Software Santa

FREE and/or Open Source Desktop Software! => System Repair and Other Utilities => Windows Repair and Systems Utilities => Topic started by: Software Santa on April 01, 2009, 08:37:48 PM

Title: Autoruns shows you what programs are configured to run during system bootup
Post by: Software Santa on April 01, 2009, 08:37:48 PM
Autoruns shows you what programs are configured to run during system bootup or login.

(http://i.technet.microsoft.com/bb963902.Autoruns(en-us,MSDN.10).jpg)Santa's Note: best bet for removing Ransomware according to this Article:

Quote
IntroductionThis utility, which has the most comprehensive knowledge of auto-starting locations of any startup monitor, shows you what programs are configured to run during system bootup or login, and shows you the entries in the order Windows processes them. These programs include ones in your startup folder, Run, RunOnce, and other Registry keys. You can configure Autoruns to show other locations, including Explorer shell extensions, toolbars, browser helper objects, Winlogon notifications, auto-start services, and much more. Autoruns goes way beyond the MSConfig utility bundled with Windows Me and XP.
Autoruns' Hide Signed Microsoft Entries option helps you to zoom in on third-party auto-starting images that have been added to your system and it has support for looking at the auto-starting images configured for other accounts configured on a system. Also included in the download package is a command-line equivalent that can output in CSV format, Autorunsc.
You'll probably be surprised at how many executables are launched automatically!
Screenshot(http://i.technet.microsoft.com/bb963902.20130531_Autoruns_v11.6%28en-us,MSDN.10%29.jpg)UsageSee the November 2004 issue of Windows IT Pro Magazine for Mark's  article (http://www.windowsitpro.com/article/registry2/autoruns) that covers advanced usage of Autoruns. If you have questions or problems, visit the  Sysinternals Autoruns Forum (http://forum.sysinternals.com/forum_topics.asp?FID=16).
Simply run Autoruns and it shows you the currently configured auto-start applications as well as the full list of Registry and file system locations available for auto-start configuration. Autostart locations displayed by Autoruns include logon entries, Explorer add-ons, Internet Explorer add-ons including Browser Helper Objects (BHOs), Appinit DLLs, image hijacks, boot execute images, Winlogon notification DLLs, Windows Services and Winsock Layered Service Providers. Switch tabs to view autostarts from different categories.
To view the properties of an executable configured to run automatically, select it and use the Properties menu item or toolbar button. If  Process Explorer (http://technet.microsoft.com/en-us/sysinternals/bb896653) is running and there is an active process executing the selected executable then the Process Explorer menu item in the Entry menu will open the process properties dialog box for the process executing the selected image.
Navigate to the Registry or file system location displayed or the configuration of an auto-start item by selecting the item and using the Jump menu item or toolbar button.
To disable an auto-start entry uncheck its check box. To delete an auto-start configuration entry use the Delete menu item or toolbar button.
Select entries in the User menu to view auto-starting images for different user accounts.
More information on display options and additional information is available in the on-line help.

Autorunsc UsageAutorunsc is the command-line version of Autoruns. Its usage syntax is:
Usage: autorunsc [-x] [[-a] | [-b] [-c] [-d] [-e] [-g] [-h] [-i] [-k] [-l] [-m] [-o] [-p] [-r] [-s] [-v] [-w] [[-z <systemroot> <userprofile>] | [user]]]
-aShow all entries.
-bBoot execute.
-cPrint output as CSV.
-dAppinit DLLs.
-eExplorer addons.
-gSidebar gadgets (Vista and higher).
-hImage hijacks.
-iInternet Explorer addons.
-lLogon startups (this is the default).
-mHide signed Microsoft entries.
-nWinsock protocol and network providers.
-pPrinter monitor drivers.
-rLSA providers.
-sAutostart services and non-disabled drivers.
-tScheduled tasks.
-vVerify digital signatures.
-wWinlogon entries.
-x  Print output as XML.
-zSpecifies the offline Windows system to scan.
userSpecifies the name of the user account for which autorun items will be shown.
Related Links
  •  Windows Internals Book (http://technet.microsoft.com/en-us/sysinternals/bb963901)
    The official updates and errata page for the definitive book on Windows internals, by Mark Russinovich and David Solomon.
  •  Windows Sysinternals Administrator's Reference
     (http://technet.microsoft.com/en-us/sysinternals/hh290819)The official guide to the Sysinternals utilities by Mark Russinovich and Aaron Margosis, including descriptions of all the tools, their features, how to use them for troubleshooting, and example real-world cases of their use.
Download
  Download Autoruns and Autorunsc
 (http://download.sysinternals.com/files/Autoruns.zip)(551 KB)
 
  Run Autoruns (http://live.sysinternals.com/autoruns.exe) now from Live.Sysinternals.com

http://technet.microsoft.com/en-us/sysinternals/bb963902.aspx (http://technet.microsoft.com/en-us/sysinternals/bb963902.aspx)