Startups

The Startups tab displays information on startup processes on the inspected computer.

Startup information is displayed on the tabs that contain the following details:

Tab

Data

General

•WMI:

▪path,

▪namespace,

▪CLSID,

▪class,

▪value,

▪working directory;

•Winsock name providers:

▪name,

▪launch,

▪path,

▪company,

▪signed,

▪reputation;

•Winsock local name providers:

▪name,

▪launch,

▪path,

▪company,

▪signed,

▪reputation.

Registry startups

This tab contains the list of startup items. Click an item to view a table with the following details:

•key,

•path,

•company,

•signed,

•reputation.

Shortcuts

Click a shortcut name to view a table with the following details:

•file,

•command.

You can sort the table data in descending/ascending order by clicking toggle in the column of the table containing the data you want the table to be sorted by.

You can search for data across the Startups and Shortcuts sections. To do it, enter your search query in the search_gray Search field above the list and press ENTER.

info

FixIt! allows you to use wildcard characters ‘*’ and ‘?’ in searches. The asterisk ‘*’ stands for any number of characters, including zero, and the question mark ‘?’ stands for any single character.

The files* search query will return files with such names as files, files111, files systems, files_more_worlds, etc.

The files? query will return files with such names as files1, filess, files_, but not files.

You can view details on the file by clicking its name of the path to it in the table.

Tab

Available parameters

Information

On the General tab:

•name,

•state,

•WOW64,

•active,

•GUID,

•path.

On the Registry startups tab:

•status,

•SID,

•key,

•value,

•object.

On the Shortcuts tab:

•status,

•name,

•path,

•arguments,

•target,

•data.

File

•path;

•status:

▪certificate,

▪file,

▪type,

▪cloud,

▪software type;

•hash:

▪SHA1,

▪SHA256;

▪a link to VirusTotal;

•properties:

▪size,

▪date created,

▪last modified,

▪last accessed,

▪date created;

•attributes:

▪value,

▪archive,

▪security;

•version:

▪description,

▪version,

▪company,

▪origin name.

Certificates

•status;

•date and time;

•certificates:

▪subject,

▪issuer,

▪valid from,

▪valid to,

▪SHA1 fingerprint,

▪SHA256 fingerprint,

▪serial number,

▪name.