Prev: How to get rid of win32/gael.3666.A virus?
Next: uninstall BitDefender Internet Security 9.0
From: admiral_victory on 4 Mar 2006 15:45

I have recently noticed the following entries in the STARTUP Page when
I run "msconfig" in XP Pro SP2. I'll type them here under the three
headings shown in "msconfig"

STARTUP ITEM COMMAND LOCATION

default \default.pls Common Startup
ipconfig \ipconfig "
IPCONGIG \IPCONGIG "
NTUSER \NTUSER.bak "
ntuser \ntuser.dat "
NTUSER.DAT \NTUSER.DAT.LOG "
ntuser.dat \ntuser.dat.rmbak "
ntuser \ntuser.ini "
NTUSER.tmp \NTUSER.tmp.LOG "
ping \ping "
s-1-5-21-11-11760971... \s-1-5-21-11-11760971...
s-1-5-21-11-11760971... s-1-5-21-11-11760971...

When these are unclicked and the PC is re-booted , they all re-appear.
I have also searched for "Common Startup" this is not found.

N.B. the "IPCONGIG" is NOT a typo !
The LOCATION of the last 2 items is also " Common Startup"

I also have Folders :-

c:\Docs & Settings\Administrator.DTOP
c:\ " \All Users.WINDOWS
c:\WINDOWS\pss

The \pss Folder contains these files:-

boot.ini.backuo
system.ini.backup
win.ini.backup

All these files are 1KB in size

I have run AdAware, SpyBot, MS Anti-Spy and the "trendmicro" A/V
program without discovering anything suspicious.

Any comments regarding a possible viral infection would be appreciated

B.N.


--

to reply by e-mail remove "admiral_"
 | 
Pages: 1
Prev: How to get rid of win32/gael.3666.A virus?
Next: uninstall BitDefender Internet Security 9.0