Модуль для поиска данных в реестре, Зайцев О.В., 2004.,
http://z-oleg.com/secur
Запущен поиск ключей, содержащих образец "c:\windows\services.exe"
-- Поиск в HKEY_LOCAL_MACHINE --
HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Services\M essenger\ImagePath = "C:\WINDOWS\services.exe" /s "Messenger"
HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Services\S haredAccess\Parameters\FirewallPolicy\StandardProf ile\AuthorizedApplications\List\C:\WINDOWS\service s.exe =
HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Services\S haredAccess\Parameters\FirewallPolicy\StandardProf ile\AuthorizedApplications\List\C:\WINDOWS\service s.exe = C:\WINDOWS\services.exe
:Enabled:@xpsp2res.dll,-22019
HKEY_LOCAL_MACHINE\SYSTEM\ControlSet002\Services\M essenger\ImagePath = "C:\WINDOWS\services.exe" /s "Messenger"
HKEY_LOCAL_MACHINE\SYSTEM\ControlSet002\Services\S haredAccess\Parameters\FirewallPolicy\StandardProf ile\AuthorizedApplications\List\C:\WINDOWS\service s.exe =
HKEY_LOCAL_MACHINE\SYSTEM\ControlSet002\Services\S haredAccess\Parameters\FirewallPolicy\StandardProf ile\AuthorizedApplications\List\C:\WINDOWS\service s.exe = C:\WINDOWS\services.exe
:Enabled:@xpsp2res.dll,-22019
HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Servic es\Messenger\ImagePath = "C:\WINDOWS\services.exe" /s "Messenger"
HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Servic es\SharedAccess\Parameters\FirewallPolicy\Standard Profile\AuthorizedApplications\List\C:\WINDOWS\ser vices.exe =
HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Servic es\SharedAccess\Parameters\FirewallPolicy\Standard Profile\AuthorizedApplications\List\C:\WINDOWS\ser vices.exe = C:\WINDOWS\services.exe
:Enabled:@xpsp2res.dll,-22019
-- Поиск в HKEY_CURRENT_USER --
HKEY_CURRENT_USER\Software\Microsoft\Windows\Curre ntVersion\Explorer\RunMRU\b = C:\WINDOWS\services.exe\1
HKEY_CURRENT_USER\Software\Microsoft\Windows\Shell NoRoam\MUICache\C:\WINDOWS\services.exe =
-- Поиск в HKEY_CLASSES_ROOT --
-- Поиск завершен --
Просмотрено ключей: 173147