Groups | Search | Server Info | Login | Register
Groups > alt.comp.microsoft.windows > #2904
| From | Marion <mariona@fact.com> |
|---|---|
| Newsgroups | alt.comp.os.windows-10, alt.comp.os.windows-11, alt.comp.microsoft.windows |
| Subject | PSA: You may be surprised what's in your HKCU:Run registry key |
| Date | 2025-10-22 10:51 -0700 |
| Organization | BWH Usenet Archive (https://usenet.blueworldhosting.com) |
| Message-ID | <10db5jc$11sj$1@nnrp.usenet.blueworldhosting.com> (permalink) |
Cross-posted to 3 groups.
PSA: You may be surprised at what is in your HKCU:Run registry key
C:\> reg query "HKCU\Software\Microsoft\Windows\CurrentVersion\Run"
HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Run
DS Clock REG_SZ "C:\app\hardware\clock\dsclock\DSClock.exe"
Startup Sentinel REG_SZ C:\app\os\startup\startupsentinel\sus.exe /minimized
I am currently thoroughly testing every known freeware no-registration no
ad proxy on the planet for Windows (e.g., widecap, freecap proxifier,
psiphon, proxycap, socksescort, shadowsocks, sockscap64, nekoray,
ultrasurf, freegate, kproxy, safeip, penguinproxy, etc.).
Some of those are dangerous as they make you the exit node and some use
Electron and/or Squirrel which often adds a bunch of junk that isn't
removed using the default Windows Win+I > Apps > {name} > Uninstall.
AdvancedUninstaller finds most (all?) of those, but what I'm suggesting
here is to periodically check your Run key to see what starts upon boot.
Sometimes, if you're not looking, you'll be surprised at what you find.
An example is PenguinProxy just put this into my registry sans permission:
Type: HKCU:Run
Name: com.squirrel.PenguinProxy.PenguinProxy
Command: %localappdata%\PenguinProxy\app-0.3.1\PenguinProxy.exe
Back to alt.comp.microsoft.windows | Previous | Next — Next in thread | Find similar
PSA: You may be surprised what's in your HKCU:Run registry key Marion <mariona@fact.com> - 2025-10-22 10:51 -0700
Re: PSA: You may be surprised what's in your HKCU:Run registry key "Allan Higdon" <allanh@vivaldi.net> - 2025-10-22 15:41 -0500
Re: PSA: You may be surprised what's in your HKCU:Run registry key Marion <marionb@fact.com> - 2025-10-22 17:07 -0600
Re: PSA: You may be surprised what's in your HKCU:Run registry key Marion <marionb@fact.com> - 2025-10-22 17:29 -0600
Re: PSA: You may be surprised what's in your HKCU:Run registry key Marion <marionb@fact.com> - 2025-10-22 18:08 -0600
Re: PSA: You may be surprised what's in your HKCU:Run registry key Marion <marionb@fact.com> - 2025-10-23 12:36 -0600
Re: PSA: You may be surprised what's in your HKCU:Run registry key Hank Rogers <Hank@nospam.invalid> - 2025-10-23 17:35 -0500
Re: PSA: You may be surprised what's in your HKCU:Run registry key Marion <marionb@fact.com> - 2025-10-23 23:29 -0600
Re: PSA: You may be surprised what's in your HKCU:Run registry key Hank Rogers <invalid@nospam.com> - 2025-10-24 05:48 +0000
Re: PSA: You may be surprised what's in your HKCU:Run registry key Marion <marionc@facts.com> - 2025-10-24 00:06 -0600
Re: PSA: You may be surprised what's in your HKCU:Run registry key Andy Burns <usenet@andyburns.uk> - 2025-10-24 09:09 +0100
Re: PSA: You may be surprised what's in your HKCU:Run registry key Marion <marionc@facts.com> - 2025-10-24 03:30 -0600
Re: PSA: You may be surprised what's in your HKCU:Run registry key Andy Burns <usenet@andyburns.uk> - 2025-10-24 11:56 +0100
Re: PSA: You may be surprised what's in your HKCU:Run registry key Marion <marionc@facts.com> - 2025-10-24 05:15 -0600
Re: PSA: You may be surprised what's in your HKCU:Run registry key "Allan Higdon" <allanh@vivaldi.net> - 2025-10-22 15:41 -0500
Re: PSA: You may be surprised what's in your HKCU:Run registry key Marion <marionb@fact.com> - 2025-10-22 15:26 -0600
Re: PSA: You may be surprised what's in your HKCU:Run registry key Hank Rogers <Hank@nospam.invalid> - 2025-10-22 18:56 -0500
Re: PSA: You may be surprised what's in your HKCU:Run registry key Marion <marionb@fact.com> - 2025-10-22 18:21 -0600
Re: PSA: You may be surprised what's in your HKCU:Run registry key "J. P. Gilliver" <G6JPG@255soft.uk> - 2025-10-23 01:23 +0100
Re: PSA: You may be surprised what's in your HKCU:Run registry key Marion <marionb@fact.com> - 2025-10-22 19:09 -0600
Re: PSA: You may be surprised what's in your HKCU:Run registry key Marion <marionb@fact.com> - 2025-10-22 21:08 -0600
Re: PSA: You may be surprised what's in your HKCU:Run registry key "Steve Silverwood [KB6OJS]" <steve.silverwood@gmail.com> - 2026-02-11 17:26 -0800
Re: PSA: You may be surprised what's in your HKCU:Run registry key "Steve Silverwood [KB6OJS]" <steve.silverwood@gmail.com> - 2026-03-28 13:23 -0700
csiph-web