Stealthy malware uses Gmail drafts to steal data

Sounds like a good solution.

----
rich

 

Just to avoid confusion.
COM object itself is not in the registry.
Registry stores a list of available COM objects as just same as other program or class IDs.

 

So a COM object is actually a file on disk? And that's why Comodo offers a separate "Protected COM Interfaces " option, I assume?

EDIT: I just found this: http://forums.comodo.com/general-security-questions-and-comments-b85.0/-t53482.0.html

 

Yes, in most case they're dlls.
COM component is a kind of 'common resource' and they are assinged identical number world wide.
You can use them by specifying appropriate program ID in CreatObject function.
If you want to understand what the COM is, the best way I suppose is to understand object-oriented programming (summary would be enough).
But it seems you found your answer.

 

@ 142395

I've found something else: http://joe4security.blogspot.nl/2012/09/hidden-malicious-code-injection-macro.html