Step 2: Detecting Automatic Startup Programs

Prerequisites

You have downloaded Autoruns.

Procedure

1. Open the Autoruns folder and double-click the Autoruns.exe file.
   Figure 1 Opening the AutoRuns folder
   

2. In the displayed dialog box, click Agree.
   Figure 2 AutoRuns
   

3. On the menu bar, choose Options > Scan Options and select CheckVirusTotal.com to enable the online process detection function.

   

4. Check whether abnormal files (not created for system or normal service deployment) exist in the Autorun and Images Path columns.

   

5. If a suspicious process is found, double-click the process name to locate the registry. You can search for the names of suspicious processes in the Filter box.
   Figure 3 Opening the Registry Editor