The autorun signature module was missing an autorun location used by Ursnif and other malware, add it.

For more info:
http://www.kernelmode.info/forum/viewtopic.php?p=16552#p16552
http://forum.sysinternals.com/appcertdlls_topic12546.html