Autoruns

Autoruns has the comprehensive knowledge of auto-starting locations of any startup monitor, shows you what programs are configured to run during system boot up or login, and shows you the entries in the order Windows process them. These programs include ones in your startup folder, Run, RunOnce, and other Registry keys. You can configure Autoruns to show other locations, including Explorer shell extensions, toolbars, browser helper objects, Winlogon notifications, and auto-start services.

What is new in this release:

This update to Autoruns fixes a Wow64 bug in Autorunsc that could cause 32-bit paths to result in 'file not found' errors, and expands the set of images not considered part of Windows for the Windows filter in order to reveal malicious files masquerading as Windows images.

What is new in version 13.80:

This release of Autoruns adds additional autostart entry points, has asynchronous file saving, fixes a bug parsing 32-bit paths on 64-bit Windows, shows the display name for drivers and services, and fixes a bug in offline Virus Total scanning.

What is new in version 13.71:

This update to Autoruns, a comprehensive autostart execution point manager, adds Microsoft HTML Application Host (mshta.exe) as hosting image so it displays the hosted image details, and now doesn't apply filters to hosting images.

What is new in version 13.7:

Autoruns now reports print providers, registrations in the WMIDefault namespace, fixes a KnownDLLs enumeration bug, and has improved toolbar usability on high-DPI displays.

What is new in version 13.62:

Version 13.62 may include unspecified updates, enhancements, or bug fixes.

What is new in version 13.52:

This release of Autoruns, a comprehensive autostart entry manager, fixes a WMI command-line parsing bug, emits a UNICODE BOM in the file generated when saving results to a text file, and adds back the ability to selectively verify the signing status of individual entries.

What is new in version 13.51:

This release of Autoruns, a comprehensive autostart entry manager, fixes a WMI command-line parsing bug, emits a UNICODE BOM in the file generated when saving results to a text file, and adds back the ability to selectively verify the signing status of individual entries.

What is new in version 13.5:

Version 13.5 may include unspecified updates, enhancements, or bug fixes.

What is new in version 13.4:

• Supports Office addins.
• Adds several additional autostart locations.
• No longer hides hosting executables like cmd.exe, powershell.exe and others when Windows and Microsoft filters are in effect.

What is new in version 13.3:

Autoruns, a utility that shows what processes, DLLs, and drivers are configured to automatically load, adds reporting of GP extension DLLs and now shows the target of hosting processes like cmd.exe and rundll32.exe.

What is new in version 13.2:

In addition to bug fixes to CSV and XML output, Autorunsc introduces import-hash reporting, and Autoruns now excludes command-line and other host processes from the Microsoft and Windows filters.

What is new in version 13.01:

Version 13.01 may include unspecified updates, enhancements, or bug fixes.

What is new in version 12.03:

Version 12.03 may include unspecified updates, enhancements, or bug fixes.