Using Win 2K+SP4.
IE6.1 It is not listed in the startup folder.
I don't know were else an automatic startup may be recorded
and how such a status change occured.

Any idea how to stop it?
Where are ALL the "secret" Windows' ways of automatic starting anything (not
required for the OS to complete logon) upon logon?

Thanks,
David

"David F" <David-(E-Mail Removed)> wrote in
news:(E-Mail Removed):

> Using Win 2K+SP4.
> IE6.1 It is not listed in the startup folder.
> I don't know were else an automatic startup may be recorded
> and how such a status change occured.
>
> Any idea how to stop it?
> Where are ALL the "secret" Windows' ways of automatic starting
> anything (not required for the OS to complete logon) upon logon?

Get "Startup Control Panel" (freeware) at:
<http://www.mlin.net/StartupCPL.shtml>
It will show you everywhere startups live and allow you to control
them.

HTH,
John

This behavior is usually the result of a bad/incomplete command in one of
the Run entries in the registry. Can happen if you manually delete an app
out from under it or if an installation was aborted or corrupted in some
other way. The un-executable command results in an IE window popping up.

-Frank

"David F" <David-(E-Mail Removed)> wrote in message
news:(E-Mail Removed)...
> Using Win 2K+SP4.
> IE6.1 It is not listed in the startup folder.
> I don't know were else an automatic startup may be recorded
> and how such a status change occured.
>
> Any idea how to stop it?
> Where are ALL the "secret" Windows' ways of automatic starting anything
> (not
> required for the OS to complete logon) upon logon?
>
> Thanks,
> David
>
>

Can also be a result of spyware.

--
George Hester
_______________________________
"Frankster" <(E-Mail Removed)> wrote in message news:v_Kdncdy88tHXADfRVn-(E-Mail Removed)...
> This behavior is usually the result of a bad/incomplete command in one of
> the Run entries in the registry. Can happen if you manually delete an app
> out from under it or if an installation was aborted or corrupted in some
> other way. The un-executable command results in an IE window popping up.
>
> -Frank
>
> "David F" <David-(E-Mail Removed)> wrote in message
> news:(E-Mail Removed)...
> > Using Win 2K+SP4.
> > IE6.1 It is not listed in the startup folder.
> > I don't know were else an automatic startup may be recorded
> > and how such a status change occured.
> >
> > Any idea how to stop it?
> > Where are ALL the "secret" Windows' ways of automatic starting anything
> > (not
> > required for the OS to complete logon) upon logon?
> >
> > Thanks,
> > David
> >
> >
>
>

From all I know so far, what you wrote fits the best. Not that I did
anything with the registry but I think I deleted some application and as we
know, something could go wrong with uninstalls.
How do I go about finding such bad entries? I never mess up manually with
the registry.

George's idea about something malicious is also a possibility but: 1. I have
never had anything like that because I am extremely careful what I put into
my computer and it never happened to me before (yes, I know there is always
the first time...). 2. I did some thorough scannings after such agents.

Thanks,

David

"Frankster" <(E-Mail Removed)> wrote in message
news:v_Kdncdy88tHXADfRVn-(E-Mail Removed)...
> This behavior is usually the result of a bad/incomplete command in one of
> the Run entries in the registry. Can happen if you manually delete an app
> out from under it or if an installation was aborted or corrupted in some
> other way. The un-executable command results in an IE window popping up.
>
> -Frank
>
> "David F" <David-(E-Mail Removed)> wrote in message
> news:(E-Mail Removed)...
> > Using Win 2K+SP4.
> > IE6.1 It is not listed in the startup folder.
> > I don't know were else an automatic startup may be recorded
> > and how such a status change occured.
> >
> > Any idea how to stop it?
> > Where are ALL the "secret" Windows' ways of automatic starting anything
> > (not
> > required for the OS to complete logon) upon logon?
> >
> > Thanks,
> > David
> >
> >
>
>

You say you don't normally mess with the registry, so, I would advise you
read up a little on precautions before doing this. That said...

Go to the command line and start the registry editor (regedt32.exe)

Look for erroneous or incomplete entries in the following places (usually
these erroneous entries will be found in the Run key). When found, delete
the string pointing to the non-extent command.


Select: HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run
Select: HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\RunOnce
Select:
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\RunOnceEx
Select:
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\RunServices

-Frank

"David F" <David-(E-Mail Removed)> wrote in message
news:(E-Mail Removed)...
> From all I know so far, what you wrote fits the best. Not that I did
> anything with the registry but I think I deleted some application and as
> we
> know, something could go wrong with uninstalls.
> How do I go about finding such bad entries? I never mess up manually with
> the registry.
>
> George's idea about something malicious is also a possibility but: 1. I
> have
> never had anything like that because I am extremely careful what I put
> into
> my computer and it never happened to me before (yes, I know there is
> always
> the first time...). 2. I did some thorough scannings after such agents.
>
> Thanks,
>
> David
>
> "Frankster" <(E-Mail Removed)> wrote in message
> news:v_Kdncdy88tHXADfRVn-(E-Mail Removed)...
>> This behavior is usually the result of a bad/incomplete command in one of
>> the Run entries in the registry. Can happen if you manually delete an
>> app
>> out from under it or if an installation was aborted or corrupted in some
>> other way. The un-executable command results in an IE window popping up.
>>
>> -Frank
>>
>> "David F" <David-(E-Mail Removed)> wrote in message
>> news:(E-Mail Removed)...
>> > Using Win 2K+SP4.
>> > IE6.1 It is not listed in the startup folder.
>> > I don't know were else an automatic startup may be recorded
>> > and how such a status change occured.
>> >
>> > Any idea how to stop it?
>> > Where are ALL the "secret" Windows' ways of automatic starting anything
>> > (not
>> > required for the OS to complete logon) upon logon?
>> >
>> > Thanks,
>> > David
>> >
>> >
>>
>>
>
>

Don't forget:

HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Run

I like ASViewer for this. It will find all startup stuff:

http://www.diamondcs.com.au

Wait they seemed to have changed the name...

oh crap. You want it ask I'll give it to you. Otherwise...I tried Google...

--
George Hester
_______________________________
"Frankster" <(E-Mail Removed)> wrote in message news:7fWdneG-Oue2sQLfRVn-(E-Mail Removed)...
> You say you don't normally mess with the registry, so, I would advise you
> read up a little on precautions before doing this. That said...
>
> Go to the command line and start the registry editor (regedt32.exe)
>
> Look for erroneous or incomplete entries in the following places (usually
> these erroneous entries will be found in the Run key). When found, delete
> the string pointing to the non-extent command.
>
>
> Select: HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run
> Select: HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\RunOnce
> Select:
> HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\RunOnceEx
> Select:
> HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\RunServices
>
> -Frank
>
> "David F" <David-(E-Mail Removed)> wrote in message
> news:(E-Mail Removed)...
> > From all I know so far, what you wrote fits the best. Not that I did
> > anything with the registry but I think I deleted some application and as
> > we
> > know, something could go wrong with uninstalls.
> > How do I go about finding such bad entries? I never mess up manually with
> > the registry.
> >
> > George's idea about something malicious is also a possibility but: 1. I
> > have
> > never had anything like that because I am extremely careful what I put
> > into
> > my computer and it never happened to me before (yes, I know there is
> > always
> > the first time...). 2. I did some thorough scannings after such agents.
> >
> > Thanks,
> >
> > David
> >
> > "Frankster" <(E-Mail Removed)> wrote in message
> > news:v_Kdncdy88tHXADfRVn-(E-Mail Removed)...
> >> This behavior is usually the result of a bad/incomplete command in one of
> >> the Run entries in the registry. Can happen if you manually delete an
> >> app
> >> out from under it or if an installation was aborted or corrupted in some
> >> other way. The un-executable command results in an IE window popping up.
> >>
> >> -Frank
> >>
> >> "David F" <David-(E-Mail Removed)> wrote in message
> >> news:(E-Mail Removed)...
> >> > Using Win 2K+SP4.
> >> > IE6.1 It is not listed in the startup folder.
> >> > I don't know were else an automatic startup may be recorded
> >> > and how such a status change occured.
> >> >
> >> > Any idea how to stop it?
> >> > Where are ALL the "secret" Windows' ways of automatic starting anything
> >> > (not
> >> > required for the OS to complete logon) upon logon?
> >> >
> >> > Thanks,
> >> > David
> >> >
> >> >
> >>
> >>
> >
> >
>
>

Here:

http://www.diamondcs.com.au/index.php?page=asviewer

--
George Hester
_______________________________
"Frankster" <(E-Mail Removed)> wrote in message news:7fWdneG-Oue2sQLfRVn-(E-Mail Removed)...
> You say you don't normally mess with the registry, so, I would advise you
> read up a little on precautions before doing this. That said...
>
> Go to the command line and start the registry editor (regedt32.exe)
>
> Look for erroneous or incomplete entries in the following places (usually
> these erroneous entries will be found in the Run key). When found, delete
> the string pointing to the non-extent command.
>
>
> Select: HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run
> Select: HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\RunOnce
> Select:
> HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\RunOnceEx
> Select:
> HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\RunServices
>
> -Frank
>
> "David F" <David-(E-Mail Removed)> wrote in message
> news:(E-Mail Removed)...
> > From all I know so far, what you wrote fits the best. Not that I did
> > anything with the registry but I think I deleted some application and as
> > we
> > know, something could go wrong with uninstalls.
> > How do I go about finding such bad entries? I never mess up manually with
> > the registry.
> >
> > George's idea about something malicious is also a possibility but: 1. I
> > have
> > never had anything like that because I am extremely careful what I put
> > into
> > my computer and it never happened to me before (yes, I know there is
> > always
> > the first time...). 2. I did some thorough scannings after such agents.
> >
> > Thanks,
> >
> > David
> >
> > "Frankster" <(E-Mail Removed)> wrote in message
> > news:v_Kdncdy88tHXADfRVn-(E-Mail Removed)...
> >> This behavior is usually the result of a bad/incomplete command in one of
> >> the Run entries in the registry. Can happen if you manually delete an
> >> app
> >> out from under it or if an installation was aborted or corrupted in some
> >> other way. The un-executable command results in an IE window popping up.
> >>
> >> -Frank
> >>
> >> "David F" <David-(E-Mail Removed)> wrote in message
> >> news:(E-Mail Removed)...
> >> > Using Win 2K+SP4.
> >> > IE6.1 It is not listed in the startup folder.
> >> > I don't know were else an automatic startup may be recorded
> >> > and how such a status change occured.
> >> >
> >> > Any idea how to stop it?
> >> > Where are ALL the "secret" Windows' ways of automatic starting anything
> >> > (not
> >> > required for the OS to complete logon) upon logon?
> >> >
> >> > Thanks,
> >> > David
> >> >
> >> >
> >>
> >>
> >
> >
>
>

Two WOWs!

1. The key you asked me not to forget had the IEXPLORE.EXE !. Since
everything seems to be clean and correct, I am concern that some malicious
(or anyway w/o asking my permission) SW set it for the purpose of doing
something over the internet each time I logon. I don't have a better
explanation.

2. The other WOW goes to the ASViewer. You like it and I love it!. The
reasons are that first it does a good job and not less important, it does it
so simply - I was blown away. When starting the .EXE I down loaded, I
expected to go through installation, than a GUI screen through which I would
need to learn how to use it, etc.... Instead, it just straight to the point
and displayed what I needed to know, in an instantly self explanatory way
and nothing else. And it is also so small. How many programs of such
behavior have you seen? I was always fascinating about the art of UI,
especially because on the one hand it is very important IMHO, and on the
other hand, you can see huge differences in the ease of use between
different applications.

Interestingly, at first, I missed that the key you suggested to look at -
HKCU\....\Run is different from HKLM\....\Run (as suggested by Frankster)
because the rest of the entire string is the same. Since I already checked
Frankster's suggested places to no avail (and wondering why would you repeat
the "same"...), I proceeded to the ASViewer. And that one showed me the
iexplore.exe in a second thanks to showing the associated icons. Only then,
I also noticed that your suggested key is different...

Many thanks,

David

And many thanks to Frankster too - your suggestions were conceptually right
on the money too.


"George Hester" <(E-Mail Removed)> wrote in message
news:up$(E-Mail Removed)...
Don't forget:

HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Run

I like ASViewer for this. It will find all startup stuff:

http://www.diamondcs.com.au

Wait they seemed to have changed the name...

oh crap. You want it ask I'll give it to you. Otherwise...I tried
Google...

--
George Hester
_______________________________
"Frankster" <(E-Mail Removed)> wrote in message
news:7fWdneG-Oue2sQLfRVn-(E-Mail Removed)...
> You say you don't normally mess with the registry, so, I would advise you
> read up a little on precautions before doing this. That said...
>
> Go to the command line and start the registry editor (regedt32.exe)
>
> Look for erroneous or incomplete entries in the following places (usually
> these erroneous entries will be found in the Run key). When found, delete
> the string pointing to the non-extent command.
>
>
> Select: HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run
> Select:
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\RunOnce
> Select:
> HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\RunOnceEx
> Select:
> HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\RunServices
>
> -Frank
>
> "David F" <David-(E-Mail Removed)> wrote in message
> news:(E-Mail Removed)...
> > From all I know so far, what you wrote fits the best. Not that I did
> > anything with the registry but I think I deleted some application and as
> > we
> > know, something could go wrong with uninstalls.
> > How do I go about finding such bad entries? I never mess up manually
with
> > the registry.
> >
> > George's idea about something malicious is also a possibility but: 1. I
> > have
> > never had anything like that because I am extremely careful what I put
> > into
> > my computer and it never happened to me before (yes, I know there is
> > always
> > the first time...). 2. I did some thorough scannings after such agents.
> >
> > Thanks,
> >
> > David
> >
> > "Frankster" <(E-Mail Removed)> wrote in message
> > news:v_Kdncdy88tHXADfRVn-(E-Mail Removed)...
> >> This behavior is usually the result of a bad/incomplete command in one
of
> >> the Run entries in the registry. Can happen if you manually delete an
> >> app
> >> out from under it or if an installation was aborted or corrupted in
some
> >> other way. The un-executable command results in an IE window popping
up.
> >>
> >> -Frank
> >>
> >> "David F" <David-(E-Mail Removed)> wrote in message
> >> news:(E-Mail Removed)...
> >> > Using Win 2K+SP4.
> >> > IE6.1 It is not listed in the startup folder.
> >> > I don't know were else an automatic startup may be recorded
> >> > and how such a status change occured.
> >> >
> >> > Any idea how to stop it?
> >> > Where are ALL the "secret" Windows' ways of automatic starting
anything
> >> > (not
> >> > required for the OS to complete logon) upon logon?
> >> >
> >> > Thanks,
> >> > David
> >> >
> >> >
> >>
> >>
> >
> >
>
>

George,

Speaking about the UI of ASViewer reminded another issue not related to the
original one, just in case you might have an input to it.

I need to build an interactive GUI to an application I wrote entirely in
C++.
VS.Net 2003 claims to support C++ was really bogus - "managed" C++ is not
C++.. As a matter of fact, I read somewere in MS' website with regard to
VS.Net 2005 something like: "...and now we really support C++". I don't
remember verbatim but this was clearly at least the spirit of their own
writing. I have big reservations if this time around it is true. As a matter
of fact, I have since saw some very tangible indicators that they did not
changed their stripes - see for example that MS Press started to pour out
books on VS.Net 2005's support for VB & C# and silent with regard to C++.

I recently read about HTA. Thought at first that it is a good idea - having
perhaps the most popular GUI, that is webpages, with standard
HTML/JavaScript, that is, totally portable and get rid of the whole .NET -
that is like the Messiah era arrived. Immediately I felt that it is too
good to be true and indeed I found shortly after, again, they try to low
key, almost hide the fact, that actually, I have to use another total
proprietary VBScript, with its poor documentation, especially in the area of
interfacing with C++.EXE..

Would you have any input as to which of the two is the "lesser of the two
evils" as an interactive GUI?

Thanks,

David



"George Hester" <(E-Mail Removed)> wrote in message
news:up$(E-Mail Removed)...
Don't forget:

HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Run

I like ASViewer for this. It will find all startup stuff:

http://www.diamondcs.com.au

Wait they seemed to have changed the name...

oh crap. You want it ask I'll give it to you. Otherwise...I tried
Google...

--
George Hester
_______________________________
"Frankster" <(E-Mail Removed)> wrote in message
news:7fWdneG-Oue2sQLfRVn-(E-Mail Removed)...
> You say you don't normally mess with the registry, so, I would advise you
> read up a little on precautions before doing this. That said...
>
> Go to the command line and start the registry editor (regedt32.exe)
>
> Look for erroneous or incomplete entries in the following places (usually
> these erroneous entries will be found in the Run key). When found, delete
> the string pointing to the non-extent command.
>
>
> Select: HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run
> Select:
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\RunOnce
> Select:
> HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\RunOnceEx
> Select:
> HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\RunServices
>
> -Frank
>
> "David F" <David-(E-Mail Removed)> wrote in message
> news:(E-Mail Removed)...
> > From all I know so far, what you wrote fits the best. Not that I did
> > anything with the registry but I think I deleted some application and as
> > we
> > know, something could go wrong with uninstalls.
> > How do I go about finding such bad entries? I never mess up manually
with
> > the registry.
> >
> > George's idea about something malicious is also a possibility but: 1. I
> > have
> > never had anything like that because I am extremely careful what I put
> > into
> > my computer and it never happened to me before (yes, I know there is
> > always
> > the first time...). 2. I did some thorough scannings after such agents.
> >
> > Thanks,
> >
> > David
> >
> > "Frankster" <(E-Mail Removed)> wrote in message
> > news:v_Kdncdy88tHXADfRVn-(E-Mail Removed)...
> >> This behavior is usually the result of a bad/incomplete command in one
of
> >> the Run entries in the registry. Can happen if you manually delete an
> >> app
> >> out from under it or if an installation was aborted or corrupted in
some
> >> other way. The un-executable command results in an IE window popping
up.
> >>
> >> -Frank
> >>
> >> "David F" <David-(E-Mail Removed)> wrote in message
> >> news:(E-Mail Removed)...
> >> > Using Win 2K+SP4.
> >> > IE6.1 It is not listed in the startup folder.
> >> > I don't know were else an automatic startup may be recorded
> >> > and how such a status change occured.
> >> >
> >> > Any idea how to stop it?
> >> > Where are ALL the "secret" Windows' ways of automatic starting
anything
> >> > (not
> >> > required for the OS to complete logon) upon logon?
> >> >
> >> > Thanks,
> >> > David
> >> >
> >> >
> >>
> >>
> >
> >
>
>