1. Computer problem? Tech Support Guy is completely free -- paid for by advertisers and donations. Click here to join today! If you're new to Tech Support Guy, we highly recommend that you visit our Guide for New Members.

boot up message

Discussion in 'Earlier Versions of Windows' started by wdisneymom, Dec 2, 2001.

Thread Status:
Not open for further replies.
Advertisement
  1. wdisneymom

    wdisneymom Thread Starter

    Joined:
    Jan 21, 2001
    Messages:
    283
    I had installed a program called postcode and then uninstalled it. Now everytime I boot up I get a message "PC Set =C:\postcode" then it continues booting
    How can I get rid of this??
     
  2. Bryan

    Bryan

    Joined:
    Jul 3, 1999
    Messages:
    11,943
    First Name:
    Bryan
    Are you running W98 or Windows ME?

    If so, try this

    Click on Start>Run, key in msconfig and press enter.

    Click on the "Autoexec.bat" tab. Now do you see that Postcode statement listed? If so, clear the checkmark next to it and click on Apply. Follow the prompts to restart.

    If you don't see it listed, Click on the "Startup" tab. Do you see it listed there?. If so, clear the checkmark next to it and click on Apply. Follow the prompts to restart.

    Let us know what happens.
     
  3. wdisneymom

    wdisneymom Thread Starter

    Joined:
    Jan 21, 2001
    Messages:
    283
    I am using win 98 and did all you suggested...it was not listed anyplace
     
  4. Bryan

    Bryan

    Joined:
    Jul 3, 1999
    Messages:
    11,943
    First Name:
    Bryan
    How many days has it been since you installed Postcode?

    Have you done any other installs or system changes since you installed PostCode?
     
  5. wdisneymom

    wdisneymom Thread Starter

    Joined:
    Jan 21, 2001
    Messages:
    283
    I installed and uninstalled it about 2 weeks ago
    I've not done any other changes
     
  6. Bryan

    Bryan

    Joined:
    Jul 3, 1999
    Messages:
    11,943
    First Name:
    Bryan
    Then a registry restore is not going to help. We need to find where it's executing at startup, so hang in there and we'll find it.

    Go back to Msconfig

    Click on Start>Run, key in msconfig and press enter.

    Click on the "Config.sys" tab. Now do you see that Postcode statement listed? If so, clear the checkmark next to it and click on Apply. Follow the prompts to restart.
     
  7. wdisneymom

    wdisneymom Thread Starter

    Joined:
    Jan 21, 2001
    Messages:
    283
    there is only one thing listed and checked

    devicehigh=C:\windows\command\drivespace.sys/move

    should I do anything with that
     
  8. Bryan

    Bryan

    Joined:
    Jul 3, 1999
    Messages:
    11,943
    First Name:
    Bryan
    Let try this

    Click on Start>Run, key in msinfo32 and press enter. In the Left pane, double left click on "Software Enviroment" then do the same on "Startup Programs". Now you should see your startup programs in the left pane. Click on Edit>Copy.

    Now come here and click on "PostReply". Right click in the reply window and select Paste.
     
  9. wdisneymom

    wdisneymom Thread Starter

    Joined:
    Jan 21, 2001
    Messages:
    283
    Microsoft Office Shortcut Bar Startup Group "C:\Program Files\Microsoft Office\Office\MSOFFICE.EXE"
    ScanRegistry Registry (Machine Run) C:\WINDOWS\scanregw.exe /autorun
    SystemTray Registry (Machine Run) SysTray.Exe
    LoadPowerProfile Registry (Machine Run) Rundll32.exe powrprof.dll,LoadCurrentPwrScheme
    Norton Auto-Protect Registry (Machine Run) C:\PROGRA~1\NORTON~2\NAVAPW32.EXE /LOADQUIET
    LoadPowerProfile Registry (Machine Service) Rundll32.exe powrprof.dll,LoadCurrentPwrScheme
    ScriptBlocking Registry (Machine Service) "C:\Program Files\Common Files\Symantec Shared\Script Blocking\SBServ.exe" -reg
     
  10. Bryan

    Bryan

    Joined:
    Jul 3, 1999
    Messages:
    11,943
    First Name:
    Bryan
    Well it's not loading from your registry. Do this to give us a good look at everything in Startup.

    Go <a href=http://home.earthlink.net/~rmbox/Reticulated/Only_IE.html> here</a> and download Startlog.com

    Once it's downloaded, double left click on it to execute it. You'll then see the log appear on the screen at the end. Click on Edit>SelectAll. Then click on Edit>Copy.

    Now come back to this thread and click on "PostReply". Right click in the reply window and select Paste.
     
  11. wdisneymom

    wdisneymom Thread Starter

    Joined:
    Jan 21, 2001
    Messages:
    283
    ---------- C:\WINDOWS\desktop\StartUp.Log

    Start-Ups checked at 12-02-2001 9:11:38.26a
    __________________________________________________________________________
    __________________________________________________________________________

    StartUp Log for Windows 95/98 - Freeware by rmbox
    __________________________________________________________________________
    __________________________________________________________________________

    Comments:

    This is a log of all the programs on your computer that
    are starting automatically every time you start Windows.
    Using this log can be a quick way to spot trojans.

    StartUp Log (version 1.53) - Release Date 8/19/2001

    __________________________________________________________________________
    __________________________________________________________________________

    StartUp Log Index

    1. HKLM Run
    2. HKCU Run
    3. HKLM RunOnce
    4. HKCU RunOnce
    5. HKLM RunServices
    6. HKLM RunServicesOnce
    7. WIN.INI file
    8. SYSTEM.INI file
    9. AUTOEXEC.BAT file
    10. StartUp folder
    11. All Users StartUp
    12. Misc. StartUp Configurations

    __________________________________________________________________________
    __________________________________________________________________________

    The following is a list of your current Start-Ups
    __________________________________________________________________________
    __________________________________________________________________________

    1. HKLM Run - Registry

    [RegPath]
    "StartUp"


    [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]
    "ScanRegistry"="C:\\WINDOWS\\scanregw.exe /autorun"
    "SystemTray"="SysTray.Exe"
    "LoadPowerProfile"="Rundll32.exe powrprof.dll,LoadCurrentPwrScheme"
    "Norton Auto-Protect"="C:\\PROGRA~1\\NORTON~2\\NAVAPW32.EXE /LOADQUIET"


    ==========================================================================
    __________________________________________________________________________

    2. HKCU Run - Registry

    [RegPath]
    "StartUp"


    [HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Run]


    ==========================================================================
    __________________________________________________________________________

    3. HKLM RunOnce - Registry

    [RegPath]
    "StartUp"


    [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\RunOnce]


    ==========================================================================
    __________________________________________________________________________

    4. HKCU RunOnce - Registry

    [RegPath]
    "StartUp"


    [HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\RunOnce]


    ==========================================================================
    __________________________________________________________________________

    5. HKLM RunServices - Registry

    [RegPath]
    "StartUp"


    [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\RunServices]
    "LoadPowerProfile"="Rundll32.exe powrprof.dll,LoadCurrentPwrScheme"
    "ScriptBlocking"="\"C:\\Program Files\\Common Files\\Symantec Shared\\Script Blocking\\SBServ.exe\" -reg"


    ==========================================================================
    __________________________________________________________________________

    6. HKLM RunServicesOnce - Registry

    [RegPath]
    "StartUp"


    [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\RunServicesOnce]


    ==========================================================================
    __________________________________________________________________________

    7. WIN.INI File - (c:\windows\win.ini)

    Your win.ini run/load lines should look like run= and load= exclusively.
    There should be nothing to the right of the equal signs.


    These are the run and load lines in your WIN.INI file

    run=

    load=

    ==========================================================================
    __________________________________________________________________________

    8. SYSTEM.INI File - (c:\windows\system.ini)

    Your system.ini shell line should look like shell=Explorer.exe exclusively.
    You should only see Explorer.exe following the equal sign.


    This is the shell line in your SYSTEM.INI file

    shell=Explorer.exe

    ==========================================================================
    __________________________________________________________________________

    9. AUTOEXEC.BAT File - (c:\autoexec.bat)

    (Some trojans have been known to start from this file)


    These are your program startups and set paths in your autoexec.bat file

    @REM ***********************
    @REM The next line is needed by AFD Postcode
    @REM Please do not delete.!
    SET PC=c:\postcode
    @REM ******************************
    @ECHO OFF
    rem
    rem *** DO NOT EDIT THIS FILE! ***
    rem
    rem This file was created by the System Configuration Utility as
    rem a placeholder for your AUTOEXEC.BAT file. Your actual
    rem AUTOEXEC.BAT file has been saved under the name AUTOEXEC.TSH.
    rem

    ==========================================================================
    __________________________________________________________________________

    10. StartUp Folder - (c:\windows\start menu\programs\startup)

    Shortcuts to any program will automatically start when placed here.


    These are the shortcuts located in your StartUp folder

    C:\WINDOWS\Start Menu\Programs\StartUp\Microsoft Office Shortcut Bar.lnk

    ==========================================================================
    __________________________________________________________________________

    11. All Users Folder - (c:\windows\all users\start menu\programs\startup)

    Shortcuts to any program will automatically start when placed here.


    These are the shortcuts located in your All Users StartUp folder


    *(No start-ups found)*

    ==========================================================================
    __________________________________________________________________________

    12. Miscellaneous StartUp Configurations

    -============================-
    Registry StartUp Directories
    -============================-

    Should show the Start Menu StartUp and All Users StartUp directories

    .....................................................................

    [1] HKCU - Shell Folders

    HKCU\Software\Microsoft\Windows\CurrentVersion\Explorer\Shell Folders

    "Startup"="C:\\WINDOWS\\Start Menu\\Programs\\StartUp"

    .....................................................................

    [2] HKCU - User Shell Folders

    HKCU\Software\Microsoft\Windows\CurrentVersion\Explorer\User Shell Folders


    .....................................................................

    [3] HKLM - Shell Folders

    HKLM\Software\Microsoft\Windows\CurrentVersion\explorer\Shell Folders

    "Common Startup"="C:\\WINDOWS\\All Users\\Start Menu\\Programs\\StartUp"

    .....................................................................

    [4] HKLM - User Shell Folders

    HKLM\Software\Microsoft\Windows\CurrentVersion\explorer\User Shell Folders


    .....................................................................

    -=======================-
    Registry Shell Spawning
    -=======================-

    Open Commands for Executable File Types

    @="\"%1\" %*"
    (.exe file - RegPath = HKCR\exefile\shell\open\command)

    @="\"%1\" %*"
    (.com file - RegPath = HKCR\comfile\shell\open\command)

    @="\"%1\" /S"
    (.scr file - RegPath = HKCR\scrfile\shell\open\command)

    @="\"%1\" %*"
    (.bat file - RegPath = HKCR\batfile\shell\open\command)

    @="\"%1\" %*"
    (.pif file - RegPath = HKCR\piffile\shell\open\command)

    @="C:\\WINDOWS\\SYSTEM\\MSHTA.EXE \"%1\" %*"
    (.hta file - RegPath = HKCR\htafile\shell\open\command)

    -=========================-
    HKLM RunOnceEx - Registry
    -=========================-


    [HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\RunOnceEx]


    -====================-
    StubPaths - Registry (Partial Listing)
    -====================-

    (Please see the StubPath.txt on your desktop for complete listing)

    HKLM\Software\Microsoft\Active Setup\Installed Components


    "OldStubPath"="C:\\WINDOWS\\SYSTEM\\ie4uinit.exe"
    "RealStubPath"="C:\\WINDOWS\\SYSTEM\\IE4UINIT.EXE"
    "StubPath"="C:\\WINDOWS\\COMMAND\\sulfnbk.exe /L"
    "StubPath"=""
    "StubPath"="\"C:\\Program Files\\Outlook Express\\setup50.exe\" /APP:WAB /CALLER:IE50 /user /install"
    "StubPath"="\"C:\\Program Files\\Outlook Express\\setup50.exe\" /APP:OE /CALLER:IE50 /user /install"


    -=========================-
    ICQ Inet Registry StartUp
    -=========================-

    Shows applications that start when connected to Inet


    [HKEY_CURRENT_USER\Software\Mirabilis\ICQ\Agent\Apps]
    "Launch Browser"="Yes"
    "TempFile"="C:\\WINDOWS\\TEMP\\\\s3vvo30h..html"


    -=====================-
    Screen Saver Settings (Possible system.ini start-up)
    -=====================-

    SCRNSAVE.EXE=C:\WINDOWS\SYSTEM\3DTEXT~1.SCR

    ==========================================================================
    __________________________________________________________________________

    - Supplemental Environment Information -

    TMP=C:\WINDOWS\TEMP
    TEMP=C:\WINDOWS\TEMP
    winbootdir=C:\WINDOWS
    PATH=C:\WINDOWS;C:\WINDOWS\COMMAND
    COMSPEC=C:\WINDOWS\COMMAND.COM
    PC=c:\postcode
    windir=C:\WINDOWS

    File - c:\windows\Wininit.ini

    ==========================================================================
    __________________________________________________________________________

    - End -
     
  12. Bryan

    Bryan

    Joined:
    Jul 3, 1999
    Messages:
    11,943
    First Name:
    Bryan
    It's loading from Autoexec.bat, Go back and give this a try again

    Click on Start>Run, key in msconfig and press enter.

    Click on the "Autoexec.bat" tab.

    Now do you see SET=C:\Postcode.exe statement listed? If so, clear the checkmark next to it and click on Apply. Follow the prompts to restart.

    And also do this

    Start>Find>Files, key in wininit.ini and press enter. If it's found, Right click on it and rename it wininit.xxx

    Restart Windows
     
  13. wdisneymom

    wdisneymom Thread Starter

    Joined:
    Jan 21, 2001
    Messages:
    283
    the only entry in my autoexec.bat is

    @C:\PROGRA~1\NORTON~2\NAVDX.EXE /startup

    it was not in find...files ...etc
     
  14. Bryan

    Bryan

    Joined:
    Jul 3, 1999
    Messages:
    11,943
    First Name:
    Bryan
    Do this,

    Start>Find>Files, key in autoexec.bat and press enter. How many are found?

    Right click on any found and select "Edit". Do you see the Postcode statement?
     
  15. wdisneymom

    wdisneymom Thread Starter

    Joined:
    Jan 21, 2001
    Messages:
    283
    yea!!!!
    I found it
     
  16. Sponsor

As Seen On
As Seen On...

Welcome to Tech Support Guy!

Are you looking for the solution to your computer problem? Join our site today to ask your question. This site is completely free -- paid for by advertisers and donations.

If you're not already familiar with forums, watch our Welcome Guide to get started.

Join over 733,556 other people just like you!

Thread Status:
Not open for further replies.

Short URL to this thread: https://techguy.org/60403

  1. This site uses cookies to help personalise content, tailor your experience and to keep you logged in if you register.
    By continuing to use this site, you are consenting to our use of cookies.
    Dismiss Notice