Viene aggiunta nel registro la seguente chiave con lo scopo di eseguire il processo dopo il riavvio: - [HKCU\Software\Microsoft\Windows\CurrentVersion\Run] • "Windows installer"="c:\winstall.exe" I valori delle seguenti chiavi di registro vengono rimossi: - [HKCU\SOFTWARE\Microsoft\Windows\CurrentVersion\Run] • pro - [HKCU\Software\Microsoft\Windows\CurrentVersion\Policies\Explorer] • NoDesktop Le seguenti chiavi di registro che includono tutti i valori e le sottochiavi, vengono rimosse: • [HKCU\SOFTWARE\Install] • [HKCU\Software\Microsoft\Internet Explorer\Desktop\Components] • [HKCU\Software\Microsoft\Internet Explorer\Desktop\Components\0] Vengono aggiunte le seguenti chiavi di registro: - [HKCU\Software\Microsoft\Internet Explorer\Desktop\Components] • "DeskHtmlVersion"=dword:00000110 • "DeskHtmlMinorVersion"=dword:00000005 • "Settings"=dword:00000001 • "GeneralFlags"=dword:00000000 - [HKCU\Software\Microsoft\Internet Explorer\Desktop\Components\0] • "Source"="About:Home" • "SubscribedURL"="About:Home" • "FriendlyName"="My Current Home Page" • "Flags"=dword:00000002 • "Position"=hex:
http://www.avira.com/it/thr [...] _renos.w.html

The following registry key is added in order to run the process after reboot: - [HKCU\Software\Microsoft\Windows\CurrentVersion\Run] • "Windows installer"="c:\winstall.exe" The values of the following registry keys are removed: - [HKCU\SOFTWARE\Microsoft\Windows\CurrentVersion\Run] • pro - [HKCU\Software\Microsoft\Windows\CurrentVersion\Policies\Explorer] • NoDesktop The following registry keys including all values and subkeys are removed: • [HKCU\SOFTWARE\Install] • [HKCU\Software\Microsoft\Internet Explorer\Desktop\Components] • [HKCU\Software\Microsoft\Internet Explorer\Desktop\Components\0] The following registry keys are added: - [HKCU\Software\Microsoft\Internet Explorer\Desktop\Components] • "DeskHtmlVersion"=dword:00000110 • "DeskHtmlMinorVersion"=dword:00000005 • "Settings"=dword:00000001 • "GeneralFlags"=dword:00000000 - [HKCU\Software\Microsoft\Internet Explorer\Desktop\Components\0] • "Source"="About:Home" • "SubscribedURL"="About:Home" • "FriendlyName"="My Current Home Page" • "Flags"=dword:00000002 • "Position"=hex:
http://www.avira.com/en/thr [...] _renos.w.html

Uno dei seguenti valori viene aggiunto per eseguire il processo dopo il riavvio: - [HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Run] • "Framework Windows"="frmwrk32.exe" Vengono aggiunte le seguenti chiavi di registro: - [HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\ ActiveDesktop] • "NoChangingWallpaper"=dword:0x00000001 - [HKCU\Software\Microsoft\Windows\CurrentVersion\Policies\System] • "DisableTaskMgr"=dword:0x00000001 - [HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer] • "NoActiveDesktopChanges"=dword:0x00000001 • "NoSetActiveDesktop"=dword:0x00000001 - [HKCU\Software\Microsoft\Windows\CurrentVersion\Policies\ ActiveDesktop] • "NoChangingWallpaper"=dword:0x00000001 Vengono cambiate le seguenti chiavi di registro: - [HKCU\Software\Microsoft\Internet Explorer\Desktop\Components] Nuovo valore: • "GeneralFlags"=dword:0x00000000 - [HKCU\Software\Microsoft\Windows\CurrentVersion\Policies\Explorer] Nuovo valore: • "NoActiveDesktopChanges"=dword:0x00000001 • "NoSetActiveDesktop"=dword:0x00000001
http://www.avira.com/it/thr [...] nt.31232.html

One of the following values is added in order to run the process after reboot: - [HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Run] • "Framework Windows"="frmwrk32.exe" The following registry keys are added: - [HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\ ActiveDesktop] • "NoChangingWallpaper"=dword:0x00000001 - [HKCU\Software\Microsoft\Windows\CurrentVersion\Policies\System] • "DisableTaskMgr"=dword:0x00000001 - [HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer] • "NoActiveDesktopChanges"=dword:0x00000001 • "NoSetActiveDesktop"=dword:0x00000001 - [HKCU\Software\Microsoft\Windows\CurrentVersion\Policies\ ActiveDesktop] • "NoChangingWallpaper"=dword:0x00000001 The following registry keys are changed: - [HKCU\Software\Microsoft\Internet Explorer\Desktop\Components] New value: • "GeneralFlags"=dword:0x00000000 - [HKCU\Software\Microsoft\Windows\CurrentVersion\Policies\Explorer] New value: • "NoActiveDesktopChanges"=dword:0x00000001 • "NoSetActiveDesktop"=dword:0x00000001
http://www.avira.com/en/thr [...] nt.31232.html