[HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Run]
<GenProtect><C:\WINDOWS\bmolqa.exe> []
<AVPSrv><C:\WINDOWS\AVPSrv.exE> [N/A]
<DbgHlp32><C:\WINDOWS\DbgHlp32.exe> []
<WinSysM><C:\WINDOWS\235780M.exe> []
<LotusHlp><C:\WINDOWS\LotusHlp.exe> []
[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Policies\Explorer\Run]
<MSDCG32 ><LYLeador.exe> [N/A]
[A6560D5E / A6560D5E][Stopped/Auto Start]
<C:\WINDOWS\system32\7C9EC208.EXE -k><Microsoft Corporation>
C:\WINDOWS\system32\198EB394.DLL
[C:\WINDOWS\235780MM.DLL] [N/A, ]
[C:\WINDOWS\system32\DbgHlp32.dll] [N/A, ]
[C:\WINDOWS\system32\GenProtect.dll] [N/A, ]
[C:\WINDOWS\system32\LotusHlp.dll] [N/A, ]
[C:\WINDOWS\system32\198EB394.DLL] [Microsoft Corporation, ]
Autorun.inf
[C:\]
[AutoRun]
open=auto.exe
shellexecute=auto.exe
shell\Auto\command=auto.exe
[D:\]
[AutoRun]
open=auto.exe
shellexecute=auto.exe
shell\Auto\command=auto.exe
[E:\]
[AutoRun]
open=auto.exe
shellexecute=auto.exe
shell\Auto\command=auto.exe
