The Duqu 2.0 persistence moduleWe have described how Duqu 2.0 does not have a normal ?persistence? mechanism. This can lead users to conclude that flushing out the malware is as simple as rebooting all the infected machines. In reality, things are a bit more complicated.
Source:
The Duqu 2.0 persistence module
