About AutoRuns
An independent resource dedicated to helping users get the most out of Microsoft Sysinternals’ powerful startup manager.
What Is AutoRuns?
AutoRuns is a system utility built by Mark Russinovich as part of the Microsoft Sysinternals suite. It gives you full visibility into every program, driver, service, and scheduled task that starts automatically when your computer boots or when you log in. Unlike the basic Startup tab in Task Manager, AutoRuns digs deeper — scanning 19 different categories of auto-start locations across the Windows operating system.
For IT administrators, security professionals, and power users, it has become a go-to diagnostic tool. If something is slowing down your boot time or if suspicious software is hiding in an obscure registry key, AutoRuns will find it.
The Story Behind AutoRuns
AutoRuns has its roots in the early days of Windows system administration, when tracking down rogue startup entries meant hours of manual registry spelunking.
Sysinternals Is Born
Mark Russinovich and Bryce Cogswell founded Winternals Software and created the Sysinternals website as a free resource for Windows system tools. AutoRuns was among the early utilities they published, alongside Process Explorer and Filemon.
Microsoft Acquires Sysinternals
Microsoft recognized the value of these tools and acquired Winternals Software. Mark Russinovich joined Microsoft as a Technical Fellow, and the entire Sysinternals suite — including AutoRuns — moved under the Microsoft umbrella. The tools remained free.
VirusTotal Integration
A major feature addition let users submit file hashes directly to VirusTotal from within AutoRuns. This turned it from a startup manager into a lightweight malware hunting tool, and cybersecurity professionals took notice.
Version 14.11
The latest release (February 2024) continues to refine the tool with updated auto-start location coverage and improved compatibility with modern Windows 11 systems.
What AutoRuns Does
At its core, AutoRuns answers a simple question: what is running on my computer, and why? Here is what makes it stand apart from built-in Windows tools:
19 Startup Categories
Covers logon entries, Explorer extensions, Internet Explorer add-ons, scheduled tasks, services, drivers, codecs, Winsock providers, print monitors, and more.
VirusTotal Scanning
Submit any file hash to VirusTotal with one click. Quickly identify potentially malicious entries that your antivirus may have missed.
Smart Filtering
Hide verified Microsoft entries to zero in on third-party software. Color-coded rows highlight missing files, unsigned publishers, and new additions.
Command-Line Mode
Autorunsc.exe outputs CSV or XML for scripting and automation. Perfect for IT teams managing large fleets of workstations.
The Developer
Mark Russinovich
CTO of Microsoft Azure & Technical Fellow at Microsoft
Mark Russinovich is one of the most respected names in Windows internals. He co-authored the definitive book Windows Internals and built the entire Sysinternals toolkit that millions of IT professionals depend on daily. His tools — Process Explorer, Process Monitor, AutoRuns, and dozens of others — are standard equipment for anyone who works with Windows at a deep level.
Before joining Microsoft in 2006, he ran Winternals Software with Bryce Cogswell. Today, as CTO of Microsoft Azure, he continues to shape how Windows and cloud infrastructure work under the hood.
Why People Rely on AutoRuns
On Reddit and tech forums, AutoRuns consistently ranks among the most recommended Sysinternals tools. Here is why it has such a loyal following:
- Malware hunting: Security analysts use it to uncover persistence mechanisms that standard antivirus tools overlook. If malware has planted itself in a registry run key or a scheduled task, AutoRuns will surface it.
- Performance tuning: Users regularly report faster boot times after reviewing and disabling unnecessary startup entries. The tool makes it trivial to spot bloatware added by OEM manufacturers.
- Troubleshooting: When a Windows machine behaves strangely after installing new software, AutoRuns helps you trace exactly what changed in the startup configuration.
- No install required: It runs as a portable executable straight from a ZIP file. Download, extract, run. No setup wizard, no dependencies, no admin rights needed for basic scanning.
About This Website
This website is a fan-made, independent informational resource. We are not affiliated with, endorsed by, or connected to Microsoft Corporation or the Sysinternals team in any way.
We built this site because AutoRuns deserves a dedicated resource that goes beyond the official documentation page. Our goal is straightforward: help users find accurate information, clear guides, and official download links for AutoRuns.
Every download link on this site points to the official Microsoft servers. We do not host, modify, or redistribute the software. We respect the developers and their intellectual property, and we encourage all users to support Microsoft Sysinternals directly.
Get in Touch
Have questions, feedback, or suggestions for this site? Visit our Contact page.
For official software support and bug reports, head to the Microsoft Sysinternals documentation.