U safe-mod pa onda ova tri maderfakera:
C:\WINDOWS\system32\etixqjmw.exe
O4-HKLM\..\Run:[GPLv3]rundll32.exe"C:\WINDOWS\system32\cffpqply.dll",realset
O23 - Service: DomainService - - C:\WINDOWS\system32\etixqjmw.exe
CCleaner-om malo pročešljaj registry.