Image File Execution Options Registry. As you can see spybot was doing a good job on detecting and removing trojan infected registry keys that were not detected by mcafee virusscan. This is a complete list of image file execution options registry values collected by exterminate it.
As you can see spybot was doing a good job on detecting and removing trojan infected registry keys that were not detected by mcafee virusscan. The specified debugger application will be called with a path to the original program as the first argument. Ifeos can be set directly via the registry or in global flags via the gflags tool.
Ifeos are represented as debugger values in the registry under hklm software wow6432node microsoft windows nt currentversion image file execution options where executable is the binary on which the debugger is attached.
Image file execution options registry values list. The specified debugger application will be called with a path to the original program as the first argument. Image file execution options is a windows registry key which enables developers to attach a debugger to an application and to enable globalflag for application debugging this behavior of windows opens the door for persistence since an arbitrary executable can be used as a debugger of a specific process or as a monitorprocess in both scenarios code execution will achieved and the. X86 hklm software microsoft windows nt currentversion image file execution options lightscribecontrolpanel exe debugger x86 hklm software microsoft windows nt currentversion image file execution options lslauncher exe x86 hklm software microsoft windows nt currentversion image file execution options lslauncher exe debugger.