MSCONFIG and those weird entries

[lamier]

Okay, I'm a techie with a call center and I was WONDERING what in the world "run=" and "load=" is in MSCONFIG. I've seen it on numerous computers (normally one or two entries) and once I've see it listed over 20 times on one computer. Anyone got any ideas?

[Paleo Pete]

I think that's usually in win.ini, it's telling windows to load a program in memory as a TSR or run it on start up.

Usually both are empty, but sometimes programs are located there. Sometimes this is also a trojan, that's one of the tricks to seeing if you have one. The name in the run= or load= line is a tip off.

One of the most common renames explorer to explore and that loads the trojan.

------------------
Eagles may soar, but weasels don't get sucked into jet engines!
Note: Please post your questions on the forums, not in my email.

Computer Information Links (http://www.geocities.com/paleopete/)