Run Autoruns offline mode

[BDPCR]

This has gotten me out of a few snags and figured id post the guide. Autoruns the latest version can check the registry of a slaved drive allowing the manipulation of services drivers and start-up apps in a nice easy to understand GUI. It is very simple to use just make sure you have the proper permissions for the sub-folders in windows/system32/config. This has worked well for machines that fail to boot past the splash or when one tracks down a BSOD causing program that loads.

http://computer-forensics.sans.org/blog/2010/06/28/autoruns-dead-forensics/

 

[FremontPC]

Good one, BDPCR! Thanks!

 

[NYJimbo]

I LOVE Autoruns. This tool is something I use every day when cleaning infected machines. Even on machines that look ok I fire it up and prowl around and find stuff that I can kill or things that should be updated. These are the kinds of tools serious techs should learn how to use, they help you become more efficient and more thorough in your repairs.

 

[FremontPC]

I've used Soluto in the past to gain some insight as to what's loading and how long it takes, though I don't leave it on the system. Soluto itself slows down the boot process, so you have to take it with a grain of salt. Offline of course is no go.

 

[BDPCR]

Autoruns is quite nice, and easy to use, have not tried Soluto. I'm working making my own app that integrates autoruns and other tools to fix those darn driver and service issues quickly.

 

[glricht]

... I'm working making my own app that integrates autoruns and other tools to fix those darn driver and service issues quickly.

Have you tried Nick's D7 tool? If not, give it a try. It's the swiss-army knife for technicians and it probably already has what you're trying to accomplish. (If not, send Nick a note; he's very receptive to new ideas to help us do what we do.)

 

[HCHTech]

Excellent news about Autoruns. -1 for Soluto. This is a heavy software that records your boot process, then analyzes it using their online database. Requires a registration, of course, and then nags you for additional services.

The information it provides is good, but it comes with too much baggage, IMO.

 

[BDPCR]

Have you tried Nick's D7 tool? If not, give it a try. It's the swiss-army knife for technicians and it probably already has what you're trying to accomplish. (If not, send Nick a note; he's very receptive to new ideas to help us do what we do.)

I have and its very nice, Nick is a fantastic guy.