I have used the Startup apps tab in Task Manager for years, and I never once questioned what it left out. The list is short, every name on it looks familiar, and that combination makes it feel complete. But I have written before about how Task Manager only tells half the story, and the same gap runs straight through its startup list.
Task Manager reads from a very short list
Task Manager currently shows 33 startup apps on my PC. Most of them are things I put there on purpose, like Slack, OneCommander, and UniGetUI, and the rest are the usual tray items such as SecurityHealthSystray and the Realtek audio service. My last reported BIOS time, which covers the firmware stretch before Windows loads, reads 6.6 seconds, so nothing about this screen suggests a boot problem worth investigating on its own.
The list looks complete because of where it comes from. Task Manager and the Startup page under Settings > Apps > Startup both read a friendly subset of your autostart entries, meaning shortcuts in the per-user and all-users Startup folders, the Run keys under HKEY_CURRENT_USER and HKEY_LOCAL_MACHINE, and metadata for packaged Store apps.
That covers the most common ways a normal app announces itself, which is exactly why the names look familiar. Windows supports plenty of other autostart mechanisms, though, and scheduled tasks, services, Winlogon hooks, and shell extensions never appear in either screen.
There is one entry on mine called "Program" with no publisher and no icon, sitting there disabled. That is a leftover from something I removed. Task Manager does not name it outright, though right-clicking the column header and adding the Command line column usually exposes the path behind it. It also does not remove anything when you turn off an item. Windows records the off state in a separate StartupApproved key and leaves the original value where it was.
Best Deals: DELL Optiplex 7060 SFF Desktop Computer PC
Prices last scanned 18 hours and 18 minutes ago
7 days ago: $376 USD
7 days ago: $411.21 USD
7 days ago: $1163.99 CAD
7 days ago: £613.63
Autoruns found 294 entries on the same PC
Autoruns comes from Microsoft's Sysinternals suite, and it is a 3 MB download with no installer. You unzip it, right-click Autoruns64.exe, and run it as administrator, which matters because several locations stay hidden without elevation.
The Everything tab reported 294 entries on the same PC that Task Manager summarized as 33. Those extra entries aren't hidden; they just live in categories Task Manager was never built to display. Autoruns splits them across twenty tabs, and four of them cover almost everything worth auditing, namely Logon, Scheduled Tasks, Services, and Explorer.
Our Latest TweakTown Guides
- I audited every credential Windows had stored for me and deleted three-quarters of them
- The Complete Windows 11 Tweaking Guide for 2026: What to Change and What to Avoid
- Using Multiple Monitors? Change these Windows settings for a Better Experience
- Windows Sandbox is The Windows Security Feature Most People Never Use
- I ditched the Windows 11 context menu for this open-source tool, and here's why
The Logon tab alone holds 27 entries, and two of them are highlighted yellow because the files they point to no longer exist. One is Teams, the other is a VPN, and both are startup instructions for software that left my PC months ago. Underneath the Active Setup key, I found separate installer entries for Chrome and Edge plus a Google Platform Experience Helper, none of which appear anywhere in Task Manager. My own HyperKey script sits in the Startup folder flagged as Not Verified, which is correct, since I wrote it.
Frequently Asked Questions
Open a question for an answer from TweakTown's coverage of this guide, or ask your own below.
How can you tell whether a startup entry is a leftover file from an uninstalled app in Autoruns?
What do the Hide Microsoft Entries and Hide Windows Entries filters remove in Autoruns, and when should you use each one?
How do Verify code signatures and VirusTotal help sort suspicious startup entries in Autoruns?
Have a question that isn't listed here? Ask below, and TweakBot will answer it.
That 27 is smaller than Task Manager's 33, and the reason is worth knowing. Packaged apps like Xbox and Phone Link now get their own tab in Autoruns, added in May 2026. Before that update, people regularly reported Store app entries showing up in Task Manager and nowhere in Autoruns.
Five apps were turned off in one tool and checked in the other
This is the part that changed how I read both screens. Task Manager lists Spotify, Notion, OneDrive, Proton VPN, and SteelSeries GG as Disabled. In Autoruns, opened minutes later with nothing changed in between, all five still show a checked box on the Logon tab.
Neither tool is lying. They just track different things. When you turn off an app in Task Manager, Windows writes a flag into the StartupApproved key and leaves the Run value untouched. Autoruns reads the Run key, so it sees the value sitting there and reports it as present. When Autoruns turns off something, it uses its own mechanism instead, moving the data into an AutorunsDisabled value that Task Manager pays no attention to.
So the checkbox in Autoruns answers a narrower question than I assumed. It tells you the entry exists in that location, not that it will run at your next login. The two disable systems operate independently, and turning something off in one does not switch it off in the other. Once I understood that, I stopped treating either checkbox as the final word and started reading them as two partial views of the same PC.
The filters do the real work here
No one should try to read 294 rows. Under the Options menu, Hide Empty Locations, Hide Microsoft Entries, and Hide Windows Entries cut the list down to third-party additions, which is where anything questionable is going to be. The last two overlap but are not identical, since Hide Windows Entries drops the components signed as part of Windows itself, while Hide Microsoft Entries drops anything Microsoft published, including apps like OneDrive that sit well outside the Windows folder.
Open Scan Options from the same menu and turn on Verify code signatures. Autoruns then labels every publisher as verified or not, which sorts the list faster than reading file paths. The same dialog has a Check VirusTotal.com option that fills the VirusTotal column with a detection ratio. It sends file hashes rather than the files themselves unless you separately allow submitting unknown images, and a single detection on a signed utility is usually a heuristic rather than a finding. Hide VirusTotal Clean Entries then narrows what is left to a handful worth researching.
When you do act on something, uncheck it instead of deleting it. Unchecking stores the original data, so re-checking the box puts it back, while Delete from the Entry menu leaves no trail.
The Services and Drivers tabs include components the system depends on. Disabling the wrong one usually breaks a specific feature, and in rarer cases it stops Windows from booting cleanly. So I'd say leave both alone unless you know precisely what a line does, and change one thing per reboot so you know which change caused a problem.
A saved baseline beats a one-time cleanup
None of this made my PC faster, and I did not expect it to. A 6.6-second BIOS time and 294 autostart entries can coexist, because most of what Autoruns lists is dormant or loads on demand. The number is documentation and not a score. Run autorunsc to dump the list to a text file, save it somewhere, and compare it after your next round of installs. The differences are the interesting part.
