» Sysinternals (Microsoft) Autoruns

Changes:
- This Autorun update supports arbitrary length Registry and file system paths, adds a find capability to search through configured items, introduces a comparison feature to compare current autostarts with a previously saved version so that you can easily identify new additions, and knows about yet more autostart locations including the Winlogon boot verification Registry value and Shell open hijacks.

Changes:
- Another Autoruns update adds print monitor DLLs and Explorer column handlers - both of which have been used by real malware - and dramatically improves scan times when image verification is selected.

Changes:
- This version of Autoruns adds enumeration of kernel-mode drivers, yet another attack vector being used by malware.

Changes:
- fixed several bugs
- added on-demand signature verification for individual items.

Changes:
- This new Autoruns release adds scanning of LSA security, notification, and authentication providers as well as Explorer protocol handlers and extensions.

Autoruns now includes an autostart location that's used by malware to hijack the desktop background.

Напомним, что он прославился на весь мир тем, что обнаружил руткит в программе, которая шла на аудио дисках SonyBMG. Позже компанию Марка Winternals Software и его сайт Sysinternals приобрела корпорация Microsoft, и Sysinternals является частью портала Microsoft TechNet.

Сделал на днях русификатор для Autoruns 8.73, пользуйтесь на здоровье!