PDA

View Full Version : Hosts and Startup question/problem



godawgs
2009-02-06, 18:20
I just upgraded to v1.6.2and ran a scan. First of all, it checked all 383+ thousand things in just over 17 minutes, which I thought was great compared to v1.5.6

After the scan, I went into Settings and set the program up.
Then I went into Tools and found a couple of things.

First, There isn't a "Hosts" section so you can add SBS&D's Hosts List. Doesn't SBS&D use this anymore? It's still referred to in the help file.

The Second thing appears to be a problem and appears on the Tools>Startup page.

This is in the System Startup tab 2 times

Key:
HK_CU:Run(User S-1-5-21-2695072642-473866232-3689853989-501)

Value:
MSMSGS

Command Line: "C:\Program Files\Messenger\msmsgs.exe" /background

This is in the System Startup tab 1 time:

Key:
HK_CU:Run(User S-1-5-21-2695072642-473866232-3689853989-1007)

Value:
MSMSGS

Command Line:
"C:\Program Files\Messenger\msmsgs.exe" /background

This is in the System Startup tab 1 time:

Key:
HK_CU:Run(User OWNER on C: )

Value:
MSMSGS

Command Line:
"C:\Program Files\Messenger\msmsgs.exe" /background

In the information bar, the Database Status says--Not required-virus,spyware,malware or other resource hog.
The Description section says--Added by the Small-ew Trojan

I don't know if SBS&D is designed to find this, but after running a scan, it didn't show anything.
I don't find a HK_CU:Run key at all in the registry.
There is a S-1-5-21-2695072642-473866232-3689853989-1007 key, but it's under HK_LM:Software
Have Searched all program files and the registry and can't find msmsgs.exe /background. There is a "C:\Program Files\Messenger\msmsgs.exe" but without the /background.
McAfee lists the Small.ew trojan under a different name, I have run my anti-virus and it shows no sign of either virus. I have searched for the files that the google posts said could be created and didn't find any.
My Startup list under MSCONFIG doesn't show any of these items.
Any help would be appreciated.
JC

md usa spybot fan
2009-02-07, 00:49
godawgs:

I am responding to your Hosts file question only.


I just upgraded to v1.6.2 ... Then I went into Tools and found a couple of things.

First, There isn't a "Hosts" section so you can add SBS&D's Hosts List. ...
The HOSTS list is added in the immunization by the "Windows Global (Hosts)" profile. However if you are in Spybot » Mode » Advanced Mode » Tools, double click on "Hosts file" in the right hand pane to bring up the "Hosts file" facility.

The "Hosts file" facility is not checked by default in the right hand pane and therfore does not appear in the left hand pane botton list. If you would like "Hosts file" to apprear in the left hand pane bottom list, check "Hosts file" in the right hand pane.

*****************

In regard to the startup entries you are questioning. The display information for startup entries normally consistes of:
Current filename:
Database status:
Value:
Filename:
Description:
Source:
_____

Since it does not seem that you included the "Current filename: ..." nor posted the actual startup entry that you are interested in, it is difficult help.

If you post the "Current filename: ..." or the actual startup entry and related information, possibly someone can help.

You can post the actual startup entry by going into Spybot » Mode » Advanced Mode » Tools » System startup and right clicking on the list, then select "Copy to clipboard". You can paste (Ctrl + V) the clipboard into another post in this thread. Please edit the post so that only the entry(s) in question is posted.

godawgs
2009-02-10, 07:20
Thanks md usa.
I'll get the right information and re-post.