctor and it would delete a few things but they seemed to come back. I also had a few pop-ups. I am not able to anything unless in safe mode. A trojan virtumondo, backdoor trojan, and other stuff. Please help! I did run, hijack this, and created a log file but I do not know what to do with it! Please help!
     
  2. Troonus

    Troonus Member

    Joined:
    Feb 24, 2009
    Messages:
    13
    Likes Received:
    0
    Trophy Points:
    11
    My log is way too long to post in one message. I will post in 2 or 3.

    Logfile of Trend Micro HijackThis v2.0.2
    Scan saved at 11:09:59 AM, on 2/24/2009
    Platform: Windows XP SP3 (WinNT 5.01.2600)
    MSIE: Internet Explorer v6.00 SP3 (6.00.2900.5512)
    Boot mode: Safe mode

    Running processes:
    C:\WINDOWS\System32\smss.exe
    C:\WINDOWS\system32\winlogon.exe
    C:\WINDOWS\system32\services.exe
    C:\WINDOWS\system32\lsass.exe
    C:\WINDOWS\system32\svchost.exe
    C:\WINDOWS\system32\svchost.exe
    C:\Program Files\Spyware Doctor\pctsAuxs.exe
    C:\Program Files\Spyware Doctor\pctsSvc.exe
    C:\WINDOWS\Explorer.EXE
    C:\Program Files\Trend Micro\HijackThis\HijackThis.exe

    R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = http://www.charter.net/index.php
    O2 - BHO: C:\WINDOWS\system32\hs78344kjkfd.dll - {C5BF49A2-94F3-42BD-F434-3604812C8955} - C:\WINDOWS\system32\hs78344kjkfd.dll
    O2 - BHO: (no name) - {e9147a92-ea1c-4c33-b4fc-82f0ecb8aa64} - C:\WINDOWS\system32\yohilite.dll (file missing)
    O3 - Toolbar: BellSouth Toolbar - {4E7BD74F-2B8D-469E-8CBD-FD60BB9AAE2E} - C:\PROGRA~1\BLSTOO~1\BLSTOO~1.DLL (file missing)
    O3 - Toolbar: (no name) - {7FEBEFE3-6B19-4349-98D2-FFB09D4B49CA} - (no file)
    O4 - HKLM\..\Run: [ehTray] C:\WINDOWS\ehome\ehtray.exe
    O4 - HKLM\..\Run: [SoundMAXPnP] C:\Program Files\Analog Devices\Core\smax4pnp.exe
    O4 - HKLM\..\Run: [StartCCC] C:\Program Files\ATI Technologies\ATI.ACE\Core-Static\CLIStart.exe
    O4 - HKLM\..\Run: [NeroFilterCheck] C:\WINDOWS\system32\NeroCheck.exe
    O4 - HKLM\..\Run: [DiscWizardMonitor.exe] C:\Program Files\Seagate\DiscWizard\DiscWizardMonitor.exe
    O4 - HKLM\..\Run: [AcronisTimounterMonitor] C:\Program Files\Seagate\DiscWizard\TimounterMonitor.exe
    O4 - HKLM\..\Run: [Acronis Scheduler2 Service] "C:\Program Files\Common Files\Seagate\Schedule2\schedhlp.exe"
    O4 - HKLM\..\Run: [BellSouthReportingAgent] "C:\Program Files\Common Files\Motive\McciBootStrapper.exe" /url="-url=file://C:\Program Files\Common Files\Motive\ReportAgent.html" /browsertype=CustomMSIE /browserpath="C:\Program Files\Common Files\Motive\MotiveBrowser.exe" /hidden
    O4 - HKLM\..\Run: [IAAnotif] "C:\Program Files\Intel\Intel Matrix Storage Manager\Iaanotif.exe"
    O4 - HKLM\..\Run: [Adobe Reader Speed Launcher] "C:\Program Files\Adobe\Reader 8.0\Reader\Reader_sl.exe"
    O4 - HKLM\..\Run: [GrooveMonitor] "C:\Program Files\Microsoft Office\Office12\GrooveMonitor.exe"
    O4 - HKLM\..\Run: [QuickTime Task] "C:\Program Files\QuickTime\qttask.exe" -atboottime
    O4 - HKLM\..\Run: [LELA] "C:\Program Files\Linksys\Linksys EasyLink Advisor\Linksys EasyLink Advisor.exe" /minimized
    O4 - HKLM\..\Run: [SunJavaUpdateSched] "C:\Program Files\Java\jre6\bin\jusched.exe"
    O4 - HKLM\..\Run: [nmctxth] "C:\Program Files\Common Files\Pure Networks Shared\Platform\nmctxth.exe"
    O4 - HKLM\..\Run: [nmapp] "C:\Program Files\Pure Networks\Network Magic\nmapp.exe" -autorun -nosplash
    O4 - HKLM\..\Run: [ISTray] "C:\Program Files\Spyware Doctor\pctsTray.exe"
    O4 - HKLM\..\Run: [Vfeda] rundll32.exe "C:\WINDOWS\Pzaxacevezuy.dll",e
    O4 - HKLM\..\Run: [jsf8uiw3jnjgffght] C:\DOCUME~1\TROY~1.TRO\LOCALS~1\Temp\winlognn.exe
    O4 - HKLM\..\Run: [Qmuzoqa] rundll32.exe "C:\WINDOWS\odezimimimesu.dll",e
    O4 - HKLM\..\Run: [DeskTopSrv] C:\WINDOWS\system32\grcrt.exe
    O4 - HKLM\..\Run: [vuvalituno] Rundll32.exe "C:\WINDOWS\system32\vigodite.dll",s
    O4 - HKLM\..\Run: [ZoneAlarm Client] "C:\Program Files\Zone Labs\ZoneAlarm\zlclient.exe"
    O4 - HKLM\..\Run: [avgnt] "C:\Program Files\Avira\AntiVir PersonalEdition Premium\avgnt.exe" /min
    O4 - HKLM\..\Run: [KernelFaultCheck] %systemroot%\system32\dumprep 0 -k
    O4 - HKLM\..\Run: [Explorer] C:\WINDOWS\system32\msrstart.exe
    O4 - HKLM\..\Run: [8ce653fc] rundll32.exe "C:\WINDOWS\system32\sipayado.dll",b
    O4 - HKLM\..\Run: [CPM8fd56060] Rundll32.exe "c:\windows\system32\logipefu.dll",a
    O4 - HKCU\..\Run: [MSMSGS] "C:\Program Files\Messenger\msmsgs.exe" /background
    O4 - HKCU\..\Run: [ctfmon.exe] C:\WINDOWS\system32\ctfmon.exe
    O4 - HKCU\..\Run: [AnyDVD] "C:\Program Files\SlySoft\AnyDVD\AnyDVD.exe"
    O4 - HKCU\..\Run: [jsf8uiw3jnjgffght] C:\DOCUME~1\TROY~1.TRO\LOCALS~1\Temp\winlognn.exe
    O4 - HKCU\..\Run: [g5ewaw1kbbqajawdkpg6n33uhwmv4zbi] C:\DOCUME~1\TROY~1.TRO\LOCALS~1\Temp\l2affor3n8.exe
    O4 - HKCU\..\Run: [dg9lj4715yiyaqu3p] C:\DOCUME~1\TROY~1.TRO\LOCALS~1\Temp\jkkhjy.exe
    O4 - HKCU\..\Run: [a4q5zidiniuv8l6bdqks9nxdr06ful5oqv] C:\DOCUME~1\TROY~1.TRO\LOCALS~1\Temp\xwf3vo2mvxu.exe
    O4 - HKCU\..\Run: [pb54vx5zzkow3] C:\DOCUME~1\TROY~1.TRO\LOCALS~1\Temp\ih21i1d.exe
    O4 - HKCU\..\Run: [njz3it6kyhmd72] C:\DOCUME~1\TROY~1.TRO\LOCALS~1\Temp\qre8bmgx6u76p.exe
    O4 - HKCU\..\Run: [ibvgb39n1z8q39x] C:\DOCUME~1\TROY~1.TRO\LOCALS~1\Temp\jtoub0.exe
    O4 - HKCU\..\Run: [suzjo7dyb6d5axu1hootyaa9tli81hr] C:\DOCUME~1\TROY~1.TRO\LOCALS~1\Temp\qsvfdcmcr7w7.exe
    O4 - HKCU\..\Run: [f8af33tpadn9ny9272rsve7udpdm8altopfikedf] C:\DOCUME~1\TROY~1.TRO\LOCALS~1\Temp\ab8m3hya15yw.exe
    O4 - HKCU\..\Run: [ceuhjpqkjebnknx0l7] C:\DOCUME~1\TROY~1.TRO\LOCALS~1\Temp\hg9f1mu.exe
    O4 - HKCU\..\Run: [ds5hle5v88hiomct71dx1db493y] C:\DOCUME~1\TROY~1.TRO\LOCALS~1\Temp\d53upuls1wuu.exe
    O4 - HKCU\..\Run: [j3vvyh29fa4p67n1ubo571u0tt1vkrcr] C:\DOCUME~1\TROY~1.TRO\LOCALS~1\Temp\nptasbbqs4s1.exe
    O4 - HKCU\..\Run: [e0ozdtr9lvzdq] C:\DOCUME~1\TROY~1.TRO\LOCALS~1\Temp\plt36n81hl.exe
    O4 - HKCU\..\Run: [s5paqucp9k1ef54q2xt5tdbqh37vdir93gk7yhbcuh] C:\DOCUME~1\TROY~1.TRO\LOCALS~1\Temp\aqb8dw.exe
    O4 - HKCU\..\Run: [l9ckjdu04pma0dzjcowugbv82q5euc423ckyx4r3sxj8tn] C:\DOCUME~1\TROY~1.TRO\LOCALS~1\Temp\v6kgu1vnm.exe
    O4 - HKCU\..\Run: [t386vi53xiu5j0nt85s6ykkzovtl1k6022fxhnxn52dqa1y] C:\DOCUME~1\TROY~1.TRO\LOCALS~1\Temp\rb3hisyou.exe
    O4 - HKCU\..\Run: [glqqz1n0lexbuynwuh3841ephetyp] C:\DOCUME~1\TROY~1.TRO\LOCALS~1\Temp\sqrzzqnde.exe
    O4 - HKCU\..\Run: [dhv4gjqdodf] C:\DOCUME~1\TROY~1.TRO\LOCALS~1\Temp\lni1ud8a4qo.exe
    O4 - HKCU\..\Run: [d4w3nu0ks8lgckdbxf6ao56a5vy5mryeubzutz1ob24n87t1] C:\DOCUME~1\TROY~1.TRO\LOCALS~1\Temp\ls1lz4ixj1.exe
    O4 - HKCU\..\Run: [ac74e653a1] C:\DOCUME~1\TROY~1.TRO\LOCALS~1\Temp\o2w55k.exe
    O4 - HKCU\..\Run: [gvbc1c48k] C:\DOCUME~1\TROY~1.TRO\LOCALS~1\Temp\hp8nvpa.exe
    O4 - HKCU\..\Run: [hiemxda93] C:\DOCUME~1\TROY~1.TRO\LOCALS~1\Temp\avkm2bli.exe
    O4 - HKCU\..\Run: [exwj5l5opws4b3bsa5wsqenful2ysxa17r6pkupszrx7e] C:\DOCUME~1\TROY~1.TRO\LOCALS~1\Temp\oxzlsphc.exe
    O4 - HKCU\..\Run: [d9769sf9q6avn8io1dwwsvh8m68unt8r74] C:\DOCUME~1\TROY~1.TRO\LOCALS~1\Temp\j31pxtpkamzw.exe
    O4 - HKCU\..\Run: [csq7rpvzbdh9y36gj5i4pnz0mfp2mt5f] C:\DOCUME~1\TROY~1.TRO\LOCALS~1\Temp\qh5ev2or2nbc7.exe
    O4 - HKCU\..\Run: [gvjlsek7hc2t] C:\DOCUME~1\TROY~1.TRO\LOCALS~1\Temp\ltn9ezb5qt.exe
    O4 - HKCU\..\Run: [a5krope5a] C:\DOCUME~1\TROY~1.TRO\LOCALS~1\Temp\ggwgt2v7.exe
    O4 - HKCU\..\Run: [pl7cjhwm2nxt3xcvg2begtapeyhr3itr0ev0rt9a5] C:\DOCUME~1\TROY~1.TRO\LOCALS~1\Temp\je30fhore.exe
    O4 - HKCU\..\Run: [whdsodp983] C:\DOCUME~1\TROY~1.TRO\LOCALS~1\Temp\yc3hs7my.exe
    O4 - HKCU\..\Run: [t3y5eef5lp63caxtp1arnrdyp66zs] C:\DOCUME~1\TROY~1.TRO\LOCALS~1\Temp\ltz6js5ms5v.exe
    O4 - HKCU\..\Run: [m9uq5gan4ut5cih5knptg8n83kzzy72v] C:\DOCUME~1\TROY~1.TRO\LOCALS~1\Temp\ek31l0d.exe
    O4 - HKCU\..\Run: [npm243282x62g2mo6xk7wfhbs4q42fk6aym] C:\DOCUME~1\TROY~1.TRO\LOCALS~1\Temp\nzsun636593sq.exe
    O4 - HKCU\..\Run: [vv1woh76hw2yf5cj0isyr0h2ziy6b9d5] C:\DOCUME~1\TROY~1.TRO\LOCALS~1\Temp\a59cp43.exe
    O4 - HKCU\..\Run: [w919s21vnpoy4gybgzvjvz3c1aqnz160otc6mkm] C:\DOCUME~1\TROY~1.TRO\LOCALS~1\Temp\zrplnjhhb13.exe
    O4 - HKCU\..\Run: [q2gwxrvntv8vq29d72egka2x6h3f2xgheeg5n59m] C:\DOCUME~1\TROY~1.TRO\LOCALS~1\Temp\pcd6bw.exe
    O4 - HKCU\..\Run: [fhoqclbhtgte7wqdja7s] C:\DOCUME~1\TROY~1.TRO\LOCALS~1\Temp\j5ppvq.exe
    O4 - HKCU\..\Run: [a01bgj3myijqtdujlhg9jghfw0w4xad97s97mx] C:\DOCUME~1\TROY~1.TRO\LOCALS~1\Temp\w7remkdboalh2.exe
    O4 - HKCU\..\Run: [xivgu8ow5k4es3p06oec6dzz845nx5n1] C:\DOCUME~1\TROY~1.TRO\LOCALS~1\Temp\zu2kiqqx6.exe
    O4 - HKCU\..\Run: [nksqp7pok96xd5lo670w4ieqkgw4opo2ihnwjas] C:\DOCUME~1\TROY~1.TRO\LOCALS~1\Temp\lmzbmti.exe
    O4 - HKCU\..\Run: [fqigmqg3prx] C:\DOCUME~1\TROY~1.TRO\LOCALS~1\Temp\a8bbsy96.exe
    O4 - HKCU\..\Run: [t2q9m4tj4duvycz4jvxmswc9czw9vvqm3tj7s00vpxclkp] C:\DOCUME~1\TROY~1.TRO\LOCALS~1\Temp\qdw3l6cf9sj18.exe
    O4 - HKCU\..\Run: [l3mj25f6bqhxum2r6a680i4gq9ljqi2z1qq6i6utl6u1k] C:\DOCUME~1\TROY~1.TRO\LOCALS~1\Temp\xwyp61.exe
    O4 - HKCU\..\Run: [qtfgwokeprkjfpc5s5c0u1d8] C:\DOCUME~1\TROY~1.TRO\LOCALS~1\Temp\cb7yw0t6tjq06.exe
    O4 - HKCU\..\Run: [eykgdh9jxc1iedv0109] C:\DOCUME~1\TROY~1.TRO\LOCALS~1\Temp\p0syv5ajlk5v.exe
    O4 - HKCU\..\Run: [b90gh4jhnso1denxd2x7on4j83] C:\DOCUME~1\TROY~1.TRO\LOCALS~1\Temp\jw1ofdx34s.exe
    O4 - HKCU\..\Run: [kmmnjciu2javwxx1wq2pclg0opdlzavlvhz0iu27p] C:\DOCUME~1\TROY~1.TRO\LOCALS~1\Temp\k83huyxj251v.exe
    O4 - HKCU\..\Run: [ywn1b1f38pxw8yzni57ludop9aq46w] C:\DOCUME~1\TROY~1.TRO\LOCALS~1\Temp\gsvcs4cval.exe
    O4 - HKCU\..\Run: [ysx64m1bboc7k2c8k82km166ans95trelb762j] C:\DOCUME~1\TROY~1.TRO\LOCALS~1\Temp\lnscs99.exe
    O4 - HKCU\..\Run: [i6lm6fs7qs] C:\DOCUME~1\TROY~1.TRO\LOCALS~1\Temp\msdnrre5pv9gb.exe
    O4 - HKCU\..\Run: [u6xdprx8f3m19sqfk7jb324irn2f079] C:\DOCUME~1\TROY~1.TRO\LOCALS~1\Temp\wddntgtp.exe
    O4 - HKCU\..\Run: [qifkypqzgxo2ajwfyffwifn] C:\DOCUME~1\TROY~1.TRO\LOCALS~1\Temp\mumfppkz.exe
    O4 - HKCU\..\Run: [rz0pejtgruxuuk1ms09z0k9u7au9i9509] C:\DOCUME~1\TROY~1.TRO\LOCALS~1\Temp\s4qk9njze.exe
    O4 - HKCU\..\Run: [tf033b6qskm1yv8kigms1g] C:\DOCUME~1\TROY~1.TRO\LOCALS~1\Temp\hbueef9u.exe
    O4 - HKCU\..\Run: [jbm25ac6j8cydo2mmqr08buhj2y7ra8nmdaji9igo81dx8] C:\DOCUME~1\TROY~1.TRO\LOCALS~1\Temp\b1vddzpuc9pmy.exe
    O4 - HKCU\..\Run: [elywm54a9peksg8p3lnmx3xrcc2nwsko] C:\DOCUME~1\TROY~1.TRO\LOCALS~1\Temp\ri45q8g057wsv.exe
    O4 - HKCU\..\Run: [z564rzbwntb01t91] C:\DOCUME~1\TROY~1.TRO\LOCALS~1\Temp\zu48buyf.exe
    O4 - HKCU\..\Run: [u10q750o7q79kh8] C:\DOCUME~1\TROY~1.TRO\LOCALS~1\Temp\o182gmo.exe
    O4 - HKCU\..\Run: [n0rjgrj35u623g8uvdiuufuf3q6nthq7] C:\DOCUME~1\TROY~1.TRO\LOCALS~1\Temp\hgqcpdnf.exe
    O4 - HKCU\..\Run: [iqgxkktfibmkletlxlowxu445x12hnk1k1q28tr6jghjyi63] C:\DOCUME~1\TROY~1.TRO\LOCALS~1\Temp\xxz4lmxl.exe
    O4 - HKCU\..\Run: [rh1m2sdutc151vjt47f] C:\DOCUME~1\TROY~1.TRO\LOCALS~1\Temp\kstpmmmkm.exe
    O4 - HKCU\..\Run: [q1jms2ep8ujoguk8l8aid1d02pj93gn9k40] C:\DOCUME~1\TROY~1.TRO\LOCALS~1\Temp\yut8swowpk.exe
    O4 - HKCU\..\Run: [jdc4kepk5wvjqv] C:\DOCUME~1\TROY~1.TRO\LOCALS~1\Temp\ekb28m86g.exe
    O4 - HKCU\..\Run: [abt4bj8mtnnm8ruvqsacd189tqdtwglak0twnx4iyxlebqvxe8] C:\DOCUME~1\TROY~1.TRO\LOCALS~1\Temp\aadoa4hp5r.exe
    O4 - HKCU\..\Run: [mjd8h9lagnqam46j262yiym6xpstv2d8iz8vpg7hji3gu1w] C:\DOCUME~1\TROY~1.TRO\LOCALS~1\Temp\g0220cda3sr.exe
    O4 - HKCU\..\Run: [vb60pydkp7lbe4s6] C:\DOCUME~1\TROY~1.TRO\LOCALS~1\Temp\z6vk7hocngjm.exe
    O4 - HKCU\..\Run: [yj04nkuv5h4wc] C:\DOCUME~1\TROY~1.TRO\LOCALS~1\Temp\r22l6mf3parl.exe
    O4 - HKCU\..\Run: [rruq5akrr8f3z307lnjc9hc] C:\DOCUME~1\TROY~1.TRO\LOCALS~1\Temp\yooy1nyi.exe
    O4 - HKCU\..\Run: [tujdlgjjm] C:\DOCUME~1\TROY~1.TRO\LOCALS~1\Temp\hy3zmrskx.exe
    O4 - HKCU\..\Run: [ace9jskssrl1sculw8jp2aucb468ilvt] C:\DOCUME~1\TROY~1.TRO\LOCALS~1\Temp\ze77qrt3swg.exe
    O4 - HKCU\..\Run: [de2u9j3c3d09vq795fcepw5x9m2w3yhtvepxnjls1iv] C:\DOCUME~1\TROY~1.TRO\LOCALS~1\Temp\nx7qd1vwvaqs.exe
    O4 - HKCU\..\Run: [eykelw8k0otwhxrffwifi8qwka7i7n] C:\DOCUME~1\TROY~1.TRO\LOCALS~1\Temp\xyg7f1oz5.exe
    O4 - HKCU\..\Run: [i8men3eob4p3uk7qm6zk8ukmjpw58czzsmllov8] C:\DOCUME~1\TROY~1.TRO\LOCALS~1\Temp\eo8fgbb34m5nh.exe
    O4 - HKCU\..\Run: [huuahko69f2drttnqa357l3a2gwdkmwr2nf4n] C:\DOCUME~1\TROY~1.TRO\LOCALS~1\Temp\og30vltl6aa92.exe
    O4 - HKCU\..\Run: [jjqck21xa1m81fig666xufzqw4g9wjj5o3cwzb] C:\DOCUME~1\TROY~1.TRO\LOCALS~1\Temp\wkwgwg2ungyg1.exe
    O4 - HKCU\..\Run: [hg0ytg2kh4inve39xnuqyce29ld] C:\DOCUME~1\TROY~1.TRO\LOCALS~1\Temp\v5fi806.exe
    O4 - HKCU\..\Run: [n8028jk3prgul5t8evct] C:\DOCUME~1\TROY~1.TRO\LOCALS~1\Temp\ihgqlbqs89.exe
    O4 - HKCU\..\Run: [hm1ygmn695kh] C:\DOCUME~1\TROY~1.TRO\LOCALS~1\Temp\bg7rwtk.exe
    O4 - HKCU\..\Run: [remyzm739fv5p6g4khoqzo3p3kxt8w8v08mm] C:\DOCUME~1\TROY~1.TRO\LOCALS~1\Temp\yw64bx5pbwoj6.exe
    O4 - HKCU\..\Run: [keb6peqcwbwq7xykhrt] C:\DOCUME~1\TROY~1.TRO\LOCALS~1\Temp\l4v0az2u1w.exe
    O4 - HKCU\..\Run: [mtin0grcdcwek31hf21vd878smifclk] C:\DOCUME~1\TROY~1.TRO\LOCALS~1\Temp\a2ch4801y.exe
    O4 - HKCU\..\Run: [jxl5xp70mayz5qtbylpamhqso] C:\DOCUME~1\TROY~1.TRO\LOCALS~1\Temp\lqek0g781.exe
    O4 - HKCU\..\Run: [brni1bfvy5vp5qq750ijx4] C:\DOCUME~1\TROY~1.TRO\LOCALS~1\Temp\ok6uury.exe
    O4 - HKCU\..\Run: [h13xgp8va5t68ul5tw9dtncnnaxuqayk3hh] C:\DOCUME~1\TROY~1.TRO\LOCALS~1\Temp\jq8yzv6p1rp.exe
    O4 - HKCU\..\Run: [l1ymvrbdnwu9s8vr1pp9wfzhjqria6ahqvmvt4u9ems8pp0r] C:\DOCUME~1\TROY~1.TRO\LOCALS~1\Temp\ru1e07fyixd.exe
    O4 - HKCU\..\Run: [w0l1c94d68nr4] C:\DOCUME~1\TROY~1.TRO\LOCALS~1\Temp\z7sqlnewg3ap7.exe
    O4 - HKCU\..\Run: [acilczb4o3n1y76ediy5] C:\DOCUME~1\TROY~1.TRO\LOCALS~1\Temp\vjdwdmst533ed.exe
    O4 - HKCU\..\Run: [zrg77u77v8vfch86v538p2ug7k2fteomhw6l] C:\DOCUME~1\TROY~1.TRO\LOCALS~1\Temp\nwr0m9v.exe
    O4 - HKCU\..\Run: [yzpq889ub3qu9m920tbxwb8lqf3] C:\DOCUME~1\TROY~1.TRO\LOCALS~1\Temp\q0xum03lc.exe
    O4 - HKCU\..\Run: [cxqbzhx42on8pbkd1q] C:\DOCUME~1\TROY~1.TRO\LOCALS~1\Temp\e2qtzsc3.exe
    O4 - HKCU\..\Run: [zqrm65jkyap9dhidlekpzm8gfx9g66am5cxfw7vkbem] C:\DOCUME~1\TROY~1.TRO\LOCALS~1\Temp\y61ohd56n.exe
    O4 - HKCU\..\Run: [sn6od0bo4tfaf65mo5ysvxehpl1cbie] C:\DOCUME~1\TROY~1.TRO\LOCALS~1\Temp\oen32k4ol.exe
    O4 - HKCU\..\Run: [yl7jlsqtkbaektumwmf1srze1a4d11qbgwyv] C:\DOCUME~1\TROY~1.TRO\LOCALS~1\Temp\i89v56i92gof.exe
    O4 - HKCU\..\Run: [r33np01uh9kd2vinkm8eb6htd1jae9odbdjdyc1] C:\DOCUME~1\TROY~1.TRO\LOCALS~1\Temp\s5640bwqtks.exe
    O4 - HKCU\..\Run: [g97tih9tpi8umjy6ntx7t314y9cdmnzbtp5yml4eu] C:\DOCUME~1\TROY~1.TRO\LOCALS~1\Temp\qj8e9odklq.exe
    O4 - HKCU\..\Run: [lntce6yxb] C:\DOCUME~1\TROY~1.TRO\LOCALS~1\Temp\mp17n47zqk.exe
    O4 - HKCU\..\Run: [ihq6n6rgn7n7yo9zehjgg8mgmcfsbhjulci20601o2dpg] C:\DOCUME~1\TROY~1.TRO\LOCALS~1\Temp\pl9c52ews.exe
    O4 - HKCU\..\Run: [ior7dsps2gc7m286lpp3vlqa08t6irtxqntd4gq] C:\DOCUME~1\TROY~1.TRO\LOCALS~1\Temp\io87esq9f1mf.exe
    O4 - HKCU\..\Run: [jc2bbpofbjz1zdse4680kd] C:\DOCUME~1\TROY~1.TRO\LOCALS~1\Temp\a1wrdxh0yvf8.exe
    O4 - HKCU\..\Run: [piusah5in6zkvtlx5mqoeesd4vtcdhe8x6lj4ea46] C:\DOCUME~1\TROY~1.TRO\LOCALS~1\Temp\pn88nmra.exe
    O4 - HKCU\..\Run: [bhpg6nztqnfmef1fcj5qqu7wxldss4i] C:\DOCUME~1\TROY~1.TRO\LOCALS~1\Temp\ysb9sr99hqj0.exe
    O4 - HKCU\..\Run: [vkki4q6yncq06d59z4c9eji0rir6goefd0009xrpm240z6hy5] C:\DOCUME~1\TROY~1.TRO\LOCALS~1\Temp\gkgpslul8.exe
    O4 - HKCU\..\Run: [jie34egrrwqnpntpfei8shmlupa58wva2vkpza] C:\DOCUME~1\TROY~1.TRO\LOCALS~1\Temp\rtlo9f.exe
    O4 - HKCU\..\Run: [py3k308paybhcvgdto2b] C:\DOCUME~1\TROY~1.TRO\LOCALS~1\Temp\jubsy1b2k82rm.exe
    O4 - HKCU\..\Run: [twbxtsofx8h7022k0ylbk9jts1ntm18goh0uzvxp6wg4vh7znq] C:\DOCUME~1\TROY~1.TRO\LOCALS~1\Temp\n9sq5h7gv8j.exe
    O4 - HKCU\..\Run: [ummpb3snilayri6px13x1cq] C:\DOCUME~1\TROY~1.TRO\LOCALS~1\Temp\ne4qlgjj.exe
    O4 - HKCU\..\Run: [e4w9phy5f30520yyorcawv4v0dz534ctf5hmvm8lqm8yy] C:\DOCUME~1\TROY~1.TRO\LOCALS~1\Temp\chnr5n.exe
    O4 - HKCU\..\Run: [s18feyxf20okoajocu4y6sc5ymize] C:\DOCUME~1\TROY~1.TRO\LOCALS~1\Temp\jpsp8k.exe
    O4 - HKCU\..\Run: [qsoi0zvf9c8m2qrkdsz] C:\DOCUME~1\TROY~1.TRO\LOCALS~1\Temp\bqitx62t32vk6.exe
    O4 - HKCU\..\Run: [cjpwxqljkuslfdasz84838hhx7] C:\DOCUME~1\TROY~1.TRO\LOCALS~1\Temp\w48wxu.exe
    O4 - HKCU\..\Run: [d7lfop50l27acbpw6zq167485d7zl] C:\DOCUME~1\TROY~1.TRO\LOCALS~1\Temp\njxklj.exe
    O4 - HKCU\..\Run: [qcqiizkaqx51qrtc0l771ihi00w4x] C:\DOCUME~1\TROY~1.TRO\LOCALS~1\Temp\d6p39ir6ld08.exe
    O4 - HKCU\..\Run: [frj7xrajgoc06hyrzwjuqhpszsa] C:\DOCUME~1\TROY~1.TRO\LOCALS~1\Temp\hv1l3e.exe
    O4 - HKCU\..\Run: [pl34uky057hhf3jfsu9hio6meuxfu9xnic57fhhdiz] C:\DOCUME~1\TROY~1.TRO\LOCALS~1\Temp\wykm6l7moku0.exe
    O4 - HKCU\..\Run: [cqj9wj42if2on8wnuoyozeygt] C:\DOCUME~1\TROY~1.TRO\LOCALS~1\Temp\vpjydhq.exe
    O4 - HKCU\..\Run: [s73womgdpc6cp023] C:\DOCUME~1\TROY~1.TRO\LOCALS~1\Temp\qjx2y1tp.exe
    O4 - HKCU\..\Run: [la9x7ajtspt9zxa5475q2] C:\DOCUME~1\TROY~1.TRO\LOCALS~1\Temp\rb2o8rjf.exe
    O4 - HKCU\..\Run: [oxs0fnzdw831two4] C:\DOCUME~1\TROY~1.TRO\LOCALS~1\Temp\e2dlqggv5qiq.exe
    O4 - HKCU\..\Run: [e0quexukmorlae40] C:\DOCUME~1\TROY~1.TRO\LOCALS~1\Temp\wihtug.exe
    O4 - HKCU\..\Run: [zdocv8farv937q6lygie0rlb60gba29] C:\DOCUME~1\TROY~1.TRO\LOCALS~1\Temp\xkmjzgjyncpca.exe
    O4 - HKCU\..\Run: [otd66m5o3jguyykwwd1m88y8dbzdbpl526gdppn9rnzf85] C:\DOCUME~1\TROY~1.TRO\LOCALS~1\Temp\zmw30n.exe
    O4 - HKCU\..\Run: [ejeatyy4j8pgx0l28cdpcm5zjru91p1rorufvoohgfls] C:\DOCUME~1\TROY~1.TRO\LOCALS~1\Temp\en1hzhe8w.exe
    O4 - HKCU\..\Run: [ub8caxufwdvsy6jj26fvgzoa4un4k40qy8gbyo] C:\DOCUME~1\TROY~1.TRO\LOCALS~1\Temp\lr32ybkn5frs.exe
    O4 - HKCU\..\Run: [q93ziq61fg98di96giwcga4hlqmbz5mfo9njp69] C:\DOCUME~1\TROY~1.TRO\LOCALS~1\Temp\f3tmype2.exe
    O4 - HKCU\..\Run: [yaoqlone5anioefpxonh074quk4] C:\DOCUME~1\TROY~1.TRO\LOCALS~1\Temp\jiakmo.exe
    O4 - HKCU\..\Run: [pbftaw7n932] C:\DOCUME~1\TROY~1.TRO\LOCALS~1\Temp\kc34ac.exe
    O4 - HKCU\..\Run: [e9oyqx0wik0ivdvf33o] C:\DOCUME~1\TROY~1.TRO\LOCALS~1\Temp\lmr2ic8.exe
    O4 - HKCU\..\Run: [hg4fpvtk73bbv24e75xy95m91qrb6w5l7de815lr169cngxtjp] C:\DOCUME~1\TROY~1.TRO\LOCALS~1\Temp\yv85s695sjsib.exe
    O4 - HKCU\..\Run: [g8h6b0u2g61imao75j137e706pwzxo] C:\DOCUME~1\TROY~1.TRO\LOCALS~1\Temp\xkq15fuu.exe
    O4 - HKCU\..\Run: [ko6qifb19dwzdby] C:\DOCUME~1\TROY~1.TRO\LOCALS~1\Temp\vubgod.exe
    O4 - HKCU\..\Run: [mjkcl0kt82dkngj] C:\DOCUME~1\TROY~1.TRO\LOCALS~1\Temp\fs5syij.exe
    O4 - HKCU\..\Run: [d1jmb19tcfv2hhj9uivcc90bfntxont97bjs0] C:\DOCUME~1\TROY~1.TRO\LOCALS~1\Temp\pb9k5pn.exe
    O4 - HKCU\..\Run: [jby9kd0xqb92iogfnjmcae8h] C:\DOCUME~1\TROY~1.TRO\LOCALS~1\Temp\kor37vzo53z.exe
    O4 - HKCU\..\Run: [f8nvryg45j5b2z61ty] C:\DOCUME~1\TROY~1.TRO\LOCALS~1\Temp\c157gijqvrc5j.exe
    O4 - HKCU\..\Run: [pvacsof4sjq15sjqqe0tbxboeol9gzru0zeha48] C:\DOCUME~1\TROY~1.TRO\LOCALS~1\Temp\n4lxrnvb.exe
    O4 - HKCU\..\Run: [zld5fu90fqi6u2monneambfsnk5wgwp98f3pcosxjrmpk2] C:\DOCUME~1\TROY~1.TRO\LOCALS~1\Temp\tjshd2ov0.exe
    O4 - HKCU\..\Run: [k8kya9lxq9i0vh49cr0q5h6rdv7hv] C:\DOCUME~1\TROY~1.TRO\LOCALS~1\Temp\zwdoeemtu9ffy.exe
    O4 - HKCU\..\Run: [jwa8s5y2zivu] C:\DOCUME~1\TROY~1.TRO\LOCALS~1\Temp\kkfra5t0galji.exe
    O4 - HKCU\..\Run: [ipgihx8r9m7xtrupibk9fdm14bovz4pg30tn6sk2] C:\DOCUME~1\TROY~1.TRO\LOCALS~1\Temp\qpisyabzq.exe
    O4 - HKCU\..\Run: [nw0mrzyhfinh91u4r] C:\DOCUME~1\TROY~1.TRO\LOCALS~1\Temp\g4y5kgr7.exe
    O4 - HKCU\..\Run: [nd565n9jqohvozkyd6bvrnfuq5d] C:\DOCUME~1\TROY~1.TRO\LOCALS~1\Temp\ktanxc4253.exe
    O4 - HKCU\..\Run: [q9p2r1h0hzkb3rytlrql8l] C:\DOCUME~1\TROY~1.TRO\LOCALS~1\Temp\nymndbg.exe
    O4 - HKCU\..\Run: [gk2wti8re6jh6vgumhoj9ut2tojklhtx95xs67roveuluaa3bm] C:\DOCUME~1\TROY~1.TRO\LOCALS~1\Temp\jj5ppvkr4.exe
    O4 - HKCU\..\Run: [pgcri2h5v5x1785z4oaszll9g7n66mywrylxghf76ehmft] C:\DOCUME~1\TROY~1.TRO\LOCALS~1\Temp\b536c6.exe
    O4 - HKCU\..\Run: [uj63cdn5vgwx8wgyrde5q54b6jtln0i1] C:\DOCUME~1\TROY~1.TRO\LOCALS~1\Temp\sga1co1x1t.exe
    O4 - HKCU\..\Run: [yz63bmyt69vy6vvyi4wiuwstk4v0tqmsh5taz6] C:\DOCUME~1\TROY~1.TRO\LOCALS~1\Temp\t1aqbu.exe
    O4 - HKCU\..\Run: [y2ksnbdrxke2nnc70iyvs6onp814md5a1eztgv582t9r8e] C:\DOCUME~1\TROY~1.TRO\LOCALS~1\Temp\n0f6usio.exe
    O4 - HKCU\..\Run: [gstn1bwqi8yt3] C:\DOCUME~1\TROY~1.TRO\LOCALS~1\Temp\b0g66oq.exe
    O4 - HKCU\..\Run: [pa1q6ritdddz4z2j42xc1t8v22hk] C:\DOCUME~1\TROY~1.TRO\LOCALS~1\Temp\wgykcg0.exe
    O4 - HKCU\..\Run: [olua4r8b11tvb1cqahove86uhvbwmyry6q0iiu8sg46] C:\DOCUME~1\TROY~1.TRO\LOCALS~1\Temp\xetszmmkrf.exe
    O4 - HKCU\..\Run: [l5uhq6m0nb3infxq23xz] C:\DOCUME~1\TROY~1.TRO\LOCALS~1\Temp\ro0d3w.exe
    O4 - HKCU\..\Run: [pkdpbud3pmkyznr4tjwjqugwikmpwqyea] C:\DOCUME~1\TROY~1.TRO\LOCALS~1\Temp\tqzxv3rm6hk0v.exe
    O4 - HKCU\..\Run: [iqxy76r830a1] C:\DOCUME~1\TROY~1.TRO\LOCALS~1\Temp\szuz4m7b5npv.exe
    O4 - HKCU\..\Run: [lmuc8nk1s5inkyuc] C:\DOCUME~1\TROY~1.TRO\LOCALS~1\Temp\icse5s1ww.exe
    O4 - HKCU\..\Run: [z6hodqbjbcng8jpxnj9huhpcs24sfppr80eeoxlo] C:\DOCUME~1\TROY~1.TRO\LOCALS~1\Temp\mww5gg.exe
    O4 - HKCU\..\Run: [l6c1ylu0syo7t] C:\DOCUME~1\TROY~1.TRO\LOCALS~1\Temp\rccvkg.exe
    O4 - HKCU\..\Run: [he66xsugfzp4i6c9f1] C:\DOCUME~1\TROY~1.TRO\LOCALS~1\Temp\fk4lb3.exe
    O4 - HKCU\..\Run: [a6wj54sv97ujor] C:\DOCUME~1\TROY~1.TRO\LOCALS~1\Temp\m2b6ufwhuimc.exe
    O4 - HKCU\..\Run: [ha2evwk5jh9xyj2ds6zqbng7biz55] C:\DOCUME~1\TROY~1.TRO\LOCALS~1\Temp\avp965frq.exe
    O4 - HKCU\..\Run: [wr5jqkabsgv1zcax0d7tp5gi3jbiug] C:\DOCUME~1\TROY~1.TRO\LOCALS~1\Temp\twzonalfauf.exe
    O4 - HKCU\..\Run: [wujl6u4ivk3qkb54sqwoik4lcq0zksno9vs] C:\DOCUME~1\TROY~1.TRO\LOCALS~1\Temp\fpn5117je6tag.exe
    O4 - HKCU\..\Run: [hc0zqjvkpfoxbq6euts084jn1iteq63dmq1cru0agsi5krkz5] C:\DOCUME~1\TROY~1.TRO\LOCALS~1\Temp\jeznegk.exe
    O4 - HKCU\..\Run: [ooxx22jqmtcw7r8whc8wdmvgyt9f1pzsp840ehc1f2eghy7] C:\DOCUME~1\TROY~1.TRO\LOCALS~1\Temp\h8drz04p.exe
    O4 - HKCU\..\Run: [qnmx8jfojzik3iip0hf7f3aozd8x] C:\DOCUME~1\TROY~1.TRO\LOCALS~1\Temp\o80jnq8t.exe
    O4 - HKCU\..\Run: [rutd8v4k42jxuj4serkf8jprr0] C:\DOCUME~1\TROY~1.TRO\LOCALS~1\Temp\wcti72hj.exe
    O4 - HKCU\..\Run: [cssei4onjjoebb49uxqna5isrpo06] C:\DOCUME~1\TROY~1.TRO\LOCALS~1\Temp\vcqofjqjxvqve.exe
    O4 - HKCU\..\Run: [a2qkufbrqk] C:\DOCUME~1\TROY~1.TRO\LOCALS~1\Temp\qsncqkf8l11j2.exe
    O4 - HKCU\..\Run: [hee8i3wywtg5w5tpy5a0436yfuy0j3nmxu97ddmkx3v60] C:\DOCUME~1\TROY~1.TRO\LOCALS~1\Temp\mlflb15.exe
    O4 - HKCU\..\Run: [wb2e24h87pqo29tkr17h09ikxvkt0zl71eyug8v5t] C:\DOCUME~1\TROY~1.TRO\LOCALS~1\Temp\nzzcdmr2zpc.exe
    O4 - HKCU\..\Run: [ox0sezbcbxrmgp601gvyt0jqicu79ae4ir0fd8d] C:\DOCUME~1\TROY~1.TRO\LOCALS~1\Temp\kld6ootcs.exe
    O4 - HKCU\..\Run: [jisz9gfxx4ff] C:\DOCUME~1\TROY~1.TRO\LOCALS~1\Temp\kvnjgd4eawh0m.exe
    O4 - HKCU\..\Run: [l5t06od6s86ei3mx1u] C:\DOCUME~1\TROY~1.TRO\LOCALS~1\Temp\b3w97h9jiq3it.exe
    O4 - HKCU\..\Run: [ekwtg87xdz2sqko5fj1hxhch6k96i3n15nyri7y] C:\DOCUME~1\TROY~1.TRO\LOCALS~1\Temp\xkjz8xbu7921.exe
    O4 - HKCU\..\Run: [lzli9wugnfu1qrbwlbzhkms48kyw3cdo040zub] C:\DOCUME~1\TROY~1.TRO\LOCALS~1\Temp\lwelknd43.exe
    O4 - HKCU\..\Run: [sg55mtjhcb7sj8cjj37p7jk465r2o4cyi1nn7v] C:\DOCUME~1\TROY~1.TRO\LOCALS~1\Temp\kiuu12rilmdva.exe
    O4 - HKCU\..\Run: [cutpwf19v72spft78ggqx2zlxrnta8phze7u5yhtg6otu68] C:\DOCUME~1\TROY~1.TRO\LOCALS~1\Temp\fqtv184g3onau.exe
    O4 - HKCU\..\Run: [xl3lprrqlmid1] C:\DOCUME~1\TROY~1.TRO\LOCALS~1\Temp\t3t3lca.exe
    O4 - HKCU\..\Run: [tw33ut3lhy8jt58qdmm956ayz3gy9vlg30titwt9f3zzr2i4o] C:\DOCUME~1\TROY~1.TRO\LOCALS~1\Temp\ikakf2.exe
    O4 - HKCU\..\Run: [a2hcacnk9xjr7uzbaqy0n9zo8x70pwppl4o8snct455nt10] C:\DOCUME~1\TROY~1.TRO\LOCALS~1\Temp\m4a2cz9vq3o.exe
    O4 - HKCU\..\Run: [h1s4042rf6] C:\DOCUME~1\TROY~1.TRO\LOCALS~1\Temp\ibcoe01vwmd1.exe
    O4 - HKCU\..\Run: [c18e3ixjlpv3b7n4gjtfnhla3u4nvipn7c2xo24oslk1o1w0ew] C:\DOCUME~1\TROY~1.TRO\LOCALS~1\Temp\tdv7kr3oz4dsk.exe
    O4 - HKCU\..\Run: [w396ssoesw0qevm7a72e] C:\DOCUME~1\TROY~1.TRO\LOCALS~1\Temp\hac6hk0.exe
    O4 - HKCU\..\Run: [ozlqfdlz5oi16z] C:\DOCUME~1\TROY~1.TRO\LOCALS~1\Temp\t8cnbt.exe
    O4 - HKCU\..\Run: [iyl37ucsk0694dofxg5o34t1vygivt1300y0vt] C:\DOCUME~1\TROY~1.TRO\LOCALS~1\Temp\uihl2az.exe
    O4 - HKCU\..\Run: [b752i4q4bdfezh1cqh2yhbhw9] C:\DOCUME~1\TROY~1.TRO\LOCALS~1\Temp\a2054o48fxjhi.exe
    O4 - HKCU\..\Run: [cedd2y63vut4rlc3v9h6u0p17qzx] C:\DOCUME~1\TROY~1.TRO\LOCALS~1\Temp\em061lo09g.exe
    O4 - HKCU\..\Run: [eqng6jaam] C:\DOCUME~1\TROY~1.TRO\LOCALS~1\Temp\bho6lmcxgakz0.exe
    O4 - HKCU\..\Run: [emuy03mx2u2k178ltncbvp0rqe1sm103clj6fjb] C:\DOCUME~1\TROY~1.TRO\LOCALS~1\Temp\kqzx8dkf04.exe
    O4 - HKCU\..\Run: [r9rchwdp2pnmemquz7wyu4mpl8ccg3291j77vj0k0wj6cuo] C:\DOCUME~1\TROY~1.TRO\LOCALS~1\Temp\l92r0fuj8tx6a.exe
    O4 - HKCU\..\Run: [a87e00nj4hudq0jsnu3lfdoe8m4hmwins7m4yfn7t5jf320bkn] C:\DOCUME~1\TROY~1.TRO\LOCALS~1\Temp\zczhbk60.exe
    O4 - HKCU\..\Run: [ecl13478bxkpar0p4efxacp7snkucmkjs58l1o7nrbdq5] C:\DOCUME~1\TROY~1.TRO\LOCALS~1\Temp\e6gd6zfslm6q.exe
    O4 - HKCU\..\Run: [f0f5i16vkwhmfhvhuyju1pvbctwaz] C:\DOCUME~1\TROY~1.TRO\LOCALS~1\Temp\zj4e546j4gi0.exe
    O4 - HKCU\..\Run: [ni49g6grth3jktp5c8a4vyazrepwq936e674c1gixqfv6i3] C:\DOCUME~1\TROY~1.TRO\LOCALS~1\Temp\guthui9bj.exe
    O4 - HKCU\..\Run: [x7g224npqcioarw9739lf0g6b9aopt8cs8ebi83] C:\DOCUME~1\TROY~1.TRO\LOCALS~1\Temp\i4lq8wzsu6.exe
    O4 - HKCU\..\Run: [lxiwxkutp0lz31mwfj2q5f9ce6] C:\DOCUME~1\TROY~1.TRO\LOCALS~1\Temp\yy47jgmute.exe
    O4 - HKCU\..\Run: [kdvd45ufipb6dmmc342h1nt5mxzpv9y] C:\DOCUME~1\TROY~1.TRO\LOCALS~1\Temp\ihkwxoen.exe
    O4 - HKCU\..\Run: [kwwcqzv46ow3a5j8uqh8dpdc6bwhqdyk] C:\DOCUME~1\TROY~1.TRO\LOCALS~1\Temp\rulmk5x.exe
    O4 - HKCU\..\Run: [iw35n1wt2v4646v97mn36zsxs7g1] C:\DOCUME~1\TROY~1.TRO\LOCALS~1\Temp\cdl5qfz8.exe
    O4 - HKCU\..\Run: [lsekw79xjm7xxva5] C:\DOCUME~1\TROY~1.TRO\LOCALS~1\Temp\hghxmw.exe
    O4 - HKCU\..\Run: [pswkp0coekl08k4flcrbcv43cqegks7v9w] C:\DOCUME~1\TROY~1.TRO\LOCALS~1\Temp\i9ta8u6.exe
    O4 - HKCU\..\Run: [u177euzcu46ffpc0dz5sb26guu570sr] C:\DOCUME~1\TROY~1.TRO\LOCALS~1\Temp\gq63s69kk8l.exe
    O4 - HKCU\..\Run: [qp5xa1emdu5e1a1sq74mun91qfveim2npwxuwxsuwajarugh] C:\DOCUME~1\TROY~1.TRO\LOCALS~1\Temp\zwi2zbkm4fsc.exe
    O4 - HKCU\..\Run: [t85mxx5lz6q45btedoajuxz91ooit6al4gcbuvvri6q] C:\DOCUME~1\TROY~1.TRO\LOCALS~1\Temp\cbp5lqd6q84wg.exe
    O4 - HKCU\..\Run: [myz9lxe6tpb2fv03bt7t25qunhwk0y5m5lh9stk0vh] C:\DOCUME~1\TROY~1.TRO\LOCALS~1\Temp\qc1xfsg9ijvmv.exe
    O4 - HKCU\..\Run: [wjd9a6lblerqhj6i1usn144c1lu6bt6re1kyve4jd] C:\DOCUME~1\TROY~1.TRO\LOCALS~1\Temp\rm6v69.exe
    O4 - HKCU\..\Run: [onebofrxbbvg80pdapalpzmah5xgvvs0r1abq2n1s1] C:\DOCUME~1\TROY~1.TRO\LOCALS~1\Temp\ygudz4pizp2cb.exe
    O4 - HKCU\..\Run: [we1a5fkiuez4myjunsdq7lql6gfjisp0ertbw6put47i261stq] C:\DOCUME~1\TROY~1.TRO\LOCALS~1\Temp\m4rf9unmy9ra.exe
    O4 - HKCU\..\Run: [qkfxzf9q5648rwg489wk4qyb257n2xny88g2d11vr] C:\DOCUME~1\TROY~1.TRO\LOCALS~1\Temp\rnc0d2z6u.exe
    O4 - HKCU\..\Run: [phxr4orvee61h7mnig8m93btq] C:\DOCUME~1\TROY~1.TRO\LOCALS~1\Temp\qbgopf16r8vzu.exe
    O4 - HKCU\..\Run: [ls29nog84c998wv3qp88] C:\DOCUME~1\TROY~1.TRO\LOCALS~1\Temp\rllmgf.exe
    O4 - HKCU\..\Run: [g8904jg4evs353vig1bb0wj81ptmzi5p] C:\DOCUME~1\TROY~1.TRO\LOCALS~1\Temp\wk52f6.exe
    O4 - HKCU\..\Run: [kr1ak7vddtn8gyyyfab7b7ij69r] C:\DOCUME~1\TROY~1.TRO\LOCALS~1\Temp\cvf1d13es.exe
    O4 - HKCU\..\Run: [vunapyi8nxiogbs1n8cvqaqy1ids0efewghc] C:\DOCUME~1\TROY~1.TRO\LOCALS~1\Temp\wf2008pen.exe
    O4 - HKCU\..\Run: [ff406di6ujiuitzyixp9ygt736y3titals9jpo] C:\DOCUME~1\TROY~1.TRO\LOCALS~1\Temp\fjnr33rm0z.exe
    O4 - HKCU\..\Run: [c779htot28tazrcahiv9c77vrkow05sqii5] C:\DOCUME~1\TROY~1.TRO\LOCALS~1\Temp\urfrwpwnz0.exe
    O4 - HKCU\..\Run: [jkwe1jwhmxpscoxfsi8fhuop9ra37d2tvrlg6s] C:\DOCUME~1\TROY~1.TRO\LOCALS~1\Temp\lith0yq4ts3.exe
    O4 - HKCU\..\Run: [h4mrcjdq27gobjarjppi5b3nnvnmpew714avr] C:\DOCUME~1\TROY~1.TRO\LOCALS~1\Temp\gllnwnpn.exe
    O4 - HKCU\..\Run: [t9jnul2c7dpoxhbhjz3zurdii8fvhb6747lzwjy] C:\DOCUME~1\TROY~1.TRO\LOCALS~1\Temp\p86ezirv3.exe
    O4 - HKCU\..\Run: [mbtvw7oygv7072rf] C:\DOCUME~1\TROY~1.TRO\LOCALS~1\Temp\c92oew22pwb.exe
    O4 - HKCU\..\Run: [quo1s9rztm8magkkwnsnfs9ygv28os] C:\DOCUME~1\TROY~1.TRO\LOCALS~1\Temp\kdv4frbb62i.exe
    O4 - HKCU\..\Run: [hz4bedrmwomjtrqt] C:\DOCUME~1\TROY~1.TRO\LOCALS~1\Temp\jmq6oarj58.exe
    O4 - HKCU\..\Run: [autfnq084vq6epgmlekn9kgruz8z58a760tqzbgaugazzcyo] C:\DOCUME~1\TROY~1.TRO\LOCALS~1\Temp\vfvnl1d49kia.exe
    O4 - HKCU\..\Run: [twgyrtouamwktgozfdrade5z2d2h3rdcn3wwr2kr2ihad] C:\DOCUME~1\TROY~1.TRO\LOCALS~1\Temp\mxigili9.exe
    O4 - HKCU\..\Run: [xknea5dqcpexkha2anwz6d12b0wdjl1wjftj5ojodbhh] C:\DOCUME~1\TROY~1.TRO\LOCALS~1\Temp\u1uw2gri.exe
    O4 - HKCU\..\Run: [wsbmtsmqx] C:\DOCUME~1\TROY~1.TRO\LOCALS~1\Temp\jk8rka5d.exe
    O4 - HKCU\..\Run: [lv2hm6y9c9q2hd3eh2ibw] C:\DOCUME~1\TROY~1.TRO\LOCALS~1\Temp\pzfbppyxq.exe
    O4 - HKCU\..\Run: [nbnihzysnnwvxk0z74nx28b5io5o997x] C:\DOCUME~1\TROY~1.TRO\LOCALS~1\Temp\f0fagvxwh48gj.exe
    O4 - HKCU\..\Run: [in9mwqvhqyyjl0yevm5pbyemr26sify] C:\DOCUME~1\TROY~1.TRO\LOCALS~1\Temp\p9avv5yejsd24.exe
    O4 - HKCU\..\Run: [yafoan0itci2m0yhro0hooewp6ujc0ptua46vegu9yyf] C:\DOCUME~1\TROY~1.TRO\LOCALS~1\Temp\jprbtra.exe
    O4 - HKCU\..\Run: [kapqbul1ovlo83ikrvr6ckxdv1or0bm] C:\DOCUME~1\TROY~1.TRO\LOCALS~1\Temp\p4yvf6mb.exe
    O4 - HKCU\..\Run: [g3irszw53skby2w0dl5hj41amvuvkhy3] C:\DOCUME~1\TROY~1.TRO\LOCALS~1\Temp\h05febd2.exe
    O4 - HKCU\..\Run: [z7hgfm3m4q5mbygtkkb18wwl8nx] C:\DOCUME~1\TROY~1.TRO\LOCALS~1\Temp\jb6hza144d.exe
    O4 - HKCU\..\Run: [bw3jdxqvbe1l9kxjk15qaol34k2nwu2pv] C:\DOCUME~1\TROY~1.TRO\LOCALS~1\Temp\hbnqi4xm.exe
    O4 - HKCU\..\Run: [tk6lbqv3opiv8i8wbyec79txkrev06q4mom] C:\DOCUME~1\TROY~1.TRO\LOCALS~1\Temp\r3ibxxf4.exe
    O4 - HKCU\..\Run: [nuf13iipulh87kf1pkz8a1blv1ycajj8vf] C:\DOCUME~1\TROY~1.TRO\LOCALS~1\Temp\sun9oezf7.exe
    O4 - HKCU\..\Run: [uzogkkq5gjukp] C:\DOCUME~1\TROY~1.TRO\LOCALS~1\Temp\bckgmp9gyb.exe
    O4 - HKCU\..\Run: [eu5z7clxkx82mgh8udwb00n14xic8dning] C:\DOCUME~1\TROY~1.TRO\LOCALS~1\Temp\v91wkb4ajtbe.exe
    O4 - HKCU\..\Run: [ewrgtijsc8weptd25nu75u528976ozpzz5lqv5avc9k48y] C:\DOCUME~1\TROY~1.TRO\LOCALS~1\Temp\kmzhqt3i1od.exe
    O4 - HKCU\..\Run: [ycvenww78unhq4i5hvac375k8zxhwaa0h303x1lveyzjnw] C:\DOCUME~1\TROY~1.TRO\LOCALS~1\Temp\wfny4kpm50r7i.exe
    O4 - HKCU\..\Run: [kpoy5d0baeupy5gf5t7w9mt] C:\DOCUME~1\TROY~1.TRO\LOCALS~1\Temp\plzgbp.exe
    O4 - HKCU\..\Run: [ya0uh3dgo] C:\DOCUME~1\TROY~1.TRO\LOCALS~1\Temp\fj38bc4iwopzq.exe
    O4 - HKCU\..\Run: [azwwklq7p7] C:\DOCUME~1\TROY~1.TRO\LOCALS~1\Temp\knfovourduwpp.exe
    O4 - HKCU\..\Run: [d6aocjct2lvf542akgjmvm6pv6ql5eawwr68co5s] C:\DOCUME~1\TROY~1.TRO\LOCALS~1\Temp\rr5tnhchtp.exe
    O4 - HKCU\..\Run: [za8w00pr41sksch99js2njdtag3b1p6vg2xfgl4xhkfe7b8b] C:\DOCUME~1\TROY~1.TRO\LOCALS~1\Temp\xq93eaftvx844.exe
    O4 - HKCU\..\Run: [bog4caxl1b0b6rqbjwwnf2] C:\DOCUME~1\TROY~1.TRO\LOCALS~1\Temp\i4g7ugd49.exe
    O4 - HKCU\..\Run: [yv76d82tol0zbu8mxcjhgm7zybnrybtsxikf] C:\DOCUME~1\TROY~1.TRO\LOCALS~1\Temp\p3nonxz.exe
    O4 - HKCU\..\Run: [gtzgl7eg91fjyxgjkp6] C:\DOCUME~1\TROY~1.TRO\LOCALS~1\Temp\pdircdk27s1.exe
    O4 - HKCU\..\Run: [chenf4vditgxctz5drjcfis9h7gua4w8qg9bbsoma80t7gtk] C:\DOCUME~1\TROY~1.TRO\LOCALS~1\Temp\fl7nbfdh.exe
    O4 - HKCU\..\Run: [wczm5tdyvip2hp4ppkr63439o9k6e1mgbo8i83y9akpiv87vj] C:\DOCUME~1\TROY~1.TRO\LOCALS~1\Temp\yrj5ikoj3.exe
    O4 - HKCU\..\Run: [e0d469nh7jp687lidxjdmw2xalmm] C:\DOCUME~1\TROY~1.TRO\LOCALS~1\Temp\zsmntc4ypfh.exe
    O4 - HKCU\..\Run: [ucktrqp29jmyeaj6529toi3q89ze5riubw] C:\DOCUME~1\TROY~1.TRO\LOCALS~1\Temp\pepz9bctpg57.exe
    O4 - HKCU\..\Run: [bmi03tdo4] C:\DOCUME~1\TROY~1.TRO\LOCALS~1\Temp\fx65yhm.exe
    O4 - HKCU\..\Run: [zpr0g8b0krq0qp1uh] C:\DOCUME~1\TROY~1.TRO\LOCALS~1\Temp\yvky6ad6rdlel.exe
    O4 - HKCU\..\Run: [b729ry45jih62o70yosasr54l8c5tx22a] C:\DOCUME~1\TROY~1.TRO\LOCALS~1\Temp\qrrzmfnxphjg1.exe
    O4 - HKCU\..\Run: [cjgy9t16uahca1ukonmfrdl13pjmxo] C:\DOCUME~1\TROY~1.TRO\LOCALS~1\Temp\wng48ofg355p.exe
    O4 - HKCU\..\Run: [y5jma4hwshcbg] C:\DOCUME~1\TROY~1.TRO\LOCALS~1\Temp\qnq6ypfam.exe
    O4 - HKCU\..\Run: [jwtgs8mikgizu0y6l1tx74yjammoyetw966w0f] C:\DOCUME~1\TROY~1.TRO\LOCALS~1\Temp\jfeolt2.exe
    O4 - HKCU\..\Run: [jf9nz449tkw7osntj88chqj1khc5kgd6dn9i97] C:\DOCUME~1\TROY~1.TRO\LOCALS~1\Temp\xnuy5fjee.exe
    O4 - HKCU\..\Run: [sifvtie80oja3oqw1whqhtgpdklt11jbc0lu7jp451arv] C:\DOCUME~1\TROY~1.TRO\LOCALS~1\Temp\rsckz8u7nw8.exe
    O4 - HKCU\..\Run: [rjd8ji7uo0m019i373ojrv] C:\DOCUME~1\TROY~1.TRO\LOCALS~1\Temp\gw19c5.exe
    O4 - HKCU\..\Run: [nx1lhrqnbn1qwd0uejsefoxbjmg] C:\DOCUME~1\TROY~1.TRO\LOCALS~1\Temp\bys0mng.exe
    O4 - HKCU\..\Run: [l4x9ntnz93reu9965wrh3o] C:\DOCUME~1\TROY~1.TRO\LOCALS~1\Temp\bnxrvp.exe
    O4 - HKCU\..\Run: [zw4z56lf49etf4vsraz0x182yv6l7so46] C:\DOCUME~1\TROY~1.TRO\LOCALS~1\Temp\xa9qhl8.exe
    O4 - HKCU\..\Run: [hz05etqkihldyxvehega1dbq8cewj2tg9205bd1gyey4n8vm0] C:\DOCUME~1\TROY~1.TRO\LOCALS~1\Temp\ypaojfjzpkp.exe
    O4 - HKCU\..\Run: [uj1bx8bofnuo4astcnqon6h3s78ne1jq3us5mvzag5] C:\DOCUME~1\TROY~1.TRO\LOCALS~1\Temp\ncqwrhdcyrc.exe
    O4 - HKCU\..\Run: [bov5t8swqalfh7fr0grm6cdj25bu7k6lmkmbf845xd1l] C:\DOCUME~1\TROY~1.TRO\LOCALS~1\Temp\xv645pomj.exe
    O4 - HKCU\..\Run: [ybo9xc111xulrljt8dpj4ieubrq84a] C:\DOCUME~1\TROY~1.TRO\LOCALS~1\Temp\ekmno3.exe
    O4 - HKCU\..\Run: [qelcjdb57rbh7fyjiyukjxsln53jkh] C:\DOCUME~1\TROY~1.TRO\LOCALS~1\Temp\kgu7zkd46.exe
    O4 - HKCU\..\Run: [hj9wawhycskqomio6pf7w2g6x37ozk1p9vjkgwc68] C:\DOCUME~1\TROY~1.TRO\LOCALS~1\Temp\ovb5nj9.exe
    O4 - HKCU\..\Run: [e5w84fpq626zqithmsqrsg] C:\DOCUME~1\TROY~1.TRO\LOCALS~1\Temp\i17ym7b3211.exe
    O4 - HKCU\..\Run: [yn5zk7kf5m2ql7ffdsjjch6wh5a9is4324w5fmiiosk3dbon] C:\DOCUME~1\TROY~1.TRO\LOCALS~1\Temp\ipjy26n6.exe
    O4 - HKCU\..\Run: [txuh05ku1joee5qlqi] C:\DOCUME~1\TROY~1.TRO\LOCALS~1\Temp\g9hy1xki39hn5.exe
    O4 - HKCU\..\Run: [a271cjoiz4kxj] C:\DOCUME~1\TROY~1.TRO\LOCALS~1\Temp\ysptba.exe
    O4 - HKCU\..\Run: [k9yealznoxti9a6vg] C:\DOCUME~1\TROY~1.TRO\LOCALS~1\Temp\peezf201id.exe
    O4 - HKCU\..\Run: [xmyplwk2i4oahfnivftpbbofioce] C:\DOCUME~1\TROY~1.TRO\LOCALS~1\Temp\sp6q9wrr.exe
    O4 - HKCU\..\Run: [s59gt91e3ztqqhhwl77m1g3] C:\DOCUME~1\TROY~1.TRO\LOCALS~1\Temp\adstjzd4iey6l.exe
    O4 - HKCU\..\Run: [rafjlpxknkn7kywrrb54nl8bs2gcwjcfufzfuiekm] C:\DOCUME~1\TROY~1.TRO\LOCALS~1\Temp\ha20vqrs1o.exe
    O4 - HKCU\..\Run: [gaq5yw0qgubm] C:\DOCUME~1\TROY~1.TRO\LOCALS~1\Temp\z9a6gckr.exe
    O4 - HKCU\..\Run: [gzr4u3aoua33y686wbtlnjsxbpnvkz37u6v] C:\DOCUME~1\TROY~1.TRO\LOCALS~1\Temp\gt7uhidx32r.exe
    O4 - HKCU\..\Run: [jdstbvn4ha6h4mklfhifefduoi] C:\DOCUME~1\TROY~1.TRO\LOCALS~1\Temp\zzfmawkaqekj.exe
    O4 - HKCU\..\Run: [mi70p1mhg3tzxkdocw5iphgsdsdr3en2d] C:\DOCUME~1\TROY~1.TRO\LOCALS~1\Temp\oxf34mih4w1.exe
    O4 - HKCU\..\Run: [nkovcwtvwtbvpmet] C:\DOCUME~1\TROY~1.TRO\LOCALS~1\Temp\h24bweq.exe
    O4 - HKCU\..\Run: [v5dtbvltbof8] C:\DOCUME~1\TROY~1.TRO\LOCALS~1\Temp\kdfl7phpawxgb.exe
    O4 - HKCU\..\Run: [tf8921v6g1nxqe1yhm70icsc91zih] C:\DOCUME~1\TROY~1.TRO\LOCALS~1\Temp\kldap1ii.exe
    O4 - HKCU\..\Run: [dmkjpdmpts5w6n0vxzrvp7rklcfq5izb36ov51taduu5bjoa31] C:\DOCUME~1\TROY~1.TRO\LOCALS~1\Temp\axeilc2ulvd.exe
    O4 - HKCU\..\Run: [e2254gpn39fvbtnr6sloi0d1amkfl7imvucr23dhj] C:\DOCUME~1\TROY~1.TRO\LOCALS~1\Temp\wj4sq4.exe
    O4 - HKCU\..\Run: [yj06m6ibbgy] C:\DOCUME~1\TROY~1.TRO\LOCALS~1\Temp\ic994var.exe
    O4 - HKCU\..\Run: [gqc2bf5ksved2wfw8x3jue8v] C:\DOCUME~1\TROY~1.TRO\LOCALS~1\Temp\p6xax9z.exe
    O4 - HKCU\..\Run: [koz4m1daac1g4tk] C:\DOCUME~1\TROY~1.TRO\LOCALS~1\Temp\oswjeod34we.exe
    O4 - HKCU\..\Run: [qh25hfcjlpn35ihm79] C:\DOCUME~1\TROY~1.TRO\LOCALS~1\Temp\hy8ilao5oklw.exe
    O4 - HKCU\..\Run: [l40tczneqvdet8cfkhilw08ljsrnlr1] C:\DOCUME~1\TROY~1.TRO\LOCALS~1\Temp\a9d08eba1e.exe
    O4 - HKCU\..\Run: [lcpo17qhn85pgjbpw8mrbl0hyps] C:\DOCUME~1\TROY~1.TRO\LOCALS~1\Temp\kfj07b9ox.exe
    O4 - HKCU\..\Run: [mu300bl44lw3qrsl1jw] C:\DOCUME~1\TROY~1.TRO\LOCALS~1\Temp\n4s7socj.exe
    O4 - HKCU\..\Run: [w5a5giv2vnlyfn9n0eqgshfkbl5bhsym79ed0yse7w4] C:\DOCUME~1\TROY~1.TRO\LOCALS~1\Temp\ikpv3pk8.exe
    O4 - HKCU\..\Run: [j4p3v3aw2p7dwe] C:\DOCUME~1\TROY~1.TRO\LOCALS~1\Temp\pofjvinokdt82.exe
    O4 - HKCU\..\Run: [gcbl2k5vufc08g9wtm6t8pxalmb4chx4kpa3p] C:\DOCUME~1\TROY~1.TRO\LOCALS~1\Temp\titlyv.exe
    O4 - HKCU\..\Run: [m4tgd6usteacj72mcryr4n2bfex0hduvl6fefhmfbr8or] C:\DOCUME~1\TROY~1.TRO\LOCALS~1\Temp\zo2sjprscesis.exe
    O4 - HKCU\..\Run: [www8dk9vy] C:\DOCUME~1\TROY~1.TRO\LOCALS~1\Temp\yozhr6wjgt.exe
    O4 - HKCU\..\Run: [dmu1jowjam8g] C:\DOCUME~1\TROY~1.TRO\LOCALS~1\Temp\xt86jtvucukk.exe
    O4 - HKCU\..\Run: [nlv8yeze9ug4i7yzpgdii6u] C:\DOCUME~1\TROY~1.TRO\LOCALS~1\Temp\pl0e3n6jt.exe
    O4 - HKCU\..\Run: [ath4zdkyc08klzfehsvo6nv50dludbm3t19487k2ig] C:\DOCUME~1\TROY~1.TRO\LOCALS~1\Temp\qoiu41th.exe
    O4 - HKCU\..\Run: [sol39zgvmv5d6t] C:\DOCUME~1\TROY~1.TRO\LOCALS~1\Temp\i9unv0ectro2w.exe
    O4 - HKCU\..\Run: [vrlhtdb8jx56ytkf0a2anxvs5u6h8die6w] C:\DOCUME~1\TROY~1.TRO\LOCALS~1\Temp\f0zr8t70.exe
    O4 - HKCU\..\Run: [vx0ri05311wlr7sqog3a2lbb] C:\DOCUME~1\TROY~1.TRO\LOCALS~1\Temp\r5676h.exe
    O4 - HKCU\..\Run: [niwsfi2ku0t532vbztl15zrsidnqsukuhllu12gmo4hi1yfntw] C:\DOCUME~1\TROY~1.TRO\LOCALS~1\Temp\u1vuuexwv3i.exe
    O4 - HKCU\..\Run: [lgp732wr7vedd5ce4krvsph76tyrn32p5ezqqyypurz] C:\DOCUME~1\TROY~1.TRO\LOCALS~1\Temp\h99qkg.exe
    O4 - HKCU\..\Run: [flzo3fvcl15sf] C:\DOCUME~1\TROY~1.TRO\LOCALS~1\Temp\w2e7h7il.exe
    O4 - HKCU\..\Run: [bes8kk6xjy4fo8] C:\DOCUME~1\TROY~1.TRO\LOCALS~1\Temp\oylrxc9c.exe
    O4 - HKCU\..\Run: [mplk7raq6bcb] C:\DOCUME~1\TROY~1.TRO\LOCALS~1\Temp\kvavpxf8fri.exe
    O4 - HKCU\..\Run: [v1yoia9lzg6jw95y6s1l5gx8] C:\DOCUME~1\TROY~1.TRO\LOCALS~1\Temp\lrutrr.exe
    O4 - HKCU\..\Run: [qtik1hrq89g15h3nfsrpfjob530s06xym5wyor7t742t4w] C:\DOCUME~1\TROY~1.TRO\LOCALS~1\Temp\rpyh86crkj.exe
    O4 - HKCU\..\Run: [g7zgljzo7pgkxp92gf3uwrfhz] C:\DOCUME~1\TROY~1.TRO\LOCALS~1\Temp\g3coaodnp4w.exe
    O4 - HKCU\..\Run: [x7u9shxnalxhc60l] C:\DOCUME~1\TROY~1.TRO\LOCALS~1\Temp\ic2r1u61p3.exe
    O4 - HKCU\..\Run: [xcz2rd20q48hz668mgz4bd2t84] C:\DOCUME~1\TROY~1.TRO\LOCALS~1\Temp\h892177.exe
    O4 - HKCU\..\Run: [zj28sw93p] C:\DOCUME~1\TROY~1.TRO\LOCALS~1\Temp\ijeobxg.exe
    O4 - HKCU\..\Run: [uo663icsb7o8ibp9xpbcjghl2zvf9tvz3ocf] C:\DOCUME~1\TROY~1.TRO\LOCALS~1\Temp\z0qag8yhsb.exe
    O4 - HKCU\..\Run: [cxvvaxp856] C:\DOCUME~1\TROY~1.TRO\LOCALS~1\Temp\pd2p4b.exe
    O4 - HKCU\..\Run: [gde1tdext5z3062d4tdu1dvm3wp0qs5gbs53fmz6om] C:\DOCUME~1\TROY~1.TRO\LOCALS~1\Temp\afl8rl7.exe
    O4 - HKCU\..\Run: [oyz8xb95n] C:\DOCUME~1\TROY~1.TRO\LOCALS~1\Temp\jl5xygvxex.exe
    O4 - HKCU\..\Run: [xd1fb3du6rc679yhhs9uuplmx7epp7audq8164dk0zlrxd] C:\DOCUME~1\TROY~1.TRO\LOCALS~1\Temp\ztacjndfc9.exe
    O4 - HKCU\..\Run: [sh2b2oovp35chvq8quo8tmbkiapsz4dd3w32i9] C:\DOCUME~1\TROY~1.TRO\LOCALS~1\Temp\yj5es6t4b.exe
    O4 - HKCU\..\Run: [zqn2kmtb4zdsixxev8vn1pfz8r2sout0y9caaxg4a7g] C:\DOCUME~1\TROY~1.TRO\LOCALS~1\Temp\heyake3uubz.exe
    O4 - HKCU\..\Run: [fc3014rcp5dgfh8kg42as] C:\DOCUME~1\TROY~1.TRO\LOCALS~1\Temp\hdhm15xfqyre.exe
    O4 - HKCU\..\Run: [glqb9cl6imnwcps4akmp0bdsvbhp81tk] C:\DOCUME~1\TROY~1.TRO\LOCALS~1\Temp\qvqf1ncsp1fh.exe
    O4 - HKCU\..\Run: [l6rdl0soc38uqellpweitne4mhgeevu0bfprhbczm6ny] C:\DOCUME~1\TROY~1.TRO\LOCALS~1\Temp\nso6nkqiva3yp.exe
    O4 - HKCU\..\Run: [sf4wvuw4vrahg5u9fcn6k1mhvt48d1thtwm5llj0geo13ly] C:\DOCUME~1\TROY~1.TRO\LOCALS~1\Temp\kqgsqgcaad.exe
    O4 - HKCU\..\Run: [xvy982elgq7qx4ndd9zmnmegtqzcav] C:\DOCUME~1\TROY~1.TRO\LOCALS~1\Temp\a3e7rmn.exe
    O4 - HKCU\..\Run: [k3lhqqo80i8crtf3x9m43wj5h4gp3wgbrjl7] C:\DOCUME~1\TROY~1.TRO\LOCALS~1\Temp\ofst3cp5xj77.exe
    O4 - HKCU\..\Run: [uu6s8bcbo7hhz4wychz3hbc7e78c] C:\DOCUME~1\TROY~1.TRO\LOCALS~1\Temp\nsdr4y0jfck.exe
    O4 - HKCU\..\Run: [pug5yd89goig7jhyttsa] C:\DOCUME~1\TROY~1.TRO\LOCALS~1\Temp\qhxd8xxkvdtv.exe
    O4 - HKCU\..\Run: [qs7guxs7omuq0ujxjbdkz] C:\DOCUME~1\TROY~1.TRO\LOCALS~1\Temp\o3tbxagphhp4q.exe
    O4 - HKCU\..\Run: [xtu70svjh0wee2tl6h] C:\DOCUME~1\TROY~1.TRO\LOCALS~1\Temp\vghtqo5nxtin.exe
    O4 - HKCU\..\Run: [xsol7p55fz01jgk5ro4m7etaavljy8] C:\DOCUME~1\TROY~1.TRO\LOCALS~1\Temp\jjnzug9r.exe
    O4 - HKCU\..\Run: [skzpv5b01uuty7pfg4fqf672n4i8y] C:\DOCUME~1\TROY~1.TRO\LOCALS~1\Temp\z5tu3k.exe
    O4 - HKCU\..\Run: [gslnya3w2jqcg3hiops0dtcv1pahbvhv3q5qjte7i018wfroi6] C:\DOCUME~1\TROY~1.TRO\LOCALS~1\Temp\v9gbdqe3dv0.exe
    O4 - HKCU\..\Run: [a20dhpp6xi6j8kka5g] C:\DOCUME~1\TROY~1.TRO\LOCALS~1\Temp\o2i451c9rqm2.exe
    O4 - HKCU\..\Run: [cv529ts8br1k2ltwna2bgb4g4au] C:\DOCUME~1\TROY~1.TRO\LOCALS~1\Temp\yud6kuurtero.exe
    O4 - HKCU\..\Run: [i3lpvu01yrje0ubvcempsxn01i1kxdtr489v] C:\DOCUME~1\TROY~1.TRO\LOCALS~1\Temp\r0porg5td2ymt.exe
    O4 - HKCU\..\Run: [nu0pvyuhj3mwe9i] C:\DOCUME~1\TROY~1.TRO\LOCALS~1\Temp\jnycpj6vffk.exe
    O4 - HKCU\..\Run: [bqbybwal2s4ngvflxqhe8yyck4i77xvjht9yebxea0r] C:\DOCUME~1\TROY~1.TRO\LOCALS~1\Temp\gy654630akfv.exe
    O4 - HKCU\..\Run: [kshryvdbkkh0e5g0pppyu1zyyizttlz4adhhz] C:\DOCUME~1\TROY~1.TRO\LOCALS~1\Temp\z4i4bbe2u8mt9.exe
    O4 - HKCU\..\Run: [ta6u1yjcw1mhm9p9mi] C:\DOCUME~1\TROY~1.TRO\LOCALS~1\Temp\ylftj942cx.exe
    O4 - HKCU\..\Run: [rdcer0xzwunzhnb8ngodimnnyjor] C:\DOCUME~1\TROY~1.TRO\LOCALS~1\Temp\rrrbqef4wl8.exe
    O4 - HKCU\..\Run: [jz9efnecahw65go9u49ahlngd4kvyaxcgmtg0l4m76j] C:\DOCUME~1\TROY~1.TRO\LOCALS~1\Temp\s6sqbp.exe
    O4 - HKCU\..\Run: [knq0uwwzl3gafdnbg6pxo08xdnu577g16h7t02856pw96] C:\DOCUME~1\TROY~1.TRO\LOCALS~1\Temp\f5299px28.exe
    O4 - HKCU\..\Run: [k2brbaz2b46o] C:\DOCUME~1\TROY~1.TRO\LOCALS~1\Temp\jf0n775j.exe
    O4 - HKCU\..\Run: [gg74ywfaq52t1a300fkgdp5s5vfa] C:\DOCUME~1\TROY~1.TRO\LOCALS~1\Temp\h02v4boy.exe
    O4 - HKCU\..\Run: [q310l4kuaif0isoe0wrimizme8h6ktvs57je5] C:\DOCUME~1\TROY~1.TRO\LOCALS~1\Temp\g0zkc9eys2v95.exe
    O4 - HKCU\..\Run: [ue9wqkik6ka18gmzofpddl45e6] C:\DOCUME~1\TROY~1.TRO\LOCALS~1\Temp\fwadz49tmencw.exe
    O4 - HKCU\..\Run: [mgor37o9260n3ryr5gkwadtiqgrpv6ac85lu0r1x] C:\DOCUME~1\TROY~1.TRO\LOCALS~1\Temp\gnkbsxszzst.exe
    O4 - HKCU\..\Run: [xhi2bimu9bq9mvsf3mfi9m67zfx45dcs95mf06brcy6n8v0l3] C:\DOCUME~1\TROY~1.TRO\LOCALS~1\Temp\ijvnfsnuan4.exe
    O4 - HKCU\..\Run: [ofiol3yefbwet2s3j8go43t6] C:\DOCUME~1\TROY~1.TRO\LOCALS~1\Temp\xtumfkuh6.exe
    O4 - HKCU\..\Run: [qpj5qx2cctjnsz88q38vo79e2dzya4] C:\DOCUME~1\TROY~1.TRO\LOCALS~1\Temp\ppinepl8p.exe
    O4 - HKCU\..\Run: [y7611spb28py] C:\DOCUME~1\TROY~1.TRO\LOCALS~1\Temp\nez73xnyxmfk.exe
    O4 - HKCU\..\Run: [msrac4gx55as7jfegrx4s1ohhfzigssq8r45gbuusai6cjp] C:\DOCUME~1\TROY~1.TRO\LOCALS~1\Temp\u8d9pa5q3s9mb.exe
    O4 - HKCU\..\Run: [r9frh1hsaio2hqud] C:\DOCUME~1\TROY~1.TRO\LOCALS~1\Temp\np1i4lm51.exe
    O4 - HKCU\..\Run: [t9huknf7h45u5yk] C:\DOCUME~1\TROY~1.TRO\LOCALS~1\Temp\og6gc26g2t.exe
    O4 - HKCU\..\Run: [vxtdy9k6b6s8p739ccgpkemnup9v] C:\DOCUME~1\TROY~1.TRO\LOCALS~1\Temp\sda51ukvns.exe
    O4 - HKCU\..\Run: [bigvorxmr0rszc6it1ig5g7rxuywx1fc5t7vqx3vaxr] C:\DOCUME~1\TROY~1.TRO\LOCALS~1\Temp\fwwtj11m.exe
    O4 - HKCU\..\Run: [wz8y40o43rnedvypm49chfz4ny2cjx] C:\DOCUME~1\TROY~1.TRO\LOCALS~1\Temp\uav2kakzg.exe
    O4 - HKCU\..\Run: [h7swol4upd3b] C:\DOCUME~1\TROY~1.TRO\LOCALS~1\Temp\p6ncxnwfw.exe
    O4 - HKCU\..\Run: [br96gnie04yw6qr] C:\DOCUME~1\TROY~1.TRO\LOCALS~1\Temp\czzvzp9tgbo4.exe
    O4 - HKCU\..\Run: [f55jfnzrl16i2vqw347qxme3y0a2r6lin] C:\DOCUME~1\TROY~1.TRO\LOCALS~1\Temp\qg6h8e.exe
    O4 - HKCU\..\Run: [sfww3976gfe08mr9wzie5eug] C:\DOCUME~1\TROY~1.TRO\LOCALS~1\Temp\iweg7xzj9.exe
    O4 - HKCU\..\Run: [j4n5stpfwhi6] C:\DOCUME~1\TROY~1.TRO\LOCALS~1\Temp\e8imzwdxy.exe
    O4 - HKCU\..\Run: [u0thbtzihm1hzxcucxzbowz5llfk943x6jpvhyo2] C:\DOCUME~1\TROY~1.TRO\LOCALS~1\Temp\ydryyxbez.exe
    O4 - HKCU\..\Run: [fxonqsu7i2c10bryl9twqpdz5wcoku6qh73x] C:\DOCUME~1\TROY~1.TRO\LOCALS~1\Temp\p0mig87xdn.exe
    O4 - HKCU\..\Run: [ixe2c4hhujirhgze7oemlvgv] C:\DOCUME~1\TROY~1.TRO\LOCALS~1\Temp\l3yixexo0os.exe
    O4 - HKCU\..\Run: [yuolrn5zbsv5m39] C:\DOCUME~1\TROY~1.TRO\LOCALS~1\Temp\qiornwm1me.exe
    O4 - HKCU\..\Run: [f4b9eiciwlkdouh9f6fm5cay0ko30y0] C:\DOCUME~1\TROY~1.TRO\LOCALS~1\Temp\qk2dcce9.exe
    O4 - HKCU\..\Run: [py1ptkdplh] C:\DOCUME~1\TROY~1.TRO\LOCALS~1\Temp\z7nnfqghf.exe
    O4 - HKCU\..\Run: [fz32ipyxdl0ji7klfa7t0juiuxm9226ccuo2mw7pap36s] C:\DOCUME~1\TROY~1.TRO\LOCALS~1\Temp\sbq5673zl5q.exe
    O4 - HKCU\..\Run: [x6hn7eeegk2cp72ukapz1ljinmuku] C:\DOCUME~1\TROY~1.TRO\LOCALS~1\Temp\pmnycu23bf9.exe
    O4 - HKCU\..\Run: [t3gkjad7753bv1o36ij2txzi3tef498xqjcey09qyea] C:\DOCUME~1\TROY~1.TRO\LOCALS~1\Temp\ib530k.exe
    O4 - HKCU\..\Run: [cc3qfjp6t5mm28f15imzyxms1imgidp88xz5wlifkxutx] C:\DOCUME~1\TROY~1.TRO\LOCALS~1\Temp\lljnp0dgwm.exe
    O4 - HKCU\..\Run: [c9q0pvj4oxqcjt1xx] C:\DOCUME~1\TROY~1.TRO\LOCALS~1\Temp\b2sf29nm6k.exe
    O4 - HKCU\..\Run: [cd1t7td7b346yvr5] C:\DOCUME~1\TROY~1.TRO\LOCALS~1\Temp\yxgfmabjdee2v.exe
    O4 - HKCU\..\Run: [ew7e6pt4o34xxpwie0l] C:\DOCUME~1\TROY~1.TRO\LOCALS~1\Temp\i1wgs4y2qw.exe
    O4 - HKCU\..\Run: [q902qjwhm7lp4suwsly5cd44iqmflywlmenbwewf9nsg99na] C:\DOCUME~1\TROY~1.TRO\LOCALS~1\Temp\ia0a36q92ir.exe
    O4 - HKCU\..\Run: [le9hqmjkcy6qsakgl5xmfvtvgtgmap9] C:\DOCUME~1\TROY~1.TRO\LOCALS~1\Temp\dezg3n.exe
    O4 - HKCU\..\Run: [dzl1e8r1ki8wrhx7eo] C:\DOCUME~1\TROY~1.TRO\LOCALS~1\Temp\zb6igpcar3x.exe
    O4 - HKCU\..\Run: [smd1oskkto39ktdlax7s1p0lh2ddwote5ap46e35a48k49y3bm] C:\DOCUME~1\TROY~1.TRO\LOCALS~1\Temp\o1atlh250o.exe
    O4 - HKCU\..\Run: [aipkjt2d8m2jy11cfgw2x2s] C:\DOCUME~1\TROY~1.TRO\LOCALS~1\Temp\hyyvhju.exe
    O4 - HKCU\..\Run: [tgk662z8ivh429it8slg8ucoqnsxjjdwry2r9v] C:\DOCUME~1\TROY~1.TRO\LOCALS~1\Temp\tzm8hzyz.exe
    O4 - HKCU\..\Run: [ym4ti3d7n0ekb6cgsws3s86w76p17kd2tdz] C:\DOCUME~1\TROY~1.TRO\LOCALS~1\Temp\zgxq3hj10a30.exe
    O4 - HKCU\..\Run: [lee4yr7yncuk] C:\DOCUME~1\TROY~1.TRO\LOCALS~1\Temp\k70f4p9g2.exe
    O4 - HKCU\..\Run: [vfe5c18gr7v5x2] C:\DOCUME~1\TROY~1.TRO\LOCALS~1\Temp\mx6ig9a7a8tp.exe
    O4 - HKCU\..\Run: [fkval92xxr6vbh61w8le0wtvq3gk] C:\DOCUME~1\TROY~1.TRO\LOCALS~1\Temp\f9y693s5fy0i.exe
    O4 - HKCU\..\Run: [hnrbb1vg0fyaotoa] C:\DOCUME~1\TROY~1.TRO\LOCALS~1\Temp\fi2jk51ca1vt.exe
    O4 - HKCU\..\Run: [cplr5o7pscrk5kifgttp2t] C:\DOCUME~1\TROY~1.TRO\LOCALS~1\Temp\l3s8rrs3sm.exe
    O4 - HKCU\..\Run: [fs2wtte3asj4mb8m] C:\DOCUME~1\TROY~1.TRO\LOCALS~1\Temp\gjig8dgfqkxuo.exe
    O4 - HKCU\..\Run: [egdlsumka8hb626jrgs9w5fwj5i0m5j83nd6n772y3d3f] C:\DOCUME~1\TROY~1.TRO\LOCALS~1\Temp\voivw2ebv.exe
    O4 - HKCU\..\Run: [z39ul896xn7w3yq53119d808m55kca32u71ftom81wsypi5] C:\DOCUME~1\TROY~1.TRO\LOCALS~1\Temp\sum5m71cbwx.exe
    O4 - HKCU\..\Run: [wfjc2elblbgbiert44mpdsf7n3099z5] C:\DOCUME~1\TROY~1.TRO\LOCALS~1\Temp\tetx158kyok.exe
    O4 - HKCU\..\Run: [msvaz4iip989zhlll3f1] C:\DOCUME~1\TROY~1.TRO\LOCALS~1\Temp\t44umpaj04z0u.exe
    O4 - HKCU\..\Run: [ccmjntyw8zpfkyk336pij5sizdjna7cgn45l62] C:\DOCUME~1\TROY~1.TRO\LOCALS~1\Temp\c8f2wzye5s0b.exe
    O4 - HKCU\..\Run: [wdho6sp0xfkvqzz66znc8y7tw2bni99940onklv] C:\DOCUME~1\TROY~1.TRO\LOCALS~1\Temp\civl6x6johmx.exe
    O4 - HKCU\..\Run: [krxq981qsihceydxbqjs1pe9wo5pmly18vq1r9o] C:\DOCUME~1\TROY~1.TRO\LOCALS~1\Temp\w10jhpvte.exe
    O4 - HKCU\..\Run: [mbz1szgsrqhdgbrs88tq5jivvtwco1vf73608] C:\DOCUME~1\TROY~1.TRO\LOCALS~1\Temp\htnff16ac2.exe
    O4 - HKCU\..\Run: [recfjmh4hr5vw2r7is45x718amjl87s] C:\DOCUME~1\TROY~1.TRO\LOCALS~1\Temp\pzxhb5rf.exe
    O4 - HKCU\..\Run: [dqm8sstokvmsx4daztiu8kxh5] C:\DOCUME~1\TROY~1.TRO\LOCALS~1\Temp\e1psw8rgro.exe
    O4 - HKCU\..\Run: [ro52fcic169vkrsf7xafca8] C:\DOCUME~1\TROY~1.TRO\LOCALS~1\Temp\mzdio9nl5dvmy.exe
    O4 - HKCU\..\Run: [zzyhw0cix1] C:\DOCUME~1\TROY~1.TRO\LOCALS~1\Temp\zsarl2lo.exe
    O4 - HKCU\..\Run: [uo2vsv22vi8fowf6z4371] C:\DOCUME~1\TROY~1.TRO\LOCALS~1\Temp\ezf9flp.exe
    O4 - HKCU\..\Run: [hk10d1j15wfrjylxaz] C:\DOCUME~1\TROY~1.TRO\LOCALS~1\Temp\rsc1cv41yg6.exe
    O4 - HKCU\..\Run: [ifdievne6282qxtpc7z0uyrwo20olrf9v3fam61vccx2tjh17] C:\DOCUME~1\TROY~1.TRO\LOCALS~1\Temp\e13xlm.exe
    O4 - HKCU\..\Run: [rydx9w20m70] C:\DOCUME~1\TROY~1.TRO\LOCALS~1\Temp\pt7tjfk.exe
    O4 - HKCU\..\Run: [bkfdt3wsl8mhd6apcmg5dsg] C:\DOCUME~1\TROY~1.TRO\LOCALS~1\Temp\unkezqy0to4.exe
    O4 - HKCU\..\Run: [yb490ccsorf26tibao4it5zscsu53ixucqfhk5ngneod0] C:\DOCUME~1\TROY~1.TRO\LOCALS~1\Temp\vjbwujjc.exe
    O4 - HKCU\..\Run: [ujqd9qnwkyzrv1r0d31xii] C:\DOCUME~1\TROY~1.TRO\LOCALS~1\Temp\qjjqyxiq8f68.exe
    O4 - HKCU\..\Run: [j6nwio3w1qzukbi3uqkds4ir4k1kxvv81gu9yij72noa6j4fs] C:\DOCUME~1\TROY~1.TRO\LOCALS~1\Temp\s43qpmzxom3.exe
    O4 - HKCU\..\Run: [ubmr91tv70le95] C:\DOCUME~1\TROY~1.TRO\LOCALS~1\Temp\kku6mo0zt.exe
    O4 - HKCU\..\Run: [z8zbi80azy6hbd931hapal46oh4g] C:\DOCUME~1\TROY~1.TRO\LOCALS~1\Temp\adryjyy2tv9n.exe
    O4 - HKCU\..\Run: [gp92w5vs0z0ztli44tsf0] C:\DOCUME~1\TROY~1.TRO\LOCALS~1\Temp\ehzjx8qg.exe
    O4 - HKCU\..\Run: [axqr1w4ac40ooylvlnhzb8fz] C:\DOCUME~1\TROY~1.TRO\LOCALS~1\Temp\t0pdxpeu.exe
    O4 - HKCU\..\Run: [ar9azut7wysj6xfafzdv1pwlawoa9yt2l95y5lzl0ojjakza] C:\DOCUME~1\TROY~1.TRO\LOCALS~1\Temp\phdmcjvs67lw.exe
    O4 - HKCU\..\Run: [rtdsl5oyzxtvwv49mvz] C:\DOCUME~1\TROY~1.TRO\LOCALS~1\Temp\t684pf.exe
    O4 - HKCU\..\Run: [mwqb3cg548l2umbc9ajhellv0j] C:\DOCUME~1\TROY~1.TRO\LOCALS~1\Temp\aw1tlkr.exe
    O4 - HKCU\..\Run: [o3zvxm8i2k2u604hv6h48dpu5gn3fxrb24auro8q2katm5] C:\DOCUME~1\TROY~1.TRO\LOCALS~1\Temp\o0eq13drb9su.exe
    O4 - HKCU\..\Run: [tged5aab8stiy5wm8tf] C:\DOCUME~1\TROY~1.TRO\LOCALS~1\Temp\h6qprpotvxzso.exe
    O4 - HKCU\..\Run: [ph9bc4pf05p1tcjdt5lafx] C:\DOCUME~1\TROY~1.TRO\LOCALS~1\Temp\klxsd4.exe
    O4 - HKCU\..\Run: [ogynzox1mz6m8vl6c8vo] C:\DOCUME~1\TROY~1.TRO\LOCALS~1\Temp\z2x97ufkerwb3.exe
    O4 - HKCU\..\Run: [s2m9zrkap369vei0c] C:\DOCUME~1\TROY~1.TRO\LOCALS~1\Temp\ry4a6i6bxl4e9.exe
    O4 - HKCU\..\Run: [zp5pp4kmnddaun8hm28t0pfr0qft1vbf2viczibdp4ncf] C:\DOCUME~1\TROY~1.TRO\LOCALS~1\Temp\q1r3xwdh54q.exe
    O4 - HKCU\..\Run: [y6t0a2h4amc7asyve99xxxsxlpva9ea] C:\DOCUME~1\TROY~1.TRO\LOCALS~1\Temp\ixyndk4royj.exe
    O4 - HKCU\..\Run: [j95ao9ygvdm99hpf4ey9ffgldnwvuuagqk8h4ybkikznn] C:\DOCUME~1\TROY~1.TRO\LOCALS~1\Temp\hsc9v18un.exe
    O4 - HKCU\..\Run: [b8sww9q5lf0tsq7i5hsqq190tmnn2tjdni7xlfghe9b709d] C:\DOCUME~1\TROY~1.TRO\LOCALS~1\Temp\rgs1iq.exe
    O4 - HKCU\..\Run: [nsgq7sreyive6g3shxh2g] C:\DOCUME~1\TROY~1.TRO\LOCALS~1\Temp\k8n3ft.exe
    O4 - HKCU\..\Run: [m0tcpzvkgay0bm05dk6nzpb6pir] C:\DOCUME~1\TROY~1.TRO\LOCALS~1\Temp\yzft6g.exe
    O4 - HKCU\..\Run: [y7z8lvnb1ryfsq6q4yzt8hapi6lv0562yi3g1mtmv3he3] C:\DOCUME~1\TROY~1.TRO\LOCALS~1\Temp\a02m9azknb9.exe
    O4 - HKCU\..\Run: [y064bpdt0mmr2lrj615jqr182v0vv1hv6jeulvp8eskcf0] C:\DOCUME~1\TROY~1.TRO\LOCALS~1\Temp\t6elgwam7zgk.exe
    O4 - HKCU\..\Run: [du5nsqsowroqgh8ggmvo7ovpx4zjt9xl53hwejna] C:\DOCUME~1\TROY~1.TRO\LOCALS~1\Temp\avqmts.exe
    O4 - HKCU\..\Run: [jptjxwg4tllu] C:\DOCUME~1\TROY~1.TRO\LOCALS~1\Temp\cfwfw5ufyn1.exe
    O4 - HKCU\..\Run: [sb5upm2vkoh8qq5dmnwopkyt6qorph] C:\DOCUME~1\TROY~1.TRO\LOCALS~1\Temp\rnfjpa2e.exe
    O4 - HKCU\..\Run: [o4yv6rdgilgvgpjt8urzf4jqe3uv9nv9] C:\DOCUME~1\TROY~1.TRO\LOCALS~1\Temp\jjmkoyt5.exe
    O4 - HKCU\..\Run: [o3kw0axjkgoz] C:\DOCUME~1\TROY~1.TRO\LOCALS~1\Temp\p9bye6p9v.exe
    O4 - HKCU\..\Run: [v65dtf5fexyyaw1dbo3t4sd] C:\DOCUME~1\TROY~1.TRO\LOCALS~1\Temp\z16jtg7rx.exe
    O4 - HKCU\..\Run: [omd6c0vhvdgsc03yx7tn] C:\DOCUME~1\TROY~1.TRO\LOCALS~1\Temp\o4pom11.exe
    O4 - HKCU\..\Run: [nhoe298rzsou] C:\DOCUME~1\TROY~1.TRO\LOCALS~1\Temp\st1l9jn70.exe
    O4 - HKCU\..\Run: [mg574zc6bkrl3hszop96] C:\DOCUME~1\TROY~1.TRO\LOCALS~1\Temp\kp8mp7iox.exe
    O4 - HKCU\..\Run: [atnize872l134p6cmisw2dwls0vzxv5k46wcbjwd7arm] C:\DOCUME~1\TROY~1.TRO\LOCALS~1\Temp\h1wms86l4r2m.exe
    O4 - HKCU\..\Run: [adpomlu3yoch1yst0k18shc5v6h7ars5cv0zne23oxhde] C:\DOCUME~1\TROY~1.TRO\LOCALS~1\Temp\lq8nm4.exe
    O4 - HKCU\..\Run: [djxx63ajjclwzl5sl8h8yxc26pe0r719gyo3b] C:\DOCUME~1\TROY~1.TRO\LOCALS~1\Temp\c7fqett3.exe
    O4 - HKCU\..\Run: [drcbobi1igmcggyvp7206ll570z9cmqu7fbpfpzng710] C:\DOCUME~1\TROY~1.TRO\LOCALS~1\Temp\luu0q7tv1jb.exe
    O4 - HKCU\..\Run: [l1j61ix1w5d1h0y1w4323] C:\DOCUME~1\TROY~1.TRO\LOCALS~1\Temp\rof7rjr.exe
    O4 - HKCU\..\Run: [lebc8aob6i4m0nufub8m1tn8qz2sncdu8mz] C:\DOCUME~1\TROY~1.TRO\LOCALS~1\Temp\sfk5z0bl.exe
    O4 - HKCU\..\Run: [se15xnwd8b3x6cn6nr56hrufbn1] C:\DOCUME~1\TROY~1.TRO\LOCALS~1\Temp\xnn7wkfbdv.exe
    O4 - HKCU\..\Run: [uin5twbrytqp3czi2caymwy970ya0si81t] C:\DOCUME~1\TROY~1.TRO\LOCALS~1\Temp\rk0egfapws1w.exe
    O4 - HKCU\..\Run: [fp6rsbpbp65e5a3dhg5cmo12xa3owwr287us9se] C:\DOCUME~1\TROY~1.TRO\LOCALS~1\Temp\xozon7lv98ei.exe
    O4 - HKCU\..\Run: [ekv6y44wkw7txz] C:\DOCUME~1\TROY~1.TRO\LOCALS~1\Temp\fss472u4qelp.exe
    O4 - HKCU\..\Run: [qrrlqucypg12s01iv2a] C:\DOCUME~1\TROY~1.TRO\LOCALS~1\Temp\qavgpy5oh7l.exe
    O4 - HKCU\..\Run: [yow3h9wld1zue2c87vxhtomywgwzv8o0s7lo1e34bx5] C:\DOCUME~1\TROY~1.TRO\LOCALS~1\Temp\ldyy7t.exe
    O4 - HKCU\..\Run: [wucvxwm9vs8] C:\DOCUME~1\TROY~1.TRO\LOCALS~1\Temp\kmt0gc1jn28cy.exe
    O4 - HKCU\..\Run: [hwnyyj25k0bcewnmowif849u5cabe8gpqvaphzsqfmt4pcn5] C:\DOCUME~1\TROY~1.TRO\LOCALS~1\Temp\pwup6dj.exe
    O4 - HKCU\..\Run: [lw95olusuhq0ohevg0o83sa54qb7t2mraujq6ynwacp] C:\DOCUME~1\TROY~1.TRO\LOCALS~1\Temp\yz4a1nptzlx0.exe
    O4 - HKCU\..\Run: [t43dynwhn3iob] C:\DOCUME~1\TROY~1.TRO\LOCALS~1\Temp\qczepk.exe
    O4 - HKCU\..\Run: [dp5lal0rummakynpkyg2uyhuxw9e1r3wpuz0pbypw8piku] C:\DOCUME~1\TROY~1.TRO\LOCALS~1\Temp\i93makfn.exe
    O4 - HKCU\..\Run: [d1hmmzodhpytq477o917az2q4hu9g12] C:\DOCUME~1\TROY~1.TRO\LOCALS~1\Temp\t1rlae0z9fzpf.exe
    O4 - HKCU\..\Run: [beg4prud0tsjfk40kc9lemi8y] C:\DOCUME~1\TROY~1.TRO\LOCALS~1\Temp\cazvjacu1lu78.exe
    O4 - HKCU\..\Run: [cpk2m9h3zq855ffq4g6crsms] C:\DOCUME~1\TROY~1.TRO\LOCALS~1\Temp\x66wzf3lkf60s.exe
    O4 - HKCU\..\Run: [ttbh8g0ia9wj] C:\DOCUME~1\TROY~1.TRO\LOCALS~1\Temp\w1k1hf7o2ly.exe
    O4 - HKCU\..\Run: [x4mqtjyzk4b97uy1o4ioai2i] C:\DOCUME~1\TROY~1.TRO\LOCALS~1\Temp\t1k7tlobhutu.exe
    O4 - HKCU\..\Run: [coea1lhh7d1p4sc04nmnjaf8kw1fcr8mkxowooshcm11p84c] C:\DOCUME~1\TROY~1.TRO\LOCALS~1\Temp\aqwjubkjpr5ew.exe
    O4 - HKCU\..\Run: [e3g0myaaoojtmdowwhhljao6d24x18ry] C:\DOCUME~1\TROY~1.TRO\LOCALS~1\Temp\bff40pqpj.exe
    O4 - HKCU\..\Run: [dt9sf0fkdsskh7lx0mde82dskdmyf0bkgcq0jd687i3l8vgf] C:\DOCUME~1\TROY~1.TRO\LOCALS~1\Temp\pman3y4.exe
    O4 - HKCU\..\Run: [o9u0rk8dcchj5k9u6dqtyag9gws3bp6ay366] C:\DOCUME~1\TROY~1.TRO\LOCALS~1\Temp\hiyo23v.exe
    O4 - HKCU\..\Run: [itxiuqnwp1eozn8hcdtbywwoks5m] C:\DOCUME~1\TROY~1.TRO\LOCALS~1\Temp\g0i48x7f.exe
    O4 - HKCU\..\Run: [k4y9old007wu2zywym56o] C:\DOCUME~1\TROY~1.TRO\LOCALS~1\Temp\fqd6hxn.exe
    O4 - HKCU\..\Run: [o9vtb026ora4k9kw2b1pr8esp2b1a3ydo09n613cla5291xnn] C:\DOCUME~1\TROY~1.TRO\LOCALS~1\Temp\jadoeuowb424.exe
    O4 - HKCU\..\Run: [e5qjbey0nywbpmmeh37mog0ls5bqi] C:\DOCUME~1\TROY~1.TRO\LOCALS~1\Temp\yw65o2y6.exe
    O4 - HKCU\..\Run: [wg8ijllbg5y6bs3cisqo58nhni9] C:\DOCUME~1\TROY~1.TRO\LOCALS~1\Temp\i08qnd4laas.exe
    O4 - HKCU\..\Run: [ngo8hcwtsyud] C:\DOCUME~1\TROY~1.TRO\LOCALS~1\Temp\eqacpewlgadb.exe
    O4 - HKCU\..\Run: [mbu42fx6jzxxjijlr5btolfl984ht] C:\DOCUME~1\TROY~1.TRO\LOCALS~1\Temp\mu3b9qmuxg1i.exe
    O4 - HKCU\..\Run: [g93hao6dxmt2ju5xsoyha7n1a9x7ctny2koaod1y3mlpgp] C:\DOCUME~1\TROY~1.TRO\LOCALS~1\Temp\udde3dflzzaw.exe
    O4 - HKCU\..\Run: [rk0qq8m6ajivs6vj9rbjog86jh] C:\DOCUME~1\TROY~1.TRO\LOCALS~1\Temp\n0pdaz7njnhui.exe
    O4 - HKCU\..\Run: [rjuh53m1inbu151831wg1yk7p62c8dzoj7o6suarewrp385spn] C:\DOCUME~1\TROY~1.TRO\LOCALS~1\Temp\qkf05vo4ozg85.exe
    O4 - HKCU\..\Run: [h1l7dddwtb9f91tpuc8tys1v7xf7e04pka3] C:\DOCUME~1\TROY~1.TRO\LOCALS~1\Temp\yjwg9rlr.exe
    O4 - HKCU\..\Run: [w81dgijhy1huf36n20grpz8inndje] C:\DOCUME~1\TROY~1.TRO\LOCALS~1\Temp\r03po2jpt6p8.exe
    O4 - HKCU\..\Run: [gptudgz66qzanr17zu19so9l9ay546jtz0yf6] C:\DOCUME~1\TROY~1.TRO\LOCALS~1\Temp\rukywv.exe
    O4 - HKCU\..\Run: [l56xwn0qhb] C:\DOCUME~1\TROY~1.TRO\LOCALS~1\Temp\x9riia1.exe
    O4 - HKCU\..\Run: [zposb6i4p57p8z42l9hfvdqp6n8wivs4bmsxf] C:\DOCUME~1\TROY~1.TRO\LOCALS~1\Temp\iba1o13s.exe
    O4 - HKCU\..\Run: [ddvrui70r882i07mzj345tmsfalby6g5oypk] C:\DOCUME~1\TROY~1.TRO\LOCALS~1\Temp\qf30pwc1.exe
    O4 - HKCU\..\Run: [zosynm3hqtd] C:\DOCUME~1\TROY~1.TRO\LOCALS~1\Temp\sr8nwj30ujkw5.exe
    O4 - HKCU\..\Run: [wzjtyy8f0ezkp3ruwr5] C:\DOCUME~1\TROY~1.TRO\LOCALS~1\Temp\xwsb6h9mvkp.exe
    O4 - HKCU\..\Run: [sizm9dtimpzjt8e7wiiik] C:\DOCUME~1\TROY~1.TRO\LOCALS~1\Temp\h468212pcvmt.exe
    O4 - HKCU\..\Run: [q1ulsqcm416p530kghuq2fwhra19f4sxpczq1sl4fxhdfaaty] C:\DOCUME~1\TROY~1.TRO\LOCALS~1\Temp\hf8jkp1wg.exe
    O4 - HKCU\..\Run: [h2oyl8rlx66gxcepf8xnkyxywwa5xv7fu] C:\DOCUME~1\TROY~1.TRO\LOCALS~1\Temp\v7mydpe.exe
    O4 - HKCU\..\Run: [qn9notl1izt594a3ry2] C:\DOCUME~1\TROY~1.TRO\LOCALS~1\Temp\ztjuyqvq1l0p2.exe
    O4 - HKCU\..\Run: [hyfoosumsw0198g8hh9o2nw] C:\DOCUME~1\TROY~1.TRO\LOCALS~1\Temp\b76w9urv1qja.exe
    O4 - HKCU\..\Run: [qzsrx6uoqcibymbv5xe1lrctwntk] C:\DOCUME~1\TROY~1.TRO\LOCALS~1\Temp\i5ganbby.exe
    O4 - HKCU\..\Run: [rd5ibguvdq237ijwpye2cen7kciu6u3ibhjnw] C:\DOCUME~1\TROY~1.TRO\LOCALS~1\Temp\p8zo3wbyt1t0.exe
    O4 - HKCU\..\Run: [fab93p4f746w677lhbfvaqt5q2l5tqo0t27acscz1gg] C:\DOCUME~1\TROY~1.TRO\LOCALS~1\Temp\gqt1tyse1e.exe
    O4 - HKCU\..\Run: [sqm4os76aupgpce5yjgvxeon1aw7kqc43k5k0chwup4m18kco] C:\DOCUME~1\TROY~1.TRO\LOCALS~1\Temp\bb99dgm0p.exe
    O4 - HKCU\..\Run: [hle3ejk8h48bkgvh4089sz7ec2mfc9dx] C:\DOCUME~1\TROY~1.TRO\LOCALS~1\Temp\x8gbqi.exe
    O4 - HKCU\..\Run: [j3cfb0g4ecuie8] C:\DOCUME~1\TROY~1.TRO\LOCALS~1\Temp\ytg06o470r.exe
    O4 - HKCU\..\Run: [whculjgybjuxnk8wi5ga2l2d8k2qiy] C:\DOCUME~1\TROY~1.TRO\LOCALS~1\Temp\ds0gofg0gy.exe
    O4 - HKCU\..\Run: [c4wq8abfebstkxzns] C:\DOCUME~1\TROY~1.TRO\LOCALS~1\Temp\siur9cw5.exe
    O4 - HKCU\..\Run: [oyp3252bv2s1lhj44vnkdvd0ko4syg] C:\DOCUME~1\TROY~1.TRO\LOCALS~1\Temp\dkdafmd8p.exe
    O4 - HKCU\..\Run: [fm1riwnmes2jgkbx0qwlcgxzm68wpifzxhgvdbhbyi9rw2my] C:\DOCUME~1\TROY~1.TRO\LOCALS~1\Temp\ieb6a1m0dphh3.exe
    O4 - HKCU\..\Run: [l8a4nf8oq2jgnpky93jjibg9x4xpqsca1qm4n8ifrx5] C:\DOCUME~1\TROY~1.TRO\LOCALS~1\Temp\pj1zlka5x.exe
    O4 - HKCU\..\Run: [djc5dsbjbx9cx10nltmbrdq7kt1mktn7] C:\DOCUME~1\TROY~1.TRO\LOCALS~1\Temp\ibw116ql0.exe
    O4 - HKCU\..\Run: [mo53euydyk5biuprtsf1fvgs] C:\DOCUME~1\TROY~1.TRO\LOCALS~1\Temp\lo6qzy3h6.exe
    O4 - HKCU\..\Run: [qg2njh38hlxyb4ev5ko5sk7xrg60ypwgin3skp908yu] C:\DOCUME~1\TROY~1.TRO\LOCALS~1\Temp\jfl8ebvq6.exe
    O4 - HKCU\..\Run: [zgsinrji9kwgub988ga7i3vq625g16gbkh8vlcitl7bfil8ynt] C:\DOCUME~1\TROY~1.TRO\LOCALS~1\Temp\tngmac7cn1.exe
    O4 - HKCU\..\Run: [c2hn8ry3q4dwiunv9wm4mhwci0whjbowedxrk1hpq3zx4me] C:\DOCUME~1\TROY~1.TRO\LOCALS~1\Temp\r2745ob.exe
    O4 - HKCU\..\Run: [lbxv2p32rwy8q] C:\DOCUME~1\TROY~1.TRO\LOCALS~1\Temp\xr9rxjl8vk2e.exe
    O4 - HKCU\..\Run: [qpuedjv8nro6] C:\DOCUME~1\TROY~1.TRO\LOCALS~1\Temp\xvbnnrk7a7hq.exe
    O4 - HKCU\..\Run: [nrlj36bryti1w7499agacird6vnf4gdwb4dza1qn165rn5y9] C:\DOCUME~1\TROY~1.TRO\LOCALS~1\Temp\ob0zupitjgt.exe
    O4 - HKCU\..\Run: [s8w4fpfawmluj5r5jfjxzbgydxxowht] C:\DOCUME~1\TROY~1.TRO\LOCALS~1\Temp\worbwmya0mmzh.exe
    O4 - HKCU\..\Run: [zqzsqgo0b9i6de] C:\DOCUME~1\TROY~1.TRO\LOCALS~1\Temp\lmrs9cwhe438.exe
    O4 - HKCU\..\Run: [q1blf85eighi3yp] C:\DOCUME~1\TROY~1.TRO\LOCALS~1\Temp\v6brlx.exe
    O4 - HKCU\..\Run: [zk5ep9mjtkff2p9wjm81s5ty6ki2yg6lyj1xee43132zchz5] C:\DOCUME~1\TROY~1.TRO\LOCALS~1\Temp\n2zs12.exe
    O4 - HKCU\..\Run: [ey4r46455d5ifm14ddgru1iotxmfj1nw5v40bmq6n] C:\DOCUME~1\TROY~1.TRO\LOCALS~1\Temp\cegp5u.exe
    O4 - HKCU\..\Run: [b5w9vue2b6w6kt6qseo8bez4yup1umsrrm0ac2kf4l22k80] C:\DOCUME~1\TROY~1.TRO\LOCALS~1\Temp\i453v27.exe
    O4 - HKCU\..\Run: [ktd1mui0gmqdk230et66aiiw8dcwf3nmmp2kuawzdtm] C:\DOCUME~1\TROY~1.TRO\LOCALS~1\Temp\o8lulum.exe
    O4 - HKCU\..\Run: [eivfwc0ayyj8k7wq048ubq2hrlgjg35ytwb6lzro29rp3o] C:\DOCUME~1\TROY~1.TRO\LOCALS~1\Temp\qid3z8cv.exe
    O4 - HKCU\..\Run: [lf08h200rpykwtzrusmyvq39q2zhd0gkr2y44nvt7oqjxda] C:\DOCUME~1\TROY~1.TRO\LOCALS~1\Temp\rsi1qpw6i.exe
    O4 - HKCU\..\Run: [i6h51g40kpn6b830fwr77tx909q9l3c2bwn1x782u5lu8] C:\DOCUME~1\TROY~1.TRO\LOCALS~1\Temp\ymp2j3l4.exe
    O4 - HKCU\..\Run: [pcflrc8lqxzvyq8c9h3htaq46] C:\DOCUME~1\TROY~1.TRO\LOCALS~1\Temp\v3gm7xt.exe
    O4 - HKCU\..\Run: [vwh6mi2ne43080ug5ziprt] C:\DOCUME~1\TROY~1.TRO\LOCALS~1\Temp\lqz57kxf7d.exe
    O4 - HKCU\..\Run: [jhfz8qfhve2yjdlde2ftz616lffu] C:\DOCUME~1\TROY~1.TRO\LOCALS~1\Temp\viuqmufx91.exe
    O4 - HKCU\..\Run: [bsn6kn7g6ja3l5bln33mj2mok1na0y638j2mg9ej7ps4uj3qja] C:\DOCUME~1\TROY~1.TRO\LOCALS~1\Temp\zxbotabb.exe
    O4 - HKCU\..\Run: [drxwlc7301dn0w0o57wszwl74k6yfh] C:\DOCUME~1\TROY~1.TRO\LOCALS~1\Temp\gxygh0ff.exe
    O4 - HKCU\..\Run: [rvr9np4sfz13zbpz] C:\DOCUME~1\TROY~1.TRO\LOCALS~1\Temp\jv54ctzk6.exe
    O4 - HKCU\..\Run: [gdf3lsu41y2h0ddufigvn01z7xjixnbe] C:\DOCUME~1\TROY~1.TRO\LOCALS~1\Temp\xoq68n3k.exe
    O4 - HKCU\..\Run: [bobsig7e0e2z] C:\DOCUME~1\TROY~1.TRO\LOCALS~1\Temp\rzyznah8y.exe
    O4 - HKCU\..\Run: [l0vmrdb9u5mqxwyv7umdbarrwfre0uyrzc7riqqvme6dojscp] C:\DOCUME~1\TROY~1.TRO\LOCALS~1\Temp\yqqv7aarmz30r.exe
    O4 - HKCU\..\Run: [xha36m2ujm9cnb05i8yts8ks1t9daytlam75tb81m6gu0] C:\DOCUME~1\TROY~1.TRO\LOCALS~1\Temp\ocd7xe2i89m.exe
    O4 - HKCU\..\Run: [b136gj15htj5xs5oifzrnvziddbgm5gwwvaz2qog3m645] C:\DOCUME~1\TROY~1.TRO\LOCALS~1\Temp\o00pnhgvv518s.exe
    O4 - HKCU\..\Run: [yvj708mum] C:\DOCUME~1\TROY~1.TRO\LOCALS~1\Temp\j7t06gwwoph4.exe
    O4 - HKCU\..\Run: [mqcbpbcscdo5xe3yhpd8o7sjhiqhpkuyva442r7nfsil3] C:\DOCUME~1\TROY~1.TRO\LOCALS~1\Temp\qii3vuzo33.exe
    O4 - HKCU\..\Run: [vna8r3p81rm8qxkuiqpvuvyivytbwj6] C:\DOCUME~1\TROY~1.TRO\LOCALS~1\Temp\r1reedbngjo.exe
    O4 - HKCU\..\Run: [pyamucydh6foeu7gth8ofty629l3ocjznemxb0n] C:\DOCUME~1\TROY~1.TRO\LOCALS~1\Temp\u7elmlr6z.exe
    O4 - HKCU\..\Run: [uoixzxxxb3jqli287hslijfdx08av5km4m3n7k51] C:\DOCUME~1\TROY~1.TRO\LOCALS~1\Temp\cgq4wx5t.exe
    O4 - HKCU\..\Run: [htu7ybzcwh8i2mptnntqrfyo1e1jpeluqnaf94i] C:\DOCUME~1\TROY~1.TRO\LOCALS~1\Temp\pk37y9w.exe
    O4 - HKCU\..\Run: [a8cs1czbzdlo5em6d1wvgzwffopb9p6o9yrtp14h6shxmxq] C:\DOCUME~1\TROY~1.TRO\LOCALS~1\Temp\qb85pqgl.exe
    O4 - HKCU\..\Run: [w3djw285hr6oc1sbav6weutbmy10fsc4] C:\DOCUME~1\TROY~1.TRO\LOCALS~1\Temp\iaubx93re4w3.exe
    O4 - HKCU\..\Run: [osv8hfj9kfkkg727x1udvh] C:\DOCUME~1\TROY~1.TRO\LOCALS~1\Temp\w88hzxrf.exe
    O4 - HKCU\..\Run: [nfe42i7mbjsfa0u7b9rl56sqz6h8qf8w0u] C:\DOCUME~1\TROY~1.TRO\LOCALS~1\Temp\iev42gse.exe
    O4 - HKCU\..\Run: [hv8g9v093vhqnkxumqwf3qivw74yyt8yf42] C:\DOCUME~1\TROY~1.TRO\LOCALS~1\Temp\prj5vuh.exe
    O4 - HKCU\..\Run: [r3lkldwidmtsk1xapjwafmotrtb4n9wgd] C:\DOCUME~1\TROY~1.TRO\LOCALS~1\Temp\qio3mb1n.exe
    O4 - HKCU\..\Run: [iqhv3viu3ydmf7g] C:\DOCUME~1\TROY~1.TRO\LOCALS~1\Temp\kt6x8bn9.exe
    O4 - HKCU\..\Run: [ou8thr8z44cgh5hvl4al76kxyzdalw] C:\DOCUME~1\TROY~1.TRO\LOCALS~1\Temp\cgflne.exe
    O4 - HKCU\..\Run: [m5o45cvp255rnzmu0myjak1tdixupcrs85abn01t4jwj] C:\DOCUME~1\TROY~1.TRO\LOCALS~1\Temp\q9t7z4q2qwl.exe
    O4 - HKCU\..\Run: [fn6it3j58rgr7q2s890teksy0zl3ziiqu0v63d3g5yzlk4si] C:\DOCUME~1\TROY~1.TRO\LOCALS~1\Temp\whbud44gwqy.exe
    O4 - HKCU\..\Run: [fwqp7z4scv1i290ejsfnl6inhq0ghxk1v] C:\DOCUME~1\TROY~1.TRO\LOCALS~1\Temp\xr0sig3if.exe
    O4 - HKCU\..\Run: [cci8p4ahjd29z7qa5dg25a1d0] C:\DOCUME~1\TROY~1.TRO\LOCALS~1\Temp\yi5q9xnpq2.exe
    O4 - HKCU\..\Run: [u8ggk8wzrljj] C:\DOCUME~1\TROY~1.TRO\LOCALS~1\Temp\a6ncq0hujwo8o.exe
    O4 - HKCU\..\Run: [y5p0s4pos79xry7] C:\DOCUME~1\TROY~1.TRO\LOCALS~1\Temp\g4ufvf.exe
    O4 - HKCU\..\Run: [lok6jw1i2wphkk4wm8az29ba8gl] C:\DOCUME~1\TROY~1.TRO\LOCALS~1\Temp\h5uxscb6z84.exe
    O4 - HKCU\..\Run: [yhtot03dxho2hu8zq84wphyctie41vdn7nwp9o7dlwhp10jc] C:\DOCUME~1\TROY~1.TRO\LOCALS~1\Temp\ipxf3nrllwx36.exe
    O4 - HKCU\..\Run: [qv2s5fuea16pto5ltuu4d1ortq2v501tqdadpp7] C:\DOCUME~1\TROY~1.TRO\LOCALS~1\Temp\qy9ydg58ll8n.exe
    O4 - HKCU\..\Run: [a3aw0fdc6bcg4qh1wpmvr67ndbh47oj0dr2l43tq] C:\DOCUME~1\TROY~1.TRO\LOCALS~1\Temp\a2sjcau.exe
    O4 - HKCU\..\Run: [ib9vjq1x2crxztfelim3ahm] C:\DOCUME~1\TROY~1.TRO\LOCALS~1\Temp\hgw8a408.exe
    O4 - HKCU\..\Run: [crv7nxawc70mkhvuyl] C:\DOCUME~1\TROY~1.TRO\LOCALS~1\Temp\n5yvlv3e13731.exe
    O4 - HKCU\..\Run: [qoiuedkxs4i3ihamjgdi9ivc540ifkck] C:\DOCUME~1\TROY~1.TRO\LOCALS~1\Temp\gnydc12ds.exe
    O4 - HKCU\..\Run: [lz9bibpwmbzcyrh8f5clueh2e4kuqgvp] C:\DOCUME~1\TROY~1.TRO\LOCALS~1\Temp\mae4jah9j.exe
    O4 - HKCU\..\Run: [xqfvy28sdgjxo0gkzdudwu] C:\DOCUME~1\TROY~1.TRO\LOCALS~1\Temp\jr4ocsak9ma.exe
    O4 - HKCU\..\Run: [w9zc7btq4ej86gz] C:\DOCUME~1\TROY~1.TRO\LOCALS~1\Temp\wa1wq0ldb.exe
    O4 - HKCU\..\Run: [u5sanhkb1z0c1lwdsje52eso2o44lmaie] C:\DOCUME~1\TROY~1.TRO\LOCALS~1\Temp\cjjbw4dr.exe
    O4 - HKCU\..\Run: [yfyawkso4rtj] C:\DOCUME~1\TROY~1.TRO\LOCALS~1\Temp\gy0oup.exe
    O4 - HKCU\..\Run: [mna0yv1owzybzrbqfjog2m6x50hynx4hul2pcwgz8czwz6tb] C:\DOCUME~1\TROY~1.TRO\LOCALS~1\Temp\ubbyf08u80ikc.exe
    O4 - HKCU\..\Run: [rpue287eizze2ylulq3tvgbnfaop] C:\DOCUME~1\TROY~1.TRO\LOCALS~1\Temp\kfehpsd360itw.exe
    O4 - HKCU\..\Run: [lwvvrobcsyn11xdsf6i08m] C:\DOCUME~1\TROY~1.TRO\LOCALS~1\Temp\z17yihndw.exe
    O4 - HKCU\..\Run: [oh31qilcx0sz1v7r1p85yq] C:\DOCUME~1\TROY~1.TRO\LOCALS~1\Temp\u3yzqpez70.exe
    O4 - HKCU\..\Run: [lrwlojxhiwgckmeeneg] C:\DOCUME~1\TROY~1.TRO\LOCALS~1\Temp\gbzujhgwzdj0.exe
    O4 - HKCU\..\Run: [vzmjriv9wrfc8lugr] C:\DOCUME~1\TROY~1.TRO\LOCALS~1\Temp\il7320rq.exe
    O4 - HKCU\..\Run: [u7a8a54qhia3igf79q8bnh2] C:\DOCUME~1\TROY~1.TRO\LOCALS~1\Temp\a4ly3d5l.exe
    O4 - HKCU\..\Run: [cgtnzzuwe7id25l8nbffqtyv0qi313sb51pm7nlf24] C:\DOCUME~1\TROY~1.TRO\LOCALS~1\Temp\rh070z3.exe
    O4 - HKCU\..\Run: [a1g0jv4at0kntng0vyi7kum5auos1scn950it4cris] C:\DOCUME~1\TROY~1.TRO\LOCALS~1\Temp\rwebfhfm2q.exe
    O4 - HKCU\..\Run: [vnc6bf2iadknnnednvgvhzlhzxqnq77em85ffcoayttiyee8] C:\DOCUME~1\TROY~1.TRO\LOCALS~1\Temp\qrohycol.exe
    O4 - HKCU\..\Run: [ljg7c3pyi87xjyw6qom2eawzpy6hfh48t] C:\DOCUME~1\TROY~1.TRO\LOCALS~1\Temp\g8v84vw9tt.exe
    O4 - HKCU\..\Run: [ivqa593gx8r89gyel5bxys58f2em42abrczli0849] C:\DOCUME~1\TROY~1.TRO\LOCALS~1\Temp\nitlb5d06ym.exe
    O4 - HKCU\..\Run: [whsxp0jd11jgmktx9tj8w] C:\DOCUME~1\TROY~1.TRO\LOCALS~1\Temp\y0ngop7.exe
    O4 - HKCU\..\Run: [dxjph05ukiq8pdb7tdtpapzyynov] C:\DOCUME~1\TROY~1.TRO\LOCALS~1\Temp\a0dlm54n2t.exe
    O4 - HKCU\..\Run: [skamlpak8g8acy2gu5rp9exuqvn4uu] C:\DOCUME~1\TROY~1.TRO\LOCALS~1\Temp\f0u89rqpu6gu.exe
    O4 - HKCU\..\Run: [u29zouzqmc6t3h6sroxq8w56s4y7dg2ap] C:\DOCUME~1\TROY~1.TRO\LOCALS~1\Temp\q2urf1sixogl4.exe
    O4 - HKCU\..\Run: [i1kacwwx5ylq17dv5zkq8n3i1cv4fvk] C:\DOCUME~1\TROY~1.TRO\LOCALS~1\Temp\mz1asmk1ai.exe
    O4 - HKCU\..\Run: [utnvljbnzvhows28qk9u406m7] C:\DOCUME~1\TROY~1.TRO\LOCALS~1\Temp\n968j34cbcr.exe
    O4 - HKCU\..\Run: [n6yu7yoom28xklio8ig759] C:\DOCUME~1\TROY~1.TRO\LOCALS~1\Temp\v8kd8pawpupn.exe
    O4 - HKCU\..\Run: [ywzorb9i4wphjhf0b8q8xnxi583ouqbsgd33i1qmjxhz3rct] C:\DOCUME~1\TROY~1.TRO\LOCALS~1\Temp\tuc2juc2sd96d.exe
    O4 - HKCU\..\Run: [crnevgdkvq2d34404og8] C:\DOCUME~1\TROY~1.TRO\LOCALS~1\Temp\vnxrn9ufr3yl.exe
    O4 - HKCU\..\Run: [f8pmlk9rom4o7bwcksri88kgi9r0doa5ve4a1zc9as97n] C:\DOCUME~1\TROY~1.TRO\LOCALS~1\Temp\m6osi6hegebz.exe
    O4 - HKCU\..\Run: [jf6jhandajdacl869bsz3dfdzhm28jx81tkfqcqxtt7g] C:\DOCUME~1\TROY~1.TRO\LOCALS~1\Temp\t5ed1ib9wq.exe
    O4 - HKCU\..\Run: [dwd8tlqi0ryvh4jzv393ix5k86o0fw28zgqug8ukhm72c1h] C:\DOCUME~1\TROY~1.TRO\LOCALS~1\Temp\waqdh0n.exe
    O4 - HKCU\..\Run: [cstsjb5lx0rxw4eamk8z5bgo] C:\DOCUME~1\TROY~1.TRO\LOCALS~1\Temp\jifsg21hwwx9.exe
    O4 - HKCU\..\Run: [qgn3hazyiku0xmdhfdky91waar] C:\DOCUME~1\TROY~1.TRO\LOCALS~1\Temp\l12x0620fk.exe
    O4 - HKCU\..\Run: [fcne4nfwtywav5ofhhuvg244a4oomtrk884lzluhxgl9640u] C:\DOCUME~1\TROY~1.TRO\LOCALS~1\Temp\h84j2ob0lk9.exe
    O4 - HKCU\..\Run: [nz73alg9rva4q97v11] C:\DOCUME~1\TROY~1.TRO\LOCALS~1\Temp\t8zzkd94ngrb.exe
    O4 - HKCU\..\Run: [n3k1odxffsflcffxyj0eth9zjky0v] C:\DOCUME~1\TROY~1.TRO\LOCALS~1\Temp\qvjtv2.exe
    O4 - HKCU\..\Run: [pqdfv0i5p2xz6ip24] C:\DOCUME~1\TROY~1.TRO\LOCALS~1\Temp\je0zo2p16.exe
    O4 - HKCU\..\Run: [yw08e2yqhwf7yuk5mztz66et8j93vyag9w6l0] C:\DOCUME~1\TROY~1.TRO\LOCALS~1\Temp\dmw4p4wjp42.exe
    O4 - HKCU\..\Run: [uv0eu2sze4wex] C:\DOCUME~1\TROY~1.TRO\LOCALS~1\Temp\falcz62g.exe
    O4 - HKCU\..\Run: [ofnkz01u0vdp4ywkvjykmf] C:\DOCUME~1\TROY~1.TRO\LOCALS~1\Temp\dwyro2pb8.exe
    O4 - HKCU\..\Run: [df7366497i7atoctvz4rtm] C:\DOCUME~1\TROY~1.TRO\LOCALS~1\Temp\tuijaueinze.exe
    O4 - HKCU\..\Run: [zwpugrozp2es32dfqw1ojy6kbx3tmklafi3cm4rpmc] C:\DOCUME~1\TROY~1.TRO\LOCALS~1\Temp\s3dl2uuqmm.exe
    O4 - HKCU\..\Run: [ud4fcowqooj] C:\DOCUME~1\TROY~1.TRO\LOCALS~1\Temp\uz7xppp2xh.exe
    O4 - HKCU\..\Run: [eb46bc2aaawmknelkuu8a4orwep0k5ho] C:\DOCUME~1\TROY~1.TRO\LOCALS~1\Temp\mwb5a8qlsh6r.exe
    O4 - HKCU\..\Run: [d6a2df3n1bi6yxjadtqb2rinc8dkgheuiwzr6juohbi3or08f] C:\DOCUME~1\TROY~1.TRO\LOCALS~1\Temp\uj44u3zu9ndh.exe
    O4 - HKCU\..\Run: [ltp8jaohcs779uzcneiqzsfc] C:\DOCUME~1\TROY~1.TRO\LOCALS~1\Temp\pp6pzo72.exe
    O4 - HKCU\..\Run: [crrot9r4a] C:\DOCUME~1\TROY~1.TRO\LOCALS~1\Temp\dnkv1ceq0ub9.exe
    O4 - HKCU\..\Run: [i07ai7ieourrkmygwypex] C:\DOCUME~1\TROY~1.TRO\LOCALS~1\Temp\djhig90.exe
    O4 - HKCU\..\Run: [t7a47ketsd8693x9geskwkgvmue7dnmh] C:\DOCUME~1\TROY~1.TRO\LOCALS~1\Temp\o2olwie8mc.exe
    O4 - HKCU\..\Run: [ybx78uvkg03yqcw] C:\DOCUME~1\TROY~1.TRO\LOCALS~1\Temp\sr039xr39iy9.exe
    O4 - HKCU\..\Run: [dgwbhiagf234mkvrqrwnnr69xwn07yu8iteu] C:\DOCUME~1\TROY~1.TRO\LOCALS~1\Temp\og516kqumc4.exe
    O4 - HKCU\..\Run: [ho5u8rgavun] C:\DOCUME~1\TROY~1.TRO\LOCALS~1\Temp\gd99akruhcgeh.exe
    O4 - HKCU\..\Run: [bjtobqljihrqhnfevrvshb5aqi51r2q6eu51erxqbb0ubex01] C:\DOCUME~1\TROY~1.TRO\LOCALS~1\Temp\yqndj7u.exe
    O4 - HKCU\..\Run: [uajjh6feb63egw] C:\DOCUME~1\TROY~1.TRO\LOCALS~1\Temp\m2igvxdpm7lm.exe
    O4 - HKCU\..\Run: [q0coaejga7b5us1] C:\DOCUME~1\TROY~1.TRO\LOCALS~1\Temp\iefr63yfjm8.exe
    O4 - HKCU\..\Run: [kv5d28e6br5gonzhhlo71qp52dw74vngpgtdrlggo] C:\DOCUME~1\TROY~1.TRO\LOCALS~1\Temp\ck65e6c02ps9j.exe
    O4 - HKCU\..\Run: [spw63blind6zq6yn8ulhvc] C:\DOCUME~1\TROY~1.TRO\LOCALS~1\Temp\qytw5e.exe
    O4 - HKCU\..\Run: [yq6v0fh9z3osx5e1yb251eoj3dsyfc0qf] C:\DOCUME~1\TROY~1.TRO\LOCALS~1\Temp\erv2a367bxzi2.exe
    O4 - HKCU\..\Run: [fj1y5ht0arljfec6nqf3pqzmb9r] C:\DOCUME~1\TROY~1.TRO\LOCALS~1\Temp\g6ib4z8rwfq.exe
    O4 - HKCU\..\Run: [dgkv7dfw5izrktsggrl7ogaqmin] C:\DOCUME~1\TROY~1.TRO\LOCALS~1\Temp\khdw7cq02lkn.exe
    O4 - HKCU\..\Run: [na5rh39xs6aeosp8swerxg5oplyz5l9wp6wksht] C:\DOCUME~1\TROY~1.TRO\LOCALS~1\Temp\te7731mw.exe
    O4 - HKCU\..\Run: [ks2hmbrsi6mb6qmtnuwq643xohosiyp2ev7jgg] C:\DOCUME~1\TROY~1.TRO\LOCALS~1\Temp\hrz0k5f.exe
    O4 - HKCU\..\Run: [k3x18xoqrg9g34ns8z1a6url0] C:\DOCUME~1\TROY~1.TRO\LOCALS~1\Temp\ohrplw22t4s.exe
    O4 - HKCU\..\Run: [adna3764bqg] C:\DOCUME~1\TROY~1.TRO\LOCALS~1\Temp\f4x28x.exe
    O4 - HKCU\..\Run: [u7b63llzdstyk10alglthdeyu0ebv1q656ahe9f5vkfq4583m7] C:\DOCUME~1\TROY~1.TRO\LOCALS~1\Temp\v9ic76bcc.exe
    O4 - HKCU\..\Run: [jmlid9n6qvnlc9e] C:\DOCUME~1\TROY~1.TRO\LOCALS~1\Temp\yopftl4wy9.exe
    O4 - HKCU\..\Run: [rzycgvky4f5dhqoxgf7ui8s9cf54ccbq9ljq2875] C:\DOCUME~1\TROY~1.TRO\LOCALS~1\Temp\vh5m6d5ps3.exe
    O4 - HKCU\..\Run: [gp2mguonyebh] C:\DOCUME~1\TROY~1.TRO\LOCALS~1\Temp\pjcyyyy8.exe
    O4 - HKCU\..\Run: [veg5tvj5pmg2r2] C:\DOCUME~1\TROY~1.TRO\LOCALS~1\Temp\qpf0i7j1h.exe
    O4 - HKCU\..\Run: [xi37kftv8zzn7bifejb5xcj] C:\DOCUME~1\TROY~1.TRO\LOCALS~1\Temp\z2e68sw.exe
    O4 - HKCU\..\Run: [o2ca2ktqh13i52xvfozfklztr7r] C:\DOCUME~1\TROY~1.TRO\LOCALS~1\Temp\ci3hwy55lfj.exe
    O4 - HKCU\..\Run: [hoee8v0on5bh] C:\DOCUME~1\TROY~1.TRO\LOCALS~1\Temp\xisujtl.exe
    O4 - HKCU\..\Run: [ch1etrzrqthbw6m1caz7rhywf6053jj5zu5g12zp99dvfqvdx6] C:\DOCUME~1\TROY~1.TRO\LOCALS~1\Temp\r4fnicw2.exe
    O4 - HKCU\..\Run: [m3t7ir61ctabfbgvps6tuck2lrwj9juvmgxubhqvxdvu50bx] C:\DOCUME~1\TROY~1.TRO\LOCALS~1\Temp\vsbseoi.exe
    O4 - HKCU\..\Run: [h7o1rwp8kq1uaslbllho7ls275zeupx8uezgvsk60be8] C:\DOCUME~1\TROY~1.TRO\LOCALS~1\Temp\xnue9a.exe
    O4 - HKCU\..\Run: [uaxvaldhw4zz9rk0a1zwxd7ero26jtmy8r0w96urk0] C:\DOCUME~1\TROY~1.TRO\LOCALS~1\Temp\po1iyw5l9ihe4.exe
    O4 - HKCU\..\Run: [ij6hzwdzvxqj1kfln8l6eesk5] C:\DOCUME~1\TROY~1.TRO\LOCALS~1\Temp\wxmn6og.exe
    O4 - HKCU\..\Run: [qvchik7dlsjdy8w6emh36qmjcf7bi8hgl664io8] C:\DOCUME~1\TROY~1.TRO\LOCALS~1\Temp\enc63v7pwrkab.exe
    O4 - HKCU\..\Run: [a31r6ebckgb7r115lntem5ivw3rfvau4h8n4pqtpbhybje3eap] C:\DOCUME~1\TROY~1.TRO\LOCALS~1\Temp\j1793o99dgi.exe
    O4 - HKCU\..\Run: [i2rq1kla7h8nkkh0qi8n5opx5l5bmrk9vjgxy283w04tt4] C:\DOCUME~1\TROY~1.TRO\LOCALS~1\Temp\adesmw.exe
    O4 - HKCU\..\Run: [b4l6vunuwqsnphpj1fvss9ydz6ysuwuoy2lrmt5a9e] C:\DOCUME~1\TROY~1.TRO\LOCALS~1\Temp\b4jqdd0.exe
    O4 - HKCU\..\Run: [ykhohhzr29ucoas3850i4guntlvulwcmd] C:\DOCUME~1\TROY~1.TRO\LOCALS~1\Temp\r0k5sx9rm.exe
    O4 - HKCU\..\Run: [u3ue0vluc60lukaqvs67we3bkm9l7kzud1xjhnz3] C:\DOCUME~1\TROY~1.TRO\LOCALS~1\Temp\pqswejja.exe
    O4 - HKCU\..\Run: [q4eehd8a8v7nbugh5gvin9i2h92d72lljtuft9igtt2za5] C:\DOCUME~1\TROY~1.TRO\LOCALS~1\Temp\ejxdsa5efa.exe
    O4 - HKCU\..\Run: [xz622u07i0wpezh1817x674lzedy9uekjcnim2jmdthao] C:\DOCUME~1\TROY~1.TRO\LOCALS~1\Temp\pdi7g86e.exe
    O4 - HKCU\..\Run: [yqi7o3yuww] C:\DOCUME~1\TROY~1.TRO\LOCALS~1\Temp\sspr2nzy8.exe
    O4 - HKCU\..\Run: [ndr44zk73kjogefirmq56um4jx0] C:\DOCUME~1\TROY~1.TRO\LOCALS~1\Temp\pndrmonvfb8w.exe
    O4 - HKCU\..\Run: [h1txi62srboz62dk3x9p9kyjopq] C:\DOCUME~1\TROY~1.TRO\LOCALS~1\Temp\qm0e9cnm4gag6.exe
    O4 - HKCU\..\Run: [m08rdk2oezbit7gt0rla7nb84k5xyrnjy5n] C:\DOCUME~1\TROY~1.TRO\LOCALS~1\Temp\zbtj9u32j.exe
    O4 - HKCU\..\Run: [zir1xwi2bwzx0kjz5eqg5vzatrz3fs3c0wel9cs574ur8e2pe5] C:\DOCUME~1\TROY~1.TRO\LOCALS~1\Temp\dqahxtz.exe
    O4 - HKCU\..\Run: [sastk7byafywj63kcvvvcl7kra2] C:\DOCUME~1\TROY~1.TRO\LOCALS~1\Temp\o9t0331q.exe
    O4 - HKCU\..\Run: [l51a8m5zqbchn0i7qeocvkrqy3hycsh] C:\DOCUME~1\TROY~1.TRO\LOCALS~1\Temp\g0o1m9gx6o0.exe
    O4 - HKCU\..\Run: [yfr0knygbc69jngqm6fy0pncu6fa] C:\DOCUME~1\TROY~1.TRO\LOCALS~1\Temp\f0lqu7pe.exe
    O4 - HKCU\..\Run: [zfria1aid2ysf] C:\DOCUME~1\TROY~1.TRO\LOCALS~1\Temp\hcqd1ugd41msx.exe
    O4 - HKCU\..\Run: [jo144p8mo760] C:\DOCUME~1\TROY~1.TRO\LOCALS~1\Temp\rz9y055b.exe
    O4 - HKCU\..\Run: [x2ic2tj5y16l46rrvioj7sf3c4iz9b5f3a6mqts5q] C:\DOCUME~1\TROY~1.TRO\LOCALS~1\Temp\mwd64onb82.exe
    O4 - HKCU\..\Run: [bqroj9pwnkikzx8hbevpauk0jv9rzwxsrtxu46] C:\DOCUME~1\TROY~1.TRO\LOCALS~1\Temp\qq8r71oke8d.exe
    O4 - HKCU\..\Run: [cqlc6ycer3kw54u9y4d7lo4] C:\DOCUME~1\TROY~1.TRO\LOCALS~1\Temp\wkcy8d3.exe
    O4 - HKCU\..\Run: [aw1318l2wlg1g2p44dt7gfdzwlyo1vdnt] C:\DOCUME~1\TROY~1.TRO\LOCALS~1\Temp\wzqlna8d5w.exe
    O4 - HKCU\..\Run: [ip9avz1x0f7ky6sj3rtw6utvwe4i6qrkj6] C:\DOCUME~1\TROY~1.TRO\LOCALS~1\Temp\hiq4t1a68eh.exe
    O4 - HKCU\..\Run: [ty8ni4gpu1c3riezvmnddidwfp2] C:\DOCUME~1\TROY~1.TRO\LOCALS~1\Temp\v6s7pshduw8.exe
    O4 - HKCU\..\Run: [cv7pj3rm1gunp2o1d0id2skds7t8h4lj2njddg2ha5] C:\DOCUME~1\TROY~1.TRO\LOCALS~1\Temp\t0wr3icq012y9.exe
    O4 - HKCU\..\Run: [jakm8jkktlju10kxg8tu88uejj57g06yun5h62o07f3s9jrz34] C:\DOCUME~1\TROY~1.TRO\LOCALS~1\Temp\qmpv0tplz2y.exe
    O4 - HKCU\..\Run: [c3jj0hkdpohupea4u2qggtsd2f9bim7u34uuhx0p57k] C:\DOCUME~1\TROY~1.TRO\LOCALS~1\Temp\g4puazo.exe
    O4 - HKCU\..\Run: [p7rw78dhutdonakn1kk0ydj52dycry] C:\DOCUME~1\TROY~1.TRO\LOCALS~1\Temp\ba8ywkwsl3l.exe
    O4 - HKCU\..\Run: [crslqnylrz5v3dgvyyqxh34] C:\DOCUME~1\TROY~1.TRO\LOCALS~1\Temp\qxop4m9mur8.exe
    O4 - HKCU\..\Run: [ei6cboiz9t7vilykme2k834lnz81yw8pqpz2yh] C:\DOCUME~1\TROY~1.TRO\LOCALS~1\Temp\ho9clr4zc.exe
    O4 - HKCU\..\Run: [d6agu2bojb3dkukbznzqsap5g2t7e04mb04uh8odqry1sk] C:\DOCUME~1\TROY~1.TRO\LOCALS~1\Temp\l89dio.exe
    O4 - HKCU\..\Run: [mlsnbi2bn9onsrc] C:\DOCUME~1\TROY~1.TRO\LOCALS~1\Temp\s2xvb2upm39w7.exe
    O4 - HKCU\..\Run: [kr88r5vt4z3] C:\DOCUME~1\TROY~1.TRO\LOCALS~1\Temp\h5gfv9xa24d.exe
    O4 - HKCU\..\Run: [qxp7b8s258ebdgnfngmf9s] C:\DOCUME~1\TROY~1.TRO\LOCALS~1\Temp\oe1k3183bm2lu.exe
    O4 - HKCU\..\Run: [assal154v1cugtg294gws4b8o51kr1liv] C:\DOCUME~1\TROY~1.TRO\LOCALS~1\Temp\v3d2gxl.exe
    O4 - HKCU\..\Run: [f1fz795c6] C:\DOCUME~1\TROY~1.TRO\LOCALS~1\Temp\o5nogbg1.exe
    O4 - HKCU\..\Run: [v4yyvd1iyp61hy9oi] C:\DOCUME~1\TROY~1.TRO\LOCALS~1\Temp\tanvteohe.exe
    O4 - HKCU\..\Run: [u23xiv08oh9359s80flp24pnl0dhns9xwg] C:\DOCUME~1\TROY~1.TRO\LOCALS~1\Temp\i8nc6nmo.exe
    O4 - HKCU\..\Run: [hfkdaxkcpf3qmwyogt8qc5bw7sxntgysy5n4] C:\DOCUME~1\TROY~1.TRO\LOCALS~1\Temp\vb0rpq7q.exe
    O4 - HKCU\..\Run: [ofwx0uyd36g5caogp1op73nbo14mwoe] C:\DOCUME~1\TROY~1.TRO\LOCALS~1\Temp\g52ldo.exe
    O4 - HKCU\..\Run: [gl2yfgnwfhxplwvpcm3h6nsitt9zrp6] C:\DOCUME~1\TROY~1.TRO\LOCALS~1\Temp\dk576k92zdp4q.exe
    O4 - HKCU\..\Run: [f7au9xxewsagi5ym1512p9mvvtkqz] C:\DOCUME~1\TROY~1.TRO\LOCALS~1\Temp\nc0sldak1iu7b.exe
    O4 - HKCU\..\Run: [v7aq0wyqvs6r74ruxa7u7z7ggntogp9xvo8x2al378] C:\DOCUME~1\TROY~1.TRO\LOCALS~1\Temp\cn6ixdgx894k.exe
    O4 - HKCU\..\Run: [oh4ibn5m0o24r1ajnqjuu] C:\DOCUME~1\TROY~1.TRO\LOCALS~1\Temp\z6c0ucve.exe
    O4 - HKCU\..\Run: [e6djm4qmg5v6vmryynfgvulnj3kwchvbc2ygr] C:\DOCUME~1\TROY~1.TRO\LOCALS~1\Temp\cgqk0svvsqqb.exe
    O4 - HKCU\..\Run: [yjwthmrs8bgn1ihwhf0q] C:\DOCUME~1\TROY~1.TRO\LOCALS~1\Temp\h9h8jgm.exe
    O4 - HKCU\..\Run: [l1db51wafvt5wdnzr2vjtjp7jbv3ibia9jub5rxs5bb] C:\DOCUME~1\TROY~1.TRO\LOCALS~1\Temp\lywqaq.exe
    O4 - HKCU\..\Run: [pq5li63uotoa8a5wqw6zxpje] C:\DOCUME~1\TROY~1.TRO\LOCALS~1\Temp\k3cgr5stjj.exe
    O4 - HKCU\..\Run: [l9eijruakr91cd54xcmv9ai7] C:\DOCUME~1\TROY~1.TRO\LOCALS~1\Temp\xmw6svee9t3.exe
    O4 - HKCU\..\Run: [m971w231n2gaocexkt4qyvdvrp74geyhn34y1] C:\DOCUME~1\TROY~1.TRO\LOCALS~1\Temp\fw1ekkrix.exe
    O4 - HKCU\..\Run: [sm8lbqfm3c9bgaep] C:\DOCUME~1\TROY~1.TRO\LOCALS~1\Temp\qfkxqutb0k.exe
    O4 - HKCU\..\Run: [fwmvt4x0j4mq2svjagw77kqagagqqbqjpci3c2ijjjuwj4i83] C:\DOCUME~1\TROY~1.TRO\LOCALS~1\Temp\cv47f6h.exe
    O4 - HKCU\..\Run: [fq883lg7excas8ev8wpyv1piqzgdztxa4up32darb0xv] C:\DOCUME~1\TROY~1.TRO\LOCALS~1\Temp\f1de0j.exe
    O4 - HKCU\..\Run: [crsz8omn5k1ykda4g1hz3vgj3] C:\DOCUME~1\TROY~1.TRO\LOCALS~1\Temp\po0pdlupf.exe
    O4 - HKCU\..\Run: [tl70k3nvvjnycwe1up8mysy7fflxozuuc9exb] C:\DOCUME~1\TROY~1.TRO\LOCALS~1\Temp\yybhky32l3.exe
    O4 - HKCU\..\Run: [ox1i3mxxbwm2vqzv4zoa37o8507cd3p86l] C:\DOCUME~1\TROY~1.TRO\LOCALS~1\Temp\r4nzr3e45rl.exe
    O4 - HKCU\..\Run: [hwso0rcjlhvqf1n517y8c9ij13dbj6qkz8u45ocw42] C:\DOCUME~1\TROY~1.TRO\LOCALS~1\Temp\ytsxu0yo23r.exe
    O4 - HKCU\..\Run: [zxq0imk7ttreamg23tah1mypq38pnj44] C:\DOCUME~1\TROY~1.TRO\LOCALS~1\Temp\fsiidcs01.exe
    O4 - HKCU\..\Run: [wem5tzdpmsso02oliyl] C:\DOCUME~1\TROY~1.TRO\LOCALS~1\Temp\jmd3gpa9ol.exe
    O4 - HKCU\..\Run: [nsonj29ztk48wlnld] C:\DOCUME~1\TROY~1.TRO\LOCALS~1\Temp\xyksu3.exe
    O4 - HKCU\..\Run: [u2gm2zzoco0fau8g] C:\DOCUME~1\TROY~1.TRO\LOCALS~1\Temp\krzyhpp6pfsa.exe
    O4 - HKCU\..\Run: [tit1war0b64jjvtw5eozbs5eqy] C:\DOCUME~1\TROY~1.TRO\LOCALS~1\Temp\qz1l9kz74.exe
    O4 - HKCU\..\Run: [x1hddl7jofn2bxuhta4nb58h62ti6] C:\DOCUME~1\TROY~1.TRO\LOCALS~1\Temp\n1u1n56n.exe
    O4 - HKCU\..\Run: [pgw7zo0fonn5y49ht9466zb21g1l4u9qiwbmunuxv9i80ktp] C:\DOCUME~1\TROY~1.TRO\LOCALS~1\Temp\z8zfbyndmx9.exe
    O4 - HKCU\..\Run: [z3iqhamtnvojiq6q2rfofgep3q2u6rael9cxdl4mv6nbh1n] C:\DOCUME~1\TROY~1.TRO\LOCALS~1\Temp\ziuihe4.exe
    O4 - HKCU\..\Run: [hclzzliq69w02ru4mpv0t7wxvzpxcdromgfwk] C:\DOCUME~1\TROY~1.TRO\LOCALS~1\Temp\ogbzu4.exe
    O4 - HKCU\..\Run: [turxuqinmcmpkwrxf0iyipceefzmqq] C:\DOCUME~1\TROY~1.TRO\LOCALS~1\Temp\fx123txe.exe
    O4 - HKCU\..\Run: [o5ag05ltdnt5weu1] C:\DOCUME~1\TROY~1.TRO\LOCALS~1\Temp\s1boaa9pay.exe
    O4 - HKCU\..\Run: [q9dkg6h85vwrjwmgx234ysl] C:\DOCUME~1\TROY~1.TRO\LOCALS~1\Temp\tig1c7t8.exe
    O4 - HKCU\..\Run: [x1x1cxlmz1a6j8gxcn5y7b5z8r1bqf2sv5nagqc56d18] C:\DOCUME~1\TROY~1.TRO\LOCALS~1\Temp\ewnk2ijyad6r.exe
    O4 - HKCU\..\Run: [suv0eie3xnfuwg19j8ddmg157] C:\DOCUME~1\TROY~1.TRO\LOCALS~1\Temp\a3p640byzdvmk.exe
    O4 - HKCU\..\Run: [uy28mfyz4a0jdrkbbxsmwbh7pre2r2vcujt9c3yr] C:\DOCUME~1\TROY~1.TRO\LOCALS~1\Temp\pk6nyq95wvcv.exe
    O4 - HKCU\..\Run: [cd7e86zs8so7bb6] C:\DOCUME~1\TROY~1.TRO\LOCALS~1\Temp\vjtepjc.exe
    O4 - HKCU\..\Run: [rl07spxhshaoqaub7kvhws8qy4wcz3kpbcktxd7128o] C:\DOCUME~1\TROY~1.TRO\LOCALS~1\Temp\y4g8pakos.exe
    O4 - HKCU\..\Run: [vku5rz13ccak] C:\DOCUME~1\TROY~1.TRO\LOCALS~1\Temp\hmwf6lupj2.exe
    O4 - HKCU\..\Run: [z16pzhme4085fp9u0lyfulz3d919yk5rxrgtzu5o] C:\DOCUME~1\TROY~1.TRO\LOCALS~1\Temp\a98xd75r3qq.exe
    O4 - HKCU\..\Run: [ssonzzcn4sxsxb3w6evwa69voscxu4qhabqapwrod11j98d95] C:\DOCUME~1\TROY~1.TRO\LOCALS~1\Temp\wkdwjb9wg.exe
    O4 - HKCU\..\Run: [zl1dqi5i3lddmwdkl3zme8ak227] C:\DOCUME~1\TROY~1.TRO\LOCALS~1\Temp\m2deay8c72ld5.exe
    O4 - HKCU\..\Run: [rlt60ydd4kjf] C:\DOCUME~1\TROY~1.TRO\LOCALS~1\Temp\g99vsvzc.exe
    O4 - HKCU\..\Run: [zztioftlya1m7u8hkd1v1qbd5yqkci] C:\DOCUME~1\TROY~1.TRO\LOCALS~1\Temp\edkoy6z1lb.exe
    O4 - HKCU\..\Run: [u82wn227lhvt] C:\DOCUME~1\TROY~1.TRO\LOCALS~1\Temp\qp8q2w24mkk0.exe
    O4 - HKCU\..\Run: [p59uo40n3mi4kfhgww44zxhp0xuu47] C:\DOCUME~1\TROY~1.TRO\LOCALS~1\Temp\ay37r736r7o9.exe
    O4 - HKCU\..\Run: [xw969393bbna643xtmn9gyv04r9qz63oa3ew0bxj7fhzhi] C:\DOCUME~1\TROY~1.TRO\LOCALS~1\Temp\b885i7nyskjxd.exe
    O4 - HKCU\..\Run: [ol6kvj6nc6pzjr6u6lu9a6fd7febvgprc1qv1q0lhpk0adjb] C:\DOCUME~1\TROY~1.TRO\LOCALS~1\Temp\lvaqhitw.exe
    O4 - HKCU\..\Run: [zg0eeoxotj3ptys25xc9dk6frmn] C:\DOCUME~1\TROY~1.TRO\LOCALS~1\Temp\smjmii5f4rj.exe
    O4 - HKCU\..\Run: [ed1t62ryjs1c5j89yuhalaluy8] C:\DOCUME~1\TROY~1.TRO\LOCALS~1\Temp\twok9i675lxf.exe
    O4 - HKCU\..\Run: [fyrr7q8mfnvye4yz25s3wyldgumq2b9wzabjra2wn0mcve] C:\DOCUME~1\TROY~1.TRO\LOCALS~1\Temp\cf1yvoq.exe
    O4 - HKCU\..\Run: [arimxee21uza3l3] C:\DOCUME~1\TROY~1.TRO\LOCALS~1\Temp\ny1h1ysa.exe
    O4 - HKCU\..\Run: [hsw9e9o9g5] C:\DOCUME~1\TROY~1.TRO\LOCALS~1\Temp\qnaomse.exe
    O4 - HKCU\..\Run: [k379gp7zlup0d327] C:\DOCUME~1\TROY~1.TRO\LOCALS~1\Temp\jam6txp7.exe
    O4 - HKCU\..\Run: [tijp9tuc3k10y19j] C:\DOCUME~1\TROY~1.TRO\LOCALS~1\Temp\b1h7c34v74t.exe
    O4 - HKCU\..\Run: [sz70drrbqt0xv6gekqlys4fcski1tsn5gvl673tdvxppp] C:\DOCUME~1\TROY~1.TRO\LOCALS~1\Temp\tx5rs8vmqym.exe
    O4 - HKCU\..\Run: [jqftupolghczpvqnqu5rb] C:\DOCUME~1\TROY~1.TRO\LOCALS~1\Temp\sxlxjauh.exe
    O4 - HKCU\..\Run: [lkw40u9zu21kw2412l17i] C:\DOCUME~1\TROY~1.TRO\LOCALS~1\Temp\v3u44j7.exe
    O4 - HKCU\..\Run: [yyg1h746zmxls7wsmj7tcexgi4imm9cmttir1rjyay5p] C:\DOCUME~1\TROY~1.TRO\LOCALS~1\Temp\m02lqia9.exe
    O4 - HKCU\..\Run: [y47z1mig2spj5jkqce86aj2uvr7var9bijovfy] C:\DOCUME~1\TROY~1.TRO\LOCALS~1\Temp\atg72ptjt6qei.exe
    O4 - HKCU\..\Run: [nuj21ri6y4fui37eye9v8ezm47m3xidt6vdx7qoh42] C:\DOCUME~1\TROY~1.TRO\LOCALS~1\Temp\w51dd7q18krou.exe
    O4 - HKCU\..\Run: [na7nnwbtf910ojm157jyo5uztnb2wduhgdk] C:\DOCUME~1\TROY~1.TRO\LOCALS~1\Temp\jdqsc98s3x.exe
    O4 - HKCU\..\Run: [w35dmkykyeusyfhg0a9hcyi1qca5g7hmursa1ffov] C:\DOCUME~1\TROY~1.TRO\LOCALS~1\Temp\q7ldfm5uvvx.exe
    O4 - HKCU\..\Run: [yy18ynzqxyr60y3mejcl28a8] C:\DOCUME~1\TROY~1.TRO\LOCALS~1\Temp\ji9c2qsz8.exe
    O4 - HKCU\..\Run: [shdsq72thte5zf89td989yxee406c1lejoxbl80y0bx] C:\DOCUME~1\TROY~1.TRO\LOCALS~1\Temp\pxgf75lju1.exe
    O4 - HKCU\..\Run: [b3l0nlv9seb54p9jkhux4kveaug7] C:\DOCUME~1\TROY~1.TRO\LOCALS~1\Temp\efd369tz3p2.exe
    O4 - HKCU\..\Run: [stpa1sq8lejn1hqwhuzsr1g3e22wt93] C:\DOCUME~1\TROY~1.TRO\LOCALS~1\Temp\j5znnffk2.exe
    O4 - HKCU\..\Run: [xg9ex2ridvxy2g8ga3swo3tm9qakw1h3gtksnu] C:\DOCUME~1\TROY~1.TRO\LOCALS~1\Temp\zh0v0qzwy8k6.exe
    O4 - HKCU\..\Run: [xq8tlf17m] C:\DOCUME~1\TROY~1.TRO\LOCALS~1\Temp\bs8b2ig.exe
    O4 - HKCU\..\Run: [snq4sgakpt0qwh7wtlscy7atzr5cr5rug985h7] C:\DOCUME~1\TROY~1.TRO\LOCALS~1\Temp\c69243283k6.exe
    O4 - HKCU\..\Run: [frhe6wu9l] C:\DOCUME~1\TROY~1.TRO\LOCALS~1\Temp\qjkvlovabx.exe
    O4 - HKCU\..\Run: [u121vqpjq3] C:\DOCUME~1\TROY~1.TRO\LOCALS~1\Temp\i5wcvd.exe
    O4 - HKCU\..\Run: [ekkm5wpiqk6x1ilopiv7hdbxah3f60xhlnmg5urfia] C:\DOCUME~1\TROY~1.TRO\LOCALS~1\Temp\towv1n7.exe
    O4 - HKCU\..\Run: [dzvfo3fsdsi70gp5h8] C:\DOCUME~1\TROY~1.TRO\LOCALS~1\Temp\jbzefmq.exe
    O4 - HKCU\..\Run: [to5y40eitk9dwxdd8fg] C:\DOCUME~1\TROY~1.TRO\LOCALS~1\Temp\chbdmr1f.exe
    O4 - HKCU\..\Run: [g7nb1uw60r2atwsjvfn0dpo5dokp04v1jdnqh12f] C:\DOCUME~1\TROY~1.TRO\LOCALS~1\Temp\hc9g0wz3zau.exe
    O4 - HKCU\..\Run: [e9zf1jxptnfsp5uq5s7lbp93je0poods] C:\DOCUME~1\TROY~1.TRO\LOCALS~1\Temp\azlfq1a5jy14.exe
    O4 - HKCU\..\Run: [y4e5nhfw1bg8pcg7wt] C:\DOCUME~1\TROY~1.TRO\LOCALS~1\Temp\dez2myf.exe
    O4 - HKCU\..\Run: [iu0x6fhuuf9w2kpf78550xbq037tr6xap] C:\DOCUME~1\TROY~1.TRO\LOCALS~1\Temp\kiin49ly4m.exe
    O4 - HKCU\..\Run: [v5ddnnvynttm1l7ok] C:\DOCUME~1\TROY~1.TRO\LOCALS~1\Temp\s0bjfnpes68.exe
    O4 - HKCU\..\Run: [n65xd38qumrt9mc2nslq9pe097fgqfl3xz2v] C:\DOCUME~1\TROY~1.TRO\LOCALS~1\Temp\b4rtmf4ptgy.exe
    O4 - HKCU\..\Run: [a5ppuh1zu0uznj3sjy4dndmf28] C:\DOCUME~1\TROY~1.TRO\LOCALS~1\Temp\c9do4f0mua6u0.exe
    O4 - HKCU\..\Run: [ko89ntqdhhikwsa] C:\DOCUME~1\TROY~1.TRO\LOCALS~1\Temp\qgp7qoeiqys.exe
    O4 - HKCU\..\Run: [bzwjrgyvcjv3p7ou] C:\DOCUME~1\TROY~1.TRO\LOCALS~1\Temp\gypphud.exe
    O4 - HKCU\..\Run: [pu3wolyuwkzbcze8j2h69ck0x8o] C:\DOCUME~1\TROY~1.TRO\LOCALS~1\Temp\xffs90ru6.exe
    O4 - HKCU\..\Run: [ziksldtzmgmsck8rt3y6qincj095ksfhk49ayecstzvanw6] C:\DOCUME~1\TROY~1.TRO\LOCALS~1\Temp\cewrdw50utt7.exe
    O4 - HKCU\..\Run: [mb0o163pf6yowxyf0naqadillnxomulg0de69xoueo4z2] C:\DOCUME~1\TROY~1.TRO\LOCALS~1\Temp\xkyv37az.exe
    O4 - HKCU\..\Run: [h5mc7ktlsida7bu1] C:\DOCUME~1\TROY~1.TRO\LOCALS~1\Temp\q7aupm7a9.exe
    O4 - HKCU\..\Run: [nw093zilzzsso22teyoyt93c38pux6ylqo9f] C:\DOCUME~1\TROY~1.TRO\LOCALS~1\Temp\gputu4lw9n.exe
    O4 - HKCU\..\Run: [lr0e4arwyxq7y335zo97utgl2iy3vlftsavgv48] C:\DOCUME~1\TROY~1.TRO\LOCALS~1\Temp\sniuhccewiw.exe
    O4 - HKCU\..\Run: [s3byyptq1mkqer5345t9zawlyeggz24mj] C:\DOCUME~1\TROY~1.TRO\LOCALS~1\Temp\odkgjulx2i2y.exe
    O4 - HKCU\..\Run: [hfv26hse0y91dgf3h3tr4j7xbk0] C:\DOCUME~1\TROY~1.TRO\LOCALS~1\Temp\o81wawg02if4l.exe
    O4 - HKCU\..\Run: [ky9e70q2d6] C:\DOCUME~1\TROY~1.TRO\LOCALS~1\Temp\cbhml1sl.exe
    O4 - HKCU\..\Run: [trg15bo4bxo34dv82vdnmwcym0] C:\DOCUME~1\TROY~1.TRO\LOCALS~1\Temp\gvak8gh24c1.exe
    O4 - HKCU\..\Run: [ogcqyrbvzqrk3eidoo3g90f2] C:\DOCUME~1\TROY~1.TRO\LOCALS~1\Temp\b6v83i.exe
    O4 - HKCU\..\Run: [m1o13pn3vlurx368l6jsgde7qzi9mh8e1w49bx5rlfe6ouho6s] C:\DOCUME~1\TROY~1.TRO\LOCALS~1\Temp\wdujdhvo41bc.exe
    O4 - HKCU\..\Run: [ke6alcs98] C:\DOCUME~1\TROY~1.TRO\LOCALS~1\Temp\rsrj59ehoueip.exe
    O4 - HKCU\..\Run: [i3ecz4e4zcrtkai5r5e2k9lsrbi99ktgykg] C:\DOCUME~1\TROY~1.TRO\LOCALS~1\Temp\xmvq6lcwm.exe
    O4 - HKCU\..\Run: [pjl37r71dg3pyxtvkd8qqmar1l125saum0lewze] C:\DOCUME~1\TROY~1.TRO\LOCALS~1\Temp\lgdkgoy9kj.exe
    O4 - HKCU\..\Run: [cmczotcaq0bc] C:\DOCUME~1\TROY~1.TRO\LOCALS~1\Temp\m3c70ba3.exe
    O4 - HKCU\..\Run: [e6fn8tqjfusjjomfyqttmm77cve931wj4ms4sq39tr] C:\DOCUME~1\TROY~1.TRO\LOCALS~1\Temp\o5mr11klp.exe
    O4 - HKCU\..\Run: [ez160pc5xzk03temctte66ief7wnnhpvrvqm4x10efx] C:\DOCUME~1\TROY~1.TRO\LOCALS~1\Temp\rayah0.exe
    O4 - HKCU\..\Run: [k9ux0kulcbbcf6iehk072lbjk2u0jgzwl1qbzcg] C:\DOCUME~1\TROY~1.TRO\LOCALS~1\Temp\fmcdt7fhepf.exe
    O4 - HKCU\..\Run: [zdtu9oc1a950gl1i7tbzrfuo57j3p8stkjdfzrd] C:\DOCUME~1\TROY~1.TRO\LOCALS~1\Temp\dmmc45qd.exe
    O4 - HKCU\..\Run: [nk2mxwxeah35dvq4uibrd0qj1nqj8q] C:\DOCUME~1\TROY~1.TRO\LOCALS~1\Temp\zxk68dcm9dtq.exe
    O4 - HKCU\..\Run: [dn3mp2ygpghxlq94j2xk0bxiriro6wu5zcg344d15cv7] C:\DOCUME~1\TROY~1.TRO\LOCALS~1\Temp\o037bkf76v.exe
    O4 - HKCU\..\Run: [gs5n1mvwek1kf5ie8f29eezln6f0lowhi9ou0hz8h30kczhs] C:\DOCUME~1\TROY~1.TRO\LOCALS~1\Temp\dh3o5ade3.exe
    O4 - HKCU\..\Run: [a7vbiwclk02clsnijjasuqpkljhg5nu032b8ps71th4b8ljie] C:\DOCUME~1\TROY~1.TRO\LOCALS~1\Temp\f1q084.exe
    O4 - HKCU\..\Run: [yc6w0ili8kv8743095a171g4fxb6tt4k6fy3jirlfo] C:\DOCUME~1\TROY~1.TRO\LOCALS~1\Temp\atbo36xy2.exe
    O4 - HKCU\..\Run: [qnpx9v7dtfl4yg0plvwtxm722mf3nuf] C:\DOCUME~1\TROY~1.TRO\LOCALS~1\Temp\t467j9wem.exe
    O4 - HKCU\..\Run: [i83ym5z7bhhc7pmzqsgdt2z9m2k90zzg0cbmcl3ezegv5ya] C:\DOCUME~1\TROY~1.TRO\LOCALS~1\Temp\h7wd1fwouw.exe
    O4 - HKCU\..\Run: [ds1jzno8ql8khe6] C:\DOCUME~1\TROY~1.TRO\LOCALS~1\Temp\gxyz3xoo0wi.exe
    O4 - HKCU\..\Run: [zsulfb58q63dyghxwkt2c7fftt] C:\DOCUME~1\TROY~1.TRO\LOCALS~1\Temp\sv5jq5f6n8jd.exe
    O4 - HKCU\..\Run: [xql7g318jg0snc62319b] C:\DOCUME~1\TROY~1.TRO\LOCALS~1\Temp\kc2yxevdizr6.exe
    O4 - HKCU\..\Run: [cq9u7eh8a3fpwgq1a6lferarf23jel1f8yllx5lsk8] C:\DOCUME~1\TROY~1.TRO\LOCALS~1\Temp\rmxsnj5ny37mo.exe
    O4 - HKCU\..\Run: [yhddd4g9coe015xp2] C:\DOCUME~1\TROY~1.TRO\LOCALS~1\Temp\yu2q7g67vwdb5.exe
    O4 - HKCU\..\Run: [y1l7dkekid86yw7x7fdf31ocfqb8qj0b10rszcj2wkyy2ray] C:\DOCUME~1\TROY~1.TRO\LOCALS~1\Temp\cogsat.exe
    O4 - HKCU\..\Run: [fldpj3nfqwnc5btk3y8vkfspr22knnbwiakemh8] C:\DOCUME~1\TROY~1.TRO\LOCALS~1\Temp\bvixcug.exe
    O4 - HKCU\..\Run: [olyx1fsw09znbfocr5p0ucugkj43d2woetkm5s8ws6xl0r4grt] C:\DOCUME~1\TROY~1.TRO\LOCALS~1\Temp\a0r30r10i.exe
    O4 - HKCU\..\Run: [vvue6q96kgdjposvuznb74ocmv] C:\DOCUME~1\TROY~1.TRO\LOCALS~1\Temp\tx5ppbmd.exe
    O4 - HKCU\..\Run: [ut1ws3m33yn4y4notiiu7woqxm4ak] C:\DOCUME~1\TROY~1.TRO\LOCALS~1\Temp\cklzw319.exe
    O4 - HKCU\..\Run: [ohjwr0cze9bef] C:\DOCUME~1\TROY~1.TRO\LOCALS~1\Temp\kysimvrzm4qf.exe
    O4 - HKCU\..\Run: [vz3yveqt450n6jeq8bzpmi1ckvs44wwg935thcpch] C:\DOCUME~1\TROY~1.TRO\LOCALS~1\Temp\fn9kylpqqvyck.exe
    O4 - HKCU\..\Run: [gzm2g6omxzk88222ttqi0iqszvaj2twlai6r] C:\DOCUME~1\TROY~1.TRO\LOCALS~1\Temp\z57ch6fe03ghn.exe
    O4 - HKCU\..\Run: [ce6e5tsv4xd04ewjxanv6737ct6iz] C:\DOCUME~1\TROY~1.TRO\LOCALS~1\Temp\homxuxpz1qds.exe
    O4 - HKCU\..\Run: [zbp5yqivnv59j5u2up14w6cu5f3olr9qr] C:\DOCUME~1\TROY~1.TRO\LOCALS~1\Temp\h834dnev53l.exe
    O4 - HKCU\..\Run: [umdcu3zls2bvf2ixihncgjh36nfthg4y8fmmxdnzu] C:\DOCUME~1\TROY~1.TRO\LOCALS~1\Temp\o7apf3ylc.exe
    O4 - HKCU\..\Run: [yf1jsca3khwl] C:\DOCUME~1\TROY~1.TRO\LOCALS~1\Temp\sqmg0oas48wje.exe
    O4 - HKCU\..\Run: [ysz5j01kcgl7lbgrqhi070p3soe6qtvqm83on3d8p9ri47729] C:\DOCUME~1\TROY~1.TRO\LOCALS~1\Temp\m210cs1.exe
    O4 - HKCU\..\Run: [p1tfsuil8a2i63t5uu2irdbzf4r4cj5] C:\DOCUME~1\TROY~1.TRO\LOCALS~1\Temp\wowue5uvr.exe
    O4 - HKCU\..\Run: [sgqee6bsqx8dxugbbqo0h7ntfsjnt6vltp12x] C:\DOCUME~1\TROY~1.TRO\LOCALS~1\Temp\lhurzxno5.exe
    O4 - HKCU\..\Run: [kaude8vrn23c2qj87wpaw7zr5] C:\DOCUME~1\TROY~1.TRO\LOCALS~1\Temp\b1i541a9by8kx.exe
    O4 - HKCU\..\Run: [l95kw2zaw7ggqk1sqih65iehm] C:\DOCUME~1\TROY~1.TRO\LOCALS~1\Temp\pvjie4.exe
    O4 - HKCU\..\Run: [anknhng5bufag0fueybk8vich9qwwievug2ccfmqrhvnqd3g0] C:\DOCUME~1\TROY~1.TRO\LOCALS~1\Temp\axj1key.exe
    O4 - HKCU\..\Run: [ccohv7o4lqbme8f8] C:\DOCUME~1\TROY~1.TRO\LOCALS~1\Temp\xfqswmgm.exe
    O4 - HKCU\..\Run: [ybg277guru56pam6bcdhvgr4ljcyvpq5bmqzc1pwg] C:\DOCUME~1\TROY~1.TRO\LOCALS~1\Temp\h29uvxm1wce.exe
    O4 - HKCU\..\Run: [eagpvbm9kkimno6bdou] C:\DOCUME~1\TROY~1.TRO\LOCALS~1\Temp\g26j3vv1.exe
    O4 - HKCU\..\Run: [uz91wlcue8ozjh5lspho3xaiotzoupwqszcb6r] C:\DOCUME~1\TROY~1.TRO\LOCALS~1\Temp\im9vsunt.exe
    O4 - HKCU\..\Run: [xa0ooxeyc] C:\DOCUME~1\TROY~1.TRO\LOCALS~1\Temp\xktt0y0nfio5.exe
    O4 - HKCU\..\Run: [ort8ly78izbz1k4ao8k9iezf1cv47hd2av] C:\DOCUME~1\TROY~1.TRO\LOCALS~1\Temp\af1azn15wjg4.exe
    O4 - HKCU\..\Run: [cye6t3t43] C:\DOCUME~1\TROY~1.TRO\LOCALS~1\Temp\z5wcrnhdvpl.exe
    O4 - HKCU\..\Run: [m5qte5kc7l8h69vjv756] C:\DOCUME~1\TROY~1.TRO\LOCALS~1\Temp\ssfv8r.exe
    O4 - HKCU\..\Run: [vdk68kwcj7u1h5tgnlpy7p] C:\DOCUME~1\TROY~1.TRO\LOCALS~1\Temp\tvxb9o850o9te.exe
    O4 - HKCU\..\Run: [mbc3o3ea0030] C:\DOCUME~1\TROY~1.TRO\LOCALS~1\Temp\dhy56rhtcl70f.exe
    O4 - HKCU\..\Run: [mlqiqqwc3vmop8t] C:\DOCUME~1\TROY~1.TRO\LOCALS~1\Temp\z2h7zsl.exe
    O4 - HKCU\..\Run: [z99mx24q9lp47gvaw35ozkfx3toab5py] C:\DOCUME~1\TROY~1.TRO\LOCALS~1\Temp\n4hq52nr.exe
    O4 - HKCU\..\Run: [kpqgwud3rde8nkdoe9k5wsqew1p4d24y7brxuxmd6gj0g3t] C:\DOCUME~1\TROY~1.TRO\LOCALS~1\Temp\htbhuvfcf.exe
    O4 - HKCU\..\Run: [g2cj2w0db34u0kuj37cewbu1rh06t041w40f7dwlnd1ke51] C:\DOCUME~1\TROY~1.TRO\LOCALS~1\Temp\wftyv1r20mw.exe
    O4 - HKCU\..\Run: [yxlf5s3qvzs7f9vxio1hvluacnsd88d1] C:\DOCUME~1\TROY~1.TRO\LOCALS~1\Temp\pa3mki3.exe
    O4 - HKCU\..\Run: [s36skaixmok7lbb] C:\DOCUME~1\TROY~1.TRO\LOCALS~1\Temp\eexufy.exe
    O4 - HKCU\..\Run: [jej1eg707altmk427l5fzdvk02zdeel] C:\DOCUME~1\TROY~1.TRO\LOCALS~1\Temp\q75bqkbpzalh1.exe
    O4 - HKCU\..\Run: [gyqvp5w5g9bl06m3vxn8f9x] C:\DOCUME~1\TROY~1.TRO\LOCALS~1\Temp\h9pssiq3cv9.exe
    O4 - HKCU\..\Run: [ca9ry4z8soibp05ap9b1akd8xinvt9a0rbea4b3hq2] C:\DOCUME~1\TROY~1.TRO\LOCALS~1\Temp\swfp6dhcrasn.exe
    O4 - HKCU\..\Run: [yzfc0awpr0gfn5vi] C:\DOCUME~1\TROY~1.TRO\LOCALS~1\Temp\dj23nuqs.exe
    O4 - HKCU\..\Run: [atl64ckr3v2urf1tpmrzu80sfkw7z0nn0v] C:\DOCUME~1\TROY~1.TRO\LOCALS~1\Temp\g8ba87c.exe
    O4 - HKCU\..\Run: [njd21oitwqk1iiblk22876924vc] C:\DOCUME~1\TROY~1.TRO\LOCALS~1\Temp\jdhaxp.exe
    O4 - HKCU\..\Run: [e659ku8fkd7t00fg6t05mr1gpz8yljmd8dk2ep] C:\DOCUME~1\TROY~1.TRO\LOCALS~1\Temp\a970hizpedf5.exe
    O4 - HKCU\..\Run: [g53k8bmqe3wgd2or293jjgfs3z6uxos1] C:\DOCUME~1\TROY~1.TRO\LOCALS~1\Temp\js1e33a.exe
    O4 - HKCU\..\Run: [b6srs2jubtdqb6y] C:\DOCUME~1\TROY~1.TRO\LOCALS~1\Temp\wbhmhblebtiuo.exe
    O4 - HKCU\..\Run: [r2lujyi5ud3cx23kpv8fu] C:\DOCUME~1\TROY~1.TRO\LOCALS~1\Temp\eu7pxkgi.exe
    O4 - HKCU\..\Run: [hl61z9zidr8u8ike56wl2gq34mc27t] C:\DOCUME~1\TROY~1.TRO\LOCALS~1\Temp\acm5qs5q.exe
    O4 - HKCU\..\Run: [fre86981zxp62iuuyarv6be] C:\DOCUME~1\TROY~1.TRO\LOCALS~1\Temp\h6anjnu.exe
    O4 - HKCU\..\Run: [bw9ehal2svjq5n0oq2c3ggdsyiebk1c3wudxvsbuqtdgw] C:\DOCUME~1\TROY~1.TRO\LOCALS~1\Temp\wnandd.exe
    O4 - HKCU\..\Run: [qge3jp5av1x60qt4dmfqyg4] C:\DOCUME~1\TROY~1.TRO\LOCALS~1\Temp\va7kd1c98.exe
    O4 - HKCU\..\Run: [uka0ieqqgz4p08eiuslrp11eymcdi] C:\DOCUME~1\TROY~1.TRO\LOCALS~1\Temp\n12lw7rc8geb.exe
    O4 - HKCU\..\Run: [y2562hmch4h0j91la7t0ysir2ly3teefwesmn7ymh1ob3] C:\DOCUME~1\TROY~1.TRO\LOCALS~1\Temp\dej0xwlez.exe
    O4 - HKCU\..\Run: [yggoxc442d1fjozr30jhrkh27zxz] C:\DOCUME~1\TROY~1.TRO\LOCALS~1\Temp\shjkh3o.exe
    O4 - HKCU\..\Run: [v8jhgszpnboc6fxldx2y] C:\DOCUME~1\TROY~1.TRO\LOCALS~1\Temp\goe33c2es4ls7.exe
    O4 - HKCU\..\Run: [jvmljm3rhnvwceoaykabunjzutyttftch] C:\DOCUME~1\TROY~1.TRO\LOCALS~1\Temp\rqem93.exe
    O4 - HKCU\..\Run: [v9pq1gibfovdxg8wjnhk5cst7s13iy3lrcfnxm] C:\DOCUME~1\TROY~1.TRO\LOCALS~1\Temp\a4og8g4xns3v3.exe
    O4 - HKCU\..\Run: [kludkdodnj85ayxjpfu153v97swcprryvgt] C:\DOCUME~1\TROY~1.TRO\LOCALS~1\Temp\gcq3jbehla.exe
    O4 - HKCU\..\Run: [nmy6fsjl3gd0gi7t3xx5zib4d9ng1s9l5gpkhraut5uef] C:\DOCUME~1\TROY~1.TRO\LOCALS~1\Temp\rlvj05z.exe
    O4 - HKCU\..\Run: [dcssq2m36jxzurfb1no4gccf9wqz6u9n5mh59eugha] C:\DOCUME~1\TROY~1.TRO\LOCALS~1\Temp\zuq2ay.exe
    O4 - HKCU\..\Run: [q4iey3ix4uxp536v84] C:\DOCUME~1\TROY~1.TRO\LOCALS~1\Temp\nbxo2n8t.exe
    O4 - HKCU\..\Run: [saexqd3yrgex20k2wpee7bsfmxy9yjvt9qt4qr0t] C:\DOCUME~1\TROY~1.TRO\LOCALS~1\Temp\yg6brdrbuh.exe
    O4 - HKCU\..\Run: [cv596pnctunz07] C:\DOCUME~1\TROY~1.TRO\LOCALS~1\Temp\qlwqelj.exe
    O4 - HKCU\..\Run: [oyrr8efur] C:\DOCUME~1\TROY~1.TRO\LOCALS~1\Temp\bkt5r4z1szce.exe
    O4 - HKCU\..\Run: [dplp55mye1yomllxpwfdr7kbnfvg8rjpg3gmi] C:\DOCUME~1\TROY~1.TRO\LOCALS~1\Temp\furjpmqimzn.exe
    O4 - HKCU\..\Run: [kv8aevjxn0zlohqbz5o6lrag1hk6bl7ezjuxsrq] C:\DOCUME~1\TROY~1.TRO\LOCALS~1\Temp\rf1siw7.exe
    O4 - HKCU\..\Run: [hxmdk3uho] C:\DOCUME~1\TROY~1.TRO\LOCALS~1\Temp\n53ekxzz.exe
    O4 - HKCU\..\Run: [n3hm9jkk3] C:\DOCUME~1\TROY~1.TRO\LOCALS~1\Temp\zyrvyol3w7.exe
    O4 - HKCU\..\Run: [surusuor9l0n9uol] C:\DOCUME~1\TROY~1.TRO\LOCALS~1\Temp\a3xqu2w4p.exe
    O4 - HKCU\..\Run: [h6lgwrvxx7s7rzml7piv0ctleqesd4a132uk] C:\DOCUME~1\TROY~1.TRO\LOCALS~1\Temp\a4uxix6w1e8.exe
    O4 - HKCU\..\Run: [h2n52xicjncys15ia1g7b1mhbwcash6ofqc4e] C:\DOCUME~1\TROY~1.TRO\LOCALS~1\Temp\olr3k4u.exe
    O4 - HKCU\..\Run: [b1jx9h689ijo30cv40ovj6qy5q3e4ginpkw71f] C:\DOCUME~1\TROY~1.TRO\LOCALS~1\Temp\h489d0iysxg.exe
    O4 - HKCU\..\Run: [ckvsxt0fzs3zoob] C:\DOCUME~1\TROY~1.TRO\LOCALS~1\Temp\ark8kmt0clnp.exe
    O4 - HKCU\..\Run: [f1em5j9qms] C:\DOCUME~1\TROY~1.TRO\LOCALS~1\Temp\p8kpecr7934.exe
    O4 - HKCU\..\Run: [exvrccdp17omakhgy0m11bsbujng7j3r] C:\DOCUME~1\TROY~1.TRO\LOCALS~1\Temp\h9rt3yncsg.exe
    O4 - HKCU\..\Run: [dppwvm9o06szhhruyaba61gz6jvjjwwkjniu16xv] C:\DOCUME~1\TROY~1.TRO\LOCALS~1\Temp\snrsjrkrvfzi.exe
    O4 - HKCU\..\Run: [ss2eytt9a19dd2u1y1z15vzl] C:\DOCUME~1\TROY~1.TRO\LOCALS~1\Temp\yxxus8mrgtc5.exe
    O4 - HKCU\..\Run: [rm9b3pxjxce7auh56f55g2emm26q7jx0rwglkjwznmcifl] C:\DOCUME~1\TROY~1.TRO\LOCALS~1\Temp\rubghs7l0ht.exe
    O4 - HKCU\..\Run: [em5lm8rx4ctg3ekscad10] C:\DOCUME~1\TROY~1.TRO\LOCALS~1\Temp\wavwgjjego3.exe
    O4 - HKCU\..\Run: [r4rajwum1jcxn1v4fq9copehk3h0dnyxrip1wwu4j] C:\DOCUME~1\TROY~1.TRO\LOCALS~1\Temp\g1qtc3v0xz0v.exe
    O4 - HKCU\..\Run: [fky7bxf8u9nmo3es5yhfuwppedjame9z326] C:\DOCUME~1\TROY~1.TRO\LOCALS~1\Temp\vbpscvjnaj.exe
    O4 - HKCU\..\Run: [yhgtnqmqhfiw] C:\DOCUME~1\TROY~1.TRO\LOCALS~1\Temp\knnpg4cgo1.exe
    O4 - HKCU\..\Run: [s1hmieh0t3ivq11wfurth1f474llklrodt1btu6j8w8pjy] C:\DOCUME~1\TROY~1.TRO\LOCALS~1\Temp\u63eucnu.exe
    O4 - HKCU\..\Run: [of373wkcb1b6bmkwdal7j8lxi371wxi1pa] C:\DOCUME~1\TROY~1.TRO\LOCALS~1\Temp\cdbz429e3ztk.exe
    O4 - HKCU\..\Run: [hsckqz4uiy1tgrgstdalbm5g27bfzlbxo5gl] C:\DOCUME~1\TROY~1.TRO\LOCALS~1\Temp\n0kw1x0nie8bj.exe
    O4 - HKCU\..\Run: [mhqk0y48x0wrzzmthsgvt9dcgm1rxs4wr2wfgo97p] C:\DOCUME~1\TROY~1.TRO\LOCALS~1\Temp\mvyi0e4q0k0.exe
    O4 - HKCU\..\Run: [ib73etlop7q5p0gkatr5d1ewltq4tu0h] C:\DOCUME~1\TROY~1.TRO\LOCALS~1\Temp\ed1421p.exe
    O4 - HKCU\..\Run: [bszcjy5r4yvu5nsujyqfvcsiy60d22xzop5g129w1al48qwx] C:\DOCUME~1\TROY~1.TRO\LOCALS~1\Temp\yyu1g3.exe
    O4 - HKCU\..\Run: [wp6mjc5ne0eo2us9sa] C:\DOCUME~1\TROY~1.TRO\LOCALS~1\Temp\deehfu.exe
    O4 - HKCU\..\Run: [h6yqc26or7a9rc4f0] C:\DOCUME~1\TROY~1.TRO\LOCALS~1\Temp\a92hivd9w.exe
    O4 - HKCU\..\Run: [isugbv6w8mq9xkoj4qiu8lwgw0n9yauot0] C:\DOCUME~1\TROY~1.TRO\LOCALS~1\Temp\wp9jvg.exe
    O4 - HKCU\..\Run: [lyvah6bj6i7ogxd7ytb7eugbrs3l07kle89x] C:\DOCUME~1\TROY~1.TRO\LOCALS~1\Temp\y0yzxp5if.exe
    O4 - HKCU\..\Run: [y8j8ac7noo56xuee6syaxv40x17z0x0ksvllc94nszz22i9zi] C:\DOCUME~1\TROY~1.TRO\LOCALS~1\Temp\wgz5v8oi84qp.exe
    O4 - HKCU\..\Run: [h3p66q7qlyj8jawupjam3hi] C:\DOCUME~1\TROY~1.TRO\LOCALS~1\Temp\dog4esz486wq.exe
    O4 - HKCU\..\Run: [kzzcaw5pw0b16tvyug96yzgv8t61s] C:\DOCUME~1\TROY~1.TRO\LOCALS~1\Temp\lnq0p63zpcgkg.exe
    O4 - HKCU\..\Run: [hp1gw8udgpavprsg794fehn9zh] C:\DOCUME~1\TROY~1.TRO\LOCALS~1\Temp\s0x1i1sx5o9m.exe
    O4 - HKCU\..\Run: [jn25otiwlhn29itr1fuu045xysz2n5rmopufksilcm1by5] C:\DOCUME~1\TROY~1.TRO\LOCALS~1\Temp\pgoe65ug0cr8.exe
    O4 - HKCU\..\Run: [kyakp85kln4] C:\DOCUME~1\TROY~1.TRO\LOCALS~1\Temp\o7znk2kxbofhk.exe
    O4 - HKCU\..\Run: [kwt7ogrtkd2xd5l8w8xv0] C:\DOCUME~1\TROY~1.TRO\LOCALS~1\Temp\pcricjia74srk.exe
    O4 - HKCU\..\Run: [q6jmk3y9kaj8wuylbx5ql452wk9b6efph6heogex0fx6rqgzhv] C:\DOCUME~1\TROY~1.TRO\LOCALS~1\Temp\ael18cin.exe
    O4 - HKCU\..\Run: [og4e1cb8c9ak] C:\DOCUME~1\TROY~1.TRO\LOCALS~1\Temp\be8ce9oa.exe
    O4 - HKCU\..\Run: [t5w0x5s2sjm3gg5pekv029ofqlnmat0bs9e5sc5ib] C:\DOCUME~1\TROY~1.TRO\LOCALS~1\Temp\f3kdr515co.exe
    O4 - HKCU\..\Run: [byd2ngs23e] C:\DOCUME~1\TROY~1.TRO\LOCALS~1\Temp\qrsxedtb.exe
    O4 - HKCU\..\Run: [la6kp385ozg922ut4psp0ixeb7i0h57ki8] C:\DOCUME~1\TROY~1.TRO\LOCALS~1\Temp\xqp6gl72.exe
    O4 - HKCU\..\Run: [wo032vdw81zysvftzxvmko7qq0jnzhmuflp] C:\DOCUME~1\TROY~1.TRO\LOCALS~1\Temp\akasrjewez6d.exe
    O4 - HKCU\..\Run: [h07lt2pcvn865e700wsmso3ktsq5bbcdvhkqq7rv] C:\DOCUME~1\TROY~1.TRO\LOCALS~1\Temp\kx19mk.exe
    O4 - HKCU\..\Run: [nwf0jfmt1xqwgqf1] C:\DOCUME~1\TROY~1.TRO\LOCALS~1\Temp\xbferbzc2vw9b.exe
    O4 - HKCU\..\Run: [kr0dse8wb4k] C:\DOCUME~1\TROY~1.TRO\LOCALS~1\Temp\jas379yp56a.exe
    O4 - HKCU\..\Run: [zqopr8un2ng] C:\DOCUME~1\TROY~1.TRO\LOCALS~1\Temp\dlqzfe.exe
    O4 - HKCU\..\Run: [y8d2kyoj8kmszkvq] C:\DOCUME~1\TROY~1.TRO\LOCALS~1\Temp\mti20wq8651v.exe
    O4 - HKCU\..\Run: [t851rcchny9od3v27k0iv91mmsikpdpouy] C:\DOCUME~1\TROY~1.TRO\LOCALS~1\Temp\y667gw1reunsk.exe
    O4 - HKCU\..\Run: [iskz7lziqvm15nq8gwxbwounkccfn82d49cf64shn] C:\DOCUME~1\TROY~1.TRO\LOCALS~1\Temp\fkgeb4ffxn.exe
    O4 - HKCU\..\Run: [uv7vflg9ylpcsisoe2mb377xyccxb] C:\DOCUME~1\TROY~1.TRO\LOCALS~1\Temp\rymzaq2weuvim.exe
    O4 - HKCU\..\Run: [pvmj5p0aiy700jr8spk14x4r] C:\DOCUME~1\TROY~1.TRO\LOCALS~1\Temp\ecfe1943j69j.exe
    O4 - HKCU\..\Run: [g3pxwgwas4kn1i08dr8zg8m1l9b4zsgrreq77oec23h] C:\DOCUME~1\TROY~1.TRO\LOCALS~1\Temp\s44bg8.exe
    O4 - HKCU\..\Run: [b447ryiaeonp8j7m12w] C:\DOCUME~1\TROY~1.TRO\LOCALS~1\Temp\ztgtanfv.exe
    O4 - HKCU\..\Run: [hp1wtkvcvo6th7bsxz78u7rdypmu1f0w0a6xrwj12] C:\DOCUME~1\TROY~1.TRO\LOCALS~1\Temp\youys4.exe
    O4 - HKCU\..\Run: [r8xgmw9iz8ylvuh8ru] C:\DOCUME~1\TROY~1.TRO\LOCALS~1\Temp\enhp2x3an.exe
    O4 - HKCU\..\Run: [etjp1xt10i7ux7oj412jj720] C:\DOCUME~1\TROY~1.TRO\LOCALS~1\Temp\m158spt0xeo5f.exe
    O4 - HKCU\..\Run: [f4nnywgazwnzn2zqo5zrwd6] C:\DOCUME~1\TROY~1.TRO\LOCALS~1\Temp\exc98dkrg80fz.exe
    O4 - HKCU\..\Run: [b0w7wuw6263h] C:\DOCUME~1\TROY~1.TRO\LOCALS~1\Temp\x3orfz.exe
    O4 - HKCU\..\Run: [gxylvbp8saitqsrpvxtcspndr12o9cvdzw3q5i16zrrqgzh7c] C:\DOCUME~1\TROY~1.TRO\LOCALS~1\Temp\pgcse4.exe
    O4 - HKCU\..\Run: [akeup3ojpjj0h9uc2n04t8bt49bi3vwj9bfyjn2bfingxxsu] C:\DOCUME~1\TROY~1.TRO\LOCALS~1\Temp\qqhqm46.exe
    O4 - HKCU\..\Run: [he7nqkcuthgi4itqi9qi4fvekhoo7f2vpf31w9g] C:\DOCUME~1\TROY~1.TRO\LOCALS~1\Temp\imoal9x.exe
    O4 - HKCU\..\Run: [gqemri3xvfjjhgdeqveudhu] C:\DOCUME~1\TROY~1.TRO\LOCALS~1\Temp\wo7trjif.exe
    O4 - HKCU\..\Run: [ols1aph8zl29ii21zy58z] C:\DOCUME~1\TROY~1.TRO\LOCALS~1\Temp\jwt8cqhx.exe
    O4 - HKCU\..\Run: [cc51izrjnkgsate8gslzq] C:\DOCUME~1\TROY~1.TRO\LOCALS~1\Temp\ihca5aljt8.exe
    O4 - HKCU\..\Run: [hro5v4aagst9f5jes2ru9q721s0in] C:\DOCUME~1\TROY~1.TRO\LOCALS~1\Temp\v54zzh8fo25xn.exe
    O4 - HKCU\..\Run: [uj5h509gvxz96z7jjrj8f82t5zo87sgrjyyam3elxpcjqwn45b] C:\DOCUME~1\TROY~1.TRO\LOCALS~1\Temp\wp40we97i2.exe
    O4 - HKCU\..\Run: [ipocs73kpxm3do2h8z70cbcui166aifuv0fugxeu46d9t4] C:\DOCUME~1\TROY~1.TRO\LOCALS~1\Temp\doblfqmj.exe
    O4 - HKCU\..\Run: [ac9ftlrrifzgixsuj1seblii7] C:\DOCUME~1\TROY~1.TRO\LOCALS~1\Temp\ocdobhtq.exe
    O4 - HKCU\..\Run: [v0bhr0ewejc0kf9067497f9ov0p7y9y967opm] C:\DOCUME~1\TROY~1.TRO\LOCALS~1\Temp\zed7hrvjn.exe
    O4 - HKCU\..\Run: [pq9nn9v203dmjmw4jcao9d8hizqoahu797wmz] C:\DOCUME~1\TROY~1.TRO\LOCALS~1\Temp\nxwqn1xcqw.exe
    O4 - HKCU\..\Run: [pidibzfhsgcan61qd3wsavopw1dm815exazyvp99fwlyh6z] C:\DOCUME~1\TROY~1.TRO\LOCALS~1\Temp\z0wrq80x.exe
    O4 - HKCU\..\Run: [lk82dxkg6gmwn4hu6wo9bgbfkl] C:\DOCUME~1\TROY~1.TRO\LOCALS~1\Temp\y0tgy69x53xwj.exe
    O4 - HKCU\..\Run: [sdgcdgr6d339k2t61bte7xd6mlj5dpaag6j66zdzlfy5] C:\DOCUME~1\TROY~1.TRO\LOCALS~1\Temp\xv72gnu0n9p.exe
    O4 - HKCU\..\Run: [getzp9r46sjvqsvjitgt92xay8] C:\DOCUME~1\TROY~1.TRO\LOCALS~1\Temp\henauv5tp.exe
    O4 - HKCU\..\Run: [yebml5ifd7x1qxd3yaoa1] C:\DOCUME~1\TROY~1.TRO\LOCALS~1\Temp\kkm1pqkgkm.exe
    O4 - HKCU\..\Run: [m1lhvgg6om9r2r8hidgrgmwcb2cgnrg6qg] C:\DOCUME~1\TROY~1.TRO\LOCALS~1\Temp\qy4fex9n.exe
    O4 - HKCU\..\Run: [ysn8k7v00d9czsdg7aidca] C:\DOCUME~1\TROY~1.TRO\LOCALS~1\Temp\am37impufh382.exe
    O4 - HKCU\..\Run: [fo8wepzwdmcf3rqxtdo0x4] C:\DOCUME~1\TROY~1.TRO\LOCALS~1\Temp\az8vld2.exe
    O4 - HKCU\..\Run: [ov9b0zk5m0cdati8tvo] C:\DOCUME~1\TROY~1.TRO\LOCALS~1\Temp\jil9qj3xai.exe
    O4 - HKCU\..\Run: [vyueo4ou3by5] C:\DOCUME~1\TROY~1.TRO\LOCALS~1\Temp\qmuezgb.exe
    O4 - HKCU\..\Run: [tijafogc5849rbr422sl81w5o] C:\DOCUME~1\TROY~1.TRO\LOCALS~1\Temp\ugpzl83f.exe
    O4 - HKCU\..\Run: [rlvg165llo2n4h43bqodkfzoqszmlcj00wys34psxlpkugz3zm] C:\DOCUME~1\TROY~1.TRO\LOCALS~1\Temp\iem5nwa3b7eb.exe
    O4 - HKCU\..\Run: [gpgkm835u73] C:\DOCUME~1\TROY~1.TRO\LOCALS~1\Temp\pi57m7g.exe
    O4 - HKCU\..\Run: [rhs34jlg22491uquzp01xjgxlrco58faqiq6jauu26av] C:\DOCUME~1\TROY~1.TRO\LOCALS~1\Temp\r75mo1qvt4cvl.exe
    O4 - HKCU\..\Run: [ysiu2oa72an8c344218k1i0g4b8d5obgcdx] C:\DOCUME~1\TROY~1.TRO\LOCALS~1\Temp\fw4w8n7.exe
    O4 - HKCU\..\Run: [melz1bphaisu] C:\DOCUME~1\TROY~1.TRO\LOCALS~1\Temp\vmmkvhm9n4t.exe
    O4 - HKCU\..\Run: [fx92hej4ospjejwvprj1x41zcg34pv] C:\DOCUME~1\TROY~1.TRO\LOCALS~1\Temp\wxr657cz9bw.exe
    O4 - HKCU\..\Run: [hto8dtrxg1uy7hu0] C:\DOCUME~1\TROY~1.TRO\LOCALS~1\Temp\suy81sni.exe
    O4 - HKCU\..\Run: [ln9mooafq9bc0ci400t528dddu7me91ysiw52whqzcv] C:\DOCUME~1\TROY~1.TRO\LOCALS~1\Temp\qz43xny.exe
    O4 - HKCU\..\Run: [al4mlx823vf5ezwdk7ms] C:\DOCUME~1\TROY~1.TRO\LOCALS~1\Temp\qq6qwl8uy6jtj.exe
    O4 - HKCU\..\Run: [ugsawtme763znktfsxm6a] C:\DOCUME~1\TROY~1.TRO\LOCALS~1\Temp\m6ds9njdb0.exe
    O4 - HKCU\..\Run: [dhmqd6ste0zs6ht41rs3tvy6hbh8i7672o6oeoa] C:\DOCUME~1\TROY~1.TRO\LOCALS~1\Temp\z7m9bnc.exe
    O4 - HKCU\..\Run: [yggoghdrl2mrgrk7n3sqvotwdeyyq9f2198fdi7z0dhew7w3] C:\DOCUME~1\TROY~1.TRO\LOCALS~1\Temp\xpdbfxl6eiz.exe
    O4 - HKCU\..\Run: [dky9nxg0618jsz4oc3wi8rdvt8quh4oehaoqlwgaudet7] C:\DOCUME~1\TROY~1.TRO\LOCALS~1\Temp\f767qb61vo02.exe
    O4 - HKCU\..\Run: [px5cjxd1vs4sqmzivm8e0tapggy8675zxuzkf7yrspw3zm4] C:\DOCUME~1\TROY~1.TRO\LOCALS~1\Temp\bdsmnyospz6.exe
    O4 - HKCU\..\Run: [w8nad5oh0w6dyy5fsiqh7] C:\DOCUME~1\TROY~1.TRO\LOCALS~1\Temp\l1rern4g.exe
    O4 - HKCU\..\Run: [fjt4w7mf6fesxtv7l203lyf] C:\DOCUME~1\TROY~1.TRO\LOCALS~1\Temp\plrwok58n6ci6.exe
    O4 - HKCU\..\Run: [rl53nm0guirz16ysjvwde4h41gk0r6s7ofxrv748s] C:\DOCUME~1\TROY~1.TRO\LOCALS~1\Temp\eo3dy9fiu.exe
    O4 - HKCU\..\Run: [k059a8mfue6dy9ow3z4wk7bbmypb0] C:\DOCUME~1\TROY~1.TRO\LOCALS~1\Temp\h80kmnpa60y.exe
    O4 - HKCU\..\Run: [cd5hwlbii8ocqut5qwe1tx8] C:\DOCUME~1\TROY~1.TRO\LOCALS~1\Temp\z9j4irs4.exe
    O4 - HKCU\..\Run: [fyyasqpbfgbrf04qfgqx8ojr9xtpx354fe6kg5otzyet] C:\DOCUME~1\TROY~1.TRO\LOCALS~1\Temp\r0v51x7s8o3.exe
    O4 - HKCU\..\Run: [ju1wbstkwx7i] C:\DOCUME~1\TROY~1.TRO\LOCALS~1\Temp\oh28bf03y1nlx.exe
    O4 - HKCU\..\Run: [y7g0xuo4utj2m45ly844lna6w36ij0481qd7hltpztpz] C:\DOCUME~1\TROY~1.TRO\LOCALS~1\Temp\v1e6yd8k.exe
    O4 - HKCU\..\Run: [u1jncc11moaat8jjk3z] C:\DOCUME~1\TROY~1.TRO\LOCALS~1\Temp\z0lrhp.exe
    O4 - HKCU\..\Run: [t10qtmhr0szkktrgm9x9dsttqm3s1t5zyfgsmsbg0r3e5] C:\DOCUME~1\TROY~1.TRO\LOCALS~1\Temp\g3i7rmlot9i8.exe
    O4 - HKCU\..\Run: [ph556xvla6mq] C:\DOCUME~1\TROY~1.TRO\LOCALS~1\Temp\n31ysuehg.exe
    O4 - HKCU\..\Run: [xi7nxpey3mexwaii6k] C:\DOCUME~1\TROY~1.TRO\LOCALS~1\Temp\eroih4dwlkf.exe
    O4 - HKCU\..\Run: [yv66hc28zhdaw34ib8kmeltia1tfwznsu] C:\DOCUME~1\TROY~1.TRO\LOCALS~1\Temp\a7v1d65f.exe
    O4 - HKCU\..\Run: [f5o4shcagxcn4r5jjt6qpgkrwl1z6t04i2dgixprq7bgpubfc] C:\DOCUME~1\TROY~1.TRO\LOCALS~1\Temp\nizllmfz1.exe
    O4 - HKCU\..\Run: [c1nay7bnx5g466mcv0vqg1gp7yewf7uogwsjbxgrcio2mjo] C:\DOCUME~1\TROY~1.TRO\LOCALS~1\Temp\vig88811txk.exe
    O4 - HKCU\..\Run: [ilgblskp23sos] C:\DOCUME~1\TROY~1.TRO\LOCALS~1\Temp\ggdvafp.exe
    O4 - HKCU\..\Run: [z0peuco9ec0c0skdno5ua4sjyh9asohb8h0pii2cb2aaf] C:\DOCUME~1\TROY~1.TRO\LOCALS~1\Temp\g7fi9ui08l9ix.exe
    O4 - HKCU\..\Run: [e41o9ad7yqmtufh6rs4n] C:\DOCUME~1\TROY~1.TRO\LOCALS~1\Temp\td7jkbghi.exe
    O4 - HKCU\..\Run: [vurfjfvd94nvfxyf6] C:\DOCUME~1\TROY~1.TRO\LOCALS~1\Temp\ew72bbw16s.exe
    O4 - HKCU\..\Run: [xyerm2rptby68oqee08ispvboql3zmrkpt5wxdd] C:\DOCUME~1\TROY~1.TRO\LOCALS~1\Temp\pjgz4x9j0zh.exe
    O4 - HKCU\..\Run: [fh5y994jc9omexazsqfhbmn406gemojwlx9mjnfeu9o4of] C:\DOCUME~1\TROY~1.TRO\LOCALS~1\Temp\n6m3ba2qf1e.exe
    O4 - HKCU\..\Run: [zos4x4c8prg984bx] C:\DOCUME~1\TROY~1.TRO\LOCALS~1\Temp\m10pa6xjw.exe
    O4 - HKCU\..\Run: [tldonaw69fxme8fjdpohm11t8a6g2y8ipaqwqfjlxlx3vx] C:\DOCUME~1\TROY~1.TRO\LOCALS~1\Temp\lr2bcopycm.exe
    O4 - HKCU\..\Run: [zprac85na1ke13dctmdw8l5yuse8lrh8sdi0tb0aqd9ozctol7] C:\DOCUME~1\TROY~1.TRO\LOCALS~1\Temp\oppek8.exe
    O4 - HKCU\..\Run: [vsmsrclv2idspmhw8zmt3k4mv92rivoz8xaep8dk7r6] C:\DOCUME~1\TROY~1.TRO\LOCALS~1\Temp\ykt3ih2.exe
    O4 - HKCU\..\Run: [ryc70fytu9bru3xk2h34panjh9wgz069i6f51h] C:\DOCUME~1\TROY~1.TRO\LOCALS~1\Temp\bi06nwvm.exe
    O4 - HKCU\..\Run: [vkuwea5aufsi4sheo1xmgl8] C:\DOCUME~1\TROY~1.TRO\LOCALS~1\Temp\waluiyrry4n.exe
    O4 - HKCU\..\Run: [g1dfgmv2mi84z4cwc] C:\DOCUME~1\TROY~1.TRO\LOCALS~1\Temp\dnddybr0j0rsc.exe
    O4 - HKCU\..\Run: [a8tl0b8cd38yu16w5kqaki0mnim1e5wi9uuapve88e] C:\DOCUME~1\TROY~1.TRO\LOCALS~1\Temp\gy1mmn7f.exe
    O4 - HKCU\..\Run: [v84z919aovhw7z29ns] C:\DOCUME~1\TROY~1.TRO\LOCALS~1\Temp\uwy97bvmfg44.exe
    O4 - HKCU\..\Run: [pxcmkg9a93nappa1t] C:\DOCUME~1\TROY~1.TRO\LOCALS~1\Temp\tbslu692zpns.exe
    O4 - HKCU\..\Run: [oc52ybttp5alnj06sir1osexw7bajole1rzy2l6ilr0mp1a] C:\DOCUME~1\TROY~1.TRO\LOCALS~1\Temp\z1yzkem27ckt6.exe
    O4 - HKCU\..\Run: [sjnb2mkb177] C:\DOCUME~1\TROY~1.TRO\LOCALS~1\Temp\ws33x7b0.exe
    O4 - HKCU\..\Run: [i5cutk3fd90jg9sh26b5hce] C:\DOCUME~1\TROY~1.TRO\LOCALS~1\Temp\nf9x38ljjjk.exe
    O4 - HKCU\..\Run: [m46vnc7uw0rcxfg2v8nm37as1yaezhvi3wu4] C:\DOCUME~1\TROY~1.TRO\LOCALS~1\Temp\mzsbdj.exe
    O4 - HKCU\..\Run: [a4w37ns4nth609rzi97gtp1oe3k6av6wdivb7pkiq8j458xbq8] C:\DOCUME~1\TROY~1.TRO\LOCALS~1\Temp\fy3sq7.exe
    O4 - HKCU\..\Run: [ugb9r1yd5kvfw35b5uygah6g7hjl1w5ib2you4h2j] C:\DOCUME~1\TROY~1.TRO\LOCALS~1\Temp\tghmu86pv.exe
    O4 - HKCU\..\Run: [gbtzxiqtve9po4rhmcosjid8qf8h4tauwa5vy2qgvzjnma3ad3] C:\DOCUME~1\TROY~1.TRO\LOCALS~1\Temp\t444k7uoatm.exe
    O4 - HKCU\..\Run: [p8ig9irsg2f] C:\DOCUME~1\TROY~1.TRO\LOCALS~1\Temp\eypy85voh.exe
    O4 - HKCU\..\Run: [i83zcohfwd3zdgfdg2vkj0c0zv9opv60x7sdf] C:\DOCUME~1\TROY~1.TRO\LOCALS~1\Temp\ubxxxox777u3e.exe
    O4 - HKCU\..\Run: [hf1c8xe8g1lq1w9r4swauu0w97hq0zhlkt609uv0f97p5] C:\DOCUME~1\TROY~1.TRO\LOCALS~1\Temp\ien3yu.exe
    O4 - HKCU\..\Run: [jjbrrqokmzm3buarfuroc4lg33] C:\DOCUME~1\TROY~1.TRO\LOCALS~1\Temp\t78qkjs2ijm6o.exe
    O4 - HKCU\..\Run: [s7js1nfxgoy84goitvee40zqr] C:\DOCUME~1\TROY~1.TRO\LOCALS~1\Temp\pxavmk.exe
    O4 - HKCU\..\Run: [usaqlheejnnp33c2n21pbicyvrkrzsc5rmz56285qt] C:\DOCUME~1\TROY~1.TRO\LOCALS~1\Temp\e74u97lwyod.exe
    O4 - HKCU\..\Run: [df16q38o7rnhdd6he3ovr5vz3f5m23vi1m4vwr5ur7k4e257y] C:\DOCUME~1\TROY~1.TRO\LOCALS~1\Temp\lv340e.exe
    O4 - HKCU\..\Run: [d2hdm4hdimp1pse68wzvplj6233ulm0zsiyawtv3l68i] C:\DOCUME~1\TROY~1.TRO\LOCALS~1\Temp\o4cho2t.exe
    O4 - HKCU\..\Run: [q0vvgo6yyv6f64eo2of77n74awweu] C:\DOCUME~1\TROY~1.TRO\LOCALS~1\Temp\kp02z5tstu7xq.exe
    O4 - HKCU\..\Run: [tc780z47154ldrvly4me5hh4zq00w0qgjqsmp3c0fft0mwg] C:\DOCUME~1\TROY~1.TRO\LOCALS~1\Temp\ojql3zygp8.exe
    O4 - HKCU\..\Run: [w7qzhmsbnv5g095] C:\DOCUME~1\TROY~1.TRO\LOCALS~1\Temp\rq02qkhjao37.exe
    O4 - HKCU\..\Run: [xdlzs1awkbd95] C:\DOCUME~1\TROY~1.TRO\LOCALS~1\Temp\ygn98qlcr.exe
    O4 - HKCU\..\Run: [qge8ccm9ywjfryfyjsc08c8gsssi8bktn63469z6z1nf] C:\DOCUME~1\TROY~1.TRO\LOCALS~1\Temp\g6zsi2zz.exe
    O4 - HKCU\..\Run: [hbmfr6tqi5bsfufj3xyzrzezq6qkfc5b0qsmu595gal2] C:\DOCUME~1\TROY~1.TRO\LOCALS~1\Temp\oszhuk.exe
    O4 - HKCU\..\Run: [zxh7u0bt49x999zuhlb5] C:\DOCUME~1\TROY~1.TRO\LOCALS~1\Temp\t7j9t2q.exe
    O4 - HKCU\..\Run: [v7tv3hfjs2xm0kop73u1sfzg66o] C:\DOCUME~1\TROY~1.TRO\LOCALS~1\Temp\g0u1dqid1.exe
    O4 - HKCU\..\Run: [yvpxqh83ha2lftl773u] C:\DOCUME~1\TROY~1.TRO\LOCALS~1\Temp\qunki5.exe
    O4 - HKCU\..\Run: [h82bqec3xtggcnjiwhqs681cv] C:\DOCUME~1\TROY~1.TRO\LOCALS~1\Temp\vplnwao24.exe
    O4 - HKCU\..\Run: [op0r6crg2i6j126ujxv5pwfjufgr] C:\DOCUME~1\TROY~1.TRO\LOCALS~1\Temp\loc6utvzdlxg.exe
    O4 - HKCU\..\Run: [lxnfav6f3u] C:\DOCUME~1\TROY~1.TRO\LOCALS~1\Temp\p0phvfghk6.exe
    O4 - HKCU\..\Run: [j6qy8hl5ym2p79pszsxg2gie7o8jq6frmy] C:\DOCUME~1\TROY~1.TRO\LOCALS~1\Temp\swx89qr.exe
    O4 - HKCU\..\Run: [ouypvw8ecwayos4i29f8a8im27g42pae43kund7831] C:\DOCUME~1\TROY~1.TRO\LOCALS~1\Temp\qq19401uxxaa.exe
    O4 - HKCU\..\Run: [xhdw51e4rltjbxf4n8f6zx2to5h3bmlnaeiim0vgt4rs] C:\DOCUME~1\TROY~1.TRO\LOCALS~1\Temp\yy50th137h9w.exe
    O4 - HKCU\..\Run: [y68gaz731saibv15bx6] C:\DOCUME~1\TROY~1.TRO\LOCALS~1\Temp\ta24go77gw9.exe
    O4 - HKCU\..\Run: [qzhye3qnlo1cvagpr] C:\DOCUME~1\TROY~1.TRO\LOCALS~1\Temp\y8b38gg451.exe
    O4 - HKCU\..\Run: [zikmpfmgfhyo9oxcii5cq] C:\DOCUME~1\TROY~1.TRO\LOCALS~1\Temp\b6c54guy.exe
    O4 - HKCU\..\Run: [yx8uiqq6xj67u] C:\DOCUME~1\TROY~1.TRO\LOCALS~1\Temp\u16t7slzt.exe
    O4 - HKCU\..\Run: [sfp4nlgjf5qt9tb6ro949of2p] C:\DOCUME~1\TROY~1.TRO\LOCALS~1\Temp\pyaj5aqhbw0ju.exe
    O4 - HKCU\..\Run: [c15apxjgia8mlzr04yt5h6jh7kjz57qx6d6aeuylzqop04] C:\DOCUME~1\TROY~1.TRO\LOCALS~1\Temp\gxqfuek.exe
    O4 - HKCU\..\Run: [epzd40sqqvheh6wab253] C:\DOCUME~1\TROY~1.TRO\LOCALS~1\Temp\yeuu0nax.exe
    O4 - HKCU\..\Run: [ze3yjgafgv5k5qmm5o48fzau] C:\DOCUME~1\TROY~1.TRO\LOCALS~1\Temp\q03bwh5.exe
    O4 - HKCU\..\Run: [z59jjof5s0m3tgkxgq3ldcss7q7nsrzlwz2667t4oy82mcue3] C:\DOCUME~1\TROY~1.TRO\LOCALS~1\Temp\mcrh2bylol4v.exe
    O4 - HKCU\..\Run: [jggpr960chiyzffpol4s6sgjal8b7eq1rs81bnuj] C:\DOCUME~1\TROY~1.TRO\LOCALS~1\Temp\vrp2wwx1ryvn.exe
    O4 - HKCU\..\Run: [p2fljzdske3jbkic72so4ib769f12qcv07orulfjam6zg6] C:\DOCUME~1\TROY~1.TRO\LOCALS~1\Temp\z2knz9yax48px.exe
    O4 - HKCU\..\Run: [x9d8a6gbv92etctuf2u5u6fvy3vhnpf1amhf1zpog] C:\DOCUME~1\TROY~1.TRO\LOCALS~1\Temp\lr2sqrg.exe
    O4 - HKCU\..\Run: [xkjngnmz7ndp07v6ldhrgoyvelsoxva3qhrmzn3] C:\DOCUME~1\TROY~1.TRO\LOCALS~1\Temp\kmge8rks6f5xn.exe
    O4 - HKCU\..\Run: [nhwpetxbcj7elh2m2671tfodbp7844fbibyjjdgef] C:\DOCUME~1\TROY~1.TRO\LOCALS~1\Temp\o5c57b.exe
    O4 - HKCU\..\Run: [bwmkzflnum1k0tspbs8efgc4sct26cg96un2wb8f9xop1] C:\DOCUME~1\TROY~1.TRO\LOCALS~1\Temp\ln7gc1tii.exe
    O4 - HKCU\..\Run: [d3k3rz05uf3reamnjmxbzprazknv52ume6yjyoym3qsdh5j32] C:\DOCUME~1\TROY~1.TRO\LOCALS~1\Temp\wzlnem.exe
    O4 - HKCU\..\Run: [ls1wd8yhay4p9u768c2xxrzpvi0] C:\DOCUME~1\TROY~1.TRO\LOCALS~1\Temp\omuq3bwugyuu.exe
    O4 - HKCU\..\Run: [etlfxqgeagxyw16] C:\DOCUME~1\TROY~1.TRO\LOCALS~1\Temp\cemq9kuhu.exe
    O4 - HKCU\..\Run: [km76i4ovq7xcnf77kahlvtnpbjw] C:\DOCUME~1\TROY~1.TRO\LOCALS~1\Temp\y0r13r0dgv0w.exe
    O4 - HKCU\..\Run: [a3vqrm8fmwd0cezyb8jyvlz1c9q7vg8rwvk0] C:\DOCUME~1\TROY~1.TRO\LOCALS~1\Temp\wzw2xrac.exe
    O4 - HKCU\..\Run: [efbgcf97gr7s5c1f2p6a9vds1tg6oa8] C:\DOCUME~1\TROY~1.TRO\LOCALS~1\Temp\h8qi52x4og1.exe
    O4 - HKCU\..\Run: [xvaf1jjj41pccb] C:\DOCUME~1\TROY~1.TRO\LOCALS~1\Temp\e3eip3.exe
    O4 - HKCU\..\Run: [bg4auat16bq8d3snl] C:\DOCUME~1\TROY~1.TRO\LOCALS~1\Temp\t1ez2tj8sswa4.exe
    O4 - HKCU\..\Run: [luikdfwa7ouhspzumey45uw9mjaepkjf5gq] C:\DOCUME~1\TROY~1.TRO\LOCALS~1\Temp\aew0l7.exe
    O4 - HKCU\..\Run: [py9z36w6k9n7u] C:\DOCUME~1\TROY~1.TRO\LOCALS~1\Temp\n2up6ec.exe
    O4 - HKCU\..\Run: [eykgirawh4rfats186beaa804] C:\DOCUME~1\TROY~1.TRO\LOCALS~1\Temp\pcdhfg4er0kmj.exe
    O4 - HKCU\..\Run: [v7xtdte5pj6tu8pbqrhj66xdnx3rogu21mgo0f] C:\DOCUME~1\TROY~1.TRO\LOCALS~1\Temp\lo7nvrzx.exe
    O4 - HKCU\..\Run: [jmc4onjof5q8dovnvqowpnohu7f9lkxmdoou908mfj6] C:\DOCUME~1\TROY~1.TRO\LOCALS~1\Temp\qi5jq6r6rt5x.exe
    O4 - HKCU\..\Run: [ey4emo0lgxku7ve11av2h17e] C:\DOCUME~1\TROY~1.TRO\LOCALS~1\Temp\nyfweaa85h6j.exe
    O4 - HKCU\..\Run: [ul8f1b54z0k9r8ph] C:\DOCUME~1\TROY~1.TRO\LOCALS~1\Temp\h2qrdv3bk36jj.exe
    O4 - HKCU\..\Run: [h9yc4xxj13hovvrbmabvhi0rn9uz7pxmdc8] C:\DOCUME~1\TROY~1.TRO\LOCALS~1\Temp\m875so0pxtb9p.exe
    O4 - HKCU\..\Run: [ugsyq7pdi] C:\DOCUME~1\TROY~1.TRO\LOCALS~1\Temp\mttiwaeb4n.exe
    O4 - HKCU\..\Run: [pnsed8qaqjn46fddxct5fyglab05w7zy4cswr] C:\DOCUME~1\TROY~1.TRO\LOCALS~1\Temp\akl84ejzch.exe
    O4 - HKCU\..\Run: [aho2jranbgnwhw] C:\DOCUME~1\TROY~1.TRO\LOCALS~1\Temp\ell91bk.exe
    O4 - HKCU\..\Run: [kq3sy4xshd3kdtmpabjp7iotznasthr9ebc375ali] C:\DOCUME~1\TROY~1.TRO\LOCALS~1\Temp\vc6wigflohs1x.exe
    O4 - HKCU\..\Run: [l9h5e0ibloz4wdqvvwivveemxaugqyie1itkwr5mik7xvb7] C:\DOCUME~1\TROY~1.TRO\LOCALS~1\Temp\w1ph5ulr1.exe
    O4 - HKCU\..\Run: [shatfc60dguke60xt8f6seivgcuoj5c4b49wxm8d6u] C:\DOCUME~1\TROY~1.TRO\LOCALS~1\Temp\u358pcyd.exe
    O4 - HKCU\..\Run: [brvo2342f] C:\DOCUME~1\TROY~1.TRO\LOCALS~1\Temp\hhav29.exe
    O4 - HKCU\..\Run: [hw9vjehbzwwgbhmwlwlee2pks9xs4vtftc5n4u0bq4wxmem] C:\DOCUME~1\TROY~1.TRO\LOCALS~1\Temp\nayef7yb.exe
    O4 - HKCU\..\Run: [kap0cnlqq0warn21402cfue9lwgtswmteqnjkuybpl] C:\DOCUME~1\TROY~1.TRO\LOCALS~1\Temp\cdhfie.exe
    O4 - HKCU\..\Run: [zfr7a2ojz4uj] C:\DOCUME~1\TROY~1.TRO\LOCALS~1\Temp\yfijqy.exe
    O4 - HKCU\..\Run: [u8ckgdt88h04zntheen] C:\DOCUME~1\TROY~1.TRO\LOCALS~1\Temp\f1ffbz0b6a21.exe
    O4 - HKCU\..\Run: [vw6oeasvyge1ld794yryqufejqh5uvgihk7qhng67y6b] C:\DOCUME~1\TROY~1.TRO\LOCALS~1\Temp\xxmganr2p4vu.exe
    O4 - HKCU\..\Run: [d8x1wkeh6tz7ikslc4kfkwge2dlh961552jxnetop957c] C:\DOCUME~1\TROY~1.TRO\LOCALS~1\Temp\nbrmn5t8ix.exe
    O4 - HKCU\..\Run: [gz7gafx8ep42vyukd39v2k05608masrxp7wa1r] C:\DOCUME~1\TROY~1.TRO\LOCALS~1\Temp\ng3m3jf.exe
    O4 - HKCU\..\Run: [grvtveiw5jta944bj0uyl43izieggnhnbhxxzydbshzi] C:\DOCUME~1\TROY~1.TRO\LOCALS~1\Temp\ias8fok12vopy.exe
    O4 - HKCU\..\Run: [chyp4fzclnmi2rs7vrayzrp] C:\DOCUME~1\TROY~1.TRO\LOCALS~1\Temp\u5yn15njs.exe
    O4 - HKCU\..\Run: [qr0odusm83jrq94] C:\DOCUME~1\TROY~1.TRO\LOCALS~1\Temp\ccvp0mgffkl.exe
    O4 - HKCU\..\Run: [en5rwgzhuj0vlyn9ex5hsroxikgsrs47s3kyzukm6jnlz16imc] C:\DOCUME~1\TROY~1.TRO\LOCALS~1\Temp\oucddl31x.exe
    O4 - HKCU\..\Run: [iyla99oh2n6wnb5i261z81ohdkfo4euxft2bcq5lq04gmu] C:\DOCUME~1\TROY~1.TRO\LOCALS~1\Temp\m1mowkj2q.exe
    O4 - HKCU\..\Run: [xuotwahm5e9xndykxhiq8934jlr2h] C:\DOCUME~1\TROY~1.TRO\LOCALS~1\Temp\qhjt8e6pw.exe
    O4 - HKCU\..\Run: [fw67iektrs8l6fqggj9p28w3z5hn9cdiml3rfyb26nk4zgz] C:\DOCUME~1\TROY~1.TRO\LOCALS~1\Temp\rwkrt8hqicdz.exe
    O4 - HKCU\..\Run: [ojwcmexo1ux64bke8zvdfo04qfccp67qx0ccbmoxr4nn2l9] C:\DOCUME~1\TROY~1.TRO\LOCALS~1\Temp\xu7u1svn.exe
    O4 - HKCU\..\Run: [bt6uk44j2kk1hvbxb2vnwg1eagtkiev28atn72bcs] C:\DOCUME~1\TROY~1.TRO\LOCALS~1\Temp\my7jnpnndvv0b.exe
    O4 - HKCU\..\Run: [odi9vly7ka] C:\DOCUME~1\TROY~1.TRO\LOCALS~1\Temp\bd3l0ctcn.exe
    O4 - HKCU\..\Run: [od8xjfpsirsw9y72iqf] C:\DOCUME~1\TROY~1.TRO\LOCALS~1\Temp\xv7ikik.exe
    O4 - HKCU\..\Run: [b9f6b3ndnghhvkza5ff47rtvwuk8lmnj92qbam1owh1w7] C:\DOCUME~1\TROY~1.TRO\LOCALS~1\Temp\nl5ajv.exe
    O4 - HKCU\..\Run: [g4rz7h2nt8qxxcit08] C:\DOCUME~1\TROY~1.TRO\LOCALS~1\Temp\jqux29stlny.exe
    O4 - HKCU\..\Run: [feik5xqgziaz0trmfhkswql3yyk90zjadh2g5g1z9] C:\DOCUME~1\TROY~1.TRO\LOCALS~1\Temp\vb1phod4tc.exe
    O4 - HKCU\..\Run: [vpy5lc1cszv4] C:\DOCUME~1\TROY~1.TRO\LOCALS~1\Temp\uft7mv9s0unv3.exe
    O4 - HKCU\..\Run: [mm8yp2asmpza0] C:\DOCUME~1\TROY~1.TRO\LOCALS~1\Temp\bsh8fqyqgnge.exe
    O4 - HKCU\..\Run: [bh365mswr0r1yyienv8fnu6ftyc1mwflue40ypd42d4woycq39] C:\DOCUME~1\TROY~1.TRO\LOCALS~1\Temp\hekqkvgp.exe
    O4 - HKCU\..\Run: [zn8tkl2k2dw6mre6nvtgsu0cwrvmn4ezpw6] C:\DOCUME~1\TROY~1.TRO\LOCALS~1\Temp\id7dojxgf.exe
    O4 - HKCU\..\Run: [c6jl244tehg70uf1uw0dh1fbwmud3am] C:\DOCUME~1\TROY~1.TRO\LOCALS~1\Temp\vihne9y69e.exe
    O4 - HKCU\..\Run: [d3lk6nxrlgkt5gceyhtvcue25lokln6tmlmep5x8n5] C:\DOCUME~1\TROY~1.TRO\LOCALS~1\Temp\vo0v6gsz.exe
    O4 - HKCU\..\Run: [m0mfcf95hqvof] C:\DOCUME~1\TROY~1.TRO\LOCALS~1\Temp\jnfstew.exe
    O4 - HKCU\..\Run: [b47ygml0gykiurv7lljbp8avf5iiosfti13e44t8no9kv413i] C:\DOCUME~1\TROY~1.TRO\LOCALS~1\Temp\k2wq0uss20kx1.exe
    O4 - HKCU\..\Run: [xqmiip2npq] C:\DOCUME~1\TROY~1.TRO\LOCALS~1\Temp\plhb42nty9.exe
    O4 - HKCU\..\Run: [lyiz8usjpmmjnz1171k9f96ppvcvhbzev9xo0dc2] C:\DOCUME~1\TROY~1.TRO\LOCALS~1\Temp\lw5ar6ry.exe
    O4 - HKCU\..\Run: [knmo3j5o6zrjh7bfpi17rfsnok54st8] C:\DOCUME~1\TROY~1.TRO\LOCALS~1\Temp\oundm4122t5.exe
    O4 - HKCU\..\Run: [l3end68cb] C:\DOCUME~1\TROY~1.TRO\LOCALS~1\Temp\pxdzqo739.exe
    O4 - HKCU\..\Run: [tpbf8rsn66pog0r] C:\DOCUME~1\TROY~1.TRO\LOCALS~1\Temp\ulif5251i.exe
    O4 - HKCU\..\Run: [r3h68afkqjbw6ge70c4c3dmhs8pwz01e173o1j83qq] C:\DOCUME~1\TROY~1.TRO\LOCALS~1\Temp\cne0iafm.exe
    O4 - HKCU\..\Run: [ycyn9auzigwv5wyktor] C:\DOCUME~1\TROY~1.TRO\LOCALS~1\Temp\aemyn5.exe
    O4 - HKCU\..\Run: [kc5skxuvqs3] C:\DOCUME~1\TROY~1.TRO\LOCALS~1\Temp\fhi7jmd1hfbl.exe
    O4 - HKCU\..\Run: [jk2il1fyk43xf5rc9pf5s44vj1nc9jlpz97ime20pucviu] C:\DOCUME~1\TROY~1.TRO\LOCALS~1\Temp\ghw11o2l4.exe
    O4 - HKCU\..\Run: [fsnlpww4tkot86gg5xos003qvh6llro9a5s77531l23] C:\DOCUME~1\TROY~1.TRO\LOCALS~1\Temp\aawmmiepq.exe
    O4 - HKCU\..\Run: [woso7d6rqez8] C:\DOCUME~1\TROY~1.TRO\LOCALS~1\Temp\yua5ab56uu4.exe
    O4 - HKCU\..\Run: [iex5mypx564noiatf7w0b2h09pfhoilkgrpff47nptx3l] C:\DOCUME~1\TROY~1.TRO\LOCALS~1\Temp\gmf4a5qz.exe
    O4 - HKCU\..\Run: [osy3gji2bl9ri2xj3cue1de9phwb2ja] C:\DOCUME~1\TROY~1.TRO\LOCALS~1\Temp\ncgaxrb.exe
    O4 - HKCU\..\Run: [czu15e0qs96kzl40enxfsaagcoxpddj9im] C:\DOCUME~1\TROY~1.TRO\LOCALS~1\Temp\m3qmd6s1dvid.exe
    O4 - HKCU\..\Run: [atz88dppdya3vbe88r1z3vthvt28y8wqx8dtcb] C:\DOCUME~1\TROY~1.TRO\LOCALS~1\Temp\cn8jrtdnob.exe
    O4 - HKCU\..\Run: [iv34rp85dh01z7] C:\DOCUME~1\TROY~1.TRO\LOCALS~1\Temp\blwr0mh3.exe
    O4 - HKCU\..\Run: [mjc1oipq1vkelvv44cjym4jheyhokmmpk7ua] C:\DOCUME~1\TROY~1.TRO\LOCALS~1\Temp\x3go6xana.exe
    O4 - HKCU\..\Run: [g1rtxd91dr616hgmu0wxitdgai2l5fpzb2974se9] C:\DOCUME~1\TROY~1.TRO\LOCALS~1\Temp\tc68mfq9el.exe
    O4 - HKCU\..\Run: [kcpd3jn240b4xykfupuvpq1p3fy5qdz0quh9lonrxeogcsqw] C:\DOCUME~1\TROY~1.TRO\LOCALS~1\Temp\pqevhxme.exe
    O4 - HKCU\..\Run: [umorzm566fufsnh699m7] C:\DOCUME~1\TROY~1.TRO\LOCALS~1\Temp\dp887z.exe
    O4 - HKCU\..\Run: [dj0qkrb510lxnzlp645386pu8wrpsd9zo3e5nwstmogr5qf] C:\DOCUME~1\TROY~1.TRO\LOCALS~1\Temp\tvtppy80.exe
    O4 - HKCU\..\Run: [pn2bl1ld0zpwnh3is65] C:\DOCUME~1\TROY~1.TRO\LOCALS~1\Temp\f2f3d867ana.exe
    O4 - HKCU\..\Run: [rjjs27xaexq1baufoe2tqkwcmm85i] C:\DOCUME~1\TROY~1.TRO\LOCALS~1\Temp\cop7a2229.exe
    O4 - HKCU\..\Run: [nt09bwl2in11iotha8zqdak938l9ec] C:\DOCUME~1\TROY~1.TRO\LOCALS~1\Temp\fca6jo6.exe
    O4 - HKCU\..\Run: [krlwjy2dfrksxt3fsvgkauktwvkjumfh5at81gm866cm] C:\DOCUME~1\TROY~1.TRO\LOCALS~1\Temp\f7y63pu4an.exe
    O4 - HKCU\..\Run: [fptxhhcjebxvv2s7vi15r] C:\DOCUME~1\TROY~1.TRO\LOCALS~1\Temp\vgk9q5iic.exe
    O4 - HKCU\..\Run: [rx9i4s8cf9ail3waim5i7th811dipxirs] C:\DOCUME~1\TROY~1.TRO\LOCALS~1\Temp\tl94mjt2.exe
    O4 - HKCU\..\Run: [dfvemqqi7uy] C:\DOCUME~1\TROY~1.TRO\LOCALS~1\Temp\q100rnvl.exe
    O4 - HKCU\..\Run: [mp4m7oj1tiioev55ijlcd6b9z8knjglbih0l9ih] C:\DOCUME~1\TROY~1.TRO\LOCALS~1\Temp\yxert631lk4aw.exe
    O4 - HKCU\..\Run: [mbdz49sxdi27tylh8zuz9swt4q3z4kmoz9zu9jfqxnpepiy] C:\DOCUME~1\TROY~1.TRO\LOCALS~1\Temp\vq4tn21y04v.exe
    O4 - HKCU\..\Run: [m4yf82z59q5a6twc4ie5aac4nq5lzbz9z1g0jjsobtq7hhvg0n] C:\DOCUME~1\TROY~1.TRO\LOCALS~1\Temp\j2iwzsk8.exe
    O4 - HKCU\..\Run: [l92157tqutgbvlru9a863fiwgfqpyq4y6x6co16] C:\DOCUME~1\TROY~1.TRO\LOCALS~1\Temp\d050q46.exe
    O4 - HKCU\..\Run: [f86bujudengbt93k93] C:\DOCUME~1\TROY~1.TRO\LOCALS~1\Temp\y0tw21ggy.exe
    O4 - HKCU\..\Run: [k5d7gds80z7uyeesn8rxju95glyf3t81rn4jcu1] C:\DOCUME~1\TROY~1.TRO\LOCALS~1\Temp\tcbrly.exe
    O4 - HKCU\..\Run: [h13qnfqjjlzsg8jrghi4gl9yujg] C:\DOCUME~1\TROY~1.TRO\LOCALS~1\Temp\vl7juu8l.exe
    O4 - HKCU\..\Run: [e69exn1tfri0j0p8hc6fk7b4e4ozk1jh71q2c] C:\DOCUME~1\TROY~1.TRO\LOCALS~1\Temp\nmbum7spjy7.exe
    O4 - HKCU\..\Run: [v1fmqt33s] C:\DOCUME~1\TROY~1.TRO\LOCALS~1\Temp\dhckj3zr6.exe
    O4 - HKCU\..\Run: [o5royhrca1lli44e8j] C:\DOCUME~1\TROY~1.TRO\LOCALS~1\Temp\vsx8e5vd1msv.exe
    O4 - HKCU\..\Run: [y7mud01hsfqfc6ru] C:\DOCUME~1\TROY~1.TRO\LOCALS~1\Temp\udga7p.exe
    O4 - HKCU\..\Run: [sg6kbzdazbixugilotloc6z4iyb6bhkg4wola6] C:\DOCUME~1\TROY~1.TRO\LOCALS~1\Temp\apuqwaf7u.exe
    O4 - HKCU\..\Run: [gps7y0ohm0] C:\DOCUME~1\TROY~1.TRO\LOCALS~1\Temp\g6lr4gl3.exe
    O4 - HKCU\..\Run: [q0zvx7hwscaudda1p9uoisludg8qm9711e] C:\DOCUME~1\TROY~1.TRO\LOCALS~1\Temp\bmiffhab.exe
    O4 - HKCU\..\Run: [pqrlwqj6b] C:\DOCUME~1\TROY~1.TRO\LOCALS~1\Temp\moiylrc42.exe
    O4 - HKCU\..\Run: [b1sy9sjzev6m4lug9zgp] C:\DOCUME~1\TROY~1.TRO\LOCALS~1\Temp\l5yntp.exe
    O4 - HKCU\..\Run: [utt45hq6t4bllb8fnf75obuzffr5yas0yuf47] C:\DOCUME~1\TROY~1.TRO\LOCALS~1\Temp\l0m83403x.exe
    O4 - HKCU\..\Run: [tnt4uv1d2hq99da9280020zzf8w] C:\DOCUME~1\TROY~1.TRO\LOCALS~1\Temp\wthqpx.exe
    O4 - HKCU\..\Run: [pyk5slbxvopdero0n5] C:\DOCUME~1\TROY~1.TRO\LOCALS~1\Temp\wy0ayegpntr7j.exe
    O4 - HKCU\..\Run: [oqbryy2rqojrmqwibluj6ey9lflkhp78uun] C:\DOCUME~1\TROY~1.TRO\LOCALS~1\Temp\k0jtlo.exe
    O4 - HKCU\..\Run: [zel44pyr89tmz9clai9l2a8b6r11egwmmu] C:\DOCUME~1\TROY~1.TRO\LOCALS~1\Temp\z8vu4ux6g.exe
    O4 - HKCU\..\Run: [fvcy9q99y6xgp1f1qm5p7sw4t1f6m] C:\DOCUME~1\TROY~1.TRO\LOCALS~1\Temp\cnshjrj1s5dy.exe
    O4 - HKCU\..\Run: [ny5wg527dp1obkfzor4uqhmd17oxu9pxwuc6lxcqu] C:\DOCUME~1\TROY~1.TRO\LOCALS~1\Temp\y8bjcs.exe
    O4 - HKCU\..\Run: [b9qko6znu4mioj8e1w] C:\DOCUME~1\TROY~1.TRO\LOCALS~1\Temp\nl6nlfqp.exe
    O4 - HKCU\..\Run: [qaxf8ji5x] C:\DOCUME~1\TROY~1.TRO\LOCALS~1\Temp\wkxfiq.exe
    O4 - HKCU\..\Run: [x9bau54zs5i5vg8aqs2u5idxuglkdeo5sqrl0g4hyp2rrfaw] C:\DOCUME~1\TROY~1.TRO\LOCALS~1\Temp\bomdw32am0b.exe
    O4 - HKCU\..\Run: [brm0skngy46s942olu1sw1mp] C:\DOCUME~1\TROY~1.TRO\LOCALS~1\Temp\e3txiivu8cnf.exe
    O4 - HKCU\..\Run: [c5aje7761df246gnxtibusumghp4nmsvo6n6zo] C:\DOCUME~1\TROY~1.TRO\LOCALS~1\Temp\e40ouqdkjjwxp.exe
    O4 - HKCU\..\Run: [o0k12e5r2rkd7fvkty2t7078xkch7z0] C:\DOCUME~1\TROY~1.TRO\LOCALS~1\Temp\kup23y.exe
    O4 - HKCU\..\Run: [wozmk9kt65vmqbi7j48z0uw05h6008vfg6c5puw8zuuu] C:\DOCUME~1\TROY~1.TRO\LOCALS~1\Temp\v11l674khf1e.exe
    O4 - HKCU\..\Run: [ep09zqxuxcvcjus7boknhigbqb7rnxa234cxqlo9s9h] C:\DOCUME~1\TROY~1.TRO\LOCALS~1\Temp\h6d2nzel7.exe
    O4 - HKCU\..\Run: [w88ium5v0w07vf4hkkyb5vlwysn7] C:\DOCUME~1\TROY~1.TRO\LOCALS~1\Temp\qy5taq.exe
    O4 - HKCU\..\Run: [qhmhlea2ba57y] C:\DOCUME~1\TROY~1.TRO\LOCALS~1\Temp\n9wmpdj.exe
    O4 - HKCU\..\Run: [wscr7yg9cai9tw3] C:\DOCUME~1\TROY~1.TRO\LOCALS~1\Temp\hnflxu72f4bs.exe
    O4 - HKCU\..\Run: [aw9cjewfwbzg3c0z5o7830mxo5v1d2] C:\DOCUME~1\TROY~1.TRO\LOCALS~1\Temp\crta7hro.exe
    O4 - HKCU\..\Run: [cuac1n219mwsmtt4ynhserwlomv] C:\DOCUME~1\TROY~1.TRO\LOCALS~1\Temp\m6qs7nk.exe
    O4 - HKCU\..\Run: [kbvsra10pf75p6hw2hk6zq] C:\DOCUME~1\TROY~1.TRO\LOCALS~1\Temp\l3wqnj9vu.exe
    O4 - HKCU\..\Run: [g6inxgiuicoxzjma4o] C:\DOCUME~1\TROY~1.TRO\LOCALS~1\Temp\md1oejtnvb.exe
    O4 - HKCU\..\Run: [fix3ah49xlsgg3nnw6r7vfi7s00a00v9zf2fywe7g] C:\DOCUME~1\TROY~1.TRO\LOCALS~1\Temp\wi0gi89.exe
    O4 - HKCU\..\Run: [tkij7i17fjoc8c6dru2pus8zl9j82oodd9] C:\DOCUME~1\TROY~1.TRO\LOCALS~1\Temp\rtl4wamgbi.exe
    O4 - HKCU\..\Run: [ijel9xcak] C:\DOCUME~1\TROY~1.TRO\LOCALS~1\Temp\zcs7cj034upo9.exe
    O4 - HKCU\..\Run: [fcea40v8cnpv0dmz7e9] C:\DOCUME~1\TROY~1.TRO\LOCALS~1\Temp\jldc1bb.exe
    O4 - HKCU\..\Run: [k1infzuu7w1fursznntre8o] C:\DOCUME~1\TROY~1.TRO\LOCALS~1\Temp\advpnbg.exe
    O4 - HKCU\..\Run: [bc4jjs2ivsqsmzwndyuqabl6esy5srzafg2i3xfzwak6fowoy] C:\DOCUME~1\TROY~1.TRO\LOCALS~1\Temp\mbfc7lazug2o.exe
    O4 - HKCU\..\Run: [b0ejdsbgm5198tsiuf] C:\DOCUME~1\TROY~1.TRO\LOCALS~1\Temp\z9x2hj.exe
    O4 - HKCU\..\Run: [lwpbhcdywg9xodoaja96tcya3wo] C:\DOCUME~1\TROY~1.TRO\LOCALS~1\Temp\j4hbhcg.exe
    O4 - HKCU\..\Run: [lnfhoq59g3q6wuy3m8icnkerxlglgm42eoj44kxi7n6w8sm7] C:\DOCUME~1\TROY~1.TRO\LOCALS~1\Temp\vaaghdw27fp.exe
    O4 - HKCU\..\Run: [bh005lqqvaofqtscl2nlv8g0c3e] C:\DOCUME~1\TROY~1.TRO\LOCALS~1\Temp\d7yz75m.exe
    O4 - HKCU\..\Run: [oert8bqsa37a0j7gtiv05z] C:\DOCUME~1\TROY~1.TRO\LOCALS~1\Temp\ij63s6se8.exe
    O4 - HKCU\..\Run: [uiz7qx6ds7uzxwqn8j] C:\DOCUME~1\TROY~1.TRO\LOCALS~1\Temp\duhqzvg2l4h4f.exe
    O4 - HKCU\..\Run: [qqsd44aqn2a4x7j6gt0ai0wu1t0ipmnipb3pqp] C:\DOCUME~1\TROY~1.TRO\LOCALS~1\Temp\mhd0s9gu.exe
    O4 - HKCU\..\Run: [tn953aolhc2vjk1dx1um7efxzoppae7] C:\DOCUME~1\TROY~1.TRO\LOCALS~1\Temp\m2zdwvuzrydr4.exe
    O4 - HKCU\..\Run: [nmpqj6keuwvc5cacj8] C:\DOCUME~1\TROY~1.TRO\LOCALS~1\Temp\zim2kn0ij18hp.exe
    O4 - HKCU\..\Run: [yorw3x6we3eg30j4e5at5akj9] C:\DOCUME~1\TROY~1.TRO\LOCALS~1\Temp\t5lr7s.exe
    O4 - HKCU\..\Run: [oifikur10e3n318ji] C:\DOCUME~1\TROY~1.TRO\LOCALS~1\Temp\rvtitejodf8du.exe
    O4 - HKCU\..\Run: [ieeflxfyjwrew5uj7qqwfl4ohjcqthuegnbwyhhe] C:\DOCUME~1\TROY~1.TRO\LOCALS~1\Temp\z9rl72hc.exe
    O4 - HKCU\..\Run: [he93i58n5u0pxwkpqm9lc4zul1xsnodkkj7xk] C:\DOCUME~1\TROY~1.TRO\LOCALS~1\Temp\s5ygke.exe
    O4 - HKCU\..\Run: [dtyn4flcp2zob7g25qtmnuno5k] C:\DOCUME~1\TROY~1.TRO\LOCALS~1\Temp\gitqfus5ea.exe
    O4 - HKCU\..\Run: [eqeahcs7d5n01osixq0c073nd69qxoiua3q765s] C:\DOCUME~1\TROY~1.TRO\LOCALS~1\Temp\vgt79kqcb.exe
    O4 - HKCU\..\Run: [ybhsv0ihvi05axocgueuadacdih7x1svx] C:\DOCUME~1\TROY~1.TRO\LOCALS~1\Temp\g4ca5bx2x.exe
    O4 - HKCU\..\Run: [jnhekd694m9nn3eyel] C:\DOCUME~1\TROY~1.TRO\LOCALS~1\Temp\t26myxd7bn.exe
    O4 - HKCU\..\Run: [inq199t3um35gr95uqi99tizmmtixlgwuq6s28ml] C:\DOCUME~1\TROY~1.TRO\LOCALS~1\Temp\cpvchcko3a9.exe
    O4 - HKCU\..\Run: [p4abdysmytbjb6n4pe93cycehowh] C:\DOCUME~1\TROY~1.TRO\LOCALS~1\Temp\bbmvmhcj8.exe
    O4 - HKCU\..\Run: [jy6awe6rjh6rlxp3fsmhc6ec8dzfnzzdlqw11z4] C:\DOCUME~1\TROY~1.TRO\LOCALS~1\Temp\mcux2sbgk.exe
    O4 - HKCU\..\Run: [nxc7fufwifjlndhr5tfs6grnc8va14j5loco8w] C:\DOCUME~1\TROY~1.TRO\LOCALS~1\Temp\jtay05.exe
    O4 - HKCU\..\Run: [ufhb3vgnw7a5mm42o] C:\DOCUME~1\TROY~1.TRO\LOCALS~1\Temp\tpiyv60e.exe
    O4 - HKCU\..\Run: [j47tk0mud4k1imrb] C:\DOCUME~1\TROY~1.TRO\LOCALS~1\Temp\nnz2ci1np.exe
    O4 - HKCU\..\Run: [uhbah448pkzr6odjc9p0vej3qufoolvmt2tupfgklbkekw6a8o] C:\DOCUME~1\TROY~1.TRO\LOCALS~1\Temp\kwthkkznn.exe
    O4 - HKCU\..\Run: [ny8bwqteb0qprlaxaru8uj2jqlk] C:\DOCUME~1\TROY~1.TRO\LOCALS~1\Temp\f4w6vxhhis.exe
    O4 - HKCU\..\Run: [y7r7soe7r9cgm46kpzs8l0fgg4desqmech] C:\DOCUME~1\TROY~1.TRO\LOCALS~1\Temp\ucbkpxeichw.exe
    O4 - HKCU\..\Run: [cugdij8jfwjju3kngyc7grujhlm1d9dfoj2twyaktkqfhp1ns] C:\DOCUME~1\TROY~1.TRO\LOCALS~1\Temp\x4iwjm.exe
    O4 - HKCU\..\Run: [w5kdi5ogpzcb] C:\DOCUME~1\TROY~1.TRO\LOCALS~1\Temp\pmp088sxwac58.exe
    O4 - HKCU\..\Run: [wmi9ndw9kus9xrrg2] C:\DOCUME~1\TROY~1.TRO\LOCALS~1\Temp\eq8tk2si3l.exe
    O4 - HKCU\..\Run: [iv2ynp7h6qdt0bf2pt7jyogu9ohvo7cn2ob4lv] C:\DOCUME~1\TROY~1.TRO\LOCALS~1\Temp\t8bd39ut1.exe
    O4 - HKCU\..\Run: [wc6cxcyyl1m1vh2r5fkbuer977cn4eoser8c] C:\DOCUME~1\TROY~1.TRO\LOCALS~1\Temp\t4z1p0o5tmy.exe
    O4 - HKCU\..\Run: [zh3a6zqpm184esps2d2ylp195ffcu7uj2u15j2wgdr29af3gfe] C:\DOCUME~1\TROY~1.TRO\LOCALS~1\Temp\vvdbfyx6ik.exe
    O4 - HKCU\..\Run: [rk6bzugh9pqfkv] C:\DOCUME~1\TROY~1.TRO\LOCALS~1\Temp\k2i838vwmwcbj.exe
    O4 - HKCU\..\Run: [j7qsiuatblm4lbiqqloyr60kfjft15v6c0] C:\DOCUME~1\TROY~1.TRO\LOCALS~1\Temp\m807yqek.exe
    O4 - HKCU\..\Run: [j5x7rmro14o4k8v2z63cgz] C:\DOCUME~1\TROY~1.TRO\LOCALS~1\Temp\alzvw4ja.exe
    O4 - HKCU\..\Run: [fhqcyotdoyz5pq9xetzq1xe] C:\DOCUME~1\TROY~1.TRO\LOCALS~1\Temp\sh6fvsa1.exe
    O4 - HKCU\..\Run: [jc2mgvsvskk] C:\DOCUME~1\TROY~1.TRO\LOCALS~1\Temp\v30h7r0y9t8.exe
    O4 - HKCU\..\Run: [nj7jhncookc9s0gk2lyo2] C:\DOCUME~1\TROY~1.TRO\LOCALS~1\Temp\ecybq554rtn1v.exe
    O4 - HKCU\..\Run: [eph4iuounhk4qmqfe4pm9ty9q65hlubuq16jfp6ygcs1qzx4] C:\DOCUME~1\TROY~1.TRO\LOCALS~1\Temp\z0o67yv2e0y.exe
    O4 - HKCU\..\Run: [wkd0b8eq6qjxg7fwk8ma0krz015rytbicpy2ig] C:\DOCUME~1\TROY~1.TRO\LOCALS~1\Temp\rwv763mtxua.exe
    O4 - HKCU\..\Run: [lvfw821oy7wmpz5v] C:\DOCUME~1\TROY~1.TRO\LOCALS~1\Temp\iswggu7e66.exe
    O4 - HKCU\..\Run: [iq8fymipuhz99cqq31wc4] C:\DOCUME~1\TROY~1.TRO\LOCALS~1\Temp\ze5mhhq5e0b6.exe
    O4 - HKCU\..\Run: [vjtnr2ihyvxsvxi240og11] C:\DOCUME~1\TROY~1.TRO\LOCALS~1\Temp\e29rb6q3.exe
    O4 - HKCU\..\Run: [dhv3r4il6ztwkd44mnom0cflaoe3qklg2dbzhw] C:\DOCUME~1\TROY~1.TRO\LOCALS~1\Temp\cu5xs9o.exe
    O4 - HKCU\..\Run: [muzccvxccj0jrj27vygqsai4f4m5v57am9h20lb] C:\DOCUME~1\TROY~1.TRO\LOCALS~1\Temp\rs5emz.exe
    O4 - HKCU\..\Run: [k7n79coe7vb0] C:\DOCUME~1\TROY~1.TRO\LOCALS~1\Temp\f9cheohb.exe
    O4 - HKCU\..\Run: [vdao5we0nnfgq6b6se2x6lpoj1uz19] C:\DOCUME~1\TROY~1.TRO\LOCALS~1\Temp\jotfl4.exe
    O4 - HKCU\..\Run: [hgr8mfqslk1bcgnuzkjepx4e0ehfiz] C:\DOCUME~1\TROY~1.TRO\LOCALS~1\Temp\iiqd1vsw8m8t2.exe
    O4 - HKCU\..\Run: [wnjaq4da2gltbbvlxsocpq6rfv3oc3ka4qxfzzqypbspy6b] C:\DOCUME~1\TROY~1.TRO\LOCALS~1\Temp\kyydclx.exe
    O4 - HKCU\..\Run: [ks7wwbknvic3ipcdpt1keiocxv77p] C:\DOCUME~1\TROY~1.TRO\LOCALS~1\Temp\uqcyref.exe
    O4 - HKCU\..\Run: [p21mbjjpu1] C:\DOCUME~1\TROY~1.TRO\LOCALS~1\Temp\vhhwzvzt.exe
    O4 - HKCU\..\Run: [lvunsodt9yt] C:\DOCUME~1\TROY~1.TRO\LOCALS~1\Temp\ndogy0qk.exe
    O4 - HKCU\..\Run: [hri9v0rndnaekyqza5hm2ogf5pveext7ckslkrkvpb3syl9je] C:\DOCUME~1\TROY~1.TRO\LOCALS~1\Temp\r5lkbr1e49c1.exe
    O4 - HKCU\..\Run: [znt3g8101b0qmu1b983] C:\DOCUME~1\TROY~1.TRO\LOCALS~1\Temp\sodvdausrbbwu.exe
    O4 - HKCU\..\Run: [zutunq31wghfs1tdrm8h7gxsrl] C:\DOCUME~1\TROY~1.TRO\LOCALS~1\Temp\d7de0k.exe
    O4 - HKCU\..\Run: [o2dxa3x8x7y6rfn7] C:\DOCUME~1\TROY~1.TRO\LOCALS~1\Temp\vz5mo4liwn3.exe
    O4 - HKCU\..\Run: [s02momdmwknmad4zsjnk9xs] C:\DOCUME~1\TROY~1.TRO\LOCALS~1\Temp\c93izlz0uh6k.exe
    O4 - HKCU\..\Run: [l0d4v3a2b31csc7r54vqu6mp151w7hzetw36ulmxkpo] C:\DOCUME~1\TROY~1.TRO\LOCALS~1\Temp\nnvr34af.exe
    O4 - HKCU\..\Run: [gdzus8f7nwk2z0u00gfwrko4j73ruol] C:\DOCUME~1\TROY~1.TRO\LOCALS~1\Temp\vtij453nwl.exe
    O4 - HKCU\..\Run: [n1bzpjqwgczqdjpjlm8werwmdd70y1] C:\DOCUME~1\TROY~1.TRO\LOCALS~1\Temp\fcntz8.exe
    O4 - HKCU\..\Run: [aqbsltvdr0rsp161jgnbo6v2bcup7wf9cwx79yybhj] C:\DOCUME~1\TROY~1.TRO\LOCALS~1\Temp\oafq4v7g6dt.exe
    O4 - HKCU\..\Run: [er6jvd0zwk2pv14ebk86m7x2ihzvn4pmszj] C:\DOCUME~1\TROY~1.TRO\LOCALS~1\Temp\n6g31pawtu1ff.exe
    O4 - HKCU\..\Run: [jwck6biu0p7g6b9mc1r0gy2hzwwdxajp41s] C:\DOCUME~1\TROY~1.TRO\LOCALS~1\Temp\y8gm7z.exe
    O4 - HKCU\..\Run: [mwwkrk5woprphxk71trrjo6frg82mk8l02zil3kw9] C:\DOCUME~1\TROY~1.TRO\LOCALS~1\Temp\nbjno1uxl.exe
    O4 - HKCU\..\Run: [jhazossts7cdzve] C:\DOCUME~1\TROY~1.TRO\LOCALS~1\Temp\z4742sg1pua.exe
    O4 - HKCU\..\Run: [vcidplaepeq7w5ehj0mmm9aktyysodvanwtb] C:\DOCUME~1\TROY~1.TRO\LOCALS~1\Temp\pmr3qtbn8jk0.exe
    O4 - HKCU\..\Run: [i8lg5g0cv2nvm19] C:\DOCUME~1\TROY~1.TRO\LOCALS~1\Temp\xx0hoqoy58mz.exe
    O4 - HKCU\..\Run: [hkac7jip53qf0q5al2pnz735mnjok91p] C:\DOCUME~1\TROY~1.TRO\LOCALS~1\Temp\f1tg8lx7mxa6.exe
    O4 - HKCU\..\Run: [ohc3dp98h97ws7omjklptpq0tl6bepwox9lh7lz1qdj] C:\DOCUME~1\TROY~1.TRO\LOCALS~1\Temp\wse36q914e.exe
    O4 - HKCU\..\Run: [ubvbcjlro8sfsp7zuhgx39cmqfj2wmazrwn] C:\DOCUME~1\TROY~1.TRO\LOCALS~1\Temp\jcriptu31r.exe
    O4 - HKCU\..\Run: [yed809e912xo1211f] C:\DOCUME~1\TROY~1.TRO\LOCALS~1\Temp\ujtllk1an9.exe
    O4 - HKCU\..\Run: [k1i8jm19x3y5405ma5f212cyiitht5mjb4eenn96jn1] C:\DOCUME~1\TROY~1.TRO\LOCALS~1\Temp\ct5sxm4c.exe
    O4 - HKCU\..\Run: [sg5g7r7izgqlbex69qt] C:\DOCUME~1\TROY~1.TRO\LOCALS~1\Temp\qsz5no.exe
    O4 - HKCU\..\Run: [km8vy295zbbo6dchd73gdm2hkcq31rkv3edrw6] C:\DOCUME~1\TROY~1.TRO\LOCALS~1\Temp\t7dsjlons.exe
    O4 - HKCU\..\Run: [mo2plv8cq2s845q0ekwodv2l6tlrcs8torphw39y] C:\DOCUME~1\TROY~1.TRO\LOCALS~1\Temp\y6758u7.exe
    O4 - HKCU\..\Run: [q11rxx16hahivuaj8717clrqx4c3pr5csebymldj] C:\DOCUME~1\TROY~1.TRO\LOCALS~1\Temp\l3ktiqfeb.exe
    O4 - HKCU\..\Run: [dvtrkcev9ocv0ah2ih55t] C:\DOCUME~1\TROY~1.TRO\LOCALS~1\Temp\vl0uupks.exe
    O4 - HKCU\..\Run: [uhh2l5n0k5tcwbscfxdl0lwjj2wg0dr9] C:\DOCUME~1\TROY~1.TRO\LOCALS~1\Temp\n7tbnxu2inyw.exe
    O4 - HKCU\..\Run: [bzzshbo6tk] C:\DOCUME~1\TROY~1.TRO\LOCALS~1\Temp\ion63t.exe
    O4 - HKCU\..\Run: [kitlac5b4omw9ow413k55ko3gghz81ht4bk5corp6hf] C:\DOCUME~1\TROY~1.TRO\LOCALS~1\Temp\dkuq2h.exe
    O4 - HKCU\..\Run: [k7bdwlod6q84nmix2w59m5jxjy9rl6soivgrziiuvk] C:\DOCUME~1\TROY~1.TRO\LOCALS~1\Temp\n2z8ox84dqg.exe
    O4 - HKCU\..\Run: [rowl8lvmt40ac95wh5eosajurv0u05jml63g7zyw2x4348h20] C:\DOCUME~1\TROY~1.TRO\LOCALS~1\Temp\oc46wxsfe3bp.exe
    O4 - HKCU\..\Run: [a6evfezkj] C:\DOCUME~1\TROY~1.TRO\LOCALS~1\Temp\z7n7mliup.exe
    O4 - HKCU\..\Run: [tqnzndoiehfi7r0hsmxv5na] C:\DOCUME~1\TROY~1.TRO\LOCALS~1\Temp\b9xr4ssccc.exe
    O4 - HKCU\..\Run: [t60lhw505gpwioczr] C:\DOCUME~1\TROY~1.TRO\LOCALS~1\Temp\a21jl6822j.exe
    O4 - HKCU\..\Run: [dk9ccpkvff4672vyce5u0mg] C:\DOCUME~1\TROY~1.TRO\LOCALS~1\Temp\z482uqmftop84.exe
    O4 - HKCU\..\Run: [t250bbbz3wm1e8koysmw23w2ppo] C:\DOCUME~1\TROY~1.TRO\LOCALS~1\Temp\v4u9z6.exe
    O4 - HKCU\..\Run: [d1iuchif1qb6o3dvw4gsvj6csik0a6n42p9q7z4e3vrjzjcp] C:\DOCUME~1\TROY~1.TRO\LOCALS~1\Temp\ohm673k.exe
    O4 - HKCU\..\Run: [ew6wcfa5eeubsrnwwq0pjtw2zopmfb] C:\DOCUME~1\TROY~1.TRO\LOCALS~1\Temp\vgcr5pjtioier.exe
    O4 - HKCU\..\Run: [zs9dmibmwnll9d45q95m3l8bf99tz] C:\DOCUME~1\TROY~1.TRO\LOCALS~1\Temp\vfwkhu9k6ii.exe
    O4 - HKCU\..\Run: [zi9peld4iiy6y] C:\DOCUME~1\TROY~1.TRO\LOCALS~1\Temp\wlymn8f.exe
    O4 - HKCU\..\Run: [wk67msqft1phj6fd] C:\DOCUME~1\TROY~1.TRO\LOCALS~1\Temp\oca66eue96.exe
    O4 - HKCU\..\Run: [mtj6nuwusub8oj889nnx6syi3070l93glwpoi] C:\DOCUME~1\TROY~1.TRO\LOCALS~1\Temp\xq40j3.exe
    O4 - HKCU\..\Run: [ip7052yln] C:\DOCUME~1\TROY~1.TRO\LOCALS~1\Temp\fpewuhu.exe
    O4 - HKCU\..\Run: [o7yngadiwqoez] C:\DOCUME~1\TROY~1.TRO\LOCALS~1\Temp\ct09y38ry0bg.exe
    O4 - HKCU\..\Run: [n28sw4zk33odd4aqe9d4m2ewmi8kkq] C:\DOCUME~1\TROY~1.TRO\LOCALS~1\Temp\kxt8zfy0f6in.exe
    O4 - HKCU\..\Run: [tznr7y76pvyv6] C:\DOCUME~1\TROY~1.TRO\LOCALS~1\Temp\loin4axy87.exe
    O4 - HKCU\..\Run: [cijzc0fm4r] C:\DOCUME~1\TROY~1.TRO\LOCALS~1\Temp\t2p6ul.exe
    O4 - HKCU\..\Run: [fdkhebyvljqbg1lwcmyo] C:\DOCUME~1\TROY~1.TRO\LOCALS~1\Temp\a6fb3e5ehv2.exe
    O4 - HKCU\..\Run: [lwvabarqk8juusrhxahv] C:\DOCUME~1\TROY~1.TRO\LOCALS~1\Temp\wi00edjb6ee.exe
    O4 - HKCU\..\Run: [mv23qg317cqv3dq] C:\DOCUME~1\TROY~1.TRO\LOCALS~1\Temp\uyxoper0bkp.exe
    O4 - HKCU\..\Run: [rviqry091cor9niehdg6le9hpmiust7fyo64475uxasre] C:\DOCUME~1\TROY~1.TRO\LOCALS~1\Temp\ippegifojeu.exe
    O4 - HKCU\..\Run: [dfq5y84cc] C:\DOCUME~1\TROY~1.TRO\LOCALS~1\Temp\v82mgvbbcekm.exe
    O4 - HKCU\..\Run: [d8eyk5abrf1b9x25tkqv] C:\DOCUME~1\TROY~1.TRO\LOCALS~1\Temp\erf021c.exe
    O4 - HKCU\..\Run: [iy78863vmcdzd69g5xr2mx3o8z6xyysk] C:\DOCUME~1\TROY~1.TRO\LOCALS~1\Temp\cmqbsz6ow3.exe
    O4 - HKCU\..\Run: [vpncfvlh1oujznk2sngeq4b5kh406ttd] C:\DOCUME~1\TROY~1.TRO\LOCALS~1\Temp\t5tsuxl2.exe
    O4 - HKCU\..\Run: [das7cps8yat0dcpz] C:\DOCUME~1\TROY~1.TRO\LOCALS~1\Temp\eyvyzmg.exe
    O4 - HKCU\..\Run: [g8avqvz61] C:\DOCUME~1\TROY~1.TRO\LOCALS~1\Temp\qr3wrr.exe
    O4 - HKCU\..\Run: [qmold2letgvjmm25ii8h84vg] C:\DOCUME~1\TROY~1.TRO\LOCALS~1\Temp\g6o9sj.exe
    O4 - HKCU\..\Run: [okthkl7kzemrt] C:\DOCUME~1\TROY~1.TRO\LOCALS~1\Temp\vn5qm9z5j6l56.exe
    O4 - HKCU\..\Run: [e1w78aewbkx886z8xtgsszgurxxwujenupt0qmqjxtrlf] C:\DOCUME~1\TROY~1.TRO\LOCALS~1\Temp\t4il2oh.exe
    O4 - HKCU\..\Run: [fkzy6xpsjx9bi58p9vmka9r0ru8akbcl8gk5faln] C:\DOCUME~1\TROY~1.TRO\LOCALS~1\Temp\z5qatkte4f2kz.exe
    O4 - HKCU\..\Run: [nc3dij4tm1iys8vdledmef296vpuf1k2c8fjbd] C:\DOCUME~1\TROY~1.TRO\LOCALS~1\Temp\f4nhav.exe
    O4 - HKCU\..\Run: [mkwojb60h] C:\DOCUME~1\TROY~1.TRO\LOCALS~1\Temp\qiu00nt5mf.exe
    O4 - HKCU\..\Run: [dv3wkfciiupgpj0ftgjsnfvkx6oe8x67mhndmax] C:\DOCUME~1\TROY~1.TRO\LOCALS~1\Temp\r1xuspk5n9vuj.exe
    O4 - HKCU\..\Run: [l86hixzpuw393oswghenf1v81ik3eyjx7ce1] C:\DOCUME~1\TROY~1.TRO\LOCALS~1\Temp\akr8evlf.exe
    O4 - HKCU\..\Run: [zc3pdqxkvhp8cbd7ejas0x0b1qhao5ejs857upls5hpwcqj] C:\DOCUME~1\TROY~1.TRO\LOCALS~1\Temp\uxbyoma9.exe
    O4 - HKCU\..\Run: [hkxkg1dk9u4q4rilo8npj6moo61todis062be1715lf1wwi] C:\DOCUME~1\TROY~1.TRO\LOCALS~1\Temp\yvlc239m32ow.exe
    O4 - HKCU\..\Run: [skubykz1iaod0xx6] C:\DOCUME~1\TROY~1.TRO\LOCALS~1\Temp\bkuj6xvypxt.exe
    O4 - HKCU\..\Run: [rnkxt4r24teqkfkrevc9bqnur7d5] C:\DOCUME~1\TROY~1.TRO\LOCALS~1\Temp\x0d726b.exe
    O4 - HKCU\..\Run: [hmxgs7zhfu5bg93kic] C:\DOCUME~1\TROY~1.TRO\LOCALS~1\Temp\wrjeqv693gf.exe
    O4 - HKCU\..\Run: [nxoxf7kr24ob9z] C:\DOCUME~1\TROY~1.TRO\LOCALS~1\Temp\s2hc3h0.exe
    O4 - HKCU\..\Run: [h2h0j6tsphhzzf4] C:\DOCUME~1\TROY~1.TRO\LOCALS~1\Temp\tcmabhkv.exe
    O4 - HKCU\..\Run: [z380bc9fi8] C:\DOCUME~1\TROY~1.TRO\LOCALS~1\Temp\hajxw5826yys.exe
    O4 - HKCU\..\Run: [g3lrw5wg2k4pwvaftjewwm41vnlv0p0w39x9wkvbmn11b2] C:\DOCUME~1\TROY~1.TRO\LOCALS~1\Temp\on7ypjx0mrr.exe
    O4 - HKCU\..\Run: [d1y7u6bx5dcgkq2q8v2ts0ht905o47erh149w0dbsj5krwzpa] C:\DOCUME~1\TROY~1.TRO\LOCALS~1\Temp\zxslb8sl8s.exe
    O4 - HKCU\..\Run: [ggt7ivwu7bvdr0q9srrv6ludso3hhv77e3off8lzdf] C:\DOCUME~1\TROY~1.TRO\LOCALS~1\Temp\n9n7nyb.exe
    O4 - HKCU\..\Run: [u09o6j40w65covvgt] C:\DOCUME~1\TROY~1.TRO\LOCALS~1\Temp\gwz6dkmx.exe
    O4 - HKCU\..\Run: [v8ynh7cuu7vxxwc1sfqx8s3pmknu673pnxf1] C:\DOCUME~1\TROY~1.TRO\LOCALS~1\Temp\nokb2cg9gm.exe
    O4 - HKCU\..\Run: [ebci1425g9q6dl0ho5ql8akn2rh4ctdylit33o7bq] C:\DOCUME~1\TROY~1.TRO\LOCALS~1\Temp\bcwuolu5.exe
    O4 - HKCU\..\Run: [fskrl6pe80smq33aeu3nzcqxlne] C:\DOCUME~1\TROY~1.TRO\LOCALS~1\Temp\lq02muac4.exe
    O4 - HKCU\..\Run: [a5428at4t420ihrwx53hefjsb1ad2iz8bn4e] C:\DOCUME~1\TROY~1.TRO\LOCALS~1\Temp\xj5j0lwg8ni.exe
    O4 - HKCU\..\Run: [pk46bl3zjfp081al6] C:\DOCUME~1\TROY~1.TRO\LOCALS~1\Temp\g7d3ef9gjwci.exe
    O4 - HKCU\..\Run: [m8k8f1xfhv0jy8ein] C:\DOCUME~1\TROY~1.TRO\LOCALS~1\Temp\qlfm0irjd5at.exe
    O4 - HKCU\..\Run: [bo8b8e3gkeglqzqsy5zml2o2whu93lktuqczslree] C:\DOCUME~1\TROY~1.TRO\LOCALS~1\Temp\m22v1yab2o9.exe
    O4 - HKCU\..\Run: [b5wq1rlm8br2ls6irbfec7yuq] C:\DOCUME~1\TROY~1.TRO\LOCALS~1\Temp\hi6m5ybuxoljx.exe
    O4 - HKCU\..\Run: [giy1x7gy6w1rym6fkhk] C:\DOCUME~1\TROY~1.TRO\LOCALS~1\Temp\yvv2qswre0.exe
    O4 - HKCU\..\Run: [x68ejjgt09pguebd0nkap2izrny4] C:\DOCUME~1\TROY~1.TRO\LOCALS~1\Temp\jjtf8si91p.exe
    O4 - HKCU\..\Run: [psjpsllvafpo220] C:\DOCUME~1\TROY~1.TRO\LOCALS~1\Temp\t2g7fimdc7.exe
    O4 - HKCU\..\Run: [wc0u3pjs92f6zi5r61vafyzc0r14hqftzzmn5hz] C:\DOCUME~1\TROY~1.TRO\LOCALS~1\Temp\ly48vnw4v1.exe
    O4 - HKCU\..\Run: [hsbck44o6mugylfrpehsdcaor81224wx6t6em] C:\DOCUME~1\TROY~1.TRO\LOCALS~1\Temp\cvo574n4p.exe
    O4 - HKCU\..\Run: [kycvr7kr0989vt] C:\DOCUME~1\TROY~1.TRO\LOCALS~1\Temp\d6aahudbu.exe
    O4 - HKCU\..\Run: [tlw20jqgm2dv6vf45etohmuewp4mzzn655ls0w] C:\DOCUME~1\TROY~1.TRO\LOCALS~1\Temp\vkl2zlld0gghh.exe
    O4 - HKCU\..\Run: [bdgnywbwa2j5sr694kl08mupw5o1jm692vxidkqzpgnukpvwv] C:\DOCUME~1\TROY~1.TRO\LOCALS~1\Temp\qxaoq0cqen0.exe
    O4 - HKCU\..\Run: [gs2x220y4rwt6map0hceavbfxtoecogb18v00gkgedmvqd] C:\DOCUME~1\TROY~1.TRO\LOCALS~1\Temp\wht8sx0wt.exe
    O4 - HKCU\..\Run: [el3r3ugq9b9di9jzfv] C:\DOCUME~1\TROY~1.TRO\LOCALS~1\Temp\xrh6jekskd.exe
    O4 - HKCU\..\Run: [e15wxfxym0bq6l4scx0ogki26sfslt9hkud24ntcxmg] C:\DOCUME~1\TROY~1.TRO\LOCALS~1\Temp\ph5zqch59grv.exe
    O4 - HKCU\..\Run: [qh0u7pxb8kd4kqnp3zrfj1plu8fd1fu] C:\DOCUME~1\TROY~1.TRO\LOCALS~1\Temp\zgn2cp.exe
    O4 - HKCU\..\Run: [mvay67qyh79rbv0x] C:\DOCUME~1\TROY~1.TRO\LOCALS~1\Temp\pt4hdvqlpis.exe
    O4 - HKCU\..\Run: [hy6ixognxgf7l3e7p2m89gdsbh4co0f02cs1x6ey] C:\DOCUME~1\TROY~1.TRO\LOCALS~1\Temp\hkg1w1.exe
    O4 - HKCU\..\Run: [kzxz5jb5jz3aa4b8zehyjye0s] C:\DOCUME~1\TROY~1.TRO\LOCALS~1\Temp\oenjpfu7eibgt.exe
    O4 - HKCU\..\Run: [irtk5kppcbanz802orzooiql5703e] C:\DOCUME~1\TROY~1.TRO\LOCALS~1\Temp\lmg7c7cgdj.exe
    O4 - HKCU\..\Run: [o43x2xh7u462rkramjrou98oeknuha3krwfb] C:\DOCUME~1\TROY~1.TRO\LOCALS~1\Temp\dinrbgtlny.exe
    O4 - HKCU\..\Run: [guveoyx3s5wb] C:\DOCUME~1\TROY~1.TRO\LOCALS~1\Temp\jc8yco.exe
    O4 - HKCU\..\Run: [bys5adulgbnf9465d55] C:\DOCUME~1\TROY~1.TRO\LOCALS~1\Temp\cd1dac7a.exe
    O4 - HKCU\..\Run: [pforc0ce2xvianrfwjg] C:\DOCUME~1\TROY~1.TRO\LOCALS~1\Temp\gcfim6ug.exe
    O4 - HKCU\..\Run: [o2onxm0rci3d4x0yarwt44k5jq8lket] C:\DOCUME~1\TROY~1.TRO\LOCALS~1\Temp\vi2o8pvw.exe
    O4 - HKCU\..\Run: [e2a00ccv0ogyejoa6y8] C:\DOCUME~1\TROY~1.TRO\LOCALS~1\Temp\unbuw5gz0s.exe
    O4 - HKCU\..\Run: [u76ux2nsufs74ew4kjgwb8hx532523v2] C:\DOCUME~1\TROY~1.TRO\LOCALS~1\Temp\jqbezcjk.exe
    O4 - HKCU\..\Run: [lx3lihh2kjk] C:\DOCUME~1\TROY~1.TRO\LOCALS~1\Temp\u4ie649aqm4k.exe
    O4 - HKCU\..\Run: [gsvqsql2rwg] C:\DOCUME~1\TROY~1.TRO\LOCALS~1\Temp\ccq6i3k.exe
    O4 - HKCU\..\Run: [g7a8ef5zpckn3z1p99ucdmozzcu96ccvc] C:\DOCUME~1\TROY~1.TRO\LOCALS~1\Temp\fax9niwe.exe
    O4 - HKCU\..\Run: [c12rfo3bfo0] C:\DOCUME~1\TROY~1.TRO\LOCALS~1\Temp\y2ssklcd.exe
    O4 - HKCU\..\Run: [vm73z2twtyw7aok] C:\DOCUME~1\TROY~1.TRO\LOCALS~1\Temp\bhzvp05xg.exe
    O4 - HKCU\..\Run: [nrma228x4q4h3148x6bwnixy6sctta37auld7gj7] C:\DOCUME~1\TROY~1.TRO\LOCALS~1\Temp\ewp4nly40p3.exe
    O4 - HKCU\..\Run: [vwhruk4e805udax1] C:\DOCUME~1\TROY~1.TRO\LOCALS~1\Temp\ogxyxi.exe
    O4 - HKCU\..\Run: [zyhsw9p6z6vfi7c] C:\DOCUME~1\TROY~1.TRO\LOCALS~1\Temp\ubyc3pdc6ozt.exe
    O4 - HKCU\..\Run: [xrqinpvanhxreiy4zygjq6zbqgwi4j1vn7] C:\DOCUME~1\TROY~1.TRO\LOCALS~1\Temp\eyhxl49.exe
    O4 - HKCU\..\Run: [hyfpegrhlc4xdwd548rcfndly2ycsq] C:\DOCUME~1\TROY~1.TRO\LOCALS~1\Temp\vq6uhiyoz.exe
    O4 - HKCU\..\Run: [dzwvzltr73jhb4tm8vdka] C:\DOCUME~1\TROY~1.TRO\LOCALS~1\Temp\xwvqatt037q88.exe
    O4 - HKCU\..\Run: [s1lj3srurlb5aygpr1btkp0cs9snmk31q0zxuo7oml] C:\DOCUME~1\TROY~1.TRO\LOCALS~1\Temp\ld2t2io.exe
    O4 - HKCU\..\Run: [fmxwwa6r5gprm7wacb56nwx3qtm] C:\DOCUME~1\TROY~1.TRO\LOCALS~1\Temp\l4ng1gh5b1vqf.exe
    O4 - HKCU\..\Run: [kjzm89tln7c9jiufp5la62dp1d5oqsfgvf67ejouy] C:\DOCUME~1\TROY~1.TRO\LOCALS~1\Temp\udmrh61y28zc.exe
    O4 - HKCU\..\Run: [kxncir6ysg25dkftofrhv6ulvqmpnhq4b8qcv] C:\DOCUME~1\TROY~1.TRO\LOCALS~1\Temp\f1oddx85oqmg.exe
    O4 - HKCU\..\Run: [zgoe14y63g8wy51a82go9136awt8w7d5m6qeuzg3xm9a0o] C:\DOCUME~1\TROY~1.TRO\LOCALS~1\Temp\mn7rtz8o.exe
    O4 - HKCU\..\Run: [iualz1tczg9zxo3ufw24bxfgkufgq25572fks8te0ee43] C:\DOCUME~1\TROY~1.TRO\LOCALS~1\Temp\ug1wq1xd.exe
    O4 - HKCU\..\Run: [o10n72zy5o5h0n2a17pfeh5gxoj0u7txer5h0h9y0] C:\DOCUME~1\TROY~1.TRO\LOCALS~1\Temp\fzkfwbz61.exe
    O4 - HKCU\..\Run: [gf9or3qs6mll3lhl1dyuvbz360oz5tdig82z] C:\DOCUME~1\TROY~1.TRO\LOCALS~1\Temp\zt67zxuriw9c.exe
    O4 - HKCU\..\Run: [lki1ms7rci901ssqcv3zu3zl76nphlbf29rzt] C:\DOCUME~1\TROY~1.TRO\LOCALS~1\Temp\b7asa1qwiks.exe
    O4 - HKCU\..\Run: [u2fept7uf961rjowrcuk6lvpz22] C:\DOCUME~1\TROY~1.TRO\LOCALS~1\Temp\nlv4vf.exe
    O4 - HKCU\..\Run: [ko0ru3h97id4q6asdu4v8osb61yhrt0xk2jixsol2vvmd] C:\DOCUME~1\TROY~1.TRO\LOCALS~1\Temp\h9yo6bcgf4y.exe
    O4 - HKCU\..\Run: [mt9wbyski0pf3cqrmtojisjvbt9959oy] C:\DOCUME~1\TROY~1.TRO\LOCALS~1\Temp\oeohhd0.exe
    O4 - HKCU\..\Run: [gwmfcjzycrzqrn0kfw84nvm98p1nn35fyehw14i3uu12hjlgr1] C:\DOCUME~1\TROY~1.TRO\LOCALS~1\Temp\y4r725p.exe
    O4 - HKCU\..\Run: [t86fkcpvz6s0k4njuo6j37h4cawfvxx] C:\DOCUME~1\TROY~1.TRO\LOCALS~1\Temp\nh5susstg.exe
    O4 - HKCU\..\Run: [syn1c6o0nqabhg9trz2rbqz0xpy5mb3xnbs8ncw8] C:\DOCUME~1\TROY~1.TRO\LOCALS~1\Temp\wvzbj6.exe
    O4 - HKCU\..\Run: [sq0si1duq05os14t7pvt239] C:\DOCUME~1\TROY~1.TRO\LOCALS~1\Temp\uvth6wn.exe
    O4 - HKCU\..\Run: [b6pfhhth0tbxo] C:\DOCUME~1\TROY~1.TRO\LOCALS~1\Temp\fyfpvj.exe
    O4 - HKCU\..\Run: [n7f8d0n9gpdpewzyc1fiy26d5xearnurxi5ieqwnx] C:\DOCUME~1\TROY~1.TRO\LOCALS~1\Temp\q0y81tg.exe
    O4 - HKCU\..\Run: [kpj8aitmbx9unmnbrwp0h0ul1uoxhkrkmj9a3h2zp43nzg] C:\DOCUME~1\TROY~1.TRO\LOCALS~1\Temp\xum9uo.exe
    O4 - HKCU\..\Run: [tim6o5heo] C:\DOCUME~1\TROY~1.TRO\LOCALS~1\Temp\e37kvmgww.exe
    O4 - HKCU\..\Run: [gwpe6w6k5xmn6epow5ta6f2ys] C:\DOCUME~1\TROY~1.TRO\LOCALS~1\Temp\qw3f4ktuk.exe
    O4 - HKCU\..\Run: [e35xil2mryze7092pr1] C:\DOCUME~1\TROY~1.TRO\LOCALS~1\Temp\v0fvof2k1.exe
    O4 - HKCU\..\Run: [wva6me6h5iw3cmvngdev36b] C:\DOCUME~1\TROY~1.TRO\LOCALS~1\Temp\mi29bdfar0y6t.exe
    O4 - HKCU\..\Run: [gklou607zvdd4o0u6r18rd79hnwc7hv6] C:\DOCUME~1\TROY~1.TRO\LOCALS~1\Temp\jjfeup4d42.exe
    O4 - HKCU\..\Run: [rb1hlic20d2g7q2cv29za8dn98g0whd5h2l] C:\DOCUME~1\TROY~1.TRO\LOCALS~1\Temp\ktkc26oo5fm.exe
    O4 - HKCU\..\Run: [o798wb3fvpk3778ljvfi87mk7w0qdd68vwl69xmmim0d] C:\DOCUME~1\TROY~1.TRO\LOCALS~1\Temp\vc3v8gqh8xm9.exe
    O4 - HKCU\..\Run: [yp9gucvw27zoqgypei] C:\DOCUME~1\TROY~1.TRO\LOCALS~1\Temp\tcxqoc.exe
    O4 - HKCU\..\Run: [i5ilnkcm9cx872ugke26] C:\DOCUME~1\TROY~1.TRO\LOCALS~1\Temp\dvuy2k0raxe4.exe
    O4 - HKCU\..\Run: [qymuax3ll4ebuqusnrs4xj9] C:\DOCUME~1\TROY~1.TRO\LOCALS~1\Temp\wxkkomxo.exe
    O4 - HKCU\..\Run: [zhfbc5vgfpyr] C:\DOCUME~1\TROY~1.TRO\LOCALS~1\Temp\c450g8.exe
    O4 - HKCU\..\Run: [rcqpwu19r15otxofngdqz7vw2im3734ihilwv8je4idwoout] C:\DOCUME~1\TROY~1.TRO\LOCALS~1\Temp\cw7byw004st.exe
    O4 - HKCU\..\Run: [y2jalvy34emfarrouv2q4n] C:\DOCUME~1\TROY~1.TRO\LOCALS~1\Temp\k4f3av.exe
    O4 - HKCU\..\Run: [qjqm10ytx5gfqbnegc2vkt0xxivuw7uxtjk5g4trb4o] C:\DOCUME~1\TROY~1.TRO\LOCALS~1\Temp\jq2w19mz5prs.exe
    O4 - HKCU\..\Run: [k2k6z1s9gvqa57a483f4jk822sc0j8l] C:\DOCUME~1\TROY~1.TRO\LOCALS~1\Temp\xtb22f10zso85.exe
    O4 - HKCU\..\Run: [jqak7sdzv1fimb] C:\DOCUME~1\TROY~1.TRO\LOCALS~1\Temp\ihu5yn872tbc8.exe
    O4 - HKCU\..\Run: [mpl7w9mse8wkgrdsc07qwxsk8ut6he29552ad] C:\DOCUME~1\TROY~1.TRO\LOCALS~1\Temp\lk3stjpoo5tqc.exe
    O4 - HKCU\..\Run: [rcvcszj86gckap87h1] C:\DOCUME~1\TROY~1.TRO\LOCALS~1\Temp\vy03azc772gsb.exe
    O4 - HKCU\..\Run: [xzmdv0q3ksqkhl0cn6z] C:\DOCUME~1\TROY~1.TRO\LOCALS~1\Temp\imwpo4wl2ty6.exe
    O4 - HKCU\..\Run: [vf9vdxyxk93qrwkfbafbl45e2bkjv8gfe314ed] C:\DOCUME~1\TROY~1.TRO\LOCALS~1\Temp\wu5ffr19an3o.exe
    O4 - HKCU\..\Run: [hz21aqwfq8bphogcvry32f2g2fmgk69n8m] C:\DOCUME~1\TROY~1.TRO\LOCALS~1\Temp\s605ek64yo5h.exe
    O4 - HKCU\..\Run: [gteuq1d1kgt9qn1my2c3maz6jb9t4edee3j4l1p2sjfeys1] C:\DOCUME~1\TROY~1.TRO\LOCALS~1\Temp\jj4el66cz.exe
    O4 - HKCU\..\Run: [mkq28wbc0zgx6umodl8groq5mgvp5veccwexnabup0d] C:\DOCUME~1\TROY~1.TRO\LOCALS~1\Temp\ryz5np.exe
    O4 - HKCU\..\Run: [yj3dd7m98vpv5jfyeso6rv] C:\DOCUME~1\TROY~1.TRO\LOCALS~1\Temp\fbaf4a7bbkukr.exe
    O4 - HKCU\..\Run: [kwrmvsci5vhtsd9qqlrlcfbkqx5ia4cehfc2p9khcjpzncxh] C:\DOCUME~1\TROY~1.TRO\LOCALS~1\Temp\ueaz7haw867.exe
    O4 - HKCU\..\Run: [hbhg2eawcg] C:\DOCUME~1\TROY~1.TRO\LOCALS~1\Temp\wuufp83po98.exe
    O4 - HKCU\..\Run: [hxfgaao8pj5m0hw8c9ey4vu8tkv2934xd1] C:\DOCUME~1\TROY~1.TRO\LOCALS~1\Temp\ognwzxd.exe
    O4 - HKCU\..\Run: [d5oxrf7te] C:\DOCUME~1\TROY~1.TRO\LOCALS~1\Temp\jitsjsah.exe
    O4 - HKCU\..\Run: [d3lltnd5cqgxa3n9tw] C:\DOCUME~1\TROY~1.TRO\LOCALS~1\Temp\y3phyr2xnf.exe
    O4 - HKCU\..\Run: [xynxaqfk9to8ssr1ejvoh6vb3o] C:\DOCUME~1\TROY~1.TRO\LOCALS~1\Temp\s5ieccqu1.exe
    O4 - HKCU\..\Run: [zi47heiequu0tqcwql90f1fm98xm] C:\DOCUME~1\TROY~1.TRO\LOCALS~1\Temp\lbfmxpmli3.exe
    O4 - HKCU\..\Run: [a3gasqwmr96r95] C:\DOCUME~1\TROY~1.TRO\LOCALS~1\Temp\kxa50d.exe
    O4 - HKCU\..\Run: [k1xy41ncovvdiv] C:\DOCUME~1\TROY~1.TRO\LOCALS~1\Temp\ukt7zo4pc.exe
    O4 - HKCU\..\Run: [yb9ns1cll9r658rt8g0mgjcxi] C:\DOCUME~1\TROY~1.TRO\LOCALS~1\Temp\vtuesb.exe
    O4 - HKCU\..\Run: [mx2fb3wot45dakcnziov07re95j0sweeqwnsptbjh7w0nphkxg] C:\DOCUME~1\TROY~1.TRO\LOCALS~1\Temp\e9p68rb5.exe
    O4 - HKCU\..\Run: [yjrugzmsqqsiqd7xhtli7jcubpdivazygruyo] C:\DOCUME~1\TROY~1.TRO\LOCALS~1\Temp\dzk80vh.exe
    O4 - HKCU\..\Run: [b4qlkl2y5d23pardst0guomfzajzi0fx] C:\DOCUME~1\TROY~1.TRO\LOCALS~1\Temp\l3d71m0.exe
    O4 - HKCU\..\Run: [ae5mqure1bv14ozrtsbtievwf71j7sw093z69jpbcrd4v4u20m] C:\DOCUME~1\TROY~1.TRO\LOCALS~1\Temp\ya5wvtnz3y.exe
    O4 - HKCU\..\Run: [y2xz9wz6rag12zhwr5m764] C:\DOCUME~1\TROY~1.TRO\LOCALS~1\Temp\dv8f3146j.exe
    O4 - HKCU\..\Run: [xuxmm0sdn9wtcpu2rwdd] C:\DOCUME~1\TROY~1.TRO\LOCALS~1\Temp\hkkxgxh16bv.exe
    O4 - HKCU\..\Run: [lwz47ufalw8s0qgdr3z2e5jn2sp8328bfghq8ghvkhi472e10] C:\DOCUME~1\TROY~1.TRO\LOCALS~1\Temp\zbwyz3.exe
    O4 - HKCU\..\Run: [kyjiwxsbdij2l1afmg3y6ccw021gb2tu3ullxlh2ujmfz9h] C:\DOCUME~1\TROY~1.TRO\LOCALS~1\Temp\humkfvrt6.exe
    O4 - HKCU\..\Run: [blixw0ylxtbsqxqcqt4n3x] C:\DOCUME~1\TROY~1.TRO\LOCALS~1\Temp\vn0nrl.exe
    O4 - HKCU\..\Run: [f08guri8mc0v9] C:\DOCUME~1\TROY~1.TRO\LOCALS~1\Temp\fkub1hkv.exe
    O4 - HKCU\..\Run: [gl8uic9cs5bq4wkvkldclf8u8surso9wfz] C:\DOCUME~1\TROY~1.TRO\LOCALS~1\Temp\rpq9d4qjyc.exe
    O4 - HKCU\..\Run: [qtsutzbh7n7ixiwl151] C:\DOCUME~1\TROY~1.TRO\LOCALS~1\Temp\l9wytcuwthlgy.exe
    O4 - HKCU\..\Run: [pbf4ths22t3eoolydv8itjr6cyekzb0n6gj0] C:\DOCUME~1\TROY~1.TRO\LOCALS~1\Temp\d0rzci9k.exe
    O4 - HKCU\..\Run: [s60hnk6g9nt6bpuq] C:\DOCUME~1\TROY~1.TRO\LOCALS~1\Temp\ojrizsbdm.exe
    O4 - HKCU\..\Run: [ts7fqevr6z3garrqpeo6to8pkq6cfgan] C:\DOCUME~1\TROY~1.TRO\LOCALS~1\Temp\yc9ucfwyqujns.exe
    O4 - HKCU\..\Run: [pp0bxixa1s4rdz40qauc2l9dacjths311pl] C:\DOCUME~1\TROY~1.TRO\LOCALS~1\Temp\l4kfddit.exe
    O4 - HKCU\..\Run: [dat8sjadt8ye2w8r] C:\DOCUME~1\TROY~1.TRO\LOCALS~1\Temp\gkhmoeqi.exe
    O4 - HKCU\..\Run: [x3v9ere28jx86zhhuzt7zgs1d4] C:\DOCUME~1\TROY~1.TRO\LOCALS~1\Temp\smkgm7ju9tei.exe
    O4 - HKCU\..\Run: [r3s0p0biu] C:\DOCUME~1\TROY~1.TRO\LOCALS~1\Temp\yyselwkcqu6h.exe
    O4 - HKCU\..\Run: [yj21poubacrq9qzsoeyw7wxzla4npialw0kgl2znom2ywiux] C:\DOCUME~1\TROY~1.TRO\LOCALS~1\Temp\bd610t6.exe
    O4 - HKCU\..\Run: [bey0teklroj4x1c26v0oubaf0u82pm3o490opoioon7eypv] C:\DOCUME~1\TROY~1.TRO\LOCALS~1\Temp\kr0vdi23md9.exe
    O4 - HKCU\..\Run: [jt1txs765vlt21m4dv] C:\DOCUME~1\TROY~1.TRO\LOCALS~1\Temp\wp7w0qclqpa9.exe
    O4 - HKCU\..\Run: [zvjl1kgadlzhhoohj7xtpqxv4] C:\DOCUME~1\TROY~1.TRO\LOCALS~1\Temp\zkzuda9qz.exe
    O4 - HKCU\..\Run: [jss3798zy0omwuko97jrbny3xqnuqscuuu8oq] C:\DOCUME~1\TROY~1.TRO\LOCALS~1\Temp\a551qfevo.exe
    O4 - HKCU\..\Run: [v9n33jaisxv5b3w8cupmjji9ng] C:\DOCUME~1\TROY~1.TRO\LOCALS~1\Temp\c4ph8677l.exe
    O4 - HKCU\..\Run: [yfehbr370iuli4za23c5da] C:\DOCUME~1\TROY~1.TRO\LOCALS~1\Temp\onzvghc.exe
    O4 - HKCU\..\Run: [bcr70g1l9wceb5pe8p] C:\DOCUME~1\TROY~1.TRO\LOCALS~1\Temp\vhnw9c.exe
    O4 - HKCU\..\Run: [z6y3v43ko9i8o9qaf] C:\DOCUME~1\TROY~1.TRO\LOCALS~1\Temp\s4d7bk.exe
    O4 - HKCU\..\Run: [j97joyhjjgowx78gaekq42lvq5zkc5] C:\DOCUME~1\TROY~1.TRO\LOCALS~1\Temp\z2n2pirga4.exe
    O4 - HKCU\..\Run: [oqrpffeo644ykyzsti8] C:\DOCUME~1\TROY~1.TRO\LOCALS~1\Temp\eeh7mkx5wl.exe
    O4 - HKCU\..\Run: [h3gzxgsuhk7ge5xi7lx] C:\DOCUME~1\TROY~1.TRO\LOCALS~1\Temp\ury5n9r.exe
    O4 - HKCU\..\Run: [l1bqcmsgv] C:\DOCUME~1\TROY~1.TRO\LOCALS~1\Temp\hlx52517c4.exe
    O4 - HKCU\..\Run: [r1u03l4ql3yiyimihjopvyn0jphgeu0svwh6yonidc] C:\DOCUME~1\TROY~1.TRO\LOCALS~1\Temp\rd89kk42548qt.exe
    O4 - HKCU\..\Run: [r0umfy0knn0vmcpqfz7d28gve41] C:\DOCUME~1\TROY~1.TRO\LOCALS~1\Temp\pk71djm2tat.exe
    O4 - HKCU\..\Run: [vbw0gib9jcal] C:\DOCUME~1\TROY~1.TRO\LOCALS~1\Temp\wtsp2bgv2si7o.exe
    O4 - HKCU\..\Run: [x0s2jjo0kydgb] C:\DOCUME~1\TROY~1.TRO\LOCALS~1\Temp\exl5m6p4jy6en.exe
    O4 - HKCU\..\Run: [bauldgv0zo6jee4id5vc088g3] C:\DOCUME~1\TROY~1.TRO\LOCALS~1\Temp\jw5llxixz5gvi.exe
    O4 - HKCU\..\Run: [qea9uo2rkts88h2ui5nklnamr4joglvvsuyk5tf] C:\DOCUME~1\TROY~1.TRO\LOCALS~1\Temp\vu5rrtgruwb9g.exe
    O4 - HKCU\..\Run: [o32mlfmf5c1eswv29rmuc4dvpzg2vl] C:\DOCUME~1\TROY~1.TRO\LOCALS~1\Temp\q2s4kugbvja.exe
    O4 - HKCU\..\Run: [uk34v5hxl8488t37io66du] C:\DOCUME~1\TROY~1.TRO\LOCALS~1\Temp\j843rgrdf7hh.exe
    O4 - HKCU\..\Run: [bn3blu7j2itpy9s0n0w8h19] C:\DOCUME~1\TROY~1.TRO\LOCALS~1\Temp\ip8cswton7x.exe
    O4 - HKCU\..\Run: [lpcfbcdpw42tdbny9i7qqiinoltbqhzdcbijgn08pn] C:\DOCUME~1\TROY~1.TRO\LOCALS~1\Temp\po8ui9u.exe
    O4 - HKCU\..\Run: [a4rmps4ipr] C:\DOCUME~1\TROY~1.TRO\LOCALS~1\Temp\alfd81kf619.exe
    O4 - HKCU\..\Run: [m76bruz1pbkg06epsyaerus530tz3qjizf0] C:\DOCUME~1\TROY~1.TRO\LOCALS~1\Temp\e0prmin.exe
    O4 - HKCU\..\Run: [yj186w6whyq] C:\DOCUME~1\TROY~1.TRO\LOCALS~1\Temp\u8b678m.exe
    O4 - HKCU\..\Run: [r9k886khhgtu] C:\DOCUME~1\TROY~1.TRO\LOCALS~1\Temp\t8rvy6vhqpgr.exe
    O4 - HKCU\..\Run: [tf90xriacqqb338ws4295h1bb1va7nz4yexxd8n] C:\DOCUME~1\TROY~1.TRO\LOCALS~1\Temp\rcx2sb0mwd5o.exe
    O4 - HKCU\..\Run: [eovuab65yy] C:\DOCUME~1\TROY~1.TRO\LOCALS~1\Temp\bli703.exe
    O4 - HKCU\..\Run: [b7k52qcbm7wzbcr7zko9d3j5qxhxjnoo2bzgxj6v8ron5efqv] C:\DOCUME~1\TROY~1.TRO\LOCALS~1\Temp\qyds9qe0.exe
    O4 - HKCU\..\Run: [onzlnd1g918yatv4acl41mshdu5x7w29c9xd1nmui] C:\DOCUME~1\TROY~1.TRO\LOCALS~1\Temp\k5ssanmhke7.exe
    O4 - HKCU\..\Run: [rxikw0q803idvt1y] C:\DOCUME~1\TROY~1.TRO\LOCALS~1\Temp\bmzvjc0us82si.exe
    O4 - HKCU\..\Run: [jngmhc1ivk2m0k2s65r5mcbktg5r3uc05nh0htanqv7rxo0s] C:\DOCUME~1\TROY~1.TRO\LOCALS~1\Temp\pza5jxtw02u4.exe
    O4 - HKCU\..\Run: [v8qvb2xd7p1hphi4row36tvswm2guuryhgfo2y2p5bqbwmx] C:\DOCUME~1\TROY~1.TRO\LOCALS~1\Temp\aitop7vp3kdvs.exe
    O4 - HKCU\..\Run: [e7tohtw85n0zivy0cjep1pq1xbywfpjnbtbc] C:\DOCUME~1\TROY~1.TRO\LOCALS~1\Temp\ru4a4j32lbied.exe
    O4 - HKCU\..\Run: [vw30krsiyjcu6u74aam] C:\DOCUME~1\TROY~1.TRO\LOCALS~1\Temp\r4zdtzztj.exe
    O4 - HKCU\..\Run: [pn8ktn7u69bd4pmewhtnixvc0qcnmlonag6p9omee] C:\DOCUME~1\TROY~1.TRO\LOCALS~1\Temp\tom6wt.exe
    O4 - HKCU\..\Run: [zw0llyjx6bfqu6miw] C:\DOCUME~1\TROY~1.TRO\LOCALS~1\Temp\olqehc7r.exe
    O4 - HKCU\..\Run: [wxbmlxp1ma52ke7kdjo5a06s] C:\DOCUME~1\TROY~1.TRO\LOCALS~1\Temp\lyl5wlue0s2o.exe
    O4 - HKCU\..\Run: [d0nw99a3jeajrush2] C:\DOCUME~1\TROY~1.TRO\LOCALS~1\Temp\jyf0c0.exe
    O4 - HKCU\..\Run: [pigtp26o12] C:\DOCUME~1\TROY~1.TRO\LOCALS~1\Temp\q2hlbbia9.exe
    O4 - HKCU\..\Run: [q2bs2dqkb501] C:\DOCUME~1\TROY~1.TRO\LOCALS~1\Temp\mi9d24.exe
    O4 - HKCU\..\Run: [cb374h4hxqltm1] C:\DOCUME~1\TROY~1.TRO\LOCALS~1\Temp\clrijmn.exe
    O4 - HKCU\..\Run: [tfrk5fk52hco9rt9ib24vv1ghkupd46cr5bpn2zbkz43u0g] C:\DOCUME~1\TROY~1.TRO\LOCALS~1\Temp\fjy251gh.exe
    O4 - HKCU\..\Run: [jjayf6acsw8] C:\DOCUME~1\TROY~1.TRO\LOCALS~1\Temp\wsnzkjve7n.exe
    O4 - HKCU\..\Run: [uw9v7hm3gc0sev4wv95cay0qlmo7] C:\DOCUME~1\TROY~1.TRO\LOCALS~1\Temp\l9nge9tl4.exe
    O4 - HKCU\..\Run: [r9zx7enihhagn15ow4kx6d874437kgbcihyduyp6xppwu] C:\DOCUME~1\TROY~1.TRO\LOCALS~1\Temp\kzyi9xdnunh.exe
    O4 - HKCU\..\Run: [dajhz7ylgpr3q7p74hdilv4rvx8t26qvqq] C:\DOCUME~1\TROY~1.TRO\LOCALS~1\Temp\rcmj2s2laz.exe
    O4 - HKCU\..\Run: [xpjikuwccj00dge05ffr2c1urmsuimp] C:\DOCUME~1\TROY~1.TRO\LOCALS~1\Temp\oou00o559h.exe
    O4 - HKCU\..\Run: [soyrcyj8ys6hevd0ofvhifuz0kqsuqqdqq] C:\DOCUME~1\TROY~1.TRO\LOCALS~1\Temp\y3vf3bv4uorr5.exe
    O4 - HKCU\..\Run: [v3aqvsq7seohneik7ib] C:\DOCUME~1\TROY~1.TRO\LOCALS~1\Temp\tesp01f.exe
    O4 - HKCU\..\Run: [dbqw4u3b3wev5zthqvgtxp9os5z3bej] C:\DOCUME~1\TROY~1.TRO\LOCALS~1\Temp\w0a5tch6hwq.exe
    O4 - HKCU\..\Run: [aw5euly4p2mz15ewcrk0] C:\DOCUME~1\TROY~1.TRO\LOCALS~1\Temp\bu81orq.exe
    O4 - HKCU\..\Run: [zsahukflttg9vqdhdn] C:\DOCUME~1\TROY~1.TRO\LOCALS~1\Temp\owhp9h8x0qj.exe
    O4 - HKCU\..\Run: [vcmyjyyv5lg0riw2q4cubsvnbg3ydgyz7t] C:\DOCUME~1\TROY~1.TRO\LOCALS~1\Temp\c9sz9l1g8k.exe
    O4 - HKCU\..\Run: [o8azijb5dnmeq9vnikdln89ofl5kz5jyau5yx3] C:\DOCUME~1\TROY~1.TRO\LOCALS~1\Temp\nngigd.exe
    O4 - HKCU\..\Run: [qrlvievf2lchv32v2rx6ffa9] C:\DOCUME~1\TROY~1.TRO\LOCALS~1\Temp\ya2e7qo498vn.exe
    O4 - HKCU\..\Run: [q5qlsw8s7ulup56drff5] C:\DOCUME~1\TROY~1.TRO\LOCALS~1\Temp\jy403hebv918.exe
    O4 - HKCU\..\Run: [lczhyex7dpohy8hrj3fn344nnz8iu7u3qynsgvde] C:\DOCUME~1\TROY~1.TRO\LOCALS~1\Temp\ywlhg7cisri.exe
    O4 - HKCU\..\Run: [wutsppc9kue3hcbf09a92w0cfyxxlew2r2eroec5qropee1dc] C:\DOCUME~1\TROY~1.TRO\LOCALS~1\Temp\xbfa327d33t.exe
    O4 - HKCU\..\Run: [jzlfntxo54o0ct66isdi8mjorzmdreqpsxjkfb3u4h0q4pq] C:\DOCUME~1\TROY~1.TRO\LOCALS~1\Temp\vr9y08.exe
    O4 - HKCU\..\Run: [qcstbv6w9mgnrlu1yx] C:\DOCUME~1\TROY~1.TRO\LOCALS~1\Temp\r3x8wgkkmp9.exe
    O4 - HKCU\..\Run: [o9q2dk1768b7v906ewmhc] C:\DOCUME~1\TROY~1.TRO\LOCALS~1\Temp\bqpohjr.exe
    O4 - HKCU\..\Run: [tq8vadhmrdzus6v3w57jlaqxcexs4aocg5xd606scz4q7] C:\DOCUME~1\TROY~1.TRO\LOCALS~1\Temp\t8mcgnzw.exe
    O4 - HKCU\..\Run: [m5s07cp866n197klyf7c5c3whtnmbdfb0akwsu5blbqh7] C:\DOCUME~1\TROY~1.TRO\LOCALS~1\Temp\flrhw4rfo.exe
    O4 - HKCU\..\Run: [r9iwpvihvvr74shqjdqvkwp8i9lfkokxe5l8eov6t7lqjtgq81] C:\DOCUME~1\TROY~1.TRO\LOCALS~1\Temp\qzf0mfh5yy9jt.exe
    O4 - HKCU\..\Run: [gzymo5byzh5t63xcfgg7b41fwi8p24ekj] C:\DOCUME~1\TROY~1.TRO\LOCALS~1\Temp\x805u7b.exe
    O4 - HKCU\..\Run: [vlfz8lprdu0cp09] C:\DOCUME~1\TROY~1.TRO\LOCALS~1\Temp\mb06eeejnh28g.exe
    O4 - HKCU\..\Run: [lg5x1mjm2e5kztfdpsv] C:\DOCUME~1\TROY~1.TRO\LOCALS~1\Temp\bwfzj8e.exe
    O4 - HKCU\..\Run: [ku7ox9p5x9a] C:\DOCUME~1\TROY~1.TRO\LOCALS~1\Temp\pgcpudqmgn.exe
    O4 - HKCU\..\Run: [gva2t83b4xugus0zfqugl8czes9vcy4lc1n4vhfcsn9e1pkup] C:\DOCUME~1\TROY~1.TRO\LOCALS~1\Temp\kitzavh.exe
    O4 - HKCU\..\Run: [kpmvup8mpvrfhizwcc1udyw3bjm1g1txb5b78ktd] C:\DOCUME~1\TROY~1.TRO\LOCALS~1\Temp\cehjqj8.exe
    O4 - HKCU\..\Run: [nqcbputr2j15gm47ljal2nlhnhzt2dwbyy] C:\DOCUME~1\TROY~1.TRO\LOCALS~1\Temp\vryyrp2eu7km.exe
    O4 - HKCU\..\Run: [a1oncsxn7j9whrplncj8232rtfm8pxc2bqox5] C:\DOCUME~1\TROY~1.TRO\LOCALS~1\Temp\d6tpt8auy.exe
    O4 - HKCU\..\Run: [e49l5x5010jef22ck2556bfqjrucklrtnfe5epm1cdn4ekp6m] C:\DOCUME~1\TROY~1.TRO\LOCALS~1\Temp\nfoa81sc0.exe
    O4 - HKCU\..\Run: [ejktguue75h06tkqqps4h0rri] C:\DOCUME~1\TROY~1.TRO\LOCALS~1\Temp\k0hqmmzs.exe
    O4 - HKCU\..\Run: [qaq5o3jsyvs1dgoh4b2tqaidm30xhz1ez8u90gecti] C:\DOCUME~1\TROY~1.TRO\LOCALS~1\Temp\y7c9pv.exe
    O4 - HKCU\..\Run: [u1z5lz5uan9hqoicaldsw3hk7ll41u4tcfjxpap8lea6ueoe] C:\DOCUME~1\TROY~1.TRO\LOCALS~1\Temp\y3xgxrsutql.exe
    O4 - HKCU\..\Run: [z0f5ldlxpgdxro8516b8xmdeawx4dcmpj8agns24y0c] C:\DOCUME~1\TROY~1.TRO\LOCALS~1\Temp\c28ruuqv6.exe
    O4 - HKCU\..\Run: [aaekzylxop6x0hmfx4y9yuetk7cy2ekigtonbdtn] C:\DOCUME~1\TROY~1.TRO\LOCALS~1\Temp\zhh7gce.exe
    O4 - HKCU\..\Run: [pu1vpehmdvbq1nsila] C:\DOCUME~1\TROY~1.TRO\LOCALS~1\Temp\qz4hdwnb7bz.exe
    O4 - HKCU\..\Run: [lap959yih3e4tvzab4kk34rmymzzv3r6t79d2e] C:\DOCUME~1\TROY~1.TRO\LOCALS~1\Temp\opc8zicn18.exe
    O4 - HKCU\..\Run: [zsrmf53cdbytlhgdqyx2j7va9unc] C:\DOCUME~1\TROY~1.TRO\LOCALS~1\Temp\ryemn2d.exe
    O4 - HKCU\..\Run: [vgeaxcb4hyune] C:\DOCUME~1\TROY~1.TRO\LOCALS~1\Temp\z40y8j89wxeos.exe
    O4 - HKCU\..\Run: [qag7dp4izrdu4lax5cy78eg3h1f596n6j4agrvxwuvffw] C:\DOCUME~1\TROY~1.TRO\LOCALS~1\Temp\dd9nqtvwe.exe
    O4 - HKCU\..\Run: [wifefokdp1owdq3n2q4j63tfhpqpq8gs6] C:\DOCUME~1\TROY~1.TRO\LOCALS~1\Temp\k60het.exe
    O4 - HKCU\..\Run: [jwqpzeqwac1lgoi41grp5hcqrdq1ao7zl] C:\DOCUME~1\TROY~1.TRO\LOCALS~1\Temp\qr6sekis.exe
    O4 - HKCU\..\Run: [x4rwxm610mikyjdcl8tqqq80ooh1rty3] C:\DOCUME~1\TROY~1.TRO\LOCALS~1\Temp\nqqlqp.exe
    O4 - HKCU\..\Run: [skho108gdq0k3zqjc79x9idbb7jpyi3a77n2mf04ivr8jwwzn3] C:\DOCUME~1\TROY~1.TRO\LOCALS~1\Temp\y9g7pymnx.exe
    O4 - HKCU\..\Run: [vxtlhcrl2x] C:\DOCUME~1\TROY~1.TRO\LOCALS~1\Temp\k7xoj7ku.exe
    O4 - HKCU\..\Run: [zrm2cei97kdr8fuionx1rg6z1lgmlnc3iajoso7a4wu] C:\DOCUME~1\TROY~1.TRO\LOCALS~1\Temp\yjbrve34q96rj.exe
    O4 - HKCU\..\Run: [mt8vfmma57t3tf5gl4uunj] C:\DOCUME~1\TROY~1.TRO\LOCALS~1\Temp\v02b2rb2pafe.exe
    O4 - HKCU\..\Run: [da0rb2rtig840sqgwm6] C:\DOCUME~1\TROY~1.TRO\LOCALS~1\Temp\az2rnn8.exe
    O4 - HKCU\..\Run: [f809g2108908pnfkn650v1gnzqw5uujfpn] C:\DOCUME~1\TROY~1.TRO\LOCALS~1\Temp\inucu8sj.exe
    O4 - HKCU\..\Run: [utmtavmcnebqqbnj910s7t38iz5hupc6] C:\DOCUME~1\TROY~1.TRO\LOCALS~1\Temp\htqsgi.exe
    O4 - HKCU\..\Run: [ca49f9ru7ghouloso90ad2tgvmdtfqai1vtow8] C:\DOCUME~1\TROY~1.TRO\LOCALS~1\Temp\onea9wm49ymc0.exe
    O4 - HKCU\..\Run: [hk7t02kufnozrsebq93hlf9shbpdhymky7] C:\DOCUME~1\TROY~1.TRO\LOCALS~1\Temp\ikf7ldw4mnd2.exe
    O4 - HKCU\..\Run: [gakwcnfkbx0fz44eii9yxtjluh43exp1r6uf25scgvst3lf] C:\DOCUME~1\TROY~1.TRO\LOCALS~1\Temp\bva91gck6b7d.exe
    O4 - HKCU\..\Run: [l4hldmnpy5m5b1s9vk4mvaqmlfxdjhbcmcy1nbu6tujun] C:\DOCUME~1\TROY~1.TRO\LOCALS~1\Temp\jp1l3d.exe
    O4 - HKCU\..\Run: [w997k44q13c9aj1bgbyion2z1gezi1zkvg7gun003] C:\DOCUME~1\TROY~1.TRO\LOCALS~1\Temp\ahqizvqy.exe
    O4 - HKCU\..\Run: [dfyo0vr46iyjv9pvn9u7b] C:\DOCUME~1\TROY~1.TRO\LOCALS~1\Temp\hpvg2sai.exe
    O4 - HKCU\..\Run: [opgfhq7lrbbgkm6yzqogawvozm5xi1v6mvvmnsi1av] C:\DOCUME~1\TROY~1.TRO\LOCALS~1\Temp\nyda388.exe
    O4 - HKCU\..\Run: [scb6uc1fkc] C:\DOCUME~1\TROY~1.TRO\LOCALS~1\Temp\puo35dp.exe
    O4 - HKCU\..\Run: [ukr90y4quv2eb020nr] C:\DOCUME~1\TROY~1.TRO\LOCALS~1\Temp\pv4aa8zfi.exe
    O4 - HKCU\..\Run: [hnnbbl9n3537331rcwyq] C:\DOCUME~1\TROY~1.TRO\LOCALS~1\Temp\kb8ier0fd16.exe
    O4 - HKCU\..\Run: [so9b1b8vvrxjfzsanj22nm9ya] C:\DOCUME~1\TROY~1.TRO\LOCALS~1\Temp\dyk0lwshxpdp.exe
    O4 - HKCU\..\Run: [wnz8im9qk8xwf3k] C:\DOCUME~1\TROY~1.TRO\LOCALS~1\Temp\jc2er30o7w.exe
    O4 - HKCU\..\Run: [hd357fi8l9bcyl8vt6745acrvd8jtl109o42clwi5rgtv3] C:\DOCUME~1\TROY~1.TRO\LOCALS~1\Temp\spw1l2q.exe
    O4 - HKCU\..\Run: [sg8bj9zvr0ty9bo348r5emwewj3fx18] C:\DOCUME~1\TROY~1.TRO\LOCALS~1\Temp\ya2vltyv4.exe
    O4 - HKCU\..\Run: [jf9nkkfoskm7902jmsq04wq2e7n] C:\DOCUME~1\TROY~1.TRO\LOCALS~1\Temp\y7nqcy2grr9iy.exe
    O4 - HKCU\..\Run: [mllaty1rndf4we1pur96tmx95pm0z1g0rm2zc9xx6paor2] C:\DOCUME~1\TROY~1.TRO\LOCALS~1\Temp\pouc4nx.exe
    O4 - HKCU\..\Run: [h3nummhhfkx8492ev7ctvov4xn8dnzqqkp362j] C:\DOCUME~1\TROY~1.TRO\LOCALS~1\Temp\e18xda0v6.exe
    O4 - HKCU\..\Run: [qeyc46gxtzdmavrbs] C:\DOCUME~1\TROY~1.TRO\LOCALS~1\Temp\mez9y7gc859.exe
    O4 - HKCU\..\Run: [nu999daqow1jlu6fo1oewshrph0yv1iuohmev8u] C:\DOCUME~1\TROY~1.TRO\LOCALS~1\Temp\j9n9i8.exe
    O4 - HKCU\..\Run: [fwxxcy8jt4xd245dzefb5] C:\DOCUME~1\TROY~1.TRO\LOCALS~1\Temp\w1iuxi.exe
    O4 - HKCU\..\Run: [bouy6rpgxlrxfbnc0qxnm3xgqsyreimoo542] C:\DOCUME~1\TROY~1.TRO\LOCALS~1\Temp\mo1wx594n.exe
    O4 - HKCU\..\Run: [xz1noqb87ex4wgqank0f350mrbyc] C:\DOCUME~1\TROY~1.TRO\LOCALS~1\Temp\x7kfkwbxqx.exe
    O4 - HKCU\..\Run: [t9yzs6vyiv4opgd09mhvr0luy] C:\DOCUME~1\TROY~1.TRO\LOCALS~1\Temp\ghzgo05ztas.exe
    O4 - HKCU\..\Run: [u48fkuixuaslx1wz3mbihfcdbwh5nq] C:\DOCUME~1\TROY~1.TRO\LOCALS~1\Temp\rjzzba7bfsbb.exe
    O4 - HKCU\..\Run: [wxd4gog7c83yoy52h742udq6m6bepma6j7jg7qb] C:\DOCUME~1\TROY~1.TRO\LOCALS~1\Temp\ebdkq3pthgge.exe
    O4 - HKCU\..\Run: [kd7a2jwnr0ukk6qyldij79bqnmgkoi0432y3] C:\DOCUME~1\TROY~1.TRO\LOCALS~1\Temp\bykg1nkih3o6.exe
    O4 - HKCU\..\Run: [awiqo6dfo2i5gcvz7o8k8] C:\DOCUME~1\TROY~1.TRO\LOCALS~1\Temp\nr8tpj.exe
    O4 - HKCU\..\Run: [pynvrrb8tregemuxi1z0h86rx4c2q30lfpeldm4oybv5t] C:\DOCUME~1\TROY~1.TRO\LOCALS~1\Temp\xj3e4t.exe
    O4 - HKCU\..\Run: [p9vuh6zrjngkap95djy8bmggr6yt6f7fodm2oil3uak652] C:\DOCUME~1\TROY~1.TRO\LOCALS~1\Temp\isrdln1v8z5.exe
    O4 - HKCU\..\Run: [qlgipf4nm8lzik9bskt6bg91g72fva43sarqxrxs3uyprq18um] C:\DOCUME~1\TROY~1.TRO\LOCALS~1\Temp\e8ffhpte.exe
    O4 - HKCU\..\Run: [h09f21lg6wlhrumukp84c7s5id6dpcp840d] C:\DOCUME~1\TROY~1.TRO\LOCALS~1\Temp\ya8cva0.exe
    O4 - HKCU\..\Run: [u96h8rptaki6t9ygndj2oe29uhc0s58yds7gz1bgc9gudxwbs] C:\DOCUME~1\TROY~1.TRO\LOCALS~1\Temp\jcrv1k2n.exe
    O4 - HKCU\..\Run: [goymoyb4cnytjs4vfjpl] C:\DOCUME~1\TROY~1.TRO\LOCALS~1\Temp\rgku2fbh.exe
    O4 - HKCU\..\Run: [l54ic1h3r5tco37firbhph29bbyjiho56ue2rptrhh4ttg] C:\DOCUME~1\TROY~1.TRO\LOCALS~1\Temp\ls3471sg5v.exe
    O4 - HKCU\..\Run: [gi3wjjaov7jmpvu4s2e17v8llk07k7j8ecfu] C:\DOCUME~1\TROY~1.TRO\LOCALS~1\Temp\oxf4404.exe
    O4 - HKCU\..\Run: [f6q9fd3cib9yy] C:\DOCUME~1\TROY~1.TRO\LOCALS~1\Temp\r2neprvxbcsu.exe
    O4 - HKCU\..\Run: [zdfv9wcy5itk8hj8fswbsc0khwr8pud] C:\DOCUME~1\TROY~1.TRO\LOCALS~1\Temp\h3ndgeuw.exe
    O4 - HKCU\..\Run: [tnww08fawhotqnftnsofwie73lhdpg9] C:\DOCUME~1\TROY~1.TRO\LOCALS~1\Temp\puzk9g.exe
    O4 - HKCU\..\Run: [ng1dhsq2nes0iakahyf50iygy] C:\DOCUME~1\TROY~1.TRO\LOCALS~1\Temp\txs1wemwa.exe
    O4 - HKCU\..\Run: [iefr4mg5l2sr2egro5ks8ctjcy7ortoaewrg55s7zag] C:\DOCUME~1\TROY~1.TRO\LOCALS~1\Temp\awi3fqg.exe
    O4 - HKCU\..\Run: [kx0b94pqvw1qg2pcxk2ss6tev] C:\DOCUME~1\TROY~1.TRO\LOCALS~1\Temp\hrdvkcn.exe
    O4 - HKCU\..\Run: [og9tdexosvxzootxw3h22x3u616vaxs8ajnowe5aopd8ykw] C:\DOCUME~1\TROY~1.TRO\LOCALS~1\Temp\ol1dd7.exe
    O4 - HKCU\..\Run: [j00idg1q2c4afgemkjhj3rxo4e5jpkmzv8zayj] C:\DOCUME~1\TROY~1.TRO\LOCALS~1\Temp\lgpdx80rn.exe
    O4 - HKCU\..\Run: [rrt4alu1zby83s30] C:\DOCUME~1\TROY~1.TRO\LOCALS~1\Temp\zn1w0he.exe
    O4 - HKCU\..\Run: [g3oipn1fry4rttmpm7a81nvey7zg04t3h9] C:\DOCUME~1\TROY~1.TRO\LOCALS~1\Temp\pv6bl7w.exe
    O4 - HKCU\..\Run: [wvl5rtzvnnkoqeuzlqqmcbp] C:\DOCUME~1\TROY~1.TRO\LOCALS~1\Temp\bt6syx.exe
    O4 - HKCU\..\Run: [q08jjnd5ee0ajfxhnqper9orik55zdnl1kzscrpyvpm7wnkf8] C:\DOCUME~1\TROY~1.TRO\LOCALS~1\Temp\a2iu7ga1urami.exe
    O4 - HKCU\..\Run: [ro94u7oec3s8ssti5f4rlhu6oafu39ksmvq80nkubcl] C:\DOCUME~1\TROY~1.TRO\LOCALS~1\Temp\ae6urhyy.exe
    O4 - HKCU\..\Run: [fefhkdgjhri2p1] C:\DOCUME~1\TROY~1.TRO\LOCALS~1\Temp\wpuce2.exe
    O4 - HKCU\..\Run: [bmieeepo61bt330gyzn7z1467q3hfty6yr5rysfd5sjd] C:\DOCUME~1\TROY~1.TRO\LOCALS~1\Temp\litbeusqazzf.exe
    O4 - HKCU\..\Run: [crtix122hp52mpv8kt7maqo6b7f] C:\DOCUME~1\TROY~1.TRO\LOCALS~1\Temp\de0cuzjhtabp.exe
    O4 - HKCU\..\Run: [z7o1b0udxdnrk9t9hzdnek5orc1hs66nbnp] C:\DOCUME~1\TROY~1.TRO\LOCALS~1\Temp\qa796i76kr.exe
    O4 - HKCU\..\Run: [ci9o1jmlhpau0vj07m2gl0vob6hsl3unklgqcpmqins5ff] C:\DOCUME~1\TROY~1.TRO\LOCALS~1\Temp\k9lks8z7lbn50.exe
    O4 - HKCU\..\Run: [hx9vzd9mjnciadvucxhfayeh3vmr2t5mmwpri7il7vlg] C:\DOCUME~1\TROY~1.TRO\LOCALS~1\Temp\k8odnd8f9m4.exe
    O4 - HKCU\..\Run: [dytgpff5bldusjmik78y602vyy9k7kg6w4jmi0ku] C:\DOCUME~1\TROY~1.TRO\LOCALS~1\Temp\h0x8yj0xkc.exe
    O4 - HKCU\..\Run: [g6w1j74jbo0dv244r6v5b7hpwfihyusyak9utb39] C:\DOCUME~1\TROY~1.TRO\LOCALS~1\Temp\vsv45vsynbwji.exe
    O4 - HKCU\..\Run: [ujr9bnbzsvcb3wdytt52eu1la6wfvz7ilbrv360ptdqwso] C:\DOCUME~1\TROY~1.TRO\LOCALS~1\Temp\rsstdtiy50.exe
    O4 - HKCU\..\Run: [nzal0jd2a83cpzr8fiyiax] C:\DOCUME~1\TROY~1.TRO\LOCALS~1\Temp\zwl9xorom6.exe
    O4 - HKCU\..\Run: [qyylp65ouayg1q8mryjqv33opmevoteng1] C:\DOCUME~1\TROY~1.TRO\LOCALS~1\Temp\kzqhmsiq9.exe
    O4 - HKCU\..\Run: [e08mj9x1wioz3jo5rb1bt8yd3m889a6bbnx3imj] C:\DOCUME~1\TROY~1.TRO\LOCALS~1\Temp\rod0lpg.exe
    O4 - HKCU\..\Run: [smj6si2yvh6nup3xxih2iflg] C:\DOCUME~1\TROY~1.TRO\LOCALS~1\Temp\pyeyr15bdwgz.exe
    O4 - HKCU\..\Run: [ea64evb2bmck0a8biwjok0rrn3bpgdplto6] C:\DOCUME~1\TROY~1.TRO\LOCALS~1\Temp\snj4pwgv.exe
    O4 - HKCU\..\Run: [ch4jhok69eav6fi5zz8v07] C:\DOCUME~1\TROY~1.TRO\LOCALS~1\Temp\r6k8xgyu.exe
    O4 - HKCU\..\Run: [my3lzwob90b5tha0nndo5m4bdjr97pgks6p1] C:\DOCUME~1\TROY~1.TRO\LOCALS~1\Temp\xolo9za1n.exe
    O4 - HKCU\..\Run: [b92nws4vs6aja] C:\DOCUME~1\TROY~1.TRO\LOCALS~1\Temp\fstef3ylo.exe
    O4 - HKCU\..\Run: [oy8dltmogzi7ul8iwcxk454sbu58qyeld9aym0m6] C:\DOCUME~1\TROY~1.TRO\LOCALS~1\Temp\osdcur.exe
    O4 - HKCU\..\Run: [sz9w97e3mxm4y8q4zhvt7zq99ei5vdyeke0o1rjf1165v34y] C:\DOCUME~1\TROY~1.TRO\LOCALS~1\Temp\gnqpinyhrbmch.exe
    O4 - HKCU\..\Run: [xh2peu3cr3g4t8hhasjaigbcfadlw2y] C:\DOCUME~1\TROY~1.TRO\LOCALS~1\Temp\go1waf.exe
    O4 - HKCU\..\Run: [wgi6rh0xv7nabvea68zx3hf0lfh8di1dtfxt5fyfz5x9yb1jk] C:\DOCUME~1\TROY~1.TRO\LOCALS~1\Temp\nwmdgy7u5.exe
    O4 - HKCU\..\Run: [lqwcptupmw6v0qo08v8jv2erl5jpsu1d3nynrwhbdzav3t] C:\DOCUME~1\TROY~1.TRO\LOCALS~1\Temp\zbdvh1d.exe
    O4 - HKCU\..\Run: [lwf5vam9ob9gggpocgcr0xqzyo] C:\DOCUME~1\TROY~1.TRO\LOCALS~1\Temp\mr0zyys.exe
    O4 - HKCU\..\Run: [a0xsz0p12b3so8lfe3hk3zzpdyhj7lcc554] C:\DOCUME~1\TROY~1.TRO\LOCALS~1\Temp\ld5p6u8r0.exe
    O4 - HKCU\..\Run: [jrwx6f5ig5d4ofcghmyapliopxtim7y381j5a] C:\DOCUME~1\TROY~1.TRO\LOCALS~1\Temp\cbdduj0ho.exe
    O4 - HKCU\..\Run: [is0mt1b79gpfjric265znd48w5edd] C:\DOCUME~1\TROY~1.TRO\LOCALS~1\Temp\nudw0t2ar2.exe
    O4 - HKCU\..\Run: [h8tnnb7iaaomrzomo4tap2g8n2161c67d18a24bin7mwiskw4] C:\DOCUME~1\TROY~1.TRO\LOCALS~1\Temp\rjt4rg0uuksm.exe
    O4 - HKCU\..\Run: [ie6t9emm932n29] C:\DOCUME~1\TROY~1.TRO\LOCALS~1\Temp\ywwf6343uko.exe
    O4 - HKCU\..\Run: [n74rkr9b8y397ua3lw1z7d6pvan] C:\DOCUME~1\TROY~1.TRO\LOCALS~1\Temp\g0pv7fdcbqv.exe
    O4 - HKCU\..\Run: [hri49j3yjsn0utvv] C:\DOCUME~1\TROY~1.TRO\LOCALS~1\Temp\ddkm370.exe
    O4 - HKCU\..\Run: [z4nguoql86nh2hoqxfts1fmj2sq9xf0h6j50x2eh8k2pawf] C:\DOCUME~1\TROY~1.TRO\LOCALS~1\Temp\zaroz9bi6ly9.exe
    O4 - HKCU\..\Run: [phlsuhrs0j8oriisfq10v5fnr7j5ql16fp] C:\DOCUME~1\TROY~1.TRO\LOCALS~1\Temp\os8tc8fl7g.exe
    O4 - HKCU\..\Run: [faw4p7yydn6f74ovc0cj8nqv5nw25k3ql2aqpw7ws6n] C:\DOCUME~1\TROY~1.TRO\LOCALS~1\Temp\wrip6mjgom7.exe
    O4 - HKCU\..\Run: [bz1xyr58iqwbmxs] C:\DOCUME~1\TROY~1.TRO\LOCALS~1\Temp\id19qtm1l.exe
    O4 - HKCU\..\Run: [nsx3bjfv3txmvtahuc13g4ro9dn4bez5] C:\DOCUME~1\TROY~1.TRO\LOCALS~1\Temp\w1dsc20.exe
    O4 - HKCU\..\Run: [mqa2x99e5sfkymv31snv2obf0e] C:\DOCUME~1\TROY~1.TRO\LOCALS~1\Temp\txe0zs80u.exe
    O4 - HKCU\..\Run: [h6xsur1usb] C:\DOCUME~1\TROY~1.TRO\LOCALS~1\Temp\mjzsbj.exe
    O4 - HKCU\..\Run: [ex9ajrt8ymxazfqm36kwll9oqwqaqcgaro8wf] C:\DOCUME~1\TROY~1.TRO\LOCALS~1\Temp\pix2bccmjfr.exe
    O4 - HKCU\..\Run: [na6o5syzcwv2b] C:\DOCUME~1\TROY~1.TRO\LOCALS~1\Temp\rexcpo9gp.exe
    O4 - HKCU\..\Run: [jaom3p47tum2lhdid4hgw55hqh0df2c1oh0ts5tvj3kbdwyw] C:\DOCUME~1\TROY~1.TRO\LOCALS~1\Temp\aw4l142.exe
    O4 - HKCU\..\Run: [raazri17wjf9io1rhiii2mhil] C:\DOCUME~1\TROY~1.TRO\LOCALS~1\Temp\ldupgba.exe
    O4 - HKCU\..\Run: [ilmerwdlc7pak85ruew0z1ruslg] C:\DOCUME~1\TROY~1.TRO\LOCALS~1\Temp\vmwu534jn.exe
    O4 - HKCU\..\Run: [jn0gqvrn4mh8kri7wmj3wh3foll3] C:\DOCUME~1\TROY~1.TRO\LOCALS~1\Temp\pf7xtyi61xk95.exe
    O4 - HKCU\..\Run: [s0dmq3lqys6s2u2zivukv3ovtl1puca5vwhdxtnqxg] C:\DOCUME~1\TROY~1.TRO\LOCALS~1\Temp\tuov0i4y3i7.exe
    O4 - HKCU\..\Run: [icwzzswgdwcyad8wmt89ey083povurtngez0a9zl] C:\DOCUME~1\TROY~1.TRO\LOCALS~1\Temp\g19aowbl8s59x.exe
    O4 - HKCU\..\Run: [allr70obljwsxjwscgkzbx] C:\DOCUME~1\TROY~1.TRO\LOCALS~1\Temp\i2jw03.exe
    O4 - HKCU\..\Run: [a3mxump93ftsmfhuui8dyu462kyzdhy] C:\DOCUME~1\TROY~1.TRO\LOCALS~1\Temp\lqvwg25beru.exe
    O4 - HKCU\..\Run: [gnqt4txapknm5d4accafvrjpqnh6gusivmnxtvmsg2btc] C:\DOCUME~1\TROY~1.TRO\LOCALS~1\Temp\mwyy0bq40fad8.exe
    O4 - HKCU\..\Run: [hiixpm9363ujfyw4ttjleahdcjih818u3krrwy76l2jis0g] C:\DOCUME~1\TROY~1.TRO\LOCALS~1\Temp\c43dli8mya5an.exe
    O4 - HKCU\..\Run: [xy3x7t0kfq19yzsu5kz2x0fyck2vkq0bk] C:\DOCUME~1\TROY~1.TRO\LOCALS~1\Temp\p798bmhd5a2.exe
    O4 - HKCU\..\Run: [i39ypl2ub63rhafau6kdbrforh8ylfaxf] C:\DOCUME~1\TROY~1.TRO\LOCALS~1\Temp\o76enebz.exe
    O4 - HKCU\..\Run: [lnqmzcemzx527d2z] C:\DOCUME~1\TROY~1.TRO\LOCALS~1\Temp\gp321oftw.exe
    O4 - HKCU\..\Run: [kyz79cuhm] C:\DOCUME~1\TROY~1.TRO\LOCALS~1\Temp\u6aotda6lhc.exe
    O4 - HKCU\..\Run: [bvtz2ew84wympgtzd4mfz2rvema5uy7dqeq] C:\DOCUME~1\TROY~1.TRO\LOCALS~1\Temp\yhoqwqbf8n6h.exe
    O4 - HKCU\..\Run: [uc82g7dyin0djz4ut7txq3ry5m9i4x] C:\DOCUME~1\TROY~1.TRO\LOCALS~1\Temp\wkxq406blm.exe
    O4 - HKCU\..\Run: [nsre53f1j0re52inff3dm6j4zilmequhaacwi729w4gi3g6h] C:\DOCUME~1\TROY~1.TRO\LOCALS~1\Temp\eoqpocfk2s.exe
    O4 - HKCU\..\Run: [x6rtfmyvg7rtvv2q22y2iq] C:\DOCUME~1\TROY~1.TRO\LOCALS~1\Temp\j4a5n38diz.exe
    O4 - HKCU\..\Run: [mcilvc648jfda] C:\DOCUME~1\TROY~1.TRO\LOCALS~1\Temp\qivulc7kah5.exe
    O4 - HKCU\..\Run: [wz5odpck6577d1iryc1x097qlzg2v5a] C:\DOCUME~1\TROY~1.TRO\LOCALS~1\Temp\e6xx03erdzb.exe
    O4 - HKCU\..\Run: [zb06651yaof9fmvqrotmvcicy4j4nxacls] C:\DOCUME~1\TROY~1.TRO\LOCALS~1\Temp\h517rd.exe
    O4 - HKCU\..\Run: [ontcqh3b4hbrp0o7jpka] C:\DOCUME~1\TROY~1.TRO\LOCALS~1\Temp\sj8qho7tlc.exe
    O4 - HKCU\..\Run: [acuouzkr9obt9] C:\DOCUME~1\TROY~1.TRO\LOCALS~1\Temp\vxfmkuuhmb73.exe
    O4 - HKCU\..\Run: [gddi7lgt717iemnbcv04lrlsz7ep3m29bn8ji1zluypg56mu] C:\DOCUME~1\TROY~1.TRO\LOCALS~1\Temp\z2cz5ebxdu.exe
    O4 - HKCU\..\Run: [c36m7j063gwl18dwc5xox4hh1ux3a] C:\DOCUME~1\TROY~1.TRO\LOCALS~1\Temp\ecgo9a8kh.exe
    O4 - HKCU\..\Run: [yq7a5oy4hp0nqakyezulb44u8mycqsx4v] C:\DOCUME~1\TROY~1.TRO\LOCALS~1\Temp\mvnr823ovxl2.exe
    O4 - HKCU\..\Run: [tupcdr1pdxonzwihzby8] C:\DOCUME~1\TROY~1.TRO\LOCALS~1\Temp\tpbsixwclr4.exe
    O4 - HKCU\..\Run: [xuvb5d95hlv6dbkgkfum4igk10vkkdy9g5sqijgsf5yyej] C:\DOCUME~1\TROY~1.TRO\LOCALS~1\Temp\p6y1jduxfj.exe
    O4 - HKCU\..\Run: [lydd4ohkt] C:\DOCUME~1\TROY~1.TRO\LOCALS~1\Temp\vqo5e9bv1v.exe
    O4 - HKCU\..\Run: [iq3kzr2ckj4jc88toiqqf8w4l0xb] C:\DOCUME~1\TROY~1.TRO\LOCALS~1\Temp\i8foc9isres1i.exe
    O4 - HKCU\..\Run: [amlhoxf0dvsvviw2j6iachmm6b23n8yvt] C:\DOCUME~1\TROY~1.TRO\LOCALS~1\Temp\leovxm4nw9xs.exe
    O4 - HKCU\..\Run: [xmbtrnw1sgzsy3rr18] C:\DOCUME~1\TROY~1.TRO\LOCALS~1\Temp\dge69okf4m.exe
    O4 - HKCU\..\Run: [n540b1oy67mfx1fqvr01ov3smq2ll6evhqftg] C:\DOCUME~1\TROY~1.TRO\LOCALS~1\Temp\fwm6g7bbpyfx.exe
    O4 - HKCU\..\Run: [c3u8r2ncmscxa7h6aa75z15p9qlgggbugqmhz0m7dtz5w03jd] C:\DOCUME~1\TROY~1.TRO\LOCALS~1\Temp\wm75v3h93ls.exe
    O4 - HKCU\..\Run: [qnrfhgqyx] C:\DOCUME~1\TROY~1.TRO\LOCALS~1\Temp\e97jawe4zug.exe
    O4 - HKCU\..\Run: [g0fex3uga06580] C:\DOCUME~1\TROY~1.TRO\LOCALS~1\Temp\ypogpi9hkciqf.exe
    O4 - HKCU\..\Run: [s9is156gg89t2fe0o09cotmiq4385ibkujcyixq] C:\DOCUME~1\TROY~1.TRO\LOCALS~1\Temp\gytfpcuauo.exe
    O4 - HKCU\..\Run: [caixc94dyvzszv0qjbgw9] C:\DOCUME~1\TROY~1.TRO\LOCALS~1\Temp\yu0g5hlkdi.exe
    O4 - HKCU\..\Run: [nrmjb0onowtkhhta3dr6xgqxa6w] C:\DOCUME~1\TROY~1.TRO\LOCALS~1\Temp\pkafudt.exe
    O4 - HKCU\..\Run: [ml3f2ztnp5gri8r5o] C:\DOCUME~1\TROY~1.TRO\LOCALS~1\Temp\weyg48.exe
    O4 - HKCU\..\Run: [qsn6b18w8] C:\DOCUME~1\TROY~1.TRO\LOCALS~1\Temp\dd5i6olms0ke.exe
    O4 - HKCU\..\Run: [d29msfciv1iujlin67fmr7i402] C:\DOCUME~1\TROY~1.TRO\LOCALS~1\Temp\eirwo3.exe
    O4 - HKCU\..\Run: [xxi2sht9zg83oqsrjo8g4kacux0] C:\DOCUME~1\TROY~1.TRO\LOCALS~1\Temp\lvfxhyg3ilfbk.exe
    O4 - HKCU\..\Run: [ybt6y0ja15vcr06uygehe82pi94ie] C:\DOCUME~1\TROY~1.TRO\LOCALS~1\Temp\b3kc2oylgxr8z.exe
    O4 - HKCU\..\Run: [dbe9dmfap7gkdd7of41d0xms9us] C:\DOCUME~1\TROY~1.TRO\LOCALS~1\Temp\i2rel0sxw9q.exe
    O4 - HKCU\..\Run: [qx2ls1ylxp5u15h9sah4cia5hw2c45btfqonzrzrvpwrb] C:\DOCUME~1\TROY~1.TRO\LOCALS~1\Temp\fody8cc.exe
    O4 - HKCU\..\Run: [k24qkcdni6d9] C:\DOCUME~1\TROY~1.TRO\LOCALS~1\Temp\c96e3x.exe
    O4 - HKCU\..\Run: [ca5qmllw2lwbah7o] C:\DOCUME~1\TROY~1.TRO\LOCALS~1\Temp\la7j1u2eg5.exe
    O4 - HKCU\..\Run: [lc4gocsks1rnsstj3l1] C:\DOCUME~1\TROY~1.TRO\LOCALS~1\Temp\v64h6cjvxg.exe
    O4 - HKCU\..\Run: [oypz2wyptkmar7rmw5v1nrkcim0a0szep9zdxpkyhbem1cvl8] C:\DOCUME~1\TROY~1.TRO\LOCALS~1\Temp\fn2rg3.exe
    O4 - HKCU\..\Run: [ic7q14iaz8uqwl2eipcv0v3cep8augoacm] C:\DOCUME~1\TROY~1.TRO\LOCALS~1\Temp\rarhgif.exe
    O4 - HKCU\..\Run: [qibmcm0wby6rqz8eyywe98i2apy5qz01jg11t] C:\DOCUME~1\TROY~1.TRO\LOCALS~1\Temp\ll9u2i1.exe
    O4 - HKCU\..\Run: [d0ybb3t5mnoi3nrqq3ew5e5pvsz9fgvnu7tnpc] C:\DOCUME~1\TROY~1.TRO\LOCALS~1\Temp\hsbg40al.exe
    O4 - HKCU\..\Run: [ho5aufi17qpvu5da4djlyd1snft5caj7qjqam] C:\DOCUME~1\TROY~1.TRO\LOCALS~1\Temp\pw4w5vju.exe
    O4 - HKCU\..\Run: [i2zwacg6j] C:\DOCUME~1\TROY~1.TRO\LOCALS~1\Temp\nqyjck7i36nv.exe
    O4 - HKCU\..\Run: [qk9zcxwpye51] C:\DOCUME~1\TROY~1.TRO\LOCALS~1\Temp\v4m22vx8.exe
    O4 - HKCU\..\Run: [j7itb5vl709s3q901t6jhiyydhlzmfup3cdfgu9g7lv41g] C:\DOCUME~1\TROY~1.TRO\LOCALS~1\Temp\tp2a3da.exe
    O4 - HKCU\..\Run: [oo645mk9ag92wk0fj9ar1ytmz1v8okpd] C:\DOCUME~1\TROY~1.TRO\LOCALS~1\Temp\udh4bvd.exe
    O4 - HKCU\..\Run: [xh41qojjk0hmqbweqkk3wfb75isthq00wk5a2g5c] C:\DOCUME~1\TROY~1.TRO\LOCALS~1\Temp\xjqbw8.exe
    O4 - HKCU\..\Run: [cd60ro7r32ctg] C:\DOCUME~1\TROY~1.TRO\LOCALS~1\Temp\yte9npj.exe
    O4 - HKCU\..\Run: [uv7mgblklltff6lshvua7wu] C:\DOCUME~1\TROY~1.TRO\LOCALS~1\Temp\kire1len.exe
    O4 - HKCU\..\Run: [qfanpvabydm7y2u5pjxi9d1o1mxc] C:\DOCUME~1\TROY~1.TRO\LOCALS~1\Temp\g474i0si79x3.exe
    O4 - HKCU\..\Run: [x88kgz3rw02w5et1d3o10vd8am] C:\DOCUME~1\TROY~1.TRO\LOCALS~1\Temp\cke6vlk1k.exe
    O4 - HKCU\..\Run: [l3ahxm7f2umt49dbn3s277hrf] C:\DOCUME~1\TROY~1.TRO\LOCALS~1\Temp\v7qo27v34r.exe
    O4 - HKCU\..\Run: [c19k4a7paz8m4bqnkhz8kzagns5r500i] C:\DOCUME~1\TROY~1.TRO\LOCALS~1\Temp\uxlquqbb3.exe
    O4 - HKCU\..\Run: [v4rm875c1hvs1pziiezmb4pllcnfoerc3h8qxub3bt9x1i9o] C:\DOCUME~1\TROY~1.TRO\LOCALS~1\Temp\n3xp1cmdnl.exe
    O4 - HKCU\..\Run: [eg7uknzfdl6615jh034d2ggeg91itvw7] C:\DOCUME~1\TROY~1.TRO\LOCALS~1\Temp\jbn2fldk4sbc.exe
    O4 - HKCU\..\Run: [sakl57eoslkmg2nwhhcmhq6vnsb80sapeu01c4b] C:\DOCUME~1\TROY~1.TRO\LOCALS~1\Temp\xn15rbwdj.exe
    O4 - HKCU\..\Run: [ng1s9qt64b4mi3yejks6fbze6bnxt9tsnwp050aboqwmz6p0qh] C:\DOCUME~1\TROY~1.TRO\LOCALS~1\Temp\b2imfrs.exe
    O4 - HKCU\..\Run: [g3eh87xmmkct160o7jbp5gu6wn7r7mk] C:\DOCUME~1\TROY~1.TRO\LOCALS~1\Temp\tn9c9uq4vcb.exe
    O4 - HKCU\..\Run: [oydiucpsjwu99eav663t0c5aiqgp286dsqai29] C:\DOCUME~1\TROY~1.TRO\LOCALS~1\Temp\sw4eid6tui.exe
    O4 - HKCU\..\Run: [b4uuhzmwvcrltgqqujdiy9x64biqo36] C:\DOCUME~1\TROY~1.TRO\LOCALS~1\Temp\dasx8o.exe
    O4 - HKCU\..\Run: [vltqlypvp84y20] C:\DOCUME~1\TROY~1.TRO\LOCALS~1\Temp\b6jf3h0exvk.exe
    O4 - HKCU\..\Run: [ftmxs6zkqqo13i1q3p5vws2rvor5r7o1kywp4xkttrpt] C:\DOCUME~1\TROY~1.TRO\LOCALS~1\Temp\k4zf1jl0k66j4.exe
    O4 - HKCU\..\Run: [qxt5jndatjvjbk8dhvfpucv03njfg] C:\DOCUME~1\TROY~1.TRO\LOCALS~1\Temp\nqt0d1bx.exe
    O4 - HKCU\..\Run: [b4md7371mgnqqz7pgsy1lnm6lzax7jvnl4bh04gymwegj8ahe9] C:\DOCUME~1\TROY~1.TRO\LOCALS~1\Temp\kgyxolug08om.exe
    O4 - HKCU\..\Run: [csgh506ovfknvp2wgyud43gd955y1rgxv] C:\DOCUME~1\TROY~1.TRO\LOCALS~1\Temp\ccmhnql7220f.exe
    O4 - HKCU\..\Run: [qdrrim1k0izpy1] C:\DOCUME~1\TROY~1.TRO\LOCALS~1\Temp\fsgs7ihu7.exe
    O4 - HKCU\..\Run: [zhx4iis8r699uxlgnwic00e] C:\DOCUME~1\TROY~1.TRO\LOCALS~1\Temp\mv99bgpsu3zp.exe
    O4 - HKCU\..\Run: [hj7flqi4g2fnqsr17dqosxf0970nqy] C:\DOCUME~1\TROY~1.TRO\LOCALS~1\Temp\fxzvxzm8.exe
    O4 - HKCU\..\Run: [xmbx8fo9pznoch1dq2ixj1hm5vk1zcto18dwvlc8l] C:\DOCUME~1\TROY~1.TRO\LOCALS~1\Temp\qllfql82l3efb.exe
    O4 - HKCU\..\Run: [msoelwj3lzk3gm] C:\DOCUME~1\TROY~1.TRO\LOCALS~1\Temp\ypeer17pada23.exe
    O4 - HKCU\..\Run: [jysbiwiiutcjpr1f2c8jvvd] C:\DOCUME~1\TROY~1.TRO\LOCALS~1\Temp\ce9w4cu.exe
    O4 - HKCU\..\Run: [ka3esxctllr4fwr1lg27cirt37dv6dv337rm] C:\DOCUME~1\TROY~1.TRO\LOCALS~1\Temp\eak8r7p.exe
    O4 - HKCU\..\Run: [pyzpsvcrri38zc7aj7o1mmb7q74umi6mzw] C:\DOCUME~1\TROY~1.TRO\LOCALS~1\Temp\t1f9adnpqy.exe
    O4 - HKCU\..\Run: [a6v1zqqsx2v3cet61b3akttphbm] C:\DOCUME~1\TROY~1.TRO\LOCALS~1\Temp\ekfsxnpitgt.exe
    O4 - HKCU\..\Run: [i4yg8psqli53y98qiwjlnn0jzxmc08qvq69a] C:\DOCUME~1\TROY~1.TRO\LOCALS~1\Temp\kt466v2mahyq.exe
    O4 - HKCU\..\Run: [ri494dzs0havetrzrltbz626ztx5ucqell5uy8eyk9cj] C:\DOCUME~1\TROY~1.TRO\LOCALS~1\Temp\ijwxncrs.exe
    O4 - HKCU\..\Run: [x0i1pfdidjm4lukoqgodbrpl86p2v37g21fzb] C:\DOCUME~1\TROY~1.TRO\LOCALS~1\Temp\m88f084nez.exe
    O4 - HKCU\..\Run: [aqb0155t1r2nq4y0y75ptf8qhin1suao5gwvv] C:\DOCUME~1\TROY~1.TRO\LOCALS~1\Temp\ynfgngv5ibq.exe
    O4 - HKCU\..\Run: [y9fq19w5s1g8ymewz71u02uh2y7xtxv97j4gdsbklex] C:\DOCUME~1\TROY~1.TRO\LOCALS~1\Temp\q6tboa90vvh.exe
    O4 - HKCU\..\Run: [qll5rgva1k28de8cnwl4acvi3kkbhstn3vqwr] C:\DOCUME~1\TROY~1.TRO\LOCALS~1\Temp\k3u80rj0p1.exe
    O4 - HKCU\..\Run: [g5rld6phkbdahgidp30aig4s] C:\DOCUME~1\TROY~1.TRO\LOCALS~1\Temp\j8xxx7.exe
    O4 - HKCU\..\Run: [qegxxqz85] C:\DOCUME~1\TROY~1.TRO\LOCALS~1\Temp\rvfd8juchjx2.exe
    O4 - HKCU\..\Run: [nwii6dkk24incavvunkeous1] C:\DOCUME~1\TROY~1.TRO\LOCALS~1\Temp\xqrrn90kd402.exe
    O4 - HKCU\..\Run: [gmjbj08ys7342vg95nh7f] C:\DOCUME~1\TROY~1.TRO\LOCALS~1\Temp\izwq432wn.exe
    O4 - HKCU\..\Run: [ojrmlipg36kwieegzmfi0okyglxz5t57bvb] C:\DOCUME~1\TROY~1.TRO\LOCALS~1\Temp\j83eo7l30dqc.exe
    O4 - HKCU\..\Run: [sytwfare5tyw7wz6b1dquko5dctehgqz] C:\DOCUME~1\TROY~1.TRO\LOCALS~1\Temp\d4nnhf6o9psk.exe
    O4 - HKCU\..\Run: [tjt73zi2ltm84kob44s2ur4g1] C:\DOCUME~1\TROY~1.TRO\LOCALS~1\Temp\nbwcbmt.exe
    O4 - HKCU\..\Run: [oppha0bmsmgc7ni056hyaehcm90a354q6t8x] C:\DOCUME~1\TROY~1.TRO\LOCALS~1\Temp\l9pvmvxpgblg.exe
    O4 - HKCU\..\Run: [hz9xgg5plib6q3r8x9l93j8ckb8ik9lcibhg41nv6b] C:\DOCUME~1\TROY~1.TRO\LOCALS~1\Temp\tzy6jb6krg2b.exe
    O4 - HKCU\..\Run: [tdu3uothbjy2q1d4y] C:\DOCUME~1\TROY~1.TRO\LOCALS~1\Temp\qit57a.exe
    O4 - HKCU\..\Run: [f4d5etb7wasfft9uz3sn5c7ppbt05tq1glex0ums8] C:\DOCUME~1\TROY~1.TRO\LOCALS~1\Temp\udoecw.exe
    O4 - HKCU\..\Run: [wljt4su2lpuxqssawqbjv109by3knbtbamsp8p6x6jht7dzbsd] C:\DOCUME~1\TROY~1.TRO\LOCALS~1\Temp\ch0dd8.exe
    O4 - HKCU\..\Run: [ra3amwfg2q2oceu4kcqstjhpogo1ddy3] C:\DOCUME~1\TROY~1.TRO\LOCALS~1\Temp\ye7f9texyd9.exe
    O4 - HKCU\..\Run: [h9j9ae0yptim3k8qm94k] C:\DOCUME~1\TROY~1.TRO\LOCALS~1\Temp\jg7yf3gq1vs0.exe
    O4 - HKCU\..\Run: [hkwj64v8th63xjgw4rs8qrpg79n2f8a1vdj2p5b] C:\DOCUME~1\TROY~1.TRO\LOCALS~1\Temp\xk4c9y.exe
    O4 - HKCU\..\Run: [fki0vq349yblzpgdxlxi2dxlkyxs0d0pgk7ephd627i2z512] C:\DOCUME~1\TROY~1.TRO\LOCALS~1\Temp\zhvc173b.exe
    O4 - HKCU\..\Run: [odsasd1bkfm7iy0gen59mfe8ib346vtdzgx] C:\DOCUME~1\TROY~1.TRO\LOCALS~1\Temp\zw9zg4p6jmq.exe
    O4 - HKCU\..\Run: [qn6ac9xz9s6yhjmlfzw3xs6xfbfczb5yyld7v8ap5v] C:\DOCUME~1\TROY~1.TRO\LOCALS~1\Temp\g9gh9ze4zy.exe
    O4 - HKCU\..\Run: [n5ar6guj4ldtv] C:\DOCUME~1\TROY~1.TRO\LOCALS~1\Temp\b6duw63g2up.exe
    O4 - HKCU\..\Run: [sa3cm689rumqxrqt0y0buhw5scheccl] C:\DOCUME~1\TROY~1.TRO\LOCALS~1\Temp\tsh7ap08pp9.exe
    O4 - HKCU\..\Run: [zssk75mu32hp9v88vuhwap4q1huo4jpg39hwb] C:\DOCUME~1\TROY~1.TRO\LOCALS~1\Temp\y188xj3.exe
    O4 - HKCU\..\Run: [cj3eg7xpj] C:\DOCUME~1\TROY~1.TRO\LOCALS~1\Temp\rcrp837.exe
    O4 - HKCU\..\Run: [juf7hol0noi6koiylpbiiptok0bwl2zfeaszsjjwu3] C:\DOCUME~1\TROY~1.TRO\LOCALS~1\Temp\j8fqo8h.exe
    O4 - HKCU\..\Run: [m7g9mvw2igo] C:\DOCUME~1\TROY~1.TRO\LOCALS~1\Temp\rnt0qr6t4wl3.exe
    O4 - HKCU\..\Run: [fjhfrf4q2pye7he0i1ptyhe2n9ed3n67qn] C:\DOCUME~1\TROY~1.TRO\LOCALS~1\Temp\u20kc6idq8xny.exe
    O4 - HKCU\..\Run: [gkb2oqkfjuvjo8xmw2kj8impubdmbuojncahh230] C:\DOCUME~1\TROY~1.TRO\LOCALS~1\Temp\gv519x4.exe
    O4 - HKCU\..\Run: [hpbdxakm7evq73dm9xvv9npt8] C:\DOCUME~1\TROY~1.TRO\LOCALS~1\Temp\dpwuoki5.exe
    O4 - HKCU\..\Run: [hgw3isktsrm1y4b6fgonollyf] C:\DOCUME~1\TROY~1.TRO\LOCALS~1\Temp\rs506qiwx.exe
    O4 - HKCU\..\Run: [ira093suteamuai9rpn58zvz5o22wl7djadr5plsi1a] C:\DOCUME~1\TROY~1.TRO\LOCALS~1\Temp\kyyzdvtyhq.exe
    O4 - HKCU\..\Run: [ng08sd353ch2xhclkggcpot32ryvb12r9hx9] C:\DOCUME~1\TROY~1.TRO\LOCALS~1\Temp\jjh1pwgknqxw.exe
    O4 - HKCU\..\Run: [dxzlgetmboqhhhyurwrw90b0vgi6rzd] C:\DOCUME~1\TROY~1.TRO\LOCALS~1\Temp\s8a6pxw0.exe
    O4 - HKCU\..\Run: [d1yvgcd8jnsgk5sw4ii7bh823b] C:\DOCUME~1\TROY~1.TRO\LOCALS~1\Temp\lraczt1vx4q.exe
    O4 - HKCU\..\Run: [s687g5c5zhu5szefcs7z8ypglg6ktr5gjocl1dx] C:\DOCUME~1\TROY~1.TRO\LOCALS~1\Temp\o22mt4s42.exe
    O4 - HKCU\..\Run: [iqammi4pic4hhet2bau2vyu53p1gbmsnscg] C:\DOCUME~1\TROY~1.TRO\LOCALS~1\Temp\o6ozeq.exe
    O4 - HKCU\..\Run: [esy21b67mz7cpzjsbgsvqptf6a6] C:\DOCUME~1\TROY~1.TRO\LOCALS~1\Temp\vksocg5.exe
    O4 - HKCU\..\Run: [gs2gjn07l95xi8knvcp] C:\DOCUME~1\TROY~1.TRO\LOCALS~1\Temp\ej5efw0bhsk.exe
    O4 - HKCU\..\Run: [pgv6afi1tw4yq4mp4d9qyouj2gik6zn4j5u6gs66iysz1455] C:\DOCUME~1\TROY~1.TRO\LOCALS~1\Temp\lwtf8ap9x4.exe
    O4 - HKCU\..\Run: [dqpcdlgwi] C:\DOCUME~1\TROY~1.TRO\LOCALS~1\Temp\o7l6jl18.exe
    O4 - HKCU\..\Run: [uivi7ijsy] C:\DOCUME~1\TROY~1.TRO\LOCALS~1\Temp\ekmly56ql5.exe
    O4 - HKCU\..\Run: [scn5fjflt8] C:\DOCUME~1\TROY~1.TRO\LOCALS~1\Temp\lxet5rgdy.exe
    O4 - HKCU\..\Run: [dvocv3wlcwxlls6] C:\DOCUME~1\TROY~1.TRO\LOCALS~1\Temp\bfa2i6unsz614.exe
    O4 - HKCU\..\Run: [eutbcvo0opm7pnr1e7tgvrs] C:\DOCUME~1\TROY~1.TRO\LOCALS~1\Temp\yr8m91q.exe
    O4 - HKCU\..\Run: [rw0223efosapi5bbw2l] C:\DOCUME~1\TROY~1.TRO\LOCALS~1\Temp\cd5idl7y8wolt.exe
    O4 - HKCU\..\Run: [okheeq39wroy7buhdknqzy868g0jf5jdsmkksw94d0aev7oyw] C:\DOCUME~1\TROY~1.TRO\LOCALS~1\Temp\fq8nierj7c8.exe
    O4 - HKCU\..\Run: [sjepay5mlueakoo861lbgf6ejmyz60] C:\DOCUME~1\TROY~1.TRO\LOCALS~1\Temp\fvr78vwx7c.exe
    O4 - HKCU\..\Run: [ty42l8rnv9tgb4jswm252w88] C:\DOCUME~1\TROY~1.TRO\LOCALS~1\Temp\qucl5r6.exe
    O4 - HKCU\..\Run: [a5c3tfaj7bivbrp5qp74t29hac5y388izca0qmhp079] C:\DOCUME~1\TROY~1.TRO\LOCALS~1\Temp\hcze2uqgyqx.exe
    O4 - HKCU\..\Run: [uukcvclzkplam465x9gnbqth8fmhh3xw0qyj4j9diorrphf1iv] C:\DOCUME~1\TROY~1.TRO\LOCALS~1\Temp\aibd9giiiel0.exe
    O4 - HKCU\..\Run: [j2ugfe7jm3t82rnj1dvij32] C:\DOCUME~1\TROY~1.TRO\LOCALS~1\Temp\sq6xsmg.exe
    O4 - HKCU\..\Run: [vitkyk9jihnklxnntvyxttumnaviygr89hdj2] C:\DOCUME~1\TROY~1.TRO\LOCALS~1\Temp\ri5eir5udl.exe
    O4 - HKCU\..\Run: [wzcv71n0choh0h16fgga1gmjt9u0x9svqjvihipaeev3] C:\DOCUME~1\TROY~1.TRO\LOCALS~1\Temp\h5ogiv974mz5n.exe
    O4 - HKCU\..\Run: [ticbenrtdb9y27kobsykom74ahqyj19jksvkjmps6i949yoa] C:\DOCUME~1\TROY~1.TRO\LOCALS~1\Temp\w5nvgltk22sy4.exe
    O4 - HKCU\..\Run: [kd4vcd89e8p2cv8fv2qb9wbl4j9] C:\DOCUME~1\TROY~1.TRO\LOCALS~1\Temp\r5hqfhbm.exe
    O4 - HKCU\..\Run: [nea9bqg3j59pduebeosnvylc79v64yt3gmmqb4g8n73] C:\DOCUME~1\TROY~1.TRO\LOCALS~1\Temp\h1t44qc.exe
    O4 - HKCU\..\Run: [liq78tpkhvjzdrwxkkk33af1qmt8r68qh42fo3vfbify0j] C:\DOCUME~1\TROY~1.TRO\LOCALS~1\Temp\lq55h1ze2.exe
    O4 - HKCU\..\Run: [kfupas0sw7jule6dtj99xkjy3459gvye90z0gtxjv4d2p2] C:\DOCUME~1\TROY~1.TRO\LOCALS~1\Temp\oae9txxco.exe
    O4 - HKCU\..\Run: [vqoj9xome3b58pz] C:\DOCUME~1\TROY~1.TRO\LOCALS~1\Temp\g260hy.exe
    O4 - HKCU\..\Run: [saulvr4sql27fizotvnhcsv7lho] C:\DOCUME~1\TROY~1.TRO\LOCALS~1\Temp\r8lcyc9wtn.exe
    O4 - HKCU\..\Run: [me6y8zoy7xyosk2rr0y37alanlkmz3vui] C:\DOCUME~1\TROY~1.TRO\LOCALS~1\Temp\z9z6qt.exe
    O4 - HKCU\..\Run: [gk28e10w6ja4zzee9] C:\DOCUME~1\TROY~1.TRO\LOCALS~1\Temp\gts4urb71.exe
    O4 - HKCU\..\Run: [dmpyjqvp8j28jivh6o2tomgv4nassf1vy] C:\DOCUME~1\TROY~1.TRO\LOCALS~1\Temp\m2ayahe0.exe
    O4 - HKCU\..\Run: [lymdlx9hvply1kk4frt7riri5xyk5ku] C:\DOCUME~1\TROY~1.TRO\LOCALS~1\Temp\cawdv7dz.exe
    O4 - HKCU\..\Run: [wsehifeh9kr] C:\DOCUME~1\TROY~1.TRO\LOCALS~1\Temp\yr33aiux72m9.exe
    O4 - HKCU\..\Run: [jnrgy2dcp0w1a5kqm4od3e] C:\DOCUME~1\TROY~1.TRO\LOCALS~1\Temp\flrl3djvnef.exe
    O4 - HKCU\..\Run: [xx82gcd4zj56mtv7tvzr79czys8p67vttaf3] C:\DOCUME~1\TROY~1.TRO\LOCALS~1\Temp\qnr49nloqwy2.exe
    O4 - HKCU\..\Run: [wm9srh9548] C:\DOCUME~1\TROY~1.TRO\LOCALS~1\Temp\jg2du4.exe
    O4 - HKCU\..\Run: [e7nbi3ixjx6boxevu8qnzfr5i9av4rvo6s6a9ulo9939] C:\DOCUME~1\TROY~1.TRO\LOCALS~1\Temp\b7exuaqkc.exe
    O4 - HKCU\..\Run: [zbfjevt97t4rtkbrzavdcn29njpmqgb] C:\DOCUME~1\TROY~1.TRO\LOCALS~1\Temp\bh9h0q71o3rep.exe
    O4 - HKCU\..\Run: [uuv0xsf514yxj9wrfdlddi9goiyqsmma8] C:\DOCUME~1\TROY~1.TRO\LOCALS~1\Temp\o9n2f08jq8w0a.exe
    O4 - HKCU\..\Run: [hy53mzru78pd8l1yg2uksx] C:\DOCUME~1\TROY~1.TRO\LOCALS~1\Temp\zc3sqok4.exe
    O4 - HKCU\..\Run: [qb9s40q8c4q8r8fe7z7lvhwcsbm0m9cnrloen71] C:\DOCUME~1\TROY~1.TRO\LOCALS~1\Temp\i1lfnofi.exe
    O4 - HKCU\..\Run: [x6ifw4ar9ac] C:\DOCUME~1\TROY~1.TRO\LOCALS~1\Temp\po40mz4xk8d.exe
    O4 - HKCU\..\Run: [t3yt0pdnar5y9rxshvzjzc7n59s1f72jvo9lqj] C:\DOCUME~1\TROY~1.TRO\LOCALS~1\Temp\szwrgac6p.exe
    O4 - HKCU\..\Run: [m50kyr4yf8oe7tw5ncdv8aqkalj5106u] C:\DOCUME~1\TROY~1.TRO\LOCALS~1\Temp\g2chryo84ro8.exe
    O4 - HKCU\..\Run: [bsjvetsh61f] C:\DOCUME~1\TROY~1.TRO\LOCALS~1\Temp\wnbl5by90.exe
    O4 - HKCU\..\Run: [so80roxh84xky6da0kv3c5xt2r68ra2dp6068] C:\DOCUME~1\TROY~1.TRO\LOCALS~1\Temp\wjz9rlslbry.exe
    O4 - HKCU\..\Run: [kln2gotsf61khlgpbgtnun34srlmqycbb7pw6c0025a7zaiioc] C:\DOCUME~1\TROY~1.TRO\LOCALS~1\Temp\xa47i2cwc4t7.exe
    O4 - HKCU\..\Run: [jbx0m0nfjd2t2k] C:\DOCUME~1\TROY~1.TRO\LOCALS~1\Temp\sq1vt3klha4e.exe
    O4 - HKCU\..\Run: [sw4h3jbjt6vmd0xg7b8k5] C:\DOCUME~1\TROY~1.TRO\LOCALS~1\Temp\o2t4ek.exe
    O4 - HKCU\..\Run: [pclwcbs038rae0krkawl2v0] C:\DOCUME~1\TROY~1.TRO\LOCALS~1\Temp\q8i07vmm05.exe
    O4 - HKCU\..\Run: [gawfnyepuvn4f594h0l429u3n8kw3nle4l5f] C:\DOCUME~1\TROY~1.TRO\LOCALS~1\Temp\a6tc0hjaeit.exe
    O4 - HKCU\..\Run: [zxvy8sf22106akix7mz8w746dz] C:\DOCUME~1\TROY~1.TRO\LOCALS~1\Temp\gxtxihjuphfm5.exe
    O4 - HKCU\..\Run: [z0xiqq9603qkxjuxumnf8ox6ukafguxh8m4q] C:\DOCUME~1\TROY~1.TRO\LOCALS~1\Temp\p50k6yz7qxg.exe
    O4 - HKCU\..\Run: [ar4g8tv7ntkmcegrx3] C:\DOCUME~1\TROY~1.TRO\LOCALS~1\Temp\wio2zto52j.exe
    O4 - HKCU\..\Run: [us2jcdb7hun5ku] C:\DOCUME~1\TROY~1.TRO\LOCALS~1\Temp\oegctp0l16.exe
    O4 - HKCU\..\Run: [u0134xc1y1826b4y1ujnq5ubjid] C:\DOCUME~1\TROY~1.TRO\LOCALS~1\Temp\zc9905.exe
    O4 - HKCU\..\Run: [zawvlsiuou77vksdhsh9bdfkpkdialpka6c3ormaumzdyf9wr] C:\DOCUME~1\TROY~1.TRO\LOCALS~1\Temp\hb98preh9.exe
    O4 - HKCU\..\Run: [tbhiqo5eyz0zo61k4higswymg] C:\DOCUME~1\TROY~1.TRO\LOCALS~1\Temp\a80rvy7wtja.exe
    O4 - HKCU\..\Run: [mscxaz6h8me2z8ied45mg739u1vs8y6z06lm] C:\DOCUME~1\TROY~1.TRO\LOCALS~1\Temp\ig5jt2mcz.exe
    O4 - HKCU\..\Run: [x9ab17k6v9rdqywtw88oiyco4rarat7szbdvli5ztcgxzbz7d] C:\DOCUME~1\TROY~1.TRO\LOCALS~1\Temp\zxv5l8hp7c7.exe
    O4 - HKCU\..\Run: [q7nbxpgao6bnyyqb5kdijxibd27im18v2zta] C:\DOCUME~1\TROY~1.TRO\LOCALS~1\Temp\bmh10oxejp.exe
    O4 - HKCU\..\Run: [td07fdzg497krz8zfrdo479e5] C:\DOCUME~1\TROY~1.TRO\LOCALS~1\Temp\kkx1yqi0605n.exe
    O4 - HKCU\..\Run: [mnyg8p9hsg6954g09] C:\DOCUME~1\TROY~1.TRO\LOCALS~1\Temp\a703c8108p28.exe
    O4 - HKCU\..\Run: [l9qbhggku2jkg9x6r7cd9u97tl2nikb7nvoa1] C:\DOCUME~1\TROY~1.TRO\LOCALS~1\Temp\pjnh7yw90a.exe
    O4 - HKCU\..\Run: [wehqkujehi7k5eb6xazpl91swi3e5] C:\DOCUME~1\TROY~1.TRO\LOCALS~1\Temp\a260d8y23s3.exe
    O4 - HKCU\..\Run: [lwipqvuwi9p] C:\DOCUME~1\TROY~1.TRO\LOCALS~1\Temp\wdbz0cl71.exe
    O4 - HKCU\..\Run: [lni78ifw0d7kcg2nrl5tqcrqyjvz6i2ml8ud14n7ogh] C:\DOCUME~1\TROY~1.TRO\LOCALS~1\Temp\l46j0i0v6a3l.exe
    O4 - HKCU\..\Run: [axtfkmhnfhoimo4skdv38d2ic9x19vmsgmv6gv9hocr] C:\DOCUME~1\TROY~1.TRO\LOCALS~1\Temp\i6zge37bkyr.exe
    O4 - HKCU\..\Run: [h6umtfgfn7uohs9fdld6hw68uzp2cf] C:\DOCUME~1\TROY~1.TRO\LOCALS~1\Temp\dtjmf7twc0hhd.exe
    O4 - HKCU\..\Run: [od7d4pvbv61d92tvsa08ff64ospnnmm4yotmoz6fwq5] C:\DOCUME~1\TROY~1.TRO\LOCALS~1\Temp\eq7byvohhq70.exe
    O4 - HKCU\..\Run: [kee7alkt69cynm2wjrmu2626xfqtne50kr6rxzouq1] C:\DOCUME~1\TROY~1.TRO\LOCALS~1\Temp\jf64yo.exe
    O4 - HKCU\..\Run: [zzsdc2g9ytnd05dtcdcc] C:\DOCUME~1\TROY~1.TRO\LOCALS~1\Temp\ftprzsbfvon.exe
    O4 - HKCU\..\Run: [bh9fqx1bptty1hf568cqe1fc36i7acjkn4lbhkj5wn22z] C:\DOCUME~1\TROY~1.TRO\LOCALS~1\Temp\e2kt8ba4uu.exe
    O4 - HKCU\..\Run: [qgawr5x0mr8j88kfq7zhm7] C:\DOCUME~1\TROY~1.TRO\LOCALS~1\Temp\vh9hw0jui7.exe
    O4 - HKCU\..\Run: [kqo8brqebbum61dq47b2okg38ygoswj662inemvadr] C:\DOCUME~1\TROY~1.TRO\LOCALS~1\Temp\h1j2nku.exe
    O4 - HKCU\..\Run: [p1ihjmdyl5fe4nfrorg22stnie] C:\DOCUME~1\TROY~1.TRO\LOCALS~1\Temp\wmvve0f801jt.exe
    O4 - HKCU\..\Run: [pr4x2edksjpvx3w16fn8brvlt1xj36] C:\DOCUME~1\TROY~1.TRO\LOCALS~1\Temp\hoeeka0kmj2ki.exe
    O4 - HKCU\..\Run: [uvpvyia4xxvjs2enui7b6jl8] C:\DOCUME~1\TROY~1.TRO\LOCALS~1\Temp\tb3l3p.exe
    O4 - HKCU\..\Run: [og0i5fqut59q78lqwgzf95f486h054e] C:\DOCUME~1\TROY~1.TRO\LOCALS~1\Temp\ps7ul5qak8qry.exe
    O4 - HKCU\..\Run: [scq2703011g46c3y8e] C:\DOCUME~1\TROY~1.TRO\LOCALS~1\Temp\z6b2je.exe
    O4 - HKCU\..\Run: [bct9e5h0rypbecrgs302heidyyhlkjljx] C:\DOCUME~1\TROY~1.TRO\LOCALS~1\Temp\u7yll0.exe
    O4 - HKCU\..\Run: [vq8jzs3yv4l3l7ulnn4t7lhb0xx58y4qgt6qhgcz6b7ot5j] C:\DOCUME~1\TROY~1.TRO\LOCALS~1\Temp\vddolwh.exe
    O4 - HKCU\..\Run: [z82ywa6tou3qr2lcatl8t375trxt0h4d6syqjqwp] C:\DOCUME~1\TROY~1.TRO\LOCALS~1\Temp\kpb2por.exe
    O4 - HKCU\..\Run: [ckkc0s8sz2i28gtz3su7isifx5abcia2wxqmgb] C:\DOCUME~1\TROY~1.TRO\LOCALS~1\Temp\n91pkk8.exe
    O4 - HKCU\..\Run: [jed5k9w330f1v6sw0e12ai2juwnhx] C:\DOCUME~1\TROY~1.TRO\LOCALS~1\Temp\f5890pz.exe
    O4 - HKCU\..\Run: [mkabrtee06vvv3owqi5] C:\DOCUME~1\TROY~1.TRO\LOCALS~1\Temp\zyddk2o7z3k.exe
    O4 - HKCU\..\Run: [uozqywnyptnha5myzj5hm22k5uoj0lag4i] C:\DOCUME~1\TROY~1.TRO\LOCALS~1\Temp\s32ltuw6.exe
    O4 - HKCU\..\Run: [i8l359msl5zb0qmbqjzm3wciyp5lrv1e4tmowomor] C:\DOCUME~1\TROY~1.TRO\LOCALS~1\Temp\g2wfjd.exe
    O4 - HKCU\..\Run: [ha27gwcabd03rnjef4jgczdqq8nakgwnceqbiii] C:\DOCUME~1\TROY~1.TRO\LOCALS~1\Temp\u5c5u16on.exe
    O4 - HKCU\..\Run: [t0m2fznhl9ct3aijf5hqw] C:\DOCUME~1\TROY~1.TRO\LOCALS~1\Temp\qlj773.exe
    O4 - HKCU\..\Run: [j1w0t6ysrs7nhspm4nwrls] C:\DOCUME~1\TROY~1.TRO\LOCALS~1\Temp\qveawjy7ts.exe
    O4 - HKCU\..\Run: [f2ao1uyq5k0t7xmtx2xu0021gc1qnf1dr3zyjww] C:\DOCUME~1\TROY~1.TRO\LOCALS~1\Temp\d9sf1al3e.exe
    O4 - HKCU\..\Run: [fxgjmt6817xq1usir1fm5xghpvn0u0w3gogaigi9lt] C:\DOCUME~1\TROY~1.TRO\LOCALS~1\Temp\a5wm9p.exe
    O4 - HKCU\..\Run: [l2z8ljh5qoxzg8s6] C:\DOCUME~1\TROY~1.TRO\LOCALS~1\Temp\sw8n9vyxn.exe
    O4 - HKCU\..\Run: [h2zp3b2xjovjx3oe9n5wmxd37gc95zxbvt19ypnmtqphm] C:\DOCUME~1\TROY~1.TRO\LOCALS~1\Temp\n2areg6oz4b22.exe
    O4 - HKCU\..\Run: [dzxarfr41ccuzh38v7qq] C:\DOCUME~1\TROY~1.TRO\LOCALS~1\Temp\gihtaih7vh.exe
    O4 - HKCU\..\Run: [gjbi0xorji55dunqeuvv4mmbzzkdvcxs94zcz20u] C:\DOCUME~1\TROY~1.TRO\LOCALS~1\Temp\g8mqll.exe
    O4 - HKCU\..\Run: [v0wci5j35ia5z8sf9eerqdm] C:\DOCUME~1\TROY~1.TRO\LOCALS~1\Temp\fdvf9i2a.exe
    O4 - HKCU\..\Run: [tmpd5hozyqrft98h0gl31pasx1] C:\DOCUME~1\TROY~1.TRO\LOCALS~1\Temp\ntcedezginl.exe
    O4 - HKCU\..\Run: [gnn90cwf611m35uewmb3fr1] C:\DOCUME~1\TROY~1.TRO\LOCALS~1\Temp\fzeziz7.exe
    O4 - HKCU\..\Run: [o51bhkft7v08y76m0ha5ur6nb] C:\DOCUME~1\TROY~1.TRO\LOCALS~1\Temp\fu2z20vl1h.exe
    O4 - HKCU\..\Run: [ulf6kn0aluygjuou0cgh2] C:\DOCUME~1\TROY~1.TRO\LOCALS~1\Temp\i992ofo56tw.exe
    O4 - HKCU\..\Run: [fr5ni4oq6jn2lo6oa05n76tfwrn9pwfy7vrjku4oqdolm7] C:\DOCUME~1\TROY~1.TRO\LOCALS~1\Temp\ugegcp.exe
    O4 - HKCU\..\Run: [slit7307vif4z5cqu5f4a41c5l7qjtvk37dkf9if3] C:\DOCUME~1\TROY~1.TRO\LOCALS~1\Temp\h18jx1wcsct75.exe
    O4 - HKCU\..\Run: [cviwfsi89o64] C:\DOCUME~1\TROY~1.TRO\LOCALS~1\Temp\volgdki6jp.exe
    O4 - HKCU\..\Run: [p627ww7a35rvwy47] C:\DOCUME~1\TROY~1.TRO\LOCALS~1\Temp\g74zjukzm7e.exe
    O4 - HKCU\..\Run: [ww94m57c24y8tttd8rvw68kxmfs0s] C:\DOCUME~1\TROY~1.TRO\LOCALS~1\Temp\ggjvkwro374af.exe
    O4 - HKCU\..\Run: [yjbvsyg4pkqz] C:\DOCUME~1\TROY~1.TRO\LOCALS~1\Temp\rlsi9ma.exe
    O4 - HKCU\..\Run: [jnqw0799hxf3iw0yf6t67hr8i0bjgzq2pyzzt26dr] C:\DOCUME~1\TROY~1.TRO\LOCALS~1\Temp\xuac6v.exe
    O4 - HKCU\..\Run: [ykh64k5ppys1hp0n1r] C:\DOCUME~1\TROY~1.TRO\LOCALS~1\Temp\kn249jm9.exe
    O4 - HKCU\..\Run: [e3e6h295rgy] C:\DOCUME~1\TROY~1.TRO\LOCALS~1\Temp\ctbso3.exe
    O4 - HKCU\..\Run: [l0to9ch6xq00acsyxd7hz] C:\DOCUME~1\TROY~1.TRO\LOCALS~1\Temp\h0xc5sswjlq5.exe
    O4 - HKCU\..\Run: [i936dobs9skjnn1wqbf8vil1sygv3fl6hz] C:\DOCUME~1\TROY~1.TRO\LOCALS~1\Temp\g98x0x.exe
    O4 - HKCU\..\Run: [yss3ymcl71d] C:\DOCUME~1\TROY~1.TRO\LOCALS~1\Temp\wwbgef.exe
    O4 - HKCU\..\Run: [vudn63xkdz6pq8jpgmfnx7] C:\DOCUME~1\TROY~1.TRO\LOCALS~1\Temp\t20pkllp.exe
    O4 - HKCU\..\Run: [is10pbwzfbvvs3652lsi2g5f] C:\DOCUME~1\TROY~1.TRO\LOCALS~1\Temp\g5dlm76r.exe
    O4 - HKCU\..\Run: [ss2jzgavb4tds6v8r70j] C:\DOCUME~1\TROY~1.TRO\LOCALS~1\Temp\gkr8ils5dgo.exe
    O4 - HKCU\..\Run: [ms8zghskb8ldxx4g5z7tc7tjhw44] C:\DOCUME~1\TROY~1.TRO\LOCALS~1\Temp\eajgi2h.exe
    O4 - HKCU\..\Run: [y03r9u478wi1rgsd3ermf0v] C:\DOCUME~1\TROY~1.TRO\LOCALS~1\Temp\erdz8lfvg.exe
    O4 - HKCU\..\Run: [ee5bi89bi7d9bffeqs1jiz8xgh98zyh] C:\DOCUME~1\TROY~1.TRO\LOCALS~1\Temp\sutpjqrxvdm5.exe
    O4 - HKCU\..\Run: [zos9n3c0j03d7kzg442] C:\DOCUME~1\TROY~1.TRO\LOCALS~1\Temp\q3ig5c1gkiy.exe
    O4 - HKCU\..\Run: [fvk1iv9p4yx07q0wscmyrkfcfsefaj8rryoezjqj6cat3gb] C:\DOCUME~1\TROY~1.TRO\LOCALS~1\Temp\o2j2xz.exe
    O4 - HKCU\..\Run: [ddhuo59hivka4m0sevrc5949jeguhg948] C:\DOCUME~1\TROY~1.TRO\LOCALS~1\Temp\dovj7osxl8.exe
    O4 - HKCU\..\Run: [zj4cgrfyi76cm] C:\DOCUME~1\TROY~1.TRO\LOCALS~1\Temp\ohg6cw4i7.exe
    O4 - HKCU\..\Run: [mmvutjnqxsdhc2zb2va7aw82x4vz35iv0nlg0cfhw2l6] C:\DOCUME~1\TROY~1.TRO\LOCALS~1\Temp\qwrizrzdi.exe
    O4 - HKCU\..\Run: [abrbz99lehgd4x0u] C:\DOCUME~1\TROY~1.TRO\LOCALS~1\Temp\t13ifq.exe
    O4 - HKCU\..\Run: [kyuu1x56ysizqewgbnxwnjln89hld55n5d3ho60ku] C:\DOCUME~1\TROY~1.TRO\LOCALS~1\Temp\eg78awbfx9rr.exe
    O4 - HKCU\..\Run: [g70ln3uegfuqgmo2e7v2ips88d] C:\DOCUME~1\TROY~1.TRO\LOCALS~1\Temp\qr8f9auzil.exe
    O4 - HKCU\..\Run: [q0r4owsw7e0du4ac0eu53i8l47yo7k6] C:\DOCUME~1\TROY~1.TRO\LOCALS~1\Temp\pdoo7p.exe
    O4 - HKCU\..\Run: [f42d96ockvy2zvhid5819hy3jas1i0x37zabne] C:\DOCUME~1\TROY~1.TRO\LOCALS~1\Temp\e4j8qvniq.exe
    O4 - HKCU\..\Run: [a61z2ioeh] C:\DOCUME~1\TROY~1.TRO\LOCALS~1\Temp\cmkbii4pihg7.exe
    O4 - HKCU\..\Run: [kt289mu8s7s2fqhjwwd4hlerc4vcqcxttzy6m6bzbsr1g6aih] C:\DOCUME~1\TROY~1.TRO\LOCALS~1\Temp\u7mkl40m5r.exe
    O4 - HKCU\..\Run: [yynbe1phujfmmaz63u5tpgqsw2oq] C:\DOCUME~1\TROY~1.TRO\LOCALS~1\Temp\evlcptg.exe
    O4 - HKCU\..\Run: [o8t58qfb4muxkuf57kjn3] C:\DOCUME~1\TROY~1.TRO\LOCALS~1\Temp\gaplj6iuugeev.exe
    O4 - HKCU\..\Run: [tesey6blvkaw1nr3h8ju8] C:\DOCUME~1\TROY~1.TRO\LOCALS~1\Temp\o4nhxlrmi.exe
    O4 - HKCU\..\Run: [vht9z26li72yjqgmkpqa8pf6l4nnitu4bsyedcjk4ece57] C:\DOCUME~1\TROY~1.TRO\LOCALS~1\Temp\ytmgk0wp7hmj3.exe
    O4 - HKCU\..\Run: [ukc0372057pb2] C:\DOCUME~1\TROY~1.TRO\LOCALS~1\Temp\zdmyhxxh1h.exe
    O4 - HKCU\..\Run: [ozb5y0znrbf0] C:\DOCUME~1\TROY~1.TRO\LOCALS~1\Temp\f2olss7.exe
    O4 - HKCU\..\Run: [mnmlznv01na9ye6f78flzg45h8ay2fvccp36lhhrc3] C:\DOCUME~1\TROY~1.TRO\LOCALS~1\Temp\qleo8k259u.exe
    O4 - HKCU\..\Run: [qbp9g1kq2e7y0ou4s7w537myq] C:\DOCUME~1\TROY~1.TRO\LOCALS~1\Temp\y3okjy6hqhw.exe
    O4 - HKCU\..\Run: [iegom6zsefa78jcwuxg8mn8mrkv84odh2u7vfxsud1c9659] C:\DOCUME~1\TROY~1.TRO\LOCALS~1\Temp\bne7eunycxl.exe
    O4 - HKCU\..\Run: [jxzp4nv9thgpklghx21x8307bojzn9j0ib246] C:\DOCUME~1\TROY~1.TRO\LOCALS~1\Temp\xox2o5.exe
    O4 - HKCU\..\Run: [a6cbxqfm4wq6yexhvk9d9n0ponqnbjr7w03f55jy9bxss] C:\DOCUME~1\TROY~1.TRO\LOCALS~1\Temp\y70wgocof.exe
    O4 - HKCU\..\Run: [bx8bf0qvyjywfibr8] C:\DOCUME~1\TROY~1.TRO\LOCALS~1\Temp\lwzcmmyr4ukqx.exe
    O4 - HKCU\..\Run: [m4hms394ehijh] C:\DOCUME~1\TROY~1.TRO\LOCALS~1\Temp\tf6f2vtv.exe
    O4 - HKCU\..\Run: [sh5tylgxg7k8ta4bg3k9r32k18bd873fx0] C:\DOCUME~1\TROY~1.TRO\LOCALS~1\Temp\dor3rnn76o.exe
    O4 - HKCU\..\Run: [ol9u9o79ubp0qmm8] C:\DOCUME~1\TROY~1.TRO\LOCALS~1\Temp\cj5p9n8a.exe
    O4 - HKCU\..\Run: [lirkja3p68n4nyf0qllswr4yi4qcu4wrwc6cyowcr2igovchz] C:\DOCUME~1\TROY~1.TRO\LOCALS~1\Temp\y5lyq2m5njn5.exe
    O4 - HKCU\..\Run: [xrvman6mvnh6d] C:\DOCUME~1\TROY~1.TRO\LOCALS~1\Temp\nyqf4t.exe
    O4 - HKCU\..\Run: [fj5ozlp1ljpbiiw7emqt30ry5qz67] C:\DOCUME~1\TROY~1.TRO\LOCALS~1\Temp\psrsw3f.exe
    O4 - HKCU\..\Run: [hofvsvtpxoce0jbaz5u2w] C:\DOCUME~1\TROY~1.TRO\LOCALS~1\Temp\dbrbjdhh.exe
    O4 - HKCU\..\Run: [n6rg12cbnwtzpfpgtqsuaesap4vax8] C:\DOCUME~1\TROY~1.TRO\LOCALS~1\Temp\odaupnjad.exe
    O4 - HKCU\..\Run: [em62jvrpyl8d55s8rq] C:\DOCUME~1\TROY~1.TRO\LOCALS~1\Temp\hjmcw9ucx7.exe
    O4 - HKCU\..\Run: [bo7sdymatb4nhlhkht] C:\DOCUME~1\TROY~1.TRO\LOCALS~1\Temp\abyvccashe.exe
    O4 - HKCU\..\Run: [ulpeprcsgyzer8n1wfvbmpbtahm11rx06t8al] C:\DOCUME~1\TROY~1.TRO\LOCALS~1\Temp\pnfsg43led.exe
    O4 - HKCU\..\Run: [l6n7uzp3x8yc2lxy5iswbjrjmp9dpnocejxj6aawpd] C:\DOCUME~1\TROY~1.TRO\LOCALS~1\Temp\zwadvel3g1.exe
    O4 - HKCU\..\Run: [kpnew8n66w9l4etmmukt14cz7tcitavqoq23w69ylojodvk7d] C:\DOCUME~1\TROY~1.TRO\LOCALS~1\Temp\wh3tupnaf.exe
    O4 - HKCU\..\Run: [kakymqgb4v8q0ejmatedkbd0echpdyt8] C:\DOCUME~1\TROY~1.TRO\LOCALS~1\Temp\dlcyis.exe
    O4 - HKCU\..\Run: [si3nkwox5r50vpgmeujp2iewenj8iztktg3] C:\DOCUME~1\TROY~1.TRO\LOCALS~1\Temp\yzropcdbesx9.exe
    O4 - HKCU\..\Run: [ebj2lreut] C:\DOCUME~1\TROY~1.TRO\LOCALS~1\Temp\xzodga3bw.exe
    O4 - HKCU\..\Run: [fy65rhcptipv87fa5q7v9zx1xqp455nls2iuxhzlmoi8] C:\DOCUME~1\TROY~1.TRO\LOCALS~1\Temp\pc2hpx6d5mp.exe
    O4 - HKCU\..\Run: [the46jsn92azjgah88ahkbgouulqpk90f] C:\DOCUME~1\TROY~1.TRO\LOCALS~1\Temp\zffd808fjzn.exe
    O4 - HKCU\..\Run: [lvlp14z1u6v4yvieglkvafrit01xjx9e0k4j61q] C:\DOCUME~1\TROY~1.TRO\LOCALS~1\Temp\vuzo68xz3or4.exe
    O4 - HKCU\..\Run: [c0qr7cl18wjacc] C:\DOCUME~1\TROY~1.TRO\LOCALS~1\Temp\wquoojviueip.exe
    O4 - HKCU\..\Run: [ndiwe72ci1j6zhfoka] C:\DOCUME~1\TROY~1.TRO\LOCALS~1\Temp\wc9qri64.exe
    O4 - HKCU\..\Run: [vsygqxb7adykq3lpqk9g88ei737khpnweo2zizay] C:\DOCUME~1\TROY~1.TRO\LOCALS~1\Temp\l3lraopitqo.exe
    O4 - HKCU\..\Run: [g29vc39pyu0dybi2r7l314ltx49] C:\DOCUME~1\TROY~1.TRO\LOCALS~1\Temp\qvye0nlpvc47s.exe
    O4 - HKCU\..\Run: [v8fbgexnm7lw0j81] C:\DOCUME~1\TROY~1.TRO\LOCALS~1\Temp\m3v5cpo3.exe
    O4 - HKCU\..\Run: [p61kj0rllivtxg1e4t6g7xc1vpim7sw87sy936u] C:\DOCUME~1\TROY~1.TRO\LOCALS~1\Temp\fiygaxd2y.exe
    O4 - HKCU\..\Run: [sysl531xs8zup5n1br7ej] C:\DOCUME~1\TROY~1.TRO\LOCALS~1\Temp\prgl4u.exe
    O4 - HKCU\..\Run: [z6vws7zym1kj96zgf3u6zzt04qv] C:\DOCUME~1\TROY~1.TRO\LOCALS~1\Temp\exyrur6ejl9ty.exe
    O4 - HKCU\..\Run: [imwgcmzu3jv8vk] C:\DOCUME~1\TROY~1.TRO\LOCALS~1\Temp\ioe7o9s8tn.exe
    O4 - HKCU\..\Run: [jl3jqlisq8bo9hc] C:\DOCUME~1\TROY~1.TRO\LOCALS~1\Temp\pvvewfu2f.exe
    O4 - HKCU\..\Run: [bz1ygqdz465j4rvxcyysw0ajd49a1muejllm4349gixkiq4j0] C:\DOCUME~1\TROY~1.TRO\LOCALS~1\Temp\qxjn53d.exe
    O4 - HKCU\..\Run: [t9mlwpg09pztlsfpb9j5b1dot7k33lgm8jo] C:\DOCUME~1\TROY~1.TRO\LOCALS~1\Temp\ckrdoiki.exe
    O4 - HKCU\..\Run: [y674kpr06msz6r7r]
     
  3. 2oldGeek

    2oldGeek Active member

    Joined:
    Jun 16, 2005
    Messages:
    3,658
    Likes Received:
    38
    Trophy Points:
    78
    Wow! You really fell into it Troonus…

    Let’s see what we can do. This may take a little time so don’t get impatient.

    Reboot your computer in "Safe Mode" using the F8 method. To do this, restart your computer and before the Windows icon appears, press the F8 key repeatedly. A menu will appear with several options. Use the arrow keys to navigate and select the option to run Windows in "Safe Mode with Networking".

    Please download ATF Cleaner by Atribune & save it to your desktop.

    Double-click ATF-Cleaner.exe to run the program.

    • Under Main "Select Files to Delete" choose: Select All.
    • Click the Empty Selected button.

    • If you use Firefox browser click Firefox at the top and choose: Select All
    • Click the Empty Selected button.
    If you would like to keep your saved passwords, please click No at the prompt.

    • If you use Opera browser click Opera at the top and choose: Select All
    • Click the Empty Selected button.
    If you would like to keep your saved passwords, please click No at the prompt.

    • Click Exit on the Main menu to close the program.



    Download Malwarebytes' Anti-Malware to your desktop.

    Double-click mbam-setup.exe and follow the prompts to install the program.
    • At the end, be sure a checkmark is placed next to Update Malwarebytes' Anti-Malware and Launch Malwarebytes' Anti-Malware, then click Finish.
    • If an update is found, it will download and install the latest version.
    • Once the program has loaded, select Perform full scan, then click Scan.
    • When the scan is complete, click OK, then Show Results to view the results.
    Make sure that everything is checked, and click Remove Selected. <-- Don't forget this.
    • When completed, a log will open in Notepad. Please save it to a convenient location. The log can also be found here: C:\Documents and Settings\Username\Application Data\Malwarebytes\Malwarebytes' Anti-Malware\Logs\log-date.txt

    • Please post the MBAM Log and a fresh HJT log in your next reply.


    2oG
     
  4. 2oldGeek

    2oldGeek Active member

    Joined:
    Jun 16, 2005
    Messages:
    3,658
    Likes Received:
    38
    Trophy Points:
    78
    Hey Troonus,

    Please use the edit and delete that last long HJT post. It is of no use and takes up a lot of valuable space : )

    Also, I see you have Acronis True Image so, where is your backup Image file???

    2oG
     
  5. Troonus

    Troonus Member

    Joined:
    Feb 24, 2009
    Messages:
    13
    Likes Received:
    0
    Trophy Points:
    11
    Backup Image File? I don't even know what that is. I never heard of the program you mentioned. Everytime, I tried to post these messages it loaded for 20 minutes then I just shut them down, thats why I didn't know that other thread even posted. Anyway, I am an idiot! The bad thing is that I know more about computers then most everyone around me, it is truly sad. I really appreciate your help. I have ran the ATF and I am now running the MBAM. Just going into hour number two. I will post up the results of it and the HJT log file as you requested. Thanks again 2oG! I really appreciate your help!

    -Troy "T-roonus"
     
  6. Troonus

    Troonus Member

    Joined:
    Feb 24, 2009
    Messages:
    13
    Likes Received:
    0
    Trophy Points:
    11
    Malwarebytes' Anti-Malware 1.34
    Database version: 1749
    Windows 5.1.2600 Service Pack 3

    2/27/2009 8:21:14 PM
    mbam-log-2009-02-27 (20-21-14).txt

    Scan type: Full Scan (C:\|D:\|)
    Objects scanned: 209563
    Time elapsed: 2 hour(s), 45 minute(s), 1 second(s)

    Memory Processes Infected: 0
    Memory Modules Infected: 4
    Registry Keys Infected: 136
    Registry Values Infected: 9
    Registry Data Items Infected: 7
    Folders Infected: 2
    Files Infected: 51

    Memory Processes Infected:
    (No malicious items detected)

    Memory Modules Infected:
    c:\WINDOWS\system32\wurajobi.dll (Trojan.Vundo.H) -> Delete on reboot.
    C:\WINDOWS\system32\rorabetu.dll (Trojan.Vundo.H) -> Delete on reboot.
    c:\WINDOWS\system32\logipefu.dll (Trojan.BHO) -> Delete on reboot.
    C:\WINDOWS\system32\hs78344kjkfd.dll (Trojan.BHO) -> Delete on reboot.

    Registry Keys Infected:
    HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{e9147a92-ea1c-4c33-b4fc-82f0ecb8aa64} (Trojan.Vundo.H) -> Quarantined and deleted successfully.
    HKEY_CLASSES_ROOT\CLSID\{e9147a92-ea1c-4c33-b4fc-82f0ecb8aa64} (Trojan.Vundo.H) -> Quarantined and deleted successfully.
    HKEY_CLASSES_ROOT\CLSID\{c5bf49a2-94f3-42bd-f434-3604812c8955} (Trojan.Zlob.H) -> Quarantined and deleted successfully.
    HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Ext\Stats\{c5bf49a2-94f3-42bd-f434-3604812c8955} (Trojan.BHO) -> Quarantined and deleted successfully.
    HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{c5bf49a2-94f3-42bd-f434-3604812c8955} (Trojan.BHO) -> Quarantined and deleted successfully.
    HKEY_CLASSES_ROOT\CLSID\{ec43e3fd-5c60-46a6-97d7-e0b85dbdd6c4} (Trojan.BHO) -> Quarantined and deleted successfully.
    HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Ext\Stats\{3ba4271e-5c1e-48e2-b432-d8bf420dd31d} (Rogue.DeusCleaner) -> Quarantined and deleted successfully.
    HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Image File Execution Options\a.exe (Trojan.Agent) -> Quarantined and deleted successfully.
    HKEY_LOCAL_MACHINE\SYSTEM\ControlSet002\Services\mabidwe (Trojan.Agent) -> Quarantined and deleted successfully.
    HKEY_LOCAL_MACHINE\SYSTEM\ControlSet003\Services\mabidwe (Trojan.Agent) -> Quarantined and deleted successfully.
    HKEY_LOCAL_MACHINE\SYSTEM\ControlSet004\Services\mabidwe (Trojan.Agent) -> Quarantined and deleted successfully.
    HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\mabidwe (Trojan.Agent) -> Quarantined and deleted successfully.
    HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Services\seneka (Trojan.Agent) -> Quarantined and deleted successfully.
    HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\dslcnnct (Trojan.Vundo) -> Quarantined and deleted successfully.
    HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\MS Track System (Trojan.Vundo) -> Quarantined and deleted successfully.
    HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\rdfa (Trojan.Vundo) -> Quarantined and deleted successfully.
    HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Image File Execution Options\auto.exe (Security.Hijack) -> Quarantined and deleted successfully.
    HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Image File Execution Options\AutoRun.exe (Security.Hijack) -> Quarantined and deleted successfully.
    HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Image File Execution Options\Discovery.exe (Security.Hijack) -> Quarantined and deleted successfully.
    HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Image File Execution Options\guangd.exe (Security.Hijack) -> Quarantined and deleted successfully.
    HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Image File Execution Options\NAVSetup.exe (Security.Hijack) -> Quarantined and deleted successfully.
    HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Image File Execution Options\rfwProxy.exe (Security.Hijack) -> Quarantined and deleted successfully.
    HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Image File Execution Options\SDGames.exe (Security.Hijack) -> Quarantined and deleted successfully.
    HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Image File Execution Options\servet.exe (Security.Hijack) -> Quarantined and deleted successfully.
    HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Image File Execution Options\ShuiNiu.exe (Security.Hijack) -> Quarantined and deleted successfully.
    HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Image File Execution Options\sos.exe (Security.Hijack) -> Quarantined and deleted successfully.
    HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Image File Execution Options\svch0st.exe (Security.Hijack) -> Quarantined and deleted successfully.
    HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Image File Execution Options\Systom.exe (Security.Hijack) -> Quarantined and deleted successfully.
    HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Image File Execution Options\TNT.Exe (Security.Hijack) -> Quarantined and deleted successfully.
    HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Image File Execution Options\TxoMoU.Exe (Security.Hijack) -> Quarantined and deleted successfully.
    HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Image File Execution Options\UFO.exe (Security.Hijack) -> Quarantined and deleted successfully.
    HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Image File Execution Options\Wsyscheck.exe (Security.Hijack) -> Quarantined and deleted successfully.
    HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Image File Execution Options\XP.exe (Security.Hijack) -> Quarantined and deleted successfully.
    HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Image File Execution Options\zxsweep.exe (Security.Hijack) -> Quarantined and deleted successfully.
    HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Image File Execution Options\avp.exe (Security.Hijack) -> Quarantined and deleted successfully.
    HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Image File Execution Options\nod32kui.exe (Security.Hijack) -> Quarantined and deleted successfully.
    HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Image File Execution Options\360rpt.exe (Security.Hijack) -> Quarantined and deleted successfully.
    HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Image File Execution Options\360Safe.exe (Security.Hijack) -> Quarantined and deleted successfully.
    HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Image File Execution Options\360tray.exe (Security.Hijack) -> Quarantined and deleted successfully.
    HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Image File Execution Options\Iparmor.exe (Security.Hijack) -> Quarantined and deleted successfully.
    HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Image File Execution Options\KAV32.exe (Security.Hijack) -> Quarantined and deleted successfully.
    HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Image File Execution Options\KAVPFW.EXE (Security.Hijack) -> Quarantined and deleted successfully.
    HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Image File Execution Options\KVMonXP.kxp (Security.Hijack) -> Quarantined and deleted successfully.
    HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Image File Execution Options\KVSrvXP.exe (Security.Hijack) -> Quarantined and deleted successfully.
    HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Image File Execution Options\KVwsc.exe (Security.Hijack) -> Quarantined and deleted successfully.
    HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Image File Execution Options\KvXP.kxp (Security.Hijack) -> Quarantined and deleted successfully.
    HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Image File Execution Options\PFW.EXE (Security.Hijack) -> Quarantined and deleted successfully.
    HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Image File Execution Options\Rav.exe (Security.Hijack) -> Quarantined and deleted successfully.
    HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Image File Execution Options\RAVmon.exe (Security.Hijack) -> Quarantined and deleted successfully.
    HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Image File Execution Options\RAVmonD.exe (Security.Hijack) -> Quarantined and deleted successfully.
    HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Image File Execution Options\SCAN32.EXE (Security.Hijack) -> Quarantined and deleted successfully.
    HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Image File Execution Options\adam.exe (Security.Hijack) -> Quarantined and deleted successfully.
    HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Image File Execution Options\AgentSvr.exe (Security.Hijack) -> Quarantined and deleted successfully.
    HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Image File Execution Options\AppSvc32.exe (Security.Hijack) -> Quarantined and deleted successfully.
    HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Image File Execution Options\autoruns.exe (Security.Hijack) -> Quarantined and deleted successfully.
    HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Image File Execution Options\avgrssvc.exe (Security.Hijack) -> Quarantined and deleted successfully.
    HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Image File Execution Options\AvMonitor.exe (Security.Hijack) -> Quarantined and deleted successfully.
    HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Image File Execution Options\avp.com (Security.Hijack) -> Quarantined and deleted successfully.
    HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Image File Execution Options\CCenter.exe (Security.Hijack) -> Quarantined and deleted successfully.
    HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Image File Execution Options\ccSvcHst.exe (Security.Hijack) -> Quarantined and deleted successfully.
    HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Image File Execution Options\cross.exe (Security.Hijack) -> Quarantined and deleted successfully.
    HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Image File Execution Options\FileDsty.exe (Security.Hijack) -> Quarantined and deleted successfully.
    HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Image File Execution Options\FTCleanerShell.exe (Security.Hijack) -> Quarantined and deleted successfully.
    HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Image File Execution Options\HijackThis.exe (Security.Hijack) -> Quarantined and deleted successfully.
    HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Image File Execution Options\iparmo.exe (Security.Hijack) -> Quarantined and deleted successfully.
    HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Image File Execution Options\isPwdSvc.exe (Security.Hijack) -> Quarantined and deleted successfully.
    HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Image File Execution Options\kabaload.exe (Security.Hijack) -> Quarantined and deleted successfully.
    HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Image File Execution Options\KaScrScn.SCR (Security.Hijack) -> Quarantined and deleted successfully.
    HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Image File Execution Options\KASMain.exe (Security.Hijack) -> Quarantined and deleted successfully.
    HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Image File Execution Options\KASTask.exe (Security.Hijack) -> Quarantined and deleted successfully.
    HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Image File Execution Options\KAVDX.exe (Security.Hijack) -> Quarantined and deleted successfully.
    HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Image File Execution Options\KAVSetup.exe (Security.Hijack) -> Quarantined and deleted successfully.
    HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Image File Execution Options\KAVStart.exe (Security.Hijack) -> Quarantined and deleted successfully.
    HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Image File Execution Options\KISLnchr.exe (Security.Hijack) -> Quarantined and deleted successfully.
    HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Image File Execution Options\KMailMon.exe (Security.Hijack) -> Quarantined and deleted successfully.
    HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Image File Execution Options\KMFilter.exe (Security.Hijack) -> Quarantined and deleted successfully.
    HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Image File Execution Options\KPFW32.exe (Security.Hijack) -> Quarantined and deleted successfully.
    HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Image File Execution Options\KPFW32X.exe (Security.Hijack) -> Quarantined and deleted successfully.
    HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Image File Execution Options\KPFWSvc.exe (Security.Hijack) -> Quarantined and deleted successfully.
    HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Image File Execution Options\KRegEx.exe (Security.Hijack) -> Quarantined and deleted successfully.
    HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Image File Execution Options\KRepair.COM (Security.Hijack) -> Quarantined and deleted successfully.
    HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Image File Execution Options\KsLoader.exe (Security.Hijack) -> Quarantined and deleted successfully.
    HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Image File Execution Options\KVCenter.kxp (Security.Hijack) -> Quarantined and deleted successfully.
    HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Image File Execution Options\KvDetect.exe (Security.Hijack) -> Quarantined and deleted successfully.
    HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Image File Execution Options\KvfwMcl.exe (Security.Hijack) -> Quarantined and deleted successfully.
    HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Image File Execution Options\KVMonXP_1.kxp (Security.Hijack) -> Quarantined and deleted successfully.
    HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Image File Execution Options\kvol.exe (Security.Hijack) -> Quarantined and deleted successfully.
    HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Image File Execution Options\kvolself.exe (Security.Hijack) -> Quarantined and deleted successfully.
    HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Image File Execution Options\KvReport.kxp (Security.Hijack) -> Quarantined and deleted successfully.
    HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Image File Execution Options\KVStub.kxp (Security.Hijack) -> Quarantined and deleted successfully.
    HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Image File Execution Options\kvupload.exe (Security.Hijack) -> Quarantined and deleted successfully.
    HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Image File Execution Options\KWatch.exe (Security.Hijack) -> Quarantined and deleted successfully.
    HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Image File Execution Options\KWatch9x.exe (Security.Hijack) -> Quarantined and deleted successfully.
    HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Image File Execution Options\KWatchX.exe (Security.Hijack) -> Quarantined and deleted successfully.
    HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Image File Execution Options\loaddll.exe (Security.Hijack) -> Quarantined and deleted successfully.
    HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Image File Execution Options\MagicSet.exe (Security.Hijack) -> Quarantined and deleted successfully.
    HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Image File Execution Options\mcconsol.exe (Security.Hijack) -> Quarantined and deleted successfully.
    HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Image File Execution Options\mmqczj.exe (Security.Hijack) -> Quarantined and deleted successfully.
    HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Image File Execution Options\mmsk.exe (Security.Hijack) -> Quarantined and deleted successfully.
    HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Image File Execution Options\nod32krn.exe (Security.Hijack) -> Quarantined and deleted successfully.
    HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Image File Execution Options\PFWLiveUpdate.exe (Security.Hijack) -> Quarantined and deleted successfully.
    HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Image File Execution Options\QHSET.exe (Security.Hijack) -> Quarantined and deleted successfully.
    HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Image File Execution Options\Ras.exe (Security.Hijack) -> Quarantined and deleted successfully.
    HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Image File Execution Options\RavStub.exe (Security.Hijack) -> Quarantined and deleted successfully.
    HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Image File Execution Options\RavTask.exe (Security.Hijack) -> Quarantined and deleted successfully.
    HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Image File Execution Options\RegClean.exe (Security.Hijack) -> Quarantined and deleted successfully.
    HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Image File Execution Options\rfwcfg.exe (Security.Hijack) -> Quarantined and deleted successfully.
    HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Image File Execution Options\RfwMain.exe (Security.Hijack) -> Quarantined and deleted successfully.
    HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Image File Execution Options\rfwsrv.exe (Security.Hijack) -> Quarantined and deleted successfully.
    HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Image File Execution Options\RsAgent.exe (Security.Hijack) -> Quarantined and deleted successfully.
    HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Image File Execution Options\Rsaupd.exe (Security.Hijack) -> Quarantined and deleted successfully.
    HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Image File Execution Options\runiep.exe (Security.Hijack) -> Quarantined and deleted successfully.
    HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Image File Execution Options\safelive.exe (Security.Hijack) -> Quarantined and deleted successfully.
    HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Image File Execution Options\shcfg32.exe (Security.Hijack) -> Quarantined and deleted successfully.
    HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Image File Execution Options\SmartUp.exe (Security.Hijack) -> Quarantined and deleted successfully.
    HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Image File Execution Options\SREng.exe (Security.Hijack) -> Quarantined and deleted successfully.
    HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Image File Execution Options\symlcsvc.exe (Security.Hijack) -> Quarantined and deleted successfully.
    HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Image File Execution Options\SysSafe.exe (Security.Hijack) -> Quarantined and deleted successfully.
    HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Image File Execution Options\TrojanDetector.exe (Security.Hijack) -> Quarantined and deleted successfully.
    HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Image File Execution Options\Trojanwall.exe (Security.Hijack) -> Quarantined and deleted successfully.
    HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Image File Execution Options\TrojDie.kxp (Security.Hijack) -> Quarantined and deleted successfully.
    HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Image File Execution Options\UIHost.exe (Security.Hijack) -> Quarantined and deleted successfully.
    HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Image File Execution Options\UmxAgent.exe (Security.Hijack) -> Quarantined and deleted successfully.
    HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Image File Execution Options\UmxAttachment.exe (Security.Hijack) -> Quarantined and deleted successfully.
    HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Image File Execution Options\UmxFwHlp.exe (Security.Hijack) -> Quarantined and deleted successfully.
    HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Image File Execution Options\UmxPol.exe (Security.Hijack) -> Quarantined and deleted successfully.
    HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Image File Execution Options\UpLive.EXE (Security.Hijack) -> Quarantined and deleted successfully.
    HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Image File Execution Options\WoptiClean.exe (Security.Hijack) -> Quarantined and deleted successfully.
    HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Image File Execution Options\regedit.exe (Security.Hijack) -> Quarantined and deleted successfully.
    HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Image File Execution Options\UmxCfg.exe (Security.Hijack) -> Quarantined and deleted successfully.
    HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Image File Execution Options\icesword.exe (Security.Hijack) -> Quarantined and deleted successfully.
    HKEY_LOCAL_MACHINE\SYSTEM\ControlSet002\Services\soxpeca (Trojan.Agent) -> Quarantined and deleted successfully.
    HKEY_LOCAL_MACHINE\SYSTEM\ControlSet003\Services\soxpeca (Trojan.Agent) -> Quarantined and deleted successfully.
    HKEY_LOCAL_MACHINE\SYSTEM\ControlSet004\Services\soxpeca (Trojan.Agent) -> Quarantined and deleted successfully.
    HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\soxpeca (Trojan.Agent) -> Quarantined and deleted successfully.
    HKEY_CLASSES_ROOT\freshplay (Trojan.DNSChanger) -> Quarantined and deleted successfully.

    Registry Values Infected:
    HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run\vuvalituno (Trojan.Vundo.H) -> Quarantined and deleted successfully.
    HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run\cpm8fd56060 (Trojan.Vundo.H) -> Quarantined and deleted successfully.
    HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\SharedTaskScheduler\{c5bf49a2-94f3-42bd-f434-3604812c8955} (Trojan.Zlob.H) -> Quarantined and deleted successfully.
    HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run\vfeda (Trojan.Agent) -> Quarantined and deleted successfully.
    HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\SharedTaskScheduler\{ec43e3fd-5c60-46a6-97d7-e0b85dbdd6c4} (Trojan.BHO) -> Quarantined and deleted successfully.
    HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\ShellServiceObjectDelayLoad\ssodl (Trojan.BHO) -> Quarantined and deleted successfully.
    HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Run\jsf8uiw3jnjgffght (Trojan.FakeAlert) -> Quarantined and deleted successfully.
    HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run\jsf8uiw3jnjgffght (Trojan.FakeAlert) -> Quarantined and deleted successfully.
    HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run\explorer (Trojan.Agent) -> Quarantined and deleted successfully.

    Registry Data Items Infected:
    HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Windows\AppInit_DLLs (Trojan.Vundo.H) -> Data: c:\windows\system32\wurajobi.dll -> Quarantined and deleted successfully.
    HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Windows\AppInit_DLLs (Trojan.Vundo.H) -> Data: system32\wurajobi.dll -> Quarantined and deleted successfully.
    HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Windows\AppInit_DLLs (Trojan.Vundo.H) -> Data: c:\windows\system32\rorabetu.dll -> Quarantined and deleted successfully.
    HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\LSA\Notification Packages (Trojan.Vundo.H) -> Data: c:\windows\system32\rorabetu.dll -> Quarantined and deleted successfully.
    HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Windows\AppInit_DLLs (Trojan.Vundo.H) -> Data: system32\rorabetu.dll -> Quarantined and deleted successfully.
    HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Windows\AppInit_DLLs (Trojan.BHO) -> Data: c:\windows\system32\logipefu.dll -> Quarantined and deleted successfully.
    HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Windows\AppInit_DLLs (Trojan.BHO) -> Data: system32\logipefu.dll -> Quarantined and deleted successfully.

    Folders Infected:
    C:\Documents and Settings\Troy.TROY-3877188EC0\Application Data\cogad (Trojan.Agent) -> Quarantined and deleted successfully.
    C:\Documents and Settings\Troy.TROY-3877188EC0\Start Menu\Programs\freshplay (Trojan.DNSChanger) -> Quarantined and deleted successfully.

    Files Infected:
    C:\WINDOWS\system32\josoruyu.dll (Trojan.Vundo.H) -> Quarantined and deleted successfully.
    C:\WINDOWS\system32\uyurosoj.ini (Trojan.Vundo.H) -> Quarantined and deleted successfully.
    C:\WINDOWS\system32\nolomipu.dll (Trojan.Vundo.H) -> Quarantined and deleted successfully.
    C:\WINDOWS\system32\upimolon.ini (Trojan.Vundo.H) -> Quarantined and deleted successfully.
    C:\WINDOWS\system32\pivojobe.dll (Trojan.Vundo.H) -> Quarantined and deleted successfully.
    C:\WINDOWS\system32\ebojovip.ini (Trojan.Vundo.H) -> Quarantined and deleted successfully.
    C:\WINDOWS\system32\viniyibo.dll (Trojan.Vundo.H) -> Quarantined and deleted successfully.
    C:\WINDOWS\system32\obiyiniv.ini (Trojan.Vundo.H) -> Quarantined and deleted successfully.
    C:\WINDOWS\system32\vigodite.dll (Trojan.Vundo.H) -> Quarantined and deleted successfully.
    c:\WINDOWS\system32\wurajobi.dll (Trojan.Vundo.H) -> Delete on reboot.
    C:\WINDOWS\system32\drivers\slwdmsupp.sys (Rootkit.Agent.H) -> Quarantined and deleted successfully.
    C:\WINDOWS\system32\hs78344kjkfd.dll (Trojan.Zlob.H) -> Delete on reboot.
    C:\WINDOWS\system32\rorabetu.dll (Trojan.Vundo.H) -> Delete on reboot.
    C:\WINDOWS\Pzaxacevezuy.dll (Trojan.Agent) -> Quarantined and deleted successfully.
    c:\WINDOWS\system32\logipefu.dll (Trojan.BHO) -> Delete on reboot.
    C:\hqcjpd.exe (Trojan.Vundo) -> Quarantined and deleted successfully.
    C:\Documents and Settings\Troy.TROY-3877188EC0\Local Settings\Temp\UACbac0.tmp (Rootkit.TDSS) -> Quarantined and deleted successfully.
    C:\Documents and Settings\Troy.TROY-3877188EC0\Local Settings\Temp\~nsu.tmp\Au_.exe (Trojan.FakeAlert) -> Quarantined and deleted successfully.
    C:\System Volume Information\_restore{A9F0914B-5F5C-4004-8636-702BD8DD1B24}\RP710\A0216273.exe (Trojan.FakeAlert) -> Quarantined and deleted successfully.
    C:\System Volume Information\_restore{A9F0914B-5F5C-4004-8636-702BD8DD1B24}\RP710\A0217264.dll (Trojan.Vundo.H) -> Quarantined and deleted successfully.
    C:\WINDOWS\system32\UACkndjnoew.dll (Rootkit.TDSS) -> Quarantined and deleted successfully.
    C:\WINDOWS\system32\UAClnalxwpj.dll (Trojan.TDSS) -> Quarantined and deleted successfully.
    C:\WINDOWS\system32\UAClqglvhwb.dll (Rootkit.TDSS) -> Quarantined and deleted successfully.
    C:\WINDOWS\system32\drivers\UACltmxfmcn.sys (Rootkit.TDSS) -> Quarantined and deleted successfully.
    C:\autorun.inf (Trojan.Agent) -> Quarantined and deleted successfully.
    C:\RECYCLER\S-7-1-37-100020637-100007923-100009012-7859.com (Trojan.Agent) -> Quarantined and deleted successfully.
    C:\WINDOWS\system32\a.exe (Trojan.Agent) -> Quarantined and deleted successfully.
    C:\WINDOWS\system32\uacinit.dll (Trojan.Agent) -> Quarantined and deleted successfully.
    C:\WINDOWS\system32\mabidwe.exe (Trojan.Agent) -> Quarantined and deleted successfully.
    C:\WINDOWS\system32\comsa32.sys (Trojan.Agent) -> Quarantined and deleted successfully.
    C:\WINDOWS\system32\senekaaouyyvdl.dll (Trojan.Agent) -> Quarantined and deleted successfully.
    C:\WINDOWS\system32\senekahyfdygub.dll (Trojan.Agent) -> Quarantined and deleted successfully.
    C:\WINDOWS\system32\senekalkshbclg.dll (Trojan.Agent) -> Quarantined and deleted successfully.
    C:\WINDOWS\system32\drivers\seneka.sys (Trojan.Agent) -> Quarantined and deleted successfully.
    C:\WINDOWS\system32\drivers\senekafrvqtvvc.sys (Trojan.Agent) -> Quarantined and deleted successfully.
    C:\WINDOWS\system32\inf\xccefb090131.scr (Trojan.Agent) -> Quarantined and deleted successfully.
    C:\WINDOWS\xccdf16_090131a.dll (Spyware.OnlineGames) -> Quarantined and deleted successfully.
    C:\WINDOWS\xccdf32_090131a.dll (Spyware.OnlineGames) -> Quarantined and deleted successfully.
    C:\WINDOWS\system\xccef090131.exe (Spyware.OnlineGames) -> Quarantined and deleted successfully.
    C:\WINDOWS\system32\inf\xccdfb16_090131.dll (Spyware.OnlineGames) -> Quarantined and deleted successfully.
    C:\WINDOWS\system32\lebapide.dll (Trojan.Vundo) -> Quarantined and deleted successfully.
    C:\WINDOWS\system32\bosesufe.dll (Trojan.Vundo) -> Quarantined and deleted successfully.
    C:\Documents and Settings\Troy.TROY-3877188EC0\Local Settings\Temp\winlognn.exe (Trojan.FakeAlert) -> Quarantined and deleted successfully.
    C:\WINDOWS\system32\msrstart.exe (Trojan.Agent) -> Quarantined and deleted successfully.
    C:\WINDOWS\system32\soxpeca.exe (Trojan.Agent) -> Quarantined and deleted successfully.
    C:\WINDOWS\system32\senekadpyetefv.dat (Trojan.Agent) -> Quarantined and deleted successfully.
    C:\WINDOWS\system32\senekavjlqbosd.dat (Trojan.Agent) -> Quarantined and deleted successfully.
    C:\WINDOWS\system32\UACbuqpapsm.dat (Trojan.Agent) -> Quarantined and deleted successfully.
    C:\WINDOWS\system32\UACmcmrtywe.log (Trojan.Agent) -> Quarantined and deleted successfully.
    C:\WINDOWS\system32\UACppqowjxx.dll (Trojan.Agent) -> Quarantined and deleted successfully.
    C:\WINDOWS\system32\drivers\core.cache.dsk (Rootkit.Agent) -> Quarantined and deleted successfully.
     
  7. 109001

    109001 Member

    Joined:
    Apr 21, 2008
    Messages:
    1
    Likes Received:
    0
    Trophy Points:
    11
     
  8. Troonus

    Troonus Member

    Joined:
    Feb 24, 2009
    Messages:
    13
    Likes Received:
    0
    Trophy Points:
    11
    I just tried to post the log file from my last HJT log file but it didn't go through. It may be too large, not sure. Should I try it again or can I email the word pad file? Please let me know what you think 2oG! Thanks, you the man!

    -T
     
  9. 2oldGeek

    2oldGeek Active member

    Joined:
    Jun 16, 2005
    Messages:
    3,658
    Likes Received:
    38
    Trophy Points:
    78
    Troonus,
    Lol I’ll explain about Acronis later..

    Don’t worry about a HJT Log yet, you still have a lot of cleaning to do.

    This should work now so do the following and post a Log from SAS if you can….

    Please download ATF Cleaner by Atribune & save it to your desktop. DO NOT use yet.

    Please download and install SUPERAntiSpyware Free

    • Double-click SUPERAntiSypware.exe and use the default settings for installation.
    • An icon will be created on your desktop. Double-click that icon to launch the program.
    • If asked to update the program definitions, click "Yes". If not, update the definitions before scanning by selecting "Check for Updates". (If you encounter any problems while downloading the updates, manually download them from here and unzip into the program's folder.)
    • Under the "Configuration and Preferences", click the Preferences... button.
    • Click the "General and Startup" tab, and under Start-up Options, make sure "Start SUPERAntiSpyware when Windows starts" box is unchecked.
    • Click the "Scanning Control" tab, and under Scanner Options, make sure the following are checked (leave all others unchecked):
    o Close browsers before scanning.
    o Scan for tracking cookies.
    o Terminate memory threats before quarantining.

    • Click the "Close" button to leave the control center screen and exit the program.
    Do not run a scan just yet.


    Reboot your computer in "Safe Mode" using the F8 method. To do this, restart your computer and before the Windows icon appears, press the F8 key repeatedly. A menu will appear with several options. Use the arrow keys to navigate and select the option to run Windows in "Safe Mode".

    Double-click ATF-Cleaner.exe to run the program.

    • Under Main "Select Files to Delete" choose: Select All.
    • Click the Empty Selected button.

    • If you use Firefox browser click Firefox at the top and choose: Select All
    • Click the Empty Selected button.
    If you would like to keep your saved passwords, please click No at the prompt.

    • If you use Opera browser click Opera at the top and choose: Select All
    • Click the Empty Selected button.
    If you would like to keep your saved passwords, please click No at the prompt.

    • Click Exit on the Main menu to close the program.

    Note: On Vista, "Windows Temp" is disabled. To empty "Windows Temp" ATF-Cleaner must be "Run as an Administrator".


    Scan with SUPERAntiSpyware as follows:

    • Launch the program and back on the main screen, under "Scan for Harmful Software" click Scan your computer.
    • On the left, make sure you check C:\Fixed Drive.
    • On the right, under "Complete Scan", choose Perform Complete Scan and click "Next".
    • After the scan is complete, a Scan Summary box will appear with potentially harmful items that were detected. Click "OK".
    • Make sure everything has a checkmark next to it and click "Next".
    • A notification will appear that "Quarantine and Removal is Complete". Click "OK" and then click the "Finish" button to return to the main menu.
    • If asked if you want to reboot, click "Yes" and reboot normally.
    • To retrieve the removal information after reboot, launch SUPERAntispyware again.
    o Click Preferences, then click the Statistics/Logs tab.
    o Under Scanner Logs, double-click SUPERAntiSpyware Scan Log.
    o If there are several logs, click the current dated log and press View log. A text file will open in your default text editor.
    o Please copy and paste the Scan Log results in your next reply.

    • Click Close to exit the program.

    Reboot to Normal Mode


    2oG
     
  10. vballstud

    vballstud Guest

    If you can't run anything but safe mode, you have one of two options.
    Option 1.) Have someone download and copy Panda AntiVirus Pro 2009 to either a cd or usb drive. Uninstall all AntiVirus software you currently have on your system. Then install, update, and run the install file for Panda AntiVirus Pro 2009 on your system in Safe Mode.
    http://www.pandasecurity.com/homeusers/downloads/?sitepanda=particulares

    Hopefully that will get you back to a normal boot. If so, update the virus definitions and run another full scan. Then download and install MalwareBytes Anti-Malware. Update it and run a full scan. Reboot. Run a 2nd scan.
    http://www.malwarebytes.org/mbam.php

    Download, install, and run CCleaner.
    http://www.ccleaner.com/

    Option 2.) Pull out the hard drive and throw it into an external USB case and hook it up to a computer with an internet connection.

    Run Kaspersky Online Scanner on your hard drive in the external USB case.
    http://usa.kaspersky.com/products_services/free-virus-scanner.php

    Download and install MalwareBytes Anti-Malware. Update it and run a full scan on that drive. Reboot. Run a 2nd full scan.
    http://www.malwarebytes.org/mbam.php

    Download, install, and run CCleaner.
    http://www.ccleaner.com/

    After doing all that, post another HJT log. Hopefully that will take care of most of your issues.
     
    Last edited by a moderator: Feb 28, 2009
  11. 2oldGeek

    2oldGeek Active member

    Joined:
    Jun 16, 2005
    Messages:
    3,658
    Likes Received:
    38
    Trophy Points:
    78
    After seeing what MBAM removed and what that last HJT Log shows, my only suggestion is:

    Bite the bullet! Reformat and reinstall your OS......

    You could fight this infection from now on and never get it clean..

    2oG
     
  12. Troonus

    Troonus Member

    Joined:
    Feb 24, 2009
    Messages:
    13
    Likes Received:
    0
    Trophy Points:
    11
    Yeah, I am battling it to just try to do the things you have suggested. Most of the anti stuff I run locks up at some point so I can't clean it. If it does clean, it just comes back. I appreciate your time and I am still going to battle it but maybe just for another day. I am using the software that you linked to me. I really appreciate you and will keep you informed of how it goes. Windows keeps shutting down the "generic host for windows 32 sys" or whatever that is. Think I will just reformat. THanks again, 2oG!
    -Troy
     
  13. 2oldGeek

    2oldGeek Active member

    Joined:
    Jun 16, 2005
    Messages:
    3,658
    Likes Received:
    38
    Trophy Points:
    78
    Before reformatting, if you have a lot of stuff in My Documents like pictures, etc. that you wish to rescue, you will need a second drive or an external USB drive to transfer it to. Then you can use the following method to rescue your data files using a working computer to download and burn a recovery disk:

    Download a Linux Live Disk.iso it’s 695MB and will take a little time to download….
    HERE!

    Download Imgburn to burn your .iso file to a CD-R…
    http://www.softpedia.com/get/CD-DVD-Tools/Data-CD-DVD-Burning/ImgBurn.shtml


    Use this guide to burn it..
    http://forum.imgburn.com/index.php?showtopic=61

    Use this guide to recover files from your downed HDD using the Linux Live disk..
    http://lifehacker.com/software/disk-recovery/geek-to-live--rescue-files-with-a-boot-cd-192982.php


    Life would be simpler if you had an Image backup of your Boot Drive, Huh?
    The first 3 rules in computing are 1. backup 2. backup and 3. backup : (

    Questions? Fire at will!

    2oG
     
  14. Troonus

    Troonus Member

    Joined:
    Feb 24, 2009
    Messages:
    13
    Likes Received:
    0
    Trophy Points:
    11
    Fortunately, I do have most all of my important stuff on other drives so that will not be an issue. I am running "kill disk" before I reformat to make sure I wipe out all garbage. I ran all of those anti programs multiple times and they couldn't touch that beast! So what is the image backup and how do I do it now? Do I need software for it?
     
  15. 2oldGeek

    2oldGeek Active member

    Joined:
    Jun 16, 2005
    Messages:
    3,658
    Likes Received:
    38
    Trophy Points:
    78
    Imaging is a way to backup your entire HDD and return like reformat/reinstall in about 4 or 5 minutes.
    Acronis Trueimage Home is the best (50 bucks or less if you shop around)
    http://www.acronis.com/homecomputing/products/trueimage/

    Macrium reflect is slower and no bells or whistles but, FREE and works.
    http://www.macrium.com/reflectfree.asp

    I use Acronis to back up different OS’s that I install and then I can Start and Run any system I desire in about 4 or 5 minutes…. Like XP Pro, Vista ultimate, Windows 7, XP extreme 7, Linux Ubuntu, or Linux Knoppix, all installed on my computer and can run anytime I desire just by restoring them with Acronis (takes about 4 minutes for me to change, or restore, the OS). I have a system to prevent malware, I never get any, but if I did, it just takes about 4 minutes to defeat it…..

    Check it out and ask questions, I’ll reply..

    2oG
     
  16. Troonus

    Troonus Member

    Joined:
    Feb 24, 2009
    Messages:
    13
    Likes Received:
    0
    Trophy Points:
    11
    I will check that out, appreciate it. That is crazy that you can just switch from one OS to another. Doesn't it eat up a ton of memory to have all those OS. Will definately check it out. I am looking at going back to college for a associates in programming. Do you think that would be the best focus. They offer database design, programming, and networking and communications. I was thinking I would best benefit with the programming or database design. Anyway, I did get my XP reloaded but it was missing a ton of drivers, everytime I reformat. I have the old Dell OS disc. I still can't get it online. I finally found the drivers for my ethernet port so I am closer but it is just a pain in the butt. I can get through that one, it happens everytime I reformat. My biggest worry or problem is that I cannot directly access either of my drives. I can open files through my media player and search files and open them but when I click on the drive icons on my desktop or start menu I get a prompt, "windows cannot find 'RECYCLER\s-2-2-58-100014177-100012838-100023557-6376.com'. Make sure you typed the name correctly, and then try again. To search for a file, click the Start button, and then click search." What in the hell is that? I have never had this problem before. The only thing I did different is having the new internal hard drive. I did unplug it while I reformatted and then plugged it back in once it finished, scared to lose all my kids pics and my music. Anyway, I really appreciate your help and I will let you know how that acronis works! Thanks 2oG!
    -Troy
     
  17. 2oldGeek

    2oldGeek Active member

    Joined:
    Jun 16, 2005
    Messages:
    3,658
    Likes Received:
    38
    Trophy Points:
    78
    They’re not all on the HD at the same time. I reformat my HD and install an OS and all the programs that I use then, I back up the whole drive to my second disk using Acronis.

    I have 6 systems backed up and when I want to change I simply have Acronis restore the backup for whatever OS I want to use. It takes about 5 minutes. It’s kinda like reformatting, reinstalling, installing all your programs and settings all in 5 minutes. : )

    2oG

    p.s. I'm using Windows 7 right now, and I love it...
     
  18. Troonus

    Troonus Member

    Joined:
    Feb 24, 2009
    Messages:
    13
    Likes Received:
    0
    Trophy Points:
    11
    Hey 2oG,
    I got one for you. Like I said I know more about computers then most of the people I know, which isn't much, but I went to work on my brothers computer today and ran across something I have never seen or heard of before. He has had his Dell desktop for a couple, three years now and lately he couldn't read any discs when they were put in the disc drives. I looked at it and they have disappeared. The drives are still hooked up, properly, but according to the software they do not exist, not even in the bios. ANy ideas???
    -Troy
     
  19. 2oldGeek

    2oldGeek Active member

    Joined:
    Jun 16, 2005
    Messages:
    3,658
    Likes Received:
    38
    Trophy Points:
    78
    Troonus,

    If you can open the drive and put in a disk, it has power…

    May be a bad cable or connector and the os can’t see it, replace the cable.

    See if it’s enabled:
    Go to control panel-> System-> Hardware tab-> Device manager-> DVD/CD rom drives -> click the + to drop down -> right click the drive icon-> click properties-> in the Device usage box, make sure it says Use this device (enable)


    Other than that, ???
    2oG
     

Share This Page