Monday, June 18, 2012

Virus triggering thru debugger regval

http://www.howtogeek.com/forum/topic/help-with-replacing-taskmgr-with-process-explorer?replies=6

Amazing the amount of places a virus can hook.  I cleaned a virus, only to find Task Manager would still not run. It turned out to be a regval "HKLM\SW\MS\WNT\CV\Image File Execution Options" triggering a Debugger for TaskMan. Maybe SpyBot will catch this eventually.

No comments:

Post a Comment