AutoRuns from SysInternals
AutoRuns is a Microsoft SysInternals utility that lets you take a deep-down look at what lurks under the hood when your computer/server starts. You can use Autoruns to identify programs that automatically start when your computer starts and you can disable them by unchecking the box.
This is especially useful when you are trying to boost the startup performance for your system, or even if you’re trying to locate some kind of unidentified malware or a spy program. Autoruns categorizes the images into various tabs like logon, IE plugins, Drivers, Winsock providers, etc to help you easily find what you’re looking for. The new version also has a tab that displays the Windows Vista gadgets that are loaded at startup.
I think it’s really an awesome tool. You can download Autoruns from the Microsoft SysInternals website.
Shijaz Abdulla is a Partner Technology Advisor at Microsoft, helping their top tier partners build on their Microsoft practice. He is also a trusted advisor to medium enterprise customers in Qatar. He is a blogger, tech enthusiast, and a Microsoft evangelist.
Autoruns is great! Couple it with another SysInternals/Microsoft tool ‘Process Explorer’ and it is VERY effective against virues/malware.
See this presentation by Mark Russinovich: http://www.microsoft.com/emea/spotlight/sessionh.aspx?videoid=359