There are several entries that, in my experience, are signs of malware:
HKLM \ Software \ Microsoft \ Windows NT \ CurrentVersion \ Image File Execution Options
HKLM \ Software \ Wow6432Node \ Microsoft \ Windows NT \ CurrentVersion \ Image File Execution Options
HKLM \ System \ CurrentControlSet \ Control \ Session Manager \ KnownDlls
The files are not signed with a trusted certificate and use a confuse nomenclature.
Let's validate. Right click on any file listed under the categories listed above and select check virusTotal. This will open your browser and will show you the result of online scan about that file. If the result confirms the presence of malware you must scan your pc.
Please, download this tool and execute a full scan.