%user_profile%\appdata\local\mathtam.exe
%program_files%\baidu\pps.exe
%user_profile%\appdata\local\megasync\shellextx32.dll
%allusers_profile%\exttag\vaiadoncom.dll