Autoplay popup: wheree does it come from ?

[Osiris]

After startup of my winXP computer, I get this annoying popup with the
title "Autoplay", just for a few seconds. Then it disappears.
Afterwards, it pops up now and then, irregularly, maybe once an hour
or so.
It is NOT the regular autoplay you get on the center of the scsreen
when inserting a CD.

I put a short (586 kB) movie of it on the net, so you can seen what
happens:

www.terwiel.com/diversen/popup.avi

On the richt side, you see process Explorer, showing some activity.

I also put on the net a HijackThis log, so you can see, which
processes run:

www.terwiel.com/diversen/hijackthis.log

I added some remarks to the log.


Where does it come from ?
What can I do to get rid of it ?

 

[Osiris]

With help, I found a solution:
In the registry ther is a key NodriveTypeAutorun.
you can set this for CD players and/or HD's.

It seems, the system is trying not to autorun a CD,
BUT A HARD DISK (or 2)
I dunno why, suddenly, but when I set the parameter to 0x8, it does
not autoplay anymore.

Questions reamin:
Why was the value 0 in the first place ?
Is there a trojan or virus that did that ?
Is the value 8 on your system too ?




put this in a .reg file and run it (everything between the lines):
---------------------------------------------
Windows Registry Editor Version 5.00

[HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Policies\Explorer]
"NoDriveTypeAutoRun"=dword:00000008

---------------------------------------------

 

[cliff]

I had a similar problem and traced it back to an installation of
ACDSee, which has a device autodetect function. The ACDSee doc says
that the device detector overrides Windows autoplay. When I turned the
device detector off, the popups stopped.

I discovered this by running HijackThis and looking through the log for
suspicious apps that ran at startup. [Device Detector]DevDetect.exe
-autorun was an obvious choice in my case. Your situtation will no
doubt be different, but in general if I were you I'd start by reviewing
any software I had recently installed and researching what it does when
the machine starts up.

 

[Osiris]

I had a similar problem and traced it back to an installation of
ACDSee, which has a device autodetect function. The ACDSee doc says
that the device detector overrides Windows autoplay. When I turned the
device detector off, the popups stopped.

I discovered this by running HijackThis and looking through the log for
suspicious apps that ran at startup. [Device Detector]DevDetect.exe
-autorun was an obvious choice in my case. Your situtation will no
doubt be different, but in general if I were you I'd start by reviewing
any software I had recently installed and researching what it does when
the machine starts up.

thnx: where is Device Detector ? registry ?