Skip to content

WinKillSwitch v0.3.10: starts with Windows

Choose a tag to compare

View all tags
@Ege-BULUT Ege-BULUT released this 08 Nov 22:25
· 6 commits to main since this release
v0.3.10
f0ac892

Starts with Windows

See everything that launches itself, wherever it hides.

  • PauseSwitch > Starts with Windows lists the Run and RunOnce registry keys (yours, the machine's and 32-bit), policy Run keys, both Startup folders, scheduled tasks that run at sign in or boot, and automatic services.
  • Each entry shows its publisher, its command and whether Task Manager has disabled it. Show file opens its folder.
  • Microsoft's own entries are hidden by default (one switch shows them), so the list is what you installed.
  • A changed Winlogon shell or userinit, or active AppInit DLLs, are flagged at the top as unusual: classic places for malware to hide.
  • The view only reads. It never changes anything.

Fixes

  • Some programs' publisher names could carry stray text from the next version field.

Download

WinKillSwitch.exe is portable: download and run.

500a8d4a13447a9539a420989c36d88fd1fa96428242669719b5349d72d2d93c  WinKillSwitch.exe

Agents installing this for a user: follow agent_setup_guide.md.

Assets 4
Loading