Autoruns

Company Name

Microsoft

Key details of
Autoruns
  • Comprehensive Knowledge: Autoruns provides the most extensive information on auto-starting locations during system bootup or login.
  • Wide Range of Monitored Components: It identifies programs, drivers, Explorer shell extensions, toolbars, browser helper objects, Winlogon notifications, and auto-start services.
  • In-Depth Analysis: Goes beyond other startup monitors by exploring startup folder, Run, RunOnce, and various Registry keys.
  • Additional Features: Includes a “Hide Signed Microsoft Entries” option and supports examination of auto-starting images for other user accounts.
  • Command-Line Equivalent: Comes with Autorunsc, a command-line tool that outputs information in CSV format.
  • Reveals Hidden Executables: Users may be surprised at the number of automatically launched executables on their system. Autoruns uncovers these hidden auto-starting elements.
Developer's description

Simply run Autoruns and it shows you the currently configured auto-start applications as well as the full list of Registry and file system locations available for auto-start configuration. Autostart locations displayed by Autoruns include logon entries, Explorer add-ons, Internet Explorer add-ons including Browser Helper Objects (BHOs), Appinit DLLs, image hijacks, boot execute images, Winlogon notification DLLs, Windows Services and Winsock Layered Service Providers, media codecs, and more. Switch tabs to view autostarts from different categories.

To view the properties of an executable configured to run automatically, select it and use the Properties menu item or toolbar button. If Process Explorer is running and there is an active process executing the selected executable then the Process Explorer menu item in the Entry menu will open the process properties dialog box for the process executing the selected image.

Navigate to the Registry or file system location displayed or the configuration of an auto-start item by selecting the item and using the Jump to Entry menu item or toolbar button, and navigate to the location of an autostart image.

To disable an auto-start entry uncheck its check box. To delete an auto-start configuration entry use the Delete menu item or toolbar button.

The Options menu includes several display filtering options, such as only showing non-Windows entries, as well as access to a scan options dialog from where you can enable signature verification and Virus Total hash and file submission.

Select entries in the User menu to view auto-starting images for different user accounts.