Window 7 system boot entry details

  
one, the specific location is the boot option in the window 7 system start menu on the computer hard disk is: C: \\ Documents and Settings \\ Administrator \\ start menu \\ program \\ start; in the system registry The location in is: HKEY_Current_USER\\Software\\Microso

First, the specific location is the window 7 system "Start" menu "Start" <; Start & rdquo; Options

on the computer hard drive is: C:\\Documents andSettings\\Administrator\\“Start”Menu\\Programs\\Startup;

The location in the system registry is:

HKEY_Current_USER\\Software\\Microsoft\\Windows\\CurrentVersion\\ Run

Second, Msconfig Command

The Msconfig command is a "system configuration utility" in Windows system. It can be wide enough to include: system.ini, win.ini , start the project, etc. Similarly, it is also a place that the self-starting program likes to stay very much!

1.System.ini

First, enter “msconfig” in the "Run" dialog box to start the system configuration utility. The program (the same below), find the system.ini tag, inside the "shell=……” can be used to load special programs. If your shell= is not the default explorer.exe, or there is a program name behind it, then you should be careful, please check the corresponding program is safe!

2.Win.ini

If we want to load a program: hack.exe, then it can be in win. ini is achieved by the following statement:

[windows]

load = hack.exe

run = hacke.exe

3 "Startup" project

The startup tab in the System Configuration Utility and the "Startup" folder we mentioned above are not the same thing, this startup project in the System Configuration Utility, It is a collection of Windows system startup projects. Almost all startup projects can find —— of course, specially programmed programs can not be displayed here by another method.

Open & ldquo; Start & rdquo; label, & ldquo; Start project & rdquo; the list is the name of the boot program, & ldquo; command & rdquo; under a specific program additional commands, the last of the & ldquo; Location & rdquo; is the corresponding location of the program in the registry. You can perform detailed path and command check on suspicious programs. Once you find an error, you can use the following "Disable" to disable the loading of the program when it is booted.

In general, in addition to project-based boot system hardware and system software core part, the other start-up projects can all be modified as appropriate, include: anti-virus program, firewall program-specific, player Software, memory management software, etc. In other words, the startup project contains a list of all our visible programs, and you can use it to manage your startup program.


Three, the corresponding startup load project in the registry

The registry startup project is the favorite of viruses and Trojans! The intractability of many virus Trojans is It is implemented through the registry, so you can download a registry monitor to monitor changes to the registry. The subsequent versions of Rubik's Cube (click here to download) will also add a series of security features for monitoring malware. Modifications to the system, etc. Especially when installing new software or running a new program, be sure not to be confused by the beautiful appearance of the program. Be sure to see if its essence is the Trojan's camouflage shell or bundled program! If necessary, you can restore the registry according to the backup. There are many such registry programs online, so I won't go into details here.

We can also check the corresponding location in the registry by hand. Although many of them are duplicated with the above, but for network security, it is never too much to be careful!

Be sure to compare the corresponding keys in the safe and clean system registry. If you find inconsistencies, be sure to find out what it is! Don't believe that it is written outside, “system”, “"windows”,“ Programfiles & rdquo; and other names, everyone knows "to cover the rumors". If, after a detailed comparison, can determine which program is unclear, do not be soft, remove immediately!

four, Wininit.ini

We know, Windows installer often call this The program to achieve the delete work after the installation program, so do not underestimate it, if you do it on the handle, it can be said to be very hidden, very perfect!

It is used in the Windows directory of the system disk, Notepad opens it (sometimes the wininit.hak file) to see the corresponding content. Obviously, we can add corresponding statements to modify the system program or delete the program. If the file is associated with Trojan, you can delete the original file by winint.ini after it infects, so as to achieve truly hide yourself!

Fifth, fighting
under DOS

Finally, We talk about the startup project loading under DOS, config.sys, autoexec.bat, *.bat and other files can be used in a specific programming way to achieve the purpose of the loader. So don't think that DOS is an outdated thing. Good DOS programming can often achieve very simple and very useful functions.

Copyright © Windows knowledge All Rights Reserved