|
Posted by on March 4, 2006, 3:45 pm
If you were Registered and logged in, you could reply and use other advanced thread options
I have recently noticed the following entries in the STARTUP Page when
I run "msconfig" in XP Pro SP2. I'll type them here under the three
headings shown in "msconfig"
STARTUP ITEM COMMAND LOCATION
default \default.pls Common Startup
ipconfig \ipconfig "
IPCONGIG \IPCONGIG "
NTUSER \NTUSER.bak "
ntuser \ntuser.dat "
NTUSER.DAT \NTUSER.DAT.LOG "
ntuser.dat \ntuser.dat.rmbak "
ntuser \ntuser.ini "
NTUSER.tmp \NTUSER.tmp.LOG "
ping \ping "
s-1-5-21-11-11760971... \s-1-5-21-11-11760971...
s-1-5-21-11-11760971... s-1-5-21-11-11760971...
When these are unclicked and the PC is re-booted , they all re-appear.
I have also searched for "Common Startup" this is not found.
N.B. the "IPCONGIG" is NOT a typo !
The LOCATION of the last 2 items is also " Common Startup"
I also have Folders :-
c:\Docs & Settings\Administrator.DTOP
c:\ " \All Users.WINDOWS
c:\WINDOWS\pss
The \pss Folder contains these files:-
boot.ini.backuo
system.ini.backup
win.ini.backup
All these files are 1KB in size
I have run AdAware, SpyBot, MS Anti-Spy and the "trendmicro" A/V
program without discovering anything suspicious.
Any comments regarding a possible viral infection would be appreciated
B.N.
--
to reply by e-mail remove "admiral_"
| 
XML site map