>

Startup Programs

This tab displays programs that are started automatically at Windows startup.


Location

Browser Sentinel looks for startup entries in the following locations:

  • User\Start Menu\Programs\Startup;
  • All Users\Start Menu\Programs\Startup;
  • HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Run;
  • HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Run;
  • HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\RunOnce;
  • HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\RunOnce;
  • HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\RunServices;
  • HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\RunServices;
  • HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\RunServicesOnce;
  • HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Policies\Explorer\Run;
  • HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\RunOnceEx;
  • HKEY_LOCAL_MACHINE\Software\Microsoft\Windows NT\CurrentVersion\Winlogon, Shell;
  • HKEY_LOCAL_MACHINE\Software\Microsoft\Windows NT\CurrentVersion\Winlogon, System;
  • HKEY_LOCAL_MACHINE\Software\Microsoft\Windows NT\CurrentVersion\Winlogon, VmApplet;
  • HKEY_LOCAL_MACHINE\Software\Microsoft\Windows NT\CurrentVersion\Winlogon, UIHost;
  • HKEY_LOCAL_MACHINE\Software\Microsoft\Windows NT\CurrentVersion\Winlogon, Userinit;
  • HKEY_CURRENT_USER\Software\Microsoft\Windows NT\CurrentVersion\Windows, run;
  • HKEY_CURRENT_USER\Software\Microsoft\Windows NT\CurrentVersion\Windows, load;
  • HKEY_LOCAL_MACHINE\Software\Microsoft\Active Setup\Installed Components;
  • HKEY_LOCAL_MACHINE\System\CurrentControlSet\Control\Session Manager, BootExecute;
  • HKEY_CURRENT_USER\Software\Mirabilis\ICQ\Agent\Apps;
  • win.ini, load;
  • win.ini, run;
  • system.ini, shell.

The Disable Action

The disable action moves the startup entry from its original location to a temporary location.

The Delete Action

The delete action (depending on the selected options):

  • Deletes the startup entry from the registry or an INI file. Note that if the startup entry is a shorcut file (lnk) in the Startup folder, then only the shortcut file is deleted;
  • Deletes the file referenced by the startup entry in the registry;
  • Unregisters the DLL file if the startup entry points to a DLL file.

Properties


Name Short description of the startup program. Usually the name of the corresponding entry in the registry.
Command The original value of the startup entry including the command line parameters.
Description The description of the startup program retrieved from its file resources.
Run Once Indicates whether the program will be auto-started only once on the next Startup. After the program is started the startup entry is auto-deleted.
Publisher The developer (a company or a person) of the program.
File A full path to the startup program file.
File Version File version information. The information is retrieved from the file resources. Also includes product version information if it differs from the file version.
File Size File size in bytes.
File CRC32 Cyclic Redundancy Checksum (Check) of the file.
File MD5 Message Digest 5 of the file.
File Creation Date The date the file was created.
Location The location (registry or a folder) of the item.
Safe Indicates whether the item in a safe or in a blocked list. Yes - item is in a safe list. No - item is in a blocked list. N/A - items is not in a safe nor in a blocked list.
Status Indicates whether the item is enabled or disabled.
System Indicates whether the item is a system item, i.e. originally shipped with Windows.
WARNING: Browser Sentinel does not always correctly differentiate third-party items and system items, use this property with care!