Got a couple of programs/services being autostarted on XP Pro SP2.
They show up in MSCONFIG Services, but that does not tell me where they
are started from.
I checked all the Startup folders in Documents and Settings, I have
checked all the .ini files, config,sys, and autoexec.bat, and I have
checked all the registry entries for Run, RunOnce, and RunServices in
both HKEY_Current_User and HKEY_Local_Machine. No dice.
Where else are services started?? OBTW - these are services for
non-microsoft products, such as spybot and adaware.
thanks
nick
Hello Nick,
Starup locations:
User\Start Menu\Programs\Startup;
All Users\Start Menu\Programs\Startup;
HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Run;
HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Run;
HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\RunOnce;
HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\RunOnce;
HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion
\RunServices;
HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion
\RunServices;
HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion
\RunServicesOnce;
HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Policies
\Explorer\Run;
HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion
\RunOnceEx;
HKEY_LOCAL_MACHINE\Software\Microsoft\Windows NT\CurrentVersion
\Winlogon, Shell;
HKEY_LOCAL_MACHINE\Software\Microsoft\Windows NT\CurrentVersion
\Winlogon, System;
HKEY_LOCAL_MACHINE\Software\Microsoft\Windows NT\CurrentVersion
\Winlogon, VmApplet;
HKEY_LOCAL_MACHINE\Software\Microsoft\Windows NT\CurrentVersion
\Winlogon, UIHost;
HKEY_LOCAL_MACHINE\Software\Microsoft\Windows NT\CurrentVersion
\Winlogon, Userinit;
HKEY_CURRENT_USER\Software\Microsoft\Windows NT\CurrentVersion
\Windows, run;
HKEY_CURRENT_USER\Software\Microsoft\Windows NT\CurrentVersion
\Windows, load;
HKEY_LOCAL_MACHINE\Software\Microsoft\Active Setup\Installed
Components;
HKEY_LOCAL_MACHINE\System\CurrentControlSet\Control\Session Manager,
BootExecute;
HKEY_CURRENT_USER\Software\Mirabilis\ICQ\Agent\Apps;
win.ini, load;
win.ini, run;
system.ini, shell.
You can also download this freeware that will give you a very detailed
view of what's starting from where:
Autoruns
http://www.microsoft.com/technet/sysinternals/ProcessesAndThreads/Autoruns.mspx