Skip main navigation

Startup folders

Article detailing the mechanisms of malware persistence by use of Startup folders.
© PA Knowledge Ltd | 7Safe Training

Startup folders

Every user account on a computer has Startup folders. The users account will start up any program or link to a program contained within those folders when that particular user logs in. An entry in the ‘All users’ account simply means that this then applies to all the user accounts on the computer.

The location of user Startup folders is:

C:\Users\User\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\

The location of the ‘All users’ Startup folders is:

C:\ProgramData\Microsoft\Windows\Start Menu\Programs\

The startup folders can contain executable files or shortcuts to those files, it can also contain sub folders as detailed below:

Example of contents contained within the 'All users' startup (Start Menu) folder

© PA Knowledge Ltd | 7Safe Training
This article is from the free online

Introduction to Digital Forensics: Malware Analysis and Investigations

Created by
FutureLearn - Learning For Life

Our purpose is to transform access to education.

We offer a diverse selection of courses from leading universities and cultural institutions from around the world. These are delivered one step at a time, and are accessible on mobile, tablet and desktop, so you can fit learning around your life.

We believe learning should be an enjoyable, social experience, so our courses offer the opportunity to discuss what you’re learning with others as you go, helping you make fresh discoveries and form new ideas.
You can unlock new opportunities with unlimited access to hundreds of online short courses for a year by subscribing to our Unlimited package. Build your knowledge with top universities and organisations.

Learn more about how FutureLearn is transforming access to education