Help - Search - Members - Calendar
Full Version: MS Sysinternals Autoruns
Malwarebytes Forum > Updates and Alerts > Security Software Updates
exile360
One of my absolute favorite techy tools biggrin.gif Version 9.37: http://technet.microsoft.com/en-us/sysinte...s/bb963902.aspx
exile360
Updated again, Version 9.38: https://technet.microsoft.com/en-us/sysinte...s/bb963902.aspx
exile360
Version 9.39 released: Autoruns for Windows
exile360
Version 9.40 released: Autoruns for Windows

edit:Ew, a BUG

edit edit:Eeewww, not a bug (according to them) but I don't like it.
Mad Dog Vee
In the last week or so I've only just downloaded my first copy of autoruns, but it doesn't sound like I will update it after reading that.
exile360
Yeah, it's kinda annoying. I like being able to verify code signatures and hide signed MS and Windows entries, very handy for disabling third party stuff and malware.
exile360
New version and my previously reported issue is now FIXED yay!

Version 9.41

Get it here.
Mad Dog Vee
It says it fixes a bug but I thought you said that Autoruns themselves said it wasn't a bug but a feature. Were they just playing company politics?
exile360
Hehe, politics I think, but from the forum members, not the actual developers (a senior member of the forum is the one who said "it's supposed to be like that").
Mad Dog Vee
I haven't actually used it yet but now it seems I'm 2 version behinds. Thanks for the updates.
YoKenny1
It does not have an About now that indicates its own version.

It shows how to check for Windows validity and shows the Windows version.
exile360
I'm not sure why it would phone home, perhaps to verify code signatures or to enable the right click search function built into it. Every time I download it I have to allow it through my firewall, it still functions if I don't, but I trust Mark and the others @Sysinternals so I let it through.
YoKenny1
It does phone home to update the application information on my system but it does not show an About that indicates its own version that it used to do that I use to use to see that I had the most recent release.
exile360
They rushed this version out because of the issue mentioned in this thread so it's likely they forgot to put the about info in before release, I'm sure it'll be back in the next release.
Inferi0r
The only option they have to add is a ini file in the map with your options. Now you have to check always manually the boxes of the hide microsoft entires and verify code signatures. Not likely on slowly computers.
I asked for the option on the forums, but the said that you have to do it with registry entries. So that will be this:
CODE
Windows Registry Editor Version 5.00

[HKEY_CURRENT_USER\Software\Sysinternals\AutoRuns]
"EulaAccepted"=dword:00000001
"shownomicrosoft"=dword:00000001
"verifysignatures"=dword:00000001


Nice thing of Autoruns is that Microsoft entries with failed verified signatures are displayed too.
Jacktivity
Version 9.5 released. According to the change log at File Hippo

This update to Autoruns, a powerful autostart manager, adds display of audio and video codecs, which are gaining popularity as an extension mechanism used by malware gains automatic execution.

As Exile360 predicted, the help about version display is back.

For some reason, I can't get the help chm file to run from within the program itself. I get an error message that says unable to open help file. If I try it again, I get another message that says "Unable to open help file. The specified procedure could not be found." Help will run separately, just fine. Happens whether I run Autoruns from a shortcut or from Windows Explorer. Not a biggie to me.
exile360
Confirmed, version 9.5

Get it here

And just for info, you can always check the Sysinternals Blog for changes as well as the forum smile.gif . Nothing against the Hippo, I just prefer to verify info by its source.
Jacktivity
Thanks Exile360. I agree with you wholeheartedly about checking the source. I just didn't see where to get the change log at the Sysinternals site. I couldn't find it in the forum and it never occurred to me check the blog. Shame on me. I also noticed after I had already posted, that I forgot to at least include the link to the Autoruns page on Sysinternals. Not sure if I should have made another reply to correct that or not. If it's possible to edit a post, I haven't figured it out yet.
exile360
No big deal smile.gif . You gain the ability to edit your posts once you've posted 50 times (just please don't start spam posting to get your numbers up tongue.gif as the mods and amins will delete them and not let your count climb wink.gif ). As far as the blog, yeah, I never even knew it showed the changes until I found a link to it on the forums a while back (when I was troubleshooting the issue introduced in 9.41 actually smile.gif ). As far as the 50 posts thing, they implemented it to prevent abuse by users, especially those posting logs in the HijackThis area because they would often alter their own logs to deceive the helpers.
exile360
Autoruns for Windows v9.51

QUOTE
This fixes a bug with the Run As Administrator functionality on 64-bit Windows 7, a copy-to-clipboard bug where part of a line’s content was truncated, and is updated to show Windows 7 Sidebar Gadget configuration.

Get it here
yardbird
Just saw that in an RSS feed, came in yesterday. Autoruns for Windows v9.51 thanks exile360
exile360
Autoruns for Windows v9.52

QUOTE
Autoruns v9.52 fixes some minor bugs including one where Ctrl+C didn’t copy the entire entry to the clipboard.

Get it here
exile360
Autoruns for Windows v9.53
QUOTE
This update fixes a bug that could cause the file open and save dialogs to not work on 64-bit Windows.


Get it here
exile360
Autoruns for Windows v9.54
QUOTE
This update includes several bug fixes, the introduction of additional 32-bit autostart locations for 64-bit Windows, some user interface improvements, and brings back compatibility with .ARN files created by older versions.


Get it here
yardbird
QUOTE (exile360 @ Sep 18 2009, 03:32 AM) *
Autoruns for Windows v9.53


Get it here


Just went to v9.54
exile360
Heh, yeah, forgot to change the version number as I copy/pasted it. I got the changelog right though smile.gif . Thanks bird.

Now corrected.
yardbird
QUOTE (exile360 @ Sep 22 2009, 06:13 AM) *
Heh, yeah, forgot to change the version number as I copy/pasted it. I got the changelog right though smile.gif . Thanks bird.

Now corrected.


your welcome, anytime....
B-boy/StyLe/
Autoruns 9.55

Download Autoruns and Autorunsc (576 KB)
AdvancedSetup
Autoruns v9.55: A bug that prevented some 64-bit entries from being disabled is addressed in this update.
yardbird
But whats the Autorunsc for?
AdvancedSetup
Autorunsc is the command-line version of Autoruns.

Sysinternals Autoruns v9.55 - Autostart program viewer
Copyright © 2002-2009 Mark Russinovich and Bryce Cogswell
Sysinternals - www.sysinternals.com

Autorunsc shows programs configured to autostart during boot.

Usage: autorunsc [-x] [[-a] | [-b] [-c] [-d] [-e] [-g] [-h] [-i] [-k] [-l] [-m] [-o] [-p] [-r] [-s] [-v] [-w] [user]]
-a Show all entries.
-b Boot execute.
-c Print output as CSV.
-d Appinit DLLs.
-e Explorer addons.
-g Sidebar gadgets (Vista and higher)
-h Image hijacks.
-i Internet Explorer addons.
-k Known DLLs.
-l Logon startups (this is the default).
-m Hide signed Microsoft entries.
-n Winsock protocol and network providers.
-o Codecs.
-p Printer monitor DLLs.
-r LSA security providers.
-s Autostart services and non-disabled drivers.
-t Scheduled tasks.
-v Verify digital signatures.
-w Winlogon entries.
-x Print output as XML.
user Specifies the name of the user account for which
autorun items will be shown.

yardbird
Got it! thx. for the reply!
swagger
As far as I see, it's only a bug fix for the 64-bit O/S's... Anyone else been able to find a change long?
swagger
I guess that's it...

QUOTE (from FileHippo)
A bug that prevented some 64-bit entries from being disabled is addressed in this update.


exile360
Changelogs for the various Sysinternals releases can always be found on their blog located here. Additionally, there's no reason to browse Softpedia for MS downloads, Autoruns can always be found here.
swagger
@exile,

Thanks so much for the link to their blog smile.gif I will definitely bookmark it. Also, I don't download from softpedia, I download from FileHippo but I understand what you are saying cool.gif
exile360
Yeah, my bad, misread it blush.gif . To me most of those sites are the same, besides MajorGeeks. But even then, I still recommend grabbing files from the source when possible wink.gif .
swagger
Understood, just makes life so much easier to download multiple programs from the same source. Maybe I'll just view the site to keep updated and navigate to the program's company website to download. Have you heard any negative stories about Filehippo? I haven't to this point.
exile360
Here's the reason I don't trust too many download sites aside from the actual vendors, at least the primary reasons, there are a few others, such as their motivations (ie advertising money wink.gif ). I understand if it's the only source available, but if it isn't, then I'm wary, especially when someone links to it over and over as it borders on spam in my opinion, just sending more clicks their way to push up their visitors count.

I trust MajorGeeks more than the others, but I still link to the direct source when possible as it also offers more info about the vendor and about the software being downloaded.
swagger
Point taken, thanks for the link. I think I'll definitely stick to the vendor's website for my downloading needs. I have used MajorGeeks in the past, I just don't like the design of their website to be honest.
B-boy/StyLe/
Autoruns 9.56

QUOTE
This update enables Autoruns to view registry entries that have permissions only allowing the System account access and fixes a bug that caused some rundll32-hosted entries to not display correctly.


Download Autoruns and Autorunsc (576 KB)
AdvancedSetup
This little tool just keeps getting better.
This is a "lo-fi" version of our main content. To view the full version with more information, formatting and images, please click here.
Invision Power Board © 2001-2009 Invision Power Services, Inc.