winword.exe starts automatically at boot up, uses large % and slow

  • Thread starter Thread starter Guest
  • Start date Start date
G

Guest

Running Windows XP Professional SP2
Noticed very slow performance. Winword.exe was running (though no
document/application open) and using up 30-40% cpu. "end task" the
winword.exe and all ok until next reboot.
Can't find where it's starting. Found nothing in Run registry key.
Using AVG virus progam, current.
 
I have a similar problem with Kodak. I just got done talking to tech support
on emachines and he said to go to the start then run then where it says open
field type msconfig. Hit ok then go to the startup tab. Remove all check
marks except big fix, hot keys, and antivirus. click apply and close. I did
this and my Kodak no longer runs at startup and doesn't slow things down. I
hope this helps
 
I'm afraid I've already tried that, but thanks.

Dianecochenour said:
I have a similar problem with Kodak. I just got done talking to tech support
on emachines and he said to go to the start then run then where it says open
field type msconfig. Hit ok then go to the startup tab. Remove all check
marks except big fix, hot keys, and antivirus. click apply and close. I did
this and my Kodak no longer runs at startup and doesn't slow things down. I
hope this helps
 
KW82 said:
I'm afraid I've already tried that, but thanks.

Google "startup inspector"

John




---
avast! Antivirus: Outbound message clean.
Virus Database (VPS): 000733-0, 11/04/2007
Tested on: 4/12/2007 17:28:09
avast! - copyright (c) 1988-2007 ALWIL Software.
http://www.avast.com
 
winword.exe, besides being MS Word, can also be a trojan.

There is more than one run key in the registry. There are 13+ places that
programs can be started from, msconfig does not list all of them.

UPDATE your antivirus software and run a full system scan.

UPDATE whatever anti-spyware applications that you have and run a full
system scan with each one.

You might want to start in Safe Mode to run your antivirus and anti-spyware
software.

Running a full system antivirus scan or anti-spyware scan in Safe Mode can
be a good idea. Some viruses and other malware like to conceal themselves
in areas Windows protects while using them. Safe mode can prevent those
applications access and therefore unprotect the viruses or other malware
allowing for easier removal.

''In safe mode, you have access to only basic files and drivers
(mouse, monitor, keyboard, mass storage, base video, default system
services), just the minimum device drivers required to start Windows.''

Because of that some malware does not load in Safe Mode and is easier to get
rid of.

How to start Windows in Safe Mode Windows XP
http://www.bleepingcomputer.com/forums/index.php?showtutorial=61#winxo
--------------------

Get one or both of these.

StartMan has an option that takes you to
http://www.sysinfo.org/startupinfo.html
when your right click an entry and select Identify.

Also with StartMan, clicking on the Help menu, you can select Identifying
Startups (Pacman's Portal)... It sends you to
http://www.pacs-portal.co.uk/startup_index.htm

[[StartMan is an extended 'msconfig' Startup Manager, designed to take
control of all those pesky programs and background services that load and
run at logon - most of which you probably don't need. As well as providing
the usual trouble-shooting options to enable or disable startups, StartMan
also permits the removal of startups.
Duplicate Detection and Removal, a unique feature of StartMan, can be
configured to remove all duplicates automatically, with or without
prompting.
Orphan Detection and Removal. As above, for orphaned startups.
Executable Detection and Removal. As above, for executables.
Includes a full range of sorting options to make it easier to locate a
specific startup - by name, by filename - even by command line parameter! ]]

StartMan v1.3.96
http://www.pt.lu/comnet/desc/startman.html

StartMan v1.3.96 Direct download
http://www.pt.lu/comnet/files/utils/startman10396.exe
-----

Startup Control Panel is another pretty good application.

[[Startup Control Panel is a nifty control panel applet that allows you to
easily configure which programs run when your computer starts. It's simple
to use and, like all my programs, is very small and won't burden your
system. A valuable tool for system administrators!]]

Download the EXE Version and just extract the executable wherever you want.

Startup Control Panel
http://www.mlin.net/StartupCPL.shtml

--
Hope this helps. Let us know.

Wes
MS-MVP Windows Shell/User

In
 
Good suggestions, thanks. Still no luck though. It appears to be some kind
of trojan/worm/whatever, but AVG doesn't detect anything. (ran in Safe Mode
w/ System Restore disabled)

Wesley Vogel said:
winword.exe, besides being MS Word, can also be a trojan.

There is more than one run key in the registry. There are 13+ places that
programs can be started from, msconfig does not list all of them.

UPDATE your antivirus software and run a full system scan.

UPDATE whatever anti-spyware applications that you have and run a full
system scan with each one.

You might want to start in Safe Mode to run your antivirus and anti-spyware
software.

Running a full system antivirus scan or anti-spyware scan in Safe Mode can
be a good idea. Some viruses and other malware like to conceal themselves
in areas Windows protects while using them. Safe mode can prevent those
applications access and therefore unprotect the viruses or other malware
allowing for easier removal.

''In safe mode, you have access to only basic files and drivers
(mouse, monitor, keyboard, mass storage, base video, default system
services), just the minimum device drivers required to start Windows.''

Because of that some malware does not load in Safe Mode and is easier to get
rid of.

How to start Windows in Safe Mode Windows XP
http://www.bleepingcomputer.com/forums/index.php?showtutorial=61#winxo
--------------------

Get one or both of these.

StartMan has an option that takes you to
http://www.sysinfo.org/startupinfo.html
when your right click an entry and select Identify.

Also with StartMan, clicking on the Help menu, you can select Identifying
Startups (Pacman's Portal)... It sends you to
http://www.pacs-portal.co.uk/startup_index.htm

[[StartMan is an extended 'msconfig' Startup Manager, designed to take
control of all those pesky programs and background services that load and
run at logon - most of which you probably don't need. As well as providing
the usual trouble-shooting options to enable or disable startups, StartMan
also permits the removal of startups.
Duplicate Detection and Removal, a unique feature of StartMan, can be
configured to remove all duplicates automatically, with or without
prompting.
Orphan Detection and Removal. As above, for orphaned startups.
Executable Detection and Removal. As above, for executables.
Includes a full range of sorting options to make it easier to locate a
specific startup - by name, by filename - even by command line parameter! ]]

StartMan v1.3.96
http://www.pt.lu/comnet/desc/startman.html

StartMan v1.3.96 Direct download
http://www.pt.lu/comnet/files/utils/startman10396.exe
-----

Startup Control Panel is another pretty good application.

[[Startup Control Panel is a nifty control panel applet that allows you to
easily configure which programs run when your computer starts. It's simple
to use and, like all my programs, is very small and won't burden your
system. A valuable tool for system administrators!]]

Download the EXE Version and just extract the executable wherever you want.

Startup Control Panel
http://www.mlin.net/StartupCPL.shtml

--
Hope this helps. Let us know.

Wes
MS-MVP Windows Shell/User

In
KW82 said:
I'm afraid I've already tried that, but thanks.
 
Do a Search for winword.exe on your machine.

winword.exe should be in C:\Program Files\Microsoft Office\Office11 or
Office10 or Office9 depending on your version of MS Word and in NO other
location.

Microsoft Office 2003 = Word 2003 = 11
Microsoft Office XP (2002) = Microsoft Word 2002 = 10
Microsoft Office 2000 = Microsoft Word 2000 = 9

HOW TO: Search For Hidden Or System Files In Windows XP
http://support.microsoft.com/kb/302347

--
Hope this helps. Let us know.

Wes
MS-MVP Windows Shell/User

In
KW82 said:
Good suggestions, thanks. Still no luck though. It appears to be some
kind of trojan/worm/whatever, but AVG doesn't detect anything. (ran in
Safe Mode w/ System Restore disabled)

Wesley Vogel said:
winword.exe, besides being MS Word, can also be a trojan.

There is more than one run key in the registry. There are 13+ places
that programs can be started from, msconfig does not list all of them.

UPDATE your antivirus software and run a full system scan.

UPDATE whatever anti-spyware applications that you have and run a full
system scan with each one.

You might want to start in Safe Mode to run your antivirus and
anti-spyware software.

Running a full system antivirus scan or anti-spyware scan in Safe Mode
can be a good idea. Some viruses and other malware like to conceal
themselves in areas Windows protects while using them. Safe mode can
prevent those applications access and therefore unprotect the viruses or
other malware allowing for easier removal.

''In safe mode, you have access to only basic files and drivers
(mouse, monitor, keyboard, mass storage, base video, default system
services), just the minimum device drivers required to start Windows.''

Because of that some malware does not load in Safe Mode and is easier to
get rid of.

How to start Windows in Safe Mode Windows XP
http://www.bleepingcomputer.com/forums/index.php?showtutorial=61#winxo
--------------------

Get one or both of these.

StartMan has an option that takes you to
http://www.sysinfo.org/startupinfo.html
when your right click an entry and select Identify.

Also with StartMan, clicking on the Help menu, you can select Identifying
Startups (Pacman's Portal)... It sends you to
http://www.pacs-portal.co.uk/startup_index.htm

[[StartMan is an extended 'msconfig' Startup Manager, designed to take
control of all those pesky programs and background services that load and
run at logon - most of which you probably don't need. As well as
providing the usual trouble-shooting options to enable or disable
startups, StartMan also permits the removal of startups.
Duplicate Detection and Removal, a unique feature of StartMan, can be
configured to remove all duplicates automatically, with or without
prompting.
Orphan Detection and Removal. As above, for orphaned startups.
Executable Detection and Removal. As above, for executables.
Includes a full range of sorting options to make it easier to locate a
specific startup - by name, by filename - even by command line
parameter! ]]

StartMan v1.3.96
http://www.pt.lu/comnet/desc/startman.html

StartMan v1.3.96 Direct download
http://www.pt.lu/comnet/files/utils/startman10396.exe
-----

Startup Control Panel is another pretty good application.

[[Startup Control Panel is a nifty control panel applet that allows you
to easily configure which programs run when your computer starts. It's
simple to use and, like all my programs, is very small and won't burden
your system. A valuable tool for system administrators!]]

Download the EXE Version and just extract the executable wherever you
want.

Startup Control Panel
http://www.mlin.net/StartupCPL.shtml

--
Hope this helps. Let us know.

Wes
MS-MVP Windows Shell/User

In
KW82 said:
I'm afraid I've already tried that, but thanks.

:

I have a similar problem with Kodak. I just got done talking to tech
support on emachines and he said to go to the start then run then where
it says open field type msconfig. Hit ok then go to the startup tab.
Remove all check marks except big fix, hot keys, and antivirus. click
apply and close. I did this and my Kodak no longer runs at startup and
doesn't slow things down. I hope this helps

:

Running Windows XP Professional SP2
Noticed very slow performance. Winword.exe was running (though no
document/application open) and using up 30-40% cpu. "end task" the
winword.exe and all ok until next reboot.
Can't find where it's starting. Found nothing in Run registry key.
Using AVG virus progam, current.
 
Thanks Wesley. It finally hit me to try that a couple days ago...duh! ...and
it worked. I found winword.exe in a 'prefetch" (?) folder:
winword.exe.yadayada.pf
I deleted it and all is good, so far.
Thanks again

Wesley Vogel said:
Do a Search for winword.exe on your machine.

winword.exe should be in C:\Program Files\Microsoft Office\Office11 or
Office10 or Office9 depending on your version of MS Word and in NO other
location.

Microsoft Office 2003 = Word 2003 = 11
Microsoft Office XP (2002) = Microsoft Word 2002 = 10
Microsoft Office 2000 = Microsoft Word 2000 = 9

HOW TO: Search For Hidden Or System Files In Windows XP
http://support.microsoft.com/kb/302347

--
Hope this helps. Let us know.

Wes
MS-MVP Windows Shell/User

In
KW82 said:
Good suggestions, thanks. Still no luck though. It appears to be some
kind of trojan/worm/whatever, but AVG doesn't detect anything. (ran in
Safe Mode w/ System Restore disabled)

Wesley Vogel said:
winword.exe, besides being MS Word, can also be a trojan.

There is more than one run key in the registry. There are 13+ places
that programs can be started from, msconfig does not list all of them.

UPDATE your antivirus software and run a full system scan.

UPDATE whatever anti-spyware applications that you have and run a full
system scan with each one.

You might want to start in Safe Mode to run your antivirus and
anti-spyware software.

Running a full system antivirus scan or anti-spyware scan in Safe Mode
can be a good idea. Some viruses and other malware like to conceal
themselves in areas Windows protects while using them. Safe mode can
prevent those applications access and therefore unprotect the viruses or
other malware allowing for easier removal.

''In safe mode, you have access to only basic files and drivers
(mouse, monitor, keyboard, mass storage, base video, default system
services), just the minimum device drivers required to start Windows.''

Because of that some malware does not load in Safe Mode and is easier to
get rid of.

How to start Windows in Safe Mode Windows XP
http://www.bleepingcomputer.com/forums/index.php?showtutorial=61#winxo
--------------------

Get one or both of these.

StartMan has an option that takes you to
http://www.sysinfo.org/startupinfo.html
when your right click an entry and select Identify.

Also with StartMan, clicking on the Help menu, you can select Identifying
Startups (Pacman's Portal)... It sends you to
http://www.pacs-portal.co.uk/startup_index.htm

[[StartMan is an extended 'msconfig' Startup Manager, designed to take
control of all those pesky programs and background services that load and
run at logon - most of which you probably don't need. As well as
providing the usual trouble-shooting options to enable or disable
startups, StartMan also permits the removal of startups.
Duplicate Detection and Removal, a unique feature of StartMan, can be
configured to remove all duplicates automatically, with or without
prompting.
Orphan Detection and Removal. As above, for orphaned startups.
Executable Detection and Removal. As above, for executables.
Includes a full range of sorting options to make it easier to locate a
specific startup - by name, by filename - even by command line
parameter! ]]

StartMan v1.3.96
http://www.pt.lu/comnet/desc/startman.html

StartMan v1.3.96 Direct download
http://www.pt.lu/comnet/files/utils/startman10396.exe
-----

Startup Control Panel is another pretty good application.

[[Startup Control Panel is a nifty control panel applet that allows you
to easily configure which programs run when your computer starts. It's
simple to use and, like all my programs, is very small and won't burden
your system. A valuable tool for system administrators!]]

Download the EXE Version and just extract the executable wherever you
want.

Startup Control Panel
http://www.mlin.net/StartupCPL.shtml

--
Hope this helps. Let us know.

Wes
MS-MVP Windows Shell/User

In KW82 <[email protected]> hunted and pecked:
I'm afraid I've already tried that, but thanks.

:

I have a similar problem with Kodak. I just got done talking to tech
support on emachines and he said to go to the start then run then where
it says open field type msconfig. Hit ok then go to the startup tab.
Remove all check marks except big fix, hot keys, and antivirus. click
apply and close. I did this and my Kodak no longer runs at startup and
doesn't slow things down. I hope this helps

:

Running Windows XP Professional SP2
Noticed very slow performance. Winword.exe was running (though no
document/application open) and using up 30-40% cpu. "end task" the
winword.exe and all ok until next reboot.
Can't find where it's starting. Found nothing in Run registry key.
Using AVG virus progam, current.
 
To make a long story short, all winword.exe.yadayada.pf means is that a
winword.exe ran at least one time on your machine and that the Task
Scheduler service is probably running.

You can delete winword.exe.yadayada.pf, start winword.exe and another
winword.exe.yadayada.pf will be recreated, if the Prefetcher is working.

..pf files are prefetch files.
"Prefetch files are essentially a resource list. Any time a program is
executed, Windows XP will attempt to find a pre-existing prefetch file, and
if it's available, it will use it to make the application load up faster.
The file will also be updated after it is accessed, so that the more an
application is used, the bigger the drop in loading time (to a point). If
the application doesn't already have an associated prefetch file, Windows XP
will create one. Those files are stored in the \%windir%\prefetch directory.
One important note is that the process depends on the Task Scheduler
service. If the Task Scheduler service isn't running, the prefetch mechanism
isn't used and the files won't be read or updated."
http://filext.com/file-extension/pf

--
Hope this helps. Let us know.

Wes
MS-MVP Windows Shell/User

In
KW82 said:
Thanks Wesley. It finally hit me to try that a couple days ago...duh!
...and it worked. I found winword.exe in a 'prefetch" (?) folder:
winword.exe.yadayada.pf
I deleted it and all is good, so far.
Thanks again

Wesley Vogel said:
Do a Search for winword.exe on your machine.

winword.exe should be in C:\Program Files\Microsoft Office\Office11 or
Office10 or Office9 depending on your version of MS Word and in NO other
location.

Microsoft Office 2003 = Word 2003 = 11
Microsoft Office XP (2002) = Microsoft Word 2002 = 10
Microsoft Office 2000 = Microsoft Word 2000 = 9

HOW TO: Search For Hidden Or System Files In Windows XP
http://support.microsoft.com/kb/302347

--
Hope this helps. Let us know.

Wes
MS-MVP Windows Shell/User

In
KW82 said:
Good suggestions, thanks. Still no luck though. It appears to be some
kind of trojan/worm/whatever, but AVG doesn't detect anything. (ran in
Safe Mode w/ System Restore disabled)

:

winword.exe, besides being MS Word, can also be a trojan.

There is more than one run key in the registry. There are 13+ places
that programs can be started from, msconfig does not list all of them.

UPDATE your antivirus software and run a full system scan.

UPDATE whatever anti-spyware applications that you have and run a full
system scan with each one.

You might want to start in Safe Mode to run your antivirus and
anti-spyware software.

Running a full system antivirus scan or anti-spyware scan in Safe Mode
can be a good idea. Some viruses and other malware like to conceal
themselves in areas Windows protects while using them. Safe mode can
prevent those applications access and therefore unprotect the viruses
or other malware allowing for easier removal.

''In safe mode, you have access to only basic files and drivers
(mouse, monitor, keyboard, mass storage, base video, default system
services), just the minimum device drivers required to start Windows.''

Because of that some malware does not load in Safe Mode and is easier
to get rid of.

How to start Windows in Safe Mode Windows XP
http://www.bleepingcomputer.com/forums/index.php?showtutorial=61#winxo
--------------------

Get one or both of these.

StartMan has an option that takes you to
http://www.sysinfo.org/startupinfo.html
when your right click an entry and select Identify.

Also with StartMan, clicking on the Help menu, you can select
Identifying Startups (Pacman's Portal)... It sends you to
http://www.pacs-portal.co.uk/startup_index.htm

[[StartMan is an extended 'msconfig' Startup Manager, designed to take
control of all those pesky programs and background services that load
and run at logon - most of which you probably don't need. As well as
providing the usual trouble-shooting options to enable or disable
startups, StartMan also permits the removal of startups.
Duplicate Detection and Removal, a unique feature of StartMan, can be
configured to remove all duplicates automatically, with or without
prompting.
Orphan Detection and Removal. As above, for orphaned startups.
Executable Detection and Removal. As above, for executables.
Includes a full range of sorting options to make it easier to locate a
specific startup - by name, by filename - even by command line
parameter! ]]

StartMan v1.3.96
http://www.pt.lu/comnet/desc/startman.html

StartMan v1.3.96 Direct download
http://www.pt.lu/comnet/files/utils/startman10396.exe
-----

Startup Control Panel is another pretty good application.

[[Startup Control Panel is a nifty control panel applet that allows you
to easily configure which programs run when your computer starts. It's
simple to use and, like all my programs, is very small and won't burden
your system. A valuable tool for system administrators!]]

Download the EXE Version and just extract the executable wherever you
want.

Startup Control Panel
http://www.mlin.net/StartupCPL.shtml

--
Hope this helps. Let us know.

Wes
MS-MVP Windows Shell/User

In KW82 <[email protected]> hunted and pecked:
I'm afraid I've already tried that, but thanks.

:

I have a similar problem with Kodak. I just got done talking to tech
support on emachines and he said to go to the start then run then
where it says open field type msconfig. Hit ok then go to the
startup tab. Remove all check marks except big fix, hot keys, and
antivirus. click apply and close. I did this and my Kodak no
longer runs at startup and doesn't slow things down. I hope this
helps

:

Running Windows XP Professional SP2
Noticed very slow performance. Winword.exe was running (though no
document/application open) and using up 30-40% cpu. "end task" the
winword.exe and all ok until next reboot.
Can't find where it's starting. Found nothing in Run registry key.
Using AVG virus progam, current.
 
We have no tasks scheduled so will try disabling the service.
Thanks again.

Wesley Vogel said:
To make a long story short, all winword.exe.yadayada.pf means is that a
winword.exe ran at least one time on your machine and that the Task
Scheduler service is probably running.

You can delete winword.exe.yadayada.pf, start winword.exe and another
winword.exe.yadayada.pf will be recreated, if the Prefetcher is working.

..pf files are prefetch files.
"Prefetch files are essentially a resource list. Any time a program is
executed, Windows XP will attempt to find a pre-existing prefetch file, and
if it's available, it will use it to make the application load up faster.
The file will also be updated after it is accessed, so that the more an
application is used, the bigger the drop in loading time (to a point). If
the application doesn't already have an associated prefetch file, Windows XP
will create one. Those files are stored in the \%windir%\prefetch directory.
One important note is that the process depends on the Task Scheduler
service. If the Task Scheduler service isn't running, the prefetch mechanism
isn't used and the files won't be read or updated."
http://filext.com/file-extension/pf

--
Hope this helps. Let us know.

Wes
MS-MVP Windows Shell/User

In
KW82 said:
Thanks Wesley. It finally hit me to try that a couple days ago...duh!
...and it worked. I found winword.exe in a 'prefetch" (?) folder:
winword.exe.yadayada.pf
I deleted it and all is good, so far.
Thanks again

Wesley Vogel said:
Do a Search for winword.exe on your machine.

winword.exe should be in C:\Program Files\Microsoft Office\Office11 or
Office10 or Office9 depending on your version of MS Word and in NO other
location.

Microsoft Office 2003 = Word 2003 = 11
Microsoft Office XP (2002) = Microsoft Word 2002 = 10
Microsoft Office 2000 = Microsoft Word 2000 = 9

HOW TO: Search For Hidden Or System Files In Windows XP
http://support.microsoft.com/kb/302347

--
Hope this helps. Let us know.

Wes
MS-MVP Windows Shell/User

In KW82 <[email protected]> hunted and pecked:
Good suggestions, thanks. Still no luck though. It appears to be some
kind of trojan/worm/whatever, but AVG doesn't detect anything. (ran in
Safe Mode w/ System Restore disabled)

:

winword.exe, besides being MS Word, can also be a trojan.

There is more than one run key in the registry. There are 13+ places
that programs can be started from, msconfig does not list all of them.

UPDATE your antivirus software and run a full system scan.

UPDATE whatever anti-spyware applications that you have and run a full
system scan with each one.

You might want to start in Safe Mode to run your antivirus and
anti-spyware software.

Running a full system antivirus scan or anti-spyware scan in Safe Mode
can be a good idea. Some viruses and other malware like to conceal
themselves in areas Windows protects while using them. Safe mode can
prevent those applications access and therefore unprotect the viruses
or other malware allowing for easier removal.

''In safe mode, you have access to only basic files and drivers
(mouse, monitor, keyboard, mass storage, base video, default system
services), just the minimum device drivers required to start Windows.''

Because of that some malware does not load in Safe Mode and is easier
to get rid of.

How to start Windows in Safe Mode Windows XP
http://www.bleepingcomputer.com/forums/index.php?showtutorial=61#winxo
--------------------

Get one or both of these.

StartMan has an option that takes you to
http://www.sysinfo.org/startupinfo.html
when your right click an entry and select Identify.

Also with StartMan, clicking on the Help menu, you can select
Identifying Startups (Pacman's Portal)... It sends you to
http://www.pacs-portal.co.uk/startup_index.htm

[[StartMan is an extended 'msconfig' Startup Manager, designed to take
control of all those pesky programs and background services that load
and run at logon - most of which you probably don't need. As well as
providing the usual trouble-shooting options to enable or disable
startups, StartMan also permits the removal of startups.
Duplicate Detection and Removal, a unique feature of StartMan, can be
configured to remove all duplicates automatically, with or without
prompting.
Orphan Detection and Removal. As above, for orphaned startups.
Executable Detection and Removal. As above, for executables.
Includes a full range of sorting options to make it easier to locate a
specific startup - by name, by filename - even by command line
parameter! ]]

StartMan v1.3.96
http://www.pt.lu/comnet/desc/startman.html

StartMan v1.3.96 Direct download
http://www.pt.lu/comnet/files/utils/startman10396.exe
-----

Startup Control Panel is another pretty good application.

[[Startup Control Panel is a nifty control panel applet that allows you
to easily configure which programs run when your computer starts. It's
simple to use and, like all my programs, is very small and won't burden
your system. A valuable tool for system administrators!]]

Download the EXE Version and just extract the executable wherever you
want.

Startup Control Panel
http://www.mlin.net/StartupCPL.shtml

--
Hope this helps. Let us know.

Wes
MS-MVP Windows Shell/User

In KW82 <[email protected]> hunted and pecked:
I'm afraid I've already tried that, but thanks.

:

I have a similar problem with Kodak. I just got done talking to tech
support on emachines and he said to go to the start then run then
where it says open field type msconfig. Hit ok then go to the
startup tab. Remove all check marks except big fix, hot keys, and
antivirus. click apply and close. I did this and my Kodak no
longer runs at startup and doesn't slow things down. I hope this
helps

:

Running Windows XP Professional SP2
Noticed very slow performance. Winword.exe was running (though no
document/application open) and using up 30-40% cpu. "end task" the
winword.exe and all ok until next reboot.
Can't find where it's starting. Found nothing in Run registry key.
Using AVG virus progam, current.
 
We have no tasks scheduled so will try disabling the service.

That was not my point. Prefetch needs the Task Scheduler service running in
order for Prefetch to work. If you want to disable it, that's fine, but it
does speed some things up.

What Prefetching does...
<quote>
Windows XP Professional monitors the files that are used when the computer
starts and when you start applications. By monitoring these files, Windows
XP Professional can prefetch them. Prefetching data is the process whereby
data that is expected to be requested is read ahead into the cache.
Prefetching boot files and applications decreases the time needed to start
Windows XP Professional and start applications.

Prefetching is further improved if the files are located next to each other
on the outer edge of the disk. Windows XP Professional optimizes the
location of boot files and applications when the computer is idle. The
optimization occurs in the background and lasts only a minute or two; you
might hear the hard disk being accessed when optimization occurs. After the
initial optimization takes place, subsequent optimization occurs, at most,
every three days.

When you run the Disk Defragmenter tools that are included with Windows XP
Professional, they can perform any optimization updates that are scheduled
to take place during the next idle period. The Disk Defragmenter tools do
not disturb the existing layout of optimized boot files and applications.

Note
Computers running Windows XP Home Edition also prefetch and optimize boot
files and applications.
<quote>
from...
Optimizing Startup Times by Using Defragmentation Tools
http://www.microsoft.com/resources/documentation/Windows/XP/all/reskit/en-us/prkd_tro_uutk.asp


--
Hope this helps. Let us know.

Wes
MS-MVP Windows Shell/User

In
KW82 said:
We have no tasks scheduled so will try disabling the service.
Thanks again.

Wesley Vogel said:
To make a long story short, all winword.exe.yadayada.pf means is that a
winword.exe ran at least one time on your machine and that the Task
Scheduler service is probably running.

You can delete winword.exe.yadayada.pf, start winword.exe and another
winword.exe.yadayada.pf will be recreated, if the Prefetcher is working.

..pf files are prefetch files.
"Prefetch files are essentially a resource list. Any time a program is
executed, Windows XP will attempt to find a pre-existing prefetch file,
and if it's available, it will use it to make the application load up
faster. The file will also be updated after it is accessed, so that the
more an application is used, the bigger the drop in loading time (to a
point). If the application doesn't already have an associated prefetch
file, Windows XP will create one. Those files are stored in the
\%windir%\prefetch directory. One important note is that the process
depends on the Task Scheduler service. If the Task Scheduler service
isn't running, the prefetch mechanism isn't used and the files won't be
read or updated." http://filext.com/file-extension/pf

--
Hope this helps. Let us know.

Wes
MS-MVP Windows Shell/User

In
KW82 said:
Thanks Wesley. It finally hit me to try that a couple days ago...duh!
...and it worked. I found winword.exe in a 'prefetch" (?) folder:
winword.exe.yadayada.pf
I deleted it and all is good, so far.
Thanks again

:

Do a Search for winword.exe on your machine.

winword.exe should be in C:\Program Files\Microsoft Office\Office11 or
Office10 or Office9 depending on your version of MS Word and in NO
other location.

Microsoft Office 2003 = Word 2003 = 11
Microsoft Office XP (2002) = Microsoft Word 2002 = 10
Microsoft Office 2000 = Microsoft Word 2000 = 9

HOW TO: Search For Hidden Or System Files In Windows XP
http://support.microsoft.com/kb/302347

--
Hope this helps. Let us know.

Wes
MS-MVP Windows Shell/User

In KW82 <[email protected]> hunted and pecked:
Good suggestions, thanks. Still no luck though. It appears to be
some kind of trojan/worm/whatever, but AVG doesn't detect anything.
(ran in Safe Mode w/ System Restore disabled)

:

winword.exe, besides being MS Word, can also be a trojan.

There is more than one run key in the registry. There are 13+ places
that programs can be started from, msconfig does not list all of
them.

UPDATE your antivirus software and run a full system scan.

UPDATE whatever anti-spyware applications that you have and run a
full system scan with each one.

You might want to start in Safe Mode to run your antivirus and
anti-spyware software.

Running a full system antivirus scan or anti-spyware scan in Safe
Mode can be a good idea. Some viruses and other malware like to
conceal themselves in areas Windows protects while using them. Safe
mode can prevent those applications access and therefore unprotect
the viruses or other malware allowing for easier removal.

''In safe mode, you have access to only basic files and drivers
(mouse, monitor, keyboard, mass storage, base video, default system
services), just the minimum device drivers required to start
Windows.''

Because of that some malware does not load in Safe Mode and is easier
to get rid of.

How to start Windows in Safe Mode Windows XP
http://www.bleepingcomputer.com/forums/index.php?showtutorial=61#winxo
--------------------

Get one or both of these.

StartMan has an option that takes you to
http://www.sysinfo.org/startupinfo.html
when your right click an entry and select Identify.

Also with StartMan, clicking on the Help menu, you can select
Identifying Startups (Pacman's Portal)... It sends you to
http://www.pacs-portal.co.uk/startup_index.htm

[[StartMan is an extended 'msconfig' Startup Manager, designed to
take control of all those pesky programs and background services
that load and run at logon - most of which you probably don't need.
As well as providing the usual trouble-shooting options to enable or
disable startups, StartMan also permits the removal of startups.
Duplicate Detection and Removal, a unique feature of StartMan, can be
configured to remove all duplicates automatically, with or without
prompting.
Orphan Detection and Removal. As above, for orphaned startups.
Executable Detection and Removal. As above, for executables.
Includes a full range of sorting options to make it easier to locate
a specific startup - by name, by filename - even by command line
parameter! ]]

StartMan v1.3.96
http://www.pt.lu/comnet/desc/startman.html

StartMan v1.3.96 Direct download
http://www.pt.lu/comnet/files/utils/startman10396.exe
-----

Startup Control Panel is another pretty good application.

[[Startup Control Panel is a nifty control panel applet that allows
you to easily configure which programs run when your computer
starts. It's simple to use and, like all my programs, is very small
and won't burden your system. A valuable tool for system
administrators!]]

Download the EXE Version and just extract the executable wherever you
want.

Startup Control Panel
http://www.mlin.net/StartupCPL.shtml

--
Hope this helps. Let us know.

Wes
MS-MVP Windows Shell/User

In KW82 <[email protected]> hunted and pecked:
I'm afraid I've already tried that, but thanks.

:

I have a similar problem with Kodak. I just got done talking to
tech support on emachines and he said to go to the start then run
then where it says open field type msconfig. Hit ok then go to the
startup tab. Remove all check marks except big fix, hot keys, and
antivirus. click apply and close. I did this and my Kodak no
longer runs at startup and doesn't slow things down. I hope this
helps

:

Running Windows XP Professional SP2
Noticed very slow performance. Winword.exe was running (though no
document/application open) and using up 30-40% cpu. "end task"
the winword.exe and all ok until next reboot.
Can't find where it's starting. Found nothing in Run registry key.
Using AVG virus progam, current.
 
Winword.exe is still starting from somewhere. Currently trying to monitor
when it actually starts. It appears to not be starting at startup.
Thanks for the info.

Wesley Vogel said:
We have no tasks scheduled so will try disabling the service.

That was not my point. Prefetch needs the Task Scheduler service running in
order for Prefetch to work. If you want to disable it, that's fine, but it
does speed some things up.

What Prefetching does...
<quote>
Windows XP Professional monitors the files that are used when the computer
starts and when you start applications. By monitoring these files, Windows
XP Professional can prefetch them. Prefetching data is the process whereby
data that is expected to be requested is read ahead into the cache.
Prefetching boot files and applications decreases the time needed to start
Windows XP Professional and start applications.

Prefetching is further improved if the files are located next to each other
on the outer edge of the disk. Windows XP Professional optimizes the
location of boot files and applications when the computer is idle. The
optimization occurs in the background and lasts only a minute or two; you
might hear the hard disk being accessed when optimization occurs. After the
initial optimization takes place, subsequent optimization occurs, at most,
every three days.

When you run the Disk Defragmenter tools that are included with Windows XP
Professional, they can perform any optimization updates that are scheduled
to take place during the next idle period. The Disk Defragmenter tools do
not disturb the existing layout of optimized boot files and applications.

Note
Computers running Windows XP Home Edition also prefetch and optimize boot
files and applications.
<quote>
from...
Optimizing Startup Times by Using Defragmentation Tools
http://www.microsoft.com/resources/documentation/Windows/XP/all/reskit/en-us/prkd_tro_uutk.asp


--
Hope this helps. Let us know.

Wes
MS-MVP Windows Shell/User

In
KW82 said:
We have no tasks scheduled so will try disabling the service.
Thanks again.

Wesley Vogel said:
To make a long story short, all winword.exe.yadayada.pf means is that a
winword.exe ran at least one time on your machine and that the Task
Scheduler service is probably running.

You can delete winword.exe.yadayada.pf, start winword.exe and another
winword.exe.yadayada.pf will be recreated, if the Prefetcher is working.

..pf files are prefetch files.
"Prefetch files are essentially a resource list. Any time a program is
executed, Windows XP will attempt to find a pre-existing prefetch file,
and if it's available, it will use it to make the application load up
faster. The file will also be updated after it is accessed, so that the
more an application is used, the bigger the drop in loading time (to a
point). If the application doesn't already have an associated prefetch
file, Windows XP will create one. Those files are stored in the
\%windir%\prefetch directory. One important note is that the process
depends on the Task Scheduler service. If the Task Scheduler service
isn't running, the prefetch mechanism isn't used and the files won't be
read or updated." http://filext.com/file-extension/pf

--
Hope this helps. Let us know.

Wes
MS-MVP Windows Shell/User

In KW82 <[email protected]> hunted and pecked:
Thanks Wesley. It finally hit me to try that a couple days ago...duh!
...and it worked. I found winword.exe in a 'prefetch" (?) folder:
winword.exe.yadayada.pf
I deleted it and all is good, so far.
Thanks again

:

Do a Search for winword.exe on your machine.

winword.exe should be in C:\Program Files\Microsoft Office\Office11 or
Office10 or Office9 depending on your version of MS Word and in NO
other location.

Microsoft Office 2003 = Word 2003 = 11
Microsoft Office XP (2002) = Microsoft Word 2002 = 10
Microsoft Office 2000 = Microsoft Word 2000 = 9

HOW TO: Search For Hidden Or System Files In Windows XP
http://support.microsoft.com/kb/302347

--
Hope this helps. Let us know.

Wes
MS-MVP Windows Shell/User

In KW82 <[email protected]> hunted and pecked:
Good suggestions, thanks. Still no luck though. It appears to be
some kind of trojan/worm/whatever, but AVG doesn't detect anything.
(ran in Safe Mode w/ System Restore disabled)

:

winword.exe, besides being MS Word, can also be a trojan.

There is more than one run key in the registry. There are 13+ places
that programs can be started from, msconfig does not list all of
them.

UPDATE your antivirus software and run a full system scan.

UPDATE whatever anti-spyware applications that you have and run a
full system scan with each one.

You might want to start in Safe Mode to run your antivirus and
anti-spyware software.

Running a full system antivirus scan or anti-spyware scan in Safe
Mode can be a good idea. Some viruses and other malware like to
conceal themselves in areas Windows protects while using them. Safe
mode can prevent those applications access and therefore unprotect
the viruses or other malware allowing for easier removal.

''In safe mode, you have access to only basic files and drivers
(mouse, monitor, keyboard, mass storage, base video, default system
services), just the minimum device drivers required to start
Windows.''

Because of that some malware does not load in Safe Mode and is easier
to get rid of.

How to start Windows in Safe Mode Windows XP
http://www.bleepingcomputer.com/forums/index.php?showtutorial=61#winxo
--------------------

Get one or both of these.

StartMan has an option that takes you to
http://www.sysinfo.org/startupinfo.html
when your right click an entry and select Identify.

Also with StartMan, clicking on the Help menu, you can select
Identifying Startups (Pacman's Portal)... It sends you to
http://www.pacs-portal.co.uk/startup_index.htm

[[StartMan is an extended 'msconfig' Startup Manager, designed to
take control of all those pesky programs and background services
that load and run at logon - most of which you probably don't need.
As well as providing the usual trouble-shooting options to enable or
disable startups, StartMan also permits the removal of startups.
Duplicate Detection and Removal, a unique feature of StartMan, can be
configured to remove all duplicates automatically, with or without
prompting.
Orphan Detection and Removal. As above, for orphaned startups.
Executable Detection and Removal. As above, for executables.
Includes a full range of sorting options to make it easier to locate
a specific startup - by name, by filename - even by command line
parameter! ]]

StartMan v1.3.96
http://www.pt.lu/comnet/desc/startman.html

StartMan v1.3.96 Direct download
http://www.pt.lu/comnet/files/utils/startman10396.exe
-----

Startup Control Panel is another pretty good application.

[[Startup Control Panel is a nifty control panel applet that allows
you to easily configure which programs run when your computer
starts. It's simple to use and, like all my programs, is very small
and won't burden your system. A valuable tool for system
administrators!]]

Download the EXE Version and just extract the executable wherever you
want.

Startup Control Panel
http://www.mlin.net/StartupCPL.shtml

--
Hope this helps. Let us know.

Wes
MS-MVP Windows Shell/User

In KW82 <[email protected]> hunted and pecked:
I'm afraid I've already tried that, but thanks.

:

I have a similar problem with Kodak. I just got done talking to
tech support on emachines and he said to go to the start then run
then where it says open field type msconfig. Hit ok then go to the
startup tab. Remove all check marks except big fix, hot keys, and
antivirus. click apply and close. I did this and my Kodak no
longer runs at startup and doesn't slow things down. I hope this
helps

:

Running Windows XP Professional SP2
Noticed very slow performance. Winword.exe was running (though no
document/application open) and using up 30-40% cpu. "end task"
the winword.exe and all ok until next reboot.
Can't find where it's starting. Found nothing in Run registry key.
Using AVG virus progam, current.
 
Apparently Winword.exe can run when you open Outlook. I do not have Outlook
installed, so I cannot test that.

Just for laughs, type or paste the following line into Start | Run and click
OK...

%windir%\winword.exe

Do you get an error message or what happens?

--
Hope this helps. Let us know.

Wes
MS-MVP Windows Shell/User

In
KW82 said:
Winword.exe is still starting from somewhere. Currently trying to monitor
when it actually starts. It appears to not be starting at startup.
Thanks for the info.

Wesley Vogel said:
We have no tasks scheduled so will try disabling the service.

That was not my point. Prefetch needs the Task Scheduler service
running in order for Prefetch to work. If you want to disable it,
that's fine, but it does speed some things up.

What Prefetching does...
<quote>
Windows XP Professional monitors the files that are used when the
computer starts and when you start applications. By monitoring these
files, Windows XP Professional can prefetch them. Prefetching data is
the process whereby data that is expected to be requested is read ahead
into the cache. Prefetching boot files and applications decreases the
time needed to start Windows XP Professional and start applications.

Prefetching is further improved if the files are located next to each
other on the outer edge of the disk. Windows XP Professional optimizes
the location of boot files and applications when the computer is idle.
The optimization occurs in the background and lasts only a minute or
two; you might hear the hard disk being accessed when optimization
occurs. After the initial optimization takes place, subsequent
optimization occurs, at most, every three days.

When you run the Disk Defragmenter tools that are included with Windows
XP Professional, they can perform any optimization updates that are
scheduled to take place during the next idle period. The Disk
Defragmenter tools do not disturb the existing layout of optimized boot
files and applications.

Note
Computers running Windows XP Home Edition also prefetch and optimize boot
files and applications.
<quote>
from...
Optimizing Startup Times by Using Defragmentation Tools
http://www.microsoft.com/resources/documentation/Windows/XP/all/reskit/en-us/prkd_tro_uutk.asp


--
Hope this helps. Let us know.

Wes
MS-MVP Windows Shell/User

In
KW82 said:
We have no tasks scheduled so will try disabling the service.
Thanks again.

:

To make a long story short, all winword.exe.yadayada.pf means is that a
winword.exe ran at least one time on your machine and that the Task
Scheduler service is probably running.

You can delete winword.exe.yadayada.pf, start winword.exe and another
winword.exe.yadayada.pf will be recreated, if the Prefetcher is
working.

..pf files are prefetch files.
"Prefetch files are essentially a resource list. Any time a program is
executed, Windows XP will attempt to find a pre-existing prefetch file,
and if it's available, it will use it to make the application load up
faster. The file will also be updated after it is accessed, so that the
more an application is used, the bigger the drop in loading time (to a
point). If the application doesn't already have an associated prefetch
file, Windows XP will create one. Those files are stored in the
\%windir%\prefetch directory. One important note is that the process
depends on the Task Scheduler service. If the Task Scheduler service
isn't running, the prefetch mechanism isn't used and the files won't be
read or updated." http://filext.com/file-extension/pf

--
Hope this helps. Let us know.

Wes
MS-MVP Windows Shell/User

In KW82 <[email protected]> hunted and pecked:
Thanks Wesley. It finally hit me to try that a couple days ago...duh!
...and it worked. I found winword.exe in a 'prefetch" (?) folder:
winword.exe.yadayada.pf
I deleted it and all is good, so far.
Thanks again

:

Do a Search for winword.exe on your machine.

winword.exe should be in C:\Program Files\Microsoft Office\Office11
or Office10 or Office9 depending on your version of MS Word and in NO
other location.

Microsoft Office 2003 = Word 2003 = 11
Microsoft Office XP (2002) = Microsoft Word 2002 = 10
Microsoft Office 2000 = Microsoft Word 2000 = 9

HOW TO: Search For Hidden Or System Files In Windows XP
http://support.microsoft.com/kb/302347

--
Hope this helps. Let us know.

Wes
MS-MVP Windows Shell/User

In KW82 <[email protected]> hunted and pecked:
Good suggestions, thanks. Still no luck though. It appears to be
some kind of trojan/worm/whatever, but AVG doesn't detect anything.
(ran in Safe Mode w/ System Restore disabled)

:

winword.exe, besides being MS Word, can also be a trojan.

There is more than one run key in the registry. There are 13+
places that programs can be started from, msconfig does not list
all of them.

UPDATE your antivirus software and run a full system scan.

UPDATE whatever anti-spyware applications that you have and run a
full system scan with each one.

You might want to start in Safe Mode to run your antivirus and
anti-spyware software.

Running a full system antivirus scan or anti-spyware scan in Safe
Mode can be a good idea. Some viruses and other malware like to
conceal themselves in areas Windows protects while using them.
Safe mode can prevent those applications access and therefore
unprotect the viruses or other malware allowing for easier removal.

''In safe mode, you have access to only basic files and drivers
(mouse, monitor, keyboard, mass storage, base video, default system
services), just the minimum device drivers required to start
Windows.''

Because of that some malware does not load in Safe Mode and is
easier to get rid of.

How to start Windows in Safe Mode Windows XP
http://www.bleepingcomputer.com/forums/index.php?showtutorial=61#winxo
--------------------

Get one or both of these.

StartMan has an option that takes you to
http://www.sysinfo.org/startupinfo.html
when your right click an entry and select Identify.

Also with StartMan, clicking on the Help menu, you can select
Identifying Startups (Pacman's Portal)... It sends you to
http://www.pacs-portal.co.uk/startup_index.htm

[[StartMan is an extended 'msconfig' Startup Manager, designed to
take control of all those pesky programs and background services
that load and run at logon - most of which you probably don't need.
As well as providing the usual trouble-shooting options to enable
or disable startups, StartMan also permits the removal of startups.
Duplicate Detection and Removal, a unique feature of StartMan, can
be configured to remove all duplicates automatically, with or
without prompting.
Orphan Detection and Removal. As above, for orphaned startups.
Executable Detection and Removal. As above, for executables.
Includes a full range of sorting options to make it easier to
locate a specific startup - by name, by filename - even by command
line parameter! ]]

StartMan v1.3.96
http://www.pt.lu/comnet/desc/startman.html

StartMan v1.3.96 Direct download
http://www.pt.lu/comnet/files/utils/startman10396.exe
-----

Startup Control Panel is another pretty good application.

[[Startup Control Panel is a nifty control panel applet that allows
you to easily configure which programs run when your computer
starts. It's simple to use and, like all my programs, is very small
and won't burden your system. A valuable tool for system
administrators!]]

Download the EXE Version and just extract the executable wherever
you want.

Startup Control Panel
http://www.mlin.net/StartupCPL.shtml

--
Hope this helps. Let us know.

Wes
MS-MVP Windows Shell/User

In KW82 <[email protected]> hunted and pecked:
I'm afraid I've already tried that, but thanks.

:

I have a similar problem with Kodak. I just got done talking to
tech support on emachines and he said to go to the start then run
then where it says open field type msconfig. Hit ok then go to
the startup tab. Remove all check marks except big fix, hot
keys, and antivirus. click apply and close. I did this and my
Kodak no longer runs at startup and doesn't slow things down. I
hope this helps

:

Running Windows XP Professional SP2
Noticed very slow performance. Winword.exe was running (though
no document/application open) and using up 30-40% cpu. "end
task" the winword.exe and all ok until next reboot.
Can't find where it's starting. Found nothing in Run registry
key. Using AVG virus progam, current.
 
Yes, it appears that it was being started with Outlook. The mystery is why
it was using so much cpu resources? (When we start Word by itself all is
normal.)
I de-selected the option in Outlook to "Use Microsoft Word to edit email
messages". Then re-started Outlook several times and winword.exe did not
start.
So, hopefully that will suffice.
THANK YOU



Wesley Vogel said:
Apparently Winword.exe can run when you open Outlook. I do not have Outlook
installed, so I cannot test that.

Just for laughs, type or paste the following line into Start | Run and click
OK...

%windir%\winword.exe

Do you get an error message or what happens?

--
Hope this helps. Let us know.

Wes
MS-MVP Windows Shell/User

In
KW82 said:
Winword.exe is still starting from somewhere. Currently trying to monitor
when it actually starts. It appears to not be starting at startup.
Thanks for the info.

Wesley Vogel said:
We have no tasks scheduled so will try disabling the service.

That was not my point. Prefetch needs the Task Scheduler service
running in order for Prefetch to work. If you want to disable it,
that's fine, but it does speed some things up.

What Prefetching does...
<quote>
Windows XP Professional monitors the files that are used when the
computer starts and when you start applications. By monitoring these
files, Windows XP Professional can prefetch them. Prefetching data is
the process whereby data that is expected to be requested is read ahead
into the cache. Prefetching boot files and applications decreases the
time needed to start Windows XP Professional and start applications.

Prefetching is further improved if the files are located next to each
other on the outer edge of the disk. Windows XP Professional optimizes
the location of boot files and applications when the computer is idle.
The optimization occurs in the background and lasts only a minute or
two; you might hear the hard disk being accessed when optimization
occurs. After the initial optimization takes place, subsequent
optimization occurs, at most, every three days.

When you run the Disk Defragmenter tools that are included with Windows
XP Professional, they can perform any optimization updates that are
scheduled to take place during the next idle period. The Disk
Defragmenter tools do not disturb the existing layout of optimized boot
files and applications.

Note
Computers running Windows XP Home Edition also prefetch and optimize boot
files and applications.
<quote>
from...
Optimizing Startup Times by Using Defragmentation Tools
http://www.microsoft.com/resources/documentation/Windows/XP/all/reskit/en-us/prkd_tro_uutk.asp


--
Hope this helps. Let us know.

Wes
MS-MVP Windows Shell/User

In KW82 <[email protected]> hunted and pecked:
We have no tasks scheduled so will try disabling the service.
Thanks again.

:

To make a long story short, all winword.exe.yadayada.pf means is that a
winword.exe ran at least one time on your machine and that the Task
Scheduler service is probably running.

You can delete winword.exe.yadayada.pf, start winword.exe and another
winword.exe.yadayada.pf will be recreated, if the Prefetcher is
working.

..pf files are prefetch files.
"Prefetch files are essentially a resource list. Any time a program is
executed, Windows XP will attempt to find a pre-existing prefetch file,
and if it's available, it will use it to make the application load up
faster. The file will also be updated after it is accessed, so that the
more an application is used, the bigger the drop in loading time (to a
point). If the application doesn't already have an associated prefetch
file, Windows XP will create one. Those files are stored in the
\%windir%\prefetch directory. One important note is that the process
depends on the Task Scheduler service. If the Task Scheduler service
isn't running, the prefetch mechanism isn't used and the files won't be
read or updated." http://filext.com/file-extension/pf

--
Hope this helps. Let us know.

Wes
MS-MVP Windows Shell/User

In KW82 <[email protected]> hunted and pecked:
Thanks Wesley. It finally hit me to try that a couple days ago...duh!
...and it worked. I found winword.exe in a 'prefetch" (?) folder:
winword.exe.yadayada.pf
I deleted it and all is good, so far.
Thanks again

:

Do a Search for winword.exe on your machine.

winword.exe should be in C:\Program Files\Microsoft Office\Office11
or Office10 or Office9 depending on your version of MS Word and in NO
other location.

Microsoft Office 2003 = Word 2003 = 11
Microsoft Office XP (2002) = Microsoft Word 2002 = 10
Microsoft Office 2000 = Microsoft Word 2000 = 9

HOW TO: Search For Hidden Or System Files In Windows XP
http://support.microsoft.com/kb/302347

--
Hope this helps. Let us know.

Wes
MS-MVP Windows Shell/User

In KW82 <[email protected]> hunted and pecked:
Good suggestions, thanks. Still no luck though. It appears to be
some kind of trojan/worm/whatever, but AVG doesn't detect anything.
(ran in Safe Mode w/ System Restore disabled)

:

winword.exe, besides being MS Word, can also be a trojan.

There is more than one run key in the registry. There are 13+
places that programs can be started from, msconfig does not list
all of them.

UPDATE your antivirus software and run a full system scan.

UPDATE whatever anti-spyware applications that you have and run a
full system scan with each one.

You might want to start in Safe Mode to run your antivirus and
anti-spyware software.

Running a full system antivirus scan or anti-spyware scan in Safe
Mode can be a good idea. Some viruses and other malware like to
conceal themselves in areas Windows protects while using them.
Safe mode can prevent those applications access and therefore
unprotect the viruses or other malware allowing for easier removal.

''In safe mode, you have access to only basic files and drivers
(mouse, monitor, keyboard, mass storage, base video, default system
services), just the minimum device drivers required to start
Windows.''

Because of that some malware does not load in Safe Mode and is
easier to get rid of.

How to start Windows in Safe Mode Windows XP
http://www.bleepingcomputer.com/forums/index.php?showtutorial=61#winxo
--------------------

Get one or both of these.

StartMan has an option that takes you to
http://www.sysinfo.org/startupinfo.html
when your right click an entry and select Identify.

Also with StartMan, clicking on the Help menu, you can select
Identifying Startups (Pacman's Portal)... It sends you to
http://www.pacs-portal.co.uk/startup_index.htm

[[StartMan is an extended 'msconfig' Startup Manager, designed to
take control of all those pesky programs and background services
that load and run at logon - most of which you probably don't need.
As well as providing the usual trouble-shooting options to enable
or disable startups, StartMan also permits the removal of startups.
Duplicate Detection and Removal, a unique feature of StartMan, can
be configured to remove all duplicates automatically, with or
without prompting.
Orphan Detection and Removal. As above, for orphaned startups.
Executable Detection and Removal. As above, for executables.
Includes a full range of sorting options to make it easier to
locate a specific startup - by name, by filename - even by command
line parameter! ]]

StartMan v1.3.96
http://www.pt.lu/comnet/desc/startman.html

StartMan v1.3.96 Direct download
http://www.pt.lu/comnet/files/utils/startman10396.exe
-----

Startup Control Panel is another pretty good application.

[[Startup Control Panel is a nifty control panel applet that allows
you to easily configure which programs run when your computer
starts. It's simple to use and, like all my programs, is very small
and won't burden your system. A valuable tool for system
administrators!]]

Download the EXE Version and just extract the executable wherever
you want.

Startup Control Panel
http://www.mlin.net/StartupCPL.shtml

--
Hope this helps. Let us know.

Wes
MS-MVP Windows Shell/User

In KW82 <[email protected]> hunted and pecked:
I'm afraid I've already tried that, but thanks.

:

I have a similar problem with Kodak. I just got done talking to
tech support on emachines and he said to go to the start then run
then where it says open field type msconfig. Hit ok then go to
the startup tab. Remove all check marks except big fix, hot
keys, and antivirus. click apply and close. I did this and my
Kodak no longer runs at startup and doesn't slow things down. I
hope this helps

:

Running Windows XP Professional SP2
Noticed very slow performance. Winword.exe was running (though
no document/application open) and using up 30-40% cpu. "end
task" the winword.exe and all ok until next reboot.
Can't find where it's starting. Found nothing in Run registry
key. Using AVG virus progam, current.
 
Also, forgot to mention...we did run C:\windows\winword.exe It did not work
as it couldn't find it there.
thanks again

Wesley Vogel said:
Apparently Winword.exe can run when you open Outlook. I do not have Outlook
installed, so I cannot test that.

Just for laughs, type or paste the following line into Start | Run and click
OK...

%windir%\winword.exe

Do you get an error message or what happens?

--
Hope this helps. Let us know.

Wes
MS-MVP Windows Shell/User

In
KW82 said:
Winword.exe is still starting from somewhere. Currently trying to monitor
when it actually starts. It appears to not be starting at startup.
Thanks for the info.

Wesley Vogel said:
We have no tasks scheduled so will try disabling the service.

That was not my point. Prefetch needs the Task Scheduler service
running in order for Prefetch to work. If you want to disable it,
that's fine, but it does speed some things up.

What Prefetching does...
<quote>
Windows XP Professional monitors the files that are used when the
computer starts and when you start applications. By monitoring these
files, Windows XP Professional can prefetch them. Prefetching data is
the process whereby data that is expected to be requested is read ahead
into the cache. Prefetching boot files and applications decreases the
time needed to start Windows XP Professional and start applications.

Prefetching is further improved if the files are located next to each
other on the outer edge of the disk. Windows XP Professional optimizes
the location of boot files and applications when the computer is idle.
The optimization occurs in the background and lasts only a minute or
two; you might hear the hard disk being accessed when optimization
occurs. After the initial optimization takes place, subsequent
optimization occurs, at most, every three days.

When you run the Disk Defragmenter tools that are included with Windows
XP Professional, they can perform any optimization updates that are
scheduled to take place during the next idle period. The Disk
Defragmenter tools do not disturb the existing layout of optimized boot
files and applications.

Note
Computers running Windows XP Home Edition also prefetch and optimize boot
files and applications.
<quote>
from...
Optimizing Startup Times by Using Defragmentation Tools
http://www.microsoft.com/resources/documentation/Windows/XP/all/reskit/en-us/prkd_tro_uutk.asp


--
Hope this helps. Let us know.

Wes
MS-MVP Windows Shell/User

In KW82 <[email protected]> hunted and pecked:
We have no tasks scheduled so will try disabling the service.
Thanks again.

:

To make a long story short, all winword.exe.yadayada.pf means is that a
winword.exe ran at least one time on your machine and that the Task
Scheduler service is probably running.

You can delete winword.exe.yadayada.pf, start winword.exe and another
winword.exe.yadayada.pf will be recreated, if the Prefetcher is
working.

..pf files are prefetch files.
"Prefetch files are essentially a resource list. Any time a program is
executed, Windows XP will attempt to find a pre-existing prefetch file,
and if it's available, it will use it to make the application load up
faster. The file will also be updated after it is accessed, so that the
more an application is used, the bigger the drop in loading time (to a
point). If the application doesn't already have an associated prefetch
file, Windows XP will create one. Those files are stored in the
\%windir%\prefetch directory. One important note is that the process
depends on the Task Scheduler service. If the Task Scheduler service
isn't running, the prefetch mechanism isn't used and the files won't be
read or updated." http://filext.com/file-extension/pf

--
Hope this helps. Let us know.

Wes
MS-MVP Windows Shell/User

In KW82 <[email protected]> hunted and pecked:
Thanks Wesley. It finally hit me to try that a couple days ago...duh!
...and it worked. I found winword.exe in a 'prefetch" (?) folder:
winword.exe.yadayada.pf
I deleted it and all is good, so far.
Thanks again

:

Do a Search for winword.exe on your machine.

winword.exe should be in C:\Program Files\Microsoft Office\Office11
or Office10 or Office9 depending on your version of MS Word and in NO
other location.

Microsoft Office 2003 = Word 2003 = 11
Microsoft Office XP (2002) = Microsoft Word 2002 = 10
Microsoft Office 2000 = Microsoft Word 2000 = 9

HOW TO: Search For Hidden Or System Files In Windows XP
http://support.microsoft.com/kb/302347

--
Hope this helps. Let us know.

Wes
MS-MVP Windows Shell/User

In KW82 <[email protected]> hunted and pecked:
Good suggestions, thanks. Still no luck though. It appears to be
some kind of trojan/worm/whatever, but AVG doesn't detect anything.
(ran in Safe Mode w/ System Restore disabled)

:

winword.exe, besides being MS Word, can also be a trojan.

There is more than one run key in the registry. There are 13+
places that programs can be started from, msconfig does not list
all of them.

UPDATE your antivirus software and run a full system scan.

UPDATE whatever anti-spyware applications that you have and run a
full system scan with each one.

You might want to start in Safe Mode to run your antivirus and
anti-spyware software.

Running a full system antivirus scan or anti-spyware scan in Safe
Mode can be a good idea. Some viruses and other malware like to
conceal themselves in areas Windows protects while using them.
Safe mode can prevent those applications access and therefore
unprotect the viruses or other malware allowing for easier removal.

''In safe mode, you have access to only basic files and drivers
(mouse, monitor, keyboard, mass storage, base video, default system
services), just the minimum device drivers required to start
Windows.''

Because of that some malware does not load in Safe Mode and is
easier to get rid of.

How to start Windows in Safe Mode Windows XP
http://www.bleepingcomputer.com/forums/index.php?showtutorial=61#winxo
--------------------

Get one or both of these.

StartMan has an option that takes you to
http://www.sysinfo.org/startupinfo.html
when your right click an entry and select Identify.

Also with StartMan, clicking on the Help menu, you can select
Identifying Startups (Pacman's Portal)... It sends you to
http://www.pacs-portal.co.uk/startup_index.htm

[[StartMan is an extended 'msconfig' Startup Manager, designed to
take control of all those pesky programs and background services
that load and run at logon - most of which you probably don't need.
As well as providing the usual trouble-shooting options to enable
or disable startups, StartMan also permits the removal of startups.
Duplicate Detection and Removal, a unique feature of StartMan, can
be configured to remove all duplicates automatically, with or
without prompting.
Orphan Detection and Removal. As above, for orphaned startups.
Executable Detection and Removal. As above, for executables.
Includes a full range of sorting options to make it easier to
locate a specific startup - by name, by filename - even by command
line parameter! ]]

StartMan v1.3.96
http://www.pt.lu/comnet/desc/startman.html

StartMan v1.3.96 Direct download
http://www.pt.lu/comnet/files/utils/startman10396.exe
-----

Startup Control Panel is another pretty good application.

[[Startup Control Panel is a nifty control panel applet that allows
you to easily configure which programs run when your computer
starts. It's simple to use and, like all my programs, is very small
and won't burden your system. A valuable tool for system
administrators!]]

Download the EXE Version and just extract the executable wherever
you want.

Startup Control Panel
http://www.mlin.net/StartupCPL.shtml

--
Hope this helps. Let us know.

Wes
MS-MVP Windows Shell/User

In KW82 <[email protected]> hunted and pecked:
I'm afraid I've already tried that, but thanks.

:

I have a similar problem with Kodak. I just got done talking to
tech support on emachines and he said to go to the start then run
then where it says open field type msconfig. Hit ok then go to
the startup tab. Remove all check marks except big fix, hot
keys, and antivirus. click apply and close. I did this and my
Kodak no longer runs at startup and doesn't slow things down. I
hope this helps

:

Running Windows XP Professional SP2
Noticed very slow performance. Winword.exe was running (though
no document/application open) and using up 30-40% cpu. "end
task" the winword.exe and all ok until next reboot.
Can't find where it's starting. Found nothing in Run registry
key. Using AVG virus progam, current.
 
Have fun.

--
Hope this helps. Let us know.

Wes
MS-MVP Windows Shell/User

In
KW82 said:
Yes, it appears that it was being started with Outlook. The mystery is
why it was using so much cpu resources? (When we start Word by itself
all is normal.)
I de-selected the option in Outlook to "Use Microsoft Word to edit email
messages". Then re-started Outlook several times and winword.exe did not
start.
So, hopefully that will suffice.
THANK YOU



Wesley Vogel said:
Apparently Winword.exe can run when you open Outlook. I do not have
Outlook installed, so I cannot test that.

Just for laughs, type or paste the following line into Start | Run and
click OK...

%windir%\winword.exe

Do you get an error message or what happens?

--
Hope this helps. Let us know.

Wes
MS-MVP Windows Shell/User

In
KW82 said:
Winword.exe is still starting from somewhere. Currently trying to
monitor when it actually starts. It appears to not be starting at
startup. Thanks for the info.

:

We have no tasks scheduled so will try disabling the service.

That was not my point. Prefetch needs the Task Scheduler service
running in order for Prefetch to work. If you want to disable it,
that's fine, but it does speed some things up.

What Prefetching does...
<quote>
Windows XP Professional monitors the files that are used when the
computer starts and when you start applications. By monitoring these
files, Windows XP Professional can prefetch them. Prefetching data is
the process whereby data that is expected to be requested is read ahead
into the cache. Prefetching boot files and applications decreases the
time needed to start Windows XP Professional and start applications.

Prefetching is further improved if the files are located next to each
other on the outer edge of the disk. Windows XP Professional optimizes
the location of boot files and applications when the computer is idle.
The optimization occurs in the background and lasts only a minute or
two; you might hear the hard disk being accessed when optimization
occurs. After the initial optimization takes place, subsequent
optimization occurs, at most, every three days.

When you run the Disk Defragmenter tools that are included with Windows
XP Professional, they can perform any optimization updates that are
scheduled to take place during the next idle period. The Disk
Defragmenter tools do not disturb the existing layout of optimized boot
files and applications.

Note
Computers running Windows XP Home Edition also prefetch and optimize
boot files and applications.
<quote>
from...
Optimizing Startup Times by Using Defragmentation Tools
http://www.microsoft.com/resources/documentation/Windows/XP/all/reskit/en-us/prkd_tro_uutk.asp


--
Hope this helps. Let us know.

Wes
MS-MVP Windows Shell/User

In KW82 <[email protected]> hunted and pecked:
We have no tasks scheduled so will try disabling the service.
Thanks again.

:

To make a long story short, all winword.exe.yadayada.pf means is
that a winword.exe ran at least one time on your machine and that
the Task Scheduler service is probably running.

You can delete winword.exe.yadayada.pf, start winword.exe and another
winword.exe.yadayada.pf will be recreated, if the Prefetcher is
working.

..pf files are prefetch files.
"Prefetch files are essentially a resource list. Any time a program
is executed, Windows XP will attempt to find a pre-existing prefetch
file, and if it's available, it will use it to make the application
load up faster. The file will also be updated after it is accessed,
so that the more an application is used, the bigger the drop in
loading time (to a point). If the application doesn't already have
an associated prefetch file, Windows XP will create one. Those files
are stored in the \%windir%\prefetch directory. One important note
is that the process depends on the Task Scheduler service. If the
Task Scheduler service isn't running, the prefetch mechanism isn't
used and the files won't be read or updated."
http://filext.com/file-extension/pf

--
Hope this helps. Let us know.

Wes
MS-MVP Windows Shell/User

In KW82 <[email protected]> hunted and pecked:
Thanks Wesley. It finally hit me to try that a couple days
ago...duh! ...and it worked. I found winword.exe in a 'prefetch"
(?) folder: winword.exe.yadayada.pf
I deleted it and all is good, so far.
Thanks again

:

Do a Search for winword.exe on your machine.

winword.exe should be in C:\Program Files\Microsoft Office\Office11
or Office10 or Office9 depending on your version of MS Word and in
NO other location.

Microsoft Office 2003 = Word 2003 = 11
Microsoft Office XP (2002) = Microsoft Word 2002 = 10
Microsoft Office 2000 = Microsoft Word 2000 = 9

HOW TO: Search For Hidden Or System Files In Windows XP
http://support.microsoft.com/kb/302347

--
Hope this helps. Let us know.

Wes
MS-MVP Windows Shell/User

In KW82 <[email protected]> hunted and pecked:
Good suggestions, thanks. Still no luck though. It appears to be
some kind of trojan/worm/whatever, but AVG doesn't detect
anything. (ran in Safe Mode w/ System Restore disabled)

:

winword.exe, besides being MS Word, can also be a trojan.

There is more than one run key in the registry. There are 13+
places that programs can be started from, msconfig does not list
all of them.

UPDATE your antivirus software and run a full system scan.

UPDATE whatever anti-spyware applications that you have and run a
full system scan with each one.

You might want to start in Safe Mode to run your antivirus and
anti-spyware software.

Running a full system antivirus scan or anti-spyware scan in Safe
Mode can be a good idea. Some viruses and other malware like to
conceal themselves in areas Windows protects while using them.
Safe mode can prevent those applications access and therefore
unprotect the viruses or other malware allowing for easier
removal.

''In safe mode, you have access to only basic files and drivers
(mouse, monitor, keyboard, mass storage, base video, default
system services), just the minimum device drivers required to
start Windows.''

Because of that some malware does not load in Safe Mode and is
easier to get rid of.

How to start Windows in Safe Mode Windows XP
http://www.bleepingcomputer.com/forums/index.php?showtutorial=61#winxo
--------------------

Get one or both of these.

StartMan has an option that takes you to
http://www.sysinfo.org/startupinfo.html
when your right click an entry and select Identify.

Also with StartMan, clicking on the Help menu, you can select
Identifying Startups (Pacman's Portal)... It sends you to
http://www.pacs-portal.co.uk/startup_index.htm

[[StartMan is an extended 'msconfig' Startup Manager, designed to
take control of all those pesky programs and background services
that load and run at logon - most of which you probably don't
need. As well as providing the usual trouble-shooting options to
enable or disable startups, StartMan also permits the removal of
startups. Duplicate Detection and Removal, a unique feature of
StartMan, can be configured to remove all duplicates
automatically, with or without prompting.
Orphan Detection and Removal. As above, for orphaned startups.
Executable Detection and Removal. As above, for executables.
Includes a full range of sorting options to make it easier to
locate a specific startup - by name, by filename - even by
command line parameter! ]]

StartMan v1.3.96
http://www.pt.lu/comnet/desc/startman.html

StartMan v1.3.96 Direct download
http://www.pt.lu/comnet/files/utils/startman10396.exe
-----

Startup Control Panel is another pretty good application.

[[Startup Control Panel is a nifty control panel applet that
allows you to easily configure which programs run when your
computer starts. It's simple to use and, like all my programs,
is very small and won't burden your system. A valuable tool for
system administrators!]]

Download the EXE Version and just extract the executable wherever
you want.

Startup Control Panel
http://www.mlin.net/StartupCPL.shtml

--
Hope this helps. Let us know.

Wes
MS-MVP Windows Shell/User

In KW82 <[email protected]> hunted and pecked:
I'm afraid I've already tried that, but thanks.

:

I have a similar problem with Kodak. I just got done talking
to tech support on emachines and he said to go to the start
then run then where it says open field type msconfig. Hit ok
then go to the startup tab. Remove all check marks except big
fix, hot keys, and antivirus. click apply and close. I did
this and my Kodak no longer runs at startup and doesn't slow
things down. I hope this helps

:

Running Windows XP Professional SP2
Noticed very slow performance. Winword.exe was running
(though no document/application open) and using up 30-40%
cpu. "end task" the winword.exe and all ok until next reboot.
Can't find where it's starting. Found nothing in Run registry
key. Using AVG virus progam, current.
 
I also have the problem of Winword running when I start outlook, and taking
3% best case, and 30% normal worst case of my machine.

when I run filemon, it shows that one of the things that winword is doing is
continually scanning the templates and signatures directory.

i removed (renamed) both directories, when I started winword again, it
recreated the directories, and I recreated (from scratch, not by copying,
normal.dot and my signature file.

I still have the "runaway" winword. process. it makes the machine unusable
and people that I work with will greet me with: "is your machine working?"
embarrassing.

Does anyone have any other suggestions as to what outlook is doing, and
especially, how to get it to stop???


KW82 said:
Yes, it appears that it was being started with Outlook. The mystery is why
it was using so much cpu resources? (When we start Word by itself all is
normal.)
I de-selected the option in Outlook to "Use Microsoft Word to edit email
messages". Then re-started Outlook several times and winword.exe did not
start.
So, hopefully that will suffice.
THANK YOU



Wesley Vogel said:
Apparently Winword.exe can run when you open Outlook. I do not have Outlook
installed, so I cannot test that.

Just for laughs, type or paste the following line into Start | Run and click
OK...

%windir%\winword.exe

Do you get an error message or what happens?

--
Hope this helps. Let us know.

Wes
MS-MVP Windows Shell/User

In
KW82 said:
Winword.exe is still starting from somewhere. Currently trying to monitor
when it actually starts. It appears to not be starting at startup.
Thanks for the info.

:

We have no tasks scheduled so will try disabling the service.

That was not my point. Prefetch needs the Task Scheduler service
running in order for Prefetch to work. If you want to disable it,
that's fine, but it does speed some things up.

What Prefetching does...
<quote>
Windows XP Professional monitors the files that are used when the
computer starts and when you start applications. By monitoring these
files, Windows XP Professional can prefetch them. Prefetching data is
the process whereby data that is expected to be requested is read ahead
into the cache. Prefetching boot files and applications decreases the
time needed to start Windows XP Professional and start applications.

Prefetching is further improved if the files are located next to each
other on the outer edge of the disk. Windows XP Professional optimizes
the location of boot files and applications when the computer is idle.
The optimization occurs in the background and lasts only a minute or
two; you might hear the hard disk being accessed when optimization
occurs. After the initial optimization takes place, subsequent
optimization occurs, at most, every three days.

When you run the Disk Defragmenter tools that are included with Windows
XP Professional, they can perform any optimization updates that are
scheduled to take place during the next idle period. The Disk
Defragmenter tools do not disturb the existing layout of optimized boot
files and applications.

Note
Computers running Windows XP Home Edition also prefetch and optimize boot
files and applications.
<quote>
from...
Optimizing Startup Times by Using Defragmentation Tools
http://www.microsoft.com/resources/documentation/Windows/XP/all/reskit/en-us/prkd_tro_uutk.asp


--
Hope this helps. Let us know.

Wes
MS-MVP Windows Shell/User

In KW82 <[email protected]> hunted and pecked:
We have no tasks scheduled so will try disabling the service.
Thanks again.

:

To make a long story short, all winword.exe.yadayada.pf means is that a
winword.exe ran at least one time on your machine and that the Task
Scheduler service is probably running.

You can delete winword.exe.yadayada.pf, start winword.exe and another
winword.exe.yadayada.pf will be recreated, if the Prefetcher is
working.

..pf files are prefetch files.
"Prefetch files are essentially a resource list. Any time a program is
executed, Windows XP will attempt to find a pre-existing prefetch file,
and if it's available, it will use it to make the application load up
faster. The file will also be updated after it is accessed, so that the
more an application is used, the bigger the drop in loading time (to a
point). If the application doesn't already have an associated prefetch
file, Windows XP will create one. Those files are stored in the
\%windir%\prefetch directory. One important note is that the process
depends on the Task Scheduler service. If the Task Scheduler service
isn't running, the prefetch mechanism isn't used and the files won't be
read or updated." http://filext.com/file-extension/pf

--
Hope this helps. Let us know.

Wes
MS-MVP Windows Shell/User

In KW82 <[email protected]> hunted and pecked:
Thanks Wesley. It finally hit me to try that a couple days ago...duh!
...and it worked. I found winword.exe in a 'prefetch" (?) folder:
winword.exe.yadayada.pf
I deleted it and all is good, so far.
Thanks again

:

Do a Search for winword.exe on your machine.

winword.exe should be in C:\Program Files\Microsoft Office\Office11
or Office10 or Office9 depending on your version of MS Word and in NO
other location.

Microsoft Office 2003 = Word 2003 = 11
Microsoft Office XP (2002) = Microsoft Word 2002 = 10
Microsoft Office 2000 = Microsoft Word 2000 = 9

HOW TO: Search For Hidden Or System Files In Windows XP
http://support.microsoft.com/kb/302347

--
Hope this helps. Let us know.

Wes
MS-MVP Windows Shell/User

In KW82 <[email protected]> hunted and pecked:
Good suggestions, thanks. Still no luck though. It appears to be
some kind of trojan/worm/whatever, but AVG doesn't detect anything.
(ran in Safe Mode w/ System Restore disabled)

:

winword.exe, besides being MS Word, can also be a trojan.

There is more than one run key in the registry. There are 13+
places that programs can be started from, msconfig does not list
all of them.

UPDATE your antivirus software and run a full system scan.

UPDATE whatever anti-spyware applications that you have and run a
full system scan with each one.

You might want to start in Safe Mode to run your antivirus and
anti-spyware software.

Running a full system antivirus scan or anti-spyware scan in Safe
Mode can be a good idea. Some viruses and other malware like to
conceal themselves in areas Windows protects while using them.
Safe mode can prevent those applications access and therefore
unprotect the viruses or other malware allowing for easier removal.

''In safe mode, you have access to only basic files and drivers
(mouse, monitor, keyboard, mass storage, base video, default system
services), just the minimum device drivers required to start
Windows.''

Because of that some malware does not load in Safe Mode and is
easier to get rid of.

How to start Windows in Safe Mode Windows XP
http://www.bleepingcomputer.com/forums/index.php?showtutorial=61#winxo
--------------------

Get one or both of these.

StartMan has an option that takes you to
http://www.sysinfo.org/startupinfo.html
when your right click an entry and select Identify.

Also with StartMan, clicking on the Help menu, you can select
Identifying Startups (Pacman's Portal)... It sends you to
http://www.pacs-portal.co.uk/startup_index.htm

[[StartMan is an extended 'msconfig' Startup Manager, designed to
take control of all those pesky programs and background services
that load and run at logon - most of which you probably don't need.
As well as providing the usual trouble-shooting options to enable
or disable startups, StartMan also permits the removal of startups.
Duplicate Detection and Removal, a unique feature of StartMan, can
be configured to remove all duplicates automatically, with or
without prompting.
Orphan Detection and Removal. As above, for orphaned startups.
Executable Detection and Removal. As above, for executables.
Includes a full range of sorting options to make it easier to
locate a specific startup - by name, by filename - even by command
line parameter! ]]

StartMan v1.3.96
http://www.pt.lu/comnet/desc/startman.html

StartMan v1.3.96 Direct download
http://www.pt.lu/comnet/files/utils/startman10396.exe
-----

Startup Control Panel is another pretty good application.

[[Startup Control Panel is a nifty control panel applet that allows
you to easily configure which programs run when your computer
starts. It's simple to use and, like all my programs, is very small
and won't burden your system. A valuable tool for system
administrators!]]

Download the EXE Version and just extract the executable wherever
you want.

Startup Control Panel
http://www.mlin.net/StartupCPL.shtml

--
Hope this helps. Let us know.

Wes
MS-MVP Windows Shell/User

In KW82 <[email protected]> hunted and pecked:
I'm afraid I've already tried that, but thanks.

:

I have a similar problem with Kodak. I just got done talking to
tech support on emachines and he said to go to the start then run
then where it says open field type msconfig. Hit ok then go to
the startup tab. Remove all check marks except big fix, hot
keys, and antivirus. click apply and close. I did this and my
Kodak no longer runs at startup and doesn't slow things down. I
hope this helps

:

Running Windows XP Professional SP2
Noticed very slow performance. Winword.exe was running (though
no document/application open) and using up 30-40% cpu. "end
task" the winword.exe and all ok until next reboot.
Can't find where it's starting. Found nothing in Run registry
key. Using AVG virus progam, current.
 
Start Outlook and go to the Calendar or Inbox....make sure you don't have any email
messages open.
Click the Tools menu, click Options, and then click the Mail Format tab.
Uncheck (clear) the box for "Use Microsoft Office Word to edit e-mail messages" and
click OK.
--
Glen Ventura, MS MVP Shell/User, A+
http://dts-l.org/



Rapid Delp said:
I also have the problem of Winword running when I start outlook, and taking
3% best case, and 30% normal worst case of my machine.

when I run filemon, it shows that one of the things that winword is doing is
continually scanning the templates and signatures directory.

i removed (renamed) both directories, when I started winword again, it
recreated the directories, and I recreated (from scratch, not by copying,
normal.dot and my signature file.

I still have the "runaway" winword. process. it makes the machine unusable
and people that I work with will greet me with: "is your machine working?"
embarrassing.

Does anyone have any other suggestions as to what outlook is doing, and
especially, how to get it to stop???


KW82 said:
Yes, it appears that it was being started with Outlook. The mystery is why
it was using so much cpu resources? (When we start Word by itself all is
normal.)
I de-selected the option in Outlook to "Use Microsoft Word to edit email
messages". Then re-started Outlook several times and winword.exe did not
start.
So, hopefully that will suffice.
THANK YOU



Wesley Vogel said:
Apparently Winword.exe can run when you open Outlook. I do not have Outlook
installed, so I cannot test that.

Just for laughs, type or paste the following line into Start | Run and click
OK...

%windir%\winword.exe

Do you get an error message or what happens?

--
Hope this helps. Let us know.

Wes
MS-MVP Windows Shell/User

In KW82 <[email protected]> hunted and pecked:
Winword.exe is still starting from somewhere. Currently trying to monitor
when it actually starts. It appears to not be starting at startup.
Thanks for the info.

:

We have no tasks scheduled so will try disabling the service.

That was not my point. Prefetch needs the Task Scheduler service
running in order for Prefetch to work. If you want to disable it,
that's fine, but it does speed some things up.

What Prefetching does...
<quote>
Windows XP Professional monitors the files that are used when the
computer starts and when you start applications. By monitoring these
files, Windows XP Professional can prefetch them. Prefetching data is
the process whereby data that is expected to be requested is read ahead
into the cache. Prefetching boot files and applications decreases the
time needed to start Windows XP Professional and start applications.

Prefetching is further improved if the files are located next to each
other on the outer edge of the disk. Windows XP Professional optimizes
the location of boot files and applications when the computer is idle.
The optimization occurs in the background and lasts only a minute or
two; you might hear the hard disk being accessed when optimization
occurs. After the initial optimization takes place, subsequent
optimization occurs, at most, every three days.

When you run the Disk Defragmenter tools that are included with Windows
XP Professional, they can perform any optimization updates that are
scheduled to take place during the next idle period. The Disk
Defragmenter tools do not disturb the existing layout of optimized boot
files and applications.

Note
Computers running Windows XP Home Edition also prefetch and optimize boot
files and applications.
<quote>
from...
Optimizing Startup Times by Using Defragmentation Tools
http://www.microsoft.com/resources/documentation/Windows/XP/all/reskit/en-us/prkd_tro_uutk.asp


--
Hope this helps. Let us know.

Wes
MS-MVP Windows Shell/User

In KW82 <[email protected]> hunted and pecked:
We have no tasks scheduled so will try disabling the service.
Thanks again.

:

To make a long story short, all winword.exe.yadayada.pf means is that a
winword.exe ran at least one time on your machine and that the Task
Scheduler service is probably running.

You can delete winword.exe.yadayada.pf, start winword.exe and another
winword.exe.yadayada.pf will be recreated, if the Prefetcher is
working.

..pf files are prefetch files.
"Prefetch files are essentially a resource list. Any time a program is
executed, Windows XP will attempt to find a pre-existing prefetch file,
and if it's available, it will use it to make the application load up
faster. The file will also be updated after it is accessed, so that the
more an application is used, the bigger the drop in loading time (to a
point). If the application doesn't already have an associated prefetch
file, Windows XP will create one. Those files are stored in the
\%windir%\prefetch directory. One important note is that the process
depends on the Task Scheduler service. If the Task Scheduler service
isn't running, the prefetch mechanism isn't used and the files won't be
read or updated." http://filext.com/file-extension/pf

--
Hope this helps. Let us know.

Wes
MS-MVP Windows Shell/User

In KW82 <[email protected]> hunted and pecked:
Thanks Wesley. It finally hit me to try that a couple days ago...duh!
...and it worked. I found winword.exe in a 'prefetch" (?) folder:
winword.exe.yadayada.pf
I deleted it and all is good, so far.
Thanks again

:

Do a Search for winword.exe on your machine.

winword.exe should be in C:\Program Files\Microsoft Office\Office11
or Office10 or Office9 depending on your version of MS Word and in NO
other location.

Microsoft Office 2003 = Word 2003 = 11
Microsoft Office XP (2002) = Microsoft Word 2002 = 10
Microsoft Office 2000 = Microsoft Word 2000 = 9

HOW TO: Search For Hidden Or System Files In Windows XP
http://support.microsoft.com/kb/302347

--
Hope this helps. Let us know.

Wes
MS-MVP Windows Shell/User

In KW82 <[email protected]> hunted and pecked:
Good suggestions, thanks. Still no luck though. It appears to be
some kind of trojan/worm/whatever, but AVG doesn't detect anything.
(ran in Safe Mode w/ System Restore disabled)

:

winword.exe, besides being MS Word, can also be a trojan.

There is more than one run key in the registry. There are 13+
places that programs can be started from, msconfig does not list
all of them.

UPDATE your antivirus software and run a full system scan.

UPDATE whatever anti-spyware applications that you have and run a
full system scan with each one.

You might want to start in Safe Mode to run your antivirus and
anti-spyware software.

Running a full system antivirus scan or anti-spyware scan in Safe
Mode can be a good idea. Some viruses and other malware like to
conceal themselves in areas Windows protects while using them.
Safe mode can prevent those applications access and therefore
unprotect the viruses or other malware allowing for easier removal.

''In safe mode, you have access to only basic files and drivers
(mouse, monitor, keyboard, mass storage, base video, default system
services), just the minimum device drivers required to start
Windows.''

Because of that some malware does not load in Safe Mode and is
easier to get rid of.

How to start Windows in Safe Mode Windows XP
http://www.bleepingcomputer.com/forums/index.php?showtutorial=61#winxo
--------------------

Get one or both of these.

StartMan has an option that takes you to
http://www.sysinfo.org/startupinfo.html
when your right click an entry and select Identify.

Also with StartMan, clicking on the Help menu, you can select
Identifying Startups (Pacman's Portal)... It sends you to
http://www.pacs-portal.co.uk/startup_index.htm

[[StartMan is an extended 'msconfig' Startup Manager, designed to
take control of all those pesky programs and background services
that load and run at logon - most of which you probably don't need.
As well as providing the usual trouble-shooting options to enable
or disable startups, StartMan also permits the removal of startups.
Duplicate Detection and Removal, a unique feature of StartMan, can
be configured to remove all duplicates automatically, with or
without prompting.
Orphan Detection and Removal. As above, for orphaned startups.
Executable Detection and Removal. As above, for executables.
Includes a full range of sorting options to make it easier to
locate a specific startup - by name, by filename - even by command
line parameter! ]]

StartMan v1.3.96
http://www.pt.lu/comnet/desc/startman.html

StartMan v1.3.96 Direct download
http://www.pt.lu/comnet/files/utils/startman10396.exe
-----

Startup Control Panel is another pretty good application.

[[Startup Control Panel is a nifty control panel applet that allows
you to easily configure which programs run when your computer
starts. It's simple to use and, like all my programs, is very small
and won't burden your system. A valuable tool for system
administrators!]]

Download the EXE Version and just extract the executable wherever
you want.

Startup Control Panel
http://www.mlin.net/StartupCPL.shtml

--
Hope this helps. Let us know.

Wes
MS-MVP Windows Shell/User

In KW82 <[email protected]> hunted and pecked:
I'm afraid I've already tried that, but thanks.

:

I have a similar problem with Kodak. I just got done talking to
tech support on emachines and he said to go to the start then run
then where it says open field type msconfig. Hit ok then go to
the startup tab. Remove all check marks except big fix, hot
keys, and antivirus. click apply and close. I did this and my
Kodak no longer runs at startup and doesn't slow things down. I
hope this helps

:

Running Windows XP Professional SP2
Noticed very slow performance. Winword.exe was running (though
no document/application open) and using up 30-40% cpu. "end
task" the winword.exe and all ok until next reboot.
Can't find where it's starting. Found nothing in Run registry
key. Using AVG virus progam, current.
 
Back
Top