The problem is that this feature, widely critizised by the security community, is used by malware in order to spread by infecting as soon as a new drive is inserted in a computer. The AUTORUN.INF file is a configuration file that is normally located in the root directory of removable media and contains, among other things, a reference to the icon that will be shown associated to the removable drive or volume, a description of its content and also the possibility to define a program which should be executed automatically when the unit is mounted. The Microsoft Windows Operating Systems use the AUTORUN.INF file from removable drives in order to know which actions to perform when a new external storage device, such as a USB drive or CD/DVD, is inserted into the PC. Also included in the download package is a command-line equivalent that can output in CSV format, Autorunsc.UPDATE October 8, 2009: New version 1.0.1.4 released. Autoruns goes way beyond the MSConfig utility bundled with Windows Me and XP.Īutoruns' Hide Signed Microsoft Entries option helps you to zoom in on third-party auto-starting images that have been added to your system and it has support for looking at the auto-starting images configured for other accounts configured on a system. You can configure Autoruns to show other locations, including Explorer shell extensions, toolbars, browser helper objects, Winlogon notifications, auto-start services, and much more. These programs include ones in your startup folder, Run, RunOnce, and other Registry keys. This utility, which has the most comprehensive knowledge of auto-starting locations of any startup monitor, shows you what programs are configured to run during system bootup or login, and shows you the entries in the order Windows processes them. Using this information you can then determine if the autostart should be disabled. When you research startup entries, BleepingComputer recommends that you first search within our Startup Database to see if they are known malware or programs that are not required to automatically start. This includes Windows services, Run entries, and many other less commonly known auto-start methods. When using Autoruns you will be presented with a list of all the executables on your computer that are starting automatically. Disabling unnecessary startups allows your computer to run more efficiently by reducing CPU usage and memory consumption. You can then examine this list of programs to see if they should be running or should be disabled. Autoruns is a free Sysinternals tool from Microsoft that enumerates all the programs that automatically start on a Windows machine.
0 kommentar(er)
