Multiple Malfunction

  • Thread starter Thread starter Toader
  • Start date Start date
T

Toader

1. Trying to track down the following partial registry
names, can someone tell me the exact location: Shell
Registry Value: HKLM\..\WinLogon[Shell]Explorer.exe.
And: UserInit Registry value: HKLM\..\WinLogon [UserInit]
C:\WINDOWS\system32\userinit.exe. Not sure what the \..\
location is. These are being picked up by CWShredder,
I'm trying to kill CoolWebSearch. Can I delete these
from the registry safely??
2. When I start up, my page file is only 187MB, but if I
leave MS Outlook 2003 on all night, my page file swells
to 1.5GB, and does not clear when Outlook is shutdown.
Why isnt it clearing? I have 1G of RAM. Windows manages
the swap file.
3. I have Windows set to clear the page file at
shutdown, it has been giving a memory error Navapsvc.exe
(Norton AV) Should I reinstall it? Thanks for your time.
 
Toader said:
1. Trying to track down the following partial registry
names, can someone tell me the exact location: Shell
Registry Value: HKLM\..\WinLogon[Shell]Explorer.exe.
And: UserInit Registry value: HKLM\..\WinLogon [UserInit]
C:\WINDOWS\system32\userinit.exe. Not sure what the \..\
location is. These are being picked up by CWShredder,
I'm trying to kill CoolWebSearch. Can I delete these
from the registry safely??
2. When I start up, my page file is only 187MB, but if I
leave MS Outlook 2003 on all night, my page file swells
to 1.5GB, and does not clear when Outlook is shutdown.
Why isnt it clearing? I have 1G of RAM. Windows manages
the swap file.
3. I have Windows set to clear the page file at
shutdown, it has been giving a memory error Navapsvc.exe
(Norton AV) Should I reinstall it? Thanks for your time.
Click to expand...

HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Winlogon

No, don't delete these necessary keys.

I can't tell you why the swapfile grows to 1.5gb, but you might find an
answer form someone in an Outlook forum. You might consider cleaning out
your uneeded items in your Outlook as it is all kept in 1 file. The funny
thing is that even when you delete items out of Outlook, the .pst file can
stay the same size. To get around this, do the following after you delete
stuff. If your navigation window is not already open and let's say you are
in currently in your Inbox. Look to the right of the words, Outlook
Shortcuts in the upper right area. Look to the right of that and you will
see the word Inbox indicating that you are currently in your Inbox. There
is a down arrow after the word Inbox. Click on it and then click on the
push pin icon in the upper right-hand corner of the navigation window that
just opened up. This locks the window open. Then right click on the words
Personal Folders and select Properties, then click on Folder Size just so
you can see the current size and compare sizes after you compact. Next
click on the Advanced button and then click on Compact Now. Depending on
how much stuff you have deleted, the reduction can be quite dramatic. Doing
this may help reduce the problem you are facing with the growing swapfile.
You should also consider archiving old data which moves items you may want
to keep for future use, but don't necessarily have a current need for. All
this does is move it from your outlook.pst file to your archive.pst file.
You can always go back and retrieve items later. But to do so, you would
need to go to File, then Open, then browse to your archive.pst file If you
are unsure of it's location, go back to the Advanced button and look in the
Path windows. You may need to put your mouse in the window and drag to the
right to see the full path. The archive.pst file will be in the same folder
as your outlook.pst file. You can also set your Autoarchive settings for
each folder. Inbox, Contacts, etc.. To do this, right click on the item
you want make autoarchive settings for like the Inbox and click on Advanced
and then the AutoArchive tab.

On the memory error for navapsvc.exe file, can you be more specific. What
conditions are you getting this error and exactly what does the error say?

I hope this helps

Good Luck
 
Toader said:
1. Trying to track down the following partial registry
names, can someone tell me the exact location: Shell
Registry Value: HKLM\..\WinLogon[Shell]Explorer.exe.
And: UserInit Registry value: HKLM\..\WinLogon [UserInit]
C:\WINDOWS\system32\userinit.exe. Not sure what the \..\
location is. These are being picked up by CWShredder,
I'm trying to kill CoolWebSearch. Can I delete these
from the registry safely??
2. When I start up, my page file is only 187MB, but if I
leave MS Outlook 2003 on all night, my page file swells
to 1.5GB, and does not clear when Outlook is shutdown.
Why isnt it clearing? I have 1G of RAM. Windows manages
the swap file.
3. I have Windows set to clear the page file at
shutdown, it has been giving a memory error Navapsvc.exe
(Norton AV) Should I reinstall it? Thanks for your time.
Click to expand...

You know, I don't know what I was thinking about. You said that you had a
2003 version of Outlook. Your screen is likely to look different than mine,
but the basic comments will still apply. You should find out how to open
the browser window for your Personal Folders. I'll see if I can find out
and if so, I will make another post.
 
Toader said:
1. Trying to track down the following partial registry
names, can someone tell me the exact location: Shell
Registry Value: HKLM\..\WinLogon[Shell]Explorer.exe.
And: UserInit Registry value: HKLM\..\WinLogon [UserInit]
C:\WINDOWS\system32\userinit.exe. Not sure what the \..\
location is. These are being picked up by CWShredder,
I'm trying to kill CoolWebSearch. Can I delete these
from the registry safely??
2. When I start up, my page file is only 187MB, but if I
leave MS Outlook 2003 on all night, my page file swells
to 1.5GB, and does not clear when Outlook is shutdown.
Why isnt it clearing? I have 1G of RAM. Windows manages
the swap file.
3. I have Windows set to clear the page file at
shutdown, it has been giving a memory error Navapsvc.exe
(Norton AV) Should I reinstall it? Thanks for your time.
Click to expand...

Here, check out these two links:

Reduce the size of your data file:
http://office.microsoft.com/assista...y=compacting&Scope=TC,HP,HA,RC,FX,ES,EP,DC,XT

Show all folders:
http://office.microsoft.com/assista...yID=3hX52Eaa_&Query=open+folder+list&Scope=TC
%2cHP%2cHA%2cRC%2cFX%2cES%2cEP%2cDC%2cXT
 
CWShredder is picking up the two following registry keys
as part of my problem with CoolWebSearch:
1.
HKLM\Software\Microsoft\WindowsNT\CurrentVersion\Userinit.
DATA: C:\WINDOWS\system32\userinit.exe,
2.
HKLM\Software\Microsoft\WindowsNT\CurrentVersion\Shell.
DATA: Explorer.exe.

I removed the C\Windows\system32\userinit.exe file, and
it just reappears, and a little later on, so do all the
other manifestations of CoolWedSearch. Other Reg Keys I
find with CWShredder and AdAware and delete, about 3
times a day. System is up to date and always is, Norton
AV also, MooSoft Cleaner detects the .dll's when they
appear and I quarantine them. I have SpySweeper keeping
my homepage (most of the time) where it should be. Any
suggestions??

Tonight I'm going to leave the computer running all
night, but without Outlook being open, and see what
happens to the page file...will let you know because it
seems the explorer.exe process grows quite huge in Task
Manager. Thanks for the help.
 
Toader said:
CWShredder is picking up the two following registry keys
as part of my problem with CoolWebSearch:
1.
HKLM\Software\Microsoft\WindowsNT\CurrentVersion\Userinit.
DATA: C:\WINDOWS\system32\userinit.exe,
2.
HKLM\Software\Microsoft\WindowsNT\CurrentVersion\Shell.
DATA: Explorer.exe.

I removed the C\Windows\system32\userinit.exe file, and
it just reappears, and a little later on, so do all the
other manifestations of CoolWedSearch. Other Reg Keys I
find with CWShredder and AdAware and delete, about 3
times a day. System is up to date and always is, Norton
AV also, MooSoft Cleaner detects the .dll's when they
appear and I quarantine them. I have SpySweeper keeping
my homepage (most of the time) where it should be. Any
suggestions??

Tonight I'm going to leave the computer running all
night, but without Outlook being open, and see what
happens to the page file...will let you know because it
seems the explorer.exe process grows quite huge in Task
Manager. Thanks for the help.
Click to expand...

Many spyware programs are writen to recreate themselves after it is detected
that you delete them. What I would do is run Ad-Aware multiple times until
you get to a point that it shows zero results. If you get to a point where
it does not delete a stubborn few, then boot to safe mode and repeat the
scans multiple times again. If that doesn't work, I would post your scan
logs at www.lavasoftsupport.com and someone will help you get rid of it.
Also, if you have multiple login accounts, this can make it even more
difficult. You should run multiple scans while logged into each account.

Also, I would go to delete your temporary files and if you have multiple
logons, do it for each account. You will find your temporary file folder at
c:\windows\documents and settings\<username>\local settings\temp. The best
thing is to do it immediately after reboot and considering you are dealing
with spyware, your chances are even better if you do this in Safe Mode. If
you have not already done so, you will have to set your explorer to show
hidden files and folders. To do this, open My Computer and click on Tools,
Folder Options, View and check Show Hidden Files and Folders. Immediately
empty your Recycle Bin. You will also want to delete your temporary files
in Internet Explorer. Tools, Internet Options, Delete Files.

Like I said, if you have any problems, don't hesitate to post a message at
www.lavasoftsupport.com. All they do is help people get rid of spyware and
they know how to do it.

Good Luck
 
Back
Top