How do you control which programs start at boot time. 3

[bobmcb]

I have a Win 98 first edition machine which now starts a great number of programs when I boot the machine. One even starts notepad with a nonexistant file (like having selected new). My startup folder has just 4 programs named which are ones I want.

In system tools, software environment, the following exists:

3Com Modem Manager Startup Group "C:\Program Files\3Com\ModemMgr\Program\mdmMgr.exe"
desktop weather Startup Group "C:\Program Files\desktop weather\desktopweather_232187.exe"
Screen Shot Startup Group "C:\Program Files\Parsons Technology\Screen Shot\Sshot.exe"
EPSON Background Monitor Startup Group C:\ESM2\Stms.exe
AIM Registry (Per-User Run) C:\PROGRAM FILES\NETSCAPE\COMMUNICATOR\PROGRAM\AIM\aim.exe -cnetwait.odl
Mozilla Quick Launch Registry (Per-User Run) "C:\Program Files\mozilla.org\Mozilla\Mozilla.exe" -turbo
HPSCANMonitor Registry (Machine Run) C:\WINDOWS\SYSTEM\hpsjvxd.exe
ScanRegistry Registry (Machine Run) C:\WINDOWS\scanregw.exe /autorun
TaskMonitor Registry (Machine Run) C:\WINDOWS\taskmon.exe
SystemTray Registry (Machine Run) SysTray.Exe
Microsoft Works Update Detection Registry (Machine Run) C:\Program Files\Microsoft Works\WkDetect.exe
RealTray Registry (Machine Run) C:\Program Files\Real\RealPlayer\RealPlay.exe SYSTEMBOOTHIDEPLAYER
Adaptec DirectCD Registry (Machine Run) C:\PROGRA~1\HPCD-W~1\DIRECTCD\DIRECTCD.EXE
HP CD-Writer Registry (Machine Run) C:\Program Files\HP CD-Writer\Mmenu\hpcdtray.exe
MMTray Registry (Machine Run) C:\Program Files\MusicMatch\MusicMatch Jukebox\mm_tray.exe
LoadPowerProfile Registry (Machine Run) Rundll32.exe powrprof.dll,LoadCurrentPwrScheme
NAV Agent Registry (Machine Run) C:\PROGRA~1\NORTON~1\NAVAPW32.EXE
Tweak UI Registry (Machine Run) RUNDLL32.EXE TWEAKUI.CPL,TweakMeUp
startIE Registry (Machine Run) C:\WINDOWS\NOTEPAD.EXE qazwsx.hsq
ATIPOLAB Registry (Machine Service) ati2evxx.exe
LoadPowerProfile Registry (Machine Service) Rundll32.exe powrprof.dll,LoadCurrentPwrScheme

I suspect this may be where it is all coming from but not sure what to do about it.

I have a further problem, the machine will appear to go away (be busy i guess) and will not respond to keyboard or mouse input for several seconds at a time. No hdd activity during this time. This could be related to all the stuff running that was started after the boot. Occurs when on internet or when not on the internet. Peter Norton does not find any virus present.

Ideas are welcome.
Thanks,
bobmcb@att.net

 

[rudeboyjeff]

There are a bunch of different places to look for programs at startup. First place is a folder called startup. Second is type sysedit in your run box on your start bar, and look in win.ini. Third is what you have up top there.


Jeff

 

[dsi]

You can also check the registry, although you should be careful when modifying it.

Check the HKEY_LOCAL_MACHINE key:
\Software\Microsoft\Windows\CurrentVersion\Run

 

[JRB-Bldr]

2 possible approaches:

1. On your Start button go to Run. Type MSCONFIG and press Enter.

If the program comes up, then go to the right-most tab (I'm not on my Win 95/98 system at this time so I can't see the exact wording). In that tab will be a list of the programs which are launched when you start the system.

Initially Uncheck them ALL. Then once you are happy with the results, begin adding them back in (check them one at a time).

If the MSCONFIG program is not present look at approach #2

2. Go to

http://www.ibservice.com/products.htm

and pick up their Free IBS Startup Editor. You can do almost exactly the same functions with it.

Good Luck

 

[butchrecon]

As jrbbldr suggested try MSCONFIG. It is the best place to attempt to stop programs from starting up. However if you do ot see it in MSCONFIG look in the StartUp folder. If nothing there look at the registry in the:
HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Run folder.
There may also be a few other Run style folders listed there as well that may contain programs for start up. Also look in:
HKEY__CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Run folder and any other run folders listed there as well. Be careful when editing the registry. any changes you make in the registry are instant and hard to reciver from if you make a mistake. James Collins
Field Service Engineer
A+, MCP

email: butchrecon@skyenet.net

Please let us (Tek-tips members) know if the solutions we provide are helpful to you. Not only do they help you but they may help others.

 

[Kento]

C:\WINDOWS\NOTEPAD.EXE qazwsx.hsq

You have the qaz trojan which is why notepad is opening. Run an online scan here:

http://housecall.antivirus.com/

Here's a fix tool for it:

http://securityresponse.symantec.com/avcenter/venc/data/w32.hllw.qaz.a.fix.html

Read this for info on it:

http://securityresponse.symantec.com/avcenter/venc/data/w32.hllw.qaz.a.html

If the links are messed up just copy and paste them starting with http into your address bar and press enter.

 

[Kento]

Here's info that'll help you decide what to uncheck in msconfig under the startup tab:

http://www.pacs-portal.co.uk/startup_pages/startup_full.htm

You can download the entire list (.htm file) from here so you can view it offline:

http://www.pacs-portal.co.uk/startup_content.htm

I suggest you leave these checked: scan registry, system tray, 3Com Modem, Tweakui, both load power profile lines, and your antivirus entries. Some items like real player have to be disabled from loading through those programs options or else they'll just add themselves back into msconfig. Tweakui is there because you have something checked under it's paranoia tab.

To disable real player open it and go to view--preferences--settings button--uncheck 'enable start center' then ok out.

 

[kishorraut]

To remove the programs running at booting time is very simple.

1. Click Start button
2. Click Run
3. type "msconfig" to run the msconfig.exe file
4. select the startup tab
5. uncheck the unwanted files from the list

if still unwanted application runs at boot

open the win.ini file using notepad, win.ini file is stored in windows folder and edit the line as follows

load=filename.exe filename2.exe

filename.exe is the application name which run at the startup, so simply remove the path\filenames after load=

thanks

 

[bobmcb]

Thanks guys......
The tip on MSCONFIG was the key. I now remember that from a long time ago but had forgotten the details. That got rid of the stuff that I did not need at startup.
Thanks again.
bobmcb@att.net

 

[Kento]

Did you remove the qaz trojan? The Symantec fix tool should remove it.

 

[bobmcb]

I ran house calls. Checked over 12000 files. Not one virus detected. qaz trojan may have been removed by my using peter norton which may have fixed it but left the line in the startup folder of msconfig. I unchecked that one and now notepad does not launch.
bobmcb@att.net