Wednesday, May 2, 2007

Startup Locations & Msconfig

     Probably one of the most used utilities for checking and configuring Windows startup problems has got to be msconfig.exe. But how useful is it really? After a bit of research on my own part, I've found it is useful for identifying common startup locations. But what about all the other startup locations malware and other hard to find programs start from? Well here is a list of registry keys that I have found Msconfig to check.

HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Run
HKCU\SOFTWARE\Microsoft\Windows\CurrentVersion\Run
HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Load

     Besides the outdated files (win.ini, system.ini, etc) and the services this is a very small registry list. Autoruns from Sysinternals can find around 30+ not including services and outdated files. It also comes with some good command line options. Almost any startup program manager can find dozens more than msconfig. That should make you think twice about msconfig.