CMD window at startup

[Terry]

I have 2 cmd windows open (minimized) at startup. I have used various
utilities to check my startup programs and they are not listed. Is there
another way to see what might be starting a cmd window on startup? I have
been having Virus problems, so I would like to investigate.

Terry

 

[Terry R.]

The date and time was 10/30/2008 1:51 PM, and on a whim, Terry pounded
out on the keyboard:

I have 2 cmd windows open (minimized) at startup. I have used various
utilities to check my startup programs and they are not listed. Is there
another way to see what might be starting a cmd window on startup? I have
been having Virus problems, so I would like to investigate.

Terry

Hi Terry (no I'm not talking to myself),

Try Autoruns:
http://technet.microsoft.com/en-us/sysinternals/bb963902.aspx

Install it, wait for it to complete a scan, and then click Options, Hide
Microsoft entries, and then press F5.

From there you see EVERYTHING. If you right click on any entry, you
can do a look up of the entry to help you t-shoot your issue. Click on
an entry and uncheck it to disable it. Once you've tested to see it
wasn't needed (after a couple days), from Autoruns you can right click
on the entry and delete it.

Of course if you're having virus issues, this is just the tip of the
iceberg, unless you're sure the system is clean.

--
Terry R.

***Reply Note***
Anti-spam measures are included in my email address.
Delete NOSPAM from the email address after clicking Reply.

 

[Lem]

I have 2 cmd windows open (minimized) at startup. I have used various
utilities to check my startup programs and they are not listed. Is there
another way to see what might be starting a cmd window on startup? I have
been having Virus problems, so I would like to investigate.

Terry

Have you tried using Autoruns?
http://technet.microsoft.com/en-us/sysinternals/bb963902.aspx

If yes and you still can't figure things out, see below.

<MS-MVP PA Bear>

Run a /thorough/ check for hijackware, including posting your hijackthis
log to an appropriate forum.

Checking for/Help with Hijackware
http://aumha.org/a/parasite.htm
http://aumha.org/a/quickfix.htm
http://aumha.net/viewtopic.php?t=5878
http://wiki.castlecops.com/Malware_Removal_and_Prevention:_Introduction
http://mvps.org/winhelp2002/unwanted.htm
http://inetexplorer.mvps.org/data/prevention.htm
http://inetexplorer.mvps.org/tshoot.html
http://www.mvps.org/sramesh2k/Malware_Defence.htm
http://defendingyourmachine2.blogspot.com/
http://www.elephantboycomputers.com/page2.html#Removing_Malware

When all else fails, HijackThis v2.0.2
(http://aumha.org/downloads/hijackthis.exe) is the preferred tool to use
(in conjuction with some other utilities). HijackThis will NOT fix
anything on its own, but it will help you to both identify and remove
any hijackware/spyware with assistance from an expert.

**Post your log to
http://spywarehammer.com/simplemachinesforum/index.php?board=10.0,
http://forums.spybot.info/forumdisplay.php?f=22,
http://aumha.net/viewforum.php?f=30,
or another appropriate forum for review by an expert in such matters,
not here.**

<\MS-MVP PA Bear>

--
Lem -- MS-MVP

To the moon and back with 2K words of RAM and 36K words of ROM.
http://en.wikipedia.org/wiki/Apollo_Guidance_Computer
http://history.nasa.gov/afj/compessay.htm

 

[Ronaldo]

Try this application

"A-squared HiJackFree"
http://www.hijackfree.com/en/

 

[Terry]

Thank you, the AutoRuns program is a much better utility than the one I was
using. I have also posted to a HJT forum. Thank you for the help.

Terry

 

[Terry R.]

The date and time was 10/31/2008 10:12 AM, and on a whim, Terry pounded
out on the keyboard:

Thank you, the AutoRuns program is a much better utility than the one I was
using. I have also posted to a HJT forum. Thank you for the help.

Terry

You're welcome. Report back when you find the offending malware/virus.

--
Terry R.

***Reply Note***
Anti-spam measures are included in my email address.
Delete NOSPAM from the email address after clicking Reply.