View Full Version : Win 98 SE spybot start up log, What do you think?
The last one, it says shell explore.exe When ever I right click it it gets funny, I also don't get the option to delete it.
md usa spybot fan
2008-08-16, 20:25
JOE.G:
The next time you have the occasion post a text log, please just post the content of the file in the forum or the specific potion of that log you are interested in rather than attaching a file that requires downloading and/or opening a file.
Thank you.
__________
Is this is the entry you are talking about???
Located: System.ini, Shell
where: C:\WINDOWS\system.ini...
command: Explorer.exe
file:
size: 0
MD5: D41D8CD98F00B204E9800998ECF8427E
Warning: if the file is actually larger than 0 bytes,
the checksum could not be properly calculated!
__________
... When ever I right click it it gets funny, ...
Please explain. Are you indicating that you don't understand the comments about the entry???
__________
... I also don't get the option to delete it.
Running on a Windows 9x system??? If so it is probably a good thing. If you delete that entry on a Windows 9x system you could be in serious trouble. Please read my comments about a similar entry on a Windows 9x system in this thread:
system startup wont delete one of the entries
http://forums.spybot.info/showthread.php?t=24511
Sorry I thought this was teh proper way.
--- Spybot - Search & Destroy version: 1.6.0 (build: 20080729) ---
2008-07-30 blindman.exe (1.0.0.8)
2008-07-30 Update.exe (1.6.0.7)
2008-07-30 SpybotSD.exe (1.6.0.31)
2008-08-11 unins001.exe (51.49.0.0)
2008-07-30 SDMain.exe (1.0.0.6)
2008-07-30 SDWinSec.exe (1.0.0.12)
2008-07-30 SDUpdate.exe (1.6.0.9)
2008-07-30 TEATIMER.EXE (1.6.1.22)
2008-07-30 SDFiles.exe (1.6.0.4)
2008-07-30 SDShred.exe (1.0.2.3)
2008-08-11 spybotsd160.exe (1.6.0.0)
2008-07-30 advcheck.dll (1.6.1.12)
2008-07-30 SDHelper.dll (1.6.0.12)
2008-07-30 Tools.dll (2.1.5.7)
2008-06-14 DelZip179.dll (1.79.11.1)
2007-04-02 aports.dll (2.1.0.0)
2008-06-19 sqlite3.dll
2008-06-03 Includes\Dialer.sbi
2008-06-03 Includes\Cookies.sbi
2007-11-07 Includes\Revision.sbi
2008-07-30 Includes\Hijackers.sbi
2008-08-05 Includes\Malware.sbi
2008-08-05 Includes\Keyloggers.sbi
2008-08-05 Includes\PUPS.sbi
2008-06-18 Includes\Security.sbi
2008-06-03 Includes\Spybots.sbi
2008-08-04 Includes\Spyware.sbi
2008-08-05 Includes\Adware.sbi
2008-08-05 Includes\Trojans.sbi
2008-06-03 Includes\Tracks.uti
2008-08-06 Includes\TrojansC.sbi
2008-06-03 Includes\SpybotsC.sbi
2008-08-05 Includes\SecurityC.sbi
2008-08-05 Includes\PUPSC.sbi
2008-08-05 Includes\MalwareC.sbi
2008-08-05 Includes\KeyloggersC.sbi
2008-07-08 Includes\HijackersC.sbi
2008-08-05 Includes\DialerC.sbi
2008-07-23 Includes\HeavyDuty.sbi
2008-08-05 Includes\AdwareC.sbi
2008-08-05 Includes\SpywareC.sbi
2007-12-24 Plugins\TCPIPAddress.dll
2008-03-04 Plugins\Chai.dll
2008-03-05 Plugins\Fennel.dll
2008-02-26 Plugins\Mate.dll
Located: HK_LM:Run, AVG7_AMSVR
command: C:\PROGRA~1\GRISOFT\AVGFRE~1\AVGAMSVR.EXE
file: C:\PROGRA~1\GRISOFT\AVGFRE~1\AVGAMSVR.EXE
size: 418816
MD5: 3C7B93F947355E374A49564D0D017B7B
Located: HK_LM:Run, AVG7_CC
command: C:\PROGRA~1\GRISOFT\AVGFRE~1\AVGCC.EXE /STARTUP
file: C:\PROGRA~1\GRISOFT\AVGFRE~1\AVGCC.EXE
size: 579584
MD5: 25A49E5BFF4E6424FA5E27C81269041D
Located: HK_LM:Run, AVG7_EMC
command: C:\PROGRA~1\GRISOFT\AVGFRE~1\AVGEMC.EXE
file: C:\PROGRA~1\GRISOFT\AVGFRE~1\AVGEMC.EXE
size: 406528
MD5: FC0B2AE890BB0DC8C2306DABEDC8A4BA
Located: HK_LM:Run, EnsoniqMixer
command: starter.exe
file: C:\WINDOWS\starter.exe
size: 22528
MD5: 291E5336F8611B81E3712524CFCD1400
Located: HK_LM:Run, mmpti
command: c:\windows\SYSTEM\m1mmpti.exe
file: c:\windows\SYSTEM\m1mmpti.exe
size: 96256
MD5: 71D41B1049B5507912E118B509980B5F
Located: HK_LM:Run, POINTER
command: C:\PROGRA~1\MICROS~1\point32.exe
file: C:\PROGRA~1\MICROS~1\point32.exe
size: 85504
MD5: 390075762533CB867133853E592956F1
Located: HK_LM:Run, ScanRegistry
command: c:\windows\scanregw.exe /autorun
file: c:\windows\scanregw.exe
size: 86016
MD5: F123231689E2AB2FA5C636B99314501F
Located: HK_LM:Run, TaskMonitor
command: c:\windows\taskmon.exe
file: c:\windows\taskmon.exe
size: 28672
MD5: F795110611101279AA15997801ABACA0
Located: HK_LM:RunServices, rmmon
command: c:\windows\SYSTEM\mprmmon.exe
file: c:\windows\SYSTEM\mprmmon.exe
size: 23552
MD5: 4640AE68212F4A18282DA4D52A5A8606
Located: HK_LM:RunServices, winmodem
command: WINMODEM.101\wmexe.exe
file: C:\WINDOWS\SYSTEM\WINMODEM.101\wmexe.exe
size: 51680
MD5: A2A25B6B972F0E49B32ACB5122A088ED
Located: HK_LM:Run, Adaptec DirectCD (DISABLED)
command: C:\PROGRA~1\ADAPTEC\DIRECTCD\DIRECTCD.EXE
file: C:\PROGRA~1\ADAPTEC\DIRECTCD\DIRECTCD.EXE
size: 1126400
MD5: 983C7EA1F0B9E3987E3136716780E974
Located: HK_LM:Run, QuickTime Task (DISABLED)
command: "C:\WINDOWS\SYSTEM\QTTASK.EXE" -atboottime
file: C:\WINDOWS\SYSTEM\QTTASK.EXE
size: 77824
MD5: FC9F5C5D87D0A6D1E10773D20CB3C3EF
Located: HK_LM:Run, RegisterDropHandler (DISABLED)
command: C:\PROGRA~1\TEXTBR~1.0\BIN\REGIST~1.EXE
file: C:\PROGRA~1\TEXTBR~1.0\BIN\REGIST~1.EXE
size: 23040
MD5: EBEA065B4A6932C83059C190D1516E4C
Located: HK_LM:Run, StillImageMonitor (DISABLED)
command: C:\WINDOWS\SYSTEM\STIMON.EXE
file: C:\WINDOWS\SYSTEM\STIMON.EXE
size: 114688
MD5: 3A395315C2D9E63C0CE4704AFA404FFA
Located: HK_LM:Run, TIPS (DISABLED)
command: C:\PROGRA~1\Microsoft Hardware\tips\mouse\tips.exe
file: C:\PROGRA~1\Microsoft Hardware\tips\mouse\tips.exe
size: 20992
MD5: 3F0365D9006B315225C0EA52EA5AF383
Located: HK_LM:RunServices, LoadPowerProfile (DISABLED)
command: Rundll32.exe powrprof.dll,LoadCurrentPwrScheme
file: C:\WINDOWS\SYSTEM\powrprof.dll
size: 24576
MD5: 1632E2B49F6AC1FD2BD79088A970099A
Located: HK_CU:Run, SpybotSD TeaTimer
where: .DEFAULT...
command: C:\Program Files\Spybot - Search & Destroy\TeaTimer.exe
file: C:\Program Files\Spybot - Search & Destroy\TeaTimer.exe
size: 1829712
MD5: B0958D92E1DD451C36BE96DBE93DC485
Located: HK_CU:Run, Start WingMan Profiler (DISABLED)
where: .DEFAULT...
command: "c:\Program Files\Logitech\WingMan Software\lwtest.exe" /detect /quiet /launch "c:\Program Files\Logitech\WingMan Software\lwemon.exe /noui"
file: c:\Program Files\Logitech\WingMan Software\lwtest.exe
size: 0
MD5: D41D8CD98F00B204E9800998ECF8427E
Warning: if the file is actually larger than 0 bytes,
the checksum could not be properly calculated!
Located: Startup (user), MWN-USB54G Wireless Client Utility .lnk
where: C:\WINDOWS\Start Menu\Programs\StartUp...
command: C:\Program Files\Medialink\MWN-USB54G\Installer\WIN9X\MWN-USB54G Wireless Client Utility .exe
file: C:\Program Files\Medialink\MWN-USB54G\Installer\WIN9X\MWN-USB54G Wireless Client Utility .exe
size: 610304
MD5: 5D09D25FCF25FB281EDE5BE8729807EE
Located: System.ini, Shell
where: C:\WINDOWS\system.ini...
command: Explorer.exe
file:
size: 0
MD5: D41D8CD98F00B204E9800998ECF8427E
Warning: if the file is actually larger than 0 bytes,
the checksum could not be properly calculated!
md usa spybot fan
2008-08-17, 23:57
JOE.G:
I really didn't what to see another log. I stated:
...
The next time you have the occasion post a text log ...
Particularly a log in its entirety without segregating the specific entry that you were concerned with in response to my questions.
Since you didn't reply to any of the questions I asked, I assume that you understand the nature of the entry, understand the comments associated with startup entry and are just going to leave the entry alone.
If not, I sorry but I will not respond to any other queries in this thread. You have another thread asking about startup entries:
Win XPSpybot start up log, could you check to see if I can uncheck anything Also ther…
http://forums.spybot.info/showthread.php?t=32460
Rather than confuse issues or responses please continue any concerns or questions you have concerning startup entries to that thread.
Yes this is the entry
Located: System.ini, Shell
where: C:\WINDOWS\system.ini...
command: Explorer.exe
file:
size: 0
MD5: D41D8CD98F00B204E9800998ECF8427E
Warning: if the file is actually larger than 0 bytes,
the checksum could not be properly calculated
When I right click on it the arrow starts flashing and moving all around.
I have to diffrent threads for 2 diffrent operating systems, 1 is 98 SE and the other is XP. This is the 98 SE thread.
md usa spybot fan
2008-08-19, 20:01
JOE.G:
Do not attempt to delete that entry!!!
Spybot will not do it and don't do it manually because you will regret it.
Ok so it is not a virus? I just don't remeber seeing it there before.
drragostea
2008-08-20, 01:55
Spybot will not do it and don't do it manually because you will regret it.
Joe, it's kind of important, if you think about it : ).
I remember if you "kill" explorer.exe it'll render you unable to boot the desktop.
If you try/attempt to remove the entry, I doubt you'll be able to boot your OS again.
I will not delete it, the way spybot sets it up confuses me sometimes. Thanks P.S everything else looks good? thanks