Changeset 1673

Show
Ignore:
Timestamp:
07/08/08 15:37:26 (3 months ago)
Author:
knwang
Message:

Updated registry exclusion list for benign explorer activity (a000bd6a4f05356b5f420e5a30).

Files:

Legend:

Unmodified
Added
Removed
Modified
Copied
Moved

  • honeyclient/trunk/thirdparty/capture-mod/RegistryMonitor.exl

    r1671 r1673  
    412412+   SetValueKey C:\\WINDOWS\\system32\\drwtsn32\.exe    HKLM\\SOFTWARE\\Microsoft\\Windows\\CurrentVersion\\Explorer\\Shell Folders.* 
    413413+   SetValueKey C:\\WINDOWS\\system32\\drwtsn32\.exe    HKLM\\SOFTWARE\\Microsoft\\DrWatson.* 
     414 
     415# Benign Explorer Activity 
     416+   SetValueKey C:\\WINDOWS\\explorer\.exe  HKCU\\Software\\Microsoft\\Internet Explorer\\Toolbar.* 
     417+   SetValueKey C:\\WINDOWS\\explorer\.exe  HKCU\\Software\\Microsoft\\Windows\\CurrentVersion\\Internet Settings.*