Re: SETIATHOME and BOINC

"Jim Henley" <NotAvailable@xxxxxxxxxx> wrote in message
news:mn.2d647d62d2876532.46235@xxxxxxxxxxxxx
Pierre Levesque, AIA submitted this idea :
"Jim Henley" <NotAvailable@xxxxxxxxxx> wrote in message
news:mn.25347d62cd372f0e.46235@xxxxxxxxxxxxx
Pierre Levesque, AIA has brought this to us :
Thanks Jim, that's the first decent suggestion I've heard (didn't know
there
was such bickering going on in here)...

However, I have tried what you suggested and I had only 4 non-
MSServices running being:

Office Source Engine - unknown manufacturer
Webroot SpySweeper Engine - Webroot - this is a trusted service
Winfax Pro - Symantec - this is a trusted service
WMP54GSSVC - LinkSys - this is my wireless card

All others were MSServices and I re-booted to find that the directory
still installed itself?

Obviously this is related to a windows startup issue -- where would I
look for references to that prior to windows staring up?


"Jim Henley" <NotAvailable@xxxxxxxxxx> wrote in message
news:mn.25087d6272856467.46235@xxxxxxxxxxxxx
Pierre Levesque, AIA brought next idea :
Why is it that everytime I startup my computer the directory
../windows/system32/projects/setiathome.berkeley.edu
gets created?

I know about SETI and BOINC and never installed it on my machine
voluntarily
so I must assume that it is malware.

Problem is I have run SpySweeper, AdAware, various VirusScanners,
researched
the app in Google for removal instructions, removed all instances of
SETIATHOME and BOINC in theregistries, deleted the directories and
files
related to it...

I've tried everything yet everytime I re-start my system there's the
damn
directory even thought there is no shown evidence of any programs,
directories, files related to either BOINC or SETIATHOME anywhere on
my
system.

My Windows Explorer is set to show hidden files...

I've searched the Microsoft KB and found nothing...

I've searched the SETI website and found nothing...

Anyone know of this occurence, what can be done?

Sincerely,

Pierre Levesque,AIA
connarchATyahoo.com

You could try going to the old "Run/MSConfig" and disable all services
except MS Services and disable all Startup Items. Restart and see if
your
problem still exists. If it doesn't then go back to MSConfig and
re-enable
items until the program fails again. Then only remove that item.
Works
for me!

In the same MSConfig utility there is a tab for "Startup". When you
click that you will see a check list of all the things that start when
you first boot up. You can safely "Disable All". It doesn't delete
anything is just prevents all those things from starting. After you
click Ok it will require a re-start and when it comes back up you can
check the box that says something like "don't open msconfig every time".
You will probably have to delete those problem files/folders at least
once and do a couple re-starts to make sure they aren't coming back. If
windows really needs something to start, it will put it back in your
startup group. Again, when you are satisfied you can always re-run
msconfig and add the individual items back (like your virus scanner, and
other essential items.)

Go for it!


Only 6 startup items there and they are all known to be safe (yahoo
messenger, bluetooth mouse and keyboard, winfax, palm hotsync, and
DUMeter)

Whenever I disable a startup item I immediately remove it from the
registries as well in ..software/microsoft/shared tools/msconfig/

so that's not the problem either...

nah, somewhere, somehow there is a file that causes it to re-install on
all bootups... it even installs itself if I startup in safe-mode!

PL

Ok... One last shot. You might try actually downloading the Setia and
Boinc programs, installing them and then uninstalling them. Sometimes that
works for me. If that doesn't work the only thing I can think of would be
to do a system restore as far back as you can and see if they go away.

Let me know

Jim,

I guess you didn't see the RESOLVED thread I posted huh?

I managed to find all the files and removed it succesfully... I passed on
the info Webroot and another person had contacts at Symantec... they have
the info, it'll be worked on and available soon...

Thanks for the help though... was very useful



.

Relevant Pages

  • Re: Start Up Freezing
    ... Windows XP Startup Programs Tracker ... Go to Start/Run and type in: msconfig. ... > Half the time, after starting up Windows XP, the taskbar freezes. ...
    (microsoft.public.windowsxp.general)
  • Re: My system is haunted!
    ... If you find a posting or message from me offensive,inappropriate ... How to Troubleshoot By Using the Msconfig Utility in Windows XP ... cease the selective startup notifications, ...
    (microsoft.public.windows.vista.security)
  • Re: My system is haunted!
    ... only ordinary applications are running. ... As you're getting an error message that clearly indicates that the program is trying to initiate each time you start Windows, the first thing you should do is use MSConfig to determine how the file program is starting, and where it's located. ... To cease the selective startup notifications, either return your settings to the way they were, or permanently remove the undesirable programs from your startup configuration. ...
    (microsoft.public.windows.vista.security)
  • Re: Where is the startup folder in WXP? Programs under Windows
    ... There are no PROGRAMS under Windows in WE. ... MSCONFIG shows you a registry path. ... descriptions of your startup programs. ...
    (microsoft.public.windowsxp.newusers)
  • RE: Modem Calling
    ... Windows XP has a utility named System Configuration Utility (MSCONFIG) ... On the Startup, uncheck all items in the list. ... After Windows starts, determine whether the symptoms are still present. ... | Subject: Modem Calling ...
    (microsoft.public.windowsxp.general)