Autoruns vs NSSM

Autoruns shows programs and drivers configured to run during Windows boot, login, or when certain built-in Windows applications start. It reports startup items from locations such as the Startup folder, Registry keys, Explorer extensions, services, scheduled tasks, and Winlogon entries. Users can hide signed Microsoft entries to focus on third-party items, inspect startup images configured for other accounts, and disable an entry or delete its configuration. Scan options include signature verification and VirusTotal hash checks; submitting files not previously scanned requires the upload option, and VirusTotal features require accepting its terms. The download includes Autorunsc, a command-line version that can output CSV or tab-delimited data, verify signatures, and scan an offline Windows system. The Autoruns and Autorunsc download is listed as 3 MB, and Microsoft offers a Sysinternals Live option. Autoruns costs nothing, with no limit on installation or use on devices owned or supported by the user, but no redistribution license. Microsoft says Sysinternals tools are provided as is without official support and points users to a community forum.

NSSM is a Windows service helper that runs an application as a service, watches its process, and responds when it exits. A graphical interface installs or removes services, while command-line options support scripted configuration. On exit, NSSM can restart the application, ignore the event, terminate itself, or exit uncleanly so Windows recovery actions can run. It records its own progress in the Windows system Event Log and can redirect the monitored program’s input and output. Output files can rotate at a configurable size, including while the program continues running. Administrators can set process priority and CPU affinity, and start, stop, or query services. NSSM provides 32-bit and 64-bit binaries and says it should work on Windows 2000 or later. It is public domain, with source usable for any purpose. The site lists version 2.24 from 2014-08-31 as latest, plus a 2017 prerelease. Administrator access is required; documented bugs affect newer startup, XP, and large log rotation.