Tom's Guide | Tom's Hardware | Tom's Games
![]() |
![]() |
![]() |
Hello and thank you to all who view and respond to this request in advance.
Okay, when you run the msconfig program, and you go to the startup tab, I desperately want to know how to remove items from this list!
I have recently cleaned and removed several hundred malicious files from this client's computer. Everything seems to be working fine, and the system appears stable.So, the viruses have been removed, and the boxes are unchecked in the startup tab of the msconfig program, but I want the darn things gone altogether! Does anyone know where to go, to remove these entries? If they can only be removed through the registry, please tell me how and where to look. I am comfortable working with the registry should that be the case.
Any help would be greatly appreciated!

Go to the link below and scroll down to:
5) The System Registry - Windows 95/98/Me/NT/2000/XP
The System Registry-Startup Items
Tufenuf

use/run regedit,
(f3)search for run , runonce and -runonce folders,
in folders are startup files,
select files unwanted and delete,
also search for name of file if not found in those folders,
may suggest backing up registry just in case,using scanreg...
:)

The msconfig--startup entries come from several places. Tufenuf's link should probably do what you need. If you want to do it manually check my #2 here:
http://computing.net/windows95/wwwboard/forum/159473.html

Bofra, tufenuf, DAVEINCAPS, thank you guys all so very much for your help! You are awesome, (as usual).
It's good to see you again DAVE.
Always and forever a student of the trade,
Eric

The true answer to this is that YOU are the only one who can decide exactly how to remove these unticked items unless you provide a comprehensive list. Even then it might be difficult unless we happen to be aware of the details of all these programs.
Sure, the msconfig entries themselves can be removed as has been described. This does not necessarily remove the actual Programs/Files/Other registry entries that go together to produce what is in msconfig.
Some might have Uninstall's others might not.
DerekW

Thank you for this additional input. I understand this as it makes perfect sense. I will post a HT log shorly.

There is a free program available called "MSCONFIG Cleanup" but I'm not sure if it works with 98
http://www.get-in-control.com/msconfig-cleanup/
Hellz Yea!

Current HijackThis log file, after clean up and virus removal:
Logfile of HijackThis v1.99.1
Scan saved at 1:06:39 AM, on 1/25/06
Platform: Windows 98 Gold (Win9x 4.10.1998)
MSIE: Internet Explorer v6.00 SP1 (6.00.2800.1106)Running processes:
C:\WINDOWS\SYSTEM\KERNEL32.DLL
C:\WINDOWS\SYSTEM\MSGSRV32.exe
C:\WINDOWS\SYSTEM\MPREXE.exe
C:\WINDOWS\SYSTEM\mmtask.tsk
C:\WINDOWS\SYSTEM\ZONELABS\VSMON.exe
c:\windows\SYSTEM\KB891711\KB891711.exe
C:\WINDOWS\EXPLORER.exe
C:\WINDOWS\SYSTEM\SYSTRAY.exe
C:\WINDOWS\SYSTEM\ATICWD32.exe
C:\WINDOWS\SYSTEM\ATITASK.exe
C:\PROGRAM FILES\ZONE LABS\ZONEALARM\ZLCLIENT.exe
C:\PROGRAM FILES\GRISOFT\AVG FREE\AVGCC.exe
C:\PROGRAM FILES\GRISOFT\AVG FREE\AVGEMC.exe
C:\PROGRAM FILES\GRISOFT\AVG FREE\AVGAMSVR.exe
C:\WINDOWS\DESKTOP\DESKTOP MAINT UPDATE DAILY\HIJACKTHIS.exeR1 - HKCU\Software\Microsoft\Internet Explorer,SearchAssistant = http://www.iquicksearch.net/search.htm
R1 - HKCU\Software\Microsoft\Internet Explorer,SearchURL = http://www.go2realsearch.com/sp2.php
R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Window Title = Microsoft Internet Explorer provided by EarthLink Network, Inc.
R0 - HKCU\Software\Microsoft\Internet Explorer\Toolbar,LinksFolderName =
R3 - Default URLSearchHook is missing
O2 - BHO: (no name) - {D9A92092-C707-E0D0-2451-9F5B555C6092} - C:\WINDOWS\SYSTEM\PTEG.DLL (file missing)
O3 - Toolbar: &Radio - {8E718888-423F-11D2-876E-00A0C9082467} - C:\WINDOWS\SYSTEM\MSDXM.OCX
O4 - HKLM\..\Run: [SystemTray] SysTray.exe
O4 - HKLM\..\Run: [AtiCwd32] Aticwd32.exe
O4 - HKLM\..\Run: [AtiKey] Atitask.exe
O4 - HKLM\..\Run: [WheelMouse] C:\Program Files\Dual Wheel Mouse\4DMAIN.exe -startup
O4 - HKLM\..\Run: [CriticalUpdate] c:\windows\SYSTEM\wucrtupd.exe -startup
O4 - HKLM\..\Run: [BCWipeTM Startup] "C:\Program Files\Jetico\BCWipe\BCWipeTM.exe" startup
O4 - HKLM\..\Run: [Zone Labs Client] C:\Program Files\Zone Labs\ZoneAlarm\zlclient.exe
O4 - HKLM\..\Run: [AVG7_CC] C:\PROGRA~1\GRISOFT\AVGFRE~1\AVGCC.exe /STARTUP
O4 - HKLM\..\Run: [AVG7_EMC] C:\PROGRA~1\GRISOFT\AVGFRE~1\AVGEMC.exe
O4 - HKLM\..\Run: [AVG7_AMSVR] C:\PROGRA~1\GRISOFT\AVGFRE~1\AVGAMSVR.exe
O4 - HKLM\..\RunServices: [TrueVector] C:\WINDOWS\SYSTEM\ZONELABS\VSMON.exe -service
O4 - HKLM\..\RunServices: [KB891711] c:\windows\SYSTEM\KB891711\KB891711.exe
O6 - HKCU\Software\Policies\Microsoft\Internet Explorer\Restrictions present
O6 - HKCU\Software\Policies\Microsoft\Internet Explorer\Control Panel present
O9 - Extra button: Real.com - {CD67F990-D8E9-11d2-98FE-00C0F0318AFE} - C:\WINDOWS\SYSTEM\Shdocvw.dll
O12 - Plugin for .mid: C:\Program Files\Netscape\Communicator\Program\PLUGINS\npaudio.dll
O12 - Plugin for .SWF: C:\Program Files\Netscape\Communicator\Program\PLUGINS\NPSWF32.dll
O12 - Plugin for .avi: C:\Program Files\Netscape\Communicator\Program\PLUGINS\npavi32.dll

Here is an updated file, after a few more fixes and adjustments:
Logfile of HijackThis v1.99.1
Scan saved at 1:19:14 AM, on 1/25/06
Platform: Windows 98 Gold (Win9x 4.10.1998)
MSIE: Internet Explorer v6.00 SP1 (6.00.2800.1106)Running processes:
C:\WINDOWS\SYSTEM\KERNEL32.DLL
C:\WINDOWS\SYSTEM\MSGSRV32.exe
C:\WINDOWS\SYSTEM\MPREXE.exe
C:\WINDOWS\SYSTEM\mmtask.tsk
C:\WINDOWS\SYSTEM\ZONELABS\VSMON.exe
c:\windows\SYSTEM\KB891711\KB891711.exe
C:\WINDOWS\EXPLORER.exe
C:\WINDOWS\SYSTEM\SYSTRAY.exe
C:\WINDOWS\SYSTEM\ATICWD32.exe
C:\WINDOWS\SYSTEM\ATITASK.exe
C:\PROGRAM FILES\ZONE LABS\ZONEALARM\ZLCLIENT.exe
C:\PROGRAM FILES\GRISOFT\AVG FREE\AVGCC.exe
C:\PROGRAM FILES\GRISOFT\AVG FREE\AVGEMC.exe
C:\PROGRAM FILES\GRISOFT\AVG FREE\AVGAMSVR.exe
C:\WINDOWS\SYSTEM\SPOOL32.exe
C:\PROGRAM FILES\MOZILLA FIREFOX\FIREFOX.exe
C:\WINDOWS\DESKTOP\DESKTOP MAINT\HIJACKTHIS.exeR0 - HKCU\Software\Microsoft\Internet Explorer\Toolbar,LinksFolderName =
O3 - Toolbar: &Radio - {8E718888-423F-11D2-876E-00A0C9082467} - C:\WINDOWS\SYSTEM\MSDXM.OCX
O4 - HKLM\..\Run: [SystemTray] SysTray.exe
O4 - HKLM\..\Run: [AtiCwd32] Aticwd32.exe
O4 - HKLM\..\Run: [AtiKey] Atitask.exe
O4 - HKLM\..\Run: [CriticalUpdate] c:\windows\SYSTEM\wucrtupd.exe -startup
O4 - HKLM\..\Run: [BCWipeTM Startup] "C:\Program Files\Jetico\BCWipe\BCWipeTM.exe" startup
O4 - HKLM\..\Run: [Zone Labs Client] C:\Program Files\Zone Labs\ZoneAlarm\zlclient.exe
O4 - HKLM\..\Run: [AVG7_CC] C:\PROGRA~1\GRISOFT\AVGFRE~1\AVGCC.exe /STARTUP
O4 - HKLM\..\Run: [AVG7_EMC] C:\PROGRA~1\GRISOFT\AVGFRE~1\AVGEMC.exe
O4 - HKLM\..\Run: [AVG7_AMSVR] C:\PROGRA~1\GRISOFT\AVGFRE~1\AVGAMSVR.exe
O4 - HKLM\..\RunServices: [TrueVector] C:\WINDOWS\SYSTEM\ZONELABS\VSMON.exe -service
O4 - HKLM\..\RunServices: [KB891711] c:\windows\SYSTEM\KB891711\KB891711.exe
O6 - HKCU\Software\Policies\Microsoft\Internet Explorer\Restrictions present
O6 - HKCU\Software\Policies\Microsoft\Internet Explorer\Control Panel present
O12 - Plugin for .mid: C:\Program Files\Netscape\Communicator\Program\PLUGINS\npaudio.dll
O12 - Plugin for .SWF: C:\Program Files\Netscape\Communicator\Program\PLUGINS\NPSWF32.dll
O12 - Plugin for .avi: C:\Program Files\Netscape\Communicator\Program\PLUGINS\npavi32.dll

Looks like you've trimmed things back pretty well and there's nothing that looks pointless (or harmful) to me.
DerekW

![]() |
![]() |
![]() |

This post is quite old and has been locked from receiving new replies. Please create a new posting instead.
| Ads by Google |