is that they randomize the name on install.
Also, the random name also keeps track of the other random names it installs and runs.
2-6 exes typically run to be watchdogs so they can be "kept running".
Assuming 6 versions running hidden...
1 watches to make sure 2,3,4,5,6 are running.
2 watches to make sure 1,3,4,5,6 are running.
3 watches to make sure 1,2,4,5,6 are running.
4 watches to make sure 1,2,3,5,6 are running.
5 watches to make sure 1,2,3,4,6 are running.
6 watches to make sure 1,2,3,4,5 are running.
You have to kill all of them at once.
Good luck. I'll bet there are some latent ones that will start up at a later date. Lobbed in on some CLSID.