System Startup

[4Jacko]

Hi.

Is there away to unclick system startup? If I unclick
some ,and come back to system startup everything is
clicked again.:bigthumb:

[Zenobia]

Would the entries you are trying to unclick happen to be winlogon entries,or System.ini entries?

[4Jacko]

Hi.

I want to unclick ,winlogon entries.:bigthumb:

[Zenobia]

Checking that,I noticed winlogon entries on my own computer do become rechecked.While I can't say this for 100% certainty,I suspect that that may be on purpose,since many people have tried to uncheck system.ini or winlogon entries because they didn't know what they were,but these entries may be legitimate and needed.
For example,see here:
http://forums.spybot.info/showthread.php?t=21248
and here:
http://forums.spybot.info/showthread.php?t=2314
So,what entries might you be trying to uncheck?

[4Jacko]

Zenobia.

Thanks for your time.:bigthumb:

[Zenobia]

You're welcome. :)
Here's a list of some of the normal winlogon entries from my XP computer.They're all legit.

Located: WinLogon, crypt32chain
command: crypt32.dll
file: crypt32.dll
size: 0
MD5: D41D8CD98F00B204E9800998ECF8427E
Warning: if the file is actually larger than 0 bytes,
the checksum could not be properly calculated!

Located: WinLogon, cryptnet
command: cryptnet.dll
file: cryptnet.dll
size: 0
MD5: D41D8CD98F00B204E9800998ECF8427E
Warning: if the file is actually larger than 0 bytes,
the checksum could not be properly calculated!

Located: WinLogon, cscdll
command: cscdll.dll
file: cscdll.dll
size: 0
MD5: D41D8CD98F00B204E9800998ECF8427E
Warning: if the file is actually larger than 0 bytes,
the checksum could not be properly calculated!

Located: WinLogon, ScCertProp
command: wlnotify.dll
file: wlnotify.dll
size: 0
MD5: D41D8CD98F00B204E9800998ECF8427E
Warning: if the file is actually larger than 0 bytes,
the checksum could not be properly calculated!

Located: WinLogon, Schedule
command: wlnotify.dll
file: wlnotify.dll
size: 0
MD5: D41D8CD98F00B204E9800998ECF8427E
Warning: if the file is actually larger than 0 bytes,
the checksum could not be properly calculated!

Located: WinLogon, sclgntfy
command: sclgntfy.dll
file: sclgntfy.dll
size: 0
MD5: D41D8CD98F00B204E9800998ECF8427E
Warning: if the file is actually larger than 0 bytes,
the checksum could not be properly calculated!

Located: WinLogon, SensLogn
command: WlNotify.dll
file: WlNotify.dll
size: 0
MD5: D41D8CD98F00B204E9800998ECF8427E
Warning: if the file is actually larger than 0 bytes,
the checksum could not be properly calculated!

Located: WinLogon, termsrv
command: wlnotify.dll
file: wlnotify.dll
size: 0
MD5: D41D8CD98F00B204E9800998ECF8427E
Warning: if the file is actually larger than 0 bytes,
the checksum could not be properly calculated!

Located: WinLogon, WgaLogon
command: WgaLogon.dll
file: WgaLogon.dll
size: 0
MD5: D41D8CD98F00B204E9800998ECF8427E
Warning: if the file is actually larger than 0 bytes,
the checksum could not be properly calculated!

Located: WinLogon, wlballoon
command: wlnotify.dll
file: wlnotify.dll
size: 0
MD5: D41D8CD98F00B204E9800998ECF8427E
Warning: if the file is actually larger than 0 bytes,
the checksum could not be properly calculated!

If the ones you were trying to uncheck are different,or you are having computer problems,please post back,and let me know.

[4Jacko]

Hi Zenobia.

The only different ones are :Winlog - AtiExtEvent ,
Winlog - cbxuusp

Thanks.:bigthumb:

[Zenobia]

You're welcome. :) One of those entries doesn't appear to me to be a normal entry.You might want to get checked out in malware removal.It might be best if you described any problems you've been having along with posting your Hijackthis log in there,in case the entry doesn't show in your Hijackthis log.

The instructions are here:
http://forums.spybot.info/showthread.php?t=288

Malware removal:
http://forums.spybot.info/forumdisplay.php?f=22

[4Jacko]

Hi Zenobia.

I delete the " cbxuusp dll." file in the registery.
The "Winlog -cbxuusp" disappeart from the startup in Spybot-S&D.
My computer runs still very well.

Thanks for your help.:bigthumb:

[Zenobia]

You're welcome.