How to start an invisible Trojan

Well-known Trojans Program Generally, the following startup methods are available: the "start" item in the "Start" menu, the [HKEY_CURRENT_USER \ Software \ Microsoft \ Windows \ CurrentVersion \ Run] item recorded in the registry, and the [HKEY_LOCAL_MACHINE \ SOFTWARE \ Microsoft \ Windows \ currentVersion \ Run, more advanced Trojans will also be registered as system "services" programs, the preceding startup methods can be used in "System Configuration Utility" (execute "msconfig" in "Start> Run ") find its trace in the "Start" and "service" items.
Another little-known startup method is to execute "gpedit. msc" in "Start> Run ". Open "Group Policy" and you can see that "Local Computer Policy" has two options: "Computer Configuration" and "user configuration". Expand "user configuration> management template> system> Logon ", double-click the subitem "run these programs when a user logs on" to set properties, select the "enabled" item in the "Settings" item, and click the "show" button to bring up the "show content" window, click the Add button, enter the path of the program to be started in the text box in the Add project window, and click OK.

Add the file to be started
restart the computer. The system automatically starts the program you added when you log on. If the trojan program was added just now, then an "invisible" trojan was born. Because the self-starting program added in this way cannot be found in the system's "System Configuration Utility", it is also not found in the well-known registry key, so it is very dangerous.
the self-starting program added in this way is recorded in the registry, however, it is not included in the [HKEY_CURRENT_USER \ Software \ Microsoft \ Windows \ CurrentVersion \ Run] and [HKEY_LOCAL_MACHINE \ SOFTWARE \ Microsoft \ Windows \ CurrentVersion \ Run] of the well-known registry, instead, it is the [HKEY_CURRENT_USER \ Software \ Microsoft \ Windows \ CurrentVersion \ Policies \ Explorer \ Run] item of the registered table. If you suspect that your computer has been planted with a Trojan, but you cannot find it, we recommend that you go to [HKEY_CURRENT_USER \ Software \ Microsoft \ Windows \ CurrentVersion \ Policies \ Explorer \ Run] in the registry, or go to "Group Policy" and "run these programs when the user logs on" to see if there are any programs started.