from the web site: 'Have you noticed that your computer runs a bit slow when you run many applications at the same time? Have applications crashed or, even worse, has your computer frozen such that the only alternative left for you is to reboot your machine, leaving you with unsaved work? If so, then you're running short on memory resources.By downloading Memory Watcher, you can now monitor your computer's memory usage. If you find that you're running low on memory resources, Memory Watcher will make you aware of this by displaying a meter that tells you how much memory resources are being used. With Memory Watcher, you can now avoid running low on memory and having your computer crash before it's too late.' -- http://www.memorywatcher.com
Backdoor.VB.oq
Windowssystem32pbbf5.exeWindowssystem32sdelh.exeWindowssystem32vchsyjo.exeWindowssystem32wprx.exeWindowssystem32wyrgmw.exeWindowssystem32xtgcu7.exeWindowssystem32zvbyl.exeWindows empmemorywatcher_b.exeDocuments and Settingslocal settings empmemorywatcher_b.exeProgram Filesmemorywatcher.exeProgram Filesmemorywatchermemorywatcher.exeProgram Filesmemorywatcheruninst.exeProgram Filesmemorywatcherwowex32.exeWindowssystem32jqvgne.exeWindowssystem32mcl7.exeWindowssystem32 cisp.exeWindowssystem32pnkdb03.exeWindowssystem32qbk7x.exe
HKEY_LOCAL_MACHINEsoftware2qcn@364d3eekk3yrarps2zt8rwdHKEY_LOCAL_MACHINEsoftware2qcn@364d3eekk4#yqtfx5pxdzthHKEY_LOCAL_MACHINEsoftware2qcn@364d3eekk47gp8ys4shn7x8HKEY_LOCAL_MACHINEsoftware2qcn@364d3eekk4a692ay5nrf@3aHKEY_LOCAL_MACHINEsoftware2qcn@364d3eekk4aweywx3kr4jelHKEY_LOCAL_MACHINEsoftware2qcn@364d3eekk4b#abzb3lxzlexHKEY_LOCAL_MACHINEsoftware2qcn@364d3eekk4gmpqkj5la227aHKEY_LOCAL_MACHINEsoftware2qcn@364d3eekk4hkmkb74y4ka78HKEY_LOCAL_MACHINEsoftware2qcn@364d3eekk522fqqr2akctsmHKEY_LOCAL_MACHINEsoftware2qcn@364d3eekk56t2ewf5lccem6HKEY_LOCAL_MACHINEsoftware2qcn@364d3eekk5cp9ql238zgwnfHKEY_LOCAL_MACHINEsoftware2qcn@364d3eekk5csjp@x23qlbmaHKEY_LOCAL_MACHINEsoftware2qcn@364d3eekk5p92l533d5#zq@HKEY_LOCAL_MACHINEsoftware2qcn@364d3eekk5prkgek5k6l8xeHKEY_LOCAL_MACHINEsoftware2qcn@364d3eekk5rr6pl73h594cxHKEY_LOCAL_MACHINEsoftware2qcn@364d3eekk5w48w7a5y87h34HKEY_LOCAL_MACHINEsoftware2qcn@364d3eekk5yzq#tp4wn82hpHKEY_LOCAL_MACHINEsoftware46cq6434r8hj773s63s7t5aha@b4HKEY_LOCAL_MACHINEsoftware46cq6434r8hj774g4rh6f5#6l9chHKEY_LOCAL_MACHINEsoftwarememorywatcherHKEY_LOCAL_MACHINEsoftwarememorywatcherinstall_dirHKEY_LOCAL_MACHINEsoftwaremicrosoftwindowscurrentversionun2fndpqy4pt3bdmHKEY_LOCAL_MACHINEsoftwaremicrosoftwindowscurrentversionun4g9tkjy5b9c7p9HKEY_LOCAL_MACHINEsoftwaremicrosoftwindowscurrentversionuninstallmemorywatcherHKEY_LOCAL_MACHINEsoftwaremicrosoftwindowscurrentversionuninstallmemorywatcherdisplaynameHKEY_LOCAL_MACHINEsoftware2qcn@364d3eekk26ayhse3@8zpx7HKEY_LOCAL_MACHINEsoftware2qcn@364d3eekk2dh3bz554zbkryHKEY_LOCAL_MACHINEsoftwaremicrosoftwindowscurrentversionuninstallmemorywatcheruninstallstringHKEY_LOCAL_MACHINEsoftware2qcn@364d3eekk2#9s2kp4ztk7b@HKEY_LOCAL_MACHINEsoftware2qcn@364d3eekk2#myg@j2k5x@khHKEY_LOCAL_MACHINEsoftware2qcn@364d3eekk2hhypx@3tn4pxcHKEY_LOCAL_MACHINEsoftware2qcn@364d3eekk2kad2lz3h23#maHKEY_LOCAL_MACHINEsoftware2qcn@364d3eekk2ljpns64g5gclqHKEY_LOCAL_MACHINEsoftware2qcn@364d3eekk2pkwz@j3fmzmrhHKEY_LOCAL_MACHINEsoftware2qcn@364d3eekk2tnw49j45s2ltlHKEY_LOCAL_MACHINEsoftware2qcn@364d3eekk2w62w2f5kb2@cyHKEY_LOCAL_MACHINEsoftware2qcn@364d3eekk2xr4f6w2w9jjggHKEY_LOCAL_MACHINEsoftware2qcn@364d3eekk2zd2bm23y3xhstHKEY_LOCAL_MACHINEsoftware2qcn@364d3eekk33lel3q3xzawbsHKEY_LOCAL_MACHINEsoftware2qcn@364d3eekk35sjwd74#zbj36HKEY_LOCAL_MACHINEsoftware2qcn@364d3eekk3aczez@23gtazqHKEY_LOCAL_MACHINEsoftware2qcn@364d3eekk3gmdsrs2ng449tHKEY_LOCAL_MACHINEsoftware2qcn@364d3eekk3lq#pte4s5kqewHKEY_LOCAL_MACHINEsoftware2qcn@364d3eekk3p@ypjy3ckbtyzHKEY_LOCAL_MACHINEsoftware2qcn@364d3eekk3pw#hs@2n34ja9