Results 1 to 3 of 3

Thread: Hosts and Startup question/problem

  1. #1
    Junior Member godawgs's Avatar
    Join Date
    Jan 2006
    Posts
    19

    Default Hosts and Startup question/problem

    I just upgraded to v1.6.2and ran a scan. First of all, it checked all 383+ thousand things in just over 17 minutes, which I thought was great compared to v1.5.6

    After the scan, I went into Settings and set the program up.
    Then I went into Tools and found a couple of things.

    First, There isn't a "Hosts" section so you can add SBS&D's Hosts List. Doesn't SBS&D use this anymore? It's still referred to in the help file.

    The Second thing appears to be a problem and appears on the Tools>Startup page.

    This is in the System Startup tab 2 times

    Key:
    HK_CU:Run(User S-1-5-21-2695072642-473866232-3689853989-501)

    Value:
    MSMSGS

    Command Line: "C:\Program Files\Messenger\msmsgs.exe" /background

    This is in the System Startup tab 1 time:

    Key:
    HK_CU:Run(User S-1-5-21-2695072642-473866232-3689853989-1007)

    Value:
    MSMSGS

    Command Line:
    "C:\Program Files\Messenger\msmsgs.exe" /background

    This is in the System Startup tab 1 time:

    Key:
    HK_CU:Run(User OWNER on C: )

    Value:
    MSMSGS

    Command Line:
    "C:\Program Files\Messenger\msmsgs.exe" /background

    In the information bar, the Database Status says--Not required-virus,spyware,malware or other resource hog.
    The Description section says--Added by the Small-ew Trojan

    I don't know if SBS&D is designed to find this, but after running a scan, it didn't show anything.
    I don't find a HK_CU:Run key at all in the registry.
    There is a S-1-5-21-2695072642-473866232-3689853989-1007 key, but it's under HK_LM:Software
    Have Searched all program files and the registry and can't find msmsgs.exe /background. There is a "C:\Program Files\Messenger\msmsgs.exe" but without the /background.
    McAfee lists the Small.ew trojan under a different name, I have run my anti-virus and it shows no sign of either virus. I have searched for the files that the google posts said could be created and didn't find any.
    My Startup list under MSCONFIG doesn't show any of these items.
    Any help would be appreciated.
    JC
    XP Home SP3
    Pent.4 1.8GHz,768MB
    IE 6.0.2800.1106SP3
    Inspiron Laptop
    Vista Premium SP2
    Dual Core 2.0GHZ,2GB
    IE 7
    Firefox
    MSE AntiVirus
    Malwarebytes
    CCleaner
    SpyBot
    SpywareBlaster

  2. #2
    Spybot Advisor Team [Retired] md usa spybot fan's Avatar
    Join Date
    Oct 2005
    Posts
    5,859

    Default

    godawgs:

    I am responding to your Hosts file question only.

    Quote Originally Posted by godawgs View Post
    I just upgraded to v1.6.2 ... Then I went into Tools and found a couple of things.

    First, There isn't a "Hosts" section so you can add SBS&D's Hosts List. ...
    The HOSTS list is added in the immunization by the "Windows Global (Hosts)" profile. However if you are in Spybot » Mode » Advanced Mode » Tools, double click on "Hosts file" in the right hand pane to bring up the "Hosts file" facility.

    The "Hosts file" facility is not checked by default in the right hand pane and therfore does not appear in the left hand pane botton list. If you would like "Hosts file" to apprear in the left hand pane bottom list, check "Hosts file" in the right hand pane.

    *****************

    In regard to the startup entries you are questioning. The display information for startup entries normally consistes of:
    Current filename:
    Database status:
    Value:
    Filename:
    Description:
    Source:
    _____

    Since it does not seem that you included the "Current filename: ..." nor posted the actual startup entry that you are interested in, it is difficult help.

    If you post the "Current filename: ..." or the actual startup entry and related information, possibly someone can help.

    You can post the actual startup entry by going into Spybot » Mode » Advanced Mode » Tools » System startup and right clicking on the list, then select "Copy to clipboard". You can paste (Ctrl + V) the clipboard into another post in this thread. Please edit the post so that only the entry(s) in question is posted.
    Last edited by md usa spybot fan; 2009-02-06 at 23:50.

    Getting an answer is one thing, learning is another.


    Microsoft Windows XP Home Edition running on a 2.40GHz Intel® Pentium® 4 Processor with 512 MB of RAM and a 533 MHz System Bus.

  3. #3
    Junior Member godawgs's Avatar
    Join Date
    Jan 2006
    Posts
    19

    Default

    Thanks md usa.
    I'll get the right information and re-post.
    XP Home SP3
    Pent.4 1.8GHz,768MB
    IE 6.0.2800.1106SP3
    Inspiron Laptop
    Vista Premium SP2
    Dual Core 2.0GHZ,2GB
    IE 7
    Firefox
    MSE AntiVirus
    Malwarebytes
    CCleaner
    SpyBot
    SpywareBlaster

Posting Permissions

  • You may not post new threads
  • You may not post replies
  • You may not post attachments
  • You may not edit your posts
  •