How To Ask For Info About A Startup Entry

#1 Grinler

Bleep Bleep!

Group: Admin
Posts: 36,174
Joined: 24-January 04
Gender:Male
Location:USA

Posted 03 November 2005 - 11:30 AM

The startup database is a listing of programs that start up automatically when you boot your computer. These programs are not always running and may simply run once and then shut down. When asking questions about startup programs on your computer, make sure that they are actually a startup program, and not a process running from a program you launched or another process launched.

To determine this, you should use Autoruns which will list all the startup programs on your computer. It is from this list of programs that you should be asking questions in this forum about.

This post has been edited by hamluis: 26 November 2011 - 12:47 PM

Lawrence Abrams
Circle BleepingComputer on Google+!
Become a BleepingComputer fan: Facebook
Follow us on Twitter!
How to detect vulnerable programs using Secunia Personal Software Inspector <- Everyone should do this!

#2 marcelangelo

New Member

Group: Members
Posts: 2
Joined: 15-May 06

Posted 15 May 2006 - 11:02 AM

Hi,
I've read all info first and later used Autorun. I found several items that can easily be unchecked but Autorun does not allow me to do that. It shows a window saying "Erros changing item state. Acces denied".
I would like to solve this because otherwise Autorun is getting me nowhere.
Thanks a lot,
Marcel

#3 Grinler

Bleep Bleep!

Group: Admin
Posts: 36,174
Joined: 24-January 04
Gender:Male
Location:USA

Posted 15 May 2006 - 11:10 AM

What are some of the entries you are trying to change?

#4 marcelangelo

New Member

Group: Members
Posts: 2
Joined: 15-May 06

Posted 15 May 2006 - 11:26 AM

Thanks for your quick reply.

I try to disable
fpdisp.exe
apdproxy.exe
cmincfs.exe
nerocheck.exe
hpgs2wnd.exe
jushed.exe

and so on. All N status

#5 Grinler

Bleep Bleep!

Group: Admin
Posts: 36,174
Joined: 24-January 04
Gender:Male
Location:USA

Posted 16 May 2006 - 08:44 AM

You uncheck them in autoruns and you get that error? Try doing it in safe mode.

#6 nasdaq

Forum Addict

Group: Malware Response Team
Posts: 3,076
Joined: 16-June 06
Gender:Male
Location:Montreal, QC. Canada

Posted 21 August 2007 - 12:28 PM

Reference;
http://www.bleepingcomputer.com/startups/S...r.exe-5122.html

The SpySpotter program is marked as Valid yet it's defined as Spyware remover of dubious repute

You may want to review this.

This post has been edited by nasdaq: 21 August 2007 - 12:29 PM

#7 Grinler

Bleep Bleep!

Group: Admin
Posts: 36,174
Joined: 24-January 04
Gender:Male
Location:USA

Posted 21 August 2007 - 03:06 PM

Thanks..changed to the proper status.

#8 treksie

New Member

Group: Members
Posts: 2
Joined: 26-August 10
Gender:Female

Posted 16 January 2011 - 11:50 AM

I'm having trouble finding an answer to my question: if I check a box under an Autoruns entry but don't request a delete, can I come back later and uncheck the box if I find that checking the box initially was a bad choice?
Thanks ahead of time for your help!

#9 Noviciate

Forum Addict

Group: Malware Response Team
Posts: 3,228
Joined: 01-November 05
Gender:Male
Location:Numpty HQ

Posted 18 January 2011 - 05:38 PM

Good evening.

As it has been a couple of days... if you have a copy of autoruns.chm, and you get one if you download a fresh copy of Autoruns from here, right click it and select Properties and then click Unblock and OK your way out - this is the Help file.
If you click Disabling and Deleting Entries on the left you can read the answer to your question first-hand -

Quote

If you don't want an entry to active the next time you boot or login you can either disable or delete it. To disable an entry uncheck it. Autoruns will store the startup information in a backup location so that it can reactivate the entry when you recheck it. For items stored in startup folders Autoruns creates a subfolder named Autorunsdisabled. Check a disabled item to re-enable it.

You should delete items that you do not wish to ever execute. Do so by choosing Delete in the Entry menu. Only the currently selected item will be deleted.

Team Numpty - Poking a finger in the eye of malware since a week last Thursday!

#10 Youngfan75

New Member

Group: Members
Posts: 1
Joined: 16-September 11

Posted 16 September 2011 - 08:10 PM

I have an acer inspire as well as other computers ans a external hard drive, which I unfortunatently did not use on the acer,I am now getting the BSOD with the captions:
unmountable boot volume, oxooooooED
ox8739C568
oxcoooooo6
oxooooooo ans oxooooooo
Is there anyway I can take a usb ans make it start the Acer then back it uo in my external hard drive. I have some passwords in it and hate to wipe everythind out as well as some documents,

Thank-you

#11 Animal

Bleepin' Animinion

Group: Site Admin
Posts: 17,983
Joined: 18-August 05
Gender:Male
Location:Location, Location

Posted 16 September 2011 - 10:01 PM

What operating system is the Acer machine running, so we can move your topic to the proper forum to better give you assistance.

The Internet is so big, so powerful and pointless that for some people it is a complete substitute for life.
Andrew Brown
Posted Image

A learning experience is one of those things that say, "You know that thing you just did? Don't do that." — Douglas Adams.
Why is the word abbreviation so long?
Follow BleepingComputer on: Facebook | Twitter | Google+