Application trying to open each time administrator logs in

I have a new client that is running a 2008 R2 server.  Everytime the administrator account logs in, the profile wants to open some form of an application or file.
I have checked the startup folder-nothing there.  I have checked these areas in the registry and that are no unknown applications set to run.

HKCU\Software\Microsoft\Windows\CurrentVersion\Run
HKCU\Software\Microsoft\Windows\CurrentVersion\RunOnce
HKLM\Software\Microsoft\Windows\CurrentVersion\Run
HKLM\Software\Microsoft\Windows\CurrentVersion\RunOnce

Where am I missing?
rbarwigAsked:
Who is Participating?
 
JohnBusiness Consultant (Owner)Commented:
Get Autoruns (Microsoft Sys Internals), run it, look for the start up causing the issue and uncheck (disable) the entry or delete it.
1
 
Sam Simon NasserIT Support ProfessionalCommented:
did you checked MSCONFIG?
also, open the application (that starts with admin account), and in its options, check where it mentioned open at startup or something like this, and disable it / remove the tick.
0
 
HackooCommented:
You have to check those keys :
"HKCU\SOFTWARE\Microsoft\Windows\CurrentVersion\Run"
"HKLM\Software\Microsoft\Windows\CurrentVersion\Run"
"HKCU\Software\Microsoft\Windows\CurrentVersion\Policies\Explorer\Run"
"HKLM\Software\Microsoft\Windows\CurrentVersion\Policies\Explorer\Run"
"HKCU\SOFTWARE\Microsoft\Windows NT\CurrentVersion\WinLogon"
"HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\WinLogon"
"HKCU\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Windows"
"HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Windows"
"HKCU\Software\Microsoft\Internet Explorer\Main"
"HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Image File Execution Options"

Open in new window

And also your Startup Folders :
"%ProgramData%\Microsoft\Windows\Start Menu\Programs\Startup"
"%UserProfile%\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup"

Open in new window

You can scan your startup items with this batch file : Scan_Registry_Run_Keys.bat
0
 
JohnBusiness Consultant (Owner)Commented:
Thank you and I hope all is well now.
0
Question has a verified solution.

Are you are experiencing a similar issue? Get a personalized answer when you ask a related question.

Have a better answer? Share it in a comment.

All Courses

From novice to tech pro — start learning today.