PDA

View Full Version : XP Hive


-=[Juztin]=-
04-07-2004, 06:14 AM
Hey guys,

What is the hive path to the system startup section? I mean that as in when the XP system boots up and auto-runs apps at startup, I have a setup app that keeps running that shouldnt, I need to find this section and remove the entry for it. Can you guys point me in the right direction?

--j2

STIBungy
04-07-2004, 07:12 AM
2 places to look:

My Computer\HKEY_CURRENT_USER\Software\Microsoft\Wind ows\CurrentVersion\Run

My Computer\HKEY_LOCAL_MACHINE\Software\Microsoft\Win dows\CurrentVersion\Run

john
04-07-2004, 07:48 AM
Hive?

Once the box is up, do a right click on the start button, explore all users, drill down into the userid you login with.

Mine is john --> Start Menu --> Programs --> Startup

At least that's where I put stuff I want started at login time. Not boot time, but login time.

If you are looking to stop something that starts @ boot time, do the "manage" function from right clicking on "My Computer", then drill down into Services.

Manage --> Services and Applications --> Services, and then change the 'startup type.

I think. :)

wild.irish
04-07-2004, 09:32 AM
2 places to look:
you tell me you're a geek too??? wow! turns out most of people i met from HAI are either programmer or admin ;)

Justin, your best bet (especially if it's some sort of spyware), to just determine
the name of the application and make a search on this app in your regedit.
also, i'm using FaberToys to get all dependencies on running processes (http://www.faberbox.com/fabertoys.asp). chances are - if it's a nasty warez, it'll have itself in more than one startup location in registry. also you'll be able to find which libraries it's loading.

good luck :)

STIBungy
04-07-2004, 09:39 AM
Yup. I'm not a programmer but I've done tech support, sysadmin, san engineer and now a test engineer/SE.

you tell me you're a geek too??? wow! turns out most of people i met from HAI are either programmer or admin ;)

-=[Juztin]=-
04-07-2004, 09:55 AM
thanks bro's!

--j2