Quick links UVK Help: Startup entries and scheduled tasks Search carifred.com
 Home
 UVK
 Branding version
 UVK forums
 Installing UVK
 Welcome screen
 UVK immunization
 Process manager
 Modules manager 
 Startup entries
 Services/Drivers
 Streams manager
 Delete file or folder
 Scan & create log
 Run UVK Scripts
 UVK Tools
 UVK System repair
 UVK Options
 System Info
 Automatic scans
 Useful links
 Keyboard usage
 Context menu
 File signatures
 Custom commands
 UVK log
 Log analyzer
 Command line ref.
 Change log
 Script collection
 Send a comment

Would you like to brand UVK with your own logo and name? Click here!

On the Welcome screen, click Startup Entries and scheduled tasks. The UVK window will be displayed like the screenshot below:

Selecting the startup entry's line

Click the line corresponding to the startup entry you want to manage. Right-click it to open the menu.

Alternately you can just double-click the line, or press Ctrl+Enter to open the Startup Entry Properties window or use any of the hotkey combinations shown in the context menu.

You can select several lines at once by holding the Ctrl key down while clicking the lines. When several lines are selected, the action you choose will be performed to all the valid selected lines.


Getting information about a startup entry and destination file:

Click Startup Entry Properties on the upper pane or on the menu (Ctrl+Enter) to get more information about the selected startup entry or service.

A small window will popup like the picture below, with several fields containing the entry's name, the registry key where its located, the full path of the file that is ran, the command line used to run it, its description and digital signature.

Click the Go button to open the registry editor on the corresponding registry key, which is also written in the field to the left of the button. For entries on the startup folder, this will open the Windows explorer on the startup folder and select the corresponding file.

 

Click the button Submit MD5 to VirusTotal to get a VT report of the selected file's MD5 hash.

You can get even more information on the files by clicking the buttons on the context menu, which we will explain later on this page.


Deleting a  startup entry and destination file (if desired):

To delete an entry without deleting the destination file click Delete entry menu or just press Del. You can also click Delete Entry but make sure that Also delete file is unchecked or the file will be deleted!

To delete an entry and the destination file click the Delete Entry and file menu or press Ctrl+Del. Alternately, you can check Also delete file and click Delete Entry.

Deleted files are moved to the recycle bin, so if you make a mistake, you can always restore them from there.

If UVK doesn't manage to delete a file immediately, the access to the file will be blocked, and it will be deleted on next system reboot. A message box will prompt you to reboot immediately or manually later.

Before deleting a file, UVK always checks its signature, and if you're about to delete a file digitally signed by Microsoft, a message box will popup as shown in the image below.

This security feature is intended to prevent deleting system files by mistake, so when you got this message, you should click No, unless you know exactly what you're doing.

This software was created to delete virus, not system files, so, in a case like this one, if you click Yes, you're at your own risk. We won't be responsible for what may happen to your computer.


Hiding Microsoft signed files from the list:

Click Hide Microsoft signed files to reduce the number of entries in the list, making it easier to find infected entries.

Although, since UVK will have to verify the digital signatures of all the files, it may take a while to refresh the list.

Click again to re-display all the entries. 


Right click context menu:

To get more information about a startup entry, right-click the corresponding line.

A menu with several options will be displayed:

Submit file MD5 to VirusTotal (Ctrl+M):
Creates an html VT report of the selected MD5 hash(es).
VirusTotal has the most complete virus info database.

Search file name in ThreatExpert (Ctrl+T) or
Search file MD5 in ThreatExpert (Alt+T):
ThreatExpert has an excelent malware info database. If the selected file is present in this database, you can get information on which files it creates, which registry entries it changes, etc.

Search file info with google (Ctrl+G):
Makes a quick google search using the file name.

Search in runscanner database (Ctrl+R):
If the file name exists in this database, you'll get a detailed description of the file and the possible signers and paths.

Open File Location (Ctrl+L)
This option will open an Explorer window on the path where the startup entry's file is located and select it.

File Properties (Ctrl+P)
Clicking this menu item will open the startup entry's file properties dialog box, allowing you to get more information about it.


 To refresh the list, click Refresh on the upper pane or on the context menu, or just press F5.


To return to the welcome screen click Welcome screen or press Esc.

Copyright Carifred © 2010 - 2011, all rights reserved