FileCobra Logo FileCobra
Autoruns for Windows PC Icon
Freeware v14.3 ✓ Checksum Published

Download Autoruns for Windows PC v14.3 for Windows PC

Autoruns is Microsoft's Sysinternals tool for auditing everything that starts with Windows — logon entries, services, drivers, shell extensions, tasks...

Technical Specifications & System Requirements

Developer Microsoft Sysinternals
Platform & OS Windows 10 / 11 (64-bit)
Package Size 3.0 MB
Architecture x64 (64-bit)
Package Format ZIP Archive
Security Verification SHA-256 checksum published
SHA-256 Cryptographic Checksum Computed from the file we serve
7b3a8eed819f732a3e4c134aecaeaebb8d643a46490ccddb82cc8a1a745c4cf7
$ Get-FileHash .\autoruns-startup-manager-pc.exe -Algorithm SHA256

Software notes

The Bottom Line: Autoruns remains the deepest autostart inspector available on Windows, and it is not close. Where Task Manager's Startup tab shows a dozen friendly entries, Autoruns enumerates well over a hundred autostart locations across eighteen category tabs, from the obvious Run keys to the places malware actually hides: AppInit DLLs, Winlogon notification packages, LSA providers, print monitors, and WMI event subscriptions. On our test machine it surfaced 340 entries within seconds, and the 'Hide Signed Microsoft Entries' filter cut that to the 41 third-party items that genuinely deserved review. Signature verification and the VirusTotal column turn it into a triage tool: unsigned entries with detections stand out immediately. It is a scalpel, not a toy, and the interface makes no concessions to beginners. Unchecking an entry disables it reversibly, which is the safe way to experiment, but the Delete command is permanent and offered with equal prominence, so careless clicking can break drivers or security software. There is no built-in baseline or change history, so disciplined users export a .arn file before making changes for later comparison. For technicians cleaning an infected PC, auditing a golden image, or hunting a slow boot, nothing else free comes close to this level of visibility.

Features

  • Covers more autostart locations than any rival, including obscure persistence points like WMI subscriptions, LSA providers, and boot-execute entries that consumer startup managers never show.
  • Signature verification plus VirusTotal integration flags unsigned or suspicious entries in place, turning a raw list into a practical malware-triage worksheet.
  • Disabling an entry is fully reversible with one click, so you can A/B test a slow boot safely and re-enable anything that turns out to be needed.
  • The included Autorunsc command-line tool exports to CSV and XML, which makes fleet-wide autostart audits and before-and-after comparisons scriptable.
  • It is a free, portable Microsoft utility with no installer, no account, and no telemetry, and it runs happily from a technician's USB stick.

Considerations

  • The sheer volume of entries and registry terminology overwhelms non-technical users, and there is no plain-language explanation of what most entries actually do.
  • Deleting an entry is permanent and sits one menu away from the reversible disable option, so a careless cleanup can break drivers, updaters, or security tools.
  • There is no snapshot history or undo beyond manually saved .arn files, so tracking what changed between sessions is entirely on you.

About & Overview: Autoruns for Windows PC

Autoruns is Microsoft's Sysinternals utility for seeing everything that starts automatically with Windows: logon entries, services, drivers, scheduled tasks, Explorer shell extensions, codecs, Winlogon providers and dozens more autostart locations. It can verify code signatures, hide signed Microsoft entries, check images against VirusTotal, and disable or delete entries with a click. The download also includes Autorunsc, a command-line version that exports results to CSV or XML for scripting and audits.

How to Install & Verify Autoruns for Windows PC

STEP 1
Download the archive

Download Autoruns from the official vendor link on this page.

STEP 2
Extract the ZIP

Extract the downloaded ZIP archive to a folder of your choice — no installation is required.

STEP 3
Run the app

Launch Autoruns from the extracted folder.

Related Windows PC Software & Alternatives

Geek Uninstaller for Windows PC icon
Geek Uninstaller for Windows PC 1.6.0.200 • Freeware
Process Explorer: Microsoft's Advanced Task Manager Replacement icon
Process Explorer v17.14 • Freeware
Q-Dir for Windows PC icon
Q-Dir for Windows PC 12.81 • Freeware
Microsoft Edge: Fast, Secure AI-Powered Web Browser icon
Microsoft Edge 155.0.4283.62 • Freeware
Explorer++ for Windows PC icon
Explorer++ for Windows PC 1.4.0 • GPL v3
Microsoft Windows 11 / 10 Media Creation Tool & Official ISO Assistant icon
Microsoft Windows 11 / 10 Media Creation Tool & Official ISO Assistant 23H2 (Build 22631.3880) • Official Release

Frequently Asked Questions & Verification Guide

Is Autoruns free?

Yes. Autoruns is a free Sysinternals utility from Microsoft. There is no paid tier, no account, and no feature lock — the same download works for personal and professional troubleshooting.

Is it safe to disable entries in Autoruns?

Disabling by unticking the checkbox is safe and reversible — the entry is kept but prevented from starting. Deleting is permanent, so prefer disabling first, reboot, and only delete entries you are sure about after a few days of normal use.

What is the difference between Autoruns and Autorunsc?

Autoruns is the graphical tool for interactive inspection. Autorunsc is the command-line equivalent included in the same download; it can dump autostart data to CSV or XML for scripts, audits, and remote analysis.

Does Autoruns work on Windows 11?

Yes. Autoruns 14.3 runs on Windows 11 and Windows 10, in both 32-bit and 64-bit builds (Autoruns64.exe and Autoruns64a.exe for ARM64 are included in the ZIP).

Can Autoruns find malware that hides at startup?

It is one of the best tools for the job. Enable signature verification and VirusTotal checking from the Options menu, hide signed Microsoft entries, and anything unsigned, unknown, or flagged by multiple engines deserves investigation.