As Good as AutoRuns is, Sometimes You Still Need to Manually Search the Registry
Posted by William Diaz on April 2, 2012
I love Autoruns. Think msconfig on steroids. It truly reveals everything that starts up with Windows. Well almost everything. A couple days ago a user complained to me of a popup error they were receiving after logon. I had no doubt I would find the offending process in Autoruns, since the error message revealed the process name:
To my surprise, I couldn’t locate slpmonx.exe with Autoruns. Manually searching the registry, I located the reference to the non-existent process in the Load string of HKCU\Software\Microsoft\Windows NT\CurrentVersion\Windows:
So, as good as AutoRuns is, sometimes you still need to manually search the registry.
I wonder, possible candidate for a new Autoruns search location?