Strategic plan

Common Start Up Routines Of Trojan Viruses

  • Autoexec.bat (MS-DOS)
  • Win.ini
     [windows]
     load=
     run=
   
  • System.ini
     [boot]
     Shell=Explorer.exe trojan.exe
  • c:\windows\winstart.bat
  • Autostart folder
    (not often used by trojans, because it is to easy to look up and remove)
  • Registry
    [HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\RunServices] [HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\RunServicesOnce] [HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\RunOnce]
    [HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Run] [HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\RunOnce] [HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\RunServices]
  • c:\windows\wininit.ini

Evilheroes' hideout | evilheroes' epilogue | What is trojan ? | Trojan information | Strategic plan | evilheroes' depot | informative links

To contact us:

Email: underfired@hotmail.com

1