A year back, Microsoft has added VirusTotal support into Process Explorer, now Autoruns turn. Sysinternals Autoruns, which shows auto-starting programs on your computer has got an update, major one, Autoruns v13.0 integrates VirusTotal to show status of entries with scans performed dozens of antivirus engines of VT.
VirusTotal Uploader: Initiate Virus Scan for a File from its Right Click menu in Windows
Autoruns gets VirusTotal integration
“It also includes a revamped scanning architecture that supports dynamic filters, including a free-form text filter, a greatly improved compare feature that highlights not just new items but deleted ones as well, and file saving and loading that preserves all the information of a scan” Mark Russinovich said in a blog post.
Usage: To get started, download Autoruns zip file, extract the contents to a folder and run its executable. Once the tool displays entries, right click on an entry and select ‘Check VirusTotal’, you need to agree to the terms of service of VirusTotal to use its features.
Once done, Autoruns query the Virustotal.com service and the scan result will be displayed in the VirusTotal column.
Download VirusTotal Scanner for Desktop [Unofficial]
Enabling VirusTotal scan option for all entries in Autoruns
Options > Scan Options > select ‘Check VirusTotal.com’ and ‘Submit Unknown Images’ and click on ‘Rescan’.
With this, in the Autoruns, all hashes for the entries will be submitted to VT and results will be displayed.
Download Autoruns 13.0 | 332 KB
What’s your take on this update? Let us know your thoughts in the comments.