nerdexam
Mile2_Security

MK0-201 · Question #222

Pieces of malware code are getting smarter all the time. It seems it always finds a way of reinstalling itself on a system after it has been removed. If you wish to look for malicious registry…

See the full explanation below for the reasoning.

Question

Pieces of malware code are getting smarter all the time. It seems it always finds a way of reinstalling itself on a system after it has been removed. If you wish to look for malicious registry entries that could be used to restart such malware on a Windows XP computer, which of the following entries would you be looking for? (Choose two from the list below)

Options

  • AHKLM\Software\Microsoft\Windows\CurrentVersion\RunOnce
  • BHKLM\Software\Microsoft\Windows\CurrentVersion\XP\Startup
  • CHKLM\Software\Microsoft\Windows\CurrentVersion\Run
  • DHKLM\Software\Microsoft\Windows\CurrentVersion\XP\Run

Community Discussion

No community discussion yet for this question.

Full MK0-201 Practice