WinRar self-extracting archive

[aa]

Every time I start XP a message pops up:
WinRar self-extracting archive
extracting mtu.bat
cannot create mtu.bat
extracting re12.reg
extracting blank.html
extracting rell.REG

(I have no WinRar installed at all)
Then IE starts saying it cannot open blank.html
and a DOS prompt window appears as well as another error mesage "some files
cannot be created. Close all applications, reboot Windows"

I close all these the computer works fine. But it happens all the time

How do I get rid of it?

 

[Rock]

Every time I start XP a message pops up:
WinRar self-extracting archive
extracting mtu.bat
cannot create mtu.bat
extracting re12.reg
extracting blank.html
extracting rell.REG

(I have no WinRar installed at all)
Then IE starts saying it cannot open blank.html
and a DOS prompt window appears as well as another error mesage "some files
cannot be created. Close all applications, reboot Windows"

I close all these the computer works fine. But it happens all the time

How do I get rid of it?

Go to Start | Run. Type in Msconfig, click ok. On the startup tab look
around for a line that wants to run something, something you don't
recognize, and uncheck it. If you can't identify the culprit by
looking at the entries do some clean boot troubleshooting, by disabling
1/2 of the entries on the startup tab. Reboot and see if the problem is
still there or not. If not, go back to msconfig, recheck that 1/2 and
uncheck the other half. Once you identify which half, half it again
until you find the culprit.

How to Troubleshoot By Using the Msconfig Utility in Windows XP
http://support.microsoft.com/?id=310560

How to perform advanced clean-boot troubleshooting in Windows XP
http://support.microsoft.com/?id=316434

Might be a good idea to do a thorough scan for malware too.

http://aumha.org/a/parasite.htm
http://rgharper.mvps.org/cleanit.htm
http://mvps.org/winhelp2002/unwanted.htm
http://www.spywareinfo.com

 

[Mikhail Zhilin]

See also the 8th reply (Posted: Aug 7 2004, 12:51 PM) in

http://help.lockergnome.com/index.php?s=c2939cd35413f732778cddfb18033f6c&showtopic=23157

(it is one long line; if you'll see it wrapped -- combine the both
parts). Probably SpyBot Search & Destroy, or LavaSoft AdAware will help
to get rid of this spyware.
--
Mikhail Zhilin
http://www.aha.ru/~mwz
Sorry, no technical support by e-mail.
Please reply to the newsgroups only.
======

 

[aa]

Thanks,
Indeed out of 12 entries there I do understand what half of them is doing
there. Yet they might be nessessary. If I disable half of them, is there a
chance that XP would not start at all?

 

[Rock]

Thanks,
Indeed out of 12 entries there I do understand what half of them is doing
there. Yet they might be nessessary. If I disable half of them, is there a
chance that XP would not start at all?

No, not in the startup tab. Those are items run after windows boots.

 

[Len]

There are self-extracting RAR files usually ending with a .exe so that they
can run without an associated program. Obviously something is triggering
this archieve at startup. The other poster did give you the best
information which is to eliminate startup items as much as possible as they
sometimes take on names simular to expected startup files.

This is assuming you are doing nothing on XP start except watching the
monitor. If you attempt to open a program and then this occurs you will (or
should) know what is triggering the event. Same is true if you logon... try
the three finger salute at the welcome screen and logon as administrator to
see if it is solely connected to your logon.

Good Luck,
Len