uninvited guest in msconfig startup

  bert52a 11:29 26 Jun 2009

in msconfig i've noticed a new item which isn't causing any problems yet but looks sinister.It's at the top of the list and yesterday called itself
"ioqaayi".today it seems to have been replaced by"ugiqg".
I thought it might be some kind of virus so I started doing a scan (AVG free) which has been running for about 6 hours now? Strange?
any ideas

windows xp

  DieSse 11:37 26 Jun 2009

Try an (free) online scan with a much better AV program.

click here

Try running Malwarebytes anti malware (free)

click here

AVG is not the best free AV out there - Avira and Avast both do better checks.

  Diemmess 11:38 26 Jun 2009

I agree it looks like something you really don't want.

If your AVG runs in the background like mine, then you are probably wasting time asking it to scan for something it has already allowed past.

If it is a nasty, then perhaps download malwarebytes and run that instead.

  Rahere 12:03 26 Jun 2009

I use cleaner for this but you can use msconfig too - for the latter Start>run type msconfig and select start up untick the program. Start up will tell you where note where the file is located and that it is not associated with any useful programs, note this and Restart.

Assuming windows boots OK, and the suspect file is not loading, navigate to that file - you can try scanning it with AVG and other scanners before you delete it.

  bert52a 12:56 26 Jun 2009

thanks for all your help.
what do you mean when you say you use "cleaner "for this? is it a prog?
Also please could you explain how I can locate it from startup :
Start up will tell you where note where the file is located and that it is not associated with any useful programs, note this and Restart.

it says

"c:\documents and set... HKCU\SOFTWARE\Microsoft\Windows\CurrentVer..."
the drive letter and doc and set part is in lower case -all other items list it with and upper case C -don't know if this suggests anything?

  Rahere 13:07 26 Jun 2009

Sorry, typo - cleaner was meant to be ccleaner.

Startup program controls are in the tools section - access from the left hand side of the ccleaner window.

c:\documents and set...
You gave part of the path to the offending file I think - try widening the columns to view the full path to the file.

is a registry path

  bert52a 13:17 26 Jun 2009

ta- found what you meant,Rahere.
Do you know if this will remove it from the registry as well -it seems not to be visible there
do hidden files exist in Registry

  Rahere 13:24 26 Jun 2009

Cleaner can clean files it identifies as unneded but it will not edit the registry for you - in this case you need regedit Strat>run>regedit

  Rahere 13:36 26 Jun 2009

that's start>run>type regedit

  bert52a 14:06 26 Jun 2009

right will now try to get it sorted!
by the way, when I located it via ccleaner it says
description: necear
Company: anticked- is it some joker ?

  bert52a 14:11 26 Jun 2009

sorry one more thing
Rahere, you said the startup on ccleaner will tell you if
it is not associated with any useful programs.
How do you find out about this association.
And thanks very much for your time - Rahere and others!

This thread is now locked and can not be replied to.

Elsewhere on IDG sites

WPA2 hack: How secure is your Wi-Fi?

Microsoft Surface Book 2 hands-on review – bigger and 5x faster

Best kids apps for iPhone & iPad

Que faire si son iPhone ou iPad est tombé dans de l'eau ?