{"id":2361,"date":"2014-05-21T18:40:11","date_gmt":"2014-05-21T18:40:11","guid":{"rendered":"http:\/\/www.hexacorn.com\/blog\/?p=2361"},"modified":"2014-09-20T22:22:52","modified_gmt":"2014-09-20T22:22:52","slug":"beyond-good-ol-run-key-part-12","status":"publish","type":"post","link":"https:\/\/www.hexacorn.com\/blog\/2014\/05\/21\/beyond-good-ol-run-key-part-12\/","title":{"rendered":"Beyond good ol\u2019 Run key, Part 12"},"content":{"rendered":"<p>After googling around I couldn&#8217;t find any reference to Rover autostart mechanism, so here is a quick introduction for you:<\/p>\n<p>Adding this key [key only is enough]:<\/p>\n<ul>\n<li>\n<pre>HKEY_CLASSES_ROOT\\CLSID\\{16d12736-7a9e-4765-bec6-f301d679caaa}<\/pre>\n<\/li>\n<\/ul>\n<p>and dropping the following file:<\/p>\n<ul>\n<li>\n<pre>c:\\windows\\system32\\rover.dll<\/pre>\n<\/li>\n<\/ul>\n<p>with an exported function called <strong>RunMonitor<\/strong> will cause <strong>rover.dll<\/strong> to be loaded.anytime user logs in [it&#8217;s loaded by userinit.exe].<\/p>\n<p>Tested on Windows 7 and Windows 8.1.<\/p>\n<p><a href=\"https:\/\/www.hexacorn.com\/blog\/wp-content\/uploads\/2014\/05\/rover1.png\"><img decoding=\"async\" loading=\"lazy\" class=\"aligncenter size-full wp-image-2365\" src=\"https:\/\/www.hexacorn.com\/blog\/wp-content\/uploads\/2014\/05\/rover1.png\" alt=\"rover\" width=\"275\" height=\"155\" \/><\/a><\/p>\n<p>I have received a few questions with regards to this post, so here are some notes that I hope will be helpful:<\/p>\n<ul>\n<li>Despite being placed under HKCR, it&#8217;s not a regular COM entry<\/li>\n<li>It&#8217;s an equivalent of a Boolean flag stored in Registry; same as a presence of a file on a disk\n<ul>\n<li>If key exists<br \/>\n{ do something }<\/li>\n<\/ul>\n<\/li>\n<li>I believe it&#8217;s a part of some testing\/QA platform; maybe some exotic extension used only in special builds [Windows is actually full of these conditionally loaded DLLs]<\/li>\n<\/ul>\n<p>Note: For unknown reason this post disappeared. Re-adding it. (suspecting wordpress hiccup; update: after checking logs it looks more like a DB problem and it was restored by the provider from a backup \/removing the post on the way\/)<\/p>\n","protected":false},"excerpt":{"rendered":"<p>After googling around I couldn&#8217;t find any reference to Rover autostart mechanism, so here is a quick introduction for you: Adding this key [key only is enough]: HKEY_CLASSES_ROOT\\CLSID\\{16d12736-7a9e-4765-bec6-f301d679caaa} and dropping the following file: c:\\windows\\system32\\rover.dll with an exported function called RunMonitor &hellip; <a href=\"https:\/\/www.hexacorn.com\/blog\/2014\/05\/21\/beyond-good-ol-run-key-part-12\/\">Continue reading <span class=\"meta-nav\">&rarr;<\/span><\/a><\/p>\n","protected":false},"author":1,"featured_media":0,"comment_status":"closed","ping_status":"closed","sticky":false,"template":"","format":"standard","meta":[],"categories":[13,35,15,19,9],"tags":[],"_links":{"self":[{"href":"https:\/\/www.hexacorn.com\/blog\/wp-json\/wp\/v2\/posts\/2361"}],"collection":[{"href":"https:\/\/www.hexacorn.com\/blog\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/www.hexacorn.com\/blog\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/www.hexacorn.com\/blog\/wp-json\/wp\/v2\/users\/1"}],"replies":[{"embeddable":true,"href":"https:\/\/www.hexacorn.com\/blog\/wp-json\/wp\/v2\/comments?post=2361"}],"version-history":[{"count":11,"href":"https:\/\/www.hexacorn.com\/blog\/wp-json\/wp\/v2\/posts\/2361\/revisions"}],"predecessor-version":[{"id":2374,"href":"https:\/\/www.hexacorn.com\/blog\/wp-json\/wp\/v2\/posts\/2361\/revisions\/2374"}],"wp:attachment":[{"href":"https:\/\/www.hexacorn.com\/blog\/wp-json\/wp\/v2\/media?parent=2361"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/www.hexacorn.com\/blog\/wp-json\/wp\/v2\/categories?post=2361"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/www.hexacorn.com\/blog\/wp-json\/wp\/v2\/tags?post=2361"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}