Changeset 1682

Show
Ignore:
Timestamp:
07/11/08 13:40:58 (2 months ago)
Author:
kindlund
Message:

Fix for Ticket #180

Files:

Legend:

Unmodified
Added
Removed
Modified
Copied
Moved

  • honeyclient/trunk/thirdparty/capture-mod/RegistryMonitor.exl

    r1679 r1682  
    186186+   SetValueKey C:\\Program Files\\Messenger\\msmsgs\.exe   HKCU\\Software\\Microsoft\\Windows\\CurrentVersion\\Run\\MSMSGS 
    187187+   SetValueKey C:\\Program Files\\Messenger\\msmsgs\.exe   HKLM\\SOFTWARE\\Microsoft\\Windows\\CurrentVersion\\Internet Settings\\.+ 
    188 +   SetValueKey C:\\Program Files\\Messenger\\msmsgs\.exe   HKCU\\Software\\Microsoft\\Windows\\CurrentVersion\\Explorer\\Shell Folders\\.+ 
     188+   SetValueKey C:\\Program Files\\Messenger\\msmsgs\.exe   HKCU\\Software\\Microsoft\\Windows\\CurrentVersion\\Explorer\\Shell Folders\\.* 
    189189+   SetValueKey C:\\Program Files\\Messenger\\msmsgs\.exe   HKCU\\Software\\Microsoft\\Windows\\CurrentVersion\\Internet Settings\\.+ 
    190190+   SetValueKey C:\\WINDOWS\\system32\\svchost\.exe HKLM\\SOFTWARE\\Microsoft\\EventSystem\\.+\\Subscriptions\\.+ 
    …… 
    202202+   DeleteValueKey  C:\\Program Files\\Messenger\\msmsgs\.exe   HKCU\\Software\\Microsoft\\Windows\\CurrentVersion\\Run\\MSMSGS 
    203203+   DeleteValueKey  C:\\Program Files\\Messenger\\msmsgs\.exe   HKLM\\SOFTWARE\\Microsoft\\Windows\\CurrentVersion\\Internet Settings\\.+ 
    204 +   DeleteValueKey  C:\\Program Files\\Messenger\\msmsgs\.exe   HKCU\\Software\\Microsoft\\Windows\\CurrentVersion\\Explorer\\Shell Folders\\.+ 
     204+   DeleteValueKey  C:\\Program Files\\Messenger\\msmsgs\.exe   HKCU\\Software\\Microsoft\\Windows\\CurrentVersion\\Explorer\\Shell Folders\\.* 
    205205+   DeleteValueKey  C:\\Program Files\\Messenger\\msmsgs\.exe   HKCU\\Software\\Microsoft\\Windows\\CurrentVersion\\Internet Settings\\.+ 
    206206+   DeleteValueKey  C:\\WINDOWS\\system32\\svchost\.exe HKLM\\SOFTWARE\\Microsoft\\EventSystem\\.+\\Subscriptions\\.+