Windows Safe Mode - How Malware can add start-up entries
AVERT labs shares a brief article on how malware can add start-up entries to the Windows registry, allowing it to operate even in SAFE MODE. Malware infections that impact the Safe Mode environment are a growing trend.
Windows Safe Mode - How Malware can add start-up entries
http://www.avertlabs.com/research/blog/index.php/2009/03/12/safe-mode-a-misnomer/
QUOTE: If malware gains control of the system, it can add its entry under the above keys to load during a Safe Mode boot. This type of malware is difficult to remove manually; you’ll need an anti-virus product to detect and clean such malware.