Register a free account to unlock additional features at BleepingComputer.com
Welcome to BleepingComputer, a free community where people like yourself come together to discuss and learn how to use their computers. Using the site is easy and fun. As a guest, you can browse and view the various discussions in the forums, but can not create a new topic or reply to an existing one unless you are logged in. Other benefits of registering an account are subscribing to topics and forums, creating a blog, and having no ads shown anywhere on the site.


Click here to Register a free account now! or read our Welcome Guide to learn how to use this site.

Generic User Avatar

How To Submit A Startup Entry


  • This topic is locked This topic is locked
7 replies to this topic

#1 Grinler

Grinler

    Lawrence Abrams


  •  Avatar image
  • Admin
  • 45,110 posts
  • ONLINE
  •  
  • Gender:Male
  • Location:USA
  • Local time:11:29 PM

Posted 03 November 2005 - 11:27 AM

If you have information about a new Windows startup entry please create a new topic in this forum and follow this format when submitting them:

Filename:
Registry Value Name:
Command:
File Location:
Description:
Status:

The status should can have five different values:

? - Unsure as to whether it needs to run or not, but not malware.

N - Not necessary to run as it can be started as needed.

U - Its up to the user. Its not necessary to run for the computer to work, but may be important enough to have running for some users.

Y - Yes, this program is necessary to run in order for the computer or a program to operate correctly.

X - This is considered malware or undesirable to have on the machine as it can cause problems.


To find this information I will give an example using Hijackthis

This is an example of submitting info about a startup entry from a line in a HijackThis log. The particular entry corresponds to a program that is part of the AVG antivirus software.

O4 - HKLM\..\Run: [AVG7_CC] C:\PROGRAM FILES\Grisoft\AVGFREE\avgcc.exe /STARTUP


You would submit the following:

Filename: avgcc.exe
Registry Value Name: AVG7_CC [This is the name between the brackets ([])]
Command: C:\PROGRAM FILES\Grisoft\AVGFREE\avgcc.exe /STARTUP [Text after the value name]
File Location: c:\program files\grisoft\avg free\
Description: Whatever you know about it or can glean from autoruns.
Status: One of the status flags from above.

When submitting new entries, please make sure the entry does not already exist in the startup database in order to save us all time.

BC AdBot (Login to Remove)

 


#2 pcnutz

pcnutz

  •  Avatar image
  • Members
  • 3 posts
  • OFFLINE
  •  
  • Location:none
  • Local time:10:29 PM

Posted 16 February 2006 - 02:51 AM

Another excellent tutorial, but my brain is missing a link or two here. :thumbsup:
When you say: "When submitting new entries, please make sure the entry does not already exist in the startup database in order to save us all time." am I looking for an actual page that lists the entries that already exist for me to check against? or, are you referring to the posts under Forum Topics, where people have submitted their individual inquiries? The only other list I coul find was the Top Entries on the opening Tutorial Page?
It's quarter of three in the morning, so this may explain my confusion. I'll quit now :flowers:

#3 Leurgy

Leurgy

    Voted most likely


  •  Avatar image
  • Members
  • 3,831 posts
  • OFFLINE
  •  
  • Gender:Male
  • Location:Collingwood, Ontario, Canada
  • Local time:10:29 PM

Posted 16 February 2006 - 09:19 AM

Hello pcnutz and welcome to BC.

When submitting new entries, please make sure the entry does not already exist in the startup database in order to save us all time


At the top of the page click on Startup Programs, and in the page that comes up you will see a search box. Search the entry you want to submit, for instance, avgcc.exe. If you get a hit you can click on either the Name or Filename for more info. Sometimes you will find a link in the Description that will give even more details.

When the only tool you own is a hammer, every problem begins to resemble a nail. Abraham Maslo

**** We use our powers for good, not evil ****

 Trying to remove your data from the web is like trying to remove pee from a swimming pool


#4 Grinler

Grinler

    Lawrence Abrams

  • Topic Starter

  •  Avatar image
  • Admin
  • 45,110 posts
  • ONLINE
  •  
  • Gender:Male
  • Location:USA
  • Local time:11:29 PM

Posted 16 February 2006 - 10:41 AM

To answer your question even more....

There are many times that when you do a search you will see a filename come up in the database that matches your entry, but does not match exactly how you see it on your computer. Those should be submitted as well as they may be a piece of malware disguised as a valid program.

So even if there is a entry in the startup database that matches what you are looking for, you all the information provided in the database to make sure that it matches what you are seeing on your PC.

#5 Tonio

Tonio

  •  Avatar image
  • Members
  • 1 posts
  • OFFLINE
  •  
  • Local time:03:29 AM

Posted 04 November 2006 - 11:39 AM

Brand new, as you can see...

How/where does one submit an entry for the uninstall database? I haven't been able to locate anything on the site that addresses this. Thanks.

#6 Grinler

Grinler

    Lawrence Abrams

  • Topic Starter

  •  Avatar image
  • Admin
  • 45,110 posts
  • ONLINE
  •  
  • Gender:Male
  • Location:USA
  • Local time:11:29 PM

Posted 04 November 2006 - 07:38 PM

Just add it to this forum as a new topic for now and I will add it in.

#7 CuStOmCoMpUtErWoRkS

CuStOmCoMpUtErWoRkS

  •  Avatar image
  • Members
  • 4 posts
  • OFFLINE
  •  
  • Local time:10:29 PM

Posted 03 March 2007 - 11:35 AM

cjylylfo in start up is the BackDoor.Iterator and seems to be involved with Drivercleaner somehow. Moderators please move this where you think it belongs so I know where to put these things - thanks

Edited by CuStOmCoMpUtErWoRkS, 03 March 2007 - 11:36 AM.


#8 Grinler

Grinler

    Lawrence Abrams

  • Topic Starter

  •  Avatar image
  • Admin
  • 45,110 posts
  • ONLINE
  •  
  • Gender:Male
  • Location:USA
  • Local time:11:29 PM

Posted 03 March 2007 - 05:39 PM

Please create new topics when submitting startups. cjylylfo appears to be a random named file.




1 user(s) are reading this topic

0 members, 1 guests, 0 anonymous users