removing applications and files from start-up

  • Thread starter Thread starter Bob
  • Start date Start date
B

Bob

When my computer first boots up I get a System 32 folder
and a bunch of pop-up windows asking if I want to upgrade
my virus product. Is there an easy way to get rid of
these items?
 
Hi Bob,

Please see:

System32 Folder Opens When Logging on to Windows
http://support.microsoft.com/?kbid=170086

Also, start/run msconfig, and see if there is a line that loads /L:ENG. It
comes from a SoundBlaster Audigy driver, and it can cause this problem as
well. If it exists, use the registry fix from MVP Kelly:

Line 260 on the right:
http://www.kellys-korner-xp.com/xp_tweaks.htm

It's far easier than mucking about in the registry. The problem can also be
caused by other incorrectly built registry strings. So, if the first two
steps don't help you, could you please export and post the contents of these
keys in the registry:

HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Run

To do this, start/run regedit, expand the branches to each key (do this one
at a time). Click on the key, then on file/export. Give it any name, then
save to the desktop. Once you have saved both keys, close the registry
editor. Right-click one of the saved files on the desktop, choose edit, it
should open in notepad. Click edit/select all/edit/copy. Open a response to
this post and click in the message text area. Hit ctrl+v to paste the
contents. Repeat for the other saved key, then send the post for
examination.

--
Best of Luck,

Rick Rogers aka "Nutcase" MS-MVP - Win9x
Windows isn't rocket science! That's my other hobby!

Associate Expert - WinXP - Expert Zone
 
Rick,
Your instructions have already been very helpful. By
using the line from Kelly'sKorner I was able to remove the
system 32 file folder on start up. By I still have the
AOL Instant Messenger screen name and the AOL sign on menu
along with the McAfee scan center notice all of which show
up at boot-up. Can you help me remove these? I have
followed your instructions and copied both of the keys you
suggested from the registry.

Windows Registry Editor Version 5.00

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersi
on\Run]
"NvCplDaemon"="RUNDLL32.EXE C:\\WINDOWS\\System32
\\NvCpl.dll,NvStartup"
"BCMSMMSG"="BCMSMMSG.exe"
"DVDSentry"="C:\\WINDOWS\\System32\\DSentry.exe"
"CTSysVol"="C:\\Program Files\\Creative\\SBAudigy2
\\Surround Mixer\\CTSysVol.exe"
"CTDVDDet"="C:\\Program Files\\Creative\\SBAudigy2
\\DVDAudio\\CTDVDDet.EXE"
"CTHelper"="CTHELPER.EXE"
"AsioReg"="REGSVR32.EXE /S CTASIO.DLL"
"UpdReg"="C:\\WINDOWS\\UpdReg.EXE"
"MCAgentExe"="c:\\PROGRA~1\\mcafee.com\\agent\\mcagent.exe"
"MCUpdateExe"="C:\\PROGRA~1
\\mcafee.com\\agent\\mcupdate.exe"
"TkBellExe"="\"C:\\Program Files\\Common
Files\\Real\\Update_OB\\realsched.exe\" -osboot"
"VirusScan Online"="\"c:\\PROGRA~1
\\mcafee.com\\vso\\mcvsshld.exe\""
"DwlClient"="C:\\Program Files\\Common
Files\\Dell\\EUSW\\Support.exe"
"Microsoft Works Update Detection"="C:\\Program
Files\\Common Files\\Microsoft Shared\\Works
Shared\\WkUFind.exe"
"VSOCheckTask"="\"c:\\PROGRA~1
\\mcafee.com\\vso\\mcmnhdlr.exe\" /checktask"
"HPDJ Taskbar Utility"="C:\\WINDOWS\\System32
\\spool\\drivers\\w32x86\\3\\hpztsb05.exe"
"RoxioEngineUtility"="\"C:\\Program Files\\Common
Files\\Roxio Shared\\System\\EngUtil.exe\""
"RoxioDragToDisc"="\"C:\\Program Files\\Roxio\\Easy CD
Creator 6\\DragToDisc\\DrgToDsc.exe\""
"RoxioAudioCentral"="\"C:\\Program Files\\Roxio\\Easy CD
Creator 6\\AudioCentral\\RxMon.exe\""
"QuickTime Task"="\"C:\\Program
Files\\QuickTime\\qttask.exe\" -atboottime"
"P2P Networking"="C:\\WINDOWS\\System32\\P2P
Networking\\P2P Networking.exe /AUTOSTART"
"AltnetPointsManager"="c:\\program files\\altnet\\points
manager\\points manager.exe -s"
"NeroCheck"="C:\\WINDOWS\\system32\\NeroCheck.exe"
"stcloader"="C:\\WINDOWS\\System32\\stcloader.exe"
"spoolsvv"="C:\\WINDOWS\\SYSTEM32\\spoolsvv.exe -invisible"
"New.net Startup"="rundll32 C:\\PROGRA~1\\NEWDOT~1
\\NEWDOT~1.DLL,NewDotNetStartup"
"slmss"="C:\\Program Files\\Common Files\\slmss\\slmss.exe"
"Mwsvm"="C:\\WINDOWS\\mwsvm.exe"

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersi
on\Run\OptionalComponents]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersi
on\Run\OptionalComponents\IMAIL]
"Installed"="1"

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersi
on\Run\OptionalComponents\MAPI]
"Installed"="1"
"NoChange"="1"

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersi
on\Run\OptionalComponents\MSFS]
"Installed"="1"

Windows Registry Editor Version 5.00

[HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersio
n\Run]
"MSMSGS"="\"C:\\Program
Files\\Messenger\\msmsgs.exe\" /background"
"SB Audigy 2 Startup Menu"="/L:ENG"
"Weather"="C:\\PROGRA~1\\AWS\\WEATHE~1\\Weather.exe 1"
"Kontiki"="\"C:\\Program
Files\\Kontiki\\bin\\kontiki.exe\" -s Kontiki -q"
"ctfmon.exe"="C:\\WINDOWS\\System32\\ctfmon.exe"
"AIM"="C:\\PROGRA~1\\AIM\\aim.exe -cnetwait.odl"
 
Hi Bob,

You don't really need to do anything more than disable them on the startup
tab of msconfig. Just enter it into a start/run prompt and go from there.

--
Best of Luck,

Rick Rogers aka "Nutcase" MS-MVP - Win9x
Windows isn't rocket science! That's my other hobby!

Associate Expert - WinXP - Expert Zone



Bob said:
Rick,
Your instructions have already been very helpful. By
using the line from Kelly'sKorner I was able to remove the
system 32 file folder on start up. By I still have the
AOL Instant Messenger screen name and the AOL sign on menu
along with the McAfee scan center notice all of which show
up at boot-up. Can you help me remove these? I have
followed your instructions and copied both of the keys you
suggested from the registry.

Windows Registry Editor Version 5.00

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersi
on\Run]
"NvCplDaemon"="RUNDLL32.EXE C:\\WINDOWS\\System32
\\NvCpl.dll,NvStartup"
"BCMSMMSG"="BCMSMMSG.exe"
"DVDSentry"="C:\\WINDOWS\\System32\\DSentry.exe"
"CTSysVol"="C:\\Program Files\\Creative\\SBAudigy2
\\Surround Mixer\\CTSysVol.exe"
"CTDVDDet"="C:\\Program Files\\Creative\\SBAudigy2
\\DVDAudio\\CTDVDDet.EXE"
"CTHelper"="CTHELPER.EXE"
"AsioReg"="REGSVR32.EXE /S CTASIO.DLL"
"UpdReg"="C:\\WINDOWS\\UpdReg.EXE"
"MCAgentExe"="c:\\PROGRA~1\\mcafee.com\\agent\\mcagent.exe"
"MCUpdateExe"="C:\\PROGRA~1
\\mcafee.com\\agent\\mcupdate.exe"
"TkBellExe"="\"C:\\Program Files\\Common
Files\\Real\\Update_OB\\realsched.exe\" -osboot"
"VirusScan Online"="\"c:\\PROGRA~1
\\mcafee.com\\vso\\mcvsshld.exe\""
"DwlClient"="C:\\Program Files\\Common
Files\\Dell\\EUSW\\Support.exe"
"Microsoft Works Update Detection"="C:\\Program
Files\\Common Files\\Microsoft Shared\\Works
Shared\\WkUFind.exe"
"VSOCheckTask"="\"c:\\PROGRA~1
\\mcafee.com\\vso\\mcmnhdlr.exe\" /checktask"
"HPDJ Taskbar Utility"="C:\\WINDOWS\\System32
\\spool\\drivers\\w32x86\\3\\hpztsb05.exe"
"RoxioEngineUtility"="\"C:\\Program Files\\Common
Files\\Roxio Shared\\System\\EngUtil.exe\""
"RoxioDragToDisc"="\"C:\\Program Files\\Roxio\\Easy CD
Creator 6\\DragToDisc\\DrgToDsc.exe\""
"RoxioAudioCentral"="\"C:\\Program Files\\Roxio\\Easy CD
Creator 6\\AudioCentral\\RxMon.exe\""
"QuickTime Task"="\"C:\\Program
Files\\QuickTime\\qttask.exe\" -atboottime"
"P2P Networking"="C:\\WINDOWS\\System32\\P2P
Networking\\P2P Networking.exe /AUTOSTART"
"AltnetPointsManager"="c:\\program files\\altnet\\points
manager\\points manager.exe -s"
"NeroCheck"="C:\\WINDOWS\\system32\\NeroCheck.exe"
"stcloader"="C:\\WINDOWS\\System32\\stcloader.exe"
"spoolsvv"="C:\\WINDOWS\\SYSTEM32\\spoolsvv.exe -invisible"
"New.net Startup"="rundll32 C:\\PROGRA~1\\NEWDOT~1
\\NEWDOT~1.DLL,NewDotNetStartup"
"slmss"="C:\\Program Files\\Common Files\\slmss\\slmss.exe"
"Mwsvm"="C:\\WINDOWS\\mwsvm.exe"

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersi
on\Run\OptionalComponents]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersi
on\Run\OptionalComponents\IMAIL]
"Installed"="1"

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersi
on\Run\OptionalComponents\MAPI]
"Installed"="1"
"NoChange"="1"

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersi
on\Run\OptionalComponents\MSFS]
"Installed"="1"

Windows Registry Editor Version 5.00

[HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersio
n\Run]
"MSMSGS"="\"C:\\Program
Files\\Messenger\\msmsgs.exe\" /background"
"SB Audigy 2 Startup Menu"="/L:ENG"
"Weather"="C:\\PROGRA~1\\AWS\\WEATHE~1\\Weather.exe 1"
"Kontiki"="\"C:\\Program
Files\\Kontiki\\bin\\kontiki.exe\" -s Kontiki -q"
"ctfmon.exe"="C:\\WINDOWS\\System32\\ctfmon.exe"
"AIM"="C:\\PROGRA~1\\AIM\\aim.exe -cnetwait.odl"

-----Original Message-----
Hi Bob,

Please see:

System32 Folder Opens When Logging on to Windows
http://support.microsoft.com/?kbid=170086

Also, start/run msconfig, and see if there is a line that loads /L:ENG. It
comes from a SoundBlaster Audigy driver, and it can cause this problem as
well. If it exists, use the registry fix from MVP Kelly:

Line 260 on the right:
http://www.kellys-korner-xp.com/xp_tweaks.htm

It's far easier than mucking about in the registry. The problem can also be
caused by other incorrectly built registry strings. So, if the first two
steps don't help you, could you please export and post the contents of these
keys in the registry:

HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersi on\Run
n\Run

To do this, start/run regedit, expand the branches to each key (do this one
at a time). Click on the key, then on file/export. Give it any name, then
save to the desktop. Once you have saved both keys, close the registry
editor. Right-click one of the saved files on the desktop, choose edit, it
should open in notepad. Click edit/select all/edit/copy. Open a response to
this post and click in the message text area. Hit ctrl+v to paste the
contents. Repeat for the other saved key, then send the post for
examination.

--
Best of Luck,

Rick Rogers aka "Nutcase" MS-MVP - Win9x
Windows isn't rocket science! That's my other hobby!

Associate Expert - WinXP - Expert Zone






.
 
Back
Top