No announcement yet.

Run, Runonce Subkeys from Registry

  • Filter
  • Time
  • Show
Clear All
new posts

  • Run, Runonce Subkeys from Registry

    I am new to Hyena and have just discovered the Exporter Tool.

    I am looking to extract a list of programs that execute when the PC Starts by getting information from the following keys:

    HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\Curr entVersion\Run
    HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\Curr entVersion\RunOnce
    HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\Curr entVersion\RunServices
    HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\Curr entVersion\RunServicesOnce

    I have added these into a new registry export template. But what registry value names do i use to extract the list of value names?

    I dont seem to be extracting anything of use.

    Any help appreciated.

  • #2
    Re: Run, Runonce Subkeys from Registry

    I seem to have rectified it now.
    I had checked "Get all subkeys under key path" in error. By unchecking it i can now see all the info.

    DOH !