This is a duplicate of my previous question. I’m not familiar with this forum, and I accidentally closed the previous question when all I wanted to do was make a comment on your suggestions. Here’s the question again.
“I would like to know where can you hide a program to launch automatically after logon? We have Windows NT Workstation and in one of the computers, after the user logs on, the “PJ Boogie Baby Screensaver” setup program starts to run. We looked in the user’s profile startup folder as well as in the All User’s profile, but it’s not there. We also looked in the HKLM\Software\Microsoft\Windows\CurrentVersion in the keys Run; RunOnce; RunServices; RunServicesOnce, but still, not there. We looked in config.sys, autoexec.bat, sys.ini, win.ini again, not there.
Looking at the Task Manager as soon as the program runs, we see the process is owned by a setup program from “TG Byte Software.”
One other thing, this doesn’t happen if we log in as the Administrator. “