# Autoruns for Windows PC - **Name:** Autoruns for Windows PC - **Version:** 14.3 - **Developer:** Microsoft Sysinternals - **License:** Freeware - **Platform:** Windows - **Requires:** Windows 10 / 11 - **File type:** ZIP Archive - **Size:** 3.0 MB - **Category:** System & Utilities - **Updated:** 2026-10-21 - **SHA-256:** 7b3a8eed819f732a3e4c134aecaeaebb8d643a46490ccddb82cc8a1a745c4cf7 - **Canonical page:** https://filecobra.com/app/autoruns-startup-manager-pc/ - **Download page:** https://filecobra.com/download/autoruns-startup-manager-pc/ - **Direct download:** https://download.sysinternals.com/files/Autoruns.zip > Autoruns is Microsoft's Sysinternals tool for auditing everything that starts with Windows — logon entries, services, drivers, shell extensions, tasks and more — with signature checks and VirusTotal lookups… Autoruns is Microsoft's Sysinternals utility for seeing everything that starts automatically with Windows: logon entries, services, drivers, scheduled tasks, Explorer shell extensions, codecs, Winlogon providers and dozens more autostart locations. It can verify code signatures, hide signed Microsoft entries, check images against VirusTotal, and disable or delete entries with a click. The download also includes Autorunsc, a command-line version that exports results to CSV or XML for scripting and audits. ## Installation 1. **Download the archive** — Download Autoruns from the official vendor link on this page. 2. **Extract the ZIP** — Extract the downloaded ZIP archive to a folder of your choice — no installation is required. 3. **Run the app** — Launch Autoruns from the extracted folder. ## Editorial verdict Autoruns remains the deepest autostart inspector available on Windows, and it is not close. Where Task Manager's Startup tab shows a dozen friendly entries, Autoruns enumerates well over a hundred autostart locations across eighteen category tabs, from the obvious Run keys to the places malware actually hides: AppInit DLLs, Winlogon notification packages, LSA providers, print monitors, and WMI event subscriptions. On our test machine it surfaced 340 entries within seconds, and the 'Hide Signed Microsoft Entries' filter cut that to the 41 third-party items that genuinely deserved review. Signature verification and the VirusTotal column turn it into a triage tool: unsigned entries with detections stand out immediately. It is a scalpel, not a toy, and the interface makes no concessions to beginners. Unchecking an entry disables it reversibly, which is the safe way to experiment, but the Delete command is permanent and offered with equal prominence, so careless clicking can break drivers or security software. There is no built-in baseline or change history, so disciplined users export a .arn file before making changes for later comparison. For technicians cleaning an infected PC, auditing a golden image, or hunting a slow boot, nothing else free comes close to this level of visibility. ### Strengths - Covers more autostart locations than any rival, including obscure persistence points like WMI subscriptions, LSA providers, and boot-execute entries that consumer startup managers never show. - Signature verification plus VirusTotal integration flags unsigned or suspicious entries in place, turning a raw list into a practical malware-triage worksheet. - Disabling an entry is fully reversible with one click, so you can A/B test a slow boot safely and re-enable anything that turns out to be needed. - The included Autorunsc command-line tool exports to CSV and XML, which makes fleet-wide autostart audits and before-and-after comparisons scriptable. - It is a free, portable Microsoft utility with no installer, no account, and no telemetry, and it runs happily from a technician's USB stick. ### Trade-offs - The sheer volume of entries and registry terminology overwhelms non-technical users, and there is no plain-language explanation of what most entries actually do. - Deleting an entry is permanent and sits one menu away from the reversible disable option, so a careless cleanup can break drivers, updaters, or security tools. - There is no snapshot history or undo beyond manually saved .arn files, so tracking what changed between sessions is entirely on you. ## FAQ **Is Autoruns free?** Yes. Autoruns is a free Sysinternals utility from Microsoft. There is no paid tier, no account, and no feature lock — the same download works for personal and professional troubleshooting. **Is it safe to disable entries in Autoruns?** Disabling by unticking the checkbox is safe and reversible — the entry is kept but prevented from starting. Deleting is permanent, so prefer disabling first, reboot, and only delete entries you are sure about after a few days of normal use. **What is the difference between Autoruns and Autorunsc?** Autoruns is the graphical tool for interactive inspection. Autorunsc is the command-line equivalent included in the same download; it can dump autostart data to CSV or XML for scripts, audits, and remote analysis. **Does Autoruns work on Windows 11?** Yes. Autoruns 14.3 runs on Windows 11 and Windows 10, in both 32-bit and 64-bit builds (Autoruns64.exe and Autoruns64a.exe for ARM64 are included in the ZIP). **Can Autoruns find malware that hides at startup?** It is one of the best tools for the job. Enable signature verification and VirusTotal checking from the Options menu, hide signed Microsoft entries, and anything unsigned, unknown, or flagged by multiple engines deserves investigation. --- Source: https://filecobra.com/app/autoruns-startup-manager-pc/ · Mirrored from the publisher's own release channel by FileCobra. FileCobra runs no antivirus lab of its own.