The F-Secure Blog has a good post on where to look for malware launch points on windows boxes. The looked at thousands of samples of malware to see where they were hiding themselves in the registry to ensure that they were launched when the machine is rebooted. They have a nice graph and a list of the top 10 registry keys to look in to see if you are unknowingly infected.
Friday, June 08, 2007
Where is your malware?
This work is licensed under a Creative Commons Attribution-NC-SA 3.0.