'Beyi.exe' file keeps loading on Startup

  • Thread starter Thread starter Brian Basquille
  • Start date Start date
B

Brian Basquille

Dear all,

I am having a problem with a file - "Beyi.exe"

I am a Computing student in University and this has left me stumped!!

There's a file that keeps being loaded on Startup - it's in the Startup
folder in the Start Menu (when i delete it, it reappears when i start
Windows again). I unchecked it from 'msconfig' - Startup. I also checked the
registry in HKEY_LOCAL_MACHINE/SOFTWARE/..../RUN/ and it's not present
there! It's in the Task Manager when i press Ctrl + Alt + Delete - i end the
process from there.

Yet every time i start up Windows, it reappears both in the Startup folder
in Start Menu and running in the background!

Can anyone help me?

Thanks in advance,

Brian
 
Brian Basquille said:
Dear all,

I am having a problem with a file - "Beyi.exe"

I am a Computing student in University and this has left me stumped!!

There's a file that keeps being loaded on Startup - it's in the Startup
folder in the Start Menu (when i delete it, it reappears when i start
Windows again). I unchecked it from 'msconfig' - Startup. I also checked the
registry in HKEY_LOCAL_MACHINE/SOFTWARE/..../RUN/ and it's not present
there! It's in the Task Manager when i press Ctrl + Alt + Delete - i end the
process from there.

Yet every time i start up Windows, it reappears both in the Startup folder
in Start Menu and running in the background!

Can anyone help me?

Thanks in advance,

Brian

Did you try stopping beyi.exe in the task manager "before" deleting it from
the startup menu? I had a similar problem recently because the rogue
application updated the registry, and other places, just before it
terminated.
Check your services for an entry in there
Check the registry with the same path but on root hkey_current_user.
Do a search for all instances of beyi through the registry.
Run msconfig from the run menu and look through all the screens there.
search for and rename beyi.exe to oldbeyi.exe and reboot. By renaming you
have a chance of restoring later if things go belly up.
Check it's not being started up by some other application.
There's a registry monitoring tool called RegMon, run it and it tells you
what things are being written and read in the registry. Monitor for a while
with this running.

good luck and post back with results.
 
Hi,

There's probably some other program which is acting as a
loader for the program.

Just search for Beyi.exe and delete it if you want to get
rid of it.

Hope this helps,
Wild Thing
 
Thanks CheshireCat.

Carried out all the steps you recommended.

Found two files that contained 'beyi.exe' in the filename. Found them in
subfolders in the Windows directory - the files automatically loaded the
'beyi.exe' on Startup. Firstly renamed them (in case deleting them might
have f **ked up the computer) - then restarted up the computer no problem.
So then deleted them!

Restarted the computer and it seems the file is gone from Task Manager and
the Startup folder.

Think it may have been a harmless virus i obtained last week in an e-mail.

Thanks again,

Brian
 
Cheers for the help too, Wild Thing.

But got the problem solved!

Thanks all!
 
Dear all,

I am having a problem with a file - "Beyi.exe"

I am a Computing student in University and this has left me stumped!!

There's a file that keeps being loaded on Startup - it's in the Startup
folder in the Start Menu (when i delete it, it reappears when i start
Windows again). I unchecked it from 'msconfig' - Startup. I also checked the
registry in HKEY_LOCAL_MACHINE/SOFTWARE/..../RUN/ and it's not present
there! It's in the Task Manager when i press Ctrl + Alt + Delete - i end the
process from there.

Yet every time i start up Windows, it reappears both in the Startup folder
in Start Menu and running in the background!

Brian,

This sounds like spyware - though I have not found any definitive
references to it.

Try SWI Forums for help. You will need Spybot S&D and HijackThis,
both of which are free. Start with this article, which contains all
the instructions:
http://forums.spywareinfo.com/index.php?showtopic=5187

Cheers,

Chuck
I hate spam - PLEASE get rid of the spam before emailing me!
Paranoia comes from experience - and is not necessarily a bad thing.
 
Back
Top