Welcome guest. Before posting on our computer help forum, you must register. Click here it's easy and free.

Author Topic: Windows Registry  (Read 28512 times)

0 Members and 1 Guest are viewing this topic.

Broni


    Mastermind
  • Kraków my love :)
  • Thanked: 614
    • Computer Help Forum
  • Computer: Specs
  • Experience: Experienced
  • OS: Windows 8
Re: Windows Registry
« Reply #60 on: May 08, 2009, 03:49:34 PM »
I can't see anything.

Perform the action listed below, but leave Avast startup(s), and service(es) alone. After restart, try Avast scan again.

Go Start>Run (Start Search in Vista), type in:
msconfig
Click OK (hit Enter in Vista).

Click on Startup tab.
Click Disable all

Click Services tab.
Put checkmark in Hide all Microsoft services
Click Disable all.

Click OK.
Restart computer in Normal Mode.

NOTE. If you use different firewall, than Windows firewall, turn Windows firewall on, just for this test, since your regular firewall won't be running.
If you use Windows firewall, you're fine.


patio

  • Moderator


  • Genius
  • Maud' Dib
  • Thanked: 1723
    • Yes
  • Experience: Beginner
  • OS: Windows 7
Re: Windows Registry
« Reply #61 on: May 08, 2009, 06:57:48 PM »
I can't see anything either...
But my eyes are going .
" Anyone who goes to a psychiatrist should have his head examined. "

Sceptical

    Topic Starter


    Beginner
  • Thanked: 5
    Re: Windows Registry
    « Reply #62 on: May 09, 2009, 02:17:32 AM »
    O.k.
    Done that and will now run the scan.
    I take it you meant disable all then re check the Avast stuff?
    Cheers
    Did a thorough scan. Nothing found.
    « Last Edit: May 09, 2009, 04:03:47 AM by Sceptical »

    Broni


      Mastermind
    • Kraków my love :)
    • Thanked: 614
      • Computer Help Forum
    • Computer: Specs
    • Experience: Experienced
    • OS: Windows 8
    Re: Windows Registry
    « Reply #63 on: May 09, 2009, 09:25:59 AM »
    It's not about finding anything.
    You said:
    Quote
    Nearly a month after formatting and the BSOD's are back with a vengance.
    Two today within an hour of each other.
    The second happened trying to do a Avast virus scan
    Now, you ran the scan with most startups, and services disabled, and nothing happened.
    It's gonna be up to you to perform investigation.
    Go back to services, and enable one of disabled ones.
    Restart computer, and use it for a while.
    If nothing happens, enable another one, and so on, until you'll find the culprit.
    If services check out OK, start enabling startups, one by one.

    Sceptical

      Topic Starter


      Beginner
    • Thanked: 5
      Re: Windows Registry
      « Reply #64 on: May 09, 2009, 10:46:47 AM »
      Hmmm.
      I obviously did something wrong.
      I have just gone to services and they are nearly all checked.

      Epson V3 Service
      2x Google
      Windows card space
      Java
      Lavasoft
      NBService
      NMIndexing Service
      NVidea Display Driver Service
      Windows Media Network Sharing Service
      Are all unchecked.

      In Start Up only
      ash Disp and ctfmon are checked.

      In the general tab it is on selective sart up and Load System Services and the Start Up buttons are unchecked.
      Why would the services load if the button is un checked?
      Anyway, that rules out most of the services in one foul swoop.
      Do I actually need any of these start up items?

      Broni


        Mastermind
      • Kraków my love :)
      • Thanked: 614
        • Computer Help Forum
      • Computer: Specs
      • Experience: Experienced
      • OS: Windows 8
      Re: Windows Registry
      « Reply #65 on: May 09, 2009, 10:49:36 AM »
      I wanna see those startups better....

      Download, and install Quick Startup: http://www.glarysoft.com/qs.html
      Go File>Export, save report, and paste it into your next post.

      Sceptical

        Topic Starter


        Beginner
      • Thanked: 5
        Re: Windows Registry
        « Reply #66 on: May 09, 2009, 10:53:01 AM »
        There are onlt three running, did you want me to enable all and post that file?


            Name: avast!
            Path: C:\PROGRA~1\ALWILS~1\Avast4\ashDisp.exe
        Location: HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Run
         Status: Enabled
        ------------------------------------------------------------------------------------------

            Name: CTFMON.EXE
            Path: C:\WINDOWS\System32\CTFMON.EXE
        Location: HKEY_USERS.DEFAULT\Software\Microsoft\Windows\CurrentVersion\Run
         Status: Enabled
        ------------------------------------------------------------------------------------------

            Name: ctfmon.exe
            Path: C:\WINDOWS\system32\ctfmon.exe
        Location: HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Run
         Status: Enabled
        ------------------------------------------------------------------------------------------
        Total 3 Items

        Broni


          Mastermind
        • Kraków my love :)
        • Thanked: 614
          • Computer Help Forum
        • Computer: Specs
        • Experience: Experienced
        • OS: Windows 8
        Re: Windows Registry
        « Reply #67 on: May 09, 2009, 10:56:20 AM »
        Yes, please.

        Sceptical

          Topic Starter


          Beginner
        • Thanked: 5
          Re: Windows Registry
          « Reply #68 on: May 09, 2009, 10:57:16 AM »
          Startup List report created on 09/05/2009 by Startup Manager


              Name: avast!
              Path: C:\PROGRA~1\ALWILS~1\Avast4\ashDisp.exe
          Location: HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Run
           Status: Enabled
          ------------------------------------------------------------------------------------------

              Name: SunJavaUpdateSched
              Path: "C:\Program Files\Java\jre6\bin\jusched.exe"
          Location: HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Run
           Status: Enabled
          ------------------------------------------------------------------------------------------

              Name: Sony Ericsson PC Suite
              Path: "C:\Program Files\Sony Ericsson\Mobile2\Application Launcher\Application Launcher.exe" /startoptions
          Location: HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Run
           Status: Enabled
          ------------------------------------------------------------------------------------------

              Name: QuickTime Task
              Path: "C:\Program Files\QuickTime\qttask.exe" -atboottime
          Location: HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Run
           Status: Enabled
          ------------------------------------------------------------------------------------------

              Name: Omnipage
              Path: C:\Program Files\ScanSoft\OmniPageSE\opware32.exe
          Location: HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Run
           Status: Enabled
          ------------------------------------------------------------------------------------------

              Name: nwiz
              Path: nwiz.exe /install
          Location: HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Run
           Status: Enabled
          ------------------------------------------------------------------------------------------

              Name: NVRaidService
              Path: C:\WINDOWS\System32\nvraidservice.exe
          Location: HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Run
           Status: Enabled
          ------------------------------------------------------------------------------------------

              Name: NvMediaCenter
              Path: RUNDLL32.EXE C:\WINDOWS\system32\NvMcTray.dll,NvTaskbarInit
          Location: HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Run
           Status: Enabled
          ------------------------------------------------------------------------------------------

              Name: NvCplDaemon
              Path: RUNDLL32.EXE C:\WINDOWS\system32\NvCpl.dll,NvStartup
          Location: HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Run
           Status: Enabled
          ------------------------------------------------------------------------------------------

              Name: NeroFilterCheck
              Path: C:\Program Files\Common Files\Ahead\Lib\NeroCheck.exe
          Location: HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Run
           Status: Enabled
          ------------------------------------------------------------------------------------------

              Name: Cmaudio
              Path: RunDll32 cmicnfg.cpl,CMICtrlWnd
          Location: HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Run
           Status: Enabled
          ------------------------------------------------------------------------------------------

              Name: Adobe Reader Speed Launcher
              Path: "C:\Program Files\Adobe\Reader 9.0\Reader\Reader_sl.exe"
          Location: HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Run
           Status: Enabled
          ------------------------------------------------------------------------------------------

              Name: Ad-Watch
              Path: C:\Program Files\Lavasoft\Ad-Aware\AAWTray.exe
          Location: HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Run
           Status: Enabled
          ------------------------------------------------------------------------------------------

              Name: CTFMON.EXE
              Path: C:\WINDOWS\System32\CTFMON.EXE
          Location: HKEY_USERS.DEFAULT\Software\Microsoft\Windows\CurrentVersion\Run
           Status: Enabled
          ------------------------------------------------------------------------------------------

              Name: ctfmon.exe
              Path: C:\WINDOWS\system32\ctfmon.exe
          Location: HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Run
           Status: Enabled
          ------------------------------------------------------------------------------------------

              Name: swg
              Path: C:\Program Files\Google\GoogleToolbarNotifier\GoogleToolbarNotifier.exe
          Location: HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Run
           Status: Enabled
          ------------------------------------------------------------------------------------------

              Name: EPSON Stylus Photo R265 Series
              Path: C:\WINDOWS\System32\spool\DRIVERS\W32X86\3\E_FATIBNE.EXE /FU "C:\WINDOWS\TEMP\E_S146.tmp" /EF "HKCU"
          Location: HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Run
           Status: Enabled
          ------------------------------------------------------------------------------------------

              Name: Microsoft Office
              Path: C:\PROGRA~1\MICROS~3\Office10\OSA.EXE -b -l
          Location: C:\Documents and Settings\All Users\Start Menu\Programs\StartUp
           Status: Enabled
          ------------------------------------------------------------------------------------------
          Total 18 Items

          Broni


            Mastermind
          • Kraków my love :)
          • Thanked: 614
            • Computer Help Forum
          • Computer: Specs
          • Experience: Experienced
          • OS: Windows 8
          Re: Windows Registry
          « Reply #69 on: May 09, 2009, 11:09:06 AM »
          1. Download, and run  CTFMON-Remover: http://www.gerhard-schlager.at/en/projects/ctfmonremover/
          The CTFMON-Remover helps you removing the annoying CTFMON.EXE from your Windows operating system. The program is easy to use and displays whether the CTFMON.EXE is installed and running or not. If it was found then you can remove it within seconds. Just in case that you need the CTFMON sometime in the future there is also an option to restore the original one.
          Note:The CTFMON.EXE is among other things responsible for changing the language schema of your keyboard (e.g. for switching between the German and English keyboard layout). So in case you are using this feature you shouldn't remove or disable the CTFMON.EXE!
          NOTE. CTFMON.EXE is not a threat, but unnecessary startup, which can't be disabled in any other way.

          2. Download, and run QuickTime Killer: http://www.softpedia.com/get/System/Launchers-Shutdown-Tools/QuickTime-Killer.shtml
          After downloading, double click on EnGraphQuickTimeKillerInstaller.msi file.
          You may be asked to download, and install .NET Framework
          QuickTime Killer will remove QuickTime from start up and kill any running QuickTime processes. This application runs silently at start up and closes itself as soon as it takes care of QuickTime. QuickTime itself won't be removed from your computer, and will be available whenever needed.
          NOTE. QuickTime is not a threat, but unnecessary startup, which can't be disabled in any other way.

          3. I recommend, you uninstall Adobe Reader, along with Adobe Reader Speed Launcher, and switch to FoxIt: http://www.filehippo.com/download_foxit/. It's much lighter, and faster, than Adobe. It does very same thing.

          4. I recommend, you uninstall Ad-aware, which doesn't do much except for running an extra service on startup, even, if the program itself is not running.
          Much better alternatives:
          - SUPERAntiSpyware Free Edition: http://www.superantispyware.com/download.html
          - Malwarebytes' Anti-Malware (trial version is fully functionable): http://www.malwarebytes.org/mbam.php

          5. Using QuickStart, un-check following entries:
          - SunJavaUpdateSched
          - Sony Ericsson PC Suite
          - Omnipage
          - nwiz
          - NvCplDaemon
          - NeroFilterCheck
          - Cmaudio
          - EPSON Stylus Photo R265 Series
          - Microsoft Office

          Sceptical

            Topic Starter


            Beginner
          • Thanked: 5
            Re: Windows Registry
            « Reply #70 on: May 10, 2009, 04:57:00 AM »
            Step 1. Done

            Step 2. .NET Framework won't install, i have tried re booting but i just get 'Setup Error' in the top left of the .net framework 3.5 set up window?

            Step 3. In add remove i have Adobe AIR, Adobe Flash Player 10 Active X and Adobe Reader 9.1. Uninstall all?

            Step 4. Done

            Step 5. Done

            Broni


              Mastermind
            • Kraków my love :)
            • Thanked: 614
              • Computer Help Forum
            • Computer: Specs
            • Experience: Experienced
            • OS: Windows 8
            Re: Windows Registry
            « Reply #71 on: May 10, 2009, 10:00:33 AM »
            2. No big deal with QuickTime. Forget it.
            3. Leave Adobe Flash Player 10 Active X alone. Two others can go.

            Sceptical

              Topic Starter


              Beginner
            • Thanked: 5
              Re: Windows Registry
              « Reply #72 on: May 10, 2009, 03:45:27 PM »
              O.k.
              All done.
              What now, wait and see??

              Broni


                Mastermind
              • Kraków my love :)
              • Thanked: 614
                • Computer Help Forum
              • Computer: Specs
              • Experience: Experienced
              • OS: Windows 8
              Re: Windows Registry
              « Reply #73 on: May 10, 2009, 04:27:59 PM »
              Yeah, see how the computer will behave now.

              Sceptical

                Topic Starter


                Beginner
              • Thanked: 5
                Re: Windows Registry
                « Reply #74 on: May 11, 2009, 01:20:58 AM »
                O.k. Cheers for that.
                One thing since doing all this, on start up, as i go from the welcome screen to my account i get a quick flash of a command prompt screen, too quick to see anything.
                Is this a part of one of the progs i have installed?