..\Software\Microsoft\Windows\CurrentVersion\Run\\"twjwgvuf"\"%das.au.ls.app-data%\dvliqi\sywtsysguard.exe" |
..\Software\Microsoft\Windows\CurrentVersion\Run\\"nbhpafiw"\"%das.au.ls.app-data%\uakygc\djedsysguard.exe" |
..\System\CurrentControlSet\Services\sharedaccess\parameters\firewallpolicy\standardprofile\authorizedapplications\list\"%win%\temp\alg.exe"\"%win%\temp\alg.exe:*:enabled:application layer gateway service" |
..\System\CurrentControlSet\Services\sharedaccess\parameters\firewallpolicy\standardprofile\authorizedapplications\list\"%das.au.app data%\windows genuine advantage\vmonitor.exe"\"%das.au.app data%\windows genuine advantage\vmonitor.exe:*:enabled:sam" |
..\System\CurrentControlSet\Services\sharedaccess\parameters\firewallpolicy\domainprofile\authorizedapplications\list\"%win%\temp\alg.exe"\"%win%\temp\alg.exe:*:enabled:application layer gateway service" |
..\System\CurrentControlSet\Services\sharedaccess\parameters\firewallpolicy\domainprofile\authorizedapplications\list\"%das.au.app data%\windows genuine advantage\vmonitor.exe"\"%das.au.app data%\windows genuine advantage\vmonitor.exe:*:enabled:sam" |
..\Software\Microsoft\Windows\CurrentVersion\Run\\"vmonitor"\"%das.au.app data%\windows genuine advantage\vmonitor.exe -mode=background -check=memory" |
..\Software\Microsoft\Windows\CurrentVersion\Run\\"system tool"\"%pf%\wwpavt\cmvesysguard.exe" |
..\Software\Microsoft\Windows\CurrentVersion\Run\\"system tool"\"%pf%\xfbhyu\wstosysguard.exe" |
..\Software\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{f5f14e7a-f59d-45a0-bdc5-a9f5454f0bcf}\(Default) |