Autoruns vs nwipe

Autoruns shows programs and drivers configured to run during Windows boot, login, or when certain built-in Windows applications start. It reports startup items from locations such as the Startup folder, Registry keys, Explorer extensions, services, scheduled tasks, and Winlogon entries. Users can hide signed Microsoft entries to focus on third-party items, inspect startup images configured for other accounts, and disable an entry or delete its configuration. Scan options include signature verification and VirusTotal hash checks; submitting files not previously scanned requires the upload option, and VirusTotal features require accepting its terms. The download includes Autorunsc, a command-line version that can output CSV or tab-delimited data, verify signatures, and scan an offline Windows system. The Autoruns and Autorunsc download is listed as 3 MB, and Microsoft offers a Sysinternals Live option. Autoruns costs nothing, with no limit on installation or use on devices owned or supported by the user, but no redistribution license. Microsoft says Sysinternals tools are provided as is without official support and points users to a community forum.

nwipe is a free Linux utility for securely erasing block devices, either one drive at a time or multiple disks in parallel. It runs from the command line or through an ncurses-based graphical interface. Erase methods include zero and one fills, DoD and Gutmann wipes, verification passes, and BMB21-2019. For supported drives, the GUI also offers ATA and NVMe hardware-native block erase, cryptographic scramble, and pattern overwrite. Random-pattern methods can use selectable pseudorandom generators, including AES-256-CTR and ChaCha20. I/O modes include automatic, direct, and cached; automatic mode falls back to cached I/O if direct I/O is unsupported. hdparm is required at runtime, while smartmontools and dmidecode are optional recommended tools for features such as SMART certificate data and HPA/DCO detection. nwipe can generate a three-page PDF certificate. Hardware-sanitize options are interactive in the GUI and cannot be batched with automated multi-drive commands such as autonuke. Legacy ATA Secure Erase and freeze-lock handling are not supported.