Greg's Cool [Insert Clever Name] of the Day: sysinternals

Monday, February 02, 2015

Run, don't walk, to get the new Autoruns v13.0

Sysinternals Site Discussion - Update: Autoruns v13.0

"This major update to Autoruns, an autostart execution point (ASEP) manager, now has integration with Virustotal.com to show the status of entries with respect to scans by over four dozen antimalware engines. It also includes a revamped scanning architecture that supports dynamic filters, including a free-form text filter, a greatly improved compare feature that highlights not just new items but deleted ones as well, and file saving and loading that preserves all the information of a scan" [GD: Post Leached in Full]

Autoruns for Windows v13.0

"Introduction

This utility, which has the most comprehensive knowledge of auto-starting locations of any startup monitor, shows you what programs are configured to run during system bootup or login, and when you start various built-in Windows applications like Internet Explorer, Explorer and media players. These programs and drivers include ones in your startup folder, Run, RunOnce, and other Registry keys. Autoruns reports Explorer shell extensions, toolbars, browser helper objects, Winlogon notifications, auto-start services, and much more. Autoruns goes way beyond other autostart utilities.

Autoruns' Hide Signed Microsoft Entries option helps you to zoom in on third-party auto-starting images that have been added to your system and it has support for looking at the auto-starting images configured for other accounts configured on a system. Also included in the download package is a command-line equivalent that can output in CSV format, Autorunsc.

You'll probably be surprised at how many executables are launched automatically!

Screenshot

..."

One of those must, must, must have utilities.

One thing to note: The new toolbar might look a little funky on high DPI screens (like mine, a "3K" Display @ 200% DPI).

Sysinternals’ Eulagoogoolizer

Sysinternals tools are great, but since Microsoft took over most of these software gems have been Eulaized – a pretty annoying thing, especially if you want to run them on a remote system. While some of the tools now accept the accepteula command line argument, sometimes it’s just handy to accept it all in one go.

The below reg file does exactly this; you can also edit it and cherry-pick those apps you need.

Note: It will only work if you save it as SysinternalsEulagoogoolizer.reg

While the trick to REG ADD for the EulaAccepted for Sysinternals has been around for a while, Use the Sysinternals Utilities? The EULA bug dialog you? Then try this…, this post puts them all in one nice place, all ready to be reg filed.