illegal errors

Status
This thread has been Locked and is not open to further replies. Please start a New Thread if you're having a similar issue. View our Welcome Guide to learn how to use this site.

coker-cola

Thread Starter
Joined
Nov 30, 2001
Messages
13
novice at best having major problems.....multiple errors such as Explore kernel [email protected]:bff724cl,..... @0167:bff79db61,
.....0167:bff7b9f6 or realplay [email protected]:bff769f6, scanregw, rpcrt4.gll @ 0167:7f691876. The list of errors continues.....ran adware 71 items found as follows Scan initialized on 1/19/02 4:12:28 PM.
(AAW release 5.62, referencefile 087-22.09.2001)
=================================================


Started memory scan
====================
Running processes:

#:1 Name: C:\WINDOWS\SYSTEM\KERNEL32.DLL
----------------------------
Threads:5
ProcID:4279199061
ParentProcID:2123335433
BasePriority:High

#:2 Name: C:\WINDOWS\SYSTEM\MSGSRV32.EXE
----------------------------
Threads:1
ProcID:4294875693
ParentProcID:4279199061
BasePriority:Normal

#:3 Name: C:\WINDOWS\SYSTEM\SPOOL32.EXE
----------------------------
Threads:2
ProcID:4294877749
ParentProcID:4294875693
BasePriority:Normal

#:4 Name: C:\WINDOWS\SYSTEM\MPREXE.EXE
----------------------------
Threads:4
ProcID:4294881409
ParentProcID:4294875693
BasePriority:Normal

#:5 Name: C:\WINDOWS\SYSTEM\MSTASK.EXE
----------------------------
Threads:2
ProcID:4294897141
ParentProcID:4294881409
BasePriority:Normal

#:6 Name: C:\ANTI VIRUS\TREND PC-CILLIN 98\IOMON98.EXE
----------------------------
Threads:5
ProcID:4294847137
ParentProcID:4294881409
BasePriority:Normal

#:7 Name: C:\ANTI VIRUS\TREND PC-CILLIN 98\WEBTRAP.EXE
----------------------------
Threads:5
ProcID:4294855673
ParentProcID:4294847137
BasePriority:Normal

#:8 Name: C:\WINDOWS\SYSTEM\mmtask.tsk
----------------------------
Threads:1
ProcID:4294813557
ParentProcID:4294875693
BasePriority:Normal

#:9 Name: C:\WINDOWS\EXPLORER.EXE
----------------------------
Threads:26
ProcID:4294774609
ParentProcID:4294875693
BasePriority:Normal

#:10 Name: C:\WINDOWS\TASKMON.EXE
----------------------------
Threads:4
ProcID:4294746809
ParentProcID:4294774609
BasePriority:Normal

#:11 Name: C:\WINDOWS\SYSTEM\SYSTRAY.EXE
----------------------------
Threads:5
ProcID:4294752109
ParentProcID:4294774609
BasePriority:Normal

#:12 Name: C:\WINDOWS\SYSTEM\ATITASK.EXE
----------------------------
Threads:4
ProcID:4294708637
ParentProcID:4294774609
BasePriority:Normal

#:13 Name: C:\WINDOWS\SYSTEM\ATICWD32.EXE
----------------------------
Threads:4
ProcID:4294717933
ParentProcID:4294774609
BasePriority:Normal

#:14 Name: C:\MAC TO PC\MACOPENER\MACNAME.EXE
----------------------------
Threads:4
ProcID:4294726229
ParentProcID:4294774609
BasePriority:Normal

#:15 Name: C:\WINDOWS\SYSTEM\STIMON.EXE
----------------------------
Threads:6
ProcID:4294724525
ParentProcID:4294774609
BasePriority:Normal

#:16 Name: C:\WINDOWS\SYSTEM\PRINTRAY.EXE
----------------------------
Threads:4
ProcID:4294736409
ParentProcID:4294774609
BasePriority:Normal

#:17 Name: C:\PROGRAM FILES\SAVENOW\SAVENOW.EXE
----------------------------
Threads:10
ProcID:4294675861
ParentProcID:4294774609
BasePriority:Normal
Warning! SAVENOW : savenow.exe (savenow.exe)

"savenow.exe" unload successfull!


#:18 Name: C:\WINDOWS\LOADQM.EXE
----------------------------
Threads:7
ProcID:4294696137
ParentProcID:4294774609
BasePriority:Normal

#:19 Name: C:\PROGRAM FILES\WEBHANCER\PROGRAMS\WHAGENT.EXE
----------------------------
Threads:15
ProcID:4294697265
ParentProcID:4294774609
BasePriority:Normal
Warning! WEBHANCER : whagent.exe (whagent.exe)

"whagent.exe" unload successfull!


#:20 Name: C:\PROGRAM FILES\EXCITE\PLATFORM\EXAUTOUP.EXE
----------------------------
Threads:7
ProcID:4294703653
ParentProcID:4294681901
BasePriority:Normal

#:21 Name: C:\PROGRAM FILES\EXCITE\PLATFORM\EXSHELL.EXE
----------------------------
Threads:8
ProcID:4294658977
ParentProcID:4294681901
BasePriority:Normal

#:22 Name: C:\PROGRAM FILES\REAL\REALPLAYER\REALPLAY.EXE
----------------------------
Threads:9
ProcID:4294664733
ParentProcID:4294774609
BasePriority:Normal

#:23 Name: C:\HARDWARE\ATI\ATIDESK\ATISCHED.EXE
----------------------------
Threads:4
ProcID:4294623505
ParentProcID:4294774609
BasePriority:Normal

#:24 Name: C:\ACCOUNTING\QUICKENW\QWDLLS.EXE
----------------------------
Threads:4
ProcID:4294591909
ParentProcID:4294774609
BasePriority:Normal

#:25 Name: C:\PROGRAM FILES\INTEL\CREATESHARE\PROGRAM\PC CAMERA GAMES\PROGRAM\RFTRAY.EXE
----------------------------
Threads:5
ProcID:4294519313
ParentProcID:4294774609
BasePriority:Normal

#:26 Name: C:\WINDOWS\SYSTEM\WMIEXE.EXE
----------------------------
Threads:3
ProcID:4294528557
ParentProcID:4294752109
BasePriority:Normal

#:27 Name: C:\PROGRAM FILES\INTERNET EXPLORER\IEXPLORE.EXE
----------------------------
Threads:11
ProcID:4294560753
ParentProcID:4294774609
BasePriority:Normal

#:28 Name: C:\WINDOWS\SYSTEM\PSTORES.EXE
----------------------------
Threads:3
ProcID:4294231345
ParentProcID:4294307425
BasePriority:Normal

#:29 Name: C:\PROGRAM FILES\MESSENGER\MSMSGS.EXE
----------------------------
Threads:4
ProcID:4294187753
ParentProcID:4294307425
BasePriority:Normal

#:30 Name: C:\WINDOWS\SYSTEM\DDHELP.EXE
----------------------------
Threads:6
ProcID:4294174581
ParentProcID:4294307425
BasePriority:Realtime

#:31 Name: C:\PROGRAM FILES\OUTLOOK EXPRESS\MSIMN.EXE
----------------------------
Threads:12
ProcID:4294172449
ParentProcID:4294774609
BasePriority:Normal

#:32 Name: C:\PROGRAM FILES\LAVASOFT AD-AWARE\AD-AWARE.EXE
----------------------------
Threads:4
ProcID:4294038661
ParentProcID:4294774609
BasePriority:Normal

Memory scan result:
Total modules found:32
Suspicious modules found:2


Started registry scan
======================
Cydoor key:HKEY_USERS\.default\software\cydoor\
Cydoor key:HKEY_USERS\.default\software\cydoor services\
WebHancer key:HKEY_CLASSES_ROOT\clsid\{c900b400-cdfe-11d3-976a-00e02913a9e0}\
WebHancer key:HKEY_CLASSES_ROOT\interface\{c89435b0-cdfe-11d3-976a-00e02913a9e0}\
OnFlow key:HKEY_LOCAL_MACHINE\software\classes\clsid\{0cef79d8-d373-11d3-a7d3-00062962bf17}\
OnFlow key:HKEY_LOCAL_MACHINE\software\classes\ieonflow.ieonflow1\
OnFlow key:HKEY_LOCAL_MACHINE\software\classes\ieonflow.ieonflow1.7\
OnFlow key:HKEY_LOCAL_MACHINE\software\classes\typelib\{0cef79cb-d373-11d3-a7d3-00062962bf17}\
Cydoor key:HKEY_CURRENT_USER\software\cydoor\
Cydoor key:HKEY_LOCAL_MACHINE\software\cydoor\
Cydoor key:HKEY_CURRENT_USER\software\cydoor services\
WebHancer key:HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\explorer\browser helper objects\{c900b400-cdfe-11d3-976a-00e02913a9e0}\
OnFlow key:HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\uninstall\onflow\
SaveNow key:HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\uninstall\savenow\
WebHancer key:HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\uninstall\webhancer agent\
OnFlow key:HKEY_LOCAL_MACHINE\software\onflow\
WebHancer key:HKEY_LOCAL_MACHINE\software\webhancer\
SaveNow key:HKEY_LOCAL_MACHINE\software\whenu\
SaveNow key:HKEY_LOCAL_MACHINE\software\whenu\savenow\
WebHancer key:HKEY_CLASSES_ROOT\typelib\{c8cb3870-cdfe-11d3-976a-00e02913a9e0}\
WebHancer key:HKEY_CLASSES_ROOT\whiehelperobj.whiehelperobj\
WebHancer key:HKEY_CLASSES_ROOT\whiehelperobj.whiehelperobj.1\
SaveNow key:HKEY_CLASSES_ROOT\wusn.1\
SaveNow key:HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\run\savenow
WebHancer key:HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\run\webhancer agent
WebHancer value:System\CurrentControlSet\Services\WinSock2\Parameters\Protocol_Catalog9\Catalog_Entries:packedCatalogItem=c:\windows\webhdll.dll
WebHancer value:System\CurrentControlSet\Services\WinSock2\Parameters\Protocol_Catalog9\Catalog_Entries:packedCatalogItem=c:\windows\webhdll.dll
WebHancer value:System\CurrentControlSet\Services\WinSock2\Parameters\Protocol_Catalog9\Catalog_Entries:packedCatalogItem=c:\windows\webhdll.dll
WebHancer value:System\CurrentControlSet\Services\WinSock2\Parameters\Protocol_Catalog9\Catalog_Entries:packedCatalogItem=c:\windows\webhdll.dll
WebHancer value:System\CurrentControlSet\Services\WinSock2\Parameters\Protocol_Catalog9\Catalog_Entries:packedCatalogItem=c:\windows\webhdll.dll
WebHancer value:System\CurrentControlSet\Services\WinSock2\Parameters\Protocol_Catalog9\Catalog_Entries:packedCatalogItem=c:\windows\webhdll.dll


Started extended registry scan
===============================
OnFlow key:CLSID\{0CEF79D8-D373-11D3-A7D3-00062962BF17}
WebHancer key:CLSID\{c900b400-cdfe-11d3-976a-00e02913a9e0}


Registry scan result:
Suspicious keys found :33


Started folder scan
====================
Warning, no disk in drive (A)

Now processing drive (C), 3 remaining.
WebHancer file:C:\WINDOWS\WEBHDLL.DLL
WebHancer file:C:\WINDOWS\WHAGENT.INF
WebHancer file:C:\WINDOWS\whInstaller.exe
WebHancer file:C:\WINDOWS\whInstaller.ini
Aureate folder:C:\WINDOWS\SYSTEM\AdCache
OnFlow folder:C:\WINDOWS\TEMP\onflow
WebHancer folder:C:\WINDOWS\TEMP\webhancer
OnFlow folder:C:\Program Files\Internet Explorer\PLUGINS\Onflow
OnFlow folder:C:\Program Files\onflow
SaveNow folder:C:\Program Files\SaveNow
WebHancer folder:C:\Program Files\webHancer
Finished processing Drive(C), 1635 folders total.

Now processing drive (D), 2 remaining.
Finished processing Drive(D), 1637 folders total.

Now processing drive (E), 1 remaining.
Finished processing Drive(E), 1647 folders total.

Now processing drive (F), 0 remaining.
Finished processing Drive(F), 1648 folders total.

Folder scan result:
Folders processed:6567
Suspicious folders found:7


Started file scan
==================
Cydoor file:C:\WINDOWS\SYSTEM\cd_clint.dll
Doubleclick file:C:\WINDOWS\Cookies\[email protected][1].txt
Doubleclick file:C:\WINDOWS\Cookies\[email protected][1].txt
OnFlow file:C:\WINDOWS\TEMP\of_stub_ins_w_2045.exe
SaveNow file:C:\WINDOWS\TEMP\SaveNowInst.exe
WebHancer file:C:\WINDOWS\WEBHDLL.DLL
WebHancer file:C:\WINDOWS\WHAGENT.INF
WebHancer file:C:\WINDOWS\whInstaller.exe
WebHancer file:C:\WINDOWS\whInstaller.ini
OnFlow file:C:\Program Files\Internet Explorer\PLUGINS\onflowreport.exe
OnFlow file:C:\Program Files\Internet Explorer\PLUGINS\ieonflow.dll
OnFlow file:C:\Program Files\Internet Explorer\PLUGINS\NPONFLOW.DLL
OnFlow file:C:\Program Files\Internet Explorer\PLUGINS\onflowplayer0.dll
OnFlow file:C:\Program Files\Internet Explorer\PLUGINS\onflowreport.exe
OnFlow file:C:\Program Files\Netscape\Communicator\Program\Plugins\nponflow.dll
OnFlow file:C:\Program Files\Netscape\Communicator\Program\Plugins\onflowplayer0.dll
OnFlow file:C:\Program Files\onflow\uninstall onflow.exe
SaveNow file:C:\Program Files\SaveNow\savenow.db
SaveNow file:C:\Program Files\SaveNow\SaveNow.exe
SaveNow file:C:\Program Files\SaveNow\savenow.htm
WebHancer file:C:\Program Files\webHancer\Programs\WBHSHARE.DLL
WebHancer file:C:\Program Files\webHancer\Programs\WHAGENT.EXE
WebHancer file:C:\Program Files\webHancer\Programs\whAgent.ini
WebHancer file:C:\Program Files\webHancer\Programs\WHIEHLPR.DLL
WebHancer file:C:\Program Files\webHancer\Programs\WHIESHM.DLL

File scan result:
Suspicious files found:29



Scanning finished
==================
Suspicious modules found:2
Suspicious keys found :33
Suspicious folders found:7
Suspicious files found:29
==========================
Spyware components ignored:0
Total spyware components found:71


is it advised to delete all of these? how do I know which one to delete and which to save? Also here is start up msinfo32

ATI Scheduler Startup Group C:\hardware\ati\atidesk\atisched.exe
Microsoft Office Startup Group "C:\Office\Microsoft Office\Office\OSA9.EXE" -b -l
Adobe Gamma Loader.exe Startup Group "C:\Program Files\Common Files\Adobe\Calibration\Adobe Gamma Loader.exe"
Quicken Startup Startup Group C:\Accounting\QUICKENW\QWDLLS.EXE
Billminder Startup Group C:\Accounting\QUICKENW\BILLMIND.EXE
Reality Fusion GameCam SE Startup Group "C:\Program Files\Intel\Createshare\program\PC Camera Games\Program\RFTray.exe"
ScanRegistry Registry (Machine Run) C:\WINDOWS\scanregw.exe /autorun
TaskMonitor Registry (Machine Run) C:\WINDOWS\taskmon.exe
SystemTray Registry (Machine Run) SysTray.Exe
LoadPowerProfile Registry (Machine Run) Rundll32.exe powrprof.dll,LoadCurrentPwrScheme
Atikey Registry (Machine Run) Atitask.exe
AtiCwd32 Registry (Machine Run) Aticwd32.exe
IOMON98.EXE Registry (Machine Run) "C:\Anti Virus\Trend PC-cillin 98\IOMON98.EXE"
MacName Registry (Machine Run) "C:\Mac to Pc\MacOpener\MACNAME.EXE"
StillImageMonitor Registry (Machine Run) C:\WINDOWS\SYSTEM\STIMON.EXE
LexmarkPrinTray Registry (Machine Run) PrinTray.exe
SaveNow Registry (Machine Run) C:\PROGRA~1\SAVENOW\SaveNow.exe
Excite Platform Registry (Machine Run) C:\PROGRA~1\EXCITE\PLATFORM\ExLaunch.exe
ICSMGR Registry (Machine Run) ICSMGR.EXE
LoadQM Registry (Machine Run) loadqm.exe
webHancer Agent Registry (Machine Run) "C:\Program Files\webHancer\Programs\whAgent.exe"
RealTray Registry (Machine Run) C:\Program Files\Real\RealPlayer\RealPlay.exe SYSTEMBOOTHIDEPLAYER
SchedulingAgent Registry (Machine Service) mstask.exe
IOMON98.EXE Registry (Machine Service) "C:\Anti Virus\Trend PC-cillin 98\IOMON98.EXE"

thanks for any help.....please be patient I am newbie and don't know many commands
thank you for helping
 
Joined
Dec 9, 2000
Messages
45,855
I would remove both Webhancer and SaveNow through Add/Remove programs (be sure to close your internet connection ). Do it one at a time, rebooting after each removal. Then run Ad-ware again and select for removal all it finds, click "make backup" and Finish. Reboot again afterwards and do another scan to ensure complete removal.

Before proceeding, as an extra measure of safety regarding webhancer, download the zip file below. If you have connectivity problems after removing Webhancer and running Ad-aware, open and run it. It restores a winsock2 registry key that Webhancer modifies. Ad-ware usually notifies you and restores it if necessary.

http://www.lavasoft.de/aaw/binary/whndnfix.zip
 

coker-cola

Thread Starter
Joined
Nov 30, 2001
Messages
13
Rollin Rog thank you for your reply. Not sure if my reply was received....Illegal operation Kernel 32.DLL at 016:bff9db61 happened when I tried to send. So I am attempting to send again. Please pardon if this has been received. Anyway, I followed your instructions and removed all found on ad-aware. Guess I have more problems since illegal ops are still happening. What can be done to resolve this situation...short of tossing computer out.
 
Joined
Dec 9, 2000
Messages
45,855
You still have an awful lot of unnecessary stuff loading at startup. I would recommend running msconfig, click the startup tab and remove checks for the following items. Test you system for stability over a reasonable period of time. If there is improvement, you can gradually enable any items you find useful.

You can review my selections and decide for yourself, by checking them against the list at this site:

http://www.pacs-portal.co.uk/startup_content.htm

Adobe gamma loader
Quicken startup
Billmind.exe
Rftray.exe
Taskmonitor (a windows file which optimizes defrag)
excite platform
ICSMGR (keep it if you are using Internet Connection Sharing)
LoadQm
Iomon98.exe (optional)
Macname.exe

And of course I'm assuming all the entries for Webhancer and SaveNow have been removed.

============

If you've had Ad-Aware remove all it found, you should be pretty "clean"

The explorer>kernel32 error can also be caused by corrupt password files. These can be deleted:

http://support.microsoft.com/default.aspx?scid=kb;EN-US;q154092
 

coker-cola

Thread Starter
Joined
Nov 30, 2001
Messages
13
Thanks again, went back and cleaned up start_up as you suggested than went to link for currupt passwords and "BAM" Iexplore kernel32.DDLat 016bff9db61. Everytime I try and accest
the link the message occurs. Is there another way to gain access?
 
Joined
Dec 9, 2000
Messages
45,855
Here's a copy of the link:
======================================

SYMPTOMS
When you attempt to connect to MSN, The Microsoft Network, using the Internet And MSN service type, you may receive one of the following error messages:



Explorer caused an invalid page fault in module Kernel32.dll.


Commgr32 caused an invalid page fault in module Kernel32.dll.


Mprexe caused an invalid page fault in module Kernel32.dll.


Msgsrv32 caused an invalid page fault in module Kernel32.dll.


A TCP/IP problem has occurred. Please check if you have TCP/IP installed and selected for your modem.


Msnviewr caused an invalid page fault in module Kernel32.dll.


Guide.exe caused an invalid page fault in Kernel32.dll


Guide.exe caused an invalid page fault in Mpr.dll


Connection could not be established Error 745


After you receive the error message, your computer may stop responding.



CAUSE
This behavior may occur if your password list file is damaged.



RESOLUTION
To resolve this issue, re-create your password list file. To do so, use the following steps:



Click Start , point to Find , and then click Files Or Folders .


In the Named box, type *.pwl and then click Find Now .


In the list of found files, right-click each file, and then click Delete . Continue until the list of found files is empty.


Close the Find window.


Restart the computer. The password list files are re-created automatically when you log on to Windows 95.


NOTE : If you use Microsoft Windows 95 and have installed Windows 95 Service Pack 1, password list files may remain damaged even after you delete them and they are re-created automatically.

To resolve this issue, download and install the Windows 95 Password List Update file: mspwlupd.exe .

You can obtain this file from the following Microsoft Internet site:
ftp://ftp.microsoft.com/softlib/mslfiles/



MORE INFORMATION
Note that the error message stated above can occur when you connect to any site (not just MSN) with Dial-Up Networking if the .pwl file is damaged.

You may also receive this error message when you are using Microsoft Exchange, Microsoft Schedule+, or Microsoft Outlook 97. The resolution in this article also works for these programs.


--------------------------------------------------------------------------------

If deleting pwl files doesn't resolve the error, let's also do this. Go to start>shutdown>restart in MS-DOS mode

At the c:\windows\> prompt enter each line:

smartdrv
deltree history
deltree temp
deltree tempor~1
deltree cookies

exit
(or ctrl-alt-del to restart Windows)

For each deltree you will receive a confirmation prompt, if the target directory is correct (eg. "history"), press 'y'. Smartdrv is required to speed up the process which otherwise could take a very long time.

After deltreeing the cookies folder you will need to reset all passwords on web sites that require them -- such as this one. So be sure you remember what they are.
 

coker-cola

Thread Starter
Joined
Nov 30, 2001
Messages
13
Rollin Rog.....thanks for the detailed instructions... I removed the files except the following: Mspwl32.DLL (can not delete)
could this file be my problem?
Also when starting computer message comes up about missing application registry-system.INI c:\windows\umaxis 11.386
any ideas as to replacing this?
I have to thank you again for doing this step-by-step.....
I only have one other problem.....cd burner/writter is not working although device manager says it is working properly. I put rewritable cd in and nothing....nothing at all, no sound no nothing
Any advice shall be well taken......thanks
 
Joined
Dec 9, 2000
Messages
45,855
You don't want to delete any dll files just the ones with a .pwl extension.

Best to do a separate thread for the cd-rw problem in the hardware forum

the umaxis error has to do with a scanner driver -- probably Umax or Genius.

See this link if you want to reinstall their drivers:

http://www.umax.com/support/knowledge/solutionsSC.cfm?docs=SC00049

if you run system.ini from start>run it will open in notepad. You can comment out or delete the offending line under the [386Enh] header

You can also run msconfig, click on the system.ini tab and just remove the check for it. That will eliminate the error message.

Are you still getting those page faults when trying to access an MS site like the previous link?
 

coker-cola

Thread Starter
Joined
Nov 30, 2001
Messages
13
not getting as many error messages.....however still getting some, IEXPLORE kernel32DLL at 0167:bff7b9f6 and a rundll 32. Followed your instructions for the msconfig, system.in. unchecked 386nh and lost use of mouse. Finally got mouse up and running....another good lesson, only to receive error message upon rebooting.
Thinks are much better and
I thank you for all your help
 
Joined
Dec 9, 2000
Messages
45,855
I don't know what could have caused the mouse problem. Unchecking the Umax entry in system.ini shouldn't cause it unless you unchecked the wrong line or it contained a mouse related entry as well.

When something like that happens though you have two good methods for a quick recovery. Either boot to a command prompt (press and hold ctrl key starting up until the start up menu appears and select "command prompt") Then at the c:\> prompt enter:

scanreg /restore

use the arrow keys to select a prior started registry.

Or, select "safe mode" from the startup menu and once in Windows, reverse the action.

Have you recently updated and run a full antivirus scan with Trend's PC-Cillin?

If you get continuing rundll32 errors, give the full error message.
Also for any error message, after you close it out, do a ctrl-alt-del and note what is listed in the Close Programs window besides Explorer and Systray.

Has TaskMonitor been unchecked in Msconfig?

You might want to give us a fresh look at your startup programs in msinfo32, since it isn't clear what remains active.
 

coker-cola

Thread Starter
Joined
Nov 30, 2001
Messages
13
task monitor is unchecked and here is list of start up programsATI Scheduler Startup Group C:\hardware\ati\atidesk\atisched.exe
Microsoft Office Startup Group "C:\Office\Microsoft Office\Office\OSA9.EXE" -b -l
Quicken Startup Startup Group C:\Accounting\QUICKENW\QWDLLS.EXE
Reality Fusion GameCam SE Startup Group "C:\Program Files\Intel\Createshare\program\PC Camera Games\Program\RFTray.exe"
ScanRegistry Registry (Machine Run) C:\WINDOWS\scanregw.exe /autorun
SystemTray Registry (Machine Run) SysTray.Exe
LoadPowerProfile Registry (Machine Run) Rundll32.exe powrprof.dll,LoadCurrentPwrScheme
Atikey Registry (Machine Run) Atitask.exe
AtiCwd32 Registry (Machine Run) Aticwd32.exe
StillImageMonitor Registry (Machine Run) C:\WINDOWS\SYSTEM\STIMON.EXE
LexmarkPrinTray Registry (Machine Run) PrinTray.exe
ICSMGR Registry (Machine Run) ICSMGR.EXE
RealTray Registry (Machine Run) C:\Program Files\Real\RealPlayer\RealPlay.exe SYSTEMBOOTHIDEPLAYER
SchedulingAgent Registry (Machine Service) mstask.exe
IOMON98.EXE Registry (Machine Service) "C:\Anti Virus\Trend PC-cillin 98\IOMON98.EXE"
 
Joined
Dec 9, 2000
Messages
45,855
I would further uncheck the following:

Atisched.exe
osa9.exe
Rftray.exe
Qwdlls.exe

For Stimon, I would make a shortcut to it and uncheck it in msconfig.

For Real Player, you must disable the "start agent" in its options preferences dialog.



LexmarkPrinTray printray.exe

Lexmark Printer icon in the System Tray for quick access. Not required - remove via Printer configuration rather than MSCONFIG

For each of these recommendations, it would be helpful for you to review the relevant information at this site:

http://www.pacs-portal.co.uk/startup_pages/startup_full.htm
 

coker-cola

Thread Starter
Joined
Nov 30, 2001
Messages
13
did as suggested...we will see what happens.
thanks so much for all your assistance. I will keep you informed
 
Status
This thread has been Locked and is not open to further replies. Please start a New Thread if you're having a similar issue. View our Welcome Guide to learn how to use this site.

Users Who Are Viewing This Thread (Users: 0, Guests: 1)

As Seen On
As Seen On...

Welcome to Tech Support Guy!

Are you looking for the solution to your computer problem? Join our site today to ask your question. This site is completely free -- paid for by advertisers and donations.

If you're not already familiar with forums, watch our Welcome Guide to get started.

Join over 807,865 other people just like you!

Latest posts

Staff online

Top