The following registry keys are added in order to run the processes after reboot: - [HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Run] • "Windows Services"="winsvc32.exe" - [HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\RunServices] • "Windows Services"="winsvc32.exe" The following registry keys are added: - [HKLM\SYSTEM\CurrentControlSet\Services\Tcpip\Parameters] • "AllowUnqualifiedQuery"=dword:00000000 • "PrioritizeRecordData"=dword:00000001 • "TCP1320Opts"=dword:00000003 • "KeepAliveTime"=dword:00023280 • "BcastQueryTimeout"=dword:000002ee • "BcastNameQueryCount"=dword:00000001 • "CacheTimeout"=dword:0000ea60 • "Size/Small/Medium/Large"=dword:00000003 • "LargeBufferSize"=dword:00001000 • "SynAckProtect"=dword:00000002 • "PerformRouterDiscovery"=dword:00000000 • "EnablePMTUBHDetect"=dword:00000000 • "FastSendDatagramThreshold "=dword:00000400 • "StandardAddressLength "=dword:00000018 • "DefaultReceiveWindow "=dword:00004000 • "DefaultSendWindow"=dword:00004000 • "BufferMultiplier"=dword:00000200 • "PriorityBoost"=dword:00000002 • "IrpStackSize"=dword:00000004 • "IgnorePushBitOnReceives"=dword:00000000 • "DisableAddressSharing"=dword:00000000 • "AllowUserRawAccess"=dword:00000000 • "DisableRawSecurity"=dword:00000000 • "DynamicBacklogGrowthDelta"=dword:00000032 • "FastCopyReceiveThreshold"=dword:00000400 • "LargeBufferListDepth"=dword:0000000a • "MaxActiveTransmitFileCount"=dword:00000002 • "MaxFastTransmit"=dword:00000040 • "OverheadChargeGranularity"=dword:00000001 • "SmallBufferListDepth"=dword:00000020 • "SmallerBufferSize"=dword:00000080 • "TransmitWorker"=dword:00000020 • "DNSQueryTimeouts" =hex(7):31,00,00,00,32,00,00,00,32,00,00,00,34,00,00,00,38,00,00,00,30,00,00,00,00,00 • "DefaultRegistrationTTL"=dword:00000014 • "DisableReplaceAddressesInConflicts"=dword:00000000 • "DisableReverseAddressRegistrations"=dword:00000001 • "UpdateSecurityLevel "=dword:00000000 • "DisjointNameSpace"=dword:00000001 • "QueryIpMatching"=dword:00000000 • "NoNameReleaseOnDemand"=dword:00000001 • "EnableDeadGWDetect"=dword:00000000 • "EnableFastRouteLookup"=dword:00000001 • "MaxFreeTcbs"=dword:000007d0 • "MaxHashTableSize"=dword:00000800 • "SackOpts"=dword:00000001 • "Tcp1323Opts"=dword:00000003 • "TcpMaxDupAcks"=dword:00000001 • "TcpRecvSegmentSize"=dword:00000585 • "TcpSendSegmentSize"=dword:00000585 • "TcpWindowSize"=dword:0007d200 • "DefaultTTL"=dword:00000030 • "TcpMaxHalfOpen"=dword:0000004b • "TcpMaxHalfOpenRetried"=dword:00000050 • "TcpTimedWaitDelay"=dword:00000000 • "MaxNormLookupMemory"=dword:00030d40 • "FFPControlFlags"=dword:00000001 • "FFPFastForwardingCacheSize"=dword:00030d40 • "MaxForwardBufferMemory"=dword:00019df7 • "MaxFreeTWTcbs"=dword:000007d0 • "GlobalMaxTcpWindowSize"=dword:0007d200 • "EnablePMTUDiscovery"=dword:00000001 • "ForwardBufferMemory"=dword:00019df7 The following registry keys are changed: - [HKLM\SYSTEM\CurrentControlSet\Services\NetBT\Parameters] Old value: • "TransportBindName"=
http://www.avira.com/en/thr [...] bot.lz.4.html

Añade las siguientes claves del registro para ejecutar los procesos al iniciar el sistema: - [HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Run] • "Windows Services"="winsvc32.exe" - [HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\RunServices] • "Windows Services"="winsvc32.exe" Añade las siguientes claves al registro: - [HKLM\SYSTEM\CurrentControlSet\Services\Tcpip\Parameters] • "AllowUnqualifiedQuery"=dword:00000000 • "PrioritizeRecordData"=dword:00000001 • "TCP1320Opts"=dword:00000003 • "KeepAliveTime"=dword:00023280 • "BcastQueryTimeout"=dword:000002ee • "BcastNameQueryCount"=dword:00000001 • "CacheTimeout"=dword:0000ea60 • "Size/Small/Medium/Large"=dword:00000003 • "LargeBufferSize"=dword:00001000 • "SynAckProtect"=dword:00000002 • "PerformRouterDiscovery"=dword:00000000 • "EnablePMTUBHDetect"=dword:00000000 • "FastSendDatagramThreshold "=dword:00000400 • "StandardAddressLength "=dword:00000018 • "DefaultReceiveWindow "=dword:00004000 • "DefaultSendWindow"=dword:00004000 • "BufferMultiplier"=dword:00000200 • "PriorityBoost"=dword:00000002 • "IrpStackSize"=dword:00000004 • "IgnorePushBitOnReceives"=dword:00000000 • "DisableAddressSharing"=dword:00000000 • "AllowUserRawAccess"=dword:00000000 • "DisableRawSecurity"=dword:00000000 • "DynamicBacklogGrowthDelta"=dword:00000032 • "FastCopyReceiveThreshold"=dword:00000400 • "LargeBufferListDepth"=dword:0000000a • "MaxActiveTransmitFileCount"=dword:00000002 • "MaxFastTransmit"=dword:00000040 • "OverheadChargeGranularity"=dword:00000001 • "SmallBufferListDepth"=dword:00000020 • "SmallerBufferSize"=dword:00000080 • "TransmitWorker"=dword:00000020 • "DNSQueryTimeouts" =hex(7):31,00,00,00,32,00,00,00,32,00,00,00,34,00,00,00,38,00,00,00,30,00,00,00,00,00 • "DefaultRegistrationTTL"=dword:00000014 • "DisableReplaceAddressesInConflicts"=dword:00000000 • "DisableReverseAddressRegistrations"=dword:00000001 • "UpdateSecurityLevel "=dword:00000000 • "DisjointNameSpace"=dword:00000001 • "QueryIpMatching"=dword:00000000 • "NoNameReleaseOnDemand"=dword:00000001 • "EnableDeadGWDetect"=dword:00000000 • "EnableFastRouteLookup"=dword:00000001 • "MaxFreeTcbs"=dword:000007d0 • "MaxHashTableSize"=dword:00000800 • "SackOpts"=dword:00000001 • "Tcp1323Opts"=dword:00000003 • "TcpMaxDupAcks"=dword:00000001 • "TcpRecvSegmentSize"=dword:00000585 • "TcpSendSegmentSize"=dword:00000585 • "TcpWindowSize"=dword:0007d200 • "DefaultTTL"=dword:00000030 • "TcpMaxHalfOpen"=dword:0000004b • "TcpMaxHalfOpenRetried"=dword:00000050 • "TcpTimedWaitDelay"=dword:00000000 • "MaxNormLookupMemory"=dword:00030d40 • "FFPControlFlags"=dword:00000001 • "FFPFastForwardingCacheSize"=dword:00030d40 • "MaxForwardBufferMemory"=dword:00019df7 • "MaxFreeTWTcbs"=dword:000007d0 • "GlobalMaxTcpWindowSize"=dword:0007d200 • "EnablePMTUDiscovery"=dword:00000001 • "ForwardBufferMemory"=dword:00019df7 Modifica las siguientes claves del registro: - [HKLM\SYSTEM\CurrentControlSet\Services\NetBT\Parameters] Valor anterior: • "TransportBindName"=
http://www.avira.com/es/thr [...] bot.lz.4.html