Common Places to look for Viruses

By | June 5, 2013

HKEY_CURRENT_USER\Software\Microsoft\Windows NT\CurrentVersion\Winlogon
REG_SZ : Shell : “C:\Users\Administrator\AppData\Roaming\dbu32.ocx,explorer.exe”

There should be no Shell value