..\System\CurrentControlSet\Services\NetWorkLogon\"ImagePath"\"rundll32.exe KB896425.log,start" |
..\Software\Microsoft\Windows\CurrentVersion\Run\\"Syetwlynus"\"%DAS.AU.LS%\Temp\trojan-psw.win32.wow.ep.exe" |
..\Software\Microsoft\Windows\CurrentVersion\Run\\"Syetwlyes"\"%WIN.SYS32%\algesteiybs.exe" |
..\System\CurrentControlSet\Services\NetWorkLogon\Security\(Default) |
..\Software\Microsoft\Windows\CurrentVersion\RunServices\\"Torjan Program"\"%WIN%\WINLOGON.EXE" |
..\Software\Microsoft\Windows\CurrentVersion\Run\\"torjan program"\"%win%\winlogon.exe" |