[SOLVED] Error Downloading Autoruns While Running SysnativeFileCollectionApp

blueelvis

blueelvis

BSOD Kernel Dump Senior Analyst
Joined
Apr 14, 2014
Posts
970
Location
India
Hi everyone ^_^,


I just tried to run the SysnativeFileCollectionApp and saw this while the app was still running -
09-06-2015 13:55:38.37

Downloading and executing autorunsc.exe. . .
Input Error: There is no script engine for file extension ".js".
'autorunsc.exe' is not recognized as an internal or external command,
operable program or batch file.
Could Not Find C:\Users\Blueelvis_RoXXX\Documents\autorunsc.exe


09-06-2015 13:55:38.63


Autoruns. . . D O N E
Click to expand...

I confirmed that my internet was working fine. Once the ZIP file was created, I took a look inside and the Autoruns.txt was empty.


EDIT :- Also, can anyone please post the difference between Error Level 0 & 1 which are mentioned in the jcgriff2.txt log? Asking because I got some Error Level 0's and some Error Level 1's.

-Pranav
 
Last edited:
Tekno Venus said:
What program do you have associated with .js files?

Also see here: Fix "There is no script engine for file extension - Microsoft Community

BTW, there's currently a bug which means Autoruns doesn't actually produce an output anyway! It will be fixed in version 4.6.1
Click to expand...
The JS files were associated with Notepad. I tried the fix which you suggested and it worked.

Is the bug related to the below output of Autoruns?
Autorunsc shows programs configured to autostart during boot.

Usage: autorunsc [-a <*|bdeghiklmoprsw>] [-c|-ct] [-h] [-m] [-s] [-u] [-vt] [[-z <systemroot> <userprofile>] | [user]]]
-a Autostart entry selection:
* All.
b Boot execute.
d Appinit DLLs.
c Codecs.
e Explorer addons.
g Sidebar gadgets (Vista and higher)
h Image hijacks.
i Internet Explorer addons.
k Known DLLs.
l Logon startups (this is the default).
m WMI entries.
n Winsock protocol and network providers.
o Office addins.
p Printer monitor DLLs.
r LSA security providers.
s Autostart services and non-disabled drivers.
t Scheduled tasks.
w Winlogon entries.
-c Print output as CSV.
-ct Print output as tab-delimited values.
-h Show file hashes.
-m Hide Microsoft entries (signed entries if used with -v).
-s Verify digital signatures.
-t Show timestamps in normalized UTC (YYYYMMDD-hhmmss).
-u If VirusTotal check is enabled, show files that are unknown
by VirusTotal or have non-zero detection, otherwise show only
unsigned files.
-x Print output as XML.
-v[rs] Query VirusTotal (VirusTotal - Free Online Virus, Malware and URL Scanner) for malware based on file hash.
Add 'r' to open reports for files with non-zero detection. Files
reported as not previously scanned will be uploaded to VirusTotal
if the 's' option is specified. Note scan results may not be
available for five or more minutes.
-vt Before using VirusTotal features, you must accept
VirusTotal terms of service. See:


https://www.virustotal.com/en/about/terms-of-service/


If you haven't accepted the terms and you omit this
option, you will be interactively prompted.
-z Specifies the offline Windows system to scan.
user Specifies the name of the user account for which
autorun items will be shown. Specify '*' to scan
all user profiles.
Click to expand...


Thanks Stephen ^_^

-Pranav
 
Yeah, that's the issue.

It always downloads the latest version of autoruns and the syntax slightly changed for the latest version. Only a small change so should be fixed soon
 
Ok great.

Stephen, could you please tell me what does the different types of error levels in the program's output mean?
 
Error level 0 indicates the command was successful.

1 implies there was an error or problem.
 
Not sure if it is significant or not but I see some errors despite the files being present and having the proper output. For example, the TRACERT job reports an error even though the proper output of the command is there in the SysnativeFileCollectionApp. Below is the jcgriff2.txt log file -

Read More:



-Pranav
 
jcgriff2 said:
Nothing to be concerned about.

Not sure why the error levels came out like this.
Click to expand...
Yea, even I was wondering as to why the error levels came out like this.


Marking this thread as solved since the issue was on my end :)

Thanks!


-Pranav
 

Has Sysnative Forums helped you? Please consider donating to help us support the site!

Back
Top