Changeset 1215 for honeyclient/branches/exp/xkovah-simpler_install
- Timestamp:
- 02/19/08 13:36:07 (9 months ago)
- Files:
Legend:
- Unmodified
- Added
- Removed
- Modified
- Copied
- Moved
honeyclient/branches/exp/xkovah-simpler_install/Capture2/capture-client-xeno-mod/ExclusionLists/RegistryMonitor.exl
r1214 r1215 298 298 #### Honeyclient manual add (per ticket #128) 299 299 + SetValueKey C:\\Program Files\\Internet Explorer\\iexplore\.exe HKCU\\Software\\Microsoft\\Windows\\CurrentVersion\\Explorer\\FileExts\\\.css\\OpenWithList 300 + SetValueKey C:\\Program Files\\Internet Explorer\\iexplore\.exe HKCU\\Software\\Microsoft\\Windows\\CurrentVersion\\Explorer\\FileExts\\\.css\\OpenWithProgids+ DeleteValueKey C:\\WINDOWS\\system32\\spoolsv\.exe HKU\\S-1-5-20\\Software\\Microsoft\\Windows NT\\CurrentVersion\\Windows 300 + SetValueKey C:\\Program Files\\Internet Explorer\\iexplore\.exe HKCU\\Software\\Microsoft\\Windows\\CurrentVersion\\Explorer\\FileExts\\\.css\\OpenWithProgids 301 302 + DeleteValueKey C:\\WINDOWS\\system32\\spoolsv\.exe HKU\\S-1-5-20\\Software\\Microsoft\\Windows NT\\CurrentVersion\\Windows 301 303 + DeleteValueKey C:\\WINDOWS\\system32\\spoolsv\.exe HKCU\\Software\\Microsoft\\Windows NT\\CurrentVersion\\Windows 302 304 + SetValueKey C:\\WINDOWS\\system32\\spoolsv\.exe HKLM\\SYSTEM\\ControlSet001\\Services\\Eventlog\\System\\Print honeyclient/branches/exp/xkovah-simpler_install/Capture2/capture-client-xeno-mod/install/RegistryMonitor.exl
r1214 r1215 298 298 #### Honeyclient manual add (per ticket #128) 299 299 + SetValueKey C:\\Program Files\\Internet Explorer\\iexplore\.exe HKCU\\Software\\Microsoft\\Windows\\CurrentVersion\\Explorer\\FileExts\\\.css\\OpenWithList 300 + SetValueKey C:\\Program Files\\Internet Explorer\\iexplore\.exe HKCU\\Software\\Microsoft\\Windows\\CurrentVersion\\Explorer\\FileExts\\\.css\\OpenWithProgids+ DeleteValueKey C:\\WINDOWS\\system32\\spoolsv\.exe HKU\\S-1-5-20\\Software\\Microsoft\\Windows NT\\CurrentVersion\\Windows 300 + SetValueKey C:\\Program Files\\Internet Explorer\\iexplore\.exe HKCU\\Software\\Microsoft\\Windows\\CurrentVersion\\Explorer\\FileExts\\\.css\\OpenWithProgids 301 302 + DeleteValueKey C:\\WINDOWS\\system32\\spoolsv\.exe HKU\\S-1-5-20\\Software\\Microsoft\\Windows NT\\CurrentVersion\\Windows 301 303 + DeleteValueKey C:\\WINDOWS\\system32\\spoolsv\.exe HKCU\\Software\\Microsoft\\Windows NT\\CurrentVersion\\Windows 302 304 + SetValueKey C:\\WINDOWS\\system32\\spoolsv\.exe HKLM\\SYSTEM\\ControlSet001\\Services\\Eventlog\\System\\Print
