question about ie4uinit.exe

[Keyes]

Hi, I have a quick question about ie4uinit.exe. I used this command in cmd "ie4uinit.exe -cleariconcache" to rebuild my icons as it one wasnt working. It worked perfectly.

I noticed in process explorer, ie4uinit.exe was under a "auto start" directory. In autoruns, under hlkm/software/wow6432node/microsoft/activesetup/installed components twice. One entry labled internet explorer, and one offline browsing. , and at the end of the command line says -cleariconcache

It shows these in yellow, saying file not found. Now that is fine, as I believe since its a hardlink it says file not found, but is in tye system32 directory fine.

Is ie4uinit.exe supposed to launch at boot? What do these entries mean? I never see it in task manager or even at boot.

 

[LMiller7]

ie4uinit.exe is supposed to run at bootup. But it typically starts before login, has little to do, and likely terminates before you have an opportunity to see it.

Regarding the autoruns entry showing in yellow:
Autoruns is a 32 bit process and this creates a number of difficulties for it when run under a 64 bit OS. As a 32 bit process it must run in an artificial environment and doesn't always see things as they really are. This is really a bug in autoruns. The authors are busy with other things so I would not expect this to be fixed anytime soon.

 

[Keyes]

ie4uinit.exe is supposed to run at bootup. But it typically starts before login, has little to do, and likely terminates before you have an opportunity to see it.

Regarding the autoruns entry showing in yellow:
Autoruns is a 32 bit process and this creates a number of difficulties for it when run under a 64 bit OS. As a 32 bit process it must run in an artificial environment and doesn't always see things as they really are. This is really a bug in autoruns. The authors are busy with other things so I would not expect this to be fixed anytime soon.

Thanks, and another autoruns question. Under image hijacks I see an entry for internet explorer, with the dates 30/5/13, and 18/9/14. Is this bad that a hijack is listed? This is v12.03, and apparently it is supposed to appear.IE image hijack in v12.03? - Sysinternals Forums

 

[LMiller7]

Contrary to what the name might imply this does not refer to any kind of security issue. Understand that when terms familiar from the real world are used as technical terms the meaning may be quite different. The only thing unusual is the name.

 

[Keyes]

Contrary to what the name might imply this does not refer to any kind of security issue. Understand that when terms familiar from the real world are used as technical terms the meaning may be quite different. The only thing unusual is the name.

If you use auotruns v12.03 do you see internet explorer listed in image hijacks? On a second pc I see it, with the same dates. (Date is actually before my pcs install date.