value:  By hiding code as screensaver files, their privileges can be executed as these files are run within the privileged environment of the C:\Windows\System32\, and C:\Windows\sysWOW64\ folders. 
name: Event Triggered Execution: Screensaver