Trojan.DownLoader10.16910

Техническая информация

Для обеспечения автозапуска и распространения:

Модифицирует следующие ключи реестра:

[<HKCU>\Software\Microsoft\Windows\CurrentVersion\Run] 'MicroProCon' = '%APPDATA%\MicroLab\MyEngin\Common\MicroProCon.exe -HeOZfbmD'
[<HKLM>\SOFTWARE\Microsoft\Windows\CurrentVersion\Run] 'MicroProProc' = '%APPDATA%\MicroLab\MyEngin\Common\MicroProProc.exe -HeOZfbmD'
[<HKCU>\Software\Microsoft\Windows\CurrentVersion\Run] 'MicroProCon' = '%APPDATA%\MicroLab\MyEngin\Common\MicroProCon.exe -TRWHOVmN'
[<HKLM>\SOFTWARE\Microsoft\Windows\CurrentVersion\Run] 'MicroProProc' = '%APPDATA%\MicroLab\MyEngin\Common\MicroProProc.exe -EjstrwTa'
[<HKCU>\Software\Microsoft\Windows\CurrentVersion\Run] 'MicroProCon' = '%APPDATA%\MicroLab\MyEngin\Common\MicroProCon.exe -TYliRe'
[<HKLM>\SOFTWARE\Microsoft\Windows\CurrentVersion\Run] 'MicroProProc' = '%APPDATA%\MicroLab\MyEngin\Common\MicroProProc.exe -TYliRe'
[<HKLM>\SOFTWARE\Microsoft\Windows\CurrentVersion\Run] 'MicroProProc' = '%APPDATA%\MicroLab\MyEngin\Common\MicroProProc.exe -TRWHOVmN'
[<HKLM>\SOFTWARE\Microsoft\Windows\CurrentVersion\Run] 'MicroProProc' = '%APPDATA%\MicroLab\MyEngin\Common\MicroProProc.exe -djfrIJeg'
[<HKCU>\Software\Microsoft\Windows\CurrentVersion\Run] 'MicroProCon' = '%APPDATA%\MicroLab\MyEngin\Common\MicroProCon.exe -unuYzlB'
[<HKLM>\SOFTWARE\Microsoft\Windows\CurrentVersion\Run] 'MicroProProc' = '%APPDATA%\MicroLab\MyEngin\Common\MicroProProc.exe -unuYzlB'
[<HKCU>\Software\Microsoft\Windows\CurrentVersion\Run] 'MicroProCon' = '%APPDATA%\MicroLab\MyEngin\Common\MicroProCon.exe -zihVVw'
[<HKLM>\SOFTWARE\Microsoft\Windows\CurrentVersion\Run] 'MicroProProc' = '%APPDATA%\MicroLab\MyEngin\Common\MicroProProc.exe -zihVVw'
[<HKCU>\Software\Microsoft\Windows\CurrentVersion\Run] 'MicroProCon' = '%APPDATA%\MicroLab\MyEngin\Common\MicroProCon.exe -djfrIJeg'
[<HKLM>\SOFTWARE\Microsoft\Windows\CurrentVersion\Run] 'MicroProProc' = '%APPDATA%\MicroLab\MyEngin\Common\MicroProProc.exe -vQGxLVE'
[<HKCU>\Software\Microsoft\Windows\CurrentVersion\Run] 'MicroProCon' = '%APPDATA%\MicroLab\MyEngin\Common\MicroProCon.exe -spMiG'
[<HKLM>\SOFTWARE\Microsoft\Windows\CurrentVersion\Run] 'MicroProProc' = '%APPDATA%\MicroLab\MyEngin\Common\MicroProProc.exe -spMiG'
[<HKCU>\Software\Microsoft\Windows\CurrentVersion\Run] 'MicroProCon' = '%APPDATA%\MicroLab\MyEngin\Common\MicroProCon.exe -qyoTPPOT'
[<HKLM>\SOFTWARE\Microsoft\Windows\CurrentVersion\Run] 'MicroProProc' = '%APPDATA%\MicroLab\MyEngin\Common\MicroProProc.exe -qyoTPPOT'
[<HKCU>\Software\Microsoft\Windows\CurrentVersion\Run] 'MicroProCon' = '%APPDATA%\MicroLab\MyEngin\Common\MicroProCon.exe -vQGxLVE'
[<HKCU>\Software\Microsoft\Windows\CurrentVersion\Run] 'MicroProCon' = '%APPDATA%\MicroLab\MyEngin\Common\MicroProCon.exe -rgMVWU'
[<HKCU>\Software\Microsoft\Windows\CurrentVersion\Run] 'MicroProCon' = '%APPDATA%\MicroLab\MyEngin\Common\MicroProCon.exe -icurOkIB'
[<HKLM>\SOFTWARE\Microsoft\Windows\CurrentVersion\Run] 'MicroProProc' = '%APPDATA%\MicroLab\MyEngin\Common\MicroProProc.exe -icurOkIB'
[<HKCU>\Software\Microsoft\Windows\CurrentVersion\Run] 'MicroProCon' = '%APPDATA%\MicroLab\MyEngin\Common\MicroProCon.exe -EjstrwTa'
[<HKLM>\SOFTWARE\Microsoft\Windows\CurrentVersion\Run] 'MicroProProc' = '%APPDATA%\MicroLab\MyEngin\Common\MicroProProc.exe -rgMVWU'
[<HKCU>\Software\Microsoft\Windows\CurrentVersion\Run] 'MicroProCon' = '%APPDATA%\MicroLab\MyEngin\Common\MicroProCon.exe -fiCfjx'
[<HKLM>\SOFTWARE\Microsoft\Windows\CurrentVersion\Run] 'MicroProProc' = '%APPDATA%\MicroLab\MyEngin\Common\MicroProProc.exe -fiCfjx'
[<HKCU>\Software\Microsoft\Windows\CurrentVersion\Run] 'MicroProCon' = '%APPDATA%\MicroLab\MyEngin\Common\MicroProCon.exe -QXevW'
[<HKLM>\SOFTWARE\Microsoft\Windows\CurrentVersion\Run] 'MicroProProc' = '%APPDATA%\MicroLab\MyEngin\Common\MicroProProc.exe -QXevW'
[<HKCU>\Software\Microsoft\Windows\CurrentVersion\Run] 'MicroProCon' = '%APPDATA%\MicroLab\MyEngin\Common\MicroProCon.exe -SAAnnPX'
[<HKLM>\SOFTWARE\Microsoft\Windows\CurrentVersion\Run] 'MicroProProc' = '%APPDATA%\MicroLab\MyEngin\Common\MicroProProc.exe -vesRRs'
[<HKCU>\Software\Microsoft\Windows\CurrentVersion\Run] 'MicroProCon' = '%APPDATA%\MicroLab\MyEngin\Common\MicroProCon.exe -ekhsJYgh'
[<HKLM>\SOFTWARE\Microsoft\Windows\CurrentVersion\Run] 'MicroProProc' = '%APPDATA%\MicroLab\MyEngin\Common\MicroProProc.exe -ekhsJYgh'
[<HKLM>\SOFTWARE\Microsoft\Windows\CurrentVersion\Run] 'MicroProProc' = '%APPDATA%\MicroLab\MyEngin\Common\MicroProProc.exe -SAAnnPX'
[<HKLM>\SOFTWARE\Microsoft\Windows\CurrentVersion\Run] 'MicroProProc' = '%APPDATA%\MicroLab\MyEngin\Common\MicroProProc.exe -inYRY'
[<HKCU>\Software\Microsoft\Windows\CurrentVersion\Run] 'MicroProCon' = '%APPDATA%\MicroLab\MyEngin\Common\MicroProCon.exe -Wkudd'
[<HKLM>\SOFTWARE\Microsoft\Windows\CurrentVersion\Run] 'MicroProProc' = '%APPDATA%\MicroLab\MyEngin\Common\MicroProProc.exe -Wkudd'
[<HKCU>\Software\Microsoft\Windows\CurrentVersion\Run] 'MicroProCon' = '%APPDATA%\MicroLab\MyEngin\Common\MicroProCon.exe -ieqHI'
[<HKLM>\SOFTWARE\Microsoft\Windows\CurrentVersion\Run] 'MicroProProc' = '%APPDATA%\MicroLab\MyEngin\Common\MicroProProc.exe -ieqHI'
[<HKCU>\Software\Microsoft\Windows\CurrentVersion\Run] 'MicroProCon' = '%APPDATA%\MicroLab\MyEngin\Common\MicroProCon.exe -inYRY'
[<HKLM>\SOFTWARE\Microsoft\Windows\CurrentVersion\Run] 'MicroProProc' = '%APPDATA%\MicroLab\MyEngin\Common\MicroProProc.exe -nzCRmn'
[<HKCU>\Software\Microsoft\Windows\CurrentVersion\Run] 'MicroProCon' = '%APPDATA%\MicroLab\MyEngin\Common\MicroProCon.exe -aTaERR'
[<HKLM>\SOFTWARE\Microsoft\Windows\CurrentVersion\Run] 'MicroProProc' = '%APPDATA%\MicroLab\MyEngin\Common\MicroProProc.exe -aTaERR'
[<HKCU>\Software\Microsoft\Windows\CurrentVersion\Run] 'MicroProCon' = '%APPDATA%\MicroLab\MyEngin\Common\MicroProCon.exe -zmYAWj'
[<HKLM>\SOFTWARE\Microsoft\Windows\CurrentVersion\Run] 'MicroProProc' = '%APPDATA%\MicroLab\MyEngin\Common\MicroProProc.exe -zmYAWj'
[<HKCU>\Software\Microsoft\Windows\CurrentVersion\Run] 'MicroProCon' = '%APPDATA%\MicroLab\MyEngin\Common\MicroProCon.exe -nzCRmn'
[<HKCU>\Software\Microsoft\Windows\CurrentVersion\Run] 'MicroProCon' = '%APPDATA%\MicroLab\MyEngin\Common\MicroProCon.exe -ViVIjFE'
[<HKCU>\Software\Microsoft\Windows\CurrentVersion\Run] 'MicroProCon' = '%APPDATA%\MicroLab\MyEngin\Common\MicroProCon.exe -yFMqD'
[<HKLM>\SOFTWARE\Microsoft\Windows\CurrentVersion\Run] 'MicroProProc' = '%APPDATA%\MicroLab\MyEngin\Common\MicroProProc.exe -yFMqD'
[<HKCU>\Software\Microsoft\Windows\CurrentVersion\Run] 'MicroProCon' = '%APPDATA%\MicroLab\MyEngin\Common\MicroProCon.exe -vesRRs'
[<HKLM>\SOFTWARE\Microsoft\Windows\CurrentVersion\Run] 'MicroProProc' = '%APPDATA%\MicroLab\MyEngin\Common\MicroProProc.exe -ViVIjFE'
[<HKCU>\Software\Microsoft\Windows\CurrentVersion\Run] 'MicroProCon' = '%APPDATA%\MicroLab\MyEngin\Common\MicroProCon.exe -vHYnIw'
[<HKLM>\SOFTWARE\Microsoft\Windows\CurrentVersion\Run] 'MicroProProc' = '%APPDATA%\MicroLab\MyEngin\Common\MicroProProc.exe -vHYnIw'
[<HKCU>\Software\Microsoft\Windows\CurrentVersion\Run] 'MicroProCon' = '%APPDATA%\MicroLab\MyEngin\Common\MicroProCon.exe -RYfJWV'
[<HKLM>\SOFTWARE\Microsoft\Windows\CurrentVersion\Run] 'MicroProProc' = '%APPDATA%\MicroLab\MyEngin\Common\MicroProProc.exe -RYfJWV'
[<HKCU>\Software\Microsoft\Windows\CurrentVersion\Run] 'MicroProCon' = '%APPDATA%\MicroLab\MyEngin\Common\MicroProCon.exe -SgFFh'
[<HKLM>\SOFTWARE\Microsoft\Windows\CurrentVersion\Run] 'MicroProProc' = '%APPDATA%\MicroLab\MyEngin\Common\MicroProProc.exe -ToCpbDZ'
[<HKCU>\Software\Microsoft\Windows\CurrentVersion\Run] 'MicroProCon' = '%APPDATA%\MicroLab\MyEngin\Common\MicroProCon.exe -tpBShCq'
[<HKLM>\SOFTWARE\Microsoft\Windows\CurrentVersion\Run] 'MicroProProc' = '%APPDATA%\MicroLab\MyEngin\Common\MicroProProc.exe -tpBShCq'
[<HKLM>\SOFTWARE\Microsoft\Windows\CurrentVersion\Run] 'MicroProProc' = '%APPDATA%\MicroLab\MyEngin\Common\MicroProProc.exe -SgFFh'
[<HKLM>\SOFTWARE\Microsoft\Windows\CurrentVersion\Run] 'MicroProProc' = '%APPDATA%\MicroLab\MyEngin\Common\MicroProProc.exe -BmtARs'
[<HKCU>\Software\Microsoft\Windows\CurrentVersion\Run] 'MicroProCon' = '%APPDATA%\MicroLab\MyEngin\Common\MicroProCon.exe -lTTGG'
[<HKLM>\SOFTWARE\Microsoft\Windows\CurrentVersion\Run] 'MicroProProc' = '%APPDATA%\MicroLab\MyEngin\Common\MicroProProc.exe -lTTGG'
[<HKCU>\Software\Microsoft\Windows\CurrentVersion\Run] 'MicroProCon' = '%APPDATA%\MicroLab\MyEngin\Common\MicroProCon.exe -PVRduJR'
[<HKLM>\SOFTWARE\Microsoft\Windows\CurrentVersion\Run] 'MicroProProc' = '%APPDATA%\MicroLab\MyEngin\Common\MicroProProc.exe -PVRduJR'
[<HKCU>\Software\Microsoft\Windows\CurrentVersion\Run] 'MicroProCon' = '%APPDATA%\MicroLab\MyEngin\Common\MicroProCon.exe -BmtARs'
[<HKLM>\SOFTWARE\Microsoft\Windows\CurrentVersion\Run] 'MicroProProc' = '%APPDATA%\MicroLab\MyEngin\Common\MicroProProc.exe -uRBMSO'
[<HKCU>\Software\Microsoft\Windows\CurrentVersion\Run] 'MicroProCon' = '%APPDATA%\MicroLab\MyEngin\Common\MicroProCon.exe -pkljoZS'
[<HKLM>\SOFTWARE\Microsoft\Windows\CurrentVersion\Run] 'MicroProProc' = '%APPDATA%\MicroLab\MyEngin\Common\MicroProProc.exe -pkljoZS'
[<HKCU>\Software\Microsoft\Windows\CurrentVersion\Run] 'MicroProCon' = '%APPDATA%\MicroLab\MyEngin\Common\MicroProCon.exe -eULZjSR'
[<HKLM>\SOFTWARE\Microsoft\Windows\CurrentVersion\Run] 'MicroProProc' = '%APPDATA%\MicroLab\MyEngin\Common\MicroProProc.exe -eULZjSR'
[<HKCU>\Software\Microsoft\Windows\CurrentVersion\Run] 'MicroProCon' = '%APPDATA%\MicroLab\MyEngin\Common\MicroProCon.exe -uRBMSO'
[<HKCU>\Software\Microsoft\Windows\CurrentVersion\Run] 'MicroProCon' = '%APPDATA%\MicroLab\MyEngin\Common\MicroProCon.exe -IzNXGGtf'
[<HKCU>\Software\Microsoft\Windows\CurrentVersion\Run] 'MicroProCon' = '%APPDATA%\MicroLab\MyEngin\Common\MicroProCon.exe -CngnSf'
[<HKLM>\SOFTWARE\Microsoft\Windows\CurrentVersion\Run] 'MicroProProc' = '%APPDATA%\MicroLab\MyEngin\Common\MicroProProc.exe -CngnSf'
[<HKCU>\Software\Microsoft\Windows\CurrentVersion\Run] 'MicroProCon' = '%APPDATA%\MicroLab\MyEngin\Common\MicroProCon.exe -ToCpbDZ'
[<HKLM>\SOFTWARE\Microsoft\Windows\CurrentVersion\Run] 'MicroProProc' = '%APPDATA%\MicroLab\MyEngin\Common\MicroProProc.exe -IzNXGGtf'
[<HKCU>\Software\Microsoft\Windows\CurrentVersion\Run] 'MicroProCon' = '%APPDATA%\MicroLab\MyEngin\Common\MicroProCon.exe -oNTPbetO'
[<HKLM>\SOFTWARE\Microsoft\Windows\CurrentVersion\Run] 'MicroProProc' = '%APPDATA%\MicroLab\MyEngin\Common\MicroProProc.exe -oNTPbetO'
[<HKCU>\Software\Microsoft\Windows\CurrentVersion\Run] 'MicroProCon' = '%APPDATA%\MicroLab\MyEngin\Common\MicroProCon.exe -VYsVZn'
[<HKLM>\SOFTWARE\Microsoft\Windows\CurrentVersion\Run] 'MicroProProc' = '%APPDATA%\MicroLab\MyEngin\Common\MicroProProc.exe -VYsVZn'
[<HKCU>\Software\Microsoft\Windows\CurrentVersion\Run] 'MicroProCon' = '%APPDATA%\MicroLab\MyEngin\Common\MicroProCon.exe -tnFpL'
[<HKLM>\SOFTWARE\Microsoft\Windows\CurrentVersion\Run] 'MicroProProc' = '%APPDATA%\MicroLab\MyEngin\Common\MicroProProc.exe -xQNjFeW'
[<HKCU>\Software\Microsoft\Windows\CurrentVersion\Run] 'MicroProCon' = '%APPDATA%\MicroLab\MyEngin\Common\MicroProCon.exe -WBKLJ'
[<HKLM>\SOFTWARE\Microsoft\Windows\CurrentVersion\Run] 'MicroProProc' = '%APPDATA%\MicroLab\MyEngin\Common\MicroProProc.exe -WBKLJ'
[<HKLM>\SOFTWARE\Microsoft\Windows\CurrentVersion\Run] 'MicroProProc' = '%APPDATA%\MicroLab\MyEngin\Common\MicroProProc.exe -tnFpL'
[<HKLM>\SOFTWARE\Microsoft\Windows\CurrentVersion\Run] 'MicroProProc' = '%APPDATA%\MicroLab\MyEngin\Common\MicroProProc.exe -mRPwlFw'
[<HKCU>\Software\Microsoft\Windows\CurrentVersion\Run] 'MicroProCon' = '%APPDATA%\MicroLab\MyEngin\Common\MicroProCon.exe -gVSMebyi'
[<HKLM>\SOFTWARE\Microsoft\Windows\CurrentVersion\Run] 'MicroProProc' = '%APPDATA%\MicroLab\MyEngin\Common\MicroProProc.exe -gVSMebyi'
[<HKCU>\Software\Microsoft\Windows\CurrentVersion\Run] 'MicroProCon' = '%APPDATA%\MicroLab\MyEngin\Common\MicroProCon.exe -nGODj'
[<HKLM>\SOFTWARE\Microsoft\Windows\CurrentVersion\Run] 'MicroProProc' = '%APPDATA%\MicroLab\MyEngin\Common\MicroProProc.exe -nGODj'
[<HKCU>\Software\Microsoft\Windows\CurrentVersion\Run] 'MicroProCon' = '%APPDATA%\MicroLab\MyEngin\Common\MicroProCon.exe -mRPwlFw'
[<HKLM>\SOFTWARE\Microsoft\Windows\CurrentVersion\Run] 'MicroProProc' = '%APPDATA%\MicroLab\MyEngin\Common\MicroProProc.exe -NOMRCvCh'
[<HKCU>\Software\Microsoft\Windows\CurrentVersion\Run] 'MicroProCon' = '%APPDATA%\MicroLab\MyEngin\Common\MicroProCon.exe -FPyylX'
[<HKLM>\SOFTWARE\Microsoft\Windows\CurrentVersion\Run] 'MicroProProc' = '%APPDATA%\MicroLab\MyEngin\Common\MicroProProc.exe -FPyylX'
[<HKCU>\Software\Microsoft\Windows\CurrentVersion\Run] 'MicroProCon' = '%APPDATA%\MicroLab\MyEngin\Common\MicroProCon.exe -Rcieq'
[<HKLM>\SOFTWARE\Microsoft\Windows\CurrentVersion\Run] 'MicroProProc' = '%APPDATA%\MicroLab\MyEngin\Common\MicroProProc.exe -Rcieq'
[<HKCU>\Software\Microsoft\Windows\CurrentVersion\Run] 'MicroProCon' = '%APPDATA%\MicroLab\MyEngin\Common\MicroProCon.exe -NOMRCvCh'
[<HKCU>\Software\Microsoft\Windows\CurrentVersion\Run] 'MicroProCon' = '%APPDATA%\MicroLab\MyEngin\Common\MicroProCon.exe -xVbXj'
[<HKCU>\Software\Microsoft\Windows\CurrentVersion\Run] 'MicroProCon' = '%APPDATA%\MicroLab\MyEngin\Common\MicroProCon.exe -zcguE'
[<HKLM>\SOFTWARE\Microsoft\Windows\CurrentVersion\Run] 'MicroProProc' = '%APPDATA%\MicroLab\MyEngin\Common\MicroProProc.exe -zcguE'
[<HKCU>\Software\Microsoft\Windows\CurrentVersion\Run] 'MicroProCon' = '%APPDATA%\MicroLab\MyEngin\Common\MicroProCon.exe -xQNjFeW'
[<HKLM>\SOFTWARE\Microsoft\Windows\CurrentVersion\Run] 'MicroProProc' = '%APPDATA%\MicroLab\MyEngin\Common\MicroProProc.exe -xVbXj'
[<HKCU>\Software\Microsoft\Windows\CurrentVersion\Run] 'MicroProCon' = '%APPDATA%\MicroLab\MyEngin\Common\MicroProCon.exe -qqpuf'
[<HKLM>\SOFTWARE\Microsoft\Windows\CurrentVersion\Run] 'MicroProProc' = '%APPDATA%\MicroLab\MyEngin\Common\MicroProProc.exe -qqpuf'
[<HKCU>\Software\Microsoft\Windows\CurrentVersion\Run] 'MicroProCon' = '%APPDATA%\MicroLab\MyEngin\Common\MicroProCon.exe -uzkdkP'
[<HKLM>\SOFTWARE\Microsoft\Windows\CurrentVersion\Run] 'MicroProProc' = '%APPDATA%\MicroLab\MyEngin\Common\MicroProProc.exe -uzkdkP'
[<HKCU>\Software\Microsoft\Windows\CurrentVersion\Run] 'MicroProCon' = '%APPDATA%\MicroLab\MyEngin\Common\MicroProCon.exe -VfONBnO'
[<HKLM>\SOFTWARE\Microsoft\Windows\CurrentVersion\Run] 'MicroProProc' = '%APPDATA%\MicroLab\MyEngin\Common\MicroProProc.exe -NMzAb'
[<HKCU>\Software\Microsoft\Windows\CurrentVersion\Run] 'MicroProCon' = '%APPDATA%\MicroLab\MyEngin\Common\MicroProCon.exe -DJFRij'
[<HKLM>\SOFTWARE\Microsoft\Windows\CurrentVersion\Run] 'MicroProProc' = '%APPDATA%\MicroLab\MyEngin\Common\MicroProProc.exe -DJFRij'
[<HKLM>\SOFTWARE\Microsoft\Windows\CurrentVersion\Run] 'MicroProProc' = '%APPDATA%\MicroLab\MyEngin\Common\MicroProProc.exe -VfONBnO'
[<HKLM>\SOFTWARE\Microsoft\Windows\CurrentVersion\Run] 'MicroProProc' = '%APPDATA%\MicroLab\MyEngin\Common\MicroProProc.exe -VaLELqDC'
[<HKCU>\Software\Microsoft\Windows\CurrentVersion\Run] 'MicroProCon' = '%APPDATA%\MicroLab\MyEngin\Common\MicroProCon.exe -LYMyZv'
[<HKLM>\SOFTWARE\Microsoft\Windows\CurrentVersion\Run] 'MicroProProc' = '%APPDATA%\MicroLab\MyEngin\Common\MicroProProc.exe -LYMyZv'
[<HKCU>\Software\Microsoft\Windows\CurrentVersion\Run] 'MicroProCon' = '%APPDATA%\MicroLab\MyEngin\Common\MicroProCon.exe -WcYknC'
[<HKLM>\SOFTWARE\Microsoft\Windows\CurrentVersion\Run] 'MicroProProc' = '%APPDATA%\MicroLab\MyEngin\Common\MicroProProc.exe -WcYknC'
[<HKCU>\Software\Microsoft\Windows\CurrentVersion\Run] 'MicroProCon' = '%APPDATA%\MicroLab\MyEngin\Common\MicroProCon.exe -VaLELqDC'
[<HKLM>\SOFTWARE\Microsoft\Windows\CurrentVersion\Run] 'MicroProProc' = '%APPDATA%\MicroLab\MyEngin\Common\MicroProProc.exe -GuDbW'
[<HKCU>\Software\Microsoft\Windows\CurrentVersion\Run] 'MicroProCon' = '%APPDATA%\MicroLab\MyEngin\Common\MicroProCon.exe -lyyORUM'
[<HKLM>\SOFTWARE\Microsoft\Windows\CurrentVersion\Run] 'MicroProProc' = '%APPDATA%\MicroLab\MyEngin\Common\MicroProProc.exe -lyyORUM'
[<HKCU>\Software\Microsoft\Windows\CurrentVersion\Run] 'MicroProCon' = '%APPDATA%\MicroLab\MyEngin\Common\MicroProCon.exe -KIkSjV'
[<HKLM>\SOFTWARE\Microsoft\Windows\CurrentVersion\Run] 'MicroProProc' = '%APPDATA%\MicroLab\MyEngin\Common\MicroProProc.exe -KIkSjV'
[<HKCU>\Software\Microsoft\Windows\CurrentVersion\Run] 'MicroProCon' = '%APPDATA%\MicroLab\MyEngin\Common\MicroProCon.exe -GuDbW'
[<HKCU>\Software\Microsoft\Windows\CurrentVersion\Run] 'MicroProCon' = '%APPDATA%\MicroLab\MyEngin\Common\MicroProCon.exe -NViKe'
[<HKCU>\Software\Microsoft\Windows\CurrentVersion\Run] 'MicroProCon' = '%APPDATA%\MicroLab\MyEngin\Common\MicroProCon.exe -muKlk'
[<HKLM>\SOFTWARE\Microsoft\Windows\CurrentVersion\Run] 'MicroProProc' = '%APPDATA%\MicroLab\MyEngin\Common\MicroProProc.exe -muKlk'
[<HKCU>\Software\Microsoft\Windows\CurrentVersion\Run] 'MicroProCon' = '%APPDATA%\MicroLab\MyEngin\Common\MicroProCon.exe -NMzAb'
[<HKLM>\SOFTWARE\Microsoft\Windows\CurrentVersion\Run] 'MicroProProc' = '%APPDATA%\MicroLab\MyEngin\Common\MicroProProc.exe -NViKe'
[<HKCU>\Software\Microsoft\Windows\CurrentVersion\Run] 'MicroProCon' = '%APPDATA%\MicroLab\MyEngin\Common\MicroProCon.exe -CRYaj'
[<HKLM>\SOFTWARE\Microsoft\Windows\CurrentVersion\Run] 'MicroProProc' = '%APPDATA%\MicroLab\MyEngin\Common\MicroProProc.exe -CRYaj'
[<HKCU>\Software\Microsoft\Windows\CurrentVersion\Run] 'MicroProCon' = '%APPDATA%\MicroLab\MyEngin\Common\MicroProCon.exe -jaoyhh'
[<HKLM>\SOFTWARE\Microsoft\Windows\CurrentVersion\Run] 'MicroProProc' = '%APPDATA%\MicroLab\MyEngin\Common\MicroProProc.exe -jaoyhh'
[<HKCU>\Software\Microsoft\Windows\CurrentVersion\Run] 'MicroProCon' = '%APPDATA%\MicroLab\MyEngin\Common\MicroProCon.exe -QnJiokvz'
[<HKLM>\SOFTWARE\Microsoft\Windows\CurrentVersion\Run] 'MicroProProc' = '%APPDATA%\MicroLab\MyEngin\Common\MicroProProc.exe -epvrCT'
[<HKCU>\Software\Microsoft\Windows\CurrentVersion\Run] 'MicroProCon' = '%APPDATA%\MicroLab\MyEngin\Common\MicroProCon.exe -echSL'
[<HKLM>\SOFTWARE\Microsoft\Windows\CurrentVersion\Run] 'MicroProProc' = '%APPDATA%\MicroLab\MyEngin\Common\MicroProProc.exe -echSL'
[<HKLM>\SOFTWARE\Microsoft\Windows\CurrentVersion\Run] 'MicroProProc' = '%APPDATA%\MicroLab\MyEngin\Common\MicroProProc.exe -QnJiokvz'
[<HKLM>\SOFTWARE\Microsoft\Windows\CurrentVersion\Run] 'MicroProProc' = '%APPDATA%\MicroLab\MyEngin\Common\MicroProProc.exe -AOYtGu'
[<HKCU>\Software\Microsoft\Windows\CurrentVersion\Run] 'MicroProCon' = '%APPDATA%\MicroLab\MyEngin\Common\MicroProCon.exe -xSrjf'
[<HKLM>\SOFTWARE\Microsoft\Windows\CurrentVersion\Run] 'MicroProProc' = '%APPDATA%\MicroLab\MyEngin\Common\MicroProProc.exe -xSrjf'
[<HKCU>\Software\Microsoft\Windows\CurrentVersion\Run] 'MicroProCon' = '%APPDATA%\MicroLab\MyEngin\Common\MicroProCon.exe -sqvgZh'
[<HKLM>\SOFTWARE\Microsoft\Windows\CurrentVersion\Run] 'MicroProProc' = '%APPDATA%\MicroLab\MyEngin\Common\MicroProProc.exe -sqvgZh'
[<HKCU>\Software\Microsoft\Windows\CurrentVersion\Run] 'MicroProCon' = '%APPDATA%\MicroLab\MyEngin\Common\MicroProCon.exe -AOYtGu'
[<HKLM>\SOFTWARE\Microsoft\Windows\CurrentVersion\Run] 'MicroProProc' = '%APPDATA%\MicroLab\MyEngin\Common\MicroProProc.exe -oLSZD'
[<HKCU>\Software\Microsoft\Windows\CurrentVersion\Run] 'MicroProCon' = '%APPDATA%\MicroLab\MyEngin\Common\MicroProCon.exe -GDlzYY'
[<HKLM>\SOFTWARE\Microsoft\Windows\CurrentVersion\Run] 'MicroProProc' = '%APPDATA%\MicroLab\MyEngin\Common\MicroProProc.exe -GDlzYY'
[<HKCU>\Software\Microsoft\Windows\CurrentVersion\Run] 'MicroProCon' = '%APPDATA%\MicroLab\MyEngin\Common\MicroProCon.exe -mitKZv'
[<HKLM>\SOFTWARE\Microsoft\Windows\CurrentVersion\Run] 'MicroProProc' = '%APPDATA%\MicroLab\MyEngin\Common\MicroProProc.exe -mitKZv'
[<HKCU>\Software\Microsoft\Windows\CurrentVersion\Run] 'MicroProCon' = '%APPDATA%\MicroLab\MyEngin\Common\MicroProCon.exe -oLSZD'
[<HKCU>\Software\Microsoft\Windows\CurrentVersion\Run] 'MicroProCon' = '%APPDATA%\MicroLab\MyEngin\Common\MicroProCon.exe -EPVRduJQ'
[<HKCU>\Software\Microsoft\Windows\CurrentVersion\Run] 'MicroProCon' = '%APPDATA%\MicroLab\MyEngin\Common\MicroProCon.exe -FPyyll'
[<HKLM>\SOFTWARE\Microsoft\Windows\CurrentVersion\Run] 'MicroProProc' = '%APPDATA%\MicroLab\MyEngin\Common\MicroProProc.exe -FPyyll'
[<HKCU>\Software\Microsoft\Windows\CurrentVersion\Run] 'MicroProCon' = '%APPDATA%\MicroLab\MyEngin\Common\MicroProCon.exe -epvrCT'
[<HKLM>\SOFTWARE\Microsoft\Windows\CurrentVersion\Run] 'MicroProProc' = '%APPDATA%\MicroLab\MyEngin\Common\MicroProProc.exe -EPVRduJQ'
[<HKCU>\Software\Microsoft\Windows\CurrentVersion\Run] 'MicroProCon' = '%APPDATA%\MicroLab\MyEngin\Common\MicroProCon.exe -gRYfw'
[<HKLM>\SOFTWARE\Microsoft\Windows\CurrentVersion\Run] 'MicroProProc' = '%APPDATA%\MicroLab\MyEngin\Common\MicroProProc.exe -gRYfw'
[<HKCU>\Software\Microsoft\Windows\CurrentVersion\Run] 'MicroProCon' = '%APPDATA%\MicroLab\MyEngin\Common\MicroProCon.exe -WJJktFiB'
[<HKLM>\SOFTWARE\Microsoft\Windows\CurrentVersion\Run] 'MicroProProc' = '%APPDATA%\MicroLab\MyEngin\Common\MicroProProc.exe -WJJktFiB'
[<HKCU>\Software\Microsoft\Windows\CurrentVersion\Run] 'MicroProCon' = '%APPDATA%\MicroLab\MyEngin\Common\MicroProCon.exe -rsOPZ'
[<HKLM>\SOFTWARE\Microsoft\Windows\CurrentVersion\Run] 'MicroProProc' = '%APPDATA%\MicroLab\MyEngin\Common\MicroProProc.exe -MSOZqFN'
[<HKCU>\Software\Microsoft\Windows\CurrentVersion\Run] 'MicroProCon' = '%APPDATA%\MicroLab\MyEngin\Common\MicroProCon.exe -ZKRYpQPf'
[<HKLM>\SOFTWARE\Microsoft\Windows\CurrentVersion\Run] 'MicroProProc' = '%APPDATA%\MicroLab\MyEngin\Common\MicroProProc.exe -ZKRYpQPf'
[<HKLM>\SOFTWARE\Microsoft\Windows\CurrentVersion\Run] 'MicroProProc' = '%APPDATA%\MicroLab\MyEngin\Common\MicroProProc.exe -rsOPZ'
[<HKLM>\SOFTWARE\Microsoft\Windows\CurrentVersion\Run] 'MicroProProc' = '%APPDATA%\MicroLab\MyEngin\Common\MicroProProc.exe -pbDZlAh'
[<HKCU>\Software\Microsoft\Windows\CurrentVersion\Run] 'MicroProCon' = '%APPDATA%\MicroLab\MyEngin\Common\MicroProCon.exe -lAWXg'
[<HKLM>\SOFTWARE\Microsoft\Windows\CurrentVersion\Run] 'MicroProProc' = '%APPDATA%\MicroLab\MyEngin\Common\MicroProProc.exe -lAWXg'
[<HKCU>\Software\Microsoft\Windows\CurrentVersion\Run] 'MicroProCon' = '%APPDATA%\MicroLab\MyEngin\Common\MicroProCon.exe -BInOzPT'
[<HKLM>\SOFTWARE\Microsoft\Windows\CurrentVersion\Run] 'MicroProProc' = '%APPDATA%\MicroLab\MyEngin\Common\MicroProProc.exe -BInOzPT'
[<HKCU>\Software\Microsoft\Windows\CurrentVersion\Run] 'MicroProCon' = '%APPDATA%\MicroLab\MyEngin\Common\MicroProCon.exe -pbDZlAh'
[<HKLM>\SOFTWARE\Microsoft\Windows\CurrentVersion\Run] 'MicroProProc' = '%APPDATA%\MicroLab\MyEngin\Common\MicroProProc.exe -pVeediT'
[<HKCU>\Software\Microsoft\Windows\CurrentVersion\Run] 'MicroProCon' = '%APPDATA%\MicroLab\MyEngin\Common\MicroProCon.exe -YBFTezM'
[<HKLM>\SOFTWARE\Microsoft\Windows\CurrentVersion\Run] 'MicroProProc' = '%APPDATA%\MicroLab\MyEngin\Common\MicroProProc.exe -YBFTezM'
[<HKCU>\Software\Microsoft\Windows\CurrentVersion\Run] 'MicroProCon' = '%APPDATA%\MicroLab\MyEngin\Common\MicroProCon.exe -eBXvB'
[<HKLM>\SOFTWARE\Microsoft\Windows\CurrentVersion\Run] 'MicroProProc' = '%APPDATA%\MicroLab\MyEngin\Common\MicroProProc.exe -eBXvB'
[<HKCU>\Software\Microsoft\Windows\CurrentVersion\Run] 'MicroProCon' = '%APPDATA%\MicroLab\MyEngin\Common\MicroProCon.exe -pVeediT'
[<HKCU>\Software\Microsoft\Windows\CurrentVersion\Run] 'MicroProCon' = '%APPDATA%\MicroLab\MyEngin\Common\MicroProCon.exe -KhDcUQbs'
[<HKCU>\Software\Microsoft\Windows\CurrentVersion\Run] 'MicroProCon' = '%APPDATA%\MicroLab\MyEngin\Common\MicroProCon.exe -tbpOOq'
[<HKLM>\SOFTWARE\Microsoft\Windows\CurrentVersion\Run] 'MicroProProc' = '%APPDATA%\MicroLab\MyEngin\Common\MicroProProc.exe -tbpOOq'
[<HKCU>\Software\Microsoft\Windows\CurrentVersion\Run] 'MicroProCon' = '%APPDATA%\MicroLab\MyEngin\Common\MicroProCon.exe -MSOZqFN'
[<HKLM>\SOFTWARE\Microsoft\Windows\CurrentVersion\Run] 'MicroProProc' = '%APPDATA%\MicroLab\MyEngin\Common\MicroProProc.exe -KhDcUQbs'
[<HKCU>\Software\Microsoft\Windows\CurrentVersion\Run] 'MicroProCon' = '%APPDATA%\MicroLab\MyEngin\Common\MicroProCon.exe -USXuBInA'
[<HKLM>\SOFTWARE\Microsoft\Windows\CurrentVersion\Run] 'MicroProProc' = '%APPDATA%\MicroLab\MyEngin\Common\MicroProProc.exe -USXuBInA'
[<HKCU>\Software\Microsoft\Windows\CurrentVersion\Run] 'MicroProCon' = '%APPDATA%\MicroLab\MyEngin\Common\MicroProCon.exe -UlmHISq'
[<HKLM>\SOFTWARE\Microsoft\Windows\CurrentVersion\Run] 'MicroProProc' = '%APPDATA%\MicroLab\MyEngin\Common\MicroProProc.exe -UlmHISq'
[<HKCU>\Software\Microsoft\Windows\CurrentVersion\Run] 'MicroProCon' = '%APPDATA%\MicroLab\MyEngin\Common\MicroProCon.exe -NrSEUXa'
[<HKLM>\SOFTWARE\Microsoft\Windows\CurrentVersion\Run] 'MicroProProc' = '%APPDATA%\MicroLab\MyEngin\Common\MicroProProc.exe -DCSIL'
[<HKCU>\Software\Microsoft\Windows\CurrentVersion\Run] 'MicroProCon' = '%APPDATA%\MicroLab\MyEngin\Common\MicroProCon.exe -cDMZB'
[<HKLM>\SOFTWARE\Microsoft\Windows\CurrentVersion\Run] 'MicroProProc' = '%APPDATA%\MicroLab\MyEngin\Common\MicroProProc.exe -cDMZB'
[<HKLM>\SOFTWARE\Microsoft\Windows\CurrentVersion\Run] 'MicroProProc' = '%APPDATA%\MicroLab\MyEngin\Common\MicroProProc.exe -NrSEUXa'
[<HKLM>\SOFTWARE\Microsoft\Windows\CurrentVersion\Run] 'MicroProProc' = '%APPDATA%\MicroLab\MyEngin\Common\MicroProProc.exe -LNWgbE'
[<HKCU>\Software\Microsoft\Windows\CurrentVersion\Run] 'MicroProCon' = '%APPDATA%\MicroLab\MyEngin\Common\MicroProCon.exe -WVlprjI'
[<HKLM>\SOFTWARE\Microsoft\Windows\CurrentVersion\Run] 'MicroProProc' = '%APPDATA%\MicroLab\MyEngin\Common\MicroProProc.exe -WVlprjI'
[<HKCU>\Software\Microsoft\Windows\CurrentVersion\Run] 'MicroProCon' = '%APPDATA%\MicroLab\MyEngin\Common\MicroProCon.exe -BczLaHYK'
[<HKLM>\SOFTWARE\Microsoft\Windows\CurrentVersion\Run] 'MicroProProc' = '%APPDATA%\MicroLab\MyEngin\Common\MicroProProc.exe -BczLaHYK'
[<HKCU>\Software\Microsoft\Windows\CurrentVersion\Run] 'MicroProCon' = '%APPDATA%\MicroLab\MyEngin\Common\MicroProCon.exe -LNWgbE'
[<HKLM>\SOFTWARE\Microsoft\Windows\CurrentVersion\Run] 'MicroProProc' = '%APPDATA%\MicroLab\MyEngin\Common\MicroProProc.exe -cQCdAyaI'
[<HKCU>\Software\Microsoft\Windows\CurrentVersion\Run] 'MicroProCon' = '%APPDATA%\MicroLab\MyEngin\Common\MicroProCon.exe -mBWKTrmP'
[<HKLM>\SOFTWARE\Microsoft\Windows\CurrentVersion\Run] 'MicroProProc' = '%APPDATA%\MicroLab\MyEngin\Common\MicroProProc.exe -mBWKTrmP'
[<HKCU>\Software\Microsoft\Windows\CurrentVersion\Run] 'MicroProCon' = '%APPDATA%\MicroLab\MyEngin\Common\MicroProCon.exe -ksWjiy'
[<HKLM>\SOFTWARE\Microsoft\Windows\CurrentVersion\Run] 'MicroProProc' = '%APPDATA%\MicroLab\MyEngin\Common\MicroProProc.exe -ksWjiy'
[<HKCU>\Software\Microsoft\Windows\CurrentVersion\Run] 'MicroProCon' = '%APPDATA%\MicroLab\MyEngin\Common\MicroProCon.exe -cQCdAyaI'
[<HKCU>\Software\Microsoft\Windows\CurrentVersion\Run] 'MicroProCon' = '%APPDATA%\MicroLab\MyEngin\Common\MicroProCon.exe -dctwzrQf'
[<HKCU>\Software\Microsoft\Windows\CurrentVersion\Run] 'MicroProCon' = '%APPDATA%\MicroLab\MyEngin\Common\MicroProCon.exe -dmKFi'
[<HKLM>\SOFTWARE\Microsoft\Windows\CurrentVersion\Run] 'MicroProProc' = '%APPDATA%\MicroLab\MyEngin\Common\MicroProProc.exe -dmKFi'
[<HKCU>\Software\Microsoft\Windows\CurrentVersion\Run] 'MicroProCon' = '%APPDATA%\MicroLab\MyEngin\Common\MicroProCon.exe -DCSIL'
[<HKLM>\SOFTWARE\Microsoft\Windows\CurrentVersion\Run] 'MicroProProc' = '%APPDATA%\MicroLab\MyEngin\Common\MicroProProc.exe -dctwzrQf'
[<HKCU>\Software\Microsoft\Windows\CurrentVersion\Run] 'MicroProCon' = '%APPDATA%\MicroLab\MyEngin\Common\MicroProCon.exe -AcvbzR'
[<HKLM>\SOFTWARE\Microsoft\Windows\CurrentVersion\Run] 'MicroProProc' = '%APPDATA%\MicroLab\MyEngin\Common\MicroProProc.exe -AcvbzR'
[<HKCU>\Software\Microsoft\Windows\CurrentVersion\Run] 'MicroProCon' = '%APPDATA%\MicroLab\MyEngin\Common\MicroProCon.exe -KGRijFG'
[<HKLM>\SOFTWARE\Microsoft\Windows\CurrentVersion\Run] 'MicroProProc' = '%APPDATA%\MicroLab\MyEngin\Common\MicroProProc.exe -KGRijFG'
[<HKCU>\Software\Microsoft\Windows\CurrentVersion\Run] 'MicroProCon' = '%APPDATA%\MicroLab\MyEngin\Common\MicroProCon.exe -FyFkLwMQ'
[<HKLM>\SOFTWARE\Microsoft\Windows\CurrentVersion\Run] 'MicroProProc' = '%APPDATA%\MicroLab\MyEngin\Common\MicroProProc.exe -GFKvCJZ'
[<HKCU>\Software\Microsoft\Windows\CurrentVersion\Run] 'MicroProCon' = '%APPDATA%\MicroLab\MyEngin\Common\MicroProCon.exe -fqZYLMnv'
[<HKLM>\SOFTWARE\Microsoft\Windows\CurrentVersion\Run] 'MicroProProc' = '%APPDATA%\MicroLab\MyEngin\Common\MicroProProc.exe -fqZYLMnv'
[<HKLM>\SOFTWARE\Microsoft\Windows\CurrentVersion\Run] 'MicroProProc' = '%APPDATA%\MicroLab\MyEngin\Common\MicroProProc.exe -FyFkLwMQ'
[<HKLM>\SOFTWARE\Microsoft\Windows\CurrentVersion\Run] 'MicroProProc' = '%APPDATA%\MicroLab\MyEngin\Common\MicroProProc.exe -vQSbl'
[<HKCU>\Software\Microsoft\Windows\CurrentVersion\Run] 'MicroProCon' = '%APPDATA%\MicroLab\MyEngin\Common\MicroProCon.exe -BfsrHL'
[<HKLM>\SOFTWARE\Microsoft\Windows\CurrentVersion\Run] 'MicroProProc' = '%APPDATA%\MicroLab\MyEngin\Common\MicroProProc.exe -BfsrHL'
[<HKCU>\Software\Microsoft\Windows\CurrentVersion\Run] 'MicroProCon' = '%APPDATA%\MicroLab\MyEngin\Common\MicroProCon.exe -GsTqCRyP'
[<HKLM>\SOFTWARE\Microsoft\Windows\CurrentVersion\Run] 'MicroProProc' = '%APPDATA%\MicroLab\MyEngin\Common\MicroProProc.exe -GsTqCRyP'
[<HKCU>\Software\Microsoft\Windows\CurrentVersion\Run] 'MicroProCon' = '%APPDATA%\MicroLab\MyEngin\Common\MicroProCon.exe -vQSbl'
[<HKLM>\SOFTWARE\Microsoft\Windows\CurrentVersion\Run] 'MicroProProc' = '%APPDATA%\MicroLab\MyEngin\Common\MicroProProc.exe -UZmxSf'
[<HKCU>\Software\Microsoft\Windows\CurrentVersion\Run] 'MicroProCon' = '%APPDATA%\MicroLab\MyEngin\Common\MicroProCon.exe -zVrQIEQ'
[<HKLM>\SOFTWARE\Microsoft\Windows\CurrentVersion\Run] 'MicroProProc' = '%APPDATA%\MicroLab\MyEngin\Common\MicroProProc.exe -zVrQIEQ'
[<HKCU>\Software\Microsoft\Windows\CurrentVersion\Run] 'MicroProCon' = '%APPDATA%\MicroLab\MyEngin\Common\MicroProCon.exe -mvwuzkd'
[<HKLM>\SOFTWARE\Microsoft\Windows\CurrentVersion\Run] 'MicroProProc' = '%APPDATA%\MicroLab\MyEngin\Common\MicroProProc.exe -mvwuzkd'
[<HKCU>\Software\Microsoft\Windows\CurrentVersion\Run] 'MicroProCon' = '%APPDATA%\MicroLab\MyEngin\Common\MicroProCon.exe -UZmxSf'
[<HKCU>\Software\Microsoft\Windows\CurrentVersion\Run] 'MicroProCon' = '%APPDATA%\MicroLab\MyEngin\Common\MicroProCon.exe -zAyDbh'
[<HKCU>\Software\Microsoft\Windows\CurrentVersion\Run] 'MicroProCon' = '%APPDATA%\MicroLab\MyEngin\Common\MicroProCon.exe -alrnyP'
[<HKLM>\SOFTWARE\Microsoft\Windows\CurrentVersion\Run] 'MicroProProc' = '%APPDATA%\MicroLab\MyEngin\Common\MicroProProc.exe -alrnyP'
[<HKCU>\Software\Microsoft\Windows\CurrentVersion\Run] 'MicroProCon' = '%APPDATA%\MicroLab\MyEngin\Common\MicroProCon.exe -GFKvCJZ'
[<HKLM>\SOFTWARE\Microsoft\Windows\CurrentVersion\Run] 'MicroProProc' = '%APPDATA%\MicroLab\MyEngin\Common\MicroProProc.exe -zAyDbh'
[<HKCU>\Software\Microsoft\Windows\CurrentVersion\Run] 'MicroProCon' = '%APPDATA%\MicroLab\MyEngin\Common\MicroProCon.exe -uzNJsGff'
[<HKLM>\SOFTWARE\Microsoft\Windows\CurrentVersion\Run] 'MicroProProc' = '%APPDATA%\MicroLab\MyEngin\Common\MicroProProc.exe -uzNJsGff'
[<HKCU>\Software\Microsoft\Windows\CurrentVersion\Run] 'MicroProCon' = '%APPDATA%\MicroLab\MyEngin\Common\MicroProCon.exe -xoNqVF'
[<HKLM>\SOFTWARE\Microsoft\Windows\CurrentVersion\Run] 'MicroProProc' = '%APPDATA%\MicroLab\MyEngin\Common\MicroProProc.exe -xoNqVF'
[<HKCU>\Software\Microsoft\Windows\CurrentVersion\Run] 'MicroProCon' = '%APPDATA%\MicroLab\MyEngin\Common\MicroProCon.exe -NfRVv'
[<HKLM>\SOFTWARE\Microsoft\Windows\CurrentVersion\Run] 'MicroProProc' = '%APPDATA%\MicroLab\MyEngin\Common\MicroProProc.exe -TnSqIU'
[<HKCU>\Software\Microsoft\Windows\CurrentVersion\Run] 'MicroProCon' = '%APPDATA%\MicroLab\MyEngin\Common\MicroProCon.exe -ZxeHXEKd'
[<HKLM>\SOFTWARE\Microsoft\Windows\CurrentVersion\Run] 'MicroProProc' = '%APPDATA%\MicroLab\MyEngin\Common\MicroProProc.exe -ZxeHXEKd'
[<HKLM>\SOFTWARE\Microsoft\Windows\CurrentVersion\Run] 'MicroProProc' = '%APPDATA%\MicroLab\MyEngin\Common\MicroProProc.exe -NfRVv'
[<HKLM>\SOFTWARE\Microsoft\Windows\CurrentVersion\Run] 'MicroProProc' = '%APPDATA%\MicroLab\MyEngin\Common\MicroProProc.exe -jnqhGWOy'
[<HKCU>\Software\Microsoft\Windows\CurrentVersion\Run] 'MicroProCon' = '%APPDATA%\MicroLab\MyEngin\Common\MicroProCon.exe -EWIMmMXR'
[<HKLM>\SOFTWARE\Microsoft\Windows\CurrentVersion\Run] 'MicroProProc' = '%APPDATA%\MicroLab\MyEngin\Common\MicroProProc.exe -EWIMmMXR'
[<HKCU>\Software\Microsoft\Windows\CurrentVersion\Run] 'MicroProCon' = '%APPDATA%\MicroLab\MyEngin\Common\MicroProCon.exe -EOJmCV'
[<HKLM>\SOFTWARE\Microsoft\Windows\CurrentVersion\Run] 'MicroProProc' = '%APPDATA%\MicroLab\MyEngin\Common\MicroProProc.exe -EOJmCV'
[<HKCU>\Software\Microsoft\Windows\CurrentVersion\Run] 'MicroProCon' = '%APPDATA%\MicroLab\MyEngin\Common\MicroProCon.exe -jnqhGWOy'
[<HKLM>\SOFTWARE\Microsoft\Windows\CurrentVersion\Run] 'MicroProProc' = '%APPDATA%\MicroLab\MyEngin\Common\MicroProProc.exe -ShCqzXS'
[<HKCU>\Software\Microsoft\Windows\CurrentVersion\Run] 'MicroProCon' = '%APPDATA%\MicroLab\MyEngin\Common\MicroProCon.exe -jwwMPSK'
[<HKLM>\SOFTWARE\Microsoft\Windows\CurrentVersion\Run] 'MicroProProc' = '%APPDATA%\MicroLab\MyEngin\Common\MicroProProc.exe -jwwMPSK'
[<HKCU>\Software\Microsoft\Windows\CurrentVersion\Run] 'MicroProCon' = '%APPDATA%\MicroLab\MyEngin\Common\MicroProCon.exe -ykLhgIq'
[<HKLM>\SOFTWARE\Microsoft\Windows\CurrentVersion\Run] 'MicroProProc' = '%APPDATA%\MicroLab\MyEngin\Common\MicroProProc.exe -ykLhgIq'
[<HKCU>\Software\Microsoft\Windows\CurrentVersion\Run] 'MicroProCon' = '%APPDATA%\MicroLab\MyEngin\Common\MicroProCon.exe -ShCqzXS'
[<HKCU>\Software\Microsoft\Windows\CurrentVersion\Run] 'MicroProCon' = '%APPDATA%\MicroLab\MyEngin\Common\MicroProCon.exe -dlyatZx'
[<HKCU>\Software\Microsoft\Windows\CurrentVersion\Run] 'MicroProCon' = '%APPDATA%\MicroLab\MyEngin\Common\MicroProCon.exe -WMPHgJo'
[<HKLM>\SOFTWARE\Microsoft\Windows\CurrentVersion\Run] 'MicroProProc' = '%APPDATA%\MicroLab\MyEngin\Common\MicroProProc.exe -WMPHgJo'
[<HKCU>\Software\Microsoft\Windows\CurrentVersion\Run] 'MicroProCon' = '%APPDATA%\MicroLab\MyEngin\Common\MicroProCon.exe -TnSqIU'
[<HKLM>\SOFTWARE\Microsoft\Windows\CurrentVersion\Run] 'MicroProProc' = '%APPDATA%\MicroLab\MyEngin\Common\MicroProProc.exe -dlyatZx'
[<HKCU>\Software\Microsoft\Windows\CurrentVersion\Run] 'MicroProCon' = '%APPDATA%\MicroLab\MyEngin\Common\MicroProCon.exe -WYhFAdfL'
[<HKLM>\SOFTWARE\Microsoft\Windows\CurrentVersion\Run] 'MicroProProc' = '%APPDATA%\MicroLab\MyEngin\Common\MicroProProc.exe -WYhFAdfL'
[<HKCU>\Software\Microsoft\Windows\CurrentVersion\Run] 'MicroProCon' = '%APPDATA%\MicroLab\MyEngin\Common\MicroProCon.exe -bZePW'
[<HKLM>\SOFTWARE\Microsoft\Windows\CurrentVersion\Run] 'MicroProProc' = '%APPDATA%\MicroLab\MyEngin\Common\MicroProProc.exe -bZePW'
[<HKCU>\Software\Microsoft\Windows\CurrentVersion\Run] 'MicroProCon' = '%APPDATA%\MicroLab\MyEngin\Common\MicroProCon.exe -RIWgP'
[<HKLM>\SOFTWARE\Microsoft\Windows\CurrentVersion\Run] 'MicroProProc' = '%APPDATA%\MicroLab\MyEngin\Common\MicroProProc.exe -aokTgGGh'
[<HKCU>\Software\Microsoft\Windows\CurrentVersion\Run] 'MicroProCon' = '%APPDATA%\MicroLab\MyEngin\Common\MicroProCon.exe -wCyKb'
[<HKLM>\SOFTWARE\Microsoft\Windows\CurrentVersion\Run] 'MicroProProc' = '%APPDATA%\MicroLab\MyEngin\Common\MicroProProc.exe -wCyKb'
[<HKLM>\SOFTWARE\Microsoft\Windows\CurrentVersion\Run] 'MicroProProc' = '%APPDATA%\MicroLab\MyEngin\Common\MicroProProc.exe -RIWgP'
[<HKLM>\SOFTWARE\Microsoft\Windows\CurrentVersion\Run] 'MicroProProc' = '%APPDATA%\MicroLab\MyEngin\Common\MicroProProc.exe -RHmhigl'
[<HKCU>\Software\Microsoft\Windows\CurrentVersion\Run] 'MicroProCon' = '%APPDATA%\MicroLab\MyEngin\Common\MicroProCon.exe -NhYPcnWV'
[<HKLM>\SOFTWARE\Microsoft\Windows\CurrentVersion\Run] 'MicroProProc' = '%APPDATA%\MicroLab\MyEngin\Common\MicroProProc.exe -NhYPcnWV'
[<HKCU>\Software\Microsoft\Windows\CurrentVersion\Run] 'MicroProCon' = '%APPDATA%\MicroLab\MyEngin\Common\MicroProCon.exe -wtQAK'
[<HKLM>\SOFTWARE\Microsoft\Windows\CurrentVersion\Run] 'MicroProProc' = '%APPDATA%\MicroLab\MyEngin\Common\MicroProProc.exe -wtQAK'
[<HKCU>\Software\Microsoft\Windows\CurrentVersion\Run] 'MicroProCon' = '%APPDATA%\MicroLab\MyEngin\Common\MicroProCon.exe -RHmhigl'
[<HKLM>\SOFTWARE\Microsoft\Windows\CurrentVersion\Run] 'MicroProProc' = '%APPDATA%\MicroLab\MyEngin\Common\MicroProProc.exe -NHZWtPnt'
[<HKCU>\Software\Microsoft\Windows\CurrentVersion\Run] 'MicroProCon' = '%APPDATA%\MicroLab\MyEngin\Common\MicroProCon.exe -LqzAyDoh'
[<HKLM>\SOFTWARE\Microsoft\Windows\CurrentVersion\Run] 'MicroProProc' = '%APPDATA%\MicroLab\MyEngin\Common\MicroProProc.exe -LqzAyDoh'
[<HKCU>\Software\Microsoft\Windows\CurrentVersion\Run] 'MicroProCon' = '%APPDATA%\MicroLab\MyEngin\Common\MicroProCon.exe -SmdUh'
[<HKLM>\SOFTWARE\Microsoft\Windows\CurrentVersion\Run] 'MicroProProc' = '%APPDATA%\MicroLab\MyEngin\Common\MicroProProc.exe -SmdUh'
[<HKCU>\Software\Microsoft\Windows\CurrentVersion\Run] 'MicroProCon' = '%APPDATA%\MicroLab\MyEngin\Common\MicroProCon.exe -NHZWtPnt'
[<HKCU>\Software\Microsoft\Windows\CurrentVersion\Run] 'MicroProCon' = '%APPDATA%\MicroLab\MyEngin\Common\MicroProCon.exe -mrFPkyl'
[<HKCU>\Software\Microsoft\Windows\CurrentVersion\Run] 'MicroProCon' = '%APPDATA%\MicroLab\MyEngin\Common\MicroProCon.exe -xwBYfm'
[<HKLM>\SOFTWARE\Microsoft\Windows\CurrentVersion\Run] 'MicroProProc' = '%APPDATA%\MicroLab\MyEngin\Common\MicroProProc.exe -xwBYfm'
[<HKCU>\Software\Microsoft\Windows\CurrentVersion\Run] 'MicroProCon' = '%APPDATA%\MicroLab\MyEngin\Common\MicroProCon.exe -aokTgGGh'
[<HKLM>\SOFTWARE\Microsoft\Windows\CurrentVersion\Run] 'MicroProProc' = '%APPDATA%\MicroLab\MyEngin\Common\MicroProProc.exe -mrFPkyl'
[<HKCU>\Software\Microsoft\Windows\CurrentVersion\Run] 'MicroProCon' = '%APPDATA%\MicroLab\MyEngin\Common\MicroProCon.exe -cxWOKWn'
[<HKLM>\SOFTWARE\Microsoft\Windows\CurrentVersion\Run] 'MicroProProc' = '%APPDATA%\MicroLab\MyEngin\Common\MicroProProc.exe -cxWOKWn'
[<HKCU>\Software\Microsoft\Windows\CurrentVersion\Run] 'MicroProCon' = '%APPDATA%\MicroLab\MyEngin\Common\MicroProCon.exe -lGwnBL'
[<HKLM>\SOFTWARE\Microsoft\Windows\CurrentVersion\Run] 'MicroProProc' = '%APPDATA%\MicroLab\MyEngin\Common\MicroProProc.exe -lGwnBL'
[<HKCU>\Software\Microsoft\Windows\CurrentVersion\Run] 'MicroProCon' = '%APPDATA%\MicroLab\MyEngin\Common\MicroProCon.exe -PifBlwCy'
[<HKLM>\SOFTWARE\Microsoft\Windows\CurrentVersion\Run] 'MicroProProc' = '%APPDATA%\MicroLab\MyEngin\Common\MicroProProc.exe -SMeOkUf'
[<HKCU>\Software\Microsoft\Windows\CurrentVersion\Run] 'MicroProCon' = '%APPDATA%\MicroLab\MyEngin\Common\MicroProCon.exe -SHnijhm'
[<HKLM>\SOFTWARE\Microsoft\Windows\CurrentVersion\Run] 'MicroProProc' = '%APPDATA%\MicroLab\MyEngin\Common\MicroProProc.exe -SHnijhm'
[<HKLM>\SOFTWARE\Microsoft\Windows\CurrentVersion\Run] 'MicroProProc' = '%APPDATA%\MicroLab\MyEngin\Common\MicroProProc.exe -PifBlwCy'
[<HKLM>\SOFTWARE\Microsoft\Windows\CurrentVersion\Run] 'MicroProProc' = '%APPDATA%\MicroLab\MyEngin\Common\MicroProProc.exe -ulzJssf'
[<HKCU>\Software\Microsoft\Windows\CurrentVersion\Run] 'MicroProCon' = '%APPDATA%\MicroLab\MyEngin\Common\MicroProCon.exe -DZxDz'
[<HKLM>\SOFTWARE\Microsoft\Windows\CurrentVersion\Run] 'MicroProProc' = '%APPDATA%\MicroLab\MyEngin\Common\MicroProProc.exe -DZxDz'
[<HKCU>\Software\Microsoft\Windows\CurrentVersion\Run] 'MicroProCon' = '%APPDATA%\MicroLab\MyEngin\Common\MicroProCon.exe -ojjinYR'
[<HKLM>\SOFTWARE\Microsoft\Windows\CurrentVersion\Run] 'MicroProProc' = '%APPDATA%\MicroLab\MyEngin\Common\MicroProProc.exe -ojjinYR'
[<HKCU>\Software\Microsoft\Windows\CurrentVersion\Run] 'MicroProCon' = '%APPDATA%\MicroLab\MyEngin\Common\MicroProCon.exe -ulzJssf'
[<HKLM>\SOFTWARE\Microsoft\Windows\CurrentVersion\Run] 'MicroProProc' = '%APPDATA%\MicroLab\MyEngin\Common\MicroProProc.exe -aGPQO'
[<HKCU>\Software\Microsoft\Windows\CurrentVersion\Run] 'MicroProCon' = '%APPDATA%\MicroLab\MyEngin\Common\MicroProCon.exe -QTnQU'
[<HKLM>\SOFTWARE\Microsoft\Windows\CurrentVersion\Run] 'MicroProProc' = '%APPDATA%\MicroLab\MyEngin\Common\MicroProProc.exe -QTnQU'
[<HKCU>\Software\Microsoft\Windows\CurrentVersion\Run] 'MicroProCon' = '%APPDATA%\MicroLab\MyEngin\Common\MicroProCon.exe -jGcAG'
[<HKLM>\SOFTWARE\Microsoft\Windows\CurrentVersion\Run] 'MicroProProc' = '%APPDATA%\MicroLab\MyEngin\Common\MicroProProc.exe -jGcAG'
[<HKCU>\Software\Microsoft\Windows\CurrentVersion\Run] 'MicroProCon' = '%APPDATA%\MicroLab\MyEngin\Common\MicroProCon.exe -aGPQO'
[<HKCU>\Software\Microsoft\Windows\CurrentVersion\Run] 'MicroProCon' = '%APPDATA%\MicroLab\MyEngin\Common\MicroProCon.exe -TeYroK'
[<HKCU>\Software\Microsoft\Windows\CurrentVersion\Run] 'MicroProCon' = '%APPDATA%\MicroLab\MyEngin\Common\MicroProCon.exe -cfzcgu'
[<HKLM>\SOFTWARE\Microsoft\Windows\CurrentVersion\Run] 'MicroProProc' = '%APPDATA%\MicroLab\MyEngin\Common\MicroProProc.exe -cfzcgu'
[<HKCU>\Software\Microsoft\Windows\CurrentVersion\Run] 'MicroProCon' = '%APPDATA%\MicroLab\MyEngin\Common\MicroProCon.exe -SMeOkUf'
[<HKLM>\SOFTWARE\Microsoft\Windows\CurrentVersion\Run] 'MicroProProc' = '%APPDATA%\MicroLab\MyEngin\Common\MicroProProc.exe -TeYroK'
[<HKCU>\Software\Microsoft\Windows\CurrentVersion\Run] 'MicroProCon' = '%APPDATA%\MicroLab\MyEngin\Common\MicroProCon.exe -qvEtZiih'
[<HKLM>\SOFTWARE\Microsoft\Windows\CurrentVersion\Run] 'MicroProProc' = '%APPDATA%\MicroLab\MyEngin\Common\MicroProProc.exe -qvEtZiih'
[<HKCU>\Software\Microsoft\Windows\CurrentVersion\Run] 'MicroProCon' = '%APPDATA%\MicroLab\MyEngin\Common\MicroProCon.exe -giDfky'
[<HKLM>\SOFTWARE\Microsoft\Windows\CurrentVersion\Run] 'MicroProProc' = '%APPDATA%\MicroLab\MyEngin\Common\MicroProProc.exe -giDfky'
[<HKCU>\Software\Microsoft\Windows\CurrentVersion\Run] 'MicroProCon' = '%APPDATA%\MicroLab\MyEngin\Common\MicroProCon.exe -hatqNiHz'
[<HKLM>\SOFTWARE\Microsoft\Windows\CurrentVersion\Run] 'MicroProProc' = '%APPDATA%\MicroLab\MyEngin\Common\MicroProProc.exe -vsPlK'
[<HKCU>\Software\Microsoft\Windows\CurrentVersion\Run] 'MicroProCon' = '%APPDATA%\MicroLab\MyEngin\Common\MicroProCon.exe -jYENNM'
[<HKLM>\SOFTWARE\Microsoft\Windows\CurrentVersion\Run] 'MicroProProc' = '%APPDATA%\MicroLab\MyEngin\Common\MicroProProc.exe -jYENNM'
[<HKLM>\SOFTWARE\Microsoft\Windows\CurrentVersion\Run] 'MicroProProc' = '%APPDATA%\MicroLab\MyEngin\Common\MicroProProc.exe -hatqNiHz'
[<HKLM>\SOFTWARE\Microsoft\Windows\CurrentVersion\Run] 'MicroProProc' = '%APPDATA%\MicroLab\MyEngin\Common\MicroProProc.exe -pSWkhPdC'
[<HKCU>\Software\Microsoft\Windows\CurrentVersion\Run] 'MicroProCon' = '%APPDATA%\MicroLab\MyEngin\Common\MicroProCon.exe -zitzv'
[<HKLM>\SOFTWARE\Microsoft\Windows\CurrentVersion\Run] 'MicroProProc' = '%APPDATA%\MicroLab\MyEngin\Common\MicroProProc.exe -zitzv'
[<HKCU>\Software\Microsoft\Windows\CurrentVersion\Run] 'MicroProCon' = '%APPDATA%\MicroLab\MyEngin\Common\MicroProCon.exe -zfoonsP'
[<HKLM>\SOFTWARE\Microsoft\Windows\CurrentVersion\Run] 'MicroProProc' = '%APPDATA%\MicroLab\MyEngin\Common\MicroProProc.exe -zfoonsP'
[<HKCU>\Software\Microsoft\Windows\CurrentVersion\Run] 'MicroProCon' = '%APPDATA%\MicroLab\MyEngin\Common\MicroProCon.exe -pSWkhPdC'
[<HKLM>\SOFTWARE\Microsoft\Windows\CurrentVersion\Run] 'MicroProProc' = '%APPDATA%\MicroLab\MyEngin\Common\MicroProProc.exe -SaPvqr'
[<HKCU>\Software\Microsoft\Windows\CurrentVersion\Run] 'MicroProCon' = '%APPDATA%\MicroLab\MyEngin\Common\MicroProCon.exe -Emavlcq'
[<HKLM>\SOFTWARE\Microsoft\Windows\CurrentVersion\Run] 'MicroProProc' = '%APPDATA%\MicroLab\MyEngin\Common\MicroProProc.exe -Emavlcq'
[<HKCU>\Software\Microsoft\Windows\CurrentVersion\Run] 'MicroProCon' = '%APPDATA%\MicroLab\MyEngin\Common\MicroProCon.exe -btczj'
[<HKLM>\SOFTWARE\Microsoft\Windows\CurrentVersion\Run] 'MicroProProc' = '%APPDATA%\MicroLab\MyEngin\Common\MicroProProc.exe -btczj'
[<HKCU>\Software\Microsoft\Windows\CurrentVersion\Run] 'MicroProCon' = '%APPDATA%\MicroLab\MyEngin\Common\MicroProCon.exe -SaPvqr'
[<HKCU>\Software\Microsoft\Windows\CurrentVersion\Run] 'MicroProCon' = '%APPDATA%\MicroLab\MyEngin\Common\MicroProCon.exe -AuMJgQb'
[<HKCU>\Software\Microsoft\Windows\CurrentVersion\Run] 'MicroProCon' = '%APPDATA%\MicroLab\MyEngin\Common\MicroProCon.exe -wQGxLVE'
[<HKLM>\SOFTWARE\Microsoft\Windows\CurrentVersion\Run] 'MicroProProc' = '%APPDATA%\MicroLab\MyEngin\Common\MicroProProc.exe -wQGxLVE'
[<HKCU>\Software\Microsoft\Windows\CurrentVersion\Run] 'MicroProCon' = '%APPDATA%\MicroLab\MyEngin\Common\MicroProCon.exe -vsPlK'
[<HKLM>\SOFTWARE\Microsoft\Windows\CurrentVersion\Run] 'MicroProProc' = '%APPDATA%\MicroLab\MyEngin\Common\MicroProProc.exe -AuMJgQb'
[<HKCU>\Software\Microsoft\Windows\CurrentVersion\Run] 'MicroProCon' = '%APPDATA%\MicroLab\MyEngin\Common\MicroProCon.exe -PFkggej'
[<HKLM>\SOFTWARE\Microsoft\Windows\CurrentVersion\Run] 'MicroProProc' = '%APPDATA%\MicroLab\MyEngin\Common\MicroProProc.exe -PFkggej'
[<HKCU>\Software\Microsoft\Windows\CurrentVersion\Run] 'MicroProCon' = '%APPDATA%\MicroLab\MyEngin\Common\MicroProCon.exe -zYQMX'
[<HKLM>\SOFTWARE\Microsoft\Windows\CurrentVersion\Run] 'MicroProProc' = '%APPDATA%\MicroLab\MyEngin\Common\MicroProProc.exe -zYQMX'
[<HKCU>\Software\Microsoft\Windows\CurrentVersion\Run] 'MicroProCon' = '%APPDATA%\MicroLab\MyEngin\Common\MicroProCon.exe -cdbgDKRv'
[<HKLM>\SOFTWARE\Microsoft\Windows\CurrentVersion\Run] 'MicroProProc' = '%APPDATA%\MicroLab\MyEngin\Common\MicroProProc.exe -usxibi'
[<HKCU>\Software\Microsoft\Windows\CurrentVersion\Run] 'MicroProCon' = '%APPDATA%\MicroLab\MyEngin\Common\MicroProCon.exe -IWgBPCo'
[<HKLM>\SOFTWARE\Microsoft\Windows\CurrentVersion\Run] 'MicroProProc' = '%APPDATA%\MicroLab\MyEngin\Common\MicroProProc.exe -IWgBPCo'
[<HKLM>\SOFTWARE\Microsoft\Windows\CurrentVersion\Run] 'MicroProProc' = '%APPDATA%\MicroLab\MyEngin\Common\MicroProProc.exe -cdbgDKRv'
[<HKLM>\SOFTWARE\Microsoft\Windows\CurrentVersion\Run] 'MicroProProc' = '%APPDATA%\MicroLab\MyEngin\Common\MicroProProc.exe -Qbhdo'
[<HKCU>\Software\Microsoft\Windows\CurrentVersion\Run] 'MicroProCon' = '%APPDATA%\MicroLab\MyEngin\Common\MicroProCon.exe -efdiT'
[<HKLM>\SOFTWARE\Microsoft\Windows\CurrentVersion\Run] 'MicroProProc' = '%APPDATA%\MicroLab\MyEngin\Common\MicroProProc.exe -efdiT'
[<HKCU>\Software\Microsoft\Windows\CurrentVersion\Run] 'MicroProCon' = '%APPDATA%\MicroLab\MyEngin\Common\MicroProCon.exe -CyhuUU'
[<HKLM>\SOFTWARE\Microsoft\Windows\CurrentVersion\Run] 'MicroProProc' = '%APPDATA%\MicroLab\MyEngin\Common\MicroProProc.exe -CyhuUU'
[<HKCU>\Software\Microsoft\Windows\CurrentVersion\Run] 'MicroProCon' = '%APPDATA%\MicroLab\MyEngin\Common\MicroProCon.exe -Qbhdo'
[<HKLM>\SOFTWARE\Microsoft\Windows\CurrentVersion\Run] 'MicroProProc' = '%APPDATA%\MicroLab\MyEngin\Common\MicroProProc.exe -JdULYjSR'
[<HKCU>\Software\Microsoft\Windows\CurrentVersion\Run] 'MicroProCon' = '%APPDATA%\MicroLab\MyEngin\Common\MicroProCon.exe -uRBLRN'
[<HKLM>\SOFTWARE\Microsoft\Windows\CurrentVersion\Run] 'MicroProProc' = '%APPDATA%\MicroLab\MyEngin\Common\MicroProProc.exe -uRBLRN'
[<HKCU>\Software\Microsoft\Windows\CurrentVersion\Run] 'MicroProCon' = '%APPDATA%\MicroLab\MyEngin\Common\MicroProCon.exe -HCDBG'
[<HKLM>\SOFTWARE\Microsoft\Windows\CurrentVersion\Run] 'MicroProProc' = '%APPDATA%\MicroLab\MyEngin\Common\MicroProProc.exe -HCDBG'
[<HKCU>\Software\Microsoft\Windows\CurrentVersion\Run] 'MicroProCon' = '%APPDATA%\MicroLab\MyEngin\Common\MicroProCon.exe -JdULYjSR'
[<HKCU>\Software\Microsoft\Windows\CurrentVersion\Run] 'MicroProCon' = '%APPDATA%\MicroLab\MyEngin\Common\MicroProCon.exe -idechSL'
[<HKCU>\Software\Microsoft\Windows\CurrentVersion\Run] 'MicroProCon' = '%APPDATA%\MicroLab\MyEngin\Common\MicroProCon.exe -awVbXim'
[<HKLM>\SOFTWARE\Microsoft\Windows\CurrentVersion\Run] 'MicroProProc' = '%APPDATA%\MicroLab\MyEngin\Common\MicroProProc.exe -awVbXim'
[<HKCU>\Software\Microsoft\Windows\CurrentVersion\Run] 'MicroProCon' = '%APPDATA%\MicroLab\MyEngin\Common\MicroProCon.exe -usxibi'
[<HKLM>\SOFTWARE\Microsoft\Windows\CurrentVersion\Run] 'MicroProProc' = '%APPDATA%\MicroLab\MyEngin\Common\MicroProProc.exe -idechSL'
[<HKCU>\Software\Microsoft\Windows\CurrentVersion\Run] 'MicroProCon' = '%APPDATA%\MicroLab\MyEngin\Common\MicroProCon.exe -vmAKtsg'
[<HKLM>\SOFTWARE\Microsoft\Windows\CurrentVersion\Run] 'MicroProProc' = '%APPDATA%\MicroLab\MyEngin\Common\MicroProProc.exe -vmAKtsg'
[<HKCU>\Software\Microsoft\Windows\CurrentVersion\Run] 'MicroProCon' = '%APPDATA%\MicroLab\MyEngin\Common\MicroProCon.exe -BbPMGY'
[<HKLM>\SOFTWARE\Microsoft\Windows\CurrentVersion\Run] 'MicroProProc' = '%APPDATA%\MicroLab\MyEngin\Common\MicroProProc.exe -BbPMGY'
[<HKCU>\Software\Microsoft\Windows\CurrentVersion\Run] 'MicroProCon' = '%APPDATA%\MicroLab\MyEngin\Common\MicroProCon.exe -SlFYSIn'
[<HKLM>\SOFTWARE\Microsoft\Windows\CurrentVersion\Run] 'MicroProProc' = '%APPDATA%\MicroLab\MyEngin\Common\MicroProProc.exe -EXfVAw'
[<HKCU>\Software\Microsoft\Windows\CurrentVersion\Run] 'MicroProCon' = '%APPDATA%\MicroLab\MyEngin\Common\MicroProCon.exe -FplZu'
[<HKLM>\SOFTWARE\Microsoft\Windows\CurrentVersion\Run] 'MicroProProc' = '%APPDATA%\MicroLab\MyEngin\Common\MicroProProc.exe -FplZu'
[<HKLM>\SOFTWARE\Microsoft\Windows\CurrentVersion\Run] 'MicroProProc' = '%APPDATA%\MicroLab\MyEngin\Common\MicroProProc.exe -SlFYSIn'
[<HKLM>\SOFTWARE\Microsoft\Windows\CurrentVersion\Run] 'MicroProProc' = '%APPDATA%\MicroLab\MyEngin\Common\MicroProProc.exe -mMmxr'
[<HKCU>\Software\Microsoft\Windows\CurrentVersion\Run] 'MicroProCon' = '%APPDATA%\MicroLab\MyEngin\Common\MicroProCon.exe -dfLflt'
[<HKLM>\SOFTWARE\Microsoft\Windows\CurrentVersion\Run] 'MicroProProc' = '%APPDATA%\MicroLab\MyEngin\Common\MicroProProc.exe -dfLflt'
[<HKCU>\Software\Microsoft\Windows\CurrentVersion\Run] 'MicroProCon' = '%APPDATA%\MicroLab\MyEngin\Common\MicroProCon.exe -KCmUXr'
[<HKLM>\SOFTWARE\Microsoft\Windows\CurrentVersion\Run] 'MicroProProc' = '%APPDATA%\MicroLab\MyEngin\Common\MicroProProc.exe -KCmUXr'
[<HKCU>\Software\Microsoft\Windows\CurrentVersion\Run] 'MicroProCon' = '%APPDATA%\MicroLab\MyEngin\Common\MicroProCon.exe -mMmxr'
[<HKLM>\SOFTWARE\Microsoft\Windows\CurrentVersion\Run] 'MicroProProc' = '%APPDATA%\MicroLab\MyEngin\Common\MicroProProc.exe -hGVNyf'
[<HKCU>\Software\Microsoft\Windows\CurrentVersion\Run] 'MicroProCon' = '%APPDATA%\MicroLab\MyEngin\Common\MicroProCon.exe -zXpPpAuM'
[<HKLM>\SOFTWARE\Microsoft\Windows\CurrentVersion\Run] 'MicroProProc' = '%APPDATA%\MicroLab\MyEngin\Common\MicroProProc.exe -zXpPpAuM'
[<HKCU>\Software\Microsoft\Windows\CurrentVersion\Run] 'MicroProCon' = '%APPDATA%\MicroLab\MyEngin\Common\MicroProCon.exe -SUBVai'
[<HKLM>\SOFTWARE\Microsoft\Windows\CurrentVersion\Run] 'MicroProProc' = '%APPDATA%\MicroLab\MyEngin\Common\MicroProProc.exe -SUBVai'
[<HKCU>\Software\Microsoft\Windows\CurrentVersion\Run] 'MicroProCon' = '%APPDATA%\MicroLab\MyEngin\Common\MicroProCon.exe -hGVNyf'
[<HKCU>\Software\Microsoft\Windows\CurrentVersion\Run] 'MicroProCon' = '%APPDATA%\MicroLab\MyEngin\Common\MicroProCon.exe -XDKdlbGB'
[<HKCU>\Software\Microsoft\Windows\CurrentVersion\Run] 'MicroProCon' = '%APPDATA%\MicroLab\MyEngin\Common\MicroProCon.exe -oAolfyvR'
[<HKLM>\SOFTWARE\Microsoft\Windows\CurrentVersion\Run] 'MicroProProc' = '%APPDATA%\MicroLab\MyEngin\Common\MicroProProc.exe -oAolfyvR'
[<HKCU>\Software\Microsoft\Windows\CurrentVersion\Run] 'MicroProCon' = '%APPDATA%\MicroLab\MyEngin\Common\MicroProCon.exe -EXfVAw'
[<HKLM>\SOFTWARE\Microsoft\Windows\CurrentVersion\Run] 'MicroProProc' = '%APPDATA%\MicroLab\MyEngin\Common\MicroProProc.exe -XDKdlbGB'
[<HKCU>\Software\Microsoft\Windows\CurrentVersion\Run] 'MicroProCon' = '%APPDATA%\MicroLab\MyEngin\Common\MicroProCon.exe -JHpdy'
[<HKLM>\SOFTWARE\Microsoft\Windows\CurrentVersion\Run] 'MicroProProc' = '%APPDATA%\MicroLab\MyEngin\Common\MicroProProc.exe -JHpdy'
[<HKCU>\Software\Microsoft\Windows\CurrentVersion\Run] 'MicroProCon' = '%APPDATA%\MicroLab\MyEngin\Common\MicroProCon.exe -hglWP'
[<HKLM>\SOFTWARE\Microsoft\Windows\CurrentVersion\Run] 'MicroProProc' = '%APPDATA%\MicroLab\MyEngin\Common\MicroProProc.exe -hglWP'
[<HKCU>\Software\Microsoft\Windows\CurrentVersion\Run] 'MicroProCon' = '%APPDATA%\MicroLab\MyEngin\Common\MicroProCon.exe -LPdoI'
[<HKLM>\SOFTWARE\Microsoft\Windows\CurrentVersion\Run] 'MicroProProc' = '%APPDATA%\MicroLab\MyEngin\Common\MicroProProc.exe -rhYmwffS'
[<HKCU>\Software\Microsoft\Windows\CurrentVersion\Run] 'MicroProCon' = '%APPDATA%\MicroLab\MyEngin\Common\MicroProCon.exe -iEcieqt'
[<HKLM>\SOFTWARE\Microsoft\Windows\CurrentVersion\Run] 'MicroProProc' = '%APPDATA%\MicroLab\MyEngin\Common\MicroProProc.exe -iEcieqt'
[<HKLM>\SOFTWARE\Microsoft\Windows\CurrentVersion\Run] 'MicroProProc' = '%APPDATA%\MicroLab\MyEngin\Common\MicroProProc.exe -LPdoI'
[<HKLM>\SOFTWARE\Microsoft\Windows\CurrentVersion\Run] 'MicroProProc' = '%APPDATA%\MicroLab\MyEngin\Common\MicroProProc.exe -WCLLK'
[<HKCU>\Software\Microsoft\Windows\CurrentVersion\Run] 'MicroProCon' = '%APPDATA%\MicroLab\MyEngin\Common\MicroProCon.exe -oqKnsFC'
[<HKLM>\SOFTWARE\Microsoft\Windows\CurrentVersion\Run] 'MicroProProc' = '%APPDATA%\MicroLab\MyEngin\Common\MicroProProc.exe -oqKnsFC'
[<HKCU>\Software\Microsoft\Windows\CurrentVersion\Run] 'MicroProCon' = '%APPDATA%\MicroLab\MyEngin\Common\MicroProCon.exe -KHeAYQ'
[<HKLM>\SOFTWARE\Microsoft\Windows\CurrentVersion\Run] 'MicroProProc' = '%APPDATA%\MicroLab\MyEngin\Common\MicroProProc.exe -KHeAYQ'
[<HKCU>\Software\Microsoft\Windows\CurrentVersion\Run] 'MicroProCon' = '%APPDATA%\MicroLab\MyEngin\Common\MicroProCon.exe -WCLLK'
[<HKLM>\SOFTWARE\Microsoft\Windows\CurrentVersion\Run] 'MicroProProc' = '%APPDATA%\MicroLab\MyEngin\Common\MicroProProc.exe -oGgGSLeN'
[<HKCU>\Software\Microsoft\Windows\CurrentVersion\Run] 'MicroProCon' = '%APPDATA%\MicroLab\MyEngin\Common\MicroProCon.exe -wCWeTzuv'
[<HKLM>\SOFTWARE\Microsoft\Windows\CurrentVersion\Run] 'MicroProProc' = '%APPDATA%\MicroLab\MyEngin\Common\MicroProProc.exe -wCWeTzuv'
[<HKCU>\Software\Microsoft\Windows\CurrentVersion\Run] 'MicroProCon' = '%APPDATA%\MicroLab\MyEngin\Common\MicroProCon.exe -DcrkUCE'
[<HKLM>\SOFTWARE\Microsoft\Windows\CurrentVersion\Run] 'MicroProProc' = '%APPDATA%\MicroLab\MyEngin\Common\MicroProProc.exe -DcrkUCE'
[<HKCU>\Software\Microsoft\Windows\CurrentVersion\Run] 'MicroProCon' = '%APPDATA%\MicroLab\MyEngin\Common\MicroProCon.exe -oGgGSLeN'
[<HKCU>\Software\Microsoft\Windows\CurrentVersion\Run] 'MicroProCon' = '%APPDATA%\MicroLab\MyEngin\Common\MicroProCon.exe -Godxoes'
[<HKCU>\Software\Microsoft\Windows\CurrentVersion\Run] 'MicroProCon' = '%APPDATA%\MicroLab\MyEngin\Common\MicroProCon.exe -iXDyyxCn'
[<HKLM>\SOFTWARE\Microsoft\Windows\CurrentVersion\Run] 'MicroProProc' = '%APPDATA%\MicroLab\MyEngin\Common\MicroProProc.exe -iXDyyxCn'
[<HKCU>\Software\Microsoft\Windows\CurrentVersion\Run] 'MicroProCon' = '%APPDATA%\MicroLab\MyEngin\Common\MicroProCon.exe -rhYmwffS'
[<HKLM>\SOFTWARE\Microsoft\Windows\CurrentVersion\Run] 'MicroProProc' = '%APPDATA%\MicroLab\MyEngin\Common\MicroProProc.exe -Godxoes'
[<HKCU>\Software\Microsoft\Windows\CurrentVersion\Run] 'MicroProCon' = '%APPDATA%\MicroLab\MyEngin\Common\MicroProCon.exe -ysKHeOY'
[<HKLM>\SOFTWARE\Microsoft\Windows\CurrentVersion\Run] 'MicroProProc' = '%APPDATA%\MicroLab\MyEngin\Common\MicroProProc.exe -ysKHeOY'

Изменения в файловой системе:

Создает следующие файлы:

%HOMEPATH%\Local Settings\Temporary Internet Files\Content.IE5\YPORKZYZ\serverlist[2].asp
%HOMEPATH%\Local Settings\Temporary Internet Files\Content.IE5\2VAZY7AN\serverlist[2].asp
%HOMEPATH%\Local Settings\Temporary Internet Files\Content.IE5\U98D4X8H\serverlist[2].asp
%HOMEPATH%\Local Settings\Temporary Internet Files\Content.IE5\2VAZY7AN\serverlist[3].asp
%HOMEPATH%\Local Settings\Temporary Internet Files\Content.IE5\U98D4X8H\serverlist[3].asp
%HOMEPATH%\Local Settings\Temporary Internet Files\Content.IE5\KHMHGZ4F\serverlist[3].asp
%HOMEPATH%\Local Settings\Temporary Internet Files\Content.IE5\U98D4X8H\serverlist[1].asp
%HOMEPATH%\Local Settings\Temporary Internet Files\Content.IE5\KHMHGZ4F\serverlist[1].asp
%HOMEPATH%\Local Settings\Temporary Internet Files\Content.IE5\KHMHGZ4F\serverlist[2].asp
%HOMEPATH%\Local Settings\Temporary Internet Files\Content.IE5\YPORKZYZ\serverlist[1].asp
%HOMEPATH%\Local Settings\Temporary Internet Files\Content.IE5\2VAZY7AN\serverlist[1].asp

Удаляет следующие файлы:

%HOMEPATH%\Local Settings\Temporary Internet Files\Content.IE5\KHMHGZ4F\serverlist[3].asp
%HOMEPATH%\Local Settings\Temporary Internet Files\Content.IE5\2VAZY7AN\serverlist[2].asp
%HOMEPATH%\Local Settings\Temporary Internet Files\Content.IE5\2VAZY7AN\serverlist[3].asp
%HOMEPATH%\Local Settings\Temporary Internet Files\Content.IE5\YPORKZYZ\serverlist[2].asp
%HOMEPATH%\Local Settings\Temporary Internet Files\Content.IE5\YPORKZYZ\serverlist[1].asp
%HOMEPATH%\Local Settings\Temporary Internet Files\Content.IE5\KHMHGZ4F\serverlist[2].asp
%HOMEPATH%\Local Settings\Temporary Internet Files\Content.IE5\2VAZY7AN\serverlist[1].asp
%HOMEPATH%\Local Settings\Temporary Internet Files\Content.IE5\U98D4X8H\serverlist[1].asp
%HOMEPATH%\Local Settings\Temporary Internet Files\Content.IE5\U98D4X8H\serverlist[2].asp
%HOMEPATH%\Local Settings\Temporary Internet Files\Content.IE5\U98D4X8H\serverlist[3].asp

Сетевая активность:

Подключается к:

'ko###server.kr':80
'ko###rver.com':80
'ho###erver.kr':80
'du##p.com':80
'ma###erver.kr':80
'ma###alue.com':80
'localhost':1036
'it###rice.kr':80
'ma##top.kr':80
'do####server.co.kr':80

TCP:

Запросы HTTP GET:

ho###erver.kr/Config/serverlist.asp?n=#
ko###server.kr/Config/serverlist.asp?n=#
du##p.com/Config/serverlist.asp?n=#
ma###erver.kr/Config/serverlist.asp?n=#
ko###rver.com/Config/serverlist.asp?n=#
it###rice.kr/Config/serverlist.asp?n=#
ma###alue.com/Config/serverlist.asp?n=#
ma##top.kr/Config/serverlist.asp?n=#
do####server.co.kr/Config/serverlist.asp?n=#

UDP:

DNS ASK ho###erver.kr
DNS ASK ko###server.kr
DNS ASK du##p.com
DNS ASK ma###erver.kr
DNS ASK ko###rver.com
DNS ASK it###rice.kr
DNS ASK ma###alue.com
DNS ASK ma##top.kr
DNS ASK do####server.co.kr

Другое:

Ищет следующие окна:

ClassName: 'Indicator' WindowName: '(null)'

Технологии

Термины

Обучение и просвещение

Мифы

Техническая информация

Рекомендации по лечению

Демо бесплатно на 14 дней