Where is the best place to look in the registry for a suspect virus attack?

Some viruses or trojans have the ability to alter the registry. What is the recommended solution other than running a virus scan?
Thank you.