Re: After the update, I got hacked by the ads company

From: Dave Patrick (mail_at_Nospam.DSPatrick.com)
Date: 10/17/04 

Date: Sun, 17 Oct 2004 09:43:34 -0600

Better to just stop them from starting up first to see the effect. You
didn't mention the operating system so assuming Windows 2000; Natively you
can; Start\Settings\Control Panel\Administrative Tools\Computer
Management(Local)\System Information\Software Environment\Startup
Programs|View|Advanced, then in the "Location" column, you'll find the path
to the "Startup" location either in the "Startup" directories or from the
registry's "Run" keys. (note that this windows is read-only so you must
manually navigate to the location below to edit or otherwise delete)

%ALLUSERSPROFILE%\Start Menu\Programs\Startup
%USERPROFILE%\Start Menu\Programs\Startup

You can delete the shortcuts that you no longer want to run.

HKLM\Software\Microsoft\Windows\CurrentVersion\Run
HKCU\Software\Microsoft\Windows\CurrentVersion\Run

You can delete the string value for the program you no longer want to run.

or copy msconfig from Windows XP to the "windows" directory

No question on these. Get rid of them.
| MSPY2002
c:\windows\system32\ime\pintlgnt\imscinst.exe
| PHIME2002A
c:\windows\system32\ime\tintlgnt\tintsetp.exe
| PHIME2002ASync c:\windows\system32\ime\tintlgnt\tintsetp.exe
/sync 

-- 
Regards,
Dave Patrick ....Please no email replies - reply in newsgroup.
Microsoft Certified Professional
Microsoft MVP [Windows]
http://www.microsoft.com/protect
"Rob" wrote:
| Hi Dave,
|
| I went through the list, however there is no suspect one except the ones
| from c:\windows\system32.  If I delete the files of the one I dont know, I
| would crash the whole window, don't I?
|
| Sorry for asking help again, I know I am a bit annoying.  Thank you for 
your
| help.
|
| Here is the following that I have no idea what is it, but from
| system32(little list):
| Kqrgl                               c:\windows\system32\m?iexec.exe
| MSPY2002 
c:\windows\system32\ime\pintlgnt\imscinst.exe
| /sync
| PHIME2002A 
c:\windows\system32\ime\tintlgnt\tintsetp.exe
| /imename
| ezShieldProtector for Px    c:\windows\system32\ezsp_px.exe
| PHIME2002ASync             c:\windows\system32\ime\tintlgnt\tintsetp.exe 
/sync
| ctfmon.exe                      c:\windows\system32\ctfmon.exe

Relevant Pages

  • Re: free cell
    ... Windows 98, instructions are further down.): ... On the General tab, click Selective Startup, and then click to clear the ... Process System.ini File, Process WIn.ini File, and Load Startup Items check ... Windows 98 includes a System Configuration Utility tool to ...
    (microsoft.public.games)
  • NewestShareware.com Issue #89
    ... FileBoss for Windows ... Program Homepage/Download url ... In general users make a program execute at window startup by ... Adding programs to the Registry and WIN.INI file protects the program. ...
    (comp.software.shareware.announce)
  • Re: Physical Memory
    ... A description of Svchost.exe in Windows XP ... locator.exe is the Remote Procedure Call Locator service. ... How To Prevent Quicktime From Loading At Startup ... and run Startman and/or Startup Control Panel. ...
    (microsoft.public.windowsxp.configuration_manage)
  • Re: msconfig problem
    ... Operating system is Windows XP Home Edition Version 2002 with SP2. ... Administrator to make the return to Normal Startup. ... Event Type: Warning ...
    (microsoft.public.windowsxp.help_and_support)
  • Re: Physical Memory
    ... A description of Svchost.exe in Windows XP ... locator.exe is the Remote Procedure Call Locator service. ... How To Prevent Quicktime From Loading At Startup ... and run Startman and/or Startup Control Panel. ...
    (microsoft.public.windowsxp.configuration_manage)
Loading