Hackers can gain access to Windows Registry and manipulate user passwords, DNS settings, access rights or others features that they may need in order to accomplish their objectives. One simple method for loading an application at startup is to add an entry (Key) to the following Registry Hive:
A common method for ensuring that an application runs at startup is to add an entry to the HKEY_LOCAL_MACHINE\Software\Microsoft\CurrentVersion\Run registry key. This key allows applications to be executed automatically when the system starts. Hence, adding an entry to this key accomplishes the objective of loading an application at startup.
Use Run or RunOnce registry keys to make a program run when a user logs on. The Windows registry includes the following four Run and RunOnce keys: HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Run HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Run HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\RunOnce HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\RunOnce