need help with REGEDIT

Re REGEDIT --

Under HKLM\software\microsoft\windows\currentversion\ there is a "run" and
also a "run-" -- what is the significance of the "run-"?

I am in the middle of trying to get rid of a problem on another Win 98 SW
machine, and I see the problem file is also in "run-" -- do I delete it
there also?


Jack

Run- contains programs which were running at startup but removed using
msconfig.exe, startup tab

--
Regards

Ron Badour, MS MVP Windows 98
Tips: http://home.satx.rr.com/badour
Knowledge Base Info:
http://support.microsoft.com/default.aspx?pr=kbinfo

"Jack" wrote in message
...
Re REGEDIT --

Under HKLM\software\microsoft\windows\currentversion\ there is a "run" and
also a "run-" -- what is the significance of the "run-"?

I am in the middle of trying to get rid of a problem on another Win 98 SW
machine, and I see the problem file is also in "run-" -- do I delete it
there also?


Jack

The run- key is what you presently have disabled. If you used msconfig, =
re-checking the line to enable it will remove it from the run- key.

--=20

Brian A.

Conflicts start where information lacks.
http://www.dts-l.org/goodpost.htm


"Jack" wrote in message =
...
Re REGEDIT --
=20
Under HKLM\software\microsoft\windows\currentversion\ there is a "run" =
and
also a "run-" -- what is the significance of the "run-"?
=20
I am in the middle of trying to get rid of a problem on another Win 98 =
SW
machine, and I see the problem file is also in "run-" -- do I delete =
it
there also?
=20
=20
Jack
=20

Well, I deleted it out of Run; therefore can I also delete it from Run-
without problem?

Jack



"Brian A." gonefish'n@afarawaylake wrote in message
...
The run- key is what you presently have disabled. If you used msconfig,
re-checking the line to enable it will remove it from the run- key.

--

Brian A.

Conflicts start where information lacks.
http://www.dts-l.org/goodpost.htm


"Jack" wrote in message
...
Re REGEDIT --

Under HKLM\software\microsoft\windows\currentversion\ there is a "run" and
also a "run-" -- what is the significance of the "run-"?

I am in the middle of trying to get rid of a problem on another Win 98 SW
machine, and I see the problem file is also in "run-" -- do I delete it
there also?


Jack

"Jack" wrote in message
Well, I deleted it out of Run; therefore can I also delete it from =
Run-
without problem?

I can/will not recommend on what I don't have a clue of in what you are =
doing or attempting to accomplish. I never suggested you delete anything =
from within any registry key/hive, and if I had I most defintely would =
have recommended you backup the registry key/hive. If you have what you =
believe to be a rogue file/app that loads on boot, you need to deal with =
the app by uninstalling it or disabling it from within the programs =
options to not start on boot. Haphazardly deleting any registry keys can =
very quickly place the machine on the " I wish I hadn't done that" list =
as now it won't boot at all.

Perhaps if you explained in detail on what the problem is, at what =
moment it appeared and any error messages you recieve, others can help =
resolve it.

If you want to stop programs from loading on boot there are several =
ways to accomplish it:=20
You should only use msconfig for troubleshooting problems, although it =
could be used for stubborn programs until you find a way to disable them =
otherwise.=20
Click Start Run, type in: msconfig and hit enter.
Click on the Startup tab and uncheck the program you wish to disable.
If the program adds a new second entry on reboot, then there is =
probably a way in the programs options that will disable it.

Right click on the programs icon in the systray to see if there is an =
option to disable it from loading on boot.

Open the program/s in question and check their options to see if they =
have one to disable it from loading on boot.

Remove any entries from the Startup folder that you do not want to load =
on boot.

Uninstall the program you don't want loading if out of other options.

Look in Start Run, type in: sysedit and hit enter.
Click on the win.ini window and see if there is anything after load=3D =
or run=3D, these lines are usually blank after the =3D. Remove anything =
after the =3D on those lines if you do not want it running.

Look in the Registry under these keys:
Start Run, type in: regedit and hit enter. Navigate to the following =
keys:=20
hkey_current_user\software\microsoft\windows\curre nt version\run=20
hkey_current_user\software\microsoft\windows\curre nt version\RunOnce=20
hkey_local_machine\software\microsoft\windows\curr ent version\run=20
hkey_local_machine\software\microsoft\windows\curr ent version\RunOnce=20
hkey_local_machine\software\microsoft\windows\curr ent version\RunOnceEx=20
hkey_local_machine\software\microsoft\windows\curr ent =
version\RunServices=20
hkey_local_machine\software\microsoft\windows\curr ent =
version\RunServicesOnce=20

Remove or REM the entries from within these keys in the right pane. =
Always backup the registry before making any changes so that you may =
import the keys back in should anything go wrong. Haphazardly removing =
keys in the registry is very dangerous and can render your system =
useless. Be 100% sure of what you are doing and what you remove can be =
safely done.

You can Backup the registry key/s while in regedit: Click on Registry =
on the menu bar while in the registry, click on "Export Registry File.". =
Choose a location, I recommend saving it to the desktop and it makes it =
easy to find. Place a check next to "Selected Branch" and give the file =
a memorable name, select save, make your changes and close out. If you =
have no problems after say 2 weeks, you can delete the exported files.
If you have problems, double click the reg file on the desktop to =
import/merge it back into the registry.

Do Not back up the entire registry in the registry editor. Importing it =
back while in windows can be harmful to the machine. A registry backup =
is created each new calendar day a machine is booted.
If you wish to perform a new backup of the registry after the machine =
has been booted, got to Start Run, type in: scanregw and hit enter. =
You will be prompted that a registry has already been backed up for the =
day and do you wish to create a new one, click yes.

More on Backing up/restoring the registry:
How to Back Up the Registry in Windows 98 and Windows Millennium Edition
http://support.microsoft.com/default...b;en-us;256419

HOW TO: Backup, Edit, and Restore the Registry in Windows 95, Windows =
98, and Windows Me
http://support.microsoft.com/default...b;en-us;322754

How to Manually Restore the Windows 98/Me Registry
http://support.microsoft.com/default...b;en-us;221512


--=20

Brian A.

Conflicts start where information lacks.
http://www.dts-l.org/goodpost.htm

OK thanks --

The subject PC had so much going wrong with it that it would have been
impossible to address it all here. I've killed dozens of viruses, and a
hundred spywares. Apparently the viruses are all dead, but there is
spyware/adware that remains persistent. At this point it is a matter of
"playing by ear" as to whether to save the HD or reformat. I'd rather not
have to reformat, but that is an alternative that is "looming on the
horizon."

Jack




"Brian A." gonefish'n@afarawaylake wrote in message
...
"Jack" wrote in message
Well, I deleted it out of Run; therefore can I also delete it from Run-
without problem?

I can/will not recommend on what I don't have a clue of in what you are
doing or attempting to accomplish. I never suggested you delete anything
from within any registry key/hive, and if I had I most defintely would have
recommended you backup the registry key/hive. If you have what you believe
to be a rogue file/app that loads on boot, you need to deal with the app by
uninstalling it or disabling it from within the programs options to not
start on boot. Haphazardly deleting any registry keys can very quickly place
the machine on the " I wish I hadn't done that" list as now it won't boot at
all.

Perhaps if you explained in detail on what the problem is, at what moment
it appeared and any error messages you recieve, others can help resolve it.

If you want to stop programs from loading on boot there are several ways to
accomplish it:
You should only use msconfig for troubleshooting problems, although it
could be used for stubborn programs until you find a way to disable them
otherwise.
Click Start Run, type in: msconfig and hit enter.
Click on the Startup tab and uncheck the program you wish to disable.
If the program adds a new second entry on reboot, then there is probably a
way in the programs options that will disable it.

Right click on the programs icon in the systray to see if there is an option
to disable it from loading on boot.

Open the program/s in question and check their options to see if they have
one to disable it from loading on boot.

Remove any entries from the Startup folder that you do not want to load on
boot.

Uninstall the program you don't want loading if out of other options.

Look in Start Run, type in: sysedit and hit enter.
Click on the win.ini window and see if there is anything after load= or
run=, these lines are usually blank after the =. Remove anything after the =
on those lines if you do not want it running.

Look in the Registry under these keys:
Start Run, type in: regedit and hit enter. Navigate to the following keys:
hkey_current_user\software\microsoft\windows\curre nt version\run
hkey_current_user\software\microsoft\windows\curre nt version\RunOnce
hkey_local_machine\software\microsoft\windows\curr ent version\run
hkey_local_machine\software\microsoft\windows\curr ent version\RunOnce
hkey_local_machine\software\microsoft\windows\curr ent version\RunOnceEx
hkey_local_machine\software\microsoft\windows\curr ent version\RunServices
hkey_local_machine\software\microsoft\windows\curr ent
version\RunServicesOnce

Remove or REM the entries from within these keys in the right pane. Always
backup the registry before making any changes so that you may import the
keys back in should anything go wrong. Haphazardly removing keys in the
registry is very dangerous and can render your system useless. Be 100% sure
of what you are doing and what you remove can be safely done.

You can Backup the registry key/s while in regedit: Click on Registry on
the menu bar while in the registry, click on "Export Registry File.". Choose
a location, I recommend saving it to the desktop and it makes it easy to
find. Place a check next to "Selected Branch" and give the file a memorable
name, select save, make your changes and close out. If you have no problems
after say 2 weeks, you can delete the exported files.
If you have problems, double click the reg file on the desktop to
import/merge it back into the registry.

Do Not back up the entire registry in the registry editor. Importing it
back while in windows can be harmful to the machine. A registry backup is
created each new calendar day a machine is booted.
If you wish to perform a new backup of the registry after the machine has
been booted, got to Start Run, type in: scanregw and hit enter. You will
be prompted that a registry has already been backed up for the day and do
you wish to create a new one, click yes.

More on Backing up/restoring the registry:
How to Back Up the Registry in Windows 98 and Windows Millennium Edition
http://support.microsoft.com/default...b;en-us;256419

HOW TO: Backup, Edit, and Restore the Registry in Windows 95, Windows 98,
and Windows Me
http://support.microsoft.com/default...b;en-us;322754

How to Manually Restore the Windows 98/Me Registry
http://support.microsoft.com/default...b;en-us;221512


--

Brian A.

Conflicts start where information lacks.
http://www.dts-l.org/goodpost.htm

Have you run your detector/removal apps in Safe Mode? Reboot and run =
them again in Safe Mode again? Have you, ah hell, you see where this is =
headed.

Without knowing the apps you are using to detect/remove, this is my =
standard schlameel:

Run a full system AV scan with a DOS based app, I suggest the free =
F-Prot for DOS. Don't forget to download the latest definitions as well =
which IIR are on the same page.
http://www.f-prot.com/products/home_use/dos/

**It is very important to run the update for each program before running =
to be sure you have the latest definitions.** Run the programs in Safe =
Mode after assuring you have shut down all running tasks except explorer =
or systray.
Download/run Stand-Alone version of Cool Web Shredder from:
http://www.intermute.com/products/cwshredder.html

For Info on Cool Web Search:
http://www.richardthelionhearted.com...hronicles.html

Then download/install/run Ad-Aware SE to detect/rid of any other =
parasites/spyware that may be installed. It can be obtained free from:
http://www.lavasoftusa.com/
After installing Ad-Aware, open it and click on the ref update to get =
the latest up-to-date ref file, then run Ad-Aware and delete everything =
it finds.=20

And/or download/install/run:
Spybot - Search & Destroy:
http://security.kolla.de/index.php?l...=3Ddownload=20
Run it at it's default settings until you learn an know more about it. =
Spybot S&D is more of an advanced users tool and changing from the =
default settings can be dangerous to the novice user. Items found in the =
default settings that are RED can usually be safely removed. If you are =
unsure of a found item, do not remove it and ask for help.=20

If you still have problems, download/run HijackThis from:
http://www.richardthelionhearted.com...downloads.html
http://majorgeeks.com/downloads31.html

Do not remove anything with it until you get advice on what to remove, =
HJThis will list many apps that are needed along with the bad ones. =
Removing items listed hap-hazardly without knowing what they are =
can/will create a royal mess. Read the quick start here on how to create =
a log file that can be copied/pasted into a forum that can provide =
assistance on removal of unwanted pests.
http://mjc1.com/mirror/hjt/#quick

Then post the logs to an appropriate forum where they specialize in =
spyware/hijacker removal. Please read any sticky notes for proper =
posting which are most commonly posted first at the top in each specific =
forum. Read any information under each forum category name for =
information on what that particular one is used for, look for the proper =
one that you post logs to.
http://forums.spywareinfo.com/

http://forum.aumha.org/

After running the above and assuring you have a clean machine:
It's also a good idea to have a HOSTS file to block bad sites, scroll to =
HOSTS File Manager he
http://www.mvps.org/PracticallyNerded/Software.htm

Another good app is SpywareBlaster which stops the badboys before they =
even get a chance to install:
http://www.javacoolsoftware.com/spywareblaster.html

=20


--=20

Brian A.

Conflicts start where information lacks.
http://www.dts-l.org/goodpost.htm


"Jack" wrote in message =
...
OK thanks --
=20
The subject PC had so much going wrong with it that it would have been
impossible to address it all here. I've killed dozens of viruses, and =
a
hundred spywares. Apparently the viruses are all dead, but there is
spyware/adware that remains persistent. At this point it is a matter =
of
"playing by ear" as to whether to save the HD or reformat. I'd rather =
not
have to reformat, but that is an alternative that is "looming on the
horizon."
=20
Jack
=20
=20
=20
=20
"Brian A." gonefish'n@afarawaylake wrote in message
...
"Jack" wrote in message
Well, I deleted it out of Run; therefore can I also delete it from =
Run-
without problem?
=20
I can/will not recommend on what I don't have a clue of in what you =
are
doing or attempting to accomplish. I never suggested you delete =
anything
from within any registry key/hive, and if I had I most defintely would =
have
recommended you backup the registry key/hive. If you have what you =
believe
to be a rogue file/app that loads on boot, you need to deal with the =
app by
uninstalling it or disabling it from within the programs options to =
not
start on boot. Haphazardly deleting any registry keys can very quickly =
place
the machine on the " I wish I hadn't done that" list as now it won't =
boot at
all.
=20
Perhaps if you explained in detail on what the problem is, at what =
moment
it appeared and any error messages you recieve, others can help =
resolve it.
=20
If you want to stop programs from loading on boot there are several =
ways to
accomplish it:
You should only use msconfig for troubleshooting problems, although it
could be used for stubborn programs until you find a way to disable =
them
otherwise.
Click Start Run, type in: msconfig and hit enter.
Click on the Startup tab and uncheck the program you wish to disable.
If the program adds a new second entry on reboot, then there is =
probably a
way in the programs options that will disable it.
=20
Right click on the programs icon in the systray to see if there is an =
option
to disable it from loading on boot.
=20
Open the program/s in question and check their options to see if they =
have
one to disable it from loading on boot.
=20
Remove any entries from the Startup folder that you do not want to =
load on
boot.
=20
Uninstall the program you don't want loading if out of other options.
=20
Look in Start Run, type in: sysedit and hit enter.
Click on the win.ini window and see if there is anything after load=3D =
or
run=3D, these lines are usually blank after the =3D. Remove anything =
after the =3D
on those lines if you do not want it running.
=20
Look in the Registry under these keys:
Start Run, type in: regedit and hit enter. Navigate to the following =
keys:
hkey_current_user\software\microsoft\windows\curre nt version\run
hkey_current_user\software\microsoft\windows\curre nt version\RunOnce
hkey_local_machine\software\microsoft\windows\curr ent version\run
hkey_local_machine\software\microsoft\windows\curr ent version\RunOnce
hkey_local_machine\software\microsoft\windows\curr ent =
version\RunOnceEx
hkey_local_machine\software\microsoft\windows\curr ent =
version\RunServices
hkey_local_machine\software\microsoft\windows\curr ent
version\RunServicesOnce
=20
Remove or REM the entries from within these keys in the right pane. =
Always
backup the registry before making any changes so that you may import =
the
keys back in should anything go wrong. Haphazardly removing keys in =
the
registry is very dangerous and can render your system useless. Be 100% =
sure
of what you are doing and what you remove can be safely done.
=20
You can Backup the registry key/s while in regedit: Click on Registry =
on
the menu bar while in the registry, click on "Export Registry File.". =
Choose
a location, I recommend saving it to the desktop and it makes it easy =
to
find. Place a check next to "Selected Branch" and give the file a =
memorable
name, select save, make your changes and close out. If you have no =
problems
after say 2 weeks, you can delete the exported files.
If you have problems, double click the reg file on the desktop to
import/merge it back into the registry.
=20
Do Not back up the entire registry in the registry editor. Importing =
it
back while in windows can be harmful to the machine. A registry backup =
is
created each new calendar day a machine is booted.
If you wish to perform a new backup of the registry after the machine =
has
been booted, got to Start Run, type in: scanregw and hit enter. You =
will
be prompted that a registry has already been backed up for the day and =
do
you wish to create a new one, click yes.
=20
More on Backing up/restoring the registry:
How to Back Up the Registry in Windows 98 and Windows Millennium =
Edition
http://support.microsoft.com/default...b;en-us;256419
=20
HOW TO: Backup, Edit, and Restore the Registry in Windows 95, Windows =
98,
and Windows Me
http://support.microsoft.com/default...b;en-us;322754
=20
How to Manually Restore the Windows 98/Me Registry
http://support.microsoft.com/default...b;en-us;221512
=20
=20
--
=20
Brian A.
=20
Conflicts start where information lacks.
http://www.dts-l.org/goodpost.htm
=20