Issue with Autoruns v14.11 – Offline System Registry Hives Not Unmounted
When using the Analyze Offline System option leaves registry hives mounted, risking system corruption.
Steps to Reproduce:
Open Autoruns v14.11.Use File > Analyze Offline System.Close AutoRuns.Observe that registry hives remain mounted after the process has terminated. (Regedit.exe > HKLM > autoruns.software / autoruns.system / autoruns.user)
Impact:
Can render the offline system unbootable.Prevents you from using Analyze Offline System again as the HKLMautoruns.* mountpoints are already in use.
Workaround: Use v13.100, which works correctly.
When using the Analyze Offline System option leaves registry hives mounted, risking system corruption. Steps to Reproduce:Open Autoruns v14.11.Use File > Analyze Offline System.Close AutoRuns.Observe that registry hives remain mounted after the process has terminated. (Regedit.exe > HKLM > autoruns.software / autoruns.system / autoruns.user)Impact:Can render the offline system unbootable.Prevents you from using Analyze Offline System again as the HKLMautoruns.* mountpoints are already in use. Workaround: Use v13.100, which works correctly. Read More
