Forgot to post this one before 153…

As this is often the case in this series, this persistence mechanism is a documented feature of Microsoft Windows.

The following Registry entry:

HKLM\Software\Microsoft\MSDTC\XADLL 

can store a list of DLL files that can be loaded by the OS.