Jump to content


 


Register a free account to unlock additional features at BleepingComputer.com
Welcome to BleepingComputer, a free community where people like yourself come together to discuss and learn how to use their computers. Using the site is easy and fun. As a guest, you can browse and view the various discussions in the forums, but can not create a new topic or reply to an existing one unless you are logged in. Other benefits of registering an account are subscribing to topics and forums, creating a blog, and having no ads shown anywhere on the site.


Click here to Register a free account now! or read our Welcome Guide to learn how to use this site.

Photo

Blank .exe File Names In Msconfig At Startup


  • Please log in to reply
6 replies to this topic

#1 DavidH

DavidH

  • Members
  • 3 posts
  • OFFLINE
  •  
  • Local time:01:17 PM

Posted 15 November 2005 - 02:07 PM

I am running XP w/SP2. In trying to pare the large number of startup programs, I encountered two lines in the list produced by msconfig that were blank in the program name column, but which were checked and had (registry) locations in the other columns.

The registry locations given were:
HKLM\Software\Microsoft\Windows\CurrentVersion\Run
HKCU\Software\Microsoft\Windows\CurrentVersion\Run

Is there anything there that is running? If so, does it belong there and can it be made visible?

David H

BC AdBot (Login to Remove)

 


#2 usasma

usasma

    Still visually handicapped (avatar is memory developed by my Dad


  • BSOD Kernel Dump Expert
  • 25,090 posts
  • OFFLINE
  •  
  • Gender:Male
  • Location:Southeastern CT, USA
  • Local time:04:17 PM

Posted 15 November 2005 - 02:22 PM

Sounds fishy to me. Try a couple of these free, online scans to rule out an infection that may have slipped by your protection package:


http://www.kaspersky.com/scanforvirus
http://housecall.trendmicro.com/
http://www.bitdefender.com/scan8/ie.html
http://www.pandasoftware.com/products/activescan.htm
http://onlinescan.avast.com/
http://support.f-secure.com/ols/start.html
http://www3.ca.com/securityadvisor/virusinfo/scan.aspx
My browser caused a flood of traffic, sio my IP address was banned. Hope to fix it soon. Will get back to posting as soon as Im able.

- John  (my website: http://www.carrona.org/ )**If you need a more detailed explanation, please ask for it. I have the Knack. **  If I haven't replied in 48 hours, please send me a message. My eye problems have recently increased and I'm having difficult reading posts. (23 Nov 2017)FYI - I am completely blind in the right eye and ~30% blind in the left eye.<p>If the eye problems get worse suddenly, I may not be able to respond.If that's the case and help is needed, please PM a staff member for assistance.

#3 DavidH

DavidH
  • Topic Starter

  • Members
  • 3 posts
  • OFFLINE
  •  
  • Local time:01:17 PM

Posted 16 November 2005 - 04:29 PM

Several of the scans didn't support my browser (FireFox). Nothing suspicious was reported by either Pandasoft and F-Secure (for which I had to grant exceptions to my rule that blocks Active-X from running).

I don't think anything is on either of those two lines, but I don't know how to check them out or remove them.

David H

Sounds fishy to me. Try a couple of these free, online scans to rule out an infection that may have slipped by your protection package:
---snip ---



#4 quietman7

quietman7

    Bleepin' Janitor


  • Global Moderator
  • 51,141 posts
  • OFFLINE
  •  
  • Gender:Male
  • Location:Virginia, USA
  • Local time:04:17 PM

Posted 16 November 2005 - 07:48 PM

Download Starter (a startup manager and investigative tool for gathering detailed information on programs set to run at startup)
1. Double-click starter.exe to run or extract the zipped version to its own folder.
2. Click on the Startups Tab at the top to see the full list of startup programs.
3. Double-click on any entry to see additional information.
4. Right-click on any entry and choose explore folder.

Or you can download silentrunners.vbs
A zipped version can be found here.
1. Double-click the Silent Runners.vbs to run and create a list of startup programs.
2. The tool will scan your system and create a log by default, in the same directory as the script which will have more detailed information.

If you need help identifying any of the items, post back here.
.
.
Windows Insider MVP 2017-2018
Microsoft MVP Reconnect 2016
Microsoft MVP Consumer Security 2007-2015 kO7xOZh.gif
Member of UNITE, Unified Network of Instructors and Trusted Eliminators

If I have been helpful & you'd like to consider a donation, click 38WxTfO.gif

#5 Rimmer

Rimmer

  • Members
  • 2,159 posts
  • OFFLINE
  •  
  • Location:near Sydney, Australia
  • Local time:06:17 AM

Posted 16 November 2005 - 07:49 PM

Here's a Trend Micro scan that does support Firefox:

Trend Micro Housecall - http://uk.trendmicro-europe.com/enterprise...call_launch.php
(European version, supports Netscape, Mozilla, Firefox and Opera)

You could have a closer look at what's running using the freeware Autoruns from this link:
http://www.sysinternals.com/Utilities/Autoruns.html Read all instructions carefully and use with caution.

hth :thumbsup:

Soltek QBIC, Pentium 4 3.0GHz, 512MB RAM, 200GB SATA HDD, ATI Radeon 9600XT 256MB, Netgear 54Mb/s WAP, ridiculously expensive Satellite Broadband
Windows XP Home SP2, Trend Micro Internet Security, Firefox, Thunderbird, AdAwareSE, Spybot S&D, SpywareBlaster, A-squared Free, Ewido Security Suite.

#6 usasma

usasma

    Still visually handicapped (avatar is memory developed by my Dad


  • BSOD Kernel Dump Expert
  • 25,090 posts
  • OFFLINE
  •  
  • Gender:Male
  • Location:Southeastern CT, USA
  • Local time:04:17 PM

Posted 17 November 2005 - 10:35 AM

For StartUps, I like Mike Lin's free StartUpCPL. It inserts an icon into your Control Panel that's labeled "StartUp" - just double click on it and cruise through the entries. http://www.mlin.net/StartupCPL.shtml

If the durned thing is already running, here's 2 free process explorer utilities that may help to track it down:
http://www.sysinternals.com/Utilities/ProcessExplorer.html
http://www.spywareinfo.com/~merijn/downloads.html (just a bit less than way down the page).

I seem to recall that once I had one of these and was able to track it down to something to do with nVidia.
My browser caused a flood of traffic, sio my IP address was banned. Hope to fix it soon. Will get back to posting as soon as Im able.

- John  (my website: http://www.carrona.org/ )**If you need a more detailed explanation, please ask for it. I have the Knack. **  If I haven't replied in 48 hours, please send me a message. My eye problems have recently increased and I'm having difficult reading posts. (23 Nov 2017)FYI - I am completely blind in the right eye and ~30% blind in the left eye.<p>If the eye problems get worse suddenly, I may not be able to respond.If that's the case and help is needed, please PM a staff member for assistance.

#7 Enthusiast

Enthusiast

  • Members
  • 5,898 posts
  • OFFLINE
  •  
  • Location:Florida, USA
  • Local time:03:17 PM

Posted 17 November 2005 - 09:56 PM

Several of the scans didn't support my browser (FireFox). Nothing suspicious was reported by either Pandasoft and F-Secure (for which I had to grant exceptions to my rule that blocks Active-X from running).

I don't think anything is on either of those two lines, but I don't know how to check them out or remove them.

David H


Sounds fishy to me. Try a couple of these free, online scans to rule out an infection that may have slipped by your protection package:
---snip ---



Most scans require Active X which is not found in Mozilla based browsers.
You have to use Internet Explorer to take advantage of them just as you must use IE for Windows Update.




0 user(s) are reading this topic

0 members, 0 guests, 0 anonymous users