Windows Explored

I love Autoruns. Think msconfig on steroids. It truly reveals everything that starts up with Windows. Well almost everything. A couple days ago a user complained to me of a popup error they were receiving after logon. I had no doubt I would find the offending process in Autoruns, since the error message revealed the process name:

To my surprise, I couldn’t locate slpmonx.exe with Autoruns. Manually searching the registry, I located the reference to the non-existent process in the Load string of HKCU\Software\Microsoft\Windows NT\CurrentVersion\Windows:

So, as good as AutoRuns is, sometimes you still need to manually search the registry.

I wonder, possible candidate for a new Autoruns search location?