Quantcast
Viewing all articles
Browse latest Browse all 10386

Autoruns : AutoRuns 11.50 - Vista File Signing Problem

Author: Intuit
Subject: AutoRuns 11.50 - Vista File Signing Problem
Posted: 28 April 2013 at 6:09pm

First, thanks for the decade of all the wonderfully useful, great, free utilities.

Probably already aware of this issue and briefly looked but didn't see it yet posted.


 Updated from 11.31 to 11.50 yesterday. 

Different from prior version, 11.50 is *consistently* reporting some Microsoft-signed files as "(Not Verified)".

SigCheck (v1.91) confirms that they are Microsoft signed.

It for example, wouldn't verify UserInit.Exe, RDPClip.Exe while verifying WinLogon.Exe.

Refresh, no change.  I've only run it on a four systems as of yet.  The W7 x64 didn't have issue.  All Vista x64 did.  In every case, ran from an elevated 64-bit CMD.Exe prompt.  Doesn't seem to matter whether the program has access to the internet. 



Relevant Registry Entries for AutoRuns:

Windows Registry Editor Version 5.00

[HKEY_CURRENT_USER\Software\Sysinternals\Autoruns]
"showall"=dword:00000000
"shownomicrosoft"=dword:00000000
"showservices"=dword:00000001
"showunsigned"=dword:00000001
"showexplorer"=dword:00000001
"showwinlogon"=dword:00000001
"showappinit"=dword:00000001
"column0"=dword:000000ce
"columnPos0"=dword:00000000
"column1"=dword:00000091
"columnPos1"=dword:00000001
"column2"=dword:00000091
"columnPos2"=dword:00000002
"column3"=dword:00000297
"columnPos3"=dword:00000003
"xpos"=dword:00000027
"ypos"=dword:0000001f
"width"=dword:00000555
"height"=dword:00000252
"verifysignatures"=dword:00000001
"font"=hex:f5,ff,ff,ff,00,00,00,00,00,00,00,00,00,00,00,00,90,01,00,00,00,00,\
00,00,00,00,00,00,4d,00,53,00,20,00,53,00,61,00,6e,00,73,00,20,00,53,00,65,\
00,72,00,69,00,66,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,\
00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00
"EulaAccepted"=dword:00000001
"google"=dword:00000001
"onlinesearchcommand"="http://search.msn.com/results.aspx?q="
"shownowindows"=dword:00000001
"OfflineWindowsRoot"="d:\\windows"
"OfflineUserProfile"="d:\\documents and settings\\new user"





Viewing all articles
Browse latest Browse all 10386

Trending Articles