Windows 10: Why does Microsoft Autoruns say that I have 3-5 unverified Microsoft entries?

When I reinstalled windows 11. I wanted to see if my malware was gone by using autoruns. Autoruns says that 3-5 microsoft entries were unverified. I thought I had to reinstall windows 11 again ,but it didn't work. I read about unverified microsoft entries and they say to reinstall windows to fix it. Is this ok and how to fix this?

:)

 

Just when you think MS is getting a little Smarter/Microsoft kills off autorun

I really don't understand how some are complaining about autorun being disabled. For USB drives, it will pop up a dialog asking you whether you want to view the folder or not. Is that seriously not good enough?

For CDs however, microsoft stated that they would still allow the autorun function to be listed as an option in the dialog.

Autorun is a pretty big security risk, and Microsoft is saving a lot of headaches from the IT crowd for this.

 

Is it normal for some Microsoft entries to appear as not verified on autoruns?

Hi Sammy,

This seems to be a bug in Autoruns. Please check out the responses from "markc(msft)Microsoft" in the following link:

• Windows Defender executables: Publisher - (Not Verified) Microsoft Corporation
  

Quoting MarkC:

I traced this to an issue with the way that autoruns handles protected folders. For Microsoft published binaries we have an additional validation step that confirms whether or not the binary is in a protected system folder. For ProgramData this is not the case. The Windows Defender folder however IS locked down so I'm just waiting for confirmation from Mark R. that it's OK to add this and I'll get the fix updated.

Alternatively, you can run SigCheck.exe to know if the binaries are signed or not.

• Sigcheck - File version and signature viewer
  

 

Is it normal for some Microsoft entries to appear as not verified on autoruns?

Hi SammyTammyRed

I am Dave, I will help you with this.

Rest assured, it is normal form some genuine Microsoft process to not be verified in Autoruns, many people have reported this and all those processes are in the correct location, they are legitimate Microsoft services and entries, you do not need to worry about those, they are not related to malware.