Hi,
Could you please export and post the contents of these keys in the
registry:
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Run
To do this, start/run regedit, expand the branches to each key (do this
one
at a time). Click on the key, then on file/export. Give it any name, then
save to the desktop. Once you have saved both keys, close the registry
editor. Right-click one of the saved files on the desktop, choose edit, it
should open in notepad. Click edit/select all/edit/copy. Open a response
to
this post and click in the message text area. Hit ctrl+v to paste the
contents. Repeat for the other saved key, then send the post for
examination.
Hi firstly many thanks for your help and here are the details as
requested.
Windows Registry Editor Version 5.00
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]
"NvCplDaemon"="RUNDLL32.EXE
C:\\WINDOWS\\system32\\NvCpl.dll,NvStartup"
"PrinTray"="C:\\WINDOWS\\System32\\spool\\DRIVERS\\W32X86\\3\\printray.exe"
"nwiz"="nwiz.exe /install"
"BCMSMMSG"="BCMSMMSG.exe"
"POINTER"="point32.exe"
"NeroFilterCheck"="C:\\WINDOWS\\system32\\NeroCheck.exe"
"REGSHAVE"="C:\\Program Files\\REGSHAVE\\REGSHAVE.EXE /AUTORUN"
"EPSON
PictureMate"="C:\\WINDOWS\\System32\\spool\\DRIVERS\\W32X86\\3\\E_S4I0P1.EXE
/P17 \"EPSON PictureMate\" /O6 \"USB002\" /M \"PictureMate\""
"QuickTime Task"="\"C:\\Program Files\\QuickTime\\qttask.exe\"
-atboottime"
"NvMediaCenter"="RUNDLL32.EXE
C:\\WINDOWS\\system32\\NvMcTray.dll,NvTaskbarInit"
"gcasServ"="\"C:\\Program Files\\Microsoft
AntiSpyware\\gcasServ.exe\""
"CorelDRAW Graphics Suite 11b"="C:\\Program Files\\Corel\\Corel
Graphics 12\\Languages\\EN\\Programs\\Registration.exe
/title=\"CorelDRAW Graphics Suite 12\" /date=070505
serial=DR12WNP-9936859-UJJ lang=EN"
"AcctMgr"="C:\\Program Files\\Norton Password Manager\\AcctMgr.exe
/startup"
"UserFaultCheck"=hex(2):25,00,73,00,79,00,73,00,74,00,65,00,6d,00,72,00,6f,00,\
6f,00,74,00,25,00,5c,00,73,00,79,00,73,00,74,00,65,00,6d,00,33,00,32,00,5c,\
00,64,00,75,00,6d,00,70,00,72,00,65,00,70,00,20,00,30,00,20,00,2d,00,75,00,\
00,00
"ccApp"="\"C:\\Program Files\\Common Files\\Symantec
Shared\\ccApp.exe\""
"Symantec NetDriver Monitor"="C:\\PROGRA~1\\SYMNET~1\\SNDMon.exe
/Consumer"
"Lexmark X73 Button
Monitor"="C:\\PROGRA~1\\LEXMAR~1\\ACMonitor_X73.exe"
"Lexmark X73 Button
Manager"="C:\\PROGRA~1\\LEXMAR~1\\AcBtnMgr_X73.exe"
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run\OptionalComponents]
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run\OptionalComponents\IMAIL]
"Installed"="1"
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run\OptionalComponents\MAPI]
"Installed"="1"
"NoChange"="1"
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run\OptionalComponents\MSFS]
"Installed"="1"
Windows Registry Editor Version 5.00
[HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Run]
"CTFMON.EXE"="C:\\WINDOWS\\system32\\ctfmon.exe"
"H/PC Connection Agent"="\"C:\\Program Files\\Microsoft
ActiveSync\\WCESCOMM.EXE\""
"MtdAcq"="C:\\Program Files\\Creative\\Shared Files\\Media
Sniffer\\MtdAcq.EXE /s"
"MSMSGS"="\"C:\\Program Files\\Messenger\\msmsgs.exe\" /background"
"NvMediaCenter"="RUNDLL32.EXE
C:\\WINDOWS\\system32\\NVMCTRAY.DLL,NvTaskbarInit"
"MessengerPlus3"="\"\\\" /WinStart"
Best regards
PLM