How to start a self-starting program on Windows

Start item
The startup project is started when the system runs on the front-end or back-end. Program ]
When Windows (operating system) completes the login process, there are many processes in the process! Many programs are automatically loaded when Windows is started.
It is an indisputable fact that many self-starting programs bring us a lot of convenience, but not every self-starting program is useful to us. What's more, there may be viruses or Trojans in the auto-starting ranks!
In fact, in Windows/XP, apart from loading the autoexec. BAT file left over from the previous system, the program is automatically loaded according to two folders and nine core registry subkeys.
[Decomposition of startup items]
1) "start" folder-the most common folder for self-starting programs.
It is located in the "Documents and Settings --> User --> [start] menu --> program" directory of the system partition. At this time, the user refers to the login user name.
2) "all users" in the self-starting Program Folder-another common self-starting Program folder.
It is located in the "Documents and Settings --> all user --> [start] menu --> program" directory of the system partition. The "Startup" folder mentioned above runs the self-starting program of the login user, the programs started in "all users" are valid for all users (no matter which user you use to log on ).
3) "LOAD" key value-a deeply buried registry key value.
Located in the primary key of [HKEY_CURRENT_USER \ Software \ Microsoft \ Windows NT \ CurrentVersion \ windows \ load.
4) "userinit" key value-user-related
It is located in the primary key of [HKEY_LOCAL_MACHINE \ SOFTWARE \ Microsoft \ Windows NT \ CurrentVersion \ Winlogon \ userinit] and is also used to load programs at system startup. Generally, the default value is "Login userinit.exe". Because the values of this subkey can be separated by commas (,), you can add other programs to the value of the key.
5) key values of "Explorer \ Run" -- different from those of "LOAD" and "userinit, "Explorer \ Run" is located in both the [HKEY_CURRENT_USER] and [HKEY_LOCAL_MACHINE] root keys.
It is in two locations: (HKEY_CURRENT_USER \ Software \ Microsoft \ Windows \ CurrentVersion \ Policies \ Explorer \ Run) and [HKEY_LOCAL_MACHINE \ SOFTWARE \ Microsoft \ Windows \ CurrentVersion \ Policies \ Explorer \ run.
6) The "runservicesonce" sub-key is loaded before the user logs on and other self-Start Programs in the Registry are loaded.
The key is also located under [HKEY_CURRENT_USER \ Software \ Microsoft \ Windows \ CurrentVersion \ runservicesonce] and [HKEY_LOCAL_MACHINE \ SOFTWARE \ Microsoft \ Windows \ CurrentVersion \ runservicesonce.
7) The "runservices" subkey, which is also loaded before the user logs on and loads the self-starting program of other registries.
The key is also located under [HKEY_CURRENT_USER \ Software \ Microsoft \ Windows \ CurrentVersion \ runservices] and [HKEY_LOCAL_MACHINE \ SOFTWARE \ Microsoft \ Windows \ CurrentVersion \ runservices.
8) "runonce \ setup" sub-key-the default value is the program loaded after the user logs on.
The key is also located under [HKEY_CURRENT_USER \ Software \ Microsoft \ Windows \ CurrentVersion \ runonce \ setup] and [HKEY_LOCAL_MACHINE \ SOFTWARE \ Microsoft \ Windows \ CurrentVersion \ runonce \ setup.
9) "runonce" subkey-many self-start programs use the runonce subkey to complete the first loading.
The key is also located under [HKEY_CURRENT_USER \ Software \ Microsoft \ Windows \ CurrentVersion \ runonce] and [HKEY_LOCAL_MACHINE \ SOFTWARE \ Microsoft \ Windows \ CurrentVersion \ runonce. The runonce sub-key located under the root key of [HKEY_CURRENT_USER] loads the relevant program before the user logon button and the run key value of other registries are loaded into the program, the runonce sub-key located under the primary key of [HKEY_LOCAL_MACHINE] is loaded after the operating system processes the run sub-Key of other registries and programs in the self-starting folder. In Windows XP, another [HKEY_LOCAL_MACHINE \ SOFTWARE \ Microsoft \ Windows \ CurrentVersion \ runonceex] sub-key is added.
10) "run" subkey-currently the most common self-starting program used for loading.
The key is also located under [HKEY_CURRENT_USER \ Software \ Microsoft \ Windows \ CurrentVersion \ Run] and [HKEY_LOCAL_MACHINE \ SOFTWARE \ Microsoft \ Windows \ CurrentVersion \ Run.
The run key value located under the root key of [HKEY_CURRENT_USER] is followed by the run key value under the primary key of [HKEY_LOCAL_MACHINE], but both key values are loaded before the "Start" folder.
11) In addition, it is a service loaded in windows. It has a high level and is used for loading first.
It is located under [HKEY_LOCAL_MACHINE \ SYSTEM \ CurrentControlSet \ Services]. Have you seen all your system service loaders here!
12) Windows Shell-System Interface
It is located in the shell‑key value of [HKEY_LOCAL_MACHINE \ SOFTWARE \ Microsoft \ Windows NT \ CurrentVersion \ Winlogon \ logs, and the base value is assumer.exe. Of course, the trojan program may add itself here and call the resource manager as a Trojan parameter, to fool users.
13) bootexecute -- a project started and executed
The natviceprogram can be started through the manual. After the driver and system core are started, the nativeprogram will be destroyed, and the session manager (smss.exe) will start the WindowsNT user mode and start the native program in order.
It is located under [HKEY_LOCAL_MACHINE \ SYSTEM \ controlset001 \ Session Manager \] in the Registry and has a multi-string value Key named bootexecute. Its default value is "autocheck autochk *", it is used for some automatic checks when the system starts. The program in this startup project is executed before the GUI is complete, so it has a high priority.
14) Policy Group loader -- open gpedit. choose "user configuration"> "management template"> "system"> "Log on", and you will be able to see the project "run these programs upon user logon". You can add the project in it.
In the registry, [HKEY_CURRENT_USER \ Software \ Microsoft \ Windows \ CurrentVersion \ Group Policy Objects \ Local User \ Software \ Microsoft \ Windows \ CurrentVersion \ Policies \ Explorer \ Run] key value.
Note:
The gpedit tool is not provided in XP of Home Edition. You can search for and download the patch online.
Quick Start item
You can quickly enter the startup Item by entering msconfig in the running process to see the startup Item running project in the window.
[Edit this section] What can be seen from the system startup item?
As the saying goes, "Everything starts hard." In other words, "a good start is half the success." Then, the "Start" of the XP system is what "start" can tell us.
1. msconfig
In the "Start"-"run" dialog box, enter "msconfig" to open "System Configuration Utility ".
Msconfig is the "System Configuration Utility" in windows. It can automatically perform the common solution steps used to diagnose the configuration problems of the XP system. Its management aspects can be wide enough, including: General (General), system. ini, win. ini, Boot. ini, service, and startup. It is the first program started at the underlying layer of the XP system. The importance of the program is obvious. This is a favorite place for self-starting programs.
Here we will only introduce "start"
The "start" option in the System Configuration Utility is not the same as the "Start" folder described below, in the System Configuration Utility, this startup project is a collection of Windows startup items. Almost all startup projects can be found here ---- Of Course, programs with special programming processing can be not displayed here through other methods.
Open the "Start" tab. The "Start Project" lists the names of the boot programs. The "command" lists the specific program additional commands, the final "location" is the corresponding location of the program in the registry. You can check the detailed path and command of the suspicious program. Once an error is found, you can use "Disable" below to disable loading of the program during startup.
Generally, you can use the list of all programs we can see to manage your startup programs. In other words, all programs are empty.
2. Start and load the project in the registry.
The startup project of the Registry is a favorite of viruses and Trojans. A lot of virus Trojans are implemented through the registry, especially when new software programs are installed, do not be confused by the beautiful appearance of the program. Check whether the Trojan is a disguised shell or a bundled program. If necessary, recover the registry based on the backup.
We can also manually check the corresponding location in the registry. Pay attention to the comparison with the corresponding keys in the secure and clean system registry. If any inconsistency is found, be sure to figure out what it is! Do not trust the "System ",
"Windows", "ProgramFiles" and other names, especially if you observe carefully, some characters are different, such as the difference between 0 and O, the difference between 1 and L, etc, after detailed comparison, you can confirm that the program is an unknown program. Do not delete it immediately.
The main start and load key values are:
"Explorer \ Run" key values-in HKEY_CURRENT_USER \ Software \ Microsoft \ Windows \ CurrentVersion \ Policies \ Explorer \ Run) and [HKEY_LOCAL_MACHINE \ SOFTWARE \ Microsoft \ Windows \ CurrentVersion \ Policies \ Explorer \ Run.
The "runservicesonce" subkey is included in [HKEY_CURRENT_USER \ Software \ Microsoft \ Windows \ CurrentVersion \ runservicesonce] and [HKEY_LOCAL_MACHINE \ SOFTWARE \ Microsoft \ Windows \ CurrentVersion \ runservicesonce.
The "runservices" subkey is included in [HKEY_CURRENT_USER \ Software \ Microsoft \ Windows \ CurrentVersion \ runservices] and [HKEY_LOCAL_MACHINE \ SOFTWARE \ Microsoft \ Windows \ CurrentVersion \ runservices.
The "runonce" subkey is included in [HKEY_CURRENT_USER \ Software \ Microsoft \ Windows \ CurrentVersion \ runonce] and [HKEY_LOCAL_MACHINE \ SOFTWARE \ Microsoft \ Windows \ CurrentVersion \ runonce.
"Run" subkey -- in
[HKEY_CURRENT_USER \ Software \ Microsoft \ Windows \ CurrentVersion \ Run] and [HKEY_LOCAL_MACHINE \ SOFTWARE \ Microsoft \ Windows \ CurrentVersion \ Run.
3. "Start" the project
There is a built-in Startup Folder in "start" of windows, which is the most common startup project. If it is set to start at startup during installation, the program will be loaded into this folder, and the system will automatically load the corresponding program.
The specific location is the "All Programs"-"start" option in the "Start" menu.
The location on the hard disk is: C: \ Documents and Settings \ your USERNAME \ Start Menu \ Program \ Start.
The location in the registry is:
HKEY_CURRENT_USER \ Software \ Microsoft \ Windows \ CurrentVersion \ Run.
It is better to leave it empty, and the user should check from time to time what is unknown here.
4. boot. ini
When a user's computer has a ghost backup, a DOS tool, or a dual system, a window is displayed after the user is turned on. If not selected, the window is started by default, (F8 advanced boot at the bottom of the screen), boot. INI controls this place.
The content is generally
Timeout = x (x is generally 1-5)
Default = multi (0) disk (0) RDISK (0) Partition (1) \ WINDOWS
[Operating systems]
Multi (0) disk (0) RDISK (0) Partition (1) \ Windows = "Microsoft Windows XP Professional"/noexecute = optin/fastdetect ............
Boot. INI is a very important system file and a system file to be queried when the system starts, it tells the startup program that the computer has several operating systems and where the system is located. Without it or accidentally deleted, the system can still boot, but one is only able to boot the default system, not your backup system's boot selection, the following two lines are displayed each time the instance is restarted: "boot. the INI file is invalid. It is being started from C:/Windows/, but the speed is obviously slow. Therefore, in addition to making necessary backups, we also need to edit the method. Especially when installing multiple systems, if the installation sequence is not as high as Windows 98, Windows 2000, Windows XP, and Windows 2003, the file is often damaged. If we know how to modify and edit it, we won't be able to implement it.