trouble.... getting at bootup "c:\system32\nsmss.exe"

  • Thread starter Thread starter Guest
  • Start date Start date
G

Guest

hello. eveytime my laptop boots up i get "c:\system32\nsmss.exe". i close the
window and go on from there. is there any way i can fix this from happening.
lmk.
 
What are your anti-virus and anti-spyware arrangements?

Please confirm this "nsmss.exe" is a correct spelling.

--



Hope this helps.

Gerry
~~~~
FCA
Stourport, England
Enquire, plan and execute
~~~~~~~~~~~~~~~~~~~
 
Gerry said:
What are your anti-virus and anti-spyware arrangements?

Please confirm this "nsmss.exe" is a correct spelling.

--



Hope this helps.

Gerry
~~~~
FCA
Stourport, England
Enquire, plan and execute
~~~~~~~~~~~~~~~~~~~

Adding to Gerry advice, you either uninstalled this service and it left an
Orphan behind and every time you boot up the system read the line for it (
Orphan) and cause this error.
Or your system is infested with malware and viruses and you need to clean it
by running through these cleaning steps below.
If it orphan you can remove it by the AutoRuns.exe from start Up/Run
Registry Key, Like:
[-]HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Run =
" C:\Windows\System32\nsmss.exe" <- remove it
Or:
[-]HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Run =
" C:\Windows\System32\nsmss.exe" <- remove it

Go through these cleaning steps to see or get a clear opinion on how
clean your machine is:
= Click Start >> Control Panel>>Network and Internet Connections >> Double
click Internet Options.
On the IE properties windows you will see these Tabs:
General | Security | Privacy | Content | Connections | Programs |
Advanced.
Under General Tab clear your History, Internet Files and Cookies.
Then click on Advanced tab and scroll down to under the Browsing Option:
[&] Browsing
[ ] Enable Third-Party browser extensions (Req Rest) uncheck this box.
[ ] Disable script Debugging (internet Explorer) <= check this box
[ ] Disable Script Debugging (Other) <= check this box

Then click on Programs Tab and click Manage Add-Ons and Disable all non
Verified Add-Ons (You should Renable them later one-by-one and see the
culprit and update it or remove it.
How to manage Add-Ons:
http://support.microsoft.com/kb/883256

2.... And also for malware from here:
http://onecare.live.com/site/en-gb/default.htm?s_cid=sah
http://onecare.live.com/standard/en-gb/default.htm

Run a scan from here on-line:
http://www.sophos.com
http://www3.ca.com/securityadvisor/virusinfo/scan.aspx
http://security.symantec.com/sscv6/default.asp?productid=symhome&langid=ie&venid=sym
Download Avast Cleaner from here:
http://www.avast.com/eng/avast-virus-cleaner.html
Lots of tools to download and disinfect your machine:
http://www.bitdefender.co.uk/site/Downloads/browseFreeRemovalTool/
http://free.grisoft.com/doc/5390/lng/us/tpl/v5

=How to perform a clean boot procedure to prevent background programs from
interfering with a game or a program that you currently use
http://support.microsoft.com/kb/331796
Download the FileMon to see the Running Processes in realtime from here:
http://www.microsoft.com/technet/sysinternals/utilities/filemon.mspx
Or Process Explorer :
http://www.microsoft.com/technet/sysinternals/Processesandthreadsutilities.mspx


Download the Hijackthis and send the report to one of
many
forums for analysis and troubleshooting:
When all else fails, HijackThis v2.0.2
(http://www.trendsecure.com/portal/en-US/threat_analytics/hijackthis.php) is
the preferred tool to use.
It will help you to both identify and remove any hijackware/spyware. Post
your log to:
http://www.spywareinfo.com/~merijn/downloads.html
http://aumha.net/viewforum.php?f=30,
http://castlecops.com/forum67.html,
http://forums.subratam.org/index.php?showforum=7
http://www.bleepingcomputer.com/tutorials/tutorial42.html

Have a look in the Event Viewer for error messages(X) that can shed some
light and post it back in your next post by performing the following and also
the System File Checker (SFC) sfc /scannow:
Open a Notepad, customize or minimize to the taskbar as you will need it
later for this step to copy the error message on it.
Open a run command and type in:
eventvwr.msc click [OK] you will get the Event viewer control Panel.
click on each of these:
Application
System
Security
Look in the right Pane/window for error message with red (X) or Yellow
exclamation mark /!\ , double click each one to get more info about the
causer.
On the Event error properties message you will see:
Up Arrow
Down arrow
Two pages
Click on the two pages to copy the error message then bring up the Notepad
you opened earlier and right click on the first line and select Paste from
the list, this will paste the error message on a Notepad.
Please don't duplicate the error message one of each kind will be sufficient.
HOW TO: View and Manage Event Logs in Event Viewer in Windows XP
http://support.microsoft.com/kb/308427/en-us
HTH.
nass
 
Back
Top