Nuisance messages on boot up

I haven't ran a recent spyware scan and when I did turn the programs on, the nusiance messages re-appeared.

 

I just ran a spyware scan and nothing is there that's unusal.

 

delete them from startup via startup control panel and reboot. if the messages go away, i'd say u'r done.

 

I've done that from msconfig and then went to startup and deleted them and you said that wasn't a good thing to do but to use Mike's program. am I right?

 

I've been using this computer for almost 3yrs now and it's been in selective startup almost since the day I built it. I used to remove them entirely but I guess I've gotten lazy in my old age and have just left it that way. There's really not much difference between using msconfig to disable them or any other utility. The only real difference is that msconfig removes them from a run key in the registry and moves them to a -run key. This is really no different than deleting them all together. In fact, those that are comfortable muckiing around in the registry can disable them using msconfig and then delete them from the -run key and end up with the same thing as what you'd have using these utilities. Yes, they make it easier, no doubt. My point is, if you disable them in msconfig, it's pretty much the same as deleting them and the selective startup thing is nothing to worry about.

When you use something like Mike Lin's program, you only delete the registry entry. The program is still on your hard drive just as it is with msconfig. When msconfig disables it, it's the same as deleting the registry entry except that it's moved to another key for safe keeping so to speak.

 

Quite agree with Zander. msconfig is quick and dirty (if somewhat limited) tool to have a look and control what's starting up. There is no cause for concern if you run your computer with 'Selective Startup' except that you would be getting a message which can be disabled.

 

First, please move hijackthis to a permanent folder so that its backups of things we remove will be stored and can be recovered if necessary.
C:\Programfiles\Hijackthis\hijackthis.exe is a recommended location, but a folder on the desktop or in mydocuments is adequate. Just no temp files

Secondly, did you return any unchecked items in msconfig prior to running this scan so that we can see all the entries? I do not see any obvious II entries

Third
F2 - REG:system.ini: UserInit=C:\WINDOWS\system32\Userinit.exe
Is almost always a sign of a virus (when followed by a , for sure ) unless it is being used to run logon scripts or establish network connections.
So for now I will assume it is related to your SBC Yahoo, although the machines I have access to with SBC yahoo do not have this entry.


I do however suspect these two entries as possible sources of your trouble
O4 - HKLM\..\Run: [IPInSightMonitor 02] "C:\Program Files\Visual Networks\Visual IP InSight\SBC\IPMon32.exe "
O4 - HKLM\..\Run: [IPInSightLAN 02] "C:\Program Files\Visual Networks\Visual IP InSight\SBC\IPClient.exe" -l

http://startup.networktechs.com/srch-ipmon32.exe.html

http://startup.networktechs.com/srch-ipclient.exe.html?search=ipclient.exe


I have also seen this cause startup problems
O4 - HKLM\..\Run: [YOP] C:\PROGRA~1\Yahoo!\YOP\yop.exe /autostart
The solution here is to reinstall your Yahoo Online Protection.\



O2 - BHO: Starware - {CA356D79-679B-4b4c-8E49-5AF97014F4C1} - C:\Program Files\Starware\bin\Starware.dll
http://securityresponse.symantec.com/avcenter/venc/data/adware.starware.html[/uyrl]
Follow the removal instructions from symantec and have Hijackthis fix this entry if it remains.



O2 - BHO: (no name) - {4A2AACF3-ADF6-11D5-98A9-00E018981B9E} - (no file)
Follow these instructions carefully to prevent loss of internet connectivity.
http://www.newdotnet.com/removal.html
Go to add/ remove programs and uninstall newdotnet if it is listed.
http://www.symantec.com/avcenter/venc/data/adware.ndotnet.html
Finish by following symantecs advice and run hijackthis put a check by this and choose fix .

O4 - HKLM\..\Run: [KernelFaultCheck] %systemroot%\system32\dumprep 0 -k
Go to control panel /system / advanced / startup and recovery / settings
change write debugging information to none.

 

Looks like I'm going to be busy for a while. I was wondering about the misconfig disabling because everyone I've ever spoke to has always recommended doing that. Thanks for the responses from everyone.