Advanced system utilities to manage, troubleshoot, and diagnose Windows and Linux systems and applications.
The URL https://learn.microsoft.com/sysinternals/downloads/autoruns is the official Microsoft Sysinternals download page for Autoruns v14.11 by Mark Russinovich. The download there (Autoruns.zip) is an official Microsoft tool and is safe according to the provided documentation.
Autoruns is expected to contain multiple executables (Autoruns.exe, Autorunsc.exe, and related files) in a single ZIP package. That is normal for this tool. The documentation also notes that Autorunsc is the command-line equivalent of Autoruns and is included in the same download.
If the file was downloaded directly from the official Sysinternals page on learn.microsoft.com and VirusTotal and other scanners report it as clean, that is a strong indication it is safe. The presence of non-English metadata or descriptions in VirusTotal does not by itself indicate malware; it can come from how different engines or community members label the file.
For additional assurance when using Autoruns:
- Download only from the official Sysinternals page on learn.microsoft.com.
- Optionally use the Sysinternals Live link (live.sysinternals.com/autoruns.exe) shown in the documentation to run it directly from Microsoft’s servers.
- Keep Windows and Microsoft Defender Antivirus up to date to stay protected against malware in general.
References: