Files
Viper/docs/en/module/Persistence_Other_WindowsLibraryMs.md
rootkit 5439e18aa0 合并拉取请求 #234
* Adjust English document.

* fix image link error and remove font dom in mk
2025-03-15 15:17:55 +08:00

371 B

Windows Library-ms Persistence

Main Functions

The Trojan DLL file is written into the Documents.library-ms configuration file and Junction Folders are created. It takes effect when the user logs in or browses the desktop.

Precautions

It is not anti-detection.

Operation Method

Refer to Winlogon Helper DLL Persistence