Registry Startup Points

Windows XP has many startup points locations. From Startup folder inside Start Menu, Win.INI and registry. This time, I want discuss about startup points in registry because many viruses infected and put its trigger string in registry value so as the virus will triggered every you restart computer.

To look your startup program which triggered by registry, open your Regedit first by click Start - Run menu, type regedit in box and then press Enter key. Regedit has some startup keys location:
1. HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Run. In this key every string inside it will run every startup.
2. HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\RunOnce, in this key every program inside it will run once and registry will remove it after executed.
3. HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Run, this key has same function with point 1 but if in HKEY_CURRENT_USER will run on your account only but in HKEY_LOCAL_MACHINE will trigger on every account on your computer.
4. HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\RunOnce,
this key has same function with point 2, but startup item in HKEY_LOCAL_MACHINE will trigger on every account on your computer.

So, if you computer infected by viruses, try to look on those keys registry first.