Something launches every time Windows starts, but it isn't in Task Manager's Startup list? Autoruns, Microsoft's free Sysinternals tool, shows every place Windows can start programs automatically, from logon entries to services, drivers and scheduled tasks.
Browse startup locations by category
The Everything tab gathers the entries Autoruns finds, while separate tabs organize areas such as Logon, Scheduled Tasks, Services, Drivers, Explorer, and Internet Explorer. This layout can expose launch points beyond the familiar sign-in startup list, including services and scheduled jobs.
For a shorter view, use the Microsoft-entry filters to hide Microsoft-signed items. The remaining list can make third-party software easier to inspect, while the category tabs keep the search focused on a particular part of Windows.
Trace an entry to its file and settings
Select an entry to inspect details such as its publisher, description, and image path. Autoruns can open the associated file location or jump to the registry entry that configures the launch, giving you a way to investigate where an item comes from.
Search finds a file name or publisher across every tab. Save a snapshot and compare it later to see exactly what an installer added, or analyze the startup entries of an offline Windows installation. A command-line version, autorunsc, exports the same data for scripts.
Disable entries and inspect unfamiliar files
Clear an entry's checkbox to stop that auto-start item from running; select it again to re-enable it. Deleting an entry removes its startup configuration, not the program file itself, so Autoruns does not erase the executable from disk.
Code-signature verification can show whether a file has a verifiable publisher signature. Autoruns also offers VirusTotal checks for entries, providing another way to investigate a file that is unfamiliar or unexpected.
- Start with the location-specific tab where the item appears.
- Use the entry details and file or registry links to identify its source.
- Disable an entry with its checkbox when you want to test its startup behavior.
Pros
- Groups startup entries into location-specific tabs
- Shows entry details and links to its file or registry location
- Can verify code signatures and check entries with VirusTotal
- Lets you disable an entry by clearing its checkbox
Cons
- Disabling the wrong entry can break drivers or Windows features
- Dense, technical interface
System requirements: Windows 10, Windows 11
How is Autoruns different from the Startup list in Task Manager?
Autoruns covers additional auto-start locations, including scheduled tasks, services, drivers, and Explorer extensions, organized across category tabs.
Does deleting an Autoruns entry uninstall the program?
No. Deleting removes the selected auto-start configuration entry; it does not delete the program's executable file.
How can I investigate an unfamiliar startup entry?
Inspect its publisher, description, and file path, then use code-signature verification or Autoruns' VirusTotal checks.