[Valeant]

Petya V4sechkin,
Скорей всего соглашусь с этим мнением так как

... <registryKey keyName="HKEY_CLASSES_ROOT\batfile\shell\runasuser\command" owner="false"> <registryValue name="DelegateExecute" valueType="REG_SZ" value="{ea72d00e-4960-42fa-ba92-7792a7944c1d}" operationHint="replace" owner="true" /> </registryKey> <registryKey keyName="HKEY_CLASSES_ROOT\cmdfile\shell\runasuser" owner="false"> <registryValue name="" valueType="REG_SZ" value="@shell32.dll,-50944" operationHint="replace" owner="true" /> <registryValue name="Extended" valueType="REG_SZ" value="" operationHint="replace" owner="true" /> <registryValue name="SuppressionPolicyEx" valueType="REG_SZ" value="{F211AA05-D4DF-4370-A2A0-9F19C09756A7}" operationHint="replace" owner="true" /> </registryKey> <registryKey keyName="HKEY_CLASSES_ROOT\cmdfile\shell\runasuser\command" owner="false"> <registryValue name="DelegateExecute" valueType="REG_SZ" value="{ea72d00e-4960-42fa-ba92-7792a7944c1d}" operationHint="replace" owner="true" /> </registryKey> <registryKey keyName="HKEY_CLASSES_ROOT\.exe" owner="false"> <registryValue name="" valueType="REG_SZ" value="exefile" operationHint="replace" owner="true" /> </registryKey> <registryKey keyName="HKEY_CLASSES_ROOT\exefile" owner="false"> <registryValue name="" valueType="REG_SZ" value="Application" operationHint="replace" owner="true" /> <registryValue name="EditFlags" valueType="REG_BINARY" value="38070000" operationHint="replace" owner="true" /> <registryValue name="FriendlyTypeName" valueType="REG_EXPAND_SZ" value="@%SystemRoot%\System32\shell32.dll,-10156" operationHint="replace" owner="true" /> </registryKey> ...