Documents folder opening

[kojak]

Can anyone tell me why all of a sudden my documents folder opens up on start up.

My system is running windows ME (I know, its crap)

Thanks all.

[BliarOut]

There's probably a link to it in your startup group. If not, download a copy of autoruns from www.sysinternals.com and that should show you where it's being launched from.

[kojak]

I've downloaded it, run it, but not sure what i'm supposed to do. Does it work in the same way as when i press 'start' 'run' 'msconfig' 'start up' ..etc....and tick the relavent boxes as to which items start up at first. I've looked under the normal msconfig way, and cant see anything that links in to the document folder.

>> Edited by kojak on Thursday 22 September 15:22

[BliarOut]

Similar to MSConfig, but it just shows you the links. If you find the link to what's causing it to open you can right click and select "jump to" and delete the entry.

My Documents opening at startup is usually a link to a file that isn't enclosed in quotes correctly.

[kojak]

Hi Rob.

I've deleted a few things, but not sure what i'm doing. Its not cured the problem, so i'm going 2 leave it for the time being. Dont want to delete something i shouldn't. Cant understand why its just started happening. Did have 4 viruses which I got rid of, but dont know the connection.

Thanks anyway.

[BliarOut]

Ah, you've hit the nail on the head. There is an entry somewhere in your machine pointing to the trojan/virus executable that's been left behind. It used to live in "My Documents"

If you google for a copy of HiJackThis and then post the log file up here I'm sure someone will spot the offending line for you... Might be me, but I'm very forgetful

[kojak]

I keep that in mind Rob...However, i've just 'unticked' explorer in the MSconfig 'startup', and thats stopped it. Dont know why that is.

I put Hijack this on my pc sometime ago, but dont know what the feck it is.

>> Edited by kojak on Thursday 22 September 16:48

[kojak]

...but the next time I switch the pc on, its back again, with a tick in the 'explorer' box.