• Home
  • About 404TS
  • Contact
  • Shop

404 Tech Support

Where IT Help is Found

  • Articles
    • Code
    • Entertainment
    • Going Green
    • Hardware, Gadgets, and Products
    • Management
    • Network
    • News
    • Operating Systems
    • Security and Privacy
    • Software
    • System Administration
    • Talking Points
    • Tech Solutions
    • Web
    • Webmaster
  • Reviews
  • Media
    • Infographics
    • Videos
  • Tech Events
  • Tools
    • How do I find my IP address?
    • Browser and plugin tests
  • Get a Technical Consultation
You are here: Home / Articles / Security and Privacy / KnockKnock, the Mac equivalent to Autoruns

KnockKnock, the Mac equivalent to Autoruns

2015-04-29

Autoruns is a useful Sysinternals utility for Windows computers to quickly check all of the places a program can hook into Windows to launch automatically. This is useful for troubleshooting annoying behaviors of applications or malware infections. A similar application for Mac OS X is called KnockKnock.

KnockKnock (UI) is a native Objective-C, portable application that you can run by just double-clicking the application. Once launched, you just click the Start Scan button at the top to scan for persistently installed software in these locations:

  • Authorization Plugins
  • Browser Extensions
  • Kernel Extensions
  • Launch Items
  • Library Inserts
  • Login Items
  • Spotlight Importers

While the scan progresses, you may receive a prompt for credentials to elevate access to scan certain areas.

knockknock2

Once the scan completes, you can manually browse each of the areas to understand what is installed and hooked into your computer. A summary is also presented with how many items were found. Apple-signed binaries are filtered out but other third party software is included, as you can see from my screenshot above. Each row also indicates if a binary is signed with the padlock icon and provides the full path to where the file resides.

The latest version integrates VirusTotal, a service that scans files against more than 50 antivirus engines. It will tell you if any of the detected applications are flagged by VirusTotal to help detect malware. You can disable the VirusTotal integration under Preferences.

knockknock1

You can download the free application KnockKnock (UI) from objective-see.com

Share this:

  • Facebook
  • Twitter
  • Reddit
  • Google
  • Print

Related

Filed Under: Security and Privacy, Software

Trending

  • Malwarebytes introduces Techbench, a USB utility to remove malware
    In Security and Privacy
  • Yahoo data quantifies Android usage
    In Infographics
  • Malwarebytes 3.0 released
    In Security and Privacy, Software

Latest Media Posts

Multifunctional Video Conversion Tools – Wondershare Video Converter

Multifunctional Video Conversion Tools – Wondershare Video Converter

The WannaCry Post-Mortem

The WannaCry Post-Mortem

  • Popular
  • Latest
  • Today Week Month All
  • Microsoft Word: “This modification is not allowed because the selection is locked.” Microsoft Word: "This modification is not allowed because the selection is locked."
  • How to edit the message subject in Outlook 2016 How to edit the message subject in Outlook 2016
  • What is the AllJoyn Router Service on Windows 10? What is the AllJoyn Router Service on Windows 10?
  • Increase IIS Private Memory Limit to improve WSUS availability Increase IIS Private Memory Limit to improve WSUS availability
  • Scan-To-Email with Office 365 from a multifunction copier or printer Scan-To-Email with Office 365 from a multifunction copier or printer
  • You Can Use A VPN To Unlock Regional Content on the Amazon Fire Stick You Can Use A VPN To Unlock Regional Content on the Amazon Fire Stick
  • 3 Common Online Scams People Still Fall For In 2018 3 Common Online Scams People Still Fall For In 2018
  • Methods of Network Transition from IPv4 to IPv6 Methods of Network Transition from IPv4 to IPv6
  • Deleted Partition Recovery – Using Disk Drill File Recovery Tool for Windows Deleted Partition Recovery – Using Disk Drill File Recovery Tool for Windows
  • Securing Open Source Components (it’s different)                                   Securing Open Source Components (it’s different)                                  
Ajax spinner

Upcoming Tech Events

  1. Red Hat Summit 2018

    May 8 - May 10

View All Events

Elevator Pitch

404 Tech Support documents solutions to IT problems, shares worthwhile software and websites, and reviews hardware, consumer electronics, and technology-related books.

Subscribe to 404TS articles by email.

Follow Us

  • Facebook
  • Google+
  • RSS
  • Twitter
  • YouTube

Recent Posts

  • You Can Use A VPN To Unlock Regional Content on the Amazon Fire Stick
  • 3 Common Online Scams People Still Fall For In 2018
  • Methods of Network Transition from IPv4 to IPv6

Search

FTC Disclaimer

404TechSupport is an Amazon.com affiliate; when you click on an Amazon link from 404TS, the site gets a cut of the proceeds from whatever you buy. This site also uses Skimlinks for smart monetization of other affiliate links.
Use of this site requires displaying and viewing ads as they are presented.

Copyright © 2018 · 404TechSupport.com