A different msconfig problem

I wanted to disable all of the Windows 98se startup items and then enable them one by one in order to find out why Defrag.exe runs every time I boot.

I cleared all of the startup tab check boxes two ways... 1st by actually clearing each box in the startup tab then making sure that the general tab's check box was cleared for the startup group. 2nd by first clearing the General tab's check box for the startup group which in turn autocleared all of the items in the startup tab.

Either way after applying and oking the changes and going through the auto boot sequence, I found Defrag.exe still running.

NOTE: Defrag.exe was one of the startup group items that I had unchecked.

Returning to msconfig and the startup tab I find that five items have been enabled (by "DO YOU KNOW WHAT OR HOW? "). These five items are always... iamapp, nisserv,fastboot,PGP tray and Defrag.

I have been around the cycle multiple times including a complete power down. Nothing changes. Clear everything from startup. Reboot. Defrag runs.

This was not always the case. It appeared during the time I was groaning under heavy duress while getting Norton Internet Security up and running. I did several defrag operations during that time period.

If you can answer my question, "DO YOU KNOW WHAT OR HOW? ", I would surely appreciate it.

Thanks,

 

Download and run Startuplist
Then, post back the contents of the file that it creates.

 

iamapp AtGuard personal firewall engine. As Atguard was bought by Symantec some time ago, it's now the Norton Personal Firewall executable as well
nisserv From Norton Internet Security 2002. Required if you use this for your personal firewall
fastboot (You'll more than likely need to go to your start up folder under programs and delete it form there as well.
Part of MS Office 95 (v7.0). Most likely a predecessor of MS Find Fast and can be disabled
PGP tray PGP 7.x. Provides icon tray shortcuts to PGP programs from Network Associates. Available via Start -> Programs
Blatantly ripped from here.

What all do you still have checked?

Daizy

 

Whit

Thanks for the link.

I have many times wanted someone to post back their startups.

This is definately the best way.

Mike

 

WhitPhil,

Thanks for the link to the StartUp pgm. I was trying to accomplish the same sort of thing and was approaching bummed out! I'm not an expert in the inner workings of Windows.

The output file was very large and will exceed the character limitation of this posting board. I'm informed that I cannot post attachments so short of posting the file by cut and paste over many posts, do you have a better way for me to get the file content to the forum.

 

Nope.......go ahead and cut and paste to over the span of a couple of posts if you need to.

Daizy

 

Tony,

According to TaskInfo 2002 the Defrag program is being started by Explorer. I'm not sure what that means or how the connection occurs. It appears to me that Explorer has its fingers in a multitude of pies in Windows.

 

Daizy,

Thanks for the details about the pgms. I have this info available to me via TaskInfo 2002 but occaisionally the info provided by the software authors is not sufficient to cleary identify a pgm's usage.

At the time of my minimalist boots, I was attempting to boot with the following configuration as set by Msconfig.

Autoexec.bat All checked
Config.sys All checked
Win.ini All checked
System.ini All checked
Startup None checked

After re-boot via Msconfig, five Startup items were found to be checked... iamapp, nisserv, Fastboot, PGP Tray and Defrag.

 

OK. Let's see how much I can get into Section one.
++
******************************************************************************************************************
I have annotated this report in three places. Both have my name associated with them. Rod
******************************************************************************************************************

StartupList report, 1/2/03, 11:09:16 AM
StartupList version: 1.50
Started from : F:\DOWNLOADED SOFTWARE\DIAGONISTICS\STARTUPLIST.EXE
Detected: Windows 98 SE (Win9x 4.10.2222A)
Detected: Internet Explorer v6.00 SP1 (6.00.2800.1106)
* Using default options
==================================================

******************************************************************************************************************
THIS BOOT SEQUENCE WAS INITIATED 01/01/03 12:14 pm CDST. ROD
******************************************************************************************************************
Running processes:

C:\WINDOWS\SYSTEM\KERNEL32.DLL
C:\WINDOWS\SYSTEM\MSGSRV32.EXE
C:\WINDOWS\SYSTEM\MPREXE.EXE
C:\WINDOWS\SYSTEM\mmtask.tsk
C:\WINDOWS\SYSTEM\MSTASK.EXE
C:\PROGRAM FILES\COMMON FILES\SYMANTEC SHARED\CCEVTMGR.EXE
C:\PROGRAM FILES\NORTON INTERNET SECURITY\NISUM.EXE
C:\PROGRAM FILES\NETWORK ASSOCIATES\PGP\IKESERVICE.EXE
C:\WINDOWS\EXPLORER.EXE
C:\WINDOWS\SYSTEM\SYSTRAY.EXE
C:\PROGRAM FILES\HP CD-DVD\UMBRELLA\HPCDTRAY.EXE
C:\WINDOWS\TASKMON.EXE
C:\WINDOWS\SYSTEM\DLA\TFSWCTRL.EXE
C:\PROGRAM FILES\COMMON FILES\SYMANTEC SHARED\CCAPP.EXE
C:\PROGRAM FILES\ECHO\PFSVIEW.EXE
C:\PROGRAM FILES\SETI@HOME\SETI@HOME.EXE
C:\PROGRAM FILES\BELKIN BULLDOG PLUS\UPSD.EXE
C:\PROGRAM FILES\MESSENGER\MSMSGS.EXE
C:\WINDOWS\RunDLL.exe
C:\PROGRAM FILES\MATROX MGA POWERDESK\QDESK\MGAQDESK.EXE
C:\PROGRAM FILES\MATROX MGA POWERDESK\MGACTRL.EXE
C:\PROGRAM FILES\NETWORK ASSOCIATES\PGP\PGPTRAY.EXE
C:\PROGRAM FILES\ECHO\ENGINE.EXE
C:\PROGRAM FILES\ECHO\TASKBAR.EXE
C:\WINDOWS\SYSTEM\WMIEXE.EXE
C:\WINDOWS\SYSTEM\SPOOL32.EXE
C:\WINDOWS\SYSTEM\RNAAPP.EXE
C:\WINDOWS\SYSTEM\TAPISRV.EXE
C:\PROGRAM FILES\INTERNET EXPLORER\IEXPLORE.EXE
C:\PROGRAM FILES\OUTLOOK EXPRESS\MSIMN.EXE
C:\WINDOWS\SYSTEM\PSTORES.EXE
C:\WINDOWS\SYSTEM\DDHELP.EXE
F:\DOWNLOADED SOFTWARE\DIAGONISTICS\STARTUPLIST.EXE

--------------------------------------------------

******************************************************************************************************************
I RENAMED THE FOLDER 'StartUp' TO 'BeepUp' AND REBOOTED. Defrag still launched. Rod 01/03/02 11:16 AM
The interesting thing is that these three files are three of the five that are re-checked during bootup!
This was done many boots prior to this one. Unless Windows tracks and corrects for name changes here
this test should have cleared the StartUp folder from complicity in my problem.
******************************************************************************************************************
Listing of startup folders

Shell folders Startup:
[C:\WINDOWS\Start Menu\Programs\StartUp]
Microsoft Office Fast Start.lnk = C:\MSOffice\Office\FASTBOOT.EXE
PGPtray.lnk = C:\Program Files\Network Associates\PGP\PGPTray.exe
Microsoft Office Shortcut Bar.lnk = C:\WINDOWS\DEFRAG.EXE

--------------------------------------------------

Autorun entries from Registry:
HKLM\Software\Microsoft\Windows\CurrentVersion\Run

iamapp = C:\Program Files\Norton Internet Security\IAMAPP.EXE
SystemTray = SysTray.Exe
EM_EXEC = C:\PROGRA~1\LOGITECH\MOUSEWAR\SYSTEM\EM_EXEC.EXE
ScanRegistry = C:\WINDOWS\scanregw.exe /autorun
HP CD-DVD = C:\Program Files\HP CD-DVD\Umbrella\hpcdtray.exe
TaskMonitor = C:\WINDOWS\taskmon.exe
dla = C:\WINDOWS\system\dla\tfswctrl.exe
ccApp = "C:\Program Files\Common Files\Symantec Shared\ccApp.exe "
1Disk Monitor = C:\Program Files\Echo\pfsview.exe
seticlient = C:\Program Files\SETI@home\SETI@home.exe -min
CriticalUpdate = C:\WINDOWS\SYSTEM\wucrtupd.exe -startup
UPSentry Smart 2000 = C:\Program Files\Belkin Bulldog Plus\upsd.exe

--------------------------------------------------

Autorun entries from Registry:
HKLM\Software\Microsoft\Windows\CurrentVersion\RunServices

nisserv = C:\Program Files\Norton Internet Security\NISSERV.EXE
SchedulingAgent = mstask.exe
ccEvtMgr = "C:\Program Files\Common Files\Symantec Shared\ccEvtMgr.exe "
Nisum = C:\Program Files\Norton Internet Security\NISUM.EXE
ccPxySvc = C:\PROGRA~1\NORTONIN\CCPXYSVC.EXE
ScriptBlocking = "C:\Program Files\Common Files\Symantec Shared\Script Blocking\SBServ.exe" -reg
IKEService95 = C:\Program Files\Network Associates\PGP\IKEService.exe

--------------------------------------------------

Autorun entries from Registry:
HKCU\Software\Microsoft\Windows\CurrentVersion\Run

MSMSGS = C:\Program Files\Messenger\msmsgs.exe /background
Taskbar Display Controls = RunDLL deskcp16.dll,QUICKRES_RUNDLLENTRY
LDM = C:\Program Files\Desktop Messenger\8876480\Program\BackWeb-8876480.exe
Matrox QuickDesk = C:\Program Files\Matrox MGA PowerDesk\QDesk\mgaqdesk.exe

--------------------------------------------------

Enumerating Active Setup stub paths:
HKLM\Software\Microsoft\Active Setup\Installed Components
(* = disabled by HKCU twin)

[{44BBA840-CC51-11CF-AAFA-00AA00B6015C}] *
StubPath = rundll32.exe advpack.dll,UserInstStubWrapper {44BBA840-CC51-11CF-AAFA-00AA00B6015C}

[{89820200-ECBD-11cf-8B85-00AA005B4383}] *
StubPath = rundll32.exe advpack.dll,UserInstStubWrapper {89820200-ECBD-11cf-8B85-00AA005B4383}

[{7790769C-0471-11d2-AF11-00C04FA35D02}] *
StubPath = rundll32.exe advpack.dll,UserInstStubWrapper {7790769C-0471-11d2-AF11-00C04FA35D02}

[>PerUser_MSN_Clean] *
StubPath = C:\WINDOWS\msnmgsr1.exe

[PerUser_LinkBar_URLs] *
StubPath = C:\WINDOWS\COMMAND\sulfnbk.exe /L

[{9EF0045A-CDD9-438e-95E6-02B9AFEC8E11}] *
StubPath = C:\WINDOWS\SYSTEM\updcrl.exe -e -u C:\WINDOWS\SYSTEM\verisignpub1.crl

--------------------------------------------------

Load/Run keys from C:\WINDOWS\WIN.INI:

load=
run=

--------------------------------------------------

Shell & screensaver key from C:\WINDOWS\SYSTEM.INI:

Shell=Explorer.exe
SCRNSAVE.EXE=
drivers=MMSYSTEM.DLL CTPNPSCN.DRV power.drv

--------------------------------------------------

Checking for EXPLORER.EXE instances:

C:\WINDOWS\Explorer.exe: PRESENT!

C:\Explorer.exe: not present
C:\WINDOWS\Explorer\Explorer.exe: not present
C:\WINDOWS\System\Explorer.exe: not present
C:\WINDOWS\System32\Explorer.exe: not present
C:\WINDOWS\Command\Explorer.exe: not present

--------------------------------------------------

C:\WINDOWS\WININIT.BAK listing:
(Created 31/12/2002, 12:34:10)

[Rename]
NUL=
NUL=
NUL=
NUL=
NUL=
NUL=
NUL=
NUL=
NUL=
NUL=
NUL=
NUL=
NUL=
NUL=
NUL=
NUL=
NUL=
NUL=
NUL=
NUL=

--------------------------------------------------

C:\AUTOEXEC.BAT listing:

SET CLASSPATH=C:\Program Files\PhotoDeluxe 2.0\AdobeConnectables
SET MGA=C:\MGA\SETUP\
SET SOUND=C:\PROGRA~1\CREATIVE\CTSND
SET MIDI=SYNTH:1 MAP:E MODE:0
SET BLASTER=A220 I5 D1 H5 P330 E620 T6
SET MSINPUT=C:\MSINPUT
SET PATH=C:\WINDOWS;C:\WINDOWS\COMMAND;C:\PAGEMGR\IMGFOLIO;C:\PAGEMGR;c:\batch;C:\LL5\
C:\WINDOWS\COMMAND\doskey

--------------------------------------------------

C:\CONFIG.SYS listing:

Device = C:\WINDOWS\Himem.sys
dos=high,umb

--------------------------------------------------

C:\WINDOWS\DOSSTART.BAT listing:

c:\windows\ctpnp
C:\PROGRA~1\LOGITECH\MOUSEWAR\MOUSE.EXE
lh C:\WINDOWS\COMMAND\mscdex.exe /d:mscd001

--------------------------------------------------

Checking for superhidden extensions:

.lnk: HIDDEN! (arrow overlay: yes)
.pif: HIDDEN! (arrow overlay: yes)
.exe: not hidden
.com: not hidden
.bat: not hidden
.hta: not hidden
.scr: not hidden
.shs: HIDDEN!
.shb: HIDDEN!
.vbs: not hidden
.vbe: not hidden
.wsh: not hidden
.scf: HIDDEN! (arrow overlay: NO!)
.url: HIDDEN! (arrow overlay: yes)
.js: not hidden
.jse: not hidden

--------------------------------------------------

Enumerating Browser Helper Objects:

(no name) - C:\PROGRAM FILES\ADOBE\ACROBAT 5.0\READER\ACTIVEX\ACROIEHELPER.OCX - {06849E9F-C8D7-4D59-B87D-784B7D6BE0B3}
NAV Helper - C:\Program Files\Norton AntiVirus\NavShExt.dll - {BDF3E430-B101-42AD-A544-FADC6B084872}

--------------------------------------------------

Enumerating Task Scheduler jobs:

Maintenance-ScanDisk.job
Maintenance-Disk cleanup.job
Symantec NetDetect.job
Windows Critical Update Notification.job
Norton AntiVirus - Scan my computer.job
Norton AntiVirus - Drives C,D,F,G,H.job

--------------------------------------------------

End of section 1

 

Start of section 2. This is the last section.
++
Enumerating Download Program Files:

[Survey Control]
InProcServer32 = C:\WINDOWS\DOWNLO~1\SURVEY.OCX
CODEBASE = http://activex.microsoft.com/controls/mtswizards/Survey.ocx

[MSNBC News Browser Control 2.3]
InProcServer32 = C:\WINDOWS\DOWNLOADED PROGRAM FILES\NEWSB23.OCX
CODEBASE = http://www.msnbc.com/tools/newsbrowser/nb0330.cab

[Microsoft Search Settings Control]
InProcServer32 = C:\WINDOWS\DOWNLOADED PROGRAM FILES\SEARCHSETTINGS.OCX
CODEBASE = http://home.microsoft.com/search/lobby/searchsettings.cab

[ActiveX Marquee Control]
InProcServer32 = C:\WINDOWS\DOWNLOADED PROGRAM FILES\AXMRQUEE.OCX
CODEBASE = http://msdn.microsoft.com/vbasic/prodinfo/cce/samples/AxMrquee.CAB

[MSNBC News Menu Control 3.0]
InProcServer32 = C:\WINDOWS\DOWNLOADED PROGRAM FILES\NEWSM30.OCX
CODEBASE = http://www.msnbc.com/download/nm0713.cab

[ActiveCtl Class]
InProcServer32 = C:\WINDOWS\DOWNLOADED PROGRAM FILES\SETUPCTL.DLL
CODEBASE = http://www.microsoft.com/ie/ie40/download/cdf/setupctl.cab
OSD = C:\WINDOWS\Downloaded Program Files\setupctl.osd

[SurveyCtl Class]
InProcServer32 = C:\WINDOWS\DOWNLOADED PROGRAM FILES\SURVEYCONTROL.OCX
CODEBASE = http://activex.microsoft.com/controls/mtswizards/SurveyControl.ocx

[Shockwave Flash Object]
InProcServer32 = C:\WINDOWS\SYSTEM\MACROMED\FLASH\SWFLASH.OCX
CODEBASE = http://download.macromedia.com/pub/shockwave/cabs/flash/swflash.cab

[CV3 Class]
InProcServer32 = C:\WINDOWS\SYSTEM\WUV3IS.DLL
CODEBASE = http://windowsupdate.microsoft.com/R1024/V31Controls/x86/w98/en/actsetup.cab

[WebResponseAttachments Control]
InProcServer32 = C:\WINDOWS\DOWNLO~1\FILETR~1.OCX
CODEBASE = https://webresponse.one.microsoft.com/WRActiveX/FileXfer.cab

[SurveyCtl35 Class]
InProcServer32 = C:\WINDOWS\DOWNLOADED PROGRAM FILES\SURVEYCONTROL35.DLL
CODEBASE = http://activex.microsoft.com/controls/mtswizards/sw35.cab

[McAfee Clinic AV Installer Control]
InProcServer32 = C:\WINDOWS\MCBIN\AV\MGAVINST.DLL
CODEBASE = http://mcafee.www.conxion.com/molbin/clinic/virusscan/mgavinst.cab

[Microsoft.WinRep]
InProcServer32 = C:\WINDOWS\SYSTEM\WINREP.DLL
CODEBASE = https://webresponse.one.microsoft.com/WRActiveX/winrep.cab

[OPUCatalog Class]
InProcServer32 = C:\WINDOWS\SYSTEM\OPUC.DLL
CODEBASE = http://office.microsoft.com/productupdates/content/opuc.cab

[ActiveDataObj Class]
InProcServer32 = C:\WINDOWS\DOWNLOADED PROGRAM FILES\ACTIVEDATA.DLL
CODEBASE = https://www-secure.symantec.com/techsupp/activedata/ActiveData.cab

[Symantec RuFSI Registry Information Class]
InProcServer32 = C:\WINDOWS\DOWNLOADED PROGRAM FILES\RUFSI.DLL
CODEBASE = http://security3.norton.com/SSC/SharedContent/sc/bin/cabsa.cab

[Update Class]
InProcServer32 = C:\WINDOWS\SYSTEM\IUCTL.DLL
CODEBASE = http://v4.windowsupdate.microsoft.com/CAB/x86/ansi/iuctl.CAB?37592.2709143519

[symsupportutil]
InProcServer32 = C:\Program Files\Java\j2re1.4.1_01\bin\npjpi141_01.dll
CODEBASE = https://www-secure.symantec.com/techsupp/activedata/symsupportutil.CAB
OSD = C:\WINDOWS\Downloaded Program Files\OSD34.OSD

--------------------------------------------------
End of report, 11,274 bytes
Report generated in 1.366 seconds

 

Rod

Rod buddy I am sorry but I passed this thread because you seemed to have plenty of help from all the activity.

Still going on!?

As I understand it you are only trying to fix defrag not to run at every startup?

This appears to come from the Microsoft Office shortcut bar. Which is a useless resource hog anyway. Uninstall this. Who needs it. Begin by going into the shortcut bar config and tell it not to load at startup.

Then uninstall it from add/remove!

Would be better to do the add/remove in safe mode.

Mike

Or maybe I don't understand your problem??

 

Thanks Mflynn,

Problem solved.

I did not have MSOffice Shortcut in my Add/Remove list. I went back to C:\Window\Start Menu\Programs\Startup and obtained the properties for the MSOffice Shortcut Bar shortcut. The target was the Defrag.exe file (not greyed out. See below.). I deleted the target, rebooted and found that 'My Computer' had replaced Defrag on my desktop.

Going back to the MSOffice Shortcut Bar shortcut properties, I found that the target had been replaced--- by Windows --- with 'My Computer'. It was greyed out. I deleted the MSOffice Shortcut Bar shortcut from the Startup folder. The reboot was 'clean'.

Evidently Windows indeed keeps track of the name of the Startup folder. I had earlier tried renaming it to Beepup. That did not change the launching of Defrag. That threw me off track.

Thanks folks. I've been trying to get to the bottom of this one for almost three solid days.

 

Yep

Windows does indeed need the startup folder. I wax poetic.

Now if my fingers could spell as well as my mind, that would be swell!

mike