Powershell – There’s nothing PowerShell can’t do! Autostart services and non-disabled drivers.Winsock protocol and network providers.Scan my entire system auto-runs against Virus Total, i.e. Check the image against Virus Total, a free online virus, malware and URL Scanner.
Check if the image of the executable is signed or not. List all drivers, processes, scheduled tasks, boot drivers, logon startups and auto-runs. I think autorunsc.exe can do a fantastic job here with all its features, especially with some of the new features and the combination with another awesome tool, also from Sysinternals, Sigcheck. I’m thinking of malware and vicious code. Besides catching all additions to the auto-runs in my Windows installation I also would like to know what executables are signed or not and if these could be a threat to me. Now, I have a slightly different approach. Then I could simple remove these binaries or uninstall the guilty application. With this information I would be able to determine when I had additions I didn’t approved nor expected. Any additions to it that had any effect on my boot process or that started any processes at startup. It was when I found out about autorunsc.exe, one of the many awesome tools from the Sysinternals suite and the creator Mark Russinovich, when I thought of an idea to keep track of all additions to my Windows installation. 
A month ago I reinstalled one of my PC’s and thought of a project I started but never finished many years ago.
0 kommentar(er)
