Prevent the replacement of shift after the door lift (sethc.exe back door)

                  In many cases, it is convenient to replace the shift backdoor when the weight is difficult. To prevent the shift backdoor from being used, you must set permissions on it. Prevent simple replacement of shift backdoors. First, sethc.exe exists in

c:\\windows\\system32\\sethc.exe and c:\\windows\\system32\\dllcache\\sethc.exe

under these 2 directories

To prevent simple replacement of sethc.exe, you can set permissions on sethc.exe to delete all user groups.

Includes permissions for the administrators and system groups to prevent simple substitutions from entering the server.

delete all user groups do not retain!

prevented simply replaced! Also note that the point is: to prevent the shift back door mirror sethc.exe hijacking

HKEY_LOCAL_MACHINE \\ SOFTWARE \\ Microsoft \\ Windows NT \\ CurrentVersion \\ Image File Execution Options \\

Delete all users User group, plus everyone group and set all rejected.

This can only be a hindrance to the lifting of power!