Program self-Starting position (8 methods, the Registry has 6)

If the system starts with too many programs to load automatically, it can cause slow startup, and many viruses or trojans are loaded automatically when the system starts. So it is important to know how to find the self-launcher in Windows.

　First, in the "Startup" folder to find

The startup folder is typically located in the "system drive/documents and settings/username/Start Menu/Program/Startup/" directory (Win 2000/xp) or "system drive letter/windows/start menu/programs/Startup/" directory. You can find out where the program is located by using the properties of the shortcut.

　Second, from the automatic batch processing files to find

In Win 98, the programs in the Autoexec.bat and Winstart.bat files are automatically executed at boot time, while in win me/2000/xp/2003, these two batch files are not executed by default.

　　Third, from the system configuration file to find

Traces of self-starter programs, such as Config.sys, Win.ini, System.ini, Wininit.ini, and Msdos.sys, can also be found in some system configuration files.

1.WIN. INI boot:
Startup location (File.exe is the name of the file to start):
[Windows]
Load=file.exe
Run=file.exe
Note: The difference between load= and run= is that the file runs in the background (minimized) by load= running the file, and the file is run by default when it is run by run=.

2.SYSTEM. INI boot:
Startup location (File.exe is the name of the file to start):
The default is:
[Boot]
Shell=Explorer.exe
After you start the file:
[Boot]
Shell=Explorer.exe File.exe
Winstart. Bat Startup:
This is a system self-initiated batch file, the main role is to handle some need to copy, delete the task. For example, some software will require a reboot after installation or uninstallation, and can be used to copy and delete some files to accomplish the task. Such as:
"@if exist C:windowstempproc. BAT call C:windowstempproc. BAT "
Here is the command to execute the Proc.bat file;
"Call Filename.exe > nul"
Here is the removal of any output on the screen.
It is noteworthy that the Winstart.bat file has the same effect as Autoexec.bat in some sense. If the ingenious arrangement can completely achieve the purpose of modifying the system!

　Iv. Search By "System Configuration Utility"

Type "Msconfig.exe" in Start → run to start the System Configuration Utility and go to the Startup tab to see the name and location of the program that was launched with the system.
Note: The win 2000 itself does not have a Msconfig program that can be extracted from win xp/2003.

　　V. Finding from a planned mission

Double-click Scheduled Tasks in Control Panel to see if any scheduled tasks are started with the system.

　　Vi. use of "system Information" to find

You can view the self-launcher name and location in the right pane by entering the System Information main interface, and then expanding the branch software environment → startup program.

　　Vii. use "Group Policy" to find

In Win 2000/xp/2003, type gpedit.msc in Start → Run, open Group Policy, expand User Configuration → administrative templates → system → log in/logoff, double-click Run these programs when users log on, and click the Show button to view the self-launcher.

　　 Eight, through the registration form to find

In the registry, you can find the name and location of the self-launcher from the following key values.

　 1.Userinit Key

Located in "Hkey_local_machine/software/microsoft/windowsnt/currentversion/winlogon/userinit". This key allows you to specify multiple programs separated by commas. For example, "Userinit.exe,osa.exe" (without quotation marks).

　　 2.explorer/run Key

Located in "Hkey_current_user/software/microsoft/windows/currentversion/policies/explorer/run"
and "Hkey_local_machine/software/microsoft/windows/currentversion/policies/explorer/run".

　　 3.RunServicesOnce Key

The RunServicesOnce key is used to start the service program, which is started before the user logs on, with the specific location: "hkey_current_user/software/microsoft/windows/currentversion/ RunServicesOnce "
and "Hkey_local_machine/software/microsoft/windows/currentversion/runservicesonce".

　　 4.RunServices Key

The program specified by the RunServices key runs after runservicesonce the specified program, but is still before the user logs on. The exact location is: "Hkey_current_user/software/microsoft/windows/currentversion/runservices"
and "Hkey_local_machine/software/microsoft/windows/currentversion/runservices".

　　 5.Run Key

Run is the most commonly used key for Autorun programs, located in "Hkey_current_user/software/microsoft/windows/currentversion/run" and

"Hkey_local_machine/software/microsoft/windows/currentversion/run".

　6.Load Key

Located in "Hkey_current_user/software/microsoft/windowsnt/currentversion/windows/load".

In addition there are RunOnce, Runonce/setup and other keys.

Hkey_current_user/software/microsoft/windowsnt/currentversion/windows/load
Hkey_current_user/software/microsoft/windows/currentversion/policies/explorer/run
Hkey_current_user/software/microsoft/windows/currentversion/runservicesonce
Hkey_current_user/software/microsoft/windows/currentversion/runservices
Hkey_current_user/software/microsoft/windows/currentversion/runonce/setup
Hkey_current_user/software/microsoft/windows/currentversion/runonce
Hkey_current_user/software/microsoft/windows/currentversion/run

Hkey_local_machine/software/microsoft/windowsnt/currentversion/winlogon/userinit
Hkey_local_machine/software/microsoft/windows/currentversion/policies/explorer/run
Hkey_local_machine/software/microsoft/windows/currentversion/runservicesonce
Hkey_local_machine/software/microsoft/windows/currentversion/runservices
Hkey_local_machine/software/microsoft/windows/currentversion/runonce/setup
Hkey_local_machine/software/microsoft/windows/currentversion/runonce
Hkey_local_machine/software/microsoft/windows/currentversion/runonceex
Hkey_local_machine/software/microsoft/windows/currentversion/run

http://blog.csdn.net/kl222/article/details/1293541

Program self-Starting position (8 methods, the Registry has 6)