Computer Help and Spyware Removal Computer Help and Spyware Removal Computer Help and Spyware Removal Computer Help Forums Windows Startup Programs Database Spyware and Malware Removal Guides Computer Tutorials Uninstall Database File Database Computer Glossary Computer Resources
 

Welcome Guest ( Log In | Click here to Register a free account now! )



Register a free account to unlock additional features at BleepingComputer.com
Welcome to Bleeping Computer, a free community where people like yourself come together to discuss and learn how to use their computers. Using the site is easy and fun. As a guest, you can browse and view the various discussions in the forums, but can not create a new topic or reply to an existing one unless you are logged in. Other benefits of registering an account are subscribing to topics and forums, creating a blog, and having no ads shown anywhere on the site.
Click here to Register a free account now! or read our Welcome Guide to learn how to use this site.


Important Announcement: In recognition of reaching a milestone of 1,000,000 posts on the site, we are hosting the BC 1 Million Post contest. More information about this contest can be found at the following link:

Bleeping Computer 1,000,000 Post Contest

- BleepingComputer Management
 
Reply to this topicStart new topic
> Are Legit Files Not Listed In Startup Database?
Soze
post Feb 4 2006, 11:08 PM
Post #1


Member
**

Group: Members
Posts: 20
Joined: 2-February 06
Member No.: 53,520



This may sound stupid, but the first 2 files listed in autoruns are userinit.exe and Explorer.exe
Both I assume are legit files, as microsft as publisher is verified for both, and there was a post earlier regarding the userinit.exe file.
Neither are listed in startup database-at least not with the same name (there are obviously 4 pages listing explorer.exe files).
In my case the name is also explorer.exe
Am I missing something?
Sorry in advance for my obvious ignorance.
I promise I'll learn...

edit-o.k., had I waited a moment I would have run across legit files in the startup DB.
Please tell me then how I should treat the exploere.exe file with name Explorer.exe
c:\windows\explorer.exe

This post has been edited by Soze: Feb 4 2006, 11:16 PM


--------------------
It is one of the blessings of old friends that you can afford to be stupid with them.
Ralph Waldo Emerson
Go to the top of the page
 
+Quote Post
Grinler
post Feb 5 2006, 11:32 AM
Post #2


Bleep Bleep!
******

Group: Admin
Posts: 29,354
Joined: 24-January 04
From: USA
Member No.: 3



Both of those files are legit. And you are right, we have not listed the default valid entries in the database. I will add them in a bit.


--------------------
Lawrence
Go to the top of the page
 
+Quote Post
Soze
post Feb 5 2006, 12:17 PM
Post #3


Member
**

Group: Members
Posts: 20
Joined: 2-February 06
Member No.: 53,520



Thanks Grinler.
I'll have to be very careful in removing startup items.
I removed a few last night, and now it is acting funny-lots of hesitations when using outlook.
I'm going to do system restore and start again.


--------------------
It is one of the blessings of old friends that you can afford to be stupid with them.
Ralph Waldo Emerson
Go to the top of the page
 
+Quote Post
Grinler
post Feb 5 2006, 12:18 PM
Post #4


Bleep Bleep!
******

Group: Admin
Posts: 29,354
Joined: 24-January 04
From: USA
Member No.: 3



Do you remember what you removed?


--------------------
Lawrence
Go to the top of the page
 
+Quote Post
Soze
post Feb 6 2006, 11:11 AM
Post #5


Member
**

Group: Members
Posts: 20
Joined: 2-February 06
Member No.: 53,520



I believe I removed ctfmon.exe (name ctfmon) and tbmon.exe (name Network Associates Error Reporting Service).
The first showed uo on the Startup DB as bad, the second as U.
However, ctfmon was a verified MS publisher files, so I kind of thought it might be a valid file.
tbmon.exe was not verified, and as it was listed as U I removed it from startup.

Good thing is, my system restore seems to have taken care of most of it, back almost to the way it was before I "cleaned it up".
I did several scans with Ad aware, spybot, Housecall, Bit Def etc. etc.
The only thing acting "slow" now is Outlook.
But I'm going to go back and attack the startup items in the next few days.

BTW- thanks to this site I have eliminated several trojans and such that were not being detected my my Mcaffee scanner. I am much indebted to BC and the tutorials!


--------------------
It is one of the blessings of old friends that you can afford to be stupid with them.
Ralph Waldo Emerson
Go to the top of the page
 
+Quote Post

Reply to this topicStart new topic
1 User(s) are reading this topic (1 Guests and 0 Anonymous Users)
0 Members:

 



Lo-Fi Version Time is now: 20th November 2008 - 03:57 AM


Advertise   |   About Us   |   Terms of Use   |   Privacy Policy   |   Contact Us   |   Site Map   |   Chat   |   Tutorials   |   Uninstall List
Discussion Forums   |   The Computer Glossary   |   Resources   |   RSS Feeds   |   Startups   |   The File Database   |   Malware Removal Guides

© 2003-2008 All Rights Reserved Bleeping Computer LLC.