Track Startup Programs with PowerShell "get-wmiobject" on Windows 10

Q

How to track and maintain startup programs with PowerShell on Windows 10? I know how to use PowerShell cmdlets.

✍: FYIcenter.com

A

If you want to get a list of all startup applications on your Windows 10 with PowerShell cmdlets, you can use the "Get-WmiObject" cmdlet as described in this tutorial:

1. Start a PowerShell window

2. Run the following command.

C:\fyicenter> powershell
Windows PowerShell
Copyright (C) 2012 Microsoft Corporation. All rights reserved.

PS C:\fyicenter> get-wmiobject Win32_StartupCommand
   | select-object -property name,command,location
   | format-list > startup-programs-2.txt

3. Open startup-programs-2.txt in Notepad. You see a list of startup programs recorded in the file, as shown in the example below:

name     : OpenOffice.org 3.2
command  : OpenOffice.org 3.2.lnk
location : Startup

name     : Google Update
command  : C:\Users\xxx\AppData\Local\Google\Update\1.3.33.7\GoogleUpdateCore.exe
location : HKU\S-1-5-21-867...\SOFTWARE\Microsoft\Windows\CurrentVersion\Run

name     : McAfee Security Scan Plus
command  : C:\PROGRA~1\MCAFEE~1\311~1.599\SSSCHE~1.EXE
location : Common Startup

name     : Microsoft Office
command  : C:\PROGRA~2\MICROS~1\Office10\OSA.EXE -b -l
location : Common Startup

name     : Apoint
command  : C:\Program Files\DellTPad\Apoint.exe
location : HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Run

name     : SysTrayApp
command  : C:\Program Files\IDT\WDM\sttray64.exe
location : HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Run

name     : QuickSet
command  : c:\Program Files\Dell\QuickSet\QuickSet.exe
location : HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Run

name     : IntelTBRunOnce
command  : wscript.exe //b //nologo "C:\Program
           Files\Intel\TurboBoost\RunTBGadgetOnce.vbs"
location : HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Run

name     : BTMTrayAgent
command  : rundll32.exe "C:\Program Files
           (x86)\Intel\Bluetooth\btmshell.dll",TrayApp
location : HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Run

name     : IgfxTray
command  : C:\Windows\system32\igfxtray.exe
location : HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Run

name     : HotKeysCmds
command  : C:\Windows\system32\hkcmd.exe
location : HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Run

name     : Persistence
command  : C:\Windows\system32\igfxpers.exe
location : HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Run

name     : OneDrive
command  : "C:\Users\TGRX301-1\AppData\Local\Microsoft\OneDrive\OneDrive.exe" /background
location : HKU\S-1-5-21...\SOFTWARE\Microsoft\Windows\CurrentVersion\Run

name     : 92456107C05D3327D2CF37750833593722823168._service_run
command  : "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=service /prefetch:8
location : HKU\S-1-5-21...\SOFTWARE\Microsoft\Windows\CurrentVersion\Run

name     : OpenVPN-GUI
command  : C:\Program Files\OpenVPN\bin\openvpn-gui.exe
location : HKU\S-1-5-21...\SOFTWARE\Microsoft\Windows\CurrentVersion\Run

name     : Docker Desktop
command  : C:\Program Files\Docker\Docker\Docker Desktop.exe
location : HKU\S-1-5-21...\SOFTWARE\Microsoft\Windows\CurrentVersion\Run

name     : SecurityHealth
command  : %windir%\system32\SecurityHealthSystray.exe
location : HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Run

name     : RtHDVCpl
command  : "C:\Program Files\Realtek\Audio\HDA\RtkNGUI64.exe" /s
location : HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Run

name     : RtHDVBg
command  : "C:\Program Files\Realtek\Audio\HDA\RAVBg64.exe" /MAXX4
location : HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Run

name     : AdobeGCInvoker-1.0
command  : "C:\Program Files (x86)\Common Files\Adobe\AdobeGCClient\AGCInvokerUtility.exe"
location : HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Run

name     : AdobeAAMUpdater-1.0
command  : "C:\Program Files (x86)\Common Files\Adobe\OOBE\PDApp\UWA\UpdaterStartupUtility.exe"
location : HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Run

Keep this file startup-programs.txt in a safe place, so that you can compare it at a later time to see if there are any new startup programs are added in your system.

 

Disable or Remove Startup Programs on Windows 10

Track Startup Programs with wmic.exe on Windows 10

View Startup Programs on Windows 10

⇑⇑ Windows 10 Startup Programs

2022-02-02, 2220🔥, 0💬