..\System\CurrentControlSet\Services\SharedAccess\Parameters\firewallpolicy\StandardProfile\AuthorizedApplications\List\"%DAS.AU.LS%\Temp\BACKDOOR.WIN32.AGENT.QS.EXE"\"%DAS.AU.LS%\Temp\BACKDOOR.WIN32.AGENT.QS.EXE:*:Enabled:Windows Update" |
..\Software\Microsoft\Windows\CurrentVersion\Run\\"WindowsUpdateNT"\"%WIN.SYS%\svwhost.exe" |
..\Software\Microsoft\Windows\CurrentVersion\Run\\"WindowsUpdateNT"\"%WIN.SYS%\svwhost.exe /s" |
..\Software\Microsoft\OLE\"Microsoft checker"\"MsPMSPTv.exe" |
..\System\CurrentControlSet\Services\SharedAccess\Parameters\firewallpolicy\StandardProfile\AuthorizedApplications\List\"%WIN.SYS32%\Explorer.exe"\"%WIN.SYS32%\Explorer.exe:*:Enabled:Entorno UPnp" |
..\System\CurrentControlSet\Services\SharedAccess\Parameters\firewallpolicy\StandardProfile\AuthorizedApplications\List\"%WIN%\bxproxy.exe"\"%WIN%\bxproxy.exe:*:Enabled:Windows Update" |
..\Software\Microsoft\Windows\CurrentVersion\RunServices\\"Microsoft checker"\"MsPMSPTv.exe" |
..\Software\Microsoft\Windows\CurrentVersion\Run\\"bxproxy"\"%WIN%\bxproxy.exe" |
..\Software\Microsoft\Windows\CurrentVersion\Run\\"Windows Automatic Updates"\"%DAS.AU.LS%\Temp\BACKDOOR.WIN32.AGENT.PZ.EXE" |
..\Software\Microsoft\Windows\CurrentVersion\Run\\"Swchost"\"%WIN.SYS32%\Swhost.exe" |