profilepath+application data hebarbcashmpegmemoblah.exeprofilepath+application data hebarbcashlxbzvkvm.exeprofilepath+application data hebarbcashantethirdproxyplay.exeprofilepath+application datasupport deleteoltfunk.exeprofilepath+application dataikeeggsloudmpegvga thunk.exeprofilepath+application dataikeeggsloudmpegdelete aim.exexhuwhqkf.exeupayb_unk.exestop trust funk.exestae.exestad.exesta54.exesta53.exesta46.exesta11.exesta10.exeprofilepath+application data hebarbcash kwmpzmx.exeprofilepath+application data hebarbcash itleteam.exeremote dash.exepilereadme.exenew way comp.exemeow default bat debug.exejjqcgeqc.exeheart bags.exedebug funk.exe55ceae.exe49fe6a.exe390c0.exe266c09f6.exe118535.exe100635.exe
HKEY_CLASSES_ROOTclsid{86067727-f592-a113-3317-a8b9c15a1827} HKEY_CLASSES_ROOTclsid{86067727-f592-a113-3317-a8b9c15a1827}inprocserver32 HKEY_CURRENT_USERsoftwareitsmorepeakfile meowamenHKEY_CURRENT_USERsoftwaremicrosoftwindowscurrentversionheart mags great HKEY_CURRENT_USERsoftwaremicrosoftwindowscurrentversionun erroraboutHKEY_CURRENT_USERsoftwaremicrosoftwindowscurrentversionuninstallamengreatclose HKEY_LOCAL_MACHINEsoftwaremicrosoftwindowscurrentversionun loud mpeg sign mapi