The reason is simple, many developers configure their programs to run automatically with the start of Windows 10 and at other times we are the ones who activate this option. The start of two services and processes is something normal and essential for everything to work as expected but we must stop at the aspect of programs and applications that do not urge us to be from the start. Manual methods may also be employed to remove the malware and its traces from the system this includes deleting malicious files and registry entries, restoring from a backup, or reinstalling the operating system.At the moment we turn on our computer with Windows 10, a series of services, processes and applications are automatically loaded with the system startup. System analysis tools such as Process Explorer, Process Hacker, or Task Manager can be used to identify and terminate processes related to the malware or removable devices. Network analysis tools like Wireshark, TCPView, or Netstat can capture and analyze network traffic generated by the malware or removable devices. File analysis tools like FileAlyzer, PEiD, or VirusTotal can be used to examine and identify files associated with the autorun and run registry entries or autorun.inf files on removable devices. Registry analysis tools, like Regshot, RegScanner, or Process Monitor, can monitor and compare changes in the registry before and after inserting a removable device or logging onto the system. Autorun analysis tools, such as Autoruns, AutoRunsC, or USBDeview, can inspect and disable the autorun and run registry entries and autorun.inf files on the removable devices. This includes antivirus or anti-malware software to scan the system and removable devices for known malware signatures or anomalies.

To detect and remove malware that abuses autorun and run keys, a combination of tools and techniques must be used.

Windows 10 autostart program