Top 10 virus alerts

Latest 10 malware files

Testimonials

I ran the free version on my system that I knew had something on it, nothing would detect what was going on but your program did! I instantly bought it and now it's clean!

Awesome job! I'm an instant life-long customer.

Peter C.

More ...

Autorun Malware Registry Values

Scan your Windows registry for Autorun Malware

HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Run (Disabled), tbon=[%PROGRAM_FILES%]\TBONBin\tbon.exe /r
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Run Once, OSSProxy=[%SYSTEM%]\ossproxy.exe -bootinstall
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Run Once, OSSProxy=[%SYSTEM%]\rk.exe -bootinstall
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Run Once, Srv32 spool service=[%WINDOWS%]\System32\spoolsrv32.exe
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Run Once, Web Offer=[%PROFILE_TEMP%]\ezw.exe
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Run, %AEWindows Update=svchosts.exe
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Run, 196_150_ni=[%WINDOWS%]\System32\196_150_ni.exe
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Run, A New Windows Updater=w32NTupdt.exe
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Run, Aaou=[%PROGRAM_FILES%]\ipee\othb.exe
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Run, Aaou=[%PROGRAM_FILES%]\Outerinfo\OuterinfoUpdate.exe
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Run, Abc=[%WINDOWS%]\?racle\r?ndll.exe
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Run, Aconti=[%PROGRAM_FILES%]\Linksys EasyLink Advisor\LinksysAgent.exe
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Run, adprot=[%SYSTEM%]\adprot.exe
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Run, agentsvr=[%SYSTEM%]\agentsvr.exe
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Run, Aida=[%APPDATA%]\eetu.exe
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Run, Aida=[%APPDATA%]\ttuh.exe
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Run, Aida=[%SYSTEM%]\SKS~1\lsass.exe
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Run, Aida=[%SYSTEM%]\SSEMBL~1\dllhost.exe
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Run, Aida=[%WINDOWS%]\ICROSO~1.NET\winspool.exe
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Run, Aida=[%WINDOWS%]\PPATCH~1\javaw.exe
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Run, Aida=[%WINDOWS%]\WNSXS~1\rundll.exe
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Run, anti_troj=[%SYSTEM%]\anti_troj.exe
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Run, AOL Instant Messanger=aim.exe
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Run, aupd=[%SYSTEM%]\sysvcs.exe
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Run, autoupdatev2=[%SYSTEM%]\autoupdatev2.exe
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Run, auto__antiav__key=[%SYSTEM%]\antiav_exe.exe
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Run, auto__hloader__key=[%SYSTEM%]\hloader_exe.exe
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Run, Bandook=[%SYSTEM%]\ali.exe
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Run, bawindo=
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Run, BLMessagingIntegration=[%PROGRAM_FILES_COMMON%]\PSD Tools\blengine.exe
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Run, ClockSync=[%PROGRAM_FILES%]\ClockSync\Sync.exe
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Run, cosine=cosine.exe
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Run, cpntmgc=[%WINDOWS%]\winmgts\winmgts.exe
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Run, CPQHotkeys=hotkeysvc.exe
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Run, CSRSS=
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Run, CT Control Settings=CTSVCCD.EXE
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Run, CU1=
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Run, CU2=
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Run, CyDoor=CD_Load.exe
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Run, dark=[%SYSTEM%]\alg.scr
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Run, dark=[%WINDOWS%]\krn3.exe
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Run, Default=[%PROFILE%]\scvhost.exe
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Run, Default=[%PROFILE%]\winmain.exe
HKEY_CURRENT_USER\software\microsoft\windows\currentversion\run, deluxecommunications=[%PROGRAM_FILES%]\DeluxeCommunications\Dxc.exe
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Run, dePloy=keybdll.exe
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Run, Desktop=[%SYSTEM%]\idemlog.exe
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Run, Display Drivers=
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Run, DKTime=[%WINDOWS%]\System32\dktime.exe
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Run, dllhelp=[%WINDOWS%]\dllhelp.exe
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Run, DriverCheck=
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Run, DriverLoad=
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Run, Dynamic Link Library loader=
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Run, Error Safe=[%PROGRAM_FILES%]\Error Safe Free\ERS.exe /min
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Run, Error Safe=[%PROGRAM_FILES%]\Error Safe Free\ERS.exe
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Run, Error Safe=[%PROGRAM_FILES%]\Error Safe\ers.exe
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Run, Error Safe=[%PROGRAM_FILES%]\ErrorSafe\ERS.exe /min
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Run, explorer.exe=EXPLORER.EXE
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Run, eZmmod=[%PROGRAM_FILES%]\ezula\mmod.exe
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Run, eZWO=[%PROGRAM_FILES%]\Web Offer\wo.exe
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Run, Find=[%SYSTEM%]\findWH()
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Run, freestyle=lockx.exe
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Run, freexstyle=lockbr.exe
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\run, Games Acceleration=svshost1.exe
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Run, german.exe=[%SYSTEM%]\wintems.exe
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Run, HXDL.EXE=[%PROGRAM_FILES%]\Cosmi\HelpExpress\HXDL.EXE -from="HXIUL.EXE" -to="HXIUL.EXE" -run
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Run, HXIUL.EXE=[%PROGRAM_FILES%]\Alset\HelpExpress\Terry\HXIUL.EXE
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Run, HXIUL.EXE=[%PROGRAM_FILES%]\Cosmi\HelpExpress\Mr Mrs English\HXIUL.EXE
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Run, I/O Controllers=svcnet.exe
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Run, icasServ=
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Run, IECheck=[%WINDOWS%]\IECheck.exe
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Run, IELoader32=[%PROGRAM_FILES%]\Linksys EasyLink Advisor\LinksysAgent.exe
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Run, IELoader32=
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Run, Iinl=[%SYSTEM%]\SSTEM3~1\dexplore.exe
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Run, Instance 001=
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Run, Instant Access=[%SYSTEM%]\linkprd.exe /res
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Run, Instant Access=[%SYSTEM%]\lnaccess.exe /res
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Run, Instant Access=[%SYSTEM%]\mwsrvacc.exe /run
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Run, Instant Access=[%SYSTEM%]\prodsrvs.exe /res
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Run, Instant Access=[%SYSTEM%]\prosvsys.exe /res
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Run, Instant Access=rundll32.exe EGCOMLIB_1034.dll,InstantAccess
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Run, Intel system tool=[%SYSTEM%]\hookdump.exe
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Run, internet=[%SYSTEM%]\drivers\helpsys\internet.exe
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\run, Internet Connection Wizard=stisvsq1.exe
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Run, Internet Explorer=[%PROGRAM_FILES%]\Internet Explorer\iexplore.exe
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Run, Internet Explorer=ocrzudqe.EXE
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\run, Internet Mail and News=msqdevl1.exe
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Run, Internet Washer Pro=[%PROGRAM_FILES%]\INTERNET WASHER PRO\IW.exe min
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Run, InternetWasherPro=[%PROGRAM_FILES%]\INTERN~2\iw.exe
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Run, IpWins=[%PROGRAM_FILES%]\Ipwindows\ipwins.exe
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Run, irssyncd=[%SYSTEM%]\irssyncd.exe
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Run, ITUNES=[%PROGRAM_FILES%]\iTunes\iTunes.exe
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Run, JavaUpdate0.07=[%WINDOWS%]\System32\atlarv.exe
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Run, JavaUpdate0.07=[%WINDOWS%]\System32\uapjk.exe
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Run, jawa32=[%WINDOWS%]\jawa32.exe
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Run, Key=[%SYSTEM%]\sys_xp.exe
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Run, key=[%WINDOWS%]\System32\winxp.exe
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Run, key=
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Run, KillAndClean=[%PROGRAM_FILES%]\KillAndClean\KillAndClean.exe
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Run, License Manager=[%PROGRAM_FILES%]\License_Manager\license_manager.exe
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Run, Login Screen Saver=login.scr
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Run, lsass=
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Run, LTM2=[%WINDOWS%]\litmus\RunDlI32.exe
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Run, m4n70s Personal Firewall=m4n70s.exe
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Run, MailSkinner=[%PROGRAM_FILES%]\mailskinner\mailskinner.exe
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Run, MC=
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Run, mgmtapi=[%SYSTEM%]\mgmtapi.exe
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Run, microsoft=servicess.exe
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Run, Microsoft boot system cfg32=actboost.exe
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Run, Microsoft DirectX=PDSched.exe
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Run, Microsoft DirectX=wuamgrd.exe
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Run, Microsoft Excel=msexcel.exe
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Run, Microsoft Help System=[%SYSTEM%]\mshelp32.com
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\run, Microsoft Management Console=lssas1.exe
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Run, Microsoft Office Studio=scvhvst.exe
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Run, Microsoft Services=lsrv.exe
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Run, Microsoft Synchronization Manager=___synmgr.exe
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Run, Microsoft Telecoms Center=telcoms.exe
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Run, Microsoft Update Machine=bpsveyyu.exe
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Run, Microsoft Update Machine=cgheuj.exe
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Run, Microsoft Update Machine=gycrzc.exe
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Run, Microsoft Update Machine=iovyrn.exe
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Run, Microsoft Update Machine=omryog.exe
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Run, Microsoft Update Machine=vcxubk.exe
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Run, Microsoft Update Machine=xsxkfc.exe
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Run, Microsoft Update Service=sdoitjjwx.exe
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Run, Microsoft Update Time=wuam.exe
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Run, Microsoft Update v2.6=lxxex.exe
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Run, Microsoft Updates=wkssvrs.exe
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Run, Microsoft Windows DLL Services Configuration=windir32.exe
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Run, Microsoft Windows Update=[%SYSTEM%]\srshost.exe
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Run, Microsoft Windows Update=[%WINDOWS%]\system32\srshost.exe
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Run, Microsoft Windows Update=svcshost.exe
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Run, Microsoft Windows Update=
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Run, Microsoft Windows Updater=illusion1.exe
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Run, Microsoft Windows Updater=ncgeca.exe
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Run, mprocessor=[%PROGRAM_FILES%]\\MProcessor\mprocessor.exe
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Run, MS Sound Config 16bit=sndcfg16.exe
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Run, MS Unix Binary=trmupdate.exe
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Run, MS windows Data list process=MSDATLST.exe
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Run, MS Windows Process Class=MSPRCSS32.exe
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Run, Msbb.exe=Msbb.exe
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Run, MSChoExE=suge.exe
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Run, msmc=[%SYSTEM%]\msgked.exe
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Run, msmc=[%SYSTEM%]\msmc.exe
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Run, msmc=[%WINDOWS%]\System32\msgked.exe
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Run, msn=[%SYSTEM%]\mose.bat
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Run, Msn Configuration Loader=msngms.exe
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Run, MSN messenger service=msnmsg.exe
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Run, MSNPluginSrvcs=p6.exe
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Run, Mstask=[%SYSTEM%]\mstask.exe
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Run, Mstask=[%WINDOWS%]\svchoct.exe
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\run, Multimedia extensions=mservice1.exe
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Run, MyWebSearch Email Plugin=[%PROGRAM_FILES%]\MYWEBS~1\bar\1.bin\mwsoemon.exe
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Run, NAV Auto Protect=mcafee32.exe
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Run, Ncao=[%SYSTEM%]\YMANTE~1\arpa.exe
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Run, Ncao=[%WINDOWS%]\SEMBLY~1\javaw.exe
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Run, Ncao=[%WINDOWS%]\STEM~1\notepad.exe
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Run, NetMeter=[%PROGRAM_FILES%]\HooTech\NetMeter\HooNetMeter.exe
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Run, ngpw36=[%SYSTEM%]\ngpw36.exe
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Run, Nortons AV SYSTEM=scvchost.exe
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Run, Notn=[%SYSTEM%]\ASKS~1\winword.exe
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Run, NsCplTray=borlandg.exe
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Run, NT-Virtual Device Manager=ntvdmn.exe
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Run, NTFSS Microsoft System=filees.exe
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Run, Osus=[%WINDOWS%]\YSTEM3~1\nopdb.exe
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Run, PCShield=regsvr32 /s "[%SYSTEM%]\sfg.dll"
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Run, PCShield=regsvr32 /s "[%SYSTEM%]\sfg_0d2b.dll"
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Run, PCShield=regsvr32 /s "[%SYSTEM%]\sfg_1f91.dll"
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Run, PCShield=regsvr32 /s "[%SYSTEM%]\sfg_339d.dll"
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Run, PCShield=regsvr32 /s "[%WINDOWS%]\System32\KDP3114.dll"
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Run, PCShield=regsvr32 /s "[%WINDOWS%]\System32\sfg_26cc.dll"
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Run, PCShield=regsvr32 /s "[%WINDOWS%]\System32\sfg_2dc9.dll"
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Run, PCShield=regsvr32 /s "[%WINDOWS%]\System32\sfg_2e1c.dll"
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Run, PCShield=regsvr32 /s "[%WINDOWS%]\System32\sfg_4c7d.dll"
HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Run, PestTrap=[%PROGRAM_FILES%]\PestTrap\PestTrap.exe
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Run, pro=[%PROFILE%]\zbecczmv.exe
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Run, pro=[%PROFILE_TEMP%]\ICD1.tmp\n.exe
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Run, pro=[%PROFILE_TEMP%]\NpcNMdohh
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Run, pro=[%PROFILE_TEMP%]\us0004.exe
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Run, pshower=[%SYSTEM%]\pshwr.exe
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Run, qwe=bnui.exe
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Run, rant=rant.exe
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Run, Red Swoosh EDN Client=[%PROGRAM_FILES%]\RSSoft\RSEDNClient.exe
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Run, Regscan=[%SYSTEM%]\regscan.exe
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Run, Regscan=[%WINDOWS%]\System32\regscan.exe
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Run, Regscan=rem [%SYSTEM%]\regscan.exe
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Run, RSPC Driver=abvs.exe
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Run, scApp=[%SYSTEM%]\wmiprvse.exe
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Run, Security=[%SYSTEM%]\security.exe
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Run, Sen=[%PROGRAM_FILES%]\Outerinfo\OuterinfoUpdate.exe
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Run, Sen=[%SYSTEM%]\CROSOF~1.NET\notepad.exe
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Run, Sen=[%WINDOWS%]\SCURIT~1\arpa.exe
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Run, Service=[%SYSTEM%]\service.exe
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Run, Service.exe=[%WINDOWS%]\service.exe
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Run, services=
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Run, services32=[%PROGRAM_FILES_COMMON%]\Windows\mc-110-12-0000137.exe
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Run, Shell=[%PROGRAM_FILES_COMMON%]\Microsoft Shared\Web Folders\ibm00001.exe
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Run, Shell=[%PROGRAM_FILES_COMMON%]\Microsoft Shared\Web Folders\ibm00002.exe
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Run, Shell=[%PROGRAM_FILES_COMMON%]\Microsoft Shared\Web Folders\ibm00007.exe
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Run, Shell API32=svcnet.exe
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Run, smss=[%SYSTEM%]\DirectX\Dinput\smss.exe
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Run, smss=
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Run, Sonic RecordNow!=[%PROGRAM_FILES%]\HP\HP Software Update\HPWuSchd2.exe
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Run, Sonic RecordNow!=[%SYSTEM%]\ctfmon.exe
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Run, Sonic RecordNow!=
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Run, spoo1sv=[%SYSTEM%]\2051\spoo1sv.exe
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Run, Spoolsv=[%SYSTEM%]\spoolvs.exe
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Run, SpyClean=[%PROGRAM_FILES%]\Netcom3 Cleaner\SpyClean.exe
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Run, Spyware Cleaner=[%PROGRAM_FILES%]\Spyware Cleaner\SpywareCleaner.Exe
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Run, Spyware Vanisher=[%PROFILE_TEMP%]\RarSFX0\SpywareVanisher.exe -FastScan
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Run, srshost.exe=[%SYSTEM%]\srshost.exe
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Run, SSK Service=[%WINDOWS%]\winssk32.exe
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Run, start extracting=spoolvse.exe
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Run, Start Page=http://www.smartrecovery.org/
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Run, startkey=[%SYSTEM%]\rundf.exe
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Run, startkey=[%SYSTEM%]\server.exe
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Run, startkey=[%SYSTEM%]\setup.dll
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Run, startkey=[%SYSTEM%]\win32.exe
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Run, startkey=[%SYSTEM%]\winampXP.exe
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Run, startkey=[%SYSTEM%]\winlog.exe
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Run, startkey=[%SYSTEM%]\winn32.exe
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Run, startkey=[%SYSTEM%]\winsystem.exe
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Run, startkey=[%SYSTEM%]\winupdate.exe
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Run, startkey=[%SYSTEM%]\ypager.exe
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Run, startkey=[%WINDOWS%]\svchost.exe
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Run, startkey=[%WINDOWS%]\winnows.exe
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Run, StatBar=[%PROGRAM_FILES%]\Globe Software\StatBar\StatBar.exe
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Run, stratas=lockx.exe
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Run, strtas=l074.exe
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Run, SurfSideKick 3=[%PROGRAM_FILES%]\SurfSideKick 3\Ssk.exe
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Run, SVCHOST=[%PROGRAM_FILES%]\BPK\svchost.exe
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Run, SVCHOST=[%STARTUP%]\svchost.exe
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Run, SVCHOST=[%SYSTEM%]\mhhgelhd\svchost.exe
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Run, SVCHOST=[%SYSTEM%]\ollcaxasp\svchost.exe
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Run, SVCHOST=[%SYSTEM%]\pldnbvbdom\svchost.exe
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Run, SVCHOST=[%SYSTEM%]\vdzjik\svchost.exe
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Run, SVCHOST=[%SYSTEM%]\zytogmrrt\svchost.exe
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Run, SVCHOST=[%WINDOWS%]\SVCHOST.EXE
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Run, SVHOST=[%SYSTEM%]\svhost.exe
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Run, SVHOST=[%WINDOWS%]\WINDOWS\svhost.exe
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Run, Sygate Personal Firewall=MSNSRV32.exe
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Run, sys32=[%SYSTEM%]\hbcyjpsdsc.exe
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\run, sys32=[%SYSTEM%]\igwkewyqms.exe
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Run, sys32=[%SYSTEM%]\ypudutmnsl.exe
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Run, Syscpy=
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Run, Sysctrls=Sysctrls.exe
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Run, Sysdpt=[%SYSTEM%]\sysdpt.exe
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Run, sysformat=[%SYSTEM%]\sysformat.exe
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Run, sysformat=[%WINDOWS%]\System32\sysformat.exe
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Run, sysinfo=[%SYSTEM%]\sysinfo.exe
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Run, sysmon12=ATLIEHELPER.exe
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Run, System=lsas.exe
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Run, System driver=[%SYSTEM%]\scdata.exe
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Run, System Kernal Support=system.exe
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Run, System Service=
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Run, System Soap Pro=[%PROGRAM_FILES%]\SYSTEM~1\soap.exe min
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Run, System Support=system32.exe
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Run, System Update=[%WINDOWS%]\System\explorer.exe
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Run, System Updates Service=updates.pif
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Run, System32Check=System32Check.exe
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Run, SystemDriver=
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Run, SystemDriverLoad=
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Run, Tapisys=[%WINDOWS%]\System32\tss.exe
HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Run, taskdir=[%SYSTEM%]\taskdir.exe
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Run, taskdir=[%WINDOWS%]\System32\taskdir.exe
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Run, tbon=[%PROGRAM_FILES%]\TBONBin\tbon.exe /r
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Run, Tok-Cirrhatus=[%LOCAL_APPDATA%]\smss.exe
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Run, Tok-Cirrhatus=[%SYSTEM%]\SMSS.EXE
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Run, Tok-Cirrhatus=
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Run, Tsa2=[%PROGRAM_FILES%]\COMMON~1\tsa\tsm2.exe
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Run, TV Media=[%PROGRAM_FILES%]\TV Media\Tvm.exe
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Run, UnSpyPC=[%PROGRAM_FILES%]\UnSpyPC\UnSpyPC.exe
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Run, Update=[%SYSTEM%]\Update32.exe
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Run, USB Updates=msfirewalls.exe
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Run, userinit=[%SYSTEM%]\ntos.exe
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Run, Usrr=[%PROGRAM_FILES%]\etea\rpen.exe
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Run, WareOut=[%PROGRAM_FILES%]\WareOut\WareOut.exe
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Run, WCPS=[%WINDOWS%]\System32\wintit.exe
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Run, WebRun=[%PROGRAM_FILES%]\Linksys EasyLink Advisor\LinksysAgent.exe
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Run, WebRun=
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Run, WebSpecials=rundll32 "[%PROGRAM_FILES%]\WebSpecials\webspec.dll",run
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Run, WhenUSave=[%PROGRAM_FILES%]\Save\Save.exe
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Run, win update=wupda32.exe
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Run, Win32 USB2 Driver=svchostt.exe
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Run, Windll.exe=
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Run, Windows Compliant=wgrdef.exe
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Run, Windows Compliant=winole.exe
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Run, Windows Config Manager=winconf.exe
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Run, Windows Firewall=[%WINDOWS%]\System32\drivers\svchost.exe
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Run, Windows Generic Proc=procmsg.exe
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Run, Windows Media Player=mcafe32.exe
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Run, Windows Processe Manager=mspn32.exe
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Run, Windows Security Assistant=[%SYSTEM%]\rundll32.vbe
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Run, Windows Services=winspoof.exe
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Run, Windows Update=[%PROGRAM_FILES%]\WindowsUpdate\wupdate.exe
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Run, Windows Update=[%SYSTEM%]\avgss.exe
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Run, Windows Update=[%SYSTEM%]\Explorer.EXE
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Run, Windows Update=[%SYSTEM%]\internet.exe
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Run, Windows Update=[%SYSTEM%]\My_Server.exe
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Run, Windows Update=[%SYSTEM%]\scvhost.exe
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Run, Windows Update=[%SYSTEM%]\svchost.exe
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Run, Windows Update=[%SYSTEM%]\svhosts.exe
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Run, Windows Update=[%WINDOWS%]\svchost.exe
HKEY_CURRENT_USER\software\microsoft\windows\currentversion\run, windows update loader=[%WINDOWS%]\xpupdate.exe
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Run, Windows Update Service=[%WINDOWS%]\trest.exe
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Run, Windows Update Service=rem [%WINDOWS%]\trest.exe
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Run, Windows Workstation=mpci.exe
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Run, WindowsProtocolLog=lsadst.exe
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Run, WindowsRegKey upd4te2d4te=ixmuyqdcq.exe
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Run, WindowsRegKeys update=winsysi.exe
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Run, Windows_Protect=sygate.exe
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Run, Windoxs Update Center=W32RfSA.exe
HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Run, WinFixer2005=[%PROGRAM_FILES%]\WinFixer 2005\uwfx5.exe
HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Run, WinFixer2005=[%PROGRAM_FILES%]\WinFixer_2005\uwfx5.exe
HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Run, WinFixer2006=[%PROGRAM_FILES%]\WinFixer_2006\uwfx6.exe
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Run, winipsec=[%SYSTEM%]\winipsec.exe
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Run, winrun=[%PROGRAM_FILES%]\Windows Media Player\csrss.exe
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Run, Winservice=[%WINDOWS%]\hosth.exe
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Run, winshost.exe=[%SYSTEM%]\winshost.exe
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Run, WinStart=[%WINDOWS%]\winstart32.exe
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Run, WinTimer=-"[%PROGRAM_FILES%]\Breakpoint Computers\WinTimer\WinTimer.exe"
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Run, WinTimer=[%PROGRAM_FILES%]\Breakpoint Computers\WinTimer\WinTimerC.exe
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Run, WinUpdate=[%COMMON_STARTUP%]\Uninstall64578.exe
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Run, WinUpdate=[%PROGRAM_FILES%]\WinUpdate\WinUpdate.exe
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Run, WinUpdate=[%WINDOWS%]\jusched.exe
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Run, win_upd2.exe=[%SYSTEM%]\WINdirect.exe
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Run, xp_system=[%WINDOWS%]\inet20000\services.exe
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Run, xp_system=[%WINDOWS%]\inet20126\winlogon.exe
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Run, YahooStock=
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Run, zSearch=[%PROGRAM_FILES%]\zSearch\Zstb.exe
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Run, zzb=[%SYSTEM%]\zzb.exe
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Run, zzb2=[%SYSTEM%]\zzb2.exe
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Run, _WinCheck=[%WINDOWS%]\ConnectionStatus\Microsoft\services.exe
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Run, _Windows=[%WINDOWS%]\WinSecurity\services.exe
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Run-, eZmmod=[%PROGRAM_FILES%]\ezula\mmod.exe
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Run-, iedll=[%WINDOWS%]\iedll.exe
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Run-, Internet Explorer=[%PROGRAM_FILES%]\Internet Explorer\iexplore.exe
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Run-, ITUNES=[%PROGRAM_FILES%]\iTunes\iTunes.exe
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Run-, License Manager=[%PROGRAM_FILES%]\License_Manager\license_manager.exe
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Run-, Limewire=[%PROGRAM_FILES%]\LimeWire\LimeWire.exe
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Run-, loader=[%WINDOWS%]\LOADER.EXE
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Run-, Logon.exe=[%WINDOWS%]\SYSTEM\logon.exe
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Run-, Notn=[%APPDATA%]\wtta.exe
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Run-, pshower=[%SYSTEM%]\pshwr.exe
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Run-, regedit=[%SYSTEM%]\regedit.exe
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Run-, Shell=[%PROGRAM_FILES_COMMON%]\Microsoft Shared\Web Folders\ibm00001.exe
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Run-, Shell=[%SYSTEM%]\ibm00003.exe
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Run-, Start Page=http://www.g1.cool168.com
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Run-, stratas=lockx.exe
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Run-, taskdir=[%SYSTEM%]\taskdir.exe
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Run-, tbon=[%PROGRAM_FILES%]\iWatchNow, Inc\iWatchNow Media Center\TBONBin\tbon.exe /r
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Run-, tbon=[%PROGRAM_FILES%]\TBONBIN\TBON.EXE /r
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Run-, TV Media=[%PROGRAM_FILES%]\TV MEDIA\TVM.EXE
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Run-, WareOut=[%PROGRAM_FILES%]\WareOut\WareOut.exe
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Run-, WhenUSave=[%PROGRAM_FILES%]\Save\Save.exe
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Run-, Windows Media Player=[%PROGRAM_FILES%]\Windows Media Player\wmplayer.exe
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Run-, Windows Update=[%WINDOWS%]\WINUPDATE.EXE
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Run-, Windows update loader=[%WINDOWS%]\xpupdate.exe
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Run-, WTSS=[%WINDOWS%]\SYSTEM32\wapisvsu.exe
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\RunOnce, Config=[%PROGRAM_FILES_COMMON%]\Microsoft Shared\MSInfo\msnfo32.exe
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\RunOnce, Config=[%PROGRAM_FILES_COMMON%]\Microsoft Shared\MSInfo\TaskUpdate.exe
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Runonce, Config=[%PROGRAM_FILES_COMMON%]\System\WinService32.exe
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Runonce, Scanreg=[%WINDOWS%]\iexplorer.exe
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\RunOnce, SysInit=[%SYSTEM%]\drivers\system.exe
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\RunOnce, SysInit=[%WINDOWS%]\System32\drivers\sysdrv.exe
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\RunServices, Compaqs Service Driver=copypad32.exe
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\RunServices, CPQHotkeys=hotkeysvc.exe
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\RunServices, Display Drivers=
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\RunServices, HTML32 Help System=hhs32.pif
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\RunServices, Image=rundll32 [%WINDOWS%]\image.dll,Install
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\RunServices, IPConfig=
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\RunServices, Microsoft Update v2.6=lxxex.exe
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\RunServices, MSDOS Security Service=msdos.pif
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\RunServices, MSN messenger service=msnmsg.exe
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\RunServices, start extracting=spoolvse.exe
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\runservices, Start Page=http://www.smartrecovery.org/
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\RunServices, start uploading=smsss.exe
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\RunServices, System Updated=svchoes.exe
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\RunServices, System Updates Service=updates.pif
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\RunServices, Wind Security=oueeupez.exe
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\RunServices, Windows Generic Proc=procmsg.exe
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\RunServices, Windows NT Login Session Manager=WNTLSM.EXE
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\RunServices, Windows Processe Manager=mspn32.exe
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\RunServices, WINDOWS SECURITY=ms32.pif
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\RunServices, Windows System32=explorer.exe
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\RunServices, WinStart=[%WINDOWS%]\winstart32.exe
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\runservicesonce, Start Page=http://www.smartrecovery.org/
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Run_Disabled, Microsoft Windows DLL Services Configuration=windir32.exe
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Run_Disabled, services32=[%PROGRAM_FILES_COMMON%]\Windows\mc-110-12-0000080.exe
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Run_Disabled, tbon=[%PROGRAM_FILES%]\TBONBin\tbon.exe /r
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Run_Disabled, zzb2=[%SYSTEM%]\zzb2.exe
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run (Disabled), AltnetPointsManager=[%PROGRAM_FILES%]\Altnet\Points Manager\Points Manager.exe -s
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run (Disabled), CSRSS=[%WINDOWS%]\csrss.exe
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run (Disabled), SemanticInsight=[%PROGRAM_FILES%]\RXToolBar\Semantic Insight\SemanticInsight.exe
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run (Disabled), updater=[%PROGRAM_FILES_COMMON%]\updater\wupdater.exe
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run Once, RunOnceEx=rundll32.exe iernonce.dll,RunOnceExProcess
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run Once, Srv32 spool service=[%WINDOWS%]\System32\spoolsrv32.exe
HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Run Services, winlog=winlog.exe
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run, %AEWindows Update=svchosts.exe
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run, .nvsvc=[%WINDOWS%]\system\smss.exe /w
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run, 180ax=[%WINDOWS%]\180ax.exe
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run, 2Search=[%PROGRAM_FILES%]\2search\main.exe
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run, 9xadiras=9xadiras.exe
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run, a=[%PROFILE_TEMP%]\A.exe
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run, a=[%SYSTEM%]\a.exe
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run, Aapp=[%SYSTEM%]\adprot
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run, Aconti=[%PROGRAM_FILES%]\websx\int316899.exe -auto
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run, Admilli Service=[%PROGRAM_FILES%]\Admilli Service\AdmilliServ.exe
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run, Adobe=[%PROGRAM_FILES%]\Adobe\Acrobat 7.0\Reader\reader_sl.exe
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run, adstartup=[%WINDOWS%]\System32\automove.exe
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run, AdStatus Service=[%PROGRAM_FILES%]\AdStatus Service\AdStatServ.exe
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run, AdTools Service=[%PROGRAM_FILES%]\AdTools Service\AdTools.exe
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run, AGSeyApp=[%PROGRAM_FILES%]\AGSeydsApp\AGSeyApp.exe
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run, Alchem=[%WINDOWS%]\alchem.exe
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run, AlfaCleaner=[%PROGRAM_FILES%]\AlfaCleaner\AlfaCleaner.exe
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run, AltnetPointsManager=[%PROGRAM_FILES%]\altnet\points manager\points manager.exe -s
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run, AltnetPointsManager=
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run, AltPayments=[%PROGRAM_FILES%]\AltPayments\AltPayments.exe
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run, Antivirus=[%DESKTOPDIRECTORY%]\MismaSXS.exe /SCAN
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run, Antivirus=[%WINDOWS%]\b.exe
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run, Antivirus=[%WINDOWS%]\fw_304.exe /i
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run, AntivirusGold=[%PROGRAM_FILES%]\AVG\AntivirusGold 4.8\AntivirusGold 4.8.exe /h
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run, anti_troj=[%SYSTEM%]\anti_troj.exe
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run, AOL Instant Messanger=aim.exe
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run, AOL Messenger Optimized=AOLOpt.exe
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run, Application Layer Gateway Service=[%SYSTEM%]\algs.exe
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run, AQ3HelperStartUp=[%PROGRAM_FILES%]\AQUATI~1\AQ3HEL~1.EXE /partner AQ3
HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Run, aqadcup=[%WINDOWS%]\aqadcup.exe
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run, atipatxx=[%SYSTEM%]\atipatxx.exe
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run, AttuneClientEngine=[%PROGRAM_FILES%]\Aveo\Attune\bin\attune_ce.exe
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run, AttuneSystray=[%PROGRAM_FILES%]\Aveo\Attune\Bin\Attune_st.exe
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run, AUDIO=run.exe
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run, AutoUpdater=[%PROGRAM_FILES%]\AutoUpdate\AutoUpdate.exe
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run, auto__antiav__key=[%SYSTEM%]\antiav_exe.exe
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run, AV UpDate=[%SYSTEM%]\Spool\prtprocs\Update.exe
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run, avnort=[%WINDOWS%]\msmbw.exe
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run, AVP=[%PROGRAM_FILES%]\AOL\Active Virus Shield\avp.exe
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run, AVP=[%PROGRAM_FILES%]\PCSecurityShield\The Shield Deluxe 2008\avp.exe
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run, AVP=[%PROGRAM_FILES%]\PCSecurityShield\TheShieldDeluxe\avp.exe
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run, AVP=[%SYSTEM%]\avp.exe
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run, avp=[%WINDOWS%]\avp.exe
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run, avp=[%WINDOWS%]\TEMP\win28B8.tmp.exe
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run, avp=[%WINDOWS%]\TEMP\win7C0D.tmp.exe
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run, avp=[%WINDOWS%]\TEMP\win??.tmp.exe
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run, avp=[%WINDOWS%]\TEMP\winC02.tmp.exe
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run, bargains=[%PROGRAM_FILES%]\Bargain Buddy\bin\bargains.exe
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run, bargains=
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run, Belt=[%WINDOWS%]\Belt.exe
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run, BIE=Rundll32 [%WINDOWS%]\DOWNLO~1\BDPlugin.dll,Rundll32
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run, Bios=[%SYSTEM%]\bios.exe
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run, BlockChecker=[%PROGRAM_FILES%]\Block Checker\block-checker.exe
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run, BMan=[%COMMON_APPDATA%]\msw\BMan1.exe
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run, BookedSpace=RunDLL32.EXE [%WINDOWS%]\bs2.dll,DllRun
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run, Boot Manager=bootmng.exe
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run, Bron-Spizaetus=[%WINDOWS%]\INF\norBtok.exe
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run, Bron-Spizaetus=[%WINDOWS%]\ShellNew\bronstab.exe
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run, Bron-Spizaetus=[%WINDOWS%]\ShellNew\RakyatKelaparan.exe
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run, Bron-Spizaetus=[%WINDOWS%]\ShellNew\sempalong.exe
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run, Bron-Spizaetus=
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run, BrowserUpdateSched=[%WINDOWS%]\System32\pwinmqez.exe GID003
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run, BullsEye Network=[%PROGRAM_FILES%]\BullsEye Network\bin\bargains.exe
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run, bxproxy=[%PROFILE%]\mssvmdll.dll
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run, bxsx5=RunDLL32.EXE [%WINDOWS%]\bsx5.dll,DllRun
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run, bxxs5=RunDLL32.EXE [%WINDOWS%]\bxxs5.dll,DllRun
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run, c=[%SYSTEM%]\c.exe
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run, ccExecute=[%SYSTEM%]\bootcfg1.exe
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run, cfgmgr52=RunDLL32.EXE [%WINDOWS%]\cfgmgr52.dll,DllRun
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run, ClickTheButton=
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run, Client Server Runtime Process=[%SYSTEM%]\csrs.exe
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run, CME=[%WINDOWS%]\System32\cme.exe
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run, CmeSYS=[%PROGRAM_FILES_COMMON%]\CMEII\CMESys.exe
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run, CmeUPD=[%WINDOWS%]\System32\cmeupd.exe
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run, cmrss=[%SYSTEM%]\cmrss.scr
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run, CnsMin=Rundll32.exe [%WINDOWS%]\DOWNLO~1\CnsMin.dll,Rundll32
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run, ComcastSUPPORT=[%PROGRAM_FILES%]\Support.com\bin\tgkill.exe /cleaneahtioga /start
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run, ComcastSUPPORT=[%PROGRAM_FILES%]\Support.com\bin\tgkill.exe
HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\run, configuration manager=[%WINDOWS%]\cfg32.exe
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run, Configuration Service=[%SYSTEM%]\suchost.exe
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run, conscorr=[%WINDOWS%]\conscorr.exe
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run, Critical Update Check=%%Windir%%\battlenet.exe
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run, Cryptographic Service=[%WINDOWS%]\System32\aiamqze.exe
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run, Cryptographic Service=[%WINDOWS%]\System32\fbuwtr.exe
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run, Cryptographic Service=[%WINDOWS%]\System32\imfmi.exe
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run, CSRSS=[%SYSTEM%]\wbem\csrss.exe
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run, CSRSS=[%WINDOWS%]\System\csrss.exe
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run, CSRSS=RunDLL32.exe NvMCTray.dll,NvTaskbarInit
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run, CSRSS=
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run, csrssLevel4=[%WINDOWS%]\System\Level4\csrss.exe
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run, Daily Weather Forecast=[%PROGRAM_FILES%]\Daily Weather Forecast\weather.exe
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run, Data=[%WINDOWS%]\System32\spool.exe
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run, DDCM=[%PROGRAM_FILES%]\WildTangent\DDC\DDCManager\DDCMan.exe
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run, DDCM=xxxmwd"[%PROGRAM_FILES%]\WildTangent\DDC\DDCManager\DDCMan.exe" -Backgroundmwdxxx
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run, DealHelperBrwsr=[%WINDOWS%]\dhbrwsr.exe
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run, DealHelperUpdate=[%WINDOWS%]\DHUpdt.exe
HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Run, defender=
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run, DeluxeCommunications=[%PROGRAM_FILES%]\DeluxeCommunications\Dxc.exe
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run, dePloy=BoundRec.exe
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run, Desktop=[%SYSTEM%]\rundll32.exe "[%PROGRAM_FILES%]\DeskAdTop\Run.dll" ,Rundll
HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Run, Desktop Search=[%WINDOWS%]\isrvs\desktop.exe
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run, Diagnostic=[%WINDOWS%]\svchost.exe

Scan your system registry for FREE

Name		Remember
E-mail		Your e-mail will never be shown.
Message

Top 10 virus alerts

Latest 10 malware files

Testimonials

Autorun Malware Registry Values

Comments