Windows Automatic/Silent Runners – Launch & Hijack Points

Launch Points Here are the registry keys, INI-file sections, files and folders that are checked bySilent Runners and the Operating Systems (OS’s) to which they apply:   Item Checked OS 1. HKCUControl PanelDesktopSCRNSAVE.EXE NT4+ 2. HKCUSoftwareClassesCLSID{CLSID}Implemented Categories{00021493-0000-0000-C000-000000000046} HKCUSoftwareClassesCLSID{CLSID}Implemented Categories{00021494-0000-0000-C000-000000000046} W2K+ 3. HKCUSoftwareClasses.batshellsubkeycommand HKCUSoftwareClasses.batshellsubkeyddeexec W2K+   HKCUSoftwareClasses.cmdshellsubkeycommand HKCUSoftwareClasses.cmdshellsubkeyddeexec W2K+   HKCUSoftwareClasses.comshellsubkeycommand HKCUSoftwareClasses.comshellsubkeyddeexec W2K+   HKCUSoftwareClasses.exeshellsubkeycommand HKCUSoftwareClasses.exeshellsubkeyddeexec W2K+   HKCUSoftwareClasses.htashellsubkeycommand HKCUSoftwareClasses.htashellsubkeyddeexec W2K+   HKCUSoftwareClasses.pifshellsubkeycommand HKCUSoftwareClasses.pifshellsubkeyddeexec W2K+   HKCUSoftwareClasses.scrshellsubkeycommand HKCUSoftwareClasses.scrshellsubkeyddeexec W2K+       HKCUSoftwareClassesbatfileshellsubkeycommand HKCUSoftwareClassesbatfileshellsubkeyddeexec W2K+   HKCUSoftwareClassescmdfileshellsubkeycommand HKCUSoftwareClassescmdfileshellsubkeyddeexec W2K+   HKCUSoftwareClassescomfileshellsubkeycommand HKCUSoftwareClassescomfileshellsubkeyddeexec W2K+   HKCUSoftwareClassesexefileshellsubkeycommand HKCUSoftwareClassesexefileshellsubkeyddeexec W2K+   HKCUSoftwareClasseshtafileshellsubkeycommand HKCUSoftwareClasseshtafileshellsubkeyddeexec W2K+   HKCUSoftwareClassespiffileshellsubkeycommand HKCUSoftwareClassespiffileshellsubkeyddeexec W2K+   HKCUSoftwareClassesscrfileshellsubkeycommand HKCUSoftwareClassesscrfileshellsubkeyddeexec W2K+ 4. HKCUSoftwareClasses*shellexColumnHandlers […]

Read more