Help on Start Up

  • Thread starter Thread starter Frank Button
  • Start date Start date
F

Frank Button

When I start up my computer (XP Home) each time I start My Computer launches
automatically in the same folder each time. I have checked everywhere I can
think of to find the reason but can not stop it.

I would appreciate any advice as to what to look for.

Frank
 
Check:
Start/Run/control folders/View/Uncheck Restore previous folder windows
at logon

Please advise which folder is opening everytime you boot so someone can give you
more specific instructions on the problem.
 
Hi Frank,

What folder?

--
Best of Luck,

Rick Rogers aka "Nutcase" MS-MVP - Win9x
Windows isn't rocket science! That's my other hobby!

Associate Expert - WinXP - Expert Zone
 
Thanks for responding, the file that opens is C:/program files/Common
File/Microsoft.

Frank
 
Thanks for responding, the file that opens is C:/program files/Common
File/Microsoft.

Frank
 
Hi Frank,

Start/run msinfo32, expand the software environment and click on the startup
programs. See if there is a line here that either loads it or is "broken" at
that point of the file path. Make note of where it is loading from and post
back with this information.

--
Best of Luck,

Rick Rogers aka "Nutcase" MS-MVP - Win9x
Windows isn't rocket science! That's my other hobby!

Associate Expert - WinXP - Expert Zone
 
I can not find the specific folder reference but a lot of programs that I do
not regocognize are loading from HKLM\Software\Microsoft\Windows\current
Version\Run and from HKU\S-1-2 -5-16
.....................\Software\Microsoft\windows\current Version. The
.............. is a very long number. Some of these programs such as Mcafee
and MS works are no longer on my computer.

Thank you for trying to help.

Frank
 
Hi Frank,

Can you copy/paste the following registry keys?

HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Run

To do this, start/run regedit, expand the branches to each key (do this one
at a time). Click on the key, then on file/export. Give it any name, then
save to the desktop. Once you have saved both keys, close the registry
editor. Right-click one of the saved files on the desktop, choose edit, it
should open in notepad. Click edit/select all/edit/copy. Open a response to
this post and click in the message text area. Hit ctrl+v to paste the
contents. Repeat for the other saved key, then send the post for
examination.

--
Best of Luck,

Rick Rogers aka "Nutcase" MS-MVP - Win9x
Windows isn't rocket science! That's my other hobby!

Associate Expert - WinXP - Expert Zone
 
HI Rick, I have been away on business. Sorry it took a while to reply. I
appreciate your help. The following is the info that you asked for.

Windows Registry Editor Version 5.00

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]
"SiS7012Utility"="C:\\WINDOWS\\System32\\SiSAudUt.exe -wdm"
"EM_EXEC"="C:\\PROGRA~1\\Logitech\\MOUSEW~1\\SYSTEM\\EM_EXEC.EXE"
"MMTray"="C:\\Program Files\\MUSICMATCH\\MUSICMATCH Jukebox\\mm_tray.exe"
"QuickTime Task"="\"C:\\Program Files\\QuickTime\\qttask.exe\" -atboottime"
"AdaptecDirectCD"="C:\\Program Files\\Roxio\\Easy CD Creator
5\\DirectCD\\DirectCD.exe"
"Microsoft Works Update Detection"="C:\\Program Files\\Common
Files\\Microsoft Shared\\Works Shared\\WkUFind.exe"
"WinampAgent"="\"C:\\Program Files\\Winamp\\Winampa.exe\""
"MyWebSearch Email
Plugin"="C:\\PROGRA~1\\MYWEBS~1\\bar\\1.bin\\mwsoemon.exe"
"TkBellExe"="\"C:\\Program Files\\Common
Files\\Real\\Update_OB\\realsched.exe\" -osboot"
"ccApp"="\"C:\\Program Files\\Common Files\\Symantec Shared\\ccApp.exe\""
"AcctMgr"="C:\\Program Files\\Norton SystemWorks\\Password
Manager\\AcctMgr.exe /startup"
"MoneyStartUp10.0"="\"C:\\Program Files\\Microsoft
Money\\System\\Activation.exe\""
"KernelFaultCheck"=hex(2):25,00,73,00,79,00,73,00,74,00,65,00,6d,00,72,00,6f
,\

00,6f,00,74,00,25,00,5c,00,73,00,79,00,73,00,74,00,65,00,6d,00,33,00,32,00,\

5c,00,64,00,75,00,6d,00,70,00,72,00,65,00,70,00,20,00,30,00,20,00,2d,00,6b,\
00,00,00
"mmtask"="C:\\Program Files\\MUSICMATCH\\MUSICMATCH Jukebox\\mmtask.exe"

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run\OptionalCo
mponents]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run\OptionalCo
mponents\IMAIL]
"Installed"="1"

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run\OptionalCo
mponents\MAPI]
"Installed"="1"
"NoChange"="1"

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run\OptionalCo
mponents\MSFS]
"Installed"="1"

Windows Registry Editor Version 5.00

[HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Run]
"ctfmon.exe"="C:\\WINDOWS\\System32\\ctfmon.exe"
"Microsoft Works Update Detection"="C:\\Program Files\\Microsoft
Works\\WkDetect.exe"
"Mozilla Quick Launch"="\"C:\\Program
Files\\Netscape\\Netscape\\Netscp.exe\" -turbo"
"MoneyAgent"="\"C:\\Program Files\\Microsoft Money\\System\\Money
Express.exe\""
"McAfee.InstantUpdate.Monitor"="\"C:\\Program Files\\McAfee\\McAfee Shared
Components\\Instant Updater\\RuLaunch.exe\" /STARTMONITOR"
 
Hi Frank,

First, remove this:
Plugin"="C:\\PROGRA~1\\MYWEBS~1\\bar\\1.bin\\mwsoemon.exe"
Click to expand...

This is why:
http://www.kephyr.com/spywarescanner/library/websearchtoolbar.emailplug/index.phtml

Then, start/run msconfig and disable (uncheck) these:
"Microsoft Works Update Detection"="C:\\Program Files\\Common
Files\\Microsoft Shared\\Works Shared\\WkUFind.exe"
Click to expand...
"TkBellExe"="\"C:\\Program Files\\Common
Files\\Real\\Update_OB\\realsched.exe\" -osboot"
Click to expand...
"ccApp"="\"C:\\Program Files\\Common Files\\Symantec Shared\\ccApp.exe\""
Click to expand...

See if this helps.

--
Best of Luck,

Rick Rogers aka "Nutcase" MS-MVP - Win9x
Windows isn't rocket science! That's my other hobby!

Associate Expert - WinXP - Expert Zone



Frank Button said:
HI Rick, I have been away on business. Sorry it took a while to reply. I
appreciate your help. The following is the info that you asked for.

Windows Registry Editor Version 5.00

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]
"SiS7012Utility"="C:\\WINDOWS\\System32\\SiSAudUt.exe -wdm"
"EM_EXEC"="C:\\PROGRA~1\\Logitech\\MOUSEW~1\\SYSTEM\\EM_EXEC.EXE"
"MMTray"="C:\\Program Files\\MUSICMATCH\\MUSICMATCH Jukebox\\mm_tray.exe"
"QuickTime Task"="\"C:\\Program
Files\\QuickTime\\qttask.exe\" -atboottime"
"AdaptecDirectCD"="C:\\Program Files\\Roxio\\Easy CD Creator
5\\DirectCD\\DirectCD.exe"
Click to expand...
"WinampAgent"="\"C:\\Program Files\\Winamp\\Winampa.exe\""
"MyWebSearch Email
Click to expand...
"AcctMgr"="C:\\Program Files\\Norton SystemWorks\\Password
Manager\\AcctMgr.exe /startup"
"MoneyStartUp10.0"="\"C:\\Program Files\\Microsoft
Money\\System\\Activation.exe\""
"KernelFaultCheck"=hex(2):25,00,73,00,79,00,73,00,74,00,65,00,6d,00,72,00,6f
,\

00,6f,00,74,00,25,00,5c,00,73,00,79,00,73,00,74,00,65,00,6d,00,33,00,32,00,\

5c,00,64,00,75,00,6d,00,70,00,72,00,65,00,70,00,20,00,30,00,20,00,2d,00,6b,\
00,00,00
"mmtask"="C:\\Program Files\\MUSICMATCH\\MUSICMATCH Jukebox\\mmtask.exe"

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run\OptionalCo
mponents]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run\OptionalCo
mponents\IMAIL]
"Installed"="1"

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run\OptionalCo
mponents\MAPI]
"Installed"="1"
"NoChange"="1"

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run\OptionalCo
mponents\MSFS]
"Installed"="1"

Windows Registry Editor Version 5.00

[HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Run]
"ctfmon.exe"="C:\\WINDOWS\\System32\\ctfmon.exe"
"Microsoft Works Update Detection"="C:\\Program Files\\Microsoft
Works\\WkDetect.exe"
"Mozilla Quick Launch"="\"C:\\Program
Files\\Netscape\\Netscape\\Netscp.exe\" -turbo"
"MoneyAgent"="\"C:\\Program Files\\Microsoft Money\\System\\Money
Express.exe\""
"McAfee.InstantUpdate.Monitor"="\"C:\\Program Files\\McAfee\\McAfee Shared
Components\\Instant Updater\\RuLaunch.exe\" /STARTMONITOR"

Rick "Nutcase" Rogers said:
Hi Frank,

Can you copy/paste the following registry keys?

HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Run

To do this, start/run regedit, expand the branches to each key (do this one
at a time). Click on the key, then on file/export. Give it any name, then
save to the desktop. Once you have saved both keys, close the registry
editor. Right-click one of the saved files on the desktop, choose edit,
it
should open in notepad. Click edit/select all/edit/copy. Open a response to
this post and click in the message text area. Hit ctrl+v to paste the
contents. Repeat for the other saved key, then send the post for
examination.

--
Best of Luck,

Rick Rogers aka "Nutcase" MS-MVP - Win9x
Windows isn't rocket science! That's my other hobby!

Associate Expert - WinXP - Expert Zone



I
Click to expand...
Click to expand...
 
That did it. I no longer get My Computer starting up after a restart.

I deleted MWSOEMON.exe and did not miss anything. ccApp.exe stopped my
Norton Antispam so I put it back on with no problems. I have WkUFind.exe
and realsched.exe are still disabled in msconfig and I do not miss either.
The only problem now is that windows starts in a selective start up mode.

Can I get rid of the two offending files and start up in normal mode?

Thanks again for your help.

Frank


Rick "Nutcase" Rogers said:
Hi Frank,

First, remove this:
Plugin"="C:\\PROGRA~1\\MYWEBS~1\\bar\\1.bin\\mwsoemon.exe"
Click to expand...

This is why:
http://www.kephyr.com/spywarescanner/library/websearchtoolbar.emailplug/inde
x.phtml

Then, start/run msconfig and disable (uncheck) these:
"Microsoft Works Update Detection"="C:\\Program Files\\Common
Files\\Microsoft Shared\\Works Shared\\WkUFind.exe"
Click to expand...
"TkBellExe"="\"C:\\Program Files\\Common
Files\\Real\\Update_OB\\realsched.exe\" -osboot"
Click to expand...
"ccApp"="\"C:\\Program Files\\Common Files\\Symantec
Click to expand...
Shared\\ccApp.exe\""

See if this helps.

--
Best of Luck,

Rick Rogers aka "Nutcase" MS-MVP - Win9x
Windows isn't rocket science! That's my other hobby!

Associate Expert - WinXP - Expert Zone



Frank Button said:
HI Rick, I have been away on business. Sorry it took a while to reply. I
appreciate your help. The following is the info that you asked for.

Windows Registry Editor Version 5.00

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]
"SiS7012Utility"="C:\\WINDOWS\\System32\\SiSAudUt.exe -wdm"
"EM_EXEC"="C:\\PROGRA~1\\Logitech\\MOUSEW~1\\SYSTEM\\EM_EXEC.EXE"
"MMTray"="C:\\Program Files\\MUSICMATCH\\MUSICMATCH Jukebox\\mm_tray.exe"
"QuickTime Task"="\"C:\\Program
Files\\QuickTime\\qttask.exe\" -atboottime"
"AdaptecDirectCD"="C:\\Program Files\\Roxio\\Easy CD Creator
5\\DirectCD\\DirectCD.exe"
Click to expand...
"WinampAgent"="\"C:\\Program Files\\Winamp\\Winampa.exe\""
"MyWebSearch Email
Click to expand...
"AcctMgr"="C:\\Program Files\\Norton SystemWorks\\Password
Manager\\AcctMgr.exe /startup"
"MoneyStartUp10.0"="\"C:\\Program Files\\Microsoft
Money\\System\\Activation.exe\""
"KernelFaultCheck"=hex(2):25,00,73,00,79,00,73,00,74,00,65,00,6d,00,72,00,6f
,\

00,6f,00,74,00,25,00,5c,00,73,00,79,00,73,00,74,00,65,00,6d,00,33,00,32,00,\

5c,00,64,00,75,00,6d,00,70,00,72,00,65,00,70,00,20,00,30,00,20,00,2d,00,6b,\
00,00,00
"mmtask"="C:\\Program Files\\MUSICMATCH\\MUSICMATCH Jukebox\\mmtask.exe"

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run\OptionalCo
mponents]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run\OptionalCo
mponents\IMAIL]
"Installed"="1"

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run\OptionalCo
mponents\MAPI]
"Installed"="1"
"NoChange"="1"

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run\OptionalCo
mponents\MSFS]
"Installed"="1"

Windows Registry Editor Version 5.00

[HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Run]
"ctfmon.exe"="C:\\WINDOWS\\System32\\ctfmon.exe"
"Microsoft Works Update Detection"="C:\\Program Files\\Microsoft
Works\\WkDetect.exe"
"Mozilla Quick Launch"="\"C:\\Program
Files\\Netscape\\Netscape\\Netscp.exe\" -turbo"
"MoneyAgent"="\"C:\\Program Files\\Microsoft Money\\System\\Money
Express.exe\""
"McAfee.InstantUpdate.Monitor"="\"C:\\Program Files\\McAfee\\McAfee Shared
Components\\Instant Updater\\RuLaunch.exe\" /STARTMONITOR"

Rick "Nutcase" Rogers said:
Hi Frank,

Can you copy/paste the following registry keys?

HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Run

To do this, start/run regedit, expand the branches to each key (do this one
at a time). Click on the key, then on file/export. Give it any name, then
save to the desktop. Once you have saved both keys, close the registry
editor. Right-click one of the saved files on the desktop, choose edit,
it
should open in notepad. Click edit/select all/edit/copy. Open a
Click to expand...
response
to
this post and click in the message text area. Hit ctrl+v to paste the
contents. Repeat for the other saved key, then send the post for
examination.

--
Best of Luck,

Rick Rogers aka "Nutcase" MS-MVP - Win9x
Windows isn't rocket science! That's my other hobby!

Associate Expert - WinXP - Expert Zone



I can not find the specific folder reference but a lot of programs
Click to expand...
that
I
do
not regocognize are loading from
HKLM\Software\Microsoft\Windows\current
Version\Run and from HKU\S-1-2 -5-16
....................\Software\Microsoft\windows\current Version. The
............. is a very long number. Some of these programs such as
Mcafee
and MS works are no longer on my computer.

Thank you for trying to help.

Frank


Hi Frank,

Start/run msinfo32, expand the software environment and click on the
startup
programs. See if there is a line here that either loads it or is
"broken"
at
that point of the file path. Make note of where it is loading from
and
post
back with this information.

--
Best of Luck,

Rick Rogers aka "Nutcase" MS-MVP - Win9x
Windows isn't rocket science! That's my other hobby!

Associate Expert - WinXP - Expert Zone



Thanks for responding, the file that opens is C:/program files/Common
File/Microsoft.

Frank


Hi Frank,

What folder?

--
Best of Luck,

Rick Rogers aka "Nutcase" MS-MVP - Win9x
Windows isn't rocket science! That's my other hobby!

Associate Expert - WinXP - Expert Zone




When I start up my computer (XP Home) each time I start My
Computer
launches
automatically in the same folder each time. I have checked
everywhere
I
can
think of to find the reason but can not stop it.

I would appreciate any advice as to what to look for.

Frank
Click to expand...
Click to expand...
Click to expand...
 
Back
Top