Detailed information about each file

A huge list of automatically loaded objects is definitely a good thing. But how do you understand what each of them is, who created it, when and how it appeared in the system, which properties it has? To do that, use the “Details” function, which will provide you with detailed information on each object.

Enabling this window will allow you to obtain detailed information about each startup object:

  • File icon (internal icon or the icon associated with this file type)
  • Full path to the file on the hard drive
  • Current file status (more on file statuses)
  • Program start parameters
  • Name and short description of the application
  • “Raw” (real) path in the registry and its data
  • Date of creation or modification of the registry record (unique feature!)

The following information will also be available for drivers and services:

  • Name of the driver or service
  • The startup group the object belongs to
  • Startup type (when the object is loaded by the OS)
  • Current status (active or inactive)
CESAM: Online Solutions CESAM Anti-Malware CESAM: Online Solutions CESAM Anti-Malware
CESAM: Online Solutions CESAM Anti-Malware CESAM: Online Solutions CESAM Anti-Malware

If a file contains information about its manufacturer, the name of the products and its version, it will also be shown in the “File Information” section. Usually, if this information is missing, the file is highly suspicious. To draw your attention to such records, CESAM sets their status to “File found, but can’t get any details” and marks the record in yellow (more information on statuses and color marking). However, sometimes normal system files do not contain this information – for instance, MSSPY.EXE or secdrv.sys – but they are signed by Microsoft.

Besides, the application will show the following information for each file: creation date, modification date (timestamp), file size, attributes and MD5 hash (if you configured the application to calculate file hashes).

After you run the online scanner, the software will also show the following information for each file: current scanning status, information about possible threats posed by this file and the date of the latest inspection of such a file by our company.