Windows registry boot start things

First, the classic start & mdash; & mdash; & ldquo; start & rdquo; folder

Click & ldquo; start → program & rdquo;, you will find a & ldquo ; Start & rdquo; menu, this is the most classic Windows startup location, right click on the "Start" menu selection "Open", you can open it, the programs and shortcuts will automatically run when the system starts. Microsoft Training

Second, the famous startup — — registry startup items

The registry is the place where the startup program hides the most, mainly the following:

1.Run key

The Run key is the most popular self-starting solution for viruses. The key location is [HKEY_CURRENT_USER/Software/Microsoft/Windows/CurrentVersion/Run] and [HKEY_LOCAL_MACHINE/Software/Microsoft/Windows/CurrentVersion/Run], all programs under it are automatically executed in order every time you start a login.

There is also a Run button that is not noticed, located in the registry [HKEY_CURRENT_USER/Software/Microsoft/Windows/CurrentVersion/Policies/Explorer/Run] and [HKEY_LOCAL_MACHINE/SOFTWARE/Microsoft/Windows/CurrentVersion/Policies/Explorer/Run], also have to look carefully.

2.RunServices key

RunServices program started after RunServicesOnce, located in the registry [HKEY_CURRENT_USER/Software/Microsoft/Windows/CurrentVersion/RunServices] and [HKEY_LOCAL_MACHINE/SOFTWARE/Microsoft/Windows/CurrentVersion/RunServices] key.

3.RunOnceEx key

This key is a Windows XP/2003-specific self-starting registry key located in [HKEY_CURRENT_USER//SOFTWARE/Microsoft/Windows/CurrentVersion/RunOnceEx] and [HKEY_LOCAL_MACHINE/SOFTWARE/Microsoft/Windows/CurrentVersion/RunOnceEx].

4.load key

[HKEY_CURRENT_USER/Software/Microsoft/WindowsNT/CurrentVersion/Windows] The load key value program can also be started automatically.

5.Winlogon key

This key is located in the registry [HKEY_CURRENT_USER/SOFTWARE/Microsoft/Windows NT/CurrentVersion/Winlogon] and [HKEY_LOCAL_MACHINE/SOFTWARE/Microsoft/Windows NT/CurrentVersion/Winlogon ], note that the following Notify, Userinit, Shell key values ​​will also have a self-starting program, and their key values ​​can be separated by commas, thus enabling multiple programs to be launched when logging in.

6.RunOnce key

RunOnce is located in [HKEY_CURRENT_USER/Software/Microsoft/Windows/CurrentVersion/RunOnce] and [HKEY_LOCAL_MACHINE/Software/Microsoft/Windows/CurrentVersion/RunOnce] keys, different from Run The program under RunOnce will only be executed automatically once.

7.RunServicesOnce key

The RunServicesOnce key is located under [HKEY_CURRENT_USER/Software/Microsoft/Windows/CurrentVersion/RunServicesOnce] and [HKEY_LOCAL_MACHINE/Software/Microsoft/Windows/CurrentVersion/RunServicesOnce] The program will automatically start execution once the system loads.

8. Other registry locations

There are some other key values, and there are often some programs that run automatically here, such as:

[HKEY_CURRENT_USER/Software/Microsoft/Windows/CurrentVersion/Policies/System/Shell][HKEY_LOCAL_MACHINE/SOFTWARE/Microsoft/Windows/CurrentVersion/ShellServiceObjectDelayLoad][HKEY_CURRENT_USER/Software/Policies/Microsoft/Windows/System/Scripts][HKEY_LOCAL_MACHINE /Software /Policies /Microsoft /Windows /System /Scripts]