Tuesday, September 28, 2004
Where to find malware on a Windows box
Here's a good guide to all the places in a Windows installation that a worm or virus can hide itself.
2. REGISTRY. Windows executes all instructions in the "Run" section of the Windows Registry. Items in the "Run" section (and in other parts of the Registry listed below) can be programs or files that programs open (documents), as explained in No. 1 above.Link (via Red Ferret Journal)3. REGISTRY. Windows executes all instructions in the "RunServices" section of the Registry.
4. REGISTRY. Windows executes all instructions in the "RunOnce" part of the Registry.
posted by Cory Doctorow at 09:20:01 AM permalink | Other blogs' comments
