If this is your first visit, be sure to check out the FAQ by clicking the link above. You may have to register before you can post: click the register link above to proceed. To start viewing messages, select the forum that you want to visit from the selection below. |
|
|
Thread Tools | Display Modes |
#31
|
|||
|
|||
Is there not a utility called Backup that is in Windows98, that runs to keep
5 copies of files in case of breakdown? Yes that deleted file was recreated. I have just read the log file for scheduled tasks. Something ain't right. McAfee.com seems to be running off thin air. "Gary S. Terhune" wrote in message ... I don't understand. What Backup? And what does it have to do with that folder? I thought you said the folder was deleted. Have you tried again? Are you saying that it was perhaps recreated? -- Gary S. Terhune MS MVP Shell/User "winner5+63" wrote in message ... The folder did not delete.I seem to have a problem with Backup(besides outdatedness), it creates 5 copies The cab file was created today, I believe the orginal time was right after my updates for Windows(will check). It now has a different time, but does not move. "Gary S. Terhune" wrote in message ... It was a temporary folder that Windows Updates used. Normally it's automatically deleted, but you perhaps ran into some error and had to forcefully abort a WU session, perhaps do a hard reset of the system? Not sure what's up with Task Scheduler, though I don't recall seeing it listed in your MSINFO32 list, which means that the message is correct -- Task Scheduler isn't running at startup like it should. We'll deal with that along with several other things when I can get finished analyzing and writing up a list of procedures. Gary S. Terhune MS MVP Shell/User "winner5+63" wrote in message ... Okay. I deleted and dumped the Bin. What was it? The TS message read: "Some tasks did not execute at their scheduled times because the Task Scheduler service was not running. You can view the list of missed tasks, and attempt to run them again, from within the Scheduled Tasks folder". I've tried to work around it but it won't go in background. Have to click on Okay button to get out, because X is grayed out. I have opened folder and run the tasks, and also watched as the tasks executed at their scheduled times and reset. All seemed well. Now I just click out and continue. "Gary S. Terhune" wrote in message ... Sure you can call me Gary, but my friends know me as GAry. Remind me, what does the Task Scheduler error message say, *exactly*? Reboot and then delete that wudnld20.tmp folder. Just delete the entire folder. -- Gary S. Terhune MS MVP Shell/User "winner5+63" wrote in message ... THANK YOU GARY! May I call you Gary? Yes, I have McAfee set up for automatic update downloads. Not sure about the Task Scheduler though. Still getting message box at bootup. Yes, I scanned, in Safe Mode(no infected files). I found a cab file in C:\Windows\wudnld20.tmp: Iudent.cab (8kb). It was a certificate file for Microsoft. Certiificate looked ok, but I noticed the time on the timestamp kept ticking(adding minutes). Strange! I did not install the certificate. Need more info. What's up with this? It is a hidden file. I set computer to show all files months ago. "Gary S. Terhune" wrote in message ... "winner5+63" wrote in message ... Hello the Couldn't find you guys in OE, so, here we are again. Report: Selected KB's for startup. Had problems after that (no comment). Downloaded and hopefully installed updates 896688 and 904706, proceded to system freeze and fatal excption errors: 2647:014f6b7---0246:014747FB---0506:0147268B, and the black screen of death. Had to c-a-d out. Yesterday I recieved a virus alert from "administrator about a viral attachment: bdnynxgi.pif, infected with the W32/Swen@MM virus(es). Will now try your instructions for OE. mejp If you're not sure about whether or not the Updates installed, you can go get them again. Everything's running more or less OK now, though? Ignore that virus alert for now. It's probably nothing to do with you except that some bad guy out there used your email address as a From address to send virus-laden SPAM out to others. The receiving server can't tell that it's really not you that's sending the email, so it tells you about it. You're using McAfee right now, yes? And it's up to date? Have you run a full scan of your system lately? Good luck with OE. There are shortcuts I could give you, but I think setting it up the way I previously suggested will work best for you. -- Gary S. Terhune MS MVP Shell/User |
#32
|
|||
|
|||
What I believe you're speaking of is SCANREGW, which makes a small backup
everyday, usually keeping the five most recent though you can change that parameter. All that's included in these backups are the Registry files (USER.DAT and SYSTEM.DAT), plus WIN.INI, SYSTEM.INI and MSDOS.SYS. The backups are stored in C:\Windows\SYSBCKUP, a Hidden folder, in files named RBnnn.CAB, where nnn is a number. From what I read, the solution to the issue you're having with that wudnld20.tmp folder is to reinstall the last Updates you did. IIRC, you installed Tuesday's Updates? I suggest you go back to Windows Updates. First click on the Personalize link at left and check the item that says "Show Windows Updates Catalog" or something like that. Save the Settings, then you'll notice the new link on the left to Windows Updates Catalog under the See Also section. Choose that one, then click the obvious link, then choose Windows 98 and Windows 98 Second Edition from the drop-down, then Search. On the next screen, choose the top one, "Critical Updates and Service Packs". Wait for the list to load, then change the Sort by box from Title to Posted Date. That will put last Tuesday's Updates at the top, KB896688 and KB904706. Add them, then click on the Go to Download Basket link, above. Now, before browsing to a Save location for these downloads, first create a new folder to put them in, maybe C:\Downloads. Then browse for that folder. The downloads will be saved to the folder you chose, but within a series of nested folders. You have to keep drilling through those folders until you get to the Update. Now, before proceeding, do the Clean Boot procedure. Disconnect from the internet, etc. Then run the Updates, on eat a time, restarting after *each* one. Then re-enable your usual Startup list and resume working (or playing, as the case may be.) I'm still working on that other, but keep on asking other questions as they come up. I'm learning more and more about your system with every message you post. As for Task Scheduler, please open TS and tell us what Scheduled Tasks are listed there. -- Gary S. Terhune MS MVP Shell/User "winner5+63" wrote in message ... Is there not a utility called Backup that is in Windows98, that runs to keep 5 copies of files in case of breakdown? Yes that deleted file was recreated. I have just read the log file for scheduled tasks. Something ain't right. McAfee.com seems to be running off thin air. "Gary S. Terhune" wrote in message ... I don't understand. What Backup? And what does it have to do with that folder? I thought you said the folder was deleted. Have you tried again? Are you saying that it was perhaps recreated? -- Gary S. Terhune MS MVP Shell/User "winner5+63" wrote in message ... The folder did not delete.I seem to have a problem with Backup(besides outdatedness), it creates 5 copies The cab file was created today, I believe the orginal time was right after my updates for Windows(will check). It now has a different time, but does not move. "Gary S. Terhune" wrote in message ... It was a temporary folder that Windows Updates used. Normally it's automatically deleted, but you perhaps ran into some error and had to forcefully abort a WU session, perhaps do a hard reset of the system? Not sure what's up with Task Scheduler, though I don't recall seeing it listed in your MSINFO32 list, which means that the message is correct -- Task Scheduler isn't running at startup like it should. We'll deal with that along with several other things when I can get finished analyzing and writing up a list of procedures. Gary S. Terhune MS MVP Shell/User "winner5+63" wrote in message ... Okay. I deleted and dumped the Bin. What was it? The TS message read: "Some tasks did not execute at their scheduled times because the Task Scheduler service was not running. You can view the list of missed tasks, and attempt to run them again, from within the Scheduled Tasks folder". I've tried to work around it but it won't go in background. Have to click on Okay button to get out, because X is grayed out. I have opened folder and run the tasks, and also watched as the tasks executed at their scheduled times and reset. All seemed well. Now I just click out and continue. "Gary S. Terhune" wrote in message ... Sure you can call me Gary, but my friends know me as GAry. Remind me, what does the Task Scheduler error message say, *exactly*? Reboot and then delete that wudnld20.tmp folder. Just delete the entire folder. -- Gary S. Terhune MS MVP Shell/User |
#33
|
|||
|
|||
I may have helped things a little by calling Microsoft's PC Safety Tech
help. They ran Ad-Ware and found 70+ adware objects. Let's see what happens now. Otherwise, I am exhausted. Post you later. "Gary S. Terhune" wrote in message ... What I believe you're speaking of is SCANREGW, which makes a small backup everyday, usually keeping the five most recent though you can change that parameter. All that's included in these backups are the Registry files (USER.DAT and SYSTEM.DAT), plus WIN.INI, SYSTEM.INI and MSDOS.SYS. The backups are stored in C:\Windows\SYSBCKUP, a Hidden folder, in files named RBnnn.CAB, where nnn is a number. From what I read, the solution to the issue you're having with that wudnld20.tmp folder is to reinstall the last Updates you did. IIRC, you installed Tuesday's Updates? I suggest you go back to Windows Updates. First click on the Personalize link at left and check the item that says "Show Windows Updates Catalog" or something like that. Save the Settings, then you'll notice the new link on the left to Windows Updates Catalog under the See Also section. Choose that one, then click the obvious link, then choose Windows 98 and Windows 98 Second Edition from the drop-down, then Search. On the next screen, choose the top one, "Critical Updates and Service Packs". Wait for the list to load, then change the Sort by box from Title to Posted Date. That will put last Tuesday's Updates at the top, KB896688 and KB904706. Add them, then click on the Go to Download Basket link, above. Now, before browsing to a Save location for these downloads, first create a new folder to put them in, maybe C:\Downloads. Then browse for that folder. The downloads will be saved to the folder you chose, but within a series of nested folders. You have to keep drilling through those folders until you get to the Update. Now, before proceeding, do the Clean Boot procedure. Disconnect from the internet, etc. Then run the Updates, on eat a time, restarting after *each* one. Then re-enable your usual Startup list and resume working (or playing, as the case may be.) I'm still working on that other, but keep on asking other questions as they come up. I'm learning more and more about your system with every message you post. As for Task Scheduler, please open TS and tell us what Scheduled Tasks are listed there. -- Gary S. Terhune MS MVP Shell/User "winner5+63" wrote in message ... Is there not a utility called Backup that is in Windows98, that runs to keep 5 copies of files in case of breakdown? Yes that deleted file was recreated. I have just read the log file for scheduled tasks. Something ain't right. McAfee.com seems to be running off thin air. "Gary S. Terhune" wrote in message ... I don't understand. What Backup? And what does it have to do with that folder? I thought you said the folder was deleted. Have you tried again? Are you saying that it was perhaps recreated? -- Gary S. Terhune MS MVP Shell/User "winner5+63" wrote in message ... The folder did not delete.I seem to have a problem with Backup(besides outdatedness), it creates 5 copies The cab file was created today, I believe the orginal time was right after my updates for Windows(will check). It now has a different time, but does not move. "Gary S. Terhune" wrote in message ... It was a temporary folder that Windows Updates used. Normally it's automatically deleted, but you perhaps ran into some error and had to forcefully abort a WU session, perhaps do a hard reset of the system? Not sure what's up with Task Scheduler, though I don't recall seeing it listed in your MSINFO32 list, which means that the message is correct -- Task Scheduler isn't running at startup like it should. We'll deal with that along with several other things when I can get finished analyzing and writing up a list of procedures. Gary S. Terhune MS MVP Shell/User "winner5+63" wrote in message ... Okay. I deleted and dumped the Bin. What was it? The TS message read: "Some tasks did not execute at their scheduled times because the Task Scheduler service was not running. You can view the list of missed tasks, and attempt to run them again, from within the Scheduled Tasks folder". I've tried to work around it but it won't go in background. Have to click on Okay button to get out, because X is grayed out. I have opened folder and run the tasks, and also watched as the tasks executed at their scheduled times and reset. All seemed well. Now I just click out and continue. "Gary S. Terhune" wrote in message ... Sure you can call me Gary, but my friends know me as GAry. Remind me, what does the Task Scheduler error message say, *exactly*? Reboot and then delete that wudnld20.tmp folder. Just delete the entire folder. -- Gary S. Terhune MS MVP Shell/User |
#34
|
|||
|
|||
That's Ad-'A'ware (quotes are mine). It detects and removes Ad-Ware, s.
You didn't have to call MS to get that info, though I applaud that you did so. Have you yet read my article? http://www.grystmill.com/articles/security.htm -- Gary S. Terhune MS MVP Shell/User "winner5+63" wrote in message ... I may have helped things a little by calling Microsoft's PC Safety Tech help. They ran Ad-Ware and found 70+ adware objects. Let's see what happens now. Otherwise, I am exhausted. Post you later. "Gary S. Terhune" wrote in message ... What I believe you're speaking of is SCANREGW, which makes a small backup everyday, usually keeping the five most recent though you can change that parameter. All that's included in these backups are the Registry files (USER.DAT and SYSTEM.DAT), plus WIN.INI, SYSTEM.INI and MSDOS.SYS. The backups are stored in C:\Windows\SYSBCKUP, a Hidden folder, in files named RBnnn.CAB, where nnn is a number. From what I read, the solution to the issue you're having with that wudnld20.tmp folder is to reinstall the last Updates you did. IIRC, you installed Tuesday's Updates? I suggest you go back to Windows Updates. First click on the Personalize link at left and check the item that says "Show Windows Updates Catalog" or something like that. Save the Settings, then you'll notice the new link on the left to Windows Updates Catalog under the See Also section. Choose that one, then click the obvious link, then choose Windows 98 and Windows 98 Second Edition from the drop-down, then Search. On the next screen, choose the top one, "Critical Updates and Service Packs". Wait for the list to load, then change the Sort by box from Title to Posted Date. That will put last Tuesday's Updates at the top, KB896688 and KB904706. Add them, then click on the Go to Download Basket link, above. Now, before browsing to a Save location for these downloads, first create a new folder to put them in, maybe C:\Downloads. Then browse for that folder. The downloads will be saved to the folder you chose, but within a series of nested folders. You have to keep drilling through those folders until you get to the Update. Now, before proceeding, do the Clean Boot procedure. Disconnect from the internet, etc. Then run the Updates, on eat a time, restarting after *each* one. Then re-enable your usual Startup list and resume working (or playing, as the case may be.) I'm still working on that other, but keep on asking other questions as they come up. I'm learning more and more about your system with every message you post. As for Task Scheduler, please open TS and tell us what Scheduled Tasks are listed there. -- Gary S. Terhune MS MVP Shell/User "winner5+63" wrote in message ... Is there not a utility called Backup that is in Windows98, that runs to keep 5 copies of files in case of breakdown? Yes that deleted file was recreated. I have just read the log file for scheduled tasks. Something ain't right. McAfee.com seems to be running off thin air. "Gary S. Terhune" wrote in message ... I don't understand. What Backup? And what does it have to do with that folder? I thought you said the folder was deleted. Have you tried again? Are you saying that it was perhaps recreated? -- Gary S. Terhune MS MVP Shell/User "winner5+63" wrote in message ... The folder did not delete.I seem to have a problem with Backup(besides outdatedness), it creates 5 copies The cab file was created today, I believe the orginal time was right after my updates for Windows(will check). It now has a different time, but does not move. "Gary S. Terhune" wrote in message ... It was a temporary folder that Windows Updates used. Normally it's automatically deleted, but you perhaps ran into some error and had to forcefully abort a WU session, perhaps do a hard reset of the system? Not sure what's up with Task Scheduler, though I don't recall seeing it listed in your MSINFO32 list, which means that the message is correct -- Task Scheduler isn't running at startup like it should. We'll deal with that along with several other things when I can get finished analyzing and writing up a list of procedures. Gary S. Terhune MS MVP Shell/User "winner5+63" wrote in message ... Okay. I deleted and dumped the Bin. What was it? The TS message read: "Some tasks did not execute at their scheduled times because the Task Scheduler service was not running. You can view the list of missed tasks, and attempt to run them again, from within the Scheduled Tasks folder". I've tried to work around it but it won't go in background. Have to click on Okay button to get out, because X is grayed out. I have opened folder and run the tasks, and also watched as the tasks executed at their scheduled times and reset. All seemed well. Now I just click out and continue. "Gary S. Terhune" wrote in message ... Sure you can call me Gary, but my friends know me as GAry. Remind me, what does the Task Scheduler error message say, *exactly*? Reboot and then delete that wudnld20.tmp folder. Just delete the entire folder. -- Gary S. Terhune MS MVP Shell/User |
#35
|
|||
|
|||
Well now, someone finally persuaded me to click on a link. I read and
printed your article. At this point I'm sort of suffering from 'info' shock. My head feels a little numb. I found another Windows utility called 'update information tool, but did'nt write down the path to it. I gotta go play now. My scheduled tasks a McAfee Update Checker; Windows Critical Notification, scheduled to run every five minutes. I guess it only starts when I bootup. My computer does not stay on, including my internet service. The modem is on though. "Gary S. Terhune" wrote in message ... That's Ad-'A'ware (quotes are mine). It detects and removes Ad-Ware, s. You didn't have to call MS to get that info, though I applaud that you did so. Have you yet read my article? http://www.grystmill.com/articles/security.htm -- Gary S. Terhune MS MVP Shell/User "winner5+63" wrote in message ... I may have helped things a little by calling Microsoft's PC Safety Tech help. They ran Ad-Ware and found 70+ adware objects. Let's see what happens now. Otherwise, I am exhausted. Post you later. "Gary S. Terhune" wrote in message ... What I believe you're speaking of is SCANREGW, which makes a small backup everyday, usually keeping the five most recent though you can change that parameter. All that's included in these backups are the Registry files (USER.DAT and SYSTEM.DAT), plus WIN.INI, SYSTEM.INI and MSDOS.SYS. The backups are stored in C:\Windows\SYSBCKUP, a Hidden folder, in files named RBnnn.CAB, where nnn is a number. From what I read, the solution to the issue you're having with that wudnld20.tmp folder is to reinstall the last Updates you did. IIRC, you installed Tuesday's Updates? I suggest you go back to Windows Updates. First click on the Personalize link at left and check the item that says "Show Windows Updates Catalog" or something like that. Save the Settings, then you'll notice the new link on the left to Windows Updates Catalog under the See Also section. Choose that one, then click the obvious link, then choose Windows 98 and Windows 98 Second Edition from the drop-down, then Search. On the next screen, choose the top one, "Critical Updates and Service Packs". Wait for the list to load, then change the Sort by box from Title to Posted Date. That will put last Tuesday's Updates at the top, KB896688 and KB904706. Add them, then click on the Go to Download Basket link, above. Now, before browsing to a Save location for these downloads, first create a new folder to put them in, maybe C:\Downloads. Then browse for that folder. The downloads will be saved to the folder you chose, but within a series of nested folders. You have to keep drilling through those folders until you get to the Update. Now, before proceeding, do the Clean Boot procedure. Disconnect from the internet, etc. Then run the Updates, on eat a time, restarting after *each* one. Then re-enable your usual Startup list and resume working (or playing, as the case may be.) I'm still working on that other, but keep on asking other questions as they come up. I'm learning more and more about your system with every message you post. As for Task Scheduler, please open TS and tell us what Scheduled Tasks are listed there. -- Gary S. Terhune MS MVP Shell/User "winner5+63" wrote in message ... Is there not a utility called Backup that is in Windows98, that runs to keep 5 copies of files in case of breakdown? Yes that deleted file was recreated. I have just read the log file for scheduled tasks. Something ain't right. McAfee.com seems to be running off thin air. "Gary S. Terhune" wrote in message ... I don't understand. What Backup? And what does it have to do with that folder? I thought you said the folder was deleted. Have you tried again? Are you saying that it was perhaps recreated? -- Gary S. Terhune MS MVP Shell/User "winner5+63" wrote in message ... The folder did not delete.I seem to have a problem with Backup(besides outdatedness), it creates 5 copies The cab file was created today, I believe the orginal time was right after my updates for Windows(will check). It now has a different time, but does not move. "Gary S. Terhune" wrote in message ... It was a temporary folder that Windows Updates used. Normally it's automatically deleted, but you perhaps ran into some error and had to forcefully abort a WU session, perhaps do a hard reset of the system? Not sure what's up with Task Scheduler, though I don't recall seeing it listed in your MSINFO32 list, which means that the message is correct -- Task Scheduler isn't running at startup like it should. We'll deal with that along with several other things when I can get finished analyzing and writing up a list of procedures. Gary S. Terhune MS MVP Shell/User "winner5+63" wrote in message ... Okay. I deleted and dumped the Bin. What was it? The TS message read: "Some tasks did not execute at their scheduled times because the Task Scheduler service was not running. You can view the list of missed tasks, and attempt to run them again, from within the Scheduled Tasks folder". I've tried to work around it but it won't go in background. Have to click on Okay button to get out, because X is grayed out. I have opened folder and run the tasks, and also watched as the tasks executed at their scheduled times and reset. All seemed well. Now I just click out and continue. "Gary S. Terhune" wrote in message ... Sure you can call me Gary, but my friends know me as GAry. Remind me, what does the Task Scheduler error message say, *exactly*? Reboot and then delete that wudnld20.tmp folder. Just delete the entire folder. -- Gary S. Terhune MS MVP Shell/User |
#36
|
|||
|
|||
system analysis
Mary,
Sorry this took so long. I needed to make sure I was squared off enough to give it the attention it needs. My comments are inline, and I'll have to see if I can work in some snippage. xCal reminder C:\Program Files\Common Files\Microsoft Shared\Works Share\wkcalrem.exe Works Calendar Reminder -- Parts of Works program. You haven't yet cleared the air on this topic: Do you or do you not have Works currently installed? By the way, this one doesn't look like it came from the MSINFO32 list, though there's an identical one below that *does* appear to have come from MSINFO32. Didn't realize that Works Calendar is a seperate application, until now. That doesn't answer my question. Do you or do you not have Works currently installed? Look in Add/Remove Programs. xrun= hpfsched Supports HP printer or scanner or Multi-Function device, perhaps other HP devices. Do you have such a thing? What brand is your computer? Your printer? Your scanner? Computer: HP Pavilion 8665c; Scanner: HP Scanjet 4470c(1200dpi/48-bit color) with Scanjet xpa; Printer: HP Deskjet932c; Monitor was Nec(loved it) 17" monitor, but because of tonnage and bad back had to leave when I relocated; now, have Gateway 17" I retrieved from garbage room in building; Keyboard is not USB Scanjet is USB; ISP: Verizon with MSN6 and McAfee Security Suite8 or9 bundled Westell VersaLink Model 327 modem provided. MSN was problematic so I tried to uninstall and use Verizon's layout. 'Reinstalled' MSN's bells and whistles, I don't use The Messenger anymore. I, too, like the old NEC monitors. Why do you use MSN? Just because the Verizon installation came with CDs and suggested that you install it? You do not need MSN or any other installed applications in order to use your Verizon ISP. I've already stated my opinion of McAfee. I think you should switch to something else, like ETrust. xMicrosoft Works Calendar Reminders Startup Group "C:\Program Files\Common Files\Microsoft Shared\Works Shared \wkcalrem.exe" Same exact entry as the first one, except this one looks like it really came from the MSINFO32 list, since it has the notation that tells us where the command resides (it's a shortcut in the Start\Programs\Startup folder.) Even if you have Works installed, there should only be one of these. I used the Works 2000(not the suite, but has processor, spreadsheet, and database) disk that came with the computer in attempting to reinstall missing files, and finally in uninstalling whole program. Program had two listings in Start/Programs listing before I returned to Internet. As i said 'my' Works is a resource hog, and didn't work well with other programs. The other reasons for uninstalling it a The ruler option was grayed out; The find option would only find one word out of a document that had many of the same word; And the documents that I had saved as Word files later proved to be inaccessible. I had planned to buy Word. So, are you saying that you've totally uninstalled Works? If so, that directly impacts what I may suggest with regards to the Startup commands that remain. xTaskbar Display Controls Registry (Per-User Run) RunDLL deskcp16.dll,QUICKRES_RUNDLLENTRY This one is to put an icon in the System Tray (next to the clock) where you can quickly change the screen resolution. This command should be deleted if you aren't in the habit of frequently changing display resolution. Again, wait until the analysis is complete before actually doing anything. We'll l ay out a series of procedures for you to follow when the time comes. Does this also control other icons, such as the Compact Mouse that I installed. It is an icon that is a mouse with animated eyes that follow or locates the pointer for you. It was fun in the beginning but annoying later. The Mouse has no ball under the bottom, but a red light that cuts down on space needed and the cleaning of that infernal rubber ball. But, as is my fate it is a resource hog. Probably the humonguos help file. And possibly adware? No, this app deals with video resolution and nothing else. That icon you're talking about is probably provided by another program that is listed below, "Gnetmous " xMicrosoft Works Update Detection Registry (Per-User Run) \WkDetect.exe More Works. And, no updates for version after 4.5? Mine is 5.0 Though I've seen for files for version6 on my computer. I have no idea what updates are available. But it's not uncommon to see files that claim a later version. They're from updates. It doesn't mean you have fully upgraded to version 6, only that you've updated certain components to version 6 levels. It's quite common in MS applications and operating systems. MCUpdateExe Registry (Machine Run) C:\PROGRA~1\MCAFEE.COM\AGENT\MCUPDATE.EXE MCAgentExe Registry (Machine Run) C:\PROGRA~1\MCAFEE.COM\AGENT\mcagent.exe VsecomrEXE Registry (Machine Run) C:\Program Files\Network Associates\McAfee VirusScan\VSEcomR.EXE VsStatEXE Registry (Machine Run) C:\Program Files\Network Associates\McAfee VirusScan\VSSTAT.EXE /SHOWWARNING All four of the above are from McAfee Antivirus. Is it up to date? Can you f igure out what version it is for us? You can usually find that info in HelpAbout. Regardless, McAfee AV may be bogging down and even messing up your system. There are other, better solutions out there, in my opinion, free ones like AVG and AVAST, or paid ones like ETrust. I use ETrust. You can get the first year free by going he http://www.my-etrust.com/microsoft But remember, don't do anything yet. If you decide to change antivirus applications, the first trick may be to get McAfee to uninstall properly. Computer came with McAfee VirusScan version 4 installed, in 2000. Files are still in system I guess. Is one of those things I didn't want reinstalled. Had bought version 5 or an update in 2000-01(on internet) I was a Net virgin back then, but found out 4 did not recognize 5's modules, or something like that. Lost: $29. Also purchased WinZip8.0(now have 9c update, hopefully) Question?: Why didn't I lose Winzip when I recovered my hard drive with the Recovery Disc--- I lost all the Windows updates. Did that in 2001, and got off Internet after 8 months of hell. Am back April 13, 2005! With a vengeance(I whispered that because the gremlins are still in there). When you "overinstall" Windows 98, you only overwrite system files (some of which *may* affect applications installations so that you have to reinstall, but not usually.) TaskMonitor Registry (Machine Run) C:\WINDOWS\taskmon.exe This is the one that creates all those logs in the APPLOG folder. If you decide you don't need Defrag to Optimize your files, then this one can be gotten rid of. SystemTray Registry (Machine Run) SysTray.Exe The Tray is that box at the far right of the TaskBar, where the clock resides. A few of the icons that get placed there, like the Volume Control, for example, need for SysTray to load. You should leave it enabled. Does this included the Mouse icon too!? No, it does not include the mouse icon. Like I said, what's called the "System Tray" is that whole area with small icons next to the clock. But the SYSTRAY application is only involved in a couple, Volume Control usually being the only one most users know about. VSOCheckTask Registry (Machine Run) "C:\PROGRA~1\MCAFEE.COM\VSO\MCMNHDLR.EXE" /checktask VirusScan Online Registry (Machine Run) "C:\PROGRA~1\MCAFEE.COM\VSO\mcvsshld.exe" More McAfee. Gnetmous Registry (Machine Run) C:\Program Files\COMPAQ\Scroll Mouse\gnetmous.exe Supports your mouse and may or may not be necessary, depending on whether you need extra customizations for the mouse beyond the basics (reprogrammable buttons, for instance.) Normally, I do not install such software, but sometimes it's necessary. The only way to know is to run for a while with it disabled and see if you notice any difference. The Mouse again! Motive SmartBridge Registry (Machine Run) C:\PROGRA~1\VERIZO~1\SMARTB~1\MotiveSB.exe Looks like a mechanism used by your ISP (Verizon, right?) that assists with their internet support. Not usually necessary. I'd delete this command, but I think perhaps you should leave it -- unless we discover that it truly is causing problems. Note that deleting a Startup command isn't the same thing as Uninstalling the program. Deleting the command just stops it from loading at Startup and from appearing as a disabled item in MSCONFIG (ideally, during normal running, MSCONFIG should be set to Normal Startup, with nothing disabled.) Verizon yes. CriticalUpdate Registry (Machine Run) c:\windows\SYSTEM\wucrtupd.exe -startup Leave this one unless we discover that it's causing problems. It's a Scheduled Tasks that checks every so often to see if you're connected to the internet, and if you are, it checks for new Critical Updates from Windows Updates. Now, what's weird about this one is that you don't have any Startup command for Task Scheduler. If Critical Updates Notification is to work, Task Scheduler needs to be running. Have recurring Task Scheduler notice box that reads "Some tasks did not execute at their scheduled times because the Task Scheduler Service was not running. You can view the list of missed tasks, and attempt to run them again, from within the Scheduled Tasks folder." I shut down the computer completely so that I might copy the message, but the message box did not reappear on bootup. Strange! I have icons in the System Tray for McAffee and the Task Scheduler. When the message box first started appearing figured it was because I pause TS and turn off the others when I defrag and install whatever. On checking and running the TS I found it wasn't so. The box is still popping up after nearly a month. I notice that it has only one exit choice, OK option. The X is grayed out. Also, a couple of months ago the McAfee icon indicated the program was off by turning black 'after' bootup. I had to keep remembering to turn it on before going on line. ( I forgot a couple of times). I check the schedules via the System Tray icon. The scheduled times seem to be occurring(when using the computer the pointer also blinks or freezes).The Tray icon seems to indicate that update downloads are happening. Later, because the box appeared again after bootup, I shut down on restart, the message still appeared. OK, well let's leave the TS issue until later, after you've cleaned up your system. It may very well be one of those apps that (I hope) you're going to uninstall -- like McAfee. OK, now to the list of procedures. But I'm going to post those to an entirely new thread (I'll email you when I do and tell you what the Subject line is.) I've got a lot of it done, but I want to review it all, first. However, have you worked your way through the articles I gave you? You really want to get those ones down, and make sure you're malware-free before we bother to continue. (That means you want to do all those things I suggest, and after you've run all the other anti-spyware and anti-virus scans, you need to finish up by posting a HijackThis log to the Aumha.net forums for analysis, specifically to this one. Aumha.org and Aumha.net are owned and run my MS-MVP Jim Eshelman, and staffed by lots of very good people, including many MVPs. -- Gary S. Terhune MS MVP Shell/User |
#37
|
|||
|
|||
system analysis
Hi there! What is inline? I chose Verizon because I use the phone service;
I didn't want dial-up; cable is expensive; and a package seemed easier than shopping around for things I needed for netting. I did not find Works in the Install/Remove list. In re-selected the task objects in msconfig/startup. I need volume control, and quick launch. No I don't change resolutions, 800x600 works for me. Higher is too small for my 17" screen. The Works info answered a question on seeing version 6 info here and there. I didn't reinstall Windows 98, Microsoft techs did---via telephone. Havd done only one article, the Security article. Will have to review the others, now that I'm sort of over linkophobia. Otherwise, things sound good to me. See ya later. "Gary S. Terhune" wrote in message ... Mary, Sorry this took so long. I needed to make sure I was squared off enough to give it the attention it needs. My comments are inline, and I'll have to see if I can work in some snippage. xCal reminder C:\Program Files\Common Files\Microsoft Shared\Works Share\wkcalrem.exe Works Calendar Reminder -- Parts of Works program. You haven't yet cleared the air on this topic: Do you or do you not have Works currently installed? By the way, this one doesn't look like it came from the MSINFO32 list, though there's an identical one below that *does* appear to have come from MSINFO32. Didn't realize that Works Calendar is a seperate application, until now. That doesn't answer my question. Do you or do you not have Works currently installed? Look in Add/Remove Programs. xrun= hpfsched Supports HP printer or scanner or Multi-Function device, perhaps other HP devices. Do you have such a thing? What brand is your computer? Your printer? Your scanner? Computer: HP Pavilion 8665c; Scanner: HP Scanjet 4470c(1200dpi/48-bit color) with Scanjet xpa; Printer: HP Deskjet932c; Monitor was Nec(loved it) 17" monitor, but because of tonnage and bad back had to leave when I relocated; now, have Gateway 17" I retrieved from garbage room in building; Keyboard is not USB Scanjet is USB; ISP: Verizon with MSN6 and McAfee Security Suite8 or9 bundled Westell VersaLink Model 327 modem provided. MSN was problematic so I tried to uninstall and use Verizon's layout. 'Reinstalled' MSN's bells and whistles, I don't use The Messenger anymore. I, too, like the old NEC monitors. Why do you use MSN? Just because the Verizon installation came with CDs and suggested that you install it? You do not need MSN or any other installed applications in order to use your Verizon ISP. I've already stated my opinion of McAfee. I think you should switch to something else, like ETrust. xMicrosoft Works Calendar Reminders Startup Group "C:\Program Files\Common Files\Microsoft Shared\Works Shared \wkcalrem.exe" Same exact entry as the first one, except this one looks like it really came from the MSINFO32 list, since it has the notation that tells us where the command resides (it's a shortcut in the Start\Programs\Startup folder.) Even if you have Works installed, there should only be one of these. I used the Works 2000(not the suite, but has processor, spreadsheet, and database) disk that came with the computer in attempting to reinstall missing files, and finally in uninstalling whole program. Program had two listings in Start/Programs listing before I returned to Internet. As i said 'my' Works is a resource hog, and didn't work well with other programs. The other reasons for uninstalling it a The ruler option was grayed out; The find option would only find one word out of a document that had many of the same word; And the documents that I had saved as Word files later proved to be inaccessible. I had planned to buy Word. So, are you saying that you've totally uninstalled Works? If so, that directly impacts what I may suggest with regards to the Startup commands that remain. xTaskbar Display Controls Registry (Per-User Run) RunDLL deskcp16.dll,QUICKRES_RUNDLLENTRY This one is to put an icon in the System Tray (next to the clock) where you can quickly change the screen resolution. This command should be deleted if you aren't in the habit of frequently changing display resolution. Again, wait until the analysis is complete before actually doing anything. We'll l ay out a series of procedures for you to follow when the time comes. Does this also control other icons, such as the Compact Mouse that I installed. It is an icon that is a mouse with animated eyes that follow or locates the pointer for you. It was fun in the beginning but annoying later. The Mouse has no ball under the bottom, but a red light that cuts down on space needed and the cleaning of that infernal rubber ball. But, as is my fate it is a resource hog. Probably the humonguos help file. And possibly adware? No, this app deals with video resolution and nothing else. That icon you're talking about is probably provided by another program that is listed below, "Gnetmous " xMicrosoft Works Update Detection Registry (Per-User Run) \WkDetect.exe More Works. And, no updates for version after 4.5? Mine is 5.0 Though I've seen for files for version6 on my computer. I have no idea what updates are available. But it's not uncommon to see files that claim a later version. They're from updates. It doesn't mean you have fully upgraded to version 6, only that you've updated certain components to version 6 levels. It's quite common in MS applications and operating systems. MCUpdateExe Registry (Machine Run) C:\PROGRA~1\MCAFEE.COM\AGENT\MCUPDATE.EXE MCAgentExe Registry (Machine Run) C:\PROGRA~1\MCAFEE.COM\AGENT\mcagent.exe VsecomrEXE Registry (Machine Run) C:\Program Files\Network Associates\McAfee VirusScan\VSEcomR.EXE VsStatEXE Registry (Machine Run) C:\Program Files\Network Associates\McAfee VirusScan\VSSTAT.EXE /SHOWWARNING All four of the above are from McAfee Antivirus. Is it up to date? Can you f igure out what version it is for us? You can usually find that info in HelpAbout. Regardless, McAfee AV may be bogging down and even messing up your system. There are other, better solutions out there, in my opinion, free ones like AVG and AVAST, or paid ones like ETrust. I use ETrust. You can get the first year free by going he http://www.my-etrust.com/microsoft But remember, don't do anything yet. If you decide to change antivirus applications, the first trick may be to get McAfee to uninstall properly. Computer came with McAfee VirusScan version 4 installed, in 2000. Files are still in system I guess. Is one of those things I didn't want reinstalled. Had bought version 5 or an update in 2000-01(on internet) I was a Net virgin back then, but found out 4 did not recognize 5's modules, or something like that. Lost: $29. Also purchased WinZip8.0(now have 9c update, hopefully) Question?: Why didn't I lose Winzip when I recovered my hard drive with the Recovery Disc--- I lost all the Windows updates. Did that in 2001, and got off Internet after 8 months of hell. Am back April 13, 2005! With a vengeance(I whispered that because the gremlins are still in there). When you "overinstall" Windows 98, you only overwrite system files (some of which *may* affect applications installations so that you have to reinstall, but not usually.) TaskMonitor Registry (Machine Run) C:\WINDOWS\taskmon.exe This is the one that creates all those logs in the APPLOG folder. If you decide you don't need Defrag to Optimize your files, then this one can be gotten rid of. SystemTray Registry (Machine Run) SysTray.Exe The Tray is that box at the far right of the TaskBar, where the clock resides. A few of the icons that get placed there, like the Volume Control, for example, need for SysTray to load. You should leave it enabled. Does this included the Mouse icon too!? No, it does not include the mouse icon. Like I said, what's called the "System Tray" is that whole area with small icons next to the clock. But the SYSTRAY application is only involved in a couple, Volume Control usually being the only one most users know about. VSOCheckTask Registry (Machine Run) "C:\PROGRA~1\MCAFEE.COM\VSO\MCMNHDLR.EXE" /checktask VirusScan Online Registry (Machine Run) "C:\PROGRA~1\MCAFEE.COM\VSO\mcvsshld.exe" More McAfee. Gnetmous Registry (Machine Run) C:\Program Files\COMPAQ\Scroll Mouse\gnetmous.exe Supports your mouse and may or may not be necessary, depending on whether you need extra customizations for the mouse beyond the basics (reprogrammable buttons, for instance.) Normally, I do not install such software, but sometimes it's necessary. The only way to know is to run for a while with it disabled and see if you notice any difference. The Mouse again! Motive SmartBridge Registry (Machine Run) C:\PROGRA~1\VERIZO~1\SMARTB~1\MotiveSB.exe Looks like a mechanism used by your ISP (Verizon, right?) that assists with their internet support. Not usually necessary. I'd delete this command, but I think perhaps you should leave it -- unless we discover that it truly is causing problems. Note that deleting a Startup command isn't the same thing as Uninstalling the program. Deleting the command just stops it from loading at Startup and from appearing as a disabled item in MSCONFIG (ideally, during normal running, MSCONFIG should be set to Normal Startup, with nothing disabled.) Verizon yes. CriticalUpdate Registry (Machine Run) c:\windows\SYSTEM\wucrtupd.exe -startup Leave this one unless we discover that it's causing problems. It's a Scheduled Tasks that checks every so often to see if you're connected to the internet, and if you are, it checks for new Critical Updates from Windows Updates. Now, what's weird about this one is that you don't have any Startup command for Task Scheduler. If Critical Updates Notification is to work, Task Scheduler needs to be running. Have recurring Task Scheduler notice box that reads "Some tasks did not execute at their scheduled times because the Task Scheduler Service was not running. You can view the list of missed tasks, and attempt to run them again, from within the Scheduled Tasks folder." I shut down the computer completely so that I might copy the message, but the message box did not reappear on bootup. Strange! I have icons in the System Tray for McAffee and the Task Scheduler. When the message box first started appearing figured it was because I pause TS and turn off the others when I defrag and install whatever. On checking and running the TS I found it wasn't so. The box is still popping up after nearly a month. I notice that it has only one exit choice, OK option. The X is grayed out. Also, a couple of months ago the McAfee icon indicated the program was off by turning black 'after' bootup. I had to keep remembering to turn it on before going on line. ( I forgot a couple of times). I check the schedules via the System Tray icon. The scheduled times seem to be occurring(when using the computer the pointer also blinks or freezes).The Tray icon seems to indicate that update downloads are happening. Later, because the box appeared again after bootup, I shut down on restart, the message still appeared. OK, well let's leave the TS issue until later, after you've cleaned up your system. It may very well be one of those apps that (I hope) you're going to uninstall -- like McAfee. OK, now to the list of procedures. But I'm going to post those to an entirely new thread (I'll email you when I do and tell you what the Subject line is.) I've got a lot of it done, but I want to review it all, first. However, have you worked your way through the articles I gave you? You really want to get those ones down, and make sure you're malware-free before we bother to continue. (That means you want to do all those things I suggest, and after you've run all the other anti-spyware and anti-virus scans, you need to finish up by posting a HijackThis log to the Aumha.net forums for analysis, specifically to this one. Aumha.org and Aumha.net are owned and run my MS-MVP Jim Eshelman, and staffed by lots of very good people, including many MVPs. -- Gary S. Terhune MS MVP Shell/User |
#38
|
|||
|
|||
system analysis
"Comments inline" refers to inserting my own comments following paragraphs
of yours -- they're not all at the top or all at the bottom. "Top-posting" is frowned upon by purists. Inline posting can get to be real difficult to read, and that's why I always use paragraphs and blank lines liberally. I also tend only to use it when it's needed, preferring to top-post most of the time. Bottom posting appeals to the, er, dogmatic natures of some who make a big deal out of how goofy it is reading the answer before the question in top-posts. But it can be *infuriating* if the correspondent doesn't also trim the posts very diligently. I find it useful at times. I wasn't questioning your use of Verizon. I was questioning your use of MSN. There's no need, really. You can get online and get your mail and everything else you do on the internet without it. You can even go to and use MSN.com if that's what you like. But the extra layers of stuff that the program adds to your computer aren't often worth it. The rest can wait. -- Gary S. Terhune MS MVP Shell/User "winner5+63" wrote in message ... Hi there! What is inline? I chose Verizon because I use the phone service; I didn't want dial-up; cable is expensive; and a package seemed easier than shopping around for things I needed for netting. I did not find Works in the Install/Remove list. In re-selected the task objects in msconfig/startup. I need volume control, and quick launch. No I don't change resolutions, 800x600 works for me. Higher is too small for my 17" screen. The Works info answered a question on seeing version 6 info here and there. I didn't reinstall Windows 98, Microsoft techs did---via telephone. Havd done only one article, the Security article. Will have to review the others, now that I'm sort of over linkophobia. Otherwise, things sound good to me. See ya later. |
#39
|
|||
|
|||
system analysis
2nd post: OKay I'm busted! I just read the whole Security article. Boy!
You must really think I'm a hair ed. "Gary S. Terhune" wrote in message ... Mary, Sorry this took so long. I needed to make sure I was squared off enough to give it the attention it needs. My comments are inline, and I'll have to see if I can work in some snippage. xCal reminder C:\Program Files\Common Files\Microsoft Shared\Works Share\wkcalrem.exe Works Calendar Reminder -- Parts of Works program. You haven't yet cleared the air on this topic: Do you or do you not have Works currently installed? By the way, this one doesn't look like it came from the MSINFO32 list, though there's an identical one below that *does* appear to have come from MSINFO32. Didn't realize that Works Calendar is a seperate application, until now. That doesn't answer my question. Do you or do you not have Works currently installed? Look in Add/Remove Programs. xrun= hpfsched Supports HP printer or scanner or Multi-Function device, perhaps other HP devices. Do you have such a thing? What brand is your computer? Your printer? Your scanner? Computer: HP Pavilion 8665c; Scanner: HP Scanjet 4470c(1200dpi/48-bit color) with Scanjet xpa; Printer: HP Deskjet932c; Monitor was Nec(loved it) 17" monitor, but because of tonnage and bad back had to leave when I relocated; now, have Gateway 17" I retrieved from garbage room in building; Keyboard is not USB Scanjet is USB; ISP: Verizon with MSN6 and McAfee Security Suite8 or9 bundled Westell VersaLink Model 327 modem provided. MSN was problematic so I tried to uninstall and use Verizon's layout. 'Reinstalled' MSN's bells and whistles, I don't use The Messenger anymore. I, too, like the old NEC monitors. Why do you use MSN? Just because the Verizon installation came with CDs and suggested that you install it? You do not need MSN or any other installed applications in order to use your Verizon ISP. I've already stated my opinion of McAfee. I think you should switch to something else, like ETrust. xMicrosoft Works Calendar Reminders Startup Group "C:\Program Files\Common Files\Microsoft Shared\Works Shared \wkcalrem.exe" Same exact entry as the first one, except this one looks like it really came from the MSINFO32 list, since it has the notation that tells us where the command resides (it's a shortcut in the Start\Programs\Startup folder.) Even if you have Works installed, there should only be one of these. I used the Works 2000(not the suite, but has processor, spreadsheet, and database) disk that came with the computer in attempting to reinstall missing files, and finally in uninstalling whole program. Program had two listings in Start/Programs listing before I returned to Internet. As i said 'my' Works is a resource hog, and didn't work well with other programs. The other reasons for uninstalling it a The ruler option was grayed out; The find option would only find one word out of a document that had many of the same word; And the documents that I had saved as Word files later proved to be inaccessible. I had planned to buy Word. So, are you saying that you've totally uninstalled Works? If so, that directly impacts what I may suggest with regards to the Startup commands that remain. xTaskbar Display Controls Registry (Per-User Run) RunDLL deskcp16.dll,QUICKRES_RUNDLLENTRY This one is to put an icon in the System Tray (next to the clock) where you can quickly change the screen resolution. This command should be deleted if you aren't in the habit of frequently changing display resolution. Again, wait until the analysis is complete before actually doing anything. We'll l ay out a series of procedures for you to follow when the time comes. Does this also control other icons, such as the Compact Mouse that I installed. It is an icon that is a mouse with animated eyes that follow or locates the pointer for you. It was fun in the beginning but annoying later. The Mouse has no ball under the bottom, but a red light that cuts down on space needed and the cleaning of that infernal rubber ball. But, as is my fate it is a resource hog. Probably the humonguos help file. And possibly adware? No, this app deals with video resolution and nothing else. That icon you're talking about is probably provided by another program that is listed below, "Gnetmous " xMicrosoft Works Update Detection Registry (Per-User Run) \WkDetect.exe More Works. And, no updates for version after 4.5? Mine is 5.0 Though I've seen for files for version6 on my computer. I have no idea what updates are available. But it's not uncommon to see files that claim a later version. They're from updates. It doesn't mean you have fully upgraded to version 6, only that you've updated certain components to version 6 levels. It's quite common in MS applications and operating systems. MCUpdateExe Registry (Machine Run) C:\PROGRA~1\MCAFEE.COM\AGENT\MCUPDATE.EXE MCAgentExe Registry (Machine Run) C:\PROGRA~1\MCAFEE.COM\AGENT\mcagent.exe VsecomrEXE Registry (Machine Run) C:\Program Files\Network Associates\McAfee VirusScan\VSEcomR.EXE VsStatEXE Registry (Machine Run) C:\Program Files\Network Associates\McAfee VirusScan\VSSTAT.EXE /SHOWWARNING All four of the above are from McAfee Antivirus. Is it up to date? Can you f igure out what version it is for us? You can usually find that info in HelpAbout. Regardless, McAfee AV may be bogging down and even messing up your system. There are other, better solutions out there, in my opinion, free ones like AVG and AVAST, or paid ones like ETrust. I use ETrust. You can get the first year free by going he http://www.my-etrust.com/microsoft But remember, don't do anything yet. If you decide to change antivirus applications, the first trick may be to get McAfee to uninstall properly. Computer came with McAfee VirusScan version 4 installed, in 2000. Files are still in system I guess. Is one of those things I didn't want reinstalled. Had bought version 5 or an update in 2000-01(on internet) I was a Net virgin back then, but found out 4 did not recognize 5's modules, or something like that. Lost: $29. Also purchased WinZip8.0(now have 9c update, hopefully) Question?: Why didn't I lose Winzip when I recovered my hard drive with the Recovery Disc--- I lost all the Windows updates. Did that in 2001, and got off Internet after 8 months of hell. Am back April 13, 2005! With a vengeance(I whispered that because the gremlins are still in there). When you "overinstall" Windows 98, you only overwrite system files (some of which *may* affect applications installations so that you have to reinstall, but not usually.) TaskMonitor Registry (Machine Run) C:\WINDOWS\taskmon.exe This is the one that creates all those logs in the APPLOG folder. If you decide you don't need Defrag to Optimize your files, then this one can be gotten rid of. SystemTray Registry (Machine Run) SysTray.Exe The Tray is that box at the far right of the TaskBar, where the clock resides. A few of the icons that get placed there, like the Volume Control, for example, need for SysTray to load. You should leave it enabled. Does this included the Mouse icon too!? No, it does not include the mouse icon. Like I said, what's called the "System Tray" is that whole area with small icons next to the clock. But the SYSTRAY application is only involved in a couple, Volume Control usually being the only one most users know about. VSOCheckTask Registry (Machine Run) "C:\PROGRA~1\MCAFEE.COM\VSO\MCMNHDLR.EXE" /checktask VirusScan Online Registry (Machine Run) "C:\PROGRA~1\MCAFEE.COM\VSO\mcvsshld.exe" More McAfee. Gnetmous Registry (Machine Run) C:\Program Files\COMPAQ\Scroll Mouse\gnetmous.exe Supports your mouse and may or may not be necessary, depending on whether you need extra customizations for the mouse beyond the basics (reprogrammable buttons, for instance.) Normally, I do not install such software, but sometimes it's necessary. The only way to know is to run for a while with it disabled and see if you notice any difference. The Mouse again! Motive SmartBridge Registry (Machine Run) C:\PROGRA~1\VERIZO~1\SMARTB~1\MotiveSB.exe Looks like a mechanism used by your ISP (Verizon, right?) that assists with their internet support. Not usually necessary. I'd delete this command, but I think perhaps you should leave it -- unless we discover that it truly is causing problems. Note that deleting a Startup command isn't the same thing as Uninstalling the program. Deleting the command just stops it from loading at Startup and from appearing as a disabled item in MSCONFIG (ideally, during normal running, MSCONFIG should be set to Normal Startup, with nothing disabled.) Verizon yes. CriticalUpdate Registry (Machine Run) c:\windows\SYSTEM\wucrtupd.exe -startup Leave this one unless we discover that it's causing problems. It's a Scheduled Tasks that checks every so often to see if you're connected to the internet, and if you are, it checks for new Critical Updates from Windows Updates. Now, what's weird about this one is that you don't have any Startup command for Task Scheduler. If Critical Updates Notification is to work, Task Scheduler needs to be running. Have recurring Task Scheduler notice box that reads "Some tasks did not execute at their scheduled times because the Task Scheduler Service was not running. You can view the list of missed tasks, and attempt to run them again, from within the Scheduled Tasks folder." I shut down the computer completely so that I might copy the message, but the message box did not reappear on bootup. Strange! I have icons in the System Tray for McAffee and the Task Scheduler. When the message box first started appearing figured it was because I pause TS and turn off the others when I defrag and install whatever. On checking and running the TS I found it wasn't so. The box is still popping up after nearly a month. I notice that it has only one exit choice, OK option. The X is grayed out. Also, a couple of months ago the McAfee icon indicated the program was off by turning black 'after' bootup. I had to keep remembering to turn it on before going on line. ( I forgot a couple of times). I check the schedules via the System Tray icon. The scheduled times seem to be occurring(when using the computer the pointer also blinks or freezes).The Tray icon seems to indicate that update downloads are happening. Later, because the box appeared again after bootup, I shut down on restart, the message still appeared. OK, well let's leave the TS issue until later, after you've cleaned up your system. It may very well be one of those apps that (I hope) you're going to uninstall -- like McAfee. OK, now to the list of procedures. But I'm going to post those to an entirely new thread (I'll email you when I do and tell you what the Subject line is.) I've got a lot of it done, but I want to review it all, first. However, have you worked your way through the articles I gave you? You really want to get those ones down, and make sure you're malware-free before we bother to continue. (That means you want to do all those things I suggest, and after you've run all the other anti-spyware and anti-virus scans, you need to finish up by posting a HijackThis log to the Aumha.net forums for analysis, specifically to this one. Aumha.org and Aumha.net are owned and run my MS-MVP Jim Eshelman, and staffed by lots of very good people, including many MVPs. -- Gary S. Terhune MS MVP Shell/User |
#40
|
|||
|
|||
system analysis
Not sure I should answer that one!
Don't worry, I send *lots* of people to that article, eg. I wrote both of those so I could stop having to write various versions of the same things twenty times a day. While the suggestions in the Security article are still current, other good apps have made it to "market" that I haven't included. Jim's pages cover those real well. -- Gary S. Terhune MS MVP Shell/User "winner5+63" wrote in message ... 2nd post: OKay I'm busted! I just read the whole Security article. Boy! You must really think I'm a hair ed. |
Thread Tools | |
Display Modes | |
|
|
Similar Threads | ||||
Thread | Thread Starter | Forum | Replies | Last Post |
System crashes | BD | General | 9 | January 3rd 05 12:57 AM |
@#$%! Toolbars | Darren Harris | General | 76 | October 10th 04 02:06 AM |
Compaq Presario PCs - Missing CD Drives or System Lock While Reading Media in CD-RW | Gerry | General | 0 | September 24th 04 06:01 PM |
master ide controller | annalee15 | Hardware | 14 | September 20th 04 10:44 PM |
virus removal from System Restore | Don | General | 2 | June 30th 04 03:54 PM |