[Dawndd]

Hi -

I cleaned up my start up and my computer was working great. This was about a week ago. I don't know what I did recently but when the computer is turned on it takes me to C:/Documents and Settings/All Users/Startup/ Mozilla Firefox. The file is empty. I've looked at start up again and I hardly have any programs running in there. Most are my AVG programs. Can anyone make any suggestions? Also, for a long time my computer has not shut off. Maybe I should save this for a seperate post or maybe these things are related. I set my screensaver for 25 mins and then I set my computer to shut off in 40 mins. The screensaver just goes all night if I don't manually turn off the computer. If these are unrelated I'll post this second thing seperately.
Thanks in advance,
Dawn

[Rollin' Rog]

Download and install HijackThis using the "self extractor". Run it and select "do a system scan and save the log file". Then copy/paste the contents of the log to a reply

http://www.thespykiller.co.uk/files/hijackthis_sfx.exe

Are you saying there is no Mozilla entry in this location:

C:/Documents and Settings/All Users/Startup

If there is just an empty Mozilla folder there, delete it.

[Dawndd]

Actually there isn't even an empty Mozilla folder there - very bizarre! Mozilla is in the program files, where I think it belongs. Perhaps when you check my log you might be able to see something that touches on my other problem. My monitor (I think that I just generically said my computer in yesterday's post) won't shut down. This has been happening for a long time and I've just been ignoring it and shutting down the whole computer before bed each night. If I should post this problem as a seperate issue please let me know. HiJack log to follow as soon as I figure out how to get it here.
Thanks for your help.
Dawn

[Dawndd]

OK. Here's the log. Interestingly enough I went to get the very latest version (2.0) from a site that Major Geeks took me to. As it installed my AVG Anti-Virus popped up and told me it had a worm. I hit the button to fix the worm and then searched my computer to find the HijackThis program. It was no where to be found. So I guess the whole thing had to go. I downloaded the previous version from Major Geeks and this is what I got:

Logfile of HijackThis v1.99.1
Scan saved at 11:02:20 PM, on 3/14/2007
Platform: Windows XP SP2 (WinNT 5.01.2600)
MSIE: Internet Explorer v6.00 SP2 (6.00.2900.2180)

Running processes:
C:\WINDOWS\System32\smss.exe
C:\WINDOWS\system32\winlogon.exe
C:\WINDOWS\system32\services.exe
C:\WINDOWS\system32\lsass.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\System32\svchost.exe
C:\WINDOWS\system32\spoolsv.exe
C:\WINDOWS\Explorer.EXE
C:\PROGRA~1\Grisoft\AVGFRE~1\avgcc.exe
C:\WINDOWS\AGRSMMSG.exe
C:\Program Files\Grisoft\AVG Anti-Spyware 7.5\avgas.exe
C:\Program Files\mcafee.com\personal firewall\MPFTray.exe
C:\WINDOWS\system32\ctfmon.exe
C:\Program Files\Common Files\AOL\ACS\AOLAcsd.exe
C:\Program Files\Grisoft\AVG Anti-Spyware 7.5\guard.exe
C:\PROGRA~1\Grisoft\AVGFRE~1\avgamsvr.exe
C:\PROGRA~1\Grisoft\AVGFRE~1\avgupsvc.exe
C:\PROGRA~1\Grisoft\AVGFRE~1\avgemc.exe
C:\Program Files\Common Files\AOL\1170831876\ee\aolsoftware.exe
C:\WINDOWS\System32\svchost.exe
c:\PROGRA~1\mcafee.com\mps\mscifapp.exe
C:\Program Files\Common Files\AOL\1170831876\ee\aolsoftware.exe
C:\Program Files\Common Files\AOL\1170831876\ee\aolsoftware.exe
c:\program files\common files\aol\1170831876\ee\services\safetyCore\ver210_5_3_5\AOLSP Scheduler.exe
C:\Program Files\Hewlett-Packard\hp print screen utility\prnsys.exe
C:\Program Files\iPod\bin\iPodService.exe
C:\Program Files\AOL 9.0\waol.exe
C:\Program Files\AOL 9.0\shellmon.exe
C:\Program Files\Common Files\AOL\Topspeed\3.0\aoltpsd3.exe
C:\Program Files\HijackThis\HijackThis.exe

R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Local Page =
R1 - HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings,ProxyOverride = 127.0.0.1
O2 - BHO: Adobe PDF Reader Link Helper - {06849E9F-C8D7-4D59-B87D-784B7D6BE0B3} - C:\Program Files\Common Files\Adobe\Acrobat\ActiveX\AcroIEHelper.dll
O2 - BHO: (no name) - {53707962-6F74-2D53-2644-206D7942484F} - C:\Program Files\Spybot - Search & Destroy\SDHelper.dll
O2 - BHO: SSVHelper Class - {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} - C:\Program Files\Java\jre1.5.0_10\bin\ssv.dll
O2 - BHO: Google Toolbar Helper - {AA58ED58-01DD-4d91-8333-CF10577473F7} - c:\program files\google\googletoolbar1.dll
O3 - Toolbar: Easy-WebPrint - {327C2873-E90D-4c37-AA9D-10AC9BABA46C} - C:\Program Files\Canon\Easy-WebPrint\Toolband.dll
O3 - Toolbar: &Google - {2318C2B1-4965-11d4-9B18-009027A5CD4F} - c:\program files\google\googletoolbar1.dll
O4 - HKLM\..\Run: [AVG7_CC] C:\PROGRA~1\Grisoft\AVGFRE~1\avgcc.exe /STARTUP
O4 - HKLM\..\Run: [AGRSMMSG] AGRSMMSG.exe
O4 - HKLM\..\Run: [!AVG Anti-Spyware] "C:\Program Files\Grisoft\AVG Anti-Spyware 7.5\avgas.exe" /minimized
O4 - HKLM\..\Run: [MPFEXE] "C:\Program Files\mcafee.com\personal firewall\MPFTray.exe"
O4 - HKCU\..\Run: [ctfmon.exe] C:\WINDOWS\system32\ctfmon.exe
O4 - HKCU\..\Run: [AOL Fast Start] "C:\Program Files\AOL 9.0\AOL.EXE" -b
O8 - Extra context menu item: Easy-WebPrint Add To Print List - res://C:\Program Files\Canon\Easy-WebPrint\Resource.dll/RC_AddToList.html
O8 - Extra context menu item: Easy-WebPrint High Speed Print - res://C:\Program Files\Canon\Easy-WebPrint\Resource.dll/RC_HSPrint.html
O8 - Extra context menu item: Easy-WebPrint Preview - res://C:\Program Files\Canon\Easy-WebPrint\Resource.dll/RC_Preview.html
O8 - Extra context menu item: Easy-WebPrint Print - res://C:\Program Files\Canon\Easy-WebPrint\Resource.dll/RC_Print.html
O9 - Extra button: Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe (file missing)
O9 - Extra 'Tools' menuitem: Windows Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe (file missing)
O16 - DPF: {0742B9EF-8C83-41CA-BFBA-830A59E23533} (Microsoft Data Collection Control) - https://support.microsoft.com/OAS/ActiveX/MSDcode.cab
O16 - DPF: {17492023-C23A-453E-A040-C7C580BBF700} (Windows Genuine Advantage Validation Tool) - http://go.microsoft.com/fwlink/?linkid=39204
O16 - DPF: {6414512B-B978-451D-A0D8-FCFDF33E833C} (WUWebControl Class) - http://update.microsoft.com/microsof...?1170812930578
O16 - DPF: {6E32070A-766D-4EE6-879C-DC1FA91D2FC3} (MUWebControl Class) - http://update.microsoft.com/microsof...?1170812917453
O16 - DPF: {E8F628B5-259A-4734-97EE-BA914D7BE941} (Driver Agent ActiveX Control) - http://driveragent.com/files/driveragent.cab
O21 - SSODL: WPDShServiceObj - {AAA288BA-9A4C-45B0-95D7-94D524869DB5} - C:\WINDOWS\system32\WPDShServiceObj.dll
O23 - Service: AOL Connectivity Service (AOL ACS) - AOL LLC - C:\Program Files\Common Files\AOL\ACS\AOLAcsd.exe
O23 - Service: AVG Anti-Spyware Guard - Anti-Malware Development a.s. - C:\Program Files\Grisoft\AVG Anti-Spyware 7.5\guard.exe
O23 - Service: AVG7 Alert Manager Server (Avg7Alrt) - GRISOFT, s.r.o. - C:\PROGRA~1\Grisoft\AVGFRE~1\avgamsvr.exe
O23 - Service: AVG7 Update Service (Avg7UpdSvc) - GRISOFT, s.r.o. - C:\PROGRA~1\Grisoft\AVGFRE~1\avgupsvc.exe
O23 - Service: AVG E-mail Scanner (AVGEMS) - GRISOFT, s.r.o. - C:\PROGRA~1\Grisoft\AVGFRE~1\avgemc.exe
O23 - Service: iPod Service - Apple Computer, Inc. - C:\Program Files\iPod\bin\iPodService.exe

It's not very long and for whatever reason it doesn't list all of the programs on my computer. I'm a novice but I see what looks like duplicate stuff to me. I'll stop guessing and leave it to the experts.
Thanks,
Dawn

[Rollin' Rog]

Well I don't see anything in that scanlog which points to the "all users" startup folder. If there it would be an 04 item desginated as "global startup".

Since it is a Mozilla file that is being looked for, do you have this entry in All Users:

C:\Documents and Settings\All Users\Start Menu\Programs\Mozilla Firefox

Try renaming the Mozilla Firefox folder if there -- and if that resolves the problem -- remove and reinstall firefox.

[Dawndd]

Yes. There is a Mozilla folder exactly where you ask. I will follow your advice.
Thank you,
Dawn

[Dawndd]

Hi Again -
Hopefully someone will catch this since the latest posts in are so numerous and I'm obviously adding to an older one. I followed directions and when I started up my computer today it didn't go to any Mozilla page; it opened in C:\Documents and Settings\All Users\Start Menu\Programs\Startup\AOL. This page, unlike the page it was opening to yesterday, has many icons. I believe that I only did what I was told to. I also used CCleaner and defragged later. I wish I understood enough to know what was going on. Any advice anyone?
Thank you,
Dawn

[Rollin' Rog]

Ok, let's do this as a test.

Run msconfig and under the startup tab remove the check for:

AOL Fast Start

Next select the "services" tab and UNcheck ONLY this service:

AOL Connectivity Service

Now reboot.

This is a test, not a fix -- unless you want to permanently uninstall AOL. However if it does resolve the problem you will probably need to remove and reinstall AOL software.

[Dawndd]

Thank you for your suggestion. I did what you said and it didn't work. To be honest, I wasn't looking forward to uninstalling and reinstalling AOL. OK. Everyone who knows anything gives me a hard time about using AOL. The problem is that I started using it the year it came out and every one (and their mother) knows my AOL e-mail address. It's even listed with the Illinois Attorney Registration Committee. I get DSL from AT@T, but I just have that sbcglobal.net e-mail address kick over to my AOL address. Anyway, you can't get an AOL disk anymore without getting their broadband on it. I wasn't looking forward to downloading from their site.
Unfortunately another problem re-reared it's ugly head. I thought we fixed it yesterday. I want to be specific here because I tend to leave out important things. The machine starts and I get my welcome window with my name under a box and the number of e-mails I have pending (the last time AOL was open). I click on the box and usually go to my page full of icons. After I just did this test that Mozilla page from yesterday popped up again. SIGH. First I get C:\Documents and Settings\All Users\Start Menu\Programs\Startup\Mozilla Firefox. The 1st time that this came up yesterday I clicked on the Mozilla icon there and it was empty and I deleted it. Dumb me, I thought that I could some how delete the rest of the page. When I realized I was over my head I came here and followed your directions. When I rebooted the Mozilla page didn't come up, nor did it come up when I signed on this morning.
Anyway, the blank page with that heading with Mozilla popped up after I just tried your test to get rid of the AOL page. I closed it and then the problematic AOL Docs and Settings page was behind it. I closed that and I was where I needed to be on my page full of icons. I am open for any and all suggestions. If we get this resolved I'll have the excuse I need buy one of those teddy bears and a t-shirt in your store.
Thanks,
Dawn

[Rollin' Rog]

Between the time you did the "cleanup" and the time this problem began -- do you have any "system restore" points:

Start > run: msconfig > Launch System Restore.

You can check the calendar.

You can test one, and if it doesn't resolve the problem you can UNDO it.

[Dawndd]

Rollin' thanks for staying with me on this:

I had forgotten all about Restore Points. The solution for those like me who don't know much about computers. I do set a number of system restore points. I don't know if it is a good idea or a bad one, but I set one before I either make a major change or before I try someting I'm unsure of. After three full blown crashes in the past year I developed this habit. I also now do my very best not to make a move before I research it thoroughly, which is why I like to come here. That is why my current problem is especially perplexing to me. I don't know how this happened.
Actually, I used the CCleaner and did a defrag of the drive AFTER I had taken your advice and rebooted to test that it had worked and that the notorious "Mozilla" page wouldn't come back up on start up. What I have just been doing is testing my restore points to see if I could find one which would be prior to this problem and at a time when my computer was working well. I was not so lucky. Prior to this problem - can I say in my defense that the problems are seeming to get less serious as I try to educate myself more? - I did something which caused almost all of my icons to show an extension of .lnk. So when I go back to a restore point prior to this problem I get those messed up icons. Do I remember how I fixed those icons? Sorry, I have an awful short term memory. I DO know that there was a time between those icons with the .lnks after them and the popping up of these current "Docs and Settings" pages. I just don't have a restore point in the right spot. I regret that I can't tell you what I did just before this current problem started.
I am going to go to the Tech Guys store now, as you have been more than helpful. I'm not giving up, far from it. I just have my VISA card burning a whole right through my fake wood desk. I'm still ready to try anything.
Thanks again,
Dawn

[Rollin' Rog]

I could probably tell you how to fix the .lnk problem -- it's usually just a matter of installing a registry patch for the file association from this site:

http://www.dougknox.com/xp/file_assoc.htm

However it might be helpful to get a clearer idea of when this page loads. For example if you just log off and log back on again, does it happen?

From what you said previously it sounds like it might be related to your e-mail client if you are opening anything there just prior to it happening.

One more thing we can try is a complete clean boot. Remember this is not a fix -- but a diagnostic approach which disables all non-Microsoft startups:

Run msconfig and select the "Services" tab. Check "Hide Microsoft Services" and then disable the rest. Also uncheck "load startup group" on the general page.

See this link for detailed information:

http://support.microsoft.com/default...b;EN-US;310353

Now restart and test the issue at hand

If no problems, run msconfig and recheck half the disabled items on the Services tab. Test again. If the problem recurs, UNcheck half the items you just checked to narrow down the culprit.

If the problem didn't occur, check the other half, so all the Services are enabled -- proceed to do this on the startup tab as well.

Get the idea? You want to isolate the problem to a specific startup if possible.

Note: if you already have items unchecked under msconfig > startups and are in “selective” startup mode – you should note what these are before beginning. They will need to be de-selected again.

[Dawndd]

Alright. As I answer I will read over your letter. First, one thing that I know nothing about is the registry. The Microsoft tech friend who helped me buy this computer about 5 years ago told me that if I ever touched the registry I shouldn't bother to call him. He meant it in a nice way. If I'm at this stage now you can imagine how nervous he was about me getting near the registry then. After about four years of no registry cleaning or anything I started using Toni Arts Easy Cleaner after researching the best freeware for the problem. I use to set restore points before using it on the registry but I never had a problem and so I stopped that. Maybe something happened this time. That is the extent of what I know about the registry. I click the Easy Cleaner button on the picture of the registry. So I admit I'm having a little trouble following you with registry issues.
When I start up windows I get a welcome screen with my name, the number of e-mails that I have (actually it's the number I had when I last signed off) and a box to click to get to my main screen. So it isn't actually going into a mail program. My AT&T stuff is in Mozilla and I have to sign in seperately to access that; but, as I say, I just have it set up to automatically send all mail to the main AOL screen name. Also, once I get past the welcome screen I have to double-click on an AOL icon to get into there. Then I have to wait for that to load to click on my mailbox.
I like the clean boot idea. I think I can handle it. I was even going to ask you before if I should have about 38 services running. I understand it isn't time to mess with what should and shouldn't be running right now, but just to follow directions to diagnose the problem. I have printed out your directions and also the page that you have linked me to. I can tell you that I have everything in Startup that isn't totally necessary disabled. it's been that way for quite awhile and my system seemed to run faster once I learned what I could turn off in Startup. So I'm in Selective Start up mode. I only wish I knew what processes and services I didn't need. I keep going to reputable sites and getting different opinions and so I figure if they can't agree then I won't take any chances. Since I'm all by myself here it would seem that a lot of the network stuff would be unnecessary, but I'm not making a move until I'm sure. I will carefully do the clean boot. I may not get it accomplished tonight, I'll try, but first I have to get rid of my headache. I cannot thank you enough for all of your help and I will report back as soon as I get this done.
Dawn

[Rollin' Rog]

The "registry patch" is simply a file to run to repair an association.

But the problem here is I don't really know what action or application is precipitating this behavior.

It does seem to be User Account related and just for the heck of it you could try creating a new User Account in the Control Panel and log into it and test it.

But your log in method with AOL is a bit unique for me so I don't know if there is some AOL configuration there that is the problem.

As far as the "clean boot" is concerned -- we don't want to do more than just disable the NON Microsoft startups and services as a test. You do probably need most of what you have running -- I don't really see a lot unneeded stuff in the Scanlog -- but I can't really judge the AOL startups.

[Dawndd]

Hello -

OK. I followed all of Rollin' Rog's directions and read the Microsoft page on the clean boot as I did my thing late last night. Something went really wrong. The one time I don't set a restore point I deselected all of the services and the start up items in System Config. When I rebooted, to my surprise, those pesky pages with Mozilla and AOL popped up again. I went to Msconfig and found that in start up ctfmon was the only item checked. In services both DCOM Server Process La...(that's all I can see) and Remote Procedure Call were both checked. I thought that this was a good thing,since it seemed we must have really narrowed down the problem. I immediately went to sign on and was reminded that I had almost everything disabled in Sys config. I went back there and decided that I'd just hit the button that turned on all of the services and drivers and I'd sort it out later. Well, I can't get a number of these items to start running again. I'm on Mozilla, as AOL had me download the software twice before I realized that I wasn't getting any where - it just kept saying that it needed to load files in order to open.
Word Perfect won't let me save anything and it tells me I have no printer. My whole screen just looks different. I assume the Themes service probably isn't running. Can anyone tell me how to get all the items in services and start up to start running? Every box is checked. I have tried hitting the "enable all" button. As I say, In the General tab I hit the one which supposedly loads everything. I realize that as far as AOL goes I will want to disable my AVG anti-virus and the firewall (maybe?) before I try downloading the software again, however, I have to solve this other deal 1st.
Help. Thank you,
Dawn