http://delphi.ktop.com.tw/topic.asp?TOPIC_ID=26139
以下這幾個機碼下的值,為每次開機時都會執行的檔案(也是病毒常用的進入點)
HKEY_LOCAL_MACHINESoftwareMicrosoftWindowsCurrentVersionRun
HKEY_LOCAL_MACHINESoftwareMicrosoftWindowsCurrentVersionRunOnce
HKEY_LOCAL_MACHINESoftwareMicrosoftWindowsCurrentVersionRunOnceEx
HKEY_LOCAL_MACHINESoftwareMicrosoftWindowsCurrentVersionRunServices
HKEY_USERS.DEFAULTSoftwareMicrosoftWindowsCurrentVersionRunonce
代碼: 選擇全部
procedure Tform1.Button1Click(Sender: TObject);
begin
SetRegistryData(HKEY_LOCAL_MACHINE,
'SoftwareMicrosoftWindowsCurrentVersionRun',
Application.Title, rdString, Application.ExeName);
end;