Re: hess.exe in msconfig

From: David Candy (.)
Date: 01/23/05


Date: Sun, 23 Jan 2005 16:29:41 +1100

Yes. Though what this does is automatically start programs. If you don't have the file it can't start so assuming you (or an AV program) deleted hess.exe you are just tidying up.

-- 
----------------------------------------------------------
http://www.uscricket.com
"lynn" <lynn@discussions.microsoft.com> wrote in message news:1C4E24B5-D24B-4BEB-BF98-2FB19E12290E@microsoft.com...
> David,
> 
> when I check 'hess'  hess.exe at the msconfig, REBOOT and then go to the 
> registry as mentioned by symantec at 
> HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run 
> 
> I still cannot find
> "Winsock32driver"="win32server.scr" or: "Vidcap32driver"="Vidcap32.exe" 
> 
> However there is this addition,  "wzservice   REG_SZ    hess.exe"
> 
> My question is do I highlight 
> 
> 'wzservice' 
> 
> and delete it so that this malicious prog will not be in my system?
> 
> Very sorry about the long winded words and I hope you will response to it as 
> I think I am learning a little bit about the registry, which I am always very 
> scare for fear of messing up the system.
> 
> ++Kelly, I will response to you later.
> 
> TIA.
> 
> "David Candy" wrote:
> 
>> Checked items are in the location specified by msconfig. Unchecked items are moved by msconfig to a holding location at HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Shared Tools\MSConfig
>> 
>> -- 
>> ----------------------------------------------------------
>> http://www.uscricket.com
>> "lynn" <lynn@discussions.microsoft.com> wrote in message news:BC1354D9-1D18-4029-9F3B-8233D765CD9F@microsoft.com...
>> > Bruce, 
>> > Just look into msconfig and its 'uncheck' and then I go to the Registry and 
>> > cannot find
>> > "Winsock32driver"="win32server.scr" or: "Vidcap32driver"="Vidcap32.exe"
>> > 
>> > as mentioned by symantec. My questions
>> > a/ must it be 'check' in the msconfig in order to see this in the registry?
>> > b/ if it does not appear in the registry, does that means the pc is free 
>> > from hess.exe, if so why does it still show in the msconfig?
>> > Many thanks
>> > 
>> > 
>> > "Bruce Chambers" wrote:
>> > 
>> >> Lynn wrote:
>> >> > Hess.exe as I understand is a prog planted by trojan, Found in msconfig but 
>> >> > not in Add/Remove. Tried to clean it with NAV2005 but said not infected. How 
>> >> > can I get this of hess.exe if it is at risk to my pc. Please advice and many 
>> >> > thanks for your time.
>> >> 
>> >> 
>> >> Removal instructions here:
>> >> 
>> >> Symantec Security Response - Backdoor.Hacarmy
>> >> http://securityresponse.symantec.com/avcenter/venc/data/backdoor.hacarmy.html
>> >> 
>> >> -- 
>> >> 
>> >> Bruce Chambers
>> >> 
>> >> Help us help you:
>> >> http://dts-l.org/goodpost.htm
>> >> http://www.catb.org/~esr/faqs/smart-questions.html
>> >> 
>> >> You can have peace. Or you can have freedom. Don't ever count on having 
>> >> both at once. - RAH
>> >>
>>


Relevant Pages

  • Re: hess.exe in msconfig
    ... I will response to you later. ... > I think I am learning a little bit about the registry, ... > "David Candy" wrote: ... >> Checked items are in the location specified by msconfig. ...
    (microsoft.public.windowsxp.general)
  • Re: hess.exe in msconfig
    ... when I check 'hess' hess.exe at the msconfig, REBOOT and then go to the ... Very sorry about the long winded words and I hope you will response to it as ... I think I am learning a little bit about the registry, ... >> as mentioned by symantec. ...
    (microsoft.public.windowsxp.general)
  • Re: nothing...
    ... > Msconfig has them set to run ... > The run keys are in place in the registry ... > Task Manager closes immediately after opening ...
    (microsoft.public.windowsxp.general)
  • Re: hess.exe in msconfig
    ... Take a long rest, lynn. ... >>> I think I am learning a little bit about the registry, ... >>>> Checked items are in the location specified by msconfig. ...
    (microsoft.public.windowsxp.general)
  • Re: common folder at start up
    ... Start/run msconfig, on the general tab select the diagnostic mode. ... registry damage it will not. ... Windows help - www.rickrogers.org ...
    (microsoft.public.windowsxp.general)