none
some Microsoft entries still displayed even if "hide microsoft entries" is set RRS feed

  • Question

  • An image is better than any description, so:

    Pressing F5 didn't help.

    Running version 13.90


    • Edited by G.Pion Friday, July 6, 2018 1:58 PM
    Friday, July 6, 2018 1:57 PM

Answers

  • This is an intentional design decision for several Windows applications that indirectly execute other applications.  For instance, malware authors *could* create a Scheduled Task that executes "rundll32.exe malware.dll,shadyFunc". Mark has excluded these files from hiding because shady folks abuse them.

    If you're interested in these types of things, check out this presentation (PDF and YouTube video) on Evading Autoruns - https://github.com/huntresslabs/evading-autoruns

     
    • Marked as answer by G.Pion Monday, August 6, 2018 7:16 AM
    • Edited by Kyle Hanslovan Monday, August 6, 2018 4:56 PM
    Sunday, August 5, 2018 4:33 PM