Tech Problem Aggregator

Downloaded Autoruns,help?

Q: Downloaded Autoruns,help?

I downloaded autoruns and now I don't know what to do with it. Can someone tell me how to know what to uncheck in the boxes it shows for what is in the start up?
Sorry for being so dense......

A: Downloaded Autoruns,help?

Can you right click on an item and search the internet?
I use CodeStuff Starter and can Right click on an entry > Search Internet > search engines & some sites below.

Identify and disable start-up programs from running.
Task List Programs - AnswersThatWork's

Sysinfo Startup Applications List

Windows processes - File Inspect Library

Bleeping Computer Startup Programs Database

Application Database - Greatis Software

3 more replies
Answer Match 57.12%

Not sure that the attached entry in the jpg file is for....don't think I have seen this on any machines here at home ?

Should I uncheck it and/or remove it from autoruns.arn file ?


A:need autoruns guru advice on this startup entry in Autoruns.arn

I don't have that one on any of my PCs--it's probably safe to just delete it since it appears broken anyway.

Can I just say, in the nicest way I can think to do it, that maybe that item is the least of your worries? You do have an awful lot of junk, er, I mean, stuff on your PC that you've turned-off in Autoruns. I would want to Un-install any of those you don't use or need e.g., roxio, spigot, whatever.

If there is program residue here, then it likely is elsewhere on your hdd as well.

3 more replies
Answer Match 40.32%

Dear Sirs, Madams,

I downloaded and started Autoruns, as suggested. I did switched off some items that I felt were not necessary. Now I cannot log on my computer. It would log on but immediately log out. I have tried starting in Safe Mode with no luck. Are there any solutions or suggestions? Thank you for any advice.


More replies
Answer Match 40.32%

I have had auto runs for some time now but only used it for a diagnosis;ON/OFF then ON again.
My problem is apparently I am using to much RAM to run the programs I need with out stalling or freezing. So I thought I could free alot of RAM with AUTORUNS?????????? Is this true? And when I stop a service in AUTORUNS,if I need it later how do I get it going again?Do i just uncheck a box and thats it? Or should I be stopping these services another way? I am just trying to free up memory so I can use what I use which is not really that much but I am having a problem & I am pretty sure I have way to much stuff running in the background/@ startup. I tried to search for some specific info but came up short, usualy I find it right away here.

A:Using autoruns?

You can do whatever you like...with any tool...but that does not mean that tool was created for any purpose outside those clearly expressed, described, and recommended.

If you need more RAM, you should add more RAM...not try to force a given tool to do things it was never designed for. Just my opinion.


4 more replies
Answer Match 40.32%

can someone tell me which of these are safe to stop, because my computer is becoming really slow.
Thank you!

A:autoruns log

Uninstall BearShare in add/remove programs

Download AdAware SE Personal:

Install the program and launch it.

First, in the bottom right-hand corner of the main window click on Check for updates now then click Connect and download the latest reference files.

Then, in the main window: Click Start and under Select a scan Mode tick Perform full system scan.

Then, deselect Search for negligible risk entries.

To start the scan, click the Next button.

When the scan is finished mark everything for removal and get rid of it. (Right-click the window and choose select all from the drop down menu and then click Next)

Restart your computer.

Download the new version of Hijackthis and post a log.

1 more replies
Answer Match 40.32%

Hi there hope someone can tell me..I joined Bleeping computers yesterday and today I downloaded 'Autoruns' after reading some posts on the forums,and now I find (ho-hum) I dont know how to run the program,ive unzipped it and its 'ready' but I just cant see the run/start button?can someone point me in the right direction please..many thanks..complete noob

A:autoruns-how to run?

Are you referring to this program: Autoruns for Windows ? If so, then there's nothing to be installed, hence no entry in start menu.In order to run this program you should first unpack to some folder and then execute the autoruns.exe file.Remember that you can mess up the way how your computer works with clueless checking/unchecking/deleting so put extra effort in working with this application HTH

14 more replies
Answer Match 40.32%

I wish to try out the microsoft sysinternals program called Autoruns.

This will give a list of programs running at startup.

I am told that I can remove the programs I do not want running at startup .

How do I know what not to remove and not what to remove ?

Can anyone offer any guidance on this matter ?



6 more replies
Answer Match 40.32%

I was told that running Autoruns would be much better than the basic msconfig and being I have little experience I thought I would ask anyone who knows or may already be running Autoruns. my system is:
Gateway NV54/ dual core/250 GB HDD
os/windows 7 upgraded from vista


Auto runs is used by many members, at this forum and another that I frequent. I have heard many good things about Auto Runs and nothing derogatory. I suggest that you give it a try. I think that you will like it.

As a futher suggestion, before you download, make a system restore point. If it is not to your liking you can always, go back with system restore and everything will be gone. Nothing left in the registry and no remnants elsewhere.

6 more replies
Answer Match 40.32%

XP user, Notebook takes about 22 to 27 mins to boot. Norton takes most of that time i.e. loading and updating definitions. Once boot is completed operation is suitabily fast. I had problems with Ad and Spyware. Purchased Spyware Detector and Max Reg Cleaner. Found 31 problems with spyware and over 200 regitry problems. Then I had a problem with Norton and Spyware Detector confliting. This made start up even slower. Went to msconfig start up tab uncheck Spyware Detector and Max Reg to not start. That helped. However, start up still take over twenty mins.
I came back to bleeping computer to start up list tab, downloaded "Autoruns" and ran program. My start up looks like a two dictionaries. Viewed Startup forum. I am more in the dark than before I started.
I must have a dissconnect in my brain. I still can not find a status fo any of the entries. When I look at Autoruns "Everything" tab it is very intimadating.
What is a good starting point when useing Autoruns? Where do I find a Status? I have viewed the "Start Up Data base" however I did not find any of the entries in my scan. I did a search on a Display Panning CPL Extension File not found: deskpan.dll "Unknown : the status of this entry is unknown at this time and more research is necessary"
Please point me in the right direction.


If there are any entries that you are unsure about you could post them here. I'm sure the members here would be willing to help you identify them.

Deskpan.dll is associated with the Display Panning CPL Extension and used to change the way the picture is presented on screen. It's from Microsoft.

4 more replies
Answer Match 40.32%

Not sure which files I should be checking?Do I check the Everything Tab? - alot of the files seem to be missing- ones i would think would be common i.e.: (I grabed these from the bottom of the list) + msv1_0 Microsoft Authentication Package v1.0 Microsoft Corporation c:\windows\system32\msv1_0.dll HKLM\SYSTEM\CurrentControlSet\Control\Lsa\Notification Packages + scecli Windows Security Configuration Editor Client Engine Microsoft Corporation c:\windows\system32\scecli.dll HKLM\SYSTEM\CurrentControlSet\Control\Lsa\Security Packages + kerberos Kerberos Security Package Microsoft Corporation c:\windows\system32\kerberos.dll + msv1_0 Microsoft Authentication Package v1.0 Microsoft Corporation c:\windows\system32\msv1_0.dll + schannel TLS / SSL Security Provider Microsoft Corporation c:\windows\system32\schannel.dll + wdigest Microsoft Digest Access Microsoft Corporation c:\windows\system32\wdigest.dll HKLM\SYSTEM\CurrentControlSet\Control\NetworkProvider\Order + LanmanWorkstation Microsoft Windows Network Microsoft Corporation c:\windows\system32\ntlanman.dll + RDPNP Microsoft Terminal Services Microsoft Corporation c:\windows\system32\drprov.dll + WebClient Web Client Network Microsoft Corporation c:\windows\system32\davclnt.dllNone of ... Read more

A:Autoruns Help

? you sure this shouldn't go with the - Windows Startup Programs Database forum?

3 more replies
Answer Match 40.32%

Hello all,

I have installed Autoruns on my computer to monitor and control what programs are running at startup. I have turned off many of the programs not needed at startup that I'm familiar with.

The million dollar question is what programs need to be running at startup for XP Home Edition?

Also, how do I post a screen shot of Autoruns on the forum?

Thanks much!


How To Capture And Edit A Screen Shot - The Logon tab of Autoruns...reflects the startup items that should be looked at.As to what should be running...probably personal opinion. It makes no sense to have nonessential programs running from boot, it makes sense to have your AV, your firewall, java, and any Microsoft Windows items listed on the Logon tab, IMO.Any other program reflected on the Logon tab...should only be running when initiated from desktop/shortcu or All Programs menu.Louis

5 more replies
Answer Match 40.32%

Have downloaded Autorun and run a scan. However I can see no status with entries in the database.

Am I missing something obvious??

Many thanks, in advance.


Hi omurchu,The Autoruns program doesn't list a status. The status will be found in the search results of the Startup Programs Database when you serch for information on a file that is listed there. Here's the key:Each entry in the database will have a Status assigned to it. The key to this status is the following:    * Y - This status flag means that this entry should be left alone and be allowed to run as if it is unchecked it may break the functionality or use of a particular program.    * N - This status flag means it is unnecessary to run this program automatically when Windows starts as you can run it manually when necessary.    * U - This status flag means it is up to you whether or not you feel this program needs to run automatically.    * X - This status flags means the item should definitely not start up automatically. Items that have this flag are generally malware such as viruses, trojans, hijackers, spyware, etc.    * ? - This status flag means the status of this entry is unknown at this time and more research is necessary.If the file is unknown, you will get a file not found message in the database.If you are still having problems with Winstall.exe that you posted about here, I strongly urge you to post a HijackThis log as suggested in that thread. That file belongs to infections that change daily and it is impossible to to keep the self-help guide updated. It also may infect a critical system file that is ver... Read more

1 more replies
Answer Match 40.32%

This major update to Autoruns, an autostart execution point (ASEP) manager, now has integration with to show the status of entries with respect to scans by over four dozen antimalware engines. It also includes a revamped scanning architecture that supports dynamic filters, including a free-form text filter, a greatly improved compare feature that highlights not just new items but deleted ones as well, and file saving and loading that preserves all the information of a scan

A Guy

A:Autoruns v13.0

Forgot I had that program in my toolkit thanks for reminding me, its a great tool to have.

2 more replies
Answer Match 40.32%

Can't find any good info as how to use this Utility?
I tried Un-checking some Entries in "Services" but that did not completely work, although it seems some were Disabled?  Is this not the proper place to do this, should I be in "Everything" Tab, or "Login" Tab to do this?  And if so should I attempt to Re-Check the ones in "Services" that were disabled?  I'm surprised that there is not one Tutorial that explains the basics of this Utility.  Already know what I want not to run just need to know how to disable.  I have already done this in Task Manager just to see if pc would run well with these things Disabled and all was good.  Some of the offending things are from Toshiba, and then I installed a full HP Printer and Photo Suite which is running many Processes.
Thanks pcpunk


Make sure you run the tool as Administrator, careful with what you disable.
There is a tutorial here:

5 more replies
Answer Match 40.32%

I installed & ran scan last week for a certain problem which I do believe is resolved but now don't know what to do about the rest of the scan results, I have absolutly no idea what any of it means. I'll post a couple screenshots of the results so you can tell me what problems show up & what to do to correct them? The 3rd shot is the one I was originally looking for. I just unticked it so far, will delete it next.


A:Need help with Autoruns

Autoruns shows you all the pieces of software that get loaded and run when Windows starts. The descriptions of each item can be rather cryptic. Use Google to get more meaningful information about any particular one.

The entries you unchecked, because they reference files that couldn't be found when Windows starts up, will not have any effect on your system because the files aren't getting loaded. Deleting the entries will save a tiny amount of space in your registry, but that about all.

Most people use Autoruns to determine if there is unwanted software running on their system. It takes a while to learn how to be able to recognize "normal" Windows modules from other ones. Your system has a lot of extra stuff running on it which suggests it was a pre-built system that the supplier loaded up with it's own software. This is not necessarily bad as long as you find that software useful or helpful.

Unchecking an item causes Windows to not load it at startup. The software itself is still there; Windows just won't load it. Deleting an entry from Autoruns also stops the item from being loaded, but does not delete it. Unchecking is a safe way to determine if the item is needed or not; if you uncheck something and reboot and then find you do need the item you can simply re-check it and then reboot to get it back.

2 more replies
Answer Match 40.32%

Hi, I just downloaded autoruns but I don't understand it. It appears extremely complicated. Can anyone please guide me what to do with? My computer is very slow even though I have a reasonable amount of broadband.Autorus shows some entries highlighted in blue. pink and yellow. What does it mean and what should I do?Edit: Moved topic from Windows Startup Programs Database to the more appropriate forum.~ Animal

A:How to use Autoruns

Hi, I just downloaded autoruns but I don't understand it. It appears extremely complicated. Can anyone please guide me what to do with? My computer is very slow even though I have a reasonable amount of broadband.
Autorus shows some entries highlighted in blue. pink and yellow. What does it mean and what should I do?Edit: Moved topic from Windows Startup Programs Database to the more appropriate forum.~ Animal
Please give me a link for where you put it. I don't know where it was moved to.

3 more replies
Answer Match 40.32%

Hi I have downloaded autoruns but I am not sure what to do with it. On the webpage it refers to letter flags which I don't see any in the utility. I do see items highlighted in yellow and red but I cannot find any explanation what this means.
Should I unchech everything that is yellow and red?
Any more info about how to use this is appreciated, thanks!

A:How to use autoruns

Hello there,Lawrence Abrams aka Grinler has an explanation on how to use Sysinternals' Autoruns alongside the Bleeping Computer File Database here.Regards,Alex

27 more replies
Answer Match 40.32%

i ran autoruns scanned everything and a few had file not found? are these useless? should i untick them?


I delete those .

Nothing like an O/S looking for a file that is not installed.


5 more replies
Answer Match 40.32%

Cookiegal said:

When you right click on the drives, do you get odd characters in the context menu?
Let's check the registry for both the PC and the laptop to be sure the keys affected by this infection are clean.
Go to Start - Run - type in regedit and click OK.

Expand each of the following keys by clicking on the + to their left:


Under the Explorer key, right-click on MountPoints2 and select "export" and save it as MountPoints2 to your desktop. Then right click on the file on your desktop and select "open with" and then "Notepad" and copy and paste the contents here please.Click to expand...

I got this

Windows Registry Editor Version 5.00






"_AutorunStat... Read more


I have similar problem but I did not understand what is going on. So I quit.

2 more replies
Answer Match 40.32%

I did an autorun but I think there are things in here that should not me and it cant find the fold info. I was trying to set up a winzip but when I did the scan it found so many junk folds in the C drive i am confussed on what to keep running and what not to rececntly someone or vires remote accussed my computer and a tec team said it was safe????????????????? unsure still thats why i was checking programs on auto start also I have too desktops now and files are all over the place when the vires or hacker came in they downloaded microsoft 6.1 version when I had 7 on a 64bit very confussed on the hole situation if you could direct me in how to go about it I very much apperecate it.


The best thing you can is to post this problem in the forum section 'Am I infected'.
It may take a day or two, but someone will get back to you. Follow their instructions carefully and fully, and if you are asked to do something you don't understand, post back asking for clarification.
Chris Cosgrove
Mod Edit:  No need for new topic, moved this one to AII - Hamluis.

1 more replies
Answer Match 40.32%

I found some Virus / spyware on my PC!I got AVG antivirus - It found the virys/spyware - but coudnt delete it!I then tried to use the program Autoruns! (donno if thats better than HiJackThis)But I didnt know what to delete in Autoruns...Anyways here is my HiJackThis log (hope anyone can help me)Logfile of HijackThis v1.98.2Scan saved at 14:42:51, on 21-06-2005Platform: Windows XP SP2 (WinNT 5.01.2600)MSIE: Internet Explorer v6.00 SP2 (6.00.2900.2180)Running processes:C:\WINDOWS\System32\smss.exeC:\WINDOWS\system32\winlogon.exeC:\WINDOWS\system32\services.exeC:\WINDOWS\system32\lsass.exeC:\WINDOWS\system32\svchost.exeC:\WINDOWS\System32\svchost.exeC:\WINDOWS\system32\spoolsv.exeC:\PROGRA~1\Grisoft\AVGFRE~1\avgamsvr.exeC:\PROGRA~1\Grisoft\AVGFRE~1\avgupsvc.exeC:\WINDOWS\system32\nvsvc32.exeC:\WINDOWS\System32\svchost.exeC:\WINDOWS\system32\UAService7.exeC:\WINDOWS\Explorer.EXEC:\WINDOWS\SOUNDMAN.EXEC:\PROGRA~1\Grisoft\AVGFRE~1\avgcc.exeC:\PROGRA~1\Grisoft\AVGFRE~1\avgemc.exeC:\WINDOWS\system32\rundll32.exeC:\Programmer\Winamp\winampa.exeC:\Programmer\Logitech\iTouch\iTouch.exeC:\Programmer\D-Tools\daemon.exeC:\WINDOWS\system32\RUNDLL32.EXEC:&... Read more


Hi GaffaCas and Welcome!

Open HijackThis and Click Config>>Misc Tools>>Update Online!!

Get HijackThis Updated to 1.99.1!

Can you find out what AVG Identified and if you will,use the Panda Active Scan again and this time Save the Results of the Scan and Post them here!

One Question,are you aware of this program running on the PC??


14 more replies
Answer Match 40.32%

I read the following item in your forums: How to remove a Trojan, Virus, Worms, or other Malware. It recommends running Autoruns in safe mode (Windows XP Home). When I do that it hangs.

The forum says that when the program starts "Click on the OPTIONS menu". I don't see an OPTIONS menu. The window that appears has 13 tabs, NONE of which say OPTIONS, not that that would help since the dreaded hourglass is sitting there doing nothing. It's very frustrating when your forums lead to a dead end.


Options is on the top menu - File > Entry > Options > User. When starting autoruns, you need to wait for the program to finish scanning your system and indicate it is ready (at the bottom) before Options becomes accessible.For trojans, I suggest you download and scan with Ewido Security Suite 3.5.Ewido Install and Scan Instructions

1 more replies
Answer Match 40.32%

I have downloaded a program called Autoruns which provides an extensive list of everything that runs when I boot up and allows me to disable those which are unnecessary. Is a way to determine which ones can be disabled? My pc is very slow to boot up and I seem to have a lot of programs which are loaded at startup.


Autoruns can be a very dangerous program if you disable the wrong things. Better to use one of these which will show the programs that are in the usual start locations:

Startup Control Panel
MZ Startup Manager
Startup Control Panel (Exe version for Vista)
Emsa Startup Manager
EM Startup Manager
WheresJames Startup Manager

Startup Programs Reference

3 more replies
Answer Match 40.32%

I am trying to eliminate unnecessary programs that running in the background but unclear as to what to do.
In Autoruns, under the Winlogon & Logon tabs, there are a lot of items highlighted in YELLOW, PURPLE, BLACK, and in sort of PINK.
Do I ?uncheck them?? Or do something else?


Perhaps providing a screen cap of the items would be easier, so people could walk you through what to keep and what to drop.

1 more replies
Answer Match 40.32%

In WinXP Pro, programs that started with Windows have stopped.
When I click Start - All Programs - Startup is disabled.
Any way to reverse this?


Is there anything else strange happening with Windows? Try clicking "Start|Run" and type "msconfig" (no quotes) and click okay. Check that there are not certain startup items disabled. On the first screen (from memory) there are a number of options. Select the one that says "Normal Startup", okay your way out and reboot. If that doesn't work then I'd be looking at some type of Malware (even though it doesn't really sound like that would be the problem).

1 more replies
Answer Match 40.32%

wasn't sure where to post this question, but i'm running the autoruns to see what programs are automatically starting when i start my computer. it says each program will have a status but i cannot find any of the letters next to anything to show if they are needed or not or need to be deleted or stopped. where exactly will the status show up?

A:need help using autoruns

Onen easy way to check your start up programs is to use the Spybot application in it's tools section. This lists the applications and provides a little more information about each application; there are color codes for each item that may START as a guide to help you make decisions about which to kill. You can kill or "unkill" any application right from Spybot.

BC has a detailed start-up application DB; use this to look up any program that you are contemplating deleting.

Hope this helps,

4 more replies
Answer Match 39.9%

I have the weirdest issue... On a Vista machine after running ESET Rogue Remover, task manager is autostarting at Windows login. I have checked all of the usual startup locations in the registry as well as using Autoruns to look at more detail.
Is there a more comprehensive tool out there that checks more startup locations?
How can I find where the heck this is starting from.

A:Cannot Find with Autoruns

How to Run the Task Manager at Startup in Windows Vista
You must be able to reverse this from Dummies book ??
Sorry, but it was the best I could find ------
I used "Stop task manager autostarting at Windows login" as the Google search -
Regards -

1 more replies
Answer Match 39.9%

Since I've become a new member, I've read a wealth of information on this site. As a result, I've been tweaking my system like crazy.
I downloaded Autoruns and fired it up to see what else is loading up at startup. I found some things that I no longer needed and used msconfig to uncheck them....I'm not sure unchecking in Autoruns does the same thing....let me know if it does as that would be much simpler!
Anyway, I found a few items I'm not to sure about and that is my reason for posting. I'm mostly concerned at the moment with those entries that are highlighted in yellow. Not sure what the ones highlighted in pink are yet.
"Logon Tab" 
HKLM\SOFTWARE\Wow6432Node\Microsoft\Active Setup\Installed Components
Internet Explorer            File not found: C:\Windows\system32\ie4uinit.exe  
I know this file is present and I've read on this sight that it is required but I'm not sure why it's required when it doesn't even successfully load. So can I uncheck this?
"Task Scheduler Tab"
\ASUS\ASUS AI Suite II Execute            File not found: C:\Program Files (x86)\ASUS\AI Suite II\AsRoutineController.exe  
\ASUS\ASUS DigiVRM Help            File not found: C:\Program Files (x86)\ASUS\AI Suite II\DIGI+ VRM\VRMHelp.exe&... Read more

A:Tweaking w/Autoruns

The IE entry under the Logon tab is probably a glitch following an upgrade from IE9 to IE10 (if you've done that).  The best way to resolve this particular issue is as follows:
1. From the Control Panel, select Programs and Features
2. Select Turn Windows features on or off
3. Uncheck the Internet Explorer 10 entry. You will get warnings of impending doom but proceed anyway
4. Restart your system
5. Repeat steps 1 to 4 but this time check the Internet Explorer 10 entry
When you run Autoruns again, the 'File not found' error should be gone.
In relation to the entries under the Task Scheduler tab, you can deselect all 6 entries from within Autoruns.  It is unusual to see scheduled tasks pointing to a removable drive.
If, after a couple of days, you have not seen any error messages and there no errors relating to these entries in the event logs, then you can re-run Autoruns, right click on each of these entries and select delete.  That will completely remove them from the task scheduler.

36 more replies
Answer Match 39.9%

Autoruns updated to version 9.56.

This update enables Autoruns to view registry entries that have permissions only allowing the System account access and fixes a bug that caused some rundll32-hosted entries to not display correctly.


A:Sysinternals Autoruns v9.56

Thanks, I use that all the time...

It's even more important now that you can't control autoruns from Defender.

3 more replies
Answer Match 39.9%

Hi there!
I´m new here and dont know much about computers, I ran the autorun program and got no results with keys but a few highlited in yellow and some in... cant quite tell if it is pink or light orange,
Highlighted tin yellow:
\Apple\AppleSoftwareUpdate File not found: C:\Program Files\Apple Software Update\SoftwareUpdate.exe
Synth3dVsc File not found: System32\drivers\synth3dvsc.sys
tsusbhub @%SystemRoot%\system32\drivers\tsusbhub.sys,-2 File not found: system32\drivers\tsusbhub.sys
VGPU File not found: System32\drivers\rdvgkmd.sys
...and in pink:
WinRAR c:\program files\winrar\rarext.dll 02/03/2011 01:40 a.m. THIS ONE LISTED FIVE TIMES
\Microsoft\Windows\NetTrace\GatherNetworkInfo c:\windows\system32\gathernetworkinfo.vbs 10/06/2009 03:19 p.m.
\ROC_REG_JAN_DELETE c:\programdata\avg january 2013 campaign\roc.exe 17/01/2013 03:14 p.m.
Can someone help me with these?

A:help with autoruns results

Hi, see see this BC thread as already explained by a fellow BC Advisor.

4 more replies
Answer Match 39.9%

I have just downloaded and executed autoruns to diagnose bootup issues. The problem is that when I browse to the logon tab, all processes are ticked even though many of them aren't automatically loaded as startup (and unticked in msconfig for that matter). Am I missing something over here or is it autoruns not working well ? Thanks

A:Autoruns Question

dear gidra,
If you are trying to estimate boot timings in windows 7, In addition to Boot racer, there exists a method using windows logs, which are precision perfect!
Kindly follow the steps in the below mentioned article and you get a very precise boot-up time( start to logon screen)

Link: Check & Speed Up Windows 7 Boot Time | Windows 7 Themes

Since my scores are bad to pretty bad, i will harbor the secret in my heart to the incinerator!

How many Auto-run programs are you allowing? This is one sit. where "more is not merry"!

When i was doing my medical studies, i had a searing experience, which i remember 20 years after the event occured! These auto-run programs are devils in disguise with CDs,DVDs and USB drives. I insered a CD-ROM containing (supposedly) the entire contents of Harrison's Principles Of Medicine and in a flash ,the pc was rendered useless!

Now ,my Avira Antivir Premium does not allow any Pen drives or Flash drives which have auto-run programs in them! Just blocks these newly bought ones! I have to manually delete the auto-run ability of these drives!
Duh! A long post! Thanks for reading!


PS: If the article has been of help, you can add a rep. by clicking on the middle icon in the right upper quarter of my post!

5 more replies
Answer Match 39.9%

I am trying to tweak my system and get it running more efficiently. I am running Win2K pro and would like someone to advise me on what does not need to be here and why...doc thanks

HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Winlogon\Userinit
+ C:\WINNT\system32\userinit.exe
HKEY_CURRENT_USER\Software\Microsoft\Windows NT\CurrentVersion\Windows\Run
+ RUNDLL32.EXE C:\WINNT\system32\NvCpl.dll,NvStartup
+ anvshell.exe
+ mobsync.exe /logon
+ "C:\Program Files\Eset\amon.exe"
+ "C:\Program Files\Eset\pop3scan.exe"
+ "C:\WINNT\system32\nod32cc.exe" -DONTSHOW
+ "C:\Program Files\Microsoft Hardware\Keyboard\type32.exe"
+ nwiz.exe /install
+ C:\Program Files\Creative\ShareDLL\CtNotify.exe
+ "C:\Program Files\Common Files\Real\Update_OB\realsched.exe" -osboot
+ C:\WINNT\system32\spool\DRIVERS\W32X86\3\E_S0HIC1.EXE /P32 "EPSON Stylus C82 Series (Copy 2)" /O6 "USB002" /M "Stylus C82"
+ livenote.exe
+ "C:\Program Files\QuickTime\qttask.exe" -atboottime
+ internat.exe
+ C:\Program Files\Spybot - Search & Destroy\TeaTimer.exe
+ RUNDLL32.EXE C:\WINNT\system32\NVMCTRAY.DLL,NvTaskbarInit
C:\Documents and Setting... Read more

A:These are my autoruns at startup

In Real Player, shut off the auto update feature or searching for updates. Real Player doesn't need to call home. Same with Quicktime. Very clean log.

2 more replies
Answer Match 39.9%

Delete the bad startups from autorun? or just unclick the check box?

A:Autoruns Question

Right-click > Delete will delete any entry in AutoRuns.

4 more replies
Answer Match 39.9%

Saw an article about autoruns and downloaded it.  The first time I ran it, I clicked on the help and the window disappeared.  Went looking for the program again and it had disappeared. Extracted it from the zip file again and it disappeared before
I could click on it to start it.  I can't imagine what is going on or where to even start.  BTW, it does not appear in task manager either.

More replies
Answer Match 39.9%

I have skimmed over info on these to apps and they 'appear' similar. I have not found 'recent' discussion here on these two and want to know a)major difference and b)under what conditions do I need one or the other.

-thank you

A:Autoruns vs Winpatrol

WinPatrol is more of a security application compared to Autoruns. WinPatrol takes a "snapshot" of your critical system resources, actively monitors those resources, and alerts you if any changes occur. Autoruns shows you what programs are configured to run during system bootup or login, shows you the entries in the order Windows processes them, and a full list of Registry and file system locations available for auto-start configuration.

WinPatrol can possibly alert you to system changes due to malware as they happen. Autoruns may list possible malware that runs during system bootup or login but doesn't necessarily flag it as malware and leaves it up to you to figure out if it's malware or not. Here's a chart showing what WinPatrol can do (both the free and paid versions) and a summary of how Autoruns can be used.

WinPatrol FREE vs PLUS

Autoruns for Windows

1 more replies
Answer Match 39.9%

This update adds more autostart locations, fixes a bug that could cause a crash when Autorunsc is directed to calculate file hashes, and fixes a bug in Autoruns? jump-to-image functionality on 64-bit Windows.

Autoruns for Windows

A Guy

A:Autoruns for Windows v11.61

Thanks! Just downloaded a few days ago for testing, and it does really a very good job.

1 more replies
Answer Match 39.9%

when i click on d: or e: it autoruns a virus however my antivirus has removed it now when i click on them i get can't find copy.exe i can only open d and e by right click and open

please help me

thanks a bunch

A:d: and e: autoruns file

It could be that the virus left autorun.inf files on drives d: and e:. If this is the case you can remove them by opening a command prompt and using the commands:

cd /d d:\
attrib -h -r -s autorun.inf
del autorun.inf

cd /d e:\
attrib -h -r -s autorun.inf
del autorun.inf

2 more replies
Answer Match 39.9%

hi there~ seeking for help about the trojan autorun.vbs. i'm having the same problem as elindir just that i got another pop out window on the startup it says couldn't located "scvhost.exe" i've download the HJT but i accidently remove the

F2 - REG:system.ini: UserInit=userinit.exe,autorun.bat

but it still showing some numerous words on my laptop and my pen drive. i shall paste the log out.

A:autoruns.vbs problem

Logfile of HijackThis v1.99.1
Scan saved at 12:49:45 AM, on 4/13/2007
Platform: Windows XP SP2 (WinNT 5.01.2600)
MSIE: Internet Explorer v7.00 (7.00.6000.16414)

Running processes:
C:\Program Files\Common Files\LightScribe\LSSrvc.exe
C:\Program Files\Microsoft LifeCam\MSCamS32.exe
C:\Program Files\Hewlett-Packard\Shared\hpqwmiex.exe
C:\Program Files\ATI Technologies\ATI Control Panel\atiptaxx.exe
C:\Program Files\Java\jre1.5.0_10\bin\jusched.exe
C:\Program Files\Synaptics\SynTP\SynTPEnh.exe
C:\Program Files\HP\QuickPlay\QPService.exe
C:\Program Files\HPQ\Quick Launch Buttons\EabServr.exe
C:\Program Files\hpq\HP Wireless Assistant\HP Wireless Assistant.exe
C:\Program Files\Winamp\winampa.exe
C:\Program Files\QuickTime\qttask.exe
C:\Program Files\iTunes\iTunesHelper.exe
C:\Program Files\Hp\HP Software Update\HPWuSchd2.exe
C:\Program Files\Common Files\Real\Update_OB\realsched.exe
C:\Program Files\MSN Messenger\MsnMsgr.Exe
C:\Program Files\GetRi... Read more

1 more replies
Answer Match 39.9%

A Merry Christmans for all of you!!!
I have found several "files not found"  when I run autoruns!!!   Is it time to run ccleaner  registry cleaner???   Thanks any way!!!


You could delete those entries with AutoRuns.Bleeping Computer DOES NOT recommend the use of registry cleaners/optimizers for several reasons:Registry cleaners are extremely powerful applications that can damage the registry by using aggressive cleaning routines and cause your computer to become unbootable.The Windows registry is a central repository (database) for storing configuration data, user settings and machine-dependent settings, and options for the operating system. It contains information and settings for all hardware, software, users, and preferences. Whenever a user makes changes to settings, file associations, system policies, or installed software, the changes are reflected and stored in this repository. The registry is a crucial component because it is where Windows "remembers" all this information, how it works together, how Windows boots the system and what files it uses when it does. The registry is also a vulnerable subsystem, in that relatively small changes done incorrectly can render the system inoperable. For a more detailed explanation, read Understanding The Registry.Not all registry cleaners are created equal. There are a number of them available but they do not all work entirely the same way. Each vendor uses different criteria as to what constitutes a "bad entry". One cleaner may find entries on your system that will not cause problems when removed, another may not find the same entries, and still another may want to remove entries required for a p... Read more

1 more replies
Answer Match 39.9%

I have this setting in Autoruns as a logon entry. What does it do?

n/a Microsoft .NET IE SECURITY REGISTRATION (Verified) Microsoft Corporation c:\windows\system32\mscories.dll 14/08/2013 05:56 0/57

A:What's This Autoruns Setting?

Hello Steve,

mscories.dll is a module associated with Microsoft .NET Framework.

7 more replies
Answer Match 39.9%

I have posted this in the tips and tricks forum, but I am not sure if that is the correct place, and I am not getting any response. Can someone please help. I only have this computer through tomorrow, and they are really hoping to have it fixed.

I am working on a friends computer, and it was suggested in in PC magazine to run autoruns, from to find out what programs are starting automatically. I have run it and saved the file, but can't figure out what is supposed to be running and what isn't. Can anyone help me?

A:Trying to clean autoruns

6 more replies
Answer Match 39.9%

New to Win7. I disabled a lot of services based on several lists with explanations regarding what the service does.

I've looked for a similar list of AutoRuns. Even looking up (internet) the AutoRun to date has yielded little explanation of
what each AutoRun is for.

Anyone have a list or know of one for AutoRuns?


A:AutoRuns - Which to Disable

I don't know what services you disabled, or what explanation lists you looked at.
If you disabled default Microsoft services, you may cause more problems than you know ...
If you do run into system problems going forward, keep this tutorial handy so you can compare what you have to the default settings.
Services - Restore Default Services in Windows 7

Regarding Autoruns, that gives a comprehensive list that will vary per User/PC/configuration.
i.e. A home built with a clean install (no factory bloatware) will be different than a Pre-Built with factory bloatware.

If you're interested in performance and a clean system take a look at these tutorials:
Optimize Windows 7
Troubleshoot Application Conflicts by Performing a Clean Startup

3 more replies
Answer Match 39.9%

Updated to 9.5...

This update to Autoruns, a powerful autostart manager, adds display of audio and video codecs, which are gaining popularity as an extension mechanism used by malware gains automatic execution.


A:Autoruns v9.5 update


Am I to assume that the latest version of Autoruns is compatible with Win 7 RC?


6 more replies
Answer Match 39.9%

I've gradually noticed the decrease in performance of my computer. I kinda had the feeling that it was taken over by background programs. Needless to say I ran Autoruns and the list is impressive. Where can I get help with cleaning this up? I've done a few that I know of and I've gone through the startup list to find as many as I could but I think I could do a lot more than I have.

A:Overwhelmed by autoruns!

My first not look at the overall list, focus on the Logon tab (where typical startup items are). The overall list generated includes Windows files, drivers, etc...anything that begins at startup.If you come across items that you are uncertain about what programs they are associated with...use Google to look it up. The reason I prefer Google to some listing of startups...the proliferation of malware that copies the names of legitimate files. A given filename means little today...unless it is viewed in context with typical file size and expected location/path for said file. That info may be reflected in the database of startups, but it will definitely be reflected if you use Google and look at a couple of entries about a given file that is ostensibly "a valid startup item."You can also use Startup Programs Database -

1 more replies
Answer Match 39.9%

Thanks for the response.

I downloaded the AutoRuns and installed as instructed and copied to documents folder. Extracted it and run as administrator. There are actually 2 .exe files. One runs in windows the other in dos. The batch file starts but does not go as far as EULA acceptance. No new folder can be found in documents.

I have attached a copy of my System Information and confirm that I am running Vista Home Premium that was pre installed on my Packard Bell computer which was new in January 2009.

Ram tested again.
Norton scan run with no defects.
I have tried System Restore but the BSOD presists.

I look forward to your response. Thank you, Mike

A:AutoRuns Failed

Please be sure to run the batch file as an administrator by right clicking and selecting "Run as administrator".

There's no memory dump files in the stuff that you've uploaded - and we'll need that to help determine what the issue is.

1 more replies
Answer Match 39.9%

I haven't been back on your website here for some time and was taken back a bit by your "Autoruns" program. Is it possible to still access and run our startup programs manually? Over the years I have done that in the past and I never experience a problem or any issues what so ever and after reading some of the post on your site, I think I'd just rather run the program manually like I use to if that is still possible?? Thank You.

A:Autoruns by Sysinternals

Seems to me...that your post is misdirected.

We have no affilation at all with Sysinternals, their webpage is .


10 more replies
Answer Match 39.9%

Okay...I couldn't leave well enough alone I guess...I ran this on my own pc & removed all the "file not found" entries & now I am experiencing issues with the pc/and or mouse freezing. Can anyone help me out?
EDIT prior AII topic

A:Ran Autoruns have problem

Mod bump after split

2 more replies
Answer Match 39.9%

is it just me or is the link to the Autoruns d/l non-existant. (i used the one from the Start Up List tab) I've tried several times today but no luck. Can i d/l this prog somewhere else? Thanks.

A:Autoruns Program - Where To D/l

Try from Microsoft since they bought SysInternals.

2 more replies
Answer Match 39.9%

Can someone tell me how to print a copy or the autorun report so I can check against your data base here as to which programs don't need to run at start up?

A:Autoruns report

If the intent is to look at startps...first select the Logon tab, then save the report as a .txt document to whatever location you prefer.

There is a Save button in the upper portion of the screen.

Print in the same way that any .txt file would be printed.


22 more replies
Answer Match 39.9%

I've used Autoruns in the past, and have just recently discovered Winpatrol. It seems to do the same thing as Autoruns, but can perform more tasks (like managing cookies, and monitor changes in start up programs). Is Winpatrol the way to go as far as managing start up progs? thanks.

A:Winpatrol Vs. Autoruns

In my opinion,Yes since i have used Winpatrol long ago i can still remember how it served my computer heres the site for more info on WinPatrol

1 more replies
Answer Match 39.9%

I have checked in autoruns and found :::   Bfilter ( Baidu antivirus Minifilter Drive)  REGISTRY EDITOR
                                                                   Bfmon ( Baidu Fs Monitor Driver)   REGISTRY EDITOR
                                                                   Bnbase >>> already deleted in DEVICE MANAGER
What would you advise me about ???    Should I delete them ???   Thanks !!!!!

A:Autoruns results!!!

Hi Marioo You can right-click on their entries in Autoruns and select Delete. You don't have Baidu installed on your system, these drivers are useless now. I guess that they are highlighted in yellow as well?

67 more replies
Answer Match 39.9%


Can anyone suggest a way I can print the listed prorams that are listed in autoruns? I have winxp.


A:Autoruns Question

You can click on file, then save. It will save the file by default as autoruns.txt. You can then open it in notepad and print it.

4 more replies
Answer Match 39.9%

how do i run AUTORUNS if i can't even get past the errors?Edit: Moved topic from XP to the more appropriate forum, at the suggestion of BC Advisor. ~ Animal

A:AUTORUNS [Moved from XP]

What errors?

Exactly what are you trying to solve?


6 more replies
Answer Match 39.9%

Fixes a bug in Autorunsc that had default to filtering out signed Windows components.

Autoruns for Windows v10.02

A Guy

A:Autoruns for Windows v10.02


1 more replies
Answer Match 39.9%

A friend of mine told me I should disable AutoRuns on my relative's computer to prevent malware from automatically running from removable media. However, I'm unsure if Windows XP disables USB drives, etc. from running by default, nor if it allows you what to do with a CD by default. Is this even beneficial? My relative usually just plays CDs, or only uses USB drives with files from his computer.

Any advice is appreciated.

A:Should I disable AutoRuns?

Take a look,

1 more replies
Answer Match 39.9%

Hi there,

I have been reading about unchecking different programs that start up automaticaly and don't want to mess my computer up by unticking the wrong thing. I am trying to eliminate as many non required programs as I can. I have an HP computer and have been told that HP really loads them up with items I don't really need.

When I view the logon tab I see at the top of the screen an entry that begins with ;
HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Run. Under that line are items that have a green check mark next to them. If, after looking up the item in the startup list, I determine that I don't want this to start am I safe in unchecking it?

Is the best way to uncheck items one at a time, then check to see what happens, or can you check many at once?

Is there ever a time when the entire heading that begins with HKLM should be unchecked?

I know these must seem like basic questions but I am not very computer literate and don't wish to foul up my computer.

Thanks for any help.

A:Autoruns Question

Hi nu2this

You definitely have the right attitude to your computer which should keep you fairly safe.

If you undo items one at a time and then have a problem, you have more of an idea what may have caused it so it is easy to fix.
You may get away with unchecking the whole lot if you know exactly what each item is, but I wouldn't really recommend that.

Stick around BleepingComputer, read about other's problems and how they were fixed, and you will soon be a guru. A lot of us have learned that way. Good luck.

5 more replies
Answer Match 39.48%

Hi all,

After I've logged in etc., my computer autoruns whatever disk is in my disk drive as if I had just inserted it, which is pretty annoying

I was wondering if anyone knew how to disable this?



P.S. I'm on Vista

A:Vista PC autoruns CD at startup

scroll down to vista

5 more replies
Answer Match 39.48%

On the download page for Autoruns, it states compatibility for Windows XP through to Windows 8.
Is it also suitable to run on a Windows 10 platform?

A:Autoruns / Windows 10 Compatibility?

The home page says Windows Vista and higher.

2 more replies
Answer Match 39.48%

This fixes a bug with the Run As Administrator functionality on 64-bit Windows 7, a copy-to-clipboard bug where part of a line?s content was truncated, and is updated to show Windows 7 Sidebar Gadget configuration.


A:Sysinternals Autoruns Updated to v9.51

thanks for the heads essential program for me

7 more replies
Answer Match 39.48%

I ran Autoruns by Sysinternals ( Autoruns for Windows ) and noticed that there are 8 yellow indicators of files not found.

Please note in this pic:

I am running Vista Home Premium with SP2 and updated to today's date.

My computer is operating as it should.

Is there anything I should do about these "missing files".


A:Files not found in Autoruns

This is not a problem. Those files probably represent larger items that were removed or deleted, but portions still remain. I would suggest that you download and run Ccleaner. This should free space on your hard drive and make the computer a bit faster.
Get the free version
CCleaner - Download

2 more replies
Answer Match 39.48%

I got 3 'file not found' entries in my Autoruns report (see below).

Having removed filters from the report, it looks like the files are there, but not where they are expected to be (am I correct with this interpretation?).

So should I be doing something like moving them to where they should be, or deleting the 'file not found' entries, or should I just leave well alone.

And if the answer is to move them, then can someone please explain how to do this - in simple language


A:File not found after Autoruns. Should I do anything?

Is there anything not starting that you want to start? If that's not the case then I would create a Restore Point to back up the Registry. Then run CCleaner Registry tool and let it search for issues. Select "fix all" issues. When it asks to make a backup do so and save the .reg file. This gives you a second way to restore the registry along with the Restore Point. Also you can use ERUNT to back up the Registry.

After CCleaner removes the Registry issues the dead entries should be gone.

Edit: Many programs when they uninstall just leave the Registry entries they added rather than risk corrupting the registry(and saving themselves debug time.) It's not uncommon to see file associations and other stuff for programs no longer on the machine.

I think CCleaner is generally safer than trying to clean up the Registry by hand.

6 more replies
Answer Match 39.48%

Is Autoruns for Windows v13.4 a MICROSOFT program and safe to download?

A:Solved: Autoruns for Windows v13.4

Yup. Anything that has the name 'Mark Russinovich' is not only excellent, but if yo don't have it, read up on it.

2 more replies
Answer Match 39.48%

I am still in safe mode, and I did what it said and deleted the Trojan. All of installed programs and data are there. When I restart my computer it went back to original screen, and a little box said it was setting my preferences. I restarted it immediately, and went back to safe mode. If I let the setting preseferences continue, will I still have my programs and data?

A:windows sysinternals autoruns

Hi, best that you wait for a reply here.
How can I remove trojans

3 more replies
Answer Match 39.48%

I just ran autoruns just to see what I would see, and I found an entry that I can find nothing about.

Here is the full path that autoruns provided


It says file not found. I checked under non-plug-and-play devices in the Management Control Panel, but it wasn't there.

I did a google search, and the only legit. sites I saw simply had the entry in HiJack This logs. Some had the file and others didn't. I didn't go so far as to read the threads however, just the abstract provided by Google.

My suspicion is that this is a registry key for a part of SuperAntiSpyware for which one gets the file if one gets the paid version, or perhaps gets their AdBuster (blocker?) program, but I am not at all certain.

Anyone know what this entry is? Should I leave it alone or get rid of it? And if so, how?

Orange Blossom

A:Autoruns Shows An Odd Entry:

I asked your question to SAS and they said this, So I guess you leave itThat would not appear in your hosts file, it may be in your temp folders or cache - it is used by the FileResearchCenter and SUPERAdBlocker - it is our kernel driver.

2 more replies
Answer Match 39.48%

This Autoruns update shows manual start Windows services, fixes a bug that affected the display of autostart locations that could include multiple startup registrations, and fixes a bug in the Jump To functionality on 64-bit Windows.

Sysinternals Site Discussion

A:Sysinternals AutoRuns updated to v9.40

Thank you Arron

Got to keep my toolkit up to date

2 more replies
Answer Match 39.48%

After studying the BC tutorial and downloading Autoruns my first attempt to remove a Program from the Vista startup list resulted in "Autoruns Access Denied" dialog stating "Error changing item state: Access is denied" with option buttons "Run as Administrator" and "OK".

Clicking "Run as Administrator" produced a few screen flickers and nothing else - even the dialog box remained. To get rid of the dialog box I must click OK but still no changes in Autoruns!

I was logged in as Administrator from the start to test the Netstat -b command.

I have Vista HP, updated only two days ago.

A:Autoruns Access Denied

What entry are you trying to disable?

1 more replies
Answer Match 39.48%

This has happened to me twice. I use usb virus scan software with my Avira security suite and my pendrive was immunized (with a dummy autorun folder). And i never found any autorun infection entering my pendrive.
It happened when i inserted it in one of my dept. computer in which i know has NADFOLDER worm. Next when i inserted it in my computer (win xp) usb virus scan says no infection but suddenly pendrive autoruns and asked my to select options. I disabled autorun from gpedit.msc. Avira scan says no infection. I then inserted it in my laptop (windows 7) it doesn't autorun. I repeatedly tested this on my computer but every time it autoruns. This was stopped when finally i formated the pendrive. Next day the same thing happened. I also scanned the pendrive with McAfee, Bitdefender, Avast and A-Squared with no detection.
Please help.. thanks in advance..

A:Autorun is off but still my pen drive autoruns (in xp not in 7).!!!

8 more replies
Answer Match 39.48%

Any ideas why this is happening? I am trying to run Autoruns and this is what comes up:

A:Problem Viewing Autoruns

6 more replies
Answer Match 39.48%

Hi.Recently , taking a look at Autoruns, i notice this entry:+ ic32pp c:\windows\wc98pp.dllShearching, i found it could be a leftover of some old infection.HijackThis didn?t found it. It should be at O18 ??Here?s the log:Logfile of Trend Micro HijackThis v2.0.2Scan saved at 21:25:47, on 28/11/2008Platform: Windows XP SP1 (WinNT 5.01.2600)MSIE: Internet Explorer v6.00 SP1 (6.00.2800.1106)Boot mode: NormalRunning processes:C:\WINDOWS\System32\smss.exeC:\WINDOWS\system32\winlogon.exeC:\WINDOWS\system32\services.exeC:\WINDOWS\system32\lsass.exeC:\WINDOWS\system32\svchost.exeC:\Arquivos de programas\Alwil Software\Avast4\aswUpdSv.exeC:\Arquivos de programas\Alwil Software\Avast4\ashServ.exeC:\WINDOWS\Explorer.EXEC:\WINDOWS\system32\spoolsv.exeC:\Arquivos de programas\Executive Software\Diskeeper\DkService.exeC:\WINDOWS\System32\svchost.exeC:\ARQUIV~1\Iomega\System32\AppServices.exeC:\WINDOWS\SYSTEM32\ZoneLabs\vsmon.exeC:\ARQUIV~1\ALWILS~1\Avast4\ashDisp.exeC:\Arquivos de programas\- internet\ZoneAlarm\zlclient.exeC:\Arquivos de programas\Iomega\DriveIcons\ImgIcon.exeC:\Arquivos de programas\Microsoft IntelliPoint\point32.exeC:\Arquivos de programas\Creative\SBAudigy2&#... Read more

A:ic32pp in autoruns but not in HijackThis

Hello and welcome to Bleeping ComputerWe apologize for the delay in responding to your request for help. Here at Bleeping Computer we get overwhelmed at times, and we are trying our best to keep up. Please note that your topic was not intentionally overlooked. Our mission is to help everyone in need, but sometimes it takes just a little longer to get to every request for help.If you have since resolved the original problem you were having, we would appreciate you letting us know. If not please perform the following steps below so we can have a look at the current condition of your machine. If you have not done so, include a description of your problem, along with any steps you may have performed so far.Upon completing the steps below a staff member will review and take the steps necessary with you to get your machine back in working order clean and free of malware.Thanks and again sorry for the delay.We need to see some information about what is happening in your machine. Please perform the following scan:Download DDS by sUBs from one of the following links. Save it to your desktop.DDS.comDDS.scrDDS.pifDouble click on the DDS icon, allow it to run.A small box will open, with an explaination about the tool. No input is needed, the scan is running.Notepad will open with the results, click no to the Optional_ScanFollow the instructions that pop up for posting the results.Close the program window, and delete the program from your desktop.Please note: You may have to disable ... Read more

10 more replies
Answer Match 39.48%

I am trying to delete files on autorun that have infected my computer. I am right clicking on the file but it wont allow me to delete. My computer has been infected by a nasty virus, its a fake personal security centre. Please help

A:Deleting files using Autoruns

Please follow the instructions in ==>This Guide<==.Once the proper logs are created, then make a NEW TOPIC and post it ==>HERE<==If you can produce at least some of the logs, then please create the new topic. If you cannot produce any of the logs, then post back here and we will provide you with further instructions.Orange Blossom

1 more replies
Answer Match 39.48%

I cant seem to find it , thanks

A:Link to disabling autoruns

One that I have stored, Disabling Autorun - .

4 more replies
Answer Match 39.48%

Hi all,

I was trying to remove spyware from a pc and read an article here about using autoruns to remove suspiscious entries. it turns out that Like a dope I didn't backup the registry and seem to have removed to much.

when I start the computer it starts just fine loads up, but whenever I try to open a program Internet explorer, control pannel etc I get "Windows cannot find 'program'" error I don't get this error if I open a text file. the error contains the whole path to the program, and I am able to explore to there and see the file so the error makes no sense.

I thought I would try running through command prompt and tried to run CMD. I got the same error "Windows cannot find CMD"


A:Deleted Important Autoruns

Sounds like a repair install might would replace any missing/damaged system files.Autoruns reflects all sorts of information, users need to be aware of what tab they are dealing with. The Logon tab is the tab to focus on if trying to manage startup items, while the other tabs reflect some key Windows files in various subsets.How to perform a repair installation of Windows XP if Internet Explorer 7 is installed - Louis

6 more replies
Answer Match 39.48%

I have downloaded and used the auto run program do to having a really bad virus/worm problem. after reading the directions on how to do it, i found that i have failed do to a little problem with how the directions are written. it told me to delete the files through the program by right clicking them and clicking delete.... well i did that, and then after i did that i noticed that they say to remember the address of the program listed in my computer... well now.... i have no idea where those programs are located because the description told me to delete them by right clicking. so now im stuck and i dont know how to find those programs now because i deleted them from the exe.

so how do i find these bad files that i have deleted from the auto runs program?

i tried re scanning but since i already did it the information is gone. please help...

also... i am running windows vista but i assume the program is the same on every platform of windows.

A:autoruns exe, directions problem

i also have restarted my computer normaly and then back to safe mode to run autoruns.exe to see if i could find those programs running again. but unfortunatly... those programs still never showed up again. so i still have no idea where to find them.

2 more replies
Answer Match 39.48%

Virused up to the eyeballs. Am not a majorly competent computer user but am learning fast.

Have downloaded Autoruns which arrived in a compressed package which it recommended i open.
My computer wont let me do this says my drives etc dont exist. It says i dont have temporary internet downloads so i tried to put it into my documents and it again said drive does not exist.

Ive got windows XP, thats as technical as i know. Sorry.

Ive had trouble downloading for some time.

A:Cant Expand My Autoruns File

See if you can download and install Hijack This from the link below. If you can, run a scan and post the scan in the Hijack This Forum.

3 more replies
Answer Match 39.48%


I am trying to remove the malware winlogon.exe from my computer. I followed the guide on this website to remove it. I installed the program Autoruns.exe and ran it safe mode. However, winlogon.exe does not show up in the Autoruns program, even though I followed the instructions for making system and hidden files visible.

Can anyone help with this problem?

A:autoruns does not find winlogon.exe

If you think you are infected submit a hijackthis log here.How to submit a hijackthis logDownload HijackthisTry running the following from safe-mode Sysclean you'll also need the virus template file from here lpt***.ziporDrWeb CureITAlso install and run A2 Free and EwidoI'd also run Spybot and Adaware

1 more replies
Answer Match 39.48%

I am trying to remove a nasty Trojan that McAfee recently found, and reputedly deleted. System is a Win7/XP 32bit dual boot using Easy BCD 1.7.2, infection is on the Win7 partition running McAfee & MB. My confidence remains tepid at best that this is gone, as these things usually require more than one scanner to validate true removal/repair. I however, do not run CF at drop of a hat, like to save that as a last resort tool, among others..
Symptom began with the Mcafee notice, and that it cleaned the infection. Residual was an APPcrash notice at logoff/shutdown for rundll32.exe_wshck.dll. This is did not pass the "smell test", felt odd. So I began digging deeper.
Ran the usual latest  "common tools" - Stinger, MRT, Malwarebytes - which found a Trojan.RedirRdll2.gen. Found something else on another scan, Trojan.Dropper.Win32, cannot recall tool, maybe Kasp Rescue Disk.

Found Reg entry at " HKCU\Software\Microsoft\Windows\CurrentVersion\Run|onsvmg " . After checking for hidden files,I found these poor orphans in the C:\Users\*profile*\AppData\Roaming - onsvmg.dll, rundll32.exe, and bcmau.dll. renamed them to _OLD. Re-ran FULL McAfee Scan which found and deleted these... Hmmm...
Ran McAfee RootKit Remover, neg,  ran Kasp TDSSkiller - neg, ran Symantec FixZeroAccess - neg. Ran CCleaner & Glary to dump Flash/Java,  & other temp/cache as hiding places of malware. 
So, visited an old haunt at Bleeping Com... Read more

A:Suspicious Files from Autoruns

Do not run any other tools when you are being assisted here.Please follow the instructions alone. Please download TDSSKiller from here and save it to your DesktopDoubleclick on TDSSKiller.exe to run the application, then click on Change parameters
Check Loaded Modules and Detect TDLFS file system. Do not check Verify file digital signatures (even though it is checked in the example)If you are asked to reboot because an "Extended Monitoring Driver is required" please click Reboot now
Click Start Scan and allow the scan process to runIf threats are detected select Skip for all of them unless I instruct you otherwiseClick Continue
Click Reboot computerPlease post the contents of TDSSKiller.[Version]_[Date]_[Time]_log.txt found in your root directory (typically c:\)in your replyDue to forum upgrade you may face issues posting the TDSSkiller log.Just last few lines of log is sufficient===================================================RKILLPlease download Rkill by Grinler from one of the 4 links below (if one of them does not work try another.) and save it to your desktop:Link 1Link 2In order for Rkill to run properly you must disable your anti-malware software. Please refer to this page if you are not sure how.Double-click on Rkill. (If you are using Windows Vista, please right-click on it and select Run As Administrator)Note: You may have to run Rkill a few times before it is successful. You may also have to download Rkill from a different link which will save it as a... Read more

24 more replies
Answer Match 39.48%

Please could with experience of Autoruns help me I thought I was understanding the instructions and the program....but nealy everything I enter into the database to check is coming back as unknown.
I must be doing something wrong...Please im not a pc expert in fact the complete opposite.
When I go to open the saved snapshot file it pops up that the file is corrupt.
Im going wrong somewhere some guidance from a understanding person would be a great help.
Thank you Tim

A:Might Be Wrong Thread-Autoruns Help

I've been using Autoruns for years, but I don't understand what you're trying to do. Can you be more specific?

5 more replies
Answer Match 39.48%

Computer 2Unable to access Autoruns.Oops! Internet Explorer could not connect to Moved topic from Windows Startup Programs Database to the more appropriate forum. ~ Animal

A:Autoruns Webpage Access

There are plenty of mirror sites:

3 more replies
Answer Match 39.48%

This site is awesome!
I downloaded and used Autoruns. I found lines in which the file was not found hylighted in yellow.
Also, most lines I cannot find the .exe  file name to compare to the Autoruns data base.
Can someone explain this.  Thanks for your time.   Tom6killer
BTCFilterService       File not found:                system32\DRIVERS\motfilt.sys 
Motousbnet               File not found:                     system32\DRIVERS\Motousbnet.sys 

A:Using Autoruns - File not found

I also have unchecked the "Gold" or as you say "Yellow" entries as most of them I recognize as being stuff that has been removed from laptop.  I will see what happens later I guess lol.
Now I would like to know what to do with ones in "Pink" that have no "Publisher Name"
I would love to learn some more about this if any knowledgeable help is out there, thanks sorry for hijacking your thread.

5 more replies
Answer Match 39.48%

HP Pavillion Laptop running Windows 7 Professional
My computer was starting and shutting down slowly, so I began to explore disabling some unneeded services and processes from starting.
I downloaded Autoruns v 13.4 for Windows after seeing it referenced here. I had Autoruns open and put the computer in sleep mode. It was mistakenly
unplugged (and no battery). Since then it will not start, although it passes startup tests from HP software, as well as a Windows repair disc.
When I try to start it, a blue screen with white lettering flashes briefly, saying that Windows was shut down to prevent damage to the computer. It recommends running CHKDSK but I don't
see how I can do that if I cannot start the machine.
I just tried a Windows startup test it says
Fallback diagnosis:
Root cause found: Unspecified changes to system configuration might have caused the problem
Repair action: System files integrity check and repair Failed Error code = 0x490
Boot ststus test indicates that OS booted successfully
When I try Startup repair, I get the message "Windows cannot repair this computer automatically"
I have a system image, but it is one year old. This is perplexing, since I performed a backup a few days ago before starting with this process. The backup cannot
be found, and the one remaining of a year ago would mean a huge amount of work lost.
I am grateful for any suggestions.

A:Cannot Start Windows 7 Pro after using Autoruns

Worth a look, .

51 more replies
Answer Match 39.48%

I have downloaded and used the auto run program do to having a really bad virus/worm problem. after reading the directions on how to do it, i found that i have failed do to a little problem with how the directions are written. it told me to delete the files through the program by right clicking them and clicking delete.... well i did that, and then after i did that i noticed that they say to remember the address of the program listed in my computer... well now.... i have no idea where those programs are located because the description told me to delete them by right clicking. so now im stuck and i dont know how to find those programs now because i deleted them from the exe.

so how do i find these bad files that i have deleted from the auto runs program?

i tried re scanning but since i already did it the information is gone. please help...

also... i am running windows vista but i assume the program is the same on every platform of windows.

i have also restarted my computer normaly and then put it back in safe mode to re scan it with autoruns.exe but the files still never showed up again

A:autoruns.exe confusion/problem.

Hello and welcome to Bleeping Computer! I am HelpBot: an automated program designed to help the Bleeping Computer Staff better assist you! This message contains very important information, so please read through all of it before doing anything. We apologize for the delay in responding to your request for help. Here at Bleeping Computer we get overwhelmed at times, and we are trying our best to keep up. Please note that your topic was not intentionally overlooked. Our mission is to help everyone in need, but sometimes it takes just a little longer to get to every request for help. No one is ignored here. To help Bleeping Computer better assist you please perform the following steps:*************************************************** In order to continue receiving help at, YOU MUST tell me if you still need help or if your issue has already been resolved on your own or through another resource! To tell me this, please click on the following link and follow the instructions there.CLICK THIS LINK >>> <<< CLICK THIS LINK If you no longer need help, then all you needed to do was the previous instructions of telling me so. You can skip the rest of this post. If you do need help please continue with Step 2 below.*************************************************** If you still need help, I would like you to post a Reply to this topic (click the "Add Reply" button in the lo... Read more

2 more replies
Answer Match 39.48%

OK well the issue I am having is the keyboard does not work and will disable to mouse if I try to use it. Just as clarification it is not the keyboard cause I am using it right now on my linux partition.

I was using autoruns to disable what I felt were unneeded services on my computer. I don't know what killed the keyboard but if I had to guess it was the vmware keyboard service.

What happens now is I boot up windows and try to log in. When it gets to the log in screen I can use my mouse to select my username and do everything else with it, but the second I touch anything on my keyboard it will lock up the mouse and the keyboard will not function. Windows is still running though and I can shut it down by pushing the power button just once. But I cannot login to windows because the keyboard won't work. I tried booting into safe mode to see if it fixes the problem and it doesn't allow the keyboard to function either and the keyboard still kills the mouse with it.

The same thing is happening to my laptop because I was using autoruns at the same time on it to being the idiot I am.

Ok to my question is, how can I fix it? I have tried seeing if I could use a boot disk to boot into windows and re-edit the startup services, but I do not know of a way to do this at all.

Any ideas?

Thanks in advance,

A:Seem to have disabled keyboard using autoruns....

16 more replies
Answer Match 39.06%

I ran Autoruns to see if there were any startup programs I could disable. I found the following highlited in yellow which I have copied and pasted. Although the lines can be deleted they reappear again after a restart.
HKLM\System\CurrentControlSet\Control\Session Manager\BootExecute
뚠ϒ뚠ϒ File not found: ϒ뚠ϒ
뚠ϒ뚠ϒ File not found: ϒ뚠ϒ
뚠ϒ뚠ϒ File not found: ϒ뚠ϒ
뚠ϒ뚠ϒ뚠ϒ뚠ϒ File not found: ϒ뚠ϒ뚠ϒ뚠ϒ

My computer has had several crashes in the past week and I am concerned that there may be a virus or trojan that BitDefender 2013 is not finding. I have a DELL XPS 8500,i7-3770 CPU, 16 GB 1600 Mhz Ram, 2TB Seagate HD. system is Windows 7 Home Premium.

BitDefender had found Adware.Solimba.H earlier this week but had quarantined the two following entries:

File: I:\FRANK-PC\Backup Set 2012-08-05 010000\Backup Files 2012-08-05 010000\Backup files>C=>Users=>Frank=>Downloads=>SpeedFan.exe=>(NSIS o)=>lzma_solid_nsis0002 Adware.Solimba.H
File: I:\FRANK-PC\Backup Set 2012-07-22 024950\Backup Files 2012-07-22 024950\Backup files>C=>Users=>Frank=>Downloads=>SpeedFan.exe=>(NSIS o)=>lzma_solid_nsis0002

A:Autoruns entry virus or malware?

The common line of File not Found makes these leftover files. Probably an old malware removal.Delete and reboot.Lets look a bit farther.Please download MiniToolBox, save it to your desktop and run it. Checkmark the following checkboxes: Flush DNS Report IE Proxy Settings Reset IE Proxy Settings Report FF Proxy Settings Reset FF Proxy Settings List content of Hosts List IP configuration List Winsock Entries List last 10 Event Viewer log List Installed Programs List Users, Partitions and Memory size.Click Go and post the result (Result.txt). A copy of Result.txt will be saved in the same directory the tool is run. Note: When using "Reset FF Proxy Settings" option Firefox should be closed.Reboot into Safe Mode with Networking How to enter safe mode(XP/Vista)Using the F8 MethodRestart your computer. When the machine first starts again it will generally list some equipment that is installed in your machine, amount of memory, hard drives installed etc. At this point you should gently tap the F8 key repeatedly until you are presented with a Windows XP Advanced Options menu. Select the option for Safe Mode with Networking using the arrow keys. Then press enter on your keyboard to boot into Safe Mode. >>>> Download this file and doubleclick on it to run it. Allow the information to be merged with the registry.Run RKill....Download and Run RKillPlease download RKill by Grinler from one of the 4 links below and save it to your desktop.

Link 1
Link 2
Link 3
Link... Read more

9 more replies
Answer Match 39.06%

I had the following show up when running Autoruns:

HKLM\System\CurrentControlSet\Control\Session Manager\BootExecute
뚠ϒ뚠ϒ File not found: ϒ뚠ϒ
뚠ϒ뚠ϒ File not found: ϒ뚠ϒ
뚠ϒ뚠ϒ File not found: ϒ뚠ϒ
뚠ϒ뚠ϒ뚠ϒ뚠ϒ File not found: ϒ뚠ϒ뚠ϒ뚠ϒ

Some items were quarantied using ESET Online Scanner as requested by Boopme

C:\Program Files (x86)\Dell DataSafe Local Backup\hstart.exe a variant of Win32/HiddenStart.A application cleaned by deleting - quarantined
C:\Program Files (x86)\Dell DataSafe Local Backup\Components\DSUpdate\hstart.exe a variant of Win32/HiddenStart.A application cleaned by deleting - quarantined
C:\Users\Frank\Downloads\Nero- Win32/Toolbar.AskSBar application cleaned by deleting - quarantined
C:\Users\Frank\Downloads\siw-setup.exe Win32/OpenCandy application cleaned by deleting - quarantined

As I was still getting program lockups specifically Bitdefender and IE then Boopme asked to transfer to this forum and paste DDS and attach Ark and attach.txt

DDS (Ver_2011-08-26.01) - NTFSAMD64
Internet Explorer: 9.0.8112.16421
Run by Frank at 15:58:05 on 2012-08-23
Microsoft Windows 7 Home Premium 6.1.7601.1.1252.2.1033.18.16347.12350 [GMT... Read more

A:Autoruns entry virus or malware

Hello and welcome to Bleeping Computer! I am HelpBot: an automated program designed to help the Bleeping Computer Staff better assist you! This message contains very important information, so please read through all of it before doing anything. We apologize for the delay in responding to your request for help. Here at Bleeping Computer we get overwhelmed at times, and we are trying our best to keep up. Please note that your topic was not intentionally overlooked. Our mission is to help everyone in need, but sometimes it takes just a little longer to get to every request for help. No one is ignored here. To help Bleeping Computer better assist you please perform the following steps:*************************************************** In order to continue receiving help at, YOU MUST tell me if you still need help or if your issue has already been resolved on your own or through another resource! To tell me this, please click on the following link and follow the instructions there.CLICK THIS LINK >>> <<< CLICK THIS LINK If you no longer need help, then all you needed to do was the previous instructions of telling me so. You can skip the rest of this post. If you do need help please continue with Step 2 below.*************************************************** If you still need help, I would like you to post a Reply to this topic (click the "Add Reply" button in the lo... Read more

15 more replies
Answer Match 39.06%

Oh boy, how embarrassing...I was following the Startup Guide to removing non-essential startup items and looking for malware. One of the items listed was userinit.exe and when I referenced it in the database, I saw a whole slew of "X"s indicating malware. Well I quickley unchecked it and rebooted (later, I saw one entry that said don't confuse with the needed windows app in sys32 folder). Well now I can only get to the log in screen and when I select a user, I get a flash of the desktop wallpaper then it logs me off and saves settings. I have tried this under Administrator in Safe Mode as well and no luck. I can't ctrl-alt-delete or c-a-e to get to task manager or anything.I've searched and come across many posts of people losing, or having a corrupt userinit.exe, but this is different in that I (oh, how that hurts) told Autoruns to block it from start up.HELP!

A:Userinit.exe blocked by Autoruns - Self Inflicted

Can you boot into safe mode?

Can you access System Restore?


39 more replies
Answer Match 39.06%

hi guys,
i have this query in sysinternals autoruns, while i was looking this morning i noticed i have two entries for explorer.exe in my bry user account.? (as in the snapshot) i have disabled one of them(in user bry account) and rebooted and programs started up as normal. i looked in my separate user admin account and there is only one entry. just need advice please.

A:Advice on 2 entries of explorer.exe in autoruns

Could be a duplicate entry, have u tried deleting it? By any chance do you've any startup program which needs to run a x64 instance of explorer.exe ?

I just noticed, in my case, there's no listing of explorer.exe even, what would you say about that?

9 more replies
Answer Match 39.06%

HiI've just run Autoruns for the first time and when I select an item and select "Search Online" I get a dialogue box with the following message:Cannot find 'http://%1%20"/?%20 (then the name of the file I was querying). Make sure the path or Internet address is correct.This happens with every Autoruns entry I try. Is this Autoruns or something else?CheersStuartP.S. Sorry. Just noticed that I'm in the Windows 2000 forum. My computer is Windows XP Professional.

A:Autoruns Search Online Not Working

What entry are you try to find out about?

4 more replies
Answer Match 39.06%

Must have software

Autoruns for Windows

Process Monitor

More replies
Answer Match 39.06%

Hello, This is my first post on the forum as I just found it when searching google for "how to get rid of trojans". Now you understand why I have come to this site. My Norton antivirus program says that it has successfully eliminated them, but every startup, and especially when I boot firefox, I run into problems: sometimes a little 'adware remover' web browser opens up prompting me to click it "to remove infected files". So its messing with my computer and I'm trying to fix it. I recently downloaded autoruns to look for the trojan(s). Right now I'm scanning through files on my laptop (I'm using a different desktop to create this message). I just found a startup file in the logon tab called "mode shim", there is no description, the image path says the file is not found, and the file is named active glue.exe... This is by far the most suspicious startup file I found after following the instructions here: ... I couldn't find this exe file in the database, so here I am posting...Hope to hear from you soon,Thanks alotJeremy

A:Identifying Malicious Files On Autoruns

I suggest that you post your query at on the New Topic button, those folks there probably have more assistance than can be garnered in this section of the website.Thanks.Louis

2 more replies
Answer Match 39.06%

I started to use Autoruns to speed up my boot - and must have unchecked something that made my Startup folder disappear from All Programs.

A:Lost my Startup folder while using Autoruns

System Restore to before you did this??

7 more replies
Answer Match 39.06%

ello folks
i noticed this quite a while ago but forgot about it. while running autoruns i noticed that it shows rdpclip selected to run but then shows rdpclip file not found. i have searched n found that this should be there as its an inportant file. however! i checked in a backup image i did after a clean install and the file is not in that either. as far as i know from readin forums there should b 2 similar files in windows/system32 but they have never been there.
any suggestions folks?
any help is greatly apreciated as always. thanks

A:autoruns rdpclip file not found

Dear ganjiry,
Kindly look for the file here! : HKLM\System\CurrentControlSet\Control\Terminal Server\Wds\rdpwd\StartupPrograms

( Thanks to MS)

If not found, kindly get back.

2 more replies