Help Center/ Security Technologies and Applications/ Best Practices/ Host Security Checks/ Host Security Check (Windows)/ Troubleshooting Process/ Method 1: Using Tools to Detect Security Issues/ Step 2: Detecting Automatic Startup Programs
Updated on 2023-03-02 GMT+08:00
View PDF
Share

Step 2: Detecting Automatic Startup Programs

This section describes how to use Autoruns to check which programs are configured to automatically start upon system startup and login.

Prerequisites

You have downloaded Autoruns.

Procedure

  1. Open the Autoruns folder and double-click the Autoruns.exe file.

    Figure 1 Opening the AutoRuns folder

  2. In the displayed dialog box, click Agree.

    Figure 2 AutoRuns

  3. On the menu bar, choose Options > Scan Options and select CheckVirusTotal.com to enable the online process detection function.

  4. Check whether abnormal files (not created for system or normal service deployment) exist in the Autorun and Images Path columns.

  5. If a suspicious process is found, double-click the process name to locate the registry. You can search for the names of suspicious processes in the Filter box.

    Figure 3 Opening the Registry Editor