Came accross a client with a badly virus infected computer.
One virus prevented the running of all programs except for those that the virus choose to allow.
Googling showed me how this might be done in respect of .exe programs but this virus also prevented .com programs running.
Strictly speaking I don't want to be able to do this myself, however I do want to know how it might be achieved and thereby how to this undesirable effect.
I assume that the trick will involve registry changes and therefore it might be possible to undo it by using regedit to work on the hard disk removed and attached to a correctly functioning PC. Would open the necessary file using open hive commands.
Any ideas?
Forgot to mention that the version of windows being run is Windows Home. It seems that the professional version is needed to run the group policy management console. Or can this be achieved indirectly via the registry anyway and if so how?