Update v2014.07.26.09 Entire System32 Quarantined?

tbowyer · July 26, 2014

So I have auto updates set and today I walked to my computer to see what it looks like is my entire System32 folder in quarantine? Anyone else having this issue today? Unless I was absolutley destroyed last night by rootkits, I think there is an issue with the update.

daledoc1 · July 26, 2014

Hi:

No, nothing like that has been reported that I know of.

(I am on that same database version with no issues.)

Can you please post the scan log with those detections?

(Let us know if you need help with that.)

Thanks!

tbowyer · July 26, 2014

Another update, I checked my scan logs. I have a Hyper Scan set every 6 hours. With update 2014.07.26.08 nothing was detected. That was today 6 hours ago.

daledoc1 · July 26, 2014

Hi:

Well, we'll deal with the specifics of your scan schedule later (as it's not the recommended schedule with the recommended scan types).

More pressing at this time:

Can you please post back with the scan log showing the detections?

Dashboard > History > Scan Logs --> double-click to select the log you want > Export to .txt file > save it to your desktop and then attach it to your reply (there are multiple ways to perform the same task).

Thanks!

tbowyer · July 26, 2014

Yea I got the log it's just a little long . Let me break it up into sections.

daledoc1 · July 26, 2014

Thanks.

Needless to say, don't delete anything from quarantine just yet.

tbowyer · July 26, 2014

Malwarebytes Anti-Malware
www.malwarebytes.org

Scan Date: 7/26/2014
Scan Time: 3:08:03 PM
Logfile: mbam7262014fullscan.txt
Administrator: Yes

Version: 2.00.2.1012
Malware Database: v2014.07.26.09
Rootkit Database: v2014.07.17.01
License: Premium
Malware Protection: Disabled
Malicious Website Protection: Disabled
Self-protection: Disabled

OS: Windows 7 Service Pack 1
CPU: x64
File System: NTFS
User: Bowyer

Scan Type: Threat Scan
Result: Completed
Objects Scanned: 333655
Time Elapsed: 10 min, 52 sec

Memory: Enabled
Startup: Enabled
Filesystem: Enabled
Archives: Enabled
Rootkits: Enabled
Heuristics: Enabled
PUP: Enabled
PUM: Enabled

Processes: 2
Trojan.FakeMS.ED, C:\Windows\System32\lsm.exe, 632, , [2e7360407605e74fce2421804ab7da26]
Trojan.FakeMS.ED, C:\Windows\System32\wbem\WmiPrvSE.exe, 1396, , [3e63821e63180f2749a9445dcf321be5]

Modules: 82
Trojan.FakeMS.ED, C:\Windows\System32\mpr.dll, , [b7eaedb3e9929c9a03ef821ff9085fa1],
Trojan.FakeMS.ED, C:\Windows\System32\mpr.dll, , [b7eaedb3e9929c9a03ef821ff9085fa1],
Trojan.FakeMS.ED, C:\Windows\System32\IPHLPAPI.DLL, , [d1d0118ff784fb3b37bb643da65b6a96],
Trojan.FakeMS.ED, C:\Windows\System32\IPHLPAPI.DLL, , [d1d0118ff784fb3b37bb643da65b6a96],
Trojan.FakeMS.ED, C:\Windows\System32\winnsi.dll, , [efb23f619ae191a53bb7eeb38d7435cb],
Trojan.FakeMS.ED, C:\Windows\System32\winnsi.dll, , [efb23f619ae191a53bb7eeb38d7435cb],
Trojan.FakeMS.ED, C:\Windows\System32\winmm.dll, , [e0c1bfe122592412a9494e53b150dc24],
Trojan.FakeMS.ED, C:\Windows\System32\winmm.dll, , [e0c1bfe122592412a9494e53b150dc24],
Trojan.FakeMS.ED, C:\Windows\System32\uxtheme.dll, , [2978d6ca8cefd16501f12c75e51cd42c],
Trojan.FakeMS.ED, C:\Windows\System32\uxtheme.dll, , [2978d6ca8cefd16501f12c75e51cd42c],
Trojan.FakeMS.ED, C:\Windows\System32\dwmapi.dll, , [128fd1cf0378f73f9d55336eeb167789],
Trojan.FakeMS.ED, C:\Windows\System32\dwmapi.dll, , [128fd1cf0378f73f9d55336eeb167789],
Trojan.FakeMS.ED, C:\Windows\System32\propsys.dll, , [ecb5356b6318043235bde0c154ad9769],
Trojan.FakeMS.ED, C:\Windows\System32\propsys.dll, , [ecb5356b6318043235bde0c154ad9769],
Trojan.FakeMS.ED, C:\Windows\System32\ntmarta.dll, , [dac7e6ba5c1ff83e5f93d8c96d949868],
Trojan.FakeMS.ED, C:\Windows\System32\ntmarta.dll, , [dac7e6ba5c1ff83e5f93d8c96d949868],
Trojan.FakeMS.ED, C:\Windows\System32\apphelp.dll, , [8d14534d85f6072f9e54524faa57a15f],
Trojan.FakeMS.ED, C:\Windows\System32\apphelp.dll, , [8d14534d85f6072f9e54524faa57a15f],
Trojan.FakeMS.ED, C:\Windows\System32\cabinet.dll, , [8b16544c4b30c1758f63376aab562dd3],
Trojan.FakeMS.ED, C:\Windows\System32\cabinet.dll, , [8b16544c4b30c1758f63376aab562dd3],
Trojan.FakeMS.ED, C:\Windows\System32\webio.dll, , [cfd2c5db3b400135767ce9b8b94850b0],
Trojan.FakeMS.ED, C:\Windows\System32\webio.dll, , [cfd2c5db3b400135767ce9b8b94850b0],
Trojan.FakeMS.ED, C:\Windows\System32\xmllite.dll, , [aaf7f9a7275476c011e1237e946d966a],
Trojan.FakeMS.ED, C:\Windows\System32\xmllite.dll, , [aaf7f9a7275476c011e1237e946d966a],
Trojan.FakeMS.ED, C:\Windows\System32\dbghelp.dll, , [b5ec59478dee4ee848aa336e46bb19e7],
Trojan.FakeMS.ED, C:\Windows\System32\dbghelp.dll, , [b5ec59478dee4ee848aa336e46bb19e7],
Trojan.FakeMS.ED, C:\Windows\System32\ntshrui.dll, , [4e53dec2275470c64aa82081738edd23],
Trojan.FakeMS.ED, C:\Windows\System32\ntshrui.dll, , [4e53dec2275470c64aa82081738edd23],
Trojan.FakeMS.ED, C:\Windows\System32\srvcli.dll, , [cdd4821e89f21b1b6e84b1f0be434db3],
Trojan.FakeMS.ED, C:\Windows\System32\srvcli.dll, , [cdd4821e89f21b1b6e84b1f0be434db3],
Trojan.FakeMS.ED, C:\Windows\System32\cscapi.dll, , [bde4544c3b407db9eb071e838879fb05],
Trojan.FakeMS.ED, C:\Windows\System32\cscapi.dll, , [bde4544c3b407db9eb071e838879fb05],
Trojan.FakeMS.ED, C:\Windows\System32\mswsock.dll, , [237e118f1269af875d955e43d52c847c],
Trojan.FakeMS.ED, C:\Windows\System32\mswsock.dll, , [237e118f1269af875d955e43d52c847c],
Trojan.FakeMS.ED, C:\Windows\System32\wship6.dll, , [bde44c545f1c49ed9c569f02629f9e62],
Trojan.FakeMS.ED, C:\Windows\System32\wship6.dll, , [bde44c545f1c49ed9c569f02629f9e62],
Trojan.FakeMS.ED, C:\Windows\System32\RPCRTREMOTE.DLL, , [f0b1722e037835014aa88e1335cc9a66],
Trojan.FakeMS.ED, C:\Windows\System32\RPCRTREMOTE.DLL, , [f0b1722e037835014aa88e1335cc9a66],
Trojan.FakeMS.ED, C:\Windows\System32\EXPLORERFRAME.DLL, , [8a17ebb59cdfd95d8a68faa749b86799],
Trojan.FakeMS.ED, C:\Windows\System32\EXPLORERFRAME.DLL, , [8a17ebb59cdfd95d8a68faa749b86799],
Trojan.FakeMS.ED, C:\Windows\System32\duser.dll, , [732e68382556c0766c86cad723de847c],
Trojan.FakeMS.ED, C:\Windows\System32\duser.dll, , [732e68382556c0766c86cad723de847c],
Trojan.FakeMS.ED, C:\Windows\System32\dui70.dll, , [168b4c54f28966d0f8fa8c15cb3633cd],
Trojan.FakeMS.ED, C:\Windows\System32\dui70.dll, , [168b4c54f28966d0f8fa8c15cb3633cd],
Trojan.FakeMS.ED, C:\Windows\System32\secur32.dll, , [752cc5db641778be7f73138e4cb5857b],
Trojan.FakeMS.ED, C:\Windows\System32\secur32.dll, , [752cc5db641778be7f73138e4cb5857b],
Trojan.FakeMS.ED, C:\Windows\System32\SEARCHFOLDER.DLL, , [831efea2b3c8b086777b71306f9249b7],
Trojan.FakeMS.ED, C:\Windows\System32\SEARCHFOLDER.DLL, , [831efea2b3c8b086777b71306f9249b7],
Trojan.FakeMS.ED, C:\Windows\System32\NETWORKEXPLORER.DLL, , [0998118f3843d462f200544d649dfb05],
Trojan.FakeMS.ED, C:\Windows\System32\NETWORKEXPLORER.DLL, , [0998118f3843d462f200544d649dfb05],
Trojan.FakeMS.ED, C:\Windows\System32\netapi32.dll, , [c9d8edb3fd7e8bab10e2c9d8d42d04fc],
Trojan.FakeMS.ED, C:\Windows\System32\netapi32.dll, , [c9d8edb3fd7e8bab10e2c9d8d42d04fc],
Trojan.FakeMS.ED, C:\Windows\System32\netutils.dll, , [2c7538683c3fa2949260e8b9de23e41c],
Trojan.FakeMS.ED, C:\Windows\System32\netutils.dll, , [2c7538683c3fa2949260e8b9de23e41c],
Trojan.FakeMS.ED, C:\Windows\System32\wkscli.dll, , [b5ecedb382f9181ecf23346de0212cd4],
Trojan.FakeMS.ED, C:\Windows\System32\wkscli.dll, , [b5ecedb382f9181ecf23346de0212cd4],
Trojan.FakeMS.ED, C:\Windows\System32\drprov.dll, , [4d541f812556f442fef4534e40c101ff],
Trojan.FakeMS.ED, C:\Windows\System32\drprov.dll, , [4d541f812556f442fef4534e40c101ff],
Trojan.FakeMS.ED, C:\Windows\System32\ntlanman.dll, , [a9f81c8433481125f3ff475a728fb24e],
Trojan.FakeMS.ED, C:\Windows\System32\ntlanman.dll, , [a9f81c8433481125f3ff475a728fb24e],
Trojan.FakeMS.ED, C:\Windows\System32\davclnt.dll, , [a2ff0a96582367cfc032841d748d33cd],
Trojan.FakeMS.ED, C:\Windows\System32\davclnt.dll, , [a2ff0a96582367cfc032841d748d33cd],
Trojan.FakeMS.ED, C:\Windows\System32\samcli.dll, , [88191c84de9d72c4ee04c4ddcb3630d0],
Trojan.FakeMS.ED, C:\Windows\System32\samcli.dll, , [88191c84de9d72c4ee04c4ddcb3630d0],
Trojan.FakeMS.ED, C:\Windows\System32\samlib.dll, , [a0013070bebd0135d51dc1e0956c8f71],
Trojan.FakeMS.ED, C:\Windows\System32\samlib.dll, , [a0013070bebd0135d51dc1e0956c8f71],
Trojan.FakeMS.ED, C:\Windows\System32\PORTABLEDEVICEAPI.DLL, , [475a712f80fb68ce8e64f8a9a958bd43],
Trojan.FakeMS.ED, C:\Windows\System32\PORTABLEDEVICEAPI.DLL, , [475a712f80fb68ce8e64f8a9a958bd43],
Trojan.FakeMS.ED, C:\Windows\System32\provsvc.dll, , [257c38684833f14503ef8a179f62dd23],
Trojan.FakeMS.ED, C:\Windows\System32\provsvc.dll, , [257c38684833f14503ef8a179f62dd23],
Trojan.FakeMS.ED, C:\Windows\System32\linkinfo.dll, , [79282b75a2d9ac8ab43e584951b056aa],
Trojan.FakeMS.ED, C:\Windows\System32\linkinfo.dll, , [79282b75a2d9ac8ab43e584951b056aa],
Trojan.FakeMS.ED, C:\Windows\SysWOW64\actxprxy.dll, , [dcc5d8c8b3c883b349a9069b6e93ff01],
Trojan.FakeMS.ED, C:\Windows\SysWOW64\actxprxy.dll, , [dcc5d8c8b3c883b349a9069b6e93ff01],
Trojan.FakeMS.ED, C:\Windows\SysWOW64\fundisc.dll, , [9d041f8102796bcb7082c5dc17ea8a76],
Trojan.FakeMS.ED, C:\Windows\SysWOW64\fundisc.dll, , [9d041f8102796bcb7082c5dc17ea8a76],
Trojan.FakeMS.ED, C:\Windows\SysWOW64\oleacc.dll, , [0f922a76a3d839fd18da574a798860a0],
Trojan.FakeMS.ED, C:\Windows\SysWOW64\oleacc.dll, , [0f922a76a3d839fd18da574a798860a0],
Trojan.FakeMS.ED, C:\Windows\SysWOW64\oleaut32.dll, , [3a67d4cc156604326a88079a14edc43c],
Trojan.FakeMS.ED, C:\Windows\SysWOW64\oleaut32.dll, , [3a67d4cc156604326a88079a14edc43c],
Trojan.FakeMS.ED, C:\Windows\SysWOW64\THUMBCACHE.DLL, , [5051c8d83744f83e9f53e1c0c53c5ea2],
Trojan.FakeMS.ED, C:\Windows\SysWOW64\THUMBCACHE.DLL, , [5051c8d83744f83e9f53e1c0c53c5ea2],

Registry Keys: 8182
Trojan.FakeMS.ED, HKLM\SOFTWARE\CLASSES\CLSID\{042dc17c-023f-43df-a3ec-982b4dc78a64}, , [ecb5356b6318043235bde0c154ad9769],
Trojan.FakeMS.ED, HKLM\SOFTWARE\WOW6432NODE\CLASSES\CLSID\{042DC17C-023F-43DF-A3EC-982B4DC78A64}, , [ecb5356b6318043235bde0c154ad9769],
Trojan.FakeMS.ED, HKLM\SOFTWARE\CLASSES\CLSID\{1f486a52-3cb1-48fd-8f50-b8dc300d9f9d}, , [ecb5356b6318043235bde0c154ad9769],
Trojan.FakeMS.ED, HKLM\SOFTWARE\WOW6432NODE\CLASSES\CLSID\{1F486A52-3CB1-48FD-8F50-B8DC300D9F9D}, , [ecb5356b6318043235bde0c154ad9769],
Trojan.FakeMS.ED, HKLM\SOFTWARE\CLASSES\CLSID\{76765b11-3f95-4af2-ac9d-ea55d8994f1a}, , [ecb5356b6318043235bde0c154ad9769],
Trojan.FakeMS.ED, HKLM\SOFTWARE\WOW6432NODE\CLASSES\CLSID\{76765B11-3F95-4AF2-AC9D-EA55D8994F1A}, , [ecb5356b6318043235bde0c154ad9769],
Trojan.FakeMS.ED, HKLM\SOFTWARE\CLASSES\CLSID\{8d80504a-0826-40c5-97e1-ebc68f953792}, , [ecb5356b6318043235bde0c154ad9769],
Trojan.FakeMS.ED, HKLM\SOFTWARE\WOW6432NODE\CLASSES\CLSID\{8D80504A-0826-40C5-97E1-EBC68F953792}, , [ecb5356b6318043235bde0c154ad9769],
Trojan.FakeMS.ED, HKLM\SOFTWARE\CLASSES\CLSID\{97e467b4-98c6-4f19-9588-161b7773d6f6}, , [ecb5356b6318043235bde0c154ad9769],
Trojan.FakeMS.ED, HKLM\SOFTWARE\WOW6432NODE\CLASSES\CLSID\{97E467B4-98C6-4F19-9588-161B7773D6F6}, , [ecb5356b6318043235bde0c154ad9769],
Trojan.FakeMS.ED, HKLM\SOFTWARE\CLASSES\CLSID\{9a02e012-6303-4e1e-b9a1-630f802592c5}, , [ecb5356b6318043235bde0c154ad9769],
Trojan.FakeMS.ED, HKLM\SOFTWARE\WOW6432NODE\CLASSES\CLSID\{9A02E012-6303-4E1E-B9A1-630F802592C5}, , [ecb5356b6318043235bde0c154ad9769],
Trojan.FakeMS.ED, HKLM\SOFTWARE\CLASSES\CLSID\{9cfc2df3-6ba3-46ef-a836-e519e81f0ec4}, , [ecb5356b6318043235bde0c154ad9769],
Trojan.FakeMS.ED, HKLM\SOFTWARE\WOW6432NODE\CLASSES\CLSID\{9CFC2DF3-6BA3-46EF-A836-E519E81F0EC4}, , [ecb5356b6318043235bde0c154ad9769],
Trojan.FakeMS.ED, HKLM\SOFTWARE\CLASSES\CLSID\{b8967f85-58ae-4f46-9fb2-5d7904798f4b}, , [ecb5356b6318043235bde0c154ad9769],
Trojan.FakeMS.ED, HKLM\SOFTWARE\WOW6432NODE\CLASSES\CLSID\{B8967F85-58AE-4F46-9FB2-5D7904798F4B}, , [ecb5356b6318043235bde0c154ad9769],
Trojan.FakeMS.ED, HKLM\SOFTWARE\CLASSES\CLSID\{C2566514-DD44-4c6c-AAAD-FBD2F18D8DEE}, , [ecb5356b6318043235bde0c154ad9769],
Trojan.FakeMS.ED, HKLM\SOFTWARE\WOW6432NODE\CLASSES\CLSID\{C2566514-DD44-4C6C-AAAD-FBD2F18D8DEE}, , [ecb5356b6318043235bde0c154ad9769],
Trojan.FakeMS.ED, HKLM\SOFTWARE\CLASSES\CLSID\{F562A2C8-E850-4F05-8E7A-E7192E4E6C23}, , [ecb5356b6318043235bde0c154ad9769],
Trojan.FakeMS.ED, HKLM\SOFTWARE\WOW6432NODE\CLASSES\CLSID\{F562A2C8-E850-4F05-8E7A-E7192E4E6C23}, , [ecb5356b6318043235bde0c154ad9769],
Trojan.FakeMS.ED, HKLM\SOFTWARE\CLASSES\CLSID\{2087c2f4-2cef-4953-a8ab-66779b670495}, , [5051514fccaf58deb939ddc4fe0359a7],
Trojan.FakeMS.ED, HKLM\SOFTWARE\CLASSES\TYPELIB\{662901fc-6951-4854-9eb2-d9a2570f2b2e}, , [5051514fccaf58deb939ddc4fe0359a7],
Trojan.FakeMS.ED, HKLM\SOFTWARE\CLASSES\INTERFACE\{016FE2EC-B2C8-45F8-B23B-39E53A75396B}, , [5051514fccaf58deb939ddc4fe0359a7],
Trojan.FakeMS.ED, HKLM\SOFTWARE\CLASSES\INTERFACE\{F97F4E15-B787-4212-80D1-D380CBBF982E}, , [5051514fccaf58deb939ddc4fe0359a7],
Trojan.FakeMS.ED, HKLM\SOFTWARE\WOW6432NODE\CLASSES\INTERFACE\{016FE2EC-B2C8-45F8-B23B-39E53A75396B}, , [5051514fccaf58deb939ddc4fe0359a7],
Trojan.FakeMS.ED, HKLM\SOFTWARE\WOW6432NODE\CLASSES\INTERFACE\{F97F4E15-B787-4212-80D1-D380CBBF982E}, , [5051514fccaf58deb939ddc4fe0359a7],
Trojan.FakeMS.ED, HKLM\SOFTWARE\WOW6432NODE\CLASSES\TYPELIB\{662901fc-6951-4854-9eb2-d9a2570f2b2e}, , [5051514fccaf58deb939ddc4fe0359a7],
Trojan.FakeMS.ED, HKLM\SOFTWARE\CLASSES\WinHttp.WinHttpRequest.5.1, , [5051514fccaf58deb939ddc4fe0359a7],
Trojan.FakeMS.ED, HKLM\SOFTWARE\WOW6432NODE\CLASSES\WinHttp.WinHttpRequest.5.1, , [5051514fccaf58deb939ddc4fe0359a7],
Trojan.FakeMS.ED, HKLM\SOFTWARE\WOW6432NODE\CLASSES\CLSID\{2087C2F4-2CEF-4953-A8AB-66779B670495}, , [5051514fccaf58deb939ddc4fe0359a7],
Trojan.FakeMS.ED, HKLM\SOFTWARE\CLASSES\CLSID\{08244EE6-92F0-47f2-9FC9-929BAA2E7235}, , [4e53dec2275470c64aa82081738edd23],
Trojan.FakeMS.ED, HKLM\SOFTWARE\WOW6432NODE\CLASSES\CLSID\{08244EE6-92F0-47F2-9FC9-929BAA2E7235}, , [4e53dec2275470c64aa82081738edd23],
Trojan.FakeMS.ED, HKLM\SOFTWARE\CLASSES\CLSID\{0A88C858-7D0C-4549-9499-7DB05F0CB0BF}, , [4e53dec2275470c64aa82081738edd23],
Trojan.FakeMS.ED, HKLM\SOFTWARE\WOW6432NODE\CLASSES\CLSID\{0A88C858-7D0C-4549-9499-7DB05F0CB0BF}, , [4e53dec2275470c64aa82081738edd23],
Trojan.FakeMS.ED, HKLM\SOFTWARE\CLASSES\CLSID\{12367cf8-6222-4b34-8ca8-3ce703999e28}, , [4e53dec2275470c64aa82081738edd23],
Trojan.FakeMS.ED, HKLM\SOFTWARE\WOW6432NODE\CLASSES\CLSID\{12367CF8-6222-4B34-8CA8-3CE703999E28}, , [4e53dec2275470c64aa82081738edd23],
Trojan.FakeMS.ED, HKLM\SOFTWARE\CLASSES\CLSID\{1A0391BF-9564-4294-B0A4-06C298929EF9}, , [4e53dec2275470c64aa82081738edd23],
Trojan.FakeMS.ED, HKLM\SOFTWARE\WOW6432NODE\CLASSES\CLSID\{1A0391BF-9564-4294-B0A4-06C298929EF9}, , [4e53dec2275470c64aa82081738edd23],
Trojan.FakeMS.ED, HKLM\SOFTWARE\CLASSES\CLSID\{40dd6e20-7c17-11ce-a804-00aa003ca9f6}, , [4e53dec2275470c64aa82081738edd23],
Trojan.FakeMS.ED, HKLM\SOFTWARE\WOW6432NODE\CLASSES\CLSID\{40DD6E20-7C17-11CE-A804-00AA003CA9F6}, , [4e53dec2275470c64aa82081738edd23],
Trojan.FakeMS.ED, HKLM\SOFTWARE\CLASSES\CLSID\{49F371E1-8C5C-4d9c-9A3B-54A6827F513C}, , [4e53dec2275470c64aa82081738edd23],
Trojan.FakeMS.ED, HKLM\SOFTWARE\WOW6432NODE\CLASSES\CLSID\{49F371E1-8C5C-4D9C-9A3B-54A6827F513C}, , [4e53dec2275470c64aa82081738edd23],
Trojan.FakeMS.ED, HKLM\SOFTWARE\CLASSES\CLSID\{59A437AB-74F3-4de2-AFE6-54203634C4DD}, , [4e53dec2275470c64aa82081738edd23],
Trojan.FakeMS.ED, HKLM\SOFTWARE\WOW6432NODE\CLASSES\CLSID\{59A437AB-74F3-4DE2-AFE6-54203634C4DD}, , [4e53dec2275470c64aa82081738edd23],
Trojan.FakeMS.ED, HKLM\SOFTWARE\CLASSES\CLSID\{6311429E-2F1A-4777-880F-C7289FD10169}, , [4e53dec2275470c64aa82081738edd23],
Trojan.FakeMS.ED, HKLM\SOFTWARE\WOW6432NODE\CLASSES\CLSID\{6311429E-2F1A-4777-880F-C7289FD10169}, , [4e53dec2275470c64aa82081738edd23],
Trojan.FakeMS.ED, HKLM\SOFTWARE\CLASSES\CLSID\{77F419AA-771A-45ff-AC66-7567FA3243D3}, , [4e53dec2275470c64aa82081738edd23],
Trojan.FakeMS.ED, HKLM\SOFTWARE\WOW6432NODE\CLASSES\CLSID\{77F419AA-771A-45FF-AC66-7567FA3243D3}, , [4e53dec2275470c64aa82081738edd23],
Trojan.FakeMS.ED, HKLM\SOFTWARE\CLASSES\CLSID\{7b4a83b6-f704-4b77-8e3d-c6087e3a21d2}, , [4e53dec2275470c64aa82081738edd23],
Trojan.FakeMS.ED, HKLM\SOFTWARE\WOW6432NODE\CLASSES\CLSID\{7B4A83B6-F704-4B77-8E3D-C6087E3A21D2}, , [4e53dec2275470c64aa82081738edd23],
Trojan.FakeMS.ED, HKLM\SOFTWARE\CLASSES\CLSID\{CFF9990B-6414-43F1-A526-14EA5EEAFBDA}, , [4e53dec2275470c64aa82081738edd23],
Trojan.FakeMS.ED, HKLM\SOFTWARE\WOW6432NODE\CLASSES\CLSID\{CFF9990B-6414-43F1-A526-14EA5EEAFBDA}, , [4e53dec2275470c64aa82081738edd23],
Trojan.FakeMS.ED, HKLM\SOFTWARE\CLASSES\CLSID\{d4f01ada-979c-491e-bac3-cd3c0e7bcf82}, , [4e53dec2275470c64aa82081738edd23],
Trojan.FakeMS.ED, HKLM\SOFTWARE\WOW6432NODE\CLASSES\CLSID\{D4F01ADA-979C-491E-BAC3-CD3C0E7BCF82}, , [4e53dec2275470c64aa82081738edd23],
Trojan.FakeMS.ED, HKLM\SOFTWARE\CLASSES\CLSID\{edb5f444-cb8d-445a-a523-ec5ab6ea33c7}, , [4e53dec2275470c64aa82081738edd23],
Trojan.FakeMS.ED, HKLM\SOFTWARE\CLASSES\APPID\{EDB5F444-CB8D-445A-A523-EC5AB6EA33C7}, , [4e53dec2275470c64aa82081738edd23],
Trojan.FakeMS.ED, HKLM\SOFTWARE\WOW6432NODE\CLASSES\APPID\{EDB5F444-CB8D-445A-A523-EC5AB6EA33C7}, , [4e53dec2275470c64aa82081738edd23],
Trojan.FakeMS.ED, HKLM\SOFTWARE\WOW6432NODE\CLASSES\CLSID\{EDB5F444-CB8D-445A-A523-EC5AB6EA33C7}, , [4e53dec2275470c64aa82081738edd23],
Trojan.FakeMS.ED, HKLM\SOFTWARE\CLASSES\CLSID\{f81e9010-6ea4-11ce-a7ff-00aa003ca9f6}, , [4e53dec2275470c64aa82081738edd23],
Trojan.FakeMS.ED, HKLM\SOFTWARE\WOW6432NODE\CLASSES\CLSID\{F81E9010-6EA4-11CE-A7FF-00AA003CA9F6}, , [4e53dec2275470c64aa82081738edd23],
Trojan.FakeMS.ED, HKLM\SOFTWARE\CLASSES\CLSID\{01E04581-4EEE-11d0-BFE9-00AA005B4383}, , [8a17ebb59cdfd95d8a68faa749b86799],
Trojan.FakeMS.ED, HKLM\SOFTWARE\WOW6432NODE\CLASSES\CLSID\{01E04581-4EEE-11D0-BFE9-00AA005B4383}, , [8a17ebb59cdfd95d8a68faa749b86799],
Trojan.FakeMS.ED, HKLM\SOFTWARE\CLASSES\CLSID\{056440FD-8568-48e7-A632-72157243B55B}, , [8a17ebb59cdfd95d8a68faa749b86799],
Trojan.FakeMS.ED, HKLM\SOFTWARE\WOW6432NODE\CLASSES\CLSID\{056440FD-8568-48E7-A632-72157243B55B}, , [8a17ebb59cdfd95d8a68faa749b86799],
Trojan.FakeMS.ED, HKLM\SOFTWARE\CLASSES\CLSID\{11dbb47c-a525-400b-9e80-a54615a090c0}, , [8a17ebb59cdfd95d8a68faa749b86799],
Trojan.FakeMS.ED, HKLM\SOFTWARE\WOW6432NODE\CLASSES\CLSID\{11DBB47C-A525-400B-9E80-A54615A090C0}, , [8a17ebb59cdfd95d8a68faa749b86799],
Trojan.FakeMS.ED, HKLM\SOFTWARE\CLASSES\CLSID\{13a4bbe8-6527-40cb-a996-1602829541ef}, , [8a17ebb59cdfd95d8a68faa749b86799],
Trojan.FakeMS.ED, HKLM\SOFTWARE\WOW6432NODE\CLASSES\CLSID\{13A4BBE8-6527-40CB-A996-1602829541EF}, , [8a17ebb59cdfd95d8a68faa749b86799],
Trojan.FakeMS.ED, HKLM\SOFTWARE\CLASSES\CLSID\{1eeb5b5a-06fb-4732-96b3-975c0194eb39}, , [8a17ebb59cdfd95d8a68faa749b86799],
Trojan.FakeMS.ED, HKLM\SOFTWARE\WOW6432NODE\CLASSES\CLSID\{1EEB5B5A-06FB-4732-96B3-975C0194EB39}, , [8a17ebb59cdfd95d8a68faa749b86799],
Trojan.FakeMS.ED, HKLM\SOFTWARE\CLASSES\CLSID\{1f849cce-2546-4b9f-b03e-4004781bdc40}, , [8a17ebb59cdfd95d8a68faa749b86799],
Trojan.FakeMS.ED, HKLM\SOFTWARE\WOW6432NODE\CLASSES\CLSID\{1F849CCE-2546-4B9F-B03E-4004781BDC40}, , [8a17ebb59cdfd95d8a68faa749b86799],
Trojan.FakeMS.ED, HKLM\SOFTWARE\CLASSES\CLSID\{2f2dc38b-34d2-462c-add4-f74cc15510a1}, , [8a17ebb59cdfd95d8a68faa749b86799],
Trojan.FakeMS.ED, HKLM\SOFTWARE\WOW6432NODE\CLASSES\CLSID\{2F2DC38B-34D2-462C-ADD4-F74CC15510A1}, , [8a17ebb59cdfd95d8a68faa749b86799],
Trojan.FakeMS.ED, HKLM\SOFTWARE\CLASSES\CLSID\{33BCC8EC-0D01-4E10-AD3D-4DAF749873ED}, , [8a17ebb59cdfd95d8a68faa749b86799],
Trojan.FakeMS.ED, HKLM\SOFTWARE\WOW6432NODE\CLASSES\CLSID\{33BCC8EC-0D01-4E10-AD3D-4DAF749873ED}, , [8a17ebb59cdfd95d8a68faa749b86799],
Trojan.FakeMS.ED, HKLM\SOFTWARE\CLASSES\CLSID\{3CCF8A41-5C85-11d0-9796-00AA00B90ADF}, , [8a17ebb59cdfd95d8a68faa749b86799],
Trojan.FakeMS.ED, HKLM\SOFTWARE\WOW6432NODE\CLASSES\CLSID\{3CCF8A41-5C85-11D0-9796-00AA00B90ADF}, , [8a17ebb59cdfd95d8a68faa749b86799],
Trojan.FakeMS.ED, HKLM\SOFTWARE\CLASSES\CLSID\{4AF4A5FC-912A-11D1-B945-00A0C90312E1}, , [8a17ebb59cdfd95d8a68faa749b86799],
Trojan.FakeMS.ED, HKLM\SOFTWARE\WOW6432NODE\CLASSES\CLSID\{4AF4A5FC-912A-11D1-B945-00A0C90312E1}, , [8a17ebb59cdfd95d8a68faa749b86799],
Trojan.FakeMS.ED, HKLM\SOFTWARE\CLASSES\CLSID\{56FDF344-FD6D-11d0-958A-006097C9A090}, , [8a17ebb59cdfd95d8a68faa749b86799],
Trojan.FakeMS.ED, HKLM\SOFTWARE\WOW6432NODE\CLASSES\CLSID\{56FDF344-FD6D-11D0-958A-006097C9A090}, , [8a17ebb59cdfd95d8a68faa749b86799],
Trojan.FakeMS.ED, HKLM\SOFTWARE\CLASSES\CLSID\{57f8510b-a5e2-41da-a8f0-8a5ae85dfffd}, , [8a17ebb59cdfd95d8a68faa749b86799],
Trojan.FakeMS.ED, HKLM\SOFTWARE\WOW6432NODE\CLASSES\CLSID\{57F8510B-A5E2-41DA-A8F0-8A5AE85DFFFD}, , [8a17ebb59cdfd95d8a68faa749b86799],
Trojan.FakeMS.ED, HKLM\SOFTWARE\CLASSES\CLSID\{596742A5-1393-4e13-8765-AE1DF71ACAFB}, , [8a17ebb59cdfd95d8a68faa749b86799],
Trojan.FakeMS.ED, HKLM\SOFTWARE\WOW6432NODE\CLASSES\CLSID\{596742A5-1393-4E13-8765-AE1DF71ACAFB}, , [8a17ebb59cdfd95d8a68faa749b86799],
Trojan.FakeMS.ED, HKLM\SOFTWARE\CLASSES\CLSID\{5E6AB780-7743-11CF-A12B-00AA004AE837}, , [8a17ebb59cdfd95d8a68faa749b86799],
Trojan.FakeMS.ED, HKLM\SOFTWARE\WOW6432NODE\CLASSES\CLSID\{5E6AB780-7743-11CF-A12B-00AA004AE837}, , [8a17ebb59cdfd95d8a68faa749b86799],
Trojan.FakeMS.ED, HKLM\SOFTWARE\CLASSES\CLSID\{64BC32B5-4EEC-4de7-972D-BD8BD0324537}, , [8a17ebb59cdfd95d8a68faa749b86799],
Trojan.FakeMS.ED, HKLM\SOFTWARE\WOW6432NODE\CLASSES\CLSID\{64BC32B5-4EEC-4DE7-972D-BD8BD0324537}, , [8a17ebb59cdfd95d8a68faa749b86799],
Trojan.FakeMS.ED, HKLM\SOFTWARE\CLASSES\CLSID\{6D8BB3D3-9D87-4a91-AB56-4F30CFFEFE9F}, , [8a17ebb59cdfd95d8a68faa749b86799],
Trojan.FakeMS.ED, HKLM\SOFTWARE\WOW6432NODE\CLASSES\CLSID\{6D8BB3D3-9D87-4A91-AB56-4F30CFFEFE9F}, , [8a17ebb59cdfd95d8a68faa749b86799],
Trojan.FakeMS.ED, HKLM\SOFTWARE\CLASSES\CLSID\{8be9f5ea-e746-4e47-ad57-3fb191ca1eed}, , [8a17ebb59cdfd95d8a68faa749b86799],
Trojan.FakeMS.ED, HKLM\SOFTWARE\WOW6432NODE\CLASSES\CLSID\{8BE9F5EA-E746-4E47-AD57-3FB191CA1EED}, , [8a17ebb59cdfd95d8a68faa749b86799],
Trojan.FakeMS.ED, HKLM\SOFTWARE\CLASSES\CLSID\{8C7461EF-2B13-11d2-BE35-3078302C2030}, , [8a17ebb59cdfd95d8a68faa749b86799],
Trojan.FakeMS.ED, HKLM\SOFTWARE\WOW6432NODE\CLASSES\CLSID\{8C7461EF-2B13-11D2-BE35-3078302C2030}, , [8a17ebb59cdfd95d8a68faa749b86799],
Trojan.FakeMS.ED, HKLM\SOFTWARE\CLASSES\CLSID\{90b9bce2-b6db-4fd3-8451-35917ea1081b}, , [8a17ebb59cdfd95d8a68faa749b86799],
Trojan.FakeMS.ED, HKLM\SOFTWARE\WOW6432NODE\CLASSES\CLSID\{90B9BCE2-B6DB-4FD3-8451-35917EA1081B}, , [8a17ebb59cdfd95d8a68faa749b86799],
Trojan.FakeMS.ED, HKLM\SOFTWARE\CLASSES\CLSID\{93a56381-e0cd-485a-b60e-67819e12f81b}, , [8a17ebb59cdfd95d8a68faa749b86799],
Trojan.FakeMS.ED, HKLM\SOFTWARE\WOW6432NODE\CLASSES\CLSID\{93A56381-E0CD-485A-B60E-67819E12F81B}, , [8a17ebb59cdfd95d8a68faa749b86799],
Trojan.FakeMS.ED, HKLM\SOFTWARE\CLASSES\CLSID\{a542e116-8088-4146-a352-b0d06e7f6af6}, , [8a17ebb59cdfd95d8a68faa749b86799],
Trojan.FakeMS.ED, HKLM\SOFTWARE\WOW6432NODE\CLASSES\CLSID\{A542E116-8088-4146-A352-B0D06E7F6AF6}, , [8a17ebb59cdfd95d8a68faa749b86799],
Trojan.FakeMS.ED, HKLM\SOFTWARE\CLASSES\CLSID\{ab0b37ec-56f6-4a0e-a8fd-7a8bf7c2da96}, , [8a17ebb59cdfd95d8a68faa749b86799],
Trojan.FakeMS.ED, HKLM\SOFTWARE\WOW6432NODE\CLASSES\CLSID\{AB0B37EC-56F6-4A0E-A8FD-7A8BF7C2DA96}, , [8a17ebb59cdfd95d8a68faa749b86799],
Trojan.FakeMS.ED, HKLM\SOFTWARE\CLASSES\CLSID\{AE054212-3535-4430-83ED-D501AA6680E6}, , [8a17ebb59cdfd95d8a68faa749b86799],
Trojan.FakeMS.ED, HKLM\SOFTWARE\WOW6432NODE\CLASSES\CLSID\{AE054212-3535-4430-83ED-D501AA6680E6}, , [8a17ebb59cdfd95d8a68faa749b86799],
Trojan.FakeMS.ED, HKLM\SOFTWARE\CLASSES\CLSID\{AF604EFE-8897-11D1-B944-00A0C90312E1}, , [8a17ebb59cdfd95d8a68faa749b86799],
Trojan.FakeMS.ED, HKLM\SOFTWARE\WOW6432NODE\CLASSES\CLSID\{AF604EFE-8897-11D1-B944-00A0C90312E1}, , [8a17ebb59cdfd95d8a68faa749b86799],
Trojan.FakeMS.ED, HKLM\SOFTWARE\CLASSES\CLSID\{bf50b68e-29b8-4386-ae9c-9734d5117cd5}, , [8a17ebb59cdfd95d8a68faa749b86799],
Trojan.FakeMS.ED, HKLM\SOFTWARE\WOW6432NODE\CLASSES\CLSID\{BF50B68E-29B8-4386-AE9C-9734D5117CD5}, , [8a17ebb59cdfd95d8a68faa749b86799],
Trojan.FakeMS.ED, HKLM\SOFTWARE\CLASSES\CLSID\{C4EC38BD-4E9E-4b5e-935A-D1BFF237D980}, , [8a17ebb59cdfd95d8a68faa749b86799],
Trojan.FakeMS.ED, HKLM\SOFTWARE\WOW6432NODE\CLASSES\CLSID\{C4EC38BD-4E9E-4B5E-935A-D1BFF237D980}, , [8a17ebb59cdfd95d8a68faa749b86799],
Trojan.FakeMS.ED, HKLM\SOFTWARE\CLASSES\CLSID\{E69FD98D-7EBE-4C01-BFED-67B4E4616A49}, , [8a17ebb59cdfd95d8a68faa749b86799],
Trojan.FakeMS.ED, HKLM\SOFTWARE\WOW6432NODE\CLASSES\CLSID\{E69FD98D-7EBE-4C01-BFED-67B4E4616A49}, , [8a17ebb59cdfd95d8a68faa749b86799],
Trojan.FakeMS.ED, HKLM\SOFTWARE\CLASSES\CLSID\{ea72d00e-4960-42fa-ba92-7792a7944c1d}, , [8a17ebb59cdfd95d8a68faa749b86799],
Trojan.FakeMS.ED, HKLM\SOFTWARE\WOW6432NODE\CLASSES\CLSID\{EA72D00E-4960-42FA-BA92-7792A7944C1D}, , [8a17ebb59cdfd95d8a68faa749b86799],
Trojan.FakeMS.ED, HKLM\SOFTWARE\CLASSES\CLSID\{ECD4FC4D-521C-11D0-B792-00A0C90312E1}, , [8a17ebb59cdfd95d8a68faa749b86799],
Trojan.FakeMS.ED, HKLM\SOFTWARE\WOW6432NODE\CLASSES\CLSID\{ECD4FC4D-521C-11D0-B792-00A0C90312E1}, , [8a17ebb59cdfd95d8a68faa749b86799],
Trojan.FakeMS.ED, HKLM\SOFTWARE\CLASSES\CLSID\{ECD4FC4E-521C-11D0-B792-00A0C90312E1}, , [8a17ebb59cdfd95d8a68faa749b86799],
Trojan.FakeMS.ED, HKLM\SOFTWARE\WOW6432NODE\CLASSES\CLSID\{ECD4FC4E-521C-11D0-B792-00A0C90312E1}, , [8a17ebb59cdfd95d8a68faa749b86799],
Trojan.FakeMS.ED, HKLM\SOFTWARE\CLASSES\CLSID\{EF8AD2D1-AE36-11D1-B2D2-006097DF8C11}, , [8a17ebb59cdfd95d8a68faa749b86799],
Trojan.FakeMS.ED, HKLM\SOFTWARE\WOW6432NODE\CLASSES\CLSID\{EF8AD2D1-AE36-11D1-B2D2-006097DF8C11}, , [8a17ebb59cdfd95d8a68faa749b86799],
Trojan.FakeMS.ED, HKLM\SOFTWARE\CLASSES\CLSID\{F3368374-CF19-11d0-B93D-00A0C90312e1}, , [8a17ebb59cdfd95d8a68faa749b86799],
Trojan.FakeMS.ED, HKLM\SOFTWARE\WOW6432NODE\CLASSES\CLSID\{F3368374-CF19-11D0-B93D-00A0C90312E1}, , [8a17ebb59cdfd95d8a68faa749b86799],
Trojan.FakeMS.ED, HKLM\SOFTWARE\CLASSES\CLSID\{fccf70c8-f4d7-4d8b-8c17-cd6715e37fff}, , [8a17ebb59cdfd95d8a68faa749b86799],
Trojan.FakeMS.ED, HKLM\SOFTWARE\WOW6432NODE\CLASSES\CLSID\{FCCF70C8-F4D7-4D8B-8C17-CD6715E37FFF}, , [8a17ebb59cdfd95d8a68faa749b86799],
Trojan.FakeMS.ED, HKLM\SOFTWARE\CLASSES\CLSID\{04731B67-D933-450a-90E6-4ACD2E9408FE}, , [831efea2b3c8b086777b71306f9249b7],
Trojan.FakeMS.ED, HKLM\SOFTWARE\WOW6432NODE\CLASSES\CLSID\{04731B67-D933-450A-90E6-4ACD2E9408FE}, , [831efea2b3c8b086777b71306f9249b7],
Trojan.FakeMS.ED, HKLM\SOFTWARE\MICROSOFT\WINDOWS\CURRENTVERSION\EXPLORER\DESKTOP\NAMESPACE\{04731B67-D933-450A-90E6-4ACD2E9408FE}, , [831efea2b3c8b086777b71306f9249b7],
Trojan.FakeMS.ED, HKLM\SOFTWARE\WOW6432NODE\MICROSOFT\WINDOWS\CURRENTVERSION\EXPLORER\DESKTOP\NAMESPACE\{04731B67-D933-450A-90E6-4ACD2E9408FE}, , [831efea2b3c8b086777b71306f9249b7],
Trojan.FakeMS.ED, HKLM\SOFTWARE\CLASSES\CLSID\{07398dcf-2e0b-4ece-99dd-56b262db948b}, , [831efea2b3c8b086777b71306f9249b7],
Trojan.FakeMS.ED, HKLM\SOFTWARE\WOW6432NODE\CLASSES\CLSID\{07398DCF-2E0B-4ECE-99DD-56B262DB948B}, , [831efea2b3c8b086777b71306f9249b7],
Trojan.FakeMS.ED, HKLM\SOFTWARE\CLASSES\CLSID\{0b2c9183-c9fa-4c53-ae21-c900b0c39965}, , [831efea2b3c8b086777b71306f9249b7],
Trojan.FakeMS.ED, HKLM\SOFTWARE\WOW6432NODE\CLASSES\CLSID\{0B2C9183-C9FA-4C53-AE21-C900B0C39965}, , [831efea2b3c8b086777b71306f9249b7],
Trojan.FakeMS.ED, HKLM\SOFTWARE\CLASSES\CLSID\{14010e02-bbbd-41f0-88e3-eda371216584}, , [831efea2b3c8b086777b71306f9249b7],
Trojan.FakeMS.ED, HKLM\SOFTWARE\WOW6432NODE\CLASSES\CLSID\{14010E02-BBBD-41F0-88E3-EDA371216584}, , [831efea2b3c8b086777b71306f9249b7],
Trojan.FakeMS.ED, HKLM\SOFTWARE\CLASSES\CLSID\{1685D4AB-A51B-4af1-A4E5-CEE87002431D}, , [831efea2b3c8b086777b71306f9249b7],
Trojan.FakeMS.ED, HKLM\SOFTWARE\WOW6432NODE\CLASSES\CLSID\{1685D4AB-A51B-4AF1-A4E5-CEE87002431D}, , [831efea2b3c8b086777b71306f9249b7],
Trojan.FakeMS.ED, HKLM\SOFTWARE\CLASSES\CLSID\{18907f3b-9afb-4f87-b764-f9a4e16a21b8}, , [831efea2b3c8b086777b71306f9249b7],
Trojan.FakeMS.ED, HKLM\SOFTWARE\WOW6432NODE\CLASSES\CLSID\{18907F3B-9AFB-4F87-B764-F9A4E16A21B8}, , [831efea2b3c8b086777b71306f9249b7],
Trojan.FakeMS.ED, HKLM\SOFTWARE\CLASSES\CLSID\{1C0F439D-7C29-4bde-8952-4EEB6A49E048}, , [831efea2b3c8b086777b71306f9249b7],
Trojan.FakeMS.ED, HKLM\SOFTWARE\WOW6432NODE\CLASSES\CLSID\{1C0F439D-7C29-4BDE-8952-4EEB6A49E048}, , [831efea2b3c8b086777b71306f9249b7],
Trojan.FakeMS.ED, HKLM\SOFTWARE\CLASSES\CLSID\{1c1800c1-3258-44c2-be80-3deadb6c5e39}, , [831efea2b3c8b086777b71306f9249b7],
Trojan.FakeMS.ED, HKLM\SOFTWARE\WOW6432NODE\CLASSES\CLSID\{1C1800C1-3258-44C2-BE80-3DEADB6C5E39}, , [831efea2b3c8b086777b71306f9249b7],
Trojan.FakeMS.ED, HKLM\SOFTWARE\CLASSES\CLSID\{25256c24-3b75-49b3-a433-4bb2f8865896}, , [831efea2b3c8b086777b71306f9249b7],
Trojan.FakeMS.ED, HKLM\SOFTWARE\WOW6432NODE\CLASSES\CLSID\{25256C24-3B75-49B3-A433-4BB2F8865896}, , [831efea2b3c8b086777b71306f9249b7],
Trojan.FakeMS.ED, HKLM\SOFTWARE\CLASSES\CLSID\{30276b4f-f25c-457c-a4b7-08574f8ea528}, , [831efea2b3c8b086777b71306f9249b7],
Trojan.FakeMS.ED, HKLM\SOFTWARE\WOW6432NODE\CLASSES\CLSID\{30276B4F-F25C-457C-A4B7-08574F8EA528}, , [831efea2b3c8b086777b71306f9249b7],
Trojan.FakeMS.ED, HKLM\SOFTWARE\CLASSES\CLSID\{36a479ef-8b67-4d01-8dda-753cfcb2dd96}, , [831efea2b3c8b086777b71306f9249b7],
Trojan.FakeMS.ED, HKLM\SOFTWARE\WOW6432NODE\CLASSES\CLSID\{36A479EF-8B67-4D01-8DDA-753CFCB2DD96}, , [831efea2b3c8b086777b71306f9249b7],
Trojan.FakeMS.ED, HKLM\SOFTWARE\CLASSES\CLSID\{3722c3b1-82e8-4022-8b27-1f8a68b44ac7}, , [831efea2b3c8b086777b71306f9249b7],
Trojan.FakeMS.ED, HKLM\SOFTWARE\WOW6432NODE\CLASSES\CLSID\{3722C3B1-82E8-4022-8B27-1F8A68B44AC7}, , [831efea2b3c8b086777b71306f9249b7],
Trojan.FakeMS.ED, HKLM\SOFTWARE\CLASSES\CLSID\{384ea5ae-ade1-4e8a-8a9b-7bea78fff1e9}, , [831efea2b3c8b086777b71306f9249b7],
Trojan.FakeMS.ED, HKLM\SOFTWARE\WOW6432NODE\CLASSES\CLSID\{384EA5AE-ADE1-4E8A-8A9B-7BEA78FFF1E9}, , [831efea2b3c8b086777b71306f9249b7],
Trojan.FakeMS.ED, HKLM\SOFTWARE\CLASSES\CLSID\{3B1B5147-715E-49e0-AE9F-ADF86724BB89}, , [831efea2b3c8b086777b71306f9249b7],
Trojan.FakeMS.ED, HKLM\SOFTWARE\WOW6432NODE\CLASSES\CLSID\{3B1B5147-715E-49E0-AE9F-ADF86724BB89}, , [831efea2b3c8b086777b71306f9249b7],
Trojan.FakeMS.ED, HKLM\SOFTWARE\CLASSES\CLSID\{48E277F6-4E74-4cd6-BA6F-FA4F42898223}, , [831efea2b3c8b086777b71306f9249b7],
Trojan.FakeMS.ED, HKLM\SOFTWARE\WOW6432NODE\CLASSES\CLSID\{48E277F6-4E74-4CD6-BA6F-FA4F42898223}, , [831efea2b3c8b086777b71306f9249b7],
Trojan.FakeMS.ED, HKLM\SOFTWARE\CLASSES\CLSID\{4A8ECCAC-181D-4c1b-BF8F-5D52C4008FB9}, , [831efea2b3c8b086777b71306f9249b7],
Trojan.FakeMS.ED, HKLM\SOFTWARE\WOW6432NODE\CLASSES\CLSID\{4A8ECCAC-181D-4C1B-BF8F-5D52C4008FB9}, , [831efea2b3c8b086777b71306f9249b7],
Trojan.FakeMS.ED, HKLM\SOFTWARE\CLASSES\CLSID\{6746c347-576b-4f73-9012-cdfeea251bc4}, , [831efea2b3c8b086777b71306f9249b7],
Trojan.FakeMS.ED, HKLM\SOFTWARE\WOW6432NODE\CLASSES\CLSID\{6746C347-576B-4F73-9012-CDFEEA251BC4}, , [831efea2b3c8b086777b71306f9249b7],
Trojan.FakeMS.ED, HKLM\SOFTWARE\CLASSES\CLSID\{6e682784-1eca-4cf2-988d-96b6e89e9a4d}, , [831efea2b3c8b086777b71306f9249b7],
Trojan.FakeMS.ED, HKLM\SOFTWARE\WOW6432NODE\CLASSES\CLSID\{6E682784-1ECA-4CF2-988D-96B6E89E9A4D}, , [831efea2b3c8b086777b71306f9249b7],
Trojan.FakeMS.ED, HKLM\SOFTWARE\CLASSES\CLSID\{70cba7d2-50a5-4383-8aa5-b378c01c7364}, , [831efea2b3c8b086777b71306f9249b7],
Trojan.FakeMS.ED, HKLM\SOFTWARE\WOW6432NODE\CLASSES\CLSID\{70CBA7D2-50A5-4383-8AA5-B378C01C7364}, , [831efea2b3c8b086777b71306f9249b7],
Trojan.FakeMS.ED, HKLM\SOFTWARE\CLASSES\CLSID\{76be8257-c4c0-4d37-90c0-a23372254d27}, , [831efea2b3c8b086777b71306f9249b7],
Trojan.FakeMS.ED, HKLM\SOFTWARE\CLASSES\APPID\{76BE8257-C4C0-4D37-90C0-A23372254D27}, , [831efea2b3c8b086777b71306f9249b7],
Trojan.FakeMS.ED, HKLM\SOFTWARE\WOW6432NODE\CLASSES\APPID\{76BE8257-C4C0-4D37-90C0-A23372254D27}, , [831efea2b3c8b086777b71306f9249b7],
Trojan.FakeMS.ED, HKLM\SOFTWARE\WOW6432NODE\CLASSES\CLSID\{76BE8257-C4C0-4D37-90C0-A23372254D27}, , [831efea2b3c8b086777b71306f9249b7],
Trojan.FakeMS.ED, HKLM\SOFTWARE\CLASSES\CLSID\{7c61d0a6-af7e-483a-b705-d2c5c2264656}, , [831efea2b3c8b086777b71306f9249b7],
Trojan.FakeMS.ED, HKLM\SOFTWARE\WOW6432NODE\CLASSES\CLSID\{7C61D0A6-AF7E-483A-B705-D2C5C2264656}, , [831efea2b3c8b086777b71306f9249b7],
Trojan.FakeMS.ED, HKLM\SOFTWARE\CLASSES\CLSID\{807e5a10-4856-4f9a-8e3c-a1f7e75648b3}, , [831efea2b3c8b086777b71306f9249b7],
Trojan.FakeMS.ED, HKLM\SOFTWARE\WOW6432NODE\CLASSES\CLSID\{807E5A10-4856-4F9A-8E3C-A1F7E75648B3}, , [831efea2b3c8b086777b71306f9249b7],
Trojan.FakeMS.ED, HKLM\SOFTWARE\CLASSES\CLSID\{8099904b-0b91-4906-a89d-11de2bd8f737}, , [831efea2b3c8b086777b71306f9249b7],
Trojan.FakeMS.ED, HKLM\SOFTWARE\WOW6432NODE\CLASSES\CLSID\{8099904B-0B91-4906-A89D-11DE2BD8F737}, , [831efea2b3c8b086777b71306f9249b7],
Trojan.FakeMS.ED, HKLM\SOFTWARE\CLASSES\CLSID\{92038079-b9ef-428f-87f0-0463fcb1272a}, , [831efea2b3c8b086777b71306f9249b7],
Trojan.FakeMS.ED, HKLM\SOFTWARE\WOW6432NODE\CLASSES\CLSID\{92038079-B9EF-428F-87F0-0463FCB1272A}, , [831efea2b3c8b086777b71306f9249b7],
Trojan.FakeMS.ED, HKLM\SOFTWARE\CLASSES\CLSID\{9343812e-1c37-4a49-a12e-4b2d810d956b}, , [831efea2b3c8b086777b71306f9249b7],
Trojan.FakeMS.ED, HKLM\SOFTWARE\WOW6432NODE\CLASSES\CLSID\{9343812E-1C37-4A49-A12E-4B2D810D956B}, , [831efea2b3c8b086777b71306f9249b7],
Trojan.FakeMS.ED, HKLM\SOFTWARE\MICROSOFT\WINDOWS\CURRENTVERSION\EXPLORER\DESKTOP\NAMESPACE\{9343812E-1C37-4A49-A12E-4B2D810D956B}, , [831efea2b3c8b086777b71306f9249b7],
Trojan.FakeMS.ED, HKLM\SOFTWARE\WOW6432NODE\MICROSOFT\WINDOWS\CURRENTVERSION\EXPLORER\DESKTOP\NAMESPACE\{9343812E-1C37-4A49-A12E-4B2D810D956B}, , [831efea2b3c8b086777b71306f9249b7],
Trojan.FakeMS.ED, HKLM\SOFTWARE\CLASSES\CLSID\{96B9DAE3-CF15-45e9-9719-57285348225E}, , [831efea2b3c8b086777b71306f9249b7],
Trojan.FakeMS.ED, HKLM\SOFTWARE\WOW6432NODE\CLASSES\CLSID\{96B9DAE3-CF15-45E9-9719-57285348225E}, , [831efea2b3c8b086777b71306f9249b7],
Trojan.FakeMS.ED, HKLM\SOFTWARE\CLASSES\CLSID\{9ecf51f8-cfb1-458d-9485-f5a231afd22f}, , [831efea2b3c8b086777b71306f9249b7],
Trojan.FakeMS.ED, HKLM\SOFTWARE\WOW6432NODE\CLASSES\CLSID\{9ECF51F8-CFB1-458D-9485-F5A231AFD22F}, , [831efea2b3c8b086777b71306f9249b7],
Trojan.FakeMS.ED, HKLM\SOFTWARE\CLASSES\CLSID\{a015411a-f97d-4ef3-8425-8a38d022aebc}, , [831efea2b3c8b086777b71306f9249b7],
Trojan.FakeMS.ED, HKLM\SOFTWARE\WOW6432NODE\CLASSES\CLSID\{A015411A-F97D-4EF3-8425-8A38D022AEBC}, , [831efea2b3c8b086777b71306f9249b7],
Trojan.FakeMS.ED, HKLM\SOFTWARE\CLASSES\CLSID\{b2952b16-0e07-4e5a-b993-58c52cb94cae}, , [831efea2b3c8b086777b71306f9249b7],
Trojan.FakeMS.ED, HKLM\SOFTWARE\CLASSES\SearchFolder, , [831efea2b3c8b086777b71306f9249b7],
Trojan.FakeMS.ED, HKLM\SOFTWARE\WOW6432NODE\CLASSES\SearchFolder, , [831efea2b3c8b086777b71306f9249b7],
Trojan.FakeMS.ED, HKLM\SOFTWARE\WOW6432NODE\CLASSES\CLSID\{B2952B16-0E07-4E5A-B993-58C52CB94CAE}, , [831efea2b3c8b086777b71306f9249b7],
Trojan.FakeMS.ED, HKLM\SOFTWARE\CLASSES\CLSID\{d3c86d56-03a1-42d5-af4c-1b612be90448}, , [831efea2b3c8b086777b71306f9249b7],
Trojan.FakeMS.ED, HKLM\SOFTWARE\WOW6432NODE\CLASSES\CLSID\{D3C86D56-03A1-42D5-AF4C-1B612BE90448}, , [831efea2b3c8b086777b71306f9249b7],
Trojan.FakeMS.ED, HKLM\SOFTWARE\CLASSES\CLSID\{daf95313-e44d-46af-be1b-cbacea2c3065}, , [831efea2b3c8b086777b71306f9249b7],
Trojan.FakeMS.ED, HKLM\SOFTWARE\WOW6432NODE\CLASSES\CLSID\{DAF95313-E44D-46AF-BE1B-CBACEA2C3065}, , [831efea2b3c8b086777b71306f9249b7],
Trojan.FakeMS.ED, HKLM\SOFTWARE\MICROSOFT\WINDOWS\CURRENTVERSION\EXPLORER\DESKTOP\NAMESPACE\{DAF95313-E44D-46AF-BE1B-CBACEA2C3065}, , [831efea2b3c8b086777b71306f9249b7],
Trojan.FakeMS.ED, HKLM\SOFTWARE\WOW6432NODE\MICROSOFT\WINDOWS\CURRENTVERSION\EXPLORER\DESKTOP\NAMESPACE\{DAF95313-E44D-46AF-BE1B-CBACEA2C3065}, , [831efea2b3c8b086777b71306f9249b7],
Trojan.FakeMS.ED, HKLM\SOFTWARE\CLASSES\CLSID\{db6efb73-5153-43b7-8078-c6ffc4c0238c}, , [831efea2b3c8b086777b71306f9249b7],
Trojan.FakeMS.ED, HKLM\SOFTWARE\WOW6432NODE\CLASSES\CLSID\{DB6EFB73-5153-43B7-8078-C6FFC4C0238C}, , [831efea2b3c8b086777b71306f9249b7],
Trojan.FakeMS.ED, HKLM\SOFTWARE\CLASSES\CLSID\{e345f35f-9397-435c-8f95-4e922c26259e}, , [831efea2b3c8b086777b71306f9249b7],
Trojan.FakeMS.ED, HKLM\SOFTWARE\WOW6432NODE\CLASSES\CLSID\{E345F35F-9397-435C-8F95-4E922C26259E}, , [831efea2b3c8b086777b71306f9249b7],
Trojan.FakeMS.ED, HKLM\SOFTWARE\MICROSOFT\WINDOWS\CURRENTVERSION\EXPLORER\DESKTOP\NAMESPACE\{E345F35F-9397-435C-8F95-4E922C26259E}, , [831efea2b3c8b086777b71306f9249b7],
Trojan.FakeMS.ED, HKLM\SOFTWARE\WOW6432NODE\MICROSOFT\WINDOWS\CURRENTVERSION\EXPLORER\DESKTOP\NAMESPACE\{E345F35F-9397-435C-8F95-4E922C26259E}, , [831efea2b3c8b086777b71306f9249b7],
Trojan.FakeMS.ED, HKLM\SOFTWARE\CLASSES\CLSID\{f235ce7d-b143-4d4f-ad93-64e48d53a5fb}, , [831efea2b3c8b086777b71306f9249b7],
Trojan.FakeMS.ED, HKLM\SOFTWARE\WOW6432NODE\CLASSES\CLSID\{F235CE7D-B143-4D4F-AD93-64E48D53A5FB}, , [831efea2b3c8b086777b71306f9249b7],
Trojan.FakeMS.ED, HKLM\SOFTWARE\CLASSES\CLSID\{f60163ce-2b8d-458d-ab2c-40f215767514}, , [831efea2b3c8b086777b71306f9249b7],
Trojan.FakeMS.ED, HKLM\SOFTWARE\WOW6432NODE\CLASSES\CLSID\{F60163CE-2B8D-458D-AB2C-40F215767514}, , [831efea2b3c8b086777b71306f9249b7],
Trojan.FakeMS.ED, HKLM\SOFTWARE\CLASSES\CLSID\{00C6D95F-329C-409a-81D7-C46C66EA7F33}, , [e5bc7030df9cb5818d653b66d031619f],
Trojan.FakeMS.ED, HKLM\SOFTWARE\WOW6432NODE\CLASSES\CLSID\{00C6D95F-329C-409A-81D7-C46C66EA7F33}, , [e5bc7030df9cb5818d653b66d031619f],
Trojan.FakeMS.ED, HKLM\SOFTWARE\CLASSES\CLSID\{0142e4d0-fb7a-11dc-ba4a-000ffe7ab428}, , [e5bc7030df9cb5818d653b66d031619f],
Trojan.FakeMS.ED, HKLM\SOFTWARE\MICROSOFT\WINDOWS\CURRENTVERSION\EXPLORER\CONTROLPANEL\NAMESPACE\{0142E4D0-FB7A-11DC-BA4A-000FFE7AB428}, , [e5bc7030df9cb5818d653b66d031619f],
Trojan.FakeMS.ED, HKLM\SOFTWARE\CLASSES\CLSID\{025A5937-A6BE-4686-A844-36FE4BEC8B6D}, , [e5bc7030df9cb5818d653b66d031619f],
Trojan.FakeMS.ED, HKLM\SOFTWARE\WOW6432NODE\CLASSES\CLSID\{025A5937-A6BE-4686-A844-36FE4BEC8B6D}, , [e5bc7030df9cb5818d653b66d031619f],
Trojan.FakeMS.ED, HKLM\SOFTWARE\MICROSOFT\WINDOWS\CURRENTVERSION\EXPLORER\CONTROLPANEL\NAMESPACE\{025A5937-A6BE-4686-A844-36FE4BEC8B6D}, , [e5bc7030df9cb5818d653b66d031619f],
Trojan.FakeMS.ED, HKLM\SOFTWARE\WOW6432NODE\MICROSOFT\WINDOWS\CURRENTVERSION\EXPLORER\CONTROLPANEL\NAMESPACE\{025A5937-A6BE-4686-A844-36FE4BEC8B6D}, , [e5bc7030df9cb5818d653b66d031619f],
Trojan.FakeMS.ED, HKLM\SOFTWARE\CLASSES\CLSID\{05d7b0f4-2121-4eff-bf6b-ed3f69b894d9}, , [e5bc7030df9cb5818d653b66d031619f],
Trojan.FakeMS.ED, HKLM\SOFTWARE\MICROSOFT\WINDOWS\CURRENTVERSION\EXPLORER\CONTROLPANEL\NAMESPACE\{05D7B0F4-2121-4EFF-BF6B-ED3F69B894D9}, , [e5bc7030df9cb5818d653b66d031619f],
Trojan.FakeMS.ED, HKLM\SOFTWARE\CLASSES\CLSID\{1206F5F1-0569-412C-8FEC-3204630DFB70}, , [e5bc7030df9cb5818d653b66d031619f],
Trojan.FakeMS.ED, HKLM\SOFTWARE\WOW6432NODE\CLASSES\CLSID\{1206F5F1-0569-412C-8FEC-3204630DFB70}, , [e5bc7030df9cb5818d653b66d031619f],
Trojan.FakeMS.ED, HKLM\SOFTWARE\MICROSOFT\WINDOWS\CURRENTVERSION\EXPLORER\CONTROLPANEL\NAMESPACE\{1206F5F1-0569-412C-8FEC-3204630DFB70}, , [e5bc7030df9cb5818d653b66d031619f],
Trojan.FakeMS.ED, HKLM\SOFTWARE\WOW6432NODE\MICROSOFT\WINDOWS\CURRENTVERSION\EXPLORER\CONTROLPANEL\NAMESPACE\{1206F5F1-0569-412C-8FEC-3204630DFB70}, , [e5bc7030df9cb5818d653b66d031619f],
Trojan.FakeMS.ED, HKLM\SOFTWARE\CLASSES\CLSID\{14074e0b-7216-4862-96e6-53cada442a56}, , [e5bc7030df9cb5818d653b66d031619f],
Trojan.FakeMS.ED, HKLM\SOFTWARE\WOW6432NODE\CLASSES\CLSID\{14074E0B-7216-4862-96E6-53CADA442A56}, , [e5bc7030df9cb5818d653b66d031619f],
Trojan.FakeMS.ED, HKLM\SOFTWARE\CLASSES\CLSID\{17cd9488-1228-4b2f-88ce-4298e93e0966}, , [e5bc7030df9cb5818d653b66d031619f],
Trojan.FakeMS.ED, HKLM\SOFTWARE\WOW6432NODE\CLASSES\CLSID\{17CD9488-1228-4B2F-88CE-4298E93E0966}, , [e5bc7030df9cb5818d653b66d031619f],
Trojan.FakeMS.ED, HKLM\SOFTWARE\MICROSOFT\WINDOWS\CURRENTVERSION\EXPLORER\CONTROLPANEL\NAMESPACE\{17CD9488-1228-4B2F-88CE-4298E93E0966}, , [e5bc7030df9cb5818d653b66d031619f],
Trojan.FakeMS.ED, HKLM\SOFTWARE\WOW6432NODE\MICROSOFT\WINDOWS\CURRENTVERSION\EXPLORER\CONTROLPANEL\NAMESPACE\{17CD9488-1228-4B2F-88CE-4298E93E0966}, , [e5bc7030df9cb5818d653b66d031619f],
Trojan.FakeMS.ED, HKLM\SOFTWARE\CLASSES\CLSID\{1f3427c8-5c10-4210-aa03-2ee45287d668}, , [e5bc7030df9cb5818d653b66d031619f],
Trojan.FakeMS.ED, HKLM\SOFTWARE\WOW6432NODE\CLASSES\CLSID\{1F3427C8-5C10-4210-AA03-2EE45287D668}, , [e5bc7030df9cb5818d653b66d031619f],
Trojan.FakeMS.ED, HKLM\SOFTWARE\CLASSES\CLSID\{241D7C96-F8BF-4F85-B01F-E2B043341A4B}, , [e5bc7030df9cb5818d653b66d031619f],
Trojan.FakeMS.ED, HKLM\SOFTWARE\WOW6432NODE\CLASSES\CLSID\{241D7C96-F8BF-4F85-B01F-E2B043341A4B}, , [e5bc7030df9cb5818d653b66d031619f],

tbowyer · July 26, 2014

Trojan.FakeMS.ED, HKLM\SOFTWARE\MICROSOFT\WINDOWS\CURRENTVERSION\EXPLORER\CONTROLPANEL\NAMESPACE\{241D7C96-F8BF-4F85-B01F-E2B043341A4B}, , [e5bc7030df9cb5818d653b66d031619f],
Trojan.FakeMS.ED, HKLM\SOFTWARE\WOW6432NODE\MICROSOFT\WINDOWS\CURRENTVERSION\EXPLORER\CONTROLPANEL\NAMESPACE\{241D7C96-F8BF-4F85-B01F-E2B043341A4B}, , [e5bc7030df9cb5818d653b66d031619f],
Trojan.FakeMS.ED, HKLM\SOFTWARE\CLASSES\CLSID\{2559a1f0-21d7-11d4-bdaf-00c04f60b9f0}, , [e5bc7030df9cb5818d653b66d031619f],
Trojan.FakeMS.ED, HKLM\SOFTWARE\WOW6432NODE\CLASSES\CLSID\{2559A1F0-21D7-11D4-BDAF-00C04F60B9F0}, , [e5bc7030df9cb5818d653b66d031619f],
Trojan.FakeMS.ED, HKLM\SOFTWARE\CLASSES\CLSID\{2559a1f1-21d7-11d4-bdaf-00c04f60b9f0}, , [e5bc7030df9cb5818d653b66d031619f],
Trojan.FakeMS.ED, HKLM\SOFTWARE\WOW6432NODE\CLASSES\CLSID\{2559A1F1-21D7-11D4-BDAF-00C04F60B9F0}, , [e5bc7030df9cb5818d653b66d031619f],
Trojan.FakeMS.ED, HKLM\SOFTWARE\CLASSES\CLSID\{2559a1f2-21d7-11d4-bdaf-00c04f60b9f0}, , [e5bc7030df9cb5818d653b66d031619f],
Trojan.FakeMS.ED, HKLM\SOFTWARE\WOW6432NODE\CLASSES\CLSID\{2559A1F2-21D7-11D4-BDAF-00C04F60B9F0}, , [e5bc7030df9cb5818d653b66d031619f],
Trojan.FakeMS.ED, HKLM\SOFTWARE\CLASSES\CLSID\{2559a1f3-21d7-11d4-bdaf-00c04f60b9f0}, , [e5bc7030df9cb5818d653b66d031619f],
Trojan.FakeMS.ED, HKLM\SOFTWARE\WOW6432NODE\CLASSES\CLSID\{2559A1F3-21D7-11D4-BDAF-00C04F60B9F0}, , [e5bc7030df9cb5818d653b66d031619f],
Trojan.FakeMS.ED, HKLM\SOFTWARE\CLASSES\CLSID\{2559a1f5-21d7-11d4-bdaf-00c04f60b9f0}, , [e5bc7030df9cb5818d653b66d031619f],
Trojan.FakeMS.ED, HKLM\SOFTWARE\WOW6432NODE\CLASSES\CLSID\{2559A1F5-21D7-11D4-BDAF-00C04F60B9F0}, , [e5bc7030df9cb5818d653b66d031619f],
Trojan.FakeMS.ED, HKLM\SOFTWARE\CLASSES\CLSID\{2559a1f7-21d7-11d4-bdaf-00c04f60b9f0}, , [e5bc7030df9cb5818d653b66d031619f],
Trojan.FakeMS.ED, HKLM\SOFTWARE\WOW6432NODE\CLASSES\CLSID\{2559A1F7-21D7-11D4-BDAF-00C04F60B9F0}, , [e5bc7030df9cb5818d653b66d031619f],
Trojan.FakeMS.ED, HKLM\SOFTWARE\CLASSES\CLSID\{3080F90D-D7AD-11D9-BD98-0000947B0257}, , [e5bc7030df9cb5818d653b66d031619f],
Trojan.FakeMS.ED, HKLM\SOFTWARE\WOW6432NODE\CLASSES\CLSID\{3080F90D-D7AD-11D9-BD98-0000947B0257}, , [e5bc7030df9cb5818d653b66d031619f],
Trojan.FakeMS.ED, HKLM\SOFTWARE\CLASSES\CLSID\{3080F90E-D7AD-11D9-BD98-0000947B0257}, , [e5bc7030df9cb5818d653b66d031619f],
Trojan.FakeMS.ED, HKLM\SOFTWARE\WOW6432NODE\CLASSES\CLSID\{3080F90E-D7AD-11D9-BD98-0000947B0257}, , [e5bc7030df9cb5818d653b66d031619f],
Trojan.FakeMS.ED, HKLM\SOFTWARE\CLASSES\CLSID\{36eef7db-88ad-4e81-ad49-0e313f0c35f8}, , [e5bc7030df9cb5818d653b66d031619f],
Trojan.FakeMS.ED, HKLM\SOFTWARE\MICROSOFT\WINDOWS\CURRENTVERSION\EXPLORER\CONTROLPANEL\NAMESPACE\{36EEF7DB-88AD-4E81-AD49-0E313F0C35F8}, , [e5bc7030df9cb5818d653b66d031619f],
Trojan.FakeMS.ED, HKLM\SOFTWARE\CLASSES\CLSID\{4026492F-2F69-46B8-B9BF-5654FC07E423}, , [e5bc7030df9cb5818d653b66d031619f],
Trojan.FakeMS.ED, HKLM\SOFTWARE\WOW6432NODE\CLASSES\CLSID\{4026492F-2F69-46B8-B9BF-5654FC07E423}, , [e5bc7030df9cb5818d653b66d031619f],
Trojan.FakeMS.ED, HKLM\SOFTWARE\MICROSOFT\WINDOWS\CURRENTVERSION\EXPLORER\CONTROLPANEL\NAMESPACE\{4026492F-2F69-46B8-B9BF-5654FC07E423}, , [e5bc7030df9cb5818d653b66d031619f],
Trojan.FakeMS.ED, HKLM\SOFTWARE\WOW6432NODE\MICROSOFT\WINDOWS\CURRENTVERSION\EXPLORER\CONTROLPANEL\NAMESPACE\{4026492F-2F69-46B8-B9BF-5654FC07E423}, , [e5bc7030df9cb5818d653b66d031619f],
Trojan.FakeMS.ED, HKLM\SOFTWARE\CLASSES\CLSID\{4125dd96-e03a-4103-8f70-e0597d803b9c}, , [e5bc7030df9cb5818d653b66d031619f],
Trojan.FakeMS.ED, HKLM\SOFTWARE\WOW6432NODE\CLASSES\CLSID\{4125DD96-E03A-4103-8F70-E0597D803B9C}, , [e5bc7030df9cb5818d653b66d031619f],
Trojan.FakeMS.ED, HKLM\SOFTWARE\CLASSES\CLSID\{4336a54d-038b-4685-ab02-99bb52d3fb8b}, , [e5bc7030df9cb5818d653b66d031619f],
Trojan.FakeMS.ED, HKLM\SOFTWARE\WOW6432NODE\CLASSES\CLSID\{4336A54D-038B-4685-AB02-99BB52D3FB8B}, , [e5bc7030df9cb5818d653b66d031619f],
Trojan.FakeMS.ED, HKLM\SOFTWARE\MICROSOFT\WINDOWS\CURRENTVERSION\EXPLORER\DESKTOP\NAMESPACE\{4336A54D-038B-4685-AB02-99BB52D3FB8B}, , [e5bc7030df9cb5818d653b66d031619f],
Trojan.FakeMS.ED, HKLM\SOFTWARE\WOW6432NODE\MICROSOFT\WINDOWS\CURRENTVERSION\EXPLORER\DESKTOP\NAMESPACE\{4336A54D-038B-4685-AB02-99BB52D3FB8B}, , [e5bc7030df9cb5818d653b66d031619f],
Trojan.FakeMS.ED, HKLM\SOFTWARE\CLASSES\CLSID\{58E3C745-D971-4081-9034-86E34B30836A}, , [e5bc7030df9cb5818d653b66d031619f],
Trojan.FakeMS.ED, HKLM\SOFTWARE\WOW6432NODE\CLASSES\CLSID\{58E3C745-D971-4081-9034-86E34B30836A}, , [e5bc7030df9cb5818d653b66d031619f],
Trojan.FakeMS.ED, HKLM\SOFTWARE\MICROSOFT\WINDOWS\CURRENTVERSION\EXPLORER\CONTROLPANEL\NAMESPACE\{58E3C745-D971-4081-9034-86E34B30836A}, , [e5bc7030df9cb5818d653b66d031619f],
Trojan.FakeMS.ED, HKLM\SOFTWARE\CLASSES\CLSID\{60632754-c523-4b62-b45c-4172da012619}, , [e5bc7030df9cb5818d653b66d031619f],
Trojan.FakeMS.ED, HKLM\SOFTWARE\WOW6432NODE\CLASSES\CLSID\{60632754-C523-4B62-B45C-4172DA012619}, , [e5bc7030df9cb5818d653b66d031619f],
Trojan.FakeMS.ED, HKLM\SOFTWARE\MICROSOFT\WINDOWS\CURRENTVERSION\EXPLORER\CONTROLPANEL\NAMESPACE\{60632754-C523-4B62-B45C-4172DA012619}, , [e5bc7030df9cb5818d653b66d031619f],
Trojan.FakeMS.ED, HKLM\SOFTWARE\WOW6432NODE\MICROSOFT\WINDOWS\CURRENTVERSION\EXPLORER\CONTROLPANEL\NAMESPACE\{60632754-C523-4B62-B45C-4172DA012619}, , [e5bc7030df9cb5818d653b66d031619f],
Trojan.FakeMS.ED, HKLM\SOFTWARE\CLASSES\CLSID\{67CA7650-96E6-4FDD-BB43-A8E774F73A57}, , [e5bc7030df9cb5818d653b66d031619f],
Trojan.FakeMS.ED, HKLM\SOFTWARE\WOW6432NODE\CLASSES\CLSID\{67CA7650-96E6-4FDD-BB43-A8E774F73A57}, , [e5bc7030df9cb5818d653b66d031619f],
Trojan.FakeMS.ED, HKLM\SOFTWARE\MICROSOFT\WINDOWS\CURRENTVERSION\EXPLORER\CONTROLPANEL\NAMESPACE\{67CA7650-96E6-4FDD-BB43-A8E774F73A57}, , [e5bc7030df9cb5818d653b66d031619f],
Trojan.FakeMS.ED, HKLM\SOFTWARE\WOW6432NODE\MICROSOFT\WINDOWS\CURRENTVERSION\EXPLORER\CONTROLPANEL\NAMESPACE\{67CA7650-96E6-4FDD-BB43-A8E774F73A57}, , [e5bc7030df9cb5818d653b66d031619f],
Trojan.FakeMS.ED, HKLM\SOFTWARE\CLASSES\CLSID\{68b07bff-cb50-4d60-a7d5-02b1a523bc8c}, , [e5bc7030df9cb5818d653b66d031619f],
Trojan.FakeMS.ED, HKLM\SOFTWARE\WOW6432NODE\CLASSES\CLSID\{68B07BFF-CB50-4D60-A7D5-02B1A523BC8C}, , [e5bc7030df9cb5818d653b66d031619f],
Trojan.FakeMS.ED, HKLM\SOFTWARE\CLASSES\CLSID\{78F3955E-3B90-4184-BD14-5397C15F1EFC}, , [e5bc7030df9cb5818d653b66d031619f],
Trojan.FakeMS.ED, HKLM\SOFTWARE\WOW6432NODE\CLASSES\CLSID\{78F3955E-3B90-4184-BD14-5397C15F1EFC}, , [e5bc7030df9cb5818d653b66d031619f],
Trojan.FakeMS.ED, HKLM\SOFTWARE\MICROSOFT\WINDOWS\CURRENTVERSION\EXPLORER\CONTROLPANEL\NAMESPACE\{78F3955E-3B90-4184-BD14-5397C15F1EFC}, , [e5bc7030df9cb5818d653b66d031619f],
Trojan.FakeMS.ED, HKLM\SOFTWARE\WOW6432NODE\MICROSOFT\WINDOWS\CURRENTVERSION\EXPLORER\CONTROLPANEL\NAMESPACE\{78F3955E-3B90-4184-BD14-5397C15F1EFC}, , [e5bc7030df9cb5818d653b66d031619f],
Trojan.FakeMS.ED, HKLM\SOFTWARE\CLASSES\CLSID\{896664F7-12E1-490f-8782-C0835AFD98FC}, , [e5bc7030df9cb5818d653b66d031619f],
Trojan.FakeMS.ED, HKLM\SOFTWARE\WOW6432NODE\CLASSES\CLSID\{896664F7-12E1-490F-8782-C0835AFD98FC}, , [e5bc7030df9cb5818d653b66d031619f],
Trojan.FakeMS.ED, HKLM\SOFTWARE\CLASSES\CLSID\{8E908FC9-BECC-40f6-915B-F4CA0E70D03D}, , [e5bc7030df9cb5818d653b66d031619f],
Trojan.FakeMS.ED, HKLM\SOFTWARE\WOW6432NODE\CLASSES\CLSID\{8E908FC9-BECC-40F6-915B-F4CA0E70D03D}, , [e5bc7030df9cb5818d653b66d031619f],
Trojan.FakeMS.ED, HKLM\SOFTWARE\MICROSOFT\WINDOWS\CURRENTVERSION\EXPLORER\CONTROLPANEL\NAMESPACE\{8E908FC9-BECC-40F6-915B-F4CA0E70D03D}, , [e5bc7030df9cb5818d653b66d031619f],
Trojan.FakeMS.ED, HKLM\SOFTWARE\WOW6432NODE\MICROSOFT\WINDOWS\CURRENTVERSION\EXPLORER\CONTROLPANEL\NAMESPACE\{8E908FC9-BECC-40F6-915B-F4CA0E70D03D}, , [e5bc7030df9cb5818d653b66d031619f],
Trojan.FakeMS.ED, HKLM\SOFTWARE\CLASSES\CLSID\{90f8c90b-04e0-4e92-a186-e6e9c125d664}, , [e5bc7030df9cb5818d653b66d031619f],
Trojan.FakeMS.ED, HKLM\SOFTWARE\WOW6432NODE\CLASSES\CLSID\{90F8C90B-04E0-4E92-A186-E6E9C125D664}, , [e5bc7030df9cb5818d653b66d031619f],
Trojan.FakeMS.ED, HKLM\SOFTWARE\CLASSES\CLSID\{93412589-74D4-4E4E-AD0E-E0CB621440FD}, , [e5bc7030df9cb5818d653b66d031619f],
Trojan.FakeMS.ED, HKLM\SOFTWARE\WOW6432NODE\CLASSES\CLSID\{93412589-74D4-4E4E-AD0E-E0CB621440FD}, , [e5bc7030df9cb5818d653b66d031619f],
Trojan.FakeMS.ED, HKLM\SOFTWARE\CLASSES\CLSID\{96AE8D84-A250-4520-95A5-A47A7E3C548B}, , [e5bc7030df9cb5818d653b66d031619f],
Trojan.FakeMS.ED, HKLM\SOFTWARE\WOW6432NODE\CLASSES\CLSID\{96AE8D84-A250-4520-95A5-A47A7E3C548B}, , [e5bc7030df9cb5818d653b66d031619f],
Trojan.FakeMS.ED, HKLM\SOFTWARE\MICROSOFT\WINDOWS\CURRENTVERSION\EXPLORER\CONTROLPANEL\NAMESPACE\{96AE8D84-A250-4520-95A5-A47A7E3C548B}, , [e5bc7030df9cb5818d653b66d031619f],
Trojan.FakeMS.ED, HKLM\SOFTWARE\WOW6432NODE\MICROSOFT\WINDOWS\CURRENTVERSION\EXPLORER\CONTROLPANEL\NAMESPACE\{96AE8D84-A250-4520-95A5-A47A7E3C548B}, , [e5bc7030df9cb5818d653b66d031619f],
Trojan.FakeMS.ED, HKLM\SOFTWARE\CLASSES\CLSID\{9C60DE1E-E5FC-40f4-A487-460851A8D915}, , [e5bc7030df9cb5818d653b66d031619f],
Trojan.FakeMS.ED, HKLM\SOFTWARE\WOW6432NODE\CLASSES\CLSID\{9C60DE1E-E5FC-40F4-A487-460851A8D915}, , [e5bc7030df9cb5818d653b66d031619f],
Trojan.FakeMS.ED, HKLM\SOFTWARE\MICROSOFT\WINDOWS\CURRENTVERSION\EXPLORER\CONTROLPANEL\NAMESPACE\{9C60DE1E-E5FC-40F4-A487-460851A8D915}, , [e5bc7030df9cb5818d653b66d031619f],
Trojan.FakeMS.ED, HKLM\SOFTWARE\WOW6432NODE\MICROSOFT\WINDOWS\CURRENTVERSION\EXPLORER\CONTROLPANEL\NAMESPACE\{9C60DE1E-E5FC-40F4-A487-460851A8D915}, , [e5bc7030df9cb5818d653b66d031619f],
Trojan.FakeMS.ED, HKLM\SOFTWARE\CLASSES\CLSID\{9FE63AFD-59CF-4419-9775-ABCC3849F861}, , [e5bc7030df9cb5818d653b66d031619f],
Trojan.FakeMS.ED, HKLM\SOFTWARE\MICROSOFT\WINDOWS\CURRENTVERSION\EXPLORER\CONTROLPANEL\NAMESPACE\{9FE63AFD-59CF-4419-9775-ABCC3849F861}, , [e5bc7030df9cb5818d653b66d031619f],
Trojan.FakeMS.ED, HKLM\SOFTWARE\CLASSES\CLSID\{b155bdf8-02f0-451e-9a26-ae317cfd7779}, , [e5bc7030df9cb5818d653b66d031619f],
Trojan.FakeMS.ED, HKLM\SOFTWARE\WOW6432NODE\CLASSES\CLSID\{B155BDF8-02F0-451E-9A26-AE317CFD7779}, , [e5bc7030df9cb5818d653b66d031619f],
Trojan.FakeMS.ED, HKLM\SOFTWARE\CLASSES\CLSID\{B98A2BEA-7D42-4558-8BD1-832F41BAC6FD}, , [e5bc7030df9cb5818d653b66d031619f],
Trojan.FakeMS.ED, HKLM\SOFTWARE\MICROSOFT\WINDOWS\CURRENTVERSION\EXPLORER\CONTROLPANEL\NAMESPACE\{B98A2BEA-7D42-4558-8BD1-832F41BAC6FD}, , [e5bc7030df9cb5818d653b66d031619f],
Trojan.FakeMS.ED, HKLM\SOFTWARE\CLASSES\CLSID\{BB06C0E4-D293-4f75-8A90-CB05B6477EEE}, , [e5bc7030df9cb5818d653b66d031619f],
Trojan.FakeMS.ED, HKLM\SOFTWARE\WOW6432NODE\CLASSES\CLSID\{BB06C0E4-D293-4F75-8A90-CB05B6477EEE}, , [e5bc7030df9cb5818d653b66d031619f],
Trojan.FakeMS.ED, HKLM\SOFTWARE\MICROSOFT\WINDOWS\CURRENTVERSION\EXPLORER\CONTROLPANEL\NAMESPACE\{BB06C0E4-D293-4F75-8A90-CB05B6477EEE}, , [e5bc7030df9cb5818d653b66d031619f],
Trojan.FakeMS.ED, HKLM\SOFTWARE\WOW6432NODE\MICROSOFT\WINDOWS\CURRENTVERSION\EXPLORER\CONTROLPANEL\NAMESPACE\{BB06C0E4-D293-4F75-8A90-CB05B6477EEE}, , [e5bc7030df9cb5818d653b66d031619f],
Trojan.FakeMS.ED, HKLM\SOFTWARE\CLASSES\CLSID\{BB64F8A7-BEE7-4E1A-AB8D-7D8273F7FDB6}, , [e5bc7030df9cb5818d653b66d031619f],
Trojan.FakeMS.ED, HKLM\SOFTWARE\WOW6432NODE\CLASSES\CLSID\{BB64F8A7-BEE7-4E1A-AB8D-7D8273F7FDB6}, , [e5bc7030df9cb5818d653b66d031619f],
Trojan.FakeMS.ED, HKLM\SOFTWARE\MICROSOFT\WINDOWS\CURRENTVERSION\EXPLORER\CONTROLPANEL\NAMESPACE\{BB64F8A7-BEE7-4E1A-AB8D-7D8273F7FDB6}, , [e5bc7030df9cb5818d653b66d031619f],
Trojan.FakeMS.ED, HKLM\SOFTWARE\WOW6432NODE\MICROSOFT\WINDOWS\CURRENTVERSION\EXPLORER\CONTROLPANEL\NAMESPACE\{BB64F8A7-BEE7-4E1A-AB8D-7D8273F7FDB6}, , [e5bc7030df9cb5818d653b66d031619f],
Trojan.FakeMS.ED, HKLM\SOFTWARE\CLASSES\CLSID\{C555438B-3C23-4769-A71F-B6D3D9B6053A}, , [e5bc7030df9cb5818d653b66d031619f],
Trojan.FakeMS.ED, HKLM\SOFTWARE\WOW6432NODE\CLASSES\CLSID\{C555438B-3C23-4769-A71F-B6D3D9B6053A}, , [e5bc7030df9cb5818d653b66d031619f],
Trojan.FakeMS.ED, HKLM\SOFTWARE\MICROSOFT\WINDOWS\CURRENTVERSION\EXPLORER\CONTROLPANEL\NAMESPACE\{C555438B-3C23-4769-A71F-B6D3D9B6053A}, , [e5bc7030df9cb5818d653b66d031619f],
Trojan.FakeMS.ED, HKLM\SOFTWARE\WOW6432NODE\MICROSOFT\WINDOWS\CURRENTVERSION\EXPLORER\CONTROLPANEL\NAMESPACE\{C555438B-3C23-4769-A71F-B6D3D9B6053A}, , [e5bc7030df9cb5818d653b66d031619f],
Trojan.FakeMS.ED, HKLM\SOFTWARE\CLASSES\CLSID\{C58C4893-3BE0-4B45-ABB5-A63E4B8C8651}, , [e5bc7030df9cb5818d653b66d031619f],
Trojan.FakeMS.ED, HKLM\SOFTWARE\MICROSOFT\WINDOWS\CURRENTVERSION\EXPLORER\CONTROLPANEL\NAMESPACE\{C58C4893-3BE0-4B45-ABB5-A63E4B8C8651}, , [e5bc7030df9cb5818d653b66d031619f],
Trojan.FakeMS.ED, HKLM\SOFTWARE\CLASSES\CLSID\{c73f6f30-97a0-4ad1-a08f-540d4e9bc7b9}, , [e5bc7030df9cb5818d653b66d031619f],
Trojan.FakeMS.ED, HKLM\SOFTWARE\WOW6432NODE\CLASSES\CLSID\{C73F6F30-97A0-4AD1-A08F-540D4E9BC7B9}, , [e5bc7030df9cb5818d653b66d031619f],
Trojan.FakeMS.ED, HKLM\SOFTWARE\CLASSES\CLSID\{D20EA4E1-3957-11d2-A40B-0C5020524153}, , [e5bc7030df9cb5818d653b66d031619f],
Trojan.FakeMS.ED, HKLM\SOFTWARE\WOW6432NODE\CLASSES\CLSID\{D20EA4E1-3957-11D2-A40B-0C5020524153}, , [e5bc7030df9cb5818d653b66d031619f],
Trojan.FakeMS.ED, HKLM\SOFTWARE\MICROSOFT\WINDOWS\CURRENTVERSION\EXPLORER\CONTROLPANEL\NAMESPACE\{D20EA4E1-3957-11D2-A40B-0C5020524153}, , [e5bc7030df9cb5818d653b66d031619f],
Trojan.FakeMS.ED, HKLM\SOFTWARE\WOW6432NODE\MICROSOFT\WINDOWS\CURRENTVERSION\EXPLORER\CONTROLPANEL\NAMESPACE\{D20EA4E1-3957-11D2-A40B-0C5020524153}, , [e5bc7030df9cb5818d653b66d031619f],
Trojan.FakeMS.ED, HKLM\SOFTWARE\CLASSES\CLSID\{d34a6ca6-62c2-4c34-8a7c-14709c1ad938}, , [e5bc7030df9cb5818d653b66d031619f],
Trojan.FakeMS.ED, HKLM\SOFTWARE\WOW6432NODE\CLASSES\CLSID\{D34A6CA6-62C2-4C34-8A7C-14709C1AD938}, , [e5bc7030df9cb5818d653b66d031619f],
Trojan.FakeMS.ED, HKLM\SOFTWARE\CLASSES\CLSID\{D555645E-D4F8-4c29-A827-D93C859C4F2A}, , [e5bc7030df9cb5818d653b66d031619f],
Trojan.FakeMS.ED, HKLM\SOFTWARE\WOW6432NODE\CLASSES\CLSID\{D555645E-D4F8-4C29-A827-D93C859C4F2A}, , [e5bc7030df9cb5818d653b66d031619f],
Trojan.FakeMS.ED, HKLM\SOFTWARE\MICROSOFT\WINDOWS\CURRENTVERSION\EXPLORER\CONTROLPANEL\NAMESPACE\{D555645E-D4F8-4C29-A827-D93C859C4F2A}, , [e5bc7030df9cb5818d653b66d031619f],
Trojan.FakeMS.ED, HKLM\SOFTWARE\WOW6432NODE\MICROSOFT\WINDOWS\CURRENTVERSION\EXPLORER\CONTROLPANEL\NAMESPACE\{D555645E-D4F8-4C29-A827-D93C859C4F2A}, , [e5bc7030df9cb5818d653b66d031619f],
Trojan.FakeMS.ED, HKLM\SOFTWARE\CLASSES\CLSID\{DFFACDC5-679F-4156-8947-C5C76BC0B67F}, , [e5bc7030df9cb5818d653b66d031619f],
Trojan.FakeMS.ED, HKLM\SOFTWARE\WOW6432NODE\CLASSES\CLSID\{DFFACDC5-679F-4156-8947-C5C76BC0B67F}, , [e5bc7030df9cb5818d653b66d031619f],
Trojan.FakeMS.ED, HKLM\SOFTWARE\CLASSES\CLSID\{E7DE9B1A-7533-4556-9484-B26FB486475E}, , [e5bc7030df9cb5818d653b66d031619f],
Trojan.FakeMS.ED, HKLM\SOFTWARE\WOW6432NODE\CLASSES\CLSID\{E7DE9B1A-7533-4556-9484-B26FB486475E}, , [e5bc7030df9cb5818d653b66d031619f],
Trojan.FakeMS.ED, HKLM\SOFTWARE\MICROSOFT\WINDOWS\CURRENTVERSION\EXPLORER\CONTROLPANEL\NAMESPACE\{E7DE9B1A-7533-4556-9484-B26FB486475E}, , [e5bc7030df9cb5818d653b66d031619f],
Trojan.FakeMS.ED, HKLM\SOFTWARE\WOW6432NODE\MICROSOFT\WINDOWS\CURRENTVERSION\EXPLORER\CONTROLPANEL\NAMESPACE\{E7DE9B1A-7533-4556-9484-B26FB486475E}, , [e5bc7030df9cb5818d653b66d031619f],
Trojan.FakeMS.ED, HKLM\SOFTWARE\CLASSES\CLSID\{E95A4861-D57A-4be1-AD0F-35267E261739}, , [e5bc7030df9cb5818d653b66d031619f],
Trojan.FakeMS.ED, HKLM\SOFTWARE\WOW6432NODE\CLASSES\CLSID\{E95A4861-D57A-4BE1-AD0F-35267E261739}, , [e5bc7030df9cb5818d653b66d031619f],
Trojan.FakeMS.ED, HKLM\SOFTWARE\MICROSOFT\WINDOWS\CURRENTVERSION\EXPLORER\CONTROLPANEL\NAMESPACE\{E95A4861-D57A-4BE1-AD0F-35267E261739}, , [e5bc7030df9cb5818d653b66d031619f],
Trojan.FakeMS.ED, HKLM\SOFTWARE\WOW6432NODE\MICROSOFT\WINDOWS\CURRENTVERSION\EXPLORER\CONTROLPANEL\NAMESPACE\{E95A4861-D57A-4BE1-AD0F-35267E261739}, , [e5bc7030df9cb5818d653b66d031619f],
Trojan.FakeMS.ED, HKLM\SOFTWARE\CLASSES\CLSID\{E9950154-C418-419e-A90A-20C5287AE24B}, , [e5bc7030df9cb5818d653b66d031619f],
Trojan.FakeMS.ED, HKLM\SOFTWARE\WOW6432NODE\CLASSES\CLSID\{E9950154-C418-419E-A90A-20C5287AE24B}, , [e5bc7030df9cb5818d653b66d031619f],
Trojan.FakeMS.ED, HKLM\SOFTWARE\MICROSOFT\WINDOWS\CURRENTVERSION\EXPLORER\CONTROLPANEL\NAMESPACE\{E9950154-C418-419E-A90A-20C5287AE24B}, , [e5bc7030df9cb5818d653b66d031619f],
Trojan.FakeMS.ED, HKLM\SOFTWARE\WOW6432NODE\MICROSOFT\WINDOWS\CURRENTVERSION\EXPLORER\CONTROLPANEL\NAMESPACE\{E9950154-C418-419E-A90A-20C5287AE24B}, , [e5bc7030df9cb5818d653b66d031619f],
Trojan.FakeMS.ED, HKLM\SOFTWARE\CLASSES\CLSID\{eb124705-128b-40d4-8dd8-d93ed12589a4}, , [e5bc7030df9cb5818d653b66d031619f],
Trojan.FakeMS.ED, HKLM\SOFTWARE\WOW6432NODE\CLASSES\CLSID\{EB124705-128B-40D4-8DD8-D93ED12589A4}, , [e5bc7030df9cb5818d653b66d031619f],
Trojan.FakeMS.ED, HKLM\SOFTWARE\CLASSES\CLSID\{ed50fc29-b964-48a9-afb3-15ebb9b97f36}, , [e5bc7030df9cb5818d653b66d031619f],
Trojan.FakeMS.ED, HKLM\SOFTWARE\WOW6432NODE\CLASSES\CLSID\{ED50FC29-B964-48A9-AFB3-15EBB9B97F36}, , [e5bc7030df9cb5818d653b66d031619f],
Trojan.FakeMS.ED, HKLM\SOFTWARE\CLASSES\CLSID\{ED834ED6-4B5A-4bfe-8F11-A626DCB6A921}, , [e5bc7030df9cb5818d653b66d031619f],
Trojan.FakeMS.ED, HKLM\SOFTWARE\MICROSOFT\WINDOWS\CURRENTVERSION\EXPLORER\CONTROLPANEL\NAMESPACE\{ED834ED6-4B5A-4BFE-8F11-A626DCB6A921}, , [e5bc7030df9cb5818d653b66d031619f],
Trojan.FakeMS.ED, HKLM\SOFTWARE\CLASSES\CLSID\{EF4D1E1A-1C87-4AA8-8934-E68E4367468D}, , [e5bc7030df9cb5818d653b66d031619f],
Trojan.FakeMS.ED, HKLM\SOFTWARE\WOW6432NODE\CLASSES\CLSID\{EF4D1E1A-1C87-4AA8-8934-E68E4367468D}, , [e5bc7030df9cb5818d653b66d031619f],
Trojan.FakeMS.ED, HKLM\SOFTWARE\CLASSES\CLSID\{F02C1A0D-BE21-4350-88B0-7367FC96EF3C}, , [0998118f3843d462f200544d649dfb05],
Trojan.FakeMS.ED, HKLM\SOFTWARE\WOW6432NODE\CLASSES\CLSID\{F02C1A0D-BE21-4350-88B0-7367FC96EF3C}, , [0998118f3843d462f200544d649dfb05],
Trojan.FakeMS.ED, HKU\S-1-5-21-1708624395-2249230892-2909010114-1000-{ED1FC765-E35E-4C3D-BF15-2C2B11260CE4}-0\SOFTWARE\MICROSOFT\WINDOWS\CURRENTVERSION\EXPLORER\CLSID\{F02C1A0D-BE21-4350-88B0-7367FC96EF3C}, , [0998118f3843d462f200544d649dfb05],
Trojan.FakeMS.ED, HKLM\SOFTWARE\MICROSOFT\WINDOWS\CURRENTVERSION\EXPLORER\DESKTOP\NAMESPACE\{F02C1A0D-BE21-4350-88B0-7367FC96EF3C}, , [0998118f3843d462f200544d649dfb05],
Trojan.FakeMS.ED, HKLM\SOFTWARE\WOW6432NODE\MICROSOFT\WINDOWS\CURRENTVERSION\EXPLORER\DESKTOP\NAMESPACE\{F02C1A0D-BE21-4350-88B0-7367FC96EF3C}, , [0998118f3843d462f200544d649dfb05],
Trojan.FakeMS.ED, HKLM\SOFTWARE\CLASSES\CLSID\{0af10cec-2ecd-4b92-9581-34f6ae0637f3}, , [475a712f80fb68ce8e64f8a9a958bd43],
Trojan.FakeMS.ED, HKLM\SOFTWARE\CLASSES\PortableDeviceManager.PortableDeviceManager.1, , [475a712f80fb68ce8e64f8a9a958bd43],
Trojan.FakeMS.ED, HKLM\SOFTWARE\CLASSES\PortableDeviceManager.PortableDeviceManager, , [475a712f80fb68ce8e64f8a9a958bd43],
Trojan.FakeMS.ED, HKLM\SOFTWARE\WOW6432NODE\CLASSES\PortableDeviceManager.PortableDeviceManager, , [475a712f80fb68ce8e64f8a9a958bd43],
Trojan.FakeMS.ED, HKLM\SOFTWARE\WOW6432NODE\CLASSES\PortableDeviceManager.PortableDeviceManager.1, , [475a712f80fb68ce8e64f8a9a958bd43],
Trojan.FakeMS.ED, HKLM\SOFTWARE\WOW6432NODE\CLASSES\CLSID\{0AF10CEC-2ECD-4B92-9581-34F6AE0637F3}, , [475a712f80fb68ce8e64f8a9a958bd43],
Trojan.FakeMS.ED, HKLM\SOFTWARE\CLASSES\CLSID\{1649b154-c794-497a-9b03-f3f0121302f3}, , [475a712f80fb68ce8e64f8a9a958bd43],
Trojan.FakeMS.ED, HKLM\SOFTWARE\CLASSES\PortableDeviceServiceFTM.PortableDeviceServiceFTM.1, , [475a712f80fb68ce8e64f8a9a958bd43],
Trojan.FakeMS.ED, HKLM\SOFTWARE\CLASSES\PortableDeviceServiceFTM.PortableDeviceServiceFTM, , [475a712f80fb68ce8e64f8a9a958bd43],
Trojan.FakeMS.ED, HKLM\SOFTWARE\WOW6432NODE\CLASSES\PortableDeviceServiceFTM.PortableDeviceServiceFTM, , [475a712f80fb68ce8e64f8a9a958bd43],
Trojan.FakeMS.ED, HKLM\SOFTWARE\WOW6432NODE\CLASSES\PortableDeviceServiceFTM.PortableDeviceServiceFTM.1, , [475a712f80fb68ce8e64f8a9a958bd43],
Trojan.FakeMS.ED, HKLM\SOFTWARE\WOW6432NODE\CLASSES\CLSID\{1649B154-C794-497A-9B03-F3F0121302F3}, , [475a712f80fb68ce8e64f8a9a958bd43],
Trojan.FakeMS.ED, HKLM\SOFTWARE\CLASSES\CLSID\{43232233-8338-4658-ae01-0b4ae830b6b0}, , [475a712f80fb68ce8e64f8a9a958bd43],
Trojan.FakeMS.ED, HKLM\SOFTWARE\WOW6432NODE\CLASSES\CLSID\{43232233-8338-4658-AE01-0B4AE830B6B0}, , [475a712f80fb68ce8e64f8a9a958bd43],
Trojan.FakeMS.ED, HKLM\SOFTWARE\CLASSES\CLSID\{728a21c5-3d9e-48d7-9810-864848f0f404}, , [475a712f80fb68ce8e64f8a9a958bd43],
Trojan.FakeMS.ED, HKLM\SOFTWARE\CLASSES\PortableDevice.PortableDevice.1, , [475a712f80fb68ce8e64f8a9a958bd43],
Trojan.FakeMS.ED, HKLM\SOFTWARE\CLASSES\PortableDevice.PortableDevice, , [475a712f80fb68ce8e64f8a9a958bd43],
Trojan.FakeMS.ED, HKLM\SOFTWARE\WOW6432NODE\CLASSES\PortableDevice.PortableDevice, , [475a712f80fb68ce8e64f8a9a958bd43],
Trojan.FakeMS.ED, HKLM\SOFTWARE\WOW6432NODE\CLASSES\PortableDevice.PortableDevice.1, , [475a712f80fb68ce8e64f8a9a958bd43],
Trojan.FakeMS.ED, HKLM\SOFTWARE\WOW6432NODE\CLASSES\CLSID\{728A21C5-3D9E-48D7-9810-864848F0F404}, , [475a712f80fb68ce8e64f8a9a958bd43],
Trojan.FakeMS.ED, HKLM\SOFTWARE\CLASSES\CLSID\{A8792A31-F385-493C-A893-40F64EB45F6E}, , [475a712f80fb68ce8e64f8a9a958bd43],
Trojan.FakeMS.ED, HKLM\SOFTWARE\CLASSES\INTERFACE\{A8792A31-F385-493C-A893-40F64EB45F6E}, , [475a712f80fb68ce8e64f8a9a958bd43],
Trojan.FakeMS.ED, HKLM\SOFTWARE\WOW6432NODE\CLASSES\INTERFACE\{A8792A31-F385-493C-A893-40F64EB45F6E}, , [475a712f80fb68ce8e64f8a9a958bd43],
Trojan.FakeMS.ED, HKLM\SOFTWARE\WOW6432NODE\CLASSES\CLSID\{A8792A31-F385-493C-A893-40F64EB45F6E}, , [475a712f80fb68ce8e64f8a9a958bd43],
Trojan.FakeMS.ED, HKLM\SOFTWARE\CLASSES\CLSID\{ef5db4c2-9312-422c-9152-411cd9c4dd84}, , [475a712f80fb68ce8e64f8a9a958bd43],
Trojan.FakeMS.ED, HKLM\SOFTWARE\CLASSES\PortableDeviceService.PortableDeviceService.1, , [475a712f80fb68ce8e64f8a9a958bd43],
Trojan.FakeMS.ED, HKLM\SOFTWARE\CLASSES\PortableDeviceService.PortableDeviceService, , [475a712f80fb68ce8e64f8a9a958bd43],
Trojan.FakeMS.ED, HKLM\SOFTWARE\WOW6432NODE\CLASSES\PortableDeviceService.PortableDeviceService, , [475a712f80fb68ce8e64f8a9a958bd43],
Trojan.FakeMS.ED, HKLM\SOFTWARE\WOW6432NODE\CLASSES\PortableDeviceService.PortableDeviceService.1, , [475a712f80fb68ce8e64f8a9a958bd43],
Trojan.FakeMS.ED, HKLM\SOFTWARE\WOW6432NODE\CLASSES\CLSID\{EF5DB4C2-9312-422C-9152-411CD9C4DD84}, , [475a712f80fb68ce8e64f8a9a958bd43],
Trojan.FakeMS.ED, HKLM\SOFTWARE\CLASSES\CLSID\{f7c0039a-4762-488a-b4b3-760ef9a1ba9b}, , [475a712f80fb68ce8e64f8a9a958bd43],
Trojan.FakeMS.ED, HKLM\SOFTWARE\CLASSES\PortableDeviceFTM.PortableDeviceFTM.1, , [475a712f80fb68ce8e64f8a9a958bd43],
Trojan.FakeMS.ED, HKLM\SOFTWARE\CLASSES\PortableDeviceFTM.PortableDeviceFTM, , [475a712f80fb68ce8e64f8a9a958bd43],
Trojan.FakeMS.ED, HKLM\SOFTWARE\WOW6432NODE\CLASSES\PortableDeviceFTM.PortableDeviceFTM, , [475a712f80fb68ce8e64f8a9a958bd43],
Trojan.FakeMS.ED, HKLM\SOFTWARE\WOW6432NODE\CLASSES\PortableDeviceFTM.PortableDeviceFTM.1, , [475a712f80fb68ce8e64f8a9a958bd43],
Trojan.FakeMS.ED, HKLM\SOFTWARE\WOW6432NODE\CLASSES\CLSID\{F7C0039A-4762-488A-B4B3-760EF9A1BA9B}, , [475a712f80fb68ce8e64f8a9a958bd43],
Trojan.FakeMS.ED, HKLM\SOFTWARE\CLASSES\TYPELIB\{1F001332-1A57-4934-BE31-AFFC99F4EE0A}, , [475a712f80fb68ce8e64f8a9a958bd43],
Trojan.FakeMS.ED, HKLM\SOFTWARE\WOW6432NODE\CLASSES\TYPELIB\{1F001332-1A57-4934-BE31-AFFC99F4EE0A}, , [475a712f80fb68ce8e64f8a9a958bd43],
Trojan.FakeMS.ED, HKLM\SOFTWARE\CLASSES\CLSID\{0700F42F-EEE3-443a-9899-166F16286796}, , [257c38684833f14503ef8a179f62dd23],
Trojan.FakeMS.ED, HKLM\SOFTWARE\WOW6432NODE\CLASSES\CLSID\{0700F42F-EEE3-443A-9899-166F16286796}, , [257c38684833f14503ef8a179f62dd23],
Trojan.FakeMS.ED, HKLM\SOFTWARE\CLASSES\CLSID\{0D0E47ED-7220-411f-8F81-1118095DA5E7}, , [257c38684833f14503ef8a179f62dd23],
Trojan.FakeMS.ED, HKLM\SOFTWARE\WOW6432NODE\CLASSES\CLSID\{0D0E47ED-7220-411F-8F81-1118095DA5E7}, , [257c38684833f14503ef8a179f62dd23],
Trojan.FakeMS.ED, HKLM\SOFTWARE\CLASSES\CLSID\{19352205-42B0-4690-9AA4-D7DB9AE5F259}, , [257c38684833f14503ef8a179f62dd23],
Trojan.FakeMS.ED, HKLM\SOFTWARE\WOW6432NODE\CLASSES\CLSID\{19352205-42B0-4690-9AA4-D7DB9AE5F259}, , [257c38684833f14503ef8a179f62dd23],
Trojan.FakeMS.ED, HKLM\SOFTWARE\CLASSES\CLSID\{3ABEAFC4-F48F-4517-A9B0-8AD6A94A99A1}, , [257c38684833f14503ef8a179f62dd23],
Trojan.FakeMS.ED, HKLM\SOFTWARE\WOW6432NODE\CLASSES\CLSID\{3ABEAFC4-F48F-4517-A9B0-8AD6A94A99A1}, , [257c38684833f14503ef8a179f62dd23],
Trojan.FakeMS.ED, HKLM\SOFTWARE\CLASSES\CLSID\{5E032150-8C1E-4c9e-BC60-36E9BFFCFF56}, , [257c38684833f14503ef8a179f62dd23],
Trojan.FakeMS.ED, HKLM\SOFTWARE\CLASSES\CLSID\{7be73787-ce71-4b33-b4c8-00d32b54bea8}, , [257c38684833f14503ef8a179f62dd23],
Trojan.FakeMS.ED, HKLM\SOFTWARE\WOW6432NODE\CLASSES\CLSID\{7BE73787-CE71-4B33-B4C8-00D32B54BEA8}, , [257c38684833f14503ef8a179f62dd23],
Trojan.FakeMS.ED, HKLM\SOFTWARE\CLASSES\CLSID\{9F36C194-166C-4cbf-B7EA-BF039F950172}, , [257c38684833f14503ef8a179f62dd23],
Trojan.FakeMS.ED, HKLM\SOFTWARE\CLASSES\CLSID\{C605507B-9613-4756-9C07-E0D74321CB1E}, , [257c38684833f14503ef8a179f62dd23],
Trojan.FakeMS.ED, HKLM\SOFTWARE\WOW6432NODE\CLASSES\CLSID\{C605507B-9613-4756-9C07-E0D74321CB1E}, , [257c38684833f14503ef8a179f62dd23],
Trojan.FakeMS.ED, HKLM\SOFTWARE\CLASSES\CLSID\{C707F6A6-A1F3-45d7-99AA-A2B9491E84AD}, , [257c38684833f14503ef8a179f62dd23],
Trojan.FakeMS.ED, HKLM\SOFTWARE\WOW6432NODE\CLASSES\CLSID\{C707F6A6-A1F3-45D7-99AA-A2B9491E84AD}, , [257c38684833f14503ef8a179f62dd23],
Trojan.FakeMS.ED, HKLM\SOFTWARE\CLASSES\CLSID\{DE77BA04-3C92-4d11-A1A5-42352A53E0E3}, , [257c38684833f14503ef8a179f62dd23],
Trojan.FakeMS.ED, HKLM\SOFTWARE\WOW6432NODE\CLASSES\CLSID\{DE77BA04-3C92-4D11-A1A5-42352A53E0E3}, , [257c38684833f14503ef8a179f62dd23],
Trojan.FakeMS.ED, HKLM\SOFTWARE\CLASSES\CLSID\{DF60686C-2941-4893-80C0-F13173B719D3}, , [257c38684833f14503ef8a179f62dd23],
Trojan.FakeMS.ED, HKLM\SYSTEM\CURRENTCONTROLSET\SERVICES\EFS, , [6d34f9a7b6c5280e8969821f4fb2b14f],
Trojan.FakeMS.ED, HKLM\SYSTEM\CURRENTCONTROLSET\SERVICES\KeyIso, , [6d34f9a7b6c5280e8969821f4fb2b14f],
Trojan.FakeMS.ED, HKLM\SYSTEM\CURRENTCONTROLSET\SERVICES\Netlogon, , [6d34f9a7b6c5280e8969821f4fb2b14f],
Trojan.FakeMS.ED, HKLM\SYSTEM\CURRENTCONTROLSET\SERVICES\ProtectedStorage, , [6d34f9a7b6c5280e8969821f4fb2b14f],
Trojan.FakeMS.ED, HKLM\SYSTEM\CURRENTCONTROLSET\SERVICES\SamSs, , [6d34f9a7b6c5280e8969821f4fb2b14f],
Trojan.FakeMS.ED, HKLM\SYSTEM\CURRENTCONTROLSET\SERVICES\VaultSvc, , [6d34f9a7b6c5280e8969821f4fb2b14f],
Trojan.FakeMS.ED, HKLM\SYSTEM\CURRENTCONTROLSET\SERVICES\AeLookupSvc, , [227fe1bfdd9e2412ad459a07ac55e41c],
Trojan.FakeMS.ED, HKLM\SYSTEM\CURRENTCONTROLSET\SERVICES\AppIDSvc, , [227fe1bfdd9e2412ad459a07ac55e41c],
Trojan.FakeMS.ED, HKLM\SYSTEM\CURRENTCONTROLSET\SERVICES\Appinfo, , [227fe1bfdd9e2412ad459a07ac55e41c],
Trojan.FakeMS.ED, HKLM\SYSTEM\CURRENTCONTROLSET\SERVICES\AudioEndpointBuilder, , [227fe1bfdd9e2412ad459a07ac55e41c],
Trojan.FakeMS.ED, HKLM\SYSTEM\CURRENTCONTROLSET\SERVICES\AudioSrv, , [227fe1bfdd9e2412ad459a07ac55e41c],
Trojan.FakeMS.ED, HKLM\SYSTEM\CURRENTCONTROLSET\SERVICES\AxInstSV, , [227fe1bfdd9e2412ad459a07ac55e41c],
Trojan.FakeMS.ED, HKLM\SYSTEM\CURRENTCONTROLSET\SERVICES\BDESVC, , [227fe1bfdd9e2412ad459a07ac55e41c],
Trojan.FakeMS.ED, HKLM\SYSTEM\CURRENTCONTROLSET\SERVICES\BFE, , [227fe1bfdd9e2412ad459a07ac55e41c],
Trojan.FakeMS.ED, HKLM\SYSTEM\CURRENTCONTROLSET\SERVICES\bthserv, , [227fe1bfdd9e2412ad459a07ac55e41c],
Trojan.FakeMS.ED, HKLM\SYSTEM\CURRENTCONTROLSET\SERVICES\CertPropSvc, , [227fe1bfdd9e2412ad459a07ac55e41c],
Trojan.FakeMS.ED, HKLM\SYSTEM\CURRENTCONTROLSET\SERVICES\CscService, , [227fe1bfdd9e2412ad459a07ac55e41c],
Trojan.FakeMS.ED, HKLM\SYSTEM\CURRENTCONTROLSET\SERVICES\defragsvc, , [227fe1bfdd9e2412ad459a07ac55e41c],
Trojan.FakeMS.ED, HKLM\SYSTEM\CURRENTCONTROLSET\SERVICES\Dhcp, , [227fe1bfdd9e2412ad459a07ac55e41c],
Trojan.FakeMS.ED, HKLM\SYSTEM\CURRENTCONTROLSET\SERVICES\Dnscache, , [227fe1bfdd9e2412ad459a07ac55e41c],
Trojan.FakeMS.ED, HKLM\SYSTEM\CURRENTCONTROLSET\SERVICES\dot3svc, , [227fe1bfdd9e2412ad459a07ac55e41c],
Trojan.FakeMS.ED, HKLM\SYSTEM\CURRENTCONTROLSET\SERVICES\DPS, , [227fe1bfdd9e2412ad459a07ac55e41c],
Trojan.FakeMS.ED, HKLM\SYSTEM\CURRENTCONTROLSET\SERVICES\EapHost, , [227fe1bfdd9e2412ad459a07ac55e41c],
Trojan.FakeMS.ED, HKLM\SYSTEM\CURRENTCONTROLSET\SERVICES\eventlog, , [227fe1bfdd9e2412ad459a07ac55e41c],
Trojan.FakeMS.ED, HKLM\SYSTEM\CURRENTCONTROLSET\SERVICES\EventSystem, , [227fe1bfdd9e2412ad459a07ac55e41c],
Trojan.FakeMS.ED, HKLM\SOFTWARE\CLASSES\CLSID\{4E14FBA2-2E22-11D1-9964-00C04FBBB345}, , [227fe1bfdd9e2412ad459a07ac55e41c],
Trojan.FakeMS.ED, HKLM\SOFTWARE\CLASSES\EventSystem.EventSystem.1, , [227fe1bfdd9e2412ad459a07ac55e41c],
Trojan.FakeMS.ED, HKLM\SOFTWARE\CLASSES\EventSystem.EventSystem, , [227fe1bfdd9e2412ad459a07ac55e41c],
Trojan.FakeMS.ED, HKLM\SOFTWARE\WOW6432NODE\CLASSES\EventSystem.EventSystem, , [227fe1bfdd9e2412ad459a07ac55e41c],
Trojan.FakeMS.ED, HKLM\SOFTWARE\WOW6432NODE\CLASSES\EventSystem.EventSystem.1, , [227fe1bfdd9e2412ad459a07ac55e41c],
Trojan.FakeMS.ED, HKLM\SOFTWARE\CLASSES\APPID\{4E14FBA2-2E22-11D1-9964-00C04FBBB345}, , [227fe1bfdd9e2412ad459a07ac55e41c],
Trojan.FakeMS.ED, HKLM\SOFTWARE\WOW6432NODE\CLASSES\APPID\{4E14FBA2-2E22-11D1-9964-00C04FBBB345}, , [227fe1bfdd9e2412ad459a07ac55e41c],
Trojan.FakeMS.ED, HKLM\SOFTWARE\WOW6432NODE\CLASSES\CLSID\{4E14FBA2-2E22-11D1-9964-00C04FBBB345}, , [227fe1bfdd9e2412ad459a07ac55e41c],
Trojan.FakeMS.ED, HKLM\SOFTWARE\CLASSES\CLSID\{64B8F404-A4AE-11D1-B7B6-00C04FB926AF}, , [227fe1bfdd9e2412ad459a07ac55e41c],
Trojan.FakeMS.ED, HKLM\SOFTWARE\CLASSES\INTERFACE\{64B8F404-A4AE-11D1-B7B6-00C04FB926AF}, , [227fe1bfdd9e2412ad459a07ac55e41c],
Trojan.FakeMS.ED, HKLM\SOFTWARE\WOW6432NODE\CLASSES\INTERFACE\{64B8F404-A4AE-11D1-B7B6-00C04FB926AF}, , [227fe1bfdd9e2412ad459a07ac55e41c],
Trojan.FakeMS.ED, HKLM\SOFTWARE\WOW6432NODE\CLASSES\CLSID\{64B8F404-A4AE-11D1-B7B6-00C04FB926AF}, , [227fe1bfdd9e2412ad459a07ac55e41c],
Trojan.FakeMS.ED, HKLM\SOFTWARE\CLASSES\CLSID\{7542E960-79C7-11D1-88F9-0080C7D771BF}, , [227fe1bfdd9e2412ad459a07ac55e41c],
Trojan.FakeMS.ED, HKLM\SOFTWARE\CLASSES\EventSystem.EventSubscription, , [227fe1bfdd9e2412ad459a07ac55e41c],
Trojan.FakeMS.ED, HKLM\SOFTWARE\CLASSES\EventSystem.EventSubscription.1, , [227fe1bfdd9e2412ad459a07ac55e41c],
Trojan.FakeMS.ED, HKLM\SOFTWARE\WOW6432NODE\CLASSES\EventSystem.EventSubscription.1, , [227fe1bfdd9e2412ad459a07ac55e41c],
Trojan.FakeMS.ED, HKLM\SOFTWARE\WOW6432NODE\CLASSES\EventSystem.EventSubscription, , [227fe1bfdd9e2412ad459a07ac55e41c],
Trojan.FakeMS.ED, HKLM\SOFTWARE\WOW6432NODE\CLASSES\CLSID\{7542E960-79C7-11D1-88F9-0080C7D771BF}, , [227fe1bfdd9e2412ad459a07ac55e41c],
Trojan.FakeMS.ED, HKLM\SOFTWARE\CLASSES\CLSID\{AB944620-79C6-11D1-88F9-0080C7D771BF}, , [227fe1bfdd9e2412ad459a07ac55e41c],
Trojan.FakeMS.ED, HKLM\SOFTWARE\CLASSES\EventSystem.EventPublisher.1, , [227fe1bfdd9e2412ad459a07ac55e41c],
Trojan.FakeMS.ED, HKLM\SOFTWARE\CLASSES\EventSystem.EventPublisher, , [227fe1bfdd9e2412ad459a07ac55e41c],
Trojan.FakeMS.ED, HKLM\SOFTWARE\WOW6432NODE\CLASSES\EventSystem.EventPublisher, , [227fe1bfdd9e2412ad459a07ac55e41c],
Trojan.FakeMS.ED, HKLM\SOFTWARE\WOW6432NODE\CLASSES\EventSystem.EventPublisher.1, , [227fe1bfdd9e2412ad459a07ac55e41c],
Trojan.FakeMS.ED, HKLM\SOFTWARE\WOW6432NODE\CLASSES\CLSID\{AB944620-79C6-11D1-88F9-0080C7D771BF}, , [227fe1bfdd9e2412ad459a07ac55e41c],
Trojan.FakeMS.ED, HKLM\SOFTWARE\CLASSES\CLSID\{BB07BACD-CD56-4E63-A8FF-CBF0355FB9F4}, , [227fe1bfdd9e2412ad459a07ac55e41c],
Trojan.FakeMS.ED, HKLM\SOFTWARE\CLASSES\APPID\{BB07BACD-CD56-4E63-A8FF-CBF0355FB9F4}, , [227fe1bfdd9e2412ad459a07ac55e41c],
Trojan.FakeMS.ED, HKLM\SOFTWARE\WOW6432NODE\CLASSES\APPID\{BB07BACD-CD56-4E63-A8FF-CBF0355FB9F4}, , [227fe1bfdd9e2412ad459a07ac55e41c],
Trojan.FakeMS.ED, HKLM\SOFTWARE\WOW6432NODE\CLASSES\CLSID\{BB07BACD-CD56-4E63-A8FF-CBF0355FB9F4}, , [227fe1bfdd9e2412ad459a07ac55e41c],
Trojan.FakeMS.ED, HKLM\SOFTWARE\CLASSES\CLSID\{CDBEC9C0-7A68-11D1-88F9-0080C7D771BF}, , [227fe1bfdd9e2412ad459a07ac55e41c],
Trojan.FakeMS.ED, HKLM\SOFTWARE\CLASSES\EventSystem.EventClass, , [227fe1bfdd9e2412ad459a07ac55e41c],
Trojan.FakeMS.ED, HKLM\SOFTWARE\CLASSES\EventSystem.EventClass.1, , [227fe1bfdd9e2412ad459a07ac55e41c],
Trojan.FakeMS.ED, HKLM\SOFTWARE\WOW6432NODE\CLASSES\EventSystem.EventClass.1, , [227fe1bfdd9e2412ad459a07ac55e41c],
Trojan.FakeMS.ED, HKLM\SOFTWARE\WOW6432NODE\CLASSES\EventSystem.EventClass, , [227fe1bfdd9e2412ad459a07ac55e41c],
Trojan.FakeMS.ED, HKLM\SOFTWARE\WOW6432NODE\CLASSES\CLSID\{CDBEC9C0-7A68-11D1-88F9-0080C7D771BF}, , [227fe1bfdd9e2412ad459a07ac55e41c],
Trojan.FakeMS.ED, HKLM\SOFTWARE\CLASSES\CLSID\{D0565000-9DF4-11D1-A281-00C04FCA0AA7}, , [227fe1bfdd9e2412ad459a07ac55e41c],
Trojan.FakeMS.ED, HKLM\SOFTWARE\CLASSES\APPID\{D0565000-9DF4-11D1-A281-00C04FCA0AA7}, , [227fe1bfdd9e2412ad459a07ac55e41c],
Trojan.FakeMS.ED, HKLM\SOFTWARE\WOW6432NODE\CLASSES\APPID\{D0565000-9DF4-11D1-A281-00C04FCA0AA7}, , [227fe1bfdd9e2412ad459a07ac55e41c],
Trojan.FakeMS.ED, HKLM\SOFTWARE\WOW6432NODE\CLASSES\CLSID\{D0565000-9DF4-11D1-A281-00C04FCA0AA7}, , [227fe1bfdd9e2412ad459a07ac55e41c],
Trojan.FakeMS.ED, HKLM\SOFTWARE\CLASSES\CLSID\{D5978620-5B9F-11D1-8DD2-00AA004ABD5E}, , [227fe1bfdd9e2412ad459a07ac55e41c],
Trojan.FakeMS.ED, HKLM\SOFTWARE\WOW6432NODE\CLASSES\CLSID\{D5978620-5B9F-11D1-8DD2-00AA004ABD5E}, , [227fe1bfdd9e2412ad459a07ac55e41c],
Trojan.FakeMS.ED, HKLM\SOFTWARE\CLASSES\CLSID\{D5978630-5B9F-11D1-8DD2-00AA004ABD5E}, , [227fe1bfdd9e2412ad459a07ac55e41c],
Trojan.FakeMS.ED, HKLM\SOFTWARE\WOW6432NODE\CLASSES\CLSID\{D5978630-5B9F-11D1-8DD2-00AA004ABD5E}, , [227fe1bfdd9e2412ad459a07ac55e41c],
Trojan.FakeMS.ED, HKLM\SOFTWARE\CLASSES\CLSID\{D5978640-5B9F-11D1-8DD2-00AA004ABD5E}, , [227fe1bfdd9e2412ad459a07ac55e41c],
Trojan.FakeMS.ED, HKLM\SOFTWARE\WOW6432NODE\CLASSES\CLSID\{D5978640-5B9F-11D1-8DD2-00AA004ABD5E}, , [227fe1bfdd9e2412ad459a07ac55e41c],
Trojan.FakeMS.ED, HKLM\SOFTWARE\CLASSES\CLSID\{D5978650-5B9F-11D1-8DD2-00AA004ABD5E}, , [227fe1bfdd9e2412ad459a07ac55e41c],
Trojan.FakeMS.ED, HKLM\SOFTWARE\WOW6432NODE\CLASSES\CLSID\{D5978650-5B9F-11D1-8DD2-00AA004ABD5E}, , [227fe1bfdd9e2412ad459a07ac55e41c],
Trojan.FakeMS.ED, HKLM\SOFTWARE\CLASSES\CLSID\{ECABB0C3-7F19-11D2-978E-0000F8757E2A}, , [227fe1bfdd9e2412ad459a07ac55e41c],
Trojan.FakeMS.ED, HKLM\SOFTWARE\CLASSES\APPID\{ECABB0C3-7F19-11D2-978E-0000F8757E2A}, , [227fe1bfdd9e2412ad459a07ac55e41c],
Trojan.FakeMS.ED, HKLM\SOFTWARE\WOW6432NODE\CLASSES\APPID\{ECABB0C3-7F19-11D2-978E-0000F8757E2A}, , [227fe1bfdd9e2412ad459a07ac55e41c],
Trojan.FakeMS.ED, HKLM\SOFTWARE\WOW6432NODE\CLASSES\CLSID\{ECABB0C3-7F19-11D2-978E-0000F8757E2A}, , [227fe1bfdd9e2412ad459a07ac55e41c],
Trojan.FakeMS.ED, HKLM\SOFTWARE\CLASSES\CLSID\{ECABB0C6-7F19-11D2-978E-0000F8757E2A}, , [227fe1bfdd9e2412ad459a07ac55e41c],
Trojan.FakeMS.ED, HKLM\SOFTWARE\CLASSES\APPID\{ECABB0C6-7F19-11D2-978E-0000F8757E2A}, , [227fe1bfdd9e2412ad459a07ac55e41c],
Trojan.FakeMS.ED, HKLM\SOFTWARE\WOW6432NODE\CLASSES\APPID\{ECABB0C6-7F19-11D2-978E-0000F8757E2A}, , [227fe1bfdd9e2412ad459a07ac55e41c],
Trojan.FakeMS.ED, HKLM\SOFTWARE\WOW6432NODE\CLASSES\CLSID\{ECABB0C6-7F19-11D2-978E-0000F8757E2A}, , [227fe1bfdd9e2412ad459a07ac55e41c],
Trojan.FakeMS.ED, HKLM\SOFTWARE\CLASSES\CLSID\{FAF53CC4-BD73-4E36-83F1-2B23F46E513E}, , [227fe1bfdd9e2412ad459a07ac55e41c],
Trojan.FakeMS.ED, HKLM\SOFTWARE\CLASSES\APPID\{FAF53CC4-BD73-4E36-83F1-2B23F46E513E}, , [227fe1bfdd9e2412ad459a07ac55e41c],
Trojan.FakeMS.ED, HKLM\SOFTWARE\WOW6432NODE\CLASSES\APPID\{FAF53CC4-BD73-4E36-83F1-2B23F46E513E}, , [227fe1bfdd9e2412ad459a07ac55e41c],
Trojan.FakeMS.ED, HKLM\SOFTWARE\WOW6432NODE\CLASSES\CLSID\{FAF53CC4-BD73-4E36-83F1-2B23F46E513E}, , [227fe1bfdd9e2412ad459a07ac55e41c],
Trojan.FakeMS.ED, HKLM\SOFTWARE\CLASSES\TYPELIB\{4E14FB90-2E22-11D1-9964-00C04FBBB345}, , [227fe1bfdd9e2412ad459a07ac55e41c],
Trojan.FakeMS.ED, HKLM\SOFTWARE\CLASSES\INTERFACE\{0343E2F4-86F6-11D1-B760-00C04FB926AF}, , [227fe1bfdd9e2412ad459a07ac55e41c],
Trojan.FakeMS.ED, HKLM\SOFTWARE\CLASSES\INTERFACE\{0771CB93-DA7C-44B5-8196-422E6A2FBC40}, , [227fe1bfdd9e2412ad459a07ac55e41c],
Trojan.FakeMS.ED, HKLM\SOFTWARE\CLASSES\INTERFACE\{4A6B0E15-2E38-11D1-9965-00C04FBBB345}, , [227fe1bfdd9e2412ad459a07ac55e41c],
Trojan.FakeMS.ED, HKLM\SOFTWARE\CLASSES\INTERFACE\{4A6B0E16-2E38-11D1-9965-00C04FBBB345}, , [227fe1bfdd9e2412ad459a07ac55e41c],
Trojan.FakeMS.ED, HKLM\SOFTWARE\CLASSES\INTERFACE\{4E14FB9F-2E22-11D1-9964-00C04FBBB345}, , [227fe1bfdd9e2412ad459a07ac55e41c],
Trojan.FakeMS.ED, HKLM\SOFTWARE\CLASSES\INTERFACE\{784121F1-62A6-4B89-855F-D65F296DE83A}, , [227fe1bfdd9e2412ad459a07ac55e41c],
Trojan.FakeMS.ED, HKLM\SOFTWARE\CLASSES\INTERFACE\{7FB7EA43-2D76-4EA8-8CD9-3DECC270295E}, , [227fe1bfdd9e2412ad459a07ac55e41c],
Trojan.FakeMS.ED, HKLM\SOFTWARE\CLASSES\INTERFACE\{99CC098F-A48A-4E9C-8E58-965C0AFC19D5}, , [227fe1bfdd9e2412ad459a07ac55e41c],
Trojan.FakeMS.ED, HKLM\SOFTWARE\CLASSES\INTERFACE\{DA538EE2-F4DE-11D1-B6BB-00805FC79216}, , [227fe1bfdd9e2412ad459a07ac55e41c],
Trojan.FakeMS.ED, HKLM\SOFTWARE\CLASSES\INTERFACE\{E0498C93-4EFE-11D1-9971-00C04FBBB345}, , [227fe1bfdd9e2412ad459a07ac55e41c],
Trojan.FakeMS.ED, HKLM\SOFTWARE\CLASSES\INTERFACE\{E341516B-2E32-11D1-9964-00C04FBBB345}, , [227fe1bfdd9e2412ad459a07ac55e41c],
Trojan.FakeMS.ED, HKLM\SOFTWARE\CLASSES\INTERFACE\{F89AC270-D4EB-11D1-B682-00805FC79216}, , [227fe1bfdd9e2412ad459a07ac55e41c],
Trojan.FakeMS.ED, HKLM\SOFTWARE\CLASSES\INTERFACE\{FB2B72A0-7A68-11D1-88F9-0080C7D771BF}, , [227fe1bfdd9e2412ad459a07ac55e41c],
Trojan.FakeMS.ED, HKLM\SOFTWARE\CLASSES\INTERFACE\{FB2B72A1-7A68-11D1-88F9-0080C7D771BF}, , [227fe1bfdd9e2412ad459a07ac55e41c],
Trojan.FakeMS.ED, HKLM\SOFTWARE\CLASSES\INTERFACE\{FBC1D17D-C498-43A0-81AF-423DDD530AF6}, , [227fe1bfdd9e2412ad459a07ac55e41c],
Trojan.FakeMS.ED, HKLM\SOFTWARE\WOW6432NODE\CLASSES\INTERFACE\{0343E2F4-86F6-11D1-B760-00C04FB926AF}, , [227fe1bfdd9e2412ad459a07ac55e41c],
Trojan.FakeMS.ED, HKLM\SOFTWARE\WOW6432NODE\CLASSES\INTERFACE\{0771CB93-DA7C-44B5-8196-422E6A2FBC40}, , [227fe1bfdd9e2412ad459a07ac55e41c],
Trojan.FakeMS.ED, HKLM\SOFTWARE\WOW6432NODE\CLASSES\INTERFACE\{4A6B0E15-2E38-11D1-9965-00C04FBBB345}, , [227fe1bfdd9e2412ad459a07ac55e41c],
Trojan.FakeMS.ED, HKLM\SOFTWARE\WOW6432NODE\CLASSES\INTERFACE\{4A6B0E16-2E38-11D1-9965-00C04FBBB345}, , [227fe1bfdd9e2412ad459a07ac55e41c],
Trojan.FakeMS.ED, HKLM\SOFTWARE\WOW6432NODE\CLASSES\INTERFACE\{4E14FB9F-2E22-11D1-9964-00C04FBBB345}, , [227fe1bfdd9e2412ad459a07ac55e41c],
Trojan.FakeMS.ED, HKLM\SOFTWARE\WOW6432NODE\CLASSES\INTERFACE\{784121F1-62A6-4B89-855F-D65F296DE83A}, , [227fe1bfdd9e2412ad459a07ac55e41c],
Trojan.FakeMS.ED, HKLM\SOFTWARE\WOW6432NODE\CLASSES\INTERFACE\{7FB7EA43-2D76-4EA8-8CD9-3DECC270295E}, , [227fe1bfdd9e2412ad459a07ac55e41c],
Trojan.FakeMS.ED, HKLM\SOFTWARE\WOW6432NODE\CLASSES\INTERFACE\{99CC098F-A48A-4E9C-8E58-965C0AFC19D5}, , [227fe1bfdd9e2412ad459a07ac55e41c],
Trojan.FakeMS.ED, HKLM\SOFTWARE\WOW6432NODE\CLASSES\INTERFACE\{DA538EE2-F4DE-11D1-B6BB-00805FC79216}, , [227fe1bfdd9e2412ad459a07ac55e41c],
Trojan.FakeMS.ED, HKLM\SOFTWARE\WOW6432NODE\CLASSES\INTERFACE\{E0498C93-4EFE-11D1-9971-00C04FBBB345}, , [227fe1bfdd9e2412ad459a07ac55e41c],
Trojan.FakeMS.ED, HKLM\SOFTWARE\WOW6432NODE\CLASSES\INTERFACE\{E341516B-2E32-11D1-9964-00C04FBBB345}, , [227fe1bfdd9e2412ad459a07ac55e41c],
Trojan.FakeMS.ED, HKLM\SOFTWARE\WOW6432NODE\CLASSES\INTERFACE\{F89AC270-D4EB-11D1-B682-00805FC79216}, , [227fe1bfdd9e2412ad459a07ac55e41c],
Trojan.FakeMS.ED, HKLM\SOFTWARE\WOW6432NODE\CLASSES\INTERFACE\{FB2B72A0-7A68-11D1-88F9-0080C7D771BF}, , [227fe1bfdd9e2412ad459a07ac55e41c],
Trojan.FakeMS.ED, HKLM\SOFTWARE\WOW6432NODE\CLASSES\INTERFACE\{FB2B72A1-7A68-11D1-88F9-0080C7D771BF}, , [227fe1bfdd9e2412ad459a07ac55e41c],
Trojan.FakeMS.ED, HKLM\SOFTWARE\WOW6432NODE\CLASSES\INTERFACE\{FBC1D17D-C498-43A0-81AF-423DDD530AF6}, , [227fe1bfdd9e2412ad459a07ac55e41c],
Trojan.FakeMS.ED, HKLM\SOFTWARE\WOW6432NODE\CLASSES\TYPELIB\{4E14FB90-2E22-11D1-9964-00C04FBBB345}, , [227fe1bfdd9e2412ad459a07ac55e41c],
Trojan.FakeMS.ED, HKLM\SYSTEM\CURRENTCONTROLSET\SERVICES\fdPHost, , [227fe1bfdd9e2412ad459a07ac55e41c],
Trojan.FakeMS.ED, HKLM\SYSTEM\CURRENTCONTROLSET\SERVICES\FDResPub, , [227fe1bfdd9e2412ad459a07ac55e41c],
Trojan.FakeMS.ED, HKLM\SYSTEM\CURRENTCONTROLSET\SERVICES\FontCache, , [227fe1bfdd9e2412ad459a07ac55e41c],
Trojan.FakeMS.ED, HKLM\SYSTEM\CURRENTCONTROLSET\SERVICES\gpsvc, , [227fe1bfdd9e2412ad459a07ac55e41c],
Trojan.FakeMS.ED, HKLM\SOFTWARE\CLASSES\CLSID\{ADAB9B51-4CDD-4af0-892C-AB7FA7B3293F}, , [227fe1bfdd9e2412ad459a07ac55e41c],
Trojan.FakeMS.ED, HKLM\SOFTWARE\WOW6432NODE\CLASSES\CLSID\{ADAB9B51-4CDD-4AF0-892C-AB7FA7B3293F}, , [227fe1bfdd9e2412ad459a07ac55e41c],
Trojan.FakeMS.ED, HKLM\SOFTWARE\CLASSES\CLSID\{B3FF88A4-96EC-4CC1-983F-72BE0EBB368B}, , [227fe1bfdd9e2412ad459a07ac55e41c],
Trojan.FakeMS.ED, HKLM\SYSTEM\CURRENTCONTROLSET\SERVICES\HFGService, , [227fe1bfdd9e2412ad459a07ac55e41c],
Trojan.FakeMS.ED, HKLM\SYSTEM\CURRENTCONTROLSET\SERVICES\hidserv, , [227fe1bfdd9e2412ad459a07ac55e41c],
Trojan.FakeMS.ED, HKLM\SYSTEM\CURRENTCONTROLSET\SERVICES\hkmsvc, , [227fe1bfdd9e2412ad459a07ac55e41c],
Trojan.FakeMS.ED, HKLM\SOFTWARE\CLASSES\CLSID\{C1060E7E-7939-44A5-99C3-A6DCCD92AED0}, , [227fe1bfdd9e2412ad459a07ac55e41c],
Trojan.FakeMS.ED, HKLM\SOFTWARE\CLASSES\INTERFACE\{C1060E7E-7939-44A5-99C3-A6DCCD92AED0}, , [227fe1bfdd9e2412ad459a07ac55e41c],
Trojan.FakeMS.ED, HKLM\SYSTEM\CURRENTCONTROLSET\SERVICES\HomeGroupListener, , [227fe1bfdd9e2412ad459a07ac55e41c],
Trojan.FakeMS.ED, HKLM\SOFTWARE\CLASSES\CLSID\{517F6AA6-D6FA-46D0-8094-17FF17E4CCF4}, , [227fe1bfdd9e2412ad459a07ac55e41c],
Trojan.FakeMS.ED, HKLM\SOFTWARE\WOW6432NODE\CLASSES\CLSID\{517F6AA6-D6FA-46D0-8094-17FF17E4CCF4}, , [227fe1bfdd9e2412ad459a07ac55e41c],
Trojan.FakeMS.ED, HKLM\SOFTWARE\CLASSES\CLSID\{5255EFED-103A-4444-B124-F88F99E4EF8D}, , [227fe1bfdd9e2412ad459a07ac55e41c],
Trojan.FakeMS.ED, HKLM\SOFTWARE\WOW6432NODE\CLASSES\CLSID\{5255EFED-103A-4444-B124-F88F99E4EF8D}, , [227fe1bfdd9e2412ad459a07ac55e41c],
Trojan.FakeMS.ED, HKLM\SOFTWARE\CLASSES\CLSID\{7098BB2E-EB80-4433-BEF6-DF45206A41DC}, , [227fe1bfdd9e2412ad459a07ac55e41c],
Trojan.FakeMS.ED, HKLM\SOFTWARE\WOW6432NODE\CLASSES\CLSID\{7098BB2E-EB80-4433-BEF6-DF45206A41DC}, , [227fe1bfdd9e2412ad459a07ac55e41c],
Trojan.FakeMS.ED, HKLM\SOFTWARE\CLASSES\CLSID\{8ADD018C-5C5F-43C5-BE1E-07BAE85593B7}, , [227fe1bfdd9e2412ad459a07ac55e41c],
Trojan.FakeMS.ED, HKLM\SOFTWARE\WOW6432NODE\CLASSES\CLSID\{8ADD018C-5C5F-43C5-BE1E-07BAE85593B7}, , [227fe1bfdd9e2412ad459a07ac55e41c],
Trojan.FakeMS.ED, HKLM\SOFTWARE\CLASSES\CLSID\{956FADED-2450-4ABB-9F8C-4629FAFEBB92}, , [227fe1bfdd9e2412ad459a07ac55e41c],
Trojan.FakeMS.ED, HKLM\SOFTWARE\WOW6432NODE\CLASSES\CLSID\{956FADED-2450-4ABB-9F8C-4629FAFEBB92}, , [227fe1bfdd9e2412ad459a07ac55e41c],
Trojan.FakeMS.ED, HKLM\SOFTWARE\CLASSES\CLSID\{EB6B4457-F013-4E5A-9B05-1D44E4D6FAEB}, , [227fe1bfdd9e2412ad459a07ac55e41c],
Trojan.FakeMS.ED, HKLM\SOFTWARE\WOW6432NODE\CLASSES\CLSID\{EB6B4457-F013-4E5A-9B05-1D44E4D6FAEB}, , [227fe1bfdd9e2412ad459a07ac55e41c],
Trojan.FakeMS.ED, HKLM\SYSTEM\CURRENTCONTROLSET\SERVICES\HomeGroupProvider, , [227fe1bfdd9e2412ad459a07ac55e41c],
Trojan.FakeMS.ED, HKLM\SYSTEM\CURRENTCONTROLSET\SERVICES\IKEEXT, , [227fe1bfdd9e2412ad459a07ac55e41c],
Trojan.FakeMS.ED, HKLM\SYSTEM\CURRENTCONTROLSET\SERVICES\IPBusEnum, , [227fe1bfdd9e2412ad459a07ac55e41c],
Trojan.FakeMS.ED, HKLM\SYSTEM\CURRENTCONTROLSET\SERVICES\iphlpsvc, , [227fe1bfdd9e2412ad459a07ac55e41c],
Trojan.FakeMS.ED, HKLM\SYSTEM\CURRENTCONTROLSET\SERVICES\KtmRm, , [227fe1bfdd9e2412ad459a07ac55e41c],
Trojan.FakeMS.ED, HKLM\SYSTEM\CURRENTCONTROLSET\SERVICES\LanmanServer, , [227fe1bfdd9e2412ad459a07ac55e41c],
Trojan.FakeMS.ED, HKLM\SYSTEM\CURRENTCONTROLSET\SERVICES\lltdsvc, , [227fe1bfdd9e2412ad459a07ac55e41c],
Trojan.FakeMS.ED, HKLM\SYSTEM\CURRENTCONTROLSET\SERVICES\lmhosts, , [227fe1bfdd9e2412ad459a07ac55e41c],
Trojan.FakeMS.ED, HKLM\SYSTEM\CURRENTCONTROLSET\SERVICES\Mcx2Svc, , [227fe1bfdd9e2412ad459a07ac55e41c],
Trojan.FakeMS.ED, HKLM\SYSTEM\CURRENTCONTROLSET\SERVICES\MMCSS, , [227fe1bfdd9e2412ad459a07ac55e41c],
Trojan.FakeMS.ED, HKLM\SYSTEM\CURRENTCONTROLSET\SERVICES\MpsSvc, , [227fe1bfdd9e2412ad459a07ac55e41c],
Trojan.FakeMS.ED, HKLM\SYSTEM\CURRENTCONTROLSET\SERVICES\MSiSCSI, , [227fe1bfdd9e2412ad459a07ac55e41c],
Trojan.FakeMS.ED, HKLM\SYSTEM\CURRENTCONTROLSET\SERVICES\napagent, , [227fe1bfdd9e2412ad459a07ac55e41c],
Trojan.FakeMS.ED, HKLM\SYSTEM\CURRENTCONTROLSET\SERVICES\Netman, , [227fe1bfdd9e2412ad459a07ac55e41c],
Trojan.FakeMS.ED, HKLM\SYSTEM\CURRENTCONTROLSET\SERVICES\netprofm, , [227fe1bfdd9e2412ad459a07ac55e41c],
Trojan.FakeMS.ED, HKLM\SOFTWARE\CLASSES\CLSID\{DCB00C01-570F-4A9B-8D69-199FDBA5723B}, , [227fe1bfdd9e2412ad459a07ac55e41c],
Trojan.FakeMS.ED, HKLM\SOFTWARE\CLASSES\TYPELIB\{DCB00D01-570F-4A9B-8D69-199FDBA5723B}, , [227fe1bfdd9e2412ad459a07ac55e41c],
Trojan.FakeMS.ED, HKLM\SOFTWARE\CLASSES\INTERFACE\{DCB00000-570F-4A9B-8D69-199FDBA5723B}, , [227fe1bfdd9e2412ad459a07ac55e41c],
Trojan.FakeMS.ED, HKLM\SOFTWARE\CLASSES\INTERFACE\{DCB00001-570F-4A9B-8D69-199FDBA5723B}, , [227fe1bfdd9e2412ad459a07ac55e41c],
Trojan.FakeMS.ED, HKLM\SOFTWARE\CLASSES\INTERFACE\{DCB00002-570F-4A9B-8D69-199FDBA5723B}, , [227fe1bfdd9e2412ad459a07ac55e41c],
Trojan.FakeMS.ED, HKLM\SOFTWARE\CLASSES\INTERFACE\{DCB00003-570F-4A9B-8D69-199FDBA5723B}, , [227fe1bfdd9e2412ad459a07ac55e41c],
Trojan.FakeMS.ED, HKLM\SOFTWARE\CLASSES\INTERFACE\{DCB00004-570F-4A9B-8D69-199FDBA5723B}, , [227fe1bfdd9e2412ad459a07ac55e41c],
Trojan.FakeMS.ED, HKLM\SOFTWARE\CLASSES\INTERFACE\{DCB00005-570F-4A9B-8D69-199FDBA5723B}, , [227fe1bfdd9e2412ad459a07ac55e41c],
Trojan.FakeMS.ED, HKLM\SOFTWARE\CLASSES\INTERFACE\{DCB00006-570F-4A9B-8D69-199FDBA5723B}, , [227fe1bfdd9e2412ad459a07ac55e41c],
Trojan.FakeMS.ED, HKLM\SOFTWARE\CLASSES\INTERFACE\{DCB00007-570F-4A9B-8D69-199FDBA5723B}, , [227fe1bfdd9e2412ad459a07ac55e41c],
Trojan.FakeMS.ED, HKLM\SOFTWARE\WOW6432NODE\CLASSES\INTERFACE\{DCB00000-570F-4A9B-8D69-199FDBA5723B}, , [227fe1bfdd9e2412ad459a07ac55e41c],
Trojan.FakeMS.ED, HKLM\SOFTWARE\WOW6432NODE\CLASSES\INTERFACE\{DCB00001-570F-4A9B-8D69-199FDBA5723B}, , [227fe1bfdd9e2412ad459a07ac55e41c],
Trojan.FakeMS.ED, HKLM\SOFTWARE\WOW6432NODE\CLASSES\INTERFACE\{DCB00002-570F-4A9B-8D69-199FDBA5723B}, , [227fe1bfdd9e2412ad459a07ac55e41c],
Trojan.FakeMS.ED, HKLM\SOFTWARE\WOW6432NODE\CLASSES\INTERFACE\{DCB00003-570F-4A9B-8D69-199FDBA5723B}, , [227fe1bfdd9e2412ad459a07ac55e41c],
Trojan.FakeMS.ED, HKLM\SOFTWARE\WOW6432NODE\CLASSES\INTERFACE\{DCB00004-570F-4A9B-8D69-199FDBA5723B}, , [227fe1bfdd9e2412ad459a07ac55e41c],
Trojan.FakeMS.ED, HKLM\SOFTWARE\WOW6432NODE\CLASSES\INTERFACE\{DCB00005-570F-4A9B-8D69-199FDBA5723B}, , [227fe1bfdd9e2412ad459a07ac55e41c],
Trojan.FakeMS.ED, HKLM\SOFTWARE\WOW6432NODE\CLASSES\INTERFACE\{DCB00006-570F-4A9B-8D69-199FDBA5723B}, , [227fe1bfdd9e2412ad459a07ac55e41c],
Trojan.FakeMS.ED, HKLM\SOFTWARE\WOW6432NODE\CLASSES\INTERFACE\{DCB00007-570F-4A9B-8D69-199FDBA5723B}, , [227fe1bfdd9e2412ad459a07ac55e41c],
Trojan.FakeMS.ED, HKLM\SOFTWARE\WOW6432NODE\CLASSES\TYPELIB\{DCB00D01-570F-4A9B-8D69-199FDBA5723B}, , [227fe1bfdd9e2412ad459a07ac55e41c],
Trojan.FakeMS.ED, HKLM\SOFTWARE\WOW6432NODE\CLASSES\CLSID\{DCB00C01-570F-4A9B-8D69-199FDBA5723B}, , [227fe1bfdd9e2412ad459a07ac55e41c],
Trojan.FakeMS.ED, HKLM\SYSTEM\CURRENTCONTROLSET\SERVICES\NlaSvc, , [227fe1bfdd9e2412ad459a07ac55e41c],
Trojan.FakeMS.ED, HKLM\SYSTEM\CURRENTCONTROLSET\SERVICES\nsi, , [227fe1bfdd9e2412ad459a07ac55e41c],
Trojan.FakeMS.ED, HKLM\SYSTEM\CURRENTCONTROLSET\SERVICES\p2pimsvc, , [227fe1bfdd9e2412ad459a07ac55e41c],
Trojan.FakeMS.ED, HKLM\SYSTEM\CURRENTCONTROLSET\SERVICES\p2psvc, , [227fe1bfdd9e2412ad459a07ac55e41c],
Trojan.FakeMS.ED, HKLM\SYSTEM\CURRENTCONTROLSET\SERVICES\PcaSvc, , [227fe1bfdd9e2412ad459a07ac55e41c],
Trojan.FakeMS.ED, HKLM\SYSTEM\CURRENTCONTROLSET\SERVICES\PeerDistSvc, , [227fe1bfdd9e2412ad459a07ac55e41c],
Trojan.FakeMS.ED, HKLM\SYSTEM\CURRENTCONTROLSET\SERVICES\pla, , [227fe1bfdd9e2412ad459a07ac55e41c],
Trojan.FakeMS.ED, HKLM\SOFTWARE\CLASSES\CLSID\{03837511-098B-11D8-9414-505054503030}, , [227fe1bfdd9e2412ad459a07ac55e41c],
Trojan.FakeMS.ED, HKLM\SOFTWARE\CLASSES\TYPELIB\{03837500-098B-11D8-9414-505054503030}, , [227fe1bfdd9e2412ad459a07ac55e41c],
Trojan.FakeMS.ED, HKLM\SOFTWARE\CLASSES\INTERFACE\{038374FF-098B-11D8-9414-505054503030}, , [227fe1bfdd9e2412ad459a07ac55e41c],
Trojan.FakeMS.ED, HKLM\SOFTWARE\CLASSES\INTERFACE\{03837502-098B-11D8-9414-505054503030}, , [227fe1bfdd9e2412ad459a07ac55e41c],
Trojan.FakeMS.ED, HKLM\SOFTWARE\CLASSES\INTERFACE\{03837506-098B-11D8-9414-505054503030}, , [227fe1bfdd9e2412ad459a07ac55e41c],
Trojan.FakeMS.ED, HKLM\SOFTWARE\CLASSES\INTERFACE\{0383750B-098B-11D8-9414-505054503030}, , [227fe1bfdd9e2412ad459a07ac55e41c],
Trojan.FakeMS.ED, HKLM\SOFTWARE\CLASSES\INTERFACE\{03837510-098B-11D8-9414-505054503030}, , [227fe1bfdd9e2412ad459a07ac55e41c],
Trojan.FakeMS.ED, HKLM\SOFTWARE\CLASSES\INTERFACE\{03837512-098B-11D8-9414-505054503030}, , [227fe1bfdd9e2412ad459a07ac55e41c],
Trojan.FakeMS.ED, HKLM\SOFTWARE\CLASSES\INTERFACE\{03837514-098B-11D8-9414-505054503030}, , [227fe1bfdd9e2412ad459a07ac55e41c],
Trojan.FakeMS.ED, HKLM\SOFTWARE\CLASSES\INTERFACE\{03837516-098B-11D8-9414-505054503030}, , [227fe1bfdd9e2412ad459a07ac55e41c],
Trojan.FakeMS.ED, HKLM\SOFTWARE\CLASSES\INTERFACE\{0383751a-098b-11d8-9414-505054503030}, , [227fe1bfdd9e2412ad459a07ac55e41c],
Trojan.FakeMS.ED, HKLM\SOFTWARE\CLASSES\INTERFACE\{03837520-098B-11D8-9414-505054503030}, , [227fe1bfdd9e2412ad459a07ac55e41c],
Trojan.FakeMS.ED, HKLM\SOFTWARE\CLASSES\INTERFACE\{03837524-098B-11D8-9414-505054503030}, , [227fe1bfdd9e2412ad459a07ac55e41c],
Trojan.FakeMS.ED, HKLM\SOFTWARE\CLASSES\INTERFACE\{03837533-098B-11D8-9414-505054503030}, , [227fe1bfdd9e2412ad459a07ac55e41c],
Trojan.FakeMS.ED, HKLM\SOFTWARE\CLASSES\INTERFACE\{03837534-098B-11D8-9414-505054503030}, , [227fe1bfdd9e2412ad459a07ac55e41c],
Trojan.FakeMS.ED, HKLM\SOFTWARE\CLASSES\INTERFACE\{0383753A-098B-11D8-9414-505054503030}, , [227fe1bfdd9e2412ad459a07ac55e41c],
Trojan.FakeMS.ED, HKLM\SOFTWARE\CLASSES\INTERFACE\{0383753D-098B-11D8-9414-505054503030}, , [227fe1bfdd9e2412ad459a07ac55e41c],
Trojan.FakeMS.ED, HKLM\SOFTWARE\CLASSES\INTERFACE\{03837541-098b-11d8-9414-505054503030}, , [227fe1bfdd9e2412ad459a07ac55e41c],
Trojan.FakeMS.ED, HKLM\SOFTWARE\CLASSES\INTERFACE\{03837543-098b-11d8-9414-505054503030}, , [227fe1bfdd9e2412ad459a07ac55e41c],
Trojan.FakeMS.ED, HKLM\SOFTWARE\CLASSES\INTERFACE\{03837544-098b-11d8-9414-505054503030}, , [227fe1bfdd9e2412ad459a07ac55e41c],
Trojan.FakeMS.ED, HKLM\SOFTWARE\WOW6432NODE\CLASSES\INTERFACE\{038374FF-098B-11D8-9414-505054503030}, , [227fe1bfdd9e2412ad459a07ac55e41c],
Trojan.FakeMS.ED, HKLM\SOFTWARE\WOW6432NODE\CLASSES\INTERFACE\{03837502-098B-11D8-9414-505054503030}, , [227fe1bfdd9e2412ad459a07ac55e41c],
Trojan.FakeMS.ED, HKLM\SOFTWARE\WOW6432NODE\CLASSES\INTERFACE\{03837506-098B-11D8-9414-505054503030}, , [227fe1bfdd9e2412ad459a07ac55e41c],
Trojan.FakeMS.ED, HKLM\SOFTWARE\WOW6432NODE\CLASSES\INTERFACE\{0383750B-098B-11D8-9414-505054503030}, , [227fe1bfdd9e2412ad459a07ac55e41c],
Trojan.FakeMS.ED, HKLM\SOFTWARE\WOW6432NODE\CLASSES\INTERFACE\{03837510-098B-11D8-9414-505054503030}, , [227fe1bfdd9e2412ad459a07ac55e41c],
Trojan.FakeMS.ED, HKLM\SOFTWARE\WOW6432NODE\CLASSES\INTERFACE\{03837512-098B-11D8-9414-505054503030}, , [227fe1bfdd9e2412ad459a07ac55e41c],
Trojan.FakeMS.ED, HKLM\SOFTWARE\WOW6432NODE\CLASSES\INTERFACE\{03837514-098B-11D8-9414-505054503030}, , [227fe1bfdd9e2412ad459a07ac55e41c],
Trojan.FakeMS.ED, HKLM\SOFTWARE\WOW6432NODE\CLASSES\INTERFACE\{03837516-098B-11D8-9414-505054503030}, , [227fe1bfdd9e2412ad459a07ac55e41c],
Trojan.FakeMS.ED, HKLM\SOFTWARE\WOW6432NODE\CLASSES\INTERFACE\{0383751a-098b-11d8-9414-505054503030}, , [227fe1bfdd9e2412ad459a07ac55e41c],
Trojan.FakeMS.ED, HKLM\SOFTWARE\WOW6432NODE\CLASSES\INTERFACE\{03837520-098B-11D8-9414-505054503030}, , [227fe1bfdd9e2412ad459a07ac55e41c],
Trojan.FakeMS.ED, HKLM\SOFTWARE\WOW6432NODE\CLASSES\INTERFACE\{03837524-098B-11D8-9414-505054503030}, , [227fe1bfdd9e2412ad459a07ac55e41c],
Trojan.FakeMS.ED, HKLM\SOFTWARE\WOW6432NODE\CLASSES\INTERFACE\{03837533-098B-11D8-9414-505054503030}, , [227fe1bfdd9e2412ad459a07ac55e41c],
Trojan.FakeMS.ED, HKLM\SOFTWARE\WOW6432NODE\CLASSES\INTERFACE\{03837534-098B-11D8-9414-505054503030}, , [227fe1bfdd9e2412ad459a07ac55e41c],
Trojan.FakeMS.ED, HKLM\SOFTWARE\WOW6432NODE\CLASSES\INTERFACE\{0383753A-098B-11D8-9414-505054503030}, , [227fe1bfdd9e2412ad459a07ac55e41c],
Trojan.FakeMS.ED, HKLM\SOFTWARE\WOW6432NODE\CLASSES\INTERFACE\{0383753D-098B-11D8-9414-505054503030}, , [227fe1bfdd9e2412ad459a07ac55e41c],
Trojan.FakeMS.ED, HKLM\SOFTWARE\WOW6432NODE\CLASSES\INTERFACE\{03837541-098b-11d8-9414-505054503030}, , [227fe1bfdd9e2412ad459a07ac55e41c],
Trojan.FakeMS.ED, HKLM\SOFTWARE\WOW6432NODE\CLASSES\INTERFACE\{03837543-098b-11d8-9414-505054503030}, , [227fe1bfdd9e2412ad459a07ac55e41c],
Trojan.FakeMS.ED, HKLM\SOFTWARE\WOW6432NODE\CLASSES\INTERFACE\{03837544-098b-11d8-9414-505054503030}, , [227fe1bfdd9e2412ad459a07ac55e41c],
Trojan.FakeMS.ED, HKLM\SOFTWARE\WOW6432NODE\CLASSES\TYPELIB\{03837500-098B-11D8-9414-505054503030}, , [227fe1bfdd9e2412ad459a07ac55e41c],
Trojan.FakeMS.ED, HKLM\SOFTWARE\CLASSES\PLA.TraceDataProviderCollection.1, , [227fe1bfdd9e2412ad459a07ac55e41c],
Trojan.FakeMS.ED, HKLM\SOFTWARE\CLASSES\PLA.TraceDataProviderCollection, , [227fe1bfdd9e2412ad459a07ac55e41c],
Trojan.FakeMS.ED, HKLM\SOFTWARE\WOW6432NODE\CLASSES\PLA.TraceDataProviderCollection, , [227fe1bfdd9e2412ad459a07ac55e41c],
Trojan.FakeMS.ED, HKLM\SOFTWARE\WOW6432NODE\CLASSES\PLA.TraceDataProviderCollection.1, , [227fe1bfdd9e2412ad459a07ac55e41c],
Trojan.FakeMS.ED, HKLM\SOFTWARE\WOW6432NODE\CLASSES\CLSID\{03837511-098B-11D8-9414-505054503030}, , [227fe1bfdd9e2412ad459a07ac55e41c],
Trojan.FakeMS.ED, HKLM\SOFTWARE\CLASSES\CLSID\{03837513-098B-11D8-9414-505054503030}, , [227fe1bfdd9e2412ad459a07ac55e41c],
Trojan.FakeMS.ED, HKLM\SOFTWARE\CLASSES\PLA.TraceDataProvider.1, , [227fe1bfdd9e2412ad459a07ac55e41c],
Trojan.FakeMS.ED, HKLM\SOFTWARE\CLASSES\PLA.TraceDataProvider, , [227fe1bfdd9e2412ad459a07ac55e41c],
Trojan.FakeMS.ED, HKLM\SOFTWARE\WOW6432NODE\CLASSES\PLA.TraceDataProvider, , [227fe1bfdd9e2412ad459a07ac55e41c],
Trojan.FakeMS.ED, HKLM\SOFTWARE\WOW6432NODE\CLASSES\PLA.TraceDataProvider.1, , [227fe1bfdd9e2412ad459a07ac55e41c],
Trojan.FakeMS.ED, HKLM\SOFTWARE\WOW6432NODE\CLASSES\CLSID\{03837513-098B-11D8-9414-505054503030}, , [227fe1bfdd9e2412ad459a07ac55e41c],
Trojan.FakeMS.ED, HKLM\SOFTWARE\CLASSES\CLSID\{0383751C-098B-11D8-9414-505054503030}, , [227fe1bfdd9e2412ad459a07ac55e41c],
Trojan.FakeMS.ED, HKLM\SOFTWARE\CLASSES\PLA.TraceSession.1, , [227fe1bfdd9e2412ad459a07ac55e41c],
Trojan.FakeMS.ED, HKLM\SOFTWARE\CLASSES\PLA.TraceSession, , [227fe1bfdd9e2412ad459a07ac55e41c],
Trojan.FakeMS.ED, HKLM\SOFTWARE\WOW6432NODE\CLASSES\PLA.TraceSession, , [227fe1bfdd9e2412ad459a07ac55e41c],
Trojan.FakeMS.ED, HKLM\SOFTWARE\WOW6432NODE\CLASSES\PLA.TraceSession.1, , [227fe1bfdd9e2412ad459a07ac55e41c],
Trojan.FakeMS.ED, HKLM\SOFTWARE\WOW6432NODE\CLASSES\CLSID\{0383751C-098B-11D8-9414-505054503030}, , [227fe1bfdd9e2412ad459a07ac55e41c],
Trojan.FakeMS.ED, HKLM\SOFTWARE\CLASSES\CLSID\{03837521-098B-11D8-9414-505054503030}, , [227fe1bfdd9e2412ad459a07ac55e41c],
Trojan.FakeMS.ED, HKLM\SOFTWARE\CLASSES\PLA.DataCollectorSet.1, , [227fe1bfdd9e2412ad459a07ac55e41c],
Trojan.FakeMS.ED, HKLM\SOFTWARE\CLASSES\PLA.DataCollectorSet, , [227fe1bfdd9e2412ad459a07ac55e41c],
Trojan.FakeMS.ED, HKLM\SOFTWARE\WOW6432NODE\CLASSES\PLA.DataCollectorSet, , [227fe1bfdd9e2412ad459a07ac55e41c],
Trojan.FakeMS.ED, HKLM\SOFTWARE\WOW6432NODE\CLASSES\PLA.DataCollectorSet.1, , [227fe1bfdd9e2412ad459a07ac55e41c],
Trojan.FakeMS.ED, HKLM\SOFTWARE\WOW6432NODE\CLASSES\CLSID\{03837521-098B-11D8-9414-505054503030}, , [227fe1bfdd9e2412ad459a07ac55e41c],
Trojan.FakeMS.ED, HKLM\SOFTWARE\CLASSES\CLSID\{03837525-098B-11D8-9414-505054503030}, , [227fe1bfdd9e2412ad459a07ac55e41c],
Trojan.FakeMS.ED, HKLM\SOFTWARE\CLASSES\PLA.DataCollectorSetCollection.1, , [227fe1bfdd9e2412ad459a07ac55e41c],
Trojan.FakeMS.ED, HKLM\SOFTWARE\CLASSES\PLA.DataCollectorSetCollection, , [227fe1bfdd9e2412ad459a07ac55e41c],
Trojan.FakeMS.ED, HKLM\SOFTWARE\WOW6432NODE\CLASSES\PLA.DataCollectorSetCollection, , [227fe1bfdd9e2412ad459a07ac55e41c],
Trojan.FakeMS.ED, HKLM\SOFTWARE\WOW6432NODE\CLASSES\PLA.DataCollectorSetCollection.1, , [227fe1bfdd9e2412ad459a07ac55e41c],
Trojan.FakeMS.ED, HKLM\SOFTWARE\WOW6432NODE\CLASSES\CLSID\{03837525-098B-11D8-9414-505054503030}, , [227fe1bfdd9e2412ad459a07ac55e41c],
Trojan.FakeMS.ED, HKLM\SOFTWARE\CLASSES\CLSID\{03837526-098B-11D8-9414-505054503030}, , [227fe1bfdd9e2412ad459a07ac55e41c],
Trojan.FakeMS.ED, HKLM\SOFTWARE\CLASSES\PLA.LegacyDataCollectorSet.1, , [227fe1bfdd9e2412ad459a07ac55e41c],
Trojan.FakeMS.ED, HKLM\SOFTWARE\CLASSES\PLA.LegacyDataCollectorSet, , [227fe1bfdd9e2412ad459a07ac55e41c],
Trojan.FakeMS.ED, HKLM\SOFTWARE\WOW6432NODE\CLASSES\PLA.LegacyDataCollectorSet, , [227fe1bfdd9e2412ad459a07ac55e41c],
Trojan.FakeMS.ED, HKLM\SOFTWARE\WOW6432NODE\CLASSES\PLA.LegacyDataCollectorSet.1, , [227fe1bfdd9e2412ad459a07ac55e41c],
Trojan.FakeMS.ED, HKLM\SOFTWARE\WOW6432NODE\CLASSES\CLSID\{03837526-098B-11D8-9414-505054503030}, , [227fe1bfdd9e2412ad459a07ac55e41c],
Trojan.FakeMS.ED, HKLM\SOFTWARE\CLASSES\CLSID\{03837527-098B-11D8-9414-505054503030}, , [227fe1bfdd9e2412ad459a07ac55e41c],
Trojan.FakeMS.ED, HKLM\SOFTWARE\CLASSES\PLA.LegacyDataCollectorSetCollection.1, , [227fe1bfdd9e2412ad459a07ac55e41c],
Trojan.FakeMS.ED, HKLM\SOFTWARE\CLASSES\PLA.LegacyDataCollectorSetCollection, , [227fe1bfdd9e2412ad459a07ac55e41c],
Trojan.FakeMS.ED, HKLM\SOFTWARE\WOW6432NODE\CLASSES\PLA.LegacyDataCollectorSetCollection, , [227fe1bfdd9e2412ad459a07ac55e41c],
Trojan.FakeMS.ED, HKLM\SOFTWARE\WOW6432NODE\CLASSES\PLA.LegacyDataCollectorSetCollection.1, , [227fe1bfdd9e2412ad459a07ac55e41c],
Trojan.FakeMS.ED, HKLM\SOFTWARE\WOW6432NODE\CLASSES\CLSID\{03837527-098B-11D8-9414-505054503030}, , [227fe1bfdd9e2412ad459a07ac55e41c],
Trojan.FakeMS.ED, HKLM\SOFTWARE\CLASSES\CLSID\{03837528-098B-11D8-9414-505054503030}, , [227fe1bfdd9e2412ad459a07ac55e41c],
Trojan.FakeMS.ED, HKLM\SOFTWARE\CLASSES\PLA.LegacyTraceSession.1, , [227fe1bfdd9e2412ad459a07ac55e41c],
Trojan.FakeMS.ED, HKLM\SOFTWARE\CLASSES\PLA.LegacyTraceSession, , [227fe1bfdd9e2412ad459a07ac55e41c],
Trojan.FakeMS.ED, HKLM\SOFTWARE\WOW6432NODE\CLASSES\PLA.LegacyTraceSession, , [227fe1bfdd9e2412ad459a07ac55e41c],
Trojan.FakeMS.ED, HKLM\SOFTWARE\WOW6432NODE\CLASSES\PLA.LegacyTraceSession.1, , [227fe1bfdd9e2412ad459a07ac55e41c],
Trojan.FakeMS.ED, HKLM\SOFTWARE\WOW6432NODE\CLASSES\CLSID\{03837528-098B-11D8-9414-505054503030}, , [227fe1bfdd9e2412ad459a07ac55e41c],
Trojan.FakeMS.ED, HKLM\SOFTWARE\CLASSES\CLSID\{03837529-098B-11D8-9414-505054503030}, , [227fe1bfdd9e2412ad459a07ac55e41c],
Trojan.FakeMS.ED, HKLM\SOFTWARE\CLASSES\PLA.LegacyTraceSessionCollection.1, , [227fe1bfdd9e2412ad459a07ac55e41c],
Trojan.FakeMS.ED, HKLM\SOFTWARE\CLASSES\PLA.LegacyTraceSessionCollection, , [227fe1bfdd9e2412ad459a07ac55e41c],
Trojan.FakeMS.ED, HKLM\SOFTWARE\WOW6432NODE\CLASSES\PLA.LegacyTraceSessionCollection, , [227fe1bfdd9e2412ad459a07ac55e41c],
Trojan.FakeMS.ED, HKLM\SOFTWARE\WOW6432NODE\CLASSES\PLA.LegacyTraceSessionCollection.1, , [227fe1bfdd9e2412ad459a07ac55e41c],
Trojan.FakeMS.ED, HKLM\SOFTWARE\WOW6432NODE\CLASSES\CLSID\{03837529-098B-11D8-9414-505054503030}, , [227fe1bfdd9e2412ad459a07ac55e41c],
Trojan.FakeMS.ED, HKLM\SOFTWARE\CLASSES\CLSID\{03837530-098B-11D8-9414-505054503030}, , [227fe1bfdd9e2412ad459a07ac55e41c],
Trojan.FakeMS.ED, HKLM\SOFTWARE\CLASSES\PLA.TraceSessionCollection.1, , [227fe1bfdd9e2412ad459a07ac55e41c],
Trojan.FakeMS.ED, HKLM\SOFTWARE\CLASSES\PLA.TraceSessionCollection, , [227fe1bfdd9e2412ad459a07ac55e41c],
Trojan.FakeMS.ED, HKLM\SOFTWARE\WOW6432NODE\CLASSES\PLA.TraceSessionCollection, , [227fe1bfdd9e2412ad459a07ac55e41c],
Trojan.FakeMS.ED, HKLM\SOFTWARE\WOW6432NODE\CLASSES\PLA.TraceSessionCollection.1, , [227fe1bfdd9e2412ad459a07ac55e41c],
Trojan.FakeMS.ED, HKLM\SOFTWARE\WOW6432NODE\CLASSES\CLSID\{03837530-098B-11D8-9414-505054503030}, , [227fe1bfdd9e2412ad459a07ac55e41c],
Trojan.FakeMS.ED, HKLM\SOFTWARE\CLASSES\CLSID\{03837531-098B-11D8-9414-505054503030}, , [227fe1bfdd9e2412ad459a07ac55e41c],
Trojan.FakeMS.ED, HKLM\SOFTWARE\CLASSES\PLA.ServerDataCollectorSet.1, , [227fe1bfdd9e2412ad459a07ac55e41c],
Trojan.FakeMS.ED, HKLM\SOFTWARE\CLASSES\PLA.ServerDataCollectorSet, , [227fe1bfdd9e2412ad459a07ac55e41c],
Trojan.FakeMS.ED, HKLM\SOFTWARE\WOW6432NODE\CLASSES\PLA.ServerDataCollectorSet, , [227fe1bfdd9e2412ad459a07ac55e41c],
Trojan.FakeMS.ED, HKLM\SOFTWARE\WOW6432NODE\CLASSES\PLA.ServerDataCollectorSet.1, , [227fe1bfdd9e2412ad459a07ac55e41c],
Trojan.FakeMS.ED, HKLM\SOFTWARE\WOW6432NODE\CLASSES\CLSID\{03837531-098B-11D8-9414-505054503030}, , [227fe1bfdd9e2412ad459a07ac55e41c],
Trojan.FakeMS.ED, HKLM\SOFTWARE\CLASSES\CLSID\{03837532-098B-11D8-9414-505054503030}, , [227fe1bfdd9e2412ad459a07ac55e41c],
Trojan.FakeMS.ED, HKLM\SOFTWARE\CLASSES\PLA.ServerDataCollectorSetCollection.1, , [227fe1bfdd9e2412ad459a07ac55e41c],
Trojan.FakeMS.ED, HKLM\SOFTWARE\CLASSES\PLA.ServerDataCollectorSetCollection, , [227fe1bfdd9e2412ad459a07ac55e41c],
Trojan.FakeMS.ED, HKLM\SOFTWARE\WOW6432NODE\CLASSES\PLA.ServerDataCollectorSetCollection, , [227fe1bfdd9e2412ad459a07ac55e41c],
Trojan.FakeMS.ED, HKLM\SOFTWARE\WOW6432NODE\CLASSES\PLA.ServerDataCollectorSetCollection.1, , [227fe1bfdd9e2412ad459a07ac55e41c],
Trojan.FakeMS.ED, HKLM\SOFTWARE\WOW6432NODE\CLASSES\CLSID\{03837532-098B-11D8-9414-505054503030}, , [227fe1bfdd9e2412ad459a07ac55e41c],
Trojan.FakeMS.ED, HKLM\SOFTWARE\CLASSES\CLSID\{03837538-098B-11D8-9414-505054503030}, , [227fe1bfdd9e2412ad459a07ac55e41c],
Trojan.FakeMS.ED, HKLM\SOFTWARE\CLASSES\PLA.BootTraceSession.1, , [227fe1bfdd9e2412ad459a07ac55e41c],
Trojan.FakeMS.ED, HKLM\SOFTWARE\CLASSES\PLA.BootTraceSession, , [227fe1bfdd9e2412ad459a07ac55e41c],
Trojan.FakeMS.ED, HKLM\SOFTWARE\WOW6432NODE\CLASSES\PLA.BootTraceSession, , [227fe1bfdd9e2412ad459a07ac55e41c],
Trojan.FakeMS.ED, HKLM\SOFTWARE\WOW6432NODE\CLASSES\PLA.BootTraceSession.1, , [227fe1bfdd9e2412ad459a07ac55e41c],
Trojan.FakeMS.ED, HKLM\SOFTWARE\WOW6432NODE\CLASSES\CLSID\{03837538-098B-11D8-9414-505054503030}, , [227fe1bfdd9e2412ad459a07ac55e41c],
Trojan.FakeMS.ED, HKLM\SOFTWARE\CLASSES\CLSID\{03837539-098B-11D8-9414-505054503030}, , [227fe1bfdd9e2412ad459a07ac55e41c],
Trojan.FakeMS.ED, HKLM\SOFTWARE\CLASSES\PLA.BootTraceSessionCollection.1, , [227fe1bfdd9e2412ad459a07ac55e41c],
Trojan.FakeMS.ED, HKLM\SOFTWARE\CLASSES\PLA.BootTraceSessionCollection, , [227fe1bfdd9e2412ad459a07ac55e41c],
Trojan.FakeMS.ED, HKLM\SOFTWARE\WOW6432NODE\CLASSES\PLA.BootTraceSessionCollection, , [227fe1bfdd9e2412ad459a07ac55e41c],
Trojan.FakeMS.ED, HKLM\SOFTWARE\WOW6432NODE\CLASSES\PLA.BootTraceSessionCollection.1, , [227fe1bfdd9e2412ad459a07ac55e41c],
Trojan.FakeMS.ED, HKLM\SOFTWARE\WOW6432NODE\CLASSES\CLSID\{03837539-098B-11D8-9414-505054503030}, , [227fe1bfdd9e2412ad459a07ac55e41c],
Trojan.FakeMS.ED, HKLM\SOFTWARE\CLASSES\CLSID\{03837546-098B-11D8-9414-505054503030}, , [227fe1bfdd9e2412ad459a07ac55e41c],
Trojan.FakeMS.ED, HKLM\SOFTWARE\CLASSES\PLA.SystemDataCollectorSet.1, , [227fe1bfdd9e2412ad459a07ac55e41c],
Trojan.FakeMS.ED, HKLM\SOFTWARE\CLASSES\PLA.SystemDataCollectorSet, , [227fe1bfdd9e2412ad459a07ac55e41c],
Trojan.FakeMS.ED, HKLM\SOFTWARE\WOW6432NODE\CLASSES\PLA.SystemDataCollectorSet, , [227fe1bfdd9e2412ad459a07ac55e41c],
Trojan.FakeMS.ED, HKLM\SOFTWARE\WOW6432NODE\CLASSES\PLA.SystemDataCollectorSet.1, , [227fe1bfdd9e2412ad459a07ac55e41c],
Trojan.FakeMS.ED, HKLM\SOFTWARE\WOW6432NODE\CLASSES\CLSID\{03837546-098B-11D8-9414-505054503030}, , [227fe1bfdd9e2412ad459a07ac55e41c],
Trojan.FakeMS.ED, HKLM\SOFTWARE\CLASSES\CLSID\{03837547-098B-11D8-9414-505054503030}, , [227fe1bfdd9e2412ad459a07ac55e41c],
Trojan.FakeMS.ED, HKLM\SOFTWARE\CLASSES\PLA.SystemDataCollectorSetCollection.1, , [227fe1bfdd9e2412ad459a07ac55e41c],
Trojan.FakeMS.ED, HKLM\SOFTWARE\CLASSES\PLA.SystemDataCollectorSetCollection, , [227fe1bfdd9e2412ad459a07ac55e41c],
Trojan.FakeMS.ED, HKLM\SOFTWARE\WOW6432NODE\CLASSES\PLA.SystemDataCollectorSetCollection, , [227fe1bfdd9e2412ad459a07ac55e41c],
Trojan.FakeMS.ED, HKLM\SOFTWARE\WOW6432NODE\CLASSES\PLA.SystemDataCollectorSetCollection.1, , [227fe1bfdd9e2412ad459a07ac55e41c],
Trojan.FakeMS.ED, HKLM\SOFTWARE\WOW6432NODE\CLASSES\CLSID\{03837547-098B-11D8-9414-505054503030}, , [227fe1bfdd9e2412ad459a07ac55e41c],
Trojan.FakeMS.ED, HKLM\SYSTEM\CURRENTCONTROLSET\SERVICES\PlugPlay, , [227fe1bfdd9e2412ad459a07ac55e41c],
Trojan.FakeMS.ED, HKLM\SYSTEM\CURRENTCONTROLSET\SERVICES\PNRPAutoReg, , [227fe1bfdd9e2412ad459a07ac55e41c],
Trojan.FakeMS.ED, HKLM\SYSTEM\CURRENTCONTROLSET\SERVICES\PNRPsvc, , [227fe1bfdd9e2412ad459a07ac55e41c],
Trojan.FakeMS.ED, HKLM\SYSTEM\CURRENTCONTROLSET\SERVICES\PolicyAgent, , [227fe1bfdd9e2412ad459a07ac55e41c],
Trojan.FakeMS.ED, HKLM\SYSTEM\CURRENTCONTROLSET\SERVICES\Power, , [227fe1bfdd9e2412ad459a07ac55e41c],
Trojan.FakeMS.ED, HKLM\SYSTEM\CURRENTCONTROLSET\SERVICES\ProfSvc, , [227fe1bfdd9e2412ad459a07ac55e41c],
Trojan.FakeMS.ED, HKLM\SYSTEM\CURRENTCONTROLSET\SERVICES\QWAVE, , [227fe1bfdd9e2412ad459a07ac55e41c],
Trojan.FakeMS.ED, HKLM\SYSTEM\CURRENTCONTROLSET\SERVICES\RemoteAccess, , [227fe1bfdd9e2412ad459a07ac55e41c],
Trojan.FakeMS.ED, HKLM\SYSTEM\CURRENTCONTROLSET\SERVICES\RemoteRegistry, , [227fe1bfdd9e2412ad459a07ac55e41c],
Trojan.FakeMS.ED, HKLM\SYSTEM\CURRENTCONTROLSET\SERVICES\RpcEptMapper, , [227fe1bfdd9e2412ad459a07ac55e41c],
Trojan.FakeMS.ED, HKLM\SYSTEM\CURRENTCONTROLSET\SERVICES\SCardSvr, , [227fe1bfdd9e2412ad459a07ac55e41c],
Trojan.FakeMS.ED, HKLM\SYSTEM\CURRENTCONTROLSET\SERVICES\SCPolicySvc, , [227fe1bfdd9e2412ad459a07ac55e41c],
Trojan.FakeMS.ED, HKLM\SYSTEM\CURRENTCONTROLSET\SERVICES\SDRSVC, , [227fe1bfdd9e2412ad459a07ac55e41c],
Trojan.FakeMS.ED, HKLM\SYSTEM\CURRENTCONTROLSET\SERVICES\SENS, , [227fe1bfdd9e2412ad459a07ac55e41c],
Trojan.FakeMS.ED, HKLM\SYSTEM\CURRENTCONTROLSET\SERVICES\SensrSvc, , [227fe1bfdd9e2412ad459a07ac55e41c],
Trojan.FakeMS.ED, HKLM\SYSTEM\CURRENTCONTROLSET\SERVICES\SessionEnv, , [227fe1bfdd9e2412ad459a07ac55e41c],
Trojan.FakeMS.ED, HKLM\SYSTEM\CURRENTCONTROLSET\SERVICES\SharedAccess, , [227fe1bfdd9e2412ad459a07ac55e41c],
Trojan.FakeMS.ED, HKLM\SYSTEM\CURRENTCONTROLSET\SERVICES\ShellHWDetection, , [227fe1bfdd9e2412ad459a07ac55e41c],
Trojan.FakeMS.ED, HKLM\SYSTEM\CURRENTCONTROLSET\SERVICES\sppuinotify, , [227fe1bfdd9e2412ad459a07ac55e41c],
Trojan.FakeMS.ED, HKLM\SYSTEM\CURRENTCONTROLSET\SERVICES\SSDPSRV, , [227fe1bfdd9e2412ad459a07ac55e41c],

tbowyer · July 26, 2014

Trojan.FakeMS.ED, HKLM\SYSTEM\CURRENTCONTROLSET\SERVICES\SstpSvc, , [227fe1bfdd9e2412ad459a07ac55e41c],
Trojan.FakeMS.ED, HKLM\SYSTEM\CURRENTCONTROLSET\SERVICES\StorSvc, , [227fe1bfdd9e2412ad459a07ac55e41c],
Trojan.FakeMS.ED, HKLM\SYSTEM\CURRENTCONTROLSET\SERVICES\swprv, , [227fe1bfdd9e2412ad459a07ac55e41c],
Trojan.FakeMS.ED, HKLM\SYSTEM\CURRENTCONTROLSET\SERVICES\SysMain, , [227fe1bfdd9e2412ad459a07ac55e41c],
Trojan.FakeMS.ED, HKLM\SOFTWARE\CLASSES\CLSID\{55B3A0BD-4D28-42fe-8CFB-FA3EDFF969B8}, , [227fe1bfdd9e2412ad459a07ac55e41c],
Trojan.FakeMS.ED, HKLM\SOFTWARE\CLASSES\CLSID\{A6A3E580-083F-471b-8F08-87D34F678C95}, , [227fe1bfdd9e2412ad459a07ac55e41c],
Trojan.FakeMS.ED, HKLM\SYSTEM\CURRENTCONTROLSET\SERVICES\TabletInputService, , [227fe1bfdd9e2412ad459a07ac55e41c],
Trojan.FakeMS.ED, HKLM\SYSTEM\CURRENTCONTROLSET\SERVICES\TapiSrv, , [227fe1bfdd9e2412ad459a07ac55e41c],
Trojan.FakeMS.ED, HKLM\SYSTEM\CURRENTCONTROLSET\SERVICES\TBS, , [227fe1bfdd9e2412ad459a07ac55e41c],
Trojan.FakeMS.ED, HKLM\SYSTEM\CURRENTCONTROLSET\SERVICES\TermService, , [227fe1bfdd9e2412ad459a07ac55e41c],
Trojan.FakeMS.ED, HKLM\SYSTEM\CURRENTCONTROLSET\SERVICES\Themes, , [227fe1bfdd9e2412ad459a07ac55e41c],
Trojan.FakeMS.ED, HKLM\SYSTEM\CURRENTCONTROLSET\SERVICES\THREADORDER, , [227fe1bfdd9e2412ad459a07ac55e41c],
Trojan.FakeMS.ED, HKLM\SYSTEM\CURRENTCONTROLSET\SERVICES\TrkWks, , [227fe1bfdd9e2412ad459a07ac55e41c],
Trojan.FakeMS.ED, HKLM\SYSTEM\CURRENTCONTROLSET\SERVICES\UmRdpService, , [227fe1bfdd9e2412ad459a07ac55e41c],
Trojan.FakeMS.ED, HKLM\SYSTEM\CURRENTCONTROLSET\SERVICES\upnphost, , [227fe1bfdd9e2412ad459a07ac55e41c],
Trojan.FakeMS.ED, HKLM\SOFTWARE\CLASSES\CLSID\{F5B63656-069D-4E80-B4FD-9E0DB16604D8}, , [227fe1bfdd9e2412ad459a07ac55e41c],
Trojan.FakeMS.ED, HKLM\SOFTWARE\CLASSES\INTERFACE\{F5B63656-069D-4E80-B4FD-9E0DB16604D8}, , [227fe1bfdd9e2412ad459a07ac55e41c],
Trojan.FakeMS.ED, HKLM\SOFTWARE\WOW6432NODE\CLASSES\INTERFACE\{F5B63656-069D-4E80-B4FD-9E0DB16604D8}, , [227fe1bfdd9e2412ad459a07ac55e41c],
Trojan.FakeMS.ED, HKLM\SOFTWARE\WOW6432NODE\CLASSES\CLSID\{F5B63656-069D-4E80-B4FD-9E0DB16604D8}, , [227fe1bfdd9e2412ad459a07ac55e41c],
Trojan.FakeMS.ED, HKLM\SYSTEM\CURRENTCONTROLSET\SERVICES\UxSms, , [227fe1bfdd9e2412ad459a07ac55e41c],
Trojan.FakeMS.ED, HKLM\SYSTEM\CURRENTCONTROLSET\SERVICES\WbioSrvc, , [227fe1bfdd9e2412ad459a07ac55e41c],
Trojan.FakeMS.ED, HKLM\SYSTEM\CURRENTCONTROLSET\SERVICES\wcncsvc, , [227fe1bfdd9e2412ad459a07ac55e41c],
Trojan.FakeMS.ED, HKLM\SYSTEM\CURRENTCONTROLSET\SERVICES\WcsPlugInService, , [227fe1bfdd9e2412ad459a07ac55e41c],
Trojan.FakeMS.ED, HKLM\SOFTWARE\CLASSES\CLSID\{2DD80115-AD1E-41F6-A219-A4F4B583D1F9}, , [227fe1bfdd9e2412ad459a07ac55e41c],
Trojan.FakeMS.ED, HKLM\SOFTWARE\CLASSES\INTERFACE\{2DD80115-AD1E-41F6-A219-A4F4B583D1F9}, , [227fe1bfdd9e2412ad459a07ac55e41c],
Trojan.FakeMS.ED, HKLM\SOFTWARE\WOW6432NODE\CLASSES\INTERFACE\{2DD80115-AD1E-41F6-A219-A4F4B583D1F9}, , [227fe1bfdd9e2412ad459a07ac55e41c],
Trojan.FakeMS.ED, HKLM\SOFTWARE\WOW6432NODE\CLASSES\CLSID\{2DD80115-AD1E-41F6-A219-A4F4B583D1F9}, , [227fe1bfdd9e2412ad459a07ac55e41c],
Trojan.FakeMS.ED, HKLM\SOFTWARE\CLASSES\CLSID\{69B37063-2BB6-43b5-A109-60E69A77840F}, , [227fe1bfdd9e2412ad459a07ac55e41c],
Trojan.FakeMS.ED, HKLM\SOFTWARE\CLASSES\TYPELIB\{DCB82247-779E-405c-932D-2F123364DF86}, , [227fe1bfdd9e2412ad459a07ac55e41c],
Trojan.FakeMS.ED, HKLM\SOFTWARE\WOW6432NODE\CLASSES\TYPELIB\{DCB82247-779E-405c-932D-2F123364DF86}, , [227fe1bfdd9e2412ad459a07ac55e41c],
Trojan.FakeMS.ED, HKLM\SOFTWARE\CLASSES\WcsPlugInService.WcsPlugInService.1, , [227fe1bfdd9e2412ad459a07ac55e41c],
Trojan.FakeMS.ED, HKLM\SOFTWARE\CLASSES\WcsPlugInService.WcsPlugInService, , [227fe1bfdd9e2412ad459a07ac55e41c],
Trojan.FakeMS.ED, HKLM\SOFTWARE\WOW6432NODE\CLASSES\WcsPlugInService.WcsPlugInService, , [227fe1bfdd9e2412ad459a07ac55e41c],
Trojan.FakeMS.ED, HKLM\SOFTWARE\WOW6432NODE\CLASSES\WcsPlugInService.WcsPlugInService.1, , [227fe1bfdd9e2412ad459a07ac55e41c],
Trojan.FakeMS.ED, HKLM\SOFTWARE\WOW6432NODE\CLASSES\CLSID\{69B37063-2BB6-43B5-A109-60E69A77840F}, , [227fe1bfdd9e2412ad459a07ac55e41c],
Trojan.FakeMS.ED, HKLM\SYSTEM\CURRENTCONTROLSET\SERVICES\WdiServiceHost, , [227fe1bfdd9e2412ad459a07ac55e41c],
Trojan.FakeMS.ED, HKLM\SOFTWARE\CLASSES\CLSID\{900be39d-6be8-461a-bc4d-b0fa71f5ecb1}, , [227fe1bfdd9e2412ad459a07ac55e41c],
Trojan.FakeMS.ED, HKLM\SOFTWARE\WOW6432NODE\CLASSES\CLSID\{900BE39D-6BE8-461A-BC4D-B0FA71F5ECB1}, , [227fe1bfdd9e2412ad459a07ac55e41c],
Trojan.FakeMS.ED, HKLM\SYSTEM\CURRENTCONTROLSET\SERVICES\WdiSystemHost, , [227fe1bfdd9e2412ad459a07ac55e41c],
Trojan.FakeMS.ED, HKLM\SYSTEM\CURRENTCONTROLSET\SERVICES\WebClient, , [227fe1bfdd9e2412ad459a07ac55e41c],
Trojan.FakeMS.ED, HKLM\SYSTEM\CURRENTCONTROLSET\SERVICES\Wecsvc, , [227fe1bfdd9e2412ad459a07ac55e41c],
Trojan.FakeMS.ED, HKLM\SYSTEM\CURRENTCONTROLSET\SERVICES\wercplsupport, , [227fe1bfdd9e2412ad459a07ac55e41c],
Trojan.FakeMS.ED, HKLM\SOFTWARE\CLASSES\CLSID\{01D0A625-782D-4777-8D4E-547E6457FAD5}, , [227fe1bfdd9e2412ad459a07ac55e41c],
Trojan.FakeMS.ED, HKLM\SOFTWARE\CLASSES\CEIPLuaElevationHelper, , [227fe1bfdd9e2412ad459a07ac55e41c],
Trojan.FakeMS.ED, HKLM\SOFTWARE\WOW6432NODE\CLASSES\CEIPLuaElevationHelper, , [227fe1bfdd9e2412ad459a07ac55e41c],
Trojan.FakeMS.ED, HKLM\SOFTWARE\CLASSES\CLSID\{4BC67F23-D805-4384-BCA3-6F1EDFF50E2C}, , [227fe1bfdd9e2412ad459a07ac55e41c],
Trojan.FakeMS.ED, HKLM\SOFTWARE\CLASSES\ERCLuaElevationHelper, , [227fe1bfdd9e2412ad459a07ac55e41c],
Trojan.FakeMS.ED, HKLM\SOFTWARE\WOW6432NODE\CLASSES\ERCLuaElevationHelper, , [227fe1bfdd9e2412ad459a07ac55e41c],
Trojan.FakeMS.ED, HKLM\SOFTWARE\CLASSES\APPID\{4BC67F23-D805-4384-BCA3-6F1EDFF50E2C}, , [227fe1bfdd9e2412ad459a07ac55e41c],
Trojan.FakeMS.ED, HKLM\SOFTWARE\WOW6432NODE\CLASSES\APPID\{4BC67F23-D805-4384-BCA3-6F1EDFF50E2C}, , [227fe1bfdd9e2412ad459a07ac55e41c],
Trojan.FakeMS.ED, HKLM\SOFTWARE\CLASSES\CLSID\{50055B2F-D4FF-42E1-9D8F-5D48F327F3AC}, , [227fe1bfdd9e2412ad459a07ac55e41c],
Trojan.FakeMS.ED, HKLM\SOFTWARE\CLASSES\CLSID\{D01B8F28-0BD1-4652-A415-8229F5EE506C}, , [227fe1bfdd9e2412ad459a07ac55e41c],
Trojan.FakeMS.ED, HKLM\SOFTWARE\CLASSES\INTERFACE\{D01B8F28-0BD1-4652-A415-8229F5EE506C}, , [227fe1bfdd9e2412ad459a07ac55e41c],
Trojan.FakeMS.ED, HKLM\SYSTEM\CURRENTCONTROLSET\SERVICES\WerSvc, , [227fe1bfdd9e2412ad459a07ac55e41c],
Trojan.FakeMS.ED, HKLM\SYSTEM\CURRENTCONTROLSET\SERVICES\WinDefend, , [227fe1bfdd9e2412ad459a07ac55e41c],
Trojan.FakeMS.ED, HKLM\SYSTEM\CURRENTCONTROLSET\SERVICES\WinHttpAutoProxySvc, , [227fe1bfdd9e2412ad459a07ac55e41c],
Trojan.FakeMS.ED, HKLM\SYSTEM\CURRENTCONTROLSET\SERVICES\Winmgmt, , [227fe1bfdd9e2412ad459a07ac55e41c],
Trojan.FakeMS.ED, HKLM\SYSTEM\CURRENTCONTROLSET\SERVICES\WinRM, , [227fe1bfdd9e2412ad459a07ac55e41c],
Trojan.FakeMS.ED, HKLM\SYSTEM\CURRENTCONTROLSET\SERVICES\Wlansvc, , [227fe1bfdd9e2412ad459a07ac55e41c],
Trojan.FakeMS.ED, HKLM\SYSTEM\CURRENTCONTROLSET\SERVICES\WPCSvc, , [227fe1bfdd9e2412ad459a07ac55e41c],
Trojan.FakeMS.ED, HKLM\SYSTEM\CURRENTCONTROLSET\SERVICES\WPDBusEnum, , [227fe1bfdd9e2412ad459a07ac55e41c],
Trojan.FakeMS.ED, HKLM\SYSTEM\CURRENTCONTROLSET\SERVICES\wscsvc, , [227fe1bfdd9e2412ad459a07ac55e41c],
Trojan.FakeMS.ED, HKLM\SYSTEM\CURRENTCONTROLSET\SERVICES\wuauserv, , [227fe1bfdd9e2412ad459a07ac55e41c],
Trojan.FakeMS.ED, HKLM\SYSTEM\CURRENTCONTROLSET\SERVICES\wudfsvc, , [227fe1bfdd9e2412ad459a07ac55e41c],
Trojan.FakeMS.ED, HKLM\SYSTEM\CURRENTCONTROLSET\SERVICES\WwanSvc, , [227fe1bfdd9e2412ad459a07ac55e41c],
Trojan.FakeMS.ED, HKLM\SYSTEM\CURRENTCONTROLSET\SERVICES\ACPI, , [8f12d1cf1962a195e012bfe2cf327a86],
Trojan.FakeMS.ED, HKLM\SYSTEM\CURRENTCONTROLSET\SERVICES\AFD, , [0899f3ad76054bebe9095a47fd04c33d],
Trojan.FakeMS.ED, HKLM\SYSTEM\CURRENTCONTROLSET\SERVICES\CLFS, , [138ee3bda1dae056c131fda42ad7dd23],
Trojan.FakeMS.ED, HKLM\SYSTEM\CURRENTCONTROLSET\SERVICES\ClickToRunSvc, , [9c05524e1d5e95a1dd15435e02ffa15f],
Trojan.FakeMS.ED, HKLM\SOFTWARE\MICROSOFT\WINDOWS\CURRENTVERSION\UNINSTALL\O365HomePremRetail - en-us, , [9c05524e1d5e95a1dd15435e02ffa15f],
Trojan.FakeMS.ED, HKLM\SYSTEM\CURRENTCONTROLSET\SERVICES\clr_optimization_v4.0.30319_64, , [4c5500a05427d66043af604109f8e917],
Trojan.FakeMS.ED, HKLM\SYSTEM\CURRENTCONTROLSET\SERVICES\ehRecvr, , [604198085d1e84b2846eeeb38081936d],
Trojan.FakeMS.ED, HKLM\SYSTEM\CURRENTCONTROLSET\SERVICES\ehSched, , [623f049c84f725110ee49a0737cabd43],
Trojan.FakeMS.ED, HKLM\SYSTEM\CURRENTCONTROLSET\SERVICES\FltMgr, , [930ed6ca5d1eb185886a4859b0511ee2],
Trojan.FakeMS.ED, HKLM\SYSTEM\CURRENTCONTROLSET\SERVICES\Spooler, , [dfc2b0f06615f34310e2247dd42d758b],
Trojan.FakeMS.ED, HKLM\SYSTEM\CURRENTCONTROLSET\SERVICES\idsvc, , [50511888b1cac472bd350d9404fd847c],
Trojan.FakeMS.ED, HKLM\SYSTEM\CURRENTCONTROLSET\SERVICES\kbdclass, , [b9e8574990ebfd399d554859728f0ef2],
Trojan.FakeMS.ED, HKLM\SYSTEM\CURRENTCONTROLSET\SERVICES\NetBIOS, , [722fa000c7b457df25cda5fc8978ef11],
Trojan.FakeMS.ED, HKLM\SYSTEM\CURRENTCONTROLSET\SERVICES\NDIS, , [bde4910f8fec033329c9a001bb4612ee],
Trojan.FakeMS.ED, HKLM\SYSTEM\CURRENTCONTROLSET\SERVICES\pci, , [9d041888a6d550e67280059c3ac7d32d],
Trojan.FakeMS.ED, HKLM\SYSTEM\CURRENTCONTROLSET\SERVICES\VsEtwService120, , [a6fbe3bdf18a191d8072c1e020e10000],
Trojan.FakeMS.ED, HKLM\SYSTEM\CURRENTCONTROLSET\SERVICES\volsnap, , [c5dc831db2c90e28648e277a8180b54b],
Trojan.FakeMS.ED, HKLM\SYSTEM\CURRENTCONTROLSET\SERVICES\WSearch, , [b4edf4ac3942c076aa48386979887c84],
Trojan.FakeMS.ED, HKLM\SOFTWARE\CLASSES\CLSID\{6B56A227-7150-4A1F-A114-C959EB8F8C24}, , [d0d14957accf0036fff3267b25dc1ae6],
Trojan.FakeMS.ED, HKLM\SOFTWARE\WOW6432NODE\CLASSES\CLSID\{6B56A227-7150-4A1F-A114-C959EB8F8C24}, , [d0d14957accf0036fff3267b25dc1ae6],
Trojan.FakeMS.ED, HKLM\SOFTWARE\CLASSES\CLSID\{573FFD05-2805-47C2-BCE0-5F19512BEB8D}, , [970a0799c6b5e551ab47bee3f60bc53b],
Trojan.FakeMS.ED, HKLM\SOFTWARE\CLASSES\CLSID\{8BA85C75-763B-4103-94EB-9470F12FE0F7}, , [970a0799c6b5e551ab47bee3f60bc53b],
Trojan.FakeMS.ED, HKLM\SOFTWARE\CLASSES\CLSID\{CD55129A-B1A1-438E-A425-CEBC7DC684EE}, , [970a0799c6b5e551ab47bee3f60bc53b],
Trojan.FakeMS.ED, HKLM\SOFTWARE\CLASSES\CLSID\{D0498E0A-45B7-42AE-A9AA-ABA463DBD3BF}, , [970a0799c6b5e551ab47bee3f60bc53b],
Trojan.FakeMS.ED, HKLM\SOFTWARE\MICROSOFT\WINDOWS\CURRENTVERSION\EXPLORER\BROWSER HELPER OBJECTS\{D0498E0A-45B7-42AE-A9AA-ABA463DBD3BF}, , [970a0799c6b5e551ab47bee3f60bc53b],
Trojan.FakeMS.ED, HKU\S-1-5-21-1708624395-2249230892-2909010114-1000-{ED1FC765-E35E-4C3D-BF15-2C2B11260CE4}-0\SOFTWARE\MICROSOFT\WINDOWS\CURRENTVERSION\EXT\STATS\{D0498E0A-45B7-42AE-A9AA-ABA463DBD3BF}, , [970a0799c6b5e551ab47bee3f60bc53b],
Trojan.FakeMS.ED, HKLM\SOFTWARE\CLASSES\CLSID\{E768CD3B-BDDC-436D-9C13-E1B39CA257B1}, , [970a0799c6b5e551ab47bee3f60bc53b],
Trojan.FakeMS.ED, HKLM\SOFTWARE\CLASSES\CLSID\{D0498E0A-45B7-42AE-A9AA-ABA463DBD3BF}\INPROCSERVER32, , [970a0799c6b5e551ab47bee3f60bc53b],
Trojan.FakeMS.ED, HKLM\SOFTWARE\CLASSES\CLSID\{31D09BA0-12F5-4CCE-BE8A-2923E76605DA}, , [c8d9d9c76b1048ee7f73c7da9f62a35d],
Trojan.FakeMS.ED, HKLM\SOFTWARE\CLASSES\TYPELIB\{EE9CFA8C-F997-4221-BE2F-85A5F603218F}, , [c8d9d9c76b1048ee7f73c7da9f62a35d],
Trojan.FakeMS.ED, HKLM\SOFTWARE\CLASSES\INTERFACE\{4FDC29A1-340B-45FB-90A3-2654D980BEFB}, , [c8d9d9c76b1048ee7f73c7da9f62a35d],
Trojan.FakeMS.ED, HKLM\SOFTWARE\WOW6432NODE\CLASSES\TYPELIB\{EE9CFA8C-F997-4221-BE2F-85A5F603218F}, , [c8d9d9c76b1048ee7f73c7da9f62a35d],
Trojan.FakeMS.ED, HKLM\SOFTWARE\CLASSES\OCHelper.BrowserHelper.1, , [c8d9d9c76b1048ee7f73c7da9f62a35d],
Trojan.FakeMS.ED, HKLM\SOFTWARE\CLASSES\OCHelper.BrowserHelper, , [c8d9d9c76b1048ee7f73c7da9f62a35d],
Trojan.FakeMS.ED, HKLM\SOFTWARE\WOW6432NODE\CLASSES\OCHelper.BrowserHelper, , [c8d9d9c76b1048ee7f73c7da9f62a35d],
Trojan.FakeMS.ED, HKLM\SOFTWARE\MICROSOFT\WINDOWS\CURRENTVERSION\EXPLORER\BROWSER HELPER OBJECTS\{31D09BA0-12F5-4CCE-BE8A-2923E76605DA}, , [c8d9d9c76b1048ee7f73c7da9f62a35d],
Trojan.FakeMS.ED, HKLM\SOFTWARE\WOW6432NODE\CLASSES\OCHelper.BrowserHelper.1, , [c8d9d9c76b1048ee7f73c7da9f62a35d],
Trojan.FakeMS.ED, HKLM\SOFTWARE\MICROSOFT\INTERNET EXPLORER\EXTENSIONS\{31D09BA0-12F5-4CCE-BE8A-2923E76605DA}, , [c8d9d9c76b1048ee7f73c7da9f62a35d],
Trojan.FakeMS.ED, HKLM\SOFTWARE\CLASSES\CLSID\{31D09BA0-12F5-4CCE-BE8A-2923E76605DA}\INPROCSERVER32, , [c8d9d9c76b1048ee7f73c7da9f62a35d],
Trojan.FakeMS.ED, HKLM\SOFTWARE\CLASSES\CLSID\{B4F3A835-0E21-4959-BA22-42B3008E02FF}, , [f8a9544c9be056e047ab3b665fa2f30d],
Trojan.FakeMS.ED, HKLM\SOFTWARE\CLASSES\URLRedirection.URLRedirectionBHO.1, , [f8a9544c9be056e047ab3b665fa2f30d],
Trojan.FakeMS.ED, HKLM\SOFTWARE\CLASSES\URLRedirection.URLRedirectionBHO, , [f8a9544c9be056e047ab3b665fa2f30d],
Trojan.FakeMS.ED, HKLM\SOFTWARE\WOW6432NODE\CLASSES\URLRedirection.URLRedirectionBHO, , [f8a9544c9be056e047ab3b665fa2f30d],
Trojan.FakeMS.ED, HKLM\SOFTWARE\MICROSOFT\WINDOWS\CURRENTVERSION\EXPLORER\BROWSER HELPER OBJECTS\{B4F3A835-0E21-4959-BA22-42B3008E02FF}, , [f8a9544c9be056e047ab3b665fa2f30d],
Trojan.FakeMS.ED, HKLM\SOFTWARE\WOW6432NODE\MICROSOFT\WINDOWS\CURRENTVERSION\EXPLORER\BROWSER HELPER OBJECTS\{B4F3A835-0E21-4959-BA22-42B3008E02FF}, , [f8a9544c9be056e047ab3b665fa2f30d],
Trojan.FakeMS.ED, HKLM\SOFTWARE\WOW6432NODE\CLASSES\URLRedirection.URLRedirectionBHO.1, , [f8a9544c9be056e047ab3b665fa2f30d],
Trojan.FakeMS.ED, HKLM\SOFTWARE\WOW6432NODE\CLASSES\CLSID\{B4F3A835-0E21-4959-BA22-42B3008E02FF}, , [f8a9544c9be056e047ab3b665fa2f30d],
Trojan.FakeMS.ED, HKU\S-1-5-21-1708624395-2249230892-2909010114-1000-{ED1FC765-E35E-4C3D-BF15-2C2B11260CE4}-0\SOFTWARE\MICROSOFT\WINDOWS\CURRENTVERSION\EXT\SETTINGS\{B4F3A835-0E21-4959-BA22-42B3008E02FF}, , [f8a9544c9be056e047ab3b665fa2f30d],
Trojan.FakeMS.ED, HKU\S-1-5-21-1708624395-2249230892-2909010114-1000-{ED1FC765-E35E-4C3D-BF15-2C2B11260CE4}-0\SOFTWARE\MICROSOFT\WINDOWS\CURRENTVERSION\EXT\STATS\{B4F3A835-0E21-4959-BA22-42B3008E02FF}, , [f8a9544c9be056e047ab3b665fa2f30d],
Trojan.FakeMS.ED, HKLM\SOFTWARE\CLASSES\CLSID\{B4F3A835-0E21-4959-BA22-42B3008E02FF}\INPROCSERVER32, , [f8a9544c9be056e047ab3b665fa2f30d],
Trojan.FakeMS.ED, HKLM\SOFTWARE\WOW6432NODE\MICROSOFT\WINDOWS\CURRENTVERSION\UNINSTALL\{6dff50d0-3bc3-4a92-b724-bf6d6a99de4f}, , [e1c0d3cd4a318babc82ad5ccc53ccf31],
Trojan.FakeMS.ED, HKLM\SOFTWARE\CLASSES\CLSID\{02E6EC4C-96E4-42E8-B533-336916A0087D}, , [2b764060b0cbf93db9399c0529d86c94],
Trojan.FakeMS.ED, HKLM\SOFTWARE\CLASSES\INTERFACE\{02E6EC4C-96E4-42E8-B533-336916A0087D}, , [2b764060b0cbf93db9399c0529d86c94],
Trojan.FakeMS.ED, HKLM\SOFTWARE\WOW6432NODE\CLASSES\INTERFACE\{02E6EC4C-96E4-42E8-B533-336916A0087D}, , [2b764060b0cbf93db9399c0529d86c94],
Trojan.FakeMS.ED, HKLM\SOFTWARE\WOW6432NODE\CLASSES\CLSID\{02E6EC4C-96E4-42E8-B533-336916A0087D}, , [2b764060b0cbf93db9399c0529d86c94],
Trojan.FakeMS.ED, HKLM\SOFTWARE\CLASSES\CLSID\{53445BED-3213-453B-A12A-79AA20A702DC}, , [1988148c83f8bd792fc391103cc551af],
Trojan.FakeMS.ED, HKLM\SOFTWARE\CLASSES\TYPELIB\{438EDB38-282C-435D-8BE3-4AB90B83CEF5}, , [1988148c83f8bd792fc391103cc551af],
Trojan.FakeMS.ED, HKLM\SOFTWARE\CLASSES\INTERFACE\{B65116D3-0F51-4AF8-93E4-A769AF51AD2C}, , [1988148c83f8bd792fc391103cc551af],
Trojan.FakeMS.ED, HKLM\SOFTWARE\WOW6432NODE\CLASSES\INTERFACE\{B65116D3-0F51-4AF8-93E4-A769AF51AD2C}, , [1988148c83f8bd792fc391103cc551af],
Trojan.FakeMS.ED, HKLM\SOFTWARE\WOW6432NODE\CLASSES\TYPELIB\{438EDB38-282C-435D-8BE3-4AB90B83CEF5}, , [1988148c83f8bd792fc391103cc551af],
Trojan.FakeMS.ED, HKLM\SOFTWARE\WOW6432NODE\CLASSES\CLSID\{53445BED-3213-453B-A12A-79AA20A702DC}, , [1988148c83f8bd792fc391103cc551af],
Trojan.FakeMS.ED, HKLM\SOFTWARE\CLASSES\CLSID\{77597368-7B15-11D0-A0C2-080036AF3F03}, , [1988148c83f8bd792fc391103cc551af],
Trojan.FakeMS.ED, HKLM\SOFTWARE\WOW6432NODE\CLASSES\CLSID\{77597368-7B15-11D0-A0C2-080036AF3F03}, , [1988148c83f8bd792fc391103cc551af],
Trojan.FakeMS.ED, HKLM\SOFTWARE\CLASSES\CLSID\{2227A280-3AEA-1069-A2DE-08002B30309D}, , [564bf0b02754ac8a27cb1b867b8657a9],
Trojan.FakeMS.ED, HKLM\SOFTWARE\WOW6432NODE\CLASSES\CLSID\{2227A280-3AEA-1069-A2DE-08002B30309D}, , [564bf0b02754ac8a27cb1b867b8657a9],
Trojan.FakeMS.ED, HKLM\SOFTWARE\CLASSES\CLSID\{863aa9fd-42df-457b-8e4d-0de1b8015c60}, , [564bf0b02754ac8a27cb1b867b8657a9],
Trojan.FakeMS.ED, HKLM\SOFTWARE\WOW6432NODE\CLASSES\CLSID\{863AA9FD-42DF-457B-8E4D-0DE1B8015C60}, , [564bf0b02754ac8a27cb1b867b8657a9],
Trojan.FakeMS.ED, HKLM\SOFTWARE\CLASSES\CLSID\{2FB21955-33A2-46A0-8F60-B475DC33FD5A}, , [722f3967532870c6a44ef8a914ed49b7],
Trojan.FakeMS.ED, HKLM\SOFTWARE\CLASSES\INTERFACE\{2FB21955-33A2-46A0-8F60-B475DC33FD5A}, , [722f3967532870c6a44ef8a914ed49b7],
Trojan.FakeMS.ED, HKLM\SOFTWARE\WOW6432NODE\CLASSES\INTERFACE\{2FB21955-33A2-46A0-8F60-B475DC33FD5A}, , [722f3967532870c6a44ef8a914ed49b7],
Trojan.FakeMS.ED, HKLM\SOFTWARE\WOW6432NODE\CLASSES\CLSID\{2FB21955-33A2-46A0-8F60-B475DC33FD5A}, , [722f3967532870c6a44ef8a914ed49b7],
Trojan.FakeMS.ED, HKLM\SOFTWARE\CLASSES\CLSID\{BA7C0D29-81CA-4901-B450-634E20BB8C34}, , [722f3967532870c6a44ef8a914ed49b7],
Trojan.FakeMS.ED, HKLM\SOFTWARE\CLASSES\CLSID\{2E095DD0-AF56-47e4-A099-EAC038DECC24}, , [7130168a1269261027cbeeb324dde61a],
Trojan.FakeMS.ED, HKLM\SOFTWARE\CLASSES\TYPELIB\{ABBA0019-3075-11D6-88A4-00B0D0200F88}, , [7130168a1269261027cbeeb324dde61a],
Trojan.FakeMS.ED, HKLM\SOFTWARE\WOW6432NODE\CLASSES\TYPELIB\{ABBA0019-3075-11D6-88A4-00B0D0200F88}, , [7130168a1269261027cbeeb324dde61a],
Trojan.FakeMS.ED, HKLM\SOFTWARE\CLASSES\Psisdecd.AnalogCable.1, , [7130168a1269261027cbeeb324dde61a],
Trojan.FakeMS.ED, HKLM\SOFTWARE\CLASSES\Psisdecd.AnalogCable, , [7130168a1269261027cbeeb324dde61a],
Trojan.FakeMS.ED, HKLM\SOFTWARE\WOW6432NODE\CLASSES\Psisdecd.AnalogCable, , [7130168a1269261027cbeeb324dde61a],
Trojan.FakeMS.ED, HKLM\SOFTWARE\WOW6432NODE\CLASSES\Psisdecd.AnalogCable.1, , [7130168a1269261027cbeeb324dde61a],
Trojan.FakeMS.ED, HKLM\SOFTWARE\WOW6432NODE\CLASSES\CLSID\{2E095DD0-AF56-47E4-A099-EAC038DECC24}, , [7130168a1269261027cbeeb324dde61a],
Trojan.FakeMS.ED, HKLM\SOFTWARE\WOW6432NODE\CLASSES\CLSID\{3508C064-B94E-420b-A821-20C8096FAADC}, , [7130168a1269261027cbeeb324dde61a],
Trojan.FakeMS.ED, HKLM\SOFTWARE\CLASSES\TYPELIB\{92F94BE2-8C2E-4cd6-88ED-774A5DF42AD3}, , [7130168a1269261027cbeeb324dde61a],
Trojan.FakeMS.ED, HKLM\SOFTWARE\WOW6432NODE\CLASSES\TYPELIB\{92F94BE2-8C2E-4cd6-88ED-774A5DF42AD3}, , [7130168a1269261027cbeeb324dde61a],
Trojan.FakeMS.ED, HKLM\SOFTWARE\CLASSES\Psisdecd.AtscPsipParser.1, , [7130168a1269261027cbeeb324dde61a],
Trojan.FakeMS.ED, HKLM\SOFTWARE\CLASSES\Psisdecd.AtscPsipParser, , [7130168a1269261027cbeeb324dde61a],
Trojan.FakeMS.ED, HKLM\SOFTWARE\WOW6432NODE\CLASSES\Psisdecd.AtscPsipParser, , [7130168a1269261027cbeeb324dde61a],
Trojan.FakeMS.ED, HKLM\SOFTWARE\WOW6432NODE\CLASSES\Psisdecd.AtscPsipParser.1, , [7130168a1269261027cbeeb324dde61a],
Trojan.FakeMS.ED, HKLM\SOFTWARE\CLASSES\CLSID\{3508C064-B94E-420B-A821-20C8096FAADC}, , [7130168a1269261027cbeeb324dde61a],
Trojan.FakeMS.ED, HKLM\SOFTWARE\WOW6432NODE\CLASSES\CLSID\{740EC24D-46AD-4334-A076-41CCC3F8D9B4}, , [7130168a1269261027cbeeb324dde61a],
Trojan.FakeMS.ED, HKLM\SOFTWARE\CLASSES\Psisdecd.PBDA.1, , [7130168a1269261027cbeeb324dde61a],
Trojan.FakeMS.ED, HKLM\SOFTWARE\CLASSES\Psisdecd.PBDA, , [7130168a1269261027cbeeb324dde61a],
Trojan.FakeMS.ED, HKLM\SOFTWARE\WOW6432NODE\CLASSES\Psisdecd.PBDA, , [7130168a1269261027cbeeb324dde61a],
Trojan.FakeMS.ED, HKLM\SOFTWARE\WOW6432NODE\CLASSES\Psisdecd.PBDA.1, , [7130168a1269261027cbeeb324dde61a],
Trojan.FakeMS.ED, HKLM\SOFTWARE\CLASSES\CLSID\{740EC24D-46AD-4334-A076-41CCC3F8D9B4}, , [7130168a1269261027cbeeb324dde61a],
Trojan.FakeMS.ED, HKLM\SOFTWARE\WOW6432NODE\CLASSES\CLSID\{9AA0422B-E5C5-4A6B-ACEC-C96E2E05B353}, , [7130168a1269261027cbeeb324dde61a],
Trojan.FakeMS.ED, HKLM\SOFTWARE\CLASSES\Psisdecd.CIsdb.1, , [7130168a1269261027cbeeb324dde61a],
Trojan.FakeMS.ED, HKLM\SOFTWARE\CLASSES\Psisdecd.CIsdb, , [7130168a1269261027cbeeb324dde61a],
Trojan.FakeMS.ED, HKLM\SOFTWARE\WOW6432NODE\CLASSES\Psisdecd.CIsdb, , [7130168a1269261027cbeeb324dde61a],
Trojan.FakeMS.ED, HKLM\SOFTWARE\WOW6432NODE\CLASSES\Psisdecd.CIsdb.1, , [7130168a1269261027cbeeb324dde61a],
Trojan.FakeMS.ED, HKLM\SOFTWARE\CLASSES\CLSID\{9AA0422B-E5C5-4A6B-ACEC-C96E2E05B353}, , [7130168a1269261027cbeeb324dde61a],
Trojan.FakeMS.ED, HKLM\SOFTWARE\WOW6432NODE\CLASSES\CLSID\{ABBA0005-3075-11D6-88A4-00B0D0200F88}, , [7130168a1269261027cbeeb324dde61a],
Trojan.FakeMS.ED, HKLM\SOFTWARE\CLASSES\Psisdecd.ATSCTerrestrial.1, , [7130168a1269261027cbeeb324dde61a],
Trojan.FakeMS.ED, HKLM\SOFTWARE\CLASSES\Psisdecd.ATSCTerrestrial, , [7130168a1269261027cbeeb324dde61a],
Trojan.FakeMS.ED, HKLM\SOFTWARE\WOW6432NODE\CLASSES\Psisdecd.ATSCTerrestrial, , [7130168a1269261027cbeeb324dde61a],
Trojan.FakeMS.ED, HKLM\SOFTWARE\WOW6432NODE\CLASSES\Psisdecd.ATSCTerrestrial.1, , [7130168a1269261027cbeeb324dde61a],
Trojan.FakeMS.ED, HKLM\SOFTWARE\CLASSES\CLSID\{ABBA0005-3075-11D6-88A4-00B0D0200F88}, , [7130168a1269261027cbeeb324dde61a],
Trojan.FakeMS.ED, HKLM\SOFTWARE\WOW6432NODE\CLASSES\CLSID\{ABBA0006-3075-11D6-88A4-00B0D0200F88}, , [7130168a1269261027cbeeb324dde61a],
Trojan.FakeMS.ED, HKLM\SOFTWARE\CLASSES\Psisdecd.CDvb.1, , [7130168a1269261027cbeeb324dde61a],
Trojan.FakeMS.ED, HKLM\SOFTWARE\CLASSES\Psisdecd.CDvb, , [7130168a1269261027cbeeb324dde61a],
Trojan.FakeMS.ED, HKLM\SOFTWARE\WOW6432NODE\CLASSES\Psisdecd.CDvb, , [7130168a1269261027cbeeb324dde61a],
Trojan.FakeMS.ED, HKLM\SOFTWARE\WOW6432NODE\CLASSES\Psisdecd.CDvb.1, , [7130168a1269261027cbeeb324dde61a],

tbowyer · July 26, 2014

That's about 1/16th of the log. You need the whole thing or can you compare some md5 dumps from that against your database?

daledoc1 · July 26, 2014

Thanks.

I am just a home user and forum volunteer (therefore unqualified to determine what is happening in those logs).

I have notified our forum moderator team and the Research Team.

Please stand by for further instructions.

Thank you,

tbowyer · July 26, 2014

Will do.

Kinsmir · July 26, 2014

Well, the same thing just happened to me about 10 minutes ago, after running a scan on the same version/database.

Its breaking a lot on my pc right now, all actions related to files within system32 are thrown into quarantine, like searching in the windows start menu (now disabled live protection and removed files from quarantine, so my pc is running again without software crashing).

tbowyer · July 26, 2014

Trojan.FakeMS.ED, C:\Windows\notepad.exe, , [069b227ea2d9bc7a40b2237e8879827e],
Trojan.FakeMS.ED, C:\Windows\regedit.exe, , [e4bdcdd3f08ba690a1510a972fd2f808],

Notepad and regedit as well

tbowyer · July 26, 2014

Well, the same thing just happened to me about 10 minutes ago, after running a scan on the same version/database.

Its breaking a lot on my pc right now, all actions related to files within system32 are thrown into quarantine, like searching in the windows start menu (now disabled live protection and removed files from quarantine, so my pc is running again without software crashing).

That is how mine started. I booted to safe mode and ran a full scan. That is when it picked up everything. Windows 7? I recently installed a USB Bluetooth adapter from cirago what about you?

Kinsmir · July 26, 2014

That is how mine started. I booted to safe mode and ran a full scan. That is when it picked up everything. Windows 7? I recently installed a USB Bluetooth adapter from cirago what about you?

Yeah, running here Windows 7 Pro.

The last drivers i installed on it was was the Oculus Rift DK2 drivers (but that was last friday).

tbowyer · July 26, 2014

Yeah, running here Windows 7 Pro.

The last drivers i installed on it was was the Oculus Rift DK2 drivers (but that was last friday).

Windows 7 Pro as well. I use Comodo for Firewall/HIPS.....umm........No windows updates recently...........

daledoc1 · July 26, 2014

Hi, @tbowyer and @Kinsmir:

Please sit tight for now.

The team has been notified.

They may need some additional data from you.

They will update here as soon as there is more information.

Thanks for reporting and thanks for your patience.

deenoo · July 26, 2014

I am in the same boat. windows is not function properly now. How do I recover the quarantine files when I can't even open the program

yayayaaaa · July 27, 2014

Hello, I have the same or very similar issue. Not sure if it was the entire system32 but parts of it (one I remember was called mpr.dll). Naively let it quarantine and am now my computer is in startup repair vainly attempting system restores and such to no avail. Help would be appreciated, thanks!

tbowyer · July 27, 2014

I was able to get mine into safemode, where it currently sits. I tried removing the files from quarantine but I recieve a permission denied. The worst part is it killed cmd.exe and regedit.exe.

albobburt · July 27, 2014

Same thing happened to me. Currently running a scan and Mbam has over 6000 detected objects.

tbowyer · July 27, 2014

I was able to perform a system restore form safe mode. Appears to have fixed the issue. I also uninstalled Malwarebytes for the time being. For windows 7 Press start and type System Restore (Hopefully you have it enabled).

tbowyer · July 27, 2014

oh, was using premium edition

shadowwar · July 27, 2014

Can someone post one of the files zipped that is being detected?

Update v2014.07.26.09 Entire System32 Quarantined?

Recommended Posts

Link to post

Share on other sites

Top Posters In This Topic

Popular Days

Top Posters In This Topic

Popular Days

Posted Images

Link to post

Share on other sites

Link to post

Share on other sites

Link to post

Share on other sites

Link to post

Share on other sites

Link to post

Share on other sites

Link to post

Share on other sites

Link to post

Share on other sites

Link to post

Share on other sites

Link to post

Share on other sites

Link to post

Share on other sites

Link to post

Share on other sites

Link to post

Share on other sites

Link to post

Share on other sites

Link to post

Share on other sites

Link to post

Share on other sites

Link to post

Share on other sites

Link to post

Share on other sites

Link to post

Share on other sites

Link to post

Share on other sites

Link to post

Share on other sites

Link to post

Share on other sites

Link to post

Share on other sites

Link to post

Share on other sites

Link to post

Share on other sites

Recently Browsing 0 members

Important Information