1. Forum
  2. Usenet
  3. ALT.COMP.OS.WINDOWS-10

  • What is creating this daily MicrosoftEdgeAutoLaunch?

    From Peter@21:1/5 to All on Fri Nov 10 04:42:06 2023
    Every couple of days or so I get a Startup Entry warning
    HKCU:Run
    MicrosoftEdgeAutoLaunch_A83E2D204AB19DCE5550F9BE74E84F70
    "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --no-startup-window --win-session-start /prefetch:5

    What exactly is causing this entry to be running?
    I almost never use Microsoft Edge so it's not me doing it.

    --- SoupGate-Win32 v1.05
    * Origin: fsxNet Usenet Gateway (21:1/5)
  • From Paul@21:1/5 to Peter on Fri Nov 10 03:49:15 2023
    On 11/9/2023 11:42 PM, Peter wrote:
    Every couple of days or so I get a Startup Entry warning
    HKCU:Run
    MicrosoftEdgeAutoLaunch_A83E2D204AB19DCE5550F9BE74E84F70
    "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --no-startup-window --win-session-start /prefetch:5

    What exactly is causing this entry to be running?
    I almost never use Microsoft Edge so it's not me doing it.


    Start by checking the Settings panel.

    [Picture]

    https://i.postimg.cc/dVn15HFD/msedge-auto-start-W10.gif

    There are also evil ways of doing it, and since MSEdge uses
    multiple pieces of software, there are also "tag-team" approaches
    to persistence. A person could use a Scheduled Task, to attack
    the computer every three days, as an example.

    After you use the sliders, have a look this way (admin window).
    Run one before using sliders, one after using sliders. The entry
    in question is near the beginning on mine.

    C:\Windows\system32>schtasks.exe

    Folder: \
    TaskName Next Run Time Status ======================================== ====================== =============== MicrosoftEdgeUpdateTaskMachineCore 11/11/2023 4:50:58 AM Ready \
    MicrosoftEdgeUpdateTaskMachineUA 11/10/2023 9:20:58 AM Ready \___ Examples of
    MicrosoftEdgeUpdateTaskUserS-1-5-21-2032 11/11/2023 4:50:57 AM Running / tricks
    MicrosoftEdgeUpdateTaskUserS-1-5-21-2032 11/10/2023 9:20:58 AM Ready /
    OneDrive Reporting Task-S-1-5-21-2032382 11/11/2023 7:45:41 AM Ready
    OneDrive Standalone Update Task-S-1-5-21 11/11/2023 6:14:11 AM Ready

    Paul

    --- SoupGate-Win32 v1.05
    * Origin: fsxNet Usenet Gateway (21:1/5)
  • From KenW@21:1/5 to Peter on Fri Nov 10 06:30:42 2023
    On Fri, 10 Nov 2023 04:42:06 +0000, Peter <confused@nospam.net> wrote:

    Every couple of days or so I get a Startup Entry warning
    HKCU:Run
    MicrosoftEdgeAutoLaunch_A83E2D204AB19DCE5550F9BE74E84F70
    "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --no-startup-window --win-session-start /prefetch:5

    What exactly is causing this entry to be running?
    I almost never use Microsoft Edge so it's not me doing it.

    I used Autoruns to kill it if I remember right


    KenW

    --- SoupGate-Win32 v1.05
    * Origin: fsxNet Usenet Gateway (21:1/5)
  • From Paul@21:1/5 to KenW on Fri Nov 10 09:22:12 2023
    On 11/10/2023 8:30 AM, KenW wrote:
    On Fri, 10 Nov 2023 04:42:06 +0000, Peter <confused@nospam.net> wrote:

    Every couple of days or so I get a Startup Entry warning
    HKCU:Run
    MicrosoftEdgeAutoLaunch_A83E2D204AB19DCE5550F9BE74E84F70
    "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --no-startup-window --win-session-start /prefetch:5

    What exactly is causing this entry to be running?
    I almost never use Microsoft Edge so it's not me doing it.

    I used Autoruns to kill it if I remember right


    KenW


    Some pests, will put yet another item back, when you
    use an Autoruns tick box to disable it :-)

    That doesn't mean it would necessarily happen in this case,
    but it's a possibility.

    Paul

    --- SoupGate-Win32 v1.05
    * Origin: fsxNet Usenet Gateway (21:1/5)
  • From KenW@21:1/5 to All on Fri Nov 10 09:22:15 2023
    On Fri, 10 Nov 2023 09:22:12 -0500, Paul <nospam@needed.invalid>
    wrote:

    On 11/10/2023 8:30 AM, KenW wrote:
    On Fri, 10 Nov 2023 04:42:06 +0000, Peter <confused@nospam.net> wrote:

    Every couple of days or so I get a Startup Entry warning
    HKCU:Run
    MicrosoftEdgeAutoLaunch_A83E2D204AB19DCE5550F9BE74E84F70
    "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --no-startup-window --win-session-start /prefetch:5

    What exactly is causing this entry to be running?
    I almost never use Microsoft Edge so it's not me doing it.

    I used Autoruns to kill it if I remember right


    KenW


    Some pests, will put yet another item back, when you
    use an Autoruns tick box to disable it :-)

    That doesn't mean it would necessarily happen in this case,
    but it's a possibility.

    Paul

    OK


    KenW

    --- SoupGate-Win32 v1.05
    * Origin: fsxNet Usenet Gateway (21:1/5)
  • From =?UTF-8?B?Li4ud8Khw7HCp8KxwqTDsSA=?@21:1/5 to Paul on Fri Nov 10 11:44:10 2023
    Paul wrote on 11/10/23 1:49 AM:
    On 11/9/2023 11:42 PM, Peter wrote:
    Every couple of days or so I get a Startup Entry warning
    HKCU:Run
    MicrosoftEdgeAutoLaunch_A83E2D204AB19DCE5550F9BE74E84F70
    "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --no-startup-window --win-session-start /prefetch:5

    What exactly is causing this entry to be running?
    I almost never use Microsoft Edge so it's not me doing it.


    Start by checking the Settings panel.

    [Picture]

    https://i.postimg.cc/dVn15HFD/msedge-auto-start-W10.gif

    There are also evil ways of doing it, and since MSEdge uses
    multiple pieces of software, there are also "tag-team" approaches
    to persistence. A person could use a Scheduled Task, to attack
    the computer every three days, as an example.

    After you use the sliders, have a look this way (admin window).
    Run one before using sliders, one after using sliders. The entry
    in question is near the beginning on mine.

    C:\Windows\system32>schtasks.exe

    Folder: \
    TaskName Next Run Time Status ======================================== ====================== ===============
    MicrosoftEdgeUpdateTaskMachineCore 11/11/2023 4:50:58 AM Ready \
    MicrosoftEdgeUpdateTaskMachineUA 11/10/2023 9:20:58 AM Ready \___ Examples of
    MicrosoftEdgeUpdateTaskUserS-1-5-21-2032 11/11/2023 4:50:57 AM Running / tricks
    MicrosoftEdgeUpdateTaskUserS-1-5-21-2032 11/10/2023 9:20:58 AM Ready /
    OneDrive Reporting Task-S-1-5-21-2032382 11/11/2023 7:45:41 AM Ready OneDrive Standalone Update Task-S-1-5-21 11/11/2023 6:14:11 AM Ready

    Paul


    Edges HKCU/Run registry key is
    Computer\HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Run

    The slider for Edge in Apps/Startup will disable(it)


    --
    ...w¡ñ§±¤ñ

    --- SoupGate-Win32 v1.05
    * Origin: fsxNet Usenet Gateway (21:1/5)