Welcome guest. Before posting on our computer help forum, you must register. Click here it's easy and free.

Author Topic: How do you disable a program in the registry  (Read 2852 times)

0 Members and 1 Guest are viewing this topic.

carlrowley1

    Topic Starter


    Hopeful

  • liverpool fc
    How do you disable a program in the registry
    « on: January 17, 2010, 01:25:11 AM »
    HI

    If i navigate to HKLM\SOFTWARE\Microsoft\SharedTools\MSConfig\Startupreg.
    How would i disable one of these programs in the registry

    Would you edit the "key" > value data  in the right hand pane for the program.





    windowsXP professional sp3, Ram 512 , 1.30 gigahertz AMD Athlon, Maxtor 4r080L0 hard drive.

    Laptop Toshiba.  L300/L300D series/windows vista home premium/
    2gb ram/32 bit/

    Windows 7 / home premium / 64 bit /3gb system ram /

    kpac

    • Web moderator


    • Hacker

    • kpac®
    • Thanked: 184
      • Yes
      • Yes
      • Yes
    • Certifications: List
    • Computer: Specs
    • Experience: Expert
    • OS: Windows 7
    Re: How do you disable a program in the registry
    « Reply #1 on: January 17, 2010, 04:50:26 AM »
    Leave the registry alone.

    Use this: http://startupmanager.org/

    carlrowley1

      Topic Starter


      Hopeful

    • liverpool fc
      Re: How do you disable a program in the registry
      « Reply #2 on: January 18, 2010, 12:13:55 AM »
      Leave the registry alone.

      Use this: http://startupmanager.org/

      I understand your point, but i was following an artical on disabling programs from the registry, it told you where to go to disable them, but did not tell what you have to do from there, its really for information only or future reference only.

      I have autoruns,and defender anyway to disable programs

      windowsXP professional sp3, Ram 512 , 1.30 gigahertz AMD Athlon, Maxtor 4r080L0 hard drive.

      Laptop Toshiba.  L300/L300D series/windows vista home premium/
      2gb ram/32 bit/

      Windows 7 / home premium / 64 bit /3gb system ram /

      BC_Programmer


        Mastermind
      • Typing is no substitute for thinking.
      • Thanked: 1140
        • Yes
        • Yes
        • BC-Programming.com
      • Certifications: List
      • Computer: Specs
      • Experience: Beginner
      • OS: Windows 11
      Re: How do you disable a program in the registry
      « Reply #3 on: January 18, 2010, 12:27:35 AM »
      Alright, well, for future reference, thats key doesn't deal with any startup programs, it's actually a key sued by msconfig during a "diagnostic" startup (or something along those lines). the keys used by windows to start programs are:

      HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Run

      HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run

      Infectious programs generally (for some of the nastier ones) also install Winlogon hooks:

      XP:

      HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Winlogon\Notify


      Vista:

      HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Winlogon\GPExtensions

      Another vector is using the "appinit_DLLs" value, in
      HKEY_LOCAL_MACHINE\Software\Microsoft\Windows NT\CurrentVersion\Windows.

      More info in AppInit_dlls value:
      http://support.microsoft.com/kb/197571



      Programs could also change the association of exefiles, so that instead of running the executable directly (%1) it instead initiates the malware program with the exe file as an argument; for example, by changing it to drive:\Path\to\malware.exe" "%1" %*  It usually infects the program in some way and then runs it, so it might not even be noticed.

      And of course, the StartUp Folder can be used to run programs every startup, but malware generally stays away from that for some reason (perhaps too obvious)

      Here's an interesting article detailing some of these keys and how to use them to remove infections if it ever becomes necessary. It's aimed at windows 2000 but in general aside from moving a few keys (such as the winlogon notify key above) most of the information is still relevant.
      I was trying to dereference Null Pointers before it was cool.

      carlrowley1

        Topic Starter


        Hopeful

      • liverpool fc
        Re: How do you disable a program in the registry
        « Reply #4 on: January 18, 2010, 12:47:18 AM »
        Alright, well, for future reference, thats key doesn't deal with any startup programs, it's actually a key sued by msconfig during a "diagnostic" startup (or something along those lines). the keys used by windows to start programs are:

        HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Run

        HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run



        OK BC_programmer, i am not infected or anything like that, i have just found this key the same time you replyed, which would haved saved me 15 miniutes
        I have 5 programs listed in the HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run

        Now would i just delete one of these entries, so that is does not load on startup, is this the same a disabling it, or am i removing the entry completly..?

        windowsXP professional sp3, Ram 512 , 1.30 gigahertz AMD Athlon, Maxtor 4r080L0 hard drive.

        Laptop Toshiba.  L300/L300D series/windows vista home premium/
        2gb ram/32 bit/

        Windows 7 / home premium / 64 bit /3gb system ram /

        BC_Programmer


          Mastermind
        • Typing is no substitute for thinking.
        • Thanked: 1140
          • Yes
          • Yes
          • BC-Programming.com
        • Certifications: List
        • Computer: Specs
        • Experience: Beginner
        • OS: Windows 11
        Re: How do you disable a program in the registry
        « Reply #5 on: January 18, 2010, 12:49:11 AM »
        yes, you delete the entry.

        Normally, autoruns and other such programs make a backup of them. That is how you see, for example, unchecked items that you can reenable.
        I was trying to dereference Null Pointers before it was cool.

        carlrowley1

          Topic Starter


          Hopeful

        • liverpool fc
          Re: How do you disable a program in the registry
          « Reply #6 on: January 18, 2010, 05:04:15 AM »
          yes, you delete the entry.

          Normally, autoruns and other such programs make a backup of them. That is how you see, for example, unchecked items that you can reenable.

          GREAT
          OK, BC_programmer, got that "just delete the entry"  to the program

          Now the artical says  " you can add entries here also, but we recommend that you use the "windows run at startup policy settings" to add programs that you want to run at startup"

          Is this group policy, which i don't have on the vista machine, so i would be interested in how you would add a program in this registry key.
          O by the way the artical i am looking at is here...    http://www.pacs-portal.co.uk/startup_content.php

          7) Registry Editor - Windows 9x/Me/NT/2000/XP/Vista   its about half way down the page
          windowsXP professional sp3, Ram 512 , 1.30 gigahertz AMD Athlon, Maxtor 4r080L0 hard drive.

          Laptop Toshiba.  L300/L300D series/windows vista home premium/
          2gb ram/32 bit/

          Windows 7 / home premium / 64 bit /3gb system ram /