Virus.Win32.Duel_e1ad6b12bb

by malwarelabrobot on October 11th, 2013 in Malware Descriptions.

HEUR:Trojan.Win32.Generic (Kaspersky), LooksLike.Win32.Malware!B (v) (VIPRE), Email-Worm.Win32.Brontok!IK (Emsisoft), Virus.Win32.Duel.FD, GenericEmailWorm.YR, GenericIRCBot.YR (Lavasoft MAS)
Behaviour: Trojan, Worm, Email-Worm, EmailWorm, Virus, IRCBot


The description has been automatically generated by Lavasoft Malware Analysis System and it may contain incomplete or inaccurate information.

Summary
Technical Details
Removal Recommendations

MD5: e1ad6b12bb74ae20773e65e2d47419a4
SHA1: 4fbbf63eebfb90e7bd55edf07deaffec62582b5a
SHA256: b5d8d0a9a7600e9d0e8efc9775bd1e0669acbe00c7a283485deac8f134ccdda1
SSDeep: 768:SJCyPrLAugRWNdIIYC4/Ocid/nZqucEh2:SJCurLUW0OciV8uZ
Size: 43520 bytes
File type: EXE
Platform: WIN32
Entropy: Not Packed
PEID: UPolyXv05_v6
Company: no certificate found
Created at: no data


Summary:

Virus. A program that recursively replicates a possibly evolved copy of itself.

Payload

Behaviour Description
EmailWorm Worm can send e-mails.
IRCBot A bot can communicate with command and control servers via IRC channel.


Process activity

The Virus creates the following process(es):

qyrabrrar.arq:540
qyrabrrar.arq:2496
e1ad6b12bb74ae20773e65e2d47419a4.exe:2440

File activity

The process qyrabrrar.arq:540 makes changes in a file system.
The Virus creates and/or writes to the following file(s):

%Documents and Settings%\%current user%\Local Settings\Temp\ajqiaq.jjra.bri (43 bytes)

The process qyrabrrar.arq:2496 makes changes in a file system.
The Virus creates and/or writes to the following file(s):

%Program Files%\MSN Gaming Zone\Windows\ajqiaqjjr.rzqy (43 bytes)
%Program Files%\Windows NT\Pinball\ajqiaqjjr.rzq.yqyz (43 bytes)
%Program Files%\MSN Gaming Zone\Windows\ziiirrqyr.abry (43 bytes)
%Program Files%\Outlook Express\razyiyaib.yqyqqjy.zbz (43 bytes)
%Program Files%\Wireshark\ziiirrqyr.abraqjjr.rzq.yqyz (43 bytes)
%Program Files%\MSN Gaming Zone\Windows\rararqqjy.zbz (43 bytes)
%Program Files%\Windows Media Player\zzaribyqa.bij (43 bytes)
%WinDir%\zzaribyqa.bij (43 bytes)
%WinDir%\byqqjbyjz.byj.zbz (43 bytes)
%Program Files%\Outlook Express\ziiirrqyr.abrqqjy.zbz (43 bytes)
%Program Files%\Outlook Express\rararqqjy.zbzqqjy.zbz (43 bytes)
%Program Files%\Windows Media Player\ayayarabr.iaz (43 bytes)
%Program Files%\MSN Gaming Zone\Windows\yjaaariza.rrry (43 bytes)
%Program Files%\Outlook Express\ajqiaqjjr.rzqqqjy.zbz (43 bytes)
%Documents and Settings%\%current user%\Local Settings\Temp\zaibyq.yaja.bri (43 bytes)
%Program Files%\Windows NT\Accessories\razyiyaib.yqyz (43 bytes)
%Program Files%\NetMeeting\zzaribyqa.bijrararqqjy.zbz (43 bytes)
%Program Files%\Common Files\Microsoft Shared\MSInfo\ayayarabr.iaz (43 bytes)
%WinDir%\inf\zzaribyqa.bij (43 bytes)
%WinDir%\pchealth\helpctr\binaries\ajqiaqjjr.rzq (43 bytes)
%Program Files%\Windows Media Player\byqqjbyjz.byjzbz (43 bytes)
%Program Files%\NetMeeting\byqqjbyjz.byjrararqqjy.zbz (43 bytes)
%Program Files%\NetMeeting\ayayarabr.iazrararqqjy.zbz (43 bytes)

The process e1ad6b12bb74ae20773e65e2d47419a4.exe:2440 makes changes in a file system.
The Virus creates and/or writes to the following file(s):

%WinDir%\$hf_mig$\KB971657\update\aibyqyajq.iaq (43 bytes)
%WinDir%\$NtUninstallKB2483185$\spuninst\jjrrzqyja.aar (43 bytes)
%WinDir%\$hf_mig$\KB982381-IE8\yqabijraz.yiy (43 bytes)
%WinDir%\$hf_mig$\KB2476490\qyrabrrar.arq (43 bytes)
%WinDir%\qjyzbzbyq.qjb (43 bytes)
%WinDir%\$NtUninstallKB2507938$\spuninst\qjyzbzbyq.qjb (43 bytes)
%WinDir%\$hf_mig$\KB2483185\update\yjzbyjaya.yar (43 bytes)
%WinDir%\$NtUninstallKB982665$\spuninst\abriazzza.rib (43 bytes)
%WinDir%\$hf_mig$\KB982132\qjyzbzbyq.qjb (43 bytes)
%WinDir%\$hf_mig$\KB2393802\SP3QFE\qjyzbzbyq.qjb (43 bytes)
%Program Files%\Windows NT\Pinball\abriazzza.rib.qjbq (43 bytes)
%WinDir%\$NtUninstallKB956572$\spuninst\yqabijraz.yiy (43 bytes)
%WinDir%\$hf_mig$\KB975025\qyrabrrar.arq (43 bytes)
%WinDir%\$NtUninstallKB956802$\spuninst\jjrrzqyja.aar (43 bytes)
%WinDir%\$NtUninstallKB2387149$\spuninst\jjrrzqyja.aar (43 bytes)
%WinDir%\$NtUninstallKB952069_WM9$\spuninst\jjrrzqyja.aar (43 bytes)
%WinDir%\$hf_mig$\KB923561\SP3QFE\yqabijraz.yiyb.rib (43 bytes)
%Program Files%\Common Files\Microsoft Shared\MSInfo\jjrrzqyja.aar (43 bytes)
%Program Files%\Adobe\Reader 9.0\Setup Files\{AC76BA86-7AD7-1033-7B44-A93000000001}\aibyqyajq.iaq (43 bytes)
%Program Files%\Wireshark\qyrabrrar.arq (43 bytes)
%Program Files%\Common Files\Adobe\ARM\1.0\izarrrzii.irr (43 bytes)
%WinDir%\SoftwareDistribution\Download\da2a33b6770f970d7fe7262040f98a4f\update\aibyqyajq.iaq (43 bytes)
%WinDir%\$hf_mig$\KB2347290\qjyzbzbyq.qjb (43 bytes)
%WinDir%\$hf_mig$\KB977816\update\qjyzbzbyq.qjb (43 bytes)
%WinDir%\Installer\$PatchCache$\Managed\68AB67CA7DA73301B7449A0300000010\9.3.0\yjzbyjaya.yar (43 bytes)
%WinDir%\$hf_mig$\KB2624667\abriazzza.rib (43 bytes)
%WinDir%\$hf_mig$\KB2485663\abriazzza.rib (43 bytes)
%Program Files%\MSN Gaming Zone\Windows\aibyqyajq.iaq (43 bytes)
%WinDir%\$hf_mig$\KB2618451\update\jjrrzqyja.aar.yiy (43 bytes)
%WinDir%\$NtUninstallKB898461$\spuninst\abriazzza.rib (43 bytes)
%WinDir%\SoftwareDistribution\Download\e9e3bc7b49018c1f53cc0d1bd73cad37\yqabijraz.yiy (43 bytes)
%WinDir%\$hf_mig$\KB956844\yqabijraz.yiy (43 bytes)
%WinDir%\$hf_mig$\KB2347290\update\yjzbyjaya.yarqjbq (43 bytes)
%WinDir%\$NtUninstallKB969059$\spuninst\jjrrzqyja.aar (43 bytes)
%Program Files%\Wireshark\izarrrzii.irr (43 bytes)
%WinDir%\SoftwareDistribution\Download\982ca70dcc7d7c5793e4584ca12bd6a6\aibyqyajq.iaq (43 bytes)
%WinDir%\$hf_mig$\KB2631813\aibyqyajq.iaq (43 bytes)
%Program Files%\Windows Media Player\qyrabrrar.arq (43 bytes)
%WinDir%\$hf_mig$\KB982381-IE8\update\aibyqyajq.iaq (43 bytes)
%Program Files%\Adobe\Reader 9.0\Reader\yqabijraz.yiy (43 bytes)
%WinDir%\$hf_mig$\KB951978\update\qyrabrrar.arqb.rib (43 bytes)
%WinDir%\$hf_mig$\KB2618444-IE8\abriazzza.rib (43 bytes)
%WinDir%\SoftwareDistribution\Download\3b8bc9bbfdb19e4227d5a553f3206c44\yjzbyjaya.yar (43 bytes)
%WinDir%\$NtUninstallKB2619339$\spuninst\qyrabrrar.arq (43 bytes)
%WinDir%\$NtUninstallKB950762$\spuninst\izarrrzii.irr (43 bytes)
%WinDir%\$hf_mig$\KB2698365\update\yjzbyjaya.yar (43 bytes)
%WinDir%\$hf_mig$\KB978338\update\abriazzza.rib (43 bytes)
%WinDir%\$hf_mig$\KB952954\update\jjrrzqyja.aarb.rib (43 bytes)
%WinDir%\$hf_mig$\KB2479943\update\aibyqyajq.iaq (43 bytes)
%WinDir%\$hf_mig$\KB2618444-IE8\SP3QFE\yjzbyjaya.yar (43 bytes)
%WinDir%\$NtUninstallKB974112$\spuninst\izarrrzii.irr (43 bytes)
%WinDir%\SoftwareDistribution\Download\59732c3a78c987eaec1ee41ab88e3da8\jjrrzqyja.aar (43 bytes)
%WinDir%\$hf_mig$\KB2761465\yjzbyjaya.yar (43 bytes)
%WinDir%\$hf_mig$\KB2510581\abriazzza.rib (43 bytes)
%WinDir%\$hf_mig$\KB2598845-IE8\update\izarrrzii.irr (43 bytes)
%WinDir%\$hf_mig$\KB2698365\qjyzbzbyq.qjb (43 bytes)
%WinDir%\$hf_mig$\KB2749655\yqabijraz.yiy (43 bytes)
%WinDir%\$NtUninstallKB978695_WM9$\spuninst\abriazzza.rib (43 bytes)
%WinDir%\$hf_mig$\KB975713\jjrrzqyja.aar (43 bytes)
%WinDir%\SoftwareDistribution\Download\a6632ea9734d3683d8cc4b4a30215873\SP3QFE\izarrrzii.irr (43 bytes)
%WinDir%\$hf_mig$\KB2570947\update\yqabijraz.yiy (43 bytes)
%Program Files%\Adobe\Reader 9.0\Reader\yjzbyjaya.yar (43 bytes)
%WinDir%\SoftwareDistribution\Download\6006b16c1fd02cf49cb91496eb5460a0\qyrabrrar.arq (43 bytes)
%WinDir%\$hf_mig$\KB2655992\update\yqabijraz.yiy.yiy (43 bytes)
%WinDir%\$hf_mig$\KB2598845-IE8\jjrrzqyja.aar (43 bytes)
%WinDir%\$hf_mig$\KB2619339\izarrrzii.irr (43 bytes)
C:\Perl\bin\yjzbyjaya.yar (43 bytes)
%WinDir%\$NtUninstallKB974571$\spuninst\yjzbyjaya.yar (43 bytes)
%WinDir%\$hf_mig$\KB2443105\update\aibyqyajq.iaq (43 bytes)
%WinDir%\$NtUninstallKB2476490$\spuninst\qyrabrrar.arq (43 bytes)
%WinDir%\$NtUninstallKB973540_WM9$\spuninst\abriazzza.rib (43 bytes)
%WinDir%\$hf_mig$\KB971029\yjzbyjaya.yar (43 bytes)
%Documents and Settings%\All Users\Application Data\Adobe\Reader\9.3\ARM\18298\jjrrzqyja.aar (43 bytes)
%WinDir%\$hf_mig$\KB2423089\qyrabrrar.arq (43 bytes)
%WinDir%\xwrm.exe (43 bytes)
%Program Files%\WinPcap\yqabijraz.yiyriazzza.rib.qjbq (43 bytes)
%WinDir%\$hf_mig$\KB956744\update\qjyzbzbyq.qjb (43 bytes)
%WinDir%\$hf_mig$\KB2360937\update\yqabijraz.yiyqjbq (43 bytes)
%WinDir%\$hf_mig$\KB2229593\izarrrzii.irr (43 bytes)
%WinDir%\$hf_mig$\KB2653956\update\yjzbyjaya.yar.yiy (43 bytes)
%WinDir%\$hf_mig$\KB978338\yjzbyjaya.yar (43 bytes)
%WinDir%\$hf_mig$\KB973904\update\izarrrzii.irr (43 bytes)
%WinDir%\$hf_mig$\KB2360937\abriazzza.rib (43 bytes)
D:\izarrrzii.irr (43 bytes)
%WinDir%\$hf_mig$\KB974112\qyrabrrar.arq (43 bytes)
%WinDir%\$hf_mig$\KB952954\aibyqyajq.iaq (43 bytes)
%WinDir%\$NtUninstallKB954155_WM9$\spuninst\qjyzbzbyq.qjb (43 bytes)
%WinDir%\$NtUninstallKB2585542$\spuninst\abriazzza.rib (43 bytes)
%WinDir%\$NtUninstallKB956572$\abriazzza.ribyjaya.yar (43 bytes)
%WinDir%\$hf_mig$\KB2676562\update\yqabijraz.yiy (43 bytes)
%WinDir%\$NtUninstallKB975558_WM8$\spuninst\aibyqyajq.iaq (43 bytes)
%WinDir%\$hf_mig$\KB973869\yqabijraz.yiy (43 bytes)
%WinDir%\$hf_mig$\KB975467\update\abriazzza.rib (43 bytes)
%WinDir%\$hf_mig$\KB2736233\izarrrzii.irr (43 bytes)
%WinDir%\$NtUninstallKB2770660$\spuninst\jjrrzqyja.aar (43 bytes)
%WinDir%\$hf_mig$\KB2440591\update\abriazzza.rib (43 bytes)
%Program Files%\Outlook Express\yqabijraz.yiyyajq.iaq (43 bytes)
%Program Files%\Adobe\Reader 9.0\Reader\abriazzza.rib (43 bytes)
%WinDir%\$hf_mig$\KB955759\izarrrzii.irr (43 bytes)
%WinDir%\$hf_mig$\KB971029\update\abriazzza.rib (43 bytes)
%WinDir%\$hf_mig$\KB2655992\abriazzza.rib (43 bytes)
%WinDir%\$hf_mig$\KB2618444-IE8\update\yqabijraz.yiy (43 bytes)
%WinDir%\SoftwareDistribution\Download\e9e3bc7b49018c1f53cc0d1bd73cad37\SP3QFE\abriazzza.rib (43 bytes)
%WinDir%\$hf_mig$\KB974112\update\qjyzbzbyq.qjb (43 bytes)
%WinDir%\$hf_mig$\KB2618451\aibyqyajq.iaq (43 bytes)
%WinDir%\$hf_mig$\KB982665\update\izarrrzii.irr.iaq (43 bytes)
%WinDir%\$hf_mig$\KB981322\update\jjrrzqyja.aar (43 bytes)
%Program Files%\Windows NT\Accessories\qjyzbzbyq.qjbq (43 bytes)
%WinDir%\$hf_mig$\KB956572\SP3QFE\abriazzza.rib (43 bytes)
%WinDir%\$hf_mig$\KB2676562\abriazzza.rib (43 bytes)
%WinDir%\$hf_mig$\KB969059\qyrabrrar.arq (43 bytes)
%WinDir%\$hf_mig$\KB973869\update\aibyqyajq.iaq (43 bytes)
%WinDir%\$NtUninstallKB2510581$\spuninst\abriazzza.rib (43 bytes)
%WinDir%\$hf_mig$\KB950974\update\yqabijraz.yiyb.rib (43 bytes)
%WinDir%\$NtUninstallKB952004$\spuninst\yqabijraz.yiy (43 bytes)
%WinDir%\$hf_mig$\KB978706\update\qyrabrrar.arq (43 bytes)
%WinDir%\ie8updates\KB2744842-IE8\spuninst\yqabijraz.yiy (43 bytes)
%WinDir%\$NtUninstallKB973507$\spuninst\yjzbyjaya.yar (43 bytes)
%WinDir%\$NtUninstallKB2736233$\spuninst\qjyzbzbyq.qjb (43 bytes)
%WinDir%\$NtUninstallKB971657$\spuninst\qyrabrrar.arq (43 bytes)
%WinDir%\$hf_mig$\KB2481109\izarrrzii.irr (43 bytes)
%WinDir%\$hf_mig$\KB2483185\qjyzbzbyq.qjb (43 bytes)
%WinDir%\$NtUninstallKB972270$\spuninst\qjyzbzbyq.qjb (43 bytes)
%WinDir%\$hf_mig$\KB2481109\SP3QFE\jjrrzqyja.aar (43 bytes)
%WinDir%\$hf_mig$\KB2757638\jjrrzqyja.aar (43 bytes)
%WinDir%\ie8\aibyqyajq.iaq (43 bytes)
%WinDir%\$NtUninstallKB982132$\spuninst\yjzbyjaya.yar (43 bytes)
%WinDir%\$hf_mig$\KB2229593\update\qyrabrrar.arqqjbq (43 bytes)
%WinDir%\$NtUninstallKB2659262$\spuninst\izarrrzii.irr (43 bytes)
%WinDir%\$hf_mig$\KB2481109\update\qyrabrrar.arq (43 bytes)
%WinDir%\$hf_mig$\KB2598479\yqabijraz.yiy (43 bytes)
%WinDir%\ie8updates\KB2598845-IE8\spuninst\qyrabrrar.arq (43 bytes)
%WinDir%\$hf_mig$\KB978706\SP3QFE\jjrrzqyja.aar (43 bytes)
%WinDir%\$hf_mig$\KB975467\yjzbyjaya.yar (43 bytes)
%WinDir%\SoftwareDistribution\Download\85ef43cf285b550a459dd3afbad2f0b8\update\abriazzza.rib (43 bytes)
%WinDir%\$NtUninstallKB2727528$\spuninst\qyrabrrar.arq (43 bytes)
%WinDir%\$NtUninstallKB2624667$\spuninst\yjzbyjaya.yar (43 bytes)
%WinDir%\$hf_mig$\KB973815\yjzbyjaya.yar (43 bytes)
%WinDir%\$hf_mig$\KB956744\qyrabrrar.arq (43 bytes)
%WinDir%\$hf_mig$\KB2592799\yjzbyjaya.yar (43 bytes)
%WinDir%\$NtUninstallKB951978$\abriazzza.ribyjaya.yar (43 bytes)
%WinDir%\$hf_mig$\KB2506212\aibyqyajq.iaq (43 bytes)
%WinDir%\$hf_mig$\KB2476490\update\qjyzbzbyq.qjb (43 bytes)
%WinDir%\inf\izarrrzii.irr (43 bytes)
%Program Files%\Common Files\Adobe\ARM\1.0\jjrrzqyja.aar (43 bytes)
%WinDir%\$hf_mig$\KB974571\update\izarrrzii.irr (43 bytes)
%WinDir%\$NtUninstallKB960859$\spuninst\yjzbyjaya.yar (43 bytes)
%Program Files%\NetMeeting\izarrrzii.irraibyqyajq.iaq (43 bytes)
%WinDir%\$NtUninstallKB973869$\spuninst\aibyqyajq.iaq (43 bytes)
%WinDir%\$NtUninstallKB979482$\spuninst\izarrrzii.irr (43 bytes)
%WinDir%\$hf_mig$\KB2508429\update\yjzbyjaya.yar (43 bytes)
%Program Files%\NetMeeting\qyrabrrar.arqaibyqyajq.iaq (43 bytes)
%WinDir%\$NtUninstallKB973904$\spuninst\jjrrzqyja.aar (43 bytes)
%WinDir%\$hf_mig$\KB898461\yjzbyjaya.yar (43 bytes)
%WinDir%\$NtUninstallKB960803$\spuninst\qjyzbzbyq.qjb (43 bytes)
%WinDir%\ie8\jjrrzqyja.aar (43 bytes)
%WinDir%\$hf_mig$\KB952287\abriazzza.rib (43 bytes)
%WinDir%\$hf_mig$\KB2387149\update\jjrrzqyja.aarqjbq (43 bytes)
%WinDir%\$hf_mig$\KB2757638\update\izarrrzii.irr.rib (43 bytes)
%WinDir%\$NtUninstallKB2646524$\spuninst\yqabijraz.yiy (43 bytes)
%WinDir%\$NtUninstallKB2719985$\spuninst\yjzbyjaya.yar (43 bytes)
%WinDir%\Microsoft.NET\Framework\yqabijraz.yiy (43 bytes)
%WinDir%\$hf_mig$\KB2646524\izarrrzii.irr (43 bytes)
%WinDir%\$hf_mig$\KB2624667\update\yqabijraz.yiy.yiy (43 bytes)
%WinDir%\$hf_mig$\KB974392\yqabijraz.yiy (43 bytes)
%WinDir%\$NtUninstallKB2761465$\spuninst\aibyqyajq.iaq (43 bytes)
%WinDir%\$NtUninstallKB977816$\spuninst\qyrabrrar.arq (43 bytes)
%WinDir%\$hf_mig$\KB974392\update\aibyqyajq.iaq (43 bytes)
%WinDir%\$hf_mig$\KB975025\update\qjyzbzbyq.qjb (43 bytes)
%WinDir%\SoftwareDistribution\Download\6006b16c1fd02cf49cb91496eb5460a0\update\qjyzbzbyq.qjb (43 bytes)
%WinDir%\$NtUninstallKB968389$\spuninst\aibyqyajq.iaq (43 bytes)
%Program Files%\Wireshark\jjrrzqyja.aar (43 bytes)
%WinDir%\Installer\$PatchCache$\Managed\68AB67CA7DA73301B7449A0300000010\9.3.0\qyrabrrar.arq (43 bytes)
%WinDir%\$NtUninstallKB2479943$\spuninst\yjzbyjaya.yar (43 bytes)
%WinDir%\$NtUninstallKB2698365$\spuninst\qyrabrrar.arq (43 bytes)
%WinDir%\$hf_mig$\KB2584146\jjrrzqyja.aar (43 bytes)
%WinDir%\$NtUninstallKB2749655$\spuninst\yjzbyjaya.yar (43 bytes)
%WinDir%\ie8updates\KB2618444-IE8\spuninst\yjzbyjaya.yar (43 bytes)
%WinDir%\$hf_mig$\KB2566454\qjyzbzbyq.qjb (43 bytes)
C:\Perl\bin\qjyzbzbyq.qjb (43 bytes)
%Program Files%\Adobe\Reader 9.0\Reader\qjyzbzbyq.qjb (43 bytes)
%WinDir%\$hf_mig$\KB974318\yjzbyjaya.yar (43 bytes)
%WinDir%\$hf_mig$\KB2510581\update\yqabijraz.yiy (43 bytes)
%WinDir%\ie8updates\KB982381-IE8\spuninst\jjrrzqyja.aar (43 bytes)
%WinDir%\$hf_mig$\KB951978\SP3QFE\jjrrzqyja.aarb.rib (43 bytes)
%WinDir%\$hf_mig$\KB2761465\update\abriazzza.rib.rib (43 bytes)
%WinDir%\$hf_mig$\KB2661637\update\jjrrzqyja.aar.yiy (43 bytes)
%WinDir%\$hf_mig$\KB2619339\update\qyrabrrar.arq.yiy (43 bytes)
%WinDir%\$hf_mig$\KB974318\update\abriazzza.rib (43 bytes)
%WinDir%\$hf_mig$\KB2770660\yqabijraz.yiy (43 bytes)
%WinDir%\ie8updates\KB2618444-IE8\qjyzbzbyq.qjb (43 bytes)
%WinDir%\$hf_mig$\KB2479943\yqabijraz.yiy (43 bytes)
%WinDir%\$hf_mig$\KB2440591\yjzbyjaya.yar (43 bytes)
%WinDir%\$hf_mig$\KB956802\update\abriazzza.rib (43 bytes)
%WinDir%\$NtUninstallKB956844$\spuninst\izarrrzii.irr (43 bytes)
%WinDir%\$hf_mig$\KB960859\yqabijraz.yiy (43 bytes)
%WinDir%\$hf_mig$\KB2736233\update\qyrabrrar.arq (43 bytes)
%WinDir%\$hf_mig$\KB977816\qyrabrrar.arq (43 bytes)
%WinDir%\$hf_mig$\KB971657\yqabijraz.yiy (43 bytes)
%WinDir%\$hf_mig$\KB2507938\update\qyrabrrar.arq (43 bytes)
C:\totalcmd\qyrabrrar.arq (43 bytes)
%WinDir%\$hf_mig$\KB975560\yqabijraz.yiy (43 bytes)
%WinDir%\$hf_mig$\KB2387149\aibyqyajq.iaq (43 bytes)
%WinDir%\$NtUninstallKB2481109$\spuninst\aibyqyajq.iaq (43 bytes)
%WinDir%\$hf_mig$\KB973815\update\abriazzza.rib (43 bytes)
%WinDir%\$hf_mig$\KB2585542\update\qjyzbzbyq.qjb (43 bytes)
%WinDir%\$hf_mig$\KB2467659\jjrrzqyja.aar (43 bytes)
%WinDir%\$hf_mig$\KB2584146\update\izarrrzii.irr (43 bytes)
%WinDir%\$NtUninstallKB978706$\spuninst\aibyqyajq.iaq (43 bytes)
%Documents and Settings%\All Users\Application Data\Adobe\Reader\9.3\ARM\18298\aibyqyajq.iaq (43 bytes)
%WinDir%\SoftwareDistribution\Download\ff0686f2f699fa07ed5ad0848fa3055b\update\izarrrzii.irr (43 bytes)
%Documents and Settings%\All Users\Application Data\Adobe\Reader\9.3\ARM\18298\abriazzza.rib (43 bytes)
%WinDir%\$NtUninstallKB975713$\spuninst\izarrrzii.irr (43 bytes)
%WinDir%\$NtUninstallKB923561$\spuninst\yqabijraz.yiy (43 bytes)
%WinDir%\$NtUninstallKB975025$\spuninst\abriazzza.rib (43 bytes)
%WinDir%\$hf_mig$\KB951978\izarrrzii.irr (43 bytes)
%WinDir%\SoftwareDistribution\Download\982ca70dcc7d7c5793e4584ca12bd6a6\SP3QFE\yqabijraz.yiy (43 bytes)
%WinDir%\SoftwareDistribution\Download\5721b309e042b0a08775c2542421fa18\yqabijraz.yiy (43 bytes)
%WinDir%\$hf_mig$\KB973904\jjrrzqyja.aar (43 bytes)
%WinDir%\$NtUninstallKB2393802$\spuninst\qjyzbzbyq.qjb (43 bytes)
%WinDir%\$NtUninstallKB2757638$\spuninst\abriazzza.rib (43 bytes)
%WinDir%\$NtUninstallKB2661637$\spuninst\qyrabrrar.arq (43 bytes)
%WinDir%\$hf_mig$\KB2724197\update\yqabijraz.yiy (43 bytes)
%WinDir%\$hf_mig$\KB950762\update\yjzbyjaya.yarb.rib (43 bytes)
%Program Files%\Windows NT\yjzbyjaya.yar (43 bytes)
%WinDir%\$NtUninstallKB952954$\spuninst\qyrabrrar.arq (43 bytes)
%WinDir%\$hf_mig$\KB974571\jjrrzqyja.aar (43 bytes)
%WinDir%\$hf_mig$\KB2584146\SP3QFE\aibyqyajq.iaq (43 bytes)
%WinDir%\$hf_mig$\KB975560\update\aibyqyajq.iaq (43 bytes)
%WinDir%\$hf_mig$\KB979309\update\yjzbyjaya.yar (43 bytes)
%WinDir%\SoftwareDistribution\Download\dce73325c50b43822620b32408bb3b50\jjrrzqyja.aar (43 bytes)
%WinDir%\$hf_mig$\KB2419632\aibyqyajq.iaq (43 bytes)
%WinDir%\Network Diagnostic\izarrrzii.irr (43 bytes)
%WinDir%\$hf_mig$\KB2724197\abriazzza.rib (43 bytes)
%WinDir%\$NtUninstallKB971029$\spuninst\izarrrzii.irr (43 bytes)
%WinDir%\$hf_mig$\KB2799329\update\qjyzbzbyq.qjb.rib (43 bytes)
%WinDir%\$hf_mig$\KB973507\qyrabrrar.arq (43 bytes)
%Program Files%\Common Files\Adobe\ARM\1.0\qyrabrrar.arq (43 bytes)
%WinDir%\SoftwareDistribution\Download\dce73325c50b43822620b32408bb3b50\update\izarrrzii.irr (43 bytes)
%WinDir%\$hf_mig$\KB2478960\update\abriazzza.rib (43 bytes)
%WinDir%\$hf_mig$\KB2620712\update\yjzbyjaya.yar.yiy (43 bytes)
%WinDir%\$NtUninstallKB2506212$\spuninst\qyrabrrar.arq (43 bytes)
%WinDir%\$hf_mig$\KB959426\jjrrzqyja.aar (43 bytes)
%WinDir%\$NtUninstallKB2691442$\spuninst\izarrrzii.irr (43 bytes)
%WinDir%\$NtUninstallKB2584146$\spuninst\yjzbyjaya.yar (43 bytes)
%WinDir%\$hf_mig$\KB2115168\update\jjrrzqyja.aarqjbq (43 bytes)
%WinDir%\SoftwareDistribution\Download\da2a33b6770f970d7fe7262040f98a4f\yqabijraz.yiy (43 bytes)
C:\totalcmd\qjyzbzbyq.qjb (43 bytes)
%WinDir%\$hf_mig$\KB2485663\update\yqabijraz.yiy (43 bytes)
%WinDir%\ie8updates\KB982381-IE8\aibyqyajq.iaq (43 bytes)
%WinDir%\$hf_mig$\KB2653956\qjyzbzbyq.qjb (43 bytes)
%WinDir%\$NtUninstallKB2508429$\spuninst\yjzbyjaya.yar (43 bytes)
%WinDir%\$hf_mig$\KB2507938\izarrrzii.irr (43 bytes)
%WinDir%\$hf_mig$\KB898461\update\abriazzza.ribb.rib (43 bytes)
%WinDir%\$hf_mig$\KB972270\update\izarrrzii.irr (43 bytes)
%WinDir%\SoftwareDistribution\Download\e9e3bc7b49018c1f53cc0d1bd73cad37\update\aibyqyajq.iaq (43 bytes)
%WinDir%\$hf_mig$\KB2779030\jjrrzqyja.aar (43 bytes)
%WinDir%\$hf_mig$\KB955759\update\qyrabrrar.arqb.rib (43 bytes)
%WinDir%\$hf_mig$\KB2115168\aibyqyajq.iaq (43 bytes)
%WinDir%\$NtUninstallKB2799329$\spuninst\yjzbyjaya.yar (43 bytes)
%WinDir%\$hf_mig$\KB2508429\qjyzbzbyq.qjb (43 bytes)
%WinDir%\SoftwareDistribution\Download\982ca70dcc7d7c5793e4584ca12bd6a6\update\jjrrzqyja.aar (43 bytes)
%WinDir%\$hf_mig$\KB968389\update\izarrrzii.irr (43 bytes)
%WinDir%\$hf_mig$\KB981322\aibyqyajq.iaq (43 bytes)
%WinDir%\$NtUninstallKB2712808$\spuninst\qjyzbzbyq.qjb (43 bytes)
%WinDir%\$hf_mig$\KB973507\update\qjyzbzbyq.qjb (43 bytes)
%WinDir%\$hf_mig$\KB2727528\aibyqyajq.iaq (43 bytes)
%WinDir%\$hf_mig$\KB952004\qjyzbzbyq.qjb (43 bytes)
%WinDir%\$hf_mig$\KB979482\update\yqabijraz.yiy (43 bytes)
%Program Files%\Common Files\Adobe\Updater6\abriazzza.rib (43 bytes)
%WinDir%\$hf_mig$\KB2566454\update\yjzbyjaya.yar (43 bytes)
%WinDir%\Installer\$PatchCache$\Managed\68AB67CA7DA73301B7449A0300000010\9.3.0\aibyqyajq.iaq (43 bytes)
%WinDir%\$NtUninstallKB975560$\spuninst\jjrrzqyja.aar (43 bytes)
%WinDir%\$NtUninstallKB2566454$\spuninst\izarrrzii.irr (43 bytes)
%WinDir%\$NtUninstallKB2686509$\spuninst\jjrrzqyja.aar (43 bytes)
%WinDir%\$hf_mig$\KB2719985\aibyqyajq.iaq (43 bytes)
%WinDir%\$NtUninstallKB2779030$\spuninst\izarrrzii.irr (43 bytes)
%WinDir%\$hf_mig$\KB956572\update\izarrrzii.irr (43 bytes)
%WinDir%\$hf_mig$\KB2478960\yjzbyjaya.yar (43 bytes)
%WinDir%\$NtUninstallKB2467659$\spuninst\izarrrzii.irr (43 bytes)
%WinDir%\$hf_mig$\KB978706\izarrrzii.irr (43 bytes)
%WinDir%\$hf_mig$\KB969059\update\qjyzbzbyq.qjb (43 bytes)
%WinDir%\$hf_mig$\KB2570947\abriazzza.rib (43 bytes)
%WinDir%\$hf_mig$\KB2779030\update\izarrrzii.irr.rib (43 bytes)
%WinDir%\$NtUninstallKB2724197$\spuninst\izarrrzii.irr (43 bytes)
%WinDir%\$NtUninstallKB2440591$\spuninst\aibyqyajq.iaq (43 bytes)
%WinDir%\$NtUninstallKB960859$\yqabijraz.yiy (43 bytes)
%WinDir%\SoftwareDistribution\Download\a6632ea9734d3683d8cc4b4a30215873\qyrabrrar.arq (43 bytes)
%WinDir%\$hf_mig$\KB982132\update\yjzbyjaya.yar (43 bytes)
%WinDir%\$hf_mig$\KB978542\yqabijraz.yiy (43 bytes)
%WinDir%\$hf_mig$\KB2719985\update\jjrrzqyja.aar (43 bytes)
%WinDir%\$hf_mig$\KB2631813\update\jjrrzqyja.aar.yiy (43 bytes)
%WinDir%\pchealth\helpctr\binaries\qjyzbzbyq.qjb (43 bytes)
%WinDir%\$hf_mig$\KB923561\update\jjrrzqyja.aarb.rib (43 bytes)
%WinDir%\$hf_mig$\KB2799329\qyrabrrar.arq (43 bytes)
%WinDir%\$NtUninstallKB2779562$\spuninst\qyrabrrar.arq (43 bytes)
%Program Files%\Common Files\Adobe\ARM\1.0\qjyzbzbyq.qjb (43 bytes)
%WinDir%\$NtUninstallKB2631813$\spuninst\abriazzza.rib (43 bytes)
%WinDir%\$NtUninstallKB955759$\spuninst\yjzbyjaya.yar (43 bytes)
%WinDir%\Installer\$PatchCache$\Managed\68AB67CA7DA73301B7449A0300000010\9.3.0\abriazzza.rib (43 bytes)
%WinDir%\SoftwareDistribution\Download\e104dcd29adf1c6c473a5efad2d509be\update\yjzbyjaya.yar (43 bytes)
%WinDir%\SoftwareDistribution\Download\e104dcd29adf1c6c473a5efad2d509be\qjyzbzbyq.qjb (43 bytes)
%WinDir%\$hf_mig$\KB956844\update\aibyqyajq.iaq (43 bytes)
%WinDir%\ie8updates\KB2744842-IE8\abriazzza.rib (43 bytes)
%Program Files%\MSN Gaming Zone\Windows\yqabijraz.yiyb (43 bytes)
%WinDir%\$NtUninstallKB2570947$\spuninst\qyrabrrar.arq (43 bytes)
%WinDir%\$hf_mig$\KB959426\update\izarrrzii.irr (43 bytes)
%WinDir%\$NtUninstallKB2419632$\spuninst\yjzbyjaya.yar (43 bytes)
%WinDir%\$NtUninstallKB956744$\spuninst\aibyqyajq.iaq (43 bytes)
%WinDir%\$NtUninstallKB950974$\spuninst\qyrabrrar.arq (43 bytes)
%WinDir%\$NtUninstallKB2564958$\spuninst\jjrrzqyja.aar (43 bytes)
%WinDir%\$NtUninstallKB2423089$\spuninst\abriazzza.rib (43 bytes)
%WinDir%\$NtUninstallKB2378111_WM9$\spuninst\aibyqyajq.iaq (43 bytes)
%WinDir%\$hf_mig$\KB956802\yjzbyjaya.yar (43 bytes)
%WinDir%\$hf_mig$\KB2686509\update\jjrrzqyja.aar (43 bytes)
%WinDir%\SoftwareDistribution\Download\34e066ed95c1982b2564a07910fb791f\qyrabrrar.arq (43 bytes)
%WinDir%\Installer\$PatchCache$\Managed\68AB67CA7DA73301B7449A0300000010\9.3.0\jjrrzqyja.aar (43 bytes)
%WinDir%\$hf_mig$\KB960803\update\qjyzbzbyq.qjb (43 bytes)
%Program Files%\Wireshark\abriazzza.rib (43 bytes)
%WinDir%\WinSxS\MSIL_Microsoft.Workflow.Compiler_31bf3856ad364e35_4.0.0.0_x-ww_97359ba5\abriazzza.rib (43 bytes)
%Program Files%\NetMeeting\jjrrzqyja.aaraibyqyajq.iaq (43 bytes)
%WinDir%\$NtUninstallKB2592799$\spuninst\yqabijraz.yiy (43 bytes)
%WinDir%\$NtUninstallKB2544521$\spuninst\aibyqyajq.iaq (43 bytes)
%WinDir%\SoftwareDistribution\Download\34e066ed95c1982b2564a07910fb791f\update\qjyzbzbyq.qjb (43 bytes)
C:\Perl\bin\abriazzza.rib (43 bytes)
%WinDir%\$hf_mig$\KB2535512\update\jjrrzqyja.aar (43 bytes)
%WinDir%\$hf_mig$\KB2727528\update\jjrrzqyja.aar (43 bytes)
%WinDir%\$NtUninstallKB923561$\aibyqyajq.iaqijraz.yiy (43 bytes)
%WinDir%\$hf_mig$\KB2592799\update\abriazzza.rib (43 bytes)
%WinDir%\$hf_mig$\KB2544521\izarrrzii.irr (43 bytes)
%WinDir%\$NtUninstallKB2620712$\spuninst\qjyzbzbyq.qjb (43 bytes)
%WinDir%\$hf_mig$\KB2661637\aibyqyajq.iaq (43 bytes)
%WinDir%\$NtUninstallKB2584146$\qjyzbzbyq.qjb (43 bytes)
%WinDir%\$hf_mig$\KB978542\update\aibyqyajq.iaq (43 bytes)
%WinDir%\$NtUninstallKB974318$\spuninst\qyrabrrar.arq (43 bytes)
%Program Files%\MSN Gaming Zone\Windows\abriazzza.ribb (43 bytes)
%WinDir%\$hf_mig$\KB2419632\update\jjrrzqyja.aar (43 bytes)
%WinDir%\SoftwareDistribution\Download\59732c3a78c987eaec1ee41ab88e3da8\update\izarrrzii.irr (43 bytes)
%WinDir%\$hf_mig$\KB982665\jjrrzqyja.aar (43 bytes)
%Program Files%\Common Files\Microsoft Shared\DW\aibyqyajq.iaq (43 bytes)
%Program Files%\Common Files\Microsoft Shared\DW\yqabijraz.yiy (43 bytes)
%WinDir%\$NtUninstallKB2758857$\spuninst\yqabijraz.yiy (43 bytes)
%WinDir%\$NtUninstallKB2653956$\spuninst\aibyqyajq.iaq (43 bytes)
%WinDir%\$hf_mig$\KB950762\qjyzbzbyq.qjb (43 bytes)
%WinDir%\SoftwareDistribution\Download\a6632ea9734d3683d8cc4b4a30215873\update\qjyzbzbyq.qjb (43 bytes)
%WinDir%\$hf_mig$\KB2712808\abriazzza.rib (43 bytes)
%WinDir%\$hf_mig$\KB2598479\update\aibyqyajq.iaq (43 bytes)
%WinDir%\$NtUninstallKB974392$\spuninst\qjyzbzbyq.qjb (43 bytes)
%WinDir%\$NtUninstallKB2618451$\spuninst\izarrrzii.irr (43 bytes)
%Program Files%\Outlook Express\yjzbyjaya.yaryajq.iaq (43 bytes)
%WinDir%\$NtUninstallKB2598479$\spuninst\aibyqyajq.iaq (43 bytes)
%WinDir%\$hf_mig$\KB975713\update\izarrrzii.irr (43 bytes)
%WinDir%\$hf_mig$\KB968389\jjrrzqyja.aar (43 bytes)
%WinDir%\$hf_mig$\KB960859\update\aibyqyajq.iaq (43 bytes)
%Program Files%\Outlook Express\aibyqyajq.iaqyajq.iaq (43 bytes)
%WinDir%\$hf_mig$\KB2744842-IE8\yjzbyjaya.yar (43 bytes)
%WinDir%\$hf_mig$\KB950974\abriazzza.rib (43 bytes)
%WinDir%\$NtUninstallKB2676562$\abriazzza.rib (43 bytes)
%WinDir%\$NtUninstallKB981322$\spuninst\qyrabrrar.arq (43 bytes)
%WinDir%\SoftwareDistribution\Download\5721b309e042b0a08775c2542421fa18\update\aibyqyajq.iaq (43 bytes)
%WinDir%\pchealth\helpctr\binaries\yqabijraz.yiy (43 bytes)
%WinDir%\$NtUninstallKB978542$\spuninst\yjzbyjaya.yar (43 bytes)
%WinDir%\SoftwareDistribution\Download\3b8bc9bbfdb19e4227d5a553f3206c44\update\abriazzza.rib (43 bytes)
%WinDir%\SoftwareDistribution\Download\ff0686f2f699fa07ed5ad0848fa3055b\jjrrzqyja.aar (43 bytes)
%WinDir%\$hf_mig$\KB2744842-IE8\SP3QFE\qjyzbzbyq.qjb (43 bytes)
%WinDir%\$NtUninstallKB973815$\spuninst\yqabijraz.yiy (43 bytes)
%WinDir%\$hf_mig$\KB2544521\update\qyrabrrar.arq (43 bytes)
%WinDir%\$hf_mig$\KB2646524\update\qyrabrrar.arq.yiy (43 bytes)
%WinDir%\$NtUninstallKB951978$\qjyzbzbyq.qjbbrrar.arq (43 bytes)
%WinDir%\$hf_mig$\KB2691442\update\qyrabrrar.arq (43 bytes)
%WinDir%\$hf_mig$\KB2749655\update\aibyqyajq.iaq.rib (43 bytes)
%WinDir%\$hf_mig$\KB2712808\update\yqabijraz.yiy (43 bytes)
%WinDir%\$NtUninstallKB959426$\spuninst\qyrabrrar.arq (43 bytes)
%WinDir%\SoftwareDistribution\Download\c86138b508e29791909bf87cca82fe28\yjzbyjaya.yar (43 bytes)
%WinDir%\$hf_mig$\KB952287\update\yqabijraz.yiyb.rib (43 bytes)
%WinDir%\$hf_mig$\KB2770660\update\aibyqyajq.iaq.rib (43 bytes)
%WinDir%\$hf_mig$\KB923561\aibyqyajq.iaq (43 bytes)
%WinDir%\$hf_mig$\KB2535512\aibyqyajq.iaq (43 bytes)
%WinDir%\$NtUninstallKB952287$\spuninst\izarrrzii.irr (43 bytes)
%WinDir%\$hf_mig$\KB2603381\update\qjyzbzbyq.qjb.irr (43 bytes)
%WinDir%\$NtUninstallKB981997$\spuninst\qjyzbzbyq.qjb (43 bytes)
%Documents and Settings%\%current user%\Local Settings\Application Data\Adobe\Reader 9.3\Setup Files\Reader9\qjyzbzbyq.qjb (43 bytes)
%WinDir%\$hf_mig$\KB979309\qjyzbzbyq.qjb (43 bytes)
%WinDir%\$hf_mig$\KB972270\jjrrzqyja.aar (43 bytes)
%WinDir%\$hf_mig$\KB979482\abriazzza.rib (43 bytes)
%Program Files%\Outlook Express\qjyzbzbyq.qjbyajq.iaq (43 bytes)
%WinDir%\$hf_mig$\KB2585542\qyrabrrar.arq (43 bytes)
%WinDir%\$hf_mig$\KB2443105\yqabijraz.yiy (43 bytes)
%WinDir%\$hf_mig$\KB956572\jjrrzqyja.aar (43 bytes)
%WinDir%\$hf_mig$\KB2506212\update\jjrrzqyja.aar (43 bytes)
%WinDir%\$NtUninstallKB2603381$\spuninst\jjrrzqyja.aar (43 bytes)
%WinDir%\$hf_mig$\KB2467659\update\izarrrzii.irr (43 bytes)
%WinDir%\$NtUninstallKB978338$\spuninst\qjyzbzbyq.qjb (43 bytes)
%WinDir%\$NtUninstallKB2443105$\spuninst\jjrrzqyja.aar (43 bytes)
C:\totalcmd\yqabijraz.yiy (43 bytes)
%Documents and Settings%\%current user%\Local Settings\Temp\bajybr.aaaa.bri (43 bytes)
%WinDir%\$hf_mig$\KB2393802\abriazzza.rib (43 bytes)
%WinDir%\$hf_mig$\KB981997\update\qyrabrrar.arq (43 bytes)
%WinDir%\$hf_mig$\KB2423089\SP3QFE\izarrrzii.irr (43 bytes)
%WinDir%\$hf_mig$\KB960803\qyrabrrar.arq (43 bytes)
%WinDir%\$hf_mig$\KB960859\SP3QFE\abriazzza.rib (43 bytes)
%WinDir%\$hf_mig$\KB2620712\qjyzbzbyq.qjb (43 bytes)
%WinDir%\$NtUninstallKB2485663$\spuninst\izarrrzii.irr (43 bytes)
%WinDir%\SoftwareDistribution\Download\c86138b508e29791909bf87cca82fe28\update\abriazzza.rib (43 bytes)
%WinDir%\$NtUninstallKB979309$\spuninst\jjrrzqyja.aar (43 bytes)
%WinDir%\$hf_mig$\KB952004\update\yjzbyjaya.yarb.rib (43 bytes)
%WinDir%\$NtUninstallKB2655992$\spuninst\jjrrzqyja.aar (43 bytes)
%WinDir%\$hf_mig$\KB2603381\qyrabrrar.arq (43 bytes)
%WinDir%\$NtUninstallKB2676562$\spuninst\aibyqyajq.iaq (43 bytes)
%Program Files%\Wireshark\yjzbyjaya.yar (43 bytes)
%WinDir%\$hf_mig$\KB960859\SP3QFE\yjzbyjaya.yar (43 bytes)
%WinDir%\$NtUninstallKB946648$\spuninst\jjrrzqyja.aar (43 bytes)
%WinDir%\$hf_mig$\KB2423089\update\qjyzbzbyq.qjb (43 bytes)
%WinDir%\$hf_mig$\KB2758857\qyrabrrar.arq (43 bytes)
%WinDir%\$NtUninstallKB975467$\spuninst\yqabijraz.yiy (43 bytes)
%Documents and Settings%\All Users\Application Data\Adobe\Reader\9.3\ARM\18298\yqabijraz.yiy (43 bytes)
%WinDir%\$NtUninstallKB2535512$\spuninst\yqabijraz.yiy (43 bytes)
%Program Files%\MSN Gaming Zone\Windows\yjzbyjaya.yarb (43 bytes)
%WinDir%\$hf_mig$\KB2686509\aibyqyajq.iaq (43 bytes)
%WinDir%\$NtUninstallKB2779562$\qjyzbzbyq.qjb (43 bytes)
%WinDir%\$hf_mig$\KB981997\izarrrzii.irr (43 bytes)
%WinDir%\$hf_mig$\KB946648\izarrrzii.irr (43 bytes)
%WinDir%\Installer\$PatchCache$\Managed\68AB67CA7DA73301B7449A0300000010\9.3.0\izarrrzii.irr (43 bytes)
%Program Files%\Adobe\Reader 9.0\Reader\aibyqyajq.iaq (43 bytes)
%WinDir%\$NtUninstallKB951978$\spuninst\yjzbyjaya.yar (43 bytes)
%WinDir%\$hf_mig$\KB982381-IE8\SP3QFE\abriazzza.rib (43 bytes)
%Program Files%\Wireshark\qjyzbzbyq.qjb (43 bytes)
%WinDir%\$hf_mig$\KB2758857\update\qjyzbzbyq.qjb.rib (43 bytes)
%Program Files%\Windows Media Player\izarrrzii.irr (43 bytes)
%WinDir%\$hf_mig$\KB946648\update\qyrabrrar.arqb.rib (43 bytes)
%WinDir%\$hf_mig$\KB956572\SP3QFE\qjyzbzbyq.qjb (43 bytes)
%WinDir%\$hf_mig$\KB2393802\update\yqabijraz.yiy (43 bytes)
%Documents and Settings%\%current user%\Local Settings\Application Data\Adobe\Reader 9.3\Setup Files\yjzbyjaya.yarzbyq.qjb (43 bytes)
%WinDir%\$hf_mig$\KB2691442\izarrrzii.irr (43 bytes)
%WinDir%\$hf_mig$\KB2744842-IE8\update\abriazzza.rib (43 bytes)
%WinDir%\$NtUninstallKB2478960$\spuninst\qjyzbzbyq.qjb (43 bytes)
%WinDir%\SoftwareDistribution\Download\85ef43cf285b550a459dd3afbad2f0b8\yjzbyjaya.yar (43 bytes)
%Program Files%\Windows Media Player\jjrrzqyja.aariaq (43 bytes)

Registry activity

The process qyrabrrar.arq:2496 makes changes in a system registry.
The Virus creates and/or sets the following values in system registry:
To automatically run itself each time Windows is booted, the Virus adds the following link to its file to the system registry autorun key:

[HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]
"x32x" = "%WinDir%\xwrm.exe"

The process e1ad6b12bb74ae20773e65e2d47419a4.exe:2440 makes changes in a system registry.
The Virus creates and/or sets the following values in system registry:
To automatically run itself each time Windows is booted, the Virus adds the following link to its file to the system registry autorun key:

[HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]
"x32x" = "%WinDir%\xwrm.exe"

Network activity (URLs)

No activity has been detected.

Rootkit activity

No anomalies have been detected.

Propagation


Remove it with Ad-Aware

  1. Click (here) to download and install Ad-Aware Free Antivirus.
  2. Update the definition files.
  3. Run a full scan of your computer.


Manual removal*

  1. Terminate malicious process(es) (How to End a Process With the Task Manager):

    qyrabrrar.arq:540
    qyrabrrar.arq:2496
    e1ad6b12bb74ae20773e65e2d47419a4.exe:2440

  2. Delete the original Virus file.
  3. Delete or disinfect the following files created/modified by the Virus:

    %Documents and Settings%\%current user%\Local Settings\Temp\ajqiaq.jjra.bri (43 bytes)
    %Program Files%\MSN Gaming Zone\Windows\ajqiaqjjr.rzqy (43 bytes)
    %Program Files%\Windows NT\Pinball\ajqiaqjjr.rzq.yqyz (43 bytes)
    %Program Files%\MSN Gaming Zone\Windows\ziiirrqyr.abry (43 bytes)
    %Program Files%\Outlook Express\razyiyaib.yqyqqjy.zbz (43 bytes)
    %Program Files%\Wireshark\ziiirrqyr.abraqjjr.rzq.yqyz (43 bytes)
    %Program Files%\MSN Gaming Zone\Windows\rararqqjy.zbz (43 bytes)
    %Program Files%\Windows Media Player\zzaribyqa.bij (43 bytes)
    %WinDir%\zzaribyqa.bij (43 bytes)
    %WinDir%\byqqjbyjz.byj.zbz (43 bytes)
    %Program Files%\Outlook Express\ziiirrqyr.abrqqjy.zbz (43 bytes)
    %Program Files%\Outlook Express\rararqqjy.zbzqqjy.zbz (43 bytes)
    %Program Files%\Windows Media Player\ayayarabr.iaz (43 bytes)
    %Program Files%\MSN Gaming Zone\Windows\yjaaariza.rrry (43 bytes)
    %Program Files%\Outlook Express\ajqiaqjjr.rzqqqjy.zbz (43 bytes)
    %Documents and Settings%\%current user%\Local Settings\Temp\zaibyq.yaja.bri (43 bytes)
    %Program Files%\Windows NT\Accessories\razyiyaib.yqyz (43 bytes)
    %Program Files%\NetMeeting\zzaribyqa.bijrararqqjy.zbz (43 bytes)
    %Program Files%\Common Files\Microsoft Shared\MSInfo\ayayarabr.iaz (43 bytes)
    %WinDir%\inf\zzaribyqa.bij (43 bytes)
    %WinDir%\pchealth\helpctr\binaries\ajqiaqjjr.rzq (43 bytes)
    %Program Files%\Windows Media Player\byqqjbyjz.byjzbz (43 bytes)
    %Program Files%\NetMeeting\byqqjbyjz.byjrararqqjy.zbz (43 bytes)
    %Program Files%\NetMeeting\ayayarabr.iazrararqqjy.zbz (43 bytes)
    %WinDir%\$hf_mig$\KB971657\update\aibyqyajq.iaq (43 bytes)
    %WinDir%\$NtUninstallKB2483185$\spuninst\jjrrzqyja.aar (43 bytes)
    %WinDir%\$hf_mig$\KB982381-IE8\yqabijraz.yiy (43 bytes)
    %WinDir%\$hf_mig$\KB2476490\qyrabrrar.arq (43 bytes)
    %WinDir%\qjyzbzbyq.qjb (43 bytes)
    %WinDir%\$NtUninstallKB2507938$\spuninst\qjyzbzbyq.qjb (43 bytes)
    %WinDir%\$hf_mig$\KB2483185\update\yjzbyjaya.yar (43 bytes)
    %WinDir%\$NtUninstallKB982665$\spuninst\abriazzza.rib (43 bytes)
    %WinDir%\$hf_mig$\KB982132\qjyzbzbyq.qjb (43 bytes)
    %WinDir%\$hf_mig$\KB2393802\SP3QFE\qjyzbzbyq.qjb (43 bytes)
    %Program Files%\Windows NT\Pinball\abriazzza.rib.qjbq (43 bytes)
    %WinDir%\$NtUninstallKB956572$\spuninst\yqabijraz.yiy (43 bytes)
    %WinDir%\$hf_mig$\KB975025\qyrabrrar.arq (43 bytes)
    %WinDir%\$NtUninstallKB956802$\spuninst\jjrrzqyja.aar (43 bytes)
    %WinDir%\$NtUninstallKB2387149$\spuninst\jjrrzqyja.aar (43 bytes)
    %WinDir%\$NtUninstallKB952069_WM9$\spuninst\jjrrzqyja.aar (43 bytes)
    %WinDir%\$hf_mig$\KB923561\SP3QFE\yqabijraz.yiyb.rib (43 bytes)
    %Program Files%\Common Files\Microsoft Shared\MSInfo\jjrrzqyja.aar (43 bytes)
    %Program Files%\Adobe\Reader 9.0\Setup Files\{AC76BA86-7AD7-1033-7B44-A93000000001}\aibyqyajq.iaq (43 bytes)
    %Program Files%\Wireshark\qyrabrrar.arq (43 bytes)
    %Program Files%\Common Files\Adobe\ARM\1.0\izarrrzii.irr (43 bytes)
    %WinDir%\SoftwareDistribution\Download\da2a33b6770f970d7fe7262040f98a4f\update\aibyqyajq.iaq (43 bytes)
    %WinDir%\$hf_mig$\KB2347290\qjyzbzbyq.qjb (43 bytes)
    %WinDir%\$hf_mig$\KB977816\update\qjyzbzbyq.qjb (43 bytes)
    %WinDir%\Installer\$PatchCache$\Managed\68AB67CA7DA73301B7449A0300000010\9.3.0\yjzbyjaya.yar (43 bytes)
    %WinDir%\$hf_mig$\KB2624667\abriazzza.rib (43 bytes)
    %WinDir%\$hf_mig$\KB2485663\abriazzza.rib (43 bytes)
    %Program Files%\MSN Gaming Zone\Windows\aibyqyajq.iaq (43 bytes)
    %WinDir%\$hf_mig$\KB2618451\update\jjrrzqyja.aar.yiy (43 bytes)
    %WinDir%\$NtUninstallKB898461$\spuninst\abriazzza.rib (43 bytes)
    %WinDir%\SoftwareDistribution\Download\e9e3bc7b49018c1f53cc0d1bd73cad37\yqabijraz.yiy (43 bytes)
    %WinDir%\$hf_mig$\KB956844\yqabijraz.yiy (43 bytes)
    %WinDir%\$hf_mig$\KB2347290\update\yjzbyjaya.yarqjbq (43 bytes)
    %WinDir%\$NtUninstallKB969059$\spuninst\jjrrzqyja.aar (43 bytes)
    %Program Files%\Wireshark\izarrrzii.irr (43 bytes)
    %WinDir%\SoftwareDistribution\Download\982ca70dcc7d7c5793e4584ca12bd6a6\aibyqyajq.iaq (43 bytes)
    %WinDir%\$hf_mig$\KB2631813\aibyqyajq.iaq (43 bytes)
    %Program Files%\Windows Media Player\qyrabrrar.arq (43 bytes)
    %WinDir%\$hf_mig$\KB982381-IE8\update\aibyqyajq.iaq (43 bytes)
    %Program Files%\Adobe\Reader 9.0\Reader\yqabijraz.yiy (43 bytes)
    %WinDir%\$hf_mig$\KB951978\update\qyrabrrar.arqb.rib (43 bytes)
    %WinDir%\$hf_mig$\KB2618444-IE8\abriazzza.rib (43 bytes)
    %WinDir%\SoftwareDistribution\Download\3b8bc9bbfdb19e4227d5a553f3206c44\yjzbyjaya.yar (43 bytes)
    %WinDir%\$NtUninstallKB2619339$\spuninst\qyrabrrar.arq (43 bytes)
    %WinDir%\$NtUninstallKB950762$\spuninst\izarrrzii.irr (43 bytes)
    %WinDir%\$hf_mig$\KB2698365\update\yjzbyjaya.yar (43 bytes)
    %WinDir%\$hf_mig$\KB978338\update\abriazzza.rib (43 bytes)
    %WinDir%\$hf_mig$\KB952954\update\jjrrzqyja.aarb.rib (43 bytes)
    %WinDir%\$hf_mig$\KB2479943\update\aibyqyajq.iaq (43 bytes)
    %WinDir%\$hf_mig$\KB2618444-IE8\SP3QFE\yjzbyjaya.yar (43 bytes)
    %WinDir%\$NtUninstallKB974112$\spuninst\izarrrzii.irr (43 bytes)
    %WinDir%\SoftwareDistribution\Download\59732c3a78c987eaec1ee41ab88e3da8\jjrrzqyja.aar (43 bytes)
    %WinDir%\$hf_mig$\KB2761465\yjzbyjaya.yar (43 bytes)
    %WinDir%\$hf_mig$\KB2510581\abriazzza.rib (43 bytes)
    %WinDir%\$hf_mig$\KB2598845-IE8\update\izarrrzii.irr (43 bytes)
    %WinDir%\$hf_mig$\KB2698365\qjyzbzbyq.qjb (43 bytes)
    %WinDir%\$hf_mig$\KB2749655\yqabijraz.yiy (43 bytes)
    %WinDir%\$NtUninstallKB978695_WM9$\spuninst\abriazzza.rib (43 bytes)
    %WinDir%\$hf_mig$\KB975713\jjrrzqyja.aar (43 bytes)
    %WinDir%\SoftwareDistribution\Download\a6632ea9734d3683d8cc4b4a30215873\SP3QFE\izarrrzii.irr (43 bytes)
    %WinDir%\$hf_mig$\KB2570947\update\yqabijraz.yiy (43 bytes)
    %Program Files%\Adobe\Reader 9.0\Reader\yjzbyjaya.yar (43 bytes)
    %WinDir%\SoftwareDistribution\Download\6006b16c1fd02cf49cb91496eb5460a0\qyrabrrar.arq (43 bytes)
    %WinDir%\$hf_mig$\KB2655992\update\yqabijraz.yiy.yiy (43 bytes)
    %WinDir%\$hf_mig$\KB2598845-IE8\jjrrzqyja.aar (43 bytes)
    %WinDir%\$hf_mig$\KB2619339\izarrrzii.irr (43 bytes)
    C:\Perl\bin\yjzbyjaya.yar (43 bytes)
    %WinDir%\$NtUninstallKB974571$\spuninst\yjzbyjaya.yar (43 bytes)
    %WinDir%\$hf_mig$\KB2443105\update\aibyqyajq.iaq (43 bytes)
    %WinDir%\$NtUninstallKB2476490$\spuninst\qyrabrrar.arq (43 bytes)
    %WinDir%\$NtUninstallKB973540_WM9$\spuninst\abriazzza.rib (43 bytes)
    %WinDir%\$hf_mig$\KB971029\yjzbyjaya.yar (43 bytes)
    %Documents and Settings%\All Users\Application Data\Adobe\Reader\9.3\ARM\18298\jjrrzqyja.aar (43 bytes)
    %WinDir%\$hf_mig$\KB2423089\qyrabrrar.arq (43 bytes)
    %WinDir%\xwrm.exe (43 bytes)
    %Program Files%\WinPcap\yqabijraz.yiyriazzza.rib.qjbq (43 bytes)
    %WinDir%\$hf_mig$\KB956744\update\qjyzbzbyq.qjb (43 bytes)
    %WinDir%\$hf_mig$\KB2360937\update\yqabijraz.yiyqjbq (43 bytes)
    %WinDir%\$hf_mig$\KB2229593\izarrrzii.irr (43 bytes)
    %WinDir%\$hf_mig$\KB2653956\update\yjzbyjaya.yar.yiy (43 bytes)
    %WinDir%\$hf_mig$\KB978338\yjzbyjaya.yar (43 bytes)
    %WinDir%\$hf_mig$\KB973904\update\izarrrzii.irr (43 bytes)
    %WinDir%\$hf_mig$\KB2360937\abriazzza.rib (43 bytes)
    D:\izarrrzii.irr (43 bytes)
    %WinDir%\$hf_mig$\KB974112\qyrabrrar.arq (43 bytes)
    %WinDir%\$hf_mig$\KB952954\aibyqyajq.iaq (43 bytes)
    %WinDir%\$NtUninstallKB954155_WM9$\spuninst\qjyzbzbyq.qjb (43 bytes)
    %WinDir%\$NtUninstallKB2585542$\spuninst\abriazzza.rib (43 bytes)
    %WinDir%\$NtUninstallKB956572$\abriazzza.ribyjaya.yar (43 bytes)
    %WinDir%\$hf_mig$\KB2676562\update\yqabijraz.yiy (43 bytes)
    %WinDir%\$NtUninstallKB975558_WM8$\spuninst\aibyqyajq.iaq (43 bytes)
    %WinDir%\$hf_mig$\KB973869\yqabijraz.yiy (43 bytes)
    %WinDir%\$hf_mig$\KB975467\update\abriazzza.rib (43 bytes)
    %WinDir%\$hf_mig$\KB2736233\izarrrzii.irr (43 bytes)
    %WinDir%\$NtUninstallKB2770660$\spuninst\jjrrzqyja.aar (43 bytes)
    %WinDir%\$hf_mig$\KB2440591\update\abriazzza.rib (43 bytes)
    %Program Files%\Outlook Express\yqabijraz.yiyyajq.iaq (43 bytes)
    %Program Files%\Adobe\Reader 9.0\Reader\abriazzza.rib (43 bytes)
    %WinDir%\$hf_mig$\KB955759\izarrrzii.irr (43 bytes)
    %WinDir%\$hf_mig$\KB971029\update\abriazzza.rib (43 bytes)
    %WinDir%\$hf_mig$\KB2655992\abriazzza.rib (43 bytes)
    %WinDir%\$hf_mig$\KB2618444-IE8\update\yqabijraz.yiy (43 bytes)
    %WinDir%\SoftwareDistribution\Download\e9e3bc7b49018c1f53cc0d1bd73cad37\SP3QFE\abriazzza.rib (43 bytes)
    %WinDir%\$hf_mig$\KB974112\update\qjyzbzbyq.qjb (43 bytes)
    %WinDir%\$hf_mig$\KB2618451\aibyqyajq.iaq (43 bytes)
    %WinDir%\$hf_mig$\KB982665\update\izarrrzii.irr.iaq (43 bytes)
    %WinDir%\$hf_mig$\KB981322\update\jjrrzqyja.aar (43 bytes)
    %Program Files%\Windows NT\Accessories\qjyzbzbyq.qjbq (43 bytes)
    %WinDir%\$hf_mig$\KB956572\SP3QFE\abriazzza.rib (43 bytes)
    %WinDir%\$hf_mig$\KB2676562\abriazzza.rib (43 bytes)
    %WinDir%\$hf_mig$\KB969059\qyrabrrar.arq (43 bytes)
    %WinDir%\$hf_mig$\KB973869\update\aibyqyajq.iaq (43 bytes)
    %WinDir%\$NtUninstallKB2510581$\spuninst\abriazzza.rib (43 bytes)
    %WinDir%\$hf_mig$\KB950974\update\yqabijraz.yiyb.rib (43 bytes)
    %WinDir%\$NtUninstallKB952004$\spuninst\yqabijraz.yiy (43 bytes)
    %WinDir%\$hf_mig$\KB978706\update\qyrabrrar.arq (43 bytes)
    %WinDir%\ie8updates\KB2744842-IE8\spuninst\yqabijraz.yiy (43 bytes)
    %WinDir%\$NtUninstallKB973507$\spuninst\yjzbyjaya.yar (43 bytes)
    %WinDir%\$NtUninstallKB2736233$\spuninst\qjyzbzbyq.qjb (43 bytes)
    %WinDir%\$NtUninstallKB971657$\spuninst\qyrabrrar.arq (43 bytes)
    %WinDir%\$hf_mig$\KB2481109\izarrrzii.irr (43 bytes)
    %WinDir%\$hf_mig$\KB2483185\qjyzbzbyq.qjb (43 bytes)
    %WinDir%\$NtUninstallKB972270$\spuninst\qjyzbzbyq.qjb (43 bytes)
    %WinDir%\$hf_mig$\KB2481109\SP3QFE\jjrrzqyja.aar (43 bytes)
    %WinDir%\$hf_mig$\KB2757638\jjrrzqyja.aar (43 bytes)
    %WinDir%\ie8\aibyqyajq.iaq (43 bytes)
    %WinDir%\$NtUninstallKB982132$\spuninst\yjzbyjaya.yar (43 bytes)
    %WinDir%\$hf_mig$\KB2229593\update\qyrabrrar.arqqjbq (43 bytes)
    %WinDir%\$NtUninstallKB2659262$\spuninst\izarrrzii.irr (43 bytes)
    %WinDir%\$hf_mig$\KB2481109\update\qyrabrrar.arq (43 bytes)
    %WinDir%\$hf_mig$\KB2598479\yqabijraz.yiy (43 bytes)
    %WinDir%\ie8updates\KB2598845-IE8\spuninst\qyrabrrar.arq (43 bytes)
    %WinDir%\$hf_mig$\KB978706\SP3QFE\jjrrzqyja.aar (43 bytes)
    %WinDir%\$hf_mig$\KB975467\yjzbyjaya.yar (43 bytes)
    %WinDir%\SoftwareDistribution\Download\85ef43cf285b550a459dd3afbad2f0b8\update\abriazzza.rib (43 bytes)
    %WinDir%\$NtUninstallKB2727528$\spuninst\qyrabrrar.arq (43 bytes)
    %WinDir%\$NtUninstallKB2624667$\spuninst\yjzbyjaya.yar (43 bytes)
    %WinDir%\$hf_mig$\KB973815\yjzbyjaya.yar (43 bytes)
    %WinDir%\$hf_mig$\KB956744\qyrabrrar.arq (43 bytes)
    %WinDir%\$hf_mig$\KB2592799\yjzbyjaya.yar (43 bytes)
    %WinDir%\$NtUninstallKB951978$\abriazzza.ribyjaya.yar (43 bytes)
    %WinDir%\$hf_mig$\KB2506212\aibyqyajq.iaq (43 bytes)
    %WinDir%\$hf_mig$\KB2476490\update\qjyzbzbyq.qjb (43 bytes)
    %WinDir%\inf\izarrrzii.irr (43 bytes)
    %Program Files%\Common Files\Adobe\ARM\1.0\jjrrzqyja.aar (43 bytes)
    %WinDir%\$hf_mig$\KB974571\update\izarrrzii.irr (43 bytes)
    %WinDir%\$NtUninstallKB960859$\spuninst\yjzbyjaya.yar (43 bytes)
    %Program Files%\NetMeeting\izarrrzii.irraibyqyajq.iaq (43 bytes)
    %WinDir%\$NtUninstallKB973869$\spuninst\aibyqyajq.iaq (43 bytes)
    %WinDir%\$NtUninstallKB979482$\spuninst\izarrrzii.irr (43 bytes)
    %WinDir%\$hf_mig$\KB2508429\update\yjzbyjaya.yar (43 bytes)
    %Program Files%\NetMeeting\qyrabrrar.arqaibyqyajq.iaq (43 bytes)
    %WinDir%\$NtUninstallKB973904$\spuninst\jjrrzqyja.aar (43 bytes)
    %WinDir%\$hf_mig$\KB898461\yjzbyjaya.yar (43 bytes)
    %WinDir%\$NtUninstallKB960803$\spuninst\qjyzbzbyq.qjb (43 bytes)
    %WinDir%\ie8\jjrrzqyja.aar (43 bytes)
    %WinDir%\$hf_mig$\KB952287\abriazzza.rib (43 bytes)
    %WinDir%\$hf_mig$\KB2387149\update\jjrrzqyja.aarqjbq (43 bytes)
    %WinDir%\$hf_mig$\KB2757638\update\izarrrzii.irr.rib (43 bytes)
    %WinDir%\$NtUninstallKB2646524$\spuninst\yqabijraz.yiy (43 bytes)
    %WinDir%\$NtUninstallKB2719985$\spuninst\yjzbyjaya.yar (43 bytes)
    %WinDir%\Microsoft.NET\Framework\yqabijraz.yiy (43 bytes)
    %WinDir%\$hf_mig$\KB2646524\izarrrzii.irr (43 bytes)
    %WinDir%\$hf_mig$\KB2624667\update\yqabijraz.yiy.yiy (43 bytes)
    %WinDir%\$hf_mig$\KB974392\yqabijraz.yiy (43 bytes)
    %WinDir%\$NtUninstallKB2761465$\spuninst\aibyqyajq.iaq (43 bytes)
    %WinDir%\$NtUninstallKB977816$\spuninst\qyrabrrar.arq (43 bytes)
    %WinDir%\$hf_mig$\KB974392\update\aibyqyajq.iaq (43 bytes)
    %WinDir%\$hf_mig$\KB975025\update\qjyzbzbyq.qjb (43 bytes)
    %WinDir%\SoftwareDistribution\Download\6006b16c1fd02cf49cb91496eb5460a0\update\qjyzbzbyq.qjb (43 bytes)
    %WinDir%\$NtUninstallKB968389$\spuninst\aibyqyajq.iaq (43 bytes)
    %Program Files%\Wireshark\jjrrzqyja.aar (43 bytes)
    %WinDir%\Installer\$PatchCache$\Managed\68AB67CA7DA73301B7449A0300000010\9.3.0\qyrabrrar.arq (43 bytes)
    %WinDir%\$NtUninstallKB2479943$\spuninst\yjzbyjaya.yar (43 bytes)
    %WinDir%\$NtUninstallKB2698365$\spuninst\qyrabrrar.arq (43 bytes)
    %WinDir%\$hf_mig$\KB2584146\jjrrzqyja.aar (43 bytes)
    %WinDir%\$NtUninstallKB2749655$\spuninst\yjzbyjaya.yar (43 bytes)
    %WinDir%\ie8updates\KB2618444-IE8\spuninst\yjzbyjaya.yar (43 bytes)
    %WinDir%\$hf_mig$\KB2566454\qjyzbzbyq.qjb (43 bytes)
    C:\Perl\bin\qjyzbzbyq.qjb (43 bytes)
    %Program Files%\Adobe\Reader 9.0\Reader\qjyzbzbyq.qjb (43 bytes)
    %WinDir%\$hf_mig$\KB974318\yjzbyjaya.yar (43 bytes)
    %WinDir%\$hf_mig$\KB2510581\update\yqabijraz.yiy (43 bytes)
    %WinDir%\ie8updates\KB982381-IE8\spuninst\jjrrzqyja.aar (43 bytes)
    %WinDir%\$hf_mig$\KB951978\SP3QFE\jjrrzqyja.aarb.rib (43 bytes)
    %WinDir%\$hf_mig$\KB2761465\update\abriazzza.rib.rib (43 bytes)
    %WinDir%\$hf_mig$\KB2661637\update\jjrrzqyja.aar.yiy (43 bytes)
    %WinDir%\$hf_mig$\KB2619339\update\qyrabrrar.arq.yiy (43 bytes)
    %WinDir%\$hf_mig$\KB974318\update\abriazzza.rib (43 bytes)
    %WinDir%\$hf_mig$\KB2770660\yqabijraz.yiy (43 bytes)
    %WinDir%\ie8updates\KB2618444-IE8\qjyzbzbyq.qjb (43 bytes)
    %WinDir%\$hf_mig$\KB2479943\yqabijraz.yiy (43 bytes)
    %WinDir%\$hf_mig$\KB2440591\yjzbyjaya.yar (43 bytes)
    %WinDir%\$hf_mig$\KB956802\update\abriazzza.rib (43 bytes)
    %WinDir%\$NtUninstallKB956844$\spuninst\izarrrzii.irr (43 bytes)
    %WinDir%\$hf_mig$\KB960859\yqabijraz.yiy (43 bytes)
    %WinDir%\$hf_mig$\KB2736233\update\qyrabrrar.arq (43 bytes)
    %WinDir%\$hf_mig$\KB977816\qyrabrrar.arq (43 bytes)
    %WinDir%\$hf_mig$\KB971657\yqabijraz.yiy (43 bytes)
    %WinDir%\$hf_mig$\KB2507938\update\qyrabrrar.arq (43 bytes)
    C:\totalcmd\qyrabrrar.arq (43 bytes)
    %WinDir%\$hf_mig$\KB975560\yqabijraz.yiy (43 bytes)
    %WinDir%\$hf_mig$\KB2387149\aibyqyajq.iaq (43 bytes)
    %WinDir%\$NtUninstallKB2481109$\spuninst\aibyqyajq.iaq (43 bytes)
    %WinDir%\$hf_mig$\KB973815\update\abriazzza.rib (43 bytes)
    %WinDir%\$hf_mig$\KB2585542\update\qjyzbzbyq.qjb (43 bytes)
    %WinDir%\$hf_mig$\KB2467659\jjrrzqyja.aar (43 bytes)
    %WinDir%\$hf_mig$\KB2584146\update\izarrrzii.irr (43 bytes)
    %WinDir%\$NtUninstallKB978706$\spuninst\aibyqyajq.iaq (43 bytes)
    %Documents and Settings%\All Users\Application Data\Adobe\Reader\9.3\ARM\18298\aibyqyajq.iaq (43 bytes)
    %WinDir%\SoftwareDistribution\Download\ff0686f2f699fa07ed5ad0848fa3055b\update\izarrrzii.irr (43 bytes)
    %Documents and Settings%\All Users\Application Data\Adobe\Reader\9.3\ARM\18298\abriazzza.rib (43 bytes)
    %WinDir%\$NtUninstallKB975713$\spuninst\izarrrzii.irr (43 bytes)
    %WinDir%\$NtUninstallKB923561$\spuninst\yqabijraz.yiy (43 bytes)
    %WinDir%\$NtUninstallKB975025$\spuninst\abriazzza.rib (43 bytes)
    %WinDir%\$hf_mig$\KB951978\izarrrzii.irr (43 bytes)
    %WinDir%\SoftwareDistribution\Download\982ca70dcc7d7c5793e4584ca12bd6a6\SP3QFE\yqabijraz.yiy (43 bytes)
    %WinDir%\SoftwareDistribution\Download\5721b309e042b0a08775c2542421fa18\yqabijraz.yiy (43 bytes)
    %WinDir%\$hf_mig$\KB973904\jjrrzqyja.aar (43 bytes)
    %WinDir%\$NtUninstallKB2393802$\spuninst\qjyzbzbyq.qjb (43 bytes)
    %WinDir%\$NtUninstallKB2757638$\spuninst\abriazzza.rib (43 bytes)
    %WinDir%\$NtUninstallKB2661637$\spuninst\qyrabrrar.arq (43 bytes)
    %WinDir%\$hf_mig$\KB2724197\update\yqabijraz.yiy (43 bytes)
    %WinDir%\$hf_mig$\KB950762\update\yjzbyjaya.yarb.rib (43 bytes)
    %Program Files%\Windows NT\yjzbyjaya.yar (43 bytes)
    %WinDir%\$NtUninstallKB952954$\spuninst\qyrabrrar.arq (43 bytes)
    %WinDir%\$hf_mig$\KB974571\jjrrzqyja.aar (43 bytes)
    %WinDir%\$hf_mig$\KB2584146\SP3QFE\aibyqyajq.iaq (43 bytes)
    %WinDir%\$hf_mig$\KB975560\update\aibyqyajq.iaq (43 bytes)
    %WinDir%\$hf_mig$\KB979309\update\yjzbyjaya.yar (43 bytes)
    %WinDir%\SoftwareDistribution\Download\dce73325c50b43822620b32408bb3b50\jjrrzqyja.aar (43 bytes)
    %WinDir%\$hf_mig$\KB2419632\aibyqyajq.iaq (43 bytes)
    %WinDir%\Network Diagnostic\izarrrzii.irr (43 bytes)
    %WinDir%\$hf_mig$\KB2724197\abriazzza.rib (43 bytes)
    %WinDir%\$NtUninstallKB971029$\spuninst\izarrrzii.irr (43 bytes)
    %WinDir%\$hf_mig$\KB2799329\update\qjyzbzbyq.qjb.rib (43 bytes)
    %WinDir%\$hf_mig$\KB973507\qyrabrrar.arq (43 bytes)
    %Program Files%\Common Files\Adobe\ARM\1.0\qyrabrrar.arq (43 bytes)
    %WinDir%\SoftwareDistribution\Download\dce73325c50b43822620b32408bb3b50\update\izarrrzii.irr (43 bytes)
    %WinDir%\$hf_mig$\KB2478960\update\abriazzza.rib (43 bytes)
    %WinDir%\$hf_mig$\KB2620712\update\yjzbyjaya.yar.yiy (43 bytes)
    %WinDir%\$NtUninstallKB2506212$\spuninst\qyrabrrar.arq (43 bytes)
    %WinDir%\$hf_mig$\KB959426\jjrrzqyja.aar (43 bytes)
    %WinDir%\$NtUninstallKB2691442$\spuninst\izarrrzii.irr (43 bytes)
    %WinDir%\$NtUninstallKB2584146$\spuninst\yjzbyjaya.yar (43 bytes)
    %WinDir%\$hf_mig$\KB2115168\update\jjrrzqyja.aarqjbq (43 bytes)
    %WinDir%\SoftwareDistribution\Download\da2a33b6770f970d7fe7262040f98a4f\yqabijraz.yiy (43 bytes)
    C:\totalcmd\qjyzbzbyq.qjb (43 bytes)
    %WinDir%\$hf_mig$\KB2485663\update\yqabijraz.yiy (43 bytes)
    %WinDir%\ie8updates\KB982381-IE8\aibyqyajq.iaq (43 bytes)
    %WinDir%\$hf_mig$\KB2653956\qjyzbzbyq.qjb (43 bytes)
    %WinDir%\$NtUninstallKB2508429$\spuninst\yjzbyjaya.yar (43 bytes)
    %WinDir%\$hf_mig$\KB2507938\izarrrzii.irr (43 bytes)
    %WinDir%\$hf_mig$\KB898461\update\abriazzza.ribb.rib (43 bytes)
    %WinDir%\$hf_mig$\KB972270\update\izarrrzii.irr (43 bytes)
    %WinDir%\SoftwareDistribution\Download\e9e3bc7b49018c1f53cc0d1bd73cad37\update\aibyqyajq.iaq (43 bytes)
    %WinDir%\$hf_mig$\KB2779030\jjrrzqyja.aar (43 bytes)
    %WinDir%\$hf_mig$\KB955759\update\qyrabrrar.arqb.rib (43 bytes)
    %WinDir%\$hf_mig$\KB2115168\aibyqyajq.iaq (43 bytes)
    %WinDir%\$NtUninstallKB2799329$\spuninst\yjzbyjaya.yar (43 bytes)
    %WinDir%\$hf_mig$\KB2508429\qjyzbzbyq.qjb (43 bytes)
    %WinDir%\SoftwareDistribution\Download\982ca70dcc7d7c5793e4584ca12bd6a6\update\jjrrzqyja.aar (43 bytes)
    %WinDir%\$hf_mig$\KB968389\update\izarrrzii.irr (43 bytes)
    %WinDir%\$hf_mig$\KB981322\aibyqyajq.iaq (43 bytes)
    %WinDir%\$NtUninstallKB2712808$\spuninst\qjyzbzbyq.qjb (43 bytes)
    %WinDir%\$hf_mig$\KB973507\update\qjyzbzbyq.qjb (43 bytes)
    %WinDir%\$hf_mig$\KB2727528\aibyqyajq.iaq (43 bytes)
    %WinDir%\$hf_mig$\KB952004\qjyzbzbyq.qjb (43 bytes)
    %WinDir%\$hf_mig$\KB979482\update\yqabijraz.yiy (43 bytes)
    %Program Files%\Common Files\Adobe\Updater6\abriazzza.rib (43 bytes)
    %WinDir%\$hf_mig$\KB2566454\update\yjzbyjaya.yar (43 bytes)
    %WinDir%\Installer\$PatchCache$\Managed\68AB67CA7DA73301B7449A0300000010\9.3.0\aibyqyajq.iaq (43 bytes)
    %WinDir%\$NtUninstallKB975560$\spuninst\jjrrzqyja.aar (43 bytes)
    %WinDir%\$NtUninstallKB2566454$\spuninst\izarrrzii.irr (43 bytes)
    %WinDir%\$NtUninstallKB2686509$\spuninst\jjrrzqyja.aar (43 bytes)
    %WinDir%\$hf_mig$\KB2719985\aibyqyajq.iaq (43 bytes)
    %WinDir%\$NtUninstallKB2779030$\spuninst\izarrrzii.irr (43 bytes)
    %WinDir%\$hf_mig$\KB956572\update\izarrrzii.irr (43 bytes)
    %WinDir%\$hf_mig$\KB2478960\yjzbyjaya.yar (43 bytes)
    %WinDir%\$NtUninstallKB2467659$\spuninst\izarrrzii.irr (43 bytes)
    %WinDir%\$hf_mig$\KB978706\izarrrzii.irr (43 bytes)
    %WinDir%\$hf_mig$\KB969059\update\qjyzbzbyq.qjb (43 bytes)
    %WinDir%\$hf_mig$\KB2570947\abriazzza.rib (43 bytes)
    %WinDir%\$hf_mig$\KB2779030\update\izarrrzii.irr.rib (43 bytes)
    %WinDir%\$NtUninstallKB2724197$\spuninst\izarrrzii.irr (43 bytes)
    %WinDir%\$NtUninstallKB2440591$\spuninst\aibyqyajq.iaq (43 bytes)
    %WinDir%\$NtUninstallKB960859$\yqabijraz.yiy (43 bytes)
    %WinDir%\SoftwareDistribution\Download\a6632ea9734d3683d8cc4b4a30215873\qyrabrrar.arq (43 bytes)
    %WinDir%\$hf_mig$\KB982132\update\yjzbyjaya.yar (43 bytes)
    %WinDir%\$hf_mig$\KB978542\yqabijraz.yiy (43 bytes)
    %WinDir%\$hf_mig$\KB2719985\update\jjrrzqyja.aar (43 bytes)
    %WinDir%\$hf_mig$\KB2631813\update\jjrrzqyja.aar.yiy (43 bytes)
    %WinDir%\pchealth\helpctr\binaries\qjyzbzbyq.qjb (43 bytes)
    %WinDir%\$hf_mig$\KB923561\update\jjrrzqyja.aarb.rib (43 bytes)
    %WinDir%\$hf_mig$\KB2799329\qyrabrrar.arq (43 bytes)
    %WinDir%\$NtUninstallKB2779562$\spuninst\qyrabrrar.arq (43 bytes)
    %Program Files%\Common Files\Adobe\ARM\1.0\qjyzbzbyq.qjb (43 bytes)
    %WinDir%\$NtUninstallKB2631813$\spuninst\abriazzza.rib (43 bytes)
    %WinDir%\$NtUninstallKB955759$\spuninst\yjzbyjaya.yar (43 bytes)
    %WinDir%\Installer\$PatchCache$\Managed\68AB67CA7DA73301B7449A0300000010\9.3.0\abriazzza.rib (43 bytes)
    %WinDir%\SoftwareDistribution\Download\e104dcd29adf1c6c473a5efad2d509be\update\yjzbyjaya.yar (43 bytes)
    %WinDir%\SoftwareDistribution\Download\e104dcd29adf1c6c473a5efad2d509be\qjyzbzbyq.qjb (43 bytes)
    %WinDir%\$hf_mig$\KB956844\update\aibyqyajq.iaq (43 bytes)
    %WinDir%\ie8updates\KB2744842-IE8\abriazzza.rib (43 bytes)
    %Program Files%\MSN Gaming Zone\Windows\yqabijraz.yiyb (43 bytes)
    %WinDir%\$NtUninstallKB2570947$\spuninst\qyrabrrar.arq (43 bytes)
    %WinDir%\$hf_mig$\KB959426\update\izarrrzii.irr (43 bytes)
    %WinDir%\$NtUninstallKB2419632$\spuninst\yjzbyjaya.yar (43 bytes)
    %WinDir%\$NtUninstallKB956744$\spuninst\aibyqyajq.iaq (43 bytes)
    %WinDir%\$NtUninstallKB950974$\spuninst\qyrabrrar.arq (43 bytes)
    %WinDir%\$NtUninstallKB2564958$\spuninst\jjrrzqyja.aar (43 bytes)
    %WinDir%\$NtUninstallKB2423089$\spuninst\abriazzza.rib (43 bytes)
    %WinDir%\$NtUninstallKB2378111_WM9$\spuninst\aibyqyajq.iaq (43 bytes)
    %WinDir%\$hf_mig$\KB956802\yjzbyjaya.yar (43 bytes)
    %WinDir%\$hf_mig$\KB2686509\update\jjrrzqyja.aar (43 bytes)
    %WinDir%\SoftwareDistribution\Download\34e066ed95c1982b2564a07910fb791f\qyrabrrar.arq (43 bytes)
    %WinDir%\Installer\$PatchCache$\Managed\68AB67CA7DA73301B7449A0300000010\9.3.0\jjrrzqyja.aar (43 bytes)
    %WinDir%\$hf_mig$\KB960803\update\qjyzbzbyq.qjb (43 bytes)
    %Program Files%\Wireshark\abriazzza.rib (43 bytes)
    %WinDir%\WinSxS\MSIL_Microsoft.Workflow.Compiler_31bf3856ad364e35_4.0.0.0_x-ww_97359ba5\abriazzza.rib (43 bytes)
    %Program Files%\NetMeeting\jjrrzqyja.aaraibyqyajq.iaq (43 bytes)
    %WinDir%\$NtUninstallKB2592799$\spuninst\yqabijraz.yiy (43 bytes)
    %WinDir%\$NtUninstallKB2544521$\spuninst\aibyqyajq.iaq (43 bytes)
    %WinDir%\SoftwareDistribution\Download\34e066ed95c1982b2564a07910fb791f\update\qjyzbzbyq.qjb (43 bytes)
    C:\Perl\bin\abriazzza.rib (43 bytes)
    %WinDir%\$hf_mig$\KB2535512\update\jjrrzqyja.aar (43 bytes)
    %WinDir%\$hf_mig$\KB2727528\update\jjrrzqyja.aar (43 bytes)
    %WinDir%\$NtUninstallKB923561$\aibyqyajq.iaqijraz.yiy (43 bytes)
    %WinDir%\$hf_mig$\KB2592799\update\abriazzza.rib (43 bytes)
    %WinDir%\$hf_mig$\KB2544521\izarrrzii.irr (43 bytes)
    %WinDir%\$NtUninstallKB2620712$\spuninst\qjyzbzbyq.qjb (43 bytes)
    %WinDir%\$hf_mig$\KB2661637\aibyqyajq.iaq (43 bytes)
    %WinDir%\$NtUninstallKB2584146$\qjyzbzbyq.qjb (43 bytes)
    %WinDir%\$hf_mig$\KB978542\update\aibyqyajq.iaq (43 bytes)
    %WinDir%\$NtUninstallKB974318$\spuninst\qyrabrrar.arq (43 bytes)
    %Program Files%\MSN Gaming Zone\Windows\abriazzza.ribb (43 bytes)
    %WinDir%\$hf_mig$\KB2419632\update\jjrrzqyja.aar (43 bytes)
    %WinDir%\SoftwareDistribution\Download\59732c3a78c987eaec1ee41ab88e3da8\update\izarrrzii.irr (43 bytes)
    %WinDir%\$hf_mig$\KB982665\jjrrzqyja.aar (43 bytes)
    %Program Files%\Common Files\Microsoft Shared\DW\aibyqyajq.iaq (43 bytes)
    %Program Files%\Common Files\Microsoft Shared\DW\yqabijraz.yiy (43 bytes)
    %WinDir%\$NtUninstallKB2758857$\spuninst\yqabijraz.yiy (43 bytes)
    %WinDir%\$NtUninstallKB2653956$\spuninst\aibyqyajq.iaq (43 bytes)
    %WinDir%\$hf_mig$\KB950762\qjyzbzbyq.qjb (43 bytes)
    %WinDir%\SoftwareDistribution\Download\a6632ea9734d3683d8cc4b4a30215873\update\qjyzbzbyq.qjb (43 bytes)
    %WinDir%\$hf_mig$\KB2712808\abriazzza.rib (43 bytes)
    %WinDir%\$hf_mig$\KB2598479\update\aibyqyajq.iaq (43 bytes)
    %WinDir%\$NtUninstallKB974392$\spuninst\qjyzbzbyq.qjb (43 bytes)
    %WinDir%\$NtUninstallKB2618451$\spuninst\izarrrzii.irr (43 bytes)
    %Program Files%\Outlook Express\yjzbyjaya.yaryajq.iaq (43 bytes)
    %WinDir%\$NtUninstallKB2598479$\spuninst\aibyqyajq.iaq (43 bytes)
    %WinDir%\$hf_mig$\KB975713\update\izarrrzii.irr (43 bytes)
    %WinDir%\$hf_mig$\KB968389\jjrrzqyja.aar (43 bytes)
    %WinDir%\$hf_mig$\KB960859\update\aibyqyajq.iaq (43 bytes)
    %Program Files%\Outlook Express\aibyqyajq.iaqyajq.iaq (43 bytes)
    %WinDir%\$hf_mig$\KB2744842-IE8\yjzbyjaya.yar (43 bytes)
    %WinDir%\$hf_mig$\KB950974\abriazzza.rib (43 bytes)
    %WinDir%\$NtUninstallKB2676562$\abriazzza.rib (43 bytes)
    %WinDir%\$NtUninstallKB981322$\spuninst\qyrabrrar.arq (43 bytes)
    %WinDir%\SoftwareDistribution\Download\5721b309e042b0a08775c2542421fa18\update\aibyqyajq.iaq (43 bytes)
    %WinDir%\pchealth\helpctr\binaries\yqabijraz.yiy (43 bytes)
    %WinDir%\$NtUninstallKB978542$\spuninst\yjzbyjaya.yar (43 bytes)
    %WinDir%\SoftwareDistribution\Download\3b8bc9bbfdb19e4227d5a553f3206c44\update\abriazzza.rib (43 bytes)
    %WinDir%\SoftwareDistribution\Download\ff0686f2f699fa07ed5ad0848fa3055b\jjrrzqyja.aar (43 bytes)
    %WinDir%\$hf_mig$\KB2744842-IE8\SP3QFE\qjyzbzbyq.qjb (43 bytes)
    %WinDir%\$NtUninstallKB973815$\spuninst\yqabijraz.yiy (43 bytes)
    %WinDir%\$hf_mig$\KB2544521\update\qyrabrrar.arq (43 bytes)
    %WinDir%\$hf_mig$\KB2646524\update\qyrabrrar.arq.yiy (43 bytes)
    %WinDir%\$NtUninstallKB951978$\qjyzbzbyq.qjbbrrar.arq (43 bytes)
    %WinDir%\$hf_mig$\KB2691442\update\qyrabrrar.arq (43 bytes)
    %WinDir%\$hf_mig$\KB2749655\update\aibyqyajq.iaq.rib (43 bytes)
    %WinDir%\$hf_mig$\KB2712808\update\yqabijraz.yiy (43 bytes)
    %WinDir%\$NtUninstallKB959426$\spuninst\qyrabrrar.arq (43 bytes)
    %WinDir%\SoftwareDistribution\Download\c86138b508e29791909bf87cca82fe28\yjzbyjaya.yar (43 bytes)
    %WinDir%\$hf_mig$\KB952287\update\yqabijraz.yiyb.rib (43 bytes)
    %WinDir%\$hf_mig$\KB2770660\update\aibyqyajq.iaq.rib (43 bytes)
    %WinDir%\$hf_mig$\KB923561\aibyqyajq.iaq (43 bytes)
    %WinDir%\$hf_mig$\KB2535512\aibyqyajq.iaq (43 bytes)
    %WinDir%\$NtUninstallKB952287$\spuninst\izarrrzii.irr (43 bytes)
    %WinDir%\$hf_mig$\KB2603381\update\qjyzbzbyq.qjb.irr (43 bytes)
    %WinDir%\$NtUninstallKB981997$\spuninst\qjyzbzbyq.qjb (43 bytes)
    %Documents and Settings%\%current user%\Local Settings\Application Data\Adobe\Reader 9.3\Setup Files\Reader9\qjyzbzbyq.qjb (43 bytes)
    %WinDir%\$hf_mig$\KB979309\qjyzbzbyq.qjb (43 bytes)
    %WinDir%\$hf_mig$\KB972270\jjrrzqyja.aar (43 bytes)
    %WinDir%\$hf_mig$\KB979482\abriazzza.rib (43 bytes)
    %Program Files%\Outlook Express\qjyzbzbyq.qjbyajq.iaq (43 bytes)
    %WinDir%\$hf_mig$\KB2585542\qyrabrrar.arq (43 bytes)
    %WinDir%\$hf_mig$\KB2443105\yqabijraz.yiy (43 bytes)
    %WinDir%\$hf_mig$\KB956572\jjrrzqyja.aar (43 bytes)
    %WinDir%\$hf_mig$\KB2506212\update\jjrrzqyja.aar (43 bytes)
    %WinDir%\$NtUninstallKB2603381$\spuninst\jjrrzqyja.aar (43 bytes)
    %WinDir%\$hf_mig$\KB2467659\update\izarrrzii.irr (43 bytes)
    %WinDir%\$NtUninstallKB978338$\spuninst\qjyzbzbyq.qjb (43 bytes)
    %WinDir%\$NtUninstallKB2443105$\spuninst\jjrrzqyja.aar (43 bytes)
    C:\totalcmd\yqabijraz.yiy (43 bytes)
    %Documents and Settings%\%current user%\Local Settings\Temp\bajybr.aaaa.bri (43 bytes)
    %WinDir%\$hf_mig$\KB2393802\abriazzza.rib (43 bytes)
    %WinDir%\$hf_mig$\KB981997\update\qyrabrrar.arq (43 bytes)
    %WinDir%\$hf_mig$\KB2423089\SP3QFE\izarrrzii.irr (43 bytes)
    %WinDir%\$hf_mig$\KB960803\qyrabrrar.arq (43 bytes)
    %WinDir%\$hf_mig$\KB960859\SP3QFE\abriazzza.rib (43 bytes)
    %WinDir%\$hf_mig$\KB2620712\qjyzbzbyq.qjb (43 bytes)
    %WinDir%\$NtUninstallKB2485663$\spuninst\izarrrzii.irr (43 bytes)
    %WinDir%\SoftwareDistribution\Download\c86138b508e29791909bf87cca82fe28\update\abriazzza.rib (43 bytes)
    %WinDir%\$NtUninstallKB979309$\spuninst\jjrrzqyja.aar (43 bytes)
    %WinDir%\$hf_mig$\KB952004\update\yjzbyjaya.yarb.rib (43 bytes)
    %WinDir%\$NtUninstallKB2655992$\spuninst\jjrrzqyja.aar (43 bytes)
    %WinDir%\$hf_mig$\KB2603381\qyrabrrar.arq (43 bytes)
    %WinDir%\$NtUninstallKB2676562$\spuninst\aibyqyajq.iaq (43 bytes)
    %Program Files%\Wireshark\yjzbyjaya.yar (43 bytes)
    %WinDir%\$hf_mig$\KB960859\SP3QFE\yjzbyjaya.yar (43 bytes)
    %WinDir%\$NtUninstallKB946648$\spuninst\jjrrzqyja.aar (43 bytes)
    %WinDir%\$hf_mig$\KB2423089\update\qjyzbzbyq.qjb (43 bytes)
    %WinDir%\$hf_mig$\KB2758857\qyrabrrar.arq (43 bytes)
    %WinDir%\$NtUninstallKB975467$\spuninst\yqabijraz.yiy (43 bytes)
    %Documents and Settings%\All Users\Application Data\Adobe\Reader\9.3\ARM\18298\yqabijraz.yiy (43 bytes)
    %WinDir%\$NtUninstallKB2535512$\spuninst\yqabijraz.yiy (43 bytes)
    %Program Files%\MSN Gaming Zone\Windows\yjzbyjaya.yarb (43 bytes)
    %WinDir%\$hf_mig$\KB2686509\aibyqyajq.iaq (43 bytes)
    %WinDir%\$NtUninstallKB2779562$\qjyzbzbyq.qjb (43 bytes)
    %WinDir%\$hf_mig$\KB981997\izarrrzii.irr (43 bytes)
    %WinDir%\$hf_mig$\KB946648\izarrrzii.irr (43 bytes)
    %WinDir%\Installer\$PatchCache$\Managed\68AB67CA7DA73301B7449A0300000010\9.3.0\izarrrzii.irr (43 bytes)
    %Program Files%\Adobe\Reader 9.0\Reader\aibyqyajq.iaq (43 bytes)
    %WinDir%\$NtUninstallKB951978$\spuninst\yjzbyjaya.yar (43 bytes)
    %WinDir%\$hf_mig$\KB982381-IE8\SP3QFE\abriazzza.rib (43 bytes)
    %Program Files%\Wireshark\qjyzbzbyq.qjb (43 bytes)
    %WinDir%\$hf_mig$\KB2758857\update\qjyzbzbyq.qjb.rib (43 bytes)
    %Program Files%\Windows Media Player\izarrrzii.irr (43 bytes)
    %WinDir%\$hf_mig$\KB946648\update\qyrabrrar.arqb.rib (43 bytes)
    %WinDir%\$hf_mig$\KB956572\SP3QFE\qjyzbzbyq.qjb (43 bytes)
    %WinDir%\$hf_mig$\KB2393802\update\yqabijraz.yiy (43 bytes)
    %Documents and Settings%\%current user%\Local Settings\Application Data\Adobe\Reader 9.3\Setup Files\yjzbyjaya.yarzbyq.qjb (43 bytes)
    %WinDir%\$hf_mig$\KB2691442\izarrrzii.irr (43 bytes)
    %WinDir%\$hf_mig$\KB2744842-IE8\update\abriazzza.rib (43 bytes)
    %WinDir%\$NtUninstallKB2478960$\spuninst\qjyzbzbyq.qjb (43 bytes)
    %WinDir%\SoftwareDistribution\Download\85ef43cf285b550a459dd3afbad2f0b8\yjzbyjaya.yar (43 bytes)
    %Program Files%\Windows Media Player\jjrrzqyja.aariaq (43 bytes)

  4. Delete the following value(s) in the autorun key (How to Work with System Registry):

    [HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]
    "x32x" = "%WinDir%\xwrm.exe"

*Manual removal may cause unexpected system behaviour and should be performed at your own risk.