Blocked Taskbar applications. Please help.

T

tjm999

New member
I previously posted this as lost toolbar applications - I meant lost "Taskbar" applications. Thanks for any help.

Hi,

I recently installed the previous version of SB, and very unfortunately in a rush, I unintentially blocked nearly all of my exe applications. Now many useful applications no longer work (such as battery monitor, wireless indicator, network connection indicator, sound icon, etc.,) and others that I'm probably not aware of yet.

I uninstalled SB (I realize that "I" am the real problem not SB) and have tried to turn these applications back on in the taskbar properties settings but they will not work. I also tried to restore before the install and that did not help. Originally all ".exe" applications were not recognized with a file association and the laptop had serious problems. Someone helped be get my laptop working again with registry editor but many of these "lesser" applications still don't work.

How can I "unblock" these applications? If SB can block these can SB be used to undo or correct these changes? Unfortunately in the rushed install and shutdown I did not have the registry backup that SB makes (which would have resolved this issue).

The laptop is running XP Pro, v2.

Thanks for the help. Tom
 
tjm999 said:
I previously posted this as lost toolbar applications - I meant lost "Taskbar" applications. Thanks for any help.

Hi,

I recently installed the previous version of SB, and very unfortunately in a rush, I unintentially blocked nearly all of my exe applications. Now many useful applications no longer work (such as battery monitor, wireless indicator, network connection indicator, sound icon, etc.,) and others that I'm probably not aware of yet.

I uninstalled SB (I realize that "I" am the real problem not SB) and have tried to turn these applications back on in the taskbar properties settings but they will not work. I also tried to restore before the install and that did not help. Originally all ".exe" applications were not recognized with a file association and the laptop had serious problems. Someone helped be get my laptop working again with registry editor but many of these "lesser" applications still don't work.

How can I "unblock" these applications? If SB can block these can SB be used to undo or correct these changes? Unfortunately in the rushed install and shutdown I did not have the registry backup that SB makes (which would have resolved this issue).

The laptop is running XP Pro, v2.

Thanks for the help. Tom
Click to expand...

same issue, my sound/audio went out also upon install, did you get sound working?
 
hi,

I think you are talking about spybot's teatimer.

Try disabling teatimer - then re-enabling it, here's how:

To disable teatimer: Go into Spybot > Mode > Advanced Mode > Tools > Resident. Under the heading "Resident protection status" uncheck the following:

- Resident "TeaTimer" (Protection of over-all system settings) active.

------------------------

To reactivate it: Go into Spybot > Mode > Advanced Mode > Tools > Resident. Under the heading "Resident protection status" check the following:
Resident "TeaTimer" (Protection of over-all system settings) active.


I think that should in effect 'reset' teatimer


hope that helps

honda :)
 
Almost there

Thanks for your reply.

I looked at Resident and it shows the applications that I blocked. Unfortunately checking the setting (closed and rebooted) and rechecking the Resident setting did not reset the TeaTimer blocks. I'll see what I can find in the program help but if you have additions ideas I appreciate your help.

Thank you. tjm
 
When blocking the applications,do you remember if you clicked 'Remember this decision'?

You could post your resident.log if you like.It might show what was going on a little better.Just go to the Resident section in Spybot,then rightclick in the window to the right and select Select All,then rightclick again and select Copy,then Paste it here.
 
Last edited:
Resident blocking

Zenobia said:
When blocking the applications,do you remember if you clicked 'Remember this decision'?

You could post your resident.log if you like.It might show what was going on a little better.Just go to the Resident section in Spybot,then rightclick in the window to the right and select Select All,then rightclick again and select Copy,then Paste it here.
Click to expand...

-----------------
Thanks. I don't recall but I assume I clicked remember this decision. Here's the resident list:

12/27/2007 3:20:52 PM Allowed (based on user decision) value "NvCplDaemon" (new data: "RUNDLL32.EXE C:\WINDOWS\system32\NvCpl.dll,NvStartup") added in System Startup global entry!
12/27/2007 3:21:31 PM Allowed (based on user decision) value "nwiz" (new data: "nwiz.exe /install") added in System Startup global entry!
12/27/2007 3:21:49 PM Denied (based on user decision) value "BluetoothAuthenticationAgent" (new data: "rundll32.exe bthprops.cpl,,BluetoothAuthenticationAgent") added in System Startup global entry!
12/27/2007 3:22:14 PM Denied (based on user decision) value "RTHDCPL" (new data: "RTHDCPL.EXE") added in System Startup global entry!
12/27/2007 3:22:21 PM Denied (based on user decision) value "Alcmtr" (new data: "ALCMTR.EXE") added in System Startup global entry!
12/27/2007 3:22:34 PM Allowed (based on user decision) value "AGRSMMSG" (new data: "AGRSMMSG.exe") added in System Startup global entry!
12/27/2007 3:22:41 PM Allowed (based on user decision) value "AveoKeySti" (new data: ""C:\Program Files\\AVEO\AVEO_UVC_FILTER_DRIVER_KIT\AveoSTI.exe"") added in System Startup global entry!
12/27/2007 3:23:34 PM Denied (based on user decision) value "MGSysCtrl" (new data: "C:\Program Files\System Control Manager\MGSysCtrl.exe") added in System Startup global entry!
12/27/2007 3:23:47 PM Allowed (based on user decision) value "NeroFilterCheck" (new data: "C:\Program Files\Common Files\Ahead\Lib\NeroCheck.exe") added in System Startup global entry!
12/27/2007 3:24:04 PM Denied (based on user decision) value "RemoteControl" (new data: ""C:\Program Files\CyberLink\PowerDVD\PDVDServ.exe"") added in System Startup global entry!
12/27/2007 3:24:17 PM Denied (based on user decision) value "LanguageShortcut" (new data: ""C:\Program Files\CyberLink\PowerDVD\Language\Language.exe"") added in System Startup global entry!
12/27/2007 3:24:26 PM Allowed (based on user decision) value "IntelZeroConfig" (new data: ""C:\Program Files\Intel\Wireless\bin\ZCfgSvc.exe"") added in System Startup global entry!
12/27/2007 3:24:41 PM Denied (based on user decision) value "IntelWireless" (new data: ""C:\Program Files\Intel\Wireless\Bin\ifrmewrk.exe" /tf Intel PROSet/Wireless") added in System Startup global entry!
12/27/2007 3:24:45 PM Allowed (based on user decision) value "DiskeeperSystray" (new data: ""C:\Program Files\Executive Software\Diskeeper\DkIcon.exe"") added in System Startup global entry!
12/27/2007 3:24:48 PM Allowed (based on user decision) value "Adobe Reader Speed Launcher" (new data: ""C:\Program Files\Adobe\Reader 8.0\Reader\Reader_sl.exe"") added in System Startup global entry!
12/27/2007 3:24:51 PM Allowed (based on user decision) value "SunJavaUpdateSched" (new data: ""C:\Program Files\Java\jre1.6.0_03\bin\jusched.exe"") added in System Startup global entry!
12/27/2007 3:24:53 PM Allowed (based on user decision) value "QuickTime Task" (new data: ""C:\Program Files\QuickTime\qttask.exe" -atboottime") added in System Startup global entry!
12/27/2007 3:24:57 PM Allowed (based on user decision) value "ccApp" (new data: ""C:\Program Files\Common Files\Symantec Shared\ccApp.exe"") added in System Startup global entry!
12/27/2007 3:25:03 PM Allowed (based on user decision) value "vptray" (new data: "C:\PROGRA~1\SYMANT~1\VPTray.exe") added in System Startup global entry!
12/27/2007 3:25:07 PM Denied (based on user decision) value "PinnacleDriverCheck" (new data: "C:\WINDOWS\system32\\PSDrvCheck.exe") added in System Startup global entry!
12/27/2007 3:25:11 PM Denied (based on user decision) value "{EF99BD32-C1FB-11D2-892F-0090271D4F88}" (new data: "hex:00") added in Global browser toolbar!
12/27/2007 3:25:13 PM Denied (based on user decision) value "" (new data: ""%1" %*") added in BAT Extension handler!
12/27/2007 3:25:14 PM Denied (based on user decision) value "" (new data: ""%1" %*") added in COM Extension handler!
12/27/2007 3:25:15 PM Denied (based on user decision) value "" (new data: ""%1" %*") added in EXE Extension handler!
12/27/2007 3:25:15 PM Denied (based on user decision) value "" (new data: ""%1" %*") added in PIF Extension handler!
12/27/2007 3:25:17 PM Denied (based on user decision) value "" (new data: ""%1" /S") added in SCR Extension handler!
12/27/2007 3:25:19 PM Denied (based on user decision) value "" (new data: "regedit.exe "%1"") added in REG Extension handler!
12/27/2007 3:25:20 PM Denied (based on user decision) value "" (new data: ""%1" %*") added in CMD Extension handler!
12/27/2007 3:25:21 PM Denied (based on user decision) value "PostBootReminder" (new data: "{7849596a-48ea-486e-8937-a2a3009f31a9}") added in Shell services!
12/27/2007 3:25:21 PM Denied (based on user decision) value "CDBurn" (new data: "{fbeb8a05-beee-4442-804e-409d6c4515e9}") added in Shell services!
12/27/2007 3:25:22 PM Denied (based on user decision) value "WebCheck" (new data: "{E6FB5E20-DE35-11CF-9C87-00AA005127ED}") added in Shell services!
12/27/2007 3:25:30 PM Denied (based on user decision) value "SysTray" (new data: "{35CEC8A3-2BE6-11D2-8773-92E220524153}") added in Shell services!
1/2/2008 3:11:02 PM Allowed (based on user decision) value "" (new data: ""%1" %*") added in EXE Extension handler!
1/2/2008 3:11:07 PM Allowed (based on user decision) value "" (new data: "regedit.exe "%1"") added in REG Extension handler!
3/4/2008 9:00:05 PM Allowed (based on authenticode whitelist) value "SpybotSD TeaTimer" (new data: "C:\Program Files\Spybot - Search & Destroy\TeaTimer.exe") added in System Startup user entry!
 
Now how to unblock the items shown in Resident

Now I can see what I blocked in Resident (above). However how can I unblock these items? These do not show up in the Black & White List. Only recent changes (today) show up in the list. I am logged on with admin rights.

Thanks. tjm
 
Wow.Looks like December 27th was a really bad day. :spider:
Teatimer should not automatically stop the applications that are normally in your taskbar from being added to startup if they are not in your black & white list.
Which applications have you been trying to get back into your taskbar?
 
Yeah that was instalation day. I'm trying to get back everything I blocked on that list (all that were denyed).

Ideas? Thanks. tjm


Zenobia said:
Wow.Looks like December 27th was a really bad day. :spider:
Teatimer should not automatically stop the applications that are normally in your taskbar from being added to startup if they are not in your black & white list.
Which applications have you been trying to get back into your taskbar?
Click to expand...
 
The apps you denied running on startup,they will run if you manually run them by doubleclicking them?

About the only thing I can suggest,is to go to the programs you denied running on startup,open them,and look in the programs options and/or settings for the option to run them on startup,then Allow that change with Teatimer.What those programs are may be difficult for you to track down from your teatimer log,and unfortunately I don't have a lot of the programs you denied,so I'm not familiar with them.
Looking up the exe's may help to discover what program some are associated with,and make a startup entry,if that is possible.For example:
12/27/2007 3:22:14 PM Denied (based on user decision) value "RTHDCPL" (new data: "RTHDCPL.EXE") added in System Startup global entry!
Click to expand...
http://www.castlecops.com/s11944-RTHDCPL.html
That shows that's associated with Realtek HD Audio Sound Effect Manager,so you could look in Realtek to see if there is an option to run Realtek HD Audio Sound Effect Manager on startup.

And just to be sure we are on the same page,since I missed something in your post earlier.
I uninstalled SB (I realize that "I" am the real problem not SB) and have tried to turn these applications back on in the taskbar properties settings but they will not work.
Click to expand...
Is it that the apps you denied running on startup do not run on startup,and therefore don't appear in the notification area(system tray)?
Or do the apps run on startup,but they will not appear in the notification area(system tray)?That can happen sometimes.

Could you post your startup log from Spybot?Open Spybot,go to Advanced Mode,click tools,then System Startup.Click Export,then you could choose to Save the startup log to somewhere like your desktop,then copy and paste it here.
 
Zenobia,

Thank you for your help. Your question - the aps do not run on startup. They will run if I restart them manually, that has to be done each time i logon. The aps are some basic things like a sound app, but also important applications like a battery monitor.

Here is the SB startup log (thanks again):


--- Spybot - Search & Destroy version: 1.5.2 (build: 20080128) ---

2008-01-28 blindman.exe (1.0.0.7)
2008-01-28 SDDelFile.exe (1.0.2.4)
2008-01-28 SDMain.exe (1.0.0.5)
2007-10-07 SDShred.exe (1.0.1.2)
2008-01-28 SDUpdate.exe (1.0.8.8)
2008-01-28 SDWinSec.exe (1.0.0.11)
2008-01-28 SpybotSD.exe (1.5.2.20)
2008-01-28 TeaTimer.exe (1.5.2.16)
2008-03-04 unins000.exe (51.49.0.0)
2008-01-28 Update.exe (1.4.0.6)
2008-01-28 advcheck.dll (1.5.4.5)
2007-04-02 aports.dll (2.1.0.0)
2007-11-17 DelZip179.dll (1.79.7.4)
2008-01-28 SDFiles.dll (1.5.1.19)
2008-01-28 SDHelper.dll (1.5.0.11)
2008-01-28 Tools.dll (2.1.3.3)
2008-03-05 Includes\Cookies.sbi
2007-12-26 Includes\Dialer.sbi
2008-03-05 Includes\DialerC.sbi
2008-03-05 Includes\HeavyDuty.sbi
2008-03-05 Includes\Hijackers.sbi
2008-03-05 Includes\HijackersC.sbi
2008-02-27 Includes\Keyloggers.sbi
2008-03-05 Includes\KeyloggersC.sbi
2004-11-29 Includes\LSP.sbi
2008-02-27 Includes\Malware.sbi
2008-03-05 Includes\MalwareC.sbi
2008-02-20 Includes\PUPS.sbi
2008-03-05 Includes\PUPSC.sbi
2008-03-05 Includes\Revision.sbi
2008-01-09 Includes\Security.sbi
2008-03-05 Includes\SecurityC.sbi
2008-02-20 Includes\Spybots.sbi
2008-03-05 Includes\SpybotsC.sbi
2007-11-06 Includes\Tracks.uti
2008-02-27 Includes\Trojans.sbi
2008-03-05 Includes\TrojansC.sbi
2007-12-24 Plugins\TCPIPAddress.dll

Located: HK_LM:Run, Adobe Reader Speed Launcher
command: "C:\Program Files\Adobe\Reader 8.0\Reader\Reader_sl.exe"
file: C:\Program Files\Adobe\Reader 8.0\Reader\Reader_sl.exe
size: 39792
MD5: E28D00EC675F5F5A5A0555E7A4523A6E

Located: HK_LM:Run, AGRSMMSG
command: AGRSMMSG.exe
file: C:\WINDOWS\AGRSMMSG.exe
size: 89541
MD5: FFF52BD1733E2CEBA0CBBC5DA4546427

Located: HK_LM:Run, AveoKeySti
command: "C:\Program Files\\AVEO\AVEO_UVC_FILTER_DRIVER_KIT\AveoSTI.exe"
file:
size: 0
MD5: D41D8CD98F00B204E9800998ECF8427E
Warning: if the file is actually larger than 0 bytes,
the checksum could not be properly calculated!

Located: HK_LM:Run, BatteryBar
command: c:\progra~1\batter~1\batter~1.exe
file: c:\progra~1\batter~1\batter~1.exe
size: 591872
MD5: 6FB3D1C81DDD6093F8AB216FBECBDEA7

Located: HK_LM:Run, ccApp
command: "C:\Program Files\Common Files\Symantec Shared\ccApp.exe"
file: C:\Program Files\Common Files\Symantec Shared\ccApp.exe
size: 52840
MD5: AE0F500EA5E01AFEF0BB9051969804B2

Located: HK_LM:Run, DiskeeperSystray
command: "C:\Program Files\Executive Software\Diskeeper\DkIcon.exe"
file: C:\Program Files\Executive Software\Diskeeper\DkIcon.exe
size: 176216
MD5: 8D8770C0FA1A0C981C19190E4F58B2E5

Located: HK_LM:Run, IntelZeroConfig
command: "C:\Program Files\Intel\Wireless\bin\ZCfgSvc.exe"
file: C:\Program Files\Intel\Wireless\bin\ZCfgSvc.exe
size: 819200
MD5: 0E81905F53B1A2A41558519CDCDC9C61

Located: HK_LM:Run, NeroFilterCheck
command: C:\Program Files\Common Files\Ahead\Lib\NeroCheck.exe
file: C:\Program Files\Common Files\Ahead\Lib\NeroCheck.exe
size: 161328
MD5: 9306F50AB4F21E4782E41EA8C43F5350

Located: HK_LM:Run, NvCplDaemon
command: RUNDLL32.EXE C:\WINDOWS\system32\NvCpl.dll,NvStartup
file:
size: 0
MD5: D41D8CD98F00B204E9800998ECF8427E
Warning: if the file is actually larger than 0 bytes,
the checksum could not be properly calculated!

Located: HK_LM:Run, nwiz
command: nwiz.exe /install
file: C:\WINDOWS\system32\nwiz.exe
size: 1626112
MD5: A076032A29BE8C9591877A752EA3F705

Located: HK_LM:Run, QuickTime Task
command: "C:\Program Files\QuickTime\qttask.exe" -atboottime
file: C:\Program Files\QuickTime\qttask.exe
size: 286720
MD5: 49CCFBE5D5225B9D3CC78C09DEE147D0

Located: HK_LM:Run, SunJavaUpdateSched
command: "C:\Program Files\Java\jre1.6.0_05\bin\jusched.exe"
file: C:\Program Files\Java\jre1.6.0_05\bin\jusched.exe
size: 144784
MD5: 836DC47E6CAD975304D1D3EB2F516A1C

Located: HK_LM:Run, vptray
command: C:\PROGRA~1\SYMANT~1\VPTray.exe
file: C:\PROGRA~1\SYMANT~1\VPTray.exe
size: 125632
MD5: 4279E452E99A4F044CE37F03D57FA612

Located: HK_CU:Run, BgMonitor_{79662E04-7C6C-4d9f-84C7-88D8A56B10AA}
where: S-1-5-21-3697291689-1161744426-439199626-57138...
command: "C:\Program Files\Common Files\Ahead\Lib\NMBgMonitor.exe"
file: C:\Program Files\Common Files\Ahead\Lib\NMBgMonitor.exe
size: 149040
MD5: A3C330F2731F52BE593FD7DB3617C50E

Located: HK_CU:Run, ctfmon.exe
where: S-1-5-21-3697291689-1161744426-439199626-57138...
command: C:\WINDOWS\system32\ctfmon.exe
file: C:\WINDOWS\system32\ctfmon.exe
size: 15360
MD5: 24232996A38C0B0CF151C2140AE29FC8

Located: HK_CU:Run, SpybotSD TeaTimer
where: S-1-5-21-3697291689-1161744426-439199626-57138...
command: C:\Program Files\Spybot - Search & Destroy\TeaTimer.exe
file: C:\Program Files\Spybot - Search & Destroy\TeaTimer.exe
size: 2097488
MD5: A9A5DB6AC3721BE698B996913693D73F

Located: Startup (common), aveosti.exe.lnk
where: C:\Documents and Settings\All Users\Start Menu\Programs\Startup...
command: C:\Program Files\AVEO\AVEO UVC Filter Driver Kit\AveoSTI.exe
file: C:\Program Files\AVEO\AVEO UVC Filter Driver Kit\AveoSTI.exe
size: 28672
MD5: 3FE4F1DA040B107B8348D387D17725A6

Located: Startup (common), Intel PROSet Wireless.lnk
where: C:\Documents and Settings\All Users\Start Menu\Programs\Startup...
command: C:\Program Files\AVEO\AVEO UVC Filter Driver Kit\AveoSTI.exe
file: C:\Program Files\AVEO\AVEO UVC Filter Driver Kit\AveoSTI.exe
size: 28672
MD5: 3FE4F1DA040B107B8348D387D17725A6

Located: Startup (common), VPN Client.lnk
where: C:\Documents and Settings\All Users\Start Menu\Programs\Startup...
command: C:\WINDOWS\Installer\{14FCFE7C-AB86-428A-9D2E-BFB6F5A7AA6E}\Icon3E5562ED7.ico
file: C:\WINDOWS\Installer\{14FCFE7C-AB86-428A-9D2E-BFB6F5A7AA6E}\Icon3E5562ED7.ico
size: 0
MD5: D41D8CD98F00B204E9800998ECF8427E
Warning: if the file is actually larger than 0 bytes,
the checksum could not be properly calculated!

Located: WinLogon, crypt32chain
command: crypt32.dll
file: crypt32.dll
size: 0
MD5: D41D8CD98F00B204E9800998ECF8427E
Warning: if the file is actually larger than 0 bytes,
the checksum could not be properly calculated!

Located: WinLogon, cryptnet
command: cryptnet.dll
file: cryptnet.dll
size: 0
MD5: D41D8CD98F00B204E9800998ECF8427E
Warning: if the file is actually larger than 0 bytes,
the checksum could not be properly calculated!

Located: WinLogon, cscdll
command: cscdll.dll
file: cscdll.dll
size: 0
MD5: D41D8CD98F00B204E9800998ECF8427E
Warning: if the file is actually larger than 0 bytes,
the checksum could not be properly calculated!

Located: WinLogon, NavLogon
command: C:\WINDOWS\system32\NavLogon.dll
file: C:\WINDOWS\system32\NavLogon.dll
size: 0
MD5: D41D8CD98F00B204E9800998ECF8427E
Warning: if the file is actually larger than 0 bytes,
the checksum could not be properly calculated!

Located: WinLogon, ScCertProp
command: wlnotify.dll
file: wlnotify.dll
size: 0
MD5: D41D8CD98F00B204E9800998ECF8427E
Warning: if the file is actually larger than 0 bytes,
the checksum could not be properly calculated!

Located: WinLogon, Schedule
command: wlnotify.dll
file: wlnotify.dll
size: 0
MD5: D41D8CD98F00B204E9800998ECF8427E
Warning: if the file is actually larger than 0 bytes,
the checksum could not be properly calculated!

Located: WinLogon, sclgntfy
command: sclgntfy.dll
file: sclgntfy.dll
size: 0
MD5: D41D8CD98F00B204E9800998ECF8427E
Warning: if the file is actually larger than 0 bytes,
the checksum could not be properly calculated!

Located: WinLogon, SensLogn
command: WlNotify.dll
file: WlNotify.dll
size: 0
MD5: D41D8CD98F00B204E9800998ECF8427E
Warning: if the file is actually larger than 0 bytes,
the checksum could not be properly calculated!

Located: WinLogon, termsrv
command: wlnotify.dll
file: wlnotify.dll
size: 0
MD5: D41D8CD98F00B204E9800998ECF8427E
Warning: if the file is actually larger than 0 bytes,
the checksum could not be properly calculated!

Located: WinLogon, wlballoon
command: wlnotify.dll
file: wlnotify.dll
size: 0
MD5: D41D8CD98F00B204E9800998ECF8427E
Warning: if the file is actually larger than 0 bytes,
the checksum could not be properly calculated!




Zenobia said:
The apps you denied running on startup,they will run if you manually run them by doubleclicking them?

About the only thing I can suggest,is to go to the programs you denied running on startup,open them,and look in the programs options and/or settings for the option to run them on startup,then Allow that change with Teatimer.What those programs are may be difficult for you to track down from your teatimer log,and unfortunately I don't have a lot of the programs you denied,so I'm not familiar with them.
Looking up the exe's may help to discover what program some are associated with,and make a startup entry,if that is possible.For example:

http://www.castlecops.com/s11944-RTHDCPL.html
That shows that's associated with Realtek HD Audio Sound Effect Manager,so you could look in Realtek to see if there is an option to run Realtek HD Audio Sound Effect Manager on startup.

And just to be sure we are on the same page,since I missed something in your post earlier.

Is it that the apps you denied running on startup do not run on startup,and therefore don't appear in the notification area(system tray)?
Or do the apps run on startup,but they will not appear in the notification area(system tray)?That can happen sometimes.

Could you post your startup log from Spybot?Open Spybot,go to Advanced Mode,click tools,then System Startup.Click Export,then you could choose to Save the startup log to somewhere like your desktop,then copy and paste it here.
Click to expand...
 
Was 12/27/2007 the day you installed Spybot?What caused all the prompts with teatimer?Could you describe what happened that day,and what you were doing?

Here are just the startup entries you denied with Teatimer from your resident.log,with a link to their description.

12/27/2007 3:21:49 PM Denied (based on user decision) value "BluetoothAuthenticationAgent" (new data: "rundll32.exe bthprops.cpl,,BluetoothAuthenticationAgent") added in System Startup global entry
http://www.castlecops.com/s7030-BluetoothAuthenticationAgent.html

12/27/2007 3:22:14 PM Denied (based on user decision) value "RTHDCPL" (new data: "RTHDCPL.EXE") added in System Startup global entry!
http://www.castlecops.com/s11944-RTHDCPL.html

12/27/2007 3:22:21 PM Denied (based on user decision) value "Alcmtr" (new data: "ALCMTR.EXE") added in System Startup global entry!
http://www.castlecops.com/s5306-alcmtr.html

12/27/2007 3:23:34 PM Denied (based on user decision) value "MGSysCtrl" (new data: "C:\Program Files\System Control Manager\MGSysCtrl.exe") added in System Startup global entry!
http://www.greatis.com/appdata/a/m/mgsysctrl.exe.htm

12/27/2007 3:24:04 PM Denied (based on user decision) value "RemoteControl" (new data: ""C:\Program Files\CyberLink\PowerDVD\PDVDServ.exe"") added in System Startup global entry!
http://www.castlecops.com/s3049-RemoteControl.html

12/27/2007 3:24:17 PM Denied (based on user decision) value "LanguageShortcut" (new data: ""C:\Program Files\CyberLink\PowerDVD\Language\Language.exe"") added in System Startup global entry!
http://www.castlecops.com/s15980-LanguageShortcut.html

12/27/2007 3:24:41 PM Denied (based on user decision) value "IntelWireless" (new data: ""C:\Program Files\Intel\Wireless\Bin\ifrmewrk.exe" /tf Intel PROSet/Wireless") added in System Startup global entry!
http://www.castlecops.com/s8882-IntelWireless.html

12/27/2007 3:25:07 PM Denied (based on user decision) value "PinnacleDriverCheck" (new data: "C:\WINDOWS\system32\\PSDrvCheck.exe") added in System Startup global entry!
http://www.castlecops.com/s2720-PinnacleDriverCheck.html

Some have links to the actual website for the product included in the startup list description.Maybe if you look at the descriptions it will ring some bells,if you aren't sure what they are.It could help you to get some to run on startup by going to the apps and looking in options or settings to see if there is anything there asking if you would like to run such and such on startup.This won't work for all,but it might help with some.

You had troubles with .exe files,were you also having troubles opening .bat files and the like?->
12/27/2007 3:25:13 PM Denied (based on user decision) value "" (new data: ""%1" %*") added in BAT Extension handler!
12/27/2007 3:25:14 PM Denied (based on user decision) value "" (new data: ""%1" %*") added in COM Extension handler!
12/27/2007 3:25:15 PM Denied (based on user decision) value "" (new data: ""%1" %*") added in EXE Extension handler!
12/27/2007 3:25:15 PM Denied (based on user decision) value "" (new data: ""%1" %*") added in PIF Extension handler!
12/27/2007 3:25:17 PM Denied (based on user decision) value "" (new data: ""%1" /S") added in SCR Extension handler!
12/27/2007 3:25:19 PM Denied (based on user decision) value "" (new data: "regedit.exe "%1"") added in REG Extension handler!
12/27/20
07 3:25:20 PM Denied (based on user decision) value "" (new data: ""%1" %*") added in CMD Extension handler!

(I'm just ignoring these for the moment):
12/27/2007 3:25:21 PM Denied (based on user decision) value "PostBootReminder" (new data: "{7849596a-48ea-486e-8937-a2a3009f31a9}") added in Shell services!
12/27/2007 3:25:21 PM Denied (based on user decision) value "CDBurn" (new data: "{fbeb8a05-beee-4442-804e-409d6c4515e9}") added in Shell services!
12/27/2007 3:25:22 PM Denied (based on user decision) value "WebCheck" (new data: "{E6FB5E20-DE35-11CF-9C87-00AA005127ED}") added in Shell services!
12/27/2007 3:25:30 PM Denied (based on user decision) value "SysTray" (new data: "{35CEC8A3-2BE6-11D2-8773-92E220524153}") added in Shell services!
 
Yes that date (and time) was when I installed SB. I was sitting in an airport in a rush thought i should deny them as they poped up on them install. Dumb!

Anyway, I can't figure out a way to allow them on system start. I can run the apps and turn them on but can't find a start up setting.

Thanks. tjm
 
No,not dumb at all.From your resident.log,looks like you were getting pop-ups from teatimer like crazy,sometimes in less than a minute,and it must have been really hectic,especially in a rush. :)

There is an option in Spybot's startup section to Insert startup entries.Looking at your resident.log,it looks like there is enough info in it to allow me to give you the info to re-add the startup entries you denied back into startup properly.Would you like to try that?
 
Yes!

Yes I'd like to try it! Thanks. tjm

Zenobia said:
No,not dumb at all.From your resident.log,looks like you were getting pop-ups from teatimer like crazy,sometimes in less than a minute,and it must have been really hectic,especially in a rush. :)

There is an option in Spybot's startup section to Insert startup entries.Looking at your resident.log,it looks like there is enough info in it to allow me to give you the info to re-add the startup entries you denied back into startup properly.Would you like to try that?
Click to expand...
 
Okay.I am going to skip two of your startups,until I get a chance to look at them more and see if they'll work,we can just do that later on.
If you're not sure about anything in my next directions,let me know.If you or I make any mistakes,we can easily edit them later.You can leave this page open so you can copy and paste where I indicated.

Please open Spybot,click Mode,then Advanced Mode,then Tools,then System Startup.
Click Insert,and a box should popup that looks like this:
http://img201.imageshack.us/img201/1214/insert2zb8.jpg

Under:Valid for...(root key)
Click create for all users(HKEY_LOCAL_MACHINE)
Under:Type of program(key)
Leave the tick mark at:Create a link to a normal program(Run)
Then,beside where you see Name of link,please copy and paste this into there:BluetoothAuthenticationAgent
Beside where you see Linked file,please copy and paste this into there:rundll32.exe bthprops.cpl,,BluetoothAuthenticationAgent
Click OK.

Next one:
Under:Valid for...(root key)
Click create for all users(HKEY_LOCAL_MACHINE)
Under:Type of program(key)
Leave the tick mark at:Create a link to a normal program(Run)
Beside Name of link,copy and paste in:MGSysCtrl
Beside Linked File,copy and paste in:C:\Program Files\System Control Manager\MGSysCtrl.exe
Click OK.

Under:Valid for...(root key)
Click create for all users(HKEY_LOCAL_MACHINE)
Under:Type of program(key)
Leave the tick mark at:Create a link to a normal program(Run)
Beside Name of link,copy and paste in:RemoteControl
Beside Linked File,copy and paste in:"C:\Program Files\CyberLink\PowerDVD\PDVDServ.exe"
Click OK.

Under:Valid for...(root key)
Click create for all users(HKEY_LOCAL_MACHINE)
Under:Type of program(key)
Leave the tick mark at:Create a link to a normal program(Run)
Beside Name of link,copy and paste in:LanguageShortcut
Beside Linked File,copy and paste:"C:\Program Files\CyberLink\PowerDVD\Language\Language.exe"
Click OK.

Under:Valid for...(root key)
Click create for all users(HKEY_LOCAL_MACHINE)
Under:Type of program(key)
Leave the tick mark at:Create a link to a normal program(Run)
Beside Name of link,copy and paste in:IntelWireless
Beside Linked File,copy and paste in the text in the code box:
Code: 
"C:\Program Files\Intel\Wireless\Bin\ifrmewrk.exe" /tf Intel PROSet/Wireless
Click OK.

Under:Valid for...(root key)
Click create for all users(HKEY_LOCAL_MACHINE)
Under:Type of program(key)
Leave the tick mark at:Create a link to a normal program(Run)
Beside Name of link,copy and paste in:PinnacleDriverCheck
Beside Linked File,copy and paste in:C:\WINDOWS\system32\\PSDrvCheck.exe
Click OK.

Once you're done the above,could you please Export and post your startup list once again,so I can check that everything went in proper?
 
Last edited:
Thanks! Entered all. Will reboot and see if these apps work.

Here's the export:
-----------------------------------------------------


--- Spybot - Search & Destroy version: 1.5.2 (build: 20080128) ---

2008-01-28 blindman.exe (1.0.0.7)
2008-01-28 SDDelFile.exe (1.0.2.4)
2008-01-28 SDMain.exe (1.0.0.5)
2007-10-07 SDShred.exe (1.0.1.2)
2008-01-28 SDUpdate.exe (1.0.8.8)
2008-01-28 SDWinSec.exe (1.0.0.11)
2008-01-28 SpybotSD.exe (1.5.2.20)
2008-01-28 TeaTimer.exe (1.5.2.16)
2008-03-04 unins000.exe (51.49.0.0)
2008-01-28 Update.exe (1.4.0.6)
2008-01-28 advcheck.dll (1.5.4.5)
2007-04-02 aports.dll (2.1.0.0)
2007-11-17 DelZip179.dll (1.79.7.4)
2008-01-28 SDFiles.dll (1.5.1.19)
2008-01-28 SDHelper.dll (1.5.0.11)
2008-01-28 Tools.dll (2.1.3.3)
2008-03-05 Includes\Cookies.sbi
2007-12-26 Includes\Dialer.sbi
2008-03-05 Includes\DialerC.sbi
2008-03-05 Includes\HeavyDuty.sbi
2008-03-05 Includes\Hijackers.sbi
2008-03-05 Includes\HijackersC.sbi
2008-02-27 Includes\Keyloggers.sbi
2008-03-05 Includes\KeyloggersC.sbi
2004-11-29 Includes\LSP.sbi
2008-02-27 Includes\Malware.sbi
2008-03-05 Includes\MalwareC.sbi
2008-02-20 Includes\PUPS.sbi
2008-03-05 Includes\PUPSC.sbi
2008-03-05 Includes\Revision.sbi
2008-01-09 Includes\Security.sbi
2008-03-05 Includes\SecurityC.sbi
2008-02-20 Includes\Spybots.sbi
2008-03-05 Includes\SpybotsC.sbi
2007-11-06 Includes\Tracks.uti
2008-02-27 Includes\Trojans.sbi
2008-03-05 Includes\TrojansC.sbi
2007-12-24 Plugins\TCPIPAddress.dll

Located: HK_LM:Run, Adobe Reader Speed Launcher
command: "C:\Program Files\Adobe\Reader 8.0\Reader\Reader_sl.exe"
file: C:\Program Files\Adobe\Reader 8.0\Reader\Reader_sl.exe
size: 39792
MD5: E28D00EC675F5F5A5A0555E7A4523A6E

Located: HK_LM:Run, AGRSMMSG
command: AGRSMMSG.exe
file: C:\WINDOWS\AGRSMMSG.exe
size: 89541
MD5: FFF52BD1733E2CEBA0CBBC5DA4546427

Located: HK_LM:Run, AveoKeySti
command: "C:\Program Files\\AVEO\AVEO_UVC_FILTER_DRIVER_KIT\AveoSTI.exe"
file:
size: 0
MD5: D41D8CD98F00B204E9800998ECF8427E
Warning: if the file is actually larger than 0 bytes,
the checksum could not be properly calculated!

Located: HK_LM:Run, BatteryBar
command: c:\progra~1\batter~1\batter~1.exe
file: c:\progra~1\batter~1\batter~1.exe
size: 591872
MD5: 6FB3D1C81DDD6093F8AB216FBECBDEA7

Located: HK_LM:Run, ccApp
command: "C:\Program Files\Common Files\Symantec Shared\ccApp.exe"
file: C:\Program Files\Common Files\Symantec Shared\ccApp.exe
size: 52840
MD5: AE0F500EA5E01AFEF0BB9051969804B2

Located: HK_LM:Run, DiskeeperSystray
command: "C:\Program Files\Executive Software\Diskeeper\DkIcon.exe"
file: C:\Program Files\Executive Software\Diskeeper\DkIcon.exe
size: 176216
MD5: 8D8770C0FA1A0C981C19190E4F58B2E5

Located: HK_LM:Run, IntelZeroConfig
command: "C:\Program Files\Intel\Wireless\bin\ZCfgSvc.exe"
file: C:\Program Files\Intel\Wireless\bin\ZCfgSvc.exe
size: 819200
MD5: 0E81905F53B1A2A41558519CDCDC9C61

Located: HK_LM:Run, NeroFilterCheck
command: C:\Program Files\Common Files\Ahead\Lib\NeroCheck.exe
file: C:\Program Files\Common Files\Ahead\Lib\NeroCheck.exe
size: 161328
MD5: 9306F50AB4F21E4782E41EA8C43F5350

Located: HK_LM:Run, NvCplDaemon
command: RUNDLL32.EXE C:\WINDOWS\system32\NvCpl.dll,NvStartup
file:
size: 0
MD5: D41D8CD98F00B204E9800998ECF8427E
Warning: if the file is actually larger than 0 bytes,
the checksum could not be properly calculated!

Located: HK_LM:Run, nwiz
command: nwiz.exe /install
file: C:\WINDOWS\system32\nwiz.exe
size: 1626112
MD5: A076032A29BE8C9591877A752EA3F705

Located: HK_LM:Run, QuickTime Task
command: "C:\Program Files\QuickTime\qttask.exe" -atboottime
file: C:\Program Files\QuickTime\qttask.exe
size: 286720
MD5: 49CCFBE5D5225B9D3CC78C09DEE147D0

Located: HK_LM:Run, SunJavaUpdateSched
command: "C:\Program Files\Java\jre1.6.0_05\bin\jusched.exe"
file: C:\Program Files\Java\jre1.6.0_05\bin\jusched.exe
size: 144784
MD5: 836DC47E6CAD975304D1D3EB2F516A1C

Located: HK_LM:Run, vptray
command: C:\PROGRA~1\SYMANT~1\VPTray.exe
file: C:\PROGRA~1\SYMANT~1\VPTray.exe
size: 125632
MD5: 4279E452E99A4F044CE37F03D57FA612

Located: HK_CU:Run, BgMonitor_{79662E04-7C6C-4d9f-84C7-88D8A56B10AA}
where: S-1-5-21-3697291689-1161744426-439199626-57138...
command: "C:\Program Files\Common Files\Ahead\Lib\NMBgMonitor.exe"
file: C:\Program Files\Common Files\Ahead\Lib\NMBgMonitor.exe
size: 149040
MD5: A3C330F2731F52BE593FD7DB3617C50E

Located: HK_CU:Run, ctfmon.exe
where: S-1-5-21-3697291689-1161744426-439199626-57138...
command: C:\WINDOWS\system32\ctfmon.exe
file: C:\WINDOWS\system32\ctfmon.exe
size: 15360
MD5: 24232996A38C0B0CF151C2140AE29FC8

Located: HK_CU:Run, SpybotSD TeaTimer
where: S-1-5-21-3697291689-1161744426-439199626-57138...
command: C:\Program Files\Spybot - Search & Destroy\TeaTimer.exe
file: C:\Program Files\Spybot - Search & Destroy\TeaTimer.exe
size: 2097488
MD5: A9A5DB6AC3721BE698B996913693D73F

Located: Startup (common), aveosti.exe.lnk
where: C:\Documents and Settings\All Users\Start Menu\Programs\Startup...
command: C:\Program Files\AVEO\AVEO UVC Filter Driver Kit\AveoSTI.exe
file: C:\Program Files\AVEO\AVEO UVC Filter Driver Kit\AveoSTI.exe
size: 28672
MD5: 3FE4F1DA040B107B8348D387D17725A6

Located: Startup (common), Intel PROSet Wireless.lnk
where: C:\Documents and Settings\All Users\Start Menu\Programs\Startup...
command: C:\Program Files\AVEO\AVEO UVC Filter Driver Kit\AveoSTI.exe
file: C:\Program Files\AVEO\AVEO UVC Filter Driver Kit\AveoSTI.exe
size: 28672
MD5: 3FE4F1DA040B107B8348D387D17725A6

Located: Startup (common), VPN Client.lnk
where: C:\Documents and Settings\All Users\Start Menu\Programs\Startup...
command: C:\WINDOWS\Installer\{14FCFE7C-AB86-428A-9D2E-BFB6F5A7AA6E}\Icon3E5562ED7.ico
file: C:\WINDOWS\Installer\{14FCFE7C-AB86-428A-9D2E-BFB6F5A7AA6E}\Icon3E5562ED7.ico
size: 0
MD5: D41D8CD98F00B204E9800998ECF8427E
Warning: if the file is actually larger than 0 bytes,
the checksum could not be properly calculated!

Located: WinLogon, crypt32chain
command: crypt32.dll
file: crypt32.dll
size: 0
MD5: D41D8CD98F00B204E9800998ECF8427E
Warning: if the file is actually larger than 0 bytes,
the checksum could not be properly calculated!

Located: WinLogon, cryptnet
command: cryptnet.dll
file: cryptnet.dll
size: 0
MD5: D41D8CD98F00B204E9800998ECF8427E
Warning: if the file is actually larger than 0 bytes,
the checksum could not be properly calculated!

Located: WinLogon, cscdll
command: cscdll.dll
file: cscdll.dll
size: 0
MD5: D41D8CD98F00B204E9800998ECF8427E
Warning: if the file is actually larger than 0 bytes,
the checksum could not be properly calculated!

Located: WinLogon, NavLogon
command: C:\WINDOWS\system32\NavLogon.dll
file: C:\WINDOWS\system32\NavLogon.dll
size: 0
MD5: D41D8CD98F00B204E9800998ECF8427E
Warning: if the file is actually larger than 0 bytes,
the checksum could not be properly calculated!

Located: WinLogon, ScCertProp
command: wlnotify.dll
file: wlnotify.dll
size: 0
MD5: D41D8CD98F00B204E9800998ECF8427E
Warning: if the file is actually larger than 0 bytes,
the checksum could not be properly calculated!

Located: WinLogon, Schedule
command: wlnotify.dll
file: wlnotify.dll
size: 0
MD5: D41D8CD98F00B204E9800998ECF8427E
Warning: if the file is actually larger than 0 bytes,
the checksum could not be properly calculated!

Located: WinLogon, sclgntfy
command: sclgntfy.dll
file: sclgntfy.dll
size: 0
MD5: D41D8CD98F00B204E9800998ECF8427E
Warning: if the file is actually larger than 0 bytes,
the checksum could not be properly calculated!

Located: WinLogon, SensLogn
command: WlNotify.dll
file: WlNotify.dll
size: 0
MD5: D41D8CD98F00B204E9800998ECF8427E
Warning: if the file is actually larger than 0 bytes,
the checksum could not be properly calculated!

Located: WinLogon, termsrv
command: wlnotify.dll
file: wlnotify.dll
size: 0
MD5: D41D8CD98F00B204E9800998ECF8427E
Warning: if the file is actually larger than 0 bytes,
the checksum could not be properly calculated!

Located: WinLogon, wlballoon
command: wlnotify.dll
file: wlnotify.dll
size: 0
MD5: D41D8CD98F00B204E9800998ECF8427E
Warning: if the file is actually larger than 0 bytes,
the checksum could not be properly calculated!
 
Oh I only checked the box for "current user", I think that all that's blocked and I don't have full Admin rights (partial) and cannot change Admin settings. Made the changes, rebooted. I'm not sure if anything changed. For example I can run the wireless app but the icon does not come up after a reboot.
 
Okay.I just indicated HKLM because the startups you denied are all listed in the resident.log as System Startup global entries,which means they would have been for All Users.
Partial admin,would you be a Power User?
Could you Export and post your startup log once again?
 
Zenobia said:
Okay.I just indicated HKLM because the startups you denied are all listed in the resident.log as System Startup global entries,which means they would have been for All Users.
Partial admin,would you be a Power User?
Could you Export and post your startup log once again?
Click to expand...

Sure thanks (see below).

Yes power user but also have another higher level access but do not have access the the full Admin account (on a pretty secure system most of the time).

----------------------------------------------------


--- Spybot - Search & Destroy version: 1.5.2 (build: 20080128) ---

2008-01-28 blindman.exe (1.0.0.7)
2008-01-28 SDDelFile.exe (1.0.2.4)
2008-01-28 SDMain.exe (1.0.0.5)
2007-10-07 SDShred.exe (1.0.1.2)
2008-01-28 SDUpdate.exe (1.0.8.8)
2008-01-28 SDWinSec.exe (1.0.0.11)
2008-01-28 SpybotSD.exe (1.5.2.20)
2008-01-28 TeaTimer.exe (1.5.2.16)
2008-03-04 unins000.exe (51.49.0.0)
2008-01-28 Update.exe (1.4.0.6)
2008-01-28 advcheck.dll (1.5.4.5)
2007-04-02 aports.dll (2.1.0.0)
2007-11-17 DelZip179.dll (1.79.7.4)
2008-01-28 SDFiles.dll (1.5.1.19)
2008-01-28 SDHelper.dll (1.5.0.11)
2008-01-28 Tools.dll (2.1.3.3)
2008-03-05 Includes\Cookies.sbi
2007-12-26 Includes\Dialer.sbi
2008-03-05 Includes\DialerC.sbi
2008-03-05 Includes\HeavyDuty.sbi
2008-03-05 Includes\Hijackers.sbi
2008-03-05 Includes\HijackersC.sbi
2008-02-27 Includes\Keyloggers.sbi
2008-03-05 Includes\KeyloggersC.sbi
2004-11-29 Includes\LSP.sbi
2008-02-27 Includes\Malware.sbi
2008-03-05 Includes\MalwareC.sbi
2008-02-20 Includes\PUPS.sbi
2008-03-05 Includes\PUPSC.sbi
2008-03-05 Includes\Revision.sbi
2008-01-09 Includes\Security.sbi
2008-03-05 Includes\SecurityC.sbi
2008-02-20 Includes\Spybots.sbi
2008-03-05 Includes\SpybotsC.sbi
2007-11-06 Includes\Tracks.uti
2008-02-27 Includes\Trojans.sbi
2008-03-05 Includes\TrojansC.sbi
2007-12-24 Plugins\TCPIPAddress.dll

Located: HK_LM:Run, Adobe Reader Speed Launcher
command: "C:\Program Files\Adobe\Reader 8.0\Reader\Reader_sl.exe"
file: C:\Program Files\Adobe\Reader 8.0\Reader\Reader_sl.exe
size: 39792
MD5: E28D00EC675F5F5A5A0555E7A4523A6E

Located: HK_LM:Run, AGRSMMSG
command: AGRSMMSG.exe
file: C:\WINDOWS\AGRSMMSG.exe
size: 89541
MD5: FFF52BD1733E2CEBA0CBBC5DA4546427

Located: HK_LM:Run, AveoKeySti
command: "C:\Program Files\\AVEO\AVEO_UVC_FILTER_DRIVER_KIT\AveoSTI.exe"
file:
size: 0
MD5: D41D8CD98F00B204E9800998ECF8427E
Warning: if the file is actually larger than 0 bytes,
the checksum could not be properly calculated!

Located: HK_LM:Run, BatteryBar
command: c:\progra~1\batter~1\batter~1.exe
file: c:\progra~1\batter~1\batter~1.exe
size: 591872
MD5: 6FB3D1C81DDD6093F8AB216FBECBDEA7

Located: HK_LM:Run, ccApp
command: "C:\Program Files\Common Files\Symantec Shared\ccApp.exe"
file: C:\Program Files\Common Files\Symantec Shared\ccApp.exe
size: 52840
MD5: AE0F500EA5E01AFEF0BB9051969804B2

Located: HK_LM:Run, DiskeeperSystray
command: "C:\Program Files\Executive Software\Diskeeper\DkIcon.exe"
file: C:\Program Files\Executive Software\Diskeeper\DkIcon.exe
size: 176216
MD5: 8D8770C0FA1A0C981C19190E4F58B2E5

Located: HK_LM:Run, IntelZeroConfig
command: "C:\Program Files\Intel\Wireless\bin\ZCfgSvc.exe"
file: C:\Program Files\Intel\Wireless\bin\ZCfgSvc.exe
size: 819200
MD5: 0E81905F53B1A2A41558519CDCDC9C61

Located: HK_LM:Run, NeroFilterCheck
command: C:\Program Files\Common Files\Ahead\Lib\NeroCheck.exe
file: C:\Program Files\Common Files\Ahead\Lib\NeroCheck.exe
size: 161328
MD5: 9306F50AB4F21E4782E41EA8C43F5350

Located: HK_LM:Run, NvCplDaemon
command: RUNDLL32.EXE C:\WINDOWS\system32\NvCpl.dll,NvStartup
file:
size: 0
MD5: D41D8CD98F00B204E9800998ECF8427E
Warning: if the file is actually larger than 0 bytes,
the checksum could not be properly calculated!

Located: HK_LM:Run, nwiz
command: nwiz.exe /install
file: C:\WINDOWS\system32\nwiz.exe
size: 1626112
MD5: A076032A29BE8C9591877A752EA3F705

Located: HK_LM:Run, QuickTime Task
command: "C:\Program Files\QuickTime\qttask.exe" -atboottime
file: C:\Program Files\QuickTime\qttask.exe
size: 286720
MD5: 49CCFBE5D5225B9D3CC78C09DEE147D0

Located: HK_LM:Run, SunJavaUpdateSched
command: "C:\Program Files\Java\jre1.6.0_05\bin\jusched.exe"
file: C:\Program Files\Java\jre1.6.0_05\bin\jusched.exe
size: 144784
MD5: 836DC47E6CAD975304D1D3EB2F516A1C

Located: HK_LM:Run, vptray
command: C:\PROGRA~1\SYMANT~1\VPTray.exe
file: C:\PROGRA~1\SYMANT~1\VPTray.exe
size: 125632
MD5: 4279E452E99A4F044CE37F03D57FA612

Located: HK_CU:Run, BgMonitor_{79662E04-7C6C-4d9f-84C7-88D8A56B10AA}
where: S-1-5-21-3697291689-1161744426-439199626-57138...
command: "C:\Program Files\Common Files\Ahead\Lib\NMBgMonitor.exe"
file: C:\Program Files\Common Files\Ahead\Lib\NMBgMonitor.exe
size: 149040
MD5: A3C330F2731F52BE593FD7DB3617C50E

Located: HK_CU:Run, ctfmon.exe
where: S-1-5-21-3697291689-1161744426-439199626-57138...
command: C:\WINDOWS\system32\ctfmon.exe
file: C:\WINDOWS\system32\ctfmon.exe
size: 15360
MD5: 24232996A38C0B0CF151C2140AE29FC8

Located: HK_CU:Run, SpybotSD TeaTimer
where: S-1-5-21-3697291689-1161744426-439199626-57138...
command: C:\Program Files\Spybot - Search & Destroy\TeaTimer.exe
file: C:\Program Files\Spybot - Search & Destroy\TeaTimer.exe
size: 2097488
MD5: A9A5DB6AC3721BE698B996913693D73F

Located: Startup (common), aveosti.exe.lnk
where: C:\Documents and Settings\All Users\Start Menu\Programs\Startup...
command: C:\Program Files\AVEO\AVEO UVC Filter Driver Kit\AveoSTI.exe
file: C:\Program Files\AVEO\AVEO UVC Filter Driver Kit\AveoSTI.exe
size: 28672
MD5: 3FE4F1DA040B107B8348D387D17725A6

Located: Startup (common), Intel PROSet Wireless.lnk
where: C:\Documents and Settings\All Users\Start Menu\Programs\Startup...
command: C:\Program Files\AVEO\AVEO UVC Filter Driver Kit\AveoSTI.exe
file: C:\Program Files\AVEO\AVEO UVC Filter Driver Kit\AveoSTI.exe
size: 28672
MD5: 3FE4F1DA040B107B8348D387D17725A6

Located: Startup (common), VPN Client.lnk
where: C:\Documents and Settings\All Users\Start Menu\Programs\Startup...
command: C:\WINDOWS\Installer\{14FCFE7C-AB86-428A-9D2E-BFB6F5A7AA6E}\Icon3E5562ED7.ico
file: C:\WINDOWS\Installer\{14FCFE7C-AB86-428A-9D2E-BFB6F5A7AA6E}\Icon3E5562ED7.ico
size: 0
MD5: D41D8CD98F00B204E9800998ECF8427E
Warning: if the file is actually larger than 0 bytes,
the checksum could not be properly calculated!

Located: WinLogon, crypt32chain
command: crypt32.dll
file: crypt32.dll
size: 0
MD5: D41D8CD98F00B204E9800998ECF8427E
Warning: if the file is actually larger than 0 bytes,
the checksum could not be properly calculated!

Located: WinLogon, cryptnet
command: cryptnet.dll
file: cryptnet.dll
size: 0
MD5: D41D8CD98F00B204E9800998ECF8427E
Warning: if the file is actually larger than 0 bytes,
the checksum could not be properly calculated!

Located: WinLogon, cscdll
command: cscdll.dll
file: cscdll.dll
size: 0
MD5: D41D8CD98F00B204E9800998ECF8427E
Warning: if the file is actually larger than 0 bytes,
the checksum could not be properly calculated!

Located: WinLogon, NavLogon
command: C:\WINDOWS\system32\NavLogon.dll
file: C:\WINDOWS\system32\NavLogon.dll
size: 0
MD5: D41D8CD98F00B204E9800998ECF8427E
Warning: if the file is actually larger than 0 bytes,
the checksum could not be properly calculated!

Located: WinLogon, ScCertProp
command: wlnotify.dll
file: wlnotify.dll
size: 0
MD5: D41D8CD98F00B204E9800998ECF8427E
Warning: if the file is actually larger than 0 bytes,
the checksum could not be properly calculated!

Located: WinLogon, Schedule
command: wlnotify.dll
file: wlnotify.dll
size: 0
MD5: D41D8CD98F00B204E9800998ECF8427E
Warning: if the file is actually larger than 0 bytes,
the checksum could not be properly calculated!

Located: WinLogon, sclgntfy
command: sclgntfy.dll
file: sclgntfy.dll
size: 0
MD5: D41D8CD98F00B204E9800998ECF8427E
Warning: if the file is actually larger than 0 bytes,
the checksum could not be properly calculated!

Located: WinLogon, SensLogn
command: WlNotify.dll
file: WlNotify.dll
size: 0
MD5: D41D8CD98F00B204E9800998ECF8427E
Warning: if the file is actually larger than 0 bytes,
the checksum could not be properly calculated!

Located: WinLogon, termsrv
command: wlnotify.dll
file: wlnotify.dll
size: 0
MD5: D41D8CD98F00B204E9800998ECF8427E
Warning: if the file is actually larger than 0 bytes,
the checksum could not be properly calculated!

Located: WinLogon, wlballoon
command: wlnotify.dll
file: wlnotify.dll
size: 0
MD5: D41D8CD98F00B204E9800998ECF8427E
Warning: if the file is actually larger than 0 bytes,
the checksum could not be properly calculated!
 
You must log in or register to reply here.
Back
Top