Rocksolid Light

Welcome to Rocksolid Light

mail  files  register  newsreader  groups  login

Message-ID:  

Kill Ugly Processor Architectures -- Karl Lehenbauer

computers / alt.comp.os.windows-10 / Re: What is creating this daily MicrosoftEdgeAutoLaunch?

SubjectAuthor
* What is creating this daily MicrosoftEdgeAutoLaunch?Peter
+* What is creating this daily MicrosoftEdgeAutoLaunch?Paul
|`- What is creating this daily MicrosoftEdgeAutoLaunch?...w¡ñ§±¤ñ
`* What is creating this daily MicrosoftEdgeAutoLaunch?KenW
 `* What is creating this daily MicrosoftEdgeAutoLaunch?Paul
  `- What is creating this daily MicrosoftEdgeAutoLaunch?KenW

1
What is creating this daily MicrosoftEdgeAutoLaunch?

<uikcat$2lkj3$1@dont-email.me>

  copy mid

https://news.novabbs.org/computers/article-flat.php?id=75505&group=alt.comp.os.windows-10#75505

  copy link   Newsgroups: alt.comp.os.windows-10
Path: i2pn2.org!rocksolid2!news.neodome.net!news.mixmin.net!eternal-september.org!feeder3.eternal-september.org!news.eternal-september.org!.POSTED!not-for-mail
From: confused@nospam.net (Peter)
Newsgroups: alt.comp.os.windows-10
Subject: What is creating this daily MicrosoftEdgeAutoLaunch?
Date: Fri, 10 Nov 2023 04:42:06 +0000
Organization: -
Lines: 7
Message-ID: <uikcat$2lkj3$1@dont-email.me>
MIME-Version: 1.0
Content-Type: text/plain; charset=us-ascii
Content-Transfer-Encoding: 7bit
Injection-Date: Fri, 10 Nov 2023 04:42:06 -0000 (UTC)
Injection-Info: dont-email.me; posting-host="1579e17a06f522428f76a646263fbe08";
logging-data="2806371"; mail-complaints-to="abuse@eternal-september.org"; posting-account="U2FsdGVkX1+DvW26Fh1uq+7pBI3voPV+"
Cancel-Lock: sha1:qedwPzsDGJOARoL/5xNFLDHXEEg=
X-No-Archive: yes
X-Newsreader: Forte Agent 3.3/32.846
 by: Peter - Fri, 10 Nov 2023 04:42 UTC

Every couple of days or so I get a Startup Entry warning
HKCU:Run
MicrosoftEdgeAutoLaunch_A83E2D204AB19DCE5550F9BE74E84F70
"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --no-startup-window --win-session-start /prefetch:5

What exactly is causing this entry to be running?
I almost never use Microsoft Edge so it's not me doing it.

Re: What is creating this daily MicrosoftEdgeAutoLaunch?

<uikqqd$2o9ni$1@dont-email.me>

  copy mid

https://news.novabbs.org/computers/article-flat.php?id=75506&group=alt.comp.os.windows-10#75506

  copy link   Newsgroups: alt.comp.os.windows-10
Path: i2pn2.org!i2pn.org!news.hispagatos.org!eternal-september.org!feeder3.eternal-september.org!news.eternal-september.org!.POSTED!not-for-mail
From: nospam@needed.invalid (Paul)
Newsgroups: alt.comp.os.windows-10
Subject: Re: What is creating this daily MicrosoftEdgeAutoLaunch?
Date: Fri, 10 Nov 2023 03:49:15 -0500
Organization: A noiseless patient Spider
Lines: 38
Message-ID: <uikqqd$2o9ni$1@dont-email.me>
References: <uikcat$2lkj3$1@dont-email.me>
MIME-Version: 1.0
Content-Type: text/plain; charset=utf-8
Content-Transfer-Encoding: 7bit
Injection-Date: Fri, 10 Nov 2023 08:49:17 -0000 (UTC)
Injection-Info: dont-email.me; posting-host="d79810c39accd51470087e8518fd796f";
logging-data="2893554"; mail-complaints-to="abuse@eternal-september.org"; posting-account="U2FsdGVkX196RExAvcBviaO9NmO45pNIw3Nfy9rCm4U="
User-Agent: Ratcatcher/2.0.0.25 (Windows/20130802)
Cancel-Lock: sha1:A094sxG/WC53/OAK3kKDS7Nu1r4=
In-Reply-To: <uikcat$2lkj3$1@dont-email.me>
Content-Language: en-US
 by: Paul - Fri, 10 Nov 2023 08:49 UTC

On 11/9/2023 11:42 PM, Peter wrote:
> Every couple of days or so I get a Startup Entry warning
> HKCU:Run
> MicrosoftEdgeAutoLaunch_A83E2D204AB19DCE5550F9BE74E84F70
> "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --no-startup-window --win-session-start /prefetch:5
>
> What exactly is causing this entry to be running?
> I almost never use Microsoft Edge so it's not me doing it.
>

Start by checking the Settings panel.

[Picture]

https://i.postimg.cc/dVn15HFD/msedge-auto-start-W10.gif

There are also evil ways of doing it, and since MSEdge uses
multiple pieces of software, there are also "tag-team" approaches
to persistence. A person could use a Scheduled Task, to attack
the computer every three days, as an example.

After you use the sliders, have a look this way (admin window).
Run one before using sliders, one after using sliders. The entry
in question is near the beginning on mine.

C:\Windows\system32>schtasks.exe

Folder: \
TaskName Next Run Time Status
======================================== ====================== ===============
MicrosoftEdgeUpdateTaskMachineCore 11/11/2023 4:50:58 AM Ready \
MicrosoftEdgeUpdateTaskMachineUA 11/10/2023 9:20:58 AM Ready \___ Examples of
MicrosoftEdgeUpdateTaskUserS-1-5-21-2032 11/11/2023 4:50:57 AM Running / tricks
MicrosoftEdgeUpdateTaskUserS-1-5-21-2032 11/10/2023 9:20:58 AM Ready /
OneDrive Reporting Task-S-1-5-21-2032382 11/11/2023 7:45:41 AM Ready
OneDrive Standalone Update Task-S-1-5-21 11/11/2023 6:14:11 AM Ready

Paul

Re: What is creating this daily MicrosoftEdgeAutoLaunch?

<i2cski5lcfgsppvd9bfuhj09msoahn7knt@4ax.com>

  copy mid

https://news.novabbs.org/computers/article-flat.php?id=75528&group=alt.comp.os.windows-10#75528

  copy link   Newsgroups: alt.comp.os.windows-10
Path: i2pn2.org!i2pn.org!weretis.net!feeder8.news.weretis.net!feeder1.feed.usenet.farm!feed.usenet.farm!peer02.ams4!peer.am4.highwinds-media.com!peer03.iad!feed-me.highwinds-media.com!news.highwinds-media.com!fx43.iad.POSTED!not-for-mail
From: ken1943@invalid.net (KenW)
Newsgroups: alt.comp.os.windows-10
Subject: Re: What is creating this daily MicrosoftEdgeAutoLaunch?
Organization: Home
Message-ID: <i2cski5lcfgsppvd9bfuhj09msoahn7knt@4ax.com>
References: <uikcat$2lkj3$1@dont-email.me>
User-Agent: ForteAgent/8.00.32.1272
MIME-Version: 1.0
Content-Type: text/plain; charset=us-ascii
Content-Transfer-Encoding: 7bit
Lines: 14
X-Complaints-To: abuse(at)newshosting.com
NNTP-Posting-Date: Fri, 10 Nov 2023 13:30:42 UTC
Date: Fri, 10 Nov 2023 06:30:42 -0700
X-Received-Bytes: 1216
 by: KenW - Fri, 10 Nov 2023 13:30 UTC

On Fri, 10 Nov 2023 04:42:06 +0000, Peter <confused@nospam.net> wrote:

>Every couple of days or so I get a Startup Entry warning
> HKCU:Run
> MicrosoftEdgeAutoLaunch_A83E2D204AB19DCE5550F9BE74E84F70
> "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --no-startup-window --win-session-start /prefetch:5
>
>What exactly is causing this entry to be running?
>I almost never use Microsoft Edge so it's not me doing it.

I used Autoruns to kill it if I remember right

KenW

Re: What is creating this daily MicrosoftEdgeAutoLaunch?

<uileak$2s592$1@dont-email.me>

  copy mid

https://news.novabbs.org/computers/article-flat.php?id=75532&group=alt.comp.os.windows-10#75532

  copy link   Newsgroups: alt.comp.os.windows-10
Path: i2pn2.org!i2pn.org!weretis.net!feeder6.news.weretis.net!feeder8.news.weretis.net!eternal-september.org!feeder3.eternal-september.org!news.eternal-september.org!.POSTED!not-for-mail
From: nospam@needed.invalid (Paul)
Newsgroups: alt.comp.os.windows-10
Subject: Re: What is creating this daily MicrosoftEdgeAutoLaunch?
Date: Fri, 10 Nov 2023 09:22:12 -0500
Organization: A noiseless patient Spider
Lines: 25
Message-ID: <uileak$2s592$1@dont-email.me>
References: <uikcat$2lkj3$1@dont-email.me>
<i2cski5lcfgsppvd9bfuhj09msoahn7knt@4ax.com>
MIME-Version: 1.0
Content-Type: text/plain; charset=utf-8
Content-Transfer-Encoding: 7bit
Injection-Date: Fri, 10 Nov 2023 14:22:12 -0000 (UTC)
Injection-Info: dont-email.me; posting-host="d79810c39accd51470087e8518fd796f";
logging-data="3020066"; mail-complaints-to="abuse@eternal-september.org"; posting-account="U2FsdGVkX18Ju12rSQuLpuXRqiRsjqdHCpUeBKoQ1mE="
User-Agent: Ratcatcher/2.0.0.25 (Windows/20130802)
Cancel-Lock: sha1:jsOrpU0o38tiw4s7uE0DNDRhWP0=
In-Reply-To: <i2cski5lcfgsppvd9bfuhj09msoahn7knt@4ax.com>
Content-Language: en-US
 by: Paul - Fri, 10 Nov 2023 14:22 UTC

On 11/10/2023 8:30 AM, KenW wrote:
> On Fri, 10 Nov 2023 04:42:06 +0000, Peter <confused@nospam.net> wrote:
>
>> Every couple of days or so I get a Startup Entry warning
>> HKCU:Run
>> MicrosoftEdgeAutoLaunch_A83E2D204AB19DCE5550F9BE74E84F70
>> "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --no-startup-window --win-session-start /prefetch:5
>>
>> What exactly is causing this entry to be running?
>> I almost never use Microsoft Edge so it's not me doing it.
>
> I used Autoruns to kill it if I remember right
>
>
> KenW
>

Some pests, will put yet another item back, when you
use an Autoruns tick box to disable it :-)

That doesn't mean it would necessarily happen in this case,
but it's a possibility.

Paul

Re: What is creating this daily MicrosoftEdgeAutoLaunch?

<85mski5ibt1pq06k1su1jjs6al1ahak9p3@4ax.com>

  copy mid

https://news.novabbs.org/computers/article-flat.php?id=75535&group=alt.comp.os.windows-10#75535

  copy link   Newsgroups: alt.comp.os.windows-10
Path: i2pn2.org!i2pn.org!usenet.blueworldhosting.com!diablo1.usenet.blueworldhosting.com!peer02.iad!feed-me.highwinds-media.com!news.highwinds-media.com!fx14.iad.POSTED!not-for-mail
From: ken1943@invalid.net (KenW)
Newsgroups: alt.comp.os.windows-10
Subject: Re: What is creating this daily MicrosoftEdgeAutoLaunch?
Organization: Home
Message-ID: <85mski5ibt1pq06k1su1jjs6al1ahak9p3@4ax.com>
References: <uikcat$2lkj3$1@dont-email.me> <i2cski5lcfgsppvd9bfuhj09msoahn7knt@4ax.com> <uileak$2s592$1@dont-email.me>
User-Agent: ForteAgent/8.00.32.1272
MIME-Version: 1.0
Content-Type: text/plain; charset=us-ascii
Content-Transfer-Encoding: 7bit
Lines: 32
X-Complaints-To: abuse(at)newshosting.com
NNTP-Posting-Date: Fri, 10 Nov 2023 16:22:14 UTC
Date: Fri, 10 Nov 2023 09:22:15 -0700
X-Received-Bytes: 1583
 by: KenW - Fri, 10 Nov 2023 16:22 UTC

On Fri, 10 Nov 2023 09:22:12 -0500, Paul <nospam@needed.invalid>
wrote:

>On 11/10/2023 8:30 AM, KenW wrote:
>> On Fri, 10 Nov 2023 04:42:06 +0000, Peter <confused@nospam.net> wrote:
>>
>>> Every couple of days or so I get a Startup Entry warning
>>> HKCU:Run
>>> MicrosoftEdgeAutoLaunch_A83E2D204AB19DCE5550F9BE74E84F70
>>> "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --no-startup-window --win-session-start /prefetch:5
>>>
>>> What exactly is causing this entry to be running?
>>> I almost never use Microsoft Edge so it's not me doing it.
>>
>> I used Autoruns to kill it if I remember right
>>
>>
>> KenW
>>
>
>Some pests, will put yet another item back, when you
>use an Autoruns tick box to disable it :-)
>
>That doesn't mean it would necessarily happen in this case,
>but it's a possibility.
>
> Paul

OK

KenW

Re: What is creating this daily MicrosoftEdgeAutoLaunch?

<uiltls$2v8bt$1@dont-email.me>

  copy mid

https://news.novabbs.org/computers/article-flat.php?id=75543&group=alt.comp.os.windows-10#75543

  copy link   Newsgroups: alt.comp.os.windows-10
Path: i2pn2.org!rocksolid2!news.neodome.net!news.mixmin.net!eternal-september.org!feeder2.eternal-september.org!news.eternal-september.org!.POSTED!not-for-mail
From: winstonmvp@gmail.com (...w¡ñ§±¤ñ)
Newsgroups: alt.comp.os.windows-10
Subject: Re: What is creating this daily MicrosoftEdgeAutoLaunch?
Date: Fri, 10 Nov 2023 11:44:10 -0700
Organization: windowsunplugged.com
Lines: 49
Message-ID: <uiltls$2v8bt$1@dont-email.me>
References: <uikcat$2lkj3$1@dont-email.me> <uikqqd$2o9ni$1@dont-email.me>
MIME-Version: 1.0
Content-Type: text/plain; charset=UTF-8; format=flowed
Content-Transfer-Encoding: 8bit
Injection-Date: Fri, 10 Nov 2023 18:44:12 -0000 (UTC)
Injection-Info: dont-email.me; posting-host="f25eb60d1bf4789d23a8281446a3b199";
logging-data="3121533"; mail-complaints-to="abuse@eternal-september.org"; posting-account="U2FsdGVkX19j8t3oi44pbjE7L5tELnM7DV7bzSpsjpE="
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:91.0) Gecko/20100101
Firefox/91.0 SeaMonkey/2.53.17.1
Cancel-Lock: sha1:/qNUhnUZOBifmwJbFuFY1cTxrVU=
In-Reply-To: <uikqqd$2o9ni$1@dont-email.me>
 by: ...w¡ñ§±¤ñ - Fri, 10 Nov 2023 18:44 UTC

Paul wrote on 11/10/23 1:49 AM:
> On 11/9/2023 11:42 PM, Peter wrote:
>> Every couple of days or so I get a Startup Entry warning
>> HKCU:Run
>> MicrosoftEdgeAutoLaunch_A83E2D204AB19DCE5550F9BE74E84F70
>> "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --no-startup-window --win-session-start /prefetch:5
>>
>> What exactly is causing this entry to be running?
>> I almost never use Microsoft Edge so it's not me doing it.
>>
>
> Start by checking the Settings panel.
>
> [Picture]
>
> https://i.postimg.cc/dVn15HFD/msedge-auto-start-W10.gif
>
> There are also evil ways of doing it, and since MSEdge uses
> multiple pieces of software, there are also "tag-team" approaches
> to persistence. A person could use a Scheduled Task, to attack
> the computer every three days, as an example.
>
> After you use the sliders, have a look this way (admin window).
> Run one before using sliders, one after using sliders. The entry
> in question is near the beginning on mine.
>
> C:\Windows\system32>schtasks.exe
>
> Folder: \
> TaskName Next Run Time Status
> ======================================== ====================== ===============
> MicrosoftEdgeUpdateTaskMachineCore 11/11/2023 4:50:58 AM Ready \
> MicrosoftEdgeUpdateTaskMachineUA 11/10/2023 9:20:58 AM Ready \___ Examples of
> MicrosoftEdgeUpdateTaskUserS-1-5-21-2032 11/11/2023 4:50:57 AM Running / tricks
> MicrosoftEdgeUpdateTaskUserS-1-5-21-2032 11/10/2023 9:20:58 AM Ready /
> OneDrive Reporting Task-S-1-5-21-2032382 11/11/2023 7:45:41 AM Ready
> OneDrive Standalone Update Task-S-1-5-21 11/11/2023 6:14:11 AM Ready
>
> Paul
>

Edges HKCU/Run registry key is
Computer\HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Run

The slider for Edge in Apps/Startup will disable(it)

--
....w¡ñ§±¤ñ

1
server_pubkey.txt

rocksolid light 0.9.8
clearnet tor