Edit C:\Windows\SysWOW64\runonce.exe
MZ? ?? ? @ ? ? ? ?!?L?!This program cannot be run in DOS mode. $ ????????2]??2]??2]??2 ]??????2]??2]??2 ]??Rich?? PE L ?R ? V : Z p @ ? ? @? ? ? ? x ? ? ? \ ? ? .text ? V `.data @ p Z @ ?.idata ? ? \ @ @.rsrc x ? n @ @.reloc f ? | @ B ?@ ?@ ?@ ?@ ?R $ ? ? ?@ ?@ ? ? F ?% ?% ?% ?% ?% ?% ?% ?% ?% ?% ??% ?% ??% ?% ??30'?D?Q???% ?% ??% ?% ??% ?% ??% ?% ? ? ? ? ? @ ? @ ? ? ? ? ? ? ? ? ? ? ? ? ? ? ? ? ? @ ? ? ? ? ? ? @ ?i e r n o n c e . d l l RunOnceExProcess R u n O n c e 6 4 3 2 S o f t w a r e \ M i c r o s o f t \ W i n d o w s \ C u r r e n t V e r s i o n \ R u n O n c e R u n O n c e E x 6 4 3 2 R u n 6 4 3 2 A l t e r n a t e S h e l l S t a r t u p E x p l o r e r E x p l o r e r S t a r t u p L o g _ R u n O n c e \ S e t u p S e t u p F l a g s M S B A T C H . I N F N o P r o m p t 2 B o o t S e t u p W a r n T i m e C h a n g e d F i r s t R e q u i r e s U s e r I n p u t S o f t w a r e \ M i c r o s o f t \ W i n d o w s \ C u r r e n t V e r s i o n \ O O B E S h e l l D e s k t o p S w i t c h E v e n t N U L L ?tX !C????? S A p p C M P . D L L GetTermsrCompatFlagsEx R u n D L L 3 2 . E X E R u n D L L 3 2 . E X E S h e l l 3 2 . D L L , S h e l l E x e c _ R u n D L L ? 0 x % X ? % s ( n u l l ) S o f t w a r e \ M i c r o s o f t \ W i n d o w s \ C u r r e n t V e r s i o n \ R u n O n c e E x r u n d l l 3 2 . e x e i e r n o n c e . d l l , R u n O n c e E x P r o c e s s explorer.exe S o f t w a r e \ M i c r o s o f t \ W i n d o w s N T \ C u r r e n t V e r s i o n \ W i n d o w s L o a d S o f t w a r e \ M i c r o s o f t \ W i n d o w s N T \ C u r r e n t V e r s i o n \ W i n d o w s , L o a d R u n S o f t w a r e \ M i c r o s o f t \ W i n d o w s N T \ C u r r e n t V e r s i o n \ W i n d o w s , R u n ? R u n 3 2 S o f t w a r e \ M i c r o s o f t \ W i n d o w s \ C u r r e n t V e r s i o n \ R u n S o f t w a r e \ M i c r o s o f t \ W i n d o w s \ C u r r e n t V e r s i o n \ P o l i c i e s \ E x p l o r e r \ R u n I @ ??@ ??@ H F @ ?(@ H ?@ ??@ H G @ ?(@ H ?@ ? FR u n S t u f f H a s B e e n R u n S h e l l S t a r t u p G o v e r n o r . e t l E x p l o r e r S t a r t u p L o g % L o c a l A p p D a t a % \ M i c r o s o f t \ W i n d o w s \ E x p l o r e r ?@ @ Xq@ ?H?+??) ? =sR? ? F?@ ?@ ?@ ?Qm6t??4 ? ` ?7?1???cB??@ wO@ LO@ ?@ ?@ [O@ ?@ hO@ =O@ K@ ?@ 2J@ PJ@ ?@ ?@ ?@ ?@ ?@ ?@ ?@ S o f t w a r e \ M i c r o s o f t \ W i n d o w s \ C u r r e n t V e r s i o n \ E x p l o r e r \ S t a r t u p A p p r o v e d S o f t w a r e \ M i c r o s o f t \ W i n d o w s \ C u r r e n t V e r s i o n \ E x p l o r e r \ S e r i a l i z e P r o c e s s C P U P e r c e n t M a x P r o c e s s H a r d F a u l t s M a x S t e a d y T i m e N e e d e d I n M S e c P r o c e s s W a i t T i m e o u t I n M S e c ?@ ?@ ?@ ?@ wO@ ?@ ?@ ?@ {V@ ?@ hO@ ?@ rS@ ?@ ?@ ?@ 2J@ wQ@ ?@ ?7?1???cB? ??lE??? \ p@ @ @ RSDS??d9RH?/?*?$ runonce.pdb *_ ? ?U???SV?3???f?? ??@ f?-tf?/t??f?u?9tzh?@ ?V????= h@ V???? h @ V???? h0@ V???Vh\@ V???8??bt?tHu ??????j Y?f??????_^[?]?? ?! j ??@ ?' ?u ? ? ?5? jC???jC???P?T? ?8' ?ujC????"