Detecting stealth software with Strider GhostBuster
Gatekeeper: Monitoring Auto-Start Extensibility Points (ASEPs) for Spyware Management