 .

  ""      :
HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Run
HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\RunServices
HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\RunOnce
HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\RunServicesOnce
 2  (...Once)  ,  ,     1       ..

  HKLM     .         HKU:
HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Run
  HKLM\...\RUN:

[IMG]
run.png

       ,    ,   .     ,     .   -   .     .    exe  ex_. 

     ,      ,     ,   , -     (),  ,   (Shell)  ..   (    )   ,        .     .        ,           -  ,    ,  Autoruns.exe ,     ,    MSConfig,    Windows.

[IMG]
autoruns.png

  .   Autoruns,      Autoruns.exe (autorunsc.exe -  ).  ,      ,           ,       . ,    Autoruns,    : ,      ,   ,   Internet Explorer (     (BHO)),  DLL  ,  , ,     ,  DLL  Winlogon,  Windows     Winsock. 
      ,    . 

        ,        "Jump to"  ,    .       ,   .