Author: azr
http://www.ph4nt0m.org/
In addition to everyone familiar with the following key values in the Windows Registry:
HKCU / Software / Microsoft / Windows / CurrentVersion / Run or Runservices
HKLM / Software / Microsoft / Windows / CurrentVersion / Run or Runservices
Outside startup, I also found that the following key values can also start programs:
Note: Except for service and drive
Test Platform: WIN XP SP2, take i: CPUZ.EXE as an example
[HKEY_CURRENT_USER / SOFTWARE / Microsoft / Windows NT / CurrentVersion / WINDOWS]
"LOAD" = "i: //cpuz.exe"
"run" = "i: //cpuz.exe"
// You can add 2, 3, 4 below. . . . . . Row down
[HKEY_LOCAL_MACHINE / SOFTWARE / Microsoft / Windows / CurrentVersion / Policies / Explorer / Run]
"1" = "i: //cpuz.exe"
// Bold is a link to the post-addition program link
[HKEY_LOCAL_MACHINE / SOFTWARE / Microsoft / Windows NT / CurrentVersion / Winlogon]
"Userinit" = "c: //windows//system32//userinit.exe,: //cpuz.exe"
