BleepingComputer.com > Downloaded Autoruns By Sysinternals

Full Version: Downloaded Autoruns By Sysinternals

BleepingComputer.com > Bleeping Computer Applications and Guides > Windows Startup Programs Database

jiminwatford

Apr 22 2008, 07:29 AM

hi, i followed the link from the Startup List page to 'Autoruns' and downloaded the program.

on the the Startup List page it says this program will have the following status:-

Y - This status flag means that this entry should be left alone and be allowed to run as if it is unchecked it may break the functionality or use of a particular program.
N - This status flag means it is unnecessary to run this program automatically when Windows starts as you can run it manually when necessary.
U - This status flag means it is up to you whether or not you feel this program needs to run automatically.
X - This status flags means the item should definitely not start up automatically. Items that have this flag are generally malware such as viruses, trojans, hijackers, spyware, etc.
? - This status flag means the status of this entry is unknown at this time and more research is necessary.

this is a screen shot of the downloaded program. i can't see where the status is.

sorry if i'm being slow

Juha

Apr 22 2008, 07:53 AM

Hi JiminWatford,

Welcome to Bleeping Computer.

It looks like you've misunderstood the words on the page.

Are you referring to this:

QUOTE

To examine your computer for programs that are automatically started by Windows, you can download and install Autoruns by Sysinternals. You can then search for entries found in the programs output using this database to determine if the program should be running. If from the information you decide they are not necessary to run, you can uncheck that entry in the Autoruns program and it will no longer start.

Each entry in the database will have a Status assigned to it. The key to this status is the following:
Y - This status flag means that this entry should be left alone and be allowed to run as if it is unchecked it may break the functionality or use of a particular program.
N - This status flag means it is unnecessary to run this program automatically when Windows starts as you can run it manually when necessary.
U - This status flag means it is up to you whether or not you feel this program needs to run automatically.
X - This status flags means the item should definitely not start up automatically. Items that have this flag are generally malware such as viruses, trojans, hijackers, spyware, etc.
? - This status flag means the status of this entry is unknown at this time and more research is necessary.

http://www.bleepingcomputer.com/startups/

What this means is that you use the database (Startup List) to check the 'status' of the file name, i.e. whether it is a legitimate file or not. And where do you get the file name from? From Autoruns... In the 'Image Path' section... the name of the file is at the end... usually 'something.exe'. You copy this (exactly) into the Startup List search box. Then the database will inform you of the file's status (if known and present). With this information you can prevent the file from automatically starting when you 'start' your computer. Just uncheck the tick in the box to the left corresponding to the file name.

Hope this helps.

Regards,
Juha

Animal

Apr 22 2008, 01:50 PM

If you click one of the letters to get an alphabetical listing, for example the letter A. Such as the image below. The third column over from the left, is where that legend refers to. Not in the Autoruns application. Hope this helps.

This is a "lo-fi" version of our main content. To view the full version with more information, formatting and images, please click here.