%user_profile%\appdata\roaming\geunfy\geunfy.exe
%user_profile%\appdata\local\megasync\shellextx32.dll
%user_profile%\appdata\local\temp\rzfasrziz1.exe