Windows Automatic/Silent Runners – Launch & Hijack Points
Launch Points Here are the registry keys, INI-file sections, files and folders that are checked bySilent Runners and the Operating Systems (OS’s) to which they apply: Item Checked OS 1. HKCUControl PanelDesktopSCRNSAVE.EXE NT4+ 2. HKCUSoftwareClassesCLSID{CLSID}Implemented Categories{00021493-0000-0000-C000-000000000046} HKCUSoftwareClassesCLSID{CLSID}Implemented Categories{00021494-0000-0000-C000-000000000046} W2K+ 3. HKCUSoftwareClasses.batshellsubkeycommand HKCUSoftwareClasses.batshellsubkeyddeexec W2K+ HKCUSoftwareClasses.cmdshellsubkeycommand HKCUSoftwareClasses.cmdshellsubkeyddeexec W2K+ HKCUSoftwareClasses.comshellsubkeycommand HKCUSoftwareClasses.comshellsubkeyddeexec W2K+ HKCUSoftwareClasses.exeshellsubkeycommand HKCUSoftwareClasses.exeshellsubkeyddeexec W2K+ HKCUSoftwareClasses.htashellsubkeycommand HKCUSoftwareClasses.htashellsubkeyddeexec W2K+ HKCUSoftwareClasses.pifshellsubkeycommand HKCUSoftwareClasses.pifshellsubkeyddeexec W2K+ HKCUSoftwareClasses.scrshellsubkeycommand HKCUSoftwareClasses.scrshellsubkeyddeexec W2K+ HKCUSoftwareClassesbatfileshellsubkeycommand HKCUSoftwareClassesbatfileshellsubkeyddeexec W2K+ HKCUSoftwareClassescmdfileshellsubkeycommand HKCUSoftwareClassescmdfileshellsubkeyddeexec W2K+ HKCUSoftwareClassescomfileshellsubkeycommand HKCUSoftwareClassescomfileshellsubkeyddeexec W2K+ HKCUSoftwareClassesexefileshellsubkeycommand HKCUSoftwareClassesexefileshellsubkeyddeexec W2K+ HKCUSoftwareClasseshtafileshellsubkeycommand HKCUSoftwareClasseshtafileshellsubkeyddeexec W2K+ HKCUSoftwareClassespiffileshellsubkeycommand HKCUSoftwareClassespiffileshellsubkeyddeexec W2K+ HKCUSoftwareClassesscrfileshellsubkeycommand HKCUSoftwareClassesscrfileshellsubkeyddeexec W2K+ 4. HKCUSoftwareClasses*shellexColumnHandlers […]
Read more