Jump to content

Recommended Posts

Posted

Correction Update - see Edit6

"The mediocre teacher tells. The Good teacher explains. The superior teacher demonstrates. The great teacher inspires." -William Arthur Ward

Posted

When i uninstall a driver i get a message of StartupMonitor that there is a new entry : grpconv.exe -o

But after accept it, i try your script for find his reg key, but unsuccessfully...

AutoIt 3.3.14.2 X86 - SciTE 3.6.0WIN 8.1 X64 - Other Example Scripts

Posted

wakillon,

I've seen that exact thing before from StartupMonitor. I was never able to track it down doing a manual search.

Most of the time it's located here when activated:

HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\RunOnce: [GrpConv] grpconv.exe -o

I think what might be happening is it gets deleted after it writes it. I don't know .. strange.

I never did extensive testing to find out for sure.

It's an old app from older OS's like 3.1 thru 98, mainly for conversion to a new OS from 3.1.

It deals with "program groups" which is not needed in newer OS's. It's never caused me any troubles though.

"The mediocre teacher tells. The Good teacher explains. The superior teacher demonstrates. The great teacher inspires." -William Arthur Ward

  • 3 weeks later...
Posted

Updated 1st post - see Edit 7

"The mediocre teacher tells. The Good teacher explains. The superior teacher demonstrates. The great teacher inspires." -William Arthur Ward

  • 2 weeks later...
Posted

Updated 1st post - see Edit8

"The mediocre teacher tells. The Good teacher explains. The superior teacher demonstrates. The great teacher inspires." -William Arthur Ward

Posted

Updated - see Edit9

"The mediocre teacher tells. The Good teacher explains. The superior teacher demonstrates. The great teacher inspires." -William Arthur Ward

Posted

Nice Example of using Native Code!

UDF List:

 
_AdapterConnections()_AlwaysRun()_AppMon()_AppMonEx()_ArrayFilter/_ArrayReduce_BinaryBin()_CheckMsgBox()_CmdLineRaw()_ContextMenu()_ConvertLHWebColor()/_ConvertSHWebColor()_DesktopDimensions()_DisplayPassword()_DotNet_Load()/_DotNet_Unload()_Fibonacci()_FileCompare()_FileCompareContents()_FileNameByHandle()_FilePrefix/SRE()_FindInFile()_GetBackgroundColor()/_SetBackgroundColor()_GetConrolID()_GetCtrlClass()_GetDirectoryFormat()_GetDriveMediaType()_GetFilename()/_GetFilenameExt()_GetHardwareID()_GetIP()_GetIP_Country()_GetOSLanguage()_GetSavedSource()_GetStringSize()_GetSystemPaths()_GetURLImage()_GIFImage()_GoogleWeather()_GUICtrlCreateGroup()_GUICtrlListBox_CreateArray()_GUICtrlListView_CreateArray()_GUICtrlListView_SaveCSV()_GUICtrlListView_SaveHTML()_GUICtrlListView_SaveTxt()_GUICtrlListView_SaveXML()_GUICtrlMenu_Recent()_GUICtrlMenu_SetItemImage()_GUICtrlTreeView_CreateArray()_GUIDisable()_GUIImageList_SetIconFromHandle()_GUIRegisterMsg()_GUISetIcon()_Icon_Clear()/_Icon_Set()_IdleTime()_InetGet()_InetGetGUI()_InetGetProgress()_IPDetails()_IsFileOlder()_IsGUID()_IsHex()_IsPalindrome()_IsRegKey()_IsStringRegExp()_IsSystemDrive()_IsUPX()_IsValidType()_IsWebColor()_Language()_Log()_MicrosoftInternetConnectivity()_MSDNDataType()_PathFull/GetRelative/Split()_PathSplitEx()_PrintFromArray()_ProgressSetMarquee()_ReDim()_RockPaperScissors()/_RockPaperScissorsLizardSpock()_ScrollingCredits_SelfDelete()_SelfRename()_SelfUpdate()_SendTo()_ShellAll()_ShellFile()_ShellFolder()_SingletonHWID()_SingletonPID()_Startup()_StringCompact()_StringIsValid()_StringRegExpMetaCharacters()_StringReplaceWholeWord()_StringStripChars()_Temperature()_TrialPeriod()_UKToUSDate()/_USToUKDate()_WinAPI_Create_CTL_CODE()_WinAPI_CreateGUID()_WMIDateStringToDate()/_DateToWMIDateString()Au3 script parsingAutoIt SearchAutoIt3 PortableAutoIt3WrapperToPragmaAutoItWinGetTitle()/AutoItWinSetTitle()CodingDirToHTML5FileInstallrFileReadLastChars()GeoIP databaseGUI - Only Close ButtonGUI ExamplesGUICtrlDeleteImage()GUICtrlGetBkColor()GUICtrlGetStyle()GUIEventsGUIGetBkColor()Int_Parse() & Int_TryParse()IsISBN()LockFile()Mapping CtrlIDsOOP in AutoItParseHeadersToSciTE()PasswordValidPasteBinPosts Per DayPreExpandProtect GlobalsQueue()Resource UpdateResourcesExSciTE JumpSettings INISHELLHOOKShunting-YardSignature CreatorStack()Stopwatch()StringAddLF()/StringStripLF()StringEOLToCRLF()VSCROLLWM_COPYDATAMore Examples...

Updated: 22/04/2018

Posted

Hello,

My fifty cents:

A collection of autostart location: http://gladiator-antivirus.com/forum/index.php?showtopic=24610

and Silentrunners lauchpoints: http://www.silentrunners.org/launchpoints.html

the french page of ZHPdiag lists many lauchpoints http://www.premiumorange.com/zeb-help-process/zhpdiag.html

regards

Posted

P0lo,

Thanks for the links!

I'm very aware that Windows is full of holes.

Just when you think they are all plugged up, another one appears.

This script was never meant to be all conclusive.

It's just a quick look at what might be going on with a PC.

I will be adding a little more to it when I have the time.

By the way, this is an example script. Feel free to add what you wish to it.

"The mediocre teacher tells. The Good teacher explains. The superior teacher demonstrates. The great teacher inspires." -William Arthur Ward

  • 2 weeks later...
Posted

Updated 1st post

"The mediocre teacher tells. The Good teacher explains. The superior teacher demonstrates. The great teacher inspires." -William Arthur Ward

Posted (edited)

Good stuff ripdad

Two thoughts for you on your right click menus

When on the startup page grey out the common startups text as you are viewing that page and the reverse when on the running programs page

I kept clicking on the common startups as i had no idea i was on it already.

Last thought maybe a refresh or reload in the right click menu just in case you have deleted some startups?

EDIT

another thing i found if you copy to clipboard on the registry ones you get this result when you paste it

HKEY_USERS64\S-1-5-19\Software\Microsoft\Windows\CurrentVersion\RunOnce|||||| << im assuming the "|" are because of the extra info for other things?

and would it be possible to select all and copy to clipboard instead of one by one?

Great stuff though

Chimaera

Edited by Chimaera
Posted

Thanks Chimaera.

Right-Click Menu:

Common Startups is both the refresh and to switch back and forth between Running Programs.

It would be the same function no matter how it was worded. (I'll give it some more thought)

It will automatically refresh itself when an item is deleted from Common Startups.

ClipBoard:

First issue has been revised. (Guess I was asleep on that one -or- it wasn't a top priority)

On the second issue, I'm not sure how that would affect other functions. I need to test and see.

I have added a new function, _ListDump. It will save both list to a log file with date/time.

Would that solve the second issue, or do you need that specifically?

On another note:

1) I finally tracked down a flicker problem to GUICtrlSetBkColor()in one of the loops.

I guess I'll have to rethink the color scheme again or do away with it altogether.

2) The WMI function for Running Programs is quite sluggish because it's sifting through 700 to 3500 entries.

So, thats not helping the previous issue either. Someone might ask why I'm using it instead of a built-in

function. The answer is, it's one heck of a function. It does all the queries automatically. All I have

to do is collect the data.

It returns all loaded dll's, drv's, exe's and a few extensions I haven't seen before.

Along with that, it returns the PID of each of those along with it's exact path.

I can match the PID of dll's and drv's to the executable that started it, within the same function.

I don't know of any function that can do all that. Until I find something to replace it, I'm sticking to it.

As far as it being a little slow ... I'm in no hurry anyways.

Anyways ... enough of my rattling. First post updated.

"The mediocre teacher tells. The Good teacher explains. The superior teacher demonstrates. The great teacher inspires." -William Arthur Ward

Posted

update

"The mediocre teacher tells. The Good teacher explains. The superior teacher demonstrates. The great teacher inspires." -William Arthur Ward

Posted

Updated 1st post.

Please report any bugs, quirks or crashes. Thanks.

"The mediocre teacher tells. The Good teacher explains. The superior teacher demonstrates. The great teacher inspires." -William Arthur Ward

  • 2 weeks later...
Posted

Ripdad

Just tested your new version... Wow!

I'm still reading through all that code analyzing it line by line and boy, all I can say is nice work!

Must have taken forever to do all this research as this implementation seems rather flawless minus the color scheme :huh2: .

Yes, it's a bit sluggish but it works...

Posted

MindlessGenius - Thanks. Made you change the colors? <grin>

Chimaera - Thanks. My production script is twice the lines. Might have to change the name!

I will be making some minor updates soon, after I re-read the script and see if my logic was logical. <eh?>

"The mediocre teacher tells. The Good teacher explains. The superior teacher demonstrates. The great teacher inspires." -William Arthur Ward

Posted

Updated first post. Please report any problems.

"The mediocre teacher tells. The Good teacher explains. The superior teacher demonstrates. The great teacher inspires." -William Arthur Ward

Posted

Updated first post. Please report any problems.

Minor bug

Line 288

$string & '.exe'; out-->somefile.exe

I'm guessing it should be

$string &= '.exe'; out-->somefile.exe

and a BIG thanks this is a great bit of code you've produced!

Storm-E

Create an account or sign in to comment

You need to be a member in order to leave a comment

Create an account

Sign up for a new account in our community. It's easy!

Register a new account

Sign in

Already have an account? Sign in here.

Sign In Now
  • Recently Browsing   0 members

    • No registered users viewing this page.
×
×
  • Create New...