Safety Collection: Careful Startup Items Protection System Safety (1)

We know that Windows has its own startup folder, which is the most common startup project, but many people pay little attention to it. If you load the program into this folder, the system will automatically load the program when it starts, and because it is exposed, it is very easy to be changed by external factors.
First, the specific location is the "Start" option in the "Start" menu

The location on the hard disk is: C:\\Documents and Settings\\Administrator\\"Start" menu\\Programs\\Startup;

The location in the registry is:

HKEY_CURRENT_USER\\Software\\Microsoft\\Windows\\
CurrentVersion\\Run
Now you can open it and see if there is any unknown origin. The program exists.

Second, Msconfig

Msconfig is a "system configuration utility" in Windows system. It can be wide enough, including: system.ini, win.ini, startup project, etc. Similarly, it is also a place that the self-starting program likes to stay very much!

1.System.ini

First, enter "msconfig" in the "Run" dialog box to start the system configuration utility (under The same), find the system.ini tag, inside the "shell=..." can be used to load special programs. If your shell= is not the default explorer.exe, or there is a program name behind it, then you should be careful, please check the corresponding program is safe!

2.Win.ini

If we want to load a program: hack.exe, then it can be in win. Ini is implemented with the following statement:

[windows]

load=hack.exe

run=hacke.exe

What to do, You should know it!

3. "Startup" project

The startup tab in the System Configuration Utility is not the same thing as the "Startup" folder we mentioned above. This startup project in the configuration utility is a collection of Windows system startup projects. Almost all startup projects can be found here - of course, specially programmed programs can be displayed here in another way.

Open the "Startup" tab, the "Startup Project" lists the name of the boot program, the "Command" is the specific program add-on command, the last "Location" is the program in the registry Corresponding location. You can perform detailed path and command check on suspicious programs. Once you find an error, you can use the "Disable" below to disable the program from loading at boot time.

Generally speaking, except for the startup project of the system software based on the hardware part and the kernel part, other startup items can be changed appropriately, including: anti-virus program, specific firewall program, playback software, memory Management software, etc. In other words, the startup project contains a list of all our visible programs, you can use it to manage your startup program!

Third, the corresponding startup loading project in the registry

The registry startup project is a favorite of viruses and Trojans! The intractability of a lot of virus Trojans is achieved through the registry, so you can download a registry monitor to monitor registry changes. Especially when installing new software or running a new program, be sure not to be confused by the beautiful appearance of the program. Be sure to see if its essence is the Trojan's camouflage shell or bundled program! If necessary, you can restore the registry according to the backup. There are many such registry programs online, so I won't go into details here.

We can also manually check the corresponding location in the registry, although many of them are duplicated above, but for network security, care is never too much!

Pay attention to the corresponding keys in the safe and clean system registry. If you find inconsistencies, be sure to find out what it is! Don't trust the "system", "windows", "programfiles", etc. written outside. The name, everyone knows the truth of "to cover the glory." If you have made a detailed comparison and can confirm that it is an unknown program, don't be soft, delete it now!