| • | ..\Software\Microsoft\Windows\CurrentVersion\Run\\"Windows NT 32"\"ntlogin32.exe" |
| • | ..\Software\Microsoft\Windows\CurrentVersion\Run\\"postdavatch"\"nvdas.exe" |
| • | ..\Software\Microsoft\Windows\CurrentVersion\Run\\"System executable dll library"\"execdll32.exe" |
| • | ..\Software\Microsoft\Windows\CurrentVersion\Run\\"Microsoft Internet firewall manager"\"gmt16.exe" |
| • | ..\Software\Microsoft\Windows\CurrentVersion\Run\\"Microsoft spool server for win32"\"spoolsrv.exe" |
| • | ..\Software\Microsoft\Windows\CurrentVersion\Run\\"ms_netd_win32"\"netd32.exe" |
| • | ..\Software\Microsoft\Windows\CurrentVersion\RunServices\\"regsrv"\"scvhost.exe" |
| • | ..\Software\Microsoft\Windows\CurrentVersion\Run\\"Windows mangement"\"Winlogonn.exe" |
| • | ..\Software\Microsoft\Windows\CurrentVersion\Run\\"pofatch"\"nstrue.exe" |
| • | ..\Software\Microsoft\Windows\CurrentVersion\Run\\"rcf driver"\"rcf.exe" |
| • | ..\Software\Microsoft\Windows\CurrentVersion\Run\\"metalrock has sex with camels"\"metalrock-is-gay.exe" |
| • | ..\Software\Microsoft\Windows\CurrentVersion\Run\\"Microsoft runtime"\"cfgdll32.exe" |
| • | ..\Software\Microsoft\Windows\CurrentVersion\Run\\"ms configuration"\"msframer.exe" |
| • | ..\Software\Microsoft\Windows\CurrentVersion\RunServices\\"ms-update"\"scvhost.exe" |
| • | ..\Software\Microsoft\Windows\CurrentVersion\Run\\"Windows loader"\"wstart32.exe" |
| • | ..\Software\Microsoft\Windows\CurrentVersion\Run\\"casdvqwa"\"bmqnzkg.exe" |
| • | ..\Software\Microsoft\Windows\CurrentVersion\Run\\"randex virus built for irbme"\"irbme.exe" |
| • | ..\Software\Microsoft\Windows\CurrentVersion\Run\\"metalrock (irc.musirc.com) has sex with printers"\"metalrock-is-gay.exe" |
| • | ..\Software\Microsoft\Windows\CurrentVersion\Run\\"Microsoft netview"\"gesfm32.exe" |
| • | ..\Software\Microsoft\Windows\CurrentVersion\Run\\"threaded"\"intcp32.exe" |
| • | ..\Software\Microsoft\Windows\CurrentVersion\Run\\"helpmanager" |
| • | ..\Software\Microsoft\Windows\CurrentVersion\RunServices\\"System time updator"\"csystime.exe" |
| • | ..\System\CurrentControlSet\Services\Indexingboxs |
| • | ..\Software\Microsoft\Windows\CurrentVersion\Run\\"superslut"\"msslut32.exe" |
| • | ..\Software\Microsoft\Windows\CurrentVersion\Run\\"postpatch"\"nvdes.exe" |