msconfig question

[paladin256]

When I run the msconfig utility and click on the startup tab I have some programs that have the location listed as common startup. I know that a couple of them are viruses. Where is the common startup area? I have searched the registry in hklu and hklm under software/microsoft/windows/current version and also under startup folders. If I disable them with msconfig they add themselves back in. What areas does msconfig read for the startup tab?


Thanks You.

 

[TheLad]

Try looking in C:\Documents and Settings\All Users\Start Menu\Programs\Startup

Or alternatively goto Start / All programs, right-click on Startup and select "Open All Users"

--------------------------------------
"Insert funny comment in here!"
--------------------------------------

 

[paladin256]

I have already looked there and it is empty.

 

[linney]

What are the names of these self-starting programs?

AutoRuns for Windows v9.31

http://technet.microsoft.com/en-us/sysinternals/bb963902.aspx

Have a look at the program SDfix mentioned in this link.

http://forums.techguy.org/malware-removal-hijackthis-logs/717581-zlob-trojan-bsod-w-avg.html

Have you tried scanning for malware from Safe Mode?

 

[Sympology]

Stupid question, but why don't you just remove the viruses?

You may need to turn off system restore to get rid of them....

Only the truly stupid believe they know everything.
Stu.. 2004

 

[paladin256]

I have everything fixed now. There was a folder missing in the all users section. Because it was not there windows was forcing the files to load through the msconfig. I recrested the folder and was then able to delete the infected files.

Thanks for the help.