Program folder opens at start up?

[Guest]

Not a really serious problem, but rather annoying. The "Program" folder opens
on my desktop every time I log in. Why is this happening? and How do I stop
it? If I minimize and move it to a unused portion of the desktop it will open
and be just as small in that place i move it to. However, closing it only
removes it temporarily. Next time I turn the computer on and log in, it's
there again. Same thing happens on all users.
Thanks for any tips on how to solve this annoyence.

 

[pi511]

you must have deleted (or uninstalled) a program which used to run at
boot
now that that program is not there any more, but has the folder
remained, its shortcut at startup or registry opens that folder instead
(by explorer)

start-run-msconfig-startup find a program you uninstalled or a file
missing and delete it from startup (or registry)

 

[pi511]

"or a pair of quotation marks needed for that command at startup"
eg:
c:\program files\nero\nero.exe command opens c:\program with
parameters "files\nero\nero.exe"
but
"c:\program files\nero\nero.exe" opens nero.exe

 

[Gary S. Terhune]

Please do the following:

1. In the Start >Run box, type in MSINFO32, then press <Enter>.

2. In the System Information utility that shows up, click the + sign by
Software Environment, then click on Startup Programs.

3. Press Ctrl-A, then Ctrl-C.

4. Open a reply to this post, then press Ctrl-V to Paste in the data. Send
it.

One of the startup commands is poorly written. We'll see which one. Do you
remember if you installed something just before this behavior started?

 

[Guest]

"or a pair of quotation marks needed for that command at startup"
eg:
c:\program files\nero\nero.exe command opens c:\program with
parameters "files\nero\nero.exe"
but
"c:\program files\nero\nero.exe" opens nero.exe

There are several that don't have quotation marks. Should they all have
quotation marks? That doesn't seem right. How can I tell which should have
and which shouldn't?

 

[Guest]

Here's the list. Not really sure which it could be, possibly InCD command?
Have a look, thanks for the help. Good Luck! I think this started after I
installed a program, but not sure which one. I have taken away two which I
thought were the culprates but no changes. Could be after I installed an
Adobe Reader a long time ago, should I try deleting that too?
Thanks,
Keith

CTFMON.EXE c:\windows\system32\ctfmon.exe NT
INSTANS\SYSTEM HKU\S-1-5-18\SOFTWARE\Microsoft\Windows\CurrentVersion\Run
CTFMON.EXE c:\windows\system32\ctfmon.exe NT INSTANS\LOKAL
TJÄNST HKU\S-1-5-19\SOFTWARE\Microsoft\Windows\CurrentVersion\Run
CTFMON.EXE c:\windows\system32\ctfmon.exe NT INSTANS\NETWORK
SERVICE HKU\S-1-5-20\SOFTWARE\Microsoft\Windows\CurrentVersion\Run
CTFMON.EXE c:\windows\system32\ctfmon.exe DJZBC32J\Keith HKU\S-1-5-21-1680917673-1586175532-4280541903-1006\SOFTWARE\Microsoft\Windows\CurrentVersion\Run
CTFMON.EXE c:\windows\system32\ctfmon.exe .DEFAULT HKU\.DEFAULT\SOFTWARE\Microsoft\Windows\CurrentVersion\Run
CTSysVol c:\program\creative\sbaudigy\surround mixer\ctsysvol.exe /r All
Users HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Run
Creative Detector "c:\program\creative\mediasource\detector\ctdetect.exe"
/r DJZBC32J\Keith HKU\S-1-5-21-1680917673-1586175532-4280541903-1006\SOFTWARE\Microsoft\Windows\CurrentVersion\Run
DIGServices c:\program\espnruntime\digservices.exe /brand=espn
/priority=0 /poll=24 All
Users HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Run
DIGStream c:\program\digstream\digstream.exe All
Users HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Run
DLA c:\windows\system32\dla\dlactrlw.exe All
Users HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Run
DLCDCATS rundll32
c:\windows\system32\spool\drivers\w32x86\3\dlcdtime.dll,_rundllentry@16 All
Users HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Run
DMXLauncher c:\program\dell\media experience\dmxlauncher.exe All
Users HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Run
F-Secure Automatic
Update c:\program\f-secu~1\backweb\7681197\program\f-secu~1.exe -startup All
Users Gemensam autostart
F-Secure Manager "c:\program\f-secure internet security\common\fsm32.exe"
/splash All Users HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Run
F-Secure TNB "c:\program\f-secure internet security\tnb\tnbutil.exe"
/checkall /waitforsw All
Users HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Run
ISUSPM Startup "c:\program\delade
filer\installshield\updateservice\isuspm.exe" -startup All
Users HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Run
ISUSScheduler "c:\program\delade
filer\installshield\updateservice\issch.exe" -start All
Users HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Run
InCD c:\program files\ahead\incd\incd.exe All
Users HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Run
MBMon rundll32 ctmbha.dll,mbmon All
Users HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Run
MSKDetectorExe c:\program\mcafee\spamkiller\mskdetct.exe /uninstall All
Users HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Run
MemoryCardManager "c:\program\dell photo aio printer 944\memcard.exe" All
Users HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Run
NeroCheck c:\windows\system32\nerocheck.exe All
Users HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Run
NvCplDaemon rundll32.exe c:\windows\system32\nvcpl.dll,nvstartup All
Users HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Run
NvMediaCenter rundll32.exe
c:\windows\system32\nvmctray.dll,nvtaskbarinit All
Users HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Run
Personal c:\program\personal\bin\personal.exe All Users Gemensam autostart
QuickTime Task "c:\program\quicktime\qttask.exe" -atboottime All
Users HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Run
SetDefaultMIDI mididef.exe DJZBC32J\Keith HKU\S-1-5-21-1680917673-1586175532-4280541903-1006\SOFTWARE\Microsoft\Windows\CurrentVersion\Run
Spyware Doctor "c:\program\spyware doctor\swdoctor.exe" /q NT
INSTANS\SYSTEM HKU\S-1-5-18\SOFTWARE\Microsoft\Windows\CurrentVersion\Run
Spyware Doctor "c:\program\spyware doctor\swdoctor.exe"
/q DJZBC32J\Keith HKU\S-1-5-21-1680917673-1586175532-4280541903-1006\SOFTWARE\Microsoft\Windows\CurrentVersion\Run
Spyware Doctor "c:\program\spyware doctor\swdoctor.exe"
/q .DEFAULT HKU\.DEFAULT\SOFTWARE\Microsoft\Windows\CurrentVersion\Run
SunJavaUpdateSched "c:\program\java\jre1.6.0_02\bin\jusched.exe" All
Users HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Run
Telia "c:\program\telia\supportassistent\bin\sprtcmd.exe" /p telia All
Users HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Run
TkBellExe "c:\program\delade filer\real\update_ob\realsched.exe"
-osboot All Users HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Run
Ulead AutoDetector v2 c:\program\delade filer\ulead
systems\autodetector\monitor.exe All
Users HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Run
UpdReg c:\windows\updreg.exe All
Users HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Run
VoiceCenter "c:\program\creative\voicecenter\andreavc.exe" /tray All
Users HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Run
WebCamRT.exe DJZBC32J\Keith HKU\S-1-5-21-1680917673-1586175532-4280541903-1006\SOFTWARE\Microsoft\Windows\CurrentVersion\Run
desktop desktop.ini NT INSTANS\SYSTEM Autostart
desktop desktop.ini DJZBC32J\Keith Autostart
desktop desktop.ini .DEFAULT Autostart
desktop desktop.ini All Users Gemensam autostart
dlcdmon.exe "c:\program\dell photo aio printer 944\dlcdmon.exe" All
Users HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Run
iTunesHelper "c:\program\itunes\ituneshelper.exe" All
Users HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Run
igfxhkcmd c:\windows\system32\hkcmd.exe All
Users HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Run
igfxpers c:\windows\system32\igfxpers.exe All
Users HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Run
igfxtray c:\windows\system32\igfxtray.exe All
Users HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Run
nwiz nwiz.exe /install All
Users HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Run

 

[Gary S. Terhune]

If there's a space in the path, it needs quotation marks, otherwise the
command interpreter considers that space to be the end of that part of the
command. Example:

C:\windows\regedit.exe requires no quotation marks.
C:\Program Files\Outlook Express\msimn.exe requires the quotation marks.
Otherwise, the command interpreter sees it as C:\program

 

[Gary S. Terhune]

CTSysVol c:\program\creative\sbaudigy\surround mixer\ctsysvol.exe /r
There's a space between surround and mixer. Should be like this:
"c:\program\creative\sbaudigy\surround mixer\ctsysvol.exe" /r

The rest seem to be OK, but it's odd, to me that where I would expect to see
C:\Program Files\ I see just C:\Program. Care to check that there really is
a C:\Program folder? YOU have a few things in C:\Program Files\ but many
things in C:\Program\.

 

[Guest]

Thanks alot for the help. Where do I fix this? Regedit?

 

[Guest]

Found it in regedit. Should I add quotes? Don't see any others with quotes in
regedit. Should just remove the space between surround and mixer?

 

[Guest]

OK, now I've tried adding the quotes in regedit. I see that the data is
changed, but when I restart the computer my problem remains. I went back into
regedit and the data is changed back to how it was . . . without quotes. Am I
doing something wrong? Shouldn't the quotes remain? I've even tried adding
quotes to Ulead Autodetector since there is a space in that string also.
Should I try removing the space instead?
Thanks again.

 

[Gary S. Terhune]

Please answer my previous question. Do you really have a folder "C:\Program"
on your machine (not "C:\Program Files")?

No, once you have changed the Registry data, it should stay changed. That it
doesn't do so tells us that something is changing it back. Not good. Could
be malware, could be the SoundBlaster app itself, could be some stupid "Fix
my Registry" software. Do you have anything like that installed? Use
MSCONFIG to disable all Startup items and non-Microsoft services. Reboot,
edit the Registry again, reboot again. How's that work?

 

[Gary S. Terhune]

Yes, you should add the quotes, but I see a LOT of items that have quotes in
your list. Most of them, in fact, but they're all in the HKEY_LOCAL_MACHINE
Run key, not the HKEY_CURRENT_USER Run key, which is where your problem item
is located. Quotes are only needed if there's a space in the command
parameter (in this case, the path to the executable.)

 

[Guest]

Yes, I have a c:\Program folder as well as c:\Program files. Like you pointed
out before, there are lots of items in program folder but only a few under
program files. I Don't have any Fix Registry program installed that I'm aware
of. I've been really good about keeping away virus, etc but one could have
slipped through.
I'll try taking away everything and change the registry then see what
happens. By the way Soundblaster was preinstalled on my computer but I have
the installation CD. Should I try reinstalling and overwriting existing
Soundblaster files?

 

[Gary S. Terhune]

Well, it *might* help to reinstall SB, but I wouldn't give it much hope. Too
bad about that "Programs" folder. Most stuff is installed there, so it looks
like you at one time managed to change the Registry to make that the default
location for installations. Not something I would do, but you're stuck with
it now.

I'm headed out of town for a week, so you might want to take the info you've
gathered and what you've learned and post a new post with a slightly
different Subject line and attract the attention of someone else who can
continue with you. Sorry about that.

Oh... There is a chance that your problem is due to malware. I recommend a
complete diagnosis, starting here:
http://aumha.org/a/quickfix.htm

 

[Guest]

Thanks for all your help. Problem is now solved. Checked for malware and
there wasn't anything.
I ran msconfig and took away everything that was in the startup then started
adding them again, one at a time. I found several more commands with
Quotation problems (CTSysVol, Ulead Detector, and InCD). Once I got them
changed in the registry everything has been ok, problem solved.
Once again, thanks for leading in the right direction.