Autoruns Overview скачать в хорошем качестве

Autoruns Overview

What Autoruns does is find apps and processes that run on startup which can be called "Autostart extensibility points (ASEPs)". Looking at the interface you see multiple tabs each pertaining to a service or app that may be running upon the startup of the system. -You can right-click on any application shown and have the following options: Delete, Copy, Jump to Entry, Search online, Find and Properties. There is an option to Check VirusTotal if you are suspicious of it. Another option on that list is to examine the suspicious application with another SysInternals app called Process Explorer. You can disable any of the listed apps by deselecting the check box to the left of the Application name. Autoruns does have a command line capability. By typing "autoruns" you can start the program GUI. By typing "autorunsc -nobanner", on the command prompt you will see the same things that show in the Everything tab in Autoruns. Using "autorunsc -nobanner -a * -ct -s -h | clip" in CMD, you can output to the clipboard and paste it into Excel. Right-clicking on any item and selecting Jump to Entry will open the registry editor for that specific item. Another thing you can do by right-clicking on an item is to select Check VirusTotal. This will submit the hash of the suspicious item to VirusTotal to compare with their malware database. In CMD type "autorunsc /?" to get the list of commands such as: "-c" to print output as csv "-ct" to print output as tab delimited values. "-o" to write output to a specified file. "-x" to print output as an XML.