For This lab, I had to check all of the running processes using the task manager or taskmgr.exe in normal and safe mode to see which processes ran that were different. The processes that ran in normal mode that did not run in safe mode are two java processes, two s3 processes, search protocol, two open office processes, taskhost, and a wuaudt process. There was a process than ran in safe mode that did not run in normal mode which was ctfmon.exe a ctf loader.
14-2 The startup programs were able to start after asking permision.
14-3
for this lab we had to create 2 startup programs and see if they were able to open without errors. these are the steps I took:
Open task schedular
right click task schedular library
click on create task
on the general tab I entered a name for the task and description
on the triggers tab
click new
on the drop down menu I set it to "at log on"
settings=any user
ok
On the action tab
new
action dropdown "at startup"
browse-C:windows/system32/notepad
click ok twice
log off and logged back on
for the command prompt I placed it in a folder and then set it up to start at start up
both worked without errors.
14-5
This lab required me to copy part of the registry to the desktop and then useing the registry editor I had to change the name of the rycyling bin. I then refreshed the desktop and it changed. I had to copy the registry in case I messed it up I could restore it.
14-6
I created a MMC and apped two snap ins. I then had to create a shortcut on the desktop.