Volleynerd Knowledge Base

Wednesday, August 28, 2002


Spyware Paranoia


HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\ShellExecuteHooks
Shell Logging at CodeGuru
There's much more to this. Look into system-wide keyboard hooks too.

HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Shell Extensions\Approved
Long list of shell extensions here that get loaded into Explorer.exe process space!?




Comments: Post a Comment

Home