Download TrojanHunter Now
Free 30-day trial!
Latest TrojanHunter Version:
TrojanHunter 5.0
Order Now
License file delivered within minutes.
Welcome, Guest. Please Login or Register.
May 16th, 2008, 4:53am
   Mischel Internet Security Forum
   Other Products
   Autostart Explorer (Moderators: Helena, Gavin_Coe, Magnus)
   .bx"G entry (native applications)		 « Previous topic | Next topic »
Pages: 1  Reply Reply  Notify of replies Notify of replies   Send Topic Send Topic   Print Print
   Author  Topic: .bx"G entry (native applications)  (Read 1348 times)
Pat
Newbie
*



I love YaBB 1G - SP1!

   


Posts: 2
.bx"G entry (native applications)
« on: Dec 31st, 2003, 10:49am »		 Quote Quote  Modify Modify
Autostart Explorer shows the entry .bx"G  
 
If I look with regedit at the location HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\Session Manager\BootExecute I cannot find such entry. I can only see the usual ones like autocheck etc.
 
Can anyone please tell me something about this strange .bx"G entry?  
 
EDITED: When I click back and forth the entry changes. Sometimes it is called G: or D: At the moment it is called isx"G
« Last Edit: Dec 31st, 2003, 10:53am by Pat » IP Logged
RNS_Mike
Newbie
*





   


Posts: 1
Re: .bx"G entry (native applications)
« Reply #1 on: Oct 23rd, 2005, 12:40pm »		 Quote Quote  Modify Modify
I too have seen this occur. In my case, the entry was always three seemingly random ASCII characters that would usually appear below the autocheck autochk* entry, but  occasionally would appear above the expected entry. I too looked at the registry key for suspicious entries, but saw nothing. This occured on a Dell Dimension 4550 running Win2000 Pro SP4 using Autostart Explorer 2.1. This Dell will not show the desktop icons, taskbar or allow any right-clicking on the desktop area. After logon, a My Documents explorer window opens. Running explorer.exe from the Task Manager will only start a new My Documents window if one is not already open. I read Microsoft's suggested fixes for this condition without any success in solving the problem. Autostart Explorer 2.1  also shows a nameless folder icon as the only entry under Standard Executables \ explorer.exe. I have scanned the drive using  both ClamAV, F-prot and BitDefender while booted to two different Linux Live CDs. I got the impression I was watching a virus morph itself or I was seeing some kind of output from the system clock. Any ideas out there?  I'd rather fix it than wipe it, since it's one of those "family member" jobs that rarely pays.  
 
Update: I got it! Missing reg entry HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Winlogon\Shell\Explorer.exe
 
I still haven't figured out the Autostart Explorer issue.
« Last Edit: Oct 23rd, 2005, 5:22pm by RNS_Mike » IP Logged
Randy_Bell
Global Moderator
*****




TrojanHunter is the Best!

40416585 40416585   randybell_98   atmrover
WWW   Email

Gender: male
 Posts: 2883
Re: .bx"G entry (native applications)
« Reply #2 on: Oct 23rd, 2005, 6:58pm »		 Quote Quote  Modify Modify
Unfortunately yours does sound like an infection, RNS_Mike.  You can try one of the online scans:  These are the online scans I have bookmarked:
 
BitDefender scan
McAfee.com - FreeScan
Panda ActiveScan
PC Pitstop scan
RAV AntiVirus - Scan Online
Symantec Online Scan
Trend Micro HouseCall
eTrust AV Web Scanner
Trend Micro HouseCall {Java}
 
 
and I recommend the Panda ActiveScan first, Trend HouseCall second .. as the two best online scans, in that order.  HouseCall is faster but Panda is more thorough, imho. Wink
IP Logged
Pages: 1  Reply Reply  Notify of replies Notify of replies   Send Topic Send Topic   Print Print

« Previous topic | Next topic »
Search
Members
Login
Register