I just incidently discovered a new BUG for Autorun :
I have defined a personal scheduled task, that action is "wscript C:\...\MyScript.vbs", ie. run a "home made" script.
In "old" versions of Autorun (ie Autorun 13.98), the "Image path" of this task was "C:\...\MyScript.vbs"
And it was this vbs script that was passed to VirusTotal for scanning. And the "publisher" column was empty. All of this was OK.
But with the latest version of Autorun (ie. 14.09 and maybe some of the previous ones), for this same task,
- "Image path" is now "C:\WINDOWS\system32\wscript.exe",
- and "Publisher" is now "Microsoft corporation"....
As a result,
- the script is no more controlled by VirusTotal,
- and the entry is not even displayed as soon as Hide Microsoft entries" a/o "Hide Windows entries" option is selected
I don't know if the same kind of problem may occur in other "autorun categories".