Sysinternals has released a new version of Autoruns which they gave as version number 8.4. The program, as the name suggests, shows all the processes that are automatically launched upon system startup. In addition, all Browser Helper Objects and Scheduled Tasks are also shown in separate tabs. The program comes with a graphical or command-line interface that can be processed in a login script. The announcement looks like this:
This version of Autoruns adds enumeration of kernel-mode drivers, yet another attack vector being used by malware.
|Operating systems||Windows 9x, Windows NT, Windows 2000, Windows XP, Windows Server 2003|