RegRunner
| RegRunner (formerly RegRun)
|
|
|---|---|
|
|
 RegRunner 3.2.2009.4 under Windows |
|
| Basic data
|
|
| developer | Bernd Dietzel |
| Current version | 3.2.2009.5 (July 18, 2009) |
| operating system | Windows , Linux |
| programming language | Embarcadero Delphi |
| License | GPL |
| German speaking | No |
RegRunner (English for "registration database" and "Renner", "starter") is a computer program for monitoring the most important autostart entries of Microsoft Windows , in particular the registration database . It also monitors changes in manually entered files at the request of the user.
Technical details
Malicious programs such as computer viruses or Trojans often try to change the Windows registry database and autostart files so that they can be reactivated each time the computer is restarted. RegRunner warns the user by means of a pop-up window as soon as a new program is entered in the registration database.
All running processes , autostart folders and system files (such as the files "System. Ini " and " AUTOEXEC.BAT ") are also monitored . All occurring events can be found in a protocol log file .
Features and functions
- Freely editable lists of the autostart entries to be monitored .
- Display of the start and stop time of the currently running and the tasks that have already ended .
- Displays the date when a certain program was discovered for the first time, if it occurs again.
- Search engines query whether a certain program is trustworthy or malware .
- Automatic deletion of system registry entries.
- Backup and restore of system registry entries.
- Start Regedit , Msconfig and Task Manager .
history
The project, written in the Borland Delphi programming language, was developed in 2004. Initially only intended for the author's own use, the computer magazine PC-Welt became aware of this program and published it several times on their magazine CDs and their Internet portal .
The first versions of the program were initially called "RegRun", but since this led to confusion with a program of the same name (from Greatis-Software from Turgeneva, Russian Federation), it was renamed "RegRunner" by the author on December 9, 2007.
The program originally only had one simple task: to automatically monitor the key "HKLM \ SOFTWARE \ Microsoft \ Windows \ CurrentVersion \ Run" for changes. Previously, you had to start Regedit and laboriously click through all the paths in the registry to get there. Since this procedure was very tedious - and this hidden path is completely unknown to many users (to this day) - this registry key has always been a popular starting point for malware . RegRunner takes on this task fully automatically and thus relieves the user.
Over the years, the functions listed above were gradually added.
In the meantime RegRunner had an implemented function to give itself a random file name "XYZABCDE.EXE" in order to protect itself against deletion by malware. However, this function led to problems with both virus scanners and Windows Vista , so it was removed again for reasons of compatibility .
The author published the first Linux version of the program on his software website on September 14, 2010 .
The program contains licensing information on the GNU General Public License and Open Source .
Web links
Individual evidence
- ↑ AOL Computers and Security
- ↑ PC-Welt.de: Article on RegRunner 3.2.2009.4 from July 16, 2009
- ↑ Issue archive 22, July 2008: "Download of the month" page 22 (PDF)
- ↑ pctipp.ch: Article on RegRunner from June 27, 2008
- ↑ inspectmygadget.com: "Windows Software: Monitor changes to your registry with RegRunner 2008"
- ↑ Softpedia.com: "BD RegRun 2007" ( Memento of the original from February 20, 2009 in the Internet Archive ) Info: The archive link was inserted automatically and has not yet been checked. Please check the original and archive link according to the instructions and then remove this notice.
