%user_profile%\cbzvl.exe
%win_dir%\system32\easyhook32.dll
%user_profile%\application data\mozilla\firefox\profiles\zc2s4ppz.default\extensions\{1392b8d2-5c05-419f-a8f6-b9f15a596612}\components\radiowmpcoregecko5.dll