You are writing an antivirus bypassing Trojan using C++ code wrapped into chess.c to create an executable file chess.exe. This Trojan when executed on the victim machine, scans the entire system (c:) for data with the following text "Credit Card" and "password". It then zips all the scanned files and sends an email to a predefined hotmail address.
You want to make this Trojan persistent so that it survives computer reboots. Which registry entry will you add a key to make it persistent?
A.
HKEY_LOCAL_MACHINESOFTWAREMICROOSFTWindowsCurrentVersionRunServices
B.
HKEY_LOCAL_USERSOFTWAREMICROOSFTWindowsCurrentVersionRunServices
C.
HKEY_LOCAL_SYSTEMSOFTWAREMICROOSFTWindowsCurrentVersionRunServices
D.
HKEY_CURRENT_USERSOFTWAREMICROOSFTWindowsCurrentVersionRunServices
Explanation:
HKEY_LOCAL_MACHINE would be the natural place for a registry entry that starts services when the MACHINE is rebooted.Topic 7, Sniffers