omega wrote in said:
I don't have XP, so am wondering, does the following article mean that XP,
at least the pro version, has tools for this this built in, to disable Real
and similar's habits?
<quote>
http://support.microsoft.com/?kbid=314488
Yes, but as you seem to have noted the article you pointed to only
applies to XP PRO and the 64-bit edition. I am not sure about XP Home,
don't run it my self (but win2k) - but from what I can remember
reading - it does not offer this option. Btw: NT and Win2k does. In
other words, all NT based system does - except XP-home I think.
IMHO, adding an application for exclusion via group policy this way is
rather "involving", compared to using a startup monitor utility that
will let you "black list" any app with a click or two when prompted.
But AFAIK it seems non of the free startup monitoring tools can do
this (just had a look at Winpatrol, but no).
As mentioned I use a shareware app for this my self - RegRun (gold
edition) from <
http://www.reatis.com>. The Pro and Gold editions
offers a black-list feature (always deny) as well as a exclusion list
(never deny). It can also add any new found startup app to the
blacklist automatically if you so please.
Btw: While the group policy configuration options offered by NT based
systems is very useful, it presupposes that you know how - and what
apps to add for exclusion when. In other words, it presupposes that
you have admin privileges, and know how to use them. And as for
startup apps, it requires that you either pay very close attention to
the startup loading locations your self (check them every time you
log-on and off), or that you use a free monitoring application like
Winpatrol or Startup Monitor that at least will warn when new startup
apps are added - so you can add and permanently disable the most
annoying ones (those that attempt to load more than once/often) in
your NT/2k/XP-pro run policy. Me -
I rather prefer a startup monitoring app with a one (or two
click
"add-to-black list" choice.
While on the subject, adding a few notes (or ramblings - you choose)
about identifying startup applications - when you notice new ones
added to your system: what are they? - what program do they belong to?
- what do they do? - do I really need them? - are they harmful in any
way? and so on...
Some times it seems rather easy, the name or location of the exe (or
whatever) that wants to load at startup says it all. At least you can
deduce from this which (main) program the startup app belongs,
although sometimes both the name (and location) can seem rather
"cryptic". But anyway - it is not always clear what they do, or if you
really need them, or if they may cause any harm or not. Some times the
"mother" application provides the info needed (help file) about what
the startup program will do - and when or if you need it. The well
behaved ones will also prompt you about it when you install the
"mother program", asking: "do you want to load X at startup?" or
similar. Other times (very often) they are silently installed without
even so much as a prompt during installation, and/or their purpose and
use are not mentioned/explained in the help or readme. Then it is not
easy knowing if the program is useful, needed, harmful spyware or
trojans, etc. And even if the "mother program prompts you during
install, and offers a disable choice after, and even if it offer loads
of info, you can never be sure - if the startup app is harmful or not.
The shareware version of Winpatrol offers database lookup feature
(direct online lookup in their database think). This is AFAIK the only
thing that separates the free from the full version of Winpatrol. The
shareware app RegRun offers a similar feature, but here you get a
local copy of the database (frequently updated) - which you can also
lookup online if you please. Thing I like about the RegRun approach,
the database can be edited - so you can add your own notes (the
interface is rather basic, but it serves the purpose just fine IMHO).
If you use any of the free monitoring tools, you will have to perform
searches your self. But note - you might have to that even if you use
any of shareware apps with Look-up features, since there is no
warranty the app you find in your startup is known and listed by the
(shareware) app (database) you use.
So - in any case -
www.google.com is our friend. Search on exe/program
name. There are also some dedicated databases/webpages online that
list lots and lots of startup apps with info about them; here are a
few links (including the Regrun database):
<
http://www.greatis.com/regrun3appdatabase.htm> : "breaks hundreds of
possible start-up components into four easy-to-understand categories:
necessary, useless, at your option, and dangerous." (this is the
online version of the same database I get with Regrun. Online version
can be accessed freely by anyone).
Start-up Applications:
<
http://www.pacs-portal.co.uk/startup_index.htm>
PestPatrol search pages:
<
http://pestpatrol.com/Search/SearchPestInfo.asp>
Spybot threats list:
<
http://spybot.eon.net.au/index.php?lang=en&page=knowledgebase/threats>
All the best,
Bjorn Simonsen