Using the Startup Edittor

Displayed on the left is a panel with all the possible startup methods available. By selecting one of them, the user can see what it being started, delete the method and/or delete the file.

Once a startup method has been selected, ProPort will then display the method name (this could be the keyname within the registry, or the item name within an .ini file), and the file being called by it. To delete it, simply select the method + file and click "Delete".

Shell Spawning Method:

This is a relatively unknown startup method. When the user clicks on it, the method column will display three items (EXE COM and BAT files). When these settings are normal, they should each display something like: "%1" %*. Don't get confused, that's normal. If they display something else, like "c:\server.exe %1", you have a problem. Let's say that the file "server.exe" is listed next to the method name EXE File. This means that whenever an .EXE file is executed on the computer, that server.exe file will be executed as well. This not only causes a vulnerability for Trojans, but will slow your computer considerably.