Start up Run-time error (W98)

[SnoozeeQ]

I am new to windows and don't know what happened.

At start up now I get Run-time error 62 Input past end of file. Does anyone know what this is caused by? (java or java scripting?)

Any help would be greatly appreciated. Very new to Windows System.

Cathy

[report_2]

Try installing or reinstalling Visual Basic 6 runtime files from Microsoft
http://support.microsoft.com/default.aspx?scid=kb;EN-US;q192461

[Mosaic1]

That's an error generated by bad Code. It is a programming error. You need to find the offending Program and remove it from your startups. Please go to this link:
<a target="_blank" href=http://home.earthlink.net/~rmbox/Reticulated/Toys.html>http://home.earthlink.net/~rmbox/Reticulated/Toys.html</a>

and Download Startup Log. Unzip it and run it. It will generate a text file. Copy and paste the contents to a post here.

[SnoozeeQ]

---------- C:\WINDOWS\desktop\StartUp.Log

Start-Ups checked at 04-09-2002 10:37:00.83p
__________________________________________________ ________________________
__________________________________________________ ________________________

StartUp Log for Windows 95/98 - Freeware by rmbox
__________________________________________________ ________________________
__________________________________________________ ________________________

Comments:

This is a log of all the programs on your computer that
are starting automatically every time you start Windows.
Using this log can be a quick way to spot trojans.

StartUp Log (version 1.56) - Release Date 3/11/2002

__________________________________________________ ________________________
__________________________________________________ ________________________

StartUp Log Index

1. HKLM Run
2. HKCU Run
3. HKLM RunOnce
4. HKCU RunOnce
5. HKLM RunServices
6. HKLM RunServicesOnce
7. WIN.INI file
8. SYSTEM.INI file
9. AUTOEXEC.BAT file
10. StartUp folder
11. All Users StartUp
12. Misc. StartUp Configurations

__________________________________________________ ________________________
__________________________________________________ ________________________

The following is a list of your current Start-Ups
__________________________________________________ ________________________
__________________________________________________ ________________________

1. HKLM Run - Registry

[RegPath]
"StartUp"


[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\Curr entVersion\Run]
"ScanRegistry"="c:\\windows\\scanregw.exe /autorun"
"TaskMonitor"="c:\\windows\\taskmon.exe"
"SystemTray"="SysTray.Exe"
"LoadPowerProfile"="Rundll32.exe powrprof.dll,LoadCurrentPwrScheme"
"Creative Launcher"="C:\\Program Files\\Creative\\SBLive\\Launcher\\CTLauncher.exe"
"AudioHQ"="C:\\Program Files\\Creative\\SBLive\\AudioHQ\\AHQTB.EXE"
"CTAVTray"="C:\\PROGRAM FILES\\CREATIVE\\SBLIVE\\PROGRAM\\CTAvTray.EXE"
"NewsUpd"="C:\\Program Files\\Creative\\News\\NewsUpd.EXE /q"
"DXM6Patch_981116"="C:\\WINDOWS\\p_981116.exe /Q:A"
"LVComs"="c:\\windows\\SYSTEM\\LVComS.exe"
"StillImageMonitor"="C:\\WINDOWS\\SYSTEM\\STIMON.EXE"
"NAV DefAlert"="C:\\PROGRA~1\\NORTON~1\\DEFALERT.EXE"
"Norton Auto-Protect"="C:\\PROGRA~1\\NORTON~1\\NAVAPW32.EXE /LOADQUIET"
"Norton eMail Protect"="C:\\Program Files\\Norton AntiVirus\\POPROXY.EXE"
"Disc Detector"="C:\\Program Files\\Creative\\ShareDLL\\CtNotify.exe"
"LoadQM"="loadqm.exe"
"QuickFinder Scheduler"="C:\\PROGRAM FILES\\COREL\\WORDPERFECT OFFICE 2000\\PROGRAMS\\QFSCHD90.EXE"
"KeyMaestro"="C:\\KMAESTRO\\KMaestro.exe"
"SVAPlayer"="C:\\Program Files\\SVA Player\\SVAPLAYER.EXE"
"Tray Temperature"="C:\\PROGRAM FILES\\AWS\\WEATHERBUG\\WEATHERBUG.EXE 1"
"DigitalWizard Monitor"="C:\\Program Files\\Common Files\\InstallShield\\DigitalWizard\\dwMon.exe"
"DigitalWizard"="C:\\Program Files\\Common Files\\InstallShield\\DigitalWizard\\ISWizard.exe"
"CriticalUpdate"="c:\\windows\\SYSTEM\\wucrtupd.exe -startup"
"dashIE"=""
"Rosary Reminder"="C:\\PROGRAM FILES\\VIRTUAL ROSARY 4\\reminder.exe"
"RealJukeboxSystray"="C:\\PROGRAM FILES\\REAL\\REALJUKEBOX\\TSYSTRAY.EXE"
"RealTray"="C:\\Program Files\\Real\\RealPlayer\\RealPlay.exe SYSTEMBOOTHIDEPLAYER"
"Hotbar Installer"="C:\\TEMP\\HBINST.EXE /Upgrade"
"Hotbar"="C:\\PROGRAM FILES\\HOTBAR\\BIN\\3.0.12.0\\HBINST.EXE /Upgrade"
"CreateCD"="C:\\PROGRA~1\\ADAPTEC\\EASYCD~1\\CREATECD\\CREATEC D.EXE -r"

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\Curr entVersion\Run\KeyMaestro]
"RepeatFlag"=dword:00000001
"PowerEnable"=dword:00000001

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\Curr entVersion\Run\KeyMaestro\Play]
@="NONE"

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\Curr entVersion\Run\OptionalComponents]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\Curr entVersion\Run\OptionalComponents\MSFS]
"Installed"="1"

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\Curr entVersion\Run\OptionalComponents\MAPI]
"NoChange"="1"
"Installed"="1"

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\Curr entVersion\Run\OptionalComponents\IMAIL]
"Installed"="1"


================================================== ========================
__________________________________________________ ________________________

2. HKCU Run - Registry

[RegPath]
"StartUp"


[HKEY_CURRENT_USER\Software\Microsoft\Windows\Curre ntVersion\Run]
"WebCamRT.exe"=""
"Red Swoosh EDN Client"="C:\\Program Files\\RSNet\\RSEDNClient.exe"
"IM"="C:\\PROGRAM FILES\\LYCOS\\INSTANT MESSENGER\\aim.exe -cnetwait.odl"
"Desktop Architect"="\"C:\\PROGRAM FILES\\DESKTOP ARCHITECT\\DATRAY.EXE\" -S"
"ICQ Plus"="C:\\Program Files\\ICQPlus\\vplus.exe"


================================================== ========================
__________________________________________________ ________________________

3. HKLM RunOnce - Registry

[RegPath]
"StartUp"


[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\Curr entVersion\RunOnce]
"CTAVTray"="C:\\Program Files\\Creative\\SBLive\\Program\\CTAvStub.EXE EAX.AVI"


================================================== ========================
__________________________________________________ ________________________

4. HKCU RunOnce - Registry

[RegPath]
"StartUp"


[HKEY_CURRENT_USER\Software\Microsoft\Windows\Curre ntVersion\RunOnce]


================================================== ========================
__________________________________________________ ________________________

5. HKLM RunServices - Registry

[RegPath]
"StartUp"


[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\Curr entVersion\RunServices]
"LoadPowerProfile"="Rundll32.exe powrprof.dll,LoadCurrentPwrScheme"
"SchedulingAgent"="mstask.exe"
"Devldr16"="C:\\WINDOWS\\SYSTEM\\devldr16.exe"
"SAgent2ExePath"="C:\\Program Files\\Common Files\\EPSON\\EBAPI\\SAgent2.exe"
"ScriptBlocking"="\"C:\\Program Files\\Common Files\\Symantec Shared\\Script Blocking\\SBServ.exe\" -reg"


================================================== ========================
__________________________________________________ ________________________

6. HKLM RunServicesOnce - Registry

[RegPath]
"StartUp"


[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\Curr entVersion\RunServicesOnce]


================================================== ========================
__________________________________________________ ________________________

7. WIN.INI File - (c:\windows\win.ini)

Your win.ini run/load lines should look like run= and load= exclusively.
There should be nothing to the right of the equal signs.


These are the run and load lines in your WIN.INI file

run=

load=

================================================== ========================
__________________________________________________ ________________________

8. SYSTEM.INI File - (c:\windows\system.ini)

Your system.ini shell line should look like shell=Explorer.exe exclusively.
You should only see Explorer.exe following the equal sign.


This is the shell line in your SYSTEM.INI file

shell=Explorer.exe

================================================== ========================
__________________________________________________ ________________________

9. AUTOEXEC.BAT File - (c:\autoexec.bat)

(Some trojans have been known to start from this file)


These are your program startups and set paths in your autoexec.bat file

REM [Header]
@ECHO OFF











REM [CD-ROM Drive]

REM [Miscellaneous]

REM [Display]

REM [Sound, MIDI, or Video Capture Card]

REM [Mouse]


================================================== ========================
__________________________________________________ ________________________

10. StartUp Folder - (c:\windows\start menu\programs\startup)

Shortcuts to any program will automatically start when placed here.


These are the shortcuts located in your StartUp folder

C:\WINDOWS\Start Menu\Programs\StartUp\CorelCENTRAL Alarms.LNK
C:\WINDOWS\Start Menu\Programs\StartUp\RealDownload.lnk
C:\WINDOWS\Start Menu\Programs\StartUp\4D Browser Mouse.lnk
C:\WINDOWS\Start Menu\Programs\StartUp\EPSON Status Monitor 3 Environment Check 2.lnk
C:\WINDOWS\Start Menu\Programs\StartUp\Reality Fusion GameCam SE.lnk
C:\WINDOWS\Start Menu\Programs\StartUp\WinZip Quick Pick.lnk
C:\WINDOWS\Start Menu\Programs\StartUp\Desktop Application Director 9.LNK

================================================== ========================
__________________________________________________ ________________________

11. All Users Folder - (c:\windows\all users\start menu\programs\startup)

Shortcuts to any program will automatically start when placed here.


These are the shortcuts located in your All Users StartUp folder


*(No start-ups found)*

================================================== ========================
__________________________________________________ ________________________

12. Miscellaneous StartUp Configurations

-============================-
Registry StartUp Directories
-============================-

Should show the Start Menu StartUp and All Users StartUp directories

.................................................. ...................

[1] HKCU - Shell Folders

HKCU\Software\Microsoft\Windows\CurrentVersion\Exp lorer\Shell Folders

"Startup"="C:\\WINDOWS\\Start Menu\\Programs\\StartUp"

.................................................. ...................

[2] HKCU - User Shell Folders

HKCU\Software\Microsoft\Windows\CurrentVersion\Exp lorer\User Shell Folders


.................................................. ...................

[3] HKLM - Shell Folders

HKLM\Software\Microsoft\Windows\CurrentVersion\exp lorer\Shell Folders

"Common Startup"="C:\\WINDOWS\\All Users\\Start Menu\\Programs\\StartUp"

.................................................. ...................

[4] HKLM - User Shell Folders

HKLM\Software\Microsoft\Windows\CurrentVersion\exp lorer\User Shell Folders


.................................................. ...................

-=======================-
Registry Shell Spawning
-=======================-

Open Commands for Executable File Types

@="\"%1\" %*"
(.exe file - RegPath = HKCR\exefile\shell\open\command)

@="\"%1\" %*"
(.com file - RegPath = HKCR\comfile\shell\open\command)

@="\"%1\" /S"
(.scr file - RegPath = HKCR\scrfile\shell\open\command)

@="\"%1\" %*"
(.bat file - RegPath = HKCR\batfile\shell\open\command)

@="\"%1\" %*"
(.pif file - RegPath = HKCR\piffile\shell\open\command)

@="C:\\WINDOWS\\SYSTEM\\MSHTA.EXE \"%1\" %*"
(.hta file - RegPath = HKCR\htafile\shell\open\command)

-=========================-
HKLM RunOnceEx - Registry
-=========================-


[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\Curr entVersion\RunOnceEx]


-=========================-
HKU (.Default) Run - Registry
-=========================-


[HKEY_USERS\.Default\Software\Microsoft\Windows\Cur rentVersion\Run]
"WebCamRT.exe"=""
"Red Swoosh EDN Client"="C:\\Program Files\\RSNet\\RSEDNClient.exe"
"IM"="C:\\PROGRAM FILES\\LYCOS\\INSTANT MESSENGER\\aim.exe -cnetwait.odl"
"Desktop Architect"="\"C:\\PROGRAM FILES\\DESKTOP ARCHITECT\\DATRAY.EXE\" -S"
"ICQ Plus"="C:\\Program Files\\ICQPlus\\vplus.exe"


-==============================-
HKU (.Default) RunOnce - Registry
-==============================-


[HKEY_USERS\.Default\Software\Microsoft\Windows\Cur rentVersion\RunOnce]


-================================-
StubPaths - Registry (Partial Listing)
-================================-

(Please see the StubPath.txt on your desktop for complete listing)

HKLM\Software\Microsoft\Active Setup\Installed Components


"RealStubPath"="C:\\WINDOWS\\SYSTEM\\IE4UINIT.EXE"
"OldStubPath"="C:\\WINDOWS\\SYSTEM\\IE4UINIT.EXE"
"OldRealStubPath"="C:\\WINDOWS\\SYSTEM\\IE4UINIT.EXE"
"StubPath"="c:\\windows\\msnmgsr1.exe"
"StubPath"=""
"StubPath"="c:\\windows\\COMMAND\\sulfnbk.exe /L"
"RealStubPath"="\"C:\\PROGRA~1\\OUTLOO~1\\setup50.exe\" /APP:OE /CALLER:IE50 /user /install"
"OldStubPath"="\"C:\\PROGRA~1\\OUTLOO~1\\setup50.exe\" /APP:OE /CALLER:IE50 /user /install"
"OldRealStubPath"="\"C:\\PROGRA~1\\OUTLOO~1\\setup50.exe\" /APP:OE /CALLER:IE50 /user /install"
"RealStubPath"="\"C:\\PROGRA~1\\OUTLOO~1\\setup50.exe\" /APP:WAB /CALLER:IE50 /user /install"
"OldStubPath"="\"C:\\PROGRA~1\\OUTLOO~1\\setup50.exe\" /APP:WAB /CALLER:IE50 /user /install"
"OldRealStubPath"="\"C:\\PROGRA~1\\OUTLOO~1\\setup50.exe\" /APP:WAB /CALLER:IE50 /user /install"
"StubPath"="C:\\WINDOWS\\SYSTEM\\updcrl.exe -e -u C:\\WINDOWS\\SYSTEM\\verisignpub1.crl"

-=================-
DOSSTART.BAT File - (c:\windows\dosstart.bat)
-=================-

@echo off

REM Notes:
REM DOSSTART.BAT is run whenenver you choose "Restart the computer
REM in MS-DOS mode" from the Shutdown menu in Windows. It allows
REM you to load programs that you might not want loaded in Windows,
REM (because they have functional equivalents) but that you do
REM want loaded under MS-DOS. The two primary candidates for
REM this are MSCDEX and a real mode driver for the mouse you ship
REM with your system. Commands that you want present in both Windows
REM and MS-DOS should be placed in the Autoexec.bat in the
REM \Image directory of your reference server. Please note that for
REM MSCDEX you will need to load the corresponding real-mode CD
REM driver in Config.sys. This driver won't be used by Windows 98
REM but will be available prior to and after Windows 98 exits.
REM
REM This file is also helpful if you want to F8 boot into MS-DOS 7.0
REM before Windows loads and access the CD-ROM. All you have to do
REM is press F8 and then run DOSSTART to load MSCDEX and your real
REM mode mouse driver (no need to remember the command line parameters
REM for these two files.
REM
REM - You MUST explicitly specify the CD ROM Drive Letter for MSCDEX.
REM - The string following the /D: statement must explicitly match
REM the string in CONFIG.SYS following your CD-ROM device driver.

REM MSCDEX.EXE /D:OEMCD001 /l:d
REM MOUSE.EXE



-=================-
WININIT.BAK File - (c:\windows\wininit.bak)
(name) (type) (size)(modified)(time)
wininit bak 490 03-29-02 9:01p
-=================-



[Rename]
NUL=C:\WINDOWS\SYSTEM\SHDOCLC.DLL
C:\WINDOWS\SYSTEM\SHDOCLC.DLL=C:\WINDOWS\SYSTEM\SE T1114.TMP
NUL=C:\WINDOWS\SYSTEM\WININET.DLL
C:\WINDOWS\SYSTEM\WININET.DLL=C:\WINDOWS\SYSTEM\SE T1115.TMP
NUL=C:\WINDOWS\SYSTEM\URLMON.DLL
C:\WINDOWS\SYSTEM\URLMON.DLL=C:\WINDOWS\SYSTEM\SET 1116.TMP
NUL=C:\WINDOWS\SYSTEM\SHDOCVW.DLL
C:\WINDOWS\SYSTEM\SHDOCVW.DLL=C:\WINDOWS\SYSTEM\SE T1117.TMP
NUL=C:\WINDOWS\SYSTEM\MSHTML.DLL
C:\WINDOWS\SYSTEM\MSHTML.DLL=C:\WINDOWS\SYSTEM\SET 1120.TMP
-=====================-
Screen Saver Settings (Possible system.ini start-up)
-=====================-


================================================== ========================
__________________________________________________ ________________________

- Supplemental Environment Information -

TMP=c:\windows\TEMP
TEMP=C:\windows\TEMP
winbootdir=C:\WINDOWS
PATH=C:\WINDOWS;c:\windows;c:\windows\COMMAND
COMSPEC=C:\WINDOWS\COMMAND.COM
windir=C:\WINDOWS

File - c:\windows\Wininit.bak
File - c:\windows\deletefi.ini

================================================== ========================
__________________________________________________ ________________________

- End -

[SnoozeeQ]

I installed Visual Baic 6 runtime files from Microsft
After installed then upon restart I recieved this message.
Error Starting Program
The C:\WINDOWS\SYSTEM\SHELL32.DLL file
appears to be corrupt
Reinstall the file,and the try again.

[Mosaic1]

You have way too much in your startups. One or more of those programs could be generating that message. It will take a while, but you need to go to this site:
http://www.lavasoftusa.com/ (http://www.pacs-portal.co.uk/startup_content.htm>http://www.pacs-portal.co.uk/startup_content.htm</a>

)

Spyware is not a good thing to have. It tracks your movements and reports them to the creators of the program. these can be used for advertising purposes. But they are instrusive and I personally remove any and all spyware. It can also cause conflicts and Internet Explorer Crashes. unfortunaltely, once Spyware is removed, the program it came bundled with is usually rendered inactive too.

[Mosaic1]

I see you posted while I typed. Are you not able to get into Windows?

[SnoozeeQ]

First thank you for your patience. Yes I just clicked OK to the Error and restarted my computer everything started as should or so it appears.

Cathy

[SnoozeeQ]

Would it do any good to go to

Taskbar Properties
Customize Start menu
and remove items from there will this prune my start ups?

Cathy (getting totally confused)
I am so greatful for your help.

[Mosaic1]

No. That is something entirely different. What I am talking about are the many programs which you are actually running at startup.
I have questions for you. Do you still get the End of File error after installing the runtime files? I really don't see how that would have changed things. But did it? And when you reboot again, do you get the shell32.dll error again?

It is very late here and I don't have time to go over your list. I have to sign off for the night. In the meantime, if you do not know what something is, do not change anything. A look but don't touch policy can save a lot of headaches for you.

I am sure someone else will be along to help. If not, I'll be around late tomorrow.

[SnoozeeQ]

Advice on hands off approach taken I agree thank you.

Yes I still got the End of File error after installing runtime files. I don't really know if it changed things but after installation reboot of runtime files I got the shell32.dll error. I clicked OK to the shell32.dll error and then rebooted my computer again and did not get the shell32.dll error this time.

Soaking this all in and learning thank you
Cathy

[Mosaic1]

Cathy,
You're welcome. I decided to have a look at your list. This is a beginning. After you finish reading this and do all the unchecking, you will need to reboot. Reboot after the msconfig section is finished. See if you have the error. Then continue with the list.

Here it is:
First. I have to say I am amazed your computer runs at all. You have so much starting and it is a heavy burden to run all this. Step one is to go to start&gt;run and type msconfig and then Press enter. Click the Startup Tab and look at the list. These are the things you need to uncheck so they do not start every time you boot Windows. Read the explanations too please.

"DXM6Patch_981116"="C:\\WINDOWS\\p_981116.exe /Q:A"

It's a leftover from a DirectX 6.0 upgrade. It was supposed to run once and
go away but on some systems it sticks around. You can un-check the line in
MSCONFIG and then delete the executable file.
-----------------------------------
lvcoms.exe
Lvcomm server. Related to Logitech Quick Cam - works fine without it. Not required
----------------------------------

"StillImageMonitor"="C:\\WINDOWS\\SYSTEM\\STIMON.EXE" This is needed if you use a scanner. But you can uncheck it and run stimon.exe just before you start the scanner. No need to have it running all the time.
-------------------------------------
"LoadQM"="loadqm.exe" Uncheck this. Related to MSN network and Msn Messenger. Looks for contacts online. Also provacy issues. Not needed.
-------------------------------------

"NewsUpd"="C:\\Program Files\\Creative\\News\\NewsUpd.EXE /q
For Creative Soundblaster Live! series soundcards. System tray application for News updates. Available via Start -&gt; Programs - not required. Also Advertising Spyware
uncheck this for sure.
----------------------------------------------------------
dashIE"="" uncheck this. Not sure what it is. Could be for IE shopping bar?
---------------------------------------------------
"RealJukeboxSystray"="C:\\PROGRAM FILES\\REAL\\REALJUKEBOX\\TSYSTRAY.EXE" I would uncheck this. REal Jukebox in the systray.
------------------------------------
Hotbar Installer"="C:\\TEMP\\HBINST.EXE /Upgrade"
"Hotbar"="C:\\PROGRAM FILES\\HOTBAR\\BIN\\3.0.12.0\\HBINST.EXE /Upgrade" WE talked about this already. I would uncheck then remove after a reboot. Go to Control Panel&gt;add Remove programs and find the entry for Hotbar. Click Remove.
------------------------------

"RealTray"="C:\\Program Files\\Real\\RealPlayer\\RealPlay.exe SYSTEMBOOTHIDEPLAYER" uncheck this too. Do you want Real Player to run all the time&gt; A lot of peopel uninstall Real Player. It is spyware too. It tracks your habits and send information back.
---------------------------------

"CreateCD"="C:\\PROGRA~1\\ADAPTEC\\EASYCD~1\\CREATECD\\CREATEC D.EXE -r
You only need this when you are using it. I wouldn't let it run all the time.
--------------------------------
"IM"="C:\\PROGRAM FILES\\LYCOS\\INSTANT MESSENGER\\aim.exe -cnetwait.odl"
i would uncheck this. You odn't need AIM starting at every boot. Turn it on whne you want to use it.
----------------------------------------

WEBCAMRT.exe Uncheck this.
For Logitech Web Cams. Not required - camera works fine without it
-------------------------------------------
ICQ Plus"="C:\\Program Files\\ICQPlus\\vplus.exe"
This makes your ICQ skinnable. But you do not need it at start. Uncheck this too. You can access this from Start&gt;programs if you want to use it later.
---------------------------------------------
CTAvTray.exe
For Creative Soundblaster Live! series soundcards. Plays the EAX animation on start-up and adds a System Tray icon for it. Available via AudioHQ - not required
uncheck this too.
---------------------------------------------

Now go to the start button and right click on it. Choose Explore. Find the Programs&gt;Startup folder and open it. In ot you will find iocons. they are only shortcuts. Anyting in here can be removed with no problems. I will list those I think you should remove:

C:\WINDOWS\Start Menu\Programs\StartUp\RealDownload.lnk
REal Download is spyware again. I would not have it on my computer. I would not run it at start.

I don't know what the rest of these are. You really should not have all this starting. Anything which is not necessary should not be started at start up.
----------------------------------------------
This is just the beginning.

I will be back tomorrow.

[Mosaic1]

There were many things on the list I couldn't identify right away using my source. It is late and what I have suggested will make a good start. Tomorrow we will look at the rest .
I also advise you to go and Download AdAware. This program will help you to clean out any Spyware you might have. Just download it for now and read the help files. Tomorrow we will discuss how to use it and what to do next.
Here's the link to the Download:
<a target="_blank" href=http://www.lavasoftusa.com/>http://www.lavasoftusa.com/</a>

[SnoozeeQ]

A bit confused so I need to ask a few questions. I really don't want to do anything wrong. I have checked out the msconfig and am ready to do this.

"DXM6Patch_981116"="C:\\WINDOWS\\p_981116.exe /Q:A &lt;What is this how do I find this. Also where would I find Read the explanations too please for this you mention? After reading this do I base my decision to uncheck on what I read(something I probably won't understand if technical) or go by what you have said what do I need to understand from reading this? A little confused on this part. After I uncheck this in msconfig Where would I go to find the executable file to delete? the SXM6Patch.exe

When I want to use my scanner (which I do quite a bit ) in the future where would the stimon.exe be found you speak of.

The Lycos Aim my goodness I did the add remove a long time ago I couldn't use it. How does all this get here. Spyware I am not familiar with but even I understand someone is watching me. How can I prevent Spyware from being installed?


Do I reboot after unchecking all that you mention in the msconfig before I go to the start button and right click on it and go to the Programs&gt;StartUp folder and open it? Or do I do this part also and then reboot.

Should I remove the realdownload from my computer after all of this is done and will it affect having my real player I ask only because I have paid money for using it. I have no problem loosing it though if its not good for my computer. I have Windows Media player to use what do you think?

I really hope I am not a pain I just want to be sure before i proceed.

Cathy (a million thank yous)

Oh yes I will download the adaware as you suggest and will not touch till you explain Do I need to place this anywhere special on my computer once I download it to make it work correctly?

Phew! So much to learn.

[Mosaic1]

That's the program which installed a DirectX. Go to Start&gt;find and type
p_981116.exe into the search. When youy find that exe, right click on it and choose delete from the menu.

I typed the explanations along with what I thought you should uncheck. It is all in my post.


Anything you do or do not do is your own choice. I gave you suggestions and explanations.

Stimon.exe is in C:\windows\system You can right click on it and choose Create Shortcut. It will create a shorctut on the desktop. You can use the shortcut to start it.


Yes. Reboot directly after finishing msconfig. When you get back to Windows then you can continue. Also see if you still have the error. And you still will have a lot in startups. We need to do more. But the list was huge and I couldn't ID it all last night.

The Real Download and Player are your choice. They do Spy and report back. I hate that. I would uninstall. Again that is your personal choice.

Install AdAware. It will place a shortcut on both the Start Menu and the desktop for easy access.

[SnoozeeQ]

Sorry about that I am trying to learn so much at once and retain it I got confused I thought you meant I needed to find "DXM6Patch information and read up on the questions and answers. Understood now thank you. I went to find file and typed p_981116.exe It was the only item that came up in the list after find now was finished searching. I right clicked on this item in the list and clicked delete
Confirm File Delete (came up)

The file'p_981116.exe is a program
If you remove it,you will no longer be able to run this program or edit some documents.
Are you sure you want to move it to the Recycle Bin

Have I done this right. Is this what should have come up and do I press ok

I have never seen this before and need you to confirm I am doing this right.


I have done the msconfig yes still getting the Run-time error62 after reboot.
I have uninstalled Hotbar as suggested.

I will go ahead and uninstall Realplayer as well.

I will wait to continue uninstalling and download the adware as soon as I hear from you about'p_981116.exe

Thank you
Cathy

[Mosaic1]

Yes. You are correct. That warning came up because it was a program. However, it has already done its job and you can remove it safely.

You still have a lot of startups we haven't identified yet. We have yet to find the culprit.
That list was long and confusing. Please run Startup Log again and post the contents. The list should be considerably shorter now.
Something is running and generating that error. I will have to do deeper research to find out what these other remaining programs are.

In the meantime, install AdAware and run it. Choose Deep Scan. Choose to make a backup. Remove the spyware. Reboot. Run another AdAware scan to see if you are clear.

If there's a problem with another program like your Antivirus or the Internet after running AdAware you can restore using the backup you made. Let us know.

[SnoozeeQ]

Done the p_981116.exe

For me to uninstall Real Player Plus and have it uninstall properly should I uninstall

Real Jukebox
Real Slideshow
Real Arcade
Real Download

all at the same time (add-remove) and if so,is there anything for these programs in the StartUp msconfig I should uncheck first before I remove these.

I will do this and then send the Startup Log and install the AdAware.

Cathy

[Mosaic1]

Check MSconfig first for any mention od these programs. I seem to remember having you uncheck them already.

Reboot and then do the uninstalls. Then reboot again. Run Adaware, Reboot, run it again.

[SnoozeeQ]

I didn't see any mention of Real left in MSconfig. I rebooted and went to add remove.
I was able to remove everything Real except RealJukebox when I went to do this a message came up stating

uninstaller component missing
for the Realjukebox .

Should I forget about this and install and do the AdAware anyway or do I need to do something first to remove the Real Jukebox first?

Cathy

[Mosaic1]

if an uninstaller is missing, the standard is to reinstall the program in question. that should provide an uninstall program for you. Then you can uninstall.

Sure, You can do the AdAware. Reboot. Run AdAware again.

After that, please post the new Startup Log.

I know you have spyware aboard. We still have to pinpoint the error you are getting.

[SnoozeeQ]

I went to Real .com but get only the new RealOne to download I can't find anywhere to just download RealJukebox. Would this realjukebox.exe still be on my system to reinstall where would I find this.

After I figure this out I am thinking I need to return to MSconfig again to remove what gets installed on the startup?

After your reply I will do what is suggested and then sign off for the evening giving you and I a much needed break from this. I am a bit overwhelmed.

Tomorrow I will install the AdAware and do what you have said.

Cathy

[Mosaic1]

You are right. After an install, there will be fresh entries in msconfig.
Since you had a pay version of Real Jukebox, I am not sure about how you installed it and whether or not the installer would still be on your hard drive. You would have to find the installer again and use that.
You might also look in the REAL Folder for an uninstall.

[SnoozeeQ]

I am in C:\Program Files\Real\RealJukebox

There is an Update folder that has nddeserv...rnuninst.exe....upgrdhlp

Is this the uninstall the rnuninst.exe
I clicked on this and got a message
Arguments do not specify applications to uninstall.

In the RealJukebox folder is an icon with tsystray.exe is this what will install the jukebox ?

I can't seem to see anything else. Maybe I am looking in the wrong place?
Cathy

[Mosaic1]

I think it isn't there. Don't worry about it for now. I don't have Real. I did a long time ago before I found out it was Spyware. If you don't activate it, I would say it is not a problem for now.

[SnoozeeQ]

Oh thanks Mosaic1 That is a relief to know.

I'm signing off and getting away from this for a bit.
Tomorrow I will continue.

Again Mosaic1 thank you for your patience.
Cathy

[SnoozeeQ]

Hello Mosaic I did Ad-aware and came up clear. Here Is my Startup Log



---------- C:\WINDOWS\desktop\StartUp.Log

Start-Ups checked at 04-12-2002 12:34:47.27a
__________________________________________________ ________________________
__________________________________________________ ________________________

StartUp Log for Windows 95/98 - Freeware by rmbox
__________________________________________________ ________________________
__________________________________________________ ________________________

Comments:

This is a log of all the programs on your computer that
are starting automatically every time you start Windows.
Using this log can be a quick way to spot trojans.

StartUp Log (version 1.56) - Release Date 3/11/2002

__________________________________________________ ________________________
__________________________________________________ ________________________

StartUp Log Index

1. HKLM Run
2. HKCU Run
3. HKLM RunOnce
4. HKCU RunOnce
5. HKLM RunServices
6. HKLM RunServicesOnce
7. WIN.INI file
8. SYSTEM.INI file
9. AUTOEXEC.BAT file
10. StartUp folder
11. All Users StartUp
12. Misc. StartUp Configurations

__________________________________________________ ________________________
__________________________________________________ ________________________

The following is a list of your current Start-Ups
__________________________________________________ ________________________
__________________________________________________ ________________________

1. HKLM Run - Registry

[RegPath]
"StartUp"


[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\Curr entVersion\Run]
"ScanRegistry"="c:\\windows\\scanregw.exe /autorun"
"TaskMonitor"="c:\\windows\\taskmon.exe"
"SystemTray"="SysTray.Exe"
"LoadPowerProfile"="Rundll32.exe powrprof.dll,LoadCurrentPwrScheme"
"Creative Launcher"="C:\\Program Files\\Creative\\SBLive\\Launcher\\CTLauncher.exe"
"AudioHQ"="C:\\Program Files\\Creative\\SBLive\\AudioHQ\\AHQTB.EXE"
"NAV DefAlert"="C:\\PROGRA~1\\NORTON~1\\DEFALERT.EXE"
"Norton Auto-Protect"="C:\\PROGRA~1\\NORTON~1\\NAVAPW32.EXE /LOADQUIET"
"Norton eMail Protect"="C:\\Program Files\\Norton AntiVirus\\POPROXY.EXE"
"Disc Detector"="C:\\Program Files\\Creative\\ShareDLL\\CtNotify.exe"
"QuickFinder Scheduler"="C:\\PROGRAM FILES\\COREL\\WORDPERFECT OFFICE 2000\\PROGRAMS\\QFSCHD90.EXE"
"KeyMaestro"="C:\\KMAESTRO\\KMaestro.exe"
"SVAPlayer"="C:\\Program Files\\SVA Player\\SVAPLAYER.EXE"
"Tray Temperature"="C:\\PROGRAM FILES\\AWS\\WEATHERBUG\\WEATHERBUG.EXE 1"
"DigitalWizard Monitor"="C:\\Program Files\\Common Files\\InstallShield\\DigitalWizard\\dwMon.exe"
"DigitalWizard"="C:\\Program Files\\Common Files\\InstallShield\\DigitalWizard\\ISWizard.exe"
"CriticalUpdate"="c:\\windows\\SYSTEM\\wucrtupd.exe -startup"
"Rosary Reminder"="C:\\PROGRAM FILES\\VIRTUAL ROSARY 4\\reminder.exe"

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\Curr entVersion\Run\KeyMaestro]
"RepeatFlag"=dword:00000001
"PowerEnable"=dword:00000001

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\Curr entVersion\Run\KeyMaestro\Play]
@="NONE"

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\Curr entVersion\Run\OptionalComponents]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\Curr entVersion\Run\OptionalComponents\MSFS]
"Installed"="1"

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\Curr entVersion\Run\OptionalComponents\MAPI]
"NoChange"="1"
"Installed"="1"

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\Curr entVersion\Run\OptionalComponents\IMAIL]
"Installed"="1"


================================================== ========================
__________________________________________________ ________________________

2. HKCU Run - Registry

[RegPath]
"StartUp"


[HKEY_CURRENT_USER\Software\Microsoft\Windows\Curre ntVersion\Run]
"Red Swoosh EDN Client"="C:\\Program Files\\RSNet\\RSEDNClient.exe"
"Desktop Architect"="\"C:\\PROGRAM FILES\\DESKTOP ARCHITECT\\DATRAY.EXE\" -S"


================================================== ========================
__________________________________________________ ________________________

3. HKLM RunOnce - Registry

[RegPath]
"StartUp"


[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\Curr entVersion\RunOnce]


================================================== ========================
__________________________________________________ ________________________

4. HKCU RunOnce - Registry

[RegPath]
"StartUp"


[HKEY_CURRENT_USER\Software\Microsoft\Windows\Curre ntVersion\RunOnce]


================================================== ========================
__________________________________________________ ________________________

5. HKLM RunServices - Registry

[RegPath]
"StartUp"


[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\Curr entVersion\RunServices]
"LoadPowerProfile"="Rundll32.exe powrprof.dll,LoadCurrentPwrScheme"
"SchedulingAgent"="mstask.exe"
"Devldr16"="C:\\WINDOWS\\SYSTEM\\devldr16.exe"
"SAgent2ExePath"="C:\\Program Files\\Common Files\\EPSON\\EBAPI\\SAgent2.exe"
"ScriptBlocking"="\"C:\\Program Files\\Common Files\\Symantec Shared\\Script Blocking\\SBServ.exe\" -reg"


================================================== ========================
__________________________________________________ ________________________

6. HKLM RunServicesOnce - Registry

[RegPath]
"StartUp"


[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\Curr entVersion\RunServicesOnce]


================================================== ========================
__________________________________________________ ________________________

7. WIN.INI File - (c:\windows\win.ini)

Your win.ini run/load lines should look like run= and load= exclusively.
There should be nothing to the right of the equal signs.


These are the run and load lines in your WIN.INI file

run=

load=

================================================== ========================
__________________________________________________ ________________________

8. SYSTEM.INI File - (c:\windows\system.ini)

Your system.ini shell line should look like shell=Explorer.exe exclusively.
You should only see Explorer.exe following the equal sign.


This is the shell line in your SYSTEM.INI file

shell=Explorer.exe

================================================== ========================
__________________________________________________ ________________________

9. AUTOEXEC.BAT File - (c:\autoexec.bat)

(Some trojans have been known to start from this file)


These are your program startups and set paths in your autoexec.bat file

REM [Header]
@ECHO OFF











REM [CD-ROM Drive]

REM [Miscellaneous]

REM [Display]

REM [Sound, MIDI, or Video Capture Card]

REM [Mouse]


================================================== ========================
__________________________________________________ ________________________

10. StartUp Folder - (c:\windows\start menu\programs\startup)

Shortcuts to any program will automatically start when placed here.


These are the shortcuts located in your StartUp folder

C:\WINDOWS\Start Menu\Programs\StartUp\CorelCENTRAL Alarms.LNK
C:\WINDOWS\Start Menu\Programs\StartUp\4D Browser Mouse.lnk
C:\WINDOWS\Start Menu\Programs\StartUp\EPSON Status Monitor 3 Environment Check 2.lnk
C:\WINDOWS\Start Menu\Programs\StartUp\Reality Fusion GameCam SE.lnk
C:\WINDOWS\Start Menu\Programs\StartUp\WinZip Quick Pick.lnk
C:\WINDOWS\Start Menu\Programs\StartUp\Desktop Application Director 9.LNK

================================================== ========================
__________________________________________________ ________________________

11. All Users Folder - (c:\windows\all users\start menu\programs\startup)

Shortcuts to any program will automatically start when placed here.


These are the shortcuts located in your All Users StartUp folder


*(No start-ups found)*

================================================== ========================
__________________________________________________ ________________________

12. Miscellaneous StartUp Configurations

-============================-
Registry StartUp Directories
-============================-

Should show the Start Menu StartUp and All Users StartUp directories

.................................................. ...................

[1] HKCU - Shell Folders

HKCU\Software\Microsoft\Windows\CurrentVersion\Exp lorer\Shell Folders

"Startup"="C:\\WINDOWS\\Start Menu\\Programs\\StartUp"

.................................................. ...................

[2] HKCU - User Shell Folders

HKCU\Software\Microsoft\Windows\CurrentVersion\Exp lorer\User Shell Folders


.................................................. ...................

[3] HKLM - Shell Folders

HKLM\Software\Microsoft\Windows\CurrentVersion\exp lorer\Shell Folders

"Common Startup"="C:\\WINDOWS\\All Users\\Start Menu\\Programs\\StartUp"

.................................................. ...................

[4] HKLM - User Shell Folders

HKLM\Software\Microsoft\Windows\CurrentVersion\exp lorer\User Shell Folders


.................................................. ...................

-=======================-
Registry Shell Spawning
-=======================-

Open Commands for Executable File Types

@="\"%1\" %*"
(.exe file - RegPath = HKCR\exefile\shell\open\command)

@="\"%1\" %*"
(.com file - RegPath = HKCR\comfile\shell\open\command)

@="\"%1\" /S"
(.scr file - RegPath = HKCR\scrfile\shell\open\command)

@="\"%1\" %*"
(.bat file - RegPath = HKCR\batfile\shell\open\command)

@="\"%1\" %*"
(.pif file - RegPath = HKCR\piffile\shell\open\command)

@="C:\\WINDOWS\\SYSTEM\\MSHTA.EXE \"%1\" %*"
(.hta file - RegPath = HKCR\htafile\shell\open\command)

-=========================-
HKLM RunOnceEx - Registry
-=========================-


[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\Curr entVersion\RunOnceEx]


-=========================-
HKU (.Default) Run - Registry
-=========================-


[HKEY_USERS\.Default\Software\Microsoft\Windows\Cur rentVersion\Run]
"Red Swoosh EDN Client"="C:\\Program Files\\RSNet\\RSEDNClient.exe"
"Desktop Architect"="\"C:\\PROGRAM FILES\\DESKTOP ARCHITECT\\DATRAY.EXE\" -S"


-==============================-
HKU (.Default) RunOnce - Registry
-==============================-


[HKEY_USERS\.Default\Software\Microsoft\Windows\Cur rentVersion\RunOnce]


-================================-
StubPaths - Registry (Partial Listing)
-================================-

(Please see the StubPath.txt on your desktop for complete listing)

HKLM\Software\Microsoft\Active Setup\Installed Components


"RealStubPath"="C:\\WINDOWS\\SYSTEM\\IE4UINIT.EXE"
"OldStubPath"="C:\\WINDOWS\\SYSTEM\\IE4UINIT.EXE"
"OldRealStubPath"="C:\\WINDOWS\\SYSTEM\\IE4UINIT.EXE"
"StubPath"="c:\\windows\\msnmgsr1.exe"
"StubPath"=""
"StubPath"="c:\\windows\\COMMAND\\sulfnbk.exe /L"
"RealStubPath"="\"C:\\PROGRA~1\\OUTLOO~1\\setup50.exe\" /APP:OE /CALLER:IE50 /user /install"
"OldStubPath"="\"C:\\PROGRA~1\\OUTLOO~1\\setup50.exe\" /APP:OE /CALLER:IE50 /user /install"
"OldRealStubPath"="\"C:\\PROGRA~1\\OUTLOO~1\\setup50.exe\" /APP:OE /CALLER:IE50 /user /install"
"RealStubPath"="\"C:\\PROGRA~1\\OUTLOO~1\\setup50.exe\" /APP:WAB /CALLER:IE50 /user /install"
"OldStubPath"="\"C:\\PROGRA~1\\OUTLOO~1\\setup50.exe\" /APP:WAB /CALLER:IE50 /user /install"
"OldRealStubPath"="\"C:\\PROGRA~1\\OUTLOO~1\\setup50.exe\" /APP:WAB /CALLER:IE50 /user /install"
"StubPath"="C:\\WINDOWS\\SYSTEM\\updcrl.exe -e -u C:\\WINDOWS\\SYSTEM\\verisignpub1.crl"

-=================-
DOSSTART.BAT File - (c:\windows\dosstart.bat)
-=================-

@echo off

REM Notes:
REM DOSSTART.BAT is run whenenver you choose "Restart the computer
REM in MS-DOS mode" from the Shutdown menu in Windows. It allows
REM you to load programs that you might not want loaded in Windows,
REM (because they have functional equivalents) but that you do
REM want loaded under MS-DOS. The two primary candidates for
REM this are MSCDEX and a real mode driver for the mouse you ship
REM with your system. Commands that you want present in both Windows
REM and MS-DOS should be placed in the Autoexec.bat in the
REM \Image directory of your reference server. Please note that for
REM MSCDEX you will need to load the corresponding real-mode CD
REM driver in Config.sys. This driver won't be used by Windows 98
REM but will be available prior to and after Windows 98 exits.
REM
REM This file is also helpful if you want to F8 boot into MS-DOS 7.0
REM before Windows loads and access the CD-ROM. All you have to do
REM is press F8 and then run DOSSTART to load MSCDEX and your real
REM mode mouse driver (no need to remember the command line parameters
REM for these two files.
REM
REM - You MUST explicitly specify the CD ROM Drive Letter for MSCDEX.
REM - The string following the /D: statement must explicitly match
REM the string in CONFIG.SYS following your CD-ROM device driver.

REM MSCDEX.EXE /D:OEMCD001 /l:d
REM MOUSE.EXE



-=================-
WININIT.BAK File - (c:\windows\wininit.bak)
(name) (type) (size)(modified)(time)
wininit bak 92 04-10-02 6:46p
-=================-



[Rename]
NUL=C:\WINDOWS\SYSTEM\NZDD.DLL
NUL=C:\PROGRA~1\REAL\REALDO~1\REALDO~1.EXE

-=====================-
Screen Saver Settings (Possible system.ini start-up)
-=====================-


================================================== ========================
__________________________________________________ ________________________

- Supplemental Environment Information -

TMP=c:\windows\TEMP
TEMP=C:\windows\TEMP
winbootdir=C:\WINDOWS
PATH=C:\WINDOWS;c:\windows;c:\windows\COMMAND
COMSPEC=C:\WINDOWS\COMMAND.COM
windir=C:\WINDOWS

File - c:\windows\Wininit.bak
File - c:\windows\deletefi.ini

================================================== ========================
__________________________________________________ ________________________

- End -


Cathy Hope this is a better Log
I still have run-time error

[Mosaic1]

Now we need to pinpoint which program is causing the error. To do this, we are going to uncheck programs you should not have running. If that doesn't rid you of the error,we are going to then uncheck everything and add them back one at a time until the error appears. When it does, we will know which program is doing it. If the error disappears after youuncheck a group, you will know the problem was one of the programs in that group. You can then narrow it down and find the problem.


Go to msconfig and uncheck the following:
QuickFinder Scheduler"="C:\\PROGRAM FILES\\COREL\\WORDPERFECT OFFICE 2000\\PROGRAMS\\QFSCHD90.EXE"
This is a resource hog and is not necessary at all. If you have ever noticed that your Floppy drive is making noise, it is because this is accessing it.
--------------------------------------------
SVAPlayer"="C:\\Program Files\\SVA Player\\SVAPLAYER.EXE"
Is this a part of Real Player? It may be spyware. At any rate, you don't need it loading at startup.
--------------------------------------

"Tray Temperature"="C:\\PROGRAM FILES\\AWS\\WEATHERBUG\\WEATHERBUG.EXE 1" This is your choice. It is not needed. Uncheck it if you like.
------------------------------------------------

What is this? Do you know?
"Red Swoosh EDN Client"="C:\\Program Files\\RSNet\\RSEDNClient.exe"

-----------------------------------------------------------
"Desktop Architect"="\"C:\\PROGRAM FILES\\DESKTOP ARCHITECT\\DATRAY.EXE\" -S"
I would uncheck this one. I know it manages themes. If the error is still with you, recheck it if you like after.
---------------------------------------------------
http://www.digitalwizard.com/
This is all I could find on Digital Wizard. Do you know what this is? Yopu have two entries. Try unchecking these. If you do know what it is, I would like to know too. Thanks.



You will still have a lot left after you deselect these. Let's go slowly so you have a better chance of pinpointing the culprit. . Let's go slowly so you have a better chance of pinpointing the culprit. Do this in batches.

Then you can decide which programs you feel you need to run at start and which you want to run later. And which you want to uninstall.

[SnoozeeQ]

I typed in Find Files Red Swoosh 1 item
(a logo beside) swoosh.mst C:\Program Files 80KB Corel Presenations 8/10/98
Came with Windows 98se?

Should I uncheck this as well when doin MSconfig?

Digital Wizard Looks after all downloads and Installs them for me Smart Folder for organization of downloads All my info on my download history everything download for me and keeps my records in order You can also remove programs from your system that you have downloaded through DigitalWizard.

SVA is a left over of an Uninstalled WeatherBug

Cathy

[Mosaic1]

Red Swoosh Yes. If you are not using it, uncheck it.


If SVA and Weatherbug have been uninstalled, let's remove them from the list altogether. Do not uncheck them. Instead go to start&gt;run and type regedit. Press enter.

Navigate to:
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\Curr entVersion\Run

Click on RUN

In the right pane you will see thees entries. Right click on thm and choose delete

"SVAPlayer"="C:\\Program Files\\SVA Player\\SVAPLAYER.EXE"
"Tray Temperature"="C:\\PROGRAM FILES\\AWS\\WEATHERBUG\\WEATHERBUG.EXE 1"


To navigate the registry, click the +in front of HKEY_LOCAL_MACHINE
then the + in front of Microsoft +in front of Windows and on down the path until you get to RUN
You will Click on RUN and look in the right pane.
-------------------------------------------------------------------

I think you should uncheck the Digital Wizard and Desktop Architect for just one session. REboot. If the error is still with you, go back and recheck them. You will have ruled them out. If the error is gone, recheck them anyway. If the error is still gone, you will have ruled them out.

We need to pinpoint the culprit.

There are still many possibilities.

[SnoozeeQ]

I have already unchecked SVA ealier today and rebooted Tray Temperature the other day. I don't see a Weatherbug in the list I will check again.

Do I need to go back and recheck these and restart before I regedit to completely delete. Also is there anything else in start up associated with this program I should recheck before continuing?

Cathy

[Mosaic1]

You can recheck in MSconfig and reboot. That would be easiest.

[Mosaic1]

Uncheck these from msconfig and see what happens.

"CriticalUpdate"="c:\\windows\\SYSTEM\\wucrtupd.exe -startup"
"Rosary Reminder"="C:\\PROGRAM FILES\\VIRTUAL ROSARY 4\\reminder.exe"
Reboot. Is the message gone?
---------------------------------
Next step:

What are all these in Start&gt;programs&gt;startup? These are shortcuts which will start their programs at Windows Startup. Do youknow what each does and whether they need to run at start?

C:\WINDOWS\Start Menu\Programs\StartUp\CorelCENTRAL Alarms.LNK
C:\WINDOWS\Start Menu\Programs\StartUp\4D Browser Mouse.lnk
C:\WINDOWS\Start Menu\Programs\StartUp\EPSON Status Monitor 3 Environment Check 2.lnk
C:\WINDOWS\Start Menu\Programs\StartUp\Reality Fusion GameCam SE.lnk
C:\WINDOWS\Start Menu\Programs\StartUp\WinZip Quick Pick.lnk
C:\WINDOWS\Start Menu\Programs\StartUp\Desktop Application Director 9.LNK

Try this. Make a New Folder on the desktop. then place some of the above shortcuts into it. Move them out of the startup folder into this new folder. Reboot. Is the message gone? If so, one of these caused it. I would start with these.
C:\WINDOWS\Start Menu\Programs\StartUp\CorelCENTRAL Alarms.LNK
C:\WINDOWS\Start Menu\Programs\StartUp\WinZip Quick Pick.lnk
C:\WINDOWS\Start Menu\Programs\StartUp\Reality Fusion GameCam SE.lnk
This is all a process of elimination.

[SnoozeeQ]

I am crossing myself 4 times and saying many Hail Marys. I did the Uncheck Critical Update and Rosary Reminder rebooted and no Run-time Error Hoorayyy!!

I can't thank you enough
You are a saint and the nicest person I know to have been so patient and help me through this.
Cathy

Is there other things I need to do now to finish this up?
I guess I should uninstall the Rosary to be safe?

[Mosaic1]

Hurray! Being a Catholic myself, I really didn't want to tell you to uncheck that one. I guess you should uninstall it. It will probably generate that error whenever it is run.

Cleaning out your startups is always a good thing. You can decide what extras you want running in the background.


Glad it's fixed.
Katie

[Andy-S]

Great job Mo. I knew you would get there in the end.

Cheers
Andy

[SnoozeeQ]

A little chuckle back to you about not wanting to say uncheck the Rosary. I have learned a lot from you thank you again many times. I will uninstall Rosary . Bye
Cathy
May only good come your way

[Mosaic1]

Andy,
Thank you. I am glad it was finally pinpointed.


Cathy,
Thank you for the good wishes. We were getting down to the programs I didn't want to uncheck. Many of those left after the last batch unchecked were needed for your system devices.


Mo