Subject: AutoRuns 11.50 - Vista File Signing Problem
Posted: 29 April 2013 at 3:28pm
I found an old Vista Home Premium 32bit laptop but I can't reproduce this.My Registry entries:
Windows Registry Editor Version 5.00
[HKEY_CURRENT_USER\Software\Sysinternals\AutoRuns]
"EulaAccepted"=dword:00000001
"showall"=dword:00000000
"shownomicrosoft"=dword:00000000
"shownowindows"=dword:00000000
"verifysignatures"=dword:00000001
"font"=hex:f5,ff,ff,ff,00,00,00,00,00,00,00,00,00,00,00,00,90,01,00,00,00,00,\
00,00,03,02,01,22,54,00,61,00,68,00,6f,00,6d,00,61,00,00,00,64,00,65,00,72,\
00,6e,00,00,00,52,00,6f,00,6d,00,61,00,6e,00,00,00,53,00,63,00,72,00,69,00,\
70,00,74,00,00,00,43,00,6f,00,75,00,72,00,69,00,65,00,00,00
"column0"=dword:000000f4
"columnPos0"=dword:00000000
"column1"=dword:000000ff
"columnPos1"=dword:00000001
"column2"=dword:000000a2
"columnPos2"=dword:00000002
"column3"=dword:00000113
"columnPos3"=dword:00000003
"xpos"=dword:0000003c
"ypos"=dword:00000011
"width"=dword:00000469
"height"=dword:00000300
"column4"=dword:00000091
"columnPos4"=dword:00000004
Is this happening with analysing an offline system?