Running programs before logon

[rob]

Hi.

Does anyone know if there is a way to get a program to run before the computer asks you to logon? If you put it in HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\Curr entVersion\Run it only runs the program after explorer has started.

Thanks
Rob.

[jstolz]

There is no way--the hierarchy is built into the OS. If you have an AV program, you'll notice that it necessarily works in 2 stages--stage 1 from an autoexec.bat entry that scans key files before the GUI loads; and stage 2--only after the GUI loads and input to the logon prompt is made.

As an aside, I'm curious about the hierarchy of programs running after the GUI loads--specifically from the registry; it seems that Norton AV loads first before all others, and I wonder how it accomplishes that.


Regards...

[rob]

It seems that all virus scanners run first, I use mcafee and it is also the first thing to be run. It seems that if you put the program in HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\Curr entVersion\RunServices it runs the program before you are asked to log on, but only the first time the computer boots...

Well, thanks for the help.

[ultimate_venom]

Actually if it's in that key
HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\Curr entVersion\RunServices

it runs everytime you boot up the computer, I have sygate and sygate starts running before you have to log on or I should say OR at the same time that the window that comes up asking for the password does, it loads a splash screan and the program that stays residint in memory, and after you enter the password in side the key that says RUN sygate runs the Gui or the maneger. But as I am looking at it the only things that are run in there are just programs that are resident in memory wich don't take much efort for the computer to do, don't think you can have an entire program runing with out the rest of windows loading. But then again I have never done it, it might work.



\/E(\)()(\/)

[ROOT66]

I run a keylogger on a machine in our office used by an executive manager suspected of illegal activity. It loads from

HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\Curr entVersion\RunServices

and *always* captures his login username and password (along with everything else).

[brentadams]

The reason ALL of the programs you mentioned run before the logon is NOT because of a registry entry. Every program that loads before the logon screen, whether if be WinNT, 9x , 2k, or ME, loads before the logon because there is a line of code in a VXD the program uses that causes it to do this. I have experimented with this by many different programs, both commercial and ones I have written. If you can create a VxD that loads your program, you're in business. Otherwise, all other supposed methods run immediately after the logon screen is loaded or after you logon. You MUST use a VxD to load before the logon screen. This is the only way, because VxDs are loaded at boot time and execute before the logon screen is displayed because they are normally device drivers so they must load and execute before you can do anything.