Uncovering hidden processes in Windows system startup process

At present, most Trojans, hackers, and viruses are running with system startup. Therefore, the hidden dangers in the system startup process can effectively ensure the safety of the computer.

First, Msconfig method

The traditional Msconfig is the most convenient way to find out the hidden dangers. In Windows 98/XP/2003, we can open it directly. The method is to open the "Run" window, enter "msconfig" and press Enter to open the configuration tool.

Depending on the version of the operating system, the open window will be different. However, the most important one is the "Startup" tab. We only need to switch to the label, and then cancel the startup item with unknown origins, so that it can be prohibited from running.

If it is a Windows 2000 system, although msconfig is not provided by default, this does not matter. We only need to copy msconfig.exe to other systems and save it to the Windows 2000 system. Double-click the copied file, then you will be prompted to find some system files, you can skip this until you enter the configuration window.

Second, the registry method

The registry is also a good place for us to launch hidden dangers. Open the "Run" window, type "regedit" and press Enter to open the Registry Editor. We only need to open HKEY_CURRENT_USERSoftwareMicrosoftWindowsCurrentVersionRun and HKEY_LOCAL_MACHINESOFTWAREMicrosoftWindowsCurrentVersionRun in turn, the key value on the right side is the program that runs when the system starts. For programs that do not have to be started or forced to be added with the system, you can delete them by pressing the "DEL" button.

Tip: System startup is an automatic project, and in the quick launch of the taskbar, users can quickly open the corresponding program.

Third, the service view method

Since the system's services are enabled at startup. Therefore, some viruses and Trojans will register themselves as services to achieve the purpose of system startup.

For this, we can also view it in the registry. Open the registry and find HKEY_LOCAL_MACHINESYSTEMCurrentControlSetServices, each of which represents a service that runs automatically at startup. The start under each item indicates the startup type. If the value is 2, it means that it starts automatically with the system, 3 means manual start, 4 means disable, and according to your actual needs, whether these services continue to be executed at startup.

Another easier way to view the service is to open the service manager directly in the system. Go to the "Control Panel" and double-click "Services" in the "Administrative Tools", so that we can clearly check the status and startup mode of each service, and also judge whether the service is system service or regular according to the service description. service. If it is an illegal service, it will be disabled and its "Startup Type" will be set to "Disabled".

Of course, there are many ways to find out the hidden dangers of the system, such as using anti-virus software to check at startup. As long as we notice the abnormal situation of the system and check the running process in the task management in time, we can surely get all these hidden dangers out.