editing registry

[cyberrat666]

i had a virus and it placed its name in my start up menue
(the msconfig area as my friends call it)

how can i safly remove its name from the list

i know having it unchecked makes it not run i just dont want to see the name of the virus in there everytime i go in to check to see what is running in the start up menue
and when i check my registry its name is still there even though it is gone.

 

[Wishdiak]

cyberrat666,

You may find that the -Virus/Spyware discussion forum is a better place to discuss viruses and their removal.

Wishdiak

http://www.wishdiak.com

 

[edfair]

Involves editing the registry and removing it. Or you could download and run a registry clean program. They do a good job of removing redundent entries.

Ed Fair
Give the wrong symptoms, get the wrong solutions.

 

[TekTippy4U]

start / run REGEDIT

and see;

http://support.microsoft.com/default.aspx?scid=kb;EN-US;179365

TT4U

Notification:
These are just my thoughts....and should be carefully measured against other opinions.
Backup All Important Data/Docs

 

[cyberrat666]

TekTippy4U i checked out the article didnt help even though the viruses are removed from the registry they are still listed in the start up area in (msconfig)

edfair- can you recomend a good program im using adware6 and it does clean the registry but not the start up in (msconfig)

 

[TekTippy4U]

my bad (just a bit);
since you've "unchecked" the items, a new REG key gets created with a hyphen at the end.....so look at (for) the
,,,\...\RUN-
keys.
Delete the values from the right pane..or you can delete the whole "hyphenated" KEY only. The keys with the appended hyphen are the disabled items.

Also look at the following keys;
HKEY_USERS\.Default\...\...\Startup
and
HKEY_USERS\<profilename>\...\...\Startup

otherwise it's an impossibility for it to be listed in msconfig's Startup tab

TT4U

Notification:
These are just my thoughts....and should be carefully measured against other opinions.
Backup All Important Data/Docs

 

[TekTippy4U]

just thought of one other 'possiblity' -- IF you have an app like MLIN'S Startup ControlPanel installed -- look at/for the ...\software\mlin keys. (hyphenated or otherwise).

TT4U

Notification:
These are just my thoughts....and should be carefully measured against other opinions.
Backup All Important Data/Docs

 

[cyberrat666]

no mlin keys found

i am finding that i dont have a registry key that has start up listed

HKEY_USERS\.Default\...\...\Startup

i have searched all HKEY_USERS and no where is there a place that says startup
but since im really new at playing around in the registry i may not be following correctly because of the blank spaces where you just put .... can you fill in the blanks please
thanks

 

[TekTippy4U]

what about hyphenated keys in Local Machine?
any found?
remove the values?

HKEY_USERS\.DEFAULT\Software\Microsoft\Windows\CurrentVersion\Run and
HKEY_USERS\.DEFAULT\Software\Microsoft\Windows\CurrentVersion\Run-
and all RUN related keys (this is actually the default starting point for a Profile, but is a mirror of the HKEY_CURRENT_USER key if NO User Profiles are being used.

ONLY IF User Profiles are enabled (multiple users on box)
C:\WINDOWS\Profiles\<username>\StartMenu\Programs\StartUp folder
and these are reflected here in REG at
HKEY_USERS\<username>\StartMenu\Programs\StartUp



TT4U

Notification:
These are just my thoughts....and should be carefully measured against other opinions.
Backup All Important Data/Docs

 

[torturedmind]

maybe you could just search the entire registry with the name of the file of your virus which you can refer from msconfig.exe, say: "virusfile.exe". if you find it, you can delete it.

hope this helps. peace!

kilroy
philippines

"Illegitimis non carborundum!"