..\Software\Microsoft\Windows NT\CurrentVersion\Windows\\"AppInit_DLLs"\"%WIN.SYS32%\KB161861.LOG" |
..\Software\Microsoft\Windows\CurrentVersion\Policies\Explorer\Run\"Winpatch AutoUpdate"\"%WIN.SYS32%\trojan-psw.win32.lmir.apn.exe" |
..\Software\Microsoft\Windows\CurrentVersion\Explorer\ShellExecuteHooks\"{CAB38BE1-EE7D-411F-8D9C-A10705051772}" |
..\Software\Microsoft\Windows\CurrentVersion\RunServices\\"Trojan Program"\"%WIN%\CSRSS.EXE" |
..\Software\Microsoft\Windows\CurrentVersion\Run\\"Winhoxt"\"%WIN.SYS32%\svhost.exe" |
..\Software\Microsoft\Windows\CurrentVersion\Run\\"Windows Media SP.2.5.7"\"%WIN.SYS32%\TROJAN-PSW.WIN32.LMIR.AR.exe" |
..\Software\Microsoft\Windows\CurrentVersion\Run\\"Trojan Program"\"%WIN%\CSRSS.EXE" |
..\Software\Microsoft\Windows\CurrentVersion\RunServices\\"Torjan Program"\"%WIN%\WINLOGON.EXE" |
..\Software\Microsoft\Windows\CurrentVersion\Run\\"torjan program"\"%win%\winlogon.exe" |