Autoruns vs CBL Data Shredder

Autoruns shows programs and drivers configured to run during Windows boot, login, or when certain built-in Windows applications start. It reports startup items from locations such as the Startup folder, Registry keys, Explorer extensions, services, scheduled tasks, and Winlogon entries. Users can hide signed Microsoft entries to focus on third-party items, inspect startup images configured for other accounts, and disable an entry or delete its configuration. Scan options include signature verification and VirusTotal hash checks; submitting files not previously scanned requires the upload option, and VirusTotal features require accepting its terms. The download includes Autorunsc, a command-line version that can output CSV or tab-delimited data, verify signatures, and scan an offline Windows system. The Autoruns and Autorunsc download is listed as 3 MB, and Microsoft offers a Sysinternals Live option. Autoruns costs nothing, with no limit on installation or use on devices owned or supported by the user, but no redistribution license. Microsoft says Sysinternals tools are provided as is without official support and points users to a community forum.

CBL Data Shredder is a free utility for erasing hard-drive contents so existing and future software-based recovery tools cannot retrieve them. It overwrites the entire disk with bit patterns, with methods using different numbers of passes. Users can choose a pattern and pass count; the default is one pass of “00”. The program implements a described US Department of Defense 5220.22-M method using three passes with different patterns, and also lists VSITR, Bruce Schneier, Peter Gutmann, and Royal Canadian Mounted Police DSX methods. Its Peter Gutmann implementation makes 35 passes. The Windows version functions exclusively on Windows XP, Vista, 7, 8, and 10. DOS packages are available as a floppy disk maker, a bootable CD-ROM ISO, and a USB flash drive creator; the USB creator requires Windows 7 or later. The free download requires submitting a name and email address, and downloading means agreeing to the licensing conditions. The product warns that modern-drive features may leave some areas inaccessible to the software and vulnerable to hardware-based recovery. Its DSX method alone is not approved for sanitizing classified information, and current standards require physical destruction afterward.