..\Software\Microsoft\Windows\CurrentVersion\Run\\"Systems32"\"%WIN.SYS32%\Server.exe" |
..\System\CurrentControlSet\Services\NetWorkLogon\"ImagePath"\"rundll32.exe KB896425.log,start" |
..\System\CurrentControlSet\Services\NetWorkLogon\Security\(Default) |
..\Software\Microsoft\Windows\CurrentVersion\RunServices\\"Torjan Program"\"%WIN%\WINLOGON.EXE" |
..\Software\Microsoft\Windows\CurrentVersion\Run\\"torjan program"\"%win%\winlogon.exe" |