B
Bob H.
Yesterday I was having some problems... two of them
actually. Doug Knox helped me solve them but in the
process another one popped up. Now when I open my
desktop, this file opens automatically;
C:\Documents and Settings\Bob H\Start
Menu\Programs\Startup\SmartDraw
I ran a program of Dougs called StartupTracker3... but I
do not see it in the log. Here is a copy of that log...
any suggestions?
10/15/2003 7:43:17 PM
-- Registry --
HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersi
on\RunOnce
No Items Found
-- Registry --
HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersi
on\Run
NvCplDaemon RUNDLL32.EXE
C:\WINDOWS\System32\NvCpl.dll,NvStartup
nwiz nwiz.exe /install
PCTVOICE pctspk.exe
NAV Agent C:\PROGRA~1\NORTON~1
\navapw32.exe
Kill Popup C:\Program Files\Kill
Popup\KillPopup.exe
POINTER point32.exe
WinGuard Pro C:\Program
Files\WGP\WinGuard Pro\wgpro.exe
TkBellExe "C:\Program Files\Common
Files\Real\Update_OB\realsched.exe" -osboot
QuickTime Task "C:\Program
Files\QuickTime\qttask.exe" -atboottime
MyWebSearch Email Plugin C:\PROGRA~1\MYWEBS~1
\bar\2.bin\mwsoemon.exe
-- Registry --
HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersio
n\RunOnce
No Items Found
-- Registry --
HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersio
n\Run
MSMSGS "C:\Program
Files\Messenger\msmsgs.exe" /background
ctfmon.exe C:\WINDOWS\System32
\ctfmon.exe
Uetc C:\Documents and
Settings\Bob Hutchins\Application Data\elee.exe
NvMediaCenter RUNDLL32.EXE
C:\WINDOWS\System32\NVMCTRAY.DLL,NvTaskbarInit
-- Registry --
HKEY_USERS\.DEFAULT\Software\Microsoft\Windows\CurrentVers
ion\RunOnce
No Items Found
-- Start Menu - Current User --
Event Reminder.lnk
-- Start Menu - All Users --
Microsoft Office.lnk
WinZip Quick Pick.lnk
-- Disabled Items --
No Items Found
-- Registry - Shell Value -
HKLM\SOFTWARE\Microsoft\Windows
NT\CurrentVersion\Winlogon --
Explorer.exe
-- Running Processes --
System Idle Process
System
SMSS.EXE \SystemRoot\System32\smss.exe
CSRSS.EXE
WINLOGON.EXE winlogon.exe
SERVICES.EXE C:\WINDOWS\system32\services.exe
LSASS.EXE C:\WINDOWS\system32\lsass.exe
SVCHOST.EXE C:\WINDOWS\system32\svchost -k rpcss
SVCHOST.EXE C:\WINDOWS\System32\svchost.exe -k
netsvcs
SVCHOST.EXE
SVCHOST.EXE
SPOOLSV.EXE C:\WINDOWS\system32\spoolsv.exe
ALG.EXE
MDM.EXE "C:\Program Files\Common
Files\Microsoft Shared\VS7Debug\mdm.exe"
NAVAPSVC.EXE "C:\Program Files\Norton
AntiVirus\navapsvc.exe"
NVSVC32.EXE C:\WINDOWS\System32\nvsvc32.exe
SVCHOST.EXE C:\WINDOWS\System32\svchost.exe -k
imgsvc
EXPLORER.EXE C:\WINDOWS\Explorer.EXE
PCTSPK.EXE "C:\WINDOWS\System32\pctspk.exe"
NAVAPW32.EXE "C:\PROGRA~1\NORTON~1\navapw32.exe"
POINT32.EXE "C:\Program Files\Microsoft
Hardware\Mouse\point32.exe"
WGPRO.EXE "C:\Program Files\WGP\WinGuard
Pro\wgpro.exe"
realsched.exe "C:\Program Files\Common
Files\Real\Update_OB\realsched.exe" -osboot
QTTASK.EXE "C:\Program
Files\QuickTime\qttask.exe" -atboottime
MWSOEMON.EXE "C:\PROGRA~1\MYWEBS~1
\bar\2.bin\mwsoemon.exe"
MSMSGS.EXE "C:\Program
Files\Messenger\msmsgs.exe" /background
CTFMON.EXE "C:\WINDOWS\System32\ctfmon.exe"
RUNDLL32.EXE "C:\WINDOWS\System32\RUNDLL32.EXE"
C:\WINDOWS\System32\NVMCTRAY.DLL,NvTaskbarInit
WZQKPICK.EXE "C:\Program
Files\WinZip\WZQKPICK.EXE"
NTVDM.EXE "C:\WINDOWS\system32\ntvdm.exe" -f -
i1 -w -a C:\WINDOWS\system32\krnl386.exe
rnathchk.exe "C:\Program Files\Common
Files\Real\Update_OB\rnathchk.exe"
StartupTracker3.exe "C:\Documents and Settings\Bob
Hutchins\Desktop\StartupTracker3.exe"
wmiprvse.exe
actually. Doug Knox helped me solve them but in the
process another one popped up. Now when I open my
desktop, this file opens automatically;
C:\Documents and Settings\Bob H\Start
Menu\Programs\Startup\SmartDraw
I ran a program of Dougs called StartupTracker3... but I
do not see it in the log. Here is a copy of that log...
any suggestions?
10/15/2003 7:43:17 PM
-- Registry --
HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersi
on\RunOnce
No Items Found
-- Registry --
HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersi
on\Run
NvCplDaemon RUNDLL32.EXE
C:\WINDOWS\System32\NvCpl.dll,NvStartup
nwiz nwiz.exe /install
PCTVOICE pctspk.exe
NAV Agent C:\PROGRA~1\NORTON~1
\navapw32.exe
Kill Popup C:\Program Files\Kill
Popup\KillPopup.exe
POINTER point32.exe
WinGuard Pro C:\Program
Files\WGP\WinGuard Pro\wgpro.exe
TkBellExe "C:\Program Files\Common
Files\Real\Update_OB\realsched.exe" -osboot
QuickTime Task "C:\Program
Files\QuickTime\qttask.exe" -atboottime
MyWebSearch Email Plugin C:\PROGRA~1\MYWEBS~1
\bar\2.bin\mwsoemon.exe
-- Registry --
HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersio
n\RunOnce
No Items Found
-- Registry --
HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersio
n\Run
MSMSGS "C:\Program
Files\Messenger\msmsgs.exe" /background
ctfmon.exe C:\WINDOWS\System32
\ctfmon.exe
Uetc C:\Documents and
Settings\Bob Hutchins\Application Data\elee.exe
NvMediaCenter RUNDLL32.EXE
C:\WINDOWS\System32\NVMCTRAY.DLL,NvTaskbarInit
-- Registry --
HKEY_USERS\.DEFAULT\Software\Microsoft\Windows\CurrentVers
ion\RunOnce
No Items Found
-- Start Menu - Current User --
Event Reminder.lnk
-- Start Menu - All Users --
Microsoft Office.lnk
WinZip Quick Pick.lnk
-- Disabled Items --
No Items Found
-- Registry - Shell Value -
HKLM\SOFTWARE\Microsoft\Windows
NT\CurrentVersion\Winlogon --
Explorer.exe
-- Running Processes --
System Idle Process
System
SMSS.EXE \SystemRoot\System32\smss.exe
CSRSS.EXE
WINLOGON.EXE winlogon.exe
SERVICES.EXE C:\WINDOWS\system32\services.exe
LSASS.EXE C:\WINDOWS\system32\lsass.exe
SVCHOST.EXE C:\WINDOWS\system32\svchost -k rpcss
SVCHOST.EXE C:\WINDOWS\System32\svchost.exe -k
netsvcs
SVCHOST.EXE
SVCHOST.EXE
SPOOLSV.EXE C:\WINDOWS\system32\spoolsv.exe
ALG.EXE
MDM.EXE "C:\Program Files\Common
Files\Microsoft Shared\VS7Debug\mdm.exe"
NAVAPSVC.EXE "C:\Program Files\Norton
AntiVirus\navapsvc.exe"
NVSVC32.EXE C:\WINDOWS\System32\nvsvc32.exe
SVCHOST.EXE C:\WINDOWS\System32\svchost.exe -k
imgsvc
EXPLORER.EXE C:\WINDOWS\Explorer.EXE
PCTSPK.EXE "C:\WINDOWS\System32\pctspk.exe"
NAVAPW32.EXE "C:\PROGRA~1\NORTON~1\navapw32.exe"
POINT32.EXE "C:\Program Files\Microsoft
Hardware\Mouse\point32.exe"
WGPRO.EXE "C:\Program Files\WGP\WinGuard
Pro\wgpro.exe"
realsched.exe "C:\Program Files\Common
Files\Real\Update_OB\realsched.exe" -osboot
QTTASK.EXE "C:\Program
Files\QuickTime\qttask.exe" -atboottime
MWSOEMON.EXE "C:\PROGRA~1\MYWEBS~1
\bar\2.bin\mwsoemon.exe"
MSMSGS.EXE "C:\Program
Files\Messenger\msmsgs.exe" /background
CTFMON.EXE "C:\WINDOWS\System32\ctfmon.exe"
RUNDLL32.EXE "C:\WINDOWS\System32\RUNDLL32.EXE"
C:\WINDOWS\System32\NVMCTRAY.DLL,NvTaskbarInit
WZQKPICK.EXE "C:\Program
Files\WinZip\WZQKPICK.EXE"
NTVDM.EXE "C:\WINDOWS\system32\ntvdm.exe" -f -
i1 -w -a C:\WINDOWS\system32\krnl386.exe
rnathchk.exe "C:\Program Files\Common
Files\Real\Update_OB\rnathchk.exe"
StartupTracker3.exe "C:\Documents and Settings\Bob
Hutchins\Desktop\StartupTracker3.exe"
wmiprvse.exe