Recommendations

While it is difficult to determine if programs being introduced to the system are malicious in nature, it is possible to sweep existing applications to determine if new launch code handlers have been inserted since the application's original introduction. The modification of an existing program to execute new code at launch would be endemic of viral activity and noticeable through these scans.