Solved How to change entries in the "System Configuration" window?

[jdb007]

In the "SYSTEMS CONFIGURATION" window, under the "Startup" tab I have a few entries of unwanted software items that need removing.

e.g. Radiorage, Conime, Logitech (no Logitech devices attached now)

and some Unidentified software that looks a little suspicious

How and where can I delete these items safely (Registry using REGEDIT) ??

Thanks
JDB007

 

[UsernameIssues]

Welcome to the Seven Forums.

Start with Control Panel > Programs and Features.

Uninstall anything that you don't need, then let us know if things still show up on that Startup tab that you don't want.

For suspicious stuff, look at this post:
http://www.sevenforums.com/system-security/320426-process-explorer-16-a.html#post2681060

 

[jdb007]

Ok, Programs and Features already done and monitored daily.
Attached screenshots (x3) show what's in the Start-up tab below. Anything with "Unknown" origin is suspicious or NOT required

Thanks JDB007

 

[UsernameIssues]

There are several things in that list that I would uninstall...
radiorage home page guardian
radiorage search scope monitor
search protection
searchprotection
java (see if you miss it)

There is nothing to install with Process Explorer. Give it a try. See my other post.

 

[jdb007]

Yes I would agree BUT the problem is I cannot find where they are installed I have searched the whole PC and NOTHING is displayed ?? Is JAVA not important ??

Thanks for your assistance

JDB007

 

[UsernameIssues]

You will probably never miss java.

If you need it, then the website or application will probably let you know.

If you don't need it, then you are taking a huge risk for no benefit.



Install Malwarebytes from here:
http://www.filehippo.com/download_malwarebytes_anti_malware/



Near the end of the installation, uncheck the trial offer for the pro version.

Do the quick scan first and let it remove what it finds...
...then do a full scan and let it remove what it finds.

 

[Slartybart]

After you scan with Malwarebytes...

You could try cCleaner - download the free version from Piriform.com (3rd on the list of download sites)

Select Tools on the left hand pane and see what Unistall gives you. If you see the questionable applications there, uninstall them.

If you're sure that the applications have been uninstalled, click Startup in cCleaner Tools
On the Windows tab, select / highlight those suspicious entries and click the disable button on the right hand side of the window.

When all of the suspicious ones are disabled, exit cCleaner and restart the machine

Then launch cCleaner and select Tools then Startup category
Again, n the Windows tab, select / highlight those suspicious entries and click the delete button. This only removes the entries from the list, nothing else.

 

[jdb007]

Thanks I will see what that turns up

JDB007

 

[Layback Bear]

Some information from Microsoft about conime.

conime.exe, what is? - Microsoft Community

 

[jdb007]

Thanks for the input .... the file C:\Windows\System32\drivers\conime.exe is NOT there !! Is this where it should be, or is this where the "nasty " file is laying and would be deleted ??

JDB007

 

[UsernameIssues]

I do not have it in a fresh install of W7 in a virtual machine. Nor do I have it on any other W7 computer that I checked. See this thread: non-existent conime.exe wanting to be on start-up list - Microsoft Community

I recently came across an infection that hid itself from the Windows file Explorer in a way that I've not seen before. So, let's let the professionals that wrote Malwarebytes determine if any nasties can be found.

 

[jdb007]

I am running a FULL scan with MST right now and will follow this again with Malware - will post the results asap

Thanks

JDB007

 

[Slartybart]

See: conime.exe | ThreatExpert statistics

You might also want to scan your system with Farbar System Recovery tool.

Download the Farbar Recovery Scan Tool (FRST) Click here

1. Select the version that applies to your system: 32-bit OR 64-bit
   .
2. Click the Save button
   Default save location is your Downloads folder
   :note: If the SmartFilter bar is presented, click the Actions button and click Don't Run (saves FRST but does not run it)
   .
3. Double-click FRST or FRST64 to launch the utility
   :info: FRST is the 32-bit version / FRST64 is the 64-bit version
   • Click the Yes button to confirm UAC
     .
   • Click the Yes button on the Warranty disclaimer window.
     .
   • Tick [[FONT=Webdings, serif]a[/FONT]] all Whitelist checkboxes
     .
   • Tick [[FONT=Webdings, serif]a[/FONT]] Addition.txt in the Optional scan list
     .
4. Click the Scan button to begin scanning.
   .
5. FRST creates two logs when the scan has finished, they are located in the same folder where FRST was launched
   • FRST.txt
   • Addition.txt
   • Attach both logs to a post on your thread and a SevenForums member will analyze the output.
     See: http://www.sevenforums.com/tutorials/9733-screenshots-files-upload-post-seven-forums.html

Thanks

 

[Layback Bear]

What is MST?

 

[UsernameIssues]

What is MST?

Judging from the OP's system specs...
...I would say it was meant to be MSE.

 

[AmericanPharaoh]

You asked about how to remove startup programs using REGEDIT.

This will help to get rid of some of your startup programs.

As you install new programs onto a Windows computer at your home or office, some of these applications may add themselves to the startup list. As this list grows, your computer may appear to slow down, a consequence of so many programs running in the background. You can reduce the number of programs that auto-start by removing them from the startup entries in the Windows registry using Regedit. Editing the Windows registry manually can be risky, so you should always create a backup before you do this.

Step 1
Click "Start," then click "Run," enter "regedit" and click "Ok" for systems older than Windows 7. For Windows 7 systems, click "Start," type "regedit" in the search box and press "Enter."

Step 2
Back up your registry. Click "File," select "Export" and navigate to a location to save your backup. Click "Ok."

Step 3
Navigate to each of the following in this list of registry keys and delete any programs you do not wish to run at startup:
HKLM\Software\Microsoft\Windows\CurrentVersion\Run HKLM\Software\Microsoft\Windows\CurrentVersion\RunOnce HKLM\Software\Microsoft\Windows\CurrentVersion\RunServices HKLM\Software\Microsoft\Windows\CurrentVersion\RunServicesOnce HKCU\Software\Microsoft\Windows\CurrentVersion\Run HKCU\Software\Microsoft\Windows\CurrentVersion\RunOnce HKCU\Software\Microsoft\Windows\CurrentVersion\RunOnceEx

Step 4
Reboot your computer using a clean shutdown after you've made the desired changes.

 

[jdb007]

Thanks I have already looked into this and deleted "some" suspicious entries (not too many !) and will leave for a few days to ensure we are still running.

Cheers

JDB007

 

[jdb007]

Ok here's the result of running FRST ....

View attachment FRST.txt

View attachment Addition.txt

 

[Slartybart]

Thanks jbd007,

I'm going to ask for help on this, there's a lot of things in the output that I'm not sure about.

Bill
.

 

[Jacee]

It looks like you have some 'adware' that may have been bundled with other programs that you downloaded.


Please download AdwCleaner by Xplode and save to your Desktop.

• Double click on AdwCleaner.exe to run the tool.
  Vista/Windows 7/8 users right-click and select Run As Administrator.
• Click on the Scan button.
• AdwCleaner will begin...be patient as the scan may take some time to complete.
• After the scan has finished, click on the Report button...a logfile (AdwCleaner[R#].txt) will open in Notepad for review (where the largest value of # represents the most recent report).
• The contents of the log file may be confusing. Unless you see a program name that you know should not be removed, don't worry about it. If you see an entry you want to keep, let me know about it.
• Copy and paste the contents of that logfile in your next reply.
• A copy of all logfiles are saved in the C:\AdwCleaner folder which was created when running the tool.

I will need to look at this AdwCleaner .txt before advising you with what to do next.