There are seven Run keys in the registry that cause programs to be run automatically:
HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Run
HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Run
HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\RunOnce
HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\RunOnce
HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\ RunServices
HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\ RunServicesOnce
HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\ RunOnce\Setup
Click Start, Run type regedt32 and press Enter.
Right click on the Key to be modified and select Export to save a Backup before making any modifications.
Or you can try this:
Click on Start, Run and type in msconfig and press Enter. Disable every single entry in the list on the startup Tab. Select the Services Tab. Down the bottom you will see a Box next to 'Hide All Microsoft Services' click on the Box and then unselect any related Files that may be a reference to anything that you have NOT installed, in the list on the Services Tab. Click Apply, Close you will be asked to Restart.
To check the Registry location for the offending file you can use Msconfig
Click Start and type msconfig and press Enter.
For the first suspicious item, expand the "Location" column to see where it is loading from in the registry.
Click on Start, Run, type "regedt32" and click OK.
Browse to the key listed in the "Location" column for Msconfig.
Delete the key on the right hand side only, that specifically matches that startup item. **See example below.**
Note the "Command" folder in Msconfig. Browse to this folder, and delete the .exe file itself. **See example below.**
:::::EXAMPLE:::::
In this example, the Startup Tab of Msconfig indicates that:
xyz.exe loads from Command "C:\WINDOWS\xyz.exe" and Location
"HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run"
In this case, we go to the registry editor and find that Run key on the left window. On the right hand Window pane you'll see each item in that Run key, specifically "xyz.exe" in this case. Delete the entry for "xyz.exe" in the registry only.
Browse to the C:\WINDOWS folder, and manually delete the xyz.exe file that resides there if it is still there.
Repeat these steps for each suspicious item.
Also run Ccleaner.
Registry:
Download and install CCleaner to tidy up your Registry. Backup the Registry as you go along, rescan again and again saving as you go until there are no errors left.
Cleaner: Windows
When you first open Ccleaner you will have an option to Analyze or Run Cleaner, after checking the left Pane and making your choices. Delete all Temp Files. If you scroll down you will see a greyed out box that has Advanced next to it. Left click on it and keep pressing OK to all of the responses. I normally Untick Windows Log Files and Memory Dumps as they may come in handy.
You don't have to install all of the add ons or shortcuts just the one to the Desktop.
http://www.ccleaner.com/download
