Microsoft Windows AutoRuns Registry Hijack Possible Locations
Info Nessus Plugin ID 70618
SynopsisReport common registry keys used to hijack execution.
DescriptionReport common registry keys that can be used to hijack system process execution.
These registry keys can be used to either replace execution or shim a process in the middle of execution to hijack control. Confirm that everything listed here is set to the appropriate settings and that it doesn't look like another process is taking control of the process's execution.