Over 1 million tech questions and answers.

Apps Deleted from Registry Still Open @ Startup

Q: Apps Deleted from Registry Still Open @ Startup

I use Windows XP Home Edition, have 2 GB of RAM and a 3.0 Ghz. Pentium 4 Processor. I use BSafe Online Internet Suite which includes a virus scanner, firewall, popup blocker, privacy of information protector, and Internet filter with a lockout feature to control objectionable sites on the web. I also us AdAware to control spyware.

My main problem consists of two applications I removed from my registry by using Add/Remove Programs. One was the ParetoLogic Driver Updater, and the other, The Weather Channel's Desktop Weather. Even after this, they still kept starting up and displaying flash screens on my monitor. I have to end the programs manually every system startup which really slows me down! I then went into regedit and searched for both of these programs. I deleted all files I could find related to TWC and PTL. I still have the same problem. I will now post my DDS log below and attach the other two as directed. Please be patient with me. This is my first time using this forum.

I am also concerned that I may have spyware or malware on my main hard drive C:, and backup E: drive, without knowing it. I read a news article in a British PC magazine which warned that spyware, malware, and virus detection accuracy was less effective now than before 2007.

DDS (Ver_09-10-26.01) - NTFSx86
Run by Brian K. Welch at 23:49:12.32 on Tue 10/27/2009
Internet Explorer: 8.0.6001.18702 BrowserJavaVersion: 1.6.0_10
Microsoft Windows XP Home Edition 5.1.2600.3.1252.1.1033.18.2415.1662 [GMT -5:00]

AV: Avanquest VirusScanner Pro *On-access scanning enabled* (Updated) {6A383D4C-7657-408f-BD0D-B379B5C7C3BE}

============== Running Processes ===============

C:\WINDOWS\system32\svchost -k DcomLaunch
C:\WINDOWS\System32\svchost.exe -k netsvcs
C:\Program Files\Lavasoft\Ad-Aware\AAWService.exe
C:\Program Files\Common Files\LightScribe\LSSrvc.exe
C:\Program Files\Common Files\Lanovation\PrismXL\PRISMXL.SYS
C:\Program Files\Common Files\Seagate\Schedule2\schedul2.exe
C:\WINDOWS\System32\svchost.exe -k imgsvc
C:\Program Files\Canon\CAL\CALMAIN.exe
C:\Program Files\Seagate\DiscWizard\DiscWizardMonitor.exe
C:\Program Files\Seagate\DiscWizard\TimounterMonitor.exe
C:\Program Files\Common Files\Seagate\Schedule2\schedhlp.exe
C:\Program Files\Lavasoft\Ad-Aware\AAWTray.exe
C:\Program Files\Microsoft IntelliPoint\ipoint.exe
C:\Program Files\McAfee Security Scan\1.0.150\SSScheduler.exe
C:\Program Files\Windows Desktop Search\WindowsSearch.exe
c:\Program Files\Microsoft IntelliPoint\dpupdchk.exe
C:\Program Files\Mozilla Firefox\firefox.exe
C:\Documents and Settings\Brian K. Welch\Desktop\dds.scr

============== Pseudo HJT Report ===============

uStart Page = hxxp://att.my.yahoo.com/
uURLSearchHooks: H - No File
BHO: StumbleUpon Launcher: {145b29f4-a56b-4b90-bbac-45784ebebbb7} - c:\program files\stumbleupon\StumbleUponIEBar.dll
BHO: Adobe PDF Link Helper: {18df081c-e8ad-4283-a596-fa578c2ebdc3} - c:\program files\common files\adobe\acrobat\activex\AcroIEHelperShim.dll
BHO: KeyScramblerBHO Class: {2b9f5787-88a5-4945-90e7-c4b18563bc5e} - c:\program files\keyscrambler\KeyScramblerIE.dll
BHO: Java(tm) Plug-In SSV Helper: {761497bb-d6f0-462c-b6eb-d4daf1d92d43} - c:\program files\java\jre6\bin\ssv.dll
BHO: Windows Live Sign-in Helper: {9030d464-4c02-4abf-8ecc-5164760863c6} - c:\program files\common files\microsoft shared\windows live\WindowsLiveLogin.dll
BHO: LastPass Browser Helper Object: {95d9ecf5-2a4d-4550-be49-70d42f71296e} - c:\program files\lastpass\LPBar.dll
BHO: Freecause Toolbar BHO: {9ebf8aaf-0a31-4786-909a-97a0ef101743} - c:\program files\addthis toolbar\Toolbar.dll
BHO: Java(tm) Plug-In 2 SSV Helper: {dbc80044-a445-435b-bc74-9c25c1c588a9} - c:\program files\java\jre6\bin\jp2ssv.dll
BHO: Bsecure Popup Blocker: {e0019445-4c1f-414d-a70e-ad80f231c584} - c:\windows\system32\inetcntrl\popupkil\BsafeBHO.dll
BHO: EpsonToolBandKicker Class: {e99421fb-68dd-40f0-b4ac-b7027cae2f1a} - c:\program files\epson\epson web-to-page\EPSON Web-To-Page.dll
BHO: OToolbarHelper Class: {ead3a971-6a23-4246-8691-c9244e858967} - c:\program files\paypal\paypal plug-in\PayPalHelper.dll
BHO: XBTBPos00 Class: {fcbccb87-9224-4b8d-b117-f56d924beb18} - c:\program files\fast browser search\ie\FBStoolbar.dll
TB: Fast Browser Search: {1bb22d38-a411-4b13-a746-c2a4f4ec7344} - c:\program files\fast browser search\ie\FBStoolbar.dll
TB: Bsecure Popup Blocker: {e0019445-4c1f-414d-a70e-ad80f231c584} - c:\windows\system32\inetcntrl\popupkil\BsafeBHO.dll
TB: LastPass Toolbar: {9f6b5cc3-5c7b-4b5c-97af-19dec1e380e5} - c:\program files\lastpass\LPBar.dll
TB: AddThis Toolbar: {b43176cc-4d9e-493b-a636-d9cbfe39c6da} - c:\program files\addthis toolbar\Toolbar.dll
TB: EPSON Web-To-Page: {ee5d279f-081b-4404-994d-c6b60aaeba6d} - c:\program files\epson\epson web-to-page\EPSON Web-To-Page.dll
TB: {EF99BD32-C1FB-11D2-892F-0090271D4F88} - No File
TB: {D4027C7F-154A-4066-A1AD-4243D8127440} - No File
EB: {32683183-48a0-441b-a342-7c2a440a9478} - No File
uRun: [CTFMON.EXE] c:\windows\system32\ctfmon.exe
uRun: [DW6] "c:\program files\the weather channel fw\desktop\DesktopWeather.exe"
uRun: [Philips Intelligent Agent] "c:\program files\philips intelligent agent\Philips Intelligent Agent.exe" /SILENT
uRun: [Pareto_Update] c:\program files\common files\paretologic\uus2\Pareto_Update.exe
uRun: [Google Update] "c:\documents and settings\brian k. welch\local settings\application data\google\update\GoogleUpdate.exe" /c
mRun: [HelpCenter4.1] c:\program files\fastaccessdsl\helpcenter43\bin\sprtcmd.exe /P HelpCenter4.1
mRun: [IgfxTray] c:\windows\system32\igfxtray.exe
mRun: [DiscWizardMonitor.exe] c:\program files\seagate\discwizard\DiscWizardMonitor.exe
mRun: [AcronisTimounterMonitor] c:\program files\seagate\discwizard\TimounterMonitor.exe
mRun: [Seagate Scheduler2 Service] "c:\program files\common files\seagate\schedule2\schedhlp.exe"
mRun: [Ad-Watch] c:\program files\lavasoft\ad-aware\AAWTray.exe
mRun: [QuickTime Task] "c:\program files\quicktime\qttask.exe" -atboottime
mRun: [PRONoMgr.exe] c:\program files\intel\ncs\proset\PRONoMgr.exe
mRun: [Adobe Reader Speed Launcher] "c:\program files\adobe\reader 9.0\reader\Reader_sl.exe"
mRun: [KernelFaultCheck] %systemroot%\system32\dumprep 0 -k
mRun: [IntelliPoint] "c:\program files\microsoft intellipoint\ipoint.exe"
mRun: [InetCntrl] c:\windows\system32\inetcntrl\InetCntrl.exe
dRun: [CTFMON.EXE] c:\windows\system32\ctfmon.exe
StartupFolder: c:\docume~1\alluse~1\startm~1\programs\startup\mcafee~1.lnk - c:\program files\mcafee security scan\1.0.150\SSScheduler.exe
StartupFolder: c:\docume~1\alluse~1\startm~1\programs\startup\micros~1.lnk - c:\program files\microsoft office\office10\OSA.EXE
StartupFolder: c:\docume~1\alluse~1\startm~1\programs\startup\window~1.lnk - c:\program files\windows desktop search\WindowsSearch.exe
IE: LastPass - file://c:\program files\lastpass\context.html?cmd=lastpass
IE: LastPass Fill Forms - file://c:\program files\lastpass\context.html?cmd=fillforms
IE: StumbleUpon PhotoBlog It! - StumbleUponIEBar.dll/blogimage
IE: {5C106A59-CC3C-4caa-81A4-6D909B5ACE23} - {B745F984-EF2E-40D6-A9AC-D8CED7230E61} - c:\program files\keyscrambler\KeyScramblerIE.dll
LSP: InetCntrl0013.dll
Trusted Zone: att.com\www
Trusted Zone: att.net
Trusted Zone: att.net\attreg
Trusted Zone: att.net\home.secureapp
Trusted Zone: att.net\support
Trusted Zone: att.net\webauth
Trusted Zone: att.net\webmail
Trusted Zone: bellsouth.net\home
Trusted Zone: brainstatetechnologies.com\www
Trusted Zone: bsafehome.com\www
Trusted Zone: bsafeonline.com\www
Trusted Zone: conservapedia.com\www
Trusted Zone: facebook.com\login
Trusted Zone: facebook.com\www
Trusted Zone: familysearch.org\www
Trusted Zone: familysearch.org\www.new
Trusted Zone: lds.org\www
Trusted Zone: mormon.org\www
Trusted Zone: mrmovietimes.com\www
Trusted Zone: myatt.net
Trusted Zone: providentliving.org\www
Trusted Zone: regionsbank.com\www
DPF: Microsoft XML Parser for Java - file:///C:/WINDOWS/Java/classes/xmldso.cab
DPF: {02BCC737-B171-4746-94C9-0D8A0B2C0089} - hxxp://office.microsoft.com/templates/ieawsdc.cab
DPF: {05CA9FB0-3E3E-4B36-BF41-0E3A5CAA8CD8} - hxxp://download.microsoft.com/download/e/4/9/e494c802-dd90-4c6b-a074-469358f075a6/OGAControl.cab
DPF: {0CCA191D-13A6-4E29-B746-314DEE697D83} - hxxp://upload.facebook.com/controls/2008.10.10_v5.5.8/FacebookPhotoUploader5.cab
DPF: {4F1E5B1A-2A80-42CA-8532-2D05CB959537} - hxxp://gfx1.hotmail.com/mail/w3/resources/MSNPUpld.cab
DPF: {5D637FAD-E202-48D1-8F18-5B9C459BD1E3} - hxxp://fb.familylink.com/we_are_related/stream/core/lib/AurigmaImageUploader/ImageUploader5.cab
DPF: {5ED80217-570B-4DA9-BF44-BE107C0EC166} - hxxp://cdn.scan.onecare.live.com/resource/download/scanner/wlscbase8942.cab
DPF: {6D2EF4B4-CB62-4C0B-85F3-B79C236D702C} - hxxp://www.facebook.com/controls/contactx.dll
DPF: {6E32070A-766D-4EE6-879C-DC1FA91D2FC3} - hxxp://www.update.microsoft.com/microsoftupdate/v6/V5Controls/en/x86/client/muweb_site.cab?1224931848421
DPF: {8100D56A-5661-482C-BEE8-AFECE305D968} - hxxp://upload.facebook.com/controls/2009.07.28_v5.5.8.1/FacebookPhotoUploader55.cab
DPF: {8AD9C840-044E-11D1-B3E9-00805F499D93} - hxxp://java.sun.com/update/1.6.0/jinstall-1_6_0_10-windows-i586.cab
DPF: {8FFBE65D-2C9C-4669-84BD-5829DC0B603C} - hxxp://fpdownload.macromedia.com/get/flashplayer/current/polarbear/ultrashim.cab
DPF: {C7DB51B4-BCF7-4923-8874-7F1A0DC92277} - hxxp://office.microsoft.com/officeupdate/content/opuc4.cab
DPF: {CAFEEFAC-0014-0002-0000-ABCDEFFEDCBA} - hxxp://java.sun.com/products/plugin/autodl/jinstall-142-windows-i586.cab
DPF: {CAFEEFAC-0016-0000-0005-ABCDEFFEDCBA} - hxxp://java.sun.com/update/1.6.0/jinstall-1_6_0_05-windows-i586.cab
DPF: {CAFEEFAC-0016-0000-0007-ABCDEFFEDCBA} - hxxp://java.sun.com/update/1.6.0/jinstall-1_6_0_07-windows-i586.cab
DPF: {CAFEEFAC-0016-0000-0010-ABCDEFFEDCBA} - hxxp://java.sun.com/update/1.6.0/jinstall-1_6_0_10-windows-i586.cab
DPF: {CAFEEFAC-FFFF-FFFF-FFFF-ABCDEFFEDCBA} - hxxp://java.sun.com/update/1.6.0/jinstall-1_6_0_10-windows-i586.cab
DPF: {E77F23EB-E7AB-4502-8F37-247DBAF1A147} - hxxp://gfx2.hotmail.com/mail/w4/pr01/photouploadcontrol/MSNPUpld.cab
DPF: {EAC139A9-D22D-4C29-8D1C-252BE63750F9} - hxxp://www.cooliris.com/shared/plinstll.cab
Handler: msero - {B0D92A71-886B-453B-A649-1B91F93801E7} - c:\program files\common files\microsoft shared\encarta researcher\MSERO.DLL
Notify: igfxcui - igfxdev.dll
SSODL: WPDShServiceObj - {AAA288BA-9A4C-45B0-95D7-94D524869DB5} - c:\windows\system32\WPDShServiceObj.dll
SEH: Windows Desktop Search Namespace Manager: {56f9679e-7826-4c84-81f3-532071a8bcc5} - c:\program files\windows desktop search\MSNLNamespaceMgr.dll
LSA: Authentication Packages = msv1_0 relog_ap

================= FIREFOX ===================

FF - ProfilePath - c:\docume~1\briank~1.wel\applic~1\mozilla\firefox\profiles\8ky5kyia.default\
FF - prefs.js: browser.startup.homepage - hxxp://att.my.yahoo.com/
FF - prefs.js: network.proxy.type - 2
FF - component: c:\documents and settings\brian k. welch\application data\mozilla\firefox\profiles\8ky5kyia.default\extensions\{62760fd6-b943-48c9-ab09-f99c6fe96088}\platform\winnt\components\ebayAccessComponent.dll
FF - component: c:\documents and settings\brian k. welch\application data\mozilla\firefox\profiles\8ky5kyia.default\extensions\{62760fd6-b943-48c9-ab09-f99c6fe96088}\platform\winnt\components\ebayShortcutMaker.dll
FF - component: c:\documents and settings\brian k. welch\application data\mozilla\firefox\profiles\8ky5kyia.default\extensions\{a7c6cf7f-112c-4500-a7ea-39801a327e5f}\platform\winnt_x86-msvc\components\ipc.dll
FF - component: c:\documents and settings\brian k. welch\application data\mozilla\firefox\profiles\8ky5kyia.default\extensions\[email protected]\components\KeyScramblerIE.dll
FF - component: c:\documents and settings\brian k. welch\application data\mozilla\firefox\profiles\8ky5kyia.default\extensions\[email protected]\platform\winnt_x86-msvc\components\WeaveCrypto.dll
FF - component: c:\documents and settings\brian k. welch\application data\mozilla\firefox\profiles\8ky5kyia.default\extensions\[email protected]\components\cooliris.dll
FF - component: c:\documents and settings\brian k. welch\application data\mozilla\firefox\profiles\8ky5kyia.default\extensions\[email protected]\platform\winnt_x86-msvc\components\lpxpcom.dll
FF - plugin: c:\documents and settings\brian k. welch\application data\move networks\plugins\npqmp071504000001.dll
FF - plugin: c:\documents and settings\brian k. welch\application data\mozilla\firefox\profiles\8ky5kyia.default\extensions\{e2883e8f-472f-4fb0-9522-ac9bf37916a7}\plugins\np_gp.dll
FF - plugin: c:\documents and settings\brian k. welch\application data\mozilla\firefox\profiles\8ky5kyia.default\extensions\[email protected]\plugins\npcoolirisplugin.dll
FF - plugin: c:\documents and settings\brian k. welch\local settings\application data\google\update\\npGoogleOneClick8.dll
FF - plugin: c:\documents and settings\brian k. welch\local settings\application data\yahoo!\browserplus\2.4.17\plugins\npybrowserplus_2.4.17.dll
FF - plugin: c:\program files\microsoft\office live\npOLW.dll
FF - plugin: c:\program files\opera\program\plugins\np_gp.dll
FF - plugin: c:\program files\virtual earth 3d\npVE3D.dll
FF - HiddenExtension: Microsoft .NET Framework Assistant: {20a82645-c095-46ed-80e3-08825760534b} - c:\windows\microsoft.net\framework\v3.5\windows presentation foundation\dotnetassistantextension\
FF - HiddenExtension: Java Console: No Registry Reference - c:\program files\mozilla firefox\extensions\{CAFEEFAC-0016-0000-0005-ABCDEFFEDCBA}
FF - HiddenExtension: Java Console: No Registry Reference - c:\program files\mozilla firefox\extensions\{CAFEEFAC-0016-0000-0007-ABCDEFFEDCBA}
FF - HiddenExtension: Java Console: No Registry Reference - c:\program files\mozilla firefox\extensions\{CAFEEFAC-0016-0000-0010-ABCDEFFEDCBA}
FF - HiddenExtension: Java Console: No Registry Reference - c:\program files\mozilla firefox\extensions\{CAFEEFAC-0016-0000-0011-ABCDEFFEDCBA}

============= SERVICES / DRIVERS ===============

R0 Lbd;Lbd;c:\windows\system32\drivers\Lbd.sys [2009-1-20 64288]
R1 bsofrwl;bsofrwl;c:\windows\system32\drivers\bsofrwl.sys [2009-4-21 29024]
R2 ISD;Intel(r) 82802 Firmware Hub Device (Intel(r) Security Driver);c:\windows\system32\drivers\ISECDRV.SYS [2009-4-1 32108]
R2 Lavasoft Ad-Aware Service;Lavasoft Ad-Aware Service;c:\program files\lavasoft\ad-aware\AAWService.exe [2009-9-24 1170768]
R2 SgtSch2Svc;Seagate Scheduler2 Service;c:\program files\common files\seagate\schedule2\schedul2.exe [2008-6-24 431384]
R3 KeyScrambler;KeyScrambler;c:\windows\system32\drivers\keyscrambler.sys [2009-10-8 115312]
S2 LANPkt;Linksys LANPkt Protocol Driver;c:\windows\system32\drivers\lanpkt.sys --> c:\windows\system32\drivers\LANPkt.sys [?]
S2 NwSapAgent;SAP Agent;c:\windows\system32\svchost.exe -k netsvcs [2003-3-31 14336]
S2 tmpreflt;tmpreflt;\??\c:\progra~1\avanqu~1\fix-it\tmpreflt.sys --> c:\progra~1\avanqu~1\fix-it\tmpreflt.sys [?]
S3 getPlusHelper;getPlus(R) Helper;c:\windows\system32\svchost.exe -k getPlusHelper [2003-3-31 14336]
S3 MailScan;MailScan;\??\c:\progra~1\avanqu~1\fix-it\mailscan.sys --> c:\progra~1\avanqu~1\fix-it\MailScan.sys [?]
S3 StumbleUponUpdateService;StumbleUponUpdateService;c:\program files\stumbleupon\StumbleUponUpdateService.exe [2008-12-18 120168]

=============== Created Last 30 ================

2009-10-14 03:58:02 0 dc-h--w- c:\docume~1\alluse~1\applic~1\{CFBD8779-FAAB-4357-84F2-1EC8619FADA6}
2009-10-08 06:36:12 115312 ----a-w- c:\windows\system32\drivers\keyscrambler.sys
2009-10-08 06:36:11 0 d-----w- c:\program files\KeyScrambler
2009-10-06 09:53:50 0 d-----w- c:\docume~1\briank~1.wel\applic~1\FCTB000061107
2009-10-06 09:52:53 0 d-----w- c:\program files\AddThis Toolbar
2009-10-02 18:02:10 0 d-----w- c:\program files\LastPass
2009-09-30 06:24:00 0 d-----w- c:\program files\IrfanView
2009-09-30 03:37:17 0 d-----w- c:\documents and settings\brian k. welch\dwhelper

==================== Find3M ====================

2009-10-26 19:21:22 12288 ----a-w- C:\mtwb.dat
2009-10-21 04:05:25 9468 ----a-w- c:\docume~1\briank~1.wel\applic~1\wklnhst.dat
2009-09-23 12:55:23 64288 ----a-w- c:\windows\system32\drivers\Lbd.sys
2009-09-18 12:36:50 131072 ----a-w- c:\windows\system32\datestamp.dll
2009-09-11 14:18:39 136192 ----a-w- c:\windows\system32\msv1_0.dll
2009-09-04 21:03:36 58880 ----a-w- c:\windows\system32\msasn1.dll
2009-09-03 09:17:47 15688 ----a-w- c:\windows\system32\lsdelete.exe
2009-08-29 08:08:21 916480 ----a-w- c:\windows\system32\wininet.dll
2009-08-26 08:00:21 247326 ----a-w- c:\windows\system32\strmdll.dll
2009-08-20 20:09:06 1193832 ----a-w- c:\windows\system32\FM20.DLL
2009-08-07 00:23:46 274288 ----a-w- c:\windows\system32\mucltui.dll
2009-08-07 00:23:46 215920 ----a-w- c:\windows\system32\muweb.dll
2009-08-05 09:01:48 204800 ----a-w- c:\windows\system32\mswebdvd.dll
2009-08-04 15:13:08 2145280 ----a-w- c:\windows\system32\ntoskrnl.exe
2009-08-04 14:20:09 2023936 ----a-w- c:\windows\system32\ntkrnlpa.exe

============= FINISH: 23:49:42.67 ===============

Read other answers
Preferred Solution: Apps Deleted from Registry Still Open @ Startup

I recommend downloading and running DAP. It can help sort out any driver and firmware related issues on your system

It's worked out well for many of us in the past.

You can download it direct from this link http://downloaddap.org. (This link will open the download page of DAP so you can save a copy to your computer.)


I’ve got two startup entries that can’t be deleted.

+ 1 File not found: Ú
+ 2 File not found: Ú

They have the ability to clone most startup entries, and they can’t be permanently
Over the last year I have downloaded and ran multiple scans, with various malware applications from quite a few web site help forums.
None gave any indication of malware present, but I suppose you can’t rule it out.
The first time I notice something odd was with Misconfig, I had three startup entries for “SISUSBRG”.
I deleted two of them and disabled the original one.
The next time they re-appeared was as 1 and 2 program entries

I purchase the computer from PC world about 7 years ago.
Below is a brief description.
The computer is Advent T9101 Pentium 4
661FM2 series MS 7060 micro atx main board
SIS 661X chipset
Audio AC97
Realtek ALC655 S/W audio codec

Dixon’s reworked Windows home edition operating system.
The software that I uninstalled when I first purchase the computer was the following.
Home Cinema
Power producer
Home office
Nero 6
The information I got from “Process Monitor” boot log was the following.
Process name:Explorer.exe
Operation:Reg Enum Value
Type:Reg Binary
Data:07 05 DA7

Can anyone help please ?
I am still paying extended warranty to PC world.

A:2 Registry startup entries that can't be deleted

Read other 16 answers

Well, I recently had the trojan win32.agent.pz on my computer, which infected ntos.exe on my computer and created a registry that starts it up along with winlogon.exe
After 2 days of trying everything I was able to delete the trojan off my computer, but I also had to delete the startup registry of winlogon.exe/ntos.exe (I tried editing out the ntos.exe from the binary, but it wouldnt accept the changes)

So now, I can boot my computer but as soon as I sign on to any account, it logs me out instantly, only showing the desktop for a split second.

I'm almost 98% sure its the winlogon.exe that isn't being executed at startup which means the accounts do not log on right.
I have checked my files on the recovery console and found out that winlogon.exe is still there and the trojans I deleted arent.
If I boot on Safe Mode(F8) the same login/instant logout happens with the admistrator account.

Is there any way I can change the startup programs so winlogon.exe is back on the list without having to log onto any accounts?

Right now I am considering buying an extra harddrive and restoring the new one to factory default and transfering the old data into the new one, seeing as this would be the cheapest option. Would this work to restore winlogon?

A:winlogon.exe startup registry deleted, cant log on

Read other 11 answers

first notice 2 startup entries when i was using CCleaner to clear temp files and cookies, so i deleted them.About 3 days later these 2 anonymous Registry entries were back.They look like the following"HKCU\run 1" "HKCU\run 2" no file name or file location.I then delete them from " HK_USERS/software/microsoft/windows/run", but about a week later they were back.this time they had cloned my anti virus startup file.I deleted both cloned virus startup files, but they came back again as you can see from HighJackThis log below.Logfile of Trend Micro HijackThis v2.0.2Scan saved at 19:17:37, on 18/02/2009Platform: Windows XP SP3 (WinNT 5.01.2600)MSIE: Internet Explorer v7.00 (7.00.6000.16791)Boot mode: NormalRunning processes:C:\WINDOWS\System32\smss.exeC:\WINDOWS\system32\winlogon.exeC:\WINDOWS\system32\services.exeC:\WINDOWS\system32\lsass.exeC:\WINDOWS\system32\svchost.exeC:\WINDOWS\System32\svchost.exeC:\Program Files\Alwil Software\Avast4\aswUpdSv.exeC:\Program Files\Alwil Software\Avast4\ashServ.exeC:\WINDOWS\Explorer.EXEC:\PROGRA~1\ALWILS~1\Avast4\ashDisp.exeC:\WINDOWS\system32\spoolsv.exeC:\Program Files\Alwil Software\Avast4\ashMaiSv.exeC:\Program Files\Alwil Software\Avast4\ashWebSv.exeC:\WINDOWS\system32\wuau... Read more

A:2 startup registry entries that will not stay deleted

Hello and welcome to Bleeping ComputerWe apologize for the delay in responding to your request for help. Here at Bleeping Computer we get overwhelmed at times, and we are trying our best to keep up. Please note that your topic was not intentionally overlooked. Our mission is to help everyone in need, but sometimes it takes just a little longer to get to every request for help.If you have since resolved the original problem you were having, we would appreciate you letting us know. If not please perform the following steps below so we can have a look at the current condition of your machine. If you have not done so, include a description of your problem, along with any steps you may have performed so far.Upon completing the steps below another staff member will review and take the steps necessary with you to get your machine back in working order clean and free of malware.If you have already posted a DDS log, please do so again, as your situation may have changed.Use the 'Add Reply' and add the new log to this thread.Thanks and again sorry for the delay.We need to see some information about what is happening in your machine. Please perform the following scan:Download DDS by sUBs from one of the following links. Save it to your desktop.DDS.comDDS.scrDDS.pifDouble click on the DDS icon, allow it to run.A small box will open, with an explaination about the tool. No input is needed, the scan is running.Notepad will open with the results.Follow the instructions that pop up for p... Read more

Read other 2 answers

Does anyone know how to clear out deleted Windows Store apps from the computer? When you go into the Windows Store and right click and choose 'your apps' the selection 'apps not istalled on this pc' still shows apps that I have deleted. I only installed on one device (unless they auto-install to the xbox360 also?). I cannot see how to clear out previously deleted apps. See attached pic to see what I am talking about.


A:Clear Deleted Store Apps (ie apps not istalled on this pc)

hope its not too soon to rebump...not critical but I want to figure this out...thx!

Read other 6 answers

I used a registry cleaner program and deleted some of registry values that I should not have, and of course I did not same the backup prior to deleting. Now my laptop wont charge or recognize that there is a battery. what can I do?

A:Registry cleaner deleted needed registry

Do a system restore from a restore point prior to using the reg cleaner.

Read other 14 answers

Tech Support Guy System Info Utility version
OS Version: Microsoft Windows 10 Home, 64 bit
Processor: Pentium(R) Dual-Core CPU T4500 @ 2.30GHz, Intel64 Family 6 Model 23 Stepping 10
Processor Count: 2
RAM: 3034 Mb
Graphics Card: Mobile Intel(R) 4 Series Express Chipset Family (Microsoft Corporation - WDDM 1.1)
Hard Drives: C: 283 GB (188 GB Free);
Motherboard: Dell Inc., 0N7J7M
Antivirus: Windows Defender, Enabled and Updated

Yesterday I ran the "Recovery and reset " programme on my laptop, after the programme ran and Windows was re-installed a list of apps had been removed, all of the desk top icons have been altered .... the web site name still remains, but the icons are all now what I presume are in default mode. The Dell Dock is missing and clicking on the icon I get a notification that the path does not exist ?. I think that I have really goofed this time !, is there a way to restore the apps and icons ?.
Thank you

Read other answers

I had upgraded to Win 8 pro from Win 7 by digital download from MS and installed on 1 desktop and 2 notebooks. All upgrades went fine. However only the desktop functioned normally. Both the notebooks would not function as expected.

The problem started soon after installation. The Tiles became unresponsive, the screen would blank out when any of the Tiles were clicked. Tried contacting MS support, only to waste 2 hours while the Tech checked settings etc. but to no avail. I was told that I would be transferred up to level 2 support but since I had no more time or patience I have not followed this up till now.

Refresh Windows had been tried once. With no change.

In my infinite wisdom the next day I tried Refresh a second time and lo and behold all my installed Applications (software) vanished including MS Office 2010. Cannot be seen or found by search. The same is the case with notebook no. 2.

At this point I do not care about the tiles etc. just getting my apps and associated data back intact. With Explorer I can see that these program files still reside on the HD. When I tried to invoke them directly by clicking the appropriate .exe files I got the message the " ERROR The operating system is not configured properly to run these applications."

Please any input will be highly appreciated. I am desperate. Thank you

A:Refresh deleted my Apps

Well this is a new one...

By 'refresh' I think you mean reinstall windows? In that case all of your programs WILL disappear...

The best guess as to why windows 8 doesn't work good is because notebooks aren't fully supported for some reason. There are a few people asking about this, and Microsoft might add in more support in future updates for this.

There was a similar thread where someone posted asking if Microsoft will eventually add support for net books...

Personally I think Microsoft intends to let net books, notebooks and any other similar device die. With the new tablets out, there really seems no need for them it seems. So if your notebooks don't get supported in future updates, you'll know why.

Sorry to say...

Read other 21 answers

I have Vundo trojan in my registry. I tried Vundofix.exe, fixvundo.exe and many other program. Vundofix.exe removed vundo from regular files but unable to remove from registry. Also, i can't open any file on desktop and under start>programs. All of my icon changesd and missing supporting program. If i click on any file on desktop or under start program it pop up windows saying following:"Windows cannot open this file:File: filename with LNK extention (all of my program has .lnk extention)To open this File, windows needs to know the program created it. Windows can go online to look it up automatically or you can manually select from a list of programs on your computer"I tried spybot, ad-aware, trendmicro (housecall), etc. Problem is hard to remove virus, trojan etc from registry. Program in control panel doesn't work so i can't even open add or remove program. i tried system restore with safe mode comand prompt but that doesn't work either. Please Help me.Here is logfile form hijackthis.Logfile of HijackThis v1.99.1Scan saved at 2:11:17 PM, on 4/15/2007Platform: Windows XP (WinNT 5.01.2600)MSIE: Internet Explorer v6.00 (6.00.2600.0000)Running processes:C:\WINDOWS\System32\smss.exeC:\WINDOWS\system32\winlogon.exeC:\WINDOWS\system32\services.exeC:\WINDOWS\system32\lsass.exeC:\WINDOWS\system32\svchost.exeC:\WINDOWS\System32\svchost.exeC:\WINDOWS\system32\spoolsv... Read more

A:Vundo Trojan In Registry Key. Can't Open Registry Nor Any File

WElcome to BC Download WinPFind3U.exe to your Desktop and double-click on it to extract the files. It will create a folder named WinPFind3u on your desktop.Open the WinPFind3u folder and double-click on WinPFind3U.exe to start the program.In the Files Created Within group click 30 daysIn the Files Modified Within group select 30 daysIn the File String Search group select Non-MicrosoftNow click the Run Scan button on the toolbar.When the scan is complete Notepad will open with the report file loaded in it.Click the Format menu and make sure that Wordwrap is not checked. If it is then click on it to uncheck it.Use the Add Reply button and Copy/Paste the information back here. I will review it when it comes in

Read other 12 answers

 I did a system restore because my mouse would freeze and my volume control button would not work. I have had multiple problems with this since upgrading to Windows 8; I have a Toshiba Satellite. Most of the apps that came with the laptop have now been deleted and I cannot re-install them. Can someone help?

A:Apps deleted after restore of system

What was the operating system on the laptop when you purchased it? How did you do the upgrade to windows 8 and / or 8.1? What installation disks do you have?
Sorry I don't have answers yet but I'm trying to understand what you have and how to solve the problem
Keep us posted

Read other 10 answers


Yesterday i experienced something very odd. Just suddenly all my programs shut down, windows still running. I noticed that my taskbar attached programs were replaced with white blank pages. On the desktop all my shortcuts, folders and such were gone, though 2 folders remained intact but with almost evering inside deleted only 2 files inside each of those survived. To make this worse alle my windows apps is deleted except of desktop, store, onedrive and camera. Even Paint and calculator is deleted.

btw i'm runnning W8 8.1

Has anyone ever encountered this? If anyone know what happened here i will be glad to know it.
But most importantly is there any way to recover my files?


A:Nearly all data, apps and shortcuts deleted!

Hi and Welcome to TSF!

You didn't happen to refresh your Windows 8 system did you?

What about a hard drive crash? New user account created?

Read other 6 answers

I haven't looked in for quite a while, but I still see posts about Win 11 registry analysis, checks and editors.
Leave the registry alone - Win 11 can take care of it.
There are many apps on the internet that say they can improve, defrag and edit the registry.
All of them will cause you many problems - leave them alone, do not install.

Regards to all, Murky.
(aka DavidT)

A:danger ! win 11 registry apps

What is Win 11?

Read other 1 answers

I can tell my computer is still infected with something because I can't download Hitman Pro or other programs that may help me continue scanning. The ones I have detect nothing (used rkill, then TDSSKiller and MBAM and Trend Micro Housecall). I can't even download HitmanPro and it deleted my MSE completely (which I also can't redownload). Firefox acts as if it downloaded these thing to my desktop and then it's not there.
I don't have another computer or a flash drive. What can I do?

A:Removed FBI Moneypak virus, deleted MSE but can't download MSE/Apps still.

Please follow the instructions in THIS GUIDE starting at Step 6. If you cannot complete a step, skip it and continue.Once the proper logs are created, then make a NEW TOPIC and post it HERE. Please include a description of your computer issues, what you have done to resolve them, and a link to this topic.If you can produce at least some of the logs, then please create the new topic and explain what happens when you try to create the log(s) that you couldn't get. If you cannot produce any of the logs, then still post the topic and explain that you followed the Prep. Guide, were unable to create the logs, and describe what happens when you try to create the logs.It would be helpful if you post a note here once you have completed the steps in the guide and have started your topic in malware removal. Good luck and be patient.If HelpBot replies to your topic, PLEASE follow Step One so it will report your topic to the team members.

Read other 3 answers

I'm not able to delete Bring and some other apps using the dedicated command lines in Powershell and/or Powershell_ISE. Can someone help?

I saw here that I'm not the only one experiencing this issue (did not try that link):
Cortana - Enable or Disable in Windows 10

For the rest, interesting new features in the settings menu. The installer asks to confirmed the Home or the Pro version and sees that I run the Pro version. On post-installation, the Pro version has similar behavior of the Home version. The very last thing that a Pro version owner wants to deal with is the HOME version.

Got the ISO from Micrsoft there:
Windows 10 ISO)

Read other answers

I'm not able to delete Bring and some other apps using the dedicated command lines in Powershell and/or Powershell_ISE. Can someone help?

I saw here that I'm not the only one experiencing this issue (did not try that link):
Cortana - Enable or Disable in Windows 10

For the rest, interesting new features in the settings menu. The installer asks to confirmed the Home or the Pro version and sees that I run the Pro version. On post-installation, the Pro version has similar behavior of the Home version. The very last thing that a Pro version owner wants to deal with is the HOME version.

Got the ISO from Micrsoft there:
Windows 10 ISO)

Read other answers

Anyone aware of any utility(s) that will allow for the identification, and extraction of all apps that were formerly installed from an (RegEdit) exported (complete) registry. Sure would save me a hunk of time having to re-install a bunch of s/w. I have many of the activation keys.

Randy Reist
Perpetual s/w Tweaker

A:Recover Installed Apps from Old Registry

Quote: Originally Posted by Lairbear

Anyone aware of any utility(s) that will allow for the identification, and extraction of all apps that were formerly installed from an (RegEdit) exported (complete) registry. Sure would save me a hunk of time having to re-install a bunch of s/w. I have many of the activation keys.

Randy Reist
Perpetual s/w Tweaker

Nothing I have ever encountered provides for that functionality. The only way I would trust the software to run properly with all necessary registry entries would be a reinstall.


Read other 3 answers

i have new computer , drive C: has windowsxp installed. i want to take drive f from my old computer, put it in my new one (it mainly has programs). question is: how do i update the winxp registry on new comp so it like knows the programs and stuff? also , i do not want to import the entire old registry as it has some stuff i dont want. ideas?

A:new comp, old apps, how to rebuild registry

The best way to get your programs on the new drive is to reinstall them . . there may be some hacks to be made, but a high risk of screwing it up royally

Read other 3 answers

I believe I have registry errors but it could be a lot more. It started when I updated my paid version of Avast and after running SuperAntiSpyware full scan and doing a disk cleanup. Now many things don't work. I couldn't even do a HiJackThis. When I tried, it got as far as the HiJackThis.msi then gave me a blank screen. The following errors are sporadic, meaning they may work the first time but not the second or perhaps not even the first or third. There is no consistency. I sometimes get errors saying "insufficient system resources", or if I try to launch Google Chrome or MO Excel, it'll say XXX.exe not a valid command. I even tried doing a Disk Error Check and it came back almost immediately with "system is clean" without even going through the steps. RESTART does not work either. I have to log off and log back on again. And if I try to change my screen resolution, my screen will die and I will have to do a hard boot.

Any suggestions? I cannot afford to lose the data that I have.

A:Registry errors, maybe??? Many apps don't work. NEED ADV. HELP!

Read other 13 answers

I was having pop ups and I figured my computer was infected, so I scanned with SuperAntiSpyware and got some things and deleted them. They were a bunch of Vundo Variant, EC and S something. Before, I wanted to try my Malwarebytes, but it wouldn't open, even after the scanning and restarting. Also my flash won't work in IE, but it does in firefox. I don't know whats up, can anyone help? Also I think I'm infected because my computer has stuff running in the background.. when I'm doing nothing. While I did this Hijack this, I was scanning with spyboy search and destroy...Logfile of Trend Micro HijackThis v2.0.2Scan saved at 7:00:39 PM, on 10/24/2009Platform: Windows XP SP3 (WinNT 5.01.2600)MSIE: Internet Explorer v7.00 (7.00.6000.16827)Boot mode: NormalRunning processes:C:\WINDOWS\System32\smss.exeC:\WINDOWS\system32\winlogon.exeC:\WINDOWS\system32\services.exeC:\WINDOWS\system32\lsass.exeC:\WINDOWS\system32\Ati2evxx.exeC:\WINDOWS\system32\svchost.exeC:\WINDOWS\System32\svchost.exeC:\WINDOWS\system32\svchost.exeC:\WINDOWS\system32\LEXBCES.EXEC:\WINDOWS\system32\spoolsv.exeC:\WINDOWS\system32\Ati2evxx.exeC:\WINDOWS\system32\LEXPPS.EXEC:\WINDOWS\Explorer.EXEC:\WINDOWS\arservice.exeC:\Program Files\Symantec\LiveUpdate\ALUSchedulerSvc.exeC:\PROGRA~1\AVG ... Read more

A:Malwarebytes won't open, mbam.exe won't open and is deleted, I'm infected with something!

Hello VersaniWelcome to BleepingComputer ==========================Download OTL to your desktop.Double click on the icon to run it. Make sure all other windows are closed and to let it run uninterrupted.When the window appears, underneath Output at the top change it to Minimal Output.Under the Standard Registry box change it to All.Check the boxes beside LOP Check and Purity Check.Click the Run Scan button. Do not change any settings unless otherwise told to do so. The scan wont take long.When the scan completes, it will open two notepad windows. OTL.Txt and Extras.Txt. These are saved in the same location as OTL.Please copy (Edit->Select All, Edit->Copy) the contents of these files, one at a time, and post it with your next reply.===========Download This file. Note its name and save it to your root folder, such as C:\.Disconnect from the Internet and close all running programs.Temporarily disable any real-time active protection so your security program drivers will not conflict with this file.Click on this link to see a list of programs that should be disabled.Double-click on the downloaded file to start the program. (If running Vista, right click on it and select "Run as an Administrator")Allow the driver to load if asked.You may be prompted to scan immediately if it detects rootkit activity.If you are prompted to scan your system click "Yes" to begin the scan.If not prompted, click the "Rootkit/Malware" tab.On the right-side, all items to be scanned should be checked by d... Read more

Read other 1 answers

Whilst installing a Windows 10 update I had a power cut and when I got back on my whole computer was basically wiped it takes 40 mins to log in and when I do I have no apps and can only access my folders! When I click anything else i get a message " location error" conserning system 32 and a "java script error" please help !!

Read other answers

Don't ask em why I did it--wanted to get rid of that inactive networking icon. Some site said to delete this:HKEY_CLASSES_ROOT\CLSID\{7007ACCF-3202-11D1-AAD2-00805FC1270E} --- I did, and not only did the undesirable icon disappear but so did my dial-up icon. Obviously I can get on-line but you can't see the connection active down at the bottom. Had NO business doing this-- since computers and I don't get along that well. I'd really like to put this registry blunder back to square one. XP Media Center computer. Can anyone advise me how to restore this? If so, advise would have to be given like talking to a computer moron--(hey, I DID delete a registry key) And yes, I will resist all urges to monkey with the registry again! Thank you.

A:I Deleted A Registry Key...

It may or may not work to run sfc /scannow.
But it won't hurt.

Click Start/RUN & type in sfc /scannow.
There is a space between the c & the /.
Click OK.
It runs.
It may prompt for the xp cd.
or not.
When it goes away check to see if the problem is fixed.
You may need to reboot.

Read other 7 answers

When going and manually removing some maleware (tdsserv, karna) I was following some instructions on exterminate-it.com and it told me to delete


However, after reading more site info, it appears I should have deleted values in the key and not the key itself.

Is it possible to restore the key?

A:Deleted Registry Key

Are there any adverse effects from deleting it?

Have you rebooted the system to see if it is automatically replaced?


Read other 4 answers

Hi guys,

was running a clean-up program a coupl eof days ago and i think that i might have selected a couple of wrong boxes cos nothing is showing up on the add/remove list. i think i might have deleted some important registry entries.

how can i sort it? are there any tools that do it or are i gonna have to reinstall everything?

cheers in advance

A:Deleted Registry

What cleaner where you using as most make a backup somewhere

Also you can use System Restore to a date before you used the cleaner and that should work.

Read other 2 answers

Ok. I was using the RegCleaner and clearing out some unused keys made by programs i no longer had on the computer....

It was simple enough and nothing going wrong, no harm done. I went to go take a piss and when i came back i found my buddy on my pc...

He asked "what the H*** is all this??" and i said "its my registry" and he goes "o you dont need any of that" and no sooner did those words come outa his mouth did he press Shift + A & DELETE and poof

all my reg keys were gone.
i dunno if i have a back up present.

what i can say is that every time i try to click on something now it says its either been moved, deleted, or renamed... blah blah blah

nothing works anymore besides my internet. i cant even run .zip files because it says there is no program to do it with. theres no program to "open" files with. all because my screw up friend over here decided he knew what he was doin with my pc....ugh

im stuck. help.

A:What to do if you deleted your registry...

Read other 10 answers

I had a problem with Trojan, in war against it I stupidly manualy deleted the key value from: HKLM\Software\Classes\exefile\shell\open\command\ Now I can not run some executables...

Please help me, write me what key with value should there be ?
thanks for quick help J

Read other answers

Hi, I was imaging and building a PC for windows 7. It kept saying that when i logged in was creating a Temp folder. I googled and learned that I should delete the profile list, but that was wrong move because I deleted the WHOLE profile list. The computer started acting weird and now it is telling me that the windows build is not genuine.

I tried accessing the command line or notepad to recreate the key, but to no avail. I can not even get back to the registry. It's as if there are no more programs. Do I reinstall windows from the image I have on my usb drive? How do I fix this?


A:Deleted a key from the registry!

Yes, reinstall again. If you deleted the entire profile list folder then reinstalling is your best solution.

Read other 3 answers

I have downloaded 4 free programs (Reg Cleaner, SpyBot Search & Destroy, WINner Tweak, WinPatrol)several months ago but recently I started to receive error messages "Your Maximum Registry Size is too Small, to insure that Windows runs properly, increase your maximum registry size. For information, see help" and System is low on virtual memory" I started to use all 4 of these programs to remove spyware and the registry. I believe the information is still in the RegCleaner back-up program but I cannot retrieve it. The recyecle bin has not been emptied.

The programs are no loner working with the exception of Internet Explorer and Outlook but I cannot send or receive messages through Outlook - the error message in Outlook is missing a file "msiexec.exe.

I cannot update the RegCleaner or any of the programs as the computer will not let me download the programs.

Please help.

A:HELP! Deleted Registry!!!

Read other 16 answers

Very stupid I know but I deleted a registry key based on a suggestion in an article that I googled. We were having issues with a Citrix receiver and the article said to delete the register key HKEY LOCAL MACHINE...something like that...well I did.

I first had to figure out how to get to the registry keys...I went to programs and then accessories...then it said to right click on command prompt and I think if I remember right it said choose run in administrator...that's how my nightmare started.

I found the registry key that said the local machine thing and then it dropped down a menu and I saw "software" so that's what I deleted....after that I could not click on anything and get it to open...I flipped out and wanted to do a system restore but every time I clicked on anything it would say something like this application was not available...something to that effect...I cannot remember the exact wording. Again, flipped out and decided to just turn off my computer and turn it back on again but when I did this it came back on and went to the black screen with white letters that says window shut down improperly and it gives you 4 options for how u want to open windows...safe mode, normally etc...well I tried every mode and it just goes to a black screen...I can move my cursor around on the screen but there is absolutely nothing on the screen...nothing to click on and you can't type or anything.

Is there any hope for undoing what I have done???

A:Deleted registry key

Read other 16 answers

First a suggestion about running scan disc when I took off all the things running in background and ran scan disc it did it in under 45 min. also ran Norton defrag (Speed disc) and it shot through in under 6 minuets. (Do this by pressing, alt-cntrl-del and take every app off except Explorer and Systray.)I discovered this when I saw that scan disc could never complete it's operation and the same problem was happening with all the new Symantec features.

What is the purpose of a Windows app called "scan registry" I notice it is among the startup programs when I view start up from MS CONFIG. I would like to remove it from the startup program list - do you think that is a good idea??

A:running scandisc & other apps - Scan registry

Hiya and Welcome

Good tip. As for the scan registry, you need to keep this on. What this does is scan your system at startup and backs your registry up. This is needed in case you need to restore your system.

To see what I mean, reboot to DOS and at the prompt type the following. There is a space before the /

scanreg /restore

There are a load of dates. If you ever have problems, you can restore the system back to how it was prior to the problem this way.



Read other 3 answers

Hello, this is my first post on this forum, and I hate that I had to do this way. I let my boyfriend use my computer when I first bought it (which was less than a month ago!) and he said he installed something called ESET/NOD 32 Firewall. Well, it started acting funny and so I uninstalled it and put Comodo on instead. By acting funny, I mean that it was connecting out to random IP's in England (I checked using IPNet) and it wasn't updating but it kept saying that it was. Well, to make the long story short, after that none of my antivirus, antispyware or registry cleaners (including Security Task Manager) would open or work. They kept saying things like "the program is not working" or "has stopped working". I already attempted to do some "fixing" on my own, by reading and folowing others HJT log posts etc. ... so included in the next couple of posts are my "deckers log", "ccleaner" and "HJT log". Also, here is the info on the NOD 32 program that just WONT GO AWAY.Windows Registry Editor Version 5.00[HKEY_LOCAL_MACHINE\SOFTWARE\ESET\ESET Security\CurrentVersion\Info]"EditionName"="TemDono FiX 1.1 (Free Updates - Expire in 2050)"C:\Windows\system32>notepad C:\Windows\nod32fixtemdono.regCopy from deckers ...Deckard's System Scanner v20071014.68Run by Wes & Amanda on 2008-03-11 02:22:02Computer is in Normal Mode.----------------------------... Read more

A:All Antivirus, Spyware And Registry Apps Not Working

Wasn't sure what would fit so here is more from deckers (extra log) ...

Deckard's System Scanner v20071014.68
Extra logfile - please post this as an attachment with your post.

-- System Information ----------------------------------------------------------

Microsoft? Windows Vista? Home Premium (build 6000)
Architecture: X86; Language: English

CPU 0: AMD Turion™ 64 X2 Mobile Technology TL-60
Percentage of Memory in Use: 44%
Physical Memory (total/avail): 1982.31 MiB / 1108.86 MiB
Pagefile Memory (total/avail): 4185.28 MiB / 3092.61 MiB
Virtual Memory (total/avail): 2047.88 MiB / 1905.78 MiB

C: is Fixed (NTFS) - 220.95 GiB total, 101.8 GiB free.
D: is Fixed (NTFS) - 11.93 GiB total, 1.86 GiB free.
E: is CDROM (No Media)

\\.\PHYSICALDRIVE0 - WDC WD2500BEVS-60UST0 ATA Device - 232.88 GiB - 2 partitions
\PARTITION0 (bootable) - Installable File System - 220.95 GiB - C:
\PARTITION1 - Installable File System - 11.93 GiB - D:

-- Security Center -------------------------------------------------------------

AUOptions is scheduled to auto-install.
Windows Internal Firewall is enabled.

FW: COMODO Firewall Pro v3.0 (COMODO)
AV: AVG 7.5.516 v7.5.516 (Grisoft)
AS: Spyware Doctor v5.5.0.204 (PC Tools) Disabled
AS: AVG Anti-Spyware v7, 5, 1, 36 (GRISOFT s.r.o.) Disabled Outdated
AS: Windows Defender v1.1.1505.0 (Microsoft Corporation)

[HKLM\System\CurrentContro... Read more

Read other 2 answers

I am trying to fix my sisters laptop, which is a hp pavilion dv6 2100nr. She told me she dropped it while it was turned on and it wont start up anymore, it also has a new issue causing the system to only power on or stay on when the laptop is charging. I started by running windows start up which just looped, then I ran windows 7 and noticed there are 4 partitions the system, operating, hp tools, and recovery. I deleted the system and operating partitions and reinstalled win 7 on the partition. The reinstall was still no good after restarting it looped start up repair again, I ran another installation of win 7 and same results except this time the computer started up fine and I installed missing drivers and win updates restarted the computer and I was back at the beginning again with the startup repair looping again, safe mode goes right to issue at hand. Im debating what I should do other than deleting all partitions and formatting the hard drive, then running clean install of win 7. Anyone have a solution or a suggestion, Here are the details after last re-installation of win 7 and start up repair beginning:

the following startup option will be repaired:
Name: Windows Boot Manager
Identifier: {9DEA862C-5CDD-4E70-ACC1F32B344D4795}

The following startup options will be added:
Name: WIndows Recovery Environment (recovered)
Path: Recovery \WindowsRE\Winre.wim
Windows Device: Partition=E: (13424MB)

A copy of the current boot configuration data will be saved as: C:\Boot\BCD... Read more

A:startup problem - startup loop/corrupt registry

I would suggest wiping the hard drive (with DBAN or KillDisk) and reinstalling Windows with the HP disks.
If the system still has problems - then it's most likely a hardware issue and it will need repairing.

Read other 2 answers


is there a registry teak to close quickly windows 8.1 apps?

i mean i can use f4+Alt

but i mean the timing when i close an app clicking with the mouse ,draging it down and wait (3 seconds i guess)
is there a tweak to reduce the 3 seconds? for example to 1


A:is there a registry teak to close quickly windows8.1 apps

How about using this:
WinAero: Close Threshold for Windows 8.1

Move the all 3 slide bars to left then click apply.

Read other 14 answers


I have Windows 2000 Professional and while trying to delete the 'Brilliant Dig' spyware I also deleted HKEY_CLASSES_ROOT\Interface\. And now I cant open some web pages especially the javascript links. It says 'Error on page'

Also, I cant open Microsoft Word anymore. If i try to do so it says: "the windows installer service could not be accessed. contact your support personnel to verify that the Windows Installer service is properly registered."

When I try to open a word document saved on my C\drive it says: "The file does not have a program associated with it for performing this action. Create an association in the Folder Options Control Panel."

In addition to these, when I try to update my AVG Anti virus I receive a message like there is a problem with the interface and it fails to update.

And finally some options like start-search-all files and folders and edit-find (on this page) commands do not work.

Hope you can help me with this problem?

A:Accidentally deleted a registry value

Read other 14 answers

I deleted the following file: C:\WINDOWS\system32\userinit.exe,
I am unable to log on to my computer.
I tapped F8 to get a command prompt but I am unsure which boot device
to select and what to do next.
Please help.

A:Deleted Registry File

First of all - why did you delete that file?

You can boot from your XP CD - go into the recovery console - and copy that file from your XP CD to the system32 folder.

Read other 5 answers

Please help. I deleted a registry file called wow6234node (something like that). It came up with an error saying that there was an error deleting it. I rebooted and now vista won't start. I am running 64 bit Vista. I DID NOT back up anything!!! I know very very stupid. Cannot get it to start in safe mode either. Can I repair this at all without losing anything? I thought about putting in the os disk and trying to repair that way but I was afraid of complete loss.


A:Deleted a registry file

Hello squaw2874, welcome to Vista Forums!

Have a look at the tutorial at the link below to do a system restore to a point before you deleted the reg entry; be sure to post back to keep us informed.

System Restore - How to

Read other 24 answers

Being too hasty, and instead of deleting the linkfile with the IsShortcut value, I had a brainstorm and deleted the first Piffile entry I came to with an IsShortcut value in XP Pro to get shut of the arrows on the Icons. (I must have been thinking of ME at the time.)

Not having exported it, overconfidence having its price, and not remembering which Piffile I deleted the IsShortcut value from, can anyone bail me out and say which is the first Piffle entry in the Registry which has an IsShortcut value so I can put the dratted thing back in, please?

Thank you!

A:Help! Deleted wrong registry key!

Why not just do a system restore? That should fix the problem.

Read other 2 answers

I searched and searched for help because my IE(6) was lagging whenever I input anything into form fields. I found out that it was caused by corrupt pstores files. Microsoft provided help for the issue so I followed instructions and deleted the pstores folder from my registry and the problem was corrected. But it then says to reinstall pstores.exe by using a DOS prompt and that does not work. After more searching, I found that I should do a full reinstall of IE6. Done and nothing. How do I get the pstores files back so that I can use AutoComplete?

Also, an unrelated problem. My windows calculator is gone. Every time I try to open it, it opens Explorer. I've tried Find Target and then did a search for the .exe file but I can't find it and can't find any help online. Any suggestions?

Thanks in advance

A:I deleted something from my registry and now I'm having problems

Read other 9 answers

I'm a total newby to this, and a bit of a moron when it comes to computers (I don't RTFM).

Here's the problem: Some time ago, I suffered from a total loss of my CD/DVD drive from 'My Computer'. I did a google search, which brought up 'http://techguy.org/322107'. I checked out some others for a comparison and they all said the same sort of things would cure it. So I jumped straight in and did it, with a level of success. However, what I failed to do (because of my pea sized brain) was back up! I can now see my CD/DVD drive, but it doesn't work properly. It reads, but doesn't write. I tried to re-install the drivers, software used to burn etc, but it still doesn't do it.

Is there any way of getting the files back into the registry? & If I do so, will it give me back the problem I had in the first place?

BTW, I did try a system restore, with no luck, because it was done a while ago and the restore points didn't go back far enough!

Please help...? :,(

Read other answers

I accidently deleted some files in the registry and now the mouse and keyboard do not work. If i use the windows recovery software and take the computers settings back to as it was when purchased will my solution be resolved. please help thanx

A:deleted registry files

Since you've posted this in the 98/ME section, I'm assuming you're talking about a computer different from the one in your profile. If so, go to Help & Support in your computer, type in registry backup and you'll find the solution to your deletion problem.

Read other 4 answers

I deleted taskman from my registry and want to know how I can restore it. It was under HKEY Local Machine/Software/Microsoft/Windows NT/Current Version/ WinLogon/Taskman. Since it was deleted computer loads to blank desktop. No start button no icons, no taskbar, nothing. I can activate task manager by CTRL+Alt+delete to navigate. I am looking for a way to recreate the taskman value that I deleted. Any suggestions?

A:Deleted taskman from registry

Do a system restore to before you deleted it, then reboot when PC asks !
P.S you can do this from " Advanced system user " or safe mode as you may know it by pressing F8 continuosly on boot !

Read other 2 answers

As stated in the title i have accidentally deleted a few registry keys in \HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\CurrentVersion\Internet Settings
can somebody send theirs to me? i need it to connect to the internet.

Read other answers

Okay I did it .I deleted a part of my registry (please don't ask)!!.Hp laptop running Vista Home Premium.

Think the part deleted (cringe)..was HKEY_LOCAL_MACHINE\SAM.When I log on ,screen comes up with "Preparing Your Desktop"...Then a box with "Your User Profile was not loaded correctly...logged on with temporary profile...."That's true, each time I restart ,it's back to the same.Any help would be much appreciated..( oh! Sam was the previous user)..Stupid or just dense??....Thankyou...addboat

A:Deleted part of registry

That has nothing to do with users.

Use System Restore and get a good registry back.

Read other 3 answers

I have deleted my some registry folders accidently.
I tried to solve this from troubleshoot but there is showing no administrator account in this pc.
Plz help me

Read other answers

Recently, the background picture on my mom's computer disappear. I tried to get it come back, but nothing happened and there were no event log errors. I poked around the registry and notice that the System policy in KEY_CURRENT_USER\Software\Microsoft\Windows\ CurrentVersion\Policies has entirely disappeared. What could have cause this issue suddenly. The virus checker hasn't detected any virus and she basically visits only 3 sites any way. Her vector for infection is pretty slim.

Is there someone to check to see if there are further registry damage?

How should I tried to fix this? I can try using a restore point or just add the registry entry back manually.



A:What caused the registry to be deleted?

Read other 9 answers

Can anybody help me???? I accidently deleted files in the registry! The file I deleted is \Windows\32\Config\System. Please Help ME!!!

A:Help! Deleted Registry Files!

Please DO NOT double post for the same issue.

You are being helped here.


Read other 1 answers

Hey guys,

The past few days, I've been fiddling around with my Bluetooth using Resource Hacker to try and find the tray.exe program which runs when I press my Fn+F3 button. The reason for that is explained here: How to change bluetooth tray icon?

However, when changing some of the .dll's in the System32 and SysWow64, I guess I prompted CCleaner to notice a change in the Registry related to Bluetooth. As I often do, I used CCleaner to clean my Registry and had no care whatsoever to look at the results, or to back anything up (CCleaner is amazing and I trust it fully ).

Anyway, since then, I've not been able to get anything Bluetooth-related going on my laptop. Pressing Fn+F3 does absolutely nothing and opening the Bluetooth File Transfer in my Start Menu (fsquirt.exe in System32), gives me the following error: "The application was unable to start correctly (0xc000007b)".

Any thoughts?


A:Bluetooth 'deleted' from Registry

Reinstall bluetooth drivers for your device.

Read other 5 answers