How to remove the startup entries from Msconfig after a threat is cleaned.
Last Updated August 16, 2011
Msconfig Startup shows entries related to a recently cleand threat.
Symptoms Msconfig Startup may show entries related to recently cleaned threat even though the threat is cleaned.
The entries were not found in the below two registry locations. HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Run HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Run
HKEY_LOCAL_MACHINE \ Software \ Microsoft \ Shared Tools \ MSConfig \ startupreg Startupreg had two keys psajgimi and RegistryMechanic. After deleting these keys and restarting the computer they came back.
Symantec Endpoint Protection is not a Registry Cleaner.
Symantec Endpoint Protection does not remove the Registry enteries, as they are not actually Threats. Registry Enteries could not be termed as Threats.
To Manually clean the Registry, you would have to go to:
1) Start > Run > regedit
2) Run a Search with the name of the Threat File and manully delete the Paths.
Deleted the deys keys psajgimi and RegistryMechanic. Selected startupreg key and deleted all the string values command, hkey, inimapping, item and key.
Imported Document ID: TECH163657
Subscribing will provide email updates when this Article is updated. Login is required to Subscribe