Help - Search - Members - Calendar
Full Version: Startup Programs And Autoruns
BleepingComputer.com > Bleeping Computer Applications and Guides > Windows Startup Programs Database
   
michele2007
I ran Autoruns and started looking up everything in your startup database. I think I could be making a serious mistake if I delete these files according to what the database says. Is there something I am missing? How can I know which ones to uncheck, delete, or leave alone?

Database says:
explorer.exe added by worms, trojans or viruses
shell32.dll worm
shmgrate.exe added by GASTER Trojan
regsvr32.exe ActiveX control or daily winner adaware
logonui.exe detected by Ewido as Backdoor.sdbot.aad (I have already been advised by people in this forum to
leave this alone as it is an important Windows file.)
Orange Blossom
An important key to understanding if the file you have is legitimate or malware is the file path. Where is the file located on your computer? Another important key is the exact spelling. Slight differences in spelling also distinguish good files from bad ones.

Orange Blossom fruits_cherry.gif
michele2007
Thank you. What might be a bad place for bad files to be?
Orange Blossom
That has no easy answer. Let's take the explorer.exe file as an example. Normally, it doesn't run at start-up, but some computer administrators set up the computer so it does. Therefore, if someone removed it because he/she thought it was malware, a good file would have been removed instead and cause problems. On a different computer, however, the file could very well have been malware. The best thing you can do is to find out where files should be, know what has been done on the computer, and if a file is where it shouldn't be, be suspicious but verify first. If you have questions about a file, feel free to ask about it on the forums.

Orange Blossom fruits_cherry.gif
This is a "lo-fi" version of our main content. To view the full version with more information, formatting and images, please click here.
Invision Power Board © 2001-2008 Invision Power Services, Inc.