Re: [PCTECH] Free software loads other stuff - follow up

["Leif Guldbrand" <Guldbrand@xxxxxxxxx>]

James,

Look at these entries:

HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Run
HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Run
HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\RunOnce
HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\RunOnceEx
HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\RunServices
HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\RunServicesOnce

Best regards,
Leif

----- Original Message ----- 
From: "James R. Newman, CDP" <cis146@xxxxxxxxxxx>
To: "PC Technical Discussion for iSeries Users" <pctech@xxxxxxxxxxxx>
Sent: 17. maj 2004 15:33
Subject: Re: [PCTECH] Free software loads other stuff - follow up


> Since posting my original message, the "extra stuff" that was loaded
> unpacked a virus.  The apparent culprit was QuikSearch, which came with one
> of the aquarium programs downloaded from Cnet.
> 
> I ran Ad-Aware and it didn't pick it up.  Spybot caught it but couldn't
> uninstall and neither could Norton.  I had to go into msconfig, uncheck
> several things in the start up panel, reboot in safe mode, delete
> QuikSearch.exe in the c:\windows\system32 folder, reboot, and run a full
> scan with NAV, AdAware, and Spybot.  Man, what I wouldn't give for 30
> seconds and my hands around the guy's throat who put that out!!
> 
> So now I've got these items in my start up that I don't want there and that
> occupy memory.  I know I can uncheck them and I know I can delete the actual
> files that are run on start up but how or where can I delete the entries
> that are executed on boot up?
> 
> 
> 
> 
> ----- Original Message ----- 
> From: "James R. Newman, CDP" <cis146@xxxxxxxxxxx>
> To: "PC Tech" <PcTech@xxxxxxxxxxxx>
> Sent: Saturday, May 15, 2004 11:10 AM
> Subject: [PCTECH] Free software loads other stuff
> 
> 
> I'm running a Dell (don't buy one) 1.4 ghz with 256 meg ram running Windows
> XP Pro.
> 
> A couple of days ago my 4 year old son saw an aquarium program running in an
> office superstore. Rather than buy the program I downloaded 3 from Cnet and
> installed them. I quickly noticed they'd loaded lots of other stuff like
> pop-ups. 1 of them had an uninstall. I deleted the folders the programs were
> loaded into and ran Norton Windows Doctor to get rid of anything left
> behind.
> When I run MSCONFIG I notice I've still got stuff loading that wasn't there
> before such as:
> 
> eeuneqv
> vbabsxs
> inetmgr
> QuikSearch.exe
> li01f948.dll
> iel2cde.dll
> 
> I think these were left behind by the freebies but how do I know for sure? I
> know I can find the files and delete them but won't Windows still try and
> load at startup? How do I get this stuff to not load (get it out of
> MSCONFIG)?
> _______________________________________________
> This is the PC Technical Discussion for iSeries Users (PcTech) mailing list
> To post a message email: PcTech@xxxxxxxxxxxx
> To subscribe, unsubscribe, or change list options,
> visit: http://lists.midrange.com/mailman/listinfo/pctech
> or email: PcTech-request@xxxxxxxxxxxx
> Before posting, please take a moment to review the archives
> at http://archive.midrange.com/pctech.
> 
> 
> _______________________________________________
> This is the PC Technical Discussion for iSeries Users (PcTech) mailing list
> To post a message email: PcTech@xxxxxxxxxxxx
> To subscribe, unsubscribe, or change list options,
> visit: http://lists.midrange.com/mailman/listinfo/pctech
> or email: PcTech-request@xxxxxxxxxxxx
> Before posting, please take a moment to review the archives
> at http://archive.midrange.com/pctech.
> 
> 
>