Mile2_Security
ML0-320 · Question #139
Pieces of malware code are getting smarter all the time. It seems it always finds a way of reinstalling itself on a system after it has been removed. If you wish to look for malicious registry…
The correct answer is A. HKLM\Software\Microsoft\Windows\CurrentVersion\RunOnce C. HKLM\Software\Microsoft\Windows\CurrentVersion\Run. See the full explanation below for the reasoning.
Question
Pieces of malware code are getting smarter all the time. It seems it always finds a way of reinstalling itself on a system after it has been removed. If you wish to look for malicious registry entries that could be used to restart such malware on a Windows XP computer, which of the following entries would you be looking for? (Choose two from the list below)
Options
- AHKLM\Software\Microsoft\Windows\CurrentVersion\RunOnce
- BHKLM\Software\Microsoft\windows\CurrentVersion\XP\Startup
- CHKLM\Software\Microsoft\Windows\CurrentVersion\Run
- DHKLM\Software\Microsoft\Windows\CurrentVersion\XP\Run
How the community answered
(31 responses)- A74% (23)
- B10% (3)
- D16% (5)
Community Discussion
No community discussion yet for this question.