Win 98 SE spybot start up log, What do you think?

**JOE.G** · 2008-08-16, 19:25

The last one, it says shell explore.exe When ever I right click it it gets funny, I also don't get the option to delete it.

**md usa spybot fan** · 2008-08-16, 20:25

JOE.G:

The next time you have the occasion post a text log, please just post the content of the file in the forum or the specific potion of that log you are interested in rather than attaching a file that requires downloading and/or opening a file.

Thank you.

__________

Is this is the entry you are talking about???

Code:

Located: System.ini, Shell
  where: C:\WINDOWS\system.ini...
command: Explorer.exe
   file: 
   size: 0
    MD5: D41D8CD98F00B204E9800998ECF8427E
         Warning: if the file is actually larger than 0 bytes,
         the checksum could not be properly calculated!

__________

Originally Posted by JOE.G

... When ever I right click it it gets funny, ...

Please explain. Are you indicating that you don't understand the comments about the entry???

__________

Originally Posted by JOE.G

... I also don't get the option to delete it.

Running on a Windows 9x system??? If so it is probably a good thing. If you delete that entry on a Windows 9x system you could be in serious trouble. Please read my comments about a similar entry on a Windows 9x system in this thread:

system startup wont delete one of the entries
http://forums.spybot.info/showthread.php?t=24511

**JOE.G** · 2008-08-17, 20:27

Sorry I thought this was teh proper way.

--- Spybot - Search & Destroy version: 1.6.0 (build: 20080729) ---

2008-07-30 blindman.exe (1.0.0.8)
2008-07-30 Update.exe (1.6.0.7)
2008-07-30 SpybotSD.exe (1.6.0.31)
2008-08-11 unins001.exe (51.49.0.0)
2008-07-30 SDMain.exe (1.0.0.6)
2008-07-30 SDWinSec.exe (1.0.0.12)
2008-07-30 SDUpdate.exe (1.6.0.9)
2008-07-30 TEATIMER.EXE (1.6.1.22)
2008-07-30 SDFiles.exe (1.6.0.4)
2008-07-30 SDShred.exe (1.0.2.3)
2008-08-11 spybotsd160.exe (1.6.0.0)
2008-07-30 advcheck.dll (1.6.1.12)
2008-07-30 SDHelper.dll (1.6.0.12)
2008-07-30 Tools.dll (2.1.5.7)
2008-06-14 DelZip179.dll (1.79.11.1)
2007-04-02 aports.dll (2.1.0.0)
2008-06-19 sqlite3.dll
2008-06-03 Includes\Dialer.sbi
2008-06-03 Includes\Cookies.sbi
2007-11-07 Includes\Revision.sbi
2008-07-30 Includes\Hijackers.sbi
2008-08-05 Includes\Malware.sbi
2008-08-05 Includes\Keyloggers.sbi
2008-08-05 Includes\PUPS.sbi
2008-06-18 Includes\Security.sbi
2008-06-03 Includes\Spybots.sbi
2008-08-04 Includes\Spyware.sbi
2008-08-05 Includes\Adware.sbi
2008-08-05 Includes\Trojans.sbi
2008-06-03 Includes\Tracks.uti
2008-08-06 Includes\TrojansC.sbi
2008-06-03 Includes\SpybotsC.sbi
2008-08-05 Includes\SecurityC.sbi
2008-08-05 Includes\PUPSC.sbi
2008-08-05 Includes\MalwareC.sbi
2008-08-05 Includes\KeyloggersC.sbi
2008-07-08 Includes\HijackersC.sbi
2008-08-05 Includes\DialerC.sbi
2008-07-23 Includes\HeavyDuty.sbi
2008-08-05 Includes\AdwareC.sbi
2008-08-05 Includes\SpywareC.sbi
2007-12-24 Plugins\TCPIPAddress.dll
2008-03-04 Plugins\Chai.dll
2008-03-05 Plugins\Fennel.dll
2008-02-26 Plugins\Mate.dll

Located: HK_LM:Run, AVG7_AMSVR
command: C:\PROGRA~1\GRISOFT\AVGFRE~1\AVGAMSVR.EXE
file: C:\PROGRA~1\GRISOFT\AVGFRE~1\AVGAMSVR.EXE
size: 418816
MD5: 3C7B93F947355E374A49564D0D017B7B

Located: HK_LM:Run, AVG7_CC
command: C:\PROGRA~1\GRISOFT\AVGFRE~1\AVGCC.EXE /STARTUP
file: C:\PROGRA~1\GRISOFT\AVGFRE~1\AVGCC.EXE
size: 579584
MD5: 25A49E5BFF4E6424FA5E27C81269041D

Located: HK_LM:Run, AVG7_EMC
command: C:\PROGRA~1\GRISOFT\AVGFRE~1\AVGEMC.EXE
file: C:\PROGRA~1\GRISOFT\AVGFRE~1\AVGEMC.EXE
size: 406528
MD5: FC0B2AE890BB0DC8C2306DABEDC8A4BA

Located: HK_LM:Run, EnsoniqMixer
command: starter.exe
file: C:\WINDOWS\starter.exe
size: 22528
MD5: 291E5336F8611B81E3712524CFCD1400

Located: HK_LM:Run, mmpti
command: c:\windows\SYSTEM\m1mmpti.exe
file: c:\windows\SYSTEM\m1mmpti.exe
size: 96256
MD5: 71D41B1049B5507912E118B509980B5F

Located: HK_LM:Run, POINTER
command: C:\PROGRA~1\MICROS~1\point32.exe
file: C:\PROGRA~1\MICROS~1\point32.exe
size: 85504
MD5: 390075762533CB867133853E592956F1

Located: HK_LM:Run, ScanRegistry
command: c:\windows\scanregw.exe /autorun
file: c:\windows\scanregw.exe
size: 86016
MD5: F123231689E2AB2FA5C636B99314501F

Located: HK_LM:Run, TaskMonitor
command: c:\windows\taskmon.exe
file: c:\windows\taskmon.exe
size: 28672
MD5: F795110611101279AA15997801ABACA0

Located: HK_LM:RunServices, rmmon
command: c:\windows\SYSTEM\mprmmon.exe
file: c:\windows\SYSTEM\mprmmon.exe
size: 23552
MD5: 4640AE68212F4A18282DA4D52A5A8606

Located: HK_LM:RunServices, winmodem
command: WINMODEM.101\wmexe.exe
file: C:\WINDOWS\SYSTEM\WINMODEM.101\wmexe.exe
size: 51680
MD5: A2A25B6B972F0E49B32ACB5122A088ED

Located: HK_LM:Run, Adaptec DirectCD (DISABLED)
command: C:\PROGRA~1\ADAPTEC\DIRECTCD\DIRECTCD.EXE
file: C:\PROGRA~1\ADAPTEC\DIRECTCD\DIRECTCD.EXE
size: 1126400
MD5: 983C7EA1F0B9E3987E3136716780E974

Located: HK_LM:Run, QuickTime Task (DISABLED)
command: "C:\WINDOWS\SYSTEM\QTTASK.EXE" -atboottime
file: C:\WINDOWS\SYSTEM\QTTASK.EXE
size: 77824
MD5: FC9F5C5D87D0A6D1E10773D20CB3C3EF

Located: HK_LM:Run, RegisterDropHandler (DISABLED)
command: C:\PROGRA~1\TEXTBR~1.0\BIN\REGIST~1.EXE
file: C:\PROGRA~1\TEXTBR~1.0\BIN\REGIST~1.EXE
size: 23040
MD5: EBEA065B4A6932C83059C190D1516E4C

Located: HK_LM:Run, StillImageMonitor (DISABLED)
command: C:\WINDOWS\SYSTEM\STIMON.EXE
file: C:\WINDOWS\SYSTEM\STIMON.EXE
size: 114688
MD5: 3A395315C2D9E63C0CE4704AFA404FFA

Located: HK_LM:Run, TIPS (DISABLED)
command: C:\PROGRA~1\Microsoft Hardware\tips\mouse\tips.exe
file: C:\PROGRA~1\Microsoft Hardware\tips\mouse\tips.exe
size: 20992
MD5: 3F0365D9006B315225C0EA52EA5AF383

Located: HK_LM:RunServices, LoadPowerProfile (DISABLED)
command: Rundll32.exe powrprof.dll,LoadCurrentPwrScheme
file: C:\WINDOWS\SYSTEM\powrprof.dll
size: 24576
MD5: 1632E2B49F6AC1FD2BD79088A970099A

Located: HK_CU:Run, SpybotSD TeaTimer
where: .DEFAULT...
command: C:\Program Files\Spybot - Search & Destroy\TeaTimer.exe
file: C:\Program Files\Spybot - Search & Destroy\TeaTimer.exe
size: 1829712
MD5: B0958D92E1DD451C36BE96DBE93DC485

Located: HK_CU:Run, Start WingMan Profiler (DISABLED)
where: .DEFAULT...
command: "c:\Program Files\Logitech\WingMan Software\lwtest.exe" /detect /quiet /launch "c:\Program Files\Logitech\WingMan Software\lwemon.exe /noui"
file: c:\Program Files\Logitech\WingMan Software\lwtest.exe
size: 0
MD5: D41D8CD98F00B204E9800998ECF8427E
Warning: if the file is actually larger than 0 bytes,
the checksum could not be properly calculated!

Located: Startup (user), MWN-USB54G Wireless Client Utility .lnk
where: C:\WINDOWS\Start Menu\Programs\StartUp...
command: C:\Program Files\Medialink\MWN-USB54G\Installer\WIN9X\MWN-USB54G Wireless Client Utility .exe
file: C:\Program Files\Medialink\MWN-USB54G\Installer\WIN9X\MWN-USB54G Wireless Client Utility .exe
size: 610304
MD5: 5D09D25FCF25FB281EDE5BE8729807EE

Located: System.ini, Shell
where: C:\WINDOWS\system.ini...
command: Explorer.exe
file:
size: 0
MD5: D41D8CD98F00B204E9800998ECF8427E
Warning: if the file is actually larger than 0 bytes,
the checksum could not be properly calculated!

**md usa spybot fan** · 2008-08-17, 23:57

JOE.G:

I really didn't what to see another log. I stated:

Originally Posted by md usa spybot fan

...
The next time you have the occasion post a text log ...

Particularly a log in its entirety without segregating the specific entry that you were concerned with in response to my questions.

Since you didn't reply to any of the questions I asked, I assume that you understand the nature of the entry, understand the comments associated with startup entry and are just going to leave the entry alone.

If not, I sorry but I will not respond to any other queries in this thread. You have another thread asking about startup entries:

Win XPSpybot start up log, could you check to see if I can uncheck anything Also ther…
http://forums.spybot.info/showthread.php?t=32460

Rather than confuse issues or responses please continue any concerns or questions you have concerning startup entries to that thread.

**JOE.G** · 2008-08-19, 19:40

Yes this is the entry

Located: System.ini, Shell
where: C:\WINDOWS\system.ini...
command: Explorer.exe
file:
size: 0
MD5: D41D8CD98F00B204E9800998ECF8427E
Warning: if the file is actually larger than 0 bytes,
the checksum could not be properly calculated

When I right click on it the arrow starts flashing and moving all around.
I have to diffrent threads for 2 diffrent operating systems, 1 is 98 SE and the other is XP. This is the 98 SE thread.

**md usa spybot fan** · 2008-08-19, 20:01

JOE.G:

Do not attempt to delete that entry!!!

Spybot will not do it and don't do it manually because you will regret it.

**JOE.G** · 2008-08-20, 01:37

Ok so it is not a virus? I just don't remeber seeing it there before.

**drragostea** · 2008-08-20, 01:55

Originally Posted by md usa spybot fan

Spybot will not do it and don't do it manually because you will regret it.

Joe, it's kind of important, if you think about it : ).

I remember if you "kill" explorer.exe it'll render you unable to boot the desktop.

If you try/attempt to remove the entry, I doubt you'll be able to boot your OS again.

**JOE.G** · 2008-08-21, 16:11

I will not delete it, the way spybot sets it up confuses me sometimes. Thanks P.S everything else looks good? thanks

Thread: Win 98 SE spybot start up log, What do you think?

Thread Tools

Display

Win 98 SE spybot start up log, What do you think?

Posting Permissions