Changeset 1645

Show
Ignore:
Timestamp:
07/01/08 14:29:32 (2 months ago)
Author:
kindlund
Message:

Updated exclusion lists to support Active Scripting Printing

Files:

Legend:

Unmodified
Added
Removed
Modified
Copied
Moved

  • honeyclient/trunk/thirdparty/capture-mod/FileMonitor.exl

    r1641 r1645  
    339339+   Write   C:\\Program Files\\VMware\\VMware Tools\\VMwareUser\.exe    C:\\Documents and Settings\\Administrator\\Local Settings\\Temp.* 
    340340+   Delete  C:\\Program Files\\VMware\\VMware Tools\\VMwareUser\.exe    C:\\Documents and Settings\\Administrator\\Local Settings\\Temp.* 
     341 
     342# IE - Active Scripting Printing 
     343+   Write   C:\\Program Files\\Internet Explorer\\iexplore\.exe C:\\WINDOWS\\.+htm 
     344+   Write   C:\\Program Files\\Internet Explorer\\iexplore\.exe C:\\WINDOWS\\.+html 
     345+   Delete  C:\\Program Files\\Internet Explorer\\iexplore\.exe C:\\WINDOWS\\.+tmp 

  • honeyclient/trunk/thirdparty/capture-mod/RegistryMonitor.exl

    r1540 r1645  
    401401# IE7 - accessing multimedia pages 
    402402+   SetValueKey C:\\Program Files\\Internet Explorer\\iexplore\.exe HKCU\\Software\\Microsoft\\MPEG2Demultiplexer 
     403 
     404# IE - Active Scripting Printing 
     405+   SetValueKey C:\\Program Files\\Internet Explorer\\iexplore\.exe HKCU\\Software\\Microsoft\\Internet Explorer\\PageSetup