regedit

Things are being stored under the system registry that I don't want to be there, when you go under regedit; HKEY_Local_machine; software; microsoft; run. When I delete them off computers( everything but the anit-virus) there is no problem.  All of a sudden on some of them, when I restart, they are back.  I do know that something else is putting them back.  How do I find what is putting it there??

Thanx
Joshua
keeno87Asked:
Who is Participating?
 
rindiCommented:
In that case start looking and cleaning your system of malware:

Download and install Spybot S & D (http://www.safer-networking.org/en/index.html)
Let the installer activate the teatimer and update Spybot.
Click on "make registry backup", wait until done and click on next.
Let the scan finish, then select all the found items and select clean.
If the system wasn't able to clean out everything it found, let it reboot. Spybot should startup before you logon, do another scan.
Again select all found items and clean. When finished select "immunize", then close spybot.
 
Download and install Adaware (http://lavasoft.com).
Let the installer do an update, then scan the system.
Select all found items and let them be removed.
A reboot may also be necessary here.
 
If either Spybot or adaware or both still weren't able to remove all malware, reboot your system to safemode and let the tool which couldn't remove a malware do another scan. If it is adaware, change the scan settings to scan within archives, then start a scan.
Again select all found malware and let them be removed.
 
 
 
if you still have malware on your system after that, download the latest version of HijackThis:
 
http://www.hijackthis.de/downloads 
run it and save the log. Paste the log to the following website:
 
http://www.hijackthis.de/en 
 
Click the "analyze" button and you will have an analysis of your log.
Now paste the analyzed log here, so we can help further (provided you don't get enough info from the log and can do it yourself).
 
next make sure your AV Software is uptodate and running. Let the system do a thorough AV scan.
0
 
gjohnson99Commented:
Do you have the system restore turned on? This is most likely what is doing it to you
0
 
originalbiffmalibuCommented:
Do all registry reair in safe mode.  Make sure you are an administrator.  Certain updates to XP as of late seem to have blocked registry editing ability.
0
Cloud Class® Course: C++ 11 Fundamentals

This course will introduce you to C++ 11 and teach you about syntax fundamentals.

 
al-hasanCommented:
What operating system you run? If you have Windows 200x or XP, try the settings in Start | Run | msconfig - they show you more about from where things can get started (f.ex. ini files).

Hope it helps.
has.
0
 
rindiCommented:
Sometimes when you start such a program or tool by hand, it will install itself back into the run folders. You should have a closer look at those programs, sometimes you can turn such behaviour off in the program itself, for instance real player is such an idiot program. turn off all those options in the message center and it should be OK. It'll complain when you do that, but do it.
0
 
keeno87Author Commented:
I did have the system restore off, first thing.  I will try you suggestions.
0
 
keeno87Author Commented:
ok, I tried the msconfig under start and run.  I thought it was going to help because some of the same things were under there. However, it didn't work.  When I restarted, they appeared both back under regedit and msconfig.  Something else is putting them there.
0
 
al-hasanCommented:
LucF: to my weak eyes, it seems the best solution is:
#13818162

Regards,
has.
0
 
originalbiffmalibuCommented:
I responded with available options that I use daily for the same issue and they are proven.  He never made another comment so I guess it would be the administrator/moderator's recommendation for an answer.
0
Question has a verified solution.

Are you are experiencing a similar issue? Get a personalized answer when you ask a related question.

Have a better answer? Share it in a comment.

All Courses

From novice to tech pro — start learning today.