Autoruns for Windows: See Every Startup Program (Download)
Autoruns · for Windows
Developer: Microsoft Sysinternals (Mark Russinovich) (opens in a new tab)
- Windows
The download link points to the program’s official source; the file is not hosted on this site. Link address: learn.microsoft.com
Link not working? Let us know
Autoruns is a free Microsoft Sysinternals utility by Mark Russinovich that shows the programs, services, drivers and other entries configured to start automatically on Windows. The download is a zip of about 3 MB and also contains the command-line version Autorunsc.
Task Manager’s Startup tab only shows part of the picture. Autoruns, from Microsoft’s Sysinternals suite, lists every place Windows can launch something automatically, which makes it a favourite for slow-boot investigations and for spotting unwanted software.
What Autoruns lists
Entries are grouped into tabs: logon items from the startup folder and Run keys, Explorer add-ons, services, drivers, scheduled tasks, image hijacks, Winlogon entries, codecs, Winsock providers and more. You can also view the entries configured for other user accounts from the User menu.
Getting started
- The Download button opens the Autoruns page on Microsoft Learn.
- Download the zip (about 3 MB), extract it and run Autoruns. You can also run it directly from Sysinternals Live.
- Turn on Hide Signed Microsoft Entries in the Options menu so the list focuses on third-party items.
Disable first, delete later
Autoruns gives you two ways to stop an item. Unchecking its box disables it and can be reversed simply by checking it again. The Delete command removes the entry completely. For anything you are not sure about, disable it, restart and use the PC for a while before deleting.
Checking suspicious entries
The scan options can verify digital signatures and check files against VirusTotal by their hash (you need to accept VirusTotal’s terms first). An unsigned entry is not automatically harmful, but together with an unknown publisher it deserves a closer look. The Jump to Entry command opens the registry key or folder where an item is configured.
For scripts and reports, Autorunsc offers the same information on the command line, with CSV output.
Pros
- Shows far more startup locations than Task Manager
- Signature and VirusTotal checks
- No installation needed
Cons
- Long lists can overwhelm beginners
- Deleting the wrong entry can break software
Frequently Asked Questions
Is it safe to disable entries in Autoruns?
Disabling is reversible: check the box again to restore an item. Avoid touching entries you do not recognise without researching them, and prefer disabling over deleting.
Does Autoruns need to be installed?
No. Extract the zip and run it, or start it straight from Sysinternals Live.
AutorunsFree
Download (opens in a new tab)
