Over 1 million tech questions and answers.

Apps Deleted from Registry Still Open @ Startup

Q: Apps Deleted from Registry Still Open @ Startup

I use Windows XP Home Edition, have 2 GB of RAM and a 3.0 Ghz. Pentium 4 Processor. I use BSafe Online Internet Suite which includes a virus scanner, firewall, popup blocker, privacy of information protector, and Internet filter with a lockout feature to control objectionable sites on the web. I also us AdAware to control spyware.

My main problem consists of two applications I removed from my registry by using Add/Remove Programs. One was the ParetoLogic Driver Updater, and the other, The Weather Channel's Desktop Weather. Even after this, they still kept starting up and displaying flash screens on my monitor. I have to end the programs manually every system startup which really slows me down! I then went into regedit and searched for both of these programs. I deleted all files I could find related to TWC and PTL. I still have the same problem. I will now post my DDS log below and attach the other two as directed. Please be patient with me. This is my first time using this forum.

I am also concerned that I may have spyware or malware on my main hard drive C:, and backup E: drive, without knowing it. I read a news article in a British PC magazine which warned that spyware, malware, and virus detection accuracy was less effective now than before 2007.

DDS (Ver_09-10-26.01) - NTFSx86
Run by Brian K. Welch at 23:49:12.32 on Tue 10/27/2009
Internet Explorer: 8.0.6001.18702 BrowserJavaVersion: 1.6.0_10
Microsoft Windows XP Home Edition 5.1.2600.3.1252.1.1033.18.2415.1662 [GMT -5:00]

AV: Avanquest VirusScanner Pro *On-access scanning enabled* (Updated) {6A383D4C-7657-408f-BD0D-B379B5C7C3BE}

============== Running Processes ===============

C:\WINDOWS\system32\svchost -k DcomLaunch
C:\WINDOWS\System32\svchost.exe -k netsvcs
C:\Program Files\Lavasoft\Ad-Aware\AAWService.exe
C:\Program Files\Common Files\LightScribe\LSSrvc.exe
C:\Program Files\Common Files\Lanovation\PrismXL\PRISMXL.SYS
C:\Program Files\Common Files\Seagate\Schedule2\schedul2.exe
C:\WINDOWS\System32\svchost.exe -k imgsvc
C:\Program Files\Canon\CAL\CALMAIN.exe
C:\Program Files\Seagate\DiscWizard\DiscWizardMonitor.exe
C:\Program Files\Seagate\DiscWizard\TimounterMonitor.exe
C:\Program Files\Common Files\Seagate\Schedule2\schedhlp.exe
C:\Program Files\Lavasoft\Ad-Aware\AAWTray.exe
C:\Program Files\Microsoft IntelliPoint\ipoint.exe
C:\Program Files\McAfee Security Scan\1.0.150\SSScheduler.exe
C:\Program Files\Windows Desktop Search\WindowsSearch.exe
c:\Program Files\Microsoft IntelliPoint\dpupdchk.exe
C:\Program Files\Mozilla Firefox\firefox.exe
C:\Documents and Settings\Brian K. Welch\Desktop\dds.scr

============== Pseudo HJT Report ===============

uStart Page = hxxp://att.my.yahoo.com/
uURLSearchHooks: H - No File
BHO: StumbleUpon Launcher: {145b29f4-a56b-4b90-bbac-45784ebebbb7} - c:\program files\stumbleupon\StumbleUponIEBar.dll
BHO: Adobe PDF Link Helper: {18df081c-e8ad-4283-a596-fa578c2ebdc3} - c:\program files\common files\adobe\acrobat\activex\AcroIEHelperShim.dll
BHO: KeyScramblerBHO Class: {2b9f5787-88a5-4945-90e7-c4b18563bc5e} - c:\program files\keyscrambler\KeyScramblerIE.dll
BHO: Java(tm) Plug-In SSV Helper: {761497bb-d6f0-462c-b6eb-d4daf1d92d43} - c:\program files\java\jre6\bin\ssv.dll
BHO: Windows Live Sign-in Helper: {9030d464-4c02-4abf-8ecc-5164760863c6} - c:\program files\common files\microsoft shared\windows live\WindowsLiveLogin.dll
BHO: LastPass Browser Helper Object: {95d9ecf5-2a4d-4550-be49-70d42f71296e} - c:\program files\lastpass\LPBar.dll
BHO: Freecause Toolbar BHO: {9ebf8aaf-0a31-4786-909a-97a0ef101743} - c:\program files\addthis toolbar\Toolbar.dll
BHO: Java(tm) Plug-In 2 SSV Helper: {dbc80044-a445-435b-bc74-9c25c1c588a9} - c:\program files\java\jre6\bin\jp2ssv.dll
BHO: Bsecure Popup Blocker: {e0019445-4c1f-414d-a70e-ad80f231c584} - c:\windows\system32\inetcntrl\popupkil\BsafeBHO.dll
BHO: EpsonToolBandKicker Class: {e99421fb-68dd-40f0-b4ac-b7027cae2f1a} - c:\program files\epson\epson web-to-page\EPSON Web-To-Page.dll
BHO: OToolbarHelper Class: {ead3a971-6a23-4246-8691-c9244e858967} - c:\program files\paypal\paypal plug-in\PayPalHelper.dll
BHO: XBTBPos00 Class: {fcbccb87-9224-4b8d-b117-f56d924beb18} - c:\program files\fast browser search\ie\FBStoolbar.dll
TB: Fast Browser Search: {1bb22d38-a411-4b13-a746-c2a4f4ec7344} - c:\program files\fast browser search\ie\FBStoolbar.dll
TB: Bsecure Popup Blocker: {e0019445-4c1f-414d-a70e-ad80f231c584} - c:\windows\system32\inetcntrl\popupkil\BsafeBHO.dll
TB: LastPass Toolbar: {9f6b5cc3-5c7b-4b5c-97af-19dec1e380e5} - c:\program files\lastpass\LPBar.dll
TB: AddThis Toolbar: {b43176cc-4d9e-493b-a636-d9cbfe39c6da} - c:\program files\addthis toolbar\Toolbar.dll
TB: EPSON Web-To-Page: {ee5d279f-081b-4404-994d-c6b60aaeba6d} - c:\program files\epson\epson web-to-page\EPSON Web-To-Page.dll
TB: {EF99BD32-C1FB-11D2-892F-0090271D4F88} - No File
TB: {D4027C7F-154A-4066-A1AD-4243D8127440} - No File
EB: {32683183-48a0-441b-a342-7c2a440a9478} - No File
uRun: [CTFMON.EXE] c:\windows\system32\ctfmon.exe
uRun: [DW6] "c:\program files\the weather channel fw\desktop\DesktopWeather.exe"
uRun: [Philips Intelligent Agent] "c:\program files\philips intelligent agent\Philips Intelligent Agent.exe" /SILENT
uRun: [Pareto_Update] c:\program files\common files\paretologic\uus2\Pareto_Update.exe
uRun: [Google Update] "c:\documents and settings\brian k. welch\local settings\application data\google\update\GoogleUpdate.exe" /c
mRun: [HelpCenter4.1] c:\program files\fastaccessdsl\helpcenter43\bin\sprtcmd.exe /P HelpCenter4.1
mRun: [IgfxTray] c:\windows\system32\igfxtray.exe
mRun: [DiscWizardMonitor.exe] c:\program files\seagate\discwizard\DiscWizardMonitor.exe
mRun: [AcronisTimounterMonitor] c:\program files\seagate\discwizard\TimounterMonitor.exe
mRun: [Seagate Scheduler2 Service] "c:\program files\common files\seagate\schedule2\schedhlp.exe"
mRun: [Ad-Watch] c:\program files\lavasoft\ad-aware\AAWTray.exe
mRun: [QuickTime Task] "c:\program files\quicktime\qttask.exe" -atboottime
mRun: [PRONoMgr.exe] c:\program files\intel\ncs\proset\PRONoMgr.exe
mRun: [Adobe Reader Speed Launcher] "c:\program files\adobe\reader 9.0\reader\Reader_sl.exe"
mRun: [KernelFaultCheck] %systemroot%\system32\dumprep 0 -k
mRun: [IntelliPoint] "c:\program files\microsoft intellipoint\ipoint.exe"
mRun: [InetCntrl] c:\windows\system32\inetcntrl\InetCntrl.exe
dRun: [CTFMON.EXE] c:\windows\system32\ctfmon.exe
StartupFolder: c:\docume~1\alluse~1\startm~1\programs\startup\mcafee~1.lnk - c:\program files\mcafee security scan\1.0.150\SSScheduler.exe
StartupFolder: c:\docume~1\alluse~1\startm~1\programs\startup\micros~1.lnk - c:\program files\microsoft office\office10\OSA.EXE
StartupFolder: c:\docume~1\alluse~1\startm~1\programs\startup\window~1.lnk - c:\program files\windows desktop search\WindowsSearch.exe
IE: LastPass - file://c:\program files\lastpass\context.html?cmd=lastpass
IE: LastPass Fill Forms - file://c:\program files\lastpass\context.html?cmd=fillforms
IE: StumbleUpon PhotoBlog It! - StumbleUponIEBar.dll/blogimage
IE: {5C106A59-CC3C-4caa-81A4-6D909B5ACE23} - {B745F984-EF2E-40D6-A9AC-D8CED7230E61} - c:\program files\keyscrambler\KeyScramblerIE.dll
LSP: InetCntrl0013.dll
Trusted Zone: att.com\www
Trusted Zone: att.net
Trusted Zone: att.net\attreg
Trusted Zone: att.net\home.secureapp
Trusted Zone: att.net\support
Trusted Zone: att.net\webauth
Trusted Zone: att.net\webmail
Trusted Zone: bellsouth.net\home
Trusted Zone: brainstatetechnologies.com\www
Trusted Zone: bsafehome.com\www
Trusted Zone: bsafeonline.com\www
Trusted Zone: conservapedia.com\www
Trusted Zone: facebook.com\login
Trusted Zone: facebook.com\www
Trusted Zone: familysearch.org\www
Trusted Zone: familysearch.org\www.new
Trusted Zone: lds.org\www
Trusted Zone: mormon.org\www
Trusted Zone: mrmovietimes.com\www
Trusted Zone: myatt.net
Trusted Zone: providentliving.org\www
Trusted Zone: regionsbank.com\www
DPF: Microsoft XML Parser for Java - file:///C:/WINDOWS/Java/classes/xmldso.cab
DPF: {02BCC737-B171-4746-94C9-0D8A0B2C0089} - hxxp://office.microsoft.com/templates/ieawsdc.cab
DPF: {05CA9FB0-3E3E-4B36-BF41-0E3A5CAA8CD8} - hxxp://download.microsoft.com/download/e/4/9/e494c802-dd90-4c6b-a074-469358f075a6/OGAControl.cab
DPF: {0CCA191D-13A6-4E29-B746-314DEE697D83} - hxxp://upload.facebook.com/controls/2008.10.10_v5.5.8/FacebookPhotoUploader5.cab
DPF: {4F1E5B1A-2A80-42CA-8532-2D05CB959537} - hxxp://gfx1.hotmail.com/mail/w3/resources/MSNPUpld.cab
DPF: {5D637FAD-E202-48D1-8F18-5B9C459BD1E3} - hxxp://fb.familylink.com/we_are_related/stream/core/lib/AurigmaImageUploader/ImageUploader5.cab
DPF: {5ED80217-570B-4DA9-BF44-BE107C0EC166} - hxxp://cdn.scan.onecare.live.com/resource/download/scanner/wlscbase8942.cab
DPF: {6D2EF4B4-CB62-4C0B-85F3-B79C236D702C} - hxxp://www.facebook.com/controls/contactx.dll
DPF: {6E32070A-766D-4EE6-879C-DC1FA91D2FC3} - hxxp://www.update.microsoft.com/microsoftupdate/v6/V5Controls/en/x86/client/muweb_site.cab?1224931848421
DPF: {8100D56A-5661-482C-BEE8-AFECE305D968} - hxxp://upload.facebook.com/controls/2009.07.28_v5.5.8.1/FacebookPhotoUploader55.cab
DPF: {8AD9C840-044E-11D1-B3E9-00805F499D93} - hxxp://java.sun.com/update/1.6.0/jinstall-1_6_0_10-windows-i586.cab
DPF: {8FFBE65D-2C9C-4669-84BD-5829DC0B603C} - hxxp://fpdownload.macromedia.com/get/flashplayer/current/polarbear/ultrashim.cab
DPF: {C7DB51B4-BCF7-4923-8874-7F1A0DC92277} - hxxp://office.microsoft.com/officeupdate/content/opuc4.cab
DPF: {CAFEEFAC-0014-0002-0000-ABCDEFFEDCBA} - hxxp://java.sun.com/products/plugin/autodl/jinstall-142-windows-i586.cab
DPF: {CAFEEFAC-0016-0000-0005-ABCDEFFEDCBA} - hxxp://java.sun.com/update/1.6.0/jinstall-1_6_0_05-windows-i586.cab
DPF: {CAFEEFAC-0016-0000-0007-ABCDEFFEDCBA} - hxxp://java.sun.com/update/1.6.0/jinstall-1_6_0_07-windows-i586.cab
DPF: {CAFEEFAC-0016-0000-0010-ABCDEFFEDCBA} - hxxp://java.sun.com/update/1.6.0/jinstall-1_6_0_10-windows-i586.cab
DPF: {CAFEEFAC-FFFF-FFFF-FFFF-ABCDEFFEDCBA} - hxxp://java.sun.com/update/1.6.0/jinstall-1_6_0_10-windows-i586.cab
DPF: {E77F23EB-E7AB-4502-8F37-247DBAF1A147} - hxxp://gfx2.hotmail.com/mail/w4/pr01/photouploadcontrol/MSNPUpld.cab
DPF: {EAC139A9-D22D-4C29-8D1C-252BE63750F9} - hxxp://www.cooliris.com/shared/plinstll.cab
Handler: msero - {B0D92A71-886B-453B-A649-1B91F93801E7} - c:\program files\common files\microsoft shared\encarta researcher\MSERO.DLL
Notify: igfxcui - igfxdev.dll
SSODL: WPDShServiceObj - {AAA288BA-9A4C-45B0-95D7-94D524869DB5} - c:\windows\system32\WPDShServiceObj.dll
SEH: Windows Desktop Search Namespace Manager: {56f9679e-7826-4c84-81f3-532071a8bcc5} - c:\program files\windows desktop search\MSNLNamespaceMgr.dll
LSA: Authentication Packages = msv1_0 relog_ap

================= FIREFOX ===================

FF - ProfilePath - c:\docume~1\briank~1.wel\applic~1\mozilla\firefox\profiles\8ky5kyia.default\
FF - prefs.js: browser.startup.homepage - hxxp://att.my.yahoo.com/
FF - prefs.js: network.proxy.type - 2
FF - component: c:\documents and settings\brian k. welch\application data\mozilla\firefox\profiles\8ky5kyia.default\extensions\{62760fd6-b943-48c9-ab09-f99c6fe96088}\platform\winnt\components\ebayAccessComponent.dll
FF - component: c:\documents and settings\brian k. welch\application data\mozilla\firefox\profiles\8ky5kyia.default\extensions\{62760fd6-b943-48c9-ab09-f99c6fe96088}\platform\winnt\components\ebayShortcutMaker.dll
FF - component: c:\documents and settings\brian k. welch\application data\mozilla\firefox\profiles\8ky5kyia.default\extensions\{a7c6cf7f-112c-4500-a7ea-39801a327e5f}\platform\winnt_x86-msvc\components\ipc.dll
FF - component: c:\documents and settings\brian k. welch\application data\mozilla\firefox\profiles\8ky5kyia.default\extensions\[email protected]\components\KeyScramblerIE.dll
FF - component: c:\documents and settings\brian k. welch\application data\mozilla\firefox\profiles\8ky5kyia.default\extensions\[email protected]\platform\winnt_x86-msvc\components\WeaveCrypto.dll
FF - component: c:\documents and settings\brian k. welch\application data\mozilla\firefox\profiles\8ky5kyia.default\extensions\[email protected]\components\cooliris.dll
FF - component: c:\documents and settings\brian k. welch\application data\mozilla\firefox\profiles\8ky5kyia.default\extensions\[email protected]\platform\winnt_x86-msvc\components\lpxpcom.dll
FF - plugin: c:\documents and settings\brian k. welch\application data\move networks\plugins\npqmp071504000001.dll
FF - plugin: c:\documents and settings\brian k. welch\application data\mozilla\firefox\profiles\8ky5kyia.default\extensions\{e2883e8f-472f-4fb0-9522-ac9bf37916a7}\plugins\np_gp.dll
FF - plugin: c:\documents and settings\brian k. welch\application data\mozilla\firefox\profiles\8ky5kyia.default\extensions\[email protected]\plugins\npcoolirisplugin.dll
FF - plugin: c:\documents and settings\brian k. welch\local settings\application data\google\update\\npGoogleOneClick8.dll
FF - plugin: c:\documents and settings\brian k. welch\local settings\application data\yahoo!\browserplus\2.4.17\plugins\npybrowserplus_2.4.17.dll
FF - plugin: c:\program files\microsoft\office live\npOLW.dll
FF - plugin: c:\program files\opera\program\plugins\np_gp.dll
FF - plugin: c:\program files\virtual earth 3d\npVE3D.dll
FF - HiddenExtension: Microsoft .NET Framework Assistant: {20a82645-c095-46ed-80e3-08825760534b} - c:\windows\microsoft.net\framework\v3.5\windows presentation foundation\dotnetassistantextension\
FF - HiddenExtension: Java Console: No Registry Reference - c:\program files\mozilla firefox\extensions\{CAFEEFAC-0016-0000-0005-ABCDEFFEDCBA}
FF - HiddenExtension: Java Console: No Registry Reference - c:\program files\mozilla firefox\extensions\{CAFEEFAC-0016-0000-0007-ABCDEFFEDCBA}
FF - HiddenExtension: Java Console: No Registry Reference - c:\program files\mozilla firefox\extensions\{CAFEEFAC-0016-0000-0010-ABCDEFFEDCBA}
FF - HiddenExtension: Java Console: No Registry Reference - c:\program files\mozilla firefox\extensions\{CAFEEFAC-0016-0000-0011-ABCDEFFEDCBA}

============= SERVICES / DRIVERS ===============

R0 Lbd;Lbd;c:\windows\system32\drivers\Lbd.sys [2009-1-20 64288]
R1 bsofrwl;bsofrwl;c:\windows\system32\drivers\bsofrwl.sys [2009-4-21 29024]
R2 ISD;Intel(r) 82802 Firmware Hub Device (Intel(r) Security Driver);c:\windows\system32\drivers\ISECDRV.SYS [2009-4-1 32108]
R2 Lavasoft Ad-Aware Service;Lavasoft Ad-Aware Service;c:\program files\lavasoft\ad-aware\AAWService.exe [2009-9-24 1170768]
R2 SgtSch2Svc;Seagate Scheduler2 Service;c:\program files\common files\seagate\schedule2\schedul2.exe [2008-6-24 431384]
R3 KeyScrambler;KeyScrambler;c:\windows\system32\drivers\keyscrambler.sys [2009-10-8 115312]
S2 LANPkt;Linksys LANPkt Protocol Driver;c:\windows\system32\drivers\lanpkt.sys --> c:\windows\system32\drivers\LANPkt.sys [?]
S2 NwSapAgent;SAP Agent;c:\windows\system32\svchost.exe -k netsvcs [2003-3-31 14336]
S2 tmpreflt;tmpreflt;\??\c:\progra~1\avanqu~1\fix-it\tmpreflt.sys --> c:\progra~1\avanqu~1\fix-it\tmpreflt.sys [?]
S3 getPlusHelper;getPlus(R) Helper;c:\windows\system32\svchost.exe -k getPlusHelper [2003-3-31 14336]
S3 MailScan;MailScan;\??\c:\progra~1\avanqu~1\fix-it\mailscan.sys --> c:\progra~1\avanqu~1\fix-it\MailScan.sys [?]
S3 StumbleUponUpdateService;StumbleUponUpdateService;c:\program files\stumbleupon\StumbleUponUpdateService.exe [2008-12-18 120168]

=============== Created Last 30 ================

2009-10-14 03:58:02 0 dc-h--w- c:\docume~1\alluse~1\applic~1\{CFBD8779-FAAB-4357-84F2-1EC8619FADA6}
2009-10-08 06:36:12 115312 ----a-w- c:\windows\system32\drivers\keyscrambler.sys
2009-10-08 06:36:11 0 d-----w- c:\program files\KeyScrambler
2009-10-06 09:53:50 0 d-----w- c:\docume~1\briank~1.wel\applic~1\FCTB000061107
2009-10-06 09:52:53 0 d-----w- c:\program files\AddThis Toolbar
2009-10-02 18:02:10 0 d-----w- c:\program files\LastPass
2009-09-30 06:24:00 0 d-----w- c:\program files\IrfanView
2009-09-30 03:37:17 0 d-----w- c:\documents and settings\brian k. welch\dwhelper

==================== Find3M ====================

2009-10-26 19:21:22 12288 ----a-w- C:\mtwb.dat
2009-10-21 04:05:25 9468 ----a-w- c:\docume~1\briank~1.wel\applic~1\wklnhst.dat
2009-09-23 12:55:23 64288 ----a-w- c:\windows\system32\drivers\Lbd.sys
2009-09-18 12:36:50 131072 ----a-w- c:\windows\system32\datestamp.dll
2009-09-11 14:18:39 136192 ----a-w- c:\windows\system32\msv1_0.dll
2009-09-04 21:03:36 58880 ----a-w- c:\windows\system32\msasn1.dll
2009-09-03 09:17:47 15688 ----a-w- c:\windows\system32\lsdelete.exe
2009-08-29 08:08:21 916480 ----a-w- c:\windows\system32\wininet.dll
2009-08-26 08:00:21 247326 ----a-w- c:\windows\system32\strmdll.dll
2009-08-20 20:09:06 1193832 ----a-w- c:\windows\system32\FM20.DLL
2009-08-07 00:23:46 274288 ----a-w- c:\windows\system32\mucltui.dll
2009-08-07 00:23:46 215920 ----a-w- c:\windows\system32\muweb.dll
2009-08-05 09:01:48 204800 ----a-w- c:\windows\system32\mswebdvd.dll
2009-08-04 15:13:08 2145280 ----a-w- c:\windows\system32\ntoskrnl.exe
2009-08-04 14:20:09 2023936 ----a-w- c:\windows\system32\ntkrnlpa.exe

============= FINISH: 23:49:42.67 ===============

Read other answers
Preferred Solution: Apps Deleted from Registry Still Open @ Startup

I recommend downloading and running DAP. It can help sort out any driver and firmware related issues on your system

It's worked out well for many of us in the past.

You can download it direct from this link http://downloaddap.org. (This link will open the download page of DAP so you can save a copy to your computer.)


Well, I recently had the trojan win32.agent.pz on my computer, which infected ntos.exe on my computer and created a registry that starts it up along with winlogon.exe
After 2 days of trying everything I was able to delete the trojan off my computer, but I also had to delete the startup registry of winlogon.exe/ntos.exe (I tried editing out the ntos.exe from the binary, but it wouldnt accept the changes)

So now, I can boot my computer but as soon as I sign on to any account, it logs me out instantly, only showing the desktop for a split second.

I'm almost 98% sure its the winlogon.exe that isn't being executed at startup which means the accounts do not log on right.
I have checked my files on the recovery console and found out that winlogon.exe is still there and the trojans I deleted arent.
If I boot on Safe Mode(F8) the same login/instant logout happens with the admistrator account.

Is there any way I can change the startup programs so winlogon.exe is back on the list without having to log onto any accounts?

Right now I am considering buying an extra harddrive and restoring the new one to factory default and transfering the old data into the new one, seeing as this would be the cheapest option. Would this work to restore winlogon?

A:winlogon.exe startup registry deleted, cant log on

Read other 11 answers

I’ve got two startup entries that can’t be deleted.

+ 1 File not found: Ú
+ 2 File not found: Ú

They have the ability to clone most startup entries, and they can’t be permanently
Over the last year I have downloaded and ran multiple scans, with various malware applications from quite a few web site help forums.
None gave any indication of malware present, but I suppose you can’t rule it out.
The first time I notice something odd was with Misconfig, I had three startup entries for “SISUSBRG”.
I deleted two of them and disabled the original one.
The next time they re-appeared was as 1 and 2 program entries

I purchase the computer from PC world about 7 years ago.
Below is a brief description.
The computer is Advent T9101 Pentium 4
661FM2 series MS 7060 micro atx main board
SIS 661X chipset
Audio AC97
Realtek ALC655 S/W audio codec

Dixon’s reworked Windows home edition operating system.
The software that I uninstalled when I first purchase the computer was the following.
Home Cinema
Power producer
Home office
Nero 6
The information I got from “Process Monitor” boot log was the following.
Process name:Explorer.exe
Operation:Reg Enum Value
Type:Reg Binary
Data:07 05 DA7

Can anyone help please ?
I am still paying extended warranty to PC world.

A:2 Registry startup entries that can't be deleted

Read other 16 answers

first notice 2 startup entries when i was using CCleaner to clear temp files and cookies, so i deleted them.About 3 days later these 2 anonymous Registry entries were back.They look like the following"HKCU\run 1" "HKCU\run 2" no file name or file location.I then delete them from " HK_USERS/software/microsoft/windows/run", but about a week later they were back.this time they had cloned my anti virus startup file.I deleted both cloned virus startup files, but they came back again as you can see from HighJackThis log below.Logfile of Trend Micro HijackThis v2.0.2Scan saved at 19:17:37, on 18/02/2009Platform: Windows XP SP3 (WinNT 5.01.2600)MSIE: Internet Explorer v7.00 (7.00.6000.16791)Boot mode: NormalRunning processes:C:\WINDOWS\System32\smss.exeC:\WINDOWS\system32\winlogon.exeC:\WINDOWS\system32\services.exeC:\WINDOWS\system32\lsass.exeC:\WINDOWS\system32\svchost.exeC:\WINDOWS\System32\svchost.exeC:\Program Files\Alwil Software\Avast4\aswUpdSv.exeC:\Program Files\Alwil Software\Avast4\ashServ.exeC:\WINDOWS\Explorer.EXEC:\PROGRA~1\ALWILS~1\Avast4\ashDisp.exeC:\WINDOWS\system32\spoolsv.exeC:\Program Files\Alwil Software\Avast4\ashMaiSv.exeC:\Program Files\Alwil Software\Avast4\ashWebSv.exeC:\WINDOWS\system32\wuau... Read more

A:2 startup registry entries that will not stay deleted

Hello and welcome to Bleeping ComputerWe apologize for the delay in responding to your request for help. Here at Bleeping Computer we get overwhelmed at times, and we are trying our best to keep up. Please note that your topic was not intentionally overlooked. Our mission is to help everyone in need, but sometimes it takes just a little longer to get to every request for help.If you have since resolved the original problem you were having, we would appreciate you letting us know. If not please perform the following steps below so we can have a look at the current condition of your machine. If you have not done so, include a description of your problem, along with any steps you may have performed so far.Upon completing the steps below another staff member will review and take the steps necessary with you to get your machine back in working order clean and free of malware.If you have already posted a DDS log, please do so again, as your situation may have changed.Use the 'Add Reply' and add the new log to this thread.Thanks and again sorry for the delay.We need to see some information about what is happening in your machine. Please perform the following scan:Download DDS by sUBs from one of the following links. Save it to your desktop.DDS.comDDS.scrDDS.pifDouble click on the DDS icon, allow it to run.A small box will open, with an explaination about the tool. No input is needed, the scan is running.Notepad will open with the results.Follow the instructions that pop up for p... Read more

Read other 2 answers

Does anyone know how to clear out deleted Windows Store apps from the computer? When you go into the Windows Store and right click and choose 'your apps' the selection 'apps not istalled on this pc' still shows apps that I have deleted. I only installed on one device (unless they auto-install to the xbox360 also?). I cannot see how to clear out previously deleted apps. See attached pic to see what I am talking about.


A:Clear Deleted Store Apps (ie apps not istalled on this pc)

hope its not too soon to rebump...not critical but I want to figure this out...thx!

Read other 6 answers

I used a registry cleaner program and deleted some of registry values that I should not have, and of course I did not same the backup prior to deleting. Now my laptop wont charge or recognize that there is a battery. what can I do?

A:Registry cleaner deleted needed registry

Do a system restore from a restore point prior to using the reg cleaner.

Read other 14 answers

Tech Support Guy System Info Utility version
OS Version: Microsoft Windows 10 Home, 64 bit
Processor: Pentium(R) Dual-Core CPU T4500 @ 2.30GHz, Intel64 Family 6 Model 23 Stepping 10
Processor Count: 2
RAM: 3034 Mb
Graphics Card: Mobile Intel(R) 4 Series Express Chipset Family (Microsoft Corporation - WDDM 1.1)
Hard Drives: C: 283 GB (188 GB Free);
Motherboard: Dell Inc., 0N7J7M
Antivirus: Windows Defender, Enabled and Updated

Yesterday I ran the "Recovery and reset " programme on my laptop, after the programme ran and Windows was re-installed a list of apps had been removed, all of the desk top icons have been altered .... the web site name still remains, but the icons are all now what I presume are in default mode. The Dell Dock is missing and clicking on the icon I get a notification that the path does not exist ?. I think that I have really goofed this time !, is there a way to restore the apps and icons ?.
Thank you

Read other answers

I had upgraded to Win 8 pro from Win 7 by digital download from MS and installed on 1 desktop and 2 notebooks. All upgrades went fine. However only the desktop functioned normally. Both the notebooks would not function as expected.

The problem started soon after installation. The Tiles became unresponsive, the screen would blank out when any of the Tiles were clicked. Tried contacting MS support, only to waste 2 hours while the Tech checked settings etc. but to no avail. I was told that I would be transferred up to level 2 support but since I had no more time or patience I have not followed this up till now.

Refresh Windows had been tried once. With no change.

In my infinite wisdom the next day I tried Refresh a second time and lo and behold all my installed Applications (software) vanished including MS Office 2010. Cannot be seen or found by search. The same is the case with notebook no. 2.

At this point I do not care about the tiles etc. just getting my apps and associated data back intact. With Explorer I can see that these program files still reside on the HD. When I tried to invoke them directly by clicking the appropriate .exe files I got the message the " ERROR The operating system is not configured properly to run these applications."

Please any input will be highly appreciated. I am desperate. Thank you

A:Refresh deleted my Apps

Well this is a new one...

By 'refresh' I think you mean reinstall windows? In that case all of your programs WILL disappear...

The best guess as to why windows 8 doesn't work good is because notebooks aren't fully supported for some reason. There are a few people asking about this, and Microsoft might add in more support in future updates for this.

There was a similar thread where someone posted asking if Microsoft will eventually add support for net books...

Personally I think Microsoft intends to let net books, notebooks and any other similar device die. With the new tablets out, there really seems no need for them it seems. So if your notebooks don't get supported in future updates, you'll know why.

Sorry to say...

Read other 21 answers

I have Vundo trojan in my registry. I tried Vundofix.exe, fixvundo.exe and many other program. Vundofix.exe removed vundo from regular files but unable to remove from registry. Also, i can't open any file on desktop and under start>programs. All of my icon changesd and missing supporting program. If i click on any file on desktop or under start program it pop up windows saying following:"Windows cannot open this file:File: filename with LNK extention (all of my program has .lnk extention)To open this File, windows needs to know the program created it. Windows can go online to look it up automatically or you can manually select from a list of programs on your computer"I tried spybot, ad-aware, trendmicro (housecall), etc. Problem is hard to remove virus, trojan etc from registry. Program in control panel doesn't work so i can't even open add or remove program. i tried system restore with safe mode comand prompt but that doesn't work either. Please Help me.Here is logfile form hijackthis.Logfile of HijackThis v1.99.1Scan saved at 2:11:17 PM, on 4/15/2007Platform: Windows XP (WinNT 5.01.2600)MSIE: Internet Explorer v6.00 (6.00.2600.0000)Running processes:C:\WINDOWS\System32\smss.exeC:\WINDOWS\system32\winlogon.exeC:\WINDOWS\system32\services.exeC:\WINDOWS\system32\lsass.exeC:\WINDOWS\system32\svchost.exeC:\WINDOWS\System32\svchost.exeC:\WINDOWS\system32\spoolsv... Read more

A:Vundo Trojan In Registry Key. Can't Open Registry Nor Any File

WElcome to BC Download WinPFind3U.exe to your Desktop and double-click on it to extract the files. It will create a folder named WinPFind3u on your desktop.Open the WinPFind3u folder and double-click on WinPFind3U.exe to start the program.In the Files Created Within group click 30 daysIn the Files Modified Within group select 30 daysIn the File String Search group select Non-MicrosoftNow click the Run Scan button on the toolbar.When the scan is complete Notepad will open with the report file loaded in it.Click the Format menu and make sure that Wordwrap is not checked. If it is then click on it to uncheck it.Use the Add Reply button and Copy/Paste the information back here. I will review it when it comes in

Read other 12 answers

 I did a system restore because my mouse would freeze and my volume control button would not work. I have had multiple problems with this since upgrading to Windows 8; I have a Toshiba Satellite. Most of the apps that came with the laptop have now been deleted and I cannot re-install them. Can someone help?

A:Apps deleted after restore of system

What was the operating system on the laptop when you purchased it? How did you do the upgrade to windows 8 and / or 8.1? What installation disks do you have?
Sorry I don't have answers yet but I'm trying to understand what you have and how to solve the problem
Keep us posted

Read other 10 answers


Yesterday i experienced something very odd. Just suddenly all my programs shut down, windows still running. I noticed that my taskbar attached programs were replaced with white blank pages. On the desktop all my shortcuts, folders and such were gone, though 2 folders remained intact but with almost evering inside deleted only 2 files inside each of those survived. To make this worse alle my windows apps is deleted except of desktop, store, onedrive and camera. Even Paint and calculator is deleted.

btw i'm runnning W8 8.1

Has anyone ever encountered this? If anyone know what happened here i will be glad to know it.
But most importantly is there any way to recover my files?


A:Nearly all data, apps and shortcuts deleted!

Hi and Welcome to TSF!

You didn't happen to refresh your Windows 8 system did you?

What about a hard drive crash? New user account created?

Read other 6 answers

I haven't looked in for quite a while, but I still see posts about Win 11 registry analysis, checks and editors.
Leave the registry alone - Win 11 can take care of it.
There are many apps on the internet that say they can improve, defrag and edit the registry.
All of them will cause you many problems - leave them alone, do not install.

Regards to all, Murky.
(aka DavidT)

A:danger ! win 11 registry apps

What is Win 11?

Read other 1 answers

I'm not able to delete Bring and some other apps using the dedicated command lines in Powershell and/or Powershell_ISE. Can someone help?

I saw here that I'm not the only one experiencing this issue (did not try that link):
Cortana - Enable or Disable in Windows 10

For the rest, interesting new features in the settings menu. The installer asks to confirmed the Home or the Pro version and sees that I run the Pro version. On post-installation, the Pro version has similar behavior of the Home version. The very last thing that a Pro version owner wants to deal with is the HOME version.

Got the ISO from Micrsoft there:
Windows 10 ISO)

Read other answers

I'm not able to delete Bring and some other apps using the dedicated command lines in Powershell and/or Powershell_ISE. Can someone help?

I saw here that I'm not the only one experiencing this issue (did not try that link):
Cortana - Enable or Disable in Windows 10

For the rest, interesting new features in the settings menu. The installer asks to confirmed the Home or the Pro version and sees that I run the Pro version. On post-installation, the Pro version has similar behavior of the Home version. The very last thing that a Pro version owner wants to deal with is the HOME version.

Got the ISO from Micrsoft there:
Windows 10 ISO)

Read other answers

I can tell my computer is still infected with something because I can't download Hitman Pro or other programs that may help me continue scanning. The ones I have detect nothing (used rkill, then TDSSKiller and MBAM and Trend Micro Housecall). I can't even download HitmanPro and it deleted my MSE completely (which I also can't redownload). Firefox acts as if it downloaded these thing to my desktop and then it's not there.
I don't have another computer or a flash drive. What can I do?

A:Removed FBI Moneypak virus, deleted MSE but can't download MSE/Apps still.

Please follow the instructions in THIS GUIDE starting at Step 6. If you cannot complete a step, skip it and continue.Once the proper logs are created, then make a NEW TOPIC and post it HERE. Please include a description of your computer issues, what you have done to resolve them, and a link to this topic.If you can produce at least some of the logs, then please create the new topic and explain what happens when you try to create the log(s) that you couldn't get. If you cannot produce any of the logs, then still post the topic and explain that you followed the Prep. Guide, were unable to create the logs, and describe what happens when you try to create the logs.It would be helpful if you post a note here once you have completed the steps in the guide and have started your topic in malware removal. Good luck and be patient.If HelpBot replies to your topic, PLEASE follow Step One so it will report your topic to the team members.

Read other 3 answers

I believe I have registry errors but it could be a lot more. It started when I updated my paid version of Avast and after running SuperAntiSpyware full scan and doing a disk cleanup. Now many things don't work. I couldn't even do a HiJackThis. When I tried, it got as far as the HiJackThis.msi then gave me a blank screen. The following errors are sporadic, meaning they may work the first time but not the second or perhaps not even the first or third. There is no consistency. I sometimes get errors saying "insufficient system resources", or if I try to launch Google Chrome or MO Excel, it'll say XXX.exe not a valid command. I even tried doing a Disk Error Check and it came back almost immediately with "system is clean" without even going through the steps. RESTART does not work either. I have to log off and log back on again. And if I try to change my screen resolution, my screen will die and I will have to do a hard boot.

Any suggestions? I cannot afford to lose the data that I have.

A:Registry errors, maybe??? Many apps don't work. NEED ADV. HELP!

Read other 13 answers

i have new computer , drive C: has windowsxp installed. i want to take drive f from my old computer, put it in my new one (it mainly has programs). question is: how do i update the winxp registry on new comp so it like knows the programs and stuff? also , i do not want to import the entire old registry as it has some stuff i dont want. ideas?

A:new comp, old apps, how to rebuild registry

The best way to get your programs on the new drive is to reinstall them . . there may be some hacks to be made, but a high risk of screwing it up royally

Read other 3 answers

Anyone aware of any utility(s) that will allow for the identification, and extraction of all apps that were formerly installed from an (RegEdit) exported (complete) registry. Sure would save me a hunk of time having to re-install a bunch of s/w. I have many of the activation keys.

Randy Reist
Perpetual s/w Tweaker

A:Recover Installed Apps from Old Registry

Quote: Originally Posted by Lairbear

Anyone aware of any utility(s) that will allow for the identification, and extraction of all apps that were formerly installed from an (RegEdit) exported (complete) registry. Sure would save me a hunk of time having to re-install a bunch of s/w. I have many of the activation keys.

Randy Reist
Perpetual s/w Tweaker

Nothing I have ever encountered provides for that functionality. The only way I would trust the software to run properly with all necessary registry entries would be a reinstall.


Read other 3 answers

I was having pop ups and I figured my computer was infected, so I scanned with SuperAntiSpyware and got some things and deleted them. They were a bunch of Vundo Variant, EC and S something. Before, I wanted to try my Malwarebytes, but it wouldn't open, even after the scanning and restarting. Also my flash won't work in IE, but it does in firefox. I don't know whats up, can anyone help? Also I think I'm infected because my computer has stuff running in the background.. when I'm doing nothing. While I did this Hijack this, I was scanning with spyboy search and destroy...Logfile of Trend Micro HijackThis v2.0.2Scan saved at 7:00:39 PM, on 10/24/2009Platform: Windows XP SP3 (WinNT 5.01.2600)MSIE: Internet Explorer v7.00 (7.00.6000.16827)Boot mode: NormalRunning processes:C:\WINDOWS\System32\smss.exeC:\WINDOWS\system32\winlogon.exeC:\WINDOWS\system32\services.exeC:\WINDOWS\system32\lsass.exeC:\WINDOWS\system32\Ati2evxx.exeC:\WINDOWS\system32\svchost.exeC:\WINDOWS\System32\svchost.exeC:\WINDOWS\system32\svchost.exeC:\WINDOWS\system32\LEXBCES.EXEC:\WINDOWS\system32\spoolsv.exeC:\WINDOWS\system32\Ati2evxx.exeC:\WINDOWS\system32\LEXPPS.EXEC:\WINDOWS\Explorer.EXEC:\WINDOWS\arservice.exeC:\Program Files\Symantec\LiveUpdate\ALUSchedulerSvc.exeC:\PROGRA~1\AVG ... Read more

A:Malwarebytes won't open, mbam.exe won't open and is deleted, I'm infected with something!

Hello VersaniWelcome to BleepingComputer ==========================Download OTL to your desktop.Double click on the icon to run it. Make sure all other windows are closed and to let it run uninterrupted.When the window appears, underneath Output at the top change it to Minimal Output.Under the Standard Registry box change it to All.Check the boxes beside LOP Check and Purity Check.Click the Run Scan button. Do not change any settings unless otherwise told to do so. The scan wont take long.When the scan completes, it will open two notepad windows. OTL.Txt and Extras.Txt. These are saved in the same location as OTL.Please copy (Edit->Select All, Edit->Copy) the contents of these files, one at a time, and post it with your next reply.===========Download This file. Note its name and save it to your root folder, such as C:\.Disconnect from the Internet and close all running programs.Temporarily disable any real-time active protection so your security program drivers will not conflict with this file.Click on this link to see a list of programs that should be disabled.Double-click on the downloaded file to start the program. (If running Vista, right click on it and select "Run as an Administrator")Allow the driver to load if asked.You may be prompted to scan immediately if it detects rootkit activity.If you are prompted to scan your system click "Yes" to begin the scan.If not prompted, click the "Rootkit/Malware" tab.On the right-side, all items to be scanned should be checked by d... Read more

Read other 1 answers

Whilst installing a Windows 10 update I had a power cut and when I got back on my whole computer was basically wiped it takes 40 mins to log in and when I do I have no apps and can only access my folders! When I click anything else i get a message " location error" conserning system 32 and a "java script error" please help !!

Read other answers

Ok. I was using the RegCleaner and clearing out some unused keys made by programs i no longer had on the computer....

It was simple enough and nothing going wrong, no harm done. I went to go take a piss and when i came back i found my buddy on my pc...

He asked "what the H*** is all this??" and i said "its my registry" and he goes "o you dont need any of that" and no sooner did those words come outa his mouth did he press Shift + A & DELETE and poof

all my reg keys were gone.
i dunno if i have a back up present.

what i can say is that every time i try to click on something now it says its either been moved, deleted, or renamed... blah blah blah

nothing works anymore besides my internet. i cant even run .zip files because it says there is no program to do it with. theres no program to "open" files with. all because my screw up friend over here decided he knew what he was doin with my pc....ugh

im stuck. help.

A:What to do if you deleted your registry...

Read other 10 answers

When going and manually removing some maleware (tdsserv, karna) I was following some instructions on exterminate-it.com and it told me to delete


However, after reading more site info, it appears I should have deleted values in the key and not the key itself.

Is it possible to restore the key?

A:Deleted Registry Key

Are there any adverse effects from deleting it?

Have you rebooted the system to see if it is automatically replaced?


Read other 4 answers

I had a problem with Trojan, in war against it I stupidly manualy deleted the key value from: HKLM\Software\Classes\exefile\shell\open\command\ Now I can not run some executables...

Please help me, write me what key with value should there be ?
thanks for quick help J

Read other answers

Don't ask em why I did it--wanted to get rid of that inactive networking icon. Some site said to delete this:HKEY_CLASSES_ROOT\CLSID\{7007ACCF-3202-11D1-AAD2-00805FC1270E} --- I did, and not only did the undesirable icon disappear but so did my dial-up icon. Obviously I can get on-line but you can't see the connection active down at the bottom. Had NO business doing this-- since computers and I don't get along that well. I'd really like to put this registry blunder back to square one. XP Media Center computer. Can anyone advise me how to restore this? If so, advise would have to be given like talking to a computer moron--(hey, I DID delete a registry key) And yes, I will resist all urges to monkey with the registry again! Thank you.

A:I Deleted A Registry Key...

It may or may not work to run sfc /scannow.
But it won't hurt.

Click Start/RUN & type in sfc /scannow.
There is a space between the c & the /.
Click OK.
It runs.
It may prompt for the xp cd.
or not.
When it goes away check to see if the problem is fixed.
You may need to reboot.

Read other 7 answers

Very stupid I know but I deleted a registry key based on a suggestion in an article that I googled. We were having issues with a Citrix receiver and the article said to delete the register key HKEY LOCAL MACHINE...something like that...well I did.

I first had to figure out how to get to the registry keys...I went to programs and then accessories...then it said to right click on command prompt and I think if I remember right it said choose run in administrator...that's how my nightmare started.

I found the registry key that said the local machine thing and then it dropped down a menu and I saw "software" so that's what I deleted....after that I could not click on anything and get it to open...I flipped out and wanted to do a system restore but every time I clicked on anything it would say something like this application was not available...something to that effect...I cannot remember the exact wording. Again, flipped out and decided to just turn off my computer and turn it back on again but when I did this it came back on and went to the black screen with white letters that says window shut down improperly and it gives you 4 options for how u want to open windows...safe mode, normally etc...well I tried every mode and it just goes to a black screen...I can move my cursor around on the screen but there is absolutely nothing on the screen...nothing to click on and you can't type or anything.

Is there any hope for undoing what I have done???

A:Deleted registry key

Read other 16 answers

I have downloaded 4 free programs (Reg Cleaner, SpyBot Search & Destroy, WINner Tweak, WinPatrol)several months ago but recently I started to receive error messages "Your Maximum Registry Size is too Small, to insure that Windows runs properly, increase your maximum registry size. For information, see help" and System is low on virtual memory" I started to use all 4 of these programs to remove spyware and the registry. I believe the information is still in the RegCleaner back-up program but I cannot retrieve it. The recyecle bin has not been emptied.

The programs are no loner working with the exception of Internet Explorer and Outlook but I cannot send or receive messages through Outlook - the error message in Outlook is missing a file "msiexec.exe.

I cannot update the RegCleaner or any of the programs as the computer will not let me download the programs.

Please help.

A:HELP! Deleted Registry!!!

Read other 16 answers

Hi, I was imaging and building a PC for windows 7. It kept saying that when i logged in was creating a Temp folder. I googled and learned that I should delete the profile list, but that was wrong move because I deleted the WHOLE profile list. The computer started acting weird and now it is telling me that the windows build is not genuine.

I tried accessing the command line or notepad to recreate the key, but to no avail. I can not even get back to the registry. It's as if there are no more programs. Do I reinstall windows from the image I have on my usb drive? How do I fix this?


A:Deleted a key from the registry!

Yes, reinstall again. If you deleted the entire profile list folder then reinstalling is your best solution.

Read other 3 answers

Hi guys,

was running a clean-up program a coupl eof days ago and i think that i might have selected a couple of wrong boxes cos nothing is showing up on the add/remove list. i think i might have deleted some important registry entries.

how can i sort it? are there any tools that do it or are i gonna have to reinstall everything?

cheers in advance

A:Deleted Registry

What cleaner where you using as most make a backup somewhere

Also you can use System Restore to a date before you used the cleaner and that should work.

Read other 2 answers

First a suggestion about running scan disc when I took off all the things running in background and ran scan disc it did it in under 45 min. also ran Norton defrag (Speed disc) and it shot through in under 6 minuets. (Do this by pressing, alt-cntrl-del and take every app off except Explorer and Systray.)I discovered this when I saw that scan disc could never complete it's operation and the same problem was happening with all the new Symantec features.

What is the purpose of a Windows app called "scan registry" I notice it is among the startup programs when I view start up from MS CONFIG. I would like to remove it from the startup program list - do you think that is a good idea??

A:running scandisc & other apps - Scan registry

Hiya and Welcome

Good tip. As for the scan registry, you need to keep this on. What this does is scan your system at startup and backs your registry up. This is needed in case you need to restore your system.

To see what I mean, reboot to DOS and at the prompt type the following. There is a space before the /

scanreg /restore

There are a load of dates. If you ever have problems, you can restore the system back to how it was prior to the problem this way.



Read other 3 answers

Hello, this is my first post on this forum, and I hate that I had to do this way. I let my boyfriend use my computer when I first bought it (which was less than a month ago!) and he said he installed something called ESET/NOD 32 Firewall. Well, it started acting funny and so I uninstalled it and put Comodo on instead. By acting funny, I mean that it was connecting out to random IP's in England (I checked using IPNet) and it wasn't updating but it kept saying that it was. Well, to make the long story short, after that none of my antivirus, antispyware or registry cleaners (including Security Task Manager) would open or work. They kept saying things like "the program is not working" or "has stopped working". I already attempted to do some "fixing" on my own, by reading and folowing others HJT log posts etc. ... so included in the next couple of posts are my "deckers log", "ccleaner" and "HJT log". Also, here is the info on the NOD 32 program that just WONT GO AWAY.Windows Registry Editor Version 5.00[HKEY_LOCAL_MACHINE\SOFTWARE\ESET\ESET Security\CurrentVersion\Info]"EditionName"="TemDono FiX 1.1 (Free Updates - Expire in 2050)"C:\Windows\system32>notepad C:\Windows\nod32fixtemdono.regCopy from deckers ...Deckard's System Scanner v20071014.68Run by Wes & Amanda on 2008-03-11 02:22:02Computer is in Normal Mode.----------------------------... Read more

A:All Antivirus, Spyware And Registry Apps Not Working

Wasn't sure what would fit so here is more from deckers (extra log) ...

Deckard's System Scanner v20071014.68
Extra logfile - please post this as an attachment with your post.

-- System Information ----------------------------------------------------------

Microsoft? Windows Vista? Home Premium (build 6000)
Architecture: X86; Language: English

CPU 0: AMD Turion™ 64 X2 Mobile Technology TL-60
Percentage of Memory in Use: 44%
Physical Memory (total/avail): 1982.31 MiB / 1108.86 MiB
Pagefile Memory (total/avail): 4185.28 MiB / 3092.61 MiB
Virtual Memory (total/avail): 2047.88 MiB / 1905.78 MiB

C: is Fixed (NTFS) - 220.95 GiB total, 101.8 GiB free.
D: is Fixed (NTFS) - 11.93 GiB total, 1.86 GiB free.
E: is CDROM (No Media)

\\.\PHYSICALDRIVE0 - WDC WD2500BEVS-60UST0 ATA Device - 232.88 GiB - 2 partitions
\PARTITION0 (bootable) - Installable File System - 220.95 GiB - C:
\PARTITION1 - Installable File System - 11.93 GiB - D:

-- Security Center -------------------------------------------------------------

AUOptions is scheduled to auto-install.
Windows Internal Firewall is enabled.

FW: COMODO Firewall Pro v3.0 (COMODO)
AV: AVG 7.5.516 v7.5.516 (Grisoft)
AS: Spyware Doctor v5.5.0.204 (PC Tools) Disabled
AS: AVG Anti-Spyware v7, 5, 1, 36 (GRISOFT s.r.o.) Disabled Outdated
AS: Windows Defender v1.1.1505.0 (Microsoft Corporation)

[HKLM\System\CurrentContro... Read more

Read other 2 answers

I am trying to fix my sisters laptop, which is a hp pavilion dv6 2100nr. She told me she dropped it while it was turned on and it wont start up anymore, it also has a new issue causing the system to only power on or stay on when the laptop is charging. I started by running windows start up which just looped, then I ran windows 7 and noticed there are 4 partitions the system, operating, hp tools, and recovery. I deleted the system and operating partitions and reinstalled win 7 on the partition. The reinstall was still no good after restarting it looped start up repair again, I ran another installation of win 7 and same results except this time the computer started up fine and I installed missing drivers and win updates restarted the computer and I was back at the beginning again with the startup repair looping again, safe mode goes right to issue at hand. Im debating what I should do other than deleting all partitions and formatting the hard drive, then running clean install of win 7. Anyone have a solution or a suggestion, Here are the details after last re-installation of win 7 and start up repair beginning:

the following startup option will be repaired:
Name: Windows Boot Manager
Identifier: {9DEA862C-5CDD-4E70-ACC1F32B344D4795}

The following startup options will be added:
Name: WIndows Recovery Environment (recovered)
Path: Recovery \WindowsRE\Winre.wim
Windows Device: Partition=E: (13424MB)

A copy of the current boot configuration data will be saved as: C:\Boot\BCD... Read more

A:startup problem - startup loop/corrupt registry

I would suggest wiping the hard drive (with DBAN or KillDisk) and reinstalling Windows with the HP disks.
If the system still has problems - then it's most likely a hardware issue and it will need repairing.

Read other 2 answers

I had a boot sector virus(I think) and could not boot my Lenovo Think centre 6239. I tried everything including AVG boot disk and ran scans. I still am not able to re-format the computer with XP Pro. it tells me"windows\system32\config\system" file is missing or corrupt. It cannot find my c drive in mini xp. Is the registry part of the xp install? How can I get it back? Thanks in advance

A:Solved: I think I have deleted my registry???

Read other 7 answers

Recently, the background picture on my mom's computer disappear. I tried to get it come back, but nothing happened and there were no event log errors. I poked around the registry and notice that the System policy in KEY_CURRENT_USER\Software\Microsoft\Windows\ CurrentVersion\Policies has entirely disappeared. What could have cause this issue suddenly. The virus checker hasn't detected any virus and she basically visits only 3 sites any way. Her vector for infection is pretty slim.

Is there someone to check to see if there are further registry damage?

How should I tried to fix this? I can try using a restore point or just add the registry entry back manually.



A:What caused the registry to be deleted?

Read other 9 answers

I'm a total newby to this, and a bit of a moron when it comes to computers (I don't RTFM).

Here's the problem: Some time ago, I suffered from a total loss of my CD/DVD drive from 'My Computer'. I did a google search, which brought up 'http://techguy.org/322107'. I checked out some others for a comparison and they all said the same sort of things would cure it. So I jumped straight in and did it, with a level of success. However, what I failed to do (because of my pea sized brain) was back up! I can now see my CD/DVD drive, but it doesn't work properly. It reads, but doesn't write. I tried to re-install the drivers, software used to burn etc, but it still doesn't do it.

Is there any way of getting the files back into the registry? & If I do so, will it give me back the problem I had in the first place?

BTW, I did try a system restore, with no luck, because it was done a while ago and the restore points didn't go back far enough!

Please help...? :,(

Read other answers

Please Help:

Fighting with a worm, I accidentaly (didn't know what I'm doing) deleted the HKEY_LOCAL_MACHINE/SYSTEM/ControlSet001/Control/LSA key and also the same LSA key in the ControlSet003/Control and in the CurrentControlSet/Control.
After doing this huge error, the system loads up to the black screen where you begin seeing the cursor then reboots.
When trying SAFE MODE, it does the same: boots up to a point, then reboots.

Now I was trying to rebuild the LSA key by Hive Loading the "System" registry on a working system.
First, I can't find the CurrentControlSet Key anylonger. It just doesn't exist. There is a new empty key called LastKnownGoodRecovery.

So I copied the data from the working computer's LSA registry key (a lot of subKeys have binary data) and I put it in the ControlSet001/Control/LSA, I unhive the registry and went back to the dead system and tried: the system still does the same boot up to a point then reboots.

Before I reformat the drive, maybe somebody has an ideea...


A:PLS HELP-Have deleted \System\LSA Registry Key

Part one
In part one, you start the Recovery Console, create a temporary folder, back up the existing registry files to a new location, delete the registry files at their existing location, and then copy the registry files from the repair folder to the System32\Config folder. When you have finished this procedure, a registry is created that you can use to start Windows XP. This registry was created and saved during the initial setup of Windows XP. Therefore any changes and settings that occurred after the Setup program was finished are lost.

To complete part one, follow these steps: 1. Insert the Windows XP startup disk into the floppy disk drive, or insert the Windows XP CD-ROM into the CD-ROM drive, and then restart the computer.
Click to select any options that are required to start the computer from the CD-ROM drive if you are prompted to do so.
2. When the "Welcome to Setup" screen appears, press R to start the Recovery Console.
3. If you have a dual-boot or multiple-boot computer, select the installation that you want to access from the Recovery Console.
4. When you are prompted to do so, type the Administrator password. If the administrator password is blank, just press ENTER.
5. At the Recovery Console command prompt, type the following lines, pressing ENTER after you type each line:
md tmp
copy c:\windows\system32\config\system c:\windows\tmp\system.bak
copy c:\windows\system32\config\software c:\windows\tmp\software.bak
copy c:\windows... Read more

Read other 1 answers


I may have deleted stuff in the registry that I should not have. I tried to delete everything with "Microsoft Office 2000" in it, but may have deleted some other stuff too. I now have some problems, but I am not sure what they are (it's a little here and a little there), so I would like to ask a general question:

I have run the startup repair option in Windows 7. But what I can't find is a feature with which I can replace/repair system files that may have been deleted or corrupted. I do not have any restore points, in spite of the documentation saying that they are created automatically (that is another problem for me). Inparticular, Windows INtaller (5.0 in Win7) might have been 'hurt'.

So, to start, what can I do to check system file integrity?

Thank you very much!

Hans L

A:I may have deleted stuff in the registry (Win 7)

From cmd

sfc /scannow

Read other 6 answers

Hi, Am on Windows 7, and reinstalled it couple of times before, although it works probably, but games dont work, gives me crashAPP message, and even failed to install it. even play player dont play some files. am wondering is this is due to deleted Reg keys, and how can I restore deleted reg keys if I reinstalled windows. or reinstalling windows has the cure ?

A:Deleted Registry Keys


If you haven't made a back-up of whatever registry keys you deleted then I'm afraid they are gone, unless you have a restore point you can use to revert your system back to before you made the alterations.
Reinstalling Windows will rebuild the registry and give you a fresh start.
Which keys did you delete and why?

What are the issues you are having as we may be able to help you without having to reinstall windows.

Regards Danny

Read other 9 answers

I searched and searched for help because my IE(6) was lagging whenever I input anything into form fields. I found out that it was caused by corrupt pstores files. Microsoft provided help for the issue so I followed instructions and deleted the pstores folder from my registry and the problem was corrected. But it then says to reinstall pstores.exe by using a DOS prompt and that does not work. After more searching, I found that I should do a full reinstall of IE6. Done and nothing. How do I get the pstores files back so that I can use AutoComplete?

Also, an unrelated problem. My windows calculator is gone. Every time I try to open it, it opens Explorer. I've tried Find Target and then did a search for the .exe file but I can't find it and can't find any help online. Any suggestions?

Thanks in advance

A:I deleted something from my registry and now I'm having problems

Read other 9 answers


Im in process of removing several viruses/trojans, and have had them recurring so tried to edit the registry myself using guides online that tell you wht to look for. I came across a whole list of websites within the registry maybe over 100 that list sex sites, and gambling sites and a whole lot of random sites e.g. at the top is 007guard.com, 008i.com. This was in the registry within internet settings/zonemap, I initilly paniced and thought has my comp been visiting these sites without my knowledge, and I deleted all of them including the folder itself, then I found the list again somewhere else in there and deleted tht, everything works fine on my comp but now scared what ive deleted!!!!! Help please dont say ive done something unfixable or thats going to leave me open to attack! I have several anti-malware packages running and I know ones such as spybot immunize the pc which i assume largely means internet explorer, could they be connected to this and would say downloading spybot and reimmunizing put them back (spybot isnt currently installed but was earlier today) ive deleted the whole domains folder itself! but am hoping this will work?

Or do I need to redownload internet explorer again or have i done something unfixable please help!

A:Registry elp scared what ive deleted

Why didnt you run and post mbam + SAS when they asked you to?
Take a look at your host file

Read other 2 answers

I had to recently replace my power supply. When I restored my system everything that had been added since 2004 was either inop or gone. In the mean time my wife or son opened facebook or my space and hooked into a virus called "Protection Center" along with its buddy "Defense Center". I tried all sorts of ways to remove these tough viruses and finally wiped the hard drive of most things on it. Once I got control of my PC back I began reloading all that was lost including my security programs. I think I erased some important functions while I was trying to get rid of the virus. Is there a free program available from windows,HP or compaq or someone reputable that can show me what I am missing such as dll's or registries? Can they also show me how to repair these lost functions without having me download some program that is "free" and then wants 10-20-30 dollars or more to actually fix the problem?

thank you Den:

A:May have accidentally deleted some DLL's and Registry

and welcome to the Forum

Your first step should be to find out what drivers you need . .

Right click on My Computer and select Manage . . look in the next screen for devices marked with a ! or ? or shown as "Unknown"

Read other 1 answers

I have deleted my some registry folders accidently.
I tried to solve this from troubleshoot but there is showing no administrator account in this pc.
Plz help me

Read other answers

Can anybody help me???? I accidently deleted files in the registry! The file I deleted is \Windows\32\Config\System. Please Help ME!!!

A:Help! Deleted Registry Files!

Please DO NOT double post for the same issue.

You are being helped here.


Read other 1 answers

I deleted the following file: C:\WINDOWS\system32\userinit.exe,
I am unable to log on to my computer.
I tapped F8 to get a command prompt but I am unsure which boot device
to select and what to do next.
Please help.

A:Deleted Registry File

First of all - why did you delete that file?

You can boot from your XP CD - go into the recovery console - and copy that file from your XP CD to the system32 folder.

Read other 5 answers

I accidently deleted some files in the registry and now the mouse and keyboard do not work. If i use the windows recovery software and take the computers settings back to as it was when purchased will my solution be resolved. please help thanx

A:deleted registry files

Since you've posted this in the 98/ME section, I'm assuming you're talking about a computer different from the one in your profile. If so, go to Help & Support in your computer, type in registry backup and you'll find the solution to your deletion problem.

Read other 4 answers

Being too hasty, and instead of deleting the linkfile with the IsShortcut value, I had a brainstorm and deleted the first Piffile entry I came to with an IsShortcut value in XP Pro to get shut of the arrows on the Icons. (I must have been thinking of ME at the time.)

Not having exported it, overconfidence having its price, and not remembering which Piffile I deleted the IsShortcut value from, can anyone bail me out and say which is the first Piffle entry in the Registry which has an IsShortcut value so I can put the dratted thing back in, please?

Thank you!

A:Help! Deleted wrong registry key!

Why not just do a system restore? That should fix the problem.

Read other 2 answers


I have Windows 2000 Professional and while trying to delete the 'Brilliant Dig' spyware I also deleted HKEY_CLASSES_ROOT\Interface\. And now I cant open some web pages especially the javascript links. It says 'Error on page'

Also, I cant open Microsoft Word anymore. If i try to do so it says: "the windows installer service could not be accessed. contact your support personnel to verify that the Windows Installer service is properly registered."

When I try to open a word document saved on my C\drive it says: "The file does not have a program associated with it for performing this action. Create an association in the Folder Options Control Panel."

In addition to these, when I try to update my AVG Anti virus I receive a message like there is a problem with the interface and it fails to update.

And finally some options like start-search-all files and folders and edit-find (on this page) commands do not work.

Hope you can help me with this problem?

A:Accidentally deleted a registry value

Read other 14 answers