explorer strats automatically with windows

M

Marko

My associate's computer suddenly has IE6 starting up automatically when
windows 2000 pro boots up. I cannot find where to stop it, anybody know?

TIA

--
Marko Jotic, MMCT Holdings Int. Inc.
"Common sense is anything but common".
From the notebooks of Lazarus Long. Robert A. Heinlein.
Handmade knives, antique designs, exotic materials at
http://www.knifeforging.com/
 
A

Alan Edwards

Check in Msconfig for any oddities.
(Start-Run-MSCONFIG-Startup tab)
If you cannot see anything in Msconfig then:

Start-Run-msinfo32
Click the + beside Software Environment to expand.
Click Startup Programs
Ctrl+A to Select All, Ctrl+C to Copy.
Paste that information in your message.

....Alan
 
M

Marko

thanks,

I downloaded msconfig and ran it (not included in win2k):
one key in HKLM\softawre\...\run is "configuration loader" data is
"iexplore.exe"

is it safe to delete this?

I then ran msinfo32 and got the same info:

System Information report written at: 03/10/2003 03:20:54 PM
[Startup Programs]

Program Command User Name Location
Synchronization Manager mobsync.exe /logon All Users
HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Run
TFncky tfncky.exe All Users
HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Run
Tpwrtray tpwrtray.exe All Users
HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Run
S3TRAY s3tray.exe All Users
HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Run
Promon.exe promon.exe All Users
HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Run
XircWinModem4 ltcm000c.exe 9 All Users
HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Run
EM_EXEC d:\progra~1\mousew~1\system\em_exec.exe All Users
HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Run
VetTray d:\progra~1\comput~1\etrust~1\etrust~1\vettray.exe All Users
HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Run
ADUserMon d:\program files\iomega\autodisk\adusermon.exe All Users
HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Run
Iomega Drive Icons d:\program files\iomega\driveicons\imgicon.exe All
Users HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Run
Deskup d:\program files\iomega\driveicons\deskup.exe /imgstart All
Users HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Run
Configuration Loader iexplore.exe All Users
HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Run
RealTray d:\program files\real\realplayer\realplay.exe
systemboothideplayer All Users
HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Run
WinampAgent "d:\program files\winamp\winampa.exe" All Users
HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Run
SunJavaUpdateSched d:\program files\java\j2re1.4.2_01\bin\jusched.exe
All Users HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Run

Alan said:
Check in Msconfig for any oddities.
(Start-Run-MSCONFIG-Startup tab)
If you cannot see anything in Msconfig then:

Start-Run-msinfo32
Click the + beside Software Environment to expand.
Click Startup Programs
Ctrl+A to Select All, Ctrl+C to Copy.
Paste that information in your message.

...Alan
Click to expand...

--
Marko Jotic, MMCT Holdings Int. Inc.
"Common sense is anything but common".
From the notebooks of Lazarus Long. Robert A. Heinlein.
Handmade knives, antique designs, exotic materials at
http://www.knifeforging.com/
 
A

Alan Edwards

Get rid of "configuration loader"
You have a trojan, one of the Backdoor.sbot variants perhaps?
How up-to-date is your anti-virus?

You should also do a spyware scan.
Ad-Aware: http://www.lavasoftusa.com/

....Alan
--
Alan Edwards, MS MVP W95/98 Systems
http://dts-l.org/index.html

In microsoft.public.windows.inetexplorer.ie6.browser, Marko
thanks,

I downloaded msconfig and ran it (not included in win2k):
one key in HKLM\softawre\...\run is "configuration loader" data is
"iexplore.exe"

is it safe to delete this?

I then ran msinfo32 and got the same info:

System Information report written at: 03/10/2003 03:20:54 PM
[Startup Programs]

Program Command User Name Location
Synchronization Manager mobsync.exe /logon All Users
HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Run
TFncky tfncky.exe All Users
HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Run
Tpwrtray tpwrtray.exe All Users
HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Run
S3TRAY s3tray.exe All Users
HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Run
Promon.exe promon.exe All Users
HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Run
XircWinModem4 ltcm000c.exe 9 All Users
HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Run
EM_EXEC d:\progra~1\mousew~1\system\em_exec.exe All Users
HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Run
VetTray d:\progra~1\comput~1\etrust~1\etrust~1\vettray.exe All Users
HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Run
ADUserMon d:\program files\iomega\autodisk\adusermon.exe All Users
HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Run
Iomega Drive Icons d:\program files\iomega\driveicons\imgicon.exe All
Users HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Run
Deskup d:\program files\iomega\driveicons\deskup.exe /imgstart All
Users HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Run
Configuration Loader iexplore.exe All Users
HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Run
RealTray d:\program files\real\realplayer\realplay.exe
systemboothideplayer All Users
HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Run
WinampAgent "d:\program files\winamp\winampa.exe" All Users
HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Run
SunJavaUpdateSched d:\program files\java\j2re1.4.2_01\bin\jusched.exe
All Users HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Run

Alan said:
Check in Msconfig for any oddities.
(Start-Run-MSCONFIG-Startup tab)
If you cannot see anything in Msconfig then:

Start-Run-msinfo32
Click the + beside Software Environment to expand.
Click Startup Programs
Ctrl+A to Select All, Ctrl+C to Copy.
Paste that information in your message.

...Alan
Click to expand...
Click to expand...
 
M

Marko

thanks Alan,

sorry about the delay, mine went down with a bad video card in between.

I took off the "configuration loader", it worked, many thanks. his
antivirus (eTrust) is up to date (daily), we are double checking on the
trojan.

I did the ad-aware scan and blew off everything (at the same time as I
was communicating with you).

Alan said:
Get rid of "configuration loader"
You have a trojan, one of the Backdoor.sbot variants perhaps?
How up-to-date is your anti-virus?

You should also do a spyware scan.
Ad-Aware: http://www.lavasoftusa.com/

...Alan
Click to expand...

--
Marko Jotic, MMCT Holdings Int. Inc.
"Common sense is anything but common".
From the notebooks of Lazarus Long. Robert A. Heinlein.
Handmade knives, antique designs, exotic materials at
http://www.knifeforging.com/
 

Ask a Question

Want to reply to this thread or ask your own question?

You'll need to choose a username for the site, which only take a couple of moments. After that, you can post your question and our members will help you out.

Ask a Question

Similar Threads

binding 2
Animation preview question 4
change paper size without scaling 14
enlarge/merge drives 4
applying notes master 4
multiple notes masters 2
start dsl connection automatically 2
Page advance question 14

Top