ghst file updates

Hi guys,just to let you know that i have added the following keys to my list as they have been known to be used by malware,i can't remember where i read this so hopefully someone elses memory will be jogged by this.

hkey_users\*\software\microsoft\windows\currentversion\explorer\fileexts\*\application

hkey_users\*\software\microsoft\windows\currentversion\explorer\fileexts\*\openwithlist

As i said,can't remember where i read this so hopefully someone can back me up about this.

Tonyjl

 

OOOps nearly forgot,also added the following keys to the file extension list in both locations
hkey_classes_root\.
and
hkey__local_machine\software\classes\_file\shell\open...

comfile
ftp
htafile
jsefile
jsfile
regfile
scrfile
vbefile
vbsfile
wsffile
wshfile

Tonyjl

 

This one might be usefull to add to Auto Starts aswell:

HKLM\System\*\Control\SystemStartOptions

Look here:
http://www.sysinternals.com/Information/bootini.html

Tonyjl