[minnetonka]

This morning I found the computer unexpectedly hung up on "e:setup trying to install Microsoft Office 2003, but can't find installer." I didn't initiate anything, but after cancelling out repeatedly and restarting, it happened again.

I restored the Registry First Aid registry backup from last night's scan and on reboot did not get the message . But, I've had random instances lately where the "explorer.exe" hangs on reboot.

My Logitech keyboard died, and Friday night I tried to install software for new Microsoft keyboard and mouse new from Costco. It appeared to install, but I couldn't hook it up without it's s saying it wasn't found and did I want to uninstall old keyboard, etc. I said nuts to that and am limping along until new Logitech arrives.

In control panel there are no entries for the new MS keyboard/mouse--only the Logitech. I noticed in the Registry First Aid scan (after restoring, I scanned again ), that the entries for that initial install from e:setup etc. were still there.

I've never had problems before, and was going to change those entries to "cut the substring" but past assumptions on my part have resulted in further disasters, so am trying to get help before I self-destruct!

All that's been run since Friday is CounterSpy scan, Spysweeper and restored registry from Registry First Aid last night.

I downloaded and just ran current HiJackThis, but a string of error popups came up first. It went so fast I couldn't copy them. Feeling fairly frantic right now.

Logfile of HijackThis v1.99.1
Scan saved at 9:04:28 AM, on 3/5/2006
Platform: Windows XP SP2 (WinNT 5.01.2600)
MSIE: Internet Explorer v6.00 SP2 (6.00.2900.2180)

Running processes:
C:\WINDOWS\System32\smss.exe
C:\WINDOWS\system32\csrss.exe
C:\WINDOWS\system32\winlogon.exe
C:\WINDOWS\system32\services.exe
C:\WINDOWS\system32\lsass.exe
C:\WINDOWS\system32\Ati2evxx.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\System32\svchost.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\system32\Ati2evxx.exe
C:\WINDOWS\Explorer.EXE
C:\WINDOWS\system32\spoolsv.exe
C:\Program Files\Sunbelt Software\CounterSpy\Consumer\sunThreatEngine.exe
C:\Program Files\Sunbelt Software\CounterSpy\Consumer\SunProtectionServer.exe
C:\PROGRA~1\Grisoft\AVGFRE~1\avgemc.exe
C:\Program Files\Sunbelt Software\CounterSpy\Consumer\sunserver.exe
C:\PROGRA~1\Grisoft\AVGFRE~1\avgamsvr.exe
C:\PROGRA~1\Grisoft\AVGFRE~1\avgupsvc.exe
C:\Program Files\Executive Software\Diskeeper\DkService.exe
C:\Program Files\Sunbelt Software\Personal Firewall 4\kpf4ss.exe
C:\Program Files\Spyware Doctor\sdhelp.exe
C:\Program Files\Sunbelt Software\Personal Firewall 4\kpf4gui.exe
C:\WINDOWS\system32\svchost.exe
C:\Program Files\Webroot\Spy Sweeper\WRSSSDK.exe
C:\WINDOWS\system32\wdfmgr.exe
C:\Program Files\Canon\CAL\CALMAIN.exe
C:\Program Files\Sunbelt Software\Personal Firewall 4\kpf4gui.exe
C:\Program Files\Mozilla Firefox\firefox.exe
C:\Hijack This\HijackThis.exe

R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = http://www.netscape.com/
R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Local Page = c:\Program Files\Common Files\Microsoft Shared\Stationery\Blank.htm
R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Local Page = c:\WINDOWS\pchealth\helpctr\System\panels\blank.htm
R1 - HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings,ProxyOverride = localhost
O2 - BHO: Adobe PDF Reader Link Helper - {06849E9F-C8D7-4D59-B87D-784B7D6BE0B3} - C:\Program Files\Adobe\Acrobat 7.0\ActiveX\AcroIEHelper.dll
O2 - BHO: (no name) - {53707962-6F74-2D53-2644-206D7942484F} - C:\PROGRA~1\SPYBOT~1\SDHelper.dll
O2 - BHO: PCTools Site Guard - {5C8B2A36-3DB1-42A4-A3CB-D426709BBFEB} - C:\PROGRA~1\SPYWAR~3\tools\iesdsg.dll
O2 - BHO: PCTools Browser Monitor - {B56A7D7D-6927-48C8-A975-17DF180C71AC} - C:\PROGRA~1\SPYWAR~3\tools\iesdpb.dll
O4 - HKLM\..\Run: [AVG7_EMC] C:\PROGRA~1\Grisoft\AVGFRE~1\avgemc.exe
O4 - HKLM\..\Run: [Logitech Hardware Abstraction Layer] KHALMNPR.EXE
O4 - HKLM\..\Run: [SunServer] C:\Program Files\Sunbelt Software\CounterSpy\Consumer\sunserver.exe
O4 - HKLM\..\Run: [SBAutoUpdate] "C:\Program Files\SpywareBlaster\sbautoupdate.exe"
O4 - HKLM\..\Run: [ITPIPSetup] "E:\setupstb.exe"
O6 - HKCU\Software\Policies\Microsoft\Internet Explorer\Control Panel present
O8 - Extra context menu item: E&xport to Microsoft Excel - res://C:\PROGRA~1\MICROS~2\OFFICE11\EXCEL.EXE/3000
O9 - Extra button: (no name) - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Program Files\Java\jre1.5.0_04\bin\npjpi150_04.dll
O9 - Extra 'Tools' menuitem: Sun Java Console - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Program Files\Java\jre1.5.0_04\bin\npjpi150_04.dll
O9 - Extra button: Spyware Doctor - {2D663D1A-8670-49D9-A1A5-4C56B4E14E84} - C:\PROGRA~1\SPYWAR~3\tools\iesdpb.dll
O9 - Extra button: Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe
O9 - Extra 'Tools' menuitem: Windows Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe
O16 - DPF: {0E5F0222-96B9-11D3-8997-00104BD12D94} (PCPitstop Utility) - http://www.pcpitstop.com/pcpitstop/PCPitStop.CAB
O16 - DPF: {17492023-C23A-453E-A040-C7C580BBF700} (Windows Genuine Advantage) - http://go.microsoft.com/fwlink/?link...67&clcid=0x409
O16 - DPF: {6E32070A-766D-4EE6-879C-DC1FA91D2FC3} (MUWebControl Class) - http://update.microsoft.com/microsof...?1124462865531
O16 - DPF: {CAFEEFAC-0014-0001-0002-ABCDEFFEDCBA} (Java Runtime Environment 1.4.1_02) -
O20 - Winlogon Notify: WRNotifier - C:\WINDOWS\SYSTEM32\WRLogonNTF.dll
O23 - Service: Ati HotKey Poller - ATI Technologies Inc. - C:\WINDOWS\system32\Ati2evxx.exe
O23 - Service: ATI Smart - Unknown owner - C:\WINDOWS\system32\ati2sgag.exe
O23 - Service: AVG7 Alert Manager Server (Avg7Alrt) - GRISOFT, s.r.o. - C:\PROGRA~1\Grisoft\AVGFRE~1\avgamsvr.exe
O23 - Service: AVG7 Update Service (Avg7UpdSvc) - GRISOFT, s.r.o. - C:\PROGRA~1\Grisoft\AVGFRE~1\avgupsvc.exe
O23 - Service: Canon Camera Access Library 8 (CCALib8) - Canon Inc. - C:\Program Files\Canon\CAL\CALMAIN.exe
O23 - Service: Diskeeper - Executive Software International, Inc. - C:\Program Files\Executive Software\Diskeeper\DkService.exe
O23 - Service: InstallDriver Table Manager (IDriverT) - Macrovision Corporation - C:\Program Files\Common Files\InstallShield\Driver\11\Intel 32\IDriverT.exe
O23 - Service: iPod Service (iPodService) - Apple Computer, Inc. - C:\Program Files\iPod\bin\iPodService.exe
O23 - Service: Sunbelt Kerio Personal Firewall 4 (KPF4) - Sunbelt Software - C:\Program Files\Sunbelt Software\Personal Firewall 4\kpf4ss.exe
O23 - Service: Sandra Data Service (SandraDataSrv) - SiSoftware - C:\Program Files\SiSoftware\SiSoftware Sandra Lite 2005.SR3\RpcDataSrv.exe
O23 - Service: Sandra Service (SandraTheSrv) - SiSoftware - C:\Program Files\SiSoftware\SiSoftware Sandra Lite 2005.SR3\RpcSandraSrv.exe
O23 - Service: PC Tools Spyware Doctor (SDhelper) - PC Tools Research Pty Ltd - C:\Program Files\Spyware Doctor\sdhelp.exe
O23 - Service: Webroot Spy Sweeper Engine (svcWRSSSDK) - Webroot Software, Inc. - C:\Program Files\Webroot\Spy Sweeper\WRSSSDK.exe

[Byteman]

Hi, TSG site is having updates today, that's the reason it was slow to load your post, I will take care of the other replies, please use this thread only, OK? Someone should help you here shortly.

[minnetonka]

Thanks for taking care of the duplicates. I took back the Microsoft keyboard and laser mouse and I have a new Logitech replacement Cordless Comfort Duo keyboard coming from warranty, plus just got the new G7 Logitech mouse today. I want to get rid of all the Microsoft entries so I can install the new hardware without the Microsoft entries lurking around to cause more conflicts. The explorer.exe that won't end on reboot is a mystery too.

[Byteman]

Hi, I'd like to have you run Hijackthis again, don't scan but hit the "Open the Misc Tools" section, and then hit the "Open the Uninstall Manager" tab, and use the "Save List' button, and post the copy of the list of installed programs please.

[minnetonka]

I still think it's strange that using e: setup when I installed the keyboard, ended up a a redirected request to us that path update Microsoft Office 2003. I have some small confidence weeding out other software, but not Microsoft entries!

Adobe Download Manager 2.0 (Remove Only)
Adobe Photoshop 7.0
Adobe Photoshop Elements 2.0
Adobe Reader 7.0.7
ATI - Software Uninstall Utility
ATI Control Panel
ATI Display Driver
Auction Sentry
Auction Sentry Deluxe
AVG Free Edition
Belarc Advisor 7.0
Canon Camera Access Library
Canon Camera Support Core Library
Canon Camera Window DC_DV 5 for ZoomBrowser EX
Canon Camera Window DC_DV 6 for ZoomBrowser EX
Canon Camera Window DSLR 5 for ZoomBrowser EX
Canon Camera Window MC 6 for ZoomBrowser EX
Canon MovieEdit Task for ZoomBrowser EX
Canon PhotoRecord
Canon RAW Image Task for ZoomBrowser EX
Canon S520
Canon Utilities Easy-PhotoPrint
Canon Utilities PhotoStitch 3.1
Canon ZoomBrowser EX (E)
CCleaner (remove only)
Clean My Registry v. 2.0
DAO
Diskeeper Professional Edition
EVEREST Home Edition v1.51
FreshDiagnose
HighMAT Extension to Microsoft Windows XP CD Writing Wizard
Hijackthis 1.99.1
HijackThis 1.99.1
Hoyle Board Games Demo
Hoyle Card Games 3
IrfanView (remove only)
iTunes
J2SE Runtime Environment 5.0 Update 4
Jasc Paint Shop Pro 8
jv16 PowerTools 1.3
Logitech iTouch Software
Logitech SetPoint
Microsoft .NET Framework 1.1
Microsoft .NET Framework 1.1
Microsoft Office Professional Edition 2003
Mozilla Firefox (1.5.0.1)
Mozilla Thunderbird (1.5)
NTI Backup NOW! 3
NTI CD-Maker Gold
NTI DriveBackup! 3
Nvu 1.0
Opera
Picasa 2
PowerDVD
QuickTime
Realtek AC'97 Audio
Registry First Aid
Roxio UDF Reader
Sam
Security Update for Windows Media Player (KB911564)
Security Update for Windows Media Player 10 (KB911565)
Security Update for Windows XP (KB896424)
Security Update for Windows XP (KB899589)
Security Update for Windows XP (KB900725)
Security Update for Windows XP (KB901017)
Security Update for Windows XP (KB902400)
Security Update for Windows XP (KB904706)
Security Update for Windows XP (KB905414)
Security Update for Windows XP (KB905749)
Security Update for Windows XP (KB905915)
Security Update for Windows XP (KB908519)
Security Update for Windows XP (KB911927)
Security Update for Windows XP (KB912919)
Security Update for Windows XP (KB913446)
SetupPPUpdater
Sid Meier's Pirates!
SiSoftware Sandra Lite 2005.SR3 (Win64/32/CE)
Spy Sweeper
Spybot - Search & Destroy 1.3
Spyware Doctor 3.5
SpywareBlaster v3.5.1
Sunbelt CounterSpy
Sunbelt Kerio Personal Firewall
Tiger Woods PGA TOUR 2003
Update for Windows XP (KB910437)
Windows Genuine Advantage v1.3.0254.0
Windows Media Connect
Windows Media Connect
Windows Media Encoder 9 Series
Windows Media Encoder 9 Series
Windows Media Format Runtime
Windows Media Player 10

[minnetonka]

When I ran Registry First Aid on Sunday night--and removed registry entries--that caused the looping errors that came up with e:setup trying to update MS Office '03. After I restored the entries, I haven't gotten the error, but don't dare run it again now.

I should still have some file from that date/timegroup and might be able to post it when I get home tonight. If you think that would be helpful, let me know.

[Byteman]

Hi, That might help, post what you find.

Also> you have SpyBot 1.3 installed, that is a retired version and you should switch to v. 1.4.

Uninstall the older version, it may prompt if you want to save the objects in the Recovery area, probably you don't want to, or perhaps you should take a look at them (you can examine what SpyBot has removed by highlighting one of the scan results in the Recovery list, and use the Item Details button> Just be careful not to hit "Restore" or the items will be put back into the operating system files....

Get the newer version of SpyBot here:

http://www.majorgeeks.com/SpyBot-Sea...roy_d2471.html

During the setup, you will see an Update link, do that, there will be some even though you are just installing. Be a good idea to then do a full scan with SpyBot.

I don't see any installed software like Intellimouse from Microsoft for your other mouse> if you mean files that run it, they also would run other mice, so do not remove any "files" from anywhere, you should not need to.

CounterSpy, and SpySweeper, are programs that can prevent changes you are making from working right- they often need to be turned off while you are fixing things, here is some directions for that: Also, you might want to do any fixing, or scanning, while in Safe Mode where things are not running to get in the way.

How to disable real time scanning programs

If you mean the old device, you can remove the mouse or other "ghost" mouse entries from Safe Mode in your Device Manager a lot more safely, when you reboot the correct system files should be installed for whatever mouse you have. You might have to leave the new Logitech or whatever mouse entry alone, or you can remove them all, and have the connected one reinstalled.

[minnetonka]

Byteman,
Thank you for alerting me to the new version of Spybot. I've been lax, but followed directions, donated, updated, and ran a scan. No findings, but freshly immunized.

I will paste the contents of the registry entries that were removed during the Registry First Aid (RFA) scan, and which I subsequently restored--have not run the program before.

I know the Logitech software is still installed. When I ran the MS keyboard/mouse installer it said the "old" would be removed. On restart, for some reason, the MS software wasn't there and I tried again. I Goggled the result, but no answers, so decided to cut my loses. I uninstalled the old Logitech, reinstalled and ran RFA to be sure there weren't any old MS traces (didn't try searching for anything specific because I was afraid there would be too many Microsoft entries that I couldn't separate from the ones to leave alone).

So I was surprised to later find the computer trying to update MS Office 2003 via that same e:setup path. That's when I restored the entries (belo w).

I am grateful for the time you have spent and whether you spot something I should either not have removed or should, instead, have .

REGEDIT4
;RFA_Restored: 3/5/2006 8:17:05 AM
;RFA_Created: 3/4/2006 9:46:19 PM

[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Run]
"ITPIPSetup"="\"E:\\setupstb.exe\""

[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\SharedDLLs]
"f:\\Don-Chris Downloaded Files\\CounterSpy\\counterspy.exe"=dword:00000001

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows Media Device Manager]
"Log.Filename"="C:\\WINDOWS\\system32\\Wmdm.log"

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]
"ITPIPSetup"="\"E:\\setupstb.exe\""

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\Fold ers]
"C:\\Documents and Settings\\All Users.WINDOWS\\Application Data\\Microsoft\\MSDAIPP\\"="1"

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\Fold ers]
"C:\\Documents and Settings\\All Users.WINDOWS\\Application Data\\Microsoft\\MSDAIPP\\OFFLINE\\"="1"

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Shared Tools\MSConfig\startupfolder\C:^Documents and Settings^Don&Chris^Start Menu^Programs^Startup^PowerReg Scheduler.exe]
"command"="C:\\Documents and Settings\\Don&Chris\\Start Menu\\Programs\\Startup\\PowerReg Scheduler.exe"

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Shared Tools\MSConfig\startupfolder\C:^Documents and Settings^Don&Chris^Start Menu^Programs^Startup^PowerReg Scheduler.exe]
"path"="C:\\Documents and Settings\\Don&Chris\\Start Menu\\Programs\\Startup\\PowerReg Scheduler.exe"

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Shared Tools\MSConfig\startupfolder\C:^Documents and Settings^All Users.WINDOWS^Start Menu^Programs^Startup^Logitech SetPoint.lnk]
"path"="C:\\Documents and Settings\\All Users.WINDOWS\\Start Menu\\Programs\\Startup\\Logitech SetPoint.lnk"

[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Software\Microsoft\MasterAggregatorForI PP\MSDAIPP]
"ServerCacheLocation"="C:\\Documents and Settings\\All Users.WINDOWS\\Application Data\\Microsoft\\MSDAIPP\\OFFLINE\\"

[HKEY_USERS\S-1-5-21-583907252-1897051121-725345543-1005\Software\Sunbelt Software\CounterSpy\Alerts\Monitor_UserShellFolders_PrintHood_Value]
"LastValue"="%USERPROFILE%\\PrintHood"

[HKEY_USERS\S-1-5-21-583907252-1897051121-725345543-1005\Software\Microsoft\Windows Media\WMSDK\Namespace]
"RemoteDelta"="C:\\Documents and Settings\\Don&Chris\\Local Settings\\Application Data\\Microsoft\\Windows Media\\10.0\\WMSDKNSR.XML"

[HKEY_USERS\S-1-5-21-583907252-1897051121-725345543-1005\Software\Microsoft\Windows Media\WMSDK\Namespace]
"LocalDelta"="C:\\Documents and Settings\\Don&Chris\\Local Settings\\Application Data\\Microsoft\\Windows Media\\10.0\\WMSDKNSD.XML"

[HKEY_USERS\S-1-5-21-583907252-1897051121-725345543-1005\Software\Microsoft\Windows\ShellNoRoam\MUICache]
"C:\\Documents and Settings\\Don&Chris\\Desktop\\setpoint247enu.exe"="Setup.exe"

[HKEY_USERS\S-1-5-21-583907252-1897051121-725345543-1005\Software\Microsoft\Windows\ShellNoRoam\MUICache]
"C:\\Documents and Settings\\Don&Chris\\Start Menu\\Programs\\Startup\\PowerReg Scheduler.exe"="PRegScheduler"

[HKEY_USERS\S-1-5-21-583907252-1897051121-725345543-1005\Software\Microsoft\Windows\CurrentVersion\Explorer\MountPoints2\{ebc96 665-be9f-11d9-9c21-806d6172696f}\_Autorun\DefaultIcon]


[HKEY_USERS\S-1-5-21-583907252-1897051121-725345543-1005\Software\Microsoft\Windows\CurrentVersion\Explorer\MountPoints2\{ebc96 665-be9f-11d9-9c21-806d6172696f}\_Autorun\DefaultIcon]
@="E:\\Setup.exe"

[HKEY_USERS\S-1-5-21-583907252-1897051121-725345543-1005\Software\Google\UNKNOWN]
"CachePath"="C:\\Documents and Settings\\Don&Chris\\Local Settings\\Application Data\\Google\\GoogleEarth"

[HKEY_USERS\S-1-5-21-583907252-1897051121-725345543-1005\Software\Adobe\Photoshop Elements\2.0\VisitedDirs]

[HKEY_CURRENT_USER\Software\Sunbelt Software\CounterSpy\Alerts\Monitor_UserShellFolders_PrintHood_Value]
"LastValue"="%USERPROFILE%\\PrintHood"

[HKEY_CURRENT_USER\Software\Microsoft\Windows Media\WMSDK\Namespace]
"RemoteDelta"="C:\\Documents and Settings\\Don&Chris\\Local Settings\\Application Data\\Microsoft\\Windows Media\\10.0\\WMSDKNSR.XML"

[HKEY_CURRENT_USER\Software\Microsoft\Windows Media\WMSDK\Namespace]
"LocalDelta"="C:\\Documents and Settings\\Don&Chris\\Local Settings\\Application Data\\Microsoft\\Windows Media\\10.0\\WMSDKNSD.XML"

[HKEY_CURRENT_USER\Software\Microsoft\Windows\ShellNoRoam\MUICache]
"C:\\Documents and Settings\\Don&Chris\\Desktop\\setpoint247enu.exe"="Setup.exe"

[HKEY_CURRENT_USER\Software\Microsoft\Windows\ShellNoRoam\MUICache]
"C:\\Documents and Settings\\Don&Chris\\Start Menu\\Programs\\Startup\\PowerReg Scheduler.exe"="PRegScheduler"

[HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Explorer\MountP oints2\{ebc96665-be9f-11d9-9c21-806d6172696f}\_Autorun\DefaultIcon]


[HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Explorer\MountP oints2\{ebc96665-be9f-11d9-9c21-806d6172696f}\_Autorun\DefaultIcon]
@="E:\\Setup.exe"

[HKEY_CURRENT_USER\Software\Google\UNKNOWN]
"CachePath"="C:\\Documents and Settings\\Don&Chris\\Local Settings\\Application Data\\Google\\GoogleEarth"

[HKEY_CURRENT_USER\Software\Adobe\Photoshop Elements\2.0\VisitedDirs]


[HKEY_CURRENT_USER\Software\Adobe\Photoshop Elements\2.0\VisitedDirs]
"STARTUPIMAGEDIRECTORY"="F:\\Graphics\\Ebay\\Items to SELL\\Window Glass Paints\\"


One note on the program correction choices is the "Cut Invalid Substring" that I thought might be an option to use instead of the default "delete" -- This version says:

The type of correction "Cut Invalid Substring" allows to remove invalid part of a registry entry and keep entry in the registry.
For example, you have a complex registry value "Path"="C:\Program Files\Path1;C:\Program Files\Path2;C:\Path3;" and Registry First Aid found that the path "C:\Program Files\Path2" does not exist. Using this correction type you can simply cut the invalid part from the registry value. In this example your new value will be "Path"="C:\Program Files\Path1;C:\Path3;".

In previous versions of Registry First Aid or other registry cleaners you had to modify such entries manually or leave entries without change.

The program automatically suggests this correction for complex registry values. Simple values as "Path"="C:\Program Files\Path1\" aren't suggested with this correction. If you set Cut Invalid Substring correction manually then this will cut the whole invalid string marked in red color "C:\Program Files\Path1\" and leave the value "Path" empty but still in the registry.

[Byteman]

Hi, This type of thing is part of Office, though I am not sure it would cause the setup for Office updates to start, stranger things have happened....

http://www.microsoft.com/downloads/d...DisplayLang=en

RE: this in the regedit:

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\Fold ers]
"C:\\Documents and Settings\\All Users.WINDOWS\\Application Data\\Microsoft\\MSDAIPP\\"="1"


Replacing a Registry entry for something that was removed may have caused the Office Update to want to install again> just a guess. Maybe it will need to be fully updated. Or worse> is the Office fully working?

What happens if you try to update at Microsoft Office Update site?



Most Registry cleaners have a way to exclude a given program, you could look for that option...or simply not have the Regcleaner remove anything from MS.

I see it put back the startup entry for PowerRegScheduler, better check that one out....

I hate keyboard and mouse software and never use them- they are not needed usually. The enhanced keyboards that have a ton of buttons need it, and the mouse especially Logitech hardware, installs the Logitech Desktop Manager and uses Backweb to update...which is totally unneccesary, too. Keyboards and mice are plug and play, they are detected as new hardware and Windows sets them up with native files that run them just fine.

The CDs they give you with keyboards and mice are not needed to install the hardware. (Microsoft)

For the Logitech hardware it should be the same. An exception> USB devices may need some special drivers from an install disk, but the software is not needed, unless you have to have those special functions or mouse applications.

[minnetonka]

OK, I'll get in an look around at those office updates tonight, but you reminded me, again, what I know from experience and just goes out the window sometimes . . . you don't need/want all the enhancements and I always end up disabling it anyway--I don't need Logitech in the tray, that's for sure.

I'll troubleshoot this item by item, if need be, and will report back when I've got it under control. You've given me some good leads (office update, excluding programs, PowerRegScheduler, etc.). sigh ... I know better, but have to get reinforcement sometimes . . .

Thanks, I'll be back.