msconfig startup keeps changing after reboot

[RScotti]

Hi, Merry Christmas,

I had to use System Restore cause I made an error. After it was completed I got programs that were unchecked in
msconfig/Startup running after rebooting.
I unchecked them again and rebooted but they keep coming back. I did a undo with System Restore and they still ran at
startup.
I have Ad-Watch so I put it on manual and rejected the change but they still came back again after reboot.
I don't know what else to do?
Although I have Windows Defender it didn't notify me of the change as it usually does.

Have a good day,
RScotti

remove "nospam" in order to email me.

 

[Pegasus \(MVP\)]

Hi, Merry Christmas,

I had to use System Restore cause I made an error. After it was completed

I got programs that were unchecked in

msconfig/Startup running after rebooting.
I unchecked them again and rebooted but they keep coming back. I did a

undo with System Restore and they still ran at

startup.
I have Ad-Watch so I put it on manual and rejected the change but they

still came back again after reboot.

I don't know what else to do?
Although I have Windows Defender it didn't notify me of the change as it usually does.

Have a good day,
RScotti

remove "nospam" in order to email me.

This will happen if the programs are invoked directly via the
registry and if you do not have sufficient access rights to that
branch of the registry. If you report the exact details of one of
the programs that keeps coming back (as shown in msconfig)
then someone will tell you how to set more appropriate permissions.

 

[RScotti]

Hi Pegasus,

This is the log from Ad-Watch which shows the programs I am trying to block.
I am the Administrator and no other users.
This is just ONE boot. I took them out of msconfig than I blocked them in Ad-watch.
I hope this is what you need?

12/24/2006 10:38:47 PM> Registry modification detected
12/24/2006 10:38:47 PM>
12/24/2006 10:38:47 PM> Root:HKEY_LOCAL_MACHINE
12/24/2006 10:38:47 PM> Key:Software\Microsoft\Windows\CurrentVersion\Run
12/24/2006 10:38:47 PM> Value:ehTray
12/24/2006 10:38:47 PM> Data:C:\WINDOWS\ehome\ehtray.exe
12/24/2006 10:38:47 PM> New Data:
12/24/2006 10:38:47 PM>
12/24/2006 10:38:50 PM> Registry modification detected
12/24/2006 10:38:50 PM>
12/24/2006 10:38:50 PM> Root:HKEY_LOCAL_MACHINE
12/24/2006 10:38:50 PM> Key:Software\Microsoft\Windows\CurrentVersion\Run
12/24/2006 10:38:50 PM> Value:StatusClient 2.6
12/24/2006 10:38:50 PM> Data:C:\Program Files\Hewlett-Packard\Toolbox\StatusClient\StatusClient.exe /auto
12/24/2006 10:38:50 PM> New Data:
12/24/2006 10:38:50 PM>
12/24/2006 10:38:51 PM> Registry modification detected
12/24/2006 10:38:51 PM>
12/24/2006 10:38:51 PM> Root:HKEY_LOCAL_MACHINE
12/24/2006 10:38:51 PM> Key:Software\Microsoft\Windows\CurrentVersion\Run
12/24/2006 10:38:51 PM> Value:TomcatStartup 2.5
12/24/2006 10:38:51 PM> Data:C:\Program Files\Hewlett-Packard\Toolbox\hpbpsttp.exe
12/24/2006 10:38:51 PM> New Data:
12/24/2006 10:38:51 PM>
12/24/2006 10:38:52 PM> Registry modification detected
12/24/2006 10:38:52 PM>
12/24/2006 10:38:52 PM> Root:HKEY_LOCAL_MACHINE
12/24/2006 10:38:52 PM> Key:Software\Microsoft\Windows\CurrentVersion\Run
12/24/2006 10:38:52 PM> Value:ISUSScheduler
12/24/2006 10:38:52 PM> Data:"C:\Program Files\Common Files\InstallShield\UpdateService\issch.exe" -start
12/24/2006 10:38:52 PM> New Data:
12/24/2006 10:38:52 PM>
12/24/2006 10:38:54 PM> Registry modification detected
12/24/2006 10:38:54 PM>
12/24/2006 10:38:54 PM> Root:HKEY_LOCAL_MACHINE
12/24/2006 10:38:54 PM> Key:Software\Microsoft\Windows\CurrentVersion\Run
12/24/2006 10:38:54 PM> Value:ALUAlert
12/24/2006 10:38:54 PM> Data:C:\Program Files\Symantec\LiveUpdate\ALuNotify.exe
12/24/2006 10:38:54 PM> New Data:
12/24/2006 10:38:54 PM>
12/24/2006 10:38:55 PM> Registry modification detected
12/24/2006 10:38:55 PM>
12/24/2006 10:38:55 PM> Root:HKEY_CURRENT_USER
12/24/2006 10:38:55 PM> Key:Software\Microsoft\Windows\CurrentVersion\Run
12/24/2006 10:38:55 PM> Value:swg
12/24/2006 10:38:55 PM> Data:C:\Program Files\Google\GoogleToolbarNotifier\1.2.908.8472\GoogleToolbarNotifier.exe
12/24/2006 10:38:55 PM> New Data:
12/24/2006 10:38:55 PM>
12/24/2006 10:40:47 PM> Registry modification detected
12/24/2006 10:40:47 PM>
12/24/2006 10:40:47 PM> Root:HKEY_LOCAL_MACHINE
12/24/2006 10:40:47 PM> Key:Software\Microsoft\Windows\CurrentVersion\Run
12/24/2006 10:40:47 PM> Value:ALUAlert
12/24/2006 10:40:47 PM> Data:C:\Program Files\Symantec\LiveUpdate\ALuNotify.exe
12/24/2006 10:40:47 PM> New Data:
12/24/2006 10:40:47 PM>

I got programs that were unchecked in
undo with System Restore and they still ran at
still came back again after reboot.

This will happen if the programs are invoked directly via the
registry and if you do not have sufficient access rights to that
branch of the registry. If you report the exact details of one of
the programs that keeps coming back (as shown in msconfig)
then someone will tell you how to set more appropriate permissions.

Have a good day,
RScotti

remove "nospam" in order to email me.

 

[Pegasus \(MVP\)]

You need to tell Ad-Watch to allow msconfig.exe to modify
the registry. I do not use Ad-Watch, hence I cannot tell you
how it's done. If you cannot find out for yourself, check the
Ad-Watch FAQs.

Hi Pegasus,

This is the log from Ad-Watch which shows the programs I am trying to block.
I am the Administrator and no other users.
This is just ONE boot. I took them out of msconfig than I blocked them in Ad-watch.
I hope this is what you need?

 

[RScotti]

Hi Pegasus,
I disabled Ad-Watch completely and I still get the same thing. It must be something else?
I will still notify their tech support.
I also tried different startup programs and I can't change any of them from starting up.

You need to tell Ad-Watch to allow msconfig.exe to modify
the registry. I do not use Ad-Watch, hence I cannot tell you
how it's done. If you cannot find out for yourself, check the
Ad-Watch FAQs.

Hi Pegasus,

This is the log from Ad-Watch which shows the programs I am trying to block.
I am the Administrator and no other users.
This is just ONE boot. I took them out of msconfig than I blocked them in Ad-watch.
I hope this is what you need?

Have a good day,
RScotti

remove "nospam" in order to email me.

 

[Pegasus \(MVP\)]

Launch regedit.exe and navigate to
HKLM\Software\Microsoft\Windows\CurrentVersion\Run.
Right-click "Run" and examine the permissions.

You can also make a note of the values in the Run key,
then delete them directly while in regedit.

Hi Pegasus,
I disabled Ad-Watch completely and I still get the same thing. It must be something else?
I will still notify their tech support.
I also tried different startup programs and I can't change any of them from starting up.

 

[RScotti]

Hi Pegasus,
THAT WORKED THANKS!
I only have the ones I wanted. I currently have Ad-Watch disabled.
Is that what is causing this or something else?
should I try and enable it?

Launch regedit.exe and navigate to
HKLM\Software\Microsoft\Windows\CurrentVersion\Run.
Right-click "Run" and examine the permissions.

You can also make a note of the values in the Run key,
then delete them directly while in regedit.

Hi Pegasus,
I disabled Ad-Watch completely and I still get the same thing. It must be something else?
I will still notify their tech support.
I also tried different startup programs and I can't change any of them from starting up.

Have a good day,
RScotti

remove "nospam" in order to email me.

 

[Pegasus \(MVP\)]

Default Windows installations allow administrators to
modify this key. If it is blocked on your machine then
it got blocked by something you installed. You are the
best judge to decide if it was Ad-Watch or something
else. As I mentioned, check the Ad-Watch FAQs.

Hi Pegasus,
THAT WORKED THANKS!
I only have the ones I wanted. I currently have Ad-Watch disabled.
Is that what is causing this or something else?
should I try and enable it?

 

[RScotti]

Thanks I'll check that and also send an email to their tech support just in case it is AD-Watch. But I have had that for
a little while.
Anyhow, I now know how to fix it if it happens again and since I did numerous System Restores it still did it even
though this just happened today. I went back to yesterday four different restore points.

Default Windows installations allow administrators to
modify this key. If it is blocked on your machine then
it got blocked by something you installed. You are the
best judge to decide if it was Ad-Watch or something
else. As I mentioned, check the Ad-Watch FAQs.

Hi Pegasus,
THAT WORKED THANKS!
I only have the ones I wanted. I currently have Ad-Watch disabled.
Is that what is causing this or something else?
should I try and enable it?

Have a good day,
RScotti

remove "nospam" in order to email me.