Window appears on startup 2

[Evil6]

Hello.

Wonder if someone knows about this: since I installed Norton Internet Security Professional 2004, I have this explorer window of the Norton program group appearing on the desktop each time I do a reboot.

Any ideas how to make the damned thing go away?

Thanx

 

[h5n1]

1- start - programs - startup
2- regedit - HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVesion\Run

-------------------------------------
everything in life is a learning experience.....everything.......

 

[bcastner]

http://service1.symantec.com/SUPPOR...88256a9c0001e2b2?OpenDocument&src=bar_sch_nam

 

[Evil6]

I'm sorry but I don't understand very much of editing the registry, so I didn't want to mess it up. Using your key to search with, I've come up with this, wich has several norton related items. Can you tell me wich one is to be deleted?

Thanks

Value 0
Name: iKeyWorks
Type: REG_SZ
Data: E:\PROGRA~1\Trust\\Keyboard\Ikeymain.exe

Value 1
Name: WheelMouse
Type: REG_SZ
Data: E:\PROGRA~1\Trust\\Mouse\Amoumain.exe

Value 2
Name: Cmaudio
Type: REG_SZ
Data: RunDll32 cmicnfg.cpl,CMICtrlWnd

Value 3
Name: NvCplDaemon
Type: REG_SZ
Data: RUNDLL32.EXE E:\WINDOWS\System32\NvCpl.dll,NvStartup

Value 4
Name: nwiz
Type: REG_SZ
Data: nwiz.exe /install

Value 5
Name: SpeedTouch USB Diagnostics
Type: REG_SZ
Data: "E:\Program Files\Alcatel\SpeedTouch USB\Dragdiag.exe" /icon

Value 6
Name: QuickTime Task
Type: REG_SZ
Data: "E:\Program Files\QuickTime\qttask.exe" -atboottime

Value 7
Name: SunJavaUpdateSched
Type: REG_SZ
Data: E:\Program Files\Java\j2re1.4.2_04\bin\jusched.exe

Value 8
Name: ccApp
Type: REG_SZ
Data: "E:\Program Files\Common Files\Symantec Shared\ccApp.exe"

Value 9
Name: URLLSTCK.exe
Type: REG_SZ
Data: E:\Program Files\Norton Internet Security Professional\UrlLstCk.exe

Value 10
Name: Advanced Tools Check
Type: REG_SZ
Data: E:\PROGRA~1\NORTON~1\NORTON~1\AdvTools\ADVCHK.EXE

Value 11
Name: BootWarn
Type: REG_SZ
Data: E:\Program Files\Norton Internet Security Professional\Norton AntiVirus\BootWarn.exe /a

Value 12
Name: CloneCDTray
Type: REG_SZ
Data: "E:\Program Files\CloneCD\CloneCDTray.exe" /s

Value 13
Name: TkBellExe
Type: REG_SZ
Data: "E:\Program Files\Common Files\Real\Update_OB\realsched.exe" -osboot

Value 14
Name: NeroFilterCheck
Type: REG_SZ
Data: E:\WINDOWS\system32\NeroCheck.exe


Key Name: HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run\OptionalComponents
Class Name: <NO CLASS>
Last Write Time: 4/12/2004 - 7:10 PM

Key Name: HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run\OptionalComponents\IMAIL
Class Name: <NO CLASS>
Last Write Time: 4/12/2004 - 7:10 PM
Value 0
Name: Installed
Type: REG_SZ
Data: 1


Key Name: HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run\OptionalComponents\MAPI
Class Name: <NO CLASS>
Last Write Time: 4/12/2004 - 7:10 PM
Value 0
Name: Installed
Type: REG_SZ
Data: 1

Value 1
Name: NoChange
Type: REG_SZ
Data: 1


Key Name: HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run\OptionalComponents\MSFS
Class Name: <NO CLASS>
Last Write Time: 4/12/2004 - 7:10 PM
Value 0
Name: Installed
Type: REG_SZ
Data: 1

 

[bcastner]

I am hesitant to make a removal entry suggestion. Could you try this software and post the results back here? The software is freeware and perfetly safe:

http://www.dougknox.com/xp/utils/xp_starttrack.htm

 

[Evil6]

Hi bcastner.

Thank you for answer. This is what I've come up with.

Cheers

-- Registry --
HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\RunOnce

No Items Found

-- Registry --
HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Run

iKeyWorks E:\PROGRA~1\Trust\\Keyboard\Ikeymain.exe
WheelMouse E:\PROGRA~1\Trust\\Mouse\Amoumain.exe
Cmaudio RunDll32 cmicnfg.cpl,CMICtrlWnd
NvCplDaemon RUNDLL32.EXE E:\WINDOWS\System32\NvCpl.dll,NvStartup
nwiz nwiz.exe /install
SpeedTouch USB Diagnostics "E:\Program Files\Alcatel\SpeedTouch USB\Dragdiag.exe" /icon
QuickTime Task "E:\Program Files\QuickTime\qttask.exe" -atboottime
SunJavaUpdateSched E:\Program Files\Java\j2re1.4.2_04\bin\jusched.exe
ccApp "E:\Program Files\Common Files\Symantec Shared\ccApp.exe"
URLLSTCK.exe E:\Program Files\Norton Internet Security Professional\UrlLstCk.exe
Advanced Tools Check E:\PROGRA~1\NORTON~1\NORTON~1\AdvTools\ADVCHK.EXE
BootWarn E:\Program Files\Norton Internet Security Professional\Norton AntiVirus\BootWarn.exe /a
CloneCDTray "E:\Program Files\CloneCD\CloneCDTray.exe" /s
TkBellExe "E:\Program Files\Common Files\Real\Update_OB\realsched.exe" -osboot
NeroFilterCheck E:\WINDOWS\system32\NeroCheck.exe

-- Registry --
HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\RunOnce

ICQ Lite E:\Program Files\ICQLite\ICQLite.exe -trayboot

-- Registry --
HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Run

NvMediaCenter RUNDLL32.EXE E:\WINDOWS\System32\NVMCTRAY.DLL,NvTaskbarInit

BTCLiveUpdate "E:\Program Files\LiveUpdate\LiveUpdate.exe" /autostart
Symantec NetDriver Monitor E:\PROGRA~1\Symantec\LIVEUP~1\SNDMon.EXE

-- Registry --
HKEY_USERS\.DEFAULT\Software\Microsoft\Windows\CurrentVersion\RunOnce

No Items Found

-- Start Menu - Current User --
No Items Found

-- Start Menu - All Users --
hp psc 1000 series.lnk
hpoddt01.exe.lnk
Microsoft Office.lnk

-- Disabled Items --
No Items Found

-- Registry - Shell Value - HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Winlogon --
Explorer.exe

-- Running Processes --
System Idle Process
System
smss.exe \SystemRoot\System32\smss.exe
csrss.exe
winlogon.exe winlogon.exe
services.exe E:\WINDOWS\system32\services.exe
lsass.exe E:\WINDOWS\system32\lsass.exe
svchost.exe E:\WINDOWS\system32\svchost -k rpcss
svchost.exe E:\WINDOWS\System32\svchost.exe -k netsvcs
svchost.exe
svchost.exe
CCSETMGR.EXE "E:\Program Files\Common Files\Symantec Shared\ccSetMgr.exe"
CCEVTMGR.EXE "E:\Program Files\Common Files\Symantec Shared\ccEvtMgr.exe"
spoolsv.exe E:\WINDOWS\system32\spoolsv.exe
CCPROXY.EXE "E:\Program Files\Common Files\Symantec Shared\ccProxy.exe"
NAVAPSVC.EXE "E:\Program Files\Norton Internet Security Professional\Norton AntiVirus\navapsvc.exe"
NPROTECT.EXE "E:\Program Files\Norton Internet Security Professional\Norton AntiVirus\AdvTools\NPROTECT.EXE"
nvsvc32.exe E:\WINDOWS\System32\nvsvc32.exe
SAVSCAN.EXE "E:\Program Files\Norton Internet Security Professional\Norton AntiVirus\SAVScan.exe"
svchost.exe E:\WINDOWS\System32\svchost.exe -k imgsvc
symlcsvc.exe "E:\Program Files\Common Files\Symantec Shared\CCPD-LC\symlcsvc.exe"
explorer.exe E:\WINDOWS\Explorer.EXE
Ikeymain.exe "E:\PROGRA~1\Trust\Keyboard\Ikeymain.exe"
Amoumain.exe "E:\PROGRA~1\Trust\Mouse\Amoumain.exe"
rundll32.exe "E:\WINDOWS\System32\RunDll32.exe" cmicnfg.cpl,CMICtrlWnd
dragdiag.exe "E:\Program Files\Alcatel\SpeedTouch USB\Dragdiag.exe" /icon
jusched.exe "E:\Program Files\Java\j2re1.4.2_04\bin\jusched.exe"
CCAPP.EXE "E:\Program Files\Common Files\Symantec Shared\ccApp.exe"
realsched.exe "E:\Program Files\Common Files\Real\Update_OB\realsched.exe" -osboot
rundll32.exe "E:\WINDOWS\System32\RUNDLL32.EXE" E:\WINDOWS\System32\NVMCTRAY.DLL,NvTaskbarInit
LiveUpdate.exe "E:\Program Files\LiveUpdate\LiveUpdate.exe" /autostart
hpohmr08.exe "E:\Program Files\Hewlett-Packard\Digital Imaging\bin\hpohmr08.exe"
hpotdd01.exe "E:\Program Files\Hewlett-Packard\Digital Imaging\bin\hpotdd01.exe"
hpoevm08.exe "E:\Program Files\Hewlett-Packard\Digital Imaging\bin\hpoevm08.exe" -Embedding
hposts08.exe "E:\Program Files\Hewlett-Packard\Digital Imaging\Bin\hpoSTS08.exe" /CtxID "#Hewlett-Packard#hp psc 1100 series#1081004578" /Startup
CiDial.exe "E:\Program Files\CiDial\CiDial.exe"
iexplore.exe "E:\Program Files\Internet Explorer\iexplore.exe"
OUTLOOK.EXE "E:\Program Files\Microsoft Office\Office10\OUTLOOK.EXE" /recycle
emule.exe "E:\Program Files\emule\emule.exe"
msmsgs.exe "E:\Program Files\Messenger\msmsgs.exe" -Embedding
WINZIP32.EXE E:\PROGRA~1\WINZIP\winzip32.exe "C:\Downloads\StartupTracker3.zip"
StartupTracker3.exe "C:\Downloads\StartupTracker3.exe"
wmiprvse.exe

-- Running Services --

Name: AudioSrv
Description: Manages audio devices for Windows-based programs. If this service is stopped, audio devices and effects will not function properly. If this service is disabled, any services that explicitly depend on it will fail to start.
Startup Mode: Auto
Run from: E:\WINDOWS\System32\svchost.exe -k netsvcs

Name: Browser
Description: Maintains an updated list of computers on the network and supplies this list to computers designated as browsers. If this service is stopped, this list will not be updated or maintained. If this service is disabled, any services that explicitly depend on it will fail to start.
Startup Mode: Auto
Run from: E:\WINDOWS\System32\svchost.exe -k netsvcs

Name: ccEvtMgr
Description: Symantec Event Manager
Startup Mode: Auto
Run from: "E:\Program Files\Common Files\Symantec Shared\ccEvtMgr.exe"

Name: ccProxy
Description: Symantec Network Proxy Service
Startup Mode: Auto
Run from: "E:\Program Files\Common Files\Symantec Shared\ccProxy.exe"

Name: ccSetMgr
Description: Symantec Settings Manager
Startup Mode: Auto
Run from: "E:\Program Files\Common Files\Symantec Shared\ccSetMgr.exe"

Name: CryptSvc
Description: Provides three management services: Catalog Database Service, which confirms the signatures of Windows files; Protected Root Service, which adds and removes Trusted Root Certification Authority certificates from this computer; and Key Service, which helps enroll this computer for certificates. If this service is stopped, these management services will not function properly. If this service is disabled, any services that explicitly depend on it will fail to start.
Startup Mode: Auto
Run from: E:\WINDOWS\system32\svchost.exe -k netsvcs

Name: Dhcp
Description: Manages network configuration by registering and updating IP addresses and DNS names.
Startup Mode: Auto
Run from: E:\WINDOWS\System32\svchost.exe -k netsvcs

Name: dmserver
Description: Detects and monitors new hard disk drives and sends disk volume information to Logical Disk Manager Administrative Service for configuration. If this service is stopped, dynamic disk status and configuration information may become out of date. If this service is disabled, any services that explicitly depend on it will fail to start.
Startup Mode: Auto
Run from: E:\WINDOWS\System32\svchost.exe -k netsvcs

Name: Dnscache
Description: Resolves and caches Domain Name System (DNS) names for this computer. If this service is stopped, this computer will not be able to resolve DNS names and locate Active Directory domain controllers. If this service is disabled, any services that explicitly depend on it will fail to start.
Startup Mode: Auto
Run from: E:\WINDOWS\System32\svchost.exe -k NetworkService

Name: ERSvc
Description: Allows error reporting for services and applictions running in non-standard environments.
Startup Mode: Auto
Run from: E:\WINDOWS\System32\svchost.exe -k netsvcs

Name: Eventlog
Description: Enables event log messages issued by Windows-based programs and components to be viewed in Event Viewer. This service cannot be stopped.
Startup Mode: Auto
Run from: E:\WINDOWS\system32\services.exe

Name: EventSystem
Description: Supports System Event Notification Service (SENS), which provides automatic distribution of events to subscribing Component Object Model (COM) components. If the service is stopped, SENS will close and will not be able to provide logon and logoff notifications. If this service is disabled, any services that explicitly depend on it will fail to start.
Startup Mode: Manual
Run from: E:\WINDOWS\System32\svchost.exe -k netsvcs

Name: FastUserSwitchingCompatibility
Description: Provides management for applications that require assistance in a multiple user environment.
Startup Mode: Manual
Run from: E:\WINDOWS\System32\svchost.exe -k netsvcs

Name: helpsvc
Description: Enables Help and Support Center to run on this computer. If this service is stopped, Help and Support Center will be unavailable. If this service is disabled, any services that explicitly depend on it will fail to start.
Startup Mode: Auto
Run from: E:\WINDOWS\System32\svchost.exe -k netsvcs

Name: Irmon
Description: Supports infrared devices installed on the computer and detects other devices that are in range.
Startup Mode: Auto
Run from: E:\WINDOWS\System32\svchost.exe -k netsvcs

Name: lanmanserver
Description: Supports file, print, and named-pipe sharing over the network for this computer. If this service is stopped, these functions will be unavailable. If this service is disabled, any services that explicitly depend on it will fail to start.
Startup Mode: Auto
Run from: E:\WINDOWS\System32\svchost.exe -k netsvcs

Name: lanmanworkstation
Description: Creates and maintains client network connections to remote servers. If this service is stopped, these connections will be unavailable. If this service is disabled, any services that explicitly depend on it will fail to start.
Startup Mode: Auto
Run from: E:\WINDOWS\System32\svchost.exe -k netsvcs

Name: LmHosts
Description: Enables support for NetBIOS over TCP/IP (NetBT) service and NetBIOS name resolution.
Startup Mode: Auto
Run from: E:\WINDOWS\System32\svchost.exe -k LocalService

Name: Messenger
Description: Transmits net send and Alerter service messages between clients and servers. This service is not related to Windows Messenger. If this service is stopped, Alerter messages will not be transmitted. If this service is disabled, any services that explicitly depend on it will fail to start.
Startup Mode: Auto
Run from: E:\WINDOWS\System32\svchost.exe -k netsvcs

Name: navapsvc
Description: Handles Norton AntiVirus Auto-Protect events.
Startup Mode: Auto
Run from: "E:\Program Files\Norton Internet Security Professional\Norton AntiVirus\navapsvc.exe"

Name: Netman
Description: Manages objects in the Network and Dial-Up Connections folder, in which you can view both local area network and remote connections.
Startup Mode: Manual
Run from: E:\WINDOWS\System32\svchost.exe -k netsvcs

Name: Nla
Description: Collects and stores network configuration and location information, and notifies applications when this information changes.
Startup Mode: Manual
Run from: E:\WINDOWS\System32\svchost.exe -k netsvcs

Name: NProtectService
Description:
Startup Mode: Auto
Run from: E:\Program Files\Norton Internet Security Professional\Norton AntiVirus\AdvTools\NPROTECT.EXE

Name: NVSvc
Description: Provides system and desktop level support to the NVIDIA display driver
Startup Mode: Auto
Run from: E:\WINDOWS\System32\nvsvc32.exe

Name: PlugPlay
Description: Enables a computer to recognize and adapt to hardware changes with little or no user input. Stopping or disabling this service will result in system instability.
Startup Mode: Auto
Run from: E:\WINDOWS\system32\services.exe

Name: PolicyAgent
Description: Manages IP security policy and starts the ISAKMP/Oakley (IKE) and the IP security driver.
Startup Mode: Auto
Run from: E:\WINDOWS\System32\lsass.exe

Name: ProtectedStorage
Description: Provides protected storage for sensitive data, such as private keys, to prevent access by unauthorized services, processes, or users.
Startup Mode: Auto
Run from: E:\WINDOWS\system32\lsass.exe

Name: RasMan
Description: Creates a network connection.
Startup Mode: Manual
Run from: E:\WINDOWS\System32\svchost.exe -k netsvcs

Name: RemoteRegistry
Description: Enables remote users to modify registry settings on this computer. If this service is stopped, the registry can be modified only by users on this computer. If this service is disabled, any services that explicitly depend on it will fail to start.
Startup Mode: Auto
Run from: E:\WINDOWS\system32\svchost.exe -k LocalService

Name: RpcSs
Description: Provides the endpoint mapper and other miscellaneous RPC services.
Startup Mode: Auto
Run from: E:\WINDOWS\system32\svchost -k rpcss

Name: SamSs
Description: Stores security information for local user accounts.
Startup Mode: Auto
Run from: E:\WINDOWS\system32\lsass.exe

Name: SAVScan
Description: Handles Norton AntiVirus Auto-Protect Archive Scanning
Startup Mode: Auto
Run from: E:\Program Files\Norton Internet Security Professional\Norton AntiVirus\SAVScan.exe

Name: Schedule
Description: Enables a user to configure and schedule automated tasks on this computer. If this service is stopped, these tasks will not be run at their scheduled times. If this service is disabled, any services that explicitly depend on it will fail to start.
Startup Mode: Auto
Run from: E:\WINDOWS\System32\svchost.exe -k netsvcs

Name: seclogon
Description: Enables starting processes under alternate credentials. If this service is stopped, this type of logon access will be unavailable. If this service is disabled, any services that explicitly depend on it will fail to start.
Startup Mode: Auto
Run from: E:\WINDOWS\System32\svchost.exe -k netsvcs

Name: SENS
Description: Tracks system events such as Windows logon, network, and power events. Notifies COM+ Event System subscribers of these events.
Startup Mode: Auto
Run from: E:\WINDOWS\system32\svchost.exe -k netsvcs

Name: ShellHWDetection
Description:
Startup Mode: Auto
Run from: E:\WINDOWS\System32\svchost.exe -k netsvcs

Name: Spooler
Description: Loads files to memory for later printing.
Startup Mode: Auto
Run from: E:\WINDOWS\system32\spoolsv.exe

Name: SSDPSRV
Description: Enables discovery of UPnP devices on your home network.
Startup Mode: Manual
Run from: E:\WINDOWS\System32\svchost.exe -k LocalService

Name: stisvc
Description: Provides image acquisition services for scanners and cameras.
Startup Mode: Auto
Run from: E:\WINDOWS\System32\svchost.exe -k imgsvc

Name: Symantec Core LC
Description: Symantec Core LC
Startup Mode: Auto
Run from: E:\Program Files\Common Files\Symantec Shared\CCPD-LC\symlcsvc.exe

Name: TapiSrv
Description: Provides Telephony API (TAPI) support for programs that control telephony devices and IP based voice connections on the local computer and, through the LAN, on servers that are also running the service.
Startup Mode: Manual
Run from: E:\WINDOWS\System32\svchost.exe -k netsvcs

Name: TermService
Description: Allows multiple users to be connected interactively to a machine as well as the display of desktops and applications to remote computers. The underpinning of Remote Desktop (including RD for Administrators), Fast User Switching, Remote Assistance, and Terminal Server.
Startup Mode: Manual
Run from: E:\WINDOWS\System32\svchost.exe -k netsvcs

Name: Themes
Description: Provides user experience theme management.
Startup Mode: Auto
Run from: E:\WINDOWS\System32\svchost.exe -k netsvcs

Name: TrkWks
Description: Maintains links between NTFS files within a computer or across computers in a network domain.
Startup Mode: Auto
Run from: E:\WINDOWS\system32\svchost.exe -k netsvcs

Name: uploadmgr
Description: Manages synchronous and asynchronous file transfers between clients and servers on the network. If this service is stopped, synchronous and asynchronous file transfers between clients and servers on the network will not occur. If this service is disabled, any services that explicitly depend on it will fail to start.
Startup Mode: Auto
Run from: E:\WINDOWS\System32\svchost.exe -k netsvcs

Name: W32Time
Description: Maintains date and time synchronization on all clients and servers in the network. If this service is stopped, date and time synchronization will be unavailable. If this service is disabled, any services that explicitly depend on it will fail to start.

Startup Mode: Auto
Run from: E:\WINDOWS\System32\svchost.exe -k netsvcs

Name: WebClient
Description: Enables Windows-based programs to create, access, and modify Internet-based files. If this service is stopped, these functions will not be available. If this service is disabled, any services that explicitly depend on it will fail to start.
Startup Mode: Auto
Run from: E:\WINDOWS\System32\svchost.exe -k LocalService

Name: winmgmt
Description: Provides a common interface and object model to access management information about operating system, devices, applications and services. If this service is stopped, most Windows-based software will not function properly. If this service is disabled, any services that explicitly depend on it will fail to start.
Startup Mode: Auto
Run from: E:\WINDOWS\system32\svchost.exe -k netsvcs

Name: wuauserv
Description: Enables the download and installation of critical Windows updates. If the service is disabled, the operating system can be manually updated at the Windows Update Web site.
Startup Mode: Auto
Run from: E:\WINDOWS\system32\svchost.exe -k netsvcs

Name: WZCSVC
Description: Provides automatic configuration for the 802.11 adapters
Startup Mode: Auto
Run from: E:\WINDOWS\System32\svchost.exe -k netsvcs

 

[Evil6]

Hi bcastner. Wasn't this what you were looking for?

Cheers

 

[tsuji]

Hello Evil6,

Take a look at the line you reported

-- Registry - Shell Value - HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Winlogon --
Explorer.exe

Temporarily take out "explorer.exe", see what you get. (You can restore it back later.)

regards - tsuji

 

[bcastner]

Tsjui, the Shell entry for \..\Winlogon should be Explorer.exe

See if in c:\Documents and Settings\username\Start Menu\Programs\Startup

There exists a folder for the NIS program. Temprarily drag and drop it somewhere else and test again.

 

[tsuji]

Hello bcastner, Evil6

I thought it meant the default. Absolutely, if it meant "shell"="explorer.exe", I am 100% wrong. (After you said so, I now see what it meant "Shell Value") I stand corrected. Thanks.

Evil6, I take back my bad advice and I apologize. Sorry. Glad bcastner points it out.

regards - tsuji

 

[Evil6]

Hi bcastner and tsuji.

Don't worry, tsuji, you were trying to help. I thank you.

About your suggestion, bcastner, no, there's no NIS folder on my startup folder (and for that matter, neither on the All users and on the other profile I've created).

 

[Evil6]

Bcastner, do you have any more suggestions?

 

[gpalmer711]

Open My Computer, Click on Tools then Folder Options.

Click on the View Tab and then scroll down to near the bottom of the options.

"Restore previous folder windows at logon", is that ticked? If so untick it and reboot. Do you get the same problem?

If not try re-enabling the option and again reboot. Does the folder appear?

Greg Palmer
Free Software for Adminstrators

http://www.palmersoft.co.uk

 

[bcastner]

Your startup appears clean, but these two entries bother me:

NvCplDaemon RUNDLL32.EXE E:\WINDOWS\System32\NvCpl.dll,NvStartup nwiz nwiz.exe /install

I do not have NIS 2004, so these may well be valid entries.

Try a very thorough use of faq608-4650
I am curious is Adaware, Spybot or Hijack have issues with your startup.

(And you were very nice to Tsuji above. Usually the shoe is on the other foot and Tsuji corrects me!)

 

[gpalmer711]

The 2 entries above relate to Nvidia graphics drivers, they can both be removed safely and the Nvida card will still work.

One relates to the Display Settings plugin, the other relates to the nView Desktop Extension.

Greg Palmer
Free Software for Adminstrators

http://www.palmersoft.co.uk

 

[Marcs41]

Entries that can (should) be disabled :

Value 2
Name: Cmaudio
Type: REG_SZ
Data: RunDll32 cmicnfg.cpl,CMICtrlWnd

Value 3
Name: NvCplDaemon
Type: REG_SZ
Data: RUNDLL32.EXE E:\WINDOWS\System32\NvCpl.dll,NvStartup

Value 4
Name: nwiz
Type: REG_SZ
Data: nwiz.exe /install

Value 6
Name: QuickTime Task
Type: REG_SZ
Data: "E:\Program Files\QuickTime\qttask.exe" -atboottime

Value 7
Name: SunJavaUpdateSched
Type: REG_SZ
Data: E:\Program Files\Java\j2re1.4.2_04\bin\jusched.exe

Value 12
Name: CloneCDTray
Type: REG_SZ
Data: "E:\Program Files\CloneCD\CloneCDTray.exe" /s

Value 13
Name: TkBellExe
Type: REG_SZ
Data: "E:\Program Files\Common Files\Real\Update_OB\realsched.exe" -osboot

Value 14
Name: NeroFilterCheck
Type: REG_SZ
Data: E:\WINDOWS\system32\NeroCheck.exe

Marc
_{If 'something' 'somewhere' gives 'some' error, expect random guesses or no replies at all. Please specify details.
Free Tip: The F1 Key does NOT destroy your PC!}
How Do I Get Great Answers To my Tek-Tips Questions? See faq222-2244

 

[gpalmer711]

If you use the TV Out or Desktop Splitting/Spanning options on your Nvidia Card you need to have the following enabled on start-up.

Value 3
Name: NvCplDaemon
Type: REG_SZ
Data: RUNDLL32.EXE E:\WINDOWS\System32\NvCpl.dll,NvStartup

Value 4
Name: nwiz
Type: REG_SZ
Data: nwiz.exe /install



Greg Palmer
Free Software for Adminstrators

http://www.palmersoft.co.uk

 

[Evil6]

Hello all. Thank you for your answers.

Let's go, in parts:

gpalmer711:

Yes, I've already tried that option of unmarking that option on the view tab, but it has no effect.

If I've understand it correctly, and since I don't use TV-out or spanning, would it be safe to delete all those options form registry? Including the NVIDIA ones?

bcastner:

As I said, he was trying to help and I'm not rushing off to do the 1st thing anyone tells me here to do. So, no harms done. I thank you for your posts. Although, I cannot open the FAQ you advised me. Is it still online?

Cheers!

 

[bcastner]

Evil6,

Boy I hope faq608-4650 is still online.

There is a Forum on Tek-Tips "Browser Issues for IT Professionals", and if you click the FAQ button in that forum you should find my FAQ entitled something like "Before Posting a Hijack This log - best practices".

Thanks to many helpers, this is a reasonable step-by-step appproach to a system cleanup.

Best wishes,
Bill Castner

 

[Evil6]

Bcastner,

Ok, during the afternoon, I wasn't able to get it, but now I am, so, I'll read it carefully and I'll let you know of any doubts that may appear.

Once again, thanx.

Cheers!