Disable program from boot?

Feb 22, 2018
55
0
130
Hello, as title says is there any way to do that? I checked on the startup menu in task manager, in appdata in the startup folder, in registry run and runonce sections and finally in scheduled tasks. Nothing shows up. I would really appreciate some help, possibly without the need to download any program since I haven't access to internet right now.
 
Solution
You said you already looked in these:
Task Manager
Startup Folder(s)
Registry "Run"
Registry "RunOnce"
Scheduled Tasks

If I look through AutoRuns, here are some of the more obvious places to look (most of which you already looked in):

Registry: HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Run
Registry: HKLM\SOFTWARE\Wow6432Node\Microsoft\Windows\CurrentVersion\Run
Folder: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Startup
Folder: C:\Users\USERNAME\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup
Application: Task Scheduler

WARNING: Always make a backup of your registry before editing it.
https://support.microsoft.com/en-us/help/322756/how-to-back-up-and-restore-the-registry-in-windows

Did you check...
If you mean disable a program from running at startup then use the windows key + r to bring up the run menu and type msconfig, a window will open and, there is a startup tab which will list the programs that startup with Windows, they can be disabled there.
 


Just tryed it now. Clicking the startup entry brings up task manager, or did I misunderstood you?
 


What do you mean? Maybe I wasn't clear but I said that program doesn't appear in task manager startup menu, which is what gets opened if I go in the startup of msconfig.
 
In newer versions of Windows, the startup list has been moved from System Configuration (msconfig.exe) to the Task Manager.
vDxwT.png

See Razvan96's pic.

I think he cannot find the program listed in either place as he said it's not listed in Task Manager.

antoniomartucci95, which program is it that you are trying to prevent from running? Is it a program or a virus?

A download may actually be required and will probably help you. You can download the program onto a USB flash drive and move it to the other PC that way. It's freeware from Microsoft and it's called AutoRuns. It lets you disable anything and everything at startup (including stuff that you DON'T want to disable). Autoruns covers all of those places that you've looked and probably more. https://docs.microsoft.com/en-us/sysinternals/downloads/autoruns
 

Indeed it's not there: https://imgur.com/a/eC706hv
Program is gygabyte oc guru II or something like that and yea I was already aware of that ms software but I have no means to download since I live in a rural area.
 
Click Start, Run, type Regedit, and then press Enter.
Click HKEY_LOCAL_MACHINE
Click Software
Click Microsoft
Click Windows
Click Current Version
Click Run.
Within the Run folder, locate the program(s) you don't want to boot upon startup.
Once located, highlight the file and press Delete.
Exit out of the Registry and reboot the computer.

or

Click Start,Settings, and then Control Panel.
Open the Administrative Tools and click Services.
Locate the service you want to disable and double-click it.
Change the Startup type from automatic to disabled.


And you say you dont have internet, but how you comment on this forum?
 
You said you already looked in these:
Task Manager
Startup Folder(s)
Registry "Run"
Registry "RunOnce"
Scheduled Tasks

If I look through AutoRuns, here are some of the more obvious places to look (most of which you already looked in):

Registry: HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Run
Registry: HKLM\SOFTWARE\Wow6432Node\Microsoft\Windows\CurrentVersion\Run
Folder: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Startup
Folder: C:\Users\USERNAME\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup
Application: Task Scheduler

WARNING: Always make a backup of your registry before editing it.
https://support.microsoft.com/en-us/help/322756/how-to-back-up-and-restore-the-registry-in-windows

Did you check both Registry Run keys that I've listed above?

Is the software absolutely necessary for your system to run? Most overclocking software isn't. Can it be uninstalled?

I downloaded Gigabyte OC Guru II and installed it on my test system.

It installed a shortcut here:
C:\ProgramData\Microsoft\Windows\Start Menu\Programs\StartUp\GIGABYTE OC_GURU.lnk
Screen shot: https://i.postimg.cc/C5qF1Tcj/ss0.jpg

It installed a task here:
Task Scheduler Library\GIGABYTE OC GURU
Screen shot: https://i.postimg.cc/52x6PyPT/ss1.jpg

And that's it.
 
Solution


I think I already looked there and there was nothing but I'll double check, there is a gygabyte service but it could well be a motherboard or gpu service, not 100% sure if it's related to that software. By the way this is what I looked in regedit:
HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Run
HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Run
and obviously the runonce tab as well. As to how I can answer you on here it's simple, I can answer only when I'm the the main city near some free wifi
 

this is interesting. First I didn't know of the existance of this other run section in the registry: Registry: HKLM\SOFTWARE\Wow6432Node\Microsoft\Windows\CurrentVersion\Run
what is it used for? I also didn't know about this location: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Startup . If I may ask why some stuff gets put there and not in the appdata folder?

I didn't check that registry key with wow6432node as I wasn't aware like I already said

The software isn't all that necessary since it's not that good but i have to live with it since I have no means of downloading another tool, i mostly use it to OC.

I had the task already disabled by ages and I didn't think it was the cause since I still get a cmd prompt after each windows boot. Could it be because I edited the name of the exe before I disabled the task?

So let's recap, what should I do in order to stop it? I assume I should delete GIGABYTE OC_GURU.lnk in that folder? Anything else?
 

The only thing listed in my registry for:
HKLM\SOFTWARE\Wow6432Node\Microsoft\Windows\CurrentVersion\Run
is my Logitech Quickcam software. Maybe the answer here will help explain what that key is used for.
https://answers.microsoft.com/en-us/windows/forum/windows8_1-performance/wow6432node-registry-startups/481d4851-720f-4084-b1f1-8472c0eb842d
I actually think it's very unlikely to be one of these registry entries that is starting up the software since the software was not listed in any of those on my test system after I installed it.

So the question is, could be in the startup folder where you didn't look yet?
C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Startup
The Start Menu is created from shortcuts in several folders. Each user can have their own menu, then the "all users" is another folder. https://answers.microsoft.com/en-us/windows/forum/windows_7-performance/where-has-startup-gone/fa93e499-bd6a-4bd0-a8b7-1ba1958c4ccf

I just looked at the regular start menu included with Windows 10 and I don't even see the "Startup" folder listed. Maybe my start menu is broken (once again) or it's just no longer easily accessible. You can manually open the folder using Windows Explorer or the Run program. It's such a terrible start menu. There are excellent replacements for it (such as Open-Shell start menu which I highly recommend) that actually show you the Startup folder.

So yes, if you find the shortcut in that startup folder, delete it and that may fix your problem.

As for the Command Prompt popping up on bootup, that is another issue completely. I'm assuming it pops up and then disappears? This could be malware and for that I would recommend Malwarebytes (which I guess you don't have access to). Or it could be a failed installation of some software. AutoRuns could help figure that out. It's too bad you can't download anything.
 


Alright so it's useless to look there since you already checked, also thanks for the link, it was very informative.

It could very well be there I think, since I didn't even know about the existance of that folder and you confirmed that on your test system, there's a shortcut for the program.

So i'll try to rename the exe that I modified and delete the shortcut in that folder, but what about the task? Like I said it was already disabled but I had the exe renamed already before I disabled the task, is that ok as well?

Regarding the cmd, yes it runs something but it's too fast for me to read and then it disappears, I had malwarebytes since ages when I brough my pc to some tech shop and it never revelead anything, apart from the crap like candy crush that windows stuff in the OS. In case the cmd doesn't disappear is there anything else I can try? There is other stuff in the appdata startup menu as well.

I would also like to thank you for all the help you are giving, I really appreciate.
 

If you renamed the program's executable to prevent it from loading at startup then yes, rename it back and remove the shortcut to it from the C:\ProgramData\Microsoft\Windows\Start Menu\Programs\StartUp\ folder. When you renamed it, you probably broke the shortcuts to it. Renaming it back should fix those shortcuts.

As for the task, I reinstalled it to get more info. The task is setup to be "Triggered" at startup, which means it runs each time Windows boots up. It runs the program just like the shortcut in the "Startup" start menu folder does. That's all it does. I guess they did this to make doubly sure that it's run on startup. I would leave the task disabled. You don't have to delete it, just disable it and leave it there in case you change your mind later on about having it run at startup.
https://i.postimg.cc/WzFVLTLT/image.jpg
https://i.postimg.cc/N0swG1qN/image.jpg

As for the command prompt, try using a phone to capture what it's doing. Record a video of the screen and go back and review it in slow motion. Anything that it says can be really helpful in determining how to fix it. Several attempts may be necessary. I've seen this problem before and sometimes it's malware, sometimes it's not. Determining what it is can be very difficult. I found this page a while back but to be honest I haven't fully read through it or tested the stuff listed within. It's from Microsoft and could be very useful for you. Some of it (like the Policy Editor) will be geared towards Windows 10 Pro. I assume you have Windows 10 Home so you can ignore the stuff about the Policy Editor.
https://blogs.msdn.microsoft.com/commandline/2017/07/28/how-to-determine-what-just-ran-on-windows-console/
 


Alright I almost completely did that but I didn't rename the files yet since there was another file that I think was modified; is there a file called simply "Launcher" in the main folder?
Also my gygabyte oc guru shortcut wasn't exactly in the startup folder but was in another subfolder called Gygabyte that also had a unistall shortcut inside it, not sure why it's different but I have yet to reboot the pc since I did that yesterday. If you can give me the exact names of launcher and the OC guru exe in there I would really appreciate, that way I can be sure if this worked or not. Thanks again for help.
 
you need to get autoruns, and uncheck the program from there. includes, anything and everything running at start-up including services, so be careful too many checks and you can nerf your install.

https://docs.microsoft.com/en-us/sysinternals/downloads/autoruns

it's like the start-up tab in task manager but includes EVERYTHING. no clue what you want to stop from starting, but if it is not listed here, then something is terribly wrong.

your welcome :)