HKEY_CURRENT_USER\Software\Microsoft\Windows NT\CurrentVersion\Winlogon
REG_SZ : Shell : “C:\Users\Administrator\AppData\Roaming\dbu32.ocx,explorer.exe”
There should be no Shell value
HKEY_CURRENT_USER\Software\Microsoft\Windows NT\CurrentVersion\Winlogon
REG_SZ : Shell : “C:\Users\Administrator\AppData\Roaming\dbu32.ocx,explorer.exe”
There should be no Shell value