..\Software\Microsoft\Windows\CurrentVersion\Run\\"MSN Messenger"\"%WIN.SYS32%\msmsgs.exe" |
..\Software\Microsoft\Windows\CurrentVersion\ShellServiceObjectDelayLoad\\"MSN Toolbar"\"{8740EE14-B408-B07B-1955-C64574EC092F}" |
..\System\CurrentControlSet\Services\msupdate\"ImagePath"\"%WIN.SYS32%\msupdate.exe" |
..\System\CurrentControlSet\Services\msupdate\"DisplayName"\"Windows update" |
..\Software\Microsoft\Windows\CurrentVersion\RunOnce\\"system32"\"%DAS.AU.LS%\Temp\trojan-dropper.win32.small.aar.exe" |
..\Software\Microsoft\Windows\CurrentVersion\Run\\"Systems Restart"\"Rundll32.exe gopy.dll, DllRegisterServer" |
..\System\CurrentControlSet\Services\msupdate\Security\(Default) |
..\Software\Classes\Clsid\{8740EE14-B408-B07B-1955-C64574EC092F}\(Default) |
..\Software\Microsoft\Windows\CurrentVersion\pplorer\(Default) |
..\Software\Microsoft\Internet Explorer\Toolbar\\"CLSID"\"{B75F75B8-93F3-429D-FF34-660B206D897A}" |