Security Basics mailing list archives

Re: Blank line in MSCONFIG Startup in Windows XP Pro


From: Steve Hillier <securityfocus () mastermindtoys com>
Date: Fri, 05 May 2006 13:14:17 -0400

Try using Autoruns from www.sysinternals.com -- it will give you a much
more comprehensive listing of what is loading at startup than what you
get from msconfig.

sph


On 05/05/2006 10:24 AM, forposts () aol com wrote:
Hi everyone!


I have an odd issue that I would like very much to troubleshoot.  When I launch MSCONFIG in Windows XP Professional, 
on the startup tab, there are various processes that start up.  Most of the self-starting processes occur from 
HKLM\Software\Microsoft\Windows\CurrentVersion\Run in the registry, a few are from 
HKCU\Software\Microsoft\Windows\CurrentVersion\Run in the registry, and some are listed as Common Startup items.  I 
consider myself fairly savvy, and look up processes I don't know about at sites like www.answersthatwork.com.  


But there is a blank checkbox that shows up in MSCONFIG under HKCU\Software\Microsoft\Windows\CurrentVersion\Run in 
the registry that worries me.  If I uncheck the process in MSCONFIG, nothing seems to happen.  I do not believe I 
have a virus, use McAfee VirusScan Online, the virusscans come out clean, run Sunbelt Software's Counterspy which 
also shows up  clean.


I worry about rootkits and such, and run F-Secure's Blacklight software which also shows up clean.  Can anyone give 
me some tips to asses if my system is compromised in some way, or suggested next steps to figure this out?


I also run Zone Alarm Pro firefall.  


Any help is much appreciated.








Current thread: