Sdbot.AAD Backdoor - PrivacyAnywhere Spyware Research Library


	Home / Research


	Sdbot.AAD

Details of the Sdbot.AAD are shown below. This threat can be detected and cleaned using PestBlock Anti-Spyware.


Name:	Sdbot.AAD
Type:	Backdoor
Risk:
Description:	Backdoor.Sdbot.AAD installs itself in the registry, forcing it to load with Windows and can download additional malware from remote servers.

Removal
We do not publish here the MD5 checksums for files. PestBlock Anti Spyware can identify good file from bad more accurately.

Registry Items:

HKEY_CURRENT_USER\Software\Microsoft\Windows NT\CurrentVersion\Windows\run\MsMedia.exe
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run\Internet Explorer Helper
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run\SysMedia\SysMedia.exe
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run\Windows Helper\svchozt.exe
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\RunServices\MsMedia\MsMedia.exe
HKEY_LOCAL_MACHINE\SYSTEM\ControlSetEnum\Root\LEGACY_DLINK32
HKEY_LOCAL_MACHINE\SYSTEM\ControlSetEnum\Root\LEGACY_MSDNUPDATE32
HKEY_LOCAL_MACHINE\SYSTEM\ControlSetServices\AOL Instant Messenger\ImagePath\yimsgr.exe
HKEY_LOCAL_MACHINE\SYSTEM\ControlSetServices\kbvideo\ImagePath\kbvideo.sys
HKEY_LOCAL_MACHINE\SYSTEM\ControlSetServices\Lpdriver
HKEY_LOCAL_MACHINE\SYSTEM\ControlSetServices\msdnupdate32
HKEY_LOCAL_MACHINE\SYSTEM\ControlSetServices\WINSERVICE
HKEY_LOCAL_MACHINE\SYSTEM\CEnum\Root\LEGACY_80XFIRE
HKEY_LOCAL_MACHINE\SYSTEM\CEnum\Root\LEGACY_AC
HKEY_LOCAL_MACHINE\SYSTEM\CEnum\Root\LEGACY_AIM.EX
HKEY_LOCAL_MACHINE\SYSTEM\CEnum\Root\LEGACY_APPLAYERGATEWAYMGR
HKEY_LOCAL_MACHINE\SYSTEM\CEnum\Root\LEGACY_ARCPLUG
HKEY_LOCAL_MACHINE\SYSTEM\CEnum\Root\LEGACY_B0T
HKEY_LOCAL_MACHINE\SYSTEM\CEnum\Root\LEGACY_CODEC
HKEY_LOCAL_MACHINE\SYSTEM\CEnum\Root\LEGACY_CONTENT_LIST_MANAGEMENT_SUB_SYSTEM
HKEY_LOCAL_MACHINE\SYSTEM\CEnum\Root\LEGACY_CPANEL
HKEY_LOCAL_MACHINE\SYSTEM\CEnum\Root\LEGACY_DDD
HKEY_LOCAL_MACHINE\SYSTEM\CEnum\Root\LEGACY_DLLREG
HKEY_LOCAL_MACHINE\SYSTEM\CEnum\Root\LEGACY_DLLCHECK32
HKEY_LOCAL_MACHINE\SYSTEM\CEnum\Root\LEGACY_DVDREALM
HKEY_LOCAL_MACHINE\SYSTEM\CEnum\Root\LEGACY_EMAIL_AV
HKEY_LOCAL_MACHINE\SYSTEM\CEnum\Root\LEGACY_ET54FG
HKEY_LOCAL_MACHINE\SYSTEM\CEnum\Root\LEGACY_FIREFOX_AUTO_UPDATE
HKEY_LOCAL_MACHINE\SYSTEM\CEnum\Root\LEGACY_FREPDLL.EXE
HKEY_LOCAL_MACHINE\SYSTEM\CEnum\Root\LEGACY_GENUINE_ADV_TOOL
HKEY_LOCAL_MACHINE\SYSTEM\CEnum\Root\LEGACY_JUSCHED
HKEY_LOCAL_MACHINE\SYSTEM\CEnum\Root\LEGACY_LOCAL_NETWORK_CONNECTOIN
HKEY_LOCAL_MACHINE\SYSTEM\CEnum\Root\LEGACY_LOGONUINTERF
HKEY_LOCAL_MACHINE\SYSTEM\CEnum\Root\LEGACY_LSA_SHEL_(EXPORT_VERSION)
HKEY_LOCAL_MACHINE\SYSTEM\CEnum\Root\LEGACY_NETWORK_CONFG_SYSTEM
HKEY_LOCAL_MACHINE\SYSTEM\CEnum\Root\LEGACY_MSTLSAPI32
HKEY_LOCAL_MACHINE\SYSTEM\CEnum\Root\LEGACY_MICROSOFT_SERVICES
HKEY_LOCAL_MACHINE\SYSTEM\CEnum\Root\LEGACY_MICROSOFT_SYSTEM_MANAGEMENT_BIOS_DRIVER
HKEY_LOCAL_MACHINE\SYSTEM\CEnum\Root\LEGACY_MICROSOFT_WINDOWS_UPDATE
HKEY_LOCAL_MACHINE\SYSTEM\CEnum\Root\LEGACY_MONDRV
HKEY_LOCAL_MACHINE\SYSTEM\CEnum\Root\LEGACY_MS_DTC_CONSOLE
HKEY_LOCAL_MACHINE\SYSTEM\CEnum\Root\LEGACY_MSRUNDLL32
HKEY_LOCAL_MACHINE\SYSTEM\CEnum\Root\LEGACY_MS040
HKEY_LOCAL_MACHINE\SYSTEM\CEnum\Root\LEGACY_MSVNC
HKEY_LOCAL_MACHINE\SYSTEM\CEnum\Root\LEGACY_NETDDEDSMA
HKEY_LOCAL_MACHINE\SYSTEM\CEnum\Root\LEGACY_NETINFO
HKEY_LOCAL_MACHINE\SYSTEM\CEnum\Root\LEGACY_NETLGN
HKEY_LOCAL_MACHINE\SYSTEM\CEnum\Root\LEGACY_NTDRV
HKEY_LOCAL_MACHINE\SYSTEM\CEnum\Root\LEGACY_NTFSDISCMAN
HKEY_LOCAL_MACHINE\SYSTEM\CEnum\Root\LEGACY_ORANS
HKEY_LOCAL_MACHINE\SYSTEM\CEnum\Root\LEGACY_ODBC32
HKEY_LOCAL_MACHINE\SYSTEM\CEnum\Root\LEGACY_PROCESS_KERNEL_MANAGER
HKEY_LOCAL_MACHINE\SYSTEM\CEnum\Root\LEGACY_RDRIV
HKEY_LOCAL_MACHINE\SYSTEM\CEnum\Root\LEGACY_REGSTRMON
HKEY_LOCAL_MACHINE\SYSTEM\CEnum\Root\LEGACY_REMOTE_DEBUG_SYSTEM
HKEY_LOCAL_MACHINE\SYSTEM\CEnum\Root\LEGACY_REMOTEREGBCK
HKEY_LOCAL_MACHINE\SYSTEM\CEnum\Root\LEGACY_RPCSCC
HKEY_LOCAL_MACHINE\SYSTEM\CEnum\Root\LEGACY_SCSMS
HKEY_LOCAL_MACHINE\SYSTEM\CEnum\Root\LEGACY_SDKTEMP
HKEY_LOCAL_MACHINE\SYSTEM\CEnum\Root\LEGACY_SERVICE_SECURED
HKEY_LOCAL_MACHINE\SYSTEM\CEnum\Root\LEGACY_SHELLSWDETECTION
HKEY_LOCAL_MACHINE\SYSTEM\CEnum\Root\LEGACY_SP2PNPFIX
HKEY_LOCAL_MACHINE\SYSTEM\CEnum\Root\LEGACY_SPDAUTH
HKEY_LOCAL_MACHINE\SYSTEM\CEnum\Root\LEGACY_SQL-SMSS
HKEY_LOCAL_MACHINE\SYSTEM\CEnum\Root\LEGACY_TERMSERV.EXE
HKEY_LOCAL_MACHINE\SYSTEM\CEnum\Root\LEGACY_UNINSTAIM
HKEY_LOCAL_MACHINE\SYSTEM\CEnum\Root\LEGACY_USRINITVERIF
HKEY_LOCAL_MACHINE\SYSTEM\CEnum\Root\LEGACY_VPNONDEMAND
HKEY_LOCAL_MACHINE\SYSTEM\CEnum\Root\LEGACY_W64
HKEY_LOCAL_MACHINE\SYSTEM\CEnum\Root\LEGACY_WDMFSX
HKEY_LOCAL_MACHINE\SYSTEM\CEnum\Root\LEGACY_WINCRYPT32.EXE
HKEY_LOCAL_MACHINE\SYSTEM\CEnum\Root\LEGACY_WINDOW_DISPALY_SYSTEM
HKEY_LOCAL_MACHINE\SYSTEM\CEnum\Root\LEGACY_WINDOWS_ACCOUNTS_MANAGER
HKEY_LOCAL_MACHINE\SYSTEM\CEnum\Root\LEGACY_WINDOWS_BINARY_READER
HKEY_LOCAL_MACHINE\SYSTEM\CEnum\Root\LEGACY_WINDOWS_CONFI_SYSTEM
HKEY_LOCAL_MACHINE\SYSTEM\CEnum\Root\LEGACY_WINDOWS_DLL_SYSTEM
HKEY_LOCAL_MACHINE\SYSTEM\CEnum\Root\LEGACY_WINDOWS_IDLE_PROCESS
HKEY_LOCAL_MACHINE\SYSTEM\CEnum\Root\LEGACY_WINDOW_INTERNET_SYSTEM
HKEY_LOCAL_MACHINE\SYSTEM\CEnum\Root\LEGACY_WINDOWS_INTERNET
HKEY_LOCAL_MACHINE\SYSTEM\CEnum\Root\LEGACY_WINDOWS_SECURITY_MONITOR
HKEY_LOCAL_MACHINE\SYSTEM\CEnum\Root\LEGACY_WINDOWS_SPOOL_SERVICE
HKEY_LOCAL_MACHINE\SYSTEM\CEnum\Root\LEGACY_WINDOWS_SPOOLER_SERVICE
HKEY_LOCAL_MACHINE\SYSTEM\CEnum\Root\LEGACY_WINDOWS_UPDATE
HKEY_LOCAL_MACHINE\SYSTEM\CEnum\Root\LEGACY_WINDOWS_WORDPAD
HKEY_LOCAL_MACHINE\SYSTEM\CEnum\Root\LEGACY_WINLOG
HKEY_LOCAL_MACHINE\SYSTEM\CEnum\Root\LEGACY_WINNOD
HKEY_LOCAL_MACHINE\SYSTEM\CEnum\Root\LEGACY_WINSYNC_SERVICE
HKEY_LOCAL_MACHINE\SYSTEM\CEnum\Root\LEGACY_WMIDRIVERINC
HKEY_LOCAL_MACHINE\SYSTEM\CEnum\Root\LEGACY_WSR
HKEY_LOCAL_MACHINE\SYSTEM\CEnum\Root\LEGACY_WSXFS
HKEY_LOCAL_MACHINE\SYSTEM\CEnum\Root\LEGACY_WXPDLL32
HKEY_LOCAL_MACHINE\SYSTEM\CEnum\Root\LEGACY_ZONELAPS
HKEY_LOCAL_MACHINE\SYSTEM\CServices\80xFire
HKEY_LOCAL_MACHINE\SYSTEM\CServices\AC
HKEY_LOCAL_MACHINE\SYSTEM\CServices\aim.ex
HKEY_LOCAL_MACHINE\SYSTEM\CServices\Acrobat Reader Update\ImagePath\windows\acrobat32.exe
HKEY_LOCAL_MACHINE\SYSTEM\CServices\ARCPLUG
HKEY_LOCAL_MACHINE\SYSTEM\CServices\AppLayerGatewayMgr
HKEY_LOCAL_MACHINE\SYSTEM\CServices\b0t
HKEY_LOCAL_MACHINE\SYSTEM\CServices\Codec
HKEY_LOCAL_MACHINE\SYSTEM\CServices\Content List Management Sub System
HKEY_LOCAL_MACHINE\SYSTEM\CServices\cpanel
HKEY_LOCAL_MACHINE\SYSTEM\CServices\DDD
HKEY_LOCAL_MACHINE\SYSTEM\CServices\DirectX Drivers\ImagePath\windows\D1rectX.exe
HKEY_LOCAL_MACHINE\SYSTEM\CServices\dllcheck32
HKEY_LOCAL_MACHINE\SYSTEM\CServices\DVDrealm
HKEY_LOCAL_MACHINE\SYSTEM\CServices\Email AV
HKEY_LOCAL_MACHINE\SYSTEM\CServices\et54fg
HKEY_LOCAL_MACHINE\SYSTEM\CServices\firefoxautoupdate
HKEY_LOCAL_MACHINE\SYSTEM\CServices\frepdll.exe
HKEY_LOCAL_MACHINE\SYSTEM\CServices\FSVC
HKEY_LOCAL_MACHINE\SYSTEM\CServices\Genuine Adv Tool
HKEY_LOCAL_MACHINE\SYSTEM\CServices\handle\ImagePath\windows\handle.exe
HKEY_LOCAL_MACHINE\SYSTEM\CServices\hpdrivers\ImagePath\hpdriver.sys
HKEY_LOCAL_MACHINE\SYSTEM\CServices\Window Internet System
HKEY_LOCAL_MACHINE\SYSTEM\CServices\Local Network Connectoin
HKEY_LOCAL_MACHINE\SYSTEM\CServices\LogonUInterf
HKEY_LOCAL_MACHINE\SYSTEM\CServices\microsoft\ImagePath\windows\system.exe
HKEY_LOCAL_MACHINE\SYSTEM\CServices\Microsoft Services
HKEY_LOCAL_MACHINE\SYSTEM\CServices\Microsoft System Management BIOS Driver
HKEY_LOCAL_MACHINE\SYSTEM\CServices\Microsoft Windows Update
HKEY_LOCAL_MACHINE\SYSTEM\CServices\mondrv
HKEY_LOCAL_MACHINE\SYSTEM\CServices\MS040
HKEY_LOCAL_MACHINE\SYSTEM\CServices\MS DTC console
HKEY_LOCAL_MACHINE\SYSTEM\CServices\msdtcs
HKEY_LOCAL_MACHINE\SYSTEM\CServices\msrundll32
HKEY_LOCAL_MACHINE\SYSTEM\CServices\Nat\ImagePath\system32\nat.exe
HKEY_LOCAL_MACHINE\SYSTEM\CServices\NetDDEdsma
HKEY_LOCAL_MACHINE\SYSTEM\CServices\netinfo
HKEY_LOCAL_MACHINE\SYSTEM\CServices\NetLgn
HKEY_LOCAL_MACHINE\SYSTEM\CServices\NTDRV
HKEY_LOCAL_MACHINE\SYSTEM\CServices\ntfsdiscman
HKEY_LOCAL_MACHINE\SYSTEM\CServices\orans
HKEY_LOCAL_MACHINE\SYSTEM\CServices\Process Kernel Manager
HKEY_LOCAL_MACHINE\SYSTEM\CServices\rdriv
HKEY_LOCAL_MACHINE\SYSTEM\CServices\regstrmon
HKEY_LOCAL_MACHINE\SYSTEM\CServices\Remote Debug System
HKEY_LOCAL_MACHINE\SYSTEM\CServices\RemoteRegBck
HKEY_LOCAL_MACHINE\SYSTEM\CServices\RPCSCC
HKEY_LOCAL_MACHINE\SYSTEM\CServices\SCSMS
HKEY_LOCAL_MACHINE\SYSTEM\CServices\sdktemp
HKEY_LOCAL_MACHINE\SYSTEM\CServices\Service Secured
HKEY_LOCAL_MACHINE\SYSTEM\CServices\sp2pnpfix
HKEY_LOCAL_MACHINE\SYSTEM\CServices\spdauth
HKEY_LOCAL_MACHINE\SYSTEM\CServices\sql-smss
HKEY_LOCAL_MACHINE\SYSTEM\CServices\sqlserver\ImagePath\windows\sqlserv.exe
HKEY_LOCAL_MACHINE\SYSTEM\CServices\SystemManager\ImagePath\windows\sysmanager.exe
HKEY_LOCAL_MACHINE\SYSTEM\CServices\systemrestore\ImagePath\windows\sysrestore.exe
HKEY_LOCAL_MACHINE\SYSTEM\CServices\taskman\ImagePath\system32\taskman.exe
HKEY_LOCAL_MACHINE\SYSTEM\CServices\termserv.exe
HKEY_LOCAL_MACHINE\SYSTEM\CServices\uninstAIM
HKEY_LOCAL_MACHINE\SYSTEM\CServices\UsrInitVerif
HKEY_LOCAL_MACHINE\SYSTEM\CServices\VPNonDemand
HKEY_LOCAL_MACHINE\SYSTEM\CServices\W64
HKEY_LOCAL_MACHINE\SYSTEM\CServices\wdmfsx
HKEY_LOCAL_MACHINE\SYSTEM\CServices\wincrypt32.exe
HKEY_LOCAL_MACHINE\SYSTEM\CServices\Winamp Sound System
HKEY_LOCAL_MACHINE\SYSTEM\CServices\Window Dispaly System
HKEY_LOCAL_MACHINE\SYSTEM\CServices\Windows Accounts Manager
HKEY_LOCAL_MACHINE\SYSTEM\CServices\Windows Binary Reader
HKEY_LOCAL_MACHINE\SYSTEM\CServices\Windows Confi System
HKEY_LOCAL_MACHINE\SYSTEM\CServices\Windows DLL System
HKEY_LOCAL_MACHINE\SYSTEM\CServices\Windows Idle Process
HKEY_LOCAL_MACHINE\SYSTEM\CServices\Windows Internet
HKEY_LOCAL_MACHINE\SYSTEM\CServices\Windows Plug n Play\ImagePath\windows\plugnplay.exe
HKEY_LOCAL_MACHINE\SYSTEM\CServices\Windows Security Monitor
HKEY_LOCAL_MACHINE\SYSTEM\CServices\Windows Spool Service
HKEY_LOCAL_MACHINE\SYSTEM\CServices\Windows Wordpad
HKEY_LOCAL_MACHINE\SYSTEM\CServices\WinENC\ImagePath\windows\WinENC.exe
HKEY_LOCAL_MACHINE\SYSTEM\CServices\winlog
HKEY_LOCAL_MACHINE\SYSTEM\CServices\WinNod
HKEY_LOCAL_MACHINE\SYSTEM\CServices\WMIDriverInc
HKEY_LOCAL_MACHINE\SYSTEM\CServices\WSR
HKEY_LOCAL_MACHINE\SYSTEM\CServices\wsxfs
HKEY_LOCAL_MACHINE\SYSTEM\CServices\WinSyncservice
HKEY_LOCAL_MACHINE\SYSTEM\CServices\wxpdll32
HKEY_LOCAL_MACHINE\SYSTEM\CServices\Zonelaps
HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Enum\Root\LEGACY_APPSVC
HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Enum\Root\LEGACY_HPDRIVER
HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Enum\Root\LEGACY_HPR34K8
HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Enum\Root\LEGACY_ITUNESMUSIC
HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Enum\Root\LEGACY_LSASSFTPDZZ
HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Enum\Root\LEGACY_MBST
HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Enum\Root\LEGACY_MSNAUTO-IT
HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Enum\Root\LEGACY_MSNET
HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Enum\Root\LEGACY_MSSUITE
HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Enum\Root\LEGACY_NETWORK_CONFG_SYSTEM
HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Enum\Root\LEGACY_NVIDGUIV2
HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Enum\Root\LEGACY_NETDDEDSMA
HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Enum\Root\LEGACY_REMON
HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Enum\Root\LEGACY_SERVICE_CVAS
HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Enum\Root\LEGACY_SRVSS
HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Enum\Root\LEGACY_TESV
HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Enum\Root\LEGACY_TSECURE
HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Enum\Root\LEGACY_TSKMGR
HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Enum\Root\LEGACY_WIN32SOUND
HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Enum\Root\LEGACY_WINDOW_DLL_SERVICES
HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Enum\Root\LEGACY_WINDOW_SERVICES_CONNECTION
HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Enum\Root\LEGACY_WINDOWS_BOOT_TREE
HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Enum\Root\LEGACY_WINMEDIA
HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Enum\Root\LEGACY_WMIPADD-ON
HKEY_LOCAL_MACHINE\SYSTEM\CEnum\Root\LEGACY_WUGN
HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Enum\Root\LEGACY__MICROSOFT_WINDOWS_LOGON_PROCESS
HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\AppSvc
HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\BusinessContinuity\ImagePath\msstl.exe
HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\Explore HTTP server
HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\hpdriver\ImagePath\WINDOWS\hpdriver.exe
HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\hpr34k8
HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\iTunesMusic
HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\LsassFTPDzz
HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\MBST
HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\MicroSoft Media Tools
HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\MSNAuto-IT
HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\MSNET\ImagePath\msnetdrv.exe
HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\mssuite
HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\Network Confg System
HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\network\ImagePath\network.exe
HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\nvidGUIv2
HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\nvsvc32.exe\ImagePath\wmisp.exe
HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\remon\ImagePath\remon.sys
HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\Service Cvas
HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\srvss
HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\System Restore Manager
HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\System Service Manager\ImagePath\services.exe
HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\TESV
HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\tsecure
HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\Tskmgr
HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\WIN32Sound
HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\Window DLL Services
HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\Window Services Connection
HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\WinMedia
HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\WMIPAdd-On
HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\ Microsoft Windows Logon Process
HKEY_LOCAL_MACHINE\SYSTEM\CServices\Windows Boot Tree
HKEY_LOCAL_MACHINE\SYSTEM\CServices\wugn
HKEY_LOCAL_MACHINE\SYSTEM\CServices\LSA Shel (Export Version)
HKEY_LOCAL_MACHINE\SYSTEM\CServices\DLLReg
HKEY_LOCAL_MACHINE\SYSTEM\CServices\ShellSWDetection
HKEY_LOCAL_MACHINE\SYSTEM\CServices\JUSCHED
HKEY_LOCAL_MACHINE\SYSTEM\CServices\odbc32
HKEY_LOCAL_MACHINE\SYSTEM\CServices\Network Confg System
HKEY_LOCAL_MACHINE\SYSTEM\CServices\mstlsapi32
HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Enum\Root\LEGACY_DATA_SYSTEM_MANAGER
HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\Data System Manager
HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Enum\Root\LEGACY_VPNSVC
HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\VPNSVC
HKEY_LOCAL_MACHINE\SYSTEM\CEnum\Root\LEGACY_REMOTE_PUBLIC_MACHINE
HKEY_LOCAL_MACHINE\SYSTEM\CServices\Remote Public Machine
HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Enum\Root\LEGACY_TCP_MONITOR_MANAGER
HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\TCP Monitor Manager

News for Jul 20, 2008

New Version!
PestBlock version 4.1. Many new featured, bugfixes. Download new version today! Learn More...

	Download Demo Version
	Buy Now!

Buy Online

	Online Store



	Discount Pricing

Spyware Research

Browse our Spyware Research Center.

	Spyware Research

Free Newsletter

Sign up for our free product newsletter today and get informed about new updates and releases by email. You will also receive the latest discounts and offers for our products!

	Click Here to Sign Up