Trojan.StartPage.47568

Technical Information

Malicious functions:

Executes the following:

<SYSTEM32>\reg.exe query "hkey_current_user\software\microsoft\internet explorer\urlsearchhooks" /v {9516eb1c-ac77-492d-8fd6-a05afac9ea6e}
<SYSTEM32>\reg.exe query "hkey_current_user\software\microsoft\internet explorer\urlsearchhooks" /v {952ec978-4920-4f18-8237-91d69b54c580}
<SYSTEM32>\reg.exe query "hkey_current_user\software\microsoft\internet explorer\urlsearchhooks" /v {960df771-cfcb-4e53-a5b5-6ef2bbe6e706}
<SYSTEM32>\reg.exe query "hkey_current_user\software\microsoft\internet explorer\urlsearchhooks" /v {9198cec1-4dd8-95e7-1053-f5aafdbbe0fb}
<SYSTEM32>\reg.exe query "hkey_current_user\software\microsoft\internet explorer\urlsearchhooks" /v {92f02779-6d88-4958-8ad3-83c12d86adc7}
<SYSTEM32>\reg.exe query "hkey_current_user\software\microsoft\internet explorer\urlsearchhooks" /v {9384bd4c-dd14-4be9-80f7-f6277511e4f5}
<SYSTEM32>\reg.exe query "hkey_current_user\software\microsoft\internet explorer\urlsearchhooks" /v {96bbdfe1-2951-4f81-811e-31df6436a329}
<SYSTEM32>\reg.exe query "hkey_current_user\software\microsoft\internet explorer\urlsearchhooks" /v {97788fc1-b4b7-49dc-b4ad-51bfcd27a7ce}
<SYSTEM32>\reg.exe query "hkey_current_user\software\microsoft\internet explorer\urlsearchhooks" /v {977ae9cc-af83-45e8-9e03-e2798216e2d5}
<SYSTEM32>\reg.exe query "hkey_current_user\software\microsoft\internet explorer\urlsearchhooks" /v {965b54b0-71e0-4611-8de7-f73fa0b20e26}
<SYSTEM32>\reg.exe query "hkey_current_user\software\microsoft\internet explorer\urlsearchhooks" /v {965b9dbe-b104-44ac-950a-8a5f97aff439}
<SYSTEM32>\reg.exe query "hkey_current_user\software\microsoft\internet explorer\urlsearchhooks" /v {966688f9-d3ef-4253-8e38-993425ecc19a}
<SYSTEM32>\reg.exe query "hkey_current_user\software\microsoft\internet explorer\urlsearchhooks" /v {9157f3b1-4705-4897-9525-a1084eeaf066}
<SYSTEM32>\reg.exe query "hkey_current_user\software\microsoft\internet explorer\urlsearchhooks" /v {8919c7f3-4828-4537-b8c0-f1ac0d58414e}
<SYSTEM32>\reg.exe query "hkey_current_user\software\microsoft\internet explorer\urlsearchhooks" /v {8adedf00-7f37-4c93-a4c2-c581a6ec7ffa}
<SYSTEM32>\reg.exe query "hkey_current_user\software\microsoft\internet explorer\urlsearchhooks" /v {8bbc3544-88af-41e3-944f-f6d114a1f36a}
<SYSTEM32>\reg.exe query "hkey_current_user\software\microsoft\internet explorer\urlsearchhooks" /v {867dd841-5bf7-44ca-8426-c5a6eda00735}
<SYSTEM32>\reg.exe query "hkey_current_user\software\microsoft\internet explorer\urlsearchhooks" /v {870bf8e0-8513-4c4c-963d-497cde4385ca}
<SYSTEM32>\reg.exe query "hkey_current_user\software\microsoft\internet explorer\urlsearchhooks" /v {8769adce-dba5-48e9-afb5-67b12cdf2e61}
<SYSTEM32>\reg.exe query "hkey_current_user\software\microsoft\internet explorer\urlsearchhooks" /v {8e9cf769-3d3b-40eb-9e2d-76e7a205e4d2}
<SYSTEM32>\reg.exe query "hkey_current_user\software\microsoft\internet explorer\urlsearchhooks" /v {8eab99c9-f9ec-4b64-a4ba-d9bcae8779c2}
<SYSTEM32>\reg.exe query "hkey_current_user\software\microsoft\internet explorer\urlsearchhooks" /v {8f2505e3-85c6-4119-86a2-8a875d411353}
<SYSTEM32>\reg.exe query "hkey_current_user\software\microsoft\internet explorer\urlsearchhooks" /v {8c5878d0-6106-423b-aaa8-144c143dbf44}
<SYSTEM32>\reg.exe query "hkey_current_user\software\microsoft\internet explorer\urlsearchhooks" /v {8cabb6cf-c987-4b4d-b189-7fbbec1777b7}
<SYSTEM32>\reg.exe query "hkey_current_user\software\microsoft\internet explorer\urlsearchhooks" /v {8dec4b69-27c4-405d-a37d-8d45c83f66ab}
<SYSTEM32>\reg.exe query "hkey_current_user\software\microsoft\internet explorer\urlsearchhooks" /v {97c1a769-26cc-4cf5-9546-7bc063a5800a}
<SYSTEM32>\reg.exe query "hkey_current_user\software\microsoft\internet explorer\urlsearchhooks" /v {a057a204-bacc-4d26-8287-79a187e26987}
<SYSTEM32>\reg.exe query "hkey_current_user\software\microsoft\internet explorer\urlsearchhooks" /v {a057a204-bacc-4d26-9e83-2db586e27190}
<SYSTEM32>\reg.exe query "hkey_current_user\software\microsoft\internet explorer\urlsearchhooks" /v {a057a204-bacc-4d26-b0f7-49f8ccab3ed4}
<SYSTEM32>\reg.exe query "hkey_current_user\software\microsoft\internet explorer\urlsearchhooks" /v {9d425283-d487-4337-bab6-ab8354a81457}
<SYSTEM32>\reg.exe query "hkey_current_user\software\microsoft\internet explorer\urlsearchhooks" /v {9d717f81-9148-4f12-8568-69135f087db0}
<SYSTEM32>\reg.exe query "hkey_current_user\software\microsoft\internet explorer\urlsearchhooks" /v {9e131a93-eed7-4beb-b015-a0adb30b5646}
<SYSTEM32>\reg.exe query "hkey_current_user\software\microsoft\internet explorer\urlsearchhooks" /v {a16227a8-ce99-4ca3-bb59-7b2a80e8881a}
<SYSTEM32>\reg.exe query "hkey_current_user\software\microsoft\internet explorer\urlsearchhooks" /v {a27007d0-bec0-4df7-abf8-54ae0b833ce8}
<SYSTEM32>\reg.exe query "hkey_current_user\software\microsoft\internet explorer\urlsearchhooks" /v {a37ec2d3-f094-466d-b833-d3da89e3a00c}
<SYSTEM32>\reg.exe query "hkey_current_user\software\microsoft\internet explorer\urlsearchhooks" /v {a057a204-bacc-4d26-b2f2-48f8ccab3ed4}
<SYSTEM32>\reg.exe query "hkey_current_user\software\microsoft\internet explorer\urlsearchhooks" /v {a09ab6eb-31b5-454c-97ec-9b294d92ee2a}
<SYSTEM32>\reg.exe query "hkey_current_user\software\microsoft\internet explorer\urlsearchhooks" /v {a1489c85-4f6f-48c4-ac9e-18b63af4703e}
<SYSTEM32>\reg.exe query "hkey_current_user\software\microsoft\internet explorer\urlsearchhooks" /v {9d2a731e-dd13-48c9-a792-b447df9e880a}
<SYSTEM32>\reg.exe query "hkey_current_user\software\microsoft\internet explorer\urlsearchhooks" /v {98b05c0a-63da-465a-aef4-b04c8d02eb23}
<SYSTEM32>\reg.exe query "hkey_current_user\software\microsoft\internet explorer\urlsearchhooks" /v {98bbb178-3a17-72fb-702d-f94675745d22}
<SYSTEM32>\reg.exe query "hkey_current_user\software\microsoft\internet explorer\urlsearchhooks" /v {99079a25-328f-4bd4-be04-00955acaa0a7}
<SYSTEM32>\reg.exe query "hkey_current_user\software\microsoft\internet explorer\urlsearchhooks" /v {97f2ff5b-260c-4ccf-834a-2dda4e29e39e}
<SYSTEM32>\reg.exe query "hkey_current_user\software\microsoft\internet explorer\urlsearchhooks" /v {986488af-13d5-9ddf-4fef-9fb88698cfc1}
<SYSTEM32>\reg.exe query "hkey_current_user\software\microsoft\internet explorer\urlsearchhooks" /v {98889811-442d-49dd-99d7-dc866be87dbc}
<SYSTEM32>\reg.exe query "hkey_current_user\software\microsoft\internet explorer\urlsearchhooks" /v {9bf134fa-24ef-4a72-80e3-5b6e5e32d7ff}
<SYSTEM32>\reg.exe query "hkey_current_user\software\microsoft\internet explorer\urlsearchhooks" /v {9d09c443-6ef6-446e-bbbe-2e79b6e11f57}
<SYSTEM32>\reg.exe query "hkey_current_user\software\microsoft\internet explorer\urlsearchhooks" /v {9d19c405-ba93-461b-871f-97992cc45972}
<SYSTEM32>\reg.exe query "hkey_current_user\software\microsoft\internet explorer\urlsearchhooks" /v {9afa62f3-ce93-41bd-a533-5c8cf81d2178}
<SYSTEM32>\reg.exe query "hkey_current_user\software\microsoft\internet explorer\urlsearchhooks" /v {9afb8248-617f-460d-9366-d71cdeda3179}
<SYSTEM32>\reg.exe query "hkey_current_user\software\microsoft\internet explorer\urlsearchhooks" /v {9bb47c17-9c68-4bb3-b188-dd9af0fd2406}
<SYSTEM32>\reg.exe query "hkey_current_user\software\microsoft\internet explorer\urlsearchhooks" /v {7459201c-d0a4-4e78-b390-5da3b160e650}
<SYSTEM32>\reg.exe query "hkey_current_user\software\microsoft\internet explorer\urlsearchhooks" /v {7473b6bd-4691-4744-a82b-7854eb3d70b6}
<SYSTEM32>\reg.exe query "hkey_current_user\software\microsoft\internet explorer\urlsearchhooks" /v {7473d298-b7bb-4f24-ae82-7e2ce94bb6a9}
<SYSTEM32>\reg.exe query "hkey_current_user\software\microsoft\internet explorer\urlsearchhooks" /v {6e8bf012-2c85-4834-b10a-1b31af173d70}
<SYSTEM32>\reg.exe query "hkey_current_user\software\microsoft\internet explorer\urlsearchhooks" /v {716bee2b-1fa3-40bc-b5a9-28056d025863}
<SYSTEM32>\reg.exe query "hkey_current_user\software\microsoft\internet explorer\urlsearchhooks" /v {72ceae02-df9c-49f3-9689-10d1b82dc343}
<SYSTEM32>\reg.exe query "hkey_current_user\software\microsoft\internet explorer\urlsearchhooks" /v {77550365-037e-4e23-8274-4869fa6ef0ef}
<SYSTEM32>\reg.exe query "hkey_current_user\software\microsoft\internet explorer\urlsearchhooks" /v {77b97866-f977-451a-8285-f6bc84601c8a}
<SYSTEM32>\reg.exe query "hkey_current_user\software\microsoft\internet explorer\urlsearchhooks" /v {77bfcf1d-6210-4e9d-8fb9-91ec8eae6159}
<SYSTEM32>\reg.exe query "hkey_current_user\software\microsoft\internet explorer\urlsearchhooks" /v {75a4d144-506d-4be5-81db-ec7da1e7f840}
<SYSTEM32>\reg.exe query "hkey_current_user\software\microsoft\internet explorer\urlsearchhooks" /v {75ebb0aa-4214-4cb4-90ec-e3e07ecd04f7}
<SYSTEM32>\reg.exe query "hkey_current_user\software\microsoft\internet explorer\urlsearchhooks" /v {770720c8-c640-43ec-b9f6-6de6d151428b}
<SYSTEM32>\reg.exe query "hkey_current_user\software\microsoft\internet explorer\urlsearchhooks" /v {6e658341-f119-46ec-a419-3870ae7063ca}
<SYSTEM32>\reg.exe query "hkey_current_user\software\microsoft\internet explorer\urlsearchhooks" /v {6b622484-951a-4865-8bb3-f273778f4be8}
<SYSTEM32>\reg.exe query "hkey_current_user\software\microsoft\internet explorer\urlsearchhooks" /v {6c97a91e-4524-4019-86af-2aa2d567bf5c}
<SYSTEM32>\reg.exe query "hkey_current_user\software\microsoft\internet explorer\urlsearchhooks" /v {6d24d459-619f-48b9-8f0f-d13bef174b1a}
<SYSTEM32>\reg.exe query "hkey_current_user\software\microsoft\internet explorer\urlsearchhooks" /v {6a342a32-ed1e-4a94-92b0-b51bfa4ae8a9}
<SYSTEM32>\reg.exe query "hkey_current_user\software\microsoft\internet explorer\urlsearchhooks" /v {6aabeadd-40f1-46fe-a46e-73c3cb8cda6f}
<SYSTEM32>\reg.exe query "hkey_current_user\software\microsoft\internet explorer\urlsearchhooks" /v {6ac0bb10-c922-45e2-857d-2a368fe749e5}
<SYSTEM32>\reg.exe query "hkey_current_user\software\microsoft\internet explorer\urlsearchhooks" /v {6df32348-ad77-4392-859f-0e7440e31f08}
<SYSTEM32>\reg.exe query "hkey_current_user\software\microsoft\internet explorer\urlsearchhooks" /v {6e13d095-45c3-4271-9475-f3b48227dd9f}
<SYSTEM32>\reg.exe query "hkey_current_user\software\microsoft\internet explorer\urlsearchhooks" /v {6e13dde1-2b6e-46ce-8b66-dc8bf36f6b99}
<SYSTEM32>\reg.exe query "hkey_current_user\software\microsoft\internet explorer\urlsearchhooks" /v {6d72eee8-fc31-41bc-9fa8-181971984311}
<SYSTEM32>\reg.exe query "hkey_current_user\software\microsoft\internet explorer\urlsearchhooks" /v {6db6cafc-699a-4626-8284-e74217d6886c}
<SYSTEM32>\reg.exe query "hkey_current_user\software\microsoft\internet explorer\urlsearchhooks" /v {6de481f0-7179-4ad6-a857-3dcbcfbb24d4}
<SYSTEM32>\reg.exe query "hkey_current_user\software\microsoft\internet explorer\urlsearchhooks" /v {780044d1-e8c0-488f-8059-4522ddbfc2ea}
<SYSTEM32>\reg.exe query "hkey_current_user\software\microsoft\internet explorer\urlsearchhooks" /v {80ad36e4-7d72-40f4-8505-b7750c8f20bd}
<SYSTEM32>\reg.exe query "hkey_current_user\software\microsoft\internet explorer\urlsearchhooks" /v {80b869cd-dda8-41d4-a98a-94b478146a89}
<SYSTEM32>\reg.exe query "hkey_current_user\software\microsoft\internet explorer\urlsearchhooks" /v {81323526-cbf9-4b05-8ef8-d3b2bdac5f1a}
<SYSTEM32>\reg.exe query "hkey_current_user\software\microsoft\internet explorer\urlsearchhooks" /v {7ff99715-3016-4381-84ce-e4e4c9673020}
<SYSTEM32>\reg.exe query "hkey_current_user\software\microsoft\internet explorer\urlsearchhooks" /v {80701f7e-0579-49ad-a653-8137886b62e2}
<SYSTEM32>\reg.exe query "hkey_current_user\software\microsoft\internet explorer\urlsearchhooks" /v {808f71a1-1d74-4364-b0e3-5a66ce3fca4e}
<SYSTEM32>\reg.exe query "hkey_current_user\software\microsoft\internet explorer\urlsearchhooks" /v {855f3b16-6d32-4fe6-8a56-bbb695989046}
<SYSTEM32>\reg.exe query "hkey_current_user\software\microsoft\internet explorer\urlsearchhooks" /v {85c465d3-0b13-4b0f-b967-29fdcb334a6d}
<SYSTEM32>\reg.exe query "hkey_current_user\software\microsoft\internet explorer\urlsearchhooks" /v {867605cd-a811-4a9d-8cdf-ba8c795f261e}
<SYSTEM32>\reg.exe query "hkey_current_user\software\microsoft\internet explorer\urlsearchhooks" /v {81930028-d079-7e41-9f5b-3df61bc8f18d}
<SYSTEM32>\reg.exe query "hkey_current_user\software\microsoft\internet explorer\urlsearchhooks" /v {83ca0721-e93d-4279-aca3-1222f4ccfd80}
<SYSTEM32>\reg.exe query "hkey_current_user\software\microsoft\internet explorer\urlsearchhooks" /v {842ca4a3-9563-4a96-a810-cff61c48c613}
<SYSTEM32>\reg.exe query "hkey_current_user\software\microsoft\internet explorer\urlsearchhooks" /v {7fd70832-c4b1-11e0-bd9f-e839df45899e}
<SYSTEM32>\reg.exe query "hkey_current_user\software\microsoft\internet explorer\urlsearchhooks" /v {7a66eb91-f7d3-4de2-8ca9-12c12af3d5f2}
<SYSTEM32>\reg.exe query "hkey_current_user\software\microsoft\internet explorer\urlsearchhooks" /v {7a89a7e3-6add-4ef9-8ee7-a3c3b7d83bb0}
<SYSTEM32>\reg.exe query "hkey_current_user\software\microsoft\internet explorer\urlsearchhooks" /v {7b25bb62-232f-4c68-a156-3f4106d9bce3}
<SYSTEM32>\reg.exe query "hkey_current_user\software\microsoft\internet explorer\urlsearchhooks" /v {78875f5c-a685-4405-8dc5-d48dc65452b0}
<SYSTEM32>\reg.exe query "hkey_current_user\software\microsoft\internet explorer\urlsearchhooks" /v {78d663d2-97f1-4a09-bd41-b75cb6989211}
<SYSTEM32>\reg.exe query "hkey_current_user\software\microsoft\internet explorer\urlsearchhooks" /v {79c84c34-000e-460d-a310-f334b3b3272f}
<SYSTEM32>\reg.exe query "hkey_current_user\software\microsoft\internet explorer\urlsearchhooks" /v {7d9e1adc-7db1-4eaf-b6c7-7e062074e6be}
<SYSTEM32>\reg.exe query "hkey_current_user\software\microsoft\internet explorer\urlsearchhooks" /v {7da17d5a-5718-4130-a605-fc316c827836}
<SYSTEM32>\reg.exe query "hkey_current_user\software\microsoft\internet explorer\urlsearchhooks" /v {7ed248d4-81ea-4a93-b3eb-5b1fe442d286}
<SYSTEM32>\reg.exe query "hkey_current_user\software\microsoft\internet explorer\urlsearchhooks" /v {7bd9e2a5-9f96-4b8f-8fc3-56ef2e3e7f28}
<SYSTEM32>\reg.exe query "hkey_current_user\software\microsoft\internet explorer\urlsearchhooks" /v {7c5c0f58-e061-457d-9033-77307f5ed00c}
<SYSTEM32>\reg.exe query "hkey_current_user\software\microsoft\internet explorer\urlsearchhooks" /v {7cb7e3c9-86c4-4832-82bb-e47f69062514}
<SYSTEM32>\reg.exe query "hkey_current_user\software\microsoft\internet explorer\urlsearchhooks" /v {c4f54343-949a-47d4-8d45-460b79426fe5}
<SYSTEM32>\reg.exe query "hkey_current_user\software\microsoft\internet explorer\urlsearchhooks" /v {c4f5e343-9494-47e4-8e35-440b49e25fd5}
<SYSTEM32>\reg.exe query "hkey_current_user\software\microsoft\internet explorer\urlsearchhooks" /v {c530ad12-c5d8-4b97-9a69-66774a46c31e}
<SYSTEM32>\reg.exe query "hkey_current_user\software\microsoft\internet explorer\urlsearchhooks" /v {c2db4fe6-8409-45ce-8010-189a7b5cce86}
<SYSTEM32>\reg.exe query "hkey_current_user\software\microsoft\internet explorer\urlsearchhooks" /v {c40c6a69-a8f4-4f69-899b-69cfb510df13}
<SYSTEM32>\reg.exe query "hkey_current_user\software\microsoft\internet explorer\urlsearchhooks" /v {c4672f26-5862-40fe-94b8-7b35285daf82}
<SYSTEM32>\reg.exe query "hkey_current_user\software\microsoft\internet explorer\urlsearchhooks" /v {c87fc351-a80d-43e9-9a86-cf1e29dc443a}
<SYSTEM32>\reg.exe query "hkey_current_user\software\microsoft\internet explorer\urlsearchhooks" /v {c8921b66-3f36-465d-a699-6b13ca3e3798}
<SYSTEM32>\reg.exe query "hkey_current_user\software\microsoft\internet explorer\urlsearchhooks" /v {c8de8400-19cf-4732-9c77-f2cedc4476ca}
<SYSTEM32>\reg.exe query "hkey_current_user\software\microsoft\internet explorer\urlsearchhooks" /v {c584a48a-4dde-4ad5-b79d-be61a0efe5ec}
<SYSTEM32>\reg.exe query "hkey_current_user\software\microsoft\internet explorer\urlsearchhooks" /v {c75b2b36-b565-42b9-8ef5-dffad4ba08ae}
<SYSTEM32>\reg.exe query "hkey_current_user\software\microsoft\internet explorer\urlsearchhooks" /v {c7664e05-ac93-4704-b90b-976b9049741a}
<SYSTEM32>\reg.exe query "hkey_current_user\software\microsoft\internet explorer\urlsearchhooks" /v {c2d64ff7-0ab8-4263-89c9-ea3b0f8f050c}
<SYSTEM32>\reg.exe query "hkey_current_user\software\microsoft\internet explorer\urlsearchhooks" /v {bdd4d98c-2758-4823-89b7-6d5925caab67}
<SYSTEM32>\reg.exe query "hkey_current_user\software\microsoft\internet explorer\urlsearchhooks" /v {be7a24f5-69cb-4708-b77b-b1eda6043b95}
<SYSTEM32>\reg.exe query "hkey_current_user\software\microsoft\internet explorer\urlsearchhooks" /v {bf7380fa-e3b4-4db2-af3e-9d8783a45bfc}
<SYSTEM32>\reg.exe query "hkey_current_user\software\microsoft\internet explorer\urlsearchhooks" /v {bbabdc90-f3d5-4801-863a-ee6ae529862d}
<SYSTEM32>\reg.exe query "hkey_current_user\software\microsoft\internet explorer\urlsearchhooks" /v {bcf958b0-4288-49ec-82c2-12de57ffda89}
<SYSTEM32>\reg.exe query "hkey_current_user\software\microsoft\internet explorer\urlsearchhooks" /v {bdb69379-802f-4eaf-b541-f8de92dd98db}
<SYSTEM32>\reg.exe query "hkey_current_user\software\microsoft\internet explorer\urlsearchhooks" /v {c0631116-755e-4664-80ed-a7c8c0cc6c3e}
<SYSTEM32>\reg.exe query "hkey_current_user\software\microsoft\internet explorer\urlsearchhooks" /v {c0cea572-2978-4dfc-a672-8100ff0e276a}
<SYSTEM32>\reg.exe query "hkey_current_user\software\microsoft\internet explorer\urlsearchhooks" /v {c10dc1f4-ccdf-4224-a24d-b23afc3573c8}
<SYSTEM32>\reg.exe query "hkey_current_user\software\microsoft\internet explorer\urlsearchhooks" /v {bfb5f154-9212-46f3-b547-ac6106030a54}
<SYSTEM32>\reg.exe query "hkey_current_user\software\microsoft\internet explorer\urlsearchhooks" /v {bfcd67b9-dbc3-498f-8a1a-8ea2c1c0cfdd}
<SYSTEM32>\reg.exe query "hkey_current_user\software\microsoft\internet explorer\urlsearchhooks" /v {bffed5ca-8bdf-47cc-aed0-23f4e6d77732}
<SYSTEM32>\reg.exe query "hkey_current_user\software\microsoft\internet explorer\urlsearchhooks" /v {c99fdc39-a1ae-4b24-8d71-e5274f8d7c54}
<SYSTEM32>\reg.exe query "hkey_current_user\software\microsoft\internet explorer\urlsearchhooks" /v {d2a2595c-4fe4-4315-aa9b-19dbd6271b71}
<SYSTEM32>\reg.exe query "hkey_current_user\software\microsoft\internet explorer\urlsearchhooks" /v {d2f8f919-690b-4ea2-9fa7-a203d1e04f75}
<SYSTEM32>\reg.exe query "hkey_current_user\software\microsoft\internet explorer\urlsearchhooks" /v {d40b90b4-d3b1-4d6b-a5d7-dc041c1b76c0}
<SYSTEM32>\reg.exe query "hkey_current_user\software\microsoft\internet explorer\urlsearchhooks" /v {d113a9f6-7eb0-4005-abbf-8a633bab6e8b}
<SYSTEM32>\reg.exe query "hkey_current_user\software\microsoft\internet explorer\urlsearchhooks" /v {d18f43e6-7c9f-4e9c-95c2-179ef98645d7}
<SYSTEM32>\reg.exe query "hkey_current_user\software\microsoft\internet explorer\urlsearchhooks" /v {d22b76bb-abbd-4eb6-9bbb-f387bf27f76b}
<SYSTEM32>\reg.exe query "hkey_current_user\software\microsoft\internet explorer\urlsearchhooks" /v {d7014fc4-bdf0-4fba-9b6b-a1e7afda6bcc}
<SYSTEM32>\reg.exe query "hkey_current_user\software\microsoft\internet explorer\urlsearchhooks" /v {d71ccd9d-3ae6-46ca-b3f5-161bcf51a184}
<SYSTEM32>\reg.exe query "hkey_current_user\software\microsoft\internet explorer\urlsearchhooks" /v {d7ee8177-d51e-4f89-92b6-83ea2ec40800}
<SYSTEM32>\reg.exe query "hkey_current_user\software\microsoft\internet explorer\urlsearchhooks" /v {d591a8af-267a-4626-ab5e-b37f643b7046}
<SYSTEM32>\reg.exe query "hkey_current_user\software\microsoft\internet explorer\urlsearchhooks" /v {d67575b2-85e2-4a33-9ff3-1745417c467b}
<SYSTEM32>\reg.exe query "hkey_current_user\software\microsoft\internet explorer\urlsearchhooks" /v {d6bbfcc2-f487-40f8-bc02-7bba9e4d000f}
<SYSTEM32>\reg.exe query "hkey_current_user\software\microsoft\internet explorer\urlsearchhooks" /v {d0f46340-3fac-4691-9f97-1f98d96bf887}
<SYSTEM32>\reg.exe query "hkey_current_user\software\microsoft\internet explorer\urlsearchhooks" /v {cc6a027b-c5fe-4e10-b67c-6ff850c04791}
<SYSTEM32>\reg.exe query "hkey_current_user\software\microsoft\internet explorer\urlsearchhooks" /v {cca00000-0000-0000-0000-000000000000}
<SYSTEM32>\reg.exe query "hkey_current_user\software\microsoft\internet explorer\urlsearchhooks" /v {cca222d2-396e-49d0-bd2b-bd76da682de4}
<SYSTEM32>\reg.exe query "hkey_current_user\software\microsoft\internet explorer\urlsearchhooks" /v {c9b68337-e93a-44ea-94dc-cb300ec06444}
<SYSTEM32>\reg.exe query "hkey_current_user\software\microsoft\internet explorer\urlsearchhooks" /v {ca60f577-1b28-41d6-8c78-c49e63304fcf}
<SYSTEM32>\reg.exe query "hkey_current_user\software\microsoft\internet explorer\urlsearchhooks" /v {cc0f2900-8a5b-4d0d-9e44-10435bc40774}
<SYSTEM32>\reg.exe query "hkey_current_user\software\microsoft\internet explorer\urlsearchhooks" /v {cebc24cd-bf4b-4694-a18a-6c6c8f610c50}
<SYSTEM32>\reg.exe query "hkey_current_user\software\microsoft\internet explorer\urlsearchhooks" /v {ced562ec-239d-460c-924e-283e501b3fd7}
<SYSTEM32>\reg.exe query "hkey_current_user\software\microsoft\internet explorer\urlsearchhooks" /v {cff4db9b-135f-47c0-9269-b4c6572fd61a}
<SYSTEM32>\reg.exe query "hkey_current_user\software\microsoft\internet explorer\urlsearchhooks" /v {cce665dd-f6dd-4808-968e-eaec971f70ef}
<SYSTEM32>\reg.exe query "hkey_current_user\software\microsoft\internet explorer\urlsearchhooks" /v {cdce4a40-a9a9-423b-86cc-db3b0f57d445}
<SYSTEM32>\reg.exe query "hkey_current_user\software\microsoft\internet explorer\urlsearchhooks" /v {ce18769b-c7fa-42d2-860d-17c4662c70ad}
<SYSTEM32>\reg.exe query "hkey_current_user\software\microsoft\internet explorer\urlsearchhooks" /v {aaa9c380-e19a-4436-88f6-02942c31cc9e}
<SYSTEM32>\reg.exe query "hkey_current_user\software\microsoft\internet explorer\urlsearchhooks" /v {acaa314b-eeba-48e4-ad47-84e31c44796c}
<SYSTEM32>\reg.exe query "hkey_current_user\software\microsoft\internet explorer\urlsearchhooks" /v {ad15e9b7-9d58-4a9e-a814-4f2dce79e96a}
<SYSTEM32>\reg.exe query "hkey_current_user\software\microsoft\internet explorer\urlsearchhooks" /v {a9bb9fa0-4122-4c75-bd9a-bc27db3f9155}
<SYSTEM32>\reg.exe query "hkey_current_user\software\microsoft\internet explorer\urlsearchhooks" /v {a9db719c-7156-415e-b49d-bad039de4f13}
<SYSTEM32>\reg.exe query "hkey_current_user\software\microsoft\internet explorer\urlsearchhooks" /v {aa024070-c3f1-437f-8ca8-011ecab53098}
<SYSTEM32>\reg.exe query "hkey_current_user\software\microsoft\internet explorer\urlsearchhooks" /v {af138c2e-c82b-40ea-811a-e5b9163e849f}
<SYSTEM32>\reg.exe query "hkey_current_user\software\microsoft\internet explorer\urlsearchhooks" /v {af148df4-f994-48e7-bd1d-10491a4270aa}
<SYSTEM32>\reg.exe query "hkey_current_user\software\microsoft\internet explorer\urlsearchhooks" /v {af8637b0-18e3-44d3-86b7-55e09d9c4261}
<SYSTEM32>\reg.exe query "hkey_current_user\software\microsoft\internet explorer\urlsearchhooks" /v {ad1cbec2-e590-4fdd-82c6-e54b6f837724}
<SYSTEM32>\reg.exe query "hkey_current_user\software\microsoft\internet explorer\urlsearchhooks" /v {ad5fa4d4-7a26-4987-a021-340676e0eda0}
<SYSTEM32>\reg.exe query "hkey_current_user\software\microsoft\internet explorer\urlsearchhooks" /v {ae5ace97-3d6d-4d36-8b69-04bea4c6979f}
<SYSTEM32>\reg.exe query "hkey_current_user\software\microsoft\internet explorer\urlsearchhooks" /v {a9b87bdc-5f30-4f77-8e96-e853434305fb}
<SYSTEM32>\reg.exe query "hkey_current_user\software\microsoft\internet explorer\urlsearchhooks" /v {a5614042-01d9-4e11-91bc-187eeff87fee}
<SYSTEM32>\reg.exe query "hkey_current_user\software\microsoft\internet explorer\urlsearchhooks" /v {a6790aa5-c6c7-4bcf-a46d-0fdac4ea90eb}
<SYSTEM32>\reg.exe query "hkey_current_user\software\microsoft\internet explorer\urlsearchhooks" /v {a6ad3c63-6aa8-1a31-e917-2646159aec72}
<SYSTEM32>\reg.exe query "hkey_current_user\software\microsoft\internet explorer\urlsearchhooks" /v {a4c272ec-ed9e-4ace-a6f2-9558c7f29ef3}
<SYSTEM32>\reg.exe query "hkey_current_user\software\microsoft\internet explorer\urlsearchhooks" /v {a51e8f96-2c2c-45bd-a8d5-f9fa9abb45ab}
<SYSTEM32>\reg.exe query "hkey_current_user\software\microsoft\internet explorer\urlsearchhooks" /v {a549a1af-dd1f-4c70-88fd-009de7fab4d8}
<SYSTEM32>\reg.exe query "hkey_current_user\software\microsoft\internet explorer\urlsearchhooks" /v {a80b8dfe-d7e5-43c3-96cc-ae406cdd7ece}
<SYSTEM32>\reg.exe query "hkey_current_user\software\microsoft\internet explorer\urlsearchhooks" /v {a876e312-7d08-401a-b7a6-fafc5dc2f292}
<SYSTEM32>\reg.exe query "hkey_current_user\software\microsoft\internet explorer\urlsearchhooks" /v {a916eefe-6a17-4d7d-a131-2738b260bb55}
<SYSTEM32>\reg.exe query "hkey_current_user\software\microsoft\internet explorer\urlsearchhooks" /v {a6d0f379-4aa6-429d-a9b8-95cfb9669e8f}
<SYSTEM32>\reg.exe query "hkey_current_user\software\microsoft\internet explorer\urlsearchhooks" /v {a6e71e28-43cb-423e-b415-b7c00d77902e}
<SYSTEM32>\reg.exe query "hkey_current_user\software\microsoft\internet explorer\urlsearchhooks" /v {a798e2b4-b6a0-4b96-8c53-8ec7a3b0895a}
<SYSTEM32>\reg.exe query "hkey_current_user\software\microsoft\internet explorer\urlsearchhooks" /v {af8af886-c38b-4465-9d80-16370f3167e3}
<SYSTEM32>\reg.exe query "hkey_current_user\software\microsoft\internet explorer\urlsearchhooks" /v {b7f6fef8-beb4-4e82-8df9-1ac1ecc1e9d0}
<SYSTEM32>\reg.exe query "hkey_current_user\software\microsoft\internet explorer\urlsearchhooks" /v {b8276a94-891d-453c-9ff3-715c042a2575}
<SYSTEM32>\reg.exe query "hkey_current_user\software\microsoft\internet explorer\urlsearchhooks" /v {b851a863-1e99-429a-9a18-c510b2ba7023}
<SYSTEM32>\reg.exe query "hkey_current_user\software\microsoft\internet explorer\urlsearchhooks" /v {b753534d-4b4a-4a0d-b83d-b96a00402e17}
<SYSTEM32>\reg.exe query "hkey_current_user\software\microsoft\internet explorer\urlsearchhooks" /v {b7971660-a1ce-4fdd-b9e0-2c37d77afb0b}
<SYSTEM32>\reg.exe query "hkey_current_user\software\microsoft\internet explorer\urlsearchhooks" /v {b7d3e479-cc68-42b5-a338-938ece35f419}
<SYSTEM32>\reg.exe query "hkey_current_user\software\microsoft\internet explorer\urlsearchhooks" /v {ba23dafc-5a36-4bdd-9d69-ed60da9d6c78}
<SYSTEM32>\reg.exe query "hkey_current_user\software\microsoft\internet explorer\urlsearchhooks" /v {ba3ab6d6-5399-49f8-8bd0-c9892c2c4625}
<SYSTEM32>\reg.exe query "hkey_current_user\software\microsoft\internet explorer\urlsearchhooks" /v {ba9fa41a-1e92-4c5f-b08d-a1663ec0356e}
<SYSTEM32>\reg.exe query "hkey_current_user\software\microsoft\internet explorer\urlsearchhooks" /v {b88f0a3b-663c-4342-a7ce-2d6f81032897}
<SYSTEM32>\reg.exe query "hkey_current_user\software\microsoft\internet explorer\urlsearchhooks" /v {b9b14501-f78b-11e1-8270-b8ac6f996f26}
<SYSTEM32>\reg.exe query "hkey_current_user\software\microsoft\internet explorer\urlsearchhooks" /v {b9d4f481-db79-35c6-c548-d8c302837d6e}
<SYSTEM32>\reg.exe query "hkey_current_user\software\microsoft\internet explorer\urlsearchhooks" /v {b4de90bb-150d-4b33-95fe-6baac97e1c21}
<SYSTEM32>\reg.exe query "hkey_current_user\software\microsoft\internet explorer\urlsearchhooks" /v {b016900a-46f4-4e09-9c09-720f423a7fcf}
<SYSTEM32>\reg.exe query "hkey_current_user\software\microsoft\internet explorer\urlsearchhooks" /v {b106b661-3e1b-4015-af5c-195e909f35c6}
<SYSTEM32>\reg.exe query "hkey_current_user\software\microsoft\internet explorer\urlsearchhooks" /v {b1581d32-53b0-4397-ba43-234b6c5bdfc7}
<SYSTEM32>\reg.exe query "hkey_current_user\software\microsoft\internet explorer\urlsearchhooks" /v {afa0db72-d709-4aa1-88bf-28cd3d51869b}
<SYSTEM32>\reg.exe query "hkey_current_user\software\microsoft\internet explorer\urlsearchhooks" /v {afdbddaa-5d3f-42ee-b79c-185a7020515b}
<SYSTEM32>\reg.exe query "hkey_current_user\software\microsoft\internet explorer\urlsearchhooks" /v {afe43e80-0abc-4df2-81a0-3fe44b74abe8}
<SYSTEM32>\reg.exe query "hkey_current_user\software\microsoft\internet explorer\urlsearchhooks" /v {b3cd4fc6-f1b7-4c88-89ca-864561164a66}
<SYSTEM32>\reg.exe query "hkey_current_user\software\microsoft\internet explorer\urlsearchhooks" /v {b4023bda-c20b-492c-8c96-53c5ed79b6c2}
<SYSTEM32>\reg.exe query "hkey_current_user\software\microsoft\internet explorer\urlsearchhooks" /v {b4167c71-ad82-43b5-9244-7da47862a69a}
<SYSTEM32>\reg.exe query "hkey_current_user\software\microsoft\internet explorer\urlsearchhooks" /v {b16632f1-24e0-4d99-a68d-70bfb6447c48}
<SYSTEM32>\reg.exe query "hkey_current_user\software\microsoft\internet explorer\urlsearchhooks" /v {b25f0e77-8cbf-4d95-8492-28adb72b5e5d}
<SYSTEM32>\reg.exe query "hkey_current_user\software\microsoft\internet explorer\urlsearchhooks" /v {b26551bb-9a6f-4f52-9fff-60a65ce54608}
<SYSTEM32>\reg.exe query "hkey_current_user\software\microsoft\internet explorer\urlsearchhooks" /v {14ceeaff-96dd-4101-ae37-d5ecdc23c3f6}
<SYSTEM32>\reg.exe query "hkey_current_user\software\microsoft\internet explorer\urlsearchhooks" /v {1564bbf5-15d3-41d2-95c6-bf3686ae6cd9}
<SYSTEM32>\reg.exe query "hkey_current_user\software\microsoft\internet explorer\urlsearchhooks" /v {1631550f-191d-4826-b069-d9439253d926}
<SYSTEM32>\reg.exe query "hkey_current_user\software\microsoft\internet explorer\urlsearchhooks" /v {1185823f-f22f-4027-80e5-4f68acd5de5e}
<SYSTEM32>\reg.exe query "hkey_current_user\software\microsoft\internet explorer\urlsearchhooks" /v {1392b8d2-5c05-419f-a8f6-b9f15a596612}
<SYSTEM32>\reg.exe query "hkey_current_user\software\microsoft\internet explorer\urlsearchhooks" /v {13c9f1f9-2322-4d5c-81df-6d4bf8476ba4}
<SYSTEM32>\reg.exe query "hkey_current_user\software\microsoft\internet explorer\urlsearchhooks" /v {17de5e5e-bfe3-4e83-8e1f-8755795359ec}
<SYSTEM32>\reg.exe query "hkey_current_user\software\microsoft\internet explorer\urlsearchhooks" /v {17f75c4b-1ffa-43b6-99cd-c93bf2641add}
<SYSTEM32>\reg.exe query "hkey_current_user\software\microsoft\internet explorer\urlsearchhooks" /v {184aa5e6-741d-464a-820e-94b3abc2f3b4}
<SYSTEM32>\reg.exe query "hkey_current_user\software\microsoft\internet explorer\urlsearchhooks" /v {167d9323-f7cc-48f5-948a-6f012831a69f}
<SYSTEM32>\reg.exe query "hkey_current_user\software\microsoft\internet explorer\urlsearchhooks" /v {16cdff19-861d-48e3-a751-d99a27784753}
<SYSTEM32>\reg.exe query "hkey_current_user\software\microsoft\internet explorer\urlsearchhooks" /v {171debeb-c3d4-40b7-ac73-056a5eba4a7e}
<SYSTEM32>\reg.exe query "hkey_current_user\software\microsoft\internet explorer\urlsearchhooks" /v {11111111-1111-1111-1111-110111691112}
<SYSTEM32>\reg.exe query "hkey_current_user\software\microsoft\internet explorer\urlsearchhooks" /v {0c2e529c-a82c-4ac6-8807-0b51f7ad7bb2}
<SYSTEM32>\reg.exe query "hkey_current_user\software\microsoft\internet explorer\urlsearchhooks" /v {0c483849-889d-4573-a21f-57d8585b430d}
<SYSTEM32>\reg.exe query "hkey_current_user\software\microsoft\internet explorer\urlsearchhooks" /v {0c5f997d-f664-4afb-9652-ea7fd92f383d}
<SYSTEM32>\reg.exe query "hkey_current_user\software\microsoft\internet explorer\urlsearchhooks" /v {09c554c3-109b-483c-a06b-f14172f1a947}
<SYSTEM32>\reg.exe query "hkey_current_user\software\microsoft\internet explorer\urlsearchhooks" /v {0bc6e3fa-78ef-4886-842c-5a1258c4455a}
<SYSTEM32>\reg.exe query "hkey_current_user\software\microsoft\internet explorer\urlsearchhooks" /v {0c2e030d-6ee7-44d3-9826-54e62745d95d}
<SYSTEM32>\reg.exe query "hkey_current_user\software\microsoft\internet explorer\urlsearchhooks" /v {0da7bd04-8279-46d0-91ea-f7eb8cc275d9}
<SYSTEM32>\reg.exe query "hkey_current_user\software\microsoft\internet explorer\urlsearchhooks" /v {0ecdf796-c2dc-4d79-a620-cce0c0a66cc9}
<SYSTEM32>\reg.exe query "hkey_current_user\software\microsoft\internet explorer\urlsearchhooks" /v {10000000-1000-1000-1000-100000000000}
<SYSTEM32>\reg.exe query "hkey_current_user\software\microsoft\internet explorer\urlsearchhooks" /v {0cb66ba8-5e1f-4963-93d1-e1d6b78fe9a2}
<SYSTEM32>\reg.exe query "hkey_current_user\software\microsoft\internet explorer\urlsearchhooks" /v {0d7562ae-8ef6-416d-a838-ab665251703a}
<SYSTEM32>\reg.exe query "hkey_current_user\software\microsoft\internet explorer\urlsearchhooks" /v {0d80f1c5-d17b-4177-ac68-955f3ef9f191}
<SYSTEM32>\reg.exe query "hkey_current_user\software\microsoft\internet explorer\urlsearchhooks" /v {19480e4e-f264-4dfb-b991-c35664edbe49}
<SYSTEM32>\reg.exe query "hkey_current_user\software\microsoft\internet explorer\urlsearchhooks" /v {25d8bacf-3de2-4b48-ae22-d659b8d835b0}
<SYSTEM32>\reg.exe query "hkey_current_user\software\microsoft\internet explorer\urlsearchhooks" /v {25f97eb4-1c02-45ba-ba0c-e67aace64d4a}
<SYSTEM32>\reg.exe query "hkey_current_user\software\microsoft\internet explorer\urlsearchhooks" /v {26df2e07-6a86-4d94-bd24-a7d183f794ea}
<SYSTEM32>\reg.exe query "hkey_current_user\software\microsoft\internet explorer\urlsearchhooks" /v {2361de61-056e-4442-ad1b-b7fac11df3a0}
<SYSTEM32>\reg.exe query "hkey_current_user\software\microsoft\internet explorer\urlsearchhooks" /v {2388cb34-ae30-435f-86b7-6afd3a016f90}
<SYSTEM32>\reg.exe query "hkey_current_user\software\microsoft\internet explorer\urlsearchhooks" /v {25557344-d3f8-441e-bc05-6dd9872ef925}
<SYSTEM32>\reg.exe query "hkey_current_user\software\microsoft\internet explorer\urlsearchhooks" /v {28d23db1-ecd5-411d-828d-4ca547320182}
<SYSTEM32>\reg.exe query "hkey_current_user\software\microsoft\internet explorer\urlsearchhooks" /v {291bccc1-6890-484a-89d3-318c928dac1b}
<SYSTEM32>\reg.exe query "hkey_current_user\software\microsoft\internet explorer\urlsearchhooks" /v {2a0176fe-008b-4706-90f5-bba532a49731}
<SYSTEM32>\reg.exe query "hkey_current_user\software\microsoft\internet explorer\urlsearchhooks" /v {28188849-393f-42dc-bc29-676a2b78a059}
<SYSTEM32>\reg.exe query "hkey_current_user\software\microsoft\internet explorer\urlsearchhooks" /v {2877a654-1c9f-4cb5-8438-16022b2fdd9c}
<SYSTEM32>\reg.exe query "hkey_current_user\software\microsoft\internet explorer\urlsearchhooks" /v {28cfd934-9aad-4b84-947a-05e72cf655b1}
<SYSTEM32>\reg.exe query "hkey_current_user\software\microsoft\internet explorer\urlsearchhooks" /v {22e03916-85c5-44b0-8dc9-1830c11238d9}
<SYSTEM32>\reg.exe query "hkey_current_user\software\microsoft\internet explorer\urlsearchhooks" /v {1ac612ff-5065-4d98-8e76-66d2a34f7222}
<SYSTEM32>\reg.exe query "hkey_current_user\software\microsoft\internet explorer\urlsearchhooks" /v {1b5d40f4-4a4b-4202-89e8-eeba91293b3d}
<SYSTEM32>\reg.exe query "hkey_current_user\software\microsoft\internet explorer\urlsearchhooks" /v {1cbf31fc-3c23-4ba6-af16-2cec501bd837}
<SYSTEM32>\reg.exe query "hkey_current_user\software\microsoft\internet explorer\urlsearchhooks" /v {1962c5bc-e475-465b-823b-133e711bceb9}
<SYSTEM32>\reg.exe query "hkey_current_user\software\microsoft\internet explorer\urlsearchhooks" /v {1a615ea8-4c56-49ee-be83-f9a264b79997}
<SYSTEM32>\reg.exe query "hkey_current_user\software\microsoft\internet explorer\urlsearchhooks" /v {1a68b962-733c-46e5-ab75-a6d9796ea632}
<SYSTEM32>\reg.exe query "hkey_current_user\software\microsoft\internet explorer\urlsearchhooks" /v {1e9ae952-269d-422b-9eab-b12803b8e22b}
<SYSTEM32>\reg.exe query "hkey_current_user\software\microsoft\internet explorer\urlsearchhooks" /v {20b2f78b-e534-434e-b2d8-c77eaca12141}
<SYSTEM32>\reg.exe query "hkey_current_user\software\microsoft\internet explorer\urlsearchhooks" /v {2178c864-b8bc-41ae-a1fb-eb6a32f87eb1}
<SYSTEM32>\reg.exe query "hkey_current_user\software\microsoft\internet explorer\urlsearchhooks" /v {1d085c0a-e4f4-4f66-bdbf-4be51015bfc3}
<SYSTEM32>\reg.exe query "hkey_current_user\software\microsoft\internet explorer\urlsearchhooks" /v {1d0f7e4c-6dc1-90f8-4498-c4d7a97204c6}
<SYSTEM32>\reg.exe query "hkey_current_user\software\microsoft\internet explorer\urlsearchhooks" /v {1e369edc-f64b-484f-b76a-6fefcb883f84}
<SYSTEM32>\taskkill.exe /f /im uninstall.exe
<SYSTEM32>\taskkill.exe /f /im funmoodssrv.exe
<SYSTEM32>\taskkill.exe /f /im Iminent.Messengers.exe
<SYSTEM32>\taskkill.exe /f /im babylonhelper.exe
<SYSTEM32>\taskkill.exe /f /im babylontc.exe
<SYSTEM32>\taskkill.exe /f /im ClickOnceSetup.exe
<SYSTEM32>\taskkill.exe /f /im visicom_antiphishing.exe
<SYSTEM32>\taskkill.exe /f /im OptProReminder.exe
<SYSTEM32>\taskkill.exe /f /im DataMngrUI.exe
<SYSTEM32>\taskkill.exe /f /im Iminent.exe
<SYSTEM32>\taskkill.exe /f /im ExtensionUpdaterService.exe
<SYSTEM32>\taskkill.exe /f /im SweetIM.exe
<SYSTEM32>\taskkill.exe /f /im babylon.exe
<SYSTEM32>\reg.exe IMPORT C:\JRT\startpage_x86.reg
<SYSTEM32>\reg.exe query "HKEY_LOCAL_MACHINE\Software\Microsoft\Windows NT\CurrentVersion\ProfileList"
<SYSTEM32>\findstr.exe /ibc:"HKEY_LOCAL_MACHINE\Software\Microsoft\Windows NT\CurrentVersion\ProfileList\S-"
<SYSTEM32>\cmd.exe /c ""C:\JRT\get.bat" "
<SYSTEM32>\mode.com con cols=100 lines=60
<SYSTEM32>\reg.exe QUERY "HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion" /v ProductName
<SYSTEM32>\reg.exe query "HKEY_LOCAL_MACHINE\Software\Microsoft\Windows NT\CurrentVersion\ProfileList\S-1-5-20" /v "ProfileImagePath"
<SYSTEM32>\reg.exe query "HKEY_LOCAL_MACHINE\Software\Microsoft\Windows NT\CurrentVersion\ProfileList\S-1-5-21-2052111302-484763869-725345543-1003" /v "ProfileImagePath"
<SYSTEM32>\taskkill.exe /f /im iexplore.exe
<SYSTEM32>\reg.exe query "HKEY_LOCAL_MACHINE\Software\Microsoft\Windows NT\CurrentVersion\ProfileList\S-1-5-18" /v "ProfileImagePath"
<SYSTEM32>\findstr.exe /iec:"\\%USERNAME%"
<SYSTEM32>\reg.exe query "HKEY_LOCAL_MACHINE\Software\Microsoft\Windows NT\CurrentVersion\ProfileList\S-1-5-19" /v "ProfileImagePath"
<SYSTEM32>\reg.exe query "hkey_current_user\software\microsoft\internet explorer\urlsearchhooks" /v {000f18f2-09eb-4a59-82b2-5ae4184c39c3}
<SYSTEM32>\reg.exe query "hkey_current_user\software\microsoft\internet explorer\urlsearchhooks" /v {074e329a-2728-4255-8f51-cb2eaa0f1027}
<SYSTEM32>\reg.exe query "hkey_current_user\software\microsoft\internet explorer\urlsearchhooks" /v {078fed71-52f2-4a49-a0ab-6453e2ca72ba}
<SYSTEM32>\reg.exe query "hkey_current_user\software\microsoft\internet explorer\urlsearchhooks" /v {07b18eac-a523-4961-b6bb-170de4475cca}
<SYSTEM32>\reg.exe query "hkey_current_user\software\microsoft\internet explorer\urlsearchhooks" /v {067c5591-c9fb-4dcc-835f-6cb5dc169d41}
<SYSTEM32>\reg.exe query "hkey_current_user\software\microsoft\internet explorer\urlsearchhooks" /v {06c050b6-ce38-4f3a-b865-5707182d6e3c}
<SYSTEM32>\reg.exe query "hkey_current_user\software\microsoft\internet explorer\urlsearchhooks" /v {0722a2ac-4cf8-4310-afee-f87aa9be10aa}
<SYSTEM32>\reg.exe query "hkey_current_user\software\microsoft\internet explorer\urlsearchhooks" /v {08ed9ab9-ce1c-4c28-9e43-0f561ab6f30d}
<SYSTEM32>\reg.exe query "hkey_current_user\software\microsoft\internet explorer\urlsearchhooks" /v {0974ba1e-64ec-11de-b2a5-e43756d89593}
<SYSTEM32>\reg.exe query "hkey_current_user\software\microsoft\internet explorer\urlsearchhooks" /v {098facc1-3507-4be3-9d26-52b6916c24b9}
<SYSTEM32>\reg.exe query "hkey_current_user\software\microsoft\internet explorer\urlsearchhooks" /v {07b7f771-1b8e-4b7b-823e-ffac1732aa9f}
<SYSTEM32>\reg.exe query "hkey_current_user\software\microsoft\internet explorer\urlsearchhooks" /v {082c74b9-c1a7-42b0-a2a3-e520e1ea81d1}
<SYSTEM32>\reg.exe query "hkey_current_user\software\microsoft\internet explorer\urlsearchhooks" /v {08858af6-42ad-4914-95d2-ac3ab0dc8e28}
<SYSTEM32>\reg.exe query "hkey_current_user\software\microsoft\internet explorer\urlsearchhooks" /v {063812c7-dbeb-467f-a9c2-8270462f54f9}
<SYSTEM32>\reg.exe query "hkey_current_user\software\microsoft\internet explorer\urlsearchhooks" /v {01bc00c7-1125-4e41-bd93-3266121fe690}
<SYSTEM32>\reg.exe query "hkey_current_user\software\microsoft\internet explorer\urlsearchhooks" /v {020b192b-60fc-4301-bfd4-9d86668d3ff8}
<SYSTEM32>\reg.exe query "hkey_current_user\software\microsoft\internet explorer\urlsearchhooks" /v {0231292d-63c1-4731-a82d-f126f11ee8b3}
<SYSTEM32>\reg.exe query "hkey_current_user\software\microsoft\internet explorer\urlsearchhooks" /v {00a6faf1-072e-44cf-8957-5838f569a31d}
<SYSTEM32>\reg.exe query "hkey_current_user\software\microsoft\internet explorer\urlsearchhooks" /v {00cbb66b-1d3b-46d3-9577-323a336acb50}
<SYSTEM32>\reg.exe query "hkey_current_user\software\microsoft\internet explorer\urlsearchhooks" /v {011f9246-da13-4555-9998-6e4805bd533f}
<SYSTEM32>\reg.exe query "hkey_current_user\software\microsoft\internet explorer\urlsearchhooks" /v {04c7b109-8162-a0d6-b186-dbe176064a3e}
<SYSTEM32>\reg.exe query "hkey_current_user\software\microsoft\internet explorer\urlsearchhooks" /v {05d31295-1b4c-4812-8776-5cc1df279aaf}
<SYSTEM32>\reg.exe query "hkey_current_user\software\microsoft\internet explorer\urlsearchhooks" /v {0633ee93-d776-472f-a0ff-e1416b8b2e3a}
<SYSTEM32>\reg.exe query "hkey_current_user\software\microsoft\internet explorer\urlsearchhooks" /v {0290bf93-2a4d-4b1a-b43d-0789441b7f67}
<SYSTEM32>\reg.exe query "hkey_current_user\software\microsoft\internet explorer\urlsearchhooks" /v {03cddd3d-68d7-4b12-9bd8-54de251c460b}
<SYSTEM32>\reg.exe query "hkey_current_user\software\microsoft\internet explorer\urlsearchhooks" /v {047773d7-f320-4fd1-8e8a-39fc582e437c}
<SYSTEM32>\reg.exe query "hkey_current_user\software\microsoft\internet explorer\urlsearchhooks" /v {55555555-5555-5555-5555-550055465539}
<SYSTEM32>\reg.exe query "hkey_current_user\software\microsoft\internet explorer\urlsearchhooks" /v {55b4dbad-f88d-45d2-a1a6-556c5d875547}
<SYSTEM32>\reg.exe query "hkey_current_user\software\microsoft\internet explorer\urlsearchhooks" /v {56b55b20-aa43-493a-9c78-3da99a718b76}
<SYSTEM32>\reg.exe query "hkey_current_user\software\microsoft\internet explorer\urlsearchhooks" /v {53b1f26e-eae2-4c5d-bc4f-5b4545cb8c1a}
<SYSTEM32>\reg.exe query "hkey_current_user\software\microsoft\internet explorer\urlsearchhooks" /v {54bedd5e-cdf7-4e97-8481-ae381af7f110}
<SYSTEM32>\reg.exe query "hkey_current_user\software\microsoft\internet explorer\urlsearchhooks" /v {54eeb14d-5d3b-4f35-83fd-3f87f6740979}
<SYSTEM32>\reg.exe query "hkey_current_user\software\microsoft\internet explorer\urlsearchhooks" /v {58a0d582-d56b-4df0-85dd-eb8db9598770}
<SYSTEM32>\reg.exe query "hkey_current_user\software\microsoft\internet explorer\urlsearchhooks" /v {5911488e-9d1e-40ec-8cbb-06b231cc153f}
<SYSTEM32>\reg.exe query "hkey_current_user\software\microsoft\internet explorer\urlsearchhooks" /v {5a074b21-f830-49de-a31b-40463f552da4}
<SYSTEM32>\reg.exe query "hkey_current_user\software\microsoft\internet explorer\urlsearchhooks" /v {57eb5b9c-8fce-4df6-99af-d8940861a355}
<SYSTEM32>\reg.exe query "hkey_current_user\software\microsoft\internet explorer\urlsearchhooks" /v {58124a0b-dc32-4180-9bff-e0e21ae34026}
<SYSTEM32>\reg.exe query "hkey_current_user\software\microsoft\internet explorer\urlsearchhooks" /v {5835466c-49af-4cbe-b102-a8c8b6313749}
<SYSTEM32>\reg.exe query "hkey_current_user\software\microsoft\internet explorer\urlsearchhooks" /v {539eac54-97c2-4558-ba21-9ef0cc254d55}
<SYSTEM32>\reg.exe query "hkey_current_user\software\microsoft\internet explorer\urlsearchhooks" /v {4e7bd74f-2b8d-469e-8da9-fd60bb9aae33}
<SYSTEM32>\reg.exe query "hkey_current_user\software\microsoft\internet explorer\urlsearchhooks" /v {4e7bd74f-2b8d-469e-aa8c-e56fa49ca83a}
<SYSTEM32>\reg.exe query "hkey_current_user\software\microsoft\internet explorer\urlsearchhooks" /v {4e7f49ed-8c94-4aaa-a407-3010d099b11a}
<SYSTEM32>\reg.exe query "hkey_current_user\software\microsoft\internet explorer\urlsearchhooks" /v {4e1e9d45-8bf9-4139-915c-9f83cc3d5921}
<SYSTEM32>\reg.exe query "hkey_current_user\software\microsoft\internet explorer\urlsearchhooks" /v {4e7bd74f-2b8d-469e-85ac-fd60bb9aae32}
<SYSTEM32>\reg.exe query "hkey_current_user\software\microsoft\internet explorer\urlsearchhooks" /v {4e7bd74f-2b8d-469e-8cad-a82cfd9aae22}
<SYSTEM32>\reg.exe query "hkey_current_user\software\microsoft\internet explorer\urlsearchhooks" /v {51ef49d2-624b-4194-8b97-1c468e9b0efe}
<SYSTEM32>\reg.exe query "hkey_current_user\software\microsoft\internet explorer\urlsearchhooks" /v {52794457-af6c-4c50-9def-f2e24f4c8889}
<SYSTEM32>\reg.exe query "hkey_current_user\software\microsoft\internet explorer\urlsearchhooks" /v {52bf4b5c-6490-4b05-bf29-ec1206dcea1c}
<SYSTEM32>\reg.exe query "hkey_current_user\software\microsoft\internet explorer\urlsearchhooks" /v {4e8d6551-f9a4-6d01-4d4b-bfd7673c0e3e}
<SYSTEM32>\reg.exe query "hkey_current_user\software\microsoft\internet explorer\urlsearchhooks" /v {502a0d74-2b3e-c169-11cc-8b4c5620d6ce}
<SYSTEM32>\reg.exe query "hkey_current_user\software\microsoft\internet explorer\urlsearchhooks" /v {51dd3535-abea-484a-b1cf-06ab7b092c0c}
<SYSTEM32>\reg.exe query "hkey_current_user\software\microsoft\internet explorer\urlsearchhooks" /v {5a074b29-f830-49de-a31b-40463f552da4}
<SYSTEM32>\reg.exe query "hkey_current_user\software\microsoft\internet explorer\urlsearchhooks" /v {631acb68-57c3-48af-9cc5-fcec0837ffd3}
<SYSTEM32>\reg.exe query "hkey_current_user\software\microsoft\internet explorer\urlsearchhooks" /v {63232d93-6727-4897-8fdb-53ace905e5a9}
<SYSTEM32>\reg.exe query "hkey_current_user\software\microsoft\internet explorer\urlsearchhooks" /v {63d0ed2d-b45b-4458-8b3b-60c69bbbd83c}
<SYSTEM32>\reg.exe query "hkey_current_user\software\microsoft\internet explorer\urlsearchhooks" /v {61f9a87f-c1a0-47c5-88e3-a7d39e9c9f79}
<SYSTEM32>\reg.exe query "hkey_current_user\software\microsoft\internet explorer\urlsearchhooks" /v {62889c04-d644-4290-9d16-91ea440f3b29}
<SYSTEM32>\reg.exe query "hkey_current_user\software\microsoft\internet explorer\urlsearchhooks" /v {631ac2d4-57b3-42b0-a148-da33b462c1a3}
<SYSTEM32>\reg.exe query "hkey_current_user\software\microsoft\internet explorer\urlsearchhooks" /v {67a4f320-3c5c-4e2c-a1c5-6014b73f373f}
<SYSTEM32>\reg.exe query "hkey_current_user\software\microsoft\internet explorer\urlsearchhooks" /v {67c2adcb-263d-4608-9207-168afa7263ee}
<SYSTEM32>\reg.exe query "hkey_current_user\software\microsoft\internet explorer\urlsearchhooks" /v {68f5cad1-0fed-4118-befb-5510cc1772ae}
<SYSTEM32>\reg.exe query "hkey_current_user\software\microsoft\internet explorer\urlsearchhooks" /v {64b00dac-870d-4e6a-8d34-3a6e3e427a30}
<SYSTEM32>\reg.exe query "hkey_current_user\software\microsoft\internet explorer\urlsearchhooks" /v {6536801b-f50c-449b-9476-093dfd3789e3}
<SYSTEM32>\reg.exe query "hkey_current_user\software\microsoft\internet explorer\urlsearchhooks" /v {65908a8d-a931-4023-a6b8-8b9ba723a206}
<SYSTEM32>\reg.exe query "hkey_current_user\software\microsoft\internet explorer\urlsearchhooks" /v {61842253-8e27-4e9a-841b-f4c4cce99a1b}
<SYSTEM32>\reg.exe query "hkey_current_user\software\microsoft\internet explorer\urlsearchhooks" /v {5cbe2611-c31b-401f-89bc-4cbb25e853d7}
<SYSTEM32>\reg.exe query "hkey_current_user\software\microsoft\internet explorer\urlsearchhooks" /v {5ccd114a-c2eb-4b0a-be08-fa3237d0fd84}
<SYSTEM32>\reg.exe query "hkey_current_user\software\microsoft\internet explorer\urlsearchhooks" /v {5ce808f4-c861-4392-b55e-c97a89fbe2dd}
<SYSTEM32>\reg.exe query "hkey_current_user\software\microsoft\internet explorer\urlsearchhooks" /v {5a074b29-f830-49de-a31b-474187a344b8}
<SYSTEM32>\reg.exe query "hkey_current_user\software\microsoft\internet explorer\urlsearchhooks" /v {5a074b29-f830-49de-a31b-82333e0de32e}
<SYSTEM32>\reg.exe query "hkey_current_user\software\microsoft\internet explorer\urlsearchhooks" /v {5a074b29-f830-49de-a31b-95dae6c6136c}
<SYSTEM32>\reg.exe query "hkey_current_user\software\microsoft\internet explorer\urlsearchhooks" /v {6007cd4c-3842-4121-b854-2c8a7720d642}
<SYSTEM32>\reg.exe query "hkey_current_user\software\microsoft\internet explorer\urlsearchhooks" /v {609368c3-88c6-4b9d-9f8e-28e29bbb6131}
<SYSTEM32>\reg.exe query "hkey_current_user\software\microsoft\internet explorer\urlsearchhooks" /v {60e76b18-6997-4fa3-ba4a-75934afaa3fd}
<SYSTEM32>\reg.exe query "hkey_current_user\software\microsoft\internet explorer\urlsearchhooks" /v {5eb55005-3258-4452-9184-c86005ede238}
<SYSTEM32>\reg.exe query "hkey_current_user\software\microsoft\internet explorer\urlsearchhooks" /v {5f339f0b-716f-408f-a627-deeb5deb4020}
<SYSTEM32>\reg.exe query "hkey_current_user\software\microsoft\internet explorer\urlsearchhooks" /v {5fbff542-a974-4832-b040-f5b09fa6bc74}
<SYSTEM32>\reg.exe query "hkey_current_user\software\microsoft\internet explorer\urlsearchhooks" /v {32d9c40f-793b-47ee-aa7c-45686f307b41}
<SYSTEM32>\reg.exe query "hkey_current_user\software\microsoft\internet explorer\urlsearchhooks" /v {32eff74a-2d8f-4f05-bb36-60bf1a765452}
<SYSTEM32>\reg.exe query "hkey_current_user\software\microsoft\internet explorer\urlsearchhooks" /v {336d0c35-8a85-403a-b9d2-65c292c39087}
<SYSTEM32>\reg.exe query "hkey_current_user\software\microsoft\internet explorer\urlsearchhooks" /v {30f9b915-b755-4826-820b-08fba6bd249d}
<SYSTEM32>\reg.exe query "hkey_current_user\software\microsoft\internet explorer\urlsearchhooks" /v {311873ad-4e97-41e4-8e32-85d6dcf38b3b}
<SYSTEM32>\reg.exe query "hkey_current_user\software\microsoft\internet explorer\urlsearchhooks" /v {31c7d459-9cc3-44f2-9dca-fc11795309b4}
<SYSTEM32>\reg.exe query "hkey_current_user\software\microsoft\internet explorer\urlsearchhooks" /v {35c1605e-438b-4d64-aab1-8885f097a9b1}
<SYSTEM32>\reg.exe query "hkey_current_user\software\microsoft\internet explorer\urlsearchhooks" /v {3a188115-b81b-48f2-a958-f974c8f3f309}
<SYSTEM32>\reg.exe query "hkey_current_user\software\microsoft\internet explorer\urlsearchhooks" /v {3a4336e3-ca32-44df-9d3e-46c65d58bb62}
<SYSTEM32>\reg.exe query "hkey_current_user\software\microsoft\internet explorer\urlsearchhooks" /v {33e31d42-9e93-4e81-a16d-5a05e4721419}
<SYSTEM32>\reg.exe query "hkey_current_user\software\microsoft\internet explorer\urlsearchhooks" /v {34f459b8-1d37-4ff2-9efa-192d8e3aba6f}
<SYSTEM32>\reg.exe query "hkey_current_user\software\microsoft\internet explorer\urlsearchhooks" /v {35a98f6e-9322-4cde-ae38-b284b6bed648}
<SYSTEM32>\reg.exe query "hkey_current_user\software\microsoft\internet explorer\urlsearchhooks" /v {3041d03e-fd4b-44e0-b742-2d9b88305f98}
<SYSTEM32>\reg.exe query "hkey_current_user\software\microsoft\internet explorer\urlsearchhooks" /v {2df69f3c-56fa-4c5b-99e5-be861443de46}
<SYSTEM32>\reg.exe query "hkey_current_user\software\microsoft\internet explorer\urlsearchhooks" /v {2e4a4a8f-d725-1fb0-30dd-e04f9268c2cf}
<SYSTEM32>\reg.exe query "hkey_current_user\software\microsoft\internet explorer\urlsearchhooks" /v {2e8053c0-5d39-449d-9e6f-7165fd7d5db1}
<SYSTEM32>\reg.exe query "hkey_current_user\software\microsoft\internet explorer\urlsearchhooks" /v {2b721a27-d5e6-45fb-8f9c-a8d6aa4bf00d}
<SYSTEM32>\reg.exe query "hkey_current_user\software\microsoft\internet explorer\urlsearchhooks" /v {2cb70935-c5d6-46a5-8785-4f5ecbf25a6f}
<SYSTEM32>\reg.exe query "hkey_current_user\software\microsoft\internet explorer\urlsearchhooks" /v {2d6a91cf-37c6-4eb2-a8d8-f65f1db14ece}
<SYSTEM32>\reg.exe query "hkey_current_user\software\microsoft\internet explorer\urlsearchhooks" /v {2eecd738-5844-4a99-b4b6-146bf802613b}
<SYSTEM32>\reg.exe query "hkey_current_user\software\microsoft\internet explorer\urlsearchhooks" /v {2f13f84e-cf84-4416-bf38-86d17e1d2c81}
<SYSTEM32>\reg.exe query "hkey_current_user\software\microsoft\internet explorer\urlsearchhooks" /v {2feb0820-1f47-4579-8322-daefb255c273}
<SYSTEM32>\reg.exe query "hkey_current_user\software\microsoft\internet explorer\urlsearchhooks" /v {2e9937fc-cf2f-4f56-af54-5a6a3dd375cc}
<SYSTEM32>\reg.exe query "hkey_current_user\software\microsoft\internet explorer\urlsearchhooks" /v {2e9dddba-a2c0-4b42-998d-24dc8ad5c2d7}
<SYSTEM32>\reg.exe query "hkey_current_user\software\microsoft\internet explorer\urlsearchhooks" /v {2ea061b2-11b5-4c4b-b385-f378b4b48648}
<SYSTEM32>\reg.exe query "hkey_current_user\software\microsoft\internet explorer\urlsearchhooks" /v {3bd44f0e-0596-4008-aee0-45d47e3a8f0e}
<SYSTEM32>\reg.exe query "hkey_current_user\software\microsoft\internet explorer\urlsearchhooks" /v {462be121-2b54-4218-bf00-b9bf8135b23f}
<SYSTEM32>\reg.exe query "hkey_current_user\software\microsoft\internet explorer\urlsearchhooks" /v {46caa407-fbfa-4911-9d50-93f8cdeda9d6}
<SYSTEM32>\reg.exe query "hkey_current_user\software\microsoft\internet explorer\urlsearchhooks" /v {47e4e558-8835-4ea4-b3a8-628b6e0d5ebb}
<SYSTEM32>\reg.exe query "hkey_current_user\software\microsoft\internet explorer\urlsearchhooks" /v {438c2e7a-7327-4f2f-90d9-25400538f3f3}
<SYSTEM32>\reg.exe query "hkey_current_user\software\microsoft\internet explorer\urlsearchhooks" /v {439c8689-af56-4668-90fc-1452dd6ceb7d}
<SYSTEM32>\reg.exe query "hkey_current_user\software\microsoft\internet explorer\urlsearchhooks" /v {4608db1b-c4e9-417b-8409-a645ddbe1a09}
<SYSTEM32>\reg.exe query "hkey_current_user\software\microsoft\internet explorer\urlsearchhooks" /v {4c7adbc6-588e-4878-a194-422588e6a0c3}
<SYSTEM32>\reg.exe query "hkey_current_user\software\microsoft\internet explorer\urlsearchhooks" /v {4cfc8387-5fb1-47c1-8aa4-5b7b906a591e}
<SYSTEM32>\reg.exe query "hkey_current_user\software\microsoft\internet explorer\urlsearchhooks" /v {4d3f3f3a-0e4b-4085-9032-7d072072319a}
<SYSTEM32>\reg.exe query "hkey_current_user\software\microsoft\internet explorer\urlsearchhooks" /v {4a65881a-7061-4aa0-b611-6376e6bf45a8}
<SYSTEM32>\reg.exe query "hkey_current_user\software\microsoft\internet explorer\urlsearchhooks" /v {4b3803ea-5230-4dc3-a7fc-33638f3d3542}
<SYSTEM32>\reg.exe query "hkey_current_user\software\microsoft\internet explorer\urlsearchhooks" /v {4b74dfe1-d092-4433-8897-8d3729e20bc5}
<SYSTEM32>\reg.exe query "hkey_current_user\software\microsoft\internet explorer\urlsearchhooks" /v {4319648b-98dc-4101-80c9-62f553da51de}
<SYSTEM32>\reg.exe query "hkey_current_user\software\microsoft\internet explorer\urlsearchhooks" /v {3d0bdab3-12f4-471c-8966-e35a2c6c7de7}
<SYSTEM32>\reg.exe query "hkey_current_user\software\microsoft\internet explorer\urlsearchhooks" /v {3d3628df-f34d-4dc2-ac8c-c89220aefc69}
<SYSTEM32>\reg.exe query "hkey_current_user\software\microsoft\internet explorer\urlsearchhooks" /v {3d801591-e6a9-4860-bbd3-d528cac807b7}
<SYSTEM32>\reg.exe query "hkey_current_user\software\microsoft\internet explorer\urlsearchhooks" /v {3bdf6d05-34ce-4ad8-93b4-08358fab2e11}
<SYSTEM32>\reg.exe query "hkey_current_user\software\microsoft\internet explorer\urlsearchhooks" /v {3c471948-f874-49f5-b338-4f214a2ee0b1}
<SYSTEM32>\reg.exe query "hkey_current_user\software\microsoft\internet explorer\urlsearchhooks" /v {3cb4c6b3-3576-45cc-aa1f-287141a9f29e}
<SYSTEM32>\reg.exe query "hkey_current_user\software\microsoft\internet explorer\urlsearchhooks" /v {3fe18adb-116b-4327-8fb8-f125b4cc2f51}
<SYSTEM32>\reg.exe query "hkey_current_user\software\microsoft\internet explorer\urlsearchhooks" /v {410d0ce8-6014-4f1d-9c3b-79d53a9245f9}
<SYSTEM32>\reg.exe query "hkey_current_user\software\microsoft\internet explorer\urlsearchhooks" /v {421c1b53-dafb-4c55-9a5f-efba47d935b1}
<SYSTEM32>\reg.exe query "hkey_current_user\software\microsoft\internet explorer\urlsearchhooks" /v {3db422e6-cb77-472e-865e-474c2a6893d7}
<SYSTEM32>\reg.exe query "hkey_current_user\software\microsoft\internet explorer\urlsearchhooks" /v {3e720453-b472-4954-b7aa-33069eb53906}
<SYSTEM32>\reg.exe query "hkey_current_user\software\microsoft\internet explorer\urlsearchhooks" /v {3f3714a9-89a4-46be-8af3-d0c9d1fb03f9}

Injects code into

the following system processes:

<SYSTEM32>\wbem\wmiprvse.exe

Terminates or attempts to terminate

the following user processes:

iexplore.exe

Sets a new unauthorized home page for Windows Internet Explorer.

Modifies file system :

Creates the following files:

C:\JRT\pending.dat
C:\JRT\regkey_x64.dat
C:\JRT\get.bat
C:\JRT\misc.bat
C:\JRT\regkey_x86.dat
C:\JRT\temp\OS.txt
C:\JRT\temp\architecture.txt
C:\JRT\startpage_x64.reg
C:\JRT\startpage_x86.reg
C:\JRT\firefox.bat
C:\JRT\askregkey_x64.dat
C:\JRT\askregkey_x86.dat
C:\JRT\ask.bat
C:\JRT\askCLSID.dat
C:\JRT\CLSID.dat
C:\JRT\ev_clear.bat
C:\JRT\FFprefs.dat
C:\JRT\clsid_keys.bat
C:\JRT\clsid_values.bat

Miscellaneous:

Searches for the following windows:

ClassName: '' WindowName: ''

Technologies

Begriffe

Schulung und Training

Mythen

Technical Information

Curing recommendations

Free trial