Registry values to replace with dummy:
HKLM\Software\Microsoft\Windows NT\CurrentVersion\Windows | AppInit_DLLs
registry keys to delete:
HKEY_LOCAL_MACHINE\system\controlset002\services\a mvry
HKEY_LOCAL_MACHINE\system\controlset002\services\f ntintzvw
HKEY_LOCAL_MACHINE\system\controlset002\services\o uywuc
HKEY_LOCAL_MACHINE\system\controlset002\services\q cjbpsz
HKEY_LOCAL_MACHINE\system\controlset002\services\q fqjd
HKEY_LOCAL_MACHINE\system\controlset002\services\s vegwrs
HKLM\system\currentcontrolset\services\svegwrs
HKLM\system\currentcontrolset\services\qfqjd
HKLM\system\currentcontrolset\services\qcjbpsz
HKLM\system\currentcontrolset\services\ouywuc
HKLM\system\currentcontrolset\services\fntintzvw
HKLM\system\currentcontrolset\services\amvry
Files to delete:
C:\WINDOWS\system32\fnoap.dll
C:\WINDOWS\system32\dihdi.dll
C:\WINDOWS\system32\rmqbnesa.dll
C:\WINDOWS\system32\x
C:\DOCUME~1\Admin\IMPOST~1\Temp\593483.tmp