Autoruns vs SterJo Startup Patrol

Autoruns shows programs and drivers configured to run during Windows boot, login, or when certain built-in Windows applications start. It reports startup items from locations such as the Startup folder, Registry keys, Explorer extensions, services, scheduled tasks, and Winlogon entries. Users can hide signed Microsoft entries to focus on third-party items, inspect startup images configured for other accounts, and disable an entry or delete its configuration. Scan options include signature verification and VirusTotal hash checks; submitting files not previously scanned requires the upload option, and VirusTotal features require accepting its terms. The download includes Autorunsc, a command-line version that can output CSV or tab-delimited data, verify signatures, and scan an offline Windows system. The Autoruns and Autorunsc download is listed as 3 MB, and Microsoft offers a Sysinternals Live option. Autoruns costs nothing, with no limit on installation or use on devices owned or supported by the user, but no redistribution license. Microsoft says Sysinternals tools are provided as is without official support and points users to a community forum.

SterJo Startup Patrol is a free Windows utility that monitors startup registry locations and startup folders in real time. It alerts when a program attempts to add a startup entry, showing the program name, full path, and modified location. You can allow, disable, or delete the change from the alert. Its main window lists active entries for manual disabling, and previous decisions or permissions can be adjusted later. Additional tools include digital-signature checks, a right-click Google search for unknown entries, and a portable edition for USB use. The portable version runs without installation and is described as not modifying system files. Version 1.6 is listed at 2.2 MB and adds an alert sound for new entries. Supported Windows versions are 11, 10, 8, 7, Vista, and XP in 32- and 64-bit editions. Scheduled Tasks are outside its core monitoring. The maker says Startup Patrol is not an antivirus, though it can flag potentially suspicious startup changes.