Malware Persistence via the Windows Registry.

Following on from last weeks article which went over how to look for key loggers on Windows by watching out for specific function names in the Windows SDK, we will now look at how malware can embed itself into your machine via the Windows Registry, what artefacts to look for and what function names would be used by malware to achieve this.

The main way malware can survive reboots and execute when you log into your machine is via special …

cybersecurity malware analysis software development windows windows api