Google Groups no longer supports new Usenet posts or subscriptions. Historical content remains viewable.
Dismiss

sudden strange startup window

2 views
Skip to first unread message

louise

unread,
Jan 10, 2007, 12:15:08 PM1/10/07
to
After rebooting, I am getting a notepad window on top of the
desktop which says

[.ShellClassInfo]
LocalizedResourceName=@%SystemRoot%\system32\shell32.dll,-21787

I also notice that now, suddenly, in msconfig, there is
something called desktop.ini in startup - this was never
there before - that I'm sure of.

The most recent thing I installed was Mozy backup, but I've
stopped it from running at startup both in services and in
msconfig.contact.

I also installed a program connected to an online system
that notifies the BB when I'm online and available for
contact.

Any idea(s) what this might refer to?

BTW, I'm running NOD32 and SuperAntiSpyware and nothing
notable has shown up there.

TIA

Louise

pcbutts1

unread,
Jan 10, 2007, 1:24:50 PM1/10/07
to
You installed and used BugHunter. That's twice now you found a bug in
Bughunter. Dustin is a former hacker/virus writer so the scripts he uses are
suspicious. The problem is that "desktop.ini" files may contain CLSID
references to arbitrary executables in the "[.ShellClassInfo]" section. This
can be exploited to execute arbitrary files with another user's privileges.
Bug hunter uses this exploit when scanning. I suggest you use Startup CPL
http://www.mlin.net/StartupCPL.shtml to remove that window from starting on
every boot. The desktop.ini file is not dangerous and if you don't want to
see it the do a search for that file on your hard drive and delete all that
it finds, those files will be moved to the recycle bin. After a week of so
you can empty the bin. Those files are normally hidden and will be recreated
as need with the correct hidden attribute when needed.
You might want to let Dustin know his program is buggy.


--

Newsgroup Trolls. Read about mine here http://www.pcbutts1.com/downloads
The list grows. Leythos the stalker http://www.leythosthestalker.com, David
H. Lipman, Max M Wachtell III aka What's in a Name?, Fitz,
Rhonda Lea Kirk, Meat Plow, F Kwatu F, George Orwell

"louise" <lou...@invalid.invalid> wrote in message
news:50kl8mF...@mid.individual.net...

pcbutts1

unread,
Jan 10, 2007, 1:34:31 PM1/10/07
to
You might also see files called Thumbs.db caused by that same bug.

--

Newsgroup Trolls. Read about mine here http://www.pcbutts1.com/downloads
The list grows. Leythos the stalker http://www.leythosthestalker.com, David
H. Lipman, Max M Wachtell III aka What's in a Name?, Fitz,
Rhonda Lea Kirk, Meat Plow, F Kwatu F, George Orwell

"louise" <lou...@invalid.invalid> wrote in message
news:50kl8mF...@mid.individual.net...

Heather

unread,
Jan 10, 2007, 2:28:46 PM1/10/07
to
Louise, pay no attention to this thieving fool......I ran BugHunter
myself and have no "desktop.ini" in my Startup.

He is just ticked off because Dustin exposed the flaws in his stolen
program (Spyerase). And as a former (and I stress FORMER) virus writer,
I think Dustin would have way more smarts than Dickhead PC. Butts.

In fact, most of the people on this or any other security ng have way
more smarts than Butts. Not to forget scruples and morals.

Heather

"pcbutts1" <pcbu...@leythosthestalker.com> wrote in message
news:H56dnXGpA63osjjY...@giganews.com...


> You installed and used BugHunter. That's twice now you found a bug in
> Bughunter. Dustin is a former hacker/virus writer so the scripts he
> uses are suspicious. The problem is that "desktop.ini" files may
> contain CLSID references to arbitrary executables in the
> "[.ShellClassInfo]" section. This can be exploited to execute
> arbitrary files with another user's privileges. Bug hunter uses this
> exploit when scanning. I suggest you use Startup CPL
> http://www.mlin.net/StartupCPL.shtml to remove that window from
> starting on every boot. The desktop.ini file is not dangerous and if
> you don't want to see it the do a search for that file on your hard
> drive and delete all that it finds, those files will be moved to the
> recycle bin. After a week of so you can empty the bin. Those files are
> normally hidden and will be recreated as need with the correct hidden
> attribute when needed.
> You might want to let Dustin know his program is buggy.

pcbutts1

unread,
Jan 10, 2007, 2:29:57 PM1/10/07
to
Hi Bitch! there are no flaws in Spyerase.

--

Newsgroup Trolls. Read about mine here http://www.pcbutts1.com/downloads
The list grows. Leythos the stalker http://www.leythosthestalker.com, David
H. Lipman, Max M Wachtell III aka What's in a Name?, Fitz,
Rhonda Lea Kirk, Meat Plow, F Kwatu F, George Orwell

"Heather" <lay...@nospam.invalid> wrote in message
news:eo3emg$ckj$1...@registered.motzarella.org...

Heather

unread,
Jan 10, 2007, 2:38:55 PM1/10/07
to
quote....
Your spyerase program is a garbled together patch job of other people's
work. It doesn't do everything you've said, either. No backups, no
renaming, just deletion and possibly replace if you can find what you
call a clean backup. I've done a silly test with your program. I made it
look for a file it thought was bad, due to your stupid method of
detection (filenames only) and guess what? It replaced the "bad" file
with a byte for byte duplicate it thinks is clean, simply because of the
folder in which it found the copy!
unquote......

'nuff said, bitch.

"pcbutts1" <pcbu...@leythosthestalker.com> wrote in message

news:RaqdnTy19qQqozjY...@giganews.com...

Todd H.

unread,
Jan 10, 2007, 2:44:24 PM1/10/07
to

I haven't been actively following this thread but wanted to contribute
that Spyerase was something my brain decided to prounounce as
"Spyarse." Appropriate for something backed (ahem) by pcbutts right?

At any rate, if it is indeed as excrement a program as others seem to
think, I'd like to nominate "Spyarse" as the monicker by which it is
referred in future posts. :-)

Let's see if it'll stick....

Best Regards,
--
Todd H.
http://www.toddh.net/

Heather

unread,
Jan 10, 2007, 3:04:13 PM1/10/07
to

"Todd H." <comp...@toddh.net> wrote in message
news:843b6ir...@ripco.com...

>
> I haven't been actively following this thread but wanted to contribute
> that Spyerase was something my brain decided to prounounce as
> "Spyarse." Appropriate for something backed (ahem) by pcbutts right?
>
> At any rate, if it is indeed as excrement a program as others seem to
> think, I'd like to nominate "Spyarse" as the monicker by which it is
> referred in future posts. :-)
>
> Let's see if it'll stick....

Funny you would come up with that because I stumbled when trying to
spell it. Perhaps our collective unconscious minds are attempting to
come up with an *apt name* for anything pcbutts steals....ROFL!!

Heather


pcbutts1

unread,
Jan 10, 2007, 3:07:09 PM1/10/07
to
Oh that's right you have no technical skills. Dustin modified my program
then complains that it does not work. Over 500 downloads of spyerase and not
one person has said it does not work except trolls. See my feedback here I
have about 10 more waiting for approval.
http://pcbutts1-therealtruth.blogspot.com/

--

Newsgroup Trolls. Read about mine here http://www.pcbutts1.com/downloads
The list grows. Leythos the stalker http://www.leythosthestalker.com, David
H. Lipman, Max M Wachtell III aka What's in a Name?, Fitz,
Rhonda Lea Kirk, Meat Plow, F Kwatu F, George Orwell

"Heather" <lay...@nospam.invalid> wrote in message

news:eo3f9i$du3$1...@registered.motzarella.org...

pcbutts1

unread,
Jan 10, 2007, 3:13:09 PM1/10/07
to
Why are Linux users such idiots.

--

Newsgroup Trolls. Read about mine here http://www.pcbutts1.com/downloads
The list grows. Leythos the stalker http://www.leythosthestalker.com, David
H. Lipman, Max M Wachtell III aka What's in a Name?, Fitz,
Rhonda Lea Kirk, Meat Plow, F Kwatu F, George Orwell

"Todd H." <comp...@toddh.net> wrote in message
news:843b6ir...@ripco.com...
>

Leythos

unread,
Jan 10, 2007, 3:20:55 PM1/10/07
to
In article <HYydneIw8OVK1TjY...@giganews.com>, pcbutts1
@leythosthestalker.com says...

> Why are Linux users such idiots.

Why don't you address the issues with your BATCH (as we can't call it a
program) File not actually detecting malware, but only detecting file
names that are suspected as malware?

Why don't you address the fact that if YOU make a mistake in the file
name that you offer no means to recover from the mistake and COULD
render the users computer unbootable?

Why don't you admit that any script kiddie can write batch files, and
it's even easier when you copy them from someone else's work.

--
Want to know what PCBUTTS1 is really about?
*** WARNING - these links contain foul/pornographic content of an
abusive nature created by PCBUTTS1 and still hosted on his public
website ***
http://www.pcbutts1.com/rlk/rlk.htm ,
http://www.pcbutts1.com/license.htm ,
http://www.pcbutts1.com/downloads/max.htm ,
http://www.pcbutts1.com/downloads/mpv.htm ,
http://www.pcbutts1.com/downloads/wtcpcb.htm ,
http://www.pcbutts1.com/cracks.htm ,
http://www.pcbutts1.com/Loutheasshole.htm
All while spamming his company website at: http://www.seedsv.com

Heather

unread,
Jan 10, 2007, 3:35:44 PM1/10/07
to
I think 20 years working in the criminal law field gives me an advantage
when recognizing thieves and liars. And we dealt with a lot of mental
misfits as well. You fit all the categories. Hell, you are not even
sure if you are male or female!! Psychopathic tendencies?? No, just a
low IQ and a penchant for attention.

HF......and Dustin didn't modify your "program"......it was a paste and
copy patch job.


"pcbutts1" <pcbu...@leythosthestalker.com> wrote in message

news:kMKdncg-GvHy2jjY...@giganews.com...


> Oh that's right you have no technical skills. Dustin modified my
> program then complains that it does not work. Over 500 downloads of
> spyerase and not one person has said it does not work except trolls.
> See my feedback here I have about 10 more waiting for approval.
> http://pcbutts1-therealtruth.blogspot.com/
>

Foul pornographic websites snipped. You are so incredibly disgusting!!

Todd H.

unread,
Jan 10, 2007, 3:52:14 PM1/10/07
to
"pcbutts1" <pcbu...@leythosthestalker.com> writes:

> Why are Linux users such idiots.

Actually, I prefer a Windows desktop right now. But the iBook is to
my right, and I'm nearly always ssh'd into my internet facing linux
box.

So tell us how you got the idea for Spyarse?

pcbutts1

unread,
Jan 10, 2007, 4:40:29 PM1/10/07
to
You mean you and everybody in this group don't know if I am male or female.
I know for a fact that I am female. Trolls have screwed with your mind. 20
years in the criminal law field? Maybe you can tell everyone how to sue me
because they can't seem to figure it out. Spyerase works.

--

Newsgroup Trolls. Read about mine here http://www.pcbutts1.com/downloads
The list grows. Leythos the stalker http://www.leythosthestalker.com, David
H. Lipman, Max M Wachtell III aka What's in a Name?, Fitz,
Rhonda Lea Kirk, Meat Plow, F Kwatu F, George Orwell

"Heather" <lay...@nospam.invalid> wrote in message
news:eo3ilo$kbk$1...@registered.motzarella.org...

louise

unread,
Jan 10, 2007, 4:51:59 PM1/10/07
to
pcbutts1 wrote:
> You might also see files called Thumbs.db caused by that same bug.
>
I did - and I deleted that without thinking much about it -
the other concerned me more.

Louise

pcbutts1

unread,
Jan 10, 2007, 4:56:38 PM1/10/07
to
You mean "Spyerase" I write a lot of command line tools not just Spyerase.
You got trolls like Leythos the stalker who is a no-nothing and then Dustin
and Nick who the best they can say about Spyerase is what if? or what could
happen not what did happen because it works and if it ever breaks anything
there is a backup. They still can't explain why Spyerase works on Windows
2000 and the thieves version does not. They don't know my program. You
should not believe anything they say.

--

Newsgroup Trolls. Read about mine here http://www.pcbutts1.com/downloads
The list grows. Leythos the stalker http://www.leythosthestalker.com, David
H. Lipman, Max M Wachtell III aka What's in a Name?, Fitz,
Rhonda Lea Kirk, Meat Plow, F Kwatu F, George Orwell

"Todd H." <comp...@toddh.net> wrote in message

news:84bql6y...@ripco.com...

Todd H.

unread,
Jan 10, 2007, 5:00:43 PM1/10/07
to
"pcbutts1" <pcbu...@leythosthestalker.com> writes:

> You mean "Spyerase"

No I mean "Spyarse!"

BS

unread,
Jan 10, 2007, 5:31:30 PM1/10/07
to

Hi everyone,

The desktop.ini file, of which you speak, is normal for XP systems to
have in the common startup group. It will normally show up under msconfig.
The reason why it appears to open in a text file on the desktop suddenly
upon bootup is usually because the attributes for the file have changed to
normal instead of hidden and system. The thumbs.db file is generated by
Windows in any folder where 'show thumbnails' has been selected and can
safely be deleted.


FredW

unread,
Jan 10, 2007, 5:43:14 PM1/10/07
to
louise beweerde :

Please do NOT listen to the advice of the buttman.
He is a known troll in this newsgroup.
He gives very bad advice and uses stolen software.
His makes war against the (trustworthy) regulars in a very rude way.

I have the buttman a long time in my killfile.
Therefore I do not have to read (and see) his filthy and abusive
language and pictures.

Stay away from every advice from butts.
(this is just my opinion.)

--
Fred Wening (NL)


pcbutts1

unread,
Jan 10, 2007, 6:06:04 PM1/10/07
to
Out of curiosity when you ran bughunter, at anytime during any scan did you
manually cancel it? or did you always let it fully complete?

--

Newsgroup Trolls. Read about mine here http://www.pcbutts1.com/downloads
The list grows. Leythos the stalker http://www.leythosthestalker.com, David
H. Lipman, Max M Wachtell III aka What's in a Name?, Fitz,
Rhonda Lea Kirk, Meat Plow, F Kwatu F, George Orwell

"louise" <lou...@invalid.invalid> wrote in message

news:50l5foF...@mid.individual.net...

Heather

unread,
Jan 10, 2007, 7:27:07 PM1/10/07
to

"BS" <rstacy6.no...@tampabay.rr.com> wrote in message
news:45a56979$0$9566$4c36...@roadrunner.com...
>
> Hi everyone,

. The thumbs.db file is generated by
> Windows in any folder where 'show thumbnails' has been selected and
> can safely be deleted.

Thanks for that bit of information. I had just started using thumbnails
in my picture folder and noticed that one. Glad to know I can safely
delete it.

I find some of the MVP's on the MS XP news groups can be rather rude, so
tend to learn bits and pieces from here and also the WinME ng. (G)
There are not many people running WinME any more, so we have
unofficially made it our "transition ng".

I have another odd one if anyone cares to answer it. In My Music
folder, I am now getting all sorts of "Album Art" files. I use Music
Match and generally download an album cover to go with a song. But that
never happened on WinME. These are very small jpegs (3-10 kb), but I
get dire warnings if I try to delete them. Says they are "System Files"
and a program might not work if I delete them.

I have several subfolders (14) and these songs were mostly transferred
over from my WinME computer and the dates of the Album Art go back to
when I did that, I believe. They are not in every subfolder tho. Just
one of those "hmmm" things.

Cheers......Heather


louise

unread,
Jan 10, 2007, 11:43:34 PM1/10/07
to
pcbutts1 wrote:
> Out of curiosity when you ran bughunter, at anytime during any scan did you
> manually cancel it? or did you always let it fully complete?
>
Best I can remember, I ran it once and let it complete.

Louise

kurt wismer

unread,
Jan 11, 2007, 12:59:21 AM1/11/07
to
pcbutts1 wrote:
> Hi Bitch! there are no flaws in Spyerase.

since that statement is categorically false for all but the most trivial
software (and by that i mean 'hello world'), i guess we know what kind
of developer you are...

--
"it's not the right time to be sober
now the idiots have taken over
spreading like a social cancer,
is there an answer?"

Leythos

unread,
Jan 11, 2007, 6:31:31 PM1/11/07
to
In article <WLSdnTFKiPKF_DjY...@giganews.com>, pcbutts1
@leythosthestalker.com says...

> You mean "Spyerase" I write a lot of command line tools not just Spyerase.
> You got trolls like Leythos the stalker who is a no-nothing and then Dustin
> and Nick who the best they can say about Spyerase is what if? or what could
> happen not what did happen because it works and if it ever breaks anything
> there is a backup. They still can't explain why Spyerase works on Windows
> 2000 and the thieves version does not. They don't know my program. You
> should not believe anything they say.

You're almost funny buthead - I was being paid to write code in the
70's, did device drivers in the early 80's, and implemented a large
network and computer system setup in the Navy when they had the systems
sitting in boxes for over a year before I joined. I've forgot more than
you'll ever learn kiddo.

Oh, and if you think that we're going to tell you how to fix your BATCH
file, well you're wrong.

pcbutts1

unread,
Jan 11, 2007, 6:49:40 PM1/11/07
to
public class HelloPervert
{

public static void main (String[] args)
{

System.out.println("hello pervert!");
}

}

--

Newsgroup Trolls. Read about mine here http://www.pcbutts1.com/downloads
The list grows. Leythos the stalker http://www.leythosthestalker.com, David
H. Lipman, Max M Wachtell III aka What's in a Name?, Fitz,
Rhonda Lea Kirk, Meat Plow, F Kwatu F, George Orwell

"kurt wismer" <ku...@sympatico.ca> wrote in message
news:eo5aat$qbr$2...@aioe.org...

0 new messages