..\Software\Clients\StartMenuInternet\INTEXPLORE.pif\(Default) |
..\Software\Microsoft\Windows\CurrentVersion\Run\\"ToP"\"%WIN%\LSASS.exe" |
..\Software\Microsoft\Windows\CurrentVersion\Run\\"TProgram"\"%WIN%\smss.exe" |
..\Software\Microsoft\Windows\CurrentVersion\Explorer\shellexecutehooks\"{5eed7056-b89d-4de8-a060-d285ea746799}" |
..\Software\Microsoft\Windows\CurrentVersion\RunServices\\"Torjan Program"\"%WIN%\WINLOGON.EXE" |
..\Software\Classes\windowfiles\(Default) |
..\Software\Classes\Clsid\{5eed7056-b89d-4de8-a060-d285ea746799}\(Default) |
..\Software\Microsoft\Windows\CurrentVersion\Run\\"torjan program"\"%win%\winlogon.exe" |