If this is your first visit, be sure to check out the FAQ by clicking the link above. You may have to register before you can post: click the register link above to proceed. To start viewing messages, select the forum that you want to visit from the selection below. |
|
|
Thread Tools | Display Modes |
#1
|
|||
|
|||
What is "New value #1"
Hi, I`ve just noticed this new entry in msconfig startup tab "New value #1"
which was checked, I`ve unchecked it and it appears to make no difference to the running of the machine. Just wondering where it came from and what it is, i`ve not installed anything new that i`m aware of. Any ideas as to what this is. I`ve ran AVG, spybot and adware which show nothing. Thanks Kim -- I`m not a complete idiot, there`s still a few bits missing |
#2
|
|||
|
|||
What is "New value #1"
kimbo_ wrote:
Hi, I`ve just noticed this new entry in msconfig startup tab "New value #1" which was checked, I`ve unchecked it and it appears to make no difference to the running of the machine. Just wondering where it came from and what it is, i`ve not installed anything new that i`m aware of. Any ideas as to what this is. I`ve ran AVG, spybot and adware which show nothing. Thanks Kim testing sorry I am not sure what it is -- Dan W. Computer User |
#3
|
|||
|
|||
What is "New value #1"
Please go to StartRun. Type in MSINFO32 and then press Enter. This will
launch System Information. Expand the Software section, then click on "Startup Items". In the right-hand pane you will see the same basic info as you see in the MSCONFIG Startup tab. The big difference is that MSINFO32 will tell you *where* each item is loading from -- Startup Group, Machine Run, Per-User Run, etc. Tell us where "New value #1" is loading from. It will be one of three places: Per-User Run, Machine Run, or Machine RunServices (I think that last one is right, but I'm not sure that's precisely the label that MSINFO32 uses.) The reason I'm sure that it's loading from the Registry is that whenever you create a new Value in the Registry, "New Value" is what it's named, with the additional number added to differentiate it from other New Values that might exist in that Key. You also don't say what the Command is that "New Value #1" runs. "New Value #1" is only a meaningless name, not anything useful to us here. If you or someone else has been into your Registry, then I would say that it's possible that this New Value was created by accident, especially if there is no command included. If that's not a reasonable possibility, then I'd say it's almost certainly malware in action. What's important is the command line, so we can investigate what is installed that the command is running, and knowing where it's loaded from is necessary so that we can instruct you on permanent removal from the Startup queue, whether or not it's actually doing anything. You only want things in that list that are actually doing something that you want to happen. -- Gary S. Terhune MS-MVP Shell/User "kimbo_" wrote in message ... Hi, I`ve just noticed this new entry in msconfig startup tab "New value #1" which was checked, I`ve unchecked it and it appears to make no difference to the running of the machine. Just wondering where it came from and what it is, i`ve not installed anything new that i`m aware of. Any ideas as to what this is. I`ve ran AVG, spybot and adware which show nothing. Thanks Kim -- I`m not a complete idiot, there`s still a few bits missing |
#4
|
|||
|
|||
What is "New value #1"
Thanks Gary, in msinfo32 under the name column it says "new value #1" then
under the loaded from column it`s "Registry[machine Run]" and nothing under the Command column. I haven`t been into the registry and i`m the only user. On reflection last week some time limewire said there was an update which I allowed it to do, perhaps this is where it came from. Thanks Kim -- I`m not a complete idiot, there`s still a few bits missing "Gary S. Terhune" wrote in message ... Please go to StartRun. Type in MSINFO32 and then press Enter. This will launch System Information. Expand the Software section, then click on "Startup Items". In the right-hand pane you will see the same basic info as you see in the MSCONFIG Startup tab. The big difference is that MSINFO32 will tell you *where* each item is loading from -- Startup Group, Machine Run, Per-User Run, etc. Tell us where "New value #1" is loading from. It will be one of three places: Per-User Run, Machine Run, or Machine RunServices (I think that last one is right, but I'm not sure that's precisely the label that MSINFO32 uses.) The reason I'm sure that it's loading from the Registry is that whenever you create a new Value in the Registry, "New Value" is what it's named, with the additional number added to differentiate it from other New Values that might exist in that Key. You also don't say what the Command is that "New Value #1" runs. "New Value #1" is only a meaningless name, not anything useful to us here. If you or someone else has been into your Registry, then I would say that it's possible that this New Value was created by accident, especially if there is no command included. If that's not a reasonable possibility, then I'd say it's almost certainly malware in action. What's important is the command line, so we can investigate what is installed that the command is running, and knowing where it's loaded from is necessary so that we can instruct you on permanent removal from the Startup queue, whether or not it's actually doing anything. You only want things in that list that are actually doing something that you want to happen. -- Gary S. Terhune MS-MVP Shell/User "kimbo_" wrote in message ... Hi, I`ve just noticed this new entry in msconfig startup tab "New value #1" which was checked, I`ve unchecked it and it appears to make no difference to the running of the machine. Just wondering where it came from and what it is, i`ve not installed anything new that i`m aware of. Any ideas as to what this is. I`ve ran AVG, spybot and adware which show nothing. Thanks Kim -- I`m not a complete idiot, there`s still a few bits missing |
#5
|
|||
|
|||
What is "New value #1"
Interesting. If nobody's been into the Registry, then it's likely the result
of a hastily written script that didn't get prrof-read as well as it should have been. While it's harmless, I'd want to stop and do several formal malware scans of your system, just to be sure. Then go into the Registry and remove that New Value from the HKLM...\Run key. (Or from the "Run-" key if it's currently disabled.) If you really, really don't want to go into the Registry, you can use the following method. 1. In MSCONFIG, make sure everything on the Startup tab is enabled *except* the New Value item. Any HKLM....\Run item that is left disabled will be removed entirely. Click OK but do not restart. 2. Save the attached text file to your Desktop, rename it to change the TXT extension to REG, right-click it and select Merge. -- Gary S. Terhune MS-MVP Shell/User http://grystmill.com/articles/cleanboot.htm http://grystmill.com/articles/security.htm "kimbo_" wrote in message ... Thanks Gary, in msinfo32 under the name column it says "new value #1" then under the loaded from column it`s "Registry[machine Run]" and nothing under the Command column. I haven`t been into the registry and i`m the only user. On reflection last week some time limewire said there was an update which I allowed it to do, perhaps this is where it came from. Thanks Kim -- I`m not a complete idiot, there`s still a few bits missing "Gary S. Terhune" wrote in message ... Please go to StartRun. Type in MSINFO32 and then press Enter. This will launch System Information. Expand the Software section, then click on "Startup Items". In the right-hand pane you will see the same basic info as you see in the MSCONFIG Startup tab. The big difference is that MSINFO32 will tell you *where* each item is loading from -- Startup Group, Machine Run, Per-User Run, etc. Tell us where "New value #1" is loading from. It will be one of three places: Per-User Run, Machine Run, or Machine RunServices (I think that last one is right, but I'm not sure that's precisely the label that MSINFO32 uses.) The reason I'm sure that it's loading from the Registry is that whenever you create a new Value in the Registry, "New Value" is what it's named, with the additional number added to differentiate it from other New Values that might exist in that Key. You also don't say what the Command is that "New Value #1" runs. "New Value #1" is only a meaningless name, not anything useful to us here. If you or someone else has been into your Registry, then I would say that it's possible that this New Value was created by accident, especially if there is no command included. If that's not a reasonable possibility, then I'd say it's almost certainly malware in action. What's important is the command line, so we can investigate what is installed that the command is running, and knowing where it's loaded from is necessary so that we can instruct you on permanent removal from the Startup queue, whether or not it's actually doing anything. You only want things in that list that are actually doing something that you want to happen. -- Gary S. Terhune MS-MVP Shell/User "kimbo_" wrote in message ... Hi, I`ve just noticed this new entry in msconfig startup tab "New value #1" which was checked, I`ve unchecked it and it appears to make no difference to the running of the machine. Just wondering where it came from and what it is, i`ve not installed anything new that i`m aware of. Any ideas as to what this is. I`ve ran AVG, spybot and adware which show nothing. Thanks Kim -- I`m not a complete idiot, there`s still a few bits missing |
#6
|
|||
|
|||
What is "New value #1"
That doesn't look well in Notepad. It should look like...
......Quote.......... REGEDIT4 [-HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\Curr entVersion\Run-] [END] ......EOQ............ I've fixed & attached it to this post. REMEMBER to do what Terhune said in MSConfig before merging it. Or do it manually as follows... (1) Copy all between the dotted lines to a Notepad file. (2) Name it "HKLM...Del_Run-.REG". (3) Click the .REG file to delete that key, AFTER you have done what Terhune said in MSConfig; otherwise, you lose every item unchecked that is "Machine Run". In case it's wrapped, the line between the [brackets] is ONE line with NO space. It has a minus sign (-) at front & back. The minus sign at front is an instruction to delete that Registry key & all it's contents. The empty key itself will return at some point. By default, when a ".reg" is clicked, it will Merge into the Registry. To alter the default behavior... (a) "START button, Settings, Folder Options, File Types tab". (b) Scroll to & click (highlight) "Registration Entries". (c) Click the "Edit" button. (d) Select (highlight) "Edit" in the window. (e) Click the "Set Default" button. Now, when you click a ".reg" file, it will open in Notepad for examination. To merge it into the Registry, R-Clk it & select "Merge". But yours (Terhune's) looks to me like... .....Quote........ ÿþR E G E D I T 4 ....snip blank lines... [ - H K E Y _ L O C A L _ M A C H I N E \ S O F T W A R E \ M i c r o s o f t \ W i n d o w s \ C u r r e n t V e r s i o n \ R u n - ] ....snip blank lines... ......EOQ........... -- Thanks or Good Luck, There may be humor in this post, and, Naturally, you will not sue, should things get worse after this, PCR "Gary S. Terhune" wrote in message ... | Interesting. If nobody's been into the Registry, then it's likely the result | of a hastily written script that didn't get prrof-read as well as it should | have been. While it's harmless, I'd want to stop and do several formal | malware scans of your system, just to be sure. Then go into the Registry and | remove that New Value from the HKLM...\Run key. (Or from the "Run-" key if | it's currently disabled.) | | If you really, really don't want to go into the Registry, you can use the | following method. | | 1. In MSCONFIG, make sure everything on the Startup tab is enabled *except* | the New Value item. Any HKLM....\Run item that is left disabled will be | removed entirely. Click OK but do not restart. | | 2. Save the attached text file to your Desktop, rename it to change the TXT | extension to REG, right-click it and select Merge. | | -- | | Gary S. Terhune | MS-MVP Shell/User | http://grystmill.com/articles/cleanboot.htm | http://grystmill.com/articles/security.htm | | "kimbo_" wrote in message | ... | Thanks Gary, in msinfo32 under the name column it says "new value #1" then | under the loaded from column it`s "Registry[machine Run]" and nothing | under | the Command column. | I haven`t been into the registry and i`m the only user. | On reflection last week some time limewire said there was an update which | I | allowed it to do, perhaps this is where it came from. | Thanks | Kim | | -- | I`m not a complete idiot, there`s still a few bits missing | "Gary S. Terhune" wrote in message | ... | Please go to StartRun. Type in MSINFO32 and then press Enter. This | will | launch System Information. Expand the Software section, then click on | "Startup Items". In the right-hand pane you will see the same basic info | as | you see in the MSCONFIG Startup tab. The big difference is that MSINFO32 | will tell you *where* each item is loading from -- Startup Group, Machine | Run, Per-User Run, etc. Tell us where "New value #1" is loading from. It | will be one of three places: Per-User Run, Machine Run, or Machine | RunServices (I think that last one is right, but I'm not sure that's | precisely the label that MSINFO32 uses.) | | The reason I'm sure that it's loading from the Registry is that whenever | you | create a new Value in the Registry, "New Value" is what it's named, with | the | additional number added to differentiate it from other New Values that | might | exist in that Key. | | You also don't say what the Command is that "New Value #1" runs. "New | Value | #1" is only a meaningless name, not anything useful to us here. If you or | someone else has been into your Registry, then I would say that it's | possible that this New Value was created by accident, especially if there | is | no command included. If that's not a reasonable possibility, then I'd say | it's almost certainly malware in action. What's important is the command | line, so we can investigate what is installed that the command is | running, | and knowing where it's loaded from is necessary so that we can instruct | you | on permanent removal from the Startup queue, whether or not it's actually | doing anything. You only want things in that list that are actually doing | something that you want to happen. | | -- | | Gary S. Terhune | MS-MVP Shell/User | | "kimbo_" wrote in message | ... | Hi, I`ve just noticed this new entry in msconfig startup tab "New value | #1" | which was checked, I`ve unchecked it and it appears to make no | difference | to | the running of the machine. Just wondering where it came from and what | it | is, i`ve not installed anything new that i`m aware of. Any ideas as to | what | this is. I`ve ran AVG, spybot and adware which show nothing. | Thanks | Kim | | -- | I`m not a complete idiot, there`s still a few bits missing | | | | | | | | | | |
#7
|
|||
|
|||
What is "New value #1"
Thank you! Don't know what went wrong. I'll have to investigate.
Though I didn't use the [End] method. Just the extra carriage return. -- Gary S. Terhune MS MVP Shell/User "PCR" wrote in message ... That doesn't look well in Notepad. It should look like... .....Quote.......... REGEDIT4 [-HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\Curr entVersion\Run-] [END] .....EOQ............ I've fixed & attached it to this post. REMEMBER to do what Terhune said in MSConfig before merging it. Or do it manually as follows... (1) Copy all between the dotted lines to a Notepad file. (2) Name it "HKLM...Del_Run-.REG". (3) Click the .REG file to delete that key, AFTER you have done what Terhune said in MSConfig; otherwise, you lose every item unchecked that is "Machine Run". In case it's wrapped, the line between the [brackets] is ONE line with NO space. It has a minus sign (-) at front & back. The minus sign at front is an instruction to delete that Registry key & all it's contents. The empty key itself will return at some point. By default, when a ".reg" is clicked, it will Merge into the Registry. To alter the default behavior... (a) "START button, Settings, Folder Options, File Types tab". (b) Scroll to & click (highlight) "Registration Entries". (c) Click the "Edit" button. (d) Select (highlight) "Edit" in the window. (e) Click the "Set Default" button. Now, when you click a ".reg" file, it will open in Notepad for examination. To merge it into the Registry, R-Clk it & select "Merge". But yours (Terhune's) looks to me like... ....Quote........ ÿþR E G E D I T 4 ...snip blank lines... [ - H K E Y _ L O C A L _ M A C H I N E \ S O F T W A R E \ M i c r o s o f t \ W i n d o w s \ C u r r e n t V e r s i o n \ R u n - ] ...snip blank lines... .....EOQ........... -- Thanks or Good Luck, There may be humor in this post, and, Naturally, you will not sue, should things get worse after this, PCR "Gary S. Terhune" wrote in message ... | Interesting. If nobody's been into the Registry, then it's likely the result | of a hastily written script that didn't get prrof-read as well as it should | have been. While it's harmless, I'd want to stop and do several formal | malware scans of your system, just to be sure. Then go into the Registry and | remove that New Value from the HKLM...\Run key. (Or from the "Run-" key if | it's currently disabled.) | | If you really, really don't want to go into the Registry, you can use the | following method. | | 1. In MSCONFIG, make sure everything on the Startup tab is enabled *except* | the New Value item. Any HKLM....\Run item that is left disabled will be | removed entirely. Click OK but do not restart. | | 2. Save the attached text file to your Desktop, rename it to change the TXT | extension to REG, right-click it and select Merge. | | -- | | Gary S. Terhune | MS-MVP Shell/User | http://grystmill.com/articles/cleanboot.htm | http://grystmill.com/articles/security.htm | | "kimbo_" wrote in message | ... | Thanks Gary, in msinfo32 under the name column it says "new value #1" then | under the loaded from column it`s "Registry[machine Run]" and nothing | under | the Command column. | I haven`t been into the registry and i`m the only user. | On reflection last week some time limewire said there was an update which | I | allowed it to do, perhaps this is where it came from. | Thanks | Kim | | -- | I`m not a complete idiot, there`s still a few bits missing | "Gary S. Terhune" wrote in message | ... | Please go to StartRun. Type in MSINFO32 and then press Enter. This | will | launch System Information. Expand the Software section, then click on | "Startup Items". In the right-hand pane you will see the same basic info | as | you see in the MSCONFIG Startup tab. The big difference is that MSINFO32 | will tell you *where* each item is loading from -- Startup Group, Machine | Run, Per-User Run, etc. Tell us where "New value #1" is loading from. It | will be one of three places: Per-User Run, Machine Run, or Machine | RunServices (I think that last one is right, but I'm not sure that's | precisely the label that MSINFO32 uses.) | | The reason I'm sure that it's loading from the Registry is that whenever | you | create a new Value in the Registry, "New Value" is what it's named, with | the | additional number added to differentiate it from other New Values that | might | exist in that Key. | | You also don't say what the Command is that "New Value #1" runs. "New | Value | #1" is only a meaningless name, not anything useful to us here. If you or | someone else has been into your Registry, then I would say that it's | possible that this New Value was created by accident, especially if there | is | no command included. If that's not a reasonable possibility, then I'd say | it's almost certainly malware in action. What's important is the command | line, so we can investigate what is installed that the command is | running, | and knowing where it's loaded from is necessary so that we can instruct | you | on permanent removal from the Startup queue, whether or not it's actually | doing anything. You only want things in that list that are actually doing | something that you want to happen. | | -- | | Gary S. Terhune | MS-MVP Shell/User | | "kimbo_" wrote in message | ... | Hi, I`ve just noticed this new entry in msconfig startup tab "New value | #1" | which was checked, I`ve unchecked it and it appears to make no | difference | to | the running of the machine. Just wondering where it came from and what | it | is, i`ve not installed anything new that i`m aware of. Any ideas as to | what | this is. I`ve ran AVG, spybot and adware which show nothing. | Thanks | Kim | | -- | I`m not a complete idiot, there`s still a few bits missing | | | | | | | | | | |
#8
|
|||
|
|||
What is "New value #1"
kimbo_ wrote:
Thanks Gary, in msinfo32 under the name column it says "new value #1" then under the loaded from column it`s "Registry[machine Run]" and nothing under the Command column. I haven`t been into the registry and i`m the only user. On reflection last week some time limewire said there was an update which I allowed it to do, perhaps this is where it came from. Thanks Kim Please Kim, if you do enter the registry then make certain that it is at first backed up. Any changes may render your computer not bootable or at least not easily bootable. -- Dan W. Computer User |
#9
|
|||
|
|||
What is "New value #1"
Thanks for your guidence, I removed the value from the run- key after
backing up the registry and all`s well. cheers Kim -- I`m not a complete idiot, there`s still a few bits missing "Dan W." wrote in message ... kimbo_ wrote: Thanks Gary, in msinfo32 under the name column it says "new value #1" then under the loaded from column it`s "Registry[machine Run]" and nothing under the Command column. I haven`t been into the registry and i`m the only user. On reflection last week some time limewire said there was an update which I allowed it to do, perhaps this is where it came from. Thanks Kim Please Kim, if you do enter the registry then make certain that it is at first backed up. Any changes may render your computer not bootable or at least not easily bootable. -- Dan W. Computer User |
#10
|
|||
|
|||
What is "New value #1"
kimbo_ wrote:
Thanks for your guidence, I removed the value from the run- key after backing up the registry and all`s well. cheers Kim Success is great for the soul, spirit and body but don't let it go to your head. grin -- Dan W. Computer User |
Thread Tools | |
Display Modes | |
|
|
Similar Threads | ||||
Thread | Thread Starter | Forum | Replies | Last Post |
"New Folder" | Roger Fink | General | 6 | August 15th 06 07:10 PM |