Pros & Cons
-
- Displays every process that launches automatically, with option to reversibly disable.
- Can link to Systinternal's own Process Monitor app.
- Comparison with saved configuration reveals newly-installed startup items.
-
- Unwise disabling of startup items can destabilize Windows.
- Doesn't restore state after switching to "Run as Administrator."
Autoruns 9 Specs
| Free: | Yes |
| OS Compatibility: | Windows 7 |
| OS Compatibility: | Windows Vista |
| OS Compatibility: | Windows XP |
| Tech Support: | Forum |
| Type: | Business |
| Type: | Enterprise |
| Type: | Personal |
| Type: | Professional |
I often recommend using Windows's MSCONFIG utility to disable all the startup items on a slow computer. Doing helps performance, and you can re-enable the ones you really want to start up automatically. The Startup Manager built into
) can do the same, but also offers information about resource usage and an option to delay a program's startup rather than disabling it. PCMag's own
Handle With Care
I should point out right away that there's a good reason MSCONFIG and most startup utilities display a limited set of startup programs. The standard startup locations managed by these tools only include non-essential programs, ones that you can safely disable. Autoruns lists absolutely everything, including processes, services, and drivers essential to the correct working of the operating system. If you start wildly disabling items, you can render your system unbootable.
Autoruns displays 17 tabs representing different types of startup items, plus a main tab that lists everything in one place. By default, Autoruns omits known startup file and Registry locations that don't actually contain any items. You can optionally set Autoruns to show these empty locations. If you want to focus on third-party startup items, you can suppress Windows components or suppress all Microsoft items. Either way, you must refresh the list after changing options.
If you un-check an item's checkbox to disable it in
From a startup item's right-click context menu you can jump to the file or Registry location that holds the program, verify its digital signature (if available), or launch a Google search on the item. There's even an option to show the corresponding process in
). Of course, this only works if Process Explorer is present and the item in question is actually running.
Detecting Malware and Other Changes
Viruses and other malicious applications need some way to launch automatically, or else they wouldn't survive a system restart. Naturally, Autoruns is a favorite tool of malware researchers. If malware has recently infested the system, there will almost certainly be a new entry in one of the areas tracked by Autoruns. It's a long list, though, so you need help spotting new items.
As soon as you install Autoruns you should press Ctrl+S to save a baseline log of all startup items. Save a new baseline after any significant system changes. Any time you suspect malware, select Compare from the File menu and choose the most recent log. Now scroll through the list of all autoruns items seeking lines highlighted in green—those represent new items that weren't present in the baseline.
In an office setting, you may manage numerous computers that all started out with the same configuration. If one computer exhibits problems not found in the others, use Autoruns to compare its startup items with a baseline file copied from a different computer. Any program that launches at startup only on the problem system might be the culprit.
MSCONFIG or another startup manager is all you need for the simple task of safely disabling unwanted startup items. If you want to dig deeper into system problems or detect suspicious new additions to the collection of programs that launch at startup Autoruns will give you insight no other tool can.
More Utility Software Reviews:
Final Thoughts
Autoruns 9
Autoruns 9 reveals every single program and process that launches automatically on your computer. It's especially useful for detecting malware, since almost every malicious program needs some way to launch automatically. Do be careful disabling startup items; you could destabilize Windows.