Who installed that darned thing?

[spoon2001]

Booted up this morning ... some nasty thing called "Sonic Update Manager"
popped up, and demanded that I insert a CD into my drive. What CD? Heck if
I know! Everytime I tried to cancel out of it, it started up again! The
only thing I could do was to kill the process.

I forget which program told me, but the startup item was "ISUSPM Startup"
with pathname:
C:\Program Files\Common Files\InstallShield\UpdateService\ISUSPM.exe
Needless to say I disabled that startup item.

But what program put it there? I couldn't find that information, even in
the excellent PUI -
http://support.it-mate.co.uk/?mode=Products&p=pui

Fired up Regedit, went to the uninstall key -
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall

From that point I did a search on "Sonic Update Manager". This took me to
the key -
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\{30465B6C-B53F-49A1-9EBA-A3F187AD502E}

Under this key was a value "DisplayName", and the value data "Sonic Update
Manager".

Under the same key, I found the value "InstallSource", and the value data
was:
D:\Retail Software\BUMP6\UPDATEMANAGER_MSI\

Culprit identified!!! BUMP6 is Backup MyPC, a retail program I installed
some time back. A warrant has been issued for the arrest of BUMP6, for
breaking and entering into my startup config.

Moral of the story - look for the "InstallSource" value under the Uninstall
key.

Meanwhile, I decided I needed a burglar alarm. I went and installed
StartupMonitor.
http://www.mlin.net/StartupMonitor.shtml

"StartupMonitor is a small utility that runs transparently (it doesn't even
use a tray icon) and notifies you when any program registers itself to run
at system startup. It prevents those utterly useless tray applications from
registering themselves behind your back, and it acts as a security tool
against trojans like BackOrifice or Netbus."

It's using only 180K of memory right now. Seems like a very minimal burden
on the system. But I've read that there is a gap - it doesn't monitor the
RunOnce keys -
http://www.snapfiles.com/opinions/StartupMonitor/StartupMonitor.html

 

[John Corliss]

Booted up this morning ... some nasty thing called "Sonic Update Manager"
popped up, and demanded that I insert a CD into my drive. What CD?

http://support.dell.com/support/top...d=098D85DDBAC783B2E0401E0A55175844&l=en&s=gen

or better yet:

http://tinyurl.com/elkrm

--
Regards from John Corliss
I don't reply to trolls like Andy Mabbett, Doc (who uses sock puppets)
or Roger Johansson, for instance. No adware, cdware, commercial
software, crippleware, demoware, nagware, PROmotionware, shareware,
spyware, time-limited software, trialware, viruses or warez for me, please.

 

[John Corliss]

Booted up this morning ... some nasty thing called "Sonic Update Manager"
popped up, and demanded that I insert a CD into my drive. What CD?

http://support.dell.com/support/top...d=098D85DDBAC783B2E0401E0A55175844&l=en&s=gen

or better yet:

http://tinyurl.com/elkrm

--
Regards from John Corliss
I don't reply to trolls like Andy Mabbett, Doc (who uses sock puppets)
or Roger Johansson, for instance. No adware, cdware, commercial
software, crippleware, demoware, nagware, PROmotionware, shareware,
spyware, time-limited software, trialware, viruses or warez for me, please.

 

[dadiOH]

Booted up this morning ... some nasty thing called "Sonic Update
Manager" popped up, and demanded that I insert a CD into my drive.
What CD? Heck if I know! Everytime I tried to cancel out of it, it
started up again! The only thing I could do was to kill the process.

I forget which program told me, but the startup item was "ISUSPM
Startup" with pathname:
C:\Program Files\Common Files\InstallShield\UpdateService\ISUSPM.exe
Needless to say I disabled that startup item.

But what program put it there? I couldn't find that information,
even in the excellent PUI -
http://support.it-mate.co.uk/?mode=Products&p=pui

Fired up Regedit, went to the uninstall key -
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall

From that point I did a search on "Sonic Update Manager". This took
me to the key -
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\{
30465B6C-B53F-49A1-9EBA-A3F187AD502E}

Under this key was a value "DisplayName", and the value data "Sonic
Update Manager".

Under the same key, I found the value "InstallSource", and the value
data was:
D:\Retail Software\BUMP6\UPDATEMANAGER_MSI\

Culprit identified!!! BUMP6 is Backup MyPC, a retail program I
installed some time back. A warrant has been issued for the arrest
of BUMP6, for breaking and entering into my startup config.

Moral of the story - look for the "InstallSource" value under the
Uninstall key.

Meanwhile, I decided I needed a burglar alarm. I went and installed
StartupMonitor.

Nice app, been using it for several years.
____________

It's using only 180K of memory right now. Seems like a very minimal
burden on the system. But I've read that there is a gap - it doesn't
monitor the RunOnce keys -

It does on my machine.

--

dadiOH
____________________________

dadiOH's dandies v3.06...
....a help file of info about MP3s, recording from
LP/cassette and tips & tricks on this and that.
Get it at http://mysite.verizon.net/xico

 

[ellis_jay]

Booted up this morning ... some nasty thing called "Sonic Update
Manager" popped up

Sonic update manager came with my HP by default. Nice utility.
--
I don't know what's more pathetic, Jack Abramoff's sleaze or Republican
paralysis in the face of it. Abramoff walks out of a D.C. courthouse in
his pseudo-Hasidic homburg, and all that leading Republicans can do is
promise to return his money and remind everyone that some Democrats are
involved in the scandal, too.

That's a great G.O.P. talking point: some Democrats are so sleazy, they
get involved with the likes of us.

_______David Brooks


Ellis_Jay