Hi Folks, just a quick reminder of the value of using the start up tab in msconfig to check what is loading. Despite having decent firewall and AV (Avast), constantly updating spyware detection etc, a Vundoo trojan recntly got on my system Avast didn't pick up on it, but I stupidly let my firewall give internet access to 'msserver' The process, and entry in msconfig, that gave the game away was called 'awtstsrs'.

I have now successfully got rid of this using Malwarebytes, and the most it could have been on my pc before I cottoned on was 36 hrs. I know it was stupid of me to let it past my firewall (son was doing so much xbox game and media stuff I got lazy checking was was being asked), but I'd rather admit to being a prat if this post is a warning to anyone, and a simple check in msconfig that saved the day - will now do this more regularly and recommend as a 'double check'. Cheers, John

Here's a little prog I have.It's perfect for stopping things attaching to your start up menu.


StartupMonitor is a small utility that runs transparently (it doesn't even use a tray icon) and notifies you when any program registers itself to run at system startup. It prevents annoying programs from registering themselves behind your back.

http://www.mlin.net/StartupMonitor.shtml

I've got Startup Monitor too - definitely worth having.

John I wouldn't say you were a "prat" ...... just human... and considerate enough to post about what happened to you!

Thanks ... it's a reminder to us all to keep on top of things

Incidently, has anybody ever tried this on Vista yet ? I note Mike Lin says he hasn't tested it on Vista .

Try it Anne, come back and tell us if it works.

Thanks Malvachat, I'm going to use that program from now on. I have spybot, which warns me when something is changing in the registry, but I suspect that this got through when I was also installing/changing other programs, so did not pick up on the malware itself. A start up monitor sounds more user friendly less likely for this sort of thing to slip through the net.

Thanks also to Anne (kind words from a fellow scouser) - I will try also on Vista pc and let you know if it works. Cheers, John.

The StartupMonitor posted by Malvachat works fine on Vista, clearer than spybot in that you know it's a start up change, rather that just registry. Cheers mate, John.