Trojan Downloader Agent BUO

qqgmd.dll
adobearp.exe
bclm.exe
winsvc.exe
Uptade.exe
TextAloudMP3.exe
SHAK3.sys
Recycle.Bin.exe
platinum.hide.ip.download.2.0.xxx-patch.exe
mciole3232.exe
kxi.exe
hogra.dll
cryptnet32.dll
cfn.exe
CEuqMGkJOiYJQO.exe
AudioEng32.dll
Asdhga6.zip.exe
api-ms-win-core-misc-l1-1-032.dll
AdVantage.exe
Windefend.exe
DriverUpdaterPro.exe
cas.exe
bin.exe
avifil3232.dll
dxdiag.exe
unregmp2.exe
domain-546db1f830.exe
7991341.exe
srvdrivers32.exe
6to4ex.dll
rdr_1303786415.exe
FileName.exe
D4E4.exe
MicrosoftSP5.update_fix.exe
8hhs04Pm.dll
tja.exe
H0O1PP2y.exe
explorer.exe.hc_restore
aklservice.exe
Abel.exe
DAT6A.tmp.exe
prnet.tmp
wuwhga.exe
JavaUpdatecdx10.cpl
JavaUpdatecds10.cpl
JavaUpdatecdx8.cpl
Iasex.dll
svchotsys.cpl
JavaUpdatecdx9.cpl
JavaUpdatecdy10.cpl
JavaUpdatecdre.cpl
scanquery115.exe
scanquery114.exe
resulturl133.exe
CleanUp452.exe
NTINl3.dll
memogusu.dll
ete5dy.exe
Why.exe
osidfjklsdw.exe
msn_1281177975.exe
msii.dll
GoogleUpdateBeta.exe
e76c33fc.dll
bqfti.exe
tAExRDJWhvf.exe
lalsmsD.dll
lerfmilm.dll
findxplorer139.exe
scanner.exe
msserv.exe
lsdra09.dll
stpass.exe
scanquery110.exe
questbrwsearch.dll
KiwroKwhwkl.exe
DFDWizb.exe
atiumdag32.dll
svshost.exe
dhcuxvpu.exe
acpres.exe
ifpage.exe
.exe
updates.exe
35E.tmp
vfxdsysadm.exe
system32360Safi.exe
vcdexx.dll
runoncce.exe
ooleres.dll
mswmdmm.dll
lqamfocrysnfh.dll
jusched.exe
6678c8c9-dced-27a4-4990-a61210bbaac3.dll
4c3bfad2.dll
wupps2.dll
dimsntfyy.dll
sysy.cpl
sysp.cpl
services.exe
FastUserSwitchingCompatibilityex.dll
uegsg.exe
setup_100525_3_.exe
svccb.exe
yc72125.dll
VkhJcxPIEQM.exe
LBSYdYrDlalNvk.exe
3802557469.exe
xpPathCmds.dll
wiapw40.dll
tmp3.dll
spuninst.exe
SMb58_2129.exe
roamsvc.exe
protect.exe
orayjcdlcuhn.dll
oltrdvc.dll
nkqzk.exe
KBDAPG2.dll
IAf0c_2129.exe
GoogleToolbars1.dll
firefox.exe
dak32.sys
api-ms-win-core-file-l1-1-032.dll
cleansweep.exe
Ati2evxx32.dll
455210.exe
zup.sys
ysfhdvlaffm.exe
xWBIoWpJPn.exe
WinDefender.exe
vsbntlo.exe
TotalPrivacy.exe
svshotz.exe
psysnew.exe
oekx.exe
ltzqai.exe
jahcii.exe
idemoodp0cetka.exe
IA776_231.exe
IA357_231.exe
hns.exe
eb.exe
browsewan.dll
b778.dll
AUDIOKSE32.dll
_ex-08.exe
SE2011.exe
msconfig.exe
csidrv.exe
CoDUOSP.exe
arking.exe
win32.exe
sivchost.exe
taskmgrs.exe
W220AB4.EXE
Tons Third Seek.exe
teleauth.exe
mvNat.exe
msiiexec.exe
mfppmp.exe
epcorda.dll
ctfmon_su.exe
ctfmon_eo.exe
ctfmon_bi.exe
chooice.exe
apcantar.dll
AMDgraphics.exe
winrss.exe
ubohjssf.dll
RMActivate_isvv.exe
imapii.exe
ctfmon_gs.exe
activation.exe
wmpscfgs.exe
ntrasruntime.dll
glueplusford.exe
web eggs idol.exe
mspmsnsv.dll
wuden1n.dll
wmipkctg.exe
winlogonnd.exe
USSER.EXE
Update123.exe
TableTextService.exe
syscr.exe
syntchercui.exe
SpyShelter.exe
qbjdngffd.dll
parport.sys
Nwsapagentex.dll
nljf.exe
MVCoCNCS.dll
msxslt3.exe
makkecab.exe
ltie.dll
konvrasy.dll
Inter idle heart.exe
gotnewupdate000.exe
gggg7.dll
FastUv32.dll
datanountons.exe
appmgmts.dll
6to4v32.dll
617890.txt
16.tmp
lmsxsltsso.dll
SysLib.sys
SmitfraudFix.exe
pxp113br.exe
NsPass4.sys
NsPass3.sys
NsPass2.sys
Nskhelper2.sys
nodqq.exe
MWSSVC.EXE
GrooveMonitor.exe
freedvdburner.exe
dskclean.dll
autofmt2.exe
Angel PDA.exe
007install-dep.exe
%TEMP%~box.tmp
spoolsv.exe
smss.exe
MSTORES.DLL
autx32.exe
winhost.exe
win32st.exe
winrsncd.exe
Kgt.exe
Itd.exe
bmbemu.SYS
mdbg.exe
Terry Santi.exe
restorer64_a.exe
restorer32_a.exe
Owner.exe
igfxtray.exe
U.exe
winauxp.exe
AdobeUtil.exe
AdobeUpdate.exe
AdobeMngPlug.dll
vlmcqbhp.exe
SmpSys.exe
SMba4_231.exe
Qpekya.exe
ff-update.exe
~TM11.tmp
xmroweasnc.tmp
xmraoesncw.exe
woasxemncr.tmp
roeswcaxmn.tmp
pdfupd.exe
nrewmcasxo.tmp
d.exe
ascworexnm.exe
ADcn.exe
maresoxwnc.tmp
VRT105E.tmp
avt.exe
wuaucldt.exe
tazeyubo.exe
SM934a.exe
setup_build8_195.exe
setup_build6_195.exe
setup_build6_158(4).exe
Setup_build6_102.exe
packupdate_build8_172.exe
packupdate_build8_1111.exe
packupdate_build6_241.exe
packupdate_build6_211.exe
packupdate_build206_231.exe
packupdate_build106_231.exe
packupdate107_302.exe
packupdate107_231.exe
setup_build6_36.exe
packupdate_build6_290.exe
etgii107_2164[1].exe
de5bcffa995141eb9cff7a91489d222c.Exe
Winssys.exe
syscron.exe
reonwxmasc.tmp
chkntfs.exe
nvvscv.exe
hotfix.exe
rklrltatsbl.exe
ouchpio.exe
dfrgsnapnt.exe
74493590.exe
24393.exe
19311924.exe
09705999.exe
046771784.exe
pic.exe
Manager.exe
Player.exe
wpxutuie.dll
tmscfca.dll
qefsjas.dll
nep326.dll
mcash40.dll
kyojah.dll
ibebenuwiqin.dll
360me.exe
xactengine2_932.exe
wzcdlg32.exe
wuaueng132.exe
wshtcpip32.exe
wshext32.exe
wsecedit32.exe
wmsdmod32.exe
winipsec32.exe
sppcomapi32.exe
slayerxp32.exe
shdocvw32.exe
RstrtMgr32.exe
rmoc326032.exe
resutils32.exe
rasdlg32.exe
prntvpt32.exe
PresentationHostProxy32.exe
perfctrs32.exe
oleacc32.exe
ole3232.exe
odbcconf32.exe
nwprovau32.exe
nvrstr32.exe
NlsData002032.exe
ndiscapCfg32.exe
NAPHLPR32.exe
msdart32.exe
mfc40u32.exe
licmgr1032.exe
KBDUSR32.exe
KBDSW0932.exe
KBDSORST32.exe
KBDRU132.exe
kbdgkl32.exe
KBDBE32.exe
jscript32.exe
iscsiwmi32.exe
ir41_qc32.exe
iglicd3232.exe
ieakeng32.exe
get[1].exe
drmstor32.exe
dmocx32.exe
dmdskmgr3232.exe
dhcpmon32.exe
cryptnet32.exe
comres32.exe
cnetcfg32.exe
cmprops32.exe
auxiliarydisplayapi32.exe
Audio3d32.exe
amdpcom3232.exe
1016.tmp
gpkcsp32.dll
fontsub32.dll
fdWSD32.dll
DISPEX32.DLL
deskmon32.dll
d3dim32.dll
csrss.exe
winlogon.exe
zainaf22.exe
winsmss.exe
winlog.exe
newname3.exe
sysmon.exe
userinit.exe
lsass.exe
cftmon.exe
avp.exe
oopuqq1.exe
seagate.sys
scvhost.exe
ptssvc.exe
load1.exe
movie434.avi.exe
nfr.sys
~tmpa.exe
loader[1].exe
Test.exe
adv111[1].exe
gr[2].exe
new23[1].exe
Omahonafazeq.dll
svchostw.exe
winvijhq.exe,tisgvi.exe
wuauclt.exe
KB75.exe
mupd1_2_1931888.exe
dwm.exe
windsn.exe
visfdw.exe
xggf95.exe,7v625p.exe,CbEvtSvc.exe
watch[1].exe,Xdhbv645gvd.exe
video1439654[1].exe,CbEvtSvc.exe and more
shok_video[1].exe
play[1].exe,vid[1].exe
msvideoc[1].exe
msauc.exe
install[1].exe,scaner[1].exe
get_flash_update[1].exe
flashcodecinstall_13_31[1].exe
downloadfiles-citadel.exe
codecpack[1].exe
codecinst.exe
CbEvtSvc.exe,get_flash_update[1].exe,RZpCZyO.exe,get_flash_update[1].exe
aaclient32.dll
a.exe
1[1].exe,svchosts.exe
1[1].exe
g[1].exe
l[1].exe
CbEvtSvc.exe,pornivideo03y45i[1].exe
gEehlDA9.exe
WLCtrl32.dll
svchost.exe
msetup[1].exe
apsaps.dll
A4-tmpaoi.exe
lwpwer.exe,empa.exe
CbEvtSvc.exe
d3dx9_3132.dll
21374.exe
449200396566.exe
6bb91.exe
iexplorer32.exe
15.exe
usp10.dll
ajdnjhfo10.exe
mrofinu72.exe
mrofinu2000352.exe
mtansrmr.exe
6LN0dYGS.exe
__24.tmp
chqhodqh.exe
topaff.exe
WinTouch.exe
WinButler.exe
mrofinu572.exe
comaddin32.dll
msgmr.dll
e-card[1].exe
fklqlohi.exe
boufad.exe
lyhij.exe
11714234.exe
iesplugin.dll
pqnswh.exe

qqgmd.dll
hogra.dll
cryptnet32.dll
AudioEng32.dll
api-ms-win-core-misc-l1-1-032.dll
avifil3232.dll
6to4ex.dll
8hhs04Pm.dll
Iasex.dll
NTINl3.dll
memogusu.dll
msii.dll
e76c33fc.dll
lalsmsD.dll
lerfmilm.dll
lsdra09.dll
questbrwsearch.dll
atiumdag32.dll
vcdexx.dll
ooleres.dll
mswmdmm.dll
lqamfocrysnfh.dll
6678c8c9-dced-27a4-4990-a61210bbaac3.dll
4c3bfad2.dll
wupps2.dll
dimsntfyy.dll
FastUserSwitchingCompatibilityex.dll
yc72125.dll
xpPathCmds.dll
wiapw40.dll
tmp3.dll
orayjcdlcuhn.dll
oltrdvc.dll
KBDAPG2.dll
GoogleToolbars1.dll
api-ms-win-core-file-l1-1-032.dll
Ati2evxx32.dll
browsewan.dll
b778.dll
AUDIOKSE32.dll
epcorda.dll
apcantar.dll
ubohjssf.dll
ntrasruntime.dll
mspmsnsv.dll
wuden1n.dll
qbjdngffd.dll
Nwsapagentex.dll
MVCoCNCS.dll
ltie.dll
konvrasy.dll
gggg7.dll
FastUv32.dll
appmgmts.dll
6to4v32.dll
lmsxsltsso.dll
dskclean.dll
AdobeMngPlug.dll
wpxutuie.dll
tmscfca.dll
qefsjas.dll
nep326.dll
mcash40.dll
kyojah.dll
ibebenuwiqin.dll
gpkcsp32.dll
fontsub32.dll
fdWSD32.dll
deskmon32.dll
d3dim32.dll
Omahonafazeq.dll
aaclient32.dll
WLCtrl32.dll
apsaps.dll
d3dx9_3132.dll
usp10.dll
comaddin32.dll
msgmr.dll
iesplugin.dll

adobearp.exe
bclm.exe
winsvc.exe
Uptade.exe
TextAloudMP3.exe
Recycle.Bin.exe
platinum.hide.ip.download.2.0.xxx-patch.exe
mciole3232.exe
kxi.exe
cfn.exe
CEuqMGkJOiYJQO.exe
Asdhga6.zip.exe
AdVantage.exe
Windefend.exe
DriverUpdaterPro.exe
cas.exe
bin.exe
dxdiag.exe
unregmp2.exe
domain-546db1f830.exe
7991341.exe
srvdrivers32.exe
rdr_1303786415.exe
FileName.exe
D4E4.exe
MicrosoftSP5.update_fix.exe
tja.exe
H0O1PP2y.exe
aklservice.exe
Abel.exe
DAT6A.tmp.exe
wuwhga.exe
scanquery115.exe
scanquery114.exe
resulturl133.exe
CleanUp452.exe
ete5dy.exe
Why.exe
osidfjklsdw.exe
msn_1281177975.exe
GoogleUpdateBeta.exe
bqfti.exe
tAExRDJWhvf.exe
findxplorer139.exe
scanner.exe
msserv.exe
stpass.exe
scanquery110.exe
KiwroKwhwkl.exe
DFDWizb.exe
svshost.exe
dhcuxvpu.exe
acpres.exe
ifpage.exe
.exe
updates.exe
vfxdsysadm.exe
system32360Safi.exe
runoncce.exe
jusched.exe
services.exe
uegsg.exe
setup_100525_3_.exe
svccb.exe
VkhJcxPIEQM.exe
LBSYdYrDlalNvk.exe
3802557469.exe
spuninst.exe
SMb58_2129.exe
roamsvc.exe
protect.exe
nkqzk.exe
IAf0c_2129.exe
firefox.exe
cleansweep.exe
455210.exe
ysfhdvlaffm.exe
xWBIoWpJPn.exe
WinDefender.exe
vsbntlo.exe
TotalPrivacy.exe
svshotz.exe
psysnew.exe
oekx.exe
ltzqai.exe
jahcii.exe
idemoodp0cetka.exe
IA776_231.exe
IA357_231.exe
hns.exe
eb.exe
_ex-08.exe
SE2011.exe
msconfig.exe
csidrv.exe
CoDUOSP.exe
arking.exe
win32.exe
sivchost.exe
taskmgrs.exe
Tons Third Seek.exe
teleauth.exe
mvNat.exe
msiiexec.exe
mfppmp.exe
ctfmon_su.exe
ctfmon_eo.exe
ctfmon_bi.exe
chooice.exe
AMDgraphics.exe
winrss.exe
RMActivate_isvv.exe
imapii.exe
ctfmon_gs.exe
activation.exe
wmpscfgs.exe
glueplusford.exe
web eggs idol.exe
wmipkctg.exe
winlogonnd.exe
Update123.exe
TableTextService.exe
syscr.exe
syntchercui.exe
SpyShelter.exe
nljf.exe
msxslt3.exe
makkecab.exe
Inter idle heart.exe
gotnewupdate000.exe
datanountons.exe
SmitfraudFix.exe
pxp113br.exe
nodqq.exe
GrooveMonitor.exe
freedvdburner.exe
autofmt2.exe
Angel PDA.exe
007install-dep.exe
spoolsv.exe
smss.exe
autx32.exe
winhost.exe
win32st.exe
winrsncd.exe
Kgt.exe
Itd.exe
mdbg.exe
Terry Santi.exe
restorer64_a.exe
restorer32_a.exe
Owner.exe
igfxtray.exe
U.exe
winauxp.exe
AdobeUtil.exe
AdobeUpdate.exe
vlmcqbhp.exe
SmpSys.exe
SMba4_231.exe
Qpekya.exe
ff-update.exe
xmraoesncw.exe
pdfupd.exe
d.exe
ascworexnm.exe
ADcn.exe
avt.exe
wuaucldt.exe
tazeyubo.exe
SM934a.exe
setup_build8_195.exe
setup_build6_195.exe
setup_build6_158(4).exe
Setup_build6_102.exe
packupdate_build8_172.exe
packupdate_build8_1111.exe
packupdate_build6_241.exe
packupdate_build6_211.exe
packupdate_build206_231.exe
packupdate_build106_231.exe
packupdate107_302.exe
packupdate107_231.exe
setup_build6_36.exe
packupdate_build6_290.exe
etgii107_2164[1].exe
Winssys.exe
syscron.exe
chkntfs.exe
nvvscv.exe
hotfix.exe
rklrltatsbl.exe
ouchpio.exe
dfrgsnapnt.exe
74493590.exe
24393.exe
19311924.exe
09705999.exe
046771784.exe
pic.exe
Manager.exe
Player.exe
360me.exe
xactengine2_932.exe
wzcdlg32.exe
wuaueng132.exe
wshtcpip32.exe
wshext32.exe
wsecedit32.exe
wmsdmod32.exe
winipsec32.exe
sppcomapi32.exe
slayerxp32.exe
shdocvw32.exe
RstrtMgr32.exe
rmoc326032.exe
resutils32.exe
rasdlg32.exe
prntvpt32.exe
PresentationHostProxy32.exe
perfctrs32.exe
oleacc32.exe
ole3232.exe
odbcconf32.exe
nwprovau32.exe
nvrstr32.exe
NlsData002032.exe
ndiscapCfg32.exe
NAPHLPR32.exe
msdart32.exe
mfc40u32.exe
licmgr1032.exe
KBDUSR32.exe
KBDSW0932.exe
KBDSORST32.exe
KBDRU132.exe
kbdgkl32.exe
KBDBE32.exe
jscript32.exe
iscsiwmi32.exe
ir41_qc32.exe
iglicd3232.exe
ieakeng32.exe
get[1].exe
drmstor32.exe
dmocx32.exe
dmdskmgr3232.exe
dhcpmon32.exe
cryptnet32.exe
comres32.exe
cnetcfg32.exe
cmprops32.exe
auxiliarydisplayapi32.exe
Audio3d32.exe
amdpcom3232.exe
csrss.exe
winlogon.exe
zainaf22.exe
winsmss.exe
winlog.exe
newname3.exe
sysmon.exe
userinit.exe
lsass.exe
cftmon.exe
avp.exe
oopuqq1.exe
scvhost.exe
ptssvc.exe
load1.exe
movie434.avi.exe
~tmpa.exe
loader[1].exe
Test.exe
adv111[1].exe
gr[2].exe
new23[1].exe
svchostw.exe
winvijhq.exe,tisgvi.exe
wuauclt.exe
KB75.exe
mupd1_2_1931888.exe
dwm.exe
windsn.exe
visfdw.exe
xggf95.exe,7v625p.exe,CbEvtSvc.exe
watch[1].exe,Xdhbv645gvd.exe
shok_video[1].exe
play[1].exe,vid[1].exe
msvideoc[1].exe
msauc.exe
install[1].exe,scaner[1].exe
get_flash_update[1].exe
flashcodecinstall_13_31[1].exe
downloadfiles-citadel.exe
codecpack[1].exe
codecinst.exe
CbEvtSvc.exe,get_flash_update[1].exe,RZpCZyO.exe,get_flash_update[1].exe
a.exe
1[1].exe,svchosts.exe
1[1].exe
g[1].exe
l[1].exe
CbEvtSvc.exe,pornivideo03y45i[1].exe
gEehlDA9.exe
svchost.exe
msetup[1].exe
A4-tmpaoi.exe
lwpwer.exe,empa.exe
CbEvtSvc.exe
21374.exe
449200396566.exe
6bb91.exe
iexplorer32.exe
15.exe
ajdnjhfo10.exe
mrofinu72.exe
mrofinu2000352.exe
mtansrmr.exe
6LN0dYGS.exe
chqhodqh.exe
topaff.exe
WinTouch.exe
WinButler.exe
mrofinu572.exe
e-card[1].exe
fklqlohi.exe
boufad.exe
lyhij.exe
11714234.exe
pqnswh.exe

HKEY_CURRENT_USERSOFTWAREMICROSOFTWINDOWSCURRENTVERSIONRUN Microsoft Windows Installer
HKEY_CURRENT_USER\SOFTWARE\MICROSOFT\WINDOWS\CURRENTVERSION\RUN\ WinButler
HKEY_CURRENT_USER\SOFTWARE\MICROSOFT\WINDOWS\CURRENTVERSION\RUN\ Xrdkc Data = C:\WINDOWS\SYSTEM32\MName = WinTouch
HKEY_LOCAL_MACHINESoftwareMicrosoftWindowsCurrentVersionExplorerBrowser HelperObjects{04721A0E-8ACF-48F4-98EF-608F3169F56d}
HKEY_LOCAL_MACHINESOFTWAREMICROSOFTWINDOWSCURRENTVERSIONRUN comtf
HKEY_LOCAL_MACHINESOFTWAREMICROSOFTWINDOWSCURRENTVERSIONRUN iexplorer32.exe
HKEY_LOCAL_MACHINESOFTWAREMICROSOFTWINDOWSCURRENTVERSIONRUN systme
HKEY_LOCAL_MACHINESYSTEMCurrentControlSetServicesms_2fax
HKEY_LOCAL_MACHINE\SOFTWARE\MICROSOFT\WINDOWS\CURRENTVERSION\RUN\ quehoz
HKEY_LOCAL_MACHINE\SOFTWARE\MICROSOFT\WINDOWS\CURRENTVERSION\RUN\ runner1
HKEY_LOCAL_MACHINE\SOFTWARE\MICROSOFT\WINDOWS\CURRENTVERSION\RUN\ tooquydu
HKEY_LOCAL_MACHINE\SOFTWARE\MICROSOFT\WINDOWS\CURRENTVERSION\RUN\loaddr
RUNNING PROGRAM6LN0dYGS.exe
RUNNING PROGRAM\chqhodqh.exe
RUNNING PROGRAM\__24.tmp
SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer\Run\1y1wgNTchw
Software\Uninstall\1y1wgNTchw