Jump to content

Scanning Run Registry Keys


Recommended Posts

Hi,

 

We haven't been able to reproduce this problem.

 

The registry key you mentioned is being properly scanned by CCleaner.

 

Can you please let us know if you are still experiencing this problem?

 

Can you please let us know which application are not being detected?

 

Thanks

Link to comment
Share on other sites

There isn't a problem (per se). It is just that CCleaner does not LOOK at the RUN values (start items) in this key. This is were you can have more startup options in Windows 7 64bit. You look at the values in the normal run key(s) at:

 

HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Run

and

HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run

 

But CCleaner does not scan or read at:

 

HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\Microsoft\Windows\CurrentVersion\Run

 

When you click on the START UP button in CCleaner you will see items in the REGISTRY "RUN" key, however with Windows 7 64bit there is a new

REGISTRY "RUN" key at the above place.

 

So you are not seeing all the RUN programs.

 

If I put NOTEPAD.EXE in "HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\Microsoft\Windows\CurrentVersion\Run" it will start notepad everytime I log on.

 

I hope that helps.

 

Thanks

Link to comment
Share on other sites

Thank you for your screen shots.

 

It is still not working here. I am using Windows 7 Enterprise maybe that makes a difference. I did check this on several machines all running Windows 7 Enterprise. It seems that you are correct and it is reading the HKLM key but it still is not reading the HKCU key. I have screen shots for you.

 

Look like:

 

HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\Microsoft\Windows\CurrentVersion\Run

 

is working, but

 

HKEY_CURRENT_USER\Software\Wow6432Node\Microsoft\Windows\CurrentVersion\Run

 

Is not.

 

I hope that helps. Thanks for looking into this.

post-34542-1263845645_thumb.jpg

post-34542-1263845893_thumb.jpg

Link to comment
Share on other sites

In 64bit you should use

 

HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Run

 

I had to manually create

 

HKEY_CURRENT_USER\Software\Wow6432Node\Microsoft\Windows\CurrentVersion\Run

 

but nothing that I manually add there runs when I log in.

 

Can you please post the name of the application that is using the Wow6432Node?

 

Thanks

Link to comment
Share on other sites

Look like:

 

HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\Microsoft\Windows\CurrentVersion\Run

 

is working, but

 

HKEY_CURRENT_USER\Software\Wow6432Node\Microsoft\Windows\CurrentVersion\Run

 

Is not.

 

Microsoft Technet almost exclusively refers to HKEY_LOCAL_MACHINE\Software\Wow6432Node\Microsoft\Windows\CurrentVersion\Run

 

Not running Windows 7 myself, but it would therefore appear that Windows does not check the HKCU equivalent at boot.

 

FWIW, the key is used to store autostart entries for 32-bit software on 64-bit systems

Link to comment
Share on other sites

It seems after a lot of testing this is a Windows 7 Enterprise only issue. Possibly because of Domain logon where users are limited in the way they can log in and use the workstation (although I am not able find any Microsoft documentation to verify that). Maybe Microsoft provides the HKCU key for domains where the user may not or the computer may not have the rights to run HKLM. As far as I can tell the HKCU key does not exist in any other version of Windows 7, plus it is only there when the Windows 7 Enterprise machine is added to a domain.

 

Maybe CCleaner can scan the key, if it does not exist ignore, it if it does then show whatever is in the key in the STARUP??

 

I thank you for all your help.

Link to comment
Share on other sites

Create an account or sign in to comment

You need to be a member in order to leave a comment

Create an account

Sign up for a new account in our community. It's easy!

Register a new account

Sign in

Already have an account? Sign in here.

Sign In Now
×
×
  • Create New...

Important Information

By using this site, you agree to our Terms of Use.