Download TrojanHunter Now
Free 30-day trial!
Latest TrojanHunter Version:
TrojanHunter 5.0
Order Now
License file delivered within minutes.
Welcome, Guest. Please Login or Register.
May 16th, 2008, 4:59am
   Mischel Internet Security Forum
   Other Products
   Autostart Explorer (Moderators: Helena, Gavin_Coe, Magnus)
   Something strange...		 « Previous topic | Next topic »
Pages: 1  Reply Reply  Notify of replies Notify of replies   Send Topic Send Topic   Print Print
   Author  Topic: Something strange...  (Read 2539 times)
divebel
Newbie
*



I love YaBB 1G - SP1!

   


Posts: 3
Something strange...
« on: May 31st, 2003, 5:13pm »		 Quote Quote  Modify Modify
In using Autostart Explorer I noticed an unusual item listed under my dosstart.bat entry.  I've noticed it before as I also use Moosoft's The Cleaner with TC Active & TC Monitor.  I don't know how to copy the info from Autostart Explorer, but I was able to launch an editor from one of the other programs under dosstart.bat and copy the notepad here:
 
C:\PROGRA~1\CREATIVE\SBLIVE\DOSDRV\SBEINIT.COM
 jX D$x4 u +L$t!   tPQ3
@ jX U  EVx4 u nu u@ `   uh  PYYPMEEt 3PM% ɋtS^ @4(  VuF4u hjMu \Me t3P.Yt.   tP)  YMt3P(  Y   Mtʼ3M^d
     f'  \SVu3ۋF4;u
   jMu MЉ]dzEE;u!MЈ]M;tZ@ G  M;t3P/Ytj*  ;YtE ] 9] uMЈ]蘳M;t3  Wu X   v]]_;  M;t螿3jPM蘴9^H]   M;tw3j.P(  Y;YtrhlFWh  YYtZhdFWh  YYtIh\FWh  YYt8hTFWh  YYt'hLFWh  YYthDFWh  YYt^HFH   M;t3vHMQM P
     9]   j6ESP'   9v   vV$Ej6P5vvV;uij,0)  YȉM;Et u #3;Eut;VPM;t:3jMuQPtuh VEM E_;tPQMЈ]裱M;t EM^[d
     t$ D$j t$PQp  Vt$W~4 u 3|$u@ $  t      ' 3_^ Vt$~4 u Cdž        u%          t
jP  YY    3^ @  U  MVy4 u =u u@ /      t   t& > t
P\3^ US]VW39{4u VtAu };>t.EP>  E;t&VhPE;tPQ @ u  
 
Doesn't look right does it?  Anybody know why this is here or what it may be doing?  Or what I should do about it if anything?
 
Any help appreciated!
 
Thanks!
IP Logged
Ian
Stole All the Forum Stars
********



Good things come to those who wait ...

   


Posts: 2907
Re: Something strange...
« Reply #1 on: May 31st, 2003, 6:11pm »		 Quote Quote  Modify Modify
It looks very much like the DOS emulation that runs your SoundBlaster sound card outside of Windows - SBEINIT would be a compaction of something like 'SoundBlaster Emulator Initialisation'. the .COM suffix also points to this being a DOS-mode executable program (self-contained) - Windows programs use the .EXE format, or calls to parts of the Windows system.
 
It's in the dosstart.bat file, so this would only run if you selected the 'Restart in MS-DOS mode' on the shut-down box. You normally also find reference to a mouse driver in dosstart.bat, because this would also be needed outside of Windows.
 
This isn't actually running in Windows since the SB card uses much more comprehensive drivers for things like DirectSound and DVD/CD audio.
 
If you never run MS-DOS mode (outside of Windows) then this will never be used. It's important to make the difference between full MS-DOS mode and a DOS Command box in Windows - the latter still uses the underlying Windows code for running sound cards, mice and so on (if needed).
 
It's not a nasty!
IP Logged
... but crap arrives pretty much straight away.
acheton
Original Gangster
******





   


Gender: male
 Posts: 1162
Re: Something strange...
« Reply #2 on: May 31st, 2003, 6:13pm »		 Quote Quote  Modify Modify
Here's a starter for 10. Are you running Windows 95/98 or ME? If no you don't need to worry about dosstart.bat since it is only used when moving to DOS mode on non-NT machines. If you are running 95/98* acheton we'll have to think a little harder.
 
By the way welcome to the boards!  Smiley Wink
IP Logged
"What success a man builds from his gifting can be destoyed in a moment because of his character."
divebel
Newbie
*



I love YaBB 1G - SP1!

   


Posts: 3
Re: Something strange...
« Reply #3 on: May 31st, 2003, 6:22pm »		 Quote Quote  Modify Modify
Thanks to both of you!  And I'm sorry, I should know better, I'm running WIN 98 Acheton!
Ian, ah-ha, I had had a system message on every shut down that said Trying to locate free PCI resources for Creative Audio  Card, press any key to continue(or some such--from memory here) press a key and shut down would complete.  I finally did some research and found that the dos emulation was having trouble loading as I had added hardware or something.  Advice was to disable Emulation in the hardware profile, as I have had no need to do DOS start-ups, which eliminated the "free PCI res..." message on shut down, so I guess this could be it?
Again thanks for the info and the Welcome!
IP Logged
Ian
Stole All the Forum Stars
********



Good things come to those who wait ...

   


Posts: 2907
Re: Something strange...
« Reply #4 on: May 31st, 2003, 6:38pm »		 Quote Quote  Modify Modify
A true stalwart - no need for any 'jelly-tot' front-ends! Stick with 98 until not getting updates (after next Easter) becomes a problem.
 
If you want to be sure, you could find dosstart.bat on your system and right-click it - there should be an 'Edit' option that will open it in NotePad - if you don't need the SBE in DOS, delete those bits.
 
Mine just has C:\PROGRA~1\LOGITECH\MOUSEW~1\MOUSE.EXE in it, for my Logitech mouse driver, but even though I'm a serious fiddler, even having that entry is still over-kill. The only DOS-mode tool I regularly use is DriveImage, which loads it's own Windows-like GUI any way (so the Logitech driver is a little superfluous).
IP Logged
... but crap arrives pretty much straight away.
acheton
Original Gangster
******





   


Gender: male
 Posts: 1162
Re: Something strange...
« Reply #5 on: May 31st, 2003, 6:39pm »		 Quote Quote  Modify Modify
You might want to backup the dosstart.bat file, then edit it and delete the junk. Then reenable emulation and see if the messages disappear. Might be worth a try, at least that way you might get to know what it is.
IP Logged
"What success a man builds from his gifting can be destoyed in a moment because of his character."
acheton
Original Gangster
******





   


Gender: male
 Posts: 1162
Re: Something strange...
« Reply #6 on: May 31st, 2003, 6:41pm »		 Quote Quote  Modify Modify
Ian, you're on fire today, particularly in this thread. Everytime I post, you're right there before me. Even stealing my ideas before I manage to post them:
 
on May 31st, 2003, 6:38pm, Ian wrote:
If you want to be sure, you could find dosstart.bat on your system and right-click it - there should be an 'Edit' option that will open it in NotePad - if you don't need the SBE in DOS, delete those bits.

 
Ignore what the others say about you being over the hill. You can still cut it with the best of them...Wink Smiley
« Last Edit: May 31st, 2003, 6:43pm by acheton » IP Logged
"What success a man builds from his gifting can be destoyed in a moment because of his character."
divebel
Newbie
*



I love YaBB 1G - SP1!

   


Posts: 3
Re: Something strange...
« Reply #7 on: May 31st, 2003, 6:58pm »		 Quote Quote  Modify Modify
Yes, well, I'm very comfortable here in the land of '98' --you know what they say, "if it ain't broke, don't fix it..."
I probably should have blown something up by now with all my in-expert tweaking and nosing around (ain't got no techie background...) so you have no idea how grateful I am to have two such "vet" experts giving advice...!
Will back-up then edit then re-enable emulation and see.  Let you know and thanx again!
IP Logged
Ian
Stole All the Forum Stars
********



Good things come to those who wait ...

   


Posts: 2907
Re: Something strange...
« Reply #8 on: May 31st, 2003, 7:18pm »		 Quote Quote  Modify Modify
Yup; as the sign says, "Anyone can make a mistake, but it takes an 'expert' to make a big one..."! Grin Self-taught, mostly on my own kit, but the really big things have always been on company time etc...
 
Actually, I've never read a sign that said that, but if there was one, that's what it would say...
 
Hey Ach:
Quote:
Ian, you're on fire today...

http://www.misec.net/forum/?board=TenForward;action=display;num=10543998 39
... very nearly!
IP Logged
... but crap arrives pretty much straight away.
acheton
Original Gangster
******





   


Gender: male
 Posts: 1162
Re: Something strange...
« Reply #9 on: May 31st, 2003, 7:23pm »		 Quote Quote  Modify Modify
on May 31st, 2003, 7:18pm, Ian wrote:

Hey Ach:
http://www.misec.net/forum/?board=TenForward;action=display;num=10543998 39
... very nearly!

 
Nice! Tried putting it in the fridge? Smiley
 
Just got back from Holiday to this weather, almost like I never left. Except I have to go to work on Monday!
« Last Edit: May 31st, 2003, 7:24pm by acheton » IP Logged
"What success a man builds from his gifting can be destoyed in a moment because of his character."
Ian
Stole All the Forum Stars
********



Good things come to those who wait ...

   


Posts: 2907
Re: Something strange...
« Reply #10 on: May 31st, 2003, 7:29pm »		 Quote Quote  Modify Modify
No fridge big enough here (where would the condensation run off to? Grin) - although I do remember Mesh producing a PC full-tower case with a compressor and heat exchanger in the bottom third, then using active cooling to let them overclock CPUs - IIRC it was a stop-gap so they could be first on the market with a Pentium running at over 1GHz...
IP Logged
... but crap arrives pretty much straight away.
Pages: 1  Reply Reply  Notify of replies Notify of replies   Send Topic Send Topic   Print Print

« Previous topic | Next topic »
Search
Members
Login
Register