registry problem

[jutah]

Hi all,

When I booted up and started IE a weird start page came up . So I went to the registry searched for all the occurances of the bad pages url and replaced it with the one I wanted. The problem is when I reboot the regisrty is reset . Iam assumming that something is being ran at bootup that resets the registry? Is there anyway to find out what is being executed at boot time so I can find and delete the bad file? If not can I make a file that resets the reg the way I want it (since I know the keys that are being effected) and then when the PC reboots it will run my file last and overwrite the bad one?

Thanks,

Jutah

[howste]

Sounds to me like something a virus would do. Have you checked your system with updated antivirus software?

[meese]

What operating system do you have?

[jutah]

Yep does not seem like it is a virus, but I have heard of some viruses doing something similar. I think one is called JS something?

Thanks,

Jutah

[jutah]

Win 98

[howste]

I removed a virus from someones computer once that did this. When the PC booted, it would run a file that would modify the registry. AV software didn't do a good job removing it, so I had to find the file and delete it, then remove the registry entries. I think it was calling the file from RUN or RUNONCE.

[jutah]

Thanks I'll look for those files.

jutah

[meese]

If you press Ctrl+Alt+Del, you can see what Tasks are running on your pc. See if there is anything out of the ordinary.

[howste]

Virus writers can make programs that will not show in the Task list though. Since you are running Win98 you can go to Start => Run, type MSCONFIG and enter. This will bring up a System Configuration window. Click on the Startup tab and it will show you a list of things that load at startup. You can disable any that you don't think should be there, then reboot. If the problem goes away, you found the right one.

[Taz]

something like spybot or ad-aware should handle this problem.