Spyware Paranoia
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\ShellExecuteHooks
Shell Logging at CodeGuru
There's
much more to this. Look into
system-wide keyboard hooks too.
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Shell Extensions\Approved
Long list of shell extensions here that get loaded into Explorer.exe process space!?
Posted 4:41 PM
|
0 comments
|
Permalink