Print Monitors

Secondary Categories: 02 - Persistence

If you are already an administrator on the system you can use Print Monitors to execute a DLL.

• Go to HKLM\SYSTEM\CurrentControlSet\Control\Print\Monitors\
• Create a new key like Microsoft Shared Fax Monitor
• Create a new value named Driver with a DLL name