Norton Systemworks caused big problems...

Yikes - 344 repairs, where to start?!! I've exported it to a text file, but am guessing I shouldn't copy it on here with it being that long...

 

Ouch!

I agree. That would be a LOT of "repair" descriptions to fit all that into this forum thread. There might be some personal info in there you don't want to disclose either.

Two possibilities to consider (at your own risk):

1. Temporarily disabling Norton GoBack from running at startup might improve your boot-up time. (You haven't mentioned whether you tried this yet.) I think Norton GoBack might create an "image" of your hard drive contents each time you boot (which would probably take a few minutes). I could be wrong though. You might want to research Norton GoBack more before proceeding.

2. If disabling GoBack doesn't improve your boot-up time, then re-enable GoBack. Then undo all the "repairs" that were made by One Button Checkup. WinDoctor (or One Button Checkup) will probably re-detect those "problems" the next time it runs. You can configure One Button Checkup's "Scheduling" so it won't run for the next few days or so. The "Scheduling" can be selected from One Button Checkup's main window.

In the meantime, if you find that your system boot-up time improves, then we might have narrowed down the cause of your slow boot-up issue to one or more of the 344 "repairs" Norton made.

That's what I would do if I had your problem. However, someone else here might suggest differently.

 

Hi Steelercaz13,

We need to know what's running on your system.
Download and run HijackThis:

Download from here http://radiosplace.com/ latest version 1.99

Download it to it's own folder, for example create a folder C:\HijackThis

unzip (double click on zipped folder)

click on the execute

Open the Msc Tools section

From the System Tools > Generate Start List log

Paste the text file into your next post.

Regards - Charles

 

Hi Charles, text copied below as requested. Thanks again!

StartupList report, 05/09/2006, 17:09:23
StartupList version: 1.52.2
Started from : C:\Documents and Settings\Angel\Desktop\HijackThis.EXE
Detected: Windows XP SP2 (WinNT 5.01.2600)
Detected: Internet Explorer v7.00 (7.00.5450.0004)
* Using default options
==================================================

Running processes:

C:\WINDOWS\System32\smss.exe
C:\WINDOWS\system32\winlogon.exe
C:\WINDOWS\system32\services.exe
C:\WINDOWS\system32\lsass.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\System32\svchost.exe
C:\Program Files\Intel\Wireless\Bin\EvtEng.exe
C:\Program Files\Intel\Wireless\Bin\S24EvMon.exe
C:\Program Files\Common Files\Symantec Shared\ccSetMgr.exe
C:\Program Files\Common Files\Symantec Shared\ccEvtMgr.exe
C:\Program Files\Common Files\Symantec Shared\ccProxy.exe
C:\Program Files\Common Files\Symantec Shared\SNDSrvc.exe
C:\Program Files\Common Files\Symantec Shared\SPBBC\SPBBCSvc.exe
C:\Program Files\Common Files\Symantec Shared\CCPD-LC\symlcsvc.exe
C:\WINDOWS\Explorer.EXE
C:\WINDOWS\system32\spoolsv.exe
C:\Program Files\Apoint\Apoint.exe
C:\WINDOWS\ehome\ehtray.exe
C:\WINDOWS\system32\ICO.EXE
C:\Program Files\Sony\VAIO Camera Utility\VCUServe.exe
C:\Program Files\Sony\VAIO Power Management\SPMgr.exe
C:\Program Files\Sony\ISB Utility\ISBMgr.exe
C:\Program Files\Adobe\Photoshop Elements 4.0\PhotoshopElementsFileAgent.exe
C:\Program Files\Sony\Wireless Switch Setting Utility\Switcher.exe
C:\Program Files\Sony\VAIO Update 2\VAIOUpdt.exe
C:\Program Files\Adobe\Acrobat 7.0\Distillr\Acrotray.exe
C:\Program Files\Apoint\Apntex.exe
C:\Program Files\QuickTime\qttask.exe
C:\WINDOWS\system32\atwtusb.exe
C:\Program Files\iTunes\iTunesHelper.exe
C:\Program Files\TomTom HOME\TomTomHOME.exe
C:\Program Files\Symantec\LiveUpdate\ALUSchedulerSvc.exe
C:\Program Files\Common Files\Symantec Shared\ccApp.exe
C:\Program Files\Google\Google Desktop Search\GoogleDesktop.exe
C:\WINDOWS\system32\ctfmon.exe
C:\PROGRA~1\NETSCAPE\NETSCAPE\NETSCP.EXE
C:\Program Files\Google\Google Desktop Search\GoogleDesktopIndex.exe
C:\Program Files\Toshiba\Bluetooth Toshiba Stack\TosBtMng.exe
C:\CFusionMX7\runtime\bin\jrunsvc.exe
C:\Program Files\Norton SystemWorks\Norton GoBack\GBTray.exe
C:\CFusionMX7\verity\k2\_nti40\bin\k2admin.exe
C:\CFusionMX7\runtime\bin\jrun.exe
C:\Program Files\Google\Google Desktop Search\GoogleDesktopDisplay.exe
C:\Program Files\Google\Google Desktop Search\GoogleDesktopCrawl.exe
C:\Program Files\Toshiba\Bluetooth Toshiba Stack\TosA2dp.exe
C:\WINDOWS\eHome\ehRecvr.exe
C:\Program Files\Toshiba\Bluetooth Toshiba Stack\TosBtHid.exe
C:\WINDOWS\eHome\ehSched.exe
C:\Program Files\Toshiba\Bluetooth Toshiba Stack\TosBtHsp.exe
C:\Program Files\Norton SystemWorks\Norton GoBack\GBPoll.exe
C:\Program Files\Common Files\Microsoft Shared\VS7DEBUG\MDM.EXE
C:\Program Files\Microsoft SQL Server\MSSQL$VAIO_VEDB\Binn\sqlservr.exe
C:\Program Files\Norton Internet Security\Norton AntiVirus\navapsvc.exe
C:\PROGRA~1\NORTON~2\NORTON~2\NPROTECT.EXE
C:\WINDOWS\system32\nvsvc32.exe
C:\Program Files\Intel\Wireless\Bin\RegSrvc.exe
C:\PROGRA~1\NORTON~2\NORTON~2\SPEEDD~1\NOPDB.EXE
C:\WINDOWS\system32\svchost.exe
C:\Program Files\Sony\VAIO Event Service\VESMgr.exe
C:\Program Files\Common Files\Sony Shared\VAIO Entertainment Platform\VCSW\VCSW.exe
C:\Program Files\Common Files\Sony Shared\VAIO Entertainment Platform\VzCdb\VzCdbSvc.exe
C:\Program Files\Common Files\Sony Shared\VAIO Entertainment Platform\VzCdb\VzFw.exe
C:\Program Files\iPod\bin\iPodService.exe
C:\WINDOWS\system32\dllhost.exe
C:\WINDOWS\eHome\ehmsas.exe
C:\Program Files\Common Files\Symantec Shared\Security Console\NSCSRVCE.EXE
C:\Program Files\Internet Explorer\iexplore.exe
C:\Program Files\Microsoft Office\OFFICE11\OUTLOOK.EXE
C:\Program Files\Microsoft Office\OFFICE11\WINWORD.EXE
C:\Documents and Settings\Angel\Desktop\HijackThis.exe

--------------------------------------------------

Listing of startup folders:

Shell folders Common Startup:
[C:\Documents and Settings\All Users\Start Menu\Programs\Startup]
Bluetooth Manager.lnk = ?
Norton GoBack.lnk = C:\Program Files\Norton SystemWorks\Norton GoBack\GBTray.exe

--------------------------------------------------

Checking Windows NT UserInit:

[HKLM\Software\Microsoft\Windows NT\CurrentVersion\Winlogon]
UserInit = C:\WINDOWS\system32\userinit.exe,

--------------------------------------------------

Autorun entries from Registry:
HKLM\Software\Microsoft\Windows\CurrentVersion\Run

NvCplDaemon = RUNDLL32.EXE C:\WINDOWS\system32\NvCpl.dll,NvStartup
Apoint = C:\Program Files\Apoint\Apoint.exe
ehTray = C:\WINDOWS\ehome\ehtray.exe
Mouse Suite 98 Daemon = ICO.EXE
VAIOCameraUtility = "C:\Program Files\Sony\VAIO Camera Utility\VCUServe.exe "
SonyPowerCfg = C:\Program Files\Sony\VAIO Power Management\SPMgr.exe
ISBMgr.exe = C:\Program Files\Sony\ISB Utility\ISBMgr.exe
Switcher.exe = C:\Program Files\Sony\Wireless Switch Setting Utility\Switcher.exe
VAIO Update 2 = "C:\Program Files\Sony\VAIO Update 2\VAIOUpdt.exe" /Stationary
Acrobat Assistant 7.0 = "C:\Program Files\Adobe\Acrobat 7.0\Distillr\Acrotray.exe "
(Default) =
QuickTime Task = "C:\Program Files\QuickTime\qttask.exe" -atboottime
atwtusb = atwtusb.exe beta
iTunesHelper = "C:\Program Files\iTunes\iTunesHelper.exe "
TomTomHOME.exe = "C:\Program Files\TomTom HOME\TomTomHOME.exe" -s
ccApp = "C:\Program Files\Common Files\Symantec Shared\ccApp.exe "
Google Desktop Search = "C:\Program Files\Google\Google Desktop Search\GoogleDesktop.exe" /startup

--------------------------------------------------

Autorun entries from Registry:
HKLM\Software\Microsoft\Windows\CurrentVersion\RunOnceEx

Register Homesite+.exe = "C:\Program Files\Macromedia\HomeSite+\Homesite+.exe" /REGSERVER

--------------------------------------------------

Autorun entries from Registry:
HKCU\Software\Microsoft\Windows\CurrentVersion\Run

CTFMON.EXE = C:\WINDOWS\system32\ctfmon.exe
Mozilla Quick Launch = "C:\PROGRA~1\NETSCAPE\NETSCAPE\NETSCP.EXE" -turbo
MSMSGS = "C:\Program Files\Messenger\msmsgs.exe" /background

--------------------------------------------------

Load/Run keys from C:\WINDOWS\WIN.INI:

load=*INI section not found*
run=*INI section not found*

Load/Run keys from Registry:

HKLM\..\Windows NT\CurrentVersion\WinLogon: load=*Registry value not found*
HKLM\..\Windows NT\CurrentVersion\WinLogon: run=*Registry value not found*
HKLM\..\Windows\CurrentVersion\WinLogon: load=*Registry key not found*
HKLM\..\Windows\CurrentVersion\WinLogon: run=*Registry key not found*
HKCU\..\Windows NT\CurrentVersion\WinLogon: load=*Registry value not found*
HKCU\..\Windows NT\CurrentVersion\WinLogon: run=*Registry value not found*
HKCU\..\Windows\CurrentVersion\WinLogon: load=*Registry key not found*
HKCU\..\Windows\CurrentVersion\WinLogon: run=*Registry key not found*
HKCU\..\Windows NT\CurrentVersion\Windows: load=
HKCU\..\Windows NT\CurrentVersion\Windows: run=*Registry value not found*
HKLM\..\Windows NT\CurrentVersion\Windows: load=*Registry value not found*
HKLM\..\Windows NT\CurrentVersion\Windows: run=*Registry value not found*
HKLM\..\Windows NT\CurrentVersion\Windows: AppInit_DLLs=C:\PROGRA~1\Google\GOOGLE~3\GOEC62~1.DLL

--------------------------------------------------

Shell & screensaver key from C:\WINDOWS\SYSTEM.INI:

Shell=*INI section not found*
SCRNSAVE.EXE=*INI section not found*
drivers=*INI section not found*

Shell & screensaver key from Registry:

Shell=Explorer.exe
SCRNSAVE.EXE=C:\WINDOWS\system32\vaiomov.scr
drivers=*Registry value not found*

Policies Shell key:

HKCU\..\Policies: Shell=*Registry value not found*
HKLM\..\Policies: Shell=*Registry value not found*

--------------------------------------------------


Enumerating Browser Helper Objects:

(no name) - C:\Program Files\Adobe\Acrobat 7.0\ActiveX\AcroIEHelper.dll - {06849E9F-C8D7-4D59-B87D-784B7D6BE0B3}
Norton Internet Security 2006 - C:\Program Files\Common Files\Symantec Shared\AdBlocking\NISShExt.dll - {9ECB9560-04F9-4bbc-943D-298DDF1699E1}
NAV Helper - C:\Program Files\Norton Internet Security\Norton AntiVirus\NavShExt.dll - {A8F38D8D-E480-4D52-B7A2-731BB6995FDD}

--------------------------------------------------

Enumerating Task Scheduler jobs:

Norton AntiVirus - Run Full System Scan - Angel.job
Norton AntiVirus - Run Norton QuickScan - Angel.job
Symantec Drmc.job
Symantec NetDetect.job

--------------------------------------------------

Enumerating Download Program Files:

[Office Genuine Advantage Validation Tool]
InProcServer32 = C:\WINDOWS\system32\OGACheckControl.DLL
CODEBASE = http://download.microsoft.com/download/c/1/1/c1119a8f-4bfa-44d6-a3c1-ed651c6c4b5b/OGAControl.cab

[Windows Genuine Advantage Validation Tool]
InProcServer32 = C:\WINDOWS\system32\legitcheckcontrol.dll
CODEBASE = http://go.microsoft.com/fwlink/?linkid=39204

[RegUserCfgUI Class]
InProcServer32 = C:\Program Files\Yahoo!\Common\yregucfg.dll
CODEBASE = http://us.dl1.yimg.com/download.yahoo.com/dl/installs/bt/yregucfg.cab

[Citrix ICA Client]
InProcServer32 = C:\Progra~1\Citrix\icaweb32\WFICA.OCX
CODEBASE = http://a516.g.akamai.net/f/516/25175/7d/runaware.download.akamai.com/25175/citrix/wficat-no-eula.cab

[Office Update Installation Engine]
InProcServer32 = C:\WINDOWS\opuc.dll
CODEBASE = http://office.microsoft.com/officeupdate/content/opuc3.cab

[Symantec RuFSI Utility Class]
InProcServer32 = C:\WINDOWS\Downloaded Program Files\rufsi.dll
CODEBASE = http://security.symantec.com/sscv6/SharedContent/common/bin/cabsa.cab

[Symantec Download Manager]
InProcServer32 = C:\WINDOWS\Downloaded Program Files\symdlmgr.dll
CODEBASE = https://webdl.symantec.com/activex/symdlmgr.cab

[Shockwave Flash Object]
InProcServer32 = C:\WINDOWS\system32\Macromed\Flash\Flash9.ocx
CODEBASE = http://download.macromedia.com/pub/shockwave/cabs/flash/swflash.cab

--------------------------------------------------

Enumerating ShellServiceObjectDelayLoad items:

PostBootReminder: C:\WINDOWS\system32\SHELL32.dll
CDBurn: C:\WINDOWS\system32\SHELL32.dll
WebCheck: C:\WINDOWS\system32\webcheck.dll
SysTray: C:\WINDOWS\system32\stobject.dll

--------------------------------------------------
End of report, 11,057 bytes
Report generated in 0.172 seconds

Command line options:
/verbose - to add additional info on each section
/complete - to include empty sections and unsuspicious data
/full - to include several rarely-important sections
/force9x - to include Win9x-only startups even if running on WinNT
/forcent - to include WinNT-only startups even if running on Win9x
/forceall - to include all Win9x and WinNT startups, regardless of platform
/history - to list version history only

 

Hi Steelercaz13,

Went thru your running processes. Three things that do stick out aside from the Symantec processes:

Load/Run keys from Registry:

HKLM\..\Windows NT\CurrentVersion\WinLogon: load=*Registry value not found*
HKLM\..\Windows NT\CurrentVersion\WinLogon: run=*Registry value not found*
HKLM\..\Windows\CurrentVersion\WinLogon: load=*Registry key not found*
HKLM\..\Windows\CurrentVersion\WinLogon: run=*Registry key not found*
HKCU\..\Windows NT\CurrentVersion\WinLogon: load=*Registry value not found*
HKCU\..\Windows NT\CurrentVersion\WinLogon: run=*Registry value not found*
HKCU\..\Windows\CurrentVersion\WinLogon: load=*Registry key not found*
HKCU\..\Windows\CurrentVersion\WinLogon: run=*Registry key not found*
HKCU\..\Windows NT\CurrentVersion\Windows: load=
HKCU\..\Windows NT\CurrentVersion\Windows: run=*Registry value not found*
HKLM\..\Windows NT\CurrentVersion\Windows: load=*Registry value not found*
HKLM\..\Windows NT\CurrentVersion\Windows: run=*Registry value not found*

Don't know what if any significance these have.


Msc processes:
C:\Program Files\Norton SystemWorks\Norton GoBack\GBTray.exe Have you tried disabling it? If you do, then you can trun System Restore back on.


C:\Program Files\Sony\VAIO Update 2\VAIOUpdt.exe Sony product search - what products?

Regards - Charles

 

Me either! Any ideas how I can find out?

Yep, have turned it off, checked System Restore is turned on. I guess this is just the system tray icon start up?

Sorry, not quite sure what you're saying / asking me to do here. Appreciate your help, just not particularly experienced at this. I taught myself last year how to build a PC from scratch, and this year how to design, manage, and to a certain extent build websites - but all this registry and software stuff is beyond me!

 

Oh great, and now I'm working in a Word document and it's having all kinds of problems saving the file - I've seen 3 error messages I've never come across, and I'd consider myself a relatively advanced Word user.

Aaarrrgghhh!

 

Hi, Steelercaz.

Perhaps there are "repairs" One Button Checkup made related to Microsoft Word ( "WINWORD ") that you can undo. If you look through your One Button Checkup "History ", you might find some. If you post those "repairs" here, perhaps people can evaluate and offer suggestions.

BTW, I searched my entire registry for "winword" and found 262 matches.


If you undo some of your "History" items, at least you can confirm that undoing "repairs" works. Then you could see if the strange Word errors no longer occur when you save a Word document. If you want to get people's opinions on what repair method(s) to try, please post those details here.

The next time you run WinDoctor (or One Button Checkup), it should re-detect those "problems" and you should be able to manually choose a different repair method than the one Norton defaults to. You might even be able to direct Norton to ignore those "problems ". Before you apply any such actions, I recommend posting the suspect "problem" items here along with Norton's proposed repair methods and seeing what other people suggest.

=======

Charles,

I ran HijackThis' "Generate StartupList log" with the "List empty sections (complete)" option enabled. I also have the same "not found" items as Steelercaz in my HJT log except my "HKLM\..\Windows NT\CurrentVersion\Windows: AppInit_DLLs=" has nothing after it. Therefore, I don't think those "not found" registry items are the source of Steelercaz's slow boot-up issue. However, my system doesn't start up quite as quickly as Steelercaz's did, maybe because my CPU (AMD Athlon XP 3200+) is slower.

 

Hi Steelercaz13,

C:\Program Files\Sony\VAIO Update 2\VAIOUpdt.exe is a gratuitous startup that pushes Sony products. If you don't object, then leave it.


msconfig instructions if you need them:

From the Start menu, click on run.
Type msconfig and ok.

Then in the System Configuration utility, click on the Start tab.

Uncheck VAIOUpdt

Afterwards when you boot up, you'll get a message from the System that you have changed the startups, tick the box on the left to shut the message off.

Regards - Charles

 

Great stuff, thankyou. Looking at all the other programs in there, am I ok to uncheck other stuff I don't use often, presuming I can just start them if needed by activating the program? i.e. things like Netscape Navigator, MSN Messenger, Quick Time, Acrobat pdf viewer, etc - I don't want them to startup when I turn the pc on, but want to be able to open them if needed.

Hopefully that would all help the startup happen quicker?

About to look for Word stuff in the repair history now...

 

Sure, that's how I keep my startup quick and lean

To help, this post http://www.windowsbbs.com/showthread.php?t=39425
links to application/process data bases for looking up what they are and whether they are needed at startup.

Especially this one:
C:\Program Files\Common Files\Microsoft Shared\VS7DEBUG\MDM.EXE

This is a debuuger that writes to a log, probably came with IE7, and can't see a reason for it to be constantly running. I don't run IE7, so look around in it's options to shut it down.

If that doesn't work, you can look the process up and find out more about it and how to disable it. It may turn out that it needs to be running since IE7 is not finalyzed - if that's the case, you can always turn it back on.

Msn Messenger can be disabled from starting from within it: Double click the tray icon > Tools > options > General and uncheck Automatically run Messenger when I log on.

Apologies for the msconfig instructions with a reference to Real Player - had that "canned" and pasted the whole thing w/o looking

Regards - Charles

 

WOW!! This is, without a doubt, one of the longest threads I've ever seen on WindowsBBS!!

I will try to read it ALL tomorrow and offer my opinion - as lackluster as that may be. I'm just a dummy but, I have some definite opinions about NORTON anything!!!

None of them good, btw - in spite of the fact that one of my daughters-in-law work for them at their corporate headquarters in Oregon.


Mike