How to use Autoruns to remove programs that auto-start without permission

¿How do I use Autoruns to remove programs that start automatically without permission? You start your computer, open your browser… and notice that everything is running slower than usual. Icons you don't remember installing appear, strange processes pop up, and your PC fan starts running for no apparent reason. Often, the problem lies in those… programs that start automatically without your permission and that have been left behind as "remnants" after uninstalling applications or changing settings.

This type of software waste can running in the background consuming resourcesThis lengthens startup time and, in some cases, causes errors or even suspicious behavior. In this article, you'll learn how to locate these elements, what their colors mean, what you should and shouldn't touch, and above all... How to use Autoruns to remove programs that start automatically without you having decided it.

Why do programs continue to start after uninstallation?

When you remove an application from the panel of uninstalling Windows programsNormally, it should disappear completely. However, many uninstallers leave behind some traces. startup entries, scheduled tasks, or services that remain active even though the main program no longer exists.

These remains can manifest as phantom processes that keep trying to start Every time you log in, Windows tries to run a file that no longer exists, resulting in "broken" entries, warnings, delays, and, most importantly, a extra resource consumption without any benefit.

In addition, various hardware and software manufacturers tend to add utilities that start Windows (for printers, graphics cards, cloud applications, game stores, etc.). Over time, if you don't control them, your system will end up with a startup overloaded with services, drivers, and small modules that you don't constantly need.

First filter: check the startup with the Task Manager

Before diving into Autoruns, you can take a first look at the processes that load when you start your computer using the same tool. Windows Task ManagerIt's a simpler layer that lets you disable many common programs without delving into the registry.

To open it, press CTRL + SHIFT + ESCIn Windows 10, a window with several tabs will appear at the top; in Windows 11, you'll see a side panel with a menu on the left. In both cases, the section we're interested in is the one for Home o Boot applications.

Within that section you will see a list with all applications configured to start with the systemOffice suites, cloud synchronization tools, game launchers, printer software, and other applications are typically found there. slow down PC startup and operationAlthough it is also true that some are comfortable if you use them continuously.

From this panel you can disable automatic startup with a simple Right-click on the application and choose DisableThis way, the application will remain installed, but it will no longer start automatically when you turn on your computer.

The problem arises when you see suspicious elements, for example an entry called “Program” without icon or clear informationIn many cases, even if you try to disable or delete it there, it will keep reappearing or simply become unmanageable. It's precisely in these scenarios that Task Manager falls short and a different approach is needed. deeper level tool.

What is Autoruns and why is it so powerful

Autoruns is a Free application created by SysinternalsAutoruns, a division of Microsoft specializing in advanced utilities for Windows. It's the same company that develops Process Explorer, the popular advanced replacement for Task Manager. Autoruns has become a Reference tool for controlling everything that starts up in Windows.

Unlike the basic system options, Autoruns displays details all registry and system locations From which you can launch programs, services, drivers, Office add-ins, browser extensions, scheduled tasks, and much more.

The tool is distributed as a Downloadable ZIP file from the official Microsoft Sysinternals websiteOnce downloaded, simply extract the contents and run autoruns.exe o autoruns64.exe If you're using a 64-bit version of Windows. It doesn't require traditional installation, so you can even carry it in a maintenance USB drive for use on different devices.

With each version, Autoruns has incorporated improvements. Version 13 added, for example, the analysis of elements in VirusTotal to check if files are potentially malicious. Version 14 incorporated the dark modewhich you can activate from Options > Theme > Dark. The interface remains very classic, but for those who spend a lot of time working with it, dark mode is a welcome feature.

Download and run Autoruns correctly

First of all, always download Autoruns from their official page on Microsoft Sysinternals To avoid manipulated or malware-infected versions. At the bottom of the page you will see the link to obtain the ZIP file with the tool.

Once downloaded, extract the ZIP file to a folder of your choice. You will see several files, but the most important ones are: Autoruns.exe and Autoruns64.exeIf your system is 64-bit (which is common nowadays), run the 64-bit version for more accurate results.

It is recommended to open Autoruns with Administrator privilegesRight-click on the executable file and select "Run as administrator." This will allow the tool to access all startup entries, including those that affect other users already the system components.

Autoruns overview and main tabs

When opened, Autoruns takes a few seconds to scan the system. It then displays a huge list of entries, accompanied by tabs on top that allow filtering information by categories.

The eyelash Everything It literally shows all the startup locations known to the tool. This is very useful for getting an overview, but it can be overwhelming at first. That's why, if you're new to Autoruns, it's best to start with the tab Logon (Login), which only shows the programs that are running when you log in with your username.

In addition to these, you'll find other very useful sections: tabs for services, drivers, scheduled tasks, Office components, network providers, print snap-ins (Epson, HP, etc.). This separation helps you understand better. What type of element are you disabling? no longer touching critical parts unknowingly.

One particularly practical feature is the ability to choose the user to analyzeFrom a drop-down menu, you can select different system accounts to see what is loaded for each one, which is key if you manage multiple profiles on the same computer or if you are performing maintenance on a shared computer.

Colors and meaning of each entry in Autoruns

As you browse through the list, you'll see that Autoruns uses a color code to highlight certain entriesUnderstanding these colors helps you decide what you can remove with more peace of mind.

The entries that appear highlighted in yellow indicate that the associated file It is not on the expected routeThis usually means you uninstalled the application in the past, but the startup entry is still stuck. These are typical... "Ghost" processes of already removed software, automated tasks or remnants of old programs.

Tickets in Red usually correspond to elements that They are not digitally signed or verified by MicrosoftThis does not necessarily mean they are dangerous, but it does mean they should be to examine oneself closelyMany reliable tools, such as 7-ZipThey may be marked in red even if they are completely safe, while other unknown ones may indicate a possible threat.

From here on, the trick is to Pay special attention to what is in yellow (remains) and what is in red (not verified)This contrasts with what you know you have installed. Normal-colored elements that you recognize as part of your everyday hardware or software are usually less problematic, although they can also be disabled to improve performance.

How to disable programs that auto-start with Autoruns

The simplest way to prevent a program from launching at startup Autoruns involves removing the checkmark from the box that appears to the left of each entry. That "tick" indicates whether the item is enabled or not.

To work more safely, go to the menu Options and activate “Hide Microsoft Entries”This option hides everything directly related to Windows and leaves visible only the entries associated with it. third party programsThis reduces the risk of disabling something essential to the system.

Once the filter is activated, check the tab Logon or the tab Everything If you feel more comfortable, locate the programs you recognize that you don't want to start automatically (for example, game clients like Steam or Epic, sync services you don't use, software launchers from manufacturers, etc.) and uncheck the boxAfter the next restart, they will no longer run when the computer is turned on.

This method is ideal if you just want deactivate without deleting anythingThe program is still installed, and if you change your mind, simply return to Autoruns and re-check the box to reactivate automatic startup.

Completely remove residual boot entries

Sometimes what you're interested in is not just deactivating, but remove boot entry because it belongs to a program that has already been uninstalled or something you don't want to remain on the system.

A typical example is that of programs like Corel WordPerfectEven after removing them from "Add or Remove Programs," several components remain. In Autoruns, you'll still see references to Corel, associated services, or specific print drivers. The same is true for many other applications that have been installed on your computer over the years.

To delete an entry, do Right-click on the item and select "Delete"Autoruns will ask for confirmation, and upon acceptance, it will delete the corresponding key from the registry or wherever it was defined. From that moment on, the entry ceases to exist, and Windows will no longer attempt to run it.

You can also use the context menu Copy the item name, navigate to its location on the system, check it against online antivirus services like VirusTotal, or search for information on the internet.These options are crucial when you encounter an input you don't recognize and want to ensure it's not part of a critical driver or component you need.

Using Autoruns to delete specific items like Microsoft Teams

A fairly common case is that of applications that They reappear at the beginning even if you disable them from Task Manager. Microsoft Teams, especially when it comes bundled with Office 365 packages, is a good example, since it can install multiple boot entries.

In some systems, Teams appears more than once in Autoruns, for example, associated with Office PROPLUS or other versions of the suite. You can Disable Teams entry from Task Manager (Home tab) with right click > Disable, but if you want to remove all its occurrences, Autoruns gives you a much more complete view.

Enough with use the internal search engine of Autoruns (or filter by name) to locate all entries related to Teams, review them one by one, and decide whether to disable or delete them entirely. If you only want to prevent it from running, the wisest course of action is uncheck the boxIf you are sure you don't need it, you can delete the entry by right-clicking > Delete.

Advanced alternative: Delete entries from the Windows Registry

If for any reason you don't want to use Autoruns or need even more manual control, there's always the option of directly modify the Windows RegistryHowever, it is an advanced method that requires great care, as a mistake can cause startup problems or system instability.

To open the registry, type regedit In the Windows search bar, right-click on the result and choose «Run as administratorIn modern versions of Windows you can copy and paste complete paths in the Registry Editor's address bar, which makes navigation much easier.

Some routes where user boot entries are usually found are:

• HKEY_CURRENT_USER \ Software \ Microsoft \ Windows \ CurrentVersion \ Run
• HKEY_CURRENT_USER \ Software \ Microsoft \ Windows \ CurrentVersion \ RunOnce
• HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Explorer\StartupApproved\Run
• HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Explorer\StartupApproved\Run32 (This branch may not exist)
• HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Explorer\StartupApproved\StartupFolder
• HKLM\SOFTWARE\WOW6432Node\Microsoft\Windows\CurrentVersion\Run

In these keys you can locate entries for programs that run at startup. If you clearly identify the one you want to remove (for example, a reference to Teams or another program you no longer use), you can delete only that entryIdeally, you should only edit the registry if you are clear about what you are deleting, and preferably after first creating a backup. registry backup or restore point.

Control services, drivers, and other components with Autoruns

Beyond the visible programs, Autoruns stands out because it also It allows you to manage services, drivers, and other low-level components. that are loaded with Windows. These areas are very sensitive, but they can be key if you want deep optimization or if you are investigating suspicious behavior.

In the tab Services You'll find processes related to antivirus software, automatic update utilities, hardware manufacturer tools, print servers, and more. Many are necessary, but others are not. accessory services that only add to memory consumption without providing you with anything useful.

The tab Drivers This shows drivers that load when the system starts. Components from [the following programs] typically appear here. Intel, NVIDIA, AMD and other manufacturersas well as drivers for connected devices (printers, advanced keyboards, webcams, etc.). Touching this part without knowing what you're doing can cause problems. loss of function, performance, or even instability.

Therefore, when you're unsure what a particular service or driver does, always use the options of search for information online or check it with antivirus software. From the Autoruns context menu. Only disable or remove anything you can confidently identify as unnecessary or residual.

Advantages of using Autoruns in a maintenance strategy

Autoruns has become an almost mandatory tool in any maintenance USB drive or technical support kitBeing portable and free, you can take it with you and use it on any Windows PC without having to install anything.

Its ability to thoroughly examine the registry and all startup locations makes it ideal for Clean up pre-installed bloatware, disable unnecessary manufacturer utilities And, above all, to locate those rogue programs that keep running even though you think you've removed them.

If you don't want to resort to drastic solutions like a "nuke and pave" (formatting and reinstalling everything), Autoruns lets you use an approach of scalpel, making fine and selective adjustmentsYou can disable elements little by little, checking the effect on startup and performance, without having to completely reinstall Windows.

In combination with platforms such as PortableApps, which offer a large catalog of portable utilities, it is possible to build a working environment where virtually eliminate dependence on traditional facilitiesThis reduces the impact on the registry and keeps the system much cleaner over time.

With all this in mind, it's clear that Autoruns is one of those tools that makes the difference between "leaving the PC as is" and having a system truly under control: it makes it easy to identify phantom processes marked in yellow, locate unverified programs in red, filter out Microsoft products, disable or remove rogue entries like Teams, and even delve into services and drivers, always taking care not to touch anything critical; used judiciously, it becomes an indispensable ally for Remove programs that start automatically without permission. and keep your Windows much lighter and faster. For more information, see the Microsoft download page.