..\Software\Microsoft\Windows NT\CurrentVersion\Image File Execution Options\msconfig.exe\(Default) |
..\Software\Microsoft\Windows NT\CurrentVersion\Image File Execution Options\mmc.exe\(Default) |
..\Software\Microsoft\Windows NT\CurrentVersion\Image File Execution Options\regedit.Exe\(Default) |
..\Software\Microsoft\Windows\CurrentVersion\Run\\"RemoteInfection"\"%DAS.AU.LS%\Temp\RemoteINF.exe" |