Notifications
Clear all
Topic starter
20/10/2011 6:21 am
Does anyone know of any documentation or have personal knowledge of how the following registry key is populated/modified?
HKLM\SYSTEM\ControlSet001\Control\Session Manager\AppCompatCache
My question arose because the key on the system I'm looking at contains the following path
\\??\\C\\$Recycle.Bin\\S-1-5-21-1009953093-3245481177-2229209798-500\\$R5QJS16.exe
Why would they key be modified with an executable located in the Recycle Bin? Does this mean the file was executed from the Recycle Bin?
20/10/2011 11:14 am
Greetings,
I hate to ask, but did you do a Google search for AppCompatCache?
This particular page might be relevant, given what you've shared
http//
-David