How to remove Startup items

Discussion in 'Computer Support' started by r_mervart, Mar 10, 2005.

  1. r_mervart

    r_mervart Guest

    Win98SE. I run msconfig, unchecked one nasty file [
    C://Windows/system/oicjvux.exe ] and on a next start-up deleted it. However
    it still appears in the msconfig Startup window. Is there any way to
    remove such unchecked and deleted files from here?

    Thanks
    Roman
     
    r_mervart, Mar 10, 2005
    #1
    1. Advertisements

  2. r_mervart

    Ron Martell Guest

    Use Regedit and locate the entry. It will be in one of the "Run" keys
    in the registry, which are:

    HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Run
    HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Run
    HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\RunOnce
    HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\RunOnce
    HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\
    RunServices
    HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\RunServicesOnce
    HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\RunOnce\Setup

    Items that have been disabled in MSCONFIG will be in a "Run-" key
    immediately following the related "Run" key.

    Note that startup items can also appear in MSCONFIG from:
    -autoexec.bat
    -config.sys
    -system.ini
    -win.ini
    -the Startup group on the Start Menu.

    Good luck


    Ron Martell Duncan B.C. Canada
    --
    Microsoft MVP
    On-Line Help Computer Service
    http://onlinehelp.bc.ca

    "In memory of a dear friend Alex Nichol MVP"
     
    Ron Martell, Mar 10, 2005
    #2
    1. Advertisements

  3. r_mervart

    r_mervart Guest


    I take it there is no maintenance software that would
    -display the entries in a similar fashion as msconfig
    - clear selected entries at a request

    If not I shall have a go at the manual clear up
    Thanks
    Roman
     
    r_mervart, Mar 10, 2005
    #3
  4. r_mervart

    Big Johnson Guest

    Roman,

    Autoruns (free, from SysInternals)
    <http://www.sysinternals.com/ntw2k/freeware/autoruns.shtml> will show you what
    processes are started automatically, will let you delete them, and will
    automatically open the registry editor, and show you each entry there.
     
    Big Johnson, Mar 10, 2005
    #4
  5. r_mervart

    Vanguard Guest


    Unchecking a startup item in msconfig doesn't remove it from msconfig's
    display. That only *disables* that item. Unchecking a startup item
    will, for example, remove it from the Run registry key used to load that
    program and add it under msconfig's registry key to keep track of it
    (HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Shared Tools\MSConfig\startupreg
    under Windows XP, might be different for Windows 9x). That way, when
    you re-check that item to reenable it, msconfig knows what to add back.

    The purpose of msconfig is to disable or enable startup items, not to
    remove them. You'll have to edit the registry yourself to remove them.
    If a Delete action were added to msconfig so you could remove the
    startup item and also not track it in msconfig then it would be as
    hazardous a tool as the registry editor. msconfig is a diagnostics
    tool, not a repair tool. You do the diagnostic checking in msconfig but
    you do the hazardous editing in regedit.
     
    Vanguard, Mar 10, 2005
    #5
  6. r_mervart

    °Mike° Guest

    That is because msconfig is NOT a tool for managing
    your startups.
    Odds are, by the file name, that you are infected with a
    trojan/virus.

    Try AT LEAST two online antivirus scanners:

    http://housecall.trendmicro.com/housecall/start_corp.asp
    http://www3.ca.com/virusinfo/virusscan.aspx
    http://security.symantec.com/sscv6/default.asp
    http://www.pandasoftware.com/activescan/activescan.asp
    http://us.mcafee.com/root/mfs/default.asp


    Once you have scanned your system for viruses, download,
    update and use ALL of the following -- even if you already
    have them installed, UPDATE THEM NOW. Malware changes
    by the day, even by the hour, so you MUST have the latest
    version of removal tools:

    Spybot Search & Destroy
    http://www.safer-networking.org/en/index.html
    SpyBot S&D guide
    http://www.chem.wisc.edu/~network/spybot/

    Ad-Aware SE
    http://www.lavasoftusa.com/
    Ad-Aware VX2 cleaner plug-in
    http://www.lavasoftusa.com/software/addons/vx2cleaner.shtml
    IMPORTANT NOTICE:
    http://www.mvps.org/winhelp2002/hosts.htm#Attention

    Spyware Blaster
    http://www.javacoolsoftware.com/spywareblaster.html

    CWShredder (CoolWebSearch remover)
    http://cwshredder.net/cwshredder/cwschronicles.html
    Now maintained by InterMute
    http://www.intermute.com/spysubtract/cwshredder_download.html
    http://cwshredder.net/bin/CWShredder.exe
     
    °Mike°, Mar 10, 2005
    #6
  7.  
    Jij afghanistanse anabole abortuskind, Mar 10, 2005
    #7
  8. r_mervart

    Stickems. Guest

    Please can you explain the meaning of :-

    | Items that have been disabled in MSCONFIG will be in a "Run-" key
    | immediately following the related "Run" key.
     
    Stickems., Mar 10, 2005
    #8
  9. r_mervart

    °Mike° Guest

    Msconfig uses a dummy key, which is the name of the key
    that the entry is disabled from with a dash (minus) added.
    It deletes the entry from the original (Run etc.) key, and
    recreates it in the dummy key, so that it can be restored
    if/when needed.
     
    °Mike°, Mar 10, 2005
    #9
  10. r_mervart

    r_mervart Guest

    Yes, it was VX2, detected by Ad-aware but I could not get rid of it using
    Ad-Aware. I managed to get rid of it after un-checking it in msconfig and
    then
    deleting it. But it remained in the msconfig until I also found related
    Registry
    entry and got rid of it. Then I realized that I have quite a few un-ticked
    items
    which I will not need and would want to get rid off

    Roman
     
    r_mervart, Mar 10, 2005
    #10
  11. r_mervart

    r_mervart Guest

    Yes, I understand that but it is not immediately clear where all those
    entries
    actually reside and it would be nice, I thought, if there was a specialised
    tool that would point to these and give you the option to remove them.
    I did not expect it to be part of msconfig.
    Roman
     
    r_mervart, Mar 10, 2005
    #11
  12. r_mervart

    r_mervart Guest

    Tried this one. The problem is that it shows only those items that are
    currently
    ticked in the msconfig It is those that are not ticked I would like to know
    where
    they are to delete them. I would not want to re-enable them, if possible,
    in order to find out that.
    Roman
     
    r_mervart, Mar 10, 2005
    #12
  13. r_mervart

    r_mervart Guest

    I can see them there, thanks-:)
    Roman
     
    r_mervart, Mar 10, 2005
    #13
  14. r_mervart

    Chuck Guest

    Roman,

    There is indeed a specialised tool - it's called RegEdit. But you have to know
    what to delete.

    I use 3 different tools for monitoring and managing my startup lists.
    Autoruns
    MSConfig
    StartUp Control Panel <http://www.mlin.net/StartupCPL.shtml>

    Each of these tools have their advantages and disadvantages. Each take a
    disabled item (registry key) and save its contents in another registry key, when
    you disable a startup item. Each use a different key to save disabled items to.

    Once you disable a startup, using one of the above solutions, you have 2
    options.
    1) Use the same product to delete the entry (or restore it).
    2) Find out the registry key used to save the entry, and use RegEdit to delete
    the saved key (or restore it).

    Autoruns is my choice of the three. From Autoruns, you can Jump To the registry
    (or folder based shortcut) entry for any startup item. If the item is disabled,
    you will jump to the disabled (saved) key. You can delete from RegEdit or from
    Autoruns itself.

    If Mark et al would add a Start Item selection to Autoruns, to restart a stopped
    startup program, I wouldn't need to access any StartUp shortcuts. That would
    truly rock.

    --
    Cheers,
    Chuck
    Paranoia comes from experience - and is not necessarily a bad thing.
    My email is AT DOT
    actual address pchuck sonic net.
     
    Chuck, Mar 10, 2005
    #14
  15. r_mervart

    Philippe Guest

    Download HijackThis from http://www.merijn.org/

    this free sofware will scan for all that is launched at startup and display
    these entries in a window with check boxes.

    To remove an entry, check the corresponding checkbox and click on the Fix It
    button, and voila.

    --
    Hope that helps

    Joseph

    philippeoget at hotmail dot com
    http://www.geocities.com/philippeoget/a2z/
     
    Philippe, Mar 11, 2005
    #15
  16. r_mervart

    Vanguard Guest


    In my prior post (and also quoted here), I already mentioned the
    registry key under which msconfig saves the disabled items. You could
    delete the subkeys there. However, it is probably safer and easier to
    simply reenable the item and the delete it from the registry key or
    target location listed for that startup item.
     
    Vanguard, Mar 11, 2005
    #16
  17. r_mervart

    Vanguard Guest


    Must be how msconfig works on Windows 9x. Under Windows XP, no "Run-"
    named key gets created when a startup item is disabled. Instead the
    data item under the Run key gets deleted and a copy of it appears under:

    HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Shared Tools\MSConfig\startupreg

    Microsoft did change the registry editor in Windows XP so now
    regedit.exe does the same functions as regedit.exe and regedt32.exe (the
    regedt32.exe that exists under Windows XP is just a stub that loads
    regedit.exe). So maybe they changed the behavior of where the disabled
    items are stored.

    Did you run msconfig on Windows 9x and disable a Run item to see the
    Run- key get created with the disabled item under it?
     
    Vanguard, Mar 11, 2005
    #17
  18. r_mervart

    r_mervart Guest

    .........but not all of them. For example there is not : IPConfig
    svcxnw32.exe file there. I cannot find the file on PC but it is still in
    msconfig (un-ticked) ?

    Roman
     
    r_mervart, Mar 11, 2005
    #18
  19. r_mervart

    r_mervart Guest

    I think it would be quite a bit less hazardous because only unchecked items
    in the msconfig could be removed from there (with suitable warnings). no
    other entries in the Registry could be affected
    Roman
     
    r_mervart, Mar 11, 2005
    #19
  20. r_mervart

    r_mervart Guest

    Problem is that I would like to have simple way of getting completely rid
    off
    the entries that have been already switched
    off in msconfig but still showing there as unticked. They would not be
    launched so would not be, I presume, detected by the HijackThis and
    I could not remove them (as I cannot with Autoruns)

    Roman
     
    r_mervart, Mar 11, 2005
    #20
    1. Advertisements

Ask a Question

Want to reply to this thread or ask your own question?

You'll need to choose a username for the site, which only take a couple of moments (here). After that, you can post your question and our members will help you out.