Delecting items in msconfig startup

[John]

Loaded new version XP home and (stupidly) went to get
latest updates without starting firewall (Q: why isn't it
on by default?) rapidly resulting in numerous blaster-type
worms. Have stopped/deleted them all (after starting the
firewall!) and disabled them in the startup tab in
msconfig. Is there any way of deleting them from appearing
there? The files do not exist on the discs.

The files in question are teekids, msblast, ms laugh,
winsvc and enbiei (all.exe) given as located in
SOFTWARE\Microsoft\Windows\CurrentVersion\Run but I can't
find them using Regedit.

I have used Stinger.

 

[Lanwench [MVP - Exchange]]

Loaded new version XP home and (stupidly) went to get
latest updates without starting firewall (Q: why isn't it
on by default?)

....it will be, once XP SP2 is released. MS realized that this was a problem!

rapidly resulting in numerous blaster-type
worms. Have stopped/deleted them all (after starting the
firewall!) and disabled them in the startup tab in
msconfig. Is there any way of deleting them from appearing
there? The files do not exist on the discs.

The files in question are teekids, msblast, ms laugh,
winsvc and enbiei (all.exe) given as located in
SOFTWARE\Microsoft\Windows\CurrentVersion\Run but I can't
find them using Regedit.

Do you have good antivirus software, updated? Have you run a full scan? Have
you tried an online scan for a second opinion - such as
http://housecall.anvivirus.com ? Also try AdAware & Spybot to search for
adware/malware.....

I have used Stinger.

Don't know what the files/trojans are, but Stinger isn't designed to
detect/remove everything....

 

[Wesley Vogel]

John;

To remove items from msconfig | Startup

Go here:
http://www.kellys-korner-xp.com/xp_abc.htm

Click the "M"
Scroll down to:
---------------------------------
Msconfig - To Remove Entries:

These values are stored in the Registry. Click Start/Run/Regedit

For items that were in the Start menu, Programs, Startup folder:

HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Shared Tools\MSConfig\startupfolder.
You'll find a subkey for each disabled item.

For items loaded from the Registry:

HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Shared Tools\MSConfig\startupreg.
Again, you'll find a subkey for each disabled item.
----------------------------

Or if you prefer an automated edit.

Go here:
http://www.kellys-korner-xp.com/xp_tweaks.htm

Read the instructions at the top of the page.
Scroll down to:
148. Right hand side. Clear Disabled Items from Msconfig Startup
http://www.kellys-korner-xp.com/regs_edits/msconfigdisabled.vbs

 

[Doug Knox MS-MVP]

Additionally, see www.kellys-korner-xp.com/xp_qr.htm#rpc for a small, quick utility that will remove Blaster, and take you to the download for the MS Patch.

 

[John]

Thanks Wes, worked a treat

-----Original Message-----
John;

To remove items from msconfig | Startup

Go here:
http://www.kellys-korner-xp.com/xp_abc.htm

Click the "M"
Scroll down to:
---------------------------------
Msconfig - To Remove Entries:

These values are stored in the Registry. Click Start/Run/Regedit

For items that were in the Start menu, Programs, Startup folder:

HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Shared Tools\MSConfig\startupfolder.
You'll find a subkey for each disabled item.

For items loaded from the Registry:

HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Shared Tools\MSConfig\startupreg.
Again, you'll find a subkey for each disabled item.
----------------------------

Or if you prefer an automated edit.

Go here:
http://www.kellys-korner-xp.com/xp_tweaks.htm

Read the instructions at the top of the page.
Scroll down to:
148. Right hand side. Clear Disabled Items from Msconfig Startup
xp.com/regs_edits/msconfigdisabled.vbs

--
Hope this helps. Let us know.
Wes

In John <[email protected]> hunted and pecked:

.

 

[Wesley Vogel]

John;

Glad it worked!