You are writing an antivirus bypassing Trojan using C++ code wrapped into chess.c to create an executable file chess.exe. This Trojan when executed on the victim machine, scans the entire system (c:) for data with the following text "Credit Card" and "password". It then zips all the scanned files and sends an email to a predefined hotmail address.

You want to make this Trojan persistent so that it survives computer reboots. Which registry entry will you add a key to make it persistent?

A.
HKEY_LOCAL_MACHINESOFTWAREMICROOSFTWindowsCurrentVersionRunServices

B.
HKEY_LOCAL_USERSOFTWAREMICROOSFTWindowsCurrentVersionRunServices

C.
HKEY_LOCAL_SYSTEMSOFTWAREMICROOSFTWindowsCurrentVersionRunServices

D.
HKEY_CURRENT_USERSOFTWAREMICROOSFTWindowsCurrentVersionRunServices

Explanation:
HKEY_LOCAL_MACHINE would be the natural place for a registry entry that starts services when the MACHINE is rebooted.

Topic 7, Sniffers