G
Guest
Whilst looking for evidence of a virus, I checked MSinfo32's startup area and
found approx. 2000 entries. I have run all sorts of scans and checked the
startup groups and RUN sections in the registry (HKLM, HKCU etc) and cannot
find where Msinfo32 is getting this information. The computers behaviour
seems stable, and all scans have come up clean, so I am confused as to wether
this is viral or just some sort of corruption.
I don't really want to post all 2000 lines of text here....but this is a
sample;
$winnt$ $winnt$.inf .DEFAULT Startup
12520437 12520437.cpx NT AUTHORITY\SYSTEM Startup
12520437 12520437.cpx .DEFAULT Startup
12520850 12520850.cpx NT AUTHORITY\SYSTEM Startup
12520850 12520850.cpx .DEFAULT Startup
6to4svc 6to4svc.dll NT AUTHORITY\SYSTEM Startup
6to4svc 6to4svc.dll .DEFAULT Startup
Any ideas would be greatly appreciated.
Regards,
Scubamegs.
found approx. 2000 entries. I have run all sorts of scans and checked the
startup groups and RUN sections in the registry (HKLM, HKCU etc) and cannot
find where Msinfo32 is getting this information. The computers behaviour
seems stable, and all scans have come up clean, so I am confused as to wether
this is viral or just some sort of corruption.
I don't really want to post all 2000 lines of text here....but this is a
sample;
$winnt$ $winnt$.inf .DEFAULT Startup
12520437 12520437.cpx NT AUTHORITY\SYSTEM Startup
12520437 12520437.cpx .DEFAULT Startup
12520850 12520850.cpx NT AUTHORITY\SYSTEM Startup
12520850 12520850.cpx .DEFAULT Startup
6to4svc 6to4svc.dll NT AUTHORITY\SYSTEM Startup
6to4svc 6to4svc.dll .DEFAULT Startup
Any ideas would be greatly appreciated.
Regards,
Scubamegs.