Evading Autoruns, or: don’t rely solely on Autoruns for security

Minimalist · Nov 5, 2017

Autoruns is a popular program for Windows to analyze all the different files, programs, and other items that run on system startup.

It is probably the most used tool for that purpose, and includes lots of nice to have features such as scanning files on Virustotal, hiding Microsoft entries, or management of autorun files to disable or delete items directly from within the program.

Evading Autoruns is a research paper by Kyle Hanslovan and Chris Bisnett from Huntress that reveals multiple evasion methods that malicious users could make use of to hide activities on the computer or in a network.
Click to expand...

https://www.ghacks.net/2017/11/05/evading-autoruns-or-dont-rely-solely-on-autoruns-for-security/

itman · Nov 5, 2017

The researchers come to the conclusion that Autoruns is a great tool for enumerating startup programs and files, but that it is not a security tool.
Click to expand...

Agreed. This has always been my assumption of it.

Rasheed187 · Nov 11, 2017

Actually, just because malware might be able to bypass AutoRuns, doesn't mean it's not a security tool, it's still a must have.

Log in or Sign up

Evading Autoruns, or: don’t rely solely on Autoruns for security

Minimalist Registered Member

itman Registered Member

Rasheed187 Registered Member

Log in or Sign up

Evading Autoruns, or: don’t rely solely on Autoruns for security

Minimalist Registered Member

itman Registered Member

Rasheed187 Registered Member

Useful Searches